From 08e8dc62ac9545ee71f48665fe7f057946745ac8 Mon Sep 17 00:00:00 2001 From: Kannan B <59028488+kannanb-github@users.noreply.github.com> Date: Thu, 28 May 2020 15:37:11 +0530 Subject: [PATCH 001/589] User credential preferred Even though Device Credential is an option on the GPO, the device credential gives error while auto-enrollment tasks running through the Task Scheduler. To avoid this error we need to choose the User Credential option from the dropdown to auto-enroll the device. The below line has been updated on the document. 5. Click **Enable**, and select **User Credential** from the dropdown **Select Credential Type to Use**, then click **OK**. --- ...roll-a-windows-10-device-automatically-using-group-policy.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md b/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md index c2df51c0ae..ee71b48495 100644 --- a/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md +++ b/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md @@ -113,7 +113,7 @@ Requirements: ![MDM autoenrollment policy](images/autoenrollment-policy.png) -5. Click **Enable**, then click **OK**. +5. Click **Enable**, and select **User Credential** from the dropdown **Select Credential Type to Use**, then click **OK**. > [!NOTE] > In Windows 10, version 1903, the MDM.admx file was updated to include an option to select which credential is used to enroll the device. **Device Credential** is a new option that will only have an effect on clients that have installed Windows 10, version 1903 or later. From 991c2cfea3e8b51e70938c65238c5000ca791ec7 Mon Sep 17 00:00:00 2001 From: Sinead O'Sullivan Date: Thu, 4 Jun 2020 13:49:26 +0100 Subject: [PATCH 002/589] Create changes-to-windows-diagnostic-data-collection.md --- ...s-to-windows-diagnostic-data-collection.md | 57 +++++++++++++++++++ 1 file changed, 57 insertions(+) create mode 100644 windows/privacy/changes-to-windows-diagnostic-data-collection.md diff --git a/windows/privacy/changes-to-windows-diagnostic-data-collection.md b/windows/privacy/changes-to-windows-diagnostic-data-collection.md new file mode 100644 index 0000000000..1b504439b7 --- /dev/null +++ b/windows/privacy/changes-to-windows-diagnostic-data-collection.md @@ -0,0 +1,57 @@ +--- +title: Changes to Windows diagnostic data collection +description: This article provides information on changes to Windows diagnostic data collection Windows 10. +keywords: privacy, diagnostic data +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: high +audience: ITPro +ms.author: daniha +author: DaniHalfin +manager: dansimp +ms.collection: M365-security-compliance +ms.topic: article +--- + +# Changes to Windows diagnostic data collection + +Applies to: +- Windows 10, version 1903 and newer +- The next version of Windows Server + +Microsoft is deeply committed to providing you with effective controls over your data and ongoing transparency into our data handling practices. As part of this effort, we are moving our major products and services to a model where data sent back to Microsoft from customer devices will be classified as either **Required** or **Optional**. We believe this will provide our customers with a simpler experience – information should be easier to find, easier to understand, and easier to act upon through the tools we provide. + +This topic is meant for IT administrators and explains the changes Windows is making to align to the new data collection taxonomy. These changes are focused in two areas: + +- [Taxonomy changes](#Taxonomy-changes) +- [Behavioral changes](#Behaviorial-changes) + +> [!NOTE] +> You can test the behavioral changes now in Windows 10 Insider Preview build 19577 and later. + +## Summary of changes + +In Windows 10, version 1903 and newer, you will see taxonomy updates in both the **Out-of-box-experience** (OOBE) and the **Diagnostics & feedback** privacy settings page. These changes are explained in the section named **Taxonomy** changes. + +Additionally, in an upcoming release of Windows 10, we’re simplifying your diagnostic data controls by moving from four diagnostic data controls to three: **Diagnostic data off**, **Required**, and **Optional**. We’re also clarifying the Security diagnostic data level to more accurately reflect its behavior by changing it to **Diagnostic data off**. All of these changes are explained in the section named **Behavioral changes**. + +## Taxonomy changes + +Starting in Windows 10, version 1903 and newer, both the **Out-of-Box-Experience** (OOBE) and the **Diagnostics & feedback** privacy setting pages will reflect the following changes: + +- The **Basic** diagnostic data level is being labeled as **Required**. +- The **Full** diagnostic data level is being labeled as **Optional**. + +> [!IMPORTANT] +> No action is required for the taxonomy changes, and your existing settings will be maintained as part of this update. + +## Behaviorial changes + +In an upcoming release of Windows 10, we’re simplifying your diagnostic data controls by moving from four diagnostic data controls to three: **Diagnostic data off**, **Required**, and **Optional**. If your devices are set to **Enhanced** when they are upgraded, the device settings will be migrated to the more privacy-preserving setting of **Required diagnostic data**, which means that analytic services that leverage enhanced data collection may not work properly. For a list of services, see the section named, **Services that rely on Enhanced diagnostic data**, later in this topic. Administrators should read through the details and determine whether to apply these new policies to restore the same collection settings as they had before this change. For a list of steps, see the section named **Configure a Windows 10 device to limit diagnostics**. For more information on services that rely on Enhanced diagnostic data, see **Services that rely on Enhanced diagnostic data**. + +Additionally, you will see the following policy changes in an upcoming release of Windows 10: +| Policy type | Current policy | Renamed policy | +| --- | --- | --- | +| Group Policy | From f549befa2cb7dd1dbd2762fbf117a522415ac182 Mon Sep 17 00:00:00 2001 From: Sinead O'Sullivan Date: Thu, 4 Jun 2020 16:35:34 +0100 Subject: [PATCH 003/589] Update changes-to-windows-diagnostic-data-collection.md --- ...s-to-windows-diagnostic-data-collection.md | 35 ++++++++++++++++++- 1 file changed, 34 insertions(+), 1 deletion(-) diff --git a/windows/privacy/changes-to-windows-diagnostic-data-collection.md b/windows/privacy/changes-to-windows-diagnostic-data-collection.md index 1b504439b7..b9785b1a62 100644 --- a/windows/privacy/changes-to-windows-diagnostic-data-collection.md +++ b/windows/privacy/changes-to-windows-diagnostic-data-collection.md @@ -54,4 +54,37 @@ In an upcoming release of Windows 10, we’re simplifying your diagnostic data c Additionally, you will see the following policy changes in an upcoming release of Windows 10: | Policy type | Current policy | Renamed policy | | --- | --- | --- | -| Group Policy | +| Group Policy | Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Allow Telemetry**| Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Allow Diagnostic Data** | +| Group Policy |Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Configure telemetry opt-in settings user interface**| Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Configure diagnostic data opt-in settings user interface** | +| Group Policy |Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Configure telemetry opt-in change notifications**| Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Configure diagnostic data opt-in change notifications** | +| MDM | System/AllowTelemetry | + +A final set of changes includes two new policies that can help you fine-tune diagnostic data collection within your organization. These policies let you limit the amount of optional diagnostic data that’s sent back to Microsoft. + +- The **Limit dump collection** policy is a new policy that can be used to limit the types of [crash dumps](https://docs.microsoft.com/windows/win32/dxtecharts/crash-dump-analysis) that can be sent back to Microsoft. If this policy is enabled, Windows Error Reporting will send only kernel mini dumps and user mode triage dumps. + - Group Policy: Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Limit Dump Collection** + - MDM policy: System/ LimitDiagnosticLogCollection +- The **Limit diagnostic log collection** policy is another new policy that limits the number of diagnostic logs that are sent back to Microsoft. If this policy is enabled, diagnostic logs are not sent back to Microsoft. + - Group Policy: Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Limit Diagnostic Log Collection** + - MDM policy: System/LimitDumpCollection + +>[!Important] +>All of the changes mentioned in this section will not be released on versions of Windows, version 1809 and earlier as well as Windows Server 2019 and earlier. + +## Configure a Windows 10 device to limit diagnostics + +With the Enhanced diagnostic data level being split out into new policies, we are providing additional controls to manage what types of dumps are collected and whether to send additional diagnostic logs. Here are some steps on how to configure them: + +1. Choose to send optional diagnostic data by setting one of the following policies: + - Group Policy: Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Allow Diagnostic Data**. Set the policy value to **Send optional diagnostic data** + - MDM: System/AllowTelemetry. Set the policy value to 3. +2. Enable the following Group Policy: Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Limit Dump Collection** +3. Enable the following Group Policy: Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Limit Diagnostic Log Collection** + +## Services that rely on Enhanced diagnostic data + +Customers who use services that depend on Windows diagnostic data, such as Microsoft Managed Desktop or Desktop Analytics, may be impacted by the functional changes when they are released. These services will be updated to address these changes and guidance will be published on how to configure them properly. + +The following provides a list of the known changes: +- [Microsoft Managed Desktop](http://aka.ms/mmd-diagnostic-data-level) +- Desktop Analytics \ No newline at end of file From 642e2f8a35f2f8d26567f783fee313be5e30ede1 Mon Sep 17 00:00:00 2001 From: Sinead O'Sullivan Date: Fri, 5 Jun 2020 16:44:37 +0100 Subject: [PATCH 004/589] Update windows-10-and-privacy-compliance.md --- .../windows-10-and-privacy-compliance.md | 133 +++++++++--------- 1 file changed, 70 insertions(+), 63 deletions(-) diff --git a/windows/privacy/windows-10-and-privacy-compliance.md b/windows/privacy/windows-10-and-privacy-compliance.md index 3631daf619..654f271d91 100644 --- a/windows/privacy/windows-10-and-privacy-compliance.md +++ b/windows/privacy/windows-10-and-privacy-compliance.md @@ -19,151 +19,150 @@ ms.date: 05/21/2019 # Windows 10 & Privacy Compliance:
A Guide for IT and Compliance Professionals Applies to: -- Windows 10, version 1809 and newer -- Windows 10 Team Edition, version 1703 for Surface Hub +- Windows 10 Enterprise +- Windows 10 Education - Windows Server 2016 and newer -- Windows Analytics - -For more information about the GDPR, see: -* [Windows and the GDPR: Information for IT Administrators and Decision Makers](gdpr-it-guidance.md) -* [Microsoft GDPR Overview](https://aka.ms/GDPROverview) -* [Microsoft Trust Center FAQs about the GDPR](https://aka.ms/gdpr-faq) -* [Microsoft Service Trust Portal (STP)](https://aka.ms/stp) -* [Get Started: Support for GDPR Accountability](https://servicetrust.microsoft.com/ViewPage/GDPRGetStarted) ## Overview -At Microsoft, we are deeply committed to data privacy across all our products and services. With this guide, we provide IT and compliance professionals with data privacy considerations for Windows 10. +IMPORTANT: Microsoft is [increasing transparency](https://blogs.microsoft.com/on-the-issues/2019/04/30/increasing-transparency-and-customer-control-over-data/) by categorizing the data we collect as required or optional. Windows 10 is in the process of updating devices to reflect this new categorization, and during this transition Basic diagnostic data will be recategorized as Required diagnostic data and Full diagnostic data will be recategorized as Optional diagnostic data. For more information, see [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection.md). -Microsoft collects data through multiple interactions with users of Windows 10 devices. This information can contain personal data that may be used to provide, secure, and improve Windows 10 services. To help users and organizations control the collection of personal data, Windows 10 provides comprehensive transparency features, settings choices, controls and support for data subject requests, all of which are detailed in this guide. +At Microsoft, we are deeply committed to data privacy across all our products and services. With this guide, we provide administrators and compliance professionals with data privacy considerations for Windows 10. -This information allows IT and compliance professionals work together to better manage personal data privacy considerations and related regulations, such as the General Data Protection Regulation (GDPR). +Microsoft collects data through multiple interactions with users of Windows 10 devices. This information can contain personal data that may be used to provide, secure, and improve Windows 10 services. To help users and organizations control the collection of personal data, Windows 10 provides comprehensive transparency features, settings choices, controls, and support for data subject requests, all of which are detailed in this article. +This information allows administrators and compliance professionals to work together to better manage personal data privacy considerations and related regulations, such as the General Data Protection Regulation (GDPR) ## 1. Windows 10 data collection transparency Transparency is an important part of the data collection process in Windows 10. Comprehensive information about the features and processes used to collect data is available to users and administrators directly within Windows, both during and after device set up. -If interested in understanding how to manage settings related to data collection skip to the next section [Windows 10 data collection management](#12-data-collection-monitoring). - - ### 1.1 Device set up experience and support for layered transparency -When setting up a device, a user can configure their privacy settings. Those privacy settings are key in determining the amount of personal data collected. For each privacy setting, the user is provided information about the setting along with the links to supporting information. This information explains what data is collected, how the data is used and how to manage the setting after the device setup is complete. The user can also review the privacy statement when connected to the network during this portion of setup. A brief overview of the set up experience for privacy settings are described in [this blog](https://blogs.windows.com/windowsexperience/2018/03/06/windows-insiders-get-first-look-new-privacy-screen-settings-layout-coming-windows-10/#uCC2bKYP8M5BqrDP.97). +When setting up a device, a user can configure their privacy settings. Those privacy settings are key in determining the amount of personal data collected. For each privacy setting, the user is provided information about the setting along with the links to supporting information. This information explains what data is collected, how the data is used, and how to manage the setting after the device setup is complete. When connected to the network during this portion of setup, the user can also review the privacy statement. A brief overview of the set up experience for privacy settings is described in [this blog](https://blogs.windows.com/windowsexperience/2018/03/06/windows-insiders-get-first-look-new-privacy-screen-settings-layout-coming-windows-10/#uCC2bKYP8M5BqrDP.97). The following table provides an overview of the Windows 10 privacy settings presented during the device setup experience that involve processing personal data and where to find additional information. > [!NOTE] -> This table is limited to the privacy settings that are available as part of setting up a Windows 10 device (Windows 10, version 1809 and later). For the full list of settings that involve data collection, see: [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md). +> This table is limited to the privacy settings that are available as part of setting up a Windows 10 device (Windows 10, version 1809 and newer). For the full list of settings that involve data collection, [see Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services). | Feature/Setting | Description | Supporting Content | Privacy Statement | | --- | --- | --- | --- | -| Diagnostic Data |

Microsoft uses diagnostic data to: keep Windows secure and up to date, troubleshoot problems, and make product improvements as described in more detail below. Regardless of level selected, the device will be just as secure and will operate normally. This data is collected by Microsoft and stored with one or more unique identifiers that can help us recognize an individual user on an individual device, and understand the device's service issues and use patterns.

Diagnostic data is categorized into four levels:

  • **Security**
    Information that’s required to help keep Windows, Windows Server, and System Center secure, including data about the Connected User Experiences and Telemetry component settings, the Malicious Software Removal Tool, and Windows Defender.
  • **Basic**
    Basic device info, including: quality-related data, app compatibility, and data from the Security level.
  • **Enhanced**
    Additional insights, including: how Windows, Windows Server, System Center, and apps are used; how they perform; advanced reliability data; and data from both the Basic and the Security levels.
  • **Full**
    Information about the websites you browse, how you use apps and features; plus additional information about device health, device activity, enhanced error reporting, and data from Enhanced, Basic and the Security levels.
    At Full, Microsoft also collects the memory state of your device when a system or app crash occurs (which may unintentionally include parts of a file you were using when a problem occurred).

| [Learn more](https://support.microsoft.com/help/4468236/diagnostics-feedback-and-privacy-in-windows-10-microsoft-privacy)

[Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#maindiagnosticsmodule) | -| Inking and typing diagnostics | Microsoft collects inking and typing data to improve the language recognition and suggestion capabilities of apps and services running on Windows. | [Learn more](https://support.microsoft.com/help/4468236/diagnostics-feedback-and-privacy-in-windows-10-microsoft-privacy) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#maindiagnosticsmodule) | -| Speech | Use your voice for dictation and to talk to Cortana and other apps that use Windows cloud-based speech recognition. Microsoft collects voice data to help improve speech services. | [Learn more](https://support.microsoft.com/help/4468250/speech-inking-typing-and-privacy-microsoft-privacy) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#mainspeechinkingtypingmodule) | -| Location | Get location-based experiences like directions and weather. Let Windows and apps request your location and allow Microsoft to use your location data to improve location services. | [Learn more](https://support.microsoft.com/help/4468240/windows-10-location-service-and-privacy-microsoft-privacy) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#mainlocationservicesmotionsensingmodule) | +| Diagnostic Data |

Microsoft uses diagnostic data to keep Windows secure, up to date, troubleshoot problems, and make product improvements. Regardless of what choices you make for diagnostic data collection, the device will be just as secure and will operate normally. This data is collected by Microsoft and stored with one or more unique identifiers that can help us recognize an individual user on an individual device and understand the device's service issues and use patterns.

Diagnostic data is categorized into the following:

  • **Required diagnostic data**
    Previously known as basic diagnostic data, required diagnostic data includes information about your device, its settings, capabilities, and whether it is performing properly, whether a device is ready for an update, and whether there are factors that may impede the ability to receive updates, such as low battery, limited disk space, or connectivity through a paid network. You can find out what is collected with required diagnostic data [here](https://docs.microsoft.com/windows/privacy/required-windows-diagnostic-events-and-fields-2004).
  • **Optional diagnostic data**
    Previously known as full diagnostic data, optional diagnostic data includes more detailed information about your device and its settings, capabilities, and device health. When you choose to send optional diagnostic data, required diagnostic data will always be included. You can find out the types of optional diagnostic data collected [here](https://docs.microsoft.com/windows/privacy/windows-diagnostic-data).

| [Learn more](https://support.microsoft.com/en-us/4468236/diagnostics-feedback-and-privacy-in-windows-10-microsoft-privacy)

[Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#maindiagnosticsmodule) | +| Inking and typing diagnostics | Microsoft collects optional inking and typing diagnostic data to improve the language recognition and suggestion capabilities of apps and services running on Windows. | [Learn more](https://support.microsoft.com/help/4468236/diagnostics-feedback-and-privacy-in-windows-10-microsoft-privacy) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#maindiagnosticsmodule) | +| Speech | Use your voice for dictation and to talk to Cortana and other apps that use Windows cloud-based speech recognition. Microsoft collects voice data to help improve speech services. | [Learn more](https://support.microsoft.com/help/4468250/windows-10-speech-voice-activation-inking-typing-privacy) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#mainspeechinkingtypingmodule) | +| Location | Get location-based experiences like directions and weather. Let Windows and apps request your location and allow Microsoft to use your location data to improve location services. | [Learn more](https://support.microsoft.com/help/4468240/windows-10-location-service-and-privacy) |[Privacy Statement](https://privacy.microsoft.com/privacystatement#mainlocationservicesmotionsensingmodule) | | Find my device | Use your device’s location data to help you find your device if you lose it. | [Learn more](https://support.microsoft.com/help/11579/microsoft-account-find-and-lock-lost-windows-device) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#mainlocationservicesmotionsensingmodule) | -| Tailored Experiences | Let Microsoft offer you tailored experiences based on the diagnostic data you have chosen (Security, Basic, Enhanced, or Full). Tailored experiences mean personalized tips, ads, and recommendations to enhance Microsoft products and services for your needs. | [Learn more](https://support.microsoft.com/help/4468236/diagnostics-feedback-and-privacy-in-windows-10-microsoft-privacy) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#maindiagnosticsmodule) | -| Advertising Id | Apps can use advertising ID to provide more personalized advertising in accordance with the privacy policy of the app provider. | [Learn more](https://support.microsoft.com/help/4459081/general-privacy-settings-in-windows-10-microsoft-privacy) | [Privacy statement](https://privacy.microsoft.com/privacystatement#mainadvertisingidmodule) | -| Activity History/Timeline – Cloud Sync | If you want timeline and other Windows features to help you continue what you were doing, even when you switch devices, send Microsoft your activity history, which includes info about websites you browse and how you use apps and services. | [Learn more](https://support.microsoft.com/help/4468227/windows-10-activity-history-and-your-privacy-microsoft-privacy) | [Privacy statement](https://privacy.microsoft.com/privacystatement#mainactivityhistorymodule) | -| Cortana |

Cortana is Microsoft’s personal digital assistant, which helps busy people get things done, even while they’re at work. Cortana on Windows is available in [certain regions and languages](https://support.microsoft.com/instantanswers/557b5e0e-0eb0-44db-87d6-5e5db6f9c5b0/cortana-s-regions-and-languages). Cortana learns from certain data about the user, such as location, searches, calendar, contacts, voice input, speech patterns, email, content and communication history from text messages. In Microsoft Edge, Cortana uses browsing history. The user is in control of how much data is shared.

Cortana has powerful configuration options, specifically optimized for a business. By signing in with an Azure Active Directory (Azure AD) account, enterprise users can give Cortana access to their enterprise/work identity, while getting all the functionality Cortana provides to them outside of work.

| [Learn more](https://support.microsoft.com/help/4468233/cortana-and-privacy-microsoft-privacy)

[Cortana integration in your business or enterprise](https://docs.microsoft.com/windows/configuration/cortana-at-work/cortana-at-work-overview) | [Privacy statement](https://privacy.microsoft.com/privacystatement#maincortanamodule) | +| Tailored Experiences | Let Microsoft offer you tailored experiences based on the diagnostic data you choose to send. Tailored experiences include personalized tips, ads, and recommendations to enhance Microsoft products and services for your needs. | [Learn more](https://support.microsoft.com/help/4468236/diagnostics-feedback-and-privacy-in-windows-10-microsoft-privacy) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#maindiagnosticsmodule) | +| Advertising Id | Apps can use advertising ID to provide more personalized advertising in accordance with the privacy policy of the app provider. | [Learn more](https://support.microsoft.com/help/4459081/windows-10-general-privacy-settings) | [Privacy statement](https://support.microsoft.com/help/4459081/windows-10-general-privacy-settings) | +| Activity History/Timeline – Cloud Sync | If you want Windows Timeline and other Windows features to help you continue what you were doing, even when you switch devices, send Microsoft your activity history, which includes info about websites you browse and how you use apps and services. | [Learn more](https://support.microsoft.com/help/4468227/windows-10-activity-history-and-your-privacy-microsoft-privacy) | [Privacy statement](https://privacy.microsoft.com/privacystatement#mainactivityhistorymodule) | +| Cortana |

Cortana is Microsoft’s personal digital assistant, which helps busy people get things done, even while they’re at work. Cortana on Windows is available in [certain regions and languages](https://support.microsoft.com/help/4026948/cortanas-regions-and-languages). Cortana learns from certain data about the user, such as location, searches, calendar, contacts, voice input, speech patterns, email, content and communication history from text messages. In Microsoft Edge, Cortana uses browsing history. The user is in control of how much data is shared.

Cortana has powerful configuration options, specifically optimized for a business. By signing in with an Azure Active Directory (Azure AD) account, enterprise users can give Cortana access to their enterprise/work identity, while getting all the functionality Cortana provides to them outside of work.

| [Learn more](https://support.microsoft.com/help/4468233/cortana-and-privacy-microsoft-privacy)

[Cortana integration in your business or enterprise](https://docs.microsoft.com/windows/configuration/cortana-at-work/cortana-at-work-overview) | [Privacy statement](https://privacy.microsoft.com/privacystatement#maincortanamodule) | ### 1.2 Data collection monitoring -The Diagnostic Data Viewer (DDV) is a Windows app (available in Windows 10, version 1803 or later) that lets a user review the Windows diagnostic data that is being collected on their Windows 10 device and sent to Microsoft. DDV groups the information into simple categories based on how it is used by Microsoft. The [DDV Overview](diagnostic-data-viewer-overview.md) provides information on how users can get started on using this tool. +[Diagnostic Data Viewer (DDV)](diagnostic-data-viewer-overview) is a Microsoft Store app (available in Windows 10, version 1803 and newer) that lets a user review the Windows diagnostic data that is being collected on their Windows 10 device and sent to Microsoft in real-time. DDV groups the information into simple categories that describe the data that’s being collected. -An administrator can also use the Diagnostic Data Viewer for PowerShell module to view the diagnostic data collected from the device instead of using the Diagnostic Data Viewer UI. The [Diagnostic Data Viewer for PowerShell Overview](microsoft-diagnosticdataviewer.md) provides further information. +An administrator can also use the Diagnostic Data Viewer for PowerShell module to view the diagnostic data collected from the device instead of using the Diagnostic Data Viewer UI. The [Diagnostic Data Viewer for PowerShell Overview](microsoft-diagnosticdataviewer) provides further information. ## 2. Windows 10 data collection management -Windows 10 provides the ability to manage privacy settings through several different methods. Users can change their privacy settings using the Windows 10 settings (**Start** > **Settings** > **Privacy**). The organization can also manage the privacy settings using group policy or mobile device management (MDM). The following sections provide an overview on how to manage the privacy settings previously discussed in this article. +Windows 10 provides the ability to manage privacy settings through several different methods. Users can change their privacy settings using the Windows 10 settings (**Start > Settings > Privacy**). The organization can also manage the privacy settings using Group Policy or Mobile Device Management (MDM). The following sections provide an overview on how to manage the privacy settings previously discussed in this article. ### 2.1 Privacy setting options for users -Once a Windows 10 device is set up, a user can manage data collection settings by going to **Start** > **Settings** > **Privacy**. IT administrators can control privacy settings via setting policy on the device (see Section 2.2 below). If this is the case, the user will see an alert that says ‘Some settings are hidden or managed by your organization’ when they navigate to **Start** > **Settings** > **Privacy**. Meaning the user can only change settings in accordance with the policies that the administrator has applied to the device. +Once a Windows 10 device is set up, a user can manage data collection settings by navigating to **Start > Settings > Privacy**. Administrators can control privacy settings via setting policy on the device (see Section 2.2 below). If this is the case, the user will see an alert that says **Some settings are hidden or managed by your organization** when they navigate to **Start > Settings > Privacy**. In this case, the user can only change settings in accordance with the policies that the administrator has applied to the device. ### 2.2 Privacy setting controls for administrators -The IT department can configure and control privacy settings across their organization by using Group Policy, registry, or Mobile Device Management (MDM) settings. +Administrators can configure and control privacy settings across their organization by using Group Policy, Mobile Device Management (MDM), or Windows registry settings. -The following table provides an overview of the privacy settings discussed earlier in this document with details on how to configure these via policy. The table also provides information on what the default value would be for each of these privacy settings if you do not manage the setting via policy and suppress the Out-of-box Experience (OOBE) during device setup. For an IT administrator interested in minimizing data, we also provide the recommended value to set. +The following table provides an overview of the privacy settings discussed earlier in this document with details on how to configure these policies. The table also provides information on what the default value would be for each of these privacy settings if you do not manage the setting by using policy and suppress the Out-of-box Experience (OOBE) during device setup. If you’re interested in minimizing data collection, we also provide the recommended value to set. > [!NOTE] -> This is not a complete list of settings that involve connecting to Microsoft services. To see a more detailed list, please refer to Manage connections from [Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md). +> This is not a complete list of settings that involve connecting to Microsoft services. To see a more detailed list, see [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services). | Feature/Setting | GP/MDM Documentation | Default State if the Setup experience is suppressed | State to stop/minimize data collection | |---|---|---|---| | [Speech](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-speech) | Group Policy:
**Computer Configuration** > **Control Panel** > **Regional and Language Options** > **Allow users to enable online speech recognition services**

MDM: [Privacy/AllowInputPersonalization](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-privacy#privacy-allowinputpersonalization) | Off | Off | -| [Location](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-location) | Group Policy:
**Computer Configuration** > **Windows Components** > **App Privacy** > **Let Windows apps access location**

MDM: [Privacy/LetAppsAccessLocation](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-privacy#privacy-letappsaccesslocation) | Off (Windows 10, version 1903 and later) | Off | +| [Location](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-location) | Group Policy:
**Computer Configuration** > **Windows Components** > **App Privacy** > **Let Windows apps access location**

MDM: [Privacy/LetAppsAccessLocation](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-privacy#privacy-allowinputpersonalization) | Off (Windows 10, version 1903 and later) | Off | | [Find my device](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#find-my-device) | Group Policy:
**Computer Configuration** > **Windows Components** > **Find My Device** > **Turn On/Off Find My Device**

MDM: [Experience/AllFindMyDevice](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-experience#experience-allowfindmydevice) | Off | Off | -| [Diagnostic Data](configure-windows-diagnostic-data-in-your-organization.md#enterprise-management) | Group Policy:
**Computer Configuration** > **Windows Components** > **Data Collection and Preview Builds** > **Allow Telemetry**

MDM: [System/AllowTelemetry](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-allowtelemetry) | Desktop SKUs:
Basic (Windows 10, version 1903 and later)

Server SKUs:
Enhanced | Security and block endpoints | +| [Diagnostic Data](configure-windows-diagnostic-data-in-your-organization.md#enterprise-management) | Group Policy:
**Computer Configuration** > **Windows Components** > **Data Collection and Preview Builds** > **Allow Telemetry**

MDM: [System/AllowTelemetry](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-allowtelemetry) | Desktop editions:
Required diagnostic data (Windows 10, version 1903 and later)

Server editions:
Required diagnostic data | Security and block endpoints | | [Inking and typing diagnostics](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-ink) | Group Policy:
**Computer Configuration** > **Windows Components** > **Text Input** > **Improve inking and typing recognition**

MDM: [TextInput/AllowLinguisticDataCollection](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-textinput#textinput-allowlinguisticdatacollection) | Off (Windows 10, version 1809 and later) | Off | -| Tailored Experiences | Group Policy:
**User Configuration** > **Windows Components** > **Cloud Content** > **Do not use diagnostic data for tailored experiences**

MDM: Link TBD | Off | Off | -| Advertising ID | Group Policy:
**Configuration** > **System** > **User Profile** > **Turn off the advertising Id**

MDM: [Privacy/DisableAdvertisingId](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-privacy#privacy-disableadvertisingid) | Off | Off | +| Tailored Experiences | Group Policy:
**User Configuration** > **Windows Components** > **Cloud Content** > **Do not use diagnostic data for tailored experiences**

MDM: [Experience/AllowTailoredExperiencesWithDiagnosticData](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-experience#experience-allowtailoredexperienceswithdiagnosticdata) | Off | Off | +| Advertising ID | Group Policy:
**Computer Configuration** > **System** > **User Profile** > **Turn off the advertising Id**

MDM: [Privacy/DisableAdvertisingId](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-privacy#privacy-disableadvertisingid) | Off | Off | | Activity History/Timeline – Cloud Sync | Group Policy:
**Computer Configuration** > **System** > **OS Policies** > **Allow upload of User Activities**

MDM: [Privacy/EnableActivityFeed](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-privacy#privacy-enableactivityfeed) | Off | Off | | [Cortana](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#2-cortana-and-search) | Group Policy:
**Computer Configuration** > **Windows Components** > **Search** > **Allow Cortana**

MDM: [Experience/AllowCortana](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-experience#experience-allowcortana) | Off | Off | ### 2.3 Guidance for configuration options -This section provides general details and links to more detailed information as well as instructions for IT administrators and compliance professional. These instructions allow IT admins and compliance pros to manage the device compliance. This information includes details about setting up a device, to configuring the device’s settings after setup is completed to minimize data collected and drive privacy related user experiences. +This section provides general details and links to more detailed information, as well as instructions for administrators and compliance professionals. These instructions allow you to manage device settings to manage the compliance objectives of your organization. This information includes details about setting up a device, configuring the device’s settings after setup is complete to minimize data collection, and driving privacy-related user experiences. #### 2.3.1 Managing the device setup experience -Windows deployment can be configured using several different methods, which provide an administrator with options to control: how a device is set up, what’s enabled by default, and what the user is able to change on the system after they log on. +Windows deployment can be configured using several different methods that provide an administrator with options for control, including how a device is set up, which options are enabled by default, and what the user is able to change on the device after they log on. -The [Deploy and update Windows 10](https://docs.microsoft.com/windows/deployment/) section of the Windows IT Pro Center provides an overview of the different options. +If you want the ability to fully control and apply restrictions on data being sent back to Microsoft, you can use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/) as a deployment solution. Configuration Manager can be used to deploy a customized boot image using a variety of [deployment methods](https://docs.microsoft.com/en-us/mem/configmgr/osd/get-started/prepare-for-operating-system-deployment). You can further restrict any Configuration Manager-specific diagnostic data from being sent back to Microsoft by turning off this setting as outlined in the instructions [here](https://docs.microsoft.com/en-us/mem/configmgr/core/plan-design/diagnostics/frequently-asked-questions). + +Alternatively, your administrators can also choose to use Windows Autopilot. Autopilot lessens the overall burden of deployment while allowing administrators to fully customize the out-of-box experience. However, since Windows Autopilot is a cloud-based solution, administrators should be aware that a minimal set of device identifiers are sent back to Microsoft during initial device boot up. This device-specific information is used to identify the device so that it can receive the administrator-configured Autopilot profile and policies. + +You can use the following articles to learn more about Autopilot and how to use Autopilot to deploy Windows 10: +- https://docs.microsoft.com/windows/deployment/windows-Autopilot/windows-Autopilot +- https://docs.microsoft.com/windows/deployment/windows-Autopilot/deployment-process #### 2.3.2 Managing connections from Windows components to Microsoft services -IT administrators can manage the data sent from their organization to Microsoft by configuring settings associated with the functionality provided by these Windows components. +Administrators can manage the data sent from their organization to Microsoft by configuring settings associated with the functionality provided by Windows components. -See [Manage connections from Windows operating system components to Microsoft services](https://technet.microsoft.com/itpro/windows/manage/manage-connections-from-windows-operating-system-components-to-microsoft-services) for more details, including the different methods available on how to configure each setting, the impact to functionality and which versions of Windows that are applicable. +For more details, see [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services). This topic includes the different methods available on how to configure each setting, the impact to functionality, and which versions of Windows that are applicable. #### 2.3.3 Managing Windows 10 connections -Some Windows components, apps, and related services transfer data to Microsoft network endpoints. An administrator may want to block these endpoints as an additional measure of ensuring privacy compliance within their organization. +Some Windows components, apps, and related services transfer data to Microsoft network endpoints. An administrator may want to block these endpoints for their organization to meet their specific compliance objectives. -[Manage connection endpoints for Windows 10, version 1809](manage-windows-1809-endpoints.md) provides a list of endpoints for the latest Windows 10 release, along with the functionality that would be impacted. Details for additional Windows versions can be found on the [Windows Privacy site](https://docs.microsoft.com/windows/privacy/) under the “Manage Windows 10 connection endpoints” section of the left-hand navigation menu. +[Manage connection endpoints for Windows 10, version 1903](manage-windows-1903-endpoints) provides a list of endpoints for the latest Windows 10 release, along with descriptions of any functionality that would be impacted by restricting data collection. Details for additional Windows versions can be found on the Windows Privacy site under the Manage Windows 10 connection endpoints section of the left-hand navigation menu. #### 2.3.4 Limited functionality baseline -An organization may want to further minimize the amount of data shared with Microsoft or apps by managing the connections and configuring additional settings on their devices. Similar to [Security baselines](https://docs.microsoft.com/windows/security/threat-protection/windows-security-baselines), we have a limited functionality baseline-focused configuring settings to minimize the data shared, however this comes with some potential impact to functionality on the device. The [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) article provides details on how to apply the baseline, along with the full list of settings covered in the baseline and the functionality that would be impacted. Administrators who don’t want to apply the baseline can still find details on how to configure each setting individually to find the right balance between data sharing and impact to functionality for their organization. +An organization may want to further minimize the amount of data sent back to Microsoft or shared with Microsoft apps by managing the connections and configuring additional settings on their devices. Similar to [Windows security baselines](https://docs.microsoft.com/windows/security/threat-protection/windows-security-baselines), Microsoft has released a limited functionality baseline focused on configuring settings to minimize the data sent back to Microsoft. However, the functionality of the device could be impacted by applying these settings. The [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services) article provides details on how to apply the baseline, along with the full list of settings covered in the baseline and the functionality that would be impacted. Administrators that don’t want to apply the baseline can still find details on how to configure each setting individually to find the right balance between data sharing and impact to functionality for their organization. + +>[!IMPORTANT] +>We recommend that you fully test any modifications to these settings before deploying them in your organization. #### 2.3.5 Diagnostic data: Managing notifications for change of level at logon -Windows 10, version 1803, and later provides users with a notification during sign in about changes to the diagnostic data level on the device so they are aware of any changes where additional data may be collected. For instance, if the diagnostic level on the device is set to Basic and an administrator changes it to Full, users will be notified when they next sign in. The IT administrator can disable these notifications by setting Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds** > **Configure telemetry opt-in change notifications** or the MDM policy `ConfigureTelemetryOptInChangeNotification`. +Starting with Windows 10, version 1803, if an administrator modifies the diagnostic data collection setting, users are notified of this change during the initial device sign in. For example, if you configure the device to send optional diagnostic data, users will be notified the next time they sign into the device. You can disable these notifications by using the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds** > **Configure telemetry opt-in change notifications** or the MDM policy `ConfigureTelemetryOptInChangeNotification`. #### 2.3.6 Diagnostic data: Managing end user choice for changing the setting -Windows 10, version 1803 and later, allows users to change their diagnostic data level to a lower setting than what their IT administrator has set. For instance, if the administrator has set the diagnostic data level to Enhanced or Full, a user can change the setting to Basic by going into **Settings** > **Privacy** > **Diagnostic & feedback**. The administrator can disable the user ability to change the setting via **Setting** > **Privacy** by setting the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds** > **Configure telemetry opt-in setting user interface** or the MDM policy `ConfigureTelemetryOptInSettingsUx`. +Windows 10, version 1803 and newer allows users to change their diagnostic data level to a lower setting than what their administrator has set. For example, if you have configured the device to send optional diagnostic data, a user can change the setting so that only required diagnostic data is sent by going into **Settings** > **Privacy** > **Diagnostics & feedback**. Administrators can restrict a user’s ability to change the setting using **Setting** > **Privacy** by setting the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds** > **Configure telemetry opt-in setting user interface** or the MDM policy `ConfigureTelemetryOptInSettingsUx`. #### 2.3.7 Diagnostic data: Managing device-based data delete -Windows 10, version 1803 and later, allows a user to delete diagnostic data collected from their device by going into **Settings** > **Privacy** > **Diagnostic & feedback** and clicking the **Delete** button. An IT administrator can also delete diagnostic data for a device using the [Clear-WindowsDiagnosticData](https://docs.microsoft.com/powershell/module/windowsdiagnosticdata/Clear-WindowsDiagnosticData?view=win10-ps) PowerShell cmdlet script. +Windows 10, version 1809 and newer allows a user to delete diagnostic data collected from their device by using **Settings** > **Privacy** > **Diagnostic & feedback** and clicking the **Delete** button under the **Delete diagnostic data** heading. An administrator can also delete diagnostic data for a device using the [Clear-WindowsDiagnosticData](https://docs.microsoft.com/powershell/module/windowsdiagnosticdata/Clear-WindowsDiagnosticData?view=win10-ps) PowerShell cmdlet. An administrator can disable a user’s ability to delete their device’s diagnostic data by setting the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds** > **Disable deleting diagnostic data** or the MDM policy `DisableDeviceDelete`. ## 3. The process for exercising data subject rights -This section discusses the different methods Microsoft provides for users and IT administrators to exercise data subject rights for data collected from a Windows 10 device. +This section discusses the different methods Microsoft provides for users and administrators to exercise data subject rights for data collected from a Windows 10 device. ### 3.1 Delete -Users can delete their device-based data by going to **Settings** > **Privacy** > **Diagnostic & feedback** and clicking the **Delete** button. Administrators can also use the [Clear-WindowsDiagnosticData](https://docs.microsoft.com/powershell/module/windowsdiagnosticdata/Clear-WindowsDiagnosticData?view=win10-ps) PowerShell cmdlet script. +Users can delete their device-based data by going to **Settings** > **Privacy** > **Diagnostic & feedback** and clicking the **Delete** button under the **Delete diagnostic data** heading. Administrators can also use the [Clear-WindowsDiagnosticData](https://docs.microsoft.com/powershell/module/windowsdiagnosticdata/Clear-WindowsDiagnosticData?view=win10-ps) PowerShell cmdlet. ### 3.2 View -The [Diagnostic Data Viewer (DDV)](diagnostic-data-viewer-overview.md) provides a view into the diagnostic data being collected from the Windows 10 device. IT administrators can also use the [Get-DiagnosticData](microsoft-diagnosticdataviewer.md#install-and-use-the-diagnostic-data-viewer-for-powershell) PowerShell cmdlet script. +The [Diagnostic Data Viewer (DDV)](diagnostic-data-viewer-overview) provides a view into the diagnostic data being collected from a Windows 10 device. Administrators can also use the [Get-DiagnosticData](microsoft-diagnosticdataviewer.md#install-and-use-the-diagnostic-data-viewer-for-powershell) PowerShell cmdlet. ### 3.3 Export -The [Diagnostic Data Viewer (DDV)](diagnostic-data-viewer-overview.md) provides the ability to export the diagnostic data captured while the app is running, by clicking the Export data button in the top menu. IT administrators can also use the [Get-DiagnosticData](microsoft-diagnosticdataviewer.md#install-and-use-the-diagnostic-data-viewer-for-powershell) PowerShell cmdlet script. +The [Diagnostic Data Viewer (DDV)](diagnostic-data-viewer-overview) provides the ability to export the diagnostic data captured while the app is running, by clicking the **Export** data button in the top menu. Administrators can also use the [Get-DiagnosticData](microsoft-diagnosticdataviewer.md#install-and-use-the-diagnostic-data-viewer-for-powershell) PowerShell cmdlet script. ### 3.4 Devices connected to a Microsoft account -If a user signs in to a Windows experience or app on their device with their Microsoft account (MSA), they can view, delete, and export data associated with their MSA on the [Privacy dashboard](https://account.microsoft.com/privacy). +If a user signs in to a Windows experience or app on their device with their Microsoft account, they can view, delete, and export data associated with their Microsoft account on the [Privacy dashboard](https://account.microsoft.com/privacy). ## 4. Cross-border data transfers @@ -177,26 +176,34 @@ Microsoft’s [Privacy Statement](https://privacy.microsoft.com/privacystatement The following sections provide details about how privacy data is collected and managed across related Windows products. -### 5.1 Windows Server 2016 and 2019 +### 5.1 Windows Server 2016 and newer -Windows Server follows the same mechanisms as Windows 10 for handling of personal data. There are some differences regarding [diagnostic default settings for Windows Server](https://microsoft-my.sharepoint.com/personal/v-colinm_microsoft_com/Documents/WINDOWS%20PRIVACY/Windows%20diagnostic%20data%20and%20Windows%20Server). +Windows Server follows the same mechanisms as Windows 10 for handling of personal data. ### 5.2 Surface Hub -Surface Hub is a shared device used within an organization. The device identifier collected as part of diagnostic data is not connected to an individual user. For removing Windows diagnostic data sent to Microsoft for a Surface Hub, Microsoft created the Surface Hub Delete Diagnostic Data tool available in the Microsoft Store. +[Surface Hub](https://docs.microsoft.com/surface-hub/) is a shared device used within an organization. The device identifier collected as part of diagnostic data is not connected to a user. To delete the Windows diagnostic data sent to Microsoft for Surface Hub, you can use the Surface Hub Delete Diagnostic Data tool available in the Microsoft Store -For more details, see [Windows 10 Team Edition, Version 1703 for Surface Hub](gdpr-it-guidance.md#windows-10-team-edition-version-1703-for-surface-hub). +>[!IMPORTANT] +>Apps and services that run on Windows but are not considered part of Windows will manage data collection using their own controls. Please contact the publisher for further guidance on how to control the data collection and transmission of these apps and services. -### 5.3 Windows 10 Analytics +An administrator can configure privacy-related settings, such as choosing to only send required diagnostic data. Surface Hub does not support Group Policy for centralized management. However, administrators can use MDM to apply these settings to Surface Hub. For more information about Surface Hub and MDM, see [Manage settings with an MDM provider (Surface Hub)](https://docs.microsoft.com/surface-hub/manage-settings-with-mdm-for-surface-hub). -[Windows Analytics](https://docs.microsoft.com/windows/deployment/update/windows-analytics-overview) is a set of solutions for Azure Portal that provide you with extensive data about the state of devices in your deployment. There are currently three solutions which you can use singly or in any combination: Device Health, Update Compliance, and Upgrade Readiness. Windows Analytics is a separate offering from Windows 10 and is dependent on enabling a minimum set of data collection on the device to function. +### 5.3 Desktop Analytics -For more details, see the [Windows Analytics overview page](https://docs.microsoft.com/windows/deployment/update/windows-analytics-overview). +[Desktop Analytics](https://docs.microsoft.com/en-us/mem/configmgr/desktop-analytics/overview) is a set of solutions for Azure Portal that provide you with extensive data about the state of devices in your deployment. Desktop Analytics is a separate offering from Windows 10 and is dependent on enabling a minimum set of data collection on the device to function. +### 5.4 Microsoft Managed Desktop + +[Microsoft Managed Desktop (MMD)](https://docs.microsoft.com/microsoft-365/managed-desktop/service-description/?view=o365-worldwide) is a service that provides your users with a secure modern experience and always keeps devices up to date with the latest versions of Windows 10 Enterprise edition, Office 365 ProPlus, and Microsoft security services. ## Additional Resources -* [Microsoft Trust Center: GDPR Overview](https://www.microsoft.com/trustcenter/privacy/gdpr/gdpr-overview) -* [Microsoft Trust Center: Privacy at Microsoft](https://www.microsoft.com/TrustCenter/Privacy/privacy-overview) +* [Microsoft Trust Center: GDPR Overview](https://www.microsoft.com/trust-center/privacy/gdpr-overview) +* [Microsoft Trust Center: Privacy at Microsoft](https://www.microsoft.com/trust-center/privacy) * [Windows IT Pro Docs](https://docs.microsoft.com/windows/#pivot=it-pro) - +* [Microsoft Privacy Statement](https://privacy.microsoft.com/en-US/privacystatement) +* [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services) +* [Privacy at Microsoft](https://privacy.microsoft.com/privacy-report) +* [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection) +* [Microsoft Service Trust Portal](https://servicetrust.microsoft.com/) From bd803b9ab0e4c5277f0c5e7d8fa3df2477ebb176 Mon Sep 17 00:00:00 2001 From: Sinead O'Sullivan Date: Fri, 5 Jun 2020 20:31:42 +0100 Subject: [PATCH 005/589] updates to privacy docs --- ...ws-diagnostic-data-in-your-organization.md | 495 +++++------------- .../windows-10-and-privacy-compliance.md | 2 +- 2 files changed, 141 insertions(+), 356 deletions(-) diff --git a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md index 518fe19374..ee94dae814 100644 --- a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md +++ b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md @@ -20,426 +20,211 @@ ms.date: 04/29/2019 **Applies to** -- Windows 10 Enterprise -- Windows 10 Mobile -- Windows Server +- Windows 10 Enterprise +- Windows 10 Education +- Windows Server 2016 and newer -This article applies to Windows and Windows Server diagnostic data only. It describes the types of diagnostic data we may gather, the ways you might manage it in your organization, and some examples of how diagnostic data can provide you with valuable insights into your enterprise deployments. Microsoft uses the data to quickly identify and address issues affecting its customers. +This article applies to Windows 10, Windows Server, Surface Hub, and Hololens diagnostic data only. It describes the types of diagnostic data that’s sent back to Microsoft and the ways you can manage it within your organization. Microsoft uses the data to quickly identify and address issues affecting its customers. -Use this article to make informed decisions about how you might configure diagnostic data in your organization. Diagnostic data is a term that means different things to different people and organizations. For this article, we discuss diagnostic data as system data that is uploaded by the Connected User Experiences and Telemetry component. Microsoft uses diagnostic data to keep Windows secure and up to date, troubleshoot problems, and make product improvements. +IMPORTANT: Microsoft is [increasing transparency](https://blogs.microsoft.com/on-the-issues/2019/04/30/increasing-transparency-and-customer-control-over-data/) by categorizing the data we collect as required or optional. Windows 10 is in the process of updating devices to reflect this new categorization, and during this transition Basic diagnostic data will be recategorized as Required diagnostic data and Full diagnostic data will be recategorized as Optional diagnostic data. For more information, see [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection). -We are always striving to improve our documentation and welcome your feedback. You can provide feedback by contacting telmhelp@microsoft.com. +## Overview -## Overview of Windows diagnostic data +Microsoft collects Windows diagnostic data to solve problems and to keep Windows up to date, secure, and operating properly. It also helps us improve Windows and related Microsoft products and services and, for customers who have turned on the **Tailored experiences** setting, to provide more relevant tips and recommendations to tailor Microsoft and third-party products and services for Windows to the customer’s needs. -At Microsoft, we use Windows diagnostic data to inform our decisions and focus our efforts in providing the most robust, most valuable platform for your business and the people who count on Windows to enable them to be as productive as possible. Diagnostic data gives users a voice in the operating system’s development. This guide describes the importance of Windows diagnostic data and how we protect that data. Additionally, it differentiates between diagnostic data and functional data. It also describes the diagnostic data levels that Windows supports. Of course, you can choose how much diagnostic data is shared with Microsoft, and this guide demonstrates how. - -To frame a discussion about diagnostic data, it is important to understand Microsoft’s privacy principles. We earn customer trust every day by focusing on six key privacy principles as described at [privacy.microsoft.com](https://privacy.microsoft.com/). These principles guided the implementation of the Windows diagnostic data system in the following ways: - -- **Control.** We offer customers control of the diagnostic data they share with us by providing easy-to-use management tools. -- **Transparency.** We provide information about the diagnostic data that Windows and Windows Server collects so our customers can make informed decisions. -- **Security.** We encrypt diagnostic data in transit from your device via TLS 1.2, and additionally use certificate pinning to secure the connection. -- **Strong legal protections.** We respect customers’ local privacy laws and fight for legal protection of their privacy as a fundamental human right. -- **No content-based targeting.** We take steps to avoid and minimize the collection of customer content, such as the content of files, chats, or emails, through the Windows diagnostic data system. Customer content inadvertently collected is kept confidential and not used for user targeting. -- **Benefits to you.** We collect Windows diagnostic data to help provide you with an up-to-date, more secure, reliable and performant product, and to improve Windows for all our customers. - -In previous versions of Windows and Windows Server, Microsoft used diagnostic data to check for updated or new Windows Defender signatures, check whether Windows Update installations were successful, gather reliability information through the Reliability Analysis Component (RAC), and gather reliability information through the Windows Customer Experience Improvement Program (CEIP) on Windows. In Windows 10 and Windows Server, you can control diagnostic data streams by using the Privacy option in Settings, Group Policy, or MDM. - -For Windows 10, we invite IT pros to join the [Windows Insider Program](http://insider.windows.com) to give us feedback on what we can do to make Windows work better for your organization. - -## Understanding Windows diagnostic data - -Windows as a Service is a fundamental change in how Microsoft plans, builds, and delivers the operating system. Historically, we released a major Windows version every few years. The effort required to deploy large and infrequent Windows versions was substantial. That effort included updating the infrastructure to support the upgrade. Windows as a Service accelerates the cadence to provide rich updates more frequently, and these updates require substantially less effort to roll out than earlier versions of Windows. Since it provides more value to organizations in a shorter timeframe, delivering Windows as a Service is a top priority for us. - -The release cadence of Windows may be fast, so feedback is critical to its success. We rely on diagnostic data at each stage of the process to inform our decisions and prioritize our efforts. - -### What is Windows diagnostic data? - -Windows diagnostic data is vital technical data from Windows devices about the device and how Windows and related software are performing. It's used in the following ways: - -- Keep Windows up to date -- Keep Windows secure, reliable, and performant -- Improve Windows – through the aggregate analysis of the use of Windows -- Personalize Windows engagement surfaces - -Here are some specific examples of Windows diagnostic data: - -- Type of hardware being used -- Applications installed and usage details -- Reliability information on device drivers - -### What is NOT diagnostic data? - -Diagnostic data can sometimes be confused with functional data. Some Windows components and apps connect to Microsoft services directly, but the data they exchange is not diagnostic data. For example, exchanging a user’s location for local weather or news is not an example of diagnostic data—it is functional data that the app or service requires to satisfy the user’s request. - -There are subtle differences between diagnostic data and functional data. Windows collects and sends diagnostic data in the background automatically. You can control how much information is gathered by setting the diagnostic data level. Microsoft tries to avoid collecting personal information wherever possible (for example, if a crash dump is collected and a document was in memory at the time of the crash). -On the other hand, functional data can contain personal information. However, a user action, such as requesting news or asking Cortana a question, usually triggers collection and transmission of functional data. - -If you’re an IT pro that wants to manage Windows functional data sent from your organization to Microsoft, see [Manage connections from Windows operating system components to Microsoft services](https://docs.microsoft.com/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services/). - -The following are specific examples of functional data: - -- Current location for weather -- Bing searches -- Wallpaper and desktop settings synced across multiple devices +For more information about how Windows diagnostic data is used, see [Diagnostics, feedback, and privacy in Windows 10](https://support.microsoft.com/help/4468236/diagnostics-feedback-and-privacy-in-windows-10-microsoft-privacy). ### Diagnostic data gives users a voice -Windows and Windows Server diagnostic data gives every user a voice in the operating system’s development and ongoing improvement. It helps us understand how Windows 10 and Windows Server behaves in the real world, focus on user priorities, and make informed decisions that benefit them. For our enterprise customers, representation in the dataset on which we will make future design decisions is a real benefit. The following sections offer real examples of these benefits. +Diagnostic data gives every user a voice in the operating system’s development and ongoing improvement. It helps us understand how Windows 10 and Windows Server behaves in the real world, focus on user priorities, and make informed decisions that benefit both consumer and enterprise customers. The following sections offer real examples of these benefits. -### Improve app and driver quality +### _Improve app and driver quality_ -Our ability to collect diagnostic data that drives improvements to Windows and Windows Server helps raise the bar for app and device driver quality. Diagnostic data helps us to quickly identify and fix critical reliability and security issues with apps and device drivers on given configurations. For example, we can identify an app that hangs on devices using a specific version of a video driver, allowing us to work with the app and device driver vendor to quickly fix the issue. The result is less downtime and reduced costs and increased productivity associated with troubleshooting these issues. +Our ability to collect diagnostic data that drives improvements to Windows and Windows Server helps raise the bar for app and device driver quality. Diagnostic data helps us to quickly identify and fix critical reliability and security issues with apps and device drivers used on Windows. For example, we can identify an app that hangs on devices using a specific version of a video driver, allowing us to work with the app and device driver vendor to quickly fix the issue. The result is less downtime and reduced costs and increased productivity associated with troubleshooting these issues. -#### Real-world example of how Windows diagnostic data helps +For example, in an earlier version of Windows 10 there was a version of a video driver that was crashing on some devices, causing the device to restart. We detected the problem in our diagnostic data, and immediately contacted the third-party developer who builds the video driver. Working with the developer, we provided an updated driver to Windows Insiders within 24 hours. Based on diagnostic data from the Windows Insiders’ devices, we were able to validate the new version of the video driver and rolled it out to the broad public as an update the next day. Diagnostic data helped us find, fix, and resolve this problem in just 48 hours, providing a better user experience and reducing costly support calls. -There was a version of a video driver that was crashing on some devices running Windows 10, causing the device to reboot. We detected the problem in our diagnostic data, and immediately contacted the third-party developer who builds the video driver. Working with the developer, we provided an updated driver to Windows Insiders within 24 hours. Based on diagnostic data from the Windows Insiders’ devices, we were able to validate the new version of the video driver, and rolled it out to the broad public as an update the next day. Diagnostic data helped us find, fix, and resolve this problem in just 48 hours, providing a better user experience and reducing costly support calls. +### _Improve end-user productivity_ -### Improve end-user productivity - -Windows diagnostic data also helps Microsoft better understand how customers use (or do not use) the operating system’s features and related services. The insights we gain from this data helps us prioritize our engineering effort to directly impact our customers’ experiences. Examples are: +Windows diagnostic data also helps Microsoft better understand how customers use (or do not use) the operating system’s features and related services. The insights we gain from this data helps us prioritize our engineering effort to directly impact our customers’ experiences. These examples show how the use of diagnostic data enables Microsoft to build or enhance features which can help organizations increase employee productivity while lowering help desk calls. - **Start menu.** How do people change the Start menu layout? Do they pin other apps to it? Are there any apps that they frequently unpin? We use this dataset to adjust the default Start menu layout to better reflect people’s expectations when they turn on their device for the first time. - **Cortana.** We use diagnostic data to monitor the scalability of our cloud service, improving search performance. -- **Application switching.** Research and observations from earlier Windows versions showed that people rarely used Alt+Tab to switch between applications. After discussing this with some users, we learned they loved the feature, saying that it would be highly productive, but they did not know about it previously. Based on this, we created the Task View button in Windows 10 to make this feature more discoverable. Later diagnostic data showed significantly higher usage of this feature. - -**These examples show how the use of diagnostic data enables Microsoft to build or enhance features which can help organizations increase employee productivity while lowering help desk calls.** - -### Insights into your own organization - -Sharing information with Microsoft helps make Windows and other products better, but it can also help make your internal processes and user experiences better. Microsoft provides a set of solutions that leverage information shared by customers to provide insights customized for your internal use. The first of these was [Upgrade Readiness](/windows/deployment/upgrade/manage-windows-upgrades-with-upgrade-readiness), followed by [Desktop Analytics](https://aka.ms/DADocs). Both help organizations with [Windows as a Service](/windows/deployment/update/wass-overview) adoption and potential compatibility challenges. For E5 customers, [Microsoft Defender Advanced Threat Protection](/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection), a platform designed to help enterprise networks prevent, detect, investigate, and respond to advanced threats. +- **Application switching.** Research and observations from earlier Windows versions showed that people rarely used Alt+Tab to switch between apps. After discussing this with some users, we learned they loved the feature, saying that it would be highly productive, but they did not know about it previously. Based on this, we created the Task View button in Windows 10 to make this feature more discoverable. Later diagnostic data showed significantly higher usage of this feature. ## How Microsoft handles diagnostic data -The diagnostic data is categorized into four levels: - -- [**Security**](#security-level). Information that’s required to help keep Windows and Windows Server secure, including data about the Connected User Experiences and Telemetry component settings, the Malicious Software Removal Tool, and Windows Defender. - -- [**Basic**](#basic-level). Basic device info, including: quality-related data, app compatibility, and data from the **Security** level. - -- [**Enhanced**](#enhanced-level). Additional insights, including: how Windows, Windows Server, and apps are used, how they perform, advanced reliability data, and data from both the **Basic** and the **Security** levels. - -- [**Full**](#full-level). Includes information about the websites you browse, how you use apps and features, plus additional information about device health, device activity (sometimes referred to as usage), and enhanced error reporting. At Full, Microsoft also collects the memory state of your device when a system or app crash occurs. It includes data from the **Security**, **Basic**, and **Enhanced** levels. - -Diagnostic data levels are cumulative, meaning each subsequent level includes data collected through lower levels. For more information see the [Diagnostic data levels](#diagnostic-data-levels) section. +Use the following sections to learn more about how Microsoft handles diagnostic data. ### Data collection -Windows 10 and Windows Server includes the Connected User Experiences and Telemetry component, which uses Event Tracing for Windows (ETW) tracelogging technology that gathers and stores diagnostic data events and data. The operating system and some Microsoft management solutions, such as System Center, use the same logging technology. +Depending on the diagnostic data settings on the device, diagnostic data can be collected via the following methods: + - Small payloads of structured information referred to as diagnostic data events, managed by the Connected User Experiences and Telemetry component. + - Diagnostic logs for additional troubleshooting, also managed by the Connected User Experience and Telemetry component. + - Crash reporting and crash dumps, managed by [Windows Error Reporting](https://docs.microsoft.com/en-us/windows/win32/wer/windows-error-reporting). -1. Operating system features and some management applications are instrumented to publish events and data. Examples of management applications include Virtual Machine Manager (VMM), Server Manager, and Storage Spaces. -1. Events are gathered using public operating system event logging and tracing APIs. -1. You can configure the diagnostic data level by using MDM policy, Group Policy, or registry settings. -1. The Connected User Experiences and Telemetry component transmits the diagnostic data. - -Info collected at the Enhanced and Full levels of diagnostic data is typically gathered at a fractional sampling rate, which can be as low as 1% of devices reporting data at those levels. +Later in this document we provide further details about how to control what’s collected and what data can be included in these different types of diagnostic data. ### Data transmission -All diagnostic data is encrypted using SSL and uses certificate pinning during transfer from the device to the Microsoft Data Management Service. With Windows 10, data is uploaded on a schedule that is sensitive to event priority, battery use, and network cost. Real-time events, such as Windows Defender Advanced Threat Protection, are always sent immediately. Normal events are not uploaded on metered networks, unless you are on a metered server connection. On a free network, normal events can be uploaded every 4 hours if on battery, or every 15 minutes if on A/C power. Diagnostic and crash data are only uploaded on A/C power and free networks. - -The data transmitted at the Basic and Enhanced data diagnostic levels is quite small; typically less than 1 MB per device per day, but occasionally up to 2 MB per device per day. +All diagnostic data is encrypted using TLS and uses certificate pinning during transfer from the device to the Microsoft data management services. ### Endpoints -The Microsoft Data Management Service routes data back to our secure cloud storage. Only Microsoft personnel with a valid business justification are permitted access. +The following table lists the endpoints related how you can manage the collection and control of diagnostic data. For more information around the endpoints that are used to send data back to Microsoft, see [Manage connection endpoints for Windows 10 Enterprise, version 1903](manage-windows-1903-endpoints). -Solutions like Desktop Analytics or Microsoft Defender Advanced Threat Protection need Windows devices to reach diagnostics endpoints which enable organizations to leverage solutions based on diagnostics data. These solutions leverage Windows components like the Connected User Experiences and Telemetry service, Windows Defender Advanced Threat Protection service, Windows Error Reporting, and Online Crash Analysis. - -For a complete list of diagnostics endpoints leveraged by Desktop Analytics, see [Enable data sharing for Desktop Analytics](https://docs.microsoft.com/configmgr/desktop-analytics/enable-data-sharing). -For a complete list of diagnostics endpoints leveraged by Microsoft Defender Advanced Threat Protection, see [Enable access to Microsoft Defender ATP service URLs in the proxy server](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet#enable-access-to-microsoft-defender-atp-service-urls-in-the-proxy-server). - -The following table defines the endpoints for Connected User Experiences and Telemetry component: - -| Windows release | Endpoint | +| Windows service | Endpoint | | - | - | -| Windows 10, versions 1703 or later, with the 2018-09 cumulative update installed | **Diagnostics data:** v10c.vortex-win.data.microsoft.com

**Functional:** v20.vortex-win.data.microsoft.com

**Microsoft Defender Advanced Threat Protection** is country specific and the prefix changes by country,
for example: **de**.vortex-win.data.microsoft.com

**Settings:** settings-win.data.microsoft.com | -| Windows 10, versions 1803 or later, without the 2018-09 cumulative update installed | **Diagnostics data:** v10.events.data.microsoft.com

**Functional:** v20.vortex-win.data.microsoft.com

**Microsoft Defender Advanced Threat Protection** is country specific and the prefix changes by country,
for example: **de**.vortex-win.data.microsoft.com

**Settings:** settings-win.data.microsoft.com | -| Windows 10, version 1709 or earlier | **Diagnostics data:** v10.vortex-win.data.microsoft.com

**Functional:** v20.vortex-win.data.microsoft.com

**Microsoft Defender Advanced Threat Protection** is country specific and the prefix changes by country,
for example: **de**.vortex-win.data.microsoft.com

**Settings:** settings-win.data.microsoft.com | - -The following table defines **additional diagnostics endpoints** not covered by services in the links above: - -| Service | Endpoint | -| - | - | -| OneDrive app for Windows 10 | | - -The following table defines the endpoints for other diagnostic data services: - -| Service | Endpoint | -| - | - | -| [Windows Error Reporting](https://msdn.microsoft.com/library/windows/desktop/bb513641.aspx) | watson.telemetry.microsoft.com | +|Connected User Experiences and Telemetry | v10.events.data.microsoft.com | +| | v10c.events.data.microsoft.com | +| | v10.vortex-win.data.microsoft.com | +| [Windows Error Reporting](https://docs.microsoft.com/windows/win32/wer/windows-error-reporting) | watson.telemetry.microsoft.com | +| | watson.microsoft.com | +| | umwatsonc.telemetry.microsoft.com | +| | umwatsonc.events.data.microsoft.com | +| | *-umwatsonc.events.data.microsoft.com | | | ceuswatcab01.blob.core.windows.net | | | ceuswatcab02.blob.core.windows.net | | | eaus2watcab01.blob.core.windows.net | | | eaus2watcab02.blob.core.windows.net | | | weus2watcab01.blob.core.windows.net | | | weus2watcab02.blob.core.windows.net | -| [Online Crash Analysis](https://msdn.microsoft.com/library/windows/desktop/ee416349.aspx) | oca.telemetry.microsoft.com | -| OneDrive app for Windows 10 | vortex.data.microsoft.com/collect/v1 | -| Microsoft Defender Advanced Threat Protection |
| +|Authentication | login.live.com

IMPORTANT: This endpoint is used for device authentication. We do not recommend disabling this endpoint. +| [Online Crash Analysis](https://docs.microsoft.com/en-us/windows/win32/dxtecharts/crash-dump-analysis) | oca.telemetry.microsoft.com | +| | oca.microsoft.com +| | kmwatsonc.telemetry.microsoft.com +| | *-kmwatsonc.telemetry.microsoft.com +|Settings | settings-win.data.microsoft.com

IMPORTANT: This endpoint is used to remotely configure diagnostics-related settings and data collection. For example, we use the settings endpoint to remotely block an event from being sent back to Microsoft. We do not recommend disabling this endpoint. This endpoint does not upload Windows diagnostic data -### Data use and access +### Data access -The principle of least privileged access guides access to diagnostic data. Microsoft does not share personal data of our customers with third parties, except at the customer’s discretion or for the limited purposes described in the [Privacy Statement](https://privacy.microsoft.com/privacystatement). Microsoft may share business reports with OEMs and third-party partners that include aggregated and anonymized diagnostic data information. Data-sharing decisions are made by an internal team including privacy, legal, and data management. +The principle of least privileged access guides access to Windows diagnostic data. Microsoft does not share personal data of our customers with third parties, except at the customer’s discretion or for the limited purposes described in the [Privacy Statement](https://privacy.microsoft.com/en-US/privacystatement). Microsoft may share business reports with hardware manufacturers and third-party partners that include aggregated and anonymized diagnostic data information. Data-sharing decisions are made by an internal team including privacy, legal, and data management. Only Microsoft personnel with a valid business justification are permitted access. ### Retention -Microsoft believes in and practices information minimization. We strive to gather only the info we need and to store it only for as long as it’s needed to provide a service or for analysis. Much of the info about how Windows and apps are functioning is deleted within 30 days. Other info may be retained longer, such as error reporting data or Microsoft Store purchase history. +Microsoft believes in and practices data minimization. We strive to gather only the info we need and to store it only for as long as it’s needed to provide a service or for analysis. For more information on how long data is retained, see the section named **Our retention of personal data** in the [Microsoft Privacy Statement](https://privacy.microsoft.com/en-US/privacystatement). -## Manage enterprise diagnostic data level +#### Diagnostic data settings -### Enterprise management +There are four diagnostic data collection settings. Each setting is described in more detail in the sections that follow. -Sharing diagnostic data with Microsoft is enabled by default on Windows 10, 1903 and later. Sharing this data provides many benefits to enterprises, so we do not recommend turning it off. For most enterprise customers, simply adjusting the diagnostic data level and managing specific components is the best option. +- Diagnostic data off (Security) +- Required diagnostic data (Basic) +- Enhanced +- Optional diagnostic data (Full) -Customers can set the diagnostic data level in both the user interface and with existing management tools. Users can change the diagnostic data level in the **Diagnostic data** setting. In the **Settings** app, in **Privacy** > **Diagnostics & feedback**. They can choose between Basic and Full. The Enhanced level will only be displayed as an option when Group Policy or Mobile Device Management (MDM) are invoked with this level. The Security level is not available. +Here’s a summary of the types of data that is included with each setting: -IT pros can use various methods, including Group Policy and Mobile Device Management (MDM), to choose a diagnostic data level. If you’re using Windows 10 Enterprise, Windows 10 Education, or Windows Server, the Security diagnostic data level is available when managing the policy. Setting the diagnostic data level through policy sets the upper boundary for the users’ choices. To disable user choice after setting the level with the policy, you will need to use the "Configure telemetry opt-in setting user interface" group policy. The remainder of this article describes how to use group policy to configure levels and settings interface. +| | **Diagnostic data off (Security)** | **Required (Basic)** | **Enhanced** |**Optional (Full)**| +| --- | --- | --- | --- | --- | +| **Diagnostic data events** | No Windows diagnostic data sent. | Minimum data required data to keep the device secure, up to date, and performing as expected. | Additional data about the websites you browse, how Windows and apps are used and how they perform, and device activity. The additional data helps Microsoft to fix and improve products and services for all users. | Additional data about the websites you browse, how Windows and apps are used and how they perform. This data also includes data about device activity, and enhanced error reporting that helps Microsoft to fix and improve products and services for all users.| +| **Crash Metadata** | N/A | Yes | Yes | Yes | +| **Crash Dumps** | N/A | No | Triage dumps only

For more information about crash dumps, see [Windows Error Reporting](https://docs.microsoft.com/windows/win32/wer/windows-error-reporting). | Full memory dumps

For more information about crash dumps, see [Windows Error Reporting](https://docs.microsoft.com/windows/win32/wer/windows-error-reporting). | +| **Crash Metadata** | N/A | No | No | No | +| **Data collection** | N/A | 100% | Sampling applies | Sampling applies | -#### Manage your diagnostic data settings -Use the steps in this article to set and/or adjust the diagnostic data settings for Windows and Windows Server in your organization. +#### Diagnostic data off -> [!IMPORTANT] -> These diagnostic data levels only apply to Windows and Windows Server components and apps that use the Connected User Experiences and Telemetry component. Non-Windows components, such as Microsoft Office or other 3rd-party apps, may communicate with their cloud services outside of these diagnostic data levels. You should work with your app vendors to understand their diagnostic data policy, and how you can to opt in or opt out. For more information on how Microsoft Office uses diagnostic data, see [Overview of privacy controls for Microsoft 365 Apps for enterprise](/deployoffice/privacy/overview-privacy-controls). +This setting was previously labeled as **Security**. When you configure this setting, no Windows diagnostic data is sent from your device. This is only available on Windows Server, Windows 10 Enterprise, and Windows 10 Education. If you choose this setting, devices in your organization will still be secure. -The lowest diagnostic data setting level supported through management policies is **Security**. The lowest diagnostic data setting supported through the Settings UI is **Basic**. The default diagnostic data setting for Windows Server is **Enhanced**. +>[!NOTE] +> If your organization relies on Windows Update, the minimum recommended setting is **Required diagnostic data**. Because no Windows Update information is collected when diagnostic data is off, important information about update failures is not sent. Microsoft uses this information to fix the causes of those failures and improve the quality of our updates. -### Configure the diagnostic data level +#### Required diagnostic data -You can configure your device's diagnostic data settings using the management tools you’re already using, such as Group Policy, MDM, or Windows Provisioning. You can also manually change your settings using Registry Editor. Setting your diagnostic data levels through a management policy sets the upper level for diagnostic data on the device. +Required diagnostic data, previously labeled as **Basic**, gathers a limited set of data that’s critical for understanding the device and its configuration. This data helps to identify problems that can occur on a specific hardware or software configuration. For example, it can help determine if crashes are more frequent on devices with a specific amount of memory or that are running a specific driver version. + +This is the default setting for Windows 10 Education editions, as well as all desktop editions starting with Windows 10, version 1903. + +Required diagnostic data includes: + +- Basic device data that helps provide an understanding about the types of Windows devices and the configurations and types of native and virtualized Windows Servers in the ecosystem. Examples include: + + - Device attributes, such as camera resolution and display type + - Battery attributes, such as capacity and type + - Networking attributes, such as number of network adapters, speed of network adapters, mobile operator network, and IMEI number + - Processor and memory attributes, such as number of cores, architecture, speed, memory size, and firmware + - Virtualization attribute, such as Second Level Address Translation (SLAT) support and guest operating system + - Operating system attributes, such as Windows edition and virtualization state + - Storage attributes, such as number of drives, type, and size + +- Quality metrics that helps provide an understanding about how the Connected User Experiences and diagnostic data component is functioning, including % of uploaded events, dropped events, blocked events, and the last upload time. + +- Quality-related information that helps Microsoft develop a basic understanding of how a device and its operating system are performing. Some examples are the device characteristics of a Connected Standby device, the number of crashes or hangs, and app state change details, such as how much processor time and memory were used, and the total uptime for an app. + +- Compatibility data that helps provide an understanding about which apps are installed on a device or virtual machine and identifies potential compatibility problems. + +- System data that helps provide an understanding about whether a device meets the minimum requirements to upgrade to the next version of the operating system. System information includes the amount of memory, as well as information about the processor and BIOS. + +- A list of accessory device data, such as printers or external storage devices, that are connected to Windows devices and whether these devices will function after upgrading to a new version of the operating system. + +- Driver data that includes specific driver activity that’s meant to help figure out whether apps and devices will function after upgrading to a new version of the operating system. This can help to determine blocking issues and then help Microsoft and our partners apply fixes and improvements. + +- Information about how the Microsoft Store performs, including app downloads, installations, and updates. It also includes Microsoft Store launches, page views, suspend and resumes, and obtaining licenses. + +#### Enhanced diagnostic data + +>[!NOTE] +We’re simplifying your diagnostic data controls by moving from four diagnostic data controls to three: **Diagnostic data off**, **Required**, and **Optional**. making changes to the enhanced diagnostic data level. For more info about this change, see [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection). + +Enhanced diagnostic data includes data about the websites you browse, how Windows and apps are used and how they perform, and device activity. The additional data helps Microsoft to fix and improve products and services for all users. When you choose to send enhanced diagnostic data, required diagnostic data will always be included, and we collect the following additional information: + - Operating system events that help to gain insights into different areas of the operating system, including networking, Hyper-V, Cortana, storage, file system, and other components. + - Operating system app events resulting from Microsoft apps and management tools that were downloaded from the Microsoft Store or pre-installed with Windows or Windows Server, including Server Manager, Photos, Mail, and Microsoft Edge. + - Device-specific events that are specific to certain devices, such as Surface Hub and Microsoft HoloLens. For example, Microsoft HoloLens sends Holographic Processing Unit (HPU)-related events. + - All crash dump types, except for heap dumps and full dumps. For more information about crash dumps, see [Windows Error Reporting](https://docs.microsoft.com/windows/win32/wer/windows-error-reporting). + + #### Optional diagnostic data + +Optional diagnostic data, previously labeled as **Full**, includes more detailed information about your device and its settings, capabilities, and device health. Optional diagnostic data also includes data about the websites you browse, device activity, and enhanced error reporting that helps Microsoft to fix and improve products and services for all users. When you choose to send optional diagnostic data, required diagnostic data will always be included, and we collect the following additional information: + + - Additional data about the device, connectivity, and configuration, beyond that collected under required diagnostic data. + - Status and logging information about the health of operating system and other system components beyond what is collected under required diagnostic data. + - App activity, such as which programs are launched on a device, how long they run, and how quickly they respond to input. + - Browser activity, including browsing history and search terms, in Microsoft browsers (Microsoft Edge or Internet Explorer). + - Enhanced error reporting, including the memory state of the device when a system or app crash occurs (which may unintentionally contain user content, such as parts of a file you were using when the problem occurred). Crash data is never used for Tailored experiences. + +>[!Note] +>Crash dumps collected in optional diagnostic data may unintentionally contain personal data, such as portions of memory from a document and a web page. For more information about crash dumps, see [Windows Error Reporting](https://docs.microsoft.com/windows/win32/wer/windows-error-reporting). + +#### Manage enterprise diagnostic data + +Use the steps in this section to configure the diagnostic data settings for Windows and Windows Server in your organization. + +>[!IMPORTANT] +>These diagnostic data settings only apply to components, features, and apps that are considered a part of the Windows operating system. Third-party apps and other Microsoft apps, such as Microsoft Office, that customers install may also collect and send diagnostic data using their own controls. You should work with your app vendors to understand their diagnostic data policy, and how you can opt in or opt out. For more information on how Microsoft Office uses diagnostic data, see [Overview of privacy controls for Microsoft 365 Apps for enterprise](https://docs.microsoft.com/deployoffice/privacy/overview-privacy-controls). If you would like to control Windows data collection that is not Windows diagnostic data, see [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services). + +You can configure your device's diagnostic data settings using the management tools you’re already using, such as Group Policy or MDM. Use the appropriate value in the table below when you configure the management policy. -| Level | Value | +| Category | Value | | - | - | -| Security | **0** | -| Basic | **1** | -| Enhanced | **2** | -| Full | **3** | +|Diagnostic data off (Security) | 0 | +| Required (Basic) | 1 | +| Enhanced | 2 | +|Optional (Full) | 3 | - > [!NOTE] - > When both the Computer Configuration policy and User Configuration policy are set, the more restrictive policy is used. +>[!Note] +>When both the Computer Configuration policy and User Configuration policies are set, the more restrictive policy is used. -### Use Group Policy to set the diagnostic data level +#### Use Group Policy to manage diagnostic data collection -Use a Group Policy object to set your organization’s diagnostic data level. +You can use Group Policy to set your organization’s diagnostic data setting: -1. From the Group Policy Management Console, go to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds**. +1. From the Group Policy Management Console, go to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds**. -1. Double-click **Allow Telemetry**. + 1. Double-click **Allow Telemetry**. -1. In the **Options** box, select the level that you want to configure, and then click **OK**. +>[!NOTE] +> If devices in your organization are running Windows 10, 1803 and newer, the user can still use Settings to set the diagnostic data setting to a more restrictive value, unless the **Configure diagnostic data opt-in settings user interface** policy is set. -### Use MDM to set the diagnostic data level + 2. In the **Options** box, choose the setting that you want to configure, and then click **OK**. -Use the [Policy Configuration Service Provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider) to apply the System/AllowTelemetry MDM policy. +#### Use MDM to manage diagnostic data collection -### Use Registry Editor to set the diagnostic data level +[Policy Configuration Service Provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider) to apply the System/AllowTelemetry MDM policy. -Use Registry Editor to manually set the registry level on each device in your organization or you can write a script to edit the registry. If a management policy already exists, such as Group Policy or MDM, it will override this registry setting. +#### Limit optional diagnostic data for Desktop Analytics -1. Open Registry Editor, and go to **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\Windows\\DataCollection**. - -1. Right-click **DataCollection**, click New, and then click **DWORD (32-bit) Value**. - -1. Type **AllowTelemetry**, and then press ENTER. - -1. Double-click **AllowTelemetry**, set the desired value from the table above, and then click **OK.** - -1. Click **File** > **Export**, and then save the file as a .reg file, such as **C:\\AllowTelemetry.reg**. You can run this file from a script on each device in your organization. - -### Additional diagnostic data controls - -There are a few more settings that you can turn off that may send diagnostic data information: - -- To turn off Windows Update diagnostic data, you have two choices. Either turn off Windows Update, or set your devices to be managed by an on premises update server, such as [Windows Server Update Services (WSUS)](https://docs.microsoft.com/windows-server/administration/windows-server-update-services/get-started/windows-server-update-services-wsus) or [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/configmgr/index/). - -- Turn off **Windows Defender Cloud-based Protection** and **Automatic sample submission** in **Settings** > **Update & security** > **Windows Defender**. - -- Manage the Malicious Software Removal Tool in your organization. For more info, see Microsoft KB article [891716](https://support.microsoft.com/kb/891716). - -- Turn off **Improve inking and typing** in **Settings** > **Privacy**. At diagnostic data levels **Enhanced** and **Full**, Microsoft uses Linguistic Data Collection info to improve language model features such as autocomplete, spellcheck, suggestions, input pattern recognition, and dictionary. - - > [!NOTE] - > Microsoft does not intend to gather sensitive information, such as credit card numbers, usernames and passwords, email addresses, or other similarly sensitive information for Linguistic Data Collection. We guard against such events by using technologies to identify and remove sensitive information before linguistic data is sent from the user's device. If we determine that sensitive information has been inadvertently received, we delete the information. - -## Diagnostic data levels - -These levels are available on all desktop and mobile editions of Windows 10, except for the **Security** level, which is limited to Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile Enterprise, Windows 10 IoT Core (IoT Core), and Windows Server. - -### Security level - -The Security level gathers only the diagnostic data info that is required to keep Windows devices, Windows Server, and guests protected with the latest security updates. This level is only available on Windows Server, Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile Enterprise, and Windows IoT Core editions. - -> [!NOTE] -> If your organization relies on Windows Update for updates, you shouldn’t use the **Security** level. Because no Windows Update information is gathered at this level, important information about update failures is not sent. Microsoft uses this information to fix the causes of those failures and improve the quality of our updates. - -Windows Server Update Services (WSUS) and Microsoft Endpoint Configuration Manager functionality is not affected at this level, nor is diagnostic data about Windows Server features or System Center gathered. - -The data gathered at this level includes: - -- **Connected User Experiences and Telemetry component settings**. If general diagnostic data has been gathered and is queued, it is sent to Microsoft. Along with this diagnostic data, the Connected User Experiences and Telemetry component may download a configuration settings file from Microsoft’s servers. This file is used to configure the Connected User Experiences and Telemetry component itself. The data gathered by the client for this request includes OS information, device id (used to identify what specific device is requesting settings) and device class (for example, whether the device is server or desktop). - -- **Malicious Software Removal Tool (MSRT)** The MSRT infection report contains information, including device info and IP address. - - > [!NOTE] - > You can turn off the MSRT infection report. No MSRT information is included if MSRT is not used. If Windows Update is turned off, MSRT will not be offered to users. For more info, see Microsoft KB article [891716](https://support.microsoft.com/kb/891716). - -- **Windows Defender/Endpoint Protection**. Windows Defender and System Center Endpoint Protection requires some information to function, including: anti-malware signatures, diagnostic information, User Account Control settings, Unified Extensible Firmware Interface (UEFI) settings, and IP address. - - > [!NOTE] - > This reporting can be turned off and no information is included if a customer is using third-party antimalware software, or if Windows Defender is turned off. For more info, see [Windows Defender](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-defender). - - Microsoft recommends that Windows Update, Windows Defender, and MSRT remain enabled unless the enterprise uses alternative solutions such as Windows Server Update Services, Microsoft Endpoint Configuration Manager, or a third-party antimalware solution. Windows Update, Windows Defender, and MSRT provide core Windows functionality such as driver and OS updates, including security updates. - -For servers with default diagnostic data settings and no Internet connectivity, you should set the diagnostic data level to **Security**. This stops data gathering for events that would not be uploaded due to the lack of Internet connectivity. - -No user content, such as user files or communications, is gathered at the **Security** diagnostic data level, and we take steps to avoid gathering any information that directly identifies a company or user, such as name, email address, or account ID. However, in rare circumstances, MSRT information may unintentionally contain personal information. For instance, some malware may create entries in a computer’s registry that include information such as a username, causing it to be gathered. MSRT reporting is optional and can be turned off at any time. - -### Basic level - -The Basic level gathers a limited set of data that’s critical for understanding the device and its configuration. This level also includes the **Security** level data. This level helps to identify problems that can occur on a specific hardware or software configuration. For example, it can help determine if crashes are more frequent on devices with a specific amount of memory or that are running a specific driver version. The Connected User Experiences and Telemetry component does not gather diagnostic data about System Center, but it can transmit diagnostic data for other non-Windows applications if they have user consent. - -This is the default level for Windows 10 Education editions, as well as all desktop editions starting with Windows 10, version 1903. - -The normal upload range for the Basic diagnostic data level is between 109 KB - 159 KB per day, per device. - -The data gathered at this level includes: - -- **Basic device data**. Helps provide an understanding about the types of Windows devices and the configurations and types of native and virtualized Windows Servers in the ecosystem. Examples include: - - - Device attributes, such as camera resolution and display type - - Internet Explorer version - - Battery attributes, such as capacity and type - - Networking attributes, such as number of network adapters, speed of network adapters, mobile operator network, and IMEI number - - Processor and memory attributes, such as number of cores, architecture, speed, memory size, and firmware - - Virtualization attribute, such as Second Level Address Translation (SLAT) support and guest operating system - - Operating system attributes, such as Windows edition and virtualization state - - Storage attributes, such as number of drives, type, and size - -- **Connected User Experiences and Telemetry component quality metrics**. Helps provide an understanding about how the Connected User Experiences and Telemetry component is functioning, including % of uploaded events, dropped events, and the last upload time. - -- **Quality-related information**. Helps Microsoft develop a basic understanding of how a device and its operating system are performing. Some examples are the device characteristics of a Connected Standby device, the number of crashes or hangs, and application state change details, such as how much processor time and memory were used, and the total uptime for an app. - -- **Compatibility data**. Helps provide an understanding about which apps are installed on a device or virtual machine and identifies potential compatibility problems. - - - **General app data and app data for Internet Explorer add-ons**. Includes a list of apps that are installed on a native or virtualized instance of the OS and whether these apps function correctly after an upgrade. This app data includes the app name, publisher, version, and basic details about which files have been blocked from usage. - - - **Internet Explorer add-ons**. Includes a list of Internet Explorer add-ons that are installed on a device and whether these apps will work after an upgrade. - - - **System data**. Helps provide an understanding about whether a device meets the minimum requirements to upgrade to the next version of the operating system. System information includes the amount of memory, as well as information about the processor and BIOS. - - - **Accessory device data**. Includes a list of accessory devices, such as printers or external storage devices, that are connected to Windows PCs and whether these devices will function after upgrading to a new version of the operating system. - - - **Driver data**. Includes specific driver usage that’s meant to help figure out whether apps and devices will function after upgrading to a new version of the operating system. This can help to determine blocking issues and then help Microsoft and our partners apply fixes and improvements. - -- **Microsoft Store**. Provides information about how the Microsoft Store performs, including app downloads, installations, and updates. It also includes Microsoft Store launches, page views, suspend and resumes, and obtaining licenses. - -### Enhanced level - -The Enhanced level gathers data about how Windows and apps are used and how they perform. This level also includes data from both the **Basic** and **Security** levels. This level helps to improve the user experience with the operating system and apps. Data from this level can be abstracted into patterns and trends that can help Microsoft determine future improvements. - -This level is needed to quickly identify and address Windows and Windows Server quality issues. - -The normal upload range for the Enhanced diagnostic data level is between 239 KB - 348 KB per day, per device. - -The data gathered at this level includes: - -- **Operating system events**. Helps to gain insights into different areas of the operating system, including networking, Hyper-V, Cortana, storage, file system, and other components. - -- **Operating system app events**. A set of events resulting from Microsoft applications and management tools that were downloaded from the Store or pre-installed with Windows or Windows Server, including Server Manager, Photos, Mail, and Microsoft Edge. - -- **Device-specific events**. Contains data about events that are specific to certain devices, such as Surface Hub and Microsoft HoloLens. For example, Microsoft HoloLens sends Holographic Processing Unit (HPU)-related events. - -- **Some crash dump types**. All crash dump types, except for heap dumps and full dumps. - -If the Connected User Experiences and Telemetry component detects a problem on Windows 10 that requires gathering more detailed instrumentation, the Connected User Experiences and Telemetry component at the **Enhanced** diagnostic data level will only gather data about the events associated with the specific issue. - -### Full level - -The Full level gathers data necessary to identify and to help fix problems, following the approval process described below. This level also includes data from the Basic, Enhanced, and Security levels. - -Additionally, at this level, devices opted in to the [Windows Insider Program](http://insider.windows.com) will send events, such as reliability and app responsiveness. that can show Microsoft how pre-release binaries and features are performing. These events help us make decisions on which builds are flighted. All devices in the [Windows Insider Program](http://insider.windows.com) are automatically set to this level. - -If a device experiences problems that are difficult to identify or repeat using Microsoft’s internal testing, additional data becomes necessary. This data can include any user content that might have triggered the problem and is gathered from a small sample of devices that have both opted into the **Full** diagnostic data level and have exhibited the problem. - -However, before more data is gathered, Microsoft’s privacy governance team, including privacy and other subject matter experts, must approve the diagnostics request made by a Microsoft engineer. If the request is approved, Microsoft engineers can use the following capabilities to get the information: - -- Ability to run a limited, pre-approved list of Microsoft certified diagnostic tools, such as msinfo32.exe, powercfg.exe, and dxdiag.exe. - -- Ability to get registry keys. - -- All crash dump types, including heap dumps and full dumps. - -> [!NOTE] -> Crash dumps collected at this diagnostic data level may unintentionally contain personal data, such as portions of memory from a documents, a web page, etc. - -## Limit Enhanced diagnostic data to the minimum required by Desktop Analytics - -> [!IMPORTANT] -> The Upgrade Readiness and Device Health solutions of Windows Analytics are being retired on January 31, 2020. [Update Compliance](/windows/deployment/update/update-compliance-get-started) will continue to be supported. -> For more information, see [Windows Analytics retirement on January 31, 2020](https://support.microsoft.com/help/4521815/windows-analytics-retirement). - -Desktop Analytics reports are powered by diagnostic data not included in the **Basic** level, such as crash reports and certain operating system events. - -In Windows 10, version 1709, we introduced the **Limit Enhanced diagnostic data to the minimum required by Windows Analytics** feature. When enabled, this feature lets you send only the following subset of **Enhanced** level diagnostic data. - -- **Operating system events.** Limited to a small set required for analytics reports and documented in the [Windows 10 diagnostic data events and fields collected through the limit enhanced diagnostic data policy](enhanced-diagnostic-data-windows-analytics-events-and-fields.md) topic. - -- **Some crash dump types.** Triage dumps for user mode and mini dumps for kernel mode. - -> [!NOTE] -> Triage dumps are a type of [minidumps](https://docs.microsoft.com/windows/desktop/debug/minidump-files) that go through a process of user-sensitive information scrubbing. Some user-sensitive information may be missed in the process, and will therefore be sent with the dump. - -With the retirement of Windows Analytics, this policy will continue to be supported by Desktop Analytics, but will not include Office related diagnostic data. - -### Enable limiting enhanced diagnostic data to the minimum required by Desktop Analytics - -1. Set the diagnostic data level to **Enhanced**, using either Group Policy or MDM. - - a. Using Group Policy, set the **Computer Configuration/Administrative Templates/Windows Components/Data Collection and Preview Builds/Allow telemetry** setting to **2**. - - -OR- - - b. Using MDM, use the Policy CSP to set the **System/AllowTelemetry** value to **2**. - - -AND- - -1. Enable the **LimitEnhancedDiagnosticDataWindowsAnalytics** setting, using either Group Policy or MDM. - - a. Using Group Policy, set the **Computer Configuration/Administrative Templates/Windows Components/Data collection and Preview builds/Limit Enhanced diagnostic data to the minimum required by Windows Analytics** setting to **Enabled**. - - -OR- - - b. Using MDM, use the Policy CSP to set the **System/LimitEnhancedDiagnosticDataWindowsAnalytics** value to **1**. - -## Additional resources - -FAQs - -- [Cortana, Search, and privacy](https://privacy.microsoft.com/windows-10-cortana-and-privacy) -- [Windows 10 feedback, diagnostics, and privacy](https://privacy.microsoft.com/windows-10-feedback-diagnostics-and-privacy) -- [Windows 10 camera and privacy](https://privacy.microsoft.com/windows-10-camera-and-privacy) -- [Windows 10 location service and privacy](https://privacy.microsoft.com/windows-10-location-and-privacy) -- [Microsoft Edge and privacy](https://privacy.microsoft.com/windows-10-microsoft-edge-and-privacy) -- [Windows 10 speech, inking, typing, and privacy](https://privacy.microsoft.com/windows-10-speech-inking-typing-and-privacy-faq) -- [Windows Hello and privacy](https://privacy.microsoft.com/windows-10-windows-hello-and-privacy) -- [Wi-Fi Sense](https://privacy.microsoft.com/windows-10-about-wifi-sense) -- [Windows Update Delivery Optimization](https://privacy.microsoft.com/windows-10-windows-update-delivery-optimization) - -Blogs - -- [Privacy and Windows 10](https://blogs.windows.com/windowsexperience/2015/09/28/privacy-and-windows-10) - -Privacy Statement - -- [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement) - -TechNet - -- [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) - -Web Pages - -- [Privacy at Microsoft](https://privacy.microsoft.com) +For more information about how to limit the diagnostic data to the minimum required by Desktop Analytics, see [Enable data sharing for Desktop Analytics](https://docs.microsoft.com/en-us/mem/configmgr/desktop-analytics/enable-data-sharing). \ No newline at end of file diff --git a/windows/privacy/windows-10-and-privacy-compliance.md b/windows/privacy/windows-10-and-privacy-compliance.md index 654f271d91..47a63b484c 100644 --- a/windows/privacy/windows-10-and-privacy-compliance.md +++ b/windows/privacy/windows-10-and-privacy-compliance.md @@ -25,7 +25,7 @@ Applies to: ## Overview -IMPORTANT: Microsoft is [increasing transparency](https://blogs.microsoft.com/on-the-issues/2019/04/30/increasing-transparency-and-customer-control-over-data/) by categorizing the data we collect as required or optional. Windows 10 is in the process of updating devices to reflect this new categorization, and during this transition Basic diagnostic data will be recategorized as Required diagnostic data and Full diagnostic data will be recategorized as Optional diagnostic data. For more information, see [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection.md). +IMPORTANT: Microsoft is [increasing transparency](https://blogs.microsoft.com/on-the-issues/2019/04/30/increasing-transparency-and-customer-control-over-data/) by categorizing the data we collect as required or optional. Windows 10 is in the process of updating devices to reflect this new categorization, and during this transition Basic diagnostic data will be recategorized as Required diagnostic data and Full diagnostic data will be recategorized as Optional diagnostic data. For more information, see [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection). At Microsoft, we are deeply committed to data privacy across all our products and services. With this guide, we provide administrators and compliance professionals with data privacy considerations for Windows 10. From 2a5b3f1b14f19ba4762525ce0c00c56edfd15ccf Mon Sep 17 00:00:00 2001 From: Sinead O'Sullivan Date: Fri, 5 Jun 2020 21:11:08 +0100 Subject: [PATCH 006/589] updates to privacy docs --- ...s-to-windows-diagnostic-data-collection.md | 4 +-- .../windows-10-and-privacy-compliance.md | 27 ++++++++++--------- 2 files changed, 16 insertions(+), 15 deletions(-) diff --git a/windows/privacy/changes-to-windows-diagnostic-data-collection.md b/windows/privacy/changes-to-windows-diagnostic-data-collection.md index b9785b1a62..fa81776ddf 100644 --- a/windows/privacy/changes-to-windows-diagnostic-data-collection.md +++ b/windows/privacy/changes-to-windows-diagnostic-data-collection.md @@ -76,8 +76,8 @@ A final set of changes includes two new policies that can help you fine-tune dia With the Enhanced diagnostic data level being split out into new policies, we are providing additional controls to manage what types of dumps are collected and whether to send additional diagnostic logs. Here are some steps on how to configure them: 1. Choose to send optional diagnostic data by setting one of the following policies: - - Group Policy: Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Allow Diagnostic Data**. Set the policy value to **Send optional diagnostic data** - - MDM: System/AllowTelemetry. Set the policy value to 3. + - Group Policy: Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Allow Diagnostic Data**. Set the policy value to **Send optional diagnostic data** + - MDM: System/AllowTelemetry. Set the policy value to 3. 2. Enable the following Group Policy: Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Limit Dump Collection** 3. Enable the following Group Policy: Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Limit Diagnostic Log Collection** diff --git a/windows/privacy/windows-10-and-privacy-compliance.md b/windows/privacy/windows-10-and-privacy-compliance.md index 47a63b484c..0ecbeaf982 100644 --- a/windows/privacy/windows-10-and-privacy-compliance.md +++ b/windows/privacy/windows-10-and-privacy-compliance.md @@ -25,7 +25,8 @@ Applies to: ## Overview -IMPORTANT: Microsoft is [increasing transparency](https://blogs.microsoft.com/on-the-issues/2019/04/30/increasing-transparency-and-customer-control-over-data/) by categorizing the data we collect as required or optional. Windows 10 is in the process of updating devices to reflect this new categorization, and during this transition Basic diagnostic data will be recategorized as Required diagnostic data and Full diagnostic data will be recategorized as Optional diagnostic data. For more information, see [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection). +>[!IMPORTANT] +>Microsoft is [increasing transparency](https://blogs.microsoft.com/on-the-issues/2019/04/30/increasing-transparency-and-customer-control-over-data/) by categorizing the data we collect as required or optional. Windows 10 is in the process of updating devices to reflect this new categorization, and during this transition Basic diagnostic data will be recategorized as Required diagnostic data and Full diagnostic data will be recategorized as Optional diagnostic data. For more information, see [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection). At Microsoft, we are deeply committed to data privacy across all our products and services. With this guide, we provide administrators and compliance professionals with data privacy considerations for Windows 10. @@ -48,7 +49,7 @@ The following table provides an overview of the Windows 10 privacy settings pres | Feature/Setting | Description | Supporting Content | Privacy Statement | | --- | --- | --- | --- | -| Diagnostic Data |

Microsoft uses diagnostic data to keep Windows secure, up to date, troubleshoot problems, and make product improvements. Regardless of what choices you make for diagnostic data collection, the device will be just as secure and will operate normally. This data is collected by Microsoft and stored with one or more unique identifiers that can help us recognize an individual user on an individual device and understand the device's service issues and use patterns.

Diagnostic data is categorized into the following:

  • **Required diagnostic data**
    Previously known as basic diagnostic data, required diagnostic data includes information about your device, its settings, capabilities, and whether it is performing properly, whether a device is ready for an update, and whether there are factors that may impede the ability to receive updates, such as low battery, limited disk space, or connectivity through a paid network. You can find out what is collected with required diagnostic data [here](https://docs.microsoft.com/windows/privacy/required-windows-diagnostic-events-and-fields-2004).
  • **Optional diagnostic data**
    Previously known as full diagnostic data, optional diagnostic data includes more detailed information about your device and its settings, capabilities, and device health. When you choose to send optional diagnostic data, required diagnostic data will always be included. You can find out the types of optional diagnostic data collected [here](https://docs.microsoft.com/windows/privacy/windows-diagnostic-data).

| [Learn more](https://support.microsoft.com/en-us/4468236/diagnostics-feedback-and-privacy-in-windows-10-microsoft-privacy)

[Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#maindiagnosticsmodule) | +| Diagnostic Data |

Microsoft uses diagnostic data to keep Windows secure, up to date, troubleshoot problems, and make product improvements. Regardless of what choices you make for diagnostic data collection, the device will be just as secure and will operate normally. This data is collected by Microsoft and stored with one or more unique identifiers that can help us recognize an individual user on an individual device and understand the device's service issues and use patterns.

Diagnostic data is categorized into the following:

  • **Required diagnostic data**
    Previously known as basic diagnostic data, required diagnostic data includes information about your device, its settings, capabilities, and whether it is performing properly, whether a device is ready for an update, and whether there are factors that may impede the ability to receive updates, such as low battery, limited disk space, or connectivity through a paid network. You can find out what is collected with required diagnostic data [here](https://docs.microsoft.com/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004).
  • **Optional diagnostic data**
    Previously known as full diagnostic data, optional diagnostic data includes more detailed information about your device and its settings, capabilities, and device health. When you choose to send optional diagnostic data, required diagnostic data will always be included. You can find out the types of optional diagnostic data collected [here](https://docs.microsoft.com/windows/privacy/windows-diagnostic-data).

| [Learn more](https://support.microsoft.com/4468236/diagnostics-feedback-and-privacy-in-windows-10-microsoft-privacy)

[Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#maindiagnosticsmodule) | | Inking and typing diagnostics | Microsoft collects optional inking and typing diagnostic data to improve the language recognition and suggestion capabilities of apps and services running on Windows. | [Learn more](https://support.microsoft.com/help/4468236/diagnostics-feedback-and-privacy-in-windows-10-microsoft-privacy) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#maindiagnosticsmodule) | | Speech | Use your voice for dictation and to talk to Cortana and other apps that use Windows cloud-based speech recognition. Microsoft collects voice data to help improve speech services. | [Learn more](https://support.microsoft.com/help/4468250/windows-10-speech-voice-activation-inking-typing-privacy) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#mainspeechinkingtypingmodule) | | Location | Get location-based experiences like directions and weather. Let Windows and apps request your location and allow Microsoft to use your location data to improve location services. | [Learn more](https://support.microsoft.com/help/4468240/windows-10-location-service-and-privacy) |[Privacy Statement](https://privacy.microsoft.com/privacystatement#mainlocationservicesmotionsensingmodule) | @@ -98,11 +99,11 @@ The following table provides an overview of the privacy settings discussed earli This section provides general details and links to more detailed information, as well as instructions for administrators and compliance professionals. These instructions allow you to manage device settings to manage the compliance objectives of your organization. This information includes details about setting up a device, configuring the device’s settings after setup is complete to minimize data collection, and driving privacy-related user experiences. -#### 2.3.1 Managing the device setup experience +#### _2.3.1 Managing the device setup experience_ Windows deployment can be configured using several different methods that provide an administrator with options for control, including how a device is set up, which options are enabled by default, and what the user is able to change on the device after they log on. -If you want the ability to fully control and apply restrictions on data being sent back to Microsoft, you can use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/) as a deployment solution. Configuration Manager can be used to deploy a customized boot image using a variety of [deployment methods](https://docs.microsoft.com/en-us/mem/configmgr/osd/get-started/prepare-for-operating-system-deployment). You can further restrict any Configuration Manager-specific diagnostic data from being sent back to Microsoft by turning off this setting as outlined in the instructions [here](https://docs.microsoft.com/en-us/mem/configmgr/core/plan-design/diagnostics/frequently-asked-questions). +If you want the ability to fully control and apply restrictions on data being sent back to Microsoft, you can use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/) as a deployment solution. Configuration Manager can be used to deploy a customized boot image using a variety of [deployment methods](https://docs.microsoft.com/mem/configmgr/osd/get-started/prepare-for-operating-system-deployment). You can further restrict any Configuration Manager-specific diagnostic data from being sent back to Microsoft by turning off this setting as outlined in the instructions [here](https://docs.microsoft.com/mem/configmgr/core/plan-design/diagnostics/frequently-asked-questions). Alternatively, your administrators can also choose to use Windows Autopilot. Autopilot lessens the overall burden of deployment while allowing administrators to fully customize the out-of-box experience. However, since Windows Autopilot is a cloud-based solution, administrators should be aware that a minimal set of device identifiers are sent back to Microsoft during initial device boot up. This device-specific information is used to identify the device so that it can receive the administrator-configured Autopilot profile and policies. @@ -110,34 +111,34 @@ You can use the following articles to learn more about Autopilot and how to use - https://docs.microsoft.com/windows/deployment/windows-Autopilot/windows-Autopilot - https://docs.microsoft.com/windows/deployment/windows-Autopilot/deployment-process -#### 2.3.2 Managing connections from Windows components to Microsoft services +#### _2.3.2 Managing connections from Windows components to Microsoft services_ Administrators can manage the data sent from their organization to Microsoft by configuring settings associated with the functionality provided by Windows components. For more details, see [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services). This topic includes the different methods available on how to configure each setting, the impact to functionality, and which versions of Windows that are applicable. -#### 2.3.3 Managing Windows 10 connections +#### _2.3.3 Managing Windows 10 connections_ Some Windows components, apps, and related services transfer data to Microsoft network endpoints. An administrator may want to block these endpoints for their organization to meet their specific compliance objectives. -[Manage connection endpoints for Windows 10, version 1903](manage-windows-1903-endpoints) provides a list of endpoints for the latest Windows 10 release, along with descriptions of any functionality that would be impacted by restricting data collection. Details for additional Windows versions can be found on the Windows Privacy site under the Manage Windows 10 connection endpoints section of the left-hand navigation menu. +[Manage connection endpoints for Windows 10, version 1903](manage-windows-1903-endpoints) provides a list of endpoints for the latest Windows 10 release, along with descriptions of any functionality that would be impacted by restricting data collection. Details for additional Windows versions can be found on the [Windows Privacy site](https://docs.microsoft.com/windows/privacy/) under the **Manage Windows 10 connection endpoints** section of the left-hand navigation menu. -#### 2.3.4 Limited functionality baseline +#### _2.3.4 Limited functionality baseline_ An organization may want to further minimize the amount of data sent back to Microsoft or shared with Microsoft apps by managing the connections and configuring additional settings on their devices. Similar to [Windows security baselines](https://docs.microsoft.com/windows/security/threat-protection/windows-security-baselines), Microsoft has released a limited functionality baseline focused on configuring settings to minimize the data sent back to Microsoft. However, the functionality of the device could be impacted by applying these settings. The [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services) article provides details on how to apply the baseline, along with the full list of settings covered in the baseline and the functionality that would be impacted. Administrators that don’t want to apply the baseline can still find details on how to configure each setting individually to find the right balance between data sharing and impact to functionality for their organization. >[!IMPORTANT] >We recommend that you fully test any modifications to these settings before deploying them in your organization. -#### 2.3.5 Diagnostic data: Managing notifications for change of level at logon +#### _2.3.5 Diagnostic data: Managing notifications for change of level at logon_ Starting with Windows 10, version 1803, if an administrator modifies the diagnostic data collection setting, users are notified of this change during the initial device sign in. For example, if you configure the device to send optional diagnostic data, users will be notified the next time they sign into the device. You can disable these notifications by using the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds** > **Configure telemetry opt-in change notifications** or the MDM policy `ConfigureTelemetryOptInChangeNotification`. -#### 2.3.6 Diagnostic data: Managing end user choice for changing the setting +#### _2.3.6 Diagnostic data: Managing end user choice for changing the setting_ Windows 10, version 1803 and newer allows users to change their diagnostic data level to a lower setting than what their administrator has set. For example, if you have configured the device to send optional diagnostic data, a user can change the setting so that only required diagnostic data is sent by going into **Settings** > **Privacy** > **Diagnostics & feedback**. Administrators can restrict a user’s ability to change the setting using **Setting** > **Privacy** by setting the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds** > **Configure telemetry opt-in setting user interface** or the MDM policy `ConfigureTelemetryOptInSettingsUx`. -#### 2.3.7 Diagnostic data: Managing device-based data delete +#### _2.3.7 Diagnostic data: Managing device-based data delete_ Windows 10, version 1809 and newer allows a user to delete diagnostic data collected from their device by using **Settings** > **Privacy** > **Diagnostic & feedback** and clicking the **Delete** button under the **Delete diagnostic data** heading. An administrator can also delete diagnostic data for a device using the [Clear-WindowsDiagnosticData](https://docs.microsoft.com/powershell/module/windowsdiagnosticdata/Clear-WindowsDiagnosticData?view=win10-ps) PowerShell cmdlet. @@ -191,7 +192,7 @@ An administrator can configure privacy-related settings, such as choosing to onl ### 5.3 Desktop Analytics -[Desktop Analytics](https://docs.microsoft.com/en-us/mem/configmgr/desktop-analytics/overview) is a set of solutions for Azure Portal that provide you with extensive data about the state of devices in your deployment. Desktop Analytics is a separate offering from Windows 10 and is dependent on enabling a minimum set of data collection on the device to function. +[Desktop Analytics](https://docs.microsoft.com/mem/configmgr/desktop-analytics/overview) is a set of solutions for Azure Portal that provide you with extensive data about the state of devices in your deployment. Desktop Analytics is a separate offering from Windows 10 and is dependent on enabling a minimum set of data collection on the device to function. ### 5.4 Microsoft Managed Desktop @@ -202,7 +203,7 @@ An administrator can configure privacy-related settings, such as choosing to onl * [Microsoft Trust Center: GDPR Overview](https://www.microsoft.com/trust-center/privacy/gdpr-overview) * [Microsoft Trust Center: Privacy at Microsoft](https://www.microsoft.com/trust-center/privacy) * [Windows IT Pro Docs](https://docs.microsoft.com/windows/#pivot=it-pro) -* [Microsoft Privacy Statement](https://privacy.microsoft.com/en-US/privacystatement) +* [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement) * [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services) * [Privacy at Microsoft](https://privacy.microsoft.com/privacy-report) * [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection) From fec6e45f5afe9a9fcbb7846b4e8daa5c7352cb10 Mon Sep 17 00:00:00 2001 From: Sinead O'Sullivan Date: Fri, 5 Jun 2020 21:50:20 +0100 Subject: [PATCH 007/589] fixes from build report --- ...s-to-windows-diagnostic-data-collection.md | 2 +- ...ws-diagnostic-data-in-your-organization.md | 14 +++++------ .../windows-10-and-privacy-compliance.md | 24 +++++++++---------- 3 files changed, 20 insertions(+), 20 deletions(-) diff --git a/windows/privacy/changes-to-windows-diagnostic-data-collection.md b/windows/privacy/changes-to-windows-diagnostic-data-collection.md index fa81776ddf..80152039e2 100644 --- a/windows/privacy/changes-to-windows-diagnostic-data-collection.md +++ b/windows/privacy/changes-to-windows-diagnostic-data-collection.md @@ -86,5 +86,5 @@ With the Enhanced diagnostic data level being split out into new policies, we ar Customers who use services that depend on Windows diagnostic data, such as Microsoft Managed Desktop or Desktop Analytics, may be impacted by the functional changes when they are released. These services will be updated to address these changes and guidance will be published on how to configure them properly. The following provides a list of the known changes: -- [Microsoft Managed Desktop](http://aka.ms/mmd-diagnostic-data-level) +- [Microsoft Managed Desktop](https://aka.ms/mmd-diagnostic-data-level) - Desktop Analytics \ No newline at end of file diff --git a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md index ee94dae814..7528588be8 100644 --- a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md +++ b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md @@ -26,7 +26,7 @@ ms.date: 04/29/2019 This article applies to Windows 10, Windows Server, Surface Hub, and Hololens diagnostic data only. It describes the types of diagnostic data that’s sent back to Microsoft and the ways you can manage it within your organization. Microsoft uses the data to quickly identify and address issues affecting its customers. -IMPORTANT: Microsoft is [increasing transparency](https://blogs.microsoft.com/on-the-issues/2019/04/30/increasing-transparency-and-customer-control-over-data/) by categorizing the data we collect as required or optional. Windows 10 is in the process of updating devices to reflect this new categorization, and during this transition Basic diagnostic data will be recategorized as Required diagnostic data and Full diagnostic data will be recategorized as Optional diagnostic data. For more information, see [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection). +IMPORTANT: Microsoft is [increasing transparency](https://blogs.microsoft.com/on-the-issues/2019/04/30/increasing-transparency-and-customer-control-over-data/) by categorizing the data we collect as required or optional. Windows 10 is in the process of updating devices to reflect this new categorization, and during this transition Basic diagnostic data will be recategorized as Required diagnostic data and Full diagnostic data will be recategorized as Optional diagnostic data. For more information, see [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection.md). ## Overview @@ -61,7 +61,7 @@ Use the following sections to learn more about how Microsoft handles diagnostic Depending on the diagnostic data settings on the device, diagnostic data can be collected via the following methods: - Small payloads of structured information referred to as diagnostic data events, managed by the Connected User Experiences and Telemetry component. - Diagnostic logs for additional troubleshooting, also managed by the Connected User Experience and Telemetry component. - - Crash reporting and crash dumps, managed by [Windows Error Reporting](https://docs.microsoft.com/en-us/windows/win32/wer/windows-error-reporting). + - Crash reporting and crash dumps, managed by [Windows Error Reporting](https://docs.microsoft.com/windows/win32/wer/windows-error-reporting). Later in this document we provide further details about how to control what’s collected and what data can be included in these different types of diagnostic data. @@ -71,7 +71,7 @@ All diagnostic data is encrypted using TLS and uses certificate pinning during t ### Endpoints -The following table lists the endpoints related how you can manage the collection and control of diagnostic data. For more information around the endpoints that are used to send data back to Microsoft, see [Manage connection endpoints for Windows 10 Enterprise, version 1903](manage-windows-1903-endpoints). +The following table lists the endpoints related how you can manage the collection and control of diagnostic data. For more information around the endpoints that are used to send data back to Microsoft, see [Manage connection endpoints for Windows 10 Enterprise, version 1903](manage-windows-1903-endpoints.md). | Windows service | Endpoint | | - | - | @@ -90,7 +90,7 @@ The following table lists the endpoints related how you can manage the collectio | | weus2watcab01.blob.core.windows.net | | | weus2watcab02.blob.core.windows.net | |Authentication | login.live.com

IMPORTANT: This endpoint is used for device authentication. We do not recommend disabling this endpoint. -| [Online Crash Analysis](https://docs.microsoft.com/en-us/windows/win32/dxtecharts/crash-dump-analysis) | oca.telemetry.microsoft.com | +| [Online Crash Analysis](https://docs.microsoft.com/windows/win32/dxtecharts/crash-dump-analysis) | oca.telemetry.microsoft.com | | | oca.microsoft.com | | kmwatsonc.telemetry.microsoft.com | | *-kmwatsonc.telemetry.microsoft.com @@ -166,7 +166,7 @@ Required diagnostic data includes: #### Enhanced diagnostic data >[!NOTE] -We’re simplifying your diagnostic data controls by moving from four diagnostic data controls to three: **Diagnostic data off**, **Required**, and **Optional**. making changes to the enhanced diagnostic data level. For more info about this change, see [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection). +We’re simplifying your diagnostic data controls by moving from four diagnostic data controls to three: **Diagnostic data off**, **Required**, and **Optional**. making changes to the enhanced diagnostic data level. For more info about this change, see [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection.md). Enhanced diagnostic data includes data about the websites you browse, how Windows and apps are used and how they perform, and device activity. The additional data helps Microsoft to fix and improve products and services for all users. When you choose to send enhanced diagnostic data, required diagnostic data will always be included, and we collect the following additional information: - Operating system events that help to gain insights into different areas of the operating system, including networking, Hyper-V, Cortana, storage, file system, and other components. @@ -192,7 +192,7 @@ Optional diagnostic data, previously labeled as **Full**, includes more detailed Use the steps in this section to configure the diagnostic data settings for Windows and Windows Server in your organization. >[!IMPORTANT] ->These diagnostic data settings only apply to components, features, and apps that are considered a part of the Windows operating system. Third-party apps and other Microsoft apps, such as Microsoft Office, that customers install may also collect and send diagnostic data using their own controls. You should work with your app vendors to understand their diagnostic data policy, and how you can opt in or opt out. For more information on how Microsoft Office uses diagnostic data, see [Overview of privacy controls for Microsoft 365 Apps for enterprise](https://docs.microsoft.com/deployoffice/privacy/overview-privacy-controls). If you would like to control Windows data collection that is not Windows diagnostic data, see [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services). +>These diagnostic data settings only apply to components, features, and apps that are considered a part of the Windows operating system. Third-party apps and other Microsoft apps, such as Microsoft Office, that customers install may also collect and send diagnostic data using their own controls. You should work with your app vendors to understand their diagnostic data policy, and how you can opt in or opt out. For more information on how Microsoft Office uses diagnostic data, see [Overview of privacy controls for Microsoft 365 Apps for enterprise](https://docs.microsoft.com/deployoffice/privacy/overview-privacy-controls). If you would like to control Windows data collection that is not Windows diagnostic data, see [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md). You can configure your device's diagnostic data settings using the management tools you’re already using, such as Group Policy or MDM. @@ -227,4 +227,4 @@ You can use Group Policy to set your organization’s diagnostic data setting: #### Limit optional diagnostic data for Desktop Analytics -For more information about how to limit the diagnostic data to the minimum required by Desktop Analytics, see [Enable data sharing for Desktop Analytics](https://docs.microsoft.com/en-us/mem/configmgr/desktop-analytics/enable-data-sharing). \ No newline at end of file +For more information about how to limit the diagnostic data to the minimum required by Desktop Analytics, see [Enable data sharing for Desktop Analytics](https://docs.microsoft.com/mem/configmgr/desktop-analytics/enable-data-sharing). \ No newline at end of file diff --git a/windows/privacy/windows-10-and-privacy-compliance.md b/windows/privacy/windows-10-and-privacy-compliance.md index 0ecbeaf982..394b7f44b3 100644 --- a/windows/privacy/windows-10-and-privacy-compliance.md +++ b/windows/privacy/windows-10-and-privacy-compliance.md @@ -26,7 +26,7 @@ Applies to: ## Overview >[!IMPORTANT] ->Microsoft is [increasing transparency](https://blogs.microsoft.com/on-the-issues/2019/04/30/increasing-transparency-and-customer-control-over-data/) by categorizing the data we collect as required or optional. Windows 10 is in the process of updating devices to reflect this new categorization, and during this transition Basic diagnostic data will be recategorized as Required diagnostic data and Full diagnostic data will be recategorized as Optional diagnostic data. For more information, see [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection). +>Microsoft is [increasing transparency](https://blogs.microsoft.com/on-the-issues/2019/04/30/increasing-transparency-and-customer-control-over-data/) by categorizing the data we collect as required or optional. Windows 10 is in the process of updating devices to reflect this new categorization, and during this transition Basic diagnostic data will be recategorized as Required diagnostic data and Full diagnostic data will be recategorized as Optional diagnostic data. For more information, see [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection.md). At Microsoft, we are deeply committed to data privacy across all our products and services. With this guide, we provide administrators and compliance professionals with data privacy considerations for Windows 10. @@ -45,7 +45,7 @@ When setting up a device, a user can configure their privacy settings. Those pri The following table provides an overview of the Windows 10 privacy settings presented during the device setup experience that involve processing personal data and where to find additional information. > [!NOTE] -> This table is limited to the privacy settings that are available as part of setting up a Windows 10 device (Windows 10, version 1809 and newer). For the full list of settings that involve data collection, [see Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services). +> This table is limited to the privacy settings that are available as part of setting up a Windows 10 device (Windows 10, version 1809 and newer). For the full list of settings that involve data collection, [see Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md). | Feature/Setting | Description | Supporting Content | Privacy Statement | | --- | --- | --- | --- | @@ -61,9 +61,9 @@ The following table provides an overview of the Windows 10 privacy settings pres ### 1.2 Data collection monitoring -[Diagnostic Data Viewer (DDV)](diagnostic-data-viewer-overview) is a Microsoft Store app (available in Windows 10, version 1803 and newer) that lets a user review the Windows diagnostic data that is being collected on their Windows 10 device and sent to Microsoft in real-time. DDV groups the information into simple categories that describe the data that’s being collected. +[Diagnostic Data Viewer (DDV)](diagnostic-data-viewer-overview.md) is a Microsoft Store app (available in Windows 10, version 1803 and newer) that lets a user review the Windows diagnostic data that is being collected on their Windows 10 device and sent to Microsoft in real-time. DDV groups the information into simple categories that describe the data that’s being collected. -An administrator can also use the Diagnostic Data Viewer for PowerShell module to view the diagnostic data collected from the device instead of using the Diagnostic Data Viewer UI. The [Diagnostic Data Viewer for PowerShell Overview](microsoft-diagnosticdataviewer) provides further information. +An administrator can also use the Diagnostic Data Viewer for PowerShell module to view the diagnostic data collected from the device instead of using the Diagnostic Data Viewer UI. The [Diagnostic Data Viewer for PowerShell Overview](microsoft-diagnosticdataviewer.md) provides further information. ## 2. Windows 10 data collection management @@ -81,7 +81,7 @@ Administrators can configure and control privacy settings across their organizat The following table provides an overview of the privacy settings discussed earlier in this document with details on how to configure these policies. The table also provides information on what the default value would be for each of these privacy settings if you do not manage the setting by using policy and suppress the Out-of-box Experience (OOBE) during device setup. If you’re interested in minimizing data collection, we also provide the recommended value to set. > [!NOTE] -> This is not a complete list of settings that involve connecting to Microsoft services. To see a more detailed list, see [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services). +> This is not a complete list of settings that involve connecting to Microsoft services. To see a more detailed list, see [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md). | Feature/Setting | GP/MDM Documentation | Default State if the Setup experience is suppressed | State to stop/minimize data collection | |---|---|---|---| @@ -115,17 +115,17 @@ You can use the following articles to learn more about Autopilot and how to use Administrators can manage the data sent from their organization to Microsoft by configuring settings associated with the functionality provided by Windows components. -For more details, see [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services). This topic includes the different methods available on how to configure each setting, the impact to functionality, and which versions of Windows that are applicable. +For more details, see [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md). This topic includes the different methods available on how to configure each setting, the impact to functionality, and which versions of Windows that are applicable. #### _2.3.3 Managing Windows 10 connections_ Some Windows components, apps, and related services transfer data to Microsoft network endpoints. An administrator may want to block these endpoints for their organization to meet their specific compliance objectives. -[Manage connection endpoints for Windows 10, version 1903](manage-windows-1903-endpoints) provides a list of endpoints for the latest Windows 10 release, along with descriptions of any functionality that would be impacted by restricting data collection. Details for additional Windows versions can be found on the [Windows Privacy site](https://docs.microsoft.com/windows/privacy/) under the **Manage Windows 10 connection endpoints** section of the left-hand navigation menu. +[Manage connection endpoints for Windows 10, version 1903](manage-windows-1903-endpoints.md) provides a list of endpoints for the latest Windows 10 release, along with descriptions of any functionality that would be impacted by restricting data collection. Details for additional Windows versions can be found on the [Windows Privacy site](https://docs.microsoft.com/windows/privacy/) under the **Manage Windows 10 connection endpoints** section of the left-hand navigation menu. #### _2.3.4 Limited functionality baseline_ -An organization may want to further minimize the amount of data sent back to Microsoft or shared with Microsoft apps by managing the connections and configuring additional settings on their devices. Similar to [Windows security baselines](https://docs.microsoft.com/windows/security/threat-protection/windows-security-baselines), Microsoft has released a limited functionality baseline focused on configuring settings to minimize the data sent back to Microsoft. However, the functionality of the device could be impacted by applying these settings. The [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services) article provides details on how to apply the baseline, along with the full list of settings covered in the baseline and the functionality that would be impacted. Administrators that don’t want to apply the baseline can still find details on how to configure each setting individually to find the right balance between data sharing and impact to functionality for their organization. +An organization may want to further minimize the amount of data sent back to Microsoft or shared with Microsoft apps by managing the connections and configuring additional settings on their devices. Similar to [Windows security baselines](https://docs.microsoft.com/windows/security/threat-protection/windows-security-baselines), Microsoft has released a limited functionality baseline focused on configuring settings to minimize the data sent back to Microsoft. However, the functionality of the device could be impacted by applying these settings. The [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) article provides details on how to apply the baseline, along with the full list of settings covered in the baseline and the functionality that would be impacted. Administrators that don’t want to apply the baseline can still find details on how to configure each setting individually to find the right balance between data sharing and impact to functionality for their organization. >[!IMPORTANT] >We recommend that you fully test any modifications to these settings before deploying them in your organization. @@ -155,7 +155,7 @@ Users can delete their device-based data by going to **Settings** > **Privacy** ### 3.2 View -The [Diagnostic Data Viewer (DDV)](diagnostic-data-viewer-overview) provides a view into the diagnostic data being collected from a Windows 10 device. Administrators can also use the [Get-DiagnosticData](microsoft-diagnosticdataviewer.md#install-and-use-the-diagnostic-data-viewer-for-powershell) PowerShell cmdlet. +The [Diagnostic Data Viewer (DDV)](diagnostic-data-viewer-overview.md) provides a view into the diagnostic data being collected from a Windows 10 device. Administrators can also use the [Get-DiagnosticData](microsoft-diagnosticdataviewer.md#install-and-use-the-diagnostic-data-viewer-for-powershell) PowerShell cmdlet. ### 3.3 Export @@ -204,7 +204,7 @@ An administrator can configure privacy-related settings, such as choosing to onl * [Microsoft Trust Center: Privacy at Microsoft](https://www.microsoft.com/trust-center/privacy) * [Windows IT Pro Docs](https://docs.microsoft.com/windows/#pivot=it-pro) * [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement) -* [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services) +* [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) * [Privacy at Microsoft](https://privacy.microsoft.com/privacy-report) -* [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection) -* [Microsoft Service Trust Portal](https://servicetrust.microsoft.com/) +* [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection,md) +* [Microsoft Service Trust Portal](https://servicetrust.microsoft.com/) \ No newline at end of file From 53124cd9bfcb21ae085c58adb0df209704f43e1d Mon Sep 17 00:00:00 2001 From: Sinead O'Sullivan Date: Fri, 5 Jun 2020 22:05:50 +0100 Subject: [PATCH 008/589] Update windows-10-and-privacy-compliance.md --- windows/privacy/windows-10-and-privacy-compliance.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/privacy/windows-10-and-privacy-compliance.md b/windows/privacy/windows-10-and-privacy-compliance.md index 394b7f44b3..570cadcfe4 100644 --- a/windows/privacy/windows-10-and-privacy-compliance.md +++ b/windows/privacy/windows-10-and-privacy-compliance.md @@ -159,7 +159,7 @@ The [Diagnostic Data Viewer (DDV)](diagnostic-data-viewer-overview.md) provides ### 3.3 Export -The [Diagnostic Data Viewer (DDV)](diagnostic-data-viewer-overview) provides the ability to export the diagnostic data captured while the app is running, by clicking the **Export** data button in the top menu. Administrators can also use the [Get-DiagnosticData](microsoft-diagnosticdataviewer.md#install-and-use-the-diagnostic-data-viewer-for-powershell) PowerShell cmdlet script. +The [Diagnostic Data Viewer (DDV)](diagnostic-data-viewer-overview.md) provides the ability to export the diagnostic data captured while the app is running, by clicking the **Export** data button in the top menu. Administrators can also use the [Get-DiagnosticData](microsoft-diagnosticdataviewer.md#install-and-use-the-diagnostic-data-viewer-for-powershell) PowerShell cmdlet script. ### 3.4 Devices connected to a Microsoft account @@ -206,5 +206,5 @@ An administrator can configure privacy-related settings, such as choosing to onl * [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement) * [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) * [Privacy at Microsoft](https://privacy.microsoft.com/privacy-report) -* [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection,md) +* [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection.md) * [Microsoft Service Trust Portal](https://servicetrust.microsoft.com/) \ No newline at end of file From 46c05757ef25d2519db0a35b80124e7bde432f8a Mon Sep 17 00:00:00 2001 From: Sinead O'Sullivan Date: Sun, 7 Jun 2020 09:33:00 +0100 Subject: [PATCH 009/589] fixed bookmarks --- .../privacy/changes-to-windows-diagnostic-data-collection.md | 5 +++-- ...configure-windows-diagnostic-data-in-your-organization.md | 2 +- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/windows/privacy/changes-to-windows-diagnostic-data-collection.md b/windows/privacy/changes-to-windows-diagnostic-data-collection.md index 80152039e2..816f0bc2c5 100644 --- a/windows/privacy/changes-to-windows-diagnostic-data-collection.md +++ b/windows/privacy/changes-to-windows-diagnostic-data-collection.md @@ -25,8 +25,8 @@ Microsoft is deeply committed to providing you with effective controls over your This topic is meant for IT administrators and explains the changes Windows is making to align to the new data collection taxonomy. These changes are focused in two areas: -- [Taxonomy changes](#Taxonomy-changes) -- [Behavioral changes](#Behaviorial-changes) +- [Taxonomy changes](#taxonomy-changes) +- [Behavioral changes](#behaviorial-changes) > [!NOTE] > You can test the behavioral changes now in Windows 10 Insider Preview build 19577 and later. @@ -52,6 +52,7 @@ Starting in Windows 10, version 1903 and newer, both the **Out-of-Box-Experience In an upcoming release of Windows 10, we’re simplifying your diagnostic data controls by moving from four diagnostic data controls to three: **Diagnostic data off**, **Required**, and **Optional**. If your devices are set to **Enhanced** when they are upgraded, the device settings will be migrated to the more privacy-preserving setting of **Required diagnostic data**, which means that analytic services that leverage enhanced data collection may not work properly. For a list of services, see the section named, **Services that rely on Enhanced diagnostic data**, later in this topic. Administrators should read through the details and determine whether to apply these new policies to restore the same collection settings as they had before this change. For a list of steps, see the section named **Configure a Windows 10 device to limit diagnostics**. For more information on services that rely on Enhanced diagnostic data, see **Services that rely on Enhanced diagnostic data**. Additionally, you will see the following policy changes in an upcoming release of Windows 10: + | Policy type | Current policy | Renamed policy | | --- | --- | --- | | Group Policy | Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Allow Telemetry**
  • **0 Security**
  • **Basic**
  • **Enhanced**
  • **Full**
| Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Allow Diagnostic Data**
  • **Diagnostic data off (not recommended)**
  • **Send required diagnostic data**
  • **Send optional diagnostic data**
| diff --git a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md index 7528588be8..f8a87eb5b8 100644 --- a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md +++ b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md @@ -166,7 +166,7 @@ Required diagnostic data includes: #### Enhanced diagnostic data >[!NOTE] -We’re simplifying your diagnostic data controls by moving from four diagnostic data controls to three: **Diagnostic data off**, **Required**, and **Optional**. making changes to the enhanced diagnostic data level. For more info about this change, see [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection.md). +>We’re simplifying your diagnostic data controls by moving from four diagnostic data controls to three: **Diagnostic data off**, **Required**, and **Optional**. making changes to the enhanced diagnostic data level. For more info about this change, see [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection.md). Enhanced diagnostic data includes data about the websites you browse, how Windows and apps are used and how they perform, and device activity. The additional data helps Microsoft to fix and improve products and services for all users. When you choose to send enhanced diagnostic data, required diagnostic data will always be included, and we collect the following additional information: - Operating system events that help to gain insights into different areas of the operating system, including networking, Hyper-V, Cortana, storage, file system, and other components. From b35b67d5b5e19289260882ddfb1293bfae6d14f8 Mon Sep 17 00:00:00 2001 From: Sinead O'Sullivan Date: Sun, 7 Jun 2020 19:55:34 +0100 Subject: [PATCH 010/589] bookmarkupdate --- windows/privacy/windows-10-and-privacy-compliance.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/windows-10-and-privacy-compliance.md b/windows/privacy/windows-10-and-privacy-compliance.md index 570cadcfe4..ac0fc0d1bc 100644 --- a/windows/privacy/windows-10-and-privacy-compliance.md +++ b/windows/privacy/windows-10-and-privacy-compliance.md @@ -88,7 +88,7 @@ The following table provides an overview of the privacy settings discussed earli | [Speech](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-speech) | Group Policy:
**Computer Configuration** > **Control Panel** > **Regional and Language Options** > **Allow users to enable online speech recognition services**

MDM: [Privacy/AllowInputPersonalization](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-privacy#privacy-allowinputpersonalization) | Off | Off | | [Location](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-location) | Group Policy:
**Computer Configuration** > **Windows Components** > **App Privacy** > **Let Windows apps access location**

MDM: [Privacy/LetAppsAccessLocation](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-privacy#privacy-allowinputpersonalization) | Off (Windows 10, version 1903 and later) | Off | | [Find my device](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#find-my-device) | Group Policy:
**Computer Configuration** > **Windows Components** > **Find My Device** > **Turn On/Off Find My Device**

MDM: [Experience/AllFindMyDevice](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-experience#experience-allowfindmydevice) | Off | Off | -| [Diagnostic Data](configure-windows-diagnostic-data-in-your-organization.md#enterprise-management) | Group Policy:
**Computer Configuration** > **Windows Components** > **Data Collection and Preview Builds** > **Allow Telemetry**

MDM: [System/AllowTelemetry](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-allowtelemetry) | Desktop editions:
Required diagnostic data (Windows 10, version 1903 and later)

Server editions:
Required diagnostic data | Security and block endpoints | +| [Diagnostic Data](configure-windows-diagnostic-data-in-your-organization.md##manage-enterprise-diagnostic-data) | Group Policy:
**Computer Configuration** > **Windows Components** > **Data Collection and Preview Builds** > **Allow Telemetry**

MDM: [System/AllowTelemetry](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-allowtelemetry) | Desktop editions:
Required diagnostic data (Windows 10, version 1903 and later)

Server editions:
Required diagnostic data | Security and block endpoints | | [Inking and typing diagnostics](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-ink) | Group Policy:
**Computer Configuration** > **Windows Components** > **Text Input** > **Improve inking and typing recognition**

MDM: [TextInput/AllowLinguisticDataCollection](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-textinput#textinput-allowlinguisticdatacollection) | Off (Windows 10, version 1809 and later) | Off | | Tailored Experiences | Group Policy:
**User Configuration** > **Windows Components** > **Cloud Content** > **Do not use diagnostic data for tailored experiences**

MDM: [Experience/AllowTailoredExperiencesWithDiagnosticData](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-experience#experience-allowtailoredexperienceswithdiagnosticdata) | Off | Off | | Advertising ID | Group Policy:
**Computer Configuration** > **System** > **User Profile** > **Turn off the advertising Id**

MDM: [Privacy/DisableAdvertisingId](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-privacy#privacy-disableadvertisingid) | Off | Off | From a613da634debef3591449a6ef0c170e05c0e4a1e Mon Sep 17 00:00:00 2001 From: Sinead O'Sullivan Date: Mon, 8 Jun 2020 12:11:47 +0100 Subject: [PATCH 011/589] edit review updates --- ...anges-to-windows-diagnostic-data-collection.md | 10 +++++----- ...indows-diagnostic-data-in-your-organization.md | 15 ++++++--------- 2 files changed, 11 insertions(+), 14 deletions(-) diff --git a/windows/privacy/changes-to-windows-diagnostic-data-collection.md b/windows/privacy/changes-to-windows-diagnostic-data-collection.md index 816f0bc2c5..8ccdc3aa0d 100644 --- a/windows/privacy/changes-to-windows-diagnostic-data-collection.md +++ b/windows/privacy/changes-to-windows-diagnostic-data-collection.md @@ -55,10 +55,10 @@ Additionally, you will see the following policy changes in an upcoming release o | Policy type | Current policy | Renamed policy | | --- | --- | --- | -| Group Policy | Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Allow Telemetry**
  • **0 Security**
  • **Basic**
  • **Enhanced**
  • **Full**
| Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Allow Diagnostic Data**
  • **Diagnostic data off (not recommended)**
  • **Send required diagnostic data**
  • **Send optional diagnostic data**
| +| Group Policy | Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Allow Telemetry**
  • **0 - Security**
  • **1 - Basic**
  • **2 - Enhanced**
  • **3 - Full**
| Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Allow Diagnostic Data**
  • **Diagnostic data off (not recommended)**
  • **Send required diagnostic data**
  • **Send optional diagnostic data**
| | Group Policy |Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Configure telemetry opt-in settings user interface**| Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Configure diagnostic data opt-in settings user interface** | | Group Policy |Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Configure telemetry opt-in change notifications**| Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Configure diagnostic data opt-in change notifications** | -| MDM | System/AllowTelemetry
  • **0**
  • **2**
  • **3**
  • **4**
| +| MDM | System/AllowTelemetry
  • **0**
  • **1**
  • **2**
  • **3**
| A final set of changes includes two new policies that can help you fine-tune diagnostic data collection within your organization. These policies let you limit the amount of optional diagnostic data that’s sent back to Microsoft. @@ -74,11 +74,11 @@ A final set of changes includes two new policies that can help you fine-tune dia ## Configure a Windows 10 device to limit diagnostics -With the Enhanced diagnostic data level being split out into new policies, we are providing additional controls to manage what types of dumps are collected and whether to send additional diagnostic logs. Here are some steps on how to configure them: +With the Enhanced diagnostic data level being split out into new policies, we're providing additional controls to manage what types of dumps are collected and whether to send additional diagnostic logs. Here are some steps on how to configure them: 1. Choose to send optional diagnostic data by setting one of the following policies: - - Group Policy: Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Allow Diagnostic Data**. Set the policy value to **Send optional diagnostic data** - - MDM: System/AllowTelemetry. Set the policy value to 3. + - Group Policy: Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Allow Diagnostic Data**. Set the policy value to **Send optional diagnostic data**. + - MDM: System/AllowTelemetry. Set the policy value to **3**. 2. Enable the following Group Policy: Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Limit Dump Collection** 3. Enable the following Group Policy: Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Limit Diagnostic Log Collection** diff --git a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md index f8a87eb5b8..9dbc7e0766 100644 --- a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md +++ b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md @@ -26,7 +26,8 @@ ms.date: 04/29/2019 This article applies to Windows 10, Windows Server, Surface Hub, and Hololens diagnostic data only. It describes the types of diagnostic data that’s sent back to Microsoft and the ways you can manage it within your organization. Microsoft uses the data to quickly identify and address issues affecting its customers. -IMPORTANT: Microsoft is [increasing transparency](https://blogs.microsoft.com/on-the-issues/2019/04/30/increasing-transparency-and-customer-control-over-data/) by categorizing the data we collect as required or optional. Windows 10 is in the process of updating devices to reflect this new categorization, and during this transition Basic diagnostic data will be recategorized as Required diagnostic data and Full diagnostic data will be recategorized as Optional diagnostic data. For more information, see [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection.md). +>[!IMPORTANT] +>Microsoft is [increasing transparency](https://blogs.microsoft.com/on-the-issues/2019/04/30/increasing-transparency-and-customer-control-over-data/) by categorizing the data we collect as required or optional. Windows 10 is in the process of updating devices to reflect this new categorization, and during this transition Basic diagnostic data will be recategorized as Required diagnostic data and Full diagnostic data will be recategorized as Optional diagnostic data. For more information, see [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection.md). ## Overview @@ -75,12 +76,8 @@ The following table lists the endpoints related how you can manage the collectio | Windows service | Endpoint | | - | - | -|Connected User Experiences and Telemetry | v10.events.data.microsoft.com | -| | v10c.events.data.microsoft.com | -| | v10.vortex-win.data.microsoft.com | -| [Windows Error Reporting](https://docs.microsoft.com/windows/win32/wer/windows-error-reporting) | watson.telemetry.microsoft.com | -| | watson.microsoft.com | -| | umwatsonc.telemetry.microsoft.com | +|Connected User Experiences and Telemetry | v10.events.data.microsoft.com

v10c.events.data.microsoft.com

v10.vortex-win.data.microsoft.com | +| [Windows Error Reporting](https://docs.microsoft.com/windows/win32/wer/windows-error-reporting) | watson.telemetry.microsoft.com

watson.microsoft.com

umwatsonc.telemetry.microsoft.com | | | umwatsonc.events.data.microsoft.com | | | *-umwatsonc.events.data.microsoft.com | | | ceuswatcab01.blob.core.windows.net | @@ -117,10 +114,10 @@ Here’s a summary of the types of data that is included with each setting: | | **Diagnostic data off (Security)** | **Required (Basic)** | **Enhanced** |**Optional (Full)**| | --- | --- | --- | --- | --- | -| **Diagnostic data events** | No Windows diagnostic data sent. | Minimum data required data to keep the device secure, up to date, and performing as expected. | Additional data about the websites you browse, how Windows and apps are used and how they perform, and device activity. The additional data helps Microsoft to fix and improve products and services for all users. | Additional data about the websites you browse, how Windows and apps are used and how they perform. This data also includes data about device activity, and enhanced error reporting that helps Microsoft to fix and improve products and services for all users.| +| **Diagnostic data events** | No Windows diagnostic data sent. | Minimum data required to keep the device secure, up to date, and performing as expected. | Additional data about the websites you browse, how Windows and apps are used and how they perform, and device activity. The additional data helps Microsoft to fix and improve products and services for all users. | Additional data about the websites you browse, how Windows and apps are used and how they perform. This data also includes data about device activity, and enhanced error reporting that helps Microsoft to fix and improve products and services for all users.| | **Crash Metadata** | N/A | Yes | Yes | Yes | | **Crash Dumps** | N/A | No | Triage dumps only

For more information about crash dumps, see [Windows Error Reporting](https://docs.microsoft.com/windows/win32/wer/windows-error-reporting). | Full memory dumps

For more information about crash dumps, see [Windows Error Reporting](https://docs.microsoft.com/windows/win32/wer/windows-error-reporting). | -| **Crash Metadata** | N/A | No | No | No | +| **Diagnostic logs** | N/A | No | No | No | | **Data collection** | N/A | 100% | Sampling applies | Sampling applies | From 28952fbc2579b3ef555f8426dd5dac68cc0f06a0 Mon Sep 17 00:00:00 2001 From: Sinead O'Sullivan Date: Mon, 8 Jun 2020 12:58:49 +0100 Subject: [PATCH 012/589] Update configure-windows-diagnostic-data-in-your-organization.md --- ...ws-diagnostic-data-in-your-organization.md | 47 ++++++++----------- 1 file changed, 19 insertions(+), 28 deletions(-) diff --git a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md index 9dbc7e0766..4dbb71e72a 100644 --- a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md +++ b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md @@ -77,21 +77,13 @@ The following table lists the endpoints related how you can manage the collectio | Windows service | Endpoint | | - | - | |Connected User Experiences and Telemetry | v10.events.data.microsoft.com

v10c.events.data.microsoft.com

v10.vortex-win.data.microsoft.com | -| [Windows Error Reporting](https://docs.microsoft.com/windows/win32/wer/windows-error-reporting) | watson.telemetry.microsoft.com

watson.microsoft.com

umwatsonc.telemetry.microsoft.com | -| | umwatsonc.events.data.microsoft.com | -| | *-umwatsonc.events.data.microsoft.com | -| | ceuswatcab01.blob.core.windows.net | -| | ceuswatcab02.blob.core.windows.net | -| | eaus2watcab01.blob.core.windows.net | -| | eaus2watcab02.blob.core.windows.net | -| | weus2watcab01.blob.core.windows.net | -| | weus2watcab02.blob.core.windows.net | -|Authentication | login.live.com

IMPORTANT: This endpoint is used for device authentication. We do not recommend disabling this endpoint. -| [Online Crash Analysis](https://docs.microsoft.com/windows/win32/dxtecharts/crash-dump-analysis) | oca.telemetry.microsoft.com | -| | oca.microsoft.com -| | kmwatsonc.telemetry.microsoft.com -| | *-kmwatsonc.telemetry.microsoft.com -|Settings | settings-win.data.microsoft.com

IMPORTANT: This endpoint is used to remotely configure diagnostics-related settings and data collection. For example, we use the settings endpoint to remotely block an event from being sent back to Microsoft. We do not recommend disabling this endpoint. This endpoint does not upload Windows diagnostic data +| [Windows Error Reporting](https://docs.microsoft.com/windows/win32/wer/windows-error-reporting) | watson.telemetry.microsoft.com

watson.microsoft.com

umwatsonc.telemetry.microsoft.com

umwatsonc.events.data.microsoft.com

*-umwatsonc.events.data.microsoft.com

ceuswatcab01.blob.core.windows.net

ceuswatcab02.blob.core.windows.net

eaus2watcab01.blob.core.windows.net

eaus2watcab02.blob.core.windows.net

weus2watcab01.blob.core.windows.net

weus2watcab02.blob.core.windows.net | +|Authentication | login.live.com

+IMPORTANT: This endpoint is used for device authentication. We do not recommend disabling this endpoint.| +| [Online Crash Analysis](https://docs.microsoft.com/windows/win32/dxtecharts/crash-dump-analysis) | oca.telemetry.microsoft.com

oca.microsoft.com

kmwatsonc.telemetry.microsoft.com

*-kmwatsonc.telemetry.microsoft.com | +|Settings | settings-win.data.microsoft.com +

+IMPORTANT: This endpoint is used to remotely configure diagnostics-related settings and data collection. For example, we use the settings endpoint to remotely block an event from being sent back to Microsoft. We do not recommend disabling this endpoint. This endpoint does not upload Windows diagnostic data ### Data access @@ -101,7 +93,7 @@ The principle of least privileged access guides access to Windows diagnostic dat Microsoft believes in and practices data minimization. We strive to gather only the info we need and to store it only for as long as it’s needed to provide a service or for analysis. For more information on how long data is retained, see the section named **Our retention of personal data** in the [Microsoft Privacy Statement](https://privacy.microsoft.com/en-US/privacystatement). -#### Diagnostic data settings +## Diagnostic data settings There are four diagnostic data collection settings. Each setting is described in more detail in the sections that follow. @@ -121,14 +113,14 @@ Here’s a summary of the types of data that is included with each setting: | **Data collection** | N/A | 100% | Sampling applies | Sampling applies | -#### Diagnostic data off +### Diagnostic data off This setting was previously labeled as **Security**. When you configure this setting, no Windows diagnostic data is sent from your device. This is only available on Windows Server, Windows 10 Enterprise, and Windows 10 Education. If you choose this setting, devices in your organization will still be secure. >[!NOTE] > If your organization relies on Windows Update, the minimum recommended setting is **Required diagnostic data**. Because no Windows Update information is collected when diagnostic data is off, important information about update failures is not sent. Microsoft uses this information to fix the causes of those failures and improve the quality of our updates. -#### Required diagnostic data +### Required diagnostic data Required diagnostic data, previously labeled as **Basic**, gathers a limited set of data that’s critical for understanding the device and its configuration. This data helps to identify problems that can occur on a specific hardware or software configuration. For example, it can help determine if crashes are more frequent on devices with a specific amount of memory or that are running a specific driver version. @@ -160,7 +152,7 @@ Required diagnostic data includes: - Information about how the Microsoft Store performs, including app downloads, installations, and updates. It also includes Microsoft Store launches, page views, suspend and resumes, and obtaining licenses. -#### Enhanced diagnostic data +### Enhanced diagnostic data >[!NOTE] >We’re simplifying your diagnostic data controls by moving from four diagnostic data controls to three: **Diagnostic data off**, **Required**, and **Optional**. making changes to the enhanced diagnostic data level. For more info about this change, see [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection.md). @@ -171,7 +163,7 @@ Enhanced diagnostic data includes data about the websites you browse, how Window - Device-specific events that are specific to certain devices, such as Surface Hub and Microsoft HoloLens. For example, Microsoft HoloLens sends Holographic Processing Unit (HPU)-related events. - All crash dump types, except for heap dumps and full dumps. For more information about crash dumps, see [Windows Error Reporting](https://docs.microsoft.com/windows/win32/wer/windows-error-reporting). - #### Optional diagnostic data + ### Optional diagnostic data Optional diagnostic data, previously labeled as **Full**, includes more detailed information about your device and its settings, capabilities, and device health. Optional diagnostic data also includes data about the websites you browse, device activity, and enhanced error reporting that helps Microsoft to fix and improve products and services for all users. When you choose to send optional diagnostic data, required diagnostic data will always be included, and we collect the following additional information: @@ -184,7 +176,7 @@ Optional diagnostic data, previously labeled as **Full**, includes more detailed >[!Note] >Crash dumps collected in optional diagnostic data may unintentionally contain personal data, such as portions of memory from a document and a web page. For more information about crash dumps, see [Windows Error Reporting](https://docs.microsoft.com/windows/win32/wer/windows-error-reporting). -#### Manage enterprise diagnostic data +## Manage enterprise diagnostic data Use the steps in this section to configure the diagnostic data settings for Windows and Windows Server in your organization. @@ -205,23 +197,22 @@ Use the appropriate value in the table below when you configure the management p >[!Note] >When both the Computer Configuration policy and User Configuration policies are set, the more restrictive policy is used. -#### Use Group Policy to manage diagnostic data collection +### Use Group Policy to manage diagnostic data collection You can use Group Policy to set your organization’s diagnostic data setting: -1. From the Group Policy Management Console, go to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds**. - - 1. Double-click **Allow Telemetry**. + 1. From the Group Policy Management Console, go to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds**. + 2. Double-click **Allow Telemetry**. >[!NOTE] > If devices in your organization are running Windows 10, 1803 and newer, the user can still use Settings to set the diagnostic data setting to a more restrictive value, unless the **Configure diagnostic data opt-in settings user interface** policy is set. - 2. In the **Options** box, choose the setting that you want to configure, and then click **OK**. + 3. In the **Options** box, choose the setting that you want to configure, and then click **OK**. -#### Use MDM to manage diagnostic data collection +### Use MDM to manage diagnostic data collection [Policy Configuration Service Provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider) to apply the System/AllowTelemetry MDM policy. -#### Limit optional diagnostic data for Desktop Analytics +## Limit optional diagnostic data for Desktop Analytics For more information about how to limit the diagnostic data to the minimum required by Desktop Analytics, see [Enable data sharing for Desktop Analytics](https://docs.microsoft.com/mem/configmgr/desktop-analytics/enable-data-sharing). \ No newline at end of file From 1c3833caf2311e35f384a6425b27e04ce5e359d7 Mon Sep 17 00:00:00 2001 From: Sinead O'Sullivan Date: Mon, 8 Jun 2020 13:17:35 +0100 Subject: [PATCH 013/589] Update configure-windows-diagnostic-data-in-your-organization.md --- ...nfigure-windows-diagnostic-data-in-your-organization.md | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md index 4dbb71e72a..487554e2ef 100644 --- a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md +++ b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md @@ -78,12 +78,9 @@ The following table lists the endpoints related how you can manage the collectio | - | - | |Connected User Experiences and Telemetry | v10.events.data.microsoft.com

v10c.events.data.microsoft.com

v10.vortex-win.data.microsoft.com | | [Windows Error Reporting](https://docs.microsoft.com/windows/win32/wer/windows-error-reporting) | watson.telemetry.microsoft.com

watson.microsoft.com

umwatsonc.telemetry.microsoft.com

umwatsonc.events.data.microsoft.com

*-umwatsonc.events.data.microsoft.com

ceuswatcab01.blob.core.windows.net

ceuswatcab02.blob.core.windows.net

eaus2watcab01.blob.core.windows.net

eaus2watcab02.blob.core.windows.net

weus2watcab01.blob.core.windows.net

weus2watcab02.blob.core.windows.net | -|Authentication | login.live.com

-IMPORTANT: This endpoint is used for device authentication. We do not recommend disabling this endpoint.| +|Authentication | login.live.com



IMPORTANT: This endpoint is used for device authentication. We do not recommend disabling this endpoint.| | [Online Crash Analysis](https://docs.microsoft.com/windows/win32/dxtecharts/crash-dump-analysis) | oca.telemetry.microsoft.com

oca.microsoft.com

kmwatsonc.telemetry.microsoft.com

*-kmwatsonc.telemetry.microsoft.com | -|Settings | settings-win.data.microsoft.com -

-IMPORTANT: This endpoint is used to remotely configure diagnostics-related settings and data collection. For example, we use the settings endpoint to remotely block an event from being sent back to Microsoft. We do not recommend disabling this endpoint. This endpoint does not upload Windows diagnostic data +|Settings | settings-win.data.microsoft.com



IMPORTANT: This endpoint is used to remotely configure diagnostics-related settings and data collection. For example, we use the settings endpoint to remotely block an event from being sent back to Microsoft. We do not recommend disabling this endpoint. This endpoint does not upload Windows diagnostic data | ### Data access From c5464fa458d682f220adf24565a008c6e06febf4 Mon Sep 17 00:00:00 2001 From: Sinead O'Sullivan Date: Mon, 8 Jun 2020 15:11:18 +0100 Subject: [PATCH 014/589] editreviewupdates --- .../configure-windows-diagnostic-data-in-your-organization.md | 2 +- windows/privacy/windows-10-and-privacy-compliance.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md index 487554e2ef..baf24cbc3f 100644 --- a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md +++ b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md @@ -208,7 +208,7 @@ You can use Group Policy to set your organization’s diagnostic data setting: ### Use MDM to manage diagnostic data collection -[Policy Configuration Service Provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider) to apply the System/AllowTelemetry MDM policy. +Use [Policy Configuration Service Provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider) to apply the System/AllowTelemetry MDM policy. ## Limit optional diagnostic data for Desktop Analytics diff --git a/windows/privacy/windows-10-and-privacy-compliance.md b/windows/privacy/windows-10-and-privacy-compliance.md index ac0fc0d1bc..f9bf3793a0 100644 --- a/windows/privacy/windows-10-and-privacy-compliance.md +++ b/windows/privacy/windows-10-and-privacy-compliance.md @@ -49,7 +49,7 @@ The following table provides an overview of the Windows 10 privacy settings pres | Feature/Setting | Description | Supporting Content | Privacy Statement | | --- | --- | --- | --- | -| Diagnostic Data |

Microsoft uses diagnostic data to keep Windows secure, up to date, troubleshoot problems, and make product improvements. Regardless of what choices you make for diagnostic data collection, the device will be just as secure and will operate normally. This data is collected by Microsoft and stored with one or more unique identifiers that can help us recognize an individual user on an individual device and understand the device's service issues and use patterns.

Diagnostic data is categorized into the following:

  • **Required diagnostic data**
    Previously known as basic diagnostic data, required diagnostic data includes information about your device, its settings, capabilities, and whether it is performing properly, whether a device is ready for an update, and whether there are factors that may impede the ability to receive updates, such as low battery, limited disk space, or connectivity through a paid network. You can find out what is collected with required diagnostic data [here](https://docs.microsoft.com/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004).
  • **Optional diagnostic data**
    Previously known as full diagnostic data, optional diagnostic data includes more detailed information about your device and its settings, capabilities, and device health. When you choose to send optional diagnostic data, required diagnostic data will always be included. You can find out the types of optional diagnostic data collected [here](https://docs.microsoft.com/windows/privacy/windows-diagnostic-data).

| [Learn more](https://support.microsoft.com/4468236/diagnostics-feedback-and-privacy-in-windows-10-microsoft-privacy)

[Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#maindiagnosticsmodule) | +| Diagnostic Data |

Microsoft uses diagnostic data to keep Windows secure, up to date, troubleshoot problems, and make product improvements. Regardless of what choices you make for diagnostic data collection, the device will be just as secure and will operate normally. This data is collected by Microsoft and stored with one or more unique identifiers that can help us recognize an individual user on an individual device and understand the device's service issues and use patterns.

Diagnostic data is categorized into the following:

  • **Required diagnostic data**
    Previously known as basic diagnostic data, required diagnostic data includes information about your device, its settings, capabilities, and whether it is performing properly, whether a device is ready for an update, and whether there are factors that may impede the ability to receive updates, such as low battery, limited disk space, or connectivity through a paid network. You can find out what is collected with required diagnostic data [here](https://docs.microsoft.com/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004).
  • **Optional diagnostic data**
    Previously known as full diagnostic data, optional diagnostic data includes more detailed information about your device and its settings, capabilities, and device health. When you choose to send optional diagnostic data, required diagnostic data will always be included. You can find out the types of optional diagnostic data collected [here](https://docs.microsoft.com/windows/privacy/windows-diagnostic-data).

| [Learn more]https://support.microsoft.com/help/4468236/diagnostics-feedback-and-privacy-in-windows-10-microsoft-privacy)

[Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#maindiagnosticsmodule) | | Inking and typing diagnostics | Microsoft collects optional inking and typing diagnostic data to improve the language recognition and suggestion capabilities of apps and services running on Windows. | [Learn more](https://support.microsoft.com/help/4468236/diagnostics-feedback-and-privacy-in-windows-10-microsoft-privacy) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#maindiagnosticsmodule) | | Speech | Use your voice for dictation and to talk to Cortana and other apps that use Windows cloud-based speech recognition. Microsoft collects voice data to help improve speech services. | [Learn more](https://support.microsoft.com/help/4468250/windows-10-speech-voice-activation-inking-typing-privacy) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#mainspeechinkingtypingmodule) | | Location | Get location-based experiences like directions and weather. Let Windows and apps request your location and allow Microsoft to use your location data to improve location services. | [Learn more](https://support.microsoft.com/help/4468240/windows-10-location-service-and-privacy) |[Privacy Statement](https://privacy.microsoft.com/privacystatement#mainlocationservicesmotionsensingmodule) | From 23d63b2a220237776009fcae32782c2573123f70 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Mon, 8 Jun 2020 16:00:13 -0700 Subject: [PATCH 015/589] updating toc and index --- windows/privacy/TOC.md | 35 ----------------------------------- windows/privacy/index.yml | 28 +++++++--------------------- 2 files changed, 7 insertions(+), 56 deletions(-) delete mode 100644 windows/privacy/TOC.md diff --git a/windows/privacy/TOC.md b/windows/privacy/TOC.md deleted file mode 100644 index fe73e90c9e..0000000000 --- a/windows/privacy/TOC.md +++ /dev/null @@ -1,35 +0,0 @@ -# [Privacy](index.yml) -## [Beginning your General Data Protection Regulation (GDPR) journey for Windows 10](gdpr-win10-whitepaper.md) -## [Windows and the GDPR: Information for IT Administrators and Decision Makers](gdpr-it-guidance.md) -## [Windows 10 & Privacy Compliance: A Guide for IT and Compliance Professionals](Windows-10-and-privacy-compliance.md) -## [Windows 10 personal data services configuration](windows-personal-data-services-configuration.md) -## [Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md) -## Diagnostic Data Viewer -### [Diagnostic Data Viewer Overview](diagnostic-data-viewer-overview.md) -### [Diagnostic Data Viewer for PowerShell Overview](Microsoft-DiagnosticDataViewer.md) -## Basic level Windows diagnostic data events and fields -### [Windows 10, version 2004 required Windows diagnostic data events and fields](required-windows-diagnostic-data-events-and-fields-2004.md) -### [Windows 10, version 1903 and Windows 10, version 1909 basic level Windows diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1903.md) -### [Windows 10, version 1809 basic level Windows diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1809.md) -### [Windows 10, version 1803 basic level Windows diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1803.md) -### [Windows 10, version 1709 basic level Windows diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1709.md) -### [Windows 10, version 1703 basic level Windows diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1703.md) -## Enhanced level Windows diagnostic data events and fields -### [Windows 10 diagnostic data events and fields collected through the limit enhanced diagnostic data policy](enhanced-diagnostic-data-windows-analytics-events-and-fields.md) -## Full level categories -### [Windows 10, version 1709 and newer diagnostic data for the Full level](windows-diagnostic-data.md) -### [Windows 10, version 1703 diagnostic data for the Full level](windows-diagnostic-data-1703.md) -## Manage Windows 10 connection endpoints -### [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) -### [Manage connections from Windows operating system components to Microsoft services using MDM](manage-connections-from-windows-operating-system-components-to-microsoft-services-using-MDM.md) -### [Connection endpoints for Windows 10, version 2004](manage-windows-2004-endpoints.md) -### [Connection endpoints for Windows 10, version 1903](manage-windows-1903-endpoints.md) -### [Connection endpoints for Windows 10, version 1809](manage-windows-1809-endpoints.md) -### [Connection endpoints for Windows 10, version 1803](manage-windows-1803-endpoints.md) -### [Connection endpoints for Windows 10, version 1709](manage-windows-1709-endpoints.md) -### [Connection endpoints for non-Enterprise editions of Windows 10, version 2004](windows-endpoints-2004-non-enterprise-editions.md) -### [Connection endpoints for non-Enterprise editions of Windows 10, version 1903](windows-endpoints-1903-non-enterprise-editions.md) -### [Connection endpoints for non-Enterprise editions of Windows 10, version 1809](windows-endpoints-1809-non-enterprise-editions.md) -### [Connection endpoints for non-Enterprise editions of Windows 10, version 1803](windows-endpoints-1803-non-enterprise-editions.md) -### [Connection endpoints for non-Enterprise editions of Windows 10, version 1709](windows-endpoints-1709-non-enterprise-editions.md) - diff --git a/windows/privacy/index.yml b/windows/privacy/index.yml index 43423ceb3e..02e0f86fd7 100644 --- a/windows/privacy/index.yml +++ b/windows/privacy/index.yml @@ -23,9 +23,9 @@ highlightedContent: # itemType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | sample | tutorial | video | whats-new items: # Card - - title: Start with GDPR basics - itemType: get-started - url: gdpr-it-guidance.md + - title: Windows privacy & compliance guide for IT and compliance professionals + itemType: overview + url: Windows-10-and-privacy-compliance.md # Card - title: Configure Windows diagnostic data itemType: how-to-guide @@ -41,20 +41,15 @@ productDirectory: summary: For the latest Windows 10 version, learn more about what Windows diagnostic data is collected at various diagnostics levels. items: # Card - - title: Basic level events and fields + - title: Required diagnostic data # imageSrc should be square in ratio with no whitespace imageSrc: https://docs.microsoft.com/media/common/i_extend.svg - summary: Learn more about basic Windows diagnostic data events and fields collected. + summary: Learn more about required Windows diagnostic data events and fields collected url: basic-level-windows-diagnostic-events-and-fields.md # Card - - title: Enhanced level events and fields - imageSrc: https://docs.microsoft.com/media/common/i_delivery.svg - summary: Learn more about Windows diagnostic data events and fields used by Windows Analytics. - url: enhanced-diagnostic-data-windows-analytics-events-and-fields.md - # Card - - title: Full level data categories + - title: Optional diagnostic data imageSrc: https://docs.microsoft.com/media/common/i_get-started.svg - summary: Learn more about all Windows diagnostic data collected. + summary: Get examples of the types of optional diagnostic data collected from Windows url: windows-diagnostic-data.md # conceptualContent section (optional) @@ -161,15 +156,6 @@ additionalContent: sections: - items: # Card - - title: More Windows privacy - links: - - text: "Windows 10 & Privacy Compliance: A Guide for IT and Compliance Professionals" - url: Windows-10-and-privacy-compliance.md - - text: Windows 10 personal data services configuration - url: windows-personal-data-services-configuration.md - - text: Beginning your GDPR journey for Windows 10 - url: gdpr-win10-whitepaper.md - # Card - title: View and manage Windows 10 connection endpoints links: - text: Manage Windows 10 connection endpoints From cd58f68e09006746f0e093dbbba1ba2483820b4c Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Mon, 8 Jun 2020 16:00:51 -0700 Subject: [PATCH 016/589] updating toc and index --- windows/privacy/toc.yml | 0 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/privacy/toc.yml diff --git a/windows/privacy/toc.yml b/windows/privacy/toc.yml new file mode 100644 index 0000000000..e69de29bb2 From a7789a383783ddd602da3b78197451835dc2c383 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Mon, 8 Jun 2020 18:34:37 -0700 Subject: [PATCH 017/589] fixing toc --- windows/privacy/toc.yml | 66 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 66 insertions(+) diff --git a/windows/privacy/toc.yml b/windows/privacy/toc.yml index e69de29bb2..48721791cf 100644 --- a/windows/privacy/toc.yml +++ b/windows/privacy/toc.yml @@ -0,0 +1,66 @@ +- name: Privacy + href: index.yml + expanded: true + items: + - name: "Windows 10 & Privacy Compliance: A Guide for IT and Compliance Professionals" + href: Windows-10-and-privacy-compliance.md + - name: Configure Windows diagnostic data in your organization + href: configure-windows-diagnostic-data-in-your-organization.md + - name: Changes to Windows diagnostic data collection + href: changes-to-windows-diagnostic-data-collection.md + - name: Diagnostic Data Viewer + items: + - name: Diagnostic Data Viewer Overview + href: diagnostic-data-viewer-overview.md + - name: Diagnostic Data Viewer for PowerShell Overview + href: Microsoft-DiagnosticDataViewer.md + - name: Required Windows diagnostic data events and fields + items: + - name: Windows 10, version 2004 required Windows diagnostic data events and fields + href: required-windows-diagnostic-data-events-and-fields-2004.md + - name: Windows 10, version 1903 and Windows 10, version 1909 required level Windows diagnostic events and fields + href: basic-level-windows-diagnostic-events-and-fields-1903.md + - name: Windows 10, version 1809 required Windows diagnostic events and fields + href: basic-level-windows-diagnostic-events-and-fields-1809.md + - name: Windows 10, version 1803 required Windows diagnostic events and fields + href: basic-level-windows-diagnostic-events-and-fields-1803.md + - name: Windows 10, version 1709 required Windows diagnostic events and fields + href: basic-level-windows-diagnostic-events-and-fields-1709.md + - name: Windows 10, version 1703 required Windows diagnostic events and fields + href: basic-level-windows-diagnostic-events-and-fields-1703.md + - name: Optional Windows diagnostic data events and fields + items: + - name: Windows 10, version 1709 and newer optional diagnostic data + href: windows-diagnostic-data.md + - name: Windows 10, version 1703 optional diagnostic data + href: windows-diagnostic-data-1703.md + - name: Deprecated diagnostic data levels + items: + - name: Windows 10 diagnostic data events and fields collected through the limit enhanced diagnostic data policy + href: enhanced-diagnostic-data-windows-analytics-events-and-fields.md + - name: Manage Windows 10 connection endpoints + items: + - name: Manage connections from Windows operating system components to Microsoft services + href: manage-connections-from-windows-operating-system-components-to-microsoft-services.md + - name: Manage connections from Windows operating system components to Microsoft services using MDM + href: manage-connections-from-windows-operating-system-components-to-microsoft-services-using-MDM.md + - name: Connection endpoints for Windows 10, version 2004 + href: manage-windows-2004-endpoints.md + - name: Connection endpoints for Windows 10, version 1903 + href: manage-windows-1903-endpoints.md + - name: Connection endpoints for Windows 10, version 1809 + href: manage-windows-1809-endpoints.md + - name: Connection endpoints for Windows 10, version 1803 + href: manage-windows-1803-endpoints.md + - name: Connection endpoints for Windows 10, version 1709 + href: manage-windows-1709-endpoints.md + - name: Connection endpoints for non-Enterprise editions of Windows 10, version 2004 + href: windows-endpoints-2004-non-enterprise-editions.md + - name: Connection endpoints for non-Enterprise editions of Windows 10, version 1903 + href: windows-endpoints-1903-non-enterprise-editions.md + - name: Connection endpoints for non-Enterprise editions of Windows 10, version 1809 + href: windows-endpoints-1809-non-enterprise-editions.md + - name: Connection endpoints for non-Enterprise editions of Windows 10, version 1803 + href: windows-endpoints-1803-non-enterprise-editions.md + - name: Connection endpoints for non-Enterprise editions of Windows 10, version 1709 + href: windows-endpoints-1709-non-enterprise-editions.md \ No newline at end of file From 73f57888479295d8a16c6438f5e382105775d54b Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Mon, 8 Jun 2020 19:15:15 -0700 Subject: [PATCH 018/589] one more fix to remove old files --- .openpublishing.redirection.json | Bin 2576176 -> 2578320 bytes windows/privacy/gdpr-it-guidance.md | 308 ------------- windows/privacy/gdpr-win10-whitepaper.md | 340 --------------- windows/privacy/toc.yml | 1 - ...ws-personal-data-services-configuration.md | 408 ------------------ 5 files changed, 1057 deletions(-) delete mode 100644 windows/privacy/gdpr-it-guidance.md delete mode 100644 windows/privacy/gdpr-win10-whitepaper.md delete mode 100644 windows/privacy/windows-personal-data-services-configuration.md diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index af5222988d92153d130950539faba798275c0555..2b4fa84488cb25d793c2476fbe101636fd6422fb 100644 GIT binary patch delta 209 zcmV;?051Qqo}B@ZublyagaL#Cgad>Ggaw2Kga?EOgb9QSgbRcWgbjoagb#!egb{=i zgcF1mgcXDqgcpPugc*bygd2n$gdKz)gdc<;gdv0?gd>C`ge8O~v?umXm+;jQte0Lh zBMz59MI#CgX#jKpEdXZ#bpUAqWS0?e0lSwlFCz}Oe6<5!0hcgEBRZFUL?g17Pzwfd zmrRN#B(=~6fB~0KyCDP@WdL#ja{zAuZUA8bYyd3)WB_3RbO2$Of&2y&m$p+79G6fM L3+T7NO($>xe+EKA delta 94 zcmV~$xf#J=007YMC+=IseME%pU&XV diff --git a/windows/privacy/gdpr-it-guidance.md b/windows/privacy/gdpr-it-guidance.md deleted file mode 100644 index f0e1c95a3d..0000000000 --- a/windows/privacy/gdpr-it-guidance.md +++ /dev/null @@ -1,308 +0,0 @@ ---- -title: Windows and the GDPR-Information for IT Administrators and Decision Makers -description: Use this topic to understand the relationship between users in your organization and Microsoft in the context of the GDPR (General Data Protection Regulation). -keywords: privacy, GDPR, windows, IT -ms.prod: w10 -ms.mktglfcycl: manage -ms.sitesec: library -ms.pagetype: security -ms.localizationpriority: high -audience: ITPro -author: dansimp -ms.author: dansimp -manager: dansimp -ms.collection: M365-security-compliance -ms.topic: article -ms.date: 05/11/2018 -ms.reviewer: ---- -# Windows and the GDPR: Information for IT Administrators and Decision Makers - -Applies to: -- Windows 10, version 1703 and newer -- Windows 10 Team Edition, version 1703 for Surface Hub -- Windows Server 2016 and newer -- Desktop Analytics - -This topic provides IT Decision Makers with a basic understanding of the relationship between users in an organization and Microsoft in the context of the GDPR (General Data Protection Regulation). You will also learn what role an IT organization plays for that relationship. - -For more information about the GDPR, see: -* [Microsoft GDPR Overview](https://aka.ms/GDPROverview) -* [Microsoft Trust Center FAQs about the GDPR](https://aka.ms/gdpr-faq) -* [Microsoft Service Trust Portal (STP)](https://aka.ms/stp) -* [Get Started: Support for GDPR Accountability](https://servicetrust.microsoft.com/ViewPage/GDPRGetStarted) - -## GDPR fundamentals - -Here are some GDPR fundamentals: - -* On May 25, 2018, this EU data privacy law is implemented. It sets a new global bar for data privacy rights, security, and compliance. -* The GDPR is fundamentally about protecting and enabling the privacy rights of individuals – both customers and employees. -* The European law establishes strict global data privacy requirements governing how organizations manage and protect personal data while respecting individual choice – no matter where data is sent, processed, or stored. -* A request by an individual to an organization to take an action on their personal data is referred to here as a *data subject request*, or *DSR*. - -Microsoft believes data privacy is a fundamental right, and that the GDPR is an important step forward for clarifying and enabling individual privacy rights. We also recognize that the GDPR required significant changes by organizations all over the world with regard to the discovery, management, protection, and reporting of personal data that is collected, processed, and stored within an organization. - -### What is personal data under the GDPR? - -Article 4 (1) of [the GDPR](http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=en) defines personal data as any information relating to an identified or identifiable person. There is no distinction between a person’s private, public, or work roles. As defined by the GDPR, personal data includes, but is not limited to: -* Name -* Email address -* Credit card numbers -* IP addresses -* Social media posts -* Location information -* Handwriting patterns -* Voice input to cloud-based speech services - -### Controller and processor under the GDPR: Who does what - -#### Definition - -The GDPR describes specific requirements for allocating responsibility for controller and processor activities related to personal data. Thus, every organization that processes personal data must determine whether it is acting as a controller or processor for a specific scenario. - -* **Controller**: GDPR Article 4 (7) defines the ‘controller’ as the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. -* **Processor**: According to the GDPR Article 4 (8) ‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller. - -#### Controller scenario - -For example, when an organization is using Microsoft Windows Defender Advanced Threat Protection (ATP) to detect, investigate, and respond to advanced threats on their networks as part of their IT operations, that organization is collecting data from the user’s device – data, that might include personal data. In this scenario, the organization is the *controller* of the respective personal data, since the organization controls the purpose and means of the processing for data being collected from the devices that have Windows Defender ATP enabled. - -#### Processor scenario - -In the controller scenario described above, Microsoft is a *processor* because Microsoft provides data processing services to that controller (in the given example, an organization that subscribed to Windows Defender ATP and enabled it for the user’s device). As processor, Microsoft only processes data on behalf of the enterprise customer and does not have the right to process data beyond their instructions as specified in a written contract, such as the [Microsoft Product Terms and the Microsoft Online Services Terms (OST)](https://www.microsoft.com/licensing/product-licensing/products.aspx). - -## GDPR relationship between a Windows 10 user and Microsoft - -For Windows 10 services, Microsoft usually is the controller (with exceptions, such as Windows Defender ATP). The following sections describe what that means for the related data. - -### Types of data exchanged with Microsoft - -Microsoft collects data from or generates data through interactions with users of Windows 10 devices. This information can contain personal data, as defined in [Article 4 (1) of the GDPR](http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=OJ:L:2016:119:FULL&from=EN), that may be used to provide, support, and improve Windows 10 services. - -Microsoft discloses data collection and privacy practices in detail, for example: -* As part of the Windows 10 installation; -* In the Windows 10 privacy settings; -* Via the web-based [Microsoft Privacy dashboard](https://account.microsoft.com/privacy); and -* In the [Microsoft Privacy Statement](https://privacy.microsoft.com/en-us/privacystatement). - -It is important to differentiate between two distinct types of data Windows services are dealing with. - -#### Windows functional data - -A user action, such as performing a Skype call, usually triggers the collection and transmission of Windows *functional data*. Some Windows components and applications connecting to Microsoft services also exchange Windows functional data to provide user functionality. - -Some other examples of Windows functional data: -* The Weather app which can use the device’s location to retrieve local weather or community news. -* Wallpaper and desktop settings that are synchronized across multiple devices. - -For more info on how IT Professionals can manage Windows functional data sent from an organization to Microsoft, see [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md). - -#### Windows diagnostic data - -Windows diagnostic data is used to keep the operating system secure and up-to-date, troubleshoot problems, and make product improvements. The data is encrypted before being sent back to Microsoft. - -Some examples of diagnostic data include: -* The type of hardware being used, information about installed apps and usage details, and reliability data on drivers running on the device. -* For users who have turned on “Tailored experiences”, it can be used to offer personalized tips, ads, and recommendations to enhance Microsoft products and services for the needs of the user. - -Diagnostic data is categorized into the levels "Security", "Basic", "Enhanced", and "Full". For a detailed discussion about these diagnostic data levels please see [Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md). To find more about what information is collected and how it is handled, see [Understanding Windows diagnostic data](configure-windows-diagnostic-data-in-your-organization.md#understanding-windows-diagnostic-data). - -> [!IMPORTANT] -> Other Microsoft services as well as 3rd party applications and drivers running on Windows devices may implement their own functionality, independently from Windows, to transport their diagnostic data. Please contact the publisher for further guidance on how to control the diagnostic data collection level and transmission of these applications and services. - -### Windows services where Microsoft is the processor under the GDPR - -Most Windows 10 services are controller services in terms of the GDPR – for both Windows functional data and Windows diagnostic data. But there are a few Windows services where Microsoft is a processor for functional data under the GDPR, such as [Desktop Analytics](https://aka.ms/dadocs), [Update Compliance](https://docs.microsoft.com/windows/deployment/update/update-compliance-monitor) and [Windows Defender Advanced Threat Protection (ATP)](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp). - ->[!NOTE] ->Both Desktop Analytics and Windows Defender ATP are subscription services for organizations. Some functionality requires a certain license (please see [Compare Windows 10 editions](https://www.microsoft.com/windowsforbusiness/compare)). - -#### Desktop Analytics - -> [!IMPORTANT] -> The Upgrade Readiness and Device Health solutions of Windows Analytics are being retired on January 31, 2020. [Update Compliance](/windows/deployment/update/update-compliance-get-started) will continue to be supported. -> For more information, see [Windows Analytics retirement on January 31, 2020](https://support.microsoft.com/en-us/help/4521815/windows-analytics-retirement). - -[Desktop Analytics](https://aka.ms/dadocs) is a cloud-based service that integrates with Configuration Manager. The service provides insight and intelligence for you to make more informed decisions about the update readiness of Windows Windows devices in their environment. It uses Windows diagnostic data from devices enrolled by the IT organization of an enterprise with data aggregated from millions of devices into the Desktop Analytics service. - -Windows [transmits Windows diagnostic data](enhanced-diagnostic-data-windows-analytics-events-and-fields.md) to Microsoft datacenters, where that data is analyzed and stored. With Desktop Analytics, the IT organization can then view the analyzed data to detect and fix issues or to improve their processes for upgrading to Windows 10. - -As a result, in terms of the GDPR, the organization that has subscribed to Desktop Analytics is acting as the controller, while Microsoft is the processor for Desktop Analytics. -> [!NOTE] -> The IT organization must explicitly enable Desktop Analytics for a device after the organization subscribes. - -> [!IMPORTANT] -> Desktop Analytics does not collect Windows Diagnostic data by itself. Instead, Desktop Analytics only uses a subset of Windows Diagnostic data that is collected by Windows for an enrolled device. The Windows Diagnostic data collection is controlled by the IT department of an organization or the user of a device. See [Enable data sharing for Desktop Analytics](https://docs.microsoft.com/configmgr/desktop-analytics/enable-data-sharing) - -#### Windows Defender ATP - -[Windows Defender ATP](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp) is cloud-based service that collects and analyzes usage data from an organization’s devices to detect security threats. Some of the data can contain personal data as defined by the GDPR. Enrolled devices transmit usage data to Microsoft datacenters, where that data is analyzed, processed, and stored. The security operations center (SOC) of the organization can view the analyzed data using the [Windows Defender ATP portal](https://securitycenter.windows.com/). - -As a result, in terms of the GDPR, the organization that has subscribed to Windows Defender ATP is acting as the controller, while Microsoft is the processor for Windows Defender ATP. - -> [!NOTE] -> The IT organization must explicitly enable Windows Defender ATP for a device after the organization subscribes. - -#### At a glance – Windows 10 services GDPR mode of operations - -The following table lists in what GDPR mode – controller or processor – Windows 10 services are operating. - -| Service | Microsoft GDPR mode of operation | -| --- | --- | -| Windows Functional data | Controller or Processor* | -| Windows Diagnostic data | Controller | -| Desktop Analytics | Processor | -| Windows Defender Advanced Threat Detection (ATP) | Processor | - -*Table 1: Windows 10 GDPR modes of operations for different Windows 10 services* - -*/*Depending on which application/feature this is referring to.* - -## Windows diagnostic data and Windows 10 - - -### Recommended Windows 10 settings - -Windows diagnostic data collection level for Windows 10 can be set by a user in Windows (*Start > Settings > Privacy > Diagnostics & feedback*) or by the IT department of an organization, using Group Policy or Mobile Device Management (MDM) techniques. - -* For Windows 10, version 1803 and version 1809, Microsoft recommends setting the Windows diagnostic level to “Enhanced”. This enables organizations to get the full functionality of [Desktop Analytics](#desktop-analytics). - ->[!NOTE] ->For more information on the Enhanced level, see [Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md). - -* For Windows 10, version 1709, and Windows 10, version 1703, the recommended Windows diagnostic level configuration for EEA and Switzerland commercial users is “Basic”. - ->[!NOTE] ->For Windows 7, Microsoft recommends [using Commercial Data Opt-in setting](/previous-versions/windows/it-pro/windows-7/ee126127(v=ws.10)) to facilitate upgrade planning to Windows 10. - -### Additional information for Desktop Analytics - -The basic functionality of Desktop Analytics works at the “Basic” diagnostic data level. Other functionality of Desktop Analytics, such as usage or health data for updated devices, require “Enhanced”. - -Those organizations who wish to share the smallest set of events for Desktop Analytics and have set the Windows diagnostic level to “Enhanced” can use the [“Limit Enhanced diagnostic data to the minimum required by Desktop Analytics”](/windows/privacy/configure-windows-diagnostic-data-in-your-organization#limit-enhanced-diagnostic-data-to-the-minimum-required-by-desktop-analytics) setting. This filtering mechanism was that Microsoft introduced in Windows 10, version 1709. When enabled, this feature limits the operating system diagnostic data events included in the Enhanced level to the smallest set of data required by Desktop Analytics. - -> [!NOTE] -> Additional information can be found at [Desktop Analytics data privacy](https://docs.microsoft.com/configmgr/desktop-analytics/privacy). - -## Controlling Windows 10 data collection and notification about it - -Windows 10 sends diagnostic data to Microsoft services, and some of that data can contain personal data. Both the user and the IT organization have the ability to control the transmission of that data to Microsoft. - -### Adjusting privacy settings by the user - -A user has the ability to adjust additional privacy settings in Windows by navigating to *Start > Settings > Privacy*. For example, a user can control if location is enabled or disabled, whether or not to transmit feedback on inking and typing input to Microsoft for improving the personal accuracy of these services, or if Windows collects activities for syncing it with other devices. - -For a standard user in an organization, some privacy settings might be controlled by their IT department. This is done using Group Policies or Mobile Device Management (MDM) settings. If this is the case, the user will see an alert that says ‘Some settings are hidden or managed by your organization’ when they navigate to *Start > Settings > Privacy*. As such, the user can only change some settings, but not all. - -### Users can lower the diagnostic level - -Starting with Windows 10, version 1803, a user can change the Windows diagnostics data level for their device below to what was set by their IT department. Organizations can allow or disallow this feature by configuring the Group Policy **Computer Configuration\Administrative Templates\Windows Components\Data Collection and Preview Builds\Configure telemetry opt-in setting user interface** or the MDM policy **ConfigureTelemetryOptInSettingsUx**. - -If an IT organization has not disabled this policy, users within the organization can change their own Windows diagnostic data collection level in *Start > Settings > Privacy > Diagnostics & feedback*. For example, if the IT organization enabled this policy and set the level to “Full”, a user can modify the Windows diagnostics data level setting to “Basic”. - -### Notification at logon - -Windows 10, version 1803, and later can provide users with a notification during their logon. If the IT organization has not disabled the Group Policy **Computer Configuration\Administrative Templates\Windows Components\Data Collection and Preview Builds\Configure telemetry opt-in change notifications** or the MDM policy **ConfigureTelemetryOptInChangeNotification**, Windows diagnostic data notifications can appear at logon so that the users of a device are aware of the data collection. - -This notification can also be shown when the diagnostic level for the device was changed. For instance, if the diagnostic level on the device is set to “Basic” and the IT organization changes it to “Full”, users will be notified on their next logon. - -### Diagnostic Data Viewer (DDV) - -In Windows 10, version 1803 and later, users can invoke the [Diagnostic Data Viewer (DDV)](diagnostic-data-viewer-overview.md) to see what Windows diagnostic data is collected on their local device. This app lets a user review the diagnostic data collected on his device that is being sent to Microsoft. The DDV groups the information into simple categories based on how it is used by Microsoft. - -A user can turn on Windows diagnostic data viewing by going to go to *Start > Settings > Privacy > Diagnostics & feedback*. Under the ‘Diagnostic data viewer’ section, the user has to enable the ‘If data viewing is enabled, you can see your diagnostics data’ option. After DDV is installed on the device, the user can start it by clicking the ‘Diagnostic Data Viewer’ in the ‘Diagnostic data viewer’ section of *Start > Settings > Privacy > Diagnostics & feedback*. - -Also, the user can delete all Windows diagnostic data collected from the device. This is done by clicking the ‘Delete’ button in the ‘Delete diagnostic data’ section of *Start > Settings > Privacy > Diagnostics & feedback*. - -### Windows 10 personal data services configuration - -Microsoft assembled a list of Windows 10 services configuration settings that are useful for personal data privacy protection and related regulations, such as the General Data Protection Regulation (GDPR). There is one section with settings for service data that is managed at Microsoft and a section for local data that is managed by an IT organization. - -IT Professionals that are interested in this configuration, see [Windows 10 personal data services configuration](windows-personal-data-services-configuration.md). - -### Windows 10 connections to Microsoft - -To find out more about the network connections that Windows components make to Microsoft as well as the privacy settings that affect data shared with either Microsoft or apps, see [Manage connections from Windows operating system components to Microsoft services](https://docs.microsoft.com/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services). This article describe how these settings can be managed by an IT Professional, and fronts an array of Windows version-specific articles. - -### At-a-glance: the relationship between an IT organization and the GDPR - -Because Microsoft is a controller for data collected by Windows 10, the user can work with Microsoft to satisfy GDPR requirements. While this relationship between Microsoft and a user is evident in a consumer scenario, an IT organization can influence that relationship in an enterprise scenario. For example, the IT organization has the ability to centrally configure the Windows diagnostic data level by using Group Policy or MDM settings. - -## Windows Server - -Windows Server follows the same mechanisms as Windows 10 for handling of personal data – for example, when collecting Windows diagnostic data. - -More detailed information about Windows Server and the GDPR is available at Beginning your General Data Protection Regulation (GDPR) journey for Windows Server. - -### Windows diagnostic data and Windows Server - -The lowest diagnostic data setting level supported on Windows Server 2016 and Windows Server 2019 through management policies is “Security”. The lowest diagnostic data setting supported through the Settings UI is “Basic”. The default diagnostic data level for all Windows Server 2016 and Windows Server 2019 editions is “Enhanced”. - -IT administrators can configure the Windows Server diagnostic data settings using familiar management tools, such as Group Policy, MDM, or Windows Provisioning. IT administrators can also manually change settings using Registry Editor. Setting the Windows Server diagnostic data levels through a management policy overrides any device-level settings. - -There are two options for deleting Windows diagnostic data from a Windows Server machine: - -- If the “Desktop Experience” option was chosen during the installation of Windows Server 2019, then there are the same options available for an IT administrator that end users have with Windows 10, version 1803 and version 1809, to submit a request for deleting that device’s diagnostic data. This is done by clicking the **Delete** button in the **Delete diagnostic data** section of **Start > Settings > Privacy > Diagnostics & feedback**. -- Microsoft has provided a [PowerShell cmdlet](https://docs.microsoft.com/powershell/module/windowsdiagnosticdata) that IT administrators can use to delete Windows diagnostic data via the command line on a machine running Windows Server 2016 or Windows Server 2019. This cmdlet provides the same functionality for deleting Windows diagnostic data as with Desktop Experience on Windows Server 2019. For more information, see [the PowerShell Gallery](https://www.powershellgallery.com/packages/WindowsDiagnosticData). - -### Backups and Windows Server - -Backups, including live backups and backups that are stored locally within an organization or in the cloud, can contain personal data. - -- Backups an organizations creates, for example by using Windows Server Backup (WSB), are under its control. For example, for exporting personal data contained in a backup, the organization needs to restore the appropriate backup sets to facilitate the respective data subject request (DSR). -- The GDPR also applies when storing backups in the cloud. For example, an organization can use Microsoft Azure Backup to backup files and folders from physical or virtual Windows Server machines (located on-premises or in Azure) to the cloud. The organization that is subscribed to this backup service also has the obligation to restore the data in order to exercise the respective DSR. - -## Windows 10 Team Edition, Version 1703 for Surface Hub - -Surface Hub is a shared device used within an organization. The device identifier collected as part of diagnostic data is not connected to a user. For removing Windows diagnostic data sent to Microsoft for a Surface Hub, Microsoft created the Surface Hub Delete Diagnostic Data tool available in the Microsoft Store. - -> [!NOTE] -> Additional apps running on the device, that are not delivered as part of the in-box experience of Surface Hub, may implement their own diagnostic data collection and transmission functionality independently to collect and process personal data. Please contact the app publisher for further guidance on how to control this. - -An IT administrator can configure privacy- related settings, such as setting the Windows diagnostic data level to Basic. Surface Hub does not support group policy for centralized management; however, IT administrators can use MDM to apply these settings to Surface Hub. For more information about Surface Hub and MDM, please see [Manage settings with an MDM provider](https://docs.microsoft.com/surface-hub/manage-settings-with-mdm-for-surface-hub). - -## Further reading - -### Optional settings / features that further improve the protection of personal data - -Personal data protection is one of the goals of the GDPR. One way of improving personal data protection is to use the modern and advanced security features of Windows 10. An IT organization can learn more at [Mitigate threats by using Windows 10 security features](/windows/security/threat-protection/overview-of-threat-mitigations-in-windows-10) and [Standards for a highly secure Windows 10 device](https://docs.microsoft.com/windows-hardware/design/device-experiences/oem-highly-secure). - -> [!NOTE] -> Some of these features might require a particular Windows hardware, such as a computer with a Trusted Platform Module (TPM) chip, and can depend on a particular Windows product (such as Windows 10 E5). - -### Windows Security Baselines - -Microsoft has created Windows Security Baselines to efficiently configure Windows 10 and Windows Server. For more information, please visit [Windows Security Baselines](/windows/security/threat-protection/windows-security-baselines). - -### Windows Restricted Traffic Limited Functionality Baseline - -To make it easier to deploy settings that restrict connections from Windows 10 and Windows Server to Microsoft, IT Professionals can apply the Windows Restricted Traffic Limited Functionality Baseline, available [here](https://go.microsoft.com/fwlink/?linkid=828887). - ->[!IMPORTANT] ->Some of the settings of the Windows Restricted Traffic Limited Functionality Baseline will reduce the functionality and security configuration of a device in the organization and are therefore not recommended. - -### Microsoft Trust Center and Service Trust Portal - -Please visit our [GDPR section of the Microsoft Trust Center](https://www.microsoft.com/trustcenter/privacy/gdpr) to obtain additional resources and to learn more about how Microsoft can help you fulfill specific GDPR requirements. There you can find lots of useful information about the GDPR, including how Microsoft is helping customers to successfully master the GDPR, a FAQ list, and a list of [resources for GDPR compliance](https://www.microsoft.com/TrustCenter/Privacy/gdpr/resources). Also, please check out the [Compliance Manager](https://aka.ms/compliancemanager) of the Microsoft [Service Trust Portal (STP)](https://aka.ms/stp) and [Get Started: Support for GDPR Accountability](https://servicetrust.microsoft.com/ViewPage/GDPRGetStarted). - -### Additional resources - -#### FAQs - -* [Windows 10 feedback, diagnostics, and privacy](https://privacy.microsoft.com/windows-10-feedback-diagnostics-and-privacy) -* [Microsoft Edge and privacy](https://privacy.microsoft.com/windows-10-microsoft-edge-and-privacy) -* [Windows Hello and privacy](https://privacy.microsoft.com/windows-10-windows-hello-and-privacy) -* [Wi-Fi Sense](https://privacy.microsoft.com/windows-10-about-wifi-sense) - -#### Blogs - -* [Privacy and Windows 10](https://blogs.windows.com/windowsexperience/2015/09/28/privacy-and-windows-10) - -#### Privacy Statement - -* [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement) - -#### Other resources - -* [Privacy at Microsoft](https://privacy.microsoft.com/) diff --git a/windows/privacy/gdpr-win10-whitepaper.md b/windows/privacy/gdpr-win10-whitepaper.md deleted file mode 100644 index 71f256d128..0000000000 --- a/windows/privacy/gdpr-win10-whitepaper.md +++ /dev/null @@ -1,340 +0,0 @@ ---- -title: General Data Protection Regulation (GDPR) for Windows 10 -description: Use this article to understand what GDPR is and which products Microsoft provides to help you get started towards compliance. -keywords: privacy, GDPR -ms.prod: w10 -ms.mktglfcycl: manage -ms.sitesec: library -ms.pagetype: security -ms.localizationpriority: high -audience: ITPro -author: dansimp -ms.author: dansimp -manager: dansimp -ms.collection: M365-security-compliance -ms.topic: article -ms.date: 09/25/2017 -ms.reviewer: ---- - -# Beginning your General Data Protection Regulation (GDPR) journey for Windows 10 - -This article provides info about the GDPR, including what it is, and the products Microsoft provides to help you to become compliant. - -## Introduction -On May 25, 2018, a European privacy law is due to take effect that sets a new global bar for privacy rights, security, and compliance. - -The General Data Protection Regulation, or GDPR, is fundamentally about protecting and enabling the privacy rights of individuals. The GDPR establishes strict global privacy requirements governing how you manage and protect personal data while respecting individual choice — no matter where data is sent, processed, or stored. - -Microsoft and our customers are now on a journey to achieve the privacy goals of the GDPR. At Microsoft, we believe privacy is a fundamental right, and we believe that the GDPR is an important step forward for clarifying and enabling individual privacy rights. But we also recognize that the GDPR will require significant changes by organizations all over the world. - -We have outlined our commitment to the GDPR and how we are supporting our customers within the [Get GDPR compliant with the Microsoft Cloud](https://blogs.microsoft.com/on-the-issues/2017/02/15/get-gdpr-compliant-with-the-microsoft-cloud/#hv52B68OZTwhUj2c.99) blog post by our Chief Privacy Officer [Brendon Lynch](https://blogs.microsoft.com/on-the-issues/author/brendonlynch/) and the [Earning your trust with contractual commitments to the General Data Protection Regulation](https://blogs.microsoft.com/on-the-issues/2017/04/17/earning-trust-contractual-commitments-general-data-protection-regulation/#6QbqoGWXCLavGM63.99)” blog post by [Rich Sauer](https://blogs.microsoft.com/on-the-issues/author/rsauer/) - Microsoft Corporate Vice President & Deputy General Counsel. - -Although your journey to GDPR-compliance may seem challenging, we're here to help you. For specific information about the GDPR, our commitments and how to begin your journey, please visit the [GDPR section of the Microsoft Trust Center](https://www.microsoft.com/trustcenter/privacy/gdpr). - -## GDPR and its implications -The GDPR is a complex regulation that may require significant changes in how you gather, use and manage personal data. Microsoft has a long history of helping our customers comply with complex regulations, and when it comes to preparing for the GDPR, we are your partner on this journey. - -The GDPR imposes rules on organizations that offer goods and services to people in the European Union (EU), or that collect and analyze data tied to EU residents, no matter where those businesses are located. Among the key elements of the GDPR are the following: - -- **Enhanced personal privacy rights.** Strengthened data protection for residents of EU by ensuring they have the right to access to their personal data, to correct inaccuracies in that data, to erase that data, to object to processing of their personal data, and to move it. - -- **Increased duty for protecting personal data.** Reinforced accountability of organizations that process personal data, providing increased clarity of responsibility in ensuring compliance. - -- **Mandatory personal data breach reporting.** Organizations that control personal data are required to report personal data breaches that pose a risk to the rights and freedoms of individuals to their supervisory authorities without undue delay, and, where feasible, no later than 72 hours once they become aware of the breach. - -As you might anticipate, the GDPR can have a significant impact on your business, potentially requiring you to update privacy policies, implement and strengthen data protection controls and breach notification procedures, deploy highly transparent policies, and further invest in IT and training. Microsoft Windows 10 can help you effectively and efficiently address some of these requirements. - -## Personal and sensitive data -As part of your effort to comply with the GDPR, you will need to understand how the regulation defines personal and sensitive data and how those definitions relate to data held by your organization. - -The GDPR considers personal data to be any information related to an identified or identifiable natural person. That can include both direct identification (such as, your legal name) and indirect identification (such as, specific information that makes it clear it is you the data references). The GDPR also makes clear that the concept of personal data includes online identifiers (such as, IP addresses, mobile device IDs) and location data. - -The GDPR introduces specific definitions for genetic data (such as, an individual’s gene sequence) and biometric data. Genetic data and biometric data along with other sub categories of personal data (personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership: data concerning health; or data concerning a person’s sex life or sexual orientation) are treated as sensitive personal data under the GDPR. Sensitive personal data is afforded enhanced protections and generally requires an individual’s explicit consent where these data are to be processed. - -### Examples of info relating to an identified or identifiable natural person (data subject) -This list provides examples of several types of info that will be regulated through GDPR. This is not an exhaustive list. - -- Name - -- Identification number (such as, SSN) - -- Location data (such as, home address) - -- Online identifier (such as, e-mail address, screen names, IP address, device IDs) - -- Pseudonymous data (such as, using a key to identify individuals) - -- Genetic data (such as, biological samples from an individual) - -- Biometric data (such as, fingerprints, facial recognition) - -## Getting started on the journey towards GDPR compliance -Given how much is involved to become GDPR-compliant, we strongly recommend that you don't wait to prepare until enforcement begins. You should review your privacy and data management practices now. We recommend that you begin your journey to GDPR compliance by focusing on four key steps: - -- **Discover.** Identify what personal data you have and where it resides. - -- **Manage.** Govern how personal data is used and accessed. - -- **Protect.** Establish security controls to prevent, detect, and respond to vulnerabilities and data breaches. - -- **Report.** Act on data requests, report data breaches, and keep required documentation. - - ![Diagram about how the 4 key GDPR steps work together](images/gdpr-steps-diagram.png) - -For each of the steps, we've outlined example tools, resources, and features in various Microsoft solutions, which can be used to help you address the requirements of that step. While this article isn't a comprehensive “how to,” we've included links for you to find out more details, and more information is available in the [GDPR section of the Microsoft Trust Center](https://www.microsoft.com/trustcenter/privacy/gdpr). - -## Windows 10 security and privacy -As you work to comply with the GDPR, understanding the role of your desktop and laptop client machines in creating, accessing, processing, storing and managing data that may qualify as personal and potentially sensitive data under the GDPR is important. Windows 10 provides capabilities that will help you comply with the GDPR requirements to implement appropriate technical and organizational security measures to protect personal data. - -With Windows 10, your ability to protect, detect and defend against the types of attacks that can lead to data breaches is greatly improved. Given the stringent requirements around breach notification within the GDPR, ensuring that your desktop and laptop systems are well defended will lower the risks you face that could result in costly breach analysis and notification. - -In this section, we'll talk about how Windows 10 provides capabilities that fit squarely in the **Protect** stage of your journey, including these 4 scenarios: - -- **Threat protection: Pre-breach threat resistance.** Disrupt the malware and hacking industry by moving the playing field to one where they lose the attack vectors that they depend on. - -- **Threat protection: Post-breach detection and response.** Detect, investigate, and respond to advanced threats and data breaches on your networks. - -- **Identity protection.** Next generation technology to help protect your user’s identities from abuse. - -- **Information protection.** Comprehensive data protection while meeting compliance requirements and maintaining user productivity. - -These capabilities, discussed in more detail below with references to specific GDPR requirements, are built on top of advanced device protection that maintains the integrity and security of the operating system and data. - -A key provision within the GDPR is data protection by design and by default, and helping with your ability to meet this provision are features within Windows 10 such as the Trusted Platform Module (TPM) technology designed to provide hardware-based, security-related functions. A TPM chip is a secure crypto-processor that is designed to carry out cryptographic operations. - -The chip includes multiple physical security mechanisms to make it tamper resistant, and malicious software is unable to tamper with the security functions of the TPM. Some of the key advantages of using TPM technology are that you can: - -- Generate, store, and limit the use of cryptographic keys. - -- Use TPM technology for platform device authentication by using the TPM’s unique RSA key, which is burned into itself. - -- Help to ensure platform integrity by taking and storing security measurements. - -Additional advanced device protection relevant to your operating without data breaches include Windows Trusted Boot to help maintain the integrity of the system by ensuring malware is unable to start before system defenses. - -### Threat protection: Pre-breach threat resistance -The GDPR requires you to implement appropriate technical and organizational security measures to protect personal data. - -Your ability to meet this requirement to implement appropriate technical security measures should reflect the threats you face in today’s increasingly hostile IT environment. Today’s security threat landscape is one of aggressive and tenacious threats. In previous years, malicious attackers mostly focused on gaining community recognition through their attacks or the thrill of temporarily taking a system offline. Since then, attacker’s motives have shifted toward making money, including holding devices and data hostage until the owner pays the demanded ransom. - -Modern attacks increasingly focus on large-scale intellectual property theft; targeted system degradation that can result in financial loss; and now even cyberterrorism that threatens the security of individuals, businesses, and national interests all over the world. These attackers are typically highly trained individuals and security experts, some of whom are in the employ of nation states that have large budgets and seemingly unlimited human resources. Threats like these require an approach that can meet this challenge. - -Not only are these threats a risk to your ability to maintain control of any personal or sensitive data you may have, but they are a material risk to your overall business as well. Consider recent data from Ponemon Institute, Verizon, and Microsoft: - -- The average cost of the type of data breach the GDPR will expect you to report is $3.5M. (Ponemon Institute). - -- 63% of these breaches involve weak or stolen passwords that the GDPR expects you to address. (2016 Data Breach Investigations Report, Verizon Enterprise). - -- Over 300,000 new malware samples are created and spread every day making your task to address data protection even more challenging. (Microsoft Malware Protection Center, Microsoft). - -As seen with recent ransomware attacks, once called the "black plague" of the Internet, attackers are going after bigger targets that can afford to pay more, with potentially catastrophic consequences. Desktops and laptops, that contain personal and sensitive data, are commonly targeted where control over data might be lost. - -In response to these threats and as a part of your mechanisms to resist these types of breaches so that you remain in compliance with the GDPR, Windows 10 provides built in technology, detailed below including the following: - -- Microsoft Defender Antivirus to respond to emerging threats on data. - -- Microsoft Edge to systemically disrupt phishing, malware, and hacking attacks. - -- Windows Defender Device Guard to block all unwanted applications on client machines. - -#### Responding to emerging data threats -Microsoft Defender Antivirus is a built-in antimalware solution that provides security and antimalware management for desktops, portable computers, and servers. In Windows 10, it uses a multi-pronged approach to improve antimalware: - -- **Cloud-delivered protection.** Helps to detect and block new malware within seconds, even if the malware has never been seen before. - -- **Rich local context.** Improves how malware is identified. Windows 10 informs Microsoft Defender Antivirus not only about content like files and processes, but also where the content came from, where it's been stored, and more. - -- **Extensive global sensors.** Help to keep Microsoft Defender Antivirus current and aware of even the newest malware. This is accomplished in two ways: by collecting the rich local context data from end points and by centrally analyzing that data. - -- **Tamper proofing.** Helps to guard Microsoft Defender Antivirus itself against malware attacks. For example, Microsoft Defender Antivirus uses Protected Processes, which prevents untrusted processes from attempting to tamper with Microsoft Defender Antivirus components, its registry keys, and so on. - -- **Enterprise-level features.** Give IT pros the tools and configuration options necessary to make Microsoft Defender Antivirus an enterprise-class antimalware solution. - -#### Systemically disrupting phishing, malware, and hacking attacks -In today’s threat landscape, your ability to provide those mechanisms should be tied to the specific data-focused attacks you face through phishing, malware and hacking due to the browser-related attacks. - -As part of Windows 10, Microsoft has brought you Microsoft Edge, our safest and most secure browser to-date. Over the past two years, we have been continuously innovating, and we’re proud of the progress we’ve made. This quality of engineering is reflected by the reduction of Common Vulnerabilities and Exposures (CVE) when comparing Microsoft Edge with Internet Explorer over the past year. Browser-related attacks on personal and sensitive data that you will need to protect under the GDPR means this innovation in Windows 10 is important. - -While no modern browser — or any complex application — is free of vulnerabilities, many of the vulnerabilities for Microsoft Edge have been responsibly reported by professional security researchers who work with the Microsoft Security Response Center (MSRC) and the Microsoft Edge team to ensure customers are protected well before any attacker might use these vulnerabilities in the wild. Even better, there is no evidence that any vulnerabilities have been exploited in the wild as zero-day attacks. - -![Graph of the Common Vulnerabilities and Exposures (CVE) in the National Vulnerability Database](images/gdpr-cve-graph.png) - -However, many businesses worldwide have come under increasing threat of targeted attacks, where attackers are crafting specialized attacks against a specific business, attempting to take control of corporate networks and data. - -#### Blocking all unwanted apps -Application Control is your best defense in a world where there are more than 300,000 new malware samples each day. As part of Windows 10, Windows Defender Device Guard is a combination of enterprise-related hardware and software security features that, when configured together, will lock a device down so that it can only run trusted applications that you define in your code integrity policies. If the app isn’t trusted it can’t run, period. - -With hardware that meets basic requirements, it also means that even if an attacker manages to get control of the Windows kernel, he or she will be much less likely to be able to run malicious executable code. With appropriate hardware, Windows Defender Device Guard can use the new virtualization-based security in Windows 10 to isolate the Code Integrity service from the Microsoft Windows kernel itself. In this case, the Code Integrity service runs alongside the kernel in a Windows hypervisor-protected container. - -Windows Defender Device Guard protects threats that can expose personal or sensitive data to attack, including: - -- Exposure to new malware, for which the "signature" is not yet known - -- Exposure to unsigned code (most malware is unsigned) - -- Malware that gains access to the kernel and then, from within the kernel, captures sensitive information or damages the system - -- DMA-based attacks, for example, attacks launched from a malicious device that read secrets from memory, making the enterprise more vulnerable to attack; and - -- Exposure to boot kits or to a physically present attacker at boot time. - -### Threat protection: Post-breach detection and response -The GDPR includes explicit requirements for breach notification where a personal data breach means, “a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed.” - -As noted in the Windows Security Center white paper, [Post Breach: Dealing with Advanced Threats](http://wincom.blob.core.windows.net/documents/Post_Breach_Dealing_with_Advanced_Threats_Whitepaper.pdf), “_Unlike pre-breach, post-breach assumes a breach has already occurred – acting as a flight recorder and Crime Scene Investigator (CSI). Post-breach provides security teams the information and toolset needed to identify, investigate, and respond to attacks that otherwise will stay undetected and below the radar._” - -#### Insightful security diagnostic data -For nearly two decades, Microsoft has been turning threats into useful intelligence that can help fortify our platform and protect customers. Today, with the immense computing advantages afforded by the cloud, we are finding new ways to use our rich analytics engines driven by threat intelligence to protect our customers. - -By applying a combination of automated and manual processes, machine learning and human experts, we can create an Intelligent Security Graph that learns from itself and evolves in real-time, reducing our collective time to detect and respond to new incidents across our products. - -![Diagram of Microsoft's Intelligent Security Graph](images/gdpr-intelligent-security-graph.png) - -The scope of Microsoft’s threat intelligence spans, literally, billions of data points: 35 billion messages scanned monthly, 1 billion customers across enterprise and consumer segments accessing 200+ cloud services, and 14 billion authentications performed daily. All this data is pulled together on your behalf by Microsoft to create the Intelligent Security Graph that can help you protect your front door dynamically to stay secure, remain productive, and meet the requirements of the GDPR. - -#### Detecting attacks and forensic investigation -Even the best endpoint defenses may be breached eventually, as cyberattacks become more sophisticated and targeted. - -Windows Defender Advanced Threat Protection (ATP) helps you detect, investigate, and respond to advanced attacks and data breaches on your networks. GDPR expects you to protect against attacks and breaches through technical security measures to ensure the ongoing confidentiality, integrity, and availability of personal data. - -Among the key benefits of ATP are the following: - -- Detecting the undetectable - sensors built deep into the operating system kernel, Windows security experts, and unique optics from over 1 billion machines and signals across all Microsoft services. - -- Built in, not bolted on - agentless with high performance and low impact, cloud-powered; easy management with no deployment. - -- Single pane of glass for Windows security - explore 6 months of rich machine timeline that unifies security events from Windows Defender ATP, Microsoft Defender Antivirus. - -- Power of the Microsoft graph - leverages the Microsoft Intelligence Security Graph to integrate detection and exploration with Office 365 ATP subscription, to track back and respond to attacks. - -Read more at [What’s new in the Windows Defender ATP Creators Update preview](https://blogs.microsoft.com/microsoftsecure/2017/03/13/whats-new-in-the-windows-defender-atp-creators-update-preview/). - -To provide Detection capabilities, Windows 10 improves our OS memory and kernel sensors to enable detection of attackers who are employing in-memory and kernel-level attacks – shining a light into previously dark spaces where attackers hid from conventional detection tools. We’ve already successfully leveraged this new technology against zero-days attacks on Windows. - -![Windows Defender Security Center](images/gdpr-security-center.png) - -We continue to upgrade our detections of ransomware and other advanced attacks, applying our behavioral and machine-learning detection library to counter changing attacks trends. Our historical detection capability ensures new detection rules apply to up to six months of stored data to detect attacks that previously went unnoticed. Customers can also add customized detection rules or IOCs to augment the detection dictionary. - -Customers asked us for a single pane of glass across the entire Windows security stack. Microsoft Defender Antivirus detections and Windows Defender Device Guard blocks are the first to surface in the Windows Defender ATP portal interleaved with Windows Defender ATP detections. The new user entity adds identity as a pivot, providing insight into actions, relationships, and alerts that span machines and allow us to track attackers moving laterally across the network. - -Our alert page now includes a new process tree visualization that aggregates multiple detections and related events into a single view that helps security teams reduce the time to resolve cases by providing the information required to understand and resolve incidents without leaving the alert page. - -Security Operations (SecOps) can hunt for evidence of attacks, such as file names or hashes, IP addresses or URLs, behaviors, machines, or users. They can do this immediately by searching the organization’s cloud inventory, across all machines – and going back up to 6 months in time – even if machines are offline, have been reimaged, or no longer exist. - -![Windows Defender Security Center - User screen](images/gdpr-security-center2.png) - -When detecting an attack, security teams can now take immediate action: isolate machines, ban files from the network, kill or quarantine running processes or files, or retrieve an investigation package from a machine to provide forensic evidence – with a click of a button. Because while detecting advanced attacks is important – shutting them down is even more so. - -![Windows Defender Security Center - Machine screen](images/gdpr-security-center3.png) - -### Identity Protection -Identify and access management is another area where the GDPR has placed special emphasis by calling for mechanisms to grant and restrict access to data subject personal data (for example, role-based access, segregation of duties). - -#### Multi-factor protection -Biometric authentication – using your face, iris, or fingerprint to unlock your devices – is much safer than traditional passwords. You– uniquely you– plus your device are the keys to your apps, data, and even websites and services – not a random assortment of letters and numbers that are easily forgotten, hacked, or written down and pinned to a bulletin board. - -Your ability to protect personal and sensitive data, that may be stored or accessed through desktop or laptops will be further enhanced by adopting advanced authentication capabilities such as Windows Hello for Business and Windows Hello companion devices. Windows Hello for Business, part of Windows 10, gives users a personal, secured experience where the device is authenticated based on their presence. Users can log in with a look or a touch, with no need for a password. - -In conjunction with Windows Hello for Business, biometric authentication uses fingerprints or facial recognition and is more secure, more personal, and more convenient. If an application supports Hello, Windows 10 enables you to authenticate applications, enterprise content, and even certain online experiences without a password being stored on your device or in a network server at all. -Windows Hello for Business works with the Companion Device Framework to enhance the user authentication experience. Using the Windows Hello Companion Device Framework, a companion device can provide a rich experience for Windows Hello even when biometrics are not available (for example, if the Windows 10 desktop lacks a camera for face authentication or fingerprint reader device). - -There are numerous ways one can use the Windows Hello Companion Device Framework to build a great Windows unlock experience with a companion device. For example, users can: - -- Work offline (for example, while traveling on a plane) - -- Attach their companion device to PC via USB, touch the button on the companion device, and automatically unlock their PC. - -- Carry a phone in their pocket that is already paired with their PC over Bluetooth. Upon hitting the spacebar on their PC, their phone receives a notification. Approve it and the PC simply unlocks. - -- Tap their companion device to an NFC reader to quickly unlock their PC. - -- Wear a fitness band that has already authenticated the wearer. Upon approaching PC, and by performing a special gesture (like clapping), the PC unlocks. - -#### Protection against attacks by isolating user credentials -As noted in the [Windows 10 Credential Theft Mitigation Guide](https://www.microsoft.com/download/confirmation.aspx?id=54095), “_the tools and techniques criminals use to carry out credential theft and reuse attacks improve, malicious attackers are finding it easier to achieve their goals. Credential theft often relies on operational practices or user credential exposure, so effective mitigations require a holistic approach that addresses people, processes, and technology. In addition, these attacks rely on the attacker stealing credentials after compromising a system to expand or persist access, so organizations must contain breaches rapidly by implementing strategies that prevent attackers from moving freely and undetected in a compromised network._” - -An important design consideration for Windows 10 was mitigating credential theft — in particular, derived credentials. Windows Defender Credential Guard provides significantly improved security against derived credential theft and reuse by implementing a significant architectural change in Windows designed to help eliminate hardware-based isolation attacks rather than simply trying to defend against them. - -When Credential Manager domain credentials, NTLM, and Kerberos derived credentials are protected using virtualization-based security, the credential theft attack techniques and tools used in many targeted attacks are blocked. Malware running in the operating system with administrative privileges can't extract secrets that are protected by virtualization-based security. While Windows Defender Credential Guard is a powerful mitigation, persistent threat attacks will likely shift to new attack techniques and you should also incorporate Windows Defender Device Guard, as described above, and other security strategies and architectures. - -### Information Protection -The GDPR is focused on information protection regarding data that is considered as personal or sensitive in relation to a natural person, or data subject. Device protection, protection against threats, and identity protection are all important elements of a Defense in Depth strategy surrounding a layer of information protection in your laptop and desktop systems. - -As to the protection of data, the GDPR recognizes that in assessing data security risk, consideration should be given to the risks that are presented such as accidental loss, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed. It also recommends that measures taken to maintain an appropriate level of security should consider the state-of-the-art and the costs of implementation in relation to the risks among other factors. - -Windows 10 provides built in risk mitigation capabilities for today’s threat landscape. In this section, we will look at the types of technologies that will help your journey toward GDPR compliance and at the same time provide you with solid overall data protection as part of a comprehensive information protection strategy. - -![Diagram of Microsoft's comprehensive information protection strategy](images/gdpr-comp-info-protection.png) - -#### Encryption for lost or stolen devices -The GDPR calls for mechanisms that implement appropriate technical security measures to confirm the ongoing confidentiality, integrity, and availability of both personal data and processing systems. BitLocker Encryption, first introduced as part of Microsoft's Next-Generation Secure Computing Base architecture in 2004 and made available with Windows Vista, is a built-in data protection feature that integrates with the operating system and addresses the threats of data theft or exposure from lost, stolen, or inappropriately decommissioned computers. - -BitLocker provides the most protection when used with a Trusted Platform Module (TPM) version 1.2 or later. The TPM is a hardware component installed in many newer computers by the computer manufacturers. It works with BitLocker to protect user data and to ensure that a computer has not been tampered with while the system was offline. - -Data on a lost or stolen computer is vulnerable to unauthorized access, either by running a software-attack tool against it or by transferring the computer's hard disk to a different computer. BitLocker helps mitigate unauthorized data access by enhancing file and system protections. BitLocker also helps render data inaccessible when BitLocker-protected computers are decommissioned or recycled. - -Related to BitLocker are Encrypted Hard Drives, a new class of hard drives that are self-encrypting at a hardware level and allow for full disk hardware encryption. Encrypted Hard Drives use the rapid encryption that is provided by BitLocker Drive Encryption to enhance data security and management. - -By offloading the cryptographic operations to hardware, Encrypted Hard Drives increase BitLocker performance and reduce CPU usage and power consumption. Because Encrypted Hard Drives encrypt data quickly, enterprise devices can expand BitLocker deployment with minimal impact on productivity. - -Some of the benefits of Encrypted Hard Drives include: - -- **Better performance.** Encryption hardware, integrated into the drive controller, allows the drive to operate at full data rate with no performance degradation. - -- **Strong security based in hardware.** Encryption is always "on" and the keys for encryption never leave the hard drive. User authentication is performed by the drive before it will unlock, independently of the operating system - -- **Ease of use.** Encryption is transparent to the user because it is on by default. There is no user interaction needed to enable encryption. Encrypted Hard Drives are easily erased using on-board encryption key; there is no need to re-encrypt data on the drive. - -- **Lower cost of ownership.** There is no need for new infrastructure to manage encryption keys, since BitLocker leverages your Active Directory Domain Services infrastructure to store recovery information. Your device operates more efficiently because processor cycles don't need to be used for the encryption process. - -#### Preventing accidental data leaks to unauthorized users -Part of the reality of your operating in a mobile-first, cloud-first world is the notion that some laptops will have multiple purposes – both business and personal. Yet that data that is considered as personal and sensitive regarding EU residents considered as “data subjects” must be protected in line with the requirements of the GDPR. - -Windows Information Protection helps people separate their work and personal data and keeps data encrypted wherever it’s stored. Your employees can safely use both work and personal data on the same device without switching applications. Windows Information Protection helps end users avoid inadvertent data leaks by sending a warning when copy/pasting information in non-corporate applications – end users can still proceed but the action will be logged centrally. - -For example, employees can’t send protected work files from a personal email account instead of their work account. They also can’t accidently post personal or sensitive data from a corporate site into a tweet. Windows Information Protection also helps ensure that they aren’t saving personal or sensitive data in a public cloud storage location. - -#### Capabilities to classify, assign permissions and share data -Windows Information Protection is designed to coexist with advanced data loss prevention (DLP) capabilities found in Microsoft 365 Apps for enterprise, Azure Information Protection, and Azure Rights Management. Advanced DLP prevents printing, for example, or protects work data that is emailed outside your company. - -To continuously protect your data, regardless of where it is stored, with whom it is shared, or if the device is running iOS, Android or Windows, the classification and protection needs to be built into the file itself, so this protection can travel with the data wherever it goes. Microsoft Azure Information Protection (AIP) is designed to provide this persistent data protection both on-premises and in the cloud. - -Data classification is an important part of any data governance plan. Adopting a classification scheme that applies throughout your business can be particularly helpful in responding to what the GDPR calls data subject (for example, your EU employee or customer) requests, because it enables enterprises to identify more readily and process personal data requests. - -Azure Information Protection can be used to help you classify and label your data at the time of creation or modification. Protection in the form of encryption, which the GDPR recognizes may be appropriate at times, or visual markings can then be applied to data needing protection. - -With Azure Information Protection, you can either query for data marked with a sensitivity label or intelligently identify sensitive data when a file or email is created or modified. Once identified, you can automatically classify and label the data – all based on the company’s desired policy. - -Azure Information Protection also helps your users share sensitive data in a secure manner. In the example below, information about a sensitive acquisition was encrypted and restricted to a group of people who were granted only a limited set of permissions on the information – they could modify the content but could not copy or print it. - -![Azure Information Protection screen with limitations](images/gdpr-azure-info-protection.png) - -## Related content for associated Windows 10 solutions - -- **Windows Hello for Business:** https://www.youtube.com/watch?v=WOvoXQdj-9E and https://docs.microsoft.com/windows/access-protection/hello-for-business/hello-identity-verification - -- **Microsoft Defender Antivirus:** https://www.youtube.com/watch?v=P1aNEy09NaI and https://docs.microsoft.com/windows/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10 - -- **Windows Defender Advanced Threat Protection:** https://www.youtube.com/watch?v=qxeGa3pxIwg and https://docs.microsoft.com/windows/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection - -- **Windows Defender Device Guard:** https://www.youtube.com/watch?v=F-pTkesjkhI and https://docs.microsoft.com/windows/device-security/device-guard/device-guard-deployment-guide - -- **Windows Defender Credential Guard:** https://www.youtube.com/watch?v=F-pTkesjkhI and https://docs.microsoft.com/windows/access-protection/credential-guard/credential-guard - -- **Windows Information Protection:** https://www.youtube.com/watch?v=wLkQOmK7-Jg and https://docs.microsoft.com/windows/threat-protection/windows-information-protection/protect-enterprise-data-using-wip - -- Windows 10 Security Guide: https://technet.microsoft.com/itpro/windows/keep-secure/windows-10-security-guide - -## Disclaimer -This article is a commentary on the GDPR, as Microsoft interprets it, as of the date of publication. We’ve spent a lot of time with GDPR and like to think we’ve been thoughtful about its intent and meaning. But the application of GDPR is highly fact-specific, and not all aspects and interpretations of GDPR are well-settled. - -As a result, this article is provided for informational purposes only and should not be relied upon as legal advice or to determine how GDPR might apply to you and your organization. We encourage you to work with a legally-qualified professional to discuss GDPR, how it applies specifically to your organization, and how best to ensure compliance. - -MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, AS TO THE INFORMATION IN THIS ARTICLE. This article is provided “as-is.” Information and views expressed in this article, including URL and other Internet website references, may change without notice. - -This article does not provide you with any legal rights to any intellectual property in any Microsoft product. You may copy and use this article for your internal, reference purposes only. - -Published September 2017
-Version 1.0
-© 2017 Microsoft. All rights reserved. diff --git a/windows/privacy/toc.yml b/windows/privacy/toc.yml index 48721791cf..18e7d05236 100644 --- a/windows/privacy/toc.yml +++ b/windows/privacy/toc.yml @@ -1,6 +1,5 @@ - name: Privacy href: index.yml - expanded: true items: - name: "Windows 10 & Privacy Compliance: A Guide for IT and Compliance Professionals" href: Windows-10-and-privacy-compliance.md diff --git a/windows/privacy/windows-personal-data-services-configuration.md b/windows/privacy/windows-personal-data-services-configuration.md deleted file mode 100644 index 273f2bac8d..0000000000 --- a/windows/privacy/windows-personal-data-services-configuration.md +++ /dev/null @@ -1,408 +0,0 @@ ---- -title: Windows 10 personal data services configuration -description: Learn more about Windows 10 configuration settings that are useful for complying with regulations such as the GDPR and protecting users' personal data. -keywords: privacy, GDPR, windows, IT -ms.prod: w10 -ms.mktglfcycl: manage -ms.sitesec: library -ms.pagetype: security -ms.localizationpriority: high -audience: ITPro -author: dansimp -ms.author: dansimp -manager: dansimp -ms.collection: M365-security-compliance -ms.topic: article -ms.date: 05/11/2018 -ms.reviewer: ---- -# Windows 10 personal data services configuration - -Applies to: -- Windows 10, version 1803 and newer - -Microsoft assembled a list of Windows 10 services configuration settings that are useful for personal data privacy protection and related regulations, such as the General Data Protection Regulation (GDPR). There is one section with settings for service data that is managed at Microsoft and a section for local data that is managed by an IT organization. - -IT Professionals that are interested in applying these settings via group policies can find the configuration for download [here](https://go.microsoft.com/fwlink/?linkid=874149). - -## Introduction - -Microsoft collects data from or generates it through interactions with users of Windows 10 devices. This information can contain personal data that may be used to provide, support, and improve Windows 10 services. - -Many Windows 10 services are controller services. A user can manage data collection settings, for example by opening *Start > Settings > Privacy* or by visiting the [Microsoft Privacy dashboard](https://account.microsoft.com/privacy). While this relationship between Microsoft and a user is evident in a consumer type scenario, an IT organization can influence that relationship. For example, the IT department has the ability to configure the Windows diagnostic data level across their organization by using Group Policy, registry, or Mobile Device Management (MDM) settings. - -Below is a collection of settings related to the Windows 10 personal data services configuration that IT Professionals can use as guidance for influencing Windows diagnostic data collection and personal data protection. - -## Windows diagnostic data - -Windows 10 collects Windows diagnostic data—such as usage data, performance data, inking, typing, and utterance data—and sends it back to Microsoft. That data is used for keeping the operating system secure and up-to-date, to troubleshoot problems, and to make product improvements. For users who have turned on "Tailored experiences", that data can also be used to offer personalized tips, ads, and recommendations to enhance Microsoft products and services for your needs. - -The following options for configuring Windows diagnostic data are relevant in this context. - -### Diagnostic level - -This setting determines the amount of Windows diagnostic data sent to Microsoft. - ->[!NOTE] ->In Windows 10, version 1709, Microsoft introduced a new feature: “Limit Enhanced diagnostic data to the minimum required by Windows Analytics”. When enabled, this feature limits the operating system diagnostic data events included in the Enhanced level to the smallest set of data required by [Windows Analytics](https://www.microsoft.com/windowsforbusiness/windows-analytics). For more information on the Enhanced level, see [Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md). - -#### Group Policy - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **Group Policy** | Computer Configuration\Administrative Templates\Windows Components\Data Collection and Preview Builds | ->| **Policy Name** | Allow Telemetry | ->| **Default setting** | 2 - Enhanced | ->| **Recommended** | 2 - Enhanced | - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **Group Policy** | User Configuration\Administrative Templates\Windows Components\Data Collection and Preview Builds | ->| **Policy Name** | Allow Telemetry | ->| **Default setting** | 2 - Enhanced | ->| **Recommended** | 2 - Enhanced | - ->[!NOTE] ->When both the Computer Configuration policy and User Configuration policy are set, the more restrictive policy is used. - -#### Registry - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **Registry key** | HKLM\Software\Policies\Microsoft\Windows\DataCollection | ->| **Value** | AllowTelemetry | ->| **Type** | REG_DWORD | ->| **Setting** | "00000002" | - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **Registry key** | HKCU\Software\Policies\Microsoft\Windows\DataCollection | ->| **Value** | AllowTelemetry | ->| **Type** | REG_DWORD | ->| **Setting** | "00000002" | - -#### MDM - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **MDM CSP** | System | ->| **Policy** | AllowTelemetry (scope: device and user) | ->| **Default setting** | 2 – Enhanced | ->| **Recommended** | 2 – Allowed | - -### Diagnostic opt-in change notifications - -This setting determines whether a device shows notifications about Windows diagnostic data levels to people on first logon or when changes occur in the diagnostic configuration. - -#### Group Policy - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **Group Policy** | Computer Configuration\Administrative Templates\Windows Components\Data Collection and Preview Builds | ->| **Policy Name** | Configure telemetry opt-in change notifications | ->| **Default setting** | Enabled | ->| **Recommended** | Enabled | - -#### Registry - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **Registry key** | HKLM\Software\Policies\Microsoft\Windows\DataCollection | ->| **Value** | DisableTelemetryOptInChangeNotification | ->| **Type** | REG_DWORD | ->| **Setting** | "00000000" | - -#### MDM - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **MDM CSP** | System | ->| **Policy** | ConfigureTelemetryOptInChangeNotification | ->| **Default setting** | 0 – Enabled | ->| **Recommended** | 0 – Enabled | - -### Configure telemetry opt-in setting user interface - -This setting determines whether people can change their own Windows diagnostic data level in *Start > Settings > Privacy > Diagnostics & feedback*. - -#### Group Policy - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **Group Policy** | Computer Configuration\Administrative Templates\Windows Components\Data Collection and Preview Builds | ->| **Policy Name** | Configure telemetry opt-in setting user interface | ->| **Default setting** | Enabled | ->| **Recommended** | Enabled | - -#### Registry - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **Registry key** | HKLM\Software\Policies\Microsoft\Windows\DataCollection | ->| **Value** | DisableTelemetryOptInSettingsUx | ->| **Type** | REG_DWORD | ->| **Setting** | "00000001" | - -#### MDM - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **MDM CSP** | System | ->| **Policy** | ConfigureTelemetryOptInSettingsUx | ->| **Default setting** | 0 – Enabled | ->| **Recommended** | 0 – Enabled | - -## Policies affecting personal data protection managed by the Enterprise IT - -There are additional settings usually managed by the Enterprise IT that also affect the protection of personal data. - -The following options for configuring these policies are relevant in this context. - -### BitLocker - -The following settings determine whether fixed and removable drives are protected by the BitLocker Drive Encryption. - -#### Fixed Data Drives - -#### Group Policy - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **Group Policy** | Computer Configuration\Administrative Templates\Windows Components\Bitlocker Drive Encryption\Fixed Data Drives | ->| **Policy Name** | Deny write access to fixed drives not protected by BitLocker | ->| **Default setting** | Not configured | ->| **Recommended** | Enabled | - -#### Registry - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **Registry key** | HKLM\System\CurrentControlSet\Policies\Microsoft\FVE | ->| **Value** | FDVDenyWriteAccess | ->| **Type** | REG_DWORD | ->| **Setting** | "00000001" | - -#### MDM - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **MDM CSP** | BitLocker | ->| **Policy** | FixedDrivesRequireEncryption | ->| **Default setting** | Disabled | ->| **Recommended** | Enabled (see [instructions](/windows/client-management/mdm/bitlocker-csp#fixeddrivesrequireencryption)) | - -#### Removable Data Drives - -#### Group Policy - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **Group Policy** | Computer Configuration\Administrative Templates\Windows Components\Bitlocker Drive Encryption\Removable Data Drives | ->| **Policy Name** | Deny write access to removable drives not protected by BitLocker | ->| **Default setting** | Not configured | ->| **Recommended** | Enabled | - -#### Registry - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **Registry key** | HKLM\System\CurrentControlSet\Policies\Microsoft\FVE | ->| **Value** | RDVDenyWriteAccess | ->| **Type** | REG_DWORD | ->| **Setting** | "00000001" | - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **Registry key** | HKLM\Software\Policies\Microsoft\FVE | ->| **Value** | RDVDenyCrossOrg | ->| **Type** | REG_DWORD | ->| **Setting** | "00000000" | - -#### MDM - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **MDM CSP** | BitLocker | ->| **Policy** | RemovableDrivesRequireEncryption | ->| **Default setting** | Disabled | ->| **Recommended** | Enabled (see [instructions](/windows/client-management/mdm/bitlocker-csp#removabledrivesrequireencryption)) | - -### Privacy – AdvertisingID - -This setting determines if the advertising ID, which preventing apps from using the ID for experiences across apps, is turned off. - -#### Group Policy - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **Group Policy** | Computer Configuration\Administrative Templates\System\User Profiles | ->| **Policy Name** | Turn off the advertising ID | ->| **Default setting** | Not configured | ->| **Recommended** | Enabled | - -#### Registry - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **Registry key** | HKLM\Software\Policies\Microsoft\Windows\AdvertisingInfo | ->| **Value** | DisabledByGroupPolicy | ->| **Type** | REG_DWORD | ->| **Setting** | "00000001" | - -#### MDM - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **MDM CSP** | Privacy | ->| **Policy** | DisableAdvertisingId | ->| **Default setting** | 65535 (default) - Not configured | ->| **Recommended** | 1 – Enabled | - -### Edge - -These settings whether employees send “Do Not Track” from the Microsoft Edge web browser to websites. - ->[!NOTE] ->Please see [this Microsoft blog post](https://blogs.microsoft.com/on-the-issues/2015/04/03/an-update-on-microsofts-approach-to-do-not-track/) for more details on why the “Do Not Track” is no longer the default setting. - -#### Group Policy - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **Group Policy** | Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge | ->| **Policy Name** | Configure Do Not Track | ->| **Default setting** | Disabled | ->| **Recommended** | Disabled | - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **Group Policy** | User Configuration\Administrative Templates\Windows Components\Microsoft Edge | ->| **Policy Name** | Configure Do Not Track | ->| **Default setting** | Disabled | ->| **Recommended** | Disabled | - -#### Registry - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **Registry key** | HKLM\Software\Policies\Microsoft\MicrosoftEdge\Main | ->| **Value** | DoNotTrack | ->| **Type** | REG_DWORD | ->| **Setting** | "00000000" | - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **Registry key** | HKCU\Software\Policies\Microsoft\MicrosoftEdge\Main | ->| **Value** | DoNotTrack | ->| **Type** | REG_DWORD | ->| **Setting** | "00000000" | - -#### MDM - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **MDM CSP** | Browser | ->| **Policy** | AllowDoNotTrack (scope: device + user) | ->| **Default setting** | 0 (default) – Not allowed | ->| **Recommended** | 0 – Not allowed | - -### Internet Explorer - -These settings whether employees send “Do Not Track” header from the Microsoft Explorer web browser to websites. - -#### Group Policy - -> [!div class="mx-tableFixed"] ->| | | ->|:-|:-| ->| **Group Policy** | Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page | ->| **Policy Name** | Always send Do Not Track header | ->| **Default setting** | Disabled | ->| **Recommended** | Disabled | - -> [!div class="mx-tableFixed"] ->||| ->|:-|:-| ->| **Group Policy** | User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page | ->| **Policy Name** | Always send Do Not Track header | ->| **Default setting** | Disabled | ->| **Recommended** | Disabled | - -#### Registry - -> [!div class="mx-tableFixed"] ->||| ->|:-|:-| ->| **Registry key** | HKLM\Software\Policies\Microsoft\Internet Explorer\Main | ->| **Value** | DoNotTrack | ->| **Type** | REG_DWORD | ->| **Setting** | "00000000" | - -> [!div class="mx-tableFixed"] ->||| ->|:-|:-| ->| **Registry key** | HKCU\Software\Policies\Microsoft\Internet Explorer\Main | ->| **Value** | DoNotTrack | ->| **Type** | REG_DWORD | ->| **Setting** | "00000000" | - -#### MDM - -> [!div class="mx-tableFixed"] ->||| ->|:-|:-| ->| **MDM CSP** | N/A | - -## Additional resources - -### FAQs - -* [Windows 10 feedback, diagnostics, and privacy](https://privacy.microsoft.com/windows-10-feedback-diagnostics-and-privacy) -* [Microsoft Edge and privacy](https://privacy.microsoft.com/windows-10-microsoft-edge-and-privacy) -* [Windows Hello and privacy](https://privacy.microsoft.com/windows-10-windows-hello-and-privacy) -* [Wi-Fi Sense](https://privacy.microsoft.com/windows-10-about-wifi-sense) - -### Blogs - -* [Privacy and Windows 10](https://blogs.windows.com/windowsexperience/2015/09/28/privacy-and-windows-10) - -### Privacy Statement - -* [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement) - -### Windows Privacy on docs.microsoft.com - -* [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) -* [Manage connections from Windows 10 operating system components to Microsoft services](https://docs.microsoft.com/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services) -* [Understanding Windows diagnostic data](configure-windows-diagnostic-data-in-your-organization.md#understanding-windows-diagnostic-data) -* [Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md) - -### Other resources - -* [Privacy at Microsoft](https://privacy.microsoft.com/) From 5f3a87ef1d136e86421f2adb955fa03660da7680 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Mon, 8 Jun 2020 19:35:54 -0700 Subject: [PATCH 019/589] andddd fixing redirects --- .openpublishing.redirection.json | Bin 2578320 -> 2577980 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 2b4fa84488cb25d793c2476fbe101636fd6422fb..4ae1cb972425fdf9204f8bf89cf24045e5753c6e 100644 GIT binary patch delta 125 zcmW;AyA6U+7=Y1S#W&(xK}A8pTSDy=#29THhTH|Ct(aLOO2;I`MprD zTcI)(HR>2NXwsrhhb}!#`dADYGGfexDKq9QuyI(jVvWm&Egn8Q0zxA8rLK;W#DVq5 WQ+-vEK7B*pC;j=S{IZnuMIXK#-zp0L delta 137 zcmYMpyAHun9Khim>bSHnb-z=so=rT4!O)0!4v)~`H<^UUf9e}ZEKEE^NAV;^qi_9Q z*F+s}iHcEV$YPO0lczwD5;hKHDpaZAQl~+a7Hv9o>CtDvkP%}hO!1iE6EG*do6klf hTkmCk2!lteV Date: Mon, 8 Jun 2020 19:46:22 -0700 Subject: [PATCH 020/589] adding a card to index --- windows/privacy/index.yml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/windows/privacy/index.yml b/windows/privacy/index.yml index 02e0f86fd7..76b4acd568 100644 --- a/windows/privacy/index.yml +++ b/windows/privacy/index.yml @@ -51,6 +51,13 @@ productDirectory: imageSrc: https://docs.microsoft.com/media/common/i_get-started.svg summary: Get examples of the types of optional diagnostic data collected from Windows url: windows-diagnostic-data.md + # Card + - title: Changes to Windows diagnostic data collection + imageSrc: https://docs.microsoft.com/media/common/i_get-started.svg + summary: See what changes Windows is making to align to the new data collection taxonomy + url: windows-diagnostic-data.md + + /media/common/i_build.svg # conceptualContent section (optional) # conceptualContent: From d1edcf53a6dfa9e1bbc791ba058bd34625d8c337 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Mon, 8 Jun 2020 19:49:02 -0700 Subject: [PATCH 021/589] and possibly fixing toc for it pro guide --- windows/privacy/toc.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/toc.yml b/windows/privacy/toc.yml index 18e7d05236..24234a9e3b 100644 --- a/windows/privacy/toc.yml +++ b/windows/privacy/toc.yml @@ -2,7 +2,7 @@ href: index.yml items: - name: "Windows 10 & Privacy Compliance: A Guide for IT and Compliance Professionals" - href: Windows-10-and-privacy-compliance.md + href: windows-10-and-privacy-compliance.md - name: Configure Windows diagnostic data in your organization href: configure-windows-diagnostic-data-in-your-organization.md - name: Changes to Windows diagnostic data collection From 2589b1c35323ab64bebe82d572ad29b5bd244879 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Mon, 8 Jun 2020 20:04:41 -0700 Subject: [PATCH 022/589] fixing index again --- windows/privacy/index.yml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/windows/privacy/index.yml b/windows/privacy/index.yml index 76b4acd568..c80f9f16aa 100644 --- a/windows/privacy/index.yml +++ b/windows/privacy/index.yml @@ -53,11 +53,9 @@ productDirectory: url: windows-diagnostic-data.md # Card - title: Changes to Windows diagnostic data collection - imageSrc: https://docs.microsoft.com/media/common/i_get-started.svg + imageSrc: https://docs.microsoft.com/media/common/i_build.svg summary: See what changes Windows is making to align to the new data collection taxonomy - url: windows-diagnostic-data.md - - /media/common/i_build.svg + url: windows-diagnostic-data.md # conceptualContent section (optional) # conceptualContent: From eec276404400549e9d3902ec876aa70750d867e2 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Tue, 9 Jun 2020 12:52:18 -0700 Subject: [PATCH 023/589] Update toc.yml --- windows/privacy/toc.yml | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/windows/privacy/toc.yml b/windows/privacy/toc.yml index 24234a9e3b..7378b77892 100644 --- a/windows/privacy/toc.yml +++ b/windows/privacy/toc.yml @@ -33,10 +33,8 @@ href: windows-diagnostic-data.md - name: Windows 10, version 1703 optional diagnostic data href: windows-diagnostic-data-1703.md - - name: Deprecated diagnostic data levels - items: - - name: Windows 10 diagnostic data events and fields collected through the limit enhanced diagnostic data policy - href: enhanced-diagnostic-data-windows-analytics-events-and-fields.md + - name: Windows 10 diagnostic data events and fields collected through the limit enhanced diagnostic data policy + href: enhanced-diagnostic-data-windows-analytics-events-and-fields.md - name: Manage Windows 10 connection endpoints items: - name: Manage connections from Windows operating system components to Microsoft services @@ -62,4 +60,4 @@ - name: Connection endpoints for non-Enterprise editions of Windows 10, version 1803 href: windows-endpoints-1803-non-enterprise-editions.md - name: Connection endpoints for non-Enterprise editions of Windows 10, version 1709 - href: windows-endpoints-1709-non-enterprise-editions.md \ No newline at end of file + href: windows-endpoints-1709-non-enterprise-editions.md From 3879b805213ecb837823871baef39017a0b430e8 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Tue, 9 Jun 2020 13:23:56 -0700 Subject: [PATCH 024/589] Update windows-10-and-privacy-compliance.md --- windows/privacy/windows-10-and-privacy-compliance.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/privacy/windows-10-and-privacy-compliance.md b/windows/privacy/windows-10-and-privacy-compliance.md index f9bf3793a0..23ab033106 100644 --- a/windows/privacy/windows-10-and-privacy-compliance.md +++ b/windows/privacy/windows-10-and-privacy-compliance.md @@ -49,7 +49,7 @@ The following table provides an overview of the Windows 10 privacy settings pres | Feature/Setting | Description | Supporting Content | Privacy Statement | | --- | --- | --- | --- | -| Diagnostic Data |

Microsoft uses diagnostic data to keep Windows secure, up to date, troubleshoot problems, and make product improvements. Regardless of what choices you make for diagnostic data collection, the device will be just as secure and will operate normally. This data is collected by Microsoft and stored with one or more unique identifiers that can help us recognize an individual user on an individual device and understand the device's service issues and use patterns.

Diagnostic data is categorized into the following:

  • **Required diagnostic data**
    Previously known as basic diagnostic data, required diagnostic data includes information about your device, its settings, capabilities, and whether it is performing properly, whether a device is ready for an update, and whether there are factors that may impede the ability to receive updates, such as low battery, limited disk space, or connectivity through a paid network. You can find out what is collected with required diagnostic data [here](https://docs.microsoft.com/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004).
  • **Optional diagnostic data**
    Previously known as full diagnostic data, optional diagnostic data includes more detailed information about your device and its settings, capabilities, and device health. When you choose to send optional diagnostic data, required diagnostic data will always be included. You can find out the types of optional diagnostic data collected [here](https://docs.microsoft.com/windows/privacy/windows-diagnostic-data).

| [Learn more]https://support.microsoft.com/help/4468236/diagnostics-feedback-and-privacy-in-windows-10-microsoft-privacy)

[Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#maindiagnosticsmodule) | +| Diagnostic Data |

Microsoft uses diagnostic data to keep Windows secure, up to date, troubleshoot problems, and make product improvements. Regardless of what choices you make for diagnostic data collection, the device will be just as secure and will operate normally. This data is collected by Microsoft and stored with one or more unique identifiers that can help us recognize an individual user on an individual device and understand the device's service issues and use patterns.

Diagnostic data is categorized into the following:

  • **Required diagnostic data**
    Previously known as basic diagnostic data, required diagnostic data includes information about your device, its settings, capabilities, and whether it is performing properly, whether a device is ready for an update, and whether there are factors that may impede the ability to receive updates, such as low battery, limited disk space, or connectivity through a paid network. You can find out what is collected with required diagnostic data [here](https://docs.microsoft.com/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004).
  • **Optional diagnostic data**
    Previously known as full diagnostic data, optional diagnostic data includes more detailed information about your device and its settings, capabilities, and device health. When you choose to send optional diagnostic data, required diagnostic data will always be included. You can find out the types of optional diagnostic data collected [here](https://docs.microsoft.com/windows/privacy/windows-diagnostic-data).

| [Learn more](https://support.microsoft.com/help/4468236/diagnostics-feedback-and-privacy-in-windows-10-microsoft-privacy)

[Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#maindiagnosticsmodule) | | Inking and typing diagnostics | Microsoft collects optional inking and typing diagnostic data to improve the language recognition and suggestion capabilities of apps and services running on Windows. | [Learn more](https://support.microsoft.com/help/4468236/diagnostics-feedback-and-privacy-in-windows-10-microsoft-privacy) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#maindiagnosticsmodule) | | Speech | Use your voice for dictation and to talk to Cortana and other apps that use Windows cloud-based speech recognition. Microsoft collects voice data to help improve speech services. | [Learn more](https://support.microsoft.com/help/4468250/windows-10-speech-voice-activation-inking-typing-privacy) | [Privacy Statement](https://privacy.microsoft.com/privacystatement#mainspeechinkingtypingmodule) | | Location | Get location-based experiences like directions and weather. Let Windows and apps request your location and allow Microsoft to use your location data to improve location services. | [Learn more](https://support.microsoft.com/help/4468240/windows-10-location-service-and-privacy) |[Privacy Statement](https://privacy.microsoft.com/privacystatement#mainlocationservicesmotionsensingmodule) | @@ -207,4 +207,4 @@ An administrator can configure privacy-related settings, such as choosing to onl * [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) * [Privacy at Microsoft](https://privacy.microsoft.com/privacy-report) * [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection.md) -* [Microsoft Service Trust Portal](https://servicetrust.microsoft.com/) \ No newline at end of file +* [Microsoft Service Trust Portal](https://servicetrust.microsoft.com/) From 27e00fd1bff94153fceac6428247d7c203ad39ef Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Tue, 9 Jun 2020 13:37:58 -0700 Subject: [PATCH 025/589] Update changes-to-windows-diagnostic-data-collection.md --- .../privacy/changes-to-windows-diagnostic-data-collection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/changes-to-windows-diagnostic-data-collection.md b/windows/privacy/changes-to-windows-diagnostic-data-collection.md index 8ccdc3aa0d..6f0d9b215c 100644 --- a/windows/privacy/changes-to-windows-diagnostic-data-collection.md +++ b/windows/privacy/changes-to-windows-diagnostic-data-collection.md @@ -88,4 +88,4 @@ Customers who use services that depend on Windows diagnostic data, such as Micro The following provides a list of the known changes: - [Microsoft Managed Desktop](https://aka.ms/mmd-diagnostic-data-level) -- Desktop Analytics \ No newline at end of file +- [Desktop Analytics](https://docs.microsoft.com/mem/configmgr/desktop-analytics/overview) From ac971dac5e5eabeda47a22fb6c7be5e993e15e10 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Tue, 9 Jun 2020 13:51:48 -0700 Subject: [PATCH 026/589] Update changes-to-windows-diagnostic-data-collection.md --- .../privacy/changes-to-windows-diagnostic-data-collection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/changes-to-windows-diagnostic-data-collection.md b/windows/privacy/changes-to-windows-diagnostic-data-collection.md index 6f0d9b215c..078c9a01c0 100644 --- a/windows/privacy/changes-to-windows-diagnostic-data-collection.md +++ b/windows/privacy/changes-to-windows-diagnostic-data-collection.md @@ -17,7 +17,7 @@ ms.topic: article # Changes to Windows diagnostic data collection -Applies to: +**Applies to** - Windows 10, version 1903 and newer - The next version of Windows Server From 3d3c2beaaac93fb9d66a13f28d87d7f8f0d862cb Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Mon, 22 Jun 2020 10:14:06 -0700 Subject: [PATCH 027/589] Update changes-to-windows-diagnostic-data-collection.md --- .../changes-to-windows-diagnostic-data-collection.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/privacy/changes-to-windows-diagnostic-data-collection.md b/windows/privacy/changes-to-windows-diagnostic-data-collection.md index 078c9a01c0..8d79aa0bbf 100644 --- a/windows/privacy/changes-to-windows-diagnostic-data-collection.md +++ b/windows/privacy/changes-to-windows-diagnostic-data-collection.md @@ -21,7 +21,7 @@ ms.topic: article - Windows 10, version 1903 and newer - The next version of Windows Server -Microsoft is deeply committed to providing you with effective controls over your data and ongoing transparency into our data handling practices. As part of this effort, we are moving our major products and services to a model where data sent back to Microsoft from customer devices will be classified as either **Required** or **Optional**. We believe this will provide our customers with a simpler experience – information should be easier to find, easier to understand, and easier to act upon through the tools we provide. +Microsoft is committed to providing you with effective controls over your data and ongoing transparency into our data handling practices. As part of this effort, we are moving our major products and services to a model where data sent back to Microsoft from customer devices will be classified as either **Required** or **Optional**. We believe this will provide our customers with a simpler experience – information should be easier to find, easier to understand, and easier to act upon through the tools we provide. This topic is meant for IT administrators and explains the changes Windows is making to align to the new data collection taxonomy. These changes are focused in two areas: @@ -49,7 +49,7 @@ Starting in Windows 10, version 1903 and newer, both the **Out-of-Box-Experience ## Behaviorial changes -In an upcoming release of Windows 10, we’re simplifying your diagnostic data controls by moving from four diagnostic data controls to three: **Diagnostic data off**, **Required**, and **Optional**. If your devices are set to **Enhanced** when they are upgraded, the device settings will be migrated to the more privacy-preserving setting of **Required diagnostic data**, which means that analytic services that leverage enhanced data collection may not work properly. For a list of services, see the section named, **Services that rely on Enhanced diagnostic data**, later in this topic. Administrators should read through the details and determine whether to apply these new policies to restore the same collection settings as they had before this change. For a list of steps, see the section named **Configure a Windows 10 device to limit diagnostics**. For more information on services that rely on Enhanced diagnostic data, see **Services that rely on Enhanced diagnostic data**. +In an upcoming release of Windows 10, we’re simplifying your diagnostic data controls by moving from four diagnostic data controls to three: **Diagnostic data off**, **Required**, and **Optional**. If your devices are set to **Enhanced** when they are upgraded, the device settings will be migrated to the more privacy-preserving setting of **Required diagnostic data**, which means that analytic services that leverage enhanced data collection may not work properly. For a list of services, see the section named, **Services that rely on Enhanced diagnostic data**, later in this topic. Administrators should read through the details and determine whether to apply these new policies to restore the same collection settings as they had before this change. For a list of steps, see the section named **Configure a Windows 10 device to limit crash dumps and logs**. For more information on services that rely on Enhanced diagnostic data, see **Services that rely on Enhanced diagnostic data**. Additionally, you will see the following policy changes in an upcoming release of Windows 10: @@ -72,9 +72,9 @@ A final set of changes includes two new policies that can help you fine-tune dia >[!Important] >All of the changes mentioned in this section will not be released on versions of Windows, version 1809 and earlier as well as Windows Server 2019 and earlier. -## Configure a Windows 10 device to limit diagnostics +## Configure a Windows 10 device to limit crash dumps and logs -With the Enhanced diagnostic data level being split out into new policies, we're providing additional controls to manage what types of dumps are collected and whether to send additional diagnostic logs. Here are some steps on how to configure them: +With the Enhanced diagnostic data level being split out into new policies, we're providing additional controls to manage what types of crash dumps are collected and whether to send additional diagnostic logs. Here are some steps on how to configure them: 1. Choose to send optional diagnostic data by setting one of the following policies: - Group Policy: Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Allow Diagnostic Data**. Set the policy value to **Send optional diagnostic data**. @@ -84,8 +84,8 @@ With the Enhanced diagnostic data level being split out into new policies, we're ## Services that rely on Enhanced diagnostic data -Customers who use services that depend on Windows diagnostic data, such as Microsoft Managed Desktop or Desktop Analytics, may be impacted by the functional changes when they are released. These services will be updated to address these changes and guidance will be published on how to configure them properly. +Customers who use services that depend on Windows diagnostic data, such as Microsoft Managed Desktop or Desktop Analytics, may be impacted by the behavioral changes when they are released. These services will be updated to address these changes and guidance will be published on how to configure them properly. -The following provides a list of the known changes: +The following provides information on the current configurations: - [Microsoft Managed Desktop](https://aka.ms/mmd-diagnostic-data-level) - [Desktop Analytics](https://docs.microsoft.com/mem/configmgr/desktop-analytics/overview) From 633f78929d95da88e03c12e44a1bd83df8d8b0b5 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Mon, 22 Jun 2020 10:19:24 -0700 Subject: [PATCH 028/589] Update configure-windows-diagnostic-data-in-your-organization.md --- ...figure-windows-diagnostic-data-in-your-organization.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md index baf24cbc3f..66c3da6272 100644 --- a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md +++ b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md @@ -31,7 +31,7 @@ This article applies to Windows 10, Windows Server, Surface Hub, and Hololens di ## Overview -Microsoft collects Windows diagnostic data to solve problems and to keep Windows up to date, secure, and operating properly. It also helps us improve Windows and related Microsoft products and services and, for customers who have turned on the **Tailored experiences** setting, to provide more relevant tips and recommendations to tailor Microsoft and third-party products and services for Windows to the customer’s needs. +Microsoft collects Windows diagnostic data to solve problems and to keep Windows up to date, secure, and operating properly. It also helps us improve Windows and related Microsoft products and services and, for customers who have turned on the **Tailored experiences** setting, to provide more relevant tips and recommendations to enhance Microsoft and third-party products and services for the customer’s needs. For more information about how Windows diagnostic data is used, see [Diagnostics, feedback, and privacy in Windows 10](https://support.microsoft.com/help/4468236/diagnostics-feedback-and-privacy-in-windows-10-microsoft-privacy). @@ -72,7 +72,7 @@ All diagnostic data is encrypted using TLS and uses certificate pinning during t ### Endpoints -The following table lists the endpoints related how you can manage the collection and control of diagnostic data. For more information around the endpoints that are used to send data back to Microsoft, see [Manage connection endpoints for Windows 10 Enterprise, version 1903](manage-windows-1903-endpoints.md). +The following table lists the endpoints related to how you can manage the collection and control of diagnostic data. For more information around the endpoints that are used to send data back to Microsoft, see [Manage connection endpoints for Windows 10 Enterprise, version 1903](manage-windows-1903-endpoints.md). | Windows service | Endpoint | | - | - | @@ -84,7 +84,7 @@ The following table lists the endpoints related how you can manage the collectio ### Data access -The principle of least privileged access guides access to Windows diagnostic data. Microsoft does not share personal data of our customers with third parties, except at the customer’s discretion or for the limited purposes described in the [Privacy Statement](https://privacy.microsoft.com/en-US/privacystatement). Microsoft may share business reports with hardware manufacturers and third-party partners that include aggregated and anonymized diagnostic data information. Data-sharing decisions are made by an internal team including privacy, legal, and data management. Only Microsoft personnel with a valid business justification are permitted access. +The principle of least privileged access guides access to Windows diagnostic data. Microsoft does not share personal data of our customers with third parties, except at the customer’s discretion or for the limited purposes described in the [Privacy Statement](https://privacy.microsoft.com/en-US/privacystatement). Microsoft may share business reports with hardware manufacturers and third-party partners that include aggregated and deidentified diagnostic data information. Data-sharing decisions are made by an internal team including privacy, legal, and data management. ### Retention @@ -212,4 +212,4 @@ Use [Policy Configuration Service Provider (CSP)](https://docs.microsoft.com/win ## Limit optional diagnostic data for Desktop Analytics -For more information about how to limit the diagnostic data to the minimum required by Desktop Analytics, see [Enable data sharing for Desktop Analytics](https://docs.microsoft.com/mem/configmgr/desktop-analytics/enable-data-sharing). \ No newline at end of file +For more information about how to limit the diagnostic data to the minimum required by Desktop Analytics, see [Enable data sharing for Desktop Analytics](https://docs.microsoft.com/mem/configmgr/desktop-analytics/enable-data-sharing). From 89e916aa63bcdd6f8e0b24c912cb22ad89cb873d Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Mon, 22 Jun 2020 10:19:58 -0700 Subject: [PATCH 029/589] Update windows-10-and-privacy-compliance.md --- windows/privacy/windows-10-and-privacy-compliance.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/windows-10-and-privacy-compliance.md b/windows/privacy/windows-10-and-privacy-compliance.md index 23ab033106..e285fe5768 100644 --- a/windows/privacy/windows-10-and-privacy-compliance.md +++ b/windows/privacy/windows-10-and-privacy-compliance.md @@ -28,7 +28,7 @@ Applies to: >[!IMPORTANT] >Microsoft is [increasing transparency](https://blogs.microsoft.com/on-the-issues/2019/04/30/increasing-transparency-and-customer-control-over-data/) by categorizing the data we collect as required or optional. Windows 10 is in the process of updating devices to reflect this new categorization, and during this transition Basic diagnostic data will be recategorized as Required diagnostic data and Full diagnostic data will be recategorized as Optional diagnostic data. For more information, see [Changes to Windows diagnostic data](changes-to-windows-diagnostic-data-collection.md). -At Microsoft, we are deeply committed to data privacy across all our products and services. With this guide, we provide administrators and compliance professionals with data privacy considerations for Windows 10. +At Microsoft, we are committed to data privacy across all our products and services. With this guide, we provide administrators and compliance professionals with data privacy considerations for Windows 10. Microsoft collects data through multiple interactions with users of Windows 10 devices. This information can contain personal data that may be used to provide, secure, and improve Windows 10 services. To help users and organizations control the collection of personal data, Windows 10 provides comprehensive transparency features, settings choices, controls, and support for data subject requests, all of which are detailed in this article. From 37f0b2295c3dca2ad57b1a3020e517abf4892b02 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Mon, 22 Jun 2020 10:50:17 -0700 Subject: [PATCH 030/589] Update configure-windows-diagnostic-data-in-your-organization.md --- .../configure-windows-diagnostic-data-in-your-organization.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md index 66c3da6272..130d0e89ac 100644 --- a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md +++ b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md @@ -106,7 +106,7 @@ Here’s a summary of the types of data that is included with each setting: | **Diagnostic data events** | No Windows diagnostic data sent. | Minimum data required to keep the device secure, up to date, and performing as expected. | Additional data about the websites you browse, how Windows and apps are used and how they perform, and device activity. The additional data helps Microsoft to fix and improve products and services for all users. | Additional data about the websites you browse, how Windows and apps are used and how they perform. This data also includes data about device activity, and enhanced error reporting that helps Microsoft to fix and improve products and services for all users.| | **Crash Metadata** | N/A | Yes | Yes | Yes | | **Crash Dumps** | N/A | No | Triage dumps only

For more information about crash dumps, see [Windows Error Reporting](https://docs.microsoft.com/windows/win32/wer/windows-error-reporting). | Full memory dumps

For more information about crash dumps, see [Windows Error Reporting](https://docs.microsoft.com/windows/win32/wer/windows-error-reporting). | -| **Diagnostic logs** | N/A | No | No | No | +| **Diagnostic logs** | N/A | No | No | Yes | | **Data collection** | N/A | 100% | Sampling applies | Sampling applies | From 262c8be0f7f3649ce2f3f895cf70ede98a3f51c3 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 23 Jun 2020 08:54:03 -0700 Subject: [PATCH 031/589] some content fixes --- .../windows-autopilot/autopilot-mbr.md | 841 +++++++++--------- .../deployment/windows-autopilot/bitlocker.md | 10 +- .../demonstrate-deployment-on-vm.md | 12 +- .../windows-autopilot/existing-devices.md | 18 +- .../images/hyper-v-feature.png | Bin 0 -> 26077 bytes .../windows-autopilot/images/svr_mgr2.png | Bin 0 -> 62287 bytes .../windows-autopilot/policy-conflicts.md | 4 +- .../windows-autopilot/troubleshooting.md | 68 +- .../windows-autopilot-whats-new.md | 6 + 9 files changed, 483 insertions(+), 476 deletions(-) create mode 100644 windows/deployment/windows-autopilot/images/hyper-v-feature.png create mode 100644 windows/deployment/windows-autopilot/images/svr_mgr2.png diff --git a/windows/deployment/windows-autopilot/autopilot-mbr.md b/windows/deployment/windows-autopilot/autopilot-mbr.md index f103766d0d..28c376ab92 100644 --- a/windows/deployment/windows-autopilot/autopilot-mbr.md +++ b/windows/deployment/windows-autopilot/autopilot-mbr.md @@ -1,420 +1,421 @@ ---- -title: Windows Autopilot motherboard replacement -ms.reviewer: -manager: laurawi -description: Windows Autopilot deployment MBR scenarios -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: deploy -audience: itpro author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# Windows Autopilot motherboard replacement scenario guidance - -**Applies to** - -- Windows 10 - -This document offers guidance for Windows Autopilot device repair scenarios that Microsoft partners can use in Motherboard Replacement (MBR) situations, and other servicing scenarios. - -Repairing Autopilot enrolled devices is complex, as it tries to balance OEM requirements with Windows Autopilot requirements. Specifically, OEM’s require strict uniqueness across motherboards, MAC addresses, etc., while Windows Autopilot requires strict uniqueness at the Hardware ID level for each device to enable successful registration. The Hardware ID does not always accommodate all the OEM hardware component requirements, thus these requirements are sometimes at odds, causing issues with some repair scenarios. - -**Motherboard Replacement (MBR)** - -If a motherboard replacement is needed on a Windows Autopilot device, the following process is recommended: - -1. [Deregister the device](#deregister-the-autopilot-device-from-the-autopilot-program) from Windows Autopilot -2. [Replace the motherboard](#replace-the-motherboard) -3. [Capture a new device ID (4K HH)](#capture-a-new-autopilot-device-id-4k-hh-from-the-device) -4. [Reregister the device](#reregister-the-repaired-device-using-the-new-device-id) with Windows Autopilot -5. [Reset the device](#reset-the-device) -6. [Return the device](#return-the-repaired-device-to-the-customer) - -Each of these steps is described below. - -## Deregister the Autopilot device from the Autopilot program - -Before the device arrives at the repair facility, it must be deregistered by the entity that registered it. Only the entity that registered the device can deregister it. This might be the customer IT Admin, the OEM, or the CSP partner. If the IT Admin registered the device, they likely did so via Intune (or possibly the Microsoft Store for Business). In that case, they should deregister the device from Intune (or MSfB). This is necessary because devices registered in Intune will not show up in MPC. However, if the OEM or CSP partner registered the device, they likely did so via the Microsoft Partner Center (MPC). In that case, they should deregister the device from MPC, which will also remove it from the customer IT Admin’s Intune account. Below, we describe the steps an IT Admin would go through to deregister a device from Intune, and the steps an OEM or CSP would go through to deregister a device from MPC. - -**NOTE**: When possible, an OEM or CSP should register Autopilot devices, rather than having the customer do it. This will avoid problems where OEMs or CSPs may not be able to deregister a device if, for example, a customer leasing a device goes out of business before deregistering it themselves. - -**EXCEPTION**: If a customer grants an OEM permission to register devices on their behalf via the automated consent process, then an OEM can use the API to deregister devices they didn’t register themselves (instead, the customer registered the devices). But keep in mind that this would only remove those devices from the Autopilot program, it would not disenroll them from Intune or disjoin them from AAD. The customer must do those steps, if desired, through Intune. - -### Deregister from Intune - -To deregister an Autopilot device from Intune, an IT Admin would: - -1. Sign in to their Intune account -2. Navigate to Intune > Groups > All groups -3. Remove the desired device from its group -4. Navigate to Intune > Devices > All devices -5. Select the checkbox next to the device you want to delete, then click the Delete button on the top menu -6. Navigate to Intune > Devices > Azure AD devices -7. Select the checkbox next to the device you want to delete, then click the Delete button along the top menu -8. Navigate to Intune > Device enrollment > Windows enrollment > Devices -9. Select the checkbox next to the device you want to deregister -10. Click the extended menu icon (“…”) on the far right end of the line containing the device you want to deregister in order to expose an additional menu with the option to “unassign user” -11. Click “Unassign user” if the device was previously assigned to a user; if not, this option will be grayed-out and can be ignored -12. With the unassigned device still selected, click the Delete button along the top menu to remove this device - -**NOTE**: These steps deregister the device from Autopilot, but also unenroll the device from Intune, and disjoin the device from AAD. While it may appear that only deregistering the device from Autopilot is needed, there are certain barriers in place within Intune that necessitate all the steps above be done, which is best practice anyway in case the device gets lost or becomes unrecoverable, to eliminate the possibility of orphaned devices existing in the Autopilot database, or Intune, or AAD. If a device gets into an unrecoverable state, you can contact the appropriate [Microsoft support alias](autopilot-support.md) for assistance. - -The deregistration process will take about 15 minutes. You can accelerate the process by clicking the “Sync” button, then “Refresh” the display until the device is no longer present. - -More details on deregistering devices from Intune can be found [here](https://docs.microsoft.com/intune/enrollment-autopilot#create-an-autopilot-device-group). - -### Deregister from MPC - -To deregister an Autopilot device from the Microsoft Partner Center (MPC), a CSP would: - -1. Log into MPC -2. Navigate to Customer > Devices -3. Select the device to be deregistered and click the “Delete device” button - -![devices](images/devices.png) - -**NOTE**: Deregistering a device from Autopilot in MPC does only that; it does not also unenroll the device from the MDM (Intune), nor does it disjoin the device from AAD. Therefore, if possible, the OEM/CSP ideally should work with the customer IT Admin to have the device fully removed per the Intune steps in the previous section. - -Alternatively, an OEM partner that has integrated the OEM Direct APIs can deregister a device by calling the AutopilotDeviceRegistration API with the TenantID and TenantDomain fields left blank in the request call. - -Because the repair facility will not have access to the user’s login credentials, the repair facility will have to reimage the device as part of the repair process. This means that the customer should do three things before sending the device off for repair: -1. Copy all important data off the device. -2. Let the repair facility know which version of Windows they should reinstall after the repair. -3. If applicable, let the repair facility know which version of Office they should reinstall after the repair. - -## Replace the motherboard - -Technicians replace the motherboard (or other hardware) on the broken device. A replacement DPK is injected. - -Repair and key replacement processes vary between facilities. Sometimes repair facilities receive motherboard spare parts from OEMs that have replacement DPKs already injected, but sometimes not. Sometimes repair facilities receive fully-functional BIOS tools from OEMs, but sometimes not. This means that the quality of the data in the BIOS after a MBR varies. To ensure the repaired device will still be Autopilot-capable following its repair, the new (post-repair) BIOS should be able to successfully gather and populate the following information at a minimum: - -- DiskSerialNumber -- SmbiosSystemSerialNumber -- SmbiosSystemManufacturer -- SmbiosSystemProductName -- SmbiosUuid -- TPM EKPub -- MacAddress -- ProductKeyID -- OSType - -**NOTE**: For simplicity, and because processes vary between repair facilities, we have excluded many of the additional steps often used in a MBR, such as: -- Verify that the device is still functional -- Disable BitLocker* -- Repair the Boot Configuration Data (BCD) -- Repair and verify the network driver operation - -*BitLocker can be suspended rather than disbled if the technician has the ability to resume it after the repair. - -## Capture a new Autopilot device ID (4K HH) from the device - -Repair technicians must sign in to the repaired device to capture the new device ID. Assuming the repair technician does NOT have access to the customer’s login credentials, they will have to reimage the device in order to gain access, per the following steps: - -1. The repair technician creates a [WinPE bootable USB drive](https://docs.microsoft.com/windows-hardware/manufacture/desktop/oem-deployment-of-windows-10-for-desktop-editions#create-a-bootable-windows-pe-winpe-partition). -2. The repair technician boots the device to WinPE. -3. The repair technician [applies a new Windows image to the device](https://docs.microsoft.com/windows-hardware/manufacture/desktop/work-with-windows-images). - - **NOTE**: Ideally, the same version of Windows should be reimaged onto the device that was originally on the device, so some coordination will be required between the repair facility and customer to capture this information at the time the device arrives for repair. This might include the customer sending the repair facility a customized image (.ppk file) via a USB stick, for example. - -4. The repair technician boots the device into the new Windows image. -5. Once on the desktop, the repair technician captures the new device ID (4K HH) off the device using either the OA3 Tool or the PowerShell script, as described below. - -Those repair facilities with access to the OA3 Tool (which is part of the ADK) can use the tool to capture the 4K Hardware Hash (4K HH). - -Alternatively, the [WindowsAutoPilotInfo Powershell script](https://www.powershellgallery.com/packages/Get-WindowsAutoPilotInfo) can be used to capture the 4K HH by following these steps: - -1. Install the script from the [PowerShell Gallery](https://www.powershellgallery.com/packages/Get-WindowsAutoPilotInfo) or from the command line (command line installation is shown below). -2. Navigate to the script directory and run it on the device when the device is either in Full OS or Audit Mode. See the following example. - - ```powershell - md c:\HWID - Set-Location c:\HWID - Set-ExecutionPolicy -Scope Process -ExecutionPolicy Unrestricted -Force - Install-Script -Name Get-WindowsAutopilotInfo -Force - Get-WindowsAutopilotInfo.ps1 -OutputFile AutopilotHWID.csv - ``` - ->If you are prompted to install the NuGet package, choose **Yes**.
->If, after installing the script you get an error that Get-WindowsAutopilotInfo.ps1 is not found, verify that C:\Program Files\WindowsPowerShell\Scripts is present in your PATH variable.
->If the Install-Script cmdlet fails, verify that you have the default PowerShell repository registered (**Get-PSRepository**) or register the default repository with **Register-PSRepository -Default -Verbose**. - -The script creates a .csv file that contains the device information, including the complete 4K HH. Save this file so that you can access it later. The service facility will use this 4K HH to reregister device as described below. Be sure to use the -OutputFile parameter when saving the file, which ensures that file formatting is correct. Do not attempt to pipe the command output to a file manually. - -**NOTE**: If the repair facility does not have the ability to run the OA3 tool or PowerShell script to capture the new 4K HH, then the CSP (or OEM) partners must do this for them. Without some entity capturing the new 4K HH, there is no way to reregister this device as an Autopilot device. - - -## Reregister the repaired device using the new device ID - -If an OEM is not able to reregister the device, then the repair facility or CSP should reregister the device using MPC, or the customer IT Admin should be advised to reregister the device via Intune (or MSfB). Both ways of reregistering a device are shown below. - -### Reregister from Intune - -To reregister an Autopilot device from Intune, an IT Admin would: -1. Sign in to Intune. -2. Navigate to Device enrollment > Windows enrollment > Devices > Import. -3. Click the **Import** button to upload a csv file containing the device ID of the device to be reregistered (the device ID was the 4K HH captured by the PowerShell script or OA3 tool described previously in this document). - -The following video provides a good overview of how to (re)register devices via MSfB.
- -> [!VIDEO https://www.youtube.com/embed/IpLIZU_j7Z0] - -### Reregister from MPC - -To reregister an Autopilot device from MPC, an OEM or CSP would: - -1. Sign in to MPC. -2. Navigate to the Customer > Devices page and click the **Add devices** button to upload the csv file. - -![device](images/device2.png)
-![device](images/device3.png) - -In the case of reregistering a repaired device through MPC, the uploaded csv file must contain the 4K HH for the device, and not just the PKID or Tuple (SerialNumber + OEMName + ModelName). If only the PKID or Tuple were used, the Autopilot service would be unable to find a match in the Autopilot database, since no 4K HH info was ever previously submitted for this essentially “new” device, and the upload will fail, likely returning a ZtdDeviceNotFound error. So, again, only upload the 4K HH, not the Tuple or PKID. - -**NOTE**: When including the 4K HH in the csv file, you do NOT also need to include the PKID or Tuple. Those columns may be left blank, as shown below: - -![hash](images/hh.png) - -## Reset the device - -Since the device was required to be in Full OS or Audit Mode to capture the 4K HH, the repair facility must reset the image back to a pre-OOBE state before returning it to the customer. One way this can be accomplished is by using the built-in reset feature in Windows, as follows: - -On the device, go to Settings > Update & Security > Recovery and click on Get started. Under Reset this PC, select Remove everything and Just remove my files. Finally, click on Reset. - -![reset](images/reset.png) - -However, it’s likely the repair facility won’t have access to Windows because they lack the user credentials to login, in which case they need to use other means to reimage the device, such as the [Deployment Image Servicing and Management tool](https://docs.microsoft.com/windows-hardware/manufacture/desktop/oem-deployment-of-windows-10-for-desktop-editions#use-a-deployment-script-to-apply-your-image). - -## Return the repaired device to the customer - -After completing the previous steps, the repaired device can now be returned to the customer, and will be auto-enrolled into the Autopilot program on first boot-up during OOBE. - -**NOTE**: If the repair facility did NOT reimage the device, they could be sending it back in a potentially broken state (e.g., there’s no way to log into the device because it’s been dissociated from the only known user account), in which case they should tell the organization that they need to fix the registration and OS themselves. - -**IMPORTANT**: A device can be “registered” for Autopilot prior to being powered-on, but the device isn’t actually “deployed” to Autopilot (i.e., enabled as an Autopilot device) until it goes through OOBE, which is why resetting the device back to a pre-OOBE state is a required step. - -## Specific repair scenarios - -This section covers the most common repair scenarios, and their impact on Autopilot enablement. - -NOTES ON TEST RESULTS: - -- Scenarios below were tested using Intune only (no other MDMs were tested). -- In most test scenarios below, the repaired and reregistered device needed to go through OOBE again for Autopilot to be enabled. -- Motherboard replacement scenarios often result in lost data, so repair centers or customers should be reminded to backup data (if possible) prior to repair. -- In the cases where a repair facility does not have the ability to write device info into the BIOS of the repaired device, new processes need to be created to successfully enable Autopilot. -- Repaired device should have the Product Key (DPK) preinjected in the BIOS before capturing the new 4K HH (device ID) - -In the following table:
-- Supported = **Yes**: the device can be reenabled for Autopilot -- Supported = **No**: the device cannot be reenabled for Autopilot - - -
ScenarioSupportedMicrosoft Recommendation -
Motherboard Replacement (MBR) in generalYesThe recommended course of action for MBR scenarios is: - -1. Autopilot device is deregistered from the Autopilot program -2. The motherboard is replace -3. The device is reimaged (with BIOS info and DPK reinjected)* -4. A new Autopilot device ID (4K HH) is captured off the device -5. The repaired device is reregistered for the Autopilot program using the new device ID -6. The repaired device is reset to boot to OOBE -7. The repaired device is shipped back to the customer - -*It’s not necessary to reimage the device if the repair technician has access to the customer’s login credentials. It’s technically possible to do a successful MBR and Autopilot re-enablement without keys or certain BIOS info (e.g., serial #, model name, etc.), but doing so is only recommended for testing/educational purposes. - -
MBR when motherboard has a TPM chip (enabled) and only one onboard network card (that also gets replaced)Yes - -1. Deregister damaged device -2. Replace motherboard -3. Reimage device (to gain access), unless have access to customers’ login credentials -4. Write device info into BIOS -5. Capture new 4K HH -6. Reregister repaired device -7. Reset device back to OOBE -8. Go through Autopilot OOBE (customer) -9. Autopilot successfully enabled - -
MBR when motherboard has a TPM chip (enabled) and a second network card (or network interface) that is not replaced along with the motherboardNoThis scenario is not recommended, as it breaks the Autopilot experience, because the resulting Device ID will not be stable until after TPM attestation has completed, and even then registration may give incorrect results because of ambiguity with MAC Address resolution. -
MBR where the NIC card, HDD, and WLAN all remain the same after the repairYes - -1. Deregister damaged device -2. Replace motherboard (with new RDPK preinjected in BIOS) -3. Reimage device (to gain access), unless have access to customers’ login credentials -4. Write old device info into BIOS (same s/n, model, etc.)* -5. Capture new 4K HH -6. Reregister repaired device -7. Reset device back to OOBE -8. Go through Autopilot OOBE (customer) -9. Autopilot successfully enabled - -*Note that for this and subsequent scenarios, rewriting old device info would not include the TPM 2.0 endorsement key, as the associated private key is locked to the TPM device - -
MBR where the NIC card remains the same, but the HDD and WLAN are replacedYes - -1. Deregister damaged device -2. Replace motherboard (with new RDPK preinjected in BIOS) -3. Insert new HDD and WLAN -4. Write old device info into BIOS (same s/n, model, etc.) -5. Capture new 4K HH -6. Reregister repaired device -7. Reset device back to OOBE -8. Go through Autopilot OOBE (customer) -9. Autopilot successfully enabled - -
MBR where the NIC card and WLAN remains the same, but the HDD is replacedYes - -1. Deregister damaged device -2. Replace motherboard (with new RDPK preinjected in BIOS) -3. Insert new HDD -4. Write old device info into BIOS (same s/n, model, etc.) -5. Capture new 4K HH -6. Reregister repaired device -7. Reset device back to OOBE -8. Go through Autopilot OOBE (customer) -9. Autopilot successfully enabled - -
MBR where only the MB is replaced (all other parts remain same) but new MB was taken from a previously used device that had NOT been Autopilot-enabled before.Yes - -1. Deregister damaged device -2. Replace motherboard (with new RDPK preinjected in BIOS) -3. Reimage device (to gain access), unless have access to customers’ login credentials -4. Write old device info into BIOS (same s/n, model, etc.) -5. Capture new 4K HH -6. Reregister repaired device -7. Reset device back to OOBE -8. Go through Autopilot OOBE (customer) -9. Autopilot successfully enabled - -
MBR where only the MB is replaced (all other parts remain same) but new MB was taken from a previously used device that HAD been Autopilot-enabled before.Yes - -1. Deregister old device from which MB will be taken -2. Deregister damaged device (that you want to repair) -3. Replace motherboard in repair device with MB from other Autopilot device (with new RDPK preinjected in BIOS) -4. Reimage device (to gain access), unless have access to customers’ login credentials -5. Write old device info into BIOS (same s/n, model, etc.) -6. Capture new 4K HH -7. Reregister repaired device -8. Reset device back to OOBE -9. Go through Autopilot OOBE (customer) -10. Autopilot successfully enabled - -NOTE: The repaired device can also be used successfully as a normal, non-Autopilot device. - -
BIOS info excluded from MBR deviceNoRepair facility does not have BIOS tool to write device info into BIOS after MBR. - -1. Deregister damaged device -2. Replace motherboard (BIOS does NOT contain device info) -3. Reimage and write DPK into image -4. Capture new 4K HH -5. Reregister repaired device -6. Create Autopilot profile for device -7. Go through Autopilot OOBE (customer) -8. Autopilot FAILS to recognize repaired device - -
MBR when there is no TPM chipYesThough we do not recommend enabling an Autopilot devices without a TPM chip (which is recommended for BitLocker encryption), it is possible to enable an Autopilot devices in “standard user” mode (but NOT Self-deploying mode) that does not have a TPM chip. In this case, you would: - -1. Deregister damaged device -2. Replace motherboard -3. Reimage device (to gain access), unless have access to customers’ login credentials -4. Write old device info into BIOS (same s/n, model, etc.) -5. Capture new 4K HH -6. Reregister repaired device -7. Reset device back to OOBE -8. Go through Autopilot OOBE (customer) -9. Autopilot successfully enabled - -
New DPK written into image on repaired Autopilot device with a new MBYesRepair facility replaces normal MB on damaged device. MB does not contain any DPK in the BIOS. Repair facility writes DPK into image after MBR. - -1. Deregister damaged device -2. Replace motherboard – BIOS does NOT contain DPK info -3. Reimage device (to gain access), unless have access to customers’ login credentials -4. Write device info into BIOS (same s/n, model, etc.) -5. Capture new 4K HH -6. Reset or reimage device to pre-OOBE and write DPK into image -7. Reregister repaired device -8. Go through Autopilot OOBE -9. Autopilot successfully enabled - -
New Repair Product Key (RDPK)YesUsing a MB with a new RDPK preinjected results in a successful Autopilot refurbishment scenario. - -1. Deregister damaged device -2. Replace motherboard (with new RDPK preinjected in BIOS) -3. Reimage or rest image to pre-OOBE -4. Write device info into BIOS -5. Capture new 4K HH -6. Reregister repaired device -7. Reimage or reset image to pre-OOBE -8. Go through Autopilot OOBE -9. Autopilot successfully enabled - -
No Repair Product Key (RDPK) injectedNoThis scenario violates Microsoft policy and breaks the Windows Autopilot experience. -
Reimage damaged Autopilot device that was not deregistered prior to repairYes, but the device will still be associated with previous tenant ID, so should only be returned to same customer - -1. Reimage damaged device -2. Write DPK into image -3. Go through Autopilot OOBE -4. Autopilot successfully enabled (to previous tenant ID) - -
Disk replacement from a non-Autopilot device to an Autopilot deviceYes - -1. Do not deregister damaged device prior to repair -2. Replace HDD on damaged device -3. Reimage or reset image back to OOBE -4. Go through Autopilot OOBE (customer) -5. Autopilot successfully enabled (repaired device recognized as its previous self) - -
Disk replacement from one Autopilot device to another Autopilot deviceMaybeIf the device from which the HDD is taken was itself previously deregistered from Autopilot, then that HDD can be used in a repair device. But if the HDD was never previously deregistered from Autopilot before being used in a repaired device, the newly repaired device will not have the proper Autopilot experience. - -Assuming the used HDD was previously deregistered (before being used in this repair): - -1. Deregister damaged device -2. Replace HDD on damaged device using a HDD from another deregistered Autopilot device -3. Reimage or rest the repaired device back to a pre-OOBE state -4. Go through Autopilot OOBE (customer) -5. Autopilot successfully enabled - -
Third party network card replacement NoWhether from a non-Autopilot device to an Autopilot device, from one Autopilot device to another Autopilot device, or from an Autopilot device to a non-Autopilot device, any scenario where a 3rd party (not onboard) Network card is replaced will break the Autopilot experience, and is not recommended. -
A device repaired more than 3 timesNoAutopilot is not supported when a device is repeatedly repaired, so that whatever parts NOT replaced become associated with too many parts that have been replaced, which would make it difficult to uniquely identify that device in the future. -
Memory replacementYesReplacing the memory on a damaged device does not negatively affect the Autopilot experience on that device. No de/reregistration is needed. The repair technician simply needs to replace the memory. -
GPU replacementYesReplacing the GPU(s) on a damaged device does not negatively affect the Autopilot experience on that device. No de/reregistration is needed. The repair technician simply needs to replace the GPU. -
- ->When scavenging parts from another Autopilot device, we recommend unregistering the scavenged device from Autopilot, scavenging it, and then NEVER REGISTERING THE SCAVENGED DEVICE (AGAIN) FOR AUTOPILOT, because reusing parts this way may cause two active devices to end up with the same ID, with no possibility of distinguishing between the two. - -**NOTE**: The following parts may be replaced without compromising Autopilot enablement or requiring special additional repair steps: -- Memory (RAM or ROM) -- Power Supply -- Video Card -- Card Reader -- Sound card -- Expansion card -- Microphone -- Webcam -- Fan -- Heat sink -- CMOS battery - -Other repair scenarios not yet tested and verified include: -- Daughterboard replacement -- CPU replacement -- Wifi replacement -- Ethernet replacement - -## FAQ - -| Question | Answer | -| --- | --- | -| If we have a tool that programs product information into the BIOS after the MBR, do we still need to submit a CBR report for the device to be Autopilot-capable? | No. Not if the in-house tool writes the minimum necessary information into the BIOS that the Autopilot program looks for to identify the device, as described earlier in this document. | -| What if only some components are replaced rather than the full motherboard? | While it’s true that some limited repairs do not prevent the Autopilot algorithm from successfully matching the post-repair device with the pre-repair device, it is best to ensure 100% success by going through the MBR steps above even for devices that only needed limited repairs. | -| How does a repair technician gain access to a broken device if they don’t have the customer’s login credentials? | The technician will have to reimage the device and use their own credentials during the repair process. | - -## Related topics - -[Device guidelines](autopilot-device-guidelines.md)
+--- +title: Windows Autopilot motherboard replacement +ms.reviewer: +manager: laurawi +description: Windows Autopilot deployment MBR scenarios +keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.sitesec: library +ms.pagetype: deploy +audience: itpro +author: greg-lindsay +ms.author: greglin +ms.collection: M365-modern-desktop +ms.topic: article +--- + + +# Windows Autopilot motherboard replacement scenario guidance + +**Applies to** + +- Windows 10 + +This document offers guidance for Windows Autopilot device repair scenarios that Microsoft partners can use in Motherboard Replacement (MBR) situations, and other servicing scenarios. + +Repairing Autopilot enrolled devices is complex, as it tries to balance OEM requirements with Windows Autopilot requirements. Specifically, OEM’s require strict uniqueness across motherboards, MAC addresses, etc., while Windows Autopilot requires strict uniqueness at the Hardware ID level for each device to enable successful registration. The Hardware ID does not always accommodate all the OEM hardware component requirements, thus these requirements are sometimes at odds, causing issues with some repair scenarios. + +**Motherboard Replacement (MBR)** + +If a motherboard replacement is needed on a Windows Autopilot device, the following process is recommended: + +1. [Deregister the device](#deregister-the-autopilot-device-from-the-autopilot-program) from Windows Autopilot +2. [Replace the motherboard](#replace-the-motherboard) +3. [Capture a new device ID (4K HH)](#capture-a-new-autopilot-device-id-4k-hh-from-the-device) +4. [Reregister the device](#reregister-the-repaired-device-using-the-new-device-id) with Windows Autopilot +5. [Reset the device](#reset-the-device) +6. [Return the device](#return-the-repaired-device-to-the-customer) + +Each of these steps is described below. + +## Deregister the Autopilot device from the Autopilot program + +Before the device arrives at the repair facility, it must be deregistered by the entity that registered it. Only the entity that registered the device can deregister it. This might be the customer IT Admin, the OEM, or the CSP partner. If the IT Admin registered the device, they likely did so via Intune (or possibly the Microsoft Store for Business). In that case, they should deregister the device from Intune (or MSfB). This is necessary because devices registered in Intune will not show up in MPC. However, if the OEM or CSP partner registered the device, they likely did so via the Microsoft Partner Center (MPC). In that case, they should deregister the device from MPC, which will also remove it from the customer IT Admin’s Intune account. Below, we describe the steps an IT Admin would go through to deregister a device from Intune, and the steps an OEM or CSP would go through to deregister a device from MPC. + +**NOTE**: When possible, an OEM or CSP should register Autopilot devices, rather than having the customer do it. This will avoid problems where OEMs or CSPs may not be able to deregister a device if, for example, a customer leasing a device goes out of business before deregistering it themselves. + +**EXCEPTION**: If a customer grants an OEM permission to register devices on their behalf via the automated consent process, then an OEM can use the API to deregister devices they didn’t register themselves (instead, the customer registered the devices). But keep in mind that this would only remove those devices from the Autopilot program, it would not disenroll them from Intune or disjoin them from AAD. The customer must do those steps, if desired, through Intune. + +### Deregister from Intune + +To deregister an Autopilot device from Intune, an IT Admin would: + +1. Sign in to their Intune account +2. Navigate to Intune > Groups > All groups +3. Remove the desired device from its group +4. Navigate to Intune > Devices > All devices +5. Select the checkbox next to the device you want to delete, then click the Delete button on the top menu +6. Navigate to Intune > Devices > Azure AD devices +7. Select the checkbox next to the device you want to delete, then click the Delete button along the top menu +8. Navigate to Intune > Device enrollment > Windows enrollment > Devices +9. Select the checkbox next to the device you want to deregister +10. Click the extended menu icon (“…”) on the far right end of the line containing the device you want to deregister in order to expose an additional menu with the option to “unassign user” +11. Click “Unassign user” if the device was previously assigned to a user; if not, this option will be grayed-out and can be ignored +12. With the unassigned device still selected, click the Delete button along the top menu to remove this device + +**NOTE**: These steps deregister the device from Autopilot, but also unenroll the device from Intune, and disjoin the device from AAD. While it may appear that only deregistering the device from Autopilot is needed, there are certain barriers in place within Intune that necessitate all the steps above be done, which is best practice anyway in case the device gets lost or becomes unrecoverable, to eliminate the possibility of orphaned devices existing in the Autopilot database, or Intune, or AAD. If a device gets into an unrecoverable state, you can contact the appropriate [Microsoft support alias](autopilot-support.md) for assistance. + +The deregistration process will take about 15 minutes. You can accelerate the process by clicking the “Sync” button, then “Refresh” the display until the device is no longer present. + +More details on deregistering devices from Intune can be found [here](https://docs.microsoft.com/intune/enrollment-autopilot#create-an-autopilot-device-group). + +### Deregister from MPC + +To deregister an Autopilot device from the Microsoft Partner Center (MPC), a CSP would: + +1. Log into MPC +2. Navigate to Customer > Devices +3. Select the device to be deregistered and click the “Delete device” button + +![devices](images/devices.png) + +**NOTE**: Deregistering a device from Autopilot in MPC does only that; it does not also unenroll the device from the MDM (Intune), nor does it disjoin the device from AAD. Therefore, if possible, the OEM/CSP ideally should work with the customer IT Admin to have the device fully removed per the Intune steps in the previous section. + +Alternatively, an OEM partner that has integrated the OEM Direct APIs can deregister a device by calling the AutopilotDeviceRegistration API with the TenantID and TenantDomain fields left blank in the request call. + +Because the repair facility will not have access to the user’s login credentials, the repair facility will have to reimage the device as part of the repair process. This means that the customer should do three things before sending the device off for repair: +1. Copy all important data off the device. +2. Let the repair facility know which version of Windows they should reinstall after the repair. +3. If applicable, let the repair facility know which version of Office they should reinstall after the repair. + +## Replace the motherboard + +Technicians replace the motherboard (or other hardware) on the broken device. A replacement DPK is injected. + +Repair and key replacement processes vary between facilities. Sometimes repair facilities receive motherboard spare parts from OEMs that have replacement DPKs already injected, but sometimes not. Sometimes repair facilities receive fully-functional BIOS tools from OEMs, but sometimes not. This means that the quality of the data in the BIOS after an MBR varies. To ensure the repaired device will still be Autopilot-capable following its repair, the new (post-repair) BIOS should be able to successfully gather and populate the following information at a minimum: + +- DiskSerialNumber +- SmbiosSystemSerialNumber +- SmbiosSystemManufacturer +- SmbiosSystemProductName +- SmbiosUuid +- TPM EKPub +- MacAddress +- ProductKeyID +- OSType + +**NOTE**: For simplicity, and because processes vary between repair facilities, we have excluded many of the additional steps often used in an MBR, such as: +- Verify that the device is still functional +- Disable BitLocker* +- Repair the Boot Configuration Data (BCD) +- Repair and verify the network driver operation + +*BitLocker can be suspended rather than disabled if the technician has the ability to resume it after the repair. + +## Capture a new Autopilot device ID (4K HH) from the device + +Repair technicians must sign in to the repaired device to capture the new device ID. Assuming the repair technician does NOT have access to the customer’s login credentials, they will have to reimage the device in order to gain access, per the following steps: + +1. The repair technician creates a [WinPE bootable USB drive](https://docs.microsoft.com/windows-hardware/manufacture/desktop/oem-deployment-of-windows-10-for-desktop-editions#create-a-bootable-windows-pe-winpe-partition). +2. The repair technician boots the device to WinPE. +3. The repair technician [applies a new Windows image to the device](https://docs.microsoft.com/windows-hardware/manufacture/desktop/work-with-windows-images). + + **NOTE**: Ideally, the same version of Windows should be reimaged onto the device that was originally on the device, so some coordination will be required between the repair facility and customer to capture this information at the time the device arrives for repair. This might include the customer sending the repair facility a customized image (.ppk file) via a USB stick, for example. + +4. The repair technician boots the device into the new Windows image. +5. Once on the desktop, the repair technician captures the new device ID (4K HH) off the device using either the OA3 Tool or the PowerShell script, as described below. + +Those repair facilities with access to the OA3 Tool (which is part of the ADK) can use the tool to capture the 4K Hardware Hash (4K HH). + +Alternatively, the [WindowsAutoPilotInfo PowerShell script](https://www.powershellgallery.com/packages/Get-WindowsAutoPilotInfo) can be used to capture the 4K HH by following these steps: + +1. Install the script from the [PowerShell Gallery](https://www.powershellgallery.com/packages/Get-WindowsAutoPilotInfo) or from the command line (command line installation is shown below). +2. Navigate to the script directory and run it on the device when the device is either in Full OS or Audit Mode. See the following example. + + ```powershell + md c:\HWID + Set-Location c:\HWID + Set-ExecutionPolicy -Scope Process -ExecutionPolicy Unrestricted -Force + Install-Script -Name Get-WindowsAutopilotInfo -Force + Get-WindowsAutopilotInfo.ps1 -OutputFile AutopilotHWID.csv + ``` + +>If you are prompted to install the NuGet package, choose **Yes**.
+>If, after installing the script you get an error that Get-WindowsAutopilotInfo.ps1 is not found, verify that C:\Program Files\WindowsPowerShell\Scripts is present in your PATH variable.
+>If the Install-Script cmdlet fails, verify that you have the default PowerShell repository registered (**Get-PSRepository**) or register the default repository with **Register-PSRepository -Default -Verbose**. + +The script creates a .csv file that contains the device information, including the complete 4K HH. Save this file so that you can access it later. The service facility will use this 4K HH to reregister device as described below. Be sure to use the -OutputFile parameter when saving the file, which ensures that file formatting is correct. Do not attempt to pipe the command output to a file manually. + +**NOTE**: If the repair facility does not have the ability to run the OA3 tool or PowerShell script to capture the new 4K HH, then the CSP (or OEM) partners must do this for them. Without some entity capturing the new 4K HH, there is no way to reregister this device as an Autopilot device. + + +## Reregister the repaired device using the new device ID + +If an OEM is not able to reregister the device, then the repair facility or CSP should reregister the device using MPC, or the customer IT Admin should be advised to reregister the device via Intune (or MSfB). Both ways of reregistering a device are shown below. + +### Reregister from Intune + +To reregister an Autopilot device from Intune, an IT Admin would: +1. Sign in to Intune. +2. Navigate to Device enrollment > Windows enrollment > Devices > Import. +3. Click the **Import** button to upload a csv file containing the device ID of the device to be reregistered (the device ID was the 4K HH captured by the PowerShell script or OA3 tool described previously in this document). + +The following video provides a good overview of how to (re)register devices via MSfB.
+ +> [!VIDEO https://www.youtube.com/embed/IpLIZU_j7Z0] + +### Reregister from MPC + +To reregister an Autopilot device from MPC, an OEM or CSP would: + +1. Sign in to MPC. +2. Navigate to the Customer > Devices page and click the **Add devices** button to upload the csv file. + +![device](images/device2.png)
+![device](images/device3.png) + +In the case of reregistering a repaired device through MPC, the uploaded csv file must contain the 4K HH for the device, and not just the PKID or Tuple (SerialNumber + OEMName + ModelName). If only the PKID or Tuple was used, the Autopilot service would be unable to find a match in the Autopilot database, since no 4K HH info was ever previously submitted for this essentially “new” device, and the upload will fail, likely returning a ZtdDeviceNotFound error. So, again, only upload the 4K HH, not the Tuple or PKID. + +**NOTE**: When including the 4K HH in the csv file, you do NOT also need to include the PKID or Tuple. Those columns may be left blank, as shown below: + +![hash](images/hh.png) + +## Reset the device + +Since the device was required to be in Full OS or Audit Mode to capture the 4K HH, the repair facility must reset the image back to a pre-OOBE state before returning it to the customer. One way this can be accomplished is by using the built-in reset feature in Windows, as follows: + +On the device, go to Settings > Update & Security > Recovery and click on Get started. Under Reset this PC, select Remove everything and Just remove my files. Finally, click on Reset. + +![reset](images/reset.png) + +However, it’s likely the repair facility won’t have access to Windows because they lack the user credentials to sign in, in which case they need to use other means to reimage the device, such as the [Deployment Image Servicing and Management tool](https://docs.microsoft.com/windows-hardware/manufacture/desktop/oem-deployment-of-windows-10-for-desktop-editions#use-a-deployment-script-to-apply-your-image). + +## Return the repaired device to the customer + +After completing the previous steps, the repaired device can now be returned to the customer, and will be auto-enrolled into the Autopilot program on first boot-up during OOBE. + +**NOTE**: If the repair facility did NOT reimage the device, they could be sending it back in a potentially broken state (e.g., there’s no way to log into the device because it’s been dissociated from the only known user account), in which case they should tell the organization that they need to fix the registration and OS themselves. + +**IMPORTANT**: A device can be “registered” for Autopilot prior to being powered-on, but the device isn’t actually “deployed” to Autopilot (i.e., enabled as an Autopilot device) until it goes through OOBE, which is why resetting the device back to a pre-OOBE state is a required step. + +## Specific repair scenarios + +This section covers the most common repair scenarios, and their impact on Autopilot enablement. + +NOTES ON TEST RESULTS: + +- Scenarios below were tested using Intune only (no other MDMs were tested). +- In most test scenarios below, the repaired and reregistered device needed to go through OOBE again for Autopilot to be enabled. +- Motherboard replacement scenarios often result in lost data, so repair centers or customers should be reminded to back up data (if possible) prior to repair. +- In the cases where a repair facility does not have the ability to write device info into the BIOS of the repaired device, new processes need to be created to successfully enable Autopilot. +- Repaired device should have the Product Key (DPK) preinjected in the BIOS before capturing the new 4K HH (device ID) + +In the following table:
+- Supported = **Yes**: the device can be reenabled for Autopilot +- Supported = **No**: the device cannot be reenabled for Autopilot + + +
ScenarioSupportedMicrosoft Recommendation +
Motherboard Replacement (MBR) in generalYesThe recommended course of action for MBR scenarios is: + +1. Autopilot device is deregistered from the Autopilot program +2. The motherboard is replace +3. The device is reimaged (with BIOS info and DPK reinjected)* +4. A new Autopilot device ID (4K HH) is captured off the device +5. The repaired device is reregistered for the Autopilot program using the new device ID +6. The repaired device is reset to boot to OOBE +7. The repaired device is shipped back to the customer + +*It’s not necessary to reimage the device if the repair technician has access to the customer’s login credentials. It’s technically possible to do a successful MBR and Autopilot re-enablement without keys or certain BIOS info (e.g., serial #, model name, etc.), but doing so is only recommended for testing/educational purposes. + +
MBR when motherboard has a TPM chip (enabled) and only one onboard network card (that also gets replaced)Yes + +1. Deregister damaged device +2. Replace motherboard +3. Reimage device (to gain access), unless you have access to customers’ login credentials +4. Write device info into BIOS +5. Capture new 4K HH +6. Reregister repaired device +7. Reset device back to OOBE +8. Go through Autopilot OOBE (customer) +9. Autopilot successfully enabled + +
MBR when motherboard has a TPM chip (enabled) and a second network card (or network interface) that is not replaced along with the motherboardNoThis scenario is not recommended, as it breaks the Autopilot experience, because the resulting Device ID will not be stable until after TPM attestation has completed, and even then registration may give incorrect results because of ambiguity with MAC Address resolution. +
MBR where the NIC card, HDD, and WLAN all remain the same after the repairYes + +1. Deregister damaged device +2. Replace motherboard (with new RDPK preinjected in BIOS) +3. Reimage device (to gain access), unless you have access to customers’ login credentials +4. Write old device info into BIOS (same s/n, model, etc.)* +5. Capture new 4K HH +6. Reregister repaired device +7. Reset device back to OOBE +8. Go through Autopilot OOBE (customer) +9. Autopilot successfully enabled + +*Note that for this and subsequent scenarios, rewriting old device info would not include the TPM 2.0 endorsement key, as the associated private key is locked to the TPM device + +
MBR where the NIC card remains the same, but the HDD and WLAN are replacedYes + +1. Deregister damaged device +2. Replace motherboard (with new RDPK preinjected in BIOS) +3. Insert new HDD and WLAN +4. Write old device info into BIOS (same s/n, model, etc.) +5. Capture new 4K HH +6. Reregister repaired device +7. Reset device back to OOBE +8. Go through Autopilot OOBE (customer) +9. Autopilot successfully enabled + +
MBR where the NIC card and WLAN remains the same, but the HDD is replacedYes + +1. Deregister damaged device +2. Replace motherboard (with new RDPK preinjected in BIOS) +3. Insert new HDD +4. Write old device info into BIOS (same s/n, model, etc.) +5. Capture new 4K HH +6. Reregister repaired device +7. Reset device back to OOBE +8. Go through Autopilot OOBE (customer) +9. Autopilot successfully enabled + +
MBR where only the MB is replaced (all other parts remain same) but new MB was taken from a previously used device that had NOT been Autopilot-enabled before.Yes + +1. Deregister damaged device +2. Replace motherboard (with new RDPK preinjected in BIOS) +3. Reimage device (to gain access), unless you have access to customers’ login credentials +4. Write old device info into BIOS (same s/n, model, etc.) +5. Capture new 4K HH +6. Reregister repaired device +7. Reset device back to OOBE +8. Go through Autopilot OOBE (customer) +9. Autopilot successfully enabled + +
MBR where only the MB is replaced (all other parts remain same) but new MB was taken from a previously used device that HAD been Autopilot-enabled before.Yes + +1. Deregister old device from which MB will be taken +2. Deregister damaged device (that you want to repair) +3. Replace motherboard in repair device with MB from other Autopilot device (with new RDPK preinjected in BIOS) +4. Reimage device (to gain access), unless you have access to customers’ login credentials +5. Write old device info into BIOS (same s/n, model, etc.) +6. Capture new 4K HH +7. Reregister repaired device +8. Reset device back to OOBE +9. Go through Autopilot OOBE (customer) +10. Autopilot successfully enabled + +NOTE: The repaired device can also be used successfully as a normal, non-Autopilot device. + +
BIOS info excluded from MBR deviceNoRepair facility does not have BIOS tool to write device info into BIOS after MBR. + +1. Deregister damaged device +2. Replace motherboard (BIOS does NOT contain device info) +3. Reimage and write DPK into image +4. Capture new 4K HH +5. Reregister repaired device +6. Create Autopilot profile for device +7. Go through Autopilot OOBE (customer) +8. Autopilot FAILS to recognize repaired device + +
MBR when there is no TPM chipYesThough we do not recommend enabling Autopilot devices without a TPM chip (which is recommended for BitLocker encryption), it is possible to enable an Autopilot device in “standard user” mode (but NOT Self-deploying mode) that does not have a TPM chip. In this case, you would: + +1. Deregister damaged device +2. Replace motherboard +3. Reimage device (to gain access), unless you have access to customers’ login credentials +4. Write old device info into BIOS (same s/n, model, etc.) +5. Capture new 4K HH +6. Reregister repaired device +7. Reset device back to OOBE +8. Go through Autopilot OOBE (customer) +9. Autopilot successfully enabled + +
New DPK written into image on repaired Autopilot device with a new MBYesRepair facility replaces normal MB on damaged device. MB does not contain any DPK in the BIOS. Repair facility writes DPK into image after MBR. + +1. Deregister damaged device +2. Replace motherboard – BIOS does NOT contain DPK info +3. Reimage device (to gain access), unless you have access to customers’ login credentials +4. Write device info into BIOS (same s/n, model, etc.) +5. Capture new 4K HH +6. Reset or reimage device to pre-OOBE and write DPK into image +7. Reregister repaired device +8. Go through Autopilot OOBE +9. Autopilot successfully enabled + +
New Repair Product Key (RDPK)YesUsing a motherboard with a new RDPK preinjected results in a successful Autopilot refurbishment scenario. + +1. Deregister damaged device +2. Replace motherboard (with new RDPK preinjected in BIOS) +3. Reimage or rest image to pre-OOBE +4. Write device info into BIOS +5. Capture new 4K HH +6. Reregister repaired device +7. Reimage or reset image to pre-OOBE +8. Go through Autopilot OOBE +9. Autopilot successfully enabled + +
No Repair Product Key (RDPK) injectedNoThis scenario violates Microsoft policy and breaks the Windows Autopilot experience. +
Reimage damaged Autopilot device that was not deregistered prior to repairYes, but the device will still be associated with previous tenant ID, so should only be returned to same customer + +1. Reimage damaged device +2. Write DPK into image +3. Go through Autopilot OOBE +4. Autopilot successfully enabled (to previous tenant ID) + +
Disk replacement from a non-Autopilot device to an Autopilot deviceYes + +1. Do not deregister damaged device prior to repair +2. Replace HDD on damaged device +3. Reimage or reset image back to OOBE +4. Go through Autopilot OOBE (customer) +5. Autopilot successfully enabled (repaired device recognized as its previous self) + +
Disk replacement from one Autopilot device to another Autopilot deviceMaybeIf the device from which the HDD is taken was itself previously deregistered from Autopilot, then that HDD can be used in a repair device. But if the HDD was never previously deregistered from Autopilot before being used in a repaired device, the newly repaired device will not have the proper Autopilot experience. + +Assuming the used HDD was previously deregistered (before being used in this repair): + +1. Deregister damaged device +2. Replace HDD on damaged device using a HDD from another deregistered Autopilot device +3. Reimage or rest the repaired device back to a pre-OOBE state +4. Go through Autopilot OOBE (customer) +5. Autopilot successfully enabled + +
Non-Microsoft network card replacement NoWhether from a non-Autopilot device to an Autopilot device, from one Autopilot device to another Autopilot device, or from an Autopilot device to a non-Autopilot device, any scenario where a 3rd party (not onboard) Network card is replaced will break the Autopilot experience, and is not recommended. +
A device repaired more than 3 timesNoAutopilot is not supported when a device is repeatedly repaired, so that whatever parts NOT replaced become associated with too many parts that have been replaced, which would make it difficult to uniquely identify that device in the future. +
Memory replacementYesReplacing the memory on a damaged device does not negatively affect the Autopilot experience on that device. No de/reregistration is needed. The repair technician simply needs to replace the memory. +
GPU replacementYesReplacing the GPU(s) on a damaged device does not negatively affect the Autopilot experience on that device. No de/reregistration is needed. The repair technician simply needs to replace the GPU. +
+ +>When scavenging parts from another Autopilot device, we recommend unregistering the scavenged device from Autopilot, scavenging it, and then NEVER REGISTERING THE SCAVENGED DEVICE (AGAIN) FOR AUTOPILOT, because reusing parts this way may cause two active devices to end up with the same ID, with no possibility of distinguishing between the two. + +**NOTE**: The following parts may be replaced without compromising Autopilot enablement or requiring special additional repair steps: +- Memory (RAM or ROM) +- Power Supply +- Video Card +- Card Reader +- Sound card +- Expansion card +- Microphone +- Webcam +- Fan +- Heat sink +- CMOS battery + +Other repair scenarios not yet tested and verified include: +- Daughterboard replacement +- CPU replacement +- Wifi replacement +- Ethernet replacement + +## FAQ + +| Question | Answer | +| --- | --- | +| If we have a tool that programs product information into the BIOS after the MBR, do we still need to submit a CBR report for the device to be Autopilot-capable? | No. Not if the in-house tool writes the minimum necessary information into the BIOS that the Autopilot program looks for to identify the device, as described earlier in this document. | +| What if only some components are replaced rather than the full motherboard? | While it’s true that some limited repairs do not prevent the Autopilot algorithm from successfully matching the post-repair device with the pre-repair device, it is best to ensure 100% success by going through the MBR steps above even for devices that only needed limited repairs. | +| How does a repair technician gain access to a broken device if they don’t have the customer’s login credentials? | The technician will have to reimage the device and use their own credentials during the repair process. | + +## Related topics + +[Device guidelines](autopilot-device-guidelines.md)
diff --git a/windows/deployment/windows-autopilot/bitlocker.md b/windows/deployment/windows-autopilot/bitlocker.md index a33cb8d60e..542243d569 100644 --- a/windows/deployment/windows-autopilot/bitlocker.md +++ b/windows/deployment/windows-autopilot/bitlocker.md @@ -23,9 +23,9 @@ ms.topic: article - Windows 10 -With Windows Autopilot, you can configure the BitLocker encryption settings to be applied before automatic encryption is started. This ensures that the default encrytion algorithm is not applied automatically when this is not the desired setting. Other BitLocker policies that must be applied prior to encryption can also be delivered before automatic BitLocker encryption begins. +With Windows Autopilot, you can configure the BitLocker encryption settings to be applied before automatic encryption is started. This ensures that the default encryption algorithm isn't applied automatically when this is not the desired setting. Other BitLocker policies that must be applied prior to encryption can also be delivered before automatic BitLocker encryption begins. -The BitLocker encryption algorithm is used when BitLocker is first enabled, and sets the strength to which full volume encryption should occur. Available encryption algorithms are: AES-CBC 128-bit, AES-CBC 256-bit, XTS-AES 128-bit or XTS-AES 256-bit encryption. The default value is XTS-AES 128-bit encryption. See [BitLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/bitlocker-csp) for information about the recommended encryption algorithms to use. +The BitLocker encryption algorithm is used when BitLocker is first enabled, and sets the strength to which full volume encryption should occur. Available encryption algorithms are: AES-CBC 128-bit, AES-CBC 256-bit, XTS-AES 128-bit, or XTS-AES 256-bit encryption. The default value is XTS-AES 128-bit encryption. See [BitLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/bitlocker-csp) for information about the recommended encryption algorithms to use. To ensure the desired BitLocker encryption algorithm is set before automatic encryption occurs for Autopilot devices: @@ -39,11 +39,11 @@ An example of Microsoft Intune Windows Encryption settings is shown below. ![BitLocker encryption settings](images/bitlocker-encryption.png) -Note that a device which is encrypted automatically will need to be decrypted prior to changing the encryption algorithm. +**Note**: A device that is encrypted automatically will need to be decrypted prior to changing the encryption algorithm. The settings are available under Device Configuration -> Profiles -> Create profile -> Platform = Windows 10 and later, Profile type = Endpoint protection -> Configure -> Windows Encryption -> BitLocker base settings, Configure encryption methods = Enable. -Note: It is also recommended to set Windows Encryption -> Windows Settings -> Encrypt = **Require**. +**Note**: It is also recommended to set Windows Encryption -> Windows Settings -> Encrypt = **Require**. ## Requirements @@ -51,4 +51,4 @@ Windows 10, version 1809 or later. ## See also -[Bitlocker overview](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) +[BitLocker overview](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) diff --git a/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm.md b/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm.md index 31298d382d..f0a7008b37 100644 --- a/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm.md +++ b/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm.md @@ -28,7 +28,7 @@ To get started with Windows Autopilot, you should try it out with a virtual mach In this topic you'll learn how to set-up a Windows Autopilot deployment for a VM using Hyper-V. > [!NOTE] -> Although there are [multiple platforms](administer.md) available to enable Autopilot, this lab primarily uses Intune. +> Although there are [multiple platforms](add-devices.md#registering-devices) available to enable Autopilot, this lab primarily uses Intune. > Hyper-V and a VM are not required for this lab. You can also use a physical device. However, the instructions assume that you are using a VM. To use a physical device, skip the instructions to install Hyper-V and create a VM. All references to 'device' in the guide refer to the client device, either physical or virtual. @@ -43,7 +43,7 @@ The following video provides an overview of the process: These are the things you'll need to complete this lab: - +
Windows 10 installation mediaWindows 10 Professional or Enterprise (ISO file) for a supported version of Windows 10, semi-annual channel. If you do not already have an ISO to use, a link is provided to download an evaluation version of Windows 10 Enterprise.
Internet accessIf you are behind a firewall, see the detailed networking requirements. Otherwise, just ensure that you have a connection to the Internet.
Internet accessIf you are behind a firewall, see the detailed networking requirements. Otherwise, just ensure that you have a connection to the Internet.
Hyper-V or a physical device running Windows 10The guide assumes that you will use a Hyper-V VM, and provides instructions to install and configure Hyper-V if needed. To use a physical device, skip the steps to install and configure Hyper-V.
A Premium Intune accountThis guide will describe how to obtain a free 30-day trial premium account that can be used to complete the lab.
@@ -110,9 +110,9 @@ When you are prompted to restart the computer, choose **Yes**. The computer migh > Alternatively, you can install Hyper-V using the Control Panel in Windows under **Turn Windows features on or off** for a client operating system, or using Server Manager's **Add Roles and Features Wizard** on a server operating system, as shown below: - ![hyper-v feature](../images/hyper-v-feature.png) + ![Hyper-V feature](images/hyper-v-feature.png) - ![hyper-v](../images/svr_mgr2.png) + ![Hyper-V](images/svr_mgr2.png)

If you choose to install Hyper-V using Server Manager, accept all default selections. Also be sure to install both items under Role Administration Tools\Hyper-V Management Tools. @@ -401,7 +401,7 @@ Optional: see the following video for an overview of the process. First, you need a MSfB account. You can use the same one you created above for Intune, or follow [these instructions](https://docs.microsoft.com/microsoft-store/windows-store-for-business-overview) to create a new one. -Next, sign in to [Microsoft Store for Business](https://businessstore.microsoft.com/en-us/store) using your test account by clicking **Sign in** in the upper-right-corner of the main page. +Next, sign in to [Microsoft Store for Business](https://businessstore.microsoft.com/en-us/store) using your test account by clicking **Sign in** on the upper-right-corner of the main page. Select **Manage** from the top menu, then click the **Windows Autopilot Deployment Program** link under the **Devices** card. See the following example: @@ -469,7 +469,7 @@ Click on **OK** and then click on **Create**. Profiles can only be assigned to Groups, so first you must create a group that contains the devices to which the profile should be applied. This guide will provide simple instructions to assign a profile, for more detailed instructions, see [Create an Autopilot device group](https://docs.microsoft.com/intune/enrollment-autopilot#create-an-autopilot-device-group) and [Assign an Autopilot deployment profile to a device group](https://docs.microsoft.com/intune/enrollment-autopilot#assign-an-autopilot-deployment-profile-to-a-device-group), as optional reading. -To create a Group, open the Azure Portal and select **Azure Active Directory** > **Groups** > **All groups**: +To create a Group, open the Azure portal and select **Azure Active Directory** > **Groups** > **All groups**: ![All groups](images/all-groups.png) diff --git a/windows/deployment/windows-autopilot/existing-devices.md b/windows/deployment/windows-autopilot/existing-devices.md index 81d649c077..2ea6052a20 100644 --- a/windows/deployment/windows-autopilot/existing-devices.md +++ b/windows/deployment/windows-autopilot/existing-devices.md @@ -59,7 +59,7 @@ See the following examples. >[!TIP] >To run the following commands on a computer running Windows Server 2012/2012 R2 or Windows 7/8.1, you must first download and install the [Windows Management Framework](https://www.microsoft.com/download/details.aspx?id=54616). -1. On an Internet connected Windows PC or Server open an elevated Windows PowerShell command window +1. On an Internet connected Windows PC or server, open an elevated Windows PowerShell command window 2. Enter the following lines to install the necessary modules #### Install required modules @@ -118,7 +118,7 @@ See the following examples. |------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Version (number, optional) | The version number that identifies the format of the JSON file. For Windows 10 1809, the version specified must be 2049. | | CloudAssignedTenantId (guid, required) | The Azure Active Directory tenant ID that should be used. This is the GUID for the tenant, and can be found in properties of the tenant. The value should not include braces. | - | CloudAssignedTenantDomain (string, required) | The Azure Active Directory tenant name that should be used, e.g. tenant.onmicrosoft.com. | + | CloudAssignedTenantDomain (string, required) | The Azure Active Directory tenant name that should be used, for example: tenant.onmicrosoft.com. | | CloudAssignedOobeConfig (number, required) | This is a bitmap that shows which Autopilot settings were configured. Values include: SkipCortanaOptIn = 1, OobeUserNotLocalAdmin = 2, SkipExpressSettings = 4, SkipOemRegistration = 8, SkipEula = 16 | | CloudAssignedDomainJoinMethod (number, required) | This property specifies whether the device should join Azure Active Directory or Active Directory (Hybrid Azure AD Join). Values include: Active AD Join = 0, Hybrid Azure AD Join = 1 | | CloudAssignedForcedEnrollment (number, required) | Specifies that the device should require AAD Join and MDM enrollment.
0 = not required, 1 = required. | @@ -175,7 +175,7 @@ See the following examples. 4. Click **Next**, then enter the following **Membership Rules** details: - Click **Add Rule** and specify either a direct or query based collection rule to add the target test Windows 7 devices to the new collection. - - For example, if the hostname of the computer to be wiped and reloaded is PC-01 and you wish to use Name as the attribute, click **Add Rule > Direct Rule > (wizard opens) > Next** and then enter **PC-01** next to **Value**. Click **Next** and then choose **PC-01** under **Resources**. See the following examples. + - For example, if the hostname of the computer to be wiped and reloaded is PC-01 and you wish to use Name as the attribute, click **Add Rule > Direct Rule > (wizard opens) > Next** and then enter **PC-01** next to **Value**. Click **Next**, and then choose **PC-01** under **Resources**. See the following examples. ![Named resource1](images/pc-01a.png) ![Named resource2](images/pc-01b.png) @@ -198,7 +198,7 @@ See the following examples. - Boot Image: Click **Browse** and select a Windows 10 boot image (1803 or later) - Click **Next**, and then on the Install Windows page click **Browse** and select a Windows 10 **Image package** and **Image Index**, version 1803 or later. - Select the **Partition and format the target computer before installing the operating system** checkbox. - - Select or clear **Configure task sequence for use with Bitlocker** checkbox. This is optional. + - Select or clear **Configure task sequence for use with BitLocker** checkbox. This is optional. - Product Key and Server licensing mode: Optionally enter a product key and server licensing mode. - Randomly generate the local administrator password and disable the account on all support platforms (recommended): Optional. - Enable the account and specify the local administrator password: Optional. @@ -210,7 +210,7 @@ See the following examples. >[!IMPORTANT] > The System Preparation Tool (sysprep) will run with the /Generalize parameter which, on Windows 10 versions 1903 and 1909, will delete the Autopilot profile file and the machine will boot into OOBE phase instead of Autopilot phase. To fix this issue, please see [Windows Autopilot - known issues](https://docs.microsoft.com/windows/deployment/windows-autopilot/known-issues). -5. Click **Next** and then click **Next** again to accept the default settings on the Install Configuration Manager page. +5. Click **Next**, and then click **Next** again to accept the default settings on the Install Configuration Manager page. 6. On the State Migration page, enter the following details: - Clear the **Capture user settings and files** checkbox. - Clear the **Capture network settings** checkbox. @@ -222,7 +222,7 @@ See the following examples. 7. On the Include Updates page, choose one of the three available options. This selection is optional. 8. On the Install applications page, add applications if desired. This is optional. -9. Click **Next**, confirm settings, click **Next** and then click **Close**. +9. Click **Next**, confirm settings, click **Next**, and then click **Close**. 10. Right click on the Autopilot for existing devices task sequence and click **Edit**. 11. In the Task Sequence Editor under the **Install Operating System** group, click the **Apply Windows Settings** action. 12. Click **Add** then click **New Group**. @@ -245,7 +245,7 @@ See the following examples. 24. Add a second step by clicking **Add**, pointing to **Images**, and clicking **Prepare Windows for Capture**. Use the following settings in this step: - Automatically build mass storage driver list: **Not selected** - Do not reset activation flag: **Not selected** - - Shutdown the computer after running this action: **Optional** + - Shut down the computer after running this action: **Optional** ![Autopilot task sequence](images/ap-ts-1.png) @@ -259,9 +259,9 @@ See the following examples. Next, ensure that all content required for the task sequence is deployed to distribution points. 1. Right click on the **Autopilot for existing devices** task sequence and click **Distribute Content**. -2. Click **Next**, **Review the content to distribute** and then click **Next**. +2. Click **Next**, **Review the content to distribute**, and then click **Next**. 3. On the Specify the content distribution page click **Add** to specify either a **Distribution Point** or **Distribution Point Group**. -4. On the a Add Distribution Points or Add Distribution Point Groups wizard specify content destinations that will allow the JSON file to be retrieved when the task sequence is run. +4. On the Add Distribution Points or Add Distribution Point Groups wizard specify content destinations that will allow the JSON file to be retrieved when the task sequence is run. 5. When you are finished specifying content distribution, click **Next** twice then click **Close**. ### Deploy the OS with Autopilot Task Sequence diff --git a/windows/deployment/windows-autopilot/images/hyper-v-feature.png b/windows/deployment/windows-autopilot/images/hyper-v-feature.png new file mode 100644 index 0000000000000000000000000000000000000000..d7293d808e94a95f63a262963ed82976b9aa6a00 GIT binary patch literal 26077 zcmZU)Wmp_b*Dj3PKyU~IcOTq!NRSZRZ3r4HIKkcB0|b|#!4lkEgFC_9g1eq(@8@~X zdB5++aM9gW%d5K9y;g@QDM(|W5u?Gtz+lMAyj6jLfh`Aqt|)N8-;3);3*Z5)qlz>H zrhJ5C54b@1Bq1*W15*_PdN4!;u2Jn|v>jn!UUj|vVEb%~OkiM49c151sJTM_wpbHZr9)+nlSST5+VI7kIYbbt;%KJ~)@mkUm`*!I zxuZou=EC%9nS)HJldP=$KF7+6;{;W-qtFns#G*4=bL6TBN_uv`P z2*ot(c(D;xQ+?0FY87t!0K5G+#n9rd0~+|R`c1D&+C@JMxo8mBq(YluODMWH=b9UP z_+Z^exO*?an2x=kRrqh|6h35S5|=6w*c_^TS0O5mRO`*QM&QC1h9xp_hvT$E(=N)T zVhJ?k&}tw4PI)8weLZQ+hXMY%G63zGY&?YTTOX3th{45c{Zulp`gIO6HX>eOJAur| zHHy=0`N+VIgkbJXyQxAdF8OCgMZ28B6)AhK<2Y`6Z||pv+jG0-lTOfR%X9xgKq-Zo zfRGrJXiKd)vdiAdp*DPH`qu5H4H7a)gQuus_9gSdn`8lkkq&{&#i-Q17?=Ig zZ)lDFh$i!GSKwso^1hZeF2Saq4z_`=lOZ$pp3+20n%Nt#fe98J^vaxIOwHl)TsY2f zJ&syhYkl{yBtWQq-BYulXB z?6dP!2fY#A>?k0m-*K_dSXul17kFG?_{(V@9g*%#>uCPh&UTuu_fyp zId)Huz~Y$(`5ZS2p|+oDpxMq{bgD5L%qr;eDb%-w7WE$TZ~5DgHWo?Y43NV~rEbUFBl71ZZT1*Ccdc zmf)+0`}iX*kGc8%Nf3l@p+^^;JF$-t_o44Jy@x{59!-uS_FgBGfrB64rEvlfuRP3q zW{GubwiP*d327%A+0y$wKnM@zI=SX7|6-0|Ljy)$-|9pt=+k(}^H!7$+>6tLfzp)lca8TA8)Yg&*($}bcN`I4D+*#r6>DtA3X2=;! zZaIj;Qg4@_2>X>5+L{}_U2@qMS7I<|l#K56ScsXq2t;S^BKmr9G0iYoSK9J+;%$oF z317?a-?$Ic_*gSZs|DxRNGEZaXX@%(qVI?3jf*aW(5oZA7Ik(SAX$^(rWVb&oW{`1 zV$AW=&2}eewL%?gW_Ts>%S33zRM-KQLw957ZVahBt%)W?k!f91s{uYqOy=eG(D=G$^R!gKru z?QcipM2MJcY1iN<>N;l8m?$x6l99taSsgsI*)I!Z#ARt8nl~-}PV~Al!Yud~mGr!(Pu(J8njrJ!e)&5^LcPco1 ztL=Zpx<8dat+`D9lqn*$q5@m)swqyD;zIgR* zrn3vEvd{Kg^oNU;3pn9}V2;($fSlmA%>w%#*zArxRH{ggh#dkT8a^Cq3mWEn+NQlT zWCfPtmWS?Lri;aQD*C_*{c3aCPoeiWVm8Y!5B{*AS@}Jk_COWPsUGAKboGXcHh=^2qF7Q_Rc!Bp*O@_ez_KrX7R)SdW`}v-4)b(>7Z;>F zn@z%}%U!jSOZ0TUlhtqs8hto;J_$|7-40`IN2)^He3iQ*r40Wx=|xvHnu}yH%=1U; zUeXAne!Kju-Hui}Un*ukg&s}yEHYB6h$l34Bt^Sl*H2H~iT>aW8%yKtyD(%v;H)aR z$R$HD)=gO)>IQe-P4F>b4(=y%9HA|j!1WV#i1$;&(Nm5VVH|9DF;6JH!f%Q7=ADZ_ zD{eE4*w4$H$R)9tXHhuM>EmY(GK zQzjeM-VCGHktg@Ec33RPd_>8lc&pUDLroMi(de!4@zrhqbqvO+vS#X(oA(zyjHU0Y zn2ss}1eFF>$R!1cVP45eU@6GbYeg^-i~mFaBNnEx^W#yJ&s2EZY_cW~Jp5M|eV!6d z`?Xxw{u^vgtthwkAw`4ZEQVEb*~GZo_hzxNFA`c}u4DV3XXgDXZO47&!t9J4-!|~t zpQNDNknaD;bJgo`KFoKI&c7`uq?ztz3ra>8<`m~}M$gUiIFLve^4u9gE_eT1tmqKt zlf0_xjobf9#ho+Kmh|<7#Xh<``@jelP2gKsNjv(S%7lKH9`5xpo}0@Yb$ZMnp4W3< z1jzYKe2sLtLixKWRwdV%#U9bcBEtQMkZ#e*KDu|Pn%*dix;A9gJ)yLsD4<9us{e8- zx*W#7^MJ88f#bZ9hTphQ;=h^Aysbr7`Vb*vzY0W+#XQBC!G3#4r(~0j_hUm^Jyts- z#|WzZ3a2Y_JxV?9*9bZFwdVotZ_1NdSc0RSI2Vj(_E+!w#aTT&^9pjY1}&Zn14u;%~|zpt@*ix|{L#Od+4%^3qO}GY&AT5qVsrc5;d% z)Z^;V&)CxR&tJ}DRc#TcNi#QNSPq6YJ_K(*B}WVI&)0n*JtT$#8%2_{q|d-aod7K} zQ(ceTG^vld#Yi4TnNsPPEYrYO#l;h2KvCJpMM&OUB!(MHRT|Za0Ts%;fdXE z9^1*j!4;GC)IJ;SAzV@FGl+4a*z535d@U-&LLharMlN=h!E+EzA}~t(SANK*`Qay` zX8FAHDMp$b17!@Rv5SwOH=~J+6rbVoi6|VZjy>wekZwHAMv}tIbb2wj!#^%7&&8;% z!B=$8)v#jz>{^Eb!dMZMj>8KP8xm_wHlP~2LF(OSgsdK&q<`j_9n%ccz3DJZh|K;_ z9pzq$ZA}1NRbl^#8BXIZd%UXK3@q|MDBMLQitPwdXQ*dS;}sq=GD0HHr=-t-3qFo{ z?kipK*ep9LqI zJ5TT&qYNBPFDC2W1B(Ck;{m4a-3D0rd?*>3kh?$~s;H)2&lX8x056h&ILH`t5}=tK z=(CITUTTJntlZe`cL6NTQ#z`pwm_h)}p3HI(rJm0d6`S<~E1@ zx0-@tF?pAN@FcDlgKuVb_~7YI|4m)Z+|R(CMZ)(AitT&-C?)>!#Z_q4 z<$TOqQ#g}zR_m$2?&Yz-st6evCpeVtpOsv;qNxz3@<1qNBsoETE`nk6g@?scaJ*Sn zf)no@y2mCVN=2FdaEi#Z1{0KCIdIX9&_4iXFA?7uB+X5Ypy1-baSwd<P7+1B9wPb|`_2Nv0~hf5z-x(HFZnzavhqXh{NXvb z^ylG$kY(4W2nXH|CpYXp)b;L{`{z5OU2$*D$wgp`#g==;sAZpdCR|OYo)J-CQp2BR zX|Map>`S$s6?|%06@~nL&ZIpq`Y6v(Xs(fAov5T4ob<=CDniLDBi`}&@YJFUi#GSQ zO`$w>^tJ9vk2yMhnf5D-*y#*-J$CmS`$yzmUluF_ub`mdtJRI{&a4Cp#826}+9E9N>0q+%XaD3eo5zq zcI8BV?0X*500{8-OGlH)wk42!dphunfnJ`Hw=(Q>1)`HF3;RnE6A9<0Vv{Tr)u5A& z-=NT$O_A79Tzq_+dxC)IefC?`h+iBPf%PfE=4&7miYDHM5-J`fbLyjsqa{cDJ`(|w zy4r}(2rK5h@1FR^rC9>A57Z|}u^rTal2eg7WF$cWaLQyWvU|cXg<73lh94d%C7x)A zN?n`l2})K;;Z)4T zOjEXZH0vpa(7z*dz>|nFruw}M;_(mSvLxe?VK$%Q{D&4^%ts=efTUC;RDcZ+wd?lZ ziY|ov2joASo?~mLhWlh4-HweZ2ILJJ5A%7223Zf&%nw?`nbB*Wkvj&}C6Qc~n4^2E zGJg1l9nIP8_5_7v)3V>tjZm3^9WT^PXFa%qG}#4*jJ)6o`@_RGbX_0o=QBPt8X@E3_iD0rSGYKu~G?;L4{Ae+P3d12I8Ux4wMtWGOAAU*J z)ib40nmwTode^)B+4#N|oFVjJ%m_IN-}67nK7Tb0BP{yCN{YRsU92OvFT`R9W#+Vq z?Rw1zuWh0$nFeLDloa#n+?q%ajKiGbZU9RQD5xXgPpI#N-G-!!>6>U3U>9n<>1`Fd z3|)n1ndx+v3?q|pJ#IIuX~nR|{Ao8hET9}S2KoAiL9rfL>ivy1BfwDCll}A!*|%*l z{aF=T$3|DRDFQMXpfD>nioIQB*5Gg8mIH$34=wx4X-!EaDR%D%1}O%;%7EI_+^;UQo41k}^v7kEGJw?QDLuOfb=+igY-B|F?3=_ub{^8oU&5>eM2%N8<1ZW!MDMT+>0P}%7v0OI@`Pv!} z=u#l`M&#YzuZabSC;(T_M6Ol>_T=XBuZ;#%ml#aXaw`54g`*$-`vs?!tQ1yB1Ef(gx_t zumIZ)YX0B%MQ)xcz0&M8F~s&2eJCQoA`CYCoFpFziZvgT`a&4VI;OX-l~qZ)5nL`3pLx7WHWtq}kPTLiKb0H9kt(KnKp_0Eq%VLb{+c!+9}SHN zCw6H`MeP+p?LP!u>w*>e3oaDk2*WW@7mgMVl2qUhTzeDC`>vub3 zCON{gMMO9Lu4nv3g4eOwi7SDTez2>N_lyH5z@Q^7wPIgS)A4xP6HHttSoJ4lMxuXc zwW^DGBWyJ*)U&dqP|xWD^7H^=3Zofak&oOKI zo(+L@+le6wNz9cdM47dW;}P#<)b?m_Ug;;c>*%u@7%W>9G zZ2o5Jo?gtkFDhUyXjLWoEXEPsbgHt$aR^+cAn$y{v}4=y0Y4g@6-Iz{{m#Z?JZw}(0-#F)bG14-5%ionuzk5zjdeap!^LwxOys$u?xhiy>Iv4 zeT~Q9+fS2Xt^p7I36LqzANGZqYr%6!o|S6_7nr*-__|TSV{Pip`7VTyXVQvqQ+?XZ zWUaBPWYdFy!@=y6>6#!Tv0kg&&bO@N$4kOlk`{~M#ptYI>p!*fOh(PKNtc~K72)og zeZ}_VwWxw-of?6S#EMQ6Y_Dd+xSAnJJ4(0=+^%@~w2A{Tu67hhit2iaw`eQ8rJ%@JD^tf9XDNU^E>yJF4ve zV+=@_xxn(lZ%|bETFXfD*e>z^=K}D@6oSv|%*-M+CgZbHTeLGfP7NYITtS7XsHhKq zC*7~7DzVy)5_{;Vvm-9VvAL1X)HBF(&@4+m6u-cJh-EO*!~Hq$j3B_05g%O%gSa_W zN2`T1>}yo5k-A2sETAQRW+BUv)jL_tLB=a>i$Tp(a-v*<;uTfQrc|by#OG^z3f0Ua z^ry8Wv7hbI1QE1j2ls^SQ9s1E7zNV6@`)R9MAGWf%WM~~>kbtyZ?KU};?9lnbm**L zTOrj``y*~9E>NM$3c6=(>Y~(M)>?FpDHhPLvTG0pbjQCMxV~bSnoXHS?0|FFN3IlJ zK6vk*V^~dg?Ck7jxc&||2TCQ*DvQzWHh_&aUDyR;lMFkiJu1KC&Tex{I60$@*ktOi zTSOh04T~v=Qn?!W+To#31V*PM24^liy8348wfWpO%Y=*BKOo;SrW}a>Y3JV0czwFj zsTnFgam+P`eURfqgrFetb^0ug0`)xYBi8Bw+OV14$*n+VG>kDb38Q94Q1scL^n&}eky7Ylmc`&qbTg-72r^_C_l?1P5X$HAyBgd329 zLUtbDYN&V~WRF11xXoe|TjB@+bVSX4FYw-GFPSQM_p>vAd9oJ_JQdDcX z)i^fm`dGd=))7*4f@L{qvh%A^()Haj=;+p_Cg=+e%sfiD?DJm{T)Sb*Az>V9xk6ic zwy*l)P@RN=2XQ;sa0XXf$`c8RrG!qPpP=SW7{|`rK~l3PP|ek#8uCHC0GE}Ag$m3v z_Z@Z5qs!A|8=?_u15EmLLB@xGWRc~Ag{`2SWgmnI0Cw^*8D;&n?VWOYbF$Cyn9F2B zw@3e*F=lg17xrqaBTFjV!13cEZUgGGRlT-}j`|<9BGX5jf?*}M>-z)GUNNx7(5ud& zzT|*UYU=0j7kuj#!e?C9_NPk$$nF}M{GN(rGDfE@HWv2|BWBXpXD5hNv*m1ZwE41g zXJ?9fj+DFghHE0_R1(!>n^u)H1k(&EO0qY82oodl^n|>1Lr9w)=R~NtlH*-PP9Ym8 z?0YFES;3l@o=Kj?F8NG?(q1ru$#Yv9IWlBR%JoA+q@1jOZ+3$%#ODb?VNJZPaYg|M5{EAP|Ng`Pj?;MyAhL71)1_SrHS!s3|4z{IRxjVd{&G&^^4{LPCU4R zq3ADe_nu1iZ;)boN`NB09ZNc4r!;N~vFP;)K5{La=mpoKq#Ftb-{?>K9|K&Q8nCHu zBdcK45e0WQ=O6CK#NP*QZuotgSO1{89gQ@#1~iXdbMAA_Vf%||^uOOtfMuZfp^&Co z%bxM6JXtPy14knOYGH;g`IbRKZfdoLhghkkkBv3I_$PGoyLlAhOpjk-`AXAgMo+<1 z0DWuyEEjyHvW>%ht+RPw6&R2+lvkK7aWd(>yy%qez!X zxRBRx-4k@9+vS-lof_?0{1fbrt(MOAj2RJwoP4jKZ%D$zZ<5FC%>hI zZu=`)+2DZ-Io@RlHH+C1pM2$8r0HYsV~IjR#z0!tCQp>c6?3x z@BQ8}Duv`+5LC-}+I_8Yh9-{>yHIYN7_2AXM8r=!0|GJz*uK(=*1OyYw)J@8(wS9p zp>#0B>``{mHskrC@%B>p-N!XNGmTi^#L5Sa#LedMv=`&05@zyq^f9(rdOcpw9?$=h zRU-K2X3q-oF5c2a78`!jT9n!-d%7HC@t^Gzqq{@bdcLyQscs?fCZXI2)96*5ZHm{xrrP?6p%kUjjl-fk6hxfuaUzAhI%rnbUjqW4puv@%1R z*>#eFNcgpzoqiYY`qrnAe(679V&ioxotZ-6{E-!%9et$|c)1hk;QWD=&_f+AIRFWo zn2*10PD#wIH0(=Vo{)E^Bl&>FjfJbMghn8>na6A$;+Fmu@Q^tf%hnQa&KtY9}t8-7?x zxvYsHZYp`~SLi|ht_Apml6L}cH^fDCli&+#q{`t85(U67t9gvq;#vsU-S65#Zg2?g z%~&eSbf2G>@!B%**USQKpz2#~v2d%T?99=0{#JrB6MszU7L)%#zg?5*EO;LhCz@If z_|K-TMhTaKrZiT@relC@eEAY`qXe=2wC*qdSAL<2@NTJpopzN-I4?w&Os;Vhp`NXb zEYa^wDR(A88A;J}UTBf^DAWYyRCHgNRmr0ZCe|;oTrzE-1!+7_qun$5mj{dyoAZZoK8?5ey0Dz@vXi#P&uSLR}wdb{RqNSH;6LZTMKYmgE z8=;wZfXnvh`Qej^5&Rvoxi42OtSX<-5dgIt4}+RXWX^F|ZZG46MEQU10rV*$-?(AuPsIebz?c?DSXuNkr+9T#{mJ7_@3xf#8c zKSfXvqBXjHz|wgP4kIFwjZ)@&VL=Xhln;tGzE2(nGUljMT^CWi>9tSg9zcbKY>uP1 zCh!XK&3v*DttI_{?ii{vR-U)L%J8-7kmP_yeJ}4{8rwms&6g8=S2hMeUH;5Pdx%xp z-cPhBJ`F6ck<01FYlmv5t3pjLxL^3K2G!mOSHEbUPI!0So!j$C@9r!y+Hp<)r&Pkk zf|;Se%rBWN4xN`bZmoymW5npVTI3^L)g5v4X)ZIa9)_sqSRbg|UzpFZB7QQ_L3*zB zBXo`lSP)KZ1nz=Qfw8OEQZCrDvg3$g?qC97aR8e&G`W^_QZn>EFYy_XS)J{mF#SHu zJkBzf4Lt?0>SX7y4;-O6nEKQzWtV!rD(#LF#B~aD0bQHllMmNj;H@* zptx88;_Q#4-=@r-14*+i^(q6qn_ENlt-8rpZxBni*Cp3@>XmaS;Vou-`BjY4(yE) zZQNRNS^3juD|SQfy7sZVvxhI65OQLy*&Znb^`3`2k?D675FGsZW*$VyQXhxNt|*as zjKOOn2BnL`kH3cOMkI-6>w8L$tv1`Sw!yGTZKZ)*(Gi_+y*sA775k0T3BGk%0*g4`%jlxwnO=79uW$zWj$S4y;4 zO?v^F3&?=kh)4?0q67C#KM9vju)6UvxPe2 z;P(BkG+e=PwTaDy?zD+9kc=w`TJ?HRBkK3zp5x;sIaD7@mKQU-ULDSpKdfdNJggHQ zw>|&)<8$JC(y6#axt6nn>xwP_D@cyqP)+C%2v4}_Vsb*p50Z#pPHbr|_s>5s3Z$a7 z(qeg{UprU%(X8ADS=uy8-kbk7Ry6h}2b^d1lVht)ii7@xo^S$4%A*MoPxp*xomQ>f zrUNQ{@h;8zgl8JoUFLj1QgzJ%U??%by7K~Z{v%@`*&_cN%>K%@zS}4$5Ud-@$1)5y9@wm`Lro>oVLLIr_R>rZa#H%#m(V% zp{`C$tZqBaDxa#r2Ar+~y`EDiu(2ny5YljhCqD0t3wlG7+;g#jF&Y1t&S>-ZNEneI zx%te>ueFWm$FTvI(dY{I%erUb=gp(MG_nN-=kVSZyLFubwXYj?{wux-5@~TYA(VMb z{jwt;ev5aK%sO-h3h&(FJs>G+i;?EIT+s-B&t88M&h92`x@pz~**B%+78BOMcYDEj zOzKpUvsoqH?5f>Y6O0KGO+*Gz7=dy$-Xo$yGO&ZYU=b2wsf9rDJo6$z)u&2ervSV(E9k0DQgeI5#Z&O##qVK@4yS*M`9{utish#@y!8)S#oaP{6vlBASI`P*5Ldfo(v)SQE z?4AM6SpG+2=a%l2Z8}cO6cZ%6IEUBrMlalq9w5X_;D_yu(u&7*#pl1|kCST~$Ir{s zd?HoGX3tNLDuw2Ype=k%TM^o3JL@$h12R3@NbfD z-lt=CP2{fYVf6pR0(a!sf8q?l@a|IxiI@5Sm`U^{6vv_byu4;W2*O7EComP4p!^y{ zaeCcTflrOuc&f(pBHY;}z7D*zyLDe>tImG*UN5jmt1~^N(Df}KV7vyKgIRdM7f4ZR zSR(hn$b|s6kKP}-6*e~-KiWtY{JZsZPPVeoZGFV%P0$ z+`S4Vlfrv7o3erk!RU#fi;)|*W69_9-}L&{+gZ%vGkk~gQ8*>jPHGS)Y+Tj&WF@pM z1zr74Di~1ERlLj=Qd6EcImwp56Z$rqhO9*)+771LRFk@hkOLjGC#4{7xDG`~KHf8& zdg0Is_cRryt6fcabzO+Ng(jt%ZT01A$0;PwXB=ApX_O4`9Ekfh2p2argA`y?RRLeTu#!EZkclHG$HKB10Au;-V0`1|017kE|H)$+` z7Jeq)K)mhW zV%WWC+qzQHAuiCQC0`2ojHeKV1DW!$GJBRzG@HHE#e41!aA;>x?%3h#WVN~G{B z=CBs0t8_3e+Zi%T33LUmH96hDd!oHMCQN7BodO7t0Hc9&x}? z+H#um+N-^L46&My6T_QSF<-1{QV~YHNeo#6&A#)3zGkI39k1Xl+6s=tuEP8%>tsOh z%c~I8^L4$1F>V4J@Y?xpUccla*Y34|oD&OH^b-?9z`mM`o#?vtkoD_LY-i>7sAzrT z8A-0x2^mz3>Te4$$e1*#;Zspb9!!`uQpPnf5^F=EWocUlf+9cCBu`cz&^ZIvfFSQO zo>I|+11A_ijiJ~H)gqW=#~w4wLU1F$xhAAHc*pgu@O~#Z#Uai48iu9W+gpkBtNQ0) zOBYcu=37h*Qa9Ky)@a>K)Tcj5QgT~$C~9(YlBF42^X-&n(_q2yw9EZ(3whKyrkJ{1 zOA@1tC_~4u3Gm={@nTNOH}2op^{DRX8lgt{HirKw4?tfF)(0KPG2}zR-0yL>31L>q zsNekm7WK>fMUfO*zs#-^Sf7~p3fygwQIWOswBPa4;VFcC%+GV5)ZkS|w$k>VDUwoL zuP{`@eQlU;g+%~4G2QL{06_9gfJXV3Hn8W9f99`iWimJrLJ#o9y}_Px%_l+h&-;(6 zn9UxCO)7=2DBQGCZf(CfiXhU-zDZFu#wVHGB6IoV3h*oKx#Q@hJ>dRLU&i=U&_t_Txla& zB6knQSt5^jn~OtrkNZjF@vbnv$+p56)vZCPxBE9Y4Cq|mX@MiU89x*tU%oitMQe#g z6uSO7fhv`1J5m3jgWW~caWKf2IB}cUB(?u~_fBN0lJotJg4AG6V2qNmpuj+eKa6=~ z4eVTCVjzJ0;qH3E=n-cG5u!3rT?KlRJ~?Q?DBh|FhSrblO&S~DF(1-kxUbDS?s&%M zl7NNXPHb1w?w=Odgj_^Cm&OT`TTUNt4pp-#Phnz2(Q!@tZ3BNdo1ADM+}h=*MZZGh z_#r5YCLIa;3r{b*qQnVVx>ba1g21lk5UpsQ?_yzMYl@DS+Cjqi!@Fd(&qNu>E9cv^ z&9O^kb@CSnr^&d@V*}3US0rCLh@*>IP72a&m=1z~*2!C%cOxJkB?s$g2fGdc%vic@ zR}aZ*II1ZWb^F+tqDH;1@bSbql5Fs|uxZJL-D`}qHI%y0?vw2fj8$sh>?RmwpYu*3 zup4nw6V%L0FU*K?b9YxCVTf`;B08!tG$3giU3`(@2(EeZz{Dvt9jOCi$_pbAGrWN# z80;N)Le5r?$CS^Ww40OcC%lembq+q+d--+u~7FpOzj$VwI}|- z5$Q8jEAyXH{$IH(n>T;#kLj;I8#G=Ih@}Em{bDX8Qu_?5g`=Qe_H$2ybw#wlL5OVu z^x+5H8f76wr%kU<>EAIM8*Vp`{om{RmP#>=GCwBot4+OTOAK<>zC1UtuCMjM&0~_K zDFIP8`jIyYxf0++M5~t&8?-cRE7R#ZX!jvd_`!AVK<)C1rkyN`{!v+#ge@Ga9hcZV9iqvJ<2 z9V4AuXZK;1@-q8D8DW)h4bzx|e25M=;%&|!ZFUmW&*@yB+v*@8{=g>nAUmE-_-dhq zM*_O*ehPqB*y3`NmiDh#3dZG5yo4KqNoK0O=(xMNoLn?shwnZsr>3nkqEe)SR=xcG zmo^T~b}$-cQNh@45!gN|+`BxwTR!CFZT z6n9%)TL-CE9leDgol|KyUEzoT{6(D1hO7J$i3oaJmP@5Wz4k1@4<(UmUa>>MJ3Zq} zSMmP(SNUMSzWeWe$r4%#%vadbY|<^$HBuU&>o#Zz$X>-?Ck9D~-&yqN{#OeYy_#(f zQ-hpwBv+F87885m>y)N=TnfxDP?SQb)Z+kR@&;o=oH-I}HGd>OVa|tYwx}(qd<`|8 zFzw&Bt!O&fdi_k*kQvz2-Oiz>A}Z*rQ`e^9`z2JX(vq|c zRr*cJ)-FNFMjaP6MOJrnlP;Cy0+v2mEs3PJQ#zNgBlbw(mgy`3NS~RBDCUsSdQ0JZ zSjm|(tJ|8ZzNKFVk{_qIL78jBN>8X5BM`{|5}a`}LnDi#a5<(`>QL!(N&2rDHQWv9 zMCvUu>>>U#Ncixv;Rc0ByL5v7b#rS+TLtAQZ zLh7e{^D4qjL1(lF%-q#*eCGOm06@M;xPmY}aPyOxvQNoZ{Yc1Hz35@Y+o+WqrTTZu z7|80lW?LLZTsBJG%8ufcH49ccpP~Ah9Wz$~f%qhL1S*TUWs=gw4$TgZ85$A4DT7w`{>&QxNB|1#YzAcQ+^y{$1I z*SQ=iEma`Xa(no$yDU(4@#$P$Hc$9*M1hZh}$m?Rr2&y#hArCB#m&k#JKSp?-C*uI;?@Ybo@0 z@6)pT+PR~n;U#wVn{BRfs1eJL;HYkvy>$4jpW=Tii4sHND`&qgVsS2p$IRhzTFyE_ z-1rN41w7PWu_0raqhF=XiIQecu&=%x3kbj$paoPgLOIZY^AsKfODHVZwBHa?!C&co znv=y^z8B;j!2OrwYgzyLSQYN7zDAw4aLjx57@zhy*8=3vx7#~WzIpZflW_oEZ|yL0 z37Kj4Xy!QE`#Y(`_8y7okA?Sn);UBJe#lN)n`AxboSwEE3tPy z|M9+GXs~iG!kT5w1=cVja%Q9VaqaijAg&m;<+{%UhokW;t*%o@d$sO{x-RmVq%Yo` z2Ss(f96SJQ+M~K3hN4{ct)i>pHZRJ5uSVSrQ{@)|vq)$7J0;?Xd6mQ3erHJZ>DP;KGTrhy04`>SS5TraAe;t73XvLa2ve5TPg{ex{c8 znc#5R4(o@Cofp;Xn#bU2FGY0%mn$Dw59#joz58Eo(>JpxxRbHsWaf?45<>yXYRPo;8~_ z<$)7q!$s4mrQ#sd71F=eJs8V&gUsK4NPLSWYpHnit;v~c-?X`eu&61daezmx-gvq2}c=G2#9g?Jegc#BolqtO1FwV~RVD8uZ5_)1~<#g716uA&|4 z%Iior%d(W^f-OvKam*q9VH7JFFbnR_K!lo2KCP`yWz3@K`^I@ffG+H_#t25(N17>! zhbU85KhhM^)EtXMq=6{?peTah zZT{jB!Tq2mcL)lAto7{T;kzGi*6`t>i20@n6JxwsL%IcPcL5iIf;Y6lf+3Bbm5ZzX zJw^)tWpe>)RAYIHC>%g8qkye{)w%2e2_1j`;*Xz%#QzBW`5N+vQ{?x{;P>F)i-{j~ z3qtOP#~gykKkD|*?KjpzU1O>t^$DUavS@dt>NU3a&tbHxMbj+T?nz?ujD){IfBat9#00^3z{Ai6=@xJ`vp2{KlKlEw z+`{F@G!x9}{l{?~FS^R1qq&mwKRcRF|nzTUCxarF)W7s2D#ZwZ7troE=HJ-}osL0t*W`74G1xY&M@j zkdvK0P74~qn-wt`A9HIok;qt+6 z{-1gMZaGNr1z%?R8LQ}hkJc6{*KUBW6i`25BHsnGH>`^YzRyWexMhCZ{s#4C#{(T` zEqM|7%qk)fZ_CwiN3$$yS>m4zu~In0poZ5S`ClXS{-gDO4z|E8oxPyc^Oqh0vlr{N z0e0b8!_ass^#o2<3xh4rIF%lVgxy$ws!g?Ae)*S1tz{JFU@HH{urZM>Z-)5f2_7CT z_#p0LE=>Ef{_vx^>ld_D0(qhpYRpi+pJo4gp<3N4SSTryb96w)U}{2l>k#u1C#=tu zzN}Lt^r~~p*Oj`sUjKiFj@Zqz;r@n~3C3e8ooh*dqd73ehbtsLT`tXs z($RnQvU>lwDs%sFD{%MqKN>atkEj3V{EqH1GB=kZW;WpsX1UJ`kD?eNDKkj=Jjm1q z1jHnwA5x1_tv0So;zrPSAGJ8mN^>G~!mp=%Xm0YUOl}hV5BpR}LA0p8gzXeunR?j@ zqR459`I?9+nJ{aJyRq8T(~3c)WQe{>&{>$X1sg&xMIYh`uI zmM@4UkP@B)y>qz#52WrVe9{gdZzZg{h^;PrV^O-`K2R^erWQf3sVSH}M@_Sd!`Id{lXqEw^EU96k}3Gd5F+f}gz_ZFWw!WFb7htQ^xL}#4F|KW+`-e0Yl-yr$upVcS10Jj zGQX_0*alGLm?J7Dzh9HKVLnx1v_9PACN=RVNPh-5@0XMU6*AO7zxej3o!_~G@y2~e zy0?c_XlDE3|H_Rt%GRLh(3h!?I-e9lU|;A-1Jua0Rbc(}SO~7Tr4L}~EtAkpk6Zp~ zGif`$$@mKScN*R3a&Sh@)2Fp(+6aOMg{@GaQdUKK?N6xk%NnrDw>qIvr#+a_*zhZ3 z=-g!Uv_!rfvTLwfHTijG=JxO_Dt*CruKe6b04Qz={adQk400`&YPM2k*!-kkc#e@Ds2;nYg8x#> zdv@>3qMewh_vtHC^>{|gHOx)=&X#Y=$EIbsk(6U{zLo6f2(`Z*EZUqfeX4G)z6oX~ z(EG)!Ja^`_#RFn%HFV6aJVKDPpAYW|gUFT1WMBrRe?#|A$I*~r!bfAia74#KE98AF zYIHs?Uupu%ny39!E&r#muMUf1a<)dX;2Vh zrID7FP!?&B5)cHW8>CC&JInLv`+nc`yRP4VJ7;Fj+;i95HD}4rrGwUVZL6RYx&$1V zaU6^dtX1JBd064kr5Rad+_7XIy?yEN?K%GfH1bTLOn%+He^Qqwyo-UI7wO8q9&KU+ zhD{fl@ta!-AReGvtFIm5J8-7|WWcqRreB+dR0R|{dF=31DyTzB?2CsgG)&n!zotAQ z8$HGS7e5r22ZN8Le*Nw!il}`!<$E$Xm!lcyKGm|d9k6{mQ@103vd)W-@R0YipMk*3 zb45fC%7Zfrp7GuUsU8p{u)kn6dZ}xMFngK67vFk-q@vLc_tFo&*rdd%a@Ca%KQ&1^ z(1Wf}^e;dQ+uRL=)p76eC6Tig-Qk5(7k45d52U>;3a1`&KdM-#k3(YZZgFt!Jyy{qVL&kH_OpdteRgU6Wn%jxtjn zrrOw50lZ=p#;=m`wWoCm-m#_-BYsx?0ur^&8!Q)|Xe1s>aNtIc((m14sgm=(=3r7! zk?=MGLLf_hd%YLNM`>AQ-#vVn=juU~{gs5I3S2!U&$UDiGV{37cKkqPS#KpFAZQUJ zAt3?@r=5=ejS3kW}=OUDT!7+VAgp&NXh;oEwJm=ewwx)Khn$G~L2dph| z1lYa`SW9W3Ic|M=tiS+NX|KB(DiUC^TZZ}~+JKL^@DYwU>B`N6k9@WUoMbp0d|wDy zNtvaH&;M+%+2HGSWKCnU4PC2YpnvccEPhY>JhnqCCYN|KZ~k z2iLl47~Xc>nI5)h-F^UWhql1q4#78EN4MR`Ilg`WNZ*W}d>HJq^K87+tmW5G>%?(X zYx?hfph&J#DR?&+*pFjtlOynnm*Ddeg*3sS&9ng9I|1W$xhgjSd6kwMffL%+8C=^J z@q_J61kN=A*~~Q}RU3!9u{OWR4n^Xa8j!LquVAW5rVXpwBYLyyu)O6A&yQSgbBL7% zAIkcIF^A73CsfhXYwx_Rfs6O#-O{}aP>ahD#{*MW@9mdbrn~wjC^ol(d<|7XL|9L8 zl<-c#(nRa!$TWv;*6E<8)MbWJ;K{I(pV!ghY)Pi<$xhkC0V>Y*!aPmk=ln(8h5J`? z0N7?45ZZhKKWOB6WuE?19kJBKk39DP&-@;0YirAbA@*S>#TGr3NWPB^Lns=3g zPgL*&TaSk#E`MLv98MiKH~wgq-)jwgv>zcfWjuYce7rqVv4)BOV45aCoFPy+!_2np zrtQ$L;r^M}xq-S*;AD-RR=aeNGp6zc0Sl-c$0a)km2Lb zcGYL9D+UYj6337GXT$cBuiXpVz3^_En5dRQE#AYE@yH7_l-|2d)k?UG$)AqcDpqa9 zUV2O?vD`j8v1YJoIEiC7@ipy4= zWRrhwRa!-BLx2RK)nkx{XV{?AKSW!s)ATEu2uLx?2=|WirwZvOnp3%6LyHO0gl*7z zu;!GDNv_0c_p7|<8i{u*;4X)IahhPe97q7=h_V%zAM*i}%^a4t-jUe-D#yKjc2pUPf~%He2AeV zIk%tt2du@I>JPVhx^Mb3Fz3+|GmO2`vu1bX=}%;Q!pT+E(&FA9X0wsJ2wlVJBmo!oflS7UbJdC!o}|mZPS&#eu0ytl0!= zH}WYA>Tt)GvUR@I%k-C=6Xq>^YxPFd;?26wT8yS1XAT6saF4iNSf<-(X{ha$pX;`c zsBoi5h9hzey-J?4lP=}Yn`xNDEG%sM!9+M|>`f`^M{4bh0VIU+qsRTC-qE&Kr;zKK ztN31?Dbz2vRK)11eJxE;JY}Jhj}i;yv0)##GlrsFGRlhC80QF+YEZU@&j$Qsi(+DO zpWiGUsfm#Y34fiPF2Hot65hh60_=|vhY`im_1V-?x)!hdfyIQAKH^P1XmU{d%^oFP zdS+lFU$U~$efy6z+%85cyZvsdP0)$ra((0RzBEK`Csy9gmIpG=Oz?ZxM0+W4mo&8ARBLTTAj{!VmCkx_#5ttRFBh zMaS;8ajyHYTHw^F5Kwf(+xMjlVux~jl8V{eq1zS)KOS{8i4O1u&X!mZP}!>IcR<0# zD7UvszQfzl2cv}Ff7Qbwq$t58J}RVy!wL-(=e(6ST=;nQUWw9>T0)Z^>j*iY-e$v` zn9TLnrjO)8__H1OIA%CZ#b~G&;x!?5 z=Jo3RMzNB}v%OOo_x|(14_X8iDIW=Z@62*NAijNCt!>3y5$LXJTiiu%u*k;m5k>87 zZ|jf`$@HX&A1z?OmFXiOFpX-;ncy>g!jt+MEu(o2T(_7=-@y7(r;9Xhq{rISWLy5xgy}1k^R;tVu(1#}B-m#r$ZGF9Z zyrYN*`pfLN&Pm4Q{dK*yYAXtb1^K3L48|}1D0HqXkL!Z}cArk?~ z@w`$|7T{Y%=n7yU^7?;%4!wZZKmC2?hZc$PWuMExMV7{yrW%KA%jgwVx)gStxj1W> zb-h^e?wpZp*=~2CD3@>jwfU;_GVrM2wc?ZVv$1H~n|XjO0wQeFQhV1K_}pd#Y&z@ zA+Qp;zEEuQ(bhcuTep#@96bU1=zW;6Amu`^kF_W9J@Vuit5_7)54^pdbS z!GqC8xu~*{SUge!sk}85^dzaXu519SM;(GvokNHkuiMWA?Z0EhQvwQnZ7)ungQk=e znhyyhvd(vQn9sM%XPY(-Hj>J>&b(9031kd?yly>-e_SBnT3pwp3BJeN#cAvQb@#j3 zPkOh5(B3#x@f;nuJKo+3MbSuV_r7#mGDBi)n4zA-IB(H))i(V;z)4>;K7fM53m?zy z0ykOSE)HZxcqKrSNf8C4(gTv39K6?^Wqx_^W8h0aP;k5(bh!Xr zs>KBD%YSWtsn=GV*%uRM-m>FE8wHCk{xriN#ZrBf}&FnT#`ZeUOu}j`*(3KG$(w1)jxTu931 zkgHM0q{S+w!o551&~ZtXg0yZ)>)PpVu{kwi7)VyTuvGb%UU7^kvACA$8rE#Wm%_jf z1ZDSmm8A}uz(6E1J`1#kx6irEWWy0|wWAMbLOZC&Vxb!8ukixRa&9Wq8Y-BhC z`^^jT0=qEm1!D2)fLX9T)GtvYYd^CPt+X^AIlY zxMaQ>9M9XR+R%zY&X#btUegQinDXpltr?lNI0VXDOUug8fl@LHxlm$1Qr_9%`z)bE zv%?ehX{W`N$#sT#b%_&P%%6;8B3J$CzSfP{zIOp@e-qWxs^`@wMYQ>kgLra_Cf4`*32R?sFjpf!ETH`u6L5aX{I1q<>Y>WUU29rdOA^e<4aEjH?w^R#_>E?5Es>CD)%zk7X*hH7q;@a*$Y+I&6V=l5CE80ZvW6|=L~l?>bh%WM{{{O6 z67mh^cBjP1XveMcNI5n+0N#aP6N>lD|8|$eb15Q|R+VV+y3r8);YkT~=fke>Wz=yl z?le=pNDcEn<3kOX1XgpB7rKnud#hI9YQZriyc+cP@Hop?IFu#a=S%;b(&_DsF;m z!3@fjFOw4=B2y2)zDK{)cUk36wy6)FQTU6g*&*CJqgQZTV z?e@7v57)bsAEt;B^c+*s91Z-eb-IgW{tI*qDWc!Kl7tP4ry9uhnWRKva%nF3*vtDi z7xxEW1xxH7wk0i$V#S`uhA8cURMtXDh@?}o<_0{F!1*qGv>0S^s6$|HeS3`LCo6T@ z4QrnRDlN*lB#B2$6EoW2xmr?TWtv5a2mNp|=fb@`iCBBn;?uhvf6xIi^6tQ)I@r}c zT0+_YYmehn76i^R@goaoWLc6Qr>MadTZ3vV72)5)8CaYa5|7RMYC4f^&mj_HkfD_TM z6SNaRcEb8=>)U(Bg^t*hQr|o*Kf#d+Y8Mh^#<=0TV3>*I%l@s2^>D+1V0sX5p=Uc0 z%KM$(SvF_-@1lb>r=mSTStE^T{%SiWVoaSC*Bd)xE(r+RHStezfr}iBH?A`J_7?e- zf@6xf2<241xr(K*w6f6Z3(n6~Pu_O&mYVQ9sAmr4j)0{R{r5%z1>xuJqqhZJ-Az&< z{bz^S^e8g&zUg1z&{*4y`D7V^@lXx`)1``Z5i& zv!eLl__qSPvJksg8mPT3`(HEfkwH*!S~T(x5j(RHkkdu0aD|IWku!S0PND<+kOoS@ zZy8&Iq=fKcE;2+1HzLC1+@IqJhJypEbPg&1A-w zR_n*f(?oRPvMSS~Wc+}MnoBD9^}LRALC`3$Vnp2>Qp1n~up`6BKy2$=zW2RD0qe)( zrOWJ$D_+yb;Xz%Jd+};~XJxrU1gKcy*m=yQr@ zK zdaTJFtcf0!=DRMGwu#%p>Xrq_1Jf{L#KV{Io=YfU@{h99<}EL2G>7fp2)N1G)W;|XgDRRROWk0b4HJH>fQTDv)Fu`!Uab0Qzc!h=ve+x}>@|f}_EJgs&>aQS#Fgz%~#QX z$k#4HUy3>M1t?Rw#3@P6W;P2g6GXbR@+I!3Y;6yq0CI@}Al*Y%2rw=qT^`n!-#eTk zpT?Ot9FfiCgGCO6<0|ueQfT)%@Q?b~X9z!Xc6)s6fgv!k{=6eXwLvOlx1i?+>j6HN zpEZv^faKEgBDsE={dq0RzN9?;m0rmq1i^f<1>5MHwgdb-nR;OTt#pllK>8d3`9ikY z&t0LbLQtg0zCm7oe_GjwXBFOd$kwL7jpD%sMPmy)23YOxL7 zJjuP>wlq!7W5aevQPo<>B%o^SHEl{1kUoDFC-DZTmw05Iy$ns^Yp;TK(PbJsifk-J zs-ZWx=ehBd6LVRxPQTO~J6ASP+DX2O7XDOo)U5i-MHCdz2(#-j=XwUBhS3<6d*$75 z$!n*%UijITZd}J_mCq!K#<=I~&pJx{)t$Bxd-cL#D(q0ca+RrgzP^fYIrI*`G)`vH zNqN^_&o7G1;#$A-Bly<*9*jr6nL}Tbr@_W7+Ni17+;h*5UDu6lv_{BQSG%@W5%OOI zajhI9R_Qv7-`u|x8#(@rAYG|tb&{Lrg6Fj5_Zsvu%@lFK8`2~GgkL=ggKET&}$ zwCJw_gRB_f%K?+ElN!@=PZ~2$kpz*bJG7oTJm(T4bY1d>&Yh7rhnm$~l5Ey?vh^~elb|1FW*m%$k0Q?9u9j=y*voX)g{U~$Dk-UqV2_I^76Qh{r640_lhg%*dE8t zNFnDpfyfHvB&dbW{$%w=z4e6Qf+<|E_j64Pk8srOp0&vvP_7=vHFET-A_lJG_iaZz z$wzY?cz9Xn2-^F@qU_UZON8l9sz9hdyn3yV{QcWFIysivC3G<+WLjyo8pjy$0fX;N z?G~_l!wV8NQkigdk$mY2&JWtjhLTZKAmfffmSn8}*H{_Y%Slw`H{DcXWx-wwWm9`A zvnco@7L3mhgx7K7T^9`2Y)~4DVliwO`kzTqjv=;^C1c=#Q~k$Z!R)p5${e|p?m3KJ zJCml=5n@TDixeD_a0~Iz#(sy`c1g#D%OxO@)!j3(Y?%4}V9JZd-O_jOLx8hr75W4o zlPvq{*@WG+HUoLJR`7@ZTQRg4NKjCGqn)M&QpF?n?o1`pC3X~;1%zi8?c>Lg3+qQ! zhyYitAeH>)Ta3`fC991>kq|3#wKh6TaR8au)!CckD5x?;fd1$B3b zVA!si3KS=O*9_dip$SrjGYg25-6?UI$R@05E7^X&Ulue+QM$1jc~c^?wb7CT7wSX% zJp8H3Iz_SZA>bwe^A#vT8`k^+*jgl?s9n$^i5RE=H}j8Uf#FkpOe%@t4{QGQCjMp3 z-iZ6I(LTK&%em86^SjH%(l@QIaR7cS7jaTiv4xUW;mxR}1zGjV$<+_JX4ZC>7@)&g zKyJ}K-dCs<(4BnIDDY13_3b+lrEmcrtZ%#8C!JDOrkq8k)M0mt3+QkGCE)NA^?8Iip6i zzzW5F@ezzP&Py$_cY?`>jlPbkyk^Wl-?Kkj>RuBN@*RKaXA~5N5znU>*X^6N%f=M&J+t`1aYMS#%1$o z%Tn-T`kK&bb$+58(gcr%A3s+TjMV{p1J-sX9%e)%zY2cX-PWL>@##8ZbY#2-MH1bO zS3ux^>~OK+tB>MmS<+M||7f52rBa zN)k=;Jm0yRq7uGD>2w*FS@ac2#%%w~vJ3&weV7GC4yav@_Z&o=+spUBt}>^r%f%za z*4DYoU5U8!b~GN<39tODS7FKKDRA9X3s~e`ITknKoc9<60D0T7I}hFDF?r7edUBK( z;GTSu-`5L64T=!u>;NsP=|}&hNfAI?|HKk7lQd@Gm|iqsGUZy-yFY~{S;0w2iG;im zr$D$fhLcRpfSCP01Qkg_4P;VtZnE0HW>o75humZm0K%gh9LinNqLIl22zFTu%y^BE zc+qhZNr6(BP(zSZ)@I9Z@?b2gMB)ZXC^scg_WR>2EY&?;T)KIB<<eHc;^(LVq37 zQEoXPgioz2)kT1^R(Q;UpyPOtdP?4LH!wTeY&*0s2q-Nvo58~hoD}-=0`HG01nW9W^wx^gjJlK- zMGRxHK-%EJ4SYJysZY(id?{SV#YyUQ3LATgK}V925yq2VS5s-4(mmWf=;~BvY|ZM6 zJ@Q_CC4r^!MG>xl!mJMY0D;#z-2-pB{fmqzE@ZqEAoWKTn22%gHMWI*m0UeA<`hchSNYLHm`MsPbR*)8gL!LkU`qe@a18afP|;m@sK>pe`g8$$1-73zEo1 z1h`wTfdzmP5|qJJ<%r3%-~z)eWcCxF=Hw+8Kz)qzG$c^;^R=`Jb3T`|E-d|=7R?q zbPpap62!*5zv8PZ|L6Yip@*iT?1PF?+U@(3$F?%6G7lb9$Kj&PpWL56byd>$c<_Lr z`=8%KGPZZ09y~Z+dn+%a`u3FzPbhtx z9U%SfAmC!{w~b_RSV(_nEJznSFvGqu5s0hB%9r1Nc;Ct}IUX zo7}n-{VUJK4A0QWqt?TCAV<3{(6@Xo!031t%YW?c8JLkW!u;08X}gI67RuWo?QfHumQf8NF|KWep_ z;DoiIQXGvtNU;=HaI3}FO#saq`jCh_7|_ivNX3Lo9>Apq zi*zjoiI<1kYeRW1B<@XzbMuZSuRLcbqpP#AL^kcVJ9}oEQx?w7x%5Drp6UjrfhN({ zbAMJ3tP9ghtnDsLKDHAR)%R&58q@pNo_DwIlGwf*?PY&DJij&{CA!ic2Md$q1Cf5Y z8(NIq@okNgc1O+^*&A)F7&JrfO{F|czaQrv!Q~Dy{H+U|7FavJm`nEXADA>Y9grkg z&#{aog6~80<&#zRHAIxYQT!!ZGisTp0lujj6f+K~Je<10>zRHFYp+{sIHB{l`4Be!RAf2W#G#(IN z@zhPAzF9RfOZSEYEe14K-M5nwC|7pFx zH7>|wJu{bT$G)fgWIt)&SMtfFJ9YAum{`Pa!g@6xv*+Lzb3s0T7Ne@IWCv7!Rh*H# zV`=Zy0o@`-2Y^XEG=3EFS!GIyo2#2pM7|42U9TME=G$Ym!|&8DwK^rlxeQM4aK5*W z9t75I+&5ZrqJ#W-Mn6MNcem&960=bnB9WI@ss-2>ZV00vH)!^li026JE0`I~ z`TNb4jwjF8at+@BNyq$5CqF()vCul1w{Nx(S6jCoZrtxSj(RIIqFu8RKs({QbBjA% zzNq&r`bit!$D~pShpn8W)YRfCQ_qgi=R@&7DG;A%JOi@5L2lM43pBRwfV;NRhu<+S z4^Y>OVGQp&CT=4Y4w2y+oy) zw}K_+#b&+6-8TI}IDGPDB~H?@UkvX`gLni+o`C!w{m3gXJk)9^+W#o?sAq1(SHgrw z>#ZluN6usK_X3L)O&xK+ttD`h139ptsA?GY0DeY~*P}&Z{?kbWPwF>Afc(?Y+b6b4 zBe(6BeIMl=(yx|(0-oO6i4T!Iw(cI!jL5R#!Syqj{2uK%zv_N*_5hQAOn42CKgN5$ zg=tec$Rxl+`WYn1kNvwcC2=@wvzwpe=G-gK)=@JRBZ_a1UE2C!!KC^|@ut&i7D!6( zlR7=V0N6ODF6FNHnrJ`ckIBB%zJUN6YO`k{nA$B7w(dLv_g|)E=?n4hiq^;BH^H5$ zbHS6XaQho*{)GiB9-OzefMItBc_Yr+!>ckA&v$x&x%R{UIF)%edv$w;6?yrsQ1kjZ zs!xgJZG=*S6PS8A>P@%sVtsJITAh7wN`%C|^j-`sjddt1P z&7>=>FJ!j=V{irjGi-kDJz{uUjmo+Ag#M)Yp8E~%akd4qtE+VC@yDm%86Wm7OB}w8 z<=NuR+V5vF=UMm9h)wn#MvMv(GJdr{{XR>Z5ZG(vaf|q))HA2+;GlxXz6(ujfd1gm zZ!PTCm7@=1nC*iD`B4%$&4Dq6(gyJNv%Z}kETxlvj8H*qO}4Tn;Cgw zx#R5jAGLriAYz)EdUz+wjG^ITHPyFoBw%a&yw`R1^R zCRsmcuwgle>)H{tc0D*md=H|Z3`s#gMbtul&0VN-ZR-Zwzrx=M3A3c*+^j1H)U&?b zNKtpq(_lN3eWSgki0uo+tk5iJ*JMUG{y++SZ>7-QN*d1dBn*_0Ab+w7g!WxnNU_^vt%o(bz{;2>?L^u z$@dLd2AM?4nn&?AUa>IZJfcv{dX6_=) z{zDl@56S8NZv6L~06VAnf7eU2^*sMW2_MR;w*GsdP{(}YFA}<+it^Q?gyt0bt0yV9 z*SOS~6)h}cUc`WNkU6(j=}DHkt8}1`>s|BRO!&=M14d6KA?g+~d=yYSe3s2&vOIO< zu*q@C`X2yF{px208N2@AR|??zuK_#+#{bnGb>AbFzc!>Ag#YhAEwcYRCjbAu0j=ms zD6`v9AB9B2Cq*YwyT%j=DDTSqIf8j}o*=ped>ZjMGV9gB-I)%@dCfNI4QyDQrP#r0=x12J+##X)&!WwTBeQ-GyZRi)U?)SHn@t2&-HBM0UhO5dXgSd!UsZ z?A#$2##%fA&bYQ+(Zrl#9BoZ5n_n;C{&QfL1nGPqx0hH;I88pIzR7pu3-uc1m@sd2 zfuynuR5fJdNq-2)92tDw)8}`;I_@Vlbv~Ewn|DsI0#JFkvtsqI6kZS0QJV3`t>&ti85rIuyC~7l*NWVu2meZq6GENw`O6 zrs(S6_R@vbi{~G;W<{c1k#c264A-bZ<|dPD?Re}h@jnau#Qqv(8;9*?NGC(C#}*5_OuS*L8-k&xofSxI;fwS<6!F%|9tDNKcsVG@;wgo_^s z8+W0(ep+mH*xU>)?;5g>1CN#BC0%GG+*WBMKb)$!ISv`7h_U7&dP5eK)ZX^Rj&XMO zC6fPuC*qDf^lRb;+G2Isc6I){6h9!V^tcr-r=ndKuFp(*yBNkdc8rylukx2FAMMkJ z3kAQ7ka!$Ra{TU>DU_B_N*D*qrTmRPY3PcagW?vHvJBLVe(V5dh|otIy`3~DCU5A; zw*WI$hi*KyyIU~i&g;^>rJdIqh~L=q-1H)-mS@^nfBBo3Y^SiL?Pyb@uH6V&fynfl zaLeN*0S4G}=onK+eFx(8O>EM49{~xvC_?4P^MH-`V<@3Vx>4xf?B3q62iRIg)=>H^Z0_pu zTSuvsSK&kH)^^u=%!=4)s}!8=Ck`_{5Vy_hH`R(qBg1Id0wT%Z5{uhJ%8@?h-Oy@F zBEN!XvS7}35}^Iu_{-B_(b?knoFM6w8fGWs&0k*$T7!7LO`flewPTqpc-ne49rFv4 zhC12L(*o_G#Du5F7##zrS**QtwBEHlJ9&_CJ%IXOAC-FYt*3A9gAL_L;UPPnxBOCk z)F!z52w_zmsr}Yh2?Kbp>Wj#6JW785|{q6$!3jQ-lDaDNcctMfm;}-Unt(0boK4re)NpX=UIo5j&1xA*u*2ejq;klST_O4Z@6G_O4fr`daj6t>|Z`lor5_SbgR z%4+nP;$PoiNRPnFb(m&*w7}x*H8Ri|raS1$ekRX0U&LjxfN=@9AVWyI?svX#IzSK} zhF)^^BwU}m>8DH-xe(uO_w4KpGiO6uE|a!?Zg>g z=1QjKMRm{nrH1o$B}{VxGqmT-IhMV9Mn+`l2R6$v4Tf@B1K-=(Ql2B=GU_u@&0xIg z=;ao)gKh(_jmjxQoCi;;edp-yjT;nvAPW!)-*=?K^bVlv7=?x1L-5cMImlrK8P&IJX)7<9=x|df^`;RF zR}=BNS$2_DoQ(AIy}HR4^=)~WE@BUw%aA?#xcuB`NsIMaCdx+O`d8J;8LRlpN~ub( z3-P-fJvqtX3pUhl!w1p#O_;{ZlCde-R~*icYt2ECB5jdn?v>pgknZtgiy%YP#RHw- zx~Br(=+7{OY`zKXaXZE%-jm8k_=Y2Ou^_eKv7;W@A@(g<75-Sq$rF=nxZobNPVOL; zzUhDoX{o8d@G_6iQP@dg^_(FAy=zbFWR_y-2El)L36^l~_eyC>R#&fdXeq*1i`goU zV^hl#4|l17T566q>IEppM7KXQsCNk8Zg=TI=W_MdyC!>FpV|lBe8ET5fIWUXT@`Im zLN6+PQ5(u$_bBz>4d3@Kd>F0Rs>*rYg~j1I1$vW8GJ{1JsnY?w9ap2l1p5$)oE?CQ zS}<2|7>Pi)DEwL6m;QH*fHg_-kaPT`+$~j4tpdF6;5^D%-C4wPESe7tRo$YW##42D z21Z|U)yyIxNpk)xt2Dm|11$;9^$8=vSMy%)9-X@0tZ5J%uR zy`YJ>`F?)ab-MiM$V7|6=+Bl93aMpjG+P%^d=W6BZtw**esg4yGi*gKko*B)Hpqd5 zPZ5lsu$~7+L?)gbg5wR30>_>kO|?A)(Oo?>tQBy(Yf!GbWbnyz!L^Qw}Sp2$9v^VqibhSn z%y}-o@HvH{orc*3jmzy6m~a|pG$Bq&C^b$<$S@bN*_bt3g8%ghi9{Wle`GT-v4JSW zawoizFt?w>Y4rIRv2IGXy7km=Ae`i;Lw1NTIBGZ7=J4&$whn%Zl=GOb1&q*w`xZr7 zam*W+LwzJ}V{QPPM5_a5*ZVO2&&dfs%m99dEtq*($KI6-!&H?DK{X+ znE)9n@vyNDB6WjXeH?k566A9L74@`?XFlCYDbF!`G!NfixP5-{JH87z_1kHp`jEql z-Uq+>`qy9%Z;jlH3x|u--S){C-;rKGTcF}6LDXVyL)|XL*GR(s{>jR=WvokUtXuRK zx)0Y8{A#${^S#=7ELae~gJ4k=t|RoW z?1B8bew=_lF0NuZJWl;?!kAkt09%2kT3~ z*6%o$mf$;d;z1upl9A#eP2Nst#AY`l;FbQ}3Xh6?S41Azh_Qc*_v?A9bn7n5o#S|( z%)izbd3!oDd^$Iomob`d!tk$`jwJ+N#Yt;sPlYeTvjC={&d?nU=Q$dq@ZCEYkpw|W zwV2n$*`?#*tF|^qtbkiX<%>uE2B1ftbn6>W!SQc$rBZJ;Y$QFzu_Ykk%o^B_Tcrr^ zE`S+)yLx??IeoVjzh)gpVNg%4`k0POd=Aq9T*uFd>gR38;RiGNQ!;wN?46GG8AsE% z!@T@^EHSP7{#2S)W`FKp9jL)Trg~UM6g%DlA?vhMKedPM)*R5GJ!AFqhP}uCJU%|E*5oDR& zo$*AHM^FOn>wF~P>%WAyIlfo`caWnySROlqLK@>b?)9V-e!ba%LK#+RmC{1~)?qu| zag5$(&?lZ&P{rv}EqN~mEE(LsI8vm1jT6OfGnkS7V1Yz{`Ibp8O34#;HYp={3wv;S zRIO*KfK{%Yibkpk((}@igeowo(JJ)QywamP^npA&E~UJ&*=gBoayE^0SFb&OVo-Gp zFLX+++kMg9x*U^o;IJta7W*&pIi8Cv@0UwaF#kee>vG(=vgCOfVG#SZ_(Ej?;*ATWq_z49{VJ%F2w^5)?aI9)%uaFJvh z`%~%68G~dVsI-ff6>2W-^13t}SGe>!aQ0ehlu|;U8$cep=gEYUH(ke3z)$2%cbPXa zO&4SyRjhTI*WHC)6y+Lw{3)>WJR~~Lb~g<)6$7?i`@=3SZmN7>TwAE$n5Sx7+>M{^ zg@Aju_tl=?t=&JwRG+)hdhE@y$WG(*g4@mDV(OhNNes3xmcDp)ru>j7qin|{4+aXI zZ?5T@3CoH)h~<`>reQZ$wP?)gJ?NG86^{nqjD@u@i@TCq%hDK4G<|_FKXjd{S54?} zAym_<(r9BU{m{=9tP770x;b(Z+WkeKI`7$YLafVFZv}=m=6sB#zXf-lYtJlAZgXTg zx6vD)e;;5KN(wajltov`ad803sIX`3hqu1V!PZ{zwD%C};JhX`)wNp7nG5}e#y@Hl z22NlNSvKGDPERQ$p!l)8>!QyQ(J*TL=g^jHPrB+ z3w-Cz#lkuNi$K^ecK2?Vlo6A{hcY@7ai?&Nas7$r#k-d6l)ZXiab=wJUgv&gGqN|Rh5x!M&@zRL3V{WIz zLu6}0{JJ0A<8~_-mm{Bhm91&DpXLZy-YCGUQDVCX+v0ap0ME+WIPiZyZBIF01h`YF}oL0w}D4naBt$(lWw4tpa=Ointg8;KkN zTVL?4c5iQq>9Iw%W$1983BUm;=lip`(+KHSC#`|AQMsF&7r~@$2yS z(frlsW9H^fIm!J2gXgiS-z*^`@n%`?DAC5PmPhztvlV3qvx%a+E+pi8=Z}<=pay9S zv`tWqPe-LyZZiej$L)%7a=q(q3g5eLyS%5@#}N(fer(w-2!pk`Nurxu=RLqLy!|Q2 zUF5fWgjv^Ii5OMqFij2W7sT&m4wXA9+7~|6Yax?(2U0qcu?RK!o_ei=(|vLq6Nj~| z1sBJC=H7ne11Xj>oH(2LJ$L=vg?qgXJ-c9+lNpD;cI!W%S~&VR8R;vc8!J_CrWDE^+j1F-@7PwtfF&x+3-QQfHFXyfhWvC zr-{8x#?WY4ANU5Nu475x#&~n@D~LN+kJ^`S)@8Ieb_@)PQ0ICRP2uEQ_rRC!+Bxu2 z1el_@Fo}CLe*wl?pvRUErAym79DCB_JNd{+_$DZ3;Rzmy>T~0bm=tq%u^JVADAOU_ zvJsw3vTUYdQKPcFwO!D3mal2F>cbUNRH6CD+z0j<3%K+}_(QP@O>)vsqDj+M`Y!KE z4Z~6I!tl87F_U0c%VV?%8U!XlanOsj)5b3`J|p)4c%%0fIIrZmS{| zxG)7#5iUl)646B|>Ja~SagI|AMpNy(Z0(&@H*vMXKwNR&GEjzwTnH_7BXoQ#hr@OG zI%k4!k9!SL2Yuz3qCCG8;lo1ENusKJSS+M!6di717)DTu>}CDkYL1+{-7-0HdR}cr z6|;@Vt2*R~kXss^0!oRfW-ftT8g;lW~dS>bD zLCB2nFdcn8lK#h2n^zmftVHJY*OQPpM?JYfK%l@V7m8OrA(>~(V)!{!r9D61GvKxP zuy&MK73TEzc+G#vi^H~DeBr7_X5nPO{5XxZqkUD1C*0Rb%0kb@v;6$Y{$>n#1j{n2#i@hw-d+!Cfr>QC+n#+{2l@1a zAMv}UZNJj0lV0sJAq_sGba&QJZ>`az&PV3)98FXSv&Sw>m5r!(v|Q&$(yF)Rv09-8 z^PiaP5r6%X^Fi!4uNzuDl}^o%zN<5o#5!$yLlKL!f4w$=_J7`q zx*|O`-HR(Qo*is}KH2GG_PCeG|3%*=;ORKU4gUWTA3RL{e;!!BS3~|kX+b}RgwMfr z&R@clD)4`#iFlA#FBIl|C{pv!z{yyw81sEonBy=NpkmzR+-P1(2(4_WqR`{}nY^3g zg;$;TdfH7GDc9QmV3twNj7wC)((z#P&#KWf;C@CoAKgnV9?8!UEZ$7KtRfVx-utr7 zrGR(Poy7VFxXCT*Uic=;t-hSgNuQLW6&Q}PTI>$z3%$Fw4ABCeW8r4^Ur0&iz37x$ zt6=~17%NNyPl2Bn!CdAn`1gC67P(iaM*ifPieg%+^b$FSNUz9;f2TCpU9t_be>10K z$qjk=G1|tYFLCrBcE&bF;BVT}{N2bqjWI4Xg^hf_IPtZ73nL}j& z03R8XPjIB)04b;K4ulyc^Ch|@?dv-EIK^!qX?PjVc#YRWxe+@r8Qwdi&h&Hyb*69U zQeUiXvNE!~=$#1mp!d+X84=hcGp;<|uQ4|mkhh8gk|<*(xGWRa z&5rwCA=}_Iua>uXMhP| z9BI5h`jAD9!}dY^L_C@E&s_IHj?nZNh7WVI73)WK6ltGeVi=zudh}MWN4ae7yl2E< zvoSXPNu6t=WxZ!n^pF*=)b9bFnbYw`PA>P| zJGQ#t#JZsehJNZ9*Uizg3z9~F$}5Fd%Ww1I2L;=!2c+UQf5YX7Jr_1stu%6^aTNf^dghJ&)=@Sdi4aSHhhB5#x4mjV)9vn^)oFP02(7U&c3CG9<-l7UrSmv@ru^sA;k0q zb@gPI#{FL9m>O0~7&QtE5L)QwimwoTc(E0cj>nyV+v9a(9dJ6*@v$*8i<>zAAmm{W zoi+K_QG!%~o|m-Fm!I%NTXJ(fhw^{gBv^hsPEZe(-7nC0HI)y2ZEVSiX(I|@vFmlk z8yH|`^&Eo3{mF1n7Av_Hb=SkcNmzZ?5f{!rgo}$_%VkUF43l3(xdAcngMn4o0f*wV zEYm@VdF0pI;F0giQODn=e?D+p3;Cl=R{2{tVteT@q7ij)@vW`mIFW`Pnf9)OL1jPB zkq6Th-SI^jNw$oO?#qDFz z{3yIayh_KMPM`F=<`v$=b3e%Wz6_p7b#UJ|yEZST}Mz>)%H^T>* zy4J00!aLNHFU!soDbMZjpp25S^%4hYo%3dwi;B~x)XDh95P7*OaE{u0zUQRR0?nyVcSM&t%Sns3Z;cy_Y5N^0$>XW?8`lQP)fGCDCtXqCW z)W$^$wu|l#_dOy4X%h$EzWyfGYqziY;;BcUdA_gwSf=jz#hcoCD)wJt@o+|Ee%?>3 zk`6dC4~f}_O<$?rrBwC+CCzg+L~w}tZGN=> zsBpt%Nw;anrQnf?*oI@w$lw^^XbS|?2u5IaG8)*wF%3G7Ej5ay{!vpcjF@*>J}?H{ znZ+@hO@^B76p6I0rvUQ{5yve<>e+nD0^!nu07|w>3&UTAEu_2i?1V}R%X9|=b`L<0 z%_s|#MG3phdMWtXPUV8$w)o3_r|1SHN1OBGO$- zhLIBfa+IO3eyV1rsE3{wZtO2W^Fz37m!f^qru-BO6c1o?jo{RpR)c!v1;5|avXsdk ze4e~SJvCQ_^)q5ig!EQfD+B?4YJ^|=@uCW@aIAnzSmeXRBL zCYDt2N!$Dt4!Xoy2EZ0wWX=3B;`$-0rC5V!v1Rg-uow2b$WjKWi#jV6%LsmIwj87Q zV&fC{+#g0C#pU`txk1_y-+0zr-R#O{3iDB60tu?$nI0Zkh~l0>u4K)pC=%#4X%w7q@UuIqmCeTW~8X~XFHKK-yF@t z#>bxt_=_P`tR-s@w&)Vcv#F_SsFh)dqt6tg4 zZFbfvO*a$Ov#&pkXtbQ4d=|FLk5j8`WFu}(HFcBMYsg4uVM5wU5Ol`giL;=e8v9HN zu_-DN6ysrDf!oE68*~%i$OYC*{flMI1J@+=reva@c)`5PU(Kc&k86H^ktC36pA06w zWozUdA2X$$sT0b&s5TO)Yrwc2WyP70GZ`vpeVR93wPR*7C9{N!jvD$pzg_)s$<^@2 zf}Y|(l+1J%tQvW&aajhz!eQ>Hyh&8;-Jn-it3_>i5fOx$bE}*jU+Ot4jQcA?m>q74D64wU zn$Mz(Si3F^{zA+9q_ycgAv#7rHmZZbJQXk%sk4=&SeWpb`gXj!%#rD;5`}E^0Ee%C zT;;mIoHW|X_e;s5R`%|2-iq&hoZWC{$8nQwrlYu>p@jhiUY<3?yc+j%<2o`<#xzH+ z;(u$SwMdswDDvuyb_@sV^sj`JTIzNy)&8}FpH$7dR&2SEv1gDa4;DT8-$RAw6K)~T zDaKONe8P;w!#G30krY|~r8}$kz_sxZ4+$zQ{=L0~n%1Q6Zw3SJh*;?V%NayGbGW}! z9k?`doIdc)*reqAuUv`xOwDs{|4EfveO{-D6tP*OzByMh-9z(Q@dX9hf+?*Glo825 zFyVHXS{AIaq)OX^^M8!r_}G~ZGU$Gm_R08ZfcT)KR1N9(5bB(VB>j3cjcKYUsZh3NbZ~ z`({}$VeYfjNzQ2;9|1Eh)rngS#=&af?E742gz8TGI^rkaPEI!&MG}$fRC;91-`f}c z-i&VbGB5X#ZJsbKHSA|9k(-JiHd~BC6k>Ql2+S&3AQIF4gM_x-55Sz%dpUrJ7cLA8#TtUX6LDyTorMqQ8Q(_%v?wGMs@D&+3I(3(*Ka< zX&hCT{yC^_G;%4)*J;&B^m-{V>h|W*o}_*NIKaA3OeyHZ_~Sw)p>LNn08|OMWIdoc zWs*(;_gJ%yzU|9EI?KJ(rz$jge|ciU;*oKw_1AqmYOQ*{!n5CVQ8~7kSYdqsdCHGst-Gjz@p*cBiLhV5W8AoIY(v zxT`~@BlPkc1=ip(I~Q|O!%0D;$k$7768ABSX3|9#tCd7+W>*YF ze%?*uGgHsUac-1zlMh@BKWo-UfAjjIZFoaW8qvYjIOZ3q0v5(i6_69re7&E^hc)0n zcZtCpC?AiKf5h^ON5g>4Cn(Rfsh0D&%8C(h|CD0plh`oPvRY7KjUpb@9=A3GEo@B|o$Sg;u2O5|{n1Ka>#(b{tFu$tN_kmI@ z_(s_0-PoSw%lcc67M1>T&Wm|Afq65C9`HXSMxBvgJ0oN0FI2i}V5U~B)?0dw#J+A_ zR({fTyRTIS*}C7}a@p=YzaRLzGY`tSupBTLWlDW6I9S<})n;z;gYMb0(4XzsVHBl_ z9i+GS^#}wgRNs45L+FXjs!Meb`1?yLN3J3w;W z+ThspN<}8&&4b>EO_#ouF{#MuHe=tDW?k2n%C`f9zxzgipAdP)@}5GaBNc6ezx-g; ztg=TeP|mCpeSiD_6pSXBS6}+1PTu?dZV^&B*Md~1Y_wpW<)Mn@5MeRfsBxLNsoAVQ^&PgQ@)!+x~nN0@tT0|S)_lf_0?tI^4X$>=T0-o$rZuf+0j@QN9mp; zJGv3tmA|?PyzWauNH@=9-I+<*MI>?MRCYP=w4xFOP*DwHL1%9XwS=T(mYx7a+j$7W zCQS1H*{{@i6du+P9~^%44WpJ_4wDTOrO2mQIR1LVFC=?U2tFE~@ZeQdLNXjLRz!a* z?a#%;Ftl2%_4qLT`18_^oHq6b(oL7J3Ws~nB?N&xxCLh)Wr(~e;5A{x_J8H~G#PJq$ZjV$E7*8fUwn=sOK!am`^ z6GM+%JT_W=!R;Bom41=JMj`~<&#E6V!Lq@Kl3H_T{QhWy!<$z&c>a@B54i1%?Eib*f=ERhM8QwVUD>}Bw4$1TJ4`a!!#n; zf6LDGWX@ObIT+upDKn%(?sRu9D8P=5~9tF=$8q~k$%Jt>jFp6 z!VJCur5E%-pB%N{_d5mUTpw}?2p)O;rmLQkC^%HoyT#2>^1Q`^iQ5OtqO!L{i!S`t zE5RfAsSMYo@38B_{HTKeds0%aTVj9HbVWy223A8)POp!bwb92r3~u}4y-3V+5>f9- z5t6;tM2dX-sX~8sx1GEEGnl4<9kx~C}%8}*! zBMtRRgXmz&9dIwPiF|ZB$FUJx+~ayWH#|PC;J+QB2+w{ zI`r-*+?p<;ncq46I=VGk%hg-u!-zXvmt_SMSryM3LiwXt9D{^($6# z_fQn|T{!d@U zgbb=92Hbi-16#F+7vu=Z#hp934NVep-A&^asnK<-1F|Md$W(cpLo3Y7s}bcCRjBCY z!<&T4>ZAROD%KSOPke9HVO}q~f6Dg!>-bIg1H*57r?KoFUe)dKzUXb7QvA+pLv1s_ z>cgjP`5%W63OyAJSLt2iyAK-3pqMHqK7BDfY`kKCR}X9Qt>2l*&59_x=9Mrw#|AtT zVAu`;}qLCO);%3n>QheZE23Q-P!R zU3^A?e{zV$?Ig4P_Y8h9h|yN=arP*v8a_V+L5@&AWttB1mYghLyDb97{ zr}}c-u?TGPkbME2h_vlI>hjfxKfBv*!_NFmQ%Vx6wu(0?)wlS&y++0jo}Ih@4;bI1 z{x564UTKQkvdSI$hM?Sn+wT8NnZo~Lf%*R_=V(3rw{+n?ns*-$=aRsCdbEE^ykS)9 zv8fgo5wX*r&d9~33jBvqL~U)^p}*XhcZ4WUpq`f(_$Tb5IKSk^OFpnR<5!b!<-foz?6%3+ z5mk%0)td6l>l7!OeN@mD$W=sp8$?Y06VNK-MKEFQO>LnNvY5X_;TJ`$jI~6 zD{5El9Zll*urG{^Eh-5%rL`YZ#21GIF2aT5(Emf4Qw4r5eIbZ``7HP)A3eTREANk@ zXyCn6@NL19(<=)5IR;5>_xjQL+IwuAP~h8!DbdD-s=60O{%oaMAR0949T7=uQ|6C& z`t0$Ch99Qx+QhFh7v&5EF?vqt^)KNUnPd zr0189l521J?ucsm-8a3spj;>4LC-0%e^__P9qnRv7-Rm2_ZHX24GfE*pXMHiB?~TR ze^y@a*uk!j3EGRQ7JxlPcl4jDscy~^YI_Ekr6J(FYs8Gx`fnNW3s{h4b*UCZF=O!Z zvE)Hkd<<&xa|{aVIl}+E+;Xh=aO&54+QD`-nGy_l zdav1I%KdNbM6{W`O{4<7MY6|>n|*iCzrkaWYq}+L-T4Q;3V_AD-F7@2P%S!3NQd0! z2*z{>JZ;@$JxdTD=u>swO=Ng(xrcxK`nM*DY?<2EdUj10hO~u$cu|2@rOm;h8IN&F z7$uItBwUt}ktAWQDsQ2CjBD=|+sLx{Cz|wp@%1LT&lXqQFJtiF@AX;;-tvv|+h?R| zJ<_EClfHaQVmukv`@-C~#Lm+GDSP=Gew_Yi)Ji2Fc{e%-yiNPBGAcBx4c`jdSG=?; zTB1PtT-XFolu|gOl+i+LRE7LI9N%;EM zDY(^T+8_!gN_-xD_MZIDsA~(AQp2>?XE1Ugt_-gY$dH<@|K;O{N`YDrkr&fU0)mhS0_1X>MK>12eMor=*vL zoF9`!nTH6T?|VOP&p+H}X+O>Zo)FKqK*zpu?nbeB=W5!nO&7AxZPh|jr?IN#Js+QgQWsqUx0gYhEP&8%OaVwkNe0OB}2Z zJZf2Tx7#-34J=YVBf7%55{g;bYU%F?)WKCr?iwt==HG0(S3U3dKz&ko|rbpdZBBr8{slw+y-j~X%yf<<}@GJiX^`rA(AwKr8_634h zIlxzAPL~1Fg&j>;=b>fsnSThCJsO7*2k^JaV0lFS%+v&W-j{Rn_USXM;=}43C{OqG zIgcgue5~rwCE#d2!1NtL>Wrbs)y_AY(=lLn*seKHty$=$bq-g5fGUaE0{484Wf^DU zV@MA(xCh|97w^}IDkIZ08R;ZUM#vU?H{Zu9T5I+iHti0ARw$lR#9HY?j)g50%a*pT zQ$D!o{P1qOS@VU6PR?mwQauF`FW<@0k?aTO&Mf#kpEc4iSZ+)@tFNMUBlCg)2^$_6 z%-@}szctrXdS(?Gp}CU-T|0?4tf#Blm<;JJblwEz-@YyQp~)!(bW_2Ka9~cK{ZL#_ zzeDRpkMAq+0&})&{mX|LcE#6uxt=9roXWy#6(v8O915Ho5Gpo*a1t*fIR=H^1ZnX7$=*iY{*w`1=&jf6{<7nGhoiT@ ze|0klm`qRjjA=8SWwD5EYT>Y$Cp+;~Rpo{a82 z^)J!~!WaT5Y2>>t3;G5`o~9kz&gOq~dG!+{gZs(=)#p;ac*~_D9h`yixqNx_%uogaLR%Fb!( zI*r|Y;5Q@tmmStV@|WdF{pW-Erc93Nq7ln8nuP+QHFsD>7i%OLN^g!hJ8l5SG@>t{g9sXiJ1A1j)tG+g&^Hb=;Lx z_AOIbcDb&bZ@DjEx3$|6p3`{>Y4g|z(WRH?e16Y^oK%#*IS-0;xwY&YkLTuhX^c!} z0vA(a?c?{p7L>`kwDYVn;)MKk83V5%_KaS2cn2MmF{S4K>@J+_sz5ML z2Dc*tZ2HGOUiW!EpWnNXu4cFdAI;I59sui_r4?=mUWff+E&@4w+k1olxx^(x}u|7 z8gfOpPOvC8*D&l8<*e)xK4nw4CO!ztbzd#3(#R??jG+;!7^3+{NlZvf`=Ty=^%!_} zv+Op^)o9imMLfxzlaP@6VOo__we`8PlE5n#(8u}D`Gm`%h8&k!B6h@$=q$$Z$Ws^7C^Mq0zXLG`? zUXnNZ|9P3YeY`Zk@Z%&n?MT%56A_&=szmYU>Gj^Fo6yqS+*5NAdZ;bw3$tMR%{UHq zp=m`y*|t+Pz5S0Fa|5-Aa;bZP4m77CZ(SVxD`!$QM+{J$BV&&Dzc6-IL2_ zxHqoB-Q6v?ySo$IAvgpN?(Xgm!5VjI+}$-eoaX!fea`;xP8C&Ltb(Fny4RX>%x8?* z>t?*x?#^fTeqV)g=Y&MS4aKpQXFjjcYD&b99!p~%d1;ld%Uqqb?&YFccKF<3$M`)& zxGcs-Lk5OSXn)EnGt>9aG;?MpCT$BvzBk1>I8I`V#J@0NQvxNAI;# zrR+;LVp38&p|H=+Yl-kZ;qE7NG3Oc`4?5e$YlJ-?pRitT!^uBBl;AJ}=1$%FN~4ZX zVW=eSM<`v#`o17dy4j(hJ-+khkNjrPYOKu%(P|{w50F@vyRg2UcdXX#tePGUJ}}UK z2rd}(h%$7=7fqJtPmuJbYa=8e=}I46=D)0QQ#ry= zNj6v5`-q*ZoseOZ<8Qr`IWyCxlBkkE_`9(wRd77RLgt(eQe`gcc z$Ya*BmR6IN08Eu;u_(?b5fPDW@o0PxIb;+Re~3?z2OV7C!#%FS z$G(u0&!&kubUc>F^XW`gRPS46i%#L`N(<&1g2!A9aAT{GJ^S3b<*J)AGxN9e;g}J_ zH?Iy7k;CqeCa#_`31u4hayYp+nV>K%=EuGM<=IBrH(agpP=0R}xf{#V)|eI4oyf3P zkl{)zrRp3J+rURF)V(jKt7P8M%>z&ysfhuXTUMLuoYOYQ9pr&O51f{77g`>g#V_~x zqJTnI{Ni1qq6Wvf+eWx|v-o#VA1R2KTc$-fWNfkga(twW@iOdM5!>jBy2w>95~dE1 zi>A)^e3JF#Fn?>k`|P)y{+4A_O=f{pJpOI#EA)>_u=5KFh{(vq&gXd0=v2@VgR2ft zzl0;jDMtKpGEm+b6M2&q`Y=d%l8oiITK9NN!W!V&Vk|Fr$bm0vG*fM8{DA4431i%@ zWmE{ktjIWx_FFw}&^}UDWMhSA^r-5n8rDGH22Zbm3l;+&$TE7t0g0Yb_I0kMu++Cd z6m$o7s&yCEdDzKxn=NX*5hNx<1O`SI%JGNAfy4cr-*y?XMr zqijQ+_IKcr-J{v6;4C2KZ*3w&T~3BXt5Qe<3M(%Lqq1&`uBwZ`xjbJfSFDBg`=mug z3P|dn>k!AWFr<7(N7KUp^u^b4dFm-GC~AL!GC1U~ofjF`Fw;>u-Gh(E&U*z?CnjQ!@qM8i@ zyHi)h3t58@r$+De@rX(I)kxq%0z-&`l__F}t>QZ*W^Lm4D-iCGiiWHPN01}?p1nxL zT%GC{S-U);XN+ln8!@WS9%IYyQKE%j85fEV+1~~~Eufq^%VhEZrotWu;1(nft4$S5{+92)hRLmC zL;Ic%ZV6)8>0ISvLChvxLghQ0Rv)Gnb+TSf$Ax1Ald)n$QexSXo{gUs4&*GO$K+$B zOL6a>A=jcjsrYLrk5F1gAd8#0D7skxu!@ZEwoC3sHxe<)oR8F06APRSKq+*LGtl3) zM*L0T#XhrGVFUurfkHJX#7JtXGd%^2TF-e#({B z#j|_ZzLP=zSOjf!%hC3C%>7MtNrY<^UlLUZ_uN6xt!<6CEDz4^#nfxt3l==REHvG? z0MA29gJ_xY6g;@rPE-hYTHGeY>d3V_P=*6g2nh0feq5mo78L6vUxX>-ea-Y*ibXGzAn$o+_>=4{^m0!$Nkd)u-1$(%ZfDyYb9Bm@Li+&ZO z9HGP=pEa;fH_R7@ny8BoP@&^zRceYv<41 zGrT)n9k=P1$m)X|GuN8=w7DM+f0h%K-J^*11uEXN@ij#t*u~2$8-)}f&LoJ*2OeS{ z<_a!(*~*R0@*@hXpKZY2&04X?^`6)vb0#!UJ!5=fG!xf#=MhIClbL5?;28lz4Z5rW zI+k~Z{)P{2-?QZv|D2N6-}J+bM9dGjIjkDrw^!yRuv%KJ56;SnFbnKXKQnEfif~qL zMW62>oFsMHs;3$Uhyx9*703#WF*wbNw4eyp<2B~QSBH_Xv4nPoizAx2@)goTEmW`D zo_Ptc!pFI;;`}myQ?x3LL(hwd5l%K@sZPnsS;R9Si{0M?lGxB`QfcnApgxnVYI@dP zDn3VMZK>}Q5OHKC#}J`{NnT91GrixA-Qmj~ zB$u!{ZXM7AqQ-ry1_CRVmpD8|7Y(KtBMEY2MWDf4%Tu|XmJcJbmPAIp1=!+C62`29R7lbO@5JAuLeqdPB5s6ty>jgsMH9GiLFknKHl6tKsF9}z$mfXiSze_HT zMDN*ZI-;o)U)l~gPr zD94979W_gmTsNPl)htIFdQJ<7V|DC#9d&4zdJdYmw`kUX&pZyED*4t*N-owqi=vcv z+iA5p{>-E;0RokzF<1HBIP@U|u<}E}d=fI|hPh$^oZiGw{84&{Z&LGDi72Xz-n-Hs zP}*n3E2`g|C?Cj)SBPSoyJejAz;bldS{V?~wo1!`-?K9BlwG~JXj=z2pz&>DwK|1= z)6Txh85JF2`A^wZy4>_~B2?b}YN1K;39l``?q4{v+Br=HiK{!!66t#8QtQsJ6ZSIP z#=X{=PrZDtvf=~>4|%d2;)WRHl*M$YoF<(PiOG(H*vo-PBnSwiFspP!b=q8r*j=f0 zVSI29JF`(A2V-xB+*scDjCb~i9Vny+4K1Slu3Zit>KIB6z1pqNv=RfsVCz%hk6D`t5fsUo8%>)l*%%jYfVW6RhAVF*}%W z7fiiv&8eFY-~A1skGG0Oqv_S{n}bzp)zQM>=&3`fSPD)IYgwozgdCe07?G!(v%{Xa zyIA?%OFeKxt;I@lZy~-hez$vnpj1`^O2I=pb)I;rswK?{0 z(JW|7{yCCkl*2u4dL{?mv6z>^)zpZEPo-TLQc6x(b&3sI5pq}AHnlV;=!bD3n=cIB z^tOPYw+e-dxP4&R<8Dhu72$oye*3T9R@oOcJoezNjq475-<;@`tGwg!4gL%HYXDyOpw#-F zihGc7CB6l9su!|%eXNXYU7v zB+%R?Z4S+=wUbn!i8xgtB647BKW3o5f|art$h!L++0S0kMQGdTC=<{o!2IJYtM?y~ z@B;(IpT$?d5pCDN=foR;%KLS3eK2S^vTc{BX@XkK8o#kZoV&7Q|1h?I?I$m6DnCUQv=vX0?c} zUQ^?Iv~si128NvVpSNur@cto1+73RPpK93>mcS|)$ftHM`cuVRyLge?{oqPsgOX`_!hEWh0sXk?K!%7NsQ zrO>dZ`EP9?*Q0`>?Wgmu0UTXhpSq&W4PmvzJT527*0SsS$ecm;403$8V(R(z;?MpQ zyUIN{us(fvzD(XE4@U)z1>BsxXo!GHVHBOrC~#041Dq0ms?FK&5NA6RBhLW_lL&T; zPhBHQ7xjMu5=Ly_u(;3Rgw;6nR;4|}NyXWSW|U|U5|&>+?6m|jeJ9}^M7&DM3LFon z!fu~!RBc(fNEsH-guElBs1E^uJnin`_$AImC<8~J%p1ER*LNitgXk3wRIkRlk@xnd z2%`nfhiC9XYJlP^O`-we=H!X(sRcxcvGh%;Od^QOPyY4O*DP$i7GxbdV#Nve6&=B9 z5B_LhC4VTod)Bg>(}%d`iU=B+aYE71t6H6Otk(w+1zU6eM-$@o~I%2<-b5j3W za~Iv63GYJ$`5H+alC%kP&n@!#2aH%fCrz~8!xG}3#`DV;0<9Lnb=<2Pz`GMkPfUff z2u0WPY9g2J6pDn%;O}(AMDHE@4MReO{q>&qGX#T0{o^N3eJ3SrwkWyvLlv)oIJP{v zt-l63)i(BgXADB>G-JrD)K~$v8Jhz2Y}>amI(VDxIby|=**49y!ZcCRcj`=JtTKN- z;4O)S`wrEicnaXb9%cjv2qwt(w+YxBzl)@#a4{x-Wx1g9ph={|qFlXM2war_^4EUJ z2|Un?T%QNb#X0LGm@s~`ho=VZ2riCS(F0>VrB{ZWMxf z7{9CTbC~g^G6M@+*XyyutKq4z(|(y_-17BiUJ~Tp)ec!9Ir>Jy7ZG<1HTe^BEf3$krSZFuXE6YBhG+Ui_Q08#2a*{ zl+}7cjTLm_S1X-Sli!|JtdK4T_P7RMPF4%~E!P%Y;3{kt@dH6iAJW#*2}%{BsK;6H zU=eY9?+VG&oZm=>_g7ue&Jb-qH{_CX?z{^h``NZyf!S3qM|XQ{9YF@Ts%yeM?=pA< zEZT7G-k6C41Sc#);kctQ{F?SWZiih-YDhVsyq#!B-_@tb=k;jwxweew_PZxN2J3c5 zyXlI=1q&)u_k;Q(Sd4e%6UL7cB)TzQaldt#Pv(3hnh1V)!6VwF z-#T)4-mkc1{r-ZA$F95E>ZS=ey}zw~zMqtfytM21+f6P}@AauK()QOmJK90O9K`@m zqR{g(Xb&O!v%9Kob6K4Q-jIsAubPpy?#ADfI@jpj1kQ{wQ0^^>o9MDqCx0Oya|Cb( z_Ctpa_$>ChW!fUThjor9CE=7Xa~cGJPuxdOGbL1cuVGO(V~mIE9e4)fO#r7B zT9=h%1k^46xsy07?&=D48bJbVehhaqrx;OU+8CFrra1lndiyAob>7a<@9e}Pj)dQUsmBu;Bt8Yseh%-HE*vfCuB z9r)mC(NxvFgAh|0QCOG8H=EM(5U8s54Gu z0o74s6l^0?AV(!C8rZ|*4w8ehq8dl+qy8gg=-rW_&bnzK#}ons|5nV;12lS#CT0P7LJSXz#OUp&>T6#lb0zT$jc*&^aPJRwxCxMsTZ;-rR3_c zG+yCGc9eLFy_|VF-iYF>fd&|Dl?!F}8BZh|X_2Rtc&Nd~i@v?$^VwHSBE(z{@WeT07mmjQ6g`Ue_a5gp5~_(mGDmwgE%tiGM+ zWUWIhm{;R*LTGJ;g3z*(qp{~33nc~L+Bbf8d8EZpf z{=?}(gI|xTWx|4KnPhGSt?M3}guN`Wfsjx})~OQokD@?F>3aCsdbtM^2*yHI_(LJ8 zQKWrULT8}5!hvbXV6{mhiR4X(4mwCLmeB@ZPo-c8mN-zS@IX&D)7)yx&1v>!L<;rR z>O8uC8i7Qu*r&uvmHwDvnlV!dWXvn1?QzivFd6#-BdKN}>L0LVIE!kLwpTu2kJq=* z#~oCLQtt$74hjR#c#HZQNe)Ph0E}YE@)ubwx3Tj{Aq^|R2YUap!^vi&omMx?e76ij zJBfo*io2(`5w!%^&ll0nGro<92-atMS zXnt0jT*;YxF`z;D5Ufy7)Vxm&-~tw{4cGvEh5C&nR`>IfqxfzIQ2i)AnvjRsY()Et zYQ)X=(HN+n)XIn($xC_h80{h?LTONHfQZ09qDP}NT4ZFI(`CmeY|L40Pl+E+^^hFx zkUN2;FvbK8;^G#Br|3+PRYm<5rkfU0-$k<1u*)twQMURwUt*SN7%PXLezSi{7V{76 zEd#I*8ZlObaJ@=JOPE~K4h+j11e8UE+_>W}%Vq@c&N6z%I%Uy-F0e(h%W>|N;6LXc!M`=oc3+I+5*xe!vJexqKz-P#gw)S8&Nv~}1zCrUT}2I9IA zAp{es$UXY9mO_ydsS$l7_E2!Yo>LGTmrs2G%Rm&gIS@{Ac=; zY_yFNGSLczGG}Kp2aBsNT-UVlrm2x5E#~pj`5~ls2JS7?XL}!Z$PAcCm?CGRpt1yv zKYui0>%~?lZ9NGmMtLFfW6+I|T9RhXtOdVyB?VDn>{L8*W3-WkRup`MMTmtm%BWb@ zl-Tb6&={o;dWuAfAU%J)X5{M+j^ztv7X?NJv6_4h#162B1;iv@y6MH*c0FSGC9K|1 z@hx$8Z?GwmpySDsr@8uDW*R@B!v6E&`GK)5$65_Ta3?{u;eZsP;pQ*z1Fn0jj2`9? zMQ~PpkM_>^l3$WxNY33_N$#1pcEbxgoVy`sV?U2y8r`A4{rR4s?zSZ4SvZLz-)lOBv*n4cvM+5H{X7PfatG1uis$`fjFsnjR$f3aNqf!x1iU0m5kbTa+IraT#xapkOk#Ikr0c=>#>eN+?9H(v4o#@%OTzXHyN z;`a@i-}X^5!~Xr9Nkb)wwc-qSx+3K-SsxrzY8i%-%exPKCKwr&TMmA@T=j0H4uO-==r253F zltFKHxg4qO*Wx!G^KF2p4lc)@j+8wwVwgA|GbPhs1akX7is0z+7wwqcQWm^hY*;;f z`r`@&PNOVIxj(;LaEpS*gDi!ZnA@m-%!79-F zqFas&NKcI3TC?5d{Zy-MQ2)DTjk+Dj#rKZD8#q)GUiIgNIWzua&ssZXkFC;f=6xaB zH~x;u%?x3a3>^aPP+rmg`;r_2O}$Gpd~X&R4|pDfOuus!Ms%FvUp01FOpI>}&bXPl z4y-5e*m>U3y3G#fKF|9%3MWsSUwIyO^tG*8)Ek@DU-Gmcb&(T;n>er7EY|TlDjy;H z*AsK{^FQ+!@Q^Os3-700X0uLg1Jo-+fu9&bN4#n$n5<%M&m9h4QF>0e>)vr8ql>OX zOm=WB@Dr6!SqIB}EFEkgWY$tQwoEu1eFyg`=z< ztxU-}Bk=bqLN4YLx9qyaf9g>ikNNy*IV*_zhs2DQKj|b7$c)0#g?K!HcAZk1G$tJX zJunNFfgJ{moe;BfzZ{HLW0^geuFN#kE34fq4n~S%4^n%T_b%!-VA&*`<{OE1tz6+8 zj^4Iz(=Cm147*zIj{LyVn{i*nn2GOlkI(^j7ueM?NEMMNusQ@`^WXhdnj+xh@ zGTL6huN3prrHQ@%91yal!PFJ?7xrL~l~s1e z{Ljw)EWvsL%!jnGxQl_Kw?{^c>;)9I(-=M#{p%es3~X5B<1sVvujFQ@^mAK14sIk4 zH^Mxx0A#g2T1^*=C@5^T~Vc`iE`tg?g2gwVknrgH7Fh zrU1L+Gev|=YpK$K#+W9Gqo9cz<3VI&+f{PmjsqC$wRWX{Gbu6!>@cg2fU`U|_v+}6 z{W*N##xUC%^R%~>(C!8KrnA2(`Ht+J@%gDK@!B&_c7V$cmqVFntS&VOmQR$qS!PpX z(IURW2uchRS~JTk$3Z5}R4?Fc)W0Y?;k$GpVNxjHGoV!UlQl@;U{GzBar;o--&szhFIc* zlaCi;rY+Ye*I*|FlcUQ*sE@^5TsiyU6%1BA6^hBUnKw|+j@gdwl^IO}!QVB&PuXUJ zQUWJB4=tq|KJQq|kY$dRBw<8~1qTI^)x^(DjT{7~0z@X!yNEsaL_V$3@i-HXVecm5 zTNTIMxpB1vIXK77n*Ys8!~Yl3{O$%@ZA(*SQu9ks$7Qjcg`S$4dV~hI^Pm0$ntT3# z#MGC#<_4^(TjAwm&L7x>&W$j?c>mGW51QMv*MR*88UtO74LPW5;Jv)Z@P)=S_` z0KSFbfPC-;@RxJIHC6lYd+5cKHk}Z(_ zZ8>TSE9T7nz@B})%-Gq^<7(yfS`jirc4s)?Xb#T^vYkg;4LcLr5m({>iTNpuH0E1` zLy=Jl8eQL#wSMbnn^7XcHDjLpx?2Mkdu+;7adq5?F)=?_3spj5BV6>GfcquDfZDs8$*gT_%W%~jTX+o z=ka4fkVlo}=V+{>Vk4Up{=#VJ-&tYV$eRLUPDBS@1s{TnjR)-L1BrHxn*(UTvr97mpgFBu45Q`>l#ciBkg$KBVhL8i5Gk z2NzI%vDK0ZoN8vk(}lJpe)-`f{;z2iJhI*NvC!|D`;!=ZKghq9ER`Xsr8N3T8poIw zIAv%&hdKz85trmEXP&bgaWQ0!w*tEy^@mBk-P3o++o1R#aMRQl{BfWI=1#!}D?@Ew1so#_diB8WsMmSz#j8$0 zyF_r?drFOS(zTgPNLCj@oMMiwsi2TQNg~Tnk{e5e$0O?m;y!8jeWH?cmy6@$)@&VH zuJ~W$1N0yR-J0+RsMwM&G}~ZWhOd5Ml-ZEWzDQ zO14*gr--i_myjjJj(O3#dtH0 zjj9dv(N!P`+|k&a1h#~G>rf1Z*<1QcqRrec_90w*)Ig1wPGub}-RWG`y0%S3gH;P1 z=#Ox7EN8?BbOY1Uro}V$(We|>mDhSP&D}*2QC>x|oYATkRbeFJ0P`^-k%@BXiJ2eI zIj(1d?p@b!Hl*>JN>Ciz07vQwV~}^r1?&E$Ygbap@t6JR1L&`x5~Z(CRFHadPA`z7 z2nrfz$P6={^C=jEG`~C~=nok-(1XHghGMdKr{wZ8DrZu2yx7tVphbyS%!0uG$mpIi zw$EatA|lFMOvjVV$b$@-lz|~thM}AxX#a{_PApV9ZLzH1M6iHR!wx760^(!b*S~fmcYG4Oe4|y%mmTG&7g4prefWz;>-uA1x*S#B!{=u+G8=)k?NH>N2CU z3ZNcK2Ps7uc>QpV@U&#mB=|mXFL&C+EF|waYUO1rSaeimETu|BM;mzA;mUUtrYzzIs9|M zcmevpniF(TAG4y6wNSX!M?mK;D48)(_nht@VsL~?n*CpJQ*$7+j4nwBF5W=Vr^9VL zA{HQAtF+bC&%qx!co^H*9?Xko$b!H!Fxn&$^S{t060gyNfgRQ_)j$yvMt*{@DLgzI zm$CDkuYg;+|Dl^y=Pn3TG8Lj{mbW~-nAk@0WX;nf8?kPwtKtAqM_JYZEpTRB!)0`7 z2UR2)77g(@a&G>@zoHV z6d{(^buYu_3Ev7{pr9AJ{i!ErEiNM<5pjK+XiXQ8QAb|9J?25YH7^v8KUoBqS}(4C z*SkQd9KvGWgxlYH7td}k8o)zv2f;Ky#Epa^RCjK&pmlV??Un=68to}rp<;d#^1)yM z+nN0@><_@Cshp6+`y90qv*3ve8&Roc_Iypv-8TGy8f%(mPi6_+h^r{m{V1;oJdiO; ztYw0yr;2cHflF&NU$*g8iHA@#pR(mFi{V${4cv@T8*#k>ne?&y+X%9QB1kYt!q4lO(Eo|VNdpOWKJ`p zB8zd)5F4b4#gUT+0`nw7jCOZLvpE>`l5*irr5Dw>l7c0cS^Fp4ZrurHSS7y0^=Z$%jA(Pj5K0jEa`T-f68RPlIp#<=8Bx%_ zLfE`erH=eXp!KpPnAaK4$2^nhz9Q+cm%9CR1q~Cm05fnIk0jsHq7{p)rxcWAFd$Wv z{NtID6`$ppE}XCKvKa1g75Nq`jR=}I2c!7BCs+ZBK@|YDE~rfZxLbf?$L*;`;#N%D zmN?gHpVx41k2LDX{hmd072%@cb$)g6X^Bl%1Y{%>p-ilQ#I!Hx2F^odjbce28Y5!x zL=XKHVIkN2KMHT;yTbcf$Y~&InlK^rckZ-9aG9$=^2VVQuN%!)M3IVTg%Lc{OrA0~ zmC(+>0u}28W+%MTSN(?+U~RpGCnbfP_-=vyGlOV9XaU~_X=Z*n06 z1$zE899Wl#y}E%#5A0KxjvKcJOk1-icGlss!z(dAtK@#ixo;RwSVPIRmSbZ(=z_UI zct+X@Nvv0DgjxiKF^h$T6Y^`+mW(qKAlk(w6{Lh9H4JB0H{VgV+o&{ZrM2I7qoV|8 zYzJpA9u>Hmfe{2%1)em_)cQ-|GVNVjqMAB#&w$spYj8-OghbS9Gmb834OS>IYnw%g|iE;oFMhD;teFJ)m$x|MB=A%6r@MTCg z-K;qDn?y_~10Xto9%_Ibzwl2L@Q~X6l%QZcA~LnWVaD$*82T;bPQrGlgs8WLxLyr7 z+oka`0{ZSx(#oNmNxrRjoLKh@m*5m$v9`Yne2`_d-;n)w@tlDllQ2M6z8M zby2PShh)q{j8K`LRIjEgMcefUp~27cF4t+n&xiDsEv7p^kEA5dNpV?Z(;3lc-GjF` z;ZYEW;!=qXes4ZBfP7!^_UJtEVHf?WI@KfwW=;971`RaRZ-_#To%|Lg69^3? zM{l#OxLg?j48Qe!d&+3?`1lVL3_ITwnZm$Sq|4b#*yN;qhZ^($gPm_`yGq-A^J;I< z_~v4JOr;ITsg(PF{j68MS-{QfDO1$xz&m@0xWHl}{a&taq$rQ89{96anN#T$Ze8JN z?FYTuE-G+eJI|UV!nBY%U9xFR3$K(H+z~wo(mHEnY}7>V*@q(5avrhv1@RCl{rV|j zKy>WWD*RC&+q8L3YBvhXDGM&b1!ExXskEnpfp?HFZ0G|g9}-qNZH%8VlW3${Yj_J*{} z@j{ujYTq{>r}H%(f)Z>_PEPaLV&vSsyjx`Os1gc)@v`n!8UOD;ps1sHf?ul5cv9W{ zsaWNo6#=us-$sS%!QC8~zteIw&hTSJCFq%Whl*Dv^2gzo!y6mK`*E+&{b|$+4k_Rb z&V%!@?3@QR?vyo`H?*|`!xL1vH`OK1GP8u@7(jK&ggYEzHQxiRpyf^EJ5wx-6pXLv zh8`PS|8T4+00tq**hP0nSt4j1q9U96?_<%xPtYa%RE9N~OoYRr+$$*hX?$o=m8UZp zDw5m1!uW1Fe#oj#f(GD8tNZx2l7XNm3+t1}%l zrQ(CN@qo~Q`$NBqllAqgzZLpFyKIx|ps`Yg#foxwaIsTw$WBkc3sZR!t*6MN?t)x! z%A{l(!*zc*J8X+&=_;zP|LBd|L&^k$Z_CGPjUN*Z!gMYj`d18*c1BqF~CWP{gjt#-Lxjqf5@_yV4p6k`r{IF8 z9i78_kqssR)lQTS<^NOfkK2e|Wn1&S_#5bY2KQJbej6ZZeo~$)1gE6jLQfBrUE$fd zpL2%PXe3@^_!K$X5^KBnUn<>I+J9J4N9HPpT{qLt_9h!GK@A*FAoqo8;31 z6X^g{-qS3ch6|_`&+V`~sFuDKPa}G}tw?XuuzPl*{JS|-#3>kjO*pL0gcsGk`ig0^ zWN4w;>BVJ$4SMe>7~XUiRi$R=0Cf&YXTD63Hd4S}-ZH}p250;*Q8$;HZkIUyChF6B*ix1_XjaF_f zrAvY9$?9cT{R~S{zvT~0r)=sKUp&rFjGDkn_(Q!l^~KLYybrrV&yE(cYevaSe!2+i zbKrFhdtSkCGcqaM$h_9o;WcW1Whi~Z(jvo}N{x(ffbg*WrPekZtcOwdawR;GFCPO1 z+yHkHWi5=)A2mlve~}&Vol*APYsKeOM85tq3BfU0&#u2mQWOgsTs(}a>;*5z5jli# zZVk(`Rr}{Toc=j3mezb86*;GjuuTE{T<08{dPy`tIJ;;n9{-OyB@ZqDFo3BH$S2RTZo-bVbXm_=xDJu{FKhc~EU5i>rixc4~L z^%fB{?E5<&eQ;2spKm$IRV>s{4_lZLD0!L37=NtM?R2hVoI?w4QMQ+s0ycHt z!N_AGMCoUZW--=ocS(7H#_3T7rAA-3$@i}EY3ENRzv3qA#2HTp=e?YgaFkM7wjlcY*!7)zAUl(!f+npLpZe?(kuEFEGiz z$2Utd1GbLcd5P;VgRCs+2Ac0iK`nGf^`HYOnUy;c@3y96G?^um@+XMVJbBC+Z)xVY zq#_PsOLG}P$t&3vtiA36c_Nd+)r%AwE$jfwp#^udWCpgh+(I&xvt2 zw;`o#FkJbY%>M9nzSJr`DK}4#Bc?(19O*sApg!v{oe_DapIjz%ftI)5+?Vb#y#x8|N*+g^~9Lzjs#nD|;^nAP8)Kl8iLy zS^ZGJ?o(+kI36ZZEQ5(VU7I_Md4S z_(H~^4GUCgH{bggywRNKGNPQ0=kq3f&8HY08*$VIwE)hMxWHR(-;FGFk690_-*{j; zQv2AxVK)x4i0f_Dw1@>7$gC}6Vq4k>f+5QS(PgTeAdF9O$Q;z}NVRxGGSS3uognI4 zy7(d(|JR!@z+bh(LaoCMBvm*$v@hr4ClD%j?=>czgRFQQ!vWpIEf7{KjmT1!3DP9m zLE6JZljRhFmP-}3mOJM-@1a>Mg!X&RoCyxb{`w{~>Q#DTk8A7p&zi}$?`AxS;H5o) z)9jRoqoq13oG`iZq?%ifuK2l>O zMG1K2e`zccmgjQ9+M<4#ZX(c%v~Z*o?uq}gAmGmRH;YDKqF zi?P1kAsAe1PcbttZWCU|nFl-?N>qTeg@Df3rpi(=u|!p=n0m5Ev-8QyBBG#nE}L)X z$@F)cDx7hQRS|Xe6SLpgY?cCFp6>EI@6H}2<_3p`1oOlqk?`;;qG$P)lVNEke8!E; z$6InM8;`AfjDDQ`XCd8DQBmG0AU}0`uP-r;8_N6E0-SiVIjE@ntH(P2K178Gk7qiX2S@oLydgNpF)701?%2Ux_>+U;{ zvq^XNtkz)6k~OSI;N(^;vVz2f6TCPn$v7?sN#w-kp}?aXIA8JW;LrREK*~HWmr*K2 zQdXoxDT9<8^B-h|!)((Ov-|(c(+PUBg!D=43ImN;P_D0I0jpC}rl9BX7=pYtQ3o2x za1Whc%l!R;5TtKCJY<3HUQqO!%Hshw6WDnZWi_f|&u;nQzT4ctF$YAimNX<8jBR^6s>eS+KpaL@FK3PCmikiXUp0a3b;b`0rn;!Wg6V_?*0x69q-Ewn$N{k68~gB?tHjHLY%=7(&F!Nv4Z z;V?zER~(=))hLmVmBU!~IPxRCy+wfwZkQF9^qtW2-89WXBlaXLo-8%(aprVKV`c4E zSy6^HIKU8>PpL!F5X3tp0{`59!+8Y}W;nzaSyv+;4W%KqxvZ0k#w!GlB5HEw&D0~` z?R>fCD)0)wx6=Rz(7dTcmPiicVFy_%^DQ_Qxx;;EX=nz_qRY8XgNl}3h@U@W`t8XM z{wW|rq?-o)?Aa5L%b=WPzS-+cU{4=1C(vV=x9=eN6_h-=Pby^o+tq)33|(l_k~V(R zuq4;MyPIk~#gi@&i6$z>c{Ji?&2~|hL-=yAZpwD&E2C^TG`gbR=-&(QolCN~dZnq?R3Lqlw%`;w_6jz=I}8&ex}n%`znUo(`;{@>P zDH|Mf)0HNyyq=|RpmE4i3w>K8-iu8M@YgySrnxL2ZM6ej`lScnPOJXIM6bU zwrL z2j2OsL6~Gyk0v003sjWgt6&x+@~?RlIsn9oy2|yTJ9o4cTbOEx64}quTb<#w0^u-0 zf+eWcO>hS@!+D2XFcECs+%{=U6Po%6j=y(iJShui;j0+GEMUM&x}egF^`;S%B#R#q zZM4BI7mbydu>#A2=m@*;y+%Sr+K_CFAMi8x?ZqUz1&=L0X5d4gyV*8v(iXFb&<`T| zf#((39KSq4t&3#+Y25L?Q^sZz30Hl^a>L6T%QNdduaU_y#M4gnC{EsB zvQMWnn)?Qg^J}l8$3D25bDLW#P*>Z0_k>gR;A)y=!?k)@G|N9f{;Qlolxsh2 zYD?IPVO5DrxB}X@0R1l$@J@k4lcu_%r~Z^81$j|ccP1G>o49sJ#g4Q;5BK*UabV>j zkZ93^i7vSup5)^fN>PXOz6H|UEiC(nVvRW|s}G}lgk$n)1Foqt2y~k&x<3G`#933~ zoO|+hd!;r#*ik1$T?D+5enmm&4tt%0oUbVmwwo$zlRe{4LJo7PRB=82JCE4(x*wR) z8@L@zQ>C;bpT1+ASQ51~don1gZ;BSikd`hlzZgdt<YV2oT)eA-KB-cXt>xxCM7ef(3WC;O_438r%u)?wYU3{XXZMZ+>tAGgH&k-Bo+n z+H0+i({0u)v9FyUPVaCX%VD=6A8};zh{vq*s;B;OX!Xe&pHndG+nfOoi94`UH%s-n z8(bOwwMh9O2@d;wSdGGv-SbQZ4lIK4`NH6skNwfp8%3<0n4h=ScBv=FYyv8x@3#Pq z{}mL=AFHG2mYeX$>p|VEvZ;~XqdQGih+$syv$h4U3w7_@-CwR;t=E5qYrV=(86NZR zJbUH2A__QUJIkE^cn*vv>&`caw0<%Q>Usl6hIhX#& zPSSBXJ==4AW_w?T1F!CZZ-S;2lmdhqWEC~V{iS9 zeL?*J_GhuJ?3l==P=HT*@*m<2BOgW>{&%;!aEMo)lr$g3c-D!LBuq%0fzv13_eRMM zEc$HTWh>W;^xf!ABMI{&^N5LZi(0bZg(Lv`_anvORRC%AI41ys&!;I6WQKoIb-_yy zLFH}BRcc%BzSthtdoy86q5L5n4vlNUa|0-2#q=&6-uAzMgpwwgSG*u$ur}k+UU2Ox z;N&vt)8JMV+hiGoyR0{5A)N$~C~yCP1Fth)_zY@%py_}{1nckt<+8*JwvlD5@jA@O z(8TBNZ^+!Hrxs%;obx$TZNansTq)yCTNk*B>w#hYsU_je>Nd`2HO=ZG+uSq*USLlO z&7CA16ZL|!V%b#VQNW(MVW`tx*ZMKzVhQOW59WV$>Jfe=6CXKOU8|hGmyfB-e_YOH zF#Zo)b6gYY*BrjgNlJ;P%~WhM`3$d}1JA1$(wFmaM?$7SFyZmc8|LXI#+_4Xk;trB zlxf?@jTBV8Ya_xLx{%?@gM%)le6WCrrw|FoqZpaJO)kr8_Z z?m1~i{)-H~CIjKuVs1?? z*UVck5_@a7?;U^W2xwPf!144IT8kOh)*Ti}12>fP*|YX)3OCD3q_*`eGY3Af=HK@X zo8@etk%?6%DQLufGb8z$@(+vRTqayhMW%fIiJ7DSUv(I}$82(e5j3XU-{fX; z2nQHJzR{Gp&;BtATET>J?OWfayByvz9jacr@)nKd4z zKa5BtTtdNhTA`LxlZ_TJf+b7LGEB}?I^dec!^iHh%!LA$YJHx>^fBAW%V<~ev8M56 z!N!?aX2S1E;ary(s7ygtGLsMG>Ph{@vBS-K7bS7}0%)I|4N8$k|7XPSC|}7&^s`AP zwvIE0`MF%+n>!1>6pk5sMs=yXU8CrE93Vp8q%<#~zb8v&snYXt5DWgHKKR>^3))h= zt%Zy)=$8jyfJRmo(Yus9l0_I^md}R#IfAEw@B|KGCcojmO41&vu*S&4Z_v#aBE|Eu z#HrmK25BpS`WMn>N$~#sj^uA=Q~)ZCYQ2)bFNSChmotgdJof!dyzR~PK_@~WY#5)j zID^&7%0$xcN6=(`vC#Zft6n~37V|!fDMfV#dqDmy#Q!tljr9!hrf!tB*X6S0@OYgMb%UVF&w9FhFO!l``MYU?p(2*kzyZH0s)Qq9y-h>_8 z|7t}f>?tWMABg#sWzh{v*Jq3nXhn?;YKu$_L=Zm$>PsC|p>r9N%`sX-eo!LP%?9)trz%W<4X$`h11a5^g{HD2Rg$s4S2c2mqxxv;#T z3LQZ0Jfssz)@Enl#IRNvT(AD#9WCY)yR(016C=yrdvIh1${}HKNMc!W64vB&8=t4} z>Nz~ha|UAIg^;(`e@e+sAh-a+6*WJ7#6c!C|F@s;TLk|kP(J`gi)!>E4NoyCX>khB z`?deuo5m&M4`3hk*WwDBCgI? zDa;)x%L|kh_G=X`Pq?zDOxU4^o$IlTlRD+#M^^W6ft-ot+qTcfR)l`6U2c%g1(!1m zbGqOgoUOC2Mq74!J2deozJ7p1SD{;(-NWJhQ^I&%&!A7$>ie_rAo7`bBimFNN1F!k zf{hA6=yx9H%N0Glg|~iXsnYreb>00&KZ+OvQVlXLdM}c4*+RqCw{{Vf=>IKOSn@EG# z+to!iO!v1zQ*au1n=LV4(tdd_w(Yt#zm{k)={Awg}neJsqd_Sdw-=S!JaYoT0@8kdsf^dqE zbUP3!KXelYQJS-y^cX4ZVEQR+w4Ix|5+wNc8=$)G4e{;5GzHaxP z_hLtJ_MV#~*B8wQw2)bc9)?RvcZ+&hr`@hdGKL?AE{#6OU=8p@sC2+@yX|jT!jC%R z4wUSM8y*S-cHxk~j}QK&%55n^OhnEavdT@&*}8Wk_HO0M=YtZ5iSitbg5Sewm0XSG zsg;OleK_aKYVyqDZzAJ!v35)<=-Bk~?mTHu?N_ez40q&{d$~;*aDMLNuNjd_N&-OIn|q;XdG-g$Mmyd!j7QYvofB!VO@6wiq=(3#UKT*}rwZ;3 zTTu zsgzTpKG6`^Xf`6`Cn`Q#LSaLVGFbV4;q7gql+D5@N>(p8Ek|S};`Un#7QdP-xCjkI z%rwq8WEoyJn1$m+l1gB!zYhucY)$FyMM)~!Q7ET$Ff8+VL(9V0&-p%Kzr!3XZA84A zQXbE#9a^8#CQ(018W!&8>^OMN$ggK%9BNR<(;<0n3-^94Rw@^|8t4k7N}ULg#Q z#6(UJeB^935onkE)<7o)gy?#Uab~Rfc_6Xm+=ZqjZ8mmaF9x$<^^`M*V69&y zu;ak9_vI|&BI04k`q~!q?oOF$kMO}Zo+O9A-Cv>2HShAyYXPaEw^7fr_*%HT`CS{V z?@r_JI)t)*<1eh358*HpL&`k{Sb@%%$fmEmoU8_J;W#rd-OJgzs%LKBMU|c}!7vlq zSQA|QAEoIa;=mzcF&o&Y`o%u?Z~^9*e+ZaGNJ&NnXJz(hLGVOb&_Z+58Z#mt$pMR< z=QxPW#wgiVg@x1R(>(MZNmob~Ow%(BZ=y{amVEw=!+1r)xO+GIjuTq(b|&JSp`T=s zX?zr7j~TbY2JhY6x)LgJH!9=X=Bl8R50r}kXI#ZB@sH8NL?dVN{w7LXAf0q8dU#$$ z6VX_1V5QJY3F0DlcrU z6-sItLK%}}HkYT-scKP4_-O~@YhalBu*e-m04+|oxX)SN$KN!Hdy?4uR&z@3nfPkK zN4z4DGDjd(SbJ?^Mg1MahjdNy_gUyLs^U)BjYuH`j60V$$HO9-hAPE*f+e8vp2g(VK+6dmUpwU3#W(`d7-{RMjV z!#={ra%>=%D0G|RS3ozbiA)CHarNz^wo}vvegvHf-^ZTjUcu24h}pSy1>a)AU9k-k zG}i0i!z2m;*L41}j@S>MeJG+_+A(o_6bbRBpnWi`5VJ^o!;klFAA`HdvuXH6f^Uz9F7CFh` z_)Ti!KrTxLxnkuOPpV8+OzHuGD%-P1OK`w!2llCf^Fe$%@qhS{f{R1SGjBPP%XQ+h zv_IN!p7#%xwccenzwevq)TC#E6%pm(U?ild@cn>`%G8w+UpsKYB&sM%`BLWa1_?RG z0%r*MrJDr7jb*_C!abZM45|l5{0CWYEfpWYy)VwzlENR8ypfnQdKt;bv-ufDeDFvm z%5eZ2-_1)-UfisywvEF&fD^GpC~Xof8#Rz0>buk3mGl^zX5-906V8NgWf&D=!x>O~ zFZu<)AJfDrg!@YYAmVg3mr+wBQ3!^ashP#t{6B!G>wf?d84rb$)4(c}0W!{ap=DD| zF~PQc<}5yJv7Me_r>8Jv3bhI=H#N1&TD)LYcZBo}e!|~35elkD?z&NHkOhjwks5h! zL&l?zcvr%%u`?H3yp1}^}K6YhY)Y$V(T*Tm&=6H3Wj=3D%f z3$X77mlL8TwjWK@$8R|`Wen8n@(eRR9nA?gAk$2cr~#RT0ALX$=pUy`t}@S(5$v^h2#;gdA-mB?=Eu|!dTc2^~trLExdO(j}|Z8|0)-wjgX@%G(+ zZEspK@311G7M)bG`!Q>!xzx1%1B+nzTV`M$g%5)jiC1|I*ac z>ik@x88s3I@8Icaqkh{OZhj_1?-KI-q~>t$+Tl(Z5t5uhqh&R^wp)Mfnmvb;AV-oW z9F{Z>QA`p*^-G4Z(e&N&cl~W4_Qx+HhH&}^g~n^%$q%>cLD$l`F^Qkc%6^3ltE%!^ zbX8u$HSV1)*z++pJmbPca?2Z8qi*1ms-ReogzX<5B?Po**#gN7UGMuHv|l_#rudQeCed3l*MS1+0}Q6vF7&0W{Ta9j@G zjK~^*VH=jYLUVD6TyDJQ!cQ8KZs?K!^sN=4R=sbZ%x0}SedcB7(bXXT`K5Si!-j7( z^x7gl9>t}fDg|&KjrZubwz?#?meC_YkW`4OlIlMR)nJS}aCB_gjQ`Vc@#mw?_kJIk zMoUI%YRhtKq-w{MKgF%q7GD$ItiI3$Yx%07?b?X~13VD60Ry$-AMA2G1BROWG+#nD zVUjC$dKwE#Sc>`Qj>r;rA(=Ukw5}~sJ{?YUJ$GqHk=?$rXtI`LZ|+^O?4ge5T7~jsqOJ?p+ml-)m`&>)gNSDV_BPH>w579R!<4+bXNzhEnc7|38G9 zCK`W|FRd56nX$a#w)_541m(`KXECDlHIko;Yr!W{Kw@W7z(%1=&qn`O zkW_Wk09JVU;!&(+71?mt+nj9F5zdp9wEZ2{1U9c{$x$hBp+OW7B zYrYI|0(-b3Tp~dNYv0GMX^)EC!ZL>=I8V$q;|{Y8!nT1KH4fVqbKk2m&J%s#7w0;T zVVU*djCNWp4_^DtPfsn8$vzz(d}b4v9cmrk9P>U3&&#)Mn^y{F0;Xpdy7e!;cA1NN zh-!NT556AruSug&#{Onv-82j5yw{whr9c9dH z8|an?>{%kqp18Lb7MJ)e;EatGf;y*p=?7DzqJEjWTdWHI2>PU27pl*Ik#})TbA?un zN=k-O@pg^uaT3sR7&+ARTkhXSew^9y6#nnx2sx)N<0t=l+@^ADim1MxF40}id1Np< zN7XfMpr4V?fp6d=9N`H%V>d+K>JPtiH?~Boo9lggcX_C+vonW5gP>!aM3Ze=W;Zaf z%Cdc?%HaO)x~X{jJ)n8qIuD#sRP{h6=y}XCYcO3nUrb!6-GT8~pVDTuT?;_SK{T+I z{5kN+i2cY{5PHYNnATmUe%;^D&&oj!M+Jv|Gwwsr!l2crzHxo%WiQvr9ni;x53LF< zVyj5^gg#g>*7FzqdYn%raYuqj$LSlvZyarRELCF%usqza%BQ&=396$MFz{g%kxS6g zUsRTQp-Qai^JsntRrYLL$DYZd~+EK5R<>J?@&iX;o-2v#)PH225zWdxXuIo zrsl*G;luh}m?N6^q7$~}w`+8Cf>U_Hj$FT@%I^X?VZnLb6}skAgofbD%F{Ay>$Ae) zvck1;bNG&LrkW+Bbd}*4C_tcfMVY|vYEvRX6<3O?jw8{4Q7{e4dtpcAV=B>KU zr5x!oQ*J~X)So6>@8})sbs5a(Lfu8W^?PRlIfxS_T|$1h}I(2dw0|J z_oa$UD6~Kf+!l*SI_O80?Zi)}nrgn`%$?fYXT$XzVOfFyh~Wx`a*R4 z^5Zyd+Xw$>qU!?2+)pJd&JK8XO;qcCog{V|#}M%hxvr>)hlnMfA}}y*Q7e;*@xODg zB>6&0GNl2 zsT?-luP;x(+dN&pb1k>Gw|^<+i2sa;n3G_j3xgV)cpwHP4U<%H`b_Grv}CmomPnmo4uK7A)W!WHS$xE@6K;L+W(${xcmwamo-o| z&TF^EGM474+x<8k;5SRa)f!^R*9kNg?O|Hmcyr|C>-zV{zqh5a{(o7uUx9?w?Uz8H zhT2|$?{hi8?=6N5(qM+)f(6=Q4;kP8c zQY_VVb$k3)v!RnEa7yqCrh?1x0xl*~(|aY$`!32P3FE?* z+OV=sj2IjmD9LU+y;@u14|V)F*OAb6iaa>vTh(@E-7ISgqKZYRYpU+_)NX$rEA6*c z0!qSUomgXggV&b!AZhkchXb;<+DXz!{>a080aH0)6%}_A?g~Zw(;K(g9;qedr$d~f#IOT?dP-Km!N|Mb`_%rpgVQhJ5>2G4{`I>m*! z6|CizPSM<-f-*9HwX)m)d2+SCBU|S74clH*@*GC?4Zd?2fUBi+|Qzg`BAP%+ud+ znlrOuu?72(9Umm=)J-N1^>3nB0}WR!-olk6GforW?^=s=6w!kx5X*Wf!C_*wmu|Sf zl#B4Jy+gdwg+;@(5SdlWMZ^sYxef0n`G4Hryrp}Lz^7waunB?9^Sen>k0ij!>KGLN zKKuoF@=d6xw{d9yRk3|6!yJVZ56zB!*cK=y`E4+^m!#IB>>RPp_8r&3kT6Ov>S2Se z-#Eai{cX4dZ?!7wTQw$z{}sl>{8|joCDE9D%0%6fc%afh%JJ#-ENPx~&){R#7vz-P zlWCU-wp6(s@O0{X*K3kSSJFa6*SWE(+>1Y7?)>D$0h|HKnc+>klU`h5fveQf!xa(M zqiN`1$8mi2rz#1Bh+J@LDg0i#yXFh{;=+9I*46YDF3K^daHg;m?@5tP+h|5kw7&`N zTVWGxUX-%;utZhjdbJVZGBF3C^04K+lE z8_I<{?ALE!X*`%6Vn1C_X#IC@cvXL23!1KF0p zP23W6<X1 zaJRZz6n3XKV&1q{8D^~ln#%}qBad6_u2=|sC3J9Hmsob~#Rgsn%Lf+8w{`p;q){g( zHMi-ofwsL!b#oS4&%>rTo+j@+{zsbeCyLpE1x=}X)j_iI@=Q_XV*aqBNGTM}88TTJ zk2tz!5b+ly)EJ{)qS)K)!B%mCsTO4cA|;`lMOm9kLY%-NsoX3&vZOeBYwVX@)df?qL&xGJw0WE*jkKnrHJFZ+VGKA0H@;DF<@>$^pK{ucJ0K$8Ei2UJ)FQsNE%{0q7gL`CAzansAz!g>Mzp2 zKYp}g3K9=iJ#Gn%9YJoXC;o6!5!)>tEt6Ag+|8*;wdVYfoq6+f1aL%}h-VX+KJkHvIk8)$CulXPSZ8P~jiO+LD;v&IGjxjKN*1sTV=5 zSW+@+Hj+2`Mmz&d?Eds<2e$q8O<&0!8!-ZmNKpCVkGR(lZip`o859710=T;d z<`VAxhi}IasOPCR4~K36wc_8*gITwOQxd4+{D$@`-Zu&Kw9e&JqKiEmN9hw^dV9ra zD0=a|>ubzi0H{Dwa}Y4Ms8fIlZ!8-Vy9Aa8?!o=Sk|2iMe69vBg)(n*f`@L%R{NUZ zU(vBl&|(=MwvucPk>e1-y8ur#En&`y?iO!DQYHhjxN&{S0`RYt{OOcnSR1+|q8F3r zGlIV-1tT|tDDnfD8;E!M>ymo$iLYu28JN1$9td}JP);kjQGu!*=uV^l$Rr1niDubA zt`b0B3fB>(K!ci@oWY% z8aOJrBod-o<6$3~t}%h}zgzxF5*jlwZ2&{M+Cvcpg6M-2PWk2@}g-&27*F z!=j+ae~yjme($vv%Zze3(}^gu4YjQbL$`D=_wbNMr~LH;zlEkFg`nJbArOLw zVJW3ev?8(&C2E|wy!jc&+*l^?Ko-im52}rr=5>gF{p=xQo19-NHaUN~wqj3Uyk|Qt zHr7#|=lIUMJ@btFDo8AaX701KW~FYx`}D`MqLM<5-sR)g!Dc7|dbw%_ecYxjH}{gd z(bo3~A-Iy@C1j0|%pjDQEH4GggDVd0T+dN>I9G(*xrtruv)?2=FWUA)T@Qt1-FGQ!Zc85=! ze~;mW6ul1h^{hR(`bxg(!4BJN<>x&D9$HpUb~%&nDyhSn+!cl=cifyDspkhcKOt3% z>2kO>tg9f-K{cI|awITm-HZIolFI^_t|mj3i|LclZ+edo?n>9+-aSkC(s`EYAcG>l zt5MeG?O`kB5p}pd9P~$Sd|eVd$>+fE;K_}~Tq#5ycLSBaDe5DnHhRjIxs$O(8JiUf zhuQkjkpx|^Lm$tg6||a-s$b74KLL*}`l;TIV#7WGKCPF$+*5rV(WiI#NX?>!xz>Y9 z+8j^@H&(fqG@uc?F+_5G>2c7xhrj^jND0b^7|2csEdS?#HE9q{fH zuSttF$yX3)u2w~XUrq0(Si@c366af8_@q+F9A)yl8kOf#qicE?0?XVxP-Q&&esv}z2-K%NsN4+Hp2q4!pnjLf$&+`O?!@9nk*e6 z_dt~#C_EtGF@xb+@s5vebG0O5_q#7&31sK*^JY&q`bJNTN*=XlPmCD-h@xGcpfI6*+2cJ5E+X;fNYXUWTnvgi^Q5n3+cN zeU2k)Dvk9gw#>nxL?JuniPRKnX)XdVGL`DRl+#Tx{BowoQQc_4m@)`72?Ij_DxRBT zWf)p3B}c6>l{YC4GGaSzxa_t)_`0gyoKs-dRhB<{Qpgzu8I#VqdW(`gB1(>4zg~3X z;lXpv2^ZO zYOGxZXul_zUX`=7Xo!-xHqDMw?_)bixBPgh{8iY=OzihiU1oUT2<0D_dsA(XgLh01 zCw(v!Cn{`6z|{;b3N3dqKT|2Wj#%JCOLox|l_5CO1t|mp;==St1l3(}?u_K5G2@K0 z#UICi(<7Z)+D;r@LAe@FMbrNAncdb{)?=v^@4mQJ#zr6N<0m)#y@d>hu(3hDQmFMZ$lPA8S+B8A=VDn)gd!;&C& z$Jy4V^Y>a7x5QM<21-XMQDYG77{aK7;jz4ZJX$3%Z|gvyZ^l)oB0;w2`YsuW2muxa zxh3$RCS7gYmMbG1-mgOK=sF97Me%EyqC32oxvtH(H`T(L$yK;Yv!|S2=_ntU^B9+D z{p69lNxf|NQE71^vj$|YvDQ5rQ27OVyg#ljx(}r!j?qI%Y5D%0wJu@DMDz7f6`y_; zM*4{;28)xtv5o`+-PG25@^DyBXKic*5zS41uX3(--P(yMtcR%1QZ!PwE7mYsPv~wJ zc+Oj>_U4?c4(rWvIf!P^k1`|Sp=){Tyjd{F*+rh!0yW-GOQM}jRU!)39K zAQP{P@bqy<$#T-I36%9A_emw@5(~P%M3If-n31R7VFC^U1d^~D6NuIY+q7By(OYC| ztSh|8@nC{3<@oJ9zgV}@l-*e4F3RH(Q`b+mW0uGEJpFlmdd-5|u#jSc5mNCiD*15u+MgIc(Y)vL2%X2u=G z^hbMxW22_4db<>Q^(|B!J|@cL`o-ld%asOO)WsHigU>i>_su~j*2^4CdM8_nMwDNV zW9iEY(@GFshsJBKn*6HGD!3_WzZM!)jR0NhR>2Obrw6~YtbJsBUbW%y!)2j@Ek6Ob z(vI-{`DCqa`pahORkf`~)+bS@PcEMu3oa)9ZU`*r;qZk$$s*kd%KA2@)6;`PrSL&v&No3nfuTDhg$&z)K7Z8P`2 z-Ko$b2bAJ z@T|Egq~uvW$EQcl<4Z7y9+fxtw$i#tO&cyc$6jr`W6z*C34>JHF?z^A1wQi^hZV0A zJ{>jvQUSC)mIupB{Of1u`1QI74Xs%1vk+&`(E6=wr+t>Zl2Uww`VGC^{JG`YQ~5T* z3?#f(R}Dj=QVU=bHipm19c|02LAz)Po6i1n@;+Mc7C2irT9+CLJ!Dsc99msg_Zy#O z9ulaTz$=Tb9OA77J{uIORnssEMPt#cv-_^oVI!dl)cSQq_wAVhgtssW5&|pfLAjaF ze2SS5F>?lS;l^n|oGSw*k4XsNzmrNbKMS3`L0^HW;btiN;af_P*>IRsy^Lpz)geB0 zbJ-OT2-!RIDWz?1_W?mNf+YHaMI9vyUl!K-XH=E7cd^P-Q*lr{*=zKw#rV{L z14RH1=$EAp|5nWLm^A5z$FDD3lx>Tm?PfU(|AO2X!EHUk$oztW9-l3jFY+wWQBGVF zgBC~88Hi_QBfuQ#7ug3X#?FnY|ByU$jn`tAq1#Qo7c%NXyYX&EgcVbsny>q+75!C` zv`F9p|H6$a-z2+3F=MARXQb*;;uy7ZT>ikCG0utlkX4>K5e#h#e8a50qP6&O`J*e3 z`&F2fH2|`Gdg?`_0(O5F;ssnEH0-_C=Xf9;M zcO#OJ#EhneZm*0s5A zZr)-mtzsL-YTM3-cv_kyQRP?+nPjJmfv>=C<1Qf|YDz2yty(3HOkriTZzsm3Nu%S> zchze;hbc{oTUf*IYLh8IAOr5V6i6JhKlf$z7M7 z6*g9-Xa}!%64mgp2@rz?<54>tTj)Y*PL#Lgu9Hw-9yTHNfQkDGtoOmX9tGAbuWHdU z6^TI=ISZa;o59;4MM4Gg4}bEe(1!3hoVFb-a26WDrEXEK2R9$Kn=9`y7Ay-tmvDl8 zQrT7os0=d|rg$e}y>%jNQbUua$iMg;slRyNGM~iKe>grHxR?eqPIchAO88AebdD5% zB={HioHfg}H~X6q2_Wx=^SjDSMkEqac%2M(%zGyxKqCRbOJ(vVe}6URabjwe`!Y}Z zUF1eN%{3#Lffk-r?YoH?DShxr+72&;4SkI#PV<)ujXTNt{%{8^qkg#eycC9(9n-vJ zH&eVfW-}~mfpx6u3F+gm$FfH@jqAKK0$A-6udUg)RaO&(i?-gGZIN>xyrFkDEM}f_ zwXER5pi{uo84XxHG%axLh#!vINOfrLM7d0qkOZGAGZ1y1HJhQ^EfPZTS86o!Fg+I+ zfSm;W)k8Onn}KXSxLK|r5kHEtPui~NL2a?!F7!35=D1{8jXJI^{Rr3;%;YKEK2flp^Cc5r)Rd=B5C>~%U`x(1AMH$?hPz8I7>BdS zlyaWdkvjOdL*vF}bQ&c}=-JJ~nq97(2mzhiV*}A*F3r0+s{-s1-#dE3mggL+OLwKV zBF{>^{I-hMgFU>n8g^pn6QvE7F&^&9QW+AQAJv#Kgi6IW`BF>M7Cn(h`dZ*Nq`hsA z%0qX~+r~eH-tEQE<87a}y1%WbrNkv?2~9QXBc9+`ca_Q7a%2dO#)Oi7uUHKpO#?qR zcfpiSQ=9G07!1Ugm_FIfYA=UiX~Gkj_k4e%?R;^iM51!bqCyJ_SBDyvJIWv&|Oi zD@`R|!#qGQZvoQ!12B*|I)av7UcWiMqF?DOI8%0L%6$)ghqEqumCY>&lMQ$*TuQ0LnkEChxgwu z-Q+)j7)vgLw}trGE%ys4L}!`>KwQ8Er?s>=2=bjKp(W6q!>pyY0W1F%cESpsJsIbK z&br1iH)L5267)@60$9#J3wgw4kxKw(Wp6bw<;4h@brX%6U=sufLB?#WWDd zA{-*-#tfs~W@=Fnm*e-HYUV9h0 zFhaHW4)muH*ftgt8=LqWC?TIe@O&AJ(~*-y2o)4477?Eni?s4}JV=&3^Jy7ru9 z8FwP}d-6LUi)d^UAa%f(06v9X={p$@7ArrT)B!>gl(bds{n$ufpJI5d3)y7#5o^8vnc#Z3yBQ zAFvewmfcS=XgnaKa9kcsv3<~2wzqp0ndciWyV3r?R2=jtPkG-!Rsu?apMy4%Urdhc zZAQ`oGjiKOVaPa=?^lH=@ANU+4HC2h|7{Xq*Duw#xnUZQDj3|jrRPGbDr&BsZqQI}OLV-(VTwoOuq8V!&J-R@Saquj|v$;@XOOtM= z9(eD!+0v{5C+iirz}EXn`KZ`YYxl?b%N0h%y^)L=r$0kx+pZnT5Zkicd%!UfdMOen zd3SsL+5g|0%QrHnv-+*^J+3XdPw=N(E_zG(X!iC|Kg~|t?@vlO+%Cr7fxS%+=gkJ2 z<~%HA2c(WpY^V=8niMi!B2MY4eO{8DhqcduuGl?o^reI}mBmv{dA&Ul5T%%W1(4qo zXJ67HG%`p&@mWPKEAk`zKDT`0%PfobJcM=cPX0Trvi;>LK8<{0C|0mqzhv@qn=zwd zo$kD)+u(*}`JLrWZ02)st2Qo;C;;|>Ky-<-_IJf9K8Z+(6}3khmpf`md`wpB@^`hd z+w-RFxF0SDj!vTY3d#h*+k$Xc3hqs={#+-uXxmLaNQW&N{9scZp|aN-{lCsbegn!w zJEmW9Yrsp(A65Q}$~&--Bz3VocnV}|Q-T6z|`l^=@ z@pI-aY!+EENS8=ZS5$i2RF)KBfGnX%GeE|$q& zxk`7xeKeCkvH}CQ9pEZLuW$F zSDT_J9C-N<(NTE7Z&7lT+jXciH-{JVJ!WQwoJapj$7+re!=Jg(3S-H@7kiwt7xZ_X zA#?XTYC?X?)h06F9|PJsxZPKa-~2fnQn*P8`1z;me=x$0j+;>+ucfU^=u1Ri*Oslk zjMZpAS@_DHmDtYQp?Aw!#jdw%^AL#8Ou|bIwz}48b=V2~s^u7(^1Zr1K@=lrmpTMh zHUmq@mi5cy4FU!qO}r{b{9+vSiIPS{o3#Bg?XU~1+`(SxuzBgkXzGJ)@kI+a9V%nf zQdz~Ys~APbkmksbhZD@iUG#F(WfQ&^mh8yBQv&LSiM%KF&1M?gyK;1aJ?FaC*)_un z6M63Fmj_|SaBv{25#v#vA7j?hJxBNff zPc_+OXT0gLy**B{xZ?b2#@a=%`a34|i|HNrP)7#Uu|%GuYOVg`GkS%}SUV!A_V-8c}CTHSgq^L@JmsHZ-*AIl1KB1bWAsO^Xc05@=xJPGni&g>cN>8p*kd+%%V7aiM(S@>U?91ilRpQSa(&VYii$Dvvi2& zxqvEBfjbC8=;kZmpgG#(VJB5Mfl!WXMeeJ?&H|Fd`fk}=#4NmEU z=eA&mtt)3qs+i~|vN>62C|;JdiXjbz8%-&jj@05{ji-_UOeYN7L$Qd_;A_O)NC|KK zhS^uyy$`CQA-LliPo)*5chas4dIfGB5rb*dHAdc)*vBFjQr>HDoXMkUb!s}l8hG{9w;B4B_>uDv>@W-{Rr&^U3JGCpcMeWUs4dw&SP%V6 zSn_0BckOX#oS>Z{mtPUEG_TW$2v#c_IvR)V@#faAe{oBcrBWQTou=xL8>AyuWDsx` zxKd%)dQMyeXKaqyY^KS{N8%|`!gO{$=z93qgWRzr%47wEK^>_RXdoF5zc@$)3UPMp z_uw^#A%Ws?(KStzcbzAL;6107oQMqj%IJu8Z9jCGDfltzgK6TbS)KlCKAgrJ8H=@m zu|m8^DjdDvsdyuXdDT;h;!(->#N&)yFq!^z@Xa~kn;6x2JnO`ASNmq~HtsPSkMqmsT#?h%LdQ?hm< z?5<4J6)|Qe4gUPz!|yA?!7|Sv*~wbZsL>w|PG`Xqun7-xY3uU>Sf_&OHw{Nv zk#HO!b4`E5KU^MNAN3RyJ1?Rmy>gFL8H=m(`+2$Y$TN(Ex>u*H*z0F_y8e6{eZV?9 zPz*m@?Rgb0n)+6U6G=PjaV&0Lt~iW(jD}NR@eK<)S!d+&({UC0sZH}7_}8d_#uB3^ z{!ryTc*peg`%=VPx;MHvJM*ch*;UeR+49`%Mic4k0nRUB_S>~J&C%kwyCp1V4E=zR zTnzOzR0gwlI0boXEyeJzbMu*_&dnK&qLSNkR8mjv`_k}~ad!+=P})TE06s>jVsQ`4WYNUc))Pn#ZW6GQY$lCl1|nyQL2Osb0r*ZZ0XwSq44G zT(SMm=WjvA-+y<_e%UhCe#$MQU`~JEN9k$)th#8r~S>W#{6~eh4#FJ z$?YElwIj#lJOSEOZJxQU&#UZKEUG8i@mpINo~O|RM83KVjep*;7I56Hx@Hn~V1|p2 z;e$%LJ`j2hw`%_ckUY)u$*MTjpM@A%#s}L+F9QknD`t7xRs$`%xI3+=0JcZs1Y)=B zo&3IIqJN^{%EZEY-Fd;{YWq$dM;O?q#S4Eh<^lboDs1-JOGda=-8}_%R^I>|0!Uli zf%F%69ELCxd<*gjKNxI3zu6@KvE^T-D8#E|rket&Ar!VG;!I&i)>gG*Xfh-y{FCFo z8IY@Izz_(9!w`_-y}sIB6*J>MF9hsjeDeS%C{<94#@pyzw)+PlJ~ktTfxk{_HgWaQXi$?mMHJ>e_9ihy@j2QADXWdWlk{ zOA`U5S1D0xO7Ecuk@70iLWy*c-VuaIjfhGI>4X+(2?-?j0hI9C>MJ1AyrCh3t)AUO49%tipfL0lHX~f7K6UpgJ{XeeBKl>4iGDrlKKn`5 zalVVu7?HG+K$=50mByA*QQXt8w(rz~a4KC7*$Zy1coBlErdV++E*3_zluw{k2T~mE zw=wHT;2P|Kkt_en55TGqzcx4HVOGqX_pXbIib^rxq}^)#oyCS@2v2vD#cAw*sOC)7 zlGSL+impIW3%v%C^m;VN)AqW!mifY3S_d?S=)M8Z2n|RNCQxbLnK@xNw*7QP%mn#! z7srw14fRaVw>ExXtD=`otG!C$EW*W~dc3UxiQqYqf=qhOaLZtV>t;MVxk$B$)<3}0Bk*I99-FXw&Hpg@+m181DB%V8cs5(Uxb?8n~ zx^!|5N*=jc?H}1wb+w>!MPWM!47u@ihx1$Z`lBKYHnPfVb&C>8oJ zZ)~_xQ9}M!FzOEJD_fiX?i%`*V|GAMHp*a5Ie#Lk@lVSw9 z(Us}Z-x`@apGt9i#swXWHhNyDT^@>O5~RjGd}#QE?t7gOq8ov2K7VPLILT>Jdxhd2X2bl`ls8Yvn2zf-1nJ5 zApIWl9FaC!S2bT(Ej!zCd^|gvJMiIvGA($^?d9zxt!`kEds&ox@3TNlQ>e38lWT+x zL$=JDdP;Kk2;IgKoR5o=5BV#1qMY2`$Fu#ypq*q{iiGSA`eguRvvWE8tk@lIXKzdh zx%&-&w!qMf(Y|9f?7_d%pd4j)xISe{L4Zw05_YXB|-VUT5}%+DznZ5Jt}4u85?x#CK2#5bP%%g=DXQ zH(cd$xv+&ju5vXVok;2gD#rJn@G}V4KI(?|k-VluAKccKXLSLk40^i!hdjFe$^~N} zWyj`x8=TQqLpKe)G(T{1+B*n#9hOiMRpU~UaAefc)0SpQbh+ti#gJzisA)VrZ+ArL zw4=e-G6pAZsEsTRkBoy*XF>OYfh-Z=T(vehkG7?k8xqiOEtb~9Nfu|IP#yE(TG)7> zLYy(UGg$iie1D}w+(S*h_)q(%nLssH=oI@nXVQCRF@`h5R2Me~b-653;cjSJ&DS@C z<V_fXExOmP32p}_r;6YQ<$K>YEI-jijBHy@<432xiP~)u#XsQSV$M=Se0=M= z>b1deTa#AVDx#>_uF>x2(csmsO9!7v#V4SwDSQ^43e}E5h8X#@^S#({Q#5D8@rPQ3 z_ucN8bQ0?I;oe!yYO9-PT5=r?(3JuTae6x}r6F%Lp)062h8l(LSWfI9@*v1y8YpUl zdNa4AY>&7z*Twd%`+}>f!q6E|*a5Jb&5Z$}es7T>I~HGcEU~>*&{|1CN@N&$OSCQS z#;WhPWa(HP7w?!8wOf9R!G5R$-s|Y@Pjf%kLRVpy>FcfKSrPM{JPKJyK|-nmv*2LuPoSrbz`7FA9{Wk;-oTxsl!O&3~=*^=@0!l;Wg*e81NpIL^1m!nyMSdIxjb7=w0|`g+!E{T7RN@p+xV z>jH053mjj|=#d-D53hXcc*C7@R~~F3{Fkh))Tqh6xyVhyOA!hICzxCt@3XHscUh_xwEmoyIUbc>`SV3q=ZCp><9wUtm^r4jloAl(M9d2WSAzqt zZXcuZcwYaVY&)IH2*!~2P zUCMDj&{I5p#b{cO4eoY_OBXrkHe@RVa?ZqV-SQ4S6WPH+Dv$D9sO~yP0XUH=kSS4I?4W;g8(MO*S@Hd}T=vg`Y@A6pcAT9< zguu$Q6vWXdIrsp8G5Jm+9la9v-YF}(m!Q}Z)k1jC&m8wO;RO)B#&&KG!7c;($uvcLbr#gMk z==Vdr4bAXIkT}y4a0FI zw5X3Gtz`wC4?o!=G!Ne^8T*Fp^#4}5Wi@(unOW9!Fs?{ z?uZej&jTP&6C<-0TT|PC#?#ev@ujuG-YKmsZ;>x2vDJL#wK)}I9)9e*<6h22`}zh= zmATyBcN<>xw>l{he$BJrZ@FqMR`kR4bB{Zz(9B*$Vf-t(6vT==J{&&G6Jx}l0^Uh8 zj(i?d*Euvhx z;TIiq(*4xf`?u{2EMg%ud5x<0tW~nH3NJdNzBBN>YqBu3HmJK6E;Mq>bOU;Zs7uI} zbvzshCf^T`8vicn$^aT=15`-`Kw=raseGsD(VM?&rho>>Mo2L+^B*~1She%xNTHs! zL0ZgXlQqF(rkCjWK7u*-LF`qz8j8;aO^Eh|w@Rrhg!}nGP4L@L(C1DO11Jve&42qi zAPA)Z^ZQRy{l`4;@0**M%>PyGQQ-Wm#2`N^?un{;&~uyHzMwBdz_pj?0-E-zT5)CPIhlKq&IDEk3JcHU z4B7Gyfad|sYFoMmmBo%jcTR)uw*uck+SfL$^c(^4jq7?RRBZ^nfeBq`I==cQQP*g} z7GYm%6UWuAq-8;yU^^!!Fk+!UU|+R_3(_2grrT35MGBJ%J#7*w;k)iwQ$bGnLnm>} zrC)QVFZWG`#GNtPL9R1IwvD=UqMVX<)!HB{57OI3*Zo1BagWP%I?tNUn}UOifU`Pt zU-SO1?`l5PIR|zOiX1E>uJ9P}daaMUJ90S=9kIsgRO8klX|8yxA66cA$v*BPsK$>j z%=0S>d7kOTnr{b zeT*M5HU#7>vko+qP|^*fEA~=lm(Dcbb(Zn~h>*GLC(;5ho%{3iRW<0@3Y{v3B6x+w zJEOPtqxX$@BSUm|9V&CBat9Gg(yNckn6Hdo)$>7b?LY}&-;^4Q_UGbuV2(II+<7mh zD0$ID*rA^Xk=?LhbFS42@s+XiWE5n3iW9X z8u)2A3H~q_Nw^di!!#svWSqCZJj+fVJb}eY@duMqeYFyhbfPs{5cTjn- z(6l)vrZV<}Ge#?8WbfU#E0X?O$6Lj(*5yB3#nu3bVE>0J?|=#Ee>y4{g-X_>dDY6G zHzoL;hSq||oq~u1GJjjz-gWM0XM9qCKFGP{eY5p-)#6zwjspX@9DP4m*_#Nic{?X5 z!`h5L8@jt{+6~AJP-MpyRjOE|h0X7s_ZfSgD43b>cI~b--#y01f2U<38(hfZc;ee1 zytV`R3!FJq%B%cIpR~B}-4)w@Y(4d#(A4oXds{)}S+a@G+oi-U2>psXkc9e&R!=*D?`x#fxT&fe#IsY(5o6q+d znR2fcWYfx~sk0MU!VTAQoP5iAa;sH}HPndpa^+}VFP6o^jF{S?{US{qC;BtP#}$(v zB}cmPLjR=C)jR;PkJFJjs|tiy=DdXolca@4Rx&s0sdnXMuAAHC-|=2TCh7Kpx6&=u z7plDSRb?&8+ena4kDOCe!^%~vdlLG33Fv8kdm|nD4;X7hDO*N9s-Z6ucuNw(SM)(- z#Cv7Y{PCX9YHn`DD@E=q{`!h?X?rj76e`p$2R~bLBa~l)!s^3+9(#%|@#M<;n|$BP zn%!R8JG@{yLJ2rq^QQ6hMay+&2FFuw3$ZN~>6&z)}|&~JGDIk{nG*{-m66y$Ca zbvdR~W!iyC@N4{g?#Cp68HXsLji)>j_UzPbhVEv|+w+`icZBdBhKLvVyHedY-Aw~3 zjnf-K^9c|`LDXlrh!muU@A`ngc>R}H{EzkJ|6LSry|bg|ZCoLD8wvKTsZNeDa#uR2_R8$(#=p~ zFK0#O@0()H{NqCj&z7El3}@yEc3+VfLn#Owfo-r zXydxn+a$}q?S3T7i;4_+4MH380%cjO4c<74v&5e)Y=u3aZ_2v0+@TIQndbY4%T(d@ zorl&pN{5wj$n{`|RzO-E#^x|F<65GwBey-kO^DnFmiViedzP{IUtwLp%pXk!E6w_2 zE@meGOg0L%mm;2G*}tCfhQA`E*v`oba8{L^;8)uX?6|1KyS8Jzs5r?lzBc#3Cz|!r z6JF`mh%rW9r%q)KnZ{NDG_V$)y8vJ1& zvk@Z@gYYj6Ivor1lYPH!)m08JnQg^%Hb^2*RLri*5$*~AGPoabLt{vQp@CcjS;((a z|7%5bn^~lT_2|C)@Q(F304-B51C{~Hd492>4|nXo4kyZX?`6FG8c7&>KX?-Gk@X3% zbd$eMCe2C=-z^AKQWY<4>qs`M-+5=bbyDNxDA~}45p-V=h#Q26=0cfi$9UHlt}Ljr z&rrvNC-u_%yvt1-sqAct4>fKZ4`0eF@s-#ddK(+SdcC60Kp;fisMc()1^|n$&em`+%jy-BSfE3kG;xxnCXJpkY2^yGJ60(@8~TIeGaAZhKQxgS;q z3Pw=@!#p*FVBWd5DKJ1rx3WjJFSkE69)8yR&gBE9!uD~9xQH6p&g$kdQ0_&*M*M{V zKxu&g<)$n^tY$ydT>%JAfMWpm9()<1?>JCh`9n@H{NXdh5ZZaK@BYKE{)=#}`X7Yr zzi;AvK-~WKu7i?0y#aoAem)EcB~m`4EH|C3c|e@>=mH!KOJDYq5FbX1t*=Lx!oF^? ze}9{pu>zjL*rFW|_vG#E9QNY^K49vJ)JqNVRq)k>N#8~0JC!GTO=ZNY#j>f#HQDhzP9lL7;DMu@IP6MQ-EQD zZsf@t?`L7Qvkx6_aR(_uqSqS2qm`AKM4sWz0f*wl+n1$@>QjM%1s$6Dz@1~JN0zi% z@Jl*mIdrAN!+r50)#`}Zvv(4~{f3IiH){EzX?mWr$*t$ddJ|XPYAYlq`b)kCO9(wd zdaFB>ox3RHA8}JK?a?%`*R|7n%6KX!5iC_Vo>LPCW*>aW$6Y_ZKJknXHG{4ym(+Ge z!oK=e^{fTmyPRkYK{yh1|L`D#8ARjl2F*45tgI}JY2dB)^=_Wk28EbPADT{l42vj$ zB7s0&@yJrS? zRB>&Ga#4M<`ncx5L`K_uOTCGi{3drBI&KT-^aPfs#>Sr4uJ+yCmCw-C(-vZ>-L3w@ z>~m0%5yFMYmd;`3WDtLWMITl(JP0&iI8yCq<9z}O%Lg1W`mbhxo6X;VdrG}<#PJFX z;?JhvXNlF}li=6vTewfmb?bX8sT0F=VYUcA{a+*3nM44wKd<6GBU4{B<~0cMoKQUP zJ%BX1bzQWdwP9rH_R%A&4^=-}ZYlnitghpw@|WPfo8G40usaS-VIuPzHmk1>w{G-> zWES?$jLKd`vXgi9FH3}CyE1*=k1V8SpSatu_VNRNBNwzs0FEIhtaJq(fA$AZ|)R}4n@b99qKCzF^gbWgJ<9}BS&s1DC)T3;X1{TGn> z6A+zy+#U^v$-f>gtM3L2PR!P%Ewa5bW%c2CLDV8Qcjs=M&Tou`)g{-Oeoa&b55nc{g3?X)~*DUN`D37w31pW|y9(G*XD) zo;%glu|qGW&K_K8^6QSzb_%YFaQej`R9D3!>RhfR&v~yKc}*jL!b7n-7np3dxv z*APH*vFc{NnmUkpeb*Dp;&TqY$eH=^N|R>$x!cIj+(}!rOxH3?OjGa2o6pI){-WLy zbi|bzldJeZeI3cfVq1pjephK=ROnUg(Z%E~h;sBFQ8d*+Whf?CMKVc^e-oVVxj=xP zZ<<(i_X~2l3huL}BQc@P%@He@uo`S*i-ELYgrFNOvwvxcz^|h~#shx* z@p1qEY^D%fF|?NhEn=j3#L?Flx^@uOqqMVycyD$#!5dg3&e^@{gUs!Y1s z+@AZxozw#>lfav@z=+j+D53H1fa&dHIbAp<6ePw z7tcW;TQ+%?^Ja!!+t2|nCS8v29^5HYwQ{1UFp(s5u z88CF#D`v(uB>Hg2Y3p!Jl+s6C{Y0jh?!%+C0*n3m!M=0G#9>zwQhD+gl1rMn zDnO3zTpEY2r4oPEbZl-kOpXqqFvEhhIJBgWA!<)bEc;z9`5P z6xP}IeW(YaL_M_j>iu04d@z!eYPoTg=bWbK?!V^^jH2e!D;m`v4PC;CLkC60gL`L5 zYO`CLvaNA8dV`kTuyUP6B)M>T6=D7U0%u`1su=a#{btv}B{0@y%X6tg)G@l7;DvePVe~TUN$k!ArTu4(%0bcFpR!)08t*Py=cIs< zK3xIeIt;CIo!pZqb*mXEHLeiK3uOYcyVj_r zUn8;s2d`j=eMFl@)!KSWTN^4F*;Zs>bJzgwO2s0ydo!w%+l0Z%b-~5Gt4BCU&lsVu zm6-Z7hcoez=b#b2LGWGjFddlw&9vo~cL^g|K${y&-k-7Xnq@;drc!j9 z_O^*`%E4Mc=~K&NrERuKuZ8F5cOaCQ7BUKLb_M*<>N;faTclUieqV2OAgX0KMaek> zmB=$-zsw)>0n21}e~wgoYAI1o8895p-DIQUCYFzQEP4EQl^Su4@!F0CSpT_$wZSE| z9CYf1^ZacG;HB!hJA6r}wx`8)lj{a#t=;^|5NwbJdpjc!$|C$V^2!AvTE`+h!Kif-dusTs&1t%XfXUvSspShQIq);Ba@ zFZUpt*gxyMNvMRR;v}}7YersLLP44>HWG-N7eS4j)jYI#Ihcf{9U z9+U7|`h8&u{Y}0f7BrBk%n_WsK$d0)Qf%&x{oraia&G%?yE;U7#|@Or-|xEmwpiKo zt6nXgq79nL7Q5t= z(R6Wr%%PAVyZq!RZ1%NbmF9`g9}_-_R_FRxrVU13#kaPLI0pmJ>Au?5z72l}Mp*zon0X^7a8}CX{B5u%V_4mj0k}NvS+Gh6 zL^Nmz@@?tUrsdLEvMZcSiy!9ecr)$@;gboj(bwIfTxb)Ztu|YKD67#`Sml%raWMqf z_13kOO?d9vTuvZ|?5OPbeNen5thu$ElVA!6~(cWf=%6jw+B#}91(yKrR%zjCY4 z#YQiLU}ISk@~d^#as=C`*@%W&Pf8x5cf_>g^Cu4io*#AtC5P8rvIm=(VR5{N9mRd{ zv2{j{IYAf|C)1rW8`*4vukoDyO!-aL>&lnFy(w!mY-NpZ%VNRhsL6uOX%F_d9F=X1 z<(9Wv^~oi{xF&F5RK}lRXU-a29auiI-Bs+w{m_Px{2SA2hVd;{-y$!<@+pgIMHfAK z7)eElS-wLXHWDY)-~heb%L6CJO)s1Jm5!YcOvBI|NmxMM4CPy} zkWgF6s*pBculerVGtNtAjhr7~kD zcN5aKyWcHLyy|OGwHZurE{*0sNK!m&C%ZRy zNX-f4?&qhDo&UiAdMda+Rj;G8op&J(Du9dPaQlfXgU7T{SgtkiB?Lr!HEmddp{uEc4S28wfD!-GbOJz$|7&a;pp-}{ zaHLgd1OE!jWk<;^>uoQ6m-usfUkvHA`v0*@t~V6rf=3ti&hZU=qxYhvp{rh{`ZWAM E0L+_V9{>OV literal 0 HcmV?d00001 diff --git a/windows/deployment/windows-autopilot/policy-conflicts.md b/windows/deployment/windows-autopilot/policy-conflicts.md index 6b53e0c5e5..f4abf3e78c 100644 --- a/windows/deployment/windows-autopilot/policy-conflicts.md +++ b/windows/deployment/windows-autopilot/policy-conflicts.md @@ -29,11 +29,11 @@ There are a significant number of policy settings available for Windows 10, both PolicyMore information Device restriction / Password Policy -When certain DeviceLock policies, such as minimum password length and password complexity, or any similar group policy settings, including any that disable auto-logon, are applied to a device, and that device reboots during the device Enrollment Status Page (ESP), the out-of-box experience or user desktop auto-logon could fail unexpectantly. This is especially true for kiosk scenarios where passwords are automatically generated. +When certain DeviceLock policies, such as minimum password length and password complexity, or any similar group policy settings (including any that disable autologon) are applied to a device, and that device reboots during the device Enrollment Status Page (ESP), the out-of-box experience (OOBE) or user desktop autologon can fail unexpectantly. This is especially true for kiosk scenarios where passwords are automatically generated. Windows 10 Security Baseline / Administrator elevation prompt behavior
Windows 10 Security Baseline / Require admin approval mode for administrators -When modifying user account control (UAC) settings during the out-of-box experience (OOBE) using device Enrollment Status Page (ESP), additional UAC prompts may result, especially if the device reboots after these policies are applied enabling them to take effect. To work around this issue, the policies can be targeted to users instead of devices so that they apply later in the process. +When modifying user account control (UAC) settings during the OOBE using the device Enrollment Status Page (ESP), additional UAC prompts may result, especially if the device reboots after these policies are applied, enabling them to take effect. To work around this issue, the policies can be targeted to users instead of devices so that they apply later in the process. diff --git a/windows/deployment/windows-autopilot/troubleshooting.md b/windows/deployment/windows-autopilot/troubleshooting.md index a03e5fbb55..ff194c99ab 100644 --- a/windows/deployment/windows-autopilot/troubleshooting.md +++ b/windows/deployment/windows-autopilot/troubleshooting.md @@ -25,34 +25,34 @@ Windows Autopilot is designed to simplify all parts of the Windows device lifecy ## Troubleshooting process -Regardless of whether performing user-driven or self-deploying device deployments, the troubleshooting process is the mostly the same. It is useful to understand the flow for a specific device: +Whether you are performing user-driven or self-deploying device deployments, the troubleshooting process is about the same. It is always useful to understand the flow for a specific device: -- Network connection established. This can be a wireless (Wi-fi) or wired (Ethernet) connection. -- Windows Autopilot profile downloaded. Whether using a wired connection or manually establishing a wireless connection, the Windows Autopilot profile will be downloaded from the Autopilot deployment service as soon as the network connection is in place. -- User authentication. When performing a user-driven deployment, the user will enter their Azure Active Directory credentials, which will be validated. -- Azure Active Directory join. For user-driven deployments, the device will be joined to Azure AD using the specified user credentials. For self-deploying scenarios, the device will be joined without specifying any user credentials. -- Automatic MDM enrollment. As part of the Azure AD join process, the device will enroll in the MDM service configured in Azure AD (e.g. Microsoft Intune). +- A network connection is established. This can be a wireless (Wi-fi) or wired (Ethernet) connection. +- The Windows Autopilot profile is downloaded. Whether using a wired connection or manually establishing a wireless connection, the Windows Autopilot profile will be downloaded from the Autopilot deployment service as soon as the network connection is in place. +- User authentication occurs. When performing a user-driven deployment, the user will enter their Azure Active Directory credentials, which will be validated. +- Azure Active Directory join occurs. For user-driven deployments, the device will be joined to Azure AD using the specified user credentials. For self-deploying scenarios, the device will be joined without specifying any user credentials. +- Automatic MDM enrollment occurs. As part of the Azure AD join process, the device will enroll in the MDM service configured in Azure AD (for example, Microsoft Intune). - Settings are applied. If the [enrollment status page](enrollment-status.md) is configured, most settings will be applied while the enrollment status page is displayed. If not configured or available, settings will be applied after the user is signed in. For troubleshooting, key activities to perform are: -- Configuration. Has Azure Active Directory and Microsoft Intune (or an equivalent MDM service) been configured as specified in [Windows Autopilot configuration requirements](windows-autopilot-requirements.md)? -- Network connectivity. Can the device access the services described in [Windows Autopilot networking requirements](windows-autopilot-requirements.md)? -- Autopilot OOBE behavior. Were only the expected out-of-box experience screens displayed? Was the Azure AD credentials page customized with organization-specific details as expected? -- Azure AD join issues. Was the device able to join Azure Active Directory? -- MDM enrollment issues. Was the device able to enroll in Microsoft Intune (or an equivalent MDM service)? +- Configuration: Has Azure Active Directory and Microsoft Intune (or an equivalent MDM service) been configured as specified in [Windows Autopilot configuration requirements](windows-autopilot-requirements.md)? +- Network connectivity: Can the device access the services described in [Windows Autopilot networking requirements](windows-autopilot-requirements.md)? +- Autopilot OOBE behavior: Were only the expected out-of-box experience screens displayed? Was the Azure AD credentials page customized with organization-specific details as expected? +- Azure AD join issues: Was the device able to join Azure Active Directory? +- MDM enrollment issues: Was the device able to enroll in Microsoft Intune (or an equivalent MDM service)? ## Troubleshooting Autopilot Device Import ### Clicking Import after selecting CSV does nothing, '400' error appears in network trace with error body **"Cannot convert the literal '[DEVICEHASH]' to the expected type 'Edm.Binary'"** -This error points to the device hash being incorrectly formatted. This could be caused by anything that corrupts the collected hash, but one possibility is that the hash itself, even if completely valid, fails to be decoded. +This error points to the device hash being incorrectly formatted. This could be caused by anything that corrupts the collected hash, but one possibility is that the hash itself (even if it is completely valid) fails to be decoded. -The device hash is Base64. At the device level, it's encoded as unpadded Base64, but Autopilot expects padded Base64. In most cases, it seems the payload lines up to not require padding, so the process works, but sometimes it doesn't line up cleanly and padding is necessary. This is when you get the error above. Powershell's Base64 decoder also expects padded Base64, so we can use that to validate that the hash is properly padded. +The device hash is Base64. At the device level, it's encoded as unpadded Base64, but Autopilot expects padded Base64. In most cases, it seems the payload lines up to not require padding, so the process works, but sometimes it doesn't line up cleanly and padding is necessary. This is when you get the error above. PowerShell's Base64 decoder also expects padded Base64, so we can use that to validate that the hash is properly padded. -The "A" characters at the end of the hash are effectively empty data - Each character in Base64 is 6 bits, A in Base64 is 6 bits equal to 0. Deleting or adding "A"s at the end doesn't change the actual payload data. +The "A" characters at the end of the hash are effectively empty data - Each character in Base64 is 6 bits, A in Base64 is 6 bits equal to 0. Deleting or adding **A**'s at the end doesn't change the actual payload data. -To fix this, we'll need to modify the hash, then test the new value, until powershell succeeds in decoding the hash. The result is mostly illegible, this is fine - we're just looking for it to not throw the error "Invalid length for a Base-64 char array or string". +To fix this, we'll need to modify the hash, then test the new value, until PowerShell succeeds in decoding the hash. The result is mostly illegible, this is fine - we're just looking for it to not throw the error "Invalid length for a Base-64 char array or string". To test the base64, you can use the following: ```powershell @@ -88,35 +88,35 @@ If the expected Autopilot behavior does not occur during the out-of-box experien ### Windows 10 version 1803 and above -To see details related to the Autopilot profile settings and OOBE flow, Windows 10 version 1803 and above adds event log entries. These can be viewed using Event Viewer, navigating to the log at **Application and Services Logs –> Microsoft –> Windows –> Provisioning-Diagnostics-Provider –> AutoPilot** for versions before 1903, or **Application and Services Logs –> Microsoft –> Windows –> ModernDeployment-Diagnostics-Provider –> AutoPilot** for 1903 and above. The following events may be recorded, depending on the scenario and profile configuration. +To see details related to the Autopilot profile settings and OOBE flow, Windows 10 version 1803 and above adds event log entries. These can be viewed using Event Viewer, navigating to the log at **Application and Services Logs –> Microsoft –> Windows –> Provisioning-Diagnostics-Provider –> Autopilot** for versions before 1903, or **Application and Services Logs –> Microsoft –> Windows –> ModernDeployment-Diagnostics-Provider –> Autopilot** for 1903 and above. The following events may be recorded, depending on the scenario and profile configuration. | Event ID | Type | Description | |----------|------|-------------| -| 100 | Warning | “AutoPilot policy [name] not found.” This is typically a temporary problem, while the device is waiting for an Autopilot profile to be downloaded. | -| 101 | Info | “AutoPilotGetPolicyDwordByName succeeded: policy name = [setting name]; policy value [value].” This shows Autopilot retrieving and processing numeric OOBE settings. | -| 103 | Info | “AutoPilotGetPolicyStringByName succeeded: policy name = [name]; value = [value].” This shows Autopilot retrieving and processing OOBE setting strings such as the Azure AD tenant name. | -| 109 | Info | “AutoPilotGetOobeSettingsOverride succeeded: OOBE setting [setting name]; state = [state].” This shows Autopilot retrieving and processing state-related OOBE settings. | -| 111 | Info | “AutoPilotRetrieveSettings succeeded.” This means that the settings stored in the Autopilot profile that control the OOBE behavior have been retrieved successfully. | -| 153 | Info | “AutoPilotManager reported the state changed from [original state] to [new state].” Typically this should say “ProfileState_Unknown” to “ProfileState_Available” to show that a profile was available for the device and downloaded, so the device is ready to be deployed using Autopilot. | -| 160 | Info | “AutoPilotRetrieveSettings beginning acquisition.” This shows that Autopilot is getting ready to download the needed Autopilot profile settings. | -| 161 | Info | “AutoPilotManager retrieve settings succeeded.” The Autopilot profile was successfully downloaded. | -| 163 | Info | “AutoPilotManager determined download is not required and the device is already provisioned. Clean or reset the device to change this.” This message indicates that an Autopilot profile is resident on the device; it typically would only be removed by the **Sysprep /Generalize** process. | -| 164 | Info | “AutoPilotManager determined Internet is available to attempt policy download.” | -| 171 | Error | “AutoPilotManager failed to set TPM identity confirmed. HRESULT=[error code].” This indicates an issue performing TPM attestation, needed to complete the self-deploying mode process. | -| 172 | Error | “AutoPilotManager failed to set AutoPilot profile as available. HRESULT=[error code].” This is typically related to event ID 171. | +| 100 | Warning | “Autopilot policy [name] not found.” This is typically a temporary problem, while the device is waiting for an Autopilot profile to be downloaded. | +| 101 | Info | “AutopilotGetPolicyDwordByName succeeded: policy name = [setting name]; policy value [value].” This shows Autopilot retrieving and processing numeric OOBE settings. | +| 103 | Info | “AutopilotGetPolicyStringByName succeeded: policy name = [name]; value = [value].” This shows Autopilot retrieving and processing OOBE setting strings such as the Azure AD tenant name. | +| 109 | Info | “AutopilotGetOobeSettingsOverride succeeded: OOBE setting [setting name]; state = [state].” This shows Autopilot retrieving and processing state-related OOBE settings. | +| 111 | Info | “AutopilotRetrieveSettings succeeded.” This means that the settings stored in the Autopilot profile that control the OOBE behavior have been retrieved successfully. | +| 153 | Info | “AutopilotManager reported the state changed from [original state] to [new state].” Typically this should say “ProfileState_Unknown” to “ProfileState_Available” to show that a profile was available for the device and downloaded, so the device is ready to be deployed using Autopilot. | +| 160 | Info | “AutopilotRetrieveSettings beginning acquisition.” This shows that Autopilot is getting ready to download the needed Autopilot profile settings. | +| 161 | Info | “AutopilotManager retrieve settings succeeded.” The Autopilot profile was successfully downloaded. | +| 163 | Info | “AutopilotManager determined download is not required and the device is already provisioned. Clean or reset the device to change this.” This message indicates that an Autopilot profile is resident on the device; it typically would only be removed by the **Sysprep /Generalize** process. | +| 164 | Info | “AutopilotManager determined Internet is available to attempt policy download.” | +| 171 | Error | “AutopilotManager failed to set TPM identity confirmed. HRESULT=[error code].” This indicates an issue performing TPM attestation, needed to complete the self-deploying mode process. | +| 172 | Error | “AutopilotManager failed to set Autopilot profile as available. HRESULT=[error code].” This is typically related to event ID 171. | In addition to the event log entries, the registry and ETW trace options described below also work with Windows 10 version 1803 and above. ### Windows 10 version 1709 and above -On Windows 10 version 1709 and above, information about the Autopilot profile settings are stored in the registry on the device after they are received from the Autopilot deployment service. These can be found at **HKLM\SOFTWARE\Microsoft\Provisioning\Diagnostics\AutoPilot**. Available registry entries include: +On Windows 10 version 1709 and above, information about the Autopilot profile settings are stored in the registry on the device after they are received from the Autopilot deployment service. These can be found at **HKLM\SOFTWARE\Microsoft\Provisioning\Diagnostics\Autopilot**. Available registry entries include: | Value | Description | |-------|-------------| | AadTenantId | The GUID of the Azure AD tenant the user signed into. This should match the tenant that the device was registered with; if it does not match the user will receive an error. | -| CloudAssignedTenantDomain | The Azure AD tenant the device has been registered with, e.g. “contosomn.onmicrosoft.com.” If the device is not registered with Autopilot, this value will be blank. | +| CloudAssignedTenantDomain | The Azure AD tenant the device has been registered with, for example, “contosomn.onmicrosoft.com.” If the device is not registered with Autopilot, this value will be blank. | | CloudAssignedTenantId | The GUID of the Azure AD tenant the device has been registered with (the GUID corresponds to the tenant domain from the CloudAssignedTenantDomain registry value). If the device isn’t registered with Autopilot, this value will be blank.| -| IsAutoPilotDisabled | If set to 1, this indicates that the device is not registered with Autopilot. This could also indicate that the Autopilot profile could not be downloaded due to network connectivity or firewall issues, or network timeouts. | +| IsAutopilotDisabled | If set to 1, this indicates that the device is not registered with Autopilot. This could also indicate that the Autopilot profile could not be downloaded due to network connectivity or firewall issues, or network timeouts. | | TenantMatched | This will be set to 1 if the tenant ID of the user matches the tenant ID that the device was registered with. If this is 0, the user would be shown an error and forced to start over. | | CloudAssignedOobeConfig | This is a bitmap that shows which Autopilot settings were configured. Values include: SkipCortanaOptIn = 1, OobeUserNotLocalAdmin = 2, SkipExpressSettings = 4, SkipOemRegistration = 8, SkipEula = 16 | @@ -128,7 +128,7 @@ On devices running a [supported version](https://docs.microsoft.com/windows/rele The most common issue joining a device to Azure AD is related to Azure AD permissions. Ensure [the correct configuration is in place](windows-autopilot-requirements.md) to allow users to join devices to Azure AD. Errors can also happen if the user has exceeded the number of devices that they are allowed to join, as configured in Azure AD. -An Azure AD device is created upon import - it's important that this object not be deleted. It acts as Autopilot's anchor in AAD for group membership and targeting (including the profile) and can lead to join errors if it's deleted. Once this object has been deleted, to fix the issue, deleting and reimporting this autopilot hash will be necessary so it can recreate the associated object. +An Azure AD device is created upon import - it's important that this object is not deleted. It acts as Autopilot's anchor in AAD for group membership and targeting (including the profile) and can lead to join errors if it's deleted. Once this object has been deleted, to fix the issue, deleting and reimporting this autopilot hash will be necessary so it can recreate the associated object. Error code 801C0003 will typically be reported on an error page titled "Something went wrong". This error means that the Azure AD join failed. @@ -138,13 +138,13 @@ See [this knowledge base article](https://support.microsoft.com/help/4089533/tro Error code 80180018 will typically be reported on an error page titled "Something went wrong". This error means that the MDM enrollment failed. -If Autopilot Reset fails immediately with an error "Ran into trouble. Please sign in with an administrator account to see why and reset manually," see [Troubleshoot Autopilot Reset](https://docs.microsoft.com/education/windows/autopilot-reset#troubleshoot-autopilot-reset) for more help. +If Autopilot Reset fails immediately with an error **Ran into trouble. Please sign in with an administrator account to see why and reset manually**, see [Troubleshoot Autopilot Reset](https://docs.microsoft.com/education/windows/autopilot-reset#troubleshoot-autopilot-reset) for more help. ## Profile download When an Internet-connected Windows 10 device boots up, it will attempt to connect to the Autopilot service and download an Autopilot profile. Note: It is important that a profile exists at this stage so that a blank profile is not cached locally on the PC. To remove the currently cached local profile in Windows 10 version 1803 and earlier, it is necessary to re-generalize the OS using **sysprep /generalize /oobe**, reinstall the OS, or re-image the PC. In Windows 10 version 1809 and later, you can retrieve a new profile by rebooting the PC. -When a profile is downloaded depends on the version of Windows 10 that is running on the PC. See the following table. +When a profile is downloaded depends upon the version of Windows 10 that is running on the PC. See the following table. | Windows 10 version | Profile download behavior | | --- | --- | diff --git a/windows/deployment/windows-autopilot/windows-autopilot-whats-new.md b/windows/deployment/windows-autopilot/windows-autopilot-whats-new.md index b10120467d..8d69cc5d75 100644 --- a/windows/deployment/windows-autopilot/windows-autopilot-whats-new.md +++ b/windows/deployment/windows-autopilot/windows-autopilot-whats-new.md @@ -29,6 +29,12 @@ The following [Windows Autopilot updates](autopilot-update.md) are available. ** No updates are available yet. Check back here later for more information. +## New in Windows 10, version 2004 + +With this release, you can configure Windows Autopilot [user-driven](user-driven.md) Hybrid Azure Active Directory join with VPN support. This support is also backported to Windows 10, version 1909 and 1903. + +If you configure the language settings in the Autopilot profile and the device is connected to Ethernet, all scenarios will now skip the language, locale, and keyboard pages. In previous versions, this was only supported with self-deploying profiles. + ## New in Windows 10, version 1903 [Windows Autopilot for white glove deployment](white-glove.md) is new in Windows 10, version 1903. See the following video: From dba4ac4c10f4e6fd020120fdd446dc6639717d27 Mon Sep 17 00:00:00 2001 From: Sinead O'Sullivan Date: Wed, 24 Jun 2020 15:30:15 +0100 Subject: [PATCH 032/589] Create windows-public-preview-terms.md --- .../privacy/windows-public-preview-terms.md | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 windows/privacy/windows-public-preview-terms.md diff --git a/windows/privacy/windows-public-preview-terms.md b/windows/privacy/windows-public-preview-terms.md new file mode 100644 index 0000000000..911431881b --- /dev/null +++ b/windows/privacy/windows-public-preview-terms.md @@ -0,0 +1,19 @@ +--- +title: Windows Public Preview Terms +description: This article provides information on the Windows public preview terms of service. +keywords: privacy +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: high +audience: ITPro +ms.author: daniha +author: DaniHalfin +manager: dansimp +ms.collection: M365-security-compliance +ms.topic: article +--- + +# WINDOWS PUBLIC PREVIEW TERMS + From b35bd2c197c5758b5e07337c2fefa520afc9e557 Mon Sep 17 00:00:00 2001 From: Sinead O'Sullivan Date: Wed, 24 Jun 2020 19:17:49 +0100 Subject: [PATCH 033/589] Delete windows-public-preview-terms.md --- .../privacy/windows-public-preview-terms.md | 19 ------------------- 1 file changed, 19 deletions(-) delete mode 100644 windows/privacy/windows-public-preview-terms.md diff --git a/windows/privacy/windows-public-preview-terms.md b/windows/privacy/windows-public-preview-terms.md deleted file mode 100644 index 911431881b..0000000000 --- a/windows/privacy/windows-public-preview-terms.md +++ /dev/null @@ -1,19 +0,0 @@ ---- -title: Windows Public Preview Terms -description: This article provides information on the Windows public preview terms of service. -keywords: privacy -ms.prod: w10 -ms.mktglfcycl: manage -ms.sitesec: library -ms.pagetype: security -ms.localizationpriority: high -audience: ITPro -ms.author: daniha -author: DaniHalfin -manager: dansimp -ms.collection: M365-security-compliance -ms.topic: article ---- - -# WINDOWS PUBLIC PREVIEW TERMS - From 032ab23a764e62a1bc39a8e69e51f8d9325592c4 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 25 Jun 2020 11:11:06 +0500 Subject: [PATCH 034/589] Note Addition As suggested, added a note in the documents regarding usage of 1903 settings in 1909 version as 1909 is incremental version of 1903. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/5930 --- ...-windows-operating-system-components-to-microsoft-services.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index 7d7448f4d5..d72c9f1fbd 100644 --- a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -30,6 +30,7 @@ This article describes the network connections that Windows 10 components make t Microsoft provides a [Windows Restricted Traffic Limited Functionality Baseline](https://go.microsoft.com/fwlink/?linkid=828887) package that will allow your organization to quickly configure the settings covered in this document to restrict connections from Windows 10 to Microsoft. The Windows Restricted Traffic Limited Baseline is based on [Group Policy Administrative Template](https://support.microsoft.com/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra) functionality and the package you download contains further instructions on how to deploy to devices in your organization. Since some of the settings can reduce the functionality and security configuration of your device, **before deploying Windows Restricted Traffic Limited Functionality Baseline** make sure you **choose the right settings configuration for your environment** and **ensure that Windows and Windows Defender are fully up to date**. Failure to do so may result in errors or unexpected behavior. You should not extract this package to the windows\system32 folder because it will not apply correctly. >[!IMPORTANT] +> - The downloadable 1903 scripts/settings can be used on 1909 devices. > - The Allowed Traffic endpoints are listed here: [Allowed Traffic](#bkmk-allowedtraffic) > - CRL (Certificate Revocation List) and OCSP (Online Certificate Status Protocol) network traffic cannot be disabled and will still show up in network traces. CRL and OCSP checks are made to the issuing certificate authorities. Microsoft is one of these authorities. There are many others such as DigiCert, Thawte, Google, Symantec, and VeriSign. > - For security reasons, it is important to take care in deciding which settings to configure as some of them may result in a less secure device. Examples of settings that can lead to a less secure device configuration include: Windows Update, Automatic Root Certificates Update, and Windows Defender. Accordingly, we do not recommend disabling any of these features. From 40254907157f3e6c999a6f04b51f9388d0cea212 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 25 Jun 2020 12:31:59 +0500 Subject: [PATCH 035/589] Update windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- ...windows-operating-system-components-to-microsoft-services.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index d72c9f1fbd..d5c9df4cc7 100644 --- a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -30,7 +30,7 @@ This article describes the network connections that Windows 10 components make t Microsoft provides a [Windows Restricted Traffic Limited Functionality Baseline](https://go.microsoft.com/fwlink/?linkid=828887) package that will allow your organization to quickly configure the settings covered in this document to restrict connections from Windows 10 to Microsoft. The Windows Restricted Traffic Limited Baseline is based on [Group Policy Administrative Template](https://support.microsoft.com/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra) functionality and the package you download contains further instructions on how to deploy to devices in your organization. Since some of the settings can reduce the functionality and security configuration of your device, **before deploying Windows Restricted Traffic Limited Functionality Baseline** make sure you **choose the right settings configuration for your environment** and **ensure that Windows and Windows Defender are fully up to date**. Failure to do so may result in errors or unexpected behavior. You should not extract this package to the windows\system32 folder because it will not apply correctly. >[!IMPORTANT] -> - The downloadable 1903 scripts/settings can be used on 1909 devices. +> - The downloadable Windows 10, version 1903 scripts/settings can be used on Windows 10, version 1909 devices. > - The Allowed Traffic endpoints are listed here: [Allowed Traffic](#bkmk-allowedtraffic) > - CRL (Certificate Revocation List) and OCSP (Online Certificate Status Protocol) network traffic cannot be disabled and will still show up in network traces. CRL and OCSP checks are made to the issuing certificate authorities. Microsoft is one of these authorities. There are many others such as DigiCert, Thawte, Google, Symantec, and VeriSign. > - For security reasons, it is important to take care in deciding which settings to configure as some of them may result in a less secure device. Examples of settings that can lead to a less secure device configuration include: Windows Update, Automatic Root Certificates Update, and Windows Defender. Accordingly, we do not recommend disabling any of these features. From 66fb73d251dbbcd7e349c1e84bd6fa43b365df4e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Isma=C3=ABl=20L?= Date: Fri, 26 Jun 2020 15:59:07 +0200 Subject: [PATCH 036/589] Add hardcoded FOD FileName For offline scenarios, the name must be Microsoft-Windows-Holographic-Desktop-FOD-Package~31bf3856ad364e35~amd64~~.cab For 1903/1909, the file name is Microsoft-Windows-Holographic-Desktop-FOD-Package-31bf3856ad364e35-amd64.cab and MixedReality installation will fail. This is because the Filename is hardcoded in FOD Metadata and the file must be Microsoft-Windows-Holographic-Desktop-FOD-Package~31bf3856ad364e35~amd64~~.cab --- windows/application-management/manage-windows-mixed-reality.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/application-management/manage-windows-mixed-reality.md b/windows/application-management/manage-windows-mixed-reality.md index ff4fbd3363..48f7a770aa 100644 --- a/windows/application-management/manage-windows-mixed-reality.md +++ b/windows/application-management/manage-windows-mixed-reality.md @@ -44,6 +44,8 @@ Organizations that use Windows Server Update Services (WSUS) must take action to Add-Package Dism /Online /add-package /packagepath:(path) ``` + >[!NOTE] + >You must rename the FOD .CAB file to : **Microsoft-Windows-Holographic-Desktop-FOD-Package\~31bf3856ad364e35\~amd64\~~.cab** c. In **Settings** > **Update & Security** > **Windows Update**, select **Check for updates**. From ea00e97748aa542aa32fbcbe4decdf92c99921c6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Isma=C3=ABl=20L?= Date: Fri, 26 Jun 2020 16:19:42 +0200 Subject: [PATCH 037/589] Update manage-windows-mixed-reality.md --- windows/application-management/manage-windows-mixed-reality.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/application-management/manage-windows-mixed-reality.md b/windows/application-management/manage-windows-mixed-reality.md index 48f7a770aa..35c17cbf6a 100644 --- a/windows/application-management/manage-windows-mixed-reality.md +++ b/windows/application-management/manage-windows-mixed-reality.md @@ -45,7 +45,7 @@ Organizations that use Windows Server Update Services (WSUS) must take action to Dism /Online /add-package /packagepath:(path) ``` >[!NOTE] - >You must rename the FOD .CAB file to : **Microsoft-Windows-Holographic-Desktop-FOD-Package\~31bf3856ad364e35\~amd64\~~.cab** + >You must rename the FOD .CAB file to : **Microsoft-Windows-Holographic-Desktop-FOD-Package\~31bf3856ad364e35\~amd64\~\~.cab** c. In **Settings** > **Update & Security** > **Windows Update**, select **Check for updates**. From 81a6bc9d9519cf864c9cdfa885d4f9d98244a720 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Mon, 29 Jun 2020 17:50:00 -0700 Subject: [PATCH 038/589] new hva section --- .../threat-and-vuln-mgt-scenarios.md | 23 +++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md index b099ac0a4c..42546873f4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -97,6 +97,29 @@ To view a list of version that have reached end of support, or end or support so After you have identified which software and software versions are vulnerable due to its end-of-support status, remediate them to lower your organizations exposure to vulnerabilities and advanced persistent threats. See [Remediation and exception](tvm-remediation.md) for details. +## Define a device's value to the organization + +Defining a device’s value helps you differentiate between asset priorities. The device value is used to incorporate the risk appetite of an individual asset into the threat and vulnerability management exposure score calculation, so devices marked as “high value” will receive more weight. + +Device value options: + +- Low +- Normal (Default) +- High + +Examples of machines that should be mark as high value: + +- Domain controllers, Active Directory +- Internet facing machines +- VIP machines +- Machines hosting internal/external production services + +### Set device value + +1. Navigate into any machine page +2. Select Machine Value and define a value +3. Review the value in the machine tag area + ## Related topics - [Threat & Vulnerability Management overview](next-gen-threat-and-vuln-mgt.md) From 6c47ac8ede4345730243f6fcc2dab07f081fe15e Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Tue, 30 Jun 2020 21:21:04 +0500 Subject: [PATCH 039/589] Update virtual-smart-card-tpmvscmgr.md --- .../virtual-smart-cards/virtual-smart-card-tpmvscmgr.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/virtual-smart-cards/virtual-smart-card-tpmvscmgr.md b/windows/security/identity-protection/virtual-smart-cards/virtual-smart-card-tpmvscmgr.md index bb1cf1508f..a979d2b781 100644 --- a/windows/security/identity-protection/virtual-smart-cards/virtual-smart-card-tpmvscmgr.md +++ b/windows/security/identity-protection/virtual-smart-cards/virtual-smart-card-tpmvscmgr.md @@ -35,7 +35,7 @@ The Create command sets up new virtual smart cards on the user’s system. It re | Parameter | Description | |-----------|-------------| | /name | Required. Indicates the name of the new virtual smart card. | -| /AdminKey | Indicates the desired administrator key that can be used to reset the PIN of the card if the user forgets the PIN.
**DEFAULT** Specifies the default value of 010203040506070801020304050607080102030405060708.
**PROMPT**  Prompts the user to enter a value for the administrator key.
**RANDOM**  Results in a random setting for the administrator key for a card that is not returned to the user. This creates a card that might not be manageable by using smart card management tools. When generated with RANDOM, the administrator key must be entered as 48 hexadecimal characters. | +| /AdminKey | Indicates the desired administrator key that can be used to reset the PIN of the card if the user forgets the PIN.
**DEFAULT** Specifies the default value of 010203040506070801020304050607080102030405060708.
**PROMPT**  Prompts the user to enter a value for the administrator key.
**RANDOM**  Results in a random setting for the administrator key for a card that is not returned to the user. This creates a card that might not be manageable by using smart card management tools. When generated with RANDOM, the administrator key is set as 48 hexadecimal characters. | | /PIN | Indicates desired user PIN value.
**DEFAULT**  Specifies the default PIN of 12345678.
**PROMPT**  Prompts the user to enter a PIN at the command line. The PIN must be a minimum of eight characters, and it can contain numerals, characters, and special characters. | | /PUK | Indicates the desired PIN Unlock Key (PUK) value. The PUK value must be a minimum of eight characters, and it can contain numerals, characters, and special characters. If the parameter is omitted, the card is created without a PUK.
**DEFAULT**  Specifies the default PUK of 12345678.
**PROMPT**  Prompts the user to enter a PUK at the command line. | | /generate | Generates the files in storage that are necessary for the virtual smart card to function. If the /generate parameter is omitted, it is equivalent to creating a card without this file system. A card without a file system can be managed only by a smart card management system such as Microsoft Endpoint Configuration Manager. | From f005c7e7c34884f19835f1202b2c8fb3e2313838 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 30 Jun 2020 17:26:37 -0700 Subject: [PATCH 040/589] Updated per task 4252109 --- .../configure-server-endpoints.md | 55 ++++++++++--------- 1 file changed, 28 insertions(+), 27 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md b/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md index 642a65bde0..0f7e29846e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md @@ -1,6 +1,6 @@ --- -title: Onboard servers to the Microsoft Defender ATP service -description: Onboard servers so that they can send sensor data to the Microsoft Defender ATP sensor. +title: Onboard Windows servers to the Microsoft Defender ATP service +description: Onboard Windows servers so that they can send sensor data to the Microsoft Defender ATP sensor. keywords: onboard server, server, 2012r2, 2016, 2019, server onboarding, device management, configure Windows ATP servers, onboard Microsoft Defender Advanced Threat Protection servers search.product: eADQiWindows 10XVcnh search.appverid: met150 @@ -17,7 +17,7 @@ ms.collection: M365-security-compliance ms.topic: article --- -# Onboard servers to the Microsoft Defender ATP service +# Onboard Windows servers to the Microsoft Defender ATP service **Applies to:** @@ -34,7 +34,7 @@ ms.topic: article Microsoft Defender ATP extends support to also include the Windows Server operating system. This support provides advanced attack detection and investigation capabilities seamlessly through the Microsoft Defender Security Center console. -The service supports the onboarding of the following servers: +The service supports the onboarding of the following Windows servers: - Windows Server 2008 R2 SP1 - Windows Server 2012 R2 - Windows Server 2016 @@ -44,6 +44,8 @@ The service supports the onboarding of the following servers: For a practical guidance on what needs to be in place for licensing and infrastructure, see [Protecting Windows Servers with Microsoft Defender ATP](https://techcommunity.microsoft.com/t5/What-s-New/Protecting-Windows-Server-with-Windows-Defender-ATP/m-p/267114#M128). +For guidance on how to download and use Windows Security Baselines for Windows servers, see [Windows Security Baselines](https://docs.microsoft.com/windows/device-security/windows-security-baselines). + ## Windows Server 2008 R2 SP1, Windows Server 2012 R2, and Windows Server 2016 @@ -53,11 +55,11 @@ There are two options to onboard Windows Server 2008 R2 SP1, Windows Server 2012 - **Option 2**: Onboard through Azure Security Center > [!NOTE] -> Microsoft defender ATP standalone server license is required, per node, in order to onboard the server through Microsoft Defender Security Center (Option 1), or an Azure Security Center Standard license is required, per node, in order to onboard a server through Azure Security Center (Option 2), see [Supported features available in Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-services). +> Microsoft defender ATP standalone server license is required, per node, in order to onboard a Windows server through Microsoft Defender Security Center (Option 1), or an Azure Security Center Standard license is required, per node, in order to onboard a Windows server through Azure Security Center (Option 2), see [Supported features available in Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-services). -### Option 1: Onboard servers through Microsoft Defender Security Center -You'll need to take the following steps if you choose to onboard servers through Microsoft Defender Security Center. +### Option 1: Onboard Windows servers through Microsoft Defender Security Center +You'll need to take the following steps if you choose to onboard Windows servers through Microsoft Defender Security Center. - For Windows Server 2008 R2 SP1 or Windows Server 2012 R2, ensure that you install the following hotfix: - [Update for customer experience and diagnostic telemetry](https://support.microsoft.com/en-us/help/3080149/update-for-customer-experience-and-diagnostic-telemetry) @@ -104,25 +106,24 @@ The following steps are required to enable this integration: 1. Download the agent setup file: [Windows 64-bit agent](https://go.microsoft.com/fwlink/?LinkId=828603). -2. Using the Workspace ID and Workspace key provided in the previous procedure, choose any of the following installation methods to install the agent on the server: +2. Using the Workspace ID and Workspace key provided in the previous procedure, choose any of the following installation methods to install the agent on the Windows server: - [Manually install the agent using setup](https://docs.microsoft.com/azure/log-analytics/log-analytics-windows-agents#install-the-agent-using-setup)
On the **Agent Setup Options** page, choose **Connect the agent to Azure Log Analytics (OMS)**. - [Install the agent using the command line](https://docs.microsoft.com/azure/log-analytics/log-analytics-windows-agents#install-the-agent-using-the-command-line) and [configure the agent using a script](https://docs.microsoft.com/azure/log-analytics/log-analytics-windows-agents#add-a-workspace-using-a-script). 3. You'll need to configure proxy settings for the Microsoft Monitoring Agent. For more information, see [Configure proxy settings](configure-proxy-internet.md). -Once completed, you should see onboarded servers in the portal within an hour. +Once completed, you should see onboarded Windows servers in the portal within an hour. -### Configure server proxy and Internet connectivity settings +### Configure Windows server proxy and Internet connectivity settings - Each Windows server must be able to connect to the Internet using HTTPS. This connection can be direct, using a proxy, or through the OMS Gateway. - If a proxy or firewall is blocking all traffic by default and allowing only specific domains through or HTTPS scanning (SSL inspection) is enabled, make sure that you [enable access to Microsoft Defender ATP service URLs](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet#enable-access-to-microsoft-defender-atp-service-urls-in-the-proxy-server). - -### Option 2: Onboard servers through Azure Security Center +### Option 2: Onboard Windows servers through Azure Security Center 1. In the navigation pane, select **Settings** > **Device management** > **Onboarding**. 2. Select Windows Server 2008 R2 SP1, 2012 R2 and 2016 as the operating system. @@ -131,7 +132,6 @@ Once completed, you should see onboarded servers in the portal within an hour. 4. Follow the onboarding instructions in [Microsoft Defender Advanced Threat Protection with Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-wdatp). - ## Windows Server (SAC) version 1803, Windows Server 2019, and Windows Server 2019 Core edition To onboard Windows Server (SAC) version 1803, Windows Server 2019, or Windows Server 2019 Core edition, refer to the supported methods and versions below. @@ -147,9 +147,9 @@ Supported tools include: For more information, see [Onboard Windows 10 devices](configure-endpoints.md). -Support for Windows Server, provide deeper insight into activities happening on the server, coverage for kernel and memory attack detection, and enables response actions on Windows Server endpoint as well. +Support for Windows Server, provide deeper insight into activities happening on the Windows server, coverage for kernel and memory attack detection, and enables response actions on Windows Server endpoint as well. -1. Configure Microsoft Defender ATP onboarding settings on the server. For more information, see [Onboard Windows 10 devices](configure-endpoints.md). +1. Configure Microsoft Defender ATP onboarding settings on the Windows server. For more information, see [Onboard Windows 10 devices](configure-endpoints.md). 2. If you're running a third-party antimalware solution, you'll need to apply the following Microsoft Defender AV passive mode settings. Verify that it was configured correctly: @@ -175,9 +175,11 @@ Support for Windows Server, provide deeper insight into activities happening on If the result is 'The specified service does not exist as an installed service', then you'll need to install Microsoft Defender AV. For more information, see [Microsoft Defender Antivirus in Windows 10](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10). +## Onboard Windows servers using Microsoft Endpoint Configuration Manager version 2002 and later +You can onboard Windows Server 2012 R2, Windows Server 2016, Windows Server 2016, version 1803, and Windows Server 2019 using Microsoft Endpoint Configuration Manager version 2002 and later. For more information, see [Microsoft Defender Advanced Threat Protection in Microsoft Endpoint Configuration Manager current branch](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection). ## Integration with Azure Security Center -Microsoft Defender ATP can integrate with Azure Security Center to provide a comprehensive server protection solution. With this integration, Azure Security Center can leverage the power of Microsoft Defender ATP to provide improved threat detection for Windows Servers. +Microsoft Defender ATP can integrate with Azure Security Center to provide a comprehensive Windows server protection solution. With this integration, Azure Security Center can leverage the power of Microsoft Defender ATP to provide improved threat detection for Windows Servers. The following capabilities are included in this integration: - Automated onboarding - Microsoft Defender ATP sensor is automatically enabled on Windows Servers that are onboarded to Azure Security Center. For more information on Azure Security Center onboarding, see [Onboarding to Azure Security Center Standard for enhanced security](https://docs.microsoft.com/azure/security-center/security-center-onboarding). @@ -185,31 +187,31 @@ The following capabilities are included in this integration: > [!NOTE] > Automated onboarding is only applicable for Windows Server 2008 R2 SP1, Windows Server 2012 R2, and Windows Server 2016. -- Servers monitored by Azure Security Center will also be available in Microsoft Defender ATP - Azure Security Center seamlessly connects to the Microsoft Defender ATP tenant, providing a single view across clients and servers. In addition, Microsoft Defender ATP alerts will be available in the Azure Security Center console. +- Windows servers monitored by Azure Security Center will also be available in Microsoft Defender ATP - Azure Security Center seamlessly connects to the Microsoft Defender ATP tenant, providing a single view across clients and servers. In addition, Microsoft Defender ATP alerts will be available in the Azure Security Center console. - Server investigation - Azure Security Center customers can access Microsoft Defender Security Center to perform detailed investigation to uncover the scope of a potential breach. > [!IMPORTANT] -> - When you use Azure Security Center to monitor servers, a Microsoft Defender ATP tenant is automatically created. The Microsoft Defender ATP data is stored in Europe by default. +> - When you use Azure Security Center to monitor Windows servers, a Microsoft Defender ATP tenant is automatically created. The Microsoft Defender ATP data is stored in Europe by default. > - If you use Microsoft Defender ATP before using Azure Security Center, your data will be stored in the location you specified when you created your tenant even if you integrate with Azure Security Center at a later time. -> - When you use Azure Security Center to monitor servers, a Microsoft Defender ATP tenant is automatically created and the Microsoft Defender ATP data is stored in Europe by default. If you need to move your data to another location, you need to contact Microsoft Support to reset the tenant. Server endpoint monitoring utilizing this integration has been disabled for Office 365 GCC customers. +> - When you use Azure Security Center to monitor Windows servers, a Microsoft Defender ATP tenant is automatically created and the Microsoft Defender ATP data is stored in Europe by default. If you need to move your data to another location, you need to contact Microsoft Support to reset the tenant. Server endpoint monitoring utilizing this integration has been disabled for Office 365 GCC customers. -## Offboard servers +## Offboard Windows servers You can offboard Windows Server (SAC), Windows Server 2019, and Windows Server 2019 Core edition in the same method available for Windows 10 client devices. -For other server versions, you have two options to offboard servers from the service: +For other Windows server versions, you have two options to offboard Windows servers from the service: - Uninstall the MMA agent - Remove the Microsoft Defender ATP workspace configuration > [!NOTE] -> Offboarding causes the server to stop sending sensor data to the portal but data from the server, including reference to any alerts it has had will be retained for up to 6 months. +> Offboarding causes the Windows server to stop sending sensor data to the portal but data from the Windows server, including reference to any alerts it has had will be retained for up to 6 months. -### Uninstall servers by uninstalling the MMA agent -To offboard the server, you can uninstall the MMA agent from the server or detach it from reporting to your Microsoft Defender ATP workspace. After offboarding the agent, the server will no longer send sensor data to Microsoft Defender ATP. +### Uninstall Windows servers by uninstalling the MMA agent +To offboard the Windows server, you can uninstall the MMA agent from the Windows server or detach it from reporting to your Microsoft Defender ATP workspace. After offboarding the agent, the Windows server will no longer send sensor data to Microsoft Defender ATP. For more information, see [To disable an agent](https://docs.microsoft.com/azure/log-analytics/log-analytics-windows-agents#to-disable-an-agent). ### Remove the Microsoft Defender ATP workspace configuration -To offboard the server, you can use either of the following methods: +To offboard the Windows server, you can use either of the following methods: - Remove the Microsoft Defender ATP workspace configuration from the MMA agent - Run a PowerShell command to remove the configuration @@ -230,7 +232,7 @@ To offboard the server, you can use either of the following methods: 1. Select **Windows Server 2008 R2 SP1, 2012 R2 and 2016** as the operating system and get your Workspace ID: - ![Image of server onboarding](images/atp-server-offboarding-workspaceid.png) + ![Image of Windows server onboarding](images/atp-server-offboarding-workspaceid.png) 2. Open an elevated PowerShell and run the following command. Use the Workspace ID you obtained and replacing `WorkspaceID`: @@ -242,7 +244,6 @@ To offboard the server, you can use either of the following methods: # Reload the configuration and apply changes $AgentCfg.ReloadConfiguration() ``` - ## Related topics - [Onboard Windows 10 devices](configure-endpoints.md) - [Onboard non-Windows devices](configure-endpoints-non-windows.md) From 56515512dc11b2921f68609b5d44d3e606a024f1 Mon Sep 17 00:00:00 2001 From: illfated Date: Wed, 20 May 2020 01:33:42 +0200 Subject: [PATCH 041/589] VPN/SSO NDES: SCEP link URL update Description: As reported in issue ticket #6766 (Dead link), the current link to "Configure certificate infrastructure for SCEP" returns a 404 error because the page has been moved to a new directory structure in commit 4ae71ed25d10 on February 28, 2020. 1702 files and folders have been moved and/or renamed in this process, making it a game of chance to correct more than one 404 link discovery at a time. (I hope some links were corrected back then, but I have not researched the details.) Thanks to rossmpersonal for reporting this 404 issue. Changes proposed: - Update the link URL to its current location (docs.microsoft.com/mem/intune/protect/certificates-scep-configure) - Remove redundant end-of-line whitespace (blanks) throughout the page Ticket closure or reference: Closes #6766 --- ...n-on-sso-over-vpn-and-wi-fi-connections.md | 58 +++++++++---------- 1 file changed, 29 insertions(+), 29 deletions(-) diff --git a/windows/security/identity-protection/vpn/how-to-use-single-sign-on-sso-over-vpn-and-wi-fi-connections.md b/windows/security/identity-protection/vpn/how-to-use-single-sign-on-sso-over-vpn-and-wi-fi-connections.md index a162e20e45..0b6ff85b21 100644 --- a/windows/security/identity-protection/vpn/how-to-use-single-sign-on-sso-over-vpn-and-wi-fi-connections.md +++ b/windows/security/identity-protection/vpn/how-to-use-single-sign-on-sso-over-vpn-and-wi-fi-connections.md @@ -16,38 +16,38 @@ ms.author: dansimp This topic explains requirements to enable Single Sign-On (SSO) to on-premises domain resources over WiFi or VPN connections. The scenario is: -- You connect to a network using Wi-Fi or VPN. -- You want to use the credentials that you use for the WiFi or VPN authentication to also authenticate requests to access a domain resource you are connecting to, without being prompted for your domain credentials separately. +- You connect to a network using Wi-Fi or VPN. +- You want to use the credentials that you use for the WiFi or VPN authentication to also authenticate requests to access a domain resource you are connecting to, without being prompted for your domain credentials separately. For example, you want to connect to a corporate network and access an internal website that requires Windows integrated authentication. -At a high level, the way this works is that the credentials that are used for the connection authentication are put in Credential Manager as the default credentials for the logon session. -Credential Manager is a place where credentials in the OS are can be stored for specific domain resources based on the targetname of the resource. -For VPN, the VPN stack saves its credential as the session default. -For WiFi, EAP does it. +At a high level, the way this works is that the credentials that are used for the connection authentication are put in Credential Manager as the default credentials for the logon session. +Credential Manager is a place where credentials in the OS are can be stored for specific domain resources based on the targetname of the resource. +For VPN, the VPN stack saves its credential as the session default. +For WiFi, EAP does it. -The credentials are put in Credential Manager as a "\*Session" credential. -A "\*Session" credential implies that it is valid for the current user session. -The credentials are also cleaned up when the WiFi or VPN connection is disconnected. +The credentials are put in Credential Manager as a "\*Session" credential. +A "\*Session" credential implies that it is valid for the current user session. +The credentials are also cleaned up when the WiFi or VPN connection is disconnected. -When the user tries to access a domain resource, using Edge for example, Edge has the right Enterprise Authentication capability so [WinInet](https://msdn.microsoft.com/library/windows/desktop/aa385483.aspx) can release the credentials that it gets from the Credential Manager to the SSP that is requesting it. -For more information about the Enterprise Authentication capability, see [App capability declarations](https://msdn.microsoft.com/windows/uwp/packaging/app-capability-declarations). +When the user tries to access a domain resource, using Edge for example, Edge has the right Enterprise Authentication capability so [WinInet](https://msdn.microsoft.com/library/windows/desktop/aa385483.aspx) can release the credentials that it gets from the Credential Manager to the SSP that is requesting it. +For more information about the Enterprise Authentication capability, see [App capability declarations](https://msdn.microsoft.com/windows/uwp/packaging/app-capability-declarations). -The local security authority will look at the device application, such as a Universal Windows Platform (UWP) application, to see if it has the right capability. -If the app is not UWP, it does not matter. -But if it is a UWP app, it will look at the device capability for Enterprise Authentication. +The local security authority will look at the device application, such as a Universal Windows Platform (UWP) application, to see if it has the right capability. +If the app is not UWP, it does not matter. +But if it is a UWP app, it will look at the device capability for Enterprise Authentication. If it does have that capability and if the resource that you are trying to access is in the Intranet zone in the Internet Options (ZoneMap), then the credential will be released. -This behavior helps prevent credentials from being misused by untrusted third parties. +This behavior helps prevent credentials from being misused by untrusted third parties. ## Intranet zone -For the Intranet zone, by default it only allows single-label names, such as Http://finance. -If the resource that needs to be accessed has multiple domain labels, then the workaround is to use the [Registry CSP](https://msdn.microsoft.com/library/windows/hardware/dn904964.aspx). +For the Intranet zone, by default it only allows single-label names, such as Http://finance. +If the resource that needs to be accessed has multiple domain labels, then the workaround is to use the [Registry CSP](https://msdn.microsoft.com/library/windows/hardware/dn904964.aspx). ### Setting the ZoneMap -The ZoneMap is controlled using a registry that can be set through MDM. -By default, single-label names such as http://finance are already in the intranet zone. +The ZoneMap is controlled using a registry that can be set through MDM. +By default, single-label names such as http://finance are already in the intranet zone. For multi-label names, such as http://finance.net, the ZoneMap needs to be updated. ## MDM Policy @@ -56,9 +56,9 @@ OMA URI example: ./Vendor/MSFT/Registry/HKU/S-1-5-21-2702878673-795188819-444038987-2781/Software/Microsoft/Windows/CurrentVersion/Internet%20Settings/ZoneMap/Domains/``/* as an Integer Value of 1 for each of the domains that you want to SSO into from your device. This adds the specified domains to the Intranet Zone of the Edge browser. -## Credential requirements +## Credential requirements -For VPN, the following types of credentials will be added to credential manager after authentication: +For VPN, the following types of credentials will be added to credential manager after authentication: - Username and password - Certificate-based authentication: @@ -67,7 +67,7 @@ For VPN, the following types of credentials will be added to credential manager - Smart Card Certificate - Windows Hello for Business Certificate -The username should also include a domain that can be reached over the connection (VPN or WiFi). +The username should also include a domain that can be reached over the connection (VPN or WiFi). ## User certificate templates @@ -82,17 +82,17 @@ If the credentials are certificate-based, then the elements in the following tab ## NDES server configuration -The NDES server is required to be configured so that incoming SCEP requests can be mapped to the correct template to be used. -For more information, see [Configure certificate infrastructure for SCEP](https://docs.microsoft.com/intune/deploy-use/Configure-certificate-infrastructure-for-scep). +The NDES server is required to be configured so that incoming SCEP requests can be mapped to the correct template to be used. +For more information, see [Configure certificate infrastructure for SCEP](https://docs.microsoft.com/mem/intune/protect/certificates-scep-configure). ## Active Directory requirements -You need IP connectivity to a DNS server and domain controller over the network interface so that authentication can succeed as well. +You need IP connectivity to a DNS server and domain controller over the network interface so that authentication can succeed as well. The domain controllers will need to have appropriate KDC certificates for the client to trust them as domain controllers, and since phones are not domain-joined, the root CA of the KDC’s certificate must be in the Third-Party Root CA or Smart Card Trusted Roots store. -The domain controllers must be using certificates based on the updated KDC certificate template Kerberos Authentication. -This is because Windows 10 Mobile requires strict KDC validation to be enabled. -This requires that all authenticating domain controllers run Windows Server 2016, or you'll need to enable strict KDC validation on domain controllers that run previous versions of Windows Server. -For more information, see [Enabling Strict KDC Validation in Windows Kerberos](https://www.microsoft.com/download/details.aspx?id=6382). +The domain controllers must be using certificates based on the updated KDC certificate template Kerberos Authentication. +This is because Windows 10 Mobile requires strict KDC validation to be enabled. +This requires that all authenticating domain controllers run Windows Server 2016, or you'll need to enable strict KDC validation on domain controllers that run previous versions of Windows Server. +For more information, see [Enabling Strict KDC Validation in Windows Kerberos](https://www.microsoft.com/download/details.aspx?id=6382). From 2a12bea601653a4b4a9af411e9a1848689a73c8d Mon Sep 17 00:00:00 2001 From: illfated Date: Mon, 25 May 2020 02:25:22 +0200 Subject: [PATCH 042/589] MSCT/Baselines blog: update URLs and link text Description: Based on the reference to this page in issue ticket #6784 (Scripts documentation missing), I noticed that 2 of 3 links pointing to the Microsoft Security Baselines blog still used the old and archived technet blog pages instead of the new and improved Tech Community pages, in addition to using the outdated name "Microsoft Security Guidance blog" instead of the new name "Microsoft Security Baselines blog". To make this PR easier to review, I have restricted myself to making only 2 types of change here: URL updates (2) and link text updates (3). Changes proposed: - Replace the outdated technet blog links with Tech Community links - Update the link text names to "Microsoft Security Baselines blog". Ticket closure or reference: Ref. #6784 --- .../threat-protection/security-compliance-toolkit-10.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/security-compliance-toolkit-10.md b/windows/security/threat-protection/security-compliance-toolkit-10.md index 0ac210bfc0..a0f2ccf3df 100644 --- a/windows/security/threat-protection/security-compliance-toolkit-10.md +++ b/windows/security/threat-protection/security-compliance-toolkit-10.md @@ -51,7 +51,7 @@ The Security Compliance Toolkit consists of: - Local Group Policy Object (LGPO) tool -You can [download the tools](https://www.microsoft.com/download/details.aspx?id=55319) along with the baselines for the relevant Windows versions. For more details about security baseline recommendations, see the [Microsoft Security Guidance blog](https://techcommunity.microsoft.com/t5/Microsoft-Security-Baselines/bg-p/Microsoft-Security-Baselines). +You can [download the tools](https://www.microsoft.com/download/details.aspx?id=55319) along with the baselines for the relevant Windows versions. For more details about security baseline recommendations, see the [Microsoft Security Baselines blog](https://techcommunity.microsoft.com/t5/Microsoft-Security-Baselines/bg-p/Microsoft-Security-Baselines). ## What is the Policy Analyzer tool? @@ -63,7 +63,7 @@ The Policy Analyzer is a utility for analyzing and comparing sets of Group Polic Policy Analyzer lets you treat a set of GPOs as a single unit. This makes it easy to determine whether particular settings are duplicated across the GPOs or are set to conflicting values. Policy Analyzer also lets you capture a baseline and then compare it to a snapshot taken at a later time to identify changes anywhere across the set. -More information on the Policy Analyzer tool can be found on the [Microsoft Security Guidance blog](https://blogs.technet.microsoft.com/secguide/2016/01/22/new-tool-policy-analyzer/) or by [downloading the tool](https://www.microsoft.com/download/details.aspx?id=55319). +More information on the Policy Analyzer tool can be found on the [Microsoft Security Baselines blog](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/new-tool-policy-analyzer/ba-p/701049) or by [downloading the tool](https://www.microsoft.com/download/details.aspx?id=55319). ## What is the Local Group Policy Object (LGPO) tool? @@ -73,4 +73,4 @@ LGPO.exe can import and apply settings from Registry Policy (Registry.pol) files It can export local policy to a GPO backup. It can export the contents of a Registry Policy file to the “LGPO text” format that can then be edited, and can build a Registry Policy file from an LGPO text file. -Documentation for the LGPO tool can be found on the [Microsoft Security Guidance blog](https://blogs.technet.microsoft.com/secguide/2016/01/21/lgpo-exe-local-group-policy-object-utility-v1-0/) or by [downloading the tool](https://www.microsoft.com/download/details.aspx?id=55319). +Documentation for the LGPO tool can be found on the [Microsoft Security Baselines blog](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/lgpo-exe-local-group-policy-object-utility-v1-0/ba-p/701045) or by [downloading the tool](https://www.microsoft.com/download/details.aspx?id=55319). From 963dfdb3d261bb08d0b11d842235119512b13393 Mon Sep 17 00:00:00 2001 From: illfated Date: Wed, 1 Jul 2020 23:03:35 +0200 Subject: [PATCH 043/589] Microsoft Security Compliance Toolkit scripts list (as requested in ticket #6784) Closes #6784 --- .../security-compliance-toolkit-10.md | 106 ++++++++++++++---- 1 file changed, 83 insertions(+), 23 deletions(-) diff --git a/windows/security/threat-protection/security-compliance-toolkit-10.md b/windows/security/threat-protection/security-compliance-toolkit-10.md index a0f2ccf3df..c23dcd4785 100644 --- a/windows/security/threat-protection/security-compliance-toolkit-10.md +++ b/windows/security/threat-protection/security-compliance-toolkit-10.md @@ -26,29 +26,29 @@ The SCT enables administrators to effectively manage their enterprise’s Group The Security Compliance Toolkit consists of: -- Windows 10 security baselines - - Windows 10 Version 1909 (November 2019 Update) - - Windows 10 Version 1903 (May 2019 Update) - - Windows 10 Version 1809 (October 2018 Update) - - Windows 10 Version 1803 (April 2018 Update) - - Windows 10 Version 1709 (Fall Creators Update) - - Windows 10 Version 1607 (Anniversary Update) - - Windows 10 Version 1507 +- Windows 10 security baselines + - Windows 10 Version 1909 (November 2019 Update) + - Windows 10 Version 1903 (May 2019 Update) + - Windows 10 Version 1809 (October 2018 Update) + - Windows 10 Version 1803 (April 2018 Update) + - Windows 10 Version 1709 (Fall Creators Update) + - Windows 10 Version 1607 (Anniversary Update) + - Windows 10 Version 1507 -- Windows Server security baselines - - Windows Server 2019 - - Windows Server 2016 - - Windows Server 2012 R2 +- Windows Server security baselines + - Windows Server 2019 + - Windows Server 2016 + - Windows Server 2012 R2 -- Microsoft Office security baseline - - Microsoft 365 Apps for enterprise (Sept 2019) +- Microsoft Office security baseline + - Microsoft 365 Apps for enterprise (Sept 2019) -- Microsoft Edge security baseline - - Version 80 +- Microsoft Edge security baseline + - Version 80 -- Tools - - Policy Analyzer tool - - Local Group Policy Object (LGPO) tool +- Tools + - Policy Analyzer tool + - Local Group Policy Object (LGPO) tool You can [download the tools](https://www.microsoft.com/download/details.aspx?id=55319) along with the baselines for the relevant Windows versions. For more details about security baseline recommendations, see the [Microsoft Security Baselines blog](https://techcommunity.microsoft.com/t5/Microsoft-Security-Baselines/bg-p/Microsoft-Security-Baselines). @@ -56,10 +56,10 @@ You can [download the tools](https://www.microsoft.com/download/details.aspx?id= ## What is the Policy Analyzer tool? The Policy Analyzer is a utility for analyzing and comparing sets of Group Policy Objects (GPOs). Its main features include: -- Highlight when a set of Group Policies has redundant settings or internal inconsistencies -- Highlight the differences between versions or sets of Group Policies -- Compare GPOs against current local policy and local registry settings -- Export results to a Microsoft Excel spreadsheet +- Highlight when a set of Group Policies has redundant settings or internal inconsistencies +- Highlight the differences between versions or sets of Group Policies +- Compare GPOs against current local policy and local registry settings +- Export results to a Microsoft Excel spreadsheet Policy Analyzer lets you treat a set of GPOs as a single unit. This makes it easy to determine whether particular settings are duplicated across the GPOs or are set to conflicting values. Policy Analyzer also lets you capture a baseline and then compare it to a snapshot taken at a later time to identify changes anywhere across the set. @@ -74,3 +74,63 @@ It can export local policy to a GPO backup. It can export the contents of a Registry Policy file to the “LGPO text” format that can then be edited, and can build a Registry Policy file from an LGPO text file. Documentation for the LGPO tool can be found on the [Microsoft Security Baselines blog](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/lgpo-exe-local-group-policy-object-utility-v1-0/ba-p/701045) or by [downloading the tool](https://www.microsoft.com/download/details.aspx?id=55319). + +## List of PowerShell scripts + +This list of PowerShell script names, divided into categories by the name of the ZIP file containing those scripts, is based on the download page content listing of the full package download (12 files). + +1. **Windows 10 Version 1909 and Windows Server Version 1909 Security Baseline.zip** + + - Baseline-ADImport.ps1 + - Baseline-LocalInstall.ps1 + - Remove-EPBaselineSettings.ps1 + - MapGuidsToGpoNames.ps1 + +2. **LGPO.zip** + - (none) + +3. **Microsoft Edge v80.zip** + + - Baseline-ADImport.ps1 + - Baseline-LocalInstall.ps1 + - MapGuidsToGpoNames.ps1 + +4. **Office365-ProPlus-Sept2019-FINAL.zip** + + - Baseline-ADImport.ps1 + - Baseline-LocalInstall.ps1 + - MapGuidsToGpoNames.ps1 + +5. **PolicyAnalyzer.zip** + + - Merge-PolicyRules.ps1 + - Split-PolicyRules.ps1 + +6. **Windows 10 Version 1507 Security Baseline.zip** + - (none) + +7. **Windows 10 Version 1607 and Windows Server 2016 Security Baseline.zip** + + - MapGuidsToGpoNames.ps1 + +8. **Windows 10 Version 1709 Security Baseline.zip** + + - MapGuidsToGpoNames.ps1 + +9. **Windows 10 Version 1803 Security Baseline.zip** + + - MapGuidsToGpoNames.ps1 + +10. **Windows 10 Version 1809 and Windows Server 2019 Security Baseline.zip** + + - BaselineLocalInstall.ps1 + - MapGuidsToGpoNames.ps1 + +11. **Windows 10 Version 1903 and Windows Server Version 1903 Security Baseline - Sept2019Update.zip** + + - Baseline-ADImport.ps1 + - Baseline-LocalInstall.ps1 + - MapGuidsToGpoNames.ps1 + +12. **Windows Server 2012 R2 Security Baseline.zip** + - (none) From 57ff71e27811f073a4baab1bdf85aaea5db3d165 Mon Sep 17 00:00:00 2001 From: "Brian Steingraber [KSM]" <43631189+BrianSteingraber@users.noreply.github.com> Date: Wed, 1 Jul 2020 16:21:02 -0500 Subject: [PATCH 044/589] Added Powershell scripts Added new section for PowerShell scripts --- .../threat-protection/security-compliance-toolkit-10.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/windows/security/threat-protection/security-compliance-toolkit-10.md b/windows/security/threat-protection/security-compliance-toolkit-10.md index 0ac210bfc0..f6885f5259 100644 --- a/windows/security/threat-protection/security-compliance-toolkit-10.md +++ b/windows/security/threat-protection/security-compliance-toolkit-10.md @@ -50,6 +50,12 @@ The Security Compliance Toolkit consists of: - Policy Analyzer tool - Local Group Policy Object (LGPO) tool +- Scripts + - Baseline-ADImport.ps1 + - Baseline-LocalInstall.ps1 + - Remove-EPBaselineSettings.ps1 + - MapGuidsToGpoNames.ps1 + You can [download the tools](https://www.microsoft.com/download/details.aspx?id=55319) along with the baselines for the relevant Windows versions. For more details about security baseline recommendations, see the [Microsoft Security Guidance blog](https://techcommunity.microsoft.com/t5/Microsoft-Security-Baselines/bg-p/Microsoft-Security-Baselines). From 876876630d644376988c4d95c3f859976d1b80f7 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 1 Jul 2020 16:35:44 -0700 Subject: [PATCH 045/589] more updates --- .../configure-server-endpoints.md | 64 +++++++++--------- .../atp-server-offboarding-workspaceid.png | Bin 279369 -> 279269 bytes .../offboard-machines.md | 2 +- ...antec-to-microsoft-defender-atp-onboard.md | 2 +- 4 files changed, 34 insertions(+), 34 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md b/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md index 0f7e29846e..58a3bb9485 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md @@ -47,42 +47,43 @@ For a practical guidance on what needs to be in place for licensing and infrastr For guidance on how to download and use Windows Security Baselines for Windows servers, see [Windows Security Baselines](https://docs.microsoft.com/windows/device-security/windows-security-baselines). -## Windows Server 2008 R2 SP1, Windows Server 2012 R2, and Windows Server 2016 +## Windows Server 2008 R2 SP1, Windows Server 2012 R2, and Windows Server 2016 -There are two options to onboard Windows Server 2008 R2 SP1, Windows Server 2012 R2 and Windows Server 2016 to Microsoft Defender ATP: +You can onboard Windows Server 2008 R2 SP1, Windows Server 2012 R2, and Windows Server 2016 to Microsoft Defender ATP by using any of the following options: -- **Option 1**: Onboard through Microsoft Defender Security Center -- **Option 2**: Onboard through Azure Security Center +- **Option 1**: [Onboard through Microsoft Defender Security Center](#option-1-onboard-windows-servers-through-microsoft-defender-security-center) +- **Option 2**: [Onboard through Azure Security Center](#option-2-onboard-windows-servers-through-azure-security-center) +- **Option 3**: [Onboard through Microsoft Endpoint Configuration Manager version 2002 and later (only for Windows Server 2012 R2 and Windows Server 2016)](#option-3-onboard-windows-servers-through-microsoft-endpoint-configuration-manager-version-2002-and-later) > [!NOTE] -> Microsoft defender ATP standalone server license is required, per node, in order to onboard a Windows server through Microsoft Defender Security Center (Option 1), or an Azure Security Center Standard license is required, per node, in order to onboard a Windows server through Azure Security Center (Option 2), see [Supported features available in Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-services). +> Microsoft defender ATP standalone server license is required, per node, in order to onboard a Windows server through Microsoft Defender Security Center (Option 1), or an Azure Security Center Standard license is required, per node, in order to onboard a Windows server through Azure Security Center (Option 2), see [Supported features available in Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-services). ### Option 1: Onboard Windows servers through Microsoft Defender Security Center -You'll need to take the following steps if you choose to onboard Windows servers through Microsoft Defender Security Center. +Perform the following steps to onboard Windows servers through Microsoft Defender Security Center: - For Windows Server 2008 R2 SP1 or Windows Server 2012 R2, ensure that you install the following hotfix: - - [Update for customer experience and diagnostic telemetry](https://support.microsoft.com/en-us/help/3080149/update-for-customer-experience-and-diagnostic-telemetry) + - [Update for customer experience and diagnostic telemetry](https://support.microsoft.com/help/3080149/update-for-customer-experience-and-diagnostic-telemetry) - In addition, for Windows Server 2008 R2 SP1, ensure that you fulfill the following requirements: - - Install the [February monthly update rollup](https://support.microsoft.com/en-us/help/4074598/windows-7-update-kb4074598) + - Install the [February monthly update rollup](https://support.microsoft.com/help/4074598/windows-7-update-kb4074598) - Install either [.NET framework 4.5](https://www.microsoft.com/download/details.aspx?id=30653) (or later) or [KB3154518](https://support.microsoft.com/help/3154518/support-for-tls-system-default-versions-included-in-the-net-framework) - - For Windows Server 2008 R2 SP1 and Windows Server 2012 R2: Configure and update System Center Endpoint Protection clients. + - For Windows Server 2008 R2 SP1 and Windows Server 2012 R2: [Configure and update System Center Endpoint Protection clients](#configure-and-update-system-center-endpoint-protection-clients). > [!NOTE] > This step is required only if your organization uses System Center Endpoint Protection (SCEP) and you're onboarding Windows Server 2008 R2 SP1 and Windows Server 2012 R2. - - Turn on server monitoring from Microsoft Defender Security Center. + - [Turn on server monitoring from Microsoft Defender Security Center](#turn-on-server-monitoring-from-the-microsoft-defender-security-center-portal). - If you're already leveraging System Center Operations Manager (SCOM) or Azure Monitor (formerly known as Operations Management Suite (OMS)), attach the Microsoft Monitoring Agent (MMA) to report to your Microsoft Defender ATP workspace through Multihoming support. - Otherwise, install and configure MMA to report sensor data to Microsoft Defender ATP as instructed below. For more information, see [Collect log data with Azure Log Analytics agent](https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent). + Otherwise, [install and configure MMA to report sensor data to Microsoft Defender ATP](#install-and-configure-microsoft-monitoring-agent-mma-to-report-sensor-data-to-microsoft-defender-atp). For more information, see [Collect log data with Azure Log Analytics agent](https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent). > [!TIP] > After onboarding the device, you can choose to run a detection test to verify that it is properly onboarded to the service. For more information, see [Run a detection test on a newly onboarded Microsoft Defender ATP endpoint](run-detection-test.md). -### Configure and update System Center Endpoint Protection clients +#### Configure and update System Center Endpoint Protection clients Microsoft Defender ATP integrates with System Center Endpoint Protection. The integration provides visibility to malware detections and to stop propagation of an attack in your organization by banning potentially malicious files or suspected malware. @@ -92,21 +93,21 @@ The following steps are required to enable this integration: - Configure the SCEP client Cloud Protection Service membership to the **Advanced** setting. -### Turn on Server monitoring from the Microsoft Defender Security Center portal +#### Turn on Server monitoring from the Microsoft Defender Security Center portal 1. In the navigation pane, select **Settings** > **Device management** > **Onboarding**. -2. Select Windows Server 2008 R2 SP1, 2012 R2 and 2016 as the operating system. +2. Select **Windows Server 2008 R2 SP1, 2012 R2 and 2016** as the operating system. 3. Click **Turn on server monitoring** and confirm that you'd like to proceed with the environment setup. When the setup completes, the **Workspace ID** and **Workspace key** fields are populated with unique values. You'll need to use these values to configure the MMA agent. -### Install and configure Microsoft Monitoring Agent (MMA) to report sensor data to Microsoft Defender ATP +#### Install and configure Microsoft Monitoring Agent (MMA) to report sensor data to Microsoft Defender ATP 1. Download the agent setup file: [Windows 64-bit agent](https://go.microsoft.com/fwlink/?LinkId=828603). -2. Using the Workspace ID and Workspace key provided in the previous procedure, choose any of the following installation methods to install the agent on the Windows server: +2. Using the Workspace ID and Workspace key obtained in the previous procedure, choose any of the following installation methods to install the agent on the Windows server: - [Manually install the agent using setup](https://docs.microsoft.com/azure/log-analytics/log-analytics-windows-agents#install-the-agent-using-setup)
On the **Agent Setup Options** page, choose **Connect the agent to Azure Log Analytics (OMS)**. - [Install the agent using the command line](https://docs.microsoft.com/azure/log-analytics/log-analytics-windows-agents#install-the-agent-using-the-command-line) and [configure the agent using a script](https://docs.microsoft.com/azure/log-analytics/log-analytics-windows-agents#add-a-workspace-using-a-script). @@ -117,36 +118,36 @@ Once completed, you should see onboarded Windows servers in the portal within an -### Configure Windows server proxy and Internet connectivity settings +#### Configure Windows server proxy and Internet connectivity settings - Each Windows server must be able to connect to the Internet using HTTPS. This connection can be direct, using a proxy, or through the OMS Gateway. - If a proxy or firewall is blocking all traffic by default and allowing only specific domains through or HTTPS scanning (SSL inspection) is enabled, make sure that you [enable access to Microsoft Defender ATP service URLs](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet#enable-access-to-microsoft-defender-atp-service-urls-in-the-proxy-server). ### Option 2: Onboard Windows servers through Azure Security Center -1. In the navigation pane, select **Settings** > **Device management** > **Onboarding**. +1. In the Microsoft Defender Security Center navigation pane, select **Settings** > **Device management** > **Onboarding**. -2. Select Windows Server 2008 R2 SP1, 2012 R2 and 2016 as the operating system. +2. Select **Windows Server 2008 R2 SP1, 2012 R2 and 2016** as the operating system. 3. Click **Onboard Servers in Azure Security Center**. 4. Follow the onboarding instructions in [Microsoft Defender Advanced Threat Protection with Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-wdatp). +### Option 3: Onboard Windows servers through Microsoft Endpoint Configuration Manager version 2002 and later +You can onboard Windows Server 2012 R2 and Windows Server 2016 using Microsoft Endpoint Configuration Manager version 2002 and later. For more information, see [Microsoft Defender Advanced Threat Protection in Microsoft Endpoint Configuration Manager current branch](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection). + ## Windows Server (SAC) version 1803, Windows Server 2019, and Windows Server 2019 Core edition -To onboard Windows Server (SAC) version 1803, Windows Server 2019, or Windows Server 2019 Core edition, refer to the supported methods and versions below. +You can onboard Windows Server (SAC) version 1803, Windows Server 2019, or Windows Server 2019 Core edition by using the following deployment methods: + +- [Local script](configure-endpoints-script.md) +- [Group Policy](configure-endpoints-gp.md) +- [Microsoft Endpoint Configuration Manager](configure-endpoints-sccm.md#onboard-windows-10-devices-using-microsoft-endpoint-configuration-manager-current-branch) +- [System Center Configuration Manager 2012 / 2012 R2 1511 / 1602](configure-endpoints-sccm.md#onboard-windows-10-devices-using-earlier-versions-of-system-center-configuration-manager) +- [VDI onboarding scripts for non-persistent devices](configure-endpoints-vdi.md) > [!NOTE] > The Onboarding package for Windows Server 2019 through Microsoft Endpoint Configuration Manager currently ships a script. For more information on how to deploy scripts in Configuration Manager, see [Packages and programs in Configuration Manager](https://docs.microsoft.com/configmgr/apps/deploy-use/packages-and-programs). -Supported tools include: -- Local script -- Group Policy -- Microsoft Endpoint Configuration Manager -- System Center Configuration Manager 2012 / 2012 R2 1511 / 1602 -- VDI onboarding scripts for non-persistent devices - -For more information, see [Onboard Windows 10 devices](configure-endpoints.md). - Support for Windows Server, provide deeper insight into activities happening on the Windows server, coverage for kernel and memory attack detection, and enables response actions on Windows Server endpoint as well. 1. Configure Microsoft Defender ATP onboarding settings on the Windows server. For more information, see [Onboard Windows 10 devices](configure-endpoints.md). @@ -174,9 +175,8 @@ Support for Windows Server, provide deeper insight into activities happening on ```sc.exe query Windefend``` If the result is 'The specified service does not exist as an installed service', then you'll need to install Microsoft Defender AV. For more information, see [Microsoft Defender Antivirus in Windows 10](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10). - -## Onboard Windows servers using Microsoft Endpoint Configuration Manager version 2002 and later -You can onboard Windows Server 2012 R2, Windows Server 2016, Windows Server 2016, version 1803, and Windows Server 2019 using Microsoft Endpoint Configuration Manager version 2002 and later. For more information, see [Microsoft Defender Advanced Threat Protection in Microsoft Endpoint Configuration Manager current branch](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection). + + For information on how to use Group Policy to configure and manage Microsoft Defender Antivirus on your Windows servers, see [Use Group Policy settings to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus). ## Integration with Azure Security Center Microsoft Defender ATP can integrate with Azure Security Center to provide a comprehensive Windows server protection solution. With this integration, Azure Security Center can leverage the power of Microsoft Defender ATP to provide improved threat detection for Windows Servers. diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/atp-server-offboarding-workspaceid.png b/windows/security/threat-protection/microsoft-defender-atp/images/atp-server-offboarding-workspaceid.png index 57e30708ab23aa178bd379d3e88ce9d7a57cc5aa..c34cbb8b80230252f16dbe6c7daabf39f5491a6f 100644 GIT binary patch delta 222104 zcmcG$c{r8p`!}qTBoRrHIU!`8GFHftDf2wf^E`7`LI_(z<`A-kBy;8|mU&v{F;k|H zd3sKJf4}?pyvO^``##6<{Nsqd*1GR?-RE_lpXu7IK}2(bM1MWJeCgaxO56Gdj>b$N}-B`VCU#SqVx`{fi?gt{p-zuXI-$9A)QxZpN}S05t$ z+g)meh<;^Urrs*^&czpWAJd{GLR4LTIIYC*e^%6vmf8Z zcI7?Ot;ic18f;Cuc=-5w2M3$$>(BG$#@Jx;qvYsYP5GoVNgcP`5iBekEE$PMs*Zxm zx|QzXwtPBTGjC-xHTCrFJ2(jPb@um@*q0_QE#2bDdybw%k$Cdr2Po&f%3mf4le9(n zSnNx~Ea_!6F#hf4-0(tl9D6i+t~*pRG$F`{j4AYT0|(!7-n%cFpUaZiUe?ic$alnK zKHA!H`J=yTX6*b@nx}nlPas+)`rEe>W2_2$4&Dc?M@JND0|VGc=d!Z0nMgJl?Y54>`-O-Opk_Rr1^7dLmuuMuW{1S_{A zXmUNfpfvL2#6KZ1F+L?_zAXm*<_*3HnUao<6f0?N|A~^?jo^kyg_=mCDOZ#ngO#PF zsS{_@)D(?qYGiCI>6pETnT<-cOx^Ss6TU=F{0nMoPL<=0#!jKyQNzQxa1IVbo@CI! zRih`CnF+zZaD4m`qaL4XP-|W^>ni9}uKOu8w8@wuvGq&E*NS2P{bECo*If%Hrlzl? z=|hK&>t?r=Ra636X4A5f?BIJp5CqKV=)%`j?PT{bvtGoNOdnHG_T;r@01;M34%{PV|(rKSK1%+RxGtuXwaDy9! zHyW=e3HiisZ}Suv7gGqkzSd+_Cs0(qQPUONwUCjW9qh{{rJ-^2>ecYQBT+#?!RMQN z-*|a>pFiRuM>4arf_z0=poCsLe13e1;94Z3rndG>?TZV0$NpI4>Ye^2}^}c8isVaOt|8iYwU}u zbuizK%ktI@POFx??s7l1XNzv-5Ea!QetUqZdr~5F8h`&-(EkZ|7QtT9>uQWZakFU z2%J0?+iU7N#$!}SnraML-`cUMk@}_Y@pR1T>;lz0z3APF+w0+Z<3-;UnjkK}b#Yx{LtD(rxJ zvJ8P4Qu<>@LD7>(tCJPkdKDf?M-$X1JymOsl$%C+=yB?dID-R~^M&Lmm}T>d?|bD2 z=AN$aG){I(Jr{@8r@x2uvCAD_6hT~&t(0|c7WYu^h?Mf0G|}I0Sf~G~6ptjR5@B5J z`cFZfER+8G3}}uvG*73;F4naW`qBYXnT;mobkui~yQcPZSM22ch3odE(T*PzPB()` zsmwk4>C3Bj-1TA$?c$@*bMt+vCxJR^TWEH_@YeD_@`t3ONas z^}$e|I?riWmt`bl432wBmdlP0HwY&uM4zmWM=r+&)^*Lz!jH`^={& zn3{4Mfz8b9)H#D=-Kw`c z9JVYb52+>(Cp`9Z*-tJ#k-{OP9vf_)tgf%w`(we3)U~dD^Dq$!!>`$HLE55PQhqju zT=!k~L7JDv{I_EdkKjJXGmy%p<%*J(pL}s4-*<~w<{eHBZk$XdPQr_8nqM~82%XgY zWdw1`JBl=J-|~88qCZir_U4;N5RPM#p;a(q<*24D&|z`zXW{jxnB+2&MrpXoHX#kRHlVH@40MY3WQqp zkA1pa>f)-8gyxJZNS!gvfe}&-UzrnbG}XRmp~rq$QMxbCc7F9*AT1N1a>I zd3tVGbomPHp;epP>W-VIDcH z;PjJn!OZcuQgQk>#>`RVKeGti*WDtj4m^b5>X=Q0Xfs^w^!nN3I{&V;zIvOJrK{U( zH9XF1b10nGOW%K%H@$Gr?nc-}M;()xc>02?et{N=)%B;od(>9Aq8@!yjdtPV^IHF@ z0*9}*Qm-%7dQ@*~2$dFyc%_^~6>f5cb=)N_@IB-!Ew!^+=st0;K5k=SEx2hZR}rmBF%x>sC1LExGwe=l$))x~=KFJT z)y+EVNwb)0PamOGtXH~uF{kXm9_S;t5AalMvUii5z8;hPGwIeyV844}ojvSkg^1af zNSC8Mr;~y8)4CGl6b1iv!qY2D<*jYYu=yvq9(kbSQv7549BSn4RAx)GN!M$tJOcNd zHBLRMkMn9+sShhpV{tR{&`kdx3{M06Cm*IE62`Th{4t zvP-#8Z4~!m^iQV2(cR`J2m9?Cvx$!ylf_!DMu@cbMXoJyk2Wvv!5<|(9G*QDnmnF3 z9qQ@ItM+$^q$}}x@NRE_(oF$6IW?jGepX$GR-p^iMs6wcA4D+`aG3+Yp$v0;Z6*S3 z%Jn8Pl3NTBQ_N9)tTvz{sL;ogq`;`AruM4AXoc@~+kGmQ#(+hk$paSs{mSb?rL+@; zZrfE`<7@1WR`cu*OI13Orh$J0jIwAshUoq?d{K9mSEia<)VrYKYlAvjFZV7#$@W7~&(ZhK`pWhTi?gmv%8$b= zX*xbgMytUROkC48jY51PeeV5TY5pm#Unw_Sp2Fz;=VM>(eSn)Fd2{1`Ku*}dAO~LJ zQ^wD$h<`yYtI`>z%O=GaUAN?HR5WalERi*E{4nLROb8mcZ?P|}*?siyC+wBGYBWT< z3U(YF376ZF7B$JyT%*5+Ygni$`pqRv`Cd?Pkfoi?9nwe_mZ(OXX4UPm% zeb@i+{Q??zUEt#s2|5{?YmKHab8@UmZ>qd{Y&5eWaK^n}K7wjeBG5Iru+Y-ftetg= zmQ#lXZ#zbtKU0l~iMgS!9=oxBgaBD+D=x^(i{r!HzH$eIdU<&npMaouqUTYy zlA)pDa~sSV?O+NG9k4d@_D+D6_>Y$zMGqyCMzip&cQ8ma$^&} z3(>~uB_*-PhlGa3+7CQVgmVHf+PdG4Z^sEDxI{>qo|g6^CPpn^f7Qs@_YPxOx~X2b()YiX5Dr zo!!5$#mfavOi*Q6WL*w={OU0+tZ%vZHnVze%t(c|y1Kf6*QVXzV6Q5s-;giy)~#Dc zUS1)^#k>ax2bx-1Mvjhu6&7;RMd7Zlt^&V_jYUYyJvZorjJgK~B!yG346Ut0>*^jU z=a6u7bN|`ip5EHGw6dZlisa@NX#jS*@0$Ye$HBS8nb^^f;eX!RIFLdW8yB~`6IaNZ%5D z96CxNyHMLscxPxfCR4&8RTyc72MSG3VAY-c*X_k$BZ_oUwF_G=JMFgyF_?R#yjVx) z#0CZi%5?K9d4K-f8paaLN%Y zDAf5mEgt_G>LQdf(@%bzTx=%+3M|b$QrO|%Vshk|4RiM zk>mCJ4&i%0x0o2NQ&LiX|6Ldfi|8moF=Wdp#}GI&LZ0Hec@M5(_<@Ppy)xNV5Y}~U zj8>{(<(&$1471R*t>1bxM(+J{kaW~pXSNSKR|;EX7;?*8mx!|!sv2Cns%on{{phdD zbfyTQvtO~@d}14PCsR2@n!cX9OBh{S zi=|PZe>bjcYi~Akc58oau=~n?+Wobe3uQLkin5u+30X$Pn$q;dP|mh|x3OT6v(X*> zjo8|0Snq$#Ime7Z(MCK@Q@YH^BY!6jt!D0Mnec=!F+-JA{UyFU($~FBd{-}9iAjl- zR7+3qZfX}?2p1>7lv_((Lql_NsCL?wIOGX`z*~Iic5>zyveA+pWTy7^5!Dm=^9u`0 z%gZLt)_4fb^KpAds4w&!lU*P~g+ldT1xZDqe-H$3cnjNpE>K}2SsVQFzukTX+}l zJY3!Ug{QE7de4t}R?_S6SZd9`q@kEMJSj>?hYuVFR((> zuMq?nj;@xC+ruy&4`9&~1c zfePXng{UuC@ObCgk?@P>sU;OQBzy^`===9sNUN<)aQ|JSaMZ{PC+nZ%Xj(v zKX~`r%$+t(_B7}7Re{_+*`~Tl<<^Q@0v#;;*5O-s%i31-?j-fB#0C{&K zOcKFTRg2m92dd1RqXWrkH@>{w3oyXtz?XZzCpw}E{P>~!!WBk_MWgG(4f`OJ<*0@R z1>ua@^B*4{LwnQHqqHwQ4BEYkcM&Ap4s$8qT%VHUt_4snVL*dG7~Kkx2_Ogc;M^Dy zjGD>Gu3>JA-`-Wi8$XfgSC7+nh4WRJVds3&X4U*WC^E`Ug11-^F<>pJwoBDAy5y0j z^g)TquynLglhxzn_$prD`TfV|5(h%vB5l6+x$0$WvZgcPnHL?YG5!5mb{I~LNoGVp zEDJ_QNB{Zb$}J@HRMepMGs@M~)p75)Q4$-*rzA?tV8L3E5CJ8)g~|uNvSH)Jfhifz zl54`_G?1z5ox)b-<>WYccqC}9oq;F}CT!T2fjDG^JVm#X?+0||oPykiob1$Q^P<%e z`}F}THr?+Mc6Rp_Mfd4lii*DP9N2vO_HFZb10nLk=J<;qNaOsIo&n+ESJQiNp(_If z3T>i8{A*6L2-ne1pB^1go{FR?y|zg4BTelpT|P9oF!$PKEFcbl;spw-J&WsTSpG81 zH!`J~95W&*tZrm##fw#Gx>POLA6yd!H%_tW(H>>e|}4#KpyRt410C z-c{tUd$srX(`RJdG3AP{?0-tT_Wf~MElf-pdwag3sJAkB7sHDzx}5hn@5*NO!m6Sd zZr!5HL=3U)T)ci<;uREZo~p$Hh*j$QCd&%u7Bp;V`&|pI3tRlhRY|f)rswv6#{M+n zX-HF3lip;;vf$a&i1h!X2>j&22b8%k!Gd0L-f#bocDd*dv;CjhqD?A_VgPSVJUu@N zvsgrG(cO;6XH-o2c}Z;VT*jR{mDN%hH*X)G{W`HD7?#JDBgy5vI;`g03fb4U=08X8 zmp`betklxhKBz59L`Wp-YzqxN1UM4ck3PpH4&w#-?=?_6|LPa|*tb;azBUdGxwo%R zTr{pS`}m)I!tY_wA>2CW44QMqMu-zh)2ptVABu{i0b?bK(g4UVs!o}YlA>x_a-Eo? zy5eL(7W9af^bTp*GXn#{S|Af*dv#)t`dHxvyZIl!GV1$i@n%lv0Eqp(~z!dEnM+M7x9VK*XnGhduWbKWU*ztse1i_{ujoeu3 z^2KrYdfsKuMZ$A6cOcZy<#OMk<~v!zeP4nil=1lB`u4UPJUW8l>$%&_m%QZrewY`1 zLWMR=mrZ+f#p5SrO*;xOBl=4fkND!u+}tjLo-It(V5+QXV31u?lPbp`Zes&RPi1e{ zs;XLMMMY>@8ts!OPZr0J()FNBZWb06z~IJ3T9)P=`r^Z9Bv9<0mao@R?Ay(66kx(eSBE)W%>DepK5!DGh^f5@ z;31&HM~N=AD+6V&t)pXQWz}R_Q7Edw7AMX^;wX?@+1c6Sh9tv=gc>Neb06I4I^M=_ zF!b_@hi{9ru?DJxkN;<@TU^Rrgdwp5u-3|s$NKX2>T*SA^MN1=wf6q5`|-A|tu5A+ zYXvj)C=g2n18VR&8q+yhNzwVK?0-*4Cx>y3X&J#}b5BpQxKVi>8bD z5ui)Mwz2R4y|x(BLerI)Z}jlw^*%}ai!l|QklWVdgRZrqv-Yc(C|X>R|6kAs6kaR~~x{rbfW!wQT$_4;OC(XPfu z>{*ix5}xqpW(L@{PlAGPku6%7nIX3tI5?h{l<4-4j5t<`$SEpjpzv&Ltbi%VfK-6NfW!Cx{d+@WV#zGfCyIB)^ud}%B-YI(AzdM(Vsu( zZyqccsOYK5Gel31Owm9S=fCg>n24pFU6oPmTO+dm{y}9X5=~uQQ&-n_v9Ym~1&Z~f6l}Vl@{1YkZP%&} znT5f&16&N~^01=f%kb)1aa$%dL#tcpOg1s~e6J+Xm=P)Z1jeIz(XFE4mrcgB(XEct z^Ei(zM8NGAqB@to2(LAFbbPMp|4RkRdz3&4F9BL(dRk#rPL51gR+h&r zMiw+$PC@Rk*NnB;O&w^ zy?mdPbiPnK&r_I6n2KRxTE$i_Ak|iodC(q z2ilvPaiEQU&d=lI9rkKNQU>P|zHBu^#1y(_Hj>}CURiUxrc0?NVGLZ?x& z_G<|`*8BH4g@jsuEHbfw|1G@X`4TjN&J+xHMK zvDJ9FMMa4PvqA4n@8(L)QQ|Wuv zKtxJP>Up>d``X{!-24*?MMs7^wwz8%4jKJbo#rvX6*AIaWOD3YU*ia z+MN0e3JC$d)67$cLAv27ERd}5MC!?zsgJ=aAi@u78~r`;g!)S0dD7g#gCOs(!>lG5 z8LDb(L}5(;6d)CHwSmL(lY^m^S^VQPtcN+8#%^Yr#H4?AcM+HABQJ9DMCjCYwk3vK zkC;f(RhdByY^^^M?h@W&O+MTKY*7X~8X6EVww{r}AQbAO@|7e(w@_HP>5Z~mw<*n_ ztuv;0z67$GWwqy9-S+1F(>S)?{(dfC~pVUzQ5NZ_6T!wEZ5b}Atu&> zxO9mqa*%ygW&T>7Vtyxj8p{2N0L26^O`luxNwe+;o ziZcU&BwEPjt%Tj)y7EGUTd6n>Fq#fq@U1r(WbwbqGW;?!w(U0pUleQ~^ZhL&k&oRAla`2Q8k012e@7M?{T5+!l=!0((dM_P$m^F}H;%4!MR%CrBf$es zL>U>H9 zbFY;eL&yd+s519e@;o~`;DgA7`|$;UKzyaF_V#wui#@?1Eoj0qKoHy(3fyA+if-~( zGmS%HV$43Pvut0z8p8)VdWZyZDO%p<>6IQ!lIOpE{gTy-1((3sy6}6W5vOFKri350 z-$2-17`KNztFtTd+`u6~h?LI8z_9)ZfsMm(yQCXR^g9Ce^=Nl76iaXbsFv?c8w)Cm&XEOmx z;h9=Y__iA${l%4)&%#5Uot@oc-NES9nVuFZP>jxXcXvPUu%8{!KBz`vx$B0p zm-?IG_Msn4MMd0aX`2kG2=x)Xz{f{hk^T~h0d-zpp5|wDYinx($KODQ=6tB1(vy)_ zG;eNlWh!6J9e6ozFRpguyFNQK9E6qaesBL65NAp>`srDI%#f)a=7`4S1M=Iqwd69% zZc&<9JHIt#deyM>p|CLIj#R{7()3u+Pocwu=2f9zZ(gKiFj?D^A(fMxd*Op7>({dP z#vt4nGBplq?r&|3xpZm7Zc5NS^Dfx2XVV+0s&(c|goZ&VCsM&fGk0g|wD)M$}mlQoQ zEphm@@a8i>3ydFRU6p zQ_di#9mOQjU;!D9Jzo;% z2kn?+RsCmbFkV}2ZM*yX-(Z%<-B^Lgp2_JVR39jgY)$zP0nf#$t2$Wxyu3~zBE-gN zSlU@-6lDaUAG?g*2qp-TV zTI)(CAm=-Y9d8w~9V#w5nfc1zCAYDbrhki1NVw4*6%27iGdsKRk`i}cf3YUz%N$B_ zcxVi<-Q2flqg6yio`$S(c^jy}hV4Ygj9ca7rHY7g`;3YT?-mPn zHMJvuvCIzR0%*vdbk!L+p^(0VR)rYnc=r7^g*#)3V~2i&9!Sakod5YtMMYcv*m)ox z-@kkX+tCn+ZRPm0%MK;r&c1E^X@39xRoLp9I`S@SD_X7%A5>YtCg?YP*ZMQSfe&DF zTAFOMq!5U((BqWHqKXWOMt**J|3tZ7ANKp*NU@bK-Z}845Jh~+!kX$w!M^4pH#0E_ zh>D8ppbOrLxl}VSptiX$Jni@%g<=McEvNi)YL~%1vMV@&2i_B&vu@4J%}~w_)-lQW zjmHff_&{qOxE%1r+XgYF`i4eCLKEKi%-GVQ1|*897XzGj&! z^D6Fb*~}TAHT4T~dFg6ul4@%B;@PSdPGLX6BuTri$r>wrpUN!G=QrDR#ISzo$hTTZ zU$DaHgZ)m9CaW^@+7atw1;`W^>?d~T=I%B(w=h}HJ+21+OIA?_5mOjWfYo8{JW~xc zepZ>5+GJe#Rk)1(FEcpM2qGYbvL(u$%zJe0Q2SQ)t^#U-plMEmaMTzWy=RZG}cZ3m{upZnAv=Aq?=A z0uOoRbe;7wt=zMBiT**Qp>OPa+^RM|lpc#9m{S-OXZ~p^D0rK5=rdFf5mCAKOr&8k zx6XsPnz~o?#8R=nrXyqaY6Nex;0G1B$I4+KO4Cg3$3zD}nDmXIjIOXK? zJ|PKgomh!<;SAVrRTKnTdC-Af^;)cpHiu>-T^4^Eods7Qc05;G7XbSZfHyQ?`gl3G zGAJUgA(vgpX-M!ufny;Y9JLGNhS=xwh0}RW`)~x7mH6^jbm|ede4ppeutg3EW$ffs zIEHl2^Ikgg=fDR=Cd46;h>MrE>1d1sXnO8|_N|)Rhw39vr};IhbD}W~fq48L z;REOgM=xsgYsA_rA6x|malerf5tV^a1!Ebyz}Oh8!}k-xs;VjgMpIj!<*{f^u%Xa% zkJZjL3244^HeC3+Y&S(yQ!RPg8VJR7wIYhuRM6%{QL^`K6E7EGc;nW^3spzB%l=7E z?{-3~0hNnN%>DCbWcNdwS`|eR$!C2WI;^bh>_uO{zCkd{ccP@H90eAk$W)nU+1J*Y+8OlXIjhrY zj<6gO4W9zyNJjXuvb3uvF4+|Feau}}O~&Vj_M=bof;aL$e5k3RhU7I930-1`G1m*E z$y)N6Dh#EwK=~in>-ZO0ib&??=QSa-V9V(;U4Id{-fPCUpF*KMeEeV)(=E{l=EQ!` zr9b!Y>PfMXF#AE$+EYXybcM@-k3nx!EAbxSxoWpX>z(`Fnjsp@=-#2B+T4PZSE(m| zvR&O)TkMNKCJ$*cj=7I6MvM!Ux$lzUI|HWGM`qpp5BgF!f82?*U5n-ZF^7&DE_I;Z z-oAQ9K)AV82%Pyx0q4Oc1V(P?_&oLdfe8V%|7$~mMv&Pxe7ry9=hH>8QiBG<*OKOI z52CV`8aT)^y_rveI}s5CI}Fj9+w5lK-QtJ1GuZWrLXyBEx)hq~;q1J^=gyWr5cB{2 z`&xEaQZp80*U^%%6_bt4yy6#95Gq(Un71$mZkF95!PCyXwyr*^^CGBkiO%3hUteE1 zgx&$$!i4Qi7D7)RkMBP4-An68_Qe4Tk)Bx`I5eofRj!-K_hZLqEMe&aPE-05z#l{V zRN|m@KI`Tgqap;Pq+90r0^*Cv&#Afql5gk7$3@;mggXnA`FNhmn#FZCJpKHTRwy>f zQKcs~x3i0(PTk|o$jIpD=j$ECv_vW%aSylS^hm!`Wo`=GTF}zb0h$9NvDnQG9_=zgmm~f;I}3fI|JETpu1Ol=4qtT+=|I(r@FKn3x>> zPW6ACj>Rd8Rj>r_16(x9CTfeh~Aj17JaDEJyy- z75UsEyiJf@Aq~42*Vj57OqHHjd?T?#*2hN()MMSHwYq6nCor?l)F8H`n%do()8kFs zE72jHeuuA{(!pT|gD$E=@2RR<-b$@Y(cC@zxG+l|knFMAYSt4I61~>;7e3`9`8gz( z#oBq`!pU|JL(hqK%0e-(u2TMV_R809nKZ#=ajYC3X>MsTL_-u>kDg z6pDjkiMG;>z!9WEFoH@X6r)3B0=QN*wcynqhUhcfww;~zcTsAUBwHLy*UxgcGj~~n zE~+in1vGLEjg~@_me(z_XMd?8#0ek^dVxX-Bq>n&966DwWdiYp5KDi@`N~M)P27%- z4$w5AZB09taqZ}&#^l*>$G5deWN_M+Y$7W$LCrYk=A%G@g&C0@(iX83Cjx5GH|g&e z*Q)Dt#ZEX;<=>Mm3^ZT%=%xy(AyUI1)1l+6c)bdo11|d!r%W1fi#M%>qr2VwsrCLO^58 z{wDCa^K$Ud$7$W>mZxjHmAY(nJxuC44``NF##%r^)?hQpf>cz0pQ47f@83bO*M|Xk zzH=-F`)yTgEl9A!%jifd`MxuJ3;opbH z*ym{>3j(d*8GY32>tV4L4+K^eh+DD2$qeEnQEP&e8<8!SvClJwzJ$mPX&B@w zm@zdsl%JUNv~6qIsr%|v-@l*dx;7dN7eGw8rZ?VMxY~)BVg?75)nXd0i;Rl2L9vE| zAH6+=k&Wi(6obbV1SlB3-TF|b%Vu0ic6K30tXlJ8ds0uf({Fw(&vP6sKY&jAHLw7M z^7Iph*VvcdR#StUIE$BwyQzJ}%SH!wnBSQqRMOGV&;qvQ9nv!ESv7%Bn!xd!4bQfV z%6|T0P%0FHzGcK?u>q;hJ-;k@WZ~EdbP2G!hHdjH9E!Cz%0&Kih^2m7IA*Bb7&`!v^qc9+-6*O4IhVP zcjE6110+it*Bq7f)QZcI@pU?e=*Lf=qOa?ToiKSd$qI~VhOZszm6sF+ zC}3}cdtv3^&@#=mzCs$_40#(!L~SDD_O^U1z!8F)834xdiHmSocXX``@;Zz+I10!K z=;{y7?UeD0U16h(k~UM1{!cIU-Oe>=!Y1<>xN{Aec@*>Cs71AM@RYh`g1VQ$mEeXU zJ3f+}=sS&mbsYH4<*a;(eo{1oLfj23$RS<`ivDbtI^e(f-Fo7IXOf zL=Li13ul`^cbRpse4mn%rPS>R>_$~XMNRMcg+($J#OAoO7Fj= zheoM?vawXs?ntE{CfQ|;MDpJHwSWAa#^B0R)IawK$$-WS3jb#(fYvI<-NE3>&1Eqy zdH}(!G$q_PwA<+FoA7Yp>k3@)kfim+6+!+D>^4f(0ayfuo=vx`c5jai>x};iEBHuV zg14%vIh5y>4{Mp5TLAm}-_8up_*E9vM}uDr_QErgz>*#JUK<;H{mSOY%uUx7g&zr1 zfvx9UPQh?}$krVT?2u<9kSz)_Qeuv=w6y(*LMkeVlOPb5ri4{%UkXDXsM8I+Pv+d} zxi_L)UBy#@153(_^Cm*zF$N1X5oP8WC6bE}YJy-(9QvGL(J(Y-m_KKUUFD?(b%WA_ z94m4%oRSVvyJVF<9`IH9674YlAvzX+9|qe#{_+05DX<||10;|Uz&9W(@XjDCnx)wf zRWRSdKLOt8O90uR_X8Gt@{9x=#W!&NPKoJS*b~rKJ}Tb>2Y|_%Tr`zX^4Xcl4zQ{2 z1w`P42*oyWf&HN4*j-jfctLg`6mfkoL06t3wzajTD}Y3l?|VTWs_x-m`Nw()EVy@p zzL}q2GLUTm7l5RIa8Ze4mPTq){SJ2uzkffomI^f?$khfetfc%M3Igs_Z9{YKAaHrO zZr_HE`5p{p$n!n`6M?&ryMJ(C;w8)hE z*5fo9tSehvph#WA#kq_l4w+^Mbi^kmHLh=gD$tdqlI^)SEd|8rXMTevy$OF4rf4aSLjo^+#%`YbLvv zhHs5HzGey)K3Q==6_f9-PqxfCZ_Mnw^ry)dszR!{=u6r2N$T3KpKGRW@0YRzIwZsI zcB713sFe4BqoL)x?}IkXYMZ`JV5?00xb1bv;b-{wDE`eS|M_Jy=jg*r#^)-r+@x`5 z@kNO~9({YeXL;(aFn=xYsJ6AW-N%0PK{<~&yoo99DcrI$7k)wq1Jy=Cz1s^oIBP$y z-L$afP~HYZ?t_yT-alc(oxI-)7Q{nArdeJvDvh7 z>n+98Ka=Hbx;>UWOYW7@ZyQb7g46d-zOzpu9JdI9VWqS2e^tIlq26a%#i<_GX7*Ti zFS)*cl7WyEZq__eZFtPhD$I7SU_tS^X0Lo$g!TEUINjIzHNIH6ygWTuucXq`_?&EB zMF$}bv;lQkTCp46Rg=r*ypXr&5l(-dwv5YmlPa?1p5zfG)QAkmKU3(Wm*2_V#;>gK z)M`^dzf;B(_e?NOZS7Z=S{&&$PF(PTN$XoJww}UGfx-{IAkh=R%7XM4t?v3jmW`F= zb^0D7*<6kMtpax7CO>i+y6co;|t#EJqbLu>MuUv{)=K@)7MhFb{R2+V0SMH zzQr6?tp;RS9U9EiAD4C%CARoa@(q-N7PnY&5>OgE@q>`n(^!l2B@Oa{DRfJ(SUaRVY0B4f|&>pmH_lq?<$az)2x{1oNvji70N~1@+~mQJtKi9!SwYF z95fir(`lRqK>W%j+`K3RJx50sMk_;{6LNWB_wCQSAj)>adGveC(3LdXpH$Glm1 ztH`4DsmeeCrD6Q0|0QoLSB5;YCh?pLnMlOBxWCn~M(P7gC}zKBkn ziSCTQi4@Bu$uD^DK*Y?+Daw}buu5&U{HP^OJ$GrnG#}zI1qU(!$yK ztsKKvfSWBVdS+mPimfyeqF_jmfSX>ndM;oCFpKt|Jk;ys!3(VaVf7s3JnXtA1Y|s$ zmg5{KEL04hf$zpecpqdg9Pm^6m*I?bM3F?$zt56MQ<~b_dtbcm)_eUr z(#xr@r?1Qwr=_JuONQsizMwild+AazM0`QMuHGI(>I`e)I728X-X#ZBx~G-WAhZ1K zJV3GrDOs+LLdws2*Gn3B=OL;EfRK<2#WBeg@|eS{S)pWtJoPJDu^~$1yJ@ONR>w}(bYXMg^DCFHRVN38;li6Tekg{hF$Qufjk&&@xV zseONIKpTL)Z{YWb=;hRm!|B>O$Pbg=#|06S9QZ*2=TNAgWp^tca!`!xqkf3_M9$Xa zpxO*MBrw}zdxxcZhlwA@?YF{GPbuQiO_9jv_3WhGRG}6Rq-w#xMzL7C7}LkJw8?vi zaw)<=3?t8pAK+Xr+`C-Zb1-raO$QRQue{+(;{0lO*f6HjsokTh%b|>gweO(W?^mM# z==v_?X?6AVIC;0tuy#`^#W=|R5H(>s#tTl?ax2yoBM#X%?Yb5WSY|(VitQeOoukVJ zgadFVQef7trk0_6?@lOPh{Vk8?PdN}4=wRY_c4tcjRD#$D^4=}Mb{DOw{c2LKNrc+ zU#D1He$SUrZCm77k+U1vPj7e*4V6h1YW|!Xe9FMcc=_nc`P0dT%F~MVnhyQLg_HvL zf+BH~r6Rl5#cg$U=U@g5$KN93{jyiV8QF9f!Cg#vQZtFjw`dRf{L#SlV3L?u6sftRwfz7CRY4WH+xe8mjZ zZ*wM!xmcSL&a3f|XX>&65W_3L0Pxrwc{oGO%{cjEmtE}BR0wAI;<*$NpSIQ|S4fi zn*QED_T6k<9~vDuv$jsq$t?vh;AiV>%g?Qw&|LV|#!bAuZef*^@{JiOPEM?hHk+l3c7ByX8|ZTWJL0c(f`5{F>_Etpu9 zYFkzWO;Xd4eG6c-5Os&gG*nA}_i#luW%fh(!nAUX8aWwFLZo-z+pvz zPxm#yKCdKJ(2#ejE0&^ z1iwYOo;*aLLRQ}`!93Kp-=!v#Y?%Jbx%^d@Rila1k6%O?lHm+k$EX*{(2#)*HRD{K{f|8t$j0_2#*Rc|4HP}I=h zziz35&!2RH=#K{nnV}Y`egS5wTD<^6ge{%PfK<=ueiBA@lHx|$_oo5~!S|4eHNy!w z7Z(?Y`|=@kj59@MFJBSQ`fWmXanc_iAD z3l5MPa*zQdCnLb2SGiX|&9VI?pdmvXzYnZPI4iKfQq%=DmhaxQ!S!(er6G?By zGqb?%AD`}%;MqE?|J7k`C*||8i`i`S!BYz^aGWd@Tr2go^GHL}0oDSPkjQw3{b*|C zC@J-H#e%iHYb%;i3>1iNWPSJESQ#|8S7uu94p>{5sJixVhld}SYL!$jT9Jo8xnL(j zA*O#JSs_?9^Cf^=@{p;RIWgQatysx&-7HP!v|Q!^>w(KDL+f8_2%~_oK25eXEe{%p%Wic~$wlQPMPME-5LgqaFSlqyI(IcYtHPzyCLBh(cv6BuSEF zkCc%zB82R0vOQ)#l`@hfNo0hOBw5)ZE6GZdy+c-#mGyr;=llDg>s;5luCqKo&--(~ z@B6iGXF;MiU}H9w=x=r_HuyY3_C{P(*}G#~%xL?}qO~v+uw~P%AGR(T9d^HijaFF< z+LvcTi7mIdl>T~2LE;lwV~S$aMR5vN$X&6d=RhpY{!)JsC%3023~03PRJ?GB-||Q` zb>ESlT3X}tUQ_|+CGADB6GaUuRa(tN2^NkWTM~IR(zVB3C7_W>Y2?zN4sSzB>P_#~LfBgjC- z6IoA1u{E)UXV#;8rx1Q5iU+_cG>4^zsfL+Diz~5iQv4=xqZ7xrGEoO$1mg2n*9w`K zuyr*!8g@aHC!oT(zkIfK?&HL~cu;VK@h$7W(x}e z1~k+}>>1B1peC_= z-yCigN^7&hEvk@Ihy13Ii&4eQ%y$)w`U#6IuB(PCYtnDkt!*;2lRB*SQr$DmN!>KM zbV{bz!!WOFYG3D(yL`tVN~8Nlvkjjdz+>3_(%TX>(lCGG&1ht6o0y-}&<>?6>kF0i zN*Qu?w$AOvb;A}KAjdH{5;r=9#^vp@hr;VX?!@G^v1Tmm@Ga<3 zens<=tWhDT0>1Ws)2OS+{%xC8TF2*$@DTq~n}=RZK9}Fc$(BF0r(Vc9PY*{4G(3!o zx=*wCf>l!qDe(^z+t|9Mgr(z~bZLh2MB>g5ePz?qD*Q4!ReCgnX{z2ohZ39^4(63X z8P#$kjm8Y`HOd}xpoExiHhjn2=L3V3&eOV;nX=HX8%@ci;_C77v>f-K#6T1vraep{ z{?}<%FNYOvunkl0m&9neI&VZ=NYj*SC0w`o%8V=5=-Q3D`a@?I)-*a5;%)Y%P@jLg zZ2rL9?%g2lHfdjNZ+4T=*{8LvBz2ezL)93x^ z$SCcz^k{-OSJ60pgcf%& zM*YWJS#X$t{VMp>{M6~w=i$Z|+OzE-I2XW5>yyb04#OvpCf4HbL!5~~GHc=I#=00# zJG#4H>ZQZnNbbZk+lT)Ced1Nx2;~TVQt;gF#zwW-l{JiO7)?CaR~fyFy)m~ImVTH% zly{%Fx8=E!U8lMI+-@9gOm-bz9rA5AMwiirK;Tf*aVwZLHg#D#+9vDqqfZKwe>H<^ z^EOAG@SAS#Prc;Jrp!BeRa07G;`$hOc6&pm_4Yc>-@~Tm>TZE!`<9Hf?{KZz8|u?| z=&}qtRcLhAS020fC%+3=W@kW1t@bB4i!QMv7kG*NRAU@nvOMCh6 z%YeZHpK9d%Q>qu*Hbri7&k}QP@JBL4V%qV~M z@%cWKGbbHwe~SHJ;WUF}F^l6!yN>FGm@`^@blOMF{EI4NSaZ|fQx*AFJAbYZn3EQN zT}N!>ch#8hboHk=ocTPSfBUl?MaxUMP4b?Bhs&=)%pH@HQxW~z*~zIQ_+V378+pve z4CuKq$r!mTNshJaU}P(qD?fH>8xMW3zL5d&M>XmA(fnygA>Lu9!PPxXO6c!Pa z60-oL3#$OG%WK!Jc^nB!9xNe0H;3kTZnEPFF6-#mU&mcp@BUbdNli_~ZT>(n zF20oCdKjQg!_Uj~#C9z$46sRt>0%eEVejFq zhb$$mZ*BT|=hVX+qVwL+)6D)ZU1X_z*E8+t;qmF6o9S93tEScn@LoWh zFD97a=|VLDb|ABo8jruAkbt~IV}Rd1ICySf=f{^_6Je^B#8RD_@13_3KF|c|8yK2~ z{GIBKS?hJ6Xhe}i4+g76i*-H*%UnGbfcEI=xAWg7<|eZs-v9T5z>a2Kc#Xo=X79xEY_W#{moSOYWpf$5$-C}5&eQX|F$yX@X) zvCqvtJ?~9T-7qZmBIG66j)ny$S&P%r(c$HS+gemwnq%({GSVV0`BH}$PV53V+lT?j zPqpmC1M`m9U00u8jp`x%;?eB$1B69lNqM%!_;_*Yu50Euw+B{dq0 znjtB+DQt(ibur18Db+OZ@vr8 z6-O_xJFl$~lR!;PEh-}eQPl76*BpixmzUcz3Hf}yX%mM%kKmC9@EvDiW4WBB4bzsg zstPT`nZpG|pYeO&Q=855vfZyv?>RfTJs^PculLQb<5UTFIZW)(vNb6Ly1-`UOHKar{B4l zk(#1pacm#tcsSnzV~gr%LP~q2BohNVbc+vHF4RX(PEQSx3NLVlm#j<|0|k*@`+Eh* zK@hh@Av-vOoM$AN4Tj-(l4 z{pQE89Vd-Gn2EALI-I7J4w?oy7XEEhd*8U6aJo22PY7^_7h)y&`1txs#einQTlxSV zHdySAJOpDyt)uAh*zZTcDKu5cPymSUfq&8H?;zT8B#~;6uL%ZIrM19&kzeOPJh3ho z5D>7yFw=9LWdD!=kZ3qHJ?LBvL-Ch}rmnHJSXPQPY3QjWz5ed#8#4fmv|N~xS==Ms zdgU}QK=3AE`?t4dd#oEFRsclZ2&3egFJ8GiDbVdQ+5 zJ09W-?ey9483Is~Y`YsKE2fZHyzLxB7!N8Vx;5}YhwDj4waa%p8X6e1%*?C z5bVt;sF?MZ*4Eqa99{E`Pfx$(RmvYr3RsnA1Iq^g0h<4^z8U4ttbwNu7IkKVszf{M zEi{tivD{}q|2=m99IA@haFrxlGnhycc^W;xj_2;lV!gSjurA7|STZqRFnsYX&N5N zVT(2ySS(r^exq3G@LS~4=575YX)SEgK2B0EzKbjsUz1Hq;*hSBPqq|b-M?(y*rau7 z^q``_cW$%Z#$z#UXFf~$%|D4uu%B&lqHN7Jc@-bCN9Vz%?zrEAbYYIgXGKho9CML5 znsbFo!;bj^+d;|*;_$&evEI5-g#}gC21&glW47F7qQ9I(ICH|nj*)~u8?aX1+4%Rm zQdx7@&r_!G-GxsR&MDfdtqSdKPoGBCnPpE-+JUu4egd+Pj!Hx;rLwNMIQx7V7}%Vp z6B8az*Vw2U6&rgb;$nv`3E{%4+f$FGzHFuIF7%GP!1dXfcm)~^US;?%Q6q3v^hz7o z)30K@EqNU2oP3TqB2hiF>%tvZroNE!a)uEnC*KMn%=Z(GqbYz00a9~bSzzsq6>dPab6?MErWgq(7x$p~AymU$8zbtZq35KFia2#zkz(+KxJE-dG zkK+z=@${^Ntvo#Z3f!Up*4XfdS*pc9R^}=w{h%ryKJfeZBR{{b_#LC7Vv{v_TV@t9 zY3V!-YMOEP&=yiLCy}1wE*@H>j1kPdnEVkqqTpwOl&Ychx{Wt7($jR7Vc;^H!e5|V zzy~1{$BtYdmzS4$wpvC$@+hUXwY3#uKH+NMF8J&*7q~WbMQ`3_o`xt0xH5VrT;yT( zDjEeJ;D`L{bu&(es6kW(OtJcgh8mgeAg^NL*j#*kss_Ib2Fcy=Dpk#FCzA9snr-r) zMa3Pa-RTllCa0zKRKZ;5`mxB1Eb%dp8y}{AbY2ffq7~XM2HmHHdD$P0MM209&8@s@ zx0#%_<9zUQX1RJhAQV3O!lEKG3zEMahb%_RKVCZn&cAwH^X;z?KKR3jT3Qi!S{nQj zx(3%cqm18xJiaJj2+te!bO8Yoh_%SeVp@+)hh`#J24O(u@ z%{y0u)z!e#WscmVW%Ic>I-X53v^4Rp*vU0DQwFKQQJ(vui@n}*f>CDf?vXeUP=J;i zhOYVDq_3_WsMuWU8wyhgdf{r*mcxq(S;19Dkgv#|p5*o!Ao-#)5~(`bEoZt;8fBMc zfBE_~JNy(obpX0+bsqiGQd08bu?c-ML$d`tDYn?z+iUPfKH>^O%MZ!I+Ismw^@MAu zor43Q;es!tnC`VxD_aH*?+)IL83K$fp3Y!(@WEG=NGxaI{BnPU7CHywy07nT9lq%w zTk`Z8WKBFv4OJh8!sbWSb~xEIY|T^W+wVTzognirOcoJp zhM8)-5oR~n2;nr%&sn!!4U#(S;BTtWxR$Q};LbFzUsQw^n>?PUcGLG}eR%c<`(zac z*)zP!%ye>cl1U*R^1`x* z%vx{`rbxla*3s6s$N!>nyyKX=eIIdHM63>@`crcg27gwenS}yx_e$#SUY$yR6SRbI z30c_K>}nNapwgP|D^}zVcWRbI2phN*VnY6!NIRP#J-mc>;aO1 zpY*qC8^GkA9s{aYj55B9v$ZczGurokP~oCwbvjPHH02`%}#dl4e9lm zp``2d@u45*_g{^S1gha(TpakgYHHq1xt@b?I(6>a60*b}+vlH8?J==*rv$T-)6qXU z`9;>8jh$8E!cCx0^&^S;{BwiVE@rwG;6L!esr`}MjgO=jC&?JLuplNQlYc4Txr+Bj zWGVV)LWB1}*#3J6f#5qZw7MFDc$r_FOjoX4K|0ieVX3LRC1rkXh`44)uW!)3>h<;G zRF#m3uz|_uVxg9pYn~#7OtN{?;N%_!EbCm1ngBUaYS*vMf8r24*Q&9d9;5jk$hJUQ z1bczd1^qi`Q+s~)ms4-L|5z?fhj@vJ_}x3S^9g`Fm1r^80kPtbbSuy|oh=B7V;LW4 zXgH{I0A1}?uFS}soGZwA0|2Me`bztAOkAu<^nvJ<)+v&LSrHow&O;N1nD~w+rN>+V zdY0=Y3z=7+LkVM(2b8Y6wD@*P8ug$LOyOQhw^7Ak*DMeV!jV@aKi&VbULoCJQ8_Ep z_bLABdMoiyO@?o{PDh{f(>IazHKTGPrz;;CJ=arS#hUBt8yUHfNYn4w`+9yjQVlvV zwYS$@ouJ(>4`JiFtjhA3m1LaAU5kz0s$4#ZS(--Ai@0L;yWcb|X~G#TcPHV{tPYF3 z`VNXMUqT5%EC9F*OLEJU8|dn+V)1d|sw>*`wH-yrFcU9V%bT|FV3_UcVI8dFl37nL zJNK9iBg)c}ds$MCy@ZQ2Z?WzJ?^&;HPs0r#+VX8ayVbnaCAY9PRCy=)g&ew7d!nDT^BMPD zbCJSF0W=mjU;44F&oposS!X?Y^ds}NkUs_8VG$EuGwH)&yS#J)m4=y_!cAyqRF3f- z^C6jkRaQ~OnuYq~5C~O`jO_HchJjGP)lW6muaA96+dzVW z>Xml-Gk;ll)Vn6sGuv^cLi-0m5AQT1|K!Q2`1sn1h~LY0RdShqmN#$q+-|qb(PfkLD97OQ>#Okl%-!3C zw9G9mC~nzju5=n+XQ+8qtjDBsg|*gBpBk5hf}`nfb^23O%+l6^3p&>LK!u+8IbZ*K?eo2r?nmj>+#c$EK(*Dz*yUwP_h zGSDmX-@trrLNJid)(BAHrUa%Bo!aCi-=c^xt~GRUe|fI$ejwVyOGN?x;%j%YduZCY zHFPtt+HKL*@LYsU&T*z!ic4v*RgGu@tZ$fEh5jhtp)2r!LF*0IJ{2iR4h5gQ`~Y{& ze_6%(61zTlk1ei%#|pq`_#n_MzgdU~(MUL(+0MNE7neV$Xj$!$2{K2?5JG6Jl=BBn zU?;NP<;r=P4xXXc&1_H7OM6sj7UTVtD+q}-ye%>0up;zSNX-HYLn9Lvn zri+$>WPQpflXtAa6X}<@Q=LmT){RVbNn%|i=5hF!vo4?gdl6h!Zo)+#1`ZK1d0ZXC z!)Ao$7J3sB$zLz;VoqCP>l9=+%jsqRvRq=Jk9y00QrFNBgc@c@jL?}^YpSTJLiRF{Wk;Pd%&Z+ArkC;BxEUZa_51fNg`}X`6XJEdl^*~0y(a>-k~(xc zQc_3uQoYM9c~CzxIQc~(Df#g+CL)BwPd4=OAzTHC+UW__(IIg%R4skHL+pexI$h!bT z&B}e`r%V676u+_H03ozS)+gjXppmLdB%P}mn*A|zc|ow3l`d!-Gc$9e^rn92LcDOK zQQ|=4EuPLme-shEdZa47u->W9-=zqq2uDxMibo>I`<~@X_9Gpal6qgLJ3OlY=~!$4 z$ds=Y&I*Ck67{9ti-z88^IjpO;s!P1p9oI&-VnKtjt-~G?DJl+h^c_z+EABtc@Cd@ zz^W`JD(Wyj^_8?IQ-6MY#VQlR^_2lMu@gS4v$ap^k6aUBr0^RkSF*~#c0;IP`n9`@ z!=&rvV@X*kea~rr-mf?H{)(P?6t`h!$k#IW83@6I^G6Vj8fJBuRP5J2k=$kjp&Imx zcmV*>jE-6s7(i*(u4`nZ*fyz}3UW6p%KH6#@;rdoxXP3`1%J9x7bTYxcT`M&V{Eaq z%9&&IZ$Ygr`RrQrWiOL4J{lv=`g3$j>hJ0*c*Pqw0cRiOhR>>(|Ea*1s zyn^r|Bp~}p-;3&Cq+VDg6E2yVE-MSM>S?O6NlDlLprMkqKR2)!V5_mf-xRyilRPq? z`s)Z9S$cU`IybB5io_uA2lm%R=V|1hUUMj&r?8(_U}2>G$76WXy?5glKDqDQ^S^anfM1-PfsTO=A$sGivETKVza zWGG+JBl*ph*<-JSKXMK%{+@n$$Kw5RZK-f3FD?6*B}SVAd2esq{1`U$ZMnDIDut*% zo4BDh_Pex~#jf;J4@SwiY`hx%(_QcTM zMMr`DKY~p&GHX&{j(0B$+-;hvJ%>Q0)Lz4Ox1)QF%b0`VZy>kURf;TP4HjFUk9|F- zZZ{mCFage+Z}L#WYin19`C9Y_xX;DJGY{T&n2?cWtC`f6&PkWruXp2WTh&K>-}=A*ZcJ}nX4BB~2Rc~JLR!7UG4 zjndm7nm$WkeKJUU<>pG%HB$L`T6xo~XE(mxJ(nqVJH`AI3u6<=2Tk7nagx60IM^^S z-oBWJAr>;(kY4C-dAtNpgrleDVK~b=oBzP}wU!pE7-dRNXYYhO^Q@Fvw(jGgZANzX ze{$kCVn&jWn04?w+{n{gx+yJj_)w6lWua9WCV(rlHCTKK9^-`>f&S7s(>AMxiXTfK;SRD!}*io~Y z!AVo*WJt_G^(QPsFB+6AM6bWEr>o7IeBa0v4;ggJ)WR6eKf>5Yn|Hsesv65Wc@hEd z`RC7LB|lFB&89o>TDWChPALpNy>i zh+~jHaEW(wKZsd8>;=N`SZUT@@UmXt*0XT^1=Y1Goj`MxoaS<<`4rr3$C!`v<` z?Ce>E%Xi>`9vr-%aZ-L?d=s*!2~Y;Rs#6_r-mtWA>*-H7)#G04y`@?lV!^QB+ddKM z`h+I)DmTzSsWUfRR<`-!TDlV(%UXMQ7e%G&COO9Kmupw)IOYA-)DhQLMYj{<@_!Mx zf}i6)0(a`@^s0jsw-0&PyI~+OMspE9LS!d?G z7h=@4e&vZbXiuCm9fQ$$a{do+V*GDCAgBODgh9;O6|E$FSVEW#1=}al2?1;J{wSN!_2?Y(n5;=bQ#uqhh`sK z-o{3V$9}inY;4dzwotTVhgGyV#}AU&?I@>%RkLfM^S6Y(NNpFZ4?kd~rlf8Uv1XvA zj2xSVfTqWuQubZf^uw*3L&ll)BTTcoKjgl}s@4wJWcyuE!h}P)vNGmh0mQe#qLnmw z?F0a{QeXDSu6vW}0?K}>#pekD%!yaPe>heTE_7?qfB5zJe&Q$aGV5n=HA$~Yp`Rk> z4ExG}a7XO_^H`W2uj?LA3<%(iqX|J~AG|OaX%h_7$y7b}^W^p^grx_{acSY3Ne{mFqbnrV(OorOaLQ z6{Ovs|Nicba*e)FrSS9GkAM2iQ#1gVRt2cK4uqNCyDX~A5oYG)MG>F)+r}Yu?P?}8 zUWX(H^>g@k_cRl%T$ZV=PD@{rD2G0(vhqB_|12yP@~D;lO@6HWvr?H~k&@W)&E6@h z>_wYRc%6l!?Pr+zU}=fJxo`~kKA2oC+7S?tp|vV-bx9S~I=xs)`7k|S>?&cvSO0T8 zmrjbeNctBoZ-Ih}MhT)Zxm^&mcWQ9<58G|`_dTtF9$ZuCVyP-=m3 zg)vxwVBYA%02UQ`XtVvE&Q9`UPC5F_JKu>DJF)e)pF$_!|#)3)vNuwPV|4+ z>AIJ1oBpkk=68I%TWMqL&#>j6O}4x|_3Py-o5gk7tvy@#xI%+96h~jCB!(7gK7V>| zjQ01XEy?d|hUTQ_Z&xU(m|OHV*=d>)IRgDjN&GqLVRerJyN>LAq#tue^Q|7Ozx9M) z&@IZ!yQA$}>GOM}$BHse@87qxo}X&>-WZ7wID5=F^e-$Untt@mc!{M#-aUpWewTp5V4%sV%^6_P#-(6 zTUe+oH}GNh+eDtuSbGL{S=tY)56D8*UygzHW82Ql0t%lOZaS4Nyo)7@7Q;xYv=B;e{-(QvjrlyVf{uxpVu4%HN|MH+py9v)y&? z&eokzx%O3$Cbd}o{?&H8n~i4KhloS%#LJnX9S*=!GHFJlho8p6f@O%gT!MpL3Yg>5 zDdYO9A!|B9zeImzC-$>vG(A_XZ5V}Xlqcd6ppcHd#jqXxk<9h0f`>+6>#a7OEbB~d z%~szPw{M%zs&DOGr{ZD>)Xgm*4KoZutPav{gU+w;%^s!qTL~NAUG3Y+93Mwq|LW=k znBX|Vz?F${?s@1@@-{Q`l_sx|^X-mc8k3g}8fiNXA>30Qo4@rQbM7u+{)x84<_nX`@~3p|6Y~WQ;L$CjN~7axwwh>rSZPiC)L&RtLvMZ;$<#D_M#7ydlF-f5`&bC6iQ13MrjB-N%BJKu%)g^09&z$J(c2sdwz{66-e{%s9= zWUY#1T=|iLy^4DmZuQA7~6?j&5$% zU*1fOX&>KT{?il#-AfI+%mm6BE9x%N(!aMt7{viP`)(AgT~K>@L!-at^uOV7wg0Td z1r&e>?m@kR(OIWmE}TIclT+)g$O|$2#f2^f{F=_DgyMmqh6wSiK^?BV?91@tlRw#135WqD4EnZ zGiO7@1IFcz;5cxp)uv-CvDs=S_t?(K7j7s+fXU$HO)#E_8{25=z3E%%luG$wLwmn7 z(Rg$Gcq$I@JxVD2;vP^m)w^QaCm_A(pLVxqWn=r9)8wlpM0R2{2IIq`ZLVU^?CB}NwqL0obIuwuHckiP~`>6zbgSr;&tSI7v zb@&uY)oW*HupCB~-@W2z4Ml`=$FC0R}e^o-%&)3JhX>jjb{CH^zBoqgQqS~TI~P!^sIrAEr0m%r zmlFdi>Ca=@yj)$wUCWi4lLQ&v=>EL&h~!Lm3WLZ^zG+f*Lko@iOg5X=1 zk~>cC@DwWHk7y!jnC(WozEpMlNRD%kyZ;Dy+BBL|yP?3L{??#a0Vfw~1%=Xz5N44A zw-sUg{I1@Uen(r!U76sMq={l=$;ZYHQt^%U9nWG*Yf4uZ1MgN2J0FDJPB7{)7^g0Y zF73tpRu633-~8K39Z(q^mx4M7>k!0Xn(`GBb41IytC+a>OAX%eMl+0ZhnRvBteMhs z=jlJR*$g-pM@_Zci%CivJ2`0q8_$<`@WwGQ(ch7 zr5~F9nWDud$d)g05HO!f^p76pC+p$S7D*=i!)%2a+1LQJJ%rn(vGJkX>F5UV5(HV5 z(w=El_IS@LYibDLuq?$&$fm9BzJija;MiK~Qux}pMO<-crSJK~S@BtHjBTHM6APia zc&x(s%qUQg;@zrTEGSjR(c0q6-@XZ@SmVPr)YS#CzH=0fA=NS-KmVpqVS~aR5ZcNj zyNqdxIY~K7CK)92CZzz_nlsj$^<3`0j?~4~-z5af(`T4Jd>l2Sv zEem{y#8KX1u(_O}-6AxhG~S(OyAa-aPCB&JWKRpLs{#Xk2fj`HGT+$NaJq-oG-)Eg zL=E^+UJ88IC>kun=kv~>FQ1}jO0n)_6{hIm^cyT{&<+mvRZNskdF=L~##%VK#Ao@j zDUoH>9-n2S#QHIiJm>oSTQxssAWVEky;vF0v2qHoopIMm(|I_jVtWj}e}6;2 zE?4GKjqF29Y-K4em4eEPhF#i>MEY(+tp3_R+QDZSk9b-8z8_!;j-OBOlTGijKaEuk z*a6e)OBn|)NBDbti%PiW*I$G&(si*LAS?9v#A;654?{!4?9x*C3~kQXIsq|rw>N)~ z63E7q{o%dE!LPYC?P(;+M;#ry^zsS5o(O5la(HW0>Qy~ncM1sH^EnZxf|wG$o7Dpq zx7)UJvyDzpJ^%xU*QLO1LKv2%t9QP0Ta*nM1R#kFGJ1e!ghEoq_n+LBsj1MiIc==p z1iJkCbv87r{P9RwC(A*HhhMT@*m}J6>%hClB;?Q*8Q8KneQE6M8-OVieo)&BU%%0( znPtoH3Eb!_7mHP`sjWqy6B8TPJg!%LpK=cCj9n#eq(|L8KlHQV`LmQdNGm8;C=o05 zr=J+8JU+itw5FV@BiTE1*=$cxmcOUfm{(}RfC-{|tc0GIcrAZ@eN<4oad0p(LbrWl zAHt=lrC+B&Adw+Xzs9VmrM^fb%kLf@jTjgRJKlAzRj9Lp;67%pg8QM~COLFG%5(@>~cL7IWm}ls165h58M^6(CGd8Zq&fx&}Ap4;w+- zwKqs1gIcAIE6a*rt95eP6{g~-acewVM7Keag1q^owMWp_6XAcW7i#kP_{z$3~6ebvwJ5 zfdLbnGwCUpll8e{RbAHpxgiRm{-hy1IXkzlLb?Aw|2<5aH52pBGwU}Ipq%+F#V$_| zFW1*`oe*MIilxQx6(3|vAuS|jC$eO8zI?WKE7XU;ARD4alW2TT`$FVkMrUDTy|a@u zDXF{UR8zB~f4BU@saRIm^Ok0=PdcJ>(~HgW>py?qjlz4tzNbh~(z7}3I9U>wIzInK z)e;URq-Hl}r~WU7fq^~V7!k0UM7v_Xt<-Rd=Nvc8=fIJql#tfpVRiM*D%2@J zs3s@V{js77h!NFHKjQeoB#--{m(cOjLiSC9%AeZ3=_kb5Qt$U=>~*#EVA(YlS7%aq zDaZ2BABj)fScQtUS4`utR8MF&({GQzB(HVo>Wq59B$2O5EwQsG<3`IE)3$D2Rjq{H zGtDbBcN=Y`I;H$HWe)vqsC=!Rj;M-^RM~{RP_A6uaMu%Q>}|IfFm86v!rqT;i7u-9 zt8U_~#Ss>1njZ!B0Ln;MrztVbvSOdvbnxIolKZoYP^7yA*NtHq8%S$vGM%T!?4Vp5U=B5{7sU3E-RC;PXC5D-6eroM*aAqZIFy_~r=j~h2 zN$bUgpqF70OBu9Hx~wg(@G{Sj?X^Z_6^ywjS-Q8;_-m|Ul~1YE&pvd|%G{Z&uP7!c zH4(93n0bxy#G2}P!%XB5Sufgur-plMSTFQbel-@o|N8a9@1Tm%L|O08 zvOUqV6PH43ukZIQ`P4Ec6SaHW7VX{j?O%gHaTe;c2`D9>#;Oi<@9F0I=@9*dQ7Wfx zSkfE1rkrbG)OzxIm2cjxkvu(>3iaP>R2tb{?X}69TzKO*QENO|cIJUxz6R00|DFcn zO;yuO^Ysy>$c*+Wd0U41{$qXp0mH@xnutlH-=&_eT{j;unA&Q+>RYy!>*Ux?<)5o- zJ#n?^cEtjDk9+3{-jQ9kwY8IzlbEiS=G3IK7H^gsB6&w5kNtyvs+bj>Ub?n*Ue}w9 zOeY`LFG-4_z`Br%5Y|MD2>fFd^_!;mHz|3~2hNAd>xzTWtA*X~sRh*x%P6QCt0AWn zV8|`wH0<;Jewn8|LfpFO?X{^3S%SJ>*6D6q%C!0J%@tG$pR;?~IdTNMzjVstzL&qa zXI0#T)$|>@;t?0CZM5F-z$*4};9YFv%&f=c5cX~I+n$Nxk0fq>f$cAQ?VmuxZR$7=BLcthUqYpRe0E_X`bOPv-jP#_tbHMt(k{US=mZ`va!n3Gt03Y zlOjjwaM5PjFhFNHv48~$$ffh`7jkH09%rx2glKIwf8&qQ&U=-s!$*I7dglKBwFEL* z4usj8_amNEmAP9DZrwEeRb+1z{9*ZTLDy7^&6yUVhF$Bz&({)UwEOF9=x&B!{F?)>t;3m@G_+Ndnng}OD@e|xF#joc3#loZqwNH9-4E0KJ`wxw zcSh_isem`-Buy-JA}-4FM)2azJ1eu*xmn8U-TGEUFHPqclc+!B{2M(d9Z#fc@^(!5 z-}EiZyZNvETZLN|7(DxY@MjCT$0P3Fd|2jtvw5D4t?79PH&x}k4|LHgC2L!9<9sLV z({FmeHIg`L(GD2f+b==eFX5@50t7rI^VmDL{mXb$AMrWj(4PsY zV5-km@DKl*Td5ElU%2K;L-wu6BF(}t8on{-EyKI}^cdmb!A^LRkirz43-oC{i-{e5doM9rX zuo50=g_<>gN3TCX@`f~iscd#7qdmulMNijnjr-`Dc0(qSFDF7(>HA~E$$N4-V{k>} zQ~A^Wpe6NxhqtTU-P;%1+InSumVF}(;e$Fi4pxW8nJ~ci1CHoyaZiFq29jsVt)HFU zWd7%iu zMHp*N?bTp*k@W9@7n3y-^!e#_1r(B|$R>`m`SpAoslT?jzcHH$p6@m+IdMCD@sZYx zAN@5A&#^({)0tt)PXbiRWMieE3?Xw8|5z^H$VV#dg5%szm7OtxeZgjNf$S&h$Qy-E z30#n3fB9zPEkz|ARprum6YjxU6lAY8lkI~6)|d6Q)aj3vEVD7vk7&`$zwH}btR}({V`h*>_Tiz!{{^Al-AkMcoH>O5B#=E9 zj~boJxa+@CPhPudZaAsnRvHYt+apE!LZ2VYF8{?+Dnt5&yZ?Q$`KE6Zk)U|#LTZpm zT>ACiz@k=q+Z*cR_9El1yHr*xeM@nfV-W^~rdC3{ZWR9uUR%5OJ<8q7~qXq>GSq3hKv=1*}7Hz*NJhwZ!(>KiL3V$-<6d$rAMATwtv^v zbyRe;a7>hxlxqvEy2bL=sn;|7+V0QBz>{RMYVt4$E`5k-JG#2olI+s;rXEAz1^OUN z+~B`WgM%yF_>D_AqeCc?2_*WoqKjB~_RBv1Qo?1}Kme>k)bIPt5D{tLCgc)Zd{b__ zUGKIzlcsHpjf*g#F0TSoc+)@U3E?pC)E7Jsp|QfxRqj`BQB4g7XH+@xqHFwdy}=7H z7EB=6t|g>GRr#XB&RI7dj>*aU^F{W}_W95?c_5bSW5V8xM2t1OuX-6U{k(O3jens3 z-NvKDkgRrf@xz1wkpbcw7sT1Yp}l{vz#C!e<>jxPE)RS^z6ldFFi-G_<-2k*4v5DJ z&w6}(>kixetM&=VnIYJN3f43$uxrXU$s0*;NOwj|QT4}R5rT3X~K3pNpGRvgq+S|`oz^1E;i0=o7iFJrK3Mez>K%T`phj!8ya z+lgo8^UNa8VxEBt$9k$C9UV3QrB)$Vf zd|<`*xq(>(!OT$O8NPjk9j`z&5WA7NF=E7XVD~mZ;xM#D)B#&tg`k2SVP79$X8^P} zD&vmkdfc@LuGuZSqLgcFq!@OU<}vLo6n`MqS47<)Uk2 zj;`sfD1Uxer|(H4*n)BDA<*##uEBLDEw|sod^hzbLL;kcscIY9akY2HyZqvMSYGiZ;s{_>IH(0Y zn!4FjWMG|xsObE~ixuGrxqlWLn~WOa<8dLq2a&a>#D&QV#8COb-?db1mM)9OsH-ua z8=C8X1pxc~yb8-28p^0~#)XANETSTiTCA$3`lE-O{FakfsFdGo4h#$) z&TLD|yB`lLw^j+MV3BXB;o?PiDtUFs;_kcu7|-BoBI#h+^Qk7UJifT#Nrv71?jvS!UwrQ{TCLDEjr_ zYyoZyShGU3bKuu7x3vwnNUHM-paGqBD`KtHP8drVVJiOfhxYy!`}_c6HGnX-@^}WJ z()2WS(c8I$#Oy&*PZ&6%;x@$5M`v({vdh$ryAC>ed#q0~rtHMmr%{NVcrQDw@P&es zV1uN_tCUd9>DZ=BCZs@~z^ll~vTI+^U3^UFH{pH)oF?uY9~zly2)FLDov9S-&4GmSe`U7Yp2jdfl2oiB9iN)I zC@T6x@d_)dw)DR-PUY5@dKpNa#vlE#6}@_mRaHO7`jPbC(A>Nia2j&11jU6LWj5wy z(6C%cy#mi7;zY0{lCUMbj|ac3g6R@Djjvu`L`)lpyDR~~e|^pS+r*v^|9%}Oi(561 z%O!n(_h@!@=Vf|aO7qAAnmHP!?6lD<1;!TGCi+9{sD?=iaua-UVPjQMw8?10g0S>{j-j7Y4U4|_?l4{m*wc3Mq|%Xa07yt2f$G5+tF2Pi;!(&kxsiTX z;dm0W9s*Q;;H|I{$kcQTmahJE{L>o0PLD`dWVvj|Z(2A>&Z@XsMUG53z;PQBhzI)3A#t&XJzl(BR;f{4T%5 zS7te*5Hi~L6{(1a13D+0dz_bJVw0VLnA$`}`pl19#pWO^kt-*gq`RhmrYD^|7Fmzf zMkfGrkcSq%T@39YhvvcL8wqF>dnWERjVARHR?e=jD5gj+y22k(;4(^$boqi9Rbbkl zt4pUwoP+QcLRr|L9bQ;yOG|Fa58w4rQ~E6z=w6Ot2oNk*b7Q?c#(%ILEYwFq-d^C^ za#k>`94k{YjZ72CyT6*71=`;la54p}XJ}$RetG&lPBa?L5JCYx%xpnVRigTxit=lb z3EJtm69t5xz*x8CGG7GNf&MpJW5o;hAX~e4B0>hf9S@JYKm|lu&b9BsP*_|*C7u+M z--WCa*GlB(BD_b}{zUi3ac3uIp9gOz@I58Y2b3a@9AMEzNlD{?D^g5Qjlq)>F{%f{ zE<8&ZIIPc)l?aav)&7e{^L`c^bvR7f*=3y@xgdUPH_N%u=T6}6uB6(tXCLy-?|mG0 zE`?F4VpYM@=T2C(Ng=Fkn5kPNa4iAWYHgemUwfbqQt~w4Vy+KWp=IlXeaRB=PZuqG5jiXHl^g0?Ne~Y*Skio$=x|lO9pf(m#(5 z01qR~>Kpa8f^L3V;Osh7*wXMP*xYyRy01*`h>DbPSoPF)k@ z1myIXqB^Gz^w{T@#Syz8k~Y4~$rgI;{4Igm6>_jMeg~WuQdTSZHtk92nnKK1WMrO* zcr~^GN2}OcVU?QzB9UN5`mi*(8+loH`S5Dr$;{i$e_$81VtTr4(kK0`-6X!c_4EoG z?}_+Dk|=NQxsG`hchCRS3eDc))GC$4&@3Kp6{f}6WgqmH_hj}O+qpi_pT1KYT4siK zsi9%d!s6o2d*`)h`z`3Od`VP@pTDu=htAR1i)ahf&qT;c)_DroM;iIaiqgIpR27PF z6a}zD`S!q%jP?nv2K+ToaX#v>rdCqxI3j_O0VEpRc)Z6EeRr(ta{`$Je>PTYHv->I ztfp@Kbw}I|o8%IK)kbYsGd(`!%He|gJ6y%v&Acng-5Y}mR=UQjVhLK4n(v>@Q`*lr zAhAa@MNpa1m-)8z$S22-lo+!6Ta%yq=g+%RtRFX6%zBif_(GqG!xC^lscVXMR{&4s zak8R>fIuC|P*bYUq1sH;yPYE^D9^_<@+TY3ymXz}eKWyh^8jLS6ni=UJBZ|$FNsvp7TL|6c>WN4jI2?ryBVX&jK`=vf__{CJG9=&q*9eat41vy0e zU_C;J0wWWX1x%kwmBe+|^NQ-4FncE0U}xUMOATv?IN?(U`qJ5B1ONXH?0bh?2KWF@0BTE$?(OFnxGq9h zhil4F^hZxm3bX^rJM=0Afr5D#OTgvTv0{Yuf|r2`^I}VG=E)G>vNIWIS`qHR$jX}a z>lxn(}=$ zjkIR#{8^6@To6^J>hJ|O#Y=J02I(+LhwT6t2vSq~s*yS$eVPapnqvfvVL11Y#BNmb zm4Fm@9MxIRn_RR`5XPgwR9JhQJaPoBar94P6e=A))&KI@H084-_U#e8O(Ky9QAtr~ zUC<#S!WQdM+9z^C{~u>>9*))8{*7y*A}W%Mji@9cWNcP4L`X7|DKnW_%8roil1w3N zgwUNNGntZ*Br{1uGSBn-S=!I@{T=V|{_(!Q=h#ojw!?j|bzkec&hs;!Yi@Fs!o~nw zuwVI$```di<7RC46ToODxM<4}ViJ6%J2l0Qdm{ss_Z`^PR zE@L=aqcJkHqLK$99%IN4ur*;Wh!gY9gCUoYb@wbq-9{0GBAKQ>!mufN;~0Gy{M!Q# znjB~2lyTivkB{?VjwJlSUMYu+KJS9M4wa$X%y743UR9qxnk2}`O7u1oD~U|s2!Ip- z9H6SQnq0_Iv?C|J&B_I61L}mD0gyGW6$6#vSu^tS+30f`HTO2U^`wH7iN5C-gW=0o zp1d5}p2Uu0iFh6y^K8YVV2dKNxX0%3G|eB`_6iJLVE1y{M1w!!$opF z$2sjL$R4*=8%+rAKc1VsihC*MaJ;k)^D_CJwaM#143Jw`9c)?q_U%LFjeNt8ZWNG9 zYv7tdHCJD+EWt+e;v*ZeUfIN80y<$W0B}&uZvim$f&A zVT^Gg!%#5fwg3AkaeR94f??6;n?qkAA2hA2WX^-BA zIke^zG31C)Leq#_-V(fDPi!=xtF@GPUO$8;50j6?IOtUdCa;I$=Z#_|>o3AE>!(NNP^MYLw1}I>T+z)HIy(OX&xuSuju^cy zO)5H()*#cey9RGRZR#^&@$txip5l5V*L%q5#&$Dn?ZT#{;~GR#!yG6V?Zxy7QMz^7 zO>00{_#1FUVnx)gOz9>!4Z6<{B%$fi;tyTQ0UMG&c=btJgpXo&+bKe=NP1XTMx6#l z(7JQVo*B28{**oP{&5$60>ap=(C{h$YK-yKR2Vp1PN#O|PS0lzw&%MvEax>0xbNeg zoLA@&wH{?xkun#T>1`m`$UkO#7CQHBOhCbfPQZ$iEkQ`rgc!8BWQ8 z*KM#9UM4fMPH>0jQN4JEtn8$=A!NnWCB=Atz*KU0j{*a?0IP(c2_Ps^%mwJMC%XWY zK`ezT@V^l^wg3Fqjbog%oxVe0E?B27NzeT-QBBza=nM_)hLdV)=-0wy>6X1>P%~}5 zyBC-x0!W$$PhHs|-|#_>Or2`U6vFkRP61%nqI%vBjKG84H;Gs}h}tcSOLdq0 zng98;8M@uJMB}0$t*&Qh%}ww5#Ll$&9Kz4=3TW@|FGlFdPf1I6Nj|C3mL!Sk7tR$x>;0h$uA+iI9ZF^zCdkiC-$r1n0tpNMu zZe0=#kc8jq)b6c>o}C>~hjV<)Ka+Cc zJ}`^G$+Nr|tfZl<-HU1F`Kmg|N3#)I-ro`WXC4sl`Pjaxf^)1`j);_M&$0Inl38x{ z^gxTZ^YCG4_ObEXh(-NX`Y@ZBI8M+3pcohsMi%U zvKeMcoJ|-IfaJ3D{OAkZsPYmThQEChR;k*rlQ9!mhnV)g4~u*4Fp?Q@0lf(~(BT;N zFam#SzIN!p7mug6>-s1>PvivC#pU7_^_RWx<$oN~HR#M}1a>_R0qwY9f1)*VGPp(ilw zt9{`=Tf^yl)|Xel(C+@vMQt4855_(d>fpXcn3(O%9oo3ZGZP*iq?rnnd4Y;a6Dy{! zAWzJ*{2K=LGi}x$u$c0FEG5yCS{bCg<1Vt|1tlf#>$9v>Rv-10$xR0WNW~vIsFW}K z=V}*6S3#08;N*y)K_3WG?_Q+=GVV|)&PXWTgmoXymEF!0xkLxQlr|3t+i%4#rA+@( z2b7#aY92mXo1|s@j+Mo_m5=C>vAH~b%AN@p40g`tC7SIg=k^UwxdJW~P*_{CJ0-== z-D1caxU4tLD~3N8J1cX5+=sWpF^|IsaS&=uK=q%iAHo!7a;`TM(JQKmFo#U2HqpkB z$)T|}VMxU)P)^dxUKXP3VaRQV<^_pD(z8`G?Kw_Czgu=e8xS)R6x_Qv-CURz%PQXN z5G`%?Wwjm9wq&%x14lceR%C6)t|KB_T(h0{1Ec zjZZ|PN1rfVsUE;B0JR4Y+ETPUNK`_2X&T{^K8OZhRn24HAX4;kqph+RK1j+p7Sl5oUJ?WY1{VKe} zw`cGL@`5)c`VoCjEYV+v9FRJMXIn9J@IyXerR>Pcp1H5R$Unw&t;OGzZFQy;-H8OM z685e~o3LpgqgxkLIgwWKNclm&&a2QN&+>pyOf=TRWV^2nU%Sfb9=+js-;DIibzCzm62c6G>9mf67WvIWzX&{!K=Y1e@?mIK^$|P z7Nxm5tb98Pq$Z2Ap|dFsh6`V;+-1 z#MjYSC{mHS#>hxwzV3aa`$1iW__P1!x_syf>~W-wF{pCQ;rJe)E*K#Hlz*ooVQ7dc z-8~NC=$++qbswh&8JuJ6mH^Cv^11`S&vvYzPpZgIkBdf;YK33kB zuc3Kf)M3$6MnWPFpENgj#T-&glN3MD)FK3z zkIs%6zR7k1UycXLb39mPUx*xqLKN0!nkbn$*U?&mA zcrK}fy0~X7&YTq+G2WQWQiI7;le#h2e1}{P@E@6=b-igA76xCI!fR)>flD~VE=Qhn zS94DClnCJ@;ejdNAH1k8(4iMChZ3=>e6~oh2A_*v5#gTWzgvXvoEj8D zJ(-nte7HTQR0*t0QfbNO&-TcAbV0l-=)3qvi&we1um=3ZN~b2(GGyX(mC+q}<9nG6 zSJbaw-4zq2#~XZV4Lvn2nZrtIdy6Cal)QpWAype`r*VmWtKII?d zxp>TJq|*?-1H=}O{vHrQ`4YY$<-haK1imrD)q`mp;gfzPO&vCi{V{pP!ZlrDlRs`D z!)skbit-po$rF&>U^>9;V;slh3;PXL(&{Z<=1{7z5~1!vU>!UUL7Y;1Szh}zseV8V znA5>0{(OAx-zx&yfZ+p40DS=`flba+=K@aXQ;^sT8hos(Zut&{qD;k2@bDm}v_b%6 z#>oa%NzM_r!Cy9FqmxaQ!dsrw(-<1YlbJEoqt8~xf>ylo^nLll0}Q!%KdT?^HZsCo z_Bq>K%QJFwW7BTJE)i3(&B7JsI4CIh(Qa8X9ew%@I|myXu!Uk6bCZCG0%#rXD5}H! z5h?++ zKuFi2u}e)&h0JAo`o+mlx=W3^+vsJ}`7+Mf+u3^Ft{dq^qz1+-@`siVyq?Bb<}rGEq4tafb4nM^!18V=VdF!B&zKkUFG((@5Rw_?8HR@mbEVk`9~N4(Kb{e@Ph84Yr!c* z5vZr)vz?z(RE5)_X|Ucxn1zdtM@V>b>XmrZ{lK6r$*P}jb$E8LK8kBz$uLXVA?9M) zS#lYm*P4@Q>Ims1e#&Yx%5#gWy8)XRr9 z>tmWOWohn-sRP?fS~`(06P9>tk1q6AaA@af(Kmd7D#v}F&06&emCP2Z^46K#C%oOH1aUO7=VNT`g2PFOB@p zfLUKzZR)y&B8!i{)2mraAK{H-=~s>if~d>qVtLz8SWSQgxr-J6B;4MwM~&t!0Y*n8 zLd{e9<;$0lbg`?=eP7zd+o-~p?B&)pe7Hxr6zr>w?CWSMwJ40fd*{xSXQ}Y-llKbJ zm)0hDtLOUYBX89|uC+mJ{+!}1?UB0E15U5za)p8#9j}%2O^}9+CSdp=7~KX17&|`I z-zwF4kQ#Y@jl5fquE~v}u#AE_&AujYnOuF#!@jOrJrBlO-vD(A3*$}6^4L+_LyT>G zaCRg0nMqglZ%3hO0fBfZL~ux*ruWD~bwuGU)SgqP0gmzZ?b~M>d^oL<#0#-ZZU=v@r(2x? zHB$8X&=&!^g^T$F3eCVFox8JFSk|voQ^>Sd!t`Cmq=wC!dK*MOdhY&id8!}(MpTmVy%x@gY=X~z&ajnRByvFLJ z_l#-8Icp9e7z$W(x|&cfj%{RLo* zKn)<`0H%o2DYtWw#^$%eSjBYxt)*XX^KB4@<7Xa{k?RddJtI8{!?_*jVmqv6`jXlf zCa1i<>O~vNe2br4k!~(TB@8z%5DO?#ru%@qSUaw)_eNOSV7Slo2e=d2&WzjNS__W^4 z`VM!}$y$Y|f2N9d+S)BA1zs0b`(F0MqUMm9dX4lMJD&x`!Vx$A_pxbWwozZ67%j|E zQA@_}nRDB@eOAi-iF-8sx02C%C_Y1VJ;VD7SJLt@vWZ%E z8tLg#1y}u5IaD%aH!*(cXso8%`SY?lwiDD14NcG3_yol>CR&fRS%_3roX?s5b==c^ zP7o=NZ`-XfIfT&L8pI>+aajkW@>p0|zss)7#VigMEgv?ijfN}=n=K9~I(qu80p+t* zz166&uuFnW`B;Y`2F53xhS_mABepSKx#-BtXJ+Cx#_{&Kt=A4_$Xu00p^vGRKv;Bj zWtw&}J5M!U%^4|NfU*)89jZ&H@yZDCUJ*#wzjZB7t@M0Jc3jtOo+iilHK3vQbki-& zDJ0)hGo=UT*y_okkNNJmelgulP1Rb?;EKgW-U_5n=g)o*(D=ywfJ+9mfN|_&aFFQ6 zhQes^!1M7@$0nH18~jk;pK0hK;p`!8L5_IW*VFS#PF_G@bT0|c z?nDPwZg2zt@%HUgP)(qSETe)djnr$HQ?~n^17nInr-~pB!-cy$XUWN4DXo_+9q+_m z7G*q&1piM7mp;nt_KXwS6&NnfCZ3|uTWCM?@WQ0>A!cw}VMl(pvCe3|Ak+~FL+{%Y z`b2s2zwM<7b+qfRf(L?YjPrVF zt?wq9H4hPvuCA__&!oZkWIAz-qg|}kLIiw*aptbfmitYEH&7ic3`+z7IZ|d4PP^M; zkdU1XDteYS2H+9832$$2G4=%9j8l&aVov9w_#*(w@;4lw3@Yal<-(ug7T87H>(diAOZ(9VkaO(4k*XC zUj$_;Mv0fVWcKBr+J{F&to_XX?E}=8KmMGa{WeX>UMGM1q!+m2hJoLOg{9rQSuJT~ za0MP7n;?JksW05Q-A@|Z9FjW2TSt8H*5=U!{?`?)9Y7Q%d_!^D^ZQg#p|mg(lTUq!L$) zj0J|ZK-QiW6>;U&Oh2Ge>P%e~_d}+9tRUUb9J<21t|eIIeHlFZ{e~ym|3zTmHu3t~ zjXWNrB4ZDozayzCF~_cVGt~36#7=%Hhlckd(_Wi}wd2*(FqklJ-xYAA9v&W$!a-w> z6c)U7jF#zDx%R>FueYVJ1^_8kNj{0)rEfwxwb8jZBo$nU-S1}G(58p9ahy}JdD@*<#W3z1tDcYd9X-^Q6sIQV(h1$A_riYC2K$2fOLyfP`2 z5~z<+3ob8vrZjF&Fi?)**lg>I5djG*Ka*sZcHMQ~7SwbmOEXq8+2-fuE(|N*=OO&3 z7Th|M@5b#6p~`@Re_)^j6RD#FV&{N`9OYUd)rb!RB*iryP44Y}nBaApPzwPcP|yj0 z<(q>zv^6-FZO4CH#C^xG1wpGT_arcFd47IA$9ZfGpxflel;+|}vXGs-8EoKllwUfylfK6HlZyT>_YCagQibb6a9hSEt zfLl-BbL)^|B&WF}^9sxA{f$gKR`c68L9z@;@}xj>)Z>Zw@j+)d?k&ho?rr-YU*0Xu>+v18X_xatBr2Ll_@YGJsE1>%K<0s!B39bJ3Z#)0`KYT^} zODX*y|MLIG-}PD@J-KnL7Ga*Cqo|-uP*2^F+UOt0>*T;uV~i%@r3PP^{Pqlw?3-T( zaW9A$De!$-w@the-lE-r1sGQIQ+M!$T?=20I%7a}^TCzSqrn}p{aaLse|!(sBq*wfJ_UhQ0eJW>H*R+SOGvVgvt z8YEjwOG_GjPQ#WNW~``R0CHkg;^c7pomDPjXbm4w2gm#Z4f)|*KgkCW!P)r&FH>B0 z_RLjJcm7B+Bsie)UGkMALVpy_Ixr3j!mI~~n7Vi~R;-JnuO4PB)DjXBM)XjgyA52L zT>4Nq=9t=O4&4dLQ5G()qQTopcP#-bS#v(BBvyaz?c$@0dFGI&e-^A-lH%r8LTfN$ z`VAwvywcK+py7gW#Oe1fk{ufx-U}jPcoTJkN;uM#V4JTp77Alxga|FF2if!)8zkx0 zb-qh90Qia)@LlXyoI|DZ)Zq6;GMZ0z2j0Y30Nf|&ps9d*fO!Nhkij8&jIM{HMZVGe z_-2@SLuo_XmJ&0X%(LGAeATSV2CgEyI?m;AA8%w$T$biv@49st+|^SW760D1sBTrR zE7u@Q0NO^FMNHkLL*e8ECkln4%PKi{qq5mlI1I(iO}EIgu`%6<4Ub?!(Fnt#OKyox zgGJLG$-JajU0%fd=(m*+t`$XWl$c%wG=PPjeUWQ}Qs;x2r|E-C0UJ_64i$`599_x- z(1NWO^3rD2DGry6qGe|XLK`m3Ke?$pmUdl9uqWx{s=VU?5f}Bhzz`dB7o}I~K>O zv_gSSrE#V{MdSI`lpmSb_bxv_Y(%DXScx% z1(0f0H?XqhR5+Wcm4K)yPI2B~9wh^crm{RYo{)n{pmsVuKpO0itTE^pkF}ZIa_v|| zB2srTg%W3tWRw>)zyR3M(JLm=hE@kw{o_!53~L>`F^Z-d<1<79n5So#-#3_|p}m85 zf|cPiU?O8^VE4$E({*EJ3oMk+F7u+Ig6z9P1@+FlXkytHA+!8C`ItgzNu&B|7ow<3 z^hQIUusyEc@v4Q+I1|;eSBF)SW*W40*x`^(*=P>qFDbGenO zFx9E2YNV;-&VVSB%emh$P&RDycU`XlRZLw#V+s~%g380wlzY{^6(cj4^)ff0M92|` zLcUWfIrpJ%O%F(OTW&~Zib#j_%BEmg9NRZmxkzN79`6_J;Bte3LV`Ta#ya-{d=n{s+A+Mj#-V??YoMM%BkX`{r;0vX6vpQAH8A3j)pj;TpQSAfUgHRw4A+WYW^HUowRsF4)Dw2&&E647x zW`Tb?Lh-+~=VVS!Ph-F!pa;Q5xsb6j!~6Fipm;6){#`+{h8b~hh0C7YJWAxZR39yp zkJTW1rGWBxhcmPe1Xq1(V>7{=whR03B%0ygO?)^^WawpSVvIfbCY*LKwI=9TZw)wi z!egEejcK-a8=7z9M3ZK+FdG{!UdI4S4FU`hzXSQ}hfkk&&vZDEBRLiq*~3feBGO}d zHwQ@~wK<6Nd4U``c^jI&rJ1fe9DMKl>^>gl13QV;VE6OmE^2CO4MJD9??cF8(APMw zkVD^+)8g17$LHE+>;f7H1`GuEz~*vy&PCq;v?QmAiBl*Fch)KKo%}k#tu(w#cKiDJ z@*O>*k_Jzw`Cp|{lFPF_&F{Xs?f8$Dz(NEIfD9i=GiHqJAYDVTzWle==|QS-vq^`5 z<&X`YRbixD9LyAusr*?XPCfd`o8g$CxE##3n7^ia=q_9(A6tYbXBhMZ!?AT@-Wgiq zml{W&O50QWmX>^!UqC+EEiwbidCVYtB&h1kaH<{C<#zZgadH1N92EHWu_Y5;Iv_qC z9!u!^JSXG1^!vpb2<_anIAREbVFR45fo(nd9v)GHO*>beIoQT7^Y9wM@f(5kVWuk* zR}V+`_khuZ^pQ#c<2Erza&n;IABNBQi8XFjP3kDt1e4qw>ghw&7#liR+>aXKz!eF20k^-L(MbBpnr;EU1hzyQ z_3T^4JhiA*=d%`50YUK(nAr)KF(3K`=s66IMV@f#a)FeBbdJrRUU&;NvzX(e^9-vf z>lRqXC@F_T8Y_POL}k+!Rp&3xAU(Mi0u}NBeDZ{ajf;RU_GLjK;CV4N?rU!AC^4YeEibx6 z90^3_0;G83-8=V#xG=U6<9P6CUDfpn$!b(XMive)t+$^FopjvC&VlPIH&~NOG=4z4 zx6#+l8He7!`ld=hMxJ56PEoP~cQy&TokU_0c?I-)Ivv5ZIfyHWM4oG!%5MKlr9l{t zFH$-?tY>zdbGg(jSVUhc0QJ>B>S+^rP8^ETq(7{^R&)!g>$_a{ZgX{W!_YOnXVuh@ zfp9ZH8ecm4Ee0$Eb@<0Uo<&^i5Xla5W!=j+Z+!k>88t?jaINt|9Roj)(Q$-UmoIlp zV=qMfE);Rd-Y)CeWNcy#BKaql05)}<9M`)r!GHa%aZNi>mH(Ky_}8WL%e$iz!QP5U z*Ft9ktyV`AG)A`QM3Pmvr#8yXeRvRFl}v?{w_G7k8)Ke-J(08F>oru0Q3 zUuvecLsa$;@8r}>@QIIqw|7-d{ltP2ao0^k~(Uti2r2ADv7V_uE{ zg*RC>0;~Zq(=VM;*!d4%&48Q@32tP|XiG}2slzRvplQNMgK;zg<(OH6QA(V2-re2X z1j8*PGM_aXc# z>yh6gY-flwrADt>94D^mq4>>eJkG}~lzKCjX?z1B^q7R8kcrN?OSm>^l zoI=VJ4UHMfhY&kR3gB+g_w*#9afV>?7Ysim@JuDyu4n!hTAc!l4sxWQNL%R4Z`33dPsIW*H?FX7_eFrFiMM1gFDFl!42g)^mR z@W!SWBqN8kR`$GVVLz(t5`I#kc(z##I8RQ?H8lA|KNkxO2IOSk0v*^L^sZRqKz*5) zeaVjC%5E#|J{1wtd&5V31{JX}6yP9TH6zYvsrSskgBdpxq~mKL4Y0b;A6KIz!_g0A z&JT3!Otc&1dbgM8-9uDDymB8-kw(oxs0vgY&l4+DsLyai7d^Rz2%!c<_uw?T2Jki{ z_3Egr$K-Scz~MdN@~DEyJWBhpJzF<^V_1*!#)w`Bf(xkGHs19fl9vc3+c}I~vUrgZ zKOkOiKv}w0-z1B!E=uuAM)su#I*VgLloWOBj#WE18wu@NyG+$6w}IIGsYYWvHkdNE zx&}f?<_Hog+G*+Nn1b)j^?g8lbjWRCp;>yUif^ zuCtR-7E1=&vvm-zso~vVRV=P$+xVNX0E{}vvY8^y_0?%`3kI0`GkT0XOwROE8 z%ze;k0I%nxiN2(_I1$?2cJ-+)IUYUR!nf`kF-wua{b8u?Zl?U;Ucc2hH_Y%3^(6BE!xoc zyT$SA2MiO!4?lo(LnJe45`PTXSLPUg%F zr~(K=25K0A>gsBE9x_+e9EmDvg2KXQQya@HMC_pofkin;dY%`+rfDcUa?~;164;UT zTbdeU`|PvlvQokxJGQ`Idgj={*?b*IE2r$gdiwLRS@X9OYqBd#1CAEH|N50#UF`q{ zl@7NPCs3wy21UZgH=MO$)KwBE7sCJS7t1y|zIlT@3V@R~%Zp5ozL2kQkZE@bDlGkf zxxIsnnkm>%J?ZrYWhOXZ;-Mp3#l11^!^B3Ay9*mcM~_f=>j5F|;AFQz zG;QwzQ~T(TzN0PV`$C{lW%PEA7t+-M}vtAlVg5L?swp30o!DgCnfgV5qLCA3ysExde35T z9qU7@?^anDBQ+CbBlv~9^&fjM)RK~ubGzJvdwbycY)?^rP7H=R8Mm}`^iGBg0apSX zQ8AcqD?w%P>+!>Zw^CLy93j%YJm;0a8+46dwvHn3|^LEirz7CYmks{JXA{zPS856*80 zp1EqT>gYRKF@r~+94!q?Fp?!pkUCOq=M)~ti#=K{;g-7klM|kc>rn?_UrSI~(|QWi zkiOL1xojzNnF;m~&jrMsU4HCn?PHz=n>*6HW7()9(w!DGA$o&vv(X$HRe^&;H8sk* z!I1pM5|`mPeVu8;?uc#`&_PBM7!|$v0bW#kcfNZ$Zt6BBR~PiRW@d z@v|sP?=_CT9C;mznBZ#R@c67Q*Re*`d%>e|$^% zKhLr>n=KCI#x{HwhW_6;GdZ#wo@JX8QNpZ&RvF9+4L0K1fMhX*70CP5 z*=`2n{W=C|uf%~4yIp{FFe&BB00VRz)I)Yc+D&lSc*gwv7*Sv{TX*heA0|z~npv&2?>-B^P~Q<# z*X6OLR6snzNnuiviw)a+YNPv^%X{sJn5P4esV5n-016V;-OPR=;%SSoo*ofpW>{W&cs-H)L^;w$|*hZz;UGL$%Sr zqjTBabY>UDQ6>*qGjl*V)^uh|v3VAJ3)jM8OfYY-@GO^=(t`bSjxftEw<*^&w$~m@ z7pCNL?lcVa8}Sjz&v>C~e)>SMC{dlZp}x;D%?I=#PsJIMvi=@L+IWW7EG?}=m0&aV zOAXHutnzXRcd8pZ1-dk^qwtJ|`WTq3dTPjp{ig-P|Ix8_5IHD&jZMy}$C$;TXh_Dq zI43{*=bgP0CCg*Dqq50iK9*k2^T0ExY?( zslKeJ!}QE_|IpA-`k-lMikUdb!suvDyE%48-zeBWt1JpFTaj6t@X0Kqt*NQ9wpPSH z4uA}XE|?`Q21h!s*hZ|~Lmp#w zjRYyLUfn6RsvNR4%xu8}j$)+SE*ISwB+(F3)+1x-?&%pV4$FQj3>#|( zkx3CopVKT6zM-JtIQGP&MU&eTKJQO4FCCcx5ZVHvB!aNO*6=ak?29<@yvZEQ__pCq zV5t;&S>ja8LjQq)+TPh2NG+9ohhC|&Zgi8bp_(PlHUJv+!q8@w)I^F_-N?-D-~kyC zS%Vk~o)9@03`@Rcc@fH~;DLvXbD3#F%tJI@?2J@^7@kWEuj!9CMOtZ7Vv=YhqRW@V{x(z9H!L*F!KT(dLu$sr!bK2Yxv#ERu@qg7Zw`$8S# zSoD5C;xr_75h#Z>V`d^|h*Ki710tdw$&VJ?*I_p(h)!KAVW@g6uK!012% z6W3w^YUSeo?a<{4(4pSE28}re_xMe=i`Z5o?1PW#qGL4v#UXPq*gf@B%<|jC#TMWB zoD2m9ZFwxRrp$n1ReCP3hTf+H^zH|T}F+9R3V9^C2 zX#sf#SUvp%!nYxALtg^&4DuQjVbBqj8<6P}alAuz_pa*3CYZ@9Dhi5=w`$kbmxaKR z2XM0T0Y|Bk;4u&fX<5g?Y=X!H@%VXZ`kI;=c1t|rb2-F`4+(N zv3L?&YkN(+;SQ;cn0JSw4TXhbKj43q*sFOeLSkZPQ9%PwU=vM;rwSwUa5_Vk31;Yp z!yOhbLV-;`6~DDP zG*xO%-*XfH4l9TlV8jBqgShtDSux-)aI!yIxJY-VGDTC&b5U%#_JS$o8Nf+KMzVR{ ziLpb(awm2xK5)%~2k5PlZd_CcB##=m5XFeA>)wuoXFu(dy3XG-GuJ;jSc-JoDx(~i z9%>BX$fIM}Vn5w};-j&B(lJveD7i|z^_-oE)Bj`^srWZAr7z`Fszwc7(Sm%|! z$N7?`Hh_3)h))24MAhQjfyoDyL(G5^cyH8%OLD=qor&Pbv7XAjK3!!dRvat? z<~(lkm)}FyisJITk`lpS6&es&qmX`-?{Y>H_7Hex3_HBkgj;LTj18j35c8N9MpI+J zv(6H+3Ha9U1qERAedH247(sbaAofEH*5cejgQ!9|*vWp~e>i;%zXx>XkBJRGe;Qvr z5DeD`QpP}=A^!qSpEeNz=``Z%ST@Mdp3DQJ#wrH-AgM-5_M3MX9 z>L3`Z(CWr0ul+#$@6ANR(aE|&;6dTiw(kY7BfLV|4^Xh0TJF9yT-DH)(lYXTne!#GZVet4*xgO zKk2AJC}xLvv2)1g@tn%5gA}QGXxgfxS~>X?OmWkHLvMF>Z?WcYl9&AhP|Qp`OJ#|A-4PFcSo@L0EXHhB8S7ce{iJK zI1{w=`{7!8tk$4PNa2YuY+KA54~aykF`A~-n}bsydiJ5-r${FQ09jkXA$e}tKu(BV zaEd;Bdv(SnBJvd|moe0)p{c^UviUt(d3(WGir-*_+{QN z9ChvvF&sDEvqvSx%ZJ2&zHfBsqDb%!L&GS!oOiy_#O&5?8>N}!h@b|Rhm4gxZH=@; z%&9vX&4-@+?IOwPpkN5h-(A|bw0l2iP?rd^X45UXsNJo~Ha~ZJoD>WJF1a5(yelcJ zK*lXPQ{&8zR7~jf(g%tp%WZ$JwA0GYO}H~h^$>(0R@r${d-F8P5>p_m0rg0vsi#U9 z=W6RT7FGfhHqOjp3`;?938>nSwI8278|@Bq|MBLTAu>8u_zj(2SJyr`&*>%^J$*}% z4jCF^l9FY;j=>jzuW)p{+LP4K!eK(H&)O8M5ATpS7V1^;bB#ZRQ7J5&ZOIlIHbZEu zuuEW*8D5G6{|M{F?sEFv;SSVS z9m9?l7fCZ`nE)L=&(?5v#hp63ZeOwz2{Y*4hc(QwotkIrUr__$1}}{%8H=%d>&9nh znt9!?Iv&)JRIX!nl7G2@Xy!=YrB{D=xM#fn>y^sfn(~f0k1HbW;Ci+dBzUI65#U(i z%yveS8L<4^Bc`@T4AjmjfG`a(Q#t*Hq98#S|>LbVl8f=k)cOHhhc)&-pCpl zi{6FTvUJY`|5%oW%;NQHW^8_#NZjAg(g#DuO*TvTJjf0mgE?fS$CVErUzOv`TJ!qv zm4b7rNNnEN9T|Q|s{*XT$iodaK!t(J%s&xaH!{cw5>w%OQ|BRKeY{?A_!#i#1(Yp@ zloYxx^mgMvs%Esmt#2L4!%7xxp`!{8=0OvmKe%f%b{Ew{A-V@&@~vLFCt_s3OI;FF z>I4T33B!~thi_^95nJbMz=4nD609PY>q58qMFK^sr9!=e&Z|0Bcu%NAamg|ZdRDsUfp?f<2s_xBAJ6g5SsLb`m z?a1YWrx?jf=$>xP!bIvx@?TfAEcdc6{2Pt3`nC1x|EsSE{QUprx02ua&W=a-MWeYg z=z-AcRVI12NaRqF$5VY2Vh2&Zfbb6JeZYTx^(~Qqj2JrcZPsU@29pW$59x6)TYiJX zBr&z!TZ@f|`QD2#z#fwj@@_QH|MhNzBxhZe=9~W!E%gm+v?vzT>tWsp>V=QoLJ;`7 zxIDx>VgT7>wp1=e+@w3W|u(pQLDzbQN;x0GDB52}Aax$dUNp*XuMKHf=#!QUQ_i=DSn^kw?Ph zH!CIugW8xHBxr%wVwjU`j+U{R*(R!@t{^BS2G%QLa{=uP)xl>A;pX=CVgt&z85%IJ zNg90Mkzcl`3a8ylqF4T(`+UlY&pEEu0wg_Tk6?`QIv!ZDz?cf87MLMqFhJ=)4cn^> zKOTUNiWE5<2(7UrdVVTk-y=&!3y}#h;7qg!xRs)fP-=ikAW;}31{kRff7$a#o{LZP zyHx*!4N6Q29A!`(;7NxLeHRNmKzxJjHrRqAYaWyvY=Fj)6m1BnEocN+A;?PK(1Rnj z@dHeqDUEVjn&mxHe+p^>Z;Z6Yf!$%J?@EU1j(9O%wCwjedwC?UfNoFO%E|u76^5VA z->r`Ri9g5>9M%~9M;UoE;bBjo{y3u~iP2Buv`sq!FXDH^^KMRi;!|Zr-CDw|eN(?5 z?itvDeDo1%M71ud!LPI%Z_OUy2*i!xr3g@*0|Pg~?qFU4#G<5L>wo+3wCWgJJ(MsP z3|2(&SBMVRxSm%&I?9Xw7sIr2RM8!PpaPEiR%^J8dj!oBKw&iTrTg{)ghDIdahVxN z?o$~VgxBL!eh7@kfTAJlhR}soMFV+Lui94L;i1w5TTzc7YEBl|%NwhErqo2XDf;dGkVeeh{HNG9UyZVBQ z{hY7bEyr+GE)gEno7!YcG9{L8pu zFEv`16o&Igq!Tl=_l4FWp2r1f*VfG&fDz(5^r%qkA$SfwL7rP4lqu+r(fVUsKni7u zoMCng#IpYs6^$rz#Qo3H;62>_nnUe|gTrfyS1hJP=*Uyai>Zz8EJVQ8zO@VJEU{?{Bg zla5vmCa1IxU0n;&0#v^pF$&y_#cX$W> z74VuiImO4EmpaJ!XJ^ir2_K$b``6Z@2#`+8qYNv5CnO{ck4P^KC`}N7*6!=56dGpR zik7ZphRX8L5t+WOm8CBGx$)j?kF=r`EEegB@H#3$@HeCvTI$AsXa4zrC@~i*Iq^~G z_sAvPKWPJd%A!`|4sKxmf!KYv z-hJ3UrYB?hSH^7J%A!)?%F;;J(2ak8W2eb5Zsne`ww`x)X(bnaXHt=RluM!fP#s~~ zE;Lm4YmHK{m4y~g9)QpSqAgN^u~@>jxaMlQR(G}TvS2K7as)1*Vf@73HTT;@1|CkP znE5YBvp;xb2tRZa?DP|`a8EQ5OHCkv({&2uGFyI(EDw*6&0g1Bt<&suc9BAS{WrXa z#g>?*T`4K!Y1SSAebH|8r0bJMrb^_s%MQG zqF}@$2#*&oa}Cs}ivuys2X&WzU0p+RX)!B{eRE%uq|3Qh#<(V6p?VnP@!L>xrrmyV zcx0KM3UwNGoM^Y<6VmX6PskFJvQ$sSY>7K2(JnsL9)s6$enN3^G=Fq0GBXx?WR~~U zNlwu1#qXlJOzNluKAqbI-R0bpLIWprJ1cgHSV9{sWqX_5qJG=2NaoW1tt{-sCzf9`{4Di?=i~*F}Vq{*5@#3G_q@vJ4rF>(Y7D|R$LOR zBMn05M}1{JiWZJ-kp}#|RzO(z3rCZbq$FMO$jb7_1RhsFo!FS6l0rThI&|04i6|K& z8V}Lf6p=whp~Kj>SV=6>1WAr>M92;(KPqI@&$c!dlBuCEclJ1W_Bp{d1CM&)Ou-2H z7~Ewl_n$&B-IsLdx36GN@v1VyY~oQ2z#Ol!_6&y9^;uK_NUgiNuJ=(vW0g^x&N$9} zqmg-EDYHD5J;c6xphN#%c6|>(?#=}C@VYDWO#>q%G`pELk6{Uqy-^A40%rv{bUXj1RKha+oJjc)vse`aL>)~L9)8HLv2zJW)(l7JVo3454ENr{ zR9gAY51l1DrJ`v#ou6GdCNTlB?s0kqLA!IPU}R0l{lE9g?&6U}GMEhJSy%zlS2Q{`KIcAj+|%>3g0=NgsI9G?<@uN~W3Gdk&Wq8V7({{|G*WB8a)(KPkDXYJN(c7wnx7|&fa)T5$drNv?VG$r!%D}Q7++r z9<|jHj_wbbDk&y9-}#Q#wMb6;_3Sr1F?PuM72m_{qTBYLvRF?UF%|x_pi;fCPW8I5 zncqKrYqyW|u}7~{ZOZuNc%1%T?k!^GPqGSXigOpn|33j?|NB>U!J(&`h+8P5S0mzX zrxe=dJcno`_A+qLZU=E?rrsSAq0Oy0XyG$#KRiFd{nzYVwC;zz)YO}qXa2Y#oZdf? zkH)gBsLXho8&Ni3v(?%>jzZbyTS{q()kYOy+x^bv*RNluW@aAedLpBvf#^ON9=7^5 zIC#LtF0_rvG+|IvQ;X#A+3J*lx;sa!^S8k2=Uc|{y7v(ewkp8;V2e-khn~4|9Lg3% zFdU6|x*8b=Wid`iRBQLJj#0k9K8QAcOPcWP=_)4%CyJJK| z#9_nRA7*oMPT;@cMMEOBtBF_mO_4+M)hmlRnJs+4&_Toj`-YYsRR|~&Rrat%zZ=&? z?>7q5eTiwYir`K(>m1GhvjboizNH+o-)VV`IeF@qVvKm8Svb46147zaaa$2zgU7%u z;%x^f6|^_7!61P#K?TwR(0ZFTct0JKsU%u5>*^aD%g-=Kk-q*L2TI^Q1P`mLt0cyr zsKuXISXevX%Iaf=Fq)Sw7JPgkd+c(bTbsf!qs3?ffE)o2?$UL?%-71(`j+}3^-^#b zh;TR`6BAK}^-LxQgO-0~Qm6BPQ_82hm;C-LqemF*s_h|#*CBX+fd7VIg)!OxZ!PU! zKdvQ&+I=jT>Aa+^&7r2I4BjBo49pd&@bs~|eEq5{A9JZN#+}mvKmIZ=?&#|cj1h2h zvZ_BMJ!o;$3!^dirSb58Zc&*+vtU&)TKFHBRp{U!<>4WG{5XhI5X8uz=^v4imDYWh zltgn*S%S@9h_hpbRN#h#3FVa zYE{@1V*=N6z`Au1cwj;1&HP3>>Ua;Aj9*GJyOitW?rvfmHxEy8a&j!5+2;OovIW5B z9u?K55f;-2%_}&G`GvY;($crPM&eZu*?ph2MKNwUGz9yyfhFLs^Qq6t=Xzu`~p%9ujf`_Zj|YUjGji!%E_1+Ynh% z2JECUweru5xbW#q`$r4|!SqE#2(?eg7B}}E!}Ey5%<`eJ{2#CPW8?p`vMk7D)tB`5 zP~p+b92R6*;w%q8D*ZJ z=ajr~{d!xYJ@FWlaO`*6lKnrmw!-uObG-K$m~Y&H3rRxq_k)6~jJyJM_M;|aNj!D) zCR0bZGizT55ovz(%j?-u>);pPHKq_=PaN1$+ml&w{oQmyj439BjK+Bb*~F zfc7IP<&fNUHwnC|Q3f}uk(O|EMdoeqc=L_cHi<)h+cKn{+`z}`7>UjO&yob&rX z&+~en^EWvijMY2`%>9hZg#6OM~@;jH9}Lm%+O4Q|GPaMfoVZ#$PTB zot8m$HQGK*na;z^xqIvqPalRIm>>11KE|nx%h%M@NBw(1&)8&Teolwc%f9ksHTQC`ip>KTwEL`$C%M!c|gSvHu9w_8O{^amN4{ER8)ik zuYj5nIi5Fgn{iu%>Lw@}Cj(lw_uNUa9;vj0hNqH9Jop^=0|#JSG3&Q^qsq7qoXf zawYMD1yxW}QJT(cl5hszq<+K znc(dT2nzD^@tx#KgYh(kIa{rsz_{R|TH5HxhF0qqTVX6`(B07-r`g$o!$FPX!*0E4 zCOOx^WueB<^e034z{jBD(;b_xOn-Z^e$x;!Y++-&yr0{QV|jBap#T|#9mhEv8>wKS z8((c<#FY&9{HI~;qM~AQ2}#(G!Vbfmb92R#>-xztxtN%|mKG~|g^y`zmA{!v_-tXN zR}m&b{-hETWt#k@=@!(#P06lUnHE%0NRzQ-L`6j*e#Sl_dVBlo(k)nlo-^t}PG6f_ zvfkq~oo?2{vgn)Rf0c3WL(zpA@VLZ@qRj3v(ABSMFk4ty;JrR}TM44?!rTvb_-TQEq<;MLmH0Bh z3$^axZ=E#KH&>P%qPbw( zmKzdsc=-2O_9UIo1wE~njQq5(Gj4l@e7~3b9ep}qw?E>-)6KIT>m`;JHf9}`vtC}6 zVn!6zF!2h@j4EojFPP=FL?h%r5L+pq@CM$8$8zxmJy0@iL_RuGGqYogphc+!K2Etk zB(bdd+s@$OS}61MgVU6ysv?pzFuH@4vY*;@m<6FtyL2C8rDX2Dtl~I3J3H~|pJ%`f zh2Jz5A8^6AxbgAvpA8Lk7e$iZaPAU!*qlpfCkmL}ZS2#PNmfT{20k-N7l#~A80o`| zWxyW3+Ba_8Xi>Csgn9~mkQH3XgN;s`babf7OyKI`Py(49kJIlJzI*Ir>4KDZv9S;@ zG+0hqOl-y48yR(;aDFUg@7VKLC|6q(VO!M$EATUe@X&0 zA06XC9mq?pKdn}6RxBC*nnw594!t$du2$T>o0$fYJfo*}M&p2eA#M2poD0py-^Fo3 zVwz zlGkhW4yGrTZ2TR*l@CcUC791i4K4I6ov@nu#XU1BO(a?^N$q*nvn;F8tJB+Pz zy?WC4pXq#WunxDa>>zX$#`0FxBt18NHGE|07Bi(@HfYzAY)=={mnr%;T_QfqEE>Jo z#6dsCF}ZpsKR@F~Y2eDtlp>B$Sp&`CX<6m~#h^dS-DU%w9NMObn}b_!StWK+^DDm* zgR|lJIcab16-HY}P9BtEuefOv`>n>sBGRT~>n3Ssrs=jiCYqsowwC+$y!gjenKYaL zflWIP5q74b1yOq|$~$JhX!Ys7m|Aut8qwTWN{&YiylkjygBByh0Wp89re`a7LX0(D z>mEJ0A)BaAJ)*@wQoC)jy=iwUaX2(zG*#(ag4*P^d&u4&2N*ul$lK8UXlOpiE1$hBnwB-={mP z$|ZfrWZ4I9+Co0v`!{sMx;}(j(HTvb%es$Lk6N%r#uUpf$!Iz(8PYlrC!f2zFT#e1 z_n6a?$eH8lnrSig5+(%PdY;*-7UyPC_3DkJ(DzmUtb0ybNF#|u!h_aD|A>tVb!=#BW7&Rb5Ll(g` zr{O>GrbI(Wkq<bDCrs?? zNYU6>wAZY3KRP(nEGWbS72M4Q;rI^P5c)&dPvR~BE(x_$l>oR@?-LG=OcOak2_reV z0DFN<4=5k4{N1_9)(;?y8mE#q9VZiTB2_gt+%)(Ve2G7Qd@z#Z*7TNYX?}a*e-ki= zfm)kV-|FhsK)cw)9Ea~9q)K5kgUn9>YBjO5w0i$S_Z(W?f}eJdj!q^f7M-JiIk)o? zx@h*Q{`@INvE>@TgKuJDVR3+kE`k$LSu8tub45ATE0Eu%KR3 ze0zwQX}g8Ww|f^6pms()=N)diRbjE;+ThsaU?W*%LcW1AI5C}~3^ zoctpq_F%jNGw)UF7%u7Pl#%@=+&a{mXHJJ%gi?j=hjKCQFI$u?qU_lw{m<%HpWKtK zItm|IAlJ#t; zWF@RY&vi|jtm8vS-{EsX`L+P}4UL_0+cIlADO(lIJKdY$nrguXD zlLK@>j`IEcpxW=C`SYhHbEwJ5Q&mm*k6pRMZH6;7cUlTOKpX3@(SY=ahI5-2CS|Es z&63WNybIm4fh_r_fs8;BrXwW$f#4XUrRC;1$`3PLY)?BCm#^_>29t@sQ?*hS_5{nn zkLYF%70c&E>lS0<>zquFAyzvk>EdRgqvOzE2{+&w?WeW}F&a3l%(Sv#Hv_2eWlte+ zk3Fp9I?rteCHet|k0p{+lDD3F~CCsWfqQ{@x=_N=6>cNU)_Z51D? z(0?e21P$qOU~=WZQ_NT#U-wOT=Mr3VFEy`xHj_%>z3;^;v$Dm8X3A_%JRGf{=*ka9uzP zf=~2{`7dPQmL(j+Dri{tGeQ`3k;`w#uAGOBgP-~6XwW5*zPmO?e~U{Zbz| z$}HRGXIzY?C#Kl+6F72~86U_zb$ynLHsDIwZzW?8cAGHYV zKs+r%PGPwI13tiYd3VKdCLakX`Q&`(CFEmdydGVfO%@JQ;ZQW$hX7&$BvXUqueRJy z2XWoc2F~*vaU{Yc=?y2Y0p{%i)|m|$4hkq14NWO?c8JV1XqcLrq9KgPjM^4MP|h6; zFm!Z$3`7n%iDW>eQwakN%tu9lh2h8~Q83|Mdmxzk`0*@hPiPw#Z+64n{A`uLE`~X2 zV%wSPMt1@)#hyKLR{~U0a@lrUtNPz4zsA4pnUAveL-V6$AWAegoKXlUQJL&EVCJ&Bqh{N6W`CuiC zhBCtX75rB(5qiy}JuV==+P|ngPsi4RT8vW`Ba~}< z3x2ijeG$hs+24q78a*bIsr>z$I4c>@J|0-5@Z`eJ%1YQraXgOukk_QJdo%8Kz%A(X z{Ko!quft{AHhK77+P3K1h~i6D&(RER{nV9qTJqT%zr!#&g4G3*A@8|0bC6j8eMSmZ zU*LQe$K`K?*IwF9i?$PvSTtFQzM1txAel3+pH@~Qyg`S?U{-k>sR)VjMb2xOm=kkZ zbh6VF`P*?>VzLibWz2=pw!f8;5BF`suYzUsdQ=x(_Tx7fc>*B$!mu3i3+&He3w2gB zwAeCr%lft8zC*9f6A&LFlPh`@JSAMootFY9euFUsg#ajX>i*{l9BFE5_%F*;8Wak_ z7V@1XgYSSTLj-`?$xBM-dB*-I+`AafG&VM(@6}f7mS#N9sQkZ^Q<=%APc`ga-0ZD@ zYP-g(*)@GA8FW+2Eb|3>P&rs;tjnO@DzgXm9$sF9uasg^FQtusF@)1b4bdKzm&dNA zb|gu|->u9T3ebx>Dz_|tT-ka;%DYTSU}r85!?W)C+Au4nxv{54x3!5~NIaI?`lgs<8z3&0Kq;}b5_%uc6KMK ztE+Ew2=D!05!E2qD?jw#ga@tA6b{CK%0DaEh$Mb;mW`3~k+HEcKMSin6s_roZpn4` z^jX9)mYi>FUT9S07@H!NrtZv-ln|}S(!ni1|8pQ{ic^VE8ZpbCH2eQImNtHv(>dQs z%%Z8OoE-SC;u9ABhD#NA2X-+SQ;_ciT(+`#d-`9Krjh#H=xub}$QmK=_;nfwMC;UL zSaG0^gC_zv1>RaHucA#xV=vr&Y*_O2W`FIm#Wvo>mG`zDQW{Rr$o0ldG&E=E?of7D z?T}+l_Vm|7lBY7Y6Q4K@IW<#|kjOFfO=kMXb;&{?vkooyNi!oFjG~FfeM!VZpNM@w z3pt{MAILp&E|)WCm(-p&H`q=N`Dun+rn1T3VdYpAtUE5@G8Ww2L2u=->Uw!d>sQaM zIWuKeT@dEZw{k4*q1hxpOoKSmwY$SB#+s(`0!WXapWFV4Jv{v=e7W5?4ex7X;CFR( zga)h?raSc(jqv$^-;?8VtV6)?GoTa5!xDhnyeKF&Q+k0UP~+ZzrTbvsz5m1Ep0pMJ6BHTP**4#l75$<~%W#=zW zB#psUo`BKDO%NwADR03@v%^epZs#+JNfvB}<>5XFb%0_(y2m)f*CDrc&IzvuyoJ0% z5IUMu0JVW#vH17`FiZ0y>des6k)r@Hr(AIfyZ_psmT*djR*3t#P>`BP5$9!44% zt=Q`1^9+&;qrX0lmIfz`Q{&JS+Ja)ZU5MBa9qVaO+ByF{!?BmyYXy2JfZFGjr{}w+ zE`WRg`Ti>2DW8A&abM|kdyjxE_F9_<9o;`8Kz){AHvi2@pE7a>EJz|lR!uI$Jyy*p=5(=_t*_VVl=?wK@U!b;V8G!a9XlZhUUwM$jkXk-sm<+rvUbXpF+~)cu12HcqDY%jJONs+#l<% z7y}=NP3>;=lIXvT8gu2H!;tZ|Z4G8yM^arNpEY3-4k-`bnfmF&XAFjLMx{;Ikv6Wo zH@_2C-hP``rv}TYX*!U<%q;GpF4AOB%mK-VlVxyOy7Hczu3VmFZ{xVo_Us}=ZP!05 zAus&sX!H{dYK;5E?E7~km_08~3A?}5gCjaOmkk#s=5t1l*ag}9%wxQ1{+@y?`ci|UrGX5xVWAZ4$qrz!|j|{kemx#^7#6%vPGi+>Z@V{6ARy|C; zr<$K(I*Td?4K4T&NLU#SLr;r9i1KnJSbLEA^Fn=+Du-bLcu~Mg0Sv$_7Q^1-0s>z_ zl}Q#`TJi5?G`KN*zT=QG4JGA$+0!+(uhv@6{yq#Kx@TY@H}=@7?L6R+oPCceLC{X- z?aY7sh`xQhJR5#bV;Tlw5@arj1G4$DT}uIB8Bm}=E(C-E)@9Mf+y3us8ngKZ6YL%6 zXCukKF;6RFSO>}!=tYJ(x&<`V?8wr8BfdH;&%dW^?v&@rGn4gWCWhV3^6_w{Xi1RD_%FLbi)m9@0sMcnc$N}l^DPqJAJ z4_pjjh7&S06cd{nh-na}u3ys=d0;5>SE}Yh4%yX;Rac)d_v^WUC;cx;b-HNzVN+80 z6lgI@dVIMOY&kQtBc9c(p zO!5bcleG6_2EFHw43dj6F*A#a%5>}UXGT#A*9C!$j~}d>kv)GPyy7@wx(T~&;msA3 z#6TlHc?7E{q_^e=ErR0+b zefI>HUe#nK;^I(`6&Y-yHwUD(G#rSUl3}_9KAB`OhP-kwl*TJ|Q)yFclSq%?M zOnPho$GJ&~@;Ss4;MLXD<$b_)n;R}EU@-)qlZuMBi6+X`EwOQJm}KH;#Av3jsSy~d zMN}Ie1p^QtjC+?K1x^OgJk-?{6rM!B-t1k35e`CAt5{&j%Krt5G6@N>Z^p*~IkHny z{x)X%<~mK0#7$Gvy)1MqpDV?{evAp|B1#Ez4mL&13C(PLoPA%P1!_}eHMO+5i1jzG zoImJ`=A?|_A6j_Bsf|}H{G?-|O@M82sTksJCCBQ$)rXHU^8_FqM96>FAG=*j_;m3p z&Ul}=Zn!B178c$((!oJx+6YktfClwwH)=ar5+Fd8c8`Hg1Mr6c&l$uhE~$38>mYMLb-*r?t{6^ZTDTab>k_&q@fDnWk22)ja!5 zZNDT7K~^*_ypG&RB0eh^P0g`xpnbL^PMU`eBsveFv72$ODe9VVO!ACLPoF&4<-xkKebSQi6<*V!T$^mo1$Ge^wkw8( z{TOK;jBlG5s1f4(r)t#l-4FgB{deQkj1$I&a>H8C;#u8!ViJ_$7xF0-MwpF%%7zB^ zAG8!wzLmYv?F*Y&&4BJ4HIqH#c$dBJAzr`v?8fl$?V|NPedW3|V(YUsT6T`-kgm9LhR<<_VcwVx!fM7+O$GfWVzoL$ZT$_Q@?pzgqG90e zKXZ*U>~qh&{gR$xZhI(tq$Xj4irGu;wl1B^|Xk;Ht1< zqa{>+AGKeo6sBorFC88vUKw5q^(}tw4Ug*k?Y?W2DwwCK$NOl+1)oO{gMVUr|M_Iz z|9rCA)p`!{M`^4UgL}?*eyd2i=d;3+IL)Ub`FCFw%a@vKX4Vv0+{331;JS+8Jxl9`dYw^qwJh+oT|fB$#TSI0CdBs$Yw z@Pl5j#wA)VF`Dyb63-LWfw`Ws7tVEGjZ_@8!o!oR`Il_>c-KU{F4bGHya|NPEt)gd zIJj(M!cwJkwTZRWq7#^yWYa6xzQYvoyY&|%}JGS_75!l}JJj#yRGK5#9MQ=} zzdD4qLcS@DTG8#|bImH3RxWfsDH1!~5K>lgJ_j_+_Q305`i_n}v&)qDSl~RHf_aVN zh1X~nJHDF7R?*-C99ZX`2*M+xK85a<+hl&NuSae!M*xMG;D56nl$!jdK6+)J8SmzZp#{A$ z-ahpU^Fu;|7e@O%G%Y{n{;_JOSS96K&K<8>^Hd>K<^+;ltvP~yDnEv_oU6+|{yGBWE(AkVSWSu$x; z02THCS2DUa^ezCKJVw7tQO#ti_f2Nzj%PJqCPA3DVTcE!Yksp{-C7`mpyI(qVEDJn zg{tbbPzk5W7Msj(oi;VvgbFAjCP8RwaH|R^;zq>JjB690dfm$4Futv)9|iQeZP*xo zCTd_)aU%8l9z$!s!A#3J-uleUl^nC(=b~%Ai%+%wxias(y!Da}X!Q>MPT|H^^7g)2 zPeniN3OXe^)l6HHd+?_Q?Z(8)>iUTnua}&qN{O@+ZS?dFsa8_x1~C(~neT}S3<`Ub zm9ZX4c(yAdJ>4Jm&M}wHjXW8_h@JcO z>(?bPTr!k(ROAH%$VmiLcZq$NA%O@J8y^p|W->kC*7XVyh`ejMjfkbiRnrTSAVQ|* ze3TXSEgB;Eg3lEalY?YGI90Gu_Sd;a^pUn};PmU?u0j$WW=q0jn`R8v)YOU~P$BuT1X8V3 zxsZbaWkX%2NJ^kUqb@I`Dr7HGSGNPyXA%ZPA%fQ2SN1(f`tmX|VgbC*NH+`8Nk1V0 zBTdL#D|I`1tkdX-h=@y#82=~P zcN0=J-Hgn7F4T!_hqC*0#1{yG=46)TIz?BW>|Uw_6e#;&$nv=ug#`AP-SoPIS&(kRD3B$;YX{)>gycGSuQRCO@eNX-f&v8KO9p)V?x@dI2v zCTJg6>@Exx0{%E%-Pe2Sn-tCDk4T0m*$fmVC^JP}+GckIot3+O!>Djf)g6iP@%OcqDlpyFHgIW`QQ$O*m4tJXT{JP|<_48+4v*%p}{ za)QB8OPSqhLJHd_QZS#ud_^h13u8&ZCwQ#*0OXUyVAEVs4D4wZc6MXC6Qy^j8fE0o zXd$Nd#Wc%3?j$GEX*D$gMSKz1q?B$SedX?1(Y=p_uGLl;UBQhwN5u+;Dgm@$SNZNW z>bk|n5!jmG*dYlT9A0#Go?kcO;Uga7bi~hMjxLfbTG;wFH_{c0I{DLwZvaUU>WCTQ zNST$hD;iU<)loBp5x)K&%)>BeOIF>#c|BBtb$PiUp|j-kgH~;TiI}tG1$lW|c$sJQ znZllOv$u3z>UANaRrVo-2A8k+c8uLZjv?5?k1D!LEN}A(+V3b7P*!s@h(ILPE`KA0 z1^NH}TYo>*&4dNHv$%$8GpwX&C`TxuAE1dq zh!{i>px>!46T4r)Wdq4SeG`|XIXty)6Njwg{*Ab9OS6=347C)mQyqpi%kSSGaQ_2j zcy|>_9I`15rweX$H?k1lpr*D4o$8t^PWR@=dm{B&H~|(M+D!K=!)&|E(_N%z7vPQ+ z8_Ad>5h5=flQ#wq$uF~xkD+xT+Y+;|YnJ0{5C8i4^HBxSO{)KJH{kH{Xy$mW&V`$& zU}e(n$i3HwB%DN?r}^LrTKh`ckYz30U)AkSFmzuCpA3%ne8c&!Lh3*UIEIlXtQ@{I zeenw0ehGLZB4%`ES7hWqv`}~!iSpAR5-U`FwanPM(F3R%rcLI8bJ84s23xB5?s*fv zK`FY4PwE_on6K*O=CRhG4}-`72~a!0!F*xO5=Zm(5_ z6-aezBaU~`>nT*dz1^(@oV)^?uX$;4>Qz`+UIN$udiA#L7V>IgELl&RyU7tOj&zke zU7mm>LGh#Qgsmt-2%!_Zi5Vh2{RFNWG`|2Zy4&1n$&DFyUKxyLB%@;LbWSbysTvM% zx2o2YyaCEgemDbxEt1La7Dqj$Hos0w@GH75=-+?0_4gJ^3Uu_C(V`QzJ8}OFClrTJ ziu5QvzQ`vF9sp2N)IeW|2+}k8QtTuBzj#g<^a#<7$Cv5Z>6D~!<*9mo=X^}1fOUG-WituK}=v(o%>%F7YXiu)P$P41vx zxqwel2;3^uoLNnok8W#r;VC;i`dg{DU=T`N{MHTsRhY;4XkMtKrfyZMQrA$t8hFK* zJG$t{xWK>w8=i1+G0)bGYb)tpRk_ke?z{%F0%;8zW#iO`XZB!L!?I(CF$N#*?(Wne z%bP;rJ?wcQYragd+UT|tu-<>uF%Yc4R_U?59G#y77S0=lG z7!(8FM)sw_+i-jVP`nzleM7^Lt9*~%aGo_hmLtg#MCP`~THSb^p3WTJd;yw44=735 zlLBDA4aUN^Zdz=9xbGW@$_wv0t$YHXJ6XLyD{~Hf9_$H}Ly#p2@2W`pX$Wyz>)0I< zPjqk~UP0;l6gL!JYeIs>!@@19if5Ex$Hv0^@oTK_Arfks8k7(?A>>Qx6oyu-I8J); zWYo$SOum6tnwpxz^r(G$q@9%JqU;13bvSN)lyL9jzN2&pzun92+?5)8O)ae> z@tZu&(r|lv2X7AUM@ZJf@zTfeVJeUTy6FobzQ5C1vj2zzzm5<8`$}I zaJWooy;VV)H*6I~9Js2*D)ed~+KM)TJq$h|hE;w>uL&Kc?K~Ormpa=f91r`Qhl|Mb z3afFO4XXtcYw9%_)zm=EMxF)e4%mvST<4&UXdij5a1bh;LYE0L`v(LR{QUU2Fye-F zX;zk|+@(9YO#zJ#$ANV6@qLEDzR`~EU}bJ*%v~_{1?~E#NGNNv?3m_1B7HQGeVmU| z(tHlJbtNPvkb@ntM3REL_6yE0^*3I*z3Ym9%N%j`nzW-;tAy8Zo7d=bK8}$Mzd?3$lkvfOBD zcvPD_CArsO@A?P3*FVt5-@E5y_scnE>@42c9G=+6f@ZH{KNJ~Klh&(GZT|PK)}%jT z)njL;7eSH29t2~~tKR8<|Mk@L3eT3(3&89cPi_4_ewB8!k(i&wN}hmg+$(nzU(LlH z3_m?~^e+o@G(E$P28JCPv&k|CmVXZX7{eLzt1ql>W&3r)LU2q+aBOGwQ@J1U)+aiR zB@_3y9U_0)<-epDwuoAleT6e*z;5g$pyYs7c_)nB|R5h;c>sFEs9A%t3EY-_m zK}9qvl1fR4ws&gLoXFLUp$>q*gy+9lf24zFqJ@j+Lxuebg0ll6@{Dvi_qf@ z8l>lMlM1y5>{%%(7u6DxZgJ`PVX1aaVe>8w}#h9vs6mHaG3?)-@ zsro?&(=_Sjd@xSmK1tz7(WR#2j3rRZM4MnvBW2>0m-*B<^8Tb#ImI%=Yk5WPVkohm z2XQs22ETRMIZukJ?gH94V#{!7p-vi>oWBL9LnK;og(B5-UYWwD=&Katx?c{^0*AR4 zF2P32cH6kWj@to4jX31nS!`T>Uh@%)Tux!N=?jG6rq+r#x=B?CTvEI>ohoHSF{ge> zd7mG&Fjli)>$rnMZFH@m#`#avbx)q@mCsB&)R)+*cD^+orn)j0`QK^1g|yqe^y2bz z20Wp^664`rHeiN|4orsIh4}18G>yaT_~AP9$xXBUI24f`4Ogy3jgs**Ch3~uL>}=S zO5u#e9ff?g_4NjDA;AfUuBNWBu_)zz>kvQ&h}d~`bI?UEMtM{e6s*7&6$nm{G7)LC z41jHqZjJ+r?3t$UK3h?8)(Rdk?Of+vibXI?$#nBwie_d+)_JTGcba@@oI10Pw=dg# zsDF64z}4!g&~3->M4`tfK)c)7vyS*}L|8eDs$3_-XJ%)k(Xq9rO&Ur}b8xVY^!KPh zP43ZrjCcZzcDS0bva%Azm3M=qO~i@C5QVOX@VyKZzw@Q8E^s>g5VerUCnX6n@x}SZ0iX^R|nDo3eB5)&~Vdi(9Z9ssd)Oknr&1V1Dwk%s)-brDBQV zY(d2Y7}?)wi`Ti4PZF>KjE;_3dM&iLN=z(UAlR;}dpj&Kq&|Ohlaj9as3BFwDWK?b zVyM&Ri<=46*4FFQ6(g=Uj1#ugjrzW}1*fckc&qe;&cR;~d<0SYT0?27+7w9ppon4c;K>6uIEHnby39C)FY#0mqc&_aQ z%kz8Z#?ot}3CD=}xw+opxsEyV8?mv$l*O~C9p&KDrwo}eC)_+8S%bknTHVxC6|9td z4ohRqKI23)1G0YL8SPqHwB$deT-u&qUv99|Z@-mQ(bwdCt z?TfcFOiudjM>i2+%~B-*|Ls$1YSJ=g4;mPG~?z*7TH z&F!Z%Qwz=T9%>K6xWGk$qwL2yG4BK!n+fvIzZDTm>&KkY<=-1p0o z2gCFj4kDeJ5r+ohUE8Z>#^5ZWE4~iIG-a-U58PWL&7PMU%SKf#Ynwqb9lG1D&F#+jhuIAHrl6Q6C*N$~5t^A7i86R`Rak*P5b-F;oJZkV>tFP@mIV%##Q3@#wQ?3=Jb_H(Z8A!e^F#Iq8QO>f-w@#mG*4&6V=tFDo7 z8Jo7QP6UH){5qGPu!ID@0Bm^RQDIAH*t z*X-}lnEP*K#TD@I)^N>Kn^8WtGeQecUNOoUgL<00fGb!$j7>$Jg7!AN+n zuDmh+Whx6t6a;-2cR}z8(Fa6XFcd#{>%sm~G^{X*TN=Nx^!01U{-qJAMH!TBpNAX9 z<`(dU6E2@ozP9rI?ocHU%M1$mKFb_Jqs5A)8L4k6KZw~2OB*!&Q3hgvYL=~iA^URt z+j?|2N95&!x|$Fq$_OJJxFf=V^V{FQZY}9X8aV07%gaA-`>JxGVTqs)OiI?=fL|t< z8&95k>#YAaUe4xrdQU}PO%j+Mpxt6y<2t|!f)BisnvuD4$i)vCIziDBD-}}|()36h z?su2tm#s~q?bG8dz!Swa)$2{H9dUSK>-g||)E8V~U<_IBx7p(WF7gbHoT^=q-y;I& zJR(tZ*T)LI6Y3S{wNnl78u7fTs)n@Ys-BOC1OZ34ZDcjv4CQ<{1LUvqLlcj>5L!UM zPA`ubjn3RUi4a=Ms<3T9*F+@kE(RQUMr3Cxn%kcqmk`DK#yRxzx2ZvYK5Z1S(KK0lN z??U~He70UG=b&i03@R2pO7QOPZrq!6MXfD3e$cAo&ieD$Nu2$fMlmjDVa2Lle=71F z)5?*<0`9tYmaU0Hp}7WgNl6JVvoWxjjvYS^JqYY!@S;xn{IwMozngVBCh}%`F+C;% z$retvgr5F~r>BUGRRYhA0ui>YPo;&y2+X%qxCIo?_#bE(Oq$zEXS#4e4j2;CxtUXa zvrB*c>JO$|^QCjneHPE=TjlO~MNM{<(m4Zxmfb2fvGzaohtcGL_>7wbOI$b4q2QO_ z5ftU)mfOvP+uIGn{(Gku4?#PbM*>S#e6mEH-0!`q*MaYi^yM$%Ba-IH3W`en$Hl~Q zcy#leOK0mfldSIlIpuG3P4104_h`q6A(rUL2bg7K>98sGS;P1jLS%5^;k*ypIPh24 zhXaU0QE?z#3Nc(8pJPGfIM0Nfj(`>wPF|ijxQhvxJ=B>qBUDO9E^D(ma^YY+{vkQ} z{+n;ydfDY^oo3?B)Azi+>7!$!HPp4grgJyt+&Kd{Yu857YM4hS@5z2S+iV?tCX9@n z!F~H}c7k2P@nQUub%;{T2KUqA4#NoUP}tA7f>pGUq58aARMZi?5fo$ByRUyFv@DRU zdIzEoWu}th`?o%nMP1r*?lKfkUA<{$pBi&_zpUnHM-%=|^*hKk(J|NII?3K=#(O7i zaU%#=@r_`}jg*#1;h0`MOSQJQFRrZIBg;ssNz|v>OKqNGOsE34XB3O!h3s30k+wA+ z9_wy|3L3VzBd*!&1@R*3xFGIr6owrLEvBYmV?xJsl`81r;qhMl&S|*2cTd3_3;h&3 z@?q9-IG@DzQR*ur9Ll8`Lq;&)8XLp1`qC9FWGmp^X+{xdS_f?mY_KYC{Prwr!?(d{ z9!PtC7iwnxzX(>r)CEp*1_+oCvLc!`KP!3_8XT#e_`Ea(221$l2bVR!s5w9%2a zb7Q#6?BT_G;V^$1g6kZzAY6YBKS(Ee(H4gf`9|l7W zL!Ucoc}n7NuCNnq%0Wovo~cx8mk}>LJ~1Jo`D|ckfj>47NxHdv11QI&@;`$V0dQ!Z zn!muR`^@8VJXG&(k*!g*hv)5gIXF>=n+l``7d_PB-FP;{Qoyh8-Hj9mgLbHqD$0qQ$MbNsH)1G2e{&-{)(_ zXmdd%^KD?NX`gTDa2*j74v$_kt}WBtU&u=Eood`Y#aQjG-fA-xO)zA{n<7({pqaj= zA>C&Sf5!RQp(S=XABW+VBZ%7bsL>Ybm&`vb`D3=)(aChzdN_Lx&Fi z?(^2S2BYp`f~rY|7^3Hx&KU!yHy5PTQ;2{L+B-bFI$g7)^yt*QrCkC1(&?16+7354 z-G;LM(}%>WDiv(6Z$`%-KG-8UGgE=f4DxSlTL(a_-NoLl+PRM24JJ<~(oSfW84uk* z&fZoOSqz?_Nw-K%9&xwHJe{e!dIJKXOGiiTP>bm; z4BiGkirDq|G#}G77nl2pUkg9$TM_=&#d3~1v=FQVMeXaTd^^wc_Z9|h?dAM4?fRG} z9779TSFKzq4gj8G5c_p;QL^at{TDB`Fg#YEG}sznXk4MRdhTc_qSZ%y%_*ublKiD)%h!ttTE5bF(1kDfp~0e-|O)eoL9d8sObCK$g?6p{F&73 zE9q3SRfSL2!uxd`MFz;{kdY)XW*~!XN-nS?8R^v!A!U@RA*h>wFi>F>B>D%YX+-f@ zcYOcQzzd1etFP9=9zinY{qWz`Gw6RjOAOyF^!o#~!&@tYQUEiM9EX{eloaxe3RN2G zC^bYT4JNjrfFI}QfAHoTdeL1Pm)#4X44qq%BpB{Ix*_HLhuQue3^A@qn;fa!f)|K@ zgn~s$cgxpV+7Al}!I+rqw%I%3zCJRt0Xd6-3TvxUghfPJ7dA=4%e`f4rj|+t^VsjA z@LB%AUcaEggSbMs2RVIDd167uT?gkJh9Z2$6-ZXkSz4S!A+d30es~wMC0Sj{VXB%` z;}m{NSXfjNbq~y|G4MwFTc03^@XG8|B2`;258e_TxNSmqaYUNb^L<{JF5Rl6q=dDD z0tpx?$`;eKFCZ1Crrvs=C}{|LIaz`8+{~*S3&OGV>IWDgbAgdEPO`Y(x7s|&rAq?% z+*%nalXGXx9fyDGZ42IM3kWMqtIe)xXgQVk^c;>hv2k%xBKTi)v_F%=>71OFR*EuZ zma5%1k+Bkoxhx|?%=uW=wx)$SZoPa-?#AB&3EQW|#0>Aui1xe?z^Wy`dY_P`%|JbW zoQl!NuPFV^xs~t6Mmy!1iVCFW3#H)drjGBn*u)+ukBHgL8$B|KC3e^ zbX$pVX#T^UADC!3&vb4FAOcGo@c731^psk#PkI`4U zbZN&_wf;%aLUGP6;rytkuf6b@WV9;xXfUsftA!Q{UEHb3>Q5jximB>y-6Xl1igg%( zOL0#rqfP<^CKe-etHke&60c52Odp!Ky@f0+Ta&89wu%D@!*2SJmoA;!1fAX+VYY^B zf`dw0wk+5h0*Xz}Tck4|{v`1}S38ng?fGyYwm6Ci4Q=(SW=>w+6<07k`P!Z2${@xp=fauWPI`!gWwoB>%PT7><9>v-=>CLLmnauHGrDo`H24 z6h+ZcV@%`FCIWVFatgl2FVdfj;U79d$bs-A%Yg~SSA^}M@beG>!P_gYU^Jqp2K2W5 z&j1ypdDLI0K()r#2;kLiQB~v7%Q`zKP=b=_h3u2a$TRQ^q#YZB4-vNCO-=@kLeC9% ztYe%w{Hoi!X+CSm`~7m?WVf&6$_%<6C;PBLPcPjyWlK^;2}XvS*u`6VzHddt1f8K~ zf;5q-`h{QdIk@crxZ!Um9a+A($d3M~NIu|QHRPC*^P%@o?|IgHDbuBWEk<9cxw0GI zRNesXxl#ZoO8|gAHSmDH`PWv!CR62_#wq0xoTe8!nGR2?^c|%dz&1)XZt8QBWrm29 zR3XRum5eZ%k>&pWW1KE!{{+FWb&n!1Uud(pNNF#k@hhH zYu-II9CLfA%~z2bg+V_~RW$kr$+dmYDv4J|nMQ#>(vCPhuof2Qo;gnE3MBqLCnP3F zqm$cP+1he79LYNtR21THQ)fhoSz8gU=ECUe>dw=bnShMJpv$3*fTj$u3q2Dham1Np_c*X^s=H>)uk4u+6=I_4?t0MJRdL%o%y?x*L zBF0dq>%#7)QC}t}8DM=K8}40enl|jFN1^E$;{s1g8W2s&?h z`G5_R*ZoDMq)G(n!H|OD74J-(Ax)D_u?qD0>jnlZs{~?IxqkQ2H)LgB@joH>9XBOz zo5oxT(=;xqJd!FX>M)3M2vIobN*#a)62DY4?S7)GqC!MOM4uoy$oNq0bG_k^4X%O! zb^0sm8U~kPZmO}Pjg143m4#KSHRlb@jN75q7W+(i4PS+FAvZi$jg#ra(O|qq|9~X; zp>g_sN20N7LS&_R3o$k`yJ;dA2VSdv z=1(ut3C+-pyJdkofgFH(`P#YGy3{6xHI=ffHI#AF0+@hus~7=8D^Qb>so{{jI1S~> zpeG4m>|WYWxG2R}A7r6R&dK@lrEPDN%^meo>(1}nRAYc1(LvO;^c@&Bj=S3Qb1{w4 zjfACP5HnU>_U)lIn^?@h>Jykp)Smu+lsuK)h>AGA&_sWoksu>j z3NSV}b(2$};>U-P*%N40p$w0RQxZs!M}8#>-4@(4sHlO&m|I#_-Vop$*HxjwL0xio z+E6!F^SXsaXk_FnR9*p)`WWMrqQcco(B1KidVFy`p}Qg6^;J!QWill=r?~T>SJ9{Q z-@AABs{A|}+^yklUe>bs(Bn~eU$7%Jz2_rU!1TnI0A4g`M(OEII5-PRIPNMqURxa# z$N2c6hIYc1jRgh4D!j^8hKvjwAE)lbnxKeD_l9wnbHC~TVY1zAkn0IvAFdr zaLMecp%HT0<`d=2EZNiLxPNLNn$JxB7NS!>$mRvyEt0h<QcX`17N;KT-=;g zQxbnA$zittaO=fK)QskRyBMafNA~zFZSz`#VRVlw5qE{bM8hFR7p>C1$Vjv@e%74M z5odq$jq6XI8_NDrliz_Dh8y)m4kM#$fU!Y5@~g+z{jTNOO?l`6u=k!Jlj1qUP5@rte2R!s6U^=R%b@I7XA~lxAO75eiiZ-V*F;3$p0FzW z^f5ob0)p~SjuTv%yO0Ou-?cPxy~Ts;PG&a_W*9%*Vea*Yv+!7bx*H|RASl<2Gf?5z zjq!4c@QRu~UX_GO^AnX>JL|L&EQQ%|jgiui4qzf87vN&$8KO?v=Z6H!JID24T6$kvI`d|2S%|ztK$>mvXFM3~p-E z8?!H)({6|jSTNA|D8@#Yx}D~uxtBr2$yn7dh^XP(cFZ=^p2%)ILVH>5LB!9YxnAbw zBFyTC*fw!xCO4F}VUkYgQ>(iML#GgQ)d@`4FXn>h*)I+GOOgqfw*u*%UU;}yA7V?n zgE%R3ReMi`rl9t)87jVQU3eqtARNn2`(B}@Tx3%c57Ql55fg_Ypu12-vbwo2tLrbK z{T=nh4g4tF2*6iEL) zwjW!|J~o6W7!2Z6B+g<1BL6vtfsYls4t z-TQ(ix>zh!3D_R#*;O-4IDC@GT|6xHM<9@()qecd@2%G*N{i5(VsFs7??azEUvdi2 zKm9J6RGzKi7W$(^O|`Sn@R-B!4i;9{_WEk0^bGqO>6&kUnV3$9#>9wx#H~0chX5R= zjaBcae$4}k^zddr)9i4Og@d(wdivoyy}L!Fr5gf$x9;>7tyF)1g_!(lS=D1}EgV|- zE9EL5nRVn_N+*AWPG{(Z9ovowRUS+?%S+|lOH1Vd`~z!3ZQbiFsvExD9BhoUJi)+$ zw|W&>3%{g2?gpP7g{oemDO-A{ZS=GJfM{`(I2x~|q&q1}tXkA397h<8edWEsKxsnTZ1mpX~*MC)E=m+36v<8Q%NAVUuqbh_`#<-68e6D zfVXLNZ8LS>3)$Tio23=0Q+$LKHJ8SYKX7&Sc7+~WQ8+|eO|S&Aa9p>z>y6}RI^Ynk zt$UKyZPhQSpyHgZ+vc->Q+~Sw>~^yXixXY%iU zik&XFnsnA9Nxs%mgGq_$9L8;`Y1{Al8}0CT1I*3ifT?7DxGUkh>Q}5P?~xD0Q>?k& za<5I;ils|#WQd|z5ofpJl`l&7NX>!4`Q+pjhQb5uq<^>0bXg0#)0Kw$V<3Nfe7`Iw(ut5;_z_m&f!J`9q-0?q{b zUU<0l`gOuM`F=u~BD<8!lfqUEnfXOdR6|<5=sRSejd+N?V`}aIdxUGH{u;3#@By0# zW8jNSCDy_FV*_^hpN|q26>USr?@9jyNL3QDY&u($&E(~#E3$X@5&pRPxj9powH_Wa z;x6;Aj8jj=RI%lKb;wHjVnxgyC^-52bn;1JZ`es8IxHwg!8l5FaI37EN1&7sxV8I- z9ZTdMeE5${aM#>wDrJ9sH5U?HHSAx<<=&NC|Cc3NBqUVE-v|X6dZsIVedHZ`_RAin zr_W~T%_$h8`glHEAGS=9pt-k_G?~X=we2){4EEw0cYp}B5g_kltD=byCngUsp1k)= zYH>An(5@uk#>f+h08DGw%j^YJCoCy((m2yP`ycZOq=mcXb6nh^uu7Yg2~_xxnhE+F zt)iCx90@K3_vcke5NX_ti<&fBWo>wU7+Vxmo}x=H9Jr;ktG~3`!pD*1MH3*?hgXyg z4l-ml896$x1rMOH@c=wmE~%Z5LfVSw+0oPY0Fe4rgdZ0XakHQTSE7?=Fsg@+@v8IDkMs0s3a?dXrPplLI~MOHp%`LMM73qNRfmPl1(~8vXVpCrrlk25-C8-F9(7N zMX!tZ%i8*f+a?@8w}=IwMT1L;w5W{!iUa-OzE12hVw)Tv=rSIXpf~YKbBky!DAW8{ zRc~4>Tf8&ZVDn}i^6$Pc&Yfy7V@6&+y6m!%FTLQQtfGQCvKI|zL5h>6m$9^i>cVi? zZNs8VG_&sBWi+*`QUaQBM_2LVwW@I8Qno^Sm+3UH73F~DiI7O3NAHeVX|or#`-Cbp z`T(KCLF$v^EfS!IHm^g?S+)vE;E#JP!r`^PXt>ta)w`#pOAK3E4 zGmi93POXabO11$*4ER}($cR8$BzBMs%qHU7{7Yrh{@?`O)^=qDCA7-AHpHY24%2~& zbqNUx)bag0{2B($0W!sC=TtPMUe?ks@N7(mND6jntYaa3_TW`7H|N{-NI+Fx>>sj3 zy-wNMJu&g9J=XGf4n&ndPR)`_EDLGA1Cm|_sh4eEoi04XuNAiudjw*lK;3K|6%RIZ zh}4C)E^{F43M$$_@eWTzzV1`jU@TPSK*+xUXvfaEyL<3jFT=xpiUJ-lhtqxiBSGLG zL4P630B}Ojq?34+aZ5+*v&MlS4%Pu^u@qj`b-4W96*RY1{TzvrAX;R)CjLB=`R{CDx9*tBPJdSa3 z-4}KLl9CM7Sv3g!hmF6u)s>wQ-QAE4_Afr|z;gf(_rk36k^UWIL;BgIi%xTm7wJ#$ zHOwTCC49rlYIe~h9t|>QE!(Io!bm#VGRnIO3$Lz{k)fUEK-54-=gJ5_2MIEXN5J3U z!jD1IY>vPrf^QLLPc$x=n?HuiAycz!W@eq7YF<-ZSY6MkK8pnX{QTLon1==79;IwO zsqRX1bq(LGHB=k&(`LfuTTBdLOimV{_ttowWH`<9<%pk)WXn#!N)S<~bOjH3Ib9D% zQ-c4GWSaA1`H1BlO28InBd zTOPYg{z5Y|kt7?+iG%Mfm~~Dx7Xj?Liv#{ddL5qJ{G0Qlz@e6h351M9{us1NEt>Ao zO$W?Z#ClXIRLr_#q^o;1&SEeGd@m*9OtY&JDg!}I-1R(39stKCX&{m^F}0$&9>G)~ z={Ebs+bmXWVq|2R{UH{I7=)H#pDZe*LNFT~x}0Ix`$=6?RIhQs4B>lFYB_-x zNeD$5_Ev4k*9nhX{?Ug(FGg#{+_$1=iTgP>xobs{$0BYlirjuK{E2a$9=3IH`D87< z9E1LK%mXd$tp+F@rwZh~Evf-P489f>a--co#oPgqNkLhH7t0Bx0_HIoc!6-raofL# z$pm?Hn1tktRnHLN#$cfFwl4hXlPMLrIjBOOHF1S-gpQ}pO%JsqdINq6(46=z8>YvX zm)^CCiGKdfr<@`&-^;IF%k^6$G9cNXez#LhXL=du^TbkJy%nFE3eINzQ~#j9_QOAe zj>rp&+$|Kj{!@2n1?`=c(9z z1D2M>+=b842O!RipAs&nD6lPA2=r_hQ0$&|lIq;hwdt+p>)l>8w@*g3?s*MCzX1!C z&&!&wk#627s6mMLawsKPtonjXBZQd~!g?;&ncL-9J^CQFqbN|_rFaj`xL0BWAZSDk z`=b@tAB)EDYll!2sqcoY>)R^bg2F`gS>%swd|7&gu4mVu<&$xY#aF`x%;Xmxy}sTl z8=er-b3T2?nw=92r>McXXIm_3j9d(TCF}J+j zr3K7x^H-0Juee5ieN7wyk}t?(mm858IFN~DLp+(jY>(sLDe1y;Hmd>YY6JsOi{McAa> zc&cK_y(xvnW^sX7<(^3wpZ)8BI06$Y);qHb`pd^J zY#kjRG$tc&_o!*O2CdICUJ|;2 zBiu}zot;|^xYy*S6o(u=foTv3*v=o=ss9C}ygOREd`Eg%M8x=Z_(c-lRjsqEI9H>n z2g0VzVcn^*^qFKj6|8i3IiFaz0RYo0b&-3fi3SM9>KG4mV))-h&_E$%!s@91b`Kpd z#V|CBg1fn+e;X2tWy65L|GLxvMhd84 zMQ$?R;#aOf`5`m)`tJdhJ^>B8a-U^MjoMwpC-2H;eh6FvD(gk^tNmB|dvfzqxO-u5 z$(}u{{-?tA6bLh4B}fW;1y)K?#8^!Qil{5%9mh(z&vi0uGq!&}S7>$fnRQ;6tV{kAElf(~nQ(P${S zN9HDJGS{Q`EBxy3k8EnX2JmNz^$hQS^~QVF5xN~!HKE|RJm%YuAOjH#=N3kvOv_zu zZ-Xi86+*n1MU_JFT`wg+%D*)%jZyFQfa6V=S;#zeiIvFaC7tj%oWsOLB@Ph}JgE(B zyCK0L5Kv(Fm<|jfBp!AspaSHQ+ga$vSN)Ns()#CaWiY)PaNw%m*`pqAvXUV}cwGgq zn28qElHI>|@aCo|ufK5;eAV#GcVF8?efQQ9Pwa#E6%54H=0Y=V2$6kgyZNq-%oA1q zZ2wVQ6S!ecmy7MoLQS(3fDXb->?=#wnD&gKvJ+|noN3@K!wJ--_@QMR)FRs-u2qcLCCm#@bY0wR{P|JdeGaL{`N8pkuC3_6fZt|H}QuL@6*1`>qx!{ z^#{m-)aHhj1wfP~%SYUQgf%Hr_03(_beo~sL;xjXM^TiR)MyoY)4><%q1C3Ks8(9Q)dTSV`9%c+inK#28qj6KE81Y5tA#NH6g{{kFeezg z6dQju67!Gjk`Ew$iZdJ-{Vm)=3G3V zIFVsO)+}=H)lRF(zNUf~qR45~GZsWB*=G|Ci*TK?3gOeb|8G{|F$oC-#-aQKJRo9z zL2TYCT|A5+7vItK;K|^g0Q*7;m50_!ef|0sVlB*#&u9`V95UPy)mt#Oa);*WT7A_k zF}Ai2g#Hsec17<+)?J*dcPUcIi;QomJt&F;$Oog*Qm11fe}(zP-}kmCwIjbK6q-r= zM5B39|NOq$VPRo2@TJ$ldE<&jJ2E^-&InFlJe!E#F}Angme$sbqbax`EQ)22X5k15 zAPS{3fzosLp|$`GXWI7*)I-mBy)@PiTY&6*)v_AK_^Q7Ksbd(xfoKp&K{aXQ7CtSs$39KEkU2B$TSpe>t_s*&h==>%Bt6%)zVH-tTv^Ciop zAr^0Bk-#+rBpC#*yPkCsIU+$AJ$dU+O?UUof{tDH1nkUa&%S)+E z;?h!(n&DUov?3<%38@!BhibRYp7UEDPzBvu=)H?2C<^hZGzhMN0jvPa64>lz(4VJs z5O(mt30g*ki|J$7Vk&#edM43@i_^6U5^SNKZtJB>784G*j+h$3KUzO7JTi#eOzc4; z7X7(Ew}#NNZx5{^MRtH5%3X)se|;Mh z`m61^i5t$t!%Cib+d308Qt$jz-2&$HA9MBh&o+mhBch_eWZ@xe+8+fXz1I_y?_)tFR3qNizWY|Of#%MXSSqy%b#4ZMBs z%EIyU*7A)qeSa7w%Im2D5lz3z7`FdoIBs^f^}Oj^Ef>BYi>IWdB<}xOU`7LuM+d1+-$?1G%S=$`A~AH! z-~TzZLnzG*Aur#oUv)2-&Z)<*r>2b_ox5f+88M7ArX3&?n ze*g9%%c8?|SQOfq#Ts@onBYH#)WGk1XHmab*W=T!3uTZykdQT)-uY@;8kQnKQ*&Hx#|9s**jtKM6ulq{&y-(gGOr zVzS!1x9jhEvJ{+5XkZCn-9*rCQWW0zI@)_U0(6p7SN}^}v&h+^k_Lk;Rs=|i2OJ<& z$N3fB0i4Egq2T>P!G_vFXuomRE^f8_eG?LAj=*bq?wA#!PXb^kov{<1Ltf?|*fo#} zj#8^|8;WN=84>0tJ|0BvMm*SO3qk}Kh}qHTyYCI;D=S9w+JOox+aJTvM4Q~ILIHLM z7FsB3+v~lX8790=F+R8l(lQFS6_$zAe&;V%xz3Znw_~q@6d~r+Tqk0l|92cL)G6-S z|HA4oZ$Zu*GtrGSp1Fsp>GRVo^{BNjT?iqrF1B|9epohQ>f=#>m+L=s$>zHgsXCN_y23>g8l4Ku`tqh{4gXTUo5w6(TGXzf46Jt1*~O~p9UN}hK2qw zZ`o!K@py|f|NF8v-I4_6(Eokvy7#v>m*F3DD7?5HPm?ed75MLu<6#ls=ewsU0oT9Q zbesCkE$e1n8}}1|^^lE0w4Z6QODo*BJpOs(zK>%nJR0V!>FMd2H?9p&*TGD(&~lp1 zJhu&3QY|S|R%q6U>Aye3U7~cwUuW7scp^d6>Y#TTbAx+ESJmjK;PTj!WyS0cRLUE) zi3Xe9y&`6v>ClV(u%)%~OG(+5(XoS;qGDpKagj56WuaD=6ZEW6HV*?45w0J6{jmt! zCI~Fq8COH?;e@dVK^RvT-j!{u&Vtw-X}k4(r&WnZGS{6k4V&kH)+#%3LL~7&ckAx( zK+^a@?afQx_!w|_Vs1;beUHwS4{sM=$qTW-`DGc`=~nj2Fb=on&QSXgE4&zjRw!&< zlPw$kg>JZ*R>)DPF4*o~kW`pd-_)G1e6RO>wUpDeu2p-9T$)DDV(0P`?48VVi%+gBnX*vU zdzFoRo8N>Hb!Mg~5M#L6<0<)X;IcJ|xkt4D0S%>5irn9=b}C2E0xWvejkSI?B=|s6 z`7EV#v9M7j0G}nj_;Z^}G10Nh?Ad=FfQ9-!LNF7aF~a}@D}=bzXh60cq&UFs^&K4< z)z#On@g!lQ#l_u(E6pGT5ybanD7849bC7BWj@D^I|`?OlXO-NBN z1luw{&FR+17u1aSH|V+bWV|QNrMys0(;yD~9P78{eMkAv31fL1`9Ln*#}XsLh8{lT zeBV785=6QFkL|Jqo!83f+6UAjai#)I=tLp%vv&+XsY=c?zOw8-)T)Jr1+!K}lci~! zaIvE4{ z9T4yLV*3a*Yl*1$j0n81suF}Q4>lRhirDTGCcmbrGjh>m9AF5!lRxY1X>{_fsF?Ev zF>*fSa$f5z6mY{y@;4I+j`D?jV~k9%?_(5;PZ52T<$ zYeeZ$JER^S9u7RY;{0l3XevQYL?Z4Nfqlv9<~oQ@u(aHCTNZl8GHFu4c;S9d4o&ec zwXYH-iw#?Xz2G+{1WI3jMBXDr&@#)jDvvhEIf!Var)L$oY>KO&4;$S0pUG?F*cPeT zVAMeCHVd)^beg?{ig-U1$`DyXd5XdUxP|sse-f*H9`t;txz^9|V;CwBXX#gds#x!u zy?yBDsP9fs9_U;8tJdcZe=jr7AqlxrqI*ksm4Gw>#`zo)hnk1SyUJFh^!~D_Zn7Gr zmHR@;dQ>x!UB>lU40Nm0JM%`ruZnqk9!Prv$q+y_=?^Ev~hr-?9&EUT>wzb_7+KR|nO5Bmpw8^|%!yT7b@uIwJ z(D4Gnd`~Y!rLdjO0r4*)E}wo?&=^TNxFc4i zDJhWUZS^HPuK}jInTQkMfG~nF%NanT6gn`Tkp@Sa*+0mf#|f|WxBtPvhepIIt??>r z?r?-NTssY$F}!+Qnhxo$=5}s&p44uA05a`p&u?epV8La=o6P!vh)Z+ zJ{p%Z+)d`u5-~j+8TG_;^gS2Uam0Ks(bGC5ic#k-56{(^h1YbIdr65;ZSDBiE7q6| zNpSe*&-;#r_saC2HV%w9EFSQ>Q-kw*={g@CaKsDE^ULJ`o@JI>>z#>V9+{J>+ch%M z?eGQy!)@v8>}#D8hBze)4vqH}IX9YvD61DeICEWD z@~(?$NBYYzjdCt;K?;II>cTHy7{tl)ruF@(IDF*>`{{pqe6C z?d<;01sT*M1FXXBC~0s$Nc^95cahhN2de~j20Zvc_!qt@=krys=%m$bsb4LDj(Eqy z+R=u+C^#J$7#LQYhb|w44+3)En`W;PKGHq~(K;qQvH|?a8WjY>78bVQsk0sYmQ!l} zI=OjptiNF&E-U%?-=J54a4sn+Nr%X@xpRSc;&|>@sgH6J6$E{2wlIg36B;48LaX*v z3wf2@hGV|m_p0}Gr4GBl_0=C^nGx5*ug}2c3^T9|ENvy&5L+ksXqepszzxRY@?GB*< z2DlJl!31%)nPDr#!)FIKR92n=FxlZT&w-IQqZ!tt$XZk71jHF^1d`Nt%W8bc>sG0q zRCF34it}S=gZPHcP}jV^MTPD zW!ZuL0c*+b*`85<@555VQqs%TN{v{n6C2EI=BHv+`_8K~qYcAMzmAU%OL$E(zC zCK6AhiZ~@Si2q&yqMnih=&s86lsZB76(=RZVOA)QNZwy*ZAbVJFYw@1aoB&k{ckrc zhW%nY`&jqm+Cll3RphoF_m>p3iGGvDLI@J%;ne)>HJ4)kVh<*{;9!dU{5}PJk;f%p z7%?Y>?Wr7JbT5%9c=3$7v68AEv;t{B*h2ASrCcX)DEwKrLS6kT@6c@dFwHso3Dfz< zv9V|;>2WL!rd)sH-gSufS!D1~<&SFG{0-AKx2ukhZ)X?hhkI;Y&vI`C@bZw62`nGn z8bI#Jg)X=4YChT)MrYl1O59ijE308RS-IP%XS}z>?eOvGa-(FL1b2e(i9Iv#UlBsw z30qQ|Dn@iZ>#>O|a)+|ZbAg!B9u&m@tyr&EDw3y_0X>mKp3cxti81+vE$Crx>p2jf>%_M82vTTxHkX}9yigan=+syl8FKASwYXU4V8G<2(^m%DK**}i64F(T(MxI5F zxH3TJy*LsX=4hXZ6OKNtc{sdbcEO}RLrlG?uHH4kJWZY}>UrZpR$-wZU-g8`ad_#@ zpC>EB405!wq%FO}d%DC_jgI%JHu5yhqAU40I8#n7hq%`>=CzHVinxa75tE>dUTw5>op_P)4ji zw(u5S3jo(4ipWwqA6a9%W9JbB3&1c^Q&VR*JZLZ_i_vPUufD)pDq*mOUo6gJY&{d_ z@fR09+AlA;GlZ=4tMyK&0iDF*;=qpcsJ9A+02T1{F@JUl_W(D&d|ZLZ9QemLZeD0h z+acLjh`|^a8i0L5=WzDY#DOZct)=z#?YSL>ur~UYdzKrrehoGgaa!o#(tGZnW8vD{ zgGGmfKN5Qj3newvc96~^IGXT+f%QykG_bV|4hsuYt<2X*&CJe5)~+GWuXy-Fs!j1Q z@EtyaCKaqQs4&~JH#0L|fr|rCM^DN(?tHCf8F_dIv?Z9CMf?ZA_9G7)6nnB-2=GM* z-M+!xVH}%T8R+^tZv_?;#k!1)j2MS$H=0QaeX(8y_2b?!^LvO_tTpY6z16W7R!t|T zkJ)L58RYkgS$!vCvzG@~^O|O()Dby>>>RrdgrYt^Z#1s211d@hJ%H$?nVhn1y3IJ7 ze=oTi{dq>b+jspE>H)?Fc;XNuDEvDQYe0IbCe4swc{%sRA+N72txrw;q{I=!`Q9#s zdjLkyEG`bHG9zcF)Y?x^JNukp_g0fRKk7ACJNT(5f*d&*RMi78)D8@=roVcH!Aia? z8&Aoqr4`9)W9Kc^1*2+kd4S8yl$quTiF1bhoOD5$77!*nud=JJ4hTyrU!5bOKL`x` z+E}S0x!k#N{sqI0CO1L-1Ma;}<_RZiQgfG`KQpuJ7%Cp$VLxt<_tHU$YM2Av4czLK z%_By+k{A~-`9iKS3r3&}8diz8jDOP$Kn^vJCv12EjVHR=Lnuo_I|-kYLLt??u+5UL{g@evDpvo12^e#*GyVMdvUTy$!Uj_R7kN4o< zNseiU9|YZyVeG!?awTmCIc;Cy)z8#~%Qry;?Vb6G#j2I2_6XG?aZzO>G8CPM8}=sN zF@d&neSx6bCk?|)FtD5op(v{)z(9qRP~ep;0rIDw*&;0t-imXH&kKOvv!*z*j>eZ=Ibza{D6>aH?~Ow7B#6&3yLFjL;S2%*Y#IxlGqs}2%_5j(gyA&7vm za2zX_>b3LD%xCnOk+<+Jlg_?c#xL!3jd zj!GDLSHDO;SgaR#;&VOZFn|!qesidCUJy3`L zJl7K#7$Q%O!W#{5!>y>w4``2jBQgj%rZa6wD5n+KyI|QcKq5y<}HMrWwY;6*F)lfNQBG3mS7Xn@V37jm9s5b7q~e>efEFTjT$jQ^6~F zpl!t&7G=oxpw)x|1$wul@jCaZsawZdWZs$Pd>MFyEf6M^Z43_=m6&5DousZt6;~Jw zsb-*DFz%YOGb{R9CPGyN!2co^=!cU+@dotEJa zy~HlZwa_>0aYmf|g$xTE7OLB~*ZDYaf^b>Be5WS|^_k&rX1S$LZ}%&_H_g42)&yUj z$Q7l7y<6w!T@m0L;Q`;OA1FQy@H6e!M0H~I<-gVQ#I=|hcC4c?I6!E}UE#Ams>1A4J9vb=DdI1?2SQLHLo6>&Tx4ce@`)b1{rO=^zt2{=1^Xapa2 zF?sVkx;me(vpRV;E4?UC3z+3xK`1I<21vKmSiT~EW+> z_GAdl#(Uu4aGhR>9^${YxwQFAX{XV3XW!%jvgi$08xS5!Mnu@;!h2N{Lh<)N(5opxz<@9_mqCe$5t z78R?Wbu!dIMtu>Xb z2eCddxACY1_6x`w^V+Y*zGyMcww+GPB~jVg{+>Wm;A@qg3wYDWdKWG&|*7t-4$`~L`JE_{Y%J}{8G~7*$Cs4%xyGb2j(ueG8 zS1?oCjsB2>_>S~1#~pX}Y`3DC31z;1{SnGQ@GrMIU72>rhK6qY;VX_~J8W8rrNGuo zl2_Fxv$%$Q8iznq!0{BLOz>dK+qm<{7+^Q#ECD9pf~~Go$%__t_Oj;f?IJDH6#u&Ta(?Qb&5eF;pOn7OU9kkQY5Bb9z9cJvI`8(Y4U53rI@( zl^gB_RO{q$pE~r;Fw+LohTikk$LHV{P$ZO<$U!gt#u_i9|K{uMS$DPP%r+@iW72rV ztYt9!Wj}HzV6&w5Iv_VDD(cCLW*QDZ03ttZv;A2%+h(l`VDz(jF1l#(e{iCdPe4~M zP9k|aRwuAR>^mg%Kq#hMHau*+)dgT62RvjJ{FN#lu0&v$W)LKV@h{JwrLvy>ee;#Z zp$92A=0NO925u=QHQWpU^Pf&bUV?*eQs?mMq6^HEe!3K;OPHbIsp{lJxR1S?8*&(v zg6d(G0O>AS|6@gAJ85-u5sG;)8g&*&k-WE#gGC)>EIax609+Vkx7GV89h@NM7c>5e z!Em;wvI3ym_abL|&7v>niS1U%ivZDBG2me5=H}nnE0s|kj9g(O!7EUSAsPtSdZP#k zSlAs>n-Jgyp2H|pGtbFZGqq>Bbon^)L0SeyfrdC1dU<5jSJ^UWUuW_E)R%>0{rGi# zpOyPq7^{Lz2v()$e4B2rloV1(U_g04Ha50Vc=KYKlb+_Z^9Zn=QMkf3;H*sBNIhL* zhFBIL6K;CL{hcUvg`@$K6^3dgr2YBBK&BueUh+(Mn5qDT*tnEC{O;urx36Z|Za_y` zQX)zhw)02O5^qZ2hOS?;KnW!ju(Clhtoe%S`BJp4nwA6i`%q_T{k@GlKlWxt*6zUW z_ga(BK{8hLGc>Uei3J{+Yu8v)n$WHkibvS3@18cYy+~gb49Om)w>)a8-zI5rs0Aq} z_D{L^ul2$*5%6`_hI=zU#LO8WD1iJ6+v~6p_YbEM&FScdJb=nvZz`ndK%Pe4FLf5& zjK;)-xxC#f@Pe6tYioYPpUWU`Zw+-;>I)QYeu?;6m}t63o%CF!0_6AQTD5bD?0Bxj zTK5r2AshYt)_9)8zYcKO4e%D+9j_~b<)-0EeAdY+07nSU2^wu9QjecJA%4YSkoRfM zY75X^qx>KCulvTLnF}mKafpz>J57!iKxa`meVA`#V&GB?|4#fJPIEAL4>(HRtvIEb zCJKRrWLy2rpX~ZP%ro61YvPX2`d0=%!PZ3D#$amJ-rFWqEFkRhP(k(H*eI-{ zs|(fvIW)7a^+cV%Ko`VSIGSUTsRsPm)>fbAFtBwezYa3RfCOWIdvs3DW1MrD^UjIQ z4%jh)Km%YwZbA`9y|a&%cmOd7S|04V+uT5sEFCz4=E8a{y>`~ zi4^rlJ#E@P8|mYtJCUCDzVE23o_q+UqT*D-k6a?-N@#_JD3i~x7?sL-xBMe2i8RMT zExi(vl#S!PPotX5dvV@QV14!^_W%n6zIlV%_R!XaF#BK5Z>#Vag;0t=TZLAAK&foE zjgyG_XoT?5C)Z+~i=~k$K9R_F0Dw@}d2@ff^%=4JE&2iiVx{l?nW)*=dVnL)=g?&$ z9T+Qj=)gVyaGagpN+NO*8F+dXL#IK?&Hr$}GjXR@O_Zvw7|T!yHvzGZ{h_o|#--)5 zdYBHs5Aql~hY>W=AhI2BK=lAcT+|zG?~4k|>Lvp}V8o7Yx$X~c0DfhJ0wfrmpt`L0 z0Fj5V&p7KDQ=(KmZ535{4l_^FxwWaa-krnySlFo+qWDPCa8;!DN_5w+@!MyS6weU| z#w03+L0G2rc9k(Ec|*}?jJXa4x-b`^-YTN{=19Be3T-U(e2i_sCWQ!& zg}gkM@^&WtrkydU88w|(T9()PuJ&O zE+1w>|De6J$j5iUQU3BF0FO^JszJZgWFBDSv`Q~Tc88^ z8niQE=VCdd6~H}uos6@}^+B7Gu}H|d#E+)+cmr#Q+B!jL!7_b;rx%m)O>HG~p{vnO z`}*>wO~$mFd*~5{L$mR~mo=@mz!%NZf>TCD(q}YWk|0DiqOeqR; zqia-3mLA7|K8;8!VrpY zY3(RuU&;Avi*0=K++M3Q$ba@LdX2K)E!WOp*_|d)rN8F>k3L~d_mSCX#(&LI|KX3_ zF8^-_Ct>4}4gc?dCjO1o{r408zx;#$f4}|(!CA1vmOGGAxbUNcS;y+x`|dYpvl>-QWBz_j=EWV zUg<`2bhL}=VHk=KelR#?onu|BhvhF*lP|LNmvzy?Rb)N$KJafadv8p*WXmwsm#)@r zE*+nqEoj5nWK6~$c;K1B8+kZf>}z^=rkVf?gUo~B#o2rd99xUZ78gVvbOF}-5828% zT)`ouAl)cOyK}~QnY${>|Hbvr**P$Pa;hszrhAT%1j-8R-nFLl9Uk>dTa_At(Xj+n za2n5F6=h*4A*NlsXf7VoT70IIf!epdhdK1^Re>TQ)K%f9&sB$l`#!9n7O6(Lb79;4M`-{%{clsC6%1Z zI-=FkbHK)NYVR5D(39cxSdRe2N{11OAd!x32qytQ$i1qJ4c*)pa+(_<#UqVLR-oHE zG+ouz5laX=+Fg_)nr6Ev-Q3O2ZWCUmpWUh_DXx~R2E{8+M6Hmd*mN3)k_;Bv=_ zp-697Om8V8S%*Ix9TW{_Ev7tl2&e&TN>;LP=b+h>Uz#M9AY_(64cT(oX2Jap?X8EWx3&O*|#sl)2-Mm(NIu5 zSYe*Cq;H8FLy+)W1LTnu0~Z?StHT-4(g4m!?Kud>l1r7Zn#|#iQP~?;xkw!6T(+1( zmi{KJVcj+}IfPH=BfRfEoE~R$v`y^n#xhD4k3bZ?FIE}xOs_RP^2Ry#Z1si9XdT^Z z>je*7d4N$#trjScD9!EB%V=)-{{49;IWD`VnM_ShK}JAQxidOQ3qy$T8YH-vI=Z3< z6k5mfZo;MuLXHvr*gfm4zoOOnh9Cq&9yai$xBi^zzb~^msw|CzduigQlyBiESX=IQP&K zE*-c0>3CO0t(nM=ac68YG6gr@0Qm4Lmv6O((!yA1Hg>gbN=iueCa;NNz2U^Tfk_w0 z(?0c%iD~D)xDHAk`4JEJkhigJ&4N==2j}yB@QjgXn4Zan@^L+NW+Z0~ILr|_L#&;$ z*{zfZfP=P>Ci>My*_%A2!1gD0m+7Y3pb9yL;|%r zG5Vb|{W5y5psOoUbp=6!t`7Q5>o$6hEN+eBdEfbJnLi2!YMgo#8qTIRof2X}qec%V ziU}9pw{M>WR}sb-dGIne7-Eq)muUCIQPQp7S~MDf7RbuX#!GlmK#)R}Cs4x&XWpYv zCZGX&diGM*i+&YD_!7oHoKYXXNKOzFLL``Jwr{INg_+2gLC4vNMir8*J(1L2W|(>5 z0LmW_UoD%XO-hDx+wdoF%>*8-U=!BTdf-F7G8omM$}r5-MEe&OVP-O3i|onXmv z6W+A#hN`3>9jYJJ^qz&o7YdsUp;dC?^Bz23`70kf?~WmUC|Tg0XfQVPFj$#XU5>N? zym}wKRss#u%Q%zN=xk7m%mm)sKM+=K5=BtYlG)VY${<$J3U9@W=3?gw=(yLe_%q#Z zn`5yF!(Af+rzm#s^ab7xItJFA2Tmp$4Ym(?TE4QY3fra4ukc6gbLUtF?+huYUN|m>{w;&wBctBAg;FBr&;7^LyS$HBU4hq9pkaTm>hI25ff1!p~DZcjH@e|UyAsi z0!A1but|;E+c3$g%D3If(U#?+2bYGp13bSvIwb2`WD_8#LduCjy#6>oyyC0*Q5;0i zoH>KV(n7S2*JwZ6@$UZq`^G{iQ=2e}3yO(}%{`f4Bt=Lyt*pIvtcan=(I$h+(B+EK zZH#-37NW`OsUW3+@UL)^qFOwK+yGH9_*C4xr4uU(2%+n{Ka!{bo1M+j&_sJ5Ai5Fno8$9n~~J_A>Aa07R?vjZanNTip38hI?w zPbW9sK#vZAtrOZUSWfVW*%ay?ap1sk8pt926D7yws_Gzt!y!;M43+3}^ePkhG>1%7 ze7%jMXwAhrJJHYj0_1w^E6Xx54=!F!sRuVZfqME;gLAwpU$}fFXi+HSRelKU|si?E&j&;xC% zOCc!umevmLFy-Qj$d$N|Q%sE58VHCoaZdN!xDg8@jPbtg>`$+=;b;JZh_%P~E+A{$ zw)Nz-b70Sulx(Apm-m#37i4^Z7!HaQ64smu4Q$oC3czj4h5%6JkcYzq2i%?9@VK^! zDD7&mj~i}-)D9~fc?vOJ%P=fPy^#-H+xV;i!NP!>jv$8vJ2p_ql|8ew4W4SKt0TbL zs7#PT9r<>cc?0{O;YO<*NS`6bTN)nrs6;5eAPWOF&ElX|hy@UHg?PKU#U-;s;P~ef zPl>poI_$l%XwTdi>xsrQY?VL%t0hQMnFacM8ccZKdUZ9g`FDXbP+*PJfFay?eTRjEVfcGV+?E*SzW!b>hb1@csr{2KntVI3 z)xkdEXH&-XMH>K82y?2(bsc7Na5@;kE4O9tM!nvV`fq`hw00c-F zYwZnXrAvS(3!Nd=JH6NBY9DsI<%m4M_xb|HTUj^6i0Yx#CeOxW3&+!&&9Rz>9GBd+cFz$${*saJPkA>a zC8>h&#d^c+w-${V1Pf;z%G5H87ZHYspuE$n%y>q*8%J8xI)@QQxDxUsTxbv`5Sjk5 zutv%S(%gYJKzIz*GsO7|9?QIu3vTz5K5A^a%b9U?d9FGB7bKjY@p5vmvuQHj<>+zc zFc_4FeAO1#!$FD^fhZ+Bbx^RB)l3i~-s5}ZDR#GU(EXNk6fXb@d$U_fr}(IBOm+=x z*g4kE>mLS?ERbrNTAs})7b^O^8g5q)K#6uSU5z*V99BXjfwM(7rw>~=N(OtarW?Br z6AN|`xLI`gs||i`j%cifscVDUF?L2ZC0y&VsbbfsH0o_72|_7fhvTcDDszZ0WzaD? z(Qju%y3R^(rV3nG@L9}qJyU~iXSb@QZpUdaOKMN-Imi*$(XB$xLeM#i*&EWZiH`I2 zD#{Nzq+n?vpAR8cf4bFh4k4OSe0jO@%o(ar$*DUo3Ce{{6~>~Z!~k+c5MGcVQ;F_( zgQH!qC0k@#`hLztY7`#(ZH#XgQbnni56~#Q$9D)UPT;rTdeea^7ofygXz^l!KWsQX zH?A*R+S%7l^?{}j5Hu3n%yTLvhl@^2NAy&M@|>kxjp(|M4}{o%h1JFjE9#cG&og2? z1DlL#3YtLt=ySxPbZTm<2-{8Nc%GkG$Ig`-h`x8?{Qyq{Rz=7RdQikB&JMQ-g5#o| zJn8;X?uX|ePf(uS>=>^&+{>6gdDxC)jSa5u#fBOcg);HDi+tgqj|P-IRmpDp36>A) zrw8|b^zU7om|$M-Ta~O}n3VKqXz+_w4gu^bp?T28q?hCf4Kv@hwhCOq?q?(z?Oafz zEFFh9NsKSSjg7pxQCdTd79vsWRN@i3U>t(~2Wy#2G2`5bwm5Q5CqyJ_o|}mZviL`q zFzfHODwGwqm*8A9oQwrpzEKU!|#koQ6XQ)5UeH(^Gl)$KXZBc#v@V;eRjvB z=l=-1wDV`%Lrb;;qXwB;?pb!i6vZ3Y>YqRhDsTlzB=v+(_nj?1R6&M!yJfw#bOuCH zUI+q#LfR`rCVL|Ds*xPHOA9)Nf@?JZZvZ2?P($sjv9^hc4n)>y#1DSC%NfVR5b5N=A zW8XMXtQHFmc(_i6;7_=JK@>oAGK&K$!4zM!iMz5~-YMoH(TCG@uNYbI-G>sg-OAq1 z?)}iv&}-8N4Y%uulUmJf?c4~(?523lgIo$!zUPC3mgYGUSnkhmHO{s|rmsL$jV$B7 z2^T6KFDfCcEM91&z0NFA&ThgG&^5{E!@z+I;*6$`rr96I$oORThdWol1(KYbTaCa2 zK#n7_k;b{z-xs9dpoe!5vmPLAScSI+GD&)2II@@`{BL#SWBpoM@QAFob#wDRu)~{Sjylvxz(|2<7Z$%}QXW`5sTLf4F zCJ0heEEnOxXL_hg?SUp=1zH~gUndN|X&cNc&8-}*5{z~9aeId8Q-AdRS~AO+JCvho z@!*aJum`lO25t9l-F@ba4>S(xdb(@9OMO>s$zQsOxuM8@S=uo=pub9Bofl)fvJYPK zgd1ipnKHet+1;kOdrJPwwOqq#DNX4mzIi{A&LVp%(FgVA?9U2V3^@`}Giu&cD zotXYU4>|->cBeKeas@+fW&?9BBm!U<-ds7{kxvlJBDHhr)G+$YFgcLKD8*csPd5PmFGOszePF151ZI$b5RWcQdi@42WjTpt&OM#oeejz zzDN|}VNN!_QRPt&p**hLffcgpMyh|H3O>`5s~T3hjk-R-G=Z1&I$#jSA_p!FQyJ{1 zSOVW~+eX?0+zeL{3L$l!6^uBJ=)htCO&fB?6MFVRdX4lyAQVY@842cWD$UJ4aypx~ zHiT}&ne4}xtsxZD&Rn^I>{wPZSRHAc`8teA)%U=S<2?mm);Y`*tcZk?Wc3?lo!U1G%qp=|`55uD(HzUEsl>F!r4n+XAVN3ypT*JmX;XGU% zr=Oz@n87Ar>L1!s5hWg2j(ufu>;i4nb)4W;<_<+#<2FX0e2>LB-rI&EtgRg#pe1d` zD>i|21MF~O4~bd3I#%5C+nEnm0;)d?$H@0fMX{v)L0`ZId}uR`K$S%7t@vFy*Zb4$ zD@e}<_Ecr|V=iD9jOREHM)2#BxzL9%3q~n{%93)QdxWW=nU(;pqGPz+CH1U)0RNG_ zz2~v!XxHwD$k1_q_Dk-sC>D$Q+=_y9T(4GWyqak?w6D9>)DzVX;@)8l#4CL05OK)t zv2vo00hd(SpFe$*cF1BvG7{J3bvBc~5AyJw0p$oaLA!DU4ptxt0Ioq1L;5E{z10b^ z7R2&HlYi>jStq*?@@Kem_*`Q5u4&-w2g81qEz)B%1eAvvvS{+_6^t)fzr35w6I(4_ zLnvC^YiLPWLh&G*+k9I6QMaHd8%&)>pNH*jY)+WD#Q+%WTG-@N7;yJP?Uh`3^DJcA zR#@+dJqt-40Dtp>qV4IEC(fog|qQC0c692f$mz&kWfxS&K}n7_8@+2W^^Bh z#_8cs6ph;9y{t9e)qWXYjLQLP8O~;?0f@cq937{3GtxtF4NwfL;9}Wr)70{`XtDgP ztW$h!`=b=?dVVQkZ9L1p4NYdLO>Cx&E>gFZDR%d(jM?at>*{-;Y-vC>10HqSWXO@9 zh^_`oZSeJMzCVg&W6y1(sjXRsLm8MetnY-aGXKhOn;bc`f4V zRUjJJUo@{0=nNKVPS;J)<1`IArmJl6)?lh5wk;PqbHJ^T%ZoGf++1U~`%p!IL4^jl z7Zg0!w*pa&p3`*0={pDR9)E<; zW<|V)VqBanI&BUK&AYlz5CytJ-;2*@G$*1~kH&_VNiU@UU^4LNIgKf>y^jo{_=EOl7m`>W(Z6B4mFs`$dLrE~XNSD*fLBVuTO= z;avNVLueLX)mFLcn`uW=FHf&{nIgvg+r6W&Bu@W6Tq)oUFmQVjJC8sBLx$W|`)xdz z7~-5(kZvnjRb!tYgX!^!v^%*cJi8DH&!24B$Im$mSjVE&KCKI1{v{UI<&balNm;MN z?RpKZI|yi=M)Ox30J;|z*jH+5=^hn+!+(UorNhIs@qqpKufuBuJZq~ciDdVVJ4{T} z?x4#Vgq{#v0BZn*6r}urw5RfZ{MqaV2vQ@pq8tl9{QkyfZ|_X!wHGon<_!_DrwsTv zuH8`1m9Fp$&_;RRxK`P=jegbw8ozw+m5Z(0U9)yt%>&}VYAhK3|Fp=5nl{etT!#`P zDZV2a7cx-)0gJ=wQ_lo|89)})^@uQeAAFycVbvXsUg#%iwQ$Tz!KhsRL3nL^>WuQ-))w^D#l6P{lhO(faM%`<}^oUL&$-0d>KscZ{Y0`FP#7f5#4T zNdf172h9}EG`oQML3ku0cd}6gBoJ*fes%C!r?H?X@fUc3Jz&;@I|_;WV`CwB%<)kT zgeHT4kPx^4kJ3OW8WK1yx$5Iu~yOXEDVD>@p7`^EuBpkXNGK`0=WcI?1=9<1Ud z7S0&_EO1;sC)YDQMQM@_RSrc~7r zu7mErt-ctWG5(!&6bAqr{ru4l2rmnf7E`5chU&=-_jKNGXA>`3v==FG1w--YQ9Ikp z+AqM)XroeLyJs^Z*~t|%flD!?5?TKV4a9x4=wP8jLi(E1Cpn}SJhjujn`uTSCgluV zbf@>8>K4GGrjcqw=PB1v@u!9l16)llWJZo?9D?*7nLwJ_dZxGmq$^CVz_j2-ZX0^Q zo(o^c1iWt5gZPoOTOER5e$lU{qpl3_-tuOL+!j?5OvjD>GQdFSW$c8o87dPRjRt%j z)*qnw&}8T9yl6h^_}V0C{2OB?wh;sh1EOuF;p%_BPG;qcrP{B*t(&!P16QU~3^FW4 zB~MefCTgdF6&jePN4MFJAD#o$FOh4$4Y#}cMJc@Q$2kjmfDOab26m-ECOjb%>QoIv z=@R*J^7ChAWqq;{7g@cx@onfIQHR~wcd;XVFSzN~ZSxV_;i5;NN2&EW%D&)r5N{#M zxbL~k8Hv#DU$xOd@SfQyq&CGjytKEqeTXu=U6uIHZ_Mbdvbc=cf~~)xF_mn)-48e$b!eBk z*4j*W=#I@E8=sMm<3!FihK`<579XmC+GShuNFqAAuj7g}7K_h!b{^6DY;_X{CNk17 z>{JnVX6lbg=hpAvDN!OqyQZh6u=nCXDHJ7w_u>U}MyrL;W49wK*Q`DXN2mQZ-}}fk zh>pb-xzb{>s&6NxpEnU#5N5tsNi0j#ILW`~Q(p7U-K~4cf+6gSnVL00TEvd?%>0|8 zo;1_eu0(B7gV`FN_PW+`R#8>s>(|$-H#*IZt(AcMK{ELEO-z0cJX_y(+h7+(=3!Zp zw|p^B4HNF@-mimKOy8w9(|`sbYZ(pRfEIbO#CqnBZWi#AIe-4VcTujXaqx?aWcNHq z0i<=2nQ79}1aiQIIY=-Rj0&0#+tc?Z>Y^L``t>OJgoo+Wxe5uy9Z^CQes408!Vyea zSw)q*X%HB=6i1^O@=p^iEG!^lN!k|pHdW93-uwNGg&*d=N%);Vk7%sNgFC!Rx)<#o zJ-p4fVXAAf*a{?q_fw>N0*s5OO#4Oj^&uEYCnm1(vA@@J=Q6@^=mdURCh_pVzWdoh zp1PMKH`?K#k_W%F6&IE|x9m($o*g?n_c-XDX}uo8h8H`u4B{a|Wds;)w_(@L%D%~l;YpUj%8FHehnO}L zXgzT<*B6`o9>neEJCJE9x@$nuo0QLk5_>^w{&Zo3CxC+!%}29!;k*!4c#kkvm&BEnS+-m~G1ND9_tn!yzdc)j5k=JP2B(h1VDTuPZv{QvURFK%&6JINz(R{l3q~pg>|J~cw)!}2o z_V`4mv#+ab1(~Y8TCj`$eeJ*)YNn!>uc?=Jy8#fEzr#Y zxb~Wyb#08Q{GG7l7^o1hyNOxuu^|}4m8>vXkB{Hnz2K2wp<2)>!kUy`_TQJmEtJax06K?Z#U7*`nW>zX;-|}}VrD<|TVeIbM z02CkYnG8g>uE?aSZ&k9p^oOiV$M11MO#{c_`Y#W^xru65m|MOWmqd*NH2M0qU3?{l zU6GfNF9qkAs!l4Wl6k`rinD`6xeS*+bAigw+4M|?!`Uv0)+32+r_w!Il9{|1?g@5% zl9+_q!Y<#b%?A8M2bn57cUJheh}3J*-O(u{!pIQCjos7~4Wtp3>-RvS)ye)eKDUiB zYzE7c@1rBdjzg57Rw4GH!~i(JLKpq++v53@a>h4=_cYHi8&m{ZF=Seut4(`mm_9G4 z@hF^mD7|}lpwU^nT#~NDp4+}IH$y_lol9q;y1T!`b=s!F`;(r zO!(2!74v4b7E=lO_*J3RoN`HDW}3i*4g=>$vf37}CNMd9+PN-s-aA6|JTt&deE;{! z%4HUC6CT{Ta)yq=tkWZ#qAbn&t{5XQWvD6kgq_)KD`pnh3~`40)cXUNEWdo|*xC8@ z!v}@h1Mpx%D}|vtP9^5_6XF!aey-*t@s8!H`A;%~J*wy^{02T+!XPgvY;nv(weHXC z=&RegZDS(Rr*mFqkhsWeO$mXg6804?5xRVh;~jw`g6SREnG6+II+&WU#aAn<5s-cd z&_nIn;s>`%>&8U%`ch?OvpEm_81*hxSo>tF<*TF%RaP6HDkIttNo3Tcg?aJjk{OfA!5sULiD~}u`PP=lQXX{6; z{`2Skj#PaOK1I*`CJ~q$J$$&z%))T+#KpGetR07yB7e*go;LRO!c5ebVmo(5V~6iq zOU-Q_ou?am95%KGj?-}2rb5){ck|8g@Rm7G+kCG}??;879^49pMc)17TE)Y3)!cml z^*wisS?(SbX4na#IunZ|&_NR?rByRv++Q!^jQ|$SByrDj(>b z!A=ysGFV>07qGL<0ub3R*R8o%%0Y^bJjZoHN_J@B`|VbD6=@dkxN|}YP1B2`$yO+Iq0Ho37Ik$z@JO+2jwKW;!dph48D!A!`Yy?1`ks0d%~=i+ZPEN-eO2GNCL?$- zNythK4Guo~)!ZC=i;6e3_1=KPO`h#w*xqnoh{q5|8^I0rDIh!%LsNp-1P*^MB# z$~hYTSiutWb#b#z>V!HK&7KuH_S-h(;DMCO&CLtsyCN}5_eLrz2SBjnr zFa{oM_9CuM=M)|xolvKPG}JW%opA@RRQSGco8WH#ZVsV1cJEHr-N>5)xS~t&eVX`- zMuGF<5##^?QU@F-Kx=H`*xKX45>{)@#v83X{bS(3tfvp`1SXUMKGLdQL?iYi{sWn< z1>66-b%R(}1N?|R5DV4`B1&tmTE!Dl`1P-RK_`}a^Q{c#$qMz}yVilxwMGOXq z?!(7!YI=1U4?8?4!)yeqk^>`HXnS@NgY#QHitK~CvG=8u?r&O%H3It+>a79PqW90e z1WB&Sp6_nhshQ#Mft00WcQHpUHVX?dZeOZ(=GrE;n`4d~kNlW!Fv z`B`y!vGK=AM!%s3pYY>bj2}f!Rxi&_V#1q@U(MzT-hF#fwodUsWCD8XY4z_x&ouAX zMX&-1zNo@tDut2l3vt{p` zz_VF9bYD>HY^{$*%mkJd^7*0--k+SKu`mE7vUt7KXKmO*wr0ptm?``mXXvjln8}5g z+o;^>eIytT%GD$5aAtIQ1qhA<;pmItyzjHKq1fMjilfFzZ3b-KL4y41!s|kXlPoD% zh)rG%g$>#74>U4WlU<@8nm_#c*?v@J>4*G>;~z*r&m#g2WDhJ~fP#w&Z5nbsUHzCn zZ|@lznxq-G^^ORzLd@@hd@ra&C$lsqj|5%?v4rFCIGoGS-DHfh_u25UbrQ8PpP9Bc zJL~{ozO+22i;-fBZ~WTCoagQ{_pvl&qkSmdUk~dQ1AcC`^blP>u*}c4%?6DIejpkf zh5X(y+E%eq0U?DJ>WBwgcvyX;Mh3DO$6mva%h3AN(>}lKJ+e6wZrhzU>}3X=dxL@| z1C1Fzh1Z!%vm75dN0Hki|1W4=fF%qby=YsS6I&Eh{oo0*KO|0w9uv1`g=MDVGfl{D z_e@jF%V_9Ebfh>U5yWe$|ta9IOok8nqDJynkbCQy3p(bPToqPL5-eED@>W0hf>l zF4qy(oUSV!4pU8;u_1IBkRg7_mcpj)*Qcj%RZ{%`+&Ve6SsJBB*%7%GORLQ-q`hGZ z5J6#Z9Fi=Tp^Q@I5^GfyioR;%cppL>%!P&e?IH=HEYJ7eO*xg?DZuJH(&Jq!;%NJZXBzlb#ZJlw|tMe)H)f|ZW0B1{+f%qP{9}6W>+=5wBwed$Lj!*AcVJ3B- zWX2^_wr92a&76*yk;NYgR8WSS4Cg_1_*Ck+@N|DWZcm*LO(Tlk*0`i3Fq1{7Yr*)YO+oFrDrzWm+FRZ2ntJ`=i4tF8fPu4MQ9&p z5)6HrKpKe_D?q8|tISwgsFPLPFe`gD%xy$Rgx-X}|u=N(qXJ$3~)-(F?bI?K6= z9`=qG%gp3WPp?A`ybln$-#sNWMD(9B<5%`Y-J*?q%6jk8%k8kumlw001Ytde2kO@u zKRN+_eVOD*{l#t!Bc(m+Z87O%FM?AZZ~oihvVZ#)`K~?NecqSv7MN=TxF4o)FXzEV z@NIEeBVS%G{zj?k5vom*oN=}ytIUrz`2pMlogMjLoS`L@f8>@NA#CX0IJ??rD#oyL zX5fz%p~Jh69D+`}owD<5&m%srutvrW}rc?1>$Ui{oDuF3L>gUQcTf zS$Jxd*&0Ysl#QaNMUCd%Blzr;@q?q;?V0A=Mc%lJq=+3n3a;U=^fCU`S3A$9?jF|M zmcV&%$DgA|zK1FHPVr2+lU$Q^*udk4epWhhwBsXCywJMsklN*TIH~%=VeEo-`-_Lh zOier!6Elm=hErL)YHG(_Y+j2CW%>3A+&a?{M7$pY?nD-jQc2p__P!arVVJNE)2wWr zF?FG)G+Xz=6Fo+a;KF3q4Z3xmYX zF#R=m_}LU0aXq=+N|Y&IBVLb=_!e4i-o|s>*Cjkuk%Qy0aRKD0&=LeJ&Y6X)`e>)w z4&5kee$%V9e{`CDBcH05)3^6m{d|d2A`GHcmn(0yT+mi%HE&#lFJZ6U#oYG$iDX=N zrCcrDl)kF87q+%eSJZ}y;1sq_8*=D8?9Z`pv}Pz%i;#_WRU0K5V=J=K+Di}Jzw6PL zY`(#;!p+y?g{qPGPJY#@&FK>|q&M;A0sBL?Xldi~T-jl)GU?G4_W1e~b?9OakE!zE z)Rp=66T)+s_ng`7{H-U1yDz=1g@1p@%1^Y_$t^}%`A+*%KV8}AoTw$a`m8ekZ=z(0 zY_R#qEd8v3mw;%A`_{=`9v%&V{{6L$y>r{gMX?z3JN409Cyw%S+C-PlYXlQUZFqG+ z!+XY1(uW_a7Ycv&Ar|qB6^^eqx8>Q*^wxq^c7&F6S&DF7k(Ie9BgS%cuagspv1s-y zQPQD!O5XI&@-~Zj*D_U%uHxU*_SJyLE0$nJ8E`gAm5A#5@*9HFKBlxi7mm7LoxapS z6!kZV!~dw+f2+|)8?nW|MSWFVfq4rvSa~gAz`uopT{c-UzqQIpgAN;GXa-=k8Ac+J zWS0ym{i~neo)$csmDN+~(WHEMjREh+`egFjHY8rTRjvCNTxynG$8J@%;C2zsBk=!( zq!NZ;Xv_AOqj!WBdO*ieE z_>9vIn-})_eo?sxHR%5B-?@~|8JTut1p7s^6(l)1TC#2Y$QRX3>vCUO*R>Qh%3}nt zP51d{sC@caCjMh@u4sDOy(I6>f~L3l8kEHH^}W$CoskAstnvk#_URvaYQ$<3L%k}f za+tG??x$=_#=$3MQ4S^9iE~vH7q2(8Yt7~QXE1FQXu3yS)?E=55EV;q?BENXOl-A$ z2bsnAoW9=;c$$Rt`9*tN#T2j)wKU^e(ZbThm}_gf#tHQHYY3(0@>yTpacs?IXUJYrVAxmC+kkybz-ay_6z_0wQzLEI{UQ~9_$eR&7~DAVj5%} zgs`x@WYl76Q|(wOVytCAS}P;mCSmWo{?5X7`Won2*oiwxtQ5w4eD&Yo?d8JxslqMl zXz0NG^Zxa11^gbSRtAHx6pIL7jl6 z3u2W{n-reyxYl+>@&fc^9(@!icG`-m$U|0abHVq919k!&+pd3R+=(UbEjBb(aDo84 z-b~M2gaPJU&pWJP8x`3=2VAn%5^g3Y*dARkY84G5K67S~cLf+IG4SpQdf1^)rrkEd z7DX}|{B>+@;pHECmID}SO)IuAa-i;A$(>nfHU02G?f$j6_I6SDDC(>=7;S|qAsz>b z2I}QMD+}jg4GyXh+-ZB@5ze~61sg7Unn1`#Ayiq=Pb)}GWxzNf%I22G2_mEzTPK?=gwX4wJRFhMM1U2zg~?Ss-cLw zn$*Bu9*cht!&c+#;h@pw<#O-E$hF7neEWyKWOoB5$c)}z;+=$+9=#emOGgPa_`hsS z;lW1wB*aQB^Yb3lgNF;PqA?(MPr$kvz)Cd|b1aLbuuB7>wV`D=_n1DO7*^i}_S9A? zXD}TxBEsolbkqV+2jF6l<%yzta|`eZe@#w+&#O|@an0O3#_gNOf%Jx8KCCH-RpT?JzY%-Z<{Mm{Sm04eLs!iRECj(nJ*!Nf16A93(H;irLuB!v~i%G+Aon;44 zh`rdw$;U9Ya`1MBH6DkQFxvLP$-+}>PN1WMMuzn*#F)^$@*O`GmE6P;-1qCw0?g^a z&V?N^=+vaDOT5>TWC^vr3-88fK$l0IC6@JtOSH6CQ#Tz1_*d?`7}@Ri8=lNl$(5De zV`R4n+${U5RWX^W^@tOOD2o5{6;j0`)<3zvhJRXoAERtSKwndR6MGuYGUkmK%+C;z zlpom}!3`xzTBlWBX=&r1Kih{|?}jv;$IT|`>>$f13kW9n{z|!d{o8J$%G3FpV^B{*m9w)N_K=!Z8r=ofdGwa&})PCW>I#m2xE) zv;ing@Ol6o@VIuzOz1t9{^1RMIAF0!_g?OvEXXf?`+o5ta`X_`!A6DWi%hyFB^1Fs zN;40(OsBN9;oorzJR+~YWtn`wnfC{b9*;@7{qA9B2!p2)EDAaYz&t&G)Yb|w``uI& zNA?jRH}4;w{ob(GEWNpJZDJQ{oHXHkv)6<>w#Brd6IkR*|5id?nx$@SXRqKTI`jo9 zh}>#>)#vr(c_uGbdq6nZXir6Qa=1@jVq)WsZ6XKxfVG0M4h8}fOJ!Q`Z^UFe8s7gr zR=T!z%f+>Vj`f^%)-XjZil+!OuLQZO2u|3bY-V!ZiuB@NZL+hE)-L#VjIN(uPtWAV zRD~-E?Joe&k?~~dPICm5Xp5@k?Am2SmX`+BRJlA_JCZZ`(*j(?BpHvZ<`paKDg}`# ztv?DKr&(L=3Xx|7%oK?VsvaZBWi9`A!mVi$D zgw74EH)p~-T=mrHhpcP8eXZm3pt=JhR(^JfzbFJd9%G5e9mvdZmN;<&W_5WOAsa8E zLU@6%wc`wC$0rx=wMAXT|G*GxBqQI$vI`iO0sqh24Jpi*StQqjE9;Bf}Ir?YBeZ$qY7U>^g+g{CsycL^} zfX*Ji4d(8inKAG0Kxz9m@%si4Rmp_m+AsTm_vL?Orl$PI+08M{gNH{@%cKSLkQeG7GGg`i>_Raoz|0bl%{LKd5wAKlhrl8d31J>z3r&r# zT!GE%`J!$UUthm=(B9*WfkBh?DR=A0w!G|8^bz~a^b{k1L8LVGt5X<6c`}uz*o0{r zg&Wr9o`FQ1b0*TogTP#itXK}PlQn2*+8=9x2U_bJWokR7A|I^-)A4Z9eyu*;#+m~ z4rjw55L(a(1fLm7x|FT+yn_*uMdXDggc#)Q;_a0lCfTLd2;GNf_W(;^?E$J?ZbuUe z;?VS6h~psP18y5y2TvZGNRhE2E>L4EgHa9hT!>W?*j; zq6uWahNzflcssFvgSr^PT#zndT-jh2>A=~H(Okjza>^)NX%lQ&WA zKrBe~b`}y$yTi_aZX&Rm?;?fVy9w8!`Q=uZp$cUF>BW#bB$!;Cdm(X6(aFLY8=4so zJ3jnH5sx=+08!;lfYEihNMG5d77OU9xVRX+JSx>T`tShvau&|AM8(vNr)C=u3Da$F zCE!7?9c@<>LgHdq+CvsV1k?}zG5d6oLJnbTgMZyOnBLz%wT$Bv<_>Ar5{CQ%H8K-w z7B`NCE2Z5DnVZ`QnpsWtM;rg^%Zn=km#Q5k%tRQ38N$%(=uCZQ49+2Mgef%4Bp9X# z-|zT10H#n!tq}c8t}Y+8s*c3+UuGtnRCUul`U9h*$bm=QabKF<#vjWV(XBf0ej|uT z@WNFtMCm_~nU+^n7RYngz5I&I>g+|R+R+!BesVMIy7&0yJ|SV)v!aGT3I`=0b}|DF zU*i%I>gGWY(4f=NxkPFXJAy@!H#U+0#}tUxS}Zj--D?_MT$yR%_WMK&sfToT zC;R=o7a_Y6*$J9TR_{p7E*UI)pYWI_O-}9&S3rNp#Ci!9rI6gRQysd+2FU_>^9QDc zPQiQbWba$5kyz^CxgMM@Ryur9S{CZGSqhxWh5GW5HbzSN`Q3+s9105)1z#s3<9eOZ z(=09?j86kCy&Br7T%!tH#wX8tcd<$|L9h%I=y{aVW5L0{0CkL z34i_mB_JGiO@v{_Y>tpqsmD5Q5|VS`kNg;8Sd$c)pB_h?z)FuXFUmo`T>jIY{*DE2>J(=LB7!+*sCscX_nym?3%Jm#z_Ol*>i4+v*xJV+DB6CBLhsWNts5O{R%P!|Gk zm($Yy{|V-KqqnzPwfF4gk5;DJ4welQiW&IAu!Se{=|vdWgAZ-mbhhp+iXz>aji=gN z6ocQoON(_AxP{mIZL2_;rLCcR*=SjL>fH}7B=%jURC{yJ0vflEPYjNL?h6yLtK+phU0vNu z_~@Wu082QaW@D>vDA>TLK^e|u%!4=jJ4~Dhpa+FF0dMpl#<;s|#zo!Ji{2pAwzd+x z(P^u2SyPgYw|%SDkA8}T@P6$Ze|*~XhoW!QtW;C84SWA4%hnCe;am%<<}<Y}M3T>dnmY*0`6; zSj{2c>sMYm5Nr#(0wS-Zy0(^!mGDl+!G!3qY@HA|31XGyKGnYwV+BvJXSO|soPc*^ z>B&tSWid68NQ{^nODAa1QT+3@uTsax9J(7a&7~#D5#kZaC?tR6SH4#B{k5|E67r3Es6>p2+a z!!h^B{t#TgO&eKF&tM5RIPDGz+PTPgy=9QPFd#H++M7uBOqCO$Cwq!wdN`0wgwx=+ zgc?BU*{7aLpTN@tk?OLmbcP*h3Ne!_Xuw%{U~Y*(Zfv?v7NWiQQuY3;xi`8zr9gKE zO^#01^wN|lj(@u%ENxrlI-qDmq9cZ9bS6xdzN);5iX9^8=$|+|1c&Rq-UwvGu#;I? z+i;8RF%O59b~UUm(I|tA1JVBB}Od(lSSpbmjk+&QcbP8a-h zi_sMcuKOp{M4JzSDR2ccv4+P0CJL=w6MLyCRo6E-aeM3$7zox<)}T|+c(g!xknQNv zs9b>S$!BDZ`fkRj;rq59b!+3DI3KL!}pj=nc|!C z7po4%Z8oju+c2jHSKMZ}kW$0OHq9AXw@#)`QM%GmNtvt9 zgjygp&cN30|Ju`gXA6=%&VlVnPbHAh1h+_x$QMLmAmg9O3u9Z%KU2%zAR%In46=WF zq4q65HjsPFcpK23RGT{NCH_Mucz<=H9BpxVITB0Ylp36ZcNDfd*WkB^urX^8?U|sq0$~a{Bx&pkQVbKLI|Efgv{m~9 zjc0AwrS~2*OYa6F9A_Xd%Qi}=l3XFiYN+Pw#UaDzbeA&N?l@|#-wA0g|=5vCE zaGN7wzf96OP?mwU3C>Mc8&f5yo{qV;fB%6om0Q?-wUEPDkO}g_-bR2ajBx+^>qvJ5 zYm~}iJ)=H0rb_;9Y~21w^>&NxkdmV3s=G9L{SA1Zen?`8g)0igK-hOK%V=PZfnn9` z5auP!BP+hL0Uggx!Wp**qTJt2d1I06Q(Lv#UA2drQYrnD!Xb^*)of_P(IbbhNLqW;Tc-PqaA2a{N=CE3!>0Ym5)2a=5xBt=t>;r0yXhV{2&op|?y6f>0Jes%LtDup z5OpoC(;z&(B?;K*;%~RACU@z3Pd5ild z$%znfM&nQt0{{&;2$AtM0~?Id0y>+?BR7v9`n(7?N;af+Esdu zvMa56i-yRi`(g=}Nv6m{wJVzW`F@A;ogj@rzh0c+-XdoVuwrhG*a<-J13=b1DJHN9 zu$6|VgU3Su4&S9V;_dJaGzNNxmjRU|#M!mk97!OFHCVRxH7jYLJ8(XAN_<$PjaQ)d z5!Hokq^0!^t)R8ZPinT1qsyf?-T@E!E*ayTwL{u2G@m2LMu~OTN~d223bP%JGTYCg)JAD7x0*Jmxhf|<=>>! z)%TjTv$UD={S^+u%L}vm)Iuxb6K5}i8;W|tjH97_0h!ivmEN2z%B$FjQBK26v0HnE(9=1Y0h4nv&8duUi7bw0i=zx zaBYWWmjL~yP~)?Cx{v$BGwlpTi}>lbV`u^|33MQc_TX9tL=u{)kpue?rUuv&auGeN z3SGXn^C-ip%Hc={|!od`Kpbt zTx3W4zbc!XDfAp0T>CvgUx76ZdLu1fm#{?At5|2rGvzRTZR<(=)f^`b&>537tP`ns z(g?{o>Yv1`t%%hR(kLPA*6FrOX|0Dj}J- zDeshAEXl!|D=9YR*3Y=O#(a1kEd1R3*jlnzQahk(*9iaR#v?>z?o~pz36txF#PJS$ z+AyLvN#hM{6>}o)Puz)3G@(cKxQ*faMkVas^s|kNq>=;$_W%1V_()eoIh8y`U-Ryl z26;8IVPg{yrcglvfvM1p>{C-N4lDbkY~KiN^kINZfQL@#;zZK+M;my8y&FHy6;-c_ zUKBFm?{M18cU~ znO^Ov*K1~+M}GeF&0#qOTM z|K0$$1u?c;+?)LRj{?CO`Jh4k*si_+Ke>b{cd@Ahe#E$^El8m-5)Y7g8V@VGpLzpAC z9N%$2=Rdy+{^YF#@5T2>9}#z1yY}RrVr4^eGBNXK>E+%nmTt55gR{5n+0ppl{qg8O zKb?HdH}svGdiwQ~$Goqf`WN2flY7J|wdpo@*)p@!(w0+G*PQAg^*_4sS@0Qykw}BcSl{zkl)Lx9tf|_e1CV9qNmFxASYCe*5UN zawO*i?pt8mKl<eW>DI{g*=u&(|nSfyDPV2`BMub&9E7I)lJw21O!~58-A8N zqy1Qy=bo%2QpP@YbXfQ#A(y#GU%@mlw|yN`1Exe&W*9l`D0!`xF3%tPPe;QWU}8*9 ziOPhSPCg~j(3sRlCuf&Idcv!Vh=eQ25g;e^+7av>YeGutZ2*X|FaEH1{tDvbB_&hz ziEQB9W0R9-wW~@lJ?)FWnpbZp8D>==C?m60m{S6uM3OlOTNM7)eO52l4Rams?ROP* zhr#u_*ACWmrFI{!M1M@GgX>f|yWm+tj(UpWT#9Ol^{vR=6JUb=7-W4FRkgvn#mX;^ zu%1TE?js{ycx&&U`_4#su;4mZCky5NN~mslkd&KxNI;t}a_-iG(Addh^|XN56;X;? zvLg7K(b3nGp9$qw{O#(XNum#^#&VSGdesg-d-%Y6SAw-28|zsg45TQM)8*J#LMTh*Rkh zL(q+pUwWYbz0BaXuUs6Nq?3loQX1h=kkw)fo#)PqPAOfsb^SDvvwAHbMi;PQf-lSK zS`otzy({{It%HZ+(*RVQAl9TUK0E?v*_)$dt}I+O%oB74ry2aXX|FHzD?zaqxlV1qsQWJXb>GuaP!{=P7Q0CiTuwb{(D+>Ai|SSzxpqpQcB+mNEY`DE;#D+9YfyP@n-~Ba9+E zXB-fRjTodBEmR3t1~eKY#O-zu{<($aF{x8^ifnb6?BVnNjP30Ys!QkH}sX- z)`VWW=t39uL>josIDFO6W=vG8V>s_Q&#$y6pYQVUv+E4mI^&-mD<-Ytal+>PHX=(f z(>pC6Gg9JJ1ofl&q4OVo&!HDD>gywIR$ucq8Q)B^?w!`Ega1Hsd=GtqoGX#sGTCE- zbM^lH-PH1cpOFrI|5~T#^kiaDr_EL8&9*HG&bSouq%>_eI4NoAbx*ivp+yUKVFewt zOAD`i>Du>suZg^Q6-?D=4YJxL+r>yX?5@&}cxY?;q&?Es#_V!=$h)9ZVchw-PS&e< zLN$w|H=lAH)yt}|OL#Tc&3iIQOZ%jDhq2mIXl6Ii1g0)0(nNAzwl(Z<(K@qHNpjBq zB%YHX1=+<^vfL7~fq=k3EX1MwOL39JeSGk{!Y8p5MGzYwILe7->m*=fos%&C&Fb}w zzu#=cvc(+orKJ+ZO6|T7cleqx?%jLZ=2LOmB0mK%*b7N%k1$kN*Rn9@L0!X+?4d%t z&cBs?)@O}*Rg!$wF~j3WY4XRCU4_W%PT6&2U*jo#>SC0c391YrRPay$C%;T}TT?6B z8Huo(za8J^J?HwYi*V;Mja0|U5`f=!0m6jE2ly}C_<6EMAoSvT?|2#R@XT_F>*`X5 z+v6)`(bpEW1kze9;R)Jqbw?-bdf4U)$ujS<+mJ_*Ql?H}slbTBl9?aQiB(`R9_jX#)2udH(T8C-AgvmYD0D zNjjORHd-=~ap^br&L2fZMSA)MW|o$B$Am4QuET9Vda83gS3N?uVn*iV+H8_W#b^SC zd@bJTCUqJ1Jz+Nx6bVZ>%*GV*>{+YHzf2=J(d??P2AI(6oXT+{DypJYsnCVqdxa#@Q z`StG#>J-xk?bOKIvE#wd<;~@bUoKZ^>_$M@v}Z+VcsSxAfyATI_^xId<(0lx#$dTD zyCBngj_&3}_A%eT)ytnVwULyErI$6sE>=Ru*vA&$o*%m5+Xx0yatr(+PeN?r?=Rm| z>^Spz`!aYCSh#|xk-xlLA50F_qi113-x-!oQk9IaeRe(;oD)!)Pn4A%^p-h}147a? zH5G?D1(6yYKEhZvN42SFXhA_MuA z%*ws2OGU^OUOKOMwk}C;;}@4ioI5}}VTABVibw)BA4xKgLtOEyO-yT^AdV5yO@3_W zLqae>>5pw_vq+0elBq%CjSVy6L$Nx+MgY1FN=nKXkD>TBfxlsDD!Hh`sGtM>i&n7o zf}1VbMv{qUrk2qjdOlcCeGfTa`8d@@LPiqaBTq7aW_X=@rU{=2)TY*RIVHyU>5+wRE2W9!)40fD$)Lvss@BQe29UqWbJw4HJN zqpuiXVacGUcjdG=HDc60EG*E&zO}fQunP!0i{;wk1kw%UESa4#v9=~tS_W_bk=ND^ z2nakSl>7wFYBR#ZU%vAuDo^(jYffG9wO<$L#qE2rn1(vFx}sB0M0E%}fk!9ZK4@Cv zm;;D$B)SnvfA2L9&TR?;#T+ua0t79#jeUnD66ggN_+#~a${PtgE>$?TGlj!I`KzuG zmV@8iXH+R8mB5$6<`P#ABsa)aVf_Ff-&Z{S$uFkS{ym?%cW4aj14DB!ZCiS4IDK4Vlr1OAr87FiU9CybJX`n}r~?QLwx z{xL9`t*NQOrAWl9l+PzDCiVd&2H0#gHyeOGn_o~6)@z5%ptoB3$M`WW!9t6(Ecx1X zk2pl|L3P%^Vum=(Vne$}1b_OR_fOTYB)5vTp~T?{rv*?V94{tk|8c}^%fpbG?;I!b1M`JH3w#-+;GRt&CDKTUCN;iS5ON( zd9~%U0b>KeW4&k9h-GL)U&6sn3emU_@wraVBI*fWoJ|PT_fHC`79Vfq$ z4_M(*i(>aNvaR?F8DE>U*DhU{;}M%xRyEZBB^znJLwFY)?OkIg5^cG-xJzyU%Mfkt)G|^|MtebKu=Ct zTXfwGO|v(D-D1ul4_q!CUbfWN^8mk6+Ov@k^XCFDUH|0TZ~XHt>FMXs9+M_<6RG?A zP7aNX+`|NCU3;WP_l$;vBr_@@RR3;R-yC*xzYELuj%eP$I+k8U1zVH<)?LLu%VGmB z$BI5)J|Uq*Og5eE{U{p==N~D!#ZCiDgTk=EkJBrT>{=S6Fjx{C z48#Lc5p2F7ECTieLxrMl(wDztL}{86(&W&=WDi-l^JX|Rq}MbQj(5N?^3I|MOnBrs z%YUcYb^WzI1_Zp5^}{qc=-|(REjZx5*rqLSfCzyPDvW8chJypf&iI+ZDKB3Yze8d6 z_xDE?hD;v|RL-c?UV{Z`{JW~Ey0>qo{pIBi~b$MsMtj1ciidAp=rB%W?hNNxCy8 z4wiRMKRE@E4qKzK^yK`K!uN0b*}&4%lDxC=sjDWM<$qFBVR5%)OA)IhUW8{>0A?%w zLPQ|e4oyQ|xiD3eJm6gVL;Y`*l!Qn-7d>`T{l9%HtCF9=G52@Ri51@}mtB~Pda8&B zKRZ^`2$hvlQ&acPEuzA3(Nk;k(4meBwkrlVf&h#)!Z{@P@h~0O&L`ukz{fDWQsM-} z(^}N1P2_ja;v*Z^jXEI?3H^0qf+?XiY0XBMuh)CZos`?lNL_aAcK^8Zb~yA_4a0wshj0;LI=Z?qYg08d;JW1~?*16Zh2CYu;dI&6 zBMp8VIbj}i3AA@Jp&(8rEMD(Hf$(M$fwFPQK2sazYvkcyAelJA6N}c|#b=T_o}_rG zH>J(;GrF6XNk`2eugZWLihD^LG8gwVN|C71Tmnq{Y0R1a;6Xq-(4wOBz`@nI*Z9WO zTVNE}(f5=Q5sejwyFh2`PXb#R6HB^=%F#XJ3NMXS^3jLoO$oycodH^xps|!r!J0?0W5^c41lF2 zo_*(0!vIRDh#C|q73y=8RjFsS!-F+SIUNp=eIRXg zJ@8lgmqo!j$m!Ulm3LE9f`6o+9S%mHcp?}5c2N7t$$`~K!Zo3TF)=KTXm7@)GBcra zPdA=NhH#waitggPDlo4 z-us;slZ(kUx1%|B=IS=pw(M6F#7(vIFsqAz!$)ev5>Pht%gcMTAH6zAPfre-$3cUr z1dOASzr70s%P8AESc>pTtak>LiMxNc%$<<*CRPioG0072`Y!-#%s5p(1N;< z{!?x|4Hf1XNFs=}2A!SE6!=@97f>2Sqpf}LSL2u5D;0{E8FsPop~3Q)7*Q3e>Gz)} zpofqteNq69fBg@t__X^cC7xd3(H}+5RLtOTVMiY}zrbJLq$m3Z%hL82CWueFSKwHK zl^qe#GAb|b%vHx#;=Q>2y=Kto4>ZEU2Vm78?TLpw^hB$xq+zo`@y(_QMD4KVw$x$% zyr310N{;muLXP#bUk^9kYhm3a1ZM^4QgK4+>1T7{Ut(g#^mi%8;F`1ZgW>u;1(2CU zz1|GE4WCObNV|*)jAlZ_L97AuDS*=gEWxb?#kM}*>WE=&ZEdmp^r6J?+5<*CCRJH6 zXrM9DQp?v3I5;@C-%Y7UKT>{WUAV*eb?WPA$*YUbN_+0>hBD?>1Z47*ueZ&Eye!au z_Hu&4TN6%B0LbV-VuA~}*XNhK(;qNaI44y!BiNQm?I~Vlz(V|Z<-@~?YVb-1A6!LU zHR{Ktg_re?s+KxZg185$om)Hk&eqkTf57F>t(vBU#-DEcS(W6I=Z%b5Cs)67r*);b zr=*e*P~~Bvz!GVMO5#sLi~uiZiC?bYye3cLkfWl!g;(O6_l)W{OQFb`V(R-5sWn-v$am%qi1Fw#@c?cH8l{udjZ@I;k(t`S%7eBzY7v7 z1)cfd61B94;k!6HHd zcT0~ciSMGJabHiDy(V7KG@N5{jW=?y`2p;83St{DjiR@nJ*DkQYepnoIg9GPC04 z_2p+#-2@jcwSLz5P1PYO^KTD?DQ*j>fw3OSNX)gPeJn}ztZtGFz?#s(VJA_j9}TnV zZ2e(GrqkcFDj0B_@)+DLa8HY zCqw?(<{Ic2voXT|Whaq=v-jsn!Dj5r5oZ->auZ|S#EsPJ z44Ij5l|l#c)po?k#W_(kgh5`?ftDA%X>I6$Ly zCAp=`@GbmBBqZ+2(!LpRMw@#i_B`ef5kn$fiw_>MWuxtmk|ePhmA?=@K|6_SfGH8E zH)SjgV#_9G>AzVEx1PK0Zp4bEx79cVntG8AUOmuuqGu`{JFpDM)4A6s1mg4U@4PCm zK!=H86CfrOS#M4WDe>(`BZb&Zyy94(EEwD|%uVu~(2FEE|1D!5z;LKSr>4^uJ=8XB z4czQvL;j`Z<+z8BUTr!Yo|8;Q4sC3jg%YAU8~%7xojnAqS>GrJ{p`i;F9Ov57kF;V z{=m@ypBq3fIQQoL#BLPXA3&X+dBp656M3BEvU6uVdI4JI8ucx zdz^`d;i`D_Nb4X+z}Y~U0c9kG`^Mjz474EHyFy0VYAIjCSN4e>xAD7p$2_ac<!5@CFc*}bqpzT(>(FxdXO-z%$BuDA&mf)1}&%kjf|!gVu`v}M`Q7}?&_-fmfIuUfk_(qx_#2PEdvF7h!bVLz`#SMT4C{GcX-l}dvz@k%=U z%=daOa4O~J`felHZx=8=zW;&$103a*qqBGrwe(yY zy1Mk8o$pPgKd(2fjdg$E4e(o6(41iT?)V{mEbfTe$4OqMU@XHaY48mGoiAR;y|)72 zNZWITIoitjwj)~HT1=ho*5BzAsD00Tm)cJ;$ou?R96d2`SEJnLjwZT*Xqp-%gaEFgJVf`Uq!fhWQfnfNK7PgPK=L(~RI(z$&6w*U0Mr_2G!_9O($YcS zx5q#@L&<0O(!*Ii{C1v^^wSFAuxF&7BwXct6Rmv0^RECdF~)B!G0+D;kBN~^R<56z zM9ga?*3*hYJ6~NDNF0{b(KPD1aq>=q4*D;9-8vI6q`?wK;H;uxq*Mey-%Vv&Lg)6Z zi+|<@>gCSX2E>QJ&v2|rB$b}Uz2EX(7H>v4NzqL#8f?O^!_OZikUIIWev~+9>yG2J zZ>-%OO(;7<@yRD!M6N;<@LwF}^v+;;3$ZKrmG}#MJI1+~>2iyT0?5CS1@1_7^NNFB ze$Zh@y~2?W;V-vkEq4%jk_$U-M>*EzDNP7n%x|UifRI(H$~u2KJySdRw}IPJ_JBVH zjd1&nP&90U#wI64#KmpXcf6C@4?(lGYsp!0_M32PhR>6ML5vwmnRAbc(Wgv%cmUm= zWv9D;Z1$=i`O9`-3-rLQA?{ABvChsBkrX~F{e2=`ZIIh z#mTszu9$=Cj*{JKyIHttw`gI0LtBQm*n%ktT_FEkd-4 zls$9tPr#9ao6PX@1AiR7Dy%z^&KJdx*Cmb8+-%isd-ZRozkX%Dd!?YY$vu7l74k~2PeQvW zl@9#0=I2k=PnsJW2dnW{E=92<<}#K1RsCyt-5I zS$pRdFjLah>c&ik=N5Qdw!<;O?6hWqcCT9V)qNESY63_zF-8apGYf3&(mxm%3)F)| zKC@Jk=KYKtWOks1cpjk_ggc$}Tu)hBfF!VmxdILbTp6fiW~ZwU%=VO@8)J|fR(tVjdRO;SzFbnP z^>n*=;nGsG+@CvZ1Kq+xLf)A*9y7JPKyV4@>}9bt0)bbz$n8EhrC$HK+@aZATXF9` zM|N}~7Xv9pBa1>*koOihBzJAe{6MtB&tsI%1`C2Hr56s8jTk6=>&O4Buci`Q5!bLp zC>l8h<^iXhrWVH&=N4rKcZXe5fu=ih!N1j z0`fih>|YCy!u z_~Ddz+&9vC3+S5G>Mvc_@4%W&?2RD-Eka5O(wAWGaVt?oQWA%(G1jmc-2M=@vH+E-YPrz^ zD}1azKm;KGNmnphVo^_pMTn{uhH4r|y>EJ_zs4D3zfA5ZS)M4?NT`|I@x}5Mr=mh0 za&JK%yG;59UOWt6;W+U28q?kj?>31c{~%Q1b3^@cCOUuy@kY)+07aRZ4fqt$P1qH^ zx0~mW?<{Qu%0x~MoAK}&VeWhOoOvOZ{;9K zHBHS55AM)p=Wc*p&0MLmpr8;tyk$H)o}MTE{qbB}@xt;#`vC|cHpZUD`?WQg z2^JQK)@Nf*#RY$UEteF2>bmYpO|=n?b4#rv!abITl0s?k`%r?#mS#*dvLQwpY>rPQ z>y15+k3aXsl)8A~Zhzh0iLRmwIXDTptm>of0MrXN&$|u|K@~O==NakmXMV7CR(~!S znURr)8;emevi_2(NJn@iJ|iLU9lM}S2R!EvKH~13@Is%4g>UBaUpEpYKL5fMK^LQ- zE0E~FRrW8vckjC8#XJi7_oibkwIqwXR&B2++xA<3kdju11sAsU&^ey)9H93-=ey@J z1dr*h4Cj8o*}H)vczl6XPvJL)wAei$Pp73FX^N2{E@x@ZXGOREAI^?}G8gO$&?XSoxlimbP}?6dW3Qoo~+~F6raL zEdJy(2GSt{gd$7_XC{g#QD0~`Q!P?$H1a%g_V-RK*MUn5$#_0kDw0^6KH!B%E?F+h z#LDdvdP{&Cx$R1(`a;ZandtFoLVH;15))8MSq`|Ce7IChrqr>*`bux^->5?m*w6Z}m}VJzm~oHSXQ5!EbSVk%e{<`j2PnIqlnd&>5lc z@k>mHcE2z3{c0YCdv}C$V^zI|%&SYc*A~`G>Z@<LR%+iB#3**(+q~XJ{8Mr9lod4i@TvO1x)1I^ zBf`_u(`%DtT^}VDcQ7-r#IH}wB|3_FEhZf}aq^_8 za)RGX-~F%Q_rT)OE@j}=WF>Yt+Hg!2*$*_>dc6Id*Mbs~lM&%*MRoCF)49na4M8mx{)Qm~gHdO5(uWHR}CookM@`&Y+`FT;~6jKT6yvb=J3#y1c3IQE$cUjW5N z4zk?`7cbiW+|T`Qd8;G&DrhjSb5py_o8x=soikcEUZg~EFuJp-wVGXF-+SRDl!*&O z^zl!XiNpKE$> zpVoS`TVzTDzUVvR+X4%t?NF35^=eTefjM}{0wt)u`lpK{l%ogd9cGX$M3nPaYkI)f(-`R)_PM!DD_TX%}^h95Y31+ zTUb!NEmp!oj(L~b0Eh-k9(*^3J@fxEg@HORdgx2X@rJi?^xGA6tSiMoP!Lxlgag2l zgV6%q)7nNg%EoRxj!(aTVtOC_HNy^uH|@8%iEv1C9=3MF$pc1H;Guy6VyN8I_>@cJ zb}u)Wi&h0jTWGzr7kqDik4S-)R>KFo;@ZK`ADvf>nI&5+8ZK>=P$cP_Q{3Tujky83 ziHM7CKFt&U8*919j>?bT+M&Vn6-qZo`PQ(n)T$fpLve^N9;5t`l=FwzF=( zPI|>hS824-{nR4G;#)Qzo>heL~Jo|-!1-yTx7}p+vA(nB<<=#j^RwVK;wLuj4#-YRZ32k_)ME64n|PfLjV|dtw>)_e+Y8XEY)^@6rKt(r zDYPpJs_(BFcT&xWl4S;lAx}EPACah$)4LFTZ>PwYKNwCy_XY}!gR5Sv1W8C)FU&H4 zEFl=}@QpZxRtEKP70-cJ=*DS%!+#mUz=(qt1V!IB?xnwLb_viBwN^x!v3UnxF z!;(iA>nQ{!<#9i0ueWt@!1Gs)SjbXXKi3Kradt6;jKa2J>^BYHv?-!gB*n@=Q@o z!J&v0OU&zumS$Gic6qD}>GY zYsSrS5U-s4W7CE$p{dQE7)gsX5w89BlOLDGp_-hq`| zfUAM~%oIt#$lf&>m|GZmu+7nZ(&9x_n*i{5Pb5PaTGAC26*>1~yiIMhJwq+gqJO0W&{tsYlXgS|8^j7+Pxy%HYF7${`B&}a zc`lje-M(?Paahrri%_M6B}BSSn+|S>E3PbvV%X`C;^o#x%uu}e1(=q<{+k^C zHSOTOnkPKu+C+RDcKYi;ieFjhl`$>R?@pVPo@D2h&~7sLzNY+j^g1@h%_}$V*v&d< z#|X@(I#0UVb*3)g06gz_pt<7LrX`1Bac%QFf%u;vPBH~D240Y8FO7!{Ek!@^i(up6 zc=t|77B=<^&Uv@7a&}9quifypW4wIaOL)TXtV#%RqTamca!$_R-mgi=ISTjKH=ldf ze|@~SZ&Dh4ckWn&Nca3w+}tsBb(PlO_48lSJFQyU_6>fm-1b8yXe-F)#x*FV}fu9eY4 zRG3VRZv&=b_xD$kx$J@cY{n)Ib82NH^O_YdYybQ~60oos`evV7JvBvJQE{l*gJbK( zhko%-XJ@OjQ{w}9>nBXKT}iS{GJ})>m24h&+dMs8SW@zzl3N$qSZYcs+D24qM>N#8 zQTgUrn?q|b7y`cRX-*f}oX=x=WKjZ4H)G@8lGVRbEC0v_(<_4N=C@m;ef>>X?E`QF?vZ$`U`k3V?fL`n zY9gN1NPTu|j+gesQTG;L_VO1m!YP2S?B;Y|>m9ZnK?4n^M1{sm-(SBE;$Bn=3YE*> z_KL!pD1D*HZT&0c)WV{*B>`oNSuaMWu>N?a|?(RWJAAzcP+CaCuTQu+cXgZJPN zP*Ex3c$NcbioHh3$%Bqt1Yf5XS-7x@O}8Pj5sIL>~!a(S7cugCvY`rc(H`TVqN!xOKlka!UAuR z>+DI2G~gl^AcU{Q#jnNK82rg$5!*Iz8X67UMZ0M5ubzkjWgdT9_rtcw2u~g-k&-wZ`XExD6|D%U`okLoaWbi+?7`wIfF2vK|!ag$(p?niw?rS}9yec`= zbFX4$+B~53$SO|OzjIWs=V@P&^Xj8SheGy~tH;#TPm(P^96vJe2E}65zQ`^Oo7ilE z^@8eC^LH^%xwl?WKk-586jpiZ>8bB5$79!rM~7nzH8P@$y&WVovvQ^}CD{F5+2XY* zw^sAhOx-1}M60whj@L&s{`h4B_!dBUmOO2`beVF0FJ98$+8mw=;Sm-!zy43|G1X5TNT8qKA0n92@aCC!lX2*H=e=a zZO8caZYfWt-4~v0^*;yUlVfmw6N&>1_&`}b|9#p2lOp{o>-dDDT7jVPn<<<*anoNrIV~ z*|21>rzYd!O=h?s*7u)P-2>Yf{hV!;wU?`eg6>>c25ablFHl}T2x*@J<7Re7)ySZ8 zPo8}Ehoq>|y~B~smv=D6(H!5WTKd1ArBoSJk3;3V%k&103sN&rI@{j<63lhf(7Tc6 z-N^0|b~pY5i-Z$j%>TVQ4(6FfGap`t`(-57gsi2z9j0pSYFi%u2_PU_cv^OPs&VFG)Vu2$t=L(h0;4Y9KfCb?8N>iQ z5(4$dZwn1CU7wq&gG(>OQ5Rgl@6_a6yq?&WS{fpHHH>@Dg>oVKTlE$~vnNco<=f^p z>o^M+63HF&Lm3kV&V-EUmE}6S;n>~_T?>M(uacIZ*7pIO1jc0r(!XI*Z%Rug}suq6Uvr^ zCuC5iQMSaPZm~kxD#D9MIo17;&^3c-C7$koOLxNCly^6nU1!?%WwcDHWB#_=)Zh@N zuL={mvI{&{PQ6oNuqE3(zn$&FtX>&So`^XC2&Gv^fa%!7m6U|}bPo6>pI7xTR$dFc z>k;|7`-mcAA|Eojg`$*{Qps{@cZiXq^LWV-jJ1?k`3o;B-(w#@T%Z~hT zvoEpQnZEq}5Dj9Tm@jJ$jgOqg)WL zjm4rPmY(dajQY#oJ>N+TOT6@|ZXG09t#@^u8*!g^li{f}d!z}bfiv^Y%J%pIjXQBC zsU0Lqe;b$r?=N{YIY_P^+A!5IK%CVx4zKm&do;7?k|o!Da$on!cw%^Ty~{JxOGDDwoqCE{i0|Eq$~}(2%1!x|pG<^bwv8K!Mc*YPV_$6F zb7A_1XCM)3qdR{j`=?IpJ3X0wtCNTk z8$lZ{;#SRRvvih(S)4l%O2MOh@sADM_~M%p_Kj~G+6xJ(`c0C;Q4K`By* zRR6i(j#SJv5=*Q^2E3TQx}T~w0G$A?fke&bl<=*ym77R*7EOcp4sJ3Jj<#!Lv_8_$ zF_(KfuHQB0QYMBZyMBZ|&{%%@n8p{x86Utd|&40OIXu$e5aPGzJIp$Mk01LFy$&Ja70Ik zYns&ZdbKqDxK)qqNf;YC0S+Wl;sqtK02I) z7n~Peq!Ddm;btksEEL_ifz@z>h4Q-(8h2;{`8V7J93dEOEX@SEFNN<;cVARb&G%VG zdDMuBa_aTlAq{5ve`EOyLpOuBn@GA`s6os);mwUKU5)ofF5kl(Da5jxK7NkF8Ak%W=Uk%ERG&>Enxx zhXFGpMAh%mE+);tPtw_}uKxY2ueu;T^+2%hpVdbTkL~;ci2!#}uN}$H3*+HX;e2$R z=qZ@c@0<^}=LGau%GhYEY#kbq`&OG;VbH>r;gt(J4IwvW2oKBXJ z5Hlo1#*Qa_8_nFQ#;z?q(#cI~y8rLS>{1K>p0zFx{0sQrVfFPo$y2TNe?}x;Pn?>! zzCLI(^ZmKH(9DSbiKvF>N;yQc<-G1!>j{Ut6*}9y>N`rW;7b6n8LpyjqtK5j=5Nz% zGm(rn5{qKldI)xYJ1bc-GFU)bx_|awg)bGo{2{20&@bF>&UiPNZu9z9;z$tFRP*3a zPK;*Klaf>0?r#D=9LjMpVBUIWjwD;LWjCdLFmJWj+tQE|LZC?0&C)ldTtB9r@RO$X z4x)n`ijf!1PVM^y8{gX@+1U|R_BlRpGBZu$Cr@7IVjfNR!gdkw$0>C!PH586Yxc(On{Necemu+k{nWjR_+nML68>us# z)Cvx3uF}jG?F-yumcPYC@9=_hS8aFLO6&R6z)BzG;zlUr;L43p-7~ucsU#>1|JgFe z4$SpEh1qO%?@Pq5$cIMdC5!-Ho?ftA}=QUVpl9(^@y5 z{T;A`24d{!Ks#p#vcGW-0e9+2ieMZpM1V|^G4M@xr9#E3;Rs+ zaJOygw}rq&gz0`8IJ=#?^r(o9a1>7Ll^M-4F2(?`T=)!hft|nae}BLGz?Xsc-?ljZ zYvN+3?VKY|^ZB*%OYO4qewAGfwq;DCP*fvihkqA#JP+C;9CdR0n_46eK~lt4w*bC9 zambr+Z?Nh)^oWawSYCz?))OtAPgePxER5glWM@;W;u_i%W^7Jja*$NKkz-T1EMN6^ z`!O~44`%sk8^7aaUd+leZdMKnwJdnS9bONG*Y-KqV0mVGY5}G|YU-vz)UjREzPq9u z5%(}KOy*Up+P$fq6UhRVM&(&I3Q=Vpie={9+ATGS>T7&`EDT$~b%4??Rv9$5zM-j| zs$o$3;`F+`j+`Ac5moySt)6!aUi6PYqC5GflcKe?_+uwgYu3!H!hjq~4?9ajB=tcZ&{4kVsp zMo8>)B{O(N{`Ii>;;JqeEPn`fqkDDY^3PZXru+-`AGe(0jBbQ^sP-j+UDq~f@AZ4H z^ZO0jz$>Y^(;@gpGvz{%WY4RnZoFePmAqw6bF9Wg(DybVPQQv>cql$p@L~Yj0(4o|GiT4O`cl z2!D5=?n|&0Wwo5m8PO~2KIhL6*qS~ZOLw}a`z9zeXk)P<%q8!CCfsPgYE%2cy0mf?;JXMF=x z0|{BlL^XlOmy&J8K@oU8oa7dlcDgj3MsxS^4Xa*6Xrhe^7u5358OHHyI*dQ?XBJHD}1rrOiq33wBFH^Cz9KSYx?uxp9<;? zs$ZVx)zga^trmzN9cyQ~=ud;iDF!Jxc2V?pnJHw{P^>i~X10LVo7AF^L$p!#^*yty zJ{jwgVK;E4SZomXv6{yXS`ILL8FiTRr-EtLkB*K*yHt7>mW23blm1;qj1}%*?2B=? zRaoV6(W3cMkaEw~xDg_MXuHxg?f^1*_vV{Q5L)h}^%yLg!`ZNYeko(4idjC((%FqS z1;BEUc~^L6lSMlR(b^6JN+9}w^+`tDv{-KA@WNgLw=gVzbh7a3IOk;77L5mHB~;?1 zpNNEgdgvluzPd26JGe?*uB@jraL_?&zs;|b+Src5A~blzeZEeb$CCCd7HcG*@!kJjgO zM(fuN!C;V~@Pj}D_YY259Ku#D-Kb(QLYvyB|Iz0-6%7XjmJ=;1+n{+hhTknTWoQ0Z%9`N^WzKn{Aa7zT*ZN# z&XT!0Sp+gDk!TKT6UKTdhp{^~6jI32I229cenCNjz2-vs-FSu4TB;ZQcYAA#75Slc>O*C>|jE zJb_vajp%%^<9A_}V?$-{-+weJ=$Ur`81QXW9nC%uk@RHR?wZOjK59+^n*?PSYz#E@E$g&yBvOoLE z7PrjnL}X>%g2sMFYJIJPB%GK)N3!_OaS8)L;pDGmIp%8_>MWtvLk>cbeROY(a$gV4 zLWV!dCSglpCTSam%mlv8XjxLoM@U|wX9b%9GW7qon8hG3UT;<#7i(wdfeXgtMvB8j z+}?hqIZg)IykG^t%xXn40Ny5ywJ@*hWWmiCGHMr3ecUW?ykc|jun173N;lYngIJ9OL1h)?p}!xX zetZ@giAD!hYYfV5IeO-U-x=V%b7m)B->mL`R%)Q?v_StT$~NO6cHxE&gPvSN3Q{)42EL>`CBJ;ivODG>dFxQq+hTad zX&0GGj`ydkv~zx@7cMM#$U@csSUCrW<=c7ve!!_gM5C`F%HeJ3@_30s@C7P}t zmz|w09Ocn)z-!$-D-T~0N(Xv7;APk`1LN;h_QwNJ+7aC5S5WAU6$JyF>_;EKzDf1%7$WWLipz;r@F|?Xc6Cg8y=`x0IBjG5#aZbiy z)zbGp#L&=A-|~;3G~Dy}pwxRlyjWg$v&4)Bm29L*{F)0&}~nIZy)3ebj=nD?My zuQXET+oR^~{zRUXqMmajO9L$A4MR@FtUom2kSxxQ=k9hEW);XpB0IJW(LVU}@GCr; zUS_q~ioa6hw=@=GrpNmN8;3v*gP{jNj4;s(Be4_A3@{y2NPNf#Cosr=esp(WK!ibB z;$bdmpWvzERhFav-j$?(%+f@N8QvBM`C>%+!TRd@nj9YR(#6JoFG5o;R=1IlpotA` zyfW}LMpyQtpnH{vEbmVGnyqQWLAcM-)WSAK6r9v01o!2)2jQfGBQc~(5e_eqAB|-B zqpZO^@Ms&Xnr9P8z4lXfKr+AWso|6Aq2G`rBfz5%L2ocx3b+fNDu@K#%s~HBd>O@M*>Qw7`QCW=8bm@Q|@RNM&12oJ%F0<4w&P9jX3 zfnLu2Ya=x!wLE@uE#Qky0l1$HgMp`n^E9hHA|g*W(jQ~mhPjWK{vS8vm_XRxnC))Gb z%>s1=W!dScXf_QwxE-6K+7C9)*@MlXSvSh>PO3dm>grjBSO-X2Qp+oK{-MYDGd@Cz zx`Ii)j+P5ct^qVVIN%bXz!MpzL{NfULl{Ee+b;-0-v)B)P0<%9u*|_c=kKn_Z=n={ zrCD=yH8|AZ9>aQQHJF&WVn00k-3+96%5#e zid=BXfO`HUj2#dYrF)bbkqh|!RR)(+V%bB(g}a#vUyqOxialSWS!DS3!NG@=GvqV; zCposE56jdzN>0Yg+Sb9vPl$1`g*P4oY-EVqB@a-75D7GXd4}ak z@IVd-Xp#VBF2PfQtRh#L?Cql2cF3S+7U^i*iZ*4?NK$Za;4WD|=}by_NL{Csbq5CH zSLvfWo8X*2dTUhpsxZ5)msbcn6aEMKB#+wZ+N~EikZJzMCGZj2)R*ai5xB#Rp{i1oAW)rH> z%I_USLf7m3FlEczG(MbDQ|0Gy$eptJ)kCq*g7w(21|Gb+X**UQC6Bk;*BB0A$t6)ijCyPI94p^+74o-26w-1=`2Z|H&gR#zbNVx}0v zQBy%!qg|w;HQwkT?2Pg|SfZBLJ&D)C;17=puZ8|QCx{!F0Ht0uQlsyib`dCi#Z0fO zud&l_ms$Az?)8ZUq};Vk&TGHvsS3WGEO~REgBx_2iF}|dx*{J1QECd@nbU;`+W{rl zQjASlt7VjuLNRDp;#L5M@07OD6D%rkbgWJ6wK-&0Si@_B^zRr7)*ibGrWp?50V3>t zS@)rE?WA@qJM_{=~0_fagfVsDHc7z=OSXCf1?%%W07=Ph=DdF$LiJ(w|&+vx-KQ#brHJ^S+E zHOmvd@Rtt@3`8cE?~?9WMsqCz4Itjy-9JE9oFx!S^(U9vEbu;zO!ALVW#Y_%Rax)+ zKlBLSHZT?#rF2iiQt6NY(^2#-SkNF2CD!I*+Jhjz@l)F%|KUjr@XATus0nln{@sFg zrq-9fR)7E%SMzj(evW3wqMp7!oP{jZj{rerp3~mYqD5cWku?+$|JxArH`!D&>dWxk zsOEmU&Q^66i_BB3xGp8K$L$rl3>v15oFfrUTBMuOF>E`z=1F&7x;b7hGF<(rC0b=4 zp|i|egB~1`yvfU`dF6p1$*@U>z#1V2pr35-(q!(A`G9hqT|(Q9LIp?d`We7Su6x6lYD zCvQG_^a!=@K@ruy?*lx;4y+lKmy+7Q)g8O}GD4k~l4NlT=9}YG58=B5gdn&QVW^}|dU9aBR}Kp$%DugB-yrv& zt+?CU^F;(S+LzK=t!RzUjJh_O*~7R7pDBzxkK`G6-Y5XXVF&)m>GUX;$oe#K2QJ(p z4L|vj@<1^zxt5021@MZUfz`urrJf$IJD+GLF+M81*4FHB@^ulxZ*`>b=XHJl2$!`L z3CWL>3--1ii1!>!nj{V|ZSz|0=*Bs_)JIl<0)XN$g7%G3g&QL^{eyFGlR+~4_O;#N zwVz$2pADXfueNc1<7pqgWOT1>v|_@6lh&BpcOz4N)Yl~mr|94V>x=+W|@@cNH(XFGc@k@Mzt{K|$By{5)owubuK&hZ zP?mX`W-vbU(OUTK*~)X_LC0r0ZU+CDlT^%MFFrh3BpMUW8uQ*7vyo}odcPKz< zH&Xf6uZ&)02HS-CB%-M#b!|@7*RiYc2rs=Rs>grhZG5wGWZG7gV{rJsfkFM7r@8}% zgu#G-q*PMJIKVp3?5&3ckHTL6HqP1mB@IiqcfGK||NV1-3Be(GVO;qyZbE!*x8zf6 zl6Y51V9&%3Xg?MZUb1DXKeDW!S8i!*;1*y|u8oPiU?TTW-Wbq1^*NT;r3A4q%Ml-% z%PBN8KfHjrWGC5wL(59$*C7d8rdd`>xlY0Um_8!gSVDDi7Z60}$<9OUboDXf^OE_) zdr0M{xpH4MSniKi#_dBnCBy0!b(JGMc$9c4J+iHMdr`qT0geizcNB7V;SIQdC7(^K zK>QMF{th`}@$nNOBZ4s4sCgdKFQxH-6KQIv#m)SVAt%X|-zz@IrNg!uqSXO30|3z{ zevvMUvnO_pV{-u%3QGn?`pps&vKLZCrq-4x(U!pODuDM7MVjEd@wmZ+oxY^`k*K~u zEA08T+?pqpQ;}MSPep@+{tGeeFg8y5(_?r5p|lQ?{VRVqAwol?3Zp*0h(qv3K{f>T zwP#Y>Of8S3H3rlg_FyQ*^@%qTPE-G--Jl`==^+^A+^X2w?WCs7`Mb@1gm;;ndSoXSx|H8YPV)N zv89sFAT>L4YHiWO3x&bEYVx3FPI2y5=AsFb6x zVBnQ43q|S`DBl>X;Z%XDv32u`E>V`-2qq6cGpq};Vh3?TmK~-{*_6>*!H=AO9lZ+X zIM%`PuCAj&^5MEp`dM{RDu-#WZ%rNeI(p+Yx&@@hw_87Iv?9~8wVpelbBdF8x3Y@q z+S7spdU;Yz0an(y5kU)RvG^uzV)a*tITRD5pHKNI21#N`#HolzQ{v6QrLqBqTK$*O z%^rd;$;0aw3|+NSt~XGP1tY^-Tj_Bdh>pM%WYZsOc|P`ovC33a^KAy8CIQ5K`sgr^ z@y3kK2W>|U20N`!Zr$R`9T^!QpNM2D`1rus0Gn(LO%WX?{QU2$IxPAmxBC?b3qNaT z5gLpE+((aE>W`Dc@ws>E zq+emca>bhWX(0t+C^N?KmX0R(FaT5)i+-)A*)_TFggXFkT-Cks{JypEQ^(;I zt5A=eHshDJ5wBMVY$CV$mMg&juyS(tV30h;-BMEoUpj}3$46Un3?q2&rEmmA%*|JY zNnN^K)`ZZPMI-zKLJbgFWGM96B-c=A$W-=l>Nc&%N`h3vIo_9iUT2r_Ba}+NEY#tC z(Bu0n?U)ER7k9qAr!vDHyvtmKoxxSm@Au-3srX6ZPKblG-`<&?69W<-tUn z=TdJjJr7HeJPvM#R5TW^rsWmG{93JmG9rBW?bko$hNlHMc$1&b%epL5qB`~Oa54rU zf#wmn;vPCz`J|U${}$9i5U6#D2V8V zsm>EzyRbOTuiPZLA19p_91@Yz=>5wePDlIqOdfz~xYivVXW|JKk&h(`!puDFeHSLm zs_Q!=+1V%T$A3DaoWFlBZY~=S@-sLs19{iVSwrpZ&HYD`OZ?%ia{nyWvi{A3NiEi2 z#~tswOG9{_3Rn_#071w71ZjDp{nwAHfAi>{K1%%D)D$BBFmqT$$Uxw^QmSyyePw?> zMXh-^&>cQ$VV#6Z11AaCi^F*hQxvUFf|~sh7!iw9XEa1uKEyI0XV)nMp08X*0`@;( zJyFwoEooPR@yYOVSfGIj@7>W0oe)-nPX-v_5135!2?v}%I}y5rdU1ST*-glp)^EA8 zHgOGNJ#hIWgE1K@9GOUt2zHTb) zSiM;Iq~?4CBkp%h(z`-=`>Y~=Z^&r%sqg=U#;ic=tyQR3nTh}tjIO6gBF^WuRhST> zKFVGbXAeTB-{vhE%YfZ;`BhqwE@&PwZNo@DXY~SsGsR^27mcTXM_gM7VV9Wkp zDBfG!TMbY-&+uL=Pa!MJmuWH@Q-0)201KJ3df?!8AzSqQ`-Dt2joW-5!s`bq;bD># z7sPh!s@{u0aHt{w+jNiE5Y@n+F^t5e$EzfnQjeAA!`AXyIuSQK2exU|j0XYU>+ie8 z_S?=Ku%=51hj3KT_iOl{0j%P9sAT$RA^v&7Ax!&5Qm0jJ@$#lKJD)ODGiOB61M+}x zjgjc*VcW;L`aI|mJdLR$>nj254=%toT3NVA2~p2PZFn^B)TLS4EL!pZa5$9 z>)(b73nY7Fo{~JEaj^>)#PzSP9o>MgNTU&AU1s&p4)ux40XjzLPHg+IGD-& zY@d7gI;X6(Qz@I_1GWS}A<#B;b;apAx~)pWqQLg$N7MP4?GyYNpBz)dyh9$$=re5g z$$Uj#r1DC9!q@xKn>@)Kt6ym-gjDhewI)?&`A6M$b902=`giNvCYOTSUkrs{i%<@o zfNMdaKlwL|;YP&?c4gLiYA{mBhg6?-3lZsk(Zv+ZiZ zQFJI2*AWYEn48csDjeGcB#!~-1oEF}JGxh>L)$Lrbils_`+o^Jxi*DQL3BsDjW*^- zv7di%_8? zgI827*Q8u|yO9vr!;(HDrJfA)+KCgZ_V%0%{GMtC0Lme10;@RVC;oC)g%B)vD71?7h(Qi(Pk%m!YTj1oH~d6~ey|%efY+ z^wU!4OB_tH_jk4yZhqLb5JiH@efXP#h{{qko3sKC)Z|6}5rg}zc&=VIel#&M)haS!s zI3g1pZkX5s=RH;WdZ0$;8)$Y8ZV?ccW@#j8@lCZid&!G49*lY#n>ahm7`ahX z{C!c)yl2!Q5tkBxdz5e-Cs3zyO8-6584t4+Z}?tt3$zV@1e9RS2v>R!eSCQ`TVCz< zdm^tP5q}&$zepT@cc;!n6GXA(MMl&cO156!^W#%4p4hrIT|Nw`v8tuz;B3)(Zbqa= zgg2w~PHkLW^X{8rym6xqD{X+u)3fmekR&d4B7~B}f%yWN1g|=Wr&QM8B3x)q{;Ssf zgO{LiG?<2&o$M%nR!af@(O6LSA^zmrP0)3(U=^V)z=U-Q3g7ZF4ITpl4GQzBxG}rn z?UgEHG@Ywnp@=Vxp)*iP?MTun{%loX*;~Y)?p1Ac;@2g@i*qM|ho*LK*vIb$$1o^F z*j=!BDK6CuB98DW-|ArfoO5@C3`LJ@PBeDCg7FA5IKW_PUs-TK1bD-dqN$qEwlq^% zrtb6Ro-XNRyuF6ZA!fR-qw_=jeq`{N?6x#m__d8zj^9lp*Y=eKyZHj)xCMqZTIz?D zj6cQ*8g?0}KWpxjaLL}oaZg~`-5s=9X`54ERbu&veRh@;9Nd)bj-++6J2-Y{)E_aQ z%+eANesh9l8}?mw`%JNyH!N&7{bQQ3CBCg1F~>boAprBZ;yBp@uHO2#^e523UY{S6 za(j^@TYPslxZmy8{2O$@O*_j-TzKGnFu$EX+)k=RUG?a1G`Po|4X{H-=#$^MgBWCt zZ#F=%il~3Mxv~W zIoY6UnB{L(d@51}7ebOg!`H}Xj3}8tq&WKTZ#ehRO%Ju4Bj7{;v(J8tn!%^tXkcn; zgKA7J$rD<|b7>Aung*Vgu4xJ%CkMZeOL2$W1vU-F6UsRq2t?X7wTzOR@VKSv{H|CI zCdvI6qotfFzFE`>Tg-XFwTlZX!R3Sz52z%#%jJ{K@Ue5{zV!o4kPw*@e=6E^ryTS* zkM$Mp?d;Bi@;f*SzSgiqaYFdQN3hGi7aD#_ZtqW|a3zr73cm!ac}DMPm&8t`Fa^Pu zaR+f}>GOLIZ#n%a?_FuRq0p;#N&p)|wousy0`G4+Er3&2>o(K4M#>~(?8JPj=23(J z^Pu18RF3qm@Z^wlt8pQu50b(LfZNkYh{aR07Jr}PzAGJ0un~)G8o%6+aw`>~@O*)x4IWgI{$w!Q8^SE{VSR78 zP5ueity)=j^AFG5N$4IGnWG225DH;1V)z1L%rXM7c-U~`vHQXVtR*=>-6}sV&PXxQ zA`{D}=q2GQs?*;V&Z`1k5^Wid%rQEHdK1Z;lF^C1j)8G?su2p@TI%n^{!B~r^73N! zth@1JC&g-upoA28p&aF7b(gE9l+oboJlZ6+bYmCQRP#EFD^|K?7*0EJqc2VR{n%Qt zzCT$>-+A@lcJRUg3(_XRjMVqJk4N*qZJ%B~W?EECRDhYhG)F#m2#Dpy(FV-`K1IZ( z`&t5Z2(m@{Yb?%g=c;{EI&NoREn#AehXX`Wu#)!B-J&ro(5bY_rF4v>4?x|}BkvBZ zgxMuhmd1acRSW}Bhyr^>4m`>~`DCk%rz}`A%Bizuu2t*ifqajIwY7?~B1+dJ63xDz zd!(PHJzluKdtE>^ze6)WdFmg}1FRXI$VicEcqe}qT@iSeKy*)H<&_w5)kd$FM{1Zy z1oZlb!&^}%5Z{7#5BeBF?cIFuUF8eX-rAM)BoP_|2tz?6*GGZV!fCWJlJ{kNazNx4Z2JyA@C;m@5&FbeV3y)1p0kN>`oV zl(1`OM}LNpy6ywu23eib!e|aCbzUcU%eJod9xB9S_uH|Q$(?pPS)u#XRs3^1eSCM0 zsdg9rE0eXI2oDk3sb+KkgvGd9%m3r)yTiHc|Mqnk6{2A)6+*H}vX!0em8|TL?47HU zBqStBMkFgqlAWw%C4}tkge2MPcY2=V`Q69&pYMGf_s3^k*ZX?C&S{61=sIUHlyT=3 z6r6NBclfXX-LCDj7km`#!jOKUfUj$6*t1a{gSuf!uh zCPt*=!r5h0mGrzPIU-CRCqBN7R<4;_+X+oixTaXLE(hiAoeg6YVTwB&>#eaf{@Fcx z>ekfhVnSiN_W??;@wcdWarZq!7O3T5`-^KwP^I~g&Y51!`DqE&m<2SQ%mvUO53~W| z3V-ROaqp5oC-E6k&N|MY|9rP=c>lWIH|Dz_8V_9%oIM2v(r3>;*Uq#%V~!aXkMY~b zoIO1uBKd^a?!CcSjklE(HwkL#WzACG6>jPXa#!lr8+`oyncOwOUb6#i43uE)yL$)g z97X5LXK&n-+wmAAo1G{#W>}|zzDQwTx0O#v^Xt{@Pt@A`(#Cf*p#C9E8`n-tbG!s@ zUhddf@}B|_+qt2Q=#1~cAYFX(UChHEg9`01J5^mNNFhGm>|izM1uBU!4`HnuoBW}< zWps!jvG82wF%reVTfm|l$5@kE+NV73)efWcCH&tn?&!%o(~~I34J=qV4Xr>zG+{Vw#EH;$d#y(@4>oWIsk z@O{NpS7fs&1b=9!F8d^DDo4hU_xtUS|Ao6k$Rbs&K-C7`os++u9Ed5coV{9Bhb& zGvwipR;3Fi!O4pNEX6QCpG!~?UhR^NCB9sE%EHTg0zM&#JJmHb4k$!|wu~~mB=?Bj zSUs-ENVn1#~J)PAx#dm@{^P)b^F=ivDrA{cn04y`_Y%rngVBAEpvaAesd(^SpX# zFt@hdU`1XFapx05H4eQlMyr6xNvjlpzOa@lJjaJT{hY-Uo`k);-rs95X3sp)J(*c` zo^8X{sC+T63Se9|ETm(ut&^UNRAce_NDU!N)sj9M zC>K7<15*K2@ECEb5#9^;Qn=UDY=muXZE+U{T~_97spz@@)=`%`FG}6P;36bWxZ`cp zIk%0c-Tlf>6R(=ee)OaM@0eVR+DqG>1|gFi`^>Zr(Vp(3FE(Yw9a@yL6B#pK{K{%j zeVL{r{&mNlrGcGm$A`ly-@YyJbN?pAdrf-cTd)QCSG#KGr58V36}^0?>UeQmdhhn- z=#<+CNfsEb-3e5s&39X74Ghb95XUGknH&6nVgme<2c6a0W;`L_!7=k7;*f4OEf#3H zY|;vuWLF@>Ne1$Fvhe@Xe^EB^dhA zQ;-!^Y^_y{09p@UTZ+-Qqo}peTBN0UXyB6G^vOc#rAjVvtdUR6@eqdEcQ8S@m#vqW zL?V=wkWlNG2iFO$=qXOD@?;P682b90=nH(qqiX~?QX}zlaXL3Y@bhVZ%Q{`G;A)9X z>M!o(5Kgue`8w_&G5%xRgtE5ViGj+c0p<~OP`wWUt2%!yt7>}3&-hSr*t8;vx_AH=5k9+%6dHSzIEu;kB^Q5J<8<0Hehmxk=wb8hc$@L+1W6e$^ zrE5m;@II)~B>fiE!QELy90=^iqSR{yMFtemQ@bBO4Qn$ zm|r|Q)a``g7$U59`95D(cnnN4!}9Uqr4u@~c|r*dB+q@zU)(gKf^g-&)-}D%3oq+hxTS=B|IVL&UeaBRMn{2XEN_~Gly;rQpA!L`(VGo;ctBw)v*Lruj zTov{$K2_s*MMt62%z!C!T9a#y*Y|Vn_ZU@?kQH#rR@Y6G}Z;9Q1 zYYR3dm}3A&r|G5m?9KRsQ}5bii-g(_hB2PIwGtf*j2O8YfLPuR3L=&ES>4-y@@Uig z{nE7dtHOsLe7mWIVo~Bc=*wDM<$zZq8vA2LY&h5#aAVsadwS4&7b#77_oKmUL4SQk zm|7>xh>EG2gcC-?cUayS<;Yk>u3VeAL~)m=Q@<~Pd;Ia=>m1Q4wL1HgXut2dsn(J8 zDorlx>&X}~3#kOv`1@j0tUkxMUqb2y*7c&my&sT7>j*cVi?wRII#A}borgI$!U@{1 zXXY_w(ODm&4n}7Wv&%V;d-U;}$k>UP77(;GTa8O@2DQzR?0bXl%Ga|Jw|<%O=bujGvjgY~33?cuP#~ z%ANAFV-wx# z-9&HZUwQl7g+;AR=fAU3-kA96ZG@k(AM`Gh?z}$m=&GilRL9q@$pwKM5g%Xc@GaJR zzhaVubD~^5!qoS=EPe>yy$0bsiMi`WKNPO0k?&Svn0kABkMlxz)Ox(?A6eb4dl^OV zV-0tyz00|7q{uRtB;Zs~k#i(zF@IRt;0VXu8Sm?F$ODxf%tMMlcnK8!J2U4OUH@p( z-L-y*MvdR%a8)tA8{Ljwl`JVa(g#P{-=ElgwCCXa91o61WTcLBY|2H4z9TX}3{nN@e?YS25$AvE^-y%#crhIzA7tyZyrKOF- zRg%;!(kKFGyIR;iFrfHS)KrJa)~WIN8k(Q+EN#x)zy1m>(Vj@mEm5}`RM016CB9R? zD;8?8u`BU``D=`uv9~W840;GsllE>lYU-2d+iYw`&d zvOAlHEDwpxmzo~!Iqz~;fjO<2qws5nt>TSX&e+Aj=~*vce~>YfIG>$#qW+_|r1nJe zjn~VsJzpF3zceA{yspVAzDf|a;~~^{*$+%<&8f|Zc^J621}|#*|K4EQd&JvEx@W@9 zBi2wuFapO3v-6H8YMg4P9SOUh8?VW^s77J3zAq*+YZ7NeA=0LT+>p)EO*1(yuWtO`vKamT$q`MfCf5p~|l45edAv zoUx60@7N1J-M_RruC6dhu8e%H z`%!;XPAHCY_wKbv_lXlw4k5N5>Gc`i4v6v0P>4kw-N z@ebpkMw~|idQQgH9h0!E$O+a1pI|-WT1&wYPNtaJnwCX!+^FudgK+?t`7xowlr9s7 zYeo~7{FNNkt{(XjVxbv#I<9upoTNST>1mdTx~xEsw|`g(VUGo`*RSI`e|)_!>U?~5 zNV(SNz$Mw468n6$|30hVQxpEam9XaQ;eWK}a=9sgp>0UP&m}^H>bMN8m3Eh2)Hezv z-HUb#x+x5_<_3``X=6*DjLhy7;qDhaXS$k5hhcnLec$aSR$@| zn{qEPDKq8AtVZN~U*!$uiO@J(opKvP`47)hYefcYUTl^+nt7*5PEVcslJKMuiFlJ1 zF~!uu=Sd@~{-ypXF|0UBebH-j{#?@fH~$(&`ZfcS?}YtK?GuGXqqWju%6rGcyx)^p z(%0G8GHxk-gKG#T96qVs)$F!Nbnutz_2=)H{L?ljnK%$kuDQCW%;;!_K+aooZoOi%{+d! zUz_C43xn_Zt4`-FwLG_-wHZ=&Ky-W-NU(+?j9-DZZOOAydoer zapmjk)w*M&_5#C7gY8p{5sFy!!pL?4#_~Q&{19LY52M{k@0!$2zWO}1;C&E@6n%x) zf_mozm9j>oQhDb6rS`cDVTz|^Ni*DkR}YcownQ{eT1c{(^z57|3rcMLl|`Ksvxg+4 z^a8)i6B?=14nZRcgYP86i4SKF9wMu@zQOvN=6L%_N-~)nW*b{3(s--Tgp{pSk|D%&96 z%vVZ0fyI3`pVYonIeO(G+s5p^@OCJJ6hB+B z8fAFNR6kr}=%4Y1RA}uv?wH}x(L2tDHc#-rPy&QhOC*cpsCdLu_{V$nCM@n2;t9qL zUqa?N{^KVsOk^I7(OIs3l_1M_a1d6VRBb-X_lCNC+5fA1?XZV=2;jXjmq?G$>xd>@ zpg5{RacCX}sKLBD|j>3;A*b1DDL~fM%m@h*N9p)og>Dj@739b+%mJ| zUtw>64Ks$@)59Y?C@6?p{2g(QA5J023ignlhb-&UNXW0xAgi`@#zERern%AT=`Lc2 z@nFruohQ${Yk#G}6|T_5Q`b&+cicbm(8C`d9{c=*R6)el?2VsG9^whBl(*chx2=$z z><Og#>COFhk33 zktq+%hbeSu-WP%)7@ba%6qpwn0Wnqfg(X)HO6ChZBmygz<^L z?X;{%pB0WXTKsOd(UB%>D5Qh(Y{V1L2|4+$cX{Wn3t!%wMrG(*9s7rxotBBU)&aXy zsqfY{j`wFZw?!zj-4FUN+ye%`YTUtKC<&D7S&8PIWPD=dp2fyOEnEG zqMv4$vMcKY19!rGgWXj)goDLlLwS?6l<2+9bGtNWBH;PTO zVT(np(XVBIanbd=BI;7#kC_&nudywt^!uS5n(fKUHxn|}M^F5LLL;=f&h%|ip_ zGm+e$_eP*)csR=Uz4Yqq*fGmLqY-e={MHD*HX*ZZn1z06WQ9Rwg=@=_m9J|i=h~Mq zEu)kX>Pop?I{8wpsW&?6_s1!^2tIDGhLy9`POY}*z?W}pZI{@@`^Vb!t{k>IA~@GS z_HNsQIQA8BmCdFEX`#O7D$4OyCuqI|V=ZFOZk3 zzb3z@kott?aZYOW&ed}1q_qvWcOe@<=Iq9X6b>cR+$E(PS=P@4Yo|JcW7YDh*hYxJ zQT#e>t{gSI|CeqXE zbbdM4G!EQNY_-!355w*YiEZ_eCh643s_!4rVQL-6?ey0K5!OCbrxQiWpOm;Fv!JoS{?t#&lQ)tUMR zdjkuNa{jI^FbhqJROdC_UHCVdZl7%WY#$(#k;3=y#U!LqWZY)=`H2cz9EjNe4h^qE zkCk|1ORCua0k%uTYsaZsB_KRW?EByZVw%QcXn|J4FtR<}cXf4j%x~#1UeG$h&TS}9 z`$RPUEGb8WwB6<1HHPuc9E1Mz``~cBbNrL>l-a*tIJiVBP+w_&tbM{JALuL^ z)A)i8s3k7$3=ynB~1Oof<`f8s|V^5{=E@}ks>u>Pvk8kN4D_;^9F z?E+;CH~e#--B&+s*h)UmpFYQrb6&fiW+jD^oA>st!KwT2e2vx<-}4S<*R7bOd^L5;w#Y&{Nh9Zua(X*nBT;$--;U>G_pm8qytZqu z5+y5i=WIm?CisSd*q>$~&G5cxu@#ico3&FR=1!%#xlrOmwG)W5-hTK!Id5>P2~lIl ze0jwy&s5Xy%lyEyBABR#6eb;)=QTy|a%6f&!$mbknZlvR`DIvB;ouQf)T`k4Rgd|C z1N~mcQ=_z5uZ5XZ*bg4&Jm`xb|MFTxZ8@Q#S>fQ7Wa`Qd}m}Gj!$h|`e`gVpHdV*D_Libo*ZApGpI$FRC%;KA0 znkE-K8~5Z>)pFS#Ya~1ng#ddRtVC5K3ql$C-TmFi;~TZOX^>`MNbt~Q6)+)K;`n|_ z^ffH6P7zTjpRygmXYGiZY;#-Td2W6WenIU=|A2!^Nu>?HGv>oMVrXRa;T!papynT~ z&F|aOq?U9;Qu4jV9B{IWGt2-*E0${wcAdZCtNPMiC@zCaJI_#e$9BwmjH-eSv)0WX zboBTv{31?xISpR%xEB88_Bu=`pC{&@sBxsUGDN*d*X2HWBHdSU7{D>6kD}YiKT83V$<%#6$KJe+aniI#QWvD+henxj^%LE7%L5VXL##yTohc2BI z(IUNdSViy&Hl-y|QMlq2gTWTLF5?XM7qSjg2;VFAj;{um+G#B7yXXP-YeI;qpg z$GLrcfP#fK5qD%dXC0)!7H)1oJ%rLqNH_pxxRO%6bwNny&jnvxK(jJPf{2))7>(E2u>A&0NR-k`A6f_U%tIEy&%LCaS{ze)3a{Q&c~SbBllES z5;v#1x>iCfmecG7&M@t3ixWw3ihcN>yCgF9n!mhtAp*e|Hyj(dFW6&W@YyCGApN=L z54HbZ+YUs~F8=)Y@7snqcwN1ldeGdd=caZ=4^ngw?MiP9YM&hb_wNye2AiiKXi85C zP!wUR1(&$G;NbcG{gZ_F5oDVa5S2no9+RlH(LJ>QaRA^__CWbeU6?!TzrA7M7f*1M z_3Sy)HYqZretBOJBJ}>Q{0G}rl7?r=ixPbe7d<^aPQ!rs;1eRV~cl#S8DI-bv-R&J4k51Rn6EGXvgHiaQ zDhJ{TkuCLSrf~3WNYfMNm@$n}7ND?%MfpZD+xWMyGezg&nWd0aQA-%QUH?G3UOUko%+iPv-2JV4R6a zl0SsTc`^I@YwQ9> zr@6Itn7(JVJ&-;yhCdsBeKW|n{7ZE(^(E6wF*~2h5`0NoJHsqC5G#W~Ij6$VmI*c* za+gT8zY$yiH2$qg!5rTNdCYfOqai$MM4&URpT|5?Y``+xZPa_P_ zVbC>olID%p-RkF6-#Q_(&S-Kl5Ok6Mf!q`w9y;_^z{zqqaL1S`3j0F3P6_vdJcAev zD~FnR_=~WR6)etS>gu0<^olmm+c<(4j2BTuB=N2|M5j=oE=6wbVAtTAT|Id7VJCTmCJM;sA%13|+ z_==WK-je#6ANG;$6c!d%j;iS`yzag5mlpp=(s$j^+U<}f4exo7#5SpNY1+tIX>$}s z#)xi%^)o*D?HOyM^5%rh`p5V)xjz4v_hK)b^OjHTX20Q5*^pI6rk3t_?ZUQ~FF1n5 z#nqMaC$Ze!@&RF_b5Q!6zCKWP#nY26w(-Wv&#SptN!PiKj+vc08pwHcEOmWvC~SY* zX&&i5g=-I#JmYeP7p4qo{*nf4+7h2YLDz=TbCV8x4H8PZy_OsY;b;4b)X}qNwen}- zmPXfOVK0jDqK(yGQho56Wg)Boh!hk8f{BN6f9dGyeOBw!Yium-RTka34M6%!TjVhW z1|-?!Kew5KjSYAw&OZD!zppt89HvADNzBfpifkK|`{SD*G%kGDw|kTlWjqMz{qwtD zLOkKU(O%pP$})ud@XtNv>@KOg76Ab)<)#{|!?%Z=Kbnh~j|@N}PS7T(*TF4uPm$Gr zZ(hAs)s?~#XL0_RGa&HrSC1{VFjFdG8-&!96$7;~}N%r)JRg?qY_9#y_AbArQTE(;GxL`(>iE{Mr2ubJ zOl^`CWsDf3d~2$a-7z}79%dz^LWuDcvg{4+nsgs>7Sp5KvE!pJ@*FA#ITVxX#n}bW^z@~Rgfhd zk+IK`l3aW}RZ}}Y+7!C1bzZ~%jVC+0rk~sfGswR=94pUyfKXRg|K2??4zs7^%IL{s zmh1S>w6Z%ey`hWhbZT6^F$#&Wc7fc>dslWY&B$75$D@wt)ia(W^DCH@;GWaTPhnl_ zu@jBsiqng);y&J~rJG0_su1(xZSQ2(rw??mP}7Sn3+vtOHnolgUnf1U7FUlc)T7n1L8v&o;Emst~r@ZVP@E>g z0(Zcy=33lTu|D7R{fK(N;#e%yL0GATBk}WWlL$>sVX7fdKNKZvem)c*enmiebp9+Z z-ZX73r+T6IOBH$Q(q=zu$FY3w%kF6S6u8#($p(kg6))S}MEQ$}p}=6nYocHTIP2;# zNIhwA|9A$I#J3XAcmkK2ilm&-4nDX!e!0w)I<*z%l#98&)xRHRw&1)_!R-`1vP(1` zNmW(Nm(NUkmSnwlEtP`KHB2#eIBbeW$>mkz-u(J7c9Yk~4&`i@x5{nc1Qja*1kd~I{ zW*g{Ccb$WAiw$GOiuW^sN)2h)A9e;>C2QwojWAGJ+n)9b__BQ*6=+`(PdK>euJ_;3 z5Vgu@Epzky1njHUZu4gYhzg`uHFx&%BB_@nIueuq+p@Rk@(f2Yy2%P8>v!mK)0$QU zG=Xbp2Cwl;U-S?cEIf=qKd(!q2DL=+f>v@}Pm za@1S9)ugzVYN1RC!bw{X>mUr|#@8rR%wG5`{XT*Oooc7TQ*P2j)6;6NtDc0>-r#YG zRGnLGcJM8ih9;wL@VmK}S1|mBmO}A6j-bG~#!AG+C31LrnkKsbbF$3GF?Rx)#NQST zuC;wK7uh3k|H_5}Yt{TbJAz8ER=?7xxF!1#XPkU-g_(A4my2JSV_)x&)m0DVOu;a} z8}2@sl>R5NZ3L`5yUupO#?%?7Hvu;ifS?bQ1?>CS@QWMB1@zI>Es2q0>iemJid{xH zq$`eY>_)tHN{;PJ&*{gHW5KfdkEG`p#kMv!-W;Em1D$+T zX}<}2&b2SHw#O*39zZ?>>|Th|%kCaUYGHo9j%pgKXmH@=GuL;BdwRZyC-(|DzT|o6 ztb1mt(Dil%S07fv1r{->vtt#gcvv}6D3)bC=TQo=O)_^~y&Lt$@t-Av_}D>AV8NLhENk)__h!pU7A z{rm#1Pck$2@wqf}EdZ;$TDoMw`n`^V(_xB-5PdeXy!<3+#Rp>bT(ffh9PTzep4{Wn)8wj&{d|4{)P zc(m-luATIn>(JvzjRxuMk^G~X`rPuiDY*ByHIJuzm;VcR8cv4n30ujyn^7t&!?rSP z2_FF4;AR+;?mKF26}iLX^hPs@gM$N-UEUWK#;6G+1p>LHoCeE3-ODtE+R&$vU)vP8 zMvaH}7=nQD+*~3=MUk5YSs;s~zx&>i&o%{?qH!Je^jBWoQw_@A3b7AFdO)V`Ff7>X z>0AH0kPd0;=+rjp86s~ZCLxoGp6BzQ)Fv1F-d(MNrhBavEhD;I%=140h1qtQdxzt>-4amd( zE#r;ej?tm&U=n!W3-&2?llUA~Rh(O2e|F}&DI)OE_5ur@MS)RqVV<1Q^H%rL{@Dw? z={iU`pQg$D_|P&;vAY=Rtuj2Y?Q^Pf;tMnMvT?|NSYK&zIpyB&^_%FcJjVDWv;|%O zOK64YeKSR%K zyZvc^9VetoPyIlxV7aM?)}Fh(S%a&;w+XzYIZp4Y19Ar0pPoP>LA1x6F6pzP~g|KCMSKZ(zJVNqgZ1pEl*{4OD<(%zK@itAl#< zF2X@_w3=eR$5C&(!6RmT7T8OLC_u1oud_GXH98?V(2%ORtL@6Ky{(ka#uOf+$2~eN=xkvI^o@b+8&S&dVhO{(`ql} zap|@d*vB9Sv3ls^?0lZfEQ=}W?i2g>{Fxv&>C3+Njl$h`cSQbn61*A!vL(I$z-rr& z(CcMb>bVa+gN41dfU|^!&vScJx(wf2?mOJA_IT6$W3-0!^RDRZ3lm-R-hX})$DJaA zx4%wrf0ojI_0kU3_-&6GQj2RQCLmYBCVMcX!WK_WO@W$(Qm?b(lI$^(wpUytVexf) zru^B^wwni!Ky0rnhmX!<^(aXYEk2iMF7Vk5-nc9JT<AwdFNMx?qa5Qlu#|x0t zVl%VndoMU(DDUnZ_;4ezYf3IRmWz%8^OwzII%^&gL?C|J*!NN`Em(Nl8;1#_XRgUkJ_8ucM7RC>gg9aqVc(k@U(|ZnIk@}->I?V z^sn0EZtoc>$zW|FmdrLOu)8+hsqX783bqn(_4QPg24z}cY_GIscJ1k#hqQ(|FpoezPLz*0fvn!6eD2O8yR+{@B>Lnwn8kYPL$IwE_&WNiJ1)1 z)x(QLKva&?khjlxB2f5S7Ok2?HhK=(RbKvJj;MRW%kpcV@N;wJS_!=CFeNs{o2|zr zD*xINyxwJ|Am%7{yXwj2=>qrq;r#uQp|S4TbC4OPq?)>4N5LC)?4{Wl@l80q=ON`m zr^0yc;yaag$^G_P+_CrMZQlf)U*3>zQe9a9SoFX4T_7wvCnT_&^Dhhp8do_M7z#ce z5Z;4_EnVzmD18k6V-^Pqnx;*J$O_y9#b+miKnR!;;8g(EZf*PL=bn0VII`-OY4R?O z$2?8}2y9H2dMHNpKdnuv=3$z^)_eU|3>vSVD3^3Xau1eAg!VO0$Z)B@qWp;|X3n?l z$wixgQ7qA|H4uYhN`?_IC`A6`k@wvg>Xpfgt!>2)3lTC$ZL!j!YPk1IuC=T|d7@2z z(2Lm1_Bas3eN9Xz@VgdkTZl1P2q?>2YIR=k(+oUhlON~ppNQ6TXEB71WOTdaci+Bv zvN-lauY>*Ix_@5;Rkt}d$}lBMc9j;r*8h6zzkFmU>}|%I)Q^wp??2*W;%|y&f+ISP z@RocXFgWAdC>MG5?EId$k<1~A#ePeCzU4IlGJ%S0#~sii*C;#b(8ot`!bEhP7opQx zIvt}b%oKhJd!c=S{Tr?@SJ`t6k3V*=FkUyUV8xs@7Au304HD;PVkt(MZ%Vj#x=_(f z)5^`CEPPyV3**$A0Lz48?`Nh&VMIN63=v9UO0$B2+#TF7 z+;ta=!IJvE_aYY!oEUl5q8OEMWwGOYA1F1sUz^g`d4P(zBHH-zbq`%ac6S|8Pjr1X zcCPlmjW&`bhc1VV9$Sg{!0u4_H_PKWmxY36-Lr0sDY0pxycKuvJ0q88s(QV~lIl*v zN_?@FSFS*y6WB75IyjYI_Lg<325BLp*&o;_C@5f``md4%G{?~L@*VqvDnw2rIuk$~ z0dOA=;+PJ-g8nQ+9v5F%EI(F4EGRMlY$pc3XJ}!SL4y-dr)f_{Gdc59G~@~={=C>` z81%F2eT3>^b;ZaR`$u<|;hPM5l&~3BeE5PUZqSjKJ;kFrT-@ciMZ9qW5@*uC^uh!G z{yp6BDaNlgx#)hLB=j`!_PnJ`&sFYci3nqC%Q)jbKYkhjU)97sHhhpjD5ySuQcfqo zTaEqT5JoRtaTaHbjrppCgvz-neGz!XE?xMQN;ZP@MYhr?9C><8=YiK!mES#UBpJn^|veW+2lxXDwXv~zb16qT>J~zs;C+sf zU2%gVA~J4|dir6mLph8`|FfW-En45ysC9_wnqULI8bbp@0B}8i5<;R^!cm&|0+{bf z+{&qQ&jpHKsWqPJxr4@FmBb`rrurC_X8l+I!?iZnIQJ3Dle}v!@Yb>V(X&u<6cjjQ zZDx1bV_0zp)&lbn4NN6qV(PAVxi0;dLIW~dRM=4lvf_^)=C!`-Jz)mQAgs{sQ%l%Q zl?cGUy|XSOYlEKt+X zsU1B^+uIHj<8pcn@maj3SjNYP!IF3+VEutzIO{=S56o((KaCs^Elmi>ZF$2#rGUw( z+v2%t_Q{;lg9uQ1S5b|kHOH;)4&qPnFr{F;8qoiSv?$6l`+~f(cemAdcNpn;eqWO!y>m@f z>@eab=BC$XF;&Mz)xULh_x=dG=Zy_A1pB&kToj|J8gtjm(FMwYn;d>ST*9MB&Rtr{ z(6_Y6YI&%e8gsg( z$Wz_(<@z}YugNpI*3`nkpPaOQ>@Ndtp!ki*m-<9@-Wx8723W;$hYIR`bZxfDALek&IL0L^>7VQ{WGX^ng|BWUQ)uiWYoor%unCW_Nh6d4|%*x8N0j ziJxKefZw6Iv$qgFB-rf~Q$ujY74}CCmTTU_(F!{|>ernLQ-uue@?TalpzaBa9W-Xp zU%1|6k5opt!rr^*fSw$z+Y6RMXH@o5cK`67pAV7pUXPg8F1$4acYkB{07?fFJzf*B z*ytWWBp^t58pR`Q=z2hMCWdq9yB9D5d z^_js+DHLm&p5`G^pF5JwqB8(25W3V5NyKe8o^RXYy)uky zp&;2~vf2F{W}k%-Vrs|>!Ph~`WsKmgvCTr@hd{S>Kqe5_L0&zyC&3g2DOaxgFv7zl zeh0Fl4h8Po`J(~J?Ni(GJpRKpT0X)F>TpQE;BUik3-qYEQkF=27m!!1lBZiWGH0IO z{cScxnm}CBuoW(Q2xyQ6_@{{y7A{o24Gc(NWaCIZpwiYzNgGafEPrv2=qrSH0-nH6 zWmEv`b?wxGYoscIh9L9PIU>wk6etveIS#*k$F>S^^V{yQhAZs+xP^<#W7+^CI;6VE4C$_>_VvWO4sJYl@3(l`wZ1};v<79VepP~m4y|GD>U0YRE78Zdpu^77S#@U-0j*{Zym=}cUBP{ct)Q`EA z-I#x>S`gMkZ!Y;bn>v*AEQ2l|EwZOT&Y}w7Y~LWnD_J{My-G`oGQXt<2yD*njfvBy zqn~uQV)8n`j@)i#vXD`qCCrKP5 z(FXtmdK)oHa?!$9VR&CK0*vZ5?I{r&dI2$(uz4q_$9rb;?iNCa$U+I)LEpWT_f{mF z&g67tA)nOMC33sxi7JR8LJQ-m+9zhlfP(Q=SP}X;?K(KMuymnmXQ14#PC+P0J@rFkNh_o4_~hN|7KVTda%Bhe*{EnP-@QI5nIoPU}t;a9b!b@h5+82%i>~RM`4i zlGu{?A2!+mBdY{jZuQWPG|WIZ^-EJz#>W=o=$O=j8m0aH|LbF1g+qaB%VliP?+?OX z@T@)y30nVv1PI)KitTs{)ZQZyu?*Jj+?Gbb6K{H_AxU&`^>4Bg$M%<3R?-j_b?K*P z2_7fyPK6=zspPV+YMccgHQvRFW+P0dQZ?y%rNHoyuQf@hv!N#;i}cOUFN8t0KzI#p z6eeXHqKuTjNV(BB=z`A2LhNwX=cVW7nrV%WBIvuC;9f>7<~Z;}@D#Uik>tC%K{5Pm z-&u-x@7}59X|jqkk1Wnee0N0q?`v(QSs2M-z!lR-)X8ahmkAVp9K*od$RstScry|( zLgW`0RwzlEnS(5z^92e5;2m#j(tS)d63V#19Y#4&aIvdYfmWRNfmZyx<8}dRzY~2R z`+*SoJ!IP^d+p3e#^-*!<5a9R7qGfcM5q>5g~y-4z=R3)K}3Ylk`sN!Aiu=()C1jW z@Fi9|3z)lHRk0zI{;bv82q8Ha=*Cb(LsrlDi4ik~4$mxB*-z3jHHzjh!%24-vKsVTTjAz0~lqzi7Z zTwniBct`*Tbb6x-7ma?)bb*UxCX1iJA~!6nce#-o`h-6p}%nsU{Z<$)mR$ zKyq%)%<%GQ)7$^}3WhwEQjNovLhj>s*4B3VSo_$v^Af4x@cCoC+C^i(2mq%R6TVKFGkN)oWLob~J(Pfz-BbS5a@8Wu;RWy?3OQA+<8&Rea<~ z>aJSt1Nrq$Rm1(0SnK!Fbp62RuV;;%tokp4kAhQeE-P(biHld6vxplMD=3ZiU1-%$0 zv0sgGXF?cLeUg);>iFI2Td#JyU4m6~>Gw6vm9S-?&F&$Nt`|+nvT2=JL^c;BX}Eaf z^lrZxnY%+owvltVn-uFJ_B7Nfy&8J5u+tWKtc;^syHZ=_#b_XCc&NsKNBvM`_3lwO zA2g{^goa|M@0p>CdQms#iP}cslrpZr6s#LTK^HqdUWlJ^B@L^T#Yn%kQn7g*w<5Sg zg|-Wh*UGnVy+;>L+T=<>+g`BVnGl4WNBl=`m30Zq*uCv8VP_{ATo6irnc7f^*z%jHqJs<0pY}!%;N7+ zl?OZ;(`#M*mV;e=OQg!vm-P&uXO{-|3!ncb%jlD$#yMFP*z`|{a*NtTK5jC3r;_lC zJOx)P3u?biZkn6_J=}XNaxIbZf{o&*UqkU!2Y&BiKgjj%c3O78QDFuWYU-tl3q@;d zD}EJ9;?Xwt_D>^QBZ)I5Uy6!vwq>e2Q~@9Z>Xp?q>H7?6IhQV7vG$3RXKiJy%=QaV zN;$BtR2b;th*OKYS66=1rTE*`6A}UfKTrG_={Nv!Tggq;lpMCBvME^xw`Q3>OgVp;NWZl9nC>WANtMaij^}?>ZetT*aH0VyW?me zUcGu{&hUv@>7|DWXPlbrP!*}7k`e-3ub=iF)+g_?`N_Am&wXNOmLcb|oCZfbGP7A^ zOw9uV5*@l;yNxx_@;}EwU-O>#ZMSh@ru)RTtTW$Itpx=HWW^H}-{vykmE(w>TOC{E zSl?N8V?w&D=u%hz@xAAt@4wsnvfFWgIPnSn?Z}V4pT=smq!_E7u0<0BMFaXMo@RLr z9IPF|dI`~Nr1Ewl-W7)aV19&a_54Sv#@BRIA4Xs^W6XB*`RYad6_XH-iuO12K zp37phi&XyF)fN1D3ff`*E=<_Rnu;8MB8YAq%0|e7%>OQ#j`(bl|kr&}ny0t8Ba;DEJ7FZ?_Dg>E6eTgUp zMg|5F@p>6%BAjevV*?7tWZ~6^@gLvL?;m8$L!@%@lyCZQ>&CSrlk?D$08tM z!YqO~9W~L|)b0#7Z|^(ZGY<}hDwN962L*0OQAIoe|7m*cCr&wHz3z+h5n`i@P>>#+ zAU#~!O#Q?Ad}WFCFI@}q>*I&(o*VMOy`_fySIoj*iY{3lWs#5GcJttx;Av_RmXvJD ziI8TEZa(-^dVg1zp1TQWPje=w{@U_VuefK={wXqCeQ)INF>wL61$t4$Q5I)fOx0+e z)xYZvq{GTQibWDpy6CU!cREBF^mD2)^{O;JJgUsHmy3EY<>;eXR-Sc;P;WCq-LT`E z{POUWi~&3Pm)(r-i*RL7dX@+l#Wdk5*E8ceAtw=2C3F#&EM$DpaB|0dde4jR<1E}$ zr6xvbe?q(=!m(VP77x?&nf`nFxNFJ-)SQ zHdJS}@yoz8;3iZN(0c?1o(F_A+cQImCA8+?{f}wKHK<_S{V2O+G&vv)#o3r^H-&jo zs^G#Vhf&Fc*8bU-S5u}+VyV*&xstthevec8RQjOUWKx`s=d`9?jO?+WCn%`N0!jGS zE6#X5D%~8o@yny@*8|OiA$J&=eudd+^Tlw{P~05W`;6B{eg`ObvfaUDMC2W{_J2k{ zkjttbTJn2ULtTA&V|I%ft~#{$MyYWKQU)S~Gm)21==AC4uV44?uHC6CzJ{a1^I-H} ze`Ry8B1bgK<>*h1&xatC7r$!1!^i;)WSg6ElENz%PVp-fG;@=b0gV!Q>V*8kYz2;9AI7mwI;L>4-D`gD z{=Hukn)`RX|1A#$9nwU_AoGqd&D0)Hw4xic-s<+PTXOto{kdqWkaibG*KCv8PJZ_A zr{4p08~y&*UtV!fG+W_V#8g{(X$Ke^ zt(;C|FScCrT?{LxpfB>6qQfbUk9m5pM@8?|*H=@yywN{W*c%vMb0Bf4ZsD)%R~5V2 z$MrYk#{f#U0_eY>3s-*#Vi za&|i+Y4*BQ+RLxc$8VmcsJHbp)tT9Q@y6{r-bFFIdU{#~U;Y&ScI}@nvGzEX=5*%Z z(vI_5G?djpJ@p9j;f9WEtP8n}IcuIh&8Jc`x$QM5P8J^i?J~K~apA$s;m7%2pC<;S zJIl8`mvpXMd>xqo(yuh&@*fQiPy5Y8w>&pW$JvYfrPjK5&(E&yRk8qCv$JBR#W7)s&YpEnEDwWa@ zlAY|)9|SPvKUvCYKMFj@N zDGeE18O?80=Iz@bUqt%zEbQLL$>o9IDvgVyb|1y*8GAh2f2hvxb!clVi>^sXlq|2A z>9q+^9bInfn_O2zNEZ$cwyxI9zPg_zRkLg(Mr1dtwq9z{oy8nFpf+%l{6kxjYIotm z!qTKPWZvIuh?P*`FpW`*iTTV=zD<*DgDJlX57ea?N8R8lTpzQUyr+oTO>IY+coMtOjb)s*C?

FpxJ z)BbD_lvjyxVaaP9wo1sic+6Ef(Pk9Yu(o&ptO>i3&BB`0+1S)0Zg>FOC0Syt?IpSAtx<*dihl)L!;7~)Us z?bNo7wQb(y5_#j+7sZ>D6E^4U)Go|PNk^1J{bVPS*aRRr#^nNJ6FF^+RQ!?C3&N&EnEttGo=Wyn8L!QpYcvJ1K13 zCeJe3<~>v2_gFpMc9MUp+GfGgB&^YRXQR!MJPXm!dXg&y_TtBQ)BiX)jY$p8_R2eC zk4`PP9N(KjI3y6W2_bHc(-WRr3HnZJ&O45~x;N~@JeB^H_GGO)VY?4H5NYd1_$8NH z+XgR<_7$!Y428uO*=yaL^IZrALuHxU?_1M;ttKUPb~py*);G=7H&xa*`DJSIMHB@` zwE4HWPzDxDRGaeZn?AQ?OiQiHsduS#X6Mjg8qI<~t|OB2X@t0;=Cq5r#zNOyO!E|2|g{ioy6+|@P7C{uUai(#*DrB9pe+s|M$<=C$r;OgsKH|5rl7 z@hz#DYRM7rhlC>=7n}2cWwCq}UZ%b+JZx8aw<()OEcx1sTh_82K^c#yOqltX&`YMN z*L@ePa^bOz7H$cSF{evXY3(jHj%=SzQUi-LChJ%zK++jQ%5dG7G8 zKkxqf&bRDi?exx;XlsPw&KcSRLRQh$r%fLRgO#6qjyzAof}G@NN@Ylo+%}~>b;NAs=Yc#<5bJa(#QgVWEj~frU!=@Bv)YYXoz0s zRf{j(O#|Ek`k~Kzv+sOgG>b1z>2Ytjb`2SgUis!WI4xK5cvLN_&3J?|ChXMjQ2C?M zDx%3=*HOKEI-jc>kEH4SZ%1|gIibl}>Sx83VnxFX&V`(B9U4W)<@&n9pLJ@OQ|Nol z%x6^>iTNpu3GZJc7T0@Ox*S%|)(mQ@)cg`IJRR6J&_46LV0f@(R%2vVa(8>V-J){e zq-s-7^q-R#9%jqkV?W~>(?YZIaY+Kr*`nPH3=z^qR8i5I7j>JE|6fZyq4S7RPT>(J@t5hWgnmD42p{;_TDexjn7M zI99R$Ffp3Alj@6FB4k>WG$ zWu9t#b2FHH>d-sREw8c8z2)$l!hpVcspx1^p~0g+B$k8Q`zB+v)rOwQFcDs-rJ~Vs zcAY24@~$k~+5FZSwF1cS?CtH11plz^xNK2IlP%CV;?Fj&acQuK} z`|8I50T6vQ|N1rYG(b67SxBf6nH5{~=w#T2)RYwd)&A{Bb1uYH1NMdtju9{lGqaw7 zf!C{^qZshX#KaWiZ2b}AMl4OeZTe~^$Kek@{F``S=f++!I{v8-2{b^3 z8Z?Ge)448ByG2R3ojJIz1szvW)liL9;mX;4aJ)O`ii?ZcnlRD@t+rZbHZ_-lu zT}C8qY<2@-6Y(#7btR;BdKX$Yeq##A%kRf9l<-L05wMNdeo7wy*8 z=a(YK|0~%4GBqU#vxioqRWhu#ksan?ppwVyF0#}a3H|)l27)y%+ZNFPIE9vl!*02H zj8A`gO|%zMd^D^bka9hTKFaO@DKdKo3P8smMC0ELuJK#xM*3QHvEr3!i!TNzuzre) zh-eg$UfvfIZz$y0^j$&EE)cAKCrV3&M*0*nw1=KW0+Sf)rE6=Tp4qhiJ}o`nRmcZ; zSLdY}XuNW4=LLfG$6;$`t6^wu{S*cTFOoQ+o+xr{+p_C&qr>0Zc*s5Mheg!+P2*BO zv*cL6@6qIsu7T_j{eGfoBSVdc;ZEcJLN zu$KGP8J_6wu2)xN<>kMdKtmmeN3AF>s(t6qK1v2zZ!Y|9%bVUVY;L=j0|ak$P5IoM z2#hea_#P_M6EO0J#?;H(JJ)?#EG|wLrt?@qH#OAbtX+qCSgj_Ljlvq|i;5Y}aboa| znW^PX9<)DS4XRd5udlDC4S4*vFxNA6P`2hrT|KYQ`X#Lc7-U#WI`EZ+CxqFbp~AKAo4?- z7e@3bN{XJo%Dl8jx@6?xxfJsleOFgzr6AtorF)7TWmtZpre4l*M0M#!`cPtOQ>7q` z2w)Bf?Zr>@A7fCBPV6ZTMpj0;bj(X%S~>!KI{HBM1VYVUsD;Dv2d370_U@(bXwEcT z8ZKURkWhE^F;jh6zvo(OurRv92b&lwR%*`&~cLc@z8_00c0xMSokV4z;!*AleI($8g0`6Ec-kvs<%5pnl1Fw z3l5qmMvTP44=C!;f(5bfmoJ+JY^nQMFYe#7N88LU2pBl#qNkhfE0+GyQF|~f9+uqD z%3U>dda@}lE)HD-01TlrCrsa1V0e>EoTj0hnI8soi$$^pR@;a4B%~DwSc=GUJ<+nX z+*Y1GFgSVyl1C{idC+GgDzK7Vaa&ki5G7Vf&lba)D3pri^rDnuGr;}OL-#xTlD8Tr zDsWNGah<1OahuwXipwhE`iW!`T9_4!@M zb(&;Lzlr8Aj~B0@5?^Xc9XGXl5@_lM5Bt81$G#l*Z`a1dp>{8ID3 z8KSsfSw)!N*+scf&)kK^&-?db2Lq%E^G@XI5xajkXCB3u@YjIswC765Riz+BzK1oV zhR)7j>FHKLN#zF?-YrQ^(+5e9vTs*V{7{u{g-Uv(-$Vz{A_N%pnNhd+@Cg^{eSC9 zk?P{YxGzf_+9W=HTnn2cCNB)fA&9uqfjrXT=A-8p1dbhl>@Rn6E5G2be9>yIOPRT{ z)2`e~G5<&{htIukk)K(9-6Cy*+4>I_-IRv~IqC&>R%Y>QVD(idnovek*J0$V$IPaW}fAu5vN<%(u6>UuP6lo(^u^ z6PA;yVJ^yg_we5jDWx=WB2D~*hod;-`6t0hkiIyt+Zh&bcYM}gC4F=&Q%+0ABmHJg z#SdGR=3I+H*3$bBFaD{1c{%>6<`p`J*6V@S+XPy)e3Kb$?JSuK&Lx@W%5Su5nKz@% z+!Hac1!gmPrv1^?W33ZX^whbNxjobKuDqt%6q(;niW@CjBlUB*FZTz}J9S(bm@g8y zu*mIUWBuRFC$}^~-4c9wtU#b$yee`;gf1_&m@mbFaG%X=yL)%v+@|$wd08*mF_&+- zmXmU^<-^wj{hZ0!;BxME;hdjo?UBmFd^Quf$@7?}G>kkqh z>;CtR2aY>8NBwUzk>4ml_5NV))R)&P|L(AH?WYm!X9^5Q{wetHJ7zie*)Q#0%0{t| z9~7P)rTO=@vtyIK$Ntv%8^@?}J2wCOZSO&L7KwDOedXy_m6bW){(TvO{J&#`_?9RU z|NF*a9U`y8(AWF2)jW=h11EY+5+{Vb#qF!|U-c+L-ro9<5+F|NWi~rxv_%V)TfH^g zcm68t&7=R`g07m6c&Yxp>V;o>^HNWU34JE54%9VXHJE6N)0LdMt0YzhCycL%m*U3) zyG5Q6GUtUFg%u49SRE%CMM)iut?fC1P}b<0;?cGLUigD;?fsD(6lCl5?%eT}dG&Fw zY(0)X5bY3ZylzN}hz>szUh&T**6O9A)Imrwfcblz`Vih`o?SSQppI-9=i}V+$_e#M z4xf*;wR{6gVK*g4Ee=-RD!km z=C0|~-bnV;4+F$35_Gf~$Y}~&tk$OJ(NCofrde;zD%F8P=;u`qHS-8>u_@HNIBERg zUTnzMHk0?Ku0nZ9g{`j5^q{meBtrxyBX>_o*G~%t>%-VCk68R*U}NLk(6ICK=g&BB zc$u&KyB@Z6ot=`;AI3jT9YjKob9vAH{pXt~%=?27VtcpjbPLf}g|qAA+_>(a_nap( z`*NJ8Ig^qy3Ja?sX~wg%&XqvI%?4A^!uRK66=QCsK{ST$Fs2LPz8O~^p?jf@_amI{EoM>yV*E@HErS3pQ;=8P(3SO~`| zGb0W1EeNNLjQ**s;|F_sys{GGUs5#-Wp3YQ0V(4*Z5ON(jP9hz{(e?SFGx81&K>lW zGXw9$a26uRx`$@nx^+xmC4c_VKpdfzeDZ>qcdqp`=eQ$tsi0F<&X=zf0zL>6dQiH^ z%E>`Rj|QdA=B~pOaSDeI8Hz(ABYWUE*wCOXTiWsa_j-+{(C5z&23BRfdshZZ99h+^ z0!I&ww@z-*adK+DBPR$S_)k|t`0@t{i}z}RVOz;%-M0uH3*bWr{McGSaxt;6?|5Vh zLUf?$$bZZG{){}s=Y>4(Q_kufbIW_(iH>hpiDnc7@BldR8&kp571`9XrjiZ zMk;SxvHNW%=~F{{prpg~A#uKhZ1JO~FKVU-mAU3$zcf? z*fs1kvSE?L8=ztzv5nVp?)fJv_kJY^3$cFXxAd0e*>Azk1Xb3 z88H`jw)m}KNgXP&yd&K@x5wOeE4ZF&yEEL7Wd^8nC8Ae^4!O~_^e^~;px7C!9aI+ zcVjD_O=$Si+spRJ`Vl3%&A`_7-F51YlBV04STYTRP5q<$w9uuE&AhZi<+i-6IaVg; zvv0F^F1U|JdQXYfS)%6iXX=o&TiU2(keX$r6X~ZDm2`A;?j;Tw#~T_TBV6iR6;6?o z`cF(S6^&HlP+&y|%8+NrRni0mMZS>U*GRJ=V(#qJHi$QT9v1P!)$z;yjr8Ecbg^Zj z;odPW6208D8<`#%B_oumJPVg4qa>Wp2t3h3QEZ=ICA~7jvYEJe1i5h>2dp!4+!lr6 zjVFlJ;r5K|{7UKN=oLd`@2j2COD;&g>WrST2e5RD&;cVqyn}9XQF{I_chm6^|ecO2&Ic~^V^AjxF zi)A#jPhS@?4ZF2(69c{bV(>)X0M)kIXZ4|b%AynL7aEG=ji;ukQInTr$MDMq?h{Uh zv=0u}7$tr`P{vbFpaOY#tR)jA3kFKGTeo6Z@s1DFh?(V|aYN$3re~{hd;oa~4?CkI znfEtJv&<0wK&WXFdt^&v;A)nUafZV8@WByg7M8fzG-0EkT8?I!G5DYBA01`?K70?o zEGRahREaTGOZep3KDt2-3eBHTt=;5+rdN(L@Usv%1|@<8KX+t16}+#oZ)XwW9m#n&{eYA+@ zS{X2XCVQ@1PUoOmrFNQ0hMisvCtc{nfb@6K4{u-FxsFd}SAM*6e>}e0RfmmF6b&a=YP?2%NE5ooCoV=_NcFZtu^1fd> z@l^ohShXFEo;NqECcWp3RoqmWp{eGdl!T?uTy9`y7KAwaw1Tm(Iuf{6>|kE@Qk%fE zdAOPCRL|tMZ&63Ws{kO7oU;^^yhPa$wP4HWYoB}8oVh98A~&u% zkHJL!-1{k6mJ!tjwVUtFFS|2-$Pi2MGo`GouzUZl7`L5qWuaN`Mzd@s9Tsm%WPgfV z7kTs4(e1T!!#Y7d8P&x(&pZBn7|b7kCmYTy6fW_zzHaM2Q*X;lJ;mXK?}@-C9s(;Z zh4~NC@9Kv=j~`G@S|eNkQLySnarcdd?r{+oH(Ou8S_nqXw}MwZ+-GKHU=xQ5-9_WB zSfya0*1h9FG9P~DWdhfcTc-b?X(cOtA1vcqK?O{L}0*gr{AP4w?ecsur}F29Q=ZFW^vI4{nSrJ z2X%FA7?hRCYPEKcDmx6W0HpwG{5nG1ZF*JF07>P%tLAZRU`R_?nef!i)~=E6vEQR% z5jQBQ?-1bP!17*=`B=uUJE*b2Lh+ zSwd*;wuNDi(AB=bDrz9)g6&@ zWoh4y#FZ$!%H@1p83H|W0-A6A6Ks6lf-+Su)-Gv!lPT-0#A})3!Lz@Si!z=s>6>)o z-d3=7PH@S+J#@3~&hwo}L4ZzuH+gR)G>8InVUb#KBO_W{fXaD)`g9&08~4wiMRo6IdKw(KQY?~P9yivCz+bYVl@t&V|`ku&`*=K-!rUS5G zq06k}j44#X=SUSeGaSQE)xT-G-W5hF0X zGn2+Ov&yqBVev1LXut~;6-fXql5m|PsN^QEii#e3atRX|pNk4tE|p$fnvq^XnJt&1 zIT)N$?`f!~_n;vN-M=(IRrCa!F9#1!;v*E?5TJ=%UtCxcSe?a5#%J?vr-?cK)iL_j zQ>=TTb`*g2@&!k$cHGIdA)lldCY(s(YWhm7Fo}506U*n&|L-xoNc^wl8E>=IoVaIv zn(MUy(=303*|7Fqt$S%dJ`*X6_WtVgR5_-S9yPt}Tp1|E9Q1SRsS@oRpRejGVK{@2J&8A)e6ZrW=s6GJb zbu4&$3f6pt*4@A09TN*nLPOIz&9`}d326=s>m^SEfj68hWqSVw``J?m91?zYes}>Hf`K; z`1SH~gi`X*@CdvqbEfOcY3bxUB zP~I{xYFcTa@3f&ZBQNFL4iW#eBFw!LJ(V3ILqj7Nbz9Msfz^Wkzb9${&wH+Gx!5CM5;#sSnF_Fn#r2*k@qP7{}aZH8MC@+BdnKmU^@2nFw*B zZQt;ve~Z^PVejfKdK4?8P@$}KNo(tysa7i!j908uN;Df@w!FI(`IYFRdgUcYv3_1b ztx3>Cm>$^YT2vRKFXk$+H}-|P>-$zczSMMgy|MmNeNES|_FAuzYB#ZR$o9N_osTPg z`pEq!tXx5M0@{8t3K=y;yfhtC_Hpyua$6k)c43k?9Xc(?uyHV0|9}|LD>8j*7y|AkNel#vxh!7@T|^itPTQ< zMCt?`XbIorkUZ5wpVUD#?eN^n`Ox3b5v%n!)9fjm`ri-zkR>RR;XWaJyN5Uah2BTb zSqF92vz*a>7i)j?)vV4sgfF=lmPkkXoe1AjJGnh;U1g8ZYEvA8d4T6UQ901RWpJ+5 zByusI+kC6{T#p_j#cHm7ggKBlQAthceOA?~BX@;XOF5x#Vd;=?S*rKQ?m8nTy3)-o z3cg|?3-?;~(iJCb9C7CGndoGHyrG&_C#NMD2u_oUgI!F=j%@9US-;=!G7SEay<+GdJ3#vXm`tKxTC|^Ud=i}a3z9xHMd7yVgaBJx64_D$w zUeo9u-pl#+mWfTG^f{q7&XqWu%RTb6b$`)qE&crVLmKD$ysOW%dTIqt{lnOThxtM$ z0w0+yH3f-zZ}qKv8Bq5lypVR6MS1l3v2z7`&JX-P0&Cf4GQ?4YMWhEL9k!`J>cqQ$ zuVd*4N{Gvp-hl9}Ys1dezs=pbIWE$~&RmptqmuKhk9)JrOP9>wm#jLiKHri{MHgd2 zv(Abo{hzPVLSYetrfOMdOW%rw&}ZH-pY*PxCbBI*T7D~UEo7^2KBz){?}wlKDg9S1 zy}wR9B}~sHjgAHmEweD3KNKkskQmKzD7Ozk`Lf6p^xsYSXUFLv_0mK3^0Gn!TMxT? z8l7@VEO#$Ui%F_AyE}1hkRf`l^uEmuwMqwA-reNR-aN;6;rp5kf$lnMf@*~KnyS#g z(Du8na6Ytx`ll%W<^@JIud}fx{2}z?6~xU4j*4-{VMa-3J|z6J$=K-W`HsS;9TfqJ zd`zrN&w|I)&$OPqew!|0if1r$ zoG;K=+GXdu;QnK^+{W(UIVsL#^lifbheFL=zQ*`)#gT>@+;yBcZJ2<=KT>-Y~a4| z)cyOR;eF*#m}KUdWD0IIR9|q@i{q7VV!Y&~WMF-oy1Pc2k`^ZMt7)?djj-35muI0t zZU;v8UpC6lJETI)Hz+;0vhI*<<#^b05xVt)o=P{5ZeP;A&$N5uwDoqDL+!rnUOw9w zd4s1o;<3OJx`Mo1Uq{3Ldyz9^1v`D}1NS$2?Dk??IaJlVR@Sh@!DPdU=7YM4REMJP z-F_PBy6yk_{i*)put}k_yA$rSrN$^6+Swl%Q{jDXxmWeytHS+u&kJ!1SSL)J1+MmQ zPZHth60S zv<<`YgVJX<^8QYE3a~322(0Wu-?;^&gcY+lT;Y&q4Ji2xgzlljKq};9|3j&Zt~-_G z>r#aNB6wl(g;v|D`zGCz|Npn*D`6fPZh$!|0dvY>ql%Y~teLpewBgz8|fQl%_u=!hE4# z5UkmAVr~<~iY)cdo;?dJ5p>iQ^zQW4lWNFGr>^n!d8szQ7vV{Z!NLlxV~fk+-hjz` z!4xbMX19u5N%8se;;fNS*e#;S+7pb8lJe2W%OIXfNA2PT-(r|@IF;-`TjW{^ib`8Jf@`WuNCbx=Cv7J6n z$%4`yguCG0pi?3LeLi}2#}~$XLv8nN^!{W>`081!R!0x6S475-4p4xyFd)h$Mh|#t zzbz^vO=S1%W!BQt`e!)BiF)J4T<77vz}8Gn&9`rw!{SI!=TBl+-nFZ@xs`G>NakuH zb7p$_X*4f3n|?PEg46XP(}jJMtQ@OuYN(F^`R$69(l>H^eu-6vgHeY7qy;xTMfmxz2rdby-E`(+<>Wm^YsAP1^a~;U_V5Mv4%x z#$N+LM#LVYDJ?w$$dBZtn_IQ5O?)88Mc)f71u$tDXjavQ`v%FMkdvUedDYtJG-LWG z0d|;v=lQn!Udufvv5S4LFKVDY`}dIeAc@e;yCS%oQVhT^0vLi+0HZQslZ4OpVfQAK zKF#gz37Cz7rrAW|rXCawrEy2t*x1@cj8o=D7|)NdMq#V2Y!Ws_bK|^*G1}O0Eq>#turnHP!*&yNVe;ylwLrE z=XAHTv9Y6BVbqHEf7CGIS{G$bYvCw3fK*bQq1f^9lP>{FI!GeXI98X=Pd;j1V*0rI za(Fu*Kfi}Q1%~{x_3IA?R_yRQNA3+MyFE%yTjX-k04V}0gC0SY3~21fRd@l>wd_1h z0#Zx8ysJ+`n^l?15f-qXL2UL-1RY13nVyrgspI`UQHVv*z))C7NdEFF>8RZ{e)I9G zSBBWAJQ@WLdg~pR=J>;sw)=i=>oec=Uwkgho+^1Kk#0t*Jo4S>hZQq+HpChj+FS-u zY_6VV_0nyErCYa~;9%Dw0wdRn4R1S-WBuIOU7!qW%kv8A1`P;MujTuv7evK?1&1g;gA21 zv|bM|Ut;1hcr)?+qNc(NbER>iAlvMH@BHw^@*HO#_n%`tU241-0BVT()Ss6%{uz3sIH=fF} z*11X@uG^HQA6Tu&w15AR&`WRMP0_}g!M*@EGVs(V@`gZGsDRwA{NY{oK@A4l;fr1- zX~++CiPk&HYP0P7$xNVjf)`d54yA zgx~{2Q3QG(?5~iU^wGJ3(Y0wBE6}Ipr3T8p(lkmW4!5P*=gY+^YT4K@Xf(Bp80k}l za5e!41l#U$m!(*GOw)_YTyXF6;PYI2mt)kqME%cVemMH=X{l?t29w>duw*!>8VFyt z8nyc>XTOyCbgEoCg2Y&qcv2p(vl5+csgB7krFp9Znwtp-NPL|7_H9dR36wcElC@RYFnb+kxfumHiIVasK3Y@CjM_0c5B!-HL(f$} zIl4Ab(?L$>^8zg)NZSy?aHaSeM$D5GILtgC7$8k_XyOLB321-9;1|!N2iIz-A8Vu+ zAG=Cj%x`s1JtR0NkNNVcju)fv4VXzq0Zs&yQ_Vw(9#m&&0~_p}n7#s!Q30 zv801E1HpuunIG7p`1l0iRmd4}QL`qFC}s7(bn> z^2%JRk!{|FPdZjFo@|12s!=-rPhb?@iZ*XQn*m3DIqA z;Z-Dd17H9!2!{RyBFln4PxaO<)*W;xBl+Fz|#+awWpaATLIZ?B$2#&IF81dKCQ6Vm)~gb=tF zAPL_K-5jzYtT+@dNThl1_D1baP}j%)0P`r$?Y?)bc}q?SvbUeD&7I?c?BoD;&T?o5 z-RF~UKanRA=9d(RE_`Hz%*%0g9ZM}v?lYMRKWhf}yg z`H(zTQj+E9h@?=q(4GSadjB*e1D{+6n@Vh}gVCdLw>Z;bzLDAR@zfkf=!yNye!`d@k%(Ifr7)4871lR`Fp0JtMek- z86QG>^`x@rc|^o|GHnsR?Ostgz8%Z{(YgM?K|@1B95SDwCH?$uiq`Y~I+&oNHj!|e zcu-g<33s=6{qgZ~mcMh!C$2$vpKv32+)>*@i{ncv;Z5%})v+CUm8sAbKBnKvX(Oa( zCUQXXxZmYFiRY)PsRq{&YplE8-d^{ZXVW>t*4w<=8-fzm}=#W0bhg&dxUpH8m5t(uI3b?9~Q6Ufm)<%eU1F79NaUZjqkrAYHq` z;2O9U%El@l-0Oz~{^Qb;L};}89JWoC>t1mj1Op`ijJyCY~TH-sE zc`NY#SOfrv!7iT=5cr6je%YQiG&Jh-)O^8aBQI@5uGHGsP0i^x?71W6=C_J3pk*6l z5pv#@K^D3g6=vVofPmUaSKwnN z{!Hf1bFb6d`ko+7o>s7eHSUC-0zJgc2=hQDl;(1kCvA1J0%>G9bD)iojc6B!%F6r9cPa~h3iwb!mOV92lr0j zYJ%&;lkaMeQ1n^$*J@Ld$HFZ&y_%>(X7Pn1vh`Zd&OY$Ly`HSRnfl&OIbvUXZ*YVq z>&IWe!h}OPBW1c~=Q(mtZTs_|G=Pytlc51DrjuLbesTM2a4!oD9gk0S&02jlo?C*D zi8XkQD^;=iwc<@4MXp_ir{W|Z;S>@Ol=$}K$VI-b_bCn|5PnwR)?!5*?%V|95%?Ri zg~FYYPl{M!tQW*5~BhFz+bjD5P`;PaV37k6&f(P(JkrKRKfv8ago0IP+MG zs@%@fG#nlWaEmEUi^fG^3k(boAKm-tt;?)=T18s>DEk55^qjXJU@0UO4Hpt}^wovT z(}H`CM#@j3+d9mTdP#iCuv($K6=C<@jz#IKl5o-+#v6Rxfe;M3Eza;uNIV`ELB9wY zUhctIrnHn<()n4C&Xa3SksIkh-_%t5NF|n^@#9VkH}5bvIolWot<0S}$Xh{iJ^G|W za#hlNZ+jws5ov{ziTU~A>o(He-BRgET9mXkvQ=jEf3wfHGfS9z2_3%(^?#Q#H~I~* zVFqly-oICll5+FW54CmZ<6xv=^gUjtlafA@k}W^DvdQb-(9hiac)XIbFUon2fKo9?W?cL--GPMm9r4|FMQS;w~HkJI=uiS6@iEH!phvOwYj zJZv)gA-(f4mRK<2QCS^rt@#m>E?IWf z;ahqyWDZQ1@yRjN3j#{ioc0?0CF1|cOkDG*Vtx|Yd~ru5O-GF_GBOhNu*K=6H;|yp zWt*t*AuYdk3yOupc?qbPaJ6easGv9Nsf+U-YAf^>Zg&kN;2WNqezkLMoIy_@Wk58` z3{j0~cBJj-E`{3Ainp4aog#Eq2K9sQKlZ*$!x;$*RkBqQeh+Is4q~^qt<7z)csU-r z!6r37+&kca_4J>UUS8A#m9u1y5+)bUvfM8My;G@RVILHx!7eZMOF#m6K-%?7m3nsn zAL8rND*N;soZ8|-9$I%{=fkzjWyZ&1CjAjqNz$7QT4s1tns_M9mv0vZ+?41wySV0l z>aE?=YAMr~nvf|V%+I|uObFYsc8yr3Dp%#jxaOr6gSS-|0!>mbq-d72Y(j4vfXS(u zUg7K*eFP2k5BVeK#8%;vFC3>P=*tgWOHmeeUn&dUe924OQSz>A>C3nym-(1JX1uAI z_3E5{;&H?C`imo-8~D7^_srx{`(4;iF>iHw@9g*8xnhg=pXmkmZhyHzTe0&B3iL=g zZ0!vO{`@%{QfW2$d24l~WM%S3dTWFt=BD|N{B4KvXF^BO@$kgDS{f!PV!qD&-NI10 zy1E{-vvZ!Rre?h2&Dd<=n$H)4NbORd+HaJDxMLRIhVO6G1;Hp584GOjNx#-m2@^i& z$SwcrYoSF&?p*aRPlRKGyXY2}mB;h8lO6ic!@_jRt0PIcdL#97sHe5HJLQq2U|d%Jm;#om4i0M!v16Ao~k%kPH_uFTaRj+1S`|3HPa=F4dTg z(QELD>XhyY7|(piOF)^(({!GLaVD%ov)J9QIaGCKsJXJEV;jyCWO!ygI?}4=cKe=h zlsUSvu(AJ}-p%J0X4kER&!P&TyI0ad^z!FjW>xbYv0q1VE*y!x160)6ISi{ZUALT$ zx8SQmCKffsZso~o2VxNKj)(AGPj0F($Yi4a>0kdzUE8NjFZ4$x5KXIwNOC}qydd*7RS&k$O zO3gRup0YWyw8gu$Z6>qs$@X}|csLlB*{L6@|1l+qq#!mw-+RU5G%gOQZP5t_YFjAm$ctyr4Lbo7A$1H-$T7Bc)<+qCM{rvoB zAhZK~7aA4T^=taho76Yo!$)7Gr3H*9DC9UzQX`#$*}{@Liwe)}uEwfx)~A>K4~RqK z{Cg?aMw6iq_@Is&X*BI>k(Rx)r(}5%R}PoC{$Zl(grFeC+Lles-{eg}iYs^fcC_&D zQ6^eULU95LIXSr{hg6jT*K2ExhO`jcJ`D{GG#KE7w9l-7uhzqJaPD*YfJqLj#~1-? zBiV+Fdg@??O`klnX&g8&pI){f{?)^+!(Dlp*&kWa7&_5|w^Wwt5d8K-KTq>*`;fr} zbRW9i$B$cdp~ZOh>8L>D9?bs%RwOGXXDEc3aS*hjOG8!d7HfM`pIj)^G(Y~F-1}Z^ zqo!L>wQ2Btu2WaKNZNj}2asIL97Vnlixzlm3WdJ{2wPW2ridO@G+T??YbLBc9#vS; zRBjL;1_W_yftY+QFIVN^Lhs3G4#ut@`z#RIz;lqrWn$uG6u-^y?+9O{V_}P|z_njb zb$1PF&J{(a-`d)W?lh!x(Dl!)b9Z)`)XUVsuH+1AyEeTBYA`RP1A!GsBlrM#za}Hdl4$KK5_xYfK4$CNqe76w113wXIE_v7Lvo=nAET^X*65 zcAUd;^0kKsHm8mf)j+^-NV-amD*LitKX$l|Be?mOkWzA!dQ<9&%Fh=()lxoV1_fEj z1h61A?UHPlbeZ`F^V%aK^e__>=`h^-VaPyq{3&O-ek=q^S5(;5k>cgZlVCxpHyb7S z<_#BWwu=@Pqrr)1|HjR(xrQ|Nh82T|#Zjr7zt3Zdz?@tQ!cMi6nOyaaQVK3_%vDr& zW38-T>u&LKC_7P7r?GF6G#$K=tU3C`kR|h7LD>cU(!qJ03z$&NMR0RF#VYV^JBX3q zB6J88sKD^l;i^|$qhR&^QtVsV4=e{M4NxN{yUi@@hDOB2&Z6PR=0IuNWY2i7m$~VWkm*$orL$ zsiWLr^!v2Q!he_74gFJpkyVR5C*Tc(7D{wgVwGdCk8E$CR@{x`?KGYwohEaX_F#sn zPfnE`Iad+t%Tm6rI(0Yi2&Q#wS@^rzYlHwvTX4RUERWLo__pSP>|aN0Da-1BijX9z zr`|5qG>p4;C{I+!320JPvJvV?KfkSOJ?>_6myOQ49C1=tPmvuxU>0rRvi`jp<#9`X z`S0JXSOr-B-WWs#KkJ)Z6Xa|NQ6R%fodpPmVq&3W_x`z`GyY*<`|>!{|=;S$hbvPeMhe=-vH4A=-A}DFZml^gk#3e zo%_APkm>X8nR=tyCuDlM{YjcayANZ?cr8ZBDn zK|lE&mRWBCRQq)fM%cms%&G!|O!5(cQc)9ue)|Fq_k)_gMVZbDw7$UzfF`YYMNE2S zJRqHGP~CMG1ykC|0YP9G@o*3(y2}G5XDAlv`YWF977mvS4h}AeF$d`dh`^s&^o)bU ztjfYI9Ip5p2!ZadUBoWvYk-X6rypHL3uoUSSI73jKrrgm!HM2*3wQR|r{rRaX7FS` z%$tK`%L?9G2c(#F?ahO=ILb=yZ;W2F0>lD(>r)0-oBN^}ihZ)Le0jFLFAZ}=3uOEu zw!{v{QH;BUR}T#jFSXOi%g@KeVS)-E>sY5Z3qTDV0pL~;Qc=wU*5j%?99?5E&y#0H zK?;yjRD=m#(8*d4Hgc0C6mngprnU|aE)7&@D8@ao!8jW-MFVZEnTEc>EQxHqGxD?k zp`n)v2^)>Lt+^{FlE{7}#7Rq$A#Pa;v2zom11&YE23ZA#|G^Qs%3DpJ>@+}21ERIg zmE{S6XRLs*@I@d?u(4}x^{Z)GcseA4;ou>V;Cdjfcob+; z1Ozibp^u#OVxrPv`09($#T(-&!X41XvKSc|AcsF7!7J19M?Yq1G}s-dt{lQONibFtDnc+F?+S zl|526JU|J7Uz`vV`x@Xr^)LRUCy?7?g?24O-`e{6vjkgU^F%s0CjbC=D@+%`{?7to zf+<{PqAHac*re!#fyfern=i3CVy-VhBoIyH=K_UwPn&6}|DrT$l}zKA)v_Cr8e@fr zBE1Lm(Bt!j6k^oZmnsko*P$v=f^Q&e!D6EoGbnt-im90y!g=;iTpctV*qI+eZb2*Q zDnH$QtDA>goX^q#o=sdfk^}nw-m`GA}=UOa=*Y}01YXK zeb5106wQ;aC^%P1g({eM+*jC@BVln`m^udPVEw_6%DU#}feo|`CPWYj3%HifkHYxh zVzV4`d5N6{iKF4)0zQHS&Sv8GW#rf&(BO_v7;-oa9+FTvX<>Df>$AtYjbAV@o@N6n z2!LcC)dkj(C3XUBDYO7%*uvi_lu9JLWYY_>O#B;QaHP&C$LfAV1EGxbjEqOvou`ho z?%lUf7Z@g4?gQCF!^mf7D%K)>1||&sO_M6i~P((p@3RpS<7P-Hyb0b(XGF)>9SLkQ5JY4gibF z46J29Ci2lzTR;5#$pnxH@!M*u|LSNi*`tro*)=)u*ca&l24YgGk?D=ozY z%U{KDcS?2}hNhsQPal1WpeRwsjiLSExCD9TH+%hYKCgMI$^c=1JC>oherUmTqk6$) zwRi!sJQHx)-qsTBK^QTLem58Ma#NLURGP|VpFewLcaWIxXz{8PIBPso#QC}U=oONM zMlmrpHN^*i>*$p!c03C#0i^0)US4R1z*&}S(+9@O0A;Zf=O-A0=b~#3fsO>YfvJG= zz^~z+5!lK|G;yRtM=%>I1)EUP+yOCkbuM7_%lkV`7y#V{N1Ad`ml>`svrLP2sas7w zI9v=}T_bQxv=OUr7cN|Y^9GK5+$T|+URp?Ts7Oi&(T8j~#HbI_0tL(-0*(N{Z^$+v zzU_o}#u71DymA}|A|^|ax--o6tbu|LdFr9?DsxebdO=lqaD%YI;Q;xb!)RO2?bYeq zxx}gzf-B+-mO6ZT% z+)7&*Z$QH0P60av@ zt!JkS)`xh9D8Xlg4GA40CU6jP3wpD-U&1ZL1Y$I~5E#?#iRg)FTfDkFii0yQKcC{l zYvfA+`XarWgRv<}&FU4nra5Owew?9(k z9Lvrlu2R0mbG}4zOmT5TB_O!*k$mayW%`v5SRH({_m>yxB|A)`{_*3PN;99R zXvOigf-^$l8xDq7O<)^516E-@Go%Ut`YXvSOtjX>C$ZO^a3>sbRU-V&?sfW<*df=H1hSzz39 zuubzIy-TpPdaOfnp;o`YJmID|Aph3KK>&sl$PaEo*>YE#32WP;(qEg2+(I~PNEFb0GQ6GKW-Aj=wE_6Q#u3g3P81iw=uYtk9eJ5pBoEFf7C5 zr29gBG=SMdF%3ryw6#l;8;#p3C0eyxHc}|5ZEmv~6Y~Yx!*ATS`tKL_GNUa0W|!86 zJ|H=Ubmm=YfkFy*AiE_1Q4|N0#hsrCRhTu5m@7-vgMO%QX!wMDkqq%zFVIWXx3*T{ zI5<9SHJ0W8Po)OSX*`OfrDI$aXC_-t-ApidzW8PkLlDfw1Q=D4y?n-MX&}vpSK+ z0uIB2>cJeCPgcxamC!rDClD=s|#3 zHxZZ&F$;zjj+nxh>8av6I5-IVA`r2-uqT3l5Udx&v`EOQ(8brT4|l<|MjUOx{JYNg zq+FRc3@T51d&swM-=x7YlP=16uASJPQyt2lbf8JZspWnGMbW~+TulzcDB@-mn&b8G zps)-AFWpvr?9>4pA+)3#deOqsa^?Oxh;cCbC@_Qp2pDXFf)njm=zU&VC4CV0>|2$^ z^jPdoJ$*(2X%+f3WezMA1=!@A5oc$BoSqU^kUfLlK$>^N_v-3H`-}B@^ddNipb&u^ z=OCXz1ABVt2ni%8TjpT*gTm$=DJeC;F4q_9^n!sgf$(942ql9&3$_TU{`jn68(1$jc(H1EgR3CI z^(K7;AQ&Vguwm7Fvw#VW&uLaf0o!$Dfl`$|WZnR4An?F%fG!m*xK0;@>%n*n6qO+J zK)2b!3qqgQjaBsBs6sOa?N9O4?i-@ufTEU>#A|aMqoERn2|#LpTAfmv?!MQ39}UQ; z`UUQKY%!pZIbVUP3N=XpUI3V0R$THeSFrTiIy_83S8cTU%Rmw2)l$ zZv-~r*(W?`9QeHCC}{CX;b85zsa;5n487L{VJka~M~=u@SXt4h8lgD}genABf-bZx z%YqT`4)uT=PuDD@cAGNcAl7QNq5L1oHXEVN z$-4SOQ!nSdN{1#ASyKYXwwLK+L|K`Wu; z3B-EL&Un;PpuC38uYNKQ*Urb-=-;|$?NaYzsfHD>hqmO*(I*UCZ z1%Vt3j%Y)&_z2jTO7DY$!O?|b?{C94z{RWxx}FJi7Q^PBb~S!v5y&6_ z5fj#95SbbpUJm9!<4-@9KY@QwoX~v9!6uT;k;R>;TV2kei}#Q>8be$Fh8aK)EYB^fZ=z_uX_k5}P=k<_gXj`2SOr54 zygphL1LU%An;7Wj^PeUrB>^w_P8ngTtz)_bh8KVyfq8(84nP!aH|Tl-L~FyFBcKQc z1{-__(sT$43kyM6Yyj6=5PS}8E@0`y#swcTBvqD7gIzNOOf4W)g%Je0BEP)M{uhXo zptLpva|j|o%x6d-(KQw>GI;xj_0h<`Pwr-B&D2Hs9_c>-7>Ri9+-foHO_u2=BS4#D zF9Jq1e7pOTvk;^wHMtysvj11uDAWCo56#k<;KmF;|Ec5YHq6t_FQ4}SEDOVV2R2PT z``Q-dSnVPdlIdOgi&p}+xkiHn;XWRyxEK;(!X5fT!rgk4LkK!5v-Eeu7uEog-S z*+UrjjzQ~~Ab^1F5d=p#5rD?5KuE()qq7M-xre*@?PJ^`Qy`#son09?aSa7ZYEf-V;r)dL%JtgLqPrCD1fv{dK@)P{!s;K2aj z2ZaIn04T}}B&%wUP_KVtCFd}urVLcbnW>cMQiJV=U@f8U5|lPY=8DxmVNBXh8@SwO{Y zW2^&SAS@#uv~IyIQh34xy=eg+`|bv(8^N0oyci_xYqoI!!J#L_DG1sTEI5FApQ$nQ zCM#@|(~!r_oF46-9uL-M=jDaN(4pTV%%MuiI3N#(a|=#0Kdu(GDSh8wL1zW2G{AiU zqUD3qn7eyLMP({Dtx!eu!HB>Dha%Mk=AI5b5xg~YFCx&W0t5nEd$=ANQ(hpDWy!0l zMGd-V!u2#cf*`P=&{-X%Y_-y}5yBH&=zmVs*fbk!i?*PVJF-r#YC@~!#2XYKVTgRVhL>yj1 zNR>R@l7%e{UM-+RG-)i8-V^6-4U`?4ZUqLU&~zE{eROsM!fCj@!>NGl=u`tzOpwAj zz0!KQB^$wr-DxJ8(dWM$*Tl6L;aCD?TKM^2?ZEtK8YUN2hVbZNO4l3j72pjV52f?g|1x z2PcFKC{;2=PsM5(rbBrFYGpvn#&-f&0vQe$H+K;LIk0V8ub2eVVTu1B(Ok!{f8^h4 zPb!1U*3>-+PT*slt_TG=aA&{^0$Ks$a1R37eU_N?ii$yRpA%ikD!uP%d{6q1f6X?w)D5+=nK-mCZE-Y!t89fVkfiP-|q&1tY^MzLiQ$RvOVuEeiO?E^# z|6!JTqksyOF8~Bh?)ZT@8q5J06$o>Ku4s(Y7DbP+l7)NT1JnsG$QwiZdl*|wr z2m&00^aylwO?j`OQ_I>&S@?aXdngJZ(L?lkatiIyLGdCI-9dxm<%#D>^#j9a>!DOY zyZm`k#(hR!-fvek43iTqr~W$@^0B4m;3Ms`+OKUVb&*FkwQSwf;a$7Qsr9y_2plwm zMpL$EUIaRIm_^b_9A~lW+q$2U&zF$`dF44w8Jun_#NHP`+YodAy%an zx@H!=*x@?PUH_i|5o%!?cxrQ5Gu1qiv&N(4m?Y@$f_vvFwUsjzMN`#X2fkG3%ff}< z#dmjNQ6T86|Myc&DENl-C{>U)-mAF<=gsEHv;SQ!XhxV2QxZ!yJk&n6>1On%PX2PS zdQt8$Ph8#9e>K4N__@lrxH_3!O4gzFiSR4*m)b73VaQT1|L+TwoM?JJ^lk?K_dm^t zb0KI9{<=Nhgkt3Q;<7>SLDhqJ>t9&H@!`L)@DZvfTssy`u2Kj|@#@(v-Y;rKgS^#$ z|GUGTeKv7o&yFe{?KlP0T=V9|+$810RjszmgGYYdkLx6xFLk~!P$EDPS_*u8T4p6= z8}#3{$<*x+myZ8nMFo1rSedJXcBSW8CQ~z}#>NROI4l&OG3Or?Q-)PW2F#97Aj#xC zt_ED3FQtfDi@Ef*$e*AeVlG)7lGk_maz4r`zjnVPM}lhf5>RVB^}keZ3$*gt*q6W!hC2NwZaZX21pB}K`R9FP7RojMG3 zso*Zs@Da4NvG|L~;o*#2LN-V$z>;+4;0g#WGu1nudYB3eA0X}5lT1LB5^M!QrhRQq zAkJz=0$40+H_$ zFtFLqm2$pmKR)TsL{rBd4_|fT;8xQ!uiqJ5Ug_|Ye+$-Gqp(b+UHVvK`1x~~sgPWXG0WWSrKEb@k zh^@(rkjTqPr#lh9?U*P3S(}%ZFH`LE)y>@W86ZUwG)1%ZY7;o~i{}cj1U5$_f71*M zWd6JT#e37CH7+oyj{-uv9Sq!e+e+%)_451%G1{^zH?yi&$%m!|vNZ1^5a-l z`^Cu74@Z1t2Xi^v!p3ge^IwPu!KFdV%eM;xR>hHBD&Lb6H=)AN^11(w_8_{#?sFOE zk$v_1FGAG&EWyNE>zZ#gx>%OQcj&J;VNB5AIu}dH@Y(ESDB^a$yf_)*D9cvz zDQTL``$utyAY-8Uhh6bEUDK>@_e%P(zblks;wuSF+kn-v{CIFDBFz7rumAVnw9CdIvQ+I3(&+LImJqIJ?yfd65**z zh%!6cBFACv8Cih4|J7BR)-k|x;bIYSMF}BHdO6ugLigVaq)%G>qxcx~AoG~zv!+z2 z4?88yv|F!Y%Fn78E(UW+HrK;u4(<)O)$KScH#fK$o98PyR{0z7HGrhHXOC^Np6Pzv0KBu8Iy}TBx;{z=GEFKa%?aQ~V|wf4!vpO_+-n znZ>2$karzrEEkjQqOPOnD9VO$aq51{eFLjS=HT9>YcA$re(u4W^VMxZ@5W3_QsNNE z=7OGG^6UJ#T={{%aLb_zQ9aerGgrHjv)9idlGLQd11xhz`Q;`*kI|LyCt zq?oVo^}JuwP&1RZ-R*h6V62`ec=x2VX-OvHeh+2_Y1*MO)&;+THDSiUl3T8+##e#u z#D~@|{uez@r_c+ZJjtBu>mbcj;TPYA$I1+9O?r+4tai#+HW2OXdnL=?il17LN_9QD zmLx>d*<&e#!X74Z`Jv6N)LRH41^B^tFv$Tbu+ z9(&~--$G~tHEAkFGS$aE>N>x^&;3d=CbcrHBADs)GjHH}<>|(~#7QabHa`7N7$u}} z6!|Y(eF|=~^0v96K@#y1<73z-Er8UgX~P+`J)3ZI;JR{f+fw}n#T0*CWlo2%XK;bl zj8M`e?SR+xudY$pah4S+TZ%qnn|5o<9p%ZkLL5G`{xI5zaH`=|W--Nhi>IeabuB7x z^-ofP`^4n?)k=}_+9Pl3Q8$MV@w3(c!JgAc{~s1mKp$)x7P`%bQe|j_3vL=mT&I2) z3$uo&E&nRE2?)m2WUh^#W!AI^G`KXBH@c!Co?ei42G$y2OpH^u9Q-o;&|Hf!o_A-^ zp4L}9tr9iJGLh{$*zdnNXq%$NM#9wF>u-`!SrA|=cK_2IuFes+nQrHz;SUG9G9N9d zXZ|S-WOUyQwsR)$ON! zmI2UW6!cMZw-+mobtFaA6_Da8JFZR!BHS4fo?w%yg9So!WdZf-9Ox>6w(`qSxNbb=?U9fTp4em9Q3#JSb|MnPTMVa?+jE{ zMuvCWgXm%FNOyo6Ei?%R2_W#1G>g{sQ%XgrWH>nGw#ajn*#ksx>n=S%!OgVpAFc*# zzr!d!&tV6yIGQL=p4^Gp;=ZGNvmaHIJhd}3$qCx?&4F(3Zt)5;kHNE}`sdkJrU@)U z*ER+z&dvv-EP$vfU$;B)O3Vg(3ySBf)^7c74zy>&D);ZF^8N>Vuo@hTl2umr36+}z ze+T7R=^P?oQNi7P6)TcaCZGhi5^)`Sd(}kh(5B(im4?e{SfLE6?NR1bB9WaD!-RC? zEB8-X)&qYGeK;+tHVMGT=s$eese^^pS!^jl^P=pi^yRB8)0$fxrU6Wau)ifZub7YL%>x+ znkm|Sw9iKnu-`|u?-e19x-UXAEWWXOx0Uq?cUmBwbzYu`TYxc}G6Tiwm>G;ww}pu= z50X7SrOQG=_Ph0;Kj`P$wX)D_IM7yX=r_(amN;`$VOy@jM#oo`2~u;e1B1J3Uw-WS z9V;T^uC!FHA=Q+xHn^}akbe`a9g(YWu}3pOF>^`Kyo?a{EyL| zRQkqywouLRnX~&ZjrC&|=Qckmk4*|AtvI9&`d2dpJ!o{pjej_p3Y8^Ay&1;#Hyt6A z6j*2_v61y*OIdV(pr}A}80~RG5p(ilEcJ!GaRN@HhMA8IjnvlCGA%=L=j;h%5|T|E zC|MzAmywxSl9P6ykC5|N|Lj$U+s^&hLD~<^>cd@J_KR%?CHas6TE4^1k|v#A zfA?^SCZ4i}Y{y$M=0T5DIVoer>69*xH0U>Vuxgq9LfPgy|Kvr^Mbqgol5)~oy9Atr z&54B^`_tE>!UbUMn3OGeKZWB?ip|$m1FPt z^#`j!U!?PR1y9B@;&rUttdHdzwJH_Kf3>W?&ddsZn=X)dgnr{9QS}IKpfv8i{HJDf z$AYb!k;K>&tf{Lv7jyj1Jkl1%knsaXU0KRtaUT>UOBQVTg`cRYk_t+yi+{mYH5G4T zoASR~)=If3q~6p(76;ctqWlg9*Qv+hOyP?$%Bqg>UNI3>+Wu40lTBf9VU_+KfqP}@ z3k&;sWAxOribv_L$VKMrl2%bw;cKSfab$~>^rJ zwg{xw;(_k!J%s+*%fGsRqmHKN1{AO6_kL0qELAfQCcRKVzmusD!-CMTT}}!{>{z8=mh8PfZo=jxxKm<# zD@s=Y6z6Og(zc=c)kQ9oZ1*FB<_i(YJ(A-o|8uTU=;aGAXYiyOFZ3P^CI z%~m@(pMSZd`b!A)`?G4%X25DN_Py6c#-o21BumyU?Z9_dRxXW+OwBZj%!Gp0-psHX zgAcpg+s3avG#y{&Y7*HnHSuthvy=^fGpfkOzxR-I`eaH((uCoT3oR$zZ+B;d6uDhr z8*1Y4Wf2a<_;iEzp`HFrceQs%7WTZ?oTi=|K|fz;3!x45*My)=i6k|bVe6qHOWMHK zFGRja{x}FwtNG>H+)yq^)p*T=u2S{od%iw7Tm1eo9t+A>tL#4A_OC;FMZW~65b%p$ z$aydJj=4xAB^StY#6Fu$4*<}@MAx?4q@p+CR?6aoJmc{)i%N{R9cjZZJm`!?sTfF< zS)!9F>Xo3)<^Q)*u4RVBglM@gdtgYGPQ;FAfcq%$Q&+NES)=6;`*S_*@(4SMmon`B z>8nHKktPpEqBs3laoSNg?72Fn1=cJRdW$l#2cKa3y|kiY8=pF!$A|N=d)M}26l8Ll zP%c>gNckP^7!R7Ygx<=BpGsK=U4hLV+7>xU6TQz9J2iIXtY7Pr8YjbP7zFbx2{gEO7k*y9BH$wFBktqB5ba>r(3d7njEsC z{jW@t;7yo3d`vN*7}Phy$A>GAnCr=BIVU{7)uj0|E0`a@GkjG(S3b*WZLEYmG?*X* z^Ha9fjbIGt5~V+R=BA;yhHWtVi?0T})GZ6kW_KC?;Y#~uUJ$x6$MBl!IATs-VcM4F z=-BDw8`wdcov1wzZMmUc?$1K-Wgc(UT8Ztpg1OVJn7hjThi^Y;S-oP|LK4$_+sDP2 z#Vg(8uN*w=$aeju4UHNBzp4ys>ltJ}DjOftzTCmYG=p2Xm^V5E zmR<0(&F#959Nz@vRn(N;FVmO7mCr2xVQS?f+l(Uc={B=+yqfd$cC>O#2Puj>yy3dT zimQW+%kPE*gBN9d*_5*VNXCYF9O*@m$7*6p(|GE)nfl{WG9n6hWdjD7JYV%tcAvun5Op1tORPV%lb*8|Fe6c2r8{=#OGFDU7 zt}Cwe{comEBxC#daND2Z4;7K9V+W?6Cit0BfEkHK;Xp!~4)(1?8-y(D*)u8PaROxx zqGPH&PR{pAoD{(dqIwKuYK#wFZ=Ps!UP~%Sx5DARr;L4lv(yn5~Vf-ELFbb1`I{RL>k5X?E%NTV?q7Si>Q?*2 zP(P;4SeNLjFfR}C8l{((D>nJd>iu6iT{PLu(|hBgDGaWyCr*R@n+9sw{?k^R&q^Ev#w+=26Fv^WDAQ`KIZ}%6$Om43X@Z0 zsgm0?5@!;>CX%L(W0m%<5jgH8-uy8mI>;00u=rQS>k7{D%JOXMeE73s9T|4Y@4hiv zL7t-3)gs5gcK5E^w-l>9dY2XSfG5p64f&o?0h1CZxWe&p*@BXSj)6e7z^Lx!;Olpu z4(=qJWV7wt8p;xta^lety_qxn6h2gUu2XAOc`ei6JD1GiKln#0+Ef<+-Lh;S+DGg- zn7&dL3ZE4L@ZrDu=dQ<|NJyl(EK@A@W&cfQ_cftGo>X%$C(LF6%8Byu*&IXUqlAX> zziILKt~8Uizbda9a&nND%xY~@|VdGIto?yw`Ou5D)q zQ!X;?7MapZA_#~4QvA&+(bgWRZT`(_&PzijP!bX__*Px>vrK6bun1GZY|lh*OSDCr znS%#sbpi4jH^0ET9rf&m=?A29QPLRD_C2C+2UEn6lHTv)TvDBKTO&B*D;?)CIhDdo z%iW!(a&v~uHZK)bHvTzeyLp`sq@1xkqBmy`hKkLERcjxzB+ut&u*zq@y95U>9X8I= zZie3;s`I9I-+W_CAu9H7EhE1~zHH6WeoaV==YzS4ThgQ8wISb^7OF_CG-IrViCuKK z#iYgFUloWM#+LXYQE8ba-wPS}aH9TYW)~Hgw#SBBv@ht2I2?+sTIcE4dIbB_$rBxp zRXau~dZw(49XRd%*qy@*VpCiwI;-t1vT*fG>|9jkcRJ&f>8GTa_}R23fa^c;nLhLV zvzbN-o;0!MA7_tkI9rjwDc+tdLnWoI<&W64s$9=R2VNw~Sc_fXn3!%n`+h5i{Te+I zccw<0tzO`;aF*t5zb6DoRA%Y@qK;s&_l6gX)+l5e#`XyKHLh3r?uufz^jf5vZ8kCw z6;XgC(=ra5N96*)qdjJ4G38h>ZGRXs_6rSp+dlMSSMei9l4j6_Cjy|5-hXZWb6D?V29Ps@dKkWtlv)=o=rk5<4Vql3wJuKG?Y}s~GhDt$fS!2L04Z zi!(q{hGFW^+j*U9BgotRGPmd1EIJ=jK4tKCpZ=1?oXp9qpqCY<`0gB@6?9otwEB^v zqx~LPRv98#cNUMR)V;NE^LoX(R`Pu1hh8AhtsMPpucS6P8}Ouf(|5Zr)6%fS+hdUOi8{qpEnC&? zlOrwuvfnA{g*(-dQ)ZU7&ED}*xw=PFUG0KT>Y?E-76jUZv>fAheXmb62OyOm8X9nxSHiPu59fH&9_eEvctG!RQebSt)XuF*glXa%n zh5g#kip2J=UxPd(QAgfn3(6(c_uTV^U|L$;Hix^NLC*J__&6E-nAzE{Fvv|> zbsdos-j8_XDTUPKT^<%pPLbPRB+kBMTtCT`D4I+|PRHf7D}P>?J8@rL(|+T^(i!mGz0%t|upm{^ZDTy>5y}yH z11V9l^`sxeTvt9d2&~IfMtcP-ea^WyYmPXAO?rm=m1>`6=<;Y3KG8AU^4txXv~V*0 zu#sv+xtJR%tx>A21 zW3+rTv#d5i9R}ZThbo=Gb0fAex&ykToCaU}nocdcngCX9+TAXHo%Vy*5lJ=6($dO&{-9s`Z_dG? z?-vXw*VfHu&JEz8k;idW%-TrFl}TaY3_=;HTZwNIrBH_Vl1t$GWWp;sUv0Nm72fRmH2UhIn!}#vwl}2JBP*d_{Y^$?~PkY1>5Jm-8+rn>yasdDSQ72 zAJWD(5lvo~&$+oaRFWKW^E#1?!)aCgP>H=*QZ)D)J}w+kuqdJNU0{=F!Avn&uQ@xW zelt9D@zd3+@VwJxIA@!Pce`bNa| z)C60bnq-?+{q~bUf?SWV`v_C>&^j?snpEdh+%8n*O9w&=A9KCY;#XRJgyRQSAGfyy%oGc;P6E~^#ctmtj^6<90qT$i; z;9WNd`tU3~DeqNe5k|2wa{T)eEk$eY;OD_F1O)c;J-s>dZOV2wlTB)q9x=N)NJrfI zcM*?6wn5&M9DR=MU%R|_YRc$UqGm;}mFdQUP( zO3%98&Dp)N$jN%`ZRF_bK!qw(=G;B;2G=h?OgoTuE5syp<#nKC(me|;sa(ytKCjT> zkdj~B%5d7>ihZF64#hAvuKnWb#J7e;_Lz-qd1>tjO7Il}2T65tO`v*MSuCkfcZOje z!f5`dp!9o1+W5(JR8PMO?wW+9!}hN$@BcpC@{O`lN_{38v3a?aM7P6S<7+`sl)9ki z`@XlT7796husw0NJPqU4dAK=_jykYe!u)3Mvm#`l&NYobN_;Tkx%&ig2!Qd37jFZj zWp(rZR!Vs#56nM^14Qp~j>!{-pl@46?T&^WEKko0!N>wqOD0Pp4Lb@U>-75`v9= zO*H)1S+{E;?k+EFm;i2H8?U-a{`v27$ZJOrJ>qZVHHiJ)J%1%_Fdlvl+TE;=(tu9rmA}@0-5PKTy~*nr!Q3q#kS^Q9 z=JmZs+vIe^c46_kwgKhbPSCD=RzgbZb2qOr8EeiudShKOK7z;TO(=oBM4DWeV36w8 zJ-QXIq~R=$BRP!dN2YjRM^(DAKA?8nkZ2gnzrzuGBWs^y_MjE^{;ab6hO*B1t69&i zs(ziW3Bc!d^Hr6Y?oot2EX4(+vHmqFClJgciV^Z#gru|a-ME~e){EC zmvZm$KM#Q+8t$AV$Z_Tg947qR04!*CG9T1<$qR|SS4{7F( zesP@fJOS^;KO~r%J4PQ>S?Lclrg*y0hpTG{aE-R2zW#2{Q|4)l96uSVcD|m%t)R*D zd%V}N0IZH=b4w@Ku5k+0Z&uOWJZJ@F4UN?P4ZYxyN76;KD9PXzM@QUgUfEqO@Jj4i28uFyhzd326>v%)n3=K0gRnC9Dkbdw=acO;So7GfhRHsCt zc#U36RZh#l&ny0H3yT{0p>Z}hlD0Vghoo6HfM)Ejbd|1|pH-~v_llmufuDNTXZl2R z0}R29^cMUdCaKTVp`cT*2AFPeYNOfI3 zi<1orK+QW-8(4nFtx?*B`X3+Jz&TFox<{{HT;TP3=yJ8s?c922rtszb;gt`U`pbI> z3881XFa4nFRZRMvg;@`uA(I=?8q1;}0V4{=up4j0P_$mXM53$L>+)H%(OI^SGR1~R zj*F}BsOW*eq!lr{9|#k;txd?qJMCcIV$r$UBk;`>Cv}yv`E7%{r^wxwU(GtNPz(e< z)hEYLw!z^Ddo!dRU$X;a{Q^&1%~bn2vtnzrvwUUQj! z9GIvXhI+d;RuP5TyL+}FR&y4U=6H5&t6F<{<4jgBn(s|m2hT6(tPSE|jJm}eYS|Pt zBZ}gwKb$SvpE;9^>R!G5HSW{vsK^33(Q5C6REovvIqa-~Czq;EPITJMXSsO3-apZm zCbE35M5@exqpnH1$S~?(T(9X3Y&z9^MWSHkF?usc6O4)tA{-vL-qJGl50vt&soBS* z)X`+c+wNRstjWLAGrN**aWGgXP-OeRXWU_qFWklA!5Xehj-T2E3ykXn)xe*kvp-4v z|DOd;z5W~%wD~RnfrUpms(;4=O#*38N^<;!gEK%50)L{7^2yLLd-nknKuSM;jz ze5{%bdnm2&@-ifWK_#$ZQ(d;1EQv};VIr;oG`Fy^z6!}Q&ZP6w#(Epdw!pBay;h9b z2MoQvkyOtOl3WU(10%oo#DfW2k#D^e>OWOjql!wiNkt-&AU3+Z!u)jLu~*=5`j*;bXRDFdVpb7Q5OS_jSO-M~t zQ40eOo+m1nSYI$+qq`fNzUpE4vd0AunIFmcGi>2D%YPka`^KL2=11hiid1cJ)%>T3 zInY?BKuwkxwA915SKj>j`?rI?yH;Au{d(QzO~oEU@JnlM-T(4FY+<+(C-#jYKR0z} z;K$xuavh&jY+dL?6(5{1elcPCtHasM-3hO=Cw`{^o4Y@eit{%fdiB_~g5l~N_>|^??69w`W-$kM;Zv;1* z4ff0qD*S2H>34nlG!D)9x__kAc(uv#R4YDLQ_)i9W3p(G$A`!bJJq^Fyd%)!@B6bI zXXR(a?8lnx51QE8f{~J<(w!iahEt!!mLr`&7Vx)Ys44)LTo(C^GdBZ(U;oQ&^&(C5qX6F5!Ui+Nbw(kOYeC zQvrfccusTK#mzlqS#*#$4HOw8Vk5-T`MUQMA8^shvWFnK%awwJ zwWOv}KHlIEiwVha!=w!MNDZ-~DlM;wv1fk-?o_vwgOA0QR@QH&$_rKJuu0#*Y0PM+ z-L_0IXlpE0uJ-amDaWkFcir*Y1sM8s<)>)Lbqivdp56gM+!wKYDdYJB1g;uf<)%x$ zB~&VdQknrWxu0FXSq;NjLb+NqPgS;b*kNa&t&5WY!QvXt&dVt*O8Zh;PQFCHmR(!I z{~{+`W^i9F-j4Z`m8WCk@bZIq3Ng%b*NeP24S&w_ty*)!MhBhAa^DXsnA-&7h%PVL zfe2mBpu_c&0?|Wa9%{an7ejUS#&3Pn+p|jO9e|!P7_TjLcbn}e;(jJSbz-S2ePK*r zn;Nr&`j5Ha#?I7>9H{BtlSA zk+Jzw7G0U(gti7{Fue|b5GIg6TJF5o;Cw5-i=l*XzA`{{^Pr8g$}P6#=&p+abG%xA z?|6iU`y-Cbii(s8f4aV5{aGrU&hl;j_-*97*%)0_*YS%)-Ljwio#d3?C1kuUgoFMv zWt)FmeW=Oi?wIQJ`+-pPr3a?Na{tN+n3M5|4X(&M%6p=1_#x*hyZzsa|BL)eNzwnI zf71+-^0!|TbW~TH2{_`hs?|o?r$R~6xtRAvQ#ZGc=ZOuIHybyK+gGU+IS?lI=?nxFbXJPu6YCH#z5(WKfG8NwHQ)K9zqGq=auD?Q zDU^x(HDW*q5$3`o%Y`GW=MFiO=;Xy>{o?7Baj0gIJ-7H~Bj%K(IoE!Y8uf1HalGYa zKV}2gEnoFS0odxQ+?Elh3+Qdp*0iQ2;xUKK-D3KFhv{}5Z)l4RFzme&mb<2OeaClc(hAmZR~rRPvi4$|D1&6#D(8l^_}y(^>BbnW%-vG zNmA+8-M0~K&A81I@R|ceLc26QhhMn0D?B+xf8Jjo)#u*RUO@r`mHpP5Gw);e{M~+G zzaRP3TJjdf?*}Hkt zL3)L6G0}_?1fxGNiP+mChnG_l80tc7B_{tJ2kVGlm0=5 z$HepGDLFTFSZsYzC>Slgcw3N4SM7b={!HWXtqAqQx~NUh!-BTI>&-M`+n9(HvMP8! zEp={GT2?lFgt4Ad`@v)ScB-h`hofOizvEf0D!*lcMCCZ$amEET5qmKXp-r*E}C zYnB?C5V?k^E6$ue7X6i>molO(H$o&We2pOhx)H#15-H)oe%Jk2BAZ@S;J#Xnq9<)< z@wQLAzGT~W4DZhI^}1&FbK~vJy9b?;F3p*``TV8kVmXF>cZwawLrtjk>s?Yqi}ZlD z%x1}MpT`&9g(6dll?x$GNCltQs_4a@`^EKcWPX)K)a^$4JqmHR>qJp&mL8HHQ7UXl zbem^;Do^9cj^YQ-u-LHRJbBzX)@|e~SH9EHsTCxdL^4qLP|SU}s){c=NThh<*$J+$ z`^R6{Gt6on7jKE#Fn@pi((;HctXL+5l+`Yah$&OkXmNaZ@F-+(!mMxY(|QB`4-Fkn z3IQfXNjnb}+#c-JEDp|D{=i*pqVRinu2>7Q4SpoLGTq!K%9P4bk)P~iP1TFYdmq}U zsbi_gIsZkG+kG5-ic-dxdjDs&ELbhmVVv!g>BTfNyt%0pJobUboOL#o3O+mOkxVp} zTxvGrfUB~E?JqOv0^NXj=)%`Da_w;8>s zHfc-}yQ@vo*gA4c!^(6U+iv`Jif#J$3VJY%XfuT}aEzh_24Q#jUnV1)EW{WVW~6>P zmcbx<{7-EETha2UN^@#otmYvY-1q8#!nCGDToK42Aq{!oM=@5MlEJF_z%1zwo-Hka z;9A`r!vlzS61QVni@`${1JRPd;%&_Tj`<0PDFJ7ZlTD8N~a7Dzx39v>s2 zf6<@vGr}P^1#{;rnJdFS>5s*JFvrRFfd1_~-9$I+fi9k{Jf%AOlkKy&$~@i3Ryl32 zKKDuVw?CC3mrY)StG4&@(n@3?N+lx)c`H*ysKUQ>#wN%a+r@{f2~wUNc_lZf#1aqG z1(@;WKFLdP`{18$OJF;W#;qw5XYd9fL@HP~!CcBx#}d#T9YNQ4QY2_K6-nvF>Z7cZ zfU&;Rjn5v>0V9Su&$JYNvt6|N^oQmF%P2U1dDN*Xr89?d^a=1KijVuAW%3VO+6!-B z&>GZ2yffAjs-ssoG-8hFBzNEm*qDtL;2pP^%sj5jS+d|L^5E++Jt)ZA@13YQ9h#dsDAfX$6fZ!H!t5` zYLx4{BuTHCVVr)LZ-0pS;G@fnTfM{|itV@ahj0UmL{rn9&78t6z&7XQ?w}p<=srT| zc7FYWnj35Mt?FgcV6`_?y@8ix7pK?oX6eU%)C&?GiQB9Pgm8ZQhIi&kgdwhdpG0@b z*MuHRZ}bi(?-%8y!j{hcO)_q|vg62z_@0(`s5)${cq6l0Jnw?jHdrDtr$yKh4F4(pt z6uK`fwWVW_D90A@OjM486e|22^Bj4c_#gnO%Zi2i`TMD=iJRTSC}m}(M@ar3ZJi{! zpKmoqj~DQy1TLEp$A?!&Mmxjvjp?>5Tv%7{gCUFg#9O?f8- z4}3OHf55I-7o~}jO$o=ix%Ao`#pB2qw}cN780FhnF%>8jxkedqZ{>CFYUbUZ*}erzlWg;w!5FEF#KC^gH2RO*CHo(9{5YTy z7=K+5^w25l9b@X|y$rihI|}W%iEs0KS$!OF<}trXKOyctDDH?C`CTi0;&q$RKj%80 z>k-KiVNX9VCBBatrha1*aVAO%wi=PAoH^N8NWx2JjJ-whX^Et{v}d2KW!dplmDQgY z*E++UaTzVyUCKRDmrYIMHur`D?Aa^_D^pw?p>Vyv2AxDCU zFreR{O@X{n{B7LVFWMPU+&6O!vr6mU6pUu}>1Z;$cB7PCm`AMK)jO6X8L_jipu~U| zv{$>7nnC?o@%e6rExK@iOa5wNrK*z5g}zTH3$e`W=Oe1{&*!d0_YKHTQOEw)EA_SR zo9xM8wm=_b%7RM#s@0x*Sw^g_??vo>ndi<`)M?0{g;s^VwZ{01%h-$<*71xu*c2GS z@uE1`bZp70Hbhx%mPri<^Upa#vsXb;@*cCBP$)d4b>^y9iEki=h^l7AtYiF39Bh01 zNam|lGWYpnaT=e;ALC%_Qs1A({#1bSBSPDSoYe+0im1K@{U0&wR&!gt{S|CV`yBq${)YbyJATl^_&XhLCwR6am{zfw23O3e0)X3`=)wsNtZ+=Q}a*Lz=03uMbS)L1kc@jL_|-SzuVW4 z<3vd=o=D2zy4;(S?)dyWfAQExkw3!RS%SWh_*U_7$2_x*$b0__OXd8>F8$tXCsE!1 zucxaHi)#DYiYSew(kLC$LrQ~mceljQT>~RZOGtN#14ws=v~);G4Lx*seusPS@B7Dx z$Jytcz1LoQ#kSQ0@1xUJT?Muq0UMoPXqm*H%oh5G&Uy;=Kwt!eYpRj;7d3@rSC(o^@^%MJi_-fxi@X^uiWGnxik=T9*_3>4)(P~MuJ@cBCu6=6~}cNqc_o5$)nuPQs7BE}*`y?agexe0B)Uk$VyOjXshAxj;p1A-XG0lK34~ zGfBY{apF6}i(hB$(c4&%ltxl0sd)B|WK`ylu}&5|fsS5c z<3!5gyVoGwdXB05tKBl;HtQCwlDFG_#alyhyD}0sS6CNWJ{nWAqf{IfYjSi`kd6MQ zMg`?qV!pH4B37{#+@oSaq@8|^wg-Kb*OvnRsXNlB0hqZHnE=FXkRMe_ns#%`oASre zrG@9uXxcyT8Xy44LxDZ$J0KK^pi-Ju7l6-au8dq*=#+%qdR5C6T*fz~q6bAWubvXE z-lk2!PZCZqWUL7xDPq>IVhQN58TWWToZzLdOL_{Dx}-eEn>?tjY)vp0Fz!y^F#CQV z=u8rw@R4Z!u%O_OCWo~9x`+mq%Lh`r6)kSrirEGyUC>E~s;HI7gImSNLnU#)Rk-6# z_2BQow-1R@vsYyIhkY;K?rxQb5>x4gj~r_F7xg_=dV@xgtS2FQO%NBW_C5Z`=+rQV z@eRJ+TokxR@Gb1a(?r$+pSPZg-wzX)KYw5?U45RlBzP>tz`=b8qq3eEK%)sjR*weI zY%EeHs;8Y3P-K$NFg?+}gf%mgt3ahtu%tSKGnkH@JAj^c*-<4?7PZ_xKw~MWZS^n4 zp+v!RJPA}xEQ&uD!ki8?UV{nGdbA9#IbSX4nyY(Vfvm;9fu0i@A1!J`{=w&_Nc@h9 z|5WA|2-(o)3;r{-sB;>b)LBaq{2(ooq0EAFXn8eX1YFt`CK^g*Y z1#Zj`-gH+yXe~%@<39$3gQXYPX(6B@zLhyDSs(7inC=jbL_|Znv6@OzVCa6Ll#@#aXvS-FDzXRsZtz$LhPSZnG z`EoG-ZvO$km?0$Vli}(AkmOJsfxU&{qi%1mqQbF- zt|{y6BM8-->?RlQlc72_!8XY7$vni4A+(SJf5c$Z*@u6%>OC0Z;VZ6Jzf1^qn?ty@ z%DoN8*Q3S?pXVJs^&?$WRTj4+;C1o3kA>rNOrs~;zxWa4+pA~zw6U)rP>F3_u%@iN;%}(Yeytt9H!osUt88Z@YhjC{T8#+HX8Cdm#>&Qas=FPp zFac8DcQ_n1P_Q7dAw;(mVts(}?oG7SO8p2$`m!;s$+`qhIvKB+XJ(fhiva1_ml%83 zO#{XH(O(!Cewi(!>tW>F6n_&hS6jEtCa>)q1kpntOi2fbuKfxJ51T=m`0` z5bC@Baa`oL_;K9vt!K5MM>60z$qxLtUA`MPv6s&SYe@-F3TJOQFHbCk&h)X*m8EX~ z=2Ao4jla+w*7eKDvw6C4$(v-47N$;o4;_4;f5->IR+P!g*dSQF*3-m0$TuW{5p&Qd zWBW@#m3Uc=MkA(f6i)3G8v81`OnxtN;i-BE~8AHolnU=4dwXOPdE8u3e`E3@L8kwcio z2Nsp&ZBlQD^1d0VraRrO8P$0?4geosh*LbLE>%yiyDl(F4loUbD#w(tkJ)3HgabS;c1GlAS zu4Vn5@VU!c;cU?oM%tP=^u3T|<7z<2AJQnnHNKk>%GZ>BT<2IvEDH*uqe80TPIjN< z$Kp69#TLBpT;K7kndZfkhn2rQARlUvKk8=I3`zrOnzZlH@@%zhfL2c-K&;YWH7P$ zeG{zrAXLF1{F)I9eXvY}@=dQF?V+`K7W4&#h5GymE3}*|YKc{sCw^F#41w~&VNOvZ ze%66nKcLRE`V<$r+3{u7a*kXTasV0f<&T&{Nz|jvk5e(o;S%b&O}!mpF_f=6v}MNf zx?4#gYN1=EX~zR6$$*tjg|37Bl9ylN+D9U%0!>8;tf?d>cU5Bed!1-`t%){4DHzt9 z6p`8T1?X+O#*9ds>?G;gHp5(n#sNcr++NVWoP>(FSIG_ikPM*G0N0CtE<6YirkMx~ z3n;jzpSXuRqsneR=wB_;*HF>2eqA=3@k?e-0K+JVf~LMiy}F2UCB@h_cjbWlngpU) znF}<)Q!6z`9?`G+!3$y^{$@# z&_k<|nUdM%t`NnG2r-$s#KiGNQ`GOEQy2NITi4!zGP!bImMOx?M6#0Ka?-q>t==Wa z0X+!Msmu9c4(Tg+7VXsD9q65$d2bB3JDKac&)c?Qzu~t+at!L&YwP1Ge&) z*CVrz{gu_*aeeYyV-8Z;QDGDxsCVV``?{QJ^q!+?T-8oMx^A``kE9z6zB=m`h6RZT z^K`^D+1@ryPhDxVl{$Iwn;&>dX5VphuwT{;$@TsuB_1){b#|gME46XZui&T${MNlt z!z}BgmAb>n&6?BAZ)`4nqZpHzC|HGT=_GVDBH;PwY@+WLWjrP&`I$Oyd%1jBTW00B zszubV0&sY8VFwvyV4%;c0Uz02hw;~qyh3ixgkzqHleYGsMgP$kSl*F(EB7u~3 zpZx4<;olD3sUfwryCl(<+HA$p!&?}|d%dT|BBO6O!x!yqeb62a-@?Bt$cF+uQFm#r zZEHUux4X7s#*Q*pylOMjSqCUZegu*FQx_e=8&jE(8yW(e32lYzgv_MnZ;Y@sSK|_l z`hdmmfh9LgOjVbh3M~W!`h0+X0)|_zZl46=y9-J1^F@we9q4j;yPn8%Dt31Y_@v3i zWN5iHA(rFMnmmnETZhySe#o=rr(VzW+;uX)C{aq0;tJ^Rn(j4HT@uCrdYNkZ!spO2s3%9oKxbHIKgrH9Xps9^_4(7e1P>+V z@d(=BZU#Kl^`6!cfm{l{UBmZ|`231M?fe8mJy*t41U6qTNW zdAK&Sx_uo!Vs(W~^_7|G7~Ii=v`b5;YQuB#j2VL!wxFd$4F#_8`oc={!}!U@B<3A{ zN5g^oMV90OVr=E^L7rz*$FY+WoVw4*!K@`~n$ftu36s$D>cCDe4&PphS98yM%kqkU zBwmeuL$Ndi$C$xv8-V9TbHCSXKWunC%WwPh+v$r

!h)SuXjRLf#Zm0xlr$LDA9MLW-fT*5|exmCDae%5IJARcP4NalX=(}3^#pXnp7IpSiYixyXJKN{h zUeXNDg=NSUG0#-~47}U9i`C06kOugRM1Mv~6^jv?WYlLKuO!5OE#hwzn5JbWJHdYn z3-WjP%TID8sD3pPP3qU?F1ze?cnKxD91KYX81`CTTrA5KBW3Dcc#1x zN-Bk({zmUj@|Y$nA?~pacBBMXj_&IqWh;RaAvZ2cF(3Asl4pLoP zs|C?OSy^Q#YmkgF3-gZ`hXx&WFJHgAkT+^c#nX&?`zxt;mB6O`J&E{m4buGy3KFYf zgHoa;k@+ZkX$^)Eqng&udO1p1M^aW2t4SgBXG(Z4!yZA8k)(}$fp(bAGCAD){TmtU zrZ4lG4%8!R3a<2UKMRV5a24db%WFMVNS@f$f?=y^@f79-J7&K<#9n|e1pC=%KFO9O z-GPHJfb=F7dass2Iu$M1f|!^3qGs&;#QMVzg6Sq&sApy8t@Upaf46uU=1l(S_0vdb zME(W$ZPra2F(8Zku-IuW7k`&R`MN_w&Jkl5LBXVx5(z~q zGYL~aLQ$QTkbFmr+r2Ps?OA@9`veq8BAZ}N8VLwryq4v%%Jv+cyqH!HR!z-ruwJ)L z6|Qjko#!J)yGNU~fwmdxq(TEV9sz3Mj%0`Jt7>ISA@sAm8JK_XexbfFwmzGkjOQ(d zK~7BK7A8CDoc!k$R0T4dCJ+ZB?oU3XzMoQhZ7@5%v~{QW>OF8o&`V2SH$#7_Z}cK< z=UC<#9&S&@mmN5kdkU^y)EEIb2;WC1E)fkl>NB!biT8dS^gGW2^LihW7*fz`7 zQmG!6SL@#0yf3-0wp(9J3HbZxb&^i2k;KrAhtnf=+&Bl=hTWl8x1|Ec^O~z&u_9UW z3!in`#p~7*y5mKBvb#H7`^rhAZQ(v!>&$-l8x|q!4zk%~veuyz-5R;U6`Ch@&mE0M ze#`f+zBjW>%iBg-1-|HSJ|tJRhCno)q7U%Cf2hPcPPMDAeJm|K$1)|qR zCVPTs}h`h*wDl`3zE-8I6^RM}9;TqIXhr24@Up!FEoT&@{Y-PfDYZzZk{PErD zPBWxISxc{H=V|odBp*-Q;kI~x+BD~4b0#iHciObNC26pE6-V!DbtC;vu4(kk&Rmu# zC27D|`g`PcDv!9$2)(*?9IWYJ2zkL;ym7lEnO5y~+aB}kB=>F6&-H^558(79Z3Qn^ z&EY3DB|?+RPOr8XU%&-tEPAbfHzY(@4SW23PjTE;DsU!qw0lKS_U_bsOD>CTzYrfK z+-P6AZE-VE&^2$M!)KTm`2O>TCB7Jp1Uo4`u@Dv-aqk+_}-Yy0`x)@iY- z1DDv#PQPQ>#+du$0Iq`w8u0Uo3>K^vT0Zs>gQy+_8FII})_<@hcQhEOpJEv!(YmG; z;h$U{vh~ZH{j+rFrcki_7emOXVI0w$FK|o$GGZxxwZxVYpS$xSDvJFtrq>-fi!xIO zinto^%S(I8#&XKvl74g(lD114t+SmlA--4V@wcSJpyZ3xj~Nl%qt|6+$0B!b89R#WieLj%_CQ@4Xy=jry7o0?$P*3bGoxs2{8A zGy+Loc}Pybe;yVrw2GBEi>RONOQFPqUd5SHM@(S?`+2`1nHHmS5+bdqz>SHq!~bxk zkwlrXTkc0=Qu)fsyJYFCh!Ostrz2^Dbe9avYuP2bXfIaDA*4m?TqzLpQ8~kY=+o-7 z`u+A0Ph0EE>ZpamS@cod=fuY6Bk4P1N-PiExw#Wa-EwfwN%s2+GUUtb-4#8k7#I2s z@4iS#qQLXl(-2ew6iv3w@uMoj6l!!b0GpMQ{903Bs;y6F~pU2p<1d*f#J-4HChoAC9uii_RZw8 z>UalE>kgOufjgJ)fK>X$=R$Nx2RHe}LZ5|rnE6dI5R!CBRB$cSJ7cR6j6;%vE>X;3w z{Ix52KZ;C6>z-hv{opoy@2&bVW=0l4(Cd?Oxy^Nd&`I{|urUoyMq!QH@qK~lgW?K% znx&x~;@4U(6e&eVYfuQex}xFLau|>Hv^+THJMMNNZ;zA{vGoVM%e;y-_+GJFSI!Cm zn6!qK1avUvkvs*?qpsa+h&%Mlvp8JsDVM0BF0#x>{B-C#x|ap(viymADtBAUCX5;C_iFZe(Ov9#yUR#yQWQ0p z|IUOdkVr%@1~Z^Od*k7lTtlA{T4BUC*vh>YLF=y(O$GMi2AGu*G7oH$p;!NU~|$$*7IB)Se}d$W>0E!S#Qqemx*bMMUQ3niz1dP7f@IiqQA zTCxNjYH0cwz%U%2w!T>66C{5cE&{cWoG#51toU;g@E16C2}16|ZADV1wYNe;;)f_f+ABi+Pz}V_Shz1-b@oVb8kl zxJ*h3%QN+W*jhzGi#xQXI+1G*laCK~`BTvjZH($*^z&UZGyp2=RuUuo)f)B_s}%gd zlKHni>bFZe)`)ktetefJ&;$xcBW35|im40rnAmKvnt`FM&2m9VD%+kz`F!2&LLUzh z=TpEl50?zYRrZ$Do=mcqGN|lQU=S-JT{lqXzn{kR@?tgZl@aBw+_SA4J9|i zkFK%Y=zBaIoP?a3keS8GrOHc|8r4v*<e;z+u=TTn1-u=T;=De2O6$jf z1_0BPmE8H8)DEuvbAlW z_SU0Nq1Cr7^A(8+G*Zsi0+y8&ES5_Da$9FQlE%k+&2D61}7lVIO6lKRh6b zu{`kVvM#m>Os%{YO16117%c@VidhaiOAu+#!_fx-8k~cyKzeb=Hh-}@0W!qjKLYOS z5-wGRHoW2xBaYeQJj^39?}JssEgNeR@phon)a!c!RXBCJE5Qdb8{YF>{T+skj_-^t z1>-L}8=&jS(d~YP9(n$HgBd)GVeefqN0y_;J^|Z*sKRYe&sKy+HKiPc7B9sd*=-8a zG|`N#sa07~(Zgkg%W%~VJ8J)=ThLHO!PFbP6e0e=&0%S-7p3O!(r@A$SW`;Ewo6Hi zX42?jO&jdLpImU|&)`ch9xFP=Ht$p@Z$S`k2mMN1W}C@Bw;m)fH2luW4Wk$TJ>K`B ztL5yDet~1~N_0scHsd;T8DyrKqrbBbnXeC;{_J$(zofnv)jEfQ5QkF5$^{ zuuzyl+RzIg)2YfVTu$WEAHtvn9W69_dGu@ML{ok(Dw?}GY*)r}0q4q@vHN)81jbJ- zLwA?_4kvjYCe2f`GPe$IKf(*nxBRd&)5|n9`AK_SfLwNcz)!e|8UX0HEu|q6^A8s_ z-1jSInnwDejK!-*d+xQ-fduP{)L$3g85f1PniD64_c`_&W%MRFJrNBq4gc$p76Ecz-0 z{8y`MbvLCDd&e^_+`Epe?W_q-Rob_r(CN@7EOo_^OCm|bTVmJT^iu3T;mK#I3nXQBtc>sFFtMG9)o|#IO2|g<)$sbn^ z*B;{{l;`Agv0c81bVrNSgv9D<3mB|GJc3W~#BFd%81;8nSEoJR7DS^eO%K_c0TFdekHl~7?c~H1ySNqS<5G(Wh zJzLw`OO22(ac==c`7^|cRZir{lX|I$35(~Y)bZ262Ty9Xc<5!2gWjcOVa9}u2koj} z{wF3(61O{5bO4-N1+tD-kL>n?eS3CQjLU&l+g4(54a{LQeNuqep!xla1lI7aU@=BM zZy}&AfHw3She=0=jjt_M6@x$>YbcV!;`vP4hJ&^}|8F^CTn>>}$Hu|}{rFAb+kw|w zmwi960b9QT)q5Hh>D&ejDn^b!)_h~rm+Oiaqk3C5vbdBb+%%}}yK`&xQX0Tgz-99W zURpu&tyy8+Ib;)sdy0V9J{#oxbL!ZWFqw|QOzg_Sg~=AqG}<91Gy$Y%Nz<;ZrG&eM zc_;}}&X$b%X}Wnk!IpNv<)u{{S$fqz@>xGeByvITmkmP3XqMW%A@O5fPNv*|?UK`T zP{693wBGjL3e8x_X$X|~gF9lpeZpp>v#kBPahLcdQJ5lkt4@`p;9B>9-(q9p@!Edl zfwLL8)(wjoo8cC&_2nvxG@k%DzUG~e66;5cS02$XCZ5%-&%SyL9)0P7;1TK2PqNrm zANtChlGZSYUd-f{=liy3x~qk5uq(E${n=3CtTjcEgp+?)5%b;3AhL;}I5>ZcOA$UC zGfO-UiJFgGwF`HhBr^YL1%>jQS=2Wg9ZuB{lw`-UUt46CrLNA zn--*4WU1i|i_DitKe1saB965F@wRQJ)2do}4_@jV0AzMM8OF2M!7+zfU#~Yh#B$S1 zO}9g$&2lJ_Yi&haW-!zz-`m>vtr}guqfphslw6mv@e^fl#++F9=Z6d?XfdVZd$NFH z$l>S!%LkjkQxQa8v49ZoYOD`i+R9vs1qS%dmq8~98kgV9%AKas1yZsUs>j(H>h%ue zxX6_je_v(@VMR=Vs6>L+6N2J%xfnlaV#R6qy1LPsK1fCz8*i#cb7!R#;gVc#rLY2k zpcmLN!@lGj?<+2!pl&TF#(@}WTtcf474y3?*3*VD=448&B7Y8abBJ}7YR=k0UCBCW zim+?#7uCbfTI5fF5n8IFG29_YHyr-Ujd#6`(^LUtVo&8$DL#`oYK$F^z-*Fw<`EGn z2yGa7xd=XK^4-xv(66N%_j#M;A8`K(1qHb`yR)n|$O~DfzEy_qDqNmubKbY{P60sJ zdE)XscsP1-pIwVfu$hH!BHU;>IMRT(En1gQg?P2jXJM0Ye)GCSSmga5V70==N+ig$ z+W6}*k!WB~kGkV4-F7LW3(*8LG{p3MJ4EbQs+1Dn?XAm&V-S zQcOeOAKu&grIP{T+_1N31TP0AC#a#&cPRAK*a|%W+@?(S>$L|r(N}J+$R`LBnknFZ zvZl*0z`*GJ9wm``p0$v22wQNc%0-J1nezE@=aE?`J>aE?4>mS*1KhMU{TvaBs&#TP zsc;pwC1|X3544n~I0C|g3rqkw9a$S6d>yb>4-NQ0nvi%H>8EI9uz3PallSjB97`dJ zFY1YVFHZ0{8^sSmO)hEOs4q)!W(DJf8$j#W4ECL!Y0XOs*;9!q;Hu`u8@`_urm?dA z8m(FZ@PY_i*%5#-Qp{x@hDfL0UMhsNLHr`Me*7i}vJK@u`*L5wm0K4hq2PmDPA|n8 zQ4XUMeKP>hxE+RO3Wx~(SWwCt5xie9)3&$8UDJ5FziIhyaLD3LKo z8j^73FitO1$Cz~5(OxFYo#Z}-maPMk>|Z9T1z@Wo zr#~Hei%-!tqSR8AyhClZ#~H3 z^NP$)Up?hE|1uuzYxv1H{?iw>-C~XeA}#f=KTypU92**E!AAb*TO zld;UCD0UUHj3}EA!PBpA-g%ZB>;U;vnk-ObD0gI9xs}_$ahtDZVPa;P(|-yV66j#Y z@B`;aF~ZH)-iM^wk)rAB5f1V|#cLyxCj%)dv%95^ntZn-=u;;%KZ1^)&H%6CWzn+*$X90?T5aF6(IhOMd-1;(r8BK>)O*^b!>NitN zlbFeMvLQ5h_D=bY!;;1)<~>FIgy0fcNB8W5qab^dhobr18E*4ZbL9h&IJyK zv};HlE{L1kzPKj8#x{>HYyF8m&;M`_cW8G2(MXwtI*l06;c0YbBxgwa!+(Eei1M42clV_hBw0==i*c@G+2hLx^85!RLozOQ)HSB6!3KK(y zy7H*XjI;@lNjqcP?}`57{%-8Di$n&+7toJA(&ugU8AwG$KM}WeD8Lt`z_I)irC1i( zCrJHx9~Y#uSIG+Bp~dI&Q?Luf;Lm6t8w6B!oeQ4r@~^DeBTe=cAdLz(U4q&S#@1Lr zBr)q~yI;=B@V}tn;3<2^n_Ju>VALE^T0B*`zPpEVN1~a}4%iwTTpl$`i5&@3?m;^_ zQTbn3*&ZHoANr!S9IQBMG3K?_^I$j<(8{x zVcfUxY^_DL$M1=$RBaib7P*#RjX;08=sR#-eknwXaM&N!L|u8kN!kl!>Zh)}>FgkO zRFoI(63%~oy-sXvf*kYuStwSuN`5iBIcu^A?8$P@iUL#6>@ZXpD z>O$mi*ZKyfH`AWvs_BY^rLqKJ;`B}rOT0L8+PCNe_qHbOZ`z_X&wXxnE5Hi6u|vB6 z!D=drZoA_4bd}eL3|bT-0a8~AM`LB(U4qUh4vjXK#{hO~U&OHh`q3alv9(PDlw=`% zG=jL|b}Mb`_nS>U0;5r9;wN$4uN*y73Ft&&jQB~zoQ+;#<$r#5;6M4WL_o(p#`;ER z)bb`txyt!4tZ>=BKBkSgo^K2X+)q-tiSA z@9N;sV4^A8t+ObM2bJjC8KC4)J&#Cpd3(AVYWCDqiV?~MviSM)7j=y-$NXvp)(SPE zEDdMhZ#>$2GBQ0~pBzPHwS=&(9GnXBiuCS9ooI>FUvU_oT_3oS9YD|PdEj}?SCJ{AdnYhb;(>CyfSnIH?FPBLHIrYZ1` z{y7bNp9e$4ss!2;%EU5!^@REj4V}3Dhb>HuHm0o>kFbN=E$4H=Y9(vXsk{m?(Tk?f zq7sQ0^|j-{249qTJMdv*X^II{*mmts=@mTLo!bb9RpB;wk-;TfM@pOpZyR@%{s5*; zg6DU|L|Q};yuaYAj^VLyaFKbFX=^WKdLgtU*(H-186GGo-13KwluvFH=_I-{uvj(~=oznTi zl0y1>Pp^N&|;_@uRz$FyyML75ca)O7*n4-dJl-}05U)qjx|@lElIE*YIwA14|j4r|g;r;fr5!d7XVC&`>YLSEPp zygk2Z+Sc^X4vIv|N9ks}77kT{JR3Sz%J={zZ;v8M{`QD+3AGj1S*JQgW~|Gio5hnW z6!5AR?CMXBf)L)8g}vz>_6%SE?twO*Ip`b}g9cQK|%7F@87_G>Y)-ycMF zREtMMs_cNx@nnmgVm`~{h)dvr70|phogg;!R{j+kJy?pXs-00+?&p(i&h|CKMmKci z+R_b3?ypJhG3ol_mDIlrn|OUMXMMvujVfEwY03IHK_JC!QtW`@zZIrUcdZBe3@)`9 zPX4IsVmt1g%_kaQ%Y`FS=NaIXKiq^FP~*FE7}BMdM<=Z(hnB;790JivPzm?-s!#jDvrHy1Qx%Nhs_9fg+lwdm=O@#Y z&3J2uE)4IsqjI78@H2D9psJ;7a*-4%;`D){iv*T~qJKmPoM38TUoZG!zxd@7VW&QZ z)oOhDYL9^uQZBEL-{}-b{DJS0;XHxt+GG~WbG#3e$L5Edv?h*=wfIkXFLQmdrHU@?jTEHF~g+CQSsKH8yd({ zOfd%M0(S+j;+CRWurnO62ecD)W*18>GnByI$&+zV?g@r_Hut|&x@j1oW4A7;nED>y zp(~Fg6%i4Io9x8*QTLzepdPi$cu{rvu`04ePB9qYZ}akBkLEJK*y)H^>pR(L*n8Mo z4~{%u!njRYES9^!Hv3%h8ni+^qCSQG{7X)DHBRlOT;_UxxwB>wNVoEV>g6TMR=guh$tpJrJ_n>o#%#5MQ&XF3_hieuiO>6iH_LeL#}EE==t(DD$$h_J<;D9)iC3uU z02Rr4A!mwYY3i|b4+MXadX?`8CO{D5qDAs2dZ_7wPIk3RytAesj??so{YCQ4j61^&ccA~~AU zKf?lXJmUbNhDO8MtJ772fHesmQhOV6U-K3BB0KZdSNtn^@pv1pWNW& zUrWVhf@7iv(P+6&GjBBiTjc($EpMv8%S#n>SUaO4RF%)=om>!2$qPEniiX@@+F8i5 zlHVl#G0T7_{;TFqGLKE*y@BE=F9>GF)n;PxLa;GSTY}M%j=$5;J|knAN|wouxA_0z zj~RZKP<}NX>N5sTf!D*F;Nhbh$03*9P5i(yhT%-BGlStp3B&s_s9)%JXtks(T9BOV z4K^&kTIgR%{vZDrgOPT@uI9tON`cc)1VSoIqhCt7QI$3 zrSD3exY=ehYW`Y^<(6Muy8myb#*gyY|M`af#~p=Z+YyP#Lt2~J-R#Hh5&_lNQ8u}$ z>Gx33_s}sZ@o|~WQ(uGnN=Z;_61{>b8B?XdcbReUe`ZMdQO8y&fCAQ2v5vJI`htVq zT*Xi|71t=|=Q(41w^Qj1Y%@&@6@Caob@e|pUS)ee~ka${%f%a3lqfFA-k5 zVZEaK>FS@JJ=bGQe-;9zlr4S&^dg|}*~UfXsb{Fxk|Kx`FQry*x0z&!W zsoE6r`UR7sh#`V=0(2&fZ3m@bEsigS4`#&1-iU#>V$wCaa zeEpvMyRnatqC~R7OHvj^=7DnBONT~3Md3p{{5LezQ(_8-lKiJ2?g~ZRh`@gud&6NM zU*PLakcF-0P1Plo7x4R1`8^Az&wsk&*~gDM*diRRjPht2dt+7bNrFBgng4fj6XHqk zn*2=k=SLG^t{1>_Y(xK_h9gsIkDnyLM35Ph5=D@CAOB&1epxc2{DkBA)zx7@g@(HeR|&T&0dDWnjX&n&lc0}dv+U#;0U2Cm zi4hgVQ=xvoAcSDn9(+Rn`rmAhY=CM)y`w$Q+Fv)R`6c^fx!=F;0k{~50OqF`cM?H= zJLvvf=ZYm>W~efjIc86?zE*tvM_Jv($1VEzS1&+nU4F`pK{bgrHQYYX7K$FC>L~`8 z)37SRb1@u%9|`TVC=$VcqjB^Bd%y3iXPXXu2$sziAn6?kk@LioM{q0x%(wtGdM^<* zA;bTKR{J=ai~h#eL?BMx(ZjR6%IOIFn6qtQo5JECe2q9!Ad#@ypk&eBOy=AZ8 zL+{V${rlc-zw7q9UDx%GDCeB#>p32e`+A1;zuX#d`K{Rbv$W*wEaMHzW(7~8Mv)>a z{*H~Y?c>~e@6nk4?a+G+fhlSh$;^WVqEkCjHb!E2k5jH~;}Xt~4N=*R$y_<-6;Fb4$I{8&)B`J2$tf+*>( z&Q38)OV+lww!SZFj~+ex{8;6!^iqCd;hUa06BCnHP6CIOpSN&uuHih9c%Y)2I8j(w zSU){&YVY3DdfU{@%)VmyXM209Ilm6OdRc9@Ar%?HStnhlB(!mnrhSF3#7!juM6iMr z)m}PmV>49xfHCSp+f1t^b%5bVW=6t>zMK-}TBCvqhjRRLe%$wYqBG9jxpSv`6odZr zlRM&hY-Z+dQ&Y3&Hs*CWPQwN+rU7Ybk}TO-_&cY6cC<&fJ?pw4&^pBfqgPQ=i@s-L zhT@NAXh8(>HK_OizEW!KRjbn4HBz6zJzA65eW(l9KXrZx1=Armjv!N7p>F z(KR&mW^jp}!`g!DHXn@(j1uM{i^Zk{rNJhz*H)CziS8V`25ToFc`Hcb?3%>OffAuy2y8GX}Ob*oZQSD##S zn_XIZW?@0{LXi`B{M7MYoD+3mgAx%je}cRa9lDy__rH^XzlIg&t|Kk#mwoo^mJ2H3 zIRoyCCX2N6Z|@%_i*ZvwGh=%60CSs+KxnJ)$;-NHbm4fYUTGOi)?KeeMdrpR1(7;z zTa2cjUV3I`++<7mWM7d=X3yNGw6wHJq5NKpw4x#;Y5|i6Qx%xIFk3FKs!9%zYry%s z-83~dm9%8gzt!XhUHGIO-|Hr$Gky;o+(Uy3?8zjPQwk&P_P*M+&K^#7##GS;QHFz+xy}HH+5QhdAt=* z!!P6)nXlN3+*GNc7Sb;{Ire{Ml@5GFaW*erY$OfJ`+AW1_gI{K5i!Gk6Zp(RDs!a8 zP`XFi2K||n(AZTgRQX6}Zj-XOtYk@Sy4Bx+tl}M)J=gd~JIxs`byRNg~cR*;J`^ z{@B*F2KDnSUI}6nnXi}B%{Oe4_!o7a?Hc~)#1c=`z5ROjzdt;DE&g~_;=iYvc!HQj z=<>gZoA1>bg@0G}I?<+0CTNbHR32_u#&}aM8-)($Ecfi779~-GZabc}_`^=RE(b+R|rv zh+hvm+(f)ryvgakR_icJ1Hzt5#h6m}4My9lO^OWp1Y8l(aQeepsmitHtNP{bCzCYN zq>qfx{0vU0OiXrN!~8m{_x85X-`Sa9jrd7=o$m6@n>Vp|=t%v;dG%36+gGK$wl#-5 zytX5sGBV6Y4?X99-S#<{q~GWeT=7bC$!kZBCzG!*;k1w-?Q_jZxJ`ubU>$a%!*2bv zP_STb5@&FIIX+C=mE0E2tJx7JKRoGf8+NObe+&1X* zCzXD!P5-E{atR*H)Z4qN^6<}G57zqLy?Z!VpOH%Ujn0o!nF=M_<3nYR2NRSvWAH}y zW$2onCXVF+qFN4Qx6Qjn*nQokYzdy$+xG)(YP*TXAnzGF&;0QO*OA-$Nj(_~$jVi} zNZt`QzmgG;Y_E>A%qOtM1J!p~Hj$P46|fhPO?5<4LE%zf_1-+KwXL;v7Y3tlV{B@g zPV>ucf2qWMCc)KhA*W;(9>z>`{|Y?Ic=F`a!s=>yDXA9S5L- z+}!oALER0Gw>wvtD^}hYo$g2!mQhtzEhB1zIy^f+KXI_Tu|H59Q~f>+yXmo8cgaU_ z#ATxK{K8v4d29WI*fhgG=B$|ndk?d=KJtrp)t^s(K~P)K6ePg2)&PZK() zKLzVBRO#+GT2{3;pY7!Aymm6m(d?`&0nX=zn307}ct;|O%Iy)){XN(DUzy%B`^{Hv zk)aZ57X4>5VX9;qGqL3Rx~G}`sh3`~%A9Jir4(W6Pfi?@=x=MNHp+`H)PzU1oP(hSw7^2!`64bz_UixZ~XS=Ha)hBk%4Yr5StQv1`edVhFj z#F^k1)Rp$1KYyxgSu;&p+{RN__eiG^bGO|&F1Kuc^1XLGE&QKjedhaD+Us;zN+?&o zwufDjwtie&D6rMk5X`8$id7i`5eO_ck2h><0mF=z)r(rJTv0or5_CG z;cxluFT2*X!TI0uKkHr-d~$+va&o*6*$p+SIYuIO>yT zeEy&28prfd=mxHDZ8e@^9;PC%qw%DuEacTxuUy~GDH#!P8jzYxcC&4kHb3954;5jb z>l_g)(Z2J+!Hg(JUM}uX0aqIyy;r{N{)kxH;re`b9+#kC1;R0j-C8>ofC{#iQ@G(g zz~1}O{csc0*8ivmTGkKNxp!V&#m8JDZj%@H_V%`P{h(-!I&QV*`D|vdTL^o4Cy2PH zAJLL7(A#?-C9TYDNEsoLCvE$`12@DaY~ZY(^TD?tO;f&|o}R9urIn({{4r}@cqzji zp_b2x`td`$ew-6v2$pV}d}45-7^8QSjNq_8U0^ud)%NgWRY(nEo*B`QjoKnj&>{Ir zmp{E6_YYxMsW;&|X}J$ybIi2!j!sRtqp;7SYM#I^kvjWQmhv2je_1AsUies=bN68` z1x&LVm;68V9m7~hiooOsvXE~MFZjq`*efq*J(kC1_@|+wrPG&QAAd6$2>TBPd!5&2 z!qsXa_|E}7+1!B!tOiR1PHOFll5+`=;@ik)LJO}+@Wx%ESW|{Bg`{#MxN`>>so`@vP>=j#n5Jl+nFd@U^wOE&~uHW*O+E+~-3s}o@ zjk)4DY2U^fQJt%;wl2?2W&V+zcL6C6OJ2a%1{qRO1=tVT6FLp=926TG%zEs`dJa}- z9}@{2jcog#F8R+PfI*LM*1lwllMTo*AxT2F#Kq{E-;=xeONkVGe1B7m@!IL zLBY6WF!S^0TALDMs&jF&6mo3^Wd*(|S+5>mCu}e94FI<{M{gKr9$~*LAeW`v!sC zp1(RP;PLKZa&1PE&yTI&6fS`Yb__qdyGcl+NZo|#BDJ+OzNlqoWdntM8ufI_fxo=G ze3sAQ)zXr6KwzM`r7aVx?JhTWXckJgE7W(`8 zKIP@b#Lbxx+3>1mlLMja`1&vQZ){ldZNGk7&KbxWjElg-7nZML_`!7~$;`=#Oc!Hr zX?^Rm0;jNW(`+9z@RXw?z3J&0{D6nBU=$P-vkMCi7RAa>wOg8-&&{BbAHUTiv*s;; zqfSmve#y%#C@yZQt;M-|^(x_|OZWKspD>Ul=j5F5;ei1bOs;MNC!v6#AaE?4pB)`s zLP9@({2QMnt zP|q9#oPAlw0xfHy&0js(Oo^mKQS`xqP;_)O-;&Gx!u;Ig;*E&M@XT{%PC>9QkahQq zI7qDmFkkkVg$EbQ{w-(Aet7TQmE+S3^Yd$qv(>NAQN!+jnJN{YlEt#&==dfye52ni z$$oPBBAMiMlAw>w1UBK6$h8;!R@Xsb;X$o=RADEwT`CeDGrVcT*7qgQeTu&mE8Db` zW|Xr;yCiYr^4|VFKY|z38>5g9FZkGGCd6YO^+%F;nKWc7v6b6?^pG(gX!# zyOvAAp`R_dRl?I#ki&aM5QGXEB0M+(QBRQM^z`_rXc72~GlXQ4O*SP_vW&OM)+<=2 zX0g!@1pW`*Z++h)dv)t0fYSS(wbsNQAkF1m(bSyxy#GXF`T%j_;vl%FDzy zVV!cP^Qw1ow7pB{zDja|B5ofrNs&z5cmaZLUXPs#P?ZN7wZJ)N7lXLXrk+9J?1{X;_xsCJNK zK+yX1)SQQx7wH@6uN!wF33}vu`qpiSGBy~md`yS|=Xbz7rwUvbGBJ)`}rvxi@Z4pzEBqkc7$xXMu{t?EQHsQ~Pl>coCjhH_$?{GqWYUm}E zzGEHwmbTWvX|O$lMSzVR8<)^D=cJ50)%HWLv{)3A1U0UDg!rqGOV%xHl7v2L(*!vu z<~esEs>!I{ri8Tbq7_s}A-a|&7g(VyvnyuS))$d$wOz(7Yo)_*>hIpW=hy$G``0fC zAv!bru2&dTD;{Vsdg9lNH~JU3-zj{Hnol(M8av=0Re$3YM1k#fi`gB0A)MnmU$=`ii~1DJ8JBf5;H^q*9NbBE)}SK#Th7RV5e8 zjDMeEVjM)IZYQeiM}kk%lx5}Q3Xrc~C6X1HDGv^B#HYj9GrxRcJ2zp)bKdPg9k;RM zU8{+Q-TnWe+|Wt>UsRpzb)^5@!2fT=AizI=Aq3I?$JhNozbv+9jtKwyk>_2)(>PJB zPGbwUMP4G8USwr)(fzY6g&qP%YZN!Nw+~84uzr|)4G~E?PTcOf=;y@~VnfxpxMjOI z?qy*S934##O$`KOLL#CRW`g44;?m(|L6M|3>~~9Q9u#fw7rFr#9#j)2A*`qWLthmZ z|0W|SM#p9HGu51gesy&ZJlJ*X7d9Q{`_0b#Kh!VPPgcAZ)e2iCUn3{*8@y4cGi`P+ z5}ZXR5~iO%TBZ}G!yY(n(_&OG6yvh}1M6Vo$Zw^_`dhqX&8NpX0W{kb=GgXih2*~# zn(xCwxYFyu7r6_-c{&F@L;U^E7WUJas-{&{B`h!7d|<~=ev23wNzW^ZQ4wf=svzt? zJiepl%|+-3c$qz>0qZbc+On07WMo{SrM*RrZ&1`vMK#-E#X}k-K}4AN<_)3a(SiHC z#e&=N?o2_y72dbOQA}H}B?c74aVY%H>8YyFG4^q?KCqou3@Y>Ji=wY3L*O^;V{8 zmChy3^4xn+Z*ow){F^^-&r{DoN$Xj(vYoW+vo9OcXMLPuPTe3b{%31sVz$8eYjN>t zjL&FDo$o1;{Xb7FEG*sU1V`NsT7(~Sl}Wyod39iF?ck7;aVfDu{Q+Kz6B#HUBJnlO_QPz5~TLES>Nk8GmX0cot% z9E;TK4O7EMtaj%d41p2)P2Q+iC@hit;ctYC; z8#`Vi&CQQOH2DKff)+n11F%jUJ=!XfeG^W zz@yW{U!u~QByEPvn+663Fda6^WM_+-UIHGssy^1d0A+>9wTpy=g;fbtK}?B_ zb50^-bQkOqcw#n+n-n2R>gss4fJkc&mueg*n=cAfgwe$o7sQ;j!vce1t?k~cw+}@U zy7XNsA)F^_Of3n z2@M6%rKFO}zDbjn+6td(5N6>f4Z#Tj+}YtP&>&MCK34Am$W!FF0rmQ2@->_Sw>R`h z=;QNvLbVxBZ#%>X^jb7k3;JhrQ~19`g-*TdaC z$DNfmVaK=3mjtI9Y;9<0=(AFL={rU{D09dYC+j9;Gq!;k&z9?nT$1bg z{;3D5kHay!WO7bb!nZ9KGRX%$+|7@q%6dI76lpdsY)-g%ZawROjRs6iJ}{NW?i3sp zgKcWE@1{kcv*O;rr-(;sbH*)y36E+u>2%FNlpTx>Dc^1(VE+rui(4E0{r#ul zd82IyWf>a)W&X{eDl8Zf3f(ScG2nsA`qGctWQ zr@nYGR7FjNQ-r4(_R-a=3seEVr@nssX2gTi)YLSzaEOfVRmJrYwO(2RVH?SN7i4f3 z1x4)^&^;j`iKkC*7HCvf3dgi{jp~2cd#bLko@*P~{!BAgzjnzbW+BkTQImp_BKAY9 ziKAu6V+L6;C~Zmt%gXpwR1GazTR|U$P7cHYDnV>wqN#^RuoaIC14&wD<`tmDDY2c- z2{|T_1zk$--@nfvM6AAk{i>*>sYzD@Z;_tP*grCIorb8VukSG@6+;sG9v^3I=mKwF z-_TTQxJXJ?VXz8I)Av!-p8$FxZ%EB;*Va!zP(mt$mP)X>tAPzrH2v#>xc;8;-w)UB^`mFW-x5sc&#UptCez91=hypit)q)DMTo3q@kJ@J3xB8y~A2^41j^E*v zqyEwdKtDfza5acGSglw+RZ{Xr&oppC$sPxm5GM;IMOIdp>z;5Z_hzG zr3=1&3+T6c)WZ!*)Z;W|1Xc=cW`GE9!b9)!@qPcX&c&V)l`};l73Q>j;oM&o^xAer zoLs2OnKq+M^667jDFMNP{w1%iezWKC%~0!NIP^`utllW{oj8t?fc8v_t`zmZY%;nY zEp5L!PyQ$%aLvv8#4u50meALyFR>Y}H&TO+m+{;NG2cyBP<`!9L?8e(HcCEY%}vNP z=d^=?w&Kz6@{Ac0adB}57M2%A?;k3lZzX!I-v%Q>oCk#+D9#4CISODw?!xos3@#t~grPoap`T{Q^d$?aF6K`Hb zE&?Iu6cjAsa4RgR?)dqKJID=J_U&lGduUcaPD~RiPdxMoj{w+q*f!yzO8eA4yr}xU zy#X7!%NLNno+J%Dy?Tq{i8Z%XHz9_SNa#{w$;sE*)Goj&1+5`RyM)hin(+Sp`#>eu z062iz8q%slm>zqFf`ptL`P5_1?zMFV=H#IgIbbR1rSM#Sl=@x~5-Bf3H=W^_^pEtL zT38SiSwN!>3=O@=Q}PWSjgbmp@wwFyFFV-O3j*K{hlSmIt`+8cQFFjuGgO|J!z+x&0en(OOtOp=mT{^`Clv34dZD(cUlKdbc@I8M%-zP1@mzW=V| zjR$q*rC0VEF#;Vl zzo@98*ixO}e&UR^^%6XNh)fK-qLNZjyM?j6c?8hRd-sIfU2C?5VSYg3@B*wvNcd;c zzM`Oi@kH;qe_s;Qm3n~HKf>zzooHjQ06=gRgw`0Us;YDEJK`Dji}DYE}2E$vyN+r(O4W&F>BdZBwg zJwT+o`um}0d+m(VU!kV{R91Grs2|+eORCYTH2e-{qEg5*n$O^Bup!W?())+{J{4t$ zgoP1V@my8Qj)qn$M0W{<>7X@xcKzy~-&gVL3_h02kS+}~UWJXLjWVsWUmLm3T@zn5=&XsAQJft}skZ1r5l(ay&*GWSf2&PJUF-4PfA zh=K28-Xm_~{yk1K{4X2E$KXf<+vtYU4-p2apM`}#{V!0KI$*iz!cnb3=b>frk2)J6D69M@EnL5 zpfB}5NpqV^TOlS2yhQkRu3R2rk4Y^~i{5N^PS41IUuMCJX>M+Y_{PVyvN$IJ-4BdL zFMFfO+4U;FPyc3A5ZxfG6C(!fxm49O`<*#iF%~FqM7s$@JTeLjd|TubB{*gY!{0by zr7yu=Yn(jKEobaqMa7r>`SV!cnsMwMQ-N@&Zs)HTl19;G;i86!mD8)63AEfiJgLkC zfGa>gi3p+Oi2VFmvGW3yroz(FT1Rw^7_?z~FQyD2^EYEy^;)8%RbiOsHa2M$6(}ze zG`L?>G&G-zi=zQC=jv88Pc@#QrKN?o59BS?*jT5`A#Qhfcikz@4^kF)VKZ$9*|4y% z#3HC9sW!_uVPWs{8m6Wg)YerR-2(>7JtvEGRFp zPm_tEx^g8stvGsXD~v<;xR#Uf&G4-dlvX^y`?~$a+QeyBc#`h45QOaxyOOG|+;x2e zV`Jc>(z@Q>Wfx-xR&GY-N%LOz`FzoKyIfn?)ZRqJ+unrp_c99YV zZqph&B95flP0}E$GASf7P=ptimrEmvC?Iw-d13KuieJ*YAp^#Pnw)OG%ErzPaU_7H zR$xMRbt(De>uSWB**(XJ8ElGD5Prfas#(t4SenMp_T=`*IBn8zjN6;*f;6V*$&y}%fr^&a(Azr!NW@=V zGC7MtFE1wR2a6g;&D_f36J)S9H}6A?4L_hB#J>=%n7+6;aypxp^^Jlor{FztPO|!O zr_RpK@5bT6k8VWZ7`V6)ffbRJHS2K-)&5XdR~RPg6Dad9V8_qT6UfNOoDsjy$P}{O z62g&qTLBv+k@9DIb46ZPptRNj>XVTXZc&!9zJB-8B>f`Jjy}h!$oUZsCq*TEA>3KDm2uZD%T)ui$yK!6X9#BICNZJi z*9GP}#n;eeyXOcgMGoJ9fns54nVFl}Y*ElT)a}ty#rjv%p(DDax(XN;;#1Gf&FdC6 z?%oyYn3^&vm`!bv=hW~j1!VvMe*?s?`1hcDM7CqUWA6*m@ropcKW2EyKz*G$6gKmZ z)lT9Vc0GnX^RKQ>UJYg}jR}OhW~MIhS=HH#N=v^-C<1 zK=$7$gZs~b3d$(SpYOI%_1)54B}%!2MMFpDMzlO-Mun9vaDu>=nVT`K2GvX2?vkpS zy1KWDi^O3Q>*a0N7TEF8sHm!rZ@IlN8Z%=mZYY>+S=PWUEhvb%%9~qMUHw4Dk(G97 zX{gjEp{WTuD-zebfx(>+B5iGLsCnZX`>m7&FMN%ZHAXdBjEcMa@(~ur zYs4S3%HyGLN48-VWf>=eB=}cPBOh5{m*N%m7hZkUhsYK6v&E?dsAN(7($mqAz&Mkv z?a*FPCXXin$?@|ZFR#=!DuD4M1paG_dZ`E2*$?N+!-j2Av$8Bkg|o9*d}@;FZ3-}6 zA__v6N7YX^O|B_wYCfrcTVuI;0wGYmHu+ym#q@3IQCF{8+1M0Tmi|Nl6L466A;mw_ zH!{*}(T7v!FUh7anNG@WvY5 z$449H{UA|?M}{TA$kS8%KQ8N~%s>`5W$EIrJufF$SK|VW9jG`#k5WOI;uI07)}FG< zJQyn}D|^C&pl;C+J=N3%^NpM5J}BdDXN~KwsjIiN&?Ak|5ZdqLXyg<|`ntIRNvf~M zJ=uuS@@qhCyGBNQ=nFpuv!b5ItLgctsSJKnWHu-nbf0KtTH8I;Df5cEK*^r}_3KYS zZo06Zj6KT^g%z7O!HuQl&@=J!B819^2t`~YBPje<{xa(`w!Tn5H}K~i+z6|2^dS+RC$%iyl|_n8eWHN&m6yJ}?E+S?4}dX>{iaLP!5 zK*s~{M<5sq6b^_x)fGB+3RmZ{%)Gn|MS+p!LnE%+vlSR`js|85_hD^~Qbp#)3p`{5 zyBs<>=YnM{t65>R>WX;Ry^>CS)s z+h+otG!h>&tpHCAeeGekUo`Z)2bU~VPEL76LdfYi22mrJK{0(&#u9^r2@*Yz z_yMSb-?cw*mU%G@q_C!OJI?#}n?P;?#42Q(X3rL?Z*Cjd;M=lf2npq;rn8X5eN?x# z<#LzLq?J*=9LwCOzXccKUc(<9)Me#AD*1SG!|=mp~hUj0l{m*7TlG=XJqI4w+$EaNID z#5hnxf>M~LHY$AM2bWvCmlm37<8C(FsNub6S$cH$Ht?7eaZoD<8|`OmX1a=pi+8lk zoIA}8A@M1WqltYmt`(WdU`qmkSY4B%?;0Id01rweJSIXm0Ez3@)M2O0$^uhPLqmf( zG0G4e*45nuiBzQ%U3=Z>i?ZAuRD1J}AM1&-u?-z%ZnW$E^~t`he|?L!cK6ROnV`*Q zB)O*_By~coaYPGC>Gg1GvjLwk0{>7-K^d74 zkj-yU5xg%VgG3&rqMNPmIwG6%ssRB3ubEgB$pO_V$oKqsKq}Xkyf7_D*C|6#9`?R1 zdY>$$Y1N|=k^+|r{GUI6&c?BsWllY?Ebf#UYrzr?CP#OtBKib$(I4-CI8u>6Xk}8U zX;h%$-s*5Ci31}GLJ^Iy$GdQmqt~KGYvDp`jieRXSV9npk&7qr5sq+APtQ*@Q1r5j zCGh#!D8TOL;udPeTRHY!UM4-$a6KRptkR{ltgJ{0N&6%aiUo<9jJ4S)erEj`8e+rb z=>q|Yu;cS;A-J2?8!ml?7jo6j&5R?SE5ameXV!*AqMLDpAB6n=tp*gK%x&(*xlTYe z2-`!iaonp53zcrugirzDkn^Cb?u?nfZ8OI{tW5hRbLwJ7k0eh_TFEvA^f%bj03J%c z$^wrMYmTE~Xcerxgm(o5q#b4M6?7|a#L1TNd>?USd$#xDfk<9N8+Hq6?rb&Xn&Q4# z(jpExT|G|^D|$RB%IC63#eWBB$8$(apo-c7}Eo~abEDf63=9~gK`^%SNOVXlfr%8`Zi-uHaCbGCBIENJzhsB~TQI|Rd~Zfq#4*m(re<-m9}ox| zjX4O+iP*mc)!2%M)!N!x7X8z1LydzdBLs}B6D|f%`J?7&p@yR9jw~Yx>enekjJV?L zDuyLo)bA*%7FXh;hto4kb=gz8n27>UGar@NT3Jjq-Q!SJRn=whv?$gBB@-KeOD((j zgME4y3#cq6T$&JP+ZjU+ML#mL1O*eo^#LIK&)I@US2!rY7HhCMxj09(nu4@HRkc0R zV8jC`;<>HuOrvr5_?jCi9Vc@QXrOl7X<}m^M3Ny|aZ!#+yZEb^yp6RMdgE_eaH8S| zv>ZgIAAfR%MTfn9 z+|GSbW?Oo0NH%>!r0Y2$Dkru|c~lX7@bId7uFm*DndsW^ig!57Dp?Znk zK4r!R&D`QtUx6_!7z{6Y*u}Pn{$>QsC23UaEA$FeOwSfMol76>tNP2}%78)=6)q|- z-$S*yVrJt)pe(qh386cmKKOBkJ?i&Q9ecJCw4{mY=)_VBb!fNRd0}H|$?5w6E52j4NRXT8a9rm`>G2*DGr{LWT*-!$7!;^(?A0~I& zbRKOux|Hciq$qv)X7u7y>Lfn&P7oyhKnHe2i|XgD{S#WJBVt+YNjmzIG3q3Gw8&t$ zzLaWC4GK1Zzs27%r6q4}>S92Xf~4mMc{60KZbc^d+QzefD;~&K_=>$Y;DiX=HDW>% zf^$z8CK^+k*zf{}pQPOI9bKtOy(p;)o-kM%kj{Za=Ohr+G_m7Vy}lds@?Dq4S1%tm z6nPRx%F*!xtyI|9rUwYoZbD6Oa=XP{00O{))v)FPQx_Zph!1p*_`E_IZB8i!4$Je= zFn+x%29{W((cJ@|W7@h?IH=xo?Xj{QYtP#_Pu2AmAfDxZUSCypZO;pS2SQd^StR&p zUbjqQ1LuDPOMhTLp>;1r#pJB5-3Nj(3%B6j3gmf1B_$=#(kT>(WuaFxGBblFhljDX z)^}H*vT4zVKAJ-o7e5sgTvkuFRZE|tV?Ie09hJhq5S*g1cty9u+iNl#((=* z1?Deb>&qG3Q(E!bP%Sr%D$`ty3#jPAGj#l>H@0p9b%efFpz)?Qv7k_c?TlaDdaY7NwL&uWE=kZC_L%IQ>_PCzP8b5ncaV9sQAEG7-A=rd;5bJe&|p|UKJk^k zq@~J}qZ9%?*e{I#U;?|HKx79`_JzHMFz$6a)xWoHZi9^d!x?`WG)Zh=5!Aq8Q}GA^ z{)dPV8DYba42KuAbM1r*uIdkf+k!v!^iesWa``V8l zN$rkbI=%!s$26b!C+1sY$twtGl%_A8)N!B)31B)ZXL7H(5kkJs!7?OVbno@U>k7uk zlNf>zI96Zs?g)Pw6f8)6SXRP-BlHzrn zRU3T57zIrBt-M)&zZFh3n!8*e^xx7fg7TJdX#*^)$p` zQ?pp&)043dpa1&kQAn$kR1#bskemQT zc|iE?>%%F^s~~562iz4to06HUsk;13;8~tsJnof%}g^HSC6zPEO99T>YAk`5y%A86hwA#=4O-8I2sZpIOq^ zlQKF?jqMCxs0hdjMBgAIz|F7x+Su60=WFm5NG_oc~!3jz8Gu=RwFc1YpW z;^tQ$9T#ou$vNm~CeEO5)(a1bFAzp(-MDv(L5$>#l8O3#vn{8&XroNAOchf@`%^WdFP>>4 zb-e4g`cArLoK#@!(V<;Y%MiqHDC4|1+4dsjS=IUU$_U=|M&3jNOyHBWaR zoK?WdU^8Q5KM63tPB*U{8c5N~ff!5YqtAerweeqyrD@%w4pCx{iH(a(Goj)}A#y?! z_x%@eFI>1VR9+m6o|)X)i8Vtfby;z@J}dfVao?kgJv-aFmOZa^X5;IiH87_#&uw4cFg4 zy9*E>Zi0zd^iC%o&DA&}x}_;y&%2jgA{c^Nb%-R_4&C)@j}5qJh|G(%2l$(6xar{Pp_3T%KcOgSd(YHzlo9J9yEtl=&r_~a zh&&P7I>26ie=$(}oZqQJHb4V47)MJ8+?%^eTo%V%)?pW-L&Bd1@8pp;a4M>jE0NV~ z>>bFwex?bl_Ci$ic3Q4wYLx<5>fW~Kor>30cw2A{cE<}D5jNvfxk7~ZIt5Qt?dY@F z;L0|H*)-LNCD#-J$<^8tKrN?DE3p|*e=NRaLSQBiLBn(gJ7IZNyy+5+%`T$ z`J6kx8H||6|M3uJYr8>=f6zLjP&1mUoJmaJe?G7QiL^Y>2CJ#dc{rJ7hn;KWIH2J= z#KshIjX}NdbY{rg_8i2M>)EPlezIqaGUE+DthUawB|TAw4)JU+RYlNitTq<1op}J_ z#Y}}ov2;ey^@zu~Tc3ym8?NDlw5q0NqlBnzQ5r;yF_o)29a>ZvE#WD6< zbtuKAFvChHnOuRJ24G~rZZU=!?hJLiDJdi>geb%#8I(y$J63MB0%^RJ(E6tIsS2be z3SvW@o-jncYa@4(6W{WXx=QrHxy-v?#JfSZN2j)DnVHWFrqGCA9&z_M~ugFs$W<)Mc zypYBic-OaiEmmAX=n?7LI{J0B<8M&h5%T3ANYD}DA!P+dOJ?BpD&lsQG<{@5U};o7v<^ZWCZ>ZJvc2b zE%+}(;I_~_{9bXt9b2>nrqz~dfnh&!J@gA1}u&H3EJS~!t^|7qi_6RK0g$HIccm3F=cWd)02m@PuF+OKPPr(c9BXTL zEf*F(F)gQn|{Rt3Zk!T^xeZD-Do}-S42~SsoU@g0#1xrW#;Y z4*gEUsNfcfotwQ4o#WGHtp23u{5IZKt&5<~74$76d|~U6*ok-ib3f{#RLd=V6F<6K zZ2^UKVYMi|_oO5#`(y%}FR`Y|_EhH{u5ifoRc8kO_*#3bR*|=r z*ICFWmOy6c%oi^V!Iw3pEdF$qv^vwQ^JS%>&jFI^_q*O;S{g8Kj#0VWaxJa`v|2e7 zg>0lDl2=62>f( zq@<+495vGK5gGX%at&W!bi3MS(fG8hnc3AmjEq3SQNvn1qZi_zH#<$Et{Ux8MI`no z+|Hq9sSHB?14~4iDg+OR`CyeM*B}OQP#l+StK~Ut6Qdxq`)XmqQsiJ&95SBRgQbay z561^d$M;-UMzAAQ`=7I>-z*GvcsdU0>kjgU@0PFFCgzPU6qJ;-w6>miT^@nVGC|V~ zx)PL|(9r;5t8ZhyHZ?~ovNM*a=jb4vMpCmkd-F_P)9BIgDA2i@%{_hE8bc~VywfVG zshFki=iICNhp%o%AX{`T$WztmI)m4_3&`rWZN(PvlZxSKO3`C}Xu$NxQ%v&wE26Gp zD<0@WpCpT7i@Xe_Zmi`afo|GSpIj8&1H(GFBcCwFshh>8-vh^x*p094<82?jN?DZW zIvKm-ku++ju93bOy8ny!@Z0DLWJb%%%Z)7N+i;de1$_)SXKx1Qp(^wbht-`&d1<$G zrv?+zHEPXI5|HIx$TpPeG%vXTxzlg^n4R?~P5BX-B-}FKoyXWlt`r7TFO}x`F*n9Qg_wOhW6}#{TY9)M!CTMcc1m+$CzZ1>m3MZ~)=88medk`wj>G z%Z#Qb$scK4cz7TcOFHScaLa)p5PV~hps!Go%pYzO1KOwG2tVElXAYKS=WT_%x^T^6 zGN$GLxs~LzcUwgA0mjLU^xnm&sL7{$!*qUiZ$Xz&&oJu)wF0|E5jpkDdGj}_wzY=T zoQL|)zBkXZZGN>6YIs;zUS9t7qtu%>#?KXNg@S7g_vgBv+qtBkNcgl=zzapMh@=4YJ(C|X~jK2MxG zrFGh`?S0rR$@c)Eom-SSzOAa-QcevfkG*ovFi$zJrCy8jnkCj(v*Yr zkN4DP%RAssbM3*w%N}Rz1GdVWvnvLiwS{bzdU-wGIeK|F@!v|zc{P z*WuCU=jXp>Ya={&nw^8=GI9p4ZeaQBmefL|i-XzPz-Yx34o>cSmlcCr!3Nfve9G9^ z*o)NEn-Ca1e@^^M-sm|t6U}B$r{E@%1o@USeP{tZiyzJSNFHFEgPU#y7`~NdfQyUx zFKZ3>K4~x;#4|!z7mOhT&W|cAcWDS8rz?Z6I3Id0P%4lLNq=x7;#v~=dU>3CA% zxHfsgrQ%)NEx>ru@o=A(51lu<(t}uWukIc;8WmuswTk-3C~N)~P2U}lW#9ha5Gs+8 zWR`?Vl2o?JE+aFQ5!uS#!_MX4@bw9uF^SWQpANR=R zygujgIga-_7NJ<58Q|KW*rXgWJm(n~A5R}rgJSb;mr0EFkv-z1(?}qy8|LtKA-AVh zLP|W5aIFqWZ`&WQcJKlNUhvU57TN&!E?ZN1hZ1=2>g`44c2me{ywJ`1Hsbm~E*Z>T zsg`ktdS*8+1ma`gq|L(j(Ycpx)*=dCFZh2M(4i63e1&!fbO`=vZ5>#z4k|}%EpHbI zSy|{kA8sb6VJgIONib?34JH0Cq&P8J;zy!*z*mXp(6d~v+^}|HL1NTX|KoKQe=SN8 zcG?rFj92E9Gg#Z(+YvOx9d3V#*01uzU1A_?=zjaC3&UQ&%1x~zitXBD~uErtpWiN%_f%U(3 z>wJ(TmSj8KzTJ3T2o1G_&2$>4le1^3swn#>F6yr@+ea2wc(e{vo$47STuGmH`9r6@ zpM}OaCQa*noAqh5n)s(>hR5B;yX1FMU?7s&SZb!e|54I&_Cfut!;}Mab}TP=dERgPexrBtK(I%OEG#2Z*M5W0)#7;)y0YMAedRAHbEh@aW%3&g8( zU`o^`Q{w7OuHIMy?F)1-7gBxAVqRz-1_U``dxUyROj_%x3!Wl6yj35rCl~J97Ai{G zcCtOS`et2#qXcpR9`QVZ8&{a))x4a&+qX-;>%8SHotV%0$;M7H;8UtpMuuZ_b0^`Y ze&p1zs9hFx@c-g4rB@SicQ!P+>hNBp?BUwB6j_eR(t4%6IGhspMj&#bm*6VwOt?sL z4Q_4KvY23yr$+%2VMQUXU3UsR`7IM*v8RpcEj2xcxjBjYTh@Z4~XfGy{{)H6?u@1(o z&8#k+oOfNo-0J9cyZfB=o}JrHSNwe2(DipOB^dbY_ip%TD~59oSa(0_ z`tC_7lQ82T!#9)hdU`~euI3o=C?t?ZHJFsSS#a~XxmmLGnF{fLCNcI$2WtklBo6oc zUE#Xj-Cr?YP=8;(C;IWy;_F(Aq1z(eCenhA-6z~##eRRz$&Gs?YLlVI`&zAz#>I~i zx750|&v{qy;NvK|q1(>dksEe}Aq@<}G`r3lo{=%wAw=&yGi8++JiS}?P9b6L?Ja6y z;de@Bu)p7T@9_k!%*z*(qDrMj8|QaW6h@7}$eyufg=p@F5O33?E#@1r~s%AAt! z?Y7P1Q~SH*?7F{3-ry(JdU~>VooO`nSgFK-F}P5%QC+WnUwI`Y$T zTZ`zVwvLEX=T3HVJs} zlK6MvRdaP!DA#p*6a*d+&;_6l`0;Arc5)D%_Wu^Z<_`3EO^Ep$mv;9}PChzrShk;? zHc};xUGTM9;l+wx#2q~)Cvn}Wf!%S)!lFpZ*0%eqnVDIQ0}n1!z?(2tmbX0D7mU1+ zI_xYC+)y}L04p79oMCt3ZuE2O9sD;9(j^Kl!qdyPxp~uO#hS&MeZhO1#l$7I zY{spLkBT{O8Y)ncSXGsVY9SR)DbFyXt?g8;>nq*NGS33VazjuzK_HhhXgfMP2ZrmU zd%H{BiiwS5u>RxZXn!{24yOj{gTN2*hSC~AfQi;;KppV_9Y$#w3o}Qm8*QI^; z3rU=5n4aFz+1Xj|qLq;fDU}1wTuu%Sp&74cSGIn$DmC3tgj?9yM4IO-OVT6zF#&-j zAN!~a?RwMNtf!_2FXDa0eFYkc!S@4XhLesq@Vr7cZ{cz)#5}(q8qt`H2(@&`f6Rqg zCi{utz2B`}`lndP9@SUhDV~}+xVnDo=r}y_eg!(YkL#J2akHeQr2~ohvpN=6X+|+5Pw;#1Ozgig_v1)1|8#%NPFgy;;f3WFt^3F$$LhzjlgDieSep~123E&t z>W><;^0w$Pxrn|n%*=mNRJX$AeFuIJn6}tC*{@$=j=t$nMb{%wMDQd?-@cH03HcEx z*=gJ-S`NZHS5#DV{p&=EHLF*tm%AKYe!i=$KPl>XM|Wox$uV4s*8|B>5HEW#kE8>c z3{QCWyRwwdDE~?AN+7?dWnpJrLV~@sd!4Cm1WbMCFfFsnxLHHsr~(FU>}Ek#lm47v znp0*yPK_w_>z~QZ&8_Sj6S!{@-e(W59agyj3~G+)+SKAi`c}1Sv6*O4ULpn-$U5xEt7DHTAT zV;Y$S&s}%54ehh9Yw0@xoZ@8+m`f3813%84LVpLf;_tDshXVsQV1tNBb66NRcq1Ua zvFd~`hjgN+w05kE9XMjyukM;bS6CaK#U>WEWJ*ZTEZ>IV#AB8irhng3s;Tp2#_5`o zTj{N|bn~A-e}XsRKDr~#Y-(|8h@E|mags`}*kz}DINr(>-7NSBic51LaO=llhM&A# zE;w2^fvlZ#S-JzQkVaY;_-2o?q#vtz?1pa3@xvw?BP)TqCpXjX-cnNa-C=cB=YhhHf#_zW5F zH_Hmt4D=FTNv<#zfc3%TgbLw)XysV|650O!JAy|4<}F+C?Lya#j+gZ*EbRKfQ(s<_zI-`q*3&?oM7tC$iF;^p&7SnwcmHN6s4|HZD&a8yIM%)ajRW=ienMzL7Ce{A(3(pc9sZ!fQLqO4@c&#_zhdrDERNk?iCT4eoZvyr`n z53)tf5N3-qkgMmMXTM3R@kQ53B`SFz5gUuH_eGq)84V<3rdn8I-Ud((W>@~5d!%_y zk>0>NhU;saN)wy7MCyTHhd{JvBaZ@%INUrUxOPvKSnX2r@%nL)aaM?}AiuILp}y8a zN~G%Jgv(U@l`zlV--O-MEz}=8v{Ix*mij%@NUG0_m%GpPuI9o?*q09<_8aI5o4B*OU3=SZOrKe zM8B+~n(=Wo4u8}>sFJ0Y9+EvOaO^nD-0)<;l?1mK!V}b7MIzNCmWTcq2t8hh5PUir5F~5Q;dkbXS;j%#OHzjRbL>?O!Ac?yMPD*QX8BnNxYS~6%)dn z%B{BDXb#YaXV9ozrSj5D!+V0id}ZmFsW zvpiExi;Hc=(*tFqGU=#Ijpp?7;V>f;CEbEk?s2`Vf7_9%G=A$QSc7^aL+%D)=-0w( ze=w3|7iN8m8+sBzf^B4Iaha*WjI? z#N%sr#r540=0k+Txy&~1-IFjc1X#ty#j&@NToH5VdZvi}GiHTWVuH?nb!o^n4`#f} zxWk5~rz2pND_n-KfB$QXXhql-)Zmob_^IbV#Hf95bWU(yMAHDZMi&dvc32%c7|{*nBWcM8JM z=!YdbMpFh3dIx<3lvQvwzR&*m&x4!NtS)8gD)DN8cq6#Z-GL%DY0(?JT+8UZrJFb~ zy}y6SO`7SIzbNnu5_mJ}!s@0jIiWIp+%13V%>o zmETs+HO|b;O!UG*HOaE$M*K`rB#>{&($b4Ly;TEK_CBs^xuz*L?~LA?dYDD05~*f< zH>BBV(OoBBDk8h}oyBDnb&@? z+;E5tk0o7taQ&;`PPZ@yrxM#s*^hB(sVIE!Zc1DocSGAh-c>A1TtDas$yT``f-4Y6 za7**m;~QH?N)+-tOl@7CUMtisX4%%Ao}P}NHzK9YT0@|tYv;hyr6bHsCQgjqLI@2Q zz%Zy;T#XnF&^zaI&kC{pfiA+jfPB6g85sdiKo^l_^(Mc3z&;j;UxD>Ov)cM(oP%E^ zW+$ha*RQ+!!ArH~YmIlkm$h|_z@#qF@KK0H!m@{iCc&Shs65wySJiJ~c9touwh=vL znw1bsMpuPfmlxUB4LctWahxaGZ?npAqn*LRIs0VUukjRbB7 znp|31%94gzW_5fZOxZ%X>;3ImB_8p9UG~Y&ULTdd-1g~t5vM!m*%=Z zdNf<`_>`v^G4JX|e<-kXboAL%`SpI2d+#Rm*QO73+XkqWRyB>&f>|-ouk7fE_WLX; zE$;eg8R!$>(PI6-HNiu5d0)VP;DfW%1lA7VBPB?B2y>H2PCh=iQM6}b=hu&WfoFZ8 zEr4zYMom3|PfJT;@cyLjstNX>JSk1k-@L03#lO6jd?g>40ME?t6q!xAOUzjFPiml`9DC%rn-aP(*q z#a*@1#>%@Ko0tv-YUV0oAT~A*N5cWgGlB0zC-6bcS|m5``Reqtn#GJu}xC=bUo zi)VCnQroP7(iM5RZB^Ccs9u6JZBAh;s{r5s|q?3Xfjdt*%tuspwDhj-Odo)sSe&D|-L_FErK0GVe=s`&g=bMY3}ubAB8; z5_Fz7a?LMhx~0Wk(vG@uy*$wB3e+r6h}jNf_G3!y_V}nE5=bF?u0K~aD0w#x#WOCm zOPJc46J=65N5NL#aC7-~>p}W!{?L3Etz@EweS->Sf|Sk1}SI z$*Bn+#nNuqzuwxe`78_lbJPNS=Eg}ItmG$gk)XD>_EFKFyiTGqd}#_4Dr z`K(!0#UX`_`ROK*G`1g%Ra1M;6eZ3lyHkkA1TH90v7Or#cI^X+K}eOl!PfBrLC5uF zS&2$&wKrDPxz*(Gfm|aUE1F%r=WRdc)p?)i-ZT4VcjVod5&HipCa60j!du1J6RWAG zrZo06fQDvk;Z7!v{XAa7R?M}hcC{RuTqyMAPcA>bN8|agQ+jHi(ILt=nJFzx&ZTB* z4YPDLd|oBx?K(7W!(5tr!07}LKJrGYsraSRjqCQ8_AyMC=qW3+2o6I%q+!2>&o(ST zPPpdVv@qmRa@@w&1*{WgGk2~P+8RIOtym%19e#4*beB5?JxA2{JG=NeEhNe#7Ll- z2kCWTdx~KWu2e*G0FcCBwE1Zbw0UT9Ky7^L-eo@Y_oa5)&ARcI-_2=A>ggcvOP}c# zDf)kJGvm~VK!a3$0|IKc7)c3 zj1jRm9i?w*h%m*l_M?3>9S;HxE1H*=OSa}To99cqPu{`c)0TScrqSLVmKmSFe4*LY zZMaZS{z>SehFgJ1OqzITM-e+NiICsb%*p&FET_GtIo0hadTxI-E|vU??#G_z3or!a zQ9>1fcn`GQQeNY`mcM7{aMQDG>nB{j&f1?~2iu>43k={c@iv<6c>A7sBm(E z3e6>>?H{$&(xJo8&90y~ctrEVS|>Xv2e7Z&E6oDURDHqLnSij6L5dD#D?>qWqC25_*?_)jP@=f>o{@O5HgX|jqAsZuQT^|nb?tf}Yk8s?nY@m-ll(cUMlwrX}(gp43?hI#!V zybA#Tm>63H&Q@33@aK`c6-`78iY^E!Go)&IXeW!2vuV&%DYU!b9wfOooI8$*4h5>| zc&{wxnbLuy!p!dsh(i|`^6SOm=2NWHio~pkXFu%x3mLCa_@h$m3(879J*#z!r+$3X z<0ezgruL7ju1hetUxpH3(0yaA;$z;JRm^N<~z%#RroBeY@8!$1xe&WeVq zU&_2B$9(J5pzM9v9s%&K+%ODMF`wD>6X=P&8La5umAE%Jz4^urLLQgnM|zCB`7n4bVQkaywN z=nuSSz^j`zC9^^5MXp1tN%&B6B08xD@}zsdwF9}mNn>VZ61)uCkwp@Bd(($ON4#;Q zrelJeHQv(iLJiS-Dlf!xww0ks|6Ld&F>vw-$FG-M85VXlE6H5Qi&7{*m(sI8s^Ge8i>p3md1KH2vV~Aq zwfKmgJSof1o~C)YbFgnt9Ispe9hZ3f(&9ka;i!x6Y=vnktL{dEVEknnLv-s*{O$QU z^7D{~FH9%*UOqnh_SdcSx1WVo%M964iHRPFzi!z!45pfKw@{N@sh}OoY=ck@dc~=w zRp`5#nw#xQy8sTsS{|Cw5wB(-xcB7A)|iNP)eMq%Z^D6y;SUx=tM`>aNp;dt4`W_tBJ*u|u*akC|$mrQb$bQh({pEnmH;JN>?Qi1r%Ox++b5 z?!E7drP4mKa&fpVRwSHRYRGPNk&eOw|Q{hTUlKOxF~bTIUs`pFZ=c6R?gA@6)Q)o`x8E`hyTmV&kvcAM zij-#6|75WJ!Hi1lX@=V242KUXGAu$Yv{M%tFlq2;DN8Tc94~smx{r=aT8^unnCQFy zVbCn0mss}V?xRk+PMz2rb|0~lYUSnlzx^M4&M+f;h1^;PhKV}HG*X^!Nxh%^vra~~ zeIIRr-p_OAby|lX{tE;2iVNMz+3?(M=)=&1Qz=K>WN}JTLWUd54sKv@J zhKm>L@(g-@Sr<&Mc)OlI%Mjn>7_S!FXa68015+v7SvJ+qABPiETb(bQ1GDJN&Uh!u zy3mpNP`FP;K$?xS1Rzkku-d*vL?Aa6sI(f$(q&+cd8c@pzx`@o)>zXtZAZZ{Q8zij^Yx;?z&8>JTH56aF( zsw`p?H^w(bH9&75uVWW6;NwB}iLg{%Sh@X+bo%MGWJ@Yq7lXo~5UYO2(r~kATwy#6 zgMD6B3{%xMsboG^?dd8cTXhPG`zTwKC=#2SzyD#Xyi})P9G@uBPF1J+S5#Ws#A#+5 zoVPVKd#)J;aZ4vA%5jsu{6Xq{%fFhw{41%vT=Q0CxqNfHD_f(`*cy@D&Naf%WtgJ^ z^v~1!*WdZ=l(?6+!9*A;%S7WJzv+SSj_09EdzEVM3^V(JYDmSY{N4z1k`D(h14&lm?PV{tQx}Pg4Y<2N zxFh-hw1hG@eQlmVC@r0$Bo`}y24pH?q&;7*3j)+%<@Cjz&Z?mq`alJ0$~0<9*#{AI znU}qk4t6`7bQh-O4q-F~5a^m7(s{#)YH6zvqBo0g(sm3Tqz`Mo`3?zyxQ~#$G%p}uz7)QhD?a^;3*gd{G0VGS+zmT`sNtB+&eBNB_qFwKuH+czzIk)jy}H=^ z3Uf)4gi@1Q`oLuBAqHi%Q2_w~i0%9GWz2@-8BG=OW?`-+=HG&s>+YA`{lWy$Lf**6 z&>xSHOs}VN*udEZ)!W^pZX>QGdQThItoS^&oo|0X zq-`G(^TIt){)WomG+eyZ14fiRy>*F~d)y~__xtXD)cCi~G_Pr+;`qME2MQSb?$>6r4(sx~-6M1p#i!88HSY#}`uggGd4oX~NF#Kg%7Cr`PfF@%6d`@A6(B z-}NiDf2PCCqQ)c~Y9nrX3p=~8W|@ty1ECM)Q*!9{Ez8|~*>95b+Og;BSCySn*WJFK zI3{#V!b^A$eT&M@hI>V03Jlxyx9ArV&JZUa8&CapN=P6$@D5x3EyaP9AgaP^A8s=a z@7JR)+QgP*e1$pfkZ8BHr0v}c&Ch?eDKANV`NTt6vQ1Bkb8l*Bld`Hjm&>cu$9A?H z`W;1a;Z{iP(CvR){UT#Ne<@4scv)v|{6SICz&wRJ@&J9|#r^w>MQvW{7x2)u{-9zc zHq-fUZ_c6Ow=KQ>)#aMS5pIU31}x0ODR(^;>Y~p#eAvW%gP|t$oXz#*80MhS24R_2 z5jb(wI({~V?ovNZ6R-KI`pejuO`T+E@|X+NKXXM&C%M z@Vi1c2=5ejUne&1XuhKGuGg30b)LOo$m=Agt*RKo^KIne00qU?bFstfd7Wi@ceG=_ zAQgjvGIvn3VoJ;Jw#>^#Qk+1tP&)B$Ud`eKUg@sT>sDgG`Q?k~r!#ll{Ji#?Ti30U> zvlJ%DgVc+QYoXf*T;1HiNe!0VtUux5Vt{ z9pszVaVw^_IxN+(!^72g@=(zCqPt9vrQLDy9RtD0*CCO(8w|@LqAnDFfz&uJ88q*D zjBWnVko&G@&(co)3j!0hDW|=mvhqMo+Ko{6O~m^ko^p_J?W0qz6-$TV=w4jgoFGGd z8X1Y6i8Cy7KUdg3@Mrh|^d{YU5A_9W(V*tNMtmIx3)jGaoiyF{>=#RA{eDwa2HoFM zaJ6xyh>?a8&IfQJQ?vDqWqDs}mbN)z)dS_$pc-Gs>ugkPcGD$Q(A&nkO){ddE-U zSC3EqmoEZZT9I$BX3-lbqgy@55Gd;OJFSToZpP{X)Lv;N5kcDLWeBj?qfft4mH~qLewLqw7SHP@nzJXrnFftlhRGJRK=3bl@w4 z%jC}4b#8SSizj9rTwLVE<9S(VG%|HLYUkM0oPEqp8b}>oO58V^r#IYvDB5^IklIMIsTklpsr+=eO=YH7e zZYl|eNhslgllRSC8oD~8zglby$zVXKTZPfa;d3d*W~IgYf@Pe?GnVJXCLD{$ZmdEf z;3{+Slepr0=^SWH)YAQ+X+<8>XaP}Dwf^W@^TyY5tyAhf^1ZGtdnVpyP_3hU_{rnAdhVrPr!zbV~TNt$dPG@lJB7NYy_;AJ(aU z;b1uREA4-uS1An+!`N#t9dfXwWCt2woj6tGs1HeYO5E`J#xqIMep6T^B;3gFuS&#Jgdc&Y)G|opEfKkhC-5+ zI59YM^`q+LGh&%@!^6D9$eqaNie|$9c>icjiR&CujSmT?E!lp9o{vtk{7d?4W95bp z=GfxX2f{v)9O#K7?rBSRgCmJtr+2xvBYMJu#FJ8WF*59Avn2ED};FZ zv7NECADzF|Wm{NoM5&(EIwAt2B&YC6QCoyAkX$>n>4hY`LcA6x=(h*d4+=u%YAP%X z#_65gyR7j&EiCQXSLUeLX#-A4siF=dy##3%FN1vBhf-Qc9G#t&Qnh*G>xE!65n%=h zrD-*K*cuOZZR5F#cbrTeo05_3a8qL4PcdAjL>IirHP3-mo*2WIK15yb`%|&9tOOQn= za9#TxV!PDJ4k6t15<5VsjLbbD5lw{Y*A?|CzLi%KxZ==C?^u#-(fhLAvh(K^37}8N zME};?4AjGQZ=8}SO4SFEEa&N0udGyBuOlxWaD>G5K6_D8=t*6Fy~vRDU0s0C7A9og z1ihB__y`dXw2(lLkkEVIiWPvigST__*RQ)FtUkp4F5xrs4}FBARVt{*4q@Q{Obg|= zD?bNKyO$%7^w%kI%9@sISuhu4HlsFxaDR?;hWaer?OSiHa4o&%Hld-DW%T?^+ws-*L-9@a zYoA+@#456kXp(wzdzi(c_d0pUuRu8 zyc*~;6m%EYJ_5E8%@36qr?hw7*x2i~^~JWMP5D>Kq`81Lz0buW6J3AZ3P0V_ZgXen zhuGazwni%nE{7Z^5zG7PMO!6;afF10O}H-qShA4HEiWrG#leCST|Cm5aQysFZ*Xo2 zax>H0w;BasShZzqk!bfLG@n1{{MvMc3h#|x{R)WqS|e`&fjcu~*KaT8QLr2YvN?07 ziewXVe8Irsb%BBp@+FIGiY(PHKDDK^T9J{E(E~IKQSi%ZRBcjIkB*D!Uxym&ys@^9 z86>Lu(uxE>6PAzp<5NpKqSQ@Gtul^RMDUz*=@03I==g$)s)dCGctC$VdhzP8X1yt) zcm3DL*ZtR-*`gM*|wyH{nP*-iSJnbKz9k*U|j!_Jhn} zo!z&!u|-JjnhXE(nYS6q^8vBN(Xple8T`7W*n9!Bw7_^e|Gh9_S+mum#VF}R{QkVV zNHn$yVLA0PiM=ex+`3lSSv)CvUQBPyA#5uF%eXr^O z=39tDtNY&iGc-Z}Eqwa4xy$X&E>j5e3OieKoCfl;7dVeIGDhmCGJA+`bc5QJ7Lj34`ia-Tiv{^wW>eF1@B%$-#t`#9JRvIbr{@ zw~m~_8?Zi;zCZ|g7EvuESLDRVi&(eCVA;hB-BM^#E}Z!x6JD{_S-~Nxa*`N`y}y`b zbvl+TaE*_TKcl&?;$mqxFFUOheh|W$CuwZ8H|i=QT`R74|Hi_}>2E#^21lN})XhXt z7ehUdVPcqWejt&=rhAJ?C+Sf$aC}m_4?do5>HTjTnrms0xWbt{2)!kb<>^@6&enCh zxN~gPM;l(n#_4)lW}L4}N!}8(!#1Ezp(rJmqWg$c)t{oS)Q%IA#XA1y)x=Bctx|)x z@NA*&UkepqDrvfs6)dZvG~3B4@%`Ln^^2ZUElfwfh?JCT>aVv7J_)t`Hg+gI z-n@U%?a_8|OV_OV8tL?)_E*mj?~slP$~c?dlVaat7tij>;C!t!x#bjfkxpF3`Er}* z3tZIk?VfMF2+CJJXNO}0bh30)u4Y|T_d9<8%9SVU6K`$f%5%D}e|SD#_dnrdw3vt zWm7B9_v1lQN>Q9I-oGQuHaLBV=ZWW>)bcxcSl%WOB_8F5D^!Wuqp)UONENn?YOp>y zmaAFrRLqWPN}P^iySGoKlvC2BH#wyLHSWmgd*hzcU{CYJ5}ctz(sRFDmVsbaY64jDB45e)Et0 zh>}x&KcbKYb!62&Jf)Km-b+pKn)zu?Dr38~j$^Up^@s}=)Qf9q-*p>~@UjNiV3sn^ ztoN9YGt99l!_2K}XZBLd-&<~-fm0IsB>FO&9`&U@Xz|WMdn-wuCW2TngiX5mFtAXD|`)I84 zzx~Kb*y=~ZbGItEru}(OXjmAucn6}DCWjKeO(s@6%R{qAU9DxjyVab&^1g+`%)0Q( zHKT#W;b)3roaC7CEZu{N4aT!4?J2tt(^R?Nx&qGU)NERh_`qy~rC1m3U0rgrK=>C(#GWf%9DZVAYdx=9`SaQM={oMZ1l`3Wgm4*lF!! z(p#r@t6_%4--@ba(@NQQm+tq>w`WEi3OgY^N=E+2p4D5YS7eFTA0pd$mp`)lvr_*$ z6P=~I6DPSK`c@%6I}+A>B!<}2tak16T>E8tdxP$3>DAtiy?gfpYiFphW;_(QmW=J^`7H+5Io~_iHRZbo{nN>Z^W;bUb-A3I=GW5yw}vMmb|kGLp}Nb zB9EV$6VFtMtE6`>s-IX*@B>Nv`+vu6voFnhH{nNGZ1mJduj4(pcoe4lgUB2*u8DFfr%4Si@9-|5o1u#*p-?Za2Z{)lmk}z##-fo}0b|vcQlcVSUwCfz%6LjC# zpssCb!O!X&sc@Qe)qkJ2k*hdI-dX@BKwY_SpWg{E@AxigQ`D_XnAbn=P?An8+yFyA{+>?vI+1?4z{TM+x@OnrIo!VG)tNd||DtmDYg_mx4rHFq ztqh4hvv1$NaGN^1N5(AA$i_-jA0I>f(?HvbMNc>$u%DPgl)hqby(GQN)d&v)8-q=* zKk}4Ty0T%g%b$SpR^P-GoeogloDPjK4nfyWe6*Uv`!vAgK zn=)j1dtv?du1~4K3$gG8RIP12Gdz2!=XhRk4VN$bx&N)aBgdijo+JMkGM0GKXk5OH z%zDje{}fSGQ&%TOoW;TSmwM5jE!I!dJ~Agk_YBe}VJWFwZVj7WwjT$@%f}jmfK$)Z zomCT=x|vrvbh~W7jWET`2dsHw?l;Z90-DStP%4S3-hi}v0^S;Yk8VVw724YBi@c|WHZSd6GYG`g~-_&ZaQf2NL5Q8VFYO#u)5zseOw0VVvD~cVu1-}kK;05}C+oj~c zWVh-CRs72CiXv>gE+Eh+4Nb(@i8kOwNas(p03-gAtC6J(H|;&y1CQ55TQPAITt&Ky{)jgIe(~$JN%wN% zKea0*Mg)wBjA6AT7in;4w{C@C-wyZ;Sbc%-ODAH4CS#tS<#+a2VjOT5ztul=&tL+1 zP!Q@s&kVsHZuS}zdaSKfSa^t+0kPVR=GY2&jb@kGSbHalxzE13XFdlWY`}g<-)0Vm z;CIZ7fU6cGF&e|9OT!_}s1g@oVYdRp>`>FcdB-hgK);dCH+OblN zoZU_C75K3KlI%~L!v(g(ws2?F8(%iRY^IpMXIr&ZsyyfMXqU9xH z$fq%q81-WpagOPw;G>lZxPLP;;I&0TM6=S95R=x?@Ds*ug%m(`sKUCL8ksuV7q`Oy zvQmT?Sp4c(jf!90SsbEL7_rI-hu8nb^F3GyqriEgLPg8#I0-THiMyj`Y=y*5+|3>( zr_kr;hx`{?h26sS=&6x4fx{VeUs6`Ks;kHYXjMbcxZs>ZyuKg~3%Pm#F87%V-nidM z!mcTd=d`u4m649GzTkU-SXu5PJ*TAigXU4<2Ij!IkW;X2VNJ0GQlBBRZE2w&bi8k! zsv^q%x2d}nbQR=2_s@r0r}`q(dY;rtvx`nE$B3NdJJPWa#5$7o5z5d1^3Ih=!b2dLc3u< z#DXk^a-aIeMGDNoFfxK=e5L(aBu4d9ZLNk*2xRE6+@e$$2@CuIu15|%`<`(MF33Ln zM_uxvPoj>Bu)6pMC_YOxLZH>p`*pAPE8fM!f{h%D#mI*P4{Lt@G#()i2mxg=>|0>- zy?p$Qk<+brdoBo8!|Fd2C-a>|PlcrT{8pM6iL=PZ7IJ;t!h$u!_pk*+*D~TFP@_7wHqdr%&RuV2l7+4jWsJVR^D{X1H3aUXe>ILKxs1MiCSl-No8S zdB(QKlraCaL+_T|EeB6mtllQ(1A~KiVp;>L8&A6BS<>`ZS; z$EIC$be&g@rkVs!1#TxhuJ-S~Zs!&S%PYP_9D%d@AAnoHqlp~2K?c_4d<)uiu*n7+ zlgazUQ6d&6AHfvyO54QwCh-s%>!^I-?^67>di%&=)P3>IO5)nk;v#iovt5C3s6xlD zu0MbNkm=BZ(RPFqX!2{4D{a5jA>?BAY=$-gxv3c$BkxUb{5t1Sc*`q;FuvJyDH+U1V6huCQx||>Ht~1C2_QhGOfQGJ?Y`u z0%LR!l3k3~{5v2Ro-1$(4Go)IDg&>yK1XcWvBxOnYX51kSU&~!()kFsO|ss-4%n|T z$7k*+n#hx_C&x$=K*#JwODrSrDu1TD*Pkq&1!<${!|w1gPSh3*Os6vBd{m)aWSN zMaP9=x9R9gddE$ylY*%j5(}nnUAA-^i*y?wzD^23snp%gfvueglRrLIauA%5Yv%oA zevxacoH9O0nXew0pIq%Yslte_FV!&`D%Sj#>vndaB%~mzfd#`nfBQ2s9|i6NXI)X0 ziJM_Nbg__cz9wG32At-yD$RA=sQiU)X5YdRdEV|EJ#p$(D{!HMQlw!LJVARkgHqkiRA3xf^?uy^mYKkixKL7%2Y|R5b2aX&%J52awNA`~l zN$*8iHI`~i{(o=a_UykZThz^2CVd>|)SHl2SD$dOe-oA_j^V|7wngz-nsUKatTDj< zKEPIll4CFWrKNH+0;{mr3~(B9uFRZo#u4j71R55^ropp_JQ1POr`Lb1&+9TP2f}oT zoJI{Dt3L->Kw z2&`9zZKG;>nt?phh;vA|<46{Z*_q8DZE6ZmS5!1E@5#;Y*BjTH=1*hjr%gbh>;Byz z#^~5Gj0__#@B%6P3>0LWNa-!or`|sOS(m3x~i%Z)vPY`-Jr`rDbH_2&{)fOpt(k zDeXNg$;rn;gAFwGL(@1$Z;6CY*hyhqNF}dEPPh~Gxz+N7L&L*2*~ui z;PIt@4LRi9y~f6O$tLN-&c@4%Mw)_ANNpSdAP0G28%bw&a%;Vcqte&^wYe`oDSl0uRF> z){t-GZ-L&zw=+3OjjO|6^jlihe->E` z+VMTfjna8x^*F$yb`OvEs*w*^e;!r~o?J9u5d5HQm28o|?UuXy%M<=fMw=(EoZ=>; z|NLE5MKA~wP46h9&uz!u9e|a2NEJpEz~ZyZJ4UTz$m-frtGAu;KD(`HFqSpW|6q=9 zYOlG~+}!N(em3s8%!iMw$7pHiM@Gbv8m)xLqu00CX(%DpxE%Cud}0D?eeYuhiLvqK zDv_}gLBLGoF@)pbDkSf-kCWoYvECRuDJ*aM2bVGzhYG+(4m$cjbI zz`qdjzDxJe9c^+>vDnpSg@6Fxd*}OnLfBJ{WcZr#{@gbq)8vB3ZLs{wv%80__Hic( zOFtdnR5atoIeF5_S^QX2lNuIffnjlUaJWk}PguCSKfBIPre!*@J?ZMPG9Ru$y*NEd zHFyzPUOG8DS3|p6Z@MGBwSFytF0k4pEyx80# z5(4=$QuH{ZVy_ki*|PkY`qld`Ce4^dd|==Pct}6=YW>c|m>DW+It1B5`M-H&?qv!zeFt}S@a!}hB8z8#_zGBq)!MzQu%SP+> zlagqBh)t?az=UA28-&v#JevOzLzLlF`M)IDj*-Ku;6BdS7 zo5ILuuf712-Zg`QJV|dun$~}=FGfqsZ+&1r(nfNj5`8e_g6OZV*8T4rM`X~mba*h zKS}GjnQVO|&^==2=F{U9i@x?eH_hTKkM!B!!)AH?V{fkIv>$#F^nG-fzp(7f42ASo zL;@oN2w?x^lD_|Z;inNvFu1W4wn2{!4E2qX38d}7S+bG*az|zkVL0V&6^I*Zq&`rm z=nRv>#5|mw*t{hkkA#K9#MM7re`THCSZS{?cXVVRDxQsIUOs;K@&)&DX_{8lwFlTK zfJl(o#{MZ!tS5&)6^Dg3K%ubn5EHG2;AM9xN}x|iFx0R3(-3XS7i_TzG!4=d`8;Tb zUj8-_QO{Iws`)SRzuCP^@xOyeei?yy%nMx1X@}qs!@oaXqo{`bw{PV>Or&4UG>PE_ zBZ6Ttub^1DSey5W+CWLc9hu$x*RPTSFY({Qzs(wg?XO?p`cw?49rnixC73;X4gIlI z72JTHNAbtYMz@uPqlrH~-Ckc*)Mo(FykDKZ=q-I5i;HAtYpv+cw1_-GP=1EB>mwwF zf`H1IEiw31`{|{@5BKHS!$?G^HgUi`zmIbtZ&Y(`&+(rSy3`cdv@556gNW0~-u|p` z^xM)ldvi_~WIcXOI}tR;$b`ahKIP7i@`Eb@al1IG12fA?*iB(_0{vyk@}Y|j z7ttDvG?EvT{*Dz38bl=6wpcRdv|Dg({UPp8-um7~ zSThD+*#{2r9-amdgR!+Wnb?HmLQGs7i+vo?o5Bg0YsqxE;%`Xnh$*5Vpukd73l;0? zP467}O-G497J6Dm7LI)fIKv_v6SVl55%rPOZQUW;As#O{I+}^k+dAT`l>QBC4tMW( z3X?Gmt&#^19()+4E<{L4H9~%X+H|jqeq2CM^GFmVcjt7ne#fCxBp1gXE=1w?a|pq} z-8%AC{DE8we(#9GHhR7dgYXA$`hS$Yc{rA9|2?b}4Wc3mQSFi>37Ln6jgp}ONrnuW zGtbkdR8pamBvTSLLXu>zOv#)iWG2JyCiBd@F74;}zQ^zV{_%UCV?X;i>~as+b)Dz= z`K+}*YiVeFeklxj9V)|VcmYwJVG|1JC1hkbK5kxGQaSJe7zJVx@cmo+r!6CU#@yh@ z5yF}aq|*cHQY?FX*S%b7m|6SGuxSee8CJcAZ5?a^kMVMrHgK0-$y9SjRFO)qkuuf; z)w$bI5{BonEW{}Igq;U8!Q4KYD3)fs`vTt?-X?&(@0T%IzOHAt^sW}!&M>8_(8w502l#U`tKI)s7S=KT8X3Et zo_<8yI%^xt*|wpx<9;tGlC7%St74kOo`5;gPBCF>LV|9`uLWtC4y}HU1A#JGD?*`j zIs3|Cb1_>)i}TsombezmIeu2cPLlKG*MTen#f19f^&(OyF(aLPEHSCM)uup#+PJ)U zZFzZa0*qOEMDoS&C7m;Kzj7NX25h(Utw}78_pagg13PDaEzlKR1;oSX*PYVRA0EB@ zE03_iI~@XPTPj>m}8M@yqSYxih+bHf(e`sk9(0SV|;C zH{Mzuy-X=QpVl~wh{aL*)wt604&Whm8`Jo+j&6#y&hkz2_WD`q{fZGq5Z&Du3wjjZ zm4)s7ltum_Q3(iR8xkqp(qyYrH4l=YgJz)_WO$BETZcr1 zDyM3K?y2#XC*6~k8?p4;U8&*qOYdgAVNoBxl$BD^lCwI0X(?+KS48YnVbz-gYJ2-T zew*-Nu>@f@iwXE5AJb^a@@9SiHD@-wV)`9Hg^2>)ai6SNm6n0<<)v$FE8j6KDQV|h z_eCu{wpat$T0R0D?e4i&wqv43u4*10ep1{2;LP)i2usN;!X}BJHk3ZF1FWwXUbEU} z(M!nPX*>>YR$mRG_%MRQIy#+lPklkj0B7(i7^{aW7ggES);A>^CEa0+A>p1MJ zRndsRpGr+`@i8)VF**#(cfg4d9bsx1M&kx-*fz(2n*eNuD4=~hX{7`q|J5b)JD;fq z+=9qpD8kNb{!u>&a7$Q7XoF8u5;`iOlRFlORdT3nST@K5SA<7MTBC0~-_!Vz5Yiax zjj1WVKS~K;+Vgrl|6Egi?S;=?X%HmjRt*dw+vYV+uF~&3Sg}fRO5&U+&aupUfgrHY zJ^_@TJphUJf(*1sLQZimuLwO1G(l~7?gFYS3%P%Up5FfV`(wi>=KeIzE{!h*_45k} z5fF?q61*&T;ZKHlxKlp>xN=-AdXX6;ExbN0-M!735*We9^bXnK3=~tH|5Pf*#>Q*> zie|l1{}UpDqmQ}W^7l(E{x{i~=!Gxrqh?RMfKEE@6+%AR`Mou{6T zj;_Zu7^%9wNDwBkuF}>(6nx{&;i`f2@V%GELqsNzI5_>!6Tmgoc4I$q4B!ty*Lr#Y z4BXS=2cE8@_Z^W46ONI#yv0!MK&w`Q7z;=39sBb2n2H3E^iVHydM~kcVRnD?>w=sw z!TZ%*6Z2qU)?vGFI_L1l|6J}a#X*mIB6u8wG2iLX$H+}Aq%Y2)4Lhu%d!h_}>o*Aavbi z9x9^{Q%Y$47-RnO(dj(B5sqj$ssFv_dPVOE4Gm26SDdLp6H;2b9}v;&4E6thc`UGk ztPad2iF9{&&n#X)nC5q4HwopE=ezwDwY_bU6Yvfn?;t%1O9mVvruJ{|QxszW{Mczb zGq1gEH}Rhr%TvTl`L~Y{6w2KfI^`mE*{wES(Md^bR_oL2;lxKSH&gBd@?asW8E|pW zmlC%h`|pokx;!iCMt}aoosnJtmp>7AMt}(9kvl-aVK9R(51ieWpb}Wvp$sI3U825YG9SHDkAOWeVfP#)hIM`P^@9&y zr|m+g>LPw`X*PN}42>`LA{6H);I%NIxj4_X*Jn)eJ7v;Lg#F61H8rfe`BE_7Kv8?gZ zHmD;AW#*a@LFvSn0T>BkD~J$i3~}3W+rUOFsBAo?qJc7rZQ#95s!i+d+h{mkY$Z9x z3-&R;Y_*2D8&^=@W#6kQnjA&70K)!xrXU+?WaPCotE{TFRuFP)q)jR)Dz@ho=C-Ca zHul;VI&od0Ue;~2^N{|hP`*PIcL@969d2QyV~sMNW$6uQW(kYg4HTH_%uz2wbc+B1 zNls3)HDmN%8ehKmw~&95_R$#Rwv0^cyAf%Pq`wT9q-Rw;z_{>kIAQO;s2ykT5h% zjj`ZE${CnHb&Y*+m|&y3bt3BQ=P!?Uths;{5gK|Fn>VEAV4czua71FP@=^KA9XofH zh@^C$gvJy;YT)*P;?7ogo(37kw@u=Q+;eq)47`!TM6MuOO@%T5DW;~T;<|(Y`dCEW zmkv0h8xFA#Gs!?z2|*xfH7d?YiaJqVnm>D7K@RevF1F9E9Ie{|F&?S2r7~y+Jkk*` z9l3`fcEFKo{J1E8h30}bh;~kv=LrT+`Z^<{YOa~xIt?@5W$=*jSJ;F0o(12H5v!NL z2ZVtW=`O>Eyzi$`QRu%A?$v7Dn3@%v$hSWs0ro6teDNnwnh*SWr1QzWrtKV{kDOHO z8AH21yO6^nI{bEvbCUUQv2PV;8kEQ!$G^dG)`)!DImzHEP;XOI&1U_+_qqy{5_{f&;CjyfsXS(jyxTU|n zZ`}`p6_TQWEGjGCABPd?`DER(Wc|gvEm_-9^6?0BTmn1QJk$@F>=V*7C zmCXnka4e{Wp8bRZUkG7n;S(p}Zu zO+IDa@(m)`xbeY=xr7?=nyBtc*8xW5O_J!x-4}=#-JZ>fwk6_fO?i~*y!`bd*d^CnXChptq;Gn>UT)bzUB$?0a$69$ zT)g+CvR?bT0Y}n9&zDKIr#e!Kl$t(y@}sSJFB?OreXh8y(qGj-f4 z9k2hKEF+TSa)c9K3tDb4Jc{|=pi-_PjqY-m&9dgl;PZ)pr!^WG8~2D6xVV{H#O*Fojq|KSLY(>lgY~l*XAeCwxtul zrpGhXmLkx#f-uKFLOU$)e1^T~nKNg=Zdatk=HniUKI35cl+`@Q3C*_sOThY6Vvnaiy*r->SjhW{QWx*ES}I&{_5M_ zrnO8>IRt}A!r@aV+3-`C%Fm%wMbGWMczF3lqE;9DsG-1x&l~JIdz&&$*Z6)nMfquI zY56nT!7my-imIP)TwEXA8^>UnN-}cEO~y`6A%IEoq%)BE7vQ_XkIL7CRc zEF(p3cCLG_w^8h(s>VvT>l?C3a(fxCJ&r4^7A?~~dQpE1vPR?2_f*%o%?@spTbwZ( zZp$yjBmsP?=K|SX{TUt;*_k*b@OM1cKziPxN_0O zYs7X*-8cmL8r%iAdNN?+;i=-K%dt&Y9E^hTBtox)iCIiBzybGfL9VoQj$T}AWE4x#fSY=gpC4erj!~-k zL|5rHvF{D=cN<6xGG`ax$%vF?(glXvd3+gm{`6RViHT~^*7%$j*?QHO zmqQBxEBo^Oavp#Em_YRox@D%LD2VhsAG#(XDN1@~p>{_45irhjW1*k9M6{F(F-+4j zJwMC6JWgP^goNmy6&;rh>6$`HUQG?HpqNX5@1ob2UcLtHfYyB7z#v8tMSpEwPrG5s zGYYL5a?K%J8KPdg{=9H5xo{6>pw1;dzh6CF3#&m6(uwdq#> z2}qrE8Ib4wwcbU<&OSFzuX30j}wWJ!w}O6cTm6vvG6(6{4g&dpWjlS2R)6J>?1` zl=oY2j?H?4c7G&O^Qfi|q0A7c2+PV^7nb!pGyDI2Rz2C|p7}F|fct_%k`{%E8XCYX zWz#|}GEX3AQk{<+(u7sGpo%X<{aN*h5yWs}d?Iun0QdvF7W)I!@ zwMz6Uj+=_$pvoejnUFkjFJdsKE&A5i5#w^fpo_&$W5BYKvWcy=utID(wQX z$Pz~=|662px%b`Jf7`&;&h9u;$Pl}$%mXPW%K3=JsVGS7?6dEuQqXW3ja1A#3O?1~l4(UQMmG(m73UD7j?_9)3n)dsz^aBw;79+{oe%zLqyS}r zF2i5J2&I!_ej`)IkMOPlYAj{0VR|AfD3yZW*+aUh$LlW;qKlm z{c0tO@G}gR-8&(x#vj#zW9fY>$vB5SdsYgIb!f@RER60^`|eVwpTlbjkX&w~hGB&Z z6@|v`?xh8F6;Y9+_w*NTXh~P&7<1gWQ}>RGe4>_dvc8`YxFbQ*f&2GwpX_W)$Qyyc zU&h{b;Q%_b_NNNG#@mFddhHkbmPh1-35O`lM$&}sKfQERCZ>k@ORMIk7Z#^` z$L!lB_WDH-UJpfL8`#gh>-`bf!mKZ{-u(fMIj#7yyAi9idC!ZS3Z;>^+|K*p`TDPI zYgAOPM}$kBrVxj_dKT0;vaFMe{SP%g)A;)8nb++ehUrMp_Gz65CokJ|NhTgDpBi7q z;Hq$PY+7LNZ;u&%yROkS=+g5R#ww(z7yF*(i~xBJzf4fFw6vb?XTKKe(lfr6FGNX7 zs>dme6^bE+*t)7y;ubURZ$Ex_O3_t1pN#enbc0TT=Z=$Nt~0dUFm@mvQ&DWv($YRv z=8?8$vJMRo)puXt03n0q7l?SDMitPtUU^vO7TFlsWRh`2RP;;c#kA4xics8-Pq4Bk zl;UW7U8U;=e8-*vKLPqIH&?UVqrW_slfTm}NpeQf&Cnc420{qi%v`GG069_|vJ$ zZ|DT5_rtOTg-Eauz25W-4<7O%B`u%kKCOO8nB4^7%g=fct&Oj*NO<_=iHW~!odOIK zKVw^lBJ3;XgYBaZR`_0z+$re`}F02G$L?JjRTKt;Y zRXp%0M5EPU(OcP+0ZA4s>n{Xk6L{~pA^`=Ml8ldk-896jlV#^@QMgFG;X8Ezj|lP)c88b0dH=Q;ArvyJuWtsA_P2Ck4J8gSJRJ8%KhQG$ zF6xW!8|$rr|1Z&PFNyY#uH;+Qu2FZdtdI|QkW{0j$%@-VgRSp>WI z6j^7%tIikS#W4M?Sind}X`M+15JiMoBSaeWN92g2OS>D`Q#4`bhbmbQ=I7@lBwl|; znluKb+ri0M+-d75`WxneTwvbV*w~PdjUaY7SH9P^W}qDs<-mw!>$xn&n%+_OfdCSq zX|+cV7y5f1f<3@6t0i6Q6{z(Wm_ST26b*+VTd`rCb;p(Gh1|GNsg^i6RU@AMZFv+v zJzB3q&x%9QJ1lzHNt}~Y$~&Syp#~8PD2bm|v2rqE-1zN$flaiO6v$pwb=GX+JDs=s z%L0gj%%#w_$R?v@fHG3n>G*;-O-7NB=0c~~IX(-K5f%bcwOBUT4SqXN9VOGaiTx74 zCcf03ho{7R3`Mib=(B?IcV5}BW;NL42vyVR$(@Y!b!JjC23dH?Gaa_#NA6GMKR7jk zZB7ZQGGn1m`|LYq-9M~E8HzqoCu`f=)%I?s(xq`mUeUn5(3ab2ORxcwD>t@i7bAWD zv5xUM$cGR(0ndf`X33q5?xdk%?X|L=Nq2}=p*t z4{+6=RRUw=e_N!=iv&eZ|T*a53qyyH_2$)88$fS-cO-m=nIM`^1udNJoWxS=$G^F z{wm%XPmx3?`&el$b{E;`AnlaWgK0Xw9UTvh$^x0^Y~t6g|AP`2w>qn>ReRnl+))`O z3_y#OHIhzqhhYa)yx}BRwia6SY_dk3$fg85$QTizCbA+@%+>Yt*jFKF-%$Vi!48c~{{xyx4{<_iDH%x# zG62{87`!L!!cY7(0I1j4SW|M3>2-dlN{VKQ$;iGfYG?$o1?9G!Vfh#IUj8n_EPdVC zw+66-kl&6WXAVfN>(Y%qA78`S#x)$qnu;FCW8pXU{{| zqV}Buo7Y-%oaXQLzxD6uSvN`%YNf9I_o2fo`C0L=4sqq)jPm?{e)=!}uvgujmvtuc^D(Lb{3_lt_a;4_##_A;yO;&~) zNI>^$iOPyI?|*i?$*R;!bXmLRVTFnLyJxVtQE!;KO*A@1Y9`-mvI6`~Q)x1u=B59g z;v}MiJv%R@ud5Mj5LkAR;P4lZ#Xdx~=IhZj;P>JiGxgGft4tvH0)#DF6?#tl+7t%;Rw9#`@%>t^R-a zkBpQVW;@t;sMN#UJfY4EPbK7_xkhP++I9f>1^7|hE(en>*Ot|W1L}7HLIIJ+aZxzd z?a;)Jxdp9Ptg4ZciyM9SLr4opYtlG+){{%69?!*M=I|MetYI+J!Sxh>+Zp{ABNx2` zvo5D-8bOMOxQ&^a8C|9|SS%~<{(}sRn^0VPceZO-lA#W#hewVaaod_u@1{sAhj0Om zn`~k90}P#Qly;CTy!NtluO z+=reI;hbV#`2Z0_LrdbD(Z^5guvT4`P=qo(rC|>X<8pIf#`zTI8=Re4_6L{F6L1F? z2n8NH;}ai<3lIEJYHY9e~{%DOBTpLqYzcXmAYngzF!&a$5sYSHia|tq~C| zHtW9pd~fFqJvvVDFlo1~_ZsdR3SotumWX`cIy`Iy0tDChWaIi8Pc+~q(!v=gZm6irryCd-Se%Q+R-zdow9m-R z?|>LbdZP9usvul}TPIebn7}1^!cJP6FO16-_l-M@cFDg$0r31$6(YYN)hvAb^SMsy zgDMlj@G89ekh2sNI98&*$oVWXK;@Z}3f2gSBD8I-!w?c7IBWw5h_prse6dG(%IZ&h zV(=8~8sz0^jrYopp<@9Dge8(tk0kbmo-#QI2uBH=t`k#J&a}rM`JlK@yNg{uMDvPu zBPdK|9?;d`20&S$lt2yZ*!n?G8<;Up7`?PC4@OL2Ae#;M818z%&1(s{%I2Pfnf*HMs~WW@3+xyS@4#Cj|!Hg@;x?95LsH%6K#oQ`4a zeMRtxSK7O`teF-8p0e$mwyw+#V)i35tuUUv!G=Pe)AQ*q)JPglf5Y^fsQ2}9A;*-B zE;ANFyk#!MLWG@@K>Qgl;0VVgU6T&0&so7capPGuqTvDl{-*^Qh8XE{VxSfPLj$Qr z`-oz_(|4PcV2MiGr3DsD>6p>aks9S7`skWQnfR5##1e~4Gz$=20KJY--S6z@>nY&3 z3ak5-=C+fh#+Bu+JS^ydT_OlujUeVOkfCZaQ*5YP9dxZ)$D>u_Y8`hHyL>24jp^9F zD@@Xxtk#^28GgpkdS-g@FLEoJ<{`H-rXO1Eqv&1kMp6hKs3sR~;;w z*RD;dDF6JKH$UI*P1DI6ADzpK=jJ3q9|ACZQ{a6syGg>`{nP!x0Hbs*l63gp@u1BW zjRG@zR}8yayh=$KMOYmyqD~?z)ld}m&Z(*2o1L6lQ9Z^6$v{eMU~cXoS0XP$sKlnF z1)-50b=PlUGZorFQrzO=A27HwHFOD$3#kD65_0g{poZhlg(aH4>d3gPESPs})6{&D zsF`#>h}+26@g`h~Shw4JwRi^>cw%x|SiR))XN5iir(Gq|iU9&ceK$~VipI2n+B`fwEF>&bL>6X2e)L?f zKENrE=yB!@bRL?wZ_{Ou6pTZDih}VorwKx_<0 z$p--PP4lDSKZZmBaWcs`CUVeJm}KY>xl?=?d%}kC;vohf!*0z=h>Cqb;^W8VdFNr> zIXs&V85u}y#ZZ)KbyQ3tL4$%Vl|nLO7@jJz=$r@>#wKH8(%c8%C1{I2!2&kdi%^bt z)(?sG=>nsVFSI*S_4+FO{yt8|he&p$P*8b~#UkDMB+=;B|8*ZWSUg?4yr|KCaxp=D zrBhhoW5D)@d6hiAn;9)C|KUS1Pn)x~NB`yqfv^kwrVnQR(9QyI;PHC!t2cV_{`_Gb z^lus76xMgDwTOLuhUWt9C#q@tuHyBO<7Rsst;#Uu;T#^I`wqp^;X-0U*h-Wm*2rkc zY6Q*wja52%uGigDs=+ye+pXzC>7>)YX06zFvG;c4bX5wzxG1X8vMLxqY`CazU}v}G zUQ=cEe6_HopVa^?I&hlS5a(UhD6X3xC z>`zBZRd`KDCg=ztKdG#3n345f2&UZXt;|umV4fABZpNMqY&eC15vNk}<_42rrKEl} z6J_J%?D=$SDu2A|-eFkX^Rf~faqghqJ0||Kh&=TC3uILz#O>533P=%Wu~ZR*^dzu| zR;tsw(RY@a+IR+WI_0Dm_VPT&!HLEf|MSjG;7DRVvQyQQ^ zmqdE;DYc$=43EL`#+hy6Yu7@86IAQl8`T8ahP*j+ zVcZ6b2Ea8w7ZOy1l~zXZFfepa9@={hS)YhGJI&5|PhKzEJp`(N-{cVGnxK{{P>b-| zM$^>cD2cCx%?-~4CSI?wL6`fW+_)udEzF)aI`r5}05^HAodQRsoa?WUmI}ixOOM>( z7$q{_c(J<&&UsGGmq)^tAAh+DR2VuL_#r?_hiV$-YqxWj z*!M{VU(`YkN%nIS=9MPGmdHQJBAVFP*0XX|aJUwWzV#(y z^x(?p}!C-!li4lI+65^*Iq(eRcRN*j|BXHSph7=7rJ}T$Du_{C7ih<^h9)hdLjWqH&qXvdI=;JP&12Pg(`6IS(s5OBUjwH8ND@0}Ao@SvvG z+?*Y)5XkPW0SY_Vxe)2_7TLR2eRE6?tA4r8eyLbcS!!H#pn^2dWRq)<^U6!21}PzP{o=Ec`7ysHjsA;?K&O!?j;Uk}}yFx3i+XfLiT& zsiuNpB*>mr8eyqGt+`u3rfdLXbkEndpXdrA?rUU{`oe;aU~9Ws#garHGS6SdR5X^YP*_h-d2ob;Lwv5AmB?VfyXlwH zrh5Wg+m;mc8l7IT9)u@Zgq&OnPQ)gnt;xXl$^%>RW7*oD`X4`|!Jgpm(H$Y}M1FV7 zoj2P2M9#Wh=cl!3eGV`6l)e0V0IRL!#6vTYyQ@&-O{n^BJ(kh*LW|$5p|X#N?AFYa~R+W%PeSgtX~XO76qR^z+?*BV_ga{+2UF=AY7)$5kDH}Bpl zA?KTA!zxU~;uJv-c?2&?W9)Eg3Kb^0Cb#|=KcEkJGhJ$+d9h=_FB#>{FJfVK9G4iE z^Yzn1r~>BZ=iO#H{m5KfsE&akejN}&CxDS*_%54dgdw!3)7irn1I7sTIF{S9D^eA9 z8(|R`0h$ ztED5FHo(+^48Gg-Tw{n}r>_{YrGv*pt<_PuQlTHk{ihDd2AIry8D3KJlcjzm=acshXUT&{A4WxcbabL|-f8s#9V;}bkn<8TZZAMdNTbn?T z^w>IDTHhY~OC)21?>OyLgP>F(b1(@^)gj!%KnSRLb}>VqfZK=(v5y8>-Q%;+vHv5= zK})-c@9`JTK4lYO(v0z%^;U*k&HJu!9mY66&|ZEM;fH3A%ea>Vsuzucs*?U02{jRz zIzIoo?}(mDK+CEt7ZUC(mr?D6rG+Zv&V<5x0L?UQYwZpW=oSg5z@1Wu2`7ZNb=v42KL95pjOprTqJ($P&aO3KLB4D*zG(A)us8$>ducd~5P@MsB8O6r#ott~@qO{{p6T`(c9gK}b{fyli0+QqgE^|yb zg1P{nbFN*RmNvH)^Uk|4*(WhjN*JcUd6Uz8ZLHZ$goc(OQae*ArnXIR69a?o(t;aW z`osAXTg7bJ@W^q;78Y`wO`C$z?0F-B{*Ef_CNjsmZe% zm#3E+^{2hhraT!wS}%fr)_*nP>ajJW9m5(^RgOSfW`^rHU8gM*R1@El8k||5#2aKL z&3G;iTe97*JCJYr!e#CUwt4N8UmVYfO^SQYS*N547ry@RxmJ)Hyf%__U*~6+d|RA` zZV}pMa&*;PvdTp2l(WcEORv3wXt=rP=r*eKe5vW533!maW;Qlu1b-6%N*f3blsTkJdx* zGpai;uQZjNLJYLJVv_lu9|j!X&A$|3f2+-Y7cG~$x)OTXJ#nyYdOq$}KNwXpm7nxH zNpomws_$fO&7I8ore0vpT9pvDq9oN!#_R|JT%?g>II(Ze)}uN4B=v*Ud|Ps(W$SY) zMKS5(mu(TMio|}S(`&J`Y&#qs=ZAksj%>!eQIp8ej;jtUAz2ryXy-RP@P^G&+PW}KGz(tI|DL#zmG!16iT>fYYC z;g=5(6OWlbu=*A$pXTNc(L5nSLwQ;6w%W&O=LfzxwyUG8Z@hba9_8MVu*%kgO^P7& za$+D^RIEz^`EIG!|12nwb#{J-@qHK; z@P!zn0~}R#`-}j}{B%8N_&BDVV7mrlP_ZxE`(z_-Bhfk@YfgRcTh(Sg5vH_HLj2BG z3v)>6QTqbD#LhD8&d<6Ld~a(c=Er3t1omh5a%Kn%!;1>-B)%~quVEvgCp^LaKpZ%o zrI0}xUUj>u^NOXz#?bm(=#{C|Bhu3Mzat=&C8uxD>?A$74uqzBWC1Hf%;rS~#KFtC zsI8p8pGt;uyUoUh@`mu7)8O!qWp)vIuvAVbK5hrht{GbYRz;C5~w715Ju^R!5%x=1b z+TX3#VmBLuLAn;EMdNf*A5~l}H*o;^`7WVJJvq`O{wS~s02=#dIQ>M4PbxE91HlB|uqk6{SXqp^kC)^pIoZ_|yA0e}?{ z;OwsjzdKXYaFdMdZC+~qt zcrgjH=OK`}8wRi6z5CKt72cntp!Txwoxc>LpRZxesW;=&jDE4<+aLnT)ZT_*^O+xP zFmj?are)-31~ggmu-u>+f{vi4NAXxZGM!Zz*4`Gc!v{S2RB<;7 zSa`dk3N^gugr`SAEnz)IF3^|UE-{QD?S1BB|yvfoiyqo}XX zjVU!{o{B0CLJSlAS6$7XX7p9#V3P_s9t!~uW?(U4je`{nSqpQz=hHvqO<|5QWPDiU zw|mPz1)MJyDN4jL4a6rR&#HzUximB|+o#2U8wkCQ0P{c|!4beyafX^1Div%H$Sv0< zvkVs7OteMiqEr*dtrJ|KEmbHk30y_nTpcSbYkMz)>+bob{>=OFL{jKpy{L1h(@N3X zj~Zj3J^^h#i_{J?47lU3ZXKcag3(v!qedM=mj$yAWHI#BsBNK4XyiCiG)?cn4Z`by zuG}Ae7!&Vj_`>$G`wNQ7D&*^#Iy*mUjf`}zd1?E8KB|r&E%d&xf9opQ_oY4GPvx$^ znaJ%X!{cHMSaA>lAm9qzB0%n=SC;@7Y6^oLJmXlS ztN~r)^NEf^{?Ofk!USnMyk;-f{E572>BWh9ULU&&YS8A9eE_ro<^TmVcNUef0U2mx z!^Xoy(z9)|w`U_6qBt=ZGBlFK;ROK+nppU_S!8~J*$jU1lnB7?lOrNx(iWc0;Jlq042LltQ_jc*zOsrzLrF!9urpubqI^%6cg1=q! zAO&0BgTXZndSHJMVb4!l)6*~BEVI7Ziw?EAb(V{;UZBz@`)r*oKNth=*_xey$tp$r zs;NsT>T_tw0uNe?hLilu`LqVi6@sz!f#r*86hQK5Q>cX%Vo&q4V@Sv4jBel!=@6y0 zkeIX%?}`R9-kZBa1h5_uD_7~!+pnJCyMf*S)za2RdKiXtaKL8|AjHE{J)0W82{NE0 zNmSnuS}(6paD&;@~2jtO;N-^4Ns{%`-)Y=JXnYq6+{|-SgXq zH4KE(F{<$Kc+R-adfXOBGQeBky|qWSFdA=1gV(My!RN4RaXQGd0UfGgx>j?yLB6br zF2zc);^v8%Vb@==^FzERfAvf6yqd%rVuJL*H(~rRh=LU|Av;m*x6aQaCk;mD*iQO$ z0$Zq`EHu)!QvT7j%(_|GJ^I{|9XNl_xCGoZMqL-)rPt=9UKm_c7kERMet`B-;$9y4 z-F1zAjT8tg&L^q^vJ(lX>g@w7#o*hTFC!Fol5@&AxFvS9I_~^>m3nj~)GbXVdqg#0 zPJRLNQrKNukJMAglBQ%d`9i>4Mt)F_RF{;`)V%6!Lbvu76VdZm*4mv&CJeFPksGV) z>?|_&qkHsiTCf3TtBN{1cMD{N{|$U)xc|u}iOA|2ia&?n5 z_zYacoBv8BeUUy;owI~hlQh7{-8R7JNn>@7L(cEH=2#;2C~42{Ql^CMR6TrCc+#T^ z6GQ@?tapM;2&k7zeeDV?LJwN)Sh}t-dhhf!WTFXinLu=aYbz+0kyFIFEoPLQYO+JeMkG7- zFi0uUpM=tiiIeA82Hf@(&zIDRb))O%etM}J>w^N6QAC;TXJdKb>6W^m-a~8V`1|Jrb zu3sfLq&w5X0PRLDJ#rgUSdlQmEJBNfZ{h2@i zzxu1>hs29Mk(xDxJQ_G76b36yGPaIoYB!{VAxfxT)~#8s#qZ+S^go}2JJ;ykIw)Iy z{ zvjaKZ^vHi-a<}(R7yj{=O=dKLgt*{`zk+1%!blqsCAKd#Ai%Z&{$S>MMO&wUA@Xx9 z=x~yfZoIex3g0Ob@?&7KW}@tXNgt)B+tC1V23-ZmLt(&Wc(CkpTU`bP|NDNUTn>sA z&L~Sjpq}Mj*+K4xAEqkWS z10n%S9H;{zLsYgnrMS|zqo5}CJbbRj|2ik<3;KV|#H;Rnv3c1jWO-8Uals_fPQAKr z_Y(by_60()jM>Fw$I6%Oy5?90&jI(H!R5sO*tp%h)`PRX^uFLjb+ssBP36y-Wr`^C z2-h;c>(|~07dV!+^5=keY9_B`gP|LWJA6@qBM>(R6JV=crIpq6!R`cNFNRnYdaeKC z=JmNp)ed_YveBVx1b>xLkp8i``4G%$(M`V9R{0XQ6~dE0W`(`>?V@gE^AuD@ayDE$ zKAK!WD^I=s#s{9e3$q8HeE?Jgj0KQwPSZi+zqfC5;aw?K=~cBPTR}%kVYR>vnYg>> zwD5{TUMS-QFXz(&C=G0aP~+`LfJ*!y@28kR)spf$t*55ZU|qNs0)}I|Huo=C35C%RZJXENE;2AM=5-#$TY48R zQ+0ASPd~;XAsP<<4rjszTACGmXd1uU$HY`0gvmD^~T{zF$cdS%nx+_hNln6-V^&6x&LJmp8s_<@LWBBlo*fO%%)+08)% z=b`o`YWtYY@|2Cuti5> z@bw&ai0*cXMts2JMWTeXLmgWjA(pKVpZW8Oqp}XTe4whhwhQQVG?_-PCG{veIgb7i zEy14CB*Vaw=K@;#f{D1p5LyJ38+So<(Z{sZ!Svp~cLV9{y#Ce+(#gr)-N$*h+Ei}- z62>WJz9q<(>?h=APotYaa9l#P_cL+?oQEsOVRBFdk~aA85@qPSW~*Hain0n9uVG=3 zpP^=H2)?`_HeQs=($ha3V12$HuOd5F7c@p*9Sr6pH8U4F?8^cf&`o;IR_OmqOo&1s zc-k%M-y0J6kaP^XB|zxr{0*QCZlIv9$3}w)3|nzwJC_5H2_^q7)_bEQ$%L(R#e-tR zYlQR=K&H(m?Bc)FmM7F^2QLJFmVpILgmQrMGnxg9wC!bZ8VC8xc9f23da6mF;W(Muw#L;`b>ptxPv8VLOSiarA9z_O$P zgcapAb;)}^iwFm}T|~1`qQ9_Kf1zvpC3Gs7vgd<67DyS{sq~;#$Oj??x3K&y_6J7-$a|5wcumj7fPk|`R% zC2IwJK65z#X1qC`w}SD=k>3#8|LzG^bJovN=Uau!7a+z}FR#cn&)$QivV-uXTIw5F zS-p~aBpqD?Ehvh)+Dg1ulgz~(pL@6A3jF)_pMhw&k4yqBkmXe?J&^c|9sU}WI-@ZO2?og-=l#3L3F z;h#nXviud8kMlqZk^JqqL=s1ye_H4c|Lc*$c;|3VmCsJP%L(&L8n& zQmMyPrt1)no@LOV`x-ifJ%wJG2b|5M1{GfGJG<^*|CzQ8E1L$=zh>te3snh1jt1N$`3Pr)d|Ci!MF%*f)#~B? zDAyZUA3&0U__r3$V+oV)sw30bZjLbc)+eapBoKERWbyU&g?I_w1_GG(Vq=FmM;Mbx zxJ~2H%hCgm>^QoOf@Bon|ARp7r5?4Vo9cYG&=f)afsq<6E|3n+jSKEDoWhOLU)9l7 zat{W?!=uu_KhU-c{q=8&`#zXdZ|6R4vKltI$tm$gT;c`q2B`aNTwj%S4@~V@g^~W& zWo{0R`CDnB5NfB5jt5)2dw2{`sa{1!hUskSgx1iz_Qi!~`ZZA8K_f-8;9aQv?cXB$ zC-cib|IJ;8AcB%!n!y~)yWD)1|GahV-toWJjXr_QRd&>0?I&5O{Hf!2l65@!!?K)* z3)jvvubneXmo@T7TKh}eejMMtW}QHns?wW7<<f~JvJ6mWfU#0D)fXoZH%X4>j69F<6DarHqQqt(B>b`%#%BoDIfgg z)R#TGM!l;$C5|~QCRtzX_W9>BcFvWLaQMWdKcD4){mDHlk6?hzs{+gkC$u{1lOYxI zSA})}N0*IeLh*(Xp&!}B-$fzr!knRAU9{Nl;+pA&^KH7iy5T$jI841i`ObK3FIaq8 z?^_KGdsY2>T`w?0K7($kijj&c;O@rl)fX;aR6KKra*(}!VuD3jIK$D!<$}Kc;qqW2 z_h*!h$3IC)%|n7W-yhr;eELi8n2Fz?OF8`fP^dKK?cr4T6!y-5Wu7HL*^-!&;#Svl z(|`?e883KIN|EDFw@!Tf{#`F4C@D!ySz7CfMw2xgs;GRkh$mOEQNVbmxbt=Ww{JQ- zHmaA_RFPhSc+;ex#E|xrTV%=FsK3-#6Io>fkR4Pnuy5G+qYAMSy&TttX?p&O9D`T! z2G5r&o$E!8sEpt4+xBM%K;ss0EiBip;?1d)G>5rw=E@a4wJ}BCzI}sA7m7kG1LgW+ z>J-fb)dY;egjUGoxbgM|t*6S%)}uo#OH@aB1*WD7aJl#I#z}ba;Cjp+q92-@bB9t9 z@DglLzBhgsR1StCYL$tRfdLng9IunKaNl_*4uBlsIo?F`BJ&k(cuK2l><%sm5$=nz znxjWih9#&)f|h?E<1uAF(SHQBJpTTxeZdf94-Qi52x!H3*C2lwf|XMmH+u&8)E4>` z*PJvM&Y#x9*b`*Gq=T6XY1#&br=X*6bB-hyPQ3Y}a%14fFTXdYOL2;biFE@`jyn%Y z4_aKO$w^FzCF=dR7q$NMKgL!o9P_uJ-6o}Uvo<{@UbiI7F!|xLX6{+t9HLC&4Etbwyyp8vl6!62UzY& zkH&J70pnK<`Xys*??8E*ezvD0=HyUY20e9c2-itp--+lE7zJG5V}$@@g4(RY7h+&+ zOgu$V6>E<0E8(}9nWRjOEqWJg3bt8fUhLq^EAINVXUQj8H`f^tPw}mdeWa%~0OcP) z?wCKVtg1?XrW2Q&8x90qH2f-5M`-EDlk?ZFUxJ%_=Wf$YjkE{VcXrUrEv(A6V%4ax zt&p6b8cB$WxsFvKEGb0X1#Weg7oIe6tL6XQL2kZZfBDz&rADXo6bc+k_dNW4v`P># zO=!i#>X!%W9Uw||&#pvH0-UixjSOd-a$ASq^MvI8RYq(s2aa)vn#hvA@pQ{ZYXp&E z>RE@A4FV55kU#QGnFKc;l7XGdiJ*D?2o_uc3^p4WdPXSo&{|FG!QA^t!A;tiTgYJKQ>+82GSjCseU0;Qw1H?je zbBj6N)#E6si*Bl`FM>)tv`nDBt?isdkSjHv|K8~6XbZdPrSFG=4zk|Ml7<^G0C^j< z?xDH8M=*L4TH#dDEfiLHNFO)MX5K3--tCMLaB5;?x_vAg1#eDj``CM_0n>ytZ4C7y z2W1khp_(c?6#d6|S89>dry+AsZcPe+e4g3j!gh6V5~Q9>co< zG3LdF4HFYn=iASg1rZBIpgsTzh)1ZR_wYA<^z0eCh{jb6=?o590PtuctXQ)ukb?0v zUOrJBZhH_T;}W5SPd|%-^40dAwLh%bF)IbJ(6jK%*awVJHYO$UVIPY(Kd+%759Szy zb@xgz#ZTHW<>d4xm$@)ADwNVbsZkMgnc$|KxKLGoi#5y z+Mjtg3|F6?SroYx$NM_v%g0WW|A((Pfu?fb|9~}5q9m0Jof0LP5|W{TBvXZCE=8GV znV%*JA%qZ;gAhXIDVd5SB(%*k&t#t7&*PkP|L_TJC_4d3tgGYQei z&nv91&^&eH;NR|8Y%D%?KU>QntL9K(Dj%JMzioYey>huO*Kux30?Nre7TPbj{eJyY zr*q#uBzRgpIS41cews==C+O}Z2J_=5zo>wurOocTR7{@&d-Rp%rRt0WR2;O014{MN zOxXC7rZ?1l@DfH^HZ~ZJQTW(^MGp4luhYNaGysBWC+&J%^5EmBsJuu?Ii{Iy>1smB zs3B@=AHFdb2&xy@zij>zZ2q#OXBGv85!p@qI=w7JwRynI1bi67&cP?Q4)Yq|d?_iu z4<4++mPUdVz8Sk)uMpNAA0H6g4NiJ&F|>&w#i2QVo0tGvY3nuD2N;)XOg3?-8YEbb zWfXXEM%KS7;vlj1mv>+g?DO!SJ05q=U0m67B0P$b?d?0L?P{qvvlw>3HGi4-gDM{~F{5~l&L%P{DlD2PJhK7cHE!n85VPCZuzZG89)1wkF1aE!kqqh045l+e*n%2ht?%#3`V%aC` zhB-%9eyuHBN<93Hhdw)4**3}8;&(Os7H7-H-#MiF=0;V&%ga1mwbX1rsu45s+a623 zwKeQRI*}eZxDn?A#8&YJnD=3{^dQ~d01W%QN7LG2k4kJ7a?Zurb7T}ry-VakUC0%=~E6shy)*O@ug zg+e`*+d^~M-Db4av2Wm)_nZ3-qyP(Kc6|A9C7N1V@+tyb1Ep}8!F}I0*DN98KGt4P zZ$ht9UP_&;>esWXUyCF(FIw3qePmruFq{@778ea(s9vjFj3r+67SZsOOS~T^zTP2H zE4n3vhxy9Gw(5|#a%WOTw;#uQzLt`XtYzABZguWmcS86KLu`wkwYVEjiiyFL(Wagu zK3@C8^xXOlV+Si|IWf|8DuCG{MDhUQa)wPa_iLM*!uduk3id_di#M1o*c02K4e7P< zI=WjbyJzWc$TgY2oBJ4Xeq^OBkLjqY7Kn=n-?@=evZ=7(v(6$#eSW~S*?4v#D6QnY zt;=ZST|LT*{ixzfvVCQc{+A%3c`N4yp-w8N`SOJITAXbx-!AiWd8gaW3blwY_swz= z%g561#($Ea)t~KbvRNM2+D;^wXslMUcJfVE>ugD6Beyh?UC41zOD;LUe&}k?lZC%M z*;fX2LuQz>TwDc;AM4CTq+S1cq4xKUX8Au#Q7^W8PHx*EKEdPZG<)~u%6pE_D@*x$ z3g75I2OMASlccMAST3EKWnBB=+UkSUzc@kKDK)N-aI`wvwoG_kux(gb>`vUhfl1JH zf4b1zxShAGtW?3Y(f)u#5q7*DZ$9p+j-j$^7@?y5;AoHkIUSD^pz_a8;kg8*L2B;Z z_O|TRds@|JJo1Fdw&7_5qf9vYQW`HPNtR}wZiS-hF2xOmZHGYR+9^XmnZ~8MaIGdk z_wuAM))``BuzdeweXz|r)5O%|)hUFXh2JWQqJ37c_@GXP>2v!ZI+3m2NWTyu+7LFKR`uTOiJlrFAGbie(>?F23uA>&>d}8wz#}9GPZr@^sk{M*YJiU&PJD*$S+^|*N)CFoT9GmtRPHQ zT*DPt7f!muYAaj9Y(6iM*_>k4@|LmtOmk_US!PSh-qp@qTlVjp?}Fmn*D(KYs$Sx0 zSN}&8+D!O5#TW=P-K*ZZ1`RJLx|CrYYgIJT#ygSdp^x)6tr)vp8CqlmgC_K%tM8Zj z!(o3YwY>uZ)?+TDqeF{uP&)W>WAZK{A|iO|(`i`4qZ`?$TXQ6LW~gb%yoBL9>Nn!f zo!MG(HWZBWFp*Dek3GDRn^Y}OP zTM^WDU7b+Jp%48BWKGE7I_P`D()YZ2E7w% zH;9&D6&N2+l0gJRqhVN`5eVo_x5jXB%?i7-$Nw5`qw+x6@OMeVYC} zF8na2DQUUxViJ2lA<>4OmikFjT^&VM*63J}v@~g7<9qRCMushls(pFZTcD*dGCEdt z0~SWmD|~N1(983RBceLZ3f)xZ{$hc?Uq3<8>%rh@zs%F?&*HuuML~>D{4O!Mrg3j? z!NLe|^YJCj;@pa5Qm&WqZpRIMMoDQGhP4E}mDS`AWmUX98J{d%Xi;#N>jDHEu1*hn z!yQczJ=o=$a&J@{#Ux}J8&OUe7(}O~`C|oOC8Big9BN9V-oE_`=WaYgCSmjED3@3J z%HH0h)X#e+j0c;`QXEIYU@)7O=G3N%Ziq)^_v_1_PYBz&M;4tmG&E9E*ZhrFLOxb%Fg0qqjEtoZ9|U|aMMLmA)SB;h zm#bp(gic^k(7r6|E%z5j3nM~8)S)B8SnWf42K4_)*UaC-IY)xA0bNG`ARsBf(_zlZVvQnxNEE zz0WB4<~-9X`**xYYLeARw$W5$C6pSo;OG<@l`{QJZ{bVN{9Y~E-gJk)4n3r3o}yu~jH1>iO&8;p#M z_`-@t7y9V~LH-eCxudTif)3?eZ1D2Rsv$fFo**8a2=VcChO^` z-0)+Ek5G!^jH#iK(a}MXpp6?b@+}#hy2j`TvsnSFNh@nxQ>edpd0o4rq2UHTOzI6= zQwHn`dHLgE%wd}QSZ~1>82cXklRGFBl6Ql>Xep;PO_($|1A>FY34MF}Eua7kFh<8_ z?(u1m6$t~la8oT1hxmU_A?Ri$n<5gkOl<>8qYq=^(qIEOH;*^Gq5^U#j6a+aqQ=L@ z>;sJnI@AYe?q7}j+TMP6$ad3{n^c&NTx4$mFDxo2hf%(c3J+%JS3ROt+W+*|{Y}*E zLvxUG^SQbrx}9y?wt?NLn{p&1{>}c4*_x(N)iT^}G$OR1{{jF(hOjLM}0oIBY1QPJ-w&qN5L^@_iDiq@{KK)~!P!F&*ZOLh}iGML>H1 z=Y?@#5R_4J*`9KXN|m%?_lIT&_Tuzguc)Y$mXru{C=%gp2wTQj$A;?yx)Jz+y{Oz6 zn4WUZ=gr%I+rD;FV|i0;UG{^8ZU5eMSQU96F-)Pd%hR?UX_k?d-G&YUhYs0i>%B2# z1j7}rI{;F&m9NAc8Nka%4|dnkqwWVi3^uUY*KjJ?LP$q4cH)Wnt*eOpmoGBt9N|ha z)ST@ESm<6hZQo6$xY8wIz^Y zkGrx;%AHXbylhp~@qo$n^mHYzKoVa-OJr?h5)~U8RATrL+EEx-37d}{n3|e`ol>|b zv1ij;5MWo9*Fh|c0N?m{kC+&CJaR~b^mUycdVABrChD@X>(rD!sFNWva7r;SGD>*0 zTI{bL6Pb!@-X-$p7YoRHly=q+P?w)f-aTQ@^;Yf*h6u)jvVx%-xS+>}PlXoGtq=w{ zoI&Tz<$3NeMRA>vMAvw`Wi}O>^{@2>M?rl(^U){X5VJuHK|JCSpNdZid)dk6rnI|) zUM;yZ_}gO(5Wy*cJ$cG`fF9P!hnd{*r`T6i0W-R3P4K&f^*8t+=xoNb#_jU367bt> zL%q)MK8-PeE*VtAZqb2ygR>zq1cqQogDT#|{sc7!T#<&s(o`-icX&`_Qt(Gw4JZ^E zjWswWY^A#=?Lqe6yMKR_Cbz2J4IbRPbkrOBM@9g|!kkXX@3P<1|1OtY?>9#@Vkab3 z>LYUBB@J$*0NT?|o(VCrT}YQ9D~DXMtd?-241!`T2-7Z`a%+*WfcSttETCp#Hi56_ zZM?dDRVo(_E({h1LPCsg6@1e%rdJ3SP%W2xORuFx(-u&-x?MNn={Y34zxD>LY+bV8| zPe_PMN-8Mc`M<%TJogoq|40L!3RiU;_WV~~q5TQ^ze95KU)qoVKmTMGkPTRyM4y8r zB9e_AD>Yg_^@`7&qM|Nt_myVp7+oGAMos5mf}&Pfja>QVZ9Y@i!bEI5bQaQeDF54V zos4KRI#psYvw)MyG5~*;`$a`(aoGZbfKqyUF)t+37%n^dANm(-c-pWLt<5;+2b2!q zUY%O^u})ExcK49V-%x|K7Qzsb`$#A{4=6F6wtWUeu<<>__#P^hoewkfhfVT; ziT(zN-FC9vr6ISqltX-cOGUS(UbAD{f;QadXFp4ef4U<+xev0qvURkgFf*cRUxlKV z26d`aZk3Y=C8`4|5|-<*Np@tOftruR_}AFYgCvtM)20mlGI~chRnl(XO#;f3Qi|d0v1DWyegxOg`!H^DyaO3-WV|FUWRdw}{g$ zFD`dTBM}VxiDzYk2cHk)`&G0YW3|S{&m^0`GMlMwc{+3Mi=xXX@ScU8iFpA46jl0j zjpgFkWZsfn4Z!SkHx`Gdq|`94S8TK+Y}AQEQEZBSrj3w5rZv0|k_Jgc82Y?rc9Mud zW6VWano1_Z5Ja4Sw+CyPQvk|IL{n$sSA*S9N_pSNNDqnaqyFv!!=Mx9F+H$#=p(kb zwUOV=y@E;RAyr^hr|*qG znNBb_zFbZ-p$OiHQmhCn_;VPg{iw@K?wZ+;o5VkYPHvBHakgG(NreiOURL}mRb#pl zrg$vwlq=gcQvB8%%QOe`ut4Pe(;R}G5^EXP{vMtEqB)b92jb&kGl<4Np z`nRu1(x(jJqi6OOZDRdRE**J!d5kMjqf3C<0l1(Ov=l37-In_x_gjSksf!zj-aoc0#SS#P1tLR3 z{)i0~iO&tf?JjhflDTfo`(EB761ykACvvwUfHWi|Bn^?bT-Y3PbeJm5WUl*%zMO8=9%xqNN zYhRZ61N?|CP=baZ@3Y>YfncTM;_sNUJzF# zUTcNGE8WO5BL46Z+e!UoHHk(j{O>zy?~)R){Ir2LR8>`#fPg^z6p0T5G@S8ZNrJqM%}LhfF*l*p z&pfJ~dQOBgKm7OT<4!@(?(yaZ2!)NqY}c;6+{+qkv|#Jt=m1}%wJ_j7{5Q(txWt60 zq$F?Ib?g4V8h5D>d1xE*#97h8K+(uz*ABb2O(5)J!z4>lsvvms8d$gk&W4KtX@=uONXS=Jk!Vm%4||4<4Ik2+SF&9?SG!$QO*a$dh<~d; zlA`{NeAw5)m{2E?qz@h-1F36h$h>3!te=LH6{|3Nrqyu^;d-u7zzeTWttFlR>$a`E z{l4PwO&N&^wWp)6bMm=#Z~an#TW?>zoQS-J#_8i##|1J!pxA|2D<(VI741C|XiyhG z53`t%FuUlIVKy3*ltk0=earfXw@;{nEr5DE)TB~N;eT~oo}7lEiDG5y_e#BrZh{~B zwkZc3_pn;KdHp&=pF^-^w&Y(rR0sU4kQ&areO;wMirg-#D`Z(6x87JF@Kwl5lH8~# z7Vst}h5=r8$lUSR0NQes+{U`p%PJ_xK&rcb-yj4}TUoxi+g6p1Ej`@^P{>}mh3%4< z--)A?-m|nS$NC)c-?+}s)j00z7QBqgZk3kn^(DM=$aPEQ;;JOERHSvp)?)q>(i6x4 zySnSL?C_NMST>P(@?`zrN=Gj|aZ70$#w1Qx&((=r`hEItxQ79g_aLQv;6K9siLuiH zT#Q4-#f>I{%`CKNw9&@{=q8RBv*}Xt_X~hN0v<_BYzzQev>&g8vP)8TWDWvuNA+R4 zI`YJ>MH+4Sf8)xL=f?v?;jsluhZ)ztcSmqZb*u(RhlCi))xANrdQoLJfXq8M88azW z(<7#sBOTk#fk%Ns5YXOlcof7=91Wm(6o1my)n(e?is2U^9E63G!I0H=ClqCU{Y~K4 zc3>2VdFAN0u%VXRAfUb&pB3HMaUT&XC{jSE0UFc~9IUXd@Qdo@=IvR7ME`A}8hj&k>QAgBd~QTZPq=72H#huG*JVkn;OILYYPI z=>ocywv*QlC?g1T!I_T39gMfDagriopZJgCS)#E6+$kQxfj~OjTqxRLrUT+dpdMtD zIDj$M#9*Mq{015=`mMmek<2X~fqug$-ZV~)xO^`khD9GgQr)_B3j>2tZC&Vc{@-mC zB--@dyS-<7Fa-!iJI4f<}Y$?<=UP)S|MxYq3s?lAzk8AwYf(kr{; zolF3&CMCJl+&b!UjxCk1rN^~P+itNp8{T22_qrX??o|`Lx!i)u4UY1nXqkn^ll~j} zY#ujckN)3we!S!Vmma1oJM|9^BFoK1ug3E-V08EEU&%EL8BuW>QCrei&n`OyvWYoa zmdb_6HMj=>m-=#CD!T~n#;Aw2nA+sj%wrLKGz7!EAo_ryY@H^)E0v<2mW zS?}akm8py*H_QFUG{g#(ml7RZY%Ygm%fOvi<8@Q5|+UcPIYb_Fl2o z*_~`wSnwcw_0=0g*uWMwx-1x)pUAgg_F-Gd4PLv-TXJZp|>S5lwNy3GwtMvGX9NjDm!4V#A^BQ8>*l*jm4FVf% zOPCgYh*1iUJGM4XcU7{|XbPNOf;S~TLY=T7g4=EQ1vMyDx907=m+ zVV-CtjNdsq1GhcJr_!ETkn)*WX*2AbJ+=FYPT`Bc+Lh-b%o37~7YLW^oQbLO!d$s4 zZ7*x5vxUrzS8A<}<|zc+iJ1TzSD?;8%w*)uxlI}@Q=6zAxw0D}Gpy7tV^cHECJ%Ng*}Dv0fBD8V zWzeT=&Fu8WC-+v0nQ{kS32ZcR>Koj~6v1WgknyoCTy0Z($^+^pt4whf#ntn#)0FL> zPsTp`NyBiB-DI1bDyOtd;D#5}=9Hw--ihKACJClW%ehR-npuB0qqp-vHWOASPfeI* zEZFrXQBe`j4q-I`bU?6{e+RQkt2g6=RQt4XI4iBLXVWLj|Kfa=G4Bg&z5vxUoz0m( zA#Zt-kcxD&x%szYn_`5|?@D&=&`*^4#b=3ubFteD@@O{5FK=C4KUqg7?)YbwO(wi1 zue7}{WTPqSEPyFXD(@)mcFCqx3%T(x4g}pfMroT0u&3V;a?aLeIAL-XUVX`sXBEVH zKRH}+&6ul_k=(n0xoYW8LvL+sHM)Kip4Ewytkdh?8)X)p^Ce%aq~)%xJO!;ejI;uS zR6z^`l!AgtkkaF35X|1B=?%)-DltKG(g9457T(S49|<#i%X>_y!#D;JLNEli*u@vT z3jBaB0xKD$y5avIW2ny?^Tj*Z?u(B5pPJ(1MnB0l5K z1|az2!0KqFv&Y!wS|`cEtQMW5hL#?Kafqal$b|mI%wcV*fIK?~yYTqeEw;o+^Opzf zHeE>ylntuXBRfdyx^^HYu{k;OhrMm@U|PWoODvSND5QC^3pZfk%7+dgLkC{#Fx2I8 zb$R_(ft82hssR85I^dw4`4~~oFX@;)_4{hJNaH-Z5<;kzJ9H9-7KGm&i6555!|5*j zbzB^mY$y>#Ft_>NO;zCzbIixdwPKN$p*#VE!SA}v_uATX_hx7SVt~j^k28N@U~g$> z8NFX`f;i51^lU!xx$Q-29ooWs>E}xH(~!mmQ7P~)Ps_E4%s83fyZIHCu`bvU8HvHHGe|p+beM|?Vn94QJV^hC;|N#h*d1@WdM`Fm4|YNZ#?L@x14#^YO46t^T6P`$sX@Dub96kN z;J$vTcR?m8ai`hc_HgF~G=sW;3cD~|`SFL|#%2m~3NcL7=c~gYbD$#*e1^@`Q$i{V zvj9F}yDi1Mr<{Io#w|!rTgH#6nrF8#i8;K0u=|p+V6N9dhkOodFLrygOQ|Hkiw0l`eSO(hGFO7RTxLcdA*a zwR)lB1EqgUZZV;tq;vvP0VKr0AFi}>QPlS?J@L`4ML#w=IskwQ=#hxQij9r!4XM}z zH)-&Cq0Pt#fOmukI|AxE}+D%PQZhzx$^hg2Tgm z(2Jmz`Tq0gH;e%>mLpqpNnKYWJX~8u~iJJ2+JwR@)arIO*FVL&0lNp@j$GX1CDRv=MLC|zr`U2EpA2KrF2$^NqvDVAW z0@V9`h5X;&Mi=)+nUf^-GVIyo{`e3V7x%;;B}KH))xUqR$&a&# zgoHkojL)(*fU@GOgQM+L4OLkf>!xynz$hTEEJZ@6x+xe{zD5{b)SJVh1o*}7Wo5!R z9&z64>)!#^jOS!I(d7R_=m*q0u5}%MXJ)#k-T4MP@T%o?n>KHFgf4ogyX19wHssd> zq#Ze1ul!`A+g|2?%E=~mytvg>gE0VsLeq928SFrnn2R)%5L>%zi_`ug?cs^S@Z_RJe^fXXu^rBXn! z1Z@NCaZX4`$Tm!ys%xl^6LU@hMm(loZ;k}SztsRv%S+uASPpHv2FoqApC%^{76cr< zT@7}DeBH?B>~M*;FzD;Z;;7f*ZM=gZxW9G~o6*aX>}iNP6B1-ba!1A0)iofde)W5z zn@@QI$fNP`Zwwfr0WEA(EO=fnAcx)`SUl*1f}v-X>Wv(1U&go_gsgwGW@wrduAL4J zjCBGC5Cny{W6D8>?HV5bfr!doTU`a0c~wCbg*m`5Gc&oSOI@W1(!C}39#5&RyO~SZ zesrcJ-#;m-2aIqkn1=y>^N2nONb}5r&(p(b5{qU7EU@(elz~dGuC9(5RD+gkW$OF; zcLgfK#d5buA0%zDazfZ5B8ms6%t0P@5|^;eeS|MyZw!KV>9=hF=leaECmfgtkScWF z%RmM`%Qz#cem3~QqCP|;w7+lY#+^29x#9!Ca<#R!pRi@uT-R0u*Bo60609MLsH>@g zv=qc{Pry4!{()mT|I)?goYVG7s}~vC-DDe$ff4JjFEJ0{%n}px1owaHt?~;S9zlqM zrgZ)`ERG2-qb`}Z@tkN?xw3w(`yH#u3frDFdEyfA#4gav6}J4n844b9+;MppF-M>0 zCYON7SF%mt2I$jojR@n{y2tY5P`M30*FQ2S2R&IDPWvTbI%rTQ{ zaA2w>iy=^t@5G7XFaFh+x#*uhF3xH;m8<+)naj6Q??>n<4D^cvi%U3pU^E@=RelY_v>N&i>b{?}o=tb}z9k(?5HN(<#U36_a$`;@djKrOh5d3haZD1g>wmYy9lQ=@V5Yv+GYU%qJxX&Nk867JnD=lkq@0BNE;L?#otI zz7luFM_|O<>Wg05TaSk~Up6w+#3vZN3=O+we&hZ*aoDfkfOpIf2ancpWIdNv7_P0% z3%SjATt6n(z-$!FG@qbtFbw2P_x?>>jq|Erhsg>=I_Q)kq-EL)$;8LcpK%-{U}o6- z)7mqaOm}dX)cuEeb%g$HVq(kx5wCEmD8#1mFLk>Df+lYwaT*g769`veQ0OZ2+|Y>^6^AoS2LDcrit@YvUBC-|(FP%y=mDS%3k$Q$7YE(WrI5DeJI+|i zsCv;U|A?{Kdxf$BjNOeO z76ZlN;$l+hiVF%yxq*qvAtvwFhKwF-fso*sPzV$Kf=L5Da%5a~Ft|+FRz$DhwUZN@ zICl$UJ(9ypC8hH^I;`bBti7Zm`rsrc)|EK;P={YuRdtit0n;1Q?j*mRiz_E5qYfpC zn)5}?1l*pc&5s*zXVwi$ukMpPhokpxPJ8Xw+4AHj^d#_bLI6dDtrij-tRRxrO!68g z1Cmh|S!T=e(l=){sj5)d-2mSnER}{qSYv@g0Y6{=Z?{Q7q>9vK6)$k4vy~6prHimd zR6`l^p3C1{_*r#tG8-pXCG3M=4~k$IqoRU2%Ue}{)@q)=hHP_rssL#NI!ODUr z4hn!veiegL1w&<_m~?_r4`nE4rEuFbOu<01ho%TL>dOA+r&1ve|2lk>Xh~mrkr*Jl zQ^?HO#EZmrBqWFy0gjZjBr|e+CGDP0i-o4z!_gIDr|-W0eAk%+XX&ip_#SUi5;M~O z8M1syETZ>Yaq~&B6A25pvYc_3tnn8PoV5!Lrm9_dMtzU9_UUuOADmHiDmE@=>wR}} zXdcupZ(Z2@@BsNAf>Xw?HStNxrhX)pi>F{HAZr1XlRZc-wc^A@e z(M@t{%4Y}rBs`sU|L+Ap`J7*`xW0qgLb=}F{CiA%uw5A4*&sRj6LZ#?Mf2JIiZOX5 zPZEAS{f{5uT;U^f0ZIuQA`HP)@$qlt=kq0CXxeW}W=X$N=%p2|kf1H*y(=()nfQSn zd1FL|31qO}Z4hE{CX-Scc?5_DTmK-hYHkZ^R%MkXPcth-&GJ$MNb;B{j}XG&@3(%> zwGIBH#p6rM#yBz)ubuZ}1BJqMX~OMYLxu^CAp+5}28@xH`xJkLn8w_-k~LNZ|smCz>fh|y}nz&2zyV%*$s{U&~ZHIH^h)3S*R^8ZV*(6bUh_|ebR z^&gNyd`Isl3PYU$(o==QICEO18gh}sY^D|Z@7Mmeup*oz!(@eMJU^R;bW@1KSplR*beMuQ86E!^V!Vux^VnV62Xi;P5|n6E5x?is9zAw(QFz ztE+d6!|@KkBEFBByZ;c)KBppu7J=|l zWHiGx6N;vezP_i(uhdg3(Y=Bk(sXsNxc+{LKCcycqHtH~ht17NExN4G@>+KI)SNW= zSuLn_l2G4CCXs^iv@%ai ztbBy}G9)HteEwvNp2gC&+!L48Br4}%LVg2;&bA7As`k2n03d6F-nPwI**=z$!*8 zitOQxEG#SxQ({=;ue6vjK4;s4qy7jJGIMQhNw2h;8sZ8JZ{bRZZsKN0k9j`cFp{6_ zMECHkEaxxHm1`2EKpqoa(QD1%*RvdUfwje$;J%P!>QoTrkq3f48_`fu;X0Q|# zm{NuXk=c}4ITdzm*?DC~Yhfg`Fxh}nTG|atY}_9%1W#0-;?l^j)x*{9&O?GDOabY2 z+co1W7C(tTIP)A4?BNoQWmS~SU=W26wvjT{oqauYMbDEDbzcG0MhlZhkV_^74q~ukT0G z!~R~(mu(P`UroLaLPr}D6PscZYMAeBu=gd23!u-s6nzjr=hwL|#Mbo(MUjztA423G zE?GW>t1&qoo1!Ui#MdHmI!c)vDTIVC+m@ip?HG@BE-o?!$sP{4L{`GBhxaZz*n`4H zTA(u@-mw|=0&;FJ4>+*nhOseIW~ID1f##iUFAW$x2-kxP1NztuJw6e^3j&PH-m(o- ztr@#LQOjMpAdO)dj!^XItA#ay9{7P=O>RJUQvy<7$0KA`6+cjpl;7Pya@8IoKS9#5jVp5 z&2xM_L1)==?_+Th5jNOuyGufTjlva4V;CznW=Qb|&*$r%ggqoEiP2Z1)#IpTrKyYi zMk|rA@B)rdxh?1XZexC%VWJeLoWkV~6&=vxR4%3DhEu0b#nc<(Y2i(S7L186-i0J_ z@GNW&$MQ$Og@s)J{U)e$p-Y3LOFhx=%c}!2{1^af3RX%i)k*O2o%%v7`mFd$9$dpK zI)fo5esMzmW%}SV2QV#-qzsdUE@;~TP_9f8%e1LnlM%~x#JNB{(0Q;wucd)Ia9E80 z95^TywR9jZh7j!dFox-u(wf-XXHM{oIQ*4mqJ~6bFUTOcD%k=qK~vCYo10&Kk`Z4a zb`Vl+_N?X4w~~&${CRSI$_V&3Y!I=nGb!DRi?7hqD5)UMo`ZhKBq+up|BOGE(r}PM zwk9_$kdXALqJo-#&n0s_QCw3FQ3UjYhr(DQug1alkF?@oa@X7pC5B7^jvN8EgU86B zjJu=*&$)r^170HVr>gJPb<$;8)wx@Xn7}WYj~X81XJIJj$5zoz7c9qsurGFh)Tpm$ zIJz$dJ1sLk$J0SsAs`>6%!xAzqC}{Nq0qo{B5ZTLk_JDge*OG;b5~csO~XP1-t4FE z+dJLY<8$@t?b1tAldBuzsYbdA-I_hC6%;oP4qV>YK5;K9;l;W3!GZnBI+KMfGb?4? z7AH=ff}6cAv2tJX-~)pY5-i_atlm>pMI^Mu)DJ|*)3O{W$WAiNJneL!iD+)7H5GxH z4b_I!mG|?s5itg}!?sxPZ{sWG=1$?>JZ~YKb#IgfjSKFqlk>1(R13uAEUZu`;5Idx zteuD?EV2y-4S}(hS0k`=e4G!LnG@m^U{DO_00gz-i+aw68(J|U>3jcOGWQN@V`B=- zG@-ip-L3Btp9HqwR_mGQmTjC~3x;PgFA695y61XZG8YC5Ha}7)Wc+}(OI>mKp0iwN z6P@AC)x@?=XSB<({P%~OohrL)?<@K4-7ft3hfO@Q)m~8?N?<(UCczR9;?aI@-3|A| zP5G1!l%Cnym$0-ptmlNkBe)g>-1d=lV5FLyIzO}zu<_zNIGd1Y_VlnT`TKwU`i&;p z6JjC|OMVV&yta9+w@=Lv#fYf=;!7;i=im~#o2p9JiD(wOgqaI}LTiA~O8Gi;_L}() zB#R40#h2dd;E<5DY*-LHI^qcKgZsjDb@hXco+(5@24pd%@F`LC<6f@_$E?$*Pa|RV z^%4Hch9oPKIYwGm@f){pJ?f7$U|`sja@-TX`IotNZ*luXzM^ap&mkGQ7SkYnCd_kK zo&W5dQuhMUxMM&9Q3VDMBX{7Uczu-{+vwvHh0OEmS8p2hBLylA#aPqazG328D8ipw zi4|x1Qa-14CS$8OWl7)NAgpFP3^SVEg0I5DEUc|J`;|WGiA=75v+r;m|XI{v5jFP53B_i@E!x$SAE^dt(Rq&5IrWpR+Sa57^NwXkN zGV*!(@HA|WSic*l+fDr5sSxY&v!53SPV=HDmeu>Yp6$%?x8{EF)0Cbqc-~u|pen#< zqnkp$3{LZ&a|ci}!)n;kF&9NCJ4Y;{b~>s;389i(eEPjTM}m&s=I1~aj8BfK5C%AK zwuGfncefss$0yiWc}TSPsus?lM&WQ5C#DN$3%7QJPhA~TqQ2+X3I63X_u+(GHrQ}I z(4Fm=6VgUN-qr@!L6HsMmzR*)+Xkc0OI)u=yCn?!x37$VNX2gTiGcY$n7+urF&}Le z!xaUqu$3nbU6J*MxK?KSx)d=Xx5ye!WxEom3{!a~7ACX?tS*0cg3)*jj4^;ZhlylM^f#IMY_>L+S49t_=F@Cn@UNUddBHbpyFx5!FJ};Xe#dhKt&N>L@}S z2;q-e=v4RMML$XLh}e4L6l;5TUtiyjwm=jj*Hj}A?{oQfu(C+08>=%S(nJ>r)tWo&Y}HZjsj>K zO#TT5JAfd|h5Q)|xSXbm{#eO3SN?Hw@2(2n&KbaY1FE!ahba_I(s-v3c9CYDR#v;z z0&7H=;Y?e&yih3Z$HpQ$i!9dS4x5(>v2#<&E8%C_Df={5+ndE<2ON+fHY#(Le)+Ox z%Hh`D=FQRvm5-_X8m0-jv`@+xT8jgrRjJbx#NoMf;gzyM*#%DP0E;2?M^A6V`34JN z=De9!W=Np8-wpox^8(w;vWYtK##2R?Wh-1}$o6AmW@(?A%eLs+sG6*O=w8SzwC~r_ znjG7omCub8)1Epl(VM0yQTnND*cNdxTKpX4@5FVa0(WChndLOck7zj9Dc2Bhh3=-S z%gHNR%}waF=Gh}eo>1TpDn$nS$&+4eXA`x%@Kj)myx_&cTzvoYYbStopAr2#hH)QgR03O(072Edy2&;^ip(1u^Vll^)Ku(8X6kAKeK!|GnQ)o^}zUpf&ZSX z@Cj$dd<@-IMn>j!BArYaf*~vb!I9>CS@>Jxs{w10&yQfa*;TbMQeSsdvV3|Yj78tsBvTE7d!E&uH$#pz=?_g{>e!ZhfLXzqrF`| z;xRSGWUC6+zr{1=!e<`{N=ghc&IW#Nah$~`_=GBml`e1P)s1PA$1iD?$ z1xLr*iu`+HiWXS&e7KH@I?SRCINv$G*H9u??;jVt6r?!9(S%34;A1Kmc}B(7iP}%R zg#8~1IgG@fJ$r^L1HGtpV8G3>5`ik0j|o*^9zWzd_D>2QCE#1-q3;wC<7z@gNbSglJ%xR{P4u zI7I8me3_kXbnOXG<+?=?glDX7%G2`}=I@D*Fohf~ToDKL`JA|fs5Fq1ClQl#PCo{x zT6>vjyuE!;_b4Zj(mv>pY!l?8ul9@#5nK&H$w*x#ZyS#C^1C5|)aDW{6OVzfVeJ68 z$3z}wi+Un2K;)qzkfW;`fBia0=SAmPdS82tG_x!Ep7oX&_=o|vCX zSQcz>SW3iUzR~Y-aU48Uv+k{kS2iTm$_ky7AKb9~?b~(j0tE-QDy&-k_Ktb4P|e(o zX9LP=dDaGdCCvl|FoK|yvKS);5jel_YN>^pZUZo}KKA(2&5^dk^0J=&-ZVbuai(0w zB}DJkI2ivo)ERVK<~Cp;@(&EZ2*_f|)s zOeMeFc%|s8+*WqhlIiMtbMxEL?;G*x&=5)wbPDW9&;XJUL~WDl0%-B{O=)Bv0>}O~ zEqFRN-@#t1VQwIyEmHV4JkH7Mz+#*(#qJqA&kxpYhT#qhIe_o;OBxOfMZ=c<3b81+ zbkQba?9kfE9xO-W$b*U-o#5DlGoGXsWByPS!~XqdorM7%b^9q?Xm z7aOuG&@j+TMb^AcD=d^o=*D>MVZ^`WB+(Lgpze*zQBG>hI?KjXhMLPX6BP)EpO|K6 zn4k;e&h&(viwLuq<_NvowafGz*gW)Gr975?I8UVw6e?anvSSGbZjfE%&=4a zE?NrY@PhYhm)9&)e3oMLY5O^Hz+TUdDWb z$uU}A;!--Y2@xT?i`o^s)8EzA5LTi<KkguHsB8oJ$p#3eRlTg z)fCCtx_#b}>T!r-Js*Ab?7*Ev8S2MH!?pKOe*6)LLJ~4!Eq$gm_A3Z8-86Oa#uxxH z;OMKtByB;Z`_}|N23)px#EKdt6t*A%}v zUlDwp5s^@t5gh)CDZEmHq9M$*HRR{8RjvXWeSC}E-LPw? zxfIQhP`Nj^rAaX2v6($e!H;7-h1a>R#s^x&aVKfzV?i4scJ;2n{#nAQVEOzK`>tI| z_?3U&DCA$`px=zU1*~;_)XQpD?55udDV-IdJ9~{DH!TJeMh!_8lRffOsLA4#6S%m! z##$Xm(bdn!uFOe%iHN8(Oy9EcJp5$S-e+Bm(_{%01rdKkeH^Ao#iRnw5;JTZcNr!% z2AKvBmBS=UG`t{ze|3w_U;e7IPMu#)L$@(K}e7Q<96!&h96{bu#foi zOV#9`Y8o27eSP;)c}2?-K>(C{P~l!nP<`@e`kBP12-Q!$2YPJYYYa`WCtIBA(B(_= zn>h7!p5D5$$Nt(OjT2cC9e;Js&BwH6n1~DudZ~MjbysQ@I0Yvr3gO@!8<%GFheLK; z{NsZ+8TRmW*k*&LbGL;X_uF9CPVkkG zDDSeha&Ul8#T_S1`O429VH%jq7@ITCb);3`;3&_tpL~M0TmMe)#aL-!vD2d)rd|!a z|N9`Y(|AtA#>aEx?txvIW_Hfw>fS?psi6V3pPM-B6CoOzFi6&1XZ+}Kuqj4}OV#B7 zUng!-7-D1ZfS1B`toS1wS1>U|kAWx4rKNUo?^dnGGK8jA1Z?HeNrHMP%W;N9+b46+ z3kzX1yxk*9j-ncB9bf#Vi{l)Jmxoj^%th4R&wdgZ460neu*Bie{eVAy;M4FlY2Vn! z`Vk}aew_tBHar*Jg?tqPXs9N4-LS2rnq<5PH79ka@r5iD=5#8HGLM|lKGfg89Z$GF?%JuS5 z+Og`1oiht=hu^xnxe0`94@}bBK+!cLB9fB2h9fACT6GYYq8kUK1~nztZ$)3<<_wdW zq}`Nr=LYl&uQLoQY$_hwKy{q*h77O`zzCY;eQ3qD5T-K~4^;wg9Qm_Qkh6iD?#=F> zRM?=15G0hgvDM+V#_8FPy<$)bVLo!ZyI<*`FYnA~p<+V4q~GneE)tO!UyhGk_B|y#=e6Z zq`@a~;}CGj*8xe*q?{BbSWFd@i3*>S@;z;9gAQ68?tk-xf40iSKS$qp;gkA#6a z6HWIgxxetq>ORa@iD?yUOFb&U8NbW3^ksN(QR=X^QuTeJF+vxSR5?VDR z#detcojMiSV%T+6>$6!E6RvJ}Cm^XJEj?W-wuNO{2iBBP^~MSZ@`LY*4~{7EbvZVi(xU%GES`z zmw6kH)pQKfWoR?FlAA8sJW_IN{HA+I^=NN9(SF~Wv%YfcP{biL9T(~D zs=KAs@cl}piN3ner<_uGHD$Pi%M26R{3U0A!V3>}+SnDGV)DMZP9vT5E93eP$0<)- z*g-!jZm)X%?pw#@=kp6cyDX!o?-2HmJ+Va-ZQ=|bZ>TE+9U2@*n^{25z0Ng`apqRn zPv(~h0}4iwOGXdhY7!6<(o2HB;QBx{<2hn?HLzi=SRD zV0?n%=T0A13HV@t@3(g2;R{b9-i=Y(Tx586{C%10`BRSX+aF- z3O``f+Xw%8$gw&Tqk2uX0t@?DABkz<`^k@(6|aR~<_^e0R51;0m zHYmz)Y#C41RMW*o0K%?MzMDa2=}kz;SL1Frg|ZCJTV!JL=qBZjbyQHVq6JC3X7uut zMt|W{g+4ztRj>pGYZCh(McUZhMxnb~u|@IbQWDp5?6?=01$)k z6Lo%uVCG#TX1t>eleFp7hTfZyD|8Q5+U4he?7hL+jJlrP>R|&hs0Y^}AU5<;`@XI3 z8dW@&i>T!3X$Gnpt%LIIinDuBCCF z@AvEVd_Ja(jG3!Nf=7-Tcf_mnvN&P^(P2CQl5Ss2=zS}8j6p;eKlv>e4Xp()kZc8M zH6FG-<}nn-p2q<47jdFbEP6xOVr)-}QxWM(j<5n~2VI8SqK>4WiGVU=rW0G&2g&2o zkHJAoN>;+?3pl||hEq+1^`)!JFQ?;=&nS8nbSN=q6%=(-ZiW4y6+|SZGw6v~28@vh zcBtDAO`74pOGvPj_#*c!n)N`GTTlG@T2hm7#~rwI(BSHng{{iL%b}`qnp9-lLy>oO ziVY50yt>4^MoL!a^CJ$w_R}XPyIIaaKSW0%put1#iMXunU95P7PxrQxnm*uwA2W9) zt-Sbz?l5hBBA{V_E$IrbSxf%U+b(p@3Y~zGD!}YYy0HTe-pl0J*at=)<|T8kZw9y% z)%qx^Zxfb(+)6trVfb9<vo$|%fQY)1kbp$G z=5 zI7Y^dH%9H;iApC_4&Nx%d;GT(^7bc}vhdpdm~o3sOfd8DA;7gkLb!*sz-TqC@*&l+ z=(B)H0w3{#jRE2NAS<|GbSOHpu#@UmrSU4;8vVKAvRt$}+v9PRuOhB?(L{vS4}}a% z3>5NYp<;=dGAhZ+{-m&>fmnQ3z^rdZ@d&^!V=VaP*_0v@+pgEDg}MW)i$n~;n(kKm z?eJK+YYa*~8SE5Q$^9t)kanB*MTPUPcYJeWJsBM~lfNeRgPce)x`zcY&ubY(lIO_S znB(y0qj2kjqq&#(H_>-nZZ?1i(7DI?EczosO@zi-RN5*Qs8*6wti4RvQw zY9z_(?~72nN2sK0yXVUb#0(5p%u6CfznYz#lcP${z)MW9QDD z1Hu_m|G<9eBf2^UF$rndeTpCs#JQ9dNUnk#lkE*%dFLN6-RACUWDebRbsRKS6fJi zylA)@g^vBAL(YcF>QT9A^Y;+sJy})}RE`XgV{dfZM0;^whO?z;gPY%VcAL7rqDJS< z#c23xYwcKSg&MvmRKBQOVKIF{`@W4w`FE4ZrAqrfS|gxGvgFx*<&XAU z4DYx4^xVJ&&~uzPxcR_|_;k9Ako!Da$U@H-JEvxaxlGgO(5l_A;rCcbT_vx|zn?f;aOAN9LYE>liS8|n2(EBZOEWBD^!`I63D zgMB2os9@vf!7ig@23od<4f)d2XEqOh`+l5_e|7XicI6jpRzAOFVF?E60YSSKwmITT zkCB(3nRk?Ntkd!GYxScp40FBsMZfXRANN$gKd`OmNcqR&-0(#sE;{p);iF{K))~Z# zl(kvYS!A;ldc#zbZ}TkEP7gH@iu3eol6) z-u-h2FsqNcuvhe;#`^X7&+BM2W{9U+*{Ea%Tz}8BIL7Ht}}YJnPvmqQ=9RMs9u1?>PVYd8;KYS2vCT(BDd=uXb#m zrNX059)}kF#7F#IZ}Z#y4SCjp{F9Qn8z_<%wG476SC_$i!V9r@B-O8@Vn|tlvM05b zCH)bwQoUu;ugZ;yIQe_+r_mh*^D9c$oG@rRiotmHhcf4}@iyM-r z8wBDi8so9Tt-O4|!8P?`;2iK<{T$}Tau5gw1qF}vG}i#B6jw1f?j;H8Cc2OsZiIR{ zxcDeyuSTgNgiRx!G38}Pe6rT0vb}*8onp~v{o8X5H29dt-O8#(GLpacNUa@$KH8By zDzX% z5d~|1kqWaO+hReQJOBP}|LTcpV|MUw*h^9N8WR#eBkPxB)2+Z)1MZk`^BL*&I)^^k zn5G|>G!ZHn!80WI(pHrW`WsqWTq6Q8!{NGjuV3k(+Jx@|?NR6XrY$%#|EuwZ7}(kE zpeX*t8*tqA!*3RwzA(0e-tCkw+tr7ZdjK%Q^-ia+dk_UzPne5-dAaQOY%T$ZKYH)V ze3t*Je>GQ*#2#(#Ji`h>6;Zom>%Sif{TYTISVdBs`MM0hk><>&i&cjAhO1xm8^6PZv^`AZnDNL+DvC%^#JWH;Yc21 zozM2{n@!w3_5GGH$5JGjB5E0q^Ewd6T!%9F<|Dp!)jjPq0`Z?Kg&KQ3HaD;?tr&`= zDpI~2{DZ(hyEVu3#vgas02T!02y-&-6^I+ra}SvSmYMT>SUsU=1(V0X=~V+ATDsLl zh~W}+{%>)C6n{H(F={7;2xqM4!Oemz9Z`%(lEs$vamYzRTH4gc<^hB3{JIQsJuc4< zuPJKwSB`V^y+(KHh;Yt{@4cs>8{zUAU%wa8BsBgivuOX+*H62|CnO`)fENi#c-XH| zkadVDB=&wi5~zScu~UoS`!Cj`Ckr8L6s=R36e$^<-0(5A554H@-{!unrn21A6%AxS zJu}ER`6<3tPB|Zyl=G;>um`)v%S-T522Y6k&lWbmo#!dCqfBghMWqnrw7?VMf&HJY zdh`ZjgWc!9uLp&7r2UzL_X4UJ=g!D5|IcGi)vG_Q7Cj0<$RAQ5&p9~9D}H>=!81De zs{~4|pWls=&lUz}4x=6e*YP^&`Y76#%uA7kyll(+sNE{${*P(rUVOc-l_U*uGe{%~ zbBJk+{9=B(M>b9GFw)N?n+Dvb%s1-X$KMDC96mEa!!m4ykt%7dtgHtTIse^@FyK<2 zPpo1RiS$f@`j51-Cq_Ch;)M`2C^NDE1Imwa(i|a@1!OW|?1G*~d@fi^0k)u9s;lcj zLK7Ix`7S#GQHN$%y*7|Zh;~FkE*RJwrJn1<5%>cX00Se!gs>FDsDybH)4gp>LSc*` zDr6x!i2;Fqqxe#7ZQUDcvJmA%#&4)q+JwzxLVHQj;4aVFSwO74w_{nZ0#l~fu7wnk zFG>qA6nZ3zv$Mlb>#p6s;Y5XAjS%hCRu(wp6u31Yw&?iwO<~vtfFnIfAb`owp~=GT z2`=Vv^bZ7nal6J-__vN?NpKGHO9d@BJ1FRSgGj{gIQ+j*0)a$kOy2lQ5b*tdd8t}d zdMZb^GXLnV)4k1!r2r_VK)5GdNqCT)2=AClU!T`x{lN#OB1=CDTHxj2xp)Y#?{l8I z-%tnEMXO{K%0vPdq<_dCk4vQ;Asx4SCe+!0~ ztgLdzgFIUa{|&`HC#ZFP4$3XE-aN5A@W(^FLngnDciA$NNm~M|5%=SouaWz|PB)hB zxbH#NJ3$)XWe5irfqf8P?O=ulgd(u3$X~yaPLh0L@46G9 zSNdj*SYW9MZW%^(2BgukL{c0~i0EA%cas4JfVCQ2D5XNgrTFCUCKcH70*q-r?@R15 z`*IMg7k*^@_~J&G1@!d~ve1g4hOw^iNzHZWL5(MMEg!=P`qOtZWMc&4T(o(4VL;$D92H(!U zN`5B5McC-`O8$lhGH_kUZY%cb`)i-@zur5$4ylVTk@wu19b5y9cIxyU$@*x1afX43}KG6~+U=!eGy{+p1phUy2CAc)xB zefy9TgTpt6yx!x0^3T1NAA5eD+}JS%3QL3)xSGW1+=&RYARM0P5Jz0nO_XGo=!d}p zPQCjWfC!JAW~j39QsL1yisOZNqF_q&N00<%o8$~nEzv`$?c|_4h-ge3nAYK4xchk& za*1M>>#RB&U*x`kkX$uWU$=I^uYFW*XUaw64nhEUw(vd5NFWN^A9vO`zCb0EP#>SB zpv5%z%_f0yz;^Fc+GU{5P!#AUU70=Otd*SOFxM>ugvM>+$0l5m(B4yoC21dT-`f1; zW!O``C)R@F!m){%7w@TsBWRBzX=+WagP^o!Y(HbrcG>{kS}3;>6&5}z#KOZuL(ynp z2MOnt?RTvp7WeGmZw1kisz{tEK0fW09}dN!ILmpTF6-EoaWdfD8~HOjNvS;q_qL&O zFFH6*YoXE=!g8@9u{{2Sx$e@Yw{I2XMC+QSr%Cxd1^M|^4a|aDs5X8pyAeeR%gA;% zuq*pH{)?s|AE|8+@#mxT#Uk1Jtk8DiajG){P)|jEpGZA3!o>j-29RyWJnfM>={^7J zF-zRHezx=j2O8C(Ov%c^iW)%f|4PyS0jo_J)`$FCIMjeQXpN;ci8r_V%tnT3HY+*B zK?SO1rgK7KV!$79r$UdFvKReTmZX4z6ElRz9_2_R6X2i$+N1%DpTbuwYH(1@$T_?? z5uhPHo(R4PQ!8XaE~S(Y%EpHFv<6}!Fi{{;&(0;mV-H$9>iSr14KXA_m;|{^%P`FA zFiA@^4a|=ev>;HF5-U5kfbapXX6b%=30#&Wc7hHMrEU{10-9R$gr#l80SA)xaBP5l zc)Jt5PjaB2Ren<0&`@n$et6ICY6{p&UKC2fD{Cu(7l0fjz)r{aAxL|YF{)8sFagQCB_sjOUIBY!jP$Yp%A zaS$HO((X;j-@9WFsk2~8S_JOldnzJSOfVOEo zZm1I%*v<8Sl%p=_tvRu<0h8c^3wy50#DD<~|X?b}s}%>R5t zy`F!E%7U40SL_Q@^aEi>mrSfkrd^ou+@!V+%7B3jLH;%VtI6eyHh25ZGQ3_LtCzg$ zdy-no7k9bNBPA=px$YVLaD9P_$+-!i_{GdgDY=gRV-Ge>9tV`0&{Q>Cch5k%jfAhkUypN{Zd2@kPM2PS*sw!-$8D}1 za2+V7LaYewr;rk3Bv07!KZbQiLPiBTH@@r{JjuN6+_?t)&w#}Fg0cSYi?{PvHgwC|h_o49a}uv8_ibaxSU`D)PPmdj`oK zyme3xhds;*im4OqbedS&L0do-4aWlil;ac_JyV?p^SE7+)AC0{&;pLdVmpmdo;IwK zK!HVMWhdmvdC+SrBiTEfD22xcGCfIIX>MuO+Chf%Ia#Q=wCiO5_&qo2fQBKqqmFE0 z`Nf40CBHF(g+$b;M4$6pMfhz604N$16+@RAb85W;?gb+vxvNW`q<^Zt7rFCz|GT}% zWWEV7qq4+;q9*m)7mi?UBO!a~v2W0vY56 zNNlG?ScDQ(Fc3I&h#v1+)GPM#w=Jp$$A>Kv>g}r{2^deYrhAlg&i(0HJi88tqLME9 z;71>ZXW%&Xy_=QwKvBKp8}a2~mzA*)8=n48*3Le&1v8_BcGw@pthK@|hBc>&0pjt~s;gnj#)F0vLn0{2NG!q7^UfU}R?AQ9z47^L1t{vmoIuiWI9=F)fT55n<--vMmGzBVf*W=)AObraD znct}WlnLKXy=gGaiVlmj*R2cL2x6&^%kA&9C=NbIPXzV0A+HD-)2Qs+T`RxO=WkRp z<}E&^t7$L9eW?t@ zoVYA9O(RzaxmIq%>SH6;DSll2zn2~Hh|6po`;|R`TL$63P*WKqI^T@-yJw>05BC#w z)`bvJO3EI8`^O$L>vEzs*9%=$)Mz8u`HPK~(a*Hb?yfHQg(uO9{oDV$G73dpT@yMw zB;iS&y-X)IgEvve<1O@Qc>Fy_zauts5E?4fG9$+R^`O?u9Qa*8^8~l2ODz;J@L}S3 zG1V~_V!{7_+%ZFTOA!_x1W6!AI~hYF)FARE`&L$nRXd#B8)*G*Fog^pX%DG4t+Fn> zN@7FFY)D(x@4{=4PsJGRUH7J|)NV(34NfE4gS&k4WWb%nV20Px?`CMLW!2zJ>!?en z_;12+OVW!gM;Rw1IEw-+5M9qjx48uHCDN$e_ye-Cco=Ws&j70Ii_QJkdz{%F^1O*D zTDg>Ev$Tuq*2!Cy!k13>LU9Olbf;Yp^3#6LP}<=NIvTA=!8KR+#WdVlY`)&@J^ttN zU5kP?tO`aVY-iR(OnIlnrq-4yBHM^bN{0eAt?_g1LBWaJ^0Q~puI6daca8Z_IvahA z*CPNmjJ>_sdr@pH+rI^O4Dh{2x;Z#ySE|b2T9V-B1&$Axn77%_7~m~jRm+PE=<~jG zSks2-h(HG5gPV23HN8$BY)C^hC2r-i5Xjx^9VhrITF$KL_+f@xct7>uljU{_9uS^5 zmB~7}svaup{}TBt5qWug@m@eA)B4zIVeX8#i=~Wl80=Pm?qU0UTeqD_^r%&(ccWY zIi6vo-g#4t(y1^AP;`X%V+4&!Y#N%oRmqB-n{g0gOKbI!TUE(zPir4b;S-5`Yf12I z2~{Lt{)##2HDkZq>x!1SGwmcNw_Z0ETE@MI-++@+h~@mTFk~4>vpmfDy{$&3V%}TE zjv!ANE8}&A?*T^%=8l&PUS@mZ)4d0@z1+QtCYyw@hUR9m3fRA(=dM?{1>bOM?>Y~}leR5v-VV}L%>u)i+X@jrb_?`9ZOi6fT3}ZEG zO-WY^zp^B4`+9C;AchE{TIn`mne48g-@p3~#SO(!ix1Brbq)!1%kpQsElHF-Ur%Wz zMqnN|nB$z{O+_T1?%_VND`XRspx&FSg&)UeS_=o;6VwPHXto$7?*Izb3fZmNZuv4k zHk5a1y&U`{sg-wn28p4GPsxVth7xs7-fknb)Eo2p$;7A&igPLn+31NW6Djbp)xD2< z#za|Y|LuW(sx|z}(Y#<&c8$pKR z3VP;4PqnrYOVwQS#A?f`@xsRg-9C$)c=uATow;~y*J<}5*=_&9lgBmXO1>)-_!2v8 zzR!5rm+C{oOUZpJr)bGUP@4{~X>tqMsz^gK3`ytr`ug@`=9F7qXt5&w_L}XunBO7# zbMR-e(aKX7M?K}jPXH3gfPA6{W)3oK-}3Ma|^|bpRZ7S@_E{L^{S6EhEa!e$vo1_1Y@}F zd1BE4MoFBKn}M5vKBX|yaVi7^Um)KxGN6h<&Tp{L$NfF6nokg}g*|-i$ z3s<5_!9sSqANg<=ihEokXPaTZrcb+3(=eWXPWsi%gRH|!gQsnX3Jx#iEWo8h@d>kr zQD&z?9oFeZX@-|xaamS;S-}epon|aFADjL5Wn~F-ZbepNHOyun<=uR4Vq#*7Z@BhG zpY_SiIm{ashmQwR^%>)q;`^W>u;UK1dqJxPZwQ z0_uwS8bL}!E98~`jba)1@VQjE6PZ8*4oZ=4dzOEU2`MQ;5{;ZiEE3?r6;pSh&59C| z&o2TBAJo|x!GLEU&_1xN)*+|Zq<9#4Cj0Am;zkkP%JeJ-}Wk?NH=j2uqqIv)? zq)=DasIl`58?wM*>X!C-585Q=z92*nkbvME^C*|Kh@%xKV%OBb*mFj6cY4M_xbA_d zIn4at%FfPCVplc)X>M8gRoZiwu!;2{WcOp~sU2{*8^DfZhH;{I{Py@;su@K;h`y#~ zJMBygb@OzO;)n-=m#LL~Ti(P;s@f>(5g%BwM+fVaK8}a2^wp`qg3}K<4)`z4&C@45 z%2UU0x4_9UtP5)h^hZKqB<_Q>C^l@saL!*&a+(yO{Y8Xzytc83^O;B_33>o}*_F zzQXTT&dDjew5znb5_Eps*=RgfRlQqg=NN=o=^6h)+q*dG@Q zKv^+Kwi(wDMq9&D&O~F2F6%<1jcb>?glS9HqJ0QnL`WAfBcH2iPt)TMyMIwLI_lS! z1+Vqw1zK^ohu(+w%eOCt+zjxkX!%@A9Zz2|Uuq~MBidy20me)SZkIn+JqD$L_Py7! zfGCB<#5ig-bF?IhP=zO-tyyRlYwPOpH-MO`)kf5iw?U-b$L^mrAXUhcy!6c$uD!UW zkN5WZs+A%|W*=vGp4SlL{g?;plSaNBrXKs=qztpgqk*k+!rhyLYY#FJ!#kH3NFO4q zPkEFJ;90=9@rW-~r`H(m;wzWFZ%HEu2U?E4mbCnpuz7$nTK+PnnOg^0t3)I+k# zu5U=1Y3;*1X#P_CmVgjoyWJk9XjP~SVlO26NDM%BaGQb1XDIFBCAQOyBPS67cFJ#e zHnuQ`^2z@FbqWnnm!Ije(yKn#{^jBcz6WylR}N`x7L%zch=j>w(bC~!6QpM83$Hk4S6D3|fKB$9+=9&z0k0f_nU_&o4(WjxVSYb_UECJ&FBA`4Y%C20s&;b- zPF1?Sy3{p>m1KJJMljD=kE#}ga!=-pH$It{|6n3<>8anNcZMA=d6dyXkyXeBMV)!J za+)42&EY5Zj(;4(A$SAzDU%Bv6^o;G#ZC)b5iV;p8yXd5f@3t2hmvFXcK$iBZe(hN zZBHV0eRvnapd(EU-xfPNCGi1oBm$52B{xj05X;QWG576D^``&I;OCJ)XoT{?v@|od zyWyyq&m1xyZ|Sv1t^?*GZmtg+kw=F<;h3LQOD(I1?y21q=S0c*F0y{q3;8 zX11a7&BAt$AZ#;6_jquy=eTSOuS32@&G5|Kt<}dV4jV=ar`r&7A8YsS(VJW4_2Wajy|)&&|!SCEjB+P?;8K6v@2@#e{-c7hLHXk%!CPouh~SO~imC7NrOy_%JJUTjez`KG zvbmt^pC+P}y<6x0nVHi80ejAZH*+dM zaW^k-6%Hm8AQ^m0$Oj(rAMbsQWV;|Q#JW>_J7`1aqTS`5$=Zi=U_Q~Rwy*t&B>j2)b(AYGE% zH`{dH41-^^gt~f*{o?E%S428APL?jN0e}i%I z`$+mkieeyQi> zn-CPSAQo4twCx9EMZEXHn$^7fdOt8lIW_gNE`{M`-q?cVKPLfA#9!^fWE* zR*ECPn4j_))>u=V+-pI#Z;gcPdw-k;>h`9#7SkyqhxM78m529W^|w-2yt*eU+D$;Q zG`OGa9@MiH#~UfZaW{rK25=5gkcD5>4B*4-kOe#S6BydKFD7$eK%yLK2XVGQ0EeR; z&oRYz9!?MFR-2y*>ukQ4mG(s|Tc0E(L1E5obq+JKR{;_5uLgsv_u7)>t%Je*@P!0( zAK^DFc?+2XDkNS#P-6_@0TzVY8q1GjYJ?m2U1abtsI#n_lVEpA^1f^u7 zPr8Ff2N6H0!+|VYtHQ4e>H!zO@a|N`D$@S>Sz@~sOJ9{g1-P(rS#-}+_J?~QI)0}> zQNs5xEC^vw5GU;DLoVy)yy!d%Nduluuv+-FZVG?@CI)MvmpI7=Ou)?4vvp+FYO8d8e;4EVQfZH^6phJIzNpCJ*Et@yDZ&^ zkP%h&KGuBx)S=^uv{leNhS6CfR6(0CFz_*^epIo$W!tbUg8`CradR1BjkfnTc6-N+ zHYxOJ`nL@4Sx%_joA>f%Eha0(QmT@{sr4qW3?(b^{CJlyvXvUIZksidz{Y3GJ=djj zH&QA?bIrN#+NC~; zLvgGS4R;xY=Na9r&&+J~IF+&;_VQJ@D1rIokia?2y6g=O8#F2sA?oc}l6zYGHWTlOP`vH^q11CQFrU|gv|;7gZn z;0JA*>^4PMz%3S8lf7qIG0^PeNcvuIFnMCWb?1i4b!!$ide}^wGv2c_D?qs-%oezZ zDWvACkVGxaV{4H2w57zcyry6R9hrSIk2ZF;B;iIzaKoF?nS3bk;kT(~kUgyz?;OmEV-WXvf04VWA10Moy4bTOn z2Z>D;e}(reD=W`kZZ<(Di%6VF6b?w2g2v|@zM~ouAWu>L&;N+yN<~U^VJDPbevLaIHN0mP%#SHKbpwkPP@9b9k zp!%n|MUNX32s8i|)CIKnNsfJ>%g9SacsW|LQC9uWyUO(lT8xGO8gc^Ye;^p^kd{7; zq$eDnfO!f=E#UCN5{bcMrIR^i`5cg*ZJVyrQE$X@lB)-!d9PE+>&Y>o<$&9n145zm z2a%Fu{q@{6Z>r{ugDc$GZD;4p%v&0;%6!qbytFjyeC=aw)6d=y52l9Pk_G1mh)kz0 zTk(d57)58}*Bqn*-5l)OR;2x(ro=Y+oy2b*p9L=-8&y{Y_6Vw=qIO9J&uZVzcQulC~Hjtm!! z{a|pSqKtnIG6OHfB;RN*iZNHM=v+F^qee`wC*m5gl}r{GN^`+uG#*P9Bl(ls{HUn4?slQ`{x8rQsFz`t*0 zVK!@ic|B%{=0Ivz;3#L-_z+y{mhoq$VKvFwL9Z@!?3gMtO(7Jrmw@r+@dYam7b&%v z5Cl=8k@iC7l!>Ua1c$lMFY@TDy{B|+s3JTj9V4tb)`~kM!Cqs@#Sn?#Q!RrC0mGi% z#?}38>_d?BOk7-;655V0y3jX$$@UpLeU<4>{zd(lbJsu5WVQS%3E(OBQLGiWT4eCHF>v+fcKg2)0-3r}<)3QTOa5Qts{;i2e`yq893MNo zc7@{>|MwpTC;z|yXNm^%fBy0R=NI^&AI87=fBpH&=~Ln-wo{$oy-AZS#1b%}qDqhv zc?s^EN4cj#%uFY}XAEEmE?Ye09$f0-g=i zQv0>a{0X$hk^v?WC=k2cSPu^ZpGc!phH?<7^KE@I=d)x+AyABjSTL^kbdGfxLRpNr zDz$aq&t|oO+OKlXhrvs~rR88qO(;)!$4f6CVl_%AuCb@{2A3>BE5s6->z(YKIQG4B zg=v<8kg&>J-g0ZasE%f7nBvS|`7pZuwz!(cE|AiAzf{RWY+<>D53;f_H^`@KhcI-? z_s!gVUvh&v3?{rW4Hx+O5n=^873UFv*o;VJa7bq=BZ16d0Kr>LKyO$v>j5Q0r<9b_ zS46+IuwTo~qKMeBdjb4FC+66TXMTPgn?+c`VO`rC2wn>=d8kRv2YnU4O?G>K=ux_fY@TtBS$C z%ba`!?BbOx3F}aD({9@W zxgGo}$bP^F%)t3{Csl9LUzGeFB?3lisuB+q$>G! zQPbBw^tVh*@D0CDW5ne2VO|1!iD9WtYU|zvnbh`S;a_v8*~5Y6q`&&r%uI(jsvZXJ z^O`gM6}T!t4()<22iP5S?Qu$>-H|?5B6&0pGr>gs;z~|CVbHwRG=y)u$D}BitYIj95X6*z#x-nq^Tw-rU-%Ytw4pNQt#I6{rm5*rY<%x^`*8WR zXt_Z+>d=ezRuqRnlfsY`AeL}C!VIdG3A2 zReYA|OF-f)&yR^#J8f{H1S}I_wtbx*KC7-!NV)cwQR0oHn--}y^gCJp{U3s|P_~iE2hTKyM^9eIO2d1c$t1L-iM1i;| zQE!AS1QSJ&L2kq6&!VtLW6{qbOX}Ky4a>aLOeSmt8I}P%ffoZ=>EiJo4~pMSRNztt z#BCb76nvpLw9?YlOZqlXW$j<;&dyG#Y_OxYlANa%)3vf&ZNzX`vV{apvu4=18WHm;YWPZ zo-b?ch(-3T{@l3fkz18=9wjGG{ZuiSMj$2) zN+&do=NA^=HiF@!u*%l4^6U`9)d~dA|q?mwks)8!R8CPj^0xaaE z!`Oorb+}+K!Vfez2k4wNY^G+TrN(&-)v%w>TJNP5zHCP)w>u)o)j{}w`~{DhJ`{3% z*HX#0$o^HFOX*!W5~0L{g(dC$JJ7>`M_{tb$Gw!>UQM72f#i#NF-WR$p3IJff^~Yt zhrbR;wq>7WWTo&Z15bu*dqVqxHa~#DH$zT$H_+mLgA~$dF=6$ghTV4tDh$7vkV6$W z2Dx$Qx1X^qVh^JRe*O4kW(=pOFX}N?D%V38fB^6|YqJ~1>$BV5BWy5&@Y{%xtiB1T z&*o87e@dFu1l6TQofM;hg@vcvYnWuu%tcG!^1wp`SQ99+F#GT@05|!R8{cf1ks6EY zj|_4zEn9QhaX%l@k+z&Vb}R;aoJ zYUGXGx|Qu+#ArWdp;KbOoL?fql*OPFuZiEX_tzXI)b}7!Y<0P7%x!*rAAS%wD6@zs z#D$DO&r1tVRrGLOF9N8adFhU#I>^)5Msq#GzhORqrw>ukXE5ROWd;CPniSz6QBEVT z!|QJBTcKy}Ni4!XvA(FzZ)V$^u0As3j(@T)Y?Z+mA9~j??Si?dXCNBn$U_|EUiX@l z1@S7D8!&{_$QO0u>y0>TfhQis;EAfM!r`;o2HD1i9R?CDfgLPY5T=E7Wi2yUv8N06 zaj0Pd0rDe6wc6-Xb{ltci}6C$J>t7ocFmt=`ZINBfHY{Nn?Ol#XJ*Mh3myRwJ=Kv70KOR_72V);jQydbh>-zm`YM7JQ zVdj~>)Q!q`OBhYO6sVBd~IOFkhZe0KD zt4(#YU3SgPa65znqoaF(gz**xA-^_^T|71}sn(wJEe_Y`*mFx?D(1EmkjX&pV zKk1I+eaX}dhc+Is%o7F+v_C6)E3<&XTT~bcvDr%|LW%Z1dTY&vAe@A>)ImjmUi&xM z9(1sObArp1HsI@kNRpvGRm3JQNp# zsKT_ct~LGseYm&2zSZwcvEEfYA277E8d0)RpFdwWxVk$3%X0q1Wxn%vpR9_$;z2~7 zp?XCRFqh4zHNYjjlHue4jl6jg7D%$SIB_O16u%jw?mC{dS{L0j^N))g(vX_$;O{bE z@T;VxzT?GG%aHLSduQx zGHvxT9xUIsf)16u^Bgj7lVK*^CoFkP85yNr<@#T9#PB&xm+X1=R1Xv(9zh90irxGO zZa;o=QT298n-0IAA;uR654Hm_4f`9sCxoc5Dk2HOyT^dLzw zFm6{9FSXwea?FOO)z@R*nK!?CEQ+9BAr_9&?8v$DR z`~!P&B*F$kDCTyWx!3|6lZSvcPK8@ph~*tR&&H9pge%h=NTdbJFCl3m(7^%gU-`Wg z3OSOf*hZotP(3|^@U}tof)5R&lGnaEgx?@G?w|K&$cKT-ii1PJ^3yezuyl>hgtfKx z{PT(e(We*pDJ#9XGWQ30rL?r7L>-131^WG8_PF42PrDF-&B(fqE&f@n^)dL{Yx&Nn zS+T+3Rjovo&_s!@P-4V?QcR^^i^R#0TRs%Yvm-3&p3+-13Yizw6kfX)8ny|mD%=T_ z)VQv$J)c#C*^m%Tx^fiIveir7UFS~oSjGCkKv*N%1uSsfE8nvD+yplx6cq1_ZyVUf zZW@?d1l0E_Yq!|vcKnE&G-p|N@4ZSO{it;(Bs2?pNh=RqYPK;$z6jAnC?abWB&4^R z@7hXi63{Dqr_Be|5heW^puqYuw+B$GV(^SG!-k09Wr<2{||QmRk!N6AX2lmFZk+=a1^-{937v>m-O{g_%} zSR)?+dw|r|{3@YR82q+F$`&7eVXuQ5wL%Ud&PhQ* zLao2X#lZsIswDOTmGdZXhQ=e>A?|}4O-uvexStqqFXX+$Q~e~M74|sLcwoV}yzXS| zrOD+LQNLZGvwB@by}2-6l@U#?KFJ^E=by_e9B<0GQWT2>O7v^29NkrAUXWOkql6Ad z(CC<+)YR?@vxGvcOdg&A;9%M;^3OTK?AuxtIGh_d2AlWjHt}Nk9~>^&$OzfQci6$| zOd#bA<=rVIC57nU-;a^V36jK;l<#ppdSYS=-f^UlUn#On8NOF-pj zARD7J7RSEZ)mzvDL)BIGDt}z){IVX~2*qJ=<;s2{rU@CPZ-4*R#MBOi0*NA*RQrbh z{(XKY`y{uA!>vbrdV0F@kvvcxT)T#DjOyqkmjNgP+v#;G#(hS4Pg@4jR?HK*1xt0I zH5z)69sc+{AJ#q6VKMF8c3~E}kw1SZah13^D^J{$&wKZm>}=yAg^!-VK!V$e(u^P@ zjll_;xCbRY5R#H= z_~E||8xtrK5C*Wy<#&90a-s*duh8;C0N06xp6Pz7sQR~HP@)|+CAU!GrxTiBw<7{{ z_WQ|>mCxHDHtjrEPJZt%zuuk z+&&naxLjt?JVXp_xsq@NkJvK<{ek}eJ7`~P8BFaQa$pPtLr@EI8x%3fa{+tYq{Dlv zh@5umFv|P3sH-6*J;*%!bSBBG4~Gg&k0w{Os6!7=vE<8YU?|^xaW8I<8Kd3FYNTL zuJ*;>U_->b<99MyLHcHT=F=Q~3v+Xr5Ssw9;lViZMjb=sg&c~WUF3nf#wA$JAWRrs zSzd%L9PcGC*wjVLQ3wt~Sh>lCOcIWf+tt;cPf#i8<;4LRMWqq(P>$t;P2nr&Dc;Lk zT6a#T0^G6vR#uPv(|Xels$?91)r}{^H-89Hpoc=BdT-l;`x2BbkObl*0O2(0FYQAh zmqWOb?NAI5hsPH)jT3`UQ1S*~+Jf{DgAXc4X{eU4OMFC=cS6{^N+DnD{r-qVZbSw| z3B7DZGGg!1N(?Ino@xB0^T-#$fxPk>*or(?mE&QZqdzD5&Ok--r@K6))sol4p{oB= z|AO%SC!e!yp4y#1yi2>d1m+}09PNI7-oQVh9Hl5>aq4$;q@RE1xVo|thDv-Fcoj+# z>4%5a7V~aqsqnfsSHa#U}3Ha%@l*o7MuH6)h0Vl+hahLb+ZZiv?58APTYMXheo+trqCPg_Zc zB#Y9^ySMW7Ke%c8(D6Z%Qt;y^{VkK9WpCOg-*uM1VlaE(Y%z*IsQ=#8*bky)V-NX3 z+x`a{#;be}(-ZzNQ@+oq`|MhdPI<}Z6Po2I=f|dG=axB;pE@+-!GU%W5VX)4=o#n% zoNK&Bv^j@`D4QoW3?KvpIQCAwCp7+5@bc{2su=K0HInc0`^Og)pD&45EKp@M_+NCH zLomE`BNlzosJKqZc?mneE*{JfL8nG*n|eC&oNu4o`1!|xYbdI z?>ryV4OJ25)K)&(U7Yt$ot0PFgdwZErY_`6<(+uvOj+)=Ft6M zgr3~Gxh|iqOkz6aB7x4AJ5kq|PDdCCDTu^T?ix`39X6(-I$D>tf)rA5&k6_%QrZ;@ z$UAFOcR+&EPLdTg!PfC7>S4<0-`v=szY)?tHO<~?^5s-gm?0dTHAtpOkgXdouQn3xzG zEBK}E)L!+Ch=AD}N@c)-tjm_fPWP3iV&e_JXCfK~zI^#cN$&u`TiS(C6SVmth#7KA zYK>h`?WwyVrWoB8{{E-&OTj6Qn+<>FNYhlU>c zCtsssau}Uqw*gXOHOjB9>|W{SNz>~~bnV8ULfu7v(K6m=)bVty;^D-r!#^p5AS8d+ znp>Jr1oqnddWziLcyk>PH_X0lyNx|$=)>;<)q~c{5za4D9bT5LljFV21O(T}uEfn? zzFnAQ>yE8~z|yc>i*Dx+7Bjan*U{56g>DMHL@0xRi$A8J=HsLYz5om;!D%0lk@ZWv z)cAIBCn_VR<>YqUVRq$HcO%5)ScF*UElHsd3;BZYJi5~}2Gw+wngx(jAjlZ?pbXFG z`g1;;XoKAtsy*D3<J(NQBJO3PX;I2BQaB*>?1iv~Hjsi`56yXkg1yMi8l-Ti z?rP&t2Z@7iQnAt8=b>z%qJnly_T{7Fk~b{gKsKrWQ5zAt$NYyNi~08b*nfHrv!EhwZLkkGq-gQLcs; zdU#@cc#WkhPx3__3m5Z%f5$$gVSS0qZNq>K-v!XepcdDvh2q|DlhA$aI1@|{E9dB@ zY2+p_9`Y@n`xDvH5?433u=J{n6XFGy@H%|xsU^Wk$NeTf*X@DU9e;XCQolTazzR$i2Qru5qv}zV;ejdaP)eh>d;b8i3GcK+pi0bJ%1RqI7Jf{l;D9nH-?&mSm zZ)d2xcgLOeRaHL{!gfpNJ)frrLXT)XHJ9>FM?#+UJ}&Df`6+G>H9|ruj9crJ z^ARq1t7WieaHb%y7*+OJnLBJ!O0f(wYVYiSHJP>l+I|K+66!J5Lx$Ha;5S3rO?(5@R#(JtTVo(aCs_1#= z>w`+$S?(%In8tOw{z36IYNUv!T%VaEua`&d*e`H*Q#Ic{GLW^nESnP4@l^IufsIn~ zCD>ey_$M>cPGr<2ie;x;S!M;S5jP@np~WoB*Tt~!mC)y(N-`aJ@`T8`)n$7S%|S~G zvY4R2G6PvtDKELfUn#v=NQF6if+f7uGjh4=LAh3N`9Oyq_fH>>Rv?#r8S zkL1CZgDZxE^EIgF$s%I$6sNS8Z<9GR!Xxxj`4^L>oqO~wt>P7ny3*y8xfrN6HVzDG zUoqSq`lf}58oeIhl)f-7-9=Y^HpRXkm|y_El>6%P*xn8vh1P&aPre+Gq7Ss8-cNPX zRGJftLzU|KUZWEkUA!!12ALcrASxtBIdjlH(Gzug6M>YtHV6Ys-x4(~-a z2(i&={3D#tul_#lH_fe-m>9DK-FiojUAavKLuHP{JHdBlesP6zUMrjR(Zs*Lp< zsN_Rl81kOrjm!8}vAV;hUQHw#U1!frN~nDs27UmOx2$>OZa2BOjBgj&B{z9G2wXSw zUWzYkr(b7h{yuifM86$N1f`py(3w1a0CKOWiT!((?ef_UD2trqWC%PJP~AHt-11+LdG(agbW$3qRbLP2t^1XB$+cOQ%FeW zkjztNp3mxj@8|vf-oM_C`?!z2kG;2Lt#w`B>pVYWl9XC2w^`b#w&3Io3h{d9^%+HQlB>Sh0fD_x^6R0E(9=ofyZBj4yCN@MP(;U9=K5x#TfsPn-r1sGFh0 zXZnIfXG@8|=_&$Pfh0E=6sWGQZmaTUD-1eCNfr_nq#rZc`{#@*ETrcJginl%7X|wC z+l|pnb@7Vi-s$2Li5dtAlp0#UzzS&M=@@N!Un_r#((*-tGcI*^rIy5^S-Y$pXnAb3 z#fC+0+23a=Fa0`3gpW83woZ>Cp8vs4JpsMwh6A0yp10U$cXB;ckUpz+ilZQtjacYf zfZR8cXYN=W8(VFI#gXlZr3R_T8M`wNhKX| zL2^^y9-9Qk+rr=?Kb1Z_ROvLD=8TeK-4aQmK(Qh#wbtMB`9m5kR1^sF^Xxlh74Bzu ztlpt`R_EFTNk7)nmEcfG_4Bj)ADvN)d%;HHq0n8NHKRF74nj0_e!!)!BhX#~Pp zLuc@^hYJ_3ClNX@-M%UiD@o2M6;Ki=ceuRm5Tn6LjWG7k%F0TM-Tm%tG*n0m@Mb-*fa0=6I%v~9`SUorE-CAn!@7{29U}D{{5R% z;v#ou=w^70SwF2ePFDSbHN^K)o`OUWpM5Do`fZUaWHQV^3jfALK%%*RT0Q~rwCPD; z&-3p3`g+t_>=LW3+**3Iy>JK=SnVKth#~;Cx{{6l;Ya0rvII5BHcLrngriB5zSZ|8 ze{+aV;?b0pvWl_Esjr_uM?@Oy>Tt^k%Vf0Oa(0fw>5*;b_y#ia7D2*Tlt0xU1(DNB z!-bA_`OFSRqwAQQ9LoV3w?euKj!DKIsuy)!e*ruaXVtkr8bsh;3^`jdf41&grP&ftrpbhH5S@|EgQagshPX?$CbHD7E1a1L!cSS8>kB7PJ;8 z*6o$ORg4J&`kKK@m5yv}n8b}~2y0QsSIH?sYTwKeC9ods$X>eC!EoTfu%U@@F`dj+ zh5%10uPrjl`cMUzm$zYwLv)%nCn*vgIWMr~y$M-A8hW{KHVuf4f97gP>}m-)*&#%2 zV1jj&XaI8+FaH#|q5z~{TPFHp0;I?gQbepvJhyMta5=GOAQR0@uQYf_nTWU(P#pEG zSoJm_fIU=?L8`k<_wK~12o8W$SqYF)p(^-LW8VEPkb+i8<+!l(PSqstl?}?g`J&cZ zpPst0p>FEW{P7qoDFaTC%Mgu(*GBB@25bcE5pra!T=+f#{wt@diAhMv5G{7t8qxVT z)G%u*B)kP3mcAEum%MBnB^fW31Ri-pc*+}ozRk{UZB#Eix8#Dv{_62*8o$bqg&!+m zbeh_R@aflDX;*pn!^p7TpC~&gJ1XsJI zu!W(=(wcq$bMkFJ05x3{IeXF`H3goIEdR>3NRj}%GUTs;|PF;Y^!;U%j_2pAOIdQ4|=Mh#YO z^>FK2bve3e;DyWX?h+!_q1&}>?2fFmKU;;qH^HvN6Y7g7j_1~*GD3_c>b!3G znb1JiO}3kbsR&1r;>SS2gE$0xzT_h`x3St;(#$%yq&Gt48#nc5@bXL^lWy#8H8ln* zPiVr&#t5p@r#*c}e*E}xDk8gaGWMt6!jc!UxXn-#MqnFTi=8!A=wskx3G~kt6PWPJ zvP{y=I2fEJKNOOfid^_@QT0`8ffKVQk)VjxxX)UK-M}z6=EaNW9kFts%72$PeWpBT zjNBfno?#$3kNjqB8S6Pw=L4U0aD$=a5;1cG(hfk*xOIJGUKp~MVgRZtSsgQh4;*ow zQ%kOBb27FMgQ;M;=>n^b+g&Sly&vuEND+O9q|U#8KLqWe58S(hVwX=ew~h7Gi;|TR zw@1|j{2nq8@MXqLp%QWiC4D$Kx@(@F5fhVb6T zusgc4AoCMU`LrpngCkNRCKE0oo8Upn)Tnz_ijBK%RQB2_NKP=Od2<1I*0*w_hLzbi zi|?CIsHu>#`ax+LWEc`)M`5jsOpMsfU0|4`o(iJFrz#H6v$oZ492fWFAJ&d=&<5y+ zOeh>LB;P_xbqNnY;JIpIfi2SLehe^K60#5|7gDz~U_M|M_RTs=fEEVJ4*(;Wx9-3% ziHcqrh@owH5gQY~CD?H6Lr?y_C>KdgTm-bO$}gVTz4()QM4nU{86ejr#H{>2=t>ft zPE`#vO?yPFNN7}s;Rni(+E#`gZ{8a^TF{#{0b11&DO3SVl5b@wi9md8iGML&Q*6Pd zlxx+6>~{Td&V9y=yFf_b;Uu>r9&P7*re)H^%__!}!@YJKX|oJO8>Y$Ussfol!Z<{5 z4k8Z^i(ztWN@B;`>9f&i>9#V~doI0p3dX^j5=~NHe1l0}$<^rgKC4*$+a3ej)%R%8#m^E-F8{X!2#$TSBHoev>{%X^4Eh;y9=qCQJb!Jv-N-@7S>e#TtFKiEuy zkacyj@7LYEnS1(8+b*#k?q^{fNR_C>r%-V%%t%O)3wNS;a+MHEAd1a?*<>%exJA}; zj;rtVI?ox7QUiLGDy<^pLJ_9EnVH~oebBO6sMkdBe&6ztEm@T?4^{*8Yu+?!za8y+ z_4WKBQi0`te4S_MZnp_+Pa5ZxrxpLoI=7v|9S6c{$m5l78SD|HwSEuzL%-U~;0jnW zyrx2Jl96CNyEL+}f?eCNLmHSEzUGb&Ch899_>Pylsq6|rcGd-KO<< zqVdskB3IjGhGbQAZkkm4{fu2Oydu#Y9jG+Uew->?;r2Gfi> z6$nn$)Q*N<0`w`NdlIs2$iGsO!KVW$+jTTb(eU=Y08>J!%F%K$8eBM*rS@(&e*|@3 zdiRs_2g1y`eb1Sx+;@c?KXh==r!*Ozf`Z33D4(x0BL+yBjy|x;G?K)*L`5A0&RQOl zpoKh~AbAtOs6xA*+(;7^RyG7<1$Z1=msM^pQ#j57z{VvO+M{EZVS}Oj4to>Z5hU~D z_ALqUPPmoh*si9wetl@lQ#I2p5TQ_IsfS;>%POg5aJyek+W!DlXV_CABOrP%#zrK=9 zs3cF3;>54=eXbfBGUPW??S4KHr#r9o+rB{c_`Y8??$RwnF=w2s8nT(OX5i9+k=^*{ zWj_1y+Cc%{aFml9-`}&TE!{!u#|*Yl$gNj@U)Wf`rW>$%MO}E4?tH)3b|$H0M`5_weLj;b8&pw3tLJU-)WZF-mbIoEZJFdR;9P%|}GA zrtt0ZR9CTtR&!ik^=CVTwwT`6ZSnU^)!YTB@rR84bsoBp&XX*uAt@TyaK4Y*cfOGu zoNXGnd!w4_$Z3>E+*n?E?_T--{jBOa{w}oxGJDK|4_!YRPXDCpQF))m49IVVNv`nP zQ`;r!$J^huB`diT$u0bR%zoFe^(P5Ln#C#(x6LhFNxBuOCKq2djFy90H{>=U-O)gl z>D`A9>!Dd6u1i^nbLNNGeC?K>a{htZal0QZ*E_9*Sei_Qo-$|kT@wnrq#!l$he=dQ zO2p%uUYLu*3Mw4>o(446#Z4Jg2}j8}O{dx#3NbQl-Wo*&z&e`ICRmrjWo!8-Rp2)I zRgEYn60<}Dt10!(enidk?%xR)XtGTX+C;3dMbv6kMe`8rN)Pub{wjmxo)VXU)L%Z&p*999Wj$Rtr77&>fq*7vxGFW z{Y^qw#p;KmC0n3>!|IxMNFIeJWckdR5_(C6OmG1Q`Aug>K zY*i{g3JQcpV$mJ7@3|#w>!-y0D`U~hT7?Dw08VU#MHWdduKC6x3$+o9KEyPj)z_Pb zF+y@4@ekD0)EPurt@^R)HpHx~5*u?$C~PQRS(_Zlzq!6N3~n{@Na4NSv9V`(Bsw6> zntsPx(&R?0JMk}@p(U`gzhoO}3tw87lv<1`;m>B`@n@?#pyyKRC^0mi+s*D=IavXt zY+3&A~%r_?}ZZ*>|>DV7@pa_J;l~ z*OnbGTI` z$W*AOJQDS&_V)POjU&%5T~1F-A(#~gMIUH-{w(Xyc$l2Iq*`oj;4%r7F@YgRH=}LG zvm01rSE=9D?Zp<5fh20h69tuR)$e&`iLIR#jdbS zCvLAMPXrQ*3X0E?VwnH^dL;*s&siD#??2P0-?@`MvH$g_WXo~Kn+C-HpMTS1<1Z=K z30Mk7Y9Ymy%dt-$|F1uldJK9NInlVXb(xsHj?aTmk&F$5bf`I^j#Wqa3WPoj3nO+v zkWIK7<}5Br3%`>sBX*#~2^>rrIgb+mKR?brTf=>09YSxD#}_^VBb zR73c8AQyBkL+9N1m{5+F+-CmqCvWoz75E*i+{@tFGTIK)?LfU1;L^5+Yiepg#!)WV zY%Z*PDgfe|mXX)!Ter$Z9vf1ku=k(?1YzKBp4GmIlw%KKV+=rw7{ocU%6R11uuo!13A$KONPIU>I0wu#n4>wFZvE_oKI@CQokkLj zNQY#20v2XFBwy&WtPW(cwYNvE^4s)u1hi((D6NZw&Bf(VA#dCsK3uIA41`DjYqga_ zFaBcXlL$ibssR#&p)xIZ3Gru;y@1ffTLw!mzpS-)^M)zN>n_479JMx*aM1=JD@aUAYG7>a1q_azcS>Z1Pa~7c z2$G=AE3dxFlJ0Bg_0*7Cc8;lOK>AW8Ot5!3lJKW(jD#XubWJ*H{t`~*;l56 z+YIb5=HDxj-W7gi1A|a7S?t#{32)T9f`VFLlfqE}d8L8%w2c}$nMJH>vna0`pR7QdjHtLcM{HweR+jmCk;+kYY1qO`1*;fjBM5eC zi>ygV`NO*JGbu4^zBZirS#0aI^!V|{+uSQ)BN@7en@!=3%?FnKwDe) zCZb6`XhH8G9F?G(kzJB|0Wk~oRir$DKBB+hy$DL)5uwTA1(w;JI}y9oH`)d%H4e*; zA3x5usOpxuDT*=`4}~CEc4h#?44IBKg7 zO!NE0!@T8g;WL(tKLo6>QE~;wrgB^@_5J;{^Y=-r0g}POhyXZHOKMg)N{T&ESpNW9 zRGQXcXOCNKXzM=ShDPrFzPJm?rS)-r{S*2WKIV{r<_i(zwv?2a-qJ1D5_?v<7vMHQ zYCD-?8>t%w@tiiv{)x$-skZ^$f@cgFw0>vVE+%V``}4d)bR*koqxHXch>H?LOz+a{ z7SM!wE-c9ALrLg1sl|gh9RA+<{Uk4r8&@Tkn8?Jn?wzv#+6Zv7;1z>87)m`#`Zp;f znhw2Gy^D*Kq-?kz#IT$ixA(fr?LX@K`byip6!-I)*rIiZwG9Lj!N|eY*$KTPGDDCa z_U<$^EQE3F`m5nNubBeL4XI@*H8pHiy{oHKB|S<2kMuTv)d)jq`X;uS=hgx+-(pU3Y%?4fZv8UG}=I#Ay9Xbyz@nH~3AL`)1r%oSGy*f3y{zSJ#3FT3+ zY8=~#RDOIB6y=+Xth@kxLlunx8|;wRVsJuqboRt+aHFGy^0E7im>2j9ETOA24E=u{ z0doDa5yQCNXYK7)f_H^P7zR!LH5MfD|8*n~TztRC*f8-$4Et#&#K*S{l*V4+mnuO( z(o5Zp%#z$jYd$upC(IZ_FNH$EgOW8^hhcSt00icfx*_Au8d|!geNPchiJB3XJ5q@% zX}~yu_{O!G59}s~BLrF*IA8lNK0+iYxEmTu2#2?CMdj(P9|ZIH{qu7jf^di8BfFV= z5w6JhK6p4`W1SZ3G^ra-rfG7b;)or3nj0t6i_=|Bv;@XLmj$b0(X<3J+uiw1KL{49Y^Sw;1!Z5a^XT6VXWar(l)An0g^W|`^%fS9P) z<7``0i%9st165^Pr3kwbh!emWn+BRFHN)olVxXu@JHUJ9rz3jEI{(G* z{Hn^ztU%gx6u2&f6x=yGkKv!NJyuA#D<^gubG2*h{at6ffL$qGwy&wWuW#nKB&;yI4n}Q z14_F1Ch(9I)}rs-xq7bJkr?5_-t2g<2TtlfpoUT?UpTDvIRPvitZHZOWUn>7D}dH6~|dEvcrEj(*IHMO|lPr136hMv`I$7z2RmfkTI! z{YKAnSj5On3$!vK?-mM0a56AiG(ca4G#*gqm6b=Zt!3q#8(S%mx=#HXrIOkv5BUm% z)1Y~vE!j96OGs{i=1Jgj-QUqb4emoL$1~9k&kC(^VOF=P&81fysyLeHIgdC_!tMIz9M2s{z$G!@M<`6l%koW7j_UA}^6Q!&giq;P0Ct@>OT#OIg zG__pFBq8-_coqyDWO|r??9|~&F>o;PiiqIB=g!rs1f1-RFI*b_7ve2S$MDWU1*fJS zM_U*vNE0^$8eBJ|pwh(X|CX68z^M}N{NQ4cpGQ?OZMZ`u8pYB=XJ*ii0_?7jkg6<>% zisnCm{4zqY!(g08I{`LI)k!qRik&`lm@!}vl_%UUGPn4eTz<({{X|lG<}rf>$cI%*)fLlrl$}jzp{wjL)k23N7eBelew}g zM~(3%;=-~=pA2o&P|-rS$Qfo;waVdHaIk>UhODe1Q@cu1+2An4V;|D@TC_^zds3#` zLnA6K8P_w3Sj|n5>4GYBRRftF>-a~CTVSzA8?38qz-fnxIPNcoL6oOSXR8zTXs#*>iSC2mNsOAO6c~Qe{2QFNA<6HJ)`Nws4F1ena@R$o)lX*&@U*3ay z@KOY(CrnN^M6BLr7t|WPI-A`APyv%YB(>;m-0{!WjO9%wnPakWmKtfHudZ@mO@7w% zSq8jT7fc=J+wOq~g*4hwKvU4MdGsDWN4+2-4FA#J1$$&LI~31TV*^S;e=w@^VsVIuao z?T^bzBCan2;I9zv+`F(1i?A#MT6Vj7@-q4=(gao!vYR@2WCF-OXwD_h*Ji!ff)m1J|3?C7D&pPbA7aUMPaj8eLmCWZO>2Fggn@O z{k4j39Gh={MPs=VN~ICz46vBnm)v7BK|}uj_+-<(Na;ywns=Q?knj!@3RtX<+ILdC zHCzO-W#jO&wzt2O(RqqYH*$Gj4HNxNd347yPA)ei_0jJv2wRf0R6MSVK| zD<-hx8h*olrva5BC>b)%y)k!R2lA1eQ40rg5H*PI4m1q^&C4_OyYD>47YISH)dI0{ zMvNAXZ`6EWZ1tN-~0OKLN|bqtZ_N zHW$O)b=WFa5~KqLJ(F|Cdkgox2EH%H8S$lt>gkE7p|_+ zmi82ZM75&C9+9jEcFY|k983Yag30&L#L>*Kqmmta3Mc>ptq64`tTr7bQ=+Thxkr!wlg>)f~n+*5U z**1_^_(VyN!8B@4c4V}D{mr#^JBK`^#*mTl7s~Cj{drYX1_eEITP0V<1lPxV)=4FH z;-P4XquoIPbta;wr{JxHN$jfHV<0{C#)pG0qVv2VgsW4+dD));xy7^WE=^JnI5IWL ze83e4!8`B_8D*gq=A||7xU<3}&a?~PI!2)YZq6(QoD_8H#Hw>^bCh~vC2 zBtg)`;@7w~X797Kw6%6|`k);0*ISgNj>I<3=1Q%e2EKAJSye#dINd(4ax03%cu@kY za!bhGbERz9{okZ~fejaF8F<%C$Cu&!H5fv3-c=yd?Ht|(VkON zvty={Jw@hp-B*j1l{vFu*1vM_2rNX4$cf!tS9cVO2T>-2;SNDvroyvf(Vw&YNpi>Y zOwa7MoR>sd0-FuX3emADgnfxsZ~lO#?fn{hxw&NkD@qoTlgSAy6l!~ahdd>%(1l3EEPIY|By+4Ry(Yr z*Q0NSV1zLEZ~TEtD9W}987j-rk@NEMdSfod0}!#`C>jpuP?eQdQ=6SlTu7SMI3@5` zW{)hxLETgJ6p@L|rb6(aVFJs3G}Zbbf~OXslZ5ME|7piMhmsYYs)0Ql>wbiZvHgCS zAu=@t1gC`*qvnnee06g-vEiy)=)4G`$l=&e-*E-@3(OcD)(KQ9n#->ngutIPcuI(OxmrWP}Umh%Y zpDk8yn1wJ_`vO43dmHy}yHhj|oq7G7;Kd|CnRvO8U%291Mg$sBZGZ|?eEvAxidVWO z8P_@EK2LP>)*BN$|0O4xV8=tQa{<6YaX4E6H-n6xEM7@>iYdM7P10bw#B#`EbKP9U zZU#dTuB$ZlO5+f3xx>(UzG&cqP=M-+7!x)6k2f3G+*U4LD4J}s%B_1DUMaE@u*s*% z;a`i-)w88jQK4l7h#QYBNKLYdoSd!nxB4&(xUAN2xvWlCLuVR)i=5IXk7S-4n;cg@ z5l&LQ2Xqc30(OLV2b+C6&{nMZ7`%KTSp5F|gy2`f z&$_+NF3R|Fhvf%(Ilpz|E57WQ4z`fxA5Dr-f5<;1^T0fz40UL5-gySi8%pksbFAES z<5M5hQd!tLr}4v{T@_VG(5^DhjT30umJ{2c zRqwU_{HW}Zl}pX9AEG@qISOB%DFr5{FnVR|-UYDpJl)oA*9FqLoW(QS>vz(+-O{rA zqk(z|>W!dbvliu`^+8q@AjUd*G_jUHebiyuHgUU!ryzOtIGPGTnKixY8&%~E-|lrz zF5$f#&~#SdOB@14VJ#|gNO;osmHSi?B4*)I zY>@v@P9&*RrlhEREF^^)l$u@?r6Z7_1{*la+AvKukIdyP(CzTlP6wU;l$nE89^Fqs zFM<9~V*!OWDkxf@&-zho>%KCB!vnV*?u4sn%W?>WzHJ9C0-Y@eLWD&@V!=VnNyAs@ zEjPe_0c#Hc2nbMhS!+~-D>!T|E&+Oh2?N3&0Y-v)`-L)y@!(^{n)*+oA1P-gT;1P{ z62!YMc8@v-4($(APE*CF0wPjK5&r9g31vnR=4mJrk)wHemAn51`C*G3MvqdOjfw~J zzo%$wtg2B+ix6v}09X{^lpnW;#{>A7wdlDtb%Q&1diX4<7eTsmgls23vFMYZM$FGz zvGTpql)QVdt^(QE<0FGqF(_Byga#t{X>^*e>! zOu3(ULoMvcWh>(H2U#Dwi<>wyX-*3Soh6GnJK-!-cixa2SqQFcHY8p6W2C7rB>^>iAkz@r@`0(Lo zj6lb0{eWG%m-4}rjOzn1poImgm;hb7dD>5+qi+Y-JT$3u--;qy1j>=S-=T%bd+L|k z`4%B)Krj3GJv(k>nR4mv$%eT(I#<_o`Rkoix2a?1OobUu^W83WO+^uC^F?88+ClE$ z(@W!>c<|mG{eFUWZSDINg)>5m5Cq=LPS)8SkfEoZbDw#8v5F4xC^O+Gb@Q(^jrVlQ z$Nv`6?Ne>6Qw`hq;!5>()=fGsBj1w+R$ciVI#jMKg}CfnS<%GavgJ3d$R4IbfBnf4 zJ1p&8{Vh)xj!~7rB-Ar*jUH3Kf%Tb84nqX76?+D=AQG z$YBfhd-(97iNfuz?in5fxz8=Pgl+%b0-M0OS5G6%7gT%6&no}A=9ylyYa$~exX&gp z=Agb)$5G~B4%hMCYk|5cKmGb0wwJYAn&)1jT3!DnNNlF+O`zcAkT07(GKks}$)49bHDVxf^Y5w;IFP_;`x)*OS)SIYTVC9PI{`YdE zZ}5P}YO5Z8z<+-rev8Gw?CxCu^z)GMEtJbQBI5#brd_0<>QZC=sbXA9zqy-5dLb}G{mThGf3|BqLj zB3qPm=c){AC|KC(lBHfc9`up_O&oaJQObu8dX3Pvo^M4l{Ah>lf8Pq}x7pouajJsv z!Vqpi z4^$4|0*G1A**$~JTTgmpEr(Rq)z#Ips5{)P7-u5br!Ff&AtA&(o?Ls8K~{P0;c64H z2P)0tV#(221r>8US)#LC+2p{aUh}BfTwKjP_05%9DUSd!lw?8PW{PmuP zda5)*&_>n&O{i`gy+_Kx;%JIhD4rX24aKdDEs!_-mbndWM&m-x6AR%eoY{zRjZ8#r z6)?4)&$FbPYyFv%Q4iIX#5oscV&B8$n?Y|6RD{bW3t00_R}_Wr3q>mOQDG!QDi_8X+rF~LQeS%I3%c;m zA)?s$9eNq`5%7Vj<w2ambBRq|=(QQq9&1e09&G^X>^isf#d8cIU!>Pm(BEMm#nKp3$ z0Yoe#vSMj=Sj={airQ=7U|xF9y;ZYsqmVH5T8kqfZbhpav=0e|!%dH<;e>5Ppynd# z(Ei3MA1n%m|L`o5$Hm0I?DdgxyEXM1Ss(A-JxJlMSYBR#DV>i?5Y20S)`j2L?&fG! zTIJr#?)Xd$+Puw3y;V@LCM5#jc*wX~WZtJFD(biWmd9BPI_I54~mgbTfhxatoa{jOLiR@!CzM zFYk$?(kJz8n)4sKf2sISQhp#t^}9xMfrEVTQ=^V!C;!EgBt02*z1|`u9{uFr#y<-t z!WFyt0Gy)m#H8wVNL%wk6C+uQlEj6h*1r9!;-ku1S#fb2roMKK zxaRNguTPKoOF!s;d1}A=5tD`ZmEsSYI(NU0hwju;I4wWB!!qg153Af8_aKjdyK>13VmG(XPgISpE-g3Ui)RaGhgKtxg*%x#%4oB5vlu_0YxyUh~|tLA&Q6r=Y`iPf0FYlY}rxzwF%b4u1UM693AGPNcuju<6?6% zF=_y#Eyr>VE6HwI3g3W)gaUT*d-wLGwY*YEerY#3KKd=xfF6_gY==oMYCu4g+I1B! zsAn7HEEs2-==39bT6A1zK&K)caG?Z(Jt|jebE2a8@Kk=SXkzEVn}(txB5@M z6?4YD+7AnBx~Ivm8O+Q%BcJgmOoldjbqSZlN$yVQ$?#p_DotA<<%%mKA_g}k@ML%9 zqFIL@x1VxY3TK!6EpAKQ&@C9Z6IWj|*Ybh|z}`Xdg_x~pP*BjdNd`}Y7t52nJ*~t& zX7pg>jJ7EiZJGa(##5W*&X2ri#g;ef$H8J+F#T?gNHqKY{JTX9S2ee+@>|K4mE7(# zXU@cE_O!yw#ftN2tNyK99tbLhL$Zaxb7{6a`o0lQtw6nT3s1(x!hP2_3leulUtDYs zX*`XKh4oW%W6Z)B=Gn&EN=1Z?l-b!57)hG@+0UOpuMjKdQ9BsdGNQ5hi!R}Me|02! zVPraK!T-;h9*8g!RDAT%Vijci3`JV}XsUu{h<=CW_=X{C2#1e-f$JX;s`7VaHbpC= zYtdt)T(SQqvqf{=yj~xkTIg!7owO`EP&<4^-}&TLK&|!#L_o{Pdlssb;?J9$zwYys z9hFVMnO3_4B9$GlDanb8bsv&dc<2`U{R$FQdsutxbGw%Ve4pBh2SE5?XZH+ZBOvkG zytAWvYrd^HYS=7$HcA(KzsFNkcGQ$A(EqDhE^2zXnqqsupRi4EGBXRRv+{&S z8cNOP!OQ+no=i`{e)YG{i$K#*z1~`@o`AUc-?|;|(ns;!K@yWvj!NIprCEeIh9LiO ztgB$mB-{ThYrPPvT5$>!q{7|Wtjz;cKUqlkwj{i}6!FvEnM0H&yN(7o$n-lzSV^r-h zekjK9k=T$#ZHXw8JwE8Vh!H`g+6jtCUBIKk+}t-xL=RyNERv3&0IlPc%B`;N?WMsJ z7QYuNr$}KqFg872av}v1=4j0=a3Q)2s09uXM~wB$D=W}0Km_Q8U%H}#qb*&Bh}S-v zy}ZZ|I0At>dttI%n-}>#Iy!)NcG^L57!QBqH z+C%MCGd6+p?8}*|hBt2pBQ(x#%lV-SEU?HrX#6rmn{Qw}{^K4ZyAcJ6MNm*eq6~}z z)CTCaI&^#o@{ghb4$*QwV?{iIkOX<~64gCXrWdghnVi=VYPqpK8{6_-sH&>^qtgH< z@&w=moTzUAQvo&oz*wGb*tvMEG?Y#OSRDEidOYmQn*$f$wvGOTbq?q;0A0|)a3Of& z{Q5JXW-n+486j5aiyUQD%isoy>8hwZ0#6mtep&|Ra><1SA~&R=s`3P1N_ZX_GxQ@T zwf(kz*!}}fNdC>@xjRs$hz1Qbm`UhrzEV#`S5t(ft>luV z$P(1mQ@zR4lOo9IacgxTK;Xi)Xoq*n!ua0LCTI;#^=>NX`*?pGD9!UmE264sW#OaK zEGMznMx194!qfX*b~bX$5%Ki`Qb1(KkbH2N{Ad~YJd6vA8uB5eWWkp>vvl|gG2?`D z?M~qm1x`Px7baZR#lYEgeNArtqt1692P@=yD!k$JEG+maMsX`a=#-gx7b*tCY}_;+ zBE$TQMHB(+C@D#7Hov>#g0IP4#hUFJiIad`hb1M#tz^D#elh0 z*LnODvPxrn^2*VSeE4v@c9G3vYYrRpF-=Wfh>ch{vd;wg`$H-X?T`V=c94#V+A}zw zLI;nmFLe>driRa1e^?@p@ZEc2(c5`p0{6#rF{$#(%i*BoZ_ZEO63j_!!5&W;)z!Vm zye-$NND;|uxEGwWvn?kr1^LBlLTj&M*B>h1EmdKh3w2P9p%emAK<>mh^-gr1294}( zEn1diaUChgJUn&T*+u1u5X~r=rT{>>LnS3;sRT3gFTz%=!C~J8)WjpUOioS?-}c2| z%9mI%O0U1#L@YSqe<$ZT5)vDnch_37<}6Myptb|Zvo_wDyWLB%cN5| z(hBGBCLlu4gT{g!V_;!G$SPhFLXw2aBRH5Dn3yWY?P1f0jEW;-Y;ve<7<2O4+L`_P zhZvX`|9mMNmUh1=T87gfY7@-+CkbL{yM;ySi_;F&vTA4sEgQ7MPv#D-#Yru|&%fkf zn1>rGKmW_>Dw%yjKv2-0pS%ZJwE|Wa5Lmy%eEh8P;A4b`?~ok z6YW85rxB^l_)z~rkk!G{qN4gnMhu9%<7OHHXlaw@j^;pU!s9#4gT1RY zb#xGj6OB;RRI~2}Y=8qrhme5*`l;Vq9K0FeK|Vgdvq^u!o z+)SPX0W&xQ8>0KsICNf3G0+p+*_T0DpLMr?al}5QrP37Jwx!wV;;;dOc2Ve3VMd^( zeXM<_c69g8A932p0P?i|=>8KXy;Cy`6bbew9HGDu(aVd|3PM>t8*2{?W;aR>Ohh*_ zu&^XHS!R9s;0YIe^DaxGY;UMxb_c57;R8W#=(#W>79O6b9bHEH`kOKuk&cXS10nuaUZhV(a0CVZ-bdJb7{9A(N@biI>`e4**!6BT+?J9zUB!Ag<=e<39jXz*MTrTd_w-4IQ=17L-) zi153PIyYClXW*i|3<;?yWDK4-DJU$75qYT3W83>kMNiKQ*zm^2iSfNVyfCT_U|S|X zZ@@u?{njt;Gv1(0-uX{dDXs_|z$K0q9rMI58!vbm{{&E^sfQqG6J@h$Y=73*iy0pH z$Y3*AohyoEyDYG_w)QqHJ?me*bGGU>Og=St-(P%n6*{76^yXQy**$~ZiZ>knYLS{9DEsAPv2xum3>fZKGEAQ=IbB6T|n2WRX3eylZE*Z&$V$)nL zp{Nr(9+P=(+Xfo$N#GNlipGY9k1i#Yjd#X^Ua}T{!NkPECm{aiR|Pr7JJORJ;E$Nj z>uX2xcr1vZLdx1l?JMvpgAazwtf{T-0+Fl{r+SQENXRgyFH#Y5t&TNUC`<8ZR~1*} z*+0-<>4(Q2BJ!k>$b|PlHg4oC7Y{5LfsMT3*#+;e-;|1yB?DW9;082&q+5J5zjsjl zQTKnf1W@-Cj0lxpg^TeMg0Apyp$kBpS43%BCJFW|(`CQ}%=8fJ zw)QGV=`^eO>X-&6T{pHVDEJd26(>V#-o2mm#;9|nM_CPyM+5mzrRI<$o#TJ6v2bD< zRZ~k-Lp1i|*WB&-C1%;3B)%?eA4We0diqZT^IB~^HzKxvEl_bwINl`Tb7XCT!h@V} zKk(S#_XBC3{UoV9>NyQHNpJI6?cnf`1S<H&s*mj)a$K;vLf%{a;=pCoNUMY+n;=(E zjrs!o90R){{viQjP$-?vSfMFKnQ|{ zhA1#9VHVVQ80fW|HSVBzc)GR$;bQ3zO%BT$EkmiOgm^P5>RmHc2k$^Ew=~zHBqkwR z(Ggl{BEW#+2bgE|`5cdZYO~5U6^iO|nWw_5<4Uj;J`L6F;A)+dYV~|b|?kj z#nuaai?#z5uYdi6+x(wXSQ?zB^dDMte6c`AD+2{<;ReYM(X=ZX8h<&t3txo-#!3%8 zKG!5}lBS+bcQT`Box&|P5csR)+T69(hnq6G3Vo_ajnElAKYt1vd;TjyG2xoQ+Uwk5 zmtGV0_Rk~oz*zr62g;aHozI7sk()zhTeYnY;O=vDl_W`h<5EZ~oTOygz%<%cPUv~M ztkXP2vciiq&QI`!Y&JiIe;5bHNwVrko55r8@$ozt!k!m7Oh&wC#^Gq3EI2eg1o;*l znxS~ZgN^{E1y*9~;^JRT3`mEmT^=E24OjXd7_k#7UhJn{(aDiP8b7K|>BaG>dz7E2 zlSMs!-~4iH9z`~DPTIFUwMmzQy(@11bR0jWD%-afTa4PShslyZ0KHHjK6DoVa;C<6 z)fZ=$O4^1`C;a@KFgs@S7j1xpRrPHc!(FB;c}DCQlUfKLoaOh;BV`Dw&Koxt@qW7t zYas0u`)n*GE{PCI(#O9RAcCl;_^YBfm&Y`hmzNzUxup18CDZmZ>i_}0dMsS5ZZP8c zb7U`Lwr{)h^OHgDY`60y>Qd$SXevhRriP;K+{}$I`hHpOx4|_vKxTtpAn*?#KI~5f z1R&-f(qrw9)~_r+-5?z}SiTJI&GVyIcFaiNo4Fb&I&6w4Ow9U_FDDT33l-=tGc{be z6Yz4rH;Ydf&VRqb#AKM~Fv;TV%z!Bt?kh}G4U8uHWDha=fHc6BYP=)1MLtcJEBX?8 zCZ-*K(tBDZ{CP-J{Qk{NqU~WmG(i1IETcG>nuYQvZl}bR24oEI*(q?!A^0o#o}rem_g3s+)p3q>gal zutt>1Sm|bb8qg&y$MNG4;Q1=vjCs^0KfT2=$5bd%^|%^!im|@T2t}r|pRVz8QUH|k zxSAqfL{@d~x+Gh+hXl8vxFA;w;mx|9HVKI88|Y8C?080(P!GFKd4c_B{yjecG1+-} zW=lRfTE;J3?%dfO-dPXGO%%`tBvhz2Mr#{pG9g+9CIje8cKkzUOjag@0gjF& zdi17Evr6!sO2fH6KEO-byk1=sFIz2XDaof+JiI^o0Q`43qwCWvuaxg(ZT)FQYK=Hr zFrvfju5xU*`_d~%g$|Q_vbQHFLTF&k;#Qth63fF>wowonFOJG680!;Xm~2&HwHw6o$a0TZO_Dr;hxTH^^!AIA`kVyYU$8Y>e3Y* zD8}pZF(El0=SUXMjitX+6^kERnvf<6TQv;OZ(37+&5D_~9z$GA3Y>H0%H@aYyK= z(A|xP4sbgwno>Evw;2`^?PU|wG&>@0A>-A=(D9L@9;UY^wS!q?TcDYkVIw8SjsHy- zc_ym%{O3}}`iz0)Y-pzCs>CQ4fOph#uEUFBQwuI=T9s(}Ni~*Z`^!T82 z_iD1brjDyW8oMnmUtAT5WhQAo^YX-~NZHj^;Rh8FJr@corUXm1mEdG*{3wdrCTj0e zB95@2E6l5+X4$6TXT?hYcj|-V_SGt?5yxL9PI|)9vJb&3GH-7jjtom4%g8wK30Vr3a4z50!e zXSJV$Aw@u9OG{f@n_@|Ok~VMrsPPRXm#MRLkIt(c3&r9I5{~4^q6n71nMsd93POF{ z<5;DKkB!}*|7Ot`%mL*pNJQif;dX4WI?YRjUxs|WdH~==Q%_H0#jn@zx&FXq;Ke>|o~DMxl@p-sV?3BBQ1@Lo7)oM>GGKr+|VDEnGk6 z)&6Xi0GFZC;p}!a$htyBF+$hK_IJJaWv5{fi7SgvcUlh)X#f<{;oDRAK+M=$q38? zhGn>$8j88s*G_8_P-PHn;e>qV)n2`B*YIyvKO`o8KlhowyWW3t-F@A#S*4Vc{3Mxt z@QJ)RQpb#X$oTk)bBAngaxh)6(Y&*7A(b25ndFlYB0b7=W5aO;{`qnXFPvYn)9!ku zHt*$$pMvDbErXP$_FZ~QwBdpR{}wl?OjEktPNM$t&I7P7eV3W9P_uQh14vulu6ocS z)dErB*g6rBu6`CN2U*=CB;`FPXBB4R*XpV0u6a8;7I8$lfFeCV{l-uhu1r|T5>!Y% za4wQcnHqqjnWE~ipno0V=L;*`puKdpC%HzCOa>y;Uz9Vc`(#cv5WZ zP)te-|J|zY2bj6vha6AAE<4|mY!e1X7Gtd6ATg{t%6|R&b@ZN=JrSFhb^`RYqWeR( z$2a#Vwl(F`&UU9b;cz#|jT%tlEC-4bbnzK#@@(>cCaX$sw>|gu|1k9>&{(Zu+e&F5 zNs^f&Bq1ar8jx9KmXJ)DGG%5b6+%QZQ-qKtNk~XClZ2#~kSS!!JpI>u{{Q>dzgBCV zbL#YZ_ukKbp8LM;Yp_YEkv88d@_q89Wk%ce*Ik65RZG%Ii`wr;Gz;uc86=IXe=X<& zoA8lFjrf*{3B^`BiKZR?-BoyWDDp8j$1#%|EEww#HDDFOXB@% zAkoOKd`dm`_hz&ly{1~$uBs;_n?5I^G{1WS)}1JV8@01?kB(oF+n)2Ggtr|X-ca7g zP+qQEkJf~BJk>oofneRidV5o(Ja2(&p`n%8K{X87jq@(w%MDYknz6BUS2st5v$jzF z2Zwm)8!z&-WMqd{8);r2grZ4OQu0ZjutV53EL6N9|JnRD7=0jS_G5GE=+KQrR2dUZ zesQtI)^}c1Pbr!*n7{0#ItRaY13x)dR$KVWHMca zhs!ccHAFDi-7H%1=tv0o7FHlZf%s6ny@NfV4L`YUbiM$fXT#t@`e3j*YKPUMeuLX6 zDk)j}`!^3IWq>YMnfpY^OO&n3>-;TH-}r*I>OT4Nj1I$(B#CX?K<QZ)^?pJ`uHe63Ph>sq9h56GvjG$Zf61AK%9-Fz2?3^$R3$SAh ztg5W|^<-`aX$j2i%of5?eO%tBWmD2F2+lNjPg1;k{|1}f^Et=uROb@qh~#j&_1JB@ zIn3O@D`$RXco4qWoU+E8YZ=laTiVn@tnVRaPi#B}mCsyZC`wbd578|D=H@UmB1gB? zw;#cvl$dH;=;4NC>TvH0NBqlzgdSu|wONaQ$3_&Lj)l&nJd}H)_gR|*uro@uR(0lI zVcbe?D9|ErOv|sf%403v?0`Gk}_6`s+0>$e5c~EBqU90#rJXBxs8Te8HYXYdWcSH6wv$Llg z=NRlwYHhtZv&4omEE+dD(2L1`#>ok1&e9_xC)$YLo1fCr#sIsWb|0K6>&2p2Z75$A zYgdW(uRNo8zUine3O+d8!5__4orO=(vjq6_&*E9O!SMfUw8`{)b!j%E(jmXLtV{Ua z?9%Y30bipJ&e7}Zez4SvR++9`nZ$hNq0$|+P-qzMT?K>jSji|AALZUUe*()`83RSL zf-d!HHU2v=J4A)M08p7pi5E4n{AStp#cN1N7eVgH_=dPD_EGB zC3dIu43XS>3pXqH5w|ohQ!1a0v_M`U6OG}YbPnua=Aw1|{i)HfpYy-o_X@)xcw8C# z;j~>#S!XD%BEZZP7Zcn6LdOx&3eh=wOXKtQ>q{xUz@KkX?-z3Z`}3q_`MUC|=8E7x(y!Ai*B!Pqb@}FnFE<}v4%Z78v zim#c_Y+qcfy$=kz$ZZ4%KeV|xs{KrEc`p!_~{)jPchrx1? zhQ@1zdz|O=g`CCQ$LBUga+hxoI!a0s>oQ4y&1#SxdS6iNds#R}%#I7q?CX6sa-YW* zL}kPqF;~M`kd}6h&CP``(v;u4{cdT_N7rJbE78&9p+K>bu0TRp@_SsPS-vdZhQ*Pz z-4}V7-50!(f6Pj7nUabyWMT>Xnxb|oSDTEkz={n#q<_0;5>=!lEr9;rB3a4}+8*8uKKXV3Ds1nhxKX!Ye1dR>z~&riI!P;6_lBrNHd%$|r@U@G0DWx9VT@fSQ^H zc`!H7uJa>_5kL6d6(Lk`aY;!EIt&Fp*N$QG7RfUWLX^Ss^ud9>d#_AJD|5&hBbjH% zl{O~UlvkI|cvliFrz_y}TcqvVX5bM9)uld5W7u z#)yl7=Au9}G!3m48$73ZO zt&1ibRYXO_uZ`94jXk+((^Z^nK?oOh*?i~`pYWq(8lUUe>t=3B7Jpq#uy&ih)siG# z^W_U&GpwZvo+F})?m0g|MuKn^MwYaJAV2_=2M&%M5TMIdrVh8yeU6LYY|OHZGEjKA zN|l~$-*@jGaS!`ZhdZdckX2T|MLQYD52@}0P>m5_LTSD@Y;H_&8vdO zaP^N~xjC?x)9$G~y}jX>uxSh2)MA%`!A!0t%X8iOLnsdG{5N5*hbgpfsREa&#HcUvX4wsKnmtHhWuiN4;dd zr$G>rz?{;Jc*{yv%Zwo(2eSy_3qzpzkY&3vQn%awa<%qqK2Nv@8cai4V7R3BI@^ho z%VG0h#GC#_d~bM?En(aLoPQ_CzvaC?dxRL(C+WzDi1xvfOzRWmpuB@jJzI#6= z-X7lr>aC@Lu0RLR_%m11*qj;Dy_0{l1suX_E+xkL7aas47=8bH(xU_@_a;<^93`>8 zL6io-B0j_5%-bmYT&vLH@^UQd6IynwejwG>j{gO{ep>$H57|h9^ZbBw)~%Msu`OUC4K7Kw*+a09%Z!VbEpFu4hS!7%9zlKW;^BC!$$>jg zjh^=Wi*;QjFfI9jhxUL758veC?2y3_cb%0F%th^-eMe4HxR!C!6ucAq{9&k9+~NJe zyUZ9^V6Gc$VAWNx2Z!&+rFPnVv5x(7NZ}$Bu-{87V+dG$qdYOrYq2RPd-J~Movx(p z=bqzb&FmbnArT_=iD*gs$ola4T=tsS*QlM?^X{9it>FnJNCiNmA(6yE2}Hz}Ggol; zAZ}snsP&>xhG@37K-^&#q5bI&But-WmzP?gyp`wPqqQkk$yNOnIo}V=V$_0r2+4d_ zgO<*ZYB@U~`-cqZPHAPOO1hb6X>@}H#&ixvA%;!=D&fT|{%0379S~uZ_tM;n^=I6M zo(4A>N!~1BhM)V9gk;k$e)(o83G+gOofU2MXI%I)R0iwZ!^0nZaU}_~B;S8ml>0a8 zO{)Zy2j3Pu?Ih3z6X}jVp>n^Fg>X6C1g1a5MpsWHr6N@@Se}WANu07>TAGcW6BRcI zsNgjqHVivawOQqhJoA}vVlUclfHu?(&vv{+P*TL9;6~$n5WVC5BPYL{sEv`Uk0N#R zv4r4Ft{ZelM~JCB4Gj;Bf`=rAavv9V5oc~R&Ulp}AThqlvgpP)_1en#6H|%^tNh-r-pQ zT=FG~pDG<}UQGSki!xvMeB?8^_cPBHxC*7m)zmdnC8pfe(=6kOB9uEibunr)5t9*Z z#CC=;#B1aDDJD%XLh z*E9GkftnE|85a-hIF?+=)cpYUhr*5Mx1E6+h(bI^Qr4I(EernCwy5djHe)f%Q#LEJ zyH~45Q&Us!*bATgXv|)Y@obCic))c^!{Itj28+Fy*K(KbNv99V+s=pgJj)+eW}vx? zzOO%P0N&b+As|JZlx>FZ--`haKR)_V&t#^5gxWkX+ToOChcex?E^9hX-eM7#K5fHh zB=(Hi<}3#If#{oZ@yX%)XT@1gS=4_YcozTr_uSTV8FIBTkmnpuVHSzrQuZxGSbE#k z&!aD!TyOmnn`-#kvP%)2FOOqSG(&&gWx;22`8&FrqOlZvuf z`qq(~um4D2u)c17O&lJ-&`%6Q+%)y7@a}ZoWXk*UDEq2`xv#8OG^l`W?{-*-a^hp~ zat<|+r8M#KJ(U;1;XC~!^uYskIvgau&_#AdfBq@>_%3$SGL0{-)-Fq z-H;C-Bx8h(EBwsVKt5+lNHJEss57U1VSLohafU^6J}k;&WZpy4Wqy3tVMBE#AFA;I z&r5veSt*dJXte~71g~sMww>RwfT&Q|-UN_FOu=yTsoABG?@ZijL|W#uPF^|7=h;p< zkOV-&%S;YAbuaKd2zQ=Cvr3X@c~+k#rkrp)wPqw^;KtWbKQ`y|_v8YK>^Rw3J83PQ z=+@R&tFN=k9Nqp_KU~wUdVPobwmI<>q8|`ZE93rxtR||Q^*m%b8J_{78-|d>6Ggp! zohj@0iDjaO;6dwWB&n#gkDRld{R6I1H6pGJb0)gxDBIl{629v|#2dG} zk^kXC<+r%QJ)SGl(2O}R%u27e5lh0>NwmlrSRT7^NmADGx>Imfz_~BGY@=Hn_Z-*b z0W2OT<#JDxSUa*lMyzc(N?mzGs92z>eYj8S>r4KfuLZg5M7>UwqYmTVgt42Fc>Oj` zp9;Cvs_W!07-J4hPJDJMOi;CjWIt@+H@h>b z$?}@D_4W;|(h=);MWL9gQP*R~Pbn;(*dnw3jV>o%(_^mTtWj^s=Rr3yLP|5x~r@{!CTU{XSA`yxQwTOj9iusP5FG{FCQ6jX&q zopU5pSSu(H4~yN_q|ikla*w5K)S0yAssH|+3Dt|ZdezvdN)J12kH@U~8;wAWAoF9x zC;b*mdA4l>OVH?pPn@;*{hG1CuhpuL&EJ*F)iovL9V1Hv=;756)k9J!?80vQ_=OP{ z-Dwk((9;zgUrmNEH^UEGQ+$69q8+`wE5te7M_RsDB6%=pW@cgYvAn6vMYlQ%;gjdY zTqk&YA1BqO!Z3!2i%)(l<3gs4Om)w0TafYeI{t)jV!U{$d&13*bac+^^3tYEo|dvP zJ%;qs!RMnlo@QsqX|(w&XLX|SvnzY|@2&HgYdin_RGEUoXFSRnhqRK4&kz?Gv~^Au zs@qPkYMN+HzArQ+{oMMj?W(S5ujs*UOM9TGVoXMb1E*v~^Ow(MiDeE&a@ zpm3OQg9)aaAWP1ucqGfHBezjUCsD(y^H|TTx3UuxG+(+^UJpNZ$mn9~_~X!`D&HnP z*6TIoI%S@qs2mB~GNKJ%&OZFPZM=oJhcl~MmBtb8RxvpeHT-)Eg|MX$Y=7A%aWA0-8CqdwPv z0hPxc`F|?F%ABeb^fIlxtdG0e=!ALIfafw$z3sfQ0!WIotivZ|x~ck^gd)%6*KzBBo?Kii2kM{eM3! zq@Q(1^5TRj;dHFRqddSiz=6SF6Q!L*zD~-o!7o}%6-DRzc>edpx7?1YAx`X-apGT{ zXs57m3hx$5tIrTP{YhhsFtt|uznV1JJ=Ycg=Suv4x%Y+J|DCO=#|44IAsuZcyMOKo zolMtNmBnBG`z3DoGV17DY}a$(Cdr+Y-$A{FFm=5`HWO3dyXV^fN+YK(BVhO5)u3YH zld2*#R=4%G94JDi@c({T`L2U=8wuy$J^0_>`R@-_spO|1Q+&_xK}}&c^Vv&Joo{FJ z>Tj-oSe00qR_~omQDNSAy6D^RxBJ3;i|w_tmJhoYh{*k(Exm7FdvgdE(8w<(4<-C9 zNL_`J^s!w1nmOm^<(Gk@rv_;=pBs()EAATIoHgJ{Xi@=H|3W&4wQUY<9(nFsmF)9XL<9;;5W z3D0~WV#YiSR%I7DrF9=Sd93RdhDS}PcFt)ntcunb6P*tJ!^yKc&meKRGF&II=IXs6 zpdqVC#H{EtR7>?vUUCyQ`#HkCyXEb}%!WT3R+D83-Sscu^l~~kGjnafZ5k4ojzg zj*5-|-Blu`41iLuRqot)&W!roUvg5My%MqoU8_|7i$q{g*2TLdrjj zy<;rNYL!pcqGpALC|3c$3oBf=EjD6=JzkwT*{!v^=mtXRH&p#5liu&u>7l*- zVWP17_pIK={QQ{SZsUN;pvotm6;(yO8=u{eoT)R*uP_&XEyASF{~&tjGow@EM7ixa zv16&dJdj`YrbHv}UYA3T7n2}#Td%Er_a{grQ;adBcqr7T`{$oIum8M+|Atj4`Pz%d z`HT&hs~bzJizKKU2%gT{_-of$G+LRGrV7tBB+Z-Un@S~pnD*QEF1g9_#z?dK8b@t& zVx{R9Sz9oZxMmV=cjS0I>m2?Lx-`7* zGQ8d^Z5dE`3sy%A3hJFNZ^vc#WDy$~rejUh*=L^rz1;abA=w1kV)^=X3J>dCch=kD zJEXNf&n2ZCY%mr)&2T96b0=4gd)QL<&^h+fokP!iuZgq72{Q&25M7sB*1YmUQlGCq zmP(mjGHNTk!CK|s#nVL_8{0z8*A1!O42ngUo$k>2vkX>0Tzop+H`0giEVJvSEM%{F zd+*MgY#*D8Wk@(|+#1~3d-XJf713c>=GnpYW%S<6+Cadi;}5th(fi&k5I6LoA?eAgzd=oBt`lT1ZS#aVhO_N>#hI?XNg_@(riRy_Hh zEw|N6kdeBPkvgjGj&V^)m)+-4R~v~74AnR0j;^07aca+eN7&fvbi2(NY1d@FROLZ8J4QTQVyji_~jU-U>-UY31?}z7EXcOg{tn|3vKeR;({t4+2QeV z8hB5W9EQgQsYk#U*svIYBn_s&9x|5KuI-I!nEPw^+5;d&ax?Z27?6G z-dGLZ#{Ja)>YtuWflR71Q86 z`f+kM9c|#Ib!)aiSC6XDBQTAPlO3DbJEv<2aQ^tui8i94VJDcn=AvZ9nWf(5$3-bu zc5zu2FsJf==o5VI|K3aMA%S^D;$RWwd%5G~ifIoKnSCIoYGOLV;4)H`k1>Z&ZzG4; zR(E~5UU@o88&*I;V7QYUuH8Id1!aqFPIQ+Y!aWUdWps|goX5Pt3MSVQCyKxtiKk2l zbH97y$B*^mxTCko)~yQpe|YXc+^z=qM>v^+86R3_ z&dU*AP*`}k-Nu*l)y3g?m>UlaaD$*pmWNF)*!nMyqVJiGRpU(?O@~*aodiK?eQVQ` zlU;ud%h(08DL%nEx7hB%G@OZoUwz0w!_V;5_2MqWmsD2SQ74l$3QvkAH2rYT{uL!9 zF<1I+?a7}4mKV>x=S%;Y$)>bfO8`^=Ar!qZ-c~OJX7_QSws&(=ggrJ4ZccMeeU9B^ zpL`RHw>B-f55=lw5E%XnGKwjt?QoT{te?&DZ*RBSinK#8nJ?w&!sLxirl$?u=RNJ! zo4qM%nf=fE?H_}1Q8P=MA0=aNh$&qG6l ztNHq`R{FQ%NeybNP*-S^;N5K{kpNG-V+l>M;9o#Zj_-uhb)V4s6w z!?jmWf6T+wuX3GZH;3$}zE`tVoa;gG{Dz!v=`4rxBTScHM!WSY@g6e%{2Kn9CEhn%R3o>*N<$Ak$Wg*h1>?Og zyVtKH;lzTwYuue&eO5N_rA&ZVN3Cr;oRxzh3`W3?y*(rrNY9wq^-7g=#HRXz)c!v= znucAVxLon}ZX9-jL|sWp*f#p3UQ2M!@RO3>Zw2Z}rFECD=~mX}cvqW?UK1^o&1`p3 zE+}q0JbR>~TIbZF1cAE%e^ihPK@J9z+azRkC2G|5ewVo=PbmEK&oNlNcxj1c3=%%= zZdwthF!%!@1nAAFydTLqB~M=lXNwtD$fcx}I~#{7&h!W}?1a#SOqwPA{W71Q9g}VU zPAcNP#6%J_3eEj(IJL{G2~!dH7}gEDFwrQ&yQuJFNr`TDQ`yds z#_GSHU(*`idpff-s>Kox49|3Rkv>iFV=3c@>P;c5w!_f;gH-9}<^aQA$fiC{&gRG0 zVYbE`b`LOauA#BC`=+wZR9XA}>eVd2CE;j@irTB8sey~JyHbiO6+Y8!1UXRrD~yJ3 z*O}ke=*mRso{vzV@eQtm$Cakyre9daSzr9P*#6jPj`Q2Fu^?k?6XUO&(Lbd<`3Th+ zy}fh7jMP#S61zENPDk>PuexQJEC(zvuK~w%)HS{>N{gHj6&?urA6~u7oi71pos=to z(mMu@ZcvvwagdG%?2t_(b6$FzQ<3+?a0}wboG$syHjE{lN=aCY@Q%LC^=r-xG?i~- zyYOEi_aH0_Uy^P+v~~gTWtC(T*q~D5)p~Ed`=Js;lE!%$R2b)_b&kC{dSdBi#+uaHp^60e*J!l>TKy@hDeOW@k#~TtnTp@;|D{THHu9;0 z&g7wAc{rT&2A#oggox7OXu-WEo9e8Qygv+cUZ>!ZBaxs^eNd==KfGW!`*U4AQ~}RI zP~kw84yx`42ytVJ<~LJax-Ie-KiL%8H0Nt%5>-o=dWG*Ftm-2!Bv2n`T722~uFf18 zFVhW>5i9YWMGxuY1h1<8#{-Oh#OVa9z$*VrQ!a0}&kdw2nAqy(jLSdY6j{PCyTs-s zQDrUxROx%KoT(^dt$Bxd1#g0Mz*e|E@b^+mC9Q{1tWO-v@ek*}&o(~k;_M@Dc6~=q z)6OSheKy5J35)zuM(PsMOZr&DFQYv6WhJD)tjygf-du1RiEqlF(!XJ6XWhJ_L??Mt z7FltTYC;2UrN_V6inG8A=#{=83zKAuaIBgl)~}t!5j+`q*o!c0Zr>8{En9~%WGlRx zKH5pNP0W88v&g){uKF~>N|FI$VGP?`rP!MY%c!)fbMnduLH34=!I~HwZETZ#)2Qx3 zb-T^uq9X#|Dgf4^7z9t7C*jmJnYbyW5cavAjBAp2mGUILlzM-gOC+Uba4lmzs?YKH z)>D7Hu$CJ*GTyYG$HwNT>QSn{{SbXHA?X4EqM) z0Abi8>o+nsZQ8%ZALb!>ofe1l<&`#>>(KSv+^s?xD3Rn0axnZ%Si<_}mgy9dsNQE) z#xQ;{$>*LeCTQNWb8rBZ$6JXh0$!GU4^)X2P{_3^-T6H;Gxnm4=c}E#=gjY8mQiu? z2mR~J&(dvyR_CO&^fi0mB(U6YqObXB?nqYuVThxVDxh+VYbv);EKUtZ&&GfMLQ$cX zrEd-kJgj+CiS7$qVRddQ!jqRz|DG88=ao@#II2#+jX5IVW2^PErt)m}HNV~LQi8fU z8SVlU2Z+E;;1eT;2FxxJX@5|vyd>Mj6iZ1%8|zKS@u( z8gV0WO_uRO^%7~Y@e(eUEJyrLs@9OaagMBI!B%*U=SI_tU!E(uWD952^V{?pxb!mH zDmNoh==FJHJvx<0c>7*(?ZSK9F`rL9;ziR={CU*E+&cQDIqOEY%>~NuP#?i^S}9!@ zibevYG+YM?#5(htlKZVs(x6Vm^akD;7Kd`Xik+8ks|?bobix!SlG3+YHYD{992=68 zsyCmZqhLrmeLhS3_v=fQ6Y~*98a5U4u2O@D9lex)8aDTRjt7)eGs6FPW^7){<}gx! zPw{W%6l2I;w~m~Z^X*nqbu@ytmP89;ei0!IZYQroOHR8$p7DoIoZBJ05h4ONFNX5% zrKxB0O<2>eq`aB??b9RUOzxNlXJ_a8@CBpWUORtgQ(vBL8p1hVTUoKObI@(4LL&ul z-Kj3Cl>B%Nh|4fw(yreR`Y3kNGUMG5QJ1sXJ6&gT>*G#L{759C2Cf;G`6v*Qr}Nrc zIccF8G6UyXUdF$7xavt`_#e)sloYsl!Z#S0(5{^7`&`@cK>(f%?N8zr5HX14fvr5< zonzq0qrgcT{))32E_jp? zzTpS3GYZ;dDoRM!<+R5ENy=9@dR8yQ~V0HEOe&OV{3Drad+itk#lNkB1l?5`AiD-(~}O0Smq!#80rS zPK>#aY=bA~YCaF~qMmBCzSA;UHRuXI)LdOvN^#rw5U<#wcdZnNG7gS9QKw5{X9YSgF`lAxe$zk4H$;HZ=AjmjX+Utu* z9vE6fMh}OWYqBXAj~@RuV1F?n&$y_;U_P|ZwAR@MI3(Hh9qk9$%61ZI+5)H;G2g=n zLd$`%KHMs*`WAJ6$?u{$zRe>4bY5Vqb*)8u>L#gFf*;~?&!w3|@b7>pWNItF3m04P zRN17jya-*zUq=}GVQ_@ezS*=S+>zqUs4*%=CZE0_-2bkM#^GIQ*>AFXf60d&hX8wB zL}bF%F>T*3962C3rSi~+@GZ9PChm|%ar!xXde)hWa508lEi^pLu=AY}Aq3An2oIot zuIht62#ywe6pG`8Vj9r**O_;`sfS}zSgSR5LV7d|nAnsrHSHgnlPV#Vb4MEG;I;Pi)SKRB`Hn)g<3xu+gZY~$8~y#8L)ve54pf`vU&zyo zQ_F}ARs0;aBU)waMFvdR1rO1y5t&-Atqg4DSfFwR1y+#p2)x$M9;mUCIP_47Y=NN0 z8!s!(=7y;s>HyZZ6QlQbZu#RX6{_;9bK=dYn>42U|5Pkg5ydCT1|v?V;zXrL`BG9U z=`Ye63B*vvrla znIstDeI+K`5H%%uDDu-@(e2+xT_MVa11j>;AKz`ZY{8PUdvSwKlLr+YMz3CFLL`kC zgk!>b`8F3<@Iky=a8oWNf!hbO(UVeANG75S`=qaN)Wy~HQ;XaRO+gpLt+dk8(u1OxwlY^mZM9zLRE_Zzhj-2-TjzU|HG7iIBi7>Au%Yxu0hvCoj668G96;M!Q z4>IhWE?@85fOqp@3}tXojw*m>6jg`dX~|P3pLUNSl#5IhmQ9KJZy0P;?v|8vS=ysa zcFUP35iKqTu%4y@S6?Bov(2t{w#%;2@%zLxJv|VSj0oL7XxgzJL~U(Bq(S{LXBehY z6wqo-R%hx9YUFhe{QGwY%{4?ZNIwXvhJ7;}7S|>ViF(?CF14I? zUetC{Nr;w$uEJHC9WTU$+cxFI{QTm()i!^ zG+9hLA&{iYn$}u7)WJBrl$ck(ejnqR{P<=Vy^_%e^m{N!V+=X@^umQre-&8f;&sa$ z3JqaAP4T3A!p77j{ZeJ0Bi_5hLg!Kv%-%o>eZtMOlUv1wjW+PDF?PyJSx zTx>)J21%vvz%Z1)(u8z_ z;j@R8rf}z)0s{;Zl#PXrl?}Y$OZ_KItYzal*iAGuQN&6}oQP9(ab9989%shooEG8Y zdzK-Fg_eFvnM%8(15_34ggB@UGg801;-LHWIyrx@e0?qtGCCMUCb4$jc$KJfePxyX z){Mrw?r)spFbl3Uz11-2N2x86(1fxbN#4jEW$o_9*ZbR3dOoi^y>sGqez7tvI)0gQ zCTY}ctjmDOj=S-RSnEft*>xis2wH?$R(o0W`~FOqot{}c255o$mw^hcXGJ3>O4FK zjseeQE z2Sv)~M`R+z0&Q-?pcmz{i(*oLHri*tRc}69NvE3-W}J7#>R1z_O1cYx@n{tT7k$~) zDQ>KBuv6Sht1ca^oRD^h-U&1qsx{fscAc4GHV8i;ZPcd&c=?4GGg*)dS3IYva_B7V z7a4YnrU>`c)*7?V>KJc6PEGQw9?G3c)Ox=)E(hlV78|{#3Ci@(W|NQ7sFpb}(SNU>0NiAZC9tQUp zM4lBA6gtAf%sX!DI{UhM)D~DFc}h_~S9iIL!+nx8FxpmQ-r^j4)VX-kQ3Py7nClc) z>~=+$w)3tG%#X!c)kAsr&Upn)5*sT((n1xZbhDnEYp$pM7=$hBL1#K?c=!-ZSWaWe z6K7;8nk2$TD=8(@-%Kh69S8vn#JyH)T=iA)c)IFo)_n|kYamU9XE6@7fggpoXrY>u zlbk01UXkGt7B+q#AvQ3uqx#Yw_8BQ10SiRGXi+Q&$X1{A_mK_c2^Kthbb6|<6Y=Bp z!II9oOo_?KGgE!%PW~c&f0vrst6@qrb26I}JOhb@D;g4sDctu7oFQ~MXs-mJjLtXA zRm*g)o9pY_1BKCN%V@EsIYah>c9jDu!)PmXbGFuc7hKE(NAlXAFl6Z51{MqPUguZ8ssAIHnDYO z#T%HV1F575=L=R1d{h`>Huqn-67F-LC5lfof~R;5Nm|puy!)^Z*&K;jivQyp8^I=gOB+IDQ4C!h>h9GGH4N-%vY#?iC%`jQ|!9J!?%B^3F>o@uoCP z|7jP3z7{x@xlE-^{=+5<_+{Cu@rrqs`4{sPou2sn7x_uCs`QBVRI?1T%&9{u9kR5U zNUN(I8e)XKoMHE{PPbf~+SCfA&m_Dgvu#i`mI@ocLNXjbgBSbz=E0pho^u6XuW*oSzOvc@?N+u!3v3j{PoK_4yw@K^+_h}7sl41|AG;_ zWs#dhKJiLZ)+A!iN6JEm`3S`i25h}!?$?Vht67N&dL?bPj@fbdph|jmXz$uzRUx5z z9EU?LJCqXvfRiC_nAbQ;HbT6JbcNWX*f8mvGH71CB@ERO2@~Eq204osrP8@dTO46$ycp_}^**2{REuJVYmJQ#UnF*R>< zb5eThchYKZt;sHrRIT-<;jgR~MNj6_Tk;L<@tW~Q?Wi=R!yE$A&B=vp1>NAH0GZa+ z)uq5)MKuh>0l66j1pm;?Xzht*|U`@^DltYkeX&Qjjmi+LO=qD!xuccXOyaYKTWT z8a@vkOM8g)`T;~Ga>X>jF$!)qOreT?tKq~321>(N+eSu-u(1LG)4ZkmmA=I=oUadr zZp|G&p3u}cy95|lDYABc{wRI$p+AKzZCOU2b1W^5gfjcT1Y?DW+UAhG^|95eq#uND zI`B3@j?A{d7e4Us4Xz)2lh?3lBG=abWGMT2`cE58PfW7lG&@33-b=JpP9Kvan?*9Fz6POIb=X51+syhKUw-T8lm(PAqDw@$Ma%)=#eS;V30l z&NtZ)g={s>+g;k`&lQS$rr&6(GCcg@3*tToz@^zF8=Pv9&9=7 zh&H)8+;Q~7VmpzySd_AUXJR7Z#SI4=2#$24bW5A;q^c+8UlkTAWRfsgnhoGwrznbC z`tV04MR;G<_t2KIM|Cx#=b5t!%ie6Wi+tjTJ9*3aEH4n6IbFY@&&19IRxremNlEO0 zSff>#ORFj!C85-eZ35`cV{xy{(euXJ1F`KnLf&H0w-ooLilSCRy&6^WamIZ^mwq3ZXi|?|DxTPfi z(MPDrOz`NTs|TWj7FK+z);6&wBtY*fXem|%Ib32e@c1t_$H8?UVRVkR$ZX4q5Qgf7 znTDXkR|2mW&ky(s*LJki;}Sn z-NE1yq+fCX5(F49q(%NY_jb%anKfb(q}?Z-yu9kM`7G9zuTygptCYCqBVMcVgs(J|%{5!S@mk}XeuX4Z9<{l*L^@G&BQNf>&R_pjbB>F}X&@Uc+<*eIso(N_=VK9EQRW`*$S>&9|81->L+c+EW$>p+(af8!Qm0U> z;FMGr;&VEAWhPD}i98Cb>N6kipw0I{a|K_K43fh|LB{Bv!L%^q!lo~~`spV_(Ea*stPs6c(AT=9-EDG6>mHp7oTUa{hiS1XtTj*!07QT1vOtb5bwIpz#4xfr zkq|9H_xtxELsE0a%4B(qij;cVMZV;qy3?-v4>TVD9z&z&VAKoD;9{;0KpOGW)^MzAYC4Kz$FhJ3o|v## ztU6H8C9fI^Ea>Ayk%hlK+%eJ^BlbI%AjZS+i*U0gx(oq6zBfPY6E(I0oqGLo1tKdL z!BMc32O3@ZJ8)iZd5;unETIAb#2F$&2CN<7_jWDJ(i?~Q5Hz>=xqo71MjWHuS&#;TyCuY8BlF!DHwVTgI_xb z1UJ>yweEq$0>>uky2@NkrVG_B8EwqBxuDHfm5t$MqPcWKBI{AZ;;JlizJlaa(N?o# zdWV!Lx+#~n&k{IcammP|D0EA9pCL5XACtRmjG^yv@6l+{K&`?Tt#Unao40qK2#dON zmuI1Xm25PZ+M&dF)w~;`a68mx#vvKG&M$ouXLAv0TiMWN_)e0|;tm>{Tt`KjX_SE*eUohHOxP-tulF9|%34c+>}jnz2MC&|5_ zori%Y(#V*XB^cg_))JTDdVoo`!IdU!15lanox5(~G52R5ZQxIOt3pF%o=6lFo`nl4 z&9XahH);`kw$tr6|A?mOr?F|ip}51Yw2x1(N?Zo1>PCb)a86W1b6&ejNf<1jqf?|= zp#(Ty_ghq`D9}|Z_t9->P$<6JrMg}5#4sq52hLy|;Ru&~xpn)En5mpoGiAo%cR%W+ z&L@;!5u%~u?y_SnZwVA(fxJ}zN)zA=58~g{rm8*)CtiH_#r57b_NNz=xXWA)%fDKy zJUtLXek^AXz}*e$DpA$Yzr`#)N)$3ZBU(&T`+l>)j?|L%Y@o_sYqDSWiJoPgv64d= z=(t-Tm291hxME@xj=*BNd*?Euc07&n;qEdMqNEM847ecjX=Y}IwIp+XkO;34jWrix z*|BA_WTJ)|Z`5bjL(23x4y^?h^LpD@n>ahZ zYbmttgadkCe}5w2esLBur=>wPPx<FK%5PQ*GJG?|aMNik4w{gKOvll%AU#;Xv6aOtUr zDc*X}u0~bfQqxy?fWjd>0ba|FlJfDYa5{Y)*#MNFSWcGdSCPr;y|S`X#CqPK#d}%K zkNR9$<~qZ(Clla#;yd$5PuQe?Zs~i8-<1LRh=Oj>a1i>Q$T4v#J5RBP)WoV%|8!X3 zBq<);tD}PTj_z4OCOIPK%00>#y3|53)F{l_&04chAs#SaKhaV0Q;r@zhHp`=+ohI@ zsqe}Z8yQo6b(PvqMFea)ci^W(3>%Z7AlmS+IoDAuOlYuPm!Q0>r$Ul;o?`nopL;o| zKa?+=6QFYK?X9{AKW)fiT`wdO%vy$kg?!Cn{yMs^`0KC!+pjMf6h0l%5K0;73kV#! zgg6Q~mcZ^_DXi4B4)|u!K$7@e&e8 zNGn}t)fs2cI8+F8VY{%y1K5YZ{O8Y7cxl)CQus7E@RV*6$df@)S zeOp(%zkh!M%0p52RxXZkgaslN>6N~zL_$z?D)u5wLU0r?s49T{ab#2+W-+i_D*kEo zNEkaTpzN$pR_xw}?4EhBgo#qgrQq5Q+K5n89UP}%OoVfHFU?kFnm|JZ44MzpP1#zt zb*Fw)P6vI(*_=l0RLF*t;Nyt_H3z2U^WoEJMg<5V_FvDAB?q}%>F zQe$BEBHZ0W12=1wN4a|K3#hE^>SE@NVoqp!IieonA@g!HPkG0$_P1vODl4GTM|k4z z_8tz6z<{w6FX5VV{TnL?DeB?!7acOi;?)RrnJ6+m5CUFRNs(50T9AdiEZ$NC)oRhJ zZhNdPHd^V2O4`x^6sfI}{--0Bj4nBxOW+^Y4u$<6Lcy1O&PeApS&BvSi;grzyHHjq z1ENLU7^~`%sFBHNYji5aqDNqjk3pxhZ*SOM%}$J_7b%@oe}E!%nPFH9Lp4p)n$ zaRdwUX}!p3GfGSm6RiD5g)EMM%F{weOkN&PaXG4t!GpzZgX#_m7WK3B6Y24^2Dz|S z#}J%KyT!6VuEdi7Z#QaVbViRd84V%6H^%aafgRpozPOb(FsW7PN!KHToNM_^nEDt> zTsUqifQ>?Ekten$j?(0iT9QTYpsF$aaAk2tVVZ6OD(K}66m#P0z zodO1-BtCOKeQEM{l1~&<*i7_uJWW$cHiWMz=e;x&WjXwNX7wMR+?g_gg`p<)djXru z{9?X2-#5z&YB%F9czdti68Vqd0T~#o(1p|-|0rGjL-o_ZG}rxug*N*xMgmwO=dZvx z`B=hH7UfY>u7GV=D4^KsGqpLq#mM=;_!zmt5b9(BnRAv=%;98Z`XFYUutxza1j7ukc=pG0`l>5KD5R z*E1_Cz~}>~3u8Jc_Mm{|H@LbN@aX9qB2!381K39fb!>RivF2zh+kkdsZ|O2GY1YIy>^E z*^n-a8F1|-QDuT_;llZ}i(f}|KK^I4XZEzhN^XT2xn1U$-0nBGs3HzriR#$0FXLCE zIztvoT>*apA5&iMu}ytg{&U2pP!)d>Y_x}jk;bJD{Idwm(;hlD<%yg3k0C;XPLai6 z(C0(Np!35z^Y0%H&t3sT^>M!{_M62~O`_iH1N>C?g!4%XM|%KjJbym0ahU$0(iT{) z%VO)T+V*dSGO|I{&i)DlU}1z_12Yn4Sii!Nd}c-z?ZvOfkqEcUD)|4kNjMa(uqt0` zXT1jshe(Wae7oJGAuk#HM`1yphp=hzQ6pP;1`*~~$N--9z{WQ|$tjYAMBt-fUX4qX zc6^m!4oA@mg2~&WA}0Z#Q%Mfth7Z{%~0 zhZ}m=b$5KEa-Qq(X*QS(HRV^z>rBg`)8ORbsNW}&hCnBHTZd`zMQup@*#(Fruei7X zVGaiwRZR;x9si97txT4k7l^*(vE}vnBr(xyEiwI$1Xd+1?a1@&A4le8RNxqNB& z%@fK@EGsh0udVoOE{J*8VUtH)Bwv4$WlV5PE~Aezr)G+*zm*iwykL*pjyz{`FAj$Y z`!#uHfm&=a++mM&aZr0K3$iGz4^OyJD>ERw9uqLN`U!bGh1@$w7zyh4KYf+UdtuuE zr#&<>p?8lV+885!GpD#Gt#+c<@(uS?$8COD3XF~^bfza!KxW&KtbOreyu!vZ!v!g8 zp>?kJTdjG@O78RDk8R@Rx!BAk%|`pr>!gy2p~^2e@9pzmqWV?0FYtd#JHHzSKkzty ztOYRxwPi?LRTV)g@AP?o9`^RT)4!fH@txZ@oPH2)=9h~mBh>1TO2MA{WSPUZz$%4` zNo=|PXBDOQD!6*-kGP_bh7Uvo5Y}6aiE(O{6CI3zA#u`zN`hq$=KfR1pif`v0TTom zfAH(EdwgaU6_wYarnE1UU;t+r({+9!jvwDSO0h$HX6nY{vZo91IF^cDpLY z=Ye21G3A5B@P$JXc2!3{2norxFj?{+RX;A2ejY-x9sIQk2A1ypD5E zwmZb=iz~`7W?mBFZW_jkqdy&{^YKfUYyCjr?uVb4NB;@HyD21u+W5UkB@l_06uIH# zuWunR@LV5fjw?KVH=tgPpDjaMa0>qDXv8A*RU$MpPc~RC$!)9cCR^ouLLIBoOGWzZ%pl$`#iY-bCFm2 zN8zh@!l5EQ_@Geuw$i50);y+#_3hkLM47)|UdtCT&{Cz`#rb2FG z7QcuENs6wA(7T7;JNLR+FeXOSlQcJW0=zK5f(Jtt0jrzsoH=D82%j3mUwpv_G2TH4 zE@lWtH+nx0Op7pwgV=+7HnV*G$?^@9zoC7OwSyLSr#;RJ@_iv%U$Dov z6E^#Ds?VZg{P#xykpN&Q3NoI{Y=b{Vp)K`)s%cnqRU5@0Y3`8c{r7JP2_2G2%^O3^ z8!1O2BQd`^@m6Fb=ef*uoy^UOF=IT>K6!G#(5##M=6hkSfVe}3=<(#(KuEZxfUc$j7-Iuj}gqf z?tI*nJNN1$*?J>i|HYlE*JYmF!MZhU+qa0*>)kq2p6B>ldt^5ifFKNFQu&?7I_!0I zziJB){_;MQ^x5p~SL<)l6b%{&_tZ@82B}BW-NS!r7sr~>>iL(8R-{>Y7XKa@_z{*|y&0c8wI zYjD}(2S%MsN8fZOvZXv}8!Pr*`9CzBcR1I5|NfgQxg;SZDx#28*`tz~WRtyDB0^T) zNs?WJWF^T;NRp6bXN5iqA)BnMWdF|3{X4$LasP4O*KuFQ$NT+yJ;!-IPT_`zlP<-) z2(p0`ywlx39y2Wu6%2#pu_$2Sr8YX{+v{*~9gXQ%%b#{Vc#3BgVef?{sRQHGG4 zQ(b4(gVFBy?;X$zyi@MDV10@`IYs9XUN3lzT3e4|AFIb(191sv+&H_@ zCt>rAsB-2o2>bN#i_oVHo9G&;Pm+vr&&=6IjI0)|%FCxfnxy2oU z@>n}tibpT=a~{Bxi7xmsK03=exd1k9=CChV_;++vsd65G3T^p!whS`v^!k1fzpxW} zcs|cD7WBv*V+%nO2>lBWr9%rZ-^^QNq9mHghip-KpKEZ=|2Ld{Eig5uCjR-|f>v9q z_@-v0o9VM0BWpj%wu~@&!Ka}+{6U$@P~pDHyN!k_07`Ra!RcWus0h=Hwi}7_+j+fx z`U86-9~!MS!vyr9mYVl0jNzwG$nP352-tD{ z6Pe*s_X4?mQJ4a_3RgPh=RGy9o>@{qse6JhB$TMNFc*x|GO~HNEcY@hXs%d5I`?2~ zLqPWwQ2ORVPd~ajnM7w_Pq0Z(r`#9jGvA4W7NR077;wSMN2wR=ZIbs-jXE&=j^i-Y z0BA^K8|2cvtwbL?>F)`+fSzjEhl=9t#{#mcfF&lE7v78ZDOk1z;+hf?6V(ZB271S% ziISVf{Mb5bWL7DQ=NO&6UZ_95k0K#4>Fdlsa>#GXw0zrw%KWx%z1}oi_IOzfNww?5 zq#IYA`#&+kxV`qJQ&UB)%^OD+H(RfI%j+*TDjwI?)z%R@b-B%t`Uu1{Klbf+vV0g# z>PbzVwzHcTOP8iQu$w65OIpfbI!qZjq@3(Xel|ap@j;)3?bcye@k!xB(&Z**i*IPC z?&B}1{7F!$s2gx7qyUOatD+thc&dWQ^V-H8jsEfKiFrYdg`Ur!x1o=4UAa4J+lWY> z1|FV9{>IaZswbm|bW{Ujo8gIeH=i=%W&E|VF|$d8W3(^!|QWo;{K3;El=s5@m+ z0xdt!`JIC^8?m zI^})3<~?Xnolxj|5(7l!K*J-(^JE*`r1UR zBvyZM<=%ep_hRHWU$JK-`;+p8+G%|24}DkFC`>LDa3}1YT3Zl5%vW^ieB93|caruBM`&qWdM{!6DUs2fY&^~jAV_Yyk zCwTgI=CxxZLUDD^+;p=4i>kkP#ZLPiSGypJ(6c|FUCGnuRXJ;cD)NnN%4E^l(SsI6 z`Z;YM< z*WrtvZ%Fo58K!j@S(2f7L*ra3={^GUJk!We!DLxuyF6am^)mAM5>GjKyow<&vA&p_ zNyR7&@pANh~32w7CgSo=YfA@plxX#Fsp&fjk1EU`C8A=$4#YxN-M&}{Pe zwHVQhpg>`HzNjieI9cr*o_&Y;2X|q{*K6<(;S>MOI@N1C6_dTnsYHt{pGdBW#k(iP z-nWpy@vQCZ-w#H(uPFR+d%pZ#lRfi=)JN08uyl_DcZF*7Yu(9+wa`pTol}2riwCsY zW^7!3ONH5u=#HE+orAk$Ub9VXi=!y+bTB`|G?ppV}GS9ocFZi9FAb-w(+_bzGboZ>{ zI{ES}TiGD<>nhvxoQ>O4H=KQ|*V%n9?HJh6^Zsu*%w@kNL=(Sg4Gp};m$KiROtP12 zo3J8+dwGQ4dE{2FS{HRcqN4EX;Y)2DyFC%ip{}l9aKCbYvh?jQDjd(7ouBPs-dZ^4 z`gI0A(?=Xqs_BguH| z9DiJzZ4`k|P_ctYk754r(j1*^L+u~qUp4d}!raUmHBOu0r<#Azm*}e+Qdq7G{=Tus zD7jo2l)<nArk{=W#$3yO=Jk^Q+Z+-dFub@r`&iJMqk&3@& zSM$1o~5oTxAQv~ zAb666!|YYV{Ue`9gw3TnC+>>v>g(*!2fB>S_Y1VX`)J4HSw(z)Puh6r?$gy0++yhV zq^j>%Sp_%Mu^hkSBP+cXzuNk$W-fDTzHF~Q9;hi$_P}}fsBz=f9W*<XV(bTZoGQv6V2+ejRQyWj_gu-OB|U0J|XvPef=u!ApOf<|Z}8#)5AnOj)@PWFD20t~cT|hM{cx^v zxXh0j{^=*c`>pRIb5*OfK`6%7bCuAJA6L5GGqJS#d-+3_$lFoREHM){T0vqq+-}n( z)J!~)`+PvAe(}Ob7psMh$>*|P1B33wa4^xVTnW8AMl(ft-L~CV&BSp1v2gs)3#my= zi$+O?T@A@uksnqzY^SJld}BDa56&tk`u{B+DCsJ;cZ+vlukI_{%9QWk^(=o)Y=4Gl zu0r+c!ohDwt#WK#va`iY*En2%4KLd!r;?1!rK%-g|7N}ZX(z_U0;IeYyCv;L_0?v( z#SHiL&74nXiR!htUh{AGKK@jGUB+{-mqA=BRJUZ`=cI>cY%YxbH>-KFnI-eF}uD@5k z*-S{9`ulHAxr<9~_V0o)2BKDQ&-*pD!F!v4!o7`%{K?Ei%QqltTf5M!$_Sx6sq8=t z?X^ECB}yfZ`Xvh9Eg@3;bd(N`(y?(hIvvO-{mAUF{Lq)7g=XRvDY0u+`PCzLAN`X4 zbceWX;U9tiX>U4n)+ZH+#q?o|KSL4hZ2nxt4#bYKuuN)lLrgOThUuHUyl2)D(qGtA ziH)*dS9&E*Yc^Vkh;L+*4#|8_a}|H0Y89`0Gv!*M>p#16LstLE(Diq$Iw)de!W!uL z!CHVyH#TeAJ=?=hInK)|cl_#p1{>cpdux|yGkZ8kFwN}_SMYhO@0JX!{##Yj?Z0D< zkxl)y?sG`vH&S2m2Wx$QS)Q&>0i}WL1pPHR%dLeISxrKFjz}C8YBJrtHC;)Xy>08X z=vDSJ>G=2OeVeVK_tvx?DjDf2Y4F>spG~1x4>H%fVtXk^>)cNO-_!xpb_bCawOXP1L=o>BN$Fv#5XvOgbpLK*Du&7I zapBn8Zk6-Z-?w~wl`DG7yw|JD_+^Oph%^f|y(DFO#N7$=bzjLdJ!vg_Z_jDY@3%2j zG}&spnOS(yf}!);)J*W{BXN8!$RF2*&(fA7dB|16g`TF?A_IV0Eo3b{B zp-$q7S?7m0)%R;(A7C1g`i2DR4bx|L&)N5R_W!fnzTYMLIaN|nwT>+g zUbLC{P-4n!3tQ=xs`phhLANv;z42FD<-r-*{c(4?%7Z-Fx3}iC#Ab$Fm~d$vp;7D5 zzt-n-!t-dtT5_A*fQm`kwR;;YMqVSb6X}QjA7)oPV7q-K*G7_AJ)0!JOocJluiJMj zZO;hlEF>GJYx=zm2>;$iFl<{eT)~p*@9jK;mwa}%^jn={TR5iq$~eq47D9DuZKn*)wmic&%?C8_%Q> z_Fr1tg*w|a1K?dCvu9=HzqCcmxr(#b&oCz>CqCjI%I`kR%b!aVR2RDK^H=(EuA%fd zVqNyk^UOPP}-XvYXGgHtlTETVkFeM`fEq^|-6Xi6LlDECd)~#<*%^ z00H7xhck7S1$fmVtAN+aP`CjhL0(GcR-RYSN(Z#xTwKBw8(R%v1wNa_nSHT6gOpHP z;rM?((pWuec>Vl5_-H#k?hnRYT~11HHOKERec-mP7Gn@PE<3~cOk8e!vzfIi+NYQS5@2)cP##>t}!i(Hvb(o61g4PSwBdmv#6k@$G%dQ!6Fz4 z@3ZjmWH%x0aU-XEDW$Jt-1YbA9nH~XD`etBQRN%H?%4TRSy@Hjxw|VBfd}hb7rnxO zlV};$oO$AyE(^PmeL?20<_o**3%d0WpJ*n=No8L@#-o{h%~v`gYU0Mpq4d1RUft=8 zK)i~_ZK3!}h|CsX1S3Mp#PF+TUN!U6MV9 zMn}hwll7dg5)gu6?KSIV_2=ilocYxl#=|brbysvB_}u7yYV)92B>wU;u@-mgA6?DU zaaU!?5!)T1tl$&t_ELJT|H$vFYzmEZ@{EFaYEEd|^irT}w(unxtoj%z&pf>hW6PIs z&l5w0J!g+5u4+Cf4R@XMbN{dU$Lo)}1Dib2lsG2J`*JC`_EA%3XmO*Tzg+Fzx-HS( z%{R66$RkB~axvC>MZ9{Iao%FK+nn{-FYbhuYXYUl*!$3wkGwF%HXRGO>R2d zcl!AKnTo0`pKD}d2X_Sye1@oso7G)Gw-Z%{{tkQPgoD5EY05c!kSDeQa~?_7h^`oK z67~LM62*+)rBkoF3g5rw3XVGQeg5}hG1dqxuMy*Y$sHj*{TQJ@9c5*t!K;x=x*?Xx zd-78ST4?=3WzKj&9|hPjUMdp9go01^+Y&^Sf~QZ*=Bq*a?5A1_o_|QlrQe+^VF6IcqP4xf z5}zw*!0T=GXtWhAeY~@AbRJWB!rI2hS=`E<#_!C@8gW*tAMi;_vd-I>+&Z$(!bE2s8XWX?iD7;Kf=9@^Vs(9jz!uW8?a{de!Sg)2`RuJhckw2!@T?}{cp3V z#y0XjODG}+Etnj%a@%MBw6ePyRqI`hxt!ik&VTSOQpndcH8VSZ-A`Of3ZdV3cI{(B z*w*{^?-5Msg1m6dIK>mIJa{c;>h9d9y*c~di{YkNoLJM~ENxI@9ra@lGoh#7?2q~x zv420$IG)<7*8F6AQIFSJDDKQI@6}hvCHMPg6o^O;lnX)ksLaRQy)$&UedgnxGIXvX zpYR|S1(@-{J3c>ubJ!^U%Ov9z!>~r2dx=~=$7w~mRCN~WbbX`aRJ}OdCpw(!UbIuy z3LX01o}QfL=jAMnkx4{fSJ%Mg!ei@frPQMqoJ~zlMwBWK=HU|c{JXw1G$)oMP25(7 zkW1*1TX?CHzqVZiFa~_z3c4qbhi`mm_CanU0iXh;aAB2VBB@+Tx{Q{u3c;4 z6Ltt7eWYvUe&59hN=t;v4<8x3p?K`kIew*|x}P|9`TMCP$2XDTDe}kO)5#0Csdhzr z_tRZTSE;cmjC|ce);TkU)j(A`>Ao6~wFf-0as4pp&f}Kln7|Yo88{{fKWTQ}DXW63 z;$YLTN?*+FfU&0b?{|je+kcsQ6(ZoO24o5b=T`79@GI7iyGAyQc$5?#_xFE!8UnWI zo^CZk*0&YQa4SnE!+^IxIRqYxGxOg8sL<+RZ+`cVQsEarWbZYp`<-_-dYoa&GX0(G z`dYI&Ku&!r?$4|!4klPe4TK`O2_?{`@`wp=<`?PE+x%*>wiC_#4o6o^@D&a zv3-2?Z}O~O^P9b8$1O{kEI+?t1qi`}y?>;M5qyyb5#VyxD^6 zk6hoPzGXr=(oco6X`hTF*+GG8w~!VoZ|zg=o+}HQlkVMVHX+_A$jm7#toEE+)2L3y zo*EIHybL5$x@QAtgVqm*6Ynyp>9lFFeW~}jAQb(AWG{%z&z#yQM*yfXm*T3Ck(=Dn z+@P(JQD#DB*RNl$4xk-ud$(a5CDL`S)Ao$HP-2$F{>|4Ur2)r-Q|EQB^X3?FSiX9w zoAII9mgAA)jReI%_36nNIghzZlzQaXLyjUGe;6)pQI;BWBHu7;WPf>CLBT2iXc-SI zT+Plf1J|#}*>csW3`T3Wv@UIm*5+XsGQ-TqruAeF|FMT@QvRQ(BRd>J0gRuCzK{ZY z>M`0dp|Z%l{WITyLVzU=R-)Yz9SzU)t!~)_I`AoEs)1%;ny;7f-5y+td*=ic`C)3qwZWk+u2^lZzSAdLCmUyM-1UoF?Yn>e z93o}M{w%&7NGd#w6{>fp*0JOk!a^wSfxLxcWDT|CwUzc_4J~3HJ5XAKym_bZ+F05sBx#SJ3!`Y zB_LKk_F6mJ@CCo^Spy`nV5y2C6 zfC$RN$AHu0uKZ#vsk2oFnmh5baN{e!{FZ?S68H|PriZk*Yi_I(tGU1yB>Ao|0cM3= zBJ!F$JG;!?9m5qOSo;^3VJX-05?Zv$?LfZZ0fIX45fv>U_Bz?eH7mVJ$6ViR?X

0CP72AM~(=RAXffx+Zd89QyzjroyN zj(s04b4L%Y+O&MjqQaKeG#4gpl)%fA^DXrU=hpsAGC9V^UrCbIuJ8$9Czrwmcbuh# zg+IJ_MSZ>voI)0#wPUzuUk5$AKS@*8!hEa5sBo@v%DrL6)`UV~W@&}ZmHXcGx%5>1 z=*9cSxm?1BDlN|-Pzi-OSwTroCJ(to%iClrgr5{T9uy9wN7R8vJA>)3t*lye1RTI- zBd^QhNuxFDSALUH0^Bg)<%V(&8Y=9XzQx>oLHl4YccUKmWy)zP08F^XH(B%Q@VE#1 z4_>^x{I68M|6#-Mzb28shYeQ6Zu1Nx;7g6pn+qF!`}C$30hLJ=wgPST@9IWx0waJc z8lI#Otzfc;0>-{XiCb3<46tv_`V>3UeQ-$l1>u!?zSywFJpZdYw|PyfAdEATzH?9f z{UMNDa{e&1#paSH*WP8xLi=cl<5W1=fksMgt%8qTFkS`P3QSVqdGW2!j^zhprgmoj z<`UM4qyU&Z@NJzwE+2$1Y9E`lrKgoP^^I-CKJxzw1TTV~1)dzd3erS!1e8H?LiI8m z?K0R2!5uFMeTL`%cn_aDPpc%~X|?lCm;8-#ik*b%1+VC{E?+$&3nrqR5CgM!RO5o38dr z9*8DNO#^@8+>vKOxklAh`~7177u#3mSVVTRP*XhSu>y9+IJeOO%QJ|<&~gZkpNVwY zlt@$sdFvx)zt>~&)*`YT2$@drrSR%BxtPb?NJfz_)UO_nWO@bgfKyTLz@pc3cKM2l zmgxj46;P#XH+m)T9_sqP)X65I@y4bc$*pZ{q{8CJy5KwzPn`~1v7BaF*tLe>WW|>n zC;{&T1jt2i=)%%;@_f7UU^X=MDFWRT5JtJCe@kClOaQmN6?DLSUnVIj` zygR~1+57upw)4d!W|FK02>XRsmWL-BqQWPDFmQ^08KzzI+Mcdy-QrSgIJO{;hIDvt z8`vD^^g1T2Y-|FtevFQ`!aD#zAMzTLHvc3*Qpt5C8LYe6b!7su3M2a{BCt=!( zFe6oCW8)DeTBp8`{iFt6{Et6lvlh`!mqXRxQelq$G>ih+7{r!95s%2}ld;Yp49PXt z!mjQ3;@h2iOGjDpj0Ll>Jq?o*J(qXU#6IeJknPW&JA z6^tC)A@_$~;v7Z2fuSLmS;@5VVVT77PMA53el4y5#znPq`)Sktr`4A@Xff|hZy(2> z=6z9q#SMX93kzD*K8#@tyJQ`NCHOj4g;^e+J_n%$HeMySW*}y?KMn`#k@YpPpj7sS z$f_`npyg#xNN~nO_TI1D>fe7S%$qC`M{NhQ1VXVhj#t4V8%XqoSB{rz^@8*Q^W2@E zGEM@F&}Kkt8VuH2#Sy{syiXXj1cbY@DMi{{Alo~vKcB{8_J)hgg<``CLUl|cSl74r zo0>WML7O%g9CbW2BYXIlPBwi+_hoqR5p$`BxGH z{=A=F94yA^?E#hjT32`M*g{Nz=Kx_o)GtWL0|*<2xqLld-c$V9qKr}Fk8$V?%)W0t zbG)7j__hkiv^lau;{X8A0(Mw1%hgIU~3rH8zyVFRHKn9F0dBr|S+7VOHMzlpX z3baq12>-K6HC-(iEMIV5;KZ&GP*Eru(`CN4gJ7SL6XGE< zfPW50BIYabGB0>bK}FJl5-VtM2mEP>jGpcz&hc{UwyqCko0w{K-Tw9~LUl@ML#cFiGT=DS+2kZ43@ns*sgYofDfxgn= zIka#3^r3k2q12Ojcp)+=5P6A(oiKJJu&}kW5esJA?OXd`>erY6oOqp7!^wPEjQ&KNdR}yoXMOlG^%pu<*w}+lzt&`_ z&iCSkN-EN|_^!%ZeF)egImE`(MaM`8b`G?-r5>|)tqTGm&~J_6A}+G41Kj$fvln-8 zp7W-(dwiG!Uu}JT{($8dQ7+&_xTIySV510~>Fxl050n`rgU-~{)F)zj>jOeH53_&YRM;E#+&luObI_^xwL40-uP1Q<3er39L3z z=o58wUnt?{L+Q4y;*P$yW~P?M`pQ`Y11GGce}24u2$F8$_~FHDU7RJ5aV)V(s-39* zFLv7#*vx%>o8vojQ4mA-i@$$h_pr6o%wd4SNQK(&?(VRr;Pb;M?nhsDt?3zZ0`U4O z6n^WCP1Qh}>(Tin`x0c-;BjdY1@1VG*rxp-+|U9k;eJ&q-G4|WJJg>v6d%=otQ?|TF; zVazwU_n)0GGuRUevzFVGIfp}_b4N{s3Q;&ddi4hJ_>mmNH`0R0_E$MMpzr+$$e$_6ih)LfBv){4`q)h5#gPd zI@w0|9v$PRf4#w#^&ieRbVIPa|4H6xH))?(^Z;2Zz56(AT>s=+D5A)znNFv5%(OZd zUNs^^56IcKoa{voc8PZXV~jU9>s>Xnz?y@+Bfnmzefsz5eu32f2Y6|YwVp^b-;Y@+ z-X>i3p$aGzh{+>|OQoL~avzAOE#CaK6%MPweQevlj=v=dGg@sQaz4RSja#m_)H4j; z*TF>>SJww5`{CXiio*f&n6#AhUr$y=gz+2A7u#gR1(~fzKM&6S!G)bwNLl3A`&=gn z)%w4=QJLDDub2CZZ|?H9H06`7O;w1<*XK2Ka3nNx9v9zS;*-ve5OL~#sKN>Prc2>N z<0~iV%!Qb;&m&ZFm!{s6Sc70!FpPABiX01huc{^fUZC`iq+Q$gqq~pmks=Lc00i50 z|LEL=;&{g-Xs zvB8?(c@?}VGON^9$a!$&vhmuV?VB@wn}=`SbY_+E0?>^-?D$9b>JDZT3tmBSaZDJn z`=$w7uqH0zPm7WDJVb%1*{t|BdE=%og4%Rv;_4IU`5|_c0OwH`(7oE@&xK# z(SR_X0zC55)FYmK7%SMuR5=Kzv`?JC=$9v=q1wfT7eT0P0|)q99eu*`sQv8`vta#dapMBLqNk_#ssBb~%P1hB zI}_alVLry+A4>4@mMb2dyfeY7wXWO~O*uJ59GWMsZ7gu)eq8@6vNjh>)Z<`B!u8q= z2d&HEXDm5^nwp%P&LZi9v z@wp?Pk~f!4{+Qp4BD?#-5A5;%I~?2C)I?5WMsWiMtQjQIcrJPz52CC>7n%8OXKfJs zz|EVMr?0N~Z@nVDe9!pGYraGilV267f$ybQ$swx)v!1xj5iUmHrs70bx0j@x_uUyVPjpWwDy=#cl6IUX! z97_aTP5H5bdAE{H8+^IUixlxPlC^_>>x6YuE6DervGF7Svo@m~no3Vpql4?7wB02Z z+D(h717%5mu&P6>PvX{94U#%|U7=Nx&foF~BW0%FWU)s=NC;h;xgQva(?ryE z_H_13#&OVwA=wWpxLe_@iHj3RmRu)~oVrDvP*5EOPoI(6WA*QU#<{!7jGycAqW-$7 z|2Y3Ep8Z2hB2R>@9NmfVzz9||&93KY4#<4M);bkSijoTk7!+h^efhy6%px49%z4Kp z7gQVZM7}r`3jgy1xb5Lmj&q1{FFB>#k#R7vvC~?B5%0!Y4>HKmy9ykjzG*Ya8d*^{ z-pRC#l_|+3^YFUG&M%mr{@)$>96YK#JPw&y2oJ*OHdq4+bXtT!h@~7wiU8sH#@i?u*MyXF@co@I=sF;rewIC=A#Xui<1QAo=tX3d4;S}%F2$RB_h6jd^efb^WSX|6x4D=h`t znTBE#;lo+;f$x$Yb~&fM(wMDAi(bUjCWc63$4p?x&ir|9G+X(Hd*f#P8%}jyPlhQ8^^GWxTU{Qdb=QN7<7rca(f-P zB(__iZNLwycU=eg_93@fPc#!xRPc4)uiP$bIJHY|WT=t7PTrB=U>=6eX>5@egG`J? z(0JwRQDJfHtGY!qrol?mcweiYN>7Itca!ZIYxIKIq^yeP0$;Z7G1J>-Gip=nxgLx< z3)mT!z{;(koChA*r+xmNMO7uHmZ!U;DgCEDXL1~d^ebU*BLmJ}J<^;}rWH)tucYyf z>P?Tt5>5FyW}6I(Aai)!K=1aSHr1BP)eq_&Vrm@*+qWXHpKZ zgk2Pq6omowt9`XIxAyg$v!caKETClv1bAXz0Es#bWOHAFUmZ9ETF9%Fa9o(bT*de7 z*iPPa3=SU1B2j`l4Rj`)6%Zrg9@f#(CAnvt=U0u_6MNA7)O$3xwH-r|>Q9I(2gmey*t(Z#m{%VTv zz<_Uea!Uld`ZLV=?>^jrvEwqv>xhg;=>>dn@bC~qr&}5yeuSdF33{4n$~-HymD=fU z;ycqTD=-`gxpWCBx8(Ey6FsahT#(RQVXMW>yDNdKC8(u-#YL1QQjsM)=Nf)itYj8D z@oVFKXd>c^v__{P#sk0cywHGav7Vm(F*+)9fiLq+;rGYfyy(FW#g<t6MJf=i}BM{zaoo&M{CmAR&S|1Zlba|%o*4k(H1MSkmxm6kZTq)yZ#L_*}(ZE6g zz!&^UCLLz-me<5ER z9hm(Gg$GLKokwV>{#3X4)+~=RWromAsRo9H{YT%pA-f{Km+F+Bzok$R0~Ewckxavw zsy(uO9H)4(a6jJ`PrA}3O^>@SIVR-KfXHHM0V2#c;&o&8+i!;cJz6u0;)BFT5WMAYfV+mUaYzGRCV}l zfqo98h>m?9tbn^(+ z&azA_d@x;(@oN5;Qt*DYkL0tZX>NuMaX(3*sW*Mr?uY{N{84_3E6_Y3w-Y9hbJ#i; z7uS27`5$fcx%x^EAMijA`zI)qT(148WV%!ZDGyTsX>d{dffKxjEO}SzQkkUP+kxlw$?{{ma7sSa+ zXx5~Y+2F7PP%qF%Ca<6jsCJG27WE4Ouc@^!6qG4HcY=;1w!uP+>i2@&Q~jKp&(9}M zu(7h@1+7ur+HjVLZwf9@<8*etC@RTr6LJ|F#9PZN6S>gi3q8~qZUA5a^E4l61?kw> z?X-MFUt-9E*YZ9KXJ@6R5pf7Ke>Pdh+hQ?Bo)j1D(ARP;#M54{{EE-8Gp+vPDZA5BdTYM0Wjws7ZL+<@S z@-V99erxnbWcgJ0DPsp|Pzf_9e%gK``yC9N`rtzXrkOE}6Hi=^yMpi1g`+rIVP^** z{zFgr7t@rcr<4}109&hYLSxq0RKGP6W97b4E=I~nD#w*rxCq9DT`G^ZTjjWiRHn+} zj^zZV)fhip>cbXIr*F{hB6k{J6Ql=Z4*&^R?IEPj=oX5s2esFauj=W6rC%Stw@kW3 zLIPJ9W|Jv8y2JCH#tx3?n*5D(Z8&LDIvwVUh}9yN!z?uMiPfVBF!^ZH@^RPD_Z@*m zLmI`IBpL6Tkr7VL0%!xFm0*ukHWOm9!%EGb{fwxRZ zN;DUaw>xWq_3m@^VyRaTTjuwbZ|qX8j-;ICv8gwCv-tNEaH)E{0C5bjO{#4C9FW8| zCiMQBt)++zz!pfM%os!>BI8+HOOn*!aL7SK3t?rPgOliJ3m~TEg?V}J6$O5cj{SK6 z=^-k6tXp*;6ZlVuhboZW)k_KiDQUx2;B5b^C^ifeWM;mletbe21R;ouht2OpS)cQABYnF2nD{E8kfx%H`f(8)KV8-|P^l4bQ z(8_sx&!A+(f9Fu*Kdp6!`A%aO`;R<8JTacYpUR#D>opzXBrt;OuYk<&vRf6dR^WD! z;>|%@G3B0LQd0T%FE!Q;DedEU08lnOp^}eYKKV$|v``vCse+a^yV;M@pIt@pY@l2|6 zj5T;na7PQZByWDg%niFdl#O_$Ny>6Hoq6zcNn#mz6TVJthY?4OeNMcHXC zFE0;K03$aDh*z>H#`>nF=caokz-umZ)U{T=YWSl45n=aJ?jg9{N0~SxN0k7q(|$)^ z&>33qP-81}@=mWhqSUL+{WLNgp*|(g8ldIf>JhVD4+9Xax6!y!TyA~=!~3^uZb0T> z5QKFoFqZInyNX}$%6Z39XIqG>j@$nyQnvb;ihJJbWFro!4r5ueBa@CWmt=;*5zzt9 zNq_?j=&TDf8=ZPEhj^YiNv>r6jK4wkmY?xw02%V{_jkb-?6myiu8+S6{nc@BS1sfR zE1=qC44hk0PFfD(0{yDvXv3i*J z>C>s(WQfO07irkeyKer^#`xRf4*{WLEwV%_4nPou@eL$sx4dVtz{RK@cnet$+O+Pe zIas$#rTH@qFU0!NgKw!C7-skLXGdx-&OG4 z7&-Q&Hw2K(D<-11>Q$O`ZUuewXjC&cE%y*wf$M>A6~`fJDKI9;xPXWR3p=|Yq(~j> z3%q+inhz%9NR_1QUlEQ)@t7ZCPqCX~TVrz*CZ3rhL%d(x+Jvev1mWK7E}Ahd=!6Sc z*{&2u@{8%+{gR%lh1~5gdq23vqZp`@_Z3n)nha@WcJoN@1}hdc*cI1KApd3dVS_b( zs}cc>_A3)`mLA93u#TCru+3S#kstJoG`*F+V0k%JapJxun%Ah_%)Zm-9w z2oguxx)k>?rHErM2U`9_RWWI4EDVg+e9I^Ah09x>w!^Nuvf@s4+VQx<6*FA%^?5)k zS8~JP4RMb@ zzqazl##?6}FOvJW4zso6t6V7KFsFw~iA8nS{QTa=dzCn#kq(lgrYBVnhd!zW0I5Nr z1^emld8SHBBn)Zf13OqbK`aW$l;7!|(s|+_uNQrqYs*;MI2DjBif4jfl&dK4gjTv6 z^cE>{-0gHgqzQS@8E|0>W=t-fybRd^rULgGhM%iDJ^UXY46{A`oEV>)(@e#`ubDl9 z@Ww(jAq%SlLr0ODH*dbxziwRSi-%#jt8fCIO!?HKHa3I}M@x&<@A|akFO>s6gMf}% zT$ub}z`WW%OwUYZqd4p#Q!Q8{GPSZXcY0G=`uU=NSV38#oKPGG9W`f@MO1cK*GhQHGx^-gRRkfw;O; zJGPQpTV(o}YAo4#DKNGVK7Vw7G-?^0zy?wykzfbk+gB`i_kb=kM{KZdN?>n~nN{ZG zG#*QIgpPt| z*Rkj7RFPED2}%uhC@QzY%3nnL_|^BU9}YSwVAAehCpMN3 zl9zA5=o#ngj`bViZ>OCMPE^;_J1-G@8Y}A`yOKaNd?267eX7LvFb~6COCg~@zhU_H zCC*)E#~{SBha(7`1a5MM?C9$1<0GTPU-qkOKjEhnUJa;n z8kxv;t#vGDM{$Sjj~weu|0O*+WzA8>S}t=3if@wR;9n2)SJBxoxUCYX(-XGr4g@OX z4Rxbc>-gf&k|IADazxI<)Jj=E|00FRESsWkGMfu=6rB#%I(s6+YY)gP^E~8THi)C~{mnLuq?0&*4Fo-jsarF@Eq>SV>aheX_iwce0V4>HvDQ#q3D5+u;qY=q)YY)N-nyu{0( zncQh#Xh~y2YyrkkQB0!A`hctWg^FicGIC$VQ}g2DROG==Z|OQ)Y|fsj8ud|8kU1hQ zE+}JEe~ZKFnluQ2Xduv};FrTIsJuA(;Nmf|;A&!iZZrQD*A>FW($l=Je42Ij&t(IkG z+R4i+^p1%Sju6|F)5UZ46crU=LX%;iKH&^<4q~jLhpix2u-TD2y?i)Go-AANz7}sO zq;!mRX+9<( zs+T=I&nWi(n}4-Dfe_z z{7cVKd4eeK&{tFZGi3BnWOJnNy%>q3Km6aUop3ykhP*d#?wT<=vBZ6MOSBZK57EYqj_{o@1daI z-~F!6`ex6|w#1^$UbTprYNXnOJKXTmk&z-!rDh_wJO0nUKYtTf{|s0g-3sKO0*FFB z9@?%m%dJB_SF(pJeaD0wbJ+ck9p8m6e@UZNh_-OD+<8m1ABRPX8nS%_#l`Qo zjHYXdQGAdU?y&D!Crxb(PPq2mh%ypp{*NqtDC)L-3KW91sp*z6j!lO%%nM6PQ4Pa) zn#W`vw>31&5deb)e6cRzCGboL$h7?VBTyv0@<2uS(zDfbhS@r; zZi%)c>7P;cgT`#-;?j1=>_w;jEGdy+OiZjF_h)EWnCGxKZ)~Rffln(w(#P@{`==E( zfEjWxK}h%WT>glc%LrzMTsL=M&=KI@v>wL;LH8t-Zk-L2FQ{n#D;)gXE7j-;{3kyK z@MH-57_a$-^=45K{;kAaQ(BY_XYj~Eu>}ohrWSMeJA58PFElEq-R*+pQ-L?c)VQIz z^QPf@kJfAY#}a zy}Yjlx+l2d3FGYhwjzFxGxH%5RKF1|LXH4vz!Gu!;O3l(SL%gQyNLtZ+GUUGezsmP zZ#{9n@|l-Qn^G`ikOzIN>e9)0nT^>9{FGP^k?f>WT|aEx-dHA&>U&t~sW_30JwrOXba zY>5llYg^l9oPMfQto2-tcT2GDQFxoc?*Mq7k%eVWo>u5``!zpcS;bHN{xBgUMu_z< zm2W!1RfqImCFFMsPyxc}@$P-yw{K@;Wo23D_Nk3eCR+-1Dye*#KkC=h{|3o&h59-1 zEnF7_7+>@_-pUPAKtZ;$x=T>SA21c>MK3P?Cs|{`~qVN7rVkyFsdpOJ*c}FK= zl=0cj^(dF)fj_s!gPj<3y?;#x^M!rg({ELNYqjMxpHT1L9X)8V;2y6f9%glQ(!nWp zBFFJycxh}xDVRCt2!aN~et($!@?=3vDW5c0@dKO7Qv^q1)1TZ8(&jlyRxpPBp({PY z_@cbLZ{q$A*O~FvmJ&L-W7xo`s&aEgorI-Px;)u^iAW&7Z?}3R4e>283;g5euVl0S z@xRJXW4$fgdgi}M9lYGmL9^SVh1)T<0_1pP8{GOP+kTF7LmWAdpPuPt@4v!Px^~INEkt~RIrT(hN^kenJCWZS zoKZ)KzWFO3gP;}Bm>f}i2nq^{vY|gIYP&(Zv(i5kAEwGPbc3*w`o(>Vv%~Z8P3^ zdW6sL*Y_L)oZ_h0IykVC4acpSs;M7L1O8aDIOJYiSk6qdD zjiMf-)37Tg9t| zY3cm}1<%imZ3ydh{SZ}<8pT{~=2R5b{-T|mdu%H8bZ&LHe~quVdh}=hvGi&IzhTIt~AisW*Yga$Ud2n-!uYDWW7KA|x40qJgL=8B@tT&*M`` zr9u)yNQ$r#GJ6R{2qB@@JWFPohu?bI`+WcZ^Esb$cDwRE@BQ5Obzj$7>snXZms{z2 zy;KiT4x~S7rnIy*GjZDDPP-|Mn?|M8p6~FyWYlWb;^MZAkd2C+W|yOe*T~$W%;-ne zFiNj1O(mx|t;n^9FeJ=N&(sXIXc;-|v+-|*eji?oI{D5-yeN0xkDXh8P1dYny69oK zl{up}V@FD1d4COykY0^jN|x!2t3uZ6&T6+G$0oaS45FHu8g)k}*{@8~wL4Wdxg9DT z)9H}Vl$jZA^Z1^p+S*;mw$a72#?7I`4LZ%+)ezgh6f&X?I)J(+oz^vzdKkKB<%Pmp=&eZ zG2ob07BNzAI8C6^Eym?C-HU$4_=s0kgEZM~4|3a<^SCh3cw>Bit!}2P92`reR`5uL&cTb%RU1+U8@vMy|t$tzH{&s>Bk>kpF+>P@Y zc1Zekgd0)tF5#C9bA;!|->rUaG+bA#K95d$$|kZ?hJLpy&g@NtQ4f`+*7&#gBc)NR zw^{6QGi8I5uV(gUWc|4(b@vh5>{#Xn57{ndBYg>^@7H^qgbHk=b!*q@vBv+hKb|@x z5ovkB?()-D=_^u2C!O?ECRYnZiBg8#WJf2>J`Gk7rGvD#I8sUMIlVHwk4t#uyK(+h zjS{u|Tvt{0O{!+FJKjVqPD8V1T*_lHI`I2@okM6$$^Vql-dnWrPkXpjYimLM&}fqJ z%jMRH<<=;@>8p*EJMKmV_pWE|{5(0QVU_PT6TLvB+)XmkyWK)z$S#|ja&k-AM~RwQ zUQwAMmJ3>Grv`^dmQ-G99PnsxEHqt7Ot|mWtBzCZ!4GQE#iOGiK3G>a zE-XkLbRJKb%$bp(jJ$Md7#+6HsmVQ5U^+iI*-QM>f4A+1!~ERfl-(VvD5v3z4OjI1 z+dd_ZP*SLo_5C?{qv!SeRokh0^kebax;(8O_LARhbKO(uu1PaKli-snypta6Hs3aE zX=e2_e1K9X#?`{rUMo5?zZ_B7rmK|KM4=!+dO7-Me;3ksTHK@h7@#k`Fn#3&seztzfFj}KK*;; z=+a2IGI7ah__38%RNY)h@1T|1eJd@ZJ^Y_~o0lP41MXLhg7TcGtq&NSWKyW5^;X)g zhA%C*TK~vxaVa#J&uY!Inp_%nrLS?VTu5+fR|?&JYS7V1EkBuW)HEtGSs=UGG|Bcy zTD!g0sL`k?)swG%ip{|YAf6mU$G*2VagNsEZU6#lXqphFKQJgJ6LZ8u!~Rr+)Pp=@EEi%ve=9_udm z-RW}{FS*PYn0F>~d3ORp*9CR8>@Mst(1mflVv< zC|_^e*Vc+4why)kLr1)JjurQ#(Tg15{!^uR;IjOhJA2M%4d$_3vkj-L)$1M5U{qQ@ zzKW=sZ&~EDRQu#1)$O?2W??dKXmVi*$*A4Th%SI@%pKJyo>eJQ_WJ9`Wl0AcUJq+e zJ~NsXx||uj;88iQTR_Z<&LlM+T`yW-=HeQcV^z}L6WuO&NvO<5kLufLvAc0J?Fn9q ze&e%li=a;G*LF6wkG>{P4fy> zLWzg%ON=rpgqyC6S^Lxm71ua|dSfCpg{Ivpr+r4powITHN<@v3ZU~Xk$hx;pd{gAc z@jJE$XXz#<(VX4?L{-^(dC_Hle#1k>eaQdMzO8<^-;&d+WPskn#ohg0f@zzuQ$(j? zVc$ehrLt;`i10VnkE8tni2nRJB9s~v&TWM$IPrtTf%^}X@@3<^<)cNz6w(JNgP6|t zZ_}Pl;P>2CSNT?fUvO*IZKN1NP|Hr;+aAJOtMWY;vez8->&DjK+|sXKCEq&!Qr8R( z;KkNxOI5y*bC`FU*8ES1+T@hBC&uBnnWkRiH(=c`=k5p9RE~P_YM{cyjs(?g9Id&K zPe<3j3p~wD*?O?0LNiY)?32^pqyu0cn|Yh3%j5Fy>FLQ%wwsydA2tSd_-x_a zb82u(yNybP-}!@pI-!wC;JSTfO>2hxHa)Y_~l+bm)+6q11N_ORC zO!vO|`FV`5j{-8Fh>?L7RJ9|a;s{_u)JuJQc-axFiLVO z`Y8S7=E?MVq9H=+r8>WaUkUOhMo#JDR)g@AE5wIBJWWp}cZjjvO4Yg`gLamQa9vpm4E&MVXJatFE_FGx#%X z&AvHAl$W20l=XO&ke~qd#Dt5GCim5L@4w49YjUyBg=O!jg=qK=U$@r|adP_}HKp*c+NRa~^X>Q*2ms2v@9E?v5Whgfsxc-C{;9CyFRA%_kh zJBASw@YfZQl$0OtxtEk=VO|+a)|-KDLqC*SvTHZJ0>caVqPx2rq7X<#WmRG{1<)+H zlY^sg{?E`8KfkR6gLhMNtAT@sZ^d|ONZ_Zcl-DL&{R_+Ix5Q)cO-5>wK@O%dDrrcb z{ES8tQE8Fl={}a+WKkJWuh;}Av23j0t0rAOsiE#3#(2ubhI@laoxtCn_DMBxo$9^W zk7x=ouk35?!njfw`J~I_RQc1~?=8Zexr%x#udoukcf%M%SX}n}o-G~a-RpxR1r5S@ zP!3YwPR@?sxP0Yu?y<9yMWFznK#m@hmYle|WkfiNhGxBK>#GX5%t7RbHm_8S==syL z?v%|K&EmSeeM}j-cY?>qZPYXh7ANTBqqkuD-Avp0%NMP%GB=lN_X*U)hyWI!R|(y# z2IxP=pqfYCYogVjLeGSG>64TGFdPSajPVP(KBg9Eutf8rk+CuBZKImV@vN1R_Hpy^ z1DS>a=Z#J~Xtx1oO4cu|{`83(*0BH#L=iigU8j~_gMmm+#kap5(i zYXE@ZE4`HT)Pf?+ZURpBC*ug(V+RTQFl9-qZg5n=vMdPYRE4`mMJL$HVp9tJA$gpg zl>mK~r|8E=TTGc&UQ_k)*;9ug#%nnTw8c#>ZCMDIcO zsahpGw3rHvf`L8Z?#H+e%oc=JjrD#}&v)jdIL!rjh~?`1RK7d6qi`)j;a51@AQT!I zdCSg>?zT3k$EWX8VqvjN^y_^}uN#M{<_?k(3}KABAMrm8P@mYY-oC1EILX7Q(vD+ONHsxH6Y?~sr+EUR+%PQc^rcoND3JDIRLvhX|o|S zRtvArPJ@f_&vz(W%h9YqHE8Z7_36C@^+l`?JZI{~l zkF28U8dhUIrG*4(@6cv-neDx#X(i&yh|lv?IoCe{#!$l%@|XBZm;C-?>7Be7F4>f>=TTqF67gB@G8EwuUwF3 z?Wyh$ZtS0=yl=HU7|?%WcfNyDaAziWw02+r9k#dq3nTfI-r(@3|1Ca_^x{ry?MELc zE8IuLoN~J*26C5+KeWxY*0`=+W7z>3BL69CgAF?&bh!)EQlxRB23c5RL<_jdLB zZ6-p8s71n0LNa@&7Af_ue{$;eGyGjwELiW)MAQ#$`+JegZ+wa@h!C$%_*yvl;fjZ& zy-by_KgB+9q(+<^Atpb0$Z*k9|rrXD?IK(1`!|-;cSsrECAFfOD4wL#)Z&?pK8AF5Ge0duv|t zN%(o;s*Sm@=(!?wAkc!!&JheL0Z(8#nnv2oU5N_zvZ722=2HRJg8p0PhjMiIS+9pA zhs?|da;pcLSV^k`3x}Y~iQdB!>(;KmI4Bn7Ie!4*a`cU|U$+|n_GZoY)Adxr@?y@Tdblm?vxV(Fe6N~g=mB6GVLH;1x?rqzYRaMcS1)&D8R9jC=KQwJ{ z1xQRT^QCn zLA2ia3X#Ev7@V@w+89tT_ecT`N0#^*)4HA@wQUU_;W`6)`-%G2!di$nIYaiSH6Brl-ZBX~w$(*hePZ z@acik5#%^p6o|%Pz;lh&qO^<`iV@cPXD~kq!2%LQldyHUckW(HCBD>uJ_V}_pU>Bk zfd)lK?`2@D1a}X6uG62ozUtWCx?ikIhHTWBB+Hif=kP2E%g@ zt9W>`7yiLs*Xa87yUOB~kXV5d$9-#q7AO#is8NB$rW~n-EMSL_Zt?Hr!Uj{!8+Ubn+vH8RdPbn4Fp`pxGgBH;pGiI|(cSOtH zW?F=U2Oy`0CnRt`+XS86eFIq0U)9%M%MS61Ya*HEVn^cnkT~x}wuoSlU5R-uiW*1I zXVYLB1e;0RnD__cdh|!&z~d&nkPdgf(E=6AG?FO^md(Jya62^(ecF(gL4dPyc4>-{ z-r4Y|3aoRYFrnrWG9Jt#=t63Tkt8r`G?wLr!va1SS6V^>MsR^An-$|kMuc&8iuaW? zb#!ieE^lqLg8e*0YF@h64JqzG;tcbt6O9f?(PB+fVUj1z+*SAXocTW~>Dk#2yCf8@ zA9l>lYL;u_-Ri&X@#m(NmLBY%nulZ^B#l*abEywWS({JnX zDsfw%JBO}-t+8=&&27!MtO)Ric`VsT619;Lew{QPE%VO7aEyR z^9MmWi!yXy|)nboMhBzF`N>237(GUNuVE;D%iwI`Z#tpt-82*VkOfw6u0DYb<8Bb}Y^j zlc-K2;HBADilmLA-D=aJP_ZrR_-P6NJ2g-?+r7WVdZRF6(6fqw)PP4f9U}bC+4j8xxBBec_ zbV~pv_c<-`b#!ISjfF$VdZJM2Q5GF2p)q6-V7PG`|w6ktKI0jbKJSd$2r9iD|djG@rH4%r%xD*|r3@-FHJ z3`ztGzSUP@6{gl<%L9D7Z(ywxk4n4}YHByPyqoFAFy!i0o^Gdg)56TRZ^B_UN}aDT z6;cvI%aOecP`ik+v4_Y0NJ}uJ8b7&HbOMyHpG9E#P00n(Z{<5M&;%Zt?7@u9Elprr zFC7Z1RrkG~^Cf4p-^Ln_5A=+TID)lezREn6SL~gUFo%|0O67o#G88HT{a^ zLVYF%HSf7nZ!I71f1I>oWr0Fl7@9U4mwrKn*y?-K=gtSg2b6^J9|3m~ByMuamezT4 zd7jZ2>mTuAh$O{!o=f5FV~98$a(b{E5 z_0^4G;0PllwB98sbTG*bIt)xqv0=BG)p6R`+IC1G*f2VQzoeuDX*zENke6WDE9vn zzi|(~EmH@k%9f17ikDhh{2A=8uMSc;-ktSWBe+s>rR)0L#I-4-rS&2f1x@A?*Ho2` zn!n#&yfU1a1#Wqg_vd^450FRDgVTz14^^)G??sk@t!)%i~WTN+9!Mx`G6`f}na0T$FN zjx0{3i>JN)hiwnln3;UI0o@pjmG<;7`*nXa&CuIbRA$5eb>xfKhT)hbXzkboxy4A=jQicU4Z@7vYfdy$(Oq?e%78i^OGyTX}3WJ zK$XXzS-i7{th`4@4<9|MRFLBDTcx6|(Ti&JxY5lB=yZ#URu4N;59Y1a3*or}MJ39Y zq-*BXTegJlvuk*3S)0}^KBpSmQ+$(Wp0~=3w0e9u%`j#wb&~Y|FN$gLZH-WUUVx@E`CdxdTn4JVsA2ueif&yLENpf#GAC8LdOUpWV!>|grYclVmq z3x=M35vDVxsYTshEUB+blRCF-Ej$}DtY)E2upbq4R8`*4C40;6gjTEy#iE{b$bII$ zfk6|)_$&S-&9*?~q8FIgN7eLa93P|Ys2^MKFyeWl!R(F91L)M*#D>?+|3DHyILdZ> zw;Fm|Y%!Y`t`q3kpl8^8SWHY|&z6s)laz03PS%S}%(463h%x2I4P>0~s7_avkYLAT zbYxqzzp8il_4l8NyZALS+z|N;V8NM@*6!wXsDiirRgs-95O#l`57J*5Ek#n57GOLX;JHs_eJM;XG$bf*YfPK*WfV1|j{3h?!BDc5}ycqDPMQ8W+{ zd(kKq8$kbm^TY1{N*T9$mvXw;^{KBah-)on>RE5U=vOH;C$Rp*kvT_PF~xg(v+w7* zN(pnVmiC77Q%5{SckkcsX%i_$6)gB^deK7r)knRCo}-tx{_x+tTzSz~^Y|%;jy8rC zjx1xUS_0c5W<`y^D&-Updy!cs#KXlT?V{Rtb&Q*JqwujK-fi{Q5oiFrgIHcitPwhT z76Vmu0v&>5;O|DAf_H(%u$eN@!`LfeiipuIp7@FsyW#yg21^q*bQ&d6%&ZyU}UoU36 zKqKj+;~~qLqZ5fKj)`y6^YS1R?E#F4s|OjMU4Q?3!SJBo?E;m*GMUbFNH9RdT^S<7*{rf8KIk&S*3O%(bi#Gh(#PE(**=X&e zP*m((S;hu8jX>LaE(iV1(HF=%z>s%6-a{XdaV{f0vTxO-cUCdN)s$NRWkZaas|7vui zB5`QRwuuM`s0I45`MgIvk+!xyXR+OBDFu^CkUBy8xxPeL@7JwA{JF`2$~-yNooixZ zV(#57s?IzUX8!M&_EdK~Pruyi9#r_^(X&m7E$tQo^zrWE949VC$*r`vTTCqc*|1_S zUTuEpc#TpMgFpy%QQ!Z3whT+3P+W}AKiy7=4kM$P*+AYS@ta=8*R0g!(Ot(SmSoB@o7>u8Lmql7-RFkXyRe_-PS0uzg-01PcDM7+j*GA5 z{oh5VLa@`AQ;R;Zv(vQ1&cuc9&~!9BeMp&_R? zpIvP*h}NuygK;viVZ%!Q(v3qsYb0(b9H9T?@kySa_-Slg_uizLVRK2Bj_g;hoGMOn zw#C-sO(lmpoo2$6jl6VrZoGI@a&=IUZMfOmGih7n3kp@!W(Z|wZ+l4~OQR_`})luUGfJni?;r7$*>1?gcCG&t_rN9NoebUypLJwE@!r_l zb;1`rHJ)~Llswm)=raV%otd+DdFAAbu06e`rWN)d!1`%OVJ&~*%ZF;Fn$ia|L*D`%!3bB>`K@9I&bie+iFO${R!|bkkGxf zXXnMx^7T8P$gP+cnobz&^S(RKg8oK^Gh;m-BvbhBvObK;f3M$r<rJmGZ`a&&r}aGJIB|jm=Kgz^wJ}*{)l_=jmkeRq zcV)d_sov$`Wcm|swDrH=-?R7L?BKKi@6Yf3WOjN?;lH9ec`5xWvmT1ZZ zvTHRZQ#dBH^?wy$apXD)l65w%oZ7!4suE{pQU! z024t+p?4=rl~hC4^!t=;111T45ik%rSUBM0=nVW_NK6LI3=n?nxryx%pTlD=rrFqb zu422Qk`ibDdmfk#^}vN|@t4r@8svTJ&k?Ke=g`R62}Aw(_ydRZ@=vEXbiLQPb@S#r zY9{yvOkD`5>XVQbxS`E5s9Z|d^DwI zPVFl7WrO?}kl$7J`RCD{23!Gr(P|HYXu%EdcxT6LFmR-S+K^;eyDEO^EDhr#qH}b4 zWHj4;kV&r4Biwt=1$Yr`IqvdWg;FbMBn3U%-Zc1})6f|8|KGVA$9_}SFf_h-PgRam z74v{`wsmDj|G@ThWSs`#h{(#oRv(4CiZLf3UJX5KV{d;imXDs%ABf*6P|`+D56a^Y zK#yyjrTwP<0D(!%NVUY+Hisp#ASbzHZ~xp;yT3Vof26F7yckQ7m;gLl#x-9W3n-#= zx4-!u$vKJ8^-XSt$&f`j_(cFiq*Ng2>|r@Me6dyfdyWHDAc!cK(xPeh?ezc%7#RHh zUc7kW-2En_EAJBX=Y?*bCm!2I@`;*lrDxl={g?90#xJ}w9ruj#KX@fsSW={db9u}S z5DWyj7|Z^OkG59xiMcp+@FMKv-Zh5447-lJ5jo_cunpKk29PG-N-Q53;9FW+`+Iog zuEnKe@n}xSw&}hfGSt)7>LwPhVmrs~Q?Sm<%WLY-AB+NdM_f)+R#p}k5h;dwy3?qq zx8YUz*PrKyg7?fJ{Q`RXXXVL2Vrjh}e(naU3O9a|WlOaP2UN)9d+NoDmuOa?lu`br zhEY*HwCeU63_+5JhKYFf<9FzG2*HvLeXQ%eRx6g3l5e_ju_0ylkCkW1r%&sMU<(Ym z6IR)FTbbva7*j6}2kF(afrioxYBc5oP#Hj!@#_5S92`uv-mJSg`ii|DlYrD%c;Vu? zTepl*s>3WC=Cvt>QI%Jck!F^5b#dKpr0s)P1Pu(+)6>Rm8@x`Q{B+}RaBw6%I&5b{4AbD_)zCz}*&U{?YZ>rf>Y_jxRN zJn{EM)qGxf%f|t~k81(@4~&lXL#u+StTtryhLsbP-LOr=5|96B)SqNr8DspLnh1aV zHYSYG$t3NH6I62Yl=e&Ga@x1Q_AmLCF(z8X7>dkix=!09sfJy^Z6KjHxqU7)O>&_Q@X+A1eW|O~?SC80<5bV4-XN#tXpMnuM zq})v71$6n2bI_*@_cz);_^qg zooU&%#@Do1QjMp)EK_?V7#d8squ*YbRXY8jlzBmqFKvdQtqPwhjR%f4kLU51%ovaq z>Z^obY$15UUw<}qIG6YoT38<2|4{JncPiL?>VoXcVBT*g$DoSZV9TM; z3cmz`_9FHScn=&6G>H?098q*_EGf8i0S02R>imbr#Y?|@`Es<{iYjhqW(ICqSWN88 z@83CD9N!?BM5PZ5JIA({zteg)DOvUJp;^p!pUq(1>$wJ^127HOot#1-!h*k>L=)*+ z?(r>&0pcw%)!&DXh*dfD31duZI1KAkv$JPQPZElSR({>@b8{({ z`guQpSkmnxhsw=P9l*s(x(>l8Ml0z@mR?`pcVjWIEuP)B9J_aqW3nu*_u3TgKI*Nj zEPq_#GB^=YUE)e99Ul(}d8PC3gMM&V6NGRjK0%$|+|vA&$u67;A}6E#%h<+xQBfg# z8c}*Lt)%;gp_sjn<;=7IpRcB|y+j!Nw%J>?l*ahRA@p2HbMS822!#o3HvmN7SFH3H zhkz%=?_tC|$$`Tj1cEryM2GK5au$XvfI-3g#QuZ$QEuh8DA1Z=$A!0P*@SMi-i~!5 z^j;9y8iwI?%13{r6I4g;)@lg`@~{e8gutN9x))f^_)89Ff_Ot~){QV|A|RhaV8CV0 z$1Hz=nZD%sh37k_6O)H9k9*bYTD}6yZ?N@dN2d~+p!RIx-UZ1wZEo@n*87c=K7RzV z2fZT1IH9_{X)Pe5u=^HN*86u794kOh1RJ`x7SYE9nhj#q<~}$#^9Sh-6x-#Ry$0Kz z#DY%EQyKuFK!bqp7pAx3L?(u*O;^s>i`6>pF0(=JtX{||-9{6!UGEa)1z2YMJkS9v zrh>>5aQYKlj&h@ex&|Df-4?zP77om`-jasG^gna`EVQxmDF@$ZFK1*N0Xq~L7J2LX zbzqS18i#P0C78KbX$`_+onE$B&~5O-;sarvj&t+G?*aKs6A11x(0?rUk~E}h4@v@_0vc-L-)4smvVA6_FC4YdpiwdL8+KB zgg~rpoN+ivP+%MiA$$ID1EKR6kVUO~34F|La=;kT`pA`;&o9RF7azL2qL71HFFtiUDGns=Kx`Y~wRRE}m8Bb?zj1p$LnN#KK z-Jx^=rUt?*M(2>|;ln4eE9&)Hza?q%SpznF^mz@gz?OWM$4~){PQrC-q&*J^8nHLY z^6g^3+{zO`HssytHgkxo9S#i)$@pH6KMgd`)%8BePC)b>nBuzMvoH#8=VCnfrAzh4 zIX$@W<2M_P{7y0YbES@>q6 zM|8<;Mw8IfrL^*P1QFkw*)cdNo3794wH8M zbImofCoV7}k0WZpdi&fvNz!M{&35E7qfIk2D-)CtNo2iCD5m7iG`0M^>FoR>@k&Zv zVT;k~Mk$h+!o^;pO-^h1EGSi_^BbHB=O01*{Qdh)Cxwg$ za7hzBcDU&4ZviEx2VmfEV>(a&-btK;>TGbBY-fb_N)da;)|QD(TSnaH_A8YsVQX_U zMW>`hMMUiW^=B8UB^9j~Wk&j%sfF5Pyr+B{nc%>5I{0%LC-HYKdF8p*8xE29=x*=z zccb?}IMGw(N_354UcUIlPta@Zp;2DC3obY?OKmV@oZ?@qvs%x#gob&OS4%pLTdJ z93q(2-pT8R<}lI*aoN9eP@@^FIr!-uA6Ghm`kp1(+2sQL*f=A^_9tz5O0V~oBR$1; zd?Lfz4fgeSYhDNpf9r!PEiM-|u}i#oMwq_RlRP)g6m+xBg7PtQ7tP0cear3x&lpiXEHp5lq)L8hP=bl>2`S7p^y;lkrQ zfd;Ook19$xV7~?gxT#lcXW)=NjeGyxxypNYPv{ZEl0(V_VmO`_DF9daa8F(D!Io@K zuL5_Dda-;@VNy%W@))*g2zrCa%5C>%8Dkg;we+LboR5;rhdr(iVkjM!A9+E z9uUY~&^)lkw{&*w>&}XyA$D2Yd)5+PdwRHo4Y6Nu+=?|iZEuh3bSL`5iSXf{=C_Aq z)cK)Fe&0<0qpRCLr6czcuj)$_RBl0>U@C4{T1JBDfn*VCA9B%eDm@DwG*OPK3BP@d zb;IW_TBsg(OF2Co8tE(jV}^cL%x;5iADDJPulWga&>Gv0cb!625#MNrbQr1Rz^`8u zBmR^9M0H)xv4-EvOAAl}*>!wOY|1cuUpgU@G(c><}7EXe%qFT^8>_9|@gs zNlD5W?wz{Y+D?r(5AmNbkB6=hh4VrDstTT4bas>hA$bgq&Bu;CucNnZ{GT*{LUFkm z|6v9SXnC%!aq3!e7Y_w~<&AGJ)0S1?WBufy3r6TbQcx2dpdT>o-hjb!krWPV8r(F}CW-k`ne~w(IJJvpxD5 z0xtz(ZQo-@F!`xjeaA48o6inZ^wM^Bs~%SI!WXlRzHM<7#kTg{K+_CGX!c>RO2n)4 z{qxU{;JvdV`2KY0hNEJV*KQbE2*- zEj>5)ER2>vkmco?c=a$%0Yy|0pxd;oR3tksw8glmdk5>|G>PCdPELLpsFRv4FYsfRS-b1dhY|m4 zd|&(`r0`02z%dEx3_XuO8W1NSG6)YkZ<53Sem=@THH%lvlt*2b*sua1bx)_T)y z?y7MS1@S1u#;p4E**|O0Z-Oca{|1#3* z=8P$VE|`48#q(4J+p>{7u7XdsmlStJT@~)n&2yO@*b6V48^*>@3*1Q^Np$mvxmtfeFgk~o z>)qNiEv#~Qe-`~6=Z)@_e22%$$pX#hJIvlPW!~7faRUsf;InL$GJA_N92VQeMBuej ziIKVJP%in%ClMllD6ID0IgsXeDyb=xnoaQbTR#juM zfod)m|HJhAF9)c{QDm$0t5{ii+R|%Hr@Ixa9_LPD4T=4dOnR$su!b8%nSC?g_zp0(iT}~ z;rrbZP{1Qs+wH?p%JHPuTx_tqS5qhm#w2ATDw3pd`@_*vs-yY*#FDh@>_fn&j=x(V z^@t{}-3GRYdAuk<+JeJz=_tM>jn3oMD^NSWxK(d?MDK{8j@BjbAB{f-hAZ73FA`|C znV4WgZcNWuSPYMIO8?^TNh{0C^sB_gy?pKYs}$iHMD4NFy(e#wvT5YcP~(e;P{W!? z3i54;0r$hBrH^Ym@RU6|ijve{rx3TRmG67c{Se>oB>HIp$AFdIk|QQu;dRD<<Q#2`+0^Xf0uQ%M_lu!kSx3K?>WC}@b3;M&J4=Ww@<+s`rw2~BhPpY820Y|_ z5gK9mR;^>KvxGZvH{idzPvak$EICqZh6+* zJ~8*Z>PEAl3f^ULisKeT=h5^Z?Iz;CFAHxFJ6cj`E%Dnzj&1i&1J_$&a6Z?`+D?e5 zsHjdNi_Oh*8{lMpgNMhyO6hvj@Ll|Pa$Y#vw!r>FNt02x3!&^!n>M+(Cb}-vY;!q4 zF_uvUHUyb5R!~Wa24*exlEZ)Og`ZsBUpD7oZ8y}1X~Gg1y8xGz+old=3Pg?+rCpD` z)cx_!+E3kt4TqfP*FR>BO-=8k!sp&c(?u*bdE*#op1E1TYY6KHjBu?UQ#QSF?kjBh~xNLHEo-0O*djhTMfWk2yT!L^G2LOE8^N@&&9)- zsI4GJB~J&5ET_7>FIV;)6UIIFLfdJsmTO6`tWg_ucZ4<-{Fen(^xohs*TgbCu`J z)y4B8Negexm#V9KwqqXeABGgw)iXTYr9@r6Z#`O0Hv+RAl{tJ8FKv5JqN z2EB3x+CXGfxXuBZPRvV=E8JD*Z;)K>;_@4U-RPN5-C~hD_flm;iYG+;hM4@zU_^sV z4Lbmu7JPY>@i=qS#oHPk5PJXlhnZq=3e?3|pRs|l#s(mh=mQ8ooE~s`T^Zqskv*@~ z`O!#Jep7anxM{{Nw1@$CjaM&T#T6d&kgC&Y2=7CY`M%e0ab2^GV)oig>Usz>YJN$dgmL49K`vzzYgCQ-1y^1{-X_LHqe`sTqIQ< z{)I=MWo0x}OpOq=({q_hYShfCFBCUG@M&f9<6K{i@%SUw{s3J zyw^(V$~_ca6@Xz$KkgfJG%+k6AIh+h3;D5-qR98%v^qaOU-|9Dy-X$+>*4&P8GOpd z(AzZQtmz~LW;RGL(Vqq6#hU#AZd`UMPsI6cK8npv=7-q*%jDu1pOPg=KCzL$M9rB? zC~k+K^qk!_>U8k>LcMwzPsLl$)$K=V;W9KeD0m|hb8qK{LD{r_Vr{3{U$UpMXeJ!o3f`Xp)eFJv`IbTQ4ok&l&Zk?N- zN;(~~I%Ta*$V&2BJMw?jh}nYCZCkbmq@-ZrcWUY#16Dvq%64WvmQ-`*NXv4ZJ!zZ`yeyNJAJ;K>&VmGBjtB8N9Ptc8HU;#UIh##DJdyT-)-hm z4K~?;wSC~F1r-f=?y~JhcfB&ne)b6wj7+Q-J45gUzPT8m;?X9@otT*TSE+mIqq{JcsY#@$2=D$tO}RJYmKM0)}1yIoYC19VulN0f_ zromVYEiAp={&Ker2m_LXhKDwOH-DzhO+PQq5ZZ_--gHvHUA#xgxO# z-3`F=YjGdLf(Jhxf`6UHw|RNt&e8F zuMt|1!I0{Tiw96LqmCkpa&{Tl=hhO+PEJ`@HmmUmWn&FsLfc0sYD}B3s6GnUEA24N z@+Pu0%p*fcy8VNzF-;)lCpH&^A(-0NR{Vj`y@M|bOb?q99pry82~bu51#}wGy-3a@ z3aR|JLl_>3fR|8Bw6?a+x+e)iQu57M48Z{-PfWrfB1OoDI>~GvhSOL)HgCiqEn`1x$xSJRy|7^Q{hKPuWm(nhEbO(UelB@Pt z0EL{<-rgSNrnT-4Ql~;!W`lV5w_mU<(_$5{Jv;6qJX3A?tws(ARi~c7dnQZfbjR6+6RGRw3>0H$AzTJt2bh0U9yu&r?wn4 zbK+ALr{d&3rwQQv`6v|US?w+}fQS}>*2;=VaVmrzA5^nAnJ_`b_?+_o$yL%G^Uq25 zHgIiDPDcT>0@21nM=g&NjdoII+D-`u^j~flMxPF1qt`oOvIL)tzKC7ACXZN=?XQVK z^d=S9R}N z;DDmM*U7Q<#>64q$2mHF7{eTnW_G}6SW*&>mX=nA1Qa`(Y#BxKhT&B-GE8DHE|6SY zuH;{)VdNm!wSV$=OAgr`WINfXvI_5x7-gau}w70_|C4FDkWF9l-lh9*BsFo&-fonQ2>S zdA~-hK^lJ=R1JBoU%a@66dPGGLL}LmM)cY?)8%?DPewr%1Z=RkqsR+i4iNV->|CgJ zPd;Ft?}_P&dGsVVjq6kPFB_q{9VAEhjep4wY0Fu znuthY;(6%?GMEDt0D%;SaU(avct|h`6&^@j@{eLsk!a$3wYd%n0x8YO-SiDQV(zE`%xj4dpC$eYF;Bsv%%4ez3{1Sp{wesSo5)F<^KPHi>Cua0J zesx^GxHn=lgGU~R8<%Q97XpiASjyNy3G^mP$N@7x~s*E_1i-W2J23V0>0Pr0G1sOCCVd|`UH#6g$5TuRHzaA-T1X4;J)aD!qL zWg6B=)Tmnc@Zr@TL4J{~t(KJpS-e9BIwJgD1sR0wGUI)}vJ5a>%qG&2eCivl4`vcF~o^fpPC(8LH^yabrL^K#SOe0)Tub&Xrju+;li4&COSlgxns= z{rxio3cl(GoSt8B8nRwO8bf-o;C3UGFm?za2xUlxB^YkpxbaesAR;jj3D*;%)grZU zi49)|H-UBE*PVzjgQKHyad9+-?KM3;Z+6U|NR*G?eZIl;2>IEg#EKhA4TLeU<<*fg zl}XxJ=(QpXb2;cT{5j>wI<3vje&~nb2+ZOsdhHWBkg?sy){t~CJ!ie<+Eo@dHiC_O z#VEm%!8K=??Z6RqpY41A#1@6-XQ;Pm$bi=mq|1D4p?xJ17bj3+%FIPv3x3_!gLV5! z^Z~mE;TahSss2MOM0&6|?oU93Bog{${x4OqD5dU#1O~pP(ymhv>2}B#_ovT3E+l5@ z<`=Xn0*J_?1q-5WD;7YAO}mi%`50bhmva0qN)1A`gXn+Lz~BycwKZr}&*}6i8{At! zKFE9$XPvy08ui>ZH#+1vjdB1@E$W{{9nn-s$XVr&Z%7_OR$qjX;&N_PMrCDXki(+R zl${^g$6nS6RGQd?z=#~~HuhQ?9?OcZu7+5~L<86S#%myKJr<^2=u8?N4%3&oxq}Ns zLP;(Cj!X_<9fARp?Sm=##aMs5a3l@5ad0$vnS87#dd`4BDZvsz_Ciul`iosVu(i~{ zkmEs>{Meh*Jj#%N<01fdf#d}BI5~S0L_G`8mVF%l=&<;LpNx%4_JP9kb(xO5&hW)& zGAXNA??aO@miZh1k0Ufnnc={ibsR06+e{uap_K`t<{Ud-l+)zh40T?>KBas!_KoYD zhmx|;9Ze?G_|C)xvgxLwAu=3`Lc1eG%$p4+(K+glb7x|xupXL#A~!< zt^*y-H;tI4?55v9v3^e({?+Q#zCWtQjavP)v7;&VMpI^$s^`QubgfZn!%)kQ)*!NB z1)M6EV2(t}t1|C<{9Ig=M$9cE#8kjR=<4c{5(tENJM0&9EhELm7I;F|3Ka)a#%73> z8IXdhxO>jOl(^F^@lw_!444Ma-8tMlxHAQWgviJL@?|4dVa$~Ucdwh?=fJ)Y5m0LErSgpkPF0t%M@Zo{y5P zLS=|1c7GTi1J)xu-QQk>>Oovwoa7r>a_<|E7cgR7he|eL7M67f!c$Aj%SLr4*^HB=OA>m(_Y_>Fb0{2mSZNmZ3#Bz0A$M-Z~GCC4+l zf+`L1&k(&(FB-CL_$!3!`ojvxp*we0qs8~mWmfp!AmBr{@?%cLdb~hy*F{PH`&REtn8V2 zjL7C`OG2^dq)JkQ7Dab5T8e%-I@>eU36 zw}BThn!sD}rvWF2nsEv;_KA~V8W%jqn*XAHvaYx|`u1$`h8i4#Rg_UUFNFTG1Mmx; z2M8cRyL?5I_XFPk`1lxL7XS)?WdcbBr~BMl^L-Q28jZ*(3kr~O1laN4W+<#HjkZq* zt^7^}05d8Yi!KWe3`%GQ%m)O@P{3$6SJwl90Myvn0`1=7=NHw$gE9*A2?rCW zfO=vO*AKO!%lW}Mot}=`ZU8xAa8J_N1e0%Gf>%7}D6gyg;SzXE4M0A4YM^WrY-1o^ zzPSn1E*jg&ibickr-B28wR@legwN@Cs6p~+xD><i{LRE98r=xHefVn_d(sU0AaAV(K;F$oQ+B*fNy3*}%gchi&R11i zP;>V#W^Ig;RsS{^T-p4NaPkeH0!^7`Y{5oE9Yj#pMS)k@)U%+}~K%Z_gcJ_};oN^n2|FZ#`Vf7#8JU02PFi-MME07ipGIsmDn zRL5~WAPNNWvwpKK^#5nc6H)loNqGC75K3R`weQ;u&uYfX_{9bsgz1Y(%_<(;?~Au- zu0;XTV0{fsem8dmD+L-xcn7HF4sY7ZsoOR4DFf~Vy1lXesyzdOP|yk*#X5k95)V{# zM*)X_>KoASy>?b3hzB%vTld6wp-bU}-g01Pz}W`@GzbiU#O>FsQQRH{@UzxGd@B~! zWDeE}1Tkh5pQ_(@dZO?V%aOlQJ%}5DT>zj11$w~oEW29_+6)xyf=Ct6MCPy`Lqmk% zR>31jP2UBu8pSYsHLV_sf}j!Pya34Wg{()mxzS)Sm@E$&GYu+*{eHUv zP!1S-325xcLPDo$T?atx5BgDnAtjEcRukqhaP+}sDA3PsN4E{wJK!}zcm+aLaF769 zG3H=&*}XGe6$!3|veY2I2KF<6y#Sm88wVc1DK%uz=PM#C-1M+9h+Gu_qjvzdf(rL$ zPC+;zCBWeU8lRPWVr5N7I5A2c8D9a)2C+XtL(hxHn+^&Mc=&~c*27hIw~uyezK%N> z#ZKA@)&c(toMzMMgwa*u?Mb$1z+b`JLzx@pf9T=%2Gt*95LK|@{u>Vhb|3g?UsSLR zs8*C~2D}qMZjm5dtf;NUT$-l`YDGXN14IjqZ+W?_tt~rP46vwWL`87W9}MNS*84~S zuR<0LB)y=F5yZ$xN0lOJVEhw`{aMWB((7Xdcj|?I~FbjHB6fldZWSfD(5~!^Nyy4)9;9XJA z9STr_i^B8(Bt7RL1FBMx9zc01FmlDWw|WtM%Of4+&4dt-Qu<9lOgRaI77D;Tf{j+X z4OQ0FsQ~d6h^auE?oEADNqIP_zpG z;Gy@GfRVM@D45^kdo8XuY7G@7 z?cxd$911eaTy;P)pn(sdE zX4m+1;M-J9U1kcRg6&=)Efw`W;Q(YLa0Y(S+d%IGtP6M|D1uCZY59?C_W0tWCRjCq z?ZI&cYy?O*p{@rW*8zlzvVimO4p0Wy1I`v0wtMK{l^|rB#T8ueUd4AY`c*ag2y`0i zUk5xBpxh+sKvd8}tp(aTl=JlCW`V327!!xuGhht?^8us_pNot8{pdi@3#ys(hNmjk z?Z8F>L5jG9gqX)BA<8XDgEYJMU+AQ0k^lvu0k;>3Y+M9_Q-I1|0SE`wrzpMy5a^(G z0f`!U`o@0v7`H;(t!VP{liIy$K+SKioFEO$WVT zz%~K<2h{a~*7a6a9e(@3M)7spA)U8C$Ox+F!L7y8h{*|OfDxpiQ5v8@rucK~9%cMG z0<6kW8y3Cm-kcaJI}f-|AWcQZ1Yr454;J-(p~Kn5n`9K+0dW`zK)<~=cQ*S5uEv$r zzK=w;bpdyZiZM`nV_>^~XL>Cx11$5ewj01k0OmC^#ZkFTu!9Xt&gNRAQI580hi3^@ z7Id?BDNPW+(N_xx^=ZJ6XHWZ9WS)@)pS{&aF^SJ`A-n^!EgNO_s-KL5>O=I>`yzrK3D>(x$8H%!(YCcyFh|e0J{1mu>g~@ zU@4wG=tAkX16V4hyq&2E6!`)^8D#*PfXM&?Ye4Oq`mB?J^a99_0^S3JZ3uf*gabsR z0LTIRun>3&2R1_5J^N+yx=;!H`-9#4a)5+m0mdmELH-rcR{%NzU;@gUfE|XwK>>gA z_48})`BtV2*kp3Sn&N*HJOte)-vPo)&`t*RO7IqtS9ieynRx~Pjlq$AUH=IwPC!85 zzBBb05MRn5CkmqX(b3hIkIo|bCF2gDMD&~nKn1z?=l zSLcu$kbRT00B7H~UP&HQQ~dVmqRA^@7T?9s&u?pM3n-6J#!@h7%r{J8T zuyA{;=WP~9*6V%;mnrMZH!R`j=a&P=9PDePk^*E1_5|p7>9??3f&%v->>M5)l?Q(` z=JnI%2j&7i%l2icT;F8$K`vmm0Zj{7X79VNzzPG#K+5k72JelbCZQ9>X9h{9mqG{Qb{JwQDTMPXHLRxTEK}{0w)p?K1@6F*nGvD@c&mKt2 z)CfghrDR%A%+xY7$*3)!<{n-e4HM3=of~E&UZmAV2i! z<&*@!F49TTQRnE&=lnIZ3JQv#es0t_Q-Vv;zsdefn)zfIPtG3|qh1D-h#~;mnsSwH z1Hz^j&Mk}jEO7H1a-j&8#f|!)*jHJde4dPY z$z4}tR~lG#yvDx|XkqEO`-}40nFIAdu=kpQ|K9Z0pE4q+PGV> z)1o@?jj?OyK9XjATL7>8zloa8JEK8L=nlFWuSWIW{`-foMEmc~>-K6gzfyDHJn(JgrT+uyv=QbgTn3nwaq zt#|G08S9k%ewku+d@_sIJQ`(I4nCYw!B!ZMb8?iHno|M( zL)+BMc4P1QY6rTN@wVB}_$ox*xb+3?-v_TzgZ**z@fZsasBDevU1Om*zQ8bhDxj_a z5H1i3GUf%R+9{mf)7||x^6E1s8^XpS6^y)${yCswmBt3@ZYnE(7Ja)3nOyXZmTmoP zDpLM^|CkiD_C9T>Wf1`Jo+l{s)ant$=jjLL4-LrV>}J&QM%ycB@d~5P_MHX=@$t}U zBKN(G-VZ}FuWkOq+#b^uzPYBtry1>hLqm0nSv%j^by|D&Zw-HlSL6ggk2=DWmqpT4OHigLc0Xj|%Dr93@d^ z=yIsz6$UR0l4SX(-$hsu!r&o@(8U^~GGcT8?d7OZ2cH$eW_Q$gdl0?%!lt zw$R(2JFYQ$&sW6j1_Yq8;cwqvY>(6Jp2hyVT`zT1vR&W&&MD$q5g2amVo4D^fhEm8 z3JXH4YQr1Gb|=u$lAli5nx{GZ=0a`wqg<5D;iFA)anXM^A8a^UVEV0Sj2cV{u}L?g zvl>e89(6TbbrxqP+j<+m+Wxu=q2pd29AwXdvKbKAH+R8#iBE~xmCM^&xs!ZXx=MHX zP?AEaxNyLCK4-?Y&29S2tPb^q_|M@MbqlfS4XfIY)l^_0BF@q3GPYkM+SG&hyb~9r zdHkzgn6-(rRHQ1k&+LiXp4por<2e@@E-^N6yBIWnK7p|JHmn z+ht3!vyXEyz^!HaD|{;LkoYJ7B3i@c{8{(PRS1!WFFqF3o<~v7>gG zW(+^l^qTN4AA>&MKYygY{BM(92=^6-1I$ycurV)6X_%=)KfylPPkOE#D8p3U;d}{b;^M4zj2!G=r?6PI~#`? zm=|GjlfH7FHVG1<{t90fa0vhJQjFT`VC_=hLweX+RVI79V^bpZETs0k{r1X)h`ac+ zZT$FZ@5{y$#}Cr#YUQm0Nu4#H2x3bU3p?k7M)}lRTv@DN43v^$}my%7lU@3U&Se=NCGFB~UO`!Cd-=mmb@Hafm~ZvJG|0 z)aZ5#8XEbL^$X+A&X3fcK67h(td?FHYGmBwEr}jwP%PG~T3>_pqvEl)+b47r3^cYH z!-OhL?)SW7Dj1JohKEsuf(J6AH4`wy80Qo&;VxC;Z2M}&|5;ChSk%GKd5LKA{blhc z4>RMJ$?P~aW{FHHo0;QEEM!9^nDKxcbae!*(E4Y4`3k%kHVpX>>Q9tE3H9_Sjk8%& zCJH+#^{X=lMwixwZ#VGh(m3^W@#EQDkA9VVY#cJ^M)gk@^i~oA2kz#-I)8pE3~e z4bZi2POkG4`*5tD*REzEYy}Z_rB|c<()|-`H`Cdi^X`WWy*+2#3|g+$rtS|zpobGV zdwpuywM@r^B7Nnq))zQ>F59h{$nF%CD;6vt*wt&4Z24|ntJlXyTg_&C|5gD$*hj4N zAN2V_5dMF#z=8?{BP)jw)cOHq1&Dy;K@h>XNbhx-IYHEet*zHAYvuEreMV~NYFJLx z##p0vr)CvuQ?sN?^O;)ygF9VfbJWnvt>jGGt)F93@u)79Fh+oxjFj8_gip8}BM~hv zMMTuLI4Cb+q3Wpo56*rgNuKe`M}`l>xAyVgM!?TIEqYjH7bB)8lhcCgt*vj&vS6-_ z$gXHtAc}8;xzdtPUjG^GZ<#o3S(7^0i5!V7KchP(9eYXMcr`Sur;W3Me-mW{pB8yT$%P!NM2ZA(E=Ay$DzPR7x)^c{Y zg{0rb!W_uPY{`TJzeD%3j~{oy4lmSz{AA(3)cB1-7@mK|KD_bb(IWODQHS7TeB#FY zynHv!mZ0IW>2(wGr@KUi*L?P^<15f%(B5)&DKKVu-|X5OG(0q)-K#B2u}?Qh4!5Xn zc_jkJnjD5kf$zLP$s|4s+@T?FoX$60Y!y_SGOkNc4j+VYtj>7?iuaBwFaf_E@uCMm zjqogV5EIY!j`4xm2ke!wD+5IEYTaDw{E}OaMyJb&hRXY2y)wnr!gYkO7?3KJ>3L-G2dB!QxE+Ei`m zywj4ofy9J`2cP;iw>2NoeMaWnDMaP_U+fj_ZS77i#HI#JMb1yjSms^Y&?DhqwwAW+zLt$p zVWD5cf2!I=`CPhBS%>|ISnhsgxP!(Z=?b55KV#&RW&WzF%c`5AiX?ub<))sM@ZFu? z2U@(M^nQ-U$w(JD!9?-+Q>uE&Z)PjuC!bS2LwmZ7vqRu-dq#W$_45-kg6X5!b65_p z2X~9k#3SsNM1{J0x)0IgvKH=E)=Rd~L!b}YlTCN`H8xdMalgM$Sw@El-Bk-n5rume zFNLq=jfOm=h@=AhFK`%#@X-sH*!PGBjj+QIdD|feUKINTw2T;XqhAsy>RxY)S15dJ zTP~TZ5Y-NBxm@|Ch#idBwv!`_AZpfH_Su`=!Lg;LwL4RgJX=BsGIa5ouT}z^db;4n>jR^+&vqmEpyB5*At~L( zWgLD1VMFjkO$&r!u1qgaI;rv%B8op4;7UZRFh(uiHLU=K+i?}C23=Mkv*TYezhu>5dj}56*N$sA`&XL~mRjs$TV-y! zPsdPEa(~m|JoNkW_QWhTBdxtQcM^YeX>T{<>ZF9;?RZ8PeEZSrh|NO}DfyyJ$#G_A z0*nS_z^?PMO^ol~;4CR|%2$+phuGp^O-pO&DR3`*Y4lPFyX0ZTk?W_P?(@XiHLFFx zzB!q*8TPAN_UWa`m}6-3QVu(e5LG2yYHD$HM)71RV5MIAP2iu&IHdi+^<)5ju27=I zk88hGV{xx{BQrP+IXPS6-2Kny8U<7fbmSO>nbHEsFK!zSrBA&Ae+7CUHGX$q+>B6a z)?1zU@y0oBq229I>hH2C==*ZLeR>4q{?{b_$uiU5ds7tJeLc{`bwX*LSyy)p(>p;U z<5a7wGmhf^XLg3wY}v13x67n<1=0~Y`DpE6joCjDuU!EX z=|ANr2g@qyccoanKNC}m8}j^dpkHGBw0-UFjJjk_9<=p2Kb(*dW2xa|Yut$cPHH$p z@riW90|e!xs#OljNp`Zy`yC%LCV8ux%4Lm|x$FNM==+yu+-!zoBJVm zBq!xL%XuK;4wA6D7*8msi{tOTO8dN}bwM+kM18Cu<7QbKY_Ig@T>!nY2n)7c*qzy0 z;j=WjvOAayK_hyFSK&=GT8-VY>AihCg8zZhdx815N*&LHP<5#K$HLnmWLcMWkMKG= zEAJ_->WA%zuAYYlcMiSz&s%UY=FJ)C-)5@)7Rx4aiT>6=|lcWeDv7~I}C{>pC$3T+I=eY zHILM|8$Q`!mlhsKeP^Uo+Wtc2$^UcniheIM(tY&Q&bi?M82m1Ub!L@{8Rbngh%4e` zKRcWb9dsI>bkhk?Kckt}cK&ZeoIeqpQN^}O(*2yF!T_zrE$&^HdOO2NfO>I7q@?Q{ z!&jrD`-+(&I}V}4~0helLHvgLHQpZ~C_5SOFjq2j1cpN(p9G{?OnwOAeTNVd<~hRli5hYC0yFy@{~ zBuC2Epw>#uy3#nCZtRet@DcvN&3IKC6?a3Ko?+2*LlZen=x&h{Zjr}> z(f10es`X>8uPp2>@Ht6~bYgcKJ(-6;Sm?-(fi4`drM4ZWQ-?GIrl-P2t<_HL44?H% za_wB7;>VKd4q#*D2IAMIh`u6JApw}Ju)5Y73|^RFubR>?)f8+ zf`-2k5bvsUvdY=9yr8VzpNo=XPQ)xVDl|nt{zcKU|AO;TaFAMU5bZNYMOlizxGnaG zoV;!EQ^T10w0p82q2595M0s#Tj!LCP`V7ionRS<8lih(Jf?@IxRXTN2dC3$W)5^5|MhRHZZh!M)uAY9%OO_@ZAXc@~Cg>L7{gQPTtz7U7G*D z!gHT%^7FiwYP%+6g~*L}RMx=un$bHFqgjKOhSv6h$u~DlaTIA6!EL8-pF zFC17B-$R~f$L>v+-AEtUG2Y_;V z|H(Hqc=-{H|CtYF1QvG3hhp-cU__$Cm1h~dxV-S)9y=zMIJ&8;x^}amSlKJ2L)>=#g2>@v0#q zt;l*Q&jjubO#vyfV2gA-m+7`)h?s9UixcJt#p2p(KK5J{f3h?>D$|-{8#gKd7(Yj9 zEuv(b%7)6H;Q7^iu1j)9M_;WeFIw4KWXUUoDGaQ#*kq_tR%y!(X1Bk&GIY!b6K$e2nWX2IE8eE!$4g6xC^lBo;!?93lnF6* z7NEBsgY<>0nT5t*-F8Rr0mRdDw1QT$o4Mon`=#g3v@(w~Oh~$~6V-?CNkLP0=Q*t~ zd^YMuS$yv+pWg?MKNhjv0qu4^T^xYUG52ft<~nwbm?cAMHqZC)SLU@@C5@N}I7@`#T#q%7Gi1*liT^-%)%WE=R(8{Nu)Sf2yjoy0c4w zowDBdVa^sFp3AF1PpU9kmoWluRerbq2jqjFELZk8Y9Ugq0bfugcX3GYy=M+Q?5nG215Z50 zrM441ffvYnpKC6(uH_9=bL5TuR0TzZ#pf+dj=JxE1l(-V`YS2ts!2!RJ;ZR3SAnBk zC!0DHNS?m(4;3ERHAE3otzU|yp7%oLr@x;*kM9tin;mG&L~lC1VP#vqwH=u^vY)*r zZI|5;a6}%l%BzMaeo*P!+M{1Ox)As&mHMPog6NrE@>GSFjAQZcPc`*Qn1rITZB~8S zB}R*;zKcwRGt6@vGaAUaJUns|R|YomA=Tny|4Y8xbbrRdofC{g>GOLf@Jy$fhM3wj zJtfffx@7-WM6KU^G<Y;zQOpG{RIKI3k>-J9)9aP!;^h^UPfMm?l?k-(sj?^3>>>H71nwb#G6 zy2=!Js5(498@F+p_{`Bet3Nc&XCYuaa*no9@pcIYX7-7{jv4vG#Rs~%7~$dJFN+TY zEd)#rG!xO}oea_U0>>3GH4#i2jUECX0&k|2`hF|Ju8EX!qeoVD(~Sw9{Kf^jS-#%! z#gMaGI^bT@OjLU=CNXUHc;xc(@l=q|5DrJb7L+ zabS$4BMSngu}f&*?ROrscioVJX5r`98peLpMS!4s#qChwpBf@^4M?Fxk8M)BHMUE| zwsNj9AR54=%|BaKmwU9>_lUiE>O8k3CC+y4$vMy0fo!?cbPK6TXtb^7@xp8w&?II` zHIF$8eO>22HB2h-$^HhN2e7esZ|!Y$!#uj3W6JA9p~1=96TZ!@ZDrL=7#`I_!w}z+ z_8&>lJkCxIf5uyl6$=dnoIE2bx7qeIoRt9B)q9`ag|P1fx#=ZUnp1@DFPF_$s)n4Z z+RFC9z$<28l;!m``MPR_^^(ac>pdw)%cHvBKql;YEbQWsH2X5ibwYsuf-^<*c$n|Y zIF~mE1 z{&EPPc=6VfjMDkvv4^|`yHH-=zXH<2nU7tS5F+d0Ef@C;lo#FFcV30AzLix%mv^GM zSp%+#h|YOG25s#>*dun zhZ2`%$xdR>nlv{ZcN5eHZs9Z{_iP7)rPSt{LCTzKu*LNgZKLP%_?f zbgivPwKFVj0ua#X$6cHxUMO=OG+v-+dj0#`bc;Ljp~3rEFR!C2k;Rptk^2I$rtp^F z93{6I!j3V}pT}6z>mzi5RYfCqMpH&36M^+f+$TQ!`z6^VugQA2zM0KpTd4m@G_ua) zH}gu7;ChX2t@Gl*??(aeW7I2aE9H37%qJJ5c4q2Hdyw_6XE^&Ur}9e5r9cqT^~+H| zmEwCx1-aSkP}QXhC7aB}wBIMGHxb1t1IIguR$;+|M=MN`S$8G@K#k+6aLPcY<>-VucFuCcgA&?I8nM6-|L#|= z$9jS1nzx-L+xntMS8jTG$>*Eo`<6zJO>h1<;=!r%^#~4|gS`2BBloWp0rbj}@_bKj zDjJJ$^gr((^@mPw_)s{dIUrOkvH;eJL?7A0nDyLUyXlk)BcusfCiUE%e)oz6Xx6~! zr;%x%$ZQGFCrZ{IElZh7tg68>|gKBP`KPINf_6A zC*QO&s!7CZzs^hDYnHGAv`OFaD&N7li$5u&JQtJ&CThbx-NV446{xf4=4(D;3fP4k z*Sm#gH=PQT4`x~09W$g`R5n!y(MBJ)7n>Cn7AC2cw*EPy+0e{d*_(P)yT9;+uyuYo z!!CVb2vIWi7@hK*qrbfxk8Lm3{cH`TNS?eonLT;n@uKWr%*-Gr`C#ViO{Yng)D2M& zl;wx{V)A0W7qL;`GyM}vbsyRDZu2$<@S25f+eCbcY@f=lsH=@Mo;!k#9vfYd*Rqab3%bweM%u-^&%= zD98!^`dn3UMNj73Da0{ia=$&pCGB=uwBBpOxes_I(Oy4PStX(A7AQd&kPThaiK;@UrD!ImF>>lr+8rg8MBQxbs z9|2AN_wNY}xT6U#)YRt~GY0v6-NVu(zNMNNSlU~}jwi8xCBhG*0nG-|40RZpUJ73PcpVhcLZ2vqIuOUOu<00{v;| zoG|%*DS;dDUaXAy&Tn+V#W~`5dM>DV@*%1b&2IhNhf~DIZ1|*x}6pJ{ilHpbq z6H05kY$@QJNjWXFL=PmhaK-;V+q4r+8OX}jF?1w}B&7zU*5jfitU6ck$7Xqlt9QtA ze4ct>RJ)sNTFfNhHS;i>Ey}2DOSm@ku z--*$uvK`iM)_76|{C~{!adka1N-;V>r-GUXSFX|o#=eq*h|i<@)tmbEG_w{>3e^X6 zVyepe!6Swg_t(IQ1pHR7t-=dQ)NgWX#xD|dyUA-)0@rIZW@|TNBpvdhJB!k?^@di? zZsF(>BEys8eG=1Ek9 z(W{dzSCP3@Y3^aQ!H3@U zrz{CN*QXCe?;_xN)Kpm;tC!NH+e8@B8ozoDz2_{5;$Liu^Tw_cM%;CtZ@a5n?3iM9 zh)zRsrn-a$sxk1;*?QPhv(4Jw{jE0zM61(M5)RSXwQ7jokcSuE zw!9KX?o)Eixq<7WRD zSyi+_MG?H(-8uOb+#_@r$n?RGV7Vn`);43uhgPq88L_UP*Dph040!$xmwzc~7SOof zy*DtU=4^8_rkRZT{jzNNTuYzw*N}=WzqPxVq<)1Zj-;lg!7FCf?hbbo9SVMt;~>@g zhjx?J@Y?-jY!p10Q;SbJW%lsTy!9KBT8L0Ww4+OzQE#b?<#uZtgoC zNMw9}_sdkX*t41-h9Qm=uGCj7{^7xvC3L%w^14{CB|jM^G2o@uNp!bgNjlFn;u(X> z4UdYvwMfNi>&fGyo?w1ty}EC}qamCj|1?wgsgCRf?6Dd;r~DdmipnuMFZxVFLW<8Z zx)#*qFpt`7z!7BMQ$IxgHgi=N>uvX%8p#!Ca!lPi6Rh{gjmW8}t5h04+;r%#`c@YG zF6sAxYNl?y(ydNrSjJHwdro3!Y{tn6f$PPbJ)lXV&;T@(|EUrG*2u%-jr-+qT@WsZ z?~8dL0r@PP0t#;jN*=acfcD?V1nFHm4 z&0Gb!KEkC>So0>;`n&lV?F4(Z_#JGiGb3ZQhXda_q`v)l2>w)74OL; z-p4J$WE z`-<4%`;qaP{4cfB@LKj2b7^ub_(&`WKdN?Z($iQjx8dpYWfho~XxnXn_A)1o`Jy-U zw{}br%zx`Z8UrKzywNLO4cqwJ@V-9Rj`t@^BlaHCD;)HW4v-aRLF*_7*-eUwnEh+t zU|CLVIm+ozkc#pBj-`0V&Eahpht>bK#QXcB|10GgmKciVZ1W=J=6YbLY~Z?Q=YG#4In0lnjll zHHXk%FAvqi2TW&>`G8p4}7TW*cBSlUB@H0-AVCpRU z1m$@C*FP^Yv9wfQU$j$x@{Nfdpi>iwMH6pq9QMcrlpaX&?$YjJ1LmBefQc+FC$R$> zJCS78=c|H=P>-7oRY$lIF^uQsAaN-Fi(KXQkngGF`8v-3tUr3p!TDr?Svp5MUfwR9 ztaP=q3D#pcpOe>^GI91`Z-H*LFC09##KR^kk+L|L=PK2-an?YVv|0xfo}A9AL6mjK z-h#B`V3)g;xHt|T9`d;pJbGr_kWG*uuio{qpgv#b>W`=tvBN(ibrPP@FX)>h@p4s? z9ctQtZKqIt7l?RK{1|B-kGr8!SzRuha)v}_f}TnQPe)@LOuV2gyDYZlEqrAcilkgs<|PXiIfxtqIVqEmZCWjz0lOg#wTX_vI?7V zbMp@-MvZFPz@8pvL<1+8(c_cNmobR#xbe@=xg2Pn423nCyZc7a#=njd!Y4BQPb-db zI-ooKwOfC-9Cr%2N_Ox4#cH(Q-+4c?l{@t2dbwcst(~Evfu*N!u=U8=&@%eYTyq9! z95eHWA5KdPB=cPBLfVuWIl&s@4YN^QD_Z)mX=RDRw8Huu)C#F;_o*pZ%s5^zpD52! zHb2q#;@i!fKNnQMr6f9+PA40ZnNsG-T7s_9Ud%NIM5-3_^^FjXCLA+V$87fzpc&2{ z<2nB+m@<4{N?@XFw_;WMMDfxh06$6l2TZmo5*{--sS~kG?3nXBh_-6$&z{X2`>5kW zX-l^jwPr)Bl|4~recmb<@{Y;mkM&Ux53kiR+C-eKU3j6_=SUCX$-0QPO1R{t%@uS; zA);JbS*wlED|vmo;?wOMJG3yZo>TMIK5et%A!(mUYM!Zkd+6eSN4M=^mUa5(EN=+#l&y;8rX4-R1 zyU--sPVFu=WkTj-BL7qoTH}?xR<70g$Z&AK;||cNlIF>B4C$~uQU1OFnb}@p$)8|Q z&q(-|?@&C$J?_kY`jL-hD28LFWoSl~Kk1dP!$)~#%?|_CZ@bLxjy(Zay?%Lnh5U5= zB|}HN=V}Kp8Lq66@Q%i3@mNb+dWWc_)g^x$aEM$92*^%ApZ62AVRmz~pPGG*b4fs( zS77j7+cduu$y$+$;;9N{uEZ8EdTxKNHP1F3%!mN2?3k!pe05-U6AvP=PYV14p<7rW z)f3x%q&p)aEQR#JlAK)HAsFid#MAt zuq<;Md7DvM>TE1S#PNVeOx4i{SB^tcW@di{ivPm1hy>NG0Fp=ybsVOcu5P$|?~=JH zgy;+QKgYXp9<@6zE?tnD=4czP7P?%&rJm%CAF$>u)3vjQuO7IwbC5)PXU)0J1enFE zux!y%to&5|z9ezGzMoou%cLCl9VC;^TfQ%gD#t6o1F3mczy^qVgr)V~AMihsUWL3| zJ`R3+Ufjr%!1;hyN~59%f6+zZk)3!0!X3m{8yW#Y77m?OZlDe8<`%WJ>nJRIg6Z;s zbpKXdU|Z)o2Q96MXlW#&cx0B0hM&IlJEg;>7~wX8-F&cqAMz{fy&f#7qaCOpC z=6>4#ls}E9ra_)xT?P7*ML zf+Y16w8>E=fE05-LPzXt3MyzOsQTddS04JO7)$p6;^O!>K}(0%jrrle*m1wKM+YcF z5vaE3W;YEGt8|l$vY;|^<;7a4O)t%5{6Ef#nYI>Nx=Wy*l>q-$17vMTs=|!5@FziBVw3F5kDckFH-*$aY4IQUS zbbS6c^uWRm|DooG*%9>?p%^9e3Gkf4Z`nF*$`oJmpX5Wug>eH}rk0*M zMv9a8{)6n3BdRWtOof4eo;gBW3qy`6iH%NEyKGVg@%jWGZ&YMVvt{btN3O3?M6!T^ zkIa^710*Qb8`g;zG*flX{L_-*6T*qwiO)#o?x#7$F2iSmEe1)gU>M$1)h%IYM}`W5 zC+w941=+MecRE`tR41W&yYvd&HfKsPN6}P;qf27$=(svXME;1+J2?EubM4}Z!=@l7 z>A{2F@RJjKkahv-0d1!Oz=|sHD^hTUC^%ehaY|@`OzbpWzUH@iny^Vg z0G`W&hImF-iC-u2Q^5ZMCS7TZ?g=^hnt8zMYal3vJ zhYD(R`wDPW?eUyv`j)NOb3tx9ycQ^5b4^QLl=%Tu>iZXqa;7@Tnk#18+d%Jq)l;?qo=}D@#loSgJ2se0J$2Mz1|H#Zlutnt*VvyL`k^WR=0K1k$ zEK>r!4TdMVSXeOhP?6N0DorhGuO)CK&8hku^$V_om;Wyrjtl}4JKw*U^XKaq^BQ4kK%$D?W6f-2rGX z3G}lKr4aOW|0yRJu3cLz3~JKKd5A}=rS%W<|2$1DW_12MBonF7;L&Zl(@hJyY8~G$ z&8)j)=Kx8v1%;BvGyW(z<=dg2EeWN7%Wv^fXiO(dQG!8(SmPW99D&=^EwT?eGO3<= zV6g8{`*RDooBtPUyJ?*9X$AD)kXhPEqVDwcheCI6J8qTwTgmcYJPBWZk*6fc*g8}% z)A;jTdGgRjO=4&?7(fZr-eQWd|YX4+x+JX!UZlsFw zWm#&p)zl%25TCh^Plc99sF9V6_tXK+he`Iqo*n`vbGrrHzS@b`KfRY(`6EEhD-fVcvmEe-^C}|w}W_XCeUoUxsP?b4tAYQc#B>7eA z`}&R~Ehs*^*s~`5Vq*0!MUJ@(;}MS%=|J2<$>bX!_*s$$;(HYpU7k7i2QeiLz~9sN z5l$8X4Ji-`UG#1*+U(~rgOoc(p=mdgC0tJ8&>C+s;oLOHCT%nMvuR0HrC{7feSVb> ze;S$`F-A+=em#edHM>;h3l7#6Bjr&+yisS-6Rq83kgehZ({m*>gw0r9v18jnZ#Ty7 z+q^B!0E%$L{r2Z8mv0i^|A_}FTe$KQPUIFM57a2Tr`$|Yf4RQ`Hr^u0woTXM;&DBUw$ zf&-}(1tvu{v(6#)kXFcvUSSvVBdu{rQ?k01OTuW6R4_7THTx40#@Mto3iVkZ)!2}4+<3u{N5 zw=`BD(@uuaNwWp>22jhzPs-XwfG2#Axpi2g43Ht2Pcny@}gMn4gTf{-;K5C^^}13OY~ z60W_)^EJM~mV&L};VvXmWbKhnh&Eb1EJzzJ_t(^8a5#p8wF(q;qBs+x{4h1+Le?CJ zw?!cVn^8dkUI_ktD~_F8iW^9A-70jtxX_49R0nN6aeGuZ>COWLmiu^v(RC zxxk>f32-3jetNRgPKX(z=`B9Ji9saJ*cWe3L0Fahl>2T<={*cw^Wq1kt5)e~!z$Q+ z`GKrhf{ZyyW9d@M@K?iXE@9`&eg0{dtm1>~JK%x&-1n^t2)iq)q4RB3D}@ph!v*&}^L;8g1^y(=Hl>sV zObo-jIw^aY7?hCmyUsr>FNEdL2T$*Z*lB>y`XWPmM4PJP{Twxg2lV2cGs3b_~6>6^K9oEj1UN zUYZbV^E_z(-VfN@357{}`=9JYJGoM!AH%c(SuNtUC2|I(;-RUTmF+8W<0n3!{rI2$#aBYH6*^?HK+TtgB+6nh_I@qe+U) z;HDWT%Q@D@3zO`2!G@^MPQQ$EgBbLWJu~(UmEZNSBY;MqR9Jre{)q9!ik633JuWQw z)aTDk2jmyDe?ff~!}>8khU#+tS?bg2e^i0A?f(Q6H@evQ?e|IQQ#GVZwGK&iW&Y$I zWhi|1?vu+Iwo$7bZ&An))-+_bpL{Z{C^&Cj{%8sMi|8I98tZsWcIx%g!}EoZ_;9#F z&qnVUEu+HPScw?MG3l2v#+RW5HD5&Riy)lZyNLUabag^arDRPdaPtg?u9TJD!aIWa zI)p3XS}8Op(YaBH?+okyW@#?TXwOv+v$A8OwL4fNPm%3Q%NzcS%GklYZ)rFvYwAyp zv+?Z_6;7oat3n|P!s7LkZ4L62=L9`tREi?a$}P8>{(-Ej554aOBZm|rposkJ2JvpQ zy5$Q0huMID=PN6mQj^peuJK5Vl@c)|%3(^IGGOa6Yj4L7`ec3A!d@fHnL<|O=1cQzf4*72QlpnSBHf-yGuSQH0F zKo#(y#CyW|;`^D{t-?G*+DnIrM#9{oj4Ogf+&+6t50n@$QS`%g84yxQZ`7JkeUy zReP3KCi#v;e!beX$DFdBT6TR5a&u-c+LoA9+rJUe>qS>{HtXsG-F?$TZ^(3DcVhYTJ)!{bTuz%PXIbCWR+*N$gkdO$^#2xu0h8T|7R8@ zzlS1mcZ8E6jP`$AS>Qu9PyPnZHRj{VMVq~G1(_{h9$RgQJVc+?h z_)7D|ADp1T7ZT&=wBeGGS`Hct1~@f33cx}_LePEA*segEd5-P-I|-K-@Le!r_&ayJyRWXUFOV{sV0EX5 zA5JPJzVIiCn#Up%c9h`Es?JnCPtRvTZ7=%?_1mH_n&Vx}xr>)CrkdsnT`OGl7T4R$ zZ~zmJZP3>DRnOe!6UGmS=&IG!FN0#0l$f=Ywe1|?#kF^6Elvu2*7+&ZpPr~Z*X{aX z5~t-m>e@^5eBmTi!_SB=Jmv}AYqHRqre2^v1ThMHKS#}p zHv8ye+&|5L`{VZN6af>d)$lsv{V=5RpSYD$DhK+%k%S(u&@y$Ymwv46k}je#a|6Rc zs8V#fOs^d)2U~qU``I%oah2y+q2rZ)N%Q7|p`{cfKP< z7{M<*(Mk~MaobzC9wt~WH*x6824|5h%LIdZpt~_-=TFu%_628SN zT={Me^e1M#Jj`*2<&&}pC?(svbkF7?E zIXn;61JCstt^Qlxx)&s4O^?d{QZD)>bIPXyF8Uu02U+zmx?RJMZVeU%{-(qG2q**I z9(=507}EA-!eZ9y$HGTTS=Eu4J$=9&HCM?|H4Z3!b*(iG2X1BJ02yvCXl$h-8krgb;?6{bCnri8g z>fx=2lDzAM`Dj9|*OSX_-;r*Q+|7kE0+8gHvy z1OkCzgM^cT*Mx-7`svnOqwkkznG1r=X=f-3*<<|AuG=7;C?Rr2!l5s1tQsPxTYqIR zfHhSEQxtt^!hI(KE%1BZPkKYvCG~PFkbz%Sb-|;(_ao5~0iNNtza2jy-s>CL?`|bJ zzeU3&G}cQsCQSB&6H-PE6`}1m&g5E|T2unc>vv5U5MJ7C#F^d+yB(f;^_**LO@#0D z0)b(XW}kCjAXIZY(28;qyI1d)(pQyEmfx4#PD1Zs^g-XMk3zI1+viIbpwX#MObnN! zgxnOEbG>9E=xU%8<}?f@qI&Eta45_cQ`f z6j%8xaY|z;o2Cc(9@qXQ5qQ9wXGO&QOU~m~1Cr{%v&HGFLxRiWK_WWG*b!ZlPB%!MCvLwYjqJTg2x ziY*MuBfNr5_g96URR_9Y98xu=USR;s`aJ<*3q*Rg5T+OQyQs|tOdfmkLnni23UGXE z)d5eQ{YpRnJ8`V}`g$!y|Bb-SEqPQzU6a(Rvo0r^!vH6n!Fi-M?GGdg<-eAyJo^_K zjdb<;MS-^ABn=-s`RpzNJljm2`@e_$v@zS0va*FO$c;6^rA3iC0`BJKidR71ikJ5S zk=!m*?!zrJe_nrY%d6@;ptdx_BL9eMhF7$?b*&Xge<58WbB>o1E|H2%#M$1S|Fvg9 zt1yy!cU1@(u46FAR^p%AcA7qO()g_n`?75+n-en{LCvNt`^776I7!VWGS;&^29Kv$D-b+SG(BMLVw**-5M4fu zfOp(a{+y-GFB@98S#(|MtY7{yjY%_H8SA;C=DFF_hwyApE?m8b@ShJN*wkou01NEq zv;OCSH(aKe9XKAv+SRkqAd~)+Q|rInoUNsT-mz~7;KU!VzEfqqFkx2S|5ovO+zvML zY^ySrHStq6Zgmrm)c0v%YJ^o;Mif<`V&Mgfzje{?+jU)*9?2scVjUy`dFF@Qxf@Yb z`{`+IV*yO5v`BMj<~-oH;ISUs-;%-hPd`&2L`J(i+fad8J@LuQTPRt<(#O|nC7B}e ze~&cmgK*1;=FSgV$<8a-2(?xVc&Zr$uvlhf zl->5=MG|UL4+AoQ+|y#TE9gbL(H19$tu8ypH}1s3kDM7l)Wc}7galftdVpr#Lu6k! z(}3tRGgv{zHsdR14da6m+_^np_~V15FgJn6>sK@+-n-`uI$-BxcqDpicshDn8(|+b zU2-v^AQqR7Q_H%|B^5V<`iSfk<$nV6#**(C^4+%hCJjeR(};4!ez51m zUu9;1NEL>EDK#@DiF02)DM%QLF-kgmmjWDCe`tIAeqQ`_$28PlF1vo9ZjlZA+uXf% z;4Z&Q(IGE`t;QJ7U{aY#C_ej2dAPVav^A4Eqn+OENx-no-^5{F8Z{9XBSVfIeLW}Rk3tpW>)_=U8HEnD*eDNc|?f*Rb!9)_~DZVbKJ%2nT9fy=_ za@5MsOu=FP+wHATX@N+ve?x!%$cG>TJoVn)t+W{xp~LQCJV$KxhyxO|@~G@B^O3D{ zE5nt>MfR-f7LDq^%JNqIhT|?q9bfca-wN5bnP}qh;fygHP+)!W!|y0BQOGlc`tBRc z_tdG*Kf_iVRGsIQBT^)<76f`y&ib|}MHHTOUwlPvR-EAo6ih8Xo=&GUTDzS7O$OoX z_Z>ezlu^^arhjm)84hdYIofDGcyuQUaCMUG>S9mO)8zL?!h-gkeAIMjnHjQHKe{Xgq zjX_NCVpoYRELdVEc$s=SMg`*MvezghrP>l|)llG*mXf$pWf$CzS7KVM?CPfz78M@- z*U4oUxl4AMdo0*bs-uClb^q4QBX#dADy*yFq(prCK^}N}Zg=v@pKj!~2;gRqOsTLO zshfMlzm%@^xcLqVCOk{`V^(UBBta|oIkErkj!l$fUTE^SNe;G&+{2UEU&t`=SvubA z%v#UOn=`S!5F9yB7K;*Er$3dU8tPuV#NE={S1O57aQAMnGGIjU9aB{;0&3;O@t=hF z9oYdLh@II461DlKEjD_D$)#JS-qqa4;274vnrx1~s*7v7>KJRYcJq=Gv zN;p1l2^S#N3HJRoUVNV0@Mn(YZklW9-Su8<#X@pF;DX^Gn?2mhc)O_@Wy|3y6s&hv z87G#gI!pm3;OOZI88gQ^sAL|cTD8^byKc)5H7DXYX7j1xv#6U-eEG$EIir9;rX^`d z=wdeEyKS0O-oCaf`|T<{G{Rd-U(noWXQsm5J4q-wsC*dKwE}wGmmyi}fDFUWj(rV?V*HugmCUn%iIz}ev6!R=qXQ3`^;G#j z0_p+cFgfU9u)c8Fey_lUiG=iC^7@(+nytQj8reJAV~PFDM9tn7ytBlitPuTpg^baC zgI#tGNVB}7nyxV=W)UX8KcXbxo;GRU7bS_6A*;49r(QXW?xWwhOo&`vr%Vfnwz~ja z%wY>r#Bn3s3n|M4R!aPIsv7XdS&XEfz5a#sr#uwDny@reyBi41%jCEiQ6BXbTTN~w z8-9y#Zl>sWW;~R$z#|RuJ@fzmuHW??|MsQTcSnpM5F7!%O@mXr(V(%MfO=l;e#Gt= zmVQWR(1n#S#mdrZ z4oc1e36@Z6%E{OdcJRQ-U(_q5WX>0ZZKOwtbC~U(4VrnaOHPg6?JSV5q}W0|jSMHQ zhNNKD>kb{S+t+H-(`OrIS)#;PYg#bWIpCtA&(Er5*woqH+;%K1Tt4RjSReOR_l0C! zXE;@77nB2f0YbLa%*5ughWvI*4=p(1%5uYU;~xP%S1f3Nz97xBBqtR?(ZkBO_jly` zovv*YHB%pkTNq8vIifjUb=Or6`CzwxtJ+A|CtYZ#H||&N*<>sg?)0mk&(S}O_U6;u%U@G?3^`A0Ee_B63HCu3e!`PywKzh&G?ORz z!8J8#15c$Z#klNlp1q?vz0zwkn(&5^=6?NL@4mF4=4|!dSSxnx<@bDH9jyLxa?-pp z?jM{@G#2z3nTd-`;*D%?ExXk5|6Fy+V1Y7()EysOQ3_mp1B-D(Ot8cq|I(LJb+(ZdF}Otj-YF#YMN1N*>O2B_Em3DM z-&Vk|{N;3DSRUjlhv{#(X0z#$!@7mxX^Idq=alpA|vbxRhpS8i=F(_o1r`Sq;~1*dNxkTdg0!n zj`02YXyqS_Q30HmMKQ_-58gr|NA^|>|2AvZv_)A|>hQ~#bfS3Dn63Sv{YI2)KkE|f zWz5y5@4ankd<038 zc2v_mr-F*@=ls4P(IP$h&H}BIl6M} z1KuMi;7?y15w&easgKsRob;CR4-Hp##j8OeD%Rqs8T=%VuO$Jo(@$)pPZ>(9ay0oj{evCT| zt^Mud`kH(FyD_x>V^)777d(^a;f9bYMbg8Hd1F9(XstZUh01|@j?-?7sx;5o8~_iO zD>I}gOU6%=#^?j>yVV=FTc3A%7Eefbyl%G87B>8CbUN*3GvtzI{5!qs;;>F>w-6pR zIN7p;}dc0Dk2ectE2mxDN-qd(p zi2u0bS*-HOeC(>sABQ}a># z@Ywon@Oa`dKS<6@?AqXpDxo2pCckJuxS9wqi;a#oj!L)P2)1~MNV z-}PJz)p;5i&zinN$Xjp<_c0gVm~Iqc!S$F85;(=s<*)_{OOe{04#jHjk%x98GjuzR zxak~A(ZwPo*%H{npOpF-PiI#+H%uFSN!I|iAXrk6p@gjorxyJ$=AK;VLc_qudagKw zO5|9+_04mjS-tP!b_`#c`96w~(a)x3$hdhYpBzn4IByb_FAfZ86lOUgk2NFA>x}vv z<2!t-K(5c6cYmAn6orw7!quybjyv|M{(Tn<6kI0X0(9hpkBB0DwL9KXUieC70 zkO(Pu#hMzTBq?#R;R(-viZekEy30G;#Bjo9&6)Thi?}{#UgT;@^kW^vF}7)?2pq{8 zU^@e5s@m3R{((4=V1cLVY)w|8^^d!Xu^{OEb2M*my-us2kbOR{l6Goxm?GIYeKzxk zVJ}i-PijOT&LGf;hV#%_>+1Hg}eO*~fgd?anMNLij z#UuyC%5n-(qBpFe`>J_mR?vI$>+{>@nHs2)z{Q2hUb?9n$D#mby{+iyOp*D9lmRAe zwPDc3&j`5Bwjaz6)8QiE;|UC2M8)m@3LH~d9Gv~tR%dLjI%jpXSF-7|$*=F7YVH}9=(>k)MMFb4Y8=^#L)K>6G>8_q|jc=>sFAjA7`V>ZsOt4Rz9YNp;~+MQxqM`R<|T#=3G0a_@D&bjT`g!mZauco7%WRCMXe9QQ@m40hs z4Ba`;C)C?s{Q*v_-MqX+sKhUoq}82tl`!RTa6&&!3+KM*#OeOI-Q%x%HpBBGzvqB_ zPQ0tOH}$N!;+5@&A&6x=1KTESeds`fZs;J|CHm%}yJg6tvm123xFWnnySt!&lRtdw zw701bfIC8jdul4wW8!Q1pHls8SG(}Ke9z3;eSxaX1&~M+>?G_e&kNQhKXI)pDUZ50UMBgrF#*v(p6wO}wI)g9=FHoh9=;Tn zEy_!N!z_X=y%ClX;oaNk-}{V*3v?rHD9_i@kb}MIhrxgOB(_{aP~?4IGkmfTw75$( zX4nHF1vLXHjOqR%_-sH6cVchA_P$zMmESsXY-lzm=^i4*ESEwTZmF2@=6*7l78L<3 zRRt9i&cl||dgt`5f>x7yURvvV5ZQz{mJE)W7|jb)gQ;J``@5}8Qhbkc&k|G{r&BUA zs+tJ(qVZ5-K`3J0J`JBb4DJ|>!(awHsy{$@xX28Dr<)p&?rvw48%wqxkE>_i&=)w) zlEmC*g!f%XoS5>g4xGn(un6Hm8Dv9nDA;SRm1FKw@lw5D0yG>!XLEg06m|>_kszB= zdch~io%$hNT(nN``>Q}^eztfN*q@`EXhA`uljC<|JwZ+hR0VskuG|Ame5Sw$9H`tb zV<@D%V192bzOZkff(ZZw8R#`z2vPRntva55n=)|QIa(-x7EN+V(HBf$;09YU-s zirS{as-6VQEFV^|p&0G505sdf()XhZ3Vv1w3BXk!x`fc&8ff56S-#eD{cdggkp5n~ z8=a2L&y$^+JNDuH2l?%cZKj`tOWwo5TD1IUqr>zZjEM@@kqe%B!L%^r<}UkYi-vro zx7qjOAdBN+NpD^ACUQ+q3&~ipEGip>XQ%$q!RAo2xj%)|!cbOV%ado+b7e9f%Ws!S zxpm910u!Zrb=iGLB6puN8}U{kDTzCqguQB;!a`MPG@)Fog-mUQ<3+uWC~u~#o$&gV zO3?iv1`9~+WQuJ(rL8X?dhYl)A*$22ZNg+hJAc{iLQK7?-=T+or6v*}NecY^#?&=-0z5hvpf~LuA4ymAR*dcH$47SS zn6FXYO+YjP|xS555C7W*Zeq!FGg)Rh#LRLVml8 z0;E8SzNNAu-*>hu+Dhr?#~WWfM9K`0dvqesH=LqqKcwSO`nMG`u`OleS=XS-^NmmXQ?qDM+Ej2>|WA8LQdM#SQ;{wEx%b>*V*vF z-IJlXtitki&o>cDcTli%vX3FQSHI2U0q{vblMtKP0vSP#!|KLrqSGNO`P#Zghcz)& z%Z6zK4V#Fqxd?Fqf21>rm+bVw;0UR1CDUlPwqQz9uGrfOA}2^_n;Z`?$Q=zYWg?&RB#r z4*qn#B}*=;OKh!qBkEH=tje<)lZOV}D-S(f43QbFE&k%pH5tE}T6!_$5E<1v7;Zep zvRs$EzkR_~iSWw$R=<|KE0o-nja*}Q;EelLF)d+aXLND*nlW!-YUf-=CvA*Vk`Q))Z>5$ z0une#-Gd57Hy?N>nR+$#9u!7$HpBP3KCfZLZ$61lmnY@?KtRJd$HWEGiOIX};KJUp zMzodA&v^C>z<#78OT)B<0Ql{!7vvzrl?2?aze-RnYPN#;4s^Tq98<7zB>XkuBNjoL z$UiE2?~e+`T{(_wW@34hwSrY-=M1b_r#9zZ)LyX`5{@q#2!w~gu*1Uq3$rT7X&`p= z*`*hAM!U~%=W_NtL0Dn;Nr;yS&j8D^mn$R7AqOB8<<4}yj-+}X7%XJX%S9Km9`Z5T ze=})o)n*`MBnzb5VxC?0)gW8fzb(OArHCH@zmJcZwbK(cFc_r9GUcm{A_Uz{9qKl` zAt%GeNlh@Q&bb|Ft-bVNW!xj>ykkSY@e&;?)vMpudmx^{|4SZnVB_w`k~NbkvfE=I zeB(L112k7h5odhW4T0kp@kArlPYs-n5h8%-c#y~;?_Cp6=YAbx(2&>}M zy0C7>Q6BDzj8i<6o7JNcMF^3-Y9YvCZO5H?ITVpO-@VGUZfcjmKWYZ| z)ihbXmS{IbUQC;=$f{(kR;oBKeUby}a}~ERf2(+Khb2$2A=3pUZ9}9$+xx{u2~_K{ z?s5GpTi4(@?Mjo}yXc-`-Pi^fCR9{H5>|A*!zxl|yyugiDG?G^vi@V)w@ui*8x(%Nt#BhOQTX?b*W-vh zz7qU?2M4X695p~f=tz6PuhT#G$RhH6Yk!krB9pJ{H~JIy^FsBjt`4B#BjAzcAZ53D z>^at}1cS@745ps(!Di&IzQ-uE(#JDo3)GZUm1Y=!7UU%LaOI{edxb#xQALmwk4uZk zCIaG_=>PfZdp>gN`TNGv?oT$IZx=-waTntETnEcneXDxx2r#@2~1VxKKHB&!94~QhbcLA`t7_ z$6!`w_D+b1U${MqU%*7aTo1&8zr-el#DGecJ;wK}z5Go(5$6o1=68;rn}|0R&X-}d zY=7gUW@UhJ#VXQ|i60#!RQWLXKfVcO-J}wmT%U_b+do7=I-tN25$|w(<1k#_)P%IY6qa8;QOXXgKd^+Dwj~#+(8-UWe`ag9NsykVPq;Bea?@elS~XqnksQ?bJG_lswXf(t&g4 zxD^0i4<$uG(d`((G2($LpmvuP2xL~dit;``TY<3MpI!<-oDS-l_hg@}nvR*yT_$zF6E63b*q_S6;6{Izo2%de_AQK_X=+T)rj6*09BQ$aeqRy;{gpAz{*8; zE$*_foUY^Bt;YT%)?KHzAt8PYuadSOZ{AnAb$PgX7&(FG7g1gfUL=q&+(orDS5?;> z?+{pQ7To$gh~Y^5Wm-{J(n|Aj^3le>+zacSkMEtqZ25wycQ$TLL@|pXM`716eG=zk z*8Q+847fH88eH(B657lO{I&g1f$=-@~UXoP5IZF3cg?|5`c-V!HEB0BRW&G)! zz+8w39QLrpwwMq(U>E;(5kqb*U}jSfV*Ywmh@3?C+Z;jy*L~o*$Ad_2cIb#lNxbNE0d9rNY2vBp7 zo0I$jbPtCxaNHfHf_L&Kz(D5GLp1Aa(-q%>Ov1BAKy%|#<>u98(_+8Kg^!PtZSLH* z3~g&S=UhO)?5Aa;gynxQc@Uw0!zhjF_Rv5q?+_W&-p1mH2COj`e?EOg?OV@38XK9n zEv}va!Y>{v9J~B>|GZV_H4*K3?!({0?K2%UZrg9oA()=#l187ZmQX!&Wzy+G+hi{75svf0Ww zY5fhpoYFD4Prj_r+{46iurP)3Mc5f^;)T5yc7M|N^Uc-8Mm1VMzyc!I za!!Gn2*_1RMK_=LyPS)M_IUFI%-nn%0@CI$+J6Lgea@-1Y&|~_=-GC5j;W}h>`;&a zS9;@cpE)kiisY-B0G7osGkCodAINI+UJTQk<$);*(Ku1zjMC9+x2?-mK?{Z`KkLoy zf*Tgs57krq5X*SqtWO)sKj*;n7S{7cC`8Q#`fTWbB7H{r`R?J=-us{@9*ftH_;oCO zyhxZg3wa#Lo2&DY#@i&@U!MyE-cy$K8Z7PQjav&OaqEX|{S7E2WYSqNxOur{rZ3f% zicFw2TI2SveEhRFqI~MFjVnk_Sjy6`RsB{2afMifgmU6C`c`vK82jRvnKNhXm%mOL zFMwmY+q``EHvG$q+pj$o0f~}I^M|~|jTOp;?WHsUDj3_ZB#}4oTgC1#d|6xDA3DTp zTRXPHXLpfLdsbryxl zPH&>f56G~Nc0V&xi=$Csl8;2nPsQ_&E4uJbdw2J~Gf!B(4-Xc7JYc9y9%*24eRtb$ z7$jmI86Pd~o;B|?)*G@?W6LQjYO-M{6A~N#CJ#PoR1$VX@!ea3`|fxclxY}P&|gRr zaW0nPMLtcS`)n=E`M2ad0We;NAZP!wsxNi#sL66PMb-)3#M#kf3;pOiXWK`Utf{0X zur`Tp2|?Tv8TLg(0Fx)-=ZjV-Dm6c53)@w-eh!OD;N{NjF+}~J!EvK$gyYH(t0_GR zpMwR?jv66p#e+$(cemtV`tJ~)CVtVehlj%~Dq2wgqQeR9ryU@ZE%?qfb9~dVZgv)@FO|*2%h`+Fxqc3wDE@V!S2--U?iFIO z=7rR3VfxXWrr|{*8;NxEQpZ+lO3LJ8IOt2xKY%`XG+rB*B!cgVi=eEmqNw;xCQ{%I zC-6M6;6?&ypM?A z%2bR?q0z7M#xfARJ+2?YBgs_`&panqo2jk`8by_);v2%4d5`Yh5Z<^cYZ*oi;W@;4 z#rBaBVnZm1net$JpVE7h$YwtXMl|A`|3WhUfsQov(5027A6<{x5176+g2>ZOT$7E3W+X|ARoN zTQ^~8P!yz)20_Az877K$vg&pr(W%7*O{r%^eP$}mGl@8ElenQji!{qa6Z_NOhq`yt z!OT{(3!9{nenwHhk~C5?L8{`#bO3r?{~D*-9#R&L2j5?Z8H9GKU`NQUxOwh(1hW>q z5}WpHFwQWAdH9`oH*5tF{Ubu@KwofO*TqW-1#L$f(#&h)^wDiq{&AFE|B zW1LfZnKTZSU@UDPr>s#FJ8zY=K;xh36wTsUwQIb;m{-U7BLyN6dQXd|Nu0hlqy^XR z18>>7oHJR~+~$L=N>Bck-iaG6m=kj$1eYY2akL4KDYtK$9&l4NO0$F5^ODJGnX+}O ztllMwx%F?|9Rl|UPIqV9yL^Sxa#L(0VVEXzEDZbu)mf8~bF|k1@(Ee4qJ4ZJn8;f% z7&u9+Nz&$+D2kiY-o(&uL-G_(5)H0;?InDEAR<@u%^Rm_3p%3pMJG>jArN4fvOaS1 zpuogQz)ksOqPV#&tyb$~KyQqnwDuNX(f@i?- z5IMR4#lz*|>j!nTw}C5v3RqcSTWctMoj0k)`ro?+<1S z|0K&>E}#`1ZIBd-z#bd2xDGNl-2cXHq2vkMlK)Rd1|C&pMv_@|wNm95X?|efG@%or z@f9wT-Z}bI;%6g9`*|*ToJzntO`C2!ypFhtFE|HU8jlvbCR;$gMLuk7u>9xQzXBY% zc}#LDK!$1&54!ZMh?V4()FGQ>tWsb{>2$Zo#3USrtSiG%1`%b?5u0cx3NH~myOYuo zL09XseW2arNOacCFL?X}kRho8*mFfqG^FJOa|9A^hJhtUH53MLntK&B`FC`0&|C z0VSBOwo;xd>OAWuHi`i8zXOQw_$QfUc$!m`i@I4Ji-08eJe`p&dY{XZ5E~%>jQ-y& zS7^jQ<4r}ST*NC_%#5y(C|CaB^W4{PYJMNW%e~Z>F{mlulGf6}9{*|J_WTjCUuJ3U ze0`5#VvKI0y*?R2UA3SoC25}a+2*~>AQ^#uTFSxyKJN4Q@h|YSc|^-6a`Ny#Bl&Tm zZt$)gqr?|Mp`2ucKhCQ1M}GvAjY?eC;%KF1*s&LBGTXz7(o$OfljMIB5i3r3`ub{* z9@=?HFwfDcdf?ymR;CYcym_uNH|We|hn1JaCGy}>6`DRsRI`oL(a68VYDf5&vIqOW ziQcI^CfA4&Ax1XAfQ>@|@RA4M%%IAmL$ynfQ5pYQZsgiON}iDGr=lVmT3&DxhCxR3 z(8XyuTC|MZJjc=b=)cmJULJltUY4!F_|;3rEYUxR=XpU*Xjfs+xmMA4$T; zi7wOs(*<*JplC`7sr|M2QQZGjGP*tLZHMsW70MvVU|t*=C+BbpaS()x_lE70H! z^Wu^|*q3g}X#D%FC+tEfA#Do^C%Z2n&7&c{gEXX0@ipszjV~x(rv;+jXng?9M1U&G zq`dgyzfW-2pKU1nXL3s*@@H~MAPPMGA_s7n_n+aeJG()huHaqE3jZ583D|sjp{m)? zQA@dNf9V;1;r~AYx5{#6u7|AFz~&~MUq0l#W2tC6SB6;*GF4Wg`TI2FKN*K#F6z8b zb@?%PHz1^tUGmxfI=@2QxulsPmS$Zr7?$*p5&@4gN(JwyPiI`e=Rtjzu8k;l+#Q*gQpxYhy-{Ul-YWW|J7(sw;io;=l5l9keh z3dMeUiHZQ0oRq>o6eDdpu`#Tcr z&j|k={9wx2~GDxhma&v9`{62z(#8XO`SHsc|ms)v5L{un-4ISwPf&cUvwLT)8 zab2f~RmHfPSRs)@%5gk~fN|&C|FPCIL?MZriz~##c_!NGfAi=AL&Slv1mUjGsdxNB zftQ?6p=sVXu(<$c4~BheArPrx4~Id$0@>DQtE2b-Sv*Z=?k diff --git a/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md b/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md index 65e82f7f8a..b23ae6598e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md @@ -37,7 +37,7 @@ Follow the corresponding instructions depending on your preferred deployment met - [Offboard devices using Mobile Device Management tools](configure-endpoints-mdm.md#offboard-and-monitor-devices-using-mobile-device-management-tools) ## Offboard Servers -- [Offboard servers](configure-server-endpoints.md#offboard-servers) +- [Offboard servers](configure-server-endpoints.md#offboard-windows-servers) ## Offboard non-Windows devices - [Offboard non-Windows devices](configure-endpoints-non-windows.md#offboard-non-windows-devices) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md index e1f80dbe12..d03759b40c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md @@ -46,7 +46,7 @@ Deployment methods vary, depending on which operating system is selected. Refer |---------|---------| |Windows 10 |- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [Mobile Device Management (Intune)](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-mdm)
- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | |Windows 8.1 Enterprise
Windows 8.1 Pro
Windows 7 SP1 Enterprise
Windows 7 SP1 Pro | [Microsoft Monitoring Agent](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#install-and-configure-microsoft-monitoring-agent-mma-to-report-sensor-data-to-microsoft-defender-atp)

**NOTE**: Microsoft Monitoring Agent is now Azure Log Analytics agent. To learn more, see [Log Analytics agent overview](https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent). | -|Windows Server 2019 and later
Windows Server 2019 core edition
Windows Server version 1803 and later |- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)
- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [System Center Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm#onboard-windows-10-machines-using-earlier-versions-of-system-center-configuration-manager)
- [VDI onboarding scripts for non-persistent machines](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | +|Windows Server 2019 and later
Windows Server 2019 core edition
Windows Server version 1803 and later |- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)
- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [System Center Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm#onboard-windows-10-devices-using-earlier-versions-of-system-center-configuration-manager)
- [VDI onboarding scripts for non-persistent machines](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | |Windows Server 2016
Windows Server 2012 R2
Windows Server 2008 R2 SP1 |- [Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints#option-1-onboard-servers-through-microsoft-defender-security-center)
- [Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-wdatp) | |macOS
iOS
Linux |[Onboard non-Windows machines](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows) | From 7580546999dd28c975adb7c821f178a4dcf86049 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 2 Jul 2020 14:10:21 -0700 Subject: [PATCH 046/589] update to MSSP content --- windows/security/threat-protection/TOC.md | 4 + .../access-mssp-portal.md | 56 ++++ .../configure-mssp-notifications.md | 46 ++++ .../configure-mssp-support.md | 247 +----------------- .../fetch-alerts-mssp.md | 196 ++++++++++++++ .../grant-mssp-access.md | 133 ++++++++++ .../images/access-properties.png | Bin 0 -> 16921 bytes .../images/goverance-catalog.png | Bin 0 -> 12359 bytes .../images/mssp-access.png | Bin 0 -> 41134 bytes .../images/new-access-package.png | Bin 0 -> 58871 bytes 10 files changed, 441 insertions(+), 241 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/access-mssp-portal.md create mode 100644 windows/security/threat-protection/microsoft-defender-atp/configure-mssp-notifications.md create mode 100644 windows/security/threat-protection/microsoft-defender-atp/fetch-alerts-mssp.md create mode 100644 windows/security/threat-protection/microsoft-defender-atp/grant-mssp-access.md create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/access-properties.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/goverance-catalog.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/mssp-access.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/new-access-package.png diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index a35fd74410..212855c5b0 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -611,6 +611,10 @@ ###### [Create and manage device tags](microsoft-defender-atp/machine-tags.md) #### [Configure managed security service provider (MSSP) integration](microsoft-defender-atp/configure-mssp-support.md) +##### [Grant MSSP access to the portal](microsoft-defender-atp/grant-mssp-access.md) +##### [Access the MSSP customer portal](microsoft-defender-atp/access-mssp-portal.md) +##### [Configure alert notifications](microsoft-defender-atp/configure-mssp-notifications.md) +##### [Fetch alerts from customer tenant](microsoft-defender-atp/fetch-alerts-mssp.md) ### [Partner integration scenarios]() #### [Technical partner opportunities](microsoft-defender-atp/partner-integration.md) diff --git a/windows/security/threat-protection/microsoft-defender-atp/access-mssp-portal.md b/windows/security/threat-protection/microsoft-defender-atp/access-mssp-portal.md new file mode 100644 index 0000000000..647939803c --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/access-mssp-portal.md @@ -0,0 +1,56 @@ +--- +title: Access the Microsoft Defender Security Center MSSP customer portal +description: Access the Microsoft Defender Security Center MSSP customer portal +keywords: managed security service provider, mssp, configure, integration +search.product: eADQiWindows 10XVcnh +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: macapara +author: mjcaparas +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: article +--- + +# Access the Microsoft Defender Security Center MSSP customer portal + +**Applies to:** + +- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) + +>Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-mssp-support-abovefoldlink) + + + + +>[!NOTE] +>These set of steps are directed towards the MSSP. + +By default, MSSP customers access their Microsoft Defender Security Center tenant through the following URL: `https://securitycenter.windows.com`. + + +MSSPs however, will need to use a tenant-specific URL in the following format: `https://securitycenter.windows.com?tid=customer_tenant_id` to access the MSSP customer portal. + +In general, MSSPs will need to be added to each of the MSSP customer's Azure AD that they intend to manage. + + +Use the following steps to obtain the MSSP customer tenant ID and then use the ID to access the tenant-specific URL: + +1. As an MSSP, login to Azure AD with your credentials. + +2. Switch directory to the MSSP customer's tenant. + +3. Select **Azure Active Directory > Properties**. You'll find the tenant ID in the Directory ID field. + +4. Access the MSSP customer portal by replacing the `customer_tenant_id` value in the following URL: `https://securitycenter.windows.com?tid=customer_tenant_id`. + + +## Related topics +- [Grant MSSP access to the portal](grant-mssp-access.md) +- [Configure alert notifications](configure-mssp-notifications.md) +- [Fetch alerts from customer tenant](fetch-alerts-mssp.md) \ No newline at end of file diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-mssp-notifications.md b/windows/security/threat-protection/microsoft-defender-atp/configure-mssp-notifications.md new file mode 100644 index 0000000000..b7c4bf19d6 --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-mssp-notifications.md @@ -0,0 +1,46 @@ +--- +title: Configure alert notifications that are sent to MSSPs +description: Configure alert notifications that are sent to MSSPs +keywords: managed security service provider, mssp, configure, integration +search.product: eADQiWindows 10XVcnh +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: macapara +author: mjcaparas +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: article +--- + +# Configure alert notifications that are sent to MSSPs + +**Applies to:** + +- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) + +>Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-mssp-support-abovefoldlink) + + +>[!NOTE] +>This step can be done by either the MSSP customer or MSSP. MSSPs must be granted the appropriate permissions to configure this on behalf of the MSSP customer. + +After access the portal is granted, alert notification rules can to be created so that emails are sent to MSSPs when alerts associated with the tenant are created and set conditions are met. + + +For more information, see [Create rules for alert notifications](configure-email-notifications.md#create-rules-for-alert-notifications). + + +These check boxes must be checked: +- **Include organization name** - The customer name will be added to email notifications +- **Include tenant-specific portal link** - Alert link URL will have tenant specific parameter (tid=target_tenant_id) that allows direct access to target tenant portal + + +## Related topics +- [Grant MSSP access to the portal](grant-mssp-access.md) +- [Access the MSSP customer portal](access-mssp-portal.md) +- [Fetch alerts from customer tenant](fetch-alerts-mssp.md) \ No newline at end of file diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-mssp-support.md b/windows/security/threat-protection/microsoft-defender-atp/configure-mssp-support.md index 852f5ff3b8..5aafc31c98 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-mssp-support.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-mssp-support.md @@ -1,8 +1,6 @@ --- title: Configure managed security service provider support - description: Take the necessary steps to configure the MSSP integration with Microsoft Defender ATP - keywords: managed security service provider, mssp, configure, integration search.product: eADQiWindows 10XVcnh search.appverid: met150 @@ -17,7 +15,6 @@ manager: dansimp audience: ITPro ms.collection: M365-security-compliance ms.topic: article -ms.date: 09/03/2018 --- # Configure managed security service provider integration @@ -67,247 +64,15 @@ This action is taken by the MSSP. It allows MSSPs to fetch alerts in SIEM tools. This action is taken by the MSSP. It allows MSSPs to fetch alerts using APIs. -## Grant the MSSP access to the portal ->[!NOTE] -> These set of steps are directed towards the MSSP customer.
-> Access to the portal can only be done by the MSSP customer. - -As a MSSP customer, you'll need to take the following configuration steps to grant the MSSP access to Microsoft Defender Security Center. - - -Authentication and authorization of the MSSP user is built on top of Azure Active Directory (Azure AD) B2B functionality. - -You'll need to take the following 2 steps: -- Add MSSP user to your tenant as a guest user - -- Grant MSSP user access to Microsoft Defender Security Center - - -### Add MSSP user to your tenant as a guest user -Add a user who is a member of the MSSP tenant to your tenant as a guest user. - -To grant portal access to the MSSP, you must add the MSSP user to your Azure AD as a guest user. For more information, see [Add Azure Active Directory B2B collaboration users in the Azure portal](https://docs.microsoft.com/azure/active-directory/b2b/add-users-administrator). - -### Grant MSSP user access to Microsoft Defender Security Center -Grant the guest user access and permissions to your Microsoft Defender Security Center tenant. - -Granting access to guest user is done the same way as granting access to a user who is a member of your tenant. - -If you're using basic permissions to access the portal, the guest user must be assigned a Security Administrator role in **your** tenant. For more information, see [Use basic permissions to access the portal](basic-permissions.md). - -If you're using role-based access control (RBAC), the guest user must be to added to the appropriate group or groups in **your** tenant. Fore more information on RBAC in Microsoft Defender ATP, see [Manage portal access using RBAC](rbac.md). - - ->[!NOTE] ->There is no difference between the Member user and Guest user roles from RBAC perspective. - -It is recommended that groups are created for MSSPs to make authorization access more manageable. - -As a MSSP customer, you can always remove or modify the permissions granted to the MSSP by updating the Azure AD user groups. - - -## Access the Microsoft Defender Security Center MSSP customer portal - ->[!NOTE] ->These set of steps are directed towards the MSSP. - -By default, MSSP customers access their Microsoft Defender Security Center tenant through the following URL: `https://securitycenter.windows.com`. - - -MSSPs however, will need to use a tenant-specific URL in the following format: `https://securitycenter.windows.com?tid=customer_tenant_id` to access the MSSP customer portal. - -In general, MSSPs will need to be added to each of the MSSP customer's Azure AD that they intend to manage. - - -Use the following steps to obtain the MSSP customer tenant ID and then use the ID to access the tenant-specific URL: - -1. As an MSSP, login to Azure AD with your credentials. - -2. Switch directory to the MSSP customer's tenant. - -3. Select **Azure Active Directory > Properties**. You'll find the tenant ID in the Directory ID field. - -4. Access the MSSP customer portal by replacing the `customer_tenant_id` value in the following URL: `https://securitycenter.windows.com?tid=customer_tenant_id`. - -## Configure alert notifications that are sent to MSSPs - ->[!NOTE] ->This step can be done by either the MSSP customer or MSSP. MSSPs must be granted the appropriate permissions to configure this on behalf of the MSSP customer. - -After access the portal is granted, alert notification rules can to be created so that emails are sent to MSSPs when alerts associated with the tenant are created and set conditions are met. - - -For more information, see [Create rules for alert notifications](configure-email-notifications.md#create-rules-for-alert-notifications). - - -These check boxes must be checked: -- **Include organization name** - The customer name will be added to email notifications -- **Include tenant-specific portal link** - Alert link URL will have tenant specific parameter (tid=target_tenant_id) that allows direct access to target tenant portal - - -## Fetch alerts from MSSP customer's tenant into the SIEM system - ->[!NOTE] ->This action is taken by the MSSP. - - -To fetch alerts into your SIEM system you'll need to take the following steps: - -Step 1: Create a third-party application - -Step 2: Get access and refresh tokens from your customer's tenant - -Step 3: allow your application on Microsoft Defender Security Center - - - - -### Step 1: Create an application in Azure Active Directory (Azure AD) - -You'll need to create an application and grant it permissions to fetch alerts from your customer's Microsoft Defender ATP tenant. - - -1. Sign in to the [Azure AD portal](https://aad.portal.azure.com/). - -2. Select **Azure Active Directory** > **App registrations**. - - -3. Click **New registration**. - - -4. Specify the following values: - - - Name: \ SIEM MSSP Connector (replace Tenant_name with the tenant display name) - - - Supported account types: Account in this organizational directory only - - Redirect URI: Select Web and type `https:///SiemMsspConnector`(replace with the tenant name) - -5. Click **Register**. The application is displayed in the list of applications you own. - -6. Select the application, then click **Overview**. - -7. Copy the value from the **Application (client) ID** field to a safe place, you will need this in the next step. - -8. Select **Certificate & secrets** in the new application panel. - -9. Click **New client secret**. - - - - Description: Enter a description for the key. - - Expires: Select **In 1 year** - - -10. Click **Add**, copy the value of the client secret to a safe place, you will need this in the next step. - - -### Step 2: Get access and refresh tokens from your customer's tenant -This section guides you on how to use a PowerShell script to get the tokens from your customer's tenant. This script uses the application from the previous step to get the access and refresh tokens using the OAuth Authorization Code Flow. - -After providing your credentials, you'll need to grant consent to the application so that the application is provisioned in the customer's tenant. - - -1. Create a new folder and name it: `MsspTokensAcquisition`. - -2. Download the [LoginBrowser.psm1 module](https://github.com/shawntabrizi/Microsoft-Authentication-with-PowerShell-and-MSAL/blob/master/Authorization%20Code%20Grant%20Flow/LoginBrowser.psm1) and save it in the `MsspTokensAcquisition` folder. - - >[!NOTE] - >In line 30, replace `authorzationUrl` with `authorizationUrl`. - -3. Create a file with the following content and save it with the name `MsspTokensAcquisition.ps1` in the folder: - ``` - param ( - [Parameter(Mandatory=$true)][string]$clientId, - [Parameter(Mandatory=$true)][string]$secret, - [Parameter(Mandatory=$true)][string]$tenantId - ) - [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 - - # Load our Login Browser Function - Import-Module .\LoginBrowser.psm1 - - # Configuration parameters - $login = "https://login.microsoftonline.com" - $redirectUri = "https://SiemMsspConnector" - $resourceId = "https://graph.windows.net" - - Write-Host 'Prompt the user for his credentials, to get an authorization code' - $authorizationUrl = ("{0}/{1}/oauth2/authorize?prompt=select_account&response_type=code&client_id={2}&redirect_uri={3}&resource={4}" -f - $login, $tenantId, $clientId, $redirectUri, $resourceId) - Write-Host "authorzationUrl: $authorizationUrl" - - # Fake a proper endpoint for the Redirect URI - $code = LoginBrowser $authorizationUrl $redirectUri - - # Acquire token using the authorization code - - $Body = @{ - grant_type = 'authorization_code' - client_id = $clientId - code = $code - redirect_uri = $redirectUri - resource = $resourceId - client_secret = $secret - } - - $tokenEndpoint = "$login/$tenantId/oauth2/token?" - $Response = Invoke-RestMethod -Method Post -Uri $tokenEndpoint -Body $Body - $token = $Response.access_token - $refreshToken= $Response.refresh_token - - Write-Host " ----------------------------------- TOKEN ---------------------------------- " - Write-Host $token - - Write-Host " ----------------------------------- REFRESH TOKEN ---------------------------------- " - Write-Host $refreshToken - ``` -4. Open an elevated PowerShell command prompt in the `MsspTokensAcquisition` folder. - -5. Run the following command: - `Set-ExecutionPolicy -ExecutionPolicy Bypass` - -6. Enter the following commands: `.\MsspTokensAcquisition.ps1 -clientId -secret -tenantId ` - - - Replace \ with the **Application (client) ID** you got from the previous step. - - Replace \ with the **Client Secret** you created from the previous step. - - Replace \ with your customer's **Tenant ID**. - - -7. You'll be asked to provide your credentials and consent. Ignore the page redirect. - -8. In the PowerShell window, you'll receive an access token and a refresh token. Save the refresh token to configure your SIEM connector. - - -### Step 3: Allow your application on Microsoft Defender Security Center -You'll need to allow the application you created in Microsoft Defender Security Center. - - -You'll need to have **Manage portal system settings** permission to allow the application. Otherwise, you'll need to request your customer to allow the application for you. - -1. Go to `https://securitycenter.windows.com?tid=` (replace \ with the customer's tenant ID. - -2. Click **Settings** > **SIEM**. - -3. Select the **MSSP** tab. - -4. Enter the **Application ID** from the first step and your **Tenant ID**. - -5. Click **Authorize application**. - - -You can now download the relevant configuration file for your SIEM and connect to the Microsoft Defender ATP API. For more information see, [Pull alerts to your SIEM tools](configure-siem.md). - - -- In the ArcSight configuration file / Splunk Authentication Properties file – you will have to write your application key manually by settings the secret value. -- Instead of acquiring a refresh token in the portal, use the script from the previous step to acquire a refresh token (or acquire it by other means). - -## Fetch alerts from MSSP customer's tenant using APIs - -For information on how to fetch alerts using REST API, see [Pull alerts using REST API](pull-alerts-using-rest-api.md). - ## Related topics -- [Use basic permissions to access the portal](basic-permissions.md) +- [Grant MSSP access to the portal](grant-mssp-access.md) +- [Access the MSSP customer portal](access-mssp-portal.md) +- [Configure alert notifications](configure-mssp-notifications.md) +- [Fetch alerts from customer tenant](fetch-alerts-mssp.md) + + - [Manage portal access using RBAC](rbac.md) - [Pull alerts to your SIEM tools](configure-siem.md) - [Pull alerts using REST API](pull-alerts-using-rest-api.md) diff --git a/windows/security/threat-protection/microsoft-defender-atp/fetch-alerts-mssp.md b/windows/security/threat-protection/microsoft-defender-atp/fetch-alerts-mssp.md new file mode 100644 index 0000000000..f0ccb1577e --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/fetch-alerts-mssp.md @@ -0,0 +1,196 @@ +--- +title: Fetch alerts from MSSP customer tenant +description: Learn how to fetch alerts from a customer tenant +keywords: managed security service provider, mssp, configure, integration +search.product: eADQiWindows 10XVcnh +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: macapara +author: mjcaparas +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: article +--- + +# Fetch alerts from MSSP customer tenant + +**Applies to:** + +- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) + +>Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-mssp-support-abovefoldlink) + + +>[!NOTE] +>This action is taken by the MSSP. + + +There are two ways you can fetch alerts: +- Using the SIEM method +- Using APIs + +## Fetch alerts into your SIEM + +To fetch alerts into your SIEM system you'll need to take the following steps: + +Step 1: Create a third-party application + +Step 2: Get access and refresh tokens from your customer's tenant + +Step 3: allow your application on Microsoft Defender Security Center + + + + +### Step 1: Create an application in Azure Active Directory (Azure AD) + +You'll need to create an application and grant it permissions to fetch alerts from your customer's Microsoft Defender ATP tenant. + + +1. Sign in to the [Azure AD portal](https://aad.portal.azure.com/). + +2. Select **Azure Active Directory** > **App registrations**. + + +3. Click **New registration**. + + +4. Specify the following values: + + - Name: \ SIEM MSSP Connector (replace Tenant_name with the tenant display name) + + - Supported account types: Account in this organizational directory only + - Redirect URI: Select Web and type `https:///SiemMsspConnector`(replace with the tenant name) + +5. Click **Register**. The application is displayed in the list of applications you own. + +6. Select the application, then click **Overview**. + +7. Copy the value from the **Application (client) ID** field to a safe place, you will need this in the next step. + +8. Select **Certificate & secrets** in the new application panel. + +9. Click **New client secret**. + + + - Description: Enter a description for the key. + - Expires: Select **In 1 year** + + +10. Click **Add**, copy the value of the client secret to a safe place, you will need this in the next step. + + +### Step 2: Get access and refresh tokens from your customer's tenant +This section guides you on how to use a PowerShell script to get the tokens from your customer's tenant. This script uses the application from the previous step to get the access and refresh tokens using the OAuth Authorization Code Flow. + +After providing your credentials, you'll need to grant consent to the application so that the application is provisioned in the customer's tenant. + + +1. Create a new folder and name it: `MsspTokensAcquisition`. + +2. Download the [LoginBrowser.psm1 module](https://github.com/shawntabrizi/Microsoft-Authentication-with-PowerShell-and-MSAL/blob/master/Authorization%20Code%20Grant%20Flow/LoginBrowser.psm1) and save it in the `MsspTokensAcquisition` folder. + + >[!NOTE] + >In line 30, replace `authorzationUrl` with `authorizationUrl`. + +3. Create a file with the following content and save it with the name `MsspTokensAcquisition.ps1` in the folder: + ``` + param ( + [Parameter(Mandatory=$true)][string]$clientId, + [Parameter(Mandatory=$true)][string]$secret, + [Parameter(Mandatory=$true)][string]$tenantId + ) + [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 + + # Load our Login Browser Function + Import-Module .\LoginBrowser.psm1 + + # Configuration parameters + $login = "https://login.microsoftonline.com" + $redirectUri = "https://SiemMsspConnector" + $resourceId = "https://graph.windows.net" + + Write-Host 'Prompt the user for his credentials, to get an authorization code' + $authorizationUrl = ("{0}/{1}/oauth2/authorize?prompt=select_account&response_type=code&client_id={2}&redirect_uri={3}&resource={4}" -f + $login, $tenantId, $clientId, $redirectUri, $resourceId) + Write-Host "authorzationUrl: $authorizationUrl" + + # Fake a proper endpoint for the Redirect URI + $code = LoginBrowser $authorizationUrl $redirectUri + + # Acquire token using the authorization code + + $Body = @{ + grant_type = 'authorization_code' + client_id = $clientId + code = $code + redirect_uri = $redirectUri + resource = $resourceId + client_secret = $secret + } + + $tokenEndpoint = "$login/$tenantId/oauth2/token?" + $Response = Invoke-RestMethod -Method Post -Uri $tokenEndpoint -Body $Body + $token = $Response.access_token + $refreshToken= $Response.refresh_token + + Write-Host " ----------------------------------- TOKEN ---------------------------------- " + Write-Host $token + + Write-Host " ----------------------------------- REFRESH TOKEN ---------------------------------- " + Write-Host $refreshToken + ``` +4. Open an elevated PowerShell command prompt in the `MsspTokensAcquisition` folder. + +5. Run the following command: + `Set-ExecutionPolicy -ExecutionPolicy Bypass` + +6. Enter the following commands: `.\MsspTokensAcquisition.ps1 -clientId -secret -tenantId ` + + - Replace \ with the **Application (client) ID** you got from the previous step. + - Replace \ with the **Client Secret** you created from the previous step. + - Replace \ with your customer's **Tenant ID**. + + +7. You'll be asked to provide your credentials and consent. Ignore the page redirect. + +8. In the PowerShell window, you'll receive an access token and a refresh token. Save the refresh token to configure your SIEM connector. + + +### Step 3: Allow your application on Microsoft Defender Security Center +You'll need to allow the application you created in Microsoft Defender Security Center. + + +You'll need to have **Manage portal system settings** permission to allow the application. Otherwise, you'll need to request your customer to allow the application for you. + +1. Go to `https://securitycenter.windows.com?tid=` (replace \ with the customer's tenant ID. + +2. Click **Settings** > **SIEM**. + +3. Select the **MSSP** tab. + +4. Enter the **Application ID** from the first step and your **Tenant ID**. + +5. Click **Authorize application**. + + +You can now download the relevant configuration file for your SIEM and connect to the Microsoft Defender ATP API. For more information see, [Pull alerts to your SIEM tools](configure-siem.md). + + +- In the ArcSight configuration file / Splunk Authentication Properties file – you will have to write your application key manually by settings the secret value. +- Instead of acquiring a refresh token in the portal, use the script from the previous step to acquire a refresh token (or acquire it by other means). + +## Fetch alerts from MSSP customer's tenant using APIs + +For information on how to fetch alerts using REST API, see [Pull alerts using REST API](pull-alerts-using-rest-api.md). + + +## Related topics +- [Grant MSSP access to the portal](grant-mssp-access.md) +- [Access the MSSP customer portal](access-mssp-portal.md) +- [Configure alert notifications](configure-mssp-notifications.md) diff --git a/windows/security/threat-protection/microsoft-defender-atp/grant-mssp-access.md b/windows/security/threat-protection/microsoft-defender-atp/grant-mssp-access.md new file mode 100644 index 0000000000..6e1bf6397b --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/grant-mssp-access.md @@ -0,0 +1,133 @@ +--- +title: Grant access to managed security service provider (MSSP) +description: Take the necessary steps to configure the MSSP integration with Microsoft Defender ATP +keywords: managed security service provider, mssp, configure, integration +search.product: eADQiWindows 10XVcnh +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: macapara +author: mjcaparas +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: article +--- + +# Grant managed security service provider (MSSP) access + +**Applies to:** + +- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) + +>Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-mssp-support-abovefoldlink) + +To implement a multi-tenant delegated access solution take the following steps: + +1. Enable [role-based access control](rbac.md) in Microsoft Defender ATP and connect with Active Directory (AD) groups. + +2. Configure [Governance Access Packages](https://docs.microsoft.com/en-us/azure/active-directory/governance/identity-governance-overview) for access request and provisioning. + +3. Manage access requests and audits in [Microsoft Myaccess](https://docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-request-approve). + +## Enable role-based access controls in Microsoft Defender ATP + +1. **Create access groups for MSSP resources in Customer AAD: Groups** + + These groups will be linked to the Roles you create in Microsoft Defender ATP. To do so, in the customer AD tenant, create 3 groups: + + - Tier 1 Analyst + - Tier 2 Analyst + - MSSP Analyst Approvers + + +2. Create Microsoft Defender ATP roles for appropriate access levels in Customer Micorosft Defender ATP. + + To enable RBAC in the customer Microsoft Defender Security Center, access **Settings > Permissions > Roles** and "Turn on roles", from a user account with Global Administrator or Security Administrator rights. + + ![Image of MSSP access](images/mssp-access.png) + + Then, create RBAC roles to meet MSSP SOC Tier needs. Link these roles to the created user groups via “Assigned user groups”. + + Two possible roles: + + - **Tier 1 Analysts**
+ Perform all actions except for live response and manage security settings. + + - **Tier 2 Analysts**
+ Tier 1 capabilities with the addition to [ive response](live-response.md) + + For more information, see [Use role-based access control](rbac.md). + + + +## Configure Governance Access Packages + +1. **Add MSSP as Connected Organization in Customer AAD: Identity Governance** + + Adding the MSSP as a connected organization will allow the MSSP to request and have accesses provisioned. + + To do so, in the customer AD tenant, access Identity Governance: Connected organization. Add a new organization and search for your MSSP Analyst tenant via Tenant ID or Domain. It is recommended to create a separate AD tenant for your MSSP Analysts. + +2. **Create a resource catalog in Customer AAD: Identity Governance** + + Resource catalogs are a logical collection of access packages, created in the customer AD tenant. + + To do so, in the customer AD tenant, access Identity Governance: Catalogs, and add **New Catalog**. In our example, we will call it **MSSP Accesses**. + + ![Image of new catalog](images/goverance-catalog.png) + + Further more information, see [Create a catalog of resources](https://docs.microsoft.com/azure/active-directory/governance/entitlement-management-catalog-create). + + +3. **Create access packages for MSSP resources Customer AAD: Identity Governance** + + Access packages are the collection of rights and accesses that a requestor will be granted upon approval. + + To do so, in the customer AD tenant, access Identity Governance: Access Packages, and add **New Access Package**. Create an access package for the MSSP approvers and each analyst tier. For example, the following Tier 1 Analyst configuration creates an access package that: + + - Requires a member of the AD group **MSSP Analyst Approvers** to authorize new requests + - Has annual access reviews, where the SOC analysts can request an access extension + - Can only be requested by users in the MSSP SOC Tenant + - Access auto expires after 365 days + + ![Image of new access package](images/new-access-package.png) + + For more information, see [Create a new access package](https://docs.microsoft.com/azure/active-directory/governance/entitlement-management-access-package-create). + + +4. **Provide access request link to MSSP resources from Customer AAD: Identity Governance** + + The My Access portal link is used by MSSP SOC analysts to request access via the access packages created. The link is durable, meaning the same link may be used over time for new analysts. The analyst request goes into a queue for approval by the **MSSP Analyst Approvers**. + + + ![Image of access properties](images/access-properties.png) + + The link is located on the overview page of each access package. + +## Manage access + +1. Review and authorize access requests in Customer and/or MSSP myaccess. + + Access requests are managed in the customer My Access, by members of the MSSP Analyst Approvers group. + + To do so, access the customer’s myaccess using: + `https://myaccess.microsoft.com/@`. + + Example: `https://myaccess.microsoft.com/@M365x440XXX.onmicrosoft.com#/ +2. Approve or deny requests in the **Approvals** section of the UI. + + At this point, analyst access has been provisioned, and each analyst should be able to access the customer’s Microsoft Defender Security Center: `https://securitycenter.Microsoft.com/?tid=` + +## Related topics +- [Access the MSSP customer portal](access-mssp-portal.md) +- [Configure alert notifications](configure-mssp-notifications.md) +- [Fetch alerts from customer tenant](fetch-alerts-mssp.md) + + + + + diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/access-properties.png b/windows/security/threat-protection/microsoft-defender-atp/images/access-properties.png new file mode 100644 index 0000000000000000000000000000000000000000..aa284279f96d9d09473f483a8519757297790b37 GIT binary patch literal 16921 zcmcJ%Ra9J28zop+a46i}p>TJ1OCW*5g1fuBy9N#J0fJkA5Zv9}-GVzz<^Q{9&CJ6* zbgzD>;?&~SJ-3d0viJT@?*%nrUuFUTi2szA694S+^(_0| zKW)kJ;u?K*_szk6`<$=O&1S$&*NCpR4a88a=pIM|GfK48?JRS4c6Klli*9#!C^<*S^J;f!hFN_xIxH-V@7pQ@ zRceR#y~39--%eLsXOihuAy@n|4PtdWTc)|ay>(=4#W+WD<|9UvmDuXt{?|#!|F;t) zI^1wbZ`9Z-AT&rrj{ZBC7}7}m$X5&bUN}|0gOTI^*&9T`=YW55amksQ7JnD^=JD(Q zHwaaTRH@brKZm@tc!sv6ql=6#jmpcwpp|C(W}Ua_+$Y?b< z@9mjh6|?$&3PU5X8TdB<7J6KmBQvVP4Ej&ocqVFAKTL{BM>^jgWUmrCADlDT4BOW{ zIyXiAp41-)?ENHJ^nVkJQaRn(*uJFwn>1~r*xswzWYxiix2+1No5N3S3Awp+Wbccz zdsWTrDad#%a%N^>DJdy(uC9%{Cgwxs>ZPZ@gW=JKZ;obS0yL_%O%KHM^s<$*1^Pfy zoaW8cL zrS|?K(|Lg~rYlXh+8b6GLj20})%x}m(8D7`L#Zh#CQH9NIQ)3RxGOYQ9vd3u>-^t; zKWP1D4IqtSDn8AYUwvu>d)=N|QeUC#zec^RK*sXrZc28qkn9n;{KqnbA|vB&?)%Zo z)sd>N+S@UwKSS>8N@pU}>$9SyWH2$mlhoUrqJ9e5+vf9?OBT<*(M~I#zK{5LwxGGG z*yoL>0sG9AGi3jJ&&TTb7j&Gv=i=XQbuVJM&yYvg$?-quf4qKw_AmMd$bI^hh%wR| ziDlXohI;il@m8h9;6n|d@KK2;^FIAVRjmKosXxq{(r|aSM&wV3r`7Rt+W9tvK-n@o zJUko&?zhOm8_(s1HbE`%eQr*n76f;6K7FfRq#Lqb`OTR7@G!8;UZt)ve?v5H`5y~| z&xNU&wE@{^k5_4?LrF;dJ`Xjs3kxf#fM#44R!~yFbP^_2>UxJ)-$X=8MZ$aUfQT1N ztbk?(evN|0(UwYNGK|F8;g@H}>JBCR*-i|Xgb2Nedxqk(e<;>mdL=RF&RYLpzj z=jOk@Z=Y=UMPFU#zK+g=9ReM7MLJg_OlQjyWiY{VK5I=bM{3?-2i8_ryD>>~$8!+h z#bdv2bHbXS-Jvc1AFEAF7`f-~cZvKsS}JM^JBeMXTC@0C|Ng{kX%T^eET^bge_h!j zhMD^~qAGu&LNd0@?^dZz>bdKEmF@p%{&*ShN3H+xahB*b@)>~Vl3^&R^2xN^ z+8`*1#ZMH6fnO{TJg;R!)jWOK>IpxMuExvpU&md3zBy+;QZHTIT!seSI9E9zsN4~7 z;vz@i@ASugn<|ve_<{*%SBJQxUZm6fv(9(`O=t3AxiLD0DIeCRx-tc$CtQBOeWMl~ z-r+1T$@98MF>PE!(~SVKkZ{d9TyyBD;><#lv~qf1KteMYk{&?z}CyDBiE>^xwt|C%cdNj~l(*3i%(- z{C~;MdIU_lsDs0I{QjW!*7?19Ww2Ap;*RFp3!-cwpRTnvvvbgp-wm(wJFhoK*Y;ra z9nV#m%BaMFwCZ+q5NDJjzOx_{c}KP?ntOSDbyYW-1U8+n-gRB7Fb8w&+ooq4i(XXj z8cuHHMP0U^)L&15P2KeN$Cpg~obLjz!$y^-@z!dx@uc5K1e;du z2g1=|owE2YWyEED@{|>@nKVGn55gq5-ZOFj|-)EnO!!L^-+xnLk2;Yn!C~N0o3i zfo8WA?vMFWnN_bJ5dO+~JGsQoprZ|}{fP*bZ?!wq7Q_%c+-lx9Ctqo@YebCxB2LaK z0nj`vOF|{$k<-#Dx6}YL_O@Nj)t4$;DIFcnl*;>k&3UEa8JVOAKJ$cjh$ZCb_!_ln za#o?ebgESkqBK!Zs8e}Slh>?5B`0?n;}`j!&f!_tYF@DT%Qf2N_~9qw7i@xlC3zp4 zf(YPKCcBh_K!eL*f&aUoTUA-vWIr}^gB%>Yg!|u3aa@%)+52;WucZTukyn% zElNzxicZqM|B!N)SoggrA-Vv6@)YRDLfrpTXF9Si%f5LY#P$J|&|+8In;a>ntwBC{ zdw2=knH?*}{%D$}&TdUR%h_}pUB?xzwBm}#Vv?NSi5m9?%^)8K7k8NA3n4rzp+VPG zO#(vEfx{|l445sP*9L4)2kmyTzJ~uR4Qe4@(tBuHexXqjk7O5l?6z;iPXIV|hejq~ zVoej^T@yg7l3o_<9ibdDout;*FO>siZ#+3ZHi2yY*vyTG%N=H(*I5Sj-QG*ASge7| zEm*^1_w&jqvc4MA5!?(8)4JFGP{o^12>H$faWVqH!63NnV()u9Gk(o4UzXSp%R;!s z2f%f4wv;JmCMJVVt|zC4$vAubuEoW$oW0LODmz`Vr$%nAnu&G7XTt5AqSTq zHq0*ESC-`SX@h4Z~$o$n2IW?JBpojg}g% z(^^{r+UP&4AOY77sKS zI^F)^qJ*4GAWn9n2K*nmXzs2>p`uiFE(K_b&p!Yt0xmMNwH9L`Tet6MEZ__b_cb(cJ} zPquV|Oe3Rb!^5^_UtyH&B49^gn8UlGp92B~O#T{NkLB<=O8jy^F(aI4_jI;3C`80a zdn?0~&K2oUz9xi(m8~FXhfvp<10XP2jV?13`i`;o_3fLc-CsmO5g&so!n7GV5?(E> z8CRt-?t;N-M`>5L2Rsg~dk>#bm=}+GW8!e^F;! zN78#TGCYI6t<;Jt;fkV6!xJ{kWI8QjN2t2DAnPo1$LA^87TAAL--#p?PBh-iccHSP z)izC59YsPRiv&+p;<&az48=bR+-U^5l^F)|Y!omxlx$hGe3K=U59tkH#+JT6Pq!z8 zokA3>Ae>c9Kx~qBAdwl#fEt& z#^F|Qpp-Ff8wv=!pr5#?2{1Tqe^b1#Xyy> zUlV(G;C%kmWcA1w+7NQr!T$YSmMnPt^_QF>`SZef4;Dee6JHL#sTSti8hboJ{0)}R z>{&bPhFLJsNfxd)!K#3of^O(m4~nKQZ#wqB89ZBC?*#J{55}8{d09gy8%{qH8SRmY z`1Edf#E^0iQ=YQ}moid~VQI4cImsV3e6CSx0vG%J0{*C;wxbM2XFI{89B$wbr=lW< zqZ662v*3%N9I_iH71?iyG^vAN607EyVpB=-vh0jJngb$wXmcZBeR+Hy*sLWNCEomC ziRkM%FVl;tR}%REP>I~WnGE!Zu=GEIPhMGfqSkW zNujGIU$WT0(~rjzL*w+zKx?hQI63o^MQ_9wN1ng`O2_lppfL`J{jh~51?m0z{LA&o zhTVi*Fhrn@NVcm(xd(+8KBc00-D_rf4f}>n=ZY66bkT*miDD?{`lqOSNt z7I|GM2V(2f1_QX1rHNEwFub<*9J0+@4vMUP=vN@?4DZy2yi47i%#${=6m!{W;WxvRLL&4{FGBJLgTK7ns<)2NY zkHICCxGvR;fv1$YN_z%eq-G~(>^6{18yZR4+(VCM9L;dps(|!yXEGyAv7sHI`iZ0P zcSKGPV;Y0H!wjOru1ZL1*_~h4C{O*~heu*Bu2LA|PnA^O**AbfDP8y-K+U%T0~QW+ zd`0?fLm#_2_de$krqWI^L-8%t-QaE+i@2=7%j;=H)@7EFfM4XY2n?v{$b-~ZR5AR5 zYV|N&V!vycyw!<6(WH{JyCl)>io1e$VCsz1Q#B#CseBg${qY8EmINjxl5gd^(QCMvePGLcgO-mNocKFgI z5P^@~;fkr6^WCibd!E$i^iA1aNe33f7&D1Hnh^8z7-B2~&SKxjAA2IRvS%q^$X>7a~uiK;&_$QjAy3X0T1gE$SV# zdHLkTtUM7VCN2)n;`|!|3oYU;+-%0jQQ#EVx3+hH{0$yvHwg)s(!7A3eKH*d{5hcR zs0UEV#f4<#HfaV+7#!q5*o!C5RB|!NhyT&{`KH!qC?0WSv!oN4bJGRE0jvBik7Q2+GkRL>P}$~ z-=u)1*}<>}Xpmgz&VHu}$de@6CjruZi2mu}R@-N5v<}ssn9RBFIS z7K(>f)N+!5c;@AbL%SB$@L!m^u%Q23zWQk8jc+JWE9j44|?Ae zkBRIG&S)MBH-LovG$IbIqS9vZVy`hrhST=T%$RdeL4l5I7Z)g!Ty~?kD7L8*Ml2h>Wpc)PtedO`SLsa zXKQU~iB|XLYqp@`aswk$G2$5XeZaZ!zTZDgsWpCtxzchvK1Ot(>pHa#YA5wE77#WY zlmL?eu$ZhPu9IImMpk>pH`2F_|UNMXvkAcQOu-gitYAe&j18pd*(DNdyQ9u@HOb2PGF* z*SeR5KBf<9lA$nqKAJeESzIok9m@~wv*x5}H7ZOoqG0cD*(+Mn;)amf=a9);PNR}V zTj(rQKF^<}@pD5MiXtPdf}PZI0gy!KCm~{RiO7ZHjR9mG*gr)s%gU0| z^G!s{V1=Q8D+~f4^vv>0Fv>1Ha5KH~Qw5+~d;}=~rTb}+$?81qXr$QY11{FZl6h{e zyga25?Xp`|sh|0>O~j>Yw#SlGf5;{vH~|VnjA)7+z)FmYdqVdRJ_K_XVI2@Ds0xq# zI&1*jVs+RCL`!Q54IJz}ShmTwsQ8>LaS{c6R=WQ=Rv8!87*G_HU`QVSak^N9bJhqY zC}BvBi~=7Tae5*Jr^ab7iU^h$YR&Ap4QZ1fx-~RXg=``|ylHRwcgtUSuJk|Pd?np} zIlwNECN+RyIjz@I*0LKDo*tT>twN)!&Nu`;8B-cCIT0hhsv2^NW^l?T50$zB)fjb7 zQ_zbEs5Q*sm=CH6=y29ikN2^yQXMK!Fy80z#HxJ`i?ySo_Cx;8p%k zP*d>cZt*og7R*?7U__1AR_lRH-A)0+C@b3;{8?yV0Kjyb%@DZl z{MlP9+8A>)$!Jm{hPW^?ziSgyBEo2#>J)>rlAHW51}zFHuHT7k-i(Nn$tt20YLN{s z$2}FBB}@sEzINUbIXGi6y(T3-HNq{}Os0+Clsd;ah-#A@}udsD|*;E>oT; zna?Q{t|{5&$hM&&^>jf0)ZZt_tImLFXcHR>X1}{zAyINLiml7(N;knEpo#J-uq;&C z95xf$Rx?3k+qdM@KwEI!z)U4(&hgyHJ3F2#42Q!o7C|HBn|$I$T4y)@P?gmvoPyKO zfy)nl<1%JR#9OIMVbGI_VyA|kleLvJE~=wH&90(PWuG8UpVvTU3O^DhFt93YTq#Wd zlU}W*+(Hw(B_CKMG*i3NR)WI8njq>yTqb%=Y?|8op({^!=3Y5)B<-aP`P_Y3QXlgN zAuq=S>6Ab+`US#t$r=!S9yJGPKDDh7lbi#w~q2GRyN6%sB*kM2E*u`!TC&SD!ET*z*4MB!H)f=}SKp1Zbim>?I*nx3> zB$-ffma9kt$>A*GT*mujvrb8AT_#T_Kc}C%KufrX*3pqPKX#1Wq2yr^;JZ-Yhp8BF zoG$+E31QdwBX{Vb6xuUDl4NYxjjL_(@B}L>d5!x2$&+A%`zukHiOiat1_vU;A#C{- zq@Q6kxL z^~*(H31~@fdpi1k#VdM$gd9F_gbhjNnppUY|M8&*q=L%X(#Qz$F4BhLagiNxBtR*R zVxa^JQ!nWb^ti;=a2T2FK{3B3KhV-gFf;bA+F8gc!%eLLpn`RPhC_H!G0g_d@PBbI z?WEQPbEgV!Hpj)i3omNE_dJITdio;>tt0!6H(JhcDCJGM$M8QzISp85Sqkby4A0cN zq0fdQIdxD_|3d&du!UZ)-9CixBItg+Jzph()Hw*kV2wieJO`X$RwTFL{?SFd4qzAe zo=R_pmoNw<+oPSOKspZmSoBVhOup-|P>{~fa>NAt_2E~Ph|Fc7zdf8tiC7{ucq&D5 z(DYdPwT6vc7nVz^8{gc9+&DAn(#V?9@g&(1k%A+)M~F(lQoWzY78Uvz1O9abHw}%9 z1Qc!OXTQ8niu%7Lc|{?u@;NO-!AXFc^F%!FyWSAdvqF^wMQnPntzg)8z@YJJNIuyS z`cpXfF2ICgM-Y5N4_~UH_x^-BfgCl|5r#1W4+V>1MzegbJ7@RkG`jU*3>EoBbK~(~ z0jw{yJNg%*B%R!87)Xht#terHCgJ0;0()7t*MI_B(YX1edbz!QUL}OayTxYuHNk~KuiW3 z!AjcA0uPL8vW(D<(;-wyKR{?yqSx9U3IE&g9xO(^4_ywX@> z;5C7Dyy9_P@Fh>~w^QX()9q=Pq{dpA{?QGFj1!giYS9)R!=bl+XJss@q&ko4n_(@6 zwNln(jO(VQ$LCsm(i;~=BZ}VwwR_&T$Cj7XtY3XZ<-eC#+47jVYG|bP)w}ayB5voT zrKa}BOKDVs?Ho@ck4Uyt;ZsJl%-Np`$=4sh^E+?Ly2qWZG%LEfHC1Xi4ja{Aspf#6 z+=(vUGckF7kmTNOo=;4t~IoirRtUx$N14)L$8i2 z&!NMoLfM>v-Ms?)yv5?4lGu5D#)r!>#zDH?-)xi1QyPxtpcS4X`fnfO=I@|kWDegR z2Ely+iOho*Tv)+@)nqcfMaa6~PQ}99bBtdrod{_kGDw-x1oQT3w0DnDg-W zNWDX4T7MBS@^p1cEUNz5w3C4DU#^pQ2i1Eu{dcwB8u+2p@&bI;!>hIrZq+R$>@^ za74fNQc$u=1@Dh%Q%OtnT6rloy|fDva9QMy<_NFoBH8Nuei3l>(L^H=vLIZAuxPH( zW{VxIt(+zszkQvaTw;sL_BcKMl4q18*XM8jAQp8~l8Gf`z@m*wGwcZ)KG$p8F6JX{ z?uXD_Ca3A_YI=IM44hPwjEuM={jo&Kllq^prw^HLbMq#57_^t zC9z+|#c>N|;u7{o(lWZaY_&^FDvH;dRmtiVpf!G6HJFVNK94y+-(NIuGr;CnnXh-1-xvTRa(|J z&F@<~|6J4fJeJaGHg>DwlwNmSrp3MbJUr+_g>~G24W>(hvNXKi#M}|`l_v50U}UrW zo}-5T3D2?@3s9#$y6Q>s#$M(i|^56#w5`($VrGM+6k3}Np6GmjsBmZjO}btl)hdUlLN0eqZ;!uB zm%6i(Tx8wa+p8z-Pq3!#?(TX-Qqs`SIDMRe0bRHXd=36q=XR#;+|!8NOqDuiDp+JY zt%P;j;s_kCrkh~T7x)+n(=A>`sk1ifb zvIk>H&AMDgolGIW_eDm#=fEa$z`JDW_8@#WebQGV61py5Bw@60jZPsGQ*HD|;2#!x ze%o&wF4+bWSptR>w?lfixUi2#IAZj{=C*2T!!=K_psEznL;euK`ToUF_KNL249|J9 zh#j-uZceOJVz#<7VdLUClIG2as16zW1jU6>Bq}6K4WzTY4&c~Bl<&S3mHzQMO=0&_ zina3dhWdzFeQy#3-(U%+uleZUo4@CJw5o+hCStQpZW8otUX zTU(XtqC-gxWFg~Qzy0wafgYgWi znNsEYK3@P7^DHa_Dlyxie&gd_L>>(-NhmP&CnLjJQg=2!=lvLvc0*YrxF!!gXwP6L z3jz}Yk^MJ5as-0Ha68RA`4`l={TlqnFmBUCM9Nl@vt$ zmhjo62$8+ENy69SqWV{i{V5Cr$m-kXTfwT|qxBi7+5iJGb0;*-cFF5SxoNqUQ6R{x zY_BVbM&E62etvi~Lz=^}8!6F7N)E1^=CH!+8S>am8#A~ zwoLjg5fB{F!lpNze4defK7mLITG@%?1fe8Inl;4o(myt_aj_R$`ql&> zT1}$T${q*1hZ;k(K< z-$KvE4iJmwdK;vTj-UX0Q9Z}8d4C~`lPNZ!-8JkXS%nYFfC#nB?HsAaNwsflOAQZ# zhvn54$rSR>J4lLI-}fYR z1yi%~F5o^@QaH#~t+IF>{8J;lq?96{|2)fE3!wJHR{&Loz=G$hOj9wF9`kwh0Mh zKAKbk#z@5@YRr6tHY~PUV$90#CIn!lIO>n<5amMHAt7WJp}68j$-Njy{JjDvGugtI zjrKXlMY@bHA>Vprp;d2kDpR{EAATuEHhfYustWs6^9F6W^;Y25^`qM~3>l?hTcjdb zTe9*3tj2l`V&=)e_$Y2mk&ULdPY@dRg#-sUAoFL2&BZ50n*N6hDpQsng z&h@AGHNV?wx*iOLe!p1*N`R}d`?>DW$OtDdD=vBwPQQnuBa;zDzH&J0_aNNyi@zD5 z1uY%1Mat10XN1+if?jBb(RtGJ&T+;eAVdl!Qj04D$EyLPj3Q6xSmVmD8}7L~;t8r0 zjB)$YR01dmf8ZfC1U%pm|01=`|ML^saku?(k8eXb_Bk@c4b*{T?q6PA^a&%42Ti(|0vj6d2yI1a>B?PEe?oCL7`o}ATD6jNhKMba35Whp8rgT^9U#lJqtOdVH{#nfga+Qi`QG(I-}lak)C<(17)1Kb&fAFy;I==6CRF}?+m3gStuWIQ^n@SBQ#m==j2Vc zGMnqC+LUTDA_u$|neL>vSO;0Zv$C?=lBIs1=KaaBI&~ZKb4XdZ5xLqIiJ&>Xp1;X4 zi!^nrh)yyctncEy_$l zG>(7iqBech`L~6-x-!w+8GVF-CW(I7eQxM};NqLItdLOc&UjaUe7w+=@QNiqFf%Y# ziR^Pj2)Lymt-FP`AXyaQo0t$YMy2P|XoG9*$6ld{u(%^@Bg1HWxA)i7GCD%;OXJL$ zGM&st@7R|mn#}Bytn=8^2&uRBPLwm}I121LZew$cb^eQBXPcTxg9B|3-j}_OP*kbH z$8|FZy|lkMOVi1ROY#~-NPj&?TsA{vp$Bluy3=@zcI5? z9i?;okaoP1zIIj)#KB{QAf9h@=Gqzz+pRz(B1tJJ*ljWvMolAh66I$NuYf$7-XJmK zEFYfS?``*1g*+pfD9f}ud-btG&>zOKt*Jv`gUErZeEaU7#ehcXJ_v)-pkz|55t|CX zVZ>B`E5gJj?`-16mcV_OP;30vpmG2H$=-F^$@hbdNtHOsSG!bw`e^6Xk;_q%+81)% zZdll^0bvSz?~nj4o-{m3Lr1MY;m*Qef>Zqs z?cYPzyl$|7jcjnoygNv(por#@dHFU=_Co&oHV zKw?)$5Fh3Ij;?c8$V}z%sHo%|SBAd|{h?-->gyvoLBhGaK5=$)PLH@K6^Ga=4jHr_iW84bbY z2D^%_4aM?s}N7^@myN-716 z&O$=?O3-$tGiDPVprn?I-gd>klq0kK3Rps<(rZj|rRR#O%UEko%UC}N_)ojlG)B71 zuK3UU6$$auj~ru?a5gKf4&a}BtM6XN+KCd`8L1xlrTRIkyvA==Kd2!BoMdFfF&i3Fa5Qr;RXfz0x0b{_vPQzV`ym$saIyDWh?jp-$%hhJ zYFweqT?(>@AOpR#{&6m-pf5pxx~D0=A{L1`utmV45>&lFQfeD(p90||_z=kkd03tS z1RhE$%vI}zBtU)$0~u5lz-mUcr<)oJj6z9HjxUj1_D#x#S`MEgR!~{bLgFDbU)vmK zo9f_;!a;d7h>&KAv>f?NRijHq&*Hssjh2uA^J7d|3WED_TJ2rB)fyh{b11~JqS zJxqRVz&=4x42B#^9gQ|!?u-Q3_}1_E@%S*~4v&LEsf%@8o@4s?!o5Eo7*1}q>p4p4 zGTkiIQ*@F0sVdjw9agna^a%Y}%ok(%#-6B(%(jPdH>1fb_Ty0YoK>I_#zRO*2?!zV zj|EUje4-|&=Ig3ILB(54}6^!FHg{%9;WTe&b z-0q^OSa7En-0&$dPE5w5le1ZS{)YkD2~A7Z*J*3IaXt1E7y|;(va?DUJ$u#Xtqp9= zl)&Y&&q4H68fpSG)r|b8x-Jq)x4fy+Vhhv89I}ygc~$GY^;ea|6>XHV+=0m2mpKZg zU8wLF!ooWVN}7tt-@1EbEW+ouw}XQnUKbQhx}*<0{)$<~8r<3N-&z7TY>PcJ`5C|KsbGG{<9~TChX#golS|^4DWRex6l&`7JGFlze0wrodI( z?yRr_!R2_|u|^64eR2hE_!&jcMZz9k5>H5ezVX$kp?%!Wq6hi>DcHFy z2CLg>SVO020rayvcupd;$q&Y$kBe~SFYg4F^7afa#n`|cExlhqV-}v)WxJ-L<6`5Y zAjkP|1+>LIJ8qzs^D&%7SD5ZjtDEVGYd3`Q5SMqb3*_x|bxjv5njWVxKu}Uhor&Vb zdIz(cuwghvqNc7!U>W^_4y|ofORkHsA*jjy1(pPwOcSq{Lp5^mcGn0iM@ZJkBcyA! zG?fg=PrDB%E68Ks<@3;5CEJ>f&`E(Rr-6XBPb8klG{^ne^REIx?! zX}S{47Y!;pK&qnToE2?^ecRAC!p+E&92;Y_A^2{4#lLO>y8i?zWQ-C ztIiTW=z@j@VbyaMqpnXoPdE@<^YbuyQ>_54R$xy%TPE#-4fCwn)=P_-5fo7uY~=ev z{!Se^_Aq%@KARlZ5AVXRhJylaS-#_t41|_LM}`34B{*w%n|bk&ojs9mbUJh%7cXlF z71{NSz&b%Z8Aec@V*<=?VZ5;AZImU^EPtIr%b6E2!fQ0MQ zPQ2I6CN^+tzkfM_RVE{U=s|_QB}U!=)0+xT4DBDM@5d9_oaIN;zMQc1RR;Gkwx4k2 zmhe^0s|*SPMxYfx;AvaV@h|CMJ+lQ|7b{SPPxMC^WN8x@e{of-!X4>*vR2?bh&cr8 zc5xqnIOY~buHhI@*)1y(KWF_b&jam+Y zy=x`R>=ogzSZ~!T;gP0I^#BPD=}^JkcC;BE3Zmfxm0j`5H$!J0os3FD2UMu_uPdr8 zh9H7vS#Jx$)B$8kvvlux^BN}yb;H_^<{+9UR869Lsuzsi8@dx>1Z`dYl*g9@o4MuY zj8Fi@l;0DY6H)1-n!a3WBl94Yd}Ll{()P@gNSUCW=&Cu8=61_-Fh+>NZn(=U@Vf=P z1TmCqt`qwFNX>&_p>GV-lUs{6X3MSLUnkKMohKkuth-EWLox>i%$tfn+4C~1z`Ps~ zmZiJNII1Cr-woY3;Xaq`Uqvw)3dGLoN-lnYf{`}}G_e&j?Zy}H4PxnRMOV&ZjRN+z zsDblL$7m|G{t9VdSbK@?CA8pCNWURqa`_DJKT_25W+ZH_O5v=(gteE!1R(?!j*`x# zEfFGlk|$`jbI-A z%pg0=>n~A3!9*Fn>n`!5WDA&O7B!7*08F?W{x>{8;(bb^QX=BJJ9K0sx@~?AIDM8v zNLFwt&0R`Vviqe(|48;JR6y*<4O}W}uUO|N_~EFy;sm|{@EB zrQ81*Ct~O9UVB*7&Q|zll;mvV22WT-2?E1EjxFe0II!TUIK`4G$>bRv}-q&llg|1ERum^mkz&Oagty$nraK-hY{!e?+&rX z<1=*16Uh%G%yioEB?CfaSIB!;S=L*+^!_C|(WK!AL-F47`R@|^o+}QVb`7@-agti# zfCSugwn_q!Vh$oixK`!2TR5;K>QzEnf4sPRwK%XWe>| z!w#}1fN!2U zeF#jjIsgF#YWhClDndf*kgPqk1FXa{O~2yg;cyyu77A=PUN^{MJXhzE1t}S=g6);l znR<;qsanA^HmW(={5U%F@bh|$O976AB+bn5rq#}ET6x88Je%s z`B$O-KaVuP^7*8t#qh5nQGF%+gp46b&MRMhKn6<@0V6^{}l2L8|AH~*jV h$}KtIPrc{&5*ppft0R9X$Z-w;d1)1?pArT^{}*VOXu$vg literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/goverance-catalog.png b/windows/security/threat-protection/microsoft-defender-atp/images/goverance-catalog.png new file mode 100644 index 0000000000000000000000000000000000000000..69e92ad46d671489baf4985d9dcc5b0eb55aed9c GIT binary patch literal 12359 zcmeIZRZtzz7cEReaCZ$5+}+*X-3fkhw}S94K z(7UTSsHFh5oc(DISwQJ2*#a9Tx}) z5!A1uD3^~r zaT}*V*d7Llm-{n-gFD5ytvc~nS;xD|5by3){okoSu6l`0)7Jglo9aUD*SBmc37HSpU%7t2pED`D zE*L5nu%QwWiNqU6LWNAWH8ygFhKBz296z~J)zacBzb^jH4JFXDc7ryxU14HY9abO}$IPz5M!Sl> zYR@$(@IVL&3E5?~==U^gG_$h8SAKn~#>6Uf?NyEacY8&Nerwnt7&=aHUrpQV+V7Ra zzdro&e(u3-Ig4(Y`Z$hIb)zKoL}7I{__%U$zSH#bP{%wldh_whUbXDZ?ewaF9$NmC zyYb{r^xCb5St#ZEhn@K1^%d{^Bn5q2ZI&6gUVN9{G{Gm)|6}qX{w{$#4D9*dZ_Ge?*?-e}NGl#}4(@^E?`VcwDOcP;7f2>14Z;YPvZi z=8t2cP5J4SOf2+5_xnBfBP~qJoK4?9z2xKE8xeppET?2X2tXJ-f$@5;B&(3cV%V+x z`{xgYOrqyeQJUvz&ER6I2b0VGm~n3?QXQS+N~7KJ9RD#2(NezP<(W}A2vjQcp4B?1 z;QtOeUj;fA`q-nq+q!s_)zHvbyE8J<(pr7cI-V+Ocz-#XEPwFd(U}*T1_@RJTb{F$ z+Ci-PWqvm`49CZOzm?+}xaT|6I@P!wo@$r3I-H|&sQk+r88S=WZMB|u5o-0^fadcT zgqkqW&vSX}?svPbohoTqyQM-tb@Km>_ApyA*WlqV_Ptd-)O)V@ei?fH{jY`Fq}+#8 zjvlv?Z;^?(hMncS1|4=e)9*t~4W*LjzGsPJwT}}I(8El}`zdh~sQ1O5Np^@Hp??sj(`&8j`>H)TeJYs{*h?aB9WK-BlQ zXdSyMzpIH$PE9yE-VwBMu#)gy_lieQa>diyQmHNsnV$kV!+(-3E+0Q#)iJUDjq56n zEr8?Px@!J%Im!y6-BI}=4=Lbg`E-TgkcSfWZ2=-Z5YGiDT<}HM0k&tuH?R>6>0_sR z()3$b-@y&gPJ zKWq&DPWwQMS?zzzIv?;qa+OUbpE|AqK)A&dzgPJW7`=Wse0(RH@{ZJacxNEyk5a?L zGmvKIotM)3AlcP}z^!&G;Lr_+LlB9AZhd=OfqBdM{^$drDVK+3Z-*Qfgk$I#(ALJ! z>98*E=Em`#gB!hW2i$8qxPy> zh)jSpR>3Bc=Wzz*X{r38*8jk!t?h;!H*nMRLKeO$^Z6MV85z0Q=EVjfAtABq|M8~Z z=INxlchqRV_B__+byKV@pI6ri?YpecN#BZz923zJl5y+dmQ>^U-3EIfJx3t-iN*rC z;|AuQh+Fa^IF^D=Gal1;0MIaFG%xMBu1mDs3?Wt;(pZd7%EonR>A|?$n?@YHB~xKg zhp2aEwZ7&NFQ|lS!)0&MU)#TUEW4;S)0H^6rkJktqred=%6VHxdbFQQdC*%5M5FuR zMYLF-4o+(2F=QLdR3NC9W_>E>RQ;JkQ+4ulcqC?*Qdb8I6xezfbUy=z-HeObdTkRw z?&ENoP6?m)?DdrewY{7Z4FtL@w(+LS+z71R4do`FlJXv}9w#Oy4vmeqZ8t0~YCF5Q zSn6wPXkca9tu&TxTLm2Py^cCuR-Wy&y{$(TW;(dr1uG?;tu#%Z6Q0)<-t`#E^0i}H zkWcIShJU;zJ!n6036bgqE2KlAHPhfW2*$R*k*>f{P3e((ZF>uCO%k^l+&*JlNPM%0 zA4cH3iAv)vpdHy;Ar55L+a_RFAhqqeBk7O`L=`4={J&{t;j?$$SXrH|MktpC7Z17p zkAqux&b~`CKICdglK6n-=^V)vq@G67I>wHOP#%Gv=Ort6*K~_uJ-|suw&UsrzGZ1= zST_q!M}#r>Jh+hV9VDZSn~G`hWqBtKkxP99oBO4bYB)bSgF7Y$?aT9$ww2j z#N*t2f-GwKi{Hby_67|?UblojJz~r4u?s6lNoLMD36p!m&}H4l*P>2QJ02OYL0Hf` z;)5VJPrsV7Jo~ya-|{PeV19waB_n(f)!^;dgPQ~$AL9NkjJEdy@1MxfuEB!?#@Dg4 z$}1w#nxiA$#1@W|aVj{rCOYY9$B7uO*#aWhBO2`g)Td7_6Hw8EDOdvBI-l_(=?gf* zkC1{VW37Bwu!e)ikw=NaVUZWUDQW^C^z>d~1vuaPpkRXN3#0|-2;j=y1`bNK|54Qvb?d&+L62bLQE!KavRAAh8uSCRWi+kT&h!EuKZZpr|&MrC( ztdky}=-y<y#XhZW=XAbp}i+~;fVP(gAamp7XH!?tu&$h*;IQEMc_Dikri@Ou? zC%&^Pz6oZ)y=A+c}T-U z;`aYc8w!xAK`Y)5%P;Czybrvd=*oyR&nNSHqYcxUG8+kK&hm!M;<+tUss=ii&)}8B z&LXt{wr`rRp5Ky$O3@k9(uCYkufYb=#~NB#!Ae*XDHipw6&KOp{oc}|i|H*-BADdd9%9AC({j|^^zo1;;?$b!uu@RG9O5%qKLtqPItcXqPPEAHOqeQq_ z@jTnp8g9R_p_k3BNF;qyVF%vwB7sh&RNZiIbuowIBpuTElhn<8Y9purbk;{>2N}ZD z66@FqbG4uv=0;BgP%U$N+~%1*Bhj?D`mIouymNG5CJrA|42&jIv2GH0kDI3!NB8gS zCz9E#AMcrJ`T4RNXRD^F#DbN7S$Yf^E%(WD{xR;z@UsVx1@uRH@lqZ80#aO zilDxh+lB1?9FI7(Iul4bRneu^o$q4^_NHQn*c2})n@ZG$&D4=MFtNhdUsLz>xE)J_ z4_i)jQn32o+hGz&lXQf*a*s{JaA(LJA9@Mku%rfh=)EX#D19&YatUCRR2=vwLQkv4 zO0#u{RB69a?W*9~=QsWhEA9~4|En72ik8CD5<9Ix`9ELH2K z=iz?+#~9m$l$4F{QAQsTIU=bk=*iWQU@<@_mJK-Fndp4yJ2&{DX&> zf9{u*a7itBOv~+kPxu#AK;q`c(e+_76+=5UZKS2WYI920$<1I_*&GRj5hq0MMq)8o zNan*6119S?qtAZQZH<$cWqaEOB_S(YcIPug879uuDqGqH^ zDjK6NSGeZ0+j+YF_zVI=?`)NQ2aIGKCea&jKp1ylZoTs%W0Ss~f7>C2dh1Lj0Wv=FFDyIHJ zPt_d~*MqXO@gAP|APi~2BV6_Pl~<#jeDy<-m`NfxQ{1)Lsj-z77J^>3Bdhuk0KNCd z5{olk(nxlgPVL#`J6(q^dpo)YR_ZE=sF}NG>O=I9div|DAUmq{G!er_s;nnX}vY`1V>8fK%Zn?#9l9yIHN|W!) z{Zf;oR?)ORGQqEP=GIh+a{o?i{G4}Z2@YKW|F*R}4*ZX12+18RIwQk@pO_3;sKRQi z*O{!2x;fCpWYfU>2h{~e5mZ5G^IECY4T`*+ZDsr8uA>Ib^&}CcepLJ%=osm25`7U3 zkrWO1^O5x0rr~;Inu6M%h!OZs#uSX;N!Ba=Y?5#Bu>Z?UF%UP`)UXgD503v0C4rc2 zyE?-=+rG@(iGEfv!(=e`Qdy4Xnp5))HB8jjO?K`->GjP4kg2lp9aGz+XgBzrC!5RI za~0ghc%HhOU^8@?HTap~wfd%mmvzl_L^RD@bs3`4==)7-eB>hnQE|bQdQF0C4(n|; zjB{Ep;TuFY#&@r_il=@tL<+PaN5<`}l#rYpEqSYiVIK$rfvgnw1AaGGh^AI82^&}B<`VMszjx2F$KWY5btw94eL1sa zRCfK)JXNqKON2G6t_|^2cM-~Yz^Y){>sdb zwsy#C6v=PeV#nyF!L^R75&L3##^s`u+|NE&kaqE|l+EL2%f&X06(~iU@KG?1b+Yo1$(4hC9^Dg+;3^eo*r4XbFkqk%6wqpu1>lbfDZ4hmSjFE zKta`w=4MY`KHf`D{;`atuwk?Os;}g83=rNjXDe-t{ zWk6ZSFEIicKTUqShIs(#?2uekuiZr<*e$q%N2ipL3(bkeQ_}X)P2}`-?L$OiV{B$s z9^NHUMZk2f=@u1>ILeSfyl`IB)ErOMlNRd8DH`cM4=MBM&9rLLZ? zjI^|{M88Fyin_YEk57-=NX5bG}qdt9SM9_qh9!exFOaBJ>@0=w85n~n9Pg0z z)nF7=rw%zVS5y21PN-m;vei04l2>#Kh^zI_s*%6(0+~5tLTN08-;#Klyayz!%u zq=K^U&Na8}ILFHgLbv}MJs7CUkEzS4i+p#FxvH_^VB+)!Y%U6)O?vB5O!OwtEC*Mp zt_)fO7oS_5o;Uo>%>bxX@I>AyB}%`G?S|llrR;c0=&YUSnE!2zWT;VDof70&*a=E+ zkF_M#8xd6+6oG7sD;JFM0mFL(2N+>bb>>-stm$ii(M|Q(wrf2<@5{bDruxd(gqyvX z(ysK%7?*>SOUNC_%ItEhFTzepYAU+Jr37tc-}RfdU7kkic%T;>&X7R5z(eb*g2^Ig zFiD1PG|Q7fzoxg{H$(oZ-MW9ra3;=*)3Aj3U8JPc3< zFf#3!=m|k|T*2|`9hcdiw6}2yN}*hQUz3xz;DoLUx}K@KjrN4d*a~ph)qP=n`{H<= zg_CRkFuXsk)V(yO)bT)%#c@Zt>Kpi;_rtdF%duRXOKp8fz`7ve4p}nMs*+ZC4qor2XFzmODS}ey4 zTMbPvTP6&G!p_mt+Ik8Xm(-93l3if?ACADqQXmRj@D2=h2jGV3{<*YCMFE)n2 zH)i|kFO~zyTpyVe2_txwY$q#U1@*`>SLsy;uz-|ZtlASRVYJnuR2X>MyM1L*xQHyl zA;2<_P47kSPyO10GEklnc}Q>}=Q?j~ZhG+7+I{&{9W9+mE_0r^s$3uAiq41}f9`O6 zBGHH7G_R{4-w4{%>$^7_oR0hOo&^NKgse*mri6SO5{jx{#Z1Y#^(CQOGmijw7+J@E zUSA=WtE~g&vyQwRaQ6H#u+tzf1mbF#+2Dsy`t}l(eR>Ijt;s}jUrcjj%q1dD{p?^| z{`m&XjeT>C6y47L3JuP>DqX7AockFuOo<-C86@7ltuZFosOnPtg@!b^fq?TT#}l)J z*-cR^m(%+pGJe?VZoeMxx$XAiw6hPdfZ-%}gT{+Wbd5Z>b@M~sOZwqqA-Fg|#0v@g z0~e{XL4Hnt^Va@HAAXF<#irv46s10qels4Aj!21Nl(#KPLYbBPEx7q(tMw4XC)2bh z(YYcs)CGH>7Y5fT&wQ*OHhW?+WHVUx%d62Sbn=(6B@Qqr;qni+x_T^U=PwxtW0{dR zHd@P(5-3caq7swvWQrQCHbW;9p@tyizFGNPA^bIEEEzgtleb!ZFcTrAPq%@sAsfm| z{~KZ1DHSCw*cT0x9M{paes{NU6Sr}PZ7@CyJxrvesIC&4hcfqcaoDSw*G9=$NpG^C zsj9H9G9dwut9ByTusq*si3gY$c}R`WSo~#m1lL38iClswBe=y^yokYAF;U#cjZFg| zLrD;vLUHvYIrl{Ps+_*%MkRINev03ogpLL|hyt@ zAWylS(Is-b4(zk!szu~>S_}wnb4VsO&3*d9_;@43hxNpObV`aOMkAlCpEcq<@V9m@3!^1Hm0`|*tKiP-8CkFWW>RG8G)6F z%y(Ig?IsXcyuv=GL(a1pQZn>pjcAD)l0}PSFc@w2NZ+Ys!my6aueD^7Y|ltJiZiH@ zfAAuRxGAUtP8Whe*6v}+k>$COf4|5-qYd}~k3pljSI}x+ugncdmD12`4JC4=AUnxg zats^{MOz>mN`--_s5Rq=@OKIvFwNLRVN-E(VzCH>^DOI;p972~U3sZZMQ;e4_Z}QA z?Wp50tx6u{DiM=m6NZ>HCXb5BHz}%`^J%_n5G%~X@4}W!3@$_7WgA>Vrvh9tnaen* z+aailf9e>S_!0lewjPG0AE%E~hI0~qqnE@)oN=EnDggh+Pvw~fN$&@DiuvvGs;o}`wY8>P!GF%L8> zelKqdR@Mk|IoKK=iHdc8;^CtK$ioKgP(4P+!oO*Shsv(JSR0olDO97}?u7y2hva6H z-1~=sd^H8_9p|N5XAa3ujI@=IT`iSYLw!cBfj`XK&SbFgQRZ)vD>BS<%?3oTwaBg_ zLo>MJ3=P}y&hSoo85Lum+3j~i-Da@H63+#7w3eC-*{67e=xM#h^X1gpO~Kslq4hl> zKOO!!NgI!c#vBgnmYzGQv{^71s|t-9xNobf;{L7bAxi99-u`+_I|3U?YqmCHd#j5i z^3OBTls&ssxx1M$Qlp7s@R+!;ts`lh!y_IGCz6LevG9;umF-3bHsLe&4iY8}gZ6HY zKs5b|3@H>htN>bp5I)wd2Dt-MR=f!L@E&yA0d#CRZO6-9a&k#F zr!p_I&?9PwauVNn{M5aod@dZYwQRo zj?H;X829+6r{oC7Fqo}@p0vlX6K9iHd^c$|J$*jOsTH1Me0rvWt`9p4nx;G@BpgqM z_Ns66ura-Mb#U~qG@-zFv;0woUQ0Yl&hOj&{=Rf70H6^qC0SNimhfLXwWwH7&42_3 zz6m8KRa$g13BFAxiv)RmMvACebjlPnTk#)hR@Mr{n0vIGWQFR(CwB$xf)p>frX=gP z$FRbZ*&c(BBha@kHf!EljkRmjOxPZ(i2q4e{x_BRe`o(cvZt?f+_3Rasi8x%r28WE zkk>)XVJ5G|5DOz%FBpDE5HD9vw7k<@^fQ;GSViG4hcAE?1aQNj3Lk>&!BWSP&>U_h z!^%fi0jyKZlR{5E2yte zo|#dVm6gRMCeBrKgWAHd(G56p;2qbqBp4bVA!nD)Yi~@P9gK6VZA1HYpUHN*>I;!2 z*CQk-YWie_Oeh#2_9fReJONJVQHrO{A4kJZ48rwavh&Xa!Aw4w1i`s2H5E)+I=UL& zN=zJ_I-e)!?VX*n(o*5ny^|L>SWyUta+@?m2XQ8EJVIg$34(!%G$Rt%Y2N4i_ArWV zzCL_~X!i4+c_$_>Acm%JGT@QOUfG?8Obj%N6^q1o|v%k^i0po`?0;f{r3gt2W$XyCAOl3L^&5aI(~pm z`6pcHA9y*Z;-XDnE`|=ZLv{tGSEFoB<7PBjAUtf;g$7J0>Vv*4ElE8c(fXvrMuh(< z-zP*{vT3>Ls1%pfzLe3jpS*Y|SWtRrz$GL!b9B7C_BO0~cs^?<`L3*^GNvZ2MPOs zLLIUH>y-^7d5ct8hi5__Tt>y~S9*{*z~^i1y8Z3ewEQgx%l145F|ks-X3xKc-tfu3 z#QufX9TPi-gz{GI>>dqynZtV`3?Ic!*}hmY47E z-7_;Yr4> zVsL-x5)9yiIszcI=`Li+!2fhltjz*2CSgUjEib*<>8gLIC8A0dw)%4Uyo{1ePzc!`>d(V2onyBzAP=UC zy}F;Kg&2V0E3-Syal#{3*VdN)6g)w|n+duQr6wB45^8w-C8-jjWYd@eRQ7&a{L9u? zajLK@abwtr{Safg`J3A{r`NM<*hE)d!A{mphl(gt3UvfE156fxQ{2;%2Gd2DZrr#eFlV_f3TPP1SS)$_N-$0;k_f|`N9Fbo~(8yRNg;MUL zYAD~zr~i!j`2l^B83V$tl0quQEa) zg^^lk8-(Oo|$@@p)@)nE#1^*Bqhc8Pw^CV(L{dz)y;eZhW#qf=6Dz+ z{g1C%U;};@%*wNb?%Du6JWO2F zfk9})2V{&6NGby&y04U)<`Q)Wo&Md8YZSW`6FJj49|;L)^|}lqA|h;mqe!~g9S{l& zi)Pim6a4i$vm+OcA)2~;T!2je^)nk&axF9cCYIy@gYUhSP4?HSqhvn zCGsjN5Tp7{Mjz6a@h+yMW$eo*?XIXX(y}%^DuIyJCIKh z)=aRMoMD_kat#g+uKskr3QZR8_{)+kr-Qwzc+_hIczbb!Z(FHUz-@R@h=?w@|6zRd z!-iW^+}zz+Sy%$*tv?fmTNYYUu<=$6j&fsV1uYGa=-l>3jIiFIjSJJce^PS34C8A_rZJ0Pd}@ZO zfyyprJ+gTmCRL4<;BSk3_<$p42tg3t$YG6Au}wv1PE^UHvgUMGU(o?i*h$>wwH{2k zqGAshi}+H@O|&Pbut{}!%=3U|c3N)kjjEc8cpdaF|_juqh0q5L0=3zjA2fkYC&Z1$7yXgaetz_{e~)eCx1=y|ZLxHz=5lsc6` zPf}76+U8${h=v9j47RvKz!Wqn=E{IUHHo2OV@ervBxZU$iBncXz&p1+n67$MxWAb5fOV#EPERa#4|4;2r%tn0ekqx=}#a3Xl{M4csSYUV+4}0KmkYzRBD>tp4 zb`rsW!#a0&uTfjpgP#Y)%(V_ilA?U+QRL)|eN&y^8&IDS2MGy@Uav9w^wc&pD@#T} zp*^-!cPj~?%aE;E-Yc*wCnkqt--J@Y6U^X$4|Uz^rrzLMu#gGIGJNaNxH*Tb(`-zq zBmm?apKp*y4d$Qjo)(}O;zgKQ_7vp;6K zlgd#~EF>Lg5Hu;EsI>th!m_klV?|Sw2Ys!zG3k4P0H`SMW+>ApqmRD#U^z~%!o3sG zRF4)BIdp@s9guc*M#m3|w5bRyfKmMOEz8Lj@h5?M0*fV2IW~4u4tmgTvf%x&V~k`F zxy(>)^qM^kWyvP`NyVgt3cIm{={AW>JWAMWIVw835pZQ;> z?ke8jwPRP3Z!4v6>W+FY*8bA2}t>YYb+t*z0m!}P^EwQSyw(^Yg zXH};cX?ZT!1+%-S&8UL6UA(W}ov6`z&AbeCM$aAuMHi*N+r6t}Qv$hH=HevWoc`|e z|I6k%Y(Nj`|C~M%&Yiz-s6}8Q=L6E+PSVi&jQ&&>UZpEiZbk%Z=lwEG(0@Kx$F*2aIF}NTSDdYN;!9T?5YRxtDubsR{m`$ znHC^q$>n=<3N70SW#w00B;LAMnEjBeS#OMRq!yl%EQ`8~*H<4>GBO$l2J^G!hWsK7 z3p?G7?a!)LbW_qrHr!sJwq<@E&vF^>`3M1ad?XQFtcM~z=fGQC{tmetbU-@4VH+mM zCIKsDBbRW1uDtC@93G6h^w?=J4YSSq?`w_ZsXk@6S!gWPjGk+`@vDmlrr{ zM2~KtO{2%HlREul`ix_C#xe_Wr2)Y4NN696sP{Co%nfdU<{j8P(aWC(Z|RS7N2TfF z5jx%|<^-LyK>c;gES~?Rx366uwc;XbQSSo2bQDeDlpW<8j+@<1GcG;hcj#0JT)`g+ zWq43QCFVH09kAZGlQIH-Q`w!#9V4ugu#ZZGRfNTd4xa#h?jY;aL3XJyq#UWkI z(LdjreSdH?ypXTH>}e?kd(ina72iS92%&X7l2CdR+E7cX?&|q(`q|=3bxx zl#^tjSoEq2>Srb^DAI3ZF07O>;t8*NRUqmJR8eCko`H!t-C_$i{qiGW+E%|Mx$(i! z*k~S=j&m$mWfKSlGG~o%OExpx%pS`fU3qdFIA`Bxm6?GkylW=ibWWeu_({SwTW?YcZ=2_jT+Klew}o zDwNBCnvvV@4}F!cf3Jx594$4iRZhg`V(++0<6-aq4Ix3d_?njAZg%rg>AAd03jzYZ zd{WL&7ezJ3cqgCj$RfnS2^+3Y1}|IJBI$M*nIQ=?J*YtIs{16e7L)~4;Yg@3Za`}{ zJN{r{Vd2Wd?x{4BT;n1oCDraQ!6G9gi(Wiy_VKfqHX1>h1~hzG97*|P^=7OrmJ@{e z1qG08Zd;lh^|0Cgo literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/mssp-access.png b/windows/security/threat-protection/microsoft-defender-atp/images/mssp-access.png new file mode 100644 index 0000000000000000000000000000000000000000..143628c6838f0258504ebd481deb4a6de1b3b8a6 GIT binary patch literal 41134 zcmce-b!;8M(=F)OiJ5)P%*@QpjJb}PnVI95*}i7BV`hw*nIUFoJ7#9u`}5Xb}nxxOURBjbZ#!nn#RO2X{JKmu^_D9k#HARtH}WF@p%00{ zCO}g}hoF)n$>1Q6O5nw_V2OoukQgxpqgsjd0bxo1{`{{GzWguvz*hu^`q-TvZ912kj#CO%)lI?pfiW`5eLhFa$tZF*9WLLQ9z-DjF5)-~ra zx9juhZ7p26=H-f4f{l*ZV0=X0$o2o_-h$^%$-ha<;KRFej> znt>4#457ta665OPS<1_$jYukMGoydYA&uYfZP)xjJ%vRK)nmo(m-rmP&Onz}Nch`Z z#})-k@+#X6r}&BAR!RFw@rf0VT~#qTE+sSdN43^d5+tKL**cc^*A0hVl%{Ejv6owN zI&o5`j?n^=t?SW&i(DKY@#}f%hfPE`QBlW&jhW=xq=z*fnIMHAD1NRv%TS{5fYT1m-4U^{=QonTyGBy`r3Y`d2&ct3yc7o=Cx&r^lQ zly%x`%w=FdT-NO2SlEPuV>Y)5MIc-svxGv>iw$ciJIK>=kE!&i<3z!~?B1BLXu|)r zARp$qT&e557W2wge*h$A8m8&?JUp658s>Q!yR{W!4Oev7OP%hL7&)Qx_D889sw^n! ziamG8{j%Nj;ZbUHdAM*CFhT!^yyYHQf4wFB7HQbi{uHcO$q z*F)BT6AJen!oIWvO8#aLgA2E~5mfU^%;a%l%`rz+v2~Z<65H>hm5zFTQL(VMbeopF zSj~N_bJvIL5{ES*K4*)3{GjNpCD|l*=OvSXu_Q#C@b_Q|wRYbV1uT5zcBI;!#`G)b zaayLz0_r5w1o@(mW%D-n6r;s~MsN>bhoMJ1F$^lY&BY;^V^Xa<50w?EW=m6*RxJ{QyAvClkFA~$E#>^SIq=^8a)jVKDax8fpsGXf8}Ybkj9o;()D0aI>n9=M_ree@Aug7cA0BOIhPw_ zU;0lf637wh9)vw`Cxbw}`tEzGqkP+AqU`dytJ~D=6#bUo0OX{O%I@}#iQgF4L#Zb5 zcP8eK<1nFt<_e2Z(Gk?^@8`(jmG~|K6&lUqIZnDcCOmizKU}uATKUX??m2Xce@C}cou^Lk-%akgSw%*W%n&mkp6G)J9^iU+GIWJ82ohW3(( zD{%MEZ#i_zx%7fzvC_Gm>IoOIC{3UtgCRGlE2SYigPoR+!T9CQilz=$a_$IpN*M6u zEs#GY1ugJgnI)JUjmRvSZr%pNXT|FiDma|ka=!UGsy=;tioMmN$`-PgI!(#TBli5) zEGeCDrNsGJ)j#VzMr zr|@49ni`7L6yv-PJ`C+M{rMXXYHN7;mSe6|&**2%cj(!(#ur|Ol!*wpr7O)bd-rxv za#ZSPsxqyR0L*9RE_@71v%##5Pd4ccsqhkXjR~NHO4QECGxr zMR)dYpYH1Ph3WXL7Nn$^hB9r@tuOhcMV#}tDR&gHPZqolHNO8XJozF-bB$iamYv@v z23_!z!ouR>Z`BMJbxY;nN`*RjKljFM?LUNdk45Jx5Mu9Y-JUf}cMaP{PScaiO3&e*toE5scVxq0 z`9FvvqT(OtUuY1vCG7B_t%K=Zp<6_GU6T6rQ z0T5K0R)LNBMh3-rw&@qYnXun3#~O|lH?yKUoe$+U&{$_jIO%q_;t?NM3QrrO;=o*D z6FWz!iFPDt&CB`AMf%>Oia6H2o7qjUU=_SoUWPOy^$TT4t4_JwBx-Y z2u>H?wwUREp|Hh#m15S|xiSH(%9nfJg?+I8_|jsq@$vc#C4SyaI$Yg(Xv3wTXdPG0qH#u}soe@VAcF6)sj?C_zIVky{sJ105vaEpyX_Yy}*sw2h zWrnnTx0WAlFaGu)Zdl0&vp{08IYe75c3P75<*+%pf*?4J{;2*;QTrYxqfv=24nI;1 zD7I^H*z0Fb`@R)H?UqT}E3E6Q4mIQjq}Xd7k<5_ zXXV$s94RSf5%<}5YDA__bTDLTK}{e#2l+#ODBOkODRFuv8mNVjAN1v(LiOxS_1Z%= z%!O_371w)Xx@3{McQr&c9KF>37`7=x74sFM!RNANS*$Vm?BXv{<1=r7j)~N#QNVBu5T=wfv zJ4EfKTybuBRZ7fz9x9BUotr3{tt&fy@1*$f<^sg^y5Lz(9u=tsrz!uJtfLyAebFs@ zXh;e)Nn`zSLsZLolC+9b{TOsK!_)U zocP{K9M({%QT#EAiken*ajZu;s#y5rZyMAntHuFnhkq?jB~8a|vBkfNN6FH`<0S`3 ziq2^u?hW0j|Bt(dqj;1W9&}n2Jket^AZ~cLse}Vc^GJN7-nO2GrxG;^_q!nD087t> zN^Lp`0jG*kDGQW>*0&N|vWUk|IYTyj99r=lC9+@{d2Yav7XRI%!=8cusA9fNgk9pMXYJ^Yk;U;nPID@yYyC@L({t`qY4`M&@Yizm5eyhKgdExjiIZP zyb4VCz>Y23nr{@D1f7#rwq9orhe%Xn`=O_ht1BaUjrdCmBNFq@6dj302f%>El3!46 z;<7)%6_Woz{?;%2f%bWKLc|f}OlhkK{{STRdF-Q_T+PXnkZz+?5;25PWHl%J-}BjL5**nOR^LQSv8!`E%NeZ|G*OqL!rSF)mwv@kZz3?54l@fh>0c zShr}po!9|N=K4&L3+T)j_}P(g-*UD9Azw#b(?fJ zap|x&C*ky!mH&00P|^sl|MdiP26P{gOz`b0Ot@GuUOt_#C*b2MjDU|z;=pchgd=mN zCAv$~weLi0l)U~uK_FU-~a5_?GY!Q_Un&^m7pdXQ3nD@9>z^ugL`SVG6QoDC- zm+$_`1Zs;IDuynud}sf7x^A7f4M_Kt5_;SWAa+6MB=Fk9fy+c{=MUdl8{ae$bmbrv z8F%{YVo&_BGTvfw{^M{WeOyqU=x8mjD&J*GRX4Cz;2y>UwU*WrGyrA<9B&(FnPQvq zXqL~AC$3fb?kMb#+z>tMX|pwcE*%&fI|)(k8K2SR*~F`8R=0u7A?GY%!tmN7a`|QS zM)I1UA&$I5ua&bDomAsH`bf+IzbFw~@BF)%bA4yh?p{= zGpMKRn+oz|6!yL6cBMeFjYMc)87dd{1)coT*ME;Ao?XEorkh^C5GxGKL^KJ~kdx#V z=@pTekTpxb9mv8p{ig(}ZN^YmN>MZ@Lot79!Ggp0L$14H;UR(Ti?$NyN;>Q8KrATZLxiOCQ)Ze;R0=y?C@8x9qM zuH1yk+(@4K1;m)4qY_8R;?fLT6`A zTqcBsU@`aFUmYS?>cyJsNjpOqqf{lPR4x_ctbIXGRFenQW(!aCw`pn`64hIx=d*VE zOs#RxgW5P{G=i$^6dXZjs7yf`W@+FZ;JS5%buaS; zWKY9&BS#HVLjr{+|Lr4F%Meu?HJ#i;F@)Sjn^822hg9UQjz+=%IXRxB#vHM~tihoe zw0=W2AtJ!a#XXfkSV)1Q@Um>TLTeN6%lr>|{S}BN2fs^aNt>2~dld5d7@+Q;-Ji>l zCBtK`BH+iG>>?V|Z@ErV;VSf)Bu@4%(OgMVUWCEkwMQ8aZZPTmLZZ$bM- z-$D?BWd7;37crf?obNzi?4an8} zAYtkk;S^EEDUGNYC+=+dENYTRMIik$1e453B_58EYw_2F%WH5?PVzhZ&(ptfC~R_}kia@*ks0zk^kUjI{+M7)_J-gEHiPc4m=Y8x2Ur9jU3Dk&}KO{_gLFdi|_xSA8&IR$y1f6KD@KI6UZbpq|D&?l|+ zJ8a3_L5grvO4XLYc55&YD@OWKcXX}&fi>WOOzCYKH#BP8sX}nxt*nxcfOLLN_EUxU zXlj1OzRJ*k5O%t&5hitdDuEnH;A39g_T~Q5XhikbtXE)Sw(`{ifALr(F4)T1C>=j7 z*mNQqbM}i0N@`zx2cVT3&etI}ClqXZ1*jBrdPak&M|1Bvw%!W1Om_OpC@{FRHb28A zGFf9Z*g}h~cm%xG@9(LfUjlsa9%qyoLdLb-x5U>4Yw&F7kmaJ)VNlo~dmXN-9Q-qR zG0h*cYzNS3c4C=7g#vDTJmSyzOtGMR%8zOG?@zsk{6L+o? zj;GBwSBG0{lyEU`iOgk1LD*b^(%;35I5=QM=!mGyoPOiTk|@b>_xvoB#n(|0nin6~ z?*&Do!-qvcg;p1wQk@~Q2X($fP@qHGw`2C73>1p1Y1V0P3+8;K3`T8kJPoDo$U%(l zd`6hMxJ%F!NYJ#opb{SLg<7Cqu5;i<4!}iGWZ3J;oK~O1&3C-8)>0lby{*81%IsuX zTz8@7ZC&B9r4k|Co*po3HeQhObnEZF^)?9pX7EDC+iEWtYGAZ?s5fzUw9D#~#`{U+ z->}2|HaUfZLB)KybK=Z}lr>xop~an^?w=k-9sH!L_8;Q9(xCfe46C063odcSwIe;f z!$)#zHi49*(vwYq#yVIZbApnnA^)};M1}+7%Itxw+A0DOe)>i7wPXI4c)gN z`KyIK{%#3Bb;6MjFdol&LFbH)ceFdaYLtWXI-LZ>-v2YbbzESPR9N8sn?PbV@&v}U z>xhcnX=!Ff40A8N{N3Z4M(aYLUEA)lH?puoFgw2^?;&8BE*f zVzj%T8+&>_HQ0x?$b!j!U!`SRE(NM*gBL9~6OV1mFkatn3d-A*gj2js`+OvhhW4&p zN_nh2_gu5nO_S0KNPB}nfNrZazcu$6A}&^oXF`R$U{9Y@q0j|@q&jxJr}rojmz?ly zwIQyz1()1Rg~N$!a0QRm1vxn+ow(ZWg~npaRh6eM3o-1uJeACElE5LN!S$mNMKcNQ z{AeJ=s934I=R+vhuAfCjRp@RY@dLcFHjv~~wM@iH?&q}`S_c8pdY76|=aUw)EeL68 zr(XmW{1h=-H5;zhgmtqSsheC{>QE9_#yb`&XeZy|Vf>2`p)*dF{YsJL^Rf;+7)bhE zC$+f{5dna2h#MlTv=ZK#R>$nDf6C8_eQ;-Uq>!73fE|WZsnsDK90Wy_8H1n|GvXaV zKj+O(|ELzXjb#fip@9o-|0(=1ekS`F-o|q?{gt-3{0ptkWw$KZTP&6;78uHf;ifHn zvFQr)iwQP{$SDzd_9K3P`DFR;^JOMvuCO7zojX-tJE}YG->-5s^izGg$c0!tw;}f(8K<$h1X5R))jc$Ie9n1cSpLeZ(Ax!*74WQloSi_i~Z&Ycl z1SP_3?rN-|UiW@+J`x&PUEwA0_hF}=@<`Nc4fZ+mxq24J5^f6$4!}d8bK&`z(waBK z5_faEM^s4n$KdvI|<`4yNqpiF&37leTe^fM{Ca=g{|dcJk77*eMYp- z1cMb8v@FB#V7o46pipG`*Z4wL2F!Nydl@+~_Ycamj6vP4pWGjho3*wi- z)Yv=b?Yl_C9-+w`^rJsAYWECZ$Q}$nq1DJx$P!qB_>q*Mr^B<#CL+3^W}mCsSJ!NC zq~Q_WT5-{fU%lrzhgx<8@c?QS=rG12{L}7rs{$1|IC#@eTu5gUtXOkqHjrfMIX`Hk zyb-kMoz?u1J)pyp3!|l+@Aawwz}*Pa<_h~$ainXn?9flj)$Q^tZP##W6($WE@p`C2 z2e&b~;bn>vU=CDe;6lGfh5Ig~PSpYt6u6jZyWtWY3>rT9(@@G=n~C=aDb)_z2c;{B zNbQP=7Tlwl)4)Iz)Nri?G_JGaL0Q;$&>7$4kR1$57A}vUsJ#JKYGUTrw(W@F$CytU z6X9$6aWMm(obP;gxrN+^E%a2b)MQRyBOCD#wu$QI&28OB)MR-gW66l2!)AAk*xp+E zoqTGd-leUcaefpQbdUO*-eH;skGg|o#^7`0voeJg0Y~QQUcSwBui%!1Nx!%a*{y3m z0;}`>@FJRQEzzTNJW!x^Wp@DS>WtT>mkEkqTQa7Hu*A>|sXOs0Dc5|M&ye$?LY<@I zFxI-D))^mg;;(p@=7!2NP`S)BNuijmf8e;GGfP-Aj6MMRIhLo`5YFa1!}fY?>eB{( zJ8a2WrSB6F+e_SS|B-%?oy6cN=bYmmqyNKr?q3T)U7moW=5u+9n0g`vBFY^L%kp@j zoer#-vWbxy)$0RsUPW`Rs9@rPM-_$RwNK&TK}l%~?A>WD%ZA?z%MlqJt`>VX5@)H1 z!7HyqNYv9`ar%FJt(oygzb#i?v6!>O3~ovJ!rU0rt}UK<4SX_2EV+-M-5T?`R;zF; zf%Rz-lx7p9Im6jDS_$cvd%E9)B|X*$lYU(X;gBTDfYkrQhkS$fiJLcaZ>^bhCs~f8A!l{Z zuW^Ys#(npHA@{!@b2{AU2JK{QoY~0LnO;M-ouIhX=O+~J7#&u31sxZOw*A1zaZ0&< z!cgAD6PnI12;=oEj`^eP8&jgC>1g>V`Xbif=r#bn?IG7V7~)l15)=2spQ@Lv)ECHB z8CTupo1J{a91rIv-k*7{%jrZrHk{j(!VmpFUQHFPu;Ky&gAEGk~2R{oHX9AXKJb659UGuC3#@2fn~o~ZsY!l9J+-&%m4 z?21$j4QNZdOG>tNMd^XwjX3|94j|N@qbV1|EmretKag~aQek_0P|l)M1{qvRm45#| zI#JN{f;RN9S2CwgA(54MTJXacZV z%%Z1M>ne8PH==k0+GTXOc^b`8<$-1TK*i6U=H-QQbwLxzvS2wjxOB4y&olaNWy8{t z4e1{&?YG+3|5802LFvtp1XSg#G&D7bIqk&TU9aC+rXn*_(;2lYy+J#szj{BE_{5<@ z%)HV9MT}U9Dh^KSe%N&kCsUR2Z;ATWMr9o8ql*)AxWyTw0Mv9fe$uB&iiSo6ZW66d zWffOdMb%apl&BS|;e9ik8>zd$d8p=tr&2JTtp{(Pz5P>m{FY}(CJoDuz^WGbqx!=p ztN9DROmRiVJ^#rL*Nv&#$nL~Z-?tajX9?E_L6uC2OED!ML4s z*sEx$Da@QxFjLFWSXmseF6>(}o~^q@UnJn{Xhb7S9yz6Gg3fVYAyncCD`cp8VcIVNAIwY-aMD+t*mkGtZ z;Ts|XQ5;6*!mkxuv1XnT#R0bRPtzh1DP6xK(N82My z^`&-y2|S*Lbk5G7+1)+~q&B#T@@%tiLA^O#vAO)p^3uXTbj9aLyF1csn}f0p(cImV z7Mt9sa%@VN0Ye1%zwKnGfk{CNiP9;;2#jdtLZH0vf{@ysqLz^`qw(TOo-mOQK#D?| zSSWR(LX8+5o&`{zWqC>Is8q~fmB>9RVmBg$XG8m|o{(A@Aae8Tg5U3U9mL%g)} z%7BDI&Mv>AJqirv)Q5@YzWythTi-P~yrVT;vujxwEmo%KHIhY(q8_p#$SBt15@E8#E}2iKk7PfyX-_X3kCT7OGSuqdC( z#Bkd5z7KbPiIBn^NlmEer(R9R$YB-!F+n|RC&lR)iVTvI>myc^{hF+wIx`KehOGkA z{IW+!a^G*VUxNn<%u@sAE~;u;5>`2{W4sGUx+@2jZ9c5nO%A_@Rb|`~P{R5L2O{A- z(f#JL&wEY&%nGCTmP?jxykqfidWF1He?>@T=*K_ZTUlzZJzi)YEu|qHwj#reDu604 zH&P0<;&IDJ>KE;(!PapkbGdm3>JiDoQ>o8Bi%%T(9l3xSzon^K zn=M5#*I7(wW}RO2?lAwh-UMW6AzZ9OM$*gGQjiUR=)C2~)8~HztjQuyu2@T~*+er5 zQ@JzC;V6NMcy&N@nFI|@*C?c1?Y;dRaaZYHvP4>Y?f)){znKXWcvfKa2IMV z@@lc$3o!OwdEWmD#Zzf6@B!hqA_^ZRUsv8AyoYBW5Wn658R_hN)mEL3nFk!594Duq z3%cKJNw3x!VXP+kM|k?H-M7`$%#(&DTSm1fs{fE8UQc8+*x8pU#&LbLQnG<|Y_y0* z7$tW+gv&RuSc0pAo@&y}UXm!?OH_q~njeOeHyk}}pgd&ZiOuip8!oWM zE7LxJ$;*qE=UnS7Q0;J{9NbFAU-sJ`xaMde|Z;t71U=2uDr7xIn zktiMxnoAX58HfNJJl8J!0ZdzQa0s9?gA7?-jW^&w3`wnRskJ68j^RkIBm<{D7i|+)J*_sn7lcbJC5~!6+ zxf^{elJxpo?@Tj=wCl7w3VWE4ts`Q#pg~}rRG1>6n3l%b9BJA@tmDW=kFB9wy>@Y} zo^?8WI%T@rNEdml3$(@EKR8s;;``#kCefEY{?^Jq0tY=h$=q}9zVq-p%EVAu&yo4> zishr;Y9d`t^myOObOrQ}Dke~$T^(CPT{}hiL7#&?u+nx+E^_4B$Ej7&^Z>@Ojqs~8 z{K(z&2qRr@7LE}|^$yZkS_WEj?zE6Od+M}YagsDyRVAiKyplidaaPG@ExPst7SvfY z$M7X-fVXWkO2q#zUfi3c;=O7zAy!nDdB&A#b^9X|xLewVR5H|NfCJn_dFcDA(F#0| zCYbqVVfji+I7Z!bZNgH37fXo0*4%1V*-?`7OT_T4?XSpm`g=#~D@U{79cA&pr_kx4 zFWtlCa`=yW(80kb%H}iHUyX(+@)$wOez>vJs>7zTZ@F@vofdIUdBq7kg>r_wz8Cr& z2N*uT`$G-hL7X1zvika))EYrgEPUd4!+aR)+y_Acv|XPjshiWF!K+h){<~uq0mNAz z4dpNlYQqIO9!CiC>ChCcE6<+eV0H_`-oCn}6o$Y=>ioj5Vx*SVa;Gd0san@EqYP~8 zdxF6yw^qG>|KJo)Zvo1FMdDVDWCl+jlW)J?`R9D}$zgfjvfA1^L*eFH>amww>|Xn_ z@*(9)b7Kt^6UH~_uhxB51FtuStADuN2RMA;`VMW-cz-&PqI@K)o6A))9Cyn; zLR&E|AA36YoWkmIIH6obbUhls=y z);JO|{ePsU#88TJ%gq+t;PS1)A%2|Jf3*q+*LnFpE((AD2EmyXmCD|Sj{leXA`V(n0wadN-*?Amyc2; zj^Z<&maCfg|NO9w%$Ws%M!`)#prNI&50wW}GzUbK!^`Fl=eUw6@;9GsBP;rNrfm*2 zYWjMccq0Ep%XKg}@IoarCQhZmHciMqG)qO4K_@m;aqBK>8lAbM0lyzSFXPb#qZ%Nl z4uv}i1T!Zfc>ez>ul>IptA}k<%C9gx#=)*YIB6h9z1Pp?dx90d!!&+8yo=!{ZKTCi z$&8JEE}Xix3s{4_W`BONqHUQ-7DpN zdILX5n@8NHOCfoQD0a7F-BrF!SvPR?fwkvGny7D~K35UuB;99;TbrG^=lLB;W0R0# z);ajdzd54N1@AQ1A7FEd=KsE%NpUv!^fGs9Y2!eV%pS&@@>R#cFCyawVc9oX;A$Q! z$%6K5>ki!yFRRRkjOUdp=SO?E<*mQIr#*iEO0vNHKmqa0D_G-v$7avHV5n7h& zU&&{*@aGVpv+h`l9}$@CCCBBCW;728bm8oHKE&r3zR_+r=fvha<#D4-`vo5Qy2wg z6nO|JeH8NPdznFTJ*x9mVgaH;G(3Oy#!JPHLk{4oB2H)_m=8j{8@D48iZ`$XTtfj; z367eX?RtEVmVg3-pAp#{;Eksx27l-uT|q&91=nOLO^J~OQjjXKeWKF(k7&uc@Zm%g zejHlky02|t@)E;`W|-au(a6nkO5rdS@ek&A<^~kpZ(I=7u2D zXlN;WD%rT1JDwo>8{}}0t-{`9_hGWn;-d8#@EZ$bWzTms6!BRX6k-!X(3O4Fj^x2w zGPM7OgD>SVR24x#g~NQiA8)uU+*!Znzz)Y|{g%FG@w2A%Z^kfC;?iExSE)38f&?6X ztxcb3VSnGpg09P)Y}xoyAN2eLl@0)yVVv;vCajvv9c>KPm!rSv#5ol?(?QvgBoje88zHq)xkYjPjNyOFxSYRU!u$*Z-g_qyo=m-~XZKq4D^Ss*dmf>EJ-%=^^eZbo79Fp{q)D zYsE54k1b?wf3)lc57-IgCf$q(zPoV|5a)CMHfp7E;@lwF=D3Y{_Gdez>dQyf%ES!o zhZCUz^qI2dpVD@0A|~0)z4_sU_V)BZlxIkMStml#cNp@y@F6z?tM%IOJ<|GEhP+2E zKMINwT}{sZ$b+mwfq`Ej)M#UN@a6VNoiH3JmlIXCbGPI0)|vXu3??TA48kJEUr~*=Jd2wRi7NQ?}8WZIWvsfq^;I zj$?RXIY@>geDJqKfht*oss?Aof^}#4ro5;_U7Bo>TABh?hd#4XNunc9@c6;d(QU%< zqe+AI^)s6)AjFa94KC+DrZ&~X9)ixphfWM~m-E$4kR zwtG7v*uI+JDUO8nFTu^O(`OUu@?hWqJHnh%n|*2D#|2UKXz(Q01C3SthQFpv#^m96 zKk8mcN&imA1zFapDIR`QmvuKi3Vo;hgf=*IOD=`f%~|hOxUk`#e(Lix80F=SAQ6M1 z4lCF@j2Uc)<#lC^z-FZwSp_R(|7WLvST4SGprmY5GrQeZC=uE&b(li5MO+H2^^_B& zyHkPD+K^(XQ{+pEs(bcakH1yu;PQq?DKrfh-(_n{Mn?YZhGTq;jz?mx;&vc4alwGk zE#Xa5MkiuBU79`-Nm<~=H7#^keqwmpvYz`??uvM~3HmMdzOVN^0;y25JsTz_0T%|( z#P<&%rlWSNNd{E&_tp*;zmE3U?*TgF8wT%Grx)Nv83*Cm(==^I~A_WE!mDL+jt3k-Lmv)@A=zHI%Du}C$&rK^m6O(e>iyg`g*n(qF~GFSo(KH zl98mq8w9CZs(%0ubiyo}2I2fa*dXx&2#I#3x*g)&0?rJQ?#hf&uXJpbIJOz#@L~hK zVHp~yBEkeCXlbe0gDyML0UrB$3ty+9I(rehFM|*Yz7`2#a0RUH98O+x^()82cDOqO z*F+aOyqG_$hfF%&9{fS&*=t1F)9cZq`aajZO805njkdH816J^d0WtL>xSPH{;R`5O zR}<4Y!>Rnq=mC%(vj8dUxZ8(K|N4^laKtoE(+zm&So{5|Cflxu88V1A8;|Qgc^@22 zg(PPGpVHrtZvF;*1f%I-^>64+bRVH;gG(q6llWy7m*hMqoN)~Iw*|zX@E%H}9#yST zFWC-iI$Pt7$&YNar4~nBRm<4ZW;xxd?8R1YAkzj1_IGTf@+Dqk&0 zW0X=IIFISD%X>ZH$0b;~>U7IN1Za4_Z47chLtleY1Dx);m9{BP- zUK~g$VzByrG4Q@QRT!E4?K~uaH9cl@neOdu!Lawi8F%%s9G61sC0rtu$I%h{BKh=r zy!(X+^9P2s^(iiqMtb*!)yESGmeZXCWA@}mFoSyQ;}j;q+u`Lg7j@U=thj%92I&lo zy}Nm29OYsnj{~&bO&pE(hvxf6X-SF3I`4tN&E#b*LqX6I%FTr{juOz7 z%-42q1c<1)z+&2ET|=(j0VE^<#>KiVfe1W16^3O5MQA>R`Qaq2+T)^wYD zAJ%cbrO6~TgOV~t=6aCR6wD{2BGan3M{l6w6Za(M_DoF=(I#pQJzhk@%A&Ncdwvr% z2|cn&pTgKbB!PW**uE{(oSoj)b>K7L;euVD`n2ou-NQRqlo-*w<|}NiM|nKDCe0|w zPP-m`%{g^1bJ+=$xc-`zndyv99b2QEK`8C6OOf!KCc>Dy7ZTl&TITm-tSCO>*qtD| z&*d#7fKsQPLA+jp_Vrf4b3l5X-NxwQFkrEA<+S-JR(sHd_Nr!yT%z%0kT!~YGAh!D zyFI`kl&2-}7uaH=C&ahsPPJB&hD4cg%5cC`)iciQpBpePW3f=om}Gi%GuHh{&$J;R zG-=&v%}FQwLt$K{ES?hca00MSUZb{^GEI28$lmqIaZrR3|McQuIeZf#RjTnVJ(aP)2{9$48awAjtX!&lO-y*={38W!M^6R+ZzZMU=ETm0XfG7qvKKTMO4PSkfqc zcX%SS5N2l}Rg>W=WTyu#iGTIVrg)`%zBG%k-xo2frgU9&7fMqW<8_a?tMu#r@hPO6QRqtZM zBD>IHb9tviD^URe8FaiIu1&L-5n6E-( z4<#Qv^OmY-|KXzGz4x)ZG|DDp{c%0YaG|(_k#oE!rcMo-l4Bq!$ZO09roi-8hmR;W z2!I)QRYFh0xdFvz_O{yz3Gny(N(9l9I~|{osY+2>$jG=GwLfRT-C`gzl+rlkrQZ*- zT76spf_cD;EAJqkui{I?=w!;k%7Y~Yky3)SXGL7N z#D^-DB7|2zASw2l5^MKKAQeTQ>g_bn*XM+!B$t0I>FN~4Z{sOOK8t6yZ5|7I@M!tF zNA&DS=4Qt{UNj%0=p#~W4o_&_V&0M!2}|EIy+wFuGnNB$KJ657TOj(65|s|Y$$~hc zm(+!Yh3=jH-7KpgdA%q&^H(qE1`V;&QTNf%X71HWzsK?=Eo6&pTOya=NNk8-1?952 z+H^9(C(L%__9Ppt4_Xk}33$D-77xFmyXZC&ZVl$BFV$HjCz!`N?uKA{-YZ~eeHXe8 zYNZ+B%pOJM8QkZIoWKl^IL;WCCvsT}V;5#udO!Fwwpf+-Iil|!%+RDkt@b_OS8J_|^*!C9={U!Hwn(nt z;Mjo;u(fhq>u4}sLG+l-x?z%opsjDf6#E`&qjI$=r1g+}{hy1A^OkDm_=SZaSN;* zd_94w_%uI!xF1^Svn&boZg+Xj?Z9#ss=RvYx|7(+ryt032gv;$nV!b1j}9X{XQL*F z$Vh4d1t{88q804hnRwft<1FdlFe`!T{i_*lQf;SJ=@IOUUMbavZ;KsjTZ0&l-ino@ zQMdg8Taq8&n70Z4TMKZ)=qZI~g%?Fup}AkPB}NLxp>J(ec?ya2j>cubB6C{ihxly# zPi;=S!A-D%J9g&p-1uyw1?`qIiWxMwG;2YSpcHfSPrF=@k zrBKgp47=@ee1F+Eb{g*aZcm^M!sfW192I3QEe#af(=lw zn4wLTW^)RJ?I%I$$akMqA$ek<`8JA057&V9afB4uqBUNV6C6%f0;u&puujReb@gJ} zi8@TE^X0@$XL65gJBEDxLjM2YiNQ2pE~ZMeUymNM_i4YQguJ|cYTz6|B-y{?-UAOCM`eRFUoQTJwMl8Nm%wr$(CZF^$dwryu(EzF+NE zyS26dc6D`i-#+&|&pppUW#<^nF`_A2K>*!!PWSjhQXO(MKvJF!DO@B0h#5#g5a}o+ z1gpaJj$+ILCzsS)i6!sFd-;o;lQLAh&O!zf1vZqBtS|v%>osr((&~3G_S;!_hgt&> zJq#x*DLM+|zjHSdx?Swc9T^{fw5ls2-IC$VL>Z31!#C2)oEr`Sj|~(rqN@9*>Pp>4 zzn=JB!6tOj(Y^TwevTGGr;rGfh!9{7BqU6nX7WU))ocg6xz;z#1JD2A5C#B+=!O)k z{(>EOwX-pG|CN?2c$Uz<&361q`4tO0(uN1F%rgCD7ejDrx8y20HL^_FICB|z4QC&`HUfr5eQ6IB5 zMNQ#kYRpDI%TKDL79W6xRw2i|@WGCWg0j-qn0j8Vat>u#OhQ`7d@3uo)9o?4qj)+ z;v!s-EEE6@W@<=TYx|2C+Tc`b(42Z@u zL<@o8n-=7xa{+pFBPqGUcA+UP)>9IXIBIq}a$-Wrl4BJd7i2D6C?2G$>DNw0KAHbA zsnn`B`XUouxYj$aVUS$FQLFs^aKHvuGF=ES!lR$#k83;S3S~QjPJis#G}7^j$qUao+;e#vTu-; z*9YF?zIaDl-+;gf_=Hvwi_2Fr!n|?Du7xBD-x@^oT)zbL)iLwDHvDz_3%NcHT-l>z zyd3jdx9Dna*Lt7dgi^PSLO1IVe8nw*=OFomyL6CpKSn_m5CC+}IG_Dh21$}uV<7o> zm2XrCra%bLioBmtxy>1F(X@8U%=nv7+R|_eF;7?$oqb$H?WR@Gs#NQJ{$MF4Z2gn^ zZyq6^GDPU6CHY_$Iz-43TOqPRs6gQ#c(PITHz#fVQG!X03JtW~uF>BH5})&473qTf z?R9ZZA}N})^zan^3Ggh5{m&h52Q@$r^c`{WVNNcDE)Uim*ddd8tksrz!QrgOoGd&G zGr>Gz$0crY89CV2`uv&F$p^ebiY=6klK{oPk`Z7VpqNcm4qU!KTK74R%(t*HdY#yh z*7^}W9tK(YE!bbIXqa1HW$F~D_)PY=o0TdnQ(E;_{Z4ly#Xq8AyJ&dHst(m8u>Eo1 z92~FwZWoGd!|j)a91<72upobsN&kd8+%i2;obxCQIFzGD7e^M`(DwTX2zA!!=KF!g zD;X=Yc^Lmxd?iD?oLM$^8pDB%yh%7HT%hpocH8m%H|{afLRZHV+VGL=zq@^96)rF=y*1&9e>jG%p)qH& z&lnwZq$ULLdS+Ljo+8eiar`}@DD+?1FiwnqH#OwxS$Tt}$|-3{b$A6(I&%EyF2#4)^fc2zLCQ4qdS(~R;G*7oMz7D znIJRK%BJ73g9km;RAjaL3AXCWD?6o~az&XYm>2x=<5{hAU48*wvX5aN7}yTxvClH4 z2X}c^Hk)Qgiol+>24+>&sPH2Rw`_Hb^5(BFHpk5Z?~3}Cu-=~_X*}Y`cC*+xE_W+u ztgoA*A{(FgBnvHh6v^?T-cQof>MD&ij6JD!3M6|BA43d;t=@zkYFQH6D#MmLkp7{A zV$DA*N{u(LEDTv{vLR|iO7)=+)HYq7r^vM?)M4YH|D$Q4O@`|~ZLsr}N>v{jPkv*K* zfZAWG6NoVr$p;xP?twCO<%S__(_a>_jA5r3WeFjab}kRw0662QsqICLjL{j9*;GaC z`nKQk$1z5&W$}j0j8$qub7Q5=qBxi~23A}FvRRQFuQL#k!?inTU`kFbt*L6#o)DrF zm6DDYnCaR5u6s=Ae^-)NhGZ#K)KwFjC&#-(6s??{=MGLZA!!+|PRw+eirAn?N=@eY z$>UqBc;(6hzS~j^x#Q&YM~kIGd2m_SUzT~zhY70e)st;YjrNr<8#AOM@}SVPNmbA~ z{Q#d|LtsD~E%mlV^H|k%*Clm76s~(pU+p7FTg%G0OeY|v4zsh4uRets9oNZ@$6V5$ zx?3`;{#gW0=N4MNVq%=bHl4>Bs-aMYF6^(z4|&|}0B(FD_jxNZ0k!G19SSlNwbT{T7XX^w0QRp(S_j z1Fwdbl#mw&EZDVL{{`*r6#nbits2Js$Gl>!=1-BZwTjv{1l{6aehjeTBEb|e3(V!- zTv7`-I#w5kXHNe?4SZJnoYHX7=bJIjS8rr?aAKVEIHGW-AyPyV63xK{?W9qra;OMK zrtwON7P?KlZ3$_SwD`f&HJexMEGSK;@(PNP1Of&CgMyk?I5la6NmYnRSx#ahmeM(y zQQCaHcKeg{=LbZ5dfo+I}%RH7?={+qR=a$>~Y*iHt~Q))12_fOKI{ zFblVtHId}BPNY=SbzI8=KU)+hWl$!Xb$#dvAUm@Dvi3p+okLPWu0KUp$}=$KGL~>& zTCJh5EB)U9s@YL#1G%|!c1r9-is)}e@F3bLniVGxhc_%7Pn5@f*hFL$hBez_vl7Er z00^z-Sj6OgGm7-I`P4Ypcx9ynWRgo8Z!reFxuz)9=8L1u7!cLGb99orh+$Ad+8U!} zVDVp5EpkwQG&5}qY8F%!Z3vAyQ*MG;sCNZV%N^Z0cnRwFdj7h?DFDP>4`g^~fyJv( znQX4?!b^(PEZj~mku)a1{ZH(O*W(CMwkCo6O73WEOK{{r;ig_{Q}?R>8_NYKhyQ<2 zA3$1Ll>#MBGJxD=3bT`ShF>kl`l^kT?Km737GaHJVp5v#gRl-ChG7nE;vqxztE(GnijY~~pC{UR5-kOwz1qFsDV9fu zkrpd#zJ`>OOKEtu``Ow0su|-7P56`aM(JcUZ=FAecL_r~&Btmc2e{`Zsv8vk^Rl}> z4f_d>1gPfI^g`#dK#gRep zp_DJ}lAzy%;byf`pfAh^uE!{J<( zVIgZ^;Otvn=mbCucvq%%q}3toU~aGCUzuqoV|LZ2HC=!nPodw75hvml+g&l5`6q;` zTiRfEuQrapsJqS0UW!7;+}v(*9fB^Lf2R5E&xgnL&9cJdwTHSD=77eqGn|p0%Ih21 zl*fEMpU7jvjY$NiQT9SVc(cEqP9rL1FlOFkk{nxd4Hw9<8_WJaud)_RCc^P~AP8b+ zKL7e`%D&1Q+)x|IWu|pu&)Mx;bd<4*u%LO(mCqC^cs};9*Njety#exL(RhBE1p(aj zAP-uG9mDbJ4@i@2hjgGvKM#+7>}9Vw)(|#JG%&gxLsMg zXw72DV8UtbIwmBWVz>G2QF+Sg6{#B+6gPeB3ju!3oETXg;#5F$yC%}S+b!vXBQ zS4WQYzJje(b1bv5OYhI0p4O+oN5?_mYWG(s3X&D9+?t5vnM0D-S1;- z%1aQ7+;8aIEgwklo?B?EYvAfjn6g?zr8PwOmq*Ao9``ZYxV42Rdh+HMH-rP5lF{P$ z1TMX)wm47vbJN0P@x?|BIs; ztgBMu)a3MQ`fX^s&50SC2{|`Ag1O<3g9$75T?9T!)!Y;T2?6kq86NqGz?6fD$hkNVaIw9W#3YaHgemu#octck zUEVyFZ~rmZv~N@`Mz)=%p=Wr|j;j{xDdb&8{hCUD|5t?LYkuZAtoKXXv&6`?w#MjU z=?(Ip&1rkZ@|A~3`^pzl{0s1TqVG5Qph@gjvo)H6(K~T-2~v_0at!Ax)rfu+a53#Y zf6j&j1eUY<{AG{AOx_{7-qaiyO|Tc>bXn;ril$M?nT z>+9mriruQ%Vn(YvjrcnZ!J*O=a_UMb2lQiV(pYh@mY-^0nG?S+2b__AnSRl+R(ii; z#yc=rzoD1HpJRQ>nI7NZ&AeB1m>Z|;+u7p>yUE#lrA33osc{eOAwS?TaQ}%KJkJ6? zgG#SNzn|$c>HPVT z=40D?aeTM6@Tvf0$~u{MS~rPrVZzt>`(~NT`e@>16MH-FW z?1rIP_uzzZ*vi%j+a%Rwb1X?!SH^D-7wKj?R$=?~xl8c1^0oArjRZjQzojP3aPU$9 zPKJiBt5Ot-2`SlmbYmX7YZ?D<41&Z!=kfRR*Xe2PjAS{08 zKydZKJ#`#P=A#FH$^?J9wqoyswJzn={y;oomx!zu=TSSNk z{DNCEf@KA+`U~gnpii{;=7;cbEsK+d{(_RW4r-q1Q-BX_@aD7r-1g6;CO+>X_3xf` z40rvSWadYNrzM@eAKlGvoe?j`c37VeBV&Ae?w`FY+RJ?j8~oeNq0`I6jayA2(`4|y zPB99j6MxSKv=I=^j`5DcR3<&hG7vt@3gnt}mpQI?fuv|gAbwY@u{}$}7Bh^od7Y7d zzR+>>_h9RM*5xpJB7ag~ECc&=yuQd) zj=`ik3Ac1{Z&Mab89gD#yd#&)5PB%5>oq~QAPO*JtZl@r&G!Y1Fa~b%oIo6Yk&$w3 z)J@aE?uw+bzOVTZ9=S16vY`?xN=s&dM7PLUMP;#Y5s=a8=zsO@z`oL`AgV%Awi5qS zucL!Z(t)h-$6?vqvGvvdZp;sy3aCFz_{Dy5@_J^-P7ayO5D1PQ4yo1ubap=_xjfg} zTzdli8DZ25BgSIMVsW@*#2b^+a{bTqwr3OeV5fd5R*4{Az>~dYxnDRCuP`}~VL2c) z&pDQ4#BxTMq@)>(Pv=XH6Rwt$vuq3&2#Y&JL7{Ts!p6bQuDb?AO$C|kV=#I6@cVsT z=#G+>B$tqXoJvdUZCm-p&v?Hy{nI5;bZgI9Y;J~a%{@@q_+4GggA7Nw*3r@K_(H{K zOyn%A>qCecpu=jdk4a7+O?jXW)34Xfn5xcf4(}0R}SHqzkG@G|4 zkGe*$5ym;Atuf5+y+10QIV~Y4BXHAVurSVHXZr_M9h||;D0x4sadB@>%LKc{WfoZ# z#oH3{d;N&4`Z^-YCSfQq6||F5xF-as_dZ2;5}(tZGbB91!up2X-YWKSQjI*m8v_c*ecB zq9=rU>o3i~O~G8R8_2{#xvh#19XIJ>Z66$a8w0|6ft5rNBbVSJ2zkV&;)K*xslqAm zv(=DxkH6r|ODil8Pwb4Wo+(GZo`~Ip1MQ%lmiT#lw*hH@2vVaM55R+$!bUb#e30?E z*TqjJMLArKiS1EHb3IOR$aFy4K*1v+tS2a0Q$(#a#H!aHxK7&1Pu@BPM&_{_pOM+J zgZf#oL~G$B9j-rV!-PMY6oEDrGDc=xxFb&t9JGbGC&m_RVv*AmpMxU+{L9^vS2L3u z`0oCJe-hlCGj0Yg{A*ugiCT(NE)_Awo6u~$ZZ!u+QpuAi56pE>1o zGJC6OmRYeVa8m?jW`qc=PKQS9LCf%WO?%7r8LH=AjtG073@}2;#nCKUu{|PRE12T3 zm*hs0giH>R_!s;WlL|0z@(=MzNkhO;@Zlp~oY$MC`w$fu+-LcoFDGWP3sf(;rM3JGFrD1Q1oF()-`77oz{scnsvy(!9ul`o#dR@^?|_nXZlV_c zF+$1B^*miOAC+WxxZOt!?WDW=*brB+CiT6Y**ZKAmMJbu2rV`IcVS-9$tNxs8n9qa z$8d1DGyA!ao}>)r(UGxmn&Hgebfm-FACI3xi=A==4MG24;8+}=m?_mUHF_|-r-OyL zH(>2$k+qay1$VPH@!S1~-2EkNhKW)u!-{*j|MgN^ciCzWHl}@Uy;_IkgDFNBCiqae zxVV^c&NJYy8|4pHbJWoz2u3?iCZ~CSt(-S*sdZae;-%A;r_w`I6#c&q3m6#?hE|M`|LyRwXfYR~wc@ITJpI z7LKx^6vTFJW?~a;*@-58s8%_l-e9LWUE_w_JQm2ZXX`dQ~jANCC#^C4+&TGJu!5G3iIx3ME zJZxd~5NrFdfheiHM?D?qbocz=hZHI9CM80n_0KHoIBqo_fm~%XmzJQ2e!9{?<;m%{ zSyNSq8QygYR`HBApWp~iV)VT;=frPS4LnCoR7(#@wYjOfN;lM}B`g*uts#o*a!tqU zEZA~NZHcEo$yReO+QMtq^XP+S(j!ABTp`htl*uQBafXAfH!V9DwUT|Y(LS#EJkJq=0)kwI6*TOE-{KSNt}$qbe-A8BSbl5>1`8=&kFNpK?~7P>29>P zdSL4nwAUkE*zJ_}V*zct3J4XVu}q9BBVXOYonK2*g09!enMwh*+`vMa5l@}}d?xL; zqQ$$j#F=W_9Te<>V17i7iDhkIq7tU+%5Vm^kccWSp*8YYL!Hrt%`rzvRKa@O4DR9y zM<|aGlneN#JGs@grJldz#|vS}Jnx5&#M_bB?v59@9e>`&edcT$l5<^OiY$P| z{+a5-Edd!Sq=KGMb6m!CD~j{P%zA7pob8(}K^lI;kZ_(!I2<)uD1BSi0Ti6QfO~pz zU!ztZEv&0C<(chDL_sU+Wv9^X+MG5qaq;;g)Vn94d2q7FolE;YJzD( zI3lL5aIJyf3%!JcFLN>uU788c z#Bx=*@-Un!&PYc9X&636vWAi74nge5lF5*!=NXf3P0H#)SFDhnjw&85_9LK83h3=e zO&-^(+-}BfX+_Ibl>4%($2H9B^5@U|LF}H>L1KdD_-#s+$NLGrLXsunw>ZnrAnE(x zT!4r`Eo-3JU*SG^4rE|@wwQ-0e946R&6vDzrY$R-nGYe@52FG^M@f-r;PsR&!zsen zD=y9|8qZ@!nTL(_1@;!`#7{adcJOt-Y1|by!JIP_Rti3g$AkQAJ43?6FECV7E5u^YEsvzoC`dq3= zLV7)i7#s}KYkgMt$V{SAOJXAp_KrIaBNj0kB*8DFLPr}m>Rkb5<6J-{oxTABrWh?S ze0Vqf1~c%xn0PNLPLKd6qJUMCF}ii`G`HaCl{NGbLt$5q?>&{n9B1#iofGTZ)8oZC zxeMe^QPZV9w!t!@#Z}7}a_u}gX3KD35|MT$g9XV@pb}1{NJsLCF_e-n91z9E4ph4^ zIp;*{@XQ=Mvi+s>P{A;D_!#&2r-$~d8BGNP4GG4@(UC#ORukSzC0&M*t2W1!pxRth z673f!n+g|%X01!GKfbmeCpDFA_SysThazi92y3#+zERhUnhAR)ATL^>$%7O=2hil3 z*d0b+AnBy2rzuz~8)xz-DX|b}Ff)*1LB@ek=B7&9{t99q%g%KCproJ_5`YhFrI~5i;sTwEM{u_KAy<_tpd;SGoT9)WVI}s1PB^$JMjgty%=u#fUI)b3>Z`Ozb)Q7Se=0g}Ir54x}OyI#dumBx03LH90 zD#D%K!9!{$vJg1epj9t>*VX%>^v=XMV52b7&5id$i*5vhboCd~=L1h^qNV=h zlBxu8Yl*~+TvIL<~5`bNCpYaLYnX1zqx;7<6-7X_w|kIwwxh{69OLkE!h24L)X&9uMtudLJD#+xE8zJK+mP5ICr zEV2D3`;t9XBieMB7pY^!mr_U>d>6U=&*TWYIvFjjuE~=%`S&~kg%jO>%@=sHatYbJ z8Ik)Xu#=+in}{tY>&TrweHpy!lz#hm^P8qbhbq=6x(j42o4O5u*naHZ;n-OeIz4Rc zZ|X>3WS<|bC1+}-^)>hWigZRf&QWbBVZzs^2;6wBBEsVjF2?M6p?D;jsN-Z9_|*LZ zHg9T9PV4YJJ}04)ceNroB>dvXq{S?FtM(s6}}Qo~PDmps|&_XkE?; zd56Bv6;EqN|5Aal6xAMcrNEa#v)6cavdF=@w|`Zv>Z{zlu|i=>I#oL_;PoQy{Q}Y} zWY!wLDd(AAjKhLMgkj=go4MQUnxU3TXk0V1@=4-A&crUTGYOs_I#0&M&GS3mU6Env8Q~!8dMcrx~TW|CG-P^lF z&mj7C7bQxp;CG+rw3cI%4_@iL9>XX8uic;j()27a|D+GhKItv>GurmY_VPz(K`W(MC|k_5`EHsTOd8xM)<`R(e0G% z#+NVJaZ#^buyAk;|G3Bhd1KCKU?>yPnwnNgG*!m$IsR-?hDDIy=two~pHcW?=rMq0 z?Ag!P0EW$abx8MZQEE!?Ek`2ZTqVtvdz=PW*CLXcNo zne)gwoO09F{(A2ubhbGe;KRhScwZQ{@ZW)aPJ70JH@0or^rsq>eZ1qv=G+*W#tMkh z>ig{Cz0Tm~TRMdLPfwTeJu+s-zNg;_W8ryQK$NcH(dk?bVldym(DQ@>`Gp26ipqbY zm{fbm=akgHN%_mGWz}n((?q*EdTSUl6aQg%OUm%dX$jG6`S{!`?>JlC0F&qc%?`dj zoM6tmfh=4Tkry!S zO!MnIkpx(GJ*X>7q8Sq{Y1Z?6K%Z!+jl*aC@Uuo88(^zRaI7_^&et8(0|UqMaL;5v zc?2WBIk!|QSOo%6CR zZ-EvAi85Gh?-wXvBX#)f+zCLE5jip&(|TgS@2z|1{XkLmcBk<$!AToE+5=$7mK`H>1&zO6-+ZBkqA2!Q5jS1v2E>rb{2<%%Q^CgK9tOdv-i6$_a2{L zD2+d((i?(&CY!Kaw!lafU`hwd%Ue^dX1nv*$u~@XrRz}z7sMNLP=bb9O3LWljVsR( zP1~A14a8%)d*m|4E~1_F-g&y**kxaGGK0VwA0y7cda0Gw^x6 zD*U63?2gb!Z#lBkra{>C`ZR92HO z!FyNqBbuJ=V$h*RnyRFz8P4@@usKzY>vh2U0wH%N147Ms9(dg08c6Mv zq@t3_@Vh&9sX$WUtnGma z_dtBhD`L$Hr{zas_Vc4X@n#kKZ#{g*ie)QWVu1R{sR){qTHEN@dNJwU|f7osW~Bzabar;j3dU@dz1Z5%#3Z}*S*KT9ttRriRX9r-Z85pnVG)x z8sA}Ks>r3y8D_tmu<~E*3xS#0iA<5>(vWT)fSg-`aW*{nSIeHy_TMfoto*`USO_7h@ zet5`8gzge~tuZDg96TM%gR-Yp1^LjIuUc`$Ew*Mj5=j$AfPx4cxdEe<0C=Y)8C}IJ zceQ`C1+&rL35&@W@6+7Q^d6_|SUv=-ZgfQzB#eRJfq|@23X?Uu?4k;8e?bIC5)w&K zqqW`aM!`J+VrUWK`CSWL$Q=x#(K@$n#aI01v0%N|K6nE2;U1#Q)V=l1UV*Cx%6(r3vS!LSWOu$r9A#R-fcR~55ASOH55 zBN^9Y<%?EBZNb$|25u_>n6Y4>d~OJ7^7;a5Rq=|%VBTQeNGt+0Smaa|vlc4pvRWed z|6clhP)V`oR%MS>Y*x-bFazPiuuvc&@?ii!l2eTUh3Igq`SN(ED*J`)5giWTWggZVA1BVmp}+;~V7 zP{sPA2;3y)N068(3!bnN?dM%4!VA<-38LF6cNxi4hV=857%ar*^n38Yo_6hBeNv9oG z?_WJ$7mIJ3vJ2;L^Zr9*B!shcnpq{IsWv07=RBHzX}1vCIv7 zH^^gag4h;<$OMQ#hlpCttn)2Bx2$`ApV8fkv%^7>Nc-mt9zF1U2y9ep|F%evG`Xr8b4_lg8!Yd*ZcdRpp)vzoXS){F&Y5+W+`hWGT^H+ zCE)Z!64(2S1fZKhfz6w8MvmcRa^<_$(FrMjdqWAG2$5S{Xw4O%z~^fU(d*$na?Kb# zF7~JDK3^fpnTT(jpWycv_63ypdqKrs?wyW`5%qpUz&F^6nnBKS;J(PpJ@orr z_}Z=U(X{I|C3L-0glEGOdwhX>`5w{d8>0Wd&fnBXIu`wcQeMNP@wNnmW6d7%tTH|# zYuvLo&F^#d_I}5l1yJVCW6BF=`A)ujunam9k@Kzd;S%PT!we1h?p1>wH@~zY%0Q1G ztT^k9l?x*QorqWHJ1%2n?Kk%IvRcQnWSwxdtN_PfS!jR>o=H;#;6lFK_A0NO%x(tJ z-?Q?4PSS5WFdz@5t3>lo%{E_bf%UuDGxoj;XXZFP|G8G7hZj4Lw1qnuv`D@%I5?g; znu)LaII4vnX_YU##N9PD7iUvm zEv8EHAp$U7)=iq3l2k@ikgxL8kUReji<229GoVyp`KD<9=S#BKT|6t4N88a(qMR0( zP)|V?AQtzEsIEBKK|tIU$3|T!6-P%>RNb@@05fGzz>QurlGUIRbbBj>>O^p65h+48 zC##(%DX95l&L4lIS@PZmvDGKKl19+U*~I3$0y*`fkdjGrWU$UUy}=h;W>h(mr)O8Q zw*4wDUCW&+#&%*z*@b15*t!!lGc;w2$QrydxuCrQloqq3o+HwRnU|d5JW#c+Y z&Sh>cr6ivxPl5oM0X4(R$os*1}h zankSWH;=+7T`p}RQvajOgSy2wpCDlpKB6fis0+;e04;_{|+_e z(TmL1CE{WBjZO^8J~(yx_$O8>ig;6X(~bb@aiFECPpsUNFydaG-@6pSq{Ng_CQKe_v^P1Q@2v>E`U9iF2kq*^&HjwZ1IJAwRYgzdfn4i`qHXeWIWCJQ~CK=%4)E+rx1QEqRkcI;Z zAc_4UjRg^dkpzMp2p|U_9Ug}OBSss!s3T4eYa;&ybHl1B{_(NO%$4!jPW{H=kraC| zz@E+uyJ(|mWYS^ZGj0Wi5=F|>4kYmQoQ5~1p5o`*n4|{H?uZ8kr$4Ocg?x2?svA}; z{^qPx2i+q@_o{k?O-YYIkrJ&pqzpOG?JC3^$ z;QOZU6C7Y~LE*JqaShJ@a3+KKs@Heiw~mA-A1!qIVPEKRHkB^wC~$v&AK&_fY{nynU27aXiG-#&hxKmuhA(w~^CFdjz*oilKdrNgJVMpo;osqRBvzd$910>o z8AjxKue&oA(IaPDSGc(DO<~cYQs;F+y9}ZxYQ9MEw74VSB6URuOI}NNCxBtWhJSvh zW?8NNwIoGiXHG&a{Ib?A6HD3U-lhKcksdm2XKv4Op0PQG#gdhh81L5m$Ljf7dk9Jm z?m0*DPVFi{iz^GV)lC7{FU&aFRIXyuK2JXiOCg@^>Ig=^BWyA5BOJw!Qt8Ri_3ze5 zQR_5%(DnBMq&b^~!C+4k5XdK^6bZa)wpRnRG+30jf;9_qY406A@n}5K^ z!?6sCSHFN*w{{6TT5{?gz1eK^=4ERQ;kxnn(MF*&JMSpj^*j+$y&IU_VXCr6ND2$W z2B~i1ER&jRM(6e>(|?_OiQ8U*=sCa^^c1n++Ycm(??|5?ZiEgdt0&JjxzUELLnss* zQHjSG&p%t4&2)#Z{Zs&r1cDM*!&rP`JU^9g|O8Q*=t(xS{Pl2CF)2aarOog z9-BE>6J>YwWS1+fF>S~VHe|D~MDt)~j2(Uqz5kNI)gSyr z3Nsdkdnh3dJLW7n7am+>QNVLZ(;F3%bVdMis!-GHLM6$S6Dk3x@BS>N^u~7c&-p6n zG~SD@_Ka{0IiMa~gQ8YS&x5vzdM6@{O^L_$2diO(0fi8O(&*HacWedI+^kjKdQc!F@)$xP99(pC9mU>k zWf_NqJHkwjcSLHm=tcVY&e7wGaIgJpK@KU^Few;KV(%Z+713aaOt- zp2@mbmZe2&eA0-=Zbk}DOj$XeuAJ`_m?xXP(OoUs?OmXXd`DyF=z z{{a{y4+_ch_2VT3ka-?u7|>jAV7ZmfcmIAC0vt;ELqx;O<=gNgYZaMT4rCX+%`d4X zF*{t>z(WFe=NIrDw1Bb^3cf!;#0+mVr{WKiK4eVY@jW=slM93%$gi#ym0T+?t^aIK zo;Z9;?EldwTi5dldCFXmP?6vHEKvr5JWO*K?f@p{1tKJGs76DYnwI5C|DCxs`}-3`x->2kFHKT>>>=BA{z_6^o{k=tj=}KKPHU*)WusH&L;f0?L4J&G+!#Y zy*GVk+3yuH6mU6PDEqrMTVBy~Nu|o$Z`bnun?c+jrWfdccgOxcwgW|y?>>fHI6Iu# zl~y&x()_yE*zJ6xVz}WAlcSFgx$W`=F!GiHuO+i_hdI+S0qpfAFZ<4y4#zQY?wlx) zfvZ!Q=3fzzC@+_dR(%H->b}64B?JcJv0dh)i&%sHLMAGnpww>r8#R5XI6d}<_uSFg z@8JXT%${S*6_PC1_XzK z29F@zKwrE>FQ|e5X>_iK@C_l?W76HCt<7JYAX)_929b-VT1%JY&` zOV8HSBsZRk-9E((e{})?saPL~48Dnc%ROj#+$W2xQ-iUz zp6U0sf&M31HHlJ)_;GRt{c{MLOxN!I%GQ=W)#>dsgnyyzvy+iqJkm`#1~*;Sj-9sX z8;oJbUYmy&4nz+T#5@nfuHFyM8D*F&uZBzAw=A*&Y=Kc#@e}5a7DlY=`X2D+=f5Yh z)uR`?({gYb@!ntADF8j!z`~nu)viWE1g#C89@nQB8{e~ESaSEXt4qKEZu}A_1Lj`c zhR97vG;c>a!nzvwP#;h(H{VaB)9k_b+k=>7ba{gp-iZi3LO(;OfsnR*eCL^#(WtyV9WYB2y<;AvK;7FNRY`Dd5?;m)7BzP{_ zu7#6^qhD$lcPc9I>H8V zyG`EKIoHniq9)Q1&+T^|s)o*i>`l+HUhQ^zytM1CbBysOPXT88T?IQZn z>=U&)!*en6jU}Q-E$g*A9~gSXC)gvhtvVx(+G!2fnI1H{PTcG>c*5%qpxMV!&iB_p z0+a0a;;u5K_NH6ECz8kdd?59_iR+h2T^2Po2Zh>tMTpn!cZ*fmFo07X5$&H&>n^5fLX_J`QBh;RaQK4Q9S@eN{I zt4VF1utzxh+grgjfHV27Cf%w#1UbCze&1)%A2QrYo!IvQtl_wd!urP0E(8B*<4#WR zYu-op--t~GWmPC8W;_M{d8Zw7m{PHqE{Tt+MK~Op1}>_&Jq7x&1`n+Net+<|)_P?; zc)8AHHFG*Tu#YG!4x@@3U)mNJjgtrk5QrWi#ghtwA4f)0Nwz%$w3WqsYKg0;GHVM* zp~WbI@n}q^IYQKzYr@{KYIE40$vevS9cOgo@|$f89+oa#Tr^GA4WCt1 zbjj-!MikJzdl))O^C_sP=z4a!$d*!+HB^Ni6GkHTrcjsuB3{2$R8bGyk({P&P5-gr zr?1nPh{#RyE0DnKh&AU%jjc48T=_{gKAf1xtx7o!Iy~Kx%m1;!FKnwbn8gi`Jdw$A zxgK*;RiraDZ&`}TToYZ-FJxH&9~lW&o)}H!F{*`^Bo;SNW?3$*-&nbaAP$)j|6PsK^+_6uX4s&XVaS>HzQ6U|o zh1d|&BbYU3S|#$aGziD)H>R#qXf<_m9KP`AEE4g|fH^QEq~R!DmVC6TqLjuf+GdW! ziu&Ee2BE1eW(p2BSyjG(fnv`cPi<*vaxK2efhUaEYx6*&GWcc@ZTo*U_T52Ew%fNT zAXQKZ1{47?6pmH)(t8abEz(7r^se+CNa#|e7ZIdLi4*~)LnzW~=tw7Y5bk@< zJu|oc?w$K*Cdr<8@;-ab+I#KnwOmwI#`WzK2@I~fjXI3KiWYWR>9aC&M#yn3^QS+L z=p6W=R9YMHTz)v=j477KEr~x(MX@L@GEK8LLn2eetqOVGTkg4inz#wG(J~q8U{r7F zbt!kq6U%&=WCUelBpIuz;Qwd_kr`VNo0z*}zR+M}LyOAc;0V<>bG%=x)u&>X$f!ru6miuY`OCSTH1fr1 zdiYWtAMMM+uSJ+NoFeGN0(Zv$2h5LpEq9wscNvr{E9@)H*VCN}^^&M>a$mZr;7=37 zrj-n;+|^ft+r~e|uIXwU2wQV|7bM3TTn{i2u?z_s@$oHDDLsejxiWZ|N+thESr9hliY!CyXR9#@^UnX425pRZUVn7P1v;fTx30`tNHMNHIyLYgz8QVbST#FsN!FTGT;qj3^3gJv zu0b*D2$n}vi_^SYlUtox-cnO!Br!1o9K3fb0|M)7J@LLi-2Q642eve142sTZ3mzir z>yS*XJm4!3dQg7UD0W#O%}sZld3ILC=*T`&Gj`}!} zqRYoS1H+oS(g#nIzl#St>B1U=S0)alox_ihFx8t+s7>hhP2$$_cDo~EYTDf)O(ScW{oX!{jq ztFDR)E5rX(R{TGja2%}$|Efk{KA9ERY-e@SMsbSMAZ0&KK@0|;XS+!0FKcfs4U{cd z@z2)jcWo?tCTH@7Y=^A<^2fjX)ATh`ku?0Ide%@Cn)1BPaf6WY_W5srMS8P5oACqA zn_FGl_ev4Z9DKsIxAjbBs<9uM?$ngc1x6@KAPg2ty*geUv2NC>2;3nfPZUK;5hu;bhZZ}6-Td)0L`N95(gF$!=)&v%VXK+4}HbIKxGCK|;hW855 z6@GK5l@WDR_a?8y70Ul_kQ@KyD40bObt7coOoVl#+B})$$*5d&zNS$Mn(qddj8Nhc zn~3;PgJ|&0ww+++F;~$NcAaxN#-0Aqo82KYev8!-IhN*zQ6T@SJ!IsGwc486F&rm$q;H z*4UgM{m84wj$e@K%9FX5XWtE=`Bu9M(~x_B2={k3C?PhZ%Xmz{Y$I(|e0;M1BE;{by=s{U_Ox7d_f98iJ{~D&)Bw%;yF86C5i>kJg!|(8^%@)F zCl>8GX~LWrc*d*U?w$T3Z>Zg{Z!mU=3zT1{>$lJ=ZiyVRQ{b+OM(&GSfj#y%T|URP zV(W;RQ^j43BRyn?HNcVAwF1&@#l>f4$h^bMpxMg>X#d08dE0b zGiP58_^M9Sua<>QTiv8<9DLB1)e%M_=yLy6$CM(r`4`$xtfo71{wXs*N}+UwAF&#@ zdzKXwtGu_S@d2G%6ycA>)*jo+wHO5{SVzq(v%QwqjUB8@@&yN4#6Cl$ae){MBEuyDwkiyPrZZtcxwwVrALn^2v!9lJ3&@i!#2^kj?mst!(218HRsxTpU^u z)orGr{60EHCe*bi?w9h4wv-DWlbod2#yZo%v@e*(D#3VQ3PRc1dHmq{B7N2)=XNrh zhn+v-?_VqhTqRr?RHVg5zj{&8Qp7#r7VQ2s3v#8Oml>7HJU$ix2AJvCgDqB4~E?ef2 zy1aemp(~}$)6Z385#P|VU6vE3P`kB|_;hCo9f>jR#pJtCae3R?+daHRM;E}LtMXA^ zdYkv^B#6CoVdN(50nhq#Usio>svD$hcUipx?n|AYHWPnyhdpAn5_Vc60g6Rt!mZGP zY(9p6OwI(Pt_bw7gw)<894D*#t0YTN-D`@k61hZY)J^6&(2b{T$ceC08x`D&eBjMI4mLzmbR06u7$+xZL-hSTv1Ls|V`bal^zT1bb*9i=er0D_ zvzL@nb_~tg*GvdDqGNa9)Y4Se&2Eis_6cmA0&80ULtn)=SazX)qO1-N44;LTU^wdE z-W?vMJQwYCWkBk#zmbs95;Bw7nlBkL?w}h^6@64vlz&l;jet=d?KpB8=)6?5eZN9V z0g&G!e!+Z~bHmvQYY{ue`ypJpj~?%1x7O!vtmy|^m6WJ+6)eIJ4+aOZ+3x$E*CXXQ zGg=C5Q^Y^M&&E7ey=W1xx473w%BL&$0It~PXme1@o?9;|C+&4}`F2EGSnO^7&jker zpm*Tl&m;18lJQ)Io&w5h?qhqpl$fZxVp-<#-0)V zO98?#UK4|2mL={}hP5^OSOa1lzAlQPJ;`!#a#DsnL;5aG7GKG~um?LOCr?OByy*xA zg7>?(pf+)W85#F2hFCyy;)@78acyVg<(L~a4Gn%gvuD|fm7+~JZW+xc;GCYVoG!I{ zQCM|9S(ZC&(aR=M`_s5HSN&{+ zbTE*2HL8Ni_hwgcf`c{*-QC@UDd0H6!!M!Yb%vpfu!Ex`j0*Rl=uOporH58&+|Qps zw}7S+R-d@gAyj{rf9CjLsvplqwehly69iBuTS4F66L{!#h+2I0*G@yg_a3siiUM+HuTAin0K0 zQgUi}Zk~k~Gl2hniNO;ao_N>r)XL>*mXwr`Pz{R?ipHc{qL6oD7w3=9oms)iBux;D zB1WN5TbA>7WMpKhl`XCREoNL`s!OLh+qEo-g8;B`sXl;RObda--8;vOwB&g4?G3M4 zr`=4GjaDMuXzUje&f4)Hxo2>0PMsGdqpNGwAw71pl^{$?N@|c40{Ku!AU01$ecJ+4JSPzfUruR%>10&|34+=|FGHrwYM&K#xUS67`EZX z8@V6PB?Rcv!P$kgsn9Xf+REs(ia{t&p7Jn>e zGzRs;P$CuuKa zQkW8odwqQyvD!58_9&e^^z9TPm-%mDOU)L6N!IM^v=zTS!IMLIXxCmdRQp!2G9j=H zmZ%i}w2B?)I@IO;vrr!y)FS-W(UDz{`>JJC1;PNHtVSoOaN|9+aT#M{;}T=v)z?<^-td1{aB#L3*!9PN4Jxu!mR+oc$O)1FhdfR zZc~y0cX(Jd9ufiAIJp`Z78QlNO2pWvr4%SiOJ74|IofRE*qi6n{rwTZrTN!wIXACh zF4m!*k52qNlbucVUT2hB=u<8qGFT&_Pym${7d{j>GR~V!#Kmt+Bw6q7< z9%Qi00|12pcZOlnuAZK@`+UblXJ0oW6!B{d!kt3@Ws!P$6#N7rYi31ZUK-8=tFcKrk4K@4D1A(7Eegv(^#id~FT z;qJ1kg2e_QbZ91oX>s4bcUeH!aB94u>m2b4W@+3<0~$fLR+M2cfiGtV9u`i1=7WZo z+*1DM#5Ls7^-gnHPQ-`|fU;zQuxLL7I{-mVvj__$;^Dl}7&+BG4R!w-OUI%!kjvq+ zoG)q6M;txSRFxa5!{NVP1BdiQus1d~0`40nB?kuwx9Gy~yk-G^dZfpKXla>>k}bVF z6^mYQyf51T9u5B;3drk{YD44Y!1JN`x3f#c`G!DxU&7BH_l<2!d3)sGTLKac<$SWEa?=FN8Wk}Lr<1FTP)=jdNRSYO?z9@F5J z1q?4%iG<_xu(44rBtnB%6y5|E76$BFIPb;`jE$)S?jEdk^kD(O?<#Z`*m;uf2Csx< zf7Wjog#+-;2DZ$s$l=w|(ZPWG?isDOISadHD2RHu?~>7m9;_2+Y3U!^q`8m!5r!S) zIpd#fOZ}}6Y8e=4mJV#0-#wx)yMxKf3P6PMQU>l8L)ai)7w_#W7^?JLHlfNU`1?`Dq9=f{}#C;(TWipg3a7pXReCj_s z&%*I-!nE_OD7YC;Md0bl#z!SVuQtI%@Db0N>I4a-lJ0(^IA!d-m}u%lD~aUqOo74+ zo|$4sQv@Yf?3`rohrBDI0g4O)T#|15nof=xshw17bu6dFXp2%vs(Teq#Hy>O3 zt_ocyWnJ!EbwvV;0RSca1IdRMBy!i~B;6!$?LH)Y$V=a2RvZa)JpTrg`Wq#+wD-;a zagQk>p4 z*YrCu;BD;AjLr-DT_~RXhy+}Ke`J=Fj_MXNTz7@MRWvv83un0p>2zp@OGnFPdh7lTNxW7~&h+IvH?$_LZ&v>a#AXv51*J|yezyP zpc`2h%kB{e&*^dnc^9SRhf1IM8Ce@t-@Dc%IypbeBca$er0bKI%MlHyW*{y7rz%XG z-VYtYC0&V(YAEWs40R9<2vWgWe}okfG_^SE*V&z+7omR<}7$O)c_98G5JPNRZC zTna@7+~ejh{}e90>NA^PXTOE_kI;aH`)0lbIdxfS*FlUEV~3%mm8iT<7m0d|;^ zCVCc>2z6Z#Jz*%;E68THCE2&7@WH>NO^sR<4z6 zcQ3=0_%g{}h`B;6T$?}q!D?oZ#mLiR9xBb$ZJhiS@(a2rzgo2&14dRA2RUACN$qcy zBV@eZN}?Ng+13rBRbIbu`##mV{)e3W50@gW!#N`Vtwmc0doRu2<_gTm1!^97lX{tT zSQ*sxofj<<*|kWax}841I1_rUvMg$=?(K8f3%I0=+KD)uSg+91)RQ3B_P5ZYX(RpC z@@)Z>RrV`q1+Letp1vL!$vaHYC)WEtGmq%3P+IY^)~lW?8d5RI=P)3JI$E6Drk$@; zH!lz8h{J^@mWw#C@g_@wfb-R>7y)~P(nGolBRWYt)ISXK@oIS*IU_o&%bt6wiJKF( zX#X$K#kn+;U^F3CzNu>`;PUQJ#!TK9B71?xcH{AEb0)&?Y&Wzix^0^dd+$#mm@rSV z%pVq=BU1b9g$e5Y^+ro0sF35I75Q__nluy7 z#=wC2-Zp{EG5u>1?{7~xQ>pU%oda=BMf@7^#u05>RL^Rsf`%6mY82wD?}!PMM7!%? z*Xcl~Zx#0EjK*|ZFuFv>72*7G!bq}-RmZFqU!ieNuVGM-ykv3Ny|$FDLzObhI9=rw zNo)SUTlOHlNjuo_WBZCOe%EA?#3gwSf2b|f@O{PJumEISM?Ytjh$$PpF($$6C zfep_-$J=t=n-v`mz~7!|+B`&$3@g;vkE}^UyHzO(QzwaNKjSIwn4y6{+7c0M~lNXeu0@(DPdPE{<;zM7BS}7QK-5YePYHkF{|k93V96h||2fwZ#S-s15tLyI#4mgf3M->A`L2 ziU4JnTV_Vw5Dxvj}RGEdPH@sQ>;Q+%}$aI-WTMr*`SfV$3QnAlcrzy*7 z`6-jTbdB+K(2|O`M&Y6To4S(Wn)mg>tfTnvGcFaHvK@A*6&b$~M~9dT&Tih3t}|T2 z`Tq*5;HST_g+!G;W-!elP9SHk-$k@6Wt&t275W`HmX;pComAg;P9Lc2x;g)Q-~2z7 zMiB{G{ktcDgoNa_qO7!z)aA*tLl{6#ttYQYOVs45zkDRs1KuQ2lv9%}lQ9eYZ=9Ht A3jhEB literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/new-access-package.png b/windows/security/threat-protection/microsoft-defender-atp/images/new-access-package.png new file mode 100644 index 0000000000000000000000000000000000000000..f2a7a812503de35daeb1293d812ba9051768a703 GIT binary patch literal 58871 zcmd3NWl&sQw*G3u$!9BP`aCg@Z?(Qy)ySof|zx&px)alOgomIlR4;rV|ttO848l>)oPd(lQj(cDS^d z@HaQTqi2_2-}k*$U9)$`R1+N{AGKPSvh2~1Ox zo0^l7|MhC3r7NK=spejLq+|y)l;T_bmc8_H`Q}VAJRG~rzkA6a^uh#3?vExCEGqs! z4NU}&yqlcjo&4XQHh)D!(Y#%ObLf})f%$gDpZh!IANapF6S0Ch{**C|vhngp+V&aj z8yn7>*n0e2*yfN$Jr^z-LRi0IfR!*&Li{_-7ckWy{9v$$ztHpRGbvGntU=%8oS0B& z1^Cw8+nXltgDlf|M{u2I#OrmqjNC;09m%3Qnl>hIkB6}_!~gbBRT>c7mX^W65{-YtSNjh&}h zrGz?5)}Dzfmc8qtZH+C`7Kni!Fu-COB(pG0~^M}>V5+EHKsv_b=a>y1J(W*n*3?Y^YxDq=+FvuOs5YSv1+F; z_Dw$r-d}0Os_a{QH zm}^gqiFZ3deX0_hLDs7u+1zIBw`CP)@fF?y;KxV1bF%D7_U~5Bv9NtUo$BpZCfAzn z!{C=QBw{+t9|%(Wt6X=9K6kupPY+yoi(D`74$nTR{94o|`2)F7YQH?TE4qE~Y`=%7 z)Q+B(xN|r>-i_TA*!jd(_#D$ct(yVyR@~ZGs%Uo@UoV~XdncBHWbIy(DqdF1?uQd! z@H4|rFX5Wem+f9+PQ7kho*+V?SSGK1I-P4Nvnf`(fk36@3YjF zQX;(m3*H`m(6OX*MM?BkPTIrV*k!<}{%;=(%&r}*6WqviyR}E$cAK9OW#- zfPEu%i2lnZ?tLow5o7Inf=~zSn#S}pLsJ=P%Yw|cXLi=+5^m>nnF@lWS|&eDfzi|E zObMv}T4Lgo5B|E~ZF(#oq0b`5>BXGSv&*EXy6W681j;P;cm$%~eur->u9n=~ATfA1 ziYqwe=kKavv92%ps(BP%5s%cM@^oAv*aOzT;(#t_cUH$H^Oidtqj`_S0ZUIW!;;g$~U%+0WmCevol?zo$wW)kt z8n1z`FS~2`pylOet{J{y(?g}lO-z@8`lo@{``uR8h1e5#U*hrY<0``Yi{vE>T45U@}}6mnjwTwBV0bBmudG%eMGy)pcgu!9QXbE)4z@|IC1FB z25IovPS%jMNM3eIK*zhNno|t+S3<9W>L>omz4XY2P*H z>(_I78-)6IlxvP7AYfpVkt(VK*08d{1$4l^*tz}}~7zH6W_=chVjL8lo zF-0W%AuXhX^XWMA2_E=~Pvc~4gD>-uQi$I>c5BmvggE?I4!9HMb1l8vYN;S>(~x(1 zX^Ba4;q!F87CT{LP0N;A616_%^Q`W#R$@>TUYEFO;}bR2=hKA>eq?w#K(u^%0jM2( zx;vr~^i$}`neCy85g0v7uJB1LF!+nx00XxS9=5YB)9i00m#6N!)@QxBB!UyTDGsb4{E4WeE5MNyvSB_i3w7 z=M{~52ts1`imu%4Sij6;K7E~)`)Gn%D#NMuDj*TXJoy)Q+}`w zehKN*hs^tnhPxg*p^ZMF2XdkNeFe8|GduLyviA|JQ<|M^D&S2zpIfe{vwmb=vxwdO z;|cBL!TUL%?!=cH#8!uq2HE_Zh>`7pGO8-nhYdu^Dqco<~>$b1ftxu|9Qli zPxK*)()0{hG^t?^jnJzJ>*HMV=;b=o%Y_x?l{U_m%G)BGFI0G?&b7ZPfX>$IzmUN zPEUtEL%8kFy58qgq^SvgW8OC^dOWTngN#jEs(;sEq3saL>>GxC2>AKR>^^nOE0l{= zBIUuQfahXB!7HS8)lA_hmqvB3kqWEO-Kvn&&K11vVt2~Jy$<(il`+lT7%5oz{7^i_BkVUKHrR zV%O}*7yo3u#C=U=`BPTK5;K7Na-qR|G6y+D6cTT*AH zq(A^Z_#f?df1ZWHb=+FJk7WY)o=xF0*p4_n&e)y#yn>(g-M3vU-GN}vj+MFg5#083 zU0W@l^(}+0B08>tqe>m#B2vg!l+e)YrOzvSR>Ij-(fcu)7yVbn*Rux!cBaPCso$B~ zCrs@<1>h%v(j(%^HlF~Who#qEb+8X2q%QqoA13no5%>N|9Xxc+huY+Rji47&XW9Rb ziX3>Cs_=v@lSAG$!lbxp`9cX~9HPCB~n z#AUDee46PK!Q>5D`?8mr&D)uHsD4uT5~(BjAliOcQK8ItfAyZFM7A0doB6^n^g1F< zB3KK#X_~t~(tqLEZF7?A(#9k`YZ7`z)N8TFMV0hiedqz+>kFNK$tDPY=N$IEfDN=W zCOE4Jl`@7c7UkoCJY3V>2P$+n)0p0_#sp;PtS~2l~j6olEqfp`Z7? zyFw$kYutW0538IF6;8K$AL(K?{y~COJ7oJA^bDN_L>67Bv)cO%4BHHzNIR_=NQvUD zOHFPduhYRDx_n0S4}B21>{3)9i6YK%M^BhMlEsLHjd5{uD()y|+=S(Ucl7lFBdCrp|>IbmHxNLHDSjAs~GS@J^w0%%|j$JwxWzDR!HhQd=z_zq^+P6!Gu>OLIvhb3I z6Gc9w*3aGMQ8zJ^b#kja{pV93Dbnp!Lq(JQPUE$t3iDhbb50!*r- zERy-ecP7^Ky8VWLMf+@P?cHzCrd3H{M=TI(?Dh^*w+M9Wl-WUH^M`%eyt;;{ZwZ&% z;|fmwWI<_`_565zCU4<)>afde*$cvV9XN|KMNcHiJjFz%Q!pS3OJ@GZmm%ibP@yA7|*d6@O#T9Psw1 zehe!Ju_|nPK>ZB1ek9K&`eAuiR@TnxQXwrD}ah#!_O z#JJ+IXOI-iG#*;5oogGMD{Eh}`_{qqH=47hmG|iS^UQqH3JRxav9VzaBs157+~XC@ ztO7k5{7u4dgWQb^;I2y?4h5qiP}5V!g;(R$>vs}gNg3j-dhg3I3OrJdB@WTPGel<} zX}yeoBqezU!A7sPe^cX{5aJ$rbV%Je4@5ELphd79o#Np(@Zc=_`-FlzZ}bL+_WeqT z^kKbo*X$rWzz;KjPS*HXZrCa*6F)1PHK==@KHse1vs46GTk#P4=utPB33fm?%?>LI z7eHQyG6cI9w$RVEKCwF(YBPowU}$7nnz{TWh7cOIcgP{sZfRqgG<$R27p2N&&Gaji zNXB03y=a){k-10H!+}zok*r1y`xks9ZFVdwjCE4L?yviIx3V8b#2y}_Rjj;E+aIvr zKYcPkQSU;w`c5r@5wGFjJO4FbpN#KITH}`G)j|5>q4F83!f(5qft(tg8DP0pF$Fni zOsm8tq>$6}As7*rQn2M0#}w>pUL8M*&#N1ZL?9eM>Nn6msH0h=xi=x{)b3NK(2pyG z%W5Mh-?+Qa%1$zc`}o~%Q7gv_?=U_*OEcNA3CJIYcrDUG&TqrAtaSQ(Z9{Vl(K;bh zNo=d$ww}p>`7qVWIl+wPhCccVDbL9Ax~@5PpunP+FH@{DkqsC)#Im*~R9#a}^rMlJ z9A&DaNZ~h}HN|VD-z&pPOEt9m^6{+7si%d0WhXee&QVu+9lMmb@_lVj#XFD=oj8*6JTz~U#{+|yK%Eb@Ap6-pe}w+#!3 z*lBCz{ea-X0Rh})WlpJGO6zCOlYo4daosSVuiQhlGpYq1=&FK79zx%khv05LvDd@} zUeGVMVvd)NZTdWuvjo^!YrJ1xy}^ix82M)64hH-sok8UtLI5Xnd%5~KQ<(@ zv0?al*QhM;TbOTBLDmaf_(XmSI6SGIEN7rhd%YbY7wL?doFW4<#b~GPAGTD(Keo$j zt|ws9rh6#Z{Su0-xR#T#vxyg}eb3g$Dq5Pzg?){j3k{<*!DHoq>%|*}d9EO*cB!_O z)ez6^1B@9uC>%uSW6Dp8FOra7t<7$3LKh0sjzb+T9h@#=6K;=>D!Td#&cTGxUQS46k`9liXd@f}%hgUQ}Jj;CVp{Lb9u&e!{o8En&7P1uQC+lGHe_)aIob7n8 z2lR&Xl=k9Xi_y#Oz01Z>SW>$fFFsap_@+3M^oi9@eoK+`Rc8P zDvK!K9{_9rxJB%EVHtuPk+b$h?`{$V^+@-$RY*LQPto=mUW<)JvOap;g8N0ymxg>0 z^Rgkchwe*2d%2dpUYmr0BHHK;YH%qDD>4U3WW*U<&eF2fz{xi@L&1q16!ylRyvap1 zKTl9d(U@WrQ!;Va@JvE%{6d$ncMRnkeF|-La99y@L=I^`B{|qXKZRc8V3?s4x{48L zgfS)wO%!tEtEHxWHEV`(bl6?Dl(;`bI*yg_^{^1(d$Zv36yg{8%TEP1)9h{a4JrL` zybm%L{ezqh$`U;iiaZy&R4RV~z^4)Tu~D}-$aDXM(9F9LCaMxI5T>OHh-hkV6bBci zLP_YS?oFx0Ae*1=W}U`^w#5rG&RO|YNsY1!P(!O89&?~(PN0ToA*yPI`i1=Vi|sM> z;3;_)_AyqjWb`Dj8G)HoJ9L?}% z=OwOD@p8U$MmxFq8qn|hAo=)Nv4fsH`@sQGN7fq-_#rkq36GqSIkp#paN5 zbkx_s)wY-|2X6E;SKHV{C)rDMuPC_cBXq&!n!4ogHolQ`-8)U)yw;p3ZgoOOZ5TWo zIY?~;mx?UrM-LCBiFxURyT$a!h~i}!UoXL#3-k0d3{=thC%lU4PiqKeGYRHA!{yp>@?`2{SnX0IAB5)z*Q zh>?KOVBVJK{X7x?3qbYc9P|J0g>xzXE;)?ke%u(pGlBap+?v93;EHO4t z0Q*?7)$In^A|74eLIR|xmljq`rI5<#seYJg8gOft{Piov(lUN2{g6@ux+k|$vGhY1 zv&3ZHD8kdq$~mIEspIuPR^M|Qwj%^&e}R-`<%;=ijrwl2{0>HvId7%6Qcze)rNUx) z!B?i)EO8v=dTN!kXSF^sf75k}$E6F<QWhz;may)E z)PoSbdb_}n?Ccz@#nCi-fAiL-1#2E~*Il&@ERx=CWWxA)r-x;Xs|p+e4jVbu@Zk_WOtg$kHGrKMm_^Pv<^Sh(thfn2pcT77=n5mMTCf&N%F_kh;p)i*U++J zO*Q*acg%fw-EENXL;{PU*|35U$7&Q0FPm)xBXj@5ojD_Zb_72wd292a~rL_j* zeT;vIFKO-W`(=$jgjx3?bB?7ngv@N0Ybd{tKNk;z+OP@HaU3gxR!cCh4KuHVQ80Mp zrN=c*W+z%J^JXrGK+3QGl0ybR?z*W*U0OsERk0g4JhV9XNvuxZX<$del zF3BZ^h##jb*ydYg)M7K*j&&!icbm}ID;_E)Cki)2y5BS2Yt1rT;`}owpGI8R#xqTf z!&&S&}sQkC_R&zo1zrCRFxvOdW29<2&*>e~)Lx(5@O3PlQ)~0CLZ-k~dfegh9)G zn`Zi@(<1DC|K9LeJAXesNcnb}8@f)mk&2$J%5b0IpJ?I5U<|r(L6E`jP973dJsjUH z4r9vIgv$$1oS{twQ4j2|{VoKBtRG?9;?OJ4R!V`ksfQ3#bwbiQ$X$|4^RX{zIox&` zAu+9=|D%@Ub*1xzZ(iWHlbC{gVunTf{riu{lPK6;9uGUNJo9XowT%Gxh78R%f_Cs& z=qL!iD@840uE@;Mi*#g?6WfwRCDjq#?;ovvb94VH3z6&D{*Nh7qu;Zx>&*?lZn39b z;);MfQJb3`=UhT^s{YrS>h7Z_R_!J2QoGWcR}#`;LvCiFZAkhJ5XgeJ`aB$dc>Q9R zocK03hxs?{$Un%rAMklfn(P3m0M*q#zo47s&xy2Zr*BJh3pNfkL3SOGWDLwf;rXM~ zvzgP#FS0FGPPzBozZBWN?_b6piyP^bqt7*d-#>40!46UyXSLpcuyIX3NfkEA_?rS= zae8N)OZ)Tn>1NGoQ~0yT%u4*0Z;nE{hlxRTL-OXNrK#GCo|})~#00#=1E2W;fr*{A zq?HW^h0|gFy}|gDp0>R4n17Qt=;&zF855G>SM)qv+0|;=Gp!Him+{s^7o94}KdB2) zT1?f(Pv!uY#D|^4(DR>UQWWR*OrC}`t-^>bx59;t3KujZ^BvNUL``UEii_?hx#!v- zb71#;W3R0#FHw~z6aEhTyU6tQqjbd1ZFCPvkM zn6KxutvT6^-UoBb4v5s9_tcV13sr?nznLfTD}F03ldjUVmn!rKojcSBF3QAd!w~jH z){&Rz zN5@+yC^1=8Io4rBF`M|tz<&82w=I1`v6v@0q^ux|fHG5OB{bcuK%l8;PPzK^wfP&d zsL(fmGcjK1kc^Mwl!{A}qhk63>Uu&7%EnxPfe^Px2^F33KNsz_18;>)w)fCQ*pmMgg*+N8ZS42grSisfsq!bV0!vkkV&6KrCxafn{M z`L#g2aun+J+Kx$+Dwg2uWR*r(7{|vg{8rW=ZVgLnO7?Dcx6gbbTf>4V^*CQ-6}qoy z1v+Dv_6tLQHyZnIJm|z+YFiXbWqB9`M)$Hmby5@&P8AoaOSu5J>J9*$>S#wKUu||j zKf+euApG-qxa%GlUfeEYb5|a@pW;qI`!(}@98)T2{ULPaab~dRgI3`D=Ar}@NjnyA zsFCP;om)mV6?1#AbK*n2nr+*)RqJM05yO`PFSk*4q4V=<&SkMe(a+kc6T>!#tFP zgd!NKBcI9usF-RJN^{*VinaRBfIUp@0rk~iSqTDXc9X~kyHb7xW7P5$4_5s)tj&po z^=`i!2E-Z=cFYe_TM;56p}L}315+QOIWANGVl`998??BoQ0qk}Ctx-;z%_t>=nFF) z8guZsdPWr{NfEX3?~&~F4pI5@a2WX*(hKkRI>oC=U!fQ|+eC%*>ZBc6+uw%d+G)A| zAeBt5`LIRvt*EYlo&{i}^rgf@Al_nvo0ktGPN#P#BO~QWLxLpzRFpip1d4khw|1bQZ(EK|k^`F#XrwIyJSz=~rnwFJCzEihT!15%F zax=fY{FJ`iiGKrJn6}eo%s>lDcQuUh?I5S7mcYl$Fz^!Xi!lvZxxM>vdenaR{%6@W zhwJT|Yj$nmnqRzsW|Ej+TsCmhCi(JKMcdpy)A>PI5wbI*?%i1itESWB=KCX;b}IeI z$BxeH?k&T&gR)+(deI*8x*ssv_64P5fcN_ybp^L zZ6!!1U%}imaVs|2v=0o=8QGas!#hM99G3|sU~SKKA)W}ogz`1h)aV4I%UFtxdNAPU zrPmXJ{+Z@qu|)lGdRN}?`N!p~Z~olk05xN)xBu0R_)MLGrwd84c-@{HGU<}D8g5L2 zdPpzcC=%~MC~JR-r9?}$oS8OVgbM=_%9Wy?&cI-PWX7l-%#1w0P{pr+2mzcR8Mo`l z*Fa-2Y&K&rtoZ5FlkGfxJaQ(ACe?QxS1%BecJ z{Ll8-!-1qM)@95rlj0`wB;p*pJJ-g>89$G{)wQc-sn{*X@5*|Jf53d6N@Cp_O6dlp0_(8fdgRvUdV4;}79LzLoA`Kk7yovTHBLmUit4CO; z8qu35X3~psBS{&cY6>Uc9xdjvw2q@90|=xkVA6_?(d^v1qJ-CLXfoavR`!N(bAf(3 zSQ4V71V@~g^V_Dib_64s?E0J;r*%z**f$MAwVlUtE@Xz1eSf%ULHBaDjYy5;_`19Zqgw zV{~7?RHQxod!vmvif`xONI}wjjK#`Y8d+1>=6c^W@ z8Dn*G77pG*X5huAHm6v(wRYh{TD*svChxJRtIuYP&3X8eMmcN&u|Uusy~5TJ1E~ra zDQbwDrp>8Nlgr`B?!+|_91!(1~;nwp>^&HjXZ?#8QI}AmP{MfjhVG~Enwg%sguH&7-)aIH0U^#ANkqi54fB-_bs z9I2un(8Y4QoRH}H8E<`Dh1eRr>%w+OYdo=g0G&sgIY_zPoXc!(e+R{>1?yfwBrSOQ z@+Z|YgM!S^7*=$VA^}xxH6qI6qKl+?uLVd6k7$~T#`~TeR z^{nmIv%@^QCa-8;y#MoKmm` zMr3^|Wo7l)XVp;ck!1|Lok(r$sK~2&^3yGK)hIQ4iL2c9_je^fk6AMd$;b*xs+k}+ zr|S|pV%j@8k}((gN31ZU3{E9$Z~-pDn^r#+^JX@m{izhy^hO|_QW#aVDj&^hZI66t zmYLeX{rTxtXmE&>BMKmCQ}Ob6i2-`S@VQa-dRu zZ7k)T+xp(Rw9D>iuj?l6g~eE%#Xrra{-5o*_@{Rd(sezFumavd?RK*X>ehF{)&6M4 zX*$^{6^+zaH}F9A{0iB~S(PM~>J5X>9?sq`M+P2LYweJ7*ub4wkoJtGNFT@si(q$8cz1%q=X;JkFub5?^sqTsf06bq&-bQ#GxX zl(_HyQXCBr;U7zsT=RibW@8SIyQz#pP-1W_l#hd_^JXs6DC1d z=Ny0zua|#w4-K7k)tG?1UetFSw=ZTqiCeP{Q2nm(gA>X?LFk`j4 ztDBMo0(>PljZ{9Q_`7P4HNCl1V-O~($yoAOa%Y3)ACq*myYSn%-(#s@z z9ScQpBRZHU?Y;^m>UA7HYwBpcqU?4&zXEkRvu399%P-s{5gs#b;b)^$Q>3jGnKfs; z61+WYRVmT1lD@9h>Xq?ZVf9L4#Hab0jy2lWqGRGn=?xWH9PO8DVdMFkljthb6({_> zgNt#L`F1Vt!ib8Ai!P%Ua?hfPn0_r*bX$CwNb}>bQS-d<(`+L7^adja*Fy| z@@ahl`8CAvj+LPeJ}*vBj(nOKsrh-$BFHVhJcrCX5>`!KH;l$%IgP6=B42d~vgEm% z_LE0D#R%udGRQu0pq>udojpje(QvWqT5QkzJV9k{fm-b{{?Io1U)Nb2$PU6gH4a1f zQO@oVa9?!!P_t7c!WQ^+;UAK*ej;`|P80C!I;JICrvAc!d?=gPZ_ax9)FUa%ry=7Q zj_dtmQOs)pRUd$`VW}&1K4xs?6VxoHpT^&6e#9Zz@#l}Z4JRt`N`LtwXWd;Smzn)S zM^svx^G~lFd|j_elvb8mDG@!Mk`(VJQ8qyQkI1(;2Q#*izSPvMHuGn$y)tX)mkK+B z-)-^!zrWHRTEa)cXEm1vNR0(;eVbtu1j~yy!?vRj)LvgzRWZxx#F6%>a&!mMC@QH* z2ZK41O)Lc=L%mV7e*tRiO)d8`5*rDXZTDHHMidm)egXUsO}t$%U{bEJi7Hk&1>Rdp z@&POiQ8vow+##h1%5AC|x>Z@t+>s4-Zb@d93q5%y4Z+AxkZP~iqPcG&Lh9v@g0=xH z^c+stTT~AXUsW&%0$|C98Ag@$eo6mYvG8{3@!dbiv2FG8b?5Llj>87Nr=6xlmLI(h zi8|X(6naD!HZ)vrv;SH7Q<8ygGpBOW4)k3W#zwU#clY}*EDQk9j_bUiG0VT@hE zf%P28B1TShjFX`pzlO_^{WP~jYQwA!jRn4#DV6~Pm-nk1ys%mvYu}BCyP<6yn@i8dXkn ze6^c;IkyDMxZ0m06|*Ai6Y|9uemi|6kLCAfNfo=D(NkBpf1H)b5=lOy9e|=`Z>qNZ zm$wRbOOuFHAx{rjy&p8=eYu(rwezXddIlc|dQ9AP1U)mhI<+ii-nx5dQqAZEF;X&! zM6x0CY}OFa2A*$#?h)e+re)%AXJ}wYJEQ4tqSPe2Fa$li((>{NO*Bazt#{BNN@80xtSqb@7tXj@FN|AtNX&v99a3h* z!Y{t;wXUq(yaS89v>#SPYjGscnK?tUsw^a$wH;6$sles&Z*{A|l%;)q63Lq8K{q?p z<2>nQL^(EMqrZI*f|g8;!S8S$tqIvC96VZzoSE5EL#P**-E_DJy00}1HdLf}BTae-DJgOlOIiney2{{M+k}T0+j`DKY53beqoWbI zN3Qk2`a-#gKLfJ~<9E)p4L2GYd)c*+i4U8Z^IChKN=jd(Ws|h*5Q+&j=9ps9_aoCi z;o1;AICmb;9G$wk_(?`a87XEo-RAkwvUk9h%_8#tG^5@VNak1JoZFC%Eh!OczLv+w zeAwm3#svsY^x)nTzxcUrW23}4OL;s+;hP-w5SWncNs}Th9GzVw`;2EyN(9i^JM>uW)lKwg5p|f>#X{X|4CMz`;ZF& z+4ME(AIfX-&RDNTmi?O@ChzX+d&}LH%F2pOrR=*%EK@Fg@I0!p+eobLZtGO#M5+`7 z`-(n&^1Y`0T6FTF#{k?+u&32Bk=$;}av;WLYq3OmtaaJf&|53W^@2X7M`jp;HQ(WE z%*zKd>8e8r_iV>6$Xr97I&7vMQ;3cxHR{4$UJ#HMbrWFc+|b&(yQ~?84g@4qaDz)H zoea3iavYO`Sccf?PmSjnsA*Lr)PI|JA8sRMzRmQ_)`H&>TGp8f6faY5+g9f#S|-9^ zaq}bgkaWV_t+9=zLMjFmnA1U*2VCGdQiTHzD01=KrrL2Au6%{8z#}qfq<6MTw-d61 zm$a~Rd}M^M`al(n9k#j@2c8gLrP&}5O$ud zY8y1F%vKHX@O?mt2^##f2vHTb$7Oel%jh;^ zjG91{XH?Z1iL?bGQW4ZGnOUIHj9HVX@9#91sXYlE@hQ-hCyF-5tJ66myT$Ns9ezD0 z9Ac)KY8%PE&Zc$p>@?{JLG%K_ffh$DS4A`yTTj)xiS=YcW5v()`9a2x12&EA3g$NQ ze^o(zKyMI`b4=HmSeB$0L?w@@)gl9$rFTFkoJO{*sjrchog;`KK5UI=7PTnANe$*f zc)b3;Gln@;T+n0^f+;=3UdVix(8uma`$tzcIok%)Rh_dEA)P!=cEs+x-$T6#(M+Ri zn@96*rVhK|_~F@ks-cJp^YbJx@Tci##VqD5^Njv_7Z@#^kmAMPP44iiAmqAd?W>Ao z7T#KU<24vA3hEH|hhL@tXe;U8oaW*r4gjK^Ki5Jauun`_TKMWW$u_M5Y9WxK=InO~6s#E`E^>Eni})nZ8q z0eDEY?3Sv*Q)uPQKsn>WRnHdZLJM^U+>}w&3P@aIxaSOSuR;SSSo*e>+`4z8U5}-@1nY{|{=8e|^cOS2Z|CvSO{?8UDO) ztP(ub+lvDu+i-W*dI-g}peZj_NtzWMay7a~?-g(dsTE}VY9vNxxPkr=)?ayo-30%W z;OMNG$Fv8!*mn@RY)e9h!afsRHwE|7-#QSyAjg6O~0G+4>}TOx+fngRrImKtfXjb-db6CTB74HB4Q=^IZTRl+APJj zyrD6R$q*dcgM8euMsH7IG*^T}hp;g$cjrkMHq&I$K3wy(J{-nwadJ-S#*eP>srgHq zval~J$W`K2!H013Eh=+RHtB)BIs5ZB%A`uD$|JNko+Osg<{G;-w!~r`bR|uOrvx6#N|QN_E4^FSKbZUlWv8Z7gk9hz3ZHq^FOPp!BA$U zAmyaJ;_d_Ck8D%Aw3v-CNmyYyb)=B|2ryb1;f91pdLb?)Er?-3r`a&m9C3jrt ziO}V6PRAO7y}$SMyA~&I6loU^J;9Q!9VB(ul7RZ9-+J^Hmcdw^XZsa$!-m5yPVdd^ ztQ=6Mnjo1TwWEV?h28S!h^`1i5TF9!N^{=m9s(2JbAy}e;Dq#>UC6gGoFu_Rr3r#= zOHf8TPQt_`Bv0Z+IM#1YlEx=*?wx6oghpCCBW$bdA$vS#XFtIEtIQ9utV)$XKP^?- z@vta*f#7KG8k|GRl$6=#ot)GUHJaHhbvcX}*${d=(}H5}(B1%Vog_Y&ITX;M_YJq# z=_MO`+ojC;IwD&$&CDY=#M5jPf=Li?+y?6$4p70`k+OG$PhPz}4=&4M8w<-^gUp*PLP(Znm0&axc?~b)$8{G7OR`b z{%DJXw{|If2ioCS4UR2Vbh*VN>Y^Sctz4gsxh?Hx2gP(QJgBdm6mx2ylmgS*lDbO3 zCH(Fu>oQ|Wy5=pMVLeS_?DVjlCX`vZ2b%y-_{jFqma8Sb3SA3?TaR1%y74?NR+qJt z)bVMUp;_IqjUvIRfrOPs!1wi-kkSO#$m<#dy-79y+CrEHSK_S>Vnm30s?B2cgZ{L| ztpF=}&oDw?f>7m|YPsqrr>y*!Cs1VHe0Y6$fiG^3b83d8KTv1p%-3`7T{*8%;BdXg z^}&xTdmou4$-=SFKZ~QurHh6MFo$POb-fhy@$Tsv8xL|vB*o)6(IKX{KO&+%h{{MY zaL|9~oAOL~F^Kgf7|{+o$BMZv7(md5_o_3Z^L2=9NQ>9igI(2U-=8aKQqi#finMUT zOD&4p9BCk8Igx>N@@sO~AQ5DA_5aRQSSAwhvXa-hAk7KP26=diXxMu() zDJIskcVr>t^K`}*Glp!*+b5w~l;xN|4#J(CsT>ASWbM!JtALIfimTaz+r=-NS#&V^ zCu;O)2RoFt-{acpb@olcXYLu*&p5N$+&9h(bPIh7%d_Djq7r;>W$fS6YhW$Mmt@t& z#T`9RWSGrwGt<5nmLJV=v(p?B{MlgFAgsC8pwxy~n$D8rc&P{WP#2b){0((>0^w@g zWaX3+i&_{~u?gqsr>w|VOXBxQK&2-!${gkg8KuZO)j1VKpUB>tkpkbEdsYMX%Lyi( ztQM-BnUI0w)=iyS!MB#Bb!o$$)GCLm(YEDLi?fVxHN9Zq{|OwwaiJw`ZR>rmg~iFC z%%_2WA70Krv{6T=LjY;LttP03mX@xQ$p3wHU`_J5VWh)XC-eD}Bi!FjLI3?m;eQkU zWFYoB(qoHxBJMjxT}5yJ6*6V5r0l|K^5SL+_Q*$*b+^nn|l! zZ`gp_ZSE3t6Ubt1SIsRnc9C*I;V!>D*$-u0L*Nu-7*)4TRr^LRXIvYLm)LJ{NwdA! zd#{BHUOx;bGc0PQBD(seP)9thy7t1ZNL0zgUAFV4W%`x+ToqZdt4s3T>&kmM_Q?5eG=+2} zUQJILPZ_fX9>IsjC%~C8Ktqk*C)UQA0@*AgkG~*r=CVOpOo`eNdaj5 zICkWuw+8usl#A_yc*L|8*TnE**O{q5FDjSryZqr@r0%QHXUCPR52B9CIW;x@2I)7o5Q!KYpm9C7`t-NDh0** zpUrn%XIu?WjPo5kYx3f&be?sss@)bnx&1B4*6335$&Jf=Qj2pjb~ta7EC#x!dXsaP zqG%18Q;XJjq2OoF$hM36MI1`r-Kq`1?`&Lt(-3EWXoDSh;1`hzEt8H-7HX{~-1c*!~BG$?d*gd!Al^W%0C zN#90_wW2xv#A}hGn8(#Z6$(+?8E>T+4~*tmNxMcd7B+n6m-v(>YI;XOm=hZ$cRYM( zzcfZ~Rv9D2L%7|WA&?_+i^p6OnVQLEx0t2rUDiFRD5t)WrOXUX2EG!C?z`sAy&X}o zso%-6b8B0xg9|EU1v{*|Hq8ZZKD`tA=}dV&DOaC?nw;*VWnbNpoab9=rKvZ6I%{pg zu$mEdjt>|-FjP=f6#EVmsSqCq0E{5jajqZk32Qmv-y>hwy3{)E&YU_heNIkW{=`dt zZ5hNP?qExD*lX=pDXeGz`Tm+BAIQGAw3yGtgs3jbQE$JKou`vO#Lk%WPS7`_fmEET<&Zx)cQ+ z#~{eg?Nb=x;k1~<<`J$;*IDd^+LP@m`5&9;Lu_%~(_)V{iEL3Mn`30l-E|QgSwwQq zlW)_i>t21S(RFQo4EEH`!r8{4Brjg+V>`tpg0VE$_~kpX9pJ5b2(lu_60bAj@yGkX z%Ib!ZZUfxBFI9KyADH=f3#a=VH8ipufuBlr>ei|i+ zLPkT+r*;Wzb7d)|xQj7w^2(!@6EzX`9TFpb?Dta<*Ik5^7o(>xw)y#$d^Wnk?0nt} zof^$=htD7F=;ci8>?oda|uxLYvD37YF^mbww_dFB2anzA+2@itq~}UA)GA zpDps`^B_5|K<4oZgG~0%0Sf{)1v8~MVg-pYA_4s9MoHWW9jr(dF$BV;L!_J9=q=)} zj%pO{!h+xD0ORSzKil-t>88ru8YwAY^?dYOoaZPFcTc2*Pd^2Yu%x9O7b$J)=eF^Q z$5Z+D=Cgu}jg5_yH%qM#niCCO(wo6dP%a zID8d+R(Z5mz>3z59{XyH!u1SUm|w^yTaM^Fk(8wIzgwx_k@zexP5p^HLU@FeIKHWy zvQKfAM+9iXiy~;j&b6~)nklAd3U{KJZtmguwsCdzViGPRD=VBy4gwtWyV+*gS*nJY z8zt|VODx=^t^>PL)&Blf2z!F%%;Z281iu=4i?hy83f<^3xg2X@`+4)p%PQL#5~3iJ z-B1v~JxA}n15d(64@Ad@Jj?x9(zf1SJXg8%4>0uFwqezh+#eXuZgkW_*8N>b_Tyxg z<)Uj7-qlGJT9v#^+ben$h9>x2jH}tX;VD{0|c6N%hsfZv2fwNuOaESvO_Qlvrj@-0W0|L3dkW zMC!;$_;{%@i?l@tIdzZypYLrhfz1 zQw(9yE4uaQ7!}K!0ijgeO416Sx$yV+rx$}l#5H(8qok1@yCq%N$9HvJJ|(8bmee%U zGoU^c+X7jyVf*qT@{0gv!iOnBWa-ksw;#&fZPH$c$X{}@BV!b3!E}KIf4yxIg)d{3 z1{QD8Dlmb+nWA8&wqJDX3%o)t8Z9ae;*v|YVR+vy1pgfYmdOJA zGsBx=w0Cg`7AL#?N1FWPe?PyT)T$(=rAfp2^sV)Jw~rsyvB?zGZCK4GUQg_&u+MkC zIjMf8VOhHYr0ndF%Ze9Mh;l4*?-Rgd0K(zgmNtRMb0@ReN5A!dmK<`&zbT4kOW5WL zlsR`YQh2s}Q=b{RV!D(Cr=endm)>vxDmv8M+xjMjLEbkL^0+a~ z));aKpT;b=|H;CMt@PziDm85s?-Y8lvWj(UtqMQo>6)`G)B;Ovp4`Qm#ryvX;J?(O-l zfq1WI3?4SV=}E6QzPIEE(07@K-V403NWG%bHsR(5&<-YzE)Dgo*fMGSLI=Eu0<5)}q4p z%)5vUReUr*`+>o+Ydo3J=;fMQ6UiI53f#>eoWgSw-;FqmYy>I&jgt(OKJV^M&k30w z8D(Ue`i&WAKn;ksKoIdK7P<$AT4fDQExD-!`X?5V`I5`lvR!pu^`UL9VU`wa$ExC{ z=Fm1gG9lo9S;oA1&-D#Wb}PzmjccFNQaFS;#$XE?N{geTR|x3GuzrW8B0Z#5oUnb~ zIoftP~@2)fP>lW#|mli{h~z$ z^GHck!Pu{wQy2oCHhOu!fQo+QQ!3j)}(X5~z7W_NqV zm>Z|3r5dR>Xe#&Is)=)5Ld}5{pk!al>1pban*z}AMMl2$HxGT}_RLbDp+KXtZD89sl5y zR`}Flyz?@-B!`DKt;uH4&;p-e=KQ2Vm_tg#j|h|#Ke;~#QPY?FuEuh03#`i2{c$b# z4f}l7_k$A~>Hx8T+DEg`7@1SJpSEcL+Np~2X_pV_*#AJyQJPTAX+7UO$gQL=c^_U^ zDl6q6MUn*J=H0Xnz9NqrrIE$+v+qgQ4vsISkz`Bh_m11QS|$_}U$)NpG&qeR^y~je z>6&oKJ92&4_@b@I)P=>CMG60L_{XW z$7BBgsOvgN1S#4PE9PWADmD1sT!P9V#R*o!(q*Jbi`~E*R+u!^OM9>)T)_!^TU7L8b~97pQ+#x znZY|z(MSk)Eor*oy$6=gGSpI`@vnYCl3DCo=2PwQUAi$}ylG+3#>pu8|6(T0T`@PQ zb!8emQ#GfJjjfY2OS(XwGYk_o$S4bv~C7*=>^tS=zM@5gUycmVZGgZ z|70{XE`?6JObh*ZV(U9~2#x5pKpKoTM2aeTs-9}hxcU>Xa68~nX1AhgEc1*F*Ys+=za%iXR6SLNk1Sc@7V%- zm#DkU)bOaH&F-s{5_rcJ9pjR?s><5F50w1z?$>hz%NM|h=fYjoy%X_P{3+F=JEvq0 zyOTw0%itkLocI+?b#z#rybe`~2YH^wwaG$PHCexgCB3@2i}N9ZfD+Tv@C2usO(a)c zTixXRi4-wh4HY^?8Y)5pz0dpNynE;&1kd@Og}!s}bx1Nj!!^J#>@Bd%NeMQ58KAwa zSk3RWNw{uP*oEs7s)E+;CdqjdG(O)rY$l6HlxQKf3b4G(&_hOE;3wx+So@QUvZY~G z5wvUf!0k=FdVuvY9WY>smbSdHGA!tkc~PUpo#i`=0l$botZ2PsHBFWAmKUlSogl@u zb8uxa&0WS6ap+FsPp(QZ=uqCdz^8oVdhaGCuxwssNpuhQe*l{l+3cOT?C^O|lDbOV zSuI&r=bHzy5MdFOiwVX3#{Z6l;%nhkTnjeQ5W$iGUcbP}ZgAQPLaLZ@~=N-_l+IYp(Di z(Y8XJ$fa)mHk=J4TK||;&}1xQv4_SGI%XhiJm|9f4Gt8frt)-fV>+nuwNLavk*~1q zp!OrD^4%>p#&EIMgjG6&SqM0*Y(2`)wb$AaJ@}fP(DF)M_tfl{dV9->1Ac~|b|G?; zz!sXTV-1O)Zn#OF6^3*pB=+F1S%7ce-#x=?B=j)96~Om`jn%SxfQ-wUpoju2w#U&a zcy~cboXcW_Y=bwaBVnUcd9N-PDYh+LR~Jeph1A-_+6DY}rnX!`4FXJMR*VbeH#!F2 z9g?+&@y&aYFx$y7P=#Rkw4B5FB4fG8v!26w9pb2}0#j*b0h0@%$ z_ybW_-;RzG3eq!QDAC8eWx&Rc#4~=F2=8r2>c_^|J)+dbjpKInZynqN2ZJ{|Wr2jJ zN2x?ac|T1TA7VdFkE_5He|=GBE#v=w#8>BFT|WQ&l=L5+sA`xW!0W&b_}{Wt)}4vz z4^PYIqE!<@&F?*p*9G`)C^q|7LK}_&Bsot?p5*6)n0Do7)u%E;Pw$>E$)0k=a>I*A zJliSm$jfNY@Wn*0elMpn4zTPv?cryvF{PeiK^P+g{pVs2nAa#eE8dJ!H}-w!Y@ZZR zF;v7I58v`*Q^BsoBB_8eSotEx=Fa~2)85axIk;0H_5Y&$-BXKIjk8bAaMM*yGabB( zBfn9|kor*(>aCmlbw-WdpY6boRP3j!y!$<8-L?|+=%?2GDB#DbbvRRi@IYfzmIi{gRZ^?e#BjGCSo@+ioe(&3ErZ_J4S{uPE61 z0>+|Xhd<5J&PLV2X`&}0dAgu3rzFZJCYwOI}EHB1nYx#X?el57Xp($@9Cvps?Q0S5M{{C?y*tOII<@j0?-$G-N z$L5Iqyo$1=F6Qx;u9{;^!xSSX2BNDiZ(7?Hv!R#4IZ;+vaeg`J*It_d4Z^X|275bQ zA!NKBTY-HKNEXY@o8(QU-i4-2z@`eAW1G~~wUksGu?8ApbuIi*X$OCX#(3$5bc#bN zHoC0187YnXv!fWFe|E&a<9U|FU5TBA#N2``w=_tM^n_&_g`kG?_EhC3ACzghhE9}w za9WjZZ*QKtVtX-PzqmFaq9&F2cCB=obF!s1MsAGPKR-+RJV{|}v$Mk2Mn_3Z_#40* z3Bq`KP+BQ)J9^(nVlZ+P_wLjz&3YMYygCCMUlnuxUc%dbGYoai z+`M8E*74;TvlNfp{F}pH)In7XJQ#O3v(wOiXz5dDCGO|Fy&0}Ho6I*q=ll|Wu7odq zVm8lnS8I@jZNJ>C^@^L@d6(P8{Rrk$PWz(9E>Q8_XO8;P_K&=CJ~L7h?!kJgFcvS* zRdv)2Qt$vxWUL=qTR{PLjHoWT1kcRiV!Td!uKAKd{ujRZhM4!{rJu_a?VU+uONP9yeg2rQ@w)n@6z`>Sf~cI&rHlwSQw1U3&)XvSiaiUwJH5B zJ%|pii#!JttLEdOkeSil27xLo0)mVjQWG2Jl;BhMc0GL}W3Q{78kVV|`HExG3Vn<2vWS+Ac7?S~{;mPscu!K~uCU1kd@yX0#V@y^x}>r?BT|aTE@14YO%R1n ziD|prA8#Tt>~O{(Y|#X}WN8La*6|CCjVzTvSpfC9f%|^mr-7SGdSg1t;t_L=@pu&+S~r}jWy;8XgAU>5 zGISo=@E3HGAGqAK#8o#Y~&Mbma;X*Mr)?SEX&R`f7bs zYb8vmaam(q++?7&#=qcdfR;PV-9)3q#-?IrWrjn5xAy^FZT4h*Kds6{H=rV?N{} zYvt*ly8zZI-3J}{raxQL`jp!qb2!R`ku_B^VcfViv^EdJuJ|zxC3JWNZdMqM<{At* zStx>!7C09+q&&}KtRKGBW3`-QryD@?g((xEdai^|`LWuPJLK8}>W-rK**_KcR;-kS zwOQACh3G@V0vY5@4O{)kGXGp)NYna6-Zay2bK*RAENJqy;M(~n_|^n|*3yJ%VvikO z^F^vemAT*i#n(M?57%CAl~Wccq*Lis>PCa2+YINXRoS1gb(+XCXk$xV_|c~rA1MHfqizS3E6u&>7+ z-zp^EvS{F&Ogwhf42BC{Cj|(|FZMHg)OL+3#asQVnsi>J3$AD;^?&T*i8+5D;e5qdYUvMD}%~cyQ->{8W!tEPra7Xc^SQks;CIQ zTtPiC9nG+r+`XA_0WJ31WXD>I)XSw){70bTL~ zFUAEy2}iQGf&(J=I-v84-G%zG!Fdm^c{QnDcBIR?s3ChPTw?2^DXT4VY(Ue?8E|2@ zqk;#w11r2GT+v`}`sV;!M!XZj`S#;a7yIx>n3cmuXGCK-->a+2X-mt#EC%XVW}aw% z6@AwC78MOY(@JN5Ua3nsp^p_dGbdbhlJi^R^_iuct%m@) zb??k>vLeN4250kEHCuuvL`E(dcaef02R92|3UL*`Z`<74iH%)h_XX2kwB49at|HAY z>BXkayW1JO$cyy>y5p`gF@Z#Sh&K@`!|H8UBX>xox6|5n) zqoqSW@n`~6mE}|-@i-U0oYzqF*xfAF`pHHoMAZn;p^w|Tns^QgrvMF5g;x zeN7$hRV2>Y1qwW%buP3VZGUnXemWTUgw?9B&#zJZ7(1Y_@@&ge6_e2$rqk7#sqf&G z>WoHz>+Wt{_JyCQ;vO2zo`Ap<-8nmJb-q7oc*-_uD?hMcaxph1ZVuV}#=aoes3PYd zk%#LR2>m}JBhl#Ueg32r2%hD2OL$p}@RSg>K6)i2>jG`!;;AVqMR}Ky;ZY6Wq(4v( zt^KeMP9ETmDFRPRHbA8j)z}_6-Q)^{(AOv9h2QhcD{Onm2WxRexS82} z<(DI#|JG2cdne^`+HNAg%XZf#>c!B&dJeQ%H`O;Oa+HND))+=1<$6yAAnG;%T^6=m z_s(q)ei3rnxc~@3BmUDrGeR}>Daexq8P%3go7?-5<%M`@pi9WxVAR_T<9;>{^3bUD znEdqc`22}HsRFIY;5WGAi)+oRktZ25<2WUQV^mQK{N;ZVjE_iRf8iy<$a7=YqDhTRsYhT!Pj76=@ZV zmeAD~QUgCCeM7p5NpjB~E8+7s$}hFCr`4G9Tg8*<+pdRP;k4An0vM%fsktyH0b$A&F89n8BEZiXtT6aBfLjaZe3hJ3fsp>gm3UtfRBf$a-+n4> zD2LYbbXhycTa>z(!G}6tO?7aG`Ab2QefbP_+Gt4#almof$1efX<|kc-ty46X@vwEThR*z9$UmBLWa{0y>6W1pHrFWAOwG zT5-X$3cO{tg6YIK(v7E&Z&Mpow1QEtjy-Z-k4ajKVv`PpSm zIy4Sw=3vnCP0yd!-=VCT+rWkx7-meA9obw9n7Wc&&?H-Qa_a?mXB zKu9xCXEC(lnq{4t*OQrk-2r-}4E}KcTsA4n%`*dD6Pp@%(7KM0mzkAN-niiEQf?IK zBS|BbQ@Gkc-PynJ@b9%RlZ4c@m+Ko~j^}gmg=FP2l=>%N)&9|$jhPD7ZrjHB?lO(I zF6t-+56KZY=%}f0SnCCj1)Vr6+i@vfj~qe2vbfVgMK3i@29liG+!F@z6>On*gr4i7 z(hfasKc;VCSI6i75-&c3J{kPNTm7S{KKJn^vrDWxm}|UT{Pbiw`YYaIzIUYl=G|hL zQcs3A*($(kOIvrUljF6rReAjf88$%23D?;Hd9}A5LeOgkA9;bU z^;b@spu`X>PR8*q>rP6%jVlLy65z-L=fZy!9OXIr)P}g%W;Do2YnIGMU{rJuiGwCISdbjH9i#!=vQzJM>|+HDRvW?7px-b z|$Ta{mV#w?EN>xa>E5%yZ?;FT59rm4vLUxOp0F#<@6%z$6sGqCrHe z(6`3N`5VyjOG+@z9Y{HmlHHE1E|EjX%L_eK!6hUb8quL}mdl8Vb4yBG_(9ylu^9Z4 z>4TTcWo=zSDNyj|sgS9m#j>AsbsVW#SwdNzp0`iV>PFv8Xw})!9?Rck zX1qpp#b(}7R88uqgYe$rqnYNtDn5y{xuJ-)^PAP23P^BG#leGfVc)*ujD!ZllkQgg7BgcML z?g4J)(j=5UYLt_B{7-oRMHxAE?Q@~@)RNmZ6iv@&TytC##(S6`r?c8|kV!#QNdGU$ zjXp$aNfMSdnu3+cagZzIpWWJTlWEITuNF8i(iXN5r2kCZ(fAq?~57Z={NR>9E*Fkvuk61&pbRxxCmV0>rI4{p&^_Kxbln z$nF*Vn#SMJnB7gP2q?uWb3kGj;EJ5u%QHzbkaln4ax`u(Ywixr%*5wq9$HA$o0M4> zRx$A=cYIxqk6f7K!U2%S^Rr$Or0FjZJR5Wa+wBPrIwHMUp#Sj2)UkjLHS%NAfr`0ptr zor5<-wG0N~j&U%L`m*nvE#?_F4gJ_mXDjdoTh)x6oKD^x(d|%uvW4*b3w#4OaSFIE z3!+LOFK3Fa%H{l8!6tD85u938(Tv#yky3KbI zccPE=_Hjl>pmn-}aR%i$T5%#a5%)mGEW6DPXUfOqH)LwgX3xM0`pD4vw&I+K2Bc>J{GhiByTkl%}FXZj?3e;NJXdv?c`w|j+YLB;M*Sej4 z(@IlIIhosXj$GH!7HZV;t?ra3o4O%VGw`I?kP2R|8MJMi6Z74@0muh=GmJ<;gSxJ# z{>g{#rN>A{JtwjNDH@(zvSe^ac|KupyMHkAqJ{zHXh8>ka#G7LT|+}K?4~x7>6~i! zPK{MiT3ugDUdpfxNL0fKRU3@l=oEKYq%wbZ-+ES!_9O!e1NoC13D?@-(FpTDBAyg! zIQRH|>d9tp=51MCi2dmYBm87OU}t|?H>c67FBXu34OnGkV=lI|B3?Vf!PNEd^f^nDah52%se}}-W?#Z^| z-n^Lt@0oze!SK}wIUemzUhvrENV%5*%R{~*Pw^H>s`(*jb9(VMS>^;7Ed0sgzU_57 z;pr30%9bGMxxw%PPn7N&^4ea-((1}4N#@@MMz$!8p!#Nas>;sbzuh(lWTzJx5hh-j ze~H4uqpZfbq*K`sjP&{$YFdaviA>O z@nXZ^_u8)RBkQO*XN_il0*_(yDAEikKyWu5ZxILkyLkn!g!SBDjfd|jiv zW=iRgxGw+PnoyeUUx?*d>c?va)J8V`h-8>vNX1#BS#T98XQqWF8WAlodjbzA{)kbT zn}tp6whMH`Wf_WG>9-!m=oxl#b8YV7n>X3{&0z&)dS>-|atD|4*&BDc{Z2x4$|t}b zzv=m=qS5h(f!Mb9v?+~^f z#rygIHA@DxQm`mdmzl)`g|@Ns$tnOTFM`Po zM^P)EFRr<{Si7mdO<4S=6l4dY7o$bDasg@{ngnNLhoNfpqy$>L%yB!cM~>UJ5IVB- z4n2`Oc_h)vmXNQY(!Aij}roN8Ai@9Q!C_C!VeAl zat`qg)=n<2&`q3R6$AC#^#sWLJ8`8POd*YB%FbI*De=a6thRt}QZ^qvJeo@pT;wWC zn2qK`s!suZS$&<1?1gp?Y8;(^`_6<>-_AeN9jde*M;w3-dt>dw$0 z9nTuEi!ZZ_`1^G~rAfG)Jb3vQEuLF9^PY3Hkm}o9jzu z{DN2ou!sC5Xwi3c2H-si+1l)T?=UwzhzhqlC%h}6o8LxsjV>8impQcU zSFX^2>a(VIs_Pc}C7+19zKy@J=y5riA@|KG}e}3gG9|BlH*_+yss`) z;hkYue#;{;O=eq(@_;g2SG6i7wj7ugi;L$Mk7k9)lkpv6yj;~NS#Bbo@lP}O??{Z< zn;Lrd%-M&QNoc9-x58eP0IKy#D!r2alu+seu*ZoYH-WQv~GH(uLg z5|}rASQpEJrqa`lrhfbU@R-v^>&YVd>1V7t&&8`a{pZf)T-^m)WGxyE6W4t>^-?8-$O(+v$z#nLT3je*jQK@MZWlSSU7<(VL@iGX9W`wE{ca`3%xQ;6rh zaO$$ZjpmNGmdeK4_KaKUl(o<8P3L%CQ3tD1=r=qxme-gC?bLaX%el--o23;VJeVRG z?EGbJRkT#Q=lH4U+@5s5;y&QyM>O6o8OTP&Z_ZPqvK{UwLI#oB>-1OZsqkddm2n7X zPMwve!m>ZSB-)VIIu771OPbA9lw9rlQFy-y%(d4Ts-1)G=t(K+DnuJCq@G(tUveO# zmoLBa4qJ-4(=w;x%(MJ`pu6CvI{i4dEb@ss1&<1oG9o2eQS z71;fpFLATdPK~HuDjT6?fGzq&GRHVAmrbYaUi^rTKFeM;cp?2h{!+ZI^Wg)6cz^jB zZ|=7{e=hbJLn*5t|0T!?Fxv?~O&E!GWID^sAL;luB}8u602^bPvbQaXe+>ql_Q16U zmPHfGgLr?PJui({)2)Y@=z|K%CT|5X@O`2`e2oA3*Ny0$+P6yhV+LDKaI63)!i$r; zCncyjW!SwA>$i!e27op|CR7v7hI|F1mHrHY-o0Ti0tWn(8b?Ngkk4c)7aTG z2&3>C4X@8Q-@NpuVWYclJiIIZJ%oS(YIyCP} z=M>56|7)Y~ULIl?WbDHy}^s*d&cO8(tKuhxBE|$-5&t@6}C-cuBFgyBQ z=6@K9UlY71_7ZcgUE}vG)k1F);ES+)o&8JlY)f?cx6ZgEx`{)lXv7ltzA~91u4O zOCHpBnoaTQIiFP27SZ$@*9N7A)oj}n*sO+0w9%20RgzD zye)c-G4??Ns-mNgXdyelVw!n&<`#I_xdp+y+fj!L7&~15gA#bavq$*UEGcvM%8l*Z z!xz*4b=eegX(50+NXi|~hB%qf5z$S%lG6a}&1Rk3)4eZq?_IfYxfl4@dmOS|!ZYff zVWraLm5%*Q)sEF19Gvnpo_x_@{GDo=Bc?GcBKDeO6vdC21zbkhR!cvB+9~3>>9rFx zRX7}Sb^UX3<+fCT?$5a54nCVYnkUQVsaj|^eGMB-KRX1m&q{wcVNpn3y`IA2QB|$+ zU_73xK^6aHcRFF}dZ!Kbz@#0Y3Z723X@amUtp&*bbP@KfSt}@T{LOwm2EC7?9onZA z`?bSu_{x$kh-2M6zt3x|cZUpCcK(J~M{ z3-OKA+V)?s$l1O8q=%0UD2LK^${Z3hjb-;AlFGI|`;zUTI2x3=JN*u#XCr<28F}A0 zAn-NADs7d2sHMKv8usL_e>EG_cFUe!@|TyCLi7uRz;{6N>EFL``%f%<_^Flx|B@Ux z)ddwzqbMfd%`8<+Z4zfHJ4>OYqGyUVdk`RhXy}g8P$jBdp`K}}OWJqx#6(R1HmtKE2hZpLcb7e@&v3&Y(q|2^Kx9HHkRZE-OJJ1S~bApcW(=R*7d;m zt$I5ts&Bizl&i#}QLYhaF0frGA+R?71^>0JgHR~Wfk$}b{VRYleRDnQ-`{~={$F;i z&Or+3F783w0Y@sSzAx6N8o~$ z-{aTZLozELu2z?Y%(C2imUTLb`M<5gUb2ecDaLSFLTJ7MiG77X=}stqY&JPRlJ`;O z2!>o$2~jF~0DgB|2x1vR+uY8mlp6Ih%v-ODD0-BvbO;wG^QgEve~;~-WsOyp2r9$p zATo|zi#6+DuSL+MxEQ&Y8OL(^5N5cn&v7HabKfdIuQhAgoTYl#lkrSyGpxKc_>NLV;?$QYW(nT=EOVICWRR<$}sUHrA zpu=}izXMs1wGY?S?u>5h{d810hh>abQle>fAInv1Z=nC?ia7L9^H z+Ss9}f$(4=`x^GJUm77JPUqv{RQx9#{QeXO-QRKt>i&VS={eybL*Wk?an#U_jHd+e zs3Ouf%TsCVv85gT)nD0oA;Mol_V4Un8MT#-zA{sN&Z_j#Y*Ct4&yBVGmVNl{31{T*ecAmgIDAr=aWuNWB7o{d5z&R3eGV;j zB(sq?bG|MhkORU3&Z8)Tix5Me!vExM^ul(08&NMgT6p?yxg2Nm(cnOlm$HF-an+YV zE}Q)<{pD{;_9$aJEC#;M_CJBEhvOI9i*)eSR9xfLEk@L!?r_QQqHGUE(+1WQ*ZbfD zpz;=9*_x8jVf%Z!IK#S<(wf}Sc2>7kJ9C}Gt&_@HoCNK_TN1GWf#Q&CRi>I1nb~Eb zai}ELU0VE3f&qB*;==&TW44G-;vn3ORS6`@S!5UCmjncn^a%Rrq}J<73zD?C?525H zWKeipBo`s|>=25*O(?CT-KVo)ZT5GmJ{@!M z`)}hs9zAQP@uiUq1NzcnqATz_DYsg-JM=qM7m5__b?@;YT9$@N+IJFEpL zB%?u8u#4l}*}{|6up~ebs+zdkG;#m-lm!Pchno}D53 z>H^l}eEjZX!GfRyp5{A9F2Uf8>qkX4mc(k_k!aBhj0M`O1tcL0i?VvrOD?KW_}UUj zWo!4{2R&D=xd$CAGLQX@%~TnLTL9i1Zx&VsvC;zgdZA)98LzS**3nbk>5E;<@=M~g@6WKCg1zW_?qVOInD_=3V+)ne#X}SDqh!2@ zPfy7(l*a2z^i3wc?(N0IekSG#pD9MfgA6e%>OZ-$5oWb}$i<`OxB4bdHkf7SkfJKE znCb((Xfvg7h>{cEO+N7@&^b97e=C^=I47PzuIG>zD?=~JWcafn7TIOv4#7#A`Nks zZJ0NS;%dvth;KLOEX}DU5SEG-5$qWjDczP(5 z&O@KfeK+Tpm1n@ENgCwq1w0&yDQ$^a+I4|o7VBUAPY6mSk0fhq?&n@ktdeF0IbKl= zK#2C4^CH=meBRtWlhJ)HZt7(~jBRsMB33Df7Ig{ZdlL9|;zsM}Fa9a;ca-sDBYuXN z>ynAX1z(la^Q})I88t@BS@y7kB0jR<*TDz=pXb}kS^zPW)yl74`mP%@1Y*ao1~;;1 zjo_Buw#?MX)=y6fWl^+#|Qb*-ic|cwWp6A2hj)CY7zP+y0VI_tvjZ^-$ zZaF7KZr1yp145F4e=zG?a-*fSHaRg+&6HtuSiS+_bSkr%Lr=SEv-&(IVn;1A1M|jR z(nCuNJ1A5=5hnkZryfaz=lDd4QBF=y>TDms-+OwB-O&-FUxxEfPpGX<_fjltbi*O+ z0l4yx!|FKt z4U1#(_CNl^K<;&daoH|Zop*ou5%lFl(3cn9*RSuCvEP4(KM#))|IvL2x~SpE=3L*9 zv)uUb+@9tq-<@W9%B#QP_;HTug*YK_=XOwQByWH9*WsN zu~p%R=9ZOIgdV17n?6*Jf1I7=bpsF$j%?px$FkVlw*~T?S7N#xuR6>&$`g zs05Fp-!*GxWaXGx+h12d(G#&v2?z_ru0Z?5tZp#t4bWqK=h*>CEv`SAa$Hk(*TZEj zK{h$rul;uTKe#C?)R*~m5E5O9(oMN_Q*$6-a8Ts8#Od?qDY%*s0zrNu?K>Ib6V0bG zBKJE&!~f=g zil06qGS>9Y!WR`aj+U1*^XBSZobtzVhH)AifuN9GoR6%xH_2uhwe%m+V~Px^k)0p4 zpBMh~WM3Q1Q4!mW%%P@~^FDb?I)0}ZS8D6raL&n6-aLxuIKl-K-XB{rCv^`(C3of#BXzpyGeP0OJ>G@|Nk!O)J zpJBwAw8LOS$Sx+jFfVToz+~x?Xd;lg2zc8+m#aK6E$&E&D?n-{7`C#~RMXE4ZkXZ3 z`EBAD_Y(7Yw0Mz+yL`#d@40fL48*Ol!eGhC?zrM(%(+B6p)fD*5thA0YL#jMoah?V>(A+QN_3 za=^p&aD4aA-67F+FM0nEp^FpOZif*PQ&-fIiBG--(h~XDi@*Jf*|)?g56E zLUB1cw0;`?#5bw2c&JgXd=8lV=#XJ3LoGxybXug#&i}-#EAOUL{I0ftb!!&;Q$dBI zBdIFWy{Xf{=atEdk?Yb`&3tW6h?=yOI?r+Rn%Q5CaT@;EN|xeX-7qTLH}`Iy-cyx@ z%lYAdL%1FLgZm3kt)jib@&9rT>}W*ed#GB!t(228s~Ku5x#WxRzVkj|@w|LUvK>Ji z`{3#wVX22c_8Q8+5?(%8SzJ&^sQVqo)zqf51XID!6$PE7_DT0c(0_W?`-cwh;p2DKVJVdF zOM%4|KGK@E^sal*wl{_-uo34g>Bvc4OqqB6bVN~3Pm^s}oFs~P;|d{Aal2k6;qh{? zmrk;zmQltuWtub=j^?`I)>C!c7|p0#Hgr6keDjzV1oY5QwZZMuCj8k2`Nkp+i7p^?FKZn zV<`;Q@w2%HVZpxTP2^uUxBm1(M-c=XK7U4vwVIL&B6y#4oufNiX?u94_34K%f$jwT zK#2*|4Bc~RD) z`ccmJa7fx=-Q%YocY4n=D;E8jycCb{-*3S|b4LyqGDiv8G3n18)l*orWf>-&ZOP@W z%nWv?NijzX75weKT+K zl%iLj&?=Nz!VsA?5-h0U7X5jL-nhFZXATqeChDv=;t!`@yFbKUncFZ8C@O z#ouE7^9mK`%L~k0;YdqMXBcm6xdjA=0<0}l zuw|rco{o@$E>-I7kmn8x}B;QoS{JyRrvqV^_4+wt!=yAh2mPgxVyU-cMIo@rz-cf zTIAGq7=H1m=A4z32CDlAMW9opU| z>^mxnO?u)2B&KA8-OC~quO1Ld8jAnP=^gnO`z0#a!!i4slsaBx_2bFCeWtL2-t0|Y z2RzlRJSGN@ghbWipP1ByPSyt%p)h9Tpo-*40w;`0?th1soVj2j+0kMsRybg7=L#>o%cf#SeEcugA0hv__A2tC@s_?VZ5~x$x+l(A$EPpR@n% zo#6U>C82r#?VQkpAEM!$AXhFh1#igp=hf6f`Nz9Q)z7f_%UYS{wjZztQ?+X)mDLd; zOT%es0a#2ZTp8(a<#M{MUr-g%ctLBpFG zo@MV&f!PutVyz7S^YXwiI_jeG)jJ3p(kt;c4-cCDF(O zbKt;ef0Wb%vGOvj@7>75l76PFN7w$>d(Ym%sn5qmlM7uf&XVP15t#`sTK`7KdfsI+ zzYyDwP*qzQl_QreNHL){#zzw4m3g{NuWP^9 z#0Lx5+z_`ohA@vveLzZ*Y|T1QOt-?rBdV_2w?}lUz?q=FLf5sEy%@UTKMD9ki|J0cVfsjfz-)=BYx zjO+q4(b@P8{M=NM(7~~>t)Ll~E|S%8ls{1XV%}~Nh`Vk4Wl8mh`y}}U3<^3j0JxS-%K#Bp|QPBaLJIQn*Fb%TfTOin^C}G-Hp%gI+)8QC9*wKQgSht zM;ninpFQcGb$nzdZPi=WrJ>B$2B<68cYjZ(e;jaQKC3(Tb{nfR_A@<{C&BW7rQHTE z)5Ku)&*=UNlG3Cyy6NP{Q~#3M{j^-1-i&@Jg;;Kw#m2l&iRteyZJj9{A8G^4*zWw& z=IGfFMvKt)be*JJ&u%G8U(^?n#(|M_x_|^#^{=E`b?VEGzz;_d9W3sJEwI5cv92BN z{VnhVUSb+^S0C9eb7(GM;&w49q1?#tEWV!;d8~>f@|zC}?o?SS?-g;+OLWD#GmKgj z$kX=86!)Zzl$<>2TxOhj%&azYGuJ`(1`${LxhArq2WA3jtby%O+qNLr) z1=(WXX3f`w@Nq4hGp*^I(|JIhM{*tDMhE zKcJI&>jWNRElsMR!d~J=)HJ@{?@h0xP8Za2#e^BK-3S1(&*L>J3rMGu{(j|bLZ9-x z1=5pe;w97mgr+=*$2f_x-K&Iz@iaLIz5VThX9SzL6#o;bgo=>zrFE@6|62~p$_c!| z6>l;H&&?IG@4UXdK%>WyTlP%CPLP~iwOg`IM3yGYSdd$Gc0bsrc4zy{*DOT?65}gj znu$Yf=xJmX5L1syyeHoG9o)8nGx(2EMBRI2=K(3Gi-^n? z;(`1S=H<5bvv-iT^L&GZLrg|)i^ntuLFnnywc;74Ov&jFb$jOEPd%ZhafM@!ahhND z;Y61YYW!oW<_rdu-G1RMQeH|dC2IamDI6Nb zdumqtIJh3^<~tmU*7kUSM$}1DoD-ZP3G0A9f=dcg3)VK_SCh@n5fhL!!WDJ(@2lfU z`B*q_3%TA$-mot4^0H(`=|RWFKD+gBZYDvL(swxC(VxrS=IO+1c5*u^$_PaOIIrUj zqg)NVeOZ(4Mq#f@$~e6~>4^JbVLEtsF(#CntAoS&L0^mn7119>ScAK@v75F@zrx3v zNcdQwC;7b?o&(qbX@95s4|9WIy>CWVv&vNkbJ)IY900zZ1Y2UVvX_!FSB>}`SULX= z-5WA^zK*my;@~96PE4n_^gB^TSdF2elGt^cONx!)tuS$&_(#zo-^lAFzGB`jlRuM& z))AetOgPCA)d^!^y~{sr`N)V!PD-<+uNmxNcy*^52*CJN=XpiJxQcU#27G#&Qzu;> z*q<}Zi}06@_14MlAzV>V<&eYA2xsGjpo*=fchYgEH@DAu-Un&ofZz07_Ys|szMNGR zbpc0zg4}#%@g`u2whJ!j1*LU4oSyoFQ$J_t6cLxGJF_sS$4Bc# z_7gnrO}T>1SOuDzA=!zMow&lUqPuuHg60k6s4w4D_5U#DZgfaZFJwva3X7<$eIID> zZDi=|ewLyC-7grqDj5&EoVd|OO<1qEeL0^~mjm@}&$#skMs=el$hZODQrA)59NHH| za3y1v&>UmByat_qGNCTTm#DTbTbP9f&S6#@{gzIwp{imKygL~O&w#sQR){3^Kygzf z0aB?hY|U_*9^OOI(ZQ4>&%?-86-zzz-=nh@!r5JadFJiE*a@Bft(e^d%YK+I>$KaZ zi$+_|^QvdgU|*wJAx%x$5EMf`>#c(};TE+l+!_H^da|ueA6dK{Fsp%Pj`}Obep*P9;Tka)b-t z^%NAMmV~_Ne?fz&X&`Xiuz5$DO=RWwr`|9u=3h50JUl_ILc+wBJOa^d0<^K-^TR{6ScgE`@%M z{%srs%UbR*GA)feN=)Lub5iN7EcVM-tNT*!=DW~o?HjkXLc_dN$F||Jh;}mUeME`L z1fR(U(eAf|U+rQN7t4`Pf(l6EgaEWUF+Mc2Qs%t1hg`tyx`fmk$=XRj&qjxYj(=QR z$ngp6xxC`Nsp|^_aSD_1dWWCJz=zEJd$BR7_GcSz9tZU5fu-@b zo_gte+7zpAti2fuNbZ_fw;AkRszr}}ZGN6@ZCbX5+1GCJDqKjVb^*em1uBV@a~?}HP7?tmNzQu;F>-G&@r#gv8FZ$xf< z`mq;F=>U(I+XGIXqupmqE~Kugf6nc4vc;LPfr5Qz{zP@!sQ?{BT^&Ww)R_s}GU;ea za;e)m$cZ~HrWVsQVaup+yn$?fJ8|)wZ#9&GHMWnBlW%TFyGP7j1qR~6-|8OGUiUMB z6a4+i?N|LNW+LbYc$QsmzV=#gKoqcd@S&r_7rEzf=|wzKe%cU}2&9;HM}6ySUy_E?9aF{~VyL6@$p zcRo4C3z}Bz3B^+7rs)?tPLOGQ>4^4JN)Np0YO;Plke{T`k-Y(p&{gGI8%0BP!CD?+BRAo>-|5|&YNcMlh0&j~`S|q0Aif-MaWG*5c!yMw; zmlwBAf`rfQY`=Qz@f4_BxykofMI>63=a5Skm<`V3l1~Qy?vDTamxK*5t5_jAA*Pq_ z^PAX+=76#3S#SN+A0vhKMtPaNF(8&4<>be8bV;Au=b(NXTcTZYemP0M);5i``61f0 z!z`M@w^18{L%%>3omi6BATnz_cKxm<$Me(jmHOMO2A0IXPQNCa)tQ>5A`lQr82QuW zy?HBPb&mHUf`h4N3bYTe0ZRTFNLMQ{x6R3bjf!5cPH9DrjJ6c#Rwlz$G+7nJK#DFU zXrbO&fR$cJC0Wjq_?Is$;Q4z7lVq;H-p-_EkWGd`hSbR=-;gU9m5%(I;RlJV+U@~L z52JUvn}UoKpq-L!4tQ~PxBgT!Lp(F5FM?(Rq3TDKK$MO z@$AV2*VkcJN12OXQ}Bu@m=g^fRs1A0Oio2So3Qid*2*Ct6iA~kRuT#Bo8H%jT7Tfw zJ03=!_Hr$I)UIl}dR$cHC~-~s5KTLT1&~DT{k(I1o-7AIW@{e)WwQYHUFwyClQ=HC zBf^83`AG84wAf~B+*6$Gv%~u&Xr8l*(C&z~yy}afZ8JF??a(ckALGQ^*Wu@(F3$$G zl$ig8H-P^))S<|0*;tebiPlAsrAya&xzfBNbYx`VYP zd1n$B(!FV{*nNo4q!7c}W!$!E@MsP30B>kDBkB<;w3Jql6{yTab~T3~@83X9WtGvC zKpl9PY=Pl<8zpi@9M{v!!C0uNt?wp(FAFA?4D=b;p5PQA!)RWk^w@4mKGrzv?y5gZ6M%+M-agT_xbvGZ#*VNch`+|DG zSNAAbtDtkrIK{esZFSwYpkVSh|}d&7vwvfFTU z&XQ{$DFQ?nbg40wdes;x`Vwhw$)}Aq?O$qD5~{vOuRAd}zuz_=XV)O4CnhRS5TedG zF+Hsuj~(Lq9lC2=YN8VK`1bJ@c*W42{PSE=wo+c~4j0#EYi6E~`{|gfTlJ)j z3^@$|4QnKyq9LLZ`y?%Nv4(UDQ`yL*rJMV&RfaF#V`QRGP}aD=)keLIz4JrA_k1!- z$kkebu6HdcZ7GQVM63j=d|rlZ#@IV10D_jC5kcRuT*=SGzdXeQw4%@n5duBG4G%hz z35NjNL~JTtBIv+uTY2XdWQ?UD5m#Iw1l`G=e#ECMqT8ysO8!(tVc@?z#G-uxzk|Np z*i^wYqA#RE;)kdi#98V~Ux_g!0;EUA@zJF9;Xn z*FT>O0e3bAL27w!Y8legRkyG<94yN^B6e<=3xbgR%)>JL3Tx{Maz@^mh&v36mv2_Y zbp>rn7$D9yX`;S z42mgvOha5qY>upH|DGsafIy`~H|3mAYt(AgkMT8CxWdv z2Lo4h@<~d!1 zLvHW4#N6e!<@=*|!rK{oL2N@2{EBr1C)2p!PJ!hNA+0O*cHWl6FwScCObU7vPWYuS#b3ntVJ~ zPjk$kvWpG9o%h^<-Fg+NW%p|jNoEazAIEXi81x<1Yy0NMsNVc#d&js)w)CO}C}@JScl7#p*uqgGD9Bq@UI~&ysCYf?7^PwmE=nny ztNI+`8h;{~n+Jy7Kf6S-kw3knav$O5k*r_Q-j$pa$w9P8@Wv-jF}NQrbjf&+!xmXm z?_6_v>9Ak#T^R>7!Gx_ZdpC9OxdL8W~@Y-iZh{Nb4oFhjUwNLXR@dG2c#bp6@N=RB#(gd2z zU?s1oVg|Uvdm~vREd&+#L2g zYy_ncM|U}*oMdv@<>@3Pq)GiK5?qNfy*+r^K~tlf?3FIN^H0oVw4{+A8Y>DPVY8n` zz4E$Dk1SvnxDX@@l$W)4HTQe|3ooa6xQ!In;3e1@V`wAvMde=4ch8<^=5>|2g|?D@ zdn(XhdT^jT`F67;0BxOwp7*$<1lmS zq+dr5Y1CsU+c&x>>BKbFm8BmoU8szNIgRf3zq^^A>3WnPs~>x0?5jIdOM_dT3b-38 z0PmQe6gFy}&&>RyXxWYG*9s23TgaZ`L zZmy-P2|ME|CPI3A!%UsEqhn$Vd()il8Uqu(^DBl4z^?iutsWpdOFs5leUw84t$Uoe zzXAc%g;!!9xr(5Z$BvV2L0`()TyR6*ri5E@S(l(7aGCAL@$4!E)*!Ia(;c+N?U36n zv?-!uPw(1*ffPHDS$Z~cpHLJ(H)C2J-N4U1@uzkF!nIIoa^j#8!}@ToDEK*;waxpF zv=VdWs=wsCAVVf!2XXZblY;M??A&e&Ya~Jxm=F@pWb}FC3GYo|UyZw|$l>CTU%~D^ zLbGRgv0WeFz_zggTf%`g$yUlvf%ES%et+l)x^PC(29_j_0f(#}h&tr>R-W?47li5w zvAr@TZR6FZxgO8hc&4?ng%eJLlul}VjAV6gXTQ5J-h~C(!|?Krg%N36)&%rz%*6+T zh4DF+tURTMs#~dALh?$Iv?Y2KYfD&V4Q-vCXZ%X#=`%Sg8##_8_qxE}Vj*N1ogi6R z#BuG_)xxflpbUNT&@NF-3C zZaR^ALT0w2x;fs$WJ$@R+lASepapoD~%J+Bfn2xsxoOs2aKDBKXXY^HK)O$BJ6&(=OqzjndS_ zIKlLe=}#6jfr`Y^)fwpiF`PwkYVNYT;Pg(dt9pxKQ|$Td{`FtELcsEBa zoa~kNfuLyF|4eq;v9werLu9zP%!^EqSDS*84@>=m#lOO%q}d<_G=wG%yQrPo$iPg^t$}AzvZ`uey`E)OP1>P4@_1cO zrv!D@J}!Y^JI>IGEpy*}3{&Q|>YLWZ?1%$&CW3L&JPMBuXtUh*Q;f)O!BlBt*QtKf8h6!@eD80drd>pZx9!pyI; zllG(@$=tMlc~;&}8neDVK+yx6CLD>Hg73@Z0K=qxirw+Hi)qkeELEtEFJ2DFrIS5W zfC;Tf{EHlZl$v_^ME~4vs)g!YL*L51Ky_0;!8v0B0kMda7afKa&MC5IBJNiOSySo? z2HpjIL|nxdTImQ17Mh$kf2hoRJ&?^%P3rlQ#J@mgu;=JLb~mc<&NzSEZ=Zum8<(ib z+|LeM-irFBgk0RU1vK=-{pY-ygpAe(9?AE%;Q#lRpB8zHR0J0p@RxMO`Bh%7(>PpU)cPQ+F)HU&XP)6iu?zN zDaAO>Ir*WU2P9p6n>$89462-W)1VEfuQ1Oq{EBz0;0ZmVYz=^eZ=Mfp1jYnu6HhD@)BAo7I@~cG^*e z9yP_oz&RLtoQLgOxTgnIQzuHx3Gp^sqPT@9G#(b=#I5@F&UtiIaZq2fny9`YjWrlZ zF_GG{;ru-zLsH%ZhWyu=fbU*!FxW0>8=_Zs=_IrdXFNX0%k9P56dckN?BQ$pOj~va ztW=ko%D49NJF=}I>uF84`hXoUqlqsaQ*K(q$SpD28Pu9e%Nn2s%}O(anGj1%_k%(f z)#z4V%BB(X&m{0-mu?TSlsAm%dP>Lz2EN3Van!S!gM0)=4%Cbf4R z9_stzOf15>tg$O0Sol0wxJZvNK}7dC`)}-2vIrxS4HK2z{3*v%yeOJ4G!<2p)V+D3 zy}Sp&eYN>FzK(zX%kN}jJxb5THGLTX;rSYy{K%-rP~?K-_0ULg^4OOLnF<&;_T((EY>RNVF13i%;d@@Qp{=zyx1R>B_yu^S@8`JEW}Fog5pm+gaBF9s7FBfy6=Wbs zKZ^}XQZZtA6|Z$oa?Us1J5zwxe2=puYOrM^BaaBULi~=b)X)-jslK!VI5agG@Z-3w zDrkYl6$$3m){|^(i+XY@3Wz7Gri)yQJgHQ++?FeIcsv{W7XC}us~OuUk+QNGD}L^G zH@&NTS-P5~YC!kKp7PM09oZr5VoVzCybKHTrFsLKG|iQjG>aPH{Dz94uh#n6ta-6r zW)98?s@D1fD>`N#R~69*`>Y$2>X<1S>}}3J96Ym-!5>uAm4YKCuIak^#dT^ju6d!Z z8!!@AGDx)_960)&w&MTRCA8qJAF-i&*P#JjnsiFY5A0nxHm%8X)p*aL11x0!t<=Lz zOjA5_QA9C4*ku1(vO6vRdpD%8P5<{th+WAAlXLQ={|Z$e_utscZKSPK3s0`?#+{!;X z7=Md=pswvj-MB`Brdqn#(rWM+VRy~fA75c&#FFOI_T>22H8qiP^8#Nyo_1abr*u|l zdkSD5SFPyVQqGv6)&~dI?01o$qXLiA0!Tx`-bSf9KVxVK)(KRk35AI~TXq^Ke)nS~ z>+=tMB3f$2NTicsjJmt}D)ihkeUu3?&*q60NC{n8v9?Il09Vs~PhIHSIYrt{x;awR zfQO6A_jdd0E<;cbwBOQNa;yAiLP(6BD|{IPPCK;J>%ND|%gb>#{w;q*k3!l~KJE8% z0iJftmOJ^mZ4$E{&rsswwxy-Sq{Jn2<4#2Z+}=NA?dbe_x|0=#UgGV4bJ0gqotNsq z>Qo@+`Th{dxm7&pf76AGQ{t{-!jVqwtLcN@&H4xLVcJR7fU4*vJr&G;k8)RacKor8 zdO_JwSzf^yiu!S0BxC51Y==_$YLBw@XaeCJ_3pV?Vus;!OIPE!Wq#(gR)HS0KqKA@ z_jD_0o0yp@jvOIz?1Ul*8}bf$bw-e_!unEkf0N=+Gl!Jbyi%d5$iSBtVZi#Lgt6?m zoG8oebNR3Me6@~y_>yo{R}w^p&B*fsKLlP<`w z6E1qn=;bnqtBn{ULQ`uhFO!L&ZqR$42obKR@pS8X@7Eo2j|}20&7(bDQG(EG}4Fa`K0aMka!zd)`Dd1YHr#ZF|?@yZW_I{ zmowfmN$UG;1~A3AdO(t(^dH&F|QC3-svuMnS|AhKl ze8?SV$F{H~YyJ|%;YmK(B>Rlrf>)M=L4f&PMvSaBRR@SL=Eo$$5 znk(v@$*hPTVs~!M%d<-Qx`MHz!^KNDI{aKmJe(E=E!_-_`|cs?>db41L0sFAayeW-b5}$PBr{3O1zZ`~ukEuXqE2PF;aXT% z2UA(=kdT}Skpm&9l5?&R@zfcoXfq|>nOwM?P`m+HNJ2Z zhQ}4lx*|yx2|T~LCerg|aL2)ykW*45Mivl`iy}CJv)enR=_=_|Fq<1#*CINrf{*t^ z`G$%~0@{>(%@K@$&X$$PvnnVVS|S$|`~z6d>&;*KdUW=qtAjaVJ43$aRM*1RWIl2G zLc-pVm@QD)g`dl)HjhNfkxP*oJQ7RZ;R3=WNGAXTN$7(1Iz@(7*~`xGN*Vx))*sm8 zU0=+&J?4^$Wql;*Z2^CG^!U)O#?2N5s5TI(X}$)Hq~+?O5sSM-lt1_Jp+CIgt_tnj zX)8nuq|I)!iHhz*dd`d*rPANt@#n`#qOzeZxz*@cXv2FyiTdwx;Uh+)Q9TPr=njo6 zbF-8Eo^{49uOfl9wPAn5Nz}xO#3iNJJdDIE%cA2gbHFXSMKj7PcnOPE@e3>sQbh(a1_GP;rpRnv_N^fcYzyQREsq7)eeAD9%*vjHD1bZu*Ilx%c! zN3lektf&Z4yIg4LjvG}n0)nz5V$vh9Sftc@9kZTyF_iIBKd71!f_4AXk&lUh2{u!| zb86(14o{=*73oe!CH@T}2n$oaEbVPhwL%?q<|h@B_lUVq)6hlE$5-xGXr zP-ec<34L6eny_7uCW{)}%y2xtD@oI3vGlZ%v1Na?E_L8As25ljNiIbux=I1HI7Lj% z2eH}V!D)Eu9;#Wuu+?`eRR|~@ZMIUHEOb{!(9@i<(7AF~HNr#DbZHa!%V(C$ z${GL`gZNtpuU2doj1$RkZ1tp5fr*&gVS)0S^J)>ZR*7@DOxw?ESzP zNIC*>fRQY3qf5O$$Q5Ws&6}4}|06m#mhQR|f1-9amTuJkw6L-%UEaEDM@y{i)^8lV zB!<8arNtuzY-o?Jf7PR%uVG!&{t=^!CTmXG21I6Ogp#&6 zsC}asVC{(F1Z(+dS*udbE7nkMX={zD-Ak0EJFKOdRgo^UwGx3Mv4G8*@^VUKu%lTg zTkEZMNpD%YEXi=qVGBEa>)tKDw)dy3l*2M*wvxrrutP#(nrUUM(&DwtbPw6L(Zf!4 z-toEO?$MHg-Hr3Nt8YJyd(f{~N``1=+1Q^n1&;lWrI99~^B6!B*$S+19)7Ls5qQ1UOp_pqYzo1=O8X6O)yJX-d zTNSY|6%E}_rb!BC5DIgFd)7^zU#`Gy3fTs{G1p>p>>0Zb^X@x_E!l1&IKx-Hs+(aw z^~bFuIQ3_9r&i}H`RMdG&=)j+wfNdMh$W23VnuNrA^Q(|ap6|UEzrr2yRzsfev zgv^avaQmU9lSg1<_-WDbQqd+Q2rQIAN)$Y3na{vve0CHqFx?@JgCbk|1I3#IUcw)= zcB))6LPX;N7J zLrsE8`-<&at|KGMj*M4AL{a0j^|eW(6uvl+F8w3S7V}okQXDYb<>9_1ZLPzhKFPUf zQJVfjrhY7jg#5^9Npn!&pp4p-c=xV=XpQ=jDECbTgtMnJS<6710 zfA$*XdrHfxO#jo1XDct0$I|VUG1I)8c33UN-*Q>u+vGe#rw=qbP8S{gdT*{1iSOye zyk)G9V8lf#SA0u^p4uRJzYK4hgJ0Z~!SzLQRfp?0?Q%)0Sd{KL6+57Y-HyRHKw8=TXKH(P;v`zoC(uru)nUZ6pDL({swysn7MDCfT zYKsN8%+b^A(Vt9e8&IcuDH|XrTjeIt24|>{?Lg(mPJA@$TKXAnz{etL0T0DrZzhT%{LhHp(7)p|xIsz6`Y%yk;{)vKFJTG^(p!wS)n;cFMCyl$_FgLltvpR5 zpf)PM@bYSz8V3Xmfy!`^=>EIu$pxRF0sN0>LXUZ+%x%-0J*JwfvRSVud`|+U&4q>P? zi)Jq_PhthwFg zYx4lPU83?ELiO!Xv>RD~3!yrhN{Wj6(Q{tT545l~K5P$zS0fm{7nJygbM|Im&Pk`y z{DWYe(ov;iVgn{YCRIXN`ig`nWN`THU>{`j+}UzVQ}jA&$J#{p+Fm`W^xI9HdQNou z_7W{i%0&15#97|mg}_;Rl38~-AU+8z`O3VLXPrfxxFWw%#ohg4>0+e3{8^r(BT|jRSqy4XZbz6}9|0~OY+;@S8{`WsL5VTG9 z|JPLhI`?TQ8RLhlcm%GQ=A&^mHRc$ZRSp+ce{-uIF?pYG?2{^aM`h8#aOe&?W`vDT z*6xOaEXK~I%R_0gcP8Q+R~`EMqnGzr@}!3551$Oe(Ln@n+Jv&D_X49Wd}QuJw%?Bx zk{2y(2ETjWd=gUWLop&%ldRHNQ*N;T-6|LkdBU{HopGQmdbT|*XKZqg$KIUYCf_uu za%rUUc2G!Lo~mniwF|i2Gs>Gol%o(3 z6#A>?*zP_AdKCyeKxlx8RZ@cZ9Det;^SR6hwrMw`emER5cD_UpQ>^-jtNZOQKr3sC zU$zLZHncX$Sh##TzLUFc$B2z>rj=3nzS13Z1sIO?Al_JH$-Uw|&C6rg!BUd6-&)XP zSbWxnbM~O@^84c#Z`|4Wcjq;HKZCdVo^d}i<{9Ilq*QCAIk=fBgnQu)@o3^Cbs+!n zRyu6^IymBLsiB+y4$&Oezbz3y^;e7GinvN>zpdunT_2ws#9Z4`(L4R%+u7T(sDWK^475KNH4ORg#+tB^csP? zXj0bs1Zt+bsxwEli_7>wBW9o1b9c}U$F?EM1k{g6IdQt<2$``tvdc@S;rk3hEPq!H zb7*vmi^KyD>0pj7XRp}E2`$l}&+w6{4XrGpyG{6yLwjsItg;rt)I>tYG_oDV`gxZI zyj#T_lY}26yvOFWG1;~88RX==BvDV*V(s)8;nL$KBDPQFrRwHhA!A2b9dxN3?7@xz zCSBODTe>7#E24UNZdQXCkXEEcKm^F|OBRSB*5VtS%guLe^pGf}GL9`*4@n(qnW)}r z?x6P+C?ER5a@BI>5;NmSJ$~}0k$Q+XWePeTx`MwH^RGz>y_diAW|P0Rto(^=$}Q}? zb5?`YIHUlWYXnpiV`1}qn4i1)R1_|LFXup_$I!s=1;L@f`kIAVJ%X?zM~aGf_+wcB z911ek0JWaZL)uY=1^{S~0$Af(;ax$Ro&uy~iR+m#Xe$U3Tug579x{at0YZIjWe`v) z)pJK1!BGFATRk#c=zphVJi21_rK!HC#QI&)%y*KH-}wjI`jonje{bzqFjGek7U)va zcuD23COXkoDmyvpJ-IiuPQI5}eb+nJ2{W?soVmxkoZ(AOc&F2Q+s(kU|HI9aQd2=8 z)MX*zEs=5i%p5*Bwx8kFGuMbJZ20Hq%Du1Qo7OVVtE6rCB@xeBJ_mp1P$*0!-5Q=f z05A`dlu$zxeAy(nT=EF4mzTGsA;N|?KIyshM;$SzgO$&cqT zbXnJ2RMttbBz2!0N9f9?E#d}fe!42zgRbD?F5V61^jSNOaK10d4~RUk&}z5Tw4$FX zb~a0a3}ZUOrPhq$Bn`5IndJqKUO(3_U2c3{5*_{#_Jjq0FU
szmrI^!7gbvK#H zAAxp)v9XYbNo0eBy1I4cHL=_$19NJqj7eUUmr2mp_eXrV=#6Q~T79&e#SkAYjjg$V zXHMcZ3SVTR^Sxprup9H`kF*cWJT&k?CNSYQubzk>;Pdf{JMAAG3-W)L@AsXof555y zUT!CRq*vgPB=WZRm8HhXbCqv4zdSwSZlhg;>>LwT^2yfk(Y*ybKvO!u7A7qlQSSZ* zUI>YWflx|Sr|c^~#R79CWBKBI0qOjmJY?j{A(o3Zdo9cj^Qj|-LS0JE3gjsZG0}Hi z*N@%wMX;%=Y8~`*X0R)l%e?5;seLbd5VrtrmT@UqHQ@8kHevtjHvB$mIT905Q4e2A z_nM}H@{h!#@yeTP*naUZVfF1oO498d8*F#@7RUR+LsY8z>IxBL3Bl18i&VCwOtkF6 zHL~NSZRS6o3jyDBbY+|#$Vwd`-XCx}2PnK5XC#bN*{6lrD8NCUjU~`ld`Mj9kCY~B zHsHRu;2*|vTez#Z!ix6L_8rX6iFDd|gjA$7TiHNGi{sJqisBa5tn5&O8{234q_VS| z{C0riV07&G0+DDRA_Lz$Ltr7|^E3)hM#7&Ec~P z{fvxbVFyb+AM1BJ02)wC?%?5HU15OlChlJt1hK0~+O~FB_Xwh3%S8ae;TWNBAen!* z6UwCVg9o+RD` zHFqwXwZoZ~82Y}HkrT8wWm6S%>|e9p@!;F^ZL^fuJ(|z{T@jNGlD9#=)7kbaWN~Kd zI#?x{u5go0jhh;hhb&#~aTO%7fAUHCpc27^IhLIb;eURR6!yK*Iuc5GvdF1BP)SZw)K}#-=WIHl-QXQ`bGN0LiXi7>%uwz@t5`ias#Ykp2k`xk zPbKet!2>TefX-ZH=P)87BB&r8eAh4kWMiU%g)+z{F;_Jq>HFMmrL<-OZOCvccHvnk zoI+&(7Io@u3_14d+~w^xB@<2Z-*gj?*y-}hsS+PZd|p31@|gJRuUGh+m{M!6L4n%x z67kOdo5{B=NMAP^6GKHx6?!~nJk`u8j_ywzNvd-ZrSwDW8fnZ|A zwxy-zLDVOv+f>ilyu2druFKc>K}h7<245ddwc2wO`z^>dmfJ!`9?nwK*8BZxldl1h zKHG5eR+NuNdt0XTWgV=mjrlNC!&rn8A|&qOX$4?SL2u`H)+q*vBc&VBKUfS-|& z2RF7_TP^B(BB$!wDt-TL`!45RHvf-NiFw3-P(sMn+^5oirsh4RK76Fe|D(i(-p08b z`eZ4PO+Ir@6=#>bdvp|Dm7h_x#Q)scyQoEo=dG@Zg=e6GWeHfZZ~J^_>FPZ;HpI;w zFf%_EE??E!{!m*l=T^pF?V37Uf(!BvZUt;}zK-Zqg%Zx~Esf~y9}C2_w?8#vAgPtWRmItG(1j?KN95CvgZ_3xV((=)X>44qq9 zYmJ@9UG8$hoMC)|xKqoU>s-PC&aG4N9FB7%Z*$0ae$Oe48?N-szW|QS+$aug8rW1B z`o5e<{j&!GVy5f|y#PZNgQMk@h59zW>C<{zI0Kf-45MMdR=DaJ1XG4$Fie4C*Url` z@~H^3RO&9A=Rk=xbGL|&ctXB8!|^EbEmuV@;1{&;R2m<9#YD{7s;X^UO!;}|k4lwh znQpM!ok{0!c+!A`B)8RL&B~;-yj+*;#J70v~bYr<0Df;FqQ|*Gb87VRKv{2LjR$@ zTt+>{ep-r)i4ok@%rGhEjd;nus$z`A!2c#KuLk$-{B%lq4mlnNT`h3{Clw0~&J z;&Vd&(aT#y$6_q6GfW;hhirIC_{E2H9E zMaOLOH7@YwlXuRudDLGmYZ7h;AxeJ!RM>~=@|VywD(5uT!W7!_m=e$T;;jaKLD0kRK$m1r&e@xz*Vfuepc zNS;02VjJ^JH-hG^ydB#YyFo>Pbgr3-dIbJj3poj9cjyLB{#7W++h2ixPZ{H4`favn za-zSJFJD}ri%E+)sK)%~ z{S&IgN(McPmfgi*VMuNmR>u%)>$ z3fe3!!9*&hd8aL^d;C(8Fa&?^SAj*p4$bW_+p=u4t(SH8s3I-&Awx$k);h-s?L&IP z_2(?CBv4lKcbI)*dw4MD5U$Zze7}))y=vRYUk>4a z+PdnfD1&!xAqoo8pp3LF z<^0BP?d#g}_)-zHT4;GaH9(7ODcnnp90v==Kw23I25lNiegO!aVg{^G_i)6emm>{YURKt94_By9Yt0NX5*+R%5eXV#SZ+#ZpJ zKEJ1M-py109GFIWzxtXHGH@tc*qU1WclBybJP;1Lx@f0vNLHLmp=e(iPQAf;SqjeZ zzWbd9s^LvV1cNR6R?fuf^UkCBg(f*PGP;0`5(+Swwtfm_@A}6_1Z%57f(bfVbOW%| zwhjX}mk)&%;lxNlX zh+zn0KW8R0v2Tb^GZZy9y@sR*FneiJxRZrpN!Xedp?Y=V|@BSG-S?4_bK$fpgO5^VoCUGPX@aD`I{m7}Ux_X1Hu@0Gm4azXt!16-&uy>k-6Q=7%*`->wzO92`$* z8XG1_Xixr`&z>uPxVU->=in80 zm3!yO8bOK@(Cn^-CRE{NsdxzT!@7OW57`umg!(Ia0at zjvu7HoTNij;;a63^%ZwVnzu{hDXP$B|KS+^arvt)z+;93{lyzoNsQRq=W&`x*)tPr z;#AQv{m=+x=LApS)~z#E@^u*2Aq@jRYYC12HW@1 z^8dsDYNFX?Nv>Pb_L0+!M}h6rY_O9TcW^932oUk)K((V-e5J-CcjrXVKp2B3PhJ)H zih!Wjekxmln=|$xSlwZr@9KD*CIpWbO`i?)?ChE84gUIeWh{{^r&dl|cRRYL9KQiM zC!smw`EdjfdR<&Rjo4c0x+iy+@S@^G*n;Os(BF9^8pHRLA1}ZFgAe^0(p12T97RJk z16+tSf$H(_oX63wAOp?3QPEMqq4bRymgWVH*K8b31^K4@;*Iw@ByR(jih>3$>uobW zA02aSiRR7Fbtl76UM=o}TbB`9#;dCinVoQ==2n_uOa%p3_KnMB*ZiIky{0>-*Xx&>nFE#b=G~al(F#xt*?YZa`Fq51(?uOoeuyP@bPJAeWFCzA*81*# z91obe^UEs*OyRY6YdDc3n6!SL$E*k4XcEEh+d1L!%gnP{zXa1ex;fF@g7TnV6~bkH z>mScRPoI0-C06HIow)pkS-#o}Bq%;D+`SrKA~xHmxyXd+4=U~F@!tG6WqF7Fe1w8KJF(%8BE#Qjb-juo)Xsv!>^z&PRFjX%m%_`dtO9 zz!+Rxb_v<;$Bh@$E5}s&J;|_9=nV1ni0qKTUWQj5I#tp#iKJhh8J~C)js;y@_LSG1 z`^+2!8e+m_N88U-Oiw|t>}Pdps@`SBHxZ{w5e~xtb>)TXD#vVT_Ox2?GBpB<}#-(oqz)uw)*eQ4e^DnIE%hJ z4cpG4Wyy~qzCoK0u*I^o%Udt$_tEpJ7&Wl}LIDHRQ8tnY9lz&d5g%XNT<@K1J&+}; z;Lyd1o{Kr@!MOtnxS>!hc)1#YUBE~10+2$>!%KYM_HNq?nBVQvnw8ssJP(z|TfKkpp0 z?tF=IyXSOh^6MR+G~T8O+eZ$nNq+o0`V^Z{4~GlJ4{s) z`u81O1>8V!RsEL<{Eib_w{Z@)?Wp>StTA< zVssOMtcK23VkqXbtt^AHewZ@`vW_IJ^taw`(Xl!Yyr`Mrsk1-RYtCTH-x%K+61v#C+X`irOWmNc9Xap`{<;nU{2VQ1mYOKsr#Wvzs;xXBlF=?{DJXU+@)!-8{WC zaQ8H#P%tp(b|)9)tgaNFO%Oe%d6zV6Drz?q%)yhld}Sy~^R70o5Nd^coBk|38E5+} z@erv}DVB+sG8y9Nho7JSqq;sMY&WTJzm>IFuh$(nqm;0Nd0O6L8I1fK?!Ma#cnF`>n+)m!l#smNw;{s&0&Yl= zlbS)Rt%C*q619{nkulwvzyjk$|HbIayoP2a+~OWnQ%{z#L*JgzM6+pek=)RxmWOUm!T* z2Xi0T`K)yy<2);o-9&@dR|V_?8+RcT36q?1zIBf)lB(82R`yC|iZl|IT+(I@KJKU$ zMDdVZN>0u2n+S$^P9?PK?@*qY?7E(8w!C3dC-B7qSIZ2%N*b5Q>4?C#o63pJKVH02 z-PTp}m=Y2HY3>OQ(!eN)W`I5*+Bf}Jyk)bl_gE1MYpSUgt8ArySOJbKNq6MWPW)z6 zd8r;We=b`95$98lDAg_U)Cq5VDH)Z1A?hVDG#gP}WMNzqv)%uQ+~?{o$u{em7p9@F zG>HgXE@QDnji=bmxJPZ=a7>@omiW3c(5)2--7EC8Tx)BBen8GS)1e(E8cnc8xopr= zv$JILSHw++@p8svu)sK2mXqU$8VY*<0w(*lp?sxDsL|onQ`L;Ef%6_-i4P_Q`0k~% zmV0V&D7l4ad3Cbbvr0je=Lyp&0%j_hX3k3)V-1#S`?uLqn98!lUuOmbDQ9GQDB!H zFp=ELcz^YC+yak79MY+S@;ZCdf!0StR7W)+REJzd#V=YGt6;K{!?dbYM*m^@B~ z?0Lh`;S;K$9*a+?&~ri6f4IT_B?xb6LrTXp20vt2w!Af3*MYR%z;3lLuYNZ3t$@LB zcs;=eE>M?I#O}w%(;lu$Z_A9@JYMqT0%3WIK93efl&6EQh_C5{OODX2L`H1K#c;#` zEpRxr+)M6m5o_l*sjki=4gz_v_Zck>!Q(_F_UuJeQcJQe+iEyND9NMp{@>btZ7F{<_9XhXk?kLb@veFY=4Kt_5RN;bQ6v zyr(8Y5Su7GiruiZ5cXeWs(CxAs3fTvk6*Z>JtT1T1@FSRodc0q_4s;~6Tv&8G08y5 zwX|y)wxXTG^K&Y0CeW7aN9&@0V?X-_WrOf@JYhIrBYM|h?tTlBu<8*~7hYI=P1pEj z{wi>Gc&PYVw0U3!pc6q|f8CYj&jUAmg+kPSKy`2?OIx~)yi)%5dj3JTOP_~3CiRJz z<~eYf*z$+j=UYRMd8JyQtMO~roV;T3ziiB_c`{M$zbbYV-0>y_0o32WEf|yux}JmECx0YUDC+Y#zH__l_eedK~JG6NdgltAhifM|u>zZVHjC zFg)YahkoApy<__k#T=*dFN?MgR8@79+Ir*7o`qJ;N%kLe_A%S9FTOGPLZY3qNhd^| zE_j-2HoErKcCCI@lbcImqN5Z0KACfbn;_Jq*qk zRDG5wC->&s&{~=6oeoL2-(99Ct|3p`^d$}eXqG#GnSu~p@n{O~sWG-O+}^aYG1|jd z(2(v^H60Z(4|hfB`^S-IuF7g^9g+3b6MX45!;6QL3n%qJ;ZYWWnN%@wI_l~tQQlc; z0PV{nkj87l@fXN*F3v{Qp|jA5bpm@M6C8oh@ayfZQq6dEwVsx0o0+N{ZayCPh)6GT^_>r( znOl=!#K@Ozw@m)~plp6_MGRL!hB^3g>-Bj|pSoh&#<(i|&`0f_{YKR7hd+UG)9-D8 z2`O#nN{s@l=-WGWGW!2&Cfd`bmk_y%lr|{Dr}K1z@q$og!o~D#Wt8w=9ax8`n!e3v zS9oZEaw?yc(%0tYI}pxRuac4c_Gb950)LV>i)5>7soU@{9#yfpaCHYg%Z983ch6Yb z)SR5rAIqbQfO7&e5OTjTnW&L`yt=cq>c(c!>>mdtZWu=^5W5f|)x{3(6n9J9wRvh}RN*d)O^A?>s>Sp8qCN%Ge z=Qu#0aWlol0Hft4fwpkdDNoUs{%W+}VuLEF>Iqkumq;hI&IiW^Y?KwlK&07)AhKsh zLbUnU=>`W&sVwZIf?605GWLon<1*Lrkh3o%N7;Q;OPRq()KHa&GhlEIoH${|4fVe{ zU70B`2U#geth_0vWN%Myi~Q72C46y+C-jt_NC`S~d~`~$mdsG+ddrs1rK3T2T~Nxp zaoMb!%QwuaM@TcY6U|*l@VYYlhzmA=UK={A*;@Z^J>$Gz#V;bm-1r?w9-5iGvyGEL zy_`;w@B@K1_XG>p#K@R<)Fyy9F0V;$JkQ{8RVN>CaO?$Xa^c zaDP`Z%*|V2tqG@7z7+o%9*GTXV+qgi^rMNk}7TZsH z$|e>oF@?)xmv@}DuH&YX^@n{X6x~l}JT9iuy*=jqp_p1F;j4-izCkQJ1k%MJ3^NVS zYHG5yr~!2&T~YMBEPexwvrP{)ms8iZ3uD&eq-)HU^~hiuXsYpKQK}wsW{7!8gO>Ku zW5RgiWkry1SX-SM;h7?M*EUCjabrH;FYCK?uyC1IE>D>(xGn~rkBlS6#$9-@O4@CK zKS+mQCBW~9n`O*l#Xn|Et-=`8b8ZL!dGrZ?m5c7Wv4CZ0y`9L9vLZ_r!{JA-;7?+@ zBz{0lQbum)%Fg|Ih2kT|C35~ix>$mxn2&lno`e7=&5UbZIXy{06{urDSl9V>ED?Xn zVUPNTE0{l(xwEgGyG(V~{)U{{%AnH0oxDM^ius>3>Smx>pslpH-u(clDqo3WFH+q5 zcAT0nL}F%^s?-+U?K=0>lDwB6vm174!4`QIBXbJ9fh?(B5apf+!Q}lHlyY8>-20Ld z%u_1S2%w^>^~V{aL6>gq;-Bqi*BnyOBsZMLH1qTf-M}VSp5>5`R(=xg%Q?n_(eee? zB*Q}EH>)1XC(;)0)`{M|Y$40|6SzoAdS5^ao(*9}CMy`7y?PqcT0JIr^W`p%6Gt->6kA@8Nb6e$? zkxChxK^8X8_v)9l4ACf1^(_V143B%Rl?T~h$hGe(J~8EXd{?%NNOmvyY_r%$L=g*3 z72CfckR3m9s0f@%-^raoawriDQQW!3giVIysY%y6^@w+`+puHBP{ihM=NHq&NnJf!@oSI5hezhKB66?jn4Q7TcfOHUKFk}sOVYh~e6O1ysBeoZpbO`)uS608Zl z?E`U{rf>Cgnwla8+inbrlCinHk{RF+3(GhSLpaOdgr6s@Rr$E}sVF|b!{NNTYKYyK zNYzc@?LmYdp3~CM1zdJIW0^O|4%za;P(@KcfWLHm&kQ=q*=o>?Oh>UOoZ-B|k^7)5 zLK4Ko0*j8-91Gn4lv%RM&|u-7V#7?!&mS9kL#J>WlF00|X_z3=HT(?RuOe8C5f;k0 zw)~ULoD7PlR*;Mu0&X(slS?nWBpoAzyYYF!W9Z>&M+s9}?zg8~6SVzP9tG%RJQ=D%vp1H4WL>q zw!d4Kkx9 zo0cGV@o4csW=Ye_-9AEWh{jGRf1Dvr2cf|bM&@Wx zL8<+kg#Gtck<36-G}Xp0kqAkqj{^lP_C{{DY0ByXj8Jb-Ka@ff4V(5S7?kVPWz*bzOmVur-qLcd7%Yk#v(-CEm%Qc}o)N_9zop=TV z_oy_w?Y)(ZvVAdVlNMeYkGm}Qr8AcJ-Ib<_ z_czjXz)q-s^vPlkGm|T;T?`qAy8mZIw>8hmwXx|I!8D5>eMsJoS4puSbZnle2f%4& z^f!V_*(;|WKyIm&`7{rIGj-j3=|t)3iT#8hWp9EfKh2U*aZtw;<7RbSFWLk&B~ofY z9e52;iC7g*wC6*Ek+oEc$_4-{f>xy7$AOZ6TlE+UnM;__Q25DOBE|7v`c+P>s zH(wVaggW6S_0~k)$5&6z41N7evI7v@ekHTik78%1j{EdOl$1>4b9n*s1WTnP5etN$4 zE!=66X%-4Y*4)E=cd+sOZo~m8XaW$@t3BnwgE4l)!M0FRZhpUKS@G5Fiw5G`$(NHpUsTT444BF+R)j?91V>GW}CPK!S@)$<#Yz2 z)h@bl(;mqLkZ#{qA$R8rZQ|vxl9nQJ+NK?(^ow)uDj(OOzIi>Opnj3nChqxx4 zaeXIKf`pS$3{*69%zQzu0_YoD{D#-@>%TO~k|NXQre=Sdt3lxZZALfU4SLQwTmvh?K Q2dJN{q=Li`F{5w)1xBjHga7~l literal 0 HcmV?d00001 From b3c91894fa966c0e2dee52c65c22a2108fc82eeb Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 2 Jul 2020 14:45:29 -0700 Subject: [PATCH 047/589] fix links --- .../configure-mssp-support.md | 6 ------ .../grant-mssp-access.md | 2 +- .../images/goverance-catalog.png | Bin 12359 -> 12359 bytes .../images/mssp-access.png | Bin 41134 -> 41134 bytes 4 files changed, 1 insertion(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-mssp-support.md b/windows/security/threat-protection/microsoft-defender-atp/configure-mssp-support.md index 5aafc31c98..98599b9d18 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-mssp-support.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-mssp-support.md @@ -72,9 +72,3 @@ This action is taken by the MSSP. It allows MSSPs to fetch alerts using APIs. - [Configure alert notifications](configure-mssp-notifications.md) - [Fetch alerts from customer tenant](fetch-alerts-mssp.md) - -- [Manage portal access using RBAC](rbac.md) -- [Pull alerts to your SIEM tools](configure-siem.md) -- [Pull alerts using REST API](pull-alerts-using-rest-api.md) - - diff --git a/windows/security/threat-protection/microsoft-defender-atp/grant-mssp-access.md b/windows/security/threat-protection/microsoft-defender-atp/grant-mssp-access.md index 6e1bf6397b..69e69b4053 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/grant-mssp-access.md +++ b/windows/security/threat-protection/microsoft-defender-atp/grant-mssp-access.md @@ -117,7 +117,7 @@ To implement a multi-tenant delegated access solution take the following steps: To do so, access the customer’s myaccess using: `https://myaccess.microsoft.com/@`. - Example: `https://myaccess.microsoft.com/@M365x440XXX.onmicrosoft.com#/ + Example: `https://myaccess.microsoft.com/@M365x440XXX.onmicrosoft.com#/` 2. Approve or deny requests in the **Approvals** section of the UI. At this point, analyst access has been provisioned, and each analyst should be able to access the customer’s Microsoft Defender Security Center: `https://securitycenter.Microsoft.com/?tid=` diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/goverance-catalog.png b/windows/security/threat-protection/microsoft-defender-atp/images/goverance-catalog.png index 69e92ad46d671489baf4985d9dcc5b0eb55aed9c..e670575f6d897daa9046a48ed5872dd5072a0479 100644 GIT binary patch delta 18 acmX?}a6Dmx6T7I6_B9WYTN^$9=>q^sTnEPh delta 18 acmX?}a6Dmx6T66laYpdU?HfJ+=>q^r%?Hr{ diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/mssp-access.png b/windows/security/threat-protection/microsoft-defender-atp/images/mssp-access.png index 143628c6838f0258504ebd481deb4a6de1b3b8a6..57dce4b5c15e381115d7934092145eaede05720f 100644 GIT binary patch delta 20 ccmZ2?kZIjPrU_2$qB`pL|3!S<=$X0z09_*qNdN!< delta 20 ccmZ2?kZIjPrU_2$B9c-nse2MPdZsP_08wTKr~m)} From f248ba7904b3e02382d2524c9594f258e9289169 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 2 Jul 2020 14:47:04 -0700 Subject: [PATCH 048/589] update toc --- windows/security/threat-protection/TOC.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 212855c5b0..84f115ba4b 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -610,7 +610,8 @@ ###### [Using device groups](microsoft-defender-atp/machine-groups.md) ###### [Create and manage device tags](microsoft-defender-atp/machine-tags.md) -#### [Configure managed security service provider (MSSP) integration](microsoft-defender-atp/configure-mssp-support.md) +#### [Managed security service provider (MSSP) integration]() +#####[Configure managed security service provider integration](microsoft-defender-atp/configure-mssp-support.md) ##### [Grant MSSP access to the portal](microsoft-defender-atp/grant-mssp-access.md) ##### [Access the MSSP customer portal](microsoft-defender-atp/access-mssp-portal.md) ##### [Configure alert notifications](microsoft-defender-atp/configure-mssp-notifications.md) From f2721fc355854ef0b4106bbf99496b5bdf1e7794 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 2 Jul 2020 15:00:09 -0700 Subject: [PATCH 049/589] remove en-us --- .../microsoft-defender-atp/grant-mssp-access.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/grant-mssp-access.md b/windows/security/threat-protection/microsoft-defender-atp/grant-mssp-access.md index 69e69b4053..1a150684ba 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/grant-mssp-access.md +++ b/windows/security/threat-protection/microsoft-defender-atp/grant-mssp-access.md @@ -29,9 +29,9 @@ To implement a multi-tenant delegated access solution take the following steps: 1. Enable [role-based access control](rbac.md) in Microsoft Defender ATP and connect with Active Directory (AD) groups. -2. Configure [Governance Access Packages](https://docs.microsoft.com/en-us/azure/active-directory/governance/identity-governance-overview) for access request and provisioning. +2. Configure [Governance Access Packages](https://docs.microsoft.com/azure/active-directory/governance/identity-governance-overview) for access request and provisioning. -3. Manage access requests and audits in [Microsoft Myaccess](https://docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-request-approve). +3. Manage access requests and audits in [Microsoft Myaccess](https://docs.microsoft.com/azure/active-directory/governance/entitlement-management-request-approve). ## Enable role-based access controls in Microsoft Defender ATP From 46857420e696890535095b808bda51230bdf6639 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 6 Jul 2020 11:58:44 -0700 Subject: [PATCH 050/589] fix 404 --- windows/whats-new/whats-new-windows-10-version-2004.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/whats-new-windows-10-version-2004.md b/windows/whats-new/whats-new-windows-10-version-2004.md index 489cb3373f..b16baf0447 100644 --- a/windows/whats-new/whats-new-windows-10-version-2004.md +++ b/windows/whats-new/whats-new-windows-10-version-2004.md @@ -184,7 +184,7 @@ For updated information, see the [Microsoft 365 blog](https://aka.ms/CortanaUpda ### Windows Search -Windows Search is improved in several ways. For more information, see [Supercharging Windows Search](https://aka.ms/AA8kllm). +Windows Search is improved in several ways. For more information, see [Supercharging Windows Search](https://insider.windows.com/community-news/desktop-search). ### Virtual Desktops From 1a014920d313974598b957ecba6995aedd7c830b Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 6 Jul 2020 12:24:28 -0700 Subject: [PATCH 051/589] link fix --- windows/whats-new/whats-new-windows-10-version-2004.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/whats-new-windows-10-version-2004.md b/windows/whats-new/whats-new-windows-10-version-2004.md index b16baf0447..489cb3373f 100644 --- a/windows/whats-new/whats-new-windows-10-version-2004.md +++ b/windows/whats-new/whats-new-windows-10-version-2004.md @@ -184,7 +184,7 @@ For updated information, see the [Microsoft 365 blog](https://aka.ms/CortanaUpda ### Windows Search -Windows Search is improved in several ways. For more information, see [Supercharging Windows Search](https://insider.windows.com/community-news/desktop-search). +Windows Search is improved in several ways. For more information, see [Supercharging Windows Search](https://aka.ms/AA8kllm). ### Virtual Desktops From 1c8a6314ee300348aafc11dd4cf78d0e53435fe9 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Mon, 6 Jul 2020 15:19:54 -0700 Subject: [PATCH 052/589] new section --- .../threat-and-vuln-mgt-scenarios.md | 22 +++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md index 3a565b7fd9..7084b50423 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -50,6 +50,28 @@ DeviceName=any(DeviceName) by DeviceId, AlertId ``` +## Define a device's value to the organization +Defining a device’s value helps you differentiate between asset priorities. The device value is used to incorporate the risk appetite of an individual asset into the threat and vulnerability management exposure score calculation, so devices marked as “high value” will receive more weight. + +Device value options: + +- Low +- Normal (Default) +- High + +Examples of machines that should be mark as high value: + +- Domain controllers, Active Directory +- Internet facing machines +- VIP machines +- Machines hosting internal/external production services + +### Set device value + +1. Navigate into any machine page +2. Select Machine Value and define a value +3. Review the value in the machine tag area + ## Related topics - [Threat & Vulnerability Management overview](next-gen-threat-and-vuln-mgt.md) From 0507eaf5998912849ef7239c8797e00d99844376 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Mon, 6 Jul 2020 15:54:02 -0700 Subject: [PATCH 053/589] new video and casing --- .../next-gen-threat-and-vuln-mgt.md | 40 +++++++++++-------- 1 file changed, 23 insertions(+), 17 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt.md b/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt.md index 81a12f3806..05fb5adc3b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt.md +++ b/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt.md @@ -1,5 +1,5 @@ --- -title: Threat & Vulnerability Management +title: Threat and vulnerability management description: This new capability uses a game-changing risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. keywords: threat & vulnerability management, threat and vulnerability management, MDATP TVM, MDATP-TVM, vulnerability management, vulnerability assessment, threat and vulnerability scanning, secure configuration assessment, microsoft defender atp, microsoft defender atp, endpoint vulnerabilities, next generation search.product: eADQiWindows 10XVcnh @@ -17,7 +17,7 @@ ms.collection: M365-security-compliance ms.topic: conceptual --- -# Threat & Vulnerability Management +# Threat and vulnerability management **Applies to:** @@ -25,17 +25,17 @@ ms.topic: conceptual >Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-portaloverview-abovefoldlink) -Effectively identifying, assessing, and remediating endpoint weaknesses is pivotal in running a healthy security program and reducing organizational risk. Threat & Vulnerability Management serves as an infrastructure for reducing organizational exposure, hardening endpoint surface area, and increasing organizational resilience. +Effectively identifying, assessing, and remediating endpoint weaknesses is pivotal in running a healthy security program and reducing organizational risk. Threat and vulnerability management serves as an infrastructure for reducing organizational exposure, hardening endpoint surface area, and increasing organizational resilience. It helps organizations discover vulnerabilities and misconfigurations in real-time, based on sensors, without the need of agents or periodic scans. It prioritizes vulnerabilities based on the threat landscape, detections in your organization, sensitive information on vulnerable devices, and business context. -Watch this video for a quick overview of Threat & Vulnerability Management. +Watch this video for a quick overview of threat and vulnerability management. >[!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4mLsn] ## Next-generation capabilities -Threat & Vulnerability Management is built-in, real-time, cloud-powered, fully integrated with Microsoft endpoint security stack, the Microsoft Intelligent Security Graph, and the application analytics knowledge base. +Threat and vulnerability management is built-in, real-time, cloud-powered, fully integrated with Microsoft endpoint security stack, the Microsoft Intelligent Security Graph, and the application analytics knowledge base. It is the first solution in the industry to bridge the gap between security administration and IT administration during remediation process. It does so by creating a security task or ticket through integration with Microsoft Intune and Microsoft Microsoft Endpoint Configuration Manager. @@ -47,7 +47,7 @@ It provides the following solutions to frequently-cited gaps across security ope ### Real-time discovery -To discover endpoint vulnerabilities and misconfiguration, Threat & Vulnerability Management uses the same agentless built-in Microsoft Defender ATP sensors to reduce cumbersome network scans and IT overhead, and provides: +To discover endpoint vulnerabilities and misconfiguration, threat and vulnerability management uses the same agentless built-in Microsoft Defender ATP sensors to reduce cumbersome network scans and IT overhead, and provides: - Real-time device inventory. Devices onboarded to Microsoft Defender ATP automatically report and push vulnerability and security configuration data to the dashboard. - Visibility into software and vulnerabilities. Optics into the organization's software inventory, and software changes like installations, uninstalls, and patches. Newly discovered vulnerabilities are reported with actionable mitigation recommendations for 1st and 3rd party applications. @@ -56,20 +56,26 @@ To discover endpoint vulnerabilities and misconfiguration, Threat & Vulnerabilit ### Intelligence-driven prioritization -Threat & Vulnerability Management helps customers prioritize and focus on those weaknesses that pose the most urgent and the highest risk to the organization. Rather than using static prioritization by severity scores, Threat & Vulnerability Management in Microsoft Defender ATP highlights the most critical weaknesses that need attention by fusing its security recommendations with dynamic threat and business context: +Threat and vulnerability management helps customers prioritize and focus on those weaknesses that pose the most urgent and the highest risk to the organization. Rather than using static prioritization by severity scores, threat and vulnerability management in Microsoft Defender ATP highlights the most critical weaknesses that need attention by fusing its security recommendations with dynamic threat and business context: -- Exposing emerging attacks in the wild. Through its advanced cyber data and threat analytics platform, Threat & Vulnerability Management dynamically aligns the prioritization of its security recommendations to focus on vulnerabilities that are currently being exploited in the wild and emerging threats that pose the highest risk. -- Pinpointing active breaches. Microsoft Defender ATP correlates Threat & Vulnerability Management and EDR insights to provide the unique ability to prioritize vulnerabilities that are currently being exploited in an active breach within the organization. -- Protecting high-value assets. Microsoft Defender ATP's integration with Azure Information Protection allows Threat & Vulnerability Management to identify the exposed devices with business-critical applications, confidential data, or high-value users. +- Exposing emerging attacks in the wild. Through its advanced cyber data and threat analytics platform, threat and vulnerability management dynamically aligns the prioritization of its security recommendations to focus on vulnerabilities that are currently being exploited in the wild and emerging threats that pose the highest risk. +- Pinpointing active breaches. Microsoft Defender ATP correlates threat and vulnerability management and EDR insights to provide the unique ability to prioritize vulnerabilities that are currently being exploited in an active breach within the organization. +- Protecting high-value assets. Microsoft Defender ATP's integration with Azure Information Protection allows threat and vulnerability management to identify the exposed devices with business-critical applications, confidential data, or high-value users. ### Seamless remediation -Microsoft Defender ATP's Threat & Vulnerability Management allows security administrators and IT administrators to collaborate seamlessly to remediate issues. +Microsoft Defender ATP's threat and vulnerability management capability allows security administrators and IT administrators to collaborate seamlessly to remediate issues. - Remediation requests to IT. Through Microsoft Defender ATP's integration with Microsoft Intune and Microsoft Endpoint Configuration Manager, security administrators can create a remediation task in Microsoft Intune from the Security recommendation pages. We plan to expand this capability to other IT security management platforms. -- Alternate mitigations. Threat & Vulnerability Management provides insights on additional mitigations, such as configuration changes that can reduce risk associated with software vulnerabilities. +- Alternate mitigations. Threat and vulnerability management provides insights on additional mitigations, such as configuration changes that can reduce risk associated with software vulnerabilities. - Real-time remediation status. Microsoft Defender ATP provides real-time monitoring of the status and progress of remediation activities across the organization. +## Reduce organizational risk with threat and vulnerability management + +Watch this video for a comprehensive walk-through of threat and vulnerability management. + +>[!VIDEO https://aka.ms/MDATP-TVM-Interactive-Guide] + ## Before you begin Ensure that your devices: @@ -78,7 +84,7 @@ Ensure that your devices: - Run with Windows 10 1709 (Fall Creators Update) or later >[!NOTE] ->Threat & Vulnerability Management can also scan devices that run on Windows 7 and Windows Server 2019 operating systems and detects vulnerabilities addressed in patch Tuesday. +>Threat and vulnerability management can also scan devices that run on Windows 7 and Windows Server 2019 operating systems and detects vulnerabilities addressed in patch Tuesday. - Have the following mandatory updates installed and deployed in your network to boost your vulnerability assessment detection rates: @@ -91,11 +97,11 @@ Ensure that your devices: - Are onboarded to Microsoft Intune and Microsoft Endpoint Configuration Manager. If you are using Configuration Manager, update your console to the latest version. - Have at least one security recommendation that can be viewed in the device page -- Are tagged or marked as co-managed +- Are tagged or marked as co-managed ## APIs -Run Threat & Vulnerability Management-related API calls such as get your organization's threat exposure score or device secure score, software and device vulnerability inventory, software version distribution, device vulnerability information, security recommendation information. Learn more from this [Microsoft Tech Community blog post](https://techcommunity.microsoft.com/t5/microsoft-defender-atp/threat-amp-vulnerability-management-apis-are-now-generally/ba-p/1304615). +Run threat and vulnerability management-related API calls such as get your organization's threat exposure score or device secure score, software and device vulnerability inventory, software version distribution, device vulnerability information, security recommendation information. Learn more from this [Microsoft Tech Community blog post](https://techcommunity.microsoft.com/t5/microsoft-defender-atp/threat-amp-vulnerability-management-apis-are-now-generally/ba-p/1304615). See the following topics for related APIs: - [Supported Microsoft Defender ATP APIs](exposed-apis-list.md) @@ -108,7 +114,7 @@ See the following topics for related APIs: ## Related topics - [Supported operating systems and platforms](tvm-supported-os.md) -- [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md) +- [Threat and vulnerability management dashboard](tvm-dashboard-insights.md) - [Exposure score](tvm-exposure-score.md) - [Microsoft Secure Score for Devices](tvm-microsoft-secure-score-devices.md) - [Security recommendations](tvm-security-recommendation.md) @@ -118,5 +124,5 @@ See the following topics for related APIs: - [Event timeline](threat-and-vuln-mgt-event-timeline.md) - [Scenarios](threat-and-vuln-mgt-scenarios.md) - [APIs](next-gen-threat-and-vuln-mgt.md#apis) -- [Configure data access for Threat & Vulnerability Management roles](user-roles.md#create-roles-and-assign-the-role-to-an-azure-active-directory-group) +- [Configure data access for threat and vulnerability management roles](user-roles.md#create-roles-and-assign-the-role-to-an-azure-active-directory-group) - [BLOG: Microsoft's Threat & Vulnerability Management now helps thousands of customers to discover, prioritize, and remediate vulnerabilities in real time](https://www.microsoft.com/security/blog/2019/07/02/microsofts-threat-vulnerability-management-now-helps-thousands-of-customers-to-discover-prioritize-and-remediate-vulnerabilities-in-real-time/) From 3e72f565091f5a3dad18c385bd780daf4a6ac55c Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Mon, 6 Jul 2020 17:24:53 -0700 Subject: [PATCH 054/589] capitalization updates --- .../tvm-dashboard-insights.md | 28 ++++++++--------- .../tvm-exposure-score.md | 18 +++++------ .../tvm-microsoft-secure-score-devices.md | 14 ++++----- .../microsoft-defender-atp/tvm-remediation.md | 24 +++++++------- .../tvm-security-recommendation.md | 31 +++++++++---------- .../tvm-software-inventory.md | 20 ++++++------ .../tvm-supported-os.md | 16 +++++----- .../microsoft-defender-atp/tvm-weaknesses.md | 22 ++++++------- 8 files changed, 86 insertions(+), 87 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-dashboard-insights.md index eaa32244f3..02edd24998 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-dashboard-insights.md @@ -1,7 +1,7 @@ --- -title: Threat & Vulnerability Management dashboard insights -description: The Threat & Vulnerability Management dashboard can help SecOps and security admins address cybersecurity threats and build their organization's security resilience. -keywords: mdatp-tvm, mdatp-tvm dashboard, threat & vulnerability management, risk-based threat & vulnerability management, security configuration, Microsoft Secure Score for Devices, exposure score +title: Threat and vulnerability management dashboard insights +description: The threat and vulnerability management dashboard can help SecOps and security admins address cybersecurity threats and build their organization's security resilience. +keywords: mdatp-tvm, mdatp-tvm dashboard, threat & vulnerability management, threat and vulnerability management, risk-based threat & vulnerability management, security configuration, Microsoft Secure Score for Devices, exposure score search.appverid: met150 search.product: eADQiWindows 10XVcnh ms.prod: w10 @@ -16,7 +16,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual --- -# Threat & Vulnerability Management dashboard insights +# Threat and vulnerability management dashboard insights **Applies to:** @@ -24,13 +24,13 @@ ms.topic: conceptual >Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-portaloverview-abovefoldlink) -Threat & Vulnerability Management is a component of Microsoft Defender ATP, and provides both security administrators and security operations teams with unique value, including: +Threat and vulnerability management is a component of Microsoft Defender ATP, and provides both security administrators and security operations teams with unique value, including: - Real-time endpoint detection and response (EDR) insights correlated with endpoint vulnerabilities - Invaluable device vulnerability context during incident investigations - Built-in remediation processes through Microsoft Intune and Microsoft Endpoint Configuration Manager -You can use the Threat & Vulnerability Management capability in [Microsoft Defender Security Center](https://securitycenter.windows.com/) to: +You can use the threat and vulnerability management capability in [Microsoft Defender Security Center](https://securitycenter.windows.com/) to: - View exposure and Microsoft Secure Score for Devices side-by-side with top security recommendations, software vulnerability, remediation activities, and exposed devices - Correlate EDR insights with endpoint vulnerabilities and process them @@ -38,19 +38,19 @@ You can use the Threat & Vulnerability Management capability in [Microsoft Defen - Select exception options and track active exceptions > [!NOTE] -> Devices that are not active in the last 30 days are not factored in on the data that reflects your organization's Threat & Vulnerability Management exposure score and Microsoft Secure Score for Devices. +> Devices that are not active in the last 30 days are not factored in on the data that reflects your organization's threat and vulnerability management exposure score and Microsoft Secure Score for Devices. -Watch this video for a quick overview of what is in the Threat & Vulnerability Management dashboard. +Watch this video for a quick overview of what is in the threat and vulnerability management dashboard. >[!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4r1nv] -## Threat & Vulnerability Management in Microsoft Defender Security Center +## Threat and vulnerability management in Microsoft Defender Security Center ![Microsoft Defender Advanced Threat Protection portal](images/tvm-dashboard-devices.png) You can navigate through the portal using the menu options available in all sections. Refer to the following tables for a description of each section. -## Threat & Vulnerability Management navigation pane +## Threat and vulnerability management navigation pane Area | Description :---|:--- @@ -60,11 +60,11 @@ Area | Description [**Software inventory**](tvm-software-inventory.md) | See the list of software, versions, weaknesses, whether there's an exploit found on the software, whether the software or software version has reached end-of-support, prevalence in the organization, how many were installed, how many exposed devices there are, and the numerical value of the impact. You can select each item in the list and opt to open the software page which shows the associated vulnerabilities, misconfigurations, affected device, version distribution details, and missing KBs or security updates. [**Weaknesses**](tvm-weaknesses.md) | See the list of common vulnerabilities and exposures, the severity, the common vulnerability scoring system (CVSS) V3 score, related software, age, when it was published, related threat alerts, and how many exposed devices there are. You can select each item in the list to see a flyout panel with the vulnerability description and other details. -## Threat & Vulnerability Management dashboard +## Threat and vulnerability management dashboard Area | Description :---|:--- -**Selected device groups (#/#)** | Filter the Threat & Vulnerability Management data you want to see in the dashboard and cards by device groups. What you select in the filter applies throughout the Threat & Vulnerability management pages. +**Selected device groups (#/#)** | Filter the threat and vulnerability management data you want to see in the dashboard and cards by device groups. What you select in the filter applies throughout the threat and vulnerability management pages. [**Exposure score**](tvm-exposure-score.md) | See the current state of your organization's device exposure to threats and vulnerabilities. Several factors affect your organization's exposure score: weaknesses discovered in your devices, likelihood of your devices to be breached, value of the devices to your organization, and relevant alerts discovered with your devices. The goal is to lower the exposure score of your organization to be more secure. To reduce the score, you need to remediate the related security configuration issues listed in the security recommendations. [**Microsoft Secure Score for Devices**](tvm-microsoft-secure-score-devices.md) | See the security posture of the operating system, applications, network, accounts and security controls of your organization. The goal is to remediate the related security configuration issues to increase your score for devices. Selecting the bars will take you to the **Security recommendation** page. **Device exposure distribution** | See how many devices are exposed based on their exposure level. Select a section in the doughnut chart to go to the **Devices list** page and view the affected device names, exposure level, risk level, and other details such as domain, operating system platform, its health state, when it was last seen, and its tags. @@ -77,7 +77,7 @@ See [Microsoft Defender ATP icons](portal-overview.md#microsoft-defender-atp-ico ## Related topics -- [Threat & Vulnerability Management overview](next-gen-threat-and-vuln-mgt.md) +- [Threat and vulnerability management overview](next-gen-threat-and-vuln-mgt.md) - [Supported operating systems and platforms](tvm-supported-os.md) - [Exposure score](tvm-exposure-score.md) - [Microsoft Secure Score for Devices](tvm-microsoft-secure-score-devices.md) @@ -88,4 +88,4 @@ See [Microsoft Defender ATP icons](portal-overview.md#microsoft-defender-atp-ico - [Event timeline](threat-and-vuln-mgt-event-timeline.md) - [Scenarios](threat-and-vuln-mgt-scenarios.md) - [APIs](next-gen-threat-and-vuln-mgt.md#apis) -- [Configure data access for Threat & Vulnerability Management roles](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/user-roles#create-roles-and-assign-the-role-to-an-azure-active-directory-group) +- [Configure data access for threat and vulnerability management roles](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/user-roles#create-roles-and-assign-the-role-to-an-azure-active-directory-group) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-exposure-score.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-exposure-score.md index 5391b7ca6b..b1b2897be8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-exposure-score.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-exposure-score.md @@ -1,6 +1,6 @@ --- -title: Exposure score -description: The Microsoft Defender ATP exposure score reflects how vulnerable your organization is to cybersecurity threats. +title: Threat and vulnerability management xxposure score +description: The threat and vulnerability management exposure score reflects how vulnerable your organization is to cybersecurity threats. keywords: exposure score, mdatp exposure score, mdatp tvm exposure score, organization exposure score, tvm organization exposure score, threat and vulnerability management, Microsoft Defender Advanced Threat Protection search.product: eADQiWindows 10XVcnh search.appverid: met150 @@ -16,7 +16,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual --- -# Exposure score +# Threat and vulnerability management exposure score **Applies to:** @@ -24,7 +24,7 @@ ms.topic: conceptual >Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-portaloverview-abovefoldlink) -Your Exposure score is visible in the [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md) of the Microsoft Defender Security Center. It reflects how vulnerable your organization is to cybersecurity threats. Low exposure score means your devices are less vulnerable from exploitation. +Your exposure score is visible in the [Threat and vulnerability management dashboard](tvm-dashboard-insights.md) of the Microsoft Defender Security Center. It reflects how vulnerable your organization is to cybersecurity threats. Low exposure score means your devices are less vulnerable from exploitation. - Quickly understand and identify high-level takeaways about the state of security in your organization. - Detect and respond to areas that require investigation or action to improve the current state. @@ -36,7 +36,7 @@ The card gives you a high-level view of your exposure score trend over time. Any ## How it works -Threat & Vulnerability Management introduces a new exposure score metric, which visually represents how exposed your devices are to imminent threats. +Threat and vulnerability management introduces a new exposure score metric, which visually represents how exposed your devices are to imminent threats. The exposure score is continuously calculated on each device in the organization and influenced by the following factors: @@ -55,13 +55,13 @@ You can remediate the issues based on prioritized [security recommendations](tvm ## Reduce your threat and vulnerability exposure -Lower your threat and vulnerability exposure by remediating [security recommendations](tvm-security-recommendation.md). Make the most impact to your exposure score by remediating the top security recommendations, which can be viewed in the [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md). +Lower your threat and vulnerability exposure by remediating [security recommendations](tvm-security-recommendation.md). Make the most impact to your exposure score by remediating the top security recommendations, which can be viewed in the [threat and vulnerability management dashboard](tvm-dashboard-insights.md). ## Related topics -- [Threat & Vulnerability Management overview](next-gen-threat-and-vuln-mgt.md) +- [Threat and vulnerability management overview](next-gen-threat-and-vuln-mgt.md) - [Supported operating systems and platforms](tvm-supported-os.md) -- [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md) +- [Threat and vulnerability management dashboard](tvm-dashboard-insights.md) - [Microsoft Secure Score for Devices](tvm-microsoft-secure-score-devices.md) - [Security recommendations](tvm-security-recommendation.md) - [Remediation and exception](tvm-remediation.md) @@ -70,4 +70,4 @@ Lower your threat and vulnerability exposure by remediating [security recommenda - [Event timeline](threat-and-vuln-mgt-event-timeline.md) - [Scenarios](threat-and-vuln-mgt-scenarios.md) - [APIs](next-gen-threat-and-vuln-mgt.md#apis) -- [Configure data access for Threat & Vulnerability Management roles](user-roles.md#create-roles-and-assign-the-role-to-an-azure-active-directory-group) +- [Configure data access for threat and vulnerability management roles](user-roles.md#create-roles-and-assign-the-role-to-an-azure-active-directory-group) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-microsoft-secure-score-devices.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-microsoft-secure-score-devices.md index 5cdd484045..83e5537bff 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-microsoft-secure-score-devices.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-microsoft-secure-score-devices.md @@ -1,7 +1,7 @@ --- title: Overview of Microsoft Secure Score for Devices in Microsoft Defender Security Center description: Your score for devices shows the collective security configuration state of your devices across application, operating system, network, accounts, and security controls -keywords: Microsoft Secure Score for Devices, mdatp Microsoft Secure Score for Devices, secure score, configuration score, security controls, improvement opportunities, security configuration score over time, security posture, baseline +keywords: Microsoft Secure Score for Devices, mdatp Microsoft Secure Score for Devices, secure score, configuration score, threat and vulnerability management, security controls, improvement opportunities, security configuration score over time, security posture, baseline search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: w10 @@ -23,9 +23,9 @@ ms.topic: conceptual - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) >[!NOTE] -> Configuration score is now part of Threat & Vulnerability Management as Microsoft Secure Score for Devices. +> Configuration score is now part of threat and vulnerability management as Microsoft Secure Score for Devices. -Your score for devices is visible in the [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md) of the Microsoft Defender Security Center. A higher Microsoft Secure Score for Devices means your endpoints are more resilient from cybersecurity threat attacks. It reflects the collective security configuration state of your devices across the following categories: +Your score for devices is visible in the [threat and vulnerability management dashboard](tvm-dashboard-insights.md) of the Microsoft Defender Security Center. A higher Microsoft Secure Score for Devices means your endpoints are more resilient from cybersecurity threat attacks. It reflects the collective security configuration state of your devices across the following categories: - Application - Operating system @@ -51,7 +51,7 @@ The data in the Microsoft Secure Score for Devices card is the product of meticu You can improve your security configuration when you remediate issues from the security recommendations list. As you do so, your Microsoft Secure Score for Devices improves, which means your organization becomes more resilient against cybersecurity threats and vulnerabilities. -1. From the Microsoft Secure Score for Devices card in the Threat & Vulnerability Management dashboard, select the one of the categories to view the list of recommendations related to that category. It will take you to the [**Security recommendations**](tvm-security-recommendation.md) page. If you want to see all security recommendations, once you get to the Security recommendations page, clear the search field. +1. From the Microsoft Secure Score for Devices card in the threat and vulnerability management dashboard, select the one of the categories to view the list of recommendations related to that category. It will take you to the [**Security recommendations**](tvm-security-recommendation.md) page. If you want to see all security recommendations, once you get to the Security recommendations page, clear the search field. 2. Select an item on the list. The flyout panel will open with details related to the recommendation. Select **Remediation options**. @@ -82,9 +82,9 @@ You can improve your security configuration when you remediate issues from the s ## Related topics -- [Threat & Vulnerability Management overview](next-gen-threat-and-vuln-mgt.md) +- [Threat and vulnerability management overview](next-gen-threat-and-vuln-mgt.md) - [Supported operating systems and platforms](tvm-supported-os.md) -- [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md) +- [Threat and vulnerability management dashboard](tvm-dashboard-insights.md) - [Exposure score](tvm-exposure-score.md) - [Security recommendations](tvm-security-recommendation.md) - [Remediation and exception](tvm-remediation.md) @@ -92,4 +92,4 @@ You can improve your security configuration when you remediate issues from the s - [Weaknesses](tvm-weaknesses.md) - [Scenarios](threat-and-vuln-mgt-scenarios.md) - [APIs](next-gen-threat-and-vuln-mgt.md#apis) -- [Configure data access for Threat & Vulnerability Management roles](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/user-roles#create-roles-and-assign-the-role-to-an-azure-active-directory-group) +- [Configure data access for threat and vulnerability management roles](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/user-roles#create-roles-and-assign-the-role-to-an-azure-active-directory-group) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-remediation.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-remediation.md index 2c3f7a6ef5..324c695ff6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-remediation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-remediation.md @@ -1,7 +1,7 @@ --- -title: Remediation and exception -description: Remediate security weaknesses and fill exceptions by integrating Microsoft Intune and Microsoft Endpoint Configuration Manager. -keywords: microsoft defender atp tvm remediation, mdatp tvm, threat & vulnerability management, threat & vulnerability management remediation, tvm remediation intune, tvm remediation sccm +title: Threat and vulnerability management remediation and exceptions +description: Remediate security weaknesses discovered through security recommendations, and create exceptions if needed, in threat and vulnerability management. +keywords: microsoft defender atp tvm remediation, mdatp tvm, threat and vulnerability management, threat & vulnerability management, threat & vulnerability management remediation, tvm remediation intune, tvm remediation sccm search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: w10 @@ -16,7 +16,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual --- -# Remediation activities and exceptions +# Remediation activities and exceptions - threat and vulnerability management **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) @@ -34,22 +34,22 @@ Lower your organization's exposure from vulnerabilities and increase your securi You can access the Remediation page a few different ways: -- Threat & Vulnerability Management navigation menu in the [Microsoft Defender Security Center](portal-overview.md) -- Top remediation activities card in the [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md) +- Threat and vulnerability management navigation menu in the [Microsoft Defender Security Center](portal-overview.md) +- Top remediation activities card in the [threat and vulnerability management dashboard](tvm-dashboard-insights.md) ### Navigation menu -Go to the Threat & Vulnerability Management navigation menu and select **Remediation** to open up the list of remediation activities and exceptions found in your organization. +Go to the threat and vulnerability management navigation menu and select **Remediation** to open up the list of remediation activities and exceptions found in your organization. ### Top remediation activities in the dashboard -View **Top remediation activities** in the [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md). Select any of the entries to go to the **Remediation** page. You can mark the remediation activity as completed after the IT admin team remediates the task. +View **Top remediation activities** in the [threat and vulnerability management dashboard](tvm-dashboard-insights.md). Select any of the entries to go to the **Remediation** page. You can mark the remediation activity as completed after the IT admin team remediates the task. ![Example of Top remediation activities card with a table that lists top activities that were generated from security recommendations.](images/tvm-remediation-activities-card.png) ## Remediation activities -When you [submit a remediation request](tvm-security-recommendation.md#request-remediation) from the [Security recommendations page](tvm-security-recommendation.md), it kicks-off a remediation activity. A security task is created which will be tracked in the Threat & Vulnerability Management **Remediation** page, and a remediation ticket is created in Microsoft Intune. +When you [submit a remediation request](tvm-security-recommendation.md#request-remediation) from the [Security recommendations page](tvm-security-recommendation.md), it kicks-off a remediation activity. A security task is created which will be tracked in the threat and vulnerability management **Remediation** page, and a remediation ticket is created in Microsoft Intune. Once you are in the Remediation page, select the remediation activity that you want to view. You can follow the remediation steps, track progress, view the related recommendation, export to CSV, or mark as complete. ![Example of the Remediation page, with a selected remediation activity, and that activity's flyout listing the description, IT service and device management tools, and device remediation progress.](images/remediation_flyouteolsw.png) @@ -95,9 +95,9 @@ Select **Show exceptions** at the bottom of the **Top security recommendations** ## Related topics -- [Threat & Vulnerability Management overview](next-gen-threat-and-vuln-mgt.md) +- [Threat and vulnerability management overview](next-gen-threat-and-vuln-mgt.md) - [Supported operating systems and platforms](tvm-supported-os.md) -- [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md) +- [Threat and vulnerability management dashboard](tvm-dashboard-insights.md) - [Exposure score](tvm-exposure-score.md) - [Microsoft Secure Score for Devices](tvm-microsoft-secure-score-devices.md) - [Security recommendations](tvm-security-recommendation.md) @@ -106,4 +106,4 @@ Select **Show exceptions** at the bottom of the **Top security recommendations** - [Event timeline](threat-and-vuln-mgt-event-timeline.md) - [Scenarios](threat-and-vuln-mgt-scenarios.md) - [APIs](next-gen-threat-and-vuln-mgt.md#apis) -- [Configure data access for Threat & Vulnerability Management roles](user-roles.md#create-roles-and-assign-the-role-to-an-azure-active-directory-group) +- [Configure data access for threat and vulnerability management roles](user-roles.md#create-roles-and-assign-the-role-to-an-azure-active-directory-group) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md index ad8c99b503..3d72a507d3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md @@ -1,5 +1,5 @@ --- -title: Security recommendations +title: Threat and vulnerability management security recommendations description: Get actionable security recommendations prioritized by threat, likelihood to be breached, and value. keywords: threat and vulnerability management, mdatp tvm security recommendation, cybersecurity recommendation, actionable security recommendation search.product: eADQiWindows 10XVcnh @@ -16,7 +16,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual --- -# Security recommendations +# Security recommendations - threat and vulnerability management **Applies to:** @@ -44,8 +44,8 @@ Each device in the organization is scored based on three important factors to he Access the Security recommendations page a few different ways: -- Threat & Vulnerability Management navigation menu in the [Microsoft Defender Security Center](portal-overview.md) -- Top security recommendations in the [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md) +- Threat and vulnerability management navigation menu in the [Microsoft Defender Security Center](portal-overview.md) +- Top security recommendations in the [threat and vulnerability management dashboard](tvm-dashboard-insights.md) View related security recommendations in the following places: @@ -54,11 +54,11 @@ View related security recommendations in the following places: ### Navigation menu -Go to the Threat & Vulnerability Management navigation menu and select **Security recommendations** to open the list of security recommendations for the threats and vulnerabilities found in your organization. +Go to the threat and vulnerability management navigation menu and select **Security recommendations** to open the list of security recommendations for the threats and vulnerabilities found in your organization. -### Top security recommendations in the Threat & Vulnerability Management dashboard +### Top security recommendations in the threat and vulnerability management dashboard -In a given day as a Security Administrator, you can take a look at the [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md) to see your [exposure score](tvm-exposure-score.md) side-by-side with your [Microsoft Secure Score for Devices](tvm-microsoft-secure-score-devices.md). The goal is to **lower** your organization's exposure from vulnerabilities, and **increase** your organization's device security to be more resilient against cybersecurity threat attacks. The top security recommendations list can help you achieve that goal. +In a given day as a Security Administrator, you can take a look at the [threat and vulnerability management dashboard](tvm-dashboard-insights.md) to see your [exposure score](tvm-exposure-score.md) side-by-side with your [Microsoft Secure Score for Devices](tvm-microsoft-secure-score-devices.md). The goal is to **lower** your organization's exposure from vulnerabilities, and **increase** your organization's device security to be more resilient against cybersecurity threat attacks. The top security recommendations list can help you achieve that goal. ![Example of Top security recommendations card, with four security recommendations.](images/top-security-recommendations350.png) @@ -106,7 +106,7 @@ If there is a large jump in the number of exposed machines, or a sharp increase ## Request remediation -The Threat & Vulnerability Management capability in Microsoft Defender ATP bridges the gap between Security and IT administrators through the remediation request workflow. Security admins like you can request for the IT Administrator to remediate a vulnerability from the **Security recommendation** pages to Intune. +The threat and vulnerability management capability in Microsoft Defender ATP bridges the gap between Security and IT administrators through the remediation request workflow. Security admins like you can request for the IT Administrator to remediate a vulnerability from the **Security recommendation** pages to Intune. ### Enable Microsoft Intune connection @@ -118,7 +118,7 @@ See [Use Intune to remediate vulnerabilities identified by Microsoft Defender AT 1. Select a security recommendation you would like to request remediation for, and then select **Remediation options**. -2. Fill out the form, including what you are requesting remediation for, priority, due date, and optional notes. Select **Submit request**. Submitting a remediation request creates a remediation activity item within Threat & Vulnerability Management, which can be used for monitoring the remediation progress for this recommendation. This will not trigger a remediation or apply any changes to devices. +2. Fill out the form, including what you are requesting remediation for, priority, due date, and optional notes. Select **Submit request**. Submitting a remediation request creates a remediation activity item within threat and vulnerability management, which can be used for monitoring the remediation progress for this recommendation. This will not trigger a remediation or apply any changes to devices. 3. Notify your IT Administrator about the new request and have them log into Intune to approve or reject the request and start a package deployment. @@ -152,7 +152,7 @@ When an exception is created for a recommendation, the recommendation is no long 3. Select **Submit**. A confirmation message at the top of the page indicates that the exception has been created. -4. Navigate to the [**Remediation**](tvm-remediation.md) page under the **Threat & Vulnerability Management** menu and select the **Exceptions** tab to view all your exceptions (current and past). +4. Navigate to the [**Remediation**](tvm-remediation.md) page under the **Threat and vulnerability management** menu and select the **Exceptions** tab to view all your exceptions (current and past). ## Report inaccuracy @@ -166,7 +166,7 @@ You can report a false positive when you see any vague, inaccurate, incomplete, 3. From the flyout pane, select the inaccuracy category from the drop-down menu, fill in your email address, and details regarding the inaccuracy. -4. Select **Submit**. Your feedback is immediately sent to the Threat & Vulnerability Management experts. +4. Select **Submit**. Your feedback is immediately sent to the threat and vulnerability management experts. ## Find and remediate software or software versions which have reached end-of-support (EOS) @@ -176,7 +176,7 @@ It is crucial for Security and IT Administrators to work together and ensure tha To find software or software versions which have reached end-of-support: -1. From the Threat & Vulnerability Management menu, navigate to **Security recommendations**. +1. From the threat and vulnerability management menu, navigate to **Security recommendations**. 2. Go to the **Filters** panel and look for the tags section. Select one or more of the EOS tag options. Then **Apply**. ![Screenshot tags that say EOS software, EOS versions, and Upcoming EOS versions](images/tvm-eos-tag.png) @@ -203,12 +203,11 @@ To view a list of version that have reached end of support, or end or support so After you have identified which software and software versions are vulnerable due to its end-of-support status, remediate them to lower your organizations exposure to vulnerabilities and advanced persistent threats. - ## Related topics -- [Threat & Vulnerability Management overview](next-gen-threat-and-vuln-mgt.md) +- [Threat and vulnerability management overview](next-gen-threat-and-vuln-mgt.md) - [Supported operating systems and platforms](tvm-supported-os.md) -- [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md) +- [Threat and vulnerability management dashboard](tvm-dashboard-insights.md) - [Exposure score](tvm-exposure-score.md) - [Microsoft Secure Score for Devices](tvm-microsoft-secure-score-devices.md) - [Remediation and exception](tvm-remediation.md) @@ -217,4 +216,4 @@ After you have identified which software and software versions are vulnerable du - [Event timeline](threat-and-vuln-mgt-event-timeline.md) - [Scenarios](threat-and-vuln-mgt-scenarios.md) - [APIs](next-gen-threat-and-vuln-mgt.md#apis) -- [Configure data access for Threat & Vulnerability Management roles](user-roles.md#create-roles-and-assign-the-role-to-an-azure-active-directory-group) \ No newline at end of file +- [Configure data access for threat and vulnerability management roles](user-roles.md#create-roles-and-assign-the-role-to-an-azure-active-directory-group) \ No newline at end of file diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-software-inventory.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-software-inventory.md index 9e6591f91c..d0e00649f5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-software-inventory.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-software-inventory.md @@ -1,7 +1,7 @@ --- -title: Software inventory -description: Microsoft Defender ATP Threat & Vulnerability Management's software inventory page shows how many weaknesses and vulnerabilities have been detected in software. -keywords: microsoft defender atp, microsoft defender atp software inventory, mdatp threat & vulnerability management, mdatp threat & vulnerability management software inventory, mdatp tvm software inventory, tvm software inventory +title: Software inventory in threat and vulnerability management +description: Microsoft Defender ATP threat and vulnerability management's software inventory page shows how many weaknesses and vulnerabilities have been detected in software. +keywords: threat and vulnerability management, microsoft defender atp, microsoft defender atp software inventory, mdatp threat & vulnerability management, mdatp threat & vulnerability management software inventory, mdatp tvm software inventory, tvm software inventory search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: w10 @@ -16,14 +16,14 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual --- -# Software inventory +# Software inventory - threat and vulnerability management **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) >Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-portaloverview-abovefoldlink) -Microsoft Defender ATP Threat & Vulnerability management's discovery capability shows in the **Software inventory** page. The software inventory includes the name of the product or vendor, the latest version it is in, and the number of weaknesses and vulnerabilities detected with it. +The software inventory in threat and vulnerability management is a list of all the software in your organization, including details such as the name of the vendor, number of weaknesses, threats, and number of exposed devices. ## How it works @@ -33,7 +33,7 @@ Since it is real-time, in a matter of minutes, you will see vulnerability inform ## Navigate to the Software inventory page -You can access the Software inventory page by selecting **Software inventory** from the Threat & Vulnerability Management navigation menu in the [Microsoft Defender Security Center](portal-overview.md). +You can access the Software inventory page by selecting **Software inventory** from the threat and vulnerability management navigation menu in the [Microsoft Defender Security Center](portal-overview.md). View software on specific devices in the individual devices pages from the [devices list](machines-view-overview.md). @@ -78,13 +78,13 @@ You can report a false positive when you see any vague, inaccurate version, inco 1. Open the software flyout on the Software inventory page. 2. Select **Report inaccuracy**. 3. From the flyout pane, select the inaccuracy category from the drop-down menu, fill in your email address, and details regarding the inaccuracy. -4. Select **Submit**. Your feedback is immediately sent to the Threat & Vulnerability Management experts. +4. Select **Submit**. Your feedback is immediately sent to the threat and vulnerability management experts. ## Related topics -- [Threat & Vulnerability Management overview](next-gen-threat-and-vuln-mgt.md) +- [Threat and vulnerability management overview](next-gen-threat-and-vuln-mgt.md) - [Supported operating systems and platforms](tvm-supported-os.md) -- [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md) +- [Threat and vulnerability management dashboard](tvm-dashboard-insights.md) - [Exposure score](tvm-exposure-score.md) - [Microsoft Secure Score for Devices](tvm-microsoft-secure-score-devices.md) - [Security recommendations](tvm-security-recommendation.md) @@ -93,4 +93,4 @@ You can report a false positive when you see any vague, inaccurate version, inco - [Event timeline](threat-and-vuln-mgt-event-timeline.md) - [Scenarios](threat-and-vuln-mgt-scenarios.md) - [APIs](next-gen-threat-and-vuln-mgt.md#apis) -- [Configure data access for Threat & Vulnerability Management roles](user-roles.md#create-roles-and-assign-the-role-to-an-azure-active-directory-group) +- [Configure data access for threat and vulnerability management roles](user-roles.md#create-roles-and-assign-the-role-to-an-azure-active-directory-group) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-supported-os.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-supported-os.md index 68cb359a5a..6551d5f13b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-supported-os.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-supported-os.md @@ -1,7 +1,7 @@ --- -title: Threat & Vulnerability Management supported operating systems and platforms -description: Before you begin, ensure that you meet the operating system or platform requisites for Threat & Vulnerability Management so the activities in your all devices are properly accounted for. -keywords: threat & vulnerability management, operating system, platform requirements, prerequisites, mdatp-tvm supported os, mdatp-tvm, risk-based threat & vulnerability management, security configuration, Microsoft Secure Score for Devices, exposure score +title: Supported operating systems and platforms for threat and vulnerability management +description: Before you begin, ensure that you meet the operating system or platform requisites for threat and vulnerability management so the activities in your all devices are properly accounted for. +keywords: threat & vulnerability management, threat and vulnerability management, operating system, platform requirements, prerequisites, mdatp-tvm supported os, mdatp-tvm, risk-based threat & vulnerability management, security configuration, Microsoft Secure Score for Devices, exposure score search.appverid: met150 search.product: eADQiWindows 10XVcnh ms.prod: w10 @@ -16,7 +16,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: article --- -# Threat & Vulnerability Management supported operating systems and platforms +# Supported operating systems and platforms for threat and vulnerability management **Applies to:** @@ -24,7 +24,7 @@ ms.topic: article >Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-portaloverview-abovefoldlink) -Before you begin, ensure that you meet the following operating system or platform requisites for Threat & Vulnerability Management so the activities in your devices are properly accounted for. +Before you begin, ensure that you meet the following operating system or platform requisites for threat and vulnerability management so the activities in your devices are properly accounted for. Operating system | Security assessment support :---|:--- @@ -43,8 +43,8 @@ Some of the above prerequisites might be different from the [Minimum requirement ## Related topics -- [Threat & Vulnerability Management overview](next-gen-threat-and-vuln-mgt.md) -- [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md) +- [Threat and vulnerability management overview](next-gen-threat-and-vuln-mgt.md) +- [Threat and vulnerability management dashboard](tvm-dashboard-insights.md) - [Exposure score](tvm-exposure-score.md) - [Microsoft Secure Score for Devices](tvm-microsoft-secure-score-devices.md) - [Security recommendations](tvm-security-recommendation.md) @@ -54,4 +54,4 @@ Some of the above prerequisites might be different from the [Minimum requirement - [Event timeline](threat-and-vuln-mgt-event-timeline.md) - [Scenarios](threat-and-vuln-mgt-scenarios.md) - [APIs](next-gen-threat-and-vuln-mgt.md#apis) -- [Configure data access for Threat & Vulnerability Management roles](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/user-roles#create-roles-and-assign-the-role-to-an-azure-active-directory-group) +- [Configure data access for threat and vulnerability management roles](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/user-roles#create-roles-and-assign-the-role-to-an-azure-active-directory-group) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-weaknesses.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-weaknesses.md index 32379a298f..dc76e06b79 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-weaknesses.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-weaknesses.md @@ -1,7 +1,7 @@ --- -title: Weaknesses +title: Weaknesses found by threat and vulnerability management description: Microsoft Defender Security Center offers a Weaknesses page, which lists vulnerabilities found in the infected software running in your organization. -keywords: mdatp threat & vulnerability management, mdatp tvm weaknesses page, finding weaknesses through tvm, tvm vulnerability list, vulnerability details in tvm +keywords: mdatp threat & vulnerability management, threat and vulnerability management, mdatp tvm weaknesses page, finding weaknesses through tvm, tvm vulnerability list, vulnerability details in tvm search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: w10 @@ -16,7 +16,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual --- -# Weaknesses +# Weaknesses found by threat and vulnerability management **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) @@ -25,7 +25,7 @@ ms.topic: conceptual [!include[Prerelease information](../../includes/prerelease.md)] -Threat & Vulnerability Management leverages the same signals in Microsoft Defender ATP's endpoint protection to scan and detect vulnerabilities. +Threat and vulnerability management leverages the same signals in Microsoft Defender ATP's endpoint protection to scan and detect vulnerabilities. The **Weaknesses** page lists down the vulnerabilities found in the infected software running in your organization by listing the Common Vulnerabilities and Exposures (CVE) ID, the severity, Common Vulnerability Scoring System (CVSS) rating, prevalence in your organization, corresponding breach, and threat insights. @@ -40,12 +40,12 @@ The **Weaknesses** page lists down the vulnerabilities found in the infected sof Access the Weaknesses page a few different ways: -- Selecting **Weaknesses** from the Threat & Vulnerability Management navigation menu in the [Microsoft Defender Security Center](portal-overview.md) +- Selecting **Weaknesses** from the threat and vulnerability management navigation menu in the [Microsoft Defender Security Center](portal-overview.md) - Global search ### Navigation menu -Go to the Threat & Vulnerability Management navigation menu and select **Weaknesses** to open the list of CVEs. +Go to the threat and vulnerability management navigation menu and select **Weaknesses** to open the list of CVEs. ### Vulnerabilities in global search @@ -80,7 +80,7 @@ The threat insights icon is highlighted if there are associated exploits in the ### Top vulnerable software in the dashboard -1. Go to the [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md) and scroll down to the **Top vulnerable software** widget. You will see the number of vulnerabilities found in each software along with threat information and a high-level view of the device exposure trend over time. +1. Go to the [threat and vulnerability management dashboard](tvm-dashboard-insights.md) and scroll down to the **Top vulnerable software** widget. You will see the number of vulnerabilities found in each software along with threat information and a high-level view of the device exposure trend over time. ![Top vulnerable software card with four columns: software, weaknesses, threats, exposed devices.](images/tvm-top-vulnerable-software500.png) @@ -119,13 +119,13 @@ You can report a false positive when you see any vague, inaccurate, incomplete, 1. Open the CVE on the Weaknesses page. 2. Select **Report inaccuracy**. 3. From the flyout pane, select the inaccuracy category from the drop-down menu, fill in your email address, and details regarding the inaccuracy. -4. Select **Submit**. Your feedback is immediately sent to the Threat & Vulnerability Management experts. +4. Select **Submit**. Your feedback is immediately sent to the threat and vulnerability management experts. ## Related topics -- [Threat & Vulnerability Management overview](next-gen-threat-and-vuln-mgt.md) +- [Threat and vulnerability management overview](next-gen-threat-and-vuln-mgt.md) - [Supported operating systems and platforms](tvm-supported-os.md) -- [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md) +- [Threat and vulnerability management dashboard](tvm-dashboard-insights.md) - [Exposure score](tvm-exposure-score.md) - [Microsoft Secure Score for Devices](tvm-microsoft-secure-score-devices.md) - [Security recommendations](tvm-security-recommendation.md) @@ -134,4 +134,4 @@ You can report a false positive when you see any vague, inaccurate, incomplete, - [Event timeline](threat-and-vuln-mgt-event-timeline.md) - [Scenarios](threat-and-vuln-mgt-scenarios.md) - [APIs](next-gen-threat-and-vuln-mgt.md#apis) -- [Configure data access for Threat & Vulnerability Management roles](user-roles.md#create-roles-and-assign-the-role-to-an-azure-active-directory-group) \ No newline at end of file +- [Configure data access for threat and vulnerability management roles](user-roles.md#create-roles-and-assign-the-role-to-an-azure-active-directory-group) \ No newline at end of file From 7887f95d6cc3645ebb87fc635f272c9ac55f1f78 Mon Sep 17 00:00:00 2001 From: Hao Chen Date: Tue, 7 Jul 2020 10:40:35 +0800 Subject: [PATCH 055/589] Update internet-explorer.yml --- .../internet-explorer/internet-explorer.yml | 237 +++++++++++++----- 1 file changed, 172 insertions(+), 65 deletions(-) diff --git a/browsers/internet-explorer/internet-explorer.yml b/browsers/internet-explorer/internet-explorer.yml index 4c11b5c85e..1f86dd26ec 100644 --- a/browsers/internet-explorer/internet-explorer.yml +++ b/browsers/internet-explorer/internet-explorer.yml @@ -1,69 +1,176 @@ -### YamlMime:YamlDocument +### YamlMime:Landing -documentType: LandingData -title: Internet Explorer 11 +title: Internet Explorer 11 documentation +summary: Consistent, reliable web browsing on Windows 7, Windows 8.1, and Windows 10, with the security, performance, backward compatibility, and modern standards support that large organizations need. metadata: - document_id: - title: Internet Explorer 11 - description: Consistent, reliable web browsing on Windows 7, Windows 8.1, and Windows 10, with the security, performance, backward compatibility, and modern standards support that large organizations need. - keywords: Internet Explorer 11. IE11 - ms.localizationpriority: medium - author: lizap + title: Internet Explorer 11 documentation + description: Consistent, reliable web browsing on Windows 7, Windows 8.1, and Windows 10, with the security, performance, backward compatibility, and modern standards support that large organizations need. + ms.topic: landing-page + author: lizap ms.author: elizapo - manager: dougkim - ms.topic: article - ms.devlang: na + ms.date: 07/06/2020 -sections: -- items: - - type: markdown - text: " - Consistent, reliable web browsing on Windows 7, Windows 8.1, and Windows 10, with the security, performance, backward compatibility, and modern standards support that large organizations need. - " -- title: Explore -- items: - - type: markdown - text: " - Find tools, step-by-step guides, updates, and other resources to help you get started.
- -

**Get started**
Get information om tools, frequently asked questions, requirements, and guidelines.
IE11 features and tools
System requirements and language support
Frequently asked questions
Internet Explorer 11 deployment guide
Use Enterprise Mode to improve compatibility
Lifecycle FAQ - Internet Explorer
**Downloads and tools**
Find tools and resources to help you address compatibility and get up to date.
Download IE11 with Windows 10
Enterprise Mode Site List Manager (schema, v.2)
Web Application Compatibility Lab Kit
Cumulative security updates for Internet Explorer 11
**Find training**
Find online training and hands-on labs for common configuration and management tasks.
Getting started with Windows 10 for IT professionals
Windows 10: Top Features for IT Pros
Manage and modernize Internet Explorer with Enterprise Mode
Virtual Lab: Enterprise Mode
- " -- title: Plan -- items: - - type: markdown - text: " - Find information and tips to help you assess compatibility and prioritize processes as you plan for Internet Explorer 11.
- -

**Get started with compatibility**
Find out how to extend your company's investment in older web apps through higher compatibility with older rendering engines while moving forward to a more modern browser like Internet Explorer 11.
What is Enterprise Mode?
Tips and tricks to manage Internet Explorer compatibility
Download the Enterprise Site Discovery Toolkit
Collect data using Enterprise Site Discovery
Manage Windows upgrades with Upgrade Readiness
Demo: Plan and manage Windows 10 upgrades and feature updates with Upgrade Readiness
**Using Enterprise Mode**
Learn how to avoid the common compatibility problems associated with web apps written and tested on older versions of Internet Explorer by using Enterprise Mode.
Turn on Enterprise Mode and use a site list
Add sites to the Enterprise Mode site list
Edit the Enterprise Mode site list
Turn on local control and logging for Enterprise Mode
- " -- title: Deploy -- items: - - type: markdown - text: " - Find the resources you need to successfully deploy Internet Explorer 11 in your organization.
- -

**Customize Internet Explorer 11**
The Internet Explorer Administration Kit (IEAK) simplifies the creation, deployment, and management of customized Internet Explorer packages. You can use the IEAK to configure the out-of-box Internet Explorer experience or to manage user settings after deployment.
Download IEAK 11
IEAK 11 user's guide
Frequently asked questions about IEAK 11
Customization and distribution guidelines
**Install Internet Explorer 11**
Explore the different options for installation.
Through Automatic Updates (recommended)
As part of an operating system deployment
Over the network
With System Center 2012 R2 Configuration Manager
With Windows Server Update Services (WSUS)
With Microsoft Intune
With third-party tools
- " -- title: Manage -- items: - - type: markdown - text: " - Find everything you need to manage Internet Explorer 11 effectively in your organization. Get information on Group Policy, blocked out-of-date ActiveX controls, scripts, and more.
- -

**Enforce settings with Group Policy**
Learn how to use Group Policy to enforce settings on the computers in your organization.
Group Policy for beginners
New Group Policy settings for IE11
Administrative templates for IE11
**Standardize with Group Policy preferences**
Group Policy preferences simplify deployment and standardize configurations, but unlike Group Policy, they can later be changed by users.
Group Policy preferences for IE11
Configure Group Policy preferences

**Blocked out-of-date ActiveX controls**
Find out more about the out-of-date ActiveX control blocking security feature available in Internet Explorer.
Blocked out-of-date ActiveX controls
Out-of-date ActiveX control blocking
Update to block out-of-date ActiveX controls in Internet Explorer
**Scripts for IT professionals**
Find scripts to help you save time and automate common tasks.
Batch loop: Check is a process running, if yes, wait in loop
Script to join user to AD with automatic Local user Profile Migration
Find-IE Citrix receiver Version
See all scripts
- " -- title: Support -- items: - - type: markdown - text: " - Get help from product specialists and community experts, and find solutions to commonly encountered issues.
- -

**Troubleshoot common issues**
Find solutions to common issues and get tips from Microsoft product teams and community experts.
Change or reset Internet Explorer settings
Troubleshoot custom package and IEAK 11 problems
Troubleshoot problems with setup, installation, auto configuration, and more
Disable VBScript execution in Internet Explorer for Internet Zone and Restricted Sites Zone
**Find answers and community support**
Find FAQs or visit the forums to ask a question or find answers.
Lifecycle FAQ - Internet Explorer
Frequently asked questions about IEAK 11
Microsoft Edge FAQ
Internet Explorer 8, 9, 10, 11 forum
Internet Explorer development forums
Windows 8.1 forums
Windows 10: General (includes Microsoft Edge)
**Contact Microsoft for additional help**
Explore the support options that are available from Microsoft.
Contact a Microsoft support professional
Support options for Microsoft Partners
Microsoft Services Premier Support
Microsoft Small Business Support Center
General support
- " -- title: Stay informed -- items: - - type: markdown - text: " - -

**Sign up for the Windows IT Pro Insider**
Get the latest tools, tips, and expert guidance on deployment, management, security, and more.
Learn more
**Microsoft Edge Dev blog**
Keep up with the latest browser trends, security tips, and news for IT professionals.
Read the blog
**Microsoft Edge Dev on Twitter**
Get the latest news and updates from the Microsoft Web Platform team.
Visit Twitter
- " +# linkListType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | sample | tutorial | video | whats-new + +landingContent: +# Cards and links should be based on top customer tasks or top subjects +# Start card title with a verb + # Card + - title: Explore + linkLists: + - linkListType: get-started + links: + - text: IE11 features and tools + url: /internet-explorer/ie11-deploy-guide/updated-features-and-tools-with-ie11 + - text: System requirements and language support + url: /internet-explorer/ie11-deploy-guide/system-requirements-and-language-support-for-ie11 + - text: Frequently asked questions + url: /internet-explorer/ie11-faq/faq-for-it-pros-ie11 + - text: Internet Explorer 11 deployment guide + url: /internet-explorer/ie11-deploy-guide/ + - text: Use Enterprise Mode to improve compatibility + url: /microsoft-edge/deploy/emie-to-improve-compatibility + - text: Lifecycle FAQ - Internet Explorer + url: https://support.microsoft.com/help/17454/lifecycle-faq-internet-explorer + - linkListType: download + links: + - text: Download IE11 with Windows 10 + url: https://www.microsoft.com/evalcenter/evaluate-windows-10-enterprise + - text: Enterprise Mode Site List Manager (schema, v.2) + url: https://www.microsoft.com/download/details.aspx?id=49974 + - text: Web Application Compatibility Lab Kit + url: /internet-explorer/web-app-compat-lab-kit + - text: Cumulative security updates for Internet Explorer 11 + url: http://www.catalog.update.microsoft.com/Search.aspx?q=cumulative%20security%20update%20for%20internet%20explorer%2011 + - linkListType: learn + links: + - text: Getting started with Windows 10 for IT professionals + url: https://mva.microsoft.com/en-US/training-courses/getting-started-with-windows-10-for-it-professionals-10629?l=fCowqpy8_5905094681 + - text: 'Windows 10: Top Features for IT Pros' + url: https://mva.microsoft.com/en-US/training-courses/windows-10-top-features-for-it-pros-16319?l=xBnT2ihhC_7306218965 + - text: Manage and modernize Internet Explorer with Enterprise Mode + url: http://channel9.msdn.com/events/teched/newzealand/2014/pcit307 + - text: 'Virtual Lab: Enterprise Mode' + url: https://www.microsoft.com/handsonlabs/SelfPacedLabs/?storyGuid=e4155067-2c7e-4b46-8496-eca38bedca02 + + # Card + - title: Plan + linkLists: + - linkListType: get-started + links: + - text: What is Enterprise Mode? + url: /internet-explorer/ie11-deploy-guide/what-is-enterprise-mode + - text: Tips and tricks to manage Internet Explorer compatibility + url: /internet-explorer/ie11-deploy-guide/tips-and-tricks-to-manage-ie-compatibility + - text: Download the Enterprise Site Discovery Toolkit + url: https://www.microsoft.com/download/details.aspx?id=44570 + - text: Collect data using Enterprise Site Discovery + url: /internet-explorer/ie11-deploy-guide/collect-data-using-enterprise-site-discovery + - text: Manage Windows upgrades with Upgrade Readiness + url: /windows/deployment/upgrade/manage-windows-upgrades-with-upgrade-readiness + - text: 'Demo: Plan and manage Windows 10 upgrades and feature updates with' + url: https://techcommunity.microsoft.com/t5/Microsoft-Ignite-Content-2017/Windows-Analytics-Plan-and-manage-Windows-10-upgrades-and/td-p/98639 + - linkListType: how-to-guide + links: + - text: Turn on Enterprise Mode and use a site list + url: /internet-explorer/ie11-deploy-guide/turn-on-enterprise-mode-and-use-a-site-list + - text: Add sites to the Enterprise Mode site list + url: /internet-explorer/ie11-deploy-guide/add-multiple-sites-to-enterprise-mode-site-list-using-the-version-2-schema-and-enterprise-mode-tool + - text: Edit the Enterprise Mode site list + url: /internet-explorer/ie11-deploy-guide/edit-the-enterprise-mode-site-list-using-the-enterprise-mode-site-list-manager + - text: Turn on local control and logging for Enterprise Mode + url: /internet-explorer/ie11-deploy-guide/turn-on-local-control-and-logging-for-enterprise-mode + + # Card + - title: Deploy + linkLists: + - linkListType: get-started + links: + - text: IEAK 11 user's guide + url: /internet-explorer/ie11-ieak/ + - text: Download IEAK 11 + url: /internet-explorer/ie11-ieak/ieak-information-and-downloads + - text: Frequently asked questions about IEAK 11 + url: /internet-explorer/ie11-faq/faq-ieak11 + - text: Customization and distribution guidelines + url: /internet-explorer/ie11-ieak/licensing-version-and-features-ieak11#customization-guidelines + - linkListType: deploy + links: + - text: Install Internet Explorer 11 through automatic updates (recommended) + url: /internet-explorer/ie11-deploy-guide/ie11-delivery-through-automatic-updates + - text: Install Internet Explorer 11 as part of an operating system deployment + url: /internet-explorer/ie11-deploy-guide/install-ie11-using-operating-system-deployment-systems + - text: Install Internet Explorer 11 over the network + url: /internet-explorer/ie11-deploy-guide/install-ie11-using-the-network + - text: Install Internet Explorer 11 with System Center 2012 R2 Configuration Manager + url: /internet-explorer/ie11-deploy-guide/install-ie11-using-system-center-configuration-manager + - text: Install Internet Explorer 11 with Windows Server Update Services (WSUS) + url: /internet-explorer/ie11-deploy-guide/install-ie11-using-windows-server-update-services-wsus + - text: Install Internet Explorer 11 with Microsoft Intune + url: /internet-explorer/ie11-deploy-guide/install-ie11-using-microsoft-intune + - text: Install Internet Explorer 11 with third-party tools + url: /internet-explorer/ie11-deploy-guide/install-ie11-using-third-party-tools + + # Card + - title: Manage + linkLists: + - linkListType: tutorial + links: + - text: Group Policy for beginners + url: /previous-versions/windows/it-pro/windows-7/hh147307(v=ws.10) + - text: New Group Policy settings for IE11 + url: /internet-explorer/ie11-deploy-guide/new-group-policy-settings-for-ie11 + - text: Administrative templates for IE11 + url: https://www.microsoft.com/download/details.aspx?id=40905 + - text: Group Policy preferences for IE11 + url: /internet-explorer/ie11-deploy-guide/group-policy-preferences-and-ie11 + - text: Configure Group Policy preferences + url: https://support.microsoft.com/help/2898604/how-to-configure-group-policy-preference-settings-for-internet-explorer-11-in-windows-8.1-or-windows-server-2012-r2 + - text: Blocked out-of-date ActiveX controls + url: /internet-explorer/ie11-deploy-guide/blocked-out-of-date-activex-controls + - text: Out-of-date ActiveX control blocking + url: /internet-explorer/ie11-deploy-guide/out-of-date-activex-control-blocking + - text: Update to block out-of-date ActiveX controls in Internet Explorer + url: /help/2991000/update-to-block-out-of-date-activex-controls-in-internet-explorer + - text: Script to join user to AD with automatic Local user Profile Migration + url: https://gallery.technet.microsoft.com/scriptcenter/script-to-join-active-7b16d9d3 + - text: Scripts for IT professionals + url: https://gallery.technet.microsoft.com/scriptcenter/site/search?query=Microsoft%20Edge%20or%20Internet + + # Card + - title: Support + linkLists: + - linkListType: get-started + links: + - text: Change or reset Internet Explorer settings + url: https://support.microsoft.com/help/17441/windows-internet-explorer-change-reset-settings + - text: Troubleshoot problems with setup, installation, auto configuration, and more + url: /internet-explorer/ie11-deploy-guide/troubleshoot-ie11 + - text: Disable VBScript execution in Internet Explorer for Internet Zone and Restricted Sites Zone + url: https://support.microsoft.com/help/4012494/option-to-disable-vbscript-execution-in-internet-explorer-for-internet + - text: Frequently asked questions about IEAK 11 + url: /internet-explorer/ie11-faq/faq-ieak11 + - text: Internet Explorer 8, 9, 10, 11 forum + url: https://social.technet.microsoft.com/forums/ie/home?forum=ieitprocurrentver + - text: Contact a Microsoft support professional + url: https://support.microsoft.com/contactus + - text: Support options for Microsoft Partners + url: https://mspartner.microsoft.com/en/us/Pages/Support/get-support.aspx + - text: Microsoft Services Premier Support + url: https://www.microsoft.com/en-us/microsoftservices/support.aspx + - text: Microsoft Small Business Support Center + url: http://smallbusiness.support.microsoft.com/product/internet-explorer + - text: General support + url: https://support.microsoft.com/products/internet-explorer + + # Card + - title: Stay informed + linkLists: + - linkListType: get-started + links: + - text: Sign up for the Windows IT Pro Insider + url: https://aka.ms/windows-it-pro-insider + - text: Microsoft Edge Dev blog + url: https://blogs.windows.com/msedgedev + - text: Microsoft Edge Dev on Twitter + url: https://twitter.com/MSEdgeDev From 51c8189077e6be432b19d70229aff61b100bc36a Mon Sep 17 00:00:00 2001 From: Hao Chen Date: Tue, 7 Jul 2020 11:03:11 +0800 Subject: [PATCH 056/589] Update internet-explorer.yml --- browsers/internet-explorer/internet-explorer.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/browsers/internet-explorer/internet-explorer.yml b/browsers/internet-explorer/internet-explorer.yml index 1f86dd26ec..407a4dd1f8 100644 --- a/browsers/internet-explorer/internet-explorer.yml +++ b/browsers/internet-explorer/internet-explorer.yml @@ -131,7 +131,7 @@ landingContent: - text: Out-of-date ActiveX control blocking url: /internet-explorer/ie11-deploy-guide/out-of-date-activex-control-blocking - text: Update to block out-of-date ActiveX controls in Internet Explorer - url: /help/2991000/update-to-block-out-of-date-activex-controls-in-internet-explorer + url: https://support.microsoft.com/help/2991000/update-to-block-out-of-date-activex-controls-in-internet-explorer - text: Script to join user to AD with automatic Local user Profile Migration url: https://gallery.technet.microsoft.com/scriptcenter/script-to-join-active-7b16d9d3 - text: Scripts for IT professionals From 6ce23052b2d4e691196c87292501eda9e5640bda Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 7 Jul 2020 07:29:32 -0700 Subject: [PATCH 057/589] Update windows-10-mobile-and-mdm.md rebrand: Basic Mobility and Security for Microsoft 365 --- windows/client-management/windows-10-mobile-and-mdm.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/client-management/windows-10-mobile-and-mdm.md b/windows/client-management/windows-10-mobile-and-mdm.md index 7017e40876..da21428185 100644 --- a/windows/client-management/windows-10-mobile-and-mdm.md +++ b/windows/client-management/windows-10-mobile-and-mdm.md @@ -12,7 +12,7 @@ ms.sitesec: library ms.pagetype: mobile, devices, security ms.localizationpriority: medium author: dansimp -ms.date: 01/26/2019 +ms.date: ms.topic: article --- @@ -187,10 +187,10 @@ Azure AD is a cloud-based directory service that provides identity and access ma **Mobile Device Management** Microsoft [Intune](https://www.microsoft.com/server-cloud/products/microsoft-intune/overview.aspx), part of the Enterprise Mobility + Security, is a cloud-based MDM system that manages devices off premises. Like Office 365, Intune uses Azure AD for identity management so employees use the same credentials to enroll devices in Intune that they use to sign into Office 365. Intune supports devices that run other operating systems, such as iOS and Android, to provide a complete MDM solution. -Multiple MDM systems support Windows 10 and most support personal and corporate device deployment scenarios. MDM providers that support Windows 10 Mobile currently include: AirWatch, Citrix, MobileIron, SOTI, Blackberry and others. Most industry-leading MDM vendors already support integration with Azure AD. You can find the MDM vendors that support Azure AD in [Azure Marketplace](https://azure.microsoft.com/marketplace/). If your organization doesn’t use Azure AD, the user must use an MSA during OOBE before enrolling the device in your MDM using a corporate account. +Multiple MDM systems support Windows 10 and most support personal and corporate device deployment scenarios. Most industry-leading MDM vendors already support integration with Azure AD. You can find the MDM vendors that support Azure AD in [Azure Marketplace](https://azure.microsoft.com/marketplace/). If your organization doesn’t use Azure AD, the user must use an MSA during OOBE before enrolling the device in your MDM using a corporate account. ->**Note:** Although not covered in this guide, you can use Exchange ActiveSync (EAS) to manage mobile devices instead of using a full-featured MDM system. EAS is available in Microsoft Exchange Server 2010 or later and Office 365. -In addition, Microsoft recently added MDM capabilities powered by Intune to Office 365. MDM for Office 365 supports mobile devices only, such as those running Windows 10 Mobile, iOS, and Android. MDM for Office 365 offers a subset of the management capabilities found in Intune, including the ability to remotely wipe a device, block a device from accessing Exchange Server email, and configure device policies (e.g., passcode requirements). For more information about MDM for Office 365 capabilities, see [Overview of Mobile Device Management for Office 365](https://technet.microsoft.com/library/ms.o365.cc.devicepolicy.aspx). +>**Note:** Although not covered in this guide, you can use Exchange ActiveSync (EAS) to manage mobile devices instead of using a full-featured MDM system. EAS is available in Microsoft Exchange Server 2010 or later and Microsoft 365. +In addition, Microsoft recently added MDM capabilities powered by Intune to Microsoft 365, called Basic Mobility and Security for Microsoft 365. Basic Mobility and Security for Microsoft 365 supports mobile devices only, such as those running Windows 10 Mobile, iOS, and Android. Basic Mobility and Security for Microsoft 365 offers a subset of the management capabilities found in Intune, including the ability to remotely wipe a device, block a device from accessing Exchange Server email, and configure device policies (e.g., passcode requirements). For more information, see [Overview of Basic Mobility and Security for Microsoft 365](https://technet.microsoft.com/library/ms.o365.cc.devicepolicy.aspx). **Cloud services** On mobile devices that run Windows 10 Mobile, users can easily connect to cloud services that provide user notifications and collect diagnostic and usage data. Windows 10 Mobile enables organizations to manage how devices consume these cloud services. From 98a3f2a8d8c69ea904f08d36dd2d6e50112b87b1 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 7 Jul 2020 14:21:28 -0700 Subject: [PATCH 058/589] Update windows-10-mobile-and-mdm.md --- windows/client-management/windows-10-mobile-and-mdm.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/windows-10-mobile-and-mdm.md b/windows/client-management/windows-10-mobile-and-mdm.md index da21428185..b454b505e8 100644 --- a/windows/client-management/windows-10-mobile-and-mdm.md +++ b/windows/client-management/windows-10-mobile-and-mdm.md @@ -186,7 +186,7 @@ For both personal and corporate deployment scenarios, an MDM system is the essen Azure AD is a cloud-based directory service that provides identity and access management. You can integrate it with existing on-premises directories to create a hybrid identity solution. Organizations that use Microsoft Office 365 or Intune are already using Azure AD, which has three editions: Free Basic, and Premium (see [Azure Active Directory editions](https://azure.microsoft.com/documentation/articles/active-directory-editions/)). All editions support Azure AD device registration, but the Premium edition is required to enable MDM auto-enrollment and conditional access based on device state. **Mobile Device Management** -Microsoft [Intune](https://www.microsoft.com/server-cloud/products/microsoft-intune/overview.aspx), part of the Enterprise Mobility + Security, is a cloud-based MDM system that manages devices off premises. Like Office 365, Intune uses Azure AD for identity management so employees use the same credentials to enroll devices in Intune that they use to sign into Office 365. Intune supports devices that run other operating systems, such as iOS and Android, to provide a complete MDM solution. +Microsoft [Intune](https://www.microsoft.com/server-cloud/products/microsoft-intune/overview.aspx), part of the Enterprise Mobility + Security, is a cloud-based MDM system that manages devices off premises. Intune uses Azure AD for identity management so employees use the same credentials to enroll devices in Intune that they use to sign into Microsoft 365. Intune supports devices that run other operating systems, such as iOS and Android, to provide a complete MDM solution. Multiple MDM systems support Windows 10 and most support personal and corporate device deployment scenarios. Most industry-leading MDM vendors already support integration with Azure AD. You can find the MDM vendors that support Azure AD in [Azure Marketplace](https://azure.microsoft.com/marketplace/). If your organization doesn’t use Azure AD, the user must use an MSA during OOBE before enrolling the device in your MDM using a corporate account. >**Note:** Although not covered in this guide, you can use Exchange ActiveSync (EAS) to manage mobile devices instead of using a full-featured MDM system. EAS is available in Microsoft Exchange Server 2010 or later and Microsoft 365. From 71f8b23865f08733714b6fd7aff5cd924f7ccd65 Mon Sep 17 00:00:00 2001 From: Obi Eze Ajoku <62227226+linque1@users.noreply.github.com> Date: Wed, 8 Jul 2020 12:10:17 -0700 Subject: [PATCH 059/589] Simple Download Mode - DO Simple Download Mode edit from 100 to 99 --- ...ndows-operating-system-components-to-microsoft-services.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index 9128a35dd0..8b92505fa7 100644 --- a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -1813,7 +1813,7 @@ By default, PCs running Windows 10 Enterprise and Windows 10 Education will only Use the UI, Group Policy, or Registry Keys to set up Delivery Optimization. -In Windows 10 version 1607 and above you can stop network traffic related to Windows Update Delivery Optimization by setting **Download Mode** to **Bypass** (100), as described below. +In Windows 10 version 1607 and above you can stop network traffic related to Windows Update Delivery Optimization by setting **Download Mode** to **Bypass** (99), as described below. ### 28.1 Settings > Update & security @@ -1839,7 +1839,7 @@ You can find the Delivery Optimization Group Policy objects under **Computer Con -or- -- Create a new REG_DWORD registry setting named **DODownloadMode** in **HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\DeliveryOptimization** to a value of **100 (one hundred)**. +- Create a new REG_DWORD registry setting named **DODownloadMode** in **HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\DeliveryOptimization** to a value of **99 (Ninety-nine)**. For more info about Delivery Optimization in general, see [Windows Update Delivery Optimization: FAQ](https://go.microsoft.com/fwlink/p/?LinkId=730684). From 6f5f0435bfe1904f9b7033ada266fe23e681a665 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 8 Jul 2020 14:49:33 -0700 Subject: [PATCH 060/589] grammar --- .../windows-autopilot-requirements.md | 146 ------------------ 1 file changed, 146 deletions(-) delete mode 100644 windows/deployment/windows-autopilot/windows-autopilot-requirements.md diff --git a/windows/deployment/windows-autopilot/windows-autopilot-requirements.md b/windows/deployment/windows-autopilot/windows-autopilot-requirements.md deleted file mode 100644 index c8f3eba453..0000000000 --- a/windows/deployment/windows-autopilot/windows-autopilot-requirements.md +++ /dev/null @@ -1,146 +0,0 @@ ---- -title: Windows Autopilot requirements -ms.reviewer: -manager: laurawi -description: See the requirements you need to run Windows Autopilot in Windows 10, Azure Active Directory, and MDM services such as Microsoft Intune. -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, Autopilot, ztd, zero-touch, partner, msfb, intune -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: deploy -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article -ms.custom: -- CI 116757 -- CSSTroubleshooting ---- - - -# Windows Autopilot requirements - -**Applies to: Windows 10** - -Windows Autopilot depends on specific capabilities available in Windows 10, Azure Active Directory, and MDM services such as Microsoft Intune. In order to use Windows Autopilot and leverage these capabilities, some requirements must be met. - -> [!NOTE] -> For a list of OEMs that currently support Windows Autopilot, see the Participant device manufacturers section at [Windows Autopilot](https://aka.ms/windowsAutopilot). - -## Software requirements - -- A [supported version](https://docs.microsoft.com/windows/release-information/) of Windows 10 Semi-Annual Channel is required. Windows 10 Enterprise 2019 long-term servicing channel (LTSC) is also supported. -- The following editions are supported: - - Windows 10 Pro - - Windows 10 Pro Education - - Windows 10 Pro for Workstations - - Windows 10 Enterprise - - Windows 10 Education - - Windows 10 Enterprise 2019 LTSC - ->[!NOTE] ->Procedures for deploying Windows Autopilot might refer to specific products and versions. The inclusion of these products in this content doesn't imply an extension of support for a version that is beyond its support lifecycle. Windows Autopilot does not support products that are beyond their support lifecycle. For more information, see [Microsoft Lifecycle Policy](https://go.microsoft.com/fwlink/p/?LinkId=208270). - -## Networking requirements - -Windows Autopilot depends on a variety of internet-based services. Access to these services must be provided for Autopilot to function properly. In the simplest case, enabling proper functionality can be achieved by ensuring the following: - -- Ensure DNS name resolution for internet DNS names. -- Allow access to all hosts via port 80 (HTTP), 443 (HTTPS), and 123 (UDP/NTP). - -In environments that have more restrictive Internet access, or for those that require authentication before internet access can be obtained, additional configuration may be required to allow access to the required services. - -> [!NOTE] -> Smart card and certificate based authentication are not supported during OOBE. For more information, see [Smartcards and certificate-based authentication](https://docs.microsoft.com/azure/active-directory/devices/azureadjoin-plan#smartcards-and-certificate-based-authentication). - -For additional details about each of these services and their specific requirements, review the following details: - -
ServiceInformation -
Windows Autopilot Deployment ServiceAfter a network connection is in place, each Windows 10 device will contact the Windows Autopilot Deployment Service. With Windows 10 version 1903 and above, the following URLs are used: https://ztd.dds.microsoft.com, https://cs.dds.microsoft.com.
- -
Windows ActivationWindows Autopilot also requires Windows Activation services. See Windows activation or validation fails with error code 0x8004FE33 for details about the URLs that need to be accessible for the activation services.
- -
Azure Active DirectoryUser credentials are validated by Azure Active Directory, and the device can also be joined to Azure Active Directory. See Office 365 IP Address and URL Web service for more information. -
IntuneOnce authenticated, Azure Active Directory will trigger enrollment of the device into the Intune MDM service. See the following link for details about network communication requirements: Intune network configuration requirements and bandwidth. -
Windows UpdateDuring the OOBE process, as well as after the Windows 10 OS is fully configured, the Windows Update service is leveraged to retrieve needed updates. If there are problems connecting to Windows Update, see How to solve connection problems concerning Windows Update or Microsoft Update.
- -If Windows Update is inaccessible, the Autopilot process will still continue but critical updates will not be available. - -
Delivery OptimizationWhen downloading Windows Updates, Microsoft Store apps and app updates, Office Updates and Intune Win32 Apps, the Delivery Optimization service is contacted to enable peer-to-peer sharing of content so that only a few devices need to download it from the internet.
- -If the Delivery Optimization Service is inaccessible, the Autopilot process will still continue with Delivery Optimization downloads from the cloud (without peer-to-peer). - -
Network Time Protocol (NTP) SyncWhen a Windows device starts up, it will talk to a network time server to ensure that the time on the device is accurate. Ensure that UDP port 123 to time.windows.com is accessible. -
Domain Name Services (DNS)To resolve DNS names for all services, the device communicates with a DNS server, typically provided via DHCP.  This DNS server must be able to resolve internet names. -
Diagnostics dataStarting in Windows 10, 1903, diagnostic data collection will be enabled by default. To disable Windows Analytics and related diagnostics capabilities, see Manage enterprise diagnostic data level.
- -If diagnostic data cannot be sent, the Autopilot process will still continue, but services that depend on diagnostic data, such as Windows Analytics, will not work. -
Network Connection Status Indicator (NCSI)Windows must be able to tell that the device is able to access the internet. For more information, see Network Connection Status Indicator (NCSI). - -www.msftconnecttest.com must be resolvable via DNS and accessible via HTTP. -
Windows Notification Services (WNS)This service is used to enable Windows to receive notifications from apps and services. See Microsoft Store for more information.
- -If the WNS services are not available, the Autopilot process will still continue without notifications. -
Microsoft Store, Microsoft Store for BusinessApps in the Microsoft Store can be pushed to the device, triggered via Intune (MDM).  App updates and additional apps may also be needed when the user first logs in. For more information, see Prerequisites for Microsoft Store for Business and Education (also includes Azure AD and Windows Notification Services).
- -If the Microsoft Store is not accessible, the Autopilot process will still continue without Microsoft Store apps. - -
Office 365As part of the Intune device configuration, installation of Microsoft 365 Apps for enterprise may be required. For more information, see Office 365 URLs and IP address ranges (includes all Office services, DNS names, IP addresses; includes Azure AD and other services that may overlap with those listed above). -
Certificate revocation lists (CRLs)Some of these services will also need to check certificate revocation lists (CRLs) for certificates used in the services.  A full list of these is documented at Office 365 URLs and IP address ranges and Office 365 Certificate Chains. -
Hybrid AAD joinThe device can be hybrid AAD joined. The computer should be on corporate network for hybrid AAD join to work. See details at Windows Autopilot user-driven mode -
Autopilot Self-Deploying mode and Autopilot White GloveFirmware TPM devices, which are only provided by Intel, AMD, or Qualcomm, do not include all needed certificates at boot time and must be able to retrieve them from the manufacturer on first use. Devices with discrete TPM chips (including devices from any other manufacturer) come with these certificates preinstalled. See TPM recommendations for more details. Make sure that these URLs are accessible for each firmware TPM provider so that certificates can be successfully requested: - -
Intel- https://ekop.intel.com/ekcertservice -
Qualcomm- https://ekcert.spserv.microsoft.com/EKCertificate/GetEKCertificate/v1 -
AMD- https://ftpm.amd.com/pki/aia -
Infineon- https://pki.infineon.com -
- -## Licensing requirements - -Windows Autopilot depends on specific capabilities available in Windows 10 and Azure Active Directory. It also requires an MDM service such as Microsoft Intune. These capabilities can be obtained through various editions and subscription programs. - -To provide needed Azure Active Directory (automatic MDM enrollment and company branding features) and MDM functionality, one of the following is required: -- [Microsoft 365 Business Premium subscription](https://www.microsoft.com/microsoft-365/business). -- [Microsoft 365 F1 or F3 subscription](https://www.microsoft.com/microsoft-365/enterprise/firstline). -- [Microsoft 365 Academic A1, A3, or A5 subscription](https://www.microsoft.com/education/buy-license/microsoft365/default.aspx). -- [Microsoft 365 Enterprise E3 or E5 subscription](https://www.microsoft.com/microsoft-365/enterprise), which include all Windows 10, Office 365, and EM+S features (Azure AD and Intune). -- [Enterprise Mobility + Security E3 or E5 subscription](https://www.microsoft.com/cloud-platform/enterprise-mobility-security), which include all needed Azure AD and Intune features. -- [Intune for Education subscription](https://docs.microsoft.com/intune-education/what-is-intune-for-education), which include all needed Azure AD and Intune features. -- [Azure Active Directory Premium P1 or P2](https://azure.microsoft.com/services/active-directory/) and [Microsoft Intune subscriptions](https://www.microsoft.com/cloud-platform/microsoft-intune) (or an alternative MDM service). - -> [!NOTE] -> Even when using Microsoft 365 subscriptions, you still need to [assign Intune licenses to the users](https://docs.microsoft.com/intune/fundamentals/licenses-assign). - -Additionally, the following are also recommended (but not required): -- [Microsoft 365 Apps for enterprise](https://www.microsoft.com/p/office-365-proplus/CFQ7TTC0K8R0), which can be deployed easily via Intune (or other MDM services). -- [Windows Subscription Activation](https://docs.microsoft.com/windows/deployment/windows-10-enterprise-subscription-activation), to automatically step up devices from Windows 10 Pro to Windows 10 Enterprise. - -## Configuration requirements - -Before Windows Autopilot can be used, some configuration tasks are required to support the common Autopilot scenarios. - -- Configure Azure Active Directory automatic enrollment. For Microsoft Intune, see [Enable Windows 10 automatic enrollment](https://docs.microsoft.com/intune/windows-enroll#enable-windows-10-automatic-enrollment) for details. If using a different MDM service, contact the vendor for the specific URLs or configuration needed for those services. -- Configure Azure Active Directory custom branding. In order to display an organization-specific logon page during the Autopilot process, Azure Active Directory needs to be configured with the images and text that should be displayed. See [Quickstart: Add company branding to your sign-in page in Azure AD](https://docs.microsoft.com/azure/active-directory/fundamentals/customize-branding) for more details. Note that the "square logo" and "sign-in page text" are the key elements for Autopilot, as well as the Azure Active Directory tenant name (configured separately in the Azure AD tenant properties). -- Enable [Windows Subscription Activation](https://docs.microsoft.com/windows/deployment/windows-10-enterprise-subscription-activation) if desired, in order to automatically step up from Windows 10 Pro to Windows 10 Enterprise. - -Specific scenarios will then have additional requirements. Generally, there are two specific tasks: - -- Device registration. Devices need to be added to Windows Autopilot to support most Windows Autopilot scenarios. See [Adding devices to Windows Autopilot](add-devices.md) for more details. -- Profile configuration. Once devices have been added to Windows Autopilot, a profile of settings needs to be applied to each device. See [Configure Autopilot profiles](profiles.md) for details. Note that Microsoft Intune can automate this profile assignment; see [Create an Autopilot device group](https://docs.microsoft.com/intune/enrollment-Autopilot#create-an-Autopilot-device-group) and [Assign an Autopilot deployment profile to a device group](https://docs.microsoft.com/intune/enrollment-Autopilot#assign-an-Autopilot-deployment-profile-to-a-device-group) for more information. - -See [Windows Autopilot Scenarios](windows-Autopilot-scenarios.md) for additional details. - -For a walkthrough for some of these and related steps, see this video: - -
- - - -There are no additional hardware requirements to use Windows 10 Autopilot, beyond the [requirements to run Windows 10](https://www.microsoft.com/windows/windows-10-specifications). - -## Related topics - -[Configure Autopilot deployment](https://docs.microsoft.com/windows/deployment/windows-Autopilot/) From 7640527bf0573628e7bdf69f7a57cf938512e82c Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 8 Jul 2020 14:50:02 -0700 Subject: [PATCH 061/589] grammar --- .../windows-autopilot-requirements.md | 146 ++++++++++++++++++ 1 file changed, 146 insertions(+) create mode 100644 windows/deployment/windows-autopilot/windows-autopilot-requirements.md diff --git a/windows/deployment/windows-autopilot/windows-autopilot-requirements.md b/windows/deployment/windows-autopilot/windows-autopilot-requirements.md new file mode 100644 index 0000000000..a71d3bbd39 --- /dev/null +++ b/windows/deployment/windows-autopilot/windows-autopilot-requirements.md @@ -0,0 +1,146 @@ +--- +title: Windows Autopilot requirements +ms.reviewer: +manager: laurawi +description: See the requirements you need to run Windows Autopilot in Windows 10, Azure Active Directory, and MDM services such as Microsoft Intune. +keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, Autopilot, ztd, zero-touch, partner, msfb, intune +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.sitesec: library +ms.pagetype: deploy +audience: itpro +author: greg-lindsay +ms.author: greglin +ms.collection: M365-modern-desktop +ms.topic: article +ms.custom: +- CI 116757 +- CSSTroubleshooting +--- + + +# Windows Autopilot requirements + +**Applies to: Windows 10** + +Windows Autopilot depends on specific capabilities available in Windows 10, Azure Active Directory, and MDM services such as Microsoft Intune. In order to use Windows Autopilot and leverage these capabilities, some requirements must be met. + +> [!NOTE] +> For a list of OEMs that currently support Windows Autopilot, see the Participant device manufacturers section at [Windows Autopilot](https://aka.ms/windowsAutopilot). + +## Software requirements + +- A [supported version](https://docs.microsoft.com/windows/release-information/) of Windows 10 Semi-Annual Channel is required. Windows 10 Enterprise 2019 long-term servicing channel (LTSC) is also supported. +- The following editions are supported: + - Windows 10 Pro + - Windows 10 Pro Education + - Windows 10 Pro for Workstations + - Windows 10 Enterprise + - Windows 10 Education + - Windows 10 Enterprise 2019 LTSC + +>[!NOTE] +>Procedures for deploying Windows Autopilot might refer to specific products and versions. The inclusion of these products in this content doesn't imply an extension of support for a version that is beyond its support lifecycle. Windows Autopilot does not support products that are beyond their support lifecycle. For more information, see [Microsoft Lifecycle Policy](https://go.microsoft.com/fwlink/p/?LinkId=208270). + +## Networking requirements + +Windows Autopilot depends on a variety of internet-based services. Access to these services must be provided for Autopilot to function properly. In the simplest case, enabling proper functionality can be achieved by ensuring the following: + +- Ensure DNS name resolution for internet DNS names. +- Allow access to all hosts via port 80 (HTTP), 443 (HTTPS), and 123 (UDP/NTP). + +In environments that have more restrictive Internet access, or for those that require authentication before internet access can be obtained, additional configuration may be required to allow access to the required services. + +> [!NOTE] +> Smart card and certificate based authentication is not supported during OOBE. For more information, see [Smartcards and certificate-based authentication](https://docs.microsoft.com/azure/active-directory/devices/azureadjoin-plan#smartcards-and-certificate-based-authentication). + +For additional details about each of these services and their specific requirements, review the following details: + +
ServiceInformation +
Windows Autopilot Deployment ServiceAfter a network connection is in place, each Windows 10 device will contact the Windows Autopilot Deployment Service. With Windows 10 version 1903 and above, the following URLs are used: https://ztd.dds.microsoft.com, https://cs.dds.microsoft.com.
+ +
Windows ActivationWindows Autopilot also requires Windows Activation services. See Windows activation or validation fails with error code 0x8004FE33 for details about the URLs that need to be accessible for the activation services.
+ +
Azure Active DirectoryUser credentials are validated by Azure Active Directory, and the device can also be joined to Azure Active Directory. See Office 365 IP Address and URL Web service for more information. +
IntuneOnce authenticated, Azure Active Directory will trigger enrollment of the device into the Intune MDM service. See the following link for details about network communication requirements: Intune network configuration requirements and bandwidth. +
Windows UpdateDuring the OOBE process, as well as after the Windows 10 OS is fully configured, the Windows Update service is leveraged to retrieve needed updates. If there are problems connecting to Windows Update, see How to solve connection problems concerning Windows Update or Microsoft Update.
+ +If Windows Update is inaccessible, the Autopilot process will still continue but critical updates will not be available. + +
Delivery OptimizationWhen downloading Windows Updates, Microsoft Store apps and app updates, Office Updates and Intune Win32 Apps, the Delivery Optimization service is contacted to enable peer-to-peer sharing of content so that only a few devices need to download it from the internet.
+ +If the Delivery Optimization Service is inaccessible, the Autopilot process will still continue with Delivery Optimization downloads from the cloud (without peer-to-peer). + +
Network Time Protocol (NTP) SyncWhen a Windows device starts up, it will talk to a network time server to ensure that the time on the device is accurate. Ensure that UDP port 123 to time.windows.com is accessible. +
Domain Name Services (DNS)To resolve DNS names for all services, the device communicates with a DNS server, typically provided via DHCP.  This DNS server must be able to resolve internet names. +
Diagnostics dataStarting in Windows 10, 1903, diagnostic data collection will be enabled by default. To disable Windows Analytics and related diagnostics capabilities, see Manage enterprise diagnostic data level.
+ +If diagnostic data cannot be sent, the Autopilot process will still continue, but services that depend on diagnostic data, such as Windows Analytics, will not work. +
Network Connection Status Indicator (NCSI)Windows must be able to tell that the device is able to access the internet. For more information, see Network Connection Status Indicator (NCSI). + +www.msftconnecttest.com must be resolvable via DNS and accessible via HTTP. +
Windows Notification Services (WNS)This service is used to enable Windows to receive notifications from apps and services. See Microsoft Store for more information.
+ +If the WNS services are not available, the Autopilot process will still continue without notifications. +
Microsoft Store, Microsoft Store for BusinessApps in the Microsoft Store can be pushed to the device, triggered via Intune (MDM).  App updates and additional apps may also be needed when the user first logs in. For more information, see Prerequisites for Microsoft Store for Business and Education (also includes Azure AD and Windows Notification Services).
+ +If the Microsoft Store is not accessible, the Autopilot process will still continue without Microsoft Store apps. + +
Office 365As part of the Intune device configuration, installation of Microsoft 365 Apps for enterprise may be required. For more information, see Office 365 URLs and IP address ranges (includes all Office services, DNS names, IP addresses; includes Azure AD and other services that may overlap with those listed above). +
Certificate revocation lists (CRLs)Some of these services will also need to check certificate revocation lists (CRLs) for certificates used in the services.  A full list of these is documented at Office 365 URLs and IP address ranges and Office 365 Certificate Chains. +
Hybrid AAD joinThe device can be hybrid AAD joined. The computer should be on corporate network for hybrid AAD join to work. See details at Windows Autopilot user-driven mode +
Autopilot Self-Deploying mode and Autopilot White GloveFirmware TPM devices, which are only provided by Intel, AMD, or Qualcomm, do not include all needed certificates at boot time and must be able to retrieve them from the manufacturer on first use. Devices with discrete TPM chips (including devices from any other manufacturer) come with these certificates preinstalled. See TPM recommendations for more details. Make sure that these URLs are accessible for each firmware TPM provider so that certificates can be successfully requested: + +
Intel- https://ekop.intel.com/ekcertservice +
Qualcomm- https://ekcert.spserv.microsoft.com/EKCertificate/GetEKCertificate/v1 +
AMD- https://ftpm.amd.com/pki/aia +
Infineon- https://pki.infineon.com +
+ +## Licensing requirements + +Windows Autopilot depends on specific capabilities available in Windows 10 and Azure Active Directory. It also requires an MDM service such as Microsoft Intune. These capabilities can be obtained through various editions and subscription programs. + +To provide needed Azure Active Directory (automatic MDM enrollment and company branding features) and MDM functionality, one of the following is required: +- [Microsoft 365 Business Premium subscription](https://www.microsoft.com/microsoft-365/business). +- [Microsoft 365 F1 or F3 subscription](https://www.microsoft.com/microsoft-365/enterprise/firstline). +- [Microsoft 365 Academic A1, A3, or A5 subscription](https://www.microsoft.com/education/buy-license/microsoft365/default.aspx). +- [Microsoft 365 Enterprise E3 or E5 subscription](https://www.microsoft.com/microsoft-365/enterprise), which include all Windows 10, Office 365, and EM+S features (Azure AD and Intune). +- [Enterprise Mobility + Security E3 or E5 subscription](https://www.microsoft.com/cloud-platform/enterprise-mobility-security), which include all needed Azure AD and Intune features. +- [Intune for Education subscription](https://docs.microsoft.com/intune-education/what-is-intune-for-education), which include all needed Azure AD and Intune features. +- [Azure Active Directory Premium P1 or P2](https://azure.microsoft.com/services/active-directory/) and [Microsoft Intune subscriptions](https://www.microsoft.com/cloud-platform/microsoft-intune) (or an alternative MDM service). + +> [!NOTE] +> Even when using Microsoft 365 subscriptions, you still need to [assign Intune licenses to the users](https://docs.microsoft.com/intune/fundamentals/licenses-assign). + +Additionally, the following are also recommended (but not required): +- [Microsoft 365 Apps for enterprise](https://www.microsoft.com/p/office-365-proplus/CFQ7TTC0K8R0), which can be deployed easily via Intune (or other MDM services). +- [Windows Subscription Activation](https://docs.microsoft.com/windows/deployment/windows-10-enterprise-subscription-activation), to automatically step up devices from Windows 10 Pro to Windows 10 Enterprise. + +## Configuration requirements + +Before Windows Autopilot can be used, some configuration tasks are required to support the common Autopilot scenarios. + +- Configure Azure Active Directory automatic enrollment. For Microsoft Intune, see [Enable Windows 10 automatic enrollment](https://docs.microsoft.com/intune/windows-enroll#enable-windows-10-automatic-enrollment) for details. If using a different MDM service, contact the vendor for the specific URLs or configuration needed for those services. +- Configure Azure Active Directory custom branding. In order to display an organization-specific logon page during the Autopilot process, Azure Active Directory needs to be configured with the images and text that should be displayed. See [Quickstart: Add company branding to your sign-in page in Azure AD](https://docs.microsoft.com/azure/active-directory/fundamentals/customize-branding) for more details. Note that the "square logo" and "sign-in page text" are the key elements for Autopilot, as well as the Azure Active Directory tenant name (configured separately in the Azure AD tenant properties). +- Enable [Windows Subscription Activation](https://docs.microsoft.com/windows/deployment/windows-10-enterprise-subscription-activation) if desired, in order to automatically step up from Windows 10 Pro to Windows 10 Enterprise. + +Specific scenarios will then have additional requirements. Generally, there are two specific tasks: + +- Device registration. Devices need to be added to Windows Autopilot to support most Windows Autopilot scenarios. See [Adding devices to Windows Autopilot](add-devices.md) for more details. +- Profile configuration. Once devices have been added to Windows Autopilot, a profile of settings needs to be applied to each device. See [Configure Autopilot profiles](profiles.md) for details. Note that Microsoft Intune can automate this profile assignment; see [Create an Autopilot device group](https://docs.microsoft.com/intune/enrollment-Autopilot#create-an-Autopilot-device-group) and [Assign an Autopilot deployment profile to a device group](https://docs.microsoft.com/intune/enrollment-Autopilot#assign-an-Autopilot-deployment-profile-to-a-device-group) for more information. + +See [Windows Autopilot Scenarios](windows-Autopilot-scenarios.md) for additional details. + +For a walkthrough for some of these and related steps, see this video: + +
+ + + +There are no additional hardware requirements to use Windows 10 Autopilot, beyond the [requirements to run Windows 10](https://www.microsoft.com/windows/windows-10-specifications). + +## Related topics + +[Configure Autopilot deployment](https://docs.microsoft.com/windows/deployment/windows-Autopilot/) From 7f06b500e3ce19b81a388468df6144ad1665c536 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 8 Jul 2020 16:47:56 -0700 Subject: [PATCH 062/589] Added a note for local script --- .../microsoft-defender-atp/configure-endpoints-vdi.md | 2 +- .../microsoft-defender-atp/configure-server-endpoints.md | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi.md b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi.md index e8ace77542..0d005b607d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi.md @@ -33,7 +33,7 @@ ms.date: 04/16/2020 Microsoft Defender ATP supports non-persistent VDI session onboarding. >[!Note] ->To onboard non-persistent VDI sessions, VDI machines must be on Windows 10. +>To onboard non-persistent VDI sessions, VDI devices must be on Windows 10. > >While other Windows versions might work, only Windows 10 is supported. diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md b/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md index 6bc62691fd..30e5949a3b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md @@ -145,7 +145,8 @@ You can onboard Windows Server (SAC) version 1803, Windows Server 2019, or Windo - [VDI onboarding scripts for non-persistent devices](configure-endpoints-vdi.md) > [!NOTE] -> The Onboarding package for Windows Server 2019 through Microsoft Endpoint Configuration Manager currently ships a script. For more information on how to deploy scripts in Configuration Manager, see [Packages and programs in Configuration Manager](https://docs.microsoft.com/configmgr/apps/deploy-use/packages-and-programs). +> - The Onboarding package for Windows Server 2019 through Microsoft Endpoint Configuration Manager currently ships a script. For more information on how to deploy scripts in Configuration Manager, see [Packages and programs in Configuration Manager](https://docs.microsoft.com/configmgr/apps/deploy-use/packages-and-programs). +> - A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. Support for Windows Server, provide deeper insight into activities happening on the Windows server, coverage for kernel and memory attack detection, and enables response actions on Windows Server endpoint as well. From b773af96aea378e517d6fdeffe14b2401e244171 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 9 Jul 2020 08:46:15 -0700 Subject: [PATCH 063/589] more additions and cross-linking --- .../waas-delivery-optimization-reference.md | 35 ++++++++++++++++++- .../waas-delivery-optimization-setup.md | 10 +++--- .../update/waas-delivery-optimization.md | 14 ++++++++ 3 files changed, 54 insertions(+), 5 deletions(-) diff --git a/windows/deployment/update/waas-delivery-optimization-reference.md b/windows/deployment/update/waas-delivery-optimization-reference.md index b4bb57aef5..fc05fe55aa 100644 --- a/windows/deployment/update/waas-delivery-optimization-reference.md +++ b/windows/deployment/update/waas-delivery-optimization-reference.md @@ -23,7 +23,7 @@ ms.topic: article > **Looking for consumer information?** See [Windows Update: FAQ](https://support.microsoft.com/help/12373/windows-update-faq) -There are a great many details you can set in Delivery Optimization to customize it to do just what you need it to. This topic summarizes them for your reference. +There are a great many details you can set in Delivery Optimization to customize it to do just what you need it to. This topic summarizes them for your reference. If you just need an overview of Delivery Optimization, see [Delivery Optimization for Windows 10 updates](waas-delivery-optimization.md). If you need information about setting up Delivery Optimization, including tips for the best settings in different scenarios, see [Set up Delivery Optimization for Windows 10 updates](waas-delivery-optimization-setup.md). ## Delivery Optimization options @@ -64,6 +64,10 @@ In MDM, the same settings are under **.Vendor/MSFT/Policy/Config/DeliveryOptimiz | [Delay foreground download from http (in secs)](#delay-foreground-download-from-http-in-secs) | DODelayForegroundDownloadFromHttp | 1803 | | [Delay foreground download cache server fallback (in secs)](#delay-foreground-download-cache-server-fallback-in-secs) | DelayCacheServerFallbackForeground | 1903 | | [Delay background download cache server fallback (in secs)](#delay-background-download-cache-server-fallback-in-secs) | DelayCacheServerFallbackBackground | 1903 | +| [Cache Server Hostname](#cache-server-hostname) | DOCacheHost | 2004 | +| [Cache Server Hostname Source](#cache-server-hostname-source) | DOCacheHostSource | 2004 | +| [Maximum Foreground Download Bandwidth (in KB/s)](#maximum-background-download-bandwidth-in-kbs) | DOMaxForegroundDownloadBandwidth | 2004 | +| [Maximum Background Download Bandwidth (in KB/s)](#maximum-background-download-bandwidth-in-kbs) | DOMaxBackgroundDownloadBandwidth | 2004 | ### More detail on Delivery Optimization settings: @@ -232,4 +236,33 @@ The device can download from peers while on battery regardless of this policy. >[!IMPORTANT] > By default, devices **will not upload while on battery**. To enable uploads while on battery, you need to enable this policy and set the battery value under which uploads pause. +### Cache Server Hostname +Set this policy to to designate one or more Microsoft Connected Cache servers to be used by Delivery Optimization. You can set one or more FQDNs or IP Addresses that are comma separated, for example: myhost.somerandomhost.com,myhost2.somrandomhost.com,10.10.1.7. + + +### Cache Server Hostname Source + +This policy allows you to specify how your client(s) can discover Delivery Optimization in Network Cache servers dynamically. There are two options: +- 1 = DHCP Option 235. +- 2 = DHCP Option 235 Force. + +with either option, the client will query DHCP Option ID 235 and use the returned value as the Cache Server Hostname. Option 2 overrides the Cache Server Hostname policy, if set. + +Set this policy to designate one or more Delivery Optimization in Network Cache servers through a custom DHCP Option. You can add one or more value either fully qualified domain names (FQDN) or IP addresses. To add multiple values, separate each FQDN or IP address by commas. + +> [!NOTE] +> If you format the DHCP Option ID incorrectly, the client will fall back to the Cache Server Hostname policy value if that value has been set. + +### Maximum Foreground Download Bandwidth (in KB/s) + +Specifies the maximum foreground download bandwidth in kilobytes/second that the device can use across all concurrent download activities using Delivery Optimization. + +The default value of 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth for downloads. + + +### Maximum Background Download Bandwidth (in KB/s) + +Specifies the maximum background download bandwidth in kilobytes/second that the device can use across all concurrent download activities using Delivery Optimization. + +The default value 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth for downloads. diff --git a/windows/deployment/update/waas-delivery-optimization-setup.md b/windows/deployment/update/waas-delivery-optimization-setup.md index 584aa81202..a8e262526e 100644 --- a/windows/deployment/update/waas-delivery-optimization-setup.md +++ b/windows/deployment/update/waas-delivery-optimization-setup.md @@ -24,7 +24,7 @@ ms.topic: article ## Recommended Delivery Optimization settings -Delivery Optimization offers a great many settings to fine-tune its behavior (see [Delivery Optimization reference](waas-delivery-optimization-reference.md) for a comprehensive list), but for the most efficient performance, there are just a few key parameters that will have the greatest impact if particular situations exist in your deployment: +Delivery Optimization offers a great many settings to fine-tune its behavior (see [Delivery Optimization reference](waas-delivery-optimization-reference.md) for a comprehensive list), but for the most efficient performance, there are just a few key parameters that will have the greatest impact if particular situations exist in your deployment. If you just need an overview of Delivery Optimization, see [Delivery Optimization for Windows 10 updates](waas-delivery-optimization.md). - Does your topology include multiple breakouts to the internet (i.e., a "hybrid WAN") or are there only a few connections to the internet, so that all requests appear to come from a single external IP address (a "hub and spoke" topology)? - If you use boundary groups in your topology, how many devices are present in a given group? @@ -129,7 +129,6 @@ To do this with MDM, go to **.Vendor/MSFT/Policy/Config/DeliveryOptimization/** | ExpireOn | The target expiration date and time for the file. | | Pinned | A yes/no value indicating whether an item has been "pinned" in the cache (see `setDeliveryOptmizationStatus`). | -Starting in Windows 10, version 2004, `Get-DeliveryOptimizationStatus` has a new option `-PeerInfo` which returns a real-time list of the connected peers. `Get-DeliveryOptimizationPerfSnap` returns a list of key performance data: @@ -147,7 +146,7 @@ Using the `-Verbose` option returns additional information: - Bytes from CDN (the number of bytes received over HTTP) - Average number of peer connections per download  -Starting in Windows 10, version 2004, `Get-DeliveryOptimizationPerfSnap` has a new option `-PeerInfo` which returns a real-time list of the connected peers. +**Starting in Windows 10, version 2004**, `Get-DeliveryOptimizationPerfSnap` has a new option `-PeerInfo` which returns a real-time list of the connected peers. Starting in Windows 10, version 1903, `get-DeliveryOptimizationPerfSnap` has a new option `-CacheSummary` which provides a summary of the cache status. @@ -178,7 +177,10 @@ You can now "pin" files to keep them persistent in the cache. You can only do th **Starting in Windows 10, version 2004:** -`Get-DeliveryOptimizationLogAnalysis [ETL Logfile path] [-ListConnections]` +- `Enable-DeliveryOptimizationVerboseLogs` +- `Disable-DliveryOptimizationVerboseLogs` + +- `Get-DeliveryOptimizationLogAnalysis [ETL Logfile path] [-ListConnections]` With no options, this cmdlet returns these data: diff --git a/windows/deployment/update/waas-delivery-optimization.md b/windows/deployment/update/waas-delivery-optimization.md index b788f2aa7c..2a1e6e4fc5 100644 --- a/windows/deployment/update/waas-delivery-optimization.md +++ b/windows/deployment/update/waas-delivery-optimization.md @@ -39,6 +39,20 @@ Delivery Optimization is a cloud-managed solution. Access to the Delivery Optimi ![absolute bandwidth settings in delivery optimization interface](images/DO-absolute-bandwidth.png) - Activity Monitor now identifies the cache server used for as the source for Microsoft Connected Cache. For more information about using Microsoft Connected Cache with Configuration Manager, see [Microsoft Connected Cache](https://docs.microsoft.com/mem/configmgr/core/plan-design/hierarchy/fundamental-concepts-for-content-management#microsoft-connected-cache). +- New options for [`Get-DeliveryOptimizationPerfSnap`](waas-delivery-optimization-setup.md#analyze-usage). +- New cmdlets: + - `Enable-DeliveryOptimizationVerboseLogs` + - `Disable-DliveryOptimizationVerboseLogs` + - `Get-DeliveryOptimizationLogAnalysis [ETL Logfile path] [-ListConnections]` +- New policy settings (for details see ): + - [DOCacheHost](waas-delivery-optimization-reference.md#cache-server-hostname) + - [DOCacheHostSource](waas-delivery-optimization-reference.md#cache-server-hostname-source) + - [DOMaxForegroundDownloadBandwidth](waas-delivery-optimization-reference.md#maximum-foreground-download-bandwidth-in-kbs) + - [DOMaxBackgroundDownloadBandwidth](waas-delivery-optimization-reference.md#maximum-foreground-download-bandwidth-in-kbs) +- Support for new types of downloads: + - Office installations and updates + - Xbox game pass games + - MSIX apps (HTTP downloads only) ## Requirements From 54c70a2bf621499c13ee44d2e645d2d37835bb95 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 9 Jul 2020 11:02:44 -0700 Subject: [PATCH 064/589] adding main DO page back into TOC --- windows/deployment/TOC.yml | 2 ++ windows/deployment/update/waas-delivery-optimization.md | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/deployment/TOC.yml b/windows/deployment/TOC.yml index 7c17c5720e..bd4751ea90 100644 --- a/windows/deployment/TOC.yml +++ b/windows/deployment/TOC.yml @@ -43,6 +43,8 @@ href: update/plan-determine-app-readiness.md - name: Define your servicing strategy href: update/plan-define-strategy.md + - name: Delivery Optimization for Windows 10 updates + href: update/waas-delivery-optimization-reference.md - name: Best practices for feature updates on mission-critical devices href: update/feature-update-mission-critical.md - name: Windows 10 deployment considerations diff --git a/windows/deployment/update/waas-delivery-optimization.md b/windows/deployment/update/waas-delivery-optimization.md index 2a1e6e4fc5..084ff6f01a 100644 --- a/windows/deployment/update/waas-delivery-optimization.md +++ b/windows/deployment/update/waas-delivery-optimization.md @@ -1,5 +1,5 @@ --- -title: Configure Delivery Optimization for Windows 10 updates (Windows 10) +title: Delivery Optimization for Windows 10 updates ms.reviewer: manager: laurawi description: Delivery Optimization is a peer-to-peer distribution method in Windows 10 From 507a44cb69ef155660eb852e402d0ed4d5ab07fa Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 9 Jul 2020 11:44:17 -0700 Subject: [PATCH 065/589] one more crosslink --- windows/deployment/update/waas-delivery-optimization.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/deployment/update/waas-delivery-optimization.md b/windows/deployment/update/waas-delivery-optimization.md index 084ff6f01a..ba1b1c034a 100644 --- a/windows/deployment/update/waas-delivery-optimization.md +++ b/windows/deployment/update/waas-delivery-optimization.md @@ -28,6 +28,8 @@ Windows updates, upgrades, and applications can contain packages with very large Delivery Optimization is a cloud-managed solution. Access to the Delivery Optimization cloud services is a requirement. This means that in order to use the peer-to-peer functionality of Delivery Optimization, devices must have access to the internet. +For information about setting up Delivery Optimization, including tips for the best settings in different scenarios, see [Set up Delivery Optimization for Windows 10 updates](waas-delivery-optimization-setup.md). For a comprehensive list of all Delivery Optimization settings, see [Delivery Optimization reference](waas-delivery-optimization-reference.md). + >[!NOTE] >WSUS can also use [BranchCache](waas-branchcache.md) for content sharing and caching. If Delivery Optimization is enabled on devices that use BranchCache, Delivery Optimization will be used instead. From c6b80f8e4eae260fad8d9a1ad9d66b2233950203 Mon Sep 17 00:00:00 2001 From: Kelly Baker Date: Thu, 9 Jul 2020 14:48:10 -0700 Subject: [PATCH 066/589] Edit pass: windows-10-mobile-and-mdm.md First pass, not ready for review or merge. --- .../windows-10-mobile-and-mdm.md | 213 +++++++++--------- 1 file changed, 112 insertions(+), 101 deletions(-) diff --git a/windows/client-management/windows-10-mobile-and-mdm.md b/windows/client-management/windows-10-mobile-and-mdm.md index 7017e40876..3837eaff64 100644 --- a/windows/client-management/windows-10-mobile-and-mdm.md +++ b/windows/client-management/windows-10-mobile-and-mdm.md @@ -24,7 +24,7 @@ ms.topic: article This guide helps IT professionals plan for and deploy Windows 10 Mobile devices. Employees increasingly depend on smartphones to complete daily work tasks, but these devices introduce unique management and security challenges. Whether providing corporate devices or allowing people to use their personal devices, IT needs to deploy and manage mobile devices and apps quickly to meet business goals. However, they also need to ensure that the apps and data on those mobile devices are protected against cybercrime or loss. Windows 10 Mobile helps organizations directly address these challenges with robust, flexible, built-in mobile device and app management technologies. -Windows 10 supports end-to-end device lifecycle management to give companies control over their devices, data, and apps. Devices can easily be incorporated into standard lifecycle practices, from device enrollment, configuration, and application management to maintenance, monitoring, and retirement using a comprehensive mobile device management solution. +Windows 10 supports end-to-end device lifecycle management to give companies control over their devices, data, and apps. Devices can easily be incorporated into standard lifecycle practices, from device enrollment, configuration, and application management to maintenance, monitoring, and retirement, by using a comprehensive mobile device management solution. **In this article** - [Deploy](#deploy) @@ -36,8 +36,8 @@ Windows 10 supports end-to-end device lifecycle management to give companies con ## Deploy -Windows 10 Mobile has a built-in device management client to deploy, configure, maintain, and support smartphones. Common to all editions of the Windows 10 operating system, including desktop, mobile, and Internet of Things (IoT), this client provides a single interface through which Mobile Device Management (MDM) solutions can manage any device that runs Windows 10. Because the MDM client integrates with identity management, the effort required to manage devices throughout the lifecycle is greatly reduced. -Windows 10 includes comprehensive MDM capabilities that can be managed by Microsoft management solutions, such as Microsoft Intune or Microsoft Endpoint Configuration Manager, as well as many third-party MDM solutions. There is no need to install an additional, custom MDM app to enroll devices and bring them under MDM control. All MDM system vendors have equal access to Windows 10 Mobile device management application programming interfaces (APIs), giving IT organizations the freedom to select whichever system best fits their management requirements, whether Microsoft Intune or a third-party MDM product. For more information about Windows 10 Mobile device management APIs, see [Mobile device management](https://go.microsoft.com/fwlink/p/?LinkId=734050). +Windows 10 Mobile has a built-in device management client to deploy, configure, maintain, and support smartphones. Common to all editions of the Windows 10 operating system, including desktop, mobile, and Internet of Things (IoT), this client provides a single interface through which mobile device management (MDM) solutions can manage any device that runs Windows 10. Because the MDM client integrates with identity management, the effort required to manage devices throughout the lifecycle is greatly reduced. +Windows 10 includes comprehensive MDM capabilities that can be managed by Microsoft management solutions, such as Microsoft Intune or Microsoft Endpoint Configuration Manager, as well as many third-party MDM solutions. There is no need to install an additional, custom MDM app to enroll devices and bring them under MDM control. All MDM system vendors have equal access to Windows 10 Mobile device management application programming interfaces (APIs), giving IT organizations the freedom to select the system that best fits their management requirements, whether Microsoft Intune or a third-party MDM product. For more information about Windows 10 Mobile device management APIs, see [Mobile device management](https://go.microsoft.com/fwlink/p/?LinkId=734050). ### Deployment scenarios @@ -47,7 +47,7 @@ The built-in MDM client is common to all editions of the Windows 10 operating s Organizations typically have two scenarios to consider when it comes to device deployment: Bring Your Own (BYO) personal devices and Choose Your Own (CYO) company-owned devices. In both cases, the device must be enrolled in an MDM system, which would configure it with settings appropriate for the organization and the employee. Windows 10 Mobile device management capabilities support both personal devices used in the BYO scenario and corporate devices used in the CYO scenario. The operating system offers a flexible approach to registering devices with directory services and MDM systems. IT organizations can provision comprehensive device-configuration profiles based on their business needs to control and protect mobile business data. Apps can be provisioned easily to personal or corporate devices through the Microsoft Store for Business, or by using their MDM system, which can also work with the Microsoft Store for Business for public store apps. -Knowing who owns the device and what the employee will use it for are the major factors in determining your management strategy and which controls your organization should put in place. Whether personal devices, corporate devices, or a mixture of the two, deployment processes and configuration policies may differ. +Knowing who owns the device and what the employee uses it for are the major factors in determining your management strategy and which controls your organization should put in place. Whether personal devices, corporate devices, or a mixture of the two, deployment processes and configuration policies may differ. For **personal devices**, companies need to be able to manage corporate apps and data on the device without impeding the employee’s ability to personalize it to meet their individual needs. The employee owns the device and corporate policy allows them to use it for both business and personal purposes, with the ability to add personal apps at their discretion. The main concern with personal devices is how organizations can prevent corporate data from being compromised, while still keeping personal data private and under the sole control of the employee. This requires that the device be able to support separation of apps and data with strict control of business and personal data traffic. @@ -81,34 +81,35 @@ The way in which personal and corporate devices are enrolled into an MDM system Device Initialization -In the Out-of-the-Box Experience (OOBE), the first time the employee starts the device, they are requested to add a cloud identity to the device. +In the out-of-box experience (OOBE), the first time the employee starts the device, they are requested to add a cloud identity to the device. The primary identity on the device is a personal identity. Personal devices are initiated with a Microsoft Account (MSA), which uses a personal email address. The primary identity on the device is an organizational identity. Corporate devices are initialized with an organizational account (account@corporatedomain.ext). -Initialization of a device with a corporate account is unique to Windows 10. No other mobile platform currently offers this capability. The default option is to use an Azure Active Directory organizational identity. -Skipping the account setup in OOBE will result in the creation of a local account. The only option to add a cloud account later is to add an MSA, putting this device into a personal device deployment scenario. To start over, the device will have to be reset. +Initialization of a device with a corporate account is unique to Windows 10. No other mobile platform currently offers this capability. The default option is to use an Azure Active Directory (Azure AD) organizational identity. +Skipping the account setup in OOBE results in the creation of a local account. The only option to add a cloud account later is to add an MSA, putting this device into a personal device deployment scenario. To start over, the device must be reset. Device Enrollment Enrolling devices in an MDM system helps control and protect corporate data while keeping workers productive. -Device enrollment can be initiated by employees. They can add an Azure account as a secondary account to the Windows 10 Mobile device. Provided the MDM system is registered with your Azure AD, the device is automatically enrolled in the MDM system when the user adds an Azure AD account as a secondary account (MSA+AAD+MDM). If your organization does not have Azure AD, the employee’s device will automatically be enrolled into your organization’s MDM system (MSA+MDM). +Device enrollment can be initiated by employees. They can add an Azure account as a secondary account to the Windows 10 Mobile device. Provided the MDM system is registered with your Azure AD, the device is automatically enrolled in the MDM system when the user adds an Azure AD account as a secondary account (MSA+Azure AD+MDM). If your organization does not have Azure AD, the employee’s device is automatically enrolled into your organization’s MDM system (MSA+MDM). MDM enrollment can also be initiated with a provisioning package. This option enables IT to offer easy-to-use self-service enrollment of personal devices. Provisioning is currently only supported for MDM-only enrollment (MSA+MDM). -The user initiates MDM enrollment by joining the device to the Azure AD instance of their organization. The device is automatically enrolled in the MDM system when the device registers in Azure AD. This requires your MDM system to be registered with your Azure AD (AAD+MDM). +The user initiates MDM enrollment by joining the device to the Azure AD instance of their organization. The device is automatically enrolled in the MDM system when the device registers in Azure AD. This requires your MDM system to be registered with your Azure AD (Azure AD+MDM). -**Recommendation:** Microsoft recommends Azure AD registration and automatic MDM enrollment for corporate devices (AAD+MDM) and personal devices (MSA+AAD+MDM). This requires Azure AD Premium. +Microsoft recommends Azure AD registration and automatic MDM enrollment for corporate devices (Azure AD+MDM) and personal devices (MSA+Azure AD+MDM). This requires Azure AD Premium. ### Identity management *Applies to: Corporate and personal devices* -Employees can use only one account to initialize a device so it’s imperative that your organization controls which account is enabled first. The account chosen will determine who controls the device and influence your management capabilities. +Employees can use only one account to initialize a device so it’s imperative that your organization controls which account is enabled first. The account chosen determines who controls the device and influences your management capabilities. ->**Note:** Why must the user add an account to the device in OOBE? Windows 10 Mobile are single user devices and the user accounts give access to a number of default cloud services that enhance the productivity and entertainment value of the phone for the user. Such services are: Store for downloading apps, Groove for music and entertainment, Xbox for gaming, etc. Both an [MSA](https://www.microsoft.com/account/) and an [Azure AD account](https://www.microsoft.com/server-cloud/products/azure-active-directory/?WT.srch=1&WT.mc_id=SEM_%5B_uniqid%5D&utm_source=Bing&utm_medium=CPC&utm_term=azure%20ad&utm_campaign=Enterprise_Mobility_Suite) give access to these services. +> [!NOTE] +> Why must the user add an account to the device in OOBE? Windows 10 Mobile are single user devices and the user accounts give access to a number of default cloud services that enhance the productivity and entertainment value of the phone for the user. Such services are: Store for downloading apps, Groove for music and entertainment, Xbox for gaming, and so on. Both an [MSA](https://www.microsoft.com/account/) and an [Azure AD account](https://www.microsoft.com/server-cloud/products/azure-active-directory/?WT.srch=1&WT.mc_id=SEM_%5B_uniqid%5D&utm_source=Bing&utm_medium=CPC&utm_term=azure%20ad&utm_campaign=Enterprise_Mobility_Suite) provide access to these services. The following table describes the impact of identity choice on device management characteristics of the personal and corporate device scenarios. @@ -133,13 +134,13 @@ The following table describes the impact of identity choice on device management Ease of enrollment -Employees use their Microsoft Account to activate the device. Then, they use their Azure AD account (organizational identity) to register the device in Azure AD and enroll it with the company’s MDM solution (MSA+AAD+MDM). -Employees use their Azure AD account to register the device in Azure AD and automatically enroll it with the organization’s MDM solution (AAD+MDM – requires Azure AD Premium). +Employees use their Microsoft Account to activate the device. Then, they use their Azure AD account (organizational identity) to register the device in Azure AD and enroll it with the company’s MDM solution (MSA+Azure AD+MDM). +Employees use their Azure AD account to register the device in Azure AD and automatically enroll it with the organization’s MDM solution (Azure AD+MDM – requires Azure AD Premium). Credential management Employees sign in to the device with Microsoft Account credentials. -Users cannot sign in to devices with Azure AD credentials, even if they add the credentials after initial activation with a Microsoft account. +Users cannot sign in to devices with Azure AD credentials, even if they add the credentials after initial activation with a Microsoft Account. Employees sign in to the device with Azure AD credentials. IT can block the addition of a personal identity, such as an MSA or Google Account. IT controls all devices access policies, without limitations. @@ -153,7 +154,7 @@ IT can block the addition of a personal identity, such as an MSA or Google Accou User settings and data roaming across multiple Windows devices User and app settings roam across all devices activated with the same personal identity through OneDrive. -If the device is activated with an MSA, then adds an Azure AD account, user an app settings roam. If you add your MSA to an Azure AD- joined device, this will not be the case. Microsoft is investigating Enterprise roaming for a future release. +If the device is activated with an MSA, then adds an Azure AD account, user an app settings roam. If you add your MSA to an Azure AD-joined device, this is not the case. Microsoft is investigating Enterprise roaming for a future release. Level of control @@ -174,13 +175,14 @@ IT can block the addition of a personal identity, such as an MSA or Google Accou ->**Note:** In the context of [Windows-as-a-Service](https://technet.microsoft.com/itpro/windows/manage/introduction-to-windows-10-servicing), differentiation of MDM capabilities will change in the future. +> [!NOTE] +> In the context of [Windows-as-a-Service](https://technet.microsoft.com/itpro/windows/manage/introduction-to-windows-10-servicing), differentiation of MDM capabilities may change in the future. ### Infrastructure choices *Applies to: Corporate and personal devices* -For both personal and corporate deployment scenarios, an MDM system is the essential infrastructure required to deploy and manage Windows 10 Mobile devices. An Azure AD premium subscription is recommended as an identity provider and required to support certain capabilities. Windows 10 Mobile allows you to have a pure cloud-based infrastructure or a hybrid infrastructure that combines Azure AD identity management with an on-premises management system to manage devices. Microsoft now also supports a pure on-premises solution to manage Windows 10 Mobile devices with [Configuration Manager](https://technet.microsoft.com/library/mt627908.aspx). +For both personal and corporate deployment scenarios, an MDM system is the essential infrastructure required to deploy and manage Windows 10 Mobile devices. An Azure AD Premium subscription is recommended as an identity provider and required to support certain capabilities. Windows 10 Mobile allows you to have a pure cloud-based infrastructure or a hybrid infrastructure that combines Azure AD identity management with an on-premises management system to manage devices. Microsoft now also supports a pure on-premises solution to manage Windows 10 Mobile devices with [Configuration Manager](https://technet.microsoft.com/library/mt627908.aspx). **Azure Active Directory** Azure AD is a cloud-based directory service that provides identity and access management. You can integrate it with existing on-premises directories to create a hybrid identity solution. Organizations that use Microsoft Office 365 or Intune are already using Azure AD, which has three editions: Free Basic, and Premium (see [Azure Active Directory editions](https://azure.microsoft.com/documentation/articles/active-directory-editions/)). All editions support Azure AD device registration, but the Premium edition is required to enable MDM auto-enrollment and conditional access based on device state. @@ -189,7 +191,8 @@ Azure AD is a cloud-based directory service that provides identity and access ma Microsoft [Intune](https://www.microsoft.com/server-cloud/products/microsoft-intune/overview.aspx), part of the Enterprise Mobility + Security, is a cloud-based MDM system that manages devices off premises. Like Office 365, Intune uses Azure AD for identity management so employees use the same credentials to enroll devices in Intune that they use to sign into Office 365. Intune supports devices that run other operating systems, such as iOS and Android, to provide a complete MDM solution. Multiple MDM systems support Windows 10 and most support personal and corporate device deployment scenarios. MDM providers that support Windows 10 Mobile currently include: AirWatch, Citrix, MobileIron, SOTI, Blackberry and others. Most industry-leading MDM vendors already support integration with Azure AD. You can find the MDM vendors that support Azure AD in [Azure Marketplace](https://azure.microsoft.com/marketplace/). If your organization doesn’t use Azure AD, the user must use an MSA during OOBE before enrolling the device in your MDM using a corporate account. ->**Note:** Although not covered in this guide, you can use Exchange ActiveSync (EAS) to manage mobile devices instead of using a full-featured MDM system. EAS is available in Microsoft Exchange Server 2010 or later and Office 365. +> [!NOTE] +> Although not covered in this guide, you can use Exchange ActiveSync (EAS) to manage mobile devices instead of using a full-featured MDM system. EAS is available in Microsoft Exchange Server 2010 or later and Office 365. In addition, Microsoft recently added MDM capabilities powered by Intune to Office 365. MDM for Office 365 supports mobile devices only, such as those running Windows 10 Mobile, iOS, and Android. MDM for Office 365 offers a subset of the management capabilities found in Intune, including the ability to remotely wipe a device, block a device from accessing Exchange Server email, and configure device policies (e.g., passcode requirements). For more information about MDM for Office 365 capabilities, see [Overview of Mobile Device Management for Office 365](https://technet.microsoft.com/library/ms.o365.cc.devicepolicy.aspx). **Cloud services** @@ -210,19 +213,20 @@ The Microsoft Store for Business is the place where IT administrators can find, ## Configure -MDM administrators can define and implement policy settings on any personal or corporate device enrolled in an MDM system. What configuration settings you use will differ based on the deployment scenario, and corporate devices will offer IT the broadest range of control. +MDM administrators can define and implement policy settings on any personal or corporate device enrolled in an MDM system. The configuration settings you use depend on the deployment scenario, and corporate devices offer IT the broadest range of control. ->**Note:** This guide helps IT professionals understand management options available for the Windows 10 Mobile OS. Please consult your MDM system documentation to understand how these policies are enabled by your MDM vendor. +> [!NOTE] +> This guide helps IT professionals understand management options available for the Windows 10 Mobile OS. Please consult your MDM system documentation to understand how these policies are enabled by your MDM vendor. Not all MDM systems support every setting described in this guide. Some support custom policies through OMA-URI XML files. See [Microsoft Intune support for Custom Policies](https://docs.microsoft.com/intune/deploy-use/windows-10-policy-settings-in-microsoft-intune#custom-uri-settings-for-windows-10-devices). Naming conventions may also vary among MDM vendors. ### Account profile *Applies to: Corporate devices* -Enforcing what accounts employees can use on a corporate device is important for avoiding data leaks and protecting privacy. Limiting the device to just one account controlled by the organization will reduce the risk of a data breach. However, you can choose to allow employees to add a personal Microsoft Account or other consumer email accounts. +Enforcing what accounts employees can use on a corporate device is important for avoiding data leaks and protecting privacy. Limiting the device to just one account controlled by the organization reduces the risk of a data breach. However, you can choose to allow employees to add a personal Microsoft Account or other consumer email accounts. - **Allow Microsoft Account** Specifies whether users are allowed to add a Microsoft Account to the device and use this account to authenticate to cloud services, such as purchasing apps in Microsoft Store, Xbox, or Groove. -- **Allow Adding Non-Microsoft Accounts** Specifies whether users are allowed to add email accounts other than Microsoft accounts. +- **Allow Adding Non-Microsoft Accounts** Specifies whether users are allowed to add email accounts other than a Microsoft Account. ### Email accounts @@ -239,41 +243,42 @@ Email and associated calendar and contacts are the primary apps that users acces It’s common practice to protect a device that contains corporate information with a passcode when it is not in use. As a best practice, Microsoft recommends that you implement a device lock policy for Windows 10 Mobile devices for securing apps and data. You can use a complex password or numeric PIN to lock devices. Introduced with Windows 10, [Windows Hello](https://windows.microsoft.com/en-us/windows-10/getstarted-what-is-hello) allows you to use a PIN, a companion device (like Microsoft band), or biometrics to validate your identity to unlock Windows 10 Mobile devices. ->**Note:** When Windows 10 first shipped, it included Microsoft Passport and Windows Hello, which worked together to provide multifactor authentication. To simplify deployment and improve supportability, Microsoft has combined these technologies into a single solution under the Windows Hello name. Customers who have already deployed these technologies will not experience any change in functionality. Customers who have yet to evaluate Windows Hello will find it easier to deploy due to simplified policies, documentation, and semantics. -To use Windows Hello with biometrics, specialized hardware, including fingerprint reader, illuminated IR sensor, or other biometric sensors is required. Hardware based protection of the Windows Hello credentials requires TPM 1.2 or greater; if no TPM exists or is configured, credentials/keys protection will be software-based. -Companion devices must be paired with Windows 10 PC’s via Bluetooth. To use a Windows Hello companion device that enables the user to roam with their Windows Hello credentials requires Pro or Enterprise edition on the Windows 10 PC being signed into. +> [!NOTE] +> When Windows 10 first shipped, it included Microsoft Passport and Windows Hello, which worked together to provide multifactor authentication. To simplify deployment and improve supportability, Microsoft has combined these technologies into a single solution under the Windows Hello name. Customers who have already deployed these technologies will not experience any change in functionality. Customers who have yet to evaluate Windows Hello will find it easier to deploy due to simplified policies, documentation, and semantics. +To use Windows Hello with biometrics, specialized hardware, including fingerprint reader, illuminated IR sensor, or other biometric sensors is required. Hardware-based protection of the Windows Hello credentials requires TPM 1.2 or greater; if no TPM exists or is configured, credentials/keys protection will be software-based. +Companion devices must be paired with a Windows 10 PC using Bluetooth. To use a Windows Hello companion device that enables the user to roam with their Windows Hello credentials requires the Pro or Enterprise edition of Windows 10. -Most of the device lock restriction policies have been available via ActiveSync and MDM since Windows Phone 7 and are still available today for Windows 10 Mobile. If you are deploying Windows 10 devices in a personal device deployment scenario, these settings would apply. +Most of the device lock restriction policies have been available through ActiveSync and MDM since Windows Phone 7 and are still available today for Windows 10 Mobile. If you are deploying Windows 10 devices in a personal device deployment scenario, these settings would apply: - **Device Password Enabled** Specifies whether users are required to use a device lock password. -- **Allow Simple Device Password** Whether users can use a simple password (e.g., 1111 or 1234). -- **Alphanumeric Device Password Required** Whether users need to use an alphanumeric password. When configured, Windows prompts the user with a full device keyboard to enter a complex password. When not configured, the user will be able to enter a numeric PIN on the keyboard. -- **Min Device Password Complex Characters** The number of password element types (i.e., uppercase letters, lowercase letters, numbers, or punctuation) required to create strong passwords. -- **Device Password History** The number of passwords Windows 10 Mobile remembers in the password history (Users cannot reuse passwords in the history to create new passwords.) +- **Allow Simple Device Password** Specifies whether users can use a simple password (for example, 1111 or 1234). +- **Alphanumeric Device Password Required** Specifies whether users need to use an alphanumeric password. When configured, Windows prompts the user with a full device keyboard to enter a complex password. When not configured, the user can enter a numeric PIN on the keyboard. +- **Min Device Password Complex Characters** The number of password element types (uppercase letters, lowercase letters, numbers, or punctuation) required to create strong passwords. +- **Device Password History** The number of passwords Windows 10 Mobile remembers in the password history. (Users cannot reuse passwords in the history to create new passwords.) - **Min Device Password Length** The minimum number of characters required to create new passwords. - **Max Inactivity Time Device Lock** The number of minutes of inactivity before devices are locked and require a password to unlock. -- **Allow Idle Return Without Password** Whether users are required to re-authenticate when their devices return from a sleep state before the inactivity time was reached. -- **Max Device Password Failed Attempts** The number of authentication failures allowed before a device is wiped (A value of zero disables device wipe functionality.) -- **Screen Timeout While Locked** The number of minutes before the lock screen times out (this policy influences device power management). -- **Allow Screen Timeout While Locked User Configuration** Whether users can manually configure screen timeout while the device is on the lock screen (Windows 10 Mobile ignores the **Screen Timeout While Locked** setting if you disable this setting). +- **Allow Idle Return Without Password** Specifies whether users are required to re-authenticate when their devices return from a sleep state before the inactivity time was reached. +- **Max Device Password Failed Attempts** The number of authentication failures allowed before a device is wiped. (A value of zero disables device wipe functionality.) +- **Screen Timeout While Locked** The number of minutes before the lock screen times out. (This policy influences device power management.) +- **Allow Screen Timeout While Locked User Configuration** Specifies whether users can manually configure screen timeout while the device is on the lock screen. (Windows 10 Mobile ignores the **Screen Timeout While Locked** setting if you disable this setting.) Settings related to Windows Hello would be important device lock settings to configure if you are deploying devices using the corporate deployment scenario. -Microsoft made it a requirement for all users to create a numeric passcode as part of Azure AD Join. This policy default requires users to select a four-digit passcode, but this can be configured with an AAD-registered MDM system to whatever passcode complexity your organization desires. If you are using Azure AD with an automatic MDM enrollment mechanism, these policy settings are automatically applied during device enrollment. +Microsoft made it a requirement for all users to create a numeric passcode as part of Azure AD Join. This policy default requires users to select a four-digit passcode, but this can be configured with an Azure AD-registered MDM system to whatever passcode complexity your organization desires. If you are using Azure AD with an automatic MDM enrollment mechanism, these policy settings are automatically applied during device enrollment. -You will notice that some of the settings are very similar, specifically those related to passcode length, history, expiration, and complexity. If you set the policy in multiple places, both policies will be applied, with the strongest policy retained. Read [PassportForWork CSP](https://msdn.microsoft.com/library/windows/hardware/dn987099(v=vs.85).aspx), [DeviceLock CSP](https://msdn.microsoft.com/library/windows/hardware/dn904945(v=vs.85).aspx) (Windows Phone 8.1), and [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962(v=vs.85).aspx#DeviceLock_AllowIdleReturnWithoutPassword) for more detailed information. +You may notice that some of the settings are very similar, specifically those related to passcode length, history, expiration, and complexity. If you set the policy in multiple places, both policies are applied, with the strongest policy retained. Read [PassportForWork CSP](https://msdn.microsoft.com/library/windows/hardware/dn987099(v=vs.85).aspx), [DeviceLock CSP](https://msdn.microsoft.com/library/windows/hardware/dn904945(v=vs.85).aspx) (Windows Phone 8.1), and [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962(v=vs.85).aspx#DeviceLock_AllowIdleReturnWithoutPassword) for more detailed information. ### Prevent changing of settings *Applies to: Corporate devices* -Employees are usually allowed to change certain personal device settings that you may want to lock down on corporate devices. Employees can interactively adjust certain settings of the phone through the settings applets. Using MDM, you can limit what users are allowed to change. +Employees are usually allowed to change certain personal device settings that you may want to lock down on corporate devices. Employees can interactively adjust certain settings of the phone through the settings applets. Using MDM, you can limit what users are allowed to change, including: -- **Allow Your Account** Specifies whether users are able to change account configuration in the Your Email and Accounts panel in Settings -- **Allow VPN** Allows the user to change VPN settings -- **Allow Data Sense** Allows the user to change Data Sense settings -- **Allow Date Time** Allows the user to change data and time setting -- **Allow Edit Device Name** Allows users to change the device name -- **Allow Speech Model Update** Specifies whether the device will receive updates to the speech recognition and speech synthesis models (to improve accuracy and performance) +- **Allow Your Account** Specifies whether users are allowed to change account configuration in the **Your Email and Accounts** panel in Settings +- **Allow VPN** Specifies whether users are allowed to change VPN settings +- **Allow Data Sense** Specifies whether users are allowed to change Data Sense settings +- **Allow Date Time** Specifies whether users are allowed to change data and time setting +- **Allow Edit Device Name** Specifies whether users are allowed to change the device name +- **Allow Speech Model Update** Specifies whether the device receives updates to the speech recognition and speech synthesis models (to improve accuracy and performance) ### Hardware restrictions @@ -281,35 +286,37 @@ Employees are usually allowed to change certain personal device settings that yo Windows 10 Mobile devices use state-of-the-art technology that includes popular hardware features such as cameras, global positioning system (GPS) sensors, microphones, speakers, near-field communication (NFC) radios, storage card slots, USB interfaces, Bluetooth interfaces, cellular radios, and Wi-Fi. You can use hardware restrictions to control the availability of these features. -The following lists the MDM settings that Windows 10 Mobile supports to configure hardware restrictions. +The following is a list of the MDM settings that Windows 10 Mobile supports to configure hardware restrictions: ->**Note:** Some of these hardware restrictions provide connectivity and assist in data protection. +> [!NOTE] +> Some of these hardware restrictions provide connectivity and assist in data protection. -- **Allow NFC:** Whether the NFC radio is enabled -- **Allow USB Connection:** Whether the USB connection is enabled (doesn’t affect USB charging) -- **Allow Bluetooth:** Whether users can enable and use the Bluetooth radio on their devices -- **Allow Bluetooth Advertising:** Whether the device can act as a source for Bluetooth advertisements and be discoverable to other devices -- **Allow Bluetooth Discoverable Mode:** Whether the device can discover other devices (e.g., headsets) -- **Allow Bluetooth pre-pairing** Whether to allow specific bundled Bluetooth peripherals to automatically pair with the host device +- **Allow NFC:** Specifies whether the NFC radio is enabled +- **Allow USB Connection:** Specifies whether the USB connection is enabled (doesn’t affect USB charging) +- **Allow Bluetooth:** Specifies whether users can enable and use the Bluetooth radio on their devices +- **Allow Bluetooth Advertising:** Specifies whether the device can act as a source for Bluetooth advertisements and be discoverable to other devices +- **Allow Bluetooth Discoverable Mode:** Specifies whether the device can discover other devices (such as headsets) +- **Allow Bluetooth pre-pairing** Specifies whether to allow specific bundled Bluetooth peripherals to automatically pair with the host device - **Bluetooth Services Allowed List:** The list of Bluetooth services and profiles to which the device can connect - **Set Bluetooth Local Device Name:** The local Bluetooth device name -- **Allow Camera:** Whether the camera is enabled -- **Allow Storage Card:** Whether the storage card slot is enabled -- **Allow Voice Recording:** Whether the user can use the microphone to create voice recordings -- **Allow Location:** Whether the device can use the GPS sensor or other methods to determine location so applications can use location information +- **Allow Camera:** Specifies whether the camera is enabled +- **Allow Storage Card:** Specifies whether the storage card slot is enabled +- **Allow Voice Recording:** Specifies whether the user can use the microphone to create voice recordings +- **Allow Location:** Specifies whether the device can use the GPS sensor or other methods to determine location so applications can use location information ### Certificates *Applies to: Personal and corporate devices* Certificates help improve security by providing account authentication, Wi-Fi authentication, VPN encryption, and SSL encryption of web content. Although users can manage certificates on devices manually, it’s a best practice to use your MDM system to manage those certificates throughout their entire lifecycle – from enrollment through renewal and revocation. -To install certificates manually, you can post them on Microsoft Edge website or send them directly via email, which is ideal for testing purposes. -Using SCEP and MDM systems, certificate management is completely transparent and requires no user intervention, helping improve user productivity, and reduce support calls. Your MDM system can automatically deploy these certificates to the devices’ certificate stores after you enroll the device (as long as the MDM system supports the Simple Certificate Enrollment Protocol (SCEP) or Personal Information Exchange (PFX)). The MDM server can also query and delete SCEP enrolled client certificate (including user installed certificates), or trigger a new enrollment request before the current certificate is expired. +To install certificates manually, you can post them on Microsoft Edge website or send them directly by using email, which is ideal for testing purposes. +Using Simple Certificate Enrollment Protocol (SCEP) and MDM systems, certificate management is completely transparent and requires no user intervention, helping improve user productivity, and reduce support calls. Your MDM system can automatically deploy these certificates to the devices’ certificate stores after you enroll the device, as long as the MDM system supports the SCEP or Personal Information Exchange (PFX). The MDM server can also query and delete SCEP enrolled client certificate (including user installed certificates), or trigger a new enrollment request before the current certificate is expired. In addition to SCEP certificate management, Windows 10 Mobile supports deployment of PFX certificates. The table below lists the Windows 10 Mobile PFX certificate deployment settings. -Get more detailed information about MDM certificate management in the [Client Certificate Install CSP](https://msdn.microsoft.com/library/windows/hardware/dn920023(v=vs.85).aspx) and [Install digital certificates on Windows 10 Mobile](/windows/access-protection/installing-digital-certificates-on-windows-10-mobile). +For more detailed information about MDM certificate management, see [Client Certificate Install CSP](https://msdn.microsoft.com/library/windows/hardware/dn920023(v=vs.85).aspx) and [Install digital certificates on Windows 10 Mobile](/windows/access-protection/installing-digital-certificates-on-windows-10-mobile). Use the Allow Manual Root Certificate Installation setting to prevent users from manually installing root and intermediate CA certificates intentionally or accidentally. -> **Note:** To diagnose certificate-related issues on Windows 10 Mobile devices, use the free Certificates app in Microsoft Store. This Windows 10 Mobile app can help you: +> [!NOTE] +> To diagnose certificate-related issues on Windows 10 Mobile devices, use the free Certificates app in Microsoft Store. This Windows 10 Mobile app can help you: > - View a summary of all personal certificates > - View the details of individual certificates > - View the certificates used for VPN, Wi-Fi, and email authentication @@ -322,7 +329,7 @@ Use the Allow Manual Root Certificate Installation setting to prevent users from *Applies to: Corporate and personal devices* Wi-Fi is used on mobile devices as much as, or more than, cellular data connections. Most corporate Wi-Fi networks require certificates and other complex information to restrict and secure user access. This advanced Wi-Fi information is difficult for typical users to configure, but MDM systems can fully configure these Wi-Fi profiles without user intervention. -You can create multiple Wi-Fi profiles in your MDM system. The below table lists the Windows 10 Mobile Wi Fi connection profile settings that can be configured by administrators. +You can create multiple Wi-Fi profiles in your MDM system. The Windows 10 Mobile Wi-Fi connection profile settings that can be configured by administrators include: - **SSID** The case-sensitive name of the Wi-Fi network Service Set Identifier - **Security type** The type of security the Wi-Fi network uses; can be one of the following authentication types: @@ -345,14 +352,14 @@ You can create multiple Wi-Fi profiles in your MDM system. The below table lists - **Proxy auto-configuration URL** A URL that specifies the proxy auto-configuration file - **Enable Web Proxy Auto-Discovery Protocol (WPAD)** Specifies whether WPAD is enabled -In addition, you can set a few device wide Wi-Fi settings. -- **Allow Auto Connect to Wi-Fi Sense Hotspots** Whether the device will automatically detect and connect to Wi-Fi networks -- **Allow Manual Wi-Fi Configuration** Whether the user can manually configure Wi-Fi settings -- **Allow Wi-Fi** Whether the Wi-Fi hardware is enabled -- **Allow Internet Sharing** Allow or disallow Internet sharing -- **WLAN Scan Mode** How actively the device scans for Wi-Fi networks +In addition, you can set the following device wide Wi-Fi settings: +- **Allow Auto Connect to Wi-Fi Sense Hotspots** Specifies whether the device automatically detects and connects to Wi-Fi networks +- **Allow Manual Wi-Fi Configuration** Specifies whether the user can manually configure Wi-Fi settings +- **Allow Wi-Fi** Specifies whether the Wi-Fi hardware is enabled +- **Allow Internet Sharing** Allows or disallows Internet sharing +- **WLAN Scan Mode** Specifies how actively the device scans for Wi-Fi networks -Get more detailed information about Wi-Fi connection profile settings in the [Wi-Fi CSP](https://msdn.microsoft.com/library/windows/hardware/dn904981(v=vs.85).aspx) and [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962(v=vs.85).aspx). +For more detailed information about Wi-Fi connection profile settings, see [Wi-Fi CSP](https://msdn.microsoft.com/library/windows/hardware/dn904981(v=vs.85).aspx) and [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962(v=vs.85).aspx). ### APN profiles @@ -360,7 +367,7 @@ Get more detailed information about Wi-Fi connection profile settings in the [Wi An Access Point Name (APN) defines network paths for cellular data connectivity. Typically, you define just one APN for a device in collaboration with a mobile operator, but you can define multiple APNs if your company uses multiple mobile operators. An APN provides a private connection to the corporate network that is unavailable to other companies on the mobile operator network. -You can define and deploy APN profiles in MDM systems that configure cellular data connectivity for Windows 10 Mobile. Devices running Windows 10 Mobile can have only one APN profile. The following lists the MDM settings that Windows 10 Mobile supports for APN profiles. +You can define and deploy APN profiles in MDM systems that configure cellular data connectivity for Windows 10 Mobile. Devices running Windows 10 Mobile can have only one APN profile. The following lists the MDM settings that Windows 10 Mobile supports for APN profiles: - **APN name** The APN name - *IP connection type* The IP connection type; set to one of the following values: @@ -368,7 +375,7 @@ You can define and deploy APN profiles in MDM systems that configure cellular da - IPv6 only - IPv4 and IPv6 concurrently - IPv6 with IPv4 provided by 46xlat -- **LTE attached** Whether the APN should be attached as part of an LTE Attach +- **LTE attached** Specifies whether the APN should be attached as part of an LTE Attach - **APN class ID** The globally unique identifier that defines the APN class to the modem - **APN authentication type** The APN authentication type; set to one of the following values: - None @@ -379,18 +386,18 @@ You can define and deploy APN profiles in MDM systems that configure cellular da - **User name** The user account when users select Password Authentication Protocol (PAP), CHAP, or MSCHAPv2 authentication in APN authentication type - **Password** The password for the user account specified in User name - **Integrated circuit card ID** The integrated circuit card ID associated with the cellular connection profile -- **Always on** Whether the connection manager will automatically attempt to connect to the APN whenever it is available +- **Always on** Specifies whether the connection manager automatically attempts to connect to the APN when it is available - **Connection enabled** Specifies whether the APN connection is enabled - **Allow user control** Allows users to connect with other APNs than the enterprise APN -- **Hide view** Whether the cellular UX will allow the user to view enterprise APNs +- **Hide view** Specifies whether the cellular UX allows the user to view enterprise APNs -Get more detailed information about APN settings in the [APN CSP](https://msdn.microsoft.com/library/windows/hardware/dn958617(v=vs.85).aspx). +For more detailed information about APN settings, see [APN CSP](https://msdn.microsoft.com/library/windows/hardware/dn958617(v=vs.85).aspx). ### Proxy *Applies to: Corporate devices* -The below lists the Windows 10 Mobile settings for managing APN proxy settings for Windows 10 Mobile device connectivity. +The following lists the Windows 10 Mobile settings for managing APN proxy settings for Windows 10 Mobile device connectivity: - **Connection name** Specifies the name of the connection the proxy is associated with (this is the APN name of a configured connection) - **Bypass Local** Specifies if the proxy should be bypassed when local hosts are accessed by the device @@ -424,7 +431,8 @@ To create a VPN profile that uses native Windows 10 Mobile VPN protocols (such a - **L2tpPsk** The pre-shared key used for an L2TP connection - **Cryptography Suite** Enable the selection of cryptographic suite attributes used for IPsec tunneling ->**Note:** The easiest way to create a profile for a single sign-on experience with an EAP configuration XML is through the rasphone tool on a Windows 10 PC. Once you run the rasphone.exe, the configuration wizard will walk you through the necessary steps. For step-by-step instructions on creating the EAP configuration XML blob, see EAP configuration. You can use the resulting XML blob in the MDM system to create the VPN profile on Windows 10 Mobile phone. If you have multiple certificates on the devices, you may want to configure filtering conditions for automatic certificate selection, so the employee does not need to select an authentication certificate every time the VPN is turned on. See this article for details. Windows 10 for PCs and Windows 10 Mobile have the same VPN client. +> [!NOTE] +> The easiest way to create a profile for a single sign-on experience with an EAP configuration XML is through the rasphone tool on a Windows 10 PC. Once you run the rasphone.exe, the configuration wizard walks you through the necessary steps. For step-by-step instructions on creating the EAP configuration XML blob, see EAP configuration. You can use the resulting XML blob in the MDM system to create the VPN profile on Windows 10 Mobile phone. If you have multiple certificates on the devices, you may want to configure filtering conditions for automatic certificate selection, so the employee does not need to select an authentication certificate every time the VPN is turned on. See this article for details. Windows 10 for PCs and Windows 10 Mobile have the same VPN client. Microsoft Store–based VPN plugins for the VPN connection allow you to create a VPN plugin profile with the following attributes: @@ -434,7 +442,7 @@ Microsoft Store–based VPN plugins for the VPN connection allow you to create a In addition, you can specify per VPN Profile: -- **App Trigger List** You can add an App Trigger List to every VPN profile. The app specified in the list will automatically trigger the VPN profile for intranet connectivity. When multiple VPN profiles are needed to serve multiple apps, the operating system automatically establishes the VPN connection when the user switches between apps. Only one VPN connection at a time can be active. In the event the device drops the VPN connection, Windows 10 Mobile automatically reconnects to the VPN without user intervention. +- **App Trigger List** You can add an App Trigger List to every VPN profile. The app specified in the list automatically triggers the VPN profile for intranet connectivity. When multiple VPN profiles are needed to serve multiple apps, the operating system automatically establishes the VPN connection when the user switches between apps. Only one VPN connection at a time can be active. In the event the device drops the VPN connection, Windows 10 Mobile automatically reconnects to the VPN without user intervention. - **Route List** List of routes to be added to the routing table for the VPN interface. This is required for split tunneling cases where the VPN server site has more subnets that the default subnet based on the IP assigned to the interface. - **Domain Name Information List** Name Resolution Policy Table (NRPT) rules for the VPN profile. - **Traffic Filter List** Specifies a list of rules. Only traffic that matches these rules can be sent via the VPN Interface. @@ -513,11 +521,11 @@ Azure AD authenticated managers have access to Microsoft Store for Business func Microsoft Store for Business supports app distribution under two licensing models: online and offline. The online model (store-managed) is the recommended method, and supports both personal device and corporate device management scenarios. To install online apps, the device must have Internet access at the time of installation. On corporate devices, an employee can be authenticated with an Azure AD account to install online apps. On personal devices, an employee must register their device with Azure AD to be able to install corporate licensed online apps. -Corporate device users will find company licensed apps in the Store app on their phone in a private catalog. When an MDM system is associated with the Store for Business, IT administrators can present Store apps within the MDM system app catalog where users can find and install their desired apps. IT administrators can also push required apps directly to employee devices without the employee’s intervention. +Corporate device users can find company licensed apps in the Store app on their phone in a private catalog. When an MDM system is associated with the Store for Business, IT administrators can present Store apps within the MDM system app catalog where users can find and install their desired apps. IT administrators can also push required apps directly to employee devices without the employee’s intervention. Employees with personal devices can install apps licensed by their organization using the Store app on their device. They can use either the Azure AD account or Microsoft Account within the Store app if they wish to purchase personal apps. If you allow employees with corporate devices to add a secondary Microsoft Account (MSA), the Store app on the device provides a unified method for installing personal and corporate apps. -Online licensed apps do not need to be transferred or downloaded from the Microsoft Store to the MDM system to be distributed and managed. When an employee chooses a company-owned app, it will automatically be installed from the cloud. Also, apps will be automatically updated when a new version is available or can be removed if needed. When an app is removed from a device by the MDM system or the user, Microsoft Store for Business reclaims the license so it can be used for another user or on another device. +Online licensed apps do not need to be transferred or downloaded from the Microsoft Store to the MDM system to be distributed and managed. When an employee chooses a company-owned app, it's automatically installed from the cloud. Also, apps are automatically updated when a new version is available or can be removed if needed. When an app is removed from a device by the MDM system or the user, Microsoft Store for Business reclaims the license so it can be used for another user or on another device. To distribute an app offline (organization-managed), the app must be downloaded from the Microsoft Store for Business. This can be accomplished in the Microsoft Store for Business portal by an authorized administrator. Offline licensing requires the app developer to opt-in to the licensing model, as the Microsoft Store is no longer able to track licenses for the developer. If the app developer doesn’t allow download of the app from Microsoft Store, then you must obtain the files directly from the developer or use the online licensing method. @@ -543,7 +551,7 @@ In addition to controlling which apps are allowed, IT professionals can also imp - **Allow App Store Auto Update** Whether automatic updates of apps from Microsoft Store are allowed. - **Allow Developer Unlock** Whether developer unlock is allowed. - **Allow Shared User App Data** Whether multiple users of the same app can share data. -- **Allow Store** Whether Microsoft Store app is allowed to run. This will completely block the user from installing apps from the Store, but will still allow app distribution through an MDM system. +- **Allow Store** Whether Microsoft Store app is allowed to run. This completely blocks the user from installing apps from the Store, but still allows app distribution through an MDM system. - **Application Restrictions** An XML blob that defines the app restrictions for a device. The XML blob can contain an app allow or deny list. You can allow or deny apps based on their app ID or publisher. See AppLocker above. - **Disable Store Originated Apps** Disables the launch of all apps from Microsoft Store that came pre-installed or were downloaded before the policy was applied. - **Require Private Store Only** Whether the private store is exclusively available to users in the Store app on the device. If enabled, only the private store is available. If disabled, the retail catalog and private store are both available. @@ -561,7 +569,7 @@ One of the biggest challenges in protecting corporate information on mobile devi Windows 10 Mobile includes Windows Information Protection to transparently keep corporate data protected and personal data private. It automatically tags personal and corporate data and applies policies for those apps that can access data classified as corporate. This includes when data is at rest on local or removable storage. Because corporate data is always protected, users cannot copy it to public locations like social media or personal email. -Windows Information Protection works with all apps, which are classified into two categories: enlightened and unenlightened. Enlighted apps can differentiate between corporate and personal data, correctly determining which to protect based on policies. Corporate data will be encrypted at all times and attempts to copy/paste or share this information with non-corporate apps or users will fail. Unenlightened apps consider all data corporate and encrypt everything by default. +Windows Information Protection works with all apps, which are classified into two categories: enlightened and unenlightened. Enlightened apps can differentiate between corporate and personal data, correctly determining which to protect based on policies. Corporate data is encrypted at all times and any attempt to copy/paste or share this information with non-corporate apps or users fails. Unenlightened apps consider all data corporate and encrypt everything by default. Any app developed on the UWA platform can be enlightened. Microsoft has made a concerted effort to enlighten several of its most popular apps, including: - Microsoft Edge @@ -581,7 +589,7 @@ The following table lists the settings that can be configured for Windows Inform - Override mode (encrypt, prompt, and audit) - Block mode (encrypt, block, and audit) - **Enterprise protected domain names*** A list of domains used by the enterprise for its user identities. User identities from one of these domains is considered an enterprise managed account and data associated with it should be protected. -- **Allow user decryption** Allows the user to decrypt files. If not allowed, the user will not be able to remove protection from enterprise content through the OS or app user experience. +- **Allow user decryption** Allows the user to decrypt files. If not allowed, the user is not able to remove protection from enterprise content through the OS or app user experience. - **Require protection under lock configuration** Specifies whether the protection under lock feature (also known as encrypt under PIN) should be configured. - **Data recovery certificate*** Specifies a recovery certificate that can be used for data recovery of encrypted files. This is the same as the data recovery agent (DRA) certificate for encrypting file system (EFS), only delivered through MDM instead of Group Policy. - **Revoke on unenroll** Whether to revoke the information protection keys when a device unenrolls from the management service. @@ -589,11 +597,11 @@ The following table lists the settings that can be configured for Windows Inform - **Allow Azure RMS for information protection** Specifies whether to allow Azure RMS encryption for information protection. - **Show information protection icons** Determines whether overlays are added to icons for information protection secured files in web browser and enterprise-only app tiles in the Start menu. - **Status** A read-only bit mask that indicates the current state of information protection on the device. The MDM service can use this value to determine the current overall state of information protection. -- **Enterprise IP Range*** The enterprise IP ranges that define the computers in the enterprise network. Data that comes from those computers will be considered part of the enterprise and protected. -- **Enterprise Network Domain Names*** the list of domains that comprise the boundaries of the enterprise. Data from one of these domains that is sent to a device will be considered enterprise data and protected. +- **Enterprise IP Range*** The enterprise IP ranges that define the computers in the enterprise network. Data that comes from those computers is considered part of the enterprise and protected. +- **Enterprise Network Domain Names*** the list of domains that comprise the boundaries of the enterprise. Data from one of these domains that is sent to a device is considered enterprise data and is protected. - **Enterprise Cloud Resources** A list of Enterprise resource domains hosted in the cloud that need to be protected. ->**Note:** * Are mandatory Windows Information Protection policies. To make Windows Information Protection functional, AppLocker and network isolation settings - specifically Enterprise IP Range and Enterprise Network Domain Names – must be configured. This defines the source of all corporate data that needs protection and also ensures data written to these locations won’t be encrypted by the user’s encryption key (so that others in the company can access it. +(* Mandatory Windows Information Protection policies. To make Windows Information Protection functional, AppLocker and network isolation settings - specifically Enterprise IP Range and Enterprise Network Domain Names – must be configured. This defines the source of all corporate data that needs protection and also ensures data written to these locations won’t be encrypted by the user’s encryption key so that others in the company can access it.) For more information on Windows Information Protection, see the [EnterpriseDataProtection CSP](https://msdn.microsoft.com/library/windows/hardware/mt697634(v=vs.85).aspx) and the following in-depth article series [Protect your enterprise data using Windows Information Protection](/windows/threat-protection/windows-information-protection/protect-enterprise-data-using-wip). @@ -682,11 +690,11 @@ Microsoft has streamlined the Windows product engineering and release cycle so n -Microsoft will also deliver and install monthly updates for security and stability directly to Windows 10 Mobile devices. These Quality Updates, released under Microsoft control via Windows Update, are available for all devices running Windows 10 Mobile. Windows 10 Mobile devices consume Feature Updates and Quality Updates as part of the same standard update process. +Microsoft also delivers and installs monthly updates for security and stability directly to Windows 10 Mobile devices. These Quality Updates, released under Microsoft control via Windows Update, are available for all devices running Windows 10 Mobile. Windows 10 Mobile devices consume Feature Updates and Quality Updates as part of the same standard update process. -Quality Updates are usually smaller than Feature Updates, but the installation process and experience is very similar, though larger updates will take more time to install. Enterprise customers can manage the update experience and process on Windows 10 Mobile devices using an MDM system, after upgrading the devices to Enterprise edition. In most cases, policies to manage the update process will apply to both feature and quality updates. +Quality Updates are usually smaller than Feature Updates, but the installation process and experience is very similar, though larger updates take more time to install. Enterprise customers can manage the update experience and process on Windows 10 Mobile devices using an MDM system, after upgrading the devices to Enterprise edition. In most cases, policies to manage the update process apply to both feature and quality updates. -Microsoft aspires to update Windows 10 Mobile devices with the latest updates automatically and without being disruptive for all customers. Out-of-the-box, a Windows 10 Mobile device will Auto Scan for available updates. However, depending on the device’s network and power status, update methods and timing will vary. +Microsoft aspires to update Windows 10 Mobile devices with the latest updates automatically and without being disruptive for all customers. Out-of-the-box, a Windows 10 Mobile device uses Auto Scan to search for available updates. However, depending on the device’s network and power status, update methods and timing may vary. @@ -717,8 +725,8 @@ Microsoft aspires to update Windows 10 Mobile devices with the latest updates au - - + + @@ -739,8 +747,8 @@ Microsoft aspires to update Windows 10 Mobile devices with the latest updates au Microsoft publishes new feature updates for Windows 10 and Windows 10 Mobile on a regular basis. The [Windows release information page](https://technet.microsoft.com/windows/release-info) is designed to help you determine if your devices are current with the latest Windows 10 feature and quality updates. The release information published on this page, covers both Windows 10 for PCs and Windows 10 Mobile. In addition, the [Windows update history page](https://windows.microsoft.com/en-us/windows-10/update-history-windows-10) helps you understand what these updates are about. ->**Note:** -We invite IT Professionals to participate in the Windows Insider Program to test updates before they are officially released to make Windows 10 Mobile even better. If you find any issues, please send us feedback via the Feedback Hub +> [!NOTE] +> We invite IT Professionals to participate in the Windows Insider Program to test updates before they are officially released to make Windows 10 Mobile even better. If you find any issues, please send us feedback via the Feedback Hub **Windows as a Service** @@ -845,11 +853,11 @@ The following table summarizes applicable update policy settings by version of W @@ -892,7 +900,7 @@ This can include: - Automatically downloading and restarting devices with user notification. - Automatically downloading and restarting devices at a specified time. - Automatically downloading and restarting devices without user interaction. -- Turning off automatic updates. This option should be used only for systems under regulatory compliance. The device will not receive any updates. +- Turning off automatic updates. This option should be used only for systems under regulatory compliance. The device does not receive any updates. In addition, in version 1607, you can configure when the update is applied to the employee device to ensure updates installs or reboots don’t interrupt business or worker productivity. Update installs and reboots can be scheduled [outside of active hours](https://msdn.microsoft.com/library/windows/hardware/dn904962(v=vs.85).aspx#Update_ActiveHoursEnd) (supported values are 0-23, where 0 is 12am, 1 is 1am, etc.) or on a specific what [day of the week](https://msdn.microsoft.com/library/windows/hardware/dn904962(v=vs.85).aspx#Update_ScheduledInstallDay) (supported values are 0-7, where 0 is every day, 1 is Sunday, 2 is Monday, etc.). @@ -953,7 +961,8 @@ DHA-enabled device management solutions help IT managers create a unified securi - Trigger further investigation and monitoring (route the device to a honeypot for further monitoring) - Simply alert the user or the admin to fix the issue ->**Note:** Windows Device Health Attestation Service can be used for conditional access scenarios which may be enabled by Mobile Device Management solutions (e.g.: Microsoft Intune) and other types of management systems (e.g.: SCCM) purchased separately. +> [!NOTE] +> Windows Device Health Attestation Service can be used for conditional access scenarios which may be enabled by Mobile Device Management solutions (e.g.: Microsoft Intune) and other types of management systems (e.g.: SCCM) purchased separately. For more information about health attestation in Windows 10 Mobile, see the [Windows 10 Mobile security guide](/windows/device-security/windows-10-mobile-security-guide). @@ -990,7 +999,7 @@ Here is what occurs when a smartphone is turned on: Device inventory helps organizations better manage devices because it provides in-depth information about those devices. MDM systems collect inventory information remotely and provide reporting capabilities to analyze device resources and information. This data informs IT about the current hardware and software resources of the device (e.g., installed updates). -The following list shows examples of the Windows 10 Mobile software and hardware information that a device inventory provides. In addition to this information, the MDM system can read any of the configuration settings described in this guide. +The following list shows examples of the Windows 10 Mobile software and hardware information that a device inventory provides. In addition to this information, the MDM system can read any of the configuration settings described in this guide: - **Installed enterprise apps** List of the enterprise apps installed on the device - **Device name** The device name configured for the device @@ -1004,7 +1013,7 @@ The following list shows examples of the Windows 10 Mobile software and hardware - **Device language** Language in use on the device - **Phone number** Phone number assigned to the device - **Roaming status** Indicates whether the device has a roaming cellular connection -- **International mobile equipment identity (IMEI) and international mobile subscriber identity (IMSI) Unique identifiers for the cellular connection for the phone; Global System for Mobile Communications networks identify valid devices by using the IMEI, and all cellular networks use the IMSI to identify the device and user +- **International mobile equipment identity (IMEI) and international mobile subscriber identity (IMSI)** Unique identifiers for the cellular connection for the phone (Global System for Mobile Communications networks identify valid devices by using the IMEI, and all cellular networks use the IMSI to identify the device and user) - **Wi-Fi IP address** IPv4 and IPv6 addresses currently assigned to the Wi-Fi adapter in the device - **Wi-Fi media access control (MAC) address** MAC address assigned to the Wi-Fi adapter in the device - **Wi-Fi DNS suffix and subnet mask** DNS suffix and IP subnet mask assigned to the Wi-Fi adapter in the device @@ -1021,7 +1030,8 @@ You can control the level of data that diagnostic data systems collect. To confi For more information, see [Configure Windows diagnostic data in Your organization](/windows/configuration/configure-windows-diagnostic-data-in-your-organization). ->**Note:** Diagnostic data can only be managed when the device is upgraded to Windows 10 Mobile Enterprise edition. +> [!NOTE] +> Diagnostic data can only be managed when the device is upgraded to Windows 10 Mobile Enterprise edition. ### Remote assistance @@ -1050,15 +1060,16 @@ Device retirement is the last phase of the device lifecycle, which in today’s Windows 10 Mobile IT supports device retirement in both personal and corporate scenarios, allowing IT to be confident that corporate data remains confidential and user privacy is protected. ->**Note:** All these MDM capabilities are in addition to the device’s software and hardware factory reset features, which employees can use to restore devices to their factory configuration. +> [!NOTE] +> All these MDM capabilities are in addition to the device’s software and hardware factory reset features, which employees can use to restore devices to their factory configuration. **Personal devices:** Windows 10 mobile supports the USA regulatory requirements for a “kill switch” in case your phone is lost or stolen. Reset protection is a free service on account.microsoft.com that helps ensure that the phone cannot be easily reset and reused. All you need to do to turn on **Reset Protection** is sign in with your Microsoft account and accept the recommended settings. To manually turn it on, you can find it under Settings > Updates & security > Find my phone. At this point, Reset Protection is only available with an MSA, not with Azure AD account. It is also only available in the USA and not in other regions of the world. If you choose to completely wipe a device when lost or when an employee leaves the company, make sure you obtain consent from the user and follow any local legislation that protects the user’s personal data. -A better option than wiping the entire device is to use Windows Information Protection to clean corporate-only data from a personal device. As explained in the Apps chapter, all corporate data will be tagged and when the device is unenrolled from your MDM system of your choice, all enterprise encrypted data, apps, settings and profiles will immediately be removed from the device without affecting the employee’s existing personal data. A user can initiate unenrollment via the settings screen or unenrollment action can be taken by IT from within the MDM management console. Unenrollment is a management event and will be reported to the MDM system. +A better option than wiping the entire device is to use Windows Information Protection to clean corporate-only data from a personal device. As explained in the Apps chapter, all corporate data is tagged and when the device is unenrolled from your MDM system of your choice, all enterprise encrypted data, apps, settings and profiles are immediately removed from the device without affecting the employee’s existing personal data. A user can initiate unenrollment via the settings screen or unenrollment action can be taken by IT from within the MDM management console. Unenrollment is a management event and is reported to the MDM system. -**Corporate device:** You can certainly remotely expire the user’s encryption key in case of device theft, but please remember that will also make the encrypted data on other Windows devices unreadable for the user. A better approach for retiring a discarded or lost device is to execute a full device wipe. The help desk or device users can initiate a full device wipe. When the wipe is complete, Windows 10 Mobile returns the device to a clean state and restarts the OOBE process. +**Corporate device:** You can certainly remotely expire the user’s encryption key in case of device theft, but please remember that also makes the encrypted data on other Windows devices unreadable for the user. A better approach for retiring a discarded or lost device is to execute a full device wipe. The help desk or device users can initiate a full device wipe. When the wipe is complete, Windows 10 Mobile returns the device to a clean state and restarts the OOBE process. **Settings for personal or corporate device retirement** - **Allow manual MDM unenrollment** Whether users are allowed to delete the workplace account (i.e., unenroll the device from the MDM system) From d10a8c112614af765169013aeb626c2e59284b41 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Fri, 10 Jul 2020 17:57:02 +0500 Subject: [PATCH 067/589] Update policy-configuration-service-provider.md --- .../mdm/policy-configuration-service-provider.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index eb3f8eb24e..71132b1c96 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -4061,6 +4061,9 @@ The following diagram shows the Policy configuration service provider in tree fo - [Policy CSPs supported by Group Policy](policy-csps-supported-by-group-policy.md) - [ADMX-backed policy CSPs](policy-csps-admx-backed.md) +> [!NOTE] +> Not all Policy CSPs supported by Group Policy are ADMX-backed. For more details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + ## Policy CSPs supported by HoloLens devices - [Policy CSPs supported by HoloLens 2](policy-csps-supported-by-hololens2.md) - [Policy CSPs supported by HoloLens (1st gen) Commercial Suite](policy-csps-supported-by-hololens-1st-gen-commercial-suite.md) From 62d9effee1b1b89c199ca3db65289be360dfc42b Mon Sep 17 00:00:00 2001 From: arcarley <52137849+arcarley@users.noreply.github.com> Date: Fri, 10 Jul 2020 09:20:08 -0700 Subject: [PATCH 068/589] Update update-csp.md I want to add a note that the update CSP aside from Rollback is *not* recommended for desktop devices. This is to ensure that MDMs do not use the update csp approval aspects to try and manage desktop devices and instead utilize the Policy CSP-Update policies. --- windows/client-management/mdm/update-csp.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/client-management/mdm/update-csp.md b/windows/client-management/mdm/update-csp.md index bacfd4f923..324d9af45b 100644 --- a/windows/client-management/mdm/update-csp.md +++ b/windows/client-management/mdm/update-csp.md @@ -16,6 +16,9 @@ ms.date: 02/23/2018 The Update configuration service provider enables IT administrators to manage and control the rollout of new updates. +> [!Note] +> All aspects of the Update CSP aside from Rollback are not recommended for managing desktop devices. To manage desktop devices from Windows Update please see the Policy CSP - Updates section of the Mobile Device Management documentation. Rollback can be used for desktop devices on 1803 and above. + The following diagram shows the Update configuration service provider in tree format. ![update csp diagram](images/provisioning-csp-update.png) From 078bfb898f910c6692a8026f6850dc016ea66d2e Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Fri, 10 Jul 2020 10:19:44 -0700 Subject: [PATCH 069/589] Update windows-diagnostic-data.md --- windows/privacy/windows-diagnostic-data.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/privacy/windows-diagnostic-data.md b/windows/privacy/windows-diagnostic-data.md index 5165ffd9c7..d50e9de2f4 100644 --- a/windows/privacy/windows-diagnostic-data.md +++ b/windows/privacy/windows-diagnostic-data.md @@ -1,6 +1,6 @@ --- -title: Windows 10, version 1709 and newer diagnostic data for the Full level (Windows 10) -description: Use this article to learn about the types of diagnostic data that is collected at the Full level. +title: Windows 10, version 1709 and newer optional diagnostic data (Windows 10) +description: Use this article to learn about the types of optional diagnostic data that is collected. keywords: privacy,Windows 10 ms.prod: w10 ms.mktglfcycl: manage @@ -25,7 +25,7 @@ Applies to: - Windows 10, version 1803 - Windows 10, version 1709 -Microsoft uses Windows diagnostic data to keep Windows secure and up-to-date, troubleshoot problems, and make product improvements. For users who have turned on "Tailored experiences", it can also be used to offer you personalized tips, ads, and recommendations to enhance Microsoft products and services for your needs. This article describes all types of diagnostic data collected by Windows at the Full level (inclusive of data collected at Basic), with comprehensive examples of data we collect per each type. For additional, detailed technical descriptions of Basic data items, see [Windows 10, version 1903 Basic level diagnostic events and fields](https://docs.microsoft.com/windows/configuration/basic-level-windows-diagnostic-events-and-fields). +Microsoft uses Windows diagnostic data to keep Windows secure and up-to-date, troubleshoot problems, and make product improvements. For users who have turned on "Tailored experiences", it can also be used to offer you personalized tips, ads, and recommendations to enhance Microsoft products and services for your needs. This article describes all types of diagnostic data collected by Windows at the Full level (inclusive of data collected at Basic), with comprehensive examples of data we collect per each type. For additional, detailed technical descriptions of Basic data items, see [Windows 10, version 2004 required diagnostic events and fields](https://docs.microsoft.com/windows/configuration/basic-level-windows-diagnostic-events-and-fields). In addition, this article provides references to equivalent definitions for the data types and examples from [ISO/IEC 19944:2017 Information technology -- Cloud computing -- Cloud services and devices: Data flow, data categories and data use](https://www.iso.org/standard/66674.html). Each data type also has a Data Use statement, for diagnostics and for Tailored experiences on the device, using the terms as defined by the standard. These Data Use statements define the purposes for which Microsoft processes each type of Windows diagnostic data, using a uniform set of definitions referenced at the end of this document and based on the ISO standard. Reference to the ISO standard provides additional clarity about the information collected, and allows easy comparison with other services or guidance that also references the standard. From 3426e7bb1f3cd28e8a498c154e150f27e05bd384 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Fri, 10 Jul 2020 10:20:06 -0700 Subject: [PATCH 070/589] Update windows-diagnostic-data.md --- windows/privacy/windows-diagnostic-data.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/windows-diagnostic-data.md b/windows/privacy/windows-diagnostic-data.md index d50e9de2f4..153c7ca114 100644 --- a/windows/privacy/windows-diagnostic-data.md +++ b/windows/privacy/windows-diagnostic-data.md @@ -16,7 +16,7 @@ ms.date: 12/04/2019 ms.reviewer: --- -# Windows 10, version 1709 and newer diagnostic data for the Full level +# Windows 10, version 1709 and newer optional diagnostic data Applies to: - Windows 10, version 1909 From c6525c92b46dc7300f4d68e9f545fb4b4f41e7f6 Mon Sep 17 00:00:00 2001 From: Manika Dhiman Date: Fri, 10 Jul 2020 11:32:43 -0700 Subject: [PATCH 071/589] Update update-csp.md Added a link to the Policy CSP - Update doc. --- windows/client-management/mdm/update-csp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/update-csp.md b/windows/client-management/mdm/update-csp.md index 324d9af45b..1d4d3a7e86 100644 --- a/windows/client-management/mdm/update-csp.md +++ b/windows/client-management/mdm/update-csp.md @@ -17,7 +17,7 @@ ms.date: 02/23/2018 The Update configuration service provider enables IT administrators to manage and control the rollout of new updates. > [!Note] -> All aspects of the Update CSP aside from Rollback are not recommended for managing desktop devices. To manage desktop devices from Windows Update please see the Policy CSP - Updates section of the Mobile Device Management documentation. Rollback can be used for desktop devices on 1803 and above. +> All aspects of the Update CSP aside from Rollback are not recommended for managing desktop devices. To manage desktop devices from Windows Update, see the [Policy CSP - Updates](policy-csp-update.md) documentation. Rollback can be used for desktop devices on 1803 and above. The following diagram shows the Update configuration service provider in tree format. From db641a3a204325bec8c1c521d51eaa28895b26d0 Mon Sep 17 00:00:00 2001 From: LucasArona Date: Fri, 10 Jul 2020 21:03:22 +0200 Subject: [PATCH 072/589] Wrong registry path for the analysis --- windows/deployment/upgrade/setupdiag.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/upgrade/setupdiag.md b/windows/deployment/upgrade/setupdiag.md index bea5439367..bca001f87a 100644 --- a/windows/deployment/upgrade/setupdiag.md +++ b/windows/deployment/upgrade/setupdiag.md @@ -48,7 +48,7 @@ When run by Windows Setup, the following [parameters](#parameters) are used: - /Output:%windir%\logs\SetupDiag\SetupDiagResults.xml - /RegPath:HKEY_LOCAL_MACHINE\SYSTEM\Setup\SetupDiag\Results -The resulting SetupDiag analysis can be found at **%WinDir%\Logs\SetupDiag\SetupDiagResults.xml** and in the registry under **HKLM\Setup\SetupDiag\Results**. +The resulting SetupDiag analysis can be found at **%WinDir%\Logs\SetupDiag\SetupDiagResults.xml** and in the registry under **HKLM\SYSTEM\Setup\SetupDiag\Results**. If the upgrade process proceeds normally, the **Sources** directory including **setupdiag.exe** is moved under **%SystemDrive%\Windows.Old** for cleanup. If the **Windows.old** directory is deleted later, **setupdiag.exe** will also be removed. From 1fdca55aa46ae5bce8514a0e418e7b9d3bd63b50 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 10 Jul 2020 12:53:07 -0700 Subject: [PATCH 073/589] Create manage-advanced-threat-protection-post-migration.md --- ...vanced-threat-protection-post-migration.md | 21 +++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/manage-advanced-threat-protection-post-migration.md diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-advanced-threat-protection-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-advanced-threat-protection-post-migration.md new file mode 100644 index 0000000000..c8905d337a --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-advanced-threat-protection-post-migration.md @@ -0,0 +1,21 @@ +--- +title: Manage Microsoft Defender ATP post migration +description: Now that you've made the switch to Microsoft Defender ATP, your next step is to manage your threat protection features +keywords: post-migration, manage, operations, maintenance, utilization, windows defender advanced threat protection, atp, edr +search.product: eADQiWindows 10XVcnh +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: deniseb +author: denisebmsft +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: article +--- + +# Manage Microsoft Defender Advanced Threat Protection post migration + From c447df235b67aeeb68016a288bc7e88eba946682 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 10 Jul 2020 12:54:06 -0700 Subject: [PATCH 074/589] Update TOC.md --- windows/security/threat-protection/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 666cf8cb70..809def3fba 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -26,6 +26,7 @@ #### [Prepare for your migration](microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md) #### [Set up Microsoft Defender ATP](microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md) #### [Onboard to Microsoft Defender ATP](microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md) +### [Manage Microsoft Defender ATP post migration](microsoft-defender-atp/manage-advanced-threat-protection-post-migration.md) ## [Security administration]() ### [Threat & Vulnerability Management]() From 9af8c8fb8e0d4adfa46a4e6a62d2393c2b7ea047 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 10 Jul 2020 12:56:40 -0700 Subject: [PATCH 075/589] manage content --- windows/security/threat-protection/TOC.md | 2 +- ...rotection-post-migration.md => manage-atp-post-migration.md} | 0 2 files changed, 1 insertion(+), 1 deletion(-) rename windows/security/threat-protection/microsoft-defender-atp/{manage-advanced-threat-protection-post-migration.md => manage-atp-post-migration.md} (100%) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 809def3fba..1177bedda8 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -26,7 +26,7 @@ #### [Prepare for your migration](microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md) #### [Set up Microsoft Defender ATP](microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md) #### [Onboard to Microsoft Defender ATP](microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md) -### [Manage Microsoft Defender ATP post migration](microsoft-defender-atp/manage-advanced-threat-protection-post-migration.md) +### [Manage Microsoft Defender ATP post migration](microsoft-defender-atp/manage-atp-post-migration.md) ## [Security administration]() ### [Threat & Vulnerability Management]() diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-advanced-threat-protection-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md similarity index 100% rename from windows/security/threat-protection/microsoft-defender-atp/manage-advanced-threat-protection-post-migration.md rename to windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md From ca2b3927bd78c7d6ffc786deb27dc1d820abac7b Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 10 Jul 2020 12:58:27 -0700 Subject: [PATCH 076/589] Create manage-atp-post-migration-intune.md --- .../manage-atp-post-migration-intune.md | 21 +++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md new file mode 100644 index 0000000000..26fb32834f --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -0,0 +1,21 @@ +--- +title: Manage Microsoft Defender ATP using Intune +description: Learn how to manage Microsoft Defender ATP with Intune +keywords: post-migration, manage, operations, maintenance, utilization, intune, windows defender advanced threat protection, atp, edr +search.product: eADQiWindows 10XVcnh +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: deniseb +author: denisebmsft +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: article +--- + +# Manage Microsoft Defender Advanced Threat Protection with Intune + From 925ef2a88d265f24142091383f033df54b1bfa8a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 10 Jul 2020 13:24:49 -0700 Subject: [PATCH 077/589] Update microsoft-defender-advanced-threat-protection.md --- .../microsoft-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md index 74190892a5..283349edd3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md @@ -136,4 +136,4 @@ Integrate Microsoft Defender Advanced Threat Protection into your existing workf ## Related topic -[Microsoft Defender ATP helps detect sophisticated threats](https://www.microsoft.com/itshowcase/microsoft-defender-atps-antivirus-capabilities-boost-malware-protection) +[Microsoft Defender ATP helps detect sophisticated threats](https://www.microsoft.com/en-us/itshowcase/microsoft-defender-atps-antivirus-capabilities-boost-malware-protection) From 9d086fe08587871c987c09b225609713076d5024 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 10 Jul 2020 14:03:37 -0700 Subject: [PATCH 078/589] corrections --- .../update/waas-delivery-optimization-reference.md | 6 +++--- .../update/waas-delivery-optimization-setup.md | 2 +- .../deployment/update/waas-delivery-optimization.md | 12 ++++++++---- 3 files changed, 12 insertions(+), 8 deletions(-) diff --git a/windows/deployment/update/waas-delivery-optimization-reference.md b/windows/deployment/update/waas-delivery-optimization-reference.md index fc05fe55aa..b101477546 100644 --- a/windows/deployment/update/waas-delivery-optimization-reference.md +++ b/windows/deployment/update/waas-delivery-optimization-reference.md @@ -47,9 +47,9 @@ In MDM, the same settings are under **.Vendor/MSFT/Policy/Config/DeliveryOptimiz | [Absolute Max Cache Size](#absolute-max-cache-size) | DOAbsoluteMaxCacheSize | 1607 | | [Modify Cache Drive](#modify-cache-drive) | DOModifyCacheDrive | 1607 | | [Minimum Peer Caching Content File Size](#minimum-peer-caching-content-file-size) | DOMinFileSizeToCache | 1703 | -| [Maximum Download Bandwidth](#maximum-download-bandwidth) | DOMaxDownloadBandwidth | 1607 | -| [Percentage of Maximum Download Bandwidth](#percentage-of-maximum-download-bandwidth) | DOPercentageMaxDownloadBandwidth | 1607 | -| [Max Upload Bandwidth](#max-upload-bandwidth) | DOMaxUploadBandwidth | 1607 | +| [Maximum Download Bandwidth](#maximum-download-bandwidth) | DOMaxDownloadBandwidth | 1607 (removed in Windows 10, version 2004; use [Maximum Background Download Bandwidth (in KB/s)](#maximum-background-download-bandwidth-in-kbs) or [Maximum Foreground Download Bandwidth (in KB/s)](#maximum-foreground-download-bandwidth-in-kbs) instead)| +| [Percentage of Maximum Download Bandwidth](#percentage-of-maximum-download-bandwidth) | DOPercentageMaxDownloadBandwidth | 1607 (removed in Windows 10, version 2004; use [Maximum Background Download Bandwidth (in KB/s)](#maximum-background-download-bandwidth-in-kbs) or [Maximum Foreground Download Bandwidth (in KB/s)](#maximum-foreground-download-bandwidth-in-kbs) instead)| +| [Max Upload Bandwidth](#max-upload-bandwidth) | DOMaxUploadBandwidth | 1607 (removed in Windows 10, version 2004) | | [Monthly Upload Data Cap](#monthly-upload-data-cap) | DOMonthlyUploadDataCap | 1607 | | [Minimum Background QoS](#minimum-background-qos) | DOMinBackgroundQoS | 1607 | | [Enable Peer Caching while the device connects via VPN](#enable-peer-caching-while-the-device-connects-via-vpn) | DOAllowVPNPeerCaching | 1709 | diff --git a/windows/deployment/update/waas-delivery-optimization-setup.md b/windows/deployment/update/waas-delivery-optimization-setup.md index a8e262526e..0eb29e75e3 100644 --- a/windows/deployment/update/waas-delivery-optimization-setup.md +++ b/windows/deployment/update/waas-delivery-optimization-setup.md @@ -178,7 +178,7 @@ You can now "pin" files to keep them persistent in the cache. You can only do th **Starting in Windows 10, version 2004:** - `Enable-DeliveryOptimizationVerboseLogs` -- `Disable-DliveryOptimizationVerboseLogs` +- `Disable-DeliveryOptimizationVerboseLogs` - `Get-DeliveryOptimizationLogAnalysis [ETL Logfile path] [-ListConnections]` diff --git a/windows/deployment/update/waas-delivery-optimization.md b/windows/deployment/update/waas-delivery-optimization.md index ba1b1c034a..ae06cd3627 100644 --- a/windows/deployment/update/waas-delivery-optimization.md +++ b/windows/deployment/update/waas-delivery-optimization.md @@ -40,17 +40,21 @@ For information about setting up Delivery Optimization, including tips for the b ![absolute bandwidth settings in delivery optimization interface](images/DO-absolute-bandwidth.png) -- Activity Monitor now identifies the cache server used for as the source for Microsoft Connected Cache. For more information about using Microsoft Connected Cache with Configuration Manager, see [Microsoft Connected Cache](https://docs.microsoft.com/mem/configmgr/core/plan-design/hierarchy/fundamental-concepts-for-content-management#microsoft-connected-cache). +- Activity Monitor now identifies the cache server used for as the source for Microsoft Connected Cache. For more information about using Microsoft Connected Cache with Configuration Manager, see [Microsoft Connected Cache](https://docs.microsoft.com/mem/configmgr/core/plan-design/hierarchy/microsoft-connected-cache). - New options for [`Get-DeliveryOptimizationPerfSnap`](waas-delivery-optimization-setup.md#analyze-usage). - New cmdlets: - `Enable-DeliveryOptimizationVerboseLogs` - - `Disable-DliveryOptimizationVerboseLogs` + - `Disable-DeliveryOptimizationVerboseLogs` - `Get-DeliveryOptimizationLogAnalysis [ETL Logfile path] [-ListConnections]` -- New policy settings (for details see ): +- New policy settings: - [DOCacheHost](waas-delivery-optimization-reference.md#cache-server-hostname) - [DOCacheHostSource](waas-delivery-optimization-reference.md#cache-server-hostname-source) - - [DOMaxForegroundDownloadBandwidth](waas-delivery-optimization-reference.md#maximum-foreground-download-bandwidth-in-kbs) + - [DOMaxForegroundDownloadBandwidth](waas-delivery-optimization-reference.md#maximum-foreground-download-bandwidth-in-kbs); replaces DOPercentageMaxDownloadBandwidth - [DOMaxBackgroundDownloadBandwidth](waas-delivery-optimization-reference.md#maximum-foreground-download-bandwidth-in-kbs) +- Removed policy settings (if you set these policies in Windows 10, 2004, they will have no effect): + - DOMaxDownloadBandwidth; use [DOMaxBackgroundDownloadBandwidth](waas-delivery-optimization-reference.md#maximum-foreground-download-bandwidth-in-kbs) or [DOMaxBackgroundDownloadBandwidth](waas-delivery-optimization-reference.md#maximum-foreground-download-bandwidth-in-kbs) instead. + - DOPercentageMaxDownloadBandwidth; use [DOMaxBackgroundDownloadBandwidth](waas-delivery-optimization-reference.md#maximum-foreground-download-bandwidth-in-kbs) or [DOMaxBackgroundDownloadBandwidth](waas-delivery-optimization-reference.md#maximum-foreground-download-bandwidth-in-kbs) instead. + - DOMaxUploadBandwidth - Support for new types of downloads: - Office installations and updates - Xbox game pass games From 15710d6dd2d52cfb6181d06f5cdaa2b9f334390c Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Fri, 10 Jul 2020 15:04:19 -0700 Subject: [PATCH 079/589] Making final image expandable --- windows/deployment/update/waas-delivery-optimization-setup.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/waas-delivery-optimization-setup.md b/windows/deployment/update/waas-delivery-optimization-setup.md index 0eb29e75e3..983594b78b 100644 --- a/windows/deployment/update/waas-delivery-optimization-setup.md +++ b/windows/deployment/update/waas-delivery-optimization-setup.md @@ -220,7 +220,7 @@ Log entries are written to the PowerShell pipeline as objects. To dump logs to a Update Compliance provides you with information about your Delivery Optimization configuration, including the observed bandwidth savings across all devices that used peer-to-peer distribution over the past 28 days. -![DO status](images/UC_workspace_DO_status.png) +[ ![DO status](images/UC_workspace_DO_status.png) ](images/UC_workspace_DO_status.png#lightbox) For details, see [Delivery Optimization in Update Compliance](update-compliance-delivery-optimization.md). From 79846452f4a7517240037411bd5c9896a5abf902 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Fri, 10 Jul 2020 15:12:11 -0700 Subject: [PATCH 080/589] Indented content in a list item, added white space --- windows/deployment/update/waas-delivery-optimization.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/windows/deployment/update/waas-delivery-optimization.md b/windows/deployment/update/waas-delivery-optimization.md index ae06cd3627..76b225825d 100644 --- a/windows/deployment/update/waas-delivery-optimization.md +++ b/windows/deployment/update/waas-delivery-optimization.md @@ -38,23 +38,28 @@ For information about setting up Delivery Optimization, including tips for the b - Enterprise network throttling: new settings have been added in Group Policy and MDM to control foreground and background throttling as absolute values (Maximum Background Download Bandwidth in (in KB/s)). These settings are also available in the Windows user interface: -![absolute bandwidth settings in delivery optimization interface](images/DO-absolute-bandwidth.png) + ![absolute bandwidth settings in delivery optimization interface](images/DO-absolute-bandwidth.png) - Activity Monitor now identifies the cache server used for as the source for Microsoft Connected Cache. For more information about using Microsoft Connected Cache with Configuration Manager, see [Microsoft Connected Cache](https://docs.microsoft.com/mem/configmgr/core/plan-design/hierarchy/microsoft-connected-cache). + - New options for [`Get-DeliveryOptimizationPerfSnap`](waas-delivery-optimization-setup.md#analyze-usage). + - New cmdlets: - `Enable-DeliveryOptimizationVerboseLogs` - `Disable-DeliveryOptimizationVerboseLogs` - `Get-DeliveryOptimizationLogAnalysis [ETL Logfile path] [-ListConnections]` + - New policy settings: - [DOCacheHost](waas-delivery-optimization-reference.md#cache-server-hostname) - [DOCacheHostSource](waas-delivery-optimization-reference.md#cache-server-hostname-source) - [DOMaxForegroundDownloadBandwidth](waas-delivery-optimization-reference.md#maximum-foreground-download-bandwidth-in-kbs); replaces DOPercentageMaxDownloadBandwidth - [DOMaxBackgroundDownloadBandwidth](waas-delivery-optimization-reference.md#maximum-foreground-download-bandwidth-in-kbs) + - Removed policy settings (if you set these policies in Windows 10, 2004, they will have no effect): - DOMaxDownloadBandwidth; use [DOMaxBackgroundDownloadBandwidth](waas-delivery-optimization-reference.md#maximum-foreground-download-bandwidth-in-kbs) or [DOMaxBackgroundDownloadBandwidth](waas-delivery-optimization-reference.md#maximum-foreground-download-bandwidth-in-kbs) instead. - DOPercentageMaxDownloadBandwidth; use [DOMaxBackgroundDownloadBandwidth](waas-delivery-optimization-reference.md#maximum-foreground-download-bandwidth-in-kbs) or [DOMaxBackgroundDownloadBandwidth](waas-delivery-optimization-reference.md#maximum-foreground-download-bandwidth-in-kbs) instead. - DOMaxUploadBandwidth + - Support for new types of downloads: - Office installations and updates - Xbox game pass games From dd35a6dd2e385664204729aca593bd236a0c7a08 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Fri, 10 Jul 2020 15:54:33 -0700 Subject: [PATCH 081/589] Updated supported values --- windows/client-management/mdm/policy-csp-defender.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-defender.md b/windows/client-management/mdm/policy-csp-defender.md index 56f6870274..49855399e3 100644 --- a/windows/client-management/mdm/policy-csp-defender.md +++ b/windows/client-management/mdm/policy-csp-defender.md @@ -1731,8 +1731,8 @@ If you disable or do not configure this setting, catch-up scans for scheduled fu Supported values: -- 0 - Disabled (default) -- 1 - Enabled +- 1 - Disabled (default) +- 0 - Enabled OMA-URI Path: ./Vendor/MSFT/Policy/Config/Defender/DisableCatchupFullScan @@ -1811,8 +1811,8 @@ If you disable or do not configure this setting, catch-up scans for scheduled qu Supported values: -- 0 - Disabled (default) -- 1 - Enabled +- 1 - Disabled (default) +- 0 - Enabled OMA-URI Path: ./Vendor/MSFT/Policy/Config/Defender/DisableCatchupQuickScan From 2db690e9ec9d158308e0cc15d6f2f45b9d3e3082 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Fri, 10 Jul 2020 16:35:26 -0700 Subject: [PATCH 082/589] Changed "Bitlocker" to "BitLocker" --- .../mdm/policy-configuration-service-provider.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 71132b1c96..5e23762281 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -562,11 +562,11 @@ The following diagram shows the Policy configuration service provider in tree fo -### Bitlocker policies +### BitLocker policies
- Bitlocker/EncryptionMethod + BitLocker/EncryptionMethod
From 4e87357b9ed00d14bd2f34c4e2026bd4f66c9303 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Fri, 10 Jul 2020 16:54:09 -0700 Subject: [PATCH 083/589] Added bold to UI text/navigation --- ...ows-10-device-automatically-using-group-policy.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md b/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md index 95927fa42d..b68290767f 100644 --- a/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md +++ b/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md @@ -80,7 +80,7 @@ The following steps demonstrate required settings using the Intune service: ![Mobility setting MDM intune](images/auto-enrollment-microsoft-intune-setting.png) -7. Verify that the *Enable Automatic MDM enrollment using default Azure AD credentials* group policy (Local Group Policy Editor > Computer Configuration > Policies > Administrative Templates > Windows Components > MDM) is properly deployed to all devices which should be enrolled into Intune. +7. Verify that the *Enable Automatic MDM enrollment using default Azure AD credentials* group policy (**Local Group Policy Editor > Computer Configuration > Policies > Administrative Templates > Windows Components > MDM**) is properly deployed to all devices which should be enrolled into Intune. You may contact your domain administrators to verify if the group policy has been deployed successfully. 8. Verify that the device is not enrolled with the old Intune client used on the Intune Silverlight Portal (this is the Intune portal used before the Azure portal). @@ -194,7 +194,7 @@ Investigate the log file if you have issues even after performing all the mandat To collect Event Viewer logs: 1. Open Event Viewer. -2. Navigate to Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostic-Provider > Admin. +2. Navigate to **Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostic-Provider > Admin**. > [!Tip] > For guidance on how to collect event logs for Intune, see [Collect MDM Event Viewer Log YouTube video](https://www.youtube.com/watch?v=U_oCe2RmQEc). @@ -208,14 +208,14 @@ To collect Event Viewer logs: To troubleshoot, check the error code that appears in the event. See [Troubleshooting Windows device enrollment problems in Microsoft Intune](https://support.microsoft.com/en-ph/help/4469913/troubleshooting-windows-device-enrollment-problems-in-microsoft-intune) for more information. - The auto-enrollment did not trigger at all. In this case, you will not find either event ID 75 or event ID 76. To know the reason, you must understand the internal mechanisms happening on the device as described in the following section. - The auto-enrollment process is triggered by a task (Microsoft > Windows > EnterpriseMgmt) within the task-scheduler. This task appears if the *Enable automatic MDM enrollment using default Azure AD credentials* group policy (Computer Configuration > Policies > Administrative Templates > Windows Components > MDM) is successfully deployed to the target machine as shown in the following screenshot: + The auto-enrollment process is triggered by a task (**Microsoft > Windows > EnterpriseMgmt**) within the task-scheduler. This task appears if the *Enable automatic MDM enrollment using default Azure AD credentials* group policy (**Computer Configuration > Policies > Administrative Templates > Windows Components > MDM**) is successfully deployed to the target machine as shown in the following screenshot: ![Task scheduler](images/auto-enrollment-task-scheduler.png) > [!Note] > This task isn't visible to standard users - run Scheduled Tasks with administrative credentials to find the task. This task runs every 5 minutes for the duration of 1 day. To confirm if the task succeeded, check the task scheduler event logs: - Applications and Services Logs > Microsoft > Windows > Task Scheduler > Operational. + **Applications and Services Logs > Microsoft > Windows > Task Scheduler > Operational**. Look for an entry where the task scheduler created by enrollment client for automatically enrolling in MDM from AAD is triggered by event ID 107. ![Event ID 107](images/auto-enrollment-event-id-107.png) @@ -226,11 +226,11 @@ To collect Event Viewer logs: Note that the task scheduler log displays event ID 102 (task completed) regardless of the auto-enrollment success or failure. This means that the task scheduler log is only useful to confirm if the auto-enrollment task is triggered or not. It does not indicate the success or failure of auto-enrollment. If you cannot see from the log that task Schedule created by enrollment client for automatically enrolling in MDM from AAD is initiated, there is possibly issue with the group policy. Immediately run the command `gpupdate /force` in command prompt to get the GPO applied. If this still does not help, further troubleshooting on the Active Directory is required. - One frequently seen error is related to some outdated enrollment entries in the registry on the target client device (HKLM > Software > Microsoft > Enrollments). If a device has been enrolled (can be any MDM solution and not only Intune), some enrollment information added into the registry is seen: + One frequently seen error is related to some outdated enrollment entries in the registry on the target client device (**HKLM > Software > Microsoft > Enrollments**). If a device has been enrolled (can be any MDM solution and not only Intune), some enrollment information added into the registry is seen: ![Outdated enrollment entries](images/auto-enrollment-outdated-enrollment-entries.png) - By default, these entries are removed when the device is un-enrolled, but occasionally the registry key remains even after un-enrollment. In this case, `gpupdate /force` fails to initiate the auto-enrollment task and error code 2149056522 is displayed in the Applications and Services Logs > Microsoft > Windows > Task Scheduler > Operational event log file under event ID 7016. + By default, these entries are removed when the device is un-enrolled, but occasionally the registry key remains even after un-enrollment. In this case, `gpupdate /force` fails to initiate the auto-enrollment task and error code 2149056522 is displayed in the **Applications and Services Logs > Microsoft > Windows > Task Scheduler > Operational** event log file under event ID 7016. A resolution to this issue is to remove the registry key manually. If you do not know which registry key to remove, go for the key which displays most entries as the screenshot above. All other keys will display less entries as shown in the following screenshot: ![Manually deleted entries](images/auto-enrollment-activation-verification-less-entries.png) From 524bd8bbcf529fd1a0e1a9550298bc7358d28c22 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Fri, 10 Jul 2020 17:12:45 -0700 Subject: [PATCH 084/589] Added bullets to lists that were vertical only in source The rendered versions looked like a jumble --- ...device-automatically-using-group-policy.md | 29 ++++++++++++++----- 1 file changed, 22 insertions(+), 7 deletions(-) diff --git a/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md b/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md index b68290767f..cf1bd637b2 100644 --- a/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md +++ b/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md @@ -168,24 +168,39 @@ Requirements: [!IMPORTANT] If you do not see the policy, it may be because you don’t have the ADMX for Windows 10, version 1803, version 1809, or version 1903 installed. To fix the issue, follow these steps (Note: the latest MDM.admx is backwards compatible): 1. Download: - 1803 -->[Administrative Templates (.admx) for Windows 10 April 2018 Update (1803)](https://www.microsoft.com/download/details.aspx?id=56880) or - 1809 --> [Administrative Templates for Windows 10 October 2018 Update (1809)](https://www.microsoft.com/download/details.aspx?id=57576) or - 1903 --> [Administrative Templates (.admx) for Windows 10 May 2019 Update (1903)](https://www.microsoft.com/download/details.aspx?id=58495&WT.mc_id=rss_alldownloads_all) + + - 1803 -->[Administrative Templates (.admx) for Windows 10 April 2018 Update (1803)](https://www.microsoft.com/download/details.aspx?id=56880) + + - 1809 --> [Administrative Templates for Windows 10 October 2018 Update (1809)](https://www.microsoft.com/download/details.aspx?id=57576) + + - 1903 --> [Administrative Templates (.admx) for Windows 10 May 2019 Update (1903)](https://www.microsoft.com/download/details.aspx?id=58495&WT.mc_id=rss_alldownloads_all) + 2. Install the package on the Domain Controller. + 3. Navigate, depending on the version to the folder: - 1803 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 April 2018 Update (1803) v2**, or - 1809 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 October 2018 Update (1809) v2**, or - 1903 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 May 2019 Update (1903) v3** + + - 1803 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 April 2018 Update (1803) v2** + + - 1809 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 October 2018 Update (1809) v2** + + - 1903 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 May 2019 Update (1903) v3** + 4. Rename the extracted Policy Definitions folder to **PolicyDefinitions**. + 5. Copy PolicyDefinitions folder to **C:\Windows\SYSVOL\domain\Policies**. - (If this folder does not exist, then be aware that you will be switching to a [central policy store](https://support.microsoft.com/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra) for your entire domain). + + If this folder does not exist, then be aware that you will be switching to a [central policy store](https://support.microsoft.com/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra) for your entire domain. + 6. Restart the Domain Controller for the policy to be available. This procedure will work for any future version as well. 1. Create a Group Policy Object (GPO) and enable the Group Policy **Computer Configuration** > **Policies** > **Administrative Templates** > **Windows Components** > **MDM** > **Enable automatic MDM enrollment using default Azure AD credentials**. + 2. Create a Security Group for the PCs. + 3. Link the GPO. + 4. Filter using Security Groups. ## Troubleshoot auto-enrollment of devices From 979a3b9635593f7c66400adfd68f94a0215e948f Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Fri, 10 Jul 2020 17:35:13 -0700 Subject: [PATCH 085/589] Correct broken "Important" note and transition to body text This change corrects a broken "Important" note that might've included two procedures. I've fixed the note and revised it to not encapsulate the two procedures. --- ...device-automatically-using-group-policy.md | 57 ++++++++++--------- 1 file changed, 29 insertions(+), 28 deletions(-) diff --git a/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md b/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md index cf1bd637b2..a1b759f011 100644 --- a/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md +++ b/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md @@ -165,35 +165,36 @@ Requirements: - Enterprise AD must be integrated with Azure AD. - Ensure that PCs belong to same computer group. -[!IMPORTANT] -If you do not see the policy, it may be because you don’t have the ADMX for Windows 10, version 1803, version 1809, or version 1903 installed. To fix the issue, follow these steps (Note: the latest MDM.admx is backwards compatible): - 1. Download: - - - 1803 -->[Administrative Templates (.admx) for Windows 10 April 2018 Update (1803)](https://www.microsoft.com/download/details.aspx?id=56880) - - - 1809 --> [Administrative Templates for Windows 10 October 2018 Update (1809)](https://www.microsoft.com/download/details.aspx?id=57576) - - - 1903 --> [Administrative Templates (.admx) for Windows 10 May 2019 Update (1903)](https://www.microsoft.com/download/details.aspx?id=58495&WT.mc_id=rss_alldownloads_all) - - 2. Install the package on the Domain Controller. - - 3. Navigate, depending on the version to the folder: - - - 1803 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 April 2018 Update (1803) v2** - - - 1809 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 October 2018 Update (1809) v2** - - - 1903 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 May 2019 Update (1903) v3** - - 4. Rename the extracted Policy Definitions folder to **PolicyDefinitions**. - - 5. Copy PolicyDefinitions folder to **C:\Windows\SYSVOL\domain\Policies**. - - If this folder does not exist, then be aware that you will be switching to a [central policy store](https://support.microsoft.com/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra) for your entire domain. - - 6. Restart the Domain Controller for the policy to be available. +> [!IMPORTANT] +> If you do not see the policy, it may be because you don't have the ADMX for Windows 10, version 1803, version 1809, or version 1903 installed. To fix the issue, use the following procedures. Note that the latest MDM.admx is backwards compatible. - This procedure will work for any future version as well. +1. Download: + + - 1803 -->[Administrative Templates (.admx) for Windows 10 April 2018 Update (1803)](https://www.microsoft.com/download/details.aspx?id=56880) + + - 1809 --> [Administrative Templates for Windows 10 October 2018 Update (1809)](https://www.microsoft.com/download/details.aspx?id=57576) + + - 1903 --> [Administrative Templates (.admx) for Windows 10 May 2019 Update (1903)](https://www.microsoft.com/download/details.aspx?id=58495&WT.mc_id=rss_alldownloads_all) + +2. Install the package on the Domain Controller. + +3. Navigate, depending on the version to the folder: + + - 1803 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 April 2018 Update (1803) v2** + + - 1809 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 October 2018 Update (1809) v2** + + - 1903 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 May 2019 Update (1903) v3** + +4. Rename the extracted Policy Definitions folder to **PolicyDefinitions**. + +5. Copy PolicyDefinitions folder to **C:\Windows\SYSVOL\domain\Policies**. + + If this folder does not exist, then be aware that you will be switching to a [central policy store](https://support.microsoft.com/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra) for your entire domain. + +6. Restart the Domain Controller for the policy to be available. + +This procedure will work for any future version as well. 1. Create a Group Policy Object (GPO) and enable the Group Policy **Computer Configuration** > **Policies** > **Administrative Templates** > **Windows Components** > **MDM** > **Enable automatic MDM enrollment using default Azure AD credentials**. From 904dc39f02d1cea324ab9d7a43fd0764de678ef1 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Fri, 10 Jul 2020 19:03:42 -0700 Subject: [PATCH 086/589] new list --- .../tvm-security-recommendation.md | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md index 3d72a507d3..c6b5159b9a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md @@ -144,11 +144,12 @@ When an exception is created for a recommendation, the recommendation is no long The following list details the justifications behind the exception options: - - **Compensating/alternate control** - A 3rd party control that mitigates this recommendation exists, for example, if Network Firewall - - prevents access to a device, third party antivirus - - **Productivity/business need** - Remediation will impact productivity or interrupt business-critical workflow - - **Accept risk** - Poses low risk and/or implementing a compensating control is too expensive + - **Third party control** - A third party product or software already addresses this recommendation + - This justification type will give you point for completing the recommendation, which affects your exposure score and secure score + - **Alternate mitigation** - An internal tool already addresses this recommendation + - This justification type will give you point for completing the recommendation, which affects your exposure score and secure score + - **Risk accepted** - Poses low risk and/or implementing the recommendation is too expensive - **Planned remediation (grace)** - Already planned but is awaiting execution or authorization - - **Other** - False positive 3. Select **Submit**. A confirmation message at the top of the page indicates that the exception has been created. From 9a5933c86132060544bcc08ef4be695d3ce69b06 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Fri, 10 Jul 2020 19:40:10 -0700 Subject: [PATCH 087/589] better explanation --- .../microsoft-defender-atp/tvm-security-recommendation.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md index c6b5159b9a..1169a50661 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md @@ -145,9 +145,9 @@ When an exception is created for a recommendation, the recommendation is no long The following list details the justifications behind the exception options: - **Third party control** - A third party product or software already addresses this recommendation - - This justification type will give you point for completing the recommendation, which affects your exposure score and secure score + - Choosing this justification type will lower your exposure score and increase you secure score because your risk is reduced - **Alternate mitigation** - An internal tool already addresses this recommendation - - This justification type will give you point for completing the recommendation, which affects your exposure score and secure score + - Choosing this justification type will lower your exposure score and increase you secure score because your risk is reduced - **Risk accepted** - Poses low risk and/or implementing the recommendation is too expensive - **Planned remediation (grace)** - Already planned but is awaiting execution or authorization From cb8703a5460255e4bf1cd5fa72fbda7d90266ecd Mon Sep 17 00:00:00 2001 From: Tudor Dobrila Date: Fri, 10 Jul 2020 21:38:00 -0700 Subject: [PATCH 088/589] Release notes for 101.03.12 --- .../threat-protection/microsoft-defender-atp/mac-whatsnew.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md b/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md index 8e3150af35..61b9edd8cd 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md @@ -26,6 +26,10 @@ ms.topic: conceptual > > If you have previously allowed the kernel extension as part of your remote deployment, that warning should not be presented to the end user. If you have not previously deployed a policy to allow the kernel extension, your users will be presented with the warning. To proactively silence the warning, you can still deploy a configuration to allow the kernel extension. Refer to the instructions in the [JAMF-based deployment](mac-install-with-jamf.md#approved-kernel-extension) and [Microsoft Intune-based deployment](mac-install-with-intune.md#create-system-configuration-profiles) topics. +## 101.03.12 + +- Performance improvements & bug fixes + ## 101.01.54 - Improvements around compatibility with Time Machine From bc7a223b76794015eee9693faebdbc3780221c75 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Sat, 11 Jul 2020 16:23:09 +0530 Subject: [PATCH 089/589] added new link as per the user report #7144 , so I inserted **how Microsoft identifies malware and pua website link** **https://docs.microsoft.com/windows/security/threat-protection/intelligence/criteria** --- .../security/threat-protection/intelligence/developer-faq.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/intelligence/developer-faq.md b/windows/security/threat-protection/intelligence/developer-faq.md index ce1d4ec198..2441fc8c12 100644 --- a/windows/security/threat-protection/intelligence/developer-faq.md +++ b/windows/security/threat-protection/intelligence/developer-faq.md @@ -31,7 +31,7 @@ Submit the file in question as a software developer. Wait until your submission If you're not satisfied with our determination of the submission, use the developer contact form provided with the submission results to reach Microsoft. We will use the information you provide to investigate further if necessary. -We encourage all software vendors and developers to read about how Microsoft identifies malware and unwanted software. +We encourage all software vendors and developers to read about [how Microsoft identifies malware and pua.](https://docs.microsoft.com/windows/security/threat-protection/intelligence/criteria) ## Why is Microsoft asking for a copy of my program? From 205a0ec6372ab111917baba55d6b1f7501938911 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Sat, 11 Jul 2020 22:07:44 +0530 Subject: [PATCH 090/589] Update windows/security/threat-protection/intelligence/developer-faq.md Accepted Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../security/threat-protection/intelligence/developer-faq.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/intelligence/developer-faq.md b/windows/security/threat-protection/intelligence/developer-faq.md index 2441fc8c12..b959041a16 100644 --- a/windows/security/threat-protection/intelligence/developer-faq.md +++ b/windows/security/threat-protection/intelligence/developer-faq.md @@ -31,7 +31,7 @@ Submit the file in question as a software developer. Wait until your submission If you're not satisfied with our determination of the submission, use the developer contact form provided with the submission results to reach Microsoft. We will use the information you provide to investigate further if necessary. -We encourage all software vendors and developers to read about [how Microsoft identifies malware and pua.](https://docs.microsoft.com/windows/security/threat-protection/intelligence/criteria) +We encourage all software vendors and developers to read about [how Microsoft identifies malware and Potentially Unwanted Applications (PUA)](https://docs.microsoft.com/windows/security/threat-protection/intelligence/criteria). ## Why is Microsoft asking for a copy of my program? From 27cee5c4db8684bc8c41f65d41eff7570628c3c8 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Sat, 11 Jul 2020 22:46:20 +0530 Subject: [PATCH 091/589] Update windows/security/threat-protection/intelligence/developer-faq.md accepted Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../security/threat-protection/intelligence/developer-faq.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/intelligence/developer-faq.md b/windows/security/threat-protection/intelligence/developer-faq.md index b959041a16..8bf5c9b5f3 100644 --- a/windows/security/threat-protection/intelligence/developer-faq.md +++ b/windows/security/threat-protection/intelligence/developer-faq.md @@ -31,7 +31,7 @@ Submit the file in question as a software developer. Wait until your submission If you're not satisfied with our determination of the submission, use the developer contact form provided with the submission results to reach Microsoft. We will use the information you provide to investigate further if necessary. -We encourage all software vendors and developers to read about [how Microsoft identifies malware and Potentially Unwanted Applications (PUA)](https://docs.microsoft.com/windows/security/threat-protection/intelligence/criteria). +We encourage all software vendors and developers to read about [how Microsoft identifies malware and Potentially Unwanted Applications (PUA)](criteria.md). ## Why is Microsoft asking for a copy of my program? From 1ee77c943311a6d0757cfade9f3cf9331889e8e7 Mon Sep 17 00:00:00 2001 From: Kelly Baker Date: Sat, 11 Jul 2020 18:44:32 -0700 Subject: [PATCH 092/589] Update windows-10-mobile-and-mdm.md --- .../windows-10-mobile-and-mdm.md | 162 +++++++++--------- 1 file changed, 82 insertions(+), 80 deletions(-) diff --git a/windows/client-management/windows-10-mobile-and-mdm.md b/windows/client-management/windows-10-mobile-and-mdm.md index 3837eaff64..98319f2e84 100644 --- a/windows/client-management/windows-10-mobile-and-mdm.md +++ b/windows/client-management/windows-10-mobile-and-mdm.md @@ -400,8 +400,8 @@ For more detailed information about APN settings, see [APN CSP](https://msdn.mic The following lists the Windows 10 Mobile settings for managing APN proxy settings for Windows 10 Mobile device connectivity: - **Connection name** Specifies the name of the connection the proxy is associated with (this is the APN name of a configured connection) -- **Bypass Local** Specifies if the proxy should be bypassed when local hosts are accessed by the device -- **Enable** Specifies if the proxy is enabled +- **Bypass Local** Specifies whether the proxy should be bypassed when local hosts are accessed by the device +- **Enable** Specifies whether the proxy is enabled - **Exception** Specifies a semi-colon delimited list of external hosts which should bypass the proxy when accessed - **User Name** Specifies the username used to connect to the proxy - **Password** Specifies the password used to connect to the proxy @@ -415,15 +415,15 @@ For more details on proxy settings, see [CM_ProxyEntries CSP](https://msdn.micro *Applies to: Corporate and personal devices* -Organizations often use a VPN to control access to apps and resources on their company’s intranet. In addition to native Microsoft Point to Point Tunneling Protocol (PPTP), Layer 2 Tunneling Protocol (L2TP), and Internet Key Exchange Protocol version 2 (IKEv2) VPNs, Windows 10 Mobile supports SSL VPN connections, which require a downloadable plugin from the Microsoft Store and are specific to the VPN vendor of your choice. These plugins work like apps and can be installed directly from the Microsoft Store using your MDM system (see App Management). +Organizations often use a VPN to control access to apps and resources on their company’s intranet. In addition to native Microsoft Point-to-Point Tunneling Protocol (PPTP), Layer 2 Tunneling Protocol (L2TP), and Internet Key Exchange Protocol version 2 (IKEv2) VPNs, Windows 10 Mobile supports SSL VPN connections, which require a downloadable plugin from the Microsoft Store and are specific to the VPN vendor of your choice. These plugins work like apps and can be installed directly from the Microsoft Store using your MDM system (see App Management). You can create and provision multiple VPN connection profiles and then deploy them to managed devices that run Windows 10 Mobile. To create a VPN profile that uses native Windows 10 Mobile VPN protocols (such as IKEv2, PPTP, or L2TP), you can use the following settings: - **VPN Servers** The VPN server for the VPN profile - **Routing policy type** The type of routing policy the VPN profile uses can be set to one of the following values: - - Split tunnel. Only network traffic destined to the intranet goes through the VPN connection - - Force tunnel. All traffic goes through the VPN connection + - Split tunnel: Only network traffic destined to the intranet goes through the VPN connection + - Force tunnel: All traffic goes through the VPN connection - **Tunneling protocol type** The tunneling protocol used for VPN profiles that use native Windows 10 Mobile VPN protocols can be one the following values: PPTP, L2TP, IKEv2, Automatic - **User authentication method** The user authentication method for the VPN connection can have a value of EAP or MSChapv2 (Windows 10 Mobile does not support the value MSChapv2 for IKEv2-based VPN connections) - **Machine certificate** The machine certificate used for IKEv2-based VPN connections @@ -437,10 +437,10 @@ To create a VPN profile that uses native Windows 10 Mobile VPN protocols (such a Microsoft Store–based VPN plugins for the VPN connection allow you to create a VPN plugin profile with the following attributes: - **VPN server** A comma-separated list of VPN servers; you can specify the servers with a URL, fully qualified host name, or IP address -- **Custom configuration** An HTML-encoded XML blob for SSL–VPN plugin–specific configuration information (e.g., authentication information) that the plugin provider requires +- **Custom configuration** An HTML-encoded XML blob for SSL–VPN plugin–specific configuration information (such as authentication information) that the plugin provider requires - **Microsoft Store VPN plugin family name** Specifies the Microsoft Store package family name for the Microsoft Store–based VPN plugin -In addition, you can specify per VPN Profile: +In addition, you can specify per VPN profile: - **App Trigger List** You can add an App Trigger List to every VPN profile. The app specified in the list automatically triggers the VPN profile for intranet connectivity. When multiple VPN profiles are needed to serve multiple apps, the operating system automatically establishes the VPN connection when the user switches between apps. Only one VPN connection at a time can be active. In the event the device drops the VPN connection, Windows 10 Mobile automatically reconnects to the VPN without user intervention. - **Route List** List of routes to be added to the routing table for the VPN interface. This is required for split tunneling cases where the VPN server site has more subnets that the default subnet based on the IP assigned to the interface. @@ -449,7 +449,7 @@ In addition, you can specify per VPN Profile: - **DNS suffixes** A comma-separated list of DNS suffixes for the VPN connection. Any DNS suffixes in this list are automatically added to Suffix Search List. - **Proxy** Any post-connection proxy support required for the VPN connection; including Proxy server name and Automatic proxy configuration URL. Specifies the URL for automatically retrieving proxy server settings. - **Always on connection** Windows 10 Mobile features always-on VPN, which makes it possible to automatically start a VPN connection when a user signs in. The VPN stays connected until the user manually disconnects it. -- **Remember credentials** Whether the VPN connection caches credentials. +- **Remember credentials** Specifies whether the VPN connection caches credentials. - **Trusted network detection** A comma-separated list of trusted networks that causes the VPN not to connect when the intranet is directly accessible (Wi-Fi). - **Enterprise Data Protection Mode ID** Enterprise ID, which is an optional field that allows the VPN to automatically trigger based on an app defined with a Windows Information Protection policy. - **Device Compliance** To set up Azure AD-based Conditional Access for VPN and allow that SSO with a certificate different from the VPN Authentication certificate for Kerberos Authentication in the case of Device Compliance. @@ -460,12 +460,12 @@ In addition, you can specify per VPN Profile: - No other VPN profiles can be connected or modified. - **ProfileXML** In case your MDM system does not support all the VPN settings you want to configure, you can create an XML file that defines the VPN profile you want to apply to all the fields you require. -For more details about VPN profiles, see the [VPNv2 CSP](https://msdn.microsoft.com/library/windows/hardware/dn914776(v=vs.85).aspx) +For more details about VPN profiles, see [VPNv2 CSP](https://msdn.microsoft.com/library/windows/hardware/dn914776(v=vs.85).aspx). -Some device-wide settings for managing VPN connections can help you manage VPNs over cellular data connections, which in turn helps reduce costs associated with roaming or data plan charges. -- **Allow VPN** Whether users can change VPN settings -- **Allow VPN Over Cellular** Whether users can establish VPN connections over cellular networks -- **Allow VPN Over Cellular when Roaming** Whether users can establish VPN connections over cellular networks when roaming +Some device-wide settings for managing VPN connections can help you manage VPNs over cellular data connections, which in turn helps reduce costs associated with roaming or data plan charges: +- **Allow VPN** Specifies whether users can change VPN settings +- **Allow VPN Over Cellular** Specifies whether users can establish VPN connections over cellular networks +- **Allow VPN Over Cellular when Roaming** Specifies whether users can establish VPN connections over cellular networks when roaming ### Storage management @@ -479,16 +479,16 @@ The SD card is uniquely paired with a device. No other devices can see the apps You can disable the **Allow Storage Card** setting if you wish to prevent users from using SD cards entirely. If you choose not to encrypt storage, you can help protect your corporate apps and data by using the Restrict app data to the system volume and Restrict apps to the system volume settings. These help ensure that users cannot copy your apps and data to SD cards. -Here is a list of MDM storage management settings that Windows 10 Mobile provides. +Here is a list of MDM storage management settings that Windows 10 Mobile provides: -- **Allow Storage Card** Whether the use of storage cards for data storage is allowed -- **Require Device Encryption** Whether internal storage is encrypted (when a device is encrypted, you cannot use a policy to turn encryption off) +- **Allow Storage Card** Specifies whether the use of storage cards for data storage is allowed +- **Require Device Encryption** Specifies whether internal storage is encrypted (when a device is encrypted, you cannot use a policy to turn encryption off) - **Encryption method** Specifies the BitLocker drive encryption method and cipher strength; can be one of the following values: - AES-Cipher Block Chaining (CBC) 128-bit - AES-CBC 256-bit - XEX-based tweaked-codebook mode with cipher text stealing (XTS)–AES (XTS-AES) 128-bit (this is the default) - XTS-AES-256-bit -- **Allow Federal Information Processing Standard (FIPS) algorithm policy** Whether the device allows or disallows the FIPS algorithm policy +- **Allow Federal Information Processing Standard (FIPS) algorithm policy** Specifies whether the device allows or disallows the FIPS algorithm policy - **SSL cipher suites** Specifies a list of the allowed cryptographic cipher algorithms for SSL connections - **Restrict app data to the system volume** Specifies whether app data is restricted to the system drive - **Restrict apps to the system volume** Specifies whether apps are restricted to the system drive @@ -533,7 +533,7 @@ To install acquired Microsoft Store or LOB apps offline on a Windows 10 Mobile d Microsoft Store apps or LOB apps that have been uploaded to the Microsoft Store for Business are automatically trusted on all Windows devices, as they are cryptographically signed with Microsoft Store certificates. LOB apps that are uploaded to the Microsoft Store for Business are private to your organization and are never visible to other companies or consumers. If you do not want to upload your LOB apps, you have to establish trust for the app on your devices. To establish this trust, you’ll need to generate a signing certificate with your Public Key Infrastructure and add your chain of trust to the trusted certificates on the device (see the certificates section). You can install up to 20 self-signed LOB apps per device with Windows 10 Mobile. To install more than 20 apps on a device, you can purchase a signing certificate from a trusted public Certificate Authority, or upgrade your devices to Windows 10 Mobile Enterprise edition. -Learn more about the [Microsoft Store for Business](/microsoft-store/index). +For more information, see [Microsoft Store for Business](/microsoft-store/index). ### Managing apps @@ -543,21 +543,21 @@ IT administrators can control which apps are allowed to be installed on Windows Windows 10 Mobile includes AppLocker, which enables administrators to create allow or disallow lists of apps from the Microsoft Store. This capability extends to built-in apps, as well, such as Xbox, Groove, text messaging, email, and calendar, etc. The ability to allow or deny apps helps to ensure that people use their mobile devices for their intended purposes. However, it is not always an easy approach to find a balance between what employees need or request and security concerns. Creating allow or disallow lists also requires keeping up with the changing app landscape in the Microsoft Store. -For more details, see [AppLocker CSP](https://msdn.microsoft.com/library/windows/hardware/dn920019(v=vs.85).aspx). +For more information, see [AppLocker CSP](https://msdn.microsoft.com/library/windows/hardware/dn920019(v=vs.85).aspx). -In addition to controlling which apps are allowed, IT professionals can also implement additional app management settings on Windows 10 Mobile, using an MDM. +In addition to controlling which apps are allowed, IT professionals can also implement additional app management settings on Windows 10 Mobile, using an MDM: -- **Allow All Trusted Apps** Whether users can sideload apps on the device. -- **Allow App Store Auto Update** Whether automatic updates of apps from Microsoft Store are allowed. -- **Allow Developer Unlock** Whether developer unlock is allowed. -- **Allow Shared User App Data** Whether multiple users of the same app can share data. -- **Allow Store** Whether Microsoft Store app is allowed to run. This completely blocks the user from installing apps from the Store, but still allows app distribution through an MDM system. +- **Allow All Trusted Apps** Specifies whether users can sideload apps on the device. +- **Allow App Store Auto Update** Specifies whether automatic updates of apps from Microsoft Store are allowed. +- **Allow Developer Unlock** Specifies whether developer unlock is allowed. +- **Allow Shared User App Data** Specifies whether multiple users of the same app can share data. +- **Allow Store** Specifies whether Microsoft Store app is allowed to run. This completely blocks the user from installing apps from the Store, but still allows app distribution through an MDM system. - **Application Restrictions** An XML blob that defines the app restrictions for a device. The XML blob can contain an app allow or deny list. You can allow or deny apps based on their app ID or publisher. See AppLocker above. - **Disable Store Originated Apps** Disables the launch of all apps from Microsoft Store that came pre-installed or were downloaded before the policy was applied. -- **Require Private Store Only** Whether the private store is exclusively available to users in the Store app on the device. If enabled, only the private store is available. If disabled, the retail catalog and private store are both available. -- **Restrict App Data to System Volume** Whether app data is allowed only on the system drive or can be stored on an SD card. -- **Restrict App to System Volume** Whether app installation is allowed only to the system drive or can be installed on an SD card. -- **Start screen layout** An XML blob used to configure the Start screen (see [Start layout for Windows 10 Mobile](https://msdn.microsoft.com/library/windows/hardware/mt171093(v=vs.85).aspx) for more information). +- **Require Private Store Only** Specifies whether the private store is exclusively available to users in the Store app on the device. If enabled, only the private store is available. If disabled, the retail catalog and private store are both available. +- **Restrict App Data to System Volume** Specifies whether app data is allowed only on the system drive or can be stored on an SD card. +- **Restrict App to System Volume** Specifies whether app installation is allowed only to the system drive or can be installed on an SD card. +- **Start screen layout** An XML blob used to configure the Start screen (for more information, see [Start layout for Windows 10 Mobile](https://msdn.microsoft.com/library/windows/hardware/mt171093(v=vs.85).aspx)). Find more details on application management options in the [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962(v=vs.85).aspx#ApplicationManagement_AllowAllTrustedApps) @@ -592,16 +592,16 @@ The following table lists the settings that can be configured for Windows Inform - **Allow user decryption** Allows the user to decrypt files. If not allowed, the user is not able to remove protection from enterprise content through the OS or app user experience. - **Require protection under lock configuration** Specifies whether the protection under lock feature (also known as encrypt under PIN) should be configured. - **Data recovery certificate*** Specifies a recovery certificate that can be used for data recovery of encrypted files. This is the same as the data recovery agent (DRA) certificate for encrypting file system (EFS), only delivered through MDM instead of Group Policy. -- **Revoke on unenroll** Whether to revoke the information protection keys when a device unenrolls from the management service. +- **Revoke on unenroll** Specifies whether to revoke the information protection keys when a device unenrolls from the management service. - **RMS template ID for information protection** Allows the IT admin to configure the details about who has access to RMS-protected files and for how long. - **Allow Azure RMS for information protection** Specifies whether to allow Azure RMS encryption for information protection. -- **Show information protection icons** Determines whether overlays are added to icons for information protection secured files in web browser and enterprise-only app tiles in the Start menu. +- **Show information protection icons** Determines whether overlays are added to icons for information protection secured files in web browser and enterprise-only app tiles in the **Start** menu. - **Status** A read-only bit mask that indicates the current state of information protection on the device. The MDM service can use this value to determine the current overall state of information protection. - **Enterprise IP Range*** The enterprise IP ranges that define the computers in the enterprise network. Data that comes from those computers is considered part of the enterprise and protected. - **Enterprise Network Domain Names*** the list of domains that comprise the boundaries of the enterprise. Data from one of these domains that is sent to a device is considered enterprise data and is protected. - **Enterprise Cloud Resources** A list of Enterprise resource domains hosted in the cloud that need to be protected. -(* Mandatory Windows Information Protection policies. To make Windows Information Protection functional, AppLocker and network isolation settings - specifically Enterprise IP Range and Enterprise Network Domain Names – must be configured. This defines the source of all corporate data that needs protection and also ensures data written to these locations won’t be encrypted by the user’s encryption key so that others in the company can access it.) +* Mandatory Windows Information Protection policies. To make Windows Information Protection functional, AppLocker and network isolation settings (specifically Enterprise IP Range and Enterprise Network Domain Names) must be configured. This defines the source of all corporate data that needs protection and also ensures data written to these locations won’t be encrypted by the user’s encryption key so that others in the company can access it. For more information on Windows Information Protection, see the [EnterpriseDataProtection CSP](https://msdn.microsoft.com/library/windows/hardware/mt697634(v=vs.85).aspx) and the following in-depth article series [Protect your enterprise data using Windows Information Protection](/windows/threat-protection/windows-information-protection/protect-enterprise-data-using-wip). @@ -609,18 +609,18 @@ For more information on Windows Information Protection, see the [EnterpriseDataP *Applies to: Corporate devices* -On corporate devices, some user activities expose corporate data to unnecessary risk. For example, users might create a screen capture of corporate information out of an internal LOB app. To mitigate the risk, you can restrict the Windows 10 Mobile user experience to help protect corporate data and prevent data leaks. The following demonstrates those capabilities that can be used to help prevent data leaks. +On corporate devices, some user activities expose corporate data to unnecessary risk. For example, users might create a screen capture of corporate information out of an internal LOB app. To mitigate the risk, you can restrict the Windows 10 Mobile user experience to help protect corporate data and prevent data leaks. The following demonstrates those capabilities that can be used to help prevent data leaks: -- **Allow copy and paste** Whether users can copy and paste content -- **Allow Cortana** Whether users can use Cortana on the device (where available) -- **Allow device discovery** Whether the device discovery user experience is available on the lock screen (for example, controlling whether a device could discover a projector [or other devices] when the lock screen is displayed) -- **Allow input personalization** Whether personally identifiable information can leave the device or be saved locally (e.g., Cortana learning, inking, dictation) -- **Allow manual MDM unenrollment** Whether users are allowed to delete the workplace account (i.e., unenroll the device from the MDM system) -- **Allow screen capture** Whether users are allowed to capture screenshots on the device +- **Allow copy and paste** Specifies whether users can copy and paste content +- **Allow Cortana** Specifies whether users can use Cortana on the device (where available) +- **Allow device discovery** Specifies whether the device discovery user experience is available on the lock screen (for example, controlling whether a device could discover a projector [or other devices] when the lock screen is displayed) +- **Allow input personalization** Specifies whether personally identifiable information can leave the device or be saved locally (e.g., Cortana learning, inking, dictation) +- **Allow manual MDM unenrollment** Specifies whether users are allowed to delete the workplace account (i.e., unenroll the device from the MDM system) +- **Allow screen capture** Specifies whether users are allowed to capture screenshots on the device - **Allow SIM error dialog prompt** Specifies whether to display a dialog prompt when no SIM card is installed -- **Allow sync my settings** Whether the user experience settings are synchronized between devices (works with Microsoft accounts only) -- **Allow toasts notifications above lock screen** Whether users are able to view toast notification on the device lock screen -- **Allow voice recording** Whether users are allowed to perform voice recordings +- **Allow sync my settings** Specifies whether the user experience settings are synchronized between devices (works with Microsoft accounts only) +- **Allow toasts notifications above lock screen** Specifies whether users are able to view toast notification on the device lock screen +- **Allow voice recording** Specifies whether users are allowed to perform voice recordings - **Do Not Show Feedback Notifications** Prevents devices from showing feedback questions from Microsoft - **Allow Task Switcher** Allows or disallows task switching on the device to prevent visibility of App screen tombstones in the task switcher - **Enable Offline Maps Auto Update** Disables the automatic download and update of map data @@ -634,19 +634,19 @@ You can find more details on the experience settings in Policy CSP. MDM systems also give you the ability to manage Microsoft Edge on mobile devices. Microsoft Edge is the only browser available on Windows 10 Mobile devices. It differs slightly from the desktop version as it does not support Flash or Extensions. Edge is also an excellent PDF viewer as it can be managed and integrates with Windows Information Protection. -The following settings for Microsoft Edge on Windows 10 Mobile can be managed. +The following settings for Microsoft Edge on Windows 10 Mobile can be managed: -- **Allow Browser** Whether users can run Microsoft Edge on the device -- **Allow Do Not Track headers** Whether Do Not Track headers are allowed -- **Allow InPrivate** Whether users can use InPrivate browsing -- **Allow Password Manager** Whether users can use Password Manager to save and manage passwords locally -- **Allow Search Suggestions in Address Bar** Whether search suggestions are shown in the address bar -- **Allow Windows Defender SmartScreen** Whether Windows Defender SmartScreen is enabled -- **Cookies** Whether cookies are allowed +- **Allow Browser** Specifies whether users can run Microsoft Edge on the device +- **Allow Do Not Track headers** Specifies whether Do Not Track headers are allowed +- **Allow InPrivate** Specifies whether users can use InPrivate browsing +- **Allow Password Manager** Specifies whether users can use Password Manager to save and manage passwords locally +- **Allow Search Suggestions in Address Bar** Specifies whether search suggestions are shown in the address bar +- **Allow Windows Defender SmartScreen** Specifies whether Windows Defender SmartScreen is enabled +- **Cookies** Specifies whether cookies are allowed - **Favorites** Configure Favorite URLs - **First Run URL** The URL to open when a user launches Microsoft Edge for the first time -- **Prevent Windows Defender SmartScreen Prompt Override** Whether users can override the Windows Defender SmartScreen warnings for URLs -- **Prevent Smart Screen Prompt Override for Files** Whether users can override the Windows Defender SmartScreen warnings for files +- **Prevent Windows Defender SmartScreen Prompt Override** Specifies whether users can override the Windows Defender SmartScreen warnings for URLs +- **Prevent Smart Screen Prompt Override for Files** Specifies whether users can override the Windows Defender SmartScreen warnings for files ## Manage @@ -748,7 +748,7 @@ Microsoft aspires to update Windows 10 Mobile devices with the latest updates au Microsoft publishes new feature updates for Windows 10 and Windows 10 Mobile on a regular basis. The [Windows release information page](https://technet.microsoft.com/windows/release-info) is designed to help you determine if your devices are current with the latest Windows 10 feature and quality updates. The release information published on this page, covers both Windows 10 for PCs and Windows 10 Mobile. In addition, the [Windows update history page](https://windows.microsoft.com/en-us/windows-10/update-history-windows-10) helps you understand what these updates are about. > [!NOTE] -> We invite IT Professionals to participate in the Windows Insider Program to test updates before they are officially released to make Windows 10 Mobile even better. If you find any issues, please send us feedback via the Feedback Hub +> We invite IT Professionals to participate in the Windows Insider Program to test updates before they are officially released to make Windows 10 Mobile even better. If you find any issues, please send us feedback by using the Feedback Hub. **Windows as a Service** @@ -756,7 +756,7 @@ Microsoft publishes new feature updates for Windows 10 and Windows 10 Mobile on Microsoft created a new way to deliver and install updates to Windows 10 Mobile directly to devices without Mobile Operator approval. This capability helps to simplify update deployments and ongoing management, broadens the base of employees who can be kept current with the latest Windows features and experiences, and lowers total cost of ownership for organizations who no longer have to manage updates to keep devices secure. -Update availability depends on what servicing option you choose for the device. These servicing options are outlined in the chart below: +Update availability depends on what servicing option you choose for the device. These servicing options are outlined in the following chart.
Cellular Device is only connected to a cellular network (standard data charges apply)Will skip a daily scan if scan was successfully completed in the last 5 daysWill only occur if update package is small and does not exceed the mobile operator data limit.Skips a daily scan if scan was successfully completed in the last 5 daysOnly occurs if update package is small and does not exceed the mobile operator data limit. Yes Idem
Subscribe device to CBB, to defer Feature Updates RequireDeferUpgrade -Defers Feature Update until next CBB release. Device will receive quality updates from Current Branch for Business (CBB). +Defers Feature Update until next CBB release. Device receives quality updates from Current Branch for Business (CBB). Defers feature update for minimum of 4 months after Current Branch was release. BranchReadinessLevel -Defers Feature Update until next CBB release. Device will receive quality updates from Current Branch for Business (CBB). +Defers Feature Update until next CBB release. Device receives quality updates from Current Branch for Business (CBB). Defers feature update for minimum of 4 months after Current Branch was release.
Defer Updates
@@ -798,7 +798,7 @@ Update availability depends on what servicing option you choose for the device.
-**Enterprise Edition** +**Enterprise edition** *Applies to: Corporate devices* @@ -813,11 +813,12 @@ To learn more about diagnostic, see [Configure Windows diagnostic data in your o To activate Windows 10 Mobile Enterprise, use your MDM system or a provisioning package to inject the Windows 10 Enterprise license on a Windows 10 Mobile device. Licenses can be obtained from the Volume Licensing portal. For testing purposes, you can obtain a licensing file from the MSDN download center. A valid MSDN subscription is required. -Details on updating a device to Enterprise edition with [WindowsLicensing CSP](https://msdn.microsoft.com/library/windows/hardware/dn904983(v=vs.85).aspx) +For more information on updating a device to Enterprise edition, see [WindowsLicensing CSP](https://msdn.microsoft.com/library/windows/hardware/dn904983(v=vs.85).aspx). ->**Recommendation:** Microsoft recommends using Enterprise edition only on corporate devices. Once a device has been upgraded, it cannot be downgraded. Even a device wipe or reset will not remove the enterprise license from personal devices. +> [!NOTE] +> We recommend using Enterprise edition only on corporate devices. Once a device has been upgraded, it cannot be downgraded. Even a device wipe or reset will not remove the enterprise license from personal devices. -**Deferring and Approving Updates with MDM** +**Deferring and approving updates with MDM** *Applies to: Corporate devices with Enterprise edition* @@ -888,7 +889,7 @@ Pause Feature Updates for up to 35 days -**Managing the Update Experience** +**Managing the update experience** *Applies to: Corporate devices with Enterprise edition* @@ -902,7 +903,7 @@ This can include: - Automatically downloading and restarting devices without user interaction. - Turning off automatic updates. This option should be used only for systems under regulatory compliance. The device does not receive any updates. -In addition, in version 1607, you can configure when the update is applied to the employee device to ensure updates installs or reboots don’t interrupt business or worker productivity. Update installs and reboots can be scheduled [outside of active hours](https://msdn.microsoft.com/library/windows/hardware/dn904962(v=vs.85).aspx#Update_ActiveHoursEnd) (supported values are 0-23, where 0 is 12am, 1 is 1am, etc.) or on a specific what [day of the week](https://msdn.microsoft.com/library/windows/hardware/dn904962(v=vs.85).aspx#Update_ScheduledInstallDay) (supported values are 0-7, where 0 is every day, 1 is Sunday, 2 is Monday, etc.). +In addition, in version 1607, you can configure when the update is applied to the employee device to ensure updates installs or reboots don’t interrupt business or worker productivity. Update installs and reboots can be scheduled [outside of active hours](https://msdn.microsoft.com/library/windows/hardware/dn904962(v=vs.85).aspx#Update_ActiveHoursEnd) (supported values are 0-23, where 0 is 12am, 1 is 1am, and so on) or on a specific [day of the week](https://msdn.microsoft.com/library/windows/hardware/dn904962(v=vs.85).aspx#Update_ScheduledInstallDay) (supported values are 0-7, where 0 is every day, 1 is Sunday, 2 is Monday, and so on). **Managing the source of updates with MDM** @@ -910,9 +911,9 @@ In addition, in version 1607, you can configure when the update is applied to th Although Windows 10 Enterprise enables IT administrators to defer installation of new updates from Windows Update, enterprises may also want additional control over update processes. With this in mind, Microsoft created Windows Update for Business. Microsoft designed Windows Update for Business to provide IT administrators with additional Windows Update-centric management capabilities, such as the ability to deploy updates to groups of devices and to define maintenance windows for installing updates. If you are using a MDM system, the use of Windows Update for Business is not a requirement, as you can manage these features from your MDM system. -Learn more about [Windows Update for Business](/windows/deployment/update/waas-manage-updates-wufb). +For more information, see [Windows Update for Business](/windows/deployment/update/waas-manage-updates-wufb). -IT administrators can specify where the device gets updates from with AllowUpdateService. This could be Microsoft Update, Windows Update for Business, or Windows Server Update Services (WSUS. +IT administrators can specify where the device gets updates from with AllowUpdateService. This could be Microsoft Update, Windows Update for Business, or Windows Server Update Services (WSUS). **Managing Updates with Windows Update Server** @@ -920,13 +921,13 @@ IT administrators can specify where the device gets updates from with AllowUpdat When using WSUS, set **UpdateServiceUrl** to allow the device to check for updates from a WSUS server instead of Windows Update. This is useful for on-premises MDMs that need to update devices that cannot connect to the Internet, usually handheld devices used for task completion, or other Windows IoT devices. -Learn more about [managing updates with Windows Server Update Services (WSUS)](https://technet.microsoft.com/windowsserver/bb332157.aspx) +For more information, see [managing updates with Windows Server Update Services (WSUS)](https://technet.microsoft.com/windowsserver/bb332157.aspx). **Querying the device update status** *Applies to: Personal and corporate devices* -In addition to configuring how Windows 10 Mobile Enterprise obtains updates, the MDM administrator can query devices for Windows 10 Mobile update information so that update status can be checked against a list of approved updates. +In addition to configuring how Windows 10 Mobile Enterprise obtains updates, the MDM administrator can query devices for Windows 10 Mobile update information so that update status can be checked against a list of approved updates: The device update status query provides an overview of: - Installed updates: A list of updates that are installed on the device. @@ -944,7 +945,7 @@ Device Health Attestation (DHA) is another line of defense that is new to Window Windows 10 Mobile makes it easy to integrate with Microsoft Intune or third-party MDM solutions for an overall view of device health and compliance. Using these solutions together, you can detect jailbroken devices, monitor device compliance, generate compliance reports, alert users or administrators to issues, initiate corrective action, and manage conditional access to resources like Office 365 or VPN. -The first version of Device Health Attestation (DHA) was released in June 2015 for Windows 10 devices that supported TPM 2.0 and operated in an enterprise cloud-based topology. In the Windows 10 anniversary release, Device Health Attestation (DHA) capabilities are extended to legacy devices that support TPM 1.2, hybrid, and on-premises environments that have access to the Internet or operate in an air-gapped network. +The first version of DHA was released in June 2015 for Windows 10 devices that supported TPM 2.0 and operated in an enterprise cloud-based topology. In the Windows 10 anniversary release, DHA capabilities are extended to legacy devices that support TPM 1.2, hybrid, and on-premises environments that have access to the Internet or operate in an air-gapped network. The health attestation feature is based on Open Mobile Alliance (OMA) standards. IT managers can use DHA to validate devices that: - Run Windows 10 operating system (mobile phone or PC) @@ -962,23 +963,23 @@ DHA-enabled device management solutions help IT managers create a unified securi - Simply alert the user or the admin to fix the issue > [!NOTE] -> Windows Device Health Attestation Service can be used for conditional access scenarios which may be enabled by Mobile Device Management solutions (e.g.: Microsoft Intune) and other types of management systems (e.g.: SCCM) purchased separately. +> Windows Device Health Attestation Service can be used for conditional access scenarios that may be enabled by Mobile Device Management solutions (such as Microsoft Intune) and other types of management systems (such as SCCM) purchased separately. For more information about health attestation in Windows 10 Mobile, see the [Windows 10 Mobile security guide](/windows/device-security/windows-10-mobile-security-guide). -This is a list of attributes that are supported by DHA and can trigger the corrective actions mentioned above. +This is a list of attributes that are supported by DHA and can trigger the corrective actions mentioned above: - **Attestation Identity Key (AIK) present** Indicates that an AIK is present (i.e., the device can be trusted more than a device without an AIK). -- **Data Execution Prevention (DEP) enabled** Whether a DEP policy is enabled for the device, indicating that the device can be trusted more than a device without a DEP policy. +- **Data Execution Prevention (DEP) enabled** Specifies whether a DEP policy is enabled for the device, indicating that the device can be trusted more than a device without a DEP policy. - **BitLocker status** BitLocker helps protect the storage on the device. A device with BitLocker can be trusted more than a device without BitLocker. -- **Secure Boot enabled** Whether Secure Boot is enabled on the device. A device with Secure Boot enabled can be trusted more than a device without Secure Boot. Secure Boot is always enabled on Windows 10 Mobile devices. -- **Code integrity enabled** Whether the code integrity of a drive or system file is validated each time it’s loaded into memory. A device with code integrity enabled can be trusted more than a device without code integrity. -- **Safe mode** Whether Windows is running in safe mode. A device that is running Windows in safe mode isn’t as trustworthy as a device running in standard mode. -- **Boot debug enabled** Whether the device has boot debug enabled. A device that has boot debug enabled is less secure (trusted) than a device without boot debug enabled. -- **OS kernel debugging enabled** Whether the device has operating system kernel debugging enabled. A device that has operating system kernel debugging enabled is less secure (trusted) than a device with operating system kernel debugging disabled. -- **Test signing enabled** Whether test signing is disabled. A device that has test signing disabled is more trustworthy than a device that has test signing enabled. +- **Secure Boot enabled** Specifies whether Secure Boot is enabled on the device. A device with Secure Boot enabled can be trusted more than a device without Secure Boot. Secure Boot is always enabled on Windows 10 Mobile devices. +- **Code integrity enabled** Specifies whether the code integrity of a drive or system file is validated each time it’s loaded into memory. A device with code integrity enabled can be trusted more than a device without code integrity. +- **Safe mode** Specifies whether Windows is running in safe mode. A device that is running Windows in safe mode isn’t as trustworthy as a device running in standard mode. +- **Boot debug enabled** Specifies whether the device has boot debug enabled. A device that has boot debug enabled is less secure (trusted) than a device without boot debug enabled. +- **OS kernel debugging enabled** Specifies whether the device has operating system kernel debugging enabled. A device that has operating system kernel debugging enabled is less secure (trusted) than a device with operating system kernel debugging disabled. +- **Test signing enabled** Specifies whether test signing is disabled. A device that has test signing disabled is more trustworthy than a device that has test signing enabled. - **Boot Manager Version** The version of the Boot Manager running on the device. The HAS can check this version to determine whether the most current Boot Manager is running, which is more secure (trusted). - **Code integrity version** Specifies the version of code that is performing integrity checks during the boot sequence. The HAS can check this version to determine whether the most current version of code is running, which is more secure (trusted). -- **Secure Boot Configuration Policy (SBCP) present** Whether the hash of the custom SBCP is present. A device with an SBCP hash present is more trustworthy than a device without an SBCP hash. +- **Secure Boot Configuration Policy (SBCP) present** Specifies whether the hash of the custom SBCP is present. A device with an SBCP hash present is more trustworthy than a device without an SBCP hash. - **Boot cycle whitelist** The view of the host platform between boot cycles as defined by the manufacturer compared to a published allow list. A device that complies with the allow list is more trustworthy (secure) than a device that is noncompliant. **Example scenario** @@ -997,7 +998,7 @@ Here is what occurs when a smartphone is turned on: *Applies to: Corporate devices with Enterprise edition* -Device inventory helps organizations better manage devices because it provides in-depth information about those devices. MDM systems collect inventory information remotely and provide reporting capabilities to analyze device resources and information. This data informs IT about the current hardware and software resources of the device (e.g., installed updates). +Device inventory helps organizations better manage devices because it provides in-depth information about those devices. MDM systems collect inventory information remotely and provide reporting capabilities to analyze device resources and information. This data informs IT about the current hardware and software resources of the device (such as installed updates). The following list shows examples of the Windows 10 Mobile software and hardware information that a device inventory provides. In addition to this information, the MDM system can read any of the configuration settings described in this guide: @@ -1038,7 +1039,7 @@ For more information, see [Configure Windows diagnostic data in Your organizatio *Applies to: Personal and corporate devices* The remote assistance features in Windows 10 Mobile help resolve issues that users might encounter even when the help desk does not have physical access to the device. These features include: -- **Remote lock** Support personnel can remotely lock a device. This ability can help when a user loses his or her mobile device and can retrieve it, but not immediately (e.g., leaving the device at a customer site). +- **Remote lock** Support personnel can remotely lock a device. This ability can help when a user loses his or her mobile device and can retrieve it, but not immediately (such as leaving the device at a customer site). - **Remote PIN reset** Support personnel can remotely reset the PIN, which helps when users forget their PIN and are unable to access their device. No corporate or user data is lost and users are able to quickly gain access to their devices. - **Remote ring** Support personnel can remotely make devices ring. This ability can help users locate misplaced devices and, in conjunction with the Remote Lock feature, help ensure that unauthorized users are unable to access the device if they find it. - **Remote find** Support personnel can remotely locate a device on a map, which helps identify the geographic location of the device. Remote find parameters can be configured via phone settings (see table below). The remote find feature returns the most current latitude, longitude, and altitude of the device. @@ -1050,7 +1051,8 @@ The remote assistance features in Windows 10 Mobile help resolve issues that use These remote management features help organizations reduce the IT effort required to manage devices. They also help users quickly regain use of their device should they misplace it or forget the device password. ->**Remote control software** Microsoft does not provide build-in remote control software, but works with partners to deliver these capabilities and services. With version 1607, remote assistant and control applications are available in the Microsoft Store. +> [!NOTE] +> Microsoft does not provide build-in remote control software, but works with partners to deliver these capabilities and services. With version 1607, remote assistant and control applications are available in the Microsoft Store. ## Retire @@ -1072,8 +1074,8 @@ A better option than wiping the entire device is to use Windows Information Prot **Corporate device:** You can certainly remotely expire the user’s encryption key in case of device theft, but please remember that also makes the encrypted data on other Windows devices unreadable for the user. A better approach for retiring a discarded or lost device is to execute a full device wipe. The help desk or device users can initiate a full device wipe. When the wipe is complete, Windows 10 Mobile returns the device to a clean state and restarts the OOBE process. **Settings for personal or corporate device retirement** -- **Allow manual MDM unenrollment** Whether users are allowed to delete the workplace account (i.e., unenroll the device from the MDM system) -- **Allow user to reset phone** Whether users are allowed to use Settings or hardware key combinations to return the device to factory defaults +- **Allow manual MDM unenrollment** Specifies whether users are allowed to delete the workplace account (unenroll the device from the MDM system) +- **Allow user to reset phone** Specifies whether users are allowed to use Settings or hardware key combinations to return the device to factory defaults ## Related topics From 578464dc833a1a5840ae91ca7f4828ddca1280b8 Mon Sep 17 00:00:00 2001 From: Kelly Baker Date: Sat, 11 Jul 2020 18:57:22 -0700 Subject: [PATCH 093/589] Update windows-10-mobile-and-mdm.md --- windows/client-management/windows-10-mobile-and-mdm.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/client-management/windows-10-mobile-and-mdm.md b/windows/client-management/windows-10-mobile-and-mdm.md index 98319f2e84..af078bbe87 100644 --- a/windows/client-management/windows-10-mobile-and-mdm.md +++ b/windows/client-management/windows-10-mobile-and-mdm.md @@ -234,7 +234,7 @@ Enforcing what accounts employees can use on a corporate device is important for Email and associated calendar and contacts are the primary apps that users access on their smartphones. Configuring them properly is key to the success of any mobility program. In both corporate and personal device deployment scenarios, these email account settings get deployed immediately after enrollment. Using your corporate MDM system, you can define corporate email account profiles, deploy them to devices, and manage inbox policies. -- Most corporate email systems leverage **Exchange ActiveSync (EAS)**. For more details on configuring EAS email profiles, see the [ActiveSync CSP](https://msdn.microsoft.com/library/windows/hardware/dn920017(v=vs.85).aspx). +- Most corporate email systems leverage **Exchange ActiveSync (EAS)**. For more details on configuring EAS email profiles, see the [Exchange ActiveSync CSP](https://msdn.microsoft.com/library/windows/hardware/dn920017(v=vs.85).aspx). - **Simple Mail Transfer Protocol (SMTP)** email accounts can also be configured with your MDM system. For more detailed information on SMTP email profile configuration, see the [Email CSP](https://msdn.microsoft.com/library/windows/hardware/dn904953(v=vs.85).aspx). Microsoft Intune does not currently support the creation of an SMTP email profile. ### Device Lock restrictions @@ -248,7 +248,7 @@ It’s common practice to protect a device that contains corporate information w To use Windows Hello with biometrics, specialized hardware, including fingerprint reader, illuminated IR sensor, or other biometric sensors is required. Hardware-based protection of the Windows Hello credentials requires TPM 1.2 or greater; if no TPM exists or is configured, credentials/keys protection will be software-based. Companion devices must be paired with a Windows 10 PC using Bluetooth. To use a Windows Hello companion device that enables the user to roam with their Windows Hello credentials requires the Pro or Enterprise edition of Windows 10. -Most of the device lock restriction policies have been available through ActiveSync and MDM since Windows Phone 7 and are still available today for Windows 10 Mobile. If you are deploying Windows 10 devices in a personal device deployment scenario, these settings would apply: +Most of the device lock restriction policies have been available through Exchange ActiveSync and MDM since Windows Phone 7 and are still available today for Windows 10 Mobile. If you are deploying Windows 10 devices in a personal device deployment scenario, these settings would apply: - **Device Password Enabled** Specifies whether users are required to use a device lock password. - **Allow Simple Device Password** Specifies whether users can use a simple password (for example, 1111 or 1234). @@ -521,7 +521,7 @@ Azure AD authenticated managers have access to Microsoft Store for Business func Microsoft Store for Business supports app distribution under two licensing models: online and offline. The online model (store-managed) is the recommended method, and supports both personal device and corporate device management scenarios. To install online apps, the device must have Internet access at the time of installation. On corporate devices, an employee can be authenticated with an Azure AD account to install online apps. On personal devices, an employee must register their device with Azure AD to be able to install corporate licensed online apps. -Corporate device users can find company licensed apps in the Store app on their phone in a private catalog. When an MDM system is associated with the Store for Business, IT administrators can present Store apps within the MDM system app catalog where users can find and install their desired apps. IT administrators can also push required apps directly to employee devices without the employee’s intervention. +Corporate device users can find company licensed apps in the Store app on their phone in a private catalog. When an MDM system is associated with the Store for Business, IT administrators can present Store apps within the MDM system App Catalog where users can find and install their desired apps. IT administrators can also push required apps directly to employee devices without the employee’s intervention. Employees with personal devices can install apps licensed by their organization using the Store app on their device. They can use either the Azure AD account or Microsoft Account within the Store app if they wish to purchase personal apps. If you allow employees with corporate devices to add a secondary Microsoft Account (MSA), the Store app on the device provides a unified method for installing personal and corporate apps. From c9661e0b52c6f06b51576a7bf056a7b749048d54 Mon Sep 17 00:00:00 2001 From: Hiroshi Yoshioka <40815708+hyoshioka0128@users.noreply.github.com> Date: Sun, 12 Jul 2020 15:34:48 +0900 Subject: [PATCH 094/589] =?UTF-8?q?Typo=20"\*\*Note:=20\*\*"=E2=86=92"**No?= =?UTF-8?q?te:**"?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/basic-audit-object-access --- .../threat-protection/auditing/basic-audit-object-access.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/auditing/basic-audit-object-access.md b/windows/security/threat-protection/auditing/basic-audit-object-access.md index b6b09ddae8..ba5fc0f8ed 100644 --- a/windows/security/threat-protection/auditing/basic-audit-object-access.md +++ b/windows/security/threat-protection/auditing/basic-audit-object-access.md @@ -41,10 +41,10 @@ You can configure this security setting by opening the appropriate policy under |----------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | 560 | Access was granted to an already existing object. | | 562 | A handle to an object was closed. | -| 563 | An attempt was made to open an object with the intent to delete it.
\*\*Note: \*\* This is used by file systems when the FILE_DELETE_ON_CLOSE flag is specified in Createfile(). | +| 563 | An attempt was made to open an object with the intent to delete it.
**Note:** This is used by file systems when the FILE_DELETE_ON_CLOSE flag is specified in Createfile(). | | 564 | A protected object was deleted. | | 565 | Access was granted to an already existing object type. | -| 567 | A permission associated with a handle was used.
\*\*Note: \*\* A handle is created with certain granted permissions (Read, Write, and so on). When the handle is used, up to one audit is generated for each of the permissions that was used. | +| 567 | A permission associated with a handle was used.
**Note:** A handle is created with certain granted permissions (Read, Write, and so on). When the handle is used, up to one audit is generated for each of the permissions that was used. | | 568 | An attempt was made to create a hard link to a file that is being audited. | | 569 | The resource manager in Authorization Manager attempted to create a client context. | | 570 | A client attempted to access an object.
**Note:** An event will be generated for every attempted operation on the object. | From 1c75515cd0b0d769315c968726564a3c4352bae2 Mon Sep 17 00:00:00 2001 From: John Bae Date: Mon, 13 Jul 2020 10:11:26 -0400 Subject: [PATCH 095/589] Update user-driven.md fixed typo in line 134 *downloaded --- windows/deployment/windows-autopilot/user-driven.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/user-driven.md b/windows/deployment/windows-autopilot/user-driven.md index 7786be9c94..7f4087f9a0 100644 --- a/windows/deployment/windows-autopilot/user-driven.md +++ b/windows/deployment/windows-autopilot/user-driven.md @@ -131,7 +131,7 @@ For VPN configurations that automatically connect, the validation steps may be d To validate the end-to-end process, ensure the needed Windows 10 cumulative update has been installed on Windows 10 1903 or Windows 10 1909. This can be done manually during OOBE by first downloading the latest cumulative from https://catalog.update.microsoft.com and then manually installing it: - Press Shift-F10 to open a command prompt. -- Insert a USB key containing the donwloaded update. +- Insert a USB key containing the downloaded update. - Install the update using the command (substituting the real file name): WUSA.EXE .msu /quiet - Reboot the computer using the command: shutdown.exe /r /t 0 From edb4daf1fcbb3e1f4c0dd4305184a4d8963726bb Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Mon, 13 Jul 2020 09:18:37 -0700 Subject: [PATCH 096/589] pencil edit --- windows/deployment/windows-autopilot/user-driven.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/user-driven.md b/windows/deployment/windows-autopilot/user-driven.md index 7f4087f9a0..2f93c58513 100644 --- a/windows/deployment/windows-autopilot/user-driven.md +++ b/windows/deployment/windows-autopilot/user-driven.md @@ -101,7 +101,7 @@ The following additional requirements apply for Hybrid Azure AD Join with VPN su - Windows 10 1909 + December 10th Cumulative update (KB4530684, OS build 18363.535) or higher - Windows 10 2004 or later - Enable the new “Skip domain connectivity check” toggle in the Hybrid Azure AD Join Autopilot profile. -- A VPN configuration that can be deployed via Intune that enables the user to manualy establish a VPN connection from the Windows logon screen, or one that automatically establishes a VPN connection as needed. +- A VPN configuration that can be deployed via Intune that enables the user to manually establish a VPN connection from the Windows logon screen, or one that automatically establishes a VPN connection as needed. The specific VPN configuration required depends on the VPN software and authentication being used. For third-party (non-Microsoft) VPN solutions, this typically would involve deploying a Win32 app (containing the VPN client software itself as well as any specific connection information, e.g. VPN endpoint host names) via Intune Management Extensions. Consult your VPN provider's documentation for configuration details specific to that provider. From a508fa42cce47ac6c38f9e2a6d9f7e35c21623a3 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 13 Jul 2020 10:42:48 -0700 Subject: [PATCH 097/589] added link to WUfB blog --- windows/whats-new/whats-new-windows-10-version-2004.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/whats-new-windows-10-version-2004.md b/windows/whats-new/whats-new-windows-10-version-2004.md index 489cb3373f..8518f5c4af 100644 --- a/windows/whats-new/whats-new-windows-10-version-2004.md +++ b/windows/whats-new/whats-new-windows-10-version-2004.md @@ -122,7 +122,7 @@ The following [Delivery Optimization](https://docs.microsoft.com/windows/deploym [Windows Update for Business](https://docs.microsoft.com/windows/deployment/update/waas-manage-updates-wufb) enhancements in this release include: - Intune console updates: target version is now available allowing you to specify which version of Windows 10 you want devices to move to. Additionally, this capability enables you to keep devices on their current version until they reach end of service. Check it out in Intune, also available as a Group Policy and Configuration Service Provider (CSP) policy. - Validation improvements: To ensure devices and end users stay productive and protected, Microsoft uses safeguard holds to block devices from updating when there are known issues that would impact that device. Also, to better enable IT administrators to validate on the latest release, we have created a new policy that enables admins to opt devices out of the built-in safeguard holds. -- Update less: Last year, we [changed update installation policies](https://blogs.windows.com/windowsexperience/2019/04/04/improving-the-windows-10-update-experience-with-control-quality-and-transparency/#l2jH7KMkOkfcWdBs.97) for Windows 10 to only target devices running a feature update version that is nearing end of service. As a result, many devices are only updating once a year. To enable all devices to make the most of this policy change, and to prevent confusion, we have removed deferrals from the Windows Update settings **Advanced Options** page starting on Windows 10, version 2004. If you wish to continue leveraging deferrals, you can use local Group Policy (**Computer Configuration > Administrative Templates > Windows Components > Windows Update > Windows Update for Business > Select when Preview builds and Feature Updates are received** or **Select when Quality Updates are received**). +- Update less: Last year, we [changed update installation policies](https://blogs.windows.com/windowsexperience/2019/04/04/improving-the-windows-10-update-experience-with-control-quality-and-transparency/#l2jH7KMkOkfcWdBs.97) for Windows 10 to only target devices running a feature update version that is nearing end of service. As a result, many devices are only updating once a year. To enable all devices to make the most of this policy change, and to prevent confusion, we have removed deferrals from the Windows Update settings **Advanced Options** page starting on Windows 10, version 2004. If you wish to continue leveraging deferrals, you can use local Group Policy (**Computer Configuration > Administrative Templates > Windows Components > Windows Update > Windows Update for Business > Select when Preview builds and Feature Updates are received** or **Select when Quality Updates are received**). For more information about this change, see [Simplified Windows Update settings for end users](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/simplified-windows-update-settings-for-end-users/ba-p/1497215). ## Virtualization From 070e34e6426c335b5e1d3f33756ca610d079cc8a Mon Sep 17 00:00:00 2001 From: Thomas Raya Date: Mon, 13 Jul 2020 11:08:44 -0700 Subject: [PATCH 098/589] Delete desktop.ini --- .../microsoft-defender-atp/images/desktop.ini | 4 ---- 1 file changed, 4 deletions(-) delete mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/desktop.ini diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/desktop.ini b/windows/security/threat-protection/microsoft-defender-atp/images/desktop.ini deleted file mode 100644 index c6b68739d7..0000000000 --- a/windows/security/threat-protection/microsoft-defender-atp/images/desktop.ini +++ /dev/null @@ -1,4 +0,0 @@ -[LocalizedFileNames] -atp-mapping7.png=@atp-mapping7,0 -atp-machine-health-details.PNG=@atp-machine-health-details,0 -email-notification.png=@email-notification,0 From 50a251726098a74202fdc017267aa10430c0a534 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Mon, 13 Jul 2020 12:22:45 -0700 Subject: [PATCH 099/589] Update windows/application-management/manage-windows-mixed-reality.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../application-management/manage-windows-mixed-reality.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/application-management/manage-windows-mixed-reality.md b/windows/application-management/manage-windows-mixed-reality.md index 35c17cbf6a..934a1dc45e 100644 --- a/windows/application-management/manage-windows-mixed-reality.md +++ b/windows/application-management/manage-windows-mixed-reality.md @@ -44,8 +44,8 @@ Organizations that use Windows Server Update Services (WSUS) must take action to Add-Package Dism /Online /add-package /packagepath:(path) ``` - >[!NOTE] - >You must rename the FOD .CAB file to : **Microsoft-Windows-Holographic-Desktop-FOD-Package\~31bf3856ad364e35\~amd64\~\~.cab** + > [!NOTE] + > You must rename the FOD .CAB file to : **Microsoft-Windows-Holographic-Desktop-FOD-Package\~31bf3856ad364e35\~amd64\~\~.cab** c. In **Settings** > **Update & Security** > **Windows Update**, select **Check for updates**. From 9796bfdf7230db15271c3e50b9b854927c0eb3ea Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Mon, 13 Jul 2020 12:36:14 -0700 Subject: [PATCH 100/589] device value --- .../images/tvm-device-value-dropdown.png | Bin 0 -> 20191 bytes .../images/tvm-device-value-flyout.png | Bin 0 -> 20689 bytes .../threat-and-vuln-mgt-scenarios.md | 23 ++++++++++++------ 3 files changed, 15 insertions(+), 8 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/tvm-device-value-dropdown.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/tvm-device-value-flyout.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/tvm-device-value-dropdown.png b/windows/security/threat-protection/microsoft-defender-atp/images/tvm-device-value-dropdown.png new file mode 100644 index 0000000000000000000000000000000000000000..2fe843f6ad6601e2c661627cfa596ab06d0102e5 GIT binary patch literal 20191 zcmbTeWmr{T^ezgbAW|xl5=u&UmkQD$-Q6wSpn`OFcXxNEu<353yV-P{iT?i2`Ec(& z&w1_#bZypJbImo!m}9)}JI2QEtE3Rh3)~klFfb@0!U8fdFi#S}arJX}@UQKv`aJj# z@td%+4Gauw=i?7-6cy@Q@Jj?+5s5DdYX~UlczFBjyX`PA?_fj(KFK*I?kzZ}$wBWg zkFjouwmy&%#RaR>xzfGJ%nHq_mCp9kD2euWsZq-{t5alR7_%QJx@pLxFk!PK{ozy+ zt)o1gzVdn9T9yn;PUcPLH>J&s9(o_9x5&R?CU34BkA^uQo2MMRjhhvTt2*@9$j{$< zz5M)qnWPv+9p>-h@eLVl4*1o3uWyuy?7#jV$%?d6JYM!bQS^!AzZ>KZg6UL57yT*< z?^bYC%ORg>cfh;B?j;E#5-@ zGU#^gPM5MtGP$|%q#_3mSE|OFD&%GRwi=!@wahkYIBTMAQ~{wSswKaX&7nVz{+5lk zqsI;Dz5HS%%j#T4(WmEBiFt4CSa_~+3zzrzeQNOdtTOtbYZ#d6kn5m~hlcJOzL*id zdXzDKl|TFb3@{7M!C1i^o)^qn4s&E)Rp*~pH^+uav7kgg@+Io;dMC21Whjge%-Rw> znVD;9;v3j->pme`jpg(Hp>FAKxwrC;xl=tFxU4oZqm>iX*botP-5-qa;Yy8C2@w2) z7ogGH4jm*oxBNp{FFS?ke=s;-EJ+u8+0+o*<%{y=?21qGGuQQ44*!=_<2?413}q+R zQ{DF>KJ$*t>s(vvhrckOhj;;twW2X??omtRQ!ku$Pj%{VQ^-HDPEl;O4i$5sUT{4x zseg*1*l$LN%P#PtuLxxVqL`F%F%b^&*YXJLG#GDg-C`Na;fnB;&gKSu zX7RDoe}l6q;#dH6zS7`LfQGRk1BI_g7xh!(dvcL z0TMy$BZlcND7#arohRQk1|W%h7&Cq!EKwr$5U&?ovOFB6Voigb{IB;&ER*l%Vx)IjZ- zAMh_&lRh}?iU-(OlJ#<+s8eS2>!%r9FbfUNeb=V?ZPckbEV+8v5g6t`@3My9PvFEA zGA}P*s%#Uz>37;~7gVz0wb-oPO2rM}%%K zpX_pItbBPwc>EVa0gM8s$Lmd?F(dHJ|PPl^i7VT|?iTMT1yUBo!O@^K=%3aF`C_1mx^k14}Z zXcjSdMN1+t|6GN>98A3K=2pbFSYFH9{9QE)s zp;c}|xA4@PYXhljYBP!?G<|prZ7Fl#C zb@f$(aujA{4kn*s+KX1^8zcFZnBgiOqWcWlxm+-t*zn1C5Ki;a?R%ue-do-{#uA>U z6!5Z{n|U5oL-(81Ad<+P$|K!@lP{$FR?h7+4rA&?Q(6o2p4LmpvF%bX@aeFuP2X4ES1u zEYIF@gU~VGk;S^9#)NmdhQPl^zKJ|VV~Edd;=ABhm#>Ec@7eZ^Lf>0kp^p?C^&a&G z5_pp$6h+g!GG+*MF=B|cs9!1HJ%~|Q;_%jeEgNpDLDo*Q#6c|>%@vt{jWhml@g#Lw%S2nkwt$F553GH?vw!h35NQ z5XR}>tLCSx`l1g7bnTRC892Z`i2Z{ zTKDj3^)B_ijTi(l#1Q9>;1+z0gEYPjEIF1rRzTCFYW9X1G5dFjtg+(^3( zD5>*R9~f6P5$25*tR$A-xamABY9GeV@v#-1GVr0Hy^Wr3c$iU#KiGoXU^`xVLB3nDHClFv(nC!iqrr%G zbDp~#UKCmsmRs&!VHZk{P(e2rtJ{(-8>23&6iU3BF7ae*7}1@>{221*D-lxMP(c1* z)BB9gj=_>5_q?abF7@RlDj~3eRWb5k;#Vcy45>{w_GpBjOEs|-uRPR|lq~$7?u}|m zkggg-zv>eZ9d6fzh$})>v}%1G+V!O z5Q?pMwQDs5lO_1xVb_GUOM-=uU|U%aJ&=_MWx+}4b%@@gk?LK*-d=;r7}7hk#aqX? z_2|%4N=v*`BG&NyTYrKc&a4ty7>0Hst z)o3?Oo8S4nn46bh&*q7KMIe&Dz)h%I%&xKmn2%pxlQ?%U<$FU${y@V)UApmxj&5sy zmT+aYPaRyGnK1p5y>ll+h+K2=id>b4RKfn;@A`h$Aqtlza`|~KGs4q+rKN@^-lX(W z9Gm=(qIM4r4qBP3#`y=@PrKPfy-S_$9QwuQv?$ZQ+5s!SY8gtC94+=<$mXKvC3K3tAROa%wd8Jy0og6 zcNjbPBer#3um!)Qvnnlw@yW0}SSW%aSc9(R_kr%gS#ZAc`_C&5BbFO5?dXAb6_Ky> zk~m{E8-L&%r8Gmjg9h1mEF(^w@azLZo4*j7CV~HF?7i8`v7+qFh{}q<-LCIB>y0{t zG4;b;VQZ_Dg6tarRW!w~jpPTgF$5n8K-BuLx zT(~gu^50b$eF|kk!6yf=exIE&HQJ?aqpu`;;!C%;mZgv!u4M~F-|R-NN=pfg}IXDzm7r?yZ-kmad&qO}}h< z^C|yurF>Dzfn^OYxU*@$4AAVEW{<6~oelk2GbCPgL%Ep;HQnm;!wzIai6XdFjfG;o&-|9Q_X zMebN#+pWLgMzXANNiRbTfd<2PD?8ju>zSOZdv98}>QYC!opEK$VfP`sD5rdK#d(OB z-e;ma`|ejQ6Sm?7%^Ng_Ni+4#lpa^pS7qd8`5UkHEsPLqmfMI8l_QN0Ih-V(2N@5Y z6|{^#_@Y^&HisF0%a5OOLDn+6exf1cFu2eN1HWkME<4b>f(0#^OF#y}TjTeY|spmUSz2X`$M)IJcI$0?JfF7O`tIv-5HH#v%q(Wqe~{bw;pLjrPG)zGh{Qz$)dP8zG8%%ljVRk_9D> zt8R@quU@AJyNq37PX9RHjvC0QQ$?3!!3^#bj494f>b;7mGfDKO>9$!57-+a8wfOF- z`L)exVu1^lMq4L6sLN!$(c%V|Q+j|!X7fdH#mVZ!arDFzMGr#4%u9MRN?r8TLijX2 zTGh|lLFR0%QghpjTB2hIJVo{w8MtLox0OE*zjOz7F)k9SqSgl&>Q$~#2PU)fOfIdj zoDJiHnD;U{dR>QCW;?9}CN`wMX1kEdslj#I?k!CfaM8AP77Ay&wSV{j#Cu-iwAy4- zHS=+_s*eTxv)sHOnF2$oTx`L8uVFEb<64<@IIG?(yHrFvA%romuTT>RRgAD`ueP}p zQ?pZ{8%;Aeb$t1Y3n5ReMKLnz^aS~?R221)|u{FeFds9pOFQhtyWTDH<=kiD? zZ~C(RH-6<*50UfEP8T9g8{0oGQ?kI@U3}Y${UBMxVzNazY zkU)dmGsq%@NNu72WsI;Ox4{AdAW~(8KF;c63_D--C95y+G2F`F=|7nLkhgJbEq%H% zfcMcc_V{#~9m1Q4FN}huPo#C*mA|;Tx+U~vS=$(My?Pq%d=N33{==sN<}5yFa`e#_ zsV)0a<=rZe*|U@k&K%;6)2mW{x-oj$vE(Zbl#bU(ZuYWnRZu<@m^ z*vh$ESI+8QFi_V_z;0Krki(f*0PP)jo6@d!FLo_;>YdBvshO<$TNo?9!hktpN+o7e zT+^wdoxXwi&s0OZFsf5uZ=2*bi0uk6DpJf$E}RB&HL(N*zITtcuD#daIL(*f^2$No z`&=-KNv|I8eZ88?Is_%K%ti_+Z{jZ3z|1XW`k}aWk)dQ|zOvCFuOuP#Qec*9sVyup zNS4J=)oj%{6 z*GW==a)n;Q7-gJ%i|yCJO=9@;yfw$vrY*JI(R++WEA79Q-Z4)n2;EeXRm+a;M7#_V z+a|rgu|h34<89<9$5+3_wX)PD&pR1Fmvo!^O(;Qub)KSif(1{2KN2m(dC6k?LqIpm z#ov(km*MrBQ=>k+31q@W*K>QPs;n`bhO93vKW~ypGnaf98Dr|GBgb!WF9OtX3ve6f z+VCZE&ifAp2Cgstx*<)ZXn_{Ja471i#|VEUcN;iQQyOsV@zO_-jCvB#10N*Zsy~UH z_(axG4_?Xzc+(2&%8g{U6w_X7J-|*ZLpmSzGb^Styk8b($(GzK{wS2>ahF@qa=W+Y z_L_6u8&lUi`f(C;YqYUm1@*>S^MmaQCu3kL1sr zzekd!mbkCMkws`D{}&dy&!=&p*(Lu%uO*v0X` zM#sd+YG_Cr8&kl0ruBW4^W}Rj8=7~&rxQx`IC5^ZzJvidd2n!0Ti$OgJzvZ8tZw|<3u&hRPM7aND7?M}{(D0>YEKEUG~W{ceiWd2oc8L!8}TxW z*Wdil+W}=$?%(}E^Zx4)kzHuxNuQ1_r#e4Ym#BsY zfz@hHL|B+~&bES`#RTbJ1Nf@cju=228@V?IllV0>G^!wji7Wwe6$Y@OVPV>sTBw8s z9qC^Jj?d4F8G|q&F%jY6YP%;pww&I)mmhb;cZ)1)0YxA{3TO!G(PKRvN@8+)0M`L6E&92p?5gIv!+$knku7>Ja%F5izlUqLow7Um9dEE zWG5@PS77D83uZ|FL>?=5xj3krQ*%FA6H!5^&UU*wuS7K)NaoR0XrM_;OLJ``_4EBL zEaTwOcC^f}1$AC@T(#2?>I}E~^9~0A^-1hAZkO{t?U|GH%!B)%cQ+U4e5TPen}LDI zXU;rRNF@>X12qOWl-%6<aLgqG{FJ{i6zgvwsU!K0a%&oE^~WEOWOY&Ur=YK(%7g<1?E~n;M@Dn&q45T#>}{aAp|Jj zYiiheu}ZN0D1A4=xYtt!+gA*V1#aw8&&wBBE6s8R5YbidvvhXKx< zF8=m-YBT0n%(UVs`m2tG)#L)~FPA9}Sn!{q4V!sOhKO{&EhH4x3?(!6#qSwnSG zrP~t>v$nYz5n1_bdis?przZm1dm_fsH1jxm?ey12K3=vtsi`nc8dAc-4#ju&C`}q6 z8YP>*!-&1SY-?0e)zpqIE;dirA*ky}Q8#6(H5T8GYlr+p6gPZ)e5mx1Uc5*bi=my! zHs&PH7LUu{3$a+JU*6p8xjNk}m^Tor<*GIR8}Wo_R4QAChDy43voc9e!4~S<#M&IH zsZ(>;;3XF7jF(6N)0wc|97+Mx`G^==Z@1gMnc~q6#)IOd6BO5}JVoww|RWO_8^OH~ZiX zE?JKG3ns$joTd#pULYYkozHCgrmzGMdffhSP%N=B(h6O7mmAxKQmb9Q=Bl<-Ji*~{ z7OyhCzPTA|bh25m05)@%xHW_C*fF>F`Wrht4+TU;8FQqPs%PZPw%FV8AY<2JIjTXX? zkUh0qXTOgdL#L_m#IQ-DWPD>H8eFB`U{A_)N)H~yTHsbCj~da5^7c0bvf72UIgUtUj2lg(Sscm0O&vKmyI@c=Ih5Sy=@T2JKENnd zq#)*c8xe^2%9MrC{qhJKI4N1Wlx2Iz=Q<6?g=OAEd4_$u7BY8H^Ry=GT%kyzGk~x) znx3Pf^~}vBfZf>VdqN~10~aL7-~RJizlRmUvUXbMP<&Ud)oP@Zl@)rVD+qO;=c>(N zALC3nz0D+b#a$TK$xf#lg(D%bE^5dppOqdl3+>pHo|9AEiK2|mXKn5GMJiP$e?}3t z^>%or$Nn@m3#0t4N_I+!=Zux#Q@u;u@)lKFp!qyDdoqW^z~s$;W-1yISC@2AZ((#F!$Cl7Z^ z^7CqHTW$$-B`6mBJ($TT>dfyG|6#WF-a!o-ZJAM=`^6dzQ$h=*)*q)+ai#0b5FdDS z+_kY*(l_mOnIh`oeZQ4EG`Dn)H>eDkcoNdm{#kjlZ0_o)EBtm+UoE?Get7sxVH8+6 zgMoNI$s8LM0?wphYuWSw*2v5xS^A2L@=A+!GF72uipk+15uUHu?$ck$*X|eZSbs9K zT=RPEP@AQsA7)AnVw!014|TzX{>!D|AXVPpwmhUw?ON9Me;#M~mx|!Soy)%m(=-}w zt5&?nc*|z?4kQpJ!vUFWr+;aqv8gHQ`?%a`oz9iDejNZP6<3~Uv0M(Qk1iQRSTeqs zH}&@V58Re5r!6ObNn^PZq8`+l2OLZn;xy&v`qtTOmb%|@YN(X9QcJMd1?|n(*%ba< z1v&hG!=Qc>v5Uhw!z!L^vbzC7*N=`$x#g~+qU8hTic)M*W%=9^X8TxU=dq(~6N1^9 zBmfB(_E*T?n9(&wM(Sxe=`+}D4r=dZgwX4skl33o4T20{c2JVw_YcUzO*^Genk$|C zPcOjtAfICTy8{?CH9SoKphHrmZpA@JN;n1cwro7+EF;#5nw4s$4xOzuCYH?>CtYp* zbWp!b%W5&5TF6Gln+%Y{%z4T~`h*ESWkgI27Dy`w?OuM3>>j*+Z&_1Ej0*eQ06G#i zr*1V&*{4?}<@N>(bbhcP2H;h^c>{>l&dYZC^~MeR>&A6_5;yu?ee%@m^YLndalLoRbcDHwT#*2*r;Ya^KYXwnr1wa5%l$mkk zu}H0QDS@Y0*0eCgoTV&=L&d$}v{An~- zO#?C*d}>@a4nLvub9#6m5fN42ApEqah5**EyX{meqm&xg6N}$e06Zaj|LM~wwL0r( zAPlO_KV`MN|31X`5J(}LO}Q-xFzl%+ZxZ< zDFd|jryr^T05w;5I|(v3NJ|D4BGmxVU0z+mc7L=5iN|1I z%uZw>^9}%!D$x!QjX~xsPlqMK zzx@;Ygj#mkX}u5Q_Vza4JREv{ZU9WvpKw8hgw@gwtkI8T8aU{;@GMlnZQt}rbvEkW40B;#2~V}dSwBJ+G zcWyEKmjIx-E}>{64woPhsuV>_96khqgf5DH{QFheyxS1Z(`t)>@^#3-#sXOMf;ReS z@r*)=T^M9S0#Ct=_mq_WAc=#px(@ac5fQO@w)P7z^B@_*N1~SvPDL5Gs?OQF#7&=-w>+Y6An{_3GHZWde=L?lf5hb|`r;=R+86UWt{DL;Sz&jk~d z+X<5)zJYoJ@e_|A16)Butpr$5SweEr0qWx7VrO^orFx)@0|PcP+vYCHV`6gFx{jx& zqf@*W6&3wJO`R!Upn#&rIf5Nmk2Y=U{XiU!``8zhPT&TGSQhdf-4MJZ@*>4yCIR=3 zXEg684A(S4O=*8!@nUA|Ff3y|IER?o=cBep7UKu)xFy{ zD=XtIqFdVkQ90VQzTS(cOg#7}gaiZxy#A(gPi65>KoCI5^Bg!iu~vgeQ`iu3w62TCcd|)YQa*Dgw^GHk*89EQ1BWiAgIEKwhwdkS!s18bYgTFo8@ZQ63af z-%_+aZR-bk$S%}*{ehO2R`j$!m*?M@xH3}~`JU+C3lvKze*_|P8@rCTWp6)3_Xw3t zt!`|17Zgwd=|u*jjPRfAp~s<=TUi;ovZ7O=?;j8lrNS_lV&p2`GptbIBqD-HN=gb8 z2H{d=p*70KPA-$*avjE0f2b)aq^}?Rx_jgjlovwap{?%`IV}@`?gFgIl4{{!g%McW z(6G9^{39oaoPdC!wyw@iV%#35?2REd@k_j$$*YGC;hgffTmc;`wI9o~Nps zniF(VK=MIQ_3Ajh$@U%yMs25$&+)T z_V(MOzo5J5rcL)jA1El=78dXc2?<@@+>+vBDE`dDlR# zx<3m~kqDA)YR3F zkB(Y9Iy&;4;;s#WOi1Nswl4ByklaNH0M1(2=ql}Oq4#xlb#Zrf_4UdU1t!k&9@QtY z7=%NB=zmd}odQlI{q<|>nn*-#gQAp{(Qh)JzLd`6z5g_96m$&vw00X>qN^L=7Iz7)14S5F|i07d9GkYF5d_OqCcN1u9l zc$AlygAkGikYI*T$Y_%bT7}Q}qig87HkRM_sD>Xwq3f+b;P&QfLe4CkAF-C2n%ZiL43IGrQT!u#>Bgy1SVDo7G)5br2zMX@N%dCX>PGT^br^9^T zq9U#b;MIO!G{0cMlBt9&Z923jjiL5mbQJ5r6gp>H3@o$Vw~ej~mZ2l?z zvxKrTVx>wW2Ef^~#A3#c-ojd#yHG)*=~}ko1@A^g0Jj5@b4VY`(I^&2Cf-1f8dUt) zZRQtuGn9Ht%;a8FT$X+cAim}0W!rzr8~_mQs=|MQ#QNzFUxuzvFe_Y5Xy}3K`3$PQ zTaqNOA|_BP^g((Q9X1Im;sz+{*|TSlmZE2^N{GLwnR=#M!TV8A5Po;61ny(T$Rnl% zd?dGR@m0`|e?Xqc+U`fo`3tRuA5>;s?ik;j43Xj*PM-`d&AlK*>uHYHR4M%qx)A}- z_S+hJ{ZtVV6=i0NSo-D)#HqB!GqMFSfLq%mJSV-Wmxt9E=SP2|?@d z>3MwYD>rAV?b#P5=Ia2>`UWJl0*C>Udb#cP>)C2^)2d|freFyAjm|;nk|D> zrc)n2d`J}od#Jx`9ddkn+A%aF#o>K$Fp6|6_z%~Oz%Vabm|;7;4Y@F(Xv@A_i1_x8 zynf_!xM$c?DA>leWQ*n=&W05w5xDz@HU7U*!?@>9{)dgEqMi>HTR%ZadWrJ!$zZ~~ zpE=#pnhjGd>#79rKwfNYMZlMe6oc!+P2~&Sw7Vz|alI9>26ja{Qgg?;8&*b#(T~oL zvbjB)=SEhzs+5x^=dC5HdufQ-_n+dEgTeayY0iDO2KEMAHsk}^LXyyc7b8ls1Q{e! z_;1p~17%uzs{-8PYJ5H~J3!)^PoJX&p&0adC)qk1AlkTHgdSZJNYeOcgQ7!a8op+S zZb(s^$4!>CcsJ>>xmuS`J2hj=@QAxwlfK7kA5UK}|Fbi*E$ipf z{5z>*XXLn8P^+-jRacn~r-;*UaDAfeb_a^}wkBx$E#Fq;&_4hCZqQZ%H#;J9N8y9<4cXaxQmeYhDbgCK~cwX!vCzY%jP2Ke(qh)dKOdbU<2 z_QIrM9JZTOSEEM;am-p=nin0UP~2lzyuBkjH1GC7ezN%i`vN%X*-JfIBvMxc#yZg0 z3A#5?rkN=sk4hDl*>ZG}Day*lqXoTB_JW@T6n)sZ6tamdKMPLo%_hcJ=Z@(fC8sj6 zyy-caReTl&xhTmUNjkF>KV12}cx=*j)-3KyilhGiJfKGqNDZ#gXTwdkncFN?XpE-z>7>+AbKLle~^cxlMV z`-l)?R9htFeh$}@vLv!KJh=5om^No-&U`dLKKn(5#j&)584o)g7+pjg?twzz93Opq z_*!Iw7m`1-|6%?HE&CAWD9dsla`sI0{N9tig}aTvk1;CSUpl#G8$Ia|}R z;`frSF}STkD)Yon5}DygD_X;4=@DJy%+eCkz?0%@-qwI!^ylY8WLH;88ZH)aJT*N1 zBZ>wmX$B00IbW z*$t6H3e7r_KN+(|50TC&%wmjI;~9*XlkgHW`}Y_QX|Fj*b5~h2&1K)k#B|dxPduC% zE~I#JBxCn<8lwg zKg>=`y2Bho8+o0I_-Alr#EU&r8#%)pURBEev{Q5S7uKJdaYBzE@?`Bhzhenq%`ZQK z59d%aZpOxTvWQ{NT4QD|$1Hu)3#wkO4j_~RS)lD9+Cks6LGzE-WnS(cX<7Ynhh7hjT{hu@Gmy(Cyn z&dB59aPD!NUqxx2h2_4OPCd} zf{n4v@B>Jye|ye}{AqW8b0hE^=1N2rlivq7XAM?hF<7qobCkbjBM(^p6&g+dvDZe2 z=&OQUUAoVe{Q;M*3%laCJ)K3zBg(_TebdFPkG}9ERob8Bq~gadO|WK;cNm*#D6%`N z-j+#0vvH2T&hJylvw7kZ?E5(%;EdBrn4&X;AJEYl%sRB$GBoKIUF~}{(2y{T0!AdqdpVPWNGTppfC2%p6oKZdQuAUWt80=3I7(C zs5B`(Cbu!s6O#NlSx*~n2!7R&kZ7XUe0ymaN*IRz-dc-x7sdw*NX=3j^ zq%t4&%z!XuP&~P8YKMc`RKlGskd@sTxaKw#rN;u9a&ai>a7tE1XeV zh8dsJsZHpu2*Khnmw*RIyhIEhU0?~H`^OEbo)5JdO!v(nr#^Js<9EbosbKRi5goBm z{vOE2J~}(|qUsS|XhPEsP3X<8DIPsM)|g*e4{7PH955Ab+Sk_MyjsmUe&YWf<^UhN zw|z=;If;+PKy5So&1TjybX#Ly_0lhB-8@H~Dap?t$zY{HOt{$`UfP_y?plnIuQo_m zxWGgKYAi~B!|qNJ^K%1si&y3IrzM;->ZiAi}wc^xp9`qdCh1T`@)P z5c2x{y{=NeC(Jt%3l3c_0)yq;AAvJ#U-~O?xodkKH11CvpV!xPe|t!k$L^^&^}}{2 zkK=no-&hh9FZ3>T$u@b%B`_=F`egX08}q(#9}`TAjhG|ziG?$otGC;1OBpZiQz?m8 zbB27vhb{*OYkfrB&3A0xPd~PL1}L*ZG3|$N`tI&-7+1FCil1H2DKFa3vdrIj^ICNdAvi9FGx!|k8XM3=r4r)kPyg>dlb6Cm!a3Ghr z@CG{gMytNQp0X+qw6OH00QUvTfapugkS```;yvxQcm-VEKu}^+L$=0vKJr1&<4sSg zIa(>pG2Jw_1&No@yX+E?vDM&51(1@G2vj4oB@#~NEL)_NlzcTxa&mKj@4e!BUC68v z&G!^o1^7=V&{fGK;(^ZL33v#2YHfY}%EmcYuAA{kAOH&RQ&Ev!T#`37@3Hf5lz^Tg zU%|mQ0`+xufUo_isj)gr%*!rpY@9E|lwg+J(UNuJmZ(Y^eWGfLAQQ86)~UMf^2rXNc`eE3Qz3r(eyO_AjA{;w41OR2<~ z7ZVjFEhEzo7>dzMc^2bVC$rSG*`h18rzA8bkFNM>5}TmO<2N9Eap|8CWW#jHp=Y~W z);~>TLxUd6Atdi)+aj`B{?~$pk_U(G*_L{Xbn@;pAxi%n1po;D8g_D@LE1>7e~3s+ zzjAgPSb{Ud#i7BCej0Bl_O~Rq0zZu;etx(#1Vn1%(M-P%_bXb>=Dly%hJ%UPJ;C?_ z0s^t?xlaTvY8tgJWsahk7p zs4QCU?7;${eH0eb#Duq>bNn@7B<(!0+ z^cU#Zh>NPLw^gY&>+OvouY0(^!Ow?cK>uqkBd9VSgC`_Rd5g+fQBiRWgqulK%dV-Z z7((~UPlzxQZcOA-$$>yR1YJK_;0KiY#w&Mk$`lLq*<_f{RV!?R@`0kr=5QLnXdFzk;|ij`zduM3%b@IZd2=%- z;WC~ptst>8ku{bnf)396sqD)xa|6eJ6flX|*w_x5E;LBD3MEdRfff1gFNyIvZDCUR zeNYp*9D>u+iNJWZj>kkzE*A>$PoO&!1%01BWuG}ice2LA!2(8uvTayW5(>5{86%~X!iGar$raOM&V4(r-&-(h81XlCN`~2YSq?8m*b54)zu@t<; zko5ciDXxfr+MLq#P%nrd)bzNE3J-t%)6)}nYr2fMCxr0vOqTIjc4TDaaHa7WZd7ka z2b_n;>C~#SnO;(ScjIQW<~0j~4fgwZq7B*G zzTIE`)q+I^Q}{~8wXUzPK*|!h{Nr!k#uKngIXLlfJf#3eMI1SC5e# zF4q?W>R#l>Tu|Kxw$Y`>7M7CQe0-+)tX!TSH!wOrm;D-$gXObLO%&X>(tP@_rQ)yE z;!m!@b~K*Ik5VR-bP<;r1I|Lq&aSlG5tou8_3axyn1`KFf_awB*6@2!<7;kicD;j6 ziKYzC8ch}|CuI`!P6)Yp&ouENj8m-mBc-6pVpI`)AA4i?bvwDa9IqhRp3Y3^ zcX;Zr18WvZy{TTz>!;Hfs3&qE@YJEX;oGL=jg4woR1_3xrKQ7^TLpuU8^h^@1PFxT zY&X7qZ}OJkc;NkG>_xNBddd!3$Gpb*!@P2tu)--c=+U#_)1WWrH+#O`ul z%SI%b8cRx&ruI<}GjgV(fL_0)W3Ou(8;&><%f(h7u2J@6Sv~48p0Liq zbYBMNF5gO2Xd{fI?w1Q%n6^rSc?OHGr-{S?*i!V z4>L5{3|1*i&*2UzVZpouD#nZv_J5Nw4D75z;P{*Hs^@K7Jq3 zXJ0H(cZF)Mw;%39x-is#YcB~28+b!|=eWOCMY{Nsx#4z18FGA*xcz`8g}D$z&r*Qy z*FEv*`y3*erym+SkLg&;zm38O($0x}!ue=Or0Xfa3+Tq!3Jt|GpXr$5>)RXz->*Lh z;@9Mp)a)DYkqPg=!n_H)nRuPN;9BTCr@`c1(felTKyao9i9roW)G#^AeFn%W-CsFx zltl*>idSc81fxE4dduz@GAFkkwP?zxcsyO`>I+fyc($Hs_DhTnk@eRlG3ffbwaTK? z`l|F{8Pnrf)h6l-H*t1_k?+ni>83)NK@I~p#dK4A7GJD^BZJ=k(soH%(!?TZh0>*b z*nXT-9<@@Ozp`&cMbae$(sYuc3kI|vsi&Vom6ppm_^vT=hkvpWG_}!4dPIc{kt^bC zVR}@3zjR=tg1da1I>#LaRPLl`S}RPtJ$iy&E@GXpK8alCgsiGH>^6j4aw)_@$X}yN zj5Xv>JI7|K;!LorWlwg*kx3`070csJ6g5-V{EstCYo3n>^?GYc7L4|{e(Q3z^E~kQ zKxfMhm0izB@NLUNV#APSs%OqY`rE`UP3m#o^AIFF@kW(|Sxc?8$G!^d9QlXaIdMCoUkU0kfC>Unw82AV5RMqf~En)(cEYBmJz8f2R5UKz>X z=r7wZ-v5?EiiR|oFv@fE9CZ&K2JPa3FteG z-5(?Nz#atZm?_HRKFmNEIrb9<2f2o25>>w+1JQ z<+;8@x}Q9Ow;R|^qWY%l3SZ)p*k;qqR_pDhI7lUy={gtEtyQ+YUz?la;J)J}!=O@p z16xqzr+1h6G*REsJvVWY;z>=yrB&o>+ZW61peCFvsf8@Xo3k_JXn}IruOUCPS(2Y^ z8}Z}R$;s9*Dkw)wT=85EMcytCA2C2$C zH4?7l7QI=s@&!rJJ_c(D44c%G*$bUy;`lN=o`}ORLiWeY921N~ zcS+b2jCVbOtCFNa3wSr{-J)SPZuvXQ_wTu@v^aSr?ig5-a9FPCqL5O!0%@^6iVdaZ zuS(Y@xRHw!2A5gp>^LF^5`DHIc9PGKcmq0szI6XMyu39hKVPDrm2%3?-=1?Iu&B`a zW@&M|wK9eo(xcJ+CF$Wp^Q!{tFlG#woWwGgd-vB@($NocuM%r;)$1&l-H|aizc2UO z>$AkrderANdyQ8m0ICichK!7iI<)lV6TRWkOX7ky-LOiJdoC$gc5erF*bhYeRI;(l zU)Gik=gdXf`~tW1F+xompie1pHq{$6q!Aox6FPRD-TeBNv#y0(gK8TL!<&DpmP@?* z+UqI&aE0ab%mkAKe_>Uep46y&qnj?!$0g@&Tg1rR412eYvtrEhzXHz)F!wb(>$s}9 zxrh&+xSJ2{reWUivo^ARR=-Oslh=la@>&(k>r0LQYVV2RPF}63h0G@PppMCRYT=i| zq^kPZ4jB-s9Lw6~)hL`hV_p+^M>uYl(Vy$>xO4!+j}@QGe!%c6&>GyjJwRESX+{Qy zQ-JnI%8ynAv29~;DcW4I?sg2PilEJ}#^nHrz@>|`YTKR16m+_}y5jEc&ZSG2xPJXQ zB_$=4m6c&I7?eLD{>V%}%v@YtaC38$fKv#ExOFCGS`_chNwt^}&8U8L{3Or3Z1bj9 zcW)aDdE#%U<|{aMF>m}dlV`W8drTIf`(h(=zxa?1kG{!@CnIf-ZoeTdX=x*t%{{ZX zt~07aF4@1-a@F>c#QX_ft7!2(zHKkM(OQ~jrm2p{UwGg?(?;GvUX4NiMf1;YVBJ9M zg^QggZx;X)J7r~Ml$V!Fz$rupb-?NB>M8-J5DqEM9%{S%V-azYv@Yge=3i%iu>^&*bH{|rk) zcCx67KBslb%Rd;%Rz8n??;ub0a8_=fG&S2STaP%hCzyz#A@D;*?eLK_4(B{T)9)&4 zF+E53r>AnDZzQiqpqV4Ji$(nZ_U=EXsVj;D__r-2C2F0hJVAwnIIN-~%R zx&(`h1T$DOe_+sI1n1@;E;t?Pm@uY}O~@jFY>3&yObleqnwhdJiqWA{x;USifhdV_ z3ke$?ZTCmt>$`1VD^M#E&nIc<`_&f6OHaYQ>u^=QP|GZqq;_@5+6s;bq*h`l9c9q^=PnMSA~jrvFj0t!X9HX-`Yw;clsmcLIwr#i9R@JKUu(N; zg;<`hf+;JN`5%V%UNcS|%Va14+_;1ZXBr~dVfFETxNb1pkxL=-#Hn*2Pt1e!rVvnG zgJZna{d`_FWQzbSNP|oPcVW^i41V8~NArS8qzJ>gXpR~h)%YOeO(S;cyk{;2ddD1o)fd0iYRE(mqT*& za^8HX+3ntDwEV&sFO3eO^T0t^rLLQTDE&%gGuuN=rP$RvApSl8?DshIwN|11s^8^P zrp@qfab($FiiREz_l1e14m(Eg44|vA9zFMbE{-)Ik7-oj_e}>p?KdL}k*D|0V~6x! zfefF;A#)bemSte|jyBlF9)8KRsL~?k@P1l2K_^+wXyNW$M+bc_< zNM!!ABNn*s^3PvNcAqCtV1~^{fZu=SpPL~|nqB4TQUyc8PlZC^o}(5K;rU4qde9@n z`@Wdrdzg@!)3+C^m+h52S7*75>+>M4E-Dn7K zI-o+~%Y24WnSzv6KxeP`Ior2pi7N|5s-Ofy>y0@#2PK;|urv#Q#Zg!q&9F53pIZD? zZ7A>Lwxj@CvszFs^dcP_M0?d*@ptktU{8_nKJQ`mp{rucqZqRhI^Qwiklss*(D|5|Y>8xp$#3#e475 zBtsSne$}9EPrxbDCh#ZBf&3*Q3o0JRqIAgTO#N4SQm|PY-yw9$Y!c$lbHB{+=OE;X z#+|D16p;XcvS=GjaR8u1=K2bzz0f$U2Mz~p)UJP{1cm@bJ{t3J)cFRgY7^>?S3>`g z>UX8K1fMlmdiC@SP6h4epPYGS=5!B^Bt_qQ8 z$KwHbj*B_69zGycJm0kGtI_FtJGAeE{ z^m-Fa>y5~a^O<9)-Gr|@W0=pTLUdLkD$6z_SIY&-luiL($n=A$3n#zrhNVwj0#dnf zF;dbE$bH=e#4DMAm0ikGZGvHm#JQoqmmj|I z`;fSndiWZ@yUCNxP#!j7qPGK1>sh!STyh^!Bmgh0fGlSVB38sg9w0p-kI#eSQmeRQ zflv1G#U$^!qDY1;iCKhxmSHQ_eH*_AJ4VRU$}=6sMfrb19=$8|NZZin*)-Jrh{pU! z+&+mAGNb70laR@y3@0Ik5HbyH7L$TcLV}}!lMq4(2@wsU6A~O14G}^JA%u{yqJWbS zLI@#*gcSvxgb+dqAtbD*N}Uiw2qA=o6=gUHA%qY@NLW$8NeCf?5JJN0f1H=1C=UBR Q=Kufz07*qoM6N<$f^;=SFaQ7m literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/tvm-device-value-flyout.png b/windows/security/threat-protection/microsoft-defender-atp/images/tvm-device-value-flyout.png new file mode 100644 index 0000000000000000000000000000000000000000..be50eefc3ba650e7cd2204ed09ca59c786f733ea GIT binary patch literal 20689 zcmd?Rbx<7L-!C{2!3pl}!QCaeTW}8$+}$lmaCdh?aCbJoMIPuc1^~Z1W1eyj6Ym3?~a(OOK*H2X~ zzvg<5A+v7{$-M+vaP0h+YIf53T0Crr=lD)y$s{3>k&$B}o@^HIAxKC_ay`}ciGjxj z!@$7c;9$!rbPV9xJnKuQ_nQ~%rrwIvu*-_`pe|TA;B8j1dTV+w-dH0~t1nE&wU4lv zKBp_ELme+Oya_m}>cIO=Cl*-B{-;&!Au7^R zb_p2HFhC>53h!<%aeX(QFqZf`IvK`)J>YR@{oBAff|dZF6@RY(pKeMu-`^(w|LCAd zh5VXDj)%ft3+_V)XSmwR@-ehk64||{uJX^9PNw_@9w`wKN8yJESr{j_pzC|u@*dTr6#BUwgboQ+-)v ze=F%U&&C`5`$-2>$4iQJH%5h}yz*P}lXkO~yiY)nytf=9cifu7awp*RZNEDzt&RWU za^NGn@!bW~2ovcMxq1LK+YI#aSE#fJ@_eU)Y4OtZj&1E1%!SikA^j zF7W*#?DcGPv=maj;-^;v8o!EOXjASi$?shx>K7qyTIvqkoAAK1tBeLL48&IgpvCi+ zMlX3j0!vupUBw0KUWGd;%-=zUP)PyeB8)45+NTkI$FKDEZ*7 zS;9U#dK{w_9=nJ#>Fq_C}X3S%*?P z-B*BqIQfuw@}0qm8rszZp&}DsOkSFff9VBf*%J!n{KZAKt@5bC&RK57-~x6y>(0sf zERpE?P6{^6k~^}!*JJebRP8LIX09I=)Y|k2s~g-NU#1NDwNUZpQ~{s=sYmxwqPP_F zD`86QRHznr=;|i#~=Bj4fu)bo$nM@`{milYE^|N zE<bM`e3XVea>{+o(;Bz{5r!--mz`RbBN@Qrd2A z5K0v$n9>BdRL+>6_1t(u+J*JQTkj7Z4eDvJ8$okE4p?XlnIDSUuU29$i3tC0I zJz+pkq_pM#xcvv6>_uNl{dyzrCip;0T9mLy&w9#tr(xrE-rpyDw)%>j@5m=)^ICvY z3>c(UPv{t}nB*rccjjzC8$vFMAv-mD{`HuW{naKo8R8L;wA!`czN@DT6fb_Tj?b^Z9wOVbtyAC39)y zgU4B&k8+arw};Uh&a%>nxERvY61_HjFpI#Tfc4I`mu#bsdgPOTil9XM$P0R{w=Bdw=fcqX9c`3TyX|(LHgS4!PAz{6Z zW59>*DU6evG^E07Jgh<^;PT`}`nlt41L24Dh1 z3o99@GUZd`M;7-2*GShI2#H=hke^vP&jq~E5!x#>OZ6l;;^0~YyrE93$5GDj(J&GP z!WIU6l?|k@c$A{#El< z!y7Oy{NXnP;^q?Uy(bw73H2y@L#4Lhxkr~oDB%+3uVZ|W!nYf99N5R*bgWO6(O_T2 zZ&8b=B7Ma+H2zM8u6tYJr!5W)U!hLCIfH*zL*}_%cqqbt)na;{>Cme189;0m*JgKz zcjM#V6@U8fm(R?;J(cnO-5Yd1zay;OGs`7Xg_WdZCX$ z`RNx|O>}?XrCj{EwBI8b^S(%Um&4qM+tMbKu!rxZw#Z#DU3nc@`8W*w879u@>dtkW zy!Ae^uNk{mEK_^90W0K>yy=^odtt;ZF(>IR*=V5 z9a+1BvK3wPn`imZHTj%}i}@?NE!omR@aT+y;^dc^@fHDUN4TD|BO4>|-7eu+`#DY3 zHx~jElh5bR6{TOcXY*W*b;@XX6sY-wp6?x8jb&hNGFXixMHvlLQx@zne;#yOy`W@y zIAZn91pKD9DT=w@V#24 z!*{0xwzbWTbG-%*Pl)H;Jhy2mg{eUQ9ud(Ay4u)10%muS1-l1vh0w|yz2!gTpCneWgg1puin1%*{K!K}rhW8Buqka$Y z6Hcg)F#-+n4VzthpI&CZ&2!}gpzC}#6L#RF(e`2K$}~cR>A5Cry+X+PP6toSy6H_B zHXkUo<_2wSe`53r;)WxpQdIBsV9rx$L zvn~%O##;Wshb(%#@Nq{9ygh5mi{%jri$h)M$~u?7*@ywl{MOF;mf%;3ya3pub@ObcS_H51Fk@rIQ zlH;(y#m!6y^VyjsbXfRmR)+!)j+{`7R59Eq)88&6nCd_WU?~guFaV|_p<&-ed3~(z z{mUNa2xwm6{a26DN}!g<998}03-#dtLk^k@z)DxIgh^##COk>rojiZlUqGu|o|ecR znF+hJ`j z$P!3CSXbBD?&+1d_88-D=Mwkv(qDMM5xTy{#U=cT;?<5M#+r3E#>M2DUE@2XW{4He zzP7oD+z0`J8N{eeX=$sxDu1Vzl*nqZM%52B`B>9*r>l&ZxN-RjDY9&Fy0?7)_TapG zjL~;42qAp2&_2(QzG^9kh$L-3A0v?>Jze^X>Jta@ueo~?^9_|Ps-^T`ofp+2yZYSg z`5&b~|Du~(GzX*$UdlT{#F!S|vG5Tjws?68UEFvwP#?4)XYKWR7nrGAI>*1rkzlCS zqoykLTupAT%gn@x57#=*X3*5dbRhH z)r^^ALA9gpw#msmxwI&xWjvj4xug&C=(*dIX+WGj-7QBO`m7JnN49Bj`^H zQf?-Meo$y5-$<7qcF1t>2B);>gdXW;B5c#sMlLyVCnIzI9qFN#QoZbj7#{@_7ylX- z2Dt0TVU$sY=o;2|KUaZ(d{|Q?)`T^~wxA|z)Z>zL?~bab3&Nz!kcN|81@w&J#X+f^ z1|yY2;hnK90#j2EPDWB{YoGQGGgDn7RCJjHuC?I)6+s+^J-=R@*aGio8==_zZl=B& zcIvWXExa3v@8I}?fxL13xD$*>53;NVS)8`?r(qXQVw1MID)zn|mFoif68-&ax{5Re zB~m+D)F4MUWp2yr<#}~23W7P;pKg^zSD_0=*A)-ie;U$jgYTFqUdon=q8nnp1-38G zba5@>ZY)x*nTDIdZflJ=P&%IUQBvO#21KlRulDL>zOPl$9yVI^r}N7&m8Ui`NVMt7 z%Vnkzcno-6LZ8JXO*utuP;5V?vbt-hCCcE1pOc{q9C_D*`?%%qd6{L@AdKX6^@1zR z?#7eMtd_M14xCOFXl*WcYM+~lD@yc+@q}w0tGOAN9rY!}X1L=HlE#`Tc2u_))z)Vh zrVB$l)O&j>hswd*J8922>wOyXh+V6xiMVejEPiY`iMT|?+!$qk|4OLExjXH54hxbX zW#GSv6!Q$Lur8A5hQKkfKgQiiwig^F#RT;9Tj2Ot`OPh8E%IBNpX8P;gb;e5_CW|pEq~kGg2ap(Td-f7IwP8=m7(E9}v{HGFdFHqUUQ`Mmgg>>g>V3 zRNLw$I!lIhC~7b4Z@Bov&5k$(2UkZtKFgqI2?-Bx<6(=t#|Z|L{+X$Cc`1J0v1t5) zE&kDW=_$jyH{Aze9}gS`swM&(QH<|)tq&^v49XH2#ijNa)i0<34O3 zuP>=_+U2B`!z1x86+RR%T63q5*V19kB~}*e`S5642Kl>9)|5X<9@<~FAk8+OY#nC(OBx}c6t1YR5y4GOMl>Cxt<|N^Erh@SHpHvKw?%6!k zfn&!Dyf)>|BC{%)^7o#$iFuaBC^Vm944-I+>E!8fOem_pu_g{TB4PdL9Z&gD4c|z> zK;*h~HGAthKxcx}Y3JA=pG%<~)(^cJC6n7h+`!t%GNZr|yAw3lcmwU5@1zOW{v5Yt zsS{|#A4>4nb{<9s^I~!|NXdLN#jApd?MeHmWVe zpLx;tgI7)6^t?hl2Tfa3s5Q4fm=M-&JfUF_U9gz;$3hVUj;aNFxXLox^s~j+H~oI} zgq6(!TTXn*U!1I)kf8$^+4SI)CrO~86qslkNPYc9^-6|@8+h|9SS%b-OP$0nNLbnpiZi}uRuQLaV(YA-;Tp)g^OZix{AGfqkRlTO|5KphyZ zKP8*4@McCW+d?bC`eVu`v#6k95vID?0Ns_~U z4;GPOCEUjg2x?%4d5IreLwrF*I&PV1kk7qAACWiWX@Hu%utJ}VCfL>lR zV~Z-S&-p_Em{jNhb8e2Jt`a_Pj#68sq}kT}IGEA;D~M7_S2js-BURL&EC+Xx_7CM2ou8?rrsFq<)>$GZjTj01ZcTPnp}o8Lt*h|4KBgaW5wp#_Y)`C& z9He10PB&_3sk7#JfOp zq~TBe73U#N(usFf46TpJpK1IQbIjU)!WBW0%zFg|RN#PO{INq3{|br5vFTm-JntKY%TwAmumXojAC+b9XQLbVz+g!>rnq zH@O-%3DuN-xM|;YD}`03AdPB1w!?PxK8)?9iWD%AF$7JP%j(0?ZDDh6WyE#&O3Rlt;WOayR(SUl~}R8BGvaC{d0gQetIvOj z_6_9diI=YGJpP5&#+r8Q@=xc}<0GG&tL%-33+U|8!GLb<95+|U(b9@0lHoUdI?%aM zltt`GYGpiIU6N+S!ACHha^=Dj@_l@r&dp6gUrWO zt0H#yU-RTDlwyn?>w3#$AdX(zzp)9rteeJtdE+Gwf}J38z~=QgGjKY~b@Wg5!*r zc$fGMQfoUh5yqoyI()|1d=Ao{;&umWd$D#x+&mL5N8rFCBy}~CY4aW>-LI-Yo&yzokl8it5+{gz~HfFYp9fWw_yfPUI!0$h_WiYF6zLT zmYGUPtSsJK%}GuzJUOY8-EE^#I;_2<&(SBa`K$JF-JZ(%3`tu`;}##dZbxzrO!`qf zFP@omnI=GS){Ue{(R#`<67o#K>Ul%o)dnf}E>}w}LRzyST{3H%KNn%)=b^g%w9K!EPu&0?KVHnl>&qYqAT}>{IP-l^)1D{${A980d_9Gv{4w^Z$+SNRN*6lDS>XJ4Z16VMEw5lWY3{oY2FX}5@<<%1Tk#l)t*O#lIoW zDBSVLp{hjW<%-x_s5?)Z7|c^F~l zu~i$Fr%<-yCb{-Y%(760+UND;zB+0bzJrZ5rV*Z@I~8^8{vnzY4}ZB~C$^Sycduz$ zn!W0F=QOaEM@LM4Ak&@AfCKkVbIDN6w~?uX(V&LPe6ai%GDoTf@m=`!kYFEtV)8T3 zx4XRAkw!5l<3q!xXO zPw8!&XDFdn_!J{SF#>Rb@QqR)u|5ZLUfF)(-{%=8KNrsrOoOwPQWQp8W%fF?GI}-q zHGahb5R7Ut^2ijrQ^$6(8+$M=Srb0HP)J8taQ~+K}ebq*I1?86J;sbXdoO0h^hOl^ew8c z&-yJhgZywr$`;N05@Bi=ICjbjqzEp{of`Wna#C@utL#VY=c2ACG!lk;;c$L_=Cm0h z)C0Z;cA%ueE{BxfhDB~~?t3%DM`WrRrGcT2bs6ySwd7>L7Pbjn&5)Sz4>Uci4+7dH zRPCJ#gLY+9GX$6>T>ZuraHUilj6B|%q?|gKi5)emUYd2>5j8BbruYhpe8i3<00#d8 z;s0){U%!8s#;dt(Q5A86^hAsZt#k4bxzQ#}-?j=)o~ojggZ6_c6W5A^!O?eVAGzSc z{>e;`ts~A}5Rs~!Q(h?>gq!Xc6&&d>??%K@4(s!w{lgwsUrE}Tz|pE2n4|u42~j$3 z)(0(tBe&wL-fS2Msv3r!e6?i{{TZ62@V?W$2}X9e$nTkRZtJv#uRSnJw$8*Dc>^Fp z`nS`HlJyTJKxW{dEWl9H_hnVYmvxkJF*UIXhpYRVkLVap^_g_{G{udcNwk{RK}A*O zwuZ2x2wAjJdfFr2#A>SV2khMC+JES`Vzo;qb2mU+p9!8JBH7Fn?gU0Q>U))d6LgKko0KieDF!}qMjjWki~J~0 zf9Jnww+Z_CNM@DDF#$8CJ&-7Cikudc`->LW8H)#cecMl|u(>n;^RE*Au{KXziSoY- z^wNd!?7F?W<{9M3ky}%Xb{zNQ^jJ%$H@B7-0=69_@f>9#oRIGdZBz(gjqTfa6f~om zw_M&8ryP>^*2?7Iumyi{ufr=gMTHDaR_(I9uk4a%3g4#b>W|K5 zo1o8!o&xf28uPVZD!O^)cDT#rn}A3u;4Z}S!=BN+DFlWCGDn{klbLe}z`mxY!Ykin z+LOm0Nn|r|*)=Bo_PMinO#Px(L)}|XLn+ca`2{4#MG8eS2S zpsan19^HGH;(9FQ*8Ckn*q_L%hh0dz#~h^Sa771W4~s=NWH>U>psF(FeX$eac)e4O zi6_LT61I{<(Ki@`!-x87$bZ#@D;DO`RdIiWg0igRQFw@=W?S*2tla8VKrggw@ zPc);!%3+{@wWExqeiQkN60D}w$`|S5`^cbR;}s>O`-cp{+MsHA7%rUmw$(!3xjnag zgo0EcJe6q+$s7lvr-Uyt@0XrITb;adZTi1nu`g%8v$4ChY!?l6JH_IWV!Wt%!V#&2 z3Kdx0voqHlmJL;WRaNZ1B#VQT`UP@23H>bO9UyNodPqTo9(NsOsTZbli%87ROSmbw zcau>!j(f5P4l$cD-Q24BZHAN}>3&I;(C6GqhAU%-JK3t{6`EuDA9%a?^LxiZ!>2?H z^b@KABrT@Ll2>-XKQeC(2`7)ZixbVg{b1lEjx!#gMPH>bJDp=pKR!kK5g*|VC%$Bk z#+>sDc6M!WV=+guYhe91Brru=`ETrQR3T5A5kc&(+You^w=3pk#HMNRRb-doYo=2A``JCvGo|xl+_Um%5jl z&+c#Y0+(HGWIy4Q|EnKIF=x}d_>tMI@gU5>=CZ2?&2A!z-bwJ^SkmiqwPYU&BEEYtqGt zw6u4$-R}fK;#zAc`!zMPv6iicD{+l^an1~+h;TprP2v2xW^e68fjiK>pdC)B#u08g z<=%C+<4^Kla=vIwv5xuLfqAsSbg9v5FEGc@x<5xb{0>FT$VbMFtyPe>lZg!6HP^Vi z{-akCk@DjqWoZh7q--8LfdQ5z*K=y^Kt-udB&6LM+mOBc#Jj>FGC8+%2?V``Co*u6 z7q1mk{qxn*{H1AgC950NX4Cd;0WuuTnaVjsVQVKpN5|kqf!k3V7L;8mh?uF7!k1bE{^LRVj}V$H~_ zwCaCrc1~hPo7VpNgcuPHT=Ou)up^%)nO?e{+vh9G%fPE$sH&dY5m73eG!gfTaJ#Y2E`KJC{-%mUQ@#+;f zb2iiv!Qc)<`Cnfs41Sx#%Zq7q77z2SamC8E)Znlc#`&YC)eEiX2RM8h5_Aii+6puK zO2Ng0E^NtIu$1K5nhwnLb>WJEQgK1YM&TRfvw8Ni6P7am@;!$saq(v zJ97Dna(zzRTHYGx4FzWcRB>UX;}SZ`Oiflzd>f!y%D6A)-T(wd`h97RBq*~%3+XD< zv};nds=BCJu54X?%{JV5xew&-`f1jao8KzqmS&)SKzO1VOhaPS9MXtnrcDU|{M}tN zbBgx?@xVx!$)#iwZ6VCSsQN=qVwGqYnpdpBl3UC z;aq%eijvLl`|Z5lVpAbQvTw5l7ueDN!UNf2Q)7EOK%GIX!>^t&nE zBhga)1R;fDu(SN!fi~WW{9~xv$&^m;<9&AR>1KXjW9y~(?Is3tjE?27l2E2*d`8In z9ZR_k3otZ5&!!SsjVWT5wpbA!TWOz*2N)bbkdMtUYp)J3LI?2x1udnfl&M#1$LR(H$!o=%Fk-bL`0m!XqT~2Au!>q%@SXQNK+ViDd z*kUznEjqEgKzX?Mg^U*t;wuVp>h?@M5p}4Af%p)A9AnM<5fPq$3Sm;kLQALnnD`Yi zRxdH^odu81=Wi5?<`tHr5l!%sxwu5s2EQ>klqkJr&R0E#=n7&;qKk zS$}BqaX8?_8B^B_Jpxr1P<~5+i+}&ij&18LRqNFE;9&N}!ZuF&xs#sBWv58JS%aC+ z+6_|fyx~v9!mWa+$T4)5a!I4+@cv<)N(9an&Q7mpE1i{Vk^=1^5Gz~cwHa6o1tgFe z7t+kTPlx+NK+WJ;*M5y?e)UL~1`O)|1WEtbO7dS)rvD!uY$2wm-8*BXeu&emt^g`f z0>2H!gET1yB4Csbh(5TwU%1o)Wvc=c*Q>j9!0+yCw%W0xOEuoA z#6e<@CIe_fN%TrlXse%7kaa!?tIG_&DbR3el7$==x3$fIv z5W^Iwng^AJiLzI7b5DSS4E%69tGOK)xY2nI$Ue4O>~uIOPta~Lb6LrRQk=_%z`SE1cf zoZk3jHFfvLw_-xy1FrtD72`Wq(8c#-MXQ0DA&8lY)a%&z!4blw@B*G&<{wMblKZb$ zY1YN}Bl7GOA5#Ywr~oqm;~Z5`?-+`_@9bVL(NfsR3m4MUsUS{ z2jXHVYN^kh4`F^)=nY%$h>05yCTYJ9NY1|SZLe{Hsj`J0h>@JI6Y2$nsb7XB7zl1k zh0Z6VhQU)O4kLO@ZDK~=UPdxs+%qALue((ur$};#>U#{;UrVmS9AtVrYJ0|ssL_C} zGnaA;gk3a4@5j7~|6v1iBjE-25A}d>zRSE1QH>XN&~W(2S_73bxOg{O*W9`n;y!pS zrA7g=$ZtM~)m_$c1i{jDKnAxUF%j4c`*^FE5QC0%aLOdp~zCPI>Bw;M<9kEeX*yBvTF;J|ktL^SlWv z1kftix49-#d++atoP0=wN^8}zf2{;mm_hETtv<*Gr@!igTj~!R6G;3!Yj+HA_NkO~ z=7zqcRy}O{7$y}TLGSY<@!&AR*Tk&ac_OqP$$-j^j>UX<4SYiXN4=W~ZMC=}$Rfp* zj#OrfM#W5ZvSvi9JrDKq4dhE@JR$K1VpcKvKmLdeg{&RPfPO~TRf!TM!s37RdIFYX z7U%U_UkS322O^o~@4R)U>3h9#ovW>z#n##7+#^G}*4qTwgNW~CqO$%xf4+P**O&=J zpn*~DTT?_)h4+)q62=Y~jSSWuIKq~?%jG+!nJ!(_fZnpgql)kF5>1@GrpnC z^2O|6#Wz1()oyYIEVlmQa1tt`&m*%evg=yeSn5-urys?*-+%fp$>T4$m zE;>CXHtg9cc2aL<)-%QaJKSI=QUre^Uk*~OXr!CqIZA)^Nt^6s4mZxS&3lC&)8vOy zjm$cN_`>wc(>Lpz+He1&hfNh+VcGX<=)Hs=!SN$u#vpsO?~CTyP4Ha6Ak-8xYQyB) zH+c;==9pPui&KncT}V$vL^e^~d)lMA8@EAv>+k>wfq83)Rs4Ze(NQ(yPY}zi&ORr1|a=}>HL6nWzp;DXD4nq7_>4k5xLIO2yWD1kG;OkadGR7SQZ+=bk?P{fXD ziICy)cO^mT_0Ce$MP!57fCFYAdroyv7&5Ue^PQU4b`VOaLH%zC_2tL1D8E;3?PZQB zizq`LhHyYm&H~iChAd*D#7AjZbPUwgBILkf2{NL;ZNu-NC z3R+hF1O+M6eyZ5$M2$fSGH~~Kf95z+Fx>8kzgJ~ zHFrWsa%|S!X%Hxw;;g?^kuieM@>#9CHX$xzkq`*B&wI5sPM5Tbh#WY*QC0`t4dufO z{(PZ;>}Gz7&4RribshOT9tb`ffM=?=BxK<`>qYXCf#zMH z^<+Q&oI0Xh4aCE4uszFrU371Cn?ee~UFS4+fG4FF;sSuf{^#WC599=e`dX+Hu3s?oxizP55w+ncP~tFy!h`DE=cM2?fy8MY&jc|k0phCpCwU~ zkxu6|^5qs!tbdTv3hK81k`A6%{oQ_Y{fboV;PaZ2nTZZZIES=W#wA2*tz(DkYFVZE zD=0523JRM3AYtU|0t}pZ=Yq|wc8K(ff=p5hFV1tFJ4w8tD`o31bN2)%*r0+p8%+}f zou)<-PCrDI^{wE|JRe=uOXejN9G;&oV(oWD=f5*^w4_5VS`HA@oV=}%kg^bZWI3RS zgjtaspI1+#pug*y?$wG|0RE1Cub=kH*DKf&+ESm;4gSJ}F+AK7UX+cpg$nu)K#Gd| zxY^47+6aj-!!k2?Z!&?nP!bU|o_=bS!hOwxij73N+&zPK1F#B2;`%VBhc0SmN%N-vg{ahJA z2AC~#yo%$QOD3qAEM|-;Fbn;jtUMR>0I^r;tYYdTl?KQ+EQ>Pb2tuA+h1Q%rCgM*s z7ohx0@zn=@bV|W@$Qe}Mnt9A;f5{Mhi_rTUP5C_{v|-`kxQvKnM5R|?&&HJ|eTCj% zE#3MJ=<22PbJEH^g$>5f(Yky$*`|bretp-pmf8SUQLb?74sSIxYb>z@0`(=42y|3u z)z`$0?EFSCy8qRtM&OtMtHPA}`6A<^)07nduJs^>+t=X;Url122z^_{ANf>EM)ut1 zV=PMATju2G;&a1728QW+dtt?kj~t4Nb|~ZFWQDo1(3X?FUjUKk%R^HDf!8Gy@6)AH zvOL-9nfuvpUX+#0ul|bb3Aryg{jz;2PwuauqYDMfODnH>t;0&+8F@IOHN4NwH<}s) zSQoiCzBVxvdAggyoQ2Ml*ev!=V>+YC;SBY+G=HruKYts+9cf@dG|?GH6H-itBu+<7 zy1w(V8xfueI(a(=9Y~3>W=XGSTfqJZ``UmYI`hIh0}!k+irRY2>S{ah0x-h)ibxf> z&np|wzbF<&!G!WtRGfH>jHDW7p`r3{z7EdcUpP5K`ireCbc^#*^ZlotzhRVS+0E_S z7!3W>BKwVx*O*YtS-}Q1QX1^!4HY;q#ppw zDMAM7!u-x*y8 zcR&mWwQlz0Kx{(+66$KDg2fVmQQTd1KQ4>2ZpXNCYJE+~fXu7Dhz<>Nha}1y0*HSr(JN~wpqlya`-v)GyN5pA*;wEpd3QWtC)1A8 zbkv;KW$*H9;+FUh934yHT|(Rou-Lv$uv5`xeF)m(wNM|iv(Ij(56onNARZDCnR!1v zEyEryMvEtU_vtJ_ggSCj7F*D#-47@??1m5Y#LW=EM70#9qoGNo2LgZeYaw(bxfW1> zSZWOdq9LhyqK^0|$aC=j#+ncRhMoWWUd&gPd`Qnidg5+8onZ2$GZQu%%CwS}g52z? zg(eQ<&9syHo(3Qf5p&2KSINvwnxd|s%|Ve+ zc_1eW@|bfA1U2nUdnd&NDexiQbM2k>Yn|_E>+7?}cSJ2L;OMm*ZB^F#=x`*vJNIRp z><^@0Ye3@Kpk?b7;2fu6)=o(=6Py#$$S6W#af# zvzSQ6=E)Rkyf=EHq`h+Zx>2B9f_-Luoc69YbFd>ZahpU~J=(nuu;iWg0Au{G0NZ(P zx3%z}Kx^85B4(sVewU$zRC1?tELmAZog{yS_`WRkz3C&15yB-C4|3*3&h_b*H=4B%;#g=R5~uZ%RVqW_Ula?6LGOY{2zj z&u!?ZBQEhX02x-`LITqpk&wr(`v0@OyWf(=47wr#)BcNH- zO)SenxhYjxuXEBQu`-q;-Jo%7to&Fh(?~Po;1ZjvMxMrk9ZPn02Xoqv6bUksp^&(v z8b9^2aUsu?HMG+cjc>Q}_h2$A5S&V7K4X+EDZ+?gkycR3;5A{bsg&ftd~o~^b?c{@ zWPQE1!Rs0}k5*k-^4FERv<(r+N}9`U#bDSN8|#BUsc?;tjyziYdeu(1V2W<%9A1+> zQQa&9&(NS!BDM{o>_37{1@uf?^zoR@UZPEcMpOfwWrA;oh-HQd{T}ME-eb0$inMr3 zhdB;98g^7@T_|pl6V396q*n4O)$oQffgg~Nb)qcw^xZDUz^9iJ^7{NSzTktNyeR(q zK#!X|htA!-bOXXQHaIA%!VL2N$`A%U(>lkgSLyF1N#c&wk}56h_W^QgYeG#2u&*`g zi(2k$_MAIy6et~~PdeTCEyjd@jE+A}=YgM)Y7zdq3C=(ITN z1M6sw0}MPOqW(;|j#jP7EBMdMQ+r6h5DR<*AotT2se}U7!jT_zbgz!s5P$4O&!PO> zvvNI2;%lgH>?cq#haETW20fHwUHK>0<0#93SHvjKJYj##87k{ANqz@9WlSN{rLNNB z^_z_WoR)YVFdA~GBorA0kzN{|R3krvMp&xC3B(S3*OY{s{`I>UNhDNm15Z#=y;zG% zTdeH6GDUU_s8BnK+b9gxSH-|0n2B1GwK62p*j=#`8hZf zYtW~S+Cf(r(hz{6?(!9%MFqHo8HDl9abO$kf6y?X(%sfQJv3VuE!niy5&$|wa8}B& z*^^}E#Bc!Jxi|&O)`KHipm99`@|aWaHF_c(CVh5Y-Ma*S22Cw302l|Be3%4OIT1{x z5M$l%Sp*+U^d8EcuLf_n9dUu?)5m`8sPD|1J)c4(*Ak5bUh!2rKatX z`+oZeFHN;#Ly*3vi~yjHVTxJm9vLv-4wEgfJ3{`|84deO&LfJj8Rt9NEyO0K>Z!XW zF^#Rgox90*Kp-Ub*Z&JZIaZ`4&Zqi%x>isEc2?lXeOy1keV1yKq@7!FUP#9^=fD;v zMbd{SCV-vV8N*JL%vZk8lZ8fOtjc@kO(u!hTuc!h97-~$EiGNMdEw6dqN$l02Cx7BwgX@~-s)9CYtlEGi2)oe_M>aVyzx}5 zb}~so65Fe+J_7LYCQl|VX#}v)Qub=i>P8q+SUx!mX%F(x6poR4QZfwaTTE2Q7h!F` zo;tCqlJkIhE*U4LvwU!q5Vz6<)`$~telm&jJLZ(M7&lF;)~n%6+o}pmjxukY+X~zu zI69lMp^Im*@^rFOZbzMAqq}%T_o=RFMN^&~>s2TlKLpeO0Xy+XOMM#^W?<_o&gACZ zcrb!_+B{&nCDFUs(_AP)2|VPCR88 znkJ;scbVRI8b>RBs~bA%1mVQaKXHwuQeUk%lAxVp6-@-0a~}EnWQXkL;VjvceO4e5 zZC)grj&Px#w0?$)1tU5ZV}@);G&>&<<1pt8F|b66^R@lSM|wjiXYOnXXi+mQg2Y8tf8D26*75Zz z#KAIZaUAQ$o4-pUe&*-y_e#5-+CI4Ig66$}zGD&pMb0|K`@Pp(`KY6k)b~k2K)bFz@5;S^QzQU-rc64+r$f!j)T z_f3;{q@I_?*$r^M(2C%E3CmT&9)SqK|CF`){#k`FyhfD3!r*{<%G*|p>oH7P0`qeM zpfbL%bM@vAj$A0T!_aZ<%;ljXC>Avm(Rj^>>uyGCO|bTiDV>N$HCmg#o6Y<1%kR~c zTZaVTA`-QQh=|$WXr84FgcVFCX>tZnEVjRc zdp6Ftycjym_@^wnoN*VXm3j=fR-CR?15_Mjp%u?-v7IO^zIQ;LR>Qj@37}N}Bj z^bHpI$W}_lGz0v?MB$qU|FB-{NE;H{PZX=(|GZd^FTG|Mf!CRKe~S<7^1zOt0n{&0 zOz>|WW0`YYz`cdhF}`S<@56%&UYS#hQy+FLKub2ESQ384FKl4FJp<}WElS*87+$yc zKjvy6xb4(_jj#YhV5$JB=3Fag;wAD@|w|#$Z-cAmwKWT*YF~ymx#&-&Z9fN zrKD+<3R6OQ5|;jf)F2B#1L-qiLy6KMZwrr&xy@kK}L)Ps&$LV30%liM-%GLify}t1eD)+x?V={d^7oahXBIO||zvq?#k^i}AAkW|vBJQZU@qmEdmd1k9w$(U^% z`)E(+viAv>wUe2j7=#h&i%*oK_lH{HEOrEDIOdn zaZ;!CGXY$F5f7$fnDVuUT?+b|2hM+k-{J9v?nMSU93tB+|wh0{k`RYbj(rAMcXc!m7tTkfHm zuzyov9614_3Z1G#zMO@up2WWtx|?%tAU}~9hr&*^IVN*X`1L}u8Ijk;yq)TrZlM99 zLNv&Gv$DGsSpuVcO17VFsieWcx4GEmx_RGW8@5$!*BkLRfI4Mgkes|8N9Owmg*b`f z>zu?|CTOV(V;aY3rvelu_$V$x_tlurobsjrP=lz?yDsY8`BUTvpPcb}?eqHYuuKNh z4+y+@yM6C#+>t4afliDYo*v2&HoP#Jt{6 zUT)x=QppjS2DdxIrSi-2`Sj5jcg>288udLmQF%l`EXV9d224O~m)$ndoH57a;w^;w z0Z+CfvlBEh_K{@yGU{pHfgo zKe}art?rD|pV#7M58`M4veL+Wj{sObf5q96f!_Q8JV*m#T377Xu977e#nXKf{7UbS zq5Z)Jz^28+LsJA3%qJRCnMm*a>(ne#B|gW|Zn^V9wa0&}*_cn=+SyD!!<;*902H{f z-V>lq;|+fNM)u!cKeky#JnOy z^}|xzl^uLPVGf?jFvPoF5_M5Z9$916lhs%?%KE^JIY5Qw6XEjP_Taw2meZv5OI`Pl zu=-zA7=f={6-{QbAC-LlckfVPXs6z<&_~DJlhG&AB(1Oc;vR%c2}^pM{rf2tlBpY_ z_N$Qddq}V(-DD4yzrRsIKrl>;bi<)ob%lzAr07IYC*Ay@XW*>{| zIkgNtIHC9o$7hrBn9HU)1Lx9d+1%$TnP1&a#kTqlLPe*3sqpe zt~`y0z&9wyYW=q-s^j12dZbjftyI8BBpX!c>x8U~g`>vD3^kmOL}uT0wD>tnKrdWq z$c8$zoC<;{+b-xiP3pvm9aqFyo$16gscE_0Eh@6X*c{^?q4S~ZzmlRLOgs)l1iY+lFE2rl8&!C zG3WBdic$Np$5kes<8Ci}q&jT?0ED=?x6#6yyG^yw#m{~%IjehLXK?U@GO`ubcc_jn z>UnvwcH(GdF=v+EIIJt}b8AfWK9&dz&Lu{mW(C@(8(p&RM|zk&H3W9j;xvA{=D6h2 zHThAb3cv25z_Ri1LoRWfEUdF#Ydqs?qQ+-BTwg+bdC_N{^`MH~tgF|3q%Q=gez#gofy>=%bgHJ7^}$Q}O&)iJATeK(Xx(M!M&F zU3j?T4abfC@$s+9`ovbGW6k!K8S`VZ(=wK_ap+JiU+48>{ri5~ye*ksrR8vg5w_~; zg7m&c&)W`#AuJK?vg?(sbxt+K-izJ7?Lp%_d#p$&tix_Yjj5)0EqAcB_0py3*Yw3uK!N_e>0}Cx#mfnKdbA_hqefK Md-{4*?g~l$8`7s_sQ>@~ literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md index 7084b50423..0f5af6bdf7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -36,7 +36,7 @@ ms.topic: article 3. Enter the following queries: ```kusto -// Search for machines with High active alerts or Critical CVE public exploit +// Search for devices with High active alerts or Critical CVE public exploit DeviceTvmSoftwareInventoryVulnerabilities | join kind=inner(DeviceTvmSoftwareVulnerabilitiesKB) on CveId | where IsExploitAvailable == 1 and CvssScore >= 7 @@ -51,6 +51,7 @@ DeviceName=any(DeviceName) by DeviceId, AlertId ``` ## Define a device's value to the organization + Defining a device’s value helps you differentiate between asset priorities. The device value is used to incorporate the risk appetite of an individual asset into the threat and vulnerability management exposure score calculation, so devices marked as “high value” will receive more weight. Device value options: @@ -59,18 +60,24 @@ Device value options: - Normal (Default) - High -Examples of machines that should be mark as high value: +Examples of devices that should be marked as high value: - Domain controllers, Active Directory -- Internet facing machines -- VIP machines -- Machines hosting internal/external production services +- Internet facing devices +- VIP devices +- Devices hosting internal/external production services ### Set device value -1. Navigate into any machine page -2. Select Machine Value and define a value -3. Review the value in the machine tag area +1. Navigate to any device page, the easiest place is from the device inventory. + +2. Select **Device Value** from three dots next to the actions bar at the top of the page. + ![Example of the device value dropdown.](images/tvm-device-value-dropdown.png) + +

+ +3. A flyout will appear with the current device value and what it means. Review the value of the device and choose the one that best fits your device. +![Example of the device value flyout.](images/tvm-device-value-flyout.png) ## Related topics From 062d2454e8643273c6ae95d79407669fdd99a6e9 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 13 Jul 2020 13:59:29 -0700 Subject: [PATCH 101/589] added link to redtiger video --- windows/deployment/windows-autopilot/windows-autopilot.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/deployment/windows-autopilot/windows-autopilot.md b/windows/deployment/windows-autopilot/windows-autopilot.md index a24ff772a4..cf333e1a55 100644 --- a/windows/deployment/windows-autopilot/windows-autopilot.md +++ b/windows/deployment/windows-autopilot/windows-autopilot.md @@ -48,6 +48,8 @@ The following video shows the process of setting up Windows Autopilot: +This video is also available [here](https://www.microsoft.com/videoplayer/embed/RE4ATOx). + ## Benefits of Windows Autopilot Traditionally, IT pros spend a lot of time building and customizing images that will later be deployed to devices. Windows Autopilot introduces a new approach. From d8b1e9f52aa668bc9b559611ad0b0bc06324ed6d Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 13 Jul 2020 13:59:34 -0700 Subject: [PATCH 102/589] Corrected [!NOTE] markup --- .../threat-protection/auditing/basic-audit-object-access.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/auditing/basic-audit-object-access.md b/windows/security/threat-protection/auditing/basic-audit-object-access.md index ba5fc0f8ed..c3bada3ea8 100644 --- a/windows/security/threat-protection/auditing/basic-audit-object-access.md +++ b/windows/security/threat-protection/auditing/basic-audit-object-access.md @@ -28,7 +28,8 @@ If you define this policy setting, you can specify whether to audit successes, a To set this value to **No auditing**, in the **Properties** dialog box for this policy setting, select the Define these policy settings check box and clear the **Success** and **Failure** check boxes. -> **Note:** You can set a SACL on a file system object using the **Security** tab in that object's **Properties** dialog box. +> [!NOTE] +> You can set a SACL on a file system object using the **Security** tab in that object's **Properties** dialog box. **Default:** No auditing. From f071b4e68835a14d3a07b005d3a0e8f78ef74ca6 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Mon, 13 Jul 2020 13:59:36 -0700 Subject: [PATCH 103/589] link updates --- .../threat-protection/intelligence/developer-faq.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/intelligence/developer-faq.md b/windows/security/threat-protection/intelligence/developer-faq.md index 8bf5c9b5f3..d28d6d20d6 100644 --- a/windows/security/threat-protection/intelligence/developer-faq.md +++ b/windows/security/threat-protection/intelligence/developer-faq.md @@ -35,16 +35,16 @@ We encourage all software vendors and developers to read about [how Microsoft id ## Why is Microsoft asking for a copy of my program? -This can help us with our analysis. Participants of the Microsoft Active Protection Service (MAPS) may occasionally receive these requests. The requests will stop once our systems have received and processed the file. +This can help us with our analysis. Participants of the [Microsoft Active Protection Service (MAPS)](https://www.microsoft.com/msrc/mapp) may occasionally receive these requests. The requests will stop once our systems have received and processed the file. ## Why does Microsoft classify my installer as a software bundler? -It contains instructions to offer a program classified as unwanted software. You can review the criteria we use to check applications for behaviors that are considered unwanted. +It contains instructions to offer a program classified as unwanted software. You can review the [criteria](criteria.md) we use to check applications for behaviors that are considered unwanted. ## Why is the Windows Firewall blocking my program? -This is not related to Microsoft Defender Antivirus and other Microsoft antimalware. You can find out more about Windows Firewall from the Microsoft Developer Network. +This is not related to Microsoft Defender Antivirus and other Microsoft antimalware. [Learn about Windows Defender Firewall](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security). -## Why does the Windows Defender SmartScreen say my program is not commonly downloaded? +## Why does the Microsoft Defender SmartScreen say my program is not commonly downloaded? -This is not related to Microsoft Defender Antivirus and other Microsoft antimalware. You can find out more from the [SmartScreen website.](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview) +This is not related to Microsoft Defender Antivirus and other Microsoft antimalware. [Learn about Microsoft Defender SmartScreen](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview) From c820645fe7bad32b4592639b79022abf9eed5238 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 13 Jul 2020 14:07:09 -0700 Subject: [PATCH 104/589] Corrected problems with notes --- ...ng-system-components-to-microsoft-services.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index 8b92505fa7..b73606d090 100644 --- a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -1550,11 +1550,10 @@ You can control if your settings are synchronized: To turn off Messaging cloud sync: -- Note: There is no Group Policy corresponding to this registry key. +> [!NOTE] +> There is no Group Policy corresponding to this registry key. - -or- - -- Create a REG_DWORD registry setting named **CloudServiceSyncEnabled** in **HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Messaging** and set to a **value of 0 (zero)**. +- Create a REG_DWORD registry setting named **CloudServiceSyncEnabled** in **HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Messaging** and set to a **value of 0 (zero)**. ### 22. Teredo @@ -1642,7 +1641,8 @@ You can turn off **Malicious Software Reporting Tool (MSRT) diagnostic data**: - Set the REG_DWORD value **HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\MRT\\DontReportInfectionInformation** to **1**. -**Note:** There is no Group Policy to turn off the Malicious Software Reporting Tool diagnostic data. +> [!NOTE] +> There is no Group Policy to turn off the Malicious Software Reporting Tool diagnostic data. You can turn off **Enhanced Notifications** as follows: @@ -1737,11 +1737,11 @@ If you're running Windows 10, version 1607 or later, you need to: > This will only take effect if the policy is applied before the first logon. > If you cannot apply the **Force a specific default lock screen image** policy before the first logon to the device, > you can **Enable** the **Do not display the lock screen** policy under **Computer Configuration** > **Administrative Templates** > **Control Panel** > **Personalization** - + > > Alternatively, you can create a new REG_SZ registry setting named **LockScreenImage** in **HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\Personalization** > with a value of **C:\\windows\\web\\screen\\lockscreen.jpg** and create a new REG_DWORD registry setting named **LockScreenOverlaysDisabled** in > **HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\Personalization** with a value of **1 (one)**. - + > > The Group Policy for the **LockScreenOverlaysDisabled** regkey is **Force a specific default lock screen and logon image** that is under **Control Panel** **Personalization**. @@ -1900,7 +1900,7 @@ For China releases of Windows 10 there is one additional Regkey to be set to pre ### Allowed traffic list for Windows Restricted Traffic Limited Functionality Baseline -|**Allowed traffic endpoints** | +|Allowed traffic endpoints| | --- | |activation-v2.sls.microsoft.com/*| |crl.microsoft.com/pki/crl/*| From 916f29f16b8c4968f363464ba273e0a3880eae9c Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 13 Jul 2020 14:10:17 -0700 Subject: [PATCH 105/589] Changed sub-list to auto numbering and corrected indentation It seems like automatic numbering is the only way to get the correct hanging indentation for second-level list items. --- .../manage-windows-mixed-reality.md | 23 ++++++++++--------- 1 file changed, 12 insertions(+), 11 deletions(-) diff --git a/windows/application-management/manage-windows-mixed-reality.md b/windows/application-management/manage-windows-mixed-reality.md index 934a1dc45e..082fa016f4 100644 --- a/windows/application-management/manage-windows-mixed-reality.md +++ b/windows/application-management/manage-windows-mixed-reality.md @@ -33,21 +33,22 @@ Organizations that use Windows Server Update Services (WSUS) must take action to 2. Windows Mixed Reality Feature on Demand (FOD) is downloaded from Windows Update. If access to Windows Update is blocked, you must manually install the Windows Mixed Reality FOD. - a. Download the FOD .cab file for [Windows 10, version 2004](https://software-download.microsoft.com/download/pr/Microsoft-Windows-Holographic-Desktop-FOD-Package~31bf3856ad364e35~amd64~~.cab), [Windows 10, version 1903 and 1909](https://software-download.microsoft.com/download/pr/Microsoft-Windows-Holographic-Desktop-FOD-Package-31bf3856ad364e35-amd64.cab), [Windows 10, version 1809](https://software-download.microsoft.com/download/pr/microsoft-windows-holographic-desktop-fod-package31bf3856ad364e35amd64_1.cab), [Windows 10, version 1803](https://download.microsoft.com/download/9/9/3/9934B163-FA01-4108-A38A-851B4ACD1244/Microsoft-Windows-Holographic-Desktop-FOD-Package~31bf3856ad364e35~amd64~~.cab), or [Windows 10, version 1709](https://download.microsoft.com/download/6/F/8/6F816172-AC7D-4F45-B967-D573FB450CB7/Microsoft-Windows-Holographic-Desktop-FOD-Package.cab). + 1. Download the FOD .cab file for [Windows 10, version 2004](https://software-download.microsoft.com/download/pr/Microsoft-Windows-Holographic-Desktop-FOD-Package~31bf3856ad364e35~amd64~~.cab), [Windows 10, version 1903 and 1909](https://software-download.microsoft.com/download/pr/Microsoft-Windows-Holographic-Desktop-FOD-Package-31bf3856ad364e35-amd64.cab), [Windows 10, version 1809](https://software-download.microsoft.com/download/pr/microsoft-windows-holographic-desktop-fod-package31bf3856ad364e35amd64_1.cab), [Windows 10, version 1803](https://download.microsoft.com/download/9/9/3/9934B163-FA01-4108-A38A-851B4ACD1244/Microsoft-Windows-Holographic-Desktop-FOD-Package~31bf3856ad364e35~amd64~~.cab), or [Windows 10, version 1709](https://download.microsoft.com/download/6/F/8/6F816172-AC7D-4F45-B967-D573FB450CB7/Microsoft-Windows-Holographic-Desktop-FOD-Package.cab). - >[!NOTE] - >You must download the FOD .cab file that matches your operating system version. + > [!NOTE] + > You must download the FOD .cab file that matches your operating system version. - b. Use `Add-Package` to add Windows Mixed Reality FOD to the image. + 1. Use `Add-Package` to add Windows Mixed Reality FOD to the image. - ```powershell - Add-Package - Dism /Online /add-package /packagepath:(path) - ``` - > [!NOTE] - > You must rename the FOD .CAB file to : **Microsoft-Windows-Holographic-Desktop-FOD-Package\~31bf3856ad364e35\~amd64\~\~.cab** + ```powershell + Add-Package + Dism /Online /add-package /packagepath:(path) + ``` + + > [!NOTE] + > You must rename the FOD .CAB file to : **Microsoft-Windows-Holographic-Desktop-FOD-Package\~31bf3856ad364e35\~amd64\~\~.cab** - c. In **Settings** > **Update & Security** > **Windows Update**, select **Check for updates**. + 1. In **Settings** > **Update & Security** > **Windows Update**, select **Check for updates**. IT admins can also create [Side by side feature store (shared folder)](https://technet.microsoft.com/library/jj127275.aspx) to allow access to the Windows Mixed Reality FOD. From 3ddd0aa2c7e4d9b75c38e1ca6c2eaf2fcd3f25f6 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 13 Jul 2020 14:39:59 -0700 Subject: [PATCH 106/589] Fixed table headers, experimenting with H4 --- .../client-management/windows-10-mobile-and-mdm.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/client-management/windows-10-mobile-and-mdm.md b/windows/client-management/windows-10-mobile-and-mdm.md index af078bbe87..670a77d671 100644 --- a/windows/client-management/windows-10-mobile-and-mdm.md +++ b/windows/client-management/windows-10-mobile-and-mdm.md @@ -69,12 +69,12 @@ The way in which personal and corporate devices are enrolled into an MDM system - -Personal devices -Corporate devices + +Personal devices +Corporate devices -Ownership +Ownership Employee Organization @@ -559,7 +559,7 @@ In addition to controlling which apps are allowed, IT professionals can also imp - **Restrict App to System Volume** Specifies whether app installation is allowed only to the system drive or can be installed on an SD card. - **Start screen layout** An XML blob used to configure the Start screen (for more information, see [Start layout for Windows 10 Mobile](https://msdn.microsoft.com/library/windows/hardware/mt171093(v=vs.85).aspx)). -Find more details on application management options in the [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962(v=vs.85).aspx#ApplicationManagement_AllowAllTrustedApps) +Find more details on application management options in the [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962(v=vs.85).aspx#ApplicationManagement_AllowAllTrustedApps). ### Data leak prevention @@ -741,7 +741,7 @@ Microsoft aspires to update Windows 10 Mobile devices with the latest updates au -**Keeping track of updates releases** +#### Keeping track of updates releases *Applies to: Corporate and Personal devices* From fd6f1e708a8aed1ea4a15fe85328f6c1adbef74d Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 13 Jul 2020 14:52:44 -0700 Subject: [PATCH 107/589] example --- .../microsoft-defender-atp/grant-mssp-access.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/grant-mssp-access.md b/windows/security/threat-protection/microsoft-defender-atp/grant-mssp-access.md index 1a150684ba..18c087a539 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/grant-mssp-access.md +++ b/windows/security/threat-protection/microsoft-defender-atp/grant-mssp-access.md @@ -25,7 +25,7 @@ ms.topic: article >Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-mssp-support-abovefoldlink) -To implement a multi-tenant delegated access solution take the following steps: +To implement a multi-tenant delegated access solution, take the following steps: 1. Enable [role-based access control](rbac.md) in Microsoft Defender ATP and connect with Active Directory (AD) groups. @@ -37,14 +37,14 @@ To implement a multi-tenant delegated access solution take the following steps: 1. **Create access groups for MSSP resources in Customer AAD: Groups** - These groups will be linked to the Roles you create in Microsoft Defender ATP. To do so, in the customer AD tenant, create 3 groups: + These groups will be linked to the Roles you create in Microsoft Defender ATP. To do so, in the customer AD tenant, create three groups. In our example approach, we create the following groups: - Tier 1 Analyst - Tier 2 Analyst - MSSP Analyst Approvers -2. Create Microsoft Defender ATP roles for appropriate access levels in Customer Micorosft Defender ATP. +2. Create Microsoft Defender ATP roles for appropriate access levels in Customer Microsoft Defender ATP. To enable RBAC in the customer Microsoft Defender Security Center, access **Settings > Permissions > Roles** and "Turn on roles", from a user account with Global Administrator or Security Administrator rights. @@ -58,7 +58,7 @@ To implement a multi-tenant delegated access solution take the following steps: Perform all actions except for live response and manage security settings. - **Tier 2 Analysts**
- Tier 1 capabilities with the addition to [ive response](live-response.md) + Tier 1 capabilities with the addition to [live response](live-response.md) For more information, see [Use role-based access control](rbac.md). @@ -70,7 +70,7 @@ To implement a multi-tenant delegated access solution take the following steps: Adding the MSSP as a connected organization will allow the MSSP to request and have accesses provisioned. - To do so, in the customer AD tenant, access Identity Governance: Connected organization. Add a new organization and search for your MSSP Analyst tenant via Tenant ID or Domain. It is recommended to create a separate AD tenant for your MSSP Analysts. + To do so, in the customer AD tenant, access Identity Governance: Connected organization. Add a new organization and search for your MSSP Analyst tenant via Tenant ID or Domain. We suggest creating a separate AD tenant for your MSSP Analysts. 2. **Create a resource catalog in Customer AAD: Identity Governance** From e76ca7b5e6009541213cdc197bd4ffe5ea6ee9f6 Mon Sep 17 00:00:00 2001 From: Thomas Date: Mon, 13 Jul 2020 14:54:46 -0700 Subject: [PATCH 108/589] delete .vscode folder --- .vscode/extensions.json | 5 ----- .vscode/settings.json | 8 -------- 2 files changed, 13 deletions(-) delete mode 100644 .vscode/extensions.json delete mode 100644 .vscode/settings.json diff --git a/.vscode/extensions.json b/.vscode/extensions.json deleted file mode 100644 index af02986a5a..0000000000 --- a/.vscode/extensions.json +++ /dev/null @@ -1,5 +0,0 @@ -{ - "recommendations": [ - "docsmsft.docs-authoring-pack" - ] -} \ No newline at end of file diff --git a/.vscode/settings.json b/.vscode/settings.json deleted file mode 100644 index 9c0086e560..0000000000 --- a/.vscode/settings.json +++ /dev/null @@ -1,8 +0,0 @@ -{ - "cSpell.words": [ - "intune", - "kovter", - "kovter's", - "poshspy" - ] -} \ No newline at end of file From b48c0e4bc36527b64be72c0ab919bdb09a2537c0 Mon Sep 17 00:00:00 2001 From: Kurt Sarens <56369685+kurtsarens@users.noreply.github.com> Date: Mon, 13 Jul 2020 15:07:03 -0700 Subject: [PATCH 109/589] Update microsoft-defender-antivirus-compatibility.md EDR in block mode link was wrong --- .../microsoft-defender-antivirus-compatibility.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index 1c06747e7f..cdb56d3bf7 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -27,7 +27,7 @@ manager: dansimp Microsoft Defender Antivirus is automatically enabled and installed on endpoints and devices that are running Windows 10. But what happens when another antivirus/antimalware solution is used? It depends on whether you're using [Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection) together with your antivirus protection. - If your organization's endpoints and devices are protected with a non-Microsoft antivirus/antimalware solution, and Microsoft Defender ATP is not used, then Microsoft Defender Antivirus automatically goes into disabled mode. - If your organization is using Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) together with a non-Microsoft antivirus/antimalware solution, then Microsoft Defender Antivirus automatically goes into passive mode. (Real-time protection and threats are not remediated by Microsoft Defender Antivirus.) -- If your organization is using Microsoft Defender ATP together with a non-Microsoft antivirus/antimalware solution, and you have [EDR in block mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/shadow-protection) (currently in private preview) enabled, then Microsoft Defender Antivirus runs in the background and blocks/remediates malicious items that are detected, such as during a post-breach attack. +- If your organization is using Microsoft Defender ATP together with a non-Microsoft antivirus/antimalware solution, and you have [EDR in block mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode) (currently in private preview) enabled, then Microsoft Defender Antivirus runs in the background and blocks/remediates malicious items that are detected, such as during a post-breach attack. ## Antivirus and Microsoft Defender ATP From 1892e2a3a2f04d88de39d9831b95de1638a73b30 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 13 Jul 2020 15:07:53 -0700 Subject: [PATCH 110/589] Changed some bold text to H4s --- .../windows-10-mobile-and-mdm.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/client-management/windows-10-mobile-and-mdm.md b/windows/client-management/windows-10-mobile-and-mdm.md index 670a77d671..a87401def5 100644 --- a/windows/client-management/windows-10-mobile-and-mdm.md +++ b/windows/client-management/windows-10-mobile-and-mdm.md @@ -654,7 +654,7 @@ In enterprise IT environments, the need for security and cost control must be ba ### Servicing options -**A streamlined update process** +#### A streamlined update process *Applies to: Corporate and personal devices* @@ -750,7 +750,7 @@ Microsoft publishes new feature updates for Windows 10 and Windows 10 Mobile on > [!NOTE] > We invite IT Professionals to participate in the Windows Insider Program to test updates before they are officially released to make Windows 10 Mobile even better. If you find any issues, please send us feedback by using the Feedback Hub. -**Windows as a Service** +#### Windows as a Service *Applies to: Corporate and Personal devices* @@ -798,7 +798,7 @@ Update availability depends on what servicing option you choose for the device. -**Enterprise edition** +#### Enterprise edition *Applies to: Corporate devices* @@ -818,7 +818,7 @@ For more information on updating a device to Enterprise edition, see [WindowsLic > [!NOTE] > We recommend using Enterprise edition only on corporate devices. Once a device has been upgraded, it cannot be downgraded. Even a device wipe or reset will not remove the enterprise license from personal devices. -**Deferring and approving updates with MDM** +#### Deferring and approving updates with MDM *Applies to: Corporate devices with Enterprise edition* @@ -889,7 +889,7 @@ Pause Feature Updates for up to 35 days -**Managing the update experience** +#### Managing the update experience *Applies to: Corporate devices with Enterprise edition* @@ -905,7 +905,7 @@ This can include: In addition, in version 1607, you can configure when the update is applied to the employee device to ensure updates installs or reboots don’t interrupt business or worker productivity. Update installs and reboots can be scheduled [outside of active hours](https://msdn.microsoft.com/library/windows/hardware/dn904962(v=vs.85).aspx#Update_ActiveHoursEnd) (supported values are 0-23, where 0 is 12am, 1 is 1am, and so on) or on a specific [day of the week](https://msdn.microsoft.com/library/windows/hardware/dn904962(v=vs.85).aspx#Update_ScheduledInstallDay) (supported values are 0-7, where 0 is every day, 1 is Sunday, 2 is Monday, and so on). -**Managing the source of updates with MDM** +#### Managing the source of updates with MDM *Applies to: Corporate devices with Enterprise edition* @@ -915,7 +915,7 @@ For more information, see [Windows Update for Business](/windows/deployment/upda IT administrators can specify where the device gets updates from with AllowUpdateService. This could be Microsoft Update, Windows Update for Business, or Windows Server Update Services (WSUS). -**Managing Updates with Windows Update Server** +#### Managing Updates with Windows Update Server *Applies to: Corporate devices with Enterprise edition* @@ -923,7 +923,7 @@ When using WSUS, set **UpdateServiceUrl** to allow the device to check for updat For more information, see [managing updates with Windows Server Update Services (WSUS)](https://technet.microsoft.com/windowsserver/bb332157.aspx). -**Querying the device update status** +#### Querying the device update status *Applies to: Personal and corporate devices* @@ -982,7 +982,7 @@ This is a list of attributes that are supported by DHA and can trigger the corre - **Secure Boot Configuration Policy (SBCP) present** Specifies whether the hash of the custom SBCP is present. A device with an SBCP hash present is more trustworthy than a device without an SBCP hash. - **Boot cycle whitelist** The view of the host platform between boot cycles as defined by the manufacturer compared to a published allow list. A device that complies with the allow list is more trustworthy (secure) than a device that is noncompliant. -**Example scenario** +#### Example scenario Windows 10 mobile has protective measures that work together and integrate with Microsoft Intune or third-party Mobile Device Management (MDM) solutions. IT administrators can monitor and verify compliance to ensure corporate resources are protected end-to–end with the security and trust rooted in the physical hardware of the device. From ad385bcfd4fa4a9481026976ae0de72c4b12e17a Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 13 Jul 2020 15:51:13 -0700 Subject: [PATCH 111/589] insider risk --- .../microsoft-defender-atp/advanced-features.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md index fc9bf5c636..820db96ff5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md @@ -175,6 +175,22 @@ When you enable Intune integration, Intune will automatically create a classic C >[!NOTE] > The classic CA policy created by Intune is distinct from modern [Conditional Access policies](https://docs.microsoft.com/azure/active-directory/conditional-access/overview/), which are used for configuring endpoints. + + +### Insider risk management integration + +Enabling Insider risk management integration gives you the ability to share Microsoft Defender ATP alerts and their triage status with insider risk management user alerts. This helps link Microsoft Defender ATP activities with other risky user activities identified by insider risk management security violation policies. + +### Enable the Microsoft Defender ATP integration for insider risk management from the Azure ATP portal + +1. Log in to the Azure portal with a Global Administrator or Security Administrator role. + +2. Click . + +3. Toggle the Integration setting to **On** and click **Save**. + +After configuring the [Security policy violation indicators](https://docs.microsoft.com/microsoft-365/compliance/insider-risk-management-settings.md#indicators) in the insider risk management settings, Microsoft Defender ATP alerts will be shared with insider risk management for applicable users. + ## Preview features Learn about new features in the Microsoft Defender ATP preview release and be among the first to try upcoming features by turning on the preview experience. From 5ea71cf11f13be96a9a41fd61c11cc75e7fc8d52 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Mon, 13 Jul 2020 15:54:25 -0700 Subject: [PATCH 112/589] added defender --- .../security/threat-protection/intelligence/developer-faq.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/intelligence/developer-faq.md b/windows/security/threat-protection/intelligence/developer-faq.md index d28d6d20d6..e3d47a044c 100644 --- a/windows/security/threat-protection/intelligence/developer-faq.md +++ b/windows/security/threat-protection/intelligence/developer-faq.md @@ -41,7 +41,7 @@ This can help us with our analysis. Participants of the [Microsoft Active Protec It contains instructions to offer a program classified as unwanted software. You can review the [criteria](criteria.md) we use to check applications for behaviors that are considered unwanted. -## Why is the Windows Firewall blocking my program? +## Why is the Windows Defender Firewall blocking my program? This is not related to Microsoft Defender Antivirus and other Microsoft antimalware. [Learn about Windows Defender Firewall](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security). From f1b1eae8e6555d18dd05b54c70aabafd80b5deeb Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 13 Jul 2020 16:15:00 -0700 Subject: [PATCH 113/589] header --- .../microsoft-defender-atp/advanced-features.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md index 820db96ff5..7d241ed7e3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md @@ -176,8 +176,7 @@ When you enable Intune integration, Intune will automatically create a classic C > The classic CA policy created by Intune is distinct from modern [Conditional Access policies](https://docs.microsoft.com/azure/active-directory/conditional-access/overview/), which are used for configuring endpoints. - -### Insider risk management integration +## Insider risk management integration Enabling Insider risk management integration gives you the ability to share Microsoft Defender ATP alerts and their triage status with insider risk management user alerts. This helps link Microsoft Defender ATP activities with other risky user activities identified by insider risk management security violation policies. From f724cc19ff0a2b6c24cd4a5ffe465f38c4cccb72 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Mon, 13 Jul 2020 18:04:40 -0700 Subject: [PATCH 114/589] terminology updates --- .../threat-and-vuln-mgt-event-timeline.md | 22 ++--- .../threat-and-vuln-mgt-scenarios.md | 12 +-- .../tvm-exposure-score.md | 4 +- .../microsoft-defender-atp/tvm-remediation.md | 2 +- .../tvm-security-recommendation.md | 4 +- .../tvm-supported-os.md | 2 +- .../microsoft-defender-atp/tvm-weaknesses.md | 2 +- .../microsoft-defender-atp/user-roles.md | 84 +++++++++---------- 8 files changed, 64 insertions(+), 68 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-event-timeline.md b/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-event-timeline.md index 3c49e66665..e2d4158d0d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-event-timeline.md +++ b/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-event-timeline.md @@ -1,5 +1,5 @@ --- -title: Event timeline +title: Event timeline in threat and vulnerability management description: Event timeline is a "risk news feed" which will help you interpret how risk is introduced into the organization and which mitigations happened to reduce it. keywords: event timeline, mdatp event timeline, mdatp tvm event timeline, threat and vulnerability management, Microsoft Defender Advanced Threat Protection search.product: eADQiWindows 10XVcnh @@ -16,7 +16,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual --- -# Event timeline +# Event timeline - threat and vulnerability management **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) @@ -33,23 +33,23 @@ Event timeline also tells the story of your [exposure score](tvm-exposure-score. You can access Event timeline mainly through three ways: -- In the Threat & Vulnerability Management navigation menu in the Microsoft Defender Security Center -- Top events card in the [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md). The highest impact events (for example, affect the most machines or critical vulnerabilities) -- Hovering over the Exposure Score graph in the [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md) +- In the threat and vulnerability management navigation menu in the Microsoft Defender Security Center +- Top events card in the [threat and vulnerability management dashboard](tvm-dashboard-insights.md). The highest impact events (for example, affect the most machines or critical vulnerabilities) +- Hovering over the Exposure Score graph in the [threat and vulnerability management dashboard](tvm-dashboard-insights.md) ### Navigation menu -Go to the Threat & Vulnerability Management navigation menu and select **Event timeline** to view impactful events. +Go to the threat and vulnerability management navigation menu and select **Event timeline** to view impactful events. ### Top events card -In the Threat & Vulnerability Management dashboard, the "Top events" card displays the three most impactful events in the last 7 days. Select **Show more** to go to the Event timeline page. +In the Tthreat and vulnerability management dashboard, the "Top events" card displays the three most impactful events in the last 7 days. Select **Show more** to go to the Event timeline page. ![Event timeline page](images/tvm-top-events-card.png) ### Exposure score graph -In the Threat & Vulnerability Management dashboard, hover over the Exposure score graph to view top events from that day that impacted your machines. If there are no events, then none will be shown. +In the threat and vulnerability management dashboard, hover over the Exposure score graph to view top events from that day that impacted your machines. If there are no events, then none will be shown. ![Event timeline page](images/tvm-event-timeline-exposure-score400.png) @@ -118,9 +118,9 @@ A full page will appear with all the details of a specific software, including a ## Related topics -- [Threat & Vulnerability Management overview](next-gen-threat-and-vuln-mgt.md) +- [Threat and vulnerability management overview](next-gen-threat-and-vuln-mgt.md) - [Supported operating systems and platforms](tvm-supported-os.md) -- [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md) +- [Threat and vulnerability management dashboard](tvm-dashboard-insights.md) - [Exposure score](tvm-exposure-score.md) - [Microsoft Secure Score for Devices](tvm-microsoft-secure-score-devices.md) - [Security recommendations](tvm-security-recommendation.md) @@ -130,6 +130,6 @@ A full page will appear with all the details of a specific software, including a - [Event timeline](threat-and-vuln-mgt-event-timeline.md) - [Scenarios](threat-and-vuln-mgt-scenarios.md) - [APIs](next-gen-threat-and-vuln-mgt.md#apis) -- [Configure data access for Threat & Vulnerability Management roles](user-roles.md#create-roles-and-assign-the-role-to-an-azure-active-directory-group) +- [Configure data access for threat and vulnerability management roles](user-roles.md#create-roles-and-assign-the-role-to-an-azure-active-directory-group) - [Advanced hunting overview](overview-hunting.md) - [All advanced hunting tables](advanced-hunting-reference.md) diff --git a/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md index 0f5af6bdf7..7ab41a7658 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -1,6 +1,6 @@ --- -title: Threat & Vulnerability Management scenarios -description: Learn how Threat & Vulnerability Management can be used to help security admins, IT admins, and SecOps collaborate in defending against security threats. +title: Scenarios - threat and vulnerability management +description: Learn how threat and vulnerability management can be used to help security admins, IT admins, and SecOps collaborate in defending against security threats. keywords: mdatp-tvm scenarios, mdatp, tvm, tvm scenarios, reduce threat & vulnerability exposure, reduce threat and vulnerability, improve security configuration, increase Microsoft Secure Score for Devices, increase threat & vulnerability Microsoft Secure Score for Devices, Microsoft Secure Score for Devices, exposure score, security controls search.product: eADQiWindows 10XVcnh search.appverid: met150 @@ -17,7 +17,7 @@ ms.collection: M365-security-compliance ms.topic: article --- -# Threat & Vulnerability Management scenarios +# Scenarios - threat and vulnerability management **Applies to:** @@ -81,9 +81,9 @@ Examples of devices that should be marked as high value: ## Related topics -- [Threat & Vulnerability Management overview](next-gen-threat-and-vuln-mgt.md) +- [Threat and vulnerability management overview](next-gen-threat-and-vuln-mgt.md) - [Supported operating systems and platforms](tvm-supported-os.md) -- [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md) +- [Threat and vulnerability management dashboard](tvm-dashboard-insights.md) - [Exposure score](tvm-exposure-score.md) - [Microsoft Secure Score for Devices](tvm-microsoft-secure-score-devices.md) - [Security recommendations](tvm-security-recommendation.md) @@ -92,6 +92,6 @@ Examples of devices that should be marked as high value: - [Weaknesses](tvm-weaknesses.md) - [Event timeline](threat-and-vuln-mgt-event-timeline.md) - [APIs](next-gen-threat-and-vuln-mgt.md#apis) -- [Configure data access for Threat & Vulnerability Management roles](user-roles.md#create-roles-and-assign-the-role-to-an-azure-active-directory-group) +- [Configure data access for threat and vulnerability management roles](user-roles.md#create-roles-and-assign-the-role-to-an-azure-active-directory-group) - [Advanced hunting overview](overview-hunting.md) - [All advanced hunting tables](advanced-hunting-reference.md) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-exposure-score.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-exposure-score.md index b1b2897be8..19805c1e0b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-exposure-score.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-exposure-score.md @@ -1,5 +1,5 @@ --- -title: Threat and vulnerability management xxposure score +title: Exposure score in threat and vulnerability management description: The threat and vulnerability management exposure score reflects how vulnerable your organization is to cybersecurity threats. keywords: exposure score, mdatp exposure score, mdatp tvm exposure score, organization exposure score, tvm organization exposure score, threat and vulnerability management, Microsoft Defender Advanced Threat Protection search.product: eADQiWindows 10XVcnh @@ -16,7 +16,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual --- -# Threat and vulnerability management exposure score +# Exposure score - threat and vulnerability management **Applies to:** diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-remediation.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-remediation.md index 324c695ff6..a94e2b07c4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-remediation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-remediation.md @@ -1,5 +1,5 @@ --- -title: Threat and vulnerability management remediation and exceptions +title: Remediation activities and exceptions - threat and vulnerability management description: Remediate security weaknesses discovered through security recommendations, and create exceptions if needed, in threat and vulnerability management. keywords: microsoft defender atp tvm remediation, mdatp tvm, threat and vulnerability management, threat & vulnerability management, threat & vulnerability management remediation, tvm remediation intune, tvm remediation sccm search.product: eADQiWindows 10XVcnh diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md index 1169a50661..a1d0887eda 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md @@ -1,6 +1,6 @@ --- -title: Threat and vulnerability management security recommendations -description: Get actionable security recommendations prioritized by threat, likelihood to be breached, and value. +title: Security recommendations by threat and vulnerability management +description: Get actionable security recommendations prioritized by threat, likelihood to be breached, and value, in threat and vulnerability management. keywords: threat and vulnerability management, mdatp tvm security recommendation, cybersecurity recommendation, actionable security recommendation search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-supported-os.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-supported-os.md index 6551d5f13b..3b048f904c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-supported-os.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-supported-os.md @@ -16,7 +16,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: article --- -# Supported operating systems and platforms for threat and vulnerability management +# Supported operating systems and platforms - threat and vulnerability management **Applies to:** diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-weaknesses.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-weaknesses.md index dc76e06b79..aa166b9796 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-weaknesses.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-weaknesses.md @@ -1,6 +1,6 @@ --- title: Weaknesses found by threat and vulnerability management -description: Microsoft Defender Security Center offers a Weaknesses page, which lists vulnerabilities found in the infected software running in your organization. +description: Lists the common vulnerabilities and exposures (CVE) ID of weaknesses found in the software running in your organization. Discovered by the Microsoft Defender ATP threat and vulnerability management capability. keywords: mdatp threat & vulnerability management, threat and vulnerability management, mdatp tvm weaknesses page, finding weaknesses through tvm, tvm vulnerability list, vulnerability details in tvm search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/microsoft-defender-atp/user-roles.md b/windows/security/threat-protection/microsoft-defender-atp/user-roles.md index 18a1a896b3..d58c080f49 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/user-roles.md +++ b/windows/security/threat-protection/microsoft-defender-atp/user-roles.md @@ -1,6 +1,6 @@ --- title: Create and manage roles for role-based access control -description: Create roles and define the permissions assigned to the role as part of the role-based access control implementation +description: Create roles and define the permissions assigned to the role as part of the role-based access control implementation in the Microsoft Defender Security Center keywords: user roles, roles, access rbac search.product: eADQiWindows 10XVcnh search.appverid: met150 @@ -18,6 +18,7 @@ ms.topic: article --- # Create and manage roles for role-based access control + **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) @@ -26,63 +27,58 @@ ms.topic: article [!include[Prerelease information](../../includes/prerelease.md)] ## Create roles and assign the role to an Azure Active Directory group + The following steps guide you on how to create roles in Microsoft Defender Security Center. It assumes that you have already created Azure Active Directory user groups. 1. In the navigation pane, select **Settings > Roles**. -2. Click **Add role**. +2. Select **Add item**. 3. Enter the role name, description, and permissions you'd like to assign to the role. - - **Role name** - - **Description** - - **Permissions** - - **View data** - Users can view information in the portal. - >[!NOTE] - >To view Threat & Vulnerability Management data, select **Threat and vulnerability management**. - - - **Alerts investigation** - Users can manage alerts, initiate automated investigations, collect investigation packages, manage device tags, and export device timeline. - - **Active remediation actions** - Users can take response actions and approve or dismiss pending remediation actions. - - Security operations - Take response actions - - Approve or dismiss pending remediation actions - - Manage allowed/blocked lists for automation - - Manage allowed/blocked create Indicators +4. Select **Next** to assign the role to an Azure AD Security group. - >[!NOTE] - >To enable your Security operation personnel to choose remediation options and file exceptions, select **Threat and vulnerability management - Remediation handling**, and **Threat and vulnerability management - Exception handling**. - - - **Manage portal system settings** - Users can configure storage settings, SIEM and threat intel API settings (applies globally), advanced settings, automated file uploads, roles and device groups. +5. Use the filter to select the Azure AD group that you'd like to add to this role to. - > [!NOTE] - > This setting is only available in the Microsoft Defender ATP administrator (default) role. - - - **Manage security settings** - Users can configure alert suppression settings, manage allowed/blocked lists for automation, create and manage custom detections, manage folder exclusions for automation, onboard and offboard devices, and manage email notifications. - - - **Live response capabilities** - Users can take basic or advanced live response commands. - - Basic commands allow users to: - - Start a live response session - - Run read only live response commands on a remote device - - Advanced commands allow users to: - - Run basic actions - - Download a file from the remote device - - View a script from the files library - - Run a script on the remote device from the files library take read and write commands. - - For more information on the available commands, see [Investigate devices using Live response](live-response.md). - -4. Click **Next** to assign the role to an Azure AD Security group. - -5. Use the filter to select the Azure AD group that you'd like to add to this role. - -6. Click **Save and close**. +6. **Save and close**. 7. Apply the configuration settings. - > [!IMPORTANT] -> After creating roles, you'll need to create a device group and provide access to the device group by assigning it to a role that you just created. +> After creating roles, you'll need to create a device group and provide access to the device group by assigning it to a role that you just created. +### Permission options +- **View data** + - **Security operations** - View all security operations data in the portal + - **Threat and vulnerability management** - View threat and vulnerability management data in the portal + +- **Active remediation actions** + - **Security operations** - Take response actions, approve or dismiss pending remediation actions, manage allowed/blocked lists for automation and indicators + - **Threat and vulnerability management - Exception handling** - Create new exceptions and manage active exceptions + - **Threat and vulnerability management - Remediation handling** - Submit new remediation requests, create tickets, and manage existing remediation activities + +- **Alerts investigation** - Manage alerts, initiate automated investigations, run scans, collect investigation packages, manage device tags. + +- **Manage portal system settings** - Configure storage settings, SIEM and threat intel API settings (applies globally), advanced settings, automated file uploads, roles and device groups. + + > [!NOTE] + > This setting is only available in the Microsoft Defender ATP administrator (default) role. + +- **Manage security settings in Security Center** - Configure alert suppression settings, manage folder exclusions for automation, onboard and offboard devices, and manage email notifications, manage evaluation lab. + +- **Live response capabilities** + - **Basic** commands: + - Start a live response session + - Perform read only live response commands on remote device (excluding file copy and execution + - **Advanced** commands: + - Download a file from the remote device + - Upload a file to the remote device + - View a script from the files library + - Execute a script on the remote device from the files library + +For more information on the available commands, see [Investigate devices using Live response](live-response.md). + ## Edit roles 1. Select the role you'd like to edit. @@ -99,7 +95,7 @@ The following steps guide you on how to create roles in Microsoft Defender Secur 2. Click the drop-down button and select **Delete role**. - ## Related topic + - [User basic permissions to access the portal](basic-permissions.md) - [Create and manage device groups](machine-groups.md) From 973b236ed5cb25f1400e72afc500e23b6d39781b Mon Sep 17 00:00:00 2001 From: amirsc3 <42802974+amirsc3@users.noreply.github.com> Date: Tue, 14 Jul 2020 10:57:29 +0300 Subject: [PATCH 115/589] Update edr-in-block-mode.md Feature is not in public preview yet. We need the docs to be consistent: "When EDR in block mode (currently in private preview) is turned on, Microsoft Defender Antivirus is not used as the primary antivirus solution, but can still detect and remediate malicious items." https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility --- .../microsoft-defender-atp/edr-in-block-mode.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md index 65f8212bc5..8740ad82d5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md +++ b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md @@ -29,7 +29,7 @@ ms.collection: When [endpoint detection and response](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response) (EDR) in block mode is enabled, Microsoft Defender ATP leverages behavioral blocking and containment capabilities by blocking malicious artifacts or behaviors that are observed through post-breach protection. EDR in block mode works behind the scenes to remediate malicious artifacts that are detected post-breach. > [!NOTE] -> EDR in block mode is currently in preview. To get the best protection, make sure to **[deploy Microsoft Defender ATP baselines](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-machines-security-baseline)**. +> EDR in block mode is currently in private preview. To get the best protection, make sure to **[deploy Microsoft Defender ATP baselines](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-machines-security-baseline)**. ## What happens when something is detected? From 0a1fa980ba7227521895077bf46161f57c9bb85c Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 14 Jul 2020 11:42:58 -0700 Subject: [PATCH 116/589] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index a6be5fa509..94af8d7fe3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -96,7 +96,7 @@ The following sections describe each of the 15 attack surface reduction rules. T |[Block all Office applications from creating child processes](#block-all-office-applications-from-creating-child-processes) | `D4F940AB-401B-4EFC-AADC-AD5F3C50688A` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Office applications from creating executable content](#block-office-applications-from-creating-executable-content) | `3B576869-A4EC-4529-8536-B80A7769E899` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Office applications from injecting code into other processes](#block-office-applications-from-injecting-code-into-other-processes) | `75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | -|[Block JavaScript or VBScript from launching downloaded executable content](#block-javascript-or-vbscript-from-launching-downloaded-executable-content) | `D3E037E1-3EB8-44C8-A917-57927947596D` | Not supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | +|[Block JavaScript or VBScript from launching downloaded executable content](#block-javascript-or-vbscript-from-launching-downloaded-executable-content) | `D3E037E1-3EB8-44C8-A917-57927947596D` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block execution of potentially obfuscated scripts](#block-execution-of-potentially-obfuscated-scripts) | `5BEB7EFE-FD9A-4556-801D-275E5FFC04CC` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Win32 API calls from Office macros](#block-win32-api-calls-from-office-macros) | `92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block executable files from running unless they meet a prevalence, age, or trusted list criterion](#block-executable-files-from-running-unless-they-meet-a-prevalence-age-or-trusted-list-criterion) | `01443614-cd74-433a-b99e-2ecdc07bfc25` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | @@ -191,9 +191,6 @@ This rule prevents scripts from launching potentially malicious downloaded conte Although not common, line-of-business applications sometimes use scripts to download and launch installers. -> [!IMPORTANT] -> File and folder exclusions don't apply to this attack surface reduction rule. - This rule was introduced in: - [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) - [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) @@ -385,6 +382,9 @@ GUID: `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` This rule prevents malware from abusing WMI to attain persistence on a device. +> [!IMPORTANT] +> File and folder exclusions don't apply to this attack surface reduction rule. + Fileless threats employ various tactics to stay hidden, to avoid being seen in the file system, and to gain periodic execution control. Some threats can abuse the WMI repository and event model to stay hidden. This rule was introduced in: From dd702d78a2629145ebaf66efb249f9285f6243c5 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 14 Jul 2020 12:00:57 -0700 Subject: [PATCH 117/589] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 94af8d7fe3..9ee5965970 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -31,7 +31,7 @@ Attack surface reduction rules target software behaviors that are often abused b - Running obfuscated or otherwise suspicious scripts - Performing behaviors that apps don't usually initiate during normal day-to-day work -These behaviors are sometimes seen in legitimate applications; however, they are considered risky because they are commonly abused by malware. Attack surface reduction rules can constrain these kinds of risky behaviors and help keep your organization safe. +Such behaviors are sometimes seen in legitimate applications; however, they are considered risky because they are commonly abused by malware. Attack surface reduction rules can constrain these kinds of risky behaviors and help keep your organization safe. Use [audit mode](audit-windows-defender.md) to evaluate how attack surface reduction rules would impact your organization if they were enabled. It's best to run all rules in audit mode first so you can understand their impact on your line-of-business applications. Many line-of-business applications are written with limited security concerns, and they may perform tasks in ways that seem similar to malware. By monitoring audit data and [adding exclusions](enable-attack-surface-reduction.md#exclude-files-and-folders-from-asr-rules) for necessary applications, you can deploy attack surface reduction rules without impacting productivity. From 8be00827bcc78359700da22c2257ed92d317e65b Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 14 Jul 2020 12:18:57 -0700 Subject: [PATCH 118/589] Updates per PR#6578 --- .../mdm/vpnv2-profile-xsd.md | 399 +++++++++--------- 1 file changed, 200 insertions(+), 199 deletions(-) diff --git a/windows/client-management/mdm/vpnv2-profile-xsd.md b/windows/client-management/mdm/vpnv2-profile-xsd.md index eecc7c7075..ecebcd8133 100644 --- a/windows/client-management/mdm/vpnv2-profile-xsd.md +++ b/windows/client-management/mdm/vpnv2-profile-xsd.md @@ -1,25 +1,23 @@ --- title: ProfileXML XSD -description: Here's the XSD for the ProfileXML node in VPNv2 CSP for Windows 10 and some profile examples. +description: Here's the XSD for the ProfileXML node in VPNv2 CSP for Windows 10 and some profile examples. ms.assetid: 2F32E14B-F9B9-4760-AE94-E57F1D4DFDB3 -ms.reviewer: +ms.reviewer: manager: dansimp ms.author: dansimp ms.topic: article ms.prod: w10 ms.technology: windows author: manikadhiman -ms.date: 02/05/2018 +ms.date: 07/14/2020 --- # ProfileXML XSD - -Here's the XSD for the ProfileXML node in VPNv2 CSP for Windows 10 and some profile examples. +Here's the XSD for the ProfileXML node in VPNv2 CSP for Windows 10 and some profile examples. ## XSD for the VPN profile - ```xml @@ -51,15 +49,15 @@ Here's the XSD for the ProfileXML node in VPNv2 CSP for Windows 10 and some pro - + - - - - + + + + @@ -89,7 +87,7 @@ Here's the XSD for the ProfileXML node in VPNv2 CSP for Windows 10 and some pro - + @@ -115,7 +113,13 @@ Here's the XSD for the ProfileXML node in VPNv2 CSP for Windows 10 and some pro - + + + + + + + @@ -148,23 +152,25 @@ Here's the XSD for the ProfileXML node in VPNv2 CSP for Windows 10 and some pro - - + + + + + + + + + + + + + + + + + - - - - - - - - - - - - - - + @@ -187,16 +193,79 @@ Here's the XSD for the ProfileXML node in VPNv2 CSP for Windows 10 and some pro ## Native profile example +```xml + + corp.contoso.com + true + false + corp.contoso.com + contoso.com -``` - - - testServer.VPN.com - IKEv2 - - Eap - - + + Helloworld.Com + + HelloServer + + + + + true + + true + This is my Eku + This is my issuer hash + + + + + + Microsoft.MicrosoftEdge_8wekyb3d8bbwe + + + + + C:\windows\system32\ping.exe + + + + + hrsite.corporate.contoso.com + 1.2.3.4,5.6.7.8 + 5.5.5.5 + true + + + .corp.contoso.com + 10.10.10.10,20.20.20.20 + 100.100.100.100 + + + + + %ProgramFiles%\Internet Explorer\iexplore.exe + + 6 + 10,20-50,100-200 + 20-50,100-200,300 + 30.30.0.0/16,10.10.10.10-20.20.20.20 + ForceTunnel + + + + Microsoft.MicrosoftEdge_8wekyb3d8bbwe + + 3.3.3.3/32,1.1.1.1-2.2.2.2 + + + + testServer.VPN.com + SplitTunnel + IKEv2 + true + + Eap + + 25 @@ -261,178 +330,110 @@ Here's the XSD for the ProfileXML node in VPNv2 CSP for Windows 10 and some pro - - - SplitTunnel - true - - - -
192.168.0.0
- 24 - - -
10.10.0.0
- 16 - - - - - Microsoft.MicrosoftEdge_8wekyb3d8bbwe - - - - - C:\windows\system32\ping.exe - - - - - - - %ProgramFiles%\Internet Explorer\iexplore.exe - - 6 - 10,20-50,100-200 - 20-50,100-200,300 - 30.30.0.0/16,10.10.10.10-20.20.20.20 - ForceTunnel - - - - Microsoft.MicrosoftEdge_8wekyb3d8bbwe - - 3.3.3.3/32,1.1.1.1-2.2.2.2 - - - - - hrsite.corporate.contoso.com - 1.2.3.4,5.6.7.8 - 5.5.5.5 - true - - - .corp.contoso.com - 10.10.10.10,20.20.20.20 - 100.100.100.100 - - - corp.contoso.com - true - false - corp.contoso.com - contoso.com - - - HelloServer - - Helloworld.Com - - - - true - - true - This is my Eku - This is my issuer hash - - - + + + + + +
192.168.0.0
+ 24 + + +
10.10.0.0
+ 16 + + ``` ## Plug-in profile example - ```xml - - testserver1.contoso.com;testserver2.contoso..com - JuniperNetworks.JunosPulseVpn_cw5n1h2txyewy - true - - -
192.168.0.0
- 24 - - -
10.10.0.0
- 16 - - - - Microsoft.MicrosoftEdge_8wekyb3d8bbwe - - - - - %ProgramFiles%\Internet Explorer\iexplore.exe - - - - - %ProgramFiles%\Internet Explorer\iexplore.exe - - 6 - 10,20-50,100-200 - 20-50,100-200,300 - 30.30.0.0/16,10.10.10.10-20.20.20.20 - - - - - Microsoft.MicrosoftEdge_8wekyb3d8bbwe - - 3.3.3.3/32,1.1.1.1-2.2.2.2 - - - - Microsoft.MicrosoftEdge_8wekyb3d8bbwe - - O:SYG:SYD:(A;;CC;;;AU) - - - - corp.contoso.com - 1.2.3.4,5.6.7.8 - 5.5.5.5 - false - - - corp.contoso.com - 10.10.10.10,20.20.20.20 - 100.100.100.100 - - - true - false - false - false - corp.contoso.com - contoso.com,test.corp.contoso.com - - - HelloServer - - Helloworld.Com - - - - - - - - - - -``` + + true + false + corp.contoso.com + contoso.com,test.corp.contoso.com + false + false -  + + Helloworld.Com + + HelloServer + -  + + + + + + + true + + + + testserver1.contoso.com;testserver2.contoso..com + true + JuniperNetworks.JunosPulseVpn_cw5n1h2txyewy + + + + Microsoft.MicrosoftEdge_8wekyb3d8bbwe + + + + + %ProgramFiles%\Internet Explorer\iexplore.exe + + + + corp.contoso.com + 1.2.3.4,5.6.7.8 + 5.5.5.5 + false + + + corp.contoso.com + 10.10.10.10,20.20.20.20 + 100.100.100.100 + + + + %ProgramFiles%\Internet Explorer\iexplore.exe + + 6 + 10,20-50,100-200 + 20-50,100-200,300 + 30.30.0.0/16,10.10.10.10-20.20.20.20 + + + + + Microsoft.MicrosoftEdge_8wekyb3d8bbwe + + 3.3.3.3/32,1.1.1.1-2.2.2.2 + + + + Microsoft.MicrosoftEdge_8wekyb3d8bbwe + + O:SYG:SYD:(A;;CC;;;AU) + + + +
192.168.0.0
+ 24 + + +
10.10.0.0
+ 16 + + +``` \ No newline at end of file From 782fcef6e274ab98a997cf9af1572ea734004437 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 14 Jul 2020 13:39:10 -0700 Subject: [PATCH 119/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index c8905d337a..13e02958a8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -19,3 +19,10 @@ ms.topic: article # Manage Microsoft Defender Advanced Threat Protection post migration +**Applies to:** +- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) + +After you have moved from your previous endpoint protection and antivirus solution to Microsoft Defender ATP, you can choose from among several methods to manage your features and capabilities. + + + From 424f6ec9951f109670eef9848b4f59e80119785f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 14 Jul 2020 14:02:40 -0700 Subject: [PATCH 120/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index 13e02958a8..2dfdde89ac 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -22,7 +22,14 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -After you have moved from your previous endpoint protection and antivirus solution to Microsoft Defender ATP, you can choose from among several methods to manage your features and capabilities. +After you have moved from your previous endpoint protection and antivirus solution to Microsoft Defender ATP, you can choose from among several methods to manage your features and capabilities. These methods include the following: +- Intune +- Configuration Manager (formerly System Center Configuration Manager) +- Group Policy Objects +- Windows PowerShell +- Windows Management Instrumentation +- Microsoft Malware Protection Command Line Utility + From 1437789e2411255a089d4cef7b55f275afc91a0b Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 14 Jul 2020 14:03:11 -0700 Subject: [PATCH 121/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index 2dfdde89ac..5361df5d3f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -30,6 +30,6 @@ After you have moved from your previous endpoint protection and antivirus soluti - Windows Management Instrumentation - Microsoft Malware Protection Command Line Utility - +Use this article as a guide to managing Microsoft Defender ATP post migration. From 10038451b2fb7ebdfe0353fe28f9f596816685ec Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 14 Jul 2020 14:23:02 -0700 Subject: [PATCH 122/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index 5361df5d3f..c30abc0ae8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -33,3 +33,5 @@ After you have moved from your previous endpoint protection and antivirus soluti Use this article as a guide to managing Microsoft Defender ATP post migration. + + From 8732be053996ed4c7da7f1525759cc6756fe18cb Mon Sep 17 00:00:00 2001 From: Teresa-Motiv Date: Tue, 14 Jul 2020 15:18:55 -0700 Subject: [PATCH 123/589] revisions --- .../credential-guard-manage.md | 24 +++++++++++++++---- 1 file changed, 19 insertions(+), 5 deletions(-) diff --git a/windows/security/identity-protection/credential-guard/credential-guard-manage.md b/windows/security/identity-protection/credential-guard/credential-guard-manage.md index 7e98cba59b..c5da818c42 100644 --- a/windows/security/identity-protection/credential-guard/credential-guard-manage.md +++ b/windows/security/identity-protection/credential-guard/credential-guard-manage.md @@ -8,11 +8,14 @@ ms.pagetype: security ms.localizationpriority: medium audience: ITPro author: dulcemontemayor -ms.author: dansimp +ms.author: v-tea manager: dansimp ms.collection: M365-identity-device-management ms.topic: article ms.reviewer: +ms.custom: +- CI 120967 +- CSSTroubleshooting --- # Manage Windows Defender Credential Guard @@ -154,14 +157,25 @@ DG_Readiness_Tool_v3.6.ps1 -Ready - You should perform regular reviews of the PCs that have Windows Defender Credential Guard enabled. This can be done with security audit policies or WMI queries. Here's a list of WinInit event IDs to look for: - **Event ID 13** Windows Defender Credential Guard (LsaIso.exe) was started and will protect LSA credentials. - - **Event ID 14** Windows Defender Credential Guard (LsaIso.exe) configuration: 0x1, 0 - - The first variable: 0x1 means Windows Defender Credential Guard is configured to run. 0x0 means it's not configured to run. + - **Event ID 14** Windows Defender Credential Guard (LsaIso.exe) configuration: \[**0x0** \| **0x1** \| **0x2**\], **0** + - The first variable: **0x1** or **0x2** means that Windows Defender Credential Guard is configured to run. 0x0 means that it's not configured to run. - The second variable: 0 means it's configured to run in protect mode. 1 means it's configured to run in test mode. This variable should always be 0. - **Event ID 15** Windows Defender Credential Guard (LsaIso.exe) is configured but the secure kernel is not running; continuing without Windows Defender Credential Guard. - **Event ID 16** Windows Defender Credential Guard (LsaIso.exe) failed to launch: \[error code\] - - **Event ID 17** Error reading Windows Defender Credential Guard (LsaIso.exe) UEFI configuration: \[error code\] + - **Event ID 17** Error reading Windows Defender Credential Guard (LsaIso.exe) UEFI configuration: \[error code\] You can also verify that TPM is being used for key protection by checking Event ID 51 in the **Microsoft** -> **Windows** -> **Kernel-Boot** event source. If you are running with a TPM, the TPM PCR mask value will be something other than 0. - - **Event ID 51** VSM Master Encryption Key Provisioning. Using cached copy status: 0x0. Unsealing cached copy status: 0x1. New key generation status: 0x1. Sealing status: 0x1. TPM PCR mask: 0x0. + - **Event ID 51** VSM Master Encryption Key Provisioning. Using cached copy status: 0x0. Unsealing cached copy status: 0x1. New key generation status: 0x1. Sealing status: 0x1. TPM PCR mask: 0x0. + - You can use Windows Powershell to determine whether credential guard is running on a client computer. On the computer in question, open an elevated Powershell window and run the following command: + + ```powershell + (Get-CimInstance -ClassName Win32_DeviceGuard -Namespace root\Microsoft\Windows\DeviceGuard).SecurityServicesRunning + ``` + + This command generates the following output: + - **0**: Windows Defender Credential Guard is disabled (not running) + - **1**: Windows Defender Credential Guard is enabled (running) + > [!NOTE] + > Checking the task list or Task Manager to see if LSAISO.exe is running is not a recommended method for determining whether Windows Defender Credential Guard is running. ## Disable Windows Defender Credential Guard From 0fa7fcc49950ef80d359c5108ccc0e458535a9b6 Mon Sep 17 00:00:00 2001 From: Teresa-Motiv Date: Tue, 14 Jul 2020 15:27:46 -0700 Subject: [PATCH 124/589] edit --- .../credential-guard/credential-guard-manage.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/credential-guard/credential-guard-manage.md b/windows/security/identity-protection/credential-guard/credential-guard-manage.md index c5da818c42..c28c0a5c73 100644 --- a/windows/security/identity-protection/credential-guard/credential-guard-manage.md +++ b/windows/security/identity-protection/credential-guard/credential-guard-manage.md @@ -235,7 +235,7 @@ You can also disable Windows Defender Credential Guard by using the [HVCI and Wi ``` DG_Readiness_Tool_v3.6.ps1 -Disable -AutoReboot ``` -> [!IMPORTANT] +> [!IMPORTANT] > When running the HVCI and Windows Defender Credential Guard hardware readiness tool on a non-English operating system, within the script, change `*$OSArch = $(gwmi win32_operatingsystem).OSArchitecture` to be `$OSArch = $((gwmi win32_operatingsystem).OSArchitecture).tolower()` instead, in order for the tool to work. > This is a known issue. From 34b3e113518de946f6bd68d4e962de8ae1fa0bef Mon Sep 17 00:00:00 2001 From: "v-tea@microsoft.com" <46357187+Teresa-Motiv@users.noreply.github.com> Date: Tue, 14 Jul 2020 15:55:27 -0700 Subject: [PATCH 125/589] Update credential-guard-manage.md Edits --- .../credential-guard/credential-guard-manage.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/identity-protection/credential-guard/credential-guard-manage.md b/windows/security/identity-protection/credential-guard/credential-guard-manage.md index c28c0a5c73..b4bbe78a9d 100644 --- a/windows/security/identity-protection/credential-guard/credential-guard-manage.md +++ b/windows/security/identity-protection/credential-guard/credential-guard-manage.md @@ -158,13 +158,13 @@ DG_Readiness_Tool_v3.6.ps1 -Ready - You should perform regular reviews of the PCs that have Windows Defender Credential Guard enabled. This can be done with security audit policies or WMI queries. Here's a list of WinInit event IDs to look for: - **Event ID 13** Windows Defender Credential Guard (LsaIso.exe) was started and will protect LSA credentials. - **Event ID 14** Windows Defender Credential Guard (LsaIso.exe) configuration: \[**0x0** \| **0x1** \| **0x2**\], **0** - - The first variable: **0x1** or **0x2** means that Windows Defender Credential Guard is configured to run. 0x0 means that it's not configured to run. - - The second variable: 0 means it's configured to run in protect mode. 1 means it's configured to run in test mode. This variable should always be 0. + - The first variable: **0x1** or **0x2** means that Windows Defender Credential Guard is configured to run. **0x0** means that it's not configured to run. + - The second variable: **0** means that it's configured to run in protect mode. **1** means that it's configured to run in test mode. This variable should always be **0**. - **Event ID 15** Windows Defender Credential Guard (LsaIso.exe) is configured but the secure kernel is not running; continuing without Windows Defender Credential Guard. - **Event ID 16** Windows Defender Credential Guard (LsaIso.exe) failed to launch: \[error code\] - **Event ID 17** Error reading Windows Defender Credential Guard (LsaIso.exe) UEFI configuration: \[error code\] You can also verify that TPM is being used for key protection by checking Event ID 51 in the **Microsoft** -> **Windows** -> **Kernel-Boot** event source. If you are running with a TPM, the TPM PCR mask value will be something other than 0. - - **Event ID 51** VSM Master Encryption Key Provisioning. Using cached copy status: 0x0. Unsealing cached copy status: 0x1. New key generation status: 0x1. Sealing status: 0x1. TPM PCR mask: 0x0. + - **Event ID 51** VSM Master Encryption Key Provisioning. Using cached copy status: **0x0**. Unsealing cached copy status: 0x1. New key generation status: 0x1. Sealing status: **0x1**. TPM PCR mask: **0x0**. - You can use Windows Powershell to determine whether credential guard is running on a client computer. On the computer in question, open an elevated Powershell window and run the following command: ```powershell From 3248954b9fa956d2aa4beebe01089e6a8e3d67fd Mon Sep 17 00:00:00 2001 From: Luqman Aden Date: Tue, 14 Jul 2020 10:31:02 -0700 Subject: [PATCH 126/589] VPNProfile XSD: Add missing elements. --- windows/client-management/mdm/vpnv2-profile-xsd.md | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/vpnv2-profile-xsd.md b/windows/client-management/mdm/vpnv2-profile-xsd.md index ecebcd8133..c0e32c95b7 100644 --- a/windows/client-management/mdm/vpnv2-profile-xsd.md +++ b/windows/client-management/mdm/vpnv2-profile-xsd.md @@ -14,7 +14,7 @@ ms.date: 07/14/2020 # ProfileXML XSD -Here's the XSD for the ProfileXML node in VPNv2 CSP for Windows 10 and some profile examples. +Here's the XSD for the ProfileXML node in the VPNv2 CSP and VpnManagementAgent::AddProfileFromXmlAsync for Windows 10 and some profile examples. ## XSD for the VPN profile @@ -25,6 +25,7 @@ Here's the XSD for the ProfileXML node in VPNv2 CSP for Windows 10 and some prof + @@ -34,6 +35,7 @@ Here's the XSD for the ProfileXML node in VPNv2 CSP for Windows 10 and some prof + @@ -107,6 +109,7 @@ Here's the XSD for the ProfileXML node in VPNv2 CSP for Windows 10 and some prof + @@ -127,6 +130,7 @@ Here's the XSD for the ProfileXML node in VPNv2 CSP for Windows 10 and some prof + @@ -138,6 +142,7 @@ Here's the XSD for the ProfileXML node in VPNv2 CSP for Windows 10 and some prof + @@ -155,7 +160,7 @@ Here's the XSD for the ProfileXML node in VPNv2 CSP for Windows 10 and some prof - + @@ -176,12 +181,13 @@ Here's the XSD for the ProfileXML node in VPNv2 CSP for Windows 10 and some prof - + + From 51c4e2756359d920b5e33845138a6e70d7fdac70 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 14 Jul 2020 17:47:24 -0700 Subject: [PATCH 127/589] Added common mistakes section --- ...exclusions-microsoft-defender-antivirus.md | 118 ++++++++++++++++++ 1 file changed, 118 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md index 17b4284fa0..21244a7d3c 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md @@ -564,6 +564,124 @@ If you do not have Internet access, you can create your own EICAR test file by w You can also copy the string into a blank text file and attempt to save it with the file name or in the folder you are attempting to exclude. +## Common mistakes to avoid when configuring exclusion lists +This section describes some common mistakes that you should avoid making when adding exclusions to Microsoft Defender Antivirus scans. + +### Excluding certain trusted items +If you trust a file, file type, folder, or a process, you can add that to the exclusion list for Microsoft Defender Antivirus scans. However, there are certain items that you should not exclude from scanning even though you trust them. + +The following lists provide the , including: +- Paths +- File extension +- Processes + +### Paths not to be excluded +The following table provides the paths that you should not add in the exclusion list: + +| File path | Comments | +|-----------| --------- | +|- %systemdrive%
- C:
- C:\
- C:\* | | +|- %ProgramFiles%\Java
- C:\Program Files\Java | | +|- %ProgramFiles%\Contoso\
- C:\Program Files\Contoso\ | It’s common to see applications and/or services have documentation to open up the whole folder and subfolders. | +|- %ProgramFiles(x86)%\Contoso\
- C:\Program Files (x86)\Contoso\ | It’s common to see applications and/or services have documentation to open up the whole folder and subfolders. | +|- C:\Temp
- C:\Temp\
- C:\Temp\* | | +|- C:\Users\
- C:\Users\* | | +|C:\Users\\AppData\Local\Temp\ | | +|C:\Users\\AppData\LocalLow\Temp\ | | +|C:\Users\\AppData\Roaming\Temp\ | | +|- %Windir%\Prefetch
- C:\Windows\Prefetch
- C:\Windows\Prefetch\
- C:\Windows\Prefetch\* | | +|- %Windir%\System32\Spool
- C:\Windows\System32\Spool | | +|C:\Windows\System32\CatRoot2 | | +|- %Windir%\Temp
- C:\Windows\Temp
- C:\Windows\Temp\
- C:\Windows\Temp\* | | + +### File extensions that should not be excluded +The following is the list of file extensions that you should not add to the exclusion list: + +- .7zip +- .bat +- .bin +- .cab +- .cmd +- .com +- .cpl +- .dll +- .exe +- .fla +- .gif +- .gz +- .hta +- .inf +- .java +- .jar +- .job +- .jpeg +- .jpg +- .js +- .ko +- .ko.gz +- .msi +- .ocx +- .png +- .ps1 +- .py +- .rar +- .reg +- .scr +- .sys +- .tar +- .tmp +- .url +- .vbe +- .vbs +- .wsf +- .zip + +### Processes that should not be excluded +The following is the list of processes that should not be added to the exclusion list: +- AcroRd32.exe +- bitsadmin.exe +- excel.exe +- iexplore.exe +- java.exe +- outlook.exe +- psexec.exe +- powerpnt.exe +- powershell.exe +- schtasks.exe +- svchost.exe +- wmic.exe +- winword.exe +- wuauclt.exe +- addinprocess.exe +- addinprocess32.exe +- addinutil.exe +- bash.exe +- bginfo.exe[1] +- cdb.exe +- csi.exe +- dbghost.exe +- dbgsvc.exe +- dnx.exe +- fsi.exe +- fsiAnyCpu.exe +- kd.exe +- ntkd.exe +- lxssmanager.dll +- msbuild.exe[2] +- mshta.exe +- ntsd.exe +- rcsi.exe +- system.management.automation.dll +- windbg.exe + +### Using only the file name in the exclusion list +It is possible that a malware is named exactly same as the file that you trust and want to exclude from scanning. In such cases, to avoid excluding the malware from scanning, use a fully qualified path to the file that you want to exclude instead of using just the file name. For example, if you want to exclude `Filename.exe` from scanning, use the complete path to the file, such as `C:\program files\contoso\Filename.exe`. + +### On Server workloads, using a single exclusion for multiple exceptions + +Do not include every single application/service into just ‘1’ exclusion. You don’t want to include exceptions for IIS on your SQL server, or File Server, etc. You should split different application/service workloads to multiple exceptions. + + ## Related topics - [Configure and validate exclusions in Microsoft Defender Antivirus scans](configure-exclusions-microsoft-defender-antivirus.md) From c060703ab83c10ca3df575a1778790798a504d4e Mon Sep 17 00:00:00 2001 From: arcarley <52137849+arcarley@users.noreply.github.com> Date: Wed, 15 Jul 2020 14:03:09 -0700 Subject: [PATCH 128/589] Update update-csp.md Updating to be more specific on the functionality no longer recommended. --- windows/client-management/mdm/update-csp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/update-csp.md b/windows/client-management/mdm/update-csp.md index 1d4d3a7e86..310b0192c6 100644 --- a/windows/client-management/mdm/update-csp.md +++ b/windows/client-management/mdm/update-csp.md @@ -17,7 +17,7 @@ ms.date: 02/23/2018 The Update configuration service provider enables IT administrators to manage and control the rollout of new updates. > [!Note] -> All aspects of the Update CSP aside from Rollback are not recommended for managing desktop devices. To manage desktop devices from Windows Update, see the [Policy CSP - Updates](policy-csp-update.md) documentation. Rollback can be used for desktop devices on 1803 and above. +> The Update CSP functionality of 'AprrovedUpdates' is not recommended for managing desktop devices. To manage updates to desktop devices from Windows Update, see the [Policy CSP - Updates](policy-csp-update.md) documentation for the recommended policies. The following diagram shows the Update configuration service provider in tree format. From 10f3bbe0453f35d102372de9dfc54d6df4461fac Mon Sep 17 00:00:00 2001 From: arcarley <52137849+arcarley@users.noreply.github.com> Date: Wed, 15 Jul 2020 14:10:00 -0700 Subject: [PATCH 129/589] Update policy-csp-update.md Updating to show the Require Update Approval policy is meant only to be used on Mobile device. --- windows/client-management/mdm/policy-csp-update.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-update.md b/windows/client-management/mdm/policy-csp-update.md index 7fd2c3cd5a..1648a29310 100644 --- a/windows/client-management/mdm/policy-csp-update.md +++ b/windows/client-management/mdm/policy-csp-update.md @@ -3256,7 +3256,7 @@ The following list shows the supported values: > [!NOTE] -> If you previously used the **Update/PhoneUpdateRestrictions** policy in previous versions of Windows, it has been deprecated. Please use this policy instead. +> This policy is **only** recommended for managing mobile devices. If you previously used the **Update/PhoneUpdateRestrictions** policy in previous versions of Windows, it has been deprecated. Please use this policy instead. Allows the IT admin to restrict the updates that are installed on a device to only those on an update approval list. It enables IT to accept the End User License Agreement (EULA) associated with the approved update on behalf of the end-user. EULAs are approved once an update is approved. From 330b1ffa043276d04e018763de44f596e36f1359 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 15 Jul 2020 14:15:55 -0700 Subject: [PATCH 130/589] Update manage-atp-post-migration.md --- .../manage-atp-post-migration.md | 18 +++++++++++------- 1 file changed, 11 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index c30abc0ae8..0f75147d26 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -22,15 +22,19 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -After you have moved from your previous endpoint protection and antivirus solution to Microsoft Defender ATP, you can choose from among several methods to manage your features and capabilities. These methods include the following: -- Intune +After you have moved from your previous endpoint protection and antivirus solution to Microsoft Defender ATP, your next step is to manage your features and capabilities. Use this article as a guide to getting started managing your threat protection features in Microsoft Defender ATP post migration. + +Depending on what you want to configure, you can use one of several methods/tools: +- Intune (part of Microsoft Endpoint Manager) - Configuration Manager (formerly System Center Configuration Manager) -- Group Policy Objects -- Windows PowerShell -- Windows Management Instrumentation -- Microsoft Malware Protection Command Line Utility +- Group Policy Objects (in Azure Active Directory Domain Services) +- PowerShell (Windows, Linux, and macOS) +- Windows Management Instrumentation (for Windows devices only) +- Microsoft Malware Protection Command Line Utility (this is often referred to as *MPCmdRun.exe*) + +However, not all methods can be used to configure all the capabilities of Microsoft Defender ATP. + -Use this article as a guide to managing Microsoft Defender ATP post migration. From 1ec48940a0b8f6c5300b63958174800d58c853dd Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 15 Jul 2020 14:39:43 -0700 Subject: [PATCH 131/589] Update manage-atp-post-migration-intune.md --- .../manage-atp-post-migration-intune.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 26fb32834f..85d7ccbbb2 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -19,3 +19,13 @@ ms.topic: article # Manage Microsoft Defender Advanced Threat Protection with Intune +We recommend using Intune to manage threat protection features for the devices (also referred to as endpoints) within your organization. + +The following table lists various tasks and resources to manage features and capabilities of Microsoft Defender ATP with Intune. + + +|Task |Resources to learn more | +|---------|---------| +|Manage devices using Intune |[Protect devices with Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect) | +|Integrate Microsoft Defender ATP with Microsoft Intune as a Mobile Threat Defense solution for Android devices and devices running Windows 10 or later |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | + \ No newline at end of file From 79787829242d8ae59c94f9c298c6b93b4feff4bc Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 15 Jul 2020 14:46:32 -0700 Subject: [PATCH 132/589] Update manage-atp-post-migration-intune.md --- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 85d7ccbbb2..121a0ccffe 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -28,4 +28,5 @@ The following table lists various tasks and resources to manage features and cap |---------|---------| |Manage devices using Intune |[Protect devices with Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect) | |Integrate Microsoft Defender ATP with Microsoft Intune as a Mobile Threat Defense solution for Android devices and devices running Windows 10 or later |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | +|Configure Conditional Access to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | \ No newline at end of file From cae66d6b85b239c95b1a055200b69f7a37be8e9f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 15 Jul 2020 14:47:37 -0700 Subject: [PATCH 133/589] Update manage-atp-post-migration-intune.md --- .../manage-atp-post-migration-intune.md | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 121a0ccffe..43f0e2a113 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -19,14 +19,11 @@ ms.topic: article # Manage Microsoft Defender Advanced Threat Protection with Intune -We recommend using Intune to manage threat protection features for the devices (also referred to as endpoints) within your organization. - -The following table lists various tasks and resources to manage features and capabilities of Microsoft Defender ATP with Intune. - +We recommend using Intune to manage threat protection features for the devices (also referred to as endpoints) within your organization. This article lists various tasks you can perform using Intune together with resources to learn more. |Task |Resources to learn more | |---------|---------| -|Manage devices using Intune |[Protect devices with Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect) | +|Manage your organization's devices using Intune |[Protect devices with Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect) | |Integrate Microsoft Defender ATP with Microsoft Intune as a Mobile Threat Defense solution for Android devices and devices running Windows 10 or later |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | |Configure Conditional Access to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | \ No newline at end of file From 8b19ef0df075d2a15d56f2e348a8ce9ead69eaba Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 15 Jul 2020 14:51:19 -0700 Subject: [PATCH 134/589] Update manage-atp-post-migration-intune.md --- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 43f0e2a113..ff8c8e347e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -26,4 +26,5 @@ We recommend using Intune to manage threat protection features for the devices ( |Manage your organization's devices using Intune |[Protect devices with Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect) | |Integrate Microsoft Defender ATP with Microsoft Intune as a Mobile Threat Defense solution for Android devices and devices running Windows 10 or later |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | |Configure Conditional Access to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | +|Configure Microsoft Defender Antivirus settings using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) \ No newline at end of file From 5774ef10f287e37431cf609aa824aa3752f4b74a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 15 Jul 2020 14:54:04 -0700 Subject: [PATCH 135/589] Update manage-atp-post-migration-intune.md --- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index ff8c8e347e..7b02f9cb89 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -26,5 +26,5 @@ We recommend using Intune to manage threat protection features for the devices ( |Manage your organization's devices using Intune |[Protect devices with Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect) | |Integrate Microsoft Defender ATP with Microsoft Intune as a Mobile Threat Defense solution for Android devices and devices running Windows 10 or later |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | |Configure Conditional Access to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | -|Configure Microsoft Defender Antivirus settings using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) +|Configure Microsoft Defender Antivirus settings using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender)

[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10) | \ No newline at end of file From 5c8b088a65e3750a130a907ea0e75f4c47d95e0b Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 15 Jul 2020 14:56:24 -0700 Subject: [PATCH 136/589] Update manage-atp-post-migration-intune.md --- .../manage-atp-post-migration-intune.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 7b02f9cb89..be2429034d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -24,7 +24,8 @@ We recommend using Intune to manage threat protection features for the devices ( |Task |Resources to learn more | |---------|---------| |Manage your organization's devices using Intune |[Protect devices with Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect) | -|Integrate Microsoft Defender ATP with Microsoft Intune as a Mobile Threat Defense solution for Android devices and devices running Windows 10 or later |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | -|Configure Conditional Access to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | -|Configure Microsoft Defender Antivirus settings using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender)

[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10) | +|Integrate Microsoft Defender ATP with Microsoft Intune as a Mobile Threat Defense solution
(for Android devices and devices running Windows 10 or later) |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | +|Use Conditional Access to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | +|Configure your Microsoft Defender Antivirus settings using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender)

[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10) | + \ No newline at end of file From 2c20c40617114bc24b0af6f360d45c45e257af0f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 15 Jul 2020 15:47:20 -0700 Subject: [PATCH 137/589] Update enable-exploit-protection.md --- .../enable-exploit-protection.md | 36 ++++++++++++------- 1 file changed, 24 insertions(+), 12 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md b/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md index b0cad379e8..2251cef5dc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md @@ -108,13 +108,18 @@ The result will be that DEP will be enabled for *test.exe*. DEP will not be enab ## Intune 1. Sign in to the [Azure portal](https://portal.azure.com) and open Intune. + 2. Click **Device configuration** > **Profiles** > **Create profile**. -3. Name the profile, choose **Windows 10 and later** and **Endpoint protection**. - ![Create endpoint protection profile](../images/create-endpoint-protection-profile.png) + +3. Name the profile, choose **Windows 10 and later** and **Endpoint protection**.
+ ![Create endpoint protection profile](../images/create-endpoint-protection-profile.png)
+ 4. Click **Configure** > **Windows Defender Exploit Guard** > **Exploit protection**. -5. Upload an [XML file](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-exploitguard) with the exploit protection settings: - ![Enable network protection in Intune](../images/enable-ep-intune.png) + +5. Upload an [XML file](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-exploitguard) with the exploit protection settings:
![Enable network protection in Intune](../images/enable-ep-intune.png)
+ 6. Click **OK** to save each open blade and click **Create**. + 7. Click the profile **Assignments**, assign to **All Users & All Devices**, and click **Save**. ## MDM @@ -124,19 +129,26 @@ Use the [./Vendor/MSFT/Policy/Config/ExploitGuard/ExploitProtectionSettings](htt ## Microsoft Endpoint Configuration Manager 1. In Microsoft Endpoint Configuration Manager, click **Assets and Compliance** > **Endpoint Protection** > **Windows Defender Exploit Guard**. -1. Click **Home** > **Create Exploit Guard Policy**. -1. Enter a name and a description, click **Exploit protection**, and click **Next**. -1. Browse to the location of the exploit protection XML file and click **Next**. -1. Review the settings and click **Next** to create the policy. -1. After the policy is created, click **Close**. + +2. Click **Home** > **Create Exploit Guard Policy**. + +3. Enter a name and a description, click **Exploit protection**, and click **Next**. + +4. Browse to the location of the exploit protection XML file and click **Next**. + +5. Review the settings and click **Next** to create the policy. + +6. After the policy is created, click **Close**. ## Group Policy 1. On your Group Policy management device, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**. -1. In the **Group Policy Management Editor** go to **Computer configuration** and click **Administrative templates**. -2. Expand the tree to **Windows components** > **Windows Defender Exploit Guard** > **Exploit Protection** > **Use a common set of exploit protection settings**. -3. Click **Enabled** and type the location of the [XML file](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-exploitguard) and click **OK**. +2. In the **Group Policy Management Editor** go to **Computer configuration** and click **Administrative templates**. + +3. Expand the tree to **Windows components** > **Windows Defender Exploit Guard** > **Exploit Protection** > **Use a common set of exploit protection settings**. + +4. Click **Enabled** and type the location of the [XML file](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-exploitguard) and click **OK**. ## PowerShell From 8aac77366e9dc715b32c9114f59d74cd40832094 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 15 Jul 2020 15:51:41 -0700 Subject: [PATCH 138/589] Update manage-atp-post-migration-intune.md --- .../manage-atp-post-migration-intune.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index be2429034d..d5fc5c71ed 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -26,6 +26,7 @@ We recommend using Intune to manage threat protection features for the devices ( |Manage your organization's devices using Intune |[Protect devices with Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect) | |Integrate Microsoft Defender ATP with Microsoft Intune as a Mobile Threat Defense solution
(for Android devices and devices running Windows 10 or later) |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | |Use Conditional Access to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | -|Configure your Microsoft Defender Antivirus settings using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender)

[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10) | - +|Configure your Microsoft Defender Antivirus settings using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender)

[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus) | +|If necessary, specify exclusions for Microsoft Defender Antivirus

*Generally, you shouldn't need to apply exclusions. Microsoft Defender Antivirus includes a number of automatic exclusions based on known OS behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations.* |Windows 10 devices: [Device restrictions: Microsoft Defender Antivirus Exclusions](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions)

Windows Server 2016 and 2019: [Configure Microsoft Defender Antivirus exclusions on Windows Server](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus)

[Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows](https://support.microsoft.com/help/822158/virus-scanning-recommendations-for-enterprise-computers)| +|Configure your attack surface reduction rules and exploit protection (formerly Microsoft Defender Exploit Guard)

*TIP: Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction)

[Enable exploit protection using Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection#intune)

[Endpoint protection: Microsoft Defender Exploit Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-exploit-guard) | \ No newline at end of file From ded649eb13b5f7fe264c66d0dc554e2293c296f6 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Wed, 15 Jul 2020 16:04:29 -0700 Subject: [PATCH 139/589] update to message to reflect reality --- .../microsoft-defender-atp/tvm-security-recommendation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md index a1d0887eda..3555d2490e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md @@ -94,7 +94,7 @@ From the flyout, you can do any of the following: - [**Exception options**](tvm-security-recommendation.md#file-for-exception) - Submit an exception, provide justification, and set exception duration if you can't remediate the issue just yet. >[!NOTE] ->When a change is made on a device, it may take up to two hours for the data to be reflected in the Microsoft Defender Security Center. +>When a change is made on a device, it typically takes two hours for the data to be reflected in the Microsoft Defender Security Center. However, it may sometimes take longer. ### Investigate changes in machine exposure or impact From e9eda0b60e0875783a72f6a67837dab855c933c7 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 15 Jul 2020 16:16:50 -0700 Subject: [PATCH 140/589] Update manage-atp-post-migration-intune.md --- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index d5fc5c71ed..e24e23d35d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -28,5 +28,6 @@ We recommend using Intune to manage threat protection features for the devices ( |Use Conditional Access to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | |Configure your Microsoft Defender Antivirus settings using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender)

[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus) | |If necessary, specify exclusions for Microsoft Defender Antivirus

*Generally, you shouldn't need to apply exclusions. Microsoft Defender Antivirus includes a number of automatic exclusions based on known OS behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations.* |Windows 10 devices: [Device restrictions: Microsoft Defender Antivirus Exclusions](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions)

Windows Server 2016 and 2019: [Configure Microsoft Defender Antivirus exclusions on Windows Server](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus)

[Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows](https://support.microsoft.com/help/822158/virus-scanning-recommendations-for-enterprise-computers)| -|Configure your attack surface reduction rules and exploit protection (formerly Microsoft Defender Exploit Guard)

*TIP: Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction)

[Enable exploit protection using Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection#intune)

[Endpoint protection: Microsoft Defender Exploit Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-exploit-guard) | +|Configure your attack surface reduction rules and exploit protection (formerly Microsoft Defender Exploit Guard)

*TIPS*:
- *Make sure that Windows 10 devices have the latest [antimalware platform updates](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform) installed.*
- *Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Update for Microsoft Defender antimalware platform](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform)

[Enable exploit protection using Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection#intune)

[Attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction)

[Endpoint protection: Microsoft Defender Exploit Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-exploit-guard) | +|Configure network protection | | \ No newline at end of file From 12d02dc040b84b13b07149221511339404bc3688 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 15 Jul 2020 16:24:32 -0700 Subject: [PATCH 141/589] Update manage-atp-post-migration-intune.md --- .../manage-atp-post-migration-intune.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index e24e23d35d..468c7789a3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -27,7 +27,7 @@ We recommend using Intune to manage threat protection features for the devices ( |Integrate Microsoft Defender ATP with Microsoft Intune as a Mobile Threat Defense solution
(for Android devices and devices running Windows 10 or later) |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | |Use Conditional Access to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | |Configure your Microsoft Defender Antivirus settings using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender)

[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus) | -|If necessary, specify exclusions for Microsoft Defender Antivirus

*Generally, you shouldn't need to apply exclusions. Microsoft Defender Antivirus includes a number of automatic exclusions based on known OS behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations.* |Windows 10 devices: [Device restrictions: Microsoft Defender Antivirus Exclusions](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions)

Windows Server 2016 and 2019: [Configure Microsoft Defender Antivirus exclusions on Windows Server](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus)

[Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows](https://support.microsoft.com/help/822158/virus-scanning-recommendations-for-enterprise-computers)| -|Configure your attack surface reduction rules and exploit protection (formerly Microsoft Defender Exploit Guard)

*TIPS*:
- *Make sure that Windows 10 devices have the latest [antimalware platform updates](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform) installed.*
- *Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Update for Microsoft Defender antimalware platform](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform)

[Enable exploit protection using Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection#intune)

[Attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction)

[Endpoint protection: Microsoft Defender Exploit Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-exploit-guard) | -|Configure network protection | | +|If necessary, specify exclusions for Microsoft Defender Antivirus

*Generally, you shouldn't need to apply exclusions. Microsoft Defender Antivirus includes a number of automatic exclusions based on known OS behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations.* |[Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows](https://support.microsoft.com/help/822158/virus-scanning-recommendations-for-enterprise-computers)

[Device restrictions: Microsoft Defender Antivirus Exclusions for Windows 10 devices](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions)

[Configure Microsoft Defender Antivirus exclusions on Windows Server 2016 or 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus)| +|Configure your attack surface reduction, network protection, and exploit protection (formerly Microsoft Defender Exploit Guard)

*TIPS*:
- *Make sure that Windows 10 devices have the latest [antimalware platform updates](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform) installed.*
- *Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Update for Microsoft Defender antimalware platform](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform)

[Enable exploit protection using Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection#intune)

[Attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction)

[Endpoint protection: Microsoft Defender Exploit Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-exploit-guard) | +|Configure network filtering (also referred to as network protection) | | \ No newline at end of file From 214e4a324e4e920378ed9b7ad6df265b1e9bce55 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 15 Jul 2020 16:33:38 -0700 Subject: [PATCH 142/589] Update manage-atp-post-migration-intune.md --- .../manage-atp-post-migration-intune.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 468c7789a3..e16e7dd956 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -28,6 +28,5 @@ We recommend using Intune to manage threat protection features for the devices ( |Use Conditional Access to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | |Configure your Microsoft Defender Antivirus settings using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender)

[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus) | |If necessary, specify exclusions for Microsoft Defender Antivirus

*Generally, you shouldn't need to apply exclusions. Microsoft Defender Antivirus includes a number of automatic exclusions based on known OS behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations.* |[Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows](https://support.microsoft.com/help/822158/virus-scanning-recommendations-for-enterprise-computers)

[Device restrictions: Microsoft Defender Antivirus Exclusions for Windows 10 devices](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions)

[Configure Microsoft Defender Antivirus exclusions on Windows Server 2016 or 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus)| -|Configure your attack surface reduction, network protection, and exploit protection (formerly Microsoft Defender Exploit Guard)

*TIPS*:
- *Make sure that Windows 10 devices have the latest [antimalware platform updates](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform) installed.*
- *Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Update for Microsoft Defender antimalware platform](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform)

[Enable exploit protection using Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection#intune)

[Attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction)

[Endpoint protection: Microsoft Defender Exploit Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-exploit-guard) | -|Configure network filtering (also referred to as network protection) | | - \ No newline at end of file +|Configure your attack surface reduction rules

*TIP: Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Audit mode in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender)

[Endpoint Protection: Attack Surface Reduction](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json#attack-surface-reduction)

[Learn more about attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction) | +| | | \ No newline at end of file From dc0e82669b0ef1e10a5520081f87ce4de11c0ac0 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 15 Jul 2020 16:51:32 -0700 Subject: [PATCH 143/589] more updates --- ...exclusions-microsoft-defender-antivirus.md | 36 ++++++++----------- ...emediation-microsoft-defender-antivirus.md | 4 +-- 2 files changed, 17 insertions(+), 23 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md index 21244a7d3c..e203735345 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md @@ -199,9 +199,9 @@ The following table describes how the wildcards can be used and provides some ex -### System environmental variables +### System environment variables -The following table lists and describes the system account environmental variables. +The following table lists and describes the system account environment variables. @@ -564,21 +564,17 @@ If you do not have Internet access, you can create your own EICAR test file by w You can also copy the string into a blank text file and attempt to save it with the file name or in the folder you are attempting to exclude. -## Common mistakes to avoid when configuring exclusion lists -This section describes some common mistakes that you should avoid making when adding exclusions to Microsoft Defender Antivirus scans. +## Common mistakes to avoid when defining exclusions +This section describes some common mistakes that you should avoid making when defining exclusions for Microsoft Defender Antivirus scans. ### Excluding certain trusted items If you trust a file, file type, folder, or a process, you can add that to the exclusion list for Microsoft Defender Antivirus scans. However, there are certain items that you should not exclude from scanning even though you trust them. -The following lists provide the , including: -- Paths -- File extension -- Processes +The following lists contain the items that you should not add as exclusions. -### Paths not to be excluded -The following table provides the paths that you should not add in the exclusion list: +**Do not add exclusions for the following folder locations:** -| File path | Comments | +| Folder location | Comments | |-----------| --------- | |- %systemdrive%
- C:
- C:\
- C:\* | | |- %ProgramFiles%\Java
- C:\Program Files\Java | | @@ -594,9 +590,7 @@ The following table provides the paths that you should not add in the exclusion |C:\Windows\System32\CatRoot2 | | |- %Windir%\Temp
- C:\Windows\Temp
- C:\Windows\Temp\
- C:\Windows\Temp\* | | -### File extensions that should not be excluded -The following is the list of file extensions that you should not add to the exclusion list: - +**Do not add exclusions for the following file extensions:** - .7zip - .bat - .bin @@ -636,8 +630,7 @@ The following is the list of file extensions that you should not add to the excl - .wsf - .zip -### Processes that should not be excluded -The following is the list of processes that should not be added to the exclusion list: +**Do not add exclusions for the following processes:** - AcroRd32.exe - bitsadmin.exe - excel.exe @@ -674,13 +667,14 @@ The following is the list of processes that should not be added to the exclusion - system.management.automation.dll - windbg.exe -### Using only the file name in the exclusion list -It is possible that a malware is named exactly same as the file that you trust and want to exclude from scanning. In such cases, to avoid excluding the malware from scanning, use a fully qualified path to the file that you want to exclude instead of using just the file name. For example, if you want to exclude `Filename.exe` from scanning, use the complete path to the file, such as `C:\program files\contoso\Filename.exe`. +### Using just the file name in the exclusion list +It is possible that the name of a malware is same as the file that you trust and want to exclude from scanning. Therefore, to avoid excluding a potential malware from scanning, use a fully qualified path to the file that you want to exclude instead of using just the file name. For example, if you want to exclude **Filename.exe** from scanning, use the complete path to the file, such as **C:\program files\contoso\Filename.exe**. -### On Server workloads, using a single exclusion for multiple exceptions - -Do not include every single application/service into just ‘1’ exclusion. You don’t want to include exceptions for IIS on your SQL server, or File Server, etc. You should split different application/service workloads to multiple exceptions. +### Using a single exclusion for multiple exceptions on Server workloads +Do not include every application or service into a single exclusion. You don’t want to include exceptions for IIS on your SQL server, or File Server, etc. You should split different application and service workloads into multiple exceptions. +### Using incorrect environment variables as wildcards in the file name and folder path or extension exclusion lists +Microsoft Defender Antivirus Service runs as a Local System account, which means it gets information from the "system" environment variable instead of the "user" environment variable. Therefore, you must use "system" environment variables when defining Microsoft Defender Antivirus folder or process exclusions. See the table under [System environment variables](#system-environment-variables) for a complete list of system account environment variables. ## Related topics diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-remediation-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-remediation-microsoft-defender-antivirus.md index f8ac6071ef..65400ddb8c 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-remediation-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-remediation-microsoft-defender-antivirus.md @@ -54,9 +54,9 @@ Threats | Specify threats upon which default action should not be taken when det > [!IMPORTANT] > Microsoft Defender Antivirus detects and remediates files based on many factors. Sometimes, completing a remediation requires a reboot. Even if the detection is later determined to be a false positive, the reboot must be completed to ensure all additional remediation steps have been completed. ->

+> > If you are certain Microsoft Defender Antivirus quarantined a file based on a false positive, you can restore the file from quarantine after the device reboots. See [Restore quarantined files in Microsoft Defender Antivirus](restore-quarantined-files-microsoft-defender-antivirus.md). ->

+> > To avoid this problem in the future, you can exclude files from the scans. See [Configure and validate exclusions for Microsoft Defender Antivirus scans](configure-exclusions-microsoft-defender-antivirus.md). Also see [Configure remediation-required scheduled full Microsoft Defender Antivirus scans](scheduled-catch-up-scans-microsoft-defender-antivirus.md#remed) for more remediation-related settings. From ee4cd4131bfe4740f4ba3f7798d1f115adc0c297 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 15 Jul 2020 17:25:44 -0700 Subject: [PATCH 144/589] updates --- ...ion-file-exclusions-microsoft-defender-antivirus.md | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md index e203735345..714afa6ea3 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md @@ -570,8 +570,6 @@ This section describes some common mistakes that you should avoid making when de ### Excluding certain trusted items If you trust a file, file type, folder, or a process, you can add that to the exclusion list for Microsoft Defender Antivirus scans. However, there are certain items that you should not exclude from scanning even though you trust them. -The following lists contain the items that you should not add as exclusions. - **Do not add exclusions for the following folder locations:** | Folder location | Comments | @@ -668,13 +666,13 @@ The following lists contain the items that you should not add as exclusions. - windbg.exe ### Using just the file name in the exclusion list -It is possible that the name of a malware is same as the file that you trust and want to exclude from scanning. Therefore, to avoid excluding a potential malware from scanning, use a fully qualified path to the file that you want to exclude instead of using just the file name. For example, if you want to exclude **Filename.exe** from scanning, use the complete path to the file, such as **C:\program files\contoso\Filename.exe**. +A malware may have the same name as that of the file that you trust and want to exclude from scanning. Therefore, to avoid excluding a potential malware from scanning, use a fully qualified path to the file that you want to exclude instead of using just the file name. For example, if you want to exclude **Filename.exe** from scanning, use the complete path to the file, such as **C:\program files\contoso\Filename.exe**. -### Using a single exclusion for multiple exceptions on Server workloads -Do not include every application or service into a single exclusion. You don’t want to include exceptions for IIS on your SQL server, or File Server, etc. You should split different application and service workloads into multiple exceptions. +### Using a single exclusion for multiple server workloads +Do not add every application or service into a single exclusion. For example, do not add exclusions for IIS to your SQL server or File server exclusions. On server workloads, split different application and service workloads into multiple exclusions. ### Using incorrect environment variables as wildcards in the file name and folder path or extension exclusion lists -Microsoft Defender Antivirus Service runs as a Local System account, which means it gets information from the "system" environment variable instead of the "user" environment variable. Therefore, you must use "system" environment variables when defining Microsoft Defender Antivirus folder or process exclusions. See the table under [System environment variables](#system-environment-variables) for a complete list of system account environment variables. +Microsoft Defender Antivirus Service runs as a Local System account, which means it gets information from the system environment variable instead of the user environment variable. Environment variable usage as a wildcard is limited to system variables and those applicable to processes running as an NT AUTHORITY\SYSTEM account. Therefore, do not use user environment variables when adding Microsoft Defender Antivirus folder and process exclusions. See the table under [System environment variables](#system-environment-variables) for a complete list of system account environment variables. ## Related topics From 64c887ca3fcc89ef0e153a1d5cf7b4f9c09c60ed Mon Sep 17 00:00:00 2001 From: Caroline Gitonga Date: Thu, 16 Jul 2020 03:31:42 +0300 Subject: [PATCH 145/589] Add self.events.data.microsoft.com Updating endpoints under Office --- windows/privacy/manage-windows-2004-endpoints.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/privacy/manage-windows-2004-endpoints.md b/windows/privacy/manage-windows-2004-endpoints.md index 73e8c9e0fd..14db2c3cc4 100644 --- a/windows/privacy/manage-windows-2004-endpoints.md +++ b/windows/privacy/manage-windows-2004-endpoints.md @@ -85,6 +85,7 @@ The following methodology was used to derive these network endpoints: |||HTTPS|*ow1.res.office365.com| |||HTTPS|office.com| |||HTTPS|blobs.officehome.msocdn.com| +|||HTTPS|self.events.data.microsoft.com| |OneDrive|The following endpoints are related to OneDrive. If you turn off traffic for these endpoints, anything that relies on g.live.com to get updated URL information will no longer work.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-onedrive)| |||TLSv1.2|*g.live.com| |||TLSv1.2|oneclient.sfx.ms| From 4003b939958259bf8381acf565604329f8e5d5a2 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Wed, 15 Jul 2020 20:03:09 -0700 Subject: [PATCH 146/589] changes to incident naming --- .../images/atp-incident-details-updated.png | Bin 0 -> 52540 bytes .../images/atp-incidents-mgt-pane-updated.png | Bin 0 -> 105001 bytes .../microsoft-defender-atp/manage-incidents.md | 14 +++++++++++--- .../view-incidents-queue.md | 11 +++++++++++ 4 files changed, 22 insertions(+), 3 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/atp-incident-details-updated.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/atp-incidents-mgt-pane-updated.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/atp-incident-details-updated.png b/windows/security/threat-protection/microsoft-defender-atp/images/atp-incident-details-updated.png new file mode 100644 index 0000000000000000000000000000000000000000..0e2d2fd92948b04e667641ed8b7af1c370b615de GIT binary patch literal 52540 zcmdSAXH-*L699@=1r-4WK?Nx)f`W(&A@m|r1OiC!h)4@frH2v)X(FH^Es-vrgc>^J zQUn31Aqg#s2uKM5DIpLDJigC+^?U36dB0vcYb9Cdob0`4&&-}av4;9uY^QinF)=Z* zJI6W*RXWrsgUe2ld2F(C&oEgs$+b5R4SF)>vpvhFz?KfFKr zRNK;riHW`QKc6GX;_Q5f4_SO4fHYWUnU9=3$DYe!G|R;Fwe`V$HIqQQWdh4bZY<$o zZS}7>ZPQNX6Jj^TdG$u`YpC8}X5|fi%yQ%L<(O-qqt4i#j-fnwthRr_{P;2V(~3G} z=eUo7?&m%9w=}eL<0*@|PEkRpOVI{At;d|k*Mrb@c~UMv^w9y58!hu6%bJ^;J^wlc zR%Jjm`4wBfsB_IyrW|d8hF4l$)&Y`wl{|lDlcob z+T<;^jN@7Gp7(ox4Qnv1((T@9i5~8VL_X4Teg0-(Rg&QI>~lxwDt_G0K7Yhalls-Pf z7LciCt`RD$T8PjcecNXfJ@Ok{E~sau)<%yJd%&j%6)wPir^r}z^NIsw+I$y06CPqa zyee!9nb#F#_d3U@cg|dC+%sPa_`whHnrWra&CwPIr>_6O2lDx@w#{ziN|WFF{f678 z&-Cxh|M)89H}MeBvc_gb!+Ch89~1&{%s%4X9)u^McM{SiLiZ(=ATvT#`3d@zf=O+Y-pkr0t@8 z+k5p}j4Btu`4}le*zwRK#C4B{Mi}IrEPI_d{%cL_wMKIDqZX~xf!Yq@g>YqvCC%1H zzwDq5*`klrs2jw9fzV(R{j}{^;x@EysnxRl^I!Kd`)N{sKNhum(8f3k-0}nB-Et`B z*JJ-~RyDcglTc;r5^!_B&On^Pb*@udWuAk+LGADjoN-Cr}IMh-XCI;S?S?&$}{Dx12peby0`D{vfsqPCdqAT+j_Hmx^VF= zh`gC^Ez&Xw2wuL(E4%cJyH?f=-LS?Jze{MCXj<^H4a1(hrj_7~c^~b&xPvG6V1vn< zq@X@hU_PC{UQ1a#*C!M$aijuqR`g!G$i&iYX)_gqnF;eTdCGRGaOu4d zw3LN332KpS9fk)WqV}32Pm%VuNfUdginP-#Na%-KIDsCZPMi-l8vSPEb2M;m;Hiy& z3!VPGy0`V=zZhXMgz22(q#5r>g>GfodOxyc5%zSkr~K*w|?Vx!h=SypNqt1AHedK)@J)bW*X;~ zS0aUti{=h}t8Bw)uo4`@B_B(;;Gfy(R6aB*Znb3I9bo2&uE~+F_00Ek-`XntgEGHE zA-9~(u40)}$2zg-LXhY>C9UF8G2l8MU!!8@B8aj)uw2iuC;qJO*i3?=i}4C|<_Y#j z4<=5J%ta`OPl8}(N|0hW?SNa{yc@jFJpe;CsMHRP18vHc5jGC#A&B!XipW8}%xrP! zq*kn?XTI|J)7Z0KVw==BDeCNe24HqCsm8#!yLoOmGo%FOoVdD;1x{3?vXj@n zCBhhw;J;O$DtAeZGG~*&f~j|_tbK!MR^b+M8Qy&hFUQ5>PFcRg`;>Yb|HO$kBW&p% zWG3>seEwkNNe9bFMp<5C{csvj6Z1TxgfzWqhZ?+sR@M|iTc{e*L+iW;gJT21eepq#@WpF5m%^bYG%DmXs zQ*HXwZ@iEMn$t4d zlCnnXWe4r2JFaP60}w0=X0BWM&tGn&O~d_gFWooWGtAvo%QKgtGkNp?IoRcXVcsh# z<(h?yCB{)91ve5sN6HUj!0LDu*=J(x22a0^jscHZL+hVP_QTAIr1V!-PW`XCkkmF2 zrJ~E4_JihqzzW|JL3}d zCr{fQKmxpwPdv}sA;X@E?W1GM6`=~#Cd(j$D zc5nc8I4&k?cJuz}*)6mUVLzxaleBs_UfI*2>0yoZLE_q(hrvrV&#oqKEXyhpcXTq6 zjFh;39~uR#Ys|4m{&;cU;PQq>$a~+O57wi!XzaT)Yscanywj`{W%Ls-{bXSyqa53- zM=YTU#9DM_c>u{z!>Ja{UbE@57Ob;^8}fi1c=!9w}rf^ABOIWf#~((_8k<&l9U394$~Ot8@u?7(Ii;Mi}gwfwG$Q zfVY%1>g-8c+&wvBCFGO1#2GEfPpIIK0;#F}?qas1!Cu2A)wmH#=e+hL7M|itXBg~+ z3TUE~OHvcOuJ^Z)%VGSieIHjz*jX(*Kdwm^5<@=lfMG@k9>e4e;*p>!mDP!w@kw4E zf@wVO@oRGr-7e=kg35{e!Ha|EiFty9(EG;S8Hg<3h2m0Cl^l}HZWHp0_-Idnjs17!^I7;eJ~Z7Vr=v4m-_}2wqR_cFO|4V{;;ZdwF1BFcplT3)EY&iV{j5UM)}=o5cVWwP1xP@1L90s0rY@VpgV4bAErGzq0$Zw-cYja2r){yar;5)cZ{Ds8 z6p3>olyxH)XHq7W#|e_76mx;{P@H1%q*em{YUxsGx_Krhw1S3qj#9h6vXk4(>2i|`t@<}b%xO@fwYVrMjeOM;^6 zs`d5t+PV4p()#)_?%&Uuiu$_VT&&Im|Bpvg)N_LK&mTSsY5%s3nBIm9{c)gFPlezA zeIA%@{J%8lOK)G_WJ*?6d3g9==Es=)y1UrO*rI2~!2fus|GmCa>PY(W{{w3A|4X3$ zUomNtD?#6+%<%@%&{(HUGFWPz&97m{Gd{#2UYRh<^A8mauRfWZoAc}&95h!`dnx|c zi$=$pC@Ofgz8F67P#L%Iu9TV$7eg1oWcJTceT`MAD782N$)RsfY`%MkAm5m8ed!m5RCyOOZDby`N-l?fQO~Oi^Y@1;_Z^y)**FouV+rb1~T0}d9RaAzTtq# z`>nTx_t1wPy(^ixS|C8U+OZwv#V)2XENwd)+HB{a6r18kk0ki&!i>G}bGdGP;U}T| z>VTH(X=U6gNW4!lz;uwal(*J!FoJiffjg^daa|lHGul)xm2pr7E3|H=X*QBgl7y#> z72Y1Cx6l7_-BpthwP>{Kf|`Qlz*X&IFEZL;H$!bbHCqe6t%a;_Zk=dnZxbt%@2(R91U#eTY$*CmT!0Eygtz^?^e|$CClAs`7bt9cZ8#2+~5Z# zcMrn{hT>!Ddk?K-LZ0^?J($r<7=7k-Y0Loz7I|#t zepo+SgWCsQ+5m2q@Kfm<%%xe9g?h zuyE?`Pxz=WD0AYip>7{onjO0twB{7<%oPDkXmig6=|lnEUfE#$;D}g%v@`odA#bDk z@`z0?=}A72-xCJ#s2$D%(k~YOv||I^;=r5U^GS{EZ_%XPpr#q)xs<|I14&OmbAPYp zTZzV|#d%)6KIr?kXE$jJrsvZ=V@uM)NJAUcVI|9>CZb{V_{`nEL50-F%wU>U##n1I z{8m=#dF8w?+m>=&rKS@5X%B|@H1Y0(`7VX7&G|dc0TJfuoxwL2KQ{2jOKPP)kcGxh zf|N;jdREb2RVXE&fBO-Y%sFET~u@4Mu4`uxn%rQx4c7L2B z?Ou}{O?z^3*KkRWDoioh3;D1X@+&GbdK+6T@;K&D`uW2c9|D}T{GJ*YW9BMKEFv2y zqZ6P4CyqJEdUO76O_&lTusljcu~~Aovv>q0bI_)n9~*(q+r8&UP0cEsZWwe0kErij z=5_4MjC$j)d+)&W$y4;*Aad|sUe(jMkHjRxRtr^vFL~@-E{z^(8-Z_?-#W*w-#pHN zea@`-%|M)Hr1Y)7iS(E8YM@s}T3+RTqsI=?>srqbH-}FR_|DL~?;QQRW##?#Z&qBm z_IY6Z2@390PJ8|SxP#93+mIA^di!M8!WA~?kmpRBT9p?wMxc695dEVVt-`wb_s=Ww z`X^$WDTB|tlT=ja{iy>pAMsrGK1EhP2kd>-*=HE}^RcaBRe>rkCb}|>Rmb2pv+0is zQyvCvD!HxV;vAE!#!uvO0iX$NQ-TjMh8S0j2M0Fk&EI)<+(|u;_C7!|U~`4>D!BTm z9SBQp3t4S>M<$d`@1=HYmG?Yh`#NOsWSH;s5`WV`ZNiOMwcw~-()O-wVIuVO{@%;a zu(Y+z^{>_!G%vgAyjsVzJ2AHDagFK(@XPy>d6OJ@2*xaL5Wd zB-idaxHrh{hh2%(V@cW%`}qthVDf`A1;Xr(l&L4@I7bP(0ALlez95Kc&rw2jJz`S`SmlwJNm7rVG~4SPFp_EKA&DTn{yJwu~!A zzajFo6-5MNX=_t7;M2Km^S%V9?UV_ypW&wTLL! zy_V-+4u!Dba-Q7zV`QBor4-?u2ilX)7rDn{7so^dh|6cp;O-x1!FN(d^&II8w^ILW z%t$q+OHq%*HnN9RON^XKH*QdT8Fg81-{ICa=`I*C(8nfAeAdK+48De{=O@FZODj{K z@?Ql^jSxvrRYsp98^Eb1akmTO1EP8Zy#;{JUv~9Utc@r`_s!q~6tw%P8jq1x#~x0& zP&_UMghumYRiIUn!Ah$yc0tdj@)EE=L$YZe==8DoFfR5d#OU`DNprD_%E5cI7XgF_ z3QLFK>V1)ezklifY&zW{Pph@?=c2A3`&qU_?PwB9<-NV`hk6DTT2Aap&+}}oaX<;2 zHZ#17_Qy!QHp|v=zHCpArpQ%&eG*+=Aq8}`yPH#M7k2!f1S=PVdQ8ox@%FGcXH}qK zNHFfJ)5UzYq&?M|D$6w2-Sfxf(%U<~PMh^yHXe8vYSWK#-N;tZ(ajjk&&jl2Yk+Uv zv@M_C0wcLNd@*x#;OZ{809zEx6%?}+iIjiia*TvljK}mxv;j|5J{ygV8u25QmQ1)M_f>QP@el@PU9N{Q>ZwnsB|>HXDC zdrn8PdntvLGl?T5YY4xWKx*FZ%+o13+vdCClAf~n^Hr{Jz-DV&ciyWPrFOG$&?9c& zs5H1o7MGZ?nPqo!C|toJu8r1^fl>+_W>tE!_u)WOW@K@uk%TAPVw1+Bq9|;dyy4#}o;7=@+Tu#^0AbT|yLPHzSa~ zug!vVHSYzhT=JXAKeZBPX?*p_T(hW7(Qukg#PDBFfUsxK7RQ8R(L7%ZxWY2Gml@NV z#>q7t`5SN~XkqthW`I)5E|GZjL6+k`XdDKv@|f+O86N#A^o)$}rSD^fWNW53+>@#O z9cqU4ZjmY^L60f%>Y&;;f?`O;I~F`l{;yZ1zcQZHH|si@n>~Oee87Gs%MJrT3sJ=s zo2RqD#gEO*ON)sT1N4_B zPvESkTfDKw^UKa|j}}9PQ*`y=uNc+t&!J=9HtTnqoDK8lpDuhW5e2K(Ay z|D4iagZ9LFSvD_P9JK0ej1M*1&MMm8wr&wTy_@ppAnmg2dd;WM>qmDL`QThZjO*OH zH=1Yy+Vo50;ZRrMr@#EAqLZzdWP_0MnSmt}g!=uY9%4aklJOTnauIzhGj{lzppsMCe(E3#2I!$ar(+tmy!KUfe*U=@i`= zwbBSp_F{Or-_9Ty;`a?)Y@b==J>vbfjw;IhYWRH>)je={&AyxYd)G;%(%$9LwaN+S z%a8qch4iEyFa@}CO96vVY@*lj)wECFs7y<5N)Yc(n6#vJ2VfQ~jaGj4tce)^VOagLUQ_);?YnXNEb>Oe)WF%y}jFrm8cnqOB(-zFsu_=nK9ZmHul(hu^B6rhWiUe7tdsC#n9V+hj`lUV&D%%=uJ=iaNQkVw}m1)@P%} z%%d{_X*uwAA41L+=p0HTs`5oM2s-YenPa6Ls}pw8)G~e&a$IHmvo-9^`T<9_bB^Yf zf7d83sc|zdovu^b4aptZun`UXG#XYH#8%qG1 z|21OiZlPvrihiw~vA^7o0pRv0Z9Dh4p5~ zw*OsoId|=crBwcY)goQ1#wv>FU%PV9T3g$QEoY?l)JDmbka8{W#r$%F{sZEujDm`G z&5NOMg;K!Sl9`I))Pw`7rn~6t%S>wFc29+n>P>^{Pb+?5r07MMG0NF60DW^T`r~Si zA4!X$iUDiTcgGhDoq#)?3T~xStpDzs>BWTG{IOUE3%rBh?Xm6FL}mboZV{X7w0+B9 zxoJzXXhFH9g_)W9T3!UhFL_KQ4-nbdU6fs$OPOy?bi;TJx*N|}6Mjc*m{ch>#^Id^ zDvkB8j?KSU$Ux;T@~? zi1lx`Gd$UROwj2j2i@I_GsEqjWrCUhKEDGlFD4|#B_+MB!@^omojPSRoZ!$O6?I51 z(+S31;GE?_4avX(RYATC9$Ij8TI4f7GdAk`zE(z_Bse&+m%tl_#R_u#%P8aZ4lOW% zq%{=rFEpdvz(jODZ0nuH*>OsKL7}sN&RguJwi6H{dF}q6IL{KSgq4$Q3X0D{^fSAX zTN4ZTYbi4A63L(Je6W+03xF?S9o(PZag(5Q-QS~BJ?nhH!Xng&G*c)LXm%3D(w|s> z^7_aZTXCjR1G(hV^5azRBeJ>I?-Bo@!Y%C@5v`1}{?A@FD-dc5Kr=O*uiF!ahn6Jt z634?y-XBF_an2>>(1!P4Yq5!Cz+%nE?TY_yhbfz9>;{0d`aM{<!KbGW*Ho6%gF$>Yu0;$~O6U?BtbDVXw*e=Q>R_4`OQ*y1E-<@Ash2R>P=< z5woMUdCvA&`b}26BH%#pzrIwPQ8~;Eck|3IVz)h zr2|nmmvim;?u>-E;c7bzEbC-sN8^7}mI64GtR+>f(9P`6ejAG#l{xd&a1^R&08S~K=2s#24F&K|0-!jQ-}wyNDGKUFdEOt<#RN`2WDLYXyS88y zRc0W-QUCdng+My^YJr2=qbirjtaVdXPP?pLigih4jsn<<6Z-ZcQ=86c*J8AcSqFPLc zlB)>pE-V7Dhf%S|fImF6HVXcuK5)HU`392aTLI^bh#U{5KNYsofQ1s0{kUa;ll?G} z@{U!(N{8cg|355LQe48u392#s&atWue-GY9H522L)o1LlH}!}T+sbr`)LfT5>$?SO zwQ9zVO0gCP-ELlD6`uH)n~A@X@xrROH=+~Kqvl|=Q4qFKI9HUMhAoS(;@j7?q-$CS ztl9A))as`NoV@FCpyb5kudMm(e-t!R_O^9&stbA;qJPkW(!k=i^}ww)#Ph(WJKbRsnJn%!1vWM){CA4Yq0i1y1?Nd=Scx_M_$qS%bVS7l_SUFqk3vrMyJRs zv{FFRp-pAOHw>21#HVsf|DJ>i^;Q2Qr*U{YNc_X0IqP+$0N^kCt^spNfvx}Zn*v-JUB0d zM;L}cc=ZAlJ!JK7*9N+oLFE^ zFnP3r#2fSdkN6_$vvE3wUR!xy1b>R+1YQH^Hqz`(%N=eo_`Mi9RG>)I+c^}XEhkL- zLX}kv6{!Ez_=vT$`ypTdA(vq=WlCtc8ZZ)4jMXWl?V!A_JVG7FpaPMdRxf%`%zb?% zP0WLnlSOsYnKh`hza`j<#z%!Lv0?G|OVck{9n@6eRDOv3<&ai?b*vF+9Wy3mCp7|- zMim(4)jHF(UAO)$Sk&(y_I4q5>yTAv=X;6U)=r*b-O0ypE=-=il8l!{xpTi1t?d+(s_BiJH%Dg@l}Zv-_Q#T!WrLT8b<}Uwt2Q(= zAb(L>Xt;mIyI2Ik$zSSufl@jI1EOHDJvYZDiLlr(XdFm1|5XGP&6mn~#mmjNRb~~^ z^50~-|Ho*7kP4l9_p7}K^RU3xWB;Ts-rAu~amG_4>JeeVz&Xmd0&`4MEUr8UYgY59 zqReBw|8PQS7x3lB5v$(*#z$DC>!ceHHst?Ak!w>UgH7E!qS(An|Cg7ATEORpt)9{x zH(UrNLdI#X4y1wFXHJkiVn?T>{BEeI$mGQKT}FL37;WG2 z7ST~2xzMj$WLxhP$y;_Pp7~au9Y3OS-{ZNp4nl)T6}z(rH-$jkk|66npQiJHD6s9E zOozF*t6?P)Y`jISe611? zyF`_z(V1c7868$et&B&h*ZgU-tXsjQ500AGcW}Ecz0CtW0l$O$|46_L&wLN)7%5gC zAp*Ipd`qI1XM=COM60Mvql`H24nPw%2Hda@TDyDz1IjE@XC|*T{YVZ~+VkNhrKo(E zRu-e$jJKL?G3t|!Wwpe1Bs77RC(M5eto~GBIIWu~xpshDn(hr+I!4^}-tO~8One{j zg@=?(toqj@(=LrZQCzMI=uUYMDDhwPsa`ZC3k`2Ggsc$l%K}K@NB!>$$iU$-_xJAH zQK0k!cL6NNO}GlYijAo#tsDSd(VZa2WR-&2q#$!>WIZP$Xh)LXznJPy-%|WU+^k*q z{+JDlILP+ln8*%?67%{7K4A_a0?kYM)-J17WXJjmKWq9&o-(aCouB2zE|TtqoZ)UJRY~< zB0H~=C1E?qrq-*b(vM4cB-XcFdQWi2`|ggre<*l!edLRdL8U%6aMDaxQQ9y+<9mi5 zvc&AnLc-|wc0;AZUa^>!r7g*&X|ZBu;Fk z-?G75QDu~ubw*fs&GpRVhH-9yvq|o^{!)z$-3!l5$J;0|+kLXHwajsuM^l_lGQHyt z^6Kzmr4n9^imjO&p9&DlcJup#YQ4BZtG#7+uzznLV@tU11!mEFzIbrS4f0(7d*bbq ziCaypI~Aoz+|zUA|Mgzu(1+AaQbtpfduJth0b0@2H~FEth|2XSJ%> zLt94s`Cx@w_KYw6YdFFqM5Z9an(c&r@OM8tIvLKr8ukpCnI;r3D}LJJ<`dqc@z4Tr zZ%l-ZrA@h`zG>UC1}c}wg7D5aKK0hfa=0--_H=>*+vqoAR_R@;Q2mmxi6H;xraQ5; zBCnr+{x8Dp-!=Fm?FxHBNPeBjfrj_aOdNG7+P+u=-r+Y^$pWt1D(nLDZMmc2R{lTF z>pVuC)3yGUNE52&Ju4g~186mc2ec4D$M;}S07c^TC|1IeY{HkH6%~AeG+-$ zGVEuk67OgqT*V7XQY2-cJWibY3v^*Nd8ePSaLT(WM> zBU2wY(iRx&QQc~fR#WjHilCKq>smi^?JnZ$YHP%Ns3vyT%_ z*0aEQS4n+5KiV2cC^tyl?2Dj$!dfZE+h}h2Lmk*k?6?b3fwY_$%Gb6z)Dzk zWwze1o?^M!>-Zk2F^igRe4ixxjzubP{U38Qq=D`iXr6bwvd**{G4Ho?d+mQ)B z3lfwYvtUpu-3|M`A?1aFzd-yu)}X+7Ra=?G8=xi%9=yKf*$8PTzeeY(CbkagnIA~G zhW}icHdtJ_yk)4UrM?oTV?cnw*ey0{y6hPh$_vjU1p=3DC_N=q_R^h0f36?vL*+h7 zVwV@z%0KvU#hSt{t1TvmV?jP~0XNL6f$Mdppdpw^8o2#El0IW9>K5QFFCJ`;QgDbF zSlBdRFp~WyLI;(67nFmSnl!w@pHt|>zu-0B88lQSNXqZ)xE84HGx-$#Q~`LFmGA+` z;GEmr&ah`JEm}|bd$TxzL2?Jr@&nU z6JF?AorHI<+ACA6@qPDtw_fDlc@Q?{kX@dzLiR+Ay2&Q|=RAP6#+f{ur(xM2$CM@4 z;R*a7-kNY(H`trB8!vNY+!$@BR$uN8+Nsn3BibmqztHr=Ij=;ymKlX>A-kQiOmz#GO{T zX76QX$&oLwvKwCQmY6gxzHsc=(jLUQML!U1t+Mb&(5;$+vNT*8AkFqp>Kbh2rbfe4{wzf=Vr&sl>7r7xB30G z2Y;p|KHQJS}TInkl z+0vQBTKLc2y(aJ4S!D5c)a~1&jFKyenq$JnGEeUH%cF6G6Q8YIsXBwaIojIXCsh=v zM&)<&!9LUp42uRV6veoh|BA={P~jC>#8+M7$Ic6JpDQ#;))gN+SUY*dS<<_Z3(ifg zg@#_Z_rvwuH)G0d_tBj2$DcV$&ATcpLhu$~405^qp-gP3a1_9ft7G~~i*l1{p+FLB zfq7nx_x9FE(b~J#!X&u6-~7^|E2?*)Va2aDfWITS9l+pK7|gUg%J9thzs@~0|CO#TO_TMfLPsza-GfOR~*W=(F0N_^@n(7Yri_owIqW#d{*~$4zVfOfNW<5B~4p?RXv)f8G3 zNf|5|vsI3_3a;_ZOJ5Ey2~*iRO{v=+cD}tlWW5i2t*R78E z0qU$0DWu`vq}7TuC9MGE?thd*XpV*79iJ%dTa(`(Lry?xA`=H`)xN{Y2YFewo;lvc zk7cm|gq-ou@S6U}Sb(ndrJA7|#MLZ&GV)P4bL8bWK#S^pwfYg=Jf8SeP3E~Ckd0!B~*OA?xIFVR<;|d%F@*4E$>f1FxhkXcwzn`K&Q=Nyfz7bg1|mkg0gsUb0~?m z{^se;f-4Q4dJ{g}PN?1YU?l;i^~I`4$7?n&lU`$+p0dYE5wC<=KnnclPKL*0-?M?w z6l@v5%0g%vSYiJ>?#)@YRPjN+5r91%XFoG{{)OIHcIOcmswk!1{E@@)##xKvI z2ki0oLe-0(-2@T`U0#pt4E;zhHFE5`oG0Phx;unv?4e9c!Op>+=C~HeFbGOF4!Q8W zrV7~dDTvi5sZ*aKFK!*Yv}~OWVJtHahVEf|q0`5ec2bXk(VGtOjlue` zR<;1VfM@Uii?AJ7;-?>=IWhGW>8zWuvWw)2($yRm*TF98XsZtg)*7RuqOxm~5%eQ{ zZF-aoOa42%%ONS0hRI>6F-i*9H#i7+hNyA!rjQ1B?}6sZSCeU`HYyEy+QrW>UEs;Z zM*y$jdVQrscZC0P%jKbLo+;}HeC59)tgVjGafq~lG!8c&18yzz*;(Xqpn?Rl{qkKnr#m>X)gLGE|F1WQ5ZUv-%6 z8iXe3^EnqNn1=;ksxn;34wNddylk6P)uVI5+p~!!KE|H(^vhVZYmiB{WbZmDAeQDC zv|Onr4m1Ps0=<^IemTn{rE6-Bzt9ynkA8Meq`%AsIPkKbX$dlmILlPhUI3LCWhFf! zk0lKllkE5JD%%9Y^uMP3P*SmWpQ^f}LM{nIC}UJaKv=ZO4pDsDE^BZ1251-G$l1|E zry}lPun_MxYpd-MajVwNX9Q)3Orkv_e+e~a9sDF@?Z||rme}^+OQ00zq}M7p-?9%r zbTK!g;=n7OcydXp`9fh~W?=_AQFokZU$LBJTXJ?+B}dmghL+Lf#xRGh7RS=@^z0lw zg6dC8@Drrqzw@`$=ETA-g}suO(Y4pOO`x}u>MdDG*Uj?Gb{D>>bKs(&dLyJD!n~`imh8+h{UJ5&&{`8B%r1>5j#)eRx3QCkEW^sp+zQD*$spKPUJDfy5)B6 zIOKcmr=cF0QmA~fLG#c^G4FX+_J{(@zD^FvDe39hZ5@X4-c-HdT}Wwsbcq_~qmxt4 zg4%;!#egYoC4L#a)$4rYnb5uC4i=Cb__6ZivTDHS`Oa1Mbs?&p*qUsK*iH8K>FzoE zkuhcA^~CALo_E=!u&ePO-49x0E*Uo*3kB%c%Z)^Tn=0O~-3yJ|%(rNGF8vci_Nlyt zdJ^i?u*$iscY38%I@BPg?JesqLoY9{AAJZZzkJM*Qotd_!Tj`>SB_kH zk?~}!>>^!cSC%R(zqldV)Ra&uyhcskTz+lL#9)kv(eA&a*@$ z2RfmpB|VKx4?7a`QZtk2n@cIqO39L?VYR%Ww0Cx`G@Xozrd0ZNM-U_|(b2Et%_J7> z9t>cE3m{0^h4BX}w#Eng8G+wp_n$6(JKNY4rozZ|yYSB0Em4N0cr8><)Zf%D_CU zq{iRm&AH*!T>jqjZ(4LI68V05wURegXXbYQnfuVGWc(j9Gige3KV`!FFr#OvIj(|H#>q1k z=#beiaF!-pRn5=!Ew6ubS%%gG#eJUtt@hW}I4q6#n@A{n_iu_x6{PjQ)$(p<|ED+L z|7YFKSNHR&y?eax`#UltiPj3Z*oag@>nGJb^nLmP_* z9UHDmN9(CQKCIyPZEF$pO)^48scgTX&)4@XeId<{FWG{&Hs;m{(kQ|cf=YItcyY&% zc=N>J!TOV{Uc8yUcAP79?^jSkjrqHW-6Qzr)M%p>ch0fo0ZZyPEOF&vvuG-sUC(-I14bd*pOl zd{|8ngB*j_MV1YzOK)!5uLPw;%`4|cZcIs+6th9d@2ofLTb;n7^M~(aKFxE3C!v=s>^KP4Mkh}G1AY<3-y3Vx9pJti zB{E^p=IiRw*uw64i$W4n4hsJj-O2hh3z#641 zrH)&;92jI-O63s`DDS!6sN{V?a3$pFt==kugO8ndF7F5OD2V~flHCIt*5Ja$%p~^~-vv?{)U{abWV# zU&oYv|j-_ zxJ`dPPAi$Qs4D}$`A@@v=23QT@OP6%EBL{;{E^PKrQy(=MtYyYmOByzI^_`}chnbc z?NafvZm|++_Ayc{43qA)KXwV!e2w>!=4UwJ4Wcw7+4`xJ1(yPIH<$I`@drorgU%64 ziyMjd_@f;y>MhxD$jxQmvPp%lDNAF{h~6*jZF>)IF|BV=QWk>v3%`kds=B?__+Z|N zovY)_+SIPEZREX9?F;VRA5?@mFL@PaUX7T+-DpGkf__+y$ylwCAJaw=!@->j2CPku zL5%P->$sna2}&A~Tv<=?70dI(=O8radOPddJRm>wbDk^g85k{&?TuwRkDKqNG7afe z8SGimDyVCPer;#|Y_-SBZe;h$P8eDr2F?ll0u{6}uJ&pT&`*uOMGkF_ZnXV)L+{P2 znDYS}DP=n)58qxGy?Yw2sIE$+9)?1Mro=MUP1pHiN6OhKHnbl2G_uEQ_01C zdHht1X6@4Uze`;P-=O&7{%I`;PnsF1QT1>T?)-xNNw!&-1;#EWcY^hp0r*pK=5*uq zbD*Yij=grur_sim0%?HtfliVz4+x%Xd2)B`u&E%BOQYOffBFV5A7!;N7xetFX~5lf zqf$<5Yb{|)VM~fYPl6u>yqlAdyN-hf-!6ZqIf;QW^kr4^DroTj_vfI;~;YBd<#^`Nhz_RLsV-e zDO27t(4zEt`aYo0kip#5f%$kOVpI~6r3Lrz7uujJodj`+wn`eU1bC0TOIQYk)26cn zjl1?+Ofq+6ZPP4v@7*_^Q~TZyRE}fusys7vuXAwoX>?$9Aut4`M%&(aPsy=9s4o-= zH2+q``!jy^Q&I%ACHP4wVIxG*H)KwI(XtM)s_(iWvFmqF=pqzRC*f&$ z-W%$|f5sAzo^i;Dj1esks<`DH=%2{eD9ow%Z+VD+lpkb!C4f5m+LTV_UtLHS;om$M z0MGo0l$$81ytmsRqaU?kSpALX$ z-D!p$QW4r|vecINkuI7vYUEz0u#y%t;8xbnAoNHkZR8wc9r@J35H8i+iraH@s5EQR z;H+^gocch%Fp;ov;T=~~p!gg?69$m4G9YNVnRV?pdweHz+=nYs;b*s!?fS-6)+&0Y zpI%TZZKgew*4tAR#I>IpUY=Fvv^}vs8~_QlRVO^XXAHgQ^M7#no?%UGQM4!?kD>+y z8wdyy3pSe4lorJT2oaFpL5j2lluk^7N)e?f2na}5TIhscB1MqiLr4e_kltGYgd}f! zik|!K{qg?1d*Ao=555n=&R%QHwbzxuDM$Z^>hi|8D;bsHJYKr*{7D$^5WL>3Wkh;;Y?=Dk$YzfbIz={<1!! z13agOjKVG(eyEshej~jxE`W7X4S41FDQO~QKgBCi72@v+O%&nCHzqwLg|E*X|N5|@ z%qcbjGiKeNS~T|DN9@ZYwQ2Z>}GSye)EY_&@E_~aulIE(R(5NabjA&;~(lcs?n!Q8o0_qpBUZN zso9usC}V9sd(?;PD$^Dwal((rnS@#ojQ0v-B;-*1cId|mUoD?$5r(g*xt3=simUy| zmYqS}`pIR}-U)EJ*)a@$AnX22aEZ&c0!Ss^n!9PgnN+5FL85$n7-B(as43w}cJ{E+ z0PLF&Bbz7aRR(~6MaaAwSaIL=hqD)PKbf;9b7T07pA#eKay>_!PP&T7$lAi6p7>|- zXg>jqn*y;Sig#nI9~9z{6V}bt+j;cz5RN<-^Iq0+{u| z+F4)k#()^%0&yPZHDhNWe@YarCAN%=En+1{GSH!`{J}T&3iS}ed3suC*)`D5_7;GU z)nTlgq8Y98^3q9MxeL)M@jcH*lWgF6N9_aQ=Gl9xje(j3j>Z<)SQBM6)R!g<4}LU#?|fu+I?D29@-`U z?3s0YLG6cP^%?wY>p@l1zNTK$7EeCgdD()XJ^MWm(k5=}XF-~6x`%a-;gQEk-U2Ts z{$2VPxWl{#mFdzNkcA|%#oF@l8@ZM8GS0a*_3REC7Mueax&kV9QpDF1zIW;`pFMb_ z9dqCL+#feRZ~r@tNDa@W_Ys@RT4h!H*iIk$ExuMt&XCw7+{SDYN9j&;lY%m1 zyL)BEA|Lo|EQnm*#c^$Xf7o#6@7^l(JcJ6leF(p<=sQ!;8rZjRHF$QnRfAj{;xY;? zA^)^oS@*)#cgt2bdKYjOCzL;}pQYSwT>cOkMSr|2ZUXm8Vplx3d?i1Dqs(qzVphR* zy8{nhLU?rAv6R)^In<{mq7JbH>X!nsq#}1yRSKANwh?jY1Z^xBJog@Tp`{CUy=HqV z0Uq*NK+!?_b3RwJF!`}|PT)%R&Qpfdyz!{+5=uxnl-{%Yjsd%}nce!RVYL_i90`5jh zcTSwyzFk^ozMLJpN4)Pw;cfQLBq=#B6p$0pty&F&%q>+fJ=M_b_;E?sqv?oh#iao; z%lYAM0jHHCt7<8p58O+=CfY`C?|#uzpHBe z-ByGvybzLdkah1;LYqsa*c0F~*+qxW}8 zH$HqP8O>69b1H||Wu*MNqrVi`ouJq8-M~AD5ex6>XIxWo<@u28of#uqsmnOqx!nTB zf1+Cmh=CFW0N!2rl1cF$@5Je7`p~)T+3EoPx_8Up@~J}$gsX%8%iUw!>x9zl=(U9{ zrMOg)gv6n(()%^R>0HDYlV;mz3_qy<_}E-hsw4ha2uemiC=7;ryPp5TVyG!>n{@f{0uue|`(W#|Tbp=sLy_eM6z}Dbshm2ZCSt z9;Bg^7BliLU%D`Y)o&BIn)NxxsTWi^H-&sfn?+UGcSWG7BB;8c>&xp9m#y0nfBh}z^=SxY}^Lsz`6yr3vxYI(px<+n?p1$}d=o)&p&hngc zPa(U5N|R0YRe+Z2M_9^g;v(sJW>^ap`eVPW(w&gL0osD`^+PnDe5xy zkqYad1r`W3?kNhJMtw`9z2BT|$sz=#^O00Wl2eAeYCTE{#^7qB1 zI!}2=qDDbGcDV+@=F>CNTO74B1@2W$>5l4I zOCK?+YxD5>;~8wK3=VHwObk=1rYSRj;6v0$;h-tOoJal=VokHu-S**eQLT2crzI zY#eOpjDxts`r~BR44Spw`cdYC(ub5F%6zmZystzf-H-S+jO6|~_Vp)=MDjVO*x`to z{0B=drYi~PX`jGBxqFStS=haeIZG+3 zDp;wjrb}caAF=L*L}-OGZnlk*LReiz=*)A>1Clx_k_juzncqvt6zSy;=Biu}RGKsa zzCh6zGIiZr21u7|Stp#}uZ(gUB5EOyqma2q$SY=nv7y7~1Wq)2F>i&mA5@^ zVTaGp_uoZ&dMr^DuWKB(LuI<>zqc?uzCXC6)M{$B%Bp&&2(#4iwx>&Xyz%*;MV9{T z&*xv8tk_*ChvmmS+bBx74Ba)Pp~N&j}3kGgDUd!6rn}U(n z4K#_{4Y(MxPd<|@bkIABB9T}y046g&0(4qWi=8KJw=?H**Q0%xp4(jzB$t=O`~?OY21T}U$Wclje*zO3tUAsY$f+{;8vL(sI7mcYT8* z5rt6B{VM$E8^cd#x6$wz`UpT4)~wRLvi`Erp+p0fERG6`T=aE|X%lj2a>{+5ey}4R z69KPK%I3qo4SdCgjX+Y0gF&S#BuB zIHFCZ$sPMBt9riysJBzS1?|sQX-{?Q7ZUe&GUbEJ6b7eO-ugC!tdj^+oXKy^l}#JG zFMY)jl{=k;G$4o1&M|rX(7G+5fFTtp2Xr@?^kw=4&qb4OAHw&&gpo1|?5fr#qN{$4 zzj-vj++Q8bT&I!_$_VNhQ+4TG=NYe>2F;e0DL9^0p5uK;YNc`9LQzC>;`_YW?YmXm z+gkdCQwk?)wu^v(VjP?>@Q`cs?A_eN1=SPzJn;xEdTHMXt>N^mwkUY9?^4Ud{21Tz zZG#wofBhd)3SMrQo50^et;h1 zwD#fCO1JBtvxYFTk}Zy)b$lSB_KZPe>!&MM0-Zf|hLt^5 zBwq$$2y!<6-0wK!0bQoQ*lEefDETKJp>HBT4%%zF;0NR3SF#=Zjlv$Vq%JV8Jfn}* z_ib~1-HFL5x&KUSI6_e#gCwO4s0?XN6AQN2ZuZf8CRje_9>P24zAA?k%VKw@?8zQ| zGWW-7De|=|@gj)iWxm+#TcR~rObkBtKLDX-ti~vBg?aBV5AScBG&CFQ=5ju1^1-1o zHJCY&{GhCRl)jZ}E6?t!tfs|eWCv_Qq~?=>y+Fs<3`YAltv~idksNKdm-r%4wIKr` zg``G{SCi}7=umd^(aI!cb847!Cp>lRw!&oSjZ`vs2+w;G`M$5KR-G8+Nwj6@h2z z3qM*3tdEyfgNx)uz*p)nN`&n?T~0k~4|wZRwj8DR{kW%`{s;@fUmRw#KW^ReDCfVz zheJi8X{6*$@IoM?!K9Cb1Yxjfw5MFPpPoZ|+T*0YK|IQRmuV=u)2gcgaf$y5p zp<$!5xMt>I!e(`zuB2dYjF%IKvM`byCQXm zzRXI1gbNmQhee!!X0eUz4(vQ^0(QzDVb#zQT)K9L4P`e6a?P&@l58vm5f1K)LRhOe zCYOth``-rM)7bTwBt|631oBZI3&ae2e=CgZ`w*#IqVaas)t`2Q)iUFqu)R3%afK5l z)~lHpa>s7>mKpaU3*D~AS=3sO+1;z7xQL?(6W#wSDZAo9fRQpqSevYlr!_o+5egnJ z=7j)Df>T_|a5X{VP2TL95$+UK!^AmlAf&4#_%TZDDAMYqwXbuUJBsE*aikIxK0&HH zx1nmIvy1+WGbBq9qX;_ZV4gMq|)fd{E)zW-vb%X(ix&7!9jLB_e_puq|%vQ zXqQp4H~Dk0kY5j2&H!{Rck=+-!OL55<_dOOOl~E^*6B{Bk`04{o_m6acDtxhag3t9 zhmLp*9puMUD(jBnf{(HogWGK_yY{xnhCD-g&M(-k#Piat?34gqc0l|Sfsi@dGzNjg*kP;xDzkC&!0a>Sr~u_+zi}8R(`}M26wPsE3}*hXPnJ9s0q2XaGi(wHNFZI zKSWAm??W9!%H&j9vSmHLJS!z2vll?84miqG{>6?t-A$*q+HxC)UL;4Hnf zaoA*~+&aFFaH34PmFuvKO(=7B*U9jrpcnI;IaX`UFV=Y~Stw?w`pdN{RJqU}YHX=< zzt#7($)S8w8HW;N7kloSZ{#vh$v)DA^Q3~nnt;L%V?cIJ3ySA;E z?vuy<3?Jo&bzz@X&8A^cIo`{Ko1wj$f870dGO(p+<|wLhcvchQMHvyy1d)*v?$z#O z!R2__#7~su!bCu9Ah=(Kh@W78P0Rk|_x9I~Y=7wUo)fRoqN(cEOfJunIZkj6p~_6? zOO+7`CiyITlOCh>&zOnlKi2rT<^w(6^mqJ<{IO}<8~ghDlGcFg2in@-UwgfujNi^A zoe{Ql-mLx03q9j~42cFb!$9E)G_tuus!T87*S+fg1mav-jjrg#XM z7I15BZAs%H+LauiTI8*Wkzsz^T4UoT0y-2XWyJP>KqWx?rR+OCht z3V9KCes^z>_g6%3;hd?gD}Kinhc~o*mM@{ql2*>8Yg+o*QJyiPWnFiA#lorr5PNTW z{tT=9ed%|oq!r+HRV>k)fvDXvb{M&8u=7b7tY5aEg@;Y?A{1KJ%EAfXGukqH^TP%!)OFrqeGkb1uEP^O5Vc z66mNS@n4p6&KK`_T(+CGZEj^dCne8YH;c1Ej!n<-R{@E_m&RZ(h|9=K#%1^fO`ygT z{!}-s^?tP+Pc5@byvpYTmEi7*E_`yO{pTRq{aS1M1sAF}qb)UnpOmVr1GeYM0upr_ zk@v#tZt&+|En*gP!HWv$#5dpT#pr1X+dLr+&kfjPn4nXzuG$d;EjE#-qPV|ms z2*om(fmYr6{*r5Vlj22!<)2$>I;J&}I^Bhbk-`tpQqKx1fW2Ut*Dz;Q^OrgHLxVwW zRzvOiq;MBKz%*uENQ5?#&Th_v>SM=w!2YSiI}Nub#_IB zL2i$^H$^w2J_c$(kM&HSYV&XnxEFrv^Dce4zgJao^8Swq)40yR`}%VNEqJ(3b@ktl z%B;w~!}@TwAKW1`WP$l<#E50lvg9%@G_&2(Ts^1pu)>I?i0^@j#%Avz_ihCVyJT(D zu?r6d4qo`EoiEuH6BeXMuJ#@(gOPSw%LlZSw?E+`Xk_o?E7^*62hS*Y%zOtYbGFAy z43&-|%8U0_|8O@M&XFGwE%?E`0TAHUgWKFXWrntf;Hrg4j%ChjEequ4AYtP?P)vBd{MvGrt!tTXqwlYwXiR)ku=%>m{j383fz5?|+KpS0EPdE9oJ ztD>mlaZ*zD=fHh%rQF^9a(a|xq{qzve$f`{P;@ah~6NG z)b%P;Y-V`3?n5tt;7b;7kcmo$kQ z{=83!2|#3P5QsfZXFMEMG!;3v#Hq)g`Oz#nUX%Hd1Nu2V8CTp|S50FxA zfuJkb^9f}?wXX&n0ACFA{N?`2Y=5Y!ujf02c77dm$5}3LuI+^sX7bqK-YJ%gJb$in zSlP@o=ZA%#rv4C9RHPDY82k^rA*^TjbwfpbNwOckM}3)V20XH+4ii+rga`S?v1azA zscG|~>ORkSzMDU7Js+=(tb!zl1g4KwH6jlUdt9ebTbQmb)-6#rF201Tgn8J->0VEQHu1(QAq;0~z#9rkMCFRX*Mk8!h>e;O4-AjrderB`YFnO(3*#tge?OS0%q5=<@7*fNowFsdbC=dY` z`AS(k$28Jmnv|llK*M5&!o6caVC!&mI08X!#S4&w-H>JAxH8v2wyoFm5`>{Qf5u(7AiLfDeOno za+cLgT*5(<`Fi2n$#b74()bQzlsu?l>D&_vhaw zjAU?@aao^yA1>xPBx5#8?R@W*%%8xkgsN6us0t=U$b#Zq2}L$G1#%}2Cb^&+J%?+- zwf3#kwP#8_7x{zd)$LorO0Ki{$znD`yge=dUA;h z;Ez2QqFcB$LVf#OmpZDe@%AN|6yV(Ml^=o6vZL$6gD!vJMt#T>qrNZXi_b z9=oetyw0mMEgL}dk0yB*&2!g@`ytckb7X69+c!J&npL6g3NGQ1CEi#*Zk%GgDU&3w1g- zGLchO@b!|V=Oc897X|6fa(%c(yR@^sUm#+?zm6qp+fK#DA@xzkVY! zIm3K!3kb#m&|MuGyz2a_uk8)7{tZy|ETH;5BF&Z}az*swhBN){-t1UQ)G%19Wh&Wc zT)jv{9zmO%o%*x0!6;59(8(GPEX;zYT>#$AWcs5!JXg`hYXEqgtt)Hs_|=)S5nIsr zLC}{;?o?wYbJ(gM|IyL+)Uy>~=DbUy*C}DpWiVnvhvl0&9W$C)4|c+E#U zcZ6EsmRC90N4>-udL?9K1HbGub?tC&&v1oSp-EKo3gpJtqq!{a?^MeA03)TBdS z-B-38t5dz*DcK{+r4YfBL*x!J76$pI-RjpjG>_(wH`Q}i>Rllx9g6Q?K zA%bs6es|29Aob7c-eL>S&IcoUa;?R~D5y@0Q!qULl$9RW~+yERY+$s_>j$ zQ8Umm{oBrr)EI+bX}NbX#&9c1v!(0ZqN>m60;`vnU>+>_N|UFyrNP;iZZSF^ufDO_ za>`w^Z9AkZA_)_DPA>Hn($%J=5bclNoHQ(&dXdYMpp;T(AGEON=2nCY!Ux{Y2e>HK zx_1WSWC|R(cA~&M1neLl6hVrQ#|E#roa*m%4QdVGT8gbkkeHVJPD0ThyFAB(pfIA< zt+#?Dj7SoS6F%L98cytp0a+en&XKwj6B7zYx>8|{&0!1*b>AKYw>?)|1MTg;a=d74 zqHFd3UU!$FZ~4)QS_%~F_4xiwr3K4$kLAXdO<78F7}V6=g0(v>#l$Mryn)+v0a>R? zXfUhX8SunN9I=b!Os)IZ?Qv`6-Qg=jYBZ}t*~0Hb%Jhcr{ng=K57HO>0;b#cBUtB4 z){o~mcIA;l!UE;%kEf;0g3VhTbYax^BeCX76s|HZ>RTBzFZ41cpq0zydHh@#j%gfg z?iILHMHhl7V(XjpI;QqS+ie%0;pD$I05-@o;RDTgDbh!bDvMAjU|XmOTG1MujM!=~ zFs{995R-qS-_RlnBmOf|ie7k9ySsSDju4g<6EEEw z2Xvk>;fx2pxq*}FN2h0FmTt=^d7mOLjo?eXp1CUvYG39J3eocLMa zk$M`!@vR~LnYFf+aM<9@5h0$A0O5z&d)606>?_E94bmX>hDjJW-TKZo5H)SSeA2MM zVsUE!bU{r6(NvbO{ot@|u7PodlBsNsa_hqNbh>>SJ*ESH%zQLlj6dn_%j(5<;yzf< z4A7Pfq+bktc~)6w*1~l3wB)vr6j{!$w+v<~$8&(@IoTGC3af5=*f*UQ=-x^{Vz(UT z@SRV;uT-Mjv$JVwb)^pE42^&N5e$-U?7m`(3rsjs8?18;^sE7OSCg<1!8l76QX@e& zU?Wati)C~;6SCrLqKl%gG^oU8o!1xz^dn04$xz!J5Cki(wZ#u&*A>?nN*KY%o0;IG z67XUvwdSfbFvxE(4mdBX*taJ4D{0uo!P3go^0lnxju#Q%)Ub zIM#eFj6p0M0mY}4{)sax?~<5*k9Z3a%9E)W8b#1q5qOi(L$~W24?`MQI5A2FbR4(Z zxA-zJMr4E?bfS?_$TEG!H`jA@Gx)B8?nZSO5*;4oJzJ+sig>@U>|6yd;xjeepuc4# zG%=A6d8iW!D~KFeHFoM@x|hn^>sp|npv<$?Ih5Q>@2t4lw1)yy;{!Df=y^4zyKQZF zn5bGwygN@oVCj0_!B`4k12M37rTY&B&}zdq(~O*e=>{g4EFsYLw041?RLt`y$+uu3 z0}5ShWc|3=BGhc^;EC7>e5OVbEovM z_;-tlHLs|ITO7t#4l-3~?L<_t^&NShnme)O!XwFT+^|UL_e*9XCGPMRA@ee6FIf6K zHuV$ni8VpjU^b?FJ^s?}Wk<$ma;A*2y0zCNl_}cdP@1yvJX9$(L^l0o9@*hGl*8N` zJ9Fc*1R~2QZh;uMyoXc}X;jF!RL*G)9jN-Id~Bg*KhMr*OdL!&O(}(=TVI|!TDU^S zTR$({SHlBr{1eS8cR*n|LCL1td8NYD288wmzI|FieuM*oZbR_%mh zYP{_%J}f@{(>#qr8(n82eaapvZ=VyBxIAzy0y4)X3%8T)j%ft~F{#aA0vDv&on%og zWVUr=;41?u$=p?5hQg@_rWFA4*r}9P!Lx0%Jx$mqt2e*8s%WifF@VkuIPsXOV*cG; zB2{PhkDGLoW7|6846)^rg?BI(o8xwX;o%9T@h%1vXCul8$tohpO$4h@&NB+M=)c(ex(6^YUujo%;7 ziT?5JY{Ujlp~i5LC0nc1m*}k!BUs<1wSg*K=LO;zk3p-s_pF|N`0#A8k%+Xb%|9R5 zK;8Sofs)n><|W84l=jlx*626XW7#RP!1@%u38oAN4xTB_(7eqPV4{5zCUnV`YYk?x^|rBr zM?uvq-zlf~6mHP=(B4NFBtLUpDRJewrqOz9mp;MPzIbip_RH_gH?qNw)8ZVZVdknJ z{cB|0rjadTq9yFFWx|jmMx8+pu%)aODQU$n z4;Q}bAnHrb>N2mTNcx*%_977z#ML;)m$NQ0WmP$bxH^G10@Q>t{wK35M%VR-R_#RR z$UzL{OIWJNeQ(zfK80j(N~&G3)@mq#FAeqt#%7!cyz!3JEfX#*IZ^-0OWXyJCO;p&9oo;c+eO!RJr9J9 z)e)@568HIfg*OyCWa$!>jjj0Wy7ps^IIy@PATHz5m(B2HHq&Gy=mX#pzUK#LutUb2 z_vg`lFNRlSyv)-&yJBMZ9kSMaAxn7aj_85QEQp>w&@T4u6;<6{__Y!t0-DdZBrx?S&Am@<**&83E@`RnQ3Iqmu{I@zBDumR$@W$5kLdP8=gdSZEx&n8 z59B+qA&)Gj4~}E!PsWfo%bjCG%(WDfflcAsaB1O}8)m_)+hCG8R`h=0J^U_VJ7l!Li@Cr!WjEB>l_zKl2&2pk)^+8p zV+~v#hh)gL+;%jNjnVt|^RMfI8{^x(1VxR?C%$demB2{M=mGC@WtIeN8Ye#BEhC+* zl3v&$q^64I{FvW*8u7}apYSqhriifjFy?F2Gv!b*=RL+-Um6=^5*`c%SVP|}ZRN%2 zZfwEipRL%mz;CHPJ(eM2HX2lT5Q^Dj$K{c>u2N=Bda&i}{=Ne^F$}FJ5-UN@9K_8+ zTC#a&VMsqvJ`|>ex6Oc^tt?2Hkttym@rR5t32((ugD7&cIFX>2lVfQ3Qdu>+qjh1- zf$+@aBsS9qqWOw>u~9iVeOaekd5m6ij(T&@g4ZHp&WD*G?Kssu&V$>Gp^+zb5`0h(^s1ZUy-`)F;%_Z^HTKqJfeaF2f!ba@@ttLwQ<_g}&OL z6IwS)Hw=!6Uc?r5Ti7rJf*^H8+7f0%X@Ld4ELjC2*Z#(9&M0Z3rsFpiRa0d%%cuPr zad#{q-!>xk?igcj4z^Hn~2259bIgOb{^i^ z+!~@?48{O5VbtQAJtoar7fH!cTFU3C=}ERgsydsu$|jgCJ{eVYHep-ilt8F@^!6A|J5490oR_ChY9f`cCq)I z2!*K$D$tl`u2`4KYKnxt@i5>hanttaT){j)DSO)q8fjwrnoyZWzG3^&6QG0tRd}r7 znS=-tmnr~OQXcKr@5MUa`ew8rKRuosI8o|m;GuBq%SrPKY-|@3Hzg`d5@hyiGmOFh zz0ZH9{7;uOL*sL9d6gv)QDxyG>ZJtj62QF|FGTUNbMo;EP>BdvIrc&0=*@Qy48Cyu z^`T(vGdOhP4djMD89dL+(5b|7F+RR@f@;71Y-yAb0@Jd6rwocS~pSYweyC`6A_`7*Vx9{pWtx z2>W?0a6p(_>2)l4ZJEpP!u|UO1r|sdI5AY@$~@Z=C);4)z7TzaDv-u6e)BlJT z<5Xm-VTYJ7-kjS;J_z1b&Z@oUoKx($P6j5Y(t+1=2Y%jp@IOh>O#x}`lBsG(T1+06 zE`-<-y8yVd2Kbt%BW!NctKjJvI)9=kOc3 zCEw$|_Q$^io)SYicx(KRP9(}w&}%EfKUsqvVusD<8-1*^w`AK}a z?%XC$C)3j?g&vIiq}0vI9z_!J=qtAllAz_xFHbvn`(b|dmN4hdQqPWeUG$0BL$Q** zu!P30`%V{$K5v~o|~Ed411QR-3}`@7mRkg&h1Z+Z4fJ>7M#@MX0+`EalG z8_T{9BhwU+2TPEp6N?dXY`7!vg1c9xYL@>;o5)?2x>x&vLh{Q@J)C#@$IMu>Enbs6 zUQxDyH!G;VRow4=?pX+KH zon8oTM2Y9U^o3g@zP@NbET6|xU!!Jd@^ttb$d5fsN~!z z*d?&;yWH_PaqZf>er&Jma%P&S4IJeXUF{muJQv{XnVinzVd{t<+oNCB%hatnH-&e zbJYbkz-i42!9X_g$BU@_SZIR%(E-0uQ|2)LqG?jov0wcmr~{Qb%p^@EF3#MRzi z0eHW8#t*kb#ma<~Y zQKHk`w;y_Tv*k1`5s@hL)vN#ctk%h~KZ8wM_BTE7W{wF7`x}+x|N1u`=6@?!FzwLG zCcAi)wH*0cH}qbOVqJoGd|3xnUyuZkSatNux^Jrt{P=U;qWq1q_uJp6 z%ND&o`pddmqdAgl3m4lD*~oxwVlI8o`jh7`qP%X^O|EnL^Cdk!63a@ax1$=GJSKH| z2U^ux9B++RF*Y>~(%faHIH zC&$uIBx|t(>+)uj*I8e*JICRCd+rUX>;VX1cf`v@al}z6agijUDL(h?)Of+DJWE zSQ8#Hs3l+VM60}C%g_a=xjBwJGzT(?`eY+56)!7ZAz_gqx#--$A1o!ku4V1}ObOUP zG|?zjDc0w;TzA_wmkBMY12=w6YVF7R=5Gn9Z>naD88={2X~4#aEgRqN^MHJt&*%y+ zz*jFfpRL`ujLU93Tqb*8s=^qq7?D3cnSGjlO&P zdxy`m$tk?|h&_?oqCO{qIe1+(HKJis%A(IS7+lcb@FSljEbp?JY2uvD4o;Ox9{ymQ zavpH8rs3yt&Af?*uQf^k_8ee9=H$SL12!^$FqlWgv^BGC&HQl>{UNO!doP)!2|B=w zyYNO(OwkOXlI+9Ts9A8S;F~P=yHc&^mhi#SlfQcFUzGt=Hq!pNn_DteS)TQjx(jB< zq;>cOa))&iY@iW!+2=tq^SI^v=2cA?K6@0@*HgFP7~Y5E))~J8&HTMHcp3u5ra(*m zjNYXqu{eykA$z)D)vlf&)4H=mJE13D2szIf-q8eXWu|RJbZ%?Mms1&ZtnH%u+}-eB zZh^mi{@jZuI1)Skv5@bfYsCa)?rAjU7GcaIOc`wnxN5ejPh4M9W_#sI%QSeuUOp8= zjX&yfo#Eq(#EZ^-@ZlZ?ESC!<{%4M;+WohXdk!Y%Z*;S(>v|TOQ(Bk+9%F~8{ayP; z5(pv;`y$U7D1hwe1Cikue!ux_ihqWfq|oz>^)R76R}+61QDO@^twZ+cZBmbyTs`Xg zclno}mh%5Us$OXJe!&UP{VOz8+!i~0KCiqh9UO)dpo}0^Xmkl zzw-OHhur5x5&*ZN%KHu1#B`vPhXyS*-r|Qysb;@~rpuY=U*#l$fQczLP}1ks^(wVS zuvv=XG)dC9F*fY!nAJZClZq6;SLnR-{?K$y{%KRQ4E^?}gY<9V%ztsYz&Au4Id`w7 zW`%F^FwTPEZuVS0hxJAGk@eUU^V-$%==xlJfYqWgSWsw$fe~Na-RzZkRIu+?Tb;yT zG@ZogT=aB_(n~LdDoh4hr-pT#WX0C@#`5xH)86eJD5Xf5T-UnnXHzynzxeLA9aCga ztA);9Z0C+Oj{hK9o@hd1xraYoHUk}=b{s2Cp{5Q#{8;LiWWdV{sEYo2;7!iEZ%>ZN znai)*L%HOYHbnb3Oqaq2q!+R*H@XIkvvskeqVvFB8UyVeFwV?!)KX(dW5=k{;6-Bq@a9v}+0D71vSFu1!MQhTFU&Ldti}iZ z)Sj{s-Bi9N>WuNSxMhvYm+y-H^}TE|=Ks|v`Bzi%e{!jVGXCR9e)cY@w-gd9EM_Q%QQ(?_mzXa>@h8YTBj`d>V8^SYgI zn|}}I#aHk3v)(>*6gGPink28z$r0snR_Dy?)7R?Ny;Y7&{`tep=f>4zf?}h!@M_wq z7G>5$ZF)W1FGA1SB|b9swbU!K=&J|C>#-wKZ%JAwdWiELM6I` zKEMCF0g~aN)_2FPP6Ue$mGrEJtG>~=dMP{)4L299ovSjc6UK3~CsQ}CD_l9~QiJYW zUCr)JJg!^pPSeU=?0$8DUpdM$nfHmI?p^Ek3Iy0tPdwkW?}(*^0kSYR$;GdHZgkqT z&QfD?QWzX20I|S}$1KaZHcu2)oT_Fj`Ct8f=I_(%|JB}i$2FOC>*`>cQ30_8kfx%d z^oTTRI*8yPVoQL8A|N${kU=^D$3ibUN)Zso1_%i~2`xk=2}+9ygc3+J5fB1INZUTZziUTf{kp3wWXvsp9!&u_C{9RO@9TUkhm z@akn1r6oHyg`c|~lB_|Da6#uFk%Xr}X=atdv#@zatf#18_Sw}!(hwD8HmY=aQ|LJF z;F(FKg=fHLrfa0+t>mIsu?ipmGTZ3L3BVBPWv2Lag`T4(p z*c%bz7Gqv2)!va*t#k4y*ri~YDPtS2@YZbYSJOVXw~w#~FpOtU9*_S8X=!`YDXDYD zb`xY!gP(VGTI|MO<-Y3Qoaod$9M{55d~zq+DIvSu&9P>))?flZhc{zBc=v+wG3_>P z$4_LLnqQ_gKBH-lXa>9H0QitMqy@U*VQS&$F$q%s@oxii;6t5B(q1qnSLS74ZQ!|~ zq1w=EM@n}F{5(v>U7bV!OS@K!RioiCU9qdd3CVwxPH}B3D@~ta(F13( zI80hx66u&4IbJH_1fZ|8uk;`X(qf_(Q!z$HI&l^@eV>S%hA)){>2x>l=>H&K|I6$Rkbjyb(MNJqiLgT#Pn8ko(1WY! zTK*rb%jIgGGcC&}i6J9gL8XZ&JYqd!VfV^yO_U~KvoNWf@y@%d+w|aYIFdVsFwKJ^ zJJ3dgPPMjYU6-Sns?;R%NSmD*4~pb%G$hMf3ysD4`E~So;c3>O2_iYle$lr*7m{B* zZhY;6W&&I-FBe5h>Qw!Fj6)(BI`<2wjnzLh%_TI;a z)z^hGf9V2j4}9suG1X6US8Hj4o6WRWFRjN|DYl-CXIVY{YQHRPyJ9bFX(W%Y`4{g& zqfxaQkrx)Dqj68Nk$mQ31^9yb9*tJ^lknMr64b;cpot3SkMJ)Hoa5Ipf`kv7auZ`K zoq&?^Ra_@vDFr~OU0Z)Y)ovmr)h<-Q{tOCg)-&tEaX-%%p9m=!RHIRHv5!tT7vjS0tpA* zb$qb-!QE%91k>8dX9fPmq|jninW%d8`-e@E+mg7IM92?YJf*3ft99Wojb0iq~u9B>j8!v=>zgbYwsvEz?Q~{ z06X(P*UiZPU@h50qP3=P?Xt@v^6Q@m%HWHm$9X*na{5VoNtgAIOpZ%2|53lnnEz3h zcIww3?8Bjd?JJ6r&5#_PG0zF7gL?VrhnBBKB)T6RozaudinkO!liloKreL8dZB1>P zc{Io!m^YWUfUZ)oVa*_7 z&fYvLm*-WrlT*l~l(#m&UhyB$d-KwrZr0=|Fe4gOo3_Vryke6S?5QzhDAsMgg=4Ew zSEWbuh>y36dMFlN3$x-Gzu9#n^fc>AY>G8o3;C;AK*<1C33-+cWLvI6xpD%ogR+>B zujm+fLLdlvot>Rurl+;-;m4e;STLCueQ=q6TggTr)0LvxFIq@9S28$y8a6V(nA56i zZT5;iDjk}lV9zu(@9#EpCCTV5q;OU6u(sfXojS~8u#AY6oZ0JkG3Nek^QtT8lM70f zu@UAC+*Z7-Cx}@ZNt}>>naQmbX!C$`3lTgx(yb938^bZO;~K!TYG+17;MgZNc)(O; zB<#^5eevs5Y)V_{60ELh{1K{sOkTiSQ1I%#Wrg)Kca!v_)C{x2;)Rto|ZFOo4v*)&$Ai(!Zb^#$Hx$fQ>~+R3Z8G2cdt*% z{_d_WU?#>cEL|tR$=0+U?QB?X3VkP05`sttdC|K;dTV=H#;~qtcippi(9hq9k z-2#1IIMFY}LY0-LVuzY$8rY1>n|{O2S=r!#F^m4};LwzEv&%K+9S|??mWV}A0}Wx* z_c1<<2uSZ7stymFGSgX0p8d5n-f--IKav@UTy4u`aZ)jmzDB^ps#gSo-zjaj@*7I{ z*7Qa)>v0vlmmbU9iQ^rR-l#gQ!CiBKGm5gZ_6fiCNiKY*uB^2(UvQV&Z`IqIHhMPu zgm!WR|HJ|@X50kR=cU8l)|{@-g7%@8wO@O<9=wN)x<=%J1u3J=fTq3U6XLHOGSV38 zj2i{jfJlimqVdavCV|MJG&)rZ7lSTWkt%WX8sHeuCRZ zaADup6O^1qKdQ60)UAuk)74^itv$GV{e@ox&$VF5jZGOY<<9*+)ZpDxJ5#|p6}ZMe z^7#pbX+XiGuN>&KC_50qDY`qk)!whxXS5R;1DA>g#bpVpKFwx&u(7t`15p!r4zBNf#)7@A2%!&9}cZap!{+frRO1T2(( zam5o%c4)E(GBaXE^|s%#kA)2(qmZk5se3ald2dwMPlm&i-i^4Iq9K(z&nW!r+fHi} z1*`--5o@YGg}0Hw3iRLxVP=kfXWMYF_P=hnps^ zHj^~Zw9`z{`S4~^JWr5e^V(plvy+T;o9VGN`JNgL2EFilZ#1ckWL*$~Z+ai_!11r^TSw#$9LQPWua?Nh?|vh; z~0?ANwHki(f|>KtV2bFpMiHRlT4d7Vk;Kll`<{yI1`O5HM~% zFa~52^2O~c#x9wd{-hP!Qx<_a*56JmUm2`<9M6mqH+H=V+_7tcevI`=mIK#dhV~{S zTOOLR1tU4(0u?-B2rnqizC?7TPq<&H%y;Qpt~s#3v?c`=JqcDZbVKMSA*)O3J*LQ2 zd;Q=7QmKgn=#YUc)$*l~A;Zj;N4gGl&cTU{I?*6SqEIv;;xt)J!BKr~lh~-dZX*gP zS2YfDKO40WoNQ1*_JMH~5enB*Ngmn`9V=HVrMz&%tAYd?xJYvDPv#uw3&v&=VXij4 zC!I#80*G$xoI92eVhZFr2agyEDFgi9&q}{KL2Ymqq0N^_;`MJrR1q##!D_$4ITS6u~ThEPtN= zD9y3H%v6kLHsFdYB}I5iwG$cyCHc9fE68Tjt#*6zcKx!xHX9#JzGpC2BYk{)ZiIzp z72zJDOTG#!$E+MkL&rv50yvpBNLg9%qv=wq5!)?fs%ct@rR7AOd<`n)JF+(~#XU$3 zgPLX*XFeHM(EDC5I4-T1zf zsQynf7DDRcMPcMpnodk@^ww)od_*@TyP}1(9yYwaapT4}mZH^-;`u--NkZ_8j4F-1 zTSs|Mfx5=te?WW@tn=D#v2W{`yZaPG`6DLzg@gW81J@fD(e+IM_j5Ljg8$Fkib#Lx9U;%@WXkqol0d+V za_fi7u$x78ol5M#xYQRPElCbe!uZ<_7Dz6Tvr406on_k$0}^BlbhM|iW2eqB8I{)E zBgZORTnPnmeJ{#snNsiwmk`*?meKQ`|3PT#UPyJhXY`GAh@-R;0Zs|wYoxf$XA)Nr zc~@a~l}5E;AQF|Xr?a85I{J6-SdDm;PcA?24=$gr=zaKrWf|qgb*a&R475xU2XwC% z4deDERxAxj-Ch}$hph$7za5ee_+kOj#u25PL5(x(q+Bk#9G^{?VXV@P#0p$n&5Dg z$7W0QdB}a!9X;#Hxd7HITNyR3TpT0Eu*duzSfiVn>1I0hPY>(1cQOG;2v_cv==jqA zK_LU~?nkzJZ5&aOnS(UH{`B@1$&E69x8P^vgDE=eJfw}+X_g$$VE80WtIqR1?Zs^; z{Aa<;3NrXkf_PW~h7`AZ+1Lv%K^IVh*(!pkDMk;xEYq1ENLFb}JUyzq}X zgFGkXl*Gu)DH=oGNBRUn{A#)$o+7G;hBF8x&b^y0?s`zU$d778i7#G*4XR`8qNdmU z&{_)|<;4q{DZANsaIFN<=x(xn{sLqY~3Hw9wBqc>bw~8_bDvJ)KtzI( z#WW&1UQI`7a9`T`<0a{$fwPNMS$E?8LXg7{Nsd9kw`)s9*_r8!4(r`G@_OTpgEiiY zs>f+#Z&?Z#;q{ekDAV0zlv}$aS&w|G*_w_iMv>mY&Pm& zcmf#RYvGLPQUF5#uy}YWme6B1?Madr`_zU67d4yaaJ36}(kYGVUtpr%hIlR%yVpgY z33(58^#fhi@P7R%DV_#+avcnJREV_#Y*DVTXV6Ya%TS|_T+nF|blomU-#trR@GL+* z!%Ph=f`zNUb4;;vqK1m!K9rXjz#(r?qIF)7y{5BV&Qstoh%UCinx=i_}*OLhKa8c6~wWc2511Tit+D$u)$h{1SCu z^LzU5hMVWDty^fAAF&D}?_UG`fB#CX@*Dm|lH_lB{VlKWmgGN7ul=n#e{0U)n)6Kp zf1BF>AT$5B>G<1p{6|cOM?9a;?=vwmdDhU-V2bq;?L1WuNyybd4jaG@(T`Wf=KlBl zPzr~Z3wW=B8fQOjUq_t%+p6|oT8D@m{vTw){2L?nk5rt>f8K68Zh#n++s)5*R8DP(5p_Jkkx|q0Pi^Ajhr1f3){r@VZcb!zW6RemXz9Q%_qGS(#E54s|`8TOx>vEfn9O9OtDzLxN?W|9%6 zpz`~)ZIF{ceNeU9-D7BWNCRldP_}sYrtyf?1|u%hHI>}AdQe#lPv#ESg>qv_EB4^A z{1Q~m73ZMS5i9RxpJEiBd{sd%Mj4VnsLac3Gp~ed4v+O3MPH6kEGLCXQh#d^bI{j} zHYKLmPzUkWjSFO>5rT}{5)y3IU&?8K&twn^etXl18=#U_BEK4*fM0P-9j6w$dpRuJ z$zElwX=sXt)c>pKFJ2Y2*sp4_vR|%U+Js7<1h|Z3phv#6S{slztAt}sV{RW2GL5_o zTv$=CwMNtX$MWx+iHi?zYFXZU`xU;ZGebB^PZ~YVyyNJE@vQx%Re8jq<+D3jnP2XU zs9$ET+7bwU)TBf$xSif^mWZ#}We@F=Ti+Gcb-r~b4#R1AaBu={)fTd&A(x(;RyfKp zbkhH<4P3Cq!1f!I-w$sI=uHxf7IA0)efQSEq_gOza*V6cklW;PQ2CKua@Ajm4=Nsz zNktBnb|TvH2w|sB6EOgh1F|$1{MLT5qEVdr`3i8r=6ZO3zgFgS^#Oq4)ip1A2sDUUx#9N{Gy2MJ+f}eOAnIh@j9h9+E?jr(C%N5$mVJ(;bc=6$aQ@e zdNI@&fruqkSL@X`G_+lTQhsduJ(GbnS=LDe>`p@whU6bPxJDibWq9??`nJhs#O8jN z-nBeY_Q}N`hf6>IpZFOZMt|2IQ%UP>ldo|qzV}oX-TYqdM?U-i0fy*5O)dSWZ%mvr zv~iy4H40vJ@U)8P$L~e5SGw7hKM?zx4wxy3RSTC7H?VOQJhqLKrFeZBezCR(*4CUY zd{^t$rREtbx@iE(cuHqC&K9mbQa!iVdOkpWUwz91K3 zq8!q5X)4`}@0b_6x-{}qi=Do<6u&s81PHU_hi`tz;vFEl<@7Z3^uc+2BRNi>; zt@>7-`oK$?F0(|>an;zAVb?m`g9hMg;}fA z@M}ebb^h7dwLMv=rL37wV;wSnEY>XF{A=^f2fTfH`RYe(f={fg!h+9C!5S~4wp6&< zFKY0qIib>)FL+g;Pq2?EWBL%)LaF(@mjd>Pg?1umF03roC5i!^E^o3#uH+B5ZJY}& zEl9pQ5N2EUdT~}IH%8V(H~?*Zrsa8c4gTFM-9&njllIcRtyoEF%4rKKMkXHoD7H{~ z4HjL*(5v}*y6J23ZMKT+urj^}r^k?;>3mS0C~7b$4_rcsx*wN*cvBP36dY+$m3)y3 zi=A=oxj^ZeHPRC_(%CBZd5XZf$-&w_(mQLSj#SQ&qfFhAn3?1RqA{+{eY|I5flGvu za=PB!g0N+`>gvcux927H3fVi? zgLNKKT?NVErc!AOlA>NM9Vwm{wDYrwww#$|CM9n28o6pQYmr{;lX0b5H`ucA{m$oN z>;1~NfAkg!4f#6oh?}Zzn~R!cp3Pj@>ogcV^Je)R5LxT)3V2KQoJkJ2r-{y;XR<#Z zNV$JEy0=Iq(*n^~Oonpxag zD#yGRZTB{peKz@^c$^h?;a5(3fVFDvRi-TGLN=+a_APb}CJc-XEBlxSYt@SnBOYy)m~xEi?=Tgvy0x=@y2>i}c%OQEx@L z2U$Y6=>nz%>j!VR;d^?$Y;Q-4)YQ~ed01%Z*|4y%2>-VJMnBK<{hl5XC-Tt=3S(t`lq;IQHcNLy8zFYiPB%8P}P|ZpQ*4_{d|)dqkm-PB<)8&r>$ObHdvcq ze4`_kwxnjSVZT0|i~DU9U%rf0anPwZ3tU=Zs=*A_ui!5H-;Mq~6t?f`BR#z$on|TR zH*kTVAGxp0WdOuz!iI#LXk=#o+4;^dnf9>nxC_#&8S9ZNn;f_Ns~Mi+cRL#A)77}K z+$WMdUQD=DU6wXcjdJ7K&jsh=o7T2$$xVJeT4iSD8|s(RC-n5It;8TVd}83Jb!)kgp>5tb*Ui6@(8 z?=ylla;qZ@PcXWo3EST1aK|(5`pD{NN&jxkV!7W*Y(Dg3AFY{=JA(t(8$XsNY zv#yy5WEZ~XPG#^|{?%#yFLnBX?<`5;-fr-;Eo zQe6O0_@+UD(r^%>GTe*2bi(V!?c#I?RKap|R-wI4rw*#(z%}RH7EZ1LtrD1cog&^F zmDmKp;e$bq#Q{tG_g#G9h)39)n$s9{c9nX~r<#7nD)T`ocuF%_{Vj$2zQN*RZYyrd zVP1aQ1t$0Li0czxxNjkOMWgB-u6I7X@AF{n#NHS+GTPKE7Z9%kB{`NBEZeOzvxBXa zlU!o1Bm1AbcJ%=s%*D^oh}z0_IJlY_n`tk`A8+LpJ@$>(hov_R&Ai%s*aJal$hP#VQniRZg z`ARuDHzq(ae{&#cr;*U*{zy`@!IFztEp0bv?s+-7L?N-PA!#W`P`O&F6|X0Y>hMa= zXT8W>1>_F?9lJ$3O-4=SB@aaQMb}YCK%>0nts$TV}Mi(Ancyfp;We@s;2A*F@aTMM_ z>+m6axF>YnO20m@Ei+KD<4AzrA$5`=!^C=YN!hl=*{|62n^w$5Y25Er>z%R}_j%R7*^!cJ`Va`fS!MmI_J>e<1{OJ?UwenKBcBAY^4UpSE!#s0~D+yJTY ziPumEwC0CG8IDtrdC=Rw>vmUdrzEwCp;yXG9Jk;dYEoQ5v;Ix{Oc0jKb=eCV!=qr1vk~Q=2Fu8>%tBTOlAasISym>G|=B z(+<|nwV+TLjX)C~wxZDEKqFd81_;<&;W z%{Td3uK`~9GtCz!-lb2enkqk7**nDHU@ncVSjzKLo}&LOXDC-sr7SvQN8LN-x6|3} zhF8zfpqmYEIJI>$Le@%j(Nz82eHJd8q9oqZB+-yNfT|g5<%c7^;XL)mvfAU)<6HbU zLpol6GYTst-4mT;o6#z=Z`>Wr4+@|Ce>@rY&%5H8l|Qzr6Aa_gzv`8?M|pl?0v>?E zyg^A$rCl2#(Z^#5{|2<<)&a%--mb1E2aye6thN$u@Rny0L=g0aqa}8Ix{ytY^lF?Q zD=k3SWax)=!**UH=xd4%py%2DeYYqIb&z(NCwU)@=I`BRx0cQJBcqGQ_ob%AmOs`LUWILVr(S)4t z(I|DNps?SfU(9TFVD6lYlQ|+~OGWtGPr6Z`@<+p7I-#163FCUrIPr^_B99F+Oqq8m z?(ivi@^NC3VV^^^>${C1iu1W%DX7_?oz{BZs^T$Y&ugd0(#g-3Lcja7tT<6EUSmU} z8oeyRcx35x2cc;pILt+k{I!j(<`hQ@h7J9>^-eeYRzp=(S$f?PPk}XE_!$=2{x~GFo8Qzz8wD6$@W^8Gv=6R0Eo;-sH zNS%YPnR1RXa%nFrl>vBAU4t$O&HLs~ihP1S!17HPC$~+H;B&Ip0NUd!x0r8!&`{_C zG-jT&u($!@eLjaAU12rw`!3vAj^S!9WRw@{$-AjmAUG!P4=J+_E4SG zTVqYQN`hzW)rtu7K@Z6NLx4X53puYFkB3ZGwg6hhiv8@m;^suy!H&O5LUWyrvT#44 z^dQUQl+1!swgyw#lr{ftGxY zE7Y=Ag@G-UICGDyN&+`U0zyWKocZk*AABluG;UK59-Y?M6Y#$G(w4Svc6PHs$~}1- zZ4fbc-#-xg6LU~*t}3%IxIDcrU6U$lO-*MYYp0ixtSXSE5 z^%kvXC8uml`H;QbhYnP)C!p?}SV?zC6OS0@L99RN&&2+`I2)wrBvIjg?_PCmFl%=C ziw~Cl?JiC2uI&LoP!Da@kBchjo0*0tB4uC~ImlNlJ$)VV4Hk0)l<$0y*%gVyb zZG$&>x-ShE>uS9u30;*(VyYSwbRXz1m3+iJ2^p~o3E8o0R)0z4>&y|pr(Lkq*T5s$ zU=}t5gydnDBLh>RNoUHLp?@WQGqCC@CbO@r9{VC-v?oUgBWd}OlUw7uJh1r9fjmJE zw0X3*q#129wPXh;wZDQLk+KpZ4C%`l?>sB;Co>FkFsI#S2Ab6Oj*&({uO7fro5Mt&)F1{+aYq!>pe~N!m#FIzp-Ylq zT&`3ghlv5Avy)j z@%9@&!-#=j#od&GB$BbpF?yKyg(S{Cs1M(3n#cRC!FWygEulFRG^<~;?{Tmd;jy>( zbk-m{`}f#06QH2xdw2^>$&|>ca`ksd(WGfN^`Ouy|13x=C063}z>tpqRda974(|iQ zr!c2D!S4Z}3nn+51Ro|A#xXR-%1b+biGQyA+1vQ(`W*Kk|6j3ls<^TM6gk;rTw%u= zE*o7x*KIosF2KM+15N*q!2b7s6_}>JOTNA;Wc(`)plCuKjBj>CtY;HmQnMLS?x;KH zM&x!trX0|E{qOgQbE<9v)qbRe{C}IiYEpy86Bz>o^25W!B1-IAf!v7ltM^llZDk{j s%=<$6iGMDaJ9>-sBkSw0BdoQp@dwlIV(8bt*C?H{x^SlK*K4=_8=I{)EC2ui literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/atp-incidents-mgt-pane-updated.png b/windows/security/threat-protection/microsoft-defender-atp/images/atp-incidents-mgt-pane-updated.png new file mode 100644 index 0000000000000000000000000000000000000000..88d8fb23d2e120b26056d2c6678a05e091b0b0e2 GIT binary patch literal 105001 zcmd432UJsA*Dj2raufvx0V}99rHF!nfPe)=x=2C^(wo%KLg-OZ5fD(2-ZTh=Bou)V z2u&13N~j4)2_Q&IAdwP!k{izX&g*%<`;YP6|GR&=dkjX#hP_wjnrp5(pE>8Vh`w*6 zbL7yeLmV6&M|AILJ>cNrI?chs$@j-z_HWeP)d}p6J^l}LZgZ4$otbCf>~pY%{eJfSL7#h;{u~@UUv_`?w1N>%92~5CU9DSyAe#loHcWu{zLfISI zr`XqpuRn`+hZf`9eTpsft2R?z_R#kZ>^{Z8@$y7cVIq6z*N6Wr0kqDUcn#xZJU)wy z_FX;+9V{<4ba9!@XqVUdke`ugIb5H-JKnide+#^N(Zov%AK;*8A~={n#6UWK;iL*` zr&s(yna(5|{WYBvpZ|WEJ$iO%5ys>%sa$XTEmfq3iGWqyD3G=2#Rc`e9PZaelem2P zoyM**d?fy!{Lv>`7@@>;1hc~DZS8zz*k7ZBcl~Sb?zSlWx{~3aI(jGaTZfAte@%NU z{Xf+5LPHPWv7!_2WBcIhEmzDL74vqp(e9xmO~~Ygaf-JI zTG4fW%UX7E1|q6)dNH7oELh9kn%dd-#pPps%9bo@c6?nLN=bcHyYzK?ruh5hWnMsLtkUG=!LmnTj6_zvJRvq7l~f3_odqMq*>niItbCmKD^veZxkBvrRkG+ zT459ABbGPA(!MT}c4Sg*ACJ4uzFs1ObA-1f*Pn=}BuKjye}{bTq@;YA6w(HN#>EHv z6iJ_W4@=!Hd|ppgU5$sfi{C&|1T!1Q-fZ{xibT7UUq-KB!wMX}&bZq?4R(8v?V>sd z3agTr&Qift-m@b7Bk&EwLadRGe|a!);$vDearY8HJM zDYLWJx4C!M&iYEQJ9}HQpr}vxPZv9fSJfM&HX&@+`GFMf84gXqJeFdzbGkL9;~KJ7 z{VqHNhs#BP8t?B{Y*G^qe4&LIw2m4(ZvqKWFsUzi6qPPp3B-#m*8gPcReD+5S%>6W zW^9P`@QER7Q>|x9asoS$jF6InD(9S1zZIRv-Hq4jk+N8Yebji(H8L6yPTOkAF28NX zqSb(9VQ}|x5@7s>Jr9rAh;^|fx?>j#@Vu9Qn+6Ov;xy`4?sCY$co@j*s5i|obT2m#_oTyytw?C zkElTf@)7&b#kYLZxFHy6p8Ka&al5k z8!q(*A#pa^9r_0GRj7~=o`X2FXlRv-KO?jphSV=_-^=Osr~l7tGZlprVKxy@HkGc8 z#{jbRnF=f1Szwsa6>_*pK;z+Ig?g@2+x)~|vjc6h@|Pn9s~lY5H=iaf31} zb_?l2Pa`UY3Tb(%g*gUYGinnbX8M7SMCH6kR zlAEkb?(2`Kf~{SRSC_F>ZWMXqFk5U)=b7;WGCWk0j4aP#=$L-@_J(FIb{(!ko1N9L zU6>F|*8JY|C=c12<6oUOohwbv4651iB|Nhdma9-5ZA{b2o}KBTC{$Ivy*nQuFs{-c z;nU%8Hu7bXyLL9K&SL~y@@c-(YS!!eci~jT7F6j+iQA$qorVswOF`a$yAeK*qnK%& z182V{+tNN<8s#ooX_VXz2=m6K_x=f+;qimCheG1jrURu(EIAWNkD6w=VBq`%hWUtWYS;L1 z8=iO9NI%&x6TXQfW0h--2|=TA0K7P>2wPIJrfr=lx8wKuBG`o`fy_;INiU_Cnb=<8 zC&)=37HRi)D}d^J-iQ^F%Qjv03_CMqhW#G;tlUb1<$LGzm8(bFHfP^9%)?$((1OLh zYIAE_SV)7s+>5LQ)V_%3hXNdJl`OChL2Ld#A2EA5kr` zvBVN0(gHzbL~tg5gdFVyhCg-DyJ$r{)oNkJzjo66%wsJGG4uJF<0tL(y6UclxApMQ z+b?ovQ^%Gksm%wq%~2M!2J>5=iu^j-LnI?TP8RUs z+(wz#*B3WDE7h!_(KVXU*jLt0+*8n7f@+s5ETgLDRA$ZZ$eoEWToK1=fV)PzaI1Zt zecgoHPqzeq)w}CGwSD56s&2=VKbpM{Hnd6&pi@SBeamD#DrrRh@|;d6?(!`S38*ao z(ZMuw z>3Wy>w3V5n#rTS`oC)xAsWs+lbQeF6=G#6v?UgcBHawEC2EGic>l(Tl#4x0+aJQ3r zsu0;8V3b@N;n){QcShLa1lcM8^P^=GPFi(Ip(5J2l{$Lk7iFysvwYj8k`D?O@xS~T z=3f^|z)h=4F7uCnGgXz*b$ET&q`opA@t5^>6q=-FRX6*U7C{BocZO5= z8GUP|PU6TW%^~wnP!;Bu2xxPsQntH0cqw;Fa{O++vdL`jRme$*)sKO00@;fzGPo`k z7&?oSS*GUCco{wN(5Mb&#BeRFjHwN3&j-SBBW>TDYs65^+x&#e2qtHD=?JOEL0DUS zECGrxBkS%&v9l)*4jFcIvxB=^7Z&Ai&>k+!Rh*!WjGwy)s4q4M?K{OaJ5TnGT=bH~ z%W`>e!wMUZWlBoXq;OvWYUGmS+J?jmP#}8s?oPVgaBWNpG1Mte#E!Iud? z(O^uHka@?4g8bprdcmniQN_~k;7;2{+i*EAu$l$1S}$BWK_5V>YP0SU;*X*|9qR9~ zMxwIJVmBPfOSKX6DCjbv2WzA=;pluJ5w3|PIGUy};ke2y{x7PR8EoXk<&1^ik0{JL7^+QFf|g}uZa@Pnz0wO))92&D zDg#^vXj!_M7G=Py0%w$RiUP%Ov(_^%DRW~(4ap10nL2zmFr@T!twilRHuULoND}hY zK&-s)R?^gH%R1k~u>tu`Wj(d2q|jv*l!0KBr-6m0Rg`ET?B_p!axs5WjsfDZ>>hfAZsm zcBqj8da92Vjg&h8felXb#JFW9_dkEzQ!>{jH70M<<69O`kX{5!B{_#dzj}`B1byB{ zbP#`BsqIx`VPA;ER%>DM9pY^aQluqZI+o_M#ni^m z2SyD@jqQ}dm1ZGD3|^@xoTs2+al<>kGf*>H{JON=-N#$c7|tv1JksUha2N^?dJ6qm zJ(#q|8%|c^pIpzkpDqsRDm9Cc;UO`T`{_pFat8ViaO7Tko!gRQ2xMvORB;>#3|}5U z@>yX>x*~N(1@=_imv!Tkmzvp5*XWh&=nZIl$R&2PZTmTXX$cCK@nH#77)VBw1y~j3 zOpglH-Q@~kXQI6ZfcngF{K!LagZMlcxHR4t?w=(WIc7lfaMTn-p0%Zg_?k^f&rYw` z``#=Tdq$+$9F@KE{d6HiYI{j?HtqOLSkY>O{#JwIfyjymV?aGVc;t|a0kgE82i3aQ zi{c=Ji?PFb+kp9jtaytR&S)gfbN&{bOcYr-bBWqqX12i6B4TMaH_qO;Sm0%|{YCGQ zd4OwjnfF2F<=PGlom+E1+W=;?O{ig4Jk414N@GPyMZ_EaGrMZfo2oeC4_;-hwB;*b zE;c;6^c*N1yz(VxIBU?_1Km`%NNh-wZE`y|vkh}CcC;UK$=cPg7vC9;%uF_*dG@J9 zw`>0qH{}wfCd7wcN(51h4=0{0ibnR8!&Z>NL;amooy~2~7>gj!*wnsc_nc{OKj zyLG{01s=6LvqLo>+mV(S3mUHz$j3At__KT>$=)};S{PEz+1WN34JXXne=7Q_S z>~-4%_0m?^rPORm5uUoL z&Lb8f^L|Brm_>Nq)iSGSe=z>6Wqa3h#!nID**^*#4-U`RBvCF4;tDma73IWCNXXe| zx|Q0{SLFQXk!;6M5)2iM?F#*JmQy+?bl6R1&ia)|AifsV>D3512ou6p=viR*!BW3a z+-#IbvaGw}n`!8uBZ?}6i|Ulm!A+<0kTl<3e2Kn~i~-zTg!|T*8m4l>MtZN_>cmo+ zd;Y#SYz;}Vo%v-tjss}k5W3B`BXGqLfHyphcI>r;yECQ@02QsMeyF+W`gk|)4I-lg zz`c+$Id<^82Y#*3fX+=3NxbnX<(e89YX+_@7|F9^2l9}eCHhgTV?ceY2Y*0tXsR#Hol zPlblwc;}E>0G$cN7WP{cY|MSqhw|EBG9=Q66c4b68zN#!m)16XYbn_9sol3uf@RM4 z6t(YjRkv3jCmB)m$kwTgq_Xn-_K?Y%T5coELFjwbOp7FPaJp!u_=R6mNKFfb?jCs- z&#p44xY6tI6MDsy@g+)&|kHyF>N?lB- zOTAmBIV&G4Q>^+(cxxHbPo-~e&9zdxr0hwPl)&CcG^JyyE+xb7*YKfdk}fVqBfn#y z{M3wfbT%8y8Zp+Qx7JEC)!JlSsK0tF2O(-En1tu}(6wq{vMd_Z=JAD%DlNUf3bpId z(9#xOf~&Y|tC#Z|L6@L%y``TPyTSqZ{mTO%=VVMUOusEyHuU+9YR9XQ)$Zm^tJTQ( zg_XL~(eAFb1vS{A&Q5~*00VY#j`w!~FU}J_{4sQh?jn|P(R=GCA0+r=ta(XIiIpRO zV$NunafulY!SWLe=&>vM9)@;5)$yaXLk?k#k$UMjq)GL9kn2S+E1~N2H|BMc-fGsB z+cmmWRKw)-E8oeLjIKMXk{u}6w4m!%Tisu1*hg-on~uq4*7trbBze2M9LoveNQzyr$Bfv<{&w~_(AD*$okfkr_zf#r4Rz14UyqaC?$`Sq zG51x9qzkAYaTspd4)+Cp$6F^!>V5;KTuSXK>JgPzqo}U)ntXP&x6YD{v1p*Ss7O~W zfcs$LXqfpgY9)o=thn#NRmodZ**t88qAg%oLN}z3CL&(2rWck6Yl__){IO;z3m8W& zJEH2ndp>3nWLY=Ml-&QjG@6%*2uX0O;>+(rP=2Y>e97ex6M<%nmj~S7!@fQk&4>4` zXc2I-cgy7@Auu#Av3d*JiV2+TQzqGa7`<3dr#}v|mbi?%= zgNe;MIB3?e>SA2At1U`ZEq1@FhKAhhB10J;Fy&;5uyEM+F>u&NAm7>@WwUuRxD?LW zcf!s(k?!JFwvMauxD8*yH+*z+wVtKxes=uv>I^hx{e?eBdneA%SgEnc9n-DUNoW6} zW&UQVKI^*Xuj{KO&}3nP==0|}%tOz_kUwB5wM>Y&rbP&JVjL9qm*N5!Kj~Ja*>f!o z$|xN3P5fP#R{R|8uEUV-Up1f)Ww&2x9!nTM{V?k+V!_s$NC9t#{c1oq?A(DC6&z4`DHR5>A3%UgST*<4sL5 z{@{TQa5lRPD^9g!WrXd!#|&3ShNlYby7*)(Qjerfm<@l*1Y7V2BTdk{)+gV*WNiv_ zbI+v2Z$f`GB}3Mx3~-Iy){5QnhP(|)xr(M~|uQ?fIoX_>*1a4fSbBVXSEn zbLJx2Bff8Wt~muGAIeipoG0skxl?YK2%J(98qHVz)rTt285du#Te0|6k%F65Xhq#o z*c{uTZ=)Ly8S=J#1b^R|j8p)w5I_|(GS-dKKS%;^yUgcp;8K;u((XoMbu*na15csN zrLRNJP4W{v`yy?lt@~ZAeFiJnQb_RI+hJA@L9VR!fH6pRPWppi7H80Dsp|NlEY+by zgA~fZ9dV@D_SOWu!no5F{Oxtv{hlPsXnPo}`qY4WL@c$^N;s$iG0Qq8P#+aR=x;MFd=Y*?qJ79*J4_?tRzkypRs0aZ;GZ?>CaQAdkL-o%h)rk8t5` z!c_@x5PEAB9n8WVlv6IxZzsjBgu!8#J3<2e8TOE-@~|vuQ7EgqEjGJwfkXW^`@QTR z(MYJmQBw)QMLp)f^*4wY*~!zKbP}t&DYWizkEj^(&e>?>P`KsgHjuyFm8?Vm{w-fJ zQ#G#pXM_aB%8=cZ@-d?t0)(^3e{WLM|I_`Fe`@6acEd)GG)Z{l zRwSxr`OwuxyvM9|VL;kc=V8dy=x&9aB&u|tlA8J5+hq?&m)$=n3&dq3l#*Rkn;yB$ ze>8RRhVDw?`EO6$<|kGaY!y383pYX?Op1lFLmUChO6iuQJM8XA*_(f~nSclN0rfu+ z`xVtszRKWWJIPOX|Jh`E&eqtKPrv(Ar{1tVy(mR>II~J4Q-#_`IF@RYO!tJC);@ga zMk(Kxu(>RFLh*bBVk-@#>n_!CP1+>|XFeaQkiB#5H6n!jyEf4dt2K*eR-JvQNfR8Z zs_c*)ul1zZW1c0ldr3&p(kCzTxI{T?dFt1Nr}SD7L0CMXdaH%Y)u`dYVBqFYTYQ)u z+|gb{H_|m>gF#Lqj;`*tt=8;PYX9{1A^N6U}T{wY@&5p3y$ll z=X>ft-|OCW;3XVMc1ED6-g$j%XWN@lDr;$t{75eG(;CjY7xHMERsVT!$%w7~X-2F$4g(mAVc+|(keE}P0l ztMq)oPP_Dtd(Zn{2}>e_J7Od<=AVK#AB@C1W50r1yzV^W*5(YTW)~T+^=OwnrGR=B zII_2k4u=lsae$eQT35{FUWph#zeA} z8TkoX-3U;eofz%D@`CI39V-$zYB2pCbaF>lO3bTBeh-QoRfXIvsM>9MbnG8y*Zyy0 zHs)vvd`kbvetM%1=$E$z489hTX*=UJ^C2FGs%$WfhdrEjdguM{`nzcN;pWzHlhbbC z;qsfVdGMcLpb*JQnoRIBe{=9=#URSlWVq2U!$zWXxO1sUx~H@te+)ZDI-NJYsInza zd=)7H4tH%(a9BO1?u~6_k0x#@u3GQqwuzf!SF$>H^uaO~wx!_vJ!_WqK4STJpe8gf zg5E%mwOvXq3l z3C6MKOTJ}Dfxm7o2CgStzyEU#5u~r*at3@dc)hP27ujWJhK+!Rl}s*bo28@6TceQ* z)j&58EHxcQk*2%kw2qirm@vvhhal7}{ZbsgNx*8&pBu>GdhvHx_U=*};BIy*0=XTk zhuL)b=p=?zEx$I5%3k^qo`whv2&=NE#yzpZj8#{f6(E1$UuKR^X(`^)pwMdy+2~Mb zggWbL^8+>?!?J|lkAv)gtZ?Wz&guT9MXbMGUmNWXVI%eNiTmqYj7k*&_u~Z^hjS*F zk}VofFpbdnG*mLA=4bv2wknuzyS{L_;=|8H?SagL{6N$lTqc4YEl%OwgGxc>j3~E~ z@#UQ?E6Jc<9}6#zE6u+h2?QaD93W|fFKrdR+8ka>4dHF3*}y}r$23=u+}U3%-h^Vx z;UDHxmxg=mJcuNgn+wxDzv0Fh$Rs~y5whP%L4w_UgC^lZ8taSm-*2@@@@r7W3+?m6 z9iODohYFbb;7dp#{t*~u%X;ZALOgB0n7V=^zh)ObuZ~CGlB;)iOU7BD5bv8tb%>#m zNzr_@j82p+7godeQ4SsK0UpW_dR4V&qVv}8g@2!e06A*cvq3BAWZp2lk%o{rO2PVJ)ZB$>!^mS?mSO{LmNviutl~(`r~%wP9>0XwGy4cv8_d z@}%Ohc2vL{L<|v3T;bG~s|ro;|8VmvR^t&USB}O&=IRp7Y(r9Y?FyfdCJS)9xc=J+ zcs8|w8U}69sa`fR^Ol`wX9jA+$eDyb1qiz-%b41^S#YUpdh9#_)cYZYT|$t;;RlsW z`6Q9l3TCmNu337GQ-fD)xz(53L=)v<-T_+O9h@FOO_ir1{cQCyB*ubmCEiPrj7vsv z@|gdp%ls?BRL#cZOKY zY3x_qbKt*#jb%{tZad2EM@V??9`lY8dTd2uy472oKV5yfYVFAfu4nroZ1kk)8L`xq zo>U6pei%Zm3|$$dnL=gnXD}^6KD0Pw1cST-1kOCFB$Nc%4aB)<6YE;dw?htcbe;Jf z1LN+&Rns8CYzo2An12TS!Z`L_5BKi}#ZAilZg&v~8%OI;r$8Z_+cVIrx@|0; z<{7dMK0Q7J_*mrdn3$PuZBa_=x5&uk(&LS*eKA5gw#Doh3F}A|kPRiz7cw7i%(krCIJ)oS z;2`}5o`jOpEoctCk@+!~N!wyyio9_lKJ<7T4#-kq7=!(Ynj9SUw}1O`swDErw&rL) zH4n#NWWcBh6bdy8u+(NhakKRIvSBD%knVO%Zlx=C*=Sv3_s{H$O{XGwzcOJgOm&~g zW4|zd;a{{X_rYkgBqbFcM*H^WPO_Xv^$v|rr=QMkU=`8T$mD@PwYbaWdT0I*ZEtH~ zsEqY-*H>(P)bAqh|M-#;e&QE3WdK#(?`KaG4L!PQ&t{8lgNuV4xp!4pxC^$~*Djqa zTLL-D{29Z-EjM0f(K_U6C(ApSl=55~W`A#LoG@e_!P=RJ*~o7t=I+cIUvBt0c}$a; z^PiW2UlJ*qp`qq8@kuf_YbAL5Meu0B34zNLzQm*wydo| z2xTDsKbu367QHz-B_(BMW~QJ(ViV1}6Lsnop@PXC=;Ie0nMHyc{wI6;uUwMgfTkcz0O+3ZC>OcLTB0UkYlZ%xzF@@wpKx+s#q^y;Ro0=&feGC>UD1*;ZAnu{h6(pNaB*O-cjZ_lO`X1&6GL$#UE~^;_1v;wHdL zR%Vt-n;-Lvt|>sYT#B|=CI%>4inmQX9jT0MsYV6OjWFoNS!RM1p4S>>m1S0T9o9Ul zy0XHN7L@fV}hU5pPX@N835yCu6c@`|K5 z+A3?tprg7+cL*>#6x4pO&HyQ%*Y~=;-V-2!^cMHKV`N~Ksrewj0Kk))vc(5fi5NJt z4|vLhIOAz_*AthGWJvS?ZXrwYW>T{~wG(w>=1ZXIVztjFzerQoGo&Ix{1PwLjOCtd zrjvipYO4p!C(ogtf`|v!Ck_REu(6VqoSaQ_GBu2jhYTi1wHGr8k{lyqRA zfsUQcTNhV9+sl2BnVyWoVEWzqFc6gp_P@L>{ZPV*#o}}N>4^Gt$!6y7Wsd5 zIbcIyyI2PcS#)BI)JADmvBRf%@i-(PY`t`*KG#We?Z+xsQ@Iq{mg)l9zC63VeLlkI zSI=B};s~!VVn#|r<5Pf>k9mV1E%pR~$}o`m9i+aOCIv^)X>>#kTmvmKHRV zr%aV2vW6|juoJc8(zEJ}wyu;it3A&SdL;C(EMI9;VRE{5FNvH&^@rpl4s=V0Kid1g zqBOLa)4nuk;@>r_o<)9=oMtK-~vteL|h=?HT4zG!#5SIE(4C5C8$ zKa~<-}Yivyw)^9Sx9fe2V)Kh!9WUmsS_H=92;@un3Uf-M1NtrUg>3A;FJckFrWS<;jZSEiSwKfAw@J;F5AiO-N zb%`rv9*XOieQ(S}@xm?LOJ`516x#|& z-kGpuc^kiwL?XpSr(ncGy9%?5hYY0%dlR!-&F!x4G#H{Q|(h|XW*1NNHN z3&)T!12lMH)aCx5$}=h;Zml6^+bP~;GXag zSD{@x?6P7PR8k7d6OiRj+Pe96LoIjjr+2@3=Y;pWJN>BQZ?XRmWwQT{E&o*nC$QO~ znk3fMKa-!g!UDg;ocu0I{QsVW|GzH!|4XL;ehZ*@D4IOThV-w4PwPMajZSx0f0cJd zDP^}{%)b6Ua4;t_<0Z3)4|wj0mp;|9|53pnjys({`p}hxW60x#j9^Z9$vN4I)w0b! za~_8I=`+nK;uV!`owSsK^3G$iluq6g3mG=p1jtv4&MusuGi49=-;?$?In)!S6OZa>rd^hn)ZT4#i|QHIEG3LrGHF z`RWv7c@n;>5o@5qvoSv*^9T} zpiE8q5S9{}dHs4c@(O|fr$V}%i9q~Y7pJ<2G`7YcH#m%aCS8! z?ZENL{HMdFX0tCtR@>4+_w(Gj)vO_2jGbAY=zaXewQfE62o@+$4}jJ1wI^$r?@*H& zc)UpI27Xh>#)r9ombI~?!@R&xELYJ~rA5s$esO7LWvmPC8qUEq?8kjC{NPB9Q!%`; zTX{Jv_-2;xm4!%07q|3vYkdIRMb$Q!P}rxs@?3J~bm|wc=s~eBTaVN%hDaA1$kn8| zFb8U&GBVvvxx_?h{W)YRTeMT2=?xgakqs{F(l-jdoe;Y)f_r+*&2M=7B~7Vw)1gP4 zy}#=vSq3Vw6YADqPc~?pk>zr>IIW~ubJ3cQW){C#xin8E-V|Rtt^GKno4kpIi@f2=?C?@*QbX-^+><*kR0mN0w0 z7wtZDb(d)=GS5`uZfA!U)~PgUN_d-d&%90tzP@pgpSZpv2eK$`MJUzn)TYZVE+v?R zE6ld4fak6v1@@a3%7jr!P*yi!2;3=T%1$L)>f*$&H1h*ztqiT7Y}j3Pjp2pO0P)O; zxiBq3#cys)$F4H-3Yp(Z9B*w7fl3`na$)4^>+wa=GfgLD@ ziO0ZBAYp;em{*UqfD!$v& zA>E+$S8CQ=MP*u;cQYg4)3(`=H^T3v+O>tOH@??4XhB9Qusa(%v*}lnni~lsqm0Sg zZs#IlHxX&NGCnvUVIAAGE$wB_w=wm~2i}@>uj>Nu>)=NJ z+G~|x&aSl{UO%gMM$V(a=B{U3C~LWZ-x*dOTy%$tgt4NoDJ+I%m07rAYSa2rlkd`U zDkD556*MU3#`QlvTQW*x(4%UTG0<0p&rKOzl8_QmG;;2;D{M-WHJ3i7U*Nx&aZYS& z#ldK>EVYOBG}_&(Nt>*Jj4SQRz-;wDTQ?!CEyyZsVu%e1_9QkqeP+QU6w)hK~b44zy1f9ixUBF^ORb(0|&esu8OTJ4~FE~x_ z?D4*q-J`AiB8;18^+sVd#ezcqdfm&1_m=U41;;qs%Ft-CP?Y9i#h!Py?kl9mtjUB# zMr&FBb>r!_G0y-8kW)AMla}ulsVu(?V#v%Q^4to5SHT9$X=ET; z(zJ$dk*f8qE>%}P0^8xwgVm}P4-}- z|8(2_+%waP8Op)H5k+W=O%xVCySt3=>N`XP?T zKD+2ZLB>R&E+KL`&*?jt&UPEXS45qtvuFn=%gnHD&Q~>;h*2xH&pAUKAHt;qYEKh8 ze|Zz61Bh{K`o*2b3S5b-LgP(rKk~lvSCudqIrIxi_M_bII5Eej8M&%^UO%zB6=gL{l2@kXXNG^>6hGm!wtWic0K47ae1>uB zbJlnAj=2bS75pqr89TWA^_WNC_rlyK^FGo6k$w!7TaDj`X8CnB=N@>Hwp)G*9f^!O zlY^W?F^ky^WsIT^5!U}kREOv612&*wT%6>zNnXxa(7oKH!OlkHbjft9et& z@vv?6j=-!dD;#z`$kVG+GcT%fEpA5lxHveQ|2iG{H&{DLZLSjMJyy8)9S`nez@ye=2d5HcuEz=qf1RBC8{h3>zP}HZ_GosF zSnU1xeBd2y*E9aEi2hj*{MWGmIN{2){}bH&T@#UFqs=2Im;Cs96&+~cc4JAz1&DpJ z`1GJjHnwwL^%`2~4OH#MWyIaPSn*27lCJm@t-Fd}Z z(Uq@=xfvp7kSB9STJE!F>!$0=QTTkygkr+ zvV;ndZeUSVkiya}KGInjcg)~nlgzQ0nj2;y0~-9a2a{sEhOFUFpj+>f7Ii2 zy+()cUf+D_eiJiP$s?g9Ip-X}SWBS$oyFpxKuCx1%TK=ULkgg^h{J}Y)AF`f;;0M^ zIUL&xXeH}!w?j{?z#6z?-`XY zPWrmOVXYqhX;}&C>a?(y6bv+00{$or(FxFemLLPYRE_U66 zI$(zcdhv%(o)IckB6h)K&b;TzRp?*H{>jjNBM?IJ;PEKiBaE?zekRF<%m2Y-EK7Fa zj5e)kV#ua(o>?f~J@Dbk;q? zl8zyZst02HC%GF1f{G?S9sHwNIcU>sH2Uz4{xAUaUb0ykrflnDz8;Q(njWr^HGSWH zj8JKn+^%7DHocyvEBP)HQTyg=71=r|4v^s_5Kba_>PN#his z=J{Ns>SVQOBv=_A|B}aeW%-n{$W?}&wxlpkoOq@1q`dh9-Sl&z#&{^sr0V+5D>Y8J z)%c@}*ZPstgt{K1GTx~9*PJMrrhJ1dz&uE8YO!EF(K82Dkl`0NV5zP2MZ?J#IIoLW ze|q=Ws`6;cF3PEDOv7yy_k{&)*G6gLA_uSr|Euq*7Ge9*Qi)N zWRuHHCT=K(X^PTRrz=l&;bU-wq2%(CSJ_JyDk|}nDaqC! zD{X*rDEU6VVe8{75nEv*;=7Ixta4_>Se~6@OhrAa%lczP(KVPA5l0}2Zx3bN$mr)S zx9{?97XZSMneS&*h%tik$G0y)2S$WwKHo>v{qk_1t4mJb{3|*B+j-tqG4W!Kuula; zBQ=eIwvCW;cGtjZp_bHfRekFt(j7<9AG-0!vc7!^Gl9Mk1C3(Pb4}^G`q6`Bapanj%6zgD&okhA_Zl0EO0mo5%hy}1 zJJ`ib)gRAp=q{)yLR1-3l2QSa!n$YVL$&#pLtWo^CirhTlOsJcjt?$ZBkSsq5>Vcl zAJ$H}n(m;T@nK6fX#eds5MWw+u#{=LzNr-QZv4_8R$pXIx0pTU&P;6Gt=xt{%dedCxBAXB-MVazh$+J_W;b?88;{m%TW(>D=r zFgWrhm@XQb{`9OBJN?}-XiA?#4Y=J6`!vhDzi$4uI0SFxegW~e)qtDCrb&RhcvMZ^ z*2ciBrLP`8q91Ggv@T?{?29g7DzM)z=h&;;TF{o+sz@mlOf6`co{$^VmZfd~A z6g4h_4GN{Dct7)9=Iq%&T!Z^>D0aWcTGZbUG^c+aFIAlw7sacEH5i%pOPR#kwjA?& zw|(B^$QjFuSHrK=1Fq%NTC*aG#+{**%l*7-y;t!)(MXtaed?$iQJ+aX0xcL^-lxy= z$G_KoM6(bB8W4P*@2#SP5@8w2KMOQ#NIS37G^5HzIV6n_>Rwv_?vt+axo`qnu%TDl z8m2P(@TSZ}^F{eE0wgB=NqhMF$I52~^~he3DJ0Cb)&*2DA^ySvW{CGo_Le|Cc$XJO z-)Kd=SS+w;VAD}vj!*w$r*ispK$g*Sv&RBvuF54_ya7+^?1n)4u@n)_aKZUIGn(;h zmSWM)ITq*qZJ-H+_IrD)u@O?5u6p5zfVX_xqG%0dIT*M{v?&93!vFUyRD z*;bJJ?`9o#DS$3lPp$z(BrLPH6VrSK$=6Jhxi0+TzWfpxkgKMdF-`njFn$L9oV(@o zjNB)h!X)hK^iCK1?4Z*1NwzE~X7(wx=6z%?{@L|Fmuz;sz5nSfa@d*VMr}L#l~e+2 zT&4MqMyN2(b)T6P6OxWuL)cyzdi6=}&7&VDvk(yx3xE8@#Q2ktao~=dYKTRuqs}R9 zm5_~|H($GXL{z_T3^m>1I<2AhYyOGxIt<5}+DcfXj#Pwpmz-78+?mzH4i0#R((1{` zcG=AFaM%7_%7!xor#ya9!FF>ij%jmB(&ESq8JzdY`NW+n#_m352$!|LLCGw=dwWJJVR4zplITVUr zV&e_{xvr3b@;MgoDh@&gSUAPq8{?>sworJqHUoNf^S5&+PqG@h#KQ;nudy11Iz9nnaAKjY!6k zO;n=)8R|!${b&oepvhD{v% zMKx6@-I`v2A5lA!K$qqpbHUKqiVXAmIF zuaY8umKsD0M1J`<$QID>VHZQ6{DsK>@zTrW^C|39<;wT}S?uRp#J)0jGxAGGrhSAT zK=ZtdSw|5YkoO59iXz~rUZ>#7$=ae}m0wVWR6h6kBtDwo3on4*F`M-Qusti@m6@;wo zJEFY!G1s90Vi`{7FOm;Z93;htWW`dmL;v{p=7URom+EOVh6Y}_wfKrxlcp4D{uhS{ z!NtM$WKM~n(yYt^P@o(~;!`XqdK902!IpZ4bobL3g{?rm*FL9ibRsa?Fb%*y8`zAV z?r;spM9an>eg(%UBf)G<7V5^Z6OX{HTfk`wu*PUd$|mV&H^-HGyQ{Qy$%L`ftjtm! ziXam%RfI&Pd9tb&GgIUu^?#f3p?p{N`oZ~#3`wUO$o@~r{qhgcG5Ua(XD}y3-5|1! z?(}Om-mf^~f}tVT-9)mp22t}R1iwsuvA171=?jid0rYwm_aBG~gFMj_vG$eStk2ZU zNPW8J(Pu59*9-GP<-0_W#(AKkS5Ph5QjPMgg`FyWNWU>WB4?ePb;wp*Y2I`^g~RUX zZZfvy814s7CE3krO_;(j^4ZG0u6rVqA3=d`%yM5)rHgdVc37^?Id zz|cbIUAju|C4>^10-=NwA%qf0co%!0UpenNckbN#&Y8J0mp_={pOr=O&9k28Q;*gR zcq*nUkg}E+5g{H4JY!07bE1I(Bk=RxyR=jGQr|i%d zReYCTco7T4p3uu^(U#r!OaR>KB->DLy5;6lNT|AWE}uY)5bufn7GgBRV#ymVWDUJv zc(^j>R1OR(`Q+Kkf^uL3ViWhU`}p%$f4y}MXn*t?xIIsAN9rQ;Z+VSnJEckgFNde75iCk3b78`ud>(`#qY49PPb`MI>B2 zLzPf!AT@oi?aI@vcYLH_5;t9Oql&{=O>}{WhcvX8Ss(uJX7ZIajyyN8<43-!8=fN_ zt^(Myx_Ko_I9K*=?bDDIJrny}q~orTRfKt~>4jsbj{~dNLmqyt=uFV)1~n>2cMfc^ zUG!knqTRB}nIsS{oOW=7A(sD(WI zT+D5XC)DC_xah~hK!a!ZnSOJg&?zXlY!h==k$utSwQ)ZwxhC9@pHn7yYkmKs`kR^9 zMzOOI%inek#Y`-zNJNeiZ9_Z5SgpRYH_*Z8c@D(8;Z<5VDtf*MS@G!J^#-|SLu@tQKNlbv57uDx0`QU2TuQTGL3 z!9vQg2r8hK&F(?z!>xw`NbEUc2gw-s(2IaQ;oOsKeo;b0f^IS z_M^`%oe$ePle#KLb$PMW%Ge+x`zJBEQ6K&I5lPYry zJGD~vaqvEQpDUwh76tB}=_YdpdAD^nFvQ0io`R_nftO?ve}*JrTrHI6>~T0+sQwt1pf{wGMlCSLlruAfee?~rpyk2sx8X7v5 z$4!6h4&`Y~ySn#6WNpxIGh?3>QvE`RnkFmWxpw26Ej?A2aXoa$p9Q~kH3_pG$cSiP zP>z?`LG`iXvDrx|bqgG*Oc>}ikZ1-Or-sRm`uo43zKEKV zUS-J6Edi+v*BW<|p!B&0U64*WyY{^+V z0@neto!q!#**32d<#5N+sXec%_~<{}5Ws%pQB2ZUPC!e3o2^+)hq*btO)a@I=tQNviPVTs61_+BOiMbT*V_ z3o0WfX;;SmwD#28p|y=Q?sbUwv5Kd{*ACR}zWhuuW!xCV{Ir%#L+JH^_8WgCskbq) zGkp=6}}{9&TyS3Y9EkK_Nzn!0a#K8?ZJBjGOgZkvFh`nuXUC z7qKSdn2`_UH|6D4eUr`tAp8{dATZZWb}8VGFR-o%_>-xdkE*> zF9po2L}@G9g5r92!xmMbjC+8(^q{w@=9_&M-aUW=~U+LE*){ztRT~+B< zzt3O$H6}t~zIH}S;>6D6@A9l|Y59ugX=lAZ7UvL~wB_1|m08n(WB~|~@tx2+#&6)Z zqWw|jXT#>SCcTbTaV2LF@BLVp{Kc@-!Q}8BF2+N6)<=g+c_W1p>-_NGiOP7%D?)4S zLJb1OIRMR$8O*U0a?Qf->mSs*R=T%pfguva$*m`R&r%lUNAHjxYS!;8^Wf|nD-3Ln zh292eFtJUF6q9_tC{G%~c0t1hSG}jjh)vIu@pu&tniFfW!f3RjaL8;{{D#Z+vLWOSU^q#Y!K#8aLQWNFYVzk=hf{u7WM~pZDW^nr!4xiC0!4f9A>N}p<^ri zqrAC0t9IQ8?h#3zsa2hBos{NVjuhoJ%-l-Vh-1H`p4s8H$jbd->*pbkkthtq#qtMh z@`QY>CHuxAp~F^>3qVtcE}6M%=zu#_L4oz zf(vjG+UdHJ@BX-NuN2xLyku+T`@(Lc=&kxiJez&0+oN=yNXvtm{cc-@ZBS=}E5j*7 z1=O&+9tUFz_7+KZk1r@$9-EGwaUe$ z6#3#+_Sv-{Ee7RFgt0Ld7yN$Ei1;~~z`$4J9QF3LzT`|6CB>&6-DkwL*-{KNaA`~k z7MxE)V2*44Bd)vBwpMse#yk*z`-7PYy)ZND`7onvOuPVwffb&epN=j?44 z4eADdjnLU!iqe}LA}7b+qwT~&;TCnT9>eFNXgZYQ@Vu^-_`_L|(nzz5ok^iB70G#~ zEBsi7wLq0?H~^DIrJ{GF>QsZjr*P9Xeu3Qy6nBBOJ=v*~SdPV+h6P@Wnu9@(%BT>A-=YKhLu~7X0_qsq6R;Wo{Fd~y#UU4c`rmz79nuB&l72Ro zFeG2(R~n9;6<)nHmk3E|l6T9aBGvczNY3r*##hk9y z1s4{a(34^54j*m%;|BG=hC^yolNx=DOJQ7x@2h%6UEf1r9DLN@?WJ<@_% zX?Y18%RQigMW-so_A7%8G}fmX6lw)Y34tbY^|lb*C|jkWWDOtB#^#?Qb2miXWE+|n z*K&Mboxx(ZeUXk&Pu6?u`CxPornIFjo*w_`BQ4LfBgQgF1B@F9f*|zOF=uj`JZGPorxE~d&t3>d-Lig5|G6CY zpsZb;a$H3BpcFRvWo(OmJMdRe|DjIMs|1rChdWpg4I)jzhijs4Q`Wxy12l%By(i{r zef;Qa!3617k(i@(izU201JME|U80AxQeY((Dru8!=Q+!1aR9uK>Fr$cK(EI*^;XG( z7k}1~>Q!ODCuF@?m&s+DKd-xH%s5|uxq10g9gizi(DODh-XZ2w6O*5f?2!x;#4zbb zgF*EkndXQWuiH9Mm%*BMj>8Xws5e33WQ}TUUoCjyrSj&beV-SJgi~=IjW+ta;~wH5 zyv3c6Ni-%f7lT`I@$)=8eqqWK7=#@Vmm(zB*CPG-hCsAI0jvJ{Xp{V$DO(Nn#ah(< zl9S$npv_eoq~igybiH_^jwc0FM0*r$ua{zEi1q%EKJ8u@jWZnWOx!;~PA%Sl zZZ!5}#b`Q6cXic?jMywx*q_m&^8B0Kj!YihZEJ)r^+p zlo38K?wTn_DiZHC>uhUmSZQ^fK253*Hw~5lBN6fEX9L8`iCN(ac23Ogi40kiTb3>u zZ-3e;a#%w5fPGR?JmG@KrO`b{KYYOJ``B4N@c=422)QiGmDRQwHZthtsp0dzA$EGA z_fzI1>S=XkD4`++6LPv`E$ARk-`}()eWfmRMTNj=YB;@iSgwr(`|Xqt0}Hx69oYCd zx~loG;B`WCruIX8@Q3B)3~RfeoJTzEyT8t5ILKjuKtpC*wxhc{_AVWUZ))mrySaYG zeZ#i-diW!bPqS@20no&&DN&O4sk*Ohu4Y;l=tP=d;~q%t-}#AjERk9@Jsh5NU~m60 z)2OeEpVE0_^TA_e&!;#_(w1@COn+w>)-2|!-q{dWn0XuO!EVIDkF~1Ru#>fXUnaMf z;4p=#!Uk@{8yuv>MBz+4W!ivzo`^Eij)#W0ddy%-HB{*-crIXQ z?KUo(U;Gz4N`?d;6=hgl%gM22Uiul29u}ztG)~{Qt;t9(mWDg5km71vw7+5BX&j+M z6{5FK&b%%cm1>3hqyS<{6Z(6yBDrBsvX8IqWyWDn>xO-r+Tk*UHuv26#3gok+AdqUU9S`!ZpDIRZR}4Oe5&I9^X?j-n{ZDsaRw@hgp9{yWB(TID*8(5PxV?+1 ztSJV@rPBh)i7l;p{(jr)q|x`PbxW#vDDBsC(U_YcDlEtC^_M=Q?))_%&lv(9SZyNB z(C%4Be8K$$0xM6}8&S1a_}paI!b48AR4|IuB%ig8W;X`C(p=KkWbO(OMtF{YQG64* zyVJ#GEq)l@=*GLoMWXiai>8tiWM>ZzId?9_+lXH{4;Q8y^qvL=NASjyd=K zxA)$80h-`AUbo2I>2!vo_ufITRZdSBBOnMe7xmbT9jO4(suDTqEJ>fVs9$;B{JASP z$UQzHs)Tk|GD*&cNrUJlEyrH1AST^-~C z=oQzv%ZX#5i}SBQhhj^rFml(7oDX=+AlkFk{3}4)XRplG3!!)wOsaIM+8arSv#CvO z7F4o|w-rJ8oA!q89k+;a+r7-OV#N70A>DwM*H6dN5C&@-(vR`+9Gu%J3By0Sc3F9C zcHqGfo)a*M6;7^?k26kO-($WuYKaK1Z~o9we-~KdeEK>J;lI8QkC{}9Ca`sJA+>-r z;MHt+B4anQex?xlITp#m%0LF*y7{l>Ra(DS4D3`6b_Np$g zC#<#}FWXe)C53S2ks7Z621FP0Wmf>t5!}&vR)4G3h#qk3c`krFg(O>BR$leI{a~+Z zg&%IE0Z4M5PZY@7RzC_TWr(J5!(`__#2Gs7Rr~Q4s6zTdg>0fX@?67ih9r&zkfbK6 z$z@-rIF|yI3I)KybxJ?3z>TM(Ql_hhUq4efFIra}s{N8u&I+kn@9{&+_-e#82?(rTKm zBr^80%$2|JdvAYHQLcOz2~zT&e?~;7470v#v%RWf{lw6;zf^u@rhTgFWekTKMr#pC zit1PKNb_Y4lz=?OM=#Tm5DsxA+cr!HaVNGPbtgUY&O{&rIms)$SeDxw(cx%2lw~>8 zIyGr>$Ozrn+WNwRxWO?Ba+fy+5dV5z6~m`noxFhE($17xzw=#c!*P{e?VEr>@9x}z z6A@Q2FPRKpG_x2sNx<5B)1PjClV{iK7mRCfZ91<2VuM4XGt+#wcw!csN(LNi2&e!a z6s%_1jABvBC|(%UpY`hUgY*s;>ZD>!1&lk8HX-mwAuLVMDTjVXC7kOAk>HX3yIfDtwwvIAZvG3imHlJ_XzbC|+$L zmz13p+2de_IaVXJPnv)OywKNow1q65g7xy9 zJLC_O!@gz=f09@sP^e6kf*_&UQFZ7hAo&O<&s$1S-g5;rb4~6pspYX--0k9xeBc$u zomsocqc^>(oaFd;THH?pFpOFpF+f`;Xxd(Byj#=CF72to)1d1j0Y=<=MRRpktlzHF zvfc&hu%yeUs&gy0?mhWKJ|?uD06+F5pQ)FngX2t@ap{kYyKf7X6hPGVSwcS_(*DGI ziIUck!w;q#?@K!GqK^mOTS?f|_|=y8GyCumg&g8hYtM5B;PlwD^3C=17O@T!l}nL%9B%+BK=f^aQn0tPu`k`E$yYa=iRaHp zXia(Rt^pnJ;lk8N{G-pRxksY4f#Sa~@MH|P;?QPqbuJLo@PJ12njs$Q`ptedQ=d>& z&_x~O$d}xHFY!FvZn-!}!rYQBT-<6o-rC!G_bh;io1KOP*jV>*`yh~hzv#!Vut2&v z3_jSPvE-*;cb}c(3pq0C{uyL@bnKl|g~Tq*6|MoVqYL+0T^bc{q>T3#b6+B+`7~k_ z{Wr5x5oK$>httacM)7>`zIEgoh9(`cA<7^Kk-|E2uwt{HXOP=N;<75EPgJ>?HeL|Z z_$NYsH#Y4rV+t(}pnNjYSs?!+p+0XJ{p)H^!T(O&{p&ve6VdkZUzhq*_1|vmhAiYw*2Mo)KEqLCzA4Lr+ViyQt00a(xcD!ljhuSGn-gwLE>2EPE-rL{9M(;h8yp%M znw*>*9`>3CEZ)HvrKO~XM@Nr*((MskFc^&7bQlDI;OoeZPXC)p{eRqi^M7Yt`Y$&C z6f^wO$P^{~pVdbHlU}B;mtfBJt!*K?U47Pef2c^-g6(o_5f^2eh;(hO5-Ma)Tb&roi^<-GBeY=A{^&w zU0S1|#5fZoko0!K_yON|`0|->alH^7L02gin1Ls86Rp|!RNc(L!O(8`1?BNaAhl;R zygx{Gm0ia+iT7&y`jZw;_dg1g)_p4Xc-5EmPUTL>qsM_BkK7);tK)n0Y075>`5U#B z3&HcOJb3-{jwet8$|ZjGl?T4wgxry&A|Y9C*pun+^#jrFuwOCEw^g(A+AaIFd(A!H z9jyb$Wu#akdlt8UN$1JT(9^DNE}J73?|{|>D*YVh?0T*x4B^$c7rNeXWU_C=hAWHj z%++%6o$1j-ozno48nv$n+5U|9MDA)BHII|E2B%HySsdz0Pw8yr??5Qpy;FsSjW&j~ zF#OcHji=y!GdC9eNLMPEx!-a$b?MJg%1_zM-lPv{gqVlLP|b``)k=h97vZ2Wyp~p7 zDT9KM3=Us8EdSa1g-&|4j8dXq!;J<+d8Z8|-r z0s~#HRD~Fvnew?yy1K8o{B5xBB`=7pcK&y~bkd%5t|NOk(e21({rn-*R6avd1KgVH zxo;NCxPOlop2IH=(;jS$h=8jt3(E8BR~qO_P8mOd8TUN9)wh9aEyo3S^91Mii%t8P ziwVE25maLnw)?o(oO{Jp(KN}YGEtkuQ?I5gdLGkB(QgqFT-4e33^!IYbX{64_Vb)B z7Q3YN@zgn|WTJvq-xj4c^=C}{ylvt@Z)TNo;L{4z%JN^t`Ym!dlU;G4QQcK7D5KQ0 zq|!=Pvnw^ku=o-FbPbZWIi3TNv~&aKW#6jGUNH)Ho2q#*ms`8}CRHN`@h0F(ZLM=! z^^|ef9*!cD4?pivu16=VdNp*p@WB|#ipjzhSI)I9M2$J+;l})nW{HI^f=9khsv~B* zdR?e5zWuh$0ckawj@`D7^TXLpv_^Gxhn&Bk?-9(D0^ai8xG-2n))OjlDKfvy?9&xD zP9(KFJ86gCZc2AGE%ILMZ*80!6f7wsq-@JFtOr%xk&Y{Esj|6B za?NP?#jKWzRK|VL@(K{@(QLRxc?Fn>tpHcul{eV^kq2c)lp}}f*qZc_NDX+XnSn`; zr)Uiw(L zKG2ktveDR7_S~cU?K&`gMbaxF6+25@>U4REsLJ9}(jIKOVzNU123m&vHe8|6)v0j1 z{>%4TwTA-fC|a;%WJ5me)N5vI*Tsy{mK1g*=~A}XUjGE3e(;&td?JFCMv?-~<2Gl2 z1{UJM@Ts`o08851zX15)(QZ|0cq%2xYnr)#|0i>hoHSYV$ffE}yr2yxvU9KSTg@td zp!v`3&%SQt72gxr?=*l9;sxb7o1$Wbk~RgfR$bf=#*95YHM@F+ViXJw?&Ls>1wFH4 zms|Hu&34%J^pM$M{uQ&vPL#G(Db`@=QL^>Z#@JDo4tb$S(RmyA`%( z_Op~p?uEFavQe3;G-ns{6x3CAZojDP0s&iExpZ$~uk@+q(%8xCrCQy%V2i@-qRQI> zYL$Pup!H81_OdZYUP{@up>B=Y`bi5wU?E&5NHp8qCUGfOQ^3X)wf4@1WP#QbwY|3j zt~AxYv|I_O$+XV&l$Gh`GD(nBh!-291 zjy5`Z``LTVx!;_C97^BRxIZqi`7)hOT7v@I=!HZnq+ zO=&H?f!eQnX{V;^D55h3E~Y+&H=N_)H0oaKj$fJbvrB1E^mg;by>4?;Vv~3R;Vv`Y zhR&ZIua|jTInGO?8(H)_l=>zozCaO+eqJTs}(QLzTB@ z8MN`<&F2JMLMZp(VLtxpczPIUO&ay?Lxc=0SK7z4{)z(h8RP??-qn>_t}jmdqN$7d zt=CWQfw}+U@6v@)>8$xFh?B~~jYwi1l1N&;K z9PAWrtaT?#`Uzg)MxR9Aw@q)HV&Jr^{~4c*f1>2*>c8h5hUIr_L9gY`$K*K@-yb4@ znxt!Z7&Cq8pUy?ZtDVrJE#KDnqJ1#l%hgNj-SuA$L)N#PtsipWfnH3IN?5_ z!$*kXSWv>WVF!0>u~>4hkx!ZK-rajOuU@7oNxwJB$ugJEd^Oc)$F@sKM&&b7gcI!h zugThN?GS@HTtP@IUd0kkxLZ3YP(6hB%@(LUg5YFoEEexB@!7IQK(6+t-M35ScEoNQ zt@UX!Vc~u2V+}8K_OBmeFycTT+J4hLm&6CRQo8M1?dsRb$$o;(b`2ba^w+0-uWJQK zi!idJQw&y?Vyd2?rj@r%*oTrv{BD1Az*i+t#u~So;!f0%fq3?`vwg^U#k$F_Z?{BH3Q2juqG>t>?edxG>eB*BeustgKORp&M%`lA$iG;FdXJ zrF&_C=lPON;AfZ6;sHzNj1HNla2jVGD}&BtW_I;Tt|ps8mQ zyQ6KPs~3_`zlzt}Dp?lZNq>#%lYPVjaYMVh8~%E5R=#Tr>9wCosK8~H9e1zeY06y^ z-1s03m|b6Q%74>S{`hGvRG;EB-wSR6s`ChHd43bMF_;l0xK&lFH-5;5ouA zm3;X5upSWjfH1+zZX7B zn(MFnt)cY@N|sHS6q5l%)rZ#Gwk_D0Sg4h&}uw-1oHy&*_aV$-NHF%0*~yOcV0Q`R~131P5n$l)3Y>HWHVXjvlw*N(5PW=7|V%^W-q6`U0xy{QY1EIOc%FEWC9 zK@{t1)Y$goOn+d(rZ6Sbb|Sq`c_)?6-&aj#d^^{Z_MFv@z41y6+~C%+3`GL)(`%z5 zZ_R@L8X0{(VD|9l?9`77@IR)p60N#6j+;XtIzccAkY=ax)EI$ae&44eM!V9mC!)2? ztAfv(YySjkkm6_xuZcFl`3ckY(8c^`Ukq2_eh5FaCkq~~W^HACPUTY!X(VZrU@s5P zsDEi;-G1i%(IaaF8DFt(eqX8eH*Id&vMs)sBVLr1CS-3{$J6^N$vV!liZ5h-Vp0Pv zR~J||%C9%Py#2r@(#AJg0&ddF?w$T_9dtlK`;l^vk3dL*I4#uxmI`@{&`$lB*Pw(2 zB}K?1UOL};@W4BwhU3vaP~5l4L_S60d?R`*vGyHQJ9MtHHs`S#I&(3Whn7pHzA%%HbS{R)w6IHQ-+k&>T}m zM3fZMs%eryPKaZgg2?(`i_VvnBJo<&wCS=YU767bX0zRTsJ_@8-g~HJlz_h}pvEGa z2nx!w<8L^*C>cg6c8T0%g~04DjKgMCuS4!ee3Dn1%x6&7z2Yz-low+q&qu;shx}gF zA1z8gz~Zh|g}SE+Z*rW}h3353#*I zf5XovM)$sJg83vF;EGpSwfEnovelDjs>#t44U9fn#iGBl=V#Vx)CN~JA2ZTJ46m5c z4#MiJ4wzV*bn0KobB{Q+ef{KP0C+YVv%d#b95g75^K92f)P&YoFo?_63x=ns&s;t} zTm9H#v$!1-v}567>DcCUMlUGfN99be*d&$(j}WQ92m3bDbnS`}eMbhQRKchURiECr z>+sKw!pIbKCdqFv7a6T79HTozd6g?{?V@&d$z<@e_$CvC8mLO$A> zJ(Fo=H95~z%NFqsLvYa|0d$9lfUEV~yFk5=zO`D}s>G8iL@*KazUgg-EKl)Z-RxBB&_W+k_ms*u zk3I0+8nwkiJ;PqEeJ#6>1pU60Qo?flb2I_eWV)6df}C2EW8#tK^~rR$Un#n6^44Dl z>>k;U>FUCBNMzc)pKLTYS$kxjF>YLx)+cq~NcG}xu*ui}q7foSs>z{z*ThT@Y4FeV zBsmb1l0)ypu);_Vs@=P_QN_P)lF5I@Vgu!X67T@#6dfI6PPM6`~5NNc1|E$a_i)|wN_dZRS(<9Jpgq3X=~NP z-6urM^6lGTpjUqR0dN%g-3P1IDE}9@la~3a_M{@odG+g5eY>F7a3`=5E|73p;BAd$ z0Sbd{-Kc4%2 z^1wTrVlY8QX0JePE5Sz{wnwJ)hNVX!Zm8TL`cxcH{7Kk9IPzCdq}4n8NY}gTC&AglBcC;yW#mZ;1*sI2{9TIZJ#z{hLbSXT2MvI~Jr6|0{QHx6kM4 z9>K_mYt=3;E(_R0RsmB})0WGwj*bc*^BuROpHwzB1{DMR^*%)7DHxVf<32+gPcRSM zt}!~G{cMuK*k)zM^-sGuXD^1FD%z!t7{iIKdBXzKT1f#DE;_L1L?f;gy4cg9P~5%(CQ{p9P(Zeqti z{kC>Si_Fkt&Dy3s#eYu0oEY@TsQ*PwUKoimgng6yJa+7*OMzf2O^I&4f9tI(+mgy- zSx_Ox)#?0Ag}=&csI#1h&$fRKo}6F=_O~vkQGWQtGKVwW?C3vIqhjKV4u5A*tS5hrR6BNSgT*5~Re)2@`FjF} zu|j5s25u86BWp@Dyph25+H0AP2l+2>taE)z0YgH5P{U&n-6~xy0{z$%wyV22PnehP z^0+K4D*v0Q_;U=#JJ8sxxn|K^fxi4}A9#2%s5OgW^)7qy@H5+V`XTp?fJ)Xx#!7QN zXCLER7#|xC7o8+rI(yzPWquRM3X#4_-RXDTUm{O<=W|>vM;`76pmm(L+#W^dHv~@8 z;EGi)6WO`K%53NB`N)|B6SV2hcWbv!#Uk#hjqfgtX-DCyxmxvmFu&a4brBp8GT5hZacW=8?oW%84)5qZ* zjIcA%vBAA-_=pcp%KqX0j)&>hbv~B|=K1GO(p&jQR;OMv3o^N)A-(j`;6qu1zIv-| zTBen$G!}5bXFd^uMLH4j%C**Bp<2|9`61 z`(J@xe{%{;u4tO{(L4G4mE2FcqKb-&Kq}q{8nkEY=}B2kM@$2B$kq~wD~nt1)sGlG z<-Ogx$eq>k%<^HEi7JSZk=uBgEiOmLt%+Xs|HE+S|H8ZcMOFPB`Fc;4Yr>?o6dhAW zNi?|>^^c`Y$@^=flP*<4tEjdsqkS@T~UlQj$R~#nE#!= zjyQ6Fh$^e3N~oCFEbavK2b1PsEsZ4eMC%2DwL~#zz0!7{FQD+~Z@CCZ)H2q?+Q@!h zwCB7ihtV08y_=7~$^NUC0wM^m-@U;CFHh6wtfkZHhcApB1KDm&q`~D7=D$LK+RQ5`}!-qKSRMeGn zUr3LfTZG6>UeDRZ?_>RP7S=}$p%TLIHj?XmUx0Ne1Ta%4+rFJ(`(h_uudl6pzfuMl z0LU0Ao*!^yyTZ3qdv7t+VJCYR28sI&oPJsZ%vBnT@e4aH!}zAc%H;xsbXu^MR&bly zAy7*VKYTtJ*Qgw*#HaFSHj%yK?fN0_yo`4C^r_I8$-d7SLe()oN*kwj(AO;_p1A}n zIe{#LOf6jka*?DWwx*& z$7Yvph5m60XWqbCyU^q#3yPbPUbbby|MA%fNC&z}x*_BIi&>N>%ZvMZ@u)Zu5J3>e z5~t_}>}(({urzD{9*lM^J&fhPu@)x7g8!@)@ysG73F?XU2AMLdw*Nq3s>sGN@YQ$e zGo`EIc(Z)0Y*8n)LKp75SLQvwn!@d$Nr}9d-bnq$g-heUet01LkObt$k)c_E(BR|8 zlq9^0Y2-T~w)8$~^+lgYD>iIfmO7TCL^Pa>Yd>Vjz(YIBF*nt&w$ztYlKA;i>YQSz zeJ*o?%0<0&i+TgPWYvX*oGXxm#9Ir@>H1&RUfNFMtt4!Fl!&Cai8rMEEJKX>i1iML zqRaUmT}&vtv|Hak{*=|((uXf}%FWe#l7bo&B?E_|>o2g@`VC(VWkwq2dtYr#O<=%l zzO7bL9Y?K}yHyO&R~hzb03_8Q34$Tqlm$VRCn_AFlUrCO@I=-7=y#RU5Uu#x2_ z$<8gkSCNm55_&0BoLce-|7p8Qw_7gTdC(M8kx@-yRv*+;-P3m3B@@LEPjKSCoA$uj zxXs+e%r!2|fCm@H@LZ-#iZV|TW z8t*H6efiqnWL^bek~v{c5ph~`1OODv1&zyQzMW79HR{(LK6@JxlAR-uyjvn z=yi;QtQwo99lrJdAK+a6v-A}!5eu}G*l1ch-x42uHj~j(EeO}+q`cRxCoc1}`s6-= zokRLG^bF}sgG+R0gmRyV^9FgjBIoM0Wa4b)^Ydjj5iS7I*jG6}qU4=AEYaxl##0)3 zcLC+|15l?yG)Jz_D2cBYc8jAO|HB92{VyK`W?ee{{_6S=)V%eEEFOZh`<{1@=%?f9 z-|t#=Fo3pS81=(>;1*teB-As@lXhzhD+!d@b1UgFXAa(e`kQ^(J|p>U?Z#HJFXc9f z3k~SS{3i5JG*`3f4z)^t5ZvvBDPx}>RG6Axo3R~V${;n~72A$nS& z3^Cl$y2#06zx$l#$8MgF+?!q8FN=C7&SL+YUne3;GmR8lq}w^Z8=ea8j8y@#8EpUf z))t*&pzms!G+df|`+nhf%_QM$ZSm<*LT!_;zov-oa3)*3X^QMZR+3ynO^{Lfg-^O8 z^EpfaH1o8&8j>RG4_=>Xx?}(lF4>(5wwT!XhN@Dkjnf=qwc^XKj!+R>B|%(zp@XYS zk>JzF?D>(87N%*+tB#dEg>3SISSCl-IEfO+B46KkV=V&tx$R=z`SN*KgVjsVM#Wh> zv6B^JS>Kbz6^;NP!K(u<7soSq@oE&)nQksFPE=i~$$Cd^>R_o?l2vf!IL=r?Nrn({ z8P;nT=ICTi4`OSRj_$G`9lX$7)7_Qli{T4he|lbl$c zDh+5(xhNI1lK1I8cJotf+2L)yj)h7NY%ljKh>zlQ@{C(?J*9w8OotK4VgV)A(S(55&sN(VU8;`w;8DT%kffS9$)HEcE zj$X+0%BE8xBf5b9gc1O6R9*}&5A!UkpW3>ZUY#=ijq5H}$r62i=vXmoNpxdD4XvPx z!gg|&zT6kwvk}_Jk2XrV3!+AXEOrI}Cj;dJ;A8;Zqn`0;lDmW?C9pAv^90Zvie)NN zIEJeDj3SL>kAEWeRR${(wv9xRm8kxE*0lM6gzkQ@PzWrZqYfN+Lf@(LtnEI_eFQRa z$5Ew`{(gVU;#AS0EhAo>x?-P2IEd<-Irz#0Aw$htp+VI9Uk@-0KD~p>-qVrwJF0uu zhLb8%IYhS|hVRL*93*WmFmdAT&LDsV0LYeooF}nFu78zDVkx>44Cq!b?APCaTj*xL zlGW48L;db>iq;$(P#Lt+H%gJn3FFB8a5cH4pJ3Sg0AZbTWwbDjTdUX8qZEkhnCg%y z>g6Ezdi+?EZXWKzPF{iN9q?awI^Uj^6}IQ{Vo!`!txX+`{_N3eLWC|w@=K70CeHmm z|63&85ka0){OlK9%5!smb;ZUC+g~Y~7%w;hwJ7(*BLK0=D#u(~7^88Ld0Z4oeWA5$ zfjQM=Y4e7($P8!ur@-pRU%hhUR6~~Y_tGx(xMW)x?y(M@ft~Wp`=hddoU2Z@zyUhP z!$xfdNZmvB9Htln8_&Ihv9M9Pg`~LcSb^;0eaV4ide)uAA6nBZ>^vR0;6o!A+(f(b z$|D7wg5GcU3kilXDJ#d!Dr>ynDGuILm)$g=*c9aGu?RPpVcE{h&D3q>|6h_tO$yll z3nSclwmss}69Ii8mSPTa=cVFo$MtELql#w! zoK&xLZ|1GGRP_E{DXX;g2$tCgnV8UB73@109}6?uM(u9;ngyuO)gIV#?nnpu)xVgl zU!H5XY|1hequ92-*{~K6!3=cY(FE%``~Dzp$cl{p>O_jGOw~#u*1j^NIl;qqi8P!L z;~j0fb?6Bep}>~hrHP+0+*lyei3wzBl3tPGE&M{Hl$$+i+TSrPkz0OiJ^kb{C9i)F zSd^yrFVLU?A0bbJArILUy|rF4o29gfS%h?9uNH+5?oSAT+019Hvt@L=(hNUS;lWq) zD=UFHZ&ZhcP%p;IC!PB!;$!sArGXde5X4QRXq$_+9|q3F$upd_2FxyKfvH}eooiN) zsd2#d6S^G_I&Idpf=hfnQEuBEJaL2+rUMR(9dMQPCcI83em8_(OzxaOMB z(sD%rYETlT#i&+}{>RSu-gBg*#cSWD;h8U!Mun}abR}(YVeu2g^!9{uK({TtLM7l?B>ei-X@ESf1ns0ZT(xRsz!9#qK1IUcXeIE z=K*G{P7`cP5*mB^qW|vf+Vgjm53WrUw1qk#8-6e1M_}AlGLjS$^YtqP)~i|~b4;#0 z^*++^hkCCHj@I_3@s=AT$x1*%+RveR9;1+SH`}Jb)!D_RC{dB1kz*=s*KTE^K!`4l zfFGwW`AHWxnrnz%dJ4A9kSTh#*cmYbSBnXjN0J)R_e<};=jqUZt!VqLm8U8{v#cm8 zoqPLzuyjyI8ozrwNTk%BgmbI@4ljYm=48)5|Z@g}RsW3f!k8?(K=( zH3_$rx|~+0F7ZGosj*<;e4XB-ox4G>!3Qwhu@xa|>@pu(=`7&}I4;1_xfU3nJsmdr z?qq!F%OJ(}$qTmvrdjo;uvV8GrMtJ9S?u_^gGRhz{_T+|O%$5?LGg?J`%!qDA zPr3(Ulh)(9>NAwwn+KcJ8D+N+)pHw%3ZyutiEa>cb?v+MFDLeG^|2}yvfvjs3u0qa zLLDP2tGM$!xNNU}LSkzrKddUa-wqeLqTZ3py$(6__W?@QTKDcb8{cz!BD?&*ZpCt36twopT==_rOyhJYsZ7H3uDQ!{4W#w zXC866*VOKC8MBB3PX>>vo)e(d;UR}Y@~=G6g#?=Q&g;*FxvJhK^^ zi$zTQ3^`@crrVJxcPp2UB>f~AT~+$zzM?~$rE~LPxz^I%;IzI@k87(;JN3^3X0>&| zDP3hxXqny=BQTRRbtcQ~DbNH;W_R@vir+F4HmsP&9{X{@E9VZDG&52_mcO{-6c!kB zZI{gQI62VR;Q3cOVlypzek56d7~`qmmu~sxUb9Y)X}(8$R!h&CV2aZ@YV&)5MN+PQ zgy1ak;7i*7jRhYu2Sm>_$(Gf(V{18q)8*63KgM!jZZAkrg==mIMg;jD*;En z{%8Gwxz^Hbl5!u5MiH&fSXIZ#)d|YpN;jW(M!OdVM#R(Z*O{x7E&JN8$2qFZl<#0_ ztXye_!V4kFehmZWRGwOO_x$b!Bt3BIft}+n-hY&(+QdmDLGOLEnHM+R20vNaWb*+d zO04I|N4cKm$8u5g@kM!wWAF&vFOZ~%Y?pV{x=^$<#{Mzej&B&Yz#Mf;Qq!B+V*0IJ2!75+tNWSu zJyRJwQ*1LwqL5q&T1Y6b1EOcA=w|w&GiKx(9x3m)(=l^rP+%d}Ah%um_0+NuC~mPi zk(@+1u4IEAkOM3euYtf6nv?zy;ZK}<8bBSD$M;FUUVrZrh6kIkL>x7|o8xT~#^v>2 zyw*Sb5)15!@xJ@BRVG!2{b4KUADcj)m%_~6tdQX_)F1ViU&6o#bxUOklORDkziO6A zN?O20$Z_`ow4Zo%p#E>N4GAa{7 zVI0@e$$`s#EA6@BV=OyY3MAhIivMb3oL^6vyGyy?8 z$E(!C$jaCdUyVc7%serZ!|l_@-j4h)_TD=h&i?QBmFiA)hagdtD3hqsqbF+g3^PU> z5~7VD$`ExTk_e*r&Ira}MDHY`GfEhuM`swKj56A}+^oU0l|fzjpP&4U1u#9JJr1Er^!!VP?d@gUe`WM^~D{A16{&fX#n)1 z)Pv7_xCqdjJK*t#)r_vBS*|@`OC>+I9bk$%YBY&Kc`sZlnN5MBj=mVTHkDSrIL;u@ z_e{=lV^{SG91OA@W(k$gCLHJNPkl$#*lZei-yqOIHLSGNhRA{jB{~zjKf5?4a#RGa z%DtUbSHKf47oWwUf5|RS{#mxPCm^X>D4;&}9Aj1DJa+(enno;z-E9`L+&qPJ_ zp5^58-)6_*m;WXZ|Gy7D`LEZpPx2rOPxu9u|F;XRPFY!5b9sgJl#Ncoq@*PIYhb<+`VYIxUy4tfdmOn|{-gBQ+frrUaQT5t?{I|?2 z4#@vK-c3w55HT9-F%-rwJ%uY)5y`C4e&Hp>A%f~;oNx8*t=z^wy*n8#t6J5Kh6?+SGwEkS3}b2rphXDBi4e9b8>$UYDd_4-lhU!swd5WZ{bkOqUD z0ARO2y0^qz5n4yi(!qCqy#q!Y)wlw+U5&?(C?FN(%Pmy^Qvn|*L4u2%ShIt<`U`rg z6T^K)F2h$m8+VJh_lEW6#;ICzbUH`9@4V2SNt6bCbZ^0wqw2{^(jc?n$C9zl#_EL> z&Qd2l92VBFSw>1?#6M=_)vkBn>z+Y)Oc{`c;Zr?1M^o=uo#_)!`NR=sU+IPw4tF|#1;E|P{s_27)j+n2ZEi6iPOtEiGrx!k|6~fUzNiR3 z>kxU)>ZW1F*n4d61-m455q#b`vC&ISQpBfAkbwdoJG@Yi)5M0p#`6>_D9katqxY8Vm|@mdiTRHy_W^Cx`xy`uHf}yfEJ%_jbhBrj z3pg$uIydg-hT(Ab4{9A}zDtiWmjDp}hm~~EFB4pxcPZ^Rus6OA|*1RC*!TQ{K`F1GXXzT}qNGxvjo_LXyT1%Nl zVZ%^^dL%Li6Z$fnCitA*rLEr4Z&~N8{>;;q9DkQ`t1L6OTwBw?0-i)f;Dvz(go3+q zn#>7ST-eq3&(8>JFe`7a%*~b7yk=a&G5~olH@f~NdQ34&WmAO7P@SP~GSVaNd`ZIF z6fUVf7dnDCIWp0L7U~|Ff*BO3a~LCE63-ht3-l85f|33sEkjlbduFvx3xt_9uVoij zd@g?6c>5h@VWenC@YRkP0tXLE^C28B*sZZjKby}>le(S8f|NeWh5^=t)PA^DOyWR) zT)5{}xUQsSKvEEkHG+nle(a(p#a7US@kS=r>Z11M>CRyL+}To~HGZ5EN1?vo_IE6s z*quPY5fD}Dey)yhsC)FF%#&n5F7}#3ZVl;FZSIkXJd{dFAh9`rWg;!4&N?K?+jB>r z06Ub{DcqQMG!xz?e#ve=u-FJX@)~4uK3%gqrV4%k*?gpPx19f4Swj4)Cx7Tb>TaWf zBb^vlbd|~5(w_c<8-{1_HRTh{pVBnujsp zvfQQCG2C$xr!ey1vesmyytg1M0L#2Dv|!MvUT2G-`45Oe5;*~uJFi*q*(x4V0&W*6Om^?C%>JWsOXA8&Cl#* zWm#Yg#R`nrI)|0gV;|^Hm5z*?Q@;+KE)XduDcC4B5r5%8v`w^?0_WMXQRu* zZii)U@j*SZ{qix3G?>0{4PaSrK02>0jqS{8G$t9voPeZgCv%z{l=A*kGja*-`zLqCt*=_4NW%)1EHA0=?yvVOaXl zVF=PAN6pZOg#u+r-R0G!$5I}IhQo9osvC)a|CZ-G7dB*hBknM3I}?~l+;GNHygrS) zqtyNV+qbFFp$2@8`BYSj{|E-`sZ}B?5h5@9j34f9*(S`FQ$6NEp3&doIcgrQg0O!{ z_(uws^)B=n&?x?g7&buX3YatiYr)eGQspJ)7Rn&Y1)-8#Cyh?ODe<>IwIRzFzbmBP z|8bIzIQZN*yvcn2z2G^SJH-tHj3L3zy3V}#Fn@hZ2fkQiOW$6jofyWt`Vzvyz>apw z(UF6xS#C0OFkXweF8@TPon@?L`d+((ro4@}hwck?r_8Mhs2O`h>a(e5n1sP<`ab zWvghG`|?O0PH=&lknL{FJ88<+JP{A|5K)<1IvgOcLHft9H+Y(f^$d)Sj}SGivU&{0 z3;qmKDr+EfgY65t_Ktq7An}1$D<81?ii{-NF6PQ!*rH^e1#s`aL}or-{_r|M{AD1v zTZ){Esw{Q2Iq)I^uvbLGD?DbKJhhxrt-J8eV0>ECtZi8|AJ;X^DwLyI^Zqqva&FnH|k9;UOu+o zlDlc{|4Qtftwm}w>0w1ITt}q`cc2eI8G?lldFEHKR7 z&_)#xR-+lx76ElRHDH9trHa9|cNI!PYwq%+jHORzvop4frsTArh#Ei%@H1?YSs_KYMIXcX8!)7Q|KCBYKol6(E}MDxApEBXTzIaK&{U}NU@7u zF6-rJUq@|T^Ye~)uMTJ|r>a(J+#P*2Nym{iyC$AuXGLoiK55ez>1Uw8_r#!|Z|Is! zcADV)<+M^x!EbLJ*vgux710E2$~(b@ER>nUeJ}gEkun3yMi}8u0lkZ^?mVQ_lO8MH zrZo`PBVLfW?wP61f2D{Y-hl94?w-3TPl#ch)f7IY8_Vn^SZ>ymT7bGhYK0-m_;HdC zamXrX8S22ByE!!0XOiGPYLj!^IhP0sNNJd3gnhV)+sTDnQbMV|0y@ zn+4++w%Qe&x%4^CSTlKc{N;ss+7ykQe!L(j?)hPIS`=CJeh*yV3Ruzs8yLd9Pj9fg z9_wYVYOXKO4-pnEo5Fx$jCi(SUzE$&X$Y^YpxD`MtYT*J?*>H~wNz-m#BpD1t~I1F zL1T|1#Oy-WQW>`gm4}vW3nQ{MnuSO4p$}v&3KmH<$rcN*-Q1TdpL99t!Nu&klRLr^ zhD3k6()CDsTKT3(@JrZV4Zz^{A(^3tqegkMg1FB|l9FGobA0Ev%XMLY9;Nzp=h5y~LDpGi4K(jdnf;0;`E;3B{OJ67i8A~xiiN=Y0y-%#G{zuTxlch4e-#d$(seG8XJvzybI1&9dqLn zhUE9WGY!4vRbv@~Zor7akvfNzE^k_LeIEud#qYwhRNcmQS&suq4e|2A1<@#cR? zS9w$ZTXgmDiN;zmc?$4plgkaTjgA#kDO-bf$9$WXDUoPP*WlIzmLK7j&6dmM^(h5W z!V;)~OF8r}^a^WW%N48MvVs;J@j?ijj0^ku_JpoY2`hD{apF?ZfDDN7QWbGBgl}df z89c#9Jz*-MiO=uQ0+X8@(M9DiHPt)fCmCYbgu&0fIeD0PV9C&SKJG6u~1X3%2{QqIt9=3iy$Tqzzvu{PpXhZ*Wy~|VfZ+j7Mh2u zRVo9!X6iU(9skkc_MQ`)ZSP#u4er(G;AY7KAhAW)1K9xxsc93iN+ov3=Y)n#B&DwK=vV0bv`R4 z0-r<*HkJPD$J&ck-7ET7mVM57a$JcZOP5U7?(SAqLpKOA<$wYy19jPdS;F{z0do6# z65T*RXWTgKT-1%~h_pnIg_uv|E5jssfx*KDxRJkUN^|n9F8MFL?Yj!23}zX1KORQd z_cD_ubOB>n6av~AZ^l`%lS~h#CdP^WHwAF4f<`HhZ#l6OO5@Y{KRsxjqig7vwz;Yr z>PH1XoZodf6BT|GkWSsiJea&Of3{=c>`7-`xu80}FhWA_aJ6RbMAU8%=&X!(w)iC- zU%?I=oQF_jd#IBw<<{8EG>p;gP|TMdx@26(Saj(aeqPUO)9W4VN@uKvmfhxeZ?&}4 za&y+3lDS^z?g}UC&YUU$c#zD}oFWk!^;W#F^RXH}H=F}KD|^=Uhc$t{Erv5eG2wQp zf@P@uDD4)*H(IFdxQTPkk0(BJW6@i4#Z0K;r3d9D-X3nAz+=P3jrlH=@N+dHIi56T z?bdLi@i+U4!gR;N^V-@puZmoDESY=0*^N{l9?JS;VtCgm+iozB*v*w`p%+B74AJf# z^FR~N^#^G#*K!!_g){$<1kNb*jMxJw>nY5SPjiU<;yDD0AYkB^O+=U7ba1ScrF-H1 zMhSXudYGQNL*$KNi8=&H5!|By>^lr7y6PB}NS1|`*rLW*{`{U$ZM>p{?9d273>8m` z+vl4-0}lELKa(F*wqCB9udHZK1G>K8BfzrZzm(Q80m+cKr~fsVw!bK1TNs_&yq#~v z*n|i#MM}?U-c=s_Zx(Id=Ao6$F`kWp@bi40{e;5^GySCxwuh5`=I)hK%hY=_ZKq!J z^g_*2#kdbse{vkvIqOj3`H+t6N;>fRy#NNiCNqJPv&8w!fmn^J$`^bqTbCj#u$o15 z35m6(&zvDCn$fz#`V!^k;;=4O5~p4PeThX8AFF-4L2LbM&#l@-eKQ;EASYHG4T2 z7n@VDQW%97>xtdn(902-JN!e_+H)Z=RX-5n;-L=+|n2XQ>trrE)w>ZE}>#fTN=MJ*(;4$)!1jk5uUv}lTHMNkbt z^47q$xIF2IQieoK2U6sclGB@~Ic4?Va?0b)h+*UVaW)N(aa_kDxzD3k*7Fu){_CjE zIRC$k`b@|)R1ZRSE4?g6-UTbL*@ ztLxzO{vgIPd#{v3`@D;_fi#%lvFesnT{)N-^(Lmq$S-5K(?N#A|a{vKnNscXjFFu`OL;9>?i zBk$c@jmj;T^`O(qK27!0H3je#U3BNUH9QNyHk%IKl1RX`z|Glhg~7;T7?qDkb3{GH zrR^8sM|O+pr&8UbUMoH%t~#CVTwt4!2Q~@=xSpc+?Tw9-s))x;fw8d+PH&SE69IbW z{5S+$P*^y*3|Nu*(g*T*YWw5>E+=#y-a~A^b{O{@or!7{KFZ_!ZPjjPsY?Gx-VL3%>yM9Zx6I)Yu@^!_s&eK%a5dr!)P;vo2y4@X1f`V@d%eQ@3vZ zUDN_9(Bw`ZyM;+1(t-u(BS20T^cd^< zd)b-`OXLYKTJW7bGWNV&j1GVpxn-HvNFqPT%(Uv$3n91)L% zyu}JQwCVIaln9p$kcqiw--~iRavhvT+L}k_qMszK$(lPUC03bX9Y11YFdg=WWa|#@ zc1B1SA~A>U*oFv1u0Jgswv`7!#mkeO(O*KL5GAx{v;gTmm|L2cbVUw31u_E)3utQP7%0R@gNbi(a*n5+8`j%+o#5f? z6%VvT6}7n@Lkb`;r=%S2F~%)(zor4i2{`(XFG;a%Rs>)tYAx>y$?E-baDmS8RNN9> zQ(i;u+8#})yDQ6Nyog(4bdG!cf%@TtO~QG}Do4`6=)YLdft#;#CKl_2PoZm>+&eIf zwLb7(c?CZ809ZzYugIsJJmYAv?PpqQu~5v+ZBp~RMh)U47 zqC)?W@gH}uN~tWnQL{TYyY}W(ui35s~y4UOog*p~sCn_lsC#28V zh*veW-f5_(RmaB_Y5xs)71044-V0e{IMokxV0Q0;yKBd9Y-#)W4>%&?w1HB8J{Pk* zLT24^MwK~EaP)5G_ikE(g|p|z0g|1RKY^nbUiJ3e*v;+FHVy;40@Ex0@umWmkjK>l z!j6$)OYHL7lzSEOTMA^x`6)=NyphOSh2Ct*5$M31$j)HzMjb7lpL*Ns$c>ycZw-Lg zVgTRT8?@%=r0#vOldb^_%bbAT1^2eOlhy@QGS_HYy|`XJZY}#F)fd|nGsb`YZ_gG| zbP~69%o1!Jx=wy{=ih(C6NuO;Wu2&ST4LR>%9qBo05^>K@A0PwshN2>TzAr^5iK2O zKX(;N^}7DVehv5lDD(dYHnqe6@WMsn484h8sU~9 z^Q{ije=n9s<$^Z>u~sB$K1Z(DzWwdGMVy03KP-$fsh7*gX#Px(FCJl-1- z;&=F=(Qk}I@-j1XMfJKPxJpXfyUtQ2GyKLrzu(GLk`nplu z?BcHQUt2G2^^N2rc&L)){=P;Pz>(k2s#!IUJ>HuH$kZBqzMdEScXY=%a(u82+r|iC zXIdvpR0LlhWQuM2?z?zgIdWWp)y4w*iPoKh6jV(FCbHAx;5PHK+*a%)zR_F;W3aZlOpKp ze#|&$7HPxaZcd8=2PZ5%s&W~u8l*Zy5?ueF+GWA@{6%N?g^0HSZTW8(r^O=nfBM;8 zU>)1u_+j)>af~zA;E!h#GoNjM^=6#OA}^^vuvzglGc!KJlC%GYkn4T3t(6|@HS7o! zUf}o`peNPgVc<^erWM=W#eqL`QM#2h2$192;KW-m8=ozixY z??j?WgJ~H;J;EuSh}nu`yjv)y`~m9Mt`oeflLs`+T3k-ln(LE{-|L*b<4YPl&3A6c`KYOvm!{D7^}Gw3vSsWnGBh!{ zCovdvR06oZ&;;`M?7x7Rz2x^f#7$wQOHZM4Pg8XzG$&xbJ6;G&Q{#~#_-ZU3tF-2j zFKrvImPZD@*B2Kn5Y3jd6#P`3h;Z*h4j{1=dtb9Bo{=4N*#Z#`Iz9xSqOkd`(%k!h z+8eROkfP^k*0)4saB?t$9+yr=m;Lp&?_NEIER4ROC75G<)S#mo3RSEEp#dNS zA>zCUGBPkN-&rBNeMP*N4v|9c9AznYp-uw0Qjan=V|i#FgJG7ud(pUit5V5EHNsat3hI% zj-QC5)IEkcUMOM8lsX5ty8mjKhQC2M_ikxZzC6#FKw|z&JmaXNdIJ}hcFnaF*XAZo zvt*o^dh}iixsJYur8bi4mk^d#Oz|J`PQy4`QF^!Cacz5%DVTY)$@DOq!|8&w1iyPB zfMls-eO-ewpD{)VuuxC%VTKiY9t`CWMvd97u<4rRQ{=f$Q+;7Etc4xMRgHAhCk0i^ zCscF5-&IA0>JO2V6XPEc=)^~$pRhT}2q|_m#>;nErauD1Hz04(9{S3~+a@_S>nSb+ zRF$LFRfza-B~?Rt=!06OgWj8-9-Dz#UB!HJKA+jWQiFFFVb8Z=uRxT#nr2#aKZELr z%O4~|+yf<{hWa{fOmD<27R$89!h(d zazNaRa?k}_x91;n-T*qWSsZDR#=7jC*L9_B+?jXExOTt%JXKPA$n^~B;?TY6r0Vkg zB42QMPD;$N(w2@I+DK-^;p|9g+nM6{7nk0myElo>hfCPk{;iKXlSY|PhiU|RR|BF( z&>*=(u}yy@p*GXPsU&!!%c%^n(3HHWAA`x3dSl)`0S_saB^n@g{@83AN}M4^6|9>U zMB+HESRo?&vJu$lpRi=`Qnkq^kTiJixjH=PcEix3vn`3AOK+oKx43ijHfQ}^V+!RJ z=4ovGS?Lnns*kTaCCuphtsYAZP9kvKlLg)1TUMlr@w`EC2}ZGlTK5aNuL+VZ@xki@ zwV55IY%j+)6(*|}r6lcPy2xCE`AWoxVUdv_w^7@x?uAlQy)_!CwlAOD-EX~mrJ#9h zA?VMNoh?MaM`-eJLRpS&Kf?XP_mz(^JB3i=0=b5fnHyhAzqs@Kq%3OT-Kw0Q<+(f^ zY>H!~B`608?uD^6IL%O=x(;`LRENm_xJEp9!iCLUz*gjRr+JgwYu2h4R%=%4mq&XJ zn7OcyrGkfp-=*Uw_5dx8@?`ZpT0&q3Y_PzT-odwhUk+=%Eh`{5Ub;UiFXux1v5NBk z^!2i)ptY%u$$Ia5xT<`&S@kXbvBM6qk#DgQ`4l)IE);ce|o0Q)^an)Y%X%O=arc@Ewn zsS5UUg7mtTpqfkm)SGq7S1e?$bu*XPgz(R}=G0Xz4j@IZq$X_6ew^#!RtNY!OI6{kipQhs`U1^TH;>u6O>=Dc7!z9f9^_&fYZqf7!zT5p0@qXotD&x> z%1q~yLQ(kYMe2`_jYMtTA5^|KhG~{Fn@~?E1)a`Q*hpY13e?#VJAcHJSl`hsBzrb` zE;xvR`cB3}A3h)7X~gYAw86u{;Y{VMykH`|{D*<_2oBXt1L2CKGQay-KTMJ3b6(76 z$~-^b)zG(q1n-U6UY*&f(=x}?K+sGhiL;{Gy)Bqf?!-9J7Rmii5{~9cTJOYVd+p>p z88C}>Db$M_t1^>nQWPIt$hcoD?rZ=N88&4Nujm)Ny5P(rHxHCpa_5UBkA*Q3s%uxg zMxc8Z5;85A?*f-f4@0lEHGZ|im1u1(xWBQa^c$Yis^6h@k7g;Yt(qe_rdFAB?T9m< znh1Q?^q!~B&1lKBXXF;6!}_8oa(3srO=q9jDT|~B{esz23V!bmJfp=K>5PkLp-#6f zFA^ULk0^5uOhw47*@Wil#8!ab2ODwa$_uF=2cNSUAqLrFfa5dXM%eD~Oh$Zeqnvtg z*P2rGYFLisdy)Q!-7D2g0if0o#b@nb1*>Ht-!LE(L~K2lHDViH-aFdNPip4r#gP<# zdbQiS@Ap*zx$QjfNXL3S`eoKq{g)dBZ!tc64Uy*1~N0i=K3kYaK^=KUo?mk1)uyOnYbuJ=O z30j*qI!bx+;y?v+T`4M^7B!4bnD3-?oS}McSc9j79#)`d+;4ToK&Y<- zm)OfGJYwY1i{i#!-yXI&9~?0HT-RzY%z5fboXlhqZcy+lDNI~qfUw@HK)-D}s_y8b zpM5)ZeCP%yG_fka6?&}y+)#I6UdiwL#02|n!kKISo%hC-D~8s_Qf_I_#)hs-i$Z>WfyKTsC7V4a zIoKH)!fM`*JQ{Bd#16{4p%WR$7ynd~+_^>Q=Kw>InWRLoM*?cl8(QQS4p`%R0g29D zRg#4%QVtrM%Gpm?NwfWOG-VN@%bnB>z*z> z$`fy0Zu1w%2UPg`4tTg`yCwf&p12$vdc$wtAA5eljTc-NdUo@nGYeebrIyl!%>k$jye!*L_Oqm^|ScarH|BjK+5%)Ky?>E=#mJ=seEsliPvyc4`$mMT2Mlw8de8 zXU)LIm=~6>1k|kRwoT;pG$6-Z)-CIX$3&xc!tzj|wcC5Nf4>@}MDQ^E@X9{+*i4?hz_p7uI- z|6am4$LHMuvei*1=$)mI!YF{_LV&_mkeH9s3E(Iw&cyHfQZ#ajof!(f3# zE25D~#LX)rTey;W#IwaGI-~yYoy;@`G-LVb2pRA)zxSyuF*fJ%Q6Q|_ef-^mlAWiB zJo+CACV^N6M(3jk*NxdQllak`L>I5B3r6YfaM#bn#4CB$V=;iSyYsDySQc&3ni4B* zh$Tgb<>a{tp(T9x*S8NH5|SW&OoGcu>A3}`0uE}i3)y9?`p7O)A1!qG@qHRjk5}>T zLgGn!a^M)iku(C+ofxE`(M8D=X5a(k-2&G%63PtI5W#pEFny8>BSx_NWo3q}% zZFRv89~FD*6c~73eAb=di|%+}<7P_Mal#rsBsuZ&lzDJru~&`8SFDJ?aqQmYySYVO zRrz=s>&DBov<1j1tyR^7(L$}MYW?~Onq8f8y+g%d&%lPN-yO7kH#o5)YwRQtb=QSz zXjTSDc**AO<4odRuyEqeTyV2Oaps_Ac2GOs?_u7@^1Fk5g6X*NSOF<#E~76o7~S-8 zVR2U^`W4pNzE=~XLmoIsG;hdJt4DIf_ci;!1*R(Q1x~gi&Xkb?l(d2ry_l}h-yhCz z`yP>Q+yCxR=d8G>1T(Qw{KUSQab@k<>!IJ zAz_Y8>F_KE(d{5gbZ*J$!{@f?VBlYSz^&R15nc;!oN_~ooOMU5e>EA$-AUj1($A}+@*i&ay>v}a zUuFBEQO#=x9A5lhDc05Iyw%>a4)G;445nGqLBSiX*}=6$N46Ddj!OUsDTX2+nM8b1tLe!g^a@CQ3Qo;tvay{dAQE;HtyP zxxiv3bJl+~|7N!Bf7}Y@EOBGEe5`#yp*FC?(MeBW+8yMPQT4&{TdBMX&69149E2XP zR@+YY>HAU4H+lPQ?b|N$mJJAxLNmFrN+I&}VkRvTD(QyvOK%NHk-YHyRis-zqB8mC z)e6rqO@QlMokKzy|HQT0R$HVd z^8lR{HlB#F8aQAp?O2|L7vsSy@4gu^U#yq2%zdHlS9NVnH{$Fpe2yl zuvVGlx$jlca?({y6^ys{CCG=I6++2JA27U0Ql_zUzVbs;mP1fYAlvK{XyJytSc{ve zF%WrlOV|4B0O{VPrFiek@S@Tpj(eypHdVB9ayTWVxrrPG%Tvq2W_O>C5NNVy0l7TM zRQ#Z{g5+CGJ7z$6>Ov!1n)9HvCNOP^&O!P{+TIN)xaY0S!=FW_B?+Y$Je?z|0uLT} zhB7qRYy83sDa&%~I7!R*8bcnty*<|KqW3A5&&E-9UVz()5ZS)&L!yu#)b4qI$BZj#rYBZOiv;AFGN=;6lda9GF_023?Y|u@cI=wp7h@vXImA%sg^4 zLRiQH_S;%@UN-xs!V(#ry5iE>W%YPIBg^U#e6wF0B55hoDkPbzY3WPSO2mABTPp6MidtjG%bWBC{Fvd*2ynE9*FH;5b8GH^f-7I%gyU_&S@0CD4%GIX(#*sTu;)m zK&>Ysh>+J9R@$U99v^>WX|fd2oPEZltZU_?wW;l1U$=YfY>ftJze1uMP8P{UtasYHXJ6VyI;u3qmLm3J$TxpI%gWbssP-*|Ih?aDy0dM4W7PFK-R&0hGlTJ#N)5g_NLc0|UcMZ4HX5oksga zW?(qD;HVvKTJL@8f~<%r42!$`Wf@!rDp& z5)DuqS{3!*KU&r(ZtG*1d@kLXK262<=Rf~{K*!t6njE9);g^=79?VX;q#A@(STNtH z$P=bgmlQKoqn~eB#>+tmHM_a&2p>#=(l6XCDXcLHQ{@fEXg{yHuSrkE!12$&XvT?U zNs_Bt6Cvy8aA9HEAa@7Toj)h(o|1IjXhJqm54D6HZ!D?S^IG9vEv`vT-m6@w_4>*) zyK*JJjnRuU|Q7zLa)QTC$9X zu2rtTzdsOnbp&Kx?Qf4dvdeiJ9L^@m``73f8m%{`doHBU#q24j6tc+1G~D-{Uo3Bd z^0G}kWyggcc$2XK73_N}-{19w*7bV4RO+&I#{-rfb}#|>V+XS`bMjwRZJcc&ajxr9 z2(P}x(aiFhoDFN?!iMc`4=`nYw`5<~THxbCz;qIuK@la_7aYbrGoxA&TvpD?|Iw^^ z1v8cP6&{vP0pGkm|KrcP^GW(>&p9TPGhQ1~AnAryUtId_eT!YXrV*i*3MFcL*`f1k(^kr(bH50m;cgk{WUrHL|{@w<*O0R zI;aJ5rME1Y)#G?b8Z~jSxHCt8DE#lo+;@94GPO%_3F~&Nl5yF9M=om0m-l`d`~i7z z)n49bYd=iBnCt~*z>r4vH7!sE&<*7YPk*@-VlO-_t_ast{>WEGYnMHD5hYf)RwXO$U zyIJeJtyYpMF;V@-fEQIYF|AKAZ}$-t2*4cS(9EfQY{qvhh^g*TyKQ@&exNE^%GQsH z%J(Fc>*V8Pb|;1@A*VZfSFMsXdt%s3?w$~%??uQ%aocngdyhNQNwV)h@IZH-Gr~> zuIx}=u+QyUD?$rQP6qknS9B~!J6V2XGXSWuU+v|gDFZF}=2xhriGZnAFq1CADn+C& zjA&q1VQ7@C$Biw$uq=mVf}s(U2tYG-?O%xZ_XPF(h<}RV=}PSPbZ5$C9W}{umXEIah}~V57+Y&bLktIi_?xALw(Ot8EF28 z=QJAAsPNKs7sY$`irXnFhI9X%bUCpB$LP2uOpl0vzR^zi^_6K|0zFtEeN!**10>l?IyEOS ziAR!scq5>VeSn#&lKkJIjKFR}+?vyUwSV{1x(Uxw0A=uVtFFz$)9zSd|9#n@=Sb%0r`yrw!kt7qm+{F$oM7{Axos^%Ja zbR!<#5>B6Z+^iRvdZ?&Oc32&MzPAaltBNH4aaM|_`Z!>Qj98eTxe|lxl4)Bjpb_ob z8vFbY0%*U)40e?HxK;KZYgb!;Wg&LgpOQV==Fd5GduPFO}K!Si@Lt~ZB z(9z0FbgO%$1SeKv%}N9K=1=Qj5wMs}KfK|2G2Gj9b=_FuXkG~|r6b(e+mW3e(*ns^ zc?W^%kwUAE6eJ0w2T%3ZK6^^s3sVxS$f+mR|4{9h6HEwgd{}Dh0V&sum2c|rhg4Hc zpgJ)!aeBvyrF$l#um!ZZLoLNF1b$l_z?1YWmeHv_7lteLYZTJXzIJ6R1Zx zsw6BWk0#qq(LxiD9g3(=g^pj%$2`QoR}^JAx>C%jUF!C&uq&(OJh4kAg9Y2PW6^$X zoRgl@mzV;vC~$h>Vd3@e083jgE`m`oEF;CUAU_!_N>n%Ql#0D&VnEbT4duv9|)MI`Ld zbotXW;S)%j--6M86n*pZ1Vypa5j@?BRaewW9mr``MRZ7-X&SS~;5wB(70^<=CY#L+ zggrqpSW_Ms9gYz&6;&WV)Uc+gSXpCSegPiyw?s9|IBhatbZcHtnaUoz z0hJx<%$a@ba@Uf_LEEJrF;b+NpaiW^kvk5k-5(>56oq~Hgpl(*aES;;J)t?+{bxVUs=>u^OilewKS877nn&rx&%FK zv6QgFOXsg&b!q{2Jl~*Oc}8NS9v4LJ2mAJos*UE1ar|V& zJNL4oyd$TIHWwr|wQl^i6U<_Z)gehWh1HpQw9z@H)w85K5_BI zM%HcoSsdfWy|!pDwt|*$F|jZCQwUTI1&CT`xd>&zq7v^Qz-Z5{RL6Yws@DXXX~o2r@^{Si+-gH6M6j=XdQa5j&% z+ISw$iuV}Ji!loJ)SJzD%?Dr0pQycht{Mvo?b~&(e!};urtuUs8#;Abk|+ z{E(kS1o{g$+&f$4#dN<MACe10!Jv6%6@A2Iy>>6oll}3*n?lOcUw{5^n zM6_o!&7Cs8k+#0mVzW=Y>~Cq_D~F}n?@hEkEMVj4h$Jj22&GBmpPAHGsO9hZsY4Wv zqmo-LjNBmfDQ!l!Jg`PpjgwCi=|++=@PQ?9prCJo<%k|7g3VYIFN4cE+1zYULfiKfAr%z*lVVQRASr=(@E~G4;ikCyQJ8o z!9D zx{9CVbRD0N#o)61ayo!5*1lOCM!45YNls1ZHFQG&?^_pl?F&~`Y|A232Y^|-=9|g; z!gR*tiX_`LIr{R8+uiU7r5v+P3XZirx2&cwld?Yu3UXqD2SQv+trpgqw*UuRRjI^# zfU2|=!!|-GaI9#!-HPF^8T8p?_dOY2#c#lD?HB=CnBdxvZY!L52+DOX2Em!{jpqcI z1;t1kt!`CBF@S`jS1v;~)FGq~dYRVgIDGDRb-TwISaDUmP-`>~Xr=mID65by8le@x zB0URKtSaA)tp;Kb^^*gBdi$__lCm*Kw%@#VvHEU8q9{1)a}S${fy@|plrS$U`ceRp z>FBbIIGpZ1vT;#_v(oTGo~4x+Y>8W2GEENyk1i3D5bR+>c2th#LON()xA{pre3UBr zr%+|`cdc2GBB^f}FX7k+8R)j}k0Fp~{ju-|f(@_k5hF)8{(7pNks`~VRQ>uIQ<3Fa z7CSdve6)%b70+Guwrro5|H7bKGn%MBND#_ zEnQ=kbZzWcwly%vKkeM{6*Tbd#p2hcHqx~=r%37SNVb$*R?wUH`RXhVmGr%I?5VPG zbw~lnSDA1Y)i?r6pyB_ z{=+cIlus46!6i>%5b?k7_4@YI$FO-%LP6<6pQ3jP$Z%$)zV24o;w3iK+_DdGU{rYi zgb1wEMXlN7X?_F2w9_cnO9wCJrRxoGkm1e>!q&X{P&Bv~q>4u9Jg+g{S6LLPNeHdu zqnlk)s^0vf=~Z<)6~ExGr}eGtf0iWD2NLgCp7YMF6iF3{(Sgtxy;kQZ|J2dWTl;)7 z6kOKZIC5IEFbwL!g8-Bi_s%0hShmr*NXzrYkz|fEdUZP+d|yzRdQ?BQyY{unqU+mF z+u5usR)RAVVheI`pw2;6kvb{`&YA=b3UaOYE9?`_x^VtaV9L3n0Cj~+0f`~R?f;9t z_l|1n-M48OF?rU?TF?54Lh2~;)j`3KItF7t% zSM+aTR@y7hR>>8~Le*%!nP}--vqZz!96;X?c8T&q6g4BC1HqNb=b(J7l=(D0UoAEz z%W|MsW`{C*G0==^M0Fh4O#aK|y2bn|{cEEAecSJz{Gg>2jA3b$gWpMQ= zm&J%uw4YIAWSlh$@0fk74w)&RR|kq7g@C-4Ae2uNvxjsu;_mHx&Vm}^UT3h5bcX

|xwWn-IKMB{i=Azppj^eH=F zxT9J{d3hisyaM|;K0A9^bkp5De$ySd-RlQ|7PQ_$MMloxEv&soI{i)&U0QKhgLo~4 zY|4JE|8%|m+jR{mFbPfyHCKNyvG8t0;j zqO~@{trjM2GuR)CS`BdMuHnF%rvp{A#~jQj(c~r&6PWB+VTcFR;cn< zaJ5*NnvO*sAtf$GR5V-En>R!>fs@4 zp3aIMbhz*t0+cO^rQ1<^6F<8xGys2ZIR4`2nMrkC*alA%(zqctL|eGwh)Jh`&i}9p zBNpkLv9~I=k~?<92#8N98j!jA!esE8WoKotbmZpO8-ry>=AyZA<-OH!Yo${=g++i{ z@i4^;re@(d1Jst!V=9nf++zQ5rQS3^*{i7|}mLRqW|HSuk@y!2>l>Fdarpi9@4>BXWq z2A{@pfLErJAZ*`eUZ7B)#U@M6^Mg~Gagy?lYX!H$WPCwW(vDq zUk!WM_D!*8GVkqouffEXf@6`&GCtdN(t!lbgeix<;`RVkt(Y8d_=6=bh0Smh00%0!X%5JrgDGEFZYT5M9GA zWKIKn#5tD2w-|B@9bHM4aGq$4PR+_?GRd1q;myiN9kMv@?8UL!LuR0E4-=HKqdo2u z<$2f_IkysP3TZmpwTZ!*p+3J69w#19&cD;=&V-2au29-cQsb^5}U~pD~@gSPw{^{9tI;9s!%jp;L&=JK`~_ z_FT{S{sqv0(gKd~dW@NgZ8Jw!FdSim=tShy)2ju-j18CBOnmxYP0GIExu(EgK@^I2 zvm0gDsM-z#=w?sxWuBCnd_MyNqBZj0W!B2ThkP41Vdoiuega&0Uic-8-1)#5{Z=?aKhmUTQ z7{b{TJ>;pu7nZ*JHJ9!onjWQp7ye&gXvl@&ynB7ueE#T{fl_ z5m{tpWc7rjeLxIc8F6gz+g*Eti*YoLur$_XGOh#tI50dYc(xOD$X#D1;a}@p2w&J$ zmNFu2zHp_wFea4jJn;wylUL<-VfHIX@67k+_Zup#x|DM2r_f7avw8AIGE*M8XBv*( zt?7EDBUQYP^ZARA^14C4C2h;AREjwS?(4c@!ARc%1(^sC6h{d(i)BjuE#1F%&~CelYFYav*37 zH#wL(Gm?71Jt`yJ?kfReb!UiA3$G_&`D+hQYr{+qVxBIBos#v+?F+t#%~FzkA464% zJ8NqWk1(V>q`AGUfyUmt0gEzY@#TF`{HS&}px9}SvNRQHUb(wU{*F5)Ub#15#@Dt$ zCCA?=prXbbq5sBJr6~tOjIK^`5iL`;_wq4F@9gDmo78fZu}HZn_@IEL^=cNPEtn*U zw00s=4`Wcx@f@F<`P!VzFH`#*vRzNMoXE-N4+0Ue3Lk87C~BU|C=WFROu^shSTlPQ z<$oAcOc(F%bua~U)UCrRG)Rj0TOYK3MISs^2TxUGT7KJWiNRHZitq=>txsPzCq8fDqF@ zj#Y>K6;u!mFQKY#*jBqHUG;rX$|}JI%|Xf;gS6?v$_lkn@{QXq>saULzC)*(%5$CR za34`z)D2*=Z$5gv@?_Xsnk5F3C^60f#>jN3RNVP=V{x(K`Ji?gyB>!KV8n!JM%u(9 zpN~nSgo?~rQR3=(&hMpPtBp$JnojHNDJA%HU;NN}F1 ziB$J>USs3XCahJ?Mw~4KX1_|njxxY>3JZ-I@wj$BVBRvIY_exik~$_Cd2}#;4*%)v zS9FxIUZu;j^4qS^0;zKBLS^TsZ$r!%A?uHI!I4XSjmO8cqVQ+v8-3?&2iGssX;yp3i<||Iay+HLO!2&2ZX+np zzG~2`^48H;an3*m2sm57VrqK{yM=4mGzR?}&p>5o`uIXniL*;kBd1k0h{B#wH3hUw zx-WU*$Lq)Tc`6wojcZEqHUA_3Y}f0gRk1v+Dx-pLfvtS45q}WWHdYmqTe87jzWteq zDCQ4mT~kahAkhW^622Q_+4-PE_HIM;dhDkzZlh}rE_Ttps6}HDN$xman9kSRMUMAY zOO@(9ZQIODA;JvzIark`q3a9kIuZx1KgC9vE;t70P}O+qPMG3lp)Kw~ad54o51Xw? z44I$`7Us5%5Y!}`ShucR4}h+hj`r)~VcL>lL8;!qJN8n5?VAJGAT3mBj*stY5_*1J znhx1`7#et;4_@u-6bENwBa^eufo3@@-Tpidr$Hv=$tA%!;`t#M%R^K70SKT-f z5$m6_uD=xgOj)?Gkr)nZ%ArGeA3!7gux?ALQsVtM%TFQJpjRm2N@oAb21y%gqIcrI zNzDBtB47!|0C$+ne7on-)DDc$SPfXFMhHb=*i7qcK7Wg~$}XWoPozXuaH^u9Po-Ce z&8RvJ(PPoyMQq18S)3a|eNZaj;au_2g3kH&Ac*S7x)H} z0+CBKKu%YM__r$(2w*T15&btf(25^Lkg-IuvU!n4pw4~r_=}6}Bo#^mx4@L!=Qm`b z161n3U!yUC2iR7m-n|?b363+suv^p7Q7`w=%`4Y69N$mo%61*4XLt+mIFugX3&#u< z;b%`XP>&M6tb3zfH`fD|bSxOBcLs>*CcSVDi6ptB5_b<&s%$hpNvhnz*O$hkbPi2ZhA-}0(xP)p}UKbPxY3bwQ8mzhXquf#d79#})FO(#UPOyP#V%(7$4nbj46CwKW z_n%Z!%qH3LlCMmcA0XZ8Z%S??^Ekap%?89w;mmfoPWyf|0GVwUok^GK9jv_Hc}jjy zsA4NZjj;H*&|_RBWR$D3ui7d{jKdxpuC-dYLNe&edo5UHqkygc-5cZ{?Ku?wus|#` zCEaRv_Jro5``0wpw5%V6)@4^tV>8?xUdM5k!z^Goh${ZW4{5&k#z zSA5;V(aoF{)OeUIF793)fNr>Ae*Q(}QTK+y+dp~hUn4t727UL2GNpF8z_Fe=VxW{| zcgEgId5J^P5bUHJGlaa{E!)w|Jy4Xm=)}pO`zUM&Mc~sJ5n+a`ikbv5Gdajd3J&sD z2-6uqq_-1Gn94r)xkhT@Tv!WNUIY#H?9Q$?}iOvzY&*>uQ5(4KC=5aFV}>-~D6 zYj!K|dT*bh$^jV?CPO^wm&2qni4|jghI>|^y$cwlrCcjp#bA*u7tb&HkToUAjso5? zzE}NZ!=vB)>@P~*^Zdx^7@(+&Nlx1I{n2v+ak?#I+1heO>gu6ZG?FH&g8o?r^Ttz7 z){)ccNdDHlgK32%_dSpEUj^%fX%M3aL0R?ht&EDqU)p7*w1|n)2-nPa+|U`}lx+_I zYIUt?9R4uzb z>ATZuxp-w;$GeDVM;XADDf#j%t+_IciJZEPEL%6a)yE|GY-TBi^Yf!TKPl)?e>Snv$Tw<{axb5pn7SVc`l z3i`+!^f-uhOsqiJZg_jNe0crhA@mf7Ksn8c=DC2$-n=1F#&4_MmyIEfl(p7ACwoz_ zzYA5N@8^$JsF9OKxaQ!$;GCC&xNADwu{RO~|5;imVESusT~0x66s6?jd|KcX#SVa&ntSA#DCh>$-BgbotA~AHTJHggu9Cvm2=%#W)8~fJfnICfo z2#M%(-moXny`TSD4E&C0!A6vVM5y&rFV5aP1Kq~FnnJ7fYI@*GtYW$*a`|z+Cptmu zI}PY!)KYVFD=!^PjW+a^o6h~mvb`CKHD5jn{-`!79sMb~#;QrBOC8d{Wr=X^JaVa7 zJk!rsE-aHoY00Bb6+~%|New~ud|=bzoSj^3tj~|QL4#4L&>?>4t5rAY#N9Mu>d$1K zX2YGd$@9V+kavo6jAEtSznF%DmP@5aR_C8`-mse$9gz+2XVcA=N}=wa_6cxOXaT~( z24hFFh_*&w$Fi$GQ*ferD%n&9eyaYn& z032e`3bYIHqJk>?7e|&In|VFTfmJCk1F*ktOYfL}vnGLKKWzk)xK^b_5&ANU86y#j+&n9Mb-OUM@tu^o|rl zXS3Mq`%a6%e%_X-IuQ;NV;=mybZB)wPTNj9qT~I~*kkdK5;{jD!#}l|Pw)6fng0*@ z!&Xx@G|f66mOL8cGaKs8ottnexU)w_1}(mmnrOTIez%#dKIJPT#E*LN);Ik*4!}4h z@n+d!nLfR1$wG9yR9r2aa-ow~Azt&GQX*_vGvV&~D>Mt3ow=m(n5E(3YYDeZbjbET z+{3kZYPdOxhS+RpF_kww0fu^uIY+)z4JSc}1Q8&)#%HemEa`RVwe)5&Y<}I^gQcPu z_5uR}l%yijk|G6-qEsU5b*Hbr(h_IXXp6O)*sHU|yT-nxArqv>EGv4uivZ)2KtFwa zp<##ySr$+)nd@#@!P3m-&4O~N?%x0KU4t9*L$GfGB{ipb-kMHUc4|c@dA% z!K^|_I|zw_=l6g)bYUR{rlTJnew&}pV&2HI1M|5%J+*?EbgDi9P+s&{Q8G0)XGkSP zKs}ce*#Mf><3zB&;M}$gWw~@r&HUps483;O z2M!o3ct*OGOC;IK-LfMY*}9c>f3FXE3JB0=on(bf9fq$9*LVV>T^b3ny(d?fs;yW) zHem#af(^WR%=l0JNHK|(#<$?0AUjQkr2x?)X^^tqPfzy z(Qv7)Co9tbo>%9~>&-0si=UHzMD13>l0L%=d>xtA((H2ff@p9Q0j|GxUH3jjfhaIu zvXv--Em>9u(sR}j1{Njx&3fMw-AC^Ii7gP`Dv>Kzu{|`6qI>81(IdTb3Wc(lJ^-_b ze(i68g=$plxO~#Y5NvL0wY1UFjzCLg=X={UYw!C#uIy6l`?~h;Dh^*G6`ifrGt*DA zCQ<8&QV7^r7ZXB02F_Z@)IpQ(D@AA|-OCbKv|=Kc3AJUuC`$Nk-K_dd5=`&~;f*d{-Qi@jGw3Lyq!$iuMNg%Iq>gO2)LDB377L zPX^mQz-r{?sTE+v^&YkYpU$zc>^-~yu^es+NuHHOzqS$#$4M;om^ceu*DIuXCmXvO z{=kTh?EMUHNl^d96C)f?59R2A*z zj9jo{yQaV6ZH(h#Gc-c2>4Fh3ep`bdjt5r@R&Jx4`H(zX5vbS?4net?5xIvfJZ zv75cm%3n}+TZ#|JV}g_<5vaV8y|)TlF4h(qHXVOTA98AN|4JXSC{pu4NyXjRYv!r?70P?2r}{-4jQsS1?|G=e^UMsm>L2@e}{oz_>eu-=UVO`^=SE9C|1ST?0J0PwzYENFE4}^)15Gi?v zZA`wi`%pl215U;A;COrs+vsNHDz+wK z%6{$=Kdvc{PO6I6$v$ge?{CYnpT?HQ5TEmbFysP?49KdmCQL6Wx+OyEx4Y_Q+t7vE zie7uhbfC7j8ad7$k({tGy5Gf#(Hs$ z5zoL>r%u=qq}k}u4am{sYmC$~duz-x-$y0t!8F%WQt!Zj9=($H zrBD03s!0Ck>}*!Qx$ufCH0$GxjqSHgbMFyT1uHZr=^MSKbFucOrW>6p%=&#WqJS%l zfI>|IUA;sxfN$T)mi-Ph`G)z=XQ;KnQ~?KLk@5M`Lm-J5$yu5zpFwgjfW{o~g7$EI zQD-Fz(DXt@QD8QM{Hw7OI)Re=xJ(X4zh!>GvhagvIod^uMx_X^CqVwOCY!J`tPXwnk#08b+u8?zWZgf}kg6*q3VpJfbMoJwEOCSR(BKF_Yokxn0F2c&fvHqi~ za=C7!IJwwRbg1Dlh`f*V6r-o-KH-K`z3mJgFBi-$jEH0FU_KVkp;O7mlZ%t|&U(@) zGcsPqcOqH=O48WRi|9!}xT(dBu;~=+F09sTI8(}1Z)w*vGapLf>Fx2KLVzfib~Fd7 z#2ZtX*)U$0d#lzP`T-x$WJE`p$E0aUFxd>dZv{AC%;-1eIow+Pdin%*0y_-gMpaQy z#v+Gr(M5zUtxQb>i3d?g(1kwAyxJ%1Ii2Y(wn;xZWbg+56Y*RS7UK9M43Fc*WgJ~tRM7hgEDau#o=va;rK zjwBHeS5{+SjUA2aB~DQMKJE|w&zw>6dBZE zClm&x4zWKiEzi44RE5SER$U_W;|_}Z9}Dlv56XvGY$|8qy@g){l8C_52KN(_~n?q&pekmwgedsfR5`& z<_A{$p_r(Zqg}cHGZ$lAkx@dxY^Bse67>jyZB!E)0jK8B4?)>J5xM7%>2n0PB7j)w z^##%UaXgBUG=F8uEUeo>4|Je|r2hW*ifH04e?an>v3v;0T zJ#TM`;^hn>Vk7!HJngBO8e1t6|jlGCpQ3DNEZ;rBGySy zEj=qq1QLoy8`tG$S^GP%3(Sk|XFKDOfri<)&2G$w6PAkG5lE7^iQw&FE``WAa#8F0 z>;2v^H^;fB!tqF#SS8_GGU{+~6}7m>6~W&nK7O13bTB)T?^B*Hra0Y`(#gmr7!-nH zZ>cAJmomj;5%oC-ah>OW65QJh_fUq0bW); z@ZdFfe3v;S>`_MS{EB`SEKU$+fKRyDFrq@cN?u<+KqoB+lRUf;)WB#Hu*NS6IHbbAavCXa5HMu{j#VhV-axQ>< zZ>5BHA`A%|>e-sJ++gZF6}F~i0KL}BHvA>O{99<8`?hmoYuei(TB3J*d~6%};jbRDCPHuksNN3CV& z_?y8TR+S)fE$Ve{2U9yyY18UK#(RW=j%o$El&<%sB5`R?GDP11nyO6RfJ6+I*< zEPlj`o^jL+hZ$>#O+{OBw(a!HmK`P3^<`%AEb-8$TSd+A4FeFRXqina{YEFtjND$Q z(8Wm0A4#ouk_2Fvd~<@Mtm`qRZelvv?iL>lQ6PGgKM7_fzY6F1;wryaou2{psGIbY z#~9;QOQ>sCc4h6Z1){OE++WP6Vq?!!S~ z6YScxoTw%#Z}h9VawZox6y&Ca?|7sYLkL#(=$Gt|A=e$;4cOib=vxWae+cu>4nZO3 zn}{nUhNPiJhof+*QGBF+#zTu}q^4PR;VBPERB#aq4?SZwlB1QuD+BlLJ+?3$javZ9 z9VG|Cz9|o9A$Yj&^(|aWy6Y8tQwofGFS5r)mVC+J@NujuTDcwZUj1v1Ycw))%ib;4 zv?z8NRkHWVsPh{g=B$q^D>$e((IB@n71>*{#0-!I{^o+RVTK~9-X1C&BYxXmcjR^~wJ2A(_&BU8oLJ#vK|i_8Fi17-_1sE}n?5glR>UaifQrGY z;+4zyyL><1)JG(5SJPyYO+X+~a6u3w*Wd`F*yqB6F_Bsz)l}7B&f)2Pv1cu=vyjGe zwWmE!+r!OP{yVVi$^ILPh1Ee4Qq)XTg0k*<|GmB{l{o3UCHHyZt`lKyJ`zfxb4Uc6c)1>295NsZ76ot6Snt?W1Y^#NY`hw?L9~2(=3Sa8DwcR>+m~#= z^pFd?x20&JG~0PZWz$UcLSFUQTK3_r2ROOBni*Qi*ir7HYmIV>aXzc3&p}sj<8cmG zQ6>jCGW`4(^i7Q8>tD>fp8_HqDmq?;Ve`VqjhGwwf!HshHerSAOu#ON?2jZ5D{%_U zn|f~Q@)p|(Fa5CgZ+v^LA8@%_tkN5stf5R_{P{=?5 zBn!-KH4h=-h7eR-w`%pRP%R0`EE09sHO_b^Y4~RVU^5f4eR?wv8MmPV!8=1Ywu@%& z?@Bzg=ZuilCtYmup~_m=xfPyyuM_6yOri#IMCBqG)7MnzO0a^Tq)WvowF(=#qN zF%Ypca4$>Xs5qC+xwSMSmpFz2pxV=g-|s{~);Y0P78=E~%!{H4#Xv%Z7rJ{|zH_v` z?)-7kP65?PwBBeBuJf9G%9u3UyCe>ts+}K8`R1KeBMZ&f^o|)dBn2H z2K)On!ijh{YToG-s%c&}onFbbKq(X-mtov4mW$Rw&F}~*S-i{e&Gps+1uO_^FO&+ z(&1QAM2cL=EZ=NLZ)rX#){Y$F23IO_e@iQqg>p`{zAZqr+o4fd?wsL+W=5kt4F)A! zhwL%$3{*v7HsFs`q5R_#eHaCnpq=br<(3G1KN*syYm9_&Wy zU-4D=GbHE9p91U)%tTFp3b5bm)1yQQ!MOaGZG_r$4ZB*UKL)=CST))piVL#m`{{E% zK|N&wNaR>YT@q(NeV(w6Cc`sn1-Tu9Q?2px58vAK-dF@Nz7F>+5QyO?Wk0m>P$!Xk ze`udygwEoD9j%uEPQ(H-l|X3T)?qKVW@rVtIsYlfzL7_;5L18{B zt$L|XLUMkryhcMELF&mUs7IDjiZB4?NQ(jhHNpW_qbuicKNIZeVE}jOY|`x@$agQ~ zcblRX0- zQqw!SqOPvBfOUmRKsVf!+i(sSgqM@FgMd{Zk&IRgD&x&dm*Hf_Cr>8D zuW44H1oOfQR~A%Z&}iq2p&pW^2s%Ko{rbL-(JZnPBxP@p3a2Ybb+}mrx67CaJ#JGvslmS zC|BH-OJ94>=_|Bb*DAN?qQ2l3w8wJB@;s> zAHr#UK*RbJCSZCA__ZYRp`gf43Ygelx74LYf^L?$V0O$vaKPNX+HvV0(aLgX(lY$>q7L zKgdCT%fQ-lBQmnFgWH?G2_tmrs%wS;G$RpvA(X|(L$G%nX^N4!)y@pF1pu`b-+a(Y z)sX@TcM(Bxi9m+$dkBb43#)kIUF)9vtzj8XT*FQa*#_qJA|oo^ApLY>yOvf`TUlXFB?D5`o9_9q%Ex#?5s<4nQ{;2%2 zGKWy!Hw(?R*5mML2+H+oI%3^xAfgg^B&QXZ$y1?$By-8^RB8p{p2;>`lji+Qck*`H zsh15kd1I4WNK{Sj{2<^ z+rmIeXTV{9n&W}aiFcPjNERb6rQEeEX| zbepYShbYr2wCRjZ6$O`J!wzRaVRZNBbc@Vt3B@k%oPULn{~A6nq(k4@*Rn4`u%Qg! ziTG+BANAi^$w@_Qs2{pb3ytlR&~FdQHcs(RU38TX(ik5n9|)0ajq1bz#~Q&+54svY6TR{j&~aqp03) zN`#vL)q61fE&KJ3{f$PGTSH)5R;|YAS?PCBc>}7&d0LG@2W46Y;DG*Ag51?GxK3X! z3Kqwd30bkCa=fvp;U(jJcg96y3jMMdCS<$P55BIN0>q7NnGDv(bcu*Sk_0<#vxP_9 z$mb{@iShfJoce*qnd3rn;TKk9WZ*J?W#`1iA=KL()UF*G(5vkUmB}|?VT)a*zzEvQsCfD$A(^i_=RMFpp?U~MzxJ;h1WKt> z6nB_4QmmQSToNfU4>K_L26o;ngf;e$U&l3lWz-A`f@2!&0H!VK zKI8KT9s`&A?re5zmK`C(0X{O7vfg+I^Dva)e&IeqoGAG0+MhFQq6JJ(3zImzlbPFk zXp>+FHCq{N-Q27=0lN5ANt21r2|Dg6dggA<9Vo$#{#29ROH5s=&SBd{op_MAHe`0N zeVAs4K0r24-3uet;$G<%0#s@wqTx%DV=5#>{5Gmj0~?DzngemCDQ7 z!O_%6p%o`_0Z2r;t+5bX!m+qTgcW>qk>HHWn-~l*ted*Vh9cBYrDB&?Cr|+ZL>=#x z#D+5UJDk0pC8hS$qUTGZ;Ta*Vu4d)vum#$M77?KRq=cbEn-6*;xc~YoxKHatQC22y zGfw-ZN3F0k`h~JpQ5@iuYw_eL6v=9E6J5J3{Py7fHR>;wft+N^_BCmRXNBV=zyFXS zU%pGW>@aD$`*MWro28^Yw4eVL-4)OLK|5Ca=c$Hf4z~kdr)D-fj!tOD*GPatr+c%uM1$D-R72u6jMkRgYEy3N$LCvVX$%J%GhA@JjrIAvntpoaha@6bWF^TeH?zRSn z)hy+KTQ*AYz>T%)ecr~gjxsrsbH+R{Y<62}c_?j$654gbSnmL|N zRnCu|dYLT(rhavY`M|6qE9$E^3_znC+55Or9x77!Wsr$Tim!MGTB2lQBZI2N`qzp0 z@5E?y^<)o}o2iCHiO*d!e4k^@hDt6)OeM6JtNE_0@`GnGrekues|(b<1X$uN0O+=g zKR``x)apDvV{$^;4v&UG6&1*v5h+FxO0Y)_mqkidg^PtEZB_hWwa!+QzOq=~6%Nsw z{=(RKl_5AuO2(Q3SBjDLcaVEba&D(PdoQ(PV>Scfp~`Pj+b154pC|U3TVuszlpbby zYxTat?g`9Avd?BsatUy%MfT)a8{88PZJ zy?5^iuNmLWw(Y#n4fji%z3G6TALzY3=IJi-ZC0Eo`pNS@k1PJaD~|iWqc{M<#D5np z`v0!w|C1v1kEfa@Dh1PR@Ia~wac}USooYHD#TE7+$C^IW%W?G?@#Gy9KB3Q>rdYX6q*keY;|!?nN;IRu5@rN0AEt3He}E2=NC3Lt_9fW zPeM-QOMjjpdihdFO*?C)4D)tp;{-MI~}V`;Yu$5P26KKtB+n8~!WV5h=7x22O;Y0zV|h zm7xl>(_qUzodK=MVjWC{QKnLELvRc2xsUlFCwMw4*ank?|I|0!r}@&9>#<1xV&;B) zINP)GF?Dg1DZ$2hzTm>~KMR;J+rTjjVFY_A~8gS&1s$)hl={?$o{Qrlr)7ISb_ z)8Z%Shd}joLr_ePVHaKI;kyxv(FQUQ)>lgD z6)*6U7?Y#N2FN?&rOe8pCM#bNBX*izqlu?i6~kDU$%qG?7DHRyUo3u1dIWw9eI%*H zEVRB*|Lr48u1}}xes<8)QeUMz|H%e7ihovv+l6&iTt?7hkZhDY)>$d{tx(Q^zP&Mc@u;1@w8T)c}>tw0mKg#ZH0T~*wK)I5eR0$!5* z3EMF|eYeUPk+MZeZVOkS-tJv+x1luHI^~_5kwu15o56U_!7Jr;pgxOJ`wa`Px>;>l-VQ6gi?AbDW%PMrG z6l~oY8y=`xbcwPY;=GLSW@vp z0%gCU5&=NREX4LIkLl5ydp=!;J)JDnuBUoLyseONb7NYr9jR1Iv0~H{WmH2(wM~C5 zTN@UBm^Remwq)*=tisltVj9VvMe0E^34`i~_-_Fxs`WkBM-clM-?L@0|3=cuUcuy+J zYxS5>dg;P0_)_~3I`3%XeC06(s2Dm}=ww7}dUc4HFN8@At6ox$l&| znLWqcPW)~+X1QHX^7#ZWrvwq!8srOYw@OI&ND`{fgV8Un<*ifdh_wuIlpyF2uQ!|0zi&t%I*dtTl1JK9yHBgGWW4CmcGQ)a zD)dFj#-3TPn0Cq-N)ZH_j`{*7=a0_|01w4jZsS@TS!HecV`;JnQEIRyi=IH22_yf? zFGN*&-E8^tr8cZ&C>g+PB-0$8bnpGDf-HFqIQH`70Y(duSpi}ov{qzkZ)fJixNZ~` zB!z%7`z}fVMv27`knn&r87~lna_(NL#imU{&`*b_v>`T|N)RZ+Zo>w14PsBe@wAEl zk;fB}>i!;b)-J@oGgY#-MxHVIR|(s;S|18ySC`Km#VkVz-5JJ{j@-YtT<1ej_R&#~ z-GNTnK&2X8Q96=dq^Q!{@L4~+Ny+Oaq+m?0iHqyaZcrvyD17S@(zY@yEYdK9#)$<* zg)9gsHA-Pm#p=-uP-3(s;LobR14Meq6vaWwzAdMWISv2GoswZ``~6$sn91%`d6{!6 zLL8-TcdUlpo)9RXk#=+hdglo_zoknTdZGm9B+Xx?UiI3_2wlsk0ejjA)JIDe?Svdx z=+R=PlFnP{v?% zJmY(@A%SM!7Uun&xo4OQfc=IwQo4nm=P%}0eS_?k%#xV_jix=YJI1PgIMYFXTmI$^ z26ki(@mlmsYrHbV{N|Vj&+6TD%0s+NBWfFS_F~j9fGdF>hvUPANg~o!9!|lhXQ(ls=Cb7=ePc zQV}f{)THNy^B7?G!}52-pa1dY5~|@7yZIRCk$k0g0?G0)pefJD>K=xqz7$N1-T2a^ZS0bC!XSG$^>B%S4c02 z57-LD2t82e<`aG+^{A_7veNz{zBzjxGA-#aN9-L&(h|9r7E+a=zTMOhB>+W!dMPNj z;VPJf1=}xu?kCHRMni)+*!h@l=}qqQK@we^D(Aoxf;|VJ{S43K(A3*ZQ9E zeUWqBPupJV0xk)24;B$fHQm49`l3w#bERr>=`6pOsv%AweJ#M&1iaA#F&Z7n5l@U( z1_HFUtPMBRvnTIbK6ByC18yo_@-0QE_nE}g?Va4H5M<3LO7SflsNmErT{_p0RqTK~Pw`Vb9aQ1}{av6&%_G|`IK7Ato%EaW=(tto3ce#y@ z)CNrF0nKW~n`2m?)vHAT!|OllfMNA_CYXI`s*2$5(wf)326%0cIT| z)sZA_Dz;GHPagztUY%9vO^Yn3k&ztq?*V2iK(59Sh^u~X;5f7U`nOuMrv@^&u6w=a zIYSP4CA{?>=fm>R_uaq7heZGJUN{sJ1*S_a;5n_a=fo>o<9eUmq7uIBB;*m>FZ=Qj zI&Q?bA>dFp0RH7mwA@rAuXyTrP3-KJepI>g0oPo{qbI;9o!aZC?JjQHB0jdhPyxQi&>}z({2s;gev5VPSvY zpUH_2I&p+GdKh8Cu@hCfX|nrqilDIQ7>KEH&5frga5#e732hC88EZi%A|e{{b-1Uh zYA5B%Mgmx}C}hy==Qfu-iO@dAv+0djx4vX*kFvtj?b4Gn#4VVLIG1txF5Z z<&hFy8xJ^W2$))gl~s5a5*qxbRs&o^Sx*r?F8Q#{p`i4E)QM4 zX2z=>T8xYnW?;U{^Z{U=!`Y97gCm5>zOy&AAp~zj{j(=x(}Pc&IQgbE;Q+4?*ZwHuBOU?WSWB^u4*rIr@+Eq5g6l?m{G8-o zhiSk%np&bsXg8JhL`+$|7AOL)rxk2FVOC8OuO3~Uf>@GBr zZ9I(QZ@^CsGAOJ>R?KYoeq*eFWcVqkgMR( z6dUn+A^#$@O-Dz*<3&~6qTclj*WSGK_Gwd+JN>NrsW&sVI*a!<`NIEU@4cg%O7y;8 z$A%41iiN7uyV5%-p*I5wy(l16KuYLk5D@_Z=@5EoAvBRDHKNjc2}qX?p_kA}-VM&o zGc)I$cRlCa_pW=_y$^o?%O$J;J3D)Sf8XEdL&%n>_zxggHF$;|tIVR9x*y_z|7bwR z*G6@>!;W#J7AV)8*pD_x{(H62|85+-GN2AoCuHN7+VGxwb?Mi(6A7kI@cR{89m|FG z)`}d&&yPb4{jGoTto!i})B%FEJH;>l@Fg4!;;VYw+@kBMh~wB_*wRCB46Zi`o7J{$#uq6qEgu1tFmT2gkC4^sB(Oh zL5NP6M_2I;z1Q@IxQU+wj#&oUnOp-iYVcMTkLh7Z>BJCwME`)+GXx1kkYxZMzR<6nN z4Kk}j)R)~6iJW?$L1x z(P+-`NwQ#fE~+VeiyX!M1r#&YA6xfu_xp7^qKJeS&W&7xFHJWTTm!I1owG)TeC3Qh z>N}?PJ_zm&nfp)ZQ*9BV^sGl$+I_yQsuoIK*4^~%JAR}#21VZr!g4*+GKJ*aZM}9e z$5;GUf0f4#>RKZAnyvQ1i(Zd@LyX)5CsP*gn~0Sj$0C(#`eF4G5O zDvxqk(C$3A6pxi-DfB+BNMcJWWUA> zeVDHOn(nm#4oVpIHvHwxXZu2$B|J|X3%Zm*HFo_6+J$gPiSr@h9M8kI8Q5w|3Ie<* zUF3vgMVxbKRpEU9w{N*AA9@P!LnUS*efxV=Po*b6z4T(O6ETpr&-;=%Ei+xpdBKTT zqD4a0#0M(#V%>nfN=}6emPnSw)ProvdZW{zbI`nHReXiAuz9&?U2WUbHH7Kg*16Gh>pew7%S5#7^&S%^|tbhxk#G+xn5R)zXFM zZ12Z?&$q^uN_FLC-7jZqn{T}ZTx$Eu-yFvn6&*B<-S5KWdhEEI0~!H6uAgk_U@pzH zFRr#h>6SV~l~Y(V5#bp4acY`C;Ixf@{TvB97q7Gf>I;r1b`F!kIL)?SCo9bR@->Gl06RNdMXwxHR*z|i3JmT2XKpV zaa^FOudvWYV4N6Xg`xoX=xYE+;ujani=aSnmtZ)}eqBBL?3wji0I#j$p3}d`$w#gL zQQclLdE_fQ%DoUtpi@h6l(2cXlM!bX8N~)TU$VFB{rAUlZ;Dg+a(kS^y=9K3s>G3W;3Ke&8WF+IHAR?S1rCd?*0&}U`Gs2 zpkNOeCYcM-4%zp&O^;k}4&%(F$=H~6PS*j>SLfsyx!|Q@GzMP_IG9I>3(wi#m-U0* z+gAzw{w)W9J^50q+L*TCu0M%Y51Nr?q(Fveb*UQwI24Mj&7z*ANM{(hc8Vwh$Vp}_ z{iqy~wSw2PDMs=-%f0MP)3m~GJa4g9G5MEPqc+08?fH0~ifTz|@5i2er6LYHn;-|_ z9<7xGBvmN-C{w4sVKBs7ms*4qmGGj7;*N5iB+*w>~b$ze&1f#AIH#V(tU4K>JL z7-Fm%T>r%oqgG7WT~N2Uzz;}OM;)3D29y3-%8qg%wO@Dc8h-j|KKx_fkR`%h(KN}w ze{{9%qseCTT1$7zyHnXwgQPm_^;zQLZB|=u=5iAt2a#^2==U=#4N*dV{feQ{MpV^E zJT&NMSM&ySDStP8L@|H`&yC1Q88xy4L>$czIl|bkUOGy;oqAqJC)J-kMO&mVvGTGO}rmh_+!vcS40slxH z_nhM~u;Kv+Vrke_GxcqPql5(HhM7Xx>!*<90Oc&ErXJL(Tn4+oXu%lJwk4i{G5 znu+9h<;Rp%=GtY^Shuds&NV~x=N4*#^KfUY6h|wEDn$0s_4TX7aDzIq!i!7%E3Pgb zf()M~Rm;SZju%nCa!nl8K4rC*G-(h&;S?2$TlRUmi9I1!Metz^0`$!OtUYphq8o&L zBZM*7l6Isq)N(QiLJdDMXR1^IJT%NdTYuL838F|}N;w&(7!OdYA2GernrYf%m58p^ zZ~IVcQeypr`9jfAZh3qHQk3X6{0=buaSL&b&y+k1@hN@!w{md16q)&20>^M=rV005 zQF&5g%;u=4b>UFdRE8tr6UR;(mcyay{?4a=;y((H0{ll#?LAo#zsR|`atd=LuV=Q3 z6s-y`98&jx4X2sV9ZSeg%r!#$NR;qV&?c!N;NFWwEB4>Dfu;IfsfoR!t6OF$CDE-m zc{E;!Fpo{{tHcv_LIWLIqyTW^Z89i4gJASZQ-}K4 zFKxX5WN_@@F%`o$R^E(fZ^mH*23*%@u~wel4^~5h0N~a0SAwN^g5BLw8Dt%40OrhP zXI=%8mk}n0*F5E$4dng~H`AidpXeCLfjfCtUe-%%F?9YggeB$x!?Xd9UaOy*{-(;$ z*k9>cp4a?ux&MG}hHA%27CaA6bZPA1jz$i%p-pI697Vsc4-ZlImzICEPMzPe3_=~b zUIlbnGn12cY5;j#E#&wW2sU8$_cesllR1F0mu9Qy1s$M5-XRX2J=-xE^^pd!V@;RA z_`uJdMbj+s8~ua{{R&tV|3DJD%_veT&|*E`Eum1(E2~ zJ@0(MCnG)z{h7k0IXzE)iRuXEq`eFmH2h8gJ(Y1PNgqe4(qzdYRpT{imCr4CHh9w2 zBJYdm$x@_Hg%)LYEqPC!xT|Dwd)dDLeOo!xBBXkPXf-h?_9B&RhgplG8S_6G53s>! z{?H1M%M{Q0{lk19`&*MU(je=Q@9j!o>*#scwEailF1^k;ccIGjGwJGkVIkb}rmxtf~OTRc_?YAj`2jDY$K(#xwaPba`Z)F;!=7i8w zD5YvVNZGb57KXp$)V}%z(dycmR!C0NyBYso2D|?9q$LWaAvIyqVSqi8`|WD;;ZN+D zn8Uw`JsTA<`1;(-^gR4|ic~x%d*qUEC+lxsp-)wi$zlXA+I*n=)5IQwo;LtcQv`qp z%D^sHZ+?O4?#4~A!=&QFFFy`+U|Ur80Jw2Bg(fX5)HA19*~yc7NmQe7?a}%#8#(?w z`*Ehg0zwxk4+xgR^Nfkn_-QO{lQ8&rmv$Fo@4I&MC->||RV_J&x9u}cdZ0k%#TVHr zmp7CCdoCY$Milw<<|8O{l6FJKAIQ#UJm@n__6FWJq}ST+_Qm{Y>?KO{Tu7GyB&(`N z*HT}O)bF)7A%i`bLFdkf0Ko+h_vuwi5gr?1RN{*jT;Z#3 zNCqCrjzga?b2*(Cq^yR`F&e8Y-Xp`*%?BTU2TTS~tVfq6AHzL%yLYUf+dWoHOHg0$ zOF#_(?`9$kTjNwAEWv@PBo}J~Pa4MFXl>tEb;y32_mNmX%g$eC1c-^7Dj(>0&0*Ot zN!|P`D8zfS*QxF0+YvfzA%N@>Z5wWfkWxgb_up#@46HsGHaUy;kEMqZ#iuLEC8Ba8 zBTxhKSxb%pRU0Vmw3>&R^7e^tFbM->#gIt#>_3z~2}nJ@{aK*2t1faiIz;yZHl%}3 z$p^|rD*>QfUBIfKv6b?8*xYby0+Zp4kRY6!^fH@7keJ+@cv`R9paocF)LD#&Te4PFS zAe`_tHa2!9i?R6kPfkt(gp=(kbx9HT&CGTUA|fJyaB>U~PIgx+CM3P~J{+_FmVq;U zZ~pAnF*)I#NHhHnC-HxajNtzzV}pO^*Z&*cgM?gFz_eDi0}a> zA4Brq6A%G8zy}z>KP-F8HbM)OjjeQ!0Q`mZ%)OojXo=mhg7Fef>_y6mMSeoz=fWCQ zu2zu1NEV4rQ{04(?^TlBD=oPEYvbA8ZQsS8F(b zth+wp0gz4v#)PVGY(&8(eUdxJ)EV}bM@;D>(N8BDV5T*-Iw*XhcWKJJ~YKM z1)%lVL9bU)?Wgcm)yY}De+yI7ctQ{UVufA6$6{m8r5XddZ6I&*ls#QI`n!8w5(wcz zeX3x}C3zcBS64Z)7RDpFPJFD=CH^3LFY(c#*!i1*4ROd`DK0qr=AMcnUH5ho5%y({ zF%_40Mdw;j1JA#XmA_)gG69^*XvzWV(1bpwi^Dwq!F6whAbg7V#LM6d|Atj<%lMc$ zSMGtDS&WTc8oO>cEL3ovGzjaJsEW{2DdWkt7K5->e8rukG{-WMOX<$OzMC^EpS5*i zBVyjm4}h=&Y$G&!ckUqbC4f9|zsOl_Yve-(eYICR_%mOQk<7UT;11&dTvy&(ap=2v zAFxaY@mMmV@Uni^KE6wxmKLn=N6lW6lo)!!-guaXHN3o*T7Tv+AZGOnrZ%aq*1+P0qEX6nwdG$T zWzGjY=X{>G^cCKQX&)OgqAFek`kUl0s&vQ-k>8BAcfrXqj#4q+ z9e*k@Ycu(HjsoTGkXxZoB)WSO>LP~jU}!JU1kObCXvI;tcH6X>Oz@|Wy^tgHVs}lccm#{T4tkTlHEg}a-4>q zD(5*{yv>5*sukH*9+ipzyhe|JNiT9F`Uhta;1m=1#@^T~pQ0WDMZT0Z_YH7GOjPT0 z-n;oW>uPCOe4krfye1UQF-+r3DE#p+@?<-Whm{Qv${9mk{2+n#TT>YZCM76nA6`5s zHu!riXDWv=&G6U}t*)E4XDyaqKI9@#Yqw@GaLx5!%mv~TV8Z;gM>4G=(a0Cam?n=B zy_T+QI~59zo+j%Kym~kM>qc4q(=8snZuHGNX~NLSgIns~M%-MX1y)NE9a-Voi0~(4 zc~mLk<*~2h4Jx#KZrPK;^fl<)C^W<@y{GHS&(q%)e;QkXX3V$ltp1ES)kSQ14x#{K zgcWJbKfo7`#(7C8<$Ytd{`cW>OyK)a(I}D^)qL*qO;hH#Y7?df+8=*Q0?Jm%Y|&Ts zZ{`6UgT|m{6Uy_k8~^Xs>RrW3G%~V~f!N$SvM1XbWtNG;ffuU`GFgD3gp;dian!u6 zc$0Wul(Bnf>MH^IZSUW-`wep#jw&U}mHr?f&iF*ge zwC0FlCpvn)q?2B3eapngx5x}PC%(357FvY%_-ym4I`Yn{KpLVY-5yL- zk3Sf2Vitg}-sq#z(kL|JZ&arY$(at7`>cb1;aI98JWQwIpmWa^A^l4)#+i}gMf9!A zrIA*UO`QCAMs&&hQ7Qy48{|qEZTqdFn_EO9)&Ocdv@xzPz~tT-CCTlGQp?`emoHUG zXP-5gRoBCQsAjT$U}sFttu$?mPzOr2cy@RldmF<+x0J3VQ{=gbCux$gl2Q)9BI}7t zB~R937OVBf5?ZwPC{yqWwTNEY8yf2(;@4~q+5NqiM}Wxwf1fUgzocTZG=<2Ma}o4S zlT7PIR}Vf@6*pPgzY%2VG)iG5VHrkAkV7*z;!-I>D)&5!d2AR00e;vD#_#$Bq)0fa z&0#NoLLLZJ+6>ou{O8N&+*nYBt@PEC59MN9bkkN`DROU;2s$O(BBapd`Js$m)dwY| zXW?FJq^qAyk8L_nhBY~0kE77?S+@RF?XugY4 zD%1=OZZMQG|Hj+aPXBmRRKBc1PirIyryO*eD$B->dKyGxq7EuyA~b(iR=h9Lp&(Qw zTCGV^mS5TFG-NfP#}L1gzfk)1nz`c7=aF4zhJaZ3L>h}`kQ955N+k#*B8Tf9u=lP$ zCKizs7%E#$B&>5VqU;Wgd&Yg8dMEb9qtFs7aWQH22vBw6u2}NA;=czC+_=9+Wxu9%oZkf?&)U8Gy1xBj z=IT5|!igTL<}ql{RAYHK-Oa>&80wGy3p26EmLpLBG(>lXOfQB6j+kkf&xSirJ{i30 zYiC#hobc&w?T~rX4sqt7giRxPpQE=f08E>%Y~-;a$_x#sD`d zUv#9m`0(0vUH13%^s_{DVW1c~{r-W{kA*Im%lxYX$T4rd^;Q2dYKCG$%WYOKR5EtZ zs^VVQq4e1T;f|i}w?4r$cHbl;MLE=E?390&#(&H)#Mx7jQJ+;kOg1d(xMb(1xk6GP zrOffP4Zu#^4u*&8JUnTSr*M!C^V5%$KxCp8R0OosZ|XJ$-OaAFTYP)NQqqzh;s`WF zg=%u=;6#zr3m;DoQw#|&N6YgQEy6z-GepRsOXtD^`<)G#Gtb;QfG%a&Kiz^_3%veXCEP$6xAGkRCzLAVcwyH`1 zR?P?b0D@KhBEVRT^XbOF@x~B}QV+I53Be$YEP=x#7%j3tqS^Us#8331IQrqN$`Zp8 z{Ucj|7w2plRPB%>Uk9I4mur9;U>9ZV7UF5;H6iiob2g7T^@wkLs49Pv%gSVQ( zOZhsEc*^q?yo{&^;s3p^dmjGJUHA5Xv+Ld{mJO&Sm3~q(Uj0)_#x2r{3;rFBXEHJO zuc(JMYWL3LBpoW=HX%2E$j6+~`&oHEKCQfKGNXE>&8*VE{VK69wBMbuGCURL>{dZB zuPUnyW%w0)7>&R1WH;c4<5J>p2Xm43+bJg18gQnh>GQ|?C0hl9Vj8dZ{UP%3y!bmS zBdwa~=m$w65{r zb5`yu%lA%Rd;yyWiXQnuGwPinRFjDTS`e-@ID210RS2BLBX4t^IJqK0`*>s`J_Jw*BLe{GTcrMP+! zK&yyMVl@JMbz6?$x+7CQ)8Uq|`Id@3BtJL{reF1~O@*stSk#5yzPP08PBqW9!f>dN zMF^w3#Ix+++_0*~TFsfP%GyvEE!*Jk-MwG;`s(A3+8&|?i!2bBjv_)6rs$0^K+gy> z1thkIVVA_d!|;V@)~%mZbznY5X{6t5{Y83VW6{l0MIQA)=VMS zCa69NmsYI!RFRG996WU*l_<>-F0Bqqog}vtyKR3$$pCkOlpoywgVMn$6j7J-mxg`j zDv9+!R_s@AI(RlE4@eg!-5Kk=%HNp!8BPHDb=^1T;6_{Ei}zXm%)C;_to#V_*lC#}8Qbg(~BrX?5Slw?xmC z+t?-V4ck6kYA=i7Q?6>Rt(lIC#NFl=+#zIItpD1^aTdrbEH{{TEb zTR>81PE0KR6Fy9^fVSCt%FU zpy9Moep)X7`&=NI^fahqgvr$65+IB^^z>TxDkj;!`p#mvmu##S+u|l3F?dtkpllu| z>*9RsfDng!sctCLtU9ln*V_?Yz+2v#IH~1)X=qYbnU<)rf(qUSMX52%L z*=3m1vrZPCToA1eX5}0ZLk1%n=U@?lSxWJ1E5I!6paX{@FbPj@@MZr}-Q$*+gn$dKzMIPbOS;eo#1p_N4On%?0dl29GqM^@Uj z$Rvf)ilF4%jdl}jA!ho){MQLlvW;^KI>vDLUWO}zUAXZ*0EKmdE3)MzwDj7loFgvk zp{D9&Yrc^jtv#?Np&VsWCBsp2&nK4ey7vBDum|lnG58X-^Xr00J}@-55Or;YG4Yja&;h?@oBpeW-+s`>em>zOnp}?>fBsQ?W=L3n@ z-*93?A@swx#yM7QZY=WRa?@|1K;&2LELrn+UXN&Z-;{=7)nUw&%h_D1uaRR z3$$3TPjzmtP*&0uMv8T8*I*|k+@tL88xhvwC1e~Ls%FQ}$8GfbgHSoT zzK}NnLUBsLW>^UV0I;_|MBe&zuL%jC)QxRKwzjC`;NsZ|bZi(iMDF(jk{Oqw3#f-5 zGK9#ZU{|MP$@IdzR zH3WcI+;^l<+Mjs0q)E&^biT{Uc|SZB^@Y^Rmpa3#P_b}o@|UYS(r?@u)anYzH+1#8 zqwHa9qcqN8$Z~hzDJb z!dBmU)WHYiO*cLV3aiqNO=yfc{@Ahs1lyOAH7k)@jld1No;BN$NCqIls4T|GcSRtB zO>A$t3!RbQpUXPF$=;Ok9%T#El(L35y^3Wi3wqz{m)(;sP{`_GLA!;IU#@tB&=Vc* zhsTn?N{XeA=_C*;TnT8^BzL;cO@xM-rle0J=5gf@j~=5AFQo4MqJ2F1>Q(7@hQ{DF zQD@6Il$+%qeT-n)cm2-GZ}l*?gHt;??TTR9n|e+amrA6Zmque7txAW}Zek#_udSk< zyQDWEpG0~}rp_lMSTvGv1_(E<9%doo?<`W>=Mn-v=8`SU&vWzkX9HzZ&H3dXVhwtL zP)9p)lk>?$z$&H{gt2;Ql>ibDzO99DVzEui|9*Y-z&?3Z8N!BgEj*dIEe&1L7%^qO zH5Q|?%BwBY*`&;14&tE~6`d(#NulM#1tn6woi*C!J%RQGdq+Mm z4A715OY_92EF5Y&aLX4p9aVINB?kP$Wc;j69cOgxIN^!=a}hyUjOJk!dhZ+=CZ;C{ zu|^+27gT8a4iyF73}{peLeV+5u53=>H^1ULF7~QW=~NYhVqA>#SqW{aL5LkxAn9vF zQ%!5t1#Gu$|By};%(wI%h8eXjyLd5sl`S-?uUMWLHLQEx`5I=JUZs78bn%E)LYVYe2zQiorjAcBWeubo8ztB^2>#tI7J1IiODd; z*U7F{-QiFb&Z%?8T!$lreI44QoC-8 z`{%^mQT+^7oR-bTja#WG?bi+#>jy1xwHwd4s@4mAdj!e|JV@?Ng7NxekME!|1K<3Y zwpNRJ_w39enW&s3>)}eL*XwZ`W0h0&Zal}s)KYF9tK3}5^`lSH9ogCDc1dP)(D`#y zzRzx(FURouF7+W>BsKF*cDxCpi((&N%BGmvkjDWPue=#EfAw&R zVlG`t?eP?`1P`^Fk}2urB-W`v=mHA4yM9etp_&^2txAjwNoILwAP0wXd?ab(@@gP( zjFL}n)h9Ek6A!WQigC8UesW4KJt2>kOH6hiC_zrt>8Wf@V#kuX4d;93^D5Ug$2sNHo_a9T8xsn@^-SQYNz!lYTw+c_y+CRzkc2&kQ$U++ryTew49EVTCP8%)|Mz{;B`1#M`s=E73%qM zu(n}5#_ZPS6Vugf(y_*wbIClSs@rzSgDX946!H6kk*1lBhs>S-axxvUmBvV zRo#&TF)8!3P0Pky+veBdfK82>jnQ*`Rfg=Bwu?|}&VR%%Yk9MDTJku?+~Z93IyAbf zuUQn33{&q(DskEnzE}Ky1oQL(UNtL`{LtR7bVlwQ5?_y}@zrd%lorVywjo z1n%Qd7CL;oW5T0u6@Dqrv48SAjRF0H!}^#h>!;9jOTd!JS>t-DjpJ8@7FX`NS*hKg zsj07vqdTU2?BH5Qe$gEOu#_jYNU*}~H02okcr5X$+k1N~?HV2O0Dz^IZSRV;+`62) zt^V;*Uj{Iy`;K-W`j#&bs9zN5!4neEk4t?z4)7%J$1QSv2t=sER{=MkfnZmUnh#IA89* z-ed#a9j)Ho(gaqcl9i=~*H-ajM(FJG(xbR5fqb43@$Ec806HpRM1;cjI+NP;c~N`KoS?1QNwf-u$Xs434ZlkWgPMh2kN<4qZtODkth28r z!kQUBtvOP7Yd6SL*EQ#!ajHlSS19`&Oh$U?2|!R;1tF#tMu*34(FrOL=+P|oo+V0?7Vf~S9X(Dk%pm_ zjP?FCFH=;hS~r551)McIhBgjnZxMUzIa;&g*b$fI3|SApn7y3HL|tw$E*xC@ za<6)#t%jiqsnxjaGf(du1klRTU}r7FY|0mX*WX~4I_Ht1w`9k&l0S9!@G#563m4L4 zQ5pQ4olftGE&yE;q0`}>yXnQ1kfPSi_6~Zh$$Jc$*V8G|! z@D!mZHdWOA#KGnMv+emLgZ4ukR9h%#A~uO#pMQPFeSdH+H@{_;-*(E`l$oBd<9plw zCX`b44Ku2A%5T$l-&b#+#b8*gnJ$1CRmLD;0%KXq)b;}pv`kB@w@F>7hVArkim5tT z@cKUMoccTn)TC@edRq*O{kTf$`#F=4);x#XWSBZ=sNiJ_38ws>txE`82$6hLLCw1c+|6oC^Kxn^v zk!A~!giEX!!k3&Gjn^DqS>7X2=Vl<0Z6HLI9s3pAkE`LaH*ROJTX^)@A*!x>1^vSE z#_s0=N#N-MiG{WYS3WD-9@)8sjet|Gd^;OJksjfM5LJSGnVut*EN%=xP_KNqrT)cA z!a|lO4w7^MG`*11W9@DSfaR?Ku)J&G6iZl|HHX7lhOkcqdrArjtZF+Qy@+Rs6f+_#Wx;?iNRY#a1g1ximIL@i_Lb(0R+l9V^ zqHbPH{+*7xoX+6_j(v1c=3*lu!Jt1*t#wfv(b{$8DR5QeCe5Xd7;UPQk_ANZ0ntOL zx!sz^NLJi8`l2K0LJ(`9hKywZR;uV8Fuc-Q3^b8R)spYnQ)HL3`*N%E@|M$V)Z! z6DO97@6sP9D>iVU18|n=;q=@YB}i?w zvBP0dQrNZRx=MxW*g9mG`*CzElCCCmPLwvNDr=;AbWHbTJm&$Ng*?7lY6@WZH896W zcf+5zG9?}M4wzf|o`}{9qF-5_1ETXpmKRGXZ^j;_DT4uhxx^y12X3J+!#@bztTaiP^BRl#~uajsI6Lb zdq3!Fc|q&KuTd&PF}}gK8F+^gI`Zfx-yaGcJF`lq(su#QyPdYrYJH@4!3P#HFt9Q} zX(Go-02V~#EqZIa_`Nd>K6UFHc>8?5-E44Opm<)5$wSK{>|~~9W#i~OBhCICWsG6w z?o&gm3ZpW-8|xzX#_Hn3KpMbEty-QU1s;?-Xt!ibRwXaK2WI-!4!4*7%djC3hBIPI zOc3m<&kx_dMka6$<=v*gx@5x4?o{yJ;chPhS^$K*=e7)@pJlS zhiAEW3|-HU^DbeOWKb#|m2(g1ySMIq+p(JMmflht;Ge2w3rV3{Hwic3)!9ECr;!r3 zS^(oTPrJUg1J_}`%(HZ@Ot@-%W#7p-Z8du-V64BEZOi*9W}JP0v(F~r(=%o@%vz8Y zCf-OYqAv-lH+!RRR2$hbvg5^6EyE=p#4dHmAFk${N$c+L8nSz7xf8fu8wWotFryoO z0bB{1mIbkUi&zU;15ZiMiTH3pu?%$!JAml7??>Y7h;QuW#X8o!2S#bhr=zq1_#G#q znKvUlK8cGh8h$E2K&Kl6 z_UVYVjB2T=T9R@O|ArN-Oi02!=jdm_*kpUSwi#x4NV0=%qZbRFl*-Oy)YV#wd_R10 zu8pS1O7Lz8GLaLse*iW_sjnA0s4Um*AzkHpJri7->-5sd7HC!1ZVrmeK`H7|JrzDW z2bZgJ1QNkRdC|$au0rT!MeaMuBLF28>AitbVD$QA>Ai`WPaNjUKTFkP<-12yb{RH& zrNYV*Q8iOn-u9jMJxwj6C#uc6C4MAcPbwW?l*!(U;e?TTbm%Rr+P=e1m^&7AqZxac zQEd*pmsbBctjMT<3@15u)M^8~091Xim0>|Knt~QIQBeay_FtjQCtj+oI^P33GsTR9`lKkkX zx|SLF9w`~CSMK|O_I5PYW)$5rsrVfl(O>uG8SM96$uNO@(_Puj_G4&Y!q;Mp!&Gm% zqocN-RB?_bB)8XQNamqAYEg(lVh`+-pK&uV1TOU_W|QD7pKdX})ttO6uP&SRD5Kjt z8YwttGSR~d#u!yyIYX@wLZ}Mmd2LGs{)Gh_Kn&BCaI?B_#ICR)%&rb2gW?Jahr4L} zfemaBpi7NaI?2;a1_Yc?h^Cms!3Bd$slb!cSNJCw*072fd|^RasCA!Dpv~yx{u>8Z z>HDQ&W60Uv9Y*G}3?MOTK;}5GI1Ylj(D=T%xFG!-SiYMC$m&zBX)zt1ow#VX-AGDd zeNaM{M!8UaJiZss)1wKizI6JPtsvOsXtT?F@x?RUx{#FM6CQ0E?Qh}h8Ry$EIj2w^ zOQPTDJ+!}1F@}FPl1c}j^z@;?^U>w^puhXs|3|--jxFKZ5g!1*p; z{8lP{o2Bg|ey>T2o0HRPe>RR+q1Iu#(IVA*XE7($=V+seS2;N)1wXdtvpX_@-w{IZ zcK{eF3==>|I+IUzIynPAbG|L`n9}rQ%<})sU+=$l{1{sM6gpOJzD=!kFT3kZ^ZSt+ zXr~IXXv#Pq*|YGH>(GPWiE=8JZ8FDjey72G;r{xd1d3ZC&x418K5AlbwbW^Gt8@-w zD?)eUXDg~asIx?^Z)ey_;Dv(y-_#RTfN88GI#7TY?923TOof%5wetX(bIK~@WIQdm}CHAN02UTeg3aAXD!O9e;zp-yDc(k0<6^>c#zB44WGD}I-TBhbr#|2 zm*wc|1mF@&=c^HMVM%@X@@dG6og^m|^W2Zp6$h2)^cw{%b!ibu7w#(%>L`XLN7J6s zb|K*Mq$p)L^{9dV^tALMiCYCC(`3wDAFD#53RbAm?lUUS_>^gQ}U5QS0%6} zMc`5Dp*^Isfx>P71{^c0pj()awR{Wj;m_XM`7ZX_Ud&143$-5NQ-GviTB6FRdeyWH z0CspuZOeh1EI$y;@YCGbK$#dP826TsUjq06$DQA}gj9);VQ?~t;aY%8U-YKQI)twY zVcIuwI<)()G8TvI3=15kWiAwHfM&TSZ_JG1cDSCj;hL@t#>N&>PMOQeqC8r2v)R-_ zZ<93zxXuR?P1kPQ*dP5^tgJpk_Q(XZ=4QrEh()L3Kf*%@0ng%#wOdb_J%5Q!&3y+v zE9u2ge3mmdHwzf%7|Vl2YW-Opa~0OBURCJSumL{H_SBY!itdYj^Gh{0az`^cHOelt z@2%)i-;MkX0!OAYJoeL2P{)t;zcYJAoLDrwTD~;#`J=pFc~Vq~Lc2x^pV_I-j8A(f zw#wc2x2M2~9`<+TOgqNJDFM3`McTLG@~v01e#tp*E1e6SN>O0MP5V-2Jj->4^%nY^cq@NWwY#2Pb!%kN_tSK40 z@2WRGIyp7Mvx|G8Ib$;#RlCZyQ^;8TK9I^u$a_JMnSQ~m#|q)PRP#pjZG4niJ{bmU z$;i7cw+MO#PodJ1AirHlT zM;mT8=#zC`6;B0wtV4q8?Cltw@&t<0Hk*<*8%tk?o*8{t{J20GWevke;^G?9pDQmrR zL_A24LUHe|;vj>>LSqfDhL9&&>V6naiiqHnYG1Z&+2YH$y)}0oUA(Bvesbzldg*RR z&mzATTa6BwmrQp|=8i~ykUY^`TE|W43w>ZXl*~%fntd7Fn)!qcE;;dm{(I=w zqAgHVH=iniKi4nY`1H)&#w1Ryk)ir(bl_0TyB1*W0mAm-BYTnUl8EzSNzm(!!OG!t zx^z7!5hq(jQmb5Oz1PZ4@4394xiroB_Y%E)|4F(D4zm6kZ2}jfG&H>cDEdfy}@|m69x5@o-2Ljy*RNf`G@Upl{F?fkVcTgCbrpRJwsc zVDtLXi-YoVvB@Cov`u=>H}Ak%GUl1Sso#avp+0u%gs|h#f(BQbm*WM67GO6V_10vBL*74^bx}<{gQPfotybw>uR9c>Oesp5sq;z3wTy ze%3$@VAoe07ac*BH;gUE4D9?&ia(d@1*u&#!?P~xyYfo@j4_AkXrt7RXKJ?q@g~BLzrxzX?~x%6IvYZFBYwby1-b0|b^n!((#Y6&>d;9|kUX zw|3kqg(o|eL5n(@BB*eNow<1wj3`?T+N@^|DgNTDPt-+ft+>EhAG)adERDUO%+Kxc z3Rg+*^lVs3A}LljaKB0jB`6a&n24`Bez>gyv5`NDxx?P6#`q4O6crLMid&P5RfVa= za8bD(dYOIL+egHkI*Ouj)Zkad1I`+}nH5!Sa!%h;3aKj$?(hi5 zoaUBaXrH!!gc5FKdc0voq3lWx=UJPXtX93sUOu=p!W0PK#Bbiav>Y~0WrV;Mi4#}a zszDm?^r3P{8NJzaa*n+d{POM1ey*6w?vo=fMQ)KO!ZNJ)sfn?Q)AN1+e6w6CusSXY zkqNXsSxJy^JUm@VD9g9X?DR}l;+77=0$*&9!?5oWS1slTg3{j2i8Np)!@!~xEf*{` zUG*G+i-vSS{lN=)`VN(}s9GI_{ZjdC_k@A-M}!%oRAyrF2iBeij3a&E%v;xeinY%H z2*e$aVehGN+8QZ*>+zbl;cj>4Q(yOabOsx7=L%na+ju$2uX}UU!@969a*BaxZ--p| zNf|Uc{9lKd5thE*;l|e~*VpRkM%w3f>555=L;Ym@SbH)Z2nkPBq31& zZg-U0BI~`FnMA^fI?6vI7sMV;)bGgD>V2`R`EU%1ur^dkI8L}C5gHmymf9O=wC`sS z^n~PpwRf)XQ0ILdCre#ck!dLIk-dpbD`kp|hE}sIIW*0wFb>g@9M<^|rnIbCOpKUC zQlq3{Y)(x^Mh9b;(u~98-k4d%N-N_u#0)e0owlCr(|vmX0lx>o>-t^a@8^2`-k;a| zR*pbhNCy4b@Y}2bU0#k8i&{QkjLRSW-sUP~@=dShVC-Oi#H7FLt2YkK!+1Rd zj$2yJ6ydVI@X~>NIwsWhiOwYo6H6Y}I45!WVm<4u3+VFT6*EL4Y0MJX7eVz9;wPT;5iKaiz2qjw7J z!cT8qO=I*rPS3QDeR)@=a^2T&9@z#)j?Zh&B(Arv-9_Vt7nOUQ7m_|1ZlVo39zg>g z1wW5ur0%Kr={T&P*QuY*>wLfHaoFxLfBE8bgkz0Dz{u=Uw*5V1mPeDR%=?GO0(rus zWwA!1j>L3CM_TKFy+x`o&2v5RCOV!GT4P~!FADFv@oH#q!y2}0dr`ju4=E!lHQXZZ z*#NoC29?~VeIZ`A^xe5^R8g)`bs9?#ae5ULXF4N`C7?Ld_>afg-2=0W8r?@GvuY`* zWO#q`Ks*kgRpaGXEH~SD!V0_2w2LiE0$dP3bVx|;=wWP_2!Bw%yw-)21t=uDZ}Ku z(M?Cfs9(AT*0+A!J-WFq_*SX!K)8RVEcaNYZ>|wAyPFB>$4E*k+b^*9tzFC%Ng4NF z!Og$b_wj7rj7oj4K$Hp4B`;tmhR)tMr-xo7ucYLKgsnH8KSz#D_A77UGr%n_eLjIT6}A<`+w^(+_HDMG^vw+2$jy_HX+fKzKnB-s@HK z?oQ;h14H9hEZ+dG|F7?k~) z1l3YSl%ks8)obO}{T9WkiNoY66N)f74&hMulu+x#9QIt2l(xGrrQ;YccMtmA2+w<7 zS9O&Zs0@mIn`UL@fsoT6y!=RU5QBrO8Y2NCe#SgzmKwTjJ5!j^dSsWtv0QB3kP5^% z>CW#9L*H(Tsv>OBJz#t$(-Auxo#|NYZ+m?83`Dp~{<^N{o0aeSWfOIL`_{0Nng9;f14*OSXgz%T0<@qbC z^lIl+0u@7AnJ{#J--jEFQNYBWngCke=j_8kyLRLtHIw(IvHo+X!dJAU6cUpq zqg&llf`eb>*>Laogy5!^WR_x*a;GPUV;oWirOi5|%f9)%TdVujd8 ztahL%l!u%8pXZ>V*AqGRm`dJYp&GL2qawdW1E5OFOZXn{L-s}Ej(Lsjaz*`T;hLPN zPJ6}pF)2>8H|xWLwiwbO`zBFpy}DY0!6zQ{e{!ipvwiFqsgk<=!S!yag|`Y{x_|AB JZg2_8`U`^6(GCCr literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-incidents.md b/windows/security/threat-protection/microsoft-defender-atp/manage-incidents.md index 249d6de806..8ee9cd8e12 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-incidents.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-incidents.md @@ -29,12 +29,20 @@ Managing incidents is an important part of every cybersecurity operation. You ca Selecting an incident from the **Incidents queue** brings up the **Incident management pane** where you can open the incident page for details. -![Image of the incidents management pane](images/atp-incidents-mgt-pane.png) +![Image of the incidents management pane](images/atp-incidents-mgt-pane-updated.png) -You can assign incidents to yourself, change the status and classification, rename, or comment on them to keep track of their progress. +You can assign incidents to yourself, change the status and classification, rename, or comment on them to keep track of their progress. -![Image of incident detail page](images/atp-incident-details-page.png) +> [!TIP] +> For additional visibility at-a-glance, automatic incident naming, currently in public preview, generates incident names based on alert attributes such as the number of endpoints affected, users affected, detection sources or categories. This allows you to quickly understand the scope of the incident. +> +> For example: *Multi-stage incident on multiple endpoints reported by multiple sources.* +> +> Incidents that existed prior the rollout of automatic incident naming will not have their name changed. +> +> Learn more about [turning on preview features](preview.md#turn-on-preview-features). +![Image of incident detail page](images/atp-incident-details-updated.png) ## Assign incidents If an incident has not been assigned yet, you can select **Assign to me** to assign the incident to yourself. Doing so assumes ownership of not just the incident, but also all the alerts associated with it. diff --git a/windows/security/threat-protection/microsoft-defender-atp/view-incidents-queue.md b/windows/security/threat-protection/microsoft-defender-atp/view-incidents-queue.md index f215fda3db..0a72f9fa7d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/view-incidents-queue.md +++ b/windows/security/threat-protection/microsoft-defender-atp/view-incidents-queue.md @@ -63,6 +63,17 @@ You can choose to limit the list of incidents shown based on their status to see ### Data sensitivity Use this filter to show incidents that contain sensitivity labels. +## Incident naming + +To understand the incident's scope at-a-glance, automatic incident naming, currently in public preview, generates incident names based on alert attributes such as the number of endpoints affected, users affected, detection sources or categories. + +For example: *Multi-stage incident on multiple endpoints reported by multiple sources.* + +> [!NOTE] +> Incidents that existed prior the rollout of automatic incident naming will not have their name changed. + +Learn more about [turning on preview features](preview.md#turn-on-preview-features). + ## Related topics - [Incidents queue](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/view-incidents-queue) - [Manage incidents](manage-incidents.md) From f67f940aa6e983b13477718beb18e2c62612355b Mon Sep 17 00:00:00 2001 From: ashwin-pr <66497769+ashwin-pr@users.noreply.github.com> Date: Thu, 16 Jul 2020 16:06:39 +0530 Subject: [PATCH 147/589] Updated hyperlink to point to the right link --- .../microsoft-defender-atp/android-configure.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/android-configure.md b/windows/security/threat-protection/microsoft-defender-atp/android-configure.md index 182bb5e356..307e0470c1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/android-configure.md +++ b/windows/security/threat-protection/microsoft-defender-atp/android-configure.md @@ -30,7 +30,7 @@ based on device risk levels. Microsoft Defender ATP is a Mobile Threat Defense (MTD) solution that you can deploy to leverage this capability via Intune. For more information on how to setup Microsoft Defender ATP for Android and Conditional Access, see [Microsoft Defender ATP and -Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection#configure-web-protection-on-devices-that-run-android). +Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection). ## Configure custom indicators From 160fb76d6b9cc88502d3a0979afac966cd862362 Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Thu, 16 Jul 2020 09:30:57 -0700 Subject: [PATCH 148/589] pencil edit --- .../microsoft-defender-atp/android-configure.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/android-configure.md b/windows/security/threat-protection/microsoft-defender-atp/android-configure.md index 307e0470c1..478249c6d3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/android-configure.md +++ b/windows/security/threat-protection/microsoft-defender-atp/android-configure.md @@ -29,7 +29,7 @@ Directory enables enforcing Device compliance and Conditional Access policies based on device risk levels. Microsoft Defender ATP is a Mobile Threat Defense (MTD) solution that you can deploy to leverage this capability via Intune. -For more information on how to setup Microsoft Defender ATP for Android and Conditional Access, see [Microsoft Defender ATP and +For more information on how to set up Microsoft Defender ATP for Android and Conditional Access, see [Microsoft Defender ATP and Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection). From 0f7b22f8b638ade08fc99e83b2f0ca1999083d96 Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Thu, 16 Jul 2020 09:50:27 -0700 Subject: [PATCH 149/589] pencil edit --- .../microsoft-defender-atp/android-configure.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/android-configure.md b/windows/security/threat-protection/microsoft-defender-atp/android-configure.md index 478249c6d3..4c9046ca63 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/android-configure.md +++ b/windows/security/threat-protection/microsoft-defender-atp/android-configure.md @@ -29,7 +29,7 @@ Directory enables enforcing Device compliance and Conditional Access policies based on device risk levels. Microsoft Defender ATP is a Mobile Threat Defense (MTD) solution that you can deploy to leverage this capability via Intune. -For more information on how to set up Microsoft Defender ATP for Android and Conditional Access, see [Microsoft Defender ATP and +For more information about how to set up Microsoft Defender ATP for Android and Conditional Access, see [Microsoft Defender ATP and Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection). From 0c0e29761b9249aeb3ab5664cccc7d8145942505 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 16 Jul 2020 11:28:30 -0700 Subject: [PATCH 150/589] Update manage-atp-post-migration-intune.md --- .../manage-atp-post-migration-intune.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index e16e7dd956..b386561c24 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -28,5 +28,7 @@ We recommend using Intune to manage threat protection features for the devices ( |Use Conditional Access to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | |Configure your Microsoft Defender Antivirus settings using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender)

[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus) | |If necessary, specify exclusions for Microsoft Defender Antivirus

*Generally, you shouldn't need to apply exclusions. Microsoft Defender Antivirus includes a number of automatic exclusions based on known OS behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations.* |[Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows](https://support.microsoft.com/help/822158/virus-scanning-recommendations-for-enterprise-computers)

[Device restrictions: Microsoft Defender Antivirus Exclusions for Windows 10 devices](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions)

[Configure Microsoft Defender Antivirus exclusions on Windows Server 2016 or 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus)| -|Configure your attack surface reduction rules

*TIP: Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Audit mode in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender)

[Endpoint Protection: Attack Surface Reduction](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json#attack-surface-reduction)

[Learn more about attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction) | -| | | \ No newline at end of file +|Configure your attack surface reduction rules

*TIP: Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Audit mode in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender)

[Endpoint protection: Attack Surface Reduction](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json#attack-surface-reduction)

[Learn more about attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction) | +|Configure your network filtering (this is also referred to as network protection)

*TIP: Make sure that Windows 10 devices have the latest [antimalware platform updates](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform) installed.*|[Endpoint protection: Network filtering](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#network-filtering)

[Review network protection events in Windows Event Viewer](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection#review-network-protection-events-in-windows-event-viewer) | +|Configure controlled folder access (this is also referred to as antiransomware) |[Endpoint protection: Controlled folder access](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#controlled-folder-access) | +| | | \ No newline at end of file From fcf40f3c0340234fa8ae90b2d0b3c8a20c9189af Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 16 Jul 2020 11:33:19 -0700 Subject: [PATCH 151/589] Update enable-controlled-folders.md --- .../enable-controlled-folders.md | 23 ++++++++++++------- 1 file changed, 15 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders.md index 1fe945f148..4fa6b49fc9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders.md @@ -60,19 +60,21 @@ For more information about disabling local list merging, see [Prevent or allow u ## Intune 1. Sign in to the [Azure portal](https://portal.azure.com) and open Intune. -1. Click **Device configuration** > **Profiles** > **Create profile**. -1. Name the profile, choose **Windows 10 and later** and **Endpoint protection**. - ![Create endpoint protection profile](../images/create-endpoint-protection-profile.png) -1. Click **Configure** > **Windows Defender Exploit Guard** > **Controlled folder access** > **Enable**. -1. Type the path to each application that has access to protected folders and the path to any additional folder that needs protection and click **Add**. - ![Enable controlled folder access in Intune](../images/enable-cfa-intune.png) +2. Click **Device configuration** > **Profiles** > **Create profile**. + +3. Name the profile, choose **Windows 10 and later** and **Endpoint protection**.
![Create endpoint protection profile](../images/create-endpoint-protection-profile.png)
+ +4. Click **Configure** > **Windows Defender Exploit Guard** > **Controlled folder access** > **Enable**. + +5. Type the path to each application that has access to protected folders and the path to any additional folder that needs protection and click **Add**.
![Enable controlled folder access in Intune](../images/enable-cfa-intune.png)
> [!NOTE] > Wilcard is supported for applications, but not for folders. Subfolders are not protected. Allowed apps will continue to trigger events until they are restarted. -1. Click **OK** to save each open blade and click **Create**. -1. Click the profile **Assignments**, assign to **All Users & All Devices**, and click **Save**. +6. Click **OK** to save each open blade and click **Create**. + +7. Click the profile **Assignments**, assign to **All Users & All Devices**, and click **Save**. ## MDM @@ -81,12 +83,17 @@ Use the [./Vendor/MSFT/Policy/Config/ControlledFolderAccessProtectedFolders](htt ## Microsoft Endpoint Configuration Manager 1. In Microsoft Endpoint Configuration Manager, click **Assets and Compliance** > **Endpoint Protection** > **Windows Defender Exploit Guard**. + 2. Click **Home** > **Create Exploit Guard Policy**. + 3. Enter a name and a description, click **Controlled folder access**, and click **Next**. + 4. Choose whether block or audit changes, allow other apps, or add other folders, and click **Next**. > [!NOTE] > Wilcard is supported for applications, but not for folders. Subfolders are not protected. Allowed apps will continue to trigger events until they are restarted. + 5. Review the settings and click **Next** to create the policy. + 6. After the policy is created, click **Close**. ## Group Policy From 6dd8720fbfccbe8c2c01874a3870f15ceadc400c Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 16 Jul 2020 12:17:27 -0700 Subject: [PATCH 152/589] Update manage-atp-post-migration-intune.md --- .../manage-atp-post-migration-intune.md | 27 ++++++++++++++++--- 1 file changed, 24 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index b386561c24..d89d703569 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -19,7 +19,11 @@ ms.topic: article # Manage Microsoft Defender Advanced Threat Protection with Intune -We recommend using Intune to manage threat protection features for the devices (also referred to as endpoints) within your organization. This article lists various tasks you can perform using Intune together with resources to learn more. +We recommend using Intune to manage threat protection features for the devices (also referred to as endpoints) within your organization. + +## Configuring Microsoft Defender ATP with Intune + +The following table lists various tasks you can perform to configure Microsoft Defender ATP with Intune. |Task |Resources to learn more | |---------|---------| @@ -30,5 +34,22 @@ We recommend using Intune to manage threat protection features for the devices ( |If necessary, specify exclusions for Microsoft Defender Antivirus

*Generally, you shouldn't need to apply exclusions. Microsoft Defender Antivirus includes a number of automatic exclusions based on known OS behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations.* |[Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows](https://support.microsoft.com/help/822158/virus-scanning-recommendations-for-enterprise-computers)

[Device restrictions: Microsoft Defender Antivirus Exclusions for Windows 10 devices](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions)

[Configure Microsoft Defender Antivirus exclusions on Windows Server 2016 or 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus)| |Configure your attack surface reduction rules

*TIP: Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Audit mode in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender)

[Endpoint protection: Attack Surface Reduction](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json#attack-surface-reduction)

[Learn more about attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction) | |Configure your network filtering (this is also referred to as network protection)

*TIP: Make sure that Windows 10 devices have the latest [antimalware platform updates](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform) installed.*|[Endpoint protection: Network filtering](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#network-filtering)

[Review network protection events in Windows Event Viewer](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection#review-network-protection-events-in-windows-event-viewer) | -|Configure controlled folder access (this is also referred to as antiransomware) |[Endpoint protection: Controlled folder access](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#controlled-folder-access) | -| | | \ No newline at end of file +|Configure controlled folder access (this is also referred to as antiransomware) |[Endpoint protection: Controlled folder access](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#controlled-folder-access)

[Enable controlled folder access in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#intune) | +| | | + + +## Configure threat protection settings in Intune + +> [!IMPORTANT] +> You must be a global administrator or service administrator in Intune to configure the settings described in this article. To learn more, see [Types of administrators (Intune)](https://docs.microsoft.com/mem/intune/fundamentals/users-add#types-of-administrators). + +1. Go to the Azure portal ([https://portal.azure.com](https://portal.azure.com)) and sign in. + +2. Under **Azure Services**, choose **Intune**. + +3. In the navigation pane on the left, choose **Device configuration**, and then, under **Manage**, choose **Profiles**. + +4. Select an existing profile, or create a new one. + +> [!TIP] +> Need help? See [Using Microsoft Defender ATP with Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection#example-of-using-microsoft-defender-atp-with-intune). \ No newline at end of file From 7b6a785f99ade8956b0a78abfb94f37491ecb7e1 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 16 Jul 2020 12:23:50 -0700 Subject: [PATCH 153/589] Update manage-atp-post-migration-intune.md --- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index d89d703569..eb2cf9faae 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -38,7 +38,7 @@ The following table lists various tasks you can perform to configure Microsoft D | | | -## Configure threat protection settings in Intune +## Find your Microsoft Defender ATP settings in Intune > [!IMPORTANT] > You must be a global administrator or service administrator in Intune to configure the settings described in this article. To learn more, see [Types of administrators (Intune)](https://docs.microsoft.com/mem/intune/fundamentals/users-add#types-of-administrators). From 252709b5e949b7278446af0f8484a8b614a4a23d Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 16 Jul 2020 12:29:54 -0700 Subject: [PATCH 154/589] Create manage-atp-post-migration-configuration-manager.md --- ...tp-post-migration-configuration-manager.md | 48 +++++++++++++++++++ 1 file changed, 48 insertions(+) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md new file mode 100644 index 0000000000..b6de4062b1 --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -0,0 +1,48 @@ +--- +title: Manage Microsoft Defender ATP using Configuration Manager +description: Learn how to manage Microsoft Defender ATP with Configuration Manager +keywords: post-migration, manage, operations, maintenance, utilization, Configuration Manager, windows defender advanced threat protection, atp, edr +search.product: eADQiWindows 10XVcnh +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: deniseb +author: denisebmsft +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: article +--- + +# Manage Microsoft Defender Advanced Threat Protection with Configuration Manager + +We recommend using Configuration Manager to manage threat protection features for the devices (also referred to as endpoints) within your organization. + +## Configuring Microsoft Defender ATP with Configuration Manager + +The following table lists various tasks you can perform to configure Microsoft Defender ATP with Configuration Manager. + +|Task |Resources to learn more | +|---------|---------| +|Manage your organization's devices using Configuration Manager |link | +|task |link | + + +## Find your Microsoft Defender ATP settings in Configuration Manager + +> [!IMPORTANT] +> You must be a global administrator or service administrator in Configuration Manager to configure the settings described in this article. To learn more, see link. + +1. Go to the where and sign in. + +2. Under what choose what. + +3. next + +4. and next + +> [!TIP] +> Need help? See link. \ No newline at end of file From 8ddd509c580a7212e840b5df491879e07f4e2ee8 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 16 Jul 2020 12:30:46 -0700 Subject: [PATCH 155/589] Create manage-atp-post-migration-group-policy-objects.md --- ...atp-post-migration-group-policy-objects.md | 48 +++++++++++++++++++ 1 file changed, 48 insertions(+) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md new file mode 100644 index 0000000000..b6de4062b1 --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -0,0 +1,48 @@ +--- +title: Manage Microsoft Defender ATP using Configuration Manager +description: Learn how to manage Microsoft Defender ATP with Configuration Manager +keywords: post-migration, manage, operations, maintenance, utilization, Configuration Manager, windows defender advanced threat protection, atp, edr +search.product: eADQiWindows 10XVcnh +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: deniseb +author: denisebmsft +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: article +--- + +# Manage Microsoft Defender Advanced Threat Protection with Configuration Manager + +We recommend using Configuration Manager to manage threat protection features for the devices (also referred to as endpoints) within your organization. + +## Configuring Microsoft Defender ATP with Configuration Manager + +The following table lists various tasks you can perform to configure Microsoft Defender ATP with Configuration Manager. + +|Task |Resources to learn more | +|---------|---------| +|Manage your organization's devices using Configuration Manager |link | +|task |link | + + +## Find your Microsoft Defender ATP settings in Configuration Manager + +> [!IMPORTANT] +> You must be a global administrator or service administrator in Configuration Manager to configure the settings described in this article. To learn more, see link. + +1. Go to the where and sign in. + +2. Under what choose what. + +3. next + +4. and next + +> [!TIP] +> Need help? See link. \ No newline at end of file From 79de3bc46ace4131b2b3feb6bb1ce0d28afc30a9 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 16 Jul 2020 12:32:15 -0700 Subject: [PATCH 156/589] Update manage-atp-post-migration-group-policy-objects.md --- ...atp-post-migration-group-policy-objects.md | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md index b6de4062b1..5cc53fbc0d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -1,7 +1,7 @@ --- -title: Manage Microsoft Defender ATP using Configuration Manager -description: Learn how to manage Microsoft Defender ATP with Configuration Manager -keywords: post-migration, manage, operations, maintenance, utilization, Configuration Manager, windows defender advanced threat protection, atp, edr +title: Manage Microsoft Defender ATP using Group Policy Objects +description: Learn how to manage Microsoft Defender ATP with Group Policy Objects +keywords: post-migration, manage, operations, maintenance, utilization, Group Policy Objects, windows defender advanced threat protection, atp, edr search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: w10 @@ -17,24 +17,24 @@ ms.collection: M365-security-compliance ms.topic: article --- -# Manage Microsoft Defender Advanced Threat Protection with Configuration Manager +# Manage Microsoft Defender Advanced Threat Protection with Group Policy Objects -We recommend using Configuration Manager to manage threat protection features for the devices (also referred to as endpoints) within your organization. +We recommend using Group Policy Objects to manage threat protection features for the devices (also referred to as endpoints) within your organization. -## Configuring Microsoft Defender ATP with Configuration Manager +## Configuring Microsoft Defender ATP with Group Policy Objects -The following table lists various tasks you can perform to configure Microsoft Defender ATP with Configuration Manager. +The following table lists various tasks you can perform to configure Microsoft Defender ATP with Group Policy Objects. |Task |Resources to learn more | |---------|---------| -|Manage your organization's devices using Configuration Manager |link | +|Manage your organization's devices using Group Policy Objects |link | |task |link | -## Find your Microsoft Defender ATP settings in Configuration Manager +## Find your Microsoft Defender ATP settings in Group Policy Objects > [!IMPORTANT] -> You must be a global administrator or service administrator in Configuration Manager to configure the settings described in this article. To learn more, see link. +> You must be a WHAT in WHERE to configure Group Policy Objects. To learn more, see link. 1. Go to the where and sign in. From a290885bce101e012346bcdd1f6013592b929368 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 16 Jul 2020 12:33:33 -0700 Subject: [PATCH 157/589] Create manage-atp-post-migration-powershell.md --- .../manage-atp-post-migration-powershell.md | 48 +++++++++++++++++++ 1 file changed, 48 insertions(+) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-powershell.md diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-powershell.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-powershell.md new file mode 100644 index 0000000000..5cc53fbc0d --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-powershell.md @@ -0,0 +1,48 @@ +--- +title: Manage Microsoft Defender ATP using Group Policy Objects +description: Learn how to manage Microsoft Defender ATP with Group Policy Objects +keywords: post-migration, manage, operations, maintenance, utilization, Group Policy Objects, windows defender advanced threat protection, atp, edr +search.product: eADQiWindows 10XVcnh +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: deniseb +author: denisebmsft +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: article +--- + +# Manage Microsoft Defender Advanced Threat Protection with Group Policy Objects + +We recommend using Group Policy Objects to manage threat protection features for the devices (also referred to as endpoints) within your organization. + +## Configuring Microsoft Defender ATP with Group Policy Objects + +The following table lists various tasks you can perform to configure Microsoft Defender ATP with Group Policy Objects. + +|Task |Resources to learn more | +|---------|---------| +|Manage your organization's devices using Group Policy Objects |link | +|task |link | + + +## Find your Microsoft Defender ATP settings in Group Policy Objects + +> [!IMPORTANT] +> You must be a WHAT in WHERE to configure Group Policy Objects. To learn more, see link. + +1. Go to the where and sign in. + +2. Under what choose what. + +3. next + +4. and next + +> [!TIP] +> Need help? See link. \ No newline at end of file From 7b700eb92dedb817f93ca6c19c29e968262fb567 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 16 Jul 2020 12:34:06 -0700 Subject: [PATCH 158/589] Update manage-atp-post-migration-group-policy-objects.md --- ...atp-post-migration-group-policy-objects.md | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md index 5cc53fbc0d..715c306fdb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -1,7 +1,7 @@ --- -title: Manage Microsoft Defender ATP using Group Policy Objects -description: Learn how to manage Microsoft Defender ATP with Group Policy Objects -keywords: post-migration, manage, operations, maintenance, utilization, Group Policy Objects, windows defender advanced threat protection, atp, edr +title: Manage Microsoft Defender ATP using PowerShell +description: Learn how to manage Microsoft Defender ATP with PowerShell +keywords: post-migration, manage, operations, maintenance, utilization, PowerShell, windows defender advanced threat protection, atp, edr search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: w10 @@ -17,24 +17,24 @@ ms.collection: M365-security-compliance ms.topic: article --- -# Manage Microsoft Defender Advanced Threat Protection with Group Policy Objects +# Manage Microsoft Defender Advanced Threat Protection with PowerShell -We recommend using Group Policy Objects to manage threat protection features for the devices (also referred to as endpoints) within your organization. +We recommend using PowerShell to manage threat protection features for the devices (also referred to as endpoints) within your organization. -## Configuring Microsoft Defender ATP with Group Policy Objects +## Configuring Microsoft Defender ATP with PowerShell -The following table lists various tasks you can perform to configure Microsoft Defender ATP with Group Policy Objects. +The following table lists various tasks you can perform to configure Microsoft Defender ATP with PowerShell. |Task |Resources to learn more | |---------|---------| -|Manage your organization's devices using Group Policy Objects |link | +|Manage your organization's devices using PowerShell |link | |task |link | -## Find your Microsoft Defender ATP settings in Group Policy Objects +## Find your Microsoft Defender ATP settings in PowerShell > [!IMPORTANT] -> You must be a WHAT in WHERE to configure Group Policy Objects. To learn more, see link. +> You must be a WHAT in WHERE to configure PowerShell. To learn more, see link. 1. Go to the where and sign in. From e4ef86a70c91bce9e901b652b72349c88c64d260 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 16 Jul 2020 12:35:39 -0700 Subject: [PATCH 159/589] Create manage-atp-post-migration-wmi.md --- .../manage-atp-post-migration-wmi.md | 48 +++++++++++++++++++ 1 file changed, 48 insertions(+) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-wmi.md diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-wmi.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-wmi.md new file mode 100644 index 0000000000..458c2c3604 --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-wmi.md @@ -0,0 +1,48 @@ +--- +title: Manage Microsoft Defender ATP using Windows Management Instrumentation +description: Learn how to manage Microsoft Defender ATP with Windows Management Instrumentation +keywords: post-migration, manage, operations, maintenance, utilization, Windows Management Instrumentation, windows defender advanced threat protection, atp, edr +search.product: eADQiWindows 10XVcnh +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: deniseb +author: denisebmsft +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: article +--- + +# Manage Microsoft Defender Advanced Threat Protection with Windows Management Instrumentation + +We recommend using Windows Management Instrumentation to manage threat protection features for the devices (also referred to as endpoints) within your organization. + +## Configuring Microsoft Defender ATP with Windows Management Instrumentation + +The following table lists various tasks you can perform to configure Microsoft Defender ATP with Windows Management Instrumentation. + +|Task |Resources to learn more | +|---------|---------| +|Manage your organization's devices using Windows Management Instrumentation |link | +|task |link | + + +## Find your Microsoft Defender ATP settings in Windows Management Instrumentation + +> [!IMPORTANT] +> You must be a WHAT in WHERE to configure Windows Management Instrumentation. To learn more, see link. + +1. Go to the where and sign in. + +2. Under what choose what. + +3. next + +4. and next + +> [!TIP] +> Need help? See link. \ No newline at end of file From ec9557b54fa5d7654fb286c32504c39a805ed154 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 16 Jul 2020 12:37:36 -0700 Subject: [PATCH 160/589] Create manage-atp-post-migration-mpcmdrun.md --- .../manage-atp-post-migration-mpcmdrun.md | 48 +++++++++++++++++++ 1 file changed, 48 insertions(+) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-mpcmdrun.md diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-mpcmdrun.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-mpcmdrun.md new file mode 100644 index 0000000000..ceb05f4934 --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-mpcmdrun.md @@ -0,0 +1,48 @@ +--- +title: Manage Microsoft Defender ATP using Microsoft Malware Protection Command Line Utility +description: Learn how to manage Microsoft Defender ATP with Microsoft Malware Protection Command Line Utility +keywords: post-migration, manage, operations, maintenance, utilization, Microsoft Malware Protection Command Line Utility, windows defender advanced threat protection, atp, edr +search.product: eADQiWindows 10XVcnh +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: deniseb +author: denisebmsft +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: article +--- + +# Manage Microsoft Defender Advanced Threat Protection with Microsoft Malware Protection Command Line Utility + +We recommend using Microsoft Malware Protection Command Line Utility to manage threat protection features for the devices (also referred to as endpoints) within your organization. + +## Configuring Microsoft Defender ATP with Microsoft Malware Protection Command Line Utility + +The following table lists various tasks you can perform to configure Microsoft Defender ATP with Microsoft Malware Protection Command Line Utility. + +|Task |Resources to learn more | +|---------|---------| +|Manage your organization's devices using Microsoft Malware Protection Command Line Utility |link | +|task |link | + + +## Find your Microsoft Defender ATP settings in Microsoft Malware Protection Command Line Utility + +> [!IMPORTANT] +> You must be a WHAT in WHERE to configure Microsoft Malware Protection Command Line Utility. To learn more, see link. + +1. Go to the where and sign in. + +2. Under what choose what. + +3. next + +4. and next + +> [!TIP] +> Need help? See link. \ No newline at end of file From 34b95c28dcb72e04566c20c1e19d598a380b534e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 16 Jul 2020 12:41:33 -0700 Subject: [PATCH 161/589] Update TOC.md --- windows/security/threat-protection/TOC.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 1177bedda8..b14e476d18 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -27,6 +27,12 @@ #### [Set up Microsoft Defender ATP](microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md) #### [Onboard to Microsoft Defender ATP](microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md) ### [Manage Microsoft Defender ATP post migration](microsoft-defender-atp/manage-atp-post-migration.md) +#### [Use Intune](microsoft-defender-atp/manage-atp-post-migration-intune.md) +#### [Use Configuration Manager](microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md) +#### [Use PowerShell](microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md) +#### [Use Group Policy Objects](microsoft-defender-atp/manage-atp-post-migration-powershell.md) +#### [Use Windows Management Instrumentation](microsoft-defender-atp/manage-atp-post-migration-wmi.md) +#### [Use the Microsoft Malware Protection Command Line Utility](microsoft-defender-atp/manage-atp-post-migration-mpcmdrun.md) ## [Security administration]() ### [Threat & Vulnerability Management]() From b47959520873e032a492b43088d736eadbcb3149 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 16 Jul 2020 13:17:00 -0700 Subject: [PATCH 162/589] Update manage-atp-post-migration.md --- .../manage-atp-post-migration.md | 23 ++++++++++++------- 1 file changed, 15 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index 0f75147d26..57f7ef05fc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -24,15 +24,22 @@ ms.topic: article After you have moved from your previous endpoint protection and antivirus solution to Microsoft Defender ATP, your next step is to manage your features and capabilities. Use this article as a guide to getting started managing your threat protection features in Microsoft Defender ATP post migration. -Depending on what you want to configure, you can use one of several methods/tools: -- Intune (part of Microsoft Endpoint Manager) -- Configuration Manager (formerly System Center Configuration Manager) -- Group Policy Objects (in Azure Active Directory Domain Services) -- PowerShell (Windows, Linux, and macOS) -- Windows Management Instrumentation (for Windows devices only) -- Microsoft Malware Protection Command Line Utility (this is often referred to as *MPCmdRun.exe*) +Depending on what you want to configure, you can use one of several methods/tools, as listed in the following table: -However, not all methods can be used to configure all the capabilities of Microsoft Defender ATP. +| Use this tool/method... | To configure these Microsoft Defender ATP settings | +|---|---| +|Intune (part of Microsoft Endpoint Manager) |list | +| Configuration Manager (formerly System Center Configuration Manager) | | +| Group Policy Objects (in Azure Active Directory Domain Services) | | +| PowerShell (Windows, Linux, and macOS) | | +| Windows Management Instrumentation (for Windows devices only) | | +| Microsoft Malware Protection Command Line Utility (this is often referred to as *MPCmdRun.exe*) | | + +## Additional resources + +|Subject | Resources | +|---|---| +|General resources |- [Microsoft Defender Antivirus documentation](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10) ([http://aka.ms/wdavtechnet](http://aka.ms/wdavtechnet))

- [Microsoft Security Intelligence](https://www.microsoft.com/en-us/wdsi) ([http://www.microsoft.com/mmpc](http://www.microsoft.com/mmpc)) | From c668b8e8163aea2a48613b549531774afe2f3dc8 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 16 Jul 2020 13:26:11 -0700 Subject: [PATCH 163/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 9 ++------- 1 file changed, 2 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index 57f7ef05fc..0278ee04d7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -39,10 +39,5 @@ Depending on what you want to configure, you can use one of several methods/tool |Subject | Resources | |---|---| -|General resources |- [Microsoft Defender Antivirus documentation](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10) ([http://aka.ms/wdavtechnet](http://aka.ms/wdavtechnet))

- [Microsoft Security Intelligence](https://www.microsoft.com/en-us/wdsi) ([http://www.microsoft.com/mmpc](http://www.microsoft.com/mmpc)) | - - - - - - +|General resources |- Microsoft Defender Antivirus documentation ([http://aka.ms/wdavtechnet](http://aka.ms/wdavtechnet))

- Microsoft Security Intelligence ([http://www.microsoft.com/mmpc](http://www.microsoft.com/mmpc))

- Microsoft Security blog ([https://aka.ms/mmpcblog](https://aka.ms/mmpcblog)) | +|Endpoint Protection (Configuration Manager) |[Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) | \ No newline at end of file From d3e585fdd3701e6c7dbed6988aeb2f6a74756e15 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 16 Jul 2020 13:29:26 -0700 Subject: [PATCH 164/589] Changed bold to Italic for emphasis --- windows/client-management/mdm/policy-csp-update.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-update.md b/windows/client-management/mdm/policy-csp-update.md index 1648a29310..3c5cf80686 100644 --- a/windows/client-management/mdm/policy-csp-update.md +++ b/windows/client-management/mdm/policy-csp-update.md @@ -3256,7 +3256,7 @@ The following list shows the supported values: > [!NOTE] -> This policy is **only** recommended for managing mobile devices. If you previously used the **Update/PhoneUpdateRestrictions** policy in previous versions of Windows, it has been deprecated. Please use this policy instead. +> This policy is *only* recommended for managing mobile devices. If you previously used the **Update/PhoneUpdateRestrictions** policy in previous versions of Windows, it has been deprecated. Please use this policy instead. Allows the IT admin to restrict the updates that are installed on a device to only those on an update approval list. It enables IT to accept the End User License Agreement (EULA) associated with the approved update on behalf of the end-user. EULAs are approved once an update is approved. From 7f5745cd82f20a65bda8a370f28042b12d13254c Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 16 Jul 2020 14:00:28 -0700 Subject: [PATCH 165/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index 0278ee04d7..5539fa61b5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -40,4 +40,5 @@ Depending on what you want to configure, you can use one of several methods/tool |Subject | Resources | |---|---| |General resources |- Microsoft Defender Antivirus documentation ([http://aka.ms/wdavtechnet](http://aka.ms/wdavtechnet))

- Microsoft Security Intelligence ([http://www.microsoft.com/mmpc](http://www.microsoft.com/mmpc))

- Microsoft Security blog ([https://aka.ms/mmpcblog](https://aka.ms/mmpcblog)) | -|Endpoint Protection (Configuration Manager) |[Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) | \ No newline at end of file +|Endpoint Protection (Configuration Manager) |[Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) | +|Test and deploy Microsoft Defender Antivirus |- | \ No newline at end of file From c3f3202c92dc41f9e225342d1fae2ee53dad2eb0 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 16 Jul 2020 14:02:20 -0700 Subject: [PATCH 166/589] Update TOC.md --- windows/security/threat-protection/TOC.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index b14e476d18..396f48c2f0 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -26,7 +26,8 @@ #### [Prepare for your migration](microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md) #### [Set up Microsoft Defender ATP](microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md) #### [Onboard to Microsoft Defender ATP](microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md) -### [Manage Microsoft Defender ATP post migration](microsoft-defender-atp/manage-atp-post-migration.md) +### [Manage Microsoft Defender ATP post migration]() +#### [Overview](microsoft-defender-atp/manage-atp-post-migration.md) #### [Use Intune](microsoft-defender-atp/manage-atp-post-migration-intune.md) #### [Use Configuration Manager](microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md) #### [Use PowerShell](microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md) From 398bc635b3a1fee0ed6aa3ac8cea62ae0e058e51 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 16 Jul 2020 14:35:19 -0700 Subject: [PATCH 167/589] update to insider risk toggle description --- .../microsoft-defender-atp/advanced-features.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md index 7d241ed7e3..ac64db9e82 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md @@ -176,9 +176,9 @@ When you enable Intune integration, Intune will automatically create a classic C > The classic CA policy created by Intune is distinct from modern [Conditional Access policies](https://docs.microsoft.com/azure/active-directory/conditional-access/overview/), which are used for configuring endpoints. -## Insider risk management integration +## Share endpoint alerts with Microsoft Compliance Center -Enabling Insider risk management integration gives you the ability to share Microsoft Defender ATP alerts and their triage status with insider risk management user alerts. This helps link Microsoft Defender ATP activities with other risky user activities identified by insider risk management security violation policies. +Forwards endpoint security alerts and their triage status to Microsoft Compliance Center, allowing you to enhance insider risk management policies with alerts and remediate internal risks before they cause harm. Forwarded data is processed and stored in the same location as your Office 365 data. ### Enable the Microsoft Defender ATP integration for insider risk management from the Azure ATP portal From cda1eabccfcf69f766ca326567ff4ec6a21dd37d Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 16 Jul 2020 15:13:18 -0700 Subject: [PATCH 168/589] typo --- .../microsoft-defender-atp/advanced-features.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md index ac64db9e82..93bad18ef6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md @@ -184,7 +184,7 @@ Forwards endpoint security alerts and their triage status to Microsoft Complianc 1. Log in to the Azure portal with a Global Administrator or Security Administrator role. -2. Click . +2. Click . 3. Toggle the Integration setting to **On** and click **Save**. From 7f45913fa3fb53b4fecc2a9806eac6dba7ab6e73 Mon Sep 17 00:00:00 2001 From: Kelly Baker Date: Thu, 16 Jul 2020 15:30:22 -0700 Subject: [PATCH 169/589] Edit pass: provisioning-packages @rjagiewich A few minor edits per [3935178](https://office.visualstudio.com/MAX/_queries/edit/3935178/?triage=true). This is one of Dan's we can just approve and merge. Let me know if you have suggestions. Thanks, Kelly --- .../provisioning-packages.md | 16 +++++++++------- 1 file changed, 9 insertions(+), 7 deletions(-) diff --git a/windows/configuration/provisioning-packages/provisioning-packages.md b/windows/configuration/provisioning-packages/provisioning-packages.md index af989096a8..ab565377fe 100644 --- a/windows/configuration/provisioning-packages/provisioning-packages.md +++ b/windows/configuration/provisioning-packages/provisioning-packages.md @@ -38,10 +38,10 @@ The [Windows Assessment and Deployment Kit (ADK) for Windows 10](https://develop - The tool for creating provisioning packages is renamed Windows Configuration Designer, replacing the Windows Imaging and Configuration Designer (ICD) tool. The components for creating images have been removed from Windows Configuration Designer, which now provides access to runtime settings only. - Windows Configuration Designer can still be installed from the Windows ADK. You can also install it from the Microsoft Store. - Windows Configuration Designer adds more wizards to make it easier to create provisioning packages for specific scenarios. See [What you can configure](#configuration-designer-wizards) for wizard descriptions. -- The wizard **Provision desktop devices** (previously called **Simple provisioning**) now enables joining Azure Active Directory (Azure AD) domains and also allows you to remove non-Microsoft software from Windows desktop devices during provisioning. +- The Provision desktop devices wizard (previously called Simple provisioning) now enables joining Azure Active Directory (Azure AD) domains and also allows you to remove non-Microsoft software from Windows desktop devices during provisioning. - When provisioning packages are applied to a device, a status screen indicates successful or failed provisioning. - Windows 10 includes PowerShell cmdlets that simplify scripted provisioning. Using these cmdlets, you can add provisioning packages, remove provisioning packages and generate log files to investigate provisioning errors. -- The **Provision school devices** wizard is removed from Windows Configuration Designer. Instead, use the [Setup School PCs app](https://www.microsoft.com/store/p/set-up-school-pcs/9nblggh4ls40) from the Microsoft Store. +- The Provision school devices wizard is removed from Windows Configuration Designer. Instead, use the [Setup School PCs app](https://www.microsoft.com/store/p/set-up-school-pcs/9nblggh4ls40) from the Microsoft Store. @@ -119,8 +119,8 @@ For details about the settings you can customize in provisioning packages, see [ ## Changes to provisioning in Windows 10, version 1607 ->[!NOTE] ->This section is retained for customers using Windows 10, version 1607, on the Current Branch for Business. Some of this information is not applicable in Windows 10, version 1703. +> [!NOTE] +> This section is retained for customers using Windows 10, version 1607, on the Current Branch for Business. Some of this information is not applicable in Windows 10, version 1703. Windows ICD for Windows 10, version 1607, simplified common provisioning scenarios. @@ -130,7 +130,7 @@ Windows ICD in Windows 10, version 1607, supported the following scenarios for I * **Simple provisioning** – Enables IT administrators to define a desired configuration in Windows ICD and then apply that configuration on target devices. The simple provisioning wizard makes the entire process quick and easy by guiding an IT administrator through common configuration settings in a step-by-step manner. - > [Learn how to use simple provisioning to configure Windows 10 computers.](provision-pcs-for-initial-deployment.md) +[Learn how to use simple provisioning to configure Windows 10 computers.](provision-pcs-for-initial-deployment.md) * **Advanced provisioning (deployment of classic (Win32) and Universal Windows Platform (UWP) apps, and certificates)** – Allows an IT administrator to use Windows ICD to open provisioning packages in the advanced settings editor and include apps for deployment on end-user devices. @@ -146,9 +146,11 @@ Windows ICD in Windows 10, version 1607, supported the following scenarios for I ## Learn more -- Watch the video: [Provisioning Windows 10 Devices with New Tools](https://go.microsoft.com/fwlink/p/?LinkId=615921) +For more information about provisioning, watch the following videos: -- Watch the video: [Windows 10 for Mobile Devices: Provisioning Is Not Imaging](https://go.microsoft.com/fwlink/p/?LinkId=615922) +- [Provisioning Windows 10 Devices with New Tools](https://go.microsoft.com/fwlink/p/?LinkId=615921) + +- [Windows 10 for Mobile Devices: Provisioning Is Not Imaging](https://go.microsoft.com/fwlink/p/?LinkId=615922) ## Related topics From 7181c128e79a0076192bf1af452d3c1baea06b9d Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 16 Jul 2020 17:48:52 -0700 Subject: [PATCH 170/589] Converted common mistakes topic to a new topic --- ...n-mistakes-microsoft-defender-antivirus.md | 148 ++++++++++++++++++ 1 file changed, 148 insertions(+) create mode 100644 windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md new file mode 100644 index 0000000000..c4e8740b49 --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md @@ -0,0 +1,148 @@ +--- +title: Common mistakes to avoid when defining exclusions +description: Avoid common mistakes when defining exclusions for Microsoft Defender Antivirus scans. +keywords: exclusions, files, extension, file type, folder name, file name, scans +search.product: eADQiWindows 10XVcnh +ms.pagetype: security +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +author: denisebmsft +ms.author: deniseb +ms.custom: nextgen +ms.reviewer: +manager: dansimp +--- + +# Common mistakes to avoid when defining exclusions +This article describes some common mistakes that you should avoid when defining exclusions for Microsoft Defender Antivirus scans. + +## Excluding certain trusted items +There are certain file, file type, folder, or a process that you should not exclude from scanning even though you trust them. Refer to the following section for items that you should not exclude from scanning. + +**Do not add exclusions for the following folder locations:** + +- %systemdrive% +- C: +- C:\ +- C:\* +- %ProgramFiles%\Java +- C:\Program Files\Java +- %ProgramFiles%\Contoso\ +- C:\Program Files\Contoso\ +- %ProgramFiles(x86)%\Contoso\ +- C:\Program Files (x86)\Contoso\ +- C:\Temp +- C:\Temp\ +- C:\Temp\* +- C:\Users\ +- C:\Users\* +- C:\Users\\AppData\Local\Temp\ +- C:\Users\\AppData\LocalLow\Temp\ +- C:\Users\\AppData\Roaming\Temp\ +- %Windir%\Prefetch +- C:\Windows\Prefetch +- C:\Windows\Prefetch\ +- C:\Windows\Prefetch\* +- %Windir%\System32\Spool +- C:\Windows\System32\Spool +- C:\Windows\System32\CatRoot2 +- %Windir%\Temp +- C:\Windows\Temp +- C:\Windows\Temp\ +- C:\Windows\Temp\* + +**Do not add exclusions for the following file extensions:** +- .7zip +- .bat +- .bin +- .cab +- .cmd +- .com +- .cpl +- .dll +- .exe +- .fla +- .gif +- .gz +- .hta +- .inf +- .java +- .jar +- .job +- .jpeg +- .jpg +- .js +- .ko +- .ko.gz +- .msi +- .ocx +- .png +- .ps1 +- .py +- .rar +- .reg +- .scr +- .sys +- .tar +- .tmp +- .url +- .vbe +- .vbs +- .wsf +- .zip + +**Do not add exclusions for the following processes:** +- AcroRd32.exe +- bitsadmin.exe +- excel.exe +- iexplore.exe +- java.exe +- outlook.exe +- psexec.exe +- powerpnt.exe +- powershell.exe +- schtasks.exe +- svchost.exe +- wmic.exe +- winword.exe +- wuauclt.exe +- addinprocess.exe +- addinprocess32.exe +- addinutil.exe +- bash.exe +- bginfo.exe[1] +- cdb.exe +- csi.exe +- dbghost.exe +- dbgsvc.exe +- dnx.exe +- fsi.exe +- fsiAnyCpu.exe +- kd.exe +- ntkd.exe +- lxssmanager.dll +- msbuild.exe[2] +- mshta.exe +- ntsd.exe +- rcsi.exe +- system.management.automation.dll +- windbg.exe + +## Using just the file name in the exclusion list +A malware may have the same name as that of the file that you trust and want to exclude from scanning. Therefore, to avoid excluding a potential malware from scanning, use a fully qualified path to the file that you want to exclude instead of using just the file name. For example, if you want to exclude **Filename.exe** from scanning, use the complete path to the file, such as **C:\program files\contoso\Filename.exe**. + +## Using a single exclusion for multiple server workloads +Do not use a single exclusion list to define exclusions for multiple server workloads. On Server workloads, split the different application or service workloads into multiple exceptions. For example, create separate exclusion lists for workloads on IIS Server and File Server. + +## Using incorrect environment variables as wildcards in the file name and folder path or extension exclusion lists +Microsoft Defender Antivirus Service runs as a Local System account, which means it gets information from the system environment variable instead of the user environment variable. Environment variable usage as a wildcard is limited to system variables and those applicable to processes running as an NT AUTHORITY\SYSTEM account. Therefore, do not use user environment variables when adding Microsoft Defender Antivirus folder and process exclusions. See the table under [System environment variables](configure-extension-file-exclusions-microsoft-defender-antivirus.md#system-environment-variables) for a complete list of system account environment variables. + +## Related topics + +- [Configure and validate exclusions in Microsoft Defender Antivirus scans](configure-exclusions-microsoft-defender-antivirus.md) +- [Configure and validate exclusions based on file extension and folder location](configure-extension-file-exclusions-microsoft-defender-antivirus.md) +- [Configure and validate exclusions for files opened by processes](configure-process-opened-file-exclusions-microsoft-defender-antivirus.md) +- [Configure Microsoft Defender Antivirus exclusions on Windows Server](configure-server-exclusions-microsoft-defender-antivirus.md) From 642706cf5d3cbdfd53989d07cfc89e55a39cfb1e Mon Sep 17 00:00:00 2001 From: Caroline Gitonga Date: Fri, 17 Jul 2020 04:15:22 +0300 Subject: [PATCH 171/589] Move fs.microsoft.com to Font Streaming Area --- windows/privacy/manage-windows-2004-endpoints.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/privacy/manage-windows-2004-endpoints.md b/windows/privacy/manage-windows-2004-endpoints.md index 14db2c3cc4..1a25e9f2de 100644 --- a/windows/privacy/manage-windows-2004-endpoints.md +++ b/windows/privacy/manage-windows-2004-endpoints.md @@ -55,7 +55,7 @@ The following methodology was used to derive these network endpoints: ||The following endpoint is used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser. To turn off traffic for this endpoint, either uninstall the Photos app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|TLSv1.2|evoke-windowsservices-tas.msedge.net| |Certificates|The following endpoint is used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available. It is possible to turn off traffic to this endpoint, but it is not recommended because as root certificates are updated over time, applications and websites may stop working because they did not receive an updated root certificate the application uses. Additionally, it is used to download certificates that are publicly known to be fraudulent. These settings are critical for both Windows security and the overall security of the Internet. We do not recommend blocking this endpoint. If traffic to this endpoint is turned off, Windows no longer automatically downloads certificates known to be fraudulent, which increases the attack vector on the device.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#automatic-root-certificates-update)| |||HTTP|ctldl.windowsupdate.com| -|Cortana and Search|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-cortana)| +|Cortana and Live Tiles|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-cortana)| ||The following endpoints are related to Cortana and Live Tiles. If you turn off traffic for this endpoint, you will block updates to Cortana greetings, tips, and Live Tiles.|TLSv1.2|www.bing.com*| |Device metadata|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#4-device-metadata-retrieval)| ||The following endpoint is used to retrieve device metadata. If you turn off traffic for this endpoint, metadata will not be updated for the device.|HTTPS|dmd.metaservices.microsoft.com| @@ -64,6 +64,8 @@ The following methodology was used to derive these network endpoints: |||TLSv1.2|v20.events.data.microsoft.com| ||The following endpoints are used by Windows Error Reporting. To turn off traffic for these endpoints, enable the following Group Policy: Administrative Templates > Windows Components > Windows Error Reporting > Disable Windows Error Reporting. This means error reporting information will not be sent back to Microsoft.|HTTPS|*.telecommand.telemetry.microsoft.com| |||TLS v1.2|watson.*.microsoft.com| +|Font Streaming|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#6-font-streaming)| +||The following endpoints are used to download fonts on demand. If you turn off traffic for these endpoints, you will not be able to download fonts on demand. .|HTTPS|fs.microsoft.com*| |Licensing|The following endpoint is used for online activation and some app licensing. To turn off traffic for this endpoint, disable the Windows License Manager Service. This will also block online activation and app licensing may not work.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#9-license-manager)| |||HTTPS|*licensing.mp.microsoft.com| |Maps|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-offlinemaps)| From 1005dcebd0cefad63691a679b1be6977ff92816b Mon Sep 17 00:00:00 2001 From: Caroline Gitonga Date: Fri, 17 Jul 2020 04:34:39 +0300 Subject: [PATCH 172/589] Correct area for img-prod-cms-rt-microsoft-com*' --- windows/privacy/manage-windows-2004-endpoints.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/privacy/manage-windows-2004-endpoints.md b/windows/privacy/manage-windows-2004-endpoints.md index 14db2c3cc4..c24cc2537a 100644 --- a/windows/privacy/manage-windows-2004-endpoints.md +++ b/windows/privacy/manage-windows-2004-endpoints.md @@ -71,10 +71,9 @@ The following methodology was used to derive these network endpoints: || The following endpoints are used to check for updates to maps that have been downloaded for offline use.|HTTP|fs.microsoft.com*| |Microsoft Account|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-microsoft-account)| ||The following endpoints are used for Microsoft accounts to sign in. If you turn off traffic for these endpoints, users cannot sign in with Microsoft accounts. |TLSv1.2|*login.live.com| -|Microsoft Edge|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#13-microsoft-edge)| -||This traffic is related to the Microsoft Edge browser.|TLSv1.2|img-prod-cms-rt-microsoft-com*| |Microsoft forward link redirection service (FWLink)|The following endpoint is used by the Microsoft forward link redirection service (FWLink) to redirect permanent web links to their actual, sometimes transitory, URL. FWlinks are similar to URL shorteners, just longer. If you disable this endpoint, Windows Defender won't be able to update its malware definitions; links from Windows and other Microsoft products to the Web won't work; and PowerShell updateable Help won't update. To disable the traffic, instead disable the traffic that's getting forwarded.|HTTPS|go.microsoft.com| |Microsoft Store|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| +||The following endpoint is used to download image files that are called when applications run (Microsoft Store or Inbox MSN Apps). If you turn off traffic for these endpoints, the image files won't be downloaded, and apps cannot be installed or updated from the Microsoft Store. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them.|TLSv1.2/HTTPS|img-prod-cms-rt-microsoft-com.akamaized.net| ||The following endpoint is used for the Windows Push Notification Services (WNS). WNS enables third-party developers to send toast, tile, badge, and raw updates from their own cloud service. This provides a mechanism to deliver new updates to your users in a power-efficient and dependable way. If you turn off traffic for this endpoint, push notifications will no longer work, including MDM device management, mail synchronization, settings synchronization.|TLSv1.2|*.wns.windows.com| ||The following endpoint is used to revoke licenses for malicious apps in the Microsoft Store. To turn off traffic for this endpoint, either uninstall the app or disable the Microsoft Store. If you disable the Microsoft Store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them.|TLSv1.2|storecatalogrevocation.storequality.microsoft.com| ||The following endpoints are used to communicate with Microsoft Store. If you turn off traffic for these endpoints, apps cannot be installed or updated from the Microsoft Store. |HTTP|*.dl.delivery.mp.microsoft.com| From 3c65481e1895a3c61e558f42bf7bc21005d43456 Mon Sep 17 00:00:00 2001 From: Caroline Gitonga Date: Fri, 17 Jul 2020 05:41:06 +0300 Subject: [PATCH 173/589] Add missing endpoints blob.weather.microsoft.com displaycatalog.mp.microsoft.com smartscreen.microsoft.com --- windows/privacy/manage-windows-2004-endpoints.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/windows/privacy/manage-windows-2004-endpoints.md b/windows/privacy/manage-windows-2004-endpoints.md index 14db2c3cc4..70df05f5f3 100644 --- a/windows/privacy/manage-windows-2004-endpoints.md +++ b/windows/privacy/manage-windows-2004-endpoints.md @@ -50,7 +50,8 @@ The following methodology was used to derive these network endpoints: |Area|Description|Protocol|Destination| |----------------|----------|----------|------------| |Apps|||[Learn how to turn off traffic to the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore)| -||The following endpoint is used for the Weather app. To turn off traffic for this endpoint, either uninstall the Weather app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|HTTPS|tile-service.weather.microsoft.com +||The following endpoints are used for the Weather app. To turn off traffic for this endpoint, either uninstall the Weather app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|HTTPS|blob.weather.microsoft.com| +|||HTTP|tile-service.weather.microsoft.com| ||The following endpoint is used for OneNote Live Tile. To turn off traffic for this endpoint, either uninstall OneNote or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|HTTPS|cdn.onenote.net/* ||The following endpoint is used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser. To turn off traffic for this endpoint, either uninstall the Photos app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|TLSv1.2|evoke-windowsservices-tas.msedge.net| |Certificates|The following endpoint is used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available. It is possible to turn off traffic to this endpoint, but it is not recommended because as root certificates are updated over time, applications and websites may stop working because they did not receive an updated root certificate the application uses. Additionally, it is used to download certificates that are publicly known to be fraudulent. These settings are critical for both Windows security and the overall security of the Internet. We do not recommend blocking this endpoint. If traffic to this endpoint is turned off, Windows no longer automatically downloads certificates known to be fraudulent, which increases the attack vector on the device.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#automatic-root-certificates-update)| @@ -77,7 +78,8 @@ The following methodology was used to derive these network endpoints: |Microsoft Store|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| ||The following endpoint is used for the Windows Push Notification Services (WNS). WNS enables third-party developers to send toast, tile, badge, and raw updates from their own cloud service. This provides a mechanism to deliver new updates to your users in a power-efficient and dependable way. If you turn off traffic for this endpoint, push notifications will no longer work, including MDM device management, mail synchronization, settings synchronization.|TLSv1.2|*.wns.windows.com| ||The following endpoint is used to revoke licenses for malicious apps in the Microsoft Store. To turn off traffic for this endpoint, either uninstall the app or disable the Microsoft Store. If you disable the Microsoft Store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them.|TLSv1.2|storecatalogrevocation.storequality.microsoft.com| -||The following endpoints are used to communicate with Microsoft Store. If you turn off traffic for these endpoints, apps cannot be installed or updated from the Microsoft Store. |HTTP|*.dl.delivery.mp.microsoft.com| +||The following endpoints are used to communicate with Microsoft Store. If you turn off traffic for these endpoints, apps cannot be installed or updated from the Microsoft Store.|HTTPS|*displaycatalog.mp.microsoft.com| +|||HTTP|*.dl.delivery.mp.microsoft.com| ||The following endpoint is used to get Microsoft Store analytics.|TLSv1.2|manage.devcenter.microsoft.com| |Network Connection Status Indicator (NCSI)|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-ncsi)| ||Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to this endpoint to determine if the device can communicate with the Internet. If you turn off traffic for this endpoint, NCSI won't be able to determine if the device is connected to the Internet and the network status tray icon will show a warning.|HTTP|www.msftconnecttest.com*| @@ -101,6 +103,7 @@ The following methodology was used to derive these network endpoints: |||TLSv1.2|wdcp.microsoft.com| |||HTTPS|go.microsoft.com| ||The following endpoints are used for Windows Defender SmartScreen reporting and notifications. If you turn off traffic for these endpoints, SmartScreen notifications will not appear.|HTTPS|*smartscreen-prod.microsoft.com| +|||HTTPS|*smartscreen.microsoft.com | |||HTTPS|checkappexec.microsoft.com| |Windows Spotlight|The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips. If you turn off traffic for these endpoints, Windows Spotlight will still try to deliver new lock screen images and updated content but it will fail; suggested apps, Microsoft account notifications, and Windows tips will not be downloaded. For more information, see Windows Spotlight.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-spotlight)| |||TLSv1.2|arc.msn.com| From 8a5d3e087d1ffdb8fa1f6b00bb298fd4a058d0bc Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Fri, 17 Jul 2020 16:45:44 +0500 Subject: [PATCH 174/589] Update configure-extension-file-exclusions-microsoft-defender-antivirus.md --- ...re-extension-file-exclusions-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md index 17b4284fa0..8f9e75d1de 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md @@ -30,7 +30,7 @@ manager: dansimp You can exclude certain files from Microsoft Defender Antivirus scans by modifying exclusion lists. **Generally, you shouldn't need to apply exclusions**. Microsoft Defender Antivirus includes a number of automatic exclusions based on known operating system behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations. > [!NOTE] -> Automatic exclusions apply only to Windows Server 2016 and above. The default antimalware policy we deploy at Microsoft doesn't set any exclusions by default. +> Automatic exclusions apply only to Windows Server 2016 and above. These exclusions are not visible in Windows Security app and PowerShell. This article describes how to configure exclusion lists for the files and folders. From e2bb3be902566cb1e7cbf4ae596603b21675452b Mon Sep 17 00:00:00 2001 From: Jane Muriranja <68369324+JaneM-02@users.noreply.github.com> Date: Fri, 17 Jul 2020 17:36:57 +0300 Subject: [PATCH 175/589] Removed UI description to turn off some features. Under Settings for Windows Server 2016 with Desktop Experience, removed UI option for Cortana and Search, and Internet Explorer Under Settings for Windows Server 2019, removed UI option for Cortana and Search, Internet Explorer, and Microsoft Edge --- ...perating-system-components-to-microsoft-services.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index b73606d090..85e0bd6f12 100644 --- a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -117,12 +117,12 @@ See the following table for a summary of the management settings for Windows Ser | Setting | UI | Group Policy | Registry | | - | :-: | :-: | :-: | | [1. Automatic Root Certificates Update](#automatic-root-certificates-update) | | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | -| [2. Cortana and Search](#bkmk-cortana) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | +| [2. Cortana and Search](#bkmk-cortana) | | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | [3. Date & Time](#bkmk-datetime) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | [4. Device metadata retrieval](#bkmk-devinst) | | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | [6. Font streaming](#font-streaming) | | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | [7. Insider Preview builds](#bkmk-previewbuilds) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | -| [8. Internet Explorer](#bkmk-ie) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | +| [8. Internet Explorer](#bkmk-ie) | | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | [10. Live Tiles](#live-tiles) | | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | [12. Microsoft Account](#bkmk-microsoft-account) | | | ![Check mark](images/checkmark.png) | | [14. Network Connection Status Indicator](#bkmk-ncsi) | | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | @@ -168,17 +168,17 @@ See the following table for a summary of the management settings for Windows Ser | Setting | UI | Group Policy | Registry | | - | :-: | :-: | :-: | | [1. Automatic Root Certificates Update](#automatic-root-certificates-update) | | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | -| [2. Cortana and Search](#bkmk-cortana) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | +| [2. Cortana and Search](#bkmk-cortana) | | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | [3. Date & Time](#bkmk-datetime) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | [4. Device metadata retrieval](#bkmk-devinst) | | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | [5. Find My Device](#find-my-device) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | [6. Font streaming](#font-streaming) | | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | [7. Insider Preview builds](#bkmk-previewbuilds) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | -| [8. Internet Explorer](#bkmk-ie) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | +| [8. Internet Explorer](#bkmk-ie) | | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | [10. Live Tiles](#live-tiles) | | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | [11. Mail synchronization](#bkmk-mailsync) | ![Check mark](images/checkmark.png) | | ![Check mark](images/checkmark.png) | | [12. Microsoft Account](#bkmk-microsoft-account) | | | ![Check mark](images/checkmark.png) | -| [13. Microsoft Edge](#bkmk-edge) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | +| [13. Microsoft Edge](#bkmk-edge) | | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | [14. Network Connection Status Indicator](#bkmk-ncsi) | | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | [15. Offline maps](#bkmk-offlinemaps) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | [16. OneDrive](#bkmk-onedrive) | | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | From 48fc020bf4460f73cadfc0e48a4d44ce19cddc6b Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Fri, 17 Jul 2020 09:49:42 -0700 Subject: [PATCH 176/589] more updates --- windows/security/threat-protection/TOC.md | 2 +- ...lusion-mistakes-microsoft-defender-antivirus.md | 14 +++++++++----- 2 files changed, 10 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 666cf8cb70..8285168070 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -153,7 +153,7 @@ ####### [Configure and validate exclusions based on file name, extension, and folder location](microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md) ####### [Configure and validate exclusions for files opened by processes](microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md) ####### [Configure antivirus exclusions Windows Server 2016](microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md) - +####### [Common mistakes when defining exclusions](microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md) ###### [Configure scanning antivirus options](microsoft-defender-antivirus/configure-advanced-scan-types-microsoft-defender-antivirus.md) ###### [Configure remediation for scans](microsoft-defender-antivirus/configure-remediation-microsoft-defender-antivirus.md) ###### [Configure scheduled scans](microsoft-defender-antivirus/scheduled-catch-up-scans-microsoft-defender-antivirus.md) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md index c4e8740b49..f0cac112ec 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md @@ -17,10 +17,13 @@ manager: dansimp --- # Common mistakes to avoid when defining exclusions -This article describes some common mistakes that you should avoid when defining exclusions for Microsoft Defender Antivirus scans. +You can define an exclusion list for items that you don't want Microsoft Defender Antivirus to scan. Such excluded items could contain threats that make your device vulnerable. +See [Configure and validate exclusions for Microsoft Defender Antivirus scans](configure-exclusions-microsoft-defender-antivirus.md) for more information. + +This article describes some common mistakes that you should avoid when defining exclusions from Microsoft Defender Antivirus scans. ## Excluding certain trusted items -There are certain file, file type, folder, or a process that you should not exclude from scanning even though you trust them. Refer to the following section for items that you should not exclude from scanning. +There are certain files, file types, folders, or processes that you should not exclude from scanning even though you trust them to be not malicious. Refer to the following section for items that you should not exclude from scanning. **Do not add exclusions for the following folder locations:** @@ -134,11 +137,12 @@ There are certain file, file type, folder, or a process that you should not excl ## Using just the file name in the exclusion list A malware may have the same name as that of the file that you trust and want to exclude from scanning. Therefore, to avoid excluding a potential malware from scanning, use a fully qualified path to the file that you want to exclude instead of using just the file name. For example, if you want to exclude **Filename.exe** from scanning, use the complete path to the file, such as **C:\program files\contoso\Filename.exe**. -## Using a single exclusion for multiple server workloads -Do not use a single exclusion list to define exclusions for multiple server workloads. On Server workloads, split the different application or service workloads into multiple exceptions. For example, create separate exclusion lists for workloads on IIS Server and File Server. +## Using a single exclusion list for multiple server workloads +Do not use a single exclusion list to define exclusions for multiple server workloads. Split the exclusions for different application or service workloads into multiple exclusion lists. For example, the exclusion list for your IIS Server workload must be different from the exclusion list for your SQL Server workload. ## Using incorrect environment variables as wildcards in the file name and folder path or extension exclusion lists -Microsoft Defender Antivirus Service runs as a Local System account, which means it gets information from the system environment variable instead of the user environment variable. Environment variable usage as a wildcard is limited to system variables and those applicable to processes running as an NT AUTHORITY\SYSTEM account. Therefore, do not use user environment variables when adding Microsoft Defender Antivirus folder and process exclusions. See the table under [System environment variables](configure-extension-file-exclusions-microsoft-defender-antivirus.md#system-environment-variables) for a complete list of system account environment variables. +Microsoft Defender Antivirus Service runs in system context using the LocalSystem account, which means it gets information from the system environment variable, and not from the user environment variable. Use of environment variables as a wildcard in exclusion lists is limited to system variables and those applicable to processes running as an NT AUTHORITY\SYSTEM account. Therefore, do not use user environment variables as wildcards when adding Microsoft Defender Antivirus folder and process exclusions. See the table under [System environment variables](configure-extension-file-exclusions-microsoft-defender-antivirus.md#system-environment-variables) for a complete list of system environment variables. +See [Use wildcards in the file name and folder path or extension exclusion lists](configure-extension-file-exclusions-microsoft-defender-antivirus.md#use-wildcards-in-the-file-name-and-folder-path-or-extension-exclusion-lists) for information on how to use wildcards in exclusion lists. ## Related topics From 9efb1f53f6fd72723a8bccf107e4cb494cfafeb7 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Fri, 17 Jul 2020 09:50:38 -0700 Subject: [PATCH 177/589] Removed common mistake section --- ...exclusions-microsoft-defender-antivirus.md | 110 ------------------ 1 file changed, 110 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md index 714afa6ea3..30f77a7b34 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md @@ -564,116 +564,6 @@ If you do not have Internet access, you can create your own EICAR test file by w You can also copy the string into a blank text file and attempt to save it with the file name or in the folder you are attempting to exclude. -## Common mistakes to avoid when defining exclusions -This section describes some common mistakes that you should avoid making when defining exclusions for Microsoft Defender Antivirus scans. - -### Excluding certain trusted items -If you trust a file, file type, folder, or a process, you can add that to the exclusion list for Microsoft Defender Antivirus scans. However, there are certain items that you should not exclude from scanning even though you trust them. - -**Do not add exclusions for the following folder locations:** - -| Folder location | Comments | -|-----------| --------- | -|- %systemdrive%
- C:
- C:\
- C:\* | | -|- %ProgramFiles%\Java
- C:\Program Files\Java | | -|- %ProgramFiles%\Contoso\
- C:\Program Files\Contoso\ | It’s common to see applications and/or services have documentation to open up the whole folder and subfolders. | -|- %ProgramFiles(x86)%\Contoso\
- C:\Program Files (x86)\Contoso\ | It’s common to see applications and/or services have documentation to open up the whole folder and subfolders. | -|- C:\Temp
- C:\Temp\
- C:\Temp\* | | -|- C:\Users\
- C:\Users\* | | -|C:\Users\\AppData\Local\Temp\ | | -|C:\Users\\AppData\LocalLow\Temp\ | | -|C:\Users\\AppData\Roaming\Temp\ | | -|- %Windir%\Prefetch
- C:\Windows\Prefetch
- C:\Windows\Prefetch\
- C:\Windows\Prefetch\* | | -|- %Windir%\System32\Spool
- C:\Windows\System32\Spool | | -|C:\Windows\System32\CatRoot2 | | -|- %Windir%\Temp
- C:\Windows\Temp
- C:\Windows\Temp\
- C:\Windows\Temp\* | | - -**Do not add exclusions for the following file extensions:** -- .7zip -- .bat -- .bin -- .cab -- .cmd -- .com -- .cpl -- .dll -- .exe -- .fla -- .gif -- .gz -- .hta -- .inf -- .java -- .jar -- .job -- .jpeg -- .jpg -- .js -- .ko -- .ko.gz -- .msi -- .ocx -- .png -- .ps1 -- .py -- .rar -- .reg -- .scr -- .sys -- .tar -- .tmp -- .url -- .vbe -- .vbs -- .wsf -- .zip - -**Do not add exclusions for the following processes:** -- AcroRd32.exe -- bitsadmin.exe -- excel.exe -- iexplore.exe -- java.exe -- outlook.exe -- psexec.exe -- powerpnt.exe -- powershell.exe -- schtasks.exe -- svchost.exe -- wmic.exe -- winword.exe -- wuauclt.exe -- addinprocess.exe -- addinprocess32.exe -- addinutil.exe -- bash.exe -- bginfo.exe[1] -- cdb.exe -- csi.exe -- dbghost.exe -- dbgsvc.exe -- dnx.exe -- fsi.exe -- fsiAnyCpu.exe -- kd.exe -- ntkd.exe -- lxssmanager.dll -- msbuild.exe[2] -- mshta.exe -- ntsd.exe -- rcsi.exe -- system.management.automation.dll -- windbg.exe - -### Using just the file name in the exclusion list -A malware may have the same name as that of the file that you trust and want to exclude from scanning. Therefore, to avoid excluding a potential malware from scanning, use a fully qualified path to the file that you want to exclude instead of using just the file name. For example, if you want to exclude **Filename.exe** from scanning, use the complete path to the file, such as **C:\program files\contoso\Filename.exe**. - -### Using a single exclusion for multiple server workloads -Do not add every application or service into a single exclusion. For example, do not add exclusions for IIS to your SQL server or File server exclusions. On server workloads, split different application and service workloads into multiple exclusions. - -### Using incorrect environment variables as wildcards in the file name and folder path or extension exclusion lists -Microsoft Defender Antivirus Service runs as a Local System account, which means it gets information from the system environment variable instead of the user environment variable. Environment variable usage as a wildcard is limited to system variables and those applicable to processes running as an NT AUTHORITY\SYSTEM account. Therefore, do not use user environment variables when adding Microsoft Defender Antivirus folder and process exclusions. See the table under [System environment variables](#system-environment-variables) for a complete list of system account environment variables. - ## Related topics - [Configure and validate exclusions in Microsoft Defender Antivirus scans](configure-exclusions-microsoft-defender-antivirus.md) From a998653e8c90e13e29f3ee06650b515d7a538ad2 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 17 Jul 2020 10:11:21 -0700 Subject: [PATCH 178/589] Update manage-atp-post-migration-intune.md --- .../manage-atp-post-migration-intune.md | 38 ++++++++++--------- 1 file changed, 20 insertions(+), 18 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index eb2cf9faae..828cdbf280 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -21,23 +21,6 @@ ms.topic: article We recommend using Intune to manage threat protection features for the devices (also referred to as endpoints) within your organization. -## Configuring Microsoft Defender ATP with Intune - -The following table lists various tasks you can perform to configure Microsoft Defender ATP with Intune. - -|Task |Resources to learn more | -|---------|---------| -|Manage your organization's devices using Intune |[Protect devices with Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect) | -|Integrate Microsoft Defender ATP with Microsoft Intune as a Mobile Threat Defense solution
(for Android devices and devices running Windows 10 or later) |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | -|Use Conditional Access to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | -|Configure your Microsoft Defender Antivirus settings using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender)

[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus) | -|If necessary, specify exclusions for Microsoft Defender Antivirus

*Generally, you shouldn't need to apply exclusions. Microsoft Defender Antivirus includes a number of automatic exclusions based on known OS behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations.* |[Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows](https://support.microsoft.com/help/822158/virus-scanning-recommendations-for-enterprise-computers)

[Device restrictions: Microsoft Defender Antivirus Exclusions for Windows 10 devices](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions)

[Configure Microsoft Defender Antivirus exclusions on Windows Server 2016 or 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus)| -|Configure your attack surface reduction rules

*TIP: Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Audit mode in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender)

[Endpoint protection: Attack Surface Reduction](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json#attack-surface-reduction)

[Learn more about attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction) | -|Configure your network filtering (this is also referred to as network protection)

*TIP: Make sure that Windows 10 devices have the latest [antimalware platform updates](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform) installed.*|[Endpoint protection: Network filtering](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#network-filtering)

[Review network protection events in Windows Event Viewer](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection#review-network-protection-events-in-windows-event-viewer) | -|Configure controlled folder access (this is also referred to as antiransomware) |[Endpoint protection: Controlled folder access](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#controlled-folder-access)

[Enable controlled folder access in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#intune) | -| | | - - ## Find your Microsoft Defender ATP settings in Intune > [!IMPORTANT] @@ -52,4 +35,23 @@ The following table lists various tasks you can perform to configure Microsoft D 4. Select an existing profile, or create a new one. > [!TIP] -> Need help? See [Using Microsoft Defender ATP with Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection#example-of-using-microsoft-defender-atp-with-intune). \ No newline at end of file +> Need help? See [Using Microsoft Defender ATP with Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection#example-of-using-microsoft-defender-atp-with-intune). + +## Configure Microsoft Defender ATP with Intune + +The following table lists various tasks you can perform to configure Microsoft Defender ATP with Intune. + +|Task |Resources to learn more | +|---------|---------| +|Manage your organization's devices using Intune |[Protect devices with Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect) | +|Integrate Microsoft Defender ATP with Microsoft Intune as a Mobile Threat Defense solution
(for Android devices and devices running Windows 10 or later) |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | +|Use Conditional Access to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | +|Configure your Microsoft Defender Antivirus settings using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender)

[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus) | +|If necessary, specify exclusions for Microsoft Defender Antivirus

*Generally, you shouldn't need to apply exclusions. Microsoft Defender Antivirus includes a number of automatic exclusions based on known OS behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations.* |[Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows](https://support.microsoft.com/help/822158/virus-scanning-recommendations-for-enterprise-computers)

[Device restrictions: Microsoft Defender Antivirus Exclusions for Windows 10 devices](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions)

[Configure Microsoft Defender Antivirus exclusions on Windows Server 2016 or 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus)| +|Configure your attack surface reduction rules

*TIP: Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Audit mode in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender)

[Endpoint protection: Attack Surface Reduction](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json#attack-surface-reduction)

[Learn more about attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction) | +|Configure your network filtering (this is also referred to as network protection)

*TIP: Make sure that Windows 10 devices have the latest [antimalware platform updates](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform) installed.*|[Endpoint protection: Network filtering](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#network-filtering)

[Review network protection events in Windows Event Viewer](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection#review-network-protection-events-in-windows-event-viewer) | +|Configure controlled folder access (this is also referred to as antiransomware) |[Endpoint protection: Controlled folder access](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#controlled-folder-access)

[Enable controlled folder access in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#intune) | +|Configure exploit protection (formerly referred to as Exploit Guard) |[Endpoint protection: Microsoft Defender Exploit Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-exploit-guard)

[Enable exploit protection in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection#intune) | +|Configure Microsoft Defender SmartScreen to protect against malicious sites and files on the internet |[Microsoft Defender SmartScreen](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview)

[Policy settings for managing SmartScreen in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings#mdm-settings)

[Device restrictions: Microsoft Defender SmartScreen](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-smartscreen) | + + From c047bcb691a38b2164f211d468eb07ff6942b541 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 17 Jul 2020 10:13:05 -0700 Subject: [PATCH 179/589] remove --- .../microsoft-defender-atp/advanced-features.md | 8 -------- 1 file changed, 8 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md index 93bad18ef6..d3ada4e5ae 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md @@ -180,14 +180,6 @@ When you enable Intune integration, Intune will automatically create a classic C Forwards endpoint security alerts and their triage status to Microsoft Compliance Center, allowing you to enhance insider risk management policies with alerts and remediate internal risks before they cause harm. Forwarded data is processed and stored in the same location as your Office 365 data. -### Enable the Microsoft Defender ATP integration for insider risk management from the Azure ATP portal - -1. Log in to the Azure portal with a Global Administrator or Security Administrator role. - -2. Click . - -3. Toggle the Integration setting to **On** and click **Save**. - After configuring the [Security policy violation indicators](https://docs.microsoft.com/microsoft-365/compliance/insider-risk-management-settings.md#indicators) in the insider risk management settings, Microsoft Defender ATP alerts will be shared with insider risk management for applicable users. ## Preview features From b4c1e288146f1627fc4a1e1be2786841749f7caf Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Fri, 17 Jul 2020 10:15:59 -0700 Subject: [PATCH 180/589] added new videos --- .../windows-autopilot/deployment-process.md | 12 +++++++++++- .../windows-autopilot-scenarios.md | 6 ++++++ .../windows-autopilot/windows-autopilot.md | 18 ++++++------------ 3 files changed, 23 insertions(+), 13 deletions(-) diff --git a/windows/deployment/windows-autopilot/deployment-process.md b/windows/deployment/windows-autopilot/deployment-process.md index 6723d50e35..0c22b52f04 100644 --- a/windows/deployment/windows-autopilot/deployment-process.md +++ b/windows/deployment/windows-autopilot/deployment-process.md @@ -24,4 +24,14 @@ Windows Autopilot deployment processes are summarized in the poster below. The p [![Deploy Windows 10 with Autopilot](../media/windows10-autopilot-flowchart.png)](../media/Windows10AutopilotFlowchart.pdf) -**Note**: The Windows Autopilot for existing devices process is included in the [Microsoft Endpoint Configuration Manager deployment poster](../windows-10-deployment-posters.md#deploy-windows-10-with-microsoft-endpoint-configuration-manager). \ No newline at end of file +**Note**: The Windows Autopilot for existing devices process is included in the [Microsoft Endpoint Configuration Manager deployment poster](../windows-10-deployment-posters.md#deploy-windows-10-with-microsoft-endpoint-configuration-manager). + +## Windows Autopilot walkthrough + +The following video shows the process of setting up Windows Autopilot: + +
+ + + +This video is also available [here](https://www.microsoft.com/videoplayer/embed/RE4ATOx). \ No newline at end of file diff --git a/windows/deployment/windows-autopilot/windows-autopilot-scenarios.md b/windows/deployment/windows-autopilot/windows-autopilot-scenarios.md index ab95bacbee..16abf999ea 100644 --- a/windows/deployment/windows-autopilot/windows-autopilot-scenarios.md +++ b/windows/deployment/windows-autopilot/windows-autopilot-scenarios.md @@ -35,6 +35,12 @@ The following Windows Autopilot scenarios are described in this guide: | Pre-provision a device with up-to-date applications, policies and settings.| [White glove](white-glove.md) | | Deploy Windows 10 on an existing Windows 7 or 8.1 device | [Windows Autopilot for existing devices](existing-devices.md) | +These scenarios are summarized in the following video. + +  + +> [!video https://www.microsoft.com/videoplayer/embed/RE4Ci1b?autoplay=false] + ## Windows Autopilot capabilities ### Windows Autopilot is self-updating during OOBE diff --git a/windows/deployment/windows-autopilot/windows-autopilot.md b/windows/deployment/windows-autopilot/windows-autopilot.md index cf333e1a55..16e1781d6e 100644 --- a/windows/deployment/windows-autopilot/windows-autopilot.md +++ b/windows/deployment/windows-autopilot/windows-autopilot.md @@ -25,9 +25,13 @@ ms.topic: article Windows Autopilot is a collection of technologies used to set up and pre-configure new devices, getting them ready for productive use. You can also use Windows Autopilot to reset, repurpose and recover devices. This solution enables an IT department to achieve the above with little to no infrastructure to manage, with a process that's easy and simple. -Windows Autopilot is designed to simplify all parts of the lifecycle of Windows devices, for both IT and end users, from initial deployment through the eventual end of life. Leveraging cloud-based services, it can reduce the overall costs for deploying, managing, and retiring devices by reducing the amount of time that IT needs to spend on these processes and the amount of infrastructure that they need to maintain, while ensuring ease of use for all types of end users. See the following diagram: +Windows Autopilot is designed to simplify all parts of the lifecycle of Windows devices, for both IT and end users, from initial deployment through the eventual end of life. Leveraging cloud-based services, it can reduce the overall costs for deploying, managing, and retiring devices by reducing the amount of time that IT needs to spend on these processes and the amount of infrastructure that they need to maintain, while ensuring ease of use for all types of end users. See the following video and diagram: - ![Process overview](images/image1.png) +  + +> [!video https://www.microsoft.com/videoplayer/embed/RE4C7G9?autoplay=false] + +![Process overview](images/image1.png) When initially deploying new Windows devices, Windows Autopilot leverages the OEM-optimized version of Windows 10 that is preinstalled on the device, saving organizations the effort of having to maintain custom images and drivers for every model of device being used. Instead of re-imaging the device, your existing Windows 10 installation can be transformed into a “business-ready” state, applying settings and policies, installing apps, and even changing the edition of Windows 10 being used (e.g. from Windows 10 Pro to Windows 10 Enterprise) to support advanced features. @@ -40,16 +44,6 @@ Windows Autopilot enables you to: * Create and auto-assign devices to configuration groups based on a device's profile. * Customize OOBE content specific to the organization. -## Windows Autopilot walkthrough - -The following video shows the process of setting up Windows Autopilot: - -
- - - -This video is also available [here](https://www.microsoft.com/videoplayer/embed/RE4ATOx). - ## Benefits of Windows Autopilot Traditionally, IT pros spend a lot of time building and customizing images that will later be deployed to devices. Windows Autopilot introduces a new approach. From ccb9f504edaf37e412436c306fb2cb9c2518c358 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 17 Jul 2020 10:22:03 -0700 Subject: [PATCH 181/589] Update manage-atp-post-migration-intune.md --- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 828cdbf280..85caad23e1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -52,6 +52,6 @@ The following table lists various tasks you can perform to configure Microsoft D |Configure your network filtering (this is also referred to as network protection)

*TIP: Make sure that Windows 10 devices have the latest [antimalware platform updates](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform) installed.*|[Endpoint protection: Network filtering](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#network-filtering)

[Review network protection events in Windows Event Viewer](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection#review-network-protection-events-in-windows-event-viewer) | |Configure controlled folder access (this is also referred to as antiransomware) |[Endpoint protection: Controlled folder access](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#controlled-folder-access)

[Enable controlled folder access in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#intune) | |Configure exploit protection (formerly referred to as Exploit Guard) |[Endpoint protection: Microsoft Defender Exploit Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-exploit-guard)

[Enable exploit protection in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection#intune) | -|Configure Microsoft Defender SmartScreen to protect against malicious sites and files on the internet |[Microsoft Defender SmartScreen](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview)

[Policy settings for managing SmartScreen in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings#mdm-settings)

[Device restrictions: Microsoft Defender SmartScreen](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-smartscreen) | +|Configure Microsoft Defender SmartScreen to protect against malicious sites and files on the internet.

*Microsoft Edge should be installed on your organization's devices. For protection on Google Chrome and FireFox browsers, configure exploit protection.* |[Microsoft Defender SmartScreen](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview)

[Policy settings for managing SmartScreen in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings#mdm-settings)

[Device restrictions: Microsoft Defender SmartScreen](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-smartscreen) | From 510d8d01167c909826b981bb013a482fcc27be8d Mon Sep 17 00:00:00 2001 From: sazankha <67922512+sazankha@users.noreply.github.com> Date: Fri, 17 Jul 2020 10:32:39 -0700 Subject: [PATCH 182/589] Update faq-md-app-guard.md --- .../microsoft-defender-application-guard/faq-md-app-guard.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md index 0a946cec7c..8c53e5bb46 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md @@ -107,3 +107,7 @@ Windows Defender Application Guard accesses files from a VHD mounted on the host If hyperthreading is disabled (because of an update applied through a KB article or through BIOS settings), there is a possibility Application Guard no longer meets the minimum requirements. +### Why am I getting the error message ("ERROR_VIRTUAL_DISK_LIMITATION")? + +Application Guard may not work correctly on NTFS compressed volumes. If this issue persists, try uncompressing the volume. + From 7e713409a63e6e38b439b3ed08c1c85730a56315 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 17 Jul 2020 10:33:58 -0700 Subject: [PATCH 183/589] Update manage-atp-post-migration-intune.md --- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 85caad23e1..23e2c25031 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -53,5 +53,6 @@ The following table lists various tasks you can perform to configure Microsoft D |Configure controlled folder access (this is also referred to as antiransomware) |[Endpoint protection: Controlled folder access](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#controlled-folder-access)

[Enable controlled folder access in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#intune) | |Configure exploit protection (formerly referred to as Exploit Guard) |[Endpoint protection: Microsoft Defender Exploit Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-exploit-guard)

[Enable exploit protection in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection#intune) | |Configure Microsoft Defender SmartScreen to protect against malicious sites and files on the internet.

*Microsoft Edge should be installed on your organization's devices. For protection on Google Chrome and FireFox browsers, configure exploit protection.* |[Microsoft Defender SmartScreen](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview)

[Policy settings for managing SmartScreen in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings#mdm-settings)

[Device restrictions: Microsoft Defender SmartScreen](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-smartscreen) | +|Microsoft Defender Firewall |[Microsoft Defender Firewall with Advanced Security](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security)

[Endpoint protection: Microsoft Defender Firewall](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-firewall) | From ae99116443c3b3935b11a43024473787b564e9c3 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 17 Jul 2020 10:45:00 -0700 Subject: [PATCH 184/589] Update manage-atp-post-migration-intune.md --- .../manage-atp-post-migration-intune.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 23e2c25031..d1813b4b1d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -52,7 +52,8 @@ The following table lists various tasks you can perform to configure Microsoft D |Configure your network filtering (this is also referred to as network protection)

*TIP: Make sure that Windows 10 devices have the latest [antimalware platform updates](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform) installed.*|[Endpoint protection: Network filtering](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#network-filtering)

[Review network protection events in Windows Event Viewer](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection#review-network-protection-events-in-windows-event-viewer) | |Configure controlled folder access (this is also referred to as antiransomware) |[Endpoint protection: Controlled folder access](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#controlled-folder-access)

[Enable controlled folder access in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#intune) | |Configure exploit protection (formerly referred to as Exploit Guard) |[Endpoint protection: Microsoft Defender Exploit Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-exploit-guard)

[Enable exploit protection in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection#intune) | -|Configure Microsoft Defender SmartScreen to protect against malicious sites and files on the internet.

*Microsoft Edge should be installed on your organization's devices. For protection on Google Chrome and FireFox browsers, configure exploit protection.* |[Microsoft Defender SmartScreen](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview)

[Policy settings for managing SmartScreen in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings#mdm-settings)

[Device restrictions: Microsoft Defender SmartScreen](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-smartscreen) | -|Microsoft Defender Firewall |[Microsoft Defender Firewall with Advanced Security](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security)

[Endpoint protection: Microsoft Defender Firewall](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-firewall) | +|Configure Microsoft Defender SmartScreen to protect against malicious sites and files on the internet.

*Microsoft Edge should be installed on your organization's devices. For protection on Google Chrome and FireFox browsers, configure exploit protection.* |[Microsoft Defender SmartScreen](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview)

[Device restrictions: Microsoft Defender SmartScreen](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-smartscreen)

[Policy settings for managing SmartScreen in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings#mdm-settings) | +|Configure Microsoft Defender Firewall to block unauthorized network traffic flowing into or out of your organization's devices |[Endpoint protection: Microsoft Defender Firewall](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-firewall)

[Microsoft Defender Firewall with Advanced Security](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security) | +|Configure encryption and BitLocker |[Endpoint protection: Windows Encryption](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#windows-encryption)

[BitLocker for Windows 10 devices](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) | From 1f945a487a022fc78ce121ec8e14786bb9b1275e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 17 Jul 2020 10:58:30 -0700 Subject: [PATCH 185/589] Update manage-atp-post-migration-intune.md --- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index d1813b4b1d..71e90831b8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -55,5 +55,7 @@ The following table lists various tasks you can perform to configure Microsoft D |Configure Microsoft Defender SmartScreen to protect against malicious sites and files on the internet.

*Microsoft Edge should be installed on your organization's devices. For protection on Google Chrome and FireFox browsers, configure exploit protection.* |[Microsoft Defender SmartScreen](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview)

[Device restrictions: Microsoft Defender SmartScreen](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-smartscreen)

[Policy settings for managing SmartScreen in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings#mdm-settings) | |Configure Microsoft Defender Firewall to block unauthorized network traffic flowing into or out of your organization's devices |[Endpoint protection: Microsoft Defender Firewall](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-firewall)

[Microsoft Defender Firewall with Advanced Security](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security) | |Configure encryption and BitLocker |[Endpoint protection: Windows Encryption](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#windows-encryption)

[BitLocker for Windows 10 devices](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) | +|Configure Microsoft Defender Credential Guard to protect against credential theft attacks |For Windows 10, Windows Server 2016, and Windows Server 2019, see [Endpoint protection: Microsoft Defender Credential Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-credential-guard)

For Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, and Windows Server 2012 R2, see [Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft, Version 1 and 2](https://www.microsoft.com/download/details.aspx?id=36036) | +|Configure your Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) to view alerts, configure threat protection features, and view detailed information about your organization's overall security posture |[]()

[Overview of the Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use) | From 673dfb9ac7d0dba3363ea233d6889d67d1313246 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 17 Jul 2020 10:59:40 -0700 Subject: [PATCH 186/589] Update manage-atp-post-migration-intune.md --- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 71e90831b8..b7730d5890 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -56,6 +56,6 @@ The following table lists various tasks you can perform to configure Microsoft D |Configure Microsoft Defender Firewall to block unauthorized network traffic flowing into or out of your organization's devices |[Endpoint protection: Microsoft Defender Firewall](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-firewall)

[Microsoft Defender Firewall with Advanced Security](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security) | |Configure encryption and BitLocker |[Endpoint protection: Windows Encryption](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#windows-encryption)

[BitLocker for Windows 10 devices](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) | |Configure Microsoft Defender Credential Guard to protect against credential theft attacks |For Windows 10, Windows Server 2016, and Windows Server 2019, see [Endpoint protection: Microsoft Defender Credential Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-credential-guard)

For Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, and Windows Server 2012 R2, see [Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft, Version 1 and 2](https://www.microsoft.com/download/details.aspx?id=36036) | -|Configure your Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) to view alerts, configure threat protection features, and view detailed information about your organization's overall security posture |[]()

[Overview of the Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use) | +|Configure your Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) to view alerts, configure threat protection features, and view detailed information about your organization's overall security posture |[Endpoint protection: Microsoft Defender Security Center](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-security-center)

[Overview of the Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use) | From 1e1aeef1b193369d36993d25dc6074a8786604db Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Fri, 17 Jul 2020 11:13:17 -0700 Subject: [PATCH 187/589] remove old video --- .../windows-autopilot/deployment-process.md | 12 +----------- 1 file changed, 1 insertion(+), 11 deletions(-) diff --git a/windows/deployment/windows-autopilot/deployment-process.md b/windows/deployment/windows-autopilot/deployment-process.md index 0c22b52f04..6723d50e35 100644 --- a/windows/deployment/windows-autopilot/deployment-process.md +++ b/windows/deployment/windows-autopilot/deployment-process.md @@ -24,14 +24,4 @@ Windows Autopilot deployment processes are summarized in the poster below. The p [![Deploy Windows 10 with Autopilot](../media/windows10-autopilot-flowchart.png)](../media/Windows10AutopilotFlowchart.pdf) -**Note**: The Windows Autopilot for existing devices process is included in the [Microsoft Endpoint Configuration Manager deployment poster](../windows-10-deployment-posters.md#deploy-windows-10-with-microsoft-endpoint-configuration-manager). - -## Windows Autopilot walkthrough - -The following video shows the process of setting up Windows Autopilot: - -
- - - -This video is also available [here](https://www.microsoft.com/videoplayer/embed/RE4ATOx). \ No newline at end of file +**Note**: The Windows Autopilot for existing devices process is included in the [Microsoft Endpoint Configuration Manager deployment poster](../windows-10-deployment-posters.md#deploy-windows-10-with-microsoft-endpoint-configuration-manager). \ No newline at end of file From 532cd008fa5ab1e228797b3839418e47cc8b2027 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 17 Jul 2020 11:17:36 -0700 Subject: [PATCH 188/589] Update manage-atp-post-migration-intune.md --- .../manage-atp-post-migration-intune.md | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index b7730d5890..9b2c38bff2 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -46,16 +46,17 @@ The following table lists various tasks you can perform to configure Microsoft D |Manage your organization's devices using Intune |[Protect devices with Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect) | |Integrate Microsoft Defender ATP with Microsoft Intune as a Mobile Threat Defense solution
(for Android devices and devices running Windows 10 or later) |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | |Use Conditional Access to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | -|Configure your Microsoft Defender Antivirus settings using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender)

[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus) | +|Configure your Microsoft Defender Antivirus settings using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus)

[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender) | |If necessary, specify exclusions for Microsoft Defender Antivirus

*Generally, you shouldn't need to apply exclusions. Microsoft Defender Antivirus includes a number of automatic exclusions based on known OS behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations.* |[Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows](https://support.microsoft.com/help/822158/virus-scanning-recommendations-for-enterprise-computers)

[Device restrictions: Microsoft Defender Antivirus Exclusions for Windows 10 devices](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions)

[Configure Microsoft Defender Antivirus exclusions on Windows Server 2016 or 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus)| |Configure your attack surface reduction rules

*TIP: Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Audit mode in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender)

[Endpoint protection: Attack Surface Reduction](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json#attack-surface-reduction)

[Learn more about attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction) | |Configure your network filtering (this is also referred to as network protection)

*TIP: Make sure that Windows 10 devices have the latest [antimalware platform updates](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform) installed.*|[Endpoint protection: Network filtering](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#network-filtering)

[Review network protection events in Windows Event Viewer](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection#review-network-protection-events-in-windows-event-viewer) | -|Configure controlled folder access (this is also referred to as antiransomware) |[Endpoint protection: Controlled folder access](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#controlled-folder-access)

[Enable controlled folder access in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#intune) | -|Configure exploit protection (formerly referred to as Exploit Guard) |[Endpoint protection: Microsoft Defender Exploit Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-exploit-guard)

[Enable exploit protection in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection#intune) | +|Configure controlled folder access to protect against ransomware

*Controlled folder access is also referred to as antiransomware protection.* |[Endpoint protection: Controlled folder access](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#controlled-folder-access)

[Enable controlled folder access in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#intune) | +|Configure exploit protection to protect your organization's devices from malware that uses exploits to spread and infect other devices

*Exploit protection is also referred to as Exploit Guard.* |[Endpoint protection: Microsoft Defender Exploit Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-exploit-guard)

[Enable exploit protection in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection#intune) | |Configure Microsoft Defender SmartScreen to protect against malicious sites and files on the internet.

*Microsoft Edge should be installed on your organization's devices. For protection on Google Chrome and FireFox browsers, configure exploit protection.* |[Microsoft Defender SmartScreen](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview)

[Device restrictions: Microsoft Defender SmartScreen](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-smartscreen)

[Policy settings for managing SmartScreen in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings#mdm-settings) | |Configure Microsoft Defender Firewall to block unauthorized network traffic flowing into or out of your organization's devices |[Endpoint protection: Microsoft Defender Firewall](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-firewall)

[Microsoft Defender Firewall with Advanced Security](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security) | |Configure encryption and BitLocker |[Endpoint protection: Windows Encryption](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#windows-encryption)

[BitLocker for Windows 10 devices](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) | |Configure Microsoft Defender Credential Guard to protect against credential theft attacks |For Windows 10, Windows Server 2016, and Windows Server 2019, see [Endpoint protection: Microsoft Defender Credential Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-credential-guard)

For Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, and Windows Server 2012 R2, see [Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft, Version 1 and 2](https://www.microsoft.com/download/details.aspx?id=36036) | -|Configure your Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) to view alerts, configure threat protection features, and view detailed information about your organization's overall security posture |[Endpoint protection: Microsoft Defender Security Center](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-security-center)

[Overview of the Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use) | +|Configure your Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) to view alerts, configure threat protection features, and view detailed information about your organization's overall security posture.

You can also configure whether and what features end users can see in the Microsoft Defender Security Center. |[Endpoint protection: Microsoft Defender Security Center](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-security-center)

[Overview of the Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use) | +|Configure Microsoft Defender Application Control (also referred to as AppLocker) to choose whether to audit or trust apps on your organization's devices |[AppLocker overview](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview)
[Endpoint protection: MIcrosoft Defender Application Control](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-application-control)
[AppLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/applocker-csp)| From ebf4ce149c04176cb13cbc1ed42ce01e38eb9b66 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 17 Jul 2020 11:20:16 -0700 Subject: [PATCH 189/589] Update manage-atp-post-migration-intune.md --- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 9b2c38bff2..44abfcb9c6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -54,7 +54,7 @@ The following table lists various tasks you can perform to configure Microsoft D |Configure exploit protection to protect your organization's devices from malware that uses exploits to spread and infect other devices

*Exploit protection is also referred to as Exploit Guard.* |[Endpoint protection: Microsoft Defender Exploit Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-exploit-guard)

[Enable exploit protection in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection#intune) | |Configure Microsoft Defender SmartScreen to protect against malicious sites and files on the internet.

*Microsoft Edge should be installed on your organization's devices. For protection on Google Chrome and FireFox browsers, configure exploit protection.* |[Microsoft Defender SmartScreen](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview)

[Device restrictions: Microsoft Defender SmartScreen](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-smartscreen)

[Policy settings for managing SmartScreen in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings#mdm-settings) | |Configure Microsoft Defender Firewall to block unauthorized network traffic flowing into or out of your organization's devices |[Endpoint protection: Microsoft Defender Firewall](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-firewall)

[Microsoft Defender Firewall with Advanced Security](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security) | -|Configure encryption and BitLocker |[Endpoint protection: Windows Encryption](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#windows-encryption)

[BitLocker for Windows 10 devices](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) | +|Configure encryption and BitLocker to protect information on your organization's devices running Windows |[Endpoint protection: Windows Encryption](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#windows-encryption)

[BitLocker for Windows 10 devices](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) | |Configure Microsoft Defender Credential Guard to protect against credential theft attacks |For Windows 10, Windows Server 2016, and Windows Server 2019, see [Endpoint protection: Microsoft Defender Credential Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-credential-guard)

For Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, and Windows Server 2012 R2, see [Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft, Version 1 and 2](https://www.microsoft.com/download/details.aspx?id=36036) | |Configure your Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) to view alerts, configure threat protection features, and view detailed information about your organization's overall security posture.

You can also configure whether and what features end users can see in the Microsoft Defender Security Center. |[Endpoint protection: Microsoft Defender Security Center](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-security-center)

[Overview of the Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use) | |Configure Microsoft Defender Application Control (also referred to as AppLocker) to choose whether to audit or trust apps on your organization's devices |[AppLocker overview](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview)
[Endpoint protection: MIcrosoft Defender Application Control](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-application-control)
[AppLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/applocker-csp)| From ad933f3a62a31b85722a9b2ea81769801eb58d07 Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Fri, 17 Jul 2020 11:34:21 -0700 Subject: [PATCH 190/589] pencil edit --- .../microsoft-defender-application-guard/faq-md-app-guard.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md index 8c53e5bb46..ad435fd8ad 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md @@ -95,7 +95,7 @@ Microsoft Defender Application Guard accesses files from a VHD mounted on the ho ### Why do the Network Isolation policies in Group Policy and CSP look different? -There is not a one-to-one mapping among all the Network Isolation policies between CSP and GP. Mandatary network isolation policies to deploy WDAG are different between CSP and GP. +There is not a one-to-one mapping among all the Network Isolation policies between CSP and GP. Mandatory network isolation policies to deploy WDAG are different between CSP and GP. Mandatory network isolation GP policy to deploy WDAG: "DomainSubnets or CloudResources" Mandatory network isolation CSP policy to deploy WDAG: "EnterpriseCloudResources or (EnterpriseIpRange and EnterpriseNetworkDomainNames)" From 0ef0f47a7f6c21fa11b30ad04172fad95fd49765 Mon Sep 17 00:00:00 2001 From: Jane Muriranja <68369324+JaneM-02@users.noreply.github.com> Date: Fri, 17 Jul 2020 21:47:04 +0300 Subject: [PATCH 191/589] Corrected Group Policy names Internet Explorer - Turn off Compatibility View Windows Defender - Security Intelligence Updates --- ...ows-operating-system-components-to-microsoft-services.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index b73606d090..78f27fd69d 100644 --- a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -437,7 +437,7 @@ There are more Group Policy objects that are used by Internet Explorer: | Path | Policy | Description | | - | - | - | -| **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Internet Explorer** > **Compatibility View** > **Turn off Compatibility View** | Choose whether employees can configure Compatibility View. | Choose whether an employee can fix website display problems that he or she may encounter while browsing.
**Set to: Enabled** | +| **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Internet Explorer** > **Compatibility View** > **Turn off Compatibility View** | Turn off Compatibility View. | Choose whether an employee can fix website display problems that he or she may encounter while browsing.
**Set to: Enabled** | | **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Internet Explorer** > **Internet Control Panel** > **Advanced Page** | Turn off the flip ahead with page prediction feature | Choose whether an employee can swipe across a screen or click forward to go to the next pre-loaded page of a website.
**Set to: Enabled** | | **Computer Configuration** > **Administrative Templates** > **Windows Components** > **RSS Feeds** | Turn off background synchronization for feeds and Web Slices | Choose whether to have background synchronization for feeds and Web Slices.
**Set to: Enabled** | | **Computer Configuration** > **Administrative Templates** > **Control Panel** > **Allow Online Tips** | Allow Online Tips | Enables or disables the retrieval of online tips and help for the Settings app.
**Set to: Disabled** | @@ -1622,11 +1622,11 @@ You can stop sending file samples back to Microsoft. You can stop downloading **Definition Updates**: -- **Enable** the Group Policy **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Defender Antivirus** > **Signature Updates** > **Define the order of sources for downloading definition updates** and set it to **FileShares**. +- **Enable** the Group Policy **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Defender Antivirus** > **Security Intelligence Updates** > **Define the order of sources for downloading definition updates** and set it to **FileShares**. -and- -- **Disable** the Group Policy **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Defender Antivirus** > **Signature Updates** > **Define file shares for downloading definition updates** and set it to **Nothing**. +- **Disable** the Group Policy **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Defender Antivirus** > **Security Intelligence Updates** > **Define file shares for downloading definition updates** and set it to **Nothing**. -or- From 263405116eb22fccbe9fb42cb7170e26974698f6 Mon Sep 17 00:00:00 2001 From: Jane Muriranja <68369324+JaneM-02@users.noreply.github.com> Date: Fri, 17 Jul 2020 22:03:48 +0300 Subject: [PATCH 192/589] Correcting Reg Path Reg path in document is different from path set by RTB package: Contacts - HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy!LetAppsAccessContacts Calendar - HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy --- ...ndows-operating-system-components-to-microsoft-services.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index b73606d090..fedd33d2ee 100644 --- a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -1100,7 +1100,7 @@ To turn off **Choose apps that can access contacts**: -or- -- Create a REG_DWORD registry setting named **LetAppsAccessContacts** in **HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\AppPrivacy** with a value of 2 (two). +- Create a REG_DWORD registry setting named **LetAppsAccessContacts** in **HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\AppPrivacy** with a value of 2 (two). ### 18.9 Calendar @@ -1116,7 +1116,7 @@ To turn off **Let apps access my calendar**: -or- -- Create a REG_DWORD registry setting named **LetAppsAccessCalendar** in **HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\AppPrivacy** with a value of 2 (two). +- Create a REG_DWORD registry setting named **LetAppsAccessCalendar** in **HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\AppPrivacy** with a value of 2 (two). To turn off **Choose apps that can access calendar**: From 922030857680327f600354a3b5a65f2f0a4a49f2 Mon Sep 17 00:00:00 2001 From: Sunny Zankharia <67922512+sazankha@users.noreply.github.com> Date: Fri, 17 Jul 2020 12:13:41 -0700 Subject: [PATCH 193/589] Update faq-md-app-guard.md Updated with Known issues and mitigation --- .../faq-md-app-guard.md | 49 +++++++++++++++++++ 1 file changed, 49 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md index 8c53e5bb46..80279200dc 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md @@ -111,3 +111,52 @@ If hyperthreading is disabled (because of an update applied through a KB article Application Guard may not work correctly on NTFS compressed volumes. If this issue persists, try uncompressing the volume. +### Why am I getting the error message ("ERR_NAME_NOT_RESOLVED") after not being able to reach PAC file? + +This is a known issue. To mitigate this you need to create two firewall rules. +For guidance on how to create a firewall rule via GP see: + +https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/create-an-inbound-icmp-rule +https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/open-the-group-policy-management-console-to-windows-firewall-with-advanced-security + +First rule (DHCP Server): +1. Program path: %SystemRoot%\System32\svchost.exe +2. Local Service: Sid: S-1-5-80-2009329905-444645132-2728249442-922493431-93864177 (Internet Connection Service (SharedAccess)) +3. Protocol UDP +4. Port 67 + +Second rule (DHCP Client): Same as the above, but scoped to local port 68 + +In the UI go through the following steps: +1. Right click on inbound rules, create a new rule +2. Choose “custom rule” +3. Program path: “%SystemRoot%\System32\svchost.exe" +4. Protocol Type: UDP, Specific ports: 67, Remote port: any +5. Any IP addresses +6. Allow the connection +7. All profiles +8. The rule should be present in the UI. Right click on the rule > properties +9. “Programs and services” tab, Under the Services section click on “settings”. Choose “Apply to this Service” and select “Internet Connection Sharing (ICS) Shared Access” + +### Why can I not launch Application Guard when Exploit Guard is enabled? + +There is a known issue where if you change the Exploit Protection settings for CFG and possibly others, hvsimgr cannot launch. To mitigate this issue, go to Windows Security-> App and Browser control -> Exploit Protection Setting -> switch CFG to the “use default". + + +### How can I have ICS in enabled state yet still use Application Guard? + +This is a two step process. + +Step 1: + +Enable Internet Connection sharing by changing the Group Policy setting “Prohibit use of Internet Connection Sharing on your DNS domain network” which is part of the MS Security baseline from Enabled to Disabled. + +Step 2: + +1. Disable IpNat.sys from ICS load +System\CurrentControlSet\Services\SharedAccess\Parameters\DisableIpNat = 1 +2. Configure ICS (SharedAccess) to enabled +HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Start = 3 +3. Disabling IPNAT (Optional) +HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IPNat\Start = 4 +4. Reboot. From 32468767f9a83b3b5b490adabd3ff787a3bfc7a6 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Fri, 17 Jul 2020 13:28:35 -0700 Subject: [PATCH 194/589] updated api topics --- .../get-all-vulnerabilities-by-machines.md | 16 +++++++++------- .../next-gen-threat-and-vuln-mgt.md | 1 + 2 files changed, 10 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-all-vulnerabilities-by-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-all-vulnerabilities-by-machines.md index de0e5c2508..3ec0c82630 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-all-vulnerabilities-by-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-all-vulnerabilities-by-machines.md @@ -1,5 +1,5 @@ --- -title: Get all vulnerabilities by Machine and Software +title: Get all vulnerabilities by machine and software description: Retrieves a list of all the vulnerabilities affecting the organization by Machine and Software keywords: apis, graph api, supported apis, get, vulnerability information, mdatp tvm api search.product: eADQiWindows 10XVcnh @@ -16,13 +16,14 @@ ms.collection: M365-security-compliance ms.topic: article --- -# List vulnerabilities by Machine and Software +# List vulnerabilities by machine and software + **Applies to:** [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -Retrieves a list of all the vulnerabilities affecting the organization per [Machine](machine.md) and [Software](software.md). -
If the vulnerability has a fixing KB, it will appear in the response. -
Supports [OData V4 queries](https://www.odata.org/documentation/). -
The OData ```$filter``` is supported on all properties. +Retrieves a list of all the vulnerabilities affecting the organization per [machine](machine.md) and [software](software.md). +- If the vulnerability has a fixing KB, it will appear in the response. +- Supports [OData V4 queries](https://www.odata.org/documentation/). +- The OData ```$filter``` is supported on all properties. >[!Tip] >This is great API for [Power BI integration](api-power-bi.md). @@ -100,5 +101,6 @@ Here is an example of the response. ``` ## Related topics -- [Risk-based Threat & Vulnerability Management](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt) + +- [Risk-based threat and vulnerability management](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt) - [Vulnerabilities in your organization](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/tvm-weaknesses) diff --git a/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt.md b/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt.md index 05fb5adc3b..0f1e02ecd1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt.md +++ b/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt.md @@ -110,6 +110,7 @@ See the following topics for related APIs: - [Score APIs](score.md) - [Software APIs](software.md) - [Vulnerability APIs](vulnerability.md) +- [List vulnerabilities by machine and software](get-all-vulnerabilities-by-machines.md) ## Related topics From 5215c7c04f75a95a0f8b15328d6a49f4e85cb5cd Mon Sep 17 00:00:00 2001 From: Robert Durff Date: Fri, 17 Jul 2020 14:31:59 -0700 Subject: [PATCH 195/589] Reorganize topics and fix broken links in CC topic I am an external consultant working with MS FTE Mike Grimm (MGrimm) on Common Criteria certifications. We are refreshing this topic with the following changes: - Reorganized the topic by product release (e.g., list all documents for the Windows 10 1909 certification together in a group) - Added links to downloadable Assurance Activity Reports where available - Fixed numerous broken links to NIAP resources Please follow up with me or MGrimm with questions or concerns. Thanks! --- .../windows-platform-common-criteria.md | 333 +++++++++++------- 1 file changed, 204 insertions(+), 129 deletions(-) diff --git a/windows/security/threat-protection/windows-platform-common-criteria.md b/windows/security/threat-protection/windows-platform-common-criteria.md index d1d4e94a38..3dece2757f 100644 --- a/windows/security/threat-protection/windows-platform-common-criteria.md +++ b/windows/security/threat-protection/windows-platform-common-criteria.md @@ -15,159 +15,227 @@ ms.reviewer: # Common Criteria Certifications -Microsoft is committed to optimizing the security of its products and services. As part of that commitment, Microsoft supports the Common Criteria certification program, continues to ensure that products incorporate the features and functions required by relevant Common Criteria protection profiles, and completes Common Criteria certifications of Microsoft Windows products. +Microsoft is committed to optimizing the security of its products and services. As part of that commitment, Microsoft supports the Common Criteria certification program, ensures that products incorporate the features and functions required by relevant Common Criteria Protection Profiles, and completes Common Criteria certifications of Microsoft Windows products. This topic lists the current and archived certified Windows products, together with relevant documentation from each certification. -## Common Criteria Security Targets +## Certified Products -### Information for Systems Integrators and Accreditors +The product releases below are currently certified against the cited Protection Profile, as listed on the [Common Criteria Portal](https://www.commoncriteriaportal.org/products/). The Security Target describes the product edition(s) in scope, the security functionality in the product, and the assurance measures from the Protection Profile used as part of the evaluation. The Administrative Guide provides guidance on configuring the product to match the evaluated configuration. The Certification Report or Validation Report documents the results of the evaluation by the validation team, with the Assurance Activity Report providing details on the evaluator's actions. -The Security Target describes security functionality and assurance measures used to evaluate Windows. +### Microsoft Windows 10 and Windows Server (November 2019 Update, version 1909) +Certified against the Protection Profile for General Purpose Operating Systems, including the Extended Package for Wireless Local Area Network Clients and the Module for Virtual Private Network Clients. -- [Microsoft Windows 10 (November 2019 Update)](https://download.microsoft.com/download/b/3/7/b37981cf-040a-4b02-a93c-a3d3a93986bf/Windows%2010%201909%20GP%20OS%20Security%20Target.pdf) -- [Microsoft Windows 10 (May 2019 Update)](https://download.microsoft.com/download/c/6/9/c6903621-901e-4603-b9cb-fbfe5d6aa691/Windows%2010%201903%20GP%20OS%20Security%20Target.pdf) -- [Microsoft Windows 10 (October 2018 Update)](https://download.microsoft.com/download/3/f/e/3fe6938d-2c2d-4ef1-85d5-1d42dc68ea89/Windows%2010%20version%201809%20GP%20OS%20Security%20Target.pdf) -- [Microsoft Windows 10 (April 2018 Update)](https://download.microsoft.com/download/0/7/6/0764E933-DD0B-45A7-9144-1DD9F454DCEF/Windows%2010%201803%20GP%20OS%20Security%20Target.pdf) -- [Microsoft Windows 10 (Fall Creators Update)](https://download.microsoft.com/download/B/6/A/B6A5EC2C-6351-4FB9-8FF1-643D4BD5BE6E/Windows%2010%201709%20GP%20OS%20Security%20Target.pdf) -- [Microsoft Windows 10 (Creators Update)](https://download.microsoft.com/download/e/8/b/e8b8c42a-a0b6-4ba1-9bdc-e704e8289697/windows%2010%20version%201703%20gp%20os%20security%20target%20-%20public%20\(january%2016,%202018\)\(final\)\(clean\).pdf) -- [Microsoft Windows Server 2016, Microsoft Windows Server 2012 R2, and Microsoft Windows 10 Hyper-V](https://download.microsoft.com/download/1/c/3/1c3b5ab0-e064-4350-a31f-48312180d9b5/st_vid10823-st.pdf) -- [Microsoft Windows 10 (Anniversary Update) and Windows 10 Mobile (Anniversary Update)](https://download.microsoft.com/download/1/5/e/15eee6d3-f2a8-4441-8cb1-ce8c2ab91c24/windows%2010%20anniversary%20update%20mdf%20security%20target%20-%20public%20\(april%203%202017\).docx) -- [Microsoft Windows 10 (Anniversary Update) and Windows Server 2016](https://download.microsoft.com/download/f/8/c/f8c1c2a4-719c-48ae-942f-9fd3ce5b238f/windows%2010%20au%20and%20server%202016%20gp%20os%20security%20target%20-%20public%20\(december%202%202016\)%20\(clean\).docx) -- [Windows 10 (Anniversary Update) and Windows Server 2016 IPsec VPN Client](https://download.microsoft.com/download/b/f/5/bf59e430-e57b-462d-8dca-8ac3c93cfcff/windows%2010%20anniversary%20update%20ipsec%20vpn%20client%20security%20target%20-%20public%20\(december%2029%202016\)%20\(clean\).docx) -- [Microsoft Windows 10 IPsec VPN Client](https://download.microsoft.com/download/3/7/2/372beb03-b1ed-4bb6-9b9b-b8f43afc570d/st_vid10746-st.pdf) -- [Microsoft Windows 10 November 2015 Update with Surface Book](https://download.microsoft.com/download/a/c/2/ac2a6ed8-4d2f-4f48-a9bf-f059d6c9af38/windows%2010%20mdf3%20security%20target%20-%20public%20\(june%2022%202016\)\(final\).docx) -- [Microsoft Windows 10 Mobile with Lumia 950, 950 XL, 550, 635, and Windows 10 with Surface Pro 4](https://www.niap-ccevs.org/st/st_vid10677-st.pdf) -- [Windows 10 and Windows Server 2012 R2](https://www.commoncriteriaportal.org/files/epfiles/st_windows10.pdf) -- [Windows 10](https://www.niap-ccevs.org/st/st_vid10677-st.pdf) -- [Windows 8.1 with Surface 3 and Windows Phone 8.1 with Lumia 635 and Lumia 830](https://www.niap-ccevs.org/st/st_vid10635-st.pdf) -- [Microsoft Surface Pro 3 and Windows 8.1](https://www.niap-ccevs.org/st/st_vid10632-st.pdf) -- [Windows 8.1 and Windows Phone 8.1](https://www.niap-ccevs.org/st/st_vid10592-st.pdf) -- [Windows 8 and Windows Server 2012](https://www.niap-ccevs.org/st/st_vid10520-st.pdf) -- [Windows 8 and Windows RT](https://www.niap-ccevs.org/st/st_vid10620-st.pdf) -- [Windows 8 and Windows Server 2012 BitLocker](https://www.commoncriteriaportal.org/files/epfiles/st_vid10540-st.pdf) -- [Windows 8, Windows RT, and Windows Server 2012 IPsec VPN Client](https://www.commoncriteriaportal.org/files/epfiles/st_vid10529-st.pdf) -- [Windows 7 and Windows Server 2008 R2](https://www.commoncriteriaportal.org/files/epfiles/st_vid10390-st.pdf) -- [Microsoft Windows Server 2008 R2 Hyper-V Role](https://www.microsoft.com/download/en/details.aspx?id=29305) -- [Windows Vista and Windows Server 2008 at EAL4+](https://www.commoncriteriaportal.org/files/epfiles/st_vid10291-st.pdf) -- [Microsoft Windows Server 2008 Hyper-V Role](https://www.commoncriteriaportal.org/files/epfiles/0570b_pdf.pdf) -- [Windows Vista and Windows Server 2008 at EAL1](https://www.commoncriteriaportal.org/files/epfiles/efs-t005_msvista_msserver2008_eal1_st_v1.0.pdf) -- [Windows Server 2003 SP2 including R2, x64, and IA64; Windows XP Professional SP2 and x64 SP2; and Windows XP Embedded SP2](https://www.commoncriteriaportal.org/files/epfiles/st_vid10184-st.pdf) -- [Windows Server 2003 Certificate Server](https://www.commoncriteriaportal.org/files/epfiles/st_vid9507-st.pdf) -- [Windows Rights Management Services (RMS) 1.0 SP2](https://www.commoncriteriaportal.org/files/epfiles/st_vid10224-st.pdf) +- [Security Target](https://download.microsoft.com/download/b/3/7/b37981cf-040a-4b02-a93c-a3d3a93986bf/Windows%2010%201909%20GP%20OS%20Security%20Target.pdf) +- [Administrative Guide](https://download.microsoft.com/download/7/7/3/77303254-05fb-4009-8a39-bf5fe7484a41/Windows%2010%201909%20GP%20OS%20Administrative%20Guide.pdf) +- [Certification Report](https://download.microsoft.com/download/9/f/3/9f350b73-1790-4dcb-97f7-a0e65a00b55f/Windows%2010%201909%20GP%20OS%20Certification%20Report.pdf) +- [Assurance Activity Report](https://download.microsoft.com/download/0/0/d/00d26b48-a051-4e9a-8036-850d825f8ef9/Windows%2010%201909%20GP%20OS%20Assurance%20Activity%20Report.pdf) -## Common Criteria Deployment and Administration +### Microsoft Windows 10 and Windows Server (May 2019 Update, version 1903) +Certified against the Protection Profile for General Purpose Operating Systems, including the Extended Package for Wireless Local Area Network Clients. -### Information for IT Administrators +- [Security Target](https://download.microsoft.com/download/c/6/9/c6903621-901e-4603-b9cb-fbfe5d6aa691/Windows%2010%201903%20GP%20OS%20Security%20Target.pdf) +- [Administrative Guide](https://download.microsoft.com/download/0/b/b/0bb1c6b7-499a-458e-a5f8-e9cf972dfa8d/Windows%2010%201903%20GP%20OS%20Administrative%20Guide.pdf) +- [Certification Report](https://download.microsoft.com/download/2/1/9/219909ad-2f2a-44cc-8fcb-126f28c74d36/Windows%2010%201903%20GP%20OS%20Certification%20Report.pdf) +- [Assurance Activity Report](https://download.microsoft.com/download/2/a/1/2a103b68-cd12-4476-8945-873746b5f432/Windows%2010%201903%20GP%20OS%20Assurance%20Activity%20Report.pdf) -These documents describe how to configure Windows to replicate the configuration used during the Common Criteria evaluation. +### Microsoft Windows 10 and Windows Server (October 2018 Update, version 1809) +Certified against the Protection Profile for General Purpose Operating Systems, including the Extended Package for Wireless Local Area Network Clients. -**Windows 10, Windows 10 Mobile, Windows Server 2016, Windows Server 2012 R2** +- [Security Target](https://download.microsoft.com/download/3/f/e/3fe6938d-2c2d-4ef1-85d5-1d42dc68ea89/Windows%2010%20version%201809%20GP%20OS%20Security%20Target.pdf) +- [Administrative Guide](https://download.microsoft.com/download/f/f/1/ff186e32-35cf-47db-98b0-91ff11763d74/Windows%2010%20version%201809%20GP%20OS%20Administrative%20Guide.pdf) +- [Certification Report](https://download.microsoft.com/download/9/4/0/940ac551-7757-486d-9da1-7aa0300ebac0/Windows%2010%20version%201809%20GP%20OS%20Certification%20Report%20-%202018-61-INF-2795.pdf) +- [Assurance Activity Report](https://download.microsoft.com/download/a/6/6/a66bfcf1-f6ef-4991-ab06-5b1c01f91983/Windows%2010%201809%20GP%20OS%20Assurance%20Activity%20Report.pdf) -- [Microsoft Windows 10 (November 2019 Update)](https://download.microsoft.com/download/7/7/3/77303254-05fb-4009-8a39-bf5fe7484a41/Windows%2010%201909%20GP%20OS%20Administrative%20Guide.pdf) -- [Microsoft Windows 10 (May 2019 Update)](https://download.microsoft.com/download/0/b/b/0bb1c6b7-499a-458e-a5f8-e9cf972dfa8d/Windows%2010%201903%20GP%20OS%20Administrative%20Guide.pdf) -- [Microsoft Windows 10 (October 2018 Update)](https://download.microsoft.com/download/f/f/1/ff186e32-35cf-47db-98b0-91ff11763d74/Windows%2010%20version%201809%20GP%20OS%20Administrative%20Guide.pdf) -- [Microsoft Windows 10 (April 2018 Update)](https://download.microsoft.com/download/6/C/1/6C13FBFF-9CB0-455F-A1C8-3E3CB0ACBD7B/Windows%2010%201803%20GP%20OS%20Administrative%20Guide.pdf) -- [Microsoft Windows 10 (Fall Creators Update)](https://download.microsoft.com/download/5/D/2/5D26F473-0FCE-4AC4-9065-6AEC0FE5B693/Windows%2010%201709%20GP%20OS%20Administrative%20Guide.pdf) -- [Microsoft Windows 10 (Creators Update)](https://download.microsoft.com/download/e/9/7/e97f0c7f-e741-4657-8f79-2c0a7ca928e3/windows%2010%20cu%20gp%20os%20operational%20guidance%20\(jan%208%202017%20-%20public\).pdf) -- [Microsoft Windows Server 2016, Microsoft Windows Server 2012 R2, and Microsoft Windows 10 Hyper-V](https://download.microsoft.com/download/d/c/4/dc40b5c8-49c2-4587-8a04-ab3b81eb6fc4/st_vid10823-agd.pdf) -- [Microsoft Windows 10 (Anniversary Update) and Windows 10 Mobile (Anniversary Update)](https://download.microsoft.com/download/4/c/1/4c1f4ea4-2d66-4232-a0f5-925b2bc763bc/windows%2010%20au%20operational%20guidance%20\(16%20mar%202017\)\(clean\).docx) -- [Microsoft Windows 10 (Anniversary Update) and Windows Server 2016](https://download.microsoft.com/download/b/5/2/b52e9081-05c6-4895-91a3-732bfa0eb4da/windows%2010%20au%20and%20server%202016%20gp%20os%20operational%20guidance%20\(final\).docx) -- [Windows 10 (Anniversary Update) and Windows Server 2016 IPsec VPN Client Operational Guidance](https://download.microsoft.com/download/2/c/c/2cc8f929-233e-4a40-b673-57b449680984/windows%2010%20au%20and%20server%202016%20ipsec%20vpn%20client%20operational%20guidance%20\(21%20dec%202016\)%20\(public\).docx) -- [Microsoft Windows 10 IPsec VPN Client](https://download.microsoft.com/download/3/3/f/33fa01dd-b380-46e1-833f-fd85854b4022/st_vid10746-agd.pdf) -- [Microsoft Windows 10 November 2015 Update with Surface Book Administrative Guide](https://download.microsoft.com/download/3/2/c/32c6fa02-b194-478f-a0f6-0215b47d0f40/windows%2010%20mdf3%20mobile%20device%20pp%20operational%20guidance%20\(may%2027,%202016\)\(public\).docx) -- [Microsoft Windows 10 Mobile and Windows 10 Administrative Guide](https://download.microsoft.com/download/2/d/c/2dce3435-9328-48e2-9813-c2559a8d39fa/microsoft%20windows%2010%20and%20windows%2010%20mobile%20guidance.pdf) -- [Windows 10 and Windows Server 2012 R2 Administrative Guide](https://download.microsoft.com/download/0/f/d/0fd33c9a-98ac-499e-882f-274f80f3d4f0/microsoft%20windows%2010%20and%20server%202012%20r2%20gp%20os%20guidance.pdf) -- [Windows 10 Common Criteria Operational Guidance](https://download.microsoft.com/download/d/6/f/d6fb4cec-f0f2-4d00-ab2e-63bde3713f44/windows%2010%20mobile%20device%20operational%20guidance.pdf) +### Microsoft Windows 10 and Windows Server (April 2018 Update, version 1803) +Certified against the Protection Profile for General Purpose Operating Systems, including the Extended Package for Wireless Local Area Network Clients. -**Windows 8.1 and Windows Phone 8.1** +- [Security Target](https://download.microsoft.com/download/0/7/6/0764E933-DD0B-45A7-9144-1DD9F454DCEF/Windows%2010%201803%20GP%20OS%20Security%20Target.pdf) +- [Administrative Guide](https://download.microsoft.com/download/6/C/1/6C13FBFF-9CB0-455F-A1C8-3E3CB0ACBD7B/Windows%2010%201803%20GP%20OS%20Administrative%20Guide.pdf) +- [Certification Report](https://download.microsoft.com/download/6/7/1/67167BF2-885D-4646-A61E-96A0024B52BB/Windows%2010%201803%20GP%20OS%20Certification%20Report.pdf) +- [Assurance Activity Report](https://download.microsoft.com/download/b/3/d/b3da41b6-6ebc-4a26-a581-2d2ad8d8d1ac/Windows%2010%201803%20GP%20OS%20Assurance%20Activity%20Report.pdf) -- [Microsoft Surface Pro 3 Common Criteria Mobile Operational Guidance](https://download.microsoft.com/download/b/e/3/be365594-daa5-4af3-a6b5-9533d61eae32/surface%20pro%203%20mobile%20operational%20guidance.docx) -- [Windows 8.1 and Windows Phone 8.1 CC Supplemental Admin Guide](https://download.microsoft.com/download/b/0/e/b0e30225-5017-4241-ac0a-6c40bc8e6714/mobile%20operational%20guidance.docx) +### Microsoft Windows 10 and Windows Server (Fall Creators Update, version 1709) +Certified against the Protection Profile for General Purpose Operating Systems. -**Windows 8, Windows RT, and Windows Server 2012** +- [Security Target](https://download.microsoft.com/download/B/6/A/B6A5EC2C-6351-4FB9-8FF1-643D4BD5BE6E/Windows%2010%201709%20GP%20OS%20Security%20Target.pdf) +- [Administrative Guide](https://download.microsoft.com/download/5/D/2/5D26F473-0FCE-4AC4-9065-6AEC0FE5B693/Windows%2010%201709%20GP%20OS%20Administrative%20Guide.pdf) +- [Certification Report](https://download.microsoft.com/download/2/C/2/2C20D013-0610-4047-B2FA-516819DFAE0A/Windows%2010%201709%20GP%20OS%20Certification%20Report.pdf) +- [Assurance Activity Report](https://download.microsoft.com/download/e/7/6/e7644e3c-1e59-4754-b071-aec491c71849/Windows%2010%201709%20GP%20OS%20Assurance%20Activity%20Report.pdf) -- [Windows 8 and Windows Server 2012](https://download.microsoft.com/download/6/0/b/60b27ded-705a-4751-8e9f-642e635c3cf3/microsoft%20windows%208%20windows%20server%202012%20common%20criteria%20supplemental%20admin%20guidance.docx) -- [Windows 8 and Windows RT](https://download.microsoft.com/download/8/6/e/86e8c001-8556-4949-90cf-f5beac918026/microsoft%20windows%208%20microsoft%20windows%20rt%20common%20criteria%20supplemental%20admin.docx) -- [Windows 8 and Windows Server 2012 BitLocker](https://download.microsoft.com/download/0/8/4/08468080-540b-4326-91bf-f2a33b7e1764/administrative%20guidance%20for%20software%20full%20disk%20encryption%20clients.pdf) -- [Windows 8, Windows RT, and Windows Server 2012 IPsec VPN Client](https://download.microsoft.com/download/a/9/f/a9fd7e2d-023b-4925-a62f-58a7f1a6bd47/microsoft%20windows%208%20windows%20server%202012%20supplemental%20admin%20guidance%20ipsec%20vpn%20client.docx) +### Microsoft Windows 10 (Creators Update, version 1703) +Certified against the Protection Profile for General Purpose Operating Systems. -**Windows 7 and Windows Server 2008 R2** +- [Security Target](https://download.microsoft.com/download/e/8/b/e8b8c42a-a0b6-4ba1-9bdc-e704e8289697/windows%2010%20version%201703%20gp%20os%20security%20target%20-%20public%20\(january%2016,%202018\)\(final\)\(clean\).pdf) +- [Administrative Guide](https://download.microsoft.com/download/e/9/7/e97f0c7f-e741-4657-8f79-2c0a7ca928e3/windows%2010%20cu%20gp%20os%20operational%20guidance%20\(jan%208%202017%20-%20public\).pdf) +- [Certification Report](https://download.microsoft.com/download/3/2/c/32cdf627-dd23-4266-90ff-2f9685fd15c0/2017-49%20inf-2218%20cr.pdf) +- [Assurance Activity Report](https://download.microsoft.com/download/a/e/9/ae9a2235-e1cd-4869-964d-c8260f604367/Windows%2010%201703%20GP%20OS%20Assurance%20Activity%20Report.pdf) -- [Windows 7 and Windows Server 2008 R2 Supplemental CC Guide](https://www.microsoft.com/downloads/en/details.aspx?familyid=ee05b6d0-9939-4765-9217-63083bb94a00) -- [Windows Server 2008 R2 Hyper-V Common Criteria Configuration Guide](https://www.microsoft.com/download/en/details.aspx?id=29308) +### Microsoft Windows 10 (Anniversary Update, version 1607) and Windows Server 2016 +Certified against the Protection Profile for General Purpose Operating Systems. -**Windows Vista and Windows Server 2008** +- [Security Target](https://download.microsoft.com/download/f/8/c/f8c1c2a4-719c-48ae-942f-9fd3ce5b238f/windows%2010%20au%20and%20server%202016%20gp%20os%20security%20target%20-%20public%20\(december%202%202016\)%20\(clean\).docx) +- [Administrative Guide](https://download.microsoft.com/download/b/5/2/b52e9081-05c6-4895-91a3-732bfa0eb4da/windows%2010%20au%20and%20server%202016%20gp%20os%20operational%20guidance%20\(final\).docx) +- [Validation Report](https://download.microsoft.com/download/5/4/8/548cc06e-c671-4502-bebf-20d38e49b731/2016-36-inf-1779.pdf) +- [Assurance Activity Report](https://download.microsoft.com/download/a/5/f/a5f08a43-75f9-4433-bd77-aeb14276e587/Windows%2010%201607%20GP%20OS%20Assurance%20Activity%20Report.pdf) -- [Windows Vista and Windows Server 2008 Supplemental CC Guide](https://www.microsoft.com/downloads/en/details.aspx?familyid=06166288-24c4-4c42-9daa-2b2473ddf567) -- [Windows Server 2008 Hyper-V Role Common Criteria Administrator Guide](https://www.microsoft.com/downloads/en/details.aspx?familyid=cb19538d-9e13-4ab6-af38-8f48abfdad08) +### Microsoft Windows 10 (version 1507) and Windows Server 2012 R2 +Certified against the Protection Profile for General Purpose Operating Systems. -**Windows Server 2003 SP2 including R2, x64, and Itanium** +- [Security Target](https://www.commoncriteriaportal.org/files/epfiles/st_windows10.pdf) +- [Administrative Guide](https://download.microsoft.com/download/0/f/d/0fd33c9a-98ac-499e-882f-274f80f3d4f0/microsoft%20windows%2010%20and%20server%202012%20r2%20gp%20os%20guidance.pdf) +- [Certification Report](https://www.commoncriteriaportal.org/files/epfiles/cr_windows10.pdf) +- [Assurance Activity Report](https://download.microsoft.com/download/7/e/5/7e5575c9-10f9-4f3d-9871-bd7cf7422e3b/Windows%2010%20(1507),%20Windows%20Server%202012%20R2%20GPOS%20Assurance%20Activity%20Report.pdf) -- [Windows Server 2003 SP2 R2 Common Criteria Administrator Guide 3.0](https://www.microsoft.com/downloads/details.aspx?familyid=39598841-e693-4891-9234-cfd1550f3949) -- [Windows Server 2003 SP2 R2 Common Criteria Configuration Guide 3.0](https://www.microsoft.com/downloads/details.aspx?familyid=4f7b6a93-0307-480f-a5af-a20268cbd7cc) +## Archived Certified Products -**Windows Server 2003 SP1(x86), x64, and IA64** +The product releases below were certified against the cited Protection Profile and are now archived, as listed on the [Common Criteria Portal](https://www.commoncriteriaportal.org/products/index.cfm?archived=1). The Security Target describes the product edition(s) in scope, the security functionality in the product, and the assurance measures from the Protection Profile used as part of the evaluation. The Administrative Guide provides guidance on configuring the product to match the evaluated configuration. The Validation Report documents the results of the evaluation by the validation team, with the Assurance Activity Report, where available, providing details on the evaluator's actions. +### Microsoft Windows Server 2016, Windows Server 2012 R2, and Windows 10 +Certified against the Protection Profile for Server Virtualization. + +- [Security Target](https://download.microsoft.com/download/1/c/3/1c3b5ab0-e064-4350-a31f-48312180d9b5/st_vid10823-st.pdf) +- [Administrative Guide](https://download.microsoft.com/download/d/c/4/dc40b5c8-49c2-4587-8a04-ab3b81eb6fc4/st_vid10823-agd.pdf) +- [Validation Report](https://download.microsoft.com/download/a/3/3/a336f881-4ac9-4c79-8202-95289f86bb7a/st_vid10823-vr.pdf) +- [Assurance Activity Report](https://download.microsoft.com/download/3/f/c/3fcc76e1-d471-4b44-9a19-29e69b6ab899/Windows%2010%20Hyper-V,%20Server%202016,%20Server%202012%20R2%20Virtualization%20Assurance%20Activity%20Report.pdf) + +### Microsoft Windows 10 and Windows 10 Mobile (Anniversary Update, version 1607) +Certified against the Protection Profile for Mobile Device Fundamentals. + +- [Security Target](https://download.microsoft.com/download/1/5/e/15eee6d3-f2a8-4441-8cb1-ce8c2ab91c24/windows%2010%20anniversary%20update%20mdf%20security%20target%20-%20public%20\(april%203%202017\).docx) +- [Administrative Guide](https://download.microsoft.com/download/4/c/1/4c1f4ea4-2d66-4232-a0f5-925b2bc763bc/windows%2010%20au%20operational%20guidance%20\(16%20mar%202017\)\(clean\).docx) +- [Validation Report](https://download.microsoft.com/download/f/2/f/f2f7176e-34f4-4ab0-993c-6606d207bb3c/st_vid10752-vr.pdf) +- [Assurance Activity Report](https://download.microsoft.com/download/9/3/9/939b44a8-5755-4d4c-b020-d5e8b89690ab/Windows%2010%20and%20Windows%2010%20Mobile%201607%20MDF%20Assurance%20Activity%20Report.pdf) + +### Microsoft Windows 10 (Anniversary Update, version 1607) and Windows Server 2016 +Certified against the Protection Profile for IPsec Virtual Private Network (VPN) Clients. + +- [Security Target](https://download.microsoft.com/download/b/f/5/bf59e430-e57b-462d-8dca-8ac3c93cfcff/windows%2010%20anniversary%20update%20ipsec%20vpn%20client%20security%20target%20-%20public%20\(december%2029%202016\)%20\(clean\).docx) +- [Administrative Guide](https://download.microsoft.com/download/2/c/c/2cc8f929-233e-4a40-b673-57b449680984/windows%2010%20au%20and%20server%202016%20ipsec%20vpn%20client%20operational%20guidance%20\(21%20dec%202016\)%20\(public\).docx) +- [Validation Report](https://download.microsoft.com/download/2/0/a/20a8e686-3cd9-43c4-a22a-54b552a9788a/st_vid10753-vr.pdf) +- [Assurance Activity Report](https://download.microsoft.com/download/b/8/d/b8ddc36a-408a-4d64-a31c-d41c9c1e9d9e/Windows%2010%201607,%20Windows%20Server%202016%20IPsec%20VPN%20Client%20Assurance%20Activity%20Report.pdf) + +### Microsoft Windows 10 (November 2015 Update, version 1511) +Certified against the Protection Profile for Mobile Device Fundamentals. + +- [Security Target](https://download.microsoft.com/download/a/c/2/ac2a6ed8-4d2f-4f48-a9bf-f059d6c9af38/windows%2010%20mdf3%20security%20target%20-%20public%20\(june%2022%202016\)\(final\).docx) +- [Administrative Guide](https://download.microsoft.com/download/3/2/c/32c6fa02-b194-478f-a0f6-0215b47d0f40/windows%2010%20mdf3%20mobile%20device%20pp%20operational%20guidance%20\(may%2027,%202016\)\(public\).docx) +- [Validation Report](https://download.microsoft.com/download/d/c/b/dcb7097d-1b9f-4786-bb07-3c169fefb579/st_vid10715-vr.pdf) +- [Assurance Activity Report](https://download.microsoft.com/download/1/f/1/1f12ed80-6d73-4a16-806f-d5116814bd7c/Windows%2010%20November%202015%20Update%20(1511)%20MDF%20Assurance%20Activity%20Report.pdf) + +### Microsoft Windows 10 and Windows 10 Mobile (version 1507) +Certified against the Protection Profile for Mobile Device Fundamentals. + +- [Security Target](https://www.commoncriteriaportal.org/files/epfiles/st_vid10677-st.pdf) +- [Administrative Guide](https://download.microsoft.com/download/2/d/c/2dce3435-9328-48e2-9813-c2559a8d39fa/microsoft%20windows%2010%20and%20windows%2010%20mobile%20guidance.pdf) +- [Validation Report](https://www.commoncriteriaportal.org/files/epfiles/st_vid10694-vr.pdf) +- [Assurance Activity Report](https://download.microsoft.com/download/a/1/3/a1365491-0a53-42cd-bd73-ca4067c43d86/Windows%2010,%20Windows%2010%20Mobile%20(1507)%20MDF%20Assurance%20Activity%20Report.pdf) + +### Microsoft Windows 10 (version 1507) +Certified against the Protection Profile for IPsec Virtual Private Network (VPN) Clients. + +- [Security Target](https://download.microsoft.com/download/3/7/2/372beb03-b1ed-4bb6-9b9b-b8f43afc570d/st_vid10746-st.pdf) +- [Administrative Guide](https://download.microsoft.com/download/3/3/f/33fa01dd-b380-46e1-833f-fd85854b4022/st_vid10746-agd.pdf) +- [Validation Report](https://download.microsoft.com/download/9/b/6/9b633763-6078-48aa-b9ba-960da2172a11/st_vid10746-vr.pdf) +- [Assurance Activity Report](https://download.microsoft.com/download/9/3/6/93630ffb-5c06-4fea-af36-164da3e359c9/Windows%2010%20IPsec%20VPN%20Client%20Assurance%20Activity%20Report.pdf) + +### Windows 8.1 with Surface 3 and Windows Phone 8.1 with Lumia 635 and Lumia 830 +Certified against the Protection Profile for Mobile Device Fundamentals. + +- [Security Target](https://www.commoncriteriaportal.org/files/epfiles/st_vid10635-st.pdf) +- [Administrative Guide](https://download.microsoft.com/download/b/e/3/be365594-daa5-4af3-a6b5-9533d61eae32/surface%20pro%203%20mobile%20operational%20guidance.docx) +- [Validation Report](https://www.commoncriteriaportal.org/files/epfiles/st_vid10635-vr.pdf) + +### Microsoft Surface Pro 3 and Windows 8.1 +Certified against the Protection Profile for Mobile Device Fundamentals. + +- [Security Target](https://www.commoncriteriaportal.org/files/epfiles/st_vid10632-st.pdf) +- [Administrative Guide](https://download.microsoft.com/download/b/e/3/be365594-daa5-4af3-a6b5-9533d61eae32/surface%20pro%203%20mobile%20operational%20guidance.docx) +- [Validation Report](https://www.commoncriteriaportal.org/files/epfiles/st_vid10632-vr.pdf) + +### Windows 8.1 and Windows Phone 8.1 +Certified against the Protection Profile for Mobile Device Fundamentals. + +- [Security Target](https://www.commoncriteriaportal.org/files/epfiles/st_vid10592-st.pdf) +- [Administrative Guide](https://download.microsoft.com/download/b/0/e/b0e30225-5017-4241-ac0a-6c40bc8e6714/mobile%20operational%20guidance.docx) +- [Validation Report](https://www.commoncriteriaportal.org/files/epfiles/st_vid10592-vr.pdf) + +### Windows 8 and Windows Server 2012 +Certified against the Protection Profile for General Purpose Operating Systems. + +- [Security Target](https://www.commoncriteriaportal.org/files/epfiles/st_vid10520-st.pdf) +- [Administrative Guide](https://download.microsoft.com/download/6/0/b/60b27ded-705a-4751-8e9f-642e635c3cf3/microsoft%20windows%208%20windows%20server%202012%20common%20criteria%20supplemental%20admin%20guidance.docx) +- [Validation Report](https://www.commoncriteriaportal.org/files/epfiles/st_vid10520-vr.pdf) + +### Windows 8 and Windows RT +Certified against the Protection Profile for General Purpose Operating Systems. + +- [Security Target](https://www.commoncriteriaportal.org/files/epfiles/st_vid10620-st.pdf) +- [Administrative Guide](https://download.microsoft.com/download/8/6/e/86e8c001-8556-4949-90cf-f5beac918026/microsoft%20windows%208%20microsoft%20windows%20rt%20common%20criteria%20supplemental%20admin.docx) +- [Validation Report](https://www.commoncriteriaportal.org/files/epfiles/st_vid10620-vr.pdf) + +### Windows 8 and Windows Server 2012 BitLocker +Certified against the Protection Profile for Full Disk Encryption. + +- [Security Target](https://www.commoncriteriaportal.org/files/epfiles/st_vid10540-st.pdf) +- [Administrative Guide](https://download.microsoft.com/download/0/8/4/08468080-540b-4326-91bf-f2a33b7e1764/administrative%20guidance%20for%20software%20full%20disk%20encryption%20clients.pdf) +- [Validation Report](https://www.commoncriteriaportal.org/files/epfiles/st_vid10540-vr.pdf) + +### Windows 8, Windows RT, and Windows Server 2012 IPsec VPN Client +Certified against the Protection Profile for IPsec Virtual Private Network (VPN) Clients. + +- [Security Target](https://www.commoncriteriaportal.org/files/epfiles/st_vid10529-st.pdf) +- [Administrative Guide](https://download.microsoft.com/download/a/9/f/a9fd7e2d-023b-4925-a62f-58a7f1a6bd47/microsoft%20windows%208%20windows%20server%202012%20supplemental%20admin%20guidance%20ipsec%20vpn%20client.docx) +- [Validation Report](https://www.commoncriteriaportal.org/files/epfiles/st_vid10529-vr.pdf) + +### Windows 7 and Windows Server 2008 R2 +Certified against the Protection Profile for General Purpose Operating Systems. + +- [Security Target](https://www.commoncriteriaportal.org/files/epfiles/st_vid10390-st.pdf) +- [Administrative Guide](https://www.microsoft.com/downloads/en/details.aspx?familyid=ee05b6d0-9939-4765-9217-63083bb94a00) +- [Validation Report](https://www.commoncriteriaportal.org/files/epfiles/st_vid10390-vr.pdf) + +### Microsoft Windows Server 2008 R2 Hyper-V Role + +- [Security Target](https://www.microsoft.com/download/en/details.aspx?id=29305) +- [Administrative Guide](https://www.microsoft.com/download/en/details.aspx?id=29308) +- [Validation Report](https://www.commoncriteriaportal.org/files/epfiles/0570a_pdf.pdf) + +### Windows Vista and Windows Server 2008 at EAL4+ + +- [Security Target](https://www.commoncriteriaportal.org/files/epfiles/st_vid10291-st.pdf) +- [Administrative Guide](https://www.microsoft.com/downloads/en/details.aspx?familyid=06166288-24c4-4c42-9daa-2b2473ddf567) +- [Validation Report](https://www.commoncriteriaportal.org/files/epfiles/st_vid10291-vr.pdf) + +### Windows Vista and Windows Server 2008 at EAL1 + +- [Security Target](https://www.commoncriteriaportal.org/files/epfiles/efs-t005_msvista_msserver2008_eal1_st_v1.0.pdf) +- [Administrative Guide](https://www.microsoft.com/downloads/en/details.aspx?familyid=06166288-24c4-4c42-9daa-2b2473ddf567) +- [Certification Report](https://www.commoncriteriaportal.org/files/epfiles/efs-t005_msvista_msserver2008_eal1_cr_v1.0.pdf) + +### Microsoft Windows Server 2008 Hyper-V Role + +- [Security Target](https://www.commoncriteriaportal.org/files/epfiles/0570b_pdf.pdf) +- [Administrative Guide](https://www.microsoft.com/downloads/en/details.aspx?familyid=cb19538d-9e13-4ab6-af38-8f48abfdad08) +- [Certification Report](http://www.commoncriteriaportal.org:80/files/epfiles/0570a_pdf.pdf) + +### Windows XP and Windows Server 2003 + +- [Security Target - Windows Server 2003 SP2 including R2, x64, and IA64; Windows XP Professional SP2 and x64 SP2; and Windows XP Embedded SP2](https://www.commoncriteriaportal.org/files/epfiles/st_vid10184-st.pdf) +- [Identifying Windows XP and Windows Server 2003 Common Criteria Certified Requirements for the NIST Special Publication 800-53](https://download.microsoft.com/download/a/9/6/a96d1dfc-2bd4-408d-8d93-e0ede7529691/xpws03_ccto800-53.doc) +- [Windows Server 2003 SP2 R2 Administrator Guide 3.0](https://www.microsoft.com/downloads/details.aspx?familyid=39598841-e693-4891-9234-cfd1550f3949) +- [Windows Server 2003 SP2 R2 Configuration Guide 3.0](https://www.microsoft.com/downloads/details.aspx?familyid=4f7b6a93-0307-480f-a5af-a20268cbd7cc) +- [Windows Server 2003 SP1 Administrator's Guide](https://www.microsoft.com/downloads/en/details.aspx?familyid=75736009-59e9-4a71-879e-cf581817b8cc) +- [Windows Server 2003 SP1 Configuration Guide](https://www.microsoft.com/downloads/en/details.aspx?familyid=a0ad1856-beb7-4285-b47c-381e8a210c38) - [Windows Server 2003 with x64 Hardware Administrator's Guide](https://www.microsoft.com/downloads/details.aspx?familyid=8a26829f-c177-4b79-913a-4135fb7b96ef) - [Windows Server 2003 with x64 Hardware Configuration Guide](https://www.microsoft.com/downloads/details.aspx?familyid=3f9ecd0a-74dd-4d23-a4e5-d7b63fed70e8) - -**Windows Server 2003 SP1** - -- [Windows Server 2003 Administrator's Guide](https://www.microsoft.com/downloads/en/details.aspx?familyid=75736009-59e9-4a71-879e-cf581817b8cc) -- [Windows Server 2003 Configuration Guide](https://www.microsoft.com/downloads/en/details.aspx?familyid=a0ad1856-beb7-4285-b47c-381e8a210c38) - -**Windows XP Professional SP2 (x86) and x64 Edition** - -- [Windows XP Common Criteria Administrator Guide 3.0](https://www.microsoft.com/downloads/details.aspx?familyid=9a7f0b16-72ce-4675-aec8-58785c4e37ee) -- [Windows XP Common Criteria Configuration Guide 3.0](https://www.microsoft.com/downloads/details.aspx?familyid=165da57d-f066-4ddf-9462-cbecfcd68694) -- [Windows XP Common Criteria User Guide 3.0](https://www.microsoft.com/downloads/details.aspx?familyid=7c1a4761-9b9e-429c-84eb-cd7b034c5779) +- [Windows XP Administrator Guide 3.0](https://www.microsoft.com/downloads/details.aspx?familyid=9a7f0b16-72ce-4675-aec8-58785c4e37ee) +- [Windows XP Configuration Guide 3.0](https://www.microsoft.com/downloads/details.aspx?familyid=165da57d-f066-4ddf-9462-cbecfcd68694) +- [Windows XP User Guide 3.0](https://www.microsoft.com/downloads/details.aspx?familyid=7c1a4761-9b9e-429c-84eb-cd7b034c5779) - [Windows XP Professional with x64 Hardware Administrator's Guide](https://www.microsoft.com/downloads/details.aspx?familyid=346f041e-d641-4af7-bdea-c5a3246d0431) - [Windows XP Professional with x64 Hardware Configuration Guide](https://www.microsoft.com/downloads/details.aspx?familyid=a7075319-cc3d-4420-a00b-8c9a7068ad54) - [Windows XP Professional with x64 Hardware User’s Guide](https://www.microsoft.com/downloads/details.aspx?familyid=26c49cf5-6159-4197-97ce-bf1fdfc54569) - -**Windows XP Professional SP2, and XP Embedded SP2** - - [Windows XP Professional Administrator's Guide](https://www.microsoft.com/downloads/en/details.aspx?familyid=9bcac470-a0b3-4d34-a561-fa8308c0ff60) - [Windows XP Professional Configuration Guide](https://www.microsoft.com/downloads/en/details.aspx?familyid=9f04915e-571a-422d-8ffa-5797051e81de) - [Windows XP Professional User's Guide](https://www.microsoft.com/downloads/en/details.aspx?familyid=d39d0028-7093-495c-80da-2b5b29a54bd8) - -**Windows Server 2003 Certificate Server** - -- [Windows Server 2003 Certificate Server Administrator's Guide](https://www.microsoft.com/downloads/en/details.aspx?familyid=445093d8-45e2-4cf6-884c-8802c1e6cb2d) -- [Windows Server 2003 Certificate Server Configuration Guide](https://www.microsoft.com/downloads/en/details.aspx?familyid=46abc8b5-11be-4e3d-85c2-63226c3688d2) -- [Windows Server 2003 Certificate Server User's Guide](https://www.microsoft.com/downloads/en/details.aspx?familyid=74f66d84-2654-48d0-b9b5-b383d383425e) - -## Common Criteria Evaluation Technical Reports and Certification / Validation Reports - -### Information for Systems Integrators and Accreditors - -An Evaluation Technical Report (ETR) is a report submitted to the Common Criteria certification authority for how Windows complies with the claims made in the Security Target. A Certification / Validation Report provides the results of the evaluation by the validation team. - -- [Microsoft Windows 10 (November 2019 Update)](https://download.microsoft.com/download/9/f/3/9f350b73-1790-4dcb-97f7-a0e65a00b55f/Windows%2010%201909%20GP%20OS%20Certification%20Report.pdf) -- [Microsoft Windows 10 (May 2019 Update)](https://download.microsoft.com/download/2/1/9/219909ad-2f2a-44cc-8fcb-126f28c74d36/Windows%2010%201903%20GP%20OS%20Certification%20Report.pdf) -- [Microsoft Windows 10 (October 2018 Update)](https://download.microsoft.com/download/9/4/0/940ac551-7757-486d-9da1-7aa0300ebac0/Windows%2010%20version%201809%20GP%20OS%20Certification%20Report%20-%202018-61-INF-2795.pdf) -- [Microsoft Windows 10 (April 2018 Update)](https://download.microsoft.com/download/6/7/1/67167BF2-885D-4646-A61E-96A0024B52BB/Windows%2010%201803%20GP%20OS%20Certification%20Report.pdf) -- [Microsoft Windows 10 (Fall Creators Update)](https://download.microsoft.com/download/2/C/2/2C20D013-0610-4047-B2FA-516819DFAE0A/Windows%2010%201709%20GP%20OS%20Certification%20Report.pdf) -- [Microsoft Windows 10 (Creators Update)](https://download.microsoft.com/download/3/2/c/32cdf627-dd23-4266-90ff-2f9685fd15c0/2017-49%20inf-2218%20cr.pdf) -- [Microsoft Windows Server 2016, Microsoft Windows Server 2012 R2, and Microsoft Windows 10 Hyper-V](https://download.microsoft.com/download/a/3/3/a336f881-4ac9-4c79-8202-95289f86bb7a/st_vid10823-vr.pdf) -- [Microsoft Windows 10 (Anniversary Update) and Windows 10 Mobile (Anniversary Update)](https://download.microsoft.com/download/f/2/f/f2f7176e-34f4-4ab0-993c-6606d207bb3c/st_vid10752-vr.pdf) -- [Microsoft Windows 10 (Anniversary Update) and Windows Server 2016](https://download.microsoft.com/download/5/4/8/548cc06e-c671-4502-bebf-20d38e49b731/2016-36-inf-1779.pdf) -- [Windows 10 (Anniversary Update) and Windows Server 2016 IPsec VPN Client](https://download.microsoft.com/download/2/0/a/20a8e686-3cd9-43c4-a22a-54b552a9788a/st_vid10753-vr.pdf) -- [Microsoft Windows 10 IPsec VPN Client](https://download.microsoft.com/download/9/b/6/9b633763-6078-48aa-b9ba-960da2172a11/st_vid10746-vr.pdf) -- [Microsoft Windows 10 November 2015 Update with Surface Book](https://download.microsoft.com/download/d/c/b/dcb7097d-1b9f-4786-bb07-3c169fefb579/st_vid10715-vr.pdf) -- [Microsoft Windows 10 Mobile with Lumia 950, 950 XL, 550, 635, and Windows 10 with Surface Pro 4](https://www.niap-ccevs.org/st/st_vid10694-vr.pdf) -- [Windows 10 and Windows Server 2012 R2](https://www.commoncriteriaportal.org/files/epfiles/cr_windows10.pdf) -- [Windows 10](https://www.niap-ccevs.org/st/st_vid10677-vr.pdf) -- [Windows 8.1 with Surface 3 and Windows Phone 8.1 with Lumia 635 and Lumia 830](https://www.niap-ccevs.org/st/st_vid10635-vr.pdf) -- [Microsoft Surface Pro 3 and Windows 8.1](https://www.niap-ccevs.org/st/st_vid10632-vr.pdf) -- [Windows 8.1 and Windows Phone 8.1](https://www.niap-ccevs.org/st/st_vid10592-vr.pdf) -- [Windows 8 and Windows Server 2012](https://www.niap-ccevs.org/st/st_vid10520-vr.pdf) -- [Windows 8 and Windows RT](https://www.niap-ccevs.org/st/st_vid10620-vr.pdf) -- [Windows 8 and Windows Server 2012 BitLocker](https://www.commoncriteriaportal.org/files/epfiles/st_vid10540-vr.pdf) -- [Windows 8, Windows RT, and Windows Server 2012 IPsec VPN Client](https://www.commoncriteriaportal.org/files/epfiles/st_vid10529-vr.pdf) -- [Windows 7 and Windows Server 2008 R2 Validation Report](https://www.commoncriteriaportal.org/files/epfiles/st_vid10390-vr.pdf) -- [Windows Vista and Windows Server 2008 Validation Report at EAL4+](https://www.commoncriteriaportal.org/files/epfiles/st_vid10291-vr.pdf) -- [Windows Server 2008 Hyper-V Role Certification Report](https://www.commoncriteriaportal.org/files/epfiles/0570a_pdf.pdf) -- [Windows Vista and Windows Server 2008 Certification Report at EAL1](https://www.commoncriteriaportal.org/files/epfiles/efs-t005_msvista_msserver2008_eal1_cr_v1.0.pdf) - [Windows XP / Windows Server 2003 with x64 Hardware ETR](https://www.microsoft.com/downloads/details.aspx?familyid=6e8d98f9-25b9-4c85-9bd9-24d91ea3c9ef) - [Windows XP / Windows Server 2003 with x64 Hardware ETR, Part II](https://www.microsoft.com/downloads/details.aspx?familyid=0c35e7d8-9c56-4686-b902-d5ffb9915658) - [Windows Server 2003 SP2 including R2, Standard, Enterprise, Datacenter, x64, and Itanium Editions Validation Report](https://www.commoncriteriaportal.org/files/epfiles/20080303_st_vid10184-vr.pdf) @@ -175,10 +243,17 @@ An Evaluation Technical Report (ETR) is a report submitted to the Common Criteri - [Windows XP Embedded SP2 Validation Report](https://www.commoncriteriaportal.org/files/epfiles/20080303_st_vid10184-vr.pdf) - [Windows XP and Windows Server 2003 ETR](https://www.microsoft.com/downloads/details.aspx?familyid=63cf2a1e-f578-4bb5-9245-d411f0f64265) - [Windows XP and Windows Server 2003 Validation Report](https://www.commoncriteriaportal.org/files/epfiles/st_vid9506-vr.pdf) -- [Windows Server 2003 Certificate Server ETR](https://www.microsoft.com/downloads/details.aspx?familyid=a594e77f-dcbb-4787-9d68-e4689e60a314) -- [Windows Server 2003 Certificate Server Validation Report](https://www.commoncriteriaportal.org/files/epfiles/st_vid9507-vr.pdf) -- [Microsoft Windows Rights Management Services (RMS) 1.0 SP2 Validation Report](https://www.commoncriteriaportal.org/files/epfiles/st_vid10224-vr.pdf) -## Other Common Criteria Related Documents +### Windows Server 2003 Certificate Server -- [Identifying Windows XP and Windows Server 2003 Common Criteria Certified Requirements for the NIST Special Publication 800-53](https://download.microsoft.com/download/a/9/6/a96d1dfc-2bd4-408d-8d93-e0ede7529691/xpws03_ccto800-53.doc) +- [Security Target](https://www.commoncriteriaportal.org/files/epfiles/st_vid9507-st.pdf) +- [Administrator's Guide](https://www.microsoft.com/downloads/en/details.aspx?familyid=445093d8-45e2-4cf6-884c-8802c1e6cb2d) +- [Configuration Guide](https://www.microsoft.com/downloads/en/details.aspx?familyid=46abc8b5-11be-4e3d-85c2-63226c3688d2) +- [User's Guide](https://www.microsoft.com/downloads/en/details.aspx?familyid=74f66d84-2654-48d0-b9b5-b383d383425e) +- [Evaluation Technical Report](https://www.microsoft.com/downloads/details.aspx?familyid=a594e77f-dcbb-4787-9d68-e4689e60a314) +- [Validation Report](https://www.commoncriteriaportal.org/files/epfiles/st_vid9507-vr.pdf) + +### Windows Rights Management Services + +- [Security Target](https://www.commoncriteriaportal.org/files/epfiles/st_vid10224-st.pdf) +- [Validation Report](https://www.commoncriteriaportal.org/files/epfiles/st_vid10224-vr.pdf) From 4e6cb4fcdb3a10a47a2651f0f945ed0b70bb9040 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 17 Jul 2020 15:35:23 -0700 Subject: [PATCH 196/589] Update manage-atp-post-migration-intune.md --- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 44abfcb9c6..b5668c7654 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -57,6 +57,7 @@ The following table lists various tasks you can perform to configure Microsoft D |Configure encryption and BitLocker to protect information on your organization's devices running Windows |[Endpoint protection: Windows Encryption](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#windows-encryption)

[BitLocker for Windows 10 devices](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) | |Configure Microsoft Defender Credential Guard to protect against credential theft attacks |For Windows 10, Windows Server 2016, and Windows Server 2019, see [Endpoint protection: Microsoft Defender Credential Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-credential-guard)

For Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, and Windows Server 2012 R2, see [Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft, Version 1 and 2](https://www.microsoft.com/download/details.aspx?id=36036) | |Configure your Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) to view alerts, configure threat protection features, and view detailed information about your organization's overall security posture.

You can also configure whether and what features end users can see in the Microsoft Defender Security Center. |[Endpoint protection: Microsoft Defender Security Center](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-security-center)

[Overview of the Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use) | -|Configure Microsoft Defender Application Control (also referred to as AppLocker) to choose whether to audit or trust apps on your organization's devices |[AppLocker overview](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview)
[Endpoint protection: MIcrosoft Defender Application Control](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-application-control)
[AppLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/applocker-csp)| +|Configure Microsoft Defender Application Control (also referred to as AppLocker) to choose whether to audit or trust apps on your organization's devices |[AppLocker overview](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview)

[Endpoint protection: MIcrosoft Defender Application Control](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-application-control)

[AppLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/applocker-csp)| +| | | From 71ab632f7fbd77b5ec0354b57c3d4df758ba3d08 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 17 Jul 2020 16:21:37 -0700 Subject: [PATCH 197/589] Update manage-atp-post-migration-intune.md --- .../manage-atp-post-migration-intune.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index b5668c7654..8cc7ef3d05 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -44,20 +44,20 @@ The following table lists various tasks you can perform to configure Microsoft D |Task |Resources to learn more | |---------|---------| |Manage your organization's devices using Intune |[Protect devices with Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect) | -|Integrate Microsoft Defender ATP with Microsoft Intune as a Mobile Threat Defense solution
(for Android devices and devices running Windows 10 or later) |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | +|Integrate Microsoft Defender ATP with Microsoft Intune as a Mobile Threat Defense solution
*(for Android devices and devices running Windows 10 or later)* |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | |Use Conditional Access to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | |Configure your Microsoft Defender Antivirus settings using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus)

[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender) | |If necessary, specify exclusions for Microsoft Defender Antivirus

*Generally, you shouldn't need to apply exclusions. Microsoft Defender Antivirus includes a number of automatic exclusions based on known OS behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations.* |[Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows](https://support.microsoft.com/help/822158/virus-scanning-recommendations-for-enterprise-computers)

[Device restrictions: Microsoft Defender Antivirus Exclusions for Windows 10 devices](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions)

[Configure Microsoft Defender Antivirus exclusions on Windows Server 2016 or 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus)| -|Configure your attack surface reduction rules

*TIP: Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Audit mode in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender)

[Endpoint protection: Attack Surface Reduction](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json#attack-surface-reduction)

[Learn more about attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction) | -|Configure your network filtering (this is also referred to as network protection)

*TIP: Make sure that Windows 10 devices have the latest [antimalware platform updates](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform) installed.*|[Endpoint protection: Network filtering](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#network-filtering)

[Review network protection events in Windows Event Viewer](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection#review-network-protection-events-in-windows-event-viewer) | +|Configure your attack surface reduction rules to target software behaviors that are often abused by attackers

*TIP: Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Audit mode in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender)

[Endpoint protection: Attack Surface Reduction](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json#attack-surface-reduction)

[Learn more about attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction) | +|Configure your network filtering block outbound connections from any app to IP addresses or domains with low reputations

*NOTES:*
- *Network filtering is also referred to as [network protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/network-protection).*
- *Make sure that Windows 10 devices have the latest [antimalware platform updates](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform) installed.*|[Endpoint protection: Network filtering](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#network-filtering)

[Review network protection events in Windows Event Viewer](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection#review-network-protection-events-in-windows-event-viewer) | |Configure controlled folder access to protect against ransomware

*Controlled folder access is also referred to as antiransomware protection.* |[Endpoint protection: Controlled folder access](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#controlled-folder-access)

[Enable controlled folder access in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#intune) | |Configure exploit protection to protect your organization's devices from malware that uses exploits to spread and infect other devices

*Exploit protection is also referred to as Exploit Guard.* |[Endpoint protection: Microsoft Defender Exploit Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-exploit-guard)

[Enable exploit protection in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection#intune) | |Configure Microsoft Defender SmartScreen to protect against malicious sites and files on the internet.

*Microsoft Edge should be installed on your organization's devices. For protection on Google Chrome and FireFox browsers, configure exploit protection.* |[Microsoft Defender SmartScreen](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview)

[Device restrictions: Microsoft Defender SmartScreen](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-smartscreen)

[Policy settings for managing SmartScreen in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings#mdm-settings) | |Configure Microsoft Defender Firewall to block unauthorized network traffic flowing into or out of your organization's devices |[Endpoint protection: Microsoft Defender Firewall](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-firewall)

[Microsoft Defender Firewall with Advanced Security](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security) | |Configure encryption and BitLocker to protect information on your organization's devices running Windows |[Endpoint protection: Windows Encryption](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#windows-encryption)

[BitLocker for Windows 10 devices](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) | |Configure Microsoft Defender Credential Guard to protect against credential theft attacks |For Windows 10, Windows Server 2016, and Windows Server 2019, see [Endpoint protection: Microsoft Defender Credential Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-credential-guard)

For Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, and Windows Server 2012 R2, see [Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft, Version 1 and 2](https://www.microsoft.com/download/details.aspx?id=36036) | -|Configure your Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) to view alerts, configure threat protection features, and view detailed information about your organization's overall security posture.

You can also configure whether and what features end users can see in the Microsoft Defender Security Center. |[Endpoint protection: Microsoft Defender Security Center](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-security-center)

[Overview of the Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use) | -|Configure Microsoft Defender Application Control (also referred to as AppLocker) to choose whether to audit or trust apps on your organization's devices |[AppLocker overview](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview)

[Endpoint protection: MIcrosoft Defender Application Control](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-application-control)

[AppLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/applocker-csp)| +|Configure your Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) to view alerts, configure threat protection features, and view detailed information about your organization's overall security posture.

*You can also configure whether and what features end users can see in the Microsoft Defender Security Center.* |[Overview of the Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use)

[Endpoint protection: Microsoft Defender Security Center](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-security-center) | +|Configure Microsoft Defender Application Control to choose whether to audit or trust apps on your organization's devices

*Microsoft Defender Application Control is also referred to as [AppLocker](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview).*|[Deploy Microsoft Defender Application Control policies by using Microsoft Intune](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune)

[Endpoint protection: MIcrosoft Defender Application Control](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-application-control)

[AppLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/applocker-csp)| | | | From 18c98c3a8201efcd30929fe7fff7bdb1b51d68f3 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Fri, 17 Jul 2020 21:23:04 -0700 Subject: [PATCH 198/589] Fixing it-showcase link in WHFB --- .../identity-protection/hello-for-business/hello-overview.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-overview.md b/windows/security/identity-protection/hello-for-business/hello-overview.md index 0b032dbbdc..6a70672f7a 100644 --- a/windows/security/identity-protection/hello-for-business/hello-overview.md +++ b/windows/security/identity-protection/hello-for-business/hello-overview.md @@ -99,7 +99,9 @@ Windows Hello for Business with a key does not support RDP. RDP does not support ## Learn more -[Implementing Windows Hello for Business at Microsoft](https://www.microsoft.com/itshowcase/implementing-windows-hello-for-business-at-microsoft) +[Implementing strong user authentication with Windows Hello for Business](https://www.microsoft.com/en-us/itshowcase/implementing-strong-user-authentication-with-windows-hello-for-business) + +[Implementing Windows Hello for Business at Microsoft](https://www.microsoft.com/en-us/itshowcase/implementing-windows-hello-for-business-at-microsoft) [Introduction to Windows Hello](https://go.microsoft.com/fwlink/p/?LinkId=786649), video presentation on Microsoft Virtual Academy From fc2f38c636783e4862199411f43a4a7bc1026a31 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Sun, 19 Jul 2020 09:40:52 +0500 Subject: [PATCH 199/589] Changes in Account Requirements As the user has reported and I have tested, we need to have a Work/School account required. Problem: #2424 The old PR was mistakenly closed. Old PR link https://github.com/MicrosoftDocs/windows-itpro-docs/pull/7100. --- windows/application-management/msix-app-packaging-tool.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/application-management/msix-app-packaging-tool.md b/windows/application-management/msix-app-packaging-tool.md index adcf842841..b7d8c88efc 100644 --- a/windows/application-management/msix-app-packaging-tool.md +++ b/windows/application-management/msix-app-packaging-tool.md @@ -30,11 +30,11 @@ You can either run your installer interactively (through the UI) or create a pac - Windows 10, version 1809 (or later) - Participation in the Windows Insider Program (if you're using an Insider build) -- A valid Microsoft account (MSA) alias to access the app from the Microsoft Store +- A valid Microsoft work or school account to access the app from the Microsoft Store - Admin privileges on your PC account ### Get the app from the Microsoft Store -1. Use the MSA login associated with your Windows Insider Program credentials in the [Microsoft Store](https://www.microsoft.com/store/r/9N5LW3JBCXKF). +1. Use the work of school account login associated with your Windows Insider Program credentials in the [Microsoft Store](https://www.microsoft.com/store/r/9N5LW3JBCXKF). 2. Open the product description page. 3. Click the install icon to begin installation. From e6d142d26c321b63e036da89b25ca3e69e43afbe Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sun, 19 Jul 2020 12:32:17 +0500 Subject: [PATCH 200/589] Update windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- ...re-extension-file-exclusions-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md index 8f9e75d1de..c730506401 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md @@ -30,7 +30,7 @@ manager: dansimp You can exclude certain files from Microsoft Defender Antivirus scans by modifying exclusion lists. **Generally, you shouldn't need to apply exclusions**. Microsoft Defender Antivirus includes a number of automatic exclusions based on known operating system behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations. > [!NOTE] -> Automatic exclusions apply only to Windows Server 2016 and above. These exclusions are not visible in Windows Security app and PowerShell. +> Automatic exclusions apply only to Windows Server 2016 and above. These exclusions are not visible in the Windows Security app and in PowerShell. This article describes how to configure exclusion lists for the files and folders. From 79baae28c712a7b439bba1e47ffecdab837d73ff Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sun, 19 Jul 2020 13:21:52 +0500 Subject: [PATCH 201/589] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 9ee5965970..c8c5577f4f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -391,7 +391,7 @@ This rule was introduced in: - [Windows 10, version 1903](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1903) - [Windows Server 1903](https://docs.microsoft.com/windows-server/get-started-19/whats-new-in-windows-server-1903-1909) -Intune name: Block persistence through WMI event subscription +Intune name: Not yet available Configuration Manager name: Not yet available From 8e6a4e0d7ebbf7dbc356bcd4580e1eae435a1d77 Mon Sep 17 00:00:00 2001 From: EfiKliger <45028856+EfiKliger@users.noreply.github.com> Date: Sun, 19 Jul 2020 11:52:40 +0300 Subject: [PATCH 202/589] Update api-power-bi.md --- .../threat-protection/microsoft-defender-atp/api-power-bi.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md b/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md index 546c64449d..a7f95c1789 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md +++ b/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md @@ -123,7 +123,7 @@ The first example demonstrates how to connect Power BI to Advanced Hunting API a ## Power BI dashboard samples in GitHub -For more information see the [Power BI report templates](https://github.com/microsoft/MDATP-PowerBI-Templates). +For more information see the [Power BI report templates](https://github.com/microsoft/MicrosoftDefenderATP-PowerBI). ## Sample reports View the Microsoft Defender ATP Power BI report samples. For more information, see [Browse code samples](https://docs.microsoft.com/samples/browse/?products=mdatp). From 2b38141ce24395665dee249b179ce9601361a009 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sun, 19 Jul 2020 14:13:13 +0500 Subject: [PATCH 203/589] Update white-glove.md --- windows/deployment/windows-autopilot/white-glove.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/white-glove.md b/windows/deployment/windows-autopilot/white-glove.md index ca7078273f..ecf4e2eed4 100644 --- a/windows/deployment/windows-autopilot/white-glove.md +++ b/windows/deployment/windows-autopilot/white-glove.md @@ -59,7 +59,7 @@ To enable white glove deployment, an additional Autopilot profile setting must b ![allow white glove](images/allow-white-glove-oobe.png) -The Windows Autopilot for white glove deployment pre-provisioning process will apply all device-targeted policies from Intune. That includes certificates, security templates, settings, apps, and more – anything targeting the device. Additionally, any apps (Win32 or LOB) that are configured to install in the device context and targeted to the user that has been pre-assigned to the Autopilot device will also be installed. Please make sure not to target both win32 and LOB apps to the same device. +The Windows Autopilot for white glove deployment pre-provisioning process will apply all device-targeted policies from Intune. That includes certificates, security templates, settings, apps, and more – anything targeting the device. Additionally, any apps (Win32 or LOB) that are configured to install in the device context and targeted to the user that has been pre-assigned to the Autopilot device will also be installed. Please make sure not to target both win32 and LOB apps to the same device, otherwise the app installation may fail. > [!NOTE] > The white glove technician phase will install all device-targeted apps as well as any user-targeted, device-context apps that are targeted to the assigned user. If there is no assigned user, then it will only install the device-targeted apps. Other user-targeted policies will not apply until the user signs into the device. To verify these behaviors, be sure to create appropriate apps and policies targeted to devices and users. From 3de60d3fdfcf63594213cb4714447ec6f14a05fa Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Sun, 19 Jul 2020 17:26:39 +0500 Subject: [PATCH 204/589] Update windows/application-management/msix-app-packaging-tool.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- windows/application-management/msix-app-packaging-tool.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/application-management/msix-app-packaging-tool.md b/windows/application-management/msix-app-packaging-tool.md index b7d8c88efc..91ef9b0c48 100644 --- a/windows/application-management/msix-app-packaging-tool.md +++ b/windows/application-management/msix-app-packaging-tool.md @@ -35,6 +35,6 @@ You can either run your installer interactively (through the UI) or create a pac ### Get the app from the Microsoft Store -1. Use the work of school account login associated with your Windows Insider Program credentials in the [Microsoft Store](https://www.microsoft.com/store/r/9N5LW3JBCXKF). +1. Use the Microsoft work or school account login associated with your Windows Insider Program credentials in the [Microsoft Store](https://www.microsoft.com/store/r/9N5LW3JBCXKF). 2. Open the product description page. 3. Click the install icon to begin installation. From 7563e5498d34049429246635865e01e7a3da7c88 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Sun, 19 Jul 2020 17:55:14 +0500 Subject: [PATCH 205/589] Old links are not working There is no content for the links are available. So I have removed the link so that people can directly hit the MyIgnite page to find the relevant content. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/7111 --- .../deployment/update/windows-as-a-service.md | 19 +------------------ 1 file changed, 1 insertion(+), 18 deletions(-) diff --git a/windows/deployment/update/windows-as-a-service.md b/windows/deployment/update/windows-as-a-service.md index 4390f47e44..f7d197912a 100644 --- a/windows/deployment/update/windows-as-a-service.md +++ b/windows/deployment/update/windows-as-a-service.md @@ -114,21 +114,4 @@ Secure your organization's deployment investment. ## Microsoft Ignite 2018 -Looking to learn more? These informative session replays from Microsoft Ignite 2018 (complete with downloadable slide decks) can provide some great insights on Windows as a service. - - -[BRK3018: Deploying Windows 10 in the enterprise using traditional and modern techniques](https://myignite.techcommunity.microsoft.com/sessions/64509#ignite-html-anchor) - -[BRK3019: Delivery Optimization deep dive: How to reduce internet bandwidth impact on your network](https://myignite.techcommunity.microsoft.com/sessions/64510#ignite-html-anchor) - -[BRK3020: Using AI to automate Windows and Office update staging with Windows Update for Business](https://myignite.techcommunity.microsoft.com/sessions/64513#ignite-html-anchor) - -[BRK3027: Deploying Windows 10: Making the update experience smooth and seamless](https://myignite.techcommunity.microsoft.com/sessions/64612#ignite-html-anchor) - -[BRK3039: Windows 10 and Microsoft Microsoft 365 Apps for enterprise lifecycle and servicing update](https://myignite.techcommunity.microsoft.com/sessions/66763#ignite-html-anchor) - -[BRK3211: Ask the Experts: Successfully deploying, servicing, managing Windows 10](https://myignite.techcommunity.microsoft.com/sessions/65963#ignite-html-anchor) - -[THR2234: Windows servicing and delivery fundamentals](https://myignite.techcommunity.microsoft.com/sessions/66741#ignite-html-anchor) - -[THR3006: The pros and cons of LTSC in the enterprise](https://myignite.techcommunity.microsoft.com/sessions/64512#ignite-html-anchor) +Looking to learn more? These informative session replays from Microsoft Ignite 2018 (complete with downloadable slide decks) can provide some great insights on Windows as a service. See, [MyIgnite - Session catalog](https://myignite.techcommunity.microsoft.com/sessions). From 1072a9a5d26763d181019e9fdc58af115e86afbe Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Sun, 19 Jul 2020 17:59:20 +0500 Subject: [PATCH 206/589] Link upgradation As the old link was not working and the new terms page has been set up so updated the link to point to the correct terms page. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/7142 --- .../microsoft-defender-atp/minimum-requirements.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md index 8f47832251..94e862148a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md +++ b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md @@ -54,7 +54,7 @@ Microsoft Defender Advanced Threat Protection, on Windows Server, requires one o > [!NOTE] > Customers with a combined minimum of 50 licenses for one or more of the following may acquire Server SLs for Microsoft Defender Advanced Threat Protection for Servers (one per covered Server OSE): Microsoft Defender Advanced Threat Protection, Windows E5/A5, Microsoft 365 E5/A5 and Microsoft 365 E5 Security User SLs. This license applies to Microsoft Defender ATP for Linux. -For detailed licensing information, see the [Product terms page](https://www.microsoft.com/licensing/product-licensing/products) and work with your account team to learn the detailed terms and conditions for the product. +For detailed licensing information, see the [Product terms page](https://www.microsoft.com/licensing/terms/) and work with your account team to learn the detailed terms and conditions for the product. For more information on the array of features in Windows 10 editions, see [Compare Windows 10 editions](https://www.microsoft.com/windowsforbusiness/compare). From c7e7c5d123739cdf9685baac5ed08ab279216f65 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Sun, 19 Jul 2020 21:30:13 +0500 Subject: [PATCH 207/589] Update windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../microsoft-defender-atp/minimum-requirements.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md index 94e862148a..1f69f02e47 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md +++ b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md @@ -54,7 +54,7 @@ Microsoft Defender Advanced Threat Protection, on Windows Server, requires one o > [!NOTE] > Customers with a combined minimum of 50 licenses for one or more of the following may acquire Server SLs for Microsoft Defender Advanced Threat Protection for Servers (one per covered Server OSE): Microsoft Defender Advanced Threat Protection, Windows E5/A5, Microsoft 365 E5/A5 and Microsoft 365 E5 Security User SLs. This license applies to Microsoft Defender ATP for Linux. -For detailed licensing information, see the [Product terms page](https://www.microsoft.com/licensing/terms/) and work with your account team to learn the detailed terms and conditions for the product. +For detailed licensing information, see the [Product Terms site](https://www.microsoft.com/licensing/terms/) and work with your account team to learn the detailed terms and conditions for the product. For more information on the array of features in Windows 10 editions, see [Compare Windows 10 editions](https://www.microsoft.com/windowsforbusiness/compare). From 30cef1eb30d236c431fc038063cf13e399501698 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Sun, 19 Jul 2020 21:31:12 +0500 Subject: [PATCH 208/589] Update windows/deployment/update/windows-as-a-service.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- windows/deployment/update/windows-as-a-service.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/windows-as-a-service.md b/windows/deployment/update/windows-as-a-service.md index f7d197912a..e992f49cb7 100644 --- a/windows/deployment/update/windows-as-a-service.md +++ b/windows/deployment/update/windows-as-a-service.md @@ -114,4 +114,4 @@ Secure your organization's deployment investment. ## Microsoft Ignite 2018 -Looking to learn more? These informative session replays from Microsoft Ignite 2018 (complete with downloadable slide decks) can provide some great insights on Windows as a service. See, [MyIgnite - Session catalog](https://myignite.techcommunity.microsoft.com/sessions). +Looking to learn more? These informative session replays from Microsoft Ignite 2018 (complete with downloadable slide decks) can provide some great insights on Windows as a service. See [MyIgnite - Session catalog](https://myignite.techcommunity.microsoft.com/sessions). From be5c11d1316fd9a08ddd6955d177acddaac8e3b8 Mon Sep 17 00:00:00 2001 From: Kelly Baker Date: Sun, 19 Jul 2020 14:13:19 -0700 Subject: [PATCH 209/589] Edit pass: how-it-pros-can-use-configuration-service-providers Hi @rjagiewich This one is ready for your review and merge. No approval needed. Thanks! Kelly --- ...can-use-configuration-service-providers.md | 61 +++++++++---------- 1 file changed, 30 insertions(+), 31 deletions(-) diff --git a/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md b/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md index 641af623c3..cf2050b0ed 100644 --- a/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md +++ b/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md @@ -1,5 +1,5 @@ --- -title: Intro to configuration service providers for IT pros (Windows 10) +title: Configuration service providers for IT pros (Windows 10) description: Configuration service providers (CSPs) expose device configuration settings in Windows 10. ms.assetid: 25C1FDCA-0E10-42A1-A368-984FFDB2B7B6 ms.reviewer: @@ -14,25 +14,23 @@ ms.localizationpriority: medium ms.date: 07/27/2017 --- -# Introduction to configuration service providers (CSPs) for IT pros +# Configuration service providers for IT pros **Applies to** - Windows 10 - Windows 10 Mobile -Configuration service providers (CSPs) expose device configuration settings in Windows 10. This topic is written for people who have no experience with CSPs. +This article explains how IT pros and system administrators can take advantage of many settings available through configuration service providers (CSPs) to configure devices running Windows 10 and Windows 10 Mobile in their organizations. CSPs expose device configuration settings in Windows 10. The CSPs are used by mobile device management (MDM) service providers and are documented on the [Hardware Dev Center](https://go.microsoft.com/fwlink/p/?LinkId=717390). -The CSPs are documented on the [Hardware Dev Center](https://go.microsoft.com/fwlink/p/?LinkId=717390) because CSPs are used by mobile device management (MDM) service providers. This topic explains how IT pros and system administrators can take advantage of many settings available through CSPs to configure devices running Windows 10 and Windows 10 Mobile in their organizations. - ->[!NOTE] ->This explanation of CSPs and CSP documentation also applies to Windows Mobile 5, Windows Mobile 6, Windows Phone 7, and Windows Phone 8, but links to current CSPs are for Windows 10 and Windows 10 Mobile. +> [!NOTE] +> The information provided here about CSPs and CSP documentation also applies to Windows Mobile 5, Windows Mobile 6, Windows Phone 7, and Windows Phone 8, but links to current CSPs are for Windows 10 and Windows 10 Mobile. [See what's new for CSPs in Windows 10, version 1809.](https://docs.microsoft.com/windows/client-management/mdm/new-in-windows-mdm-enrollment-management#whatsnew1809) ## What is a CSP? -A CSP is an interface in the client operating system, between configuration settings specified in a provisioning document, and configuration settings on the device. CSPs are similar to Group Policy client-side extensions, in that they provide an interface to read, set, modify, or delete configuration settings for a given feature. Typically, these settings map to registry keys, files or permissions. Some of these settings are configurable, and some are read-only. +In the client operating system, a CSP is the interface between configuration settings specified in a provisioning document and configuration settings on the device. CSPs are similar to Group Policy client-side extensions in that they provide an interface to read, set, modify, or delete configuration settings for a given feature. Typically, these settings map to registry keys, files, or permissions. Some of these settings are configurable, and some are read-only. Starting with Windows Mobile 5.0, CSPs were used to manage Windows mobile devices. On the Windows 10 platform, the management approach for both desktop and mobile devices converges, taking advantage of the same CSPs to configure and manage all devices running Windows 10. @@ -42,15 +40,15 @@ CSPs are behind many of the management tasks and policies for Windows 10, both i ![how intune maps to csp](../images/policytocsp.png) -CSPs receive configuration policies in the XML-based SyncML format, pushed from an MDM-compliant management server, such as Microsoft Intune. Traditional enterprise management systems, such as Microsoft Endpoint Configuration Manager, can also target CSPs, by using a client-side WMI-to-CSP bridge. +CSPs receive configuration policies in the XML-based Synchronization Markup Language (SyncML) format, pushed from an MDM-compliant management server, such as Microsoft Intune. Traditional enterprise management systems, such as Microsoft Endpoint Configuration Manager, can also target CSPs, by using a client-side Windows Management Instrumentation (WMI)-to-CSP Bridge. ### Synchronization Markup Language (SyncML) -The Open Mobile Alliance Device Management (OMA-DM) protocol uses the XML-based Synchronization Markup Language (SyncML) for data exchange between compliant servers and clients. SyncML offers an open standard to use as an alternative to vendor-specific management solutions (such as WMI). The value for enterprises adopting industry standard management protocols is that it allows the management of a broader set of vendor devices using a single platform (such as Microsoft Intune). Device policies, including VPN connection profiles, are delivered to client devices formatted as in SyncML. The target CSP reads this information and applies the necessary configurations. +The Open Mobile Alliance Device Management (OMA-DM) protocol uses the XML-based SyncML for data exchange between compliant servers and clients. SyncML offers an open standard to use as an alternative to vendor-specific management solutions (such as WMI). The value for enterprises adopting industry standard management protocols is that it allows the management of a broader set of vendor devices using a single platform (such as Microsoft Intune). Device policies, including VPN connection profiles, are delivered to client devices formatted as in SyncML. The target CSP reads this information and applies the necessary configurations. ### The WMI-to-CSP Bridge -The WMI-to-CSP Bridge is a component allowing configuration of Windows 10 CSPs via scripts and traditional enterprise management software, such as Configuration Manager using Windows Management Instrumentation (WMI). The bridge is responsible for reading WMI commands and through a component called the common device configurator pass them to a CSP for application on the device. +The WMI-to-CSP Bridge is a component allowing configuration of Windows 10 CSPs using scripts and traditional enterprise management software, such as Configuration Manager using WMI. The bridge is responsible for reading WMI commands and through a component called the common device configurator pass them to a CSP for application on the device. [Learn how to use the WMI Bridge Provider with PowerShell.](https://go.microsoft.com/fwlink/p/?LinkId=761090) @@ -60,7 +58,7 @@ Generally, enterprises rely on Group Policy or MDM to configure and manage devic In addition, you may have unmanaged devices, or a large number of devices that you want to configure before enrolling them in management. You may also want to apply custom settings that aren't available through your MDM service. The [CSP documentation](#bkmk-csp-doc) can help you understand the settings that can be configured or queried. -Some of the topics in the [Windows 10 and Windows 10 Mobile](/windows/windows-10) library on Technet include links to applicable CSP reference topics, such as [Cortana integration in your business or enterprise](../cortana-at-work/cortana-at-work-overview.md), which links to the [Policy CSP](https://go.microsoft.com/fwlink/p/?LinkID=623244). In the CSP topics, you can learn about all of the available configuration settings. +Some of the articles in the [Windows 10 and Windows 10 Mobile](/windows/windows-10) library on Technet include links to applicable CSP reference topics, such as [Cortana integration in your business or enterprise](../cortana-at-work/cortana-at-work-overview.md), which links to the [Policy CSP](https://go.microsoft.com/fwlink/p/?LinkID=623244). In the CSP topics, you can learn about all of the available configuration settings. ### CSPs in Windows Configuration Designer @@ -116,13 +114,13 @@ The documentation for most CSPs will also include an XML example. ## CSP examples -CSPs provide access to a number of settings useful to enterprises. This section introduces two CSPs that an enterprise might find particularly useful. +CSPs provide access to a number of settings useful to enterprises. This section introduces the CSPs that an enterprise might find particularly useful. - [EnterpriseAssignedAccess CSP](https://go.microsoft.com/fwlink/p/?LinkID=618601) - The EnterpriseAssignedAccess configuration service provider allows IT administrators to configure settings on a Windows 10 Mobile device. An enterprise can make use of this CSP to create single-use or limited-use mobile devices, such as a handheld device that only runs a price-checking app. + The EnterpriseAssignedAccess CSP lets IT administrators configure settings on a Windows 10 Mobile device. An enterprise can make use of this CSP to create single-use or limited-use mobile devices, such as a handheld device that only runs a price-checking app. - In addition to lockscreen wallpaper, theme, time zone, and language, the EnterpriseAssignedAccess CSP includes AssignedAccessXml which can be used to lock down the device through the following settings: + In addition to lockscreen wallpaper, theme, time zone, and language, the EnterpriseAssignedAccess CSP includes AssignedAccessXml that can be used to lock down the device through the following settings: - Enabling or disabling the Action Center. - Configuring the number of tile columns in the Start layout. @@ -132,27 +130,28 @@ CSPs provide access to a number of settings useful to enterprises. This section - Restricting access to the context menu. - Enabling or disabling tile manipulation. - Creating role-specific configurations. + - [Policy CSP](https://go.microsoft.com/fwlink/p/?LinkID=623244) - The Policy configuration service provider enables the enterprise to configure policies on Windows 10 and Windows 10 Mobile. Some of these policy settings can also be applied using Group Policy, and the CSP documentation lists the equivalent Group Policy settings. + The Policy CSP enables the enterprise to configure policies on Windows 10 and Windows 10 Mobile. Some of these policy settings can also be applied using Group Policy, and the CSP documentation lists the equivalent Group Policy settings. Some of the settings available in the Policy CSP include the following: - - **Accounts**, such as whether a non-Microsoft account can be added to the device - - **Application management**, such as whether only Microsoft Store apps are allowed - - **Bluetooth**, such as the services allowed to use it - - **Browser**, such as restricting InPrivate browsing - - **Connectivity**, such as whether the device can be connected to a computer by USB - - **Defender** (for desktop only), such as day and time to scan - - **Device lock**, such as the type of PIN or password required to unlock the device - - **Experience**, such as allowing Cortana - - **Security**, such as whether provisioning packages are allowed - - **Settings**, such as allowing the user to change VPN settings - - **Start**, such as applying a standard Start layout - - **System**, such as allowing the user to reset the device - - **Text input**, such as allowing the device to send anonymized user text input data samples to Microsoft - - **Update**, such as specifying whether the device could use Microsoft Update, Windows Server Update Services (WSUS), or Microsoft Store - - **WiFi**, such as whether to enable Internet sharing + - **Accounts**, such as whether a non-Microsoft account can be added to the device. + - **Application management**, such as whether only Microsoft Store apps are allowed. + - **Bluetooth**, such as the services allowed to use it. + - **Browser**, such as restricting InPrivate browsing. + - **Connectivity**, such as whether the device can be connected to a computer by USB. + - **Defender** (for desktop only), such as day and time to scan. + - **Device lock**, such as the type of PIN or password required to unlock the device. + - **Experience**, such as allowing Cortana. + - **Security**, such as whether provisioning packages are allowed. + - **Settings**, such as enabling the user to change VPN settings. + - **Start**, such as applying a standard Start layout. + - **System**, such as allowing the user to reset the device. + - **Text input**, such as allowing the device to send anonymized user text input data samples to Microsoft. + - **Update**, such as whether the device can use Microsoft Update, Windows Server Update Services (WSUS), or Microsoft Store. + - **WiFi**, such as whether Internet sharing is enabled. Here is a list of CSPs supported on Windows 10 Enterprise, Windows 10 Mobile Enterprise, or both: From 4766cf957243087052c20ebf481c5e77ea1b05ab Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Mon, 20 Jul 2020 08:25:30 +0500 Subject: [PATCH 210/589] Update windows/deployment/windows-autopilot/white-glove.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- windows/deployment/windows-autopilot/white-glove.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/white-glove.md b/windows/deployment/windows-autopilot/white-glove.md index ecf4e2eed4..cbb5779ba9 100644 --- a/windows/deployment/windows-autopilot/white-glove.md +++ b/windows/deployment/windows-autopilot/white-glove.md @@ -59,7 +59,7 @@ To enable white glove deployment, an additional Autopilot profile setting must b ![allow white glove](images/allow-white-glove-oobe.png) -The Windows Autopilot for white glove deployment pre-provisioning process will apply all device-targeted policies from Intune. That includes certificates, security templates, settings, apps, and more – anything targeting the device. Additionally, any apps (Win32 or LOB) that are configured to install in the device context and targeted to the user that has been pre-assigned to the Autopilot device will also be installed. Please make sure not to target both win32 and LOB apps to the same device, otherwise the app installation may fail. +The Windows Autopilot for white glove deployment pre-provisioning process will apply all device-targeted policies from Intune. That includes certificates, security templates, settings, apps, and more – anything targeting the device. Additionally, any apps (Win32 or LOB) that are configured to install in the device context and targeted to the user that has been pre-assigned to the Autopilot device will also be installed. Please make sure not to target both win32 and LOB apps to the same device, otherwise the app installation may fail. > [!NOTE] > The white glove technician phase will install all device-targeted apps as well as any user-targeted, device-context apps that are targeted to the assigned user. If there is no assigned user, then it will only install the device-targeted apps. Other user-targeted policies will not apply until the user signs into the device. To verify these behaviors, be sure to create appropriate apps and policies targeted to devices and users. From 948aca506793eca9c6d3a1c37e43b8bf0b4335db Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Mon, 20 Jul 2020 16:53:49 +0500 Subject: [PATCH 211/589] Minor edits in Event Even logs show Failure code instead of result code so made some changes accordingly. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/7060 --- windows/security/threat-protection/auditing/event-4771.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/auditing/event-4771.md b/windows/security/threat-protection/auditing/event-4771.md index b099911afd..016b2db1be 100644 --- a/windows/security/threat-protection/auditing/event-4771.md +++ b/windows/security/threat-protection/auditing/event-4771.md @@ -226,6 +226,6 @@ For 4771(F): Kerberos pre-authentication failed. | **Pre-Authentication Type** | Value is **not 15** when account must use a smart card for authentication. For more information, see [Table 5. Kerberos Pre-Authentication types](#kerberos-preauthentication-types). | | **Pre-Authentication Type** | Value is **not 2** when only standard password authentication is in use in the organization. For more information, see [Table 5. Kerberos Pre-Authentication types](#kerberos-preauthentication-types). | | **Pre-Authentication Type** | Value is **not 138** when Kerberos Armoring is enabled for all Kerberos communications in the organization. For more information, see [Table 5. Kerberos Pre-Authentication types](#kerberos-preauthentication-types). | -| **Result Code** | **0x10** (KDC has no support for PADATA type (pre-authentication data)). This error can help you to more quickly identify smart-card related problems with Kerberos authentication. | -| **Result Code** | **0x18** ((Pre-authentication information was invalid), if you see, for example N events in last N minutes. This can be an indicator of brute-force attack on the account password, especially for highly critical accounts. | +| **Failure Code** | **0x10** (KDC has no support for PADATA type (pre-authentication data)). This error can help you to more quickly identify smart-card related problems with Kerberos authentication. | +| **Failure Code** | **0x18** ((Pre-authentication information was invalid), if you see, for example N events in last N minutes. This can be an indicator of brute-force attack on the account password, especially for highly critical accounts. | From b59d63b9188b7bd00a3eb1d0c0245d0d0259b486 Mon Sep 17 00:00:00 2001 From: Ben Alfasi Date: Mon, 20 Jul 2020 15:45:03 +0300 Subject: [PATCH 212/589] 1 --- .../microsoft-defender-atp/alerts.md | 8 +- .../exposed-apis-odata-samples.md | 221 +++++++++++------- .../microsoft-defender-atp/get-alerts.md | 184 ++++++++++++--- .../microsoft-defender-atp/get-machines.md | 2 +- 4 files changed, 305 insertions(+), 110 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/alerts.md b/windows/security/threat-protection/microsoft-defender-atp/alerts.md index e8811269cd..820026e626 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/alerts.md @@ -49,9 +49,9 @@ lastEventTime | Nullable DateTimeOffset | The last occurrence of the event that firstEventTime | Nullable DateTimeOffset | The first occurrence of the event that triggered the alert on that device. lastUpdateTime | Nullable DateTimeOffset | The date and time (in UTC) the alert was last updated. resolvedTime | Nullable DateTimeOffset | The date and time in which the status of the alert was changed to 'Resolved'. -incidentId | Nullable Long | The [Incident](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/view-incidents-queue) ID of the Alert. -investigationId | Nullable Long | The [Investigation](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/automated-investigations) ID related to the Alert. -investigationState | Nullable Enum | The current state of the [Investigation](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/automated-investigations). Possible values are: 'Unknown', 'Terminated', 'SuccessfullyRemediated', 'Benign', 'Failed', 'PartiallyRemediated', 'Running', 'PendingApproval', 'PendingResource', 'PartiallyInvestigated', 'TerminatedByUser', 'TerminatedBySystem', 'Queued', 'InnerFailure', 'PreexistingAlert', 'UnsupportedOs', 'UnsupportedAlertType', 'SuppressedAlert'. +incidentId | Nullable Long | The [Incident](view-incidents-queue.md) ID of the Alert. +investigationId | Nullable Long | The [Investigation](automated-investigations.md) ID related to the Alert. +investigationState | Nullable Enum | The current state of the [Investigation](automated-investigations.md). Possible values are: 'Unknown', 'Terminated', 'SuccessfullyRemediated', 'Benign', 'Failed', 'PartiallyRemediated', 'Running', 'PendingApproval', 'PendingResource', 'PartiallyInvestigated', 'TerminatedByUser', 'TerminatedBySystem', 'Queued', 'InnerFailure', 'PreexistingAlert', 'UnsupportedOs', 'UnsupportedAlertType', 'SuppressedAlert'. assignedTo | String | Owner of the alert. severity | Enum | Severity of the alert. Possible values are: 'UnSpecified', 'Informational', 'Low', 'Medium' and 'High'. status | Enum | Specifies the current status of the alert. Possible values are: 'Unknown', 'New', 'InProgress' and 'Resolved'. @@ -61,6 +61,8 @@ category| String | Category of the alert. detectionSource | String | Detection source. threatFamilyName | String | Threat family. machineId | String | ID of a [machine](machine.md) entity that is associated with the alert. +computerDnsName | String | [machine](machine.md) fully qualified name. +aadTenantId | String | The Azure Active Directory ID. comments | List of Alert comments | Alert Comment is an object that contains: comment string, createdBy string and createTime date time. ### Response example for getting single alert: diff --git a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-odata-samples.md b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-odata-samples.md index 908028109d..37e873ced5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-odata-samples.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-odata-samples.md @@ -29,98 +29,172 @@ Not all properties are filterable. ## Properties that supports $filter: -- [Alert](alerts.md): Id, IncidentId, AlertCreationTime, Status, Severity and Category. -- [Machine](machine.md): Id, ComputerDnsName, LastSeen, LastIpAddress, HealthStatus, OsPlatform, RiskScore, MachineTags and RbacGroupId. -- [MachineAction](machineaction.md): Id, Status, MachineId, Type, Requestor and CreationDateTimeUtc. +- [Alert](alerts.md): ```alertCreationTime```, ```lastUpdateTime```, ```incidentId```,```InvestigationId```, ```status```, ```severity``` and ```category```. +- [Machine](machine.md): ```ComputerDnsName```, ```LastSeen```, ```HealthStatus```, ```OsPlatform```, ```RiskScore``` and ```RbacGroupId```. +- [MachineAction](machineaction.md): ```Status```, ```MachineId```, ```Type```, ```Requestor``` and ```CreationDateTimeUtc```. +- [Indicator](ti-indicator.md): ```indicatorValue```, ```indicatorType```, ```creationTimeDateTimeUtc```, ```createdBy```, ```severity ``` and ```action ```. ### Example 1 -Get all the devices with the tag 'ExampleTag' +Get 10 latest Alerts with related Evidence ``` -HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=machineTags/any(tag: tag eq 'ExampleTag') +HTTP GET https://api.securitycenter.microsoft.com/api/alerts?$top=10&$expand=evidence ``` **Response:** -``` -HTTP/1.1 200 OK -Content-type: application/json +```json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Machines", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Alerts", "value": [ - { - "id": "1e5bc9d7e413ddd7902c2932e418702b84d0cc07", - "computerDnsName": "mymachine1.contoso.com", - "firstSeen": "2018-08-02T14:55:03.7791856Z", - "lastSeen": "2018-08-02T14:55:03.7791856Z", - "osPlatform": "Windows10", - "version": "1709", - "osProcessor": "x64", - "lastIpAddress": "172.17.230.209", - "lastExternalIpAddress": "167.220.196.71", - "osBuild": 18209, - "healthStatus": "Active", - "rbacGroupId": 140, - "rbacGroupName": "The-A-Team", - "riskScore": "Low", - "exposureLevel": "Medium", - "isAadJoined": true, - "aadDeviceId": "80fe8ff8-2624-418e-9591-41f0491218f9", - "machineTags": [ "test tag 1", "ExampleTag" ] - }, - ... - ] + { + "id": "da637306396589640224_1753239473", + "incidentId": 875832, + "investigationId": 478434, + "assignedTo": null, + "severity": "Low", + "status": "New", + "classification": null, + "determination": null, + "investigationState": "PendingApproval", + "detectionSource": "WindowsDefenderAv", + "category": "UnwantedSoftware", + "threatFamilyName": "InstallCore", + "title": "An active 'InstallCore' unwanted software was detected", + "description": "Potentially unwanted applications (PUA) often impact productivity and performance and are often unwanted in enterprise environments. This category of applications include torrent downloaders, cryptocurrency miners, browser advertising software, and evasion software.\n\nAn application is considered active if it is found running on the machine or it already has persistence mechanisms in place.\n\nBecause this PUA was active, take precautionary measures and check for residual signs of infection.", + "alertCreationTime": "2020-07-18T03:27:38.9483995Z", + "firstEventTime": "2020-07-18T03:25:39.6124549Z", + "lastEventTime": "2020-07-18T03:26:18.4362304Z", + "lastUpdateTime": "2020-07-18T03:28:19.76Z", + "resolvedTime": null, + "machineId": "97868b864dc8fa09cc8726c37a1fcd8ab582f3aa", + "computerDnsName": "temp2.redmond.corp.microsoft.com", + "rbacGroupName": "Ring0", + "aadTenantId": "12f988bf-1234-1234-91ab-2d7cd011db47", + "relatedUser": { + "userName": "temp2", + "domainName": "REDMOND" + }, + "comments": [], + "evidence": [ + { + "entityType": "File", + "sha1": "ff02786682af8a6ae2842b64c8da543c4d76823c", + "sha256": "16dafd771171b619a472bb23cd55bc069625be8de5ee01b37b41de1216b2bbb2", + "fileName": "Your File Is Ready To Download_1911150169.exe", + "filePath": "C:\\Users\\temp2\\Downloads", + "processId": null, + "processCommandLine": null, + "processCreationTime": null, + "parentProcessId": null, + "parentProcessCreationTime": null, + "ipAddress": null, + "url": null, + "accountName": null, + "domainName": null, + "userSid": null, + "aadUserId": null, + "userPrincipalName": null + }, + { + "entityType": "Process", + "sha1": "ff02786682af8a6ae2842b64c8da543c4d76823c", + "sha256": "16dafd771171b619a472bb23cd55bc069625be8de5ee01b37b41de1216b2bbb2", + "fileName": "Your File Is Ready To Download_1911150169.exe", + "filePath": "C:\\Users\\temp2\\Downloads", + "processId": 24348, + "processCommandLine": "\"Your File Is Ready To Download_1911150169.exe\" ", + "processCreationTime": "2020-07-18T03:25:38.5269993Z", + "parentProcessId": 16840, + "parentProcessCreationTime": "2020-07-18T02:12:32.8616797Z", + "ipAddress": null, + "url": null, + "accountName": null, + "domainName": null, + "userSid": null, + "aadUserId": null, + "userPrincipalName": null + }, + { + "entityType": "User", + "sha1": null, + "sha256": null, + "fileName": null, + "filePath": null, + "processId": null, + "processCommandLine": null, + "processCreationTime": null, + "parentProcessId": null, + "parentProcessCreationTime": null, + "ipAddress": null, + "url": null, + "accountName": "temp2", + "domainName": "REDMOND", + "userSid": "S-1-5-21-1127532184-1642412920-1887927527-75363", + "aadUserId": "319dc320-4ce3-4cd7-a0de-c476d146342d", + "userPrincipalName": "temp2@microsoft.com" + } + ] + }, + ... + ] } ``` ### Example 2 -Get all the alerts that created after 2018-10-20 00:00:00 +Get all the alerts last updated after 2019-10-20 00:00:00 ``` -HTTP GET https://api.securitycenter.windows.com/api/alerts?$filter=alertCreationTime+gt+2018-11-22T00:00:00Z +HTTP GET https://api.securitycenter.windows.com/api/alerts?$filter=lastUpdateTime+ge+2019-11-22T00:00:00Z ``` **Response:** -``` -HTTP/1.1 200 OK -Content-type: application/json +```json { "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Alerts", "value": [ { - "id": "da637084217856368682_-292920499", - "incidentId": 66860, - "investigationId": 4416234, - "investigationState": "Running", - "assignedTo": "secop@contoso.com", - "severity": "Low", - "status": "New", - "classification": "TruePositive", - "determination": null, - "detectionSource": "WindowsDefenderAtp", - "category": "CommandAndControl", - "threatFamilyName": null, - "title": "Network connection to a risky host", - "description": "A network connection was made to a risky host which has exhibited malicious activity.", - "alertCreationTime": "2019-11-03T23:49:45.3823185Z", - "firstEventTime": "2019-11-03T23:47:16.2288822Z", - "lastEventTime": "2019-11-03T23:47:51.2966758Z", - "lastUpdateTime": "2019-11-03T23:55:52.6Z", - "resolvedTime": null, - "machineId": "986e5df8b73dacd43c8917d17e523e76b13c75cd", + "id": "da637308392288907382_-880718168", + "incidentId": 7587, + "investigationId": 723156, + "assignedTo": "secop123@contoso.com", + "severity": "Low", + "status": "New", + "classification": "TruePositive", + "determination": null, + "investigationState": "Queued", + "detectionSource": "WindowsDefenderAv", + "category": "SuspiciousActivity", + "threatFamilyName": "Meterpreter", + "title": "Suspicious 'Meterpreter' behavior was detected", + "description": "Malware and unwanted software are undesirable applications that perform annoying, disruptive, or harmful actions on affected machines. Some of these undesirable applications can replicate and spread from one machine to another. Others are able to receive commands from remote attackers and perform activities associated with cyber attacks.\n\nA malware is considered active if it is found running on the machine or it already has persistence mechanisms in place. Active malware detections are assigned higher severity ratings.\n\nBecause this malware was active, take precautionary measures and check for residual signs of infection.", + "alertCreationTime": "2020-07-20T10:53:48.7657932Z", + "firstEventTime": "2020-07-20T10:52:17.6654369Z", + "lastEventTime": "2020-07-20T10:52:18.1362905Z", + "lastUpdateTime": "2020-07-20T10:53:50.19Z", + "resolvedTime": null, + "machineId": "12ee6dd8c833c8a052ea231ec1b19adaf497b625", + "computerDnsName": "temp123.middleeast.corp.microsoft.com", + "rbacGroupName": "MiddleEast", + "aadTenantId": "a839b112-1253-6432-9bf6-94542403f21c", + "relatedUser": { + "userName": "temp123", + "domainName": "MIDDLEEAST" + }, "comments": [ { "comment": "test comment for docs", - "createdBy": "secop@contoso.com", - "createdTime": "2019-11-05T14:08:37.8404534Z" + "createdBy": "secop123@contoso.com", + "createdTime": "2020-07-21T01:00:37.8404534Z" } - ] - }, - ... - ] + ], + "evidence": [] + } + ... + ] } ``` @@ -134,9 +208,7 @@ HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=riskScore+ **Response:** -``` -HTTP/1.1 200 OK -Content-type: application/json +```json { "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Machines", "value": [ @@ -175,9 +247,7 @@ HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=healthStat **Response:** -``` -HTTP/1.1 200 OK -Content-type: application/json +```json { "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Machines", "value": [ @@ -216,9 +286,7 @@ HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=lastSeen g **Response:** -``` -HTTP/1.1 200 OK -Content-type: application/json +```json { "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Machines", "value": [ @@ -257,10 +325,8 @@ HTTP GET https://api.securitycenter.windows.com/api/machineactions?$filter=requ **Response:** -``` -HTTP/1.1 200 OK -Content-type: application/json -{ +```json +json{ "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#MachineActions", "value": [ { @@ -291,10 +357,7 @@ HTTP GET https://api.securitycenter.windows.com/api/machines/123321d0c675eaa415 **Response:** -``` -HTTP/1.1 200 OK -Content-type: application/json - +```json 4 ``` diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-alerts.md index dc8f29bd61..b86855ce76 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alerts.md @@ -26,7 +26,11 @@ ms.topic: article ## API description Retrieves a collection of Alerts.
Supports [OData V4 queries](https://www.odata.org/documentation/). -
The OData's ```$filter``` query is supported on: ```alertCreationTime```, ```lastUpdateTime```, ```incidentId```,```InvestigationId```, ```status```, ```severity``` and ```category``` properties. +
OData supported operators: +
```$filter``` on: ```alertCreationTime```, ```lastUpdateTime```, ```incidentId```,```InvestigationId```, ```status```, ```severity``` and ```category``` properties. +
```$top``` with max value of 10,000 +
```$skip``` +
```$expand``` of ```evidence```
See examples at [OData queries with Microsoft Defender ATP](exposed-apis-odata-samples.md) @@ -70,14 +74,14 @@ Empty If successful, this method returns 200 OK, and a list of [alert](alerts.md) objects in the response body. -## Example +## Example 1 - Default **Request** Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/alerts +GET https://api.securitycenter.microsoft.com/api/alerts ``` [!include[Improve request performance](../../includes/improve-request-performance.md)] @@ -93,41 +97,167 @@ Here is an example of the response. ```json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Alerts", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Alerts", "value": [ { - "id": "da637084217856368682_-292920499", - "incidentId": 66860, - "investigationId": 4416234, - "assignedTo": "secop@contoso.com", - "severity": "Low", - "status": "New", - "classification": "TruePositive", - "determination": null, - "investigationState": "Running", - "detectionSource": "WindowsDefenderAtp", - "category": "CommandAndControl", - "threatFamilyName": null, - "title": "Network connection to a risky host", - "description": "A network connection was made to a risky host which has exhibited malicious activity.", - "alertCreationTime": "2019-11-03T23:49:45.3823185Z", - "firstEventTime": "2019-11-03T23:47:16.2288822Z", - "lastEventTime": "2019-11-03T23:47:51.2966758Z", - "lastUpdateTime": "2019-11-03T23:55:52.6Z", - "resolvedTime": null, - "machineId": "986e5df8b73dacd43c8917d17e523e76b13c75cd", + "id": "da637308392288907382_-880718168", + "incidentId": 7587, + "investigationId": 723156, + "assignedTo": "secop123@contoso.com", + "severity": "Low", + "status": "New", + "classification": "TruePositive", + "determination": null, + "investigationState": "Queued", + "detectionSource": "WindowsDefenderAv", + "category": "SuspiciousActivity", + "threatFamilyName": "Meterpreter", + "title": "Suspicious 'Meterpreter' behavior was detected", + "description": "Malware and unwanted software are undesirable applications that perform annoying, disruptive, or harmful actions on affected machines. Some of these undesirable applications can replicate and spread from one machine to another. Others are able to receive commands from remote attackers and perform activities associated with cyber attacks.\n\nA malware is considered active if it is found running on the machine or it already has persistence mechanisms in place. Active malware detections are assigned higher severity ratings.\n\nBecause this malware was active, take precautionary measures and check for residual signs of infection.", + "alertCreationTime": "2020-07-20T10:53:48.7657932Z", + "firstEventTime": "2020-07-20T10:52:17.6654369Z", + "lastEventTime": "2020-07-20T10:52:18.1362905Z", + "lastUpdateTime": "2020-07-20T10:53:50.19Z", + "resolvedTime": null, + "machineId": "12ee6dd8c833c8a052ea231ec1b19adaf497b625", + "computerDnsName": "temp123.middleeast.corp.microsoft.com", + "rbacGroupName": "MiddleEast", + "aadTenantId": "a839b112-1253-6432-9bf6-94542403f21c", + "relatedUser": { + "userName": "temp123", + "domainName": "MIDDLEEAST" + }, "comments": [ { "comment": "test comment for docs", - "createdBy": "secop@contoso.com", - "createdTime": "2019-11-05T14:08:37.8404534Z" + "createdBy": "secop123@contoso.com", + "createdTime": "2020-07-21T01:00:37.8404534Z" } - ] + ], + "evidence": [] } ... ] } ``` +## Example 2 - Get 10 latest Alerts with related Evidence + +**Request** + +Here is an example of the request. + +``` +GET https://api.securitycenter.microsoft.com/api/alerts?$top=10&$expand=evidence +``` + + +**Response** + +Here is an example of the response. + +>[!NOTE] +>The response list shown here may be truncated for brevity. All alerts will be returned from an actual call. + + +```json +{ + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Alerts", + "value": [ + { + "id": "da637306396589640224_1753239473", + "incidentId": 875832, + "investigationId": 478434, + "assignedTo": null, + "severity": "Low", + "status": "New", + "classification": null, + "determination": null, + "investigationState": "PendingApproval", + "detectionSource": "WindowsDefenderAv", + "category": "UnwantedSoftware", + "threatFamilyName": "InstallCore", + "title": "An active 'InstallCore' unwanted software was detected", + "description": "Potentially unwanted applications (PUA) often impact productivity and performance and are often unwanted in enterprise environments. This category of applications include torrent downloaders, cryptocurrency miners, browser advertising software, and evasion software.\n\nAn application is considered active if it is found running on the machine or it already has persistence mechanisms in place.\n\nBecause this PUA was active, take precautionary measures and check for residual signs of infection.", + "alertCreationTime": "2020-07-18T03:27:38.9483995Z", + "firstEventTime": "2020-07-18T03:25:39.6124549Z", + "lastEventTime": "2020-07-18T03:26:18.4362304Z", + "lastUpdateTime": "2020-07-18T03:28:19.76Z", + "resolvedTime": null, + "machineId": "97868b864dc8fa09cc8726c37a1fcd8ab582f3aa", + "computerDnsName": "temp2.redmond.corp.microsoft.com", + "rbacGroupName": "Ring0", + "aadTenantId": "12f988bf-1234-1234-91ab-2d7cd011db47", + "relatedUser": { + "userName": "temp2", + "domainName": "REDMOND" + }, + "comments": [], + "evidence": [ + { + "entityType": "File", + "sha1": "ff02786682af8a6ae2842b64c8da543c4d76823c", + "sha256": "16dafd771171b619a472bb23cd55bc069625be8de5ee01b37b41de1216b2bbb2", + "fileName": "Your File Is Ready To Download_1911150169.exe", + "filePath": "C:\\Users\\temp2\\Downloads", + "processId": null, + "processCommandLine": null, + "processCreationTime": null, + "parentProcessId": null, + "parentProcessCreationTime": null, + "ipAddress": null, + "url": null, + "accountName": null, + "domainName": null, + "userSid": null, + "aadUserId": null, + "userPrincipalName": null + }, + { + "entityType": "Process", + "sha1": "ff02786682af8a6ae2842b64c8da543c4d76823c", + "sha256": "16dafd771171b619a472bb23cd55bc069625be8de5ee01b37b41de1216b2bbb2", + "fileName": "Your File Is Ready To Download_1911150169.exe", + "filePath": "C:\\Users\\temp2\\Downloads", + "processId": 24348, + "processCommandLine": "\"Your File Is Ready To Download_1911150169.exe\" ", + "processCreationTime": "2020-07-18T03:25:38.5269993Z", + "parentProcessId": 16840, + "parentProcessCreationTime": "2020-07-18T02:12:32.8616797Z", + "ipAddress": null, + "url": null, + "accountName": null, + "domainName": null, + "userSid": null, + "aadUserId": null, + "userPrincipalName": null + }, + { + "entityType": "User", + "sha1": null, + "sha256": null, + "fileName": null, + "filePath": null, + "processId": null, + "processCommandLine": null, + "processCreationTime": null, + "parentProcessId": null, + "parentProcessCreationTime": null, + "ipAddress": null, + "url": null, + "accountName": "temp2", + "domainName": "REDMOND", + "userSid": "S-1-5-21-1127532184-1642412920-1887927527-75363", + "aadUserId": "319dc320-4ce3-4cd7-a0de-c476d146342d", + "userPrincipalName": "temp2@microsoft.com" + } + ] + }, + ... + ] +} +``` + + ## Related topics - [OData queries with Microsoft Defender ATP](exposed-apis-odata-samples.md) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-machines.md index e46fe6e5cd..74c8253d5d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machines.md @@ -26,7 +26,7 @@ ms.topic: article ## API description Retrieves a collection of [Machines](machine.md) that have communicated with Microsoft Defender ATP cloud on the last 30 days.
Supports [OData V4 queries](https://www.odata.org/documentation/). -
The OData's ```$filter``` query is supported on: ```computerDnsName```, ```lastSeen```, ```lastIpAddress```, ```healthStatus```, ```osPlatform```, ```riskScore```, ```rbacGroupId``` and ```machineTags``` properties. +
The OData's ```$filter``` query is supported on: ```computerDnsName```, ```lastSeen```, ```healthStatus```, ```osPlatform```, ```riskScore``` and ```rbacGroupId```.
See examples at [OData queries with Microsoft Defender ATP](exposed-apis-odata-samples.md) From 6147f2a512104b4e806941a940847861b4e16421 Mon Sep 17 00:00:00 2001 From: Caroline Gitonga Date: Mon, 20 Jul 2020 15:52:00 +0300 Subject: [PATCH 213/589] remove surplus period Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- windows/privacy/manage-windows-2004-endpoints.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/manage-windows-2004-endpoints.md b/windows/privacy/manage-windows-2004-endpoints.md index 1a25e9f2de..130b6b6f5d 100644 --- a/windows/privacy/manage-windows-2004-endpoints.md +++ b/windows/privacy/manage-windows-2004-endpoints.md @@ -65,7 +65,7 @@ The following methodology was used to derive these network endpoints: ||The following endpoints are used by Windows Error Reporting. To turn off traffic for these endpoints, enable the following Group Policy: Administrative Templates > Windows Components > Windows Error Reporting > Disable Windows Error Reporting. This means error reporting information will not be sent back to Microsoft.|HTTPS|*.telecommand.telemetry.microsoft.com| |||TLS v1.2|watson.*.microsoft.com| |Font Streaming|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#6-font-streaming)| -||The following endpoints are used to download fonts on demand. If you turn off traffic for these endpoints, you will not be able to download fonts on demand. .|HTTPS|fs.microsoft.com*| +||The following endpoints are used to download fonts on demand. If you turn off traffic for these endpoints, you will not be able to download fonts on demand. |HTTPS|fs.microsoft.com*| |Licensing|The following endpoint is used for online activation and some app licensing. To turn off traffic for this endpoint, disable the Windows License Manager Service. This will also block online activation and app licensing may not work.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#9-license-manager)| |||HTTPS|*licensing.mp.microsoft.com| |Maps|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-offlinemaps)| From 946469f5a970b972c12d02c121dd9a264bd20380 Mon Sep 17 00:00:00 2001 From: amirsc3 <42802974+amirsc3@users.noreply.github.com> Date: Mon, 20 Jul 2020 16:13:13 +0300 Subject: [PATCH 214/589] Update manage-automation-folder-exclusions.md Added a quick note to explain the resulting behavior once exclusions are set. This should help avoid some calls to support. --- .../manage-automation-folder-exclusions.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-automation-folder-exclusions.md b/windows/security/threat-protection/microsoft-defender-atp/manage-automation-folder-exclusions.md index a0dcdc9364..3512070e46 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-automation-folder-exclusions.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-automation-folder-exclusions.md @@ -67,6 +67,9 @@ You can specify the file names that you want to be excluded in a specific direct 4. Click **Save**. +>[!NOTE] +> Live Response commands to collect or examine excluded files will fail with error: "File is excluded". In addition, automated investigations will ignore the excluded items. + ## Edit an automation folder exclusion 1. In the navigation pane, select **Settings** > **Automation folder exclusions**. From 74749d8b7cba673f59d7ac7cb58f96396226b309 Mon Sep 17 00:00:00 2001 From: amirsc3 <42802974+amirsc3@users.noreply.github.com> Date: Mon, 20 Jul 2020 17:29:03 +0300 Subject: [PATCH 215/589] Update offboard-machines.md Adding important notes to help with customer confusion and avoid un-needed calls to support --- .../microsoft-defender-atp/offboard-machines.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md b/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md index 65e82f7f8a..61c0948f1c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md @@ -41,3 +41,7 @@ Follow the corresponding instructions depending on your preferred deployment met ## Offboard non-Windows devices - [Offboard non-Windows devices](configure-endpoints-non-windows.md#offboard-non-windows-devices) + +>[!NOTE] +> Offboarded devices will remain in the portal until [retention period](data-storage-privacy.md#how-long-will-microsoft-store-my-data-what-is-microsofts-data-retention-policy) for the device's data will expire. The status will be switched to ['Inactive'](fix-unhealthy-sensors.md#inactive-devices) 7 days after offboarding. +> In addition, [Devices that are not active in the last 30 days are not factored in on the data that reflects your organization's threat and vulnerability management exposure score and Microsoft Secure Score for Devices.](tvm-dashboard-insights.md) From 494635eb0bca0fd3318c18fc3e0a0b77cfaf83c2 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 07:42:15 -0700 Subject: [PATCH 216/589] Update manage-atp-post-migration-intune.md --- .../manage-atp-post-migration-intune.md | 30 +++++++++---------- 1 file changed, 15 insertions(+), 15 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 8cc7ef3d05..4d377c385d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -43,21 +43,21 @@ The following table lists various tasks you can perform to configure Microsoft D |Task |Resources to learn more | |---------|---------| -|Manage your organization's devices using Intune |[Protect devices with Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect) | -|Integrate Microsoft Defender ATP with Microsoft Intune as a Mobile Threat Defense solution
*(for Android devices and devices running Windows 10 or later)* |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | -|Use Conditional Access to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | -|Configure your Microsoft Defender Antivirus settings using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus)

[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender) | -|If necessary, specify exclusions for Microsoft Defender Antivirus

*Generally, you shouldn't need to apply exclusions. Microsoft Defender Antivirus includes a number of automatic exclusions based on known OS behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations.* |[Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows](https://support.microsoft.com/help/822158/virus-scanning-recommendations-for-enterprise-computers)

[Device restrictions: Microsoft Defender Antivirus Exclusions for Windows 10 devices](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions)

[Configure Microsoft Defender Antivirus exclusions on Windows Server 2016 or 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus)| -|Configure your attack surface reduction rules to target software behaviors that are often abused by attackers

*TIP: Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Audit mode in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender)

[Endpoint protection: Attack Surface Reduction](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json#attack-surface-reduction)

[Learn more about attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction) | -|Configure your network filtering block outbound connections from any app to IP addresses or domains with low reputations

*NOTES:*
- *Network filtering is also referred to as [network protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/network-protection).*
- *Make sure that Windows 10 devices have the latest [antimalware platform updates](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform) installed.*|[Endpoint protection: Network filtering](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#network-filtering)

[Review network protection events in Windows Event Viewer](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection#review-network-protection-events-in-windows-event-viewer) | -|Configure controlled folder access to protect against ransomware

*Controlled folder access is also referred to as antiransomware protection.* |[Endpoint protection: Controlled folder access](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#controlled-folder-access)

[Enable controlled folder access in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#intune) | -|Configure exploit protection to protect your organization's devices from malware that uses exploits to spread and infect other devices

*Exploit protection is also referred to as Exploit Guard.* |[Endpoint protection: Microsoft Defender Exploit Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-exploit-guard)

[Enable exploit protection in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection#intune) | -|Configure Microsoft Defender SmartScreen to protect against malicious sites and files on the internet.

*Microsoft Edge should be installed on your organization's devices. For protection on Google Chrome and FireFox browsers, configure exploit protection.* |[Microsoft Defender SmartScreen](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview)

[Device restrictions: Microsoft Defender SmartScreen](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-smartscreen)

[Policy settings for managing SmartScreen in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings#mdm-settings) | -|Configure Microsoft Defender Firewall to block unauthorized network traffic flowing into or out of your organization's devices |[Endpoint protection: Microsoft Defender Firewall](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-firewall)

[Microsoft Defender Firewall with Advanced Security](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security) | +|**Manage your organization's devices using Intune** |[Protect devices with Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect) | +|**Integrate Microsoft Defender ATP with Microsoft Intune** as a Mobile Threat Defense solution
*(for Android devices and devices running Windows 10 or later)* |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | +|**Use Conditional Access** to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | +|**Configure Microsoft Defender Antivirus settings** using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus)

[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender) | +|**If necessary, specify exclusions for Microsoft Defender Antivirus**

*Generally, you shouldn't need to apply exclusions. Microsoft Defender Antivirus includes a number of automatic exclusions based on known OS behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations.* |[Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows](https://support.microsoft.com/help/822158/virus-scanning-recommendations-for-enterprise-computers)

[Device restrictions: Microsoft Defender Antivirus Exclusions for Windows 10 devices](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions)

[Configure Microsoft Defender Antivirus exclusions on Windows Server 2016 or 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus)| +|**Configure your attack surface reduction rules** to target software behaviors that are often abused by attackers

*TIP: Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Audit mode in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender)

[Endpoint protection: Attack Surface Reduction](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json#attack-surface-reduction)

[Learn more about attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction) | +|**Configure your network filtering** to block outbound connections from any app to IP addresses or domains with low reputations

*NOTES:*
- *Network filtering is also referred to as [network protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/network-protection).*
- *Make sure that Windows 10 devices have the latest [antimalware platform updates](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform) installed.*|[Endpoint protection: Network filtering](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#network-filtering)

[Review network protection events in Windows Event Viewer](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection#review-network-protection-events-in-windows-event-viewer) | +|**Configure controlled folder access** to protect against ransomware

*[Controlled folder access](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/controlled-folders) is also referred to as antiransomware protection.* |[Endpoint protection: Controlled folder access](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#controlled-folder-access)

[Enable controlled folder access in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#intune) | +|**Configure exploit protection** to protect your organization's devices from malware that uses exploits to spread and infect other devices

*[Exploit protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/exploit-protection) is also referred to as Exploit Guard.* |[Endpoint protection: Microsoft Defender Exploit Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-exploit-guard)

[Enable exploit protection in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection#intune) | +|**Configure Microsoft Defender SmartScreen** to protect against malicious sites and files on the internet.

*Microsoft Edge should be installed on your organization's devices. For protection on Google Chrome and FireFox browsers, configure exploit protection.* |[Microsoft Defender SmartScreen](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview)

[Device restrictions: Microsoft Defender SmartScreen](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-smartscreen)

[Policy settings for managing SmartScreen in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings#mdm-settings) | +|**Configure Microsoft Defender Firewall** to block unauthorized network traffic flowing into or out of your organization's devices |[Endpoint protection: Microsoft Defender Firewall](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-firewall)

[Microsoft Defender Firewall with Advanced Security](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security) | |Configure encryption and BitLocker to protect information on your organization's devices running Windows |[Endpoint protection: Windows Encryption](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#windows-encryption)

[BitLocker for Windows 10 devices](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) | -|Configure Microsoft Defender Credential Guard to protect against credential theft attacks |For Windows 10, Windows Server 2016, and Windows Server 2019, see [Endpoint protection: Microsoft Defender Credential Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-credential-guard)

For Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, and Windows Server 2012 R2, see [Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft, Version 1 and 2](https://www.microsoft.com/download/details.aspx?id=36036) | -|Configure your Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) to view alerts, configure threat protection features, and view detailed information about your organization's overall security posture.

*You can also configure whether and what features end users can see in the Microsoft Defender Security Center.* |[Overview of the Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use)

[Endpoint protection: Microsoft Defender Security Center](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-security-center) | -|Configure Microsoft Defender Application Control to choose whether to audit or trust apps on your organization's devices

*Microsoft Defender Application Control is also referred to as [AppLocker](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview).*|[Deploy Microsoft Defender Application Control policies by using Microsoft Intune](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune)

[Endpoint protection: MIcrosoft Defender Application Control](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-application-control)

[AppLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/applocker-csp)| -| | | +|**Configure Microsoft Defender Credential Guard** to protect against credential theft attacks |For Windows 10, Windows Server 2016, and Windows Server 2019, see [Endpoint protection: Microsoft Defender Credential Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-credential-guard)

For Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, and Windows Server 2012 R2, see [Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft, Version 1 and 2](https://www.microsoft.com/download/details.aspx?id=36036) | +|**Configure your Microsoft Defender Security Center** ([https://securitycenter.windows.com](https://securitycenter.windows.com)) to view alerts, configure threat protection features, and view detailed information about your organization's overall security posture.

*You can also configure whether and what features end users can see in the Microsoft Defender Security Center.* |[Overview of the Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use)

[Endpoint protection: Microsoft Defender Security Center](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-security-center) | +|**Configure Microsoft Defender Application Control** to choose whether to audit or trust apps on your organization's devices

*Microsoft Defender Application Control is also referred to as [AppLocker](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview).*|[Deploy Microsoft Defender Application Control policies by using Microsoft Intune](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune)

[Endpoint protection: MIcrosoft Defender Application Control](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-application-control)

[AppLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/applocker-csp)| +|**Configure Microsoft Defender System Guard** to protect, maintain, and validate system integrity of your organization's Windows devices

*[System Guard](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-system-guard/system-guard-how-hardware-based-root-of-trust-helps-protect-windows) was formerly known as Device Guard.* | | From 85463f2fa987e1d2854f136be757abf59f45fba1 Mon Sep 17 00:00:00 2001 From: Christopher McClister <5713373+cmcclister@users.noreply.github.com> Date: Mon, 20 Jul 2020 11:41:43 -0700 Subject: [PATCH 217/589] Remove mdop in .openpublishing.publish.config.json under live branch. --- .openpublishing.publish.config.json | 952 ++++++++++++++-------------- 1 file changed, 468 insertions(+), 484 deletions(-) diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json index 2ffc227a40..14949b1153 100644 --- a/.openpublishing.publish.config.json +++ b/.openpublishing.publish.config.json @@ -1,484 +1,468 @@ -{ - "build_entry_point": "", - "docsets_to_publish": [ - { - "docset_name": "education", - "build_source_folder": "education", - "build_output_subfolder": "education", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "hololens", - "build_source_folder": "devices/hololens", - "build_output_subfolder": "hololens", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "internet-explorer", - "build_source_folder": "browsers/internet-explorer", - "build_output_subfolder": "internet-explorer", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "keep-secure", - "build_source_folder": "windows/keep-secure", - "build_output_subfolder": "keep-secure", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "mdop", - "build_source_folder": "mdop", - "build_output_subfolder": "mdop", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "microsoft-edge", - "build_source_folder": "browsers/edge", - "build_output_subfolder": "microsoft-edge", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "release-information", - "build_source_folder": "windows/release-information", - "build_output_subfolder": "release-information", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "smb", - "build_source_folder": "smb", - "build_output_subfolder": "smb", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "store-for-business", - "build_source_folder": "store-for-business", - "build_output_subfolder": "store-for-business", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "surface", - "build_source_folder": "devices/surface", - "build_output_subfolder": "surface", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "surface-hub", - "build_source_folder": "devices/surface-hub", - "build_output_subfolder": "surface-hub", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-access-protection", - "build_source_folder": "windows/access-protection", - "build_output_subfolder": "win-access-protection", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-app-management", - "build_source_folder": "windows/application-management", - "build_output_subfolder": "win-app-management", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-client-management", - "build_source_folder": "windows/client-management", - "build_output_subfolder": "win-client-management", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-configuration", - "build_source_folder": "windows/configuration", - "build_output_subfolder": "win-configuration", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-deployment", - "build_source_folder": "windows/deployment", - "build_output_subfolder": "win-deployment", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-device-security", - "build_source_folder": "windows/device-security", - "build_output_subfolder": "win-device-security", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-configure", - "build_source_folder": "windows/configure", - "build_output_subfolder": "windows-configure", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-deploy", - "build_source_folder": "windows/deploy", - "build_output_subfolder": "windows-deploy", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-hub", - "build_source_folder": "windows/hub", - "build_output_subfolder": "windows-hub", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-manage", - "build_source_folder": "windows/manage", - "build_output_subfolder": "windows-manage", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-plan", - "build_source_folder": "windows/plan", - "build_output_subfolder": "windows-plan", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-privacy", - "build_source_folder": "windows/privacy", - "build_output_subfolder": "windows-privacy", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-security", - "build_source_folder": "windows/security", - "build_output_subfolder": "windows-security", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-update", - "build_source_folder": "windows/update", - "build_output_subfolder": "windows-update", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-threat-protection", - "build_source_folder": "windows/threat-protection", - "build_output_subfolder": "win-threat-protection", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-whats-new", - "build_source_folder": "windows/whats-new", - "build_output_subfolder": "win-whats-new", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - } - ], - "notification_subscribers": [ - "elizapo@microsoft.com" - ], - "sync_notification_subscribers": [ - "daniha@microsoft.com" - ], - "branches_to_filter": [ - "" - ], - "git_repository_url_open_to_public_contributors": "https://github.com/MicrosoftDocs/windows-itpro-docs", - "git_repository_branch_open_to_public_contributors": "public", - "skip_source_output_uploading": false, - "need_preview_pull_request": true, - "resolve_user_profile_using_github": true, - "contribution_branch_mappings": {}, - "dependent_repositories": [ - { - "path_to_root": "_themes.pdf", - "url": "https://github.com/Microsoft/templates.docs.msft.pdf", - "branch": "master", - "branch_mapping": {} - }, - { - "path_to_root": "_themes", - "url": "https://github.com/Microsoft/templates.docs.msft", - "branch": "master", - "branch_mapping": {} - } - ], - "branch_target_mapping": { - "live": [ - "Publish", - "Pdf" - ], - "master": [ - "Publish", - "Pdf" - ] - }, - "need_generate_pdf_url_template": true, - "targets": { - "Pdf": { - "template_folder": "_themes.pdf" - } - }, - "need_generate_pdf": false, - "need_generate_intellisense": false -} +{ + "build_entry_point": "", + "docsets_to_publish": [ + { + "docset_name": "education", + "build_source_folder": "education", + "build_output_subfolder": "education", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "hololens", + "build_source_folder": "devices/hololens", + "build_output_subfolder": "hololens", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "internet-explorer", + "build_source_folder": "browsers/internet-explorer", + "build_output_subfolder": "internet-explorer", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "keep-secure", + "build_source_folder": "windows/keep-secure", + "build_output_subfolder": "keep-secure", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "microsoft-edge", + "build_source_folder": "browsers/edge", + "build_output_subfolder": "microsoft-edge", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "release-information", + "build_source_folder": "windows/release-information", + "build_output_subfolder": "release-information", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "smb", + "build_source_folder": "smb", + "build_output_subfolder": "smb", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "store-for-business", + "build_source_folder": "store-for-business", + "build_output_subfolder": "store-for-business", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "surface", + "build_source_folder": "devices/surface", + "build_output_subfolder": "surface", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "surface-hub", + "build_source_folder": "devices/surface-hub", + "build_output_subfolder": "surface-hub", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-access-protection", + "build_source_folder": "windows/access-protection", + "build_output_subfolder": "win-access-protection", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-app-management", + "build_source_folder": "windows/application-management", + "build_output_subfolder": "win-app-management", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-client-management", + "build_source_folder": "windows/client-management", + "build_output_subfolder": "win-client-management", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-configuration", + "build_source_folder": "windows/configuration", + "build_output_subfolder": "win-configuration", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-deployment", + "build_source_folder": "windows/deployment", + "build_output_subfolder": "win-deployment", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-device-security", + "build_source_folder": "windows/device-security", + "build_output_subfolder": "win-device-security", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-configure", + "build_source_folder": "windows/configure", + "build_output_subfolder": "windows-configure", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-deploy", + "build_source_folder": "windows/deploy", + "build_output_subfolder": "windows-deploy", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-hub", + "build_source_folder": "windows/hub", + "build_output_subfolder": "windows-hub", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-manage", + "build_source_folder": "windows/manage", + "build_output_subfolder": "windows-manage", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-plan", + "build_source_folder": "windows/plan", + "build_output_subfolder": "windows-plan", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-privacy", + "build_source_folder": "windows/privacy", + "build_output_subfolder": "windows-privacy", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-security", + "build_source_folder": "windows/security", + "build_output_subfolder": "windows-security", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-update", + "build_source_folder": "windows/update", + "build_output_subfolder": "windows-update", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-threat-protection", + "build_source_folder": "windows/threat-protection", + "build_output_subfolder": "win-threat-protection", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-whats-new", + "build_source_folder": "windows/whats-new", + "build_output_subfolder": "win-whats-new", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + } + ], + "notification_subscribers": [ + "elizapo@microsoft.com" + ], + "sync_notification_subscribers": [ + "daniha@microsoft.com" + ], + "branches_to_filter": [ + "" + ], + "git_repository_url_open_to_public_contributors": "https://github.com/MicrosoftDocs/windows-itpro-docs", + "git_repository_branch_open_to_public_contributors": "public", + "skip_source_output_uploading": false, + "need_preview_pull_request": true, + "resolve_user_profile_using_github": true, + "contribution_branch_mappings": {}, + "dependent_repositories": [ + { + "path_to_root": "_themes.pdf", + "url": "https://github.com/Microsoft/templates.docs.msft.pdf", + "branch": "master", + "branch_mapping": {} + }, + { + "path_to_root": "_themes", + "url": "https://github.com/Microsoft/templates.docs.msft", + "branch": "master", + "branch_mapping": {} + } + ], + "branch_target_mapping": { + "live": [ + "Publish", + "Pdf" + ], + "master": [ + "Publish", + "Pdf" + ] + }, + "need_generate_pdf_url_template": true, + "targets": { + "Pdf": { + "template_folder": "_themes.pdf" + } + }, + "need_generate_pdf": false, + "need_generate_intellisense": false +} \ No newline at end of file From d2277349726a7867f1f0fe8b8ab6686650729b39 Mon Sep 17 00:00:00 2001 From: Christopher McClister <5713373+cmcclister@users.noreply.github.com> Date: Mon, 20 Jul 2020 11:41:44 -0700 Subject: [PATCH 218/589] Remove mdop in .openpublishing.publish.config.json under master branch. --- .openpublishing.publish.config.json | 952 ++++++++++++++-------------- 1 file changed, 468 insertions(+), 484 deletions(-) diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json index 2ffc227a40..14949b1153 100644 --- a/.openpublishing.publish.config.json +++ b/.openpublishing.publish.config.json @@ -1,484 +1,468 @@ -{ - "build_entry_point": "", - "docsets_to_publish": [ - { - "docset_name": "education", - "build_source_folder": "education", - "build_output_subfolder": "education", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "hololens", - "build_source_folder": "devices/hololens", - "build_output_subfolder": "hololens", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "internet-explorer", - "build_source_folder": "browsers/internet-explorer", - "build_output_subfolder": "internet-explorer", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "keep-secure", - "build_source_folder": "windows/keep-secure", - "build_output_subfolder": "keep-secure", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "mdop", - "build_source_folder": "mdop", - "build_output_subfolder": "mdop", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "microsoft-edge", - "build_source_folder": "browsers/edge", - "build_output_subfolder": "microsoft-edge", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "release-information", - "build_source_folder": "windows/release-information", - "build_output_subfolder": "release-information", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "smb", - "build_source_folder": "smb", - "build_output_subfolder": "smb", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "store-for-business", - "build_source_folder": "store-for-business", - "build_output_subfolder": "store-for-business", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "surface", - "build_source_folder": "devices/surface", - "build_output_subfolder": "surface", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "surface-hub", - "build_source_folder": "devices/surface-hub", - "build_output_subfolder": "surface-hub", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-access-protection", - "build_source_folder": "windows/access-protection", - "build_output_subfolder": "win-access-protection", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-app-management", - "build_source_folder": "windows/application-management", - "build_output_subfolder": "win-app-management", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-client-management", - "build_source_folder": "windows/client-management", - "build_output_subfolder": "win-client-management", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-configuration", - "build_source_folder": "windows/configuration", - "build_output_subfolder": "win-configuration", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-deployment", - "build_source_folder": "windows/deployment", - "build_output_subfolder": "win-deployment", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-device-security", - "build_source_folder": "windows/device-security", - "build_output_subfolder": "win-device-security", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-configure", - "build_source_folder": "windows/configure", - "build_output_subfolder": "windows-configure", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-deploy", - "build_source_folder": "windows/deploy", - "build_output_subfolder": "windows-deploy", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-hub", - "build_source_folder": "windows/hub", - "build_output_subfolder": "windows-hub", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-manage", - "build_source_folder": "windows/manage", - "build_output_subfolder": "windows-manage", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-plan", - "build_source_folder": "windows/plan", - "build_output_subfolder": "windows-plan", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-privacy", - "build_source_folder": "windows/privacy", - "build_output_subfolder": "windows-privacy", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-security", - "build_source_folder": "windows/security", - "build_output_subfolder": "windows-security", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-update", - "build_source_folder": "windows/update", - "build_output_subfolder": "windows-update", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-threat-protection", - "build_source_folder": "windows/threat-protection", - "build_output_subfolder": "win-threat-protection", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-whats-new", - "build_source_folder": "windows/whats-new", - "build_output_subfolder": "win-whats-new", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - } - ], - "notification_subscribers": [ - "elizapo@microsoft.com" - ], - "sync_notification_subscribers": [ - "daniha@microsoft.com" - ], - "branches_to_filter": [ - "" - ], - "git_repository_url_open_to_public_contributors": "https://github.com/MicrosoftDocs/windows-itpro-docs", - "git_repository_branch_open_to_public_contributors": "public", - "skip_source_output_uploading": false, - "need_preview_pull_request": true, - "resolve_user_profile_using_github": true, - "contribution_branch_mappings": {}, - "dependent_repositories": [ - { - "path_to_root": "_themes.pdf", - "url": "https://github.com/Microsoft/templates.docs.msft.pdf", - "branch": "master", - "branch_mapping": {} - }, - { - "path_to_root": "_themes", - "url": "https://github.com/Microsoft/templates.docs.msft", - "branch": "master", - "branch_mapping": {} - } - ], - "branch_target_mapping": { - "live": [ - "Publish", - "Pdf" - ], - "master": [ - "Publish", - "Pdf" - ] - }, - "need_generate_pdf_url_template": true, - "targets": { - "Pdf": { - "template_folder": "_themes.pdf" - } - }, - "need_generate_pdf": false, - "need_generate_intellisense": false -} +{ + "build_entry_point": "", + "docsets_to_publish": [ + { + "docset_name": "education", + "build_source_folder": "education", + "build_output_subfolder": "education", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "hololens", + "build_source_folder": "devices/hololens", + "build_output_subfolder": "hololens", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "internet-explorer", + "build_source_folder": "browsers/internet-explorer", + "build_output_subfolder": "internet-explorer", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "keep-secure", + "build_source_folder": "windows/keep-secure", + "build_output_subfolder": "keep-secure", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "microsoft-edge", + "build_source_folder": "browsers/edge", + "build_output_subfolder": "microsoft-edge", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "release-information", + "build_source_folder": "windows/release-information", + "build_output_subfolder": "release-information", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "smb", + "build_source_folder": "smb", + "build_output_subfolder": "smb", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "store-for-business", + "build_source_folder": "store-for-business", + "build_output_subfolder": "store-for-business", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "surface", + "build_source_folder": "devices/surface", + "build_output_subfolder": "surface", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "surface-hub", + "build_source_folder": "devices/surface-hub", + "build_output_subfolder": "surface-hub", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-access-protection", + "build_source_folder": "windows/access-protection", + "build_output_subfolder": "win-access-protection", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-app-management", + "build_source_folder": "windows/application-management", + "build_output_subfolder": "win-app-management", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-client-management", + "build_source_folder": "windows/client-management", + "build_output_subfolder": "win-client-management", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-configuration", + "build_source_folder": "windows/configuration", + "build_output_subfolder": "win-configuration", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-deployment", + "build_source_folder": "windows/deployment", + "build_output_subfolder": "win-deployment", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-device-security", + "build_source_folder": "windows/device-security", + "build_output_subfolder": "win-device-security", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-configure", + "build_source_folder": "windows/configure", + "build_output_subfolder": "windows-configure", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-deploy", + "build_source_folder": "windows/deploy", + "build_output_subfolder": "windows-deploy", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-hub", + "build_source_folder": "windows/hub", + "build_output_subfolder": "windows-hub", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-manage", + "build_source_folder": "windows/manage", + "build_output_subfolder": "windows-manage", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-plan", + "build_source_folder": "windows/plan", + "build_output_subfolder": "windows-plan", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-privacy", + "build_source_folder": "windows/privacy", + "build_output_subfolder": "windows-privacy", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-security", + "build_source_folder": "windows/security", + "build_output_subfolder": "windows-security", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-update", + "build_source_folder": "windows/update", + "build_output_subfolder": "windows-update", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-threat-protection", + "build_source_folder": "windows/threat-protection", + "build_output_subfolder": "win-threat-protection", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-whats-new", + "build_source_folder": "windows/whats-new", + "build_output_subfolder": "win-whats-new", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + } + ], + "notification_subscribers": [ + "elizapo@microsoft.com" + ], + "sync_notification_subscribers": [ + "daniha@microsoft.com" + ], + "branches_to_filter": [ + "" + ], + "git_repository_url_open_to_public_contributors": "https://github.com/MicrosoftDocs/windows-itpro-docs", + "git_repository_branch_open_to_public_contributors": "public", + "skip_source_output_uploading": false, + "need_preview_pull_request": true, + "resolve_user_profile_using_github": true, + "contribution_branch_mappings": {}, + "dependent_repositories": [ + { + "path_to_root": "_themes.pdf", + "url": "https://github.com/Microsoft/templates.docs.msft.pdf", + "branch": "master", + "branch_mapping": {} + }, + { + "path_to_root": "_themes", + "url": "https://github.com/Microsoft/templates.docs.msft", + "branch": "master", + "branch_mapping": {} + } + ], + "branch_target_mapping": { + "live": [ + "Publish", + "Pdf" + ], + "master": [ + "Publish", + "Pdf" + ] + }, + "need_generate_pdf_url_template": true, + "targets": { + "Pdf": { + "template_folder": "_themes.pdf" + } + }, + "need_generate_pdf": false, + "need_generate_intellisense": false +} \ No newline at end of file From 7b2db310b5c9f0fb8d491aeb5e36f198edf1cd77 Mon Sep 17 00:00:00 2001 From: Christopher McClister <5713373+cmcclister@users.noreply.github.com> Date: Mon, 20 Jul 2020 11:42:11 -0700 Subject: [PATCH 219/589] Remove surface-hub in .openpublishing.publish.config.json under live branch. --- .openpublishing.publish.config.json | 16 ---------------- 1 file changed, 16 deletions(-) diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json index 14949b1153..72bbcc2a11 100644 --- a/.openpublishing.publish.config.json +++ b/.openpublishing.publish.config.json @@ -145,22 +145,6 @@ "build_entry_point": "docs", "template_folder": "_themes" }, - { - "docset_name": "surface-hub", - "build_source_folder": "devices/surface-hub", - "build_output_subfolder": "surface-hub", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, { "docset_name": "win-access-protection", "build_source_folder": "windows/access-protection", From 51aafd09bcdd736271885eaa30b7afcaabe0617a Mon Sep 17 00:00:00 2001 From: Christopher McClister <5713373+cmcclister@users.noreply.github.com> Date: Mon, 20 Jul 2020 11:42:13 -0700 Subject: [PATCH 220/589] Remove surface-hub in .openpublishing.publish.config.json under master branch. --- .openpublishing.publish.config.json | 16 ---------------- 1 file changed, 16 deletions(-) diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json index 14949b1153..72bbcc2a11 100644 --- a/.openpublishing.publish.config.json +++ b/.openpublishing.publish.config.json @@ -145,22 +145,6 @@ "build_entry_point": "docs", "template_folder": "_themes" }, - { - "docset_name": "surface-hub", - "build_source_folder": "devices/surface-hub", - "build_output_subfolder": "surface-hub", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, { "docset_name": "win-access-protection", "build_source_folder": "windows/access-protection", From cf7b90658c726391c393d32dadee6a3072496984 Mon Sep 17 00:00:00 2001 From: Christopher McClister <5713373+cmcclister@users.noreply.github.com> Date: Mon, 20 Jul 2020 11:43:16 -0700 Subject: [PATCH 221/589] Remove surface in .openpublishing.publish.config.json under live branch. --- .openpublishing.publish.config.json | 16 ---------------- 1 file changed, 16 deletions(-) diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json index 72bbcc2a11..5ba3dde324 100644 --- a/.openpublishing.publish.config.json +++ b/.openpublishing.publish.config.json @@ -129,22 +129,6 @@ "build_entry_point": "docs", "template_folder": "_themes" }, - { - "docset_name": "surface", - "build_source_folder": "devices/surface", - "build_output_subfolder": "surface", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, { "docset_name": "win-access-protection", "build_source_folder": "windows/access-protection", From 0cfe0c0ab224af026e1ceb56b4ff0a9864d85680 Mon Sep 17 00:00:00 2001 From: Christopher McClister <5713373+cmcclister@users.noreply.github.com> Date: Mon, 20 Jul 2020 11:43:17 -0700 Subject: [PATCH 222/589] Remove surface in .openpublishing.publish.config.json under master branch. --- .openpublishing.publish.config.json | 16 ---------------- 1 file changed, 16 deletions(-) diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json index 72bbcc2a11..5ba3dde324 100644 --- a/.openpublishing.publish.config.json +++ b/.openpublishing.publish.config.json @@ -129,22 +129,6 @@ "build_entry_point": "docs", "template_folder": "_themes" }, - { - "docset_name": "surface", - "build_source_folder": "devices/surface", - "build_output_subfolder": "surface", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, { "docset_name": "win-access-protection", "build_source_folder": "windows/access-protection", From 0bb2fc927491faf0a47a5a756256540113528097 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 20 Jul 2020 12:24:42 -0700 Subject: [PATCH 223/589] update toc --- windows/security/threat-protection/TOC.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 283a96ecc5..97ee4a7d60 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -601,6 +601,7 @@ ##### [Configure Micro Focus ArcSight to pull detections](microsoft-defender-atp/configure-arcsight.md) ##### [Microsoft Defender ATP detection fields](microsoft-defender-atp/api-portal-mapping.md) ##### [Pull detections using SIEM REST API](microsoft-defender-atp/pull-alerts-using-rest-api.md) +##### [Fetch alerts from customer tenant](microsoft-defender-atp/fetch-alerts-mssp.md) ##### [Troubleshoot SIEM tool integration issues](microsoft-defender-atp/troubleshoot-siem.md) #### [Partners & APIs]() @@ -616,11 +617,11 @@ ###### [Create and manage device tags](microsoft-defender-atp/machine-tags.md) #### [Managed security service provider (MSSP) integration]() -#####[Configure managed security service provider integration](microsoft-defender-atp/configure-mssp-support.md) +##### [Configure managed security service provider integration](microsoft-defender-atp/configure-mssp-support.md) ##### [Grant MSSP access to the portal](microsoft-defender-atp/grant-mssp-access.md) ##### [Access the MSSP customer portal](microsoft-defender-atp/access-mssp-portal.md) ##### [Configure alert notifications](microsoft-defender-atp/configure-mssp-notifications.md) -##### [Fetch alerts from customer tenant](microsoft-defender-atp/fetch-alerts-mssp.md) +##### [Get partner application access](microsoft-defender-atp/exposed-apis-create-app-partners.md) ### [Partner integration scenarios]() #### [Technical partner opportunities](microsoft-defender-atp/partner-integration.md) From 7e19c27ab797a7dddca9bc3ef3fe4c80f0f2ecae Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 20 Jul 2020 12:55:17 -0700 Subject: [PATCH 224/589] update toc --- windows/security/threat-protection/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 97ee4a7d60..7f82bc234e 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -601,7 +601,7 @@ ##### [Configure Micro Focus ArcSight to pull detections](microsoft-defender-atp/configure-arcsight.md) ##### [Microsoft Defender ATP detection fields](microsoft-defender-atp/api-portal-mapping.md) ##### [Pull detections using SIEM REST API](microsoft-defender-atp/pull-alerts-using-rest-api.md) -##### [Fetch alerts from customer tenant](microsoft-defender-atp/fetch-alerts-mssp.md) +##### [Fetch alerts from customer tenant](microsoft-defender-atp/fetch-alerts-mssp.md) ##### [Troubleshoot SIEM tool integration issues](microsoft-defender-atp/troubleshoot-siem.md) #### [Partners & APIs]() From ea2aa0668c9cc4069828ce8585ab79dc0a786ed6 Mon Sep 17 00:00:00 2001 From: Kelly Baker Date: Mon, 20 Jul 2020 13:02:30 -0700 Subject: [PATCH 225/589] Update provisioning-packages.md --- .../provisioning-packages/provisioning-packages.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configuration/provisioning-packages/provisioning-packages.md b/windows/configuration/provisioning-packages/provisioning-packages.md index ab565377fe..8ef07ace21 100644 --- a/windows/configuration/provisioning-packages/provisioning-packages.md +++ b/windows/configuration/provisioning-packages/provisioning-packages.md @@ -148,7 +148,7 @@ Windows ICD in Windows 10, version 1607, supported the following scenarios for I For more information about provisioning, watch the following videos: -- [Provisioning Windows 10 Devices with New Tools](https://go.microsoft.com/fwlink/p/?LinkId=615921) +- [Provisioning Windows 10 devices with new tools](https://go.microsoft.com/fwlink/p/?LinkId=615921) - [Windows 10 for Mobile Devices: Provisioning Is Not Imaging](https://go.microsoft.com/fwlink/p/?LinkId=615922) From f219a4b8706d2b1d8ec9d0932fd231e7d5ee58e3 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Mon, 20 Jul 2020 13:07:00 -0700 Subject: [PATCH 226/589] more updates --- ...sion-mistakes-microsoft-defender-antivirus.md | 5 ++++- ...re-exclusions-microsoft-defender-antivirus.md | 16 +++++++++++++--- ...le-exclusions-microsoft-defender-antivirus.md | 1 + ...le-exclusions-microsoft-defender-antivirus.md | 1 + 4 files changed, 19 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md index f0cac112ec..bbdf9fc0e5 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md @@ -20,7 +20,7 @@ manager: dansimp You can define an exclusion list for items that you don't want Microsoft Defender Antivirus to scan. Such excluded items could contain threats that make your device vulnerable. See [Configure and validate exclusions for Microsoft Defender Antivirus scans](configure-exclusions-microsoft-defender-antivirus.md) for more information. -This article describes some common mistakes that you should avoid when defining exclusions from Microsoft Defender Antivirus scans. +Also, see [Recommendations for defining exclusions](configure-exclusions-microsoft-defender-antivirus.md#recommendations-for-defining-exclusions) before defining your exclusion lists. ## Excluding certain trusted items There are certain files, file types, folders, or processes that you should not exclude from scanning even though you trust them to be not malicious. Refer to the following section for items that you should not exclude from scanning. @@ -97,6 +97,9 @@ There are certain files, file types, folders, or processes that you should not e - .wsf - .zip +>[!NOTE] +> You can chose to exclude file types, such as .gif, .jpg, .jpeg, .png if your environment has a modern, up-to-date software with a strict update policy to handle any vulnerabilities. + **Do not add exclusions for the following processes:** - AcroRd32.exe - bitsadmin.exe diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus.md index 78dd9f20a7..d0b737f37f 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus.md @@ -25,13 +25,23 @@ manager: dansimp You can exclude certain files, folders, processes, and process-opened files from Microsoft Defender Antivirus scans. Such exclusions apply to [scheduled scans](scheduled-catch-up-scans-microsoft-defender-antivirus.md), [on-demand scans](run-scan-microsoft-defender-antivirus.md), and [always-on real-time protection and monitoring](configure-real-time-protection-microsoft-defender-antivirus.md). Exclusions for process-opened files only apply to real-time protection. ->[!WARNING] ->Defining exclusions lowers the protection offered by Microsoft Defender Antivirus. You should always evaluate the risks that are associated with implementing exclusions, and you should only exclude files that you are confident are not malicious. +## Recommendations for defining exclusions +Defining exclusions lowers the protection offered by Microsoft Defender Antivirus. You should always evaluate the risks that are associated with implementing exclusions, and you should only exclude files that you are confident are not malicious. +The following is a list of recommendations that you should keep in mind when defining exclusions: +- Exclusions are technically a protection gap—always consider additional mitigations when defining exclusions. Additional mitigations could be as simple as making sure the excluded location has the appropriate access-control lists (ACLs), audit policy, is processed by an up-to-date software, etc. +- Review the exclusions periodically. Re-check and re-enforce the mitigations as part of the review process. +- Ideally, avoid defining proactive exclusions. For instance, don't exclude something just because you think it might be a problem in the future. Use exclusions only for specific issues—mostly around performance, or sometimes around application compatibility that exclusions could mitigate. +- Audit the exclusion list changes. The security admin should preserve enough context around why a certain exclusion was added. You should be able to provide answer with specific reasoning as to why a certain path was excluded. + +## Configure and validate exclusions + +To configure and validate exclusions, see the following: - [Configure and validate exclusions based on file name, extension, and folder location](configure-extension-file-exclusions-microsoft-defender-antivirus.md). This enables you to exclude files from Microsoft Defender Antivirus scans based on their file extension, file name, or location. - [Configure and validate exclusions for files opened by processes](configure-process-opened-file-exclusions-microsoft-defender-antivirus.md). This enables you to exclude files from scans that have been opened by a specific process. ## Related articles -[Microsoft Defender Antivirus exclusions on Windows Server 2016](configure-server-exclusions-microsoft-defender-antivirus.md) \ No newline at end of file +- [Microsoft Defender Antivirus exclusions on Windows Server 2016](configure-server-exclusions-microsoft-defender-antivirus.md) +- [Common mistakes to avoid when defining exclusions](common-exclusion-mistakes-microsoft-defender-antivirus.md) \ No newline at end of file diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md index 30f77a7b34..a474f7f68a 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md @@ -569,3 +569,4 @@ You can also copy the string into a blank text file and attempt to save it with - [Configure and validate exclusions in Microsoft Defender Antivirus scans](configure-exclusions-microsoft-defender-antivirus.md) - [Configure and validate exclusions for files opened by processes](configure-process-opened-file-exclusions-microsoft-defender-antivirus.md) - [Configure Microsoft Defender Antivirus exclusions on Windows Server](configure-server-exclusions-microsoft-defender-antivirus.md) +- [Common mistakes to avoid when defining exclusions](common-exclusion-mistakes-microsoft-defender-antivirus.md) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md index ffe624dd8e..8ded21f66b 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md @@ -194,5 +194,6 @@ See [Use PowerShell cmdlets to configure and run Microsoft Defender Antivirus](u - [Configure and validate exclusions in Microsoft Defender Antivirus scans](configure-exclusions-microsoft-defender-antivirus.md) - [Configure and validate exclusions based on file name, extension, and folder location](configure-extension-file-exclusions-microsoft-defender-antivirus.md) - [Configure Microsoft Defender Antivirus exclusions on Windows Server](configure-server-exclusions-microsoft-defender-antivirus.md) +- [Common mistakes to avoid when defining exclusions](common-exclusion-mistakes-microsoft-defender-antivirus.md) - [Customize, initiate, and review the results of Microsoft Defender Antivirus scans and remediation](customize-run-review-remediate-scans-microsoft-defender-antivirus.md) - [Microsoft Defender Antivirus in Windows 10](microsoft-defender-antivirus-in-windows-10.md) From b20f3d4946047aaaf5180dd6f9e8763b2154c274 Mon Sep 17 00:00:00 2001 From: Dan Wesley <38053816+dan-wesley@users.noreply.github.com> Date: Mon, 20 Jul 2020 13:12:47 -0700 Subject: [PATCH 227/589] update page head add note about edge versions --- browsers/edge/available-policies.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 37bef54e3a..48d52140c5 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -1,5 +1,5 @@ --- -description: You can customize your organization’s browser settings in Microsoft Edge with Group Policy or Microsoft Intune, or other MDM service. When you do this, you set the policy once and then copy it onto many computers—that is, touch once, configure many. +description: You can customize your organization's browser settings in Microsoft Edge with Group Policy or Microsoft Intune, or other MDM service. When you do this, you set the policy once and then copy it onto many computers—that is, touch once, configure many. ms.assetid: 2e849894-255d-4f68-ae88-c2e4e31fa165 ms.reviewer: author: dansimp @@ -18,7 +18,10 @@ ms.localizationpriority: medium > Applies to: Microsoft Edge on Windows 10 and Windows 10 Mobile -You can customize your organization’s browser settings in Microsoft Edge with Group Policy or Microsoft Intune, or other MDM service. When you do this, you set the policy once and then copy it onto many computers—that is, touch once, configure many. For example, you can set up multiple security settings in a Group Policy Object (GPO) linked to a domain, and then apply those settings to every computer in the domain. +> [!NOTE] +> You've reached the documentation for Microsoft Edge version 45 and earlier. To see the documentation for Microsoft Edge version 77 or later, go to the [Microsoft Edge documentation landing page](https://docs.microsoft.com/DeployEdge/). + +You can customize your organization's browser settings in Microsoft Edge with Group Policy or Microsoft Intune, or other MDM service. When you do this, you set the policy once and then copy it onto many computers—that is, touch once, configure many. For example, you can set up multiple security settings in a Group Policy Object (GPO) linked to a domain, and then apply those settings to every computer in the domain. Other policy settings in Microsoft Edge include allowing Adobe Flash content to play automatically, provision a favorites list, set default search engine, and more. You configure a Group Policy setting in the Administrative Templates folders, which are registry-based policy settings that Group Policy enforces. Group Policy stores these settings in a specific registry location, which users cannot change. Also, Group Policy-aware Windows features and applications look for these settings in the registry, and if found the policy setting gets used instead of the regular settings. From 805ed6035454dda47eb432fca268392a56e9f209 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 20 Jul 2020 13:19:06 -0700 Subject: [PATCH 228/589] Update white-glove.md --- windows/deployment/windows-autopilot/white-glove.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/white-glove.md b/windows/deployment/windows-autopilot/white-glove.md index cbb5779ba9..540e70f2be 100644 --- a/windows/deployment/windows-autopilot/white-glove.md +++ b/windows/deployment/windows-autopilot/white-glove.md @@ -59,7 +59,7 @@ To enable white glove deployment, an additional Autopilot profile setting must b ![allow white glove](images/allow-white-glove-oobe.png) -The Windows Autopilot for white glove deployment pre-provisioning process will apply all device-targeted policies from Intune. That includes certificates, security templates, settings, apps, and more – anything targeting the device. Additionally, any apps (Win32 or LOB) that are configured to install in the device context and targeted to the user that has been pre-assigned to the Autopilot device will also be installed. Please make sure not to target both win32 and LOB apps to the same device, otherwise the app installation may fail. +The Windows Autopilot for white glove deployment pre-provisioning process will apply all device-targeted policies from Intune. That includes certificates, security templates, settings, apps, and more – anything targeting the device. Additionally, any apps (Win32 or LOB) that are configured to install in the device context and targeted to the user that has been pre-assigned to the Autopilot device will also be installed. Please make sure not to target both win32 and LOB apps to the same device, as this can make troub leshooting difficult if there are app installation failures. For more information, see [Add a Windows line-of-business app to Microsoft Intune](https://docs.microsoft.com/en-us/mem/intune/apps/lob-apps-windows). > [!NOTE] > The white glove technician phase will install all device-targeted apps as well as any user-targeted, device-context apps that are targeted to the assigned user. If there is no assigned user, then it will only install the device-targeted apps. Other user-targeted policies will not apply until the user signs into the device. To verify these behaviors, be sure to create appropriate apps and policies targeted to devices and users. From a8dbfdf7df00366bc507587e83feb7e4a5dd3502 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 20 Jul 2020 13:19:42 -0700 Subject: [PATCH 229/589] Update white-glove.md --- windows/deployment/windows-autopilot/white-glove.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/white-glove.md b/windows/deployment/windows-autopilot/white-glove.md index 540e70f2be..90911a4f34 100644 --- a/windows/deployment/windows-autopilot/white-glove.md +++ b/windows/deployment/windows-autopilot/white-glove.md @@ -59,7 +59,7 @@ To enable white glove deployment, an additional Autopilot profile setting must b ![allow white glove](images/allow-white-glove-oobe.png) -The Windows Autopilot for white glove deployment pre-provisioning process will apply all device-targeted policies from Intune. That includes certificates, security templates, settings, apps, and more – anything targeting the device. Additionally, any apps (Win32 or LOB) that are configured to install in the device context and targeted to the user that has been pre-assigned to the Autopilot device will also be installed. Please make sure not to target both win32 and LOB apps to the same device, as this can make troub leshooting difficult if there are app installation failures. For more information, see [Add a Windows line-of-business app to Microsoft Intune](https://docs.microsoft.com/en-us/mem/intune/apps/lob-apps-windows). +The Windows Autopilot for white glove deployment pre-provisioning process will apply all device-targeted policies from Intune. That includes certificates, security templates, settings, apps, and more – anything targeting the device. Additionally, any apps (Win32 or LOB) that are configured to install in the device context and targeted to the user that has been pre-assigned to the Autopilot device will also be installed. Please make sure not to target both win32 and LOB apps to the same device, as this can make troubleshooting difficult if there are app installation failures. For more information, see [Add a Windows line-of-business app to Microsoft Intune](https://docs.microsoft.com/en-us/mem/intune/apps/lob-apps-windows). > [!NOTE] > The white glove technician phase will install all device-targeted apps as well as any user-targeted, device-context apps that are targeted to the assigned user. If there is no assigned user, then it will only install the device-targeted apps. Other user-targeted policies will not apply until the user signs into the device. To verify these behaviors, be sure to create appropriate apps and policies targeted to devices and users. From 6c6cf534ba873a89841625c1469dbdd83386c22a Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 20 Jul 2020 13:20:27 -0700 Subject: [PATCH 230/589] Update white-glove.md --- windows/deployment/windows-autopilot/white-glove.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/white-glove.md b/windows/deployment/windows-autopilot/white-glove.md index 90911a4f34..7e1e22ef2e 100644 --- a/windows/deployment/windows-autopilot/white-glove.md +++ b/windows/deployment/windows-autopilot/white-glove.md @@ -59,7 +59,7 @@ To enable white glove deployment, an additional Autopilot profile setting must b ![allow white glove](images/allow-white-glove-oobe.png) -The Windows Autopilot for white glove deployment pre-provisioning process will apply all device-targeted policies from Intune. That includes certificates, security templates, settings, apps, and more – anything targeting the device. Additionally, any apps (Win32 or LOB) that are configured to install in the device context and targeted to the user that has been pre-assigned to the Autopilot device will also be installed. Please make sure not to target both win32 and LOB apps to the same device, as this can make troubleshooting difficult if there are app installation failures. For more information, see [Add a Windows line-of-business app to Microsoft Intune](https://docs.microsoft.com/en-us/mem/intune/apps/lob-apps-windows). +The Windows Autopilot for white glove deployment pre-provisioning process will apply all device-targeted policies from Intune. That includes certificates, security templates, settings, apps, and more – anything targeting the device. Additionally, any apps (Win32 or LOB) that are configured to install in the device context and targeted to the user that has been pre-assigned to the Autopilot device will also be installed. Please make sure not to target both win32 and LOB apps to the same device, as this can make troubleshooting difficult if there are app installation failures. For more information, see [Add a Windows line-of-business app to Microsoft Intune](https://docs.microsoft.com/mem/intune/apps/lob-apps-windows). > [!NOTE] > The white glove technician phase will install all device-targeted apps as well as any user-targeted, device-context apps that are targeted to the assigned user. If there is no assigned user, then it will only install the device-targeted apps. Other user-targeted policies will not apply until the user signs into the device. To verify these behaviors, be sure to create appropriate apps and policies targeted to devices and users. From ed4a015c259c043b81bca6ad37c95675b7a2a6bb Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 13:45:48 -0700 Subject: [PATCH 231/589] yanking 3 articles --- windows/security/threat-protection/TOC.md | 10 ++-- .../manage-atp-post-migration-mpcmdrun.md | 48 ------------------- .../manage-atp-post-migration-powershell.md | 48 ------------------- .../manage-atp-post-migration-wmi.md | 48 ------------------- 4 files changed, 4 insertions(+), 150 deletions(-) delete mode 100644 windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-mpcmdrun.md delete mode 100644 windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-powershell.md delete mode 100644 windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-wmi.md diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 396f48c2f0..e6e4f2f6f0 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -28,12 +28,10 @@ #### [Onboard to Microsoft Defender ATP](microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md) ### [Manage Microsoft Defender ATP post migration]() #### [Overview](microsoft-defender-atp/manage-atp-post-migration.md) -#### [Use Intune](microsoft-defender-atp/manage-atp-post-migration-intune.md) -#### [Use Configuration Manager](microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md) -#### [Use PowerShell](microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md) -#### [Use Group Policy Objects](microsoft-defender-atp/manage-atp-post-migration-powershell.md) -#### [Use Windows Management Instrumentation](microsoft-defender-atp/manage-atp-post-migration-wmi.md) -#### [Use the Microsoft Malware Protection Command Line Utility](microsoft-defender-atp/manage-atp-post-migration-mpcmdrun.md) +#### [Intune](microsoft-defender-atp/manage-atp-post-migration-intune.md) +#### [Configuration Manager](microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md) +#### [Group Policy Objects](microsoft-defender-atp/manage-atp-post-migration-powershell.md) +#### [Other methods]() ## [Security administration]() ### [Threat & Vulnerability Management]() diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-mpcmdrun.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-mpcmdrun.md deleted file mode 100644 index ceb05f4934..0000000000 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-mpcmdrun.md +++ /dev/null @@ -1,48 +0,0 @@ ---- -title: Manage Microsoft Defender ATP using Microsoft Malware Protection Command Line Utility -description: Learn how to manage Microsoft Defender ATP with Microsoft Malware Protection Command Line Utility -keywords: post-migration, manage, operations, maintenance, utilization, Microsoft Malware Protection Command Line Utility, windows defender advanced threat protection, atp, edr -search.product: eADQiWindows 10XVcnh -search.appverid: met150 -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: security -ms.author: deniseb -author: denisebmsft -ms.localizationpriority: medium -manager: dansimp -audience: ITPro -ms.collection: M365-security-compliance -ms.topic: article ---- - -# Manage Microsoft Defender Advanced Threat Protection with Microsoft Malware Protection Command Line Utility - -We recommend using Microsoft Malware Protection Command Line Utility to manage threat protection features for the devices (also referred to as endpoints) within your organization. - -## Configuring Microsoft Defender ATP with Microsoft Malware Protection Command Line Utility - -The following table lists various tasks you can perform to configure Microsoft Defender ATP with Microsoft Malware Protection Command Line Utility. - -|Task |Resources to learn more | -|---------|---------| -|Manage your organization's devices using Microsoft Malware Protection Command Line Utility |link | -|task |link | - - -## Find your Microsoft Defender ATP settings in Microsoft Malware Protection Command Line Utility - -> [!IMPORTANT] -> You must be a WHAT in WHERE to configure Microsoft Malware Protection Command Line Utility. To learn more, see link. - -1. Go to the where and sign in. - -2. Under what choose what. - -3. next - -4. and next - -> [!TIP] -> Need help? See link. \ No newline at end of file diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-powershell.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-powershell.md deleted file mode 100644 index 5cc53fbc0d..0000000000 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-powershell.md +++ /dev/null @@ -1,48 +0,0 @@ ---- -title: Manage Microsoft Defender ATP using Group Policy Objects -description: Learn how to manage Microsoft Defender ATP with Group Policy Objects -keywords: post-migration, manage, operations, maintenance, utilization, Group Policy Objects, windows defender advanced threat protection, atp, edr -search.product: eADQiWindows 10XVcnh -search.appverid: met150 -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: security -ms.author: deniseb -author: denisebmsft -ms.localizationpriority: medium -manager: dansimp -audience: ITPro -ms.collection: M365-security-compliance -ms.topic: article ---- - -# Manage Microsoft Defender Advanced Threat Protection with Group Policy Objects - -We recommend using Group Policy Objects to manage threat protection features for the devices (also referred to as endpoints) within your organization. - -## Configuring Microsoft Defender ATP with Group Policy Objects - -The following table lists various tasks you can perform to configure Microsoft Defender ATP with Group Policy Objects. - -|Task |Resources to learn more | -|---------|---------| -|Manage your organization's devices using Group Policy Objects |link | -|task |link | - - -## Find your Microsoft Defender ATP settings in Group Policy Objects - -> [!IMPORTANT] -> You must be a WHAT in WHERE to configure Group Policy Objects. To learn more, see link. - -1. Go to the where and sign in. - -2. Under what choose what. - -3. next - -4. and next - -> [!TIP] -> Need help? See link. \ No newline at end of file diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-wmi.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-wmi.md deleted file mode 100644 index 458c2c3604..0000000000 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-wmi.md +++ /dev/null @@ -1,48 +0,0 @@ ---- -title: Manage Microsoft Defender ATP using Windows Management Instrumentation -description: Learn how to manage Microsoft Defender ATP with Windows Management Instrumentation -keywords: post-migration, manage, operations, maintenance, utilization, Windows Management Instrumentation, windows defender advanced threat protection, atp, edr -search.product: eADQiWindows 10XVcnh -search.appverid: met150 -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: security -ms.author: deniseb -author: denisebmsft -ms.localizationpriority: medium -manager: dansimp -audience: ITPro -ms.collection: M365-security-compliance -ms.topic: article ---- - -# Manage Microsoft Defender Advanced Threat Protection with Windows Management Instrumentation - -We recommend using Windows Management Instrumentation to manage threat protection features for the devices (also referred to as endpoints) within your organization. - -## Configuring Microsoft Defender ATP with Windows Management Instrumentation - -The following table lists various tasks you can perform to configure Microsoft Defender ATP with Windows Management Instrumentation. - -|Task |Resources to learn more | -|---------|---------| -|Manage your organization's devices using Windows Management Instrumentation |link | -|task |link | - - -## Find your Microsoft Defender ATP settings in Windows Management Instrumentation - -> [!IMPORTANT] -> You must be a WHAT in WHERE to configure Windows Management Instrumentation. To learn more, see link. - -1. Go to the where and sign in. - -2. Under what choose what. - -3. next - -4. and next - -> [!TIP] -> Need help? See link. \ No newline at end of file From cb59c083aca2c0a7814338625d1d69c43ea76637 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 13:46:36 -0700 Subject: [PATCH 232/589] Create manage-atp-post-migration-other-tools.md --- .../manage-atp-post-migration-other-tools.md | 48 +++++++++++++++++++ 1 file changed, 48 insertions(+) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md new file mode 100644 index 0000000000..5cc53fbc0d --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -0,0 +1,48 @@ +--- +title: Manage Microsoft Defender ATP using Group Policy Objects +description: Learn how to manage Microsoft Defender ATP with Group Policy Objects +keywords: post-migration, manage, operations, maintenance, utilization, Group Policy Objects, windows defender advanced threat protection, atp, edr +search.product: eADQiWindows 10XVcnh +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: deniseb +author: denisebmsft +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: article +--- + +# Manage Microsoft Defender Advanced Threat Protection with Group Policy Objects + +We recommend using Group Policy Objects to manage threat protection features for the devices (also referred to as endpoints) within your organization. + +## Configuring Microsoft Defender ATP with Group Policy Objects + +The following table lists various tasks you can perform to configure Microsoft Defender ATP with Group Policy Objects. + +|Task |Resources to learn more | +|---------|---------| +|Manage your organization's devices using Group Policy Objects |link | +|task |link | + + +## Find your Microsoft Defender ATP settings in Group Policy Objects + +> [!IMPORTANT] +> You must be a WHAT in WHERE to configure Group Policy Objects. To learn more, see link. + +1. Go to the where and sign in. + +2. Under what choose what. + +3. next + +4. and next + +> [!TIP] +> Need help? See link. \ No newline at end of file From 482523084fefada52d322b5f651e94d4c4b00b52 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Mon, 20 Jul 2020 13:48:50 -0700 Subject: [PATCH 233/589] Added xrefs --- ...tension-file-exclusions-microsoft-defender-antivirus.md | 2 +- ...-opened-file-exclusions-microsoft-defender-antivirus.md | 2 +- ...igure-server-exclusions-microsoft-defender-antivirus.md | 7 ++----- 3 files changed, 4 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md index a474f7f68a..5074fb8a80 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md @@ -32,7 +32,7 @@ You can exclude certain files from Microsoft Defender Antivirus scans by modifyi > [!NOTE] > Automatic exclusions apply only to Windows Server 2016 and above. The default antimalware policy we deploy at Microsoft doesn't set any exclusions by default. -This article describes how to configure exclusion lists for the files and folders. +This article describes how to configure exclusion lists for the files and folders. See [Recommendations for defining exclusions](configure-exclusions-microsoft-defender-antivirus.md#recommendations-for-defining-exclusions) before defining your exclusion lists. Exclusion | Examples | Exclusion list ---|---|--- diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md index 8ded21f66b..9fb92406dc 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md @@ -22,7 +22,7 @@ manager: dansimp - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -You can exclude files that have been opened by specific processes from Microsoft Defender Antivirus scans. +You can exclude files that have been opened by specific processes from Microsoft Defender Antivirus scans. See [Recommendations for defining exclusions](configure-exclusions-microsoft-defender-antivirus.md#recommendations-for-defining-exclusions) before defining your exclusion lists. This topic describes how to configure exclusion lists for the following: diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md index 59e059aeb5..3365f5ccee 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md @@ -43,7 +43,7 @@ In addition to server role-defined automatic exclusions, you can add or remove c ## Opt out of automatic exclusions -In Windows Server 2016 and 2019, the predefined exclusions delivered by Security intelligence updates only exclude the default paths for a role or feature. If you installed a role or feature in a custom path, or you want to manually control the set of exclusions, make sure to opt out of the automatic exclusions delivered in Security intelligence updates. But keep in mind that the exclusions that are delivered automatically are optimized for Windows Server 2016 and 2019 roles. +In Windows Server 2016 and 2019, the predefined exclusions delivered by Security intelligence updates only exclude the default paths for a role or feature. If you installed a role or feature in a custom path, or you want to manually control the set of exclusions, make sure to opt out of the automatic exclusions delivered in Security intelligence updates. But keep in mind that the exclusions that are delivered automatically are optimized for Windows Server 2016 and 2019 roles. See [Recommendations for defining exclusions](configure-exclusions-microsoft-defender-antivirus.md#recommendations-for-defining-exclusions) before defining your exclusion lists. > [!WARNING] > Opting out of automatic exclusions may adversely impact performance, or result in data corruption. The exclusions that are delivered automatically are optimized for Windows Server 2016 and 2019 roles. @@ -401,11 +401,8 @@ This section lists the folder exclusions that are delivered automatically when y ## Related articles - [Configure and validate exclusions for Microsoft Defender Antivirus scans](configure-exclusions-microsoft-defender-antivirus.md) - - [Configure and validate exclusions based on file name, extension, and folder location](configure-extension-file-exclusions-microsoft-defender-antivirus.md) - - [Configure and validate exclusions for files opened by processes](configure-process-opened-file-exclusions-microsoft-defender-antivirus.md) - +- - [Common mistakes to avoid when defining exclusions](common-exclusion-mistakes-microsoft-defender-antivirus.md) - [Customize, initiate, and review the results of Microsoft Defender Antivirus scans and remediation](customize-run-review-remediate-scans-microsoft-defender-antivirus.md) - - [Microsoft Defender Antivirus in Windows 10](microsoft-defender-antivirus-in-windows-10.md) From 0c7243c43105425ed083f3a84cd64e028b5c47f2 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 13:51:51 -0700 Subject: [PATCH 234/589] Update manage-atp-post-migration-other-tools.md --- .../manage-atp-post-migration-other-tools.md | 32 ++++++++----------- 1 file changed, 14 insertions(+), 18 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index 5cc53fbc0d..d84c0c1564 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -1,7 +1,7 @@ --- -title: Manage Microsoft Defender ATP using Group Policy Objects -description: Learn how to manage Microsoft Defender ATP with Group Policy Objects -keywords: post-migration, manage, operations, maintenance, utilization, Group Policy Objects, windows defender advanced threat protection, atp, edr +title: Manage Microsoft Defender ATP using PowerShell, WMI, and MPCmdRun.exe +description: Learn how to manage Microsoft Defender ATP with PowerShell, WMI, and MPCmdRun.exe +keywords: post-migration, manage, operations, maintenance, utilization, PowerShell, WMI, MPCmdRun.exe, windows defender advanced threat protection, atp, edr search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: w10 @@ -17,32 +17,28 @@ ms.collection: M365-security-compliance ms.topic: article --- -# Manage Microsoft Defender Advanced Threat Protection with Group Policy Objects +# Manage Microsoft Defender Advanced Threat Protection with PowerShell, WMI, and MPCmdRun.exe -We recommend using Group Policy Objects to manage threat protection features for the devices (also referred to as endpoints) within your organization. +We recommend using Intune to manage your threat protection features in Microsoft Defender ATP. However, you can -## Configuring Microsoft Defender ATP with Group Policy Objects +## Configuring Microsoft Defender ATP with PowerShell -The following table lists various tasks you can perform to configure Microsoft Defender ATP with Group Policy Objects. +The following table lists various tasks you can perform to configure Microsoft Defender ATP with PowerShell. |Task |Resources to learn more | |---------|---------| -|Manage your organization's devices using Group Policy Objects |link | +|task |link | |task |link | -## Find your Microsoft Defender ATP settings in Group Policy Objects +## Configuring Microsoft Defender ATP with Windows Management Instrumentation (WMI) -> [!IMPORTANT] -> You must be a WHAT in WHERE to configure Group Policy Objects. To learn more, see link. +steps -1. Go to the where and sign in. +## Configuring Microsoft Defender ATP with Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) -2. Under what choose what. +steps -3. next +## Next steps -4. and next - -> [!TIP] -> Need help? See link. \ No newline at end of file +step From 85e76b6dd171c8de68e39ceb0d0a47c935fb9516 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 13:52:52 -0700 Subject: [PATCH 235/589] Update manage-atp-post-migration-group-policy-objects.md --- ...atp-post-migration-group-policy-objects.md | 26 ++++--------------- 1 file changed, 5 insertions(+), 21 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md index 715c306fdb..2a3f09a593 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -1,5 +1,5 @@ --- -title: Manage Microsoft Defender ATP using PowerShell +title: Manage Microsoft Defender ATP using Group Policy Objects description: Learn how to manage Microsoft Defender ATP with PowerShell keywords: post-migration, manage, operations, maintenance, utilization, PowerShell, windows defender advanced threat protection, atp, edr search.product: eADQiWindows 10XVcnh @@ -17,32 +17,16 @@ ms.collection: M365-security-compliance ms.topic: article --- -# Manage Microsoft Defender Advanced Threat Protection with PowerShell +# Manage Microsoft Defender Advanced Threat Protection with Group Policy Objects We recommend using PowerShell to manage threat protection features for the devices (also referred to as endpoints) within your organization. -## Configuring Microsoft Defender ATP with PowerShell +## Configuring Microsoft Defender ATP with Group Policy Objects -The following table lists various tasks you can perform to configure Microsoft Defender ATP with PowerShell. +The following table lists various tasks you can perform to configure Microsoft Defender ATP with Group Policy Objects. |Task |Resources to learn more | |---------|---------| -|Manage your organization's devices using PowerShell |link | +|task |link | |task |link | - -## Find your Microsoft Defender ATP settings in PowerShell - -> [!IMPORTANT] -> You must be a WHAT in WHERE to configure PowerShell. To learn more, see link. - -1. Go to the where and sign in. - -2. Under what choose what. - -3. next - -4. and next - -> [!TIP] -> Need help? See link. \ No newline at end of file From 78a4b6451ca1a3292f3ae9f77e8f56fb608f3029 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 13:53:54 -0700 Subject: [PATCH 236/589] Update TOC.md --- windows/security/threat-protection/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index e6e4f2f6f0..a5957a45f8 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -31,7 +31,7 @@ #### [Intune](microsoft-defender-atp/manage-atp-post-migration-intune.md) #### [Configuration Manager](microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md) #### [Group Policy Objects](microsoft-defender-atp/manage-atp-post-migration-powershell.md) -#### [Other methods]() +#### [PowerShell, WMI, and MPCmdRun.exe](microsoft-defender-atp/manage-atp-post-migration-other-tools.md) ## [Security administration]() ### [Threat & Vulnerability Management]() From 1583f9267f9debaf6460d73662ac6a7356335825 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 13:57:10 -0700 Subject: [PATCH 237/589] Update manage-atp-post-migration-intune.md --- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 4d377c385d..e0fb0a4344 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -54,7 +54,7 @@ The following table lists various tasks you can perform to configure Microsoft D |**Configure exploit protection** to protect your organization's devices from malware that uses exploits to spread and infect other devices

*[Exploit protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/exploit-protection) is also referred to as Exploit Guard.* |[Endpoint protection: Microsoft Defender Exploit Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-exploit-guard)

[Enable exploit protection in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection#intune) | |**Configure Microsoft Defender SmartScreen** to protect against malicious sites and files on the internet.

*Microsoft Edge should be installed on your organization's devices. For protection on Google Chrome and FireFox browsers, configure exploit protection.* |[Microsoft Defender SmartScreen](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview)

[Device restrictions: Microsoft Defender SmartScreen](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-smartscreen)

[Policy settings for managing SmartScreen in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings#mdm-settings) | |**Configure Microsoft Defender Firewall** to block unauthorized network traffic flowing into or out of your organization's devices |[Endpoint protection: Microsoft Defender Firewall](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-firewall)

[Microsoft Defender Firewall with Advanced Security](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security) | -|Configure encryption and BitLocker to protect information on your organization's devices running Windows |[Endpoint protection: Windows Encryption](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#windows-encryption)

[BitLocker for Windows 10 devices](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) | +|**Configure encryption and BitLocker** to protect information on your organization's devices running Windows |[Endpoint protection: Windows Encryption](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#windows-encryption)

[BitLocker for Windows 10 devices](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) | |**Configure Microsoft Defender Credential Guard** to protect against credential theft attacks |For Windows 10, Windows Server 2016, and Windows Server 2019, see [Endpoint protection: Microsoft Defender Credential Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-credential-guard)

For Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, and Windows Server 2012 R2, see [Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft, Version 1 and 2](https://www.microsoft.com/download/details.aspx?id=36036) | |**Configure your Microsoft Defender Security Center** ([https://securitycenter.windows.com](https://securitycenter.windows.com)) to view alerts, configure threat protection features, and view detailed information about your organization's overall security posture.

*You can also configure whether and what features end users can see in the Microsoft Defender Security Center.* |[Overview of the Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use)

[Endpoint protection: Microsoft Defender Security Center](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-security-center) | |**Configure Microsoft Defender Application Control** to choose whether to audit or trust apps on your organization's devices

*Microsoft Defender Application Control is also referred to as [AppLocker](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview).*|[Deploy Microsoft Defender Application Control policies by using Microsoft Intune](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune)

[Endpoint protection: MIcrosoft Defender Application Control](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-application-control)

[AppLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/applocker-csp)| From c980980e0429b5ed69f464c4740f3c992b5b418f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 14:02:04 -0700 Subject: [PATCH 238/589] Update manage-atp-post-migration.md --- .../manage-atp-post-migration.md | 18 ++++++++---------- 1 file changed, 8 insertions(+), 10 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index 5539fa61b5..9bcc29b90a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -22,18 +22,16 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -After you have moved from your previous endpoint protection and antivirus solution to Microsoft Defender ATP, your next step is to manage your features and capabilities. Use this article as a guide to getting started managing your threat protection features in Microsoft Defender ATP post migration. +After you have moved from your previous endpoint protection and antivirus solution to Microsoft Defender ATP, your next step is to manage your features and capabilities. We recommend using Intune to manage your organization's devices and security settings. However, you can use other tools/methods, such as Configuration Manager or Group Policy Objects. -Depending on what you want to configure, you can use one of several methods/tools, as listed in the following table: -| Use this tool/method... | To configure these Microsoft Defender ATP settings | -|---|---| -|Intune (part of Microsoft Endpoint Manager) |list | -| Configuration Manager (formerly System Center Configuration Manager) | | -| Group Policy Objects (in Azure Active Directory Domain Services) | | -| PowerShell (Windows, Linux, and macOS) | | -| Windows Management Instrumentation (for Windows devices only) | | -| Microsoft Malware Protection Command Line Utility (this is often referred to as *MPCmdRun.exe*) | | +|Tool/Method |Description | +|---------|---------| +|[Intune](manage-atp-post-migration-intune.md) | | +|[Configuration Manager](manage-atp-post-migration-configuration-manager.md) | | +|[Group Policy Objects](manage-atp-post-migration-group-policy-objects.md) | | +|[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md) | | + ## Additional resources From 36377d2f356a94dc3f69d90a41853e90ba8d4e48 Mon Sep 17 00:00:00 2001 From: Harun Kimani <52551080+Gental-Giant@users.noreply.github.com> Date: Mon, 20 Jul 2020 14:06:38 -0700 Subject: [PATCH 239/589] Windows endpoints 1909 --- .../privacy/manage-windows-1909-endpoints.md | 140 ++++++++++++ .../privacy/manage-windows-2004-endpoints.md | 10 +- ...-endpoints-1909-non-enterprise-editions.md | 201 ++++++++++++++++++ 3 files changed, 347 insertions(+), 4 deletions(-) create mode 100644 windows/privacy/manage-windows-1909-endpoints.md create mode 100644 windows/privacy/windows-endpoints-1909-non-enterprise-editions.md diff --git a/windows/privacy/manage-windows-1909-endpoints.md b/windows/privacy/manage-windows-1909-endpoints.md new file mode 100644 index 0000000000..d5dd93f2d3 --- /dev/null +++ b/windows/privacy/manage-windows-1909-endpoints.md @@ -0,0 +1,140 @@ +--- +title: Connection endpoints for Windows 10 Enterprise, version 1909 +description: Explains what Windows 10 endpoints are used for, how to turn off traffic to them, and the impact. Specific to Windows 10 Enterprise, version 1909. +keywords: privacy, manage connections to Microsoft, Windows 10 +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.localizationpriority: high +audience: ITPro +author: gental-giant +ms.author: v-hakima +manager: joshbr +ms.collection: M365-security-compliance +ms.topic: article +ms.date: 7/15/2020 +--- +# Manage connection endpoints for Windows 10 Enterprise, version 1909 + +**Applies to** + +- Windows 10 Enterprise, version 1909 + +Some Windows components, app, and related services transfer data to Microsoft network endpoints. Some examples include: + +- Connecting to Microsoft Office and Windows sites to download the latest app and security updates. +- Connecting to email servers to send and receive email. +- Connecting to the web for every day web browsing. +- Connecting to the cloud to store and access backups. +- Using your location to show a weather forecast. + +Details about the different ways to control traffic to these endpoints are covered in [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md). +Where applicable, each endpoint covered in this topic includes a link to the specific details on how to control that traffic. + +The following methodology was used to derive these network endpoints: + +1. Set up the latest version of Windows 10 on a test virtual machine using the default settings. +2. Leave the device(s) running idle for a week ("idle" means a user is not interacting with the system/device). +3. Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic. +4. Compile reports on traffic going to public IP addresses. +5. The test virtual machine(s) was logged into using a local account, and was not joined to a domain or Azure Active Directory. +6. All traffic was captured in our lab using a IPV4 network. Therefore, no IPV6 traffic is reported here. +7. These tests were conducted in an approved Microsoft lab. It's possible your results may be different. +8. These tests were conducted for one week, but if you capture traffic for longer you may have different results. + +> [!NOTE] +> Microsoft uses global load balancers that can appear in network trace-routes. For example, an endpoint for *.akadns.net might be used to load balance requests to an Azure datacenter, which can change over time. + +## Windows 10 1909 Enterprise connection endpoints + +|Area|Description|Protocol|Destination| +|----------------|----------|----------|------------| +|Apps|||[Learn how to turn off traffic to the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore)| +||The following endpoint is used for the Weather app. To turn off traffic for this endpoint, either uninstall the Weather app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|HTTP|tile-service.weather.microsoft.com| +|||HTTP|tile-service.weather.microsoft.com/en-us/livetile/preinstall| +||The following endpoint is used for OneNote Live Tile. To turn off traffic for this endpoint, either uninstall OneNote or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|HTTP|cdn.onenote.net/*| +||The following endpoint is used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser. To turn off traffic for this endpoint, either uninstall the Photos app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|TLSv1.2|evoke-windowsservices-tas.msedge.net +|Certificates|The following endpoint is used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available. It is possible to turn off traffic to this endpoint, but it is not recommended because as root certificates are updated over time, applications and websites may stop working because they did not receive an updated root certificate the application uses. Additionally, it is used to download certificates that are publicly known to be fraudulent. These settings are critical for both Windows security and the overall security of the Internet. We do not recommend blocking this endpoint. If traffic to this endpoint is turned off, Windows no longer automatically downloads certificates known to be fraudulent, which increases the attack vector on the device.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#automatic-root-certificates-update)| +|||HTTP|ctldl.windowsupdate.com| +|Cortana and Live Tiles|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-cortana)| +||The following endpoints are related to Cortana and Live Tiles. If you turn off traffic for this endpoint, you will block updates to Cortana greetings, tips, and Live Tiles.|HTTP|www.bing.com*| +|||HTTP|www.bing.com/client/config| +|||TLSV1.2|fp.msedge.net| +|Device authentication|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback)| +||The following endpoint is used to authenticate a device. If you turn off traffic for this endpoint, the device will not be authenticated.|HTTPS|login.live.com*| +|Diagnostic Data|The following endpoints are used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service. If you turn off traffic for this endpoint, diagnostic and usage information, which helps Microsoft find and fix problems and improve our products and services, will not be sent back to Microsoft. ||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback)| +|||TLSv1.2|v10.events.data.microsoft.com| +|||TLSv1.2|v20.events.data.microsoft.com| +||The following endpoints are used by Windows Error Reporting. To turn off traffic for these endpoints, enable the following Group Policy: Administrative Templates > Windows Components > Windows Error Reporting > Disable Windows Error Reporting. This means error reporting information will not be sent back to Microsoft.|HTTP|*.telecommand.telemetry.microsoft.com| +|||TLS v1.2|watson.*.microsoft.com| +|||TLS v1.2|*.blob.core.windows.net| +|||HTTP|officehomeblobs.blob.core.windows.net| +|Licensing|The following endpoint is used for online activation and some app licensing. To turn off traffic for this endpoint, disable the Windows License Manager Service. This will also block online activation and app licensing may not work.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#9-license-manager)| +|||HTTP|*licensing.mp.microsoft.com| +|||HTTP|licensing.mp.microsoft.com/v7.0/licenses/content| +|Location|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-location)| +||The following endpoints are used for location data. If you turn off traffic for this endpoint, apps cannot use location data.|HTTP|inference.location.live.net| +|Maps|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-offlinemaps)| +||The following endpoints are used to check for updates to maps that have been downloaded for offline use. If you turn off traffic for this endpoint, offline maps will not be updated.|TLSv1.2|*maps.windows.com| +|| The following endpoints are used to check for updates to maps that have been downloaded for offline use.|HTTP|fs.microsoft.com*| +|Microsoft Account|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-microsoft-account)| +||The following endpoints are used for Microsoft accounts to sign in. If you turn off traffic for these endpoints, users cannot sign in with Microsoft accounts. |TLSv1.2|*login.live.com| +|Microsoft Edge|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#13-microsoft-edge)| +||This traffic is related to the Microsoft Edge browser.|HTTPS|iecvlist.microsoft.com| +|Microsoft forward link redirection service (FWLink)|The following endpoint is used by the Microsoft forward link redirection service (FWLink) to redirect permanent web links to their actual, sometimes transitory, URL. FWlinks are similar to URL shorteners, just longer. If you disable this endpoint, Windows Defender won't be able to update its malware definitions; links from Windows and other Microsoft products to the Web won't work; and PowerShell updateable Help won't update. To disable the traffic, instead disable the traffic that's getting forwarded.|HTTPS|go.microsoft.com| +|Microsoft Store|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| +||The following endpoints are used to revoke licenses for malicious apps in the Microsoft Store. To turn off traffic for this endpoint, either uninstall the app or disable the Microsoft Store. If you disable the Microsoft Store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them|TLSv1.2|1storecatalogrevocation.storequality.microsoft.com| +|||HTTP|storecatalogrevocation.storequality.microsoft.com| +||The following endpoint is used to get Microsoft Store analytics.|HTTP/TLSv1.2|manage.devcenter.microsoft.com| +||The following endpoints are used to communicate with Microsoft Store. If you turn off traffic for these endpoints, apps cannot be installed or updated from the Microsoft Store.|HTTP/TLSv1.2|displaycatalog.mp.microsoft.com/*| +|||HTTP|pti.store.microsoft.com/*| +|Network Connection Status Indicator (NCSI)|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-ncsi)| +||Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to this endpoint to determine if the device can communicate with the Internet. If you turn off traffic for this endpoint, NCSI won't be able to determine if the device is connected to the Internet and the network status tray icon will show a warning.|HTTP|www.msftconnecttest.com*| +|Office|The following endpoints are used to connect to the Office 365 portal's shared infrastructure, including Office in a browser. For more info, see Office 365 URLs and IP address ranges. You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps. If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| +|||HTTP/TLSv1.2|v10.events.data.microsoft.com/onecollector/1.0/| +||The following endpoints are used by Microsoft OfficeHub to get the metadata of Microsoft Office apps |TLSv1.2|c-ring.msedge.net| +|OneDrive|The following endpoints are related to OneDrive. If you turn off traffic for these endpoints, anything that relies on g.live.com to get updated URL information will no longer work.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-onedrive)| +|||TLSv1.2|*g.live.com| +|||HTTP|oneclient.sfx.ms| +|||HTTPS| logincdn.msauth.net| +|Settings|The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as System Initiated User Feedback and the Xbox app use it. If you turn off traffic for this endpoint, an app that uses this endpoint may stop working.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback)| +|||TLSv1.2|settings-win.data.microsoft.com| +|Skype|The following endpoint is used to retrieve Skype configuration values. To turn off traffic for this endpoint, either uninstall the app or disable the Microsoft Store. If you disable the Microsoft store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore)| +|||HTTP|*.pipe.aria.microsoft.com| +|||HTTP/TLSv1.2|config.edge.skype.com| +|Teams|The following endpoint is used for Microsoft Teams application.||[Learn how to turn off traffic to all of the following endpoint(s).]( manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| +|||HTTP|config.teams.microsoft.com| +|Windows Defender|The following endpoint is used for Windows Defender when Cloud-based Protection is enabled. If you turn off traffic for this endpoint, the device will not use Cloud-based Protection.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-defender)| +|||HTTP|wdcp.microsoft.com| +||The following endpoints are used for Windows Defender SmartScreen reporting and notifications. If you turn off traffic for these endpoints, SmartScreen notifications will not appear.|HTTP|*smartscreen-prod.microsoft.com| +|||HTTP|checkappexec.microsoft.com| +|Windows Spotlight|The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips. If you turn off traffic for these endpoints, Windows Spotlight will still try to deliver new lock screen images and updated content but it will fail; suggested apps, Microsoft account notifications, and Windows tips will not be downloaded. For more information, see Windows Spotlight.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-spotlight)| +|||TLSv1.2|arc.msn.com| +|||HTTP|ris.api.iris.microsoft.com| +|Windows Update|The following endpoint is used for Windows Update downloads of apps and OS updates, including HTTP downloads or HTTP downloads blended with peers. If you turn off traffic for this endpoint, Windows Update downloads will not be managed, as critical metadata that is used to make downloads more resilient is blocked. Downloads may be impacted by corruption (resulting in re-downloads of full files). Additionally, downloads of the same update by multiple devices on the same local network will not use peer devices for bandwidth reduction.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-updates)| +|||TLSv1.2|*.prod.do.dsp.mp.microsoft.com| +|||HTTP|emdl.ws.microsoft.com| +||The following endpoints are used to download operating system patches, updates, and apps from Microsoft Store. If you turn off traffic for these endpoints, the device will not be able to download updates for the operating system.|HTTP|*.dl.delivery.mp.microsoft.com| +|||HTTP|*.windowsupdate.com| +||The following endpoints enable connections to Windows Update, Microsoft Update, and the online services of the Store. If you turn off traffic for these endpoints, the device will not be able to connect to Windows Update and Microsoft Update to help keep the device secure. Also, the device will not be able to acquire and update apps from the Store. These are dependent on also enabling "Device authentication" and "Microsoft Account" endpoints.|HTTPS|*.delivery.mp.microsoft.com| +|||HTTP|*.update.microsoft.com| +||The following endpoint is used for content regulation. If you turn off traffic for this endpoint, the Windows Update Agent will be unable to contact the endpoint and fallback behavior will be used. This may result in content being either incorrectly.|HTTP|tsfe.trafficshaping.dsp.mp.microsoft.com| +## Other Windows 10 editions + +To view endpoints for other versions of Windows 10 Enterprise, see: +- [Manage connection endpoints for Windows 10, version 1903](manage-windows-1903-endpoints.md) +- [Manage connection endpoints for Windows 10, version 1809](manage-windows-1809-endpoints.md) +- [Manage connection endpoints for Windows 10, version 1803](manage-windows-1803-endpoints.md) +- [Manage connection endpoints for Windows 10, version 1709](manage-windows-1709-endpoints.md) + +To view endpoints for non-Enterprise Windows 10 editions, see: +- [Windows 10, version 1903, connection endpoints for non-Enterprise editions](windows-endpoints-1903-non-enterprise-editions.md) +- [Windows 10, version 1809, connection endpoints for non-Enterprise editions](windows-endpoints-1809-non-enterprise-editions.md) +- [Windows 10, version 1803, connection endpoints for non-Enterprise editions](windows-endpoints-1803-non-enterprise-editions.md) +- [Windows 10, version 1709, connection endpoints for non-Enterprise editions](windows-endpoints-1709-non-enterprise-editions.md) + + +## Related links + +- [Office 365 URLs and IP address ranges](https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US) +- [Network infrastructure requirements for Microsoft Intune](https://docs.microsoft.com/intune/get-started/network-infrastructure-requirements-for-microsoft-intune) diff --git a/windows/privacy/manage-windows-2004-endpoints.md b/windows/privacy/manage-windows-2004-endpoints.md index 73e8c9e0fd..bcf012ecda 100644 --- a/windows/privacy/manage-windows-2004-endpoints.md +++ b/windows/privacy/manage-windows-2004-endpoints.md @@ -28,17 +28,17 @@ Some Windows components, app, and related services transfer data to Microsoft ne - Connecting to the cloud to store and access backups. - Using your location to show a weather forecast. -Details about the different ways to control traffic to these endpoints are covered in [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md). -Where applicable, each endpoint covered in this topic includes a link to the specific details on how to control that traffic. +Details about the different ways to control traffic to these endpoints are covered in [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md). +Where applicable, each endpoint covered in this topic includes a link to the specific details on how to control that traffic. The following methodology was used to derive these network endpoints: -1. Set up the latest version of Windows 10 on a test virtual machine using the default settings. +1. Set up the latest version of Windows 10 on a test virtual machine using the default settings. 2. Leave the device(s) running idle for a week ("idle" means a user is not interacting with the system/device). 3. Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic. 4. Compile reports on traffic going to public IP addresses. 5. The test virtual machine(s) was logged into using a local account, and was not joined to a domain or Azure Active Directory. -6. All traffic was captured in our lab using a IPV4 network. Therefore, no IPV6 traffic is reported here. +6. All traffic was captured in our lab using a IPV4 network. Therefore, no IPV6 traffic is reported here. 7. These tests were conducted in an approved Microsoft lab. It's possible your results may be different. 8. These tests were conducted for one week, but if you capture traffic for longer you may have different results. @@ -117,12 +117,14 @@ The following methodology was used to derive these network endpoints: ## Other Windows 10 editions To view endpoints for other versions of Windows 10 Enterprise, see: +- [Manage connection endpoints for Windows 10, version 1909](manage-windows-1909-endpoints.md) - [Manage connection endpoints for Windows 10, version 1903](manage-windows-1903-endpoints.md) - [Manage connection endpoints for Windows 10, version 1809](manage-windows-1809-endpoints.md) - [Manage connection endpoints for Windows 10, version 1803](manage-windows-1803-endpoints.md) - [Manage connection endpoints for Windows 10, version 1709](manage-windows-1709-endpoints.md) To view endpoints for non-Enterprise Windows 10 editions, see: +- [Windows 10, version 1909, connection endpoints for non-Enterprise editions](windows-endpoints-1909-non-enterprise-editions.md) - [Windows 10, version 1903, connection endpoints for non-Enterprise editions](windows-endpoints-1903-non-enterprise-editions.md) - [Windows 10, version 1809, connection endpoints for non-Enterprise editions](windows-endpoints-1809-non-enterprise-editions.md) - [Windows 10, version 1803, connection endpoints for non-Enterprise editions](windows-endpoints-1803-non-enterprise-editions.md) diff --git a/windows/privacy/windows-endpoints-1909-non-enterprise-editions.md b/windows/privacy/windows-endpoints-1909-non-enterprise-editions.md new file mode 100644 index 0000000000..284aa42066 --- /dev/null +++ b/windows/privacy/windows-endpoints-1909-non-enterprise-editions.md @@ -0,0 +1,201 @@ +--- +title: Windows 10, version 1909, connection endpoints for non-Enterprise editions +description: Explains what Windows 10 endpoints are used in non-Enterprise editions. Specific to Windows 10, version 1909. +keywords: privacy, manage connections to Microsoft, Windows 10, Windows Server 2016 +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.localizationpriority: high +audience: ITPro +author: gental-giant +ms.author: v-hakima +manager: joshbr +ms.collection: M365-security-compliance +ms.topic: article +ms.date: 7/15/2020 +--- +# Windows 10, version 1909, connection endpoints for non-Enterprise editions + + **Applies to** + +- Windows 10 Home, version 1909 +- Windows 10 Professional, version 1909 +- Windows 10 Education, version 1909 + +In addition to the endpoints listed for [Windows 10 Enterprise](manage-windows-2004-endpoints.md), the following endpoints are available on other non-Enterprise editions of Windows 10, version 1909. + +The following methodology was used to derive the network endpoints: + +1. Set up the latest version of Windows 10 on a test virtual machine using the default settings. +2. Leave the device(s) running idle for a week ("idle" means a user is not interacting with the system/device). +3. Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic. +4. Compile reports on traffic going to public IP addresses. +5. The test virtual machine(s) was logged into using a local account, and was not joined to a domain or Azure Active Directory. +6. All traffic was captured in our lab using a IPV4 network. Therefore, no IPV6 traffic is reported here. +7. These tests were conducted in an approved Microsoft lab. It's possible your results may be different. +8. These tests were conducted for one week. If you capture traffic for longer you may have different results. + +> [!NOTE] +> Microsoft uses global load balancers that can appear in network trace-routes. For example, an endpoint for *.akadns.net might be used to load balance requests to an Azure datacenter, which can change over time. + +## Windows 10 Family + +| **Destination** | **Protocol** | **Description** | +| --- | --- | --- | +|*.delivery.mp.microsoft.com|HTTP|Used to download operating system patches, updates, and apps from Microsoft +|*.prod.do.dsp.mp.microsoft.com|TLSv1.2|Windows Update +|*.smartscreen-prod.microsoft.com|HTTP|Used for Windows Defender SmartScreen reporting and notifications +|*.update.microsoft.com|HTTP|Enables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store +|*.windowsupdate.com|HTTP|Used to download operating system patches and updates +|*dl.delivery.mp.microsoft.com|HTTP|Used to download operating system patches, updates, and apps from Microsoft +|arc.msn.com|TLSv1.2|Windows Spotlight +|config.edge.skype.com|TLSv1.2|Used to retrieve Skype configuration values +|config.teams.microsoft.com|HTTP|Used for Microsoft Teams application +|ctldl.windowsupdate.com/*|HTTP|Certificate Trust List +|displaycatalog.mp.microsoft.com/*|TLSv1.2|Used to communicate with Microsoft Store +|dmd.metaservices.microsoft.com|HTTP|Device Authentication +|evoke-windowsservices-tas.msedge.net|TLSv1.2|Used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser +|g.live.com|HTTP|OneDrive +|go.microsoft.com|HTTP|Windows Defender and/or Microsoft forward link redirection service (FWLink) +|img-prod-cms-rt-microsoft-com.akamaized.net|HTTP|Used to communicate with Microsoft Store +|licensing.mp.microsoft.com|TLSv1.2|Licensing +|login.live.com|TLSv1.2|Device Authentication +|logincdn.msauth.net|HTTP|Used for Microsoft accounts to sign-in +|manage.devcenter.microsoft.com|TLSv1.2|Microsoft Store analytics +|maps.windows.com|TLSv1.2|Used to check for updates to maps that have been downloaded for offline use +|ocsp.digicert.com|HTTP|Used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available +|oneclient.sfx.ms|HTTP|Used by OneDrive for Business to download and verify app updates +|ris.api.iris.microsoft.com|HTTP|Used to retrieve Windows Spotlight metadata that describes content +|settings-win.data.microsoft.com|TLSv1.2|Used for Windows apps to dynamically update their configuration +|api.asm.skype.com|TLSv1.2|Used to retrieve Skype configuration values +|browser.pipe.aria.microsoft.com|HTTP|Used to retrieve Skype configuration values +|client.wns.windows.com|HTTP|Used for the Windows Push Notification Services (WNS) +|fe3cr.delivery.mp.microsoft.com||Used to download operating system patches, updates, and apps from Microsoft Store +|checkappexec.microsoft.com|HTTP|Used for Windows Defender Smartscreen reporting and notifications +|emdl.ws.microsoft.com|HTTP|Windows Update +|inference.location.live.net|TLSv1.2|Used for Location Data +|iecvlist.microsoft.com|HTTP|This endpoint is related to Microsoft Edge +|mobile.pipe.aria.microsoft.com|HTTP|Office Telemetry +|nav.smartscreen.microsoft.com|HTTP|Used for Windows Defender SmartScreen reporting and notifications +|outlook.office365.com|HTTP|Used to connect to the Microsoft 365 admin center's shared infrastructure, including Office in a browser +|pti.store.microsoft.com/*|HTTP|Used to communicate with Microsoft Store +|*.blob.core.windows.net|HTTP|Windows Telemetry +|storage.live.com|TLSv1.2|OneDrive +|skydrivesync.policies.live.net|TLSv1.2|OneDrive +|tile-service.weather.microsoft.com|HTTP|Used for the Weather app +|tsfe.trafficshaping.dsp.mp.microsoft.com|HTTP|This endpoint is used for content regulation +|watson.telemetry.microsoft.com*|HTTP/TLSv1.2|Diagnostic Data +|10.events.data.microsoft.com/onecollector/1.0/|HTTP|Microsoft Office +|v10.events.data.microsoft.com|TLSv1.2|Used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service +|www.bing.com|HTTP/TLSv1.2|Used for Cortana and Live Tiles +|www.msftconnecttest.com|HTTP|Network Connection Status Indicator (NCSI) +|wdcp.microsoft.com|HTTP|Used for Windows Defender when Cloud-based Protection is enabled + +## Windows 10 Pro + +| **Destination** | **Protocol** | **Description** | +| --- | --- | --- | +|*.prod.do.dsp.mp.microsoft.com|HTTP/TLSv1.2|Windows Update +|api.onedrive.com|HTTP|One Drive +|smartscreen-prod.microsoft.com|HTTP|Used for Windows Defender SmartScreen reporting and notifications +|nav.smartscreen.microsoft.com|HTTP|Windows Defender +|*.update.microsoft.com|HTTP|Enables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store +|browser.pipe.aria.microsoft.com|HTTP|Used to retrieve Skype configuration values +|*.windowsupdate.com|HTTP|Used to download operating system patches and updates +|*.wns.windows.com|TLSv1.2|Used for the Windows Push Notification Services (WNS) +|*dl.delivery.mp.microsoft.com|HTTP|Used to download operating system patches, updates, and apps from Microsoft Store +|c-ring.msedge.net|TLSv1.2|Cortana and Live Tiles +|a-ring.msedge.net|TLSv1.2|Cortana and Live Tiles +|*storecatalogrevocation.storequality.microsoft.com|TLSv1.2|Used to revoke licenses for malicious apps on the Microsoft Store +|arc.msn.com|TLSv1.2|Windows Spotlight +|*.blob.core.windows.net|HTTP|Windows Telemetry +|cdn.onenote.net|HTTP|OneNote Live Tile +|checkappexec.microsoft.com|HTTP|Used for Windows Defender SmartScreen reporting and notifications +|config.edge.skype.com|TLSv1.2|Used to retrieve Skype configuration values +|config.teams.microsoft.com|HTTP|Used for Microsoft Teams application +|ctldl.windowsupdate.com||Used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available +|displaycatalog.mp.microsoft.com*|TLSv1.2|Microsoft Store +|emdl.ws.microsoft.com|HTTP|Windows Update +|fe2cr.update.microsoft.com|HTTP|Windows Update +|fe3cr.delivery.mp.microsoft.com|HTTP|Windows Update +|slscr.update.microsoft.com|HTTP|Windows Update +|evoke-windowsservices-tas.msedge.net|TLSv1.2|Used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser +|fp.msedge.net|TLSv1.2|Cortana and Live Tiles +|fp-vp.azureedge.net|TLSv1.2|Cortana and Live Tiles +|g.live.com|TLSv1.2|OneDrive +|go.microsoft.com|HTTP|Windows Defender and/or Microsoft forward link redirection service (FWLink) +|iecvlist.microsoft.com|HTTP|Microsoft Edge +|inference.location.live.net|TLSv1.2|Used for Location Data +|img-prod-cms-rt-microsoft-com.akamaized.net|HTTP|Used to communicate with Microsoft Store +|licensing.mp.microsoft.com*|TLSv1.2|Licensing +|login.live.com|TLSv1.2|Device Authentication +|logincdn.msauth.net|HTTP|Used for Microsoft accounts to sign in +|manage.devcenter.microsoft.com|TLSv1.2|Microsoft Store analytics +|maps.windows.com|TLSv1.2|Related to Maps application +|ocsp.digicert.com|HTTP|Used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available +|ocsp.msocsp.com|HTTP|Used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available +|oneclient.sfx.ms|HTTP|Used by OneDrive for Business to download and verify app updates +|mobile.pipe.aria.microsoft.com||Office Telemetry +|pti.store.microsoft.com/*|HTTP|Used to communicate with Microsoft Store +|ris.api.iris.microsoft.com|TLSv1.2|Windows Spotlight +|settings-win.data.microsoft.com|HTTP/TLSv1.2|Used for Windows apps to dynamically update their configuration +|spo-ring.msedge.net|TLSv1.2|Cortana and Live Tiles +|telecommand.telemetry.microsoft.com|TLSv1.2|Used by Windows Error Reporting ||tile-service.weather.microsoft.com|HTTP|Used for the Weather app +|tsfe.trafficshaping.dsp.mp.microsoft.com|HTTP|Used for content regulation +|v10.events.data.microsoft.com/onecollector/1.0/|HTTP/TLSv1.2|Diagnostic Data +|v10.events.data.microsoft.com|HTTP/TLSv1.2|Used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service +|watson.telemetry.microsoft.com*|HTTP/TLSv1.2|Used by Windows Error Reporting +|wdcp.microsoft.com|HTTP|Used for Windows Defender when Cloud-based Protection is enabled +|www.bing.com|HTTP/TLSv1.2|Cortana and Live Tiles +|www.msftconnecttest.com|HTTP|Network Connection Status Indicator (NCSI) +|outlook.office365.com|HTTP|Microsoft Office +|storage.live.com|TLSv1.2/HTTP|One Drive +|skydrivesync.policies.live.net|TLSv1.2|One Drive + +## Windows 10 Education + +| **Destination** | **Protocol** | **Description** | +| --- | --- | --- | +|arc.msn.com|HTTPS/TLSv1.2|Windows Spotlight +|*.dl.delivery.mp.microsoft.com|HTTP|Used to download operating system patches, updates, and apps from Microsoft +|client.wns.windows.com|TLSv1.2|Used for the Windows Push Notification Services (WNS) +|*storecatalogrevocation.storequality.microsoft.com|TLSv1.2|Used to revoke licenses for malicious apps on the Microsoft Store +|ctldl.windowsupdate.com|HTTP|Certificate Trust List +|dmd.metaservices.microsoft.com|HTTP|Device metadata +|Inference.location.live.net|TLSv1.2|Location +|oneclient.sfx.ms|HTTP|OneDrive +|storage.live.com|TLSv1.2|One Drive +|skydrivesync.policies.live.net|TLSv1.2|OneDrive +|slscr.update.microsoft.com|HTTP/TLSv1.2|Windows Update +|fe2cr.update.microsoft.com|HTTP/TLSv1.2|Windows Update +|fe3cr.delivery.mp.microsoft.com|HTTP/TLSv1.2|Windows Update +|tsfe.trafficshaping.dsp.mp.microsoft.com|HTTP/TLSv1.2|Windows Update +|officehomeblobs.blob.core.windows.net|HTTP|Windows Telemetry +|displaycatalog.mp.microsoft.com/*|HTTP/TLSv1.2|Microsoft Store +|img-prod-cms-rt-microsoft-com.akamaized.net|HTTP|Used to communicate with Microsoft Store +|config.teams.microsoft.com|HTTP|Teams +|api.asm.skype.com|TLSv1.2|Used to retrieve Skype configuration values +|config.edge.skype.com|HTTP/TLSv1.2|Used to retrieve Skype configuration values +|logincdn.msauth.net|HTTP|OneDrive +|iecvlist.microsoft.com|HTTP|Microsoft Edge +|download.windowsupdate.com|HTTP|Windows Update +|checkappexec.microsoft.com|HTTP|Windows Defender +|pti.store.microsoft.com/*|HTTP|Microsoft Store +|emdl.ws.microsoft.com|HTTP|Windows Update +|evoke-windowsservices-tas.msedge.net|TLSv1.2|Photos app +|g.live.com|TLSv1.2|OneDrive +|go.microsoft.com|HTTP|Windows Defender +|licensing.mp.microsoft.com|HTTP|Licensing +|login.live.com|TLSv1.2|Device Authentication +|manage.devcenter.microsoft.com|TLSv1.2|Microsoft Store analytics +|ocsp.digicert.com|HTTP|CRL and OCSP checks to the issuing certificate authorities +|ris.api.iris.microsoft.com|TLSv1.2|Windows spotlight +|telecommand.telemetry.microsoft.com|TLSv1.2|Used by Windows Error Reporting +|tile-service.weather.microsoft.com|HTTP|Used to download updates to the Weather app Live Tile +|v10.events.data.microsoft.com|TLSv1.2|Diagnostic Data +|V10.events.data.microsoft.com/onecollector/1.0/|HTTP|Diagnostic Data +|Watson.telemetry.microsoft.com/telemetry.request|HTTP|Diagnostic Data +|watson.telemetry.microsoft.com|HTTP|Diagnostic Data +|outlook.office365.com|HTTP|Microsoft Office +|www.bing.com|TLSv1.2|Used for updates for Cortana, apps, and Live Tiles +|www.msftconnecttest.com|HTTP|Network Connection (NCSI) \ No newline at end of file From 6d0221cf1d103751d91bb52485ad6a74b6336ff9 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Mon, 20 Jul 2020 14:59:13 -0700 Subject: [PATCH 240/589] Update policy-csps-supported-by-surface-hub.md Opening PR to update CSPs for Surface Hub. Draft in progress. --- .../mdm/policy-csps-supported-by-surface-hub.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md index ec48042286..29329bc947 100644 --- a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md +++ b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md @@ -9,11 +9,15 @@ ms.prod: w10 ms.technology: windows author: manikadhiman ms.localizationpriority: medium -ms.date: 07/18/2019 +ms.date: 07/21/2020 --- # Policy CSPs supported by Microsoft Surface Hub + +- [ApplicationManagement/AllowAppStoreAutoUpdate](policy-csp-applicationmanagement#applicationmanagement-allowappstoreautoupdate) +- [ApplicationManagement/AllowDeveloperUnlock](policy-csp-applicationmanagement#applicationmanagement-allowdeveloperunlock) +- [Accounts/AllowMicrosoftAccountConnection](policy-csp-accounts#accounts-allowmicrosoftaccountconnection - [Camera/AllowCamera](policy-csp-camera.md#camera-allowcamera) - [Cellular/ShowAppCellularAccessUI](policy-csp-cellular.md#cellular-showappcellularaccessui) - [Cryptography/AllowFipsAlgorithmPolicy](policy-csp-cryptography.md#cryptography-allowfipsalgorithmpolicy) From d1fbdc6221b5f62804f458a2dad10aa48af05d37 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 14:59:59 -0700 Subject: [PATCH 241/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index 9bcc29b90a..c9e212b61e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -38,5 +38,5 @@ After you have moved from your previous endpoint protection and antivirus soluti |Subject | Resources | |---|---| |General resources |- Microsoft Defender Antivirus documentation ([http://aka.ms/wdavtechnet](http://aka.ms/wdavtechnet))

- Microsoft Security Intelligence ([http://www.microsoft.com/mmpc](http://www.microsoft.com/mmpc))

- Microsoft Security blog ([https://aka.ms/mmpcblog](https://aka.ms/mmpcblog)) | -|Endpoint Protection (Configuration Manager) |[Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) | +|Endpoint Protection (Configuration Manager) |[Endpoint Protection documentation](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) | |Test and deploy Microsoft Defender Antivirus |- | \ No newline at end of file From 35e7cb478f2c21d1c05111bf2bd572bb54edbfb7 Mon Sep 17 00:00:00 2001 From: Harun Kimani <52551080+Gental-Giant@users.noreply.github.com> Date: Mon, 20 Jul 2020 15:14:57 -0700 Subject: [PATCH 242/589] Update manage-windows-1909-endpoints.md --- .../privacy/manage-windows-1909-endpoints.md | 43 +++++++++---------- 1 file changed, 21 insertions(+), 22 deletions(-) diff --git a/windows/privacy/manage-windows-1909-endpoints.md b/windows/privacy/manage-windows-1909-endpoints.md index d5dd93f2d3..8a0911bf91 100644 --- a/windows/privacy/manage-windows-1909-endpoints.md +++ b/windows/privacy/manage-windows-1909-endpoints.md @@ -63,19 +63,16 @@ The following methodology was used to derive these network endpoints: |Device authentication|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback)| ||The following endpoint is used to authenticate a device. If you turn off traffic for this endpoint, the device will not be authenticated.|HTTPS|login.live.com*| |Diagnostic Data|The following endpoints are used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service. If you turn off traffic for this endpoint, diagnostic and usage information, which helps Microsoft find and fix problems and improve our products and services, will not be sent back to Microsoft. ||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback)| -|||TLSv1.2|v10.events.data.microsoft.com| -|||TLSv1.2|v20.events.data.microsoft.com| -||The following endpoints are used by Windows Error Reporting. To turn off traffic for these endpoints, enable the following Group Policy: Administrative Templates > Windows Components > Windows Error Reporting > Disable Windows Error Reporting. This means error reporting information will not be sent back to Microsoft.|HTTP|*.telecommand.telemetry.microsoft.com| +|||HTTP|v10.events.data.microsoft.com| +||The following endpoints are used by Windows Error Reporting. To turn off traffic for these endpoints, enable the following Group Policy: Administrative Templates > Windows Components > Windows Error Reporting > Disable Windows Error Reporting. This means error reporting information will not be sent back to Microsoft.|HTTPS|*.telecommand.telemetry.microsoft.com| |||TLS v1.2|watson.*.microsoft.com| -|||TLS v1.2|*.blob.core.windows.net| -|||HTTP|officehomeblobs.blob.core.windows.net| |Licensing|The following endpoint is used for online activation and some app licensing. To turn off traffic for this endpoint, disable the Windows License Manager Service. This will also block online activation and app licensing may not work.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#9-license-manager)| -|||HTTP|*licensing.mp.microsoft.com| -|||HTTP|licensing.mp.microsoft.com/v7.0/licenses/content| +|||HTTPS|*licensing.mp.microsoft.com| +|||HTTPS|licensing.mp.microsoft.com/v7.0/licenses/content| |Location|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-location)| ||The following endpoints are used for location data. If you turn off traffic for this endpoint, apps cannot use location data.|HTTP|inference.location.live.net| |Maps|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-offlinemaps)| -||The following endpoints are used to check for updates to maps that have been downloaded for offline use. If you turn off traffic for this endpoint, offline maps will not be updated.|TLSv1.2|*maps.windows.com| +||The following endpoints are used to check for updates to maps that have been downloaded for offline use. If you turn off traffic for this endpoint, offline maps will not be updated.|HTTP|*maps.windows.com| || The following endpoints are used to check for updates to maps that have been downloaded for offline use.|HTTP|fs.microsoft.com*| |Microsoft Account|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-microsoft-account)| ||The following endpoints are used for Microsoft accounts to sign in. If you turn off traffic for these endpoints, users cannot sign in with Microsoft accounts. |TLSv1.2|*login.live.com| @@ -85,39 +82,41 @@ The following methodology was used to derive these network endpoints: |Microsoft Store|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| ||The following endpoints are used to revoke licenses for malicious apps in the Microsoft Store. To turn off traffic for this endpoint, either uninstall the app or disable the Microsoft Store. If you disable the Microsoft Store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them|TLSv1.2|1storecatalogrevocation.storequality.microsoft.com| |||HTTP|storecatalogrevocation.storequality.microsoft.com| -||The following endpoint is used to get Microsoft Store analytics.|HTTP/TLSv1.2|manage.devcenter.microsoft.com| -||The following endpoints are used to communicate with Microsoft Store. If you turn off traffic for these endpoints, apps cannot be installed or updated from the Microsoft Store.|HTTP/TLSv1.2|displaycatalog.mp.microsoft.com/*| +||The following endpoint is used to get Microsoft Store analytics.|HTTPS|manage.devcenter.microsoft.com| +||The following endpoints are used to communicate with Microsoft Store. If you turn off traffic for these endpoints, apps cannot be installed or updated from the Microsoft Store.|HTTPS|displaycatalog.mp.microsoft.com/*| |||HTTP|pti.store.microsoft.com/*| |Network Connection Status Indicator (NCSI)|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-ncsi)| ||Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to this endpoint to determine if the device can communicate with the Internet. If you turn off traffic for this endpoint, NCSI won't be able to determine if the device is connected to the Internet and the network status tray icon will show a warning.|HTTP|www.msftconnecttest.com*| |Office|The following endpoints are used to connect to the Office 365 portal's shared infrastructure, including Office in a browser. For more info, see Office 365 URLs and IP address ranges. You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps. If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| -|||HTTP/TLSv1.2|v10.events.data.microsoft.com/onecollector/1.0/| +|||HTTP|v10.events.data.microsoft.com/onecollector/1.0/| +|||TLS v1.2|*.blob.core.windows.net| +|||HTTPS|officehomeblobs.blob.core.windows.net| ||The following endpoints are used by Microsoft OfficeHub to get the metadata of Microsoft Office apps |TLSv1.2|c-ring.msedge.net| |OneDrive|The following endpoints are related to OneDrive. If you turn off traffic for these endpoints, anything that relies on g.live.com to get updated URL information will no longer work.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-onedrive)| -|||TLSv1.2|*g.live.com| -|||HTTP|oneclient.sfx.ms| +|||TLS v1.2|*g.live.com| +|||HTTPS|oneclient.sfx.ms| |||HTTPS| logincdn.msauth.net| |Settings|The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as System Initiated User Feedback and the Xbox app use it. If you turn off traffic for this endpoint, an app that uses this endpoint may stop working.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback)| -|||TLSv1.2|settings-win.data.microsoft.com| +|||TLS v1.2|settings-win.data.microsoft.com| |Skype|The following endpoint is used to retrieve Skype configuration values. To turn off traffic for this endpoint, either uninstall the app or disable the Microsoft Store. If you disable the Microsoft store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore)| -|||HTTP|*.pipe.aria.microsoft.com| -|||HTTP/TLSv1.2|config.edge.skype.com| +|||HTTPS|*.pipe.aria.microsoft.com| +|||HTTP/TLS v1.2|config.edge.skype.com| |Teams|The following endpoint is used for Microsoft Teams application.||[Learn how to turn off traffic to all of the following endpoint(s).]( manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| |||HTTP|config.teams.microsoft.com| |Windows Defender|The following endpoint is used for Windows Defender when Cloud-based Protection is enabled. If you turn off traffic for this endpoint, the device will not use Cloud-based Protection.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-defender)| -|||HTTP|wdcp.microsoft.com| -||The following endpoints are used for Windows Defender SmartScreen reporting and notifications. If you turn off traffic for these endpoints, SmartScreen notifications will not appear.|HTTP|*smartscreen-prod.microsoft.com| +|||HTTPS|wdcp.microsoft.com| +||The following endpoints are used for Windows Defender SmartScreen reporting and notifications. If you turn off traffic for these endpoints, SmartScreen notifications will not appear.|HTTPS|*smartscreen-prod.microsoft.com| |||HTTP|checkappexec.microsoft.com| |Windows Spotlight|The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips. If you turn off traffic for these endpoints, Windows Spotlight will still try to deliver new lock screen images and updated content but it will fail; suggested apps, Microsoft account notifications, and Windows tips will not be downloaded. For more information, see Windows Spotlight.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-spotlight)| -|||TLSv1.2|arc.msn.com| -|||HTTP|ris.api.iris.microsoft.com| +|||TLS v1.2|arc.msn.com| +|||HTTPS|ris.api.iris.microsoft.com| |Windows Update|The following endpoint is used for Windows Update downloads of apps and OS updates, including HTTP downloads or HTTP downloads blended with peers. If you turn off traffic for this endpoint, Windows Update downloads will not be managed, as critical metadata that is used to make downloads more resilient is blocked. Downloads may be impacted by corruption (resulting in re-downloads of full files). Additionally, downloads of the same update by multiple devices on the same local network will not use peer devices for bandwidth reduction.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-updates)| -|||TLSv1.2|*.prod.do.dsp.mp.microsoft.com| +|||TLS v1.2|*.prod.do.dsp.mp.microsoft.com| |||HTTP|emdl.ws.microsoft.com| ||The following endpoints are used to download operating system patches, updates, and apps from Microsoft Store. If you turn off traffic for these endpoints, the device will not be able to download updates for the operating system.|HTTP|*.dl.delivery.mp.microsoft.com| |||HTTP|*.windowsupdate.com| ||The following endpoints enable connections to Windows Update, Microsoft Update, and the online services of the Store. If you turn off traffic for these endpoints, the device will not be able to connect to Windows Update and Microsoft Update to help keep the device secure. Also, the device will not be able to acquire and update apps from the Store. These are dependent on also enabling "Device authentication" and "Microsoft Account" endpoints.|HTTPS|*.delivery.mp.microsoft.com| -|||HTTP|*.update.microsoft.com| +|||HTTPSS|*.update.microsoft.com| ||The following endpoint is used for content regulation. If you turn off traffic for this endpoint, the Windows Update Agent will be unable to contact the endpoint and fallback behavior will be used. This may result in content being either incorrectly.|HTTP|tsfe.trafficshaping.dsp.mp.microsoft.com| ## Other Windows 10 editions From 8ed0b81c42ea4eb0ac4eb2ffa189dd49f01a9e13 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 20 Jul 2020 15:32:48 -0700 Subject: [PATCH 243/589] add link to card --- windows/deployment/index.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/deployment/index.yml b/windows/deployment/index.yml index 66b299511f..502d036305 100644 --- a/windows/deployment/index.yml +++ b/windows/deployment/index.yml @@ -85,6 +85,8 @@ landingContent: url: https://docs.microsoft.com/microsoft-365/solutions/empower-people-to-work-remotely - text: Top 12 tasks for security teams to support working from home url: https://docs.microsoft.com/microsoft-365/security/top-security-tasks-for-remote-work + - text: Support your remote workforce + url: https://docs.microsoft.com/microsoftteams/faq-support-remote-workforce # Card (optional) - title: Microsoft Learn From 27d1213a5ad004083511272dae529977be666353 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 15:34:59 -0700 Subject: [PATCH 244/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index c9e212b61e..99891582b8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -24,12 +24,14 @@ ms.topic: article After you have moved from your previous endpoint protection and antivirus solution to Microsoft Defender ATP, your next step is to manage your features and capabilities. We recommend using Intune to manage your organization's devices and security settings. However, you can use other tools/methods, such as Configuration Manager or Group Policy Objects. +The following table lists several ways to manage your Microsoft Defender ATP features and capabilities: + |Tool/Method |Description | |---------|---------| -|[Intune](manage-atp-post-migration-intune.md) | | -|[Configuration Manager](manage-atp-post-migration-configuration-manager.md) | | -|[Group Policy Objects](manage-atp-post-migration-group-policy-objects.md) | | +|[Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) |Microsoft Intune, a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), is a cloud-based service that focuses on mobile device management (MDM) and mobile application management (MAM). You control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications.

See [Manage Microsoft Defender ATP using Intune](manage-atp-post-migration-intune.md). | +|[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) |Configuration Manager, formerly known as System Center Configuration Manager, is a component of Microsoft Endpoint Manager. | +|[Group Policy Objects in Azure Active Directory Domain Services](manage-atp-post-migration-group-policy-objects.md) |Azure Active Directory Domain Services includes built-in Group Policy Objects for users and devices. You can customize the built-in Group Policy Objects as needed for your environment, as well as create custom Group Policy Objects and organizational units (OUs). To learn more, see [Administer Group Policy in an Azure Active Directory Domain Services managed domain](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy). | |[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md) | | From 7b295d4e12daaa741603f0648e40e29f1525892a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 15:47:02 -0700 Subject: [PATCH 245/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 9 +++------ 1 file changed, 3 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index 99891582b8..4725c108a3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -22,15 +22,12 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -After you have moved from your previous endpoint protection and antivirus solution to Microsoft Defender ATP, your next step is to manage your features and capabilities. We recommend using Intune to manage your organization's devices and security settings. However, you can use other tools/methods, such as Configuration Manager or Group Policy Objects. - -The following table lists several ways to manage your Microsoft Defender ATP features and capabilities: - +After you have moved from your previous endpoint protection and antivirus solution to Microsoft Defender ATP, your next step is to manage your features and capabilities. We recommend using Intune to manage your organization's devices and security settings. However, you can use other tools/methods, such as Configuration Manager or Group Policy Objects, as listed in the following table: |Tool/Method |Description | |---------|---------| -|[Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) |Microsoft Intune, a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), is a cloud-based service that focuses on mobile device management (MDM) and mobile application management (MAM). You control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications.

See [Manage Microsoft Defender ATP using Intune](manage-atp-post-migration-intune.md). | -|[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) |Configuration Manager, formerly known as System Center Configuration Manager, is a component of Microsoft Endpoint Manager. | +|[Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) |Microsoft Intune, a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), focuses on mobile device management (MDM) and mobile application management (MAM). With Intune, you control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications.

See [Manage Microsoft Defender ATP using Intune](manage-atp-post-migration-intune.md). | +|[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) |Configuration Manager, formerly known as System Center Configuration Manager, is a component of Microsoft Endpoint Manager. Configuration Manager is a complex and powerful tool to manage your users, devices, and software.

See [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md). | |[Group Policy Objects in Azure Active Directory Domain Services](manage-atp-post-migration-group-policy-objects.md) |Azure Active Directory Domain Services includes built-in Group Policy Objects for users and devices. You can customize the built-in Group Policy Objects as needed for your environment, as well as create custom Group Policy Objects and organizational units (OUs). To learn more, see [Administer Group Policy in an Azure Active Directory Domain Services managed domain](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy). | |[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md) | | From f067b2f6bb73e1ff4206abd30cb2bee44f70722a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 15:48:45 -0700 Subject: [PATCH 246/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index 4725c108a3..7a74afce3e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -27,7 +27,7 @@ After you have moved from your previous endpoint protection and antivirus soluti |Tool/Method |Description | |---------|---------| |[Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) |Microsoft Intune, a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), focuses on mobile device management (MDM) and mobile application management (MAM). With Intune, you control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications.

See [Manage Microsoft Defender ATP using Intune](manage-atp-post-migration-intune.md). | -|[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) |Configuration Manager, formerly known as System Center Configuration Manager, is a component of Microsoft Endpoint Manager. Configuration Manager is a complex and powerful tool to manage your users, devices, and software.

See [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md). | +|[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) |Configuration Manager, formerly known as System Center Configuration Manager, is a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). Configuration Manager is a complex and powerful tool to manage your users, devices, and software.

See [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md). | |[Group Policy Objects in Azure Active Directory Domain Services](manage-atp-post-migration-group-policy-objects.md) |Azure Active Directory Domain Services includes built-in Group Policy Objects for users and devices. You can customize the built-in Group Policy Objects as needed for your environment, as well as create custom Group Policy Objects and organizational units (OUs). To learn more, see [Administer Group Policy in an Azure Active Directory Domain Services managed domain](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy). | |[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md) | | From f3239079fdd71dcb41c27404a1ec4866d8a43fa0 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 15:51:13 -0700 Subject: [PATCH 247/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index 7a74afce3e..d5749a1753 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -28,7 +28,7 @@ After you have moved from your previous endpoint protection and antivirus soluti |---------|---------| |[Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) |Microsoft Intune, a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), focuses on mobile device management (MDM) and mobile application management (MAM). With Intune, you control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications.

See [Manage Microsoft Defender ATP using Intune](manage-atp-post-migration-intune.md). | |[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) |Configuration Manager, formerly known as System Center Configuration Manager, is a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). Configuration Manager is a complex and powerful tool to manage your users, devices, and software.

See [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md). | -|[Group Policy Objects in Azure Active Directory Domain Services](manage-atp-post-migration-group-policy-objects.md) |Azure Active Directory Domain Services includes built-in Group Policy Objects for users and devices. You can customize the built-in Group Policy Objects as needed for your environment, as well as create custom Group Policy Objects and organizational units (OUs). To learn more, see [Administer Group Policy in an Azure Active Directory Domain Services managed domain](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy). | +|[Group Policy Objects in Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy) |[Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/overview) includes built-in Group Policy Objects for users and devices. You can customize the built-in Group Policy Objects as needed for your environment, as well as create custom Group Policy Objects and organizational units (OUs).

[Manage Microsoft Defender ATP with Group Policy Objects](manage-atp-post-migration-group-policy-objects.md) | |[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md) | | From 42d4efb934e5967370ed2c2a799850158f5a85f7 Mon Sep 17 00:00:00 2001 From: Harun Kimani <52551080+Gental-Giant@users.noreply.github.com> Date: Mon, 20 Jul 2020 15:57:36 -0700 Subject: [PATCH 248/589] Update manage-windows-1909-endpoints.md --- windows/privacy/manage-windows-1909-endpoints.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/privacy/manage-windows-1909-endpoints.md b/windows/privacy/manage-windows-1909-endpoints.md index 8a0911bf91..4ffd9f536b 100644 --- a/windows/privacy/manage-windows-1909-endpoints.md +++ b/windows/privacy/manage-windows-1909-endpoints.md @@ -53,13 +53,13 @@ The following methodology was used to derive these network endpoints: ||The following endpoint is used for the Weather app. To turn off traffic for this endpoint, either uninstall the Weather app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|HTTP|tile-service.weather.microsoft.com| |||HTTP|tile-service.weather.microsoft.com/en-us/livetile/preinstall| ||The following endpoint is used for OneNote Live Tile. To turn off traffic for this endpoint, either uninstall OneNote or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|HTTP|cdn.onenote.net/*| -||The following endpoint is used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser. To turn off traffic for this endpoint, either uninstall the Photos app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|TLSv1.2|evoke-windowsservices-tas.msedge.net +||The following endpoint is used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser. To turn off traffic for this endpoint, either uninstall the Photos app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|TLS v1.2|evoke-windowsservices-tas.msedge.net |Certificates|The following endpoint is used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available. It is possible to turn off traffic to this endpoint, but it is not recommended because as root certificates are updated over time, applications and websites may stop working because they did not receive an updated root certificate the application uses. Additionally, it is used to download certificates that are publicly known to be fraudulent. These settings are critical for both Windows security and the overall security of the Internet. We do not recommend blocking this endpoint. If traffic to this endpoint is turned off, Windows no longer automatically downloads certificates known to be fraudulent, which increases the attack vector on the device.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#automatic-root-certificates-update)| |||HTTP|ctldl.windowsupdate.com| |Cortana and Live Tiles|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-cortana)| -||The following endpoints are related to Cortana and Live Tiles. If you turn off traffic for this endpoint, you will block updates to Cortana greetings, tips, and Live Tiles.|HTTP|www.bing.com*| -|||HTTP|www.bing.com/client/config| -|||TLSV1.2|fp.msedge.net| +||The following endpoints are related to Cortana and Live Tiles. If you turn off traffic for this endpoint, you will block updates to Cortana greetings, tips, and Live Tiles.|HTTPS|www.bing.com*| +|||HTTPS|www.bing.com/client/config| +|||TLS v1.2|fp.msedge.net| |Device authentication|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback)| ||The following endpoint is used to authenticate a device. If you turn off traffic for this endpoint, the device will not be authenticated.|HTTPS|login.live.com*| |Diagnostic Data|The following endpoints are used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service. If you turn off traffic for this endpoint, diagnostic and usage information, which helps Microsoft find and fix problems and improve our products and services, will not be sent back to Microsoft. ||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback)| @@ -75,12 +75,12 @@ The following methodology was used to derive these network endpoints: ||The following endpoints are used to check for updates to maps that have been downloaded for offline use. If you turn off traffic for this endpoint, offline maps will not be updated.|HTTP|*maps.windows.com| || The following endpoints are used to check for updates to maps that have been downloaded for offline use.|HTTP|fs.microsoft.com*| |Microsoft Account|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-microsoft-account)| -||The following endpoints are used for Microsoft accounts to sign in. If you turn off traffic for these endpoints, users cannot sign in with Microsoft accounts. |TLSv1.2|*login.live.com| +||The following endpoints are used for Microsoft accounts to sign in. If you turn off traffic for these endpoints, users cannot sign in with Microsoft accounts. |TLS v1.2|*login.live.com| |Microsoft Edge|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#13-microsoft-edge)| ||This traffic is related to the Microsoft Edge browser.|HTTPS|iecvlist.microsoft.com| |Microsoft forward link redirection service (FWLink)|The following endpoint is used by the Microsoft forward link redirection service (FWLink) to redirect permanent web links to their actual, sometimes transitory, URL. FWlinks are similar to URL shorteners, just longer. If you disable this endpoint, Windows Defender won't be able to update its malware definitions; links from Windows and other Microsoft products to the Web won't work; and PowerShell updateable Help won't update. To disable the traffic, instead disable the traffic that's getting forwarded.|HTTPS|go.microsoft.com| |Microsoft Store|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| -||The following endpoints are used to revoke licenses for malicious apps in the Microsoft Store. To turn off traffic for this endpoint, either uninstall the app or disable the Microsoft Store. If you disable the Microsoft Store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them|TLSv1.2|1storecatalogrevocation.storequality.microsoft.com| +||The following endpoints are used to revoke licenses for malicious apps in the Microsoft Store. To turn off traffic for this endpoint, either uninstall the app or disable the Microsoft Store. If you disable the Microsoft Store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them|TLS v1.2|1storecatalogrevocation.storequality.microsoft.com| |||HTTP|storecatalogrevocation.storequality.microsoft.com| ||The following endpoint is used to get Microsoft Store analytics.|HTTPS|manage.devcenter.microsoft.com| ||The following endpoints are used to communicate with Microsoft Store. If you turn off traffic for these endpoints, apps cannot be installed or updated from the Microsoft Store.|HTTPS|displaycatalog.mp.microsoft.com/*| @@ -91,7 +91,7 @@ The following methodology was used to derive these network endpoints: |||HTTP|v10.events.data.microsoft.com/onecollector/1.0/| |||TLS v1.2|*.blob.core.windows.net| |||HTTPS|officehomeblobs.blob.core.windows.net| -||The following endpoints are used by Microsoft OfficeHub to get the metadata of Microsoft Office apps |TLSv1.2|c-ring.msedge.net| +||The following endpoints are used by Microsoft OfficeHub to get the metadata of Microsoft Office apps |TLS v1.2|c-ring.msedge.net| |OneDrive|The following endpoints are related to OneDrive. If you turn off traffic for these endpoints, anything that relies on g.live.com to get updated URL information will no longer work.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-onedrive)| |||TLS v1.2|*g.live.com| |||HTTPS|oneclient.sfx.ms| From b544f7fe420d6acd81fff9dfd3788db957b0cdc1 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 16:08:42 -0700 Subject: [PATCH 249/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index d5749a1753..0596300e71 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -17,7 +17,7 @@ ms.collection: M365-security-compliance ms.topic: article --- -# Manage Microsoft Defender Advanced Threat Protection post migration +# Manage Microsoft Defender Advanced Threat Protection, post migration **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) @@ -28,12 +28,14 @@ After you have moved from your previous endpoint protection and antivirus soluti |---------|---------| |[Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) |Microsoft Intune, a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), focuses on mobile device management (MDM) and mobile application management (MAM). With Intune, you control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications.

See [Manage Microsoft Defender ATP using Intune](manage-atp-post-migration-intune.md). | |[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) |Configuration Manager, formerly known as System Center Configuration Manager, is a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). Configuration Manager is a complex and powerful tool to manage your users, devices, and software.

See [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md). | -|[Group Policy Objects in Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy) |[Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/overview) includes built-in Group Policy Objects for users and devices. You can customize the built-in Group Policy Objects as needed for your environment, as well as create custom Group Policy Objects and organizational units (OUs).

[Manage Microsoft Defender ATP with Group Policy Objects](manage-atp-post-migration-group-policy-objects.md) | -|[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md) | | +|[Group Policy Objects in Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy) |[Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/overview) includes built-in Group Policy Objects for users and devices. You can customize the built-in Group Policy Objects as needed for your environment, as well as create custom Group Policy Objects and organizational units (OUs).

See [Manage Microsoft Defender ATP with Group Policy Objects](manage-atp-post-migration-group-policy-objects.md). | +|[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md) |You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. See [Configuring Microsoft Defender ATP with PowerShell](manage-atp-post-migration-other-tools.md#configuring-microsoft-defender-atp-with-powershell).

You can use Windows Management Instrumentation (WMI) to manage Microsoft Defender Antivirus and exclusions. See [Configuring Microsoft Defender ATP with WMI](manage-atp-post-migration-other-tools.md#configuring-microsoft-defender-atp-with-windows-management-instrumentation-wmi).

You can use the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to manage Microsoft Defender Antivirus and exclusions, as well as validate connections between your network and the cloud. See [Configuring Microsoft Defender ATP with MPCmdRun.exe](manage-atp-post-migration-other-tools.md#configuring-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe). | ## Additional resources +The following table lists additional resources as reference materials. + |Subject | Resources | |---|---| |General resources |- Microsoft Defender Antivirus documentation ([http://aka.ms/wdavtechnet](http://aka.ms/wdavtechnet))

- Microsoft Security Intelligence ([http://www.microsoft.com/mmpc](http://www.microsoft.com/mmpc))

- Microsoft Security blog ([https://aka.ms/mmpcblog](https://aka.ms/mmpcblog)) | From 229cef52dc21c5a34797815378b6615177e47ac2 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 16:10:34 -0700 Subject: [PATCH 250/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index 0596300e71..b5b8e27e5c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -31,6 +31,7 @@ After you have moved from your previous endpoint protection and antivirus soluti |[Group Policy Objects in Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy) |[Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/overview) includes built-in Group Policy Objects for users and devices. You can customize the built-in Group Policy Objects as needed for your environment, as well as create custom Group Policy Objects and organizational units (OUs).

See [Manage Microsoft Defender ATP with Group Policy Objects](manage-atp-post-migration-group-policy-objects.md). | |[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md) |You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. See [Configuring Microsoft Defender ATP with PowerShell](manage-atp-post-migration-other-tools.md#configuring-microsoft-defender-atp-with-powershell).

You can use Windows Management Instrumentation (WMI) to manage Microsoft Defender Antivirus and exclusions. See [Configuring Microsoft Defender ATP with WMI](manage-atp-post-migration-other-tools.md#configuring-microsoft-defender-atp-with-windows-management-instrumentation-wmi).

You can use the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to manage Microsoft Defender Antivirus and exclusions, as well as validate connections between your network and the cloud. See [Configuring Microsoft Defender ATP with MPCmdRun.exe](manage-atp-post-migration-other-tools.md#configuring-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe). | +

## Additional resources From 15dec72ff8bb549185369e301aaae1ebe65c2f3e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 16:12:57 -0700 Subject: [PATCH 251/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index b5b8e27e5c..fcb79c0352 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -31,7 +31,7 @@ After you have moved from your previous endpoint protection and antivirus soluti |[Group Policy Objects in Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy) |[Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/overview) includes built-in Group Policy Objects for users and devices. You can customize the built-in Group Policy Objects as needed for your environment, as well as create custom Group Policy Objects and organizational units (OUs).

See [Manage Microsoft Defender ATP with Group Policy Objects](manage-atp-post-migration-group-policy-objects.md). | |[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md) |You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. See [Configuring Microsoft Defender ATP with PowerShell](manage-atp-post-migration-other-tools.md#configuring-microsoft-defender-atp-with-powershell).

You can use Windows Management Instrumentation (WMI) to manage Microsoft Defender Antivirus and exclusions. See [Configuring Microsoft Defender ATP with WMI](manage-atp-post-migration-other-tools.md#configuring-microsoft-defender-atp-with-windows-management-instrumentation-wmi).

You can use the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to manage Microsoft Defender Antivirus and exclusions, as well as validate connections between your network and the cloud. See [Configuring Microsoft Defender ATP with MPCmdRun.exe](manage-atp-post-migration-other-tools.md#configuring-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe). | -

+

## Additional resources From 878b43bc9a935a7266247ea16f66b30a6042adb2 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 16:14:49 -0700 Subject: [PATCH 252/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index fcb79c0352..e0d0d7bb92 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -22,8 +22,8 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -After you have moved from your previous endpoint protection and antivirus solution to Microsoft Defender ATP, your next step is to manage your features and capabilities. We recommend using Intune to manage your organization's devices and security settings. However, you can use other tools/methods, such as Configuration Manager or Group Policy Objects, as listed in the following table: - +After you have moved from your previous endpoint protection and antivirus solution to Microsoft Defender ATP, your next step is to manage your features and capabilities. We recommend using Microsoft Endpoint Manager, which includes Intune and Configuration Manager, to manage your organization's devices and security settings. However, you can use other tools/methods, such as Group Policy Objects. The following table lists various tools/methods you can use, with links to learn more. +

|Tool/Method |Description | |---------|---------| |[Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) |Microsoft Intune, a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), focuses on mobile device management (MDM) and mobile application management (MAM). With Intune, you control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications.

See [Manage Microsoft Defender ATP using Intune](manage-atp-post-migration-intune.md). | From 69fd5f5b05f9b90a0c94e9edb4e04024f1fdd442 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 16:16:02 -0700 Subject: [PATCH 253/589] Update manage-atp-post-migration-other-tools.md --- .../manage-atp-post-migration-other-tools.md | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index d84c0c1564..5e27c3f2fd 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -23,12 +23,8 @@ We recommend using Intune to manage your threat protection features in Microsoft ## Configuring Microsoft Defender ATP with PowerShell -The following table lists various tasks you can perform to configure Microsoft Defender ATP with PowerShell. +You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. -|Task |Resources to learn more | -|---------|---------| -|task |link | -|task |link | ## Configuring Microsoft Defender ATP with Windows Management Instrumentation (WMI) From ad15ed45eb497799a6b86f94873c23cccf300e2e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 16:21:51 -0700 Subject: [PATCH 254/589] Update manage-atp-post-migration-intune.md --- .../manage-atp-post-migration-intune.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index e0fb0a4344..7918adc20b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -19,12 +19,12 @@ ms.topic: article # Manage Microsoft Defender Advanced Threat Protection with Intune -We recommend using Intune to manage threat protection features for the devices (also referred to as endpoints) within your organization. +We recommend using Microsoft Intune to manage threat protection features for your organization's devices (also referred to as endpoints). Intune is a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). ## Find your Microsoft Defender ATP settings in Intune > [!IMPORTANT] -> You must be a global administrator or service administrator in Intune to configure the settings described in this article. To learn more, see [Types of administrators (Intune)](https://docs.microsoft.com/mem/intune/fundamentals/users-add#types-of-administrators). +> You must be a global administrator or service administrator in Intune to configure the settings described in this article. To learn more, see **[Types of administrators (Intune)](https://docs.microsoft.com/mem/intune/fundamentals/users-add#types-of-administrators)**. 1. Go to the Azure portal ([https://portal.azure.com](https://portal.azure.com)) and sign in. @@ -35,11 +35,11 @@ We recommend using Intune to manage threat protection features for the devices ( 4. Select an existing profile, or create a new one. > [!TIP] -> Need help? See [Using Microsoft Defender ATP with Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection#example-of-using-microsoft-defender-atp-with-intune). +> Need help? See **[Using Microsoft Defender ATP with Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection#example-of-using-microsoft-defender-atp-with-intune)**. ## Configure Microsoft Defender ATP with Intune -The following table lists various tasks you can perform to configure Microsoft Defender ATP with Intune. +The following table lists various tasks you can perform to configure Microsoft Defender ATP with Intune. You don't have to configure everything all at once; choose a task, read the corresponding resources, and proceed from there. |Task |Resources to learn more | |---------|---------| From 060713afd0b8651a6803c9039e5ea2012f839f0d Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 16:23:16 -0700 Subject: [PATCH 255/589] Update manage-atp-post-migration-intune.md --- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 7918adc20b..cf5366ae02 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -43,7 +43,7 @@ The following table lists various tasks you can perform to configure Microsoft D |Task |Resources to learn more | |---------|---------| -|**Manage your organization's devices using Intune** |[Protect devices with Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect) | +|**Manage your organization's devices using Intune** to protect those devices and data stored on them |[Protect devices with Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect) | |**Integrate Microsoft Defender ATP with Microsoft Intune** as a Mobile Threat Defense solution
*(for Android devices and devices running Windows 10 or later)* |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | |**Use Conditional Access** to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | |**Configure Microsoft Defender Antivirus settings** using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus)

[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender) | From 113acf01bc1a4275c41992e870ab922be968a10f Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 20 Jul 2020 16:37:52 -0700 Subject: [PATCH 256/589] Added lightbox to one screen shot --- windows/deployment/windows-autopilot/white-glove.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/white-glove.md b/windows/deployment/windows-autopilot/white-glove.md index 7e1e22ef2e..d37fb49c75 100644 --- a/windows/deployment/windows-autopilot/white-glove.md +++ b/windows/deployment/windows-autopilot/white-glove.md @@ -57,7 +57,7 @@ If these scenarios cannot be completed, Windows Autopilot for white glove deploy To enable white glove deployment, an additional Autopilot profile setting must be configured by the customer or IT Admin via their Intune account, prior to beginning the white glove process in the provisioning service facility: - ![allow white glove](images/allow-white-glove-oobe.png) +[ ![allow white glove](images/allow-white-glove-oobe.png) ](images/allow-white-glove-oobe.png#lightbox) The Windows Autopilot for white glove deployment pre-provisioning process will apply all device-targeted policies from Intune. That includes certificates, security templates, settings, apps, and more – anything targeting the device. Additionally, any apps (Win32 or LOB) that are configured to install in the device context and targeted to the user that has been pre-assigned to the Autopilot device will also be installed. Please make sure not to target both win32 and LOB apps to the same device, as this can make troubleshooting difficult if there are app installation failures. For more information, see [Add a Windows line-of-business app to Microsoft Intune](https://docs.microsoft.com/mem/intune/apps/lob-apps-windows). From aa9a2b5cda2c958825620192a8254c7287b39a84 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 16:40:57 -0700 Subject: [PATCH 257/589] Update manage-atp-post-migration-intune.md --- .../manage-atp-post-migration-intune.md | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index cf5366ae02..736518b285 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -44,12 +44,12 @@ The following table lists various tasks you can perform to configure Microsoft D |Task |Resources to learn more | |---------|---------| |**Manage your organization's devices using Intune** to protect those devices and data stored on them |[Protect devices with Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect) | -|**Integrate Microsoft Defender ATP with Microsoft Intune** as a Mobile Threat Defense solution
*(for Android devices and devices running Windows 10 or later)* |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | +|**Integrate Microsoft Defender ATP with Intune** as a Mobile Threat Defense solution
*(for Android devices and devices running Windows 10 or later)* |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | |**Use Conditional Access** to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | |**Configure Microsoft Defender Antivirus settings** using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus)

[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender) | -|**If necessary, specify exclusions for Microsoft Defender Antivirus**

*Generally, you shouldn't need to apply exclusions. Microsoft Defender Antivirus includes a number of automatic exclusions based on known OS behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations.* |[Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows](https://support.microsoft.com/help/822158/virus-scanning-recommendations-for-enterprise-computers)

[Device restrictions: Microsoft Defender Antivirus Exclusions for Windows 10 devices](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions)

[Configure Microsoft Defender Antivirus exclusions on Windows Server 2016 or 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus)| -|**Configure your attack surface reduction rules** to target software behaviors that are often abused by attackers

*TIP: Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Audit mode in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender)

[Endpoint protection: Attack Surface Reduction](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json#attack-surface-reduction)

[Learn more about attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction) | -|**Configure your network filtering** to block outbound connections from any app to IP addresses or domains with low reputations

*NOTES:*
- *Network filtering is also referred to as [network protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/network-protection).*
- *Make sure that Windows 10 devices have the latest [antimalware platform updates](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform) installed.*|[Endpoint protection: Network filtering](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#network-filtering)

[Review network protection events in Windows Event Viewer](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection#review-network-protection-events-in-windows-event-viewer) | +|**If necessary, specify exclusions for Microsoft Defender Antivirus**

***Generally, you shouldn't need to apply exclusions.** Microsoft Defender Antivirus includes a number of automatic exclusions based on known OS behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations.* |[Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows](https://support.microsoft.com/help/822158/virus-scanning-recommendations-for-enterprise-computers)

[Device restrictions: Microsoft Defender Antivirus Exclusions for Windows 10 devices](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions)

[Configure Microsoft Defender Antivirus exclusions on Windows Server 2016 or 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus)| +|**Configure your attack surface reduction rules** to target software behaviors that are often abused by attackers

*Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Audit mode in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender)

[Endpoint protection: Attack Surface Reduction](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json#attack-surface-reduction)

[Learn more about attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction) | +|**Configure your network filtering** to block outbound connections from any app to IP addresses or domains with low reputations

*Network filtering is also referred to as [network protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/network-protection).*

*Make sure that Windows 10 devices have the latest [antimalware platform updates](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform) installed.*|[Endpoint protection: Network filtering](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#network-filtering)

[Review network protection events in Windows Event Viewer](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection#review-network-protection-events-in-windows-event-viewer) | |**Configure controlled folder access** to protect against ransomware

*[Controlled folder access](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/controlled-folders) is also referred to as antiransomware protection.* |[Endpoint protection: Controlled folder access](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#controlled-folder-access)

[Enable controlled folder access in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#intune) | |**Configure exploit protection** to protect your organization's devices from malware that uses exploits to spread and infect other devices

*[Exploit protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/exploit-protection) is also referred to as Exploit Guard.* |[Endpoint protection: Microsoft Defender Exploit Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-exploit-guard)

[Enable exploit protection in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection#intune) | |**Configure Microsoft Defender SmartScreen** to protect against malicious sites and files on the internet.

*Microsoft Edge should be installed on your organization's devices. For protection on Google Chrome and FireFox browsers, configure exploit protection.* |[Microsoft Defender SmartScreen](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview)

[Device restrictions: Microsoft Defender SmartScreen](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-smartscreen)

[Policy settings for managing SmartScreen in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings#mdm-settings) | @@ -58,6 +58,9 @@ The following table lists various tasks you can perform to configure Microsoft D |**Configure Microsoft Defender Credential Guard** to protect against credential theft attacks |For Windows 10, Windows Server 2016, and Windows Server 2019, see [Endpoint protection: Microsoft Defender Credential Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-credential-guard)

For Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, and Windows Server 2012 R2, see [Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft, Version 1 and 2](https://www.microsoft.com/download/details.aspx?id=36036) | |**Configure your Microsoft Defender Security Center** ([https://securitycenter.windows.com](https://securitycenter.windows.com)) to view alerts, configure threat protection features, and view detailed information about your organization's overall security posture.

*You can also configure whether and what features end users can see in the Microsoft Defender Security Center.* |[Overview of the Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use)

[Endpoint protection: Microsoft Defender Security Center](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-security-center) | |**Configure Microsoft Defender Application Control** to choose whether to audit or trust apps on your organization's devices

*Microsoft Defender Application Control is also referred to as [AppLocker](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview).*|[Deploy Microsoft Defender Application Control policies by using Microsoft Intune](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune)

[Endpoint protection: MIcrosoft Defender Application Control](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-application-control)

[AppLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/applocker-csp)| -|**Configure Microsoft Defender System Guard** to protect, maintain, and validate system integrity of your organization's Windows devices

*[System Guard](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-system-guard/system-guard-how-hardware-based-root-of-trust-helps-protect-windows) was formerly known as Device Guard.* | | +## Next steps +- [Get an overview of threat and vulnerability management](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt) + +- [Visit the Microsoft Defender Security Center security operations dashboard](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard) From 681bf98120fe0fd61d02a3422617651b8e843e01 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 16:45:12 -0700 Subject: [PATCH 258/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index e0d0d7bb92..54ece4e93c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -22,7 +22,7 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -After you have moved from your previous endpoint protection and antivirus solution to Microsoft Defender ATP, your next step is to manage your features and capabilities. We recommend using Microsoft Endpoint Manager, which includes Intune and Configuration Manager, to manage your organization's devices and security settings. However, you can use other tools/methods, such as Group Policy Objects. The following table lists various tools/methods you can use, with links to learn more. +After you have moved from your previous endpoint protection and antivirus solution to Microsoft Defender ATP, your next step is to manage your features and capabilities. We recommend using [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), which includes Intune and Configuration Manager, to manage your organization's devices and security settings. However, you can use other tools/methods, such as Group Policy Objects. The following table lists various tools/methods you can use, with links to learn more.

|Tool/Method |Description | |---------|---------| From d07cb57ce2110239001bfaf0287aa17a8c95c3c5 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 20 Jul 2020 16:49:03 -0700 Subject: [PATCH 259/589] =?UTF-8?q?Removed=20lightbox=20from=20screenshot?= =?UTF-8?q?=E2=80=94image=20is=20too=20small=20to=20benefit?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- windows/deployment/windows-autopilot/white-glove.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/white-glove.md b/windows/deployment/windows-autopilot/white-glove.md index d37fb49c75..95c0f4f5d7 100644 --- a/windows/deployment/windows-autopilot/white-glove.md +++ b/windows/deployment/windows-autopilot/white-glove.md @@ -57,7 +57,7 @@ If these scenarios cannot be completed, Windows Autopilot for white glove deploy To enable white glove deployment, an additional Autopilot profile setting must be configured by the customer or IT Admin via their Intune account, prior to beginning the white glove process in the provisioning service facility: -[ ![allow white glove](images/allow-white-glove-oobe.png) ](images/allow-white-glove-oobe.png#lightbox) +![allow white glove](images/allow-white-glove-oobe.png) The Windows Autopilot for white glove deployment pre-provisioning process will apply all device-targeted policies from Intune. That includes certificates, security templates, settings, apps, and more – anything targeting the device. Additionally, any apps (Win32 or LOB) that are configured to install in the device context and targeted to the user that has been pre-assigned to the Autopilot device will also be installed. Please make sure not to target both win32 and LOB apps to the same device, as this can make troubleshooting difficult if there are app installation failures. For more information, see [Add a Windows line-of-business app to Microsoft Intune](https://docs.microsoft.com/mem/intune/apps/lob-apps-windows). From b5c732cae0b78c09c7846dd5d703927c5c3620e5 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 16:50:55 -0700 Subject: [PATCH 260/589] Update manage-atp-post-migration.md --- .../manage-atp-post-migration.md | 24 +++++++------------ 1 file changed, 8 insertions(+), 16 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index 54ece4e93c..8a1342e109 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -22,23 +22,15 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -After you have moved from your previous endpoint protection and antivirus solution to Microsoft Defender ATP, your next step is to manage your features and capabilities. We recommend using [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), which includes Intune and Configuration Manager, to manage your organization's devices and security settings. However, you can use other tools/methods, such as Group Policy Objects. The following table lists various tools/methods you can use, with links to learn more. +After you have moved from your previous endpoint protection and antivirus solution to Microsoft Defender ATP, your next step is to manage your features and capabilities. We recommend using [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), which includes Intune and Configuration Manager, to manage your organization's devices and security settings. However, you can use other tools/methods, such as Group Policy Objects. + +The following table lists various tools/methods you can use, with links to learn more.

+ |Tool/Method |Description | |---------|---------| -|[Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) |Microsoft Intune, a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), focuses on mobile device management (MDM) and mobile application management (MAM). With Intune, you control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications.

See [Manage Microsoft Defender ATP using Intune](manage-atp-post-migration-intune.md). | -|[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) |Configuration Manager, formerly known as System Center Configuration Manager, is a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). Configuration Manager is a complex and powerful tool to manage your users, devices, and software.

See [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md). | -|[Group Policy Objects in Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy) |[Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/overview) includes built-in Group Policy Objects for users and devices. You can customize the built-in Group Policy Objects as needed for your environment, as well as create custom Group Policy Objects and organizational units (OUs).

See [Manage Microsoft Defender ATP with Group Policy Objects](manage-atp-post-migration-group-policy-objects.md). | -|[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md) |You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. See [Configuring Microsoft Defender ATP with PowerShell](manage-atp-post-migration-other-tools.md#configuring-microsoft-defender-atp-with-powershell).

You can use Windows Management Instrumentation (WMI) to manage Microsoft Defender Antivirus and exclusions. See [Configuring Microsoft Defender ATP with WMI](manage-atp-post-migration-other-tools.md#configuring-microsoft-defender-atp-with-windows-management-instrumentation-wmi).

You can use the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to manage Microsoft Defender Antivirus and exclusions, as well as validate connections between your network and the cloud. See [Configuring Microsoft Defender ATP with MPCmdRun.exe](manage-atp-post-migration-other-tools.md#configuring-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe). | +|**[Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune)** |Microsoft Intune, a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), focuses on mobile device management (MDM) and mobile application management (MAM). With Intune, you control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications.

See [Manage Microsoft Defender ATP using Intune](manage-atp-post-migration-intune.md). | +|**[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction)** |Configuration Manager, formerly known as System Center Configuration Manager, is a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). Configuration Manager is a complex and powerful tool to manage your users, devices, and software.

See [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md). | +|**[Group Policy Objects in Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy)** |[Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/overview) includes built-in Group Policy Objects for users and devices. You can customize the built-in Group Policy Objects as needed for your environment, as well as create custom Group Policy Objects and organizational units (OUs).

See [Manage Microsoft Defender ATP with Group Policy Objects](manage-atp-post-migration-group-policy-objects.md). | +|**[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md)** |You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. See [Configuring Microsoft Defender ATP with PowerShell](manage-atp-post-migration-other-tools.md#configuring-microsoft-defender-atp-with-powershell).

You can use Windows Management Instrumentation (WMI) to manage Microsoft Defender Antivirus and exclusions. See [Configuring Microsoft Defender ATP with WMI](manage-atp-post-migration-other-tools.md#configuring-microsoft-defender-atp-with-windows-management-instrumentation-wmi).

You can use the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to manage Microsoft Defender Antivirus and exclusions, as well as validate connections between your network and the cloud. See [Configuring Microsoft Defender ATP with MPCmdRun.exe](manage-atp-post-migration-other-tools.md#configuring-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe). | -

- -## Additional resources - -The following table lists additional resources as reference materials. - -|Subject | Resources | -|---|---| -|General resources |- Microsoft Defender Antivirus documentation ([http://aka.ms/wdavtechnet](http://aka.ms/wdavtechnet))

- Microsoft Security Intelligence ([http://www.microsoft.com/mmpc](http://www.microsoft.com/mmpc))

- Microsoft Security blog ([https://aka.ms/mmpcblog](https://aka.ms/mmpcblog)) | -|Endpoint Protection (Configuration Manager) |[Endpoint Protection documentation](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) | -|Test and deploy Microsoft Defender Antivirus |- | \ No newline at end of file From 5033454f558847fb3cf074330a1efe9295ebfcbb Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 16:54:53 -0700 Subject: [PATCH 261/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index 8a1342e109..6f838c10e4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -32,5 +32,5 @@ The following table lists various tools/methods you can use, with links to learn |**[Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune)** |Microsoft Intune, a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), focuses on mobile device management (MDM) and mobile application management (MAM). With Intune, you control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications.

See [Manage Microsoft Defender ATP using Intune](manage-atp-post-migration-intune.md). | |**[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction)** |Configuration Manager, formerly known as System Center Configuration Manager, is a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). Configuration Manager is a complex and powerful tool to manage your users, devices, and software.

See [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md). | |**[Group Policy Objects in Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy)** |[Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/overview) includes built-in Group Policy Objects for users and devices. You can customize the built-in Group Policy Objects as needed for your environment, as well as create custom Group Policy Objects and organizational units (OUs).

See [Manage Microsoft Defender ATP with Group Policy Objects](manage-atp-post-migration-group-policy-objects.md). | -|**[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md)** |You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. See [Configuring Microsoft Defender ATP with PowerShell](manage-atp-post-migration-other-tools.md#configuring-microsoft-defender-atp-with-powershell).

You can use Windows Management Instrumentation (WMI) to manage Microsoft Defender Antivirus and exclusions. See [Configuring Microsoft Defender ATP with WMI](manage-atp-post-migration-other-tools.md#configuring-microsoft-defender-atp-with-windows-management-instrumentation-wmi).

You can use the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to manage Microsoft Defender Antivirus and exclusions, as well as validate connections between your network and the cloud. See [Configuring Microsoft Defender ATP with MPCmdRun.exe](manage-atp-post-migration-other-tools.md#configuring-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe). | +|**[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md)** |You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. See [Configuring Microsoft Defender ATP with PowerShell](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-powershell).

You can use Windows Management Instrumentation (WMI) to manage Microsoft Defender Antivirus and exclusions. See [Configuring Microsoft Defender ATP with WMI](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi).

You can use the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to manage Microsoft Defender Antivirus and exclusions, as well as validate connections between your network and the cloud. See [Configuring Microsoft Defender ATP with MPCmdRun.exe](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe). | From 2334f8cb79aa2eeb9dd3d7a7f17f4344b265c593 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 20 Jul 2020 16:59:15 -0700 Subject: [PATCH 262/589] more updates --- windows/security/threat-protection/TOC.md | 2 +- ...-atp-post-migration-configuration-manager.md | 17 +---------------- .../manage-atp-post-migration-other-tools.md | 6 +++--- 3 files changed, 5 insertions(+), 20 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index a5957a45f8..72fd3c74fd 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -30,7 +30,7 @@ #### [Overview](microsoft-defender-atp/manage-atp-post-migration.md) #### [Intune](microsoft-defender-atp/manage-atp-post-migration-intune.md) #### [Configuration Manager](microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md) -#### [Group Policy Objects](microsoft-defender-atp/manage-atp-post-migration-powershell.md) +#### [Group Policy Objects](microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md) #### [PowerShell, WMI, and MPCmdRun.exe](microsoft-defender-atp/manage-atp-post-migration-other-tools.md) ## [Security administration]() diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index b6de4062b1..4ee135ecf9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -21,7 +21,7 @@ ms.topic: article We recommend using Configuration Manager to manage threat protection features for the devices (also referred to as endpoints) within your organization. -## Configuring Microsoft Defender ATP with Configuration Manager +## Configure Microsoft Defender ATP with Configuration Manager The following table lists various tasks you can perform to configure Microsoft Defender ATP with Configuration Manager. @@ -31,18 +31,3 @@ The following table lists various tasks you can perform to configure Microsoft D |task |link | -## Find your Microsoft Defender ATP settings in Configuration Manager - -> [!IMPORTANT] -> You must be a global administrator or service administrator in Configuration Manager to configure the settings described in this article. To learn more, see link. - -1. Go to the where and sign in. - -2. Under what choose what. - -3. next - -4. and next - -> [!TIP] -> Need help? See link. \ No newline at end of file diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index 5e27c3f2fd..a30f564442 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -21,17 +21,17 @@ ms.topic: article We recommend using Intune to manage your threat protection features in Microsoft Defender ATP. However, you can -## Configuring Microsoft Defender ATP with PowerShell +## Configure Microsoft Defender ATP with PowerShell You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. -## Configuring Microsoft Defender ATP with Windows Management Instrumentation (WMI) +## Configure Microsoft Defender ATP with Windows Management Instrumentation (WMI) steps -## Configuring Microsoft Defender ATP with Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) +## Configure Microsoft Defender ATP with Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) steps From 0d733e441487824216d16d3030ec1cad0a4655cb Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 20 Jul 2020 19:18:22 -0700 Subject: [PATCH 263/589] update endpoint alerts section location --- .../microsoft-defender-atp/advanced-features.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md index d3ada4e5ae..d5802d8faf 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md @@ -176,18 +176,18 @@ When you enable Intune integration, Intune will automatically create a classic C > The classic CA policy created by Intune is distinct from modern [Conditional Access policies](https://docs.microsoft.com/azure/active-directory/conditional-access/overview/), which are used for configuring endpoints. -## Share endpoint alerts with Microsoft Compliance Center - -Forwards endpoint security alerts and their triage status to Microsoft Compliance Center, allowing you to enhance insider risk management policies with alerts and remediate internal risks before they cause harm. Forwarded data is processed and stored in the same location as your Office 365 data. - -After configuring the [Security policy violation indicators](https://docs.microsoft.com/microsoft-365/compliance/insider-risk-management-settings.md#indicators) in the insider risk management settings, Microsoft Defender ATP alerts will be shared with insider risk management for applicable users. - ## Preview features Learn about new features in the Microsoft Defender ATP preview release and be among the first to try upcoming features by turning on the preview experience. You'll have access to upcoming features, which you can provide feedback on to help improve the overall experience before features are generally available. +## Share endpoint alerts with Microsoft Compliance Center + +Forwards endpoint security alerts and their triage status to Microsoft Compliance Center, allowing you to enhance insider risk management policies with alerts and remediate internal risks before they cause harm. Forwarded data is processed and stored in the same location as your Office 365 data. + +After configuring the [Security policy violation indicators](https://docs.microsoft.com/microsoft-365/compliance/insider-risk-management-settings.md#indicators) in the insider risk management settings, Microsoft Defender ATP alerts will be shared with insider risk management for applicable users. + ## Enable advanced features 1. In the navigation pane, select **Preferences setup** > **Advanced features**. From bea4fc3ef606da2dfa0c8eb6dedef316bff319de Mon Sep 17 00:00:00 2001 From: Narkis Engler <41025789+narkissit@users.noreply.github.com> Date: Mon, 20 Jul 2020 19:39:09 -0700 Subject: [PATCH 264/589] Update waas-delivery-optimization-setup.md "CacheSummary" was never added as a flag (may have been a left over in an old spec) --- windows/deployment/update/waas-delivery-optimization-setup.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/windows/deployment/update/waas-delivery-optimization-setup.md b/windows/deployment/update/waas-delivery-optimization-setup.md index 983594b78b..0dca1d9e70 100644 --- a/windows/deployment/update/waas-delivery-optimization-setup.md +++ b/windows/deployment/update/waas-delivery-optimization-setup.md @@ -148,8 +148,6 @@ Using the `-Verbose` option returns additional information: **Starting in Windows 10, version 2004**, `Get-DeliveryOptimizationPerfSnap` has a new option `-PeerInfo` which returns a real-time list of the connected peers. -Starting in Windows 10, version 1903, `get-DeliveryOptimizationPerfSnap` has a new option `-CacheSummary` which provides a summary of the cache status. - Starting in Windows 10, version 1803, `Get-DeliveryOptimizationPerfSnapThisMonth` returns data similar to that from `Get-DeliveryOptimizationPerfSnap` but limited to the current calendar month. #### Manage the Delivery Optimization cache From d800467c55569c400eca56a4132565c6cff53965 Mon Sep 17 00:00:00 2001 From: Harun Kimani <52551080+Gental-Giant@users.noreply.github.com> Date: Tue, 21 Jul 2020 00:31:30 -0700 Subject: [PATCH 265/589] Updated Protocols and description for 1909 endpoints --- .../privacy/manage-windows-1909-endpoints.md | 30 +-- ...-endpoints-1909-non-enterprise-editions.md | 218 +++++++++--------- 2 files changed, 125 insertions(+), 123 deletions(-) diff --git a/windows/privacy/manage-windows-1909-endpoints.md b/windows/privacy/manage-windows-1909-endpoints.md index 4ffd9f536b..647a8b7122 100644 --- a/windows/privacy/manage-windows-1909-endpoints.md +++ b/windows/privacy/manage-windows-1909-endpoints.md @@ -52,7 +52,7 @@ The following methodology was used to derive these network endpoints: |Apps|||[Learn how to turn off traffic to the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore)| ||The following endpoint is used for the Weather app. To turn off traffic for this endpoint, either uninstall the Weather app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|HTTP|tile-service.weather.microsoft.com| |||HTTP|tile-service.weather.microsoft.com/en-us/livetile/preinstall| -||The following endpoint is used for OneNote Live Tile. To turn off traffic for this endpoint, either uninstall OneNote or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|HTTP|cdn.onenote.net/*| +||The following endpoint is used for OneNote Live Tile. To turn off traffic for this endpoint, either uninstall OneNote or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|HTTPS|cdn.onenote.net/*| ||The following endpoint is used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser. To turn off traffic for this endpoint, either uninstall the Photos app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|TLS v1.2|evoke-windowsservices-tas.msedge.net |Certificates|The following endpoint is used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available. It is possible to turn off traffic to this endpoint, but it is not recommended because as root certificates are updated over time, applications and websites may stop working because they did not receive an updated root certificate the application uses. Additionally, it is used to download certificates that are publicly known to be fraudulent. These settings are critical for both Windows security and the overall security of the Internet. We do not recommend blocking this endpoint. If traffic to this endpoint is turned off, Windows no longer automatically downloads certificates known to be fraudulent, which increases the attack vector on the device.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#automatic-root-certificates-update)| |||HTTP|ctldl.windowsupdate.com| @@ -70,7 +70,7 @@ The following methodology was used to derive these network endpoints: |||HTTPS|*licensing.mp.microsoft.com| |||HTTPS|licensing.mp.microsoft.com/v7.0/licenses/content| |Location|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-location)| -||The following endpoints are used for location data. If you turn off traffic for this endpoint, apps cannot use location data.|HTTP|inference.location.live.net| +||The following endpoints are used for location data. If you turn off traffic for this endpoint, apps cannot use location data.|TLS v1.2|inference.location.live.net| |Maps|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-offlinemaps)| ||The following endpoints are used to check for updates to maps that have been downloaded for offline use. If you turn off traffic for this endpoint, offline maps will not be updated.|HTTP|*maps.windows.com| || The following endpoints are used to check for updates to maps that have been downloaded for offline use.|HTTP|fs.microsoft.com*| @@ -81,16 +81,16 @@ The following methodology was used to derive these network endpoints: |Microsoft forward link redirection service (FWLink)|The following endpoint is used by the Microsoft forward link redirection service (FWLink) to redirect permanent web links to their actual, sometimes transitory, URL. FWlinks are similar to URL shorteners, just longer. If you disable this endpoint, Windows Defender won't be able to update its malware definitions; links from Windows and other Microsoft products to the Web won't work; and PowerShell updateable Help won't update. To disable the traffic, instead disable the traffic that's getting forwarded.|HTTPS|go.microsoft.com| |Microsoft Store|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| ||The following endpoints are used to revoke licenses for malicious apps in the Microsoft Store. To turn off traffic for this endpoint, either uninstall the app or disable the Microsoft Store. If you disable the Microsoft Store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them|TLS v1.2|1storecatalogrevocation.storequality.microsoft.com| -|||HTTP|storecatalogrevocation.storequality.microsoft.com| +|||HTTPS|storecatalogrevocation.storequality.microsoft.com| ||The following endpoint is used to get Microsoft Store analytics.|HTTPS|manage.devcenter.microsoft.com| ||The following endpoints are used to communicate with Microsoft Store. If you turn off traffic for these endpoints, apps cannot be installed or updated from the Microsoft Store.|HTTPS|displaycatalog.mp.microsoft.com/*| -|||HTTP|pti.store.microsoft.com/*| +|||HTTPS|pti.store.microsoft.com/*| |Network Connection Status Indicator (NCSI)|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-ncsi)| ||Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to this endpoint to determine if the device can communicate with the Internet. If you turn off traffic for this endpoint, NCSI won't be able to determine if the device is connected to the Internet and the network status tray icon will show a warning.|HTTP|www.msftconnecttest.com*| |Office|The following endpoints are used to connect to the Office 365 portal's shared infrastructure, including Office in a browser. For more info, see Office 365 URLs and IP address ranges. You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps. If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| -|||HTTP|v10.events.data.microsoft.com/onecollector/1.0/| +|||HTTP/ TLS v1.2|v10.events.data.microsoft.com/onecollector/1.0/| |||TLS v1.2|*.blob.core.windows.net| -|||HTTPS|officehomeblobs.blob.core.windows.net| +|||HTTP|officehomeblobs.blob.core.windows.net| ||The following endpoints are used by Microsoft OfficeHub to get the metadata of Microsoft Office apps |TLS v1.2|c-ring.msedge.net| |OneDrive|The following endpoints are related to OneDrive. If you turn off traffic for these endpoints, anything that relies on g.live.com to get updated URL information will no longer work.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-onedrive)| |||TLS v1.2|*g.live.com| @@ -102,22 +102,22 @@ The following methodology was used to derive these network endpoints: |||HTTPS|*.pipe.aria.microsoft.com| |||HTTP/TLS v1.2|config.edge.skype.com| |Teams|The following endpoint is used for Microsoft Teams application.||[Learn how to turn off traffic to all of the following endpoint(s).]( manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| -|||HTTP|config.teams.microsoft.com| +|||HTTPS|config.teams.microsoft.com| |Windows Defender|The following endpoint is used for Windows Defender when Cloud-based Protection is enabled. If you turn off traffic for this endpoint, the device will not use Cloud-based Protection.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-defender)| -|||HTTPS|wdcp.microsoft.com| -||The following endpoints are used for Windows Defender SmartScreen reporting and notifications. If you turn off traffic for these endpoints, SmartScreen notifications will not appear.|HTTPS|*smartscreen-prod.microsoft.com| -|||HTTP|checkappexec.microsoft.com| +|||HTTPS/TLS v1.2|wdcp.microsoft.com| +||The following endpoints are used for Windows Defender SmartScreen reporting and notifications. If you turn off traffic for these endpoints, SmartScreen notifications will not appear.|HTTPS/TLS v1.2|*smartscreen-prod.microsoft.com| +|||HTTPS|checkappexec.microsoft.com| |Windows Spotlight|The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips. If you turn off traffic for these endpoints, Windows Spotlight will still try to deliver new lock screen images and updated content but it will fail; suggested apps, Microsoft account notifications, and Windows tips will not be downloaded. For more information, see Windows Spotlight.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-spotlight)| -|||TLS v1.2|arc.msn.com| +|||HTTPS/TLS v1.2|arc.msn.com| |||HTTPS|ris.api.iris.microsoft.com| |Windows Update|The following endpoint is used for Windows Update downloads of apps and OS updates, including HTTP downloads or HTTP downloads blended with peers. If you turn off traffic for this endpoint, Windows Update downloads will not be managed, as critical metadata that is used to make downloads more resilient is blocked. Downloads may be impacted by corruption (resulting in re-downloads of full files). Additionally, downloads of the same update by multiple devices on the same local network will not use peer devices for bandwidth reduction.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-updates)| -|||TLS v1.2|*.prod.do.dsp.mp.microsoft.com| +|||HTTPS/TLS v1.2|*.prod.do.dsp.mp.microsoft.com| |||HTTP|emdl.ws.microsoft.com| ||The following endpoints are used to download operating system patches, updates, and apps from Microsoft Store. If you turn off traffic for these endpoints, the device will not be able to download updates for the operating system.|HTTP|*.dl.delivery.mp.microsoft.com| |||HTTP|*.windowsupdate.com| -||The following endpoints enable connections to Windows Update, Microsoft Update, and the online services of the Store. If you turn off traffic for these endpoints, the device will not be able to connect to Windows Update and Microsoft Update to help keep the device secure. Also, the device will not be able to acquire and update apps from the Store. These are dependent on also enabling "Device authentication" and "Microsoft Account" endpoints.|HTTPS|*.delivery.mp.microsoft.com| -|||HTTPSS|*.update.microsoft.com| -||The following endpoint is used for content regulation. If you turn off traffic for this endpoint, the Windows Update Agent will be unable to contact the endpoint and fallback behavior will be used. This may result in content being either incorrectly.|HTTP|tsfe.trafficshaping.dsp.mp.microsoft.com| +||The following endpoints enable connections to Windows Update, Microsoft Update, and the online services of the Store. If you turn off traffic for these endpoints, the device will not be able to connect to Windows Update and Microsoft Update to help keep the device secure. Also, the device will not be able to acquire and update apps from the Store. These are dependent on also enabling "Device authentication" and "Microsoft Account" endpoints.|HTTP|*.delivery.mp.microsoft.com| +|||HTTPS/TLS v1.2|*.update.microsoft.com| +||The following endpoint is used for content regulation. If you turn off traffic for this endpoint, the Windows Update Agent will be unable to contact the endpoint and fallback behavior will be used. This may result in content being either incorrectly.|HTTPS/TLS v1.2|tsfe.trafficshaping.dsp.mp.microsoft.com| ## Other Windows 10 editions To view endpoints for other versions of Windows 10 Enterprise, see: diff --git a/windows/privacy/windows-endpoints-1909-non-enterprise-editions.md b/windows/privacy/windows-endpoints-1909-non-enterprise-editions.md index 284aa42066..bbd3351acc 100644 --- a/windows/privacy/windows-endpoints-1909-non-enterprise-editions.md +++ b/windows/privacy/windows-endpoints-1909-non-enterprise-editions.md @@ -42,160 +42,162 @@ The following methodology was used to derive the network endpoints: | **Destination** | **Protocol** | **Description** | | --- | --- | --- | -|*.delivery.mp.microsoft.com|HTTP|Used to download operating system patches, updates, and apps from Microsoft -|*.prod.do.dsp.mp.microsoft.com|TLSv1.2|Windows Update -|*.smartscreen-prod.microsoft.com|HTTP|Used for Windows Defender SmartScreen reporting and notifications -|*.update.microsoft.com|HTTP|Enables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store -|*.windowsupdate.com|HTTP|Used to download operating system patches and updates -|*dl.delivery.mp.microsoft.com|HTTP|Used to download operating system patches, updates, and apps from Microsoft -|arc.msn.com|TLSv1.2|Windows Spotlight -|config.edge.skype.com|TLSv1.2|Used to retrieve Skype configuration values -|config.teams.microsoft.com|HTTP|Used for Microsoft Teams application +|arc.msn.com|HTTP/TLS v1.2|Windows Spotlight +|api.asm.skype.com|TLS v1.2|Used to retrieve Skype configuration values +|browser.pipe.aria.microsoft.com|HTTPS|Used to retrieve Skype configuration values |ctldl.windowsupdate.com/*|HTTP|Certificate Trust List -|displaycatalog.mp.microsoft.com/*|TLSv1.2|Used to communicate with Microsoft Store -|dmd.metaservices.microsoft.com|HTTP|Device Authentication -|evoke-windowsservices-tas.msedge.net|TLSv1.2|Used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser -|g.live.com|HTTP|OneDrive +|client.wns.windows.com|HTTP|Used for the Windows Push Notification Service(WNS) +|config.edge.skype.com|HTTP/TLS v1.2|Used to retrieve Skype configuration values +|dmd.metaservices.microsoft.com|HTTP|Device metadata +|config.teams.microsoft.com|HTTPS|Used for Microsoft Teams application +|*dl.delivery.mp.microsoft.com|HTTP|Used to download operating system patches, updates, and apps from Microsoft Store +|*.tlu.dl.delivery.mp.microsoft.com|HTTP|Used to download operating system patches, updates, and apps from Microsoft Store +|displaycatalog.mp.microsoft.com/*|HTTP/TLS v1.2|Used to communicate with Microsoft Store +|evoke-windowsservices-tas.msedge.net|HTTP/TLS v1.2|Used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser +|fe2cr.update.microsoft.com|HTTPS/TLS v1.2|Enables connections to Windows Update, Microsoft Update, and the online services of the Store +|fe3cr.delivery.mp.microsoft.com|HTTPS/TLS v1.2|Used to download operating system patches, updates, and apps from Microsoft Store |go.microsoft.com|HTTP|Windows Defender and/or Microsoft forward link redirection service (FWLink) -|img-prod-cms-rt-microsoft-com.akamaized.net|HTTP|Used to communicate with Microsoft Store -|licensing.mp.microsoft.com|TLSv1.2|Licensing -|login.live.com|TLSv1.2|Device Authentication -|logincdn.msauth.net|HTTP|Used for Microsoft accounts to sign-in -|manage.devcenter.microsoft.com|TLSv1.2|Microsoft Store analytics -|maps.windows.com|TLSv1.2|Used to check for updates to maps that have been downloaded for offline use -|ocsp.digicert.com|HTTP|Used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available -|oneclient.sfx.ms|HTTP|Used by OneDrive for Business to download and verify app updates -|ris.api.iris.microsoft.com|HTTP|Used to retrieve Windows Spotlight metadata that describes content -|settings-win.data.microsoft.com|TLSv1.2|Used for Windows apps to dynamically update their configuration -|api.asm.skype.com|TLSv1.2|Used to retrieve Skype configuration values -|browser.pipe.aria.microsoft.com|HTTP|Used to retrieve Skype configuration values -|client.wns.windows.com|HTTP|Used for the Windows Push Notification Services (WNS) -|fe3cr.delivery.mp.microsoft.com||Used to download operating system patches, updates, and apps from Microsoft Store -|checkappexec.microsoft.com|HTTP|Used for Windows Defender Smartscreen reporting and notifications +|g.live.com|HTTP|OneDrive +|checkappexec.microsoft.com|HTTPS|Used for Windows Defender Smartscreen reporting and notifications |emdl.ws.microsoft.com|HTTP|Windows Update -|inference.location.live.net|TLSv1.2|Used for Location Data +|*.prod.do.dsp.mp.microsoft.com|HTTP/TLS v1.2|Windows Update +|*.au.download.windowsupdate.com|HTTP|Windows Update +|download.windowsupdate.com|HTTP|Windows Update +|inference.location.live.net|TLS v1.2|Used for Location Data |iecvlist.microsoft.com|HTTP|This endpoint is related to Microsoft Edge +|login.live.com|HTTPS/TLS v1.2|Device Authentication +|logincdn.msauth.net|HTTPS|OneDrive +|licensing.mp.microsoft.com|HTTP/TLS v1.2|Licensing +|maps.windows.com|TLS v1.2|Used to check for updates to maps that have been downloaded for offline use |mobile.pipe.aria.microsoft.com|HTTP|Office Telemetry |nav.smartscreen.microsoft.com|HTTP|Used for Windows Defender SmartScreen reporting and notifications |outlook.office365.com|HTTP|Used to connect to the Microsoft 365 admin center's shared infrastructure, including Office in a browser +|ocsp.digicert.com|HTTP|Used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available +|oneclient.sfx.ms|HTTPS|Used by OneDrive for Business to download and verify app updates |pti.store.microsoft.com/*|HTTP|Used to communicate with Microsoft Store -|*.blob.core.windows.net|HTTP|Windows Telemetry -|storage.live.com|TLSv1.2|OneDrive -|skydrivesync.policies.live.net|TLSv1.2|OneDrive +|img-prod-cms-rt-microsoft-com.akamaized.net|HTTP|Used to communicate with Microsoft Store +|manage.devcenter.microsoft.com|HTTP/TLS v1.2|Used to get Microsoft Store analytics +|ris.api.iris.microsoft.com|HTTPS|Used to retrieve Windows Spotlight metadata that describes content +|settings-win.data.microsoft.com|HTTPS/TLS v1.2|Used for Windows apps to dynamically update their configuration +|smartscreen-prod.microsoft.com|HTTP|Used for Windows Defender SmartScreen reporting and notifications +|*.blob.core.windows.net|HTTP/TLS v1.2|Windows Telemetry +|storage.live.com|HTTP/TLS v1.2|OneDrive +|skydrivesync.policies.live.net|TLS v1.2|OneDrive +|slscr.update.microsoft.com|HTTPS/TLS V1.2|Windows Update |tile-service.weather.microsoft.com|HTTP|Used for the Weather app |tsfe.trafficshaping.dsp.mp.microsoft.com|HTTP|This endpoint is used for content regulation -|watson.telemetry.microsoft.com*|HTTP/TLSv1.2|Diagnostic Data -|10.events.data.microsoft.com/onecollector/1.0/|HTTP|Microsoft Office -|v10.events.data.microsoft.com|TLSv1.2|Used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service -|www.bing.com|HTTP/TLSv1.2|Used for Cortana and Live Tiles +|watson.telemetry.microsoft.com*|HTTPS/TLS v1.2|Diagnostic Data +|v10.events.data.microsoft.com/onecollector/1.0/|HTTPS|Microsoft Office +|v10.events.data.microsoft.com|HTTPS/TLS v1.2|Used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service +|www.bing.com|HTTPS/TLS v1.2|Cortana and Live Tiles |www.msftconnecttest.com|HTTP|Network Connection Status Indicator (NCSI) -|wdcp.microsoft.com|HTTP|Used for Windows Defender when Cloud-based Protection is enabled +|wdcp.microsoft.com|HTTPS|Used for Windows Defender when Cloud-based Protection is enabled ## Windows 10 Pro | **Destination** | **Protocol** | **Description** | | --- | --- | --- | -|*.prod.do.dsp.mp.microsoft.com|HTTP/TLSv1.2|Windows Update +|*.prod.do.dsp.mp.microsoft.com|HTTP/TLS v1.2|Windows Update |api.onedrive.com|HTTP|One Drive |smartscreen-prod.microsoft.com|HTTP|Used for Windows Defender SmartScreen reporting and notifications -|nav.smartscreen.microsoft.com|HTTP|Windows Defender +|nav.smartscreen.microsoft.com|HTTPS/TLS v1.2|Windows Defender |*.update.microsoft.com|HTTP|Enables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store -|browser.pipe.aria.microsoft.com|HTTP|Used to retrieve Skype configuration values +|browser.pipe.aria.microsoft.com|HTTPS|Used to retrieve Skype configuration values |*.windowsupdate.com|HTTP|Used to download operating system patches and updates -|*.wns.windows.com|TLSv1.2|Used for the Windows Push Notification Services (WNS) +|*.wns.windows.com|TLS v1.2|Used for the Windows Push Notification Services (WNS) |*dl.delivery.mp.microsoft.com|HTTP|Used to download operating system patches, updates, and apps from Microsoft Store -|c-ring.msedge.net|TLSv1.2|Cortana and Live Tiles -|a-ring.msedge.net|TLSv1.2|Cortana and Live Tiles -|*storecatalogrevocation.storequality.microsoft.com|TLSv1.2|Used to revoke licenses for malicious apps on the Microsoft Store -|arc.msn.com|TLSv1.2|Windows Spotlight -|*.blob.core.windows.net|HTTP|Windows Telemetry -|cdn.onenote.net|HTTP|OneNote Live Tile -|checkappexec.microsoft.com|HTTP|Used for Windows Defender SmartScreen reporting and notifications -|config.edge.skype.com|TLSv1.2|Used to retrieve Skype configuration values -|config.teams.microsoft.com|HTTP|Used for Microsoft Teams application -|ctldl.windowsupdate.com||Used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available -|displaycatalog.mp.microsoft.com*|TLSv1.2|Microsoft Store +|c-ring.msedge.net|TLS v1.2|Cortana and Live Tiles +|a-ring.msedge.net|TLS v1.2|Cortana and Live Tiles +|*storecatalogrevocation.storequality.microsoft.com|HTTP/TLS v1.2|Used to revoke licenses for malicious apps on the Microsoft Store +|arc.msn.com|HTTP/TLS v1.2|Windows Spotlight +|*.blob.core.windows.net|HTTP/TLS v1.2|Windows Telemetry +|cdn.onenote.net|HTTPS/TLS v1.2|OneNote Live Tile +|checkappexec.microsoft.com|HTTPS|Used for Windows Defender SmartScreen reporting and notifications +|config.edge.skype.com|HTTP/TLS v1.2|Used to retrieve Skype configuration values +|config.teams.microsoft.com|HTTPS|Used for Microsoft Teams application +|ctldl.windowsupdate.com|HTTP|Used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available +|displaycatalog.mp.microsoft.com*|HTTP/TLS v1.2|Microsoft Store |emdl.ws.microsoft.com|HTTP|Windows Update -|fe2cr.update.microsoft.com|HTTP|Windows Update -|fe3cr.delivery.mp.microsoft.com|HTTP|Windows Update -|slscr.update.microsoft.com|HTTP|Windows Update -|evoke-windowsservices-tas.msedge.net|TLSv1.2|Used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser -|fp.msedge.net|TLSv1.2|Cortana and Live Tiles -|fp-vp.azureedge.net|TLSv1.2|Cortana and Live Tiles -|g.live.com|TLSv1.2|OneDrive +|fe2cr.update.microsoft.com|HTTPS/TLS v1.2|Windows Update +|fe3cr.delivery.mp.microsoft.com|HTTPS/TLS v1.2|Windows Update +|slscr.update.microsoft.com|HTTPS/TLS v1.2|Windows Update +|evoke-windowsservices-tas.msedge.net|HTTPS/TLS v1.2|Used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser +|fp.msedge.net|HTTPS/TLS v1.2|Cortana and Live Tiles +|fp-vp.azureedge.net|TLS v1.2|Cortana and Live Tiles +|g.live.com|TLS v1.2|OneDrive |go.microsoft.com|HTTP|Windows Defender and/or Microsoft forward link redirection service (FWLink) |iecvlist.microsoft.com|HTTP|Microsoft Edge -|inference.location.live.net|TLSv1.2|Used for Location Data +|inference.location.live.net|TLS v1.2|Used for Location Data |img-prod-cms-rt-microsoft-com.akamaized.net|HTTP|Used to communicate with Microsoft Store -|licensing.mp.microsoft.com*|TLSv1.2|Licensing -|login.live.com|TLSv1.2|Device Authentication -|logincdn.msauth.net|HTTP|Used for Microsoft accounts to sign in -|manage.devcenter.microsoft.com|TLSv1.2|Microsoft Store analytics -|maps.windows.com|TLSv1.2|Related to Maps application +|licensing.mp.microsoft.com*|HTTP/TLS v1.2|Licensing +|login.live.com|HTTPS/TLS v1.2|Device Authentication +|logincdn.msauth.net|HTTPS|Used for Microsoft accounts to sign in +|manage.devcenter.microsoft.com|HTTP/TLS v1.2|Microsoft Store analytics +|maps.windows.com|TLS v1.2|Related to Maps application |ocsp.digicert.com|HTTP|Used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available |ocsp.msocsp.com|HTTP|Used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available -|oneclient.sfx.ms|HTTP|Used by OneDrive for Business to download and verify app updates -|mobile.pipe.aria.microsoft.com||Office Telemetry +|oneclient.sfx.ms|HTTPS|Used by OneDrive for Business to download and verify app updates +|mobile.pipe.aria.microsoft.com|HTTP|Office Telemetry |pti.store.microsoft.com/*|HTTP|Used to communicate with Microsoft Store -|ris.api.iris.microsoft.com|TLSv1.2|Windows Spotlight -|settings-win.data.microsoft.com|HTTP/TLSv1.2|Used for Windows apps to dynamically update their configuration +|ris.api.iris.microsoft.com|TLS v1.2|Windows Spotlight +|settings-win.data.microsoft.com|HTTPS/TLS v1.2|Used for Windows apps to dynamically update their configuration |spo-ring.msedge.net|TLSv1.2|Cortana and Live Tiles -|telecommand.telemetry.microsoft.com|TLSv1.2|Used by Windows Error Reporting ||tile-service.weather.microsoft.com|HTTP|Used for the Weather app -|tsfe.trafficshaping.dsp.mp.microsoft.com|HTTP|Used for content regulation -|v10.events.data.microsoft.com/onecollector/1.0/|HTTP/TLSv1.2|Diagnostic Data -|v10.events.data.microsoft.com|HTTP/TLSv1.2|Used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service -|watson.telemetry.microsoft.com*|HTTP/TLSv1.2|Used by Windows Error Reporting -|wdcp.microsoft.com|HTTP|Used for Windows Defender when Cloud-based Protection is enabled -|www.bing.com|HTTP/TLSv1.2|Cortana and Live Tiles +|telecommand.telemetry.microsoft.com|TLS v1.2|Used by Windows Error Reporting ||tile-service.weather.microsoft.com|HTTP|Used for the Weather app +|tsfe.trafficshaping.dsp.mp.microsoft.com|HTTPS|Used for content regulation +|v10.events.data.microsoft.com/onecollector/1.0/|HTTPS/TLS v1.2|Diagnostic Data +|v10.events.data.microsoft.com|HTTPS/TLS v1.2|Used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service +|watson.telemetry.microsoft.com*|HTTPS/TLS v1.2|Used by Windows Error Reporting +|wdcp.microsoft.com|HTTPS|Used for Windows Defender when Cloud-based Protection is enabled +|www.bing.com|HTTPS/TLS v1.2|Cortana and Live Tiles |www.msftconnecttest.com|HTTP|Network Connection Status Indicator (NCSI) |outlook.office365.com|HTTP|Microsoft Office -|storage.live.com|TLSv1.2/HTTP|One Drive -|skydrivesync.policies.live.net|TLSv1.2|One Drive +|storage.live.com|HTTP/TLS v1.2|One Drive +|skydrivesync.policies.live.net|TLS v1.2|One Drive ## Windows 10 Education | **Destination** | **Protocol** | **Description** | | --- | --- | --- | -|arc.msn.com|HTTPS/TLSv1.2|Windows Spotlight +|arc.msn.com|HTTPS/TLS v1.2|Windows Spotlight |*.dl.delivery.mp.microsoft.com|HTTP|Used to download operating system patches, updates, and apps from Microsoft -|client.wns.windows.com|TLSv1.2|Used for the Windows Push Notification Services (WNS) -|*storecatalogrevocation.storequality.microsoft.com|TLSv1.2|Used to revoke licenses for malicious apps on the Microsoft Store +|client.wns.windows.com|TLS v1.2|Used for the Windows Push Notification Services (WNS) +|*storecatalogrevocation.storequality.microsoft.com|TLS v1.2|Used to revoke licenses for malicious apps on the Microsoft Store |ctldl.windowsupdate.com|HTTP|Certificate Trust List |dmd.metaservices.microsoft.com|HTTP|Device metadata -|Inference.location.live.net|TLSv1.2|Location -|oneclient.sfx.ms|HTTP|OneDrive -|storage.live.com|TLSv1.2|One Drive -|skydrivesync.policies.live.net|TLSv1.2|OneDrive -|slscr.update.microsoft.com|HTTP/TLSv1.2|Windows Update -|fe2cr.update.microsoft.com|HTTP/TLSv1.2|Windows Update -|fe3cr.delivery.mp.microsoft.com|HTTP/TLSv1.2|Windows Update -|tsfe.trafficshaping.dsp.mp.microsoft.com|HTTP/TLSv1.2|Windows Update +|Inference.location.live.net|TLS v1.2|Location +|oneclient.sfx.ms|HTTPS|OneDrive +|storage.live.com|HTTP/TLS v1.2|One Drive +|skydrivesync.policies.live.net|TLS v1.2|OneDrive +|slscr.update.microsoft.com|HTTPS/TLS v1.2|Windows Update +|fe2cr.update.microsoft.com|HTTPS/TLS v1.2|Windows Update +|fe3cr.delivery.mp.microsoft.com|HTTPS/TLS v1.2|Windows Update +|tsfe.trafficshaping.dsp.mp.microsoft.com|HTTP/TLS v1.2|Windows Update |officehomeblobs.blob.core.windows.net|HTTP|Windows Telemetry -|displaycatalog.mp.microsoft.com/*|HTTP/TLSv1.2|Microsoft Store +|displaycatalog.mp.microsoft.com/*|HTTP/TLS v1.2|Microsoft Store |img-prod-cms-rt-microsoft-com.akamaized.net|HTTP|Used to communicate with Microsoft Store -|config.teams.microsoft.com|HTTP|Teams -|api.asm.skype.com|TLSv1.2|Used to retrieve Skype configuration values -|config.edge.skype.com|HTTP/TLSv1.2|Used to retrieve Skype configuration values -|logincdn.msauth.net|HTTP|OneDrive +|config.teams.microsoft.com|HTTPS|Teams +|api.asm.skype.com|TLS v1.2|Used to retrieve Skype configuration values +|config.edge.skype.com|HTTP/TLS v1.2|Used to retrieve Skype configuration values +|logincdn.msauth.net|HTTPS|OneDrive |iecvlist.microsoft.com|HTTP|Microsoft Edge |download.windowsupdate.com|HTTP|Windows Update -|checkappexec.microsoft.com|HTTP|Windows Defender +|checkappexec.microsoft.com|HTTPS|Windows Defender |pti.store.microsoft.com/*|HTTP|Microsoft Store |emdl.ws.microsoft.com|HTTP|Windows Update -|evoke-windowsservices-tas.msedge.net|TLSv1.2|Photos app -|g.live.com|TLSv1.2|OneDrive +|evoke-windowsservices-tas.msedge.net|HTTPS/TLS v1.2|Photos app +|g.live.com|TLS v1.2|OneDrive |go.microsoft.com|HTTP|Windows Defender -|licensing.mp.microsoft.com|HTTP|Licensing -|login.live.com|TLSv1.2|Device Authentication -|manage.devcenter.microsoft.com|TLSv1.2|Microsoft Store analytics +|licensing.mp.microsoft.com|HTTP/TLS v1.2|Licensing +|login.live.com|HTTPS/TLS v1.2|Device Authentication +|manage.devcenter.microsoft.com|TLS v1.2|Microsoft Store analytics |ocsp.digicert.com|HTTP|CRL and OCSP checks to the issuing certificate authorities -|ris.api.iris.microsoft.com|TLSv1.2|Windows spotlight -|telecommand.telemetry.microsoft.com|TLSv1.2|Used by Windows Error Reporting +|ris.api.iris.microsoft.com|TLS v1.2|Windows spotlight +|telecommand.telemetry.microsoft.com|TLS v1.2|Used by Windows Error Reporting |tile-service.weather.microsoft.com|HTTP|Used to download updates to the Weather app Live Tile -|v10.events.data.microsoft.com|TLSv1.2|Diagnostic Data -|V10.events.data.microsoft.com/onecollector/1.0/|HTTP|Diagnostic Data -|Watson.telemetry.microsoft.com/telemetry.request|HTTP|Diagnostic Data -|watson.telemetry.microsoft.com|HTTP|Diagnostic Data +|v10.events.data.microsoft.com|HTTPS/TLS v1.2|Diagnostic Data +|V10.events.data.microsoft.com/onecollector/1.0/|HTTPS|Diagnostic Data +|Watson.telemetry.microsoft.com/telemetry.request|HTTPS|Diagnostic Data +|watson.telemetry.microsoft.com|HTTPS|Diagnostic Data |outlook.office365.com|HTTP|Microsoft Office -|www.bing.com|TLSv1.2|Used for updates for Cortana, apps, and Live Tiles -|www.msftconnecttest.com|HTTP|Network Connection (NCSI) \ No newline at end of file +|www.bing.com|TLS v1.2|Used for updates for Cortana, apps, and Live Tiles +|www.msftconnecttest.com|HTTP|Network Connection (NCSI) From fa32ae9240ca83e30001ae7f191a0345f23b565b Mon Sep 17 00:00:00 2001 From: amirsc3 <42802974+amirsc3@users.noreply.github.com> Date: Tue, 21 Jul 2020 13:32:25 +0300 Subject: [PATCH 266/589] Update minimum-requirements.md fixed minor typo. "Windows 10 Enterprise 2016 LTSB edition" - LTSC naming convection started with 2019 version. reference: https://support.microsoft.com/en-us/help/13853/windows-lifecycle-fact-sheet --- .../microsoft-defender-atp/minimum-requirements.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md index 8f47832251..c623b0280f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md +++ b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md @@ -97,7 +97,7 @@ The hardware requirements for Microsoft Defender ATP on devices are the same for > [!NOTE] > Machines running mobile versions of Windows are not supported. > -> Virtual Machines running Windows 10 Enterprise 2016 LTSC (which is based on Windows 10, version 1607) may encounter performance issues if run on non-Microsoft virtualization platforms. +> Virtual Machines running Windows 10 Enterprise 2016 LTSB (which is based on Windows 10, version 1607) may encounter performance issues if run on non-Microsoft virtualization platforms. > > For virtual environments, we recommend using Windows 10 Enterprise LTSC 2019 (which is based on Windows 10, version 1809) or later. From 3bb3a424ef703c6504fe3547ebdedbf9f43fdd9f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 21 Jul 2020 08:09:03 -0700 Subject: [PATCH 267/589] Update manage-atp-post-migration-other-tools.md --- .../manage-atp-post-migration-other-tools.md | 23 ++++++++++++++++--- 1 file changed, 20 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index a30f564442..f55f370783 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -19,12 +19,22 @@ ms.topic: article # Manage Microsoft Defender Advanced Threat Protection with PowerShell, WMI, and MPCmdRun.exe -We recommend using Intune to manage your threat protection features in Microsoft Defender ATP. However, you can +We recommend using [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), which includes [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) and [Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection), to manage your organization's threat protection features in Microsoft Defender ATP. However, you can use PowerShell, Windows Management Instrumentation (WMI), and the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to perform some tasks, such as managing Microsoft Defender Antivirus. + ## Configure Microsoft Defender ATP with PowerShell You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. +> [!NOTE] +> PowerShell cmdlets should not be used as a replacement for a full network policy management infrastructure, such as [Configuration Manager](https://docs.microsoft.com/configmgr), [Group Policy Management Console](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), or [Microsoft Defender Antivirus Group Policy ADMX templates](https://www.microsoft.com/download/101445). Changes made with PowerShell will affect local settings on the device where the changes are deployed or made. Policies that are deployed using Group Policy, Configuration Manager, or Intune can overwrite changes made with PowerShell. + + +|Task |Resources to learn more | +|---------|---------| +|Manage Microsoft Defender Antivirus |[Use PowerShell cmdlets to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus) | +|Configure exploit protection | | +|Configure attack surface reduction rules | | ## Configure Microsoft Defender ATP with Windows Management Instrumentation (WMI) @@ -33,8 +43,15 @@ steps ## Configure Microsoft Defender ATP with Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) -steps + +|Task |Resources to learn more | +|---------|---------| +|Manage Microsoft Defender Antivirus |[Configure and manage Microsoft Defender Antivirus with the mpcmdrun.exe command-line tool](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus) | +|Row2 | | + ## Next steps -step +- [Get an overview of threat and vulnerability management](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt) + +- [Visit the Microsoft Defender Security Center security operations dashboard](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard) From defe69da2b2d45d0d93506d007095b03d87e5e17 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 21 Jul 2020 08:10:43 -0700 Subject: [PATCH 268/589] Update manage-atp-post-migration-other-tools.md --- .../manage-atp-post-migration-other-tools.md | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index f55f370783..4d050a3712 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -19,17 +19,13 @@ ms.topic: article # Manage Microsoft Defender Advanced Threat Protection with PowerShell, WMI, and MPCmdRun.exe -We recommend using [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), which includes [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) and [Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection), to manage your organization's threat protection features in Microsoft Defender ATP. However, you can use PowerShell, Windows Management Instrumentation (WMI), and the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to perform some tasks, such as managing Microsoft Defender Antivirus. +We recommend using [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), which includes [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) and [Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection), to manage your organization's threat protection features in Microsoft Defender ATP. However, you can use PowerShell, Windows Management Instrumentation (WMI), and the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to perform some tasks, such as managing Microsoft Defender Antivirus, or configuring some settings on a device. ## Configure Microsoft Defender ATP with PowerShell You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. -> [!NOTE] -> PowerShell cmdlets should not be used as a replacement for a full network policy management infrastructure, such as [Configuration Manager](https://docs.microsoft.com/configmgr), [Group Policy Management Console](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), or [Microsoft Defender Antivirus Group Policy ADMX templates](https://www.microsoft.com/download/101445). Changes made with PowerShell will affect local settings on the device where the changes are deployed or made. Policies that are deployed using Group Policy, Configuration Manager, or Intune can overwrite changes made with PowerShell. - - |Task |Resources to learn more | |---------|---------| |Manage Microsoft Defender Antivirus |[Use PowerShell cmdlets to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus) | From cfe4a4013fe992bcf87c1609bbc54255b12b4c33 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 21 Jul 2020 10:38:33 -0700 Subject: [PATCH 269/589] Update manage-atp-post-migration-other-tools.md --- .../manage-atp-post-migration-other-tools.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index 4d050a3712..e8d3196450 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -42,7 +42,7 @@ steps |Task |Resources to learn more | |---------|---------| -|Manage Microsoft Defender Antivirus |[Configure and manage Microsoft Defender Antivirus with the mpcmdrun.exe command-line tool](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus) | +|Manage Microsoft Defender Antivirus |[Configure and manage Microsoft Defender Antivirus with the Microsoft Malware Protection Command Line Utility (mpcmdrun.exe) command-line tool](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus) | |Row2 | | From 4de60604f2cd84cd560971584780aa2382e50de9 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 21 Jul 2020 11:26:11 -0700 Subject: [PATCH 270/589] Update edr-in-block-mode.md --- .../microsoft-defender-atp/edr-in-block-mode.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md index 8740ad82d5..12436534f1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md +++ b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md @@ -66,7 +66,7 @@ The following image shows an instance of unwanted software that was detected and |Microsoft Defender Antivirus engine |Make sure your engine is up to date. Using PowerShell, run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps) cmdlet as an administrator.
In the **AMEngineVersion** line, you should see **1.1.16700.2** or above. | > [!IMPORTANT] -> To get the best protection value, make sure your antivirus solution is configured to receive regular updates and essential features. +> To get the best protection value, make sure your antivirus solution is configured to receive regular updates and essential features, and that your exclusions are defined. ## Frequently asked questions From 26742ce6442d5d8ad4fc44cef06cc93ddaf2445e Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 21 Jul 2020 11:28:51 -0700 Subject: [PATCH 271/589] Update policy-csps-supported-by-surface-hub.md --- .../policy-csps-supported-by-surface-hub.md | 20 ++++++++++++++++++- 1 file changed, 19 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md index 29329bc947..5f0354a75a 100644 --- a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md +++ b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md @@ -17,7 +17,7 @@ ms.date: 07/21/2020 - [ApplicationManagement/AllowAppStoreAutoUpdate](policy-csp-applicationmanagement#applicationmanagement-allowappstoreautoupdate) - [ApplicationManagement/AllowDeveloperUnlock](policy-csp-applicationmanagement#applicationmanagement-allowdeveloperunlock) -- [Accounts/AllowMicrosoftAccountConnection](policy-csp-accounts#accounts-allowmicrosoftaccountconnection +- [Accounts/AllowMicrosoftAccountConnection](policy-csp-accounts#accounts-allowmicrosoftaccountconnection) - [Camera/AllowCamera](policy-csp-camera.md#camera-allowcamera) - [Cellular/ShowAppCellularAccessUI](policy-csp-cellular.md#cellular-showappcellularaccessui) - [Cryptography/AllowFipsAlgorithmPolicy](policy-csp-cryptography.md#cryptography-allowfipsalgorithmpolicy) @@ -65,6 +65,7 @@ ms.date: 07/21/2020 - [DeliveryOptimization/DOMonthlyUploadDataCap](policy-csp-deliveryoptimization.md#deliveryoptimization-domonthlyuploaddatacap) - [DeliveryOptimization/DOPercentageMaxDownloadBandwidth](policy-csp-deliveryoptimization.md#deliveryoptimization-dopercentagemaxdownloadbandwidth) - [Desktop/PreventUserRedirectionOfProfileFolders](policy-csp-desktop.md#desktop-preventuserredirectionofprofilefolders) +- [RestrictedGroups/ConfigureGroupMembership](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-restrictedgroups) - [TextInput/AllowIMELogging](policy-csp-textinput.md#textinput-allowimelogging) - [TextInput/AllowIMENetworkAccess](policy-csp-textinput.md#textinput-allowimenetworkaccess) - [TextInput/AllowInputPanel](policy-csp-textinput.md#textinput-allowinputpanel) @@ -76,7 +77,24 @@ ms.date: 07/21/2020 - [TextInput/ExcludeJapaneseIMEExceptJIS0208](policy-csp-textinput.md#textinput-excludejapaneseimeexceptjis0208) - [TextInput/ExcludeJapaneseIMEExceptJIS0208andEUDC](policy-csp-textinput.md#textinput-excludejapaneseimeexceptjis0208andeudc) - [TextInput/ExcludeJapaneseIMEExceptShiftJIS](policy-csp-textinput.md#textinput-excludejapaneseimeexceptshiftjis) +- [Wifi/AllowInternetSharing]policy-csp-wifi#wifi-allowinternetsharing) +- [Wifi/AllowManualWiFiConfiguration](policy-csp-wifi#wifi-allowmanualwificonfiguration) +- [Wifi/AllowWiFi](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-wifi#wifi-allowwifi) - [WiFi/AllowWiFiHotSpotReporting](policy-csp-wifi.md#wifi-allowwifihotspotreporting) +- [Wifi/AllowWiFiDirect](policy-csp-wifi#wifi-allowwifidirect) +[WirelessDisplay/AllowMdnsAdvertisement]( +policy-csp-wirelessdisplay#wirelessdisplay-allowmdnsadvertisement) +[WirelessDisplay/AllowMdnsDiscovery]( +policy-csp-wirelessdisplay#wirelessdisplay-allowmdnsdiscovery) +[WirelessDisplay/AllowProjectionFromPC](policy-csp-wirelessdisplay#wirelessdisplay-allowprojectionfrompc) +[WirelessDisplay/AllowProjectionFromPCOverInfrastructure](policy-csp-wirelessdisplay#wirelessdisplay-allowprojectionfrompcoverinfrastructure) +[WirelessDisplay/AllowProjectionToPC](policy-csp-wirelessdisplay#wirelessdisplay-allowprojectiontopc) +[WirelessDisplay/AllowProjectionToPCOverInfrastructure](policy-csp-wirelessdisplay#wirelessdisplay-allowprojectiontopcoverinfrastructure) +[WirelessDisplay/AllowUserInputFromWirelessDisplayReceiver]( +policy-csp-wirelessdisplay#wirelessdisplay-allowuserinputfromwirelessdisplayreceiver) +[WirelessDisplay/RequirePinForPairing]( +policy-csp-wirelessdisplay#wirelessdisplay-requirepinforpairing) + ## Related topics From e39d503b809a4a62c5dd5922d6ab4b8b66a37044 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 21 Jul 2020 11:30:52 -0700 Subject: [PATCH 272/589] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 9ee5965970..009850c590 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -343,7 +343,7 @@ GUID: `b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4` ### Block Office communication application from creating child processes -This rule prevents Outlook from creating child processes, while till allowing legitimate Outlook functions. +This rule prevents Outlook from creating child processes, while still allowing legitimate Outlook functions. This protects against social engineering attacks and prevents exploit code from abusing vulnerabilities in Outlook. It also protects against [Outlook rules and forms exploits](https://blogs.technet.microsoft.com/office365security/defending-against-rules-and-forms-injection/) that attackers can use when a user's credentials are compromised. From b2558c1907385336a9506b4c288589cc68def11d Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 21 Jul 2020 12:10:44 -0700 Subject: [PATCH 273/589] Update configuration-service-provider-reference.md Adds Surface Hub CSPs supported in Windows 10 2020 Team Update Preview Build --- .../mdm/configuration-service-provider-reference.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index 59751b300b..81d5779e45 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -2744,8 +2744,10 @@ The following list shows the CSPs supported in HoloLens devices: ## CSPs supported in Microsoft Surface Hub +- [Accounts CSP](accounts-csp)9 **Note:** Support in Surface Hub is limited to **Domain\ComputerName**. - [AccountManagement CSP](accountmanagement-csp.md) - [APPLICATION CSP](application-csp.md) +- [Bitlocker-csp](bitlocker-csp)9 - [CertificateStore CSP](certificatestore-csp.md) - [ClientCertificateInstall CSP](clientcertificateinstall-csp.md) - [Defender CSP](defender-csp.md) @@ -2757,18 +2759,21 @@ The following list shows the CSPs supported in HoloLens devices: - [DMAcc CSP](dmacc-csp.md) - [DMClient CSP](dmclient-csp.md) - [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) +- [Firewall-csp](firewall-csp)9 - [HealthAttestation CSP](healthattestation-csp.md) - [NetworkQoSPolicy CSP](networkqospolicy-csp.md) - [NodeCache CSP](nodecache-csp.md) - [PassportForWork CSP](passportforwork-csp.md) - [Policy CSP](policy-configuration-service-provider.md) - [Reboot CSP](reboot-csp.md) -- [RemoteWipe CSP](remotewipe-csp.md) +- [RemoteWipe CSP](remotewipe-csp.md)9 - [Reporting CSP](reporting-csp.md) - [RootCATrustedCertificates CSP](rootcacertificates-csp.md) - [SurfaceHub CSP](surfacehub-csp.md) - [UEFI CSP](uefi-csp.md) +- [Wifi-csp](wifi-csp)9 - [WindowsAdvancedThreatProtection CSP](windowsadvancedthreatprotection-csp.md) +- [Wirednetwork-csp](wirednetwork-csp)9 ## CSPs supported in Windows 10 IoT Core @@ -2807,3 +2812,4 @@ The following list shows the CSPs supported in HoloLens devices: - 6 - Added in Windows 10, version 1903. - 7 - Added in Windows 10, version 1909. - 8 - Added in Windows 10, version 2004. +- 9 - Added in Windows 10 Team 2020 Update From c20759c4ac030f5ba1fb83be929dea48a2d54314 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 21 Jul 2020 12:23:22 -0700 Subject: [PATCH 274/589] Update policy-csps-supported-by-surface-hub.md corrects links --- .../policy-csps-supported-by-surface-hub.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md index 5f0354a75a..7143291c4b 100644 --- a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md +++ b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md @@ -77,22 +77,22 @@ ms.date: 07/21/2020 - [TextInput/ExcludeJapaneseIMEExceptJIS0208](policy-csp-textinput.md#textinput-excludejapaneseimeexceptjis0208) - [TextInput/ExcludeJapaneseIMEExceptJIS0208andEUDC](policy-csp-textinput.md#textinput-excludejapaneseimeexceptjis0208andeudc) - [TextInput/ExcludeJapaneseIMEExceptShiftJIS](policy-csp-textinput.md#textinput-excludejapaneseimeexceptshiftjis) -- [Wifi/AllowInternetSharing]policy-csp-wifi#wifi-allowinternetsharing) +- [Wifi/AllowInternetSharing](policy-csp-wifi#wifi-allowinternetsharing) - [Wifi/AllowManualWiFiConfiguration](policy-csp-wifi#wifi-allowmanualwificonfiguration) - [Wifi/AllowWiFi](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-wifi#wifi-allowwifi) - [WiFi/AllowWiFiHotSpotReporting](policy-csp-wifi.md#wifi-allowwifihotspotreporting) - [Wifi/AllowWiFiDirect](policy-csp-wifi#wifi-allowwifidirect) -[WirelessDisplay/AllowMdnsAdvertisement]( +- [WirelessDisplay/AllowMdnsAdvertisement]( policy-csp-wirelessdisplay#wirelessdisplay-allowmdnsadvertisement) -[WirelessDisplay/AllowMdnsDiscovery]( +- [WirelessDisplay/AllowMdnsDiscovery]( policy-csp-wirelessdisplay#wirelessdisplay-allowmdnsdiscovery) -[WirelessDisplay/AllowProjectionFromPC](policy-csp-wirelessdisplay#wirelessdisplay-allowprojectionfrompc) -[WirelessDisplay/AllowProjectionFromPCOverInfrastructure](policy-csp-wirelessdisplay#wirelessdisplay-allowprojectionfrompcoverinfrastructure) -[WirelessDisplay/AllowProjectionToPC](policy-csp-wirelessdisplay#wirelessdisplay-allowprojectiontopc) -[WirelessDisplay/AllowProjectionToPCOverInfrastructure](policy-csp-wirelessdisplay#wirelessdisplay-allowprojectiontopcoverinfrastructure) -[WirelessDisplay/AllowUserInputFromWirelessDisplayReceiver]( +- [WirelessDisplay/AllowProjectionFromPC](policy-csp-wirelessdisplay#wirelessdisplay-allowprojectionfrompc) +- [WirelessDisplay/AllowProjectionFromPCOverInfrastructure](policy-csp-wirelessdisplay#wirelessdisplay-allowprojectionfrompcoverinfrastructure) +- [WirelessDisplay/AllowProjectionToPC](policy-csp-wirelessdisplay#wirelessdisplay-allowprojectiontopc) +- [WirelessDisplay/AllowProjectionToPCOverInfrastructure](policy-csp-wirelessdisplay#wirelessdisplay-allowprojectiontopcoverinfrastructure) +- [WirelessDisplay/AllowUserInputFromWirelessDisplayReceiver]( policy-csp-wirelessdisplay#wirelessdisplay-allowuserinputfromwirelessdisplayreceiver) -[WirelessDisplay/RequirePinForPairing]( +- [WirelessDisplay/RequirePinForPairing]( policy-csp-wirelessdisplay#wirelessdisplay-requirepinforpairing) From 85659a6587926cc0b355c5a8d8348427f63ed6a6 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 21 Jul 2020 12:45:36 -0700 Subject: [PATCH 275/589] Acrolinx improvements --- .../smart-card-debugging-information.md | 36 +++++++++---------- 1 file changed, 18 insertions(+), 18 deletions(-) diff --git a/windows/security/identity-protection/smart-cards/smart-card-debugging-information.md b/windows/security/identity-protection/smart-cards/smart-card-debugging-information.md index 9ee26abcab..cff2a3a415 100644 --- a/windows/security/identity-protection/smart-cards/smart-card-debugging-information.md +++ b/windows/security/identity-protection/smart-cards/smart-card-debugging-information.md @@ -1,12 +1,12 @@ --- -title: Smart Cards Debugging Information (Windows 10) -description: This topic explains tools and services that smart card developers can use to help identify certificate issues with the smart card deployment. +title: Smart Card Troubleshooting (Windows 10) +description: Describes the tools and services that smart card developers can use to help identify certificate issues with the smart card deployment. ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security audience: ITPro -author: dulcemontemayor +author: dansimp ms.author: dansimp manager: dansimp ms.collection: M365-identity-device-management @@ -16,11 +16,11 @@ ms.date: 04/19/2017 ms.reviewer: --- -# Smart Cards Debugging Information +# Smart Card Troubleshooting Applies To: Windows 10, Windows Server 2016 -This topic explains tools and services that smart card developers can use to help identify certificate issues with the smart card deployment. +This article explains tools and services that smart card developers can use to help identify certificate issues with the smart card deployment. Debugging and tracing smart card issues requires a variety of tools and approaches. The following sections provide guidance about tools and approaches you can use. @@ -28,7 +28,7 @@ Debugging and tracing smart card issues requires a variety of tools and approach - [Debugging and tracing using WPP](#debugging-and-tracing-using-wpp) -- [Kerberos protocol, KDC and NTLM debugging and tracing](#kerberos-protocol-kdc-and-ntlm-debugging-and-tracing) +- [Kerberos protocol, KDC, and NTLM debugging and tracing](#kerberos-protocol-kdc-and-ntlm-debugging-and-tracing) - [Smart Card service](#smart-card-service) @@ -56,7 +56,7 @@ To delete a container, type **certutil -delkey -csp "Microsoft Base Smart Card C ## Debugging and tracing using WPP -Windows software trace preprocessor (WPP) simplifies tracing the operation of the trace provider, and it provides a mechanism for the trace provider to log real-time binary messages. Logged messages can subsequently be converted to a human-readable trace of the operation of the trace provider. For more information about WPP, see [Diagnostics with WPP - The NDIS blog](https://blogs.msdn.com/b/ndis/archive/2011/04/06/diagnostics-with-wpp.aspx). +Windows software trace preprocessor (WPP) simplifies tracing the operation of the trace provider. It provides a mechanism for the trace provider to log real-time binary messages. Logged messages can be converted to a human-readable trace of the operation. For more information, see [Diagnostics with WPP - The NDIS blog](https://blogs.msdn.com/b/ndis/archive/2011/04/06/diagnostics-with-wpp.aspx). ### Enable the trace @@ -112,13 +112,13 @@ To stop a trace: -You can use the following resources to begin troubleshooting these protocols and the KDC: +You can use these resources to troubleshoot these protocols and the KDC: - [Kerberos and LDAP Troubleshooting Tips](https://technet.microsoft.com/library/bb463167.aspx) - [Windows Driver Kit (WDK) and Debugging Tools for Windows (WinDbg)](https://developer.microsoft.com/en-us/windows/hardware/windows-driver-kit)  You can use the trace log tool in this SDK to debug Kerberos authentication failures. -To begin tracing, you can use Tracelog. Different components use different control GUIDs as explained in the following examples. For more information, see [Tracelog](https://msdn.microsoft.com/library/windows/hardware/ff552994.aspx). +To begin tracing, you can use Tracelog. Different components use different control GUIDs as explained in these examples. For more information, see [Tracelog](https://msdn.microsoft.com/library/windows/hardware/ff552994.aspx). ### NTLM @@ -126,17 +126,17 @@ To enable tracing for NTLM authentication, run the following at the command line tracelog.exe -kd -rt -start ntlm -guid \#5BBB6C18-AA45-49b1-A15F-085F7ED0AA90 -f .\\ntlm.etl -flags 0x15003 -ft 1 -To stop tracing for NTLM authentication, run the following at the command line: +To stop tracing for NTLM authentication, run this command: tracelog -stop ntlm ### Kerberos authentication -To enable tracing for Kerberos authentication, run the following at the command line: +To enable tracing for Kerberos authentication, run this command: tracelog.exe -kd -rt -start kerb -guid \#6B510852-3583-4e2d-AFFE-A67F9F223438 -f .\\kerb.etl -flags 0x43 -ft 1 -To stop tracing for Kerberos authentication, run the following at the command line: +To stop tracing for Kerberos authentication, run this command: tracelog.exe -stop kerb @@ -150,7 +150,7 @@ To stop tracing for the KDC, run the following at the command line: tracelog.exe -stop kdc -To stop tracing from a remote computer, run the following at the command line: logman.exe -s *<ComputerName>*. +To stop tracing from a remote computer, run this command: logman.exe -s *<ComputerName>*. > **Note**  The default location for logman.exe is %systemroot%system32\\. Use the **-s** option to supply a computer name. @@ -166,7 +166,7 @@ You can also configure tracing by editing the Kerberos registry values shown in If you used Tracelog, look for the following log file in your current directory: kerb.etl/kdc.etl/ntlm.etl. -Otherwise, if you used the registry key settings shown in the previous table, look for the generated trace log files in the following locations: +If you used the registry key settings shown in the previous table, look for the trace log files in the following locations: - NTLM: %systemroot%\\tracing\\msv1\_0 @@ -178,7 +178,7 @@ To decode event trace files, you can use Tracefmt (tracefmt.exe). Tracefmt is a ## Smart Card service -The smart card resource manager service runs in the context of a local service, and it is implemented as a shared service of the services host (svchost) process. +The smart card resource manager service runs in the context of a local service. It's implemented as a shared service of the services host (svchost) process. **To check if Smart Card service is running** @@ -202,7 +202,7 @@ The smart card resource manager service runs in the context of a local service, You can use the following command at the command prompt to check whether the service is running: **sc queryex scardsvr**. -The following is example output from running this command: +This is an example output from this command: ``` SERVICE_NAME: scardsvr @@ -236,9 +236,9 @@ As with any device connected to a computer, Device Manager can be used to view p ## CryptoAPI 2.0 Diagnostics -CryptoAPI 2.0 Diagnostics is a feature that is available in Windows operating systems that supports CryptoAPI 2.0. This feature can help you troubleshoot public key infrastructure (PKI) issues. +CryptoAPI 2.0 Diagnostics is available in Windows versions that support CryptoAPI 2.0 and can help you troubleshoot public key infrastructure (PKI) issues. -CryptoAPI 2.0 Diagnostics logs events in the Windows event log, which contain detailed information about certificate chain validation, certificate store operations, and signature verification. This information makes it easier to identify the causes of issues and reduces the time required for diagnosis. +CryptoAPI 2.0 Diagnostics logs events in the Windows event log. The logs contain detailed information about certificate chain validation, certificate store operations, and signature verification. This information makes it easier to identify the causes of issues and reduces the time required for diagnosis. For more information about CryptoAPI 2.0 Diagnostics, see [Troubleshooting an Enterprise PKI](https://technet.microsoft.com/library/cc771463.aspx). From a98cd5275447d4dfab1a3fee873bc4032a47026e Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 21 Jul 2020 13:39:02 -0700 Subject: [PATCH 276/589] Update policy-csps-supported-by-surface-hub.md --- .../mdm/policy-csps-supported-by-surface-hub.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md index 7143291c4b..71afc212d8 100644 --- a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md +++ b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md @@ -15,7 +15,7 @@ ms.date: 07/21/2020 # Policy CSPs supported by Microsoft Surface Hub -- [ApplicationManagement/AllowAppStoreAutoUpdate](policy-csp-applicationmanagement#applicationmanagement-allowappstoreautoupdate) +- [ApplicationManagement/AllowAppStoreAutoUpdate](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-applicationmanagement#applicationmanagement-allowappstoreautoupdate) - [ApplicationManagement/AllowDeveloperUnlock](policy-csp-applicationmanagement#applicationmanagement-allowdeveloperunlock) - [Accounts/AllowMicrosoftAccountConnection](policy-csp-accounts#accounts-allowmicrosoftaccountconnection) - [Camera/AllowCamera](policy-csp-camera.md#camera-allowcamera) From 65ccd59b03cccfc879682bed905066b675a461d1 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 21 Jul 2020 13:42:06 -0700 Subject: [PATCH 277/589] Update manage-atp-post-migration-configuration-manager.md --- .../manage-atp-post-migration-configuration-manager.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index 4ee135ecf9..ab31627d83 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -27,7 +27,7 @@ The following table lists various tasks you can perform to configure Microsoft D |Task |Resources to learn more | |---------|---------| -|Manage your organization's devices using Configuration Manager |link | +|Manage your organization's devices using Configuration Manager |[Configuration Manager: Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) | |task |link | From 0f658b2c3c5581133bfaa192d733d80befb44cf3 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 21 Jul 2020 13:54:00 -0700 Subject: [PATCH 278/589] Update manage-atp-post-migration-configuration-manager.md --- .../manage-atp-post-migration-configuration-manager.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index ab31627d83..64afa8a6df 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -27,7 +27,7 @@ The following table lists various tasks you can perform to configure Microsoft D |Task |Resources to learn more | |---------|---------| -|Manage your organization's devices using Configuration Manager |[Configuration Manager: Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) | +|Manage your organization's devices using Configuration Manager

|[Configuration Manager: Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection)

[Onboarding to Microsoft Defender ATP with Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection#about-onboarding-to-atp-with-configuration-manager) | |task |link | From f9b22f388a759d50f1b809ed898df0c73934b580 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Tue, 21 Jul 2020 13:54:39 -0700 Subject: [PATCH 279/589] Applied [!NOTE] styles, added bold to command lines --- .../smart-card-debugging-information.md | 38 ++++++++++--------- 1 file changed, 20 insertions(+), 18 deletions(-) diff --git a/windows/security/identity-protection/smart-cards/smart-card-debugging-information.md b/windows/security/identity-protection/smart-cards/smart-card-debugging-information.md index cff2a3a415..93756bb9ff 100644 --- a/windows/security/identity-protection/smart-cards/smart-card-debugging-information.md +++ b/windows/security/identity-protection/smart-cards/smart-card-debugging-information.md @@ -44,7 +44,8 @@ For a complete description of Certutil including examples that show how to use i To list certificates that are available on the smart card, type certutil -scinfo. -> **Note**  Entering a PIN is not required for this operation. You can press ESC if you are prompted for a PIN. +> [!NOTE] +> Entering a PIN is not required for this operation. You can press ESC if you are prompted for a PIN. ### Delete certificates on the smart card @@ -68,7 +69,7 @@ Using WPP, use one of the following commands to enable tracing: You can use the parameters in the following table. -| **Friendly name** | **GUID** | **Flags** | +| Friendly name | GUID | Flags | |-------------------|--------------------------------------|-----------| | scardsvr | 13038e47-ffec-425d-bc69-5707708075fe | 0xffff | | winscard | 3fce7c5f-fb3b-4bce-a9d8-55cc0ce1cf01 | 0xffff | @@ -84,13 +85,13 @@ Examples To enable tracing for the SCardSvr service: -- tracelog.exe -kd -rt -start scardsvr -guid \#13038e47-ffec-425d-bc69-5707708075fe -f .\\scardsvr.etl -flags 0xffff -ft 1 +- **tracelog.exe -kd -rt -start scardsvr -guid \#13038e47-ffec-425d-bc69-5707708075fe -f .\\scardsvr.etl -flags 0xffff -ft 1** -- logman start scardsvr -ets -p {13038e47-ffec-425d-bc69-5707708075fe} 0xffff -ft 1 -rt -o .\\scardsvr.etl -mode 0x00080000 +- **logman start scardsvr -ets -p {13038e47-ffec-425d-bc69-5707708075fe} 0xffff -ft 1 -rt -o .\\scardsvr.etl -mode 0x00080000** To enable tracing for scfilter.sys: -tracelog.exe -kd -rt -start scfilter -guid \#eed7f3c9-62ba-400e-a001-658869df9a91 -f .\\scfilter.etl -flags 0xffff -ft 1 +**tracelog.exe -kd -rt -start scfilter -guid \#eed7f3c9-62ba-400e-a001-658869df9a91 -f .\\scfilter.etl -flags 0xffff -ft 1** ### Stop the trace @@ -104,9 +105,9 @@ Examples To stop a trace: -- tracelog.exe -stop scardsvr +- **tracelog.exe -stop scardsvr** -- logman -stop scardsvr -ets +- **logman -stop scardsvr -ets** ## Kerberos protocol, KDC and NTLM debugging and tracing @@ -114,9 +115,9 @@ To stop a trace: You can use these resources to troubleshoot these protocols and the KDC: -- [Kerberos and LDAP Troubleshooting Tips](https://technet.microsoft.com/library/bb463167.aspx) +- [Kerberos and LDAP Troubleshooting Tips](https://technet.microsoft.com/library/bb463167.aspx). -- [Windows Driver Kit (WDK) and Debugging Tools for Windows (WinDbg)](https://developer.microsoft.com/en-us/windows/hardware/windows-driver-kit)  You can use the trace log tool in this SDK to debug Kerberos authentication failures. +- [Windows Driver Kit (WDK) and Debugging Tools for Windows (WinDbg)](https://developer.microsoft.com/en-us/windows/hardware/windows-driver-kit).  You can use the trace log tool in this SDK to debug Kerberos authentication failures. To begin tracing, you can use Tracelog. Different components use different control GUIDs as explained in these examples. For more information, see [Tracelog](https://msdn.microsoft.com/library/windows/hardware/ff552994.aspx). @@ -124,41 +125,42 @@ To begin tracing, you can use Tracelog. Different components use different contr To enable tracing for NTLM authentication, run the following at the command line: -tracelog.exe -kd -rt -start ntlm -guid \#5BBB6C18-AA45-49b1-A15F-085F7ED0AA90 -f .\\ntlm.etl -flags 0x15003 -ft 1 +**tracelog.exe -kd -rt -start ntlm -guid \#5BBB6C18-AA45-49b1-A15F-085F7ED0AA90 -f .\\ntlm.etl -flags 0x15003 -ft 1** To stop tracing for NTLM authentication, run this command: -tracelog -stop ntlm +**tracelog -stop ntlm** ### Kerberos authentication To enable tracing for Kerberos authentication, run this command: -tracelog.exe -kd -rt -start kerb -guid \#6B510852-3583-4e2d-AFFE-A67F9F223438 -f .\\kerb.etl -flags 0x43 -ft 1 +**tracelog.exe -kd -rt -start kerb -guid \#6B510852-3583-4e2d-AFFE-A67F9F223438 -f .\\kerb.etl -flags 0x43 -ft 1** To stop tracing for Kerberos authentication, run this command: -tracelog.exe -stop kerb +**tracelog.exe -stop kerb** ### KDC To enable tracing for the Key Distribution Center (KDC), run the following at the command line: -tracelog.exe -kd -rt -start kdc -guid \#1BBA8B19-7F31-43c0-9643-6E911F79A06B -f .\\kdc.etl -flags 0x803 -ft 1 +**tracelog.exe -kd -rt -start kdc -guid \#1BBA8B19-7F31-43c0-9643-6E911F79A06B -f .\\kdc.etl -flags 0x803 -ft 1** To stop tracing for the KDC, run the following at the command line: -tracelog.exe -stop kdc +**tracelog.exe -stop kdc** To stop tracing from a remote computer, run this command: logman.exe -s *<ComputerName>*. -> **Note**  The default location for logman.exe is %systemroot%system32\\. Use the **-s** option to supply a computer name. +> [!NOTE] +> The default location for logman.exe is %systemroot%system32\\. Use the **-s** option to supply a computer name. ### Configure tracing with the registry You can also configure tracing by editing the Kerberos registry values shown in the following table. -| **Element** | **Registry Key Setting** | +| Element | Registry Key Setting | |-------------|----------------------------------------------------| | NTLM | HKEY\_LOCAL\_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Lsa\\MSV1\_0
Value name: NtLmInfoLevel
Value type: DWORD
Value data: c0015003 | | Kerberos | HKEY\_LOCAL\_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Lsa\\Kerberos
Value name: LogToFile
Value type: DWORD
Value data: 00000001

HKEY\_LOCAL\_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Lsa\\Kerberos\\Parameters
Value name: KerbDebugLevel
Value type: DWORD
Value data: c0000043

HKEY\_LOCAL\_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Lsa\\Kerberos\\Parameters
Value name: LogToFile
Value type: DWORD
Value data: 00000001 | @@ -204,7 +206,7 @@ You can use the following command at the command prompt to check whether the ser This is an example output from this command: -``` +```console SERVICE_NAME: scardsvr TYPE : 20 WIN32_SHARE_PROCESS STATE : 4 RUNNING From 08dbe9828aef0a32033d673f0e532d9a742c91a5 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 21 Jul 2020 14:01:20 -0700 Subject: [PATCH 280/589] Update policy-csps-supported-by-surface-hub.md --- .../mdm/policy-csps-supported-by-surface-hub.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md index 71afc212d8..b32eded81d 100644 --- a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md +++ b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md @@ -9,14 +9,14 @@ ms.prod: w10 ms.technology: windows author: manikadhiman ms.localizationpriority: medium -ms.date: 07/21/2020 +ms.date: 07/22/2020 --- # Policy CSPs supported by Microsoft Surface Hub - [ApplicationManagement/AllowAppStoreAutoUpdate](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-applicationmanagement#applicationmanagement-allowappstoreautoupdate) -- [ApplicationManagement/AllowDeveloperUnlock](policy-csp-applicationmanagement#applicationmanagement-allowdeveloperunlock) +- [ApplicationManagement/AllowDeveloperUnlock](mdm/policy-csp-applicationmanagement#applicationmanagement-allowdeveloperunlock) - [Accounts/AllowMicrosoftAccountConnection](policy-csp-accounts#accounts-allowmicrosoftaccountconnection) - [Camera/AllowCamera](policy-csp-camera.md#camera-allowcamera) - [Cellular/ShowAppCellularAccessUI](policy-csp-cellular.md#cellular-showappcellularaccessui) From 4372f79714aae0b286501e48813944dff9704d64 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Tue, 21 Jul 2020 14:14:57 -0700 Subject: [PATCH 281/589] Applied [!NOTE], markup for command lines --- .../smart-card-debugging-information.md | 19 ++++++++++--------- 1 file changed, 10 insertions(+), 9 deletions(-) diff --git a/windows/security/identity-protection/smart-cards/smart-card-debugging-information.md b/windows/security/identity-protection/smart-cards/smart-card-debugging-information.md index 93756bb9ff..5e7c2ded4f 100644 --- a/windows/security/identity-protection/smart-cards/smart-card-debugging-information.md +++ b/windows/security/identity-protection/smart-cards/smart-card-debugging-information.md @@ -91,7 +91,7 @@ To enable tracing for the SCardSvr service: To enable tracing for scfilter.sys: -**tracelog.exe -kd -rt -start scfilter -guid \#eed7f3c9-62ba-400e-a001-658869df9a91 -f .\\scfilter.etl -flags 0xffff -ft 1** + - **tracelog.exe -kd -rt -start scfilter -guid \#eed7f3c9-62ba-400e-a001-658869df9a91 -f .\\scfilter.etl -flags 0xffff -ft 1** ### Stop the trace @@ -101,7 +101,7 @@ Using WPP, use one of the following commands to stop the tracing: - **logman -stop** <*FriendlyName*> **-ets** -Examples +#### Examples To stop a trace: @@ -125,31 +125,31 @@ To begin tracing, you can use Tracelog. Different components use different contr To enable tracing for NTLM authentication, run the following at the command line: -**tracelog.exe -kd -rt -start ntlm -guid \#5BBB6C18-AA45-49b1-A15F-085F7ED0AA90 -f .\\ntlm.etl -flags 0x15003 -ft 1** +> **tracelog.exe -kd -rt -start ntlm -guid \#5BBB6C18-AA45-49b1-A15F-085F7ED0AA90 -f .\\ntlm.etl -flags 0x15003 -ft 1** To stop tracing for NTLM authentication, run this command: -**tracelog -stop ntlm** +> **tracelog -stop ntlm** ### Kerberos authentication To enable tracing for Kerberos authentication, run this command: -**tracelog.exe -kd -rt -start kerb -guid \#6B510852-3583-4e2d-AFFE-A67F9F223438 -f .\\kerb.etl -flags 0x43 -ft 1** +> **tracelog.exe -kd -rt -start kerb -guid \#6B510852-3583-4e2d-AFFE-A67F9F223438 -f .\\kerb.etl -flags 0x43 -ft 1** To stop tracing for Kerberos authentication, run this command: -**tracelog.exe -stop kerb** +> **tracelog.exe -stop kerb** ### KDC To enable tracing for the Key Distribution Center (KDC), run the following at the command line: -**tracelog.exe -kd -rt -start kdc -guid \#1BBA8B19-7F31-43c0-9643-6E911F79A06B -f .\\kdc.etl -flags 0x803 -ft 1** +> **tracelog.exe -kd -rt -start kdc -guid \#1BBA8B19-7F31-43c0-9643-6E911F79A06B -f .\\kdc.etl -flags 0x803 -ft 1** To stop tracing for the KDC, run the following at the command line: -**tracelog.exe -stop kdc** +> **tracelog.exe -stop kdc** To stop tracing from a remote computer, run this command: logman.exe -s *<ComputerName>*. @@ -234,7 +234,8 @@ As with any device connected to a computer, Device Manager can be used to view p 4. In Device Manager, expand **Smart card readers**, select the name of the smart card reader you want to check, and then click **Properties**. -> **Note**  If the smart card reader is not listed in Device Manager, in the **Action** menu, click **Scan for hardware changes**. +> [!NOTE] +> If the smart card reader is not listed in Device Manager, in the **Action** menu, click **Scan for hardware changes**. ## CryptoAPI 2.0 Diagnostics From 565160cc9b883e9a503b5bd86098c0e8e76d054e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 21 Jul 2020 14:20:13 -0700 Subject: [PATCH 282/589] Update manage-atp-post-migration-configuration-manager.md --- .../manage-atp-post-migration-configuration-manager.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index 64afa8a6df..5890d7e96a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -19,7 +19,11 @@ ms.topic: article # Manage Microsoft Defender Advanced Threat Protection with Configuration Manager -We recommend using Configuration Manager to manage threat protection features for the devices (also referred to as endpoints) within your organization. +You can use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage your organization's threat protection features for devices (also referred to as endpoints) within your organization. Configuration Manager is part of Microsoft Endpoint Manager, along with Intune, Desktop Analytics, and other features and capabilities. [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). + +## Find your Microsoft Defender ATP settings in Configuration Manager + +1. ## Configure Microsoft Defender ATP with Configuration Manager From ad9c02586e236765d9fedb854c744822e361cd52 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Tue, 21 Jul 2020 14:34:04 -0700 Subject: [PATCH 283/589] adding redirects --- .openpublishing.redirection.json | Bin 2576184 -> 2578182 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 52940ae69fce7589fd101c762f38412b41d0bf16..18b4fdd37ef24223480153af7915343121f0cac1 100644 GIT binary patch delta 368 zcmdlnZ!Tloy19%EEsQNpEzB(}EvzkUE$l5EEu1Y}E!-_UExav!E&MG4ErKmVEy67# zEut-AE#fT_Es`x#Ez&JAEwU|gE%Gf2Es8BlEy^t_EvhYQThx2JCtnb-m>j@jH(g-~ zW5)CXAN6h1CkQg1nEt_6eb)31J#2Y!1s_%jnoJk)Q|6l<=b~IN`2u6s^bG;Z3ezuW zD0499F{Di1=qo%u$(%=Idel4)2ON6E(-~423K)tQbQv-kN`PcKLn)AzGF`BM(Vsjs z<)&XK7iJMHVklI C`g;KY delta 115 zcmV~$PZEJ(9Dw2Zh0niGDG`OD?%)dcou-AwJEn!LX;nus7G|<=gcg>a#(19Vqm*}5 z$^}8ALzf`$_xV&i#aw93tX10@L03KCt%BtJs}YXj>NCzcCM?Brc3ek RlvV%oIFtKVwMCOAr$2`fCrkhU From c5a95a5f6eb56768894585454b56820a70bc1125 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Tue, 21 Jul 2020 14:35:05 -0700 Subject: [PATCH 284/589] Standardized presentation of command lines in this article --- .../smart-cards/smart-card-debugging-information.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/identity-protection/smart-cards/smart-card-debugging-information.md b/windows/security/identity-protection/smart-cards/smart-card-debugging-information.md index 5e7c2ded4f..4bf706bbbc 100644 --- a/windows/security/identity-protection/smart-cards/smart-card-debugging-information.md +++ b/windows/security/identity-protection/smart-cards/smart-card-debugging-information.md @@ -125,31 +125,31 @@ To begin tracing, you can use Tracelog. Different components use different contr To enable tracing for NTLM authentication, run the following at the command line: -> **tracelog.exe -kd -rt -start ntlm -guid \#5BBB6C18-AA45-49b1-A15F-085F7ED0AA90 -f .\\ntlm.etl -flags 0x15003 -ft 1** + - **tracelog.exe -kd -rt -start ntlm -guid \#5BBB6C18-AA45-49b1-A15F-085F7ED0AA90 -f .\\ntlm.etl -flags 0x15003 -ft 1** To stop tracing for NTLM authentication, run this command: -> **tracelog -stop ntlm** + - **tracelog -stop ntlm** ### Kerberos authentication To enable tracing for Kerberos authentication, run this command: -> **tracelog.exe -kd -rt -start kerb -guid \#6B510852-3583-4e2d-AFFE-A67F9F223438 -f .\\kerb.etl -flags 0x43 -ft 1** + - **tracelog.exe -kd -rt -start kerb -guid \#6B510852-3583-4e2d-AFFE-A67F9F223438 -f .\\kerb.etl -flags 0x43 -ft 1** To stop tracing for Kerberos authentication, run this command: -> **tracelog.exe -stop kerb** + - **tracelog.exe -stop kerb** ### KDC To enable tracing for the Key Distribution Center (KDC), run the following at the command line: -> **tracelog.exe -kd -rt -start kdc -guid \#1BBA8B19-7F31-43c0-9643-6E911F79A06B -f .\\kdc.etl -flags 0x803 -ft 1** + - **tracelog.exe -kd -rt -start kdc -guid \#1BBA8B19-7F31-43c0-9643-6E911F79A06B -f .\\kdc.etl -flags 0x803 -ft 1** To stop tracing for the KDC, run the following at the command line: -> **tracelog.exe -stop kdc** + - **tracelog.exe -stop kdc** To stop tracing from a remote computer, run this command: logman.exe -s *<ComputerName>*. From 11a06393ac035d139d454566ac4cd4676221dce6 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Tue, 21 Jul 2020 14:43:57 -0700 Subject: [PATCH 285/589] Minor corrections --- .../minimum-requirements.md | 24 +++++++++---------- 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md index 1f69f02e47..a5cadb6150 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md +++ b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md @@ -28,7 +28,7 @@ There are some minimum requirements for onboarding devices to the service. Learn > [!TIP] -> - Learn about the latest enhancements in Microsoft Defender ATP:[Microsoft Defender Advanced Threat Protection Tech Community](https://techcommunity.microsoft.com/t5/Windows-Defender-Advanced-Threat/ct-p/WindowsDefenderAdvanced). +> - Learn about the latest enhancements in Microsoft Defender ATP: [Microsoft Defender Advanced Threat Protection Tech Community](https://techcommunity.microsoft.com/t5/Windows-Defender-Advanced-Threat/ct-p/WindowsDefenderAdvanced). > - Microsoft Defender ATP demonstrated industry-leading optics and detection capabilities in the recent MITRE evaluation. Read: [Insights from the MITRE ATT&CK-based evaluation](https://cloudblogs.microsoft.com/microsoftsecure/2018/12/03/insights-from-the-mitre-attack-based-evaluation-of-windows-defender-atp/). ## Licensing requirements @@ -103,11 +103,11 @@ The hardware requirements for Microsoft Defender ATP on devices are the same for ### Other supported operating systems -- macOSX +- macOS - Linux (currently, Microsoft Defender ATP is only available in the Public Preview Edition for Linux) > [!NOTE] -> You'll need to know the exact Linux distros, Android, and macOS versions that are compatible with Microsoft Defender ATP for the integration to work. +> You'll need to know the exact Linux distributions and versions of Android and macOS that are compatible with Microsoft Defender ATP for the integration to work. > > Also note that Microsoft Defender ATP is currently only available in the Public Preview Edition for Linux. @@ -132,19 +132,19 @@ By default, this service is enabled. It's good practice to check to ensure that 1. Open an elevated command-line prompt on the device: - a. Go to **Start** and type **cmd**. + 1. Go to **Start** and type **cmd**. - b. Right-click **Command prompt** and select **Run as administrator**. + 1. Right-click **Command prompt** and select **Run as administrator**. 2. Enter the following command, and press **Enter**: - ```text + ```console sc qc diagtrack ``` - If the service is enabled, then the result should look like the following screenshot: + If the service is enabled, then the result should look like the following screenshot: - ![Result of the sc query command for diagtrack](images/windefatp-sc-qc-diagtrack.png) + ![Result of the sc query command for diagtrack](images/windefatp-sc-qc-diagtrack.png) You'll need to set the service to automatically start if the **START_TYPE** is not set to **AUTO_START**. @@ -154,19 +154,19 @@ You'll need to set the service to automatically start if the **START_TYPE** is n 1. Open an elevated command-line prompt on the endpoint: - a. Go to **Start** and type **cmd**. + 1. Go to **Start** and type **cmd**. - b. Right-click **Command prompt** and select **Run as administrator**. + 1. Right-click **Command prompt** and select **Run as administrator**. 2. Enter the following command, and press **Enter**: - ```text + ```console sc config diagtrack start=auto ``` 3. A success message is displayed. Verify the change by entering the following command, and press **Enter**: - ```text + ```console sc qc diagtrack ``` From 599e62e812bcb5ffd57448de761abeb659a8a99f Mon Sep 17 00:00:00 2001 From: mirandalysha <45540211+mirandalysha@users.noreply.github.com> Date: Tue, 21 Jul 2020 16:45:48 -0500 Subject: [PATCH 286/589] Update kiosk-prepare.md small typo correction that kept bothering me --- windows/configuration/kiosk-prepare.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configuration/kiosk-prepare.md b/windows/configuration/kiosk-prepare.md index aaa526a014..f4825a951e 100644 --- a/windows/configuration/kiosk-prepare.md +++ b/windows/configuration/kiosk-prepare.md @@ -158,7 +158,7 @@ The following table describes some features that have interoperability issues we

- + From dc112a8989dd5eecf433854416ce74f69c93310b Mon Sep 17 00:00:00 2001 From: Mark Stanfill Date: Mon, 3 Aug 2020 10:49:30 -0500 Subject: [PATCH 537/589] Fix-up for XML and Bash syntax terminate keys --- .../microsoft-defender-atp/mac-schedule-scan-atp.md | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-schedule-scan-atp.md b/windows/security/threat-protection/microsoft-defender-atp/mac-schedule-scan-atp.md index d7a913d13f..ce7fb8d947 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-schedule-scan-atp.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-schedule-scan-atp.md @@ -36,12 +36,13 @@ While you can start a threat scan at any time with Microsoft Defender ATP, your ProgramArguments sh - -c - /usr/local/bin/mdatp --scan --quick + -c + /usr/local/bin/mdatp --scan --quick RunAtLoad - StartCalendarInterval + StartCalendarInterval + Day 3 Hour @@ -68,8 +69,8 @@ While you can start a threat scan at any time with Microsoft Defender ATP, your 4. To load your file into **launchd**, enter the following commands: ```bash - `$ launchctl load /Library/LaunchDaemons/` - `$ launchctl start ` + launchctl load /Library/LaunchDaemons/` + launchctl start ` ``` 5. Your scheduled scan runs at the date, time, and frequency you defined in your .plist file. In the example, the scan runs at 2:00 AM every 7 days on a Friday, with the StartInterval using 604800 seconds for one week. From 1d4473ca762a7e9e4ffa29c79a6cd3f93e49a6f9 Mon Sep 17 00:00:00 2001 From: Manika Dhiman Date: Mon, 3 Aug 2020 10:25:17 -0700 Subject: [PATCH 538/589] Update configuration-service-provider-reference.md Updated the image file to reflect the support for Home. --- .../mdm/configuration-service-provider-reference.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index 8d92777c67..fb69460ed8 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -1108,7 +1108,7 @@ Additional lists: - + From 2cf71aa5b99d0058e7061907257dbbc8a505fac2 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 3 Aug 2020 10:29:34 -0700 Subject: [PATCH 539/589] update notes --- .../microsoft-defender-atp/configure-server-endpoints.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md b/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md index 30e5949a3b..99ed32fda4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md @@ -191,9 +191,12 @@ The following capabilities are included in this integration: - Server investigation - Azure Security Center customers can access Microsoft Defender Security Center to perform detailed investigation to uncover the scope of a potential breach. > [!IMPORTANT] -> - When you use Azure Security Center to monitor servers, a Microsoft Defender ATP tenant is automatically created (in the US for US users, in the EU for European and UK users). +> - When you use Azure Security Center to monitor servers, a Microsoft Defender ATP tenant is automatically created (in the US for US users, in the EU for European and UK users).
+Data collected by Microsoft Defender ATP is stored in the geo-location of the tenant as identified during provisioning. > - If you use Microsoft Defender ATP before using Azure Security Center, your data will be stored in the location you specified when you created your tenant even if you integrate with Azure Security Center at a later time. -> - When you use Azure Security Center to monitor Windows servers, a Microsoft Defender ATP tenant is automatically created and the Microsoft Defender ATP data is stored in Europe by default. If you need to move your data to another location, you need to contact Microsoft Support to reset the tenant. Server endpoint monitoring utilizing this integration has been disabled for Office 365 GCC customers. +> - Once configured, you cannot change the location where your data is stored. If you need to move your data to another location, you need to contact Microsoft Support to reset the tenant.
+Server endpoint monitoring utilizing this integration has been disabled for Office 365 GCC customers. + ## Offboard Windows servers You can offboard Windows Server (SAC), Windows Server 2019, and Windows Server 2019 Core edition in the same method available for Windows 10 client devices. From e87b00b7dba707f1361fe9b789b1f6bdcbaecf87 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 3 Aug 2020 10:59:28 -0700 Subject: [PATCH 540/589] fix warnings --- .../attack-surface-reduction-faq.md | 2 +- .../microsoft-defender-atp/oldTOC.txt | 528 ------------------ 2 files changed, 1 insertion(+), 529 deletions(-) delete mode 100644 windows/security/threat-protection/microsoft-defender-atp/oldTOC.txt diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction-faq.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction-faq.md index ffa10fbfc2..d3c207a6c8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction-faq.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction-faq.md @@ -51,7 +51,7 @@ ASR currently supports all of the rules below: * [Block all Office applications from creating child processes](attack-surface-reduction.md#block-all-office-applications-from-creating-child-processes) * [Block Office applications from creating executable content](attack-surface-reduction.md#block-office-applications-from-creating-executable-content) * [Block Office applications from injecting code into other processes](attack-surface-reduction.md#block-office-applications-from-injecting-code-into-other-processes) -* [Block JavaScript or VBScript from launching downloaded executable content](attack-surface-reduction.md##block-javascript-or-vbscript-from-launching-downloaded-executable-content) +* [Block JavaScript or VBScript from launching downloaded executable content](attack-surface-reduction.md#block-javascript-or-vbscript-from-launching-downloaded-executable-content) * [Block execution of potentially obfuscated scripts](attack-surface-reduction.md#block-execution-of-potentially-obfuscated-scripts) * [Block Win32 API calls from Office macro](attack-surface-reduction.md#block-win32-api-calls-from-office-macros) * [Use advanced protection against ransomware](attack-surface-reduction.md#use-advanced-protection-against-ransomware) diff --git a/windows/security/threat-protection/microsoft-defender-atp/oldTOC.txt b/windows/security/threat-protection/microsoft-defender-atp/oldTOC.txt deleted file mode 100644 index b1e6285e7e..0000000000 --- a/windows/security/threat-protection/microsoft-defender-atp/oldTOC.txt +++ /dev/null @@ -1,528 +0,0 @@ -# [Microsoft Defender Advanced Threat Protection](microsoft-defender-advanced-threat-protection.md) - -## [Overview]() -### [Overview of Microsoft Defender ATP capabilities](overview.md) -### [Threat & Vulnerability Management]() -#### [Next-generation capabilities](next-gen-threat-and-vuln-mgt.md) -#### [What's in the dashboard and what it means for my organization](tvm-dashboard-insights.md) -#### [Exposure score](tvm-exposure-score.md) -#### [Configuration score](configuration-score.md) -#### [Security recommendation](tvm-security-recommendation.md) -#### [Remediation](tvm-remediation.md) -#### [Software inventory](tvm-software-inventory.md) -#### [Weaknesses](tvm-weaknesses.md) -#### [Scenarios](threat-and-vuln-mgt-scenarios.md) - - -### [Attack surface reduction]() -#### [Hardware-based isolation]() -##### [Hardware-based isolation in Windows 10](overview-hardware-based-isolation.md) - -##### [Application isolation]() -###### [Application guard overview](../windows-defender-application-guard/wd-app-guard-overview.md) -###### [System requirements](../windows-defender-application-guard/reqs-wd-app-guard.md) - -##### [System integrity](../windows-defender-system-guard/system-guard-how-hardware-based-root-of-trust-helps-protect-windows.md) - -#### [Application control]() -##### [Windows Defender Application Guard](../windows-defender-application-control/windows-defender-application-control.md) - -#### [Exploit protection](../windows-defender-exploit-guard/exploit-protection.md) -#### [Network protection](../windows-defender-exploit-guard/network-protection.md) -#### [Controlled folder access](../windows-defender-exploit-guard/controlled-folders.md) -#### [Attack surface reduction](../windows-defender-exploit-guard/attack-surface-reduction.md) -#### [Network firewall](../windows-firewall/windows-firewall-with-advanced-security.md) - - -### [Next generation protection](../microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10.md) - - -### [Endpoint detection and response]() -#### [Endpoint detection and response overview](overview-endpoint-detection-response.md) -#### [Security operations dashboard](security-operations-dashboard.md) - -#### [Incidents queue]() -##### [View and organize the Incidents queue](view-incidents-queue.md) -##### [Manage incidents](manage-incidents.md) -##### [Investigate incidents](investigate-incidents.md) - -#### [Alerts queue]() -##### [View and organize the Alerts queue](alerts-queue.md) -##### [Manage alerts](manage-alerts.md) -##### [Investigate alerts](investigate-alerts.md) -##### [Investigate files](investigate-files.md) -##### [Investigate machines](investigate-machines.md) -##### [Investigate an IP address](investigate-ip.md) -##### [Investigate a domain](investigate-domain.md) -##### [Investigate a user account](investigate-user.md) - -#### [Machines list]() -##### [View and organize the Machines list](machines-view-overview.md) - -##### [Investigate machines]() -###### [Machine details](investigate-machines.md#machine-details) -###### [Response actions](investigate-machines.md#response-actions) -###### [Cards](investigate-machines.md#cards) -###### [Tabs](investigate-machines.md#tabs) - -#### [Take response actions]() -##### [Take response actions on a machine]() -###### [Understand response actions](respond-machine-alerts.md) -###### [Manage tags](respond-machine-alerts.md#manage-tags) -###### [Initiate Automated Investigation](respond-machine-alerts.md#initiate-automated-investigation) -###### [Initiate Live Response Session](respond-machine-alerts.md#initiate-live-response-session) -###### [Collect investigation package from machines](respond-machine-alerts.md#collect-investigation-package-from-machines) -###### [Run Microsoft Defender Antivirus scan on machines](respond-machine-alerts.md#run-microsoft-defender-antivirus-scan-on-machines) -###### [Restrict app execution](respond-machine-alerts.md#restrict-app-execution) -###### [Isolate machines from the network](respond-machine-alerts.md#isolate-machines-from-the-network) -###### [Check activity details in Action center](respond-machine-alerts.md#check-activity-details-in-action-center) - -##### [Take response actions on a file]() -###### [Understand response actions](respond-file-alerts.md) -###### [Stop and quarantine files in your network](respond-file-alerts.md#stop-and-quarantine-files-in-your-network) -###### [Restore file from quarantine](respond-file-alerts.md#restore-file-from-quarantine) -###### [Add an indicator to block or allow a file](respond-file-alerts.md#add-indicator-to-block-or-allow-a-file) -###### [Deep analysis](respond-file-alerts.md#deep-analysis) - -##### [Live response]() -###### [Investigate entities on machines](live-response.md) -###### [Live response command examples](live-response-command-examples.md) - - -### [Automated investigation and remediation]() -#### [Understand Automated investigations](automated-investigations.md) -#### [Learn about the automated investigation and remediation dashboard](manage-auto-investigation.md) -#### [Manage actions related to automated investigation and remediation](auto-investigation-action-center.md) - - -### [Threat analytics](threat-analytics.md) - - -### [Microsoft Threat Experts](microsoft-threat-experts.md) - - -### [Advanced hunting]() -#### [Advanced hunting overview](advanced-hunting-overview.md) - -#### [Query data using Advanced hunting]() -##### [Data querying basics](advanced-hunting-query-language.md) -##### [Advanced hunting reference](advanced-hunting-schema-reference.md) -##### [Advanced hunting query language best practices](advanced-hunting-best-practices.md) - -#### [Custom detections]() -##### [Understand custom detection rules](overview-custom-detections.md) -##### [Create custom detections rules](custom-detection-rules.md) - -### [Management and APIs]() -#### [Overview of management and APIs](management-apis.md) -#### [Understand threat intelligence concepts](threat-indicator-concepts.md) -#### [Microsoft Defender ATP APIs](apis-intro.md) -#### [Managed security service provider support](mssp-support.md) - - -### [Integrations]() -#### [Microsoft Defender ATP integrations](threat-protection-integration.md) -#### [Conditional Access integration overview](conditional-access.md) -#### [Microsoft Cloud App Security in Windows overview](microsoft-cloud-app-security-integration.md) - -#### [Information protection in Windows overview]() -##### [Windows integration](information-protection-in-windows-overview.md) -##### [Use sensitivity labels to prioritize incident response](information-protection-investigation.md) - - -### [Microsoft Threat Experts](microsoft-threat-experts.md) - - -### [Portal overview](portal-overview.md) - - - -## [Get started]() -### [What's new in Microsoft Defender ATP](whats-new-in-microsoft-defender-atp.md) -### [Preview features](preview.md) -### [Evaluation lab](evaluation-lab.md) -### [Minimum requirements](minimum-requirements.md) -### [Validate licensing and complete setup](licensing.md) - -### [Data storage and privacy](data-storage-privacy.md) -### [Assign user access to the portal](assign-portal-access.md) - -### [Evaluate Microsoft Defender ATP capabilities]() -#### [Evaluate attack surface reduction]() - -##### [Evaluate attack surface reduction and next-generation capabilities](evaluate-atp.md) -###### [Hardware-based isolation](../windows-defender-application-guard/test-scenarios-wd-app-guard.md) -###### [Application control](../windows-defender-application-control/audit-windows-defender-application-control-policies.md) -###### [Exploit protection](../windows-defender-exploit-guard/evaluate-exploit-protection.md) -###### [Network Protection](../windows-defender-exploit-guard/evaluate-network-protection.md) -###### [Controlled folder access](../windows-defender-exploit-guard/evaluate-controlled-folder-access.md) -###### [Attack surface reduction](../windows-defender-exploit-guard/evaluate-attack-surface-reduction.md) -###### [Network firewall](../windows-firewall/evaluating-windows-firewall-with-advanced-security-design-examples.md) -##### [Evaluate next generation protection](../microsoft-defender-antivirus/evaluate-microsoft-defender-antivirus.md) - -### [Access the Microsoft Defender Security Center Community Center](community.md) - -## [Configure and manage capabilities]() - -### [Configure attack surface reduction](configure-attack-surface-reduction.md) - -### [Hardware-based isolation]() -#### [System integrity](../windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md) - -#### [Application isolation]() -##### [Install Windows Defender Application Guard](../windows-defender-application-guard/install-wd-app-guard.md) -##### [Configuration settings](../windows-defender-application-guard/configure-wd-app-guard.md) - -#### [Application control](../windows-defender-application-control/windows-defender-application-control.md) - -#### [Device control]() -##### [Control USB devices](../device-control/control-usb-devices-using-intune.md) - -##### [Device Guard]() -###### [Code integrity](../device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md) - -###### [Memory integrity]() -####### [Understand memory integrity](../windows-defender-exploit-guard/memory-integrity.md) -####### [Hardware qualifications](../windows-defender-exploit-guard/requirements-and-deployment-planning-guidelines-for-virtualization-based-protection-of-code-integrity.md) -####### [Enable HVCI](../windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md) - -#### [Exploit protection]() -##### [Enable exploit protection](../windows-defender-exploit-guard/enable-exploit-protection.md) -##### [Import/export configurations](../windows-defender-exploit-guard/import-export-exploit-protection-emet-xml.md) - -#### [Network protection](../windows-defender-exploit-guard/enable-network-protection.md) - -#### [Controlled folder access]() -##### [Enable controlled folder access](../windows-defender-exploit-guard/enable-controlled-folders.md) -##### [Customize controlled folder access](../windows-defender-exploit-guard/customize-controlled-folders.md) - -#### [Attack surface reduction controls]() -##### [Enable attack surface reduction rules](../windows-defender-exploit-guard/enable-attack-surface-reduction.md) -##### [Customize attack surface reduction rules](../windows-defender-exploit-guard/customize-attack-surface-reduction.md) - -#### [Network firewall](../windows-firewall/windows-firewall-with-advanced-security-deployment-guide.md) - - -### [Configure next generation protection]() -#### [Configure Microsoft Defender Antivirus features](../microsoft-defender-antivirus/configure-microsoft-defender-antivirus-features.md) -#### [Utilize Microsoft cloud-delivered protection]() -##### [Understand cloud-delivered protection](../microsoft-defender-antivirus/utilize-microsoft-cloud-protection-microsoft-defender-antivirus.md) -##### [Enable cloud-delivered protection](../microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus.md) -##### [Specify the cloud-delivered protection level](../microsoft-defender-antivirus/specify-cloud-protection-level-microsoft-defender-antivirus.md) -##### [Configure and validate network connections](../microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md) -##### [Enable Block at first sight](../microsoft-defender-antivirus/configure-block-at-first-sight-microsoft-defender-antivirus.md) -##### [Configure the cloud block timeout period](../microsoft-defender-antivirus/configure-cloud-block-timeout-period-microsoft-defender-antivirus.md) - -#### [Configure behavioral, heuristic, and real-time protection]() -##### [Configuration overview](../microsoft-defender-antivirus/configure-protection-features-microsoft-defender-antivirus.md) -##### [Detect and block potentially unwanted applications](../microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md) -##### [Enable and configure always-on protection and monitoring](../microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus.md) - -#### [Antivirus on Windows Server 2016](../microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md) - -#### [Antivirus compatibility]() -##### [Compatibility charts](../microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md) -##### [Use limited periodic antivirus scanning](../microsoft-defender-antivirus/limited-periodic-scanning-microsoft-defender-antivirus.md) - -#### [Deploy, manage updates, and report on antivirus]() -##### [Using Microsoft Defender Antivirus](../microsoft-defender-antivirus/deploy-manage-report-microsoft-defender-antivirus.md) - -##### [Deploy and enable antivirus]() -###### [Preparing to deploy](../microsoft-defender-antivirus/deploy-microsoft-defender-antivirus.md) -###### [Deployment guide for VDI environments](../microsoft-defender-antivirus/deployment-vdi-microsoft-defender-antivirus.md) - -##### [Report on antivirus protection]() -###### [Review protection status and aqlerts](../microsoft-defender-antivirus/report-monitor-microsoft-defender-antivirus.md) -###### [Troubleshoot antivirus reporting in Update Compliance](../microsoft-defender-antivirus/troubleshoot-reporting.md) - -##### [Manage updates and apply baselines]() -###### [Learn about the different kinds of updates](../microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md) -###### [Manage protection and Security intelligence updates](../microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md) -###### [Manage when protection updates should be downloaded and applied](../microsoft-defender-antivirus/manage-protection-update-schedule-microsoft-defender-antivirus.md) -###### [Manage updates for endpoints that are out of date](../microsoft-defender-antivirus/manage-outdated-endpoints-microsoft-defender-antivirus.md) -###### [Manage event-based forced updates](../microsoft-defender-antivirus/manage-event-based-updates-microsoft-defender-antivirus.md) -###### [Manage updates for mobile devices and VMs](../microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md) - -#### [Customize, initiate, and review the results of scans and remediation]() -##### [Configuration overview](../microsoft-defender-antivirus/customize-run-review-remediate-scans-microsoft-defender-antivirus.md) - -##### [Configure and validate exclusions in antivirus scans]() -###### [Exclusions overview](../microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus.md) -###### [Configure and validate exclusions based on file name, extension, and folder location](../microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md) -###### [Configure and validate exclusions for files opened by processes](../microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md) -###### [Configure antivirus exclusions Windows Server 2016](../microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md) - -##### [Configure antivirus scanning options](../microsoft-defender-antivirus/configure-advanced-scan-types-microsoft-defender-antivirus.md) -##### [Configure remediation for scans](../microsoft-defender-antivirus/configure-remediation-microsoft-defender-antivirus.md) -##### [Configure scheduled scans](../microsoft-defender-antivirus/scheduled-catch-up-scans-microsoft-defender-antivirus.md) -##### [Configure and run scans](../microsoft-defender-antivirus/run-scan-microsoft-defender-antivirus.md) -##### [Review scan results](../microsoft-defender-antivirus/review-scan-results-microsoft-defender-antivirus.md) -##### [Run and review the results of an offline scan](../microsoft-defender-antivirus/windows-defender-offline.md) - -#### [Restore quarantined files](../microsoft-defender-antivirus/restore-quarantined-files-microsoft-defender-antivirus.md) - -#### [Manage antivirus in your business]() -##### [Management overview](../microsoft-defender-antivirus/configuration-management-reference-microsoft-defender-antivirus.md) -##### [Use Group Policy settings to configure and manage antivirus](../microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus.md) -##### [Use System Center Configuration Manager and Microsoft Intune to configure and manage antivirus](../microsoft-defender-antivirus/use-intune-config-manager-microsoft-defender-antivirus.md) -##### [Use PowerShell cmdlets to configure and manage antivirus](../microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md) -##### [Use Windows Management Instrumentation (WMI) to configure and manage antivirus](../microsoft-defender-antivirus/use-wmi-microsoft-defender-antivirus.md) -##### [Use the mpcmdrun.exe commandline tool to configure and manage antivirus](../microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus.md) - -#### [Manage scans and remediation]() -##### [Management overview](../microsoft-defender-antivirus/customize-run-review-remediate-scans-microsoft-defender-antivirus.md) - -##### [Configure and validate exclusions in antivirus scans]() -###### [Exclusions overview](../microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus.md) -###### [Configure and validate exclusions based on file name, extension, and folder location](../microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md) -###### [Configure and validate exclusions for files opened by processes](../microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md) -###### [Configure antivirus exclusions on Windows Server 2016](../microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md) - -##### [Configure scanning options](../microsoft-defender-antivirus/configure-advanced-scan-types-microsoft-defender-antivirus.md) -##### [Configure remediation for scans](../microsoft-defender-antivirus/configure-remediation-microsoft-defender-antivirus.md) -##### [Configure scheduled scans](../microsoft-defender-antivirus/scheduled-catch-up-scans-microsoft-defender-antivirus.md) -##### [Configure and run scans](../microsoft-defender-antivirus/run-scan-microsoft-defender-antivirus.md) -##### [Review scan results](../microsoft-defender-antivirus/review-scan-results-microsoft-defender-antivirus.md) -##### [Run and review the results of an offline scan](../microsoft-defender-antivirus/windows-defender-offline.md) -##### [Restore quarantined files](../microsoft-defender-antivirus/restore-quarantined-files-microsoft-defender-antivirus.md) - -#### [Manage next generation protection in your business]() -##### [Management overview](../microsoft-defender-antivirus/configuration-management-reference-microsoft-defender-antivirus.md) -##### [Use Microsoft Intune and System Center Configuration Manager to manage next generation protection](../microsoft-defender-antivirus/use-intune-config-manager-microsoft-defender-antivirus.md) -##### [Use Group Policy settings to manage next generation protection](../microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus.md) -##### [Use PowerShell cmdlets to manage next generation protection](../microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md) -##### [Use Windows Management Instrumentation (WMI) to manage next generation protection](../microsoft-defender-antivirus/use-wmi-microsoft-defender-antivirus.md) -##### [Use the mpcmdrun.exe command line tool to manage next generation protection](../microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus.md) - - - -### [Configure and manage Microsoft Threat Experts capabilities](configure-microsoft-threat-experts.md) - - -### [Endpoint detection and response management and API support]() - -#### [Onboard machines]() -##### [Onboarding overview](onboard-configure.md) -##### [Onboard previous versions of Windows](onboard-downlevel.md) - -##### [Onboard Windows 10 machines]() -###### [Ways to onboard](configure-endpoints.md) -###### [Onboard machines using Group Policy](configure-endpoints-gp.md) -###### [Onboard machines using System Center Configuration Manager](configure-endpoints-sccm.md) - -###### [Onboard machines using Mobile Device Management tools]() -####### [Overview](configure-endpoints-mdm.md) -####### [Onboard machines using Microsoft Intune](configure-endpoints-mdm.md#onboard-machines-using-microsoft-intune) -###### [Onboard machines using a local script](configure-endpoints-script.md) -###### [Onboard non-persistent virtual desktop infrastructure (VDI) machines](configure-endpoints-vdi.md) - -##### [Onboard servers](configure-server-endpoints.md) -##### [Onboard non-Windows machines](configure-endpoints-non-windows.md) -##### [Onboard machines without Internet access](onboard-offline-machines.md) -##### [Run a detection test on a newly onboarded machine](run-detection-test.md) -##### [Run simulated attacks on machines](attack-simulations.md) -##### [Configure proxy and Internet connectivity settings](configure-proxy-internet.md) - -##### [Troubleshoot onboarding issues]() -###### [Troubleshooting basics](troubleshoot-onboarding.md) -###### [Troubleshoot subscription and portal access issues](troubleshoot-onboarding-error-messages.md) - -#### [Microsoft Defender ATP API]() -##### [Understand Microsoft Defender ATP APIs](use-apis.md) -##### [Microsoft Defender ATP API license and terms](api-terms-of-use.md) - -##### [Get started]() -###### [Introduction](apis-intro.md) -###### [Hello World](api-hello-world.md) -###### [Get access with application context](exposed-apis-create-app-webapp.md) -###### [Get access with user context](exposed-apis-create-app-nativeapp.md) -###### [Get partner application access](microsoft-defender-atp/exposed-apis-create-app-partners.md) - -##### [APIs]() -###### [Supported Microsoft Defender ATP APIs](exposed-apis-list.md) -###### [Common REST API error codes](common-errors.md) -###### [Advanced Hunting](run-advanced-query-api.md) - -###### [Alert]() -####### [Methods, properties, and JSON representation](alerts.md) -####### [List alerts](get-alerts.md) -####### [Create alert](create-alert-by-reference.md) -####### [Update Alert](update-alert.md) -####### [Get alert information by ID](get-alert-info-by-id.md) -####### [Get alert related domains information](get-alert-related-domain-info.md) -####### [Get alert related file information](get-alert-related-files-info.md) -####### [Get alert related IPs information](get-alert-related-ip-info.md) -####### [Get alert related machine information](get-alert-related-machine-info.md) -####### [Get alert related user information](get-alert-related-user-info.md) - -###### [Machine]() -####### [Methods and properties](machine.md) -####### [List machines](get-machines.md) -####### [Get machine by ID](get-machine-by-id.md) -####### [Get machine log on users](get-machine-log-on-users.md) -####### [Get machine related alerts](get-machine-related-alerts.md) -####### [Add or Remove machine tags](add-or-remove-machine-tags.md) -####### [Find machines by IP](find-machines-by-ip.md) - -###### [Machine Action]() -####### [Methods and properties](machineaction.md) -####### [List Machine Actions](get-machineactions-collection.md) -####### [Get Machine Action](get-machineaction-object.md) -####### [Collect investigation package](collect-investigation-package.md) -####### [Get investigation package SAS URI](get-package-sas-uri.md) -####### [Isolate machine](isolate-machine.md) -####### [Release machine from isolation](unisolate-machine.md) -####### [Restrict app execution](restrict-code-execution.md) -####### [Remove app restriction](unrestrict-code-execution.md) -####### [Run antivirus scan](run-av-scan.md) -####### [Offboard machine](offboard-machine-api.md) -####### [Stop and quarantine file](stop-and-quarantine-file.md) - -###### [Automated Investigation]() -####### [Investigation methods and properties](microsoft-defender-atp/investigation.md) -####### [List Investigation](microsoft-defender-atp/get-investigation-collection.md) -####### [Get Investigation](microsoft-defender-atp/get-investigation-object.md) -####### [Start Investigation](microsoft-defender-atp/initiate-autoir-investigation.md) - -###### [Indicators]() -####### [Methods and properties](ti-indicator.md) -####### [Submit Indicator](post-ti-indicator.md) -####### [List Indicators](get-ti-indicators-collection.md) -####### [Delete Indicator](delete-ti-indicator-by-id.md) - -###### [Domain]() -####### [Get domain related alerts](get-domain-related-alerts.md) -####### [Get domain related machines](get-domain-related-machines.md) -####### [Get domain statistics](get-domain-statistics.md) - -###### [File]() -####### [Methods and properties](files.md) -####### [Get file information](get-file-information.md) -####### [Get file related alerts](get-file-related-alerts.md) -####### [Get file related machines](get-file-related-machines.md) -####### [Get file statistics](get-file-statistics.md) - -###### [IP]() -####### [Get IP related alerts](get-ip-related-alerts.md) -####### [Get IP statistics](get-ip-statistics.md) - -###### [User]() -####### [Methods](user.md) -####### [Get user related alerts](get-user-related-alerts.md) -####### [Get user related machines](get-user-related-machines.md) - -##### [How to use APIs - Samples]() -###### [Microsoft Flow](api-microsoft-flow.md) -###### [Power BI](api-power-bi.md) -###### [Advanced Hunting using Python](run-advanced-query-sample-python.md) -###### [Advanced Hunting using PowerShell](run-advanced-query-sample-powershell.md) -###### [Using OData Queries](exposed-apis-odata-samples.md) - -#### [API for custom alerts]() -##### [Enable the custom threat intelligence application](enable-custom-ti.md) -##### [Use the threat intelligence API to create custom alerts](use-custom-ti.md) -##### [Create custom threat intelligence alerts](custom-ti-api.md) -##### [PowerShell code examples](powershell-example-code.md) -##### [Python code examples](python-example-code.md) -##### [Experiment with custom threat intelligence alerts](experiment-custom-ti.md) -##### [Troubleshoot custom threat intelligence issues](troubleshoot-custom-ti.md) - -#### [Pull Detections to your SIEM tools]() -##### [Learn about different ways to pull Detections](configure-siem.md) -##### [Enable SIEM integration](enable-siem-integration.md) -##### [Configure Splunk to pull Detections](configure-splunk.md) -##### [Configure HP ArcSight to pull Detections](configure-arcsight.md) -##### [Microsoft Defender ATP Detection fields](api-portal-mapping.md) -##### [Pull Detections using SIEM REST API](pull-alerts-using-rest-api.md) -##### [Troubleshoot SIEM tool integration issues](troubleshoot-siem.md) - -#### [Reporting]() -##### [Create and build Power BI reports using Microsoft Defender ATP data](powerbi-reports.md) -##### [Threat protection reports](threat-protection-reports.md) -##### [Machine health and compliance reports](machine-reports.md) - -#### [Interoperability]() -##### [Partner applications](partner-applications.md) - -#### [Manage machine configuration]() -##### [Ensure your machines are configured properly](configure-machines.md) -##### [Monitor and increase machine onboarding](configure-machines-onboarding.md) -##### [Increase compliance to the security baseline](configure-machines-security-baseline.md) -##### [Optimize ASR rule deployment and detections](configure-machines-asr.md) - -#### [Role-based access control]() - -##### [Manage portal access using RBAC]() -###### [Using RBAC](rbac.md) -###### [Create and manage roles](user-roles.md) - -###### [Create and manage machine groups]() -####### [Using machine groups](machine-groups.md) -####### [Create and manage machine tags](machine-tags.md) - -#### [Configure managed security service provider (MSSP) support](configure-mssp-support.md) - - -### [Configure Microsoft threat protection integration]() -#### [Configure Conditional Access](configure-conditional-access.md) -#### [Configure Microsoft Cloud App Security in Windows](microsoft-cloud-app-security-config.md) -#### [Configure information protection in Windows](information-protection-in-windows-config.md) - - -### [Configure portal settings]() -#### [Set up preferences](preferences-setup.md) - -#### [General]() -##### [Update data retention settings](data-retention-settings.md) -##### [Configure alert notifications](configure-email-notifications.md) -##### [Enable and create Power BI reports using Windows Security app data](powerbi-reports.md) -##### [Configure advanced features](advanced-features.md) - -#### [Permissions]() -##### [Use basic permissions to access the portal](basic-permissions.md) -##### [Manage portal access using RBAC](rbac.md) -###### [Create and manage roles](user-roles.md) -###### [Create and manage machine groups](machine-groups.md) -####### [Create and manage machine tags](machine-tags.md) - -#### [APIs]() -##### [Enable Threat intel](enable-custom-ti.md) -##### [Enable SIEM integration](enable-siem-integration.md) - -#### [Rules]() -##### [Manage suppression rules](manage-suppression-rules.md) -##### [Manage automation allowed/blocked lists](manage-automation-allowed-blocked-list.md) -##### [Manage indicators](manage-indicators.md) -##### [Manage automation file uploads](manage-automation-file-uploads.md) -##### [Manage automation folder exclusions](manage-automation-folder-exclusions.md) - -#### [Machine management]() -##### [Onboarding machines](onboard-configure.md) -##### [Offboarding machines](offboard-machines.md) - -#### [Configure time zone settings](time-settings.md) - - - -## [Troubleshoot Microsoft Defender ATP]() - -### [Troubleshoot sensor state]() -#### [Check sensor state](check-sensor-status.md) -#### [Fix unhealthy sensors](fix-unhealthy-sensors.md) -#### [Inactive machines](fix-unhealthy-sensors.md#inactive-machines) -#### [Misconfigured machines](fix-unhealthy-sensors.md#misconfigured-machines) -#### [Review sensor events and errors on machines with Event Viewer](event-error-codes.md) - - -### [Troubleshoot service issues]() -#### [Troubleshooting issues](troubleshoot-mdatp.md) -#### [Check service health](service-status.md) - - -### [Troubleshoot attack surface reduction issues]() -#### [Network protection](../windows-defender-exploit-guard/troubleshoot-np.md) -#### [Attack surface reduction rules](../windows-defender-exploit-guard/troubleshoot-asr.md) -#### [Collect diagnostic data for files](../windows-defender-exploit-guard/troubleshoot-np.md) - - -### [Troubleshoot next generation protection issues](../microsoft-defender-antivirus/troubleshoot-microsoft-defender-antivirus.md) From 01d6358c6e636a5ba32d88e22b135322b9cb1b4e Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 3 Aug 2020 11:45:04 -0700 Subject: [PATCH 541/589] remove extra meta --- .../microsoft-defender-atp/attack-surface-reduction-faq.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction-faq.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction-faq.md index d3c207a6c8..992ba51235 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction-faq.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction-faq.md @@ -7,7 +7,6 @@ ms.pagetype: security ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library -ms.pagetype: security ms.localizationpriority: medium audience: ITPro author: martyav From a60fe5e4d3f53ae6fa9de0792bb4a6bb29ca2324 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Mon, 3 Aug 2020 13:58:28 -0700 Subject: [PATCH 542/589] new note per customer confusion --- .../microsoft-defender-atp/tvm-supported-os.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-supported-os.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-supported-os.md index 3b048f904c..9226de4876 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-supported-os.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-supported-os.md @@ -26,6 +26,9 @@ ms.topic: article Before you begin, ensure that you meet the following operating system or platform requisites for threat and vulnerability management so the activities in your devices are properly accounted for. +>[!NOTE] +>Operating systems supported by Microsoft Defender ATP are not necessarily supported by threat and vulnerability management (like MacOS and Linux). + Operating system | Security assessment support :---|:--- Windows 7 | Operating System (OS) vulnerabilities From ffe1280c31885de02b298bdcfb10771eb3be6de4 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 3 Aug 2020 17:40:49 -0700 Subject: [PATCH 543/589] Re-implemented corrections following force-push --- ...plication-control-with-managed-installer.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-managed-installer.md b/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-managed-installer.md index 2b4dd900b3..f0c0979e51 100644 --- a/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-managed-installer.md +++ b/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-managed-installer.md @@ -36,7 +36,7 @@ A managed installer uses a new rule collection in AppLocker to specify one or mo Specifying an executable as a managed installer will cause Windows to tag files that are written from the executable’s process (or processes it launches) as having originated from a trusted installation authority. The Managed Installer rule collection is currently supported for AppLocker rules in Group Policy and in Configuration Manager, but not in the AppLocker CSP for OMA-URI policies. Once the IT administrator adds the Allow: Managed Installer option to a WDAC policy, the WDAC component will subsequently check for the presence of the origin information when evaluating other application execution control rules specified in the policy. -If there are no deny rules present for the file, it will be authorized based on the managed installer origin information.+ +If there are no deny rules present for the file, it will be authorized based on the managed installer origin information. Admins needs to ensure that there is a WDAC policy in place to allow the system to boot and run any other authorized applications that may not be deployed through a managed installer. Examples of WDAC policies available in C:\Windows\schemas\CodeIntegrity\ExamplePolicies help authorize Windows OS components, WHQL signed drivers and all Store apps. @@ -46,9 +46,9 @@ Examples of WDAC policies available in C:\Windows\schemas\CodeIntegrity\ExampleP Setting up managed installer tracking and application execution enforcement requires applying both an AppLocker and WDAC policy with specific rules and options enabled. There are three primary steps to keep in mind: -- Specify managed installers using the Managed Installer rule collection in AppLocker policy -- Enable service enforcement in AppLocker policy -- Enable the managed installer option in a WDAC policy +- Specify managed installers by using the Managed Installer rule collection in AppLocker policy. +- Enable service enforcement in AppLocker policy. +- Enable the managed installer option in a WDAC policy. ### Specify managed installers using the Managed Installer rule collection in AppLocker policy @@ -60,7 +60,7 @@ For more information about creating an AppLocker policy that includes a managed As mentioned above, the AppLocker CSP for OMA-URI policies does not currently support the Managed Installer rule collection or the Service Enforcement rule extensions mentioned below. -```code +```xml @@ -82,10 +82,10 @@ As mentioned above, the AppLocker CSP for OMA-URI policies does not currently su ## Enable service enforcement in AppLocker policy Since many installation processes rely on services, it is typically necessary to enable tracking of services. -Correct tracking of services requires the presence of at least one rule in the rule collection – a simple audit only rule will suffice. +Correct tracking of services requires the presence of at least one rule in the rule collection — a simple audit only rule will suffice. For example: -```code +```xml @@ -124,7 +124,7 @@ In order to enable trust for the binaries laid down by managed installers, the E This can be done by using the [Set-RuleOption cmdlet](https://docs.microsoft.com/powershell/module/configci/set-ruleoption). An example of the managed installer option being set in policy is shown below. -```code +```xml @@ -149,7 +149,7 @@ An example of the managed installer option being set in policy is shown below. To enable the managed installer, you need to set the AppLocker filter driver to autostart and start it. Run the following command as an Administrator: -```code +```console appidtel.exe start [-mionly] ``` From dc00c3fe4c97e7404e3f22f52d873283fe7227c3 Mon Sep 17 00:00:00 2001 From: schmurky Date: Tue, 4 Aug 2020 12:50:17 +0800 Subject: [PATCH 544/589] Update mac-schedule-scan-atp.md removed $ prompt from command-line snippets and edited a sentence --- .../microsoft-defender-atp/mac-schedule-scan-atp.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-schedule-scan-atp.md b/windows/security/threat-protection/microsoft-defender-atp/mac-schedule-scan-atp.md index 4fc24b4545..83201072fc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-schedule-scan-atp.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-schedule-scan-atp.md @@ -68,11 +68,11 @@ While you can start a threat scan at any time with Microsoft Defender ATP, your 4. To load your file into **launchd**, enter the following commands: ```bash - `$ launchctl load /Library/LaunchDaemons/` - `$ launchctl start ` + launchctl load /Library/LaunchDaemons/ + launchctl start ``` -5. Your scheduled scan runs at the date, time, and frequency you defined in your .plist file. In the example, the scan runs at 2:00 AM every 7 days on a Friday, with the StartInterval using 604800 seconds for one week. +5. Your scheduled scan runs at the date, time, and frequency you defined in your .plist file. In the example, the scan runs at 2:00 AM every seven days on a Friday, with the StartInterval using 604,800 seconds for one week. > [!NOTE] > Agents executed with launchd will not run at the scheduled time if the computer is asleep, but will run once the computer is awake. If the computer is off, the scan will not run until the computer is on at the next scheduled time. From dde7eb21049163ef0c364df6905dd7605d9e01ac Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Tue, 4 Aug 2020 12:04:49 +0500 Subject: [PATCH 545/589] Removing of Applies to As the applies to portion is linking to the commercial differences among Windows 10 and doesn't fit with the article so it has been removed to make document clear. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/7106 --- ...onfigure-server-exclusions-microsoft-defender-antivirus.md | 4 ---- 1 file changed, 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md index 756e4191f5..f0a52f7827 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md @@ -18,10 +18,6 @@ ms.custom: nextgen # Configure Microsoft Defender Antivirus exclusions on Windows Server -**Applies to:** - -- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) - Microsoft Defender Antivirus on Windows Server 2016 and 2019 automatically enrolls you in certain exclusions, as defined by your specified server role. See the [list of automatic exclusions](#list-of-automatic-exclusions) (in this article). These exclusions do not appear in the standard exclusion lists that are shown in the [Windows Security app](microsoft-defender-security-center-antivirus.md#exclusions). > [!NOTE] From 44066e2f4fd27f01ccaa652eb6d3a02c9b779956 Mon Sep 17 00:00:00 2001 From: amirsc3 <42802974+amirsc3@users.noreply.github.com> Date: Tue, 4 Aug 2020 13:32:19 +0300 Subject: [PATCH 546/589] Update advanced-hunting-devicelogonevents-table.md Adding a small support statement to avoid future customer cases. --- .../advanced-hunting-devicelogonevents-table.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicelogonevents-table.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicelogonevents-table.md index f48045b11f..db40cc7f1f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicelogonevents-table.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicelogonevents-table.md @@ -27,6 +27,10 @@ ms.topic: article The `DeviceLogonEvents` table in the [advanced hunting](advanced-hunting-overview.md) schema contains information about user logons and other authentication events. Use this reference to construct queries that return information from the table. +> [!NOTE] +> Collection of DeviceLogonEvents is not supported for Windows 7 or Windows Server 2008 R2. +> We recommend upgrading to Windows 10 or Windows Server 2019 for optimal visibility into user logon activity. + For information on other tables in the advanced hunting schema, see [the advanced hunting schema reference](advanced-hunting-schema-reference.md). | Column name | Data type | Description | @@ -68,4 +72,4 @@ For information on other tables in the advanced hunting schema, see [the advance ## Related topics - [Advanced hunting overview](advanced-hunting-overview.md) - [Learn the query language](advanced-hunting-query-language.md) -- [Understand the schema](advanced-hunting-schema-reference.md) \ No newline at end of file +- [Understand the schema](advanced-hunting-schema-reference.md) From c12a1157d92a7d9c25abf631ed812c8ad9c90f6d Mon Sep 17 00:00:00 2001 From: amirsc3 <42802974+amirsc3@users.noreply.github.com> Date: Tue, 4 Aug 2020 13:55:57 +0300 Subject: [PATCH 547/589] Update advanced-hunting-devicelogonevents-table.md minor edit --- .../advanced-hunting-devicelogonevents-table.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicelogonevents-table.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicelogonevents-table.md index db40cc7f1f..1f7e4db8a1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicelogonevents-table.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicelogonevents-table.md @@ -28,7 +28,7 @@ ms.topic: article The `DeviceLogonEvents` table in the [advanced hunting](advanced-hunting-overview.md) schema contains information about user logons and other authentication events. Use this reference to construct queries that return information from the table. > [!NOTE] -> Collection of DeviceLogonEvents is not supported for Windows 7 or Windows Server 2008 R2. +> Collection of DeviceLogonEvents is not supported on Windows 7 or Windows Server 2008 R2. > We recommend upgrading to Windows 10 or Windows Server 2019 for optimal visibility into user logon activity. For information on other tables in the advanced hunting schema, see [the advanced hunting schema reference](advanced-hunting-schema-reference.md). From 9c6de29ca6595b5e3189d43c73163db9732988e4 Mon Sep 17 00:00:00 2001 From: Jane Muriranja <68369324+JaneM-02@users.noreply.github.com> Date: Tue, 4 Aug 2020 13:59:59 +0300 Subject: [PATCH 548/589] Updated titles and details in the Location section --- ...system-components-to-microsoft-services.md | 25 +++++++++---------- 1 file changed, 12 insertions(+), 13 deletions(-) diff --git a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index a8de10ac7f..6a492d3833 100644 --- a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -933,19 +933,6 @@ To turn off **Location for this device**: - Click the **Change** button in the UI. -or- - -- **Enable** the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **App Privacy** > **Let Windows apps access location** and set the **Select a setting** box to **Force Deny**. - - -or- - -- Create a REG_DWORD registry setting named **LetAppsAccessLocation** in **HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\AppPrivacy** with a **value of 2 (two)**. - - -To turn off **Location**: - -- Turn off the feature in the UI. - - -or- - **Enable** the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Location and Sensors** > **Turn off location**. @@ -953,7 +940,19 @@ To turn off **Location**: - Create a REG_DWORD registry setting named **DisableLocation** in **HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\LocationAndSensors** with a value of 1 (one). +To turn off **Allow apps to access your location**: +- Turn off the feature in the UI. + + -or- + +- **Enable** the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **App Privacy** > **Let Windows apps access location** and set the **Select a setting** box to **Force Deny**. + + -or- + +- Create a REG_DWORD registry setting named **LetAppsAccessLocation** in **HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\AppPrivacy** with a **value of 2 (two)**. + + To turn off **Location history**: - Erase the history using the **Clear** button in the UI. From df51f073cd4d49d66b81e0fd7fe52214433f2f57 Mon Sep 17 00:00:00 2001 From: Jane Muriranja <68369324+JaneM-02@users.noreply.github.com> Date: Tue, 4 Aug 2020 15:22:22 +0300 Subject: [PATCH 549/589] Added a Note under Windows Defender The note explains the difference in Group Policy names for 1809 and earlier builds --- ...ndows-operating-system-components-to-microsoft-services.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index a8de10ac7f..c79c7825b3 100644 --- a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -1623,6 +1623,10 @@ You can stop sending file samples back to Microsoft. You can stop downloading **Definition Updates**: +> [!NOTE] +> The Group Policy path for 1809 and earlier builds is **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Defender Antivirus** > **Signature Updates** + + - **Enable** the Group Policy **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Defender Antivirus** > **Security Intelligence Updates** > **Define the order of sources for downloading definition updates** and set it to **FileShares**. -and- From 24842a6d590be231ae168148b72740357556c9e3 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 4 Aug 2020 06:31:54 -0700 Subject: [PATCH 550/589] Add files via upload --- .../mdm/images/autoenrollment-policy.PNG | Bin 0 -> 138584 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/client-management/mdm/images/autoenrollment-policy.PNG diff --git a/windows/client-management/mdm/images/autoenrollment-policy.PNG b/windows/client-management/mdm/images/autoenrollment-policy.PNG new file mode 100644 index 0000000000000000000000000000000000000000..ed1119f45c800e1d9a2370407b0f78e1c6cd431c GIT binary patch literal 138584 zcmdSAWmFtZw+4y@NU&hR9YSyou0aC?cXxN!!QGwU?(Xgcg1fu>V8Z}|T;A_H=R4>8 zzxT&ot7m3)S66lQmS^vJc1^gvtOUv@{7+C&P$)koMHQi-;9#JjU|SI3->2H z_959vK7%?|H5N5pR#i2Nx@QQv-y-t=>#$r76NeI0!1}KPg<=Nre_BfoDDk2HyGa4- zdz2`J-+ypU|?G}M2FjldVrM;H3funGf`>@ff9p}67y_n{k&=vNDB zdb$S@C|onW*8j@Ct9h*Fg^`8c7Go(Q=v|S$XoZBX>Xa2#~wW6{QS1@{KrbY2K-IkZ1gR&v%H8=MXh-U zesL~+>5;3mc~=97K@Fj5pbs%F@agTTpvP$y8Q1)wZ`QA7FnX#cPgp6a^4KSAqvK15 zpk~wo(&is&CcaSW98Z*v#|^};C2?fa@7@944>ty=1V3*gq6P| zL!1_fXf~o|NBieTR<;CmOiUA5F|lx9I&Z-}GT=x#LcI54Ud-Cl`}67itZ8Q0Fzd3% z(o=xmdeE@VswNsLZ#`$m;pe!2UZ!P{v}r>)`7E%;pASK2X1j?<3D3?%w}*sV0aYzq z+AYd96n%S@|L+mLn1b?F!WM7!$ii(%dM432FTv%z1*q*lQC~2d*W0sL@SY}$#FKpS z^YI7jkKX$J!SwYe?s=}_1@JgBz4nA+Tn)U%NBTbdz#cyM1|*hkk+9( zgsksd!ermDJ`5ej#b*Z{A7dUWD;FZy5)XqHd~qca9wyJ3(|EMqUP+Z0assX4?$pp! ziOx2~{WLQgoEKGgyH?mk{X$aEuY9%;+!E3C8OInZJ2!2Hht8;g9m6DQmt}dbf-57x z9b0d-+l}@uwVYKgFGBzE_W7!~=WYkF>TFJ|g)P!I*K{aF*lvuRrj}lL4|o)sJoBGx zF{80+q@ELN>dY5YX;qh%foaBWM)_Q699f`2rd&P@z{^z`X4Pe9D)BTICsRFt!IZEnTZI(n}T8Id0Bc=W4Pk1Ib6T zL?YVXbAi`+}omoZN5zQtO(+KUmhWy1Rpu7nVb zJ_Lc`5LkHQ11xfo42(bwm+8CBvBSU@=dnVyCqFhe{{H3DL?k`ztOV3ccsjAynryqHjx$~0vcFVSIHfU3bc?=OCFKcD4I5BUq`<%7O9R59O2R^QEvR3k6#zp*Za zUAqcMb8C0UWw1`evjJ3$5LTYi)IesR1EnTeNEHdMOUrKoo*b#PY}QrLCA-iyMfi&L zjum#IvYh*Q9le*vmrHvoV!}Zqmu}6D+8&Pkx1L8=3U#8}t zl{tXw=%21Gi+Wn8R1mMi*jq@sku;>XxFhOiBXn}9$VCU`+!G{eVYlJISu|s(QNZnJgTQWQ!z-0tgpVqnJ`BpcM!OHSwG;pI`O zvfgzvzhByw_U5Z};EdJ6XX;cPhk1>1M_fPUSmU~AN6;)doJoDgRe2hbU)rH}G?+V~ za;f^)td`CZ)Y&0i&%aLdZ>22h`Gkj@8Wsk9pm2V5Li`QNS>}SEA*NkRjQg6A>3Y0; z7Jmg^JX}vTZ@<0#<#-kpih3`bLL z)iDe^Ptt0m95!ZWid0jwdQ1(T2O1;cT%Ij6(1&eH{QKM9P0wW(qzCdbV4{)&uW3!x zwMY$4CD~Aij^!`EJnEQYN83ZTz7~5}fw{(no;3Scgo&2-!#ugWs2b8x%~$T9Qvr&7&OCeZCNz!Hb^H z;%bEbXFgu>O>F3uE#m=l-pM@|e@v%`%Ja)|SY?jQ#gx$H{9^2&6cygJ6X>ZrRr2!P zsSa~d?nwF3*R7D&;+w}=#{`J>cB0sViFz&3hv!RK@fO{B@2Z%u!=`cv-u?|wR84AT zR}1~cibKb74S>F$e{<>kG2|(Y-S0N5(nwlkVekB`+qIeT;!J4dRRT{b1XH`y=)KdmZ3= z_BrtLrtKs`o8Ru+S?0#}*6Uk~^m{nv?CyrH+M$&_NHMr@B!TO`NAPBT^d%ed;#dUo zgt$=CZnyE^_pKSC6D3EKVp@bnO!od=rXT#8DV9mf(Rb%2Vv=6WIF8bJ$v23Qcs*U*E9ZT?Gl7-mZedTSxgTj<)|D6~ zT(-|0%uY4SNifmcKb2 zwEjfLmAw=tf)Kmg>nV5+F^B#EmN10Spt$CA1u$IWpL4~>P*5AjrKdziMHv?ser4_m5mn;J8*4YVk6c|Gu)B?E=+g55^uR z%RRk)T&DMFnhzY65oC$n>a(*x9a(1GTe9(k3ilUyNDkZUev15TiRCbxO#S7v`7TMv z`tz>S1$xNd=??rN<5T2Z*}VZ(#$KSduGtZBn75#O_^mup=#9@Y<*c%TPJe_m1Q}|F%X; z-JnbxL5`iwj|Dfr1i$y}AGqIhA?DA~ey=XoIeh@%oGnX~2dP3;>^)Hj%>H^_2c8Nz zvj*09PYxUeM`T30S3;6hJqh)hl80k;ffO6Auz_KLKg03E_IJnVguM7MrKNjek+EXl zKL~gC_CDhfL@qDm8i%{n(vD7)l^&ZoKy+NZr zC#}DnV|dn4PvzeuPT5!LRi&CI*0I;t0{fUz<95^L$4jQk3@gqbf$F*keCTR55TRdP zvnm}eqTa4Jl|4`PJT-@RHmj`%?OaMB{+U2gBCS!ojOsE0NLNi(x%6!thXs#E*Z4vG zL{C-{pZcYk)00ouwqy2$W4Y`F`?ez@%@OidTj5tHfX!K9iO-fY_rh*>c=Pc$rpacK zHTz=buIe(rL*|KW&$~{ttBy!(r4!g~BQ+~D$8ubzZA5hD_O;<-&{5fNH%4o`h zNEU}S%g#aS`0RrJE8H{3!)!CZRXp6{F=MNm)OqPg3kdotz-pqW4@lthTjtNnrpVXb&J$OP?~(^9g|pp+f0J;W)Tw?! zyeixX8s%zwp6Vn)tv(q_0-Qw_f~^V*LX*If7%^k16|XGLuqhg~npDSZDXseCN6m09 znVp3?#+)&a=F%;mrUjv~ypiOi1QC$!REn`}duHJB7or0(P^%Q=1bZ@^!y59o2`Wq> z`6s?pW|-|lwXIQ&x!d{$dg8r8sx$lvpcRIeaVz>_3OzGNtcBc*QF-T9YgKCbt3L2f zvXk#C6RAq%gucC6k88DK5OCV{l?CBua-rv?L6i6r`uF$$I0kwCi}p!smkEs1g=P3J zj>%C0mIFriC}l^;n=Am;#At4YFX&J9aPvHe^_1oCeH0xc|6GJi3I4WkD`GYo_4Y*% z#u+CZ1--Q(D)D-W{lk^;5OQhtVw%xA?&m8PJ@=oC)^z*MD zL$oA?wz&6juMLqqJJw~`vF>R^qmn1dKU!kWftd&8<6pD5#Kh>?S*K4XCRE>;n3P(* zAM3eQ|B(m-H^atE(uwXc&A+F8`gMOc5^>4SJDlz!YkGch&o}}14u~o-y(ogX?hXa$ zgP`L&LP^MG{tzpI&(ZA&vFmwR^#1xzUKPM-VcmIoyBR1`zR~ z|GW1HbAUM1zlRC>%o_E-yHNc9qf1FN)WyLVhj#aD%>8`@XRwR6r3J=+i^kaAVH7bA z7Q~X5XRp=KOfVIjC@-Ju^t-UZ}4SolLlo|_M%K^qRzr>qv`Yg z+>y{k;tV&aHT|0uJBU$pxhvCo7?Yw(8Zc7%&(}MfSfU4uKd4uA%}8vfhN-c}hFqAA zyDwF3T&5f=xfJ|@>c3{NSDsjN=JK#0?nvB|>-(Zkw%{4ae{?g;TRhC_(hGqN+z7Gz zBAp>4ve^AHQf?(uCCrfdNo}ZWHZyd+v}^ff55YGFF$nDxM09>+HuXY`jUD{L&C`fy zf^TU6RQAj!!}Efz6};ecv_e50-~wy6C&n!uC$x%(#wDjj66)YYWm)dP6Ff%IqED5g zp|0xKmg{SnW3bZl&9bF+H&GRz3x z7;Z!u(gCzpQExtn;;`nrWVKoXAiIGtq_nfMy=HhwDSGcrGMlUfR0Xd^`0kuIpUH=x)vSRM?-F-?p`O2JcI9&|Ckw|;H147q%9zgk&HYoSA0$iHy8pSi#60ixl4A0=2rvXsx| z{IO+WQE{pMa_-Y=cBo4qL614SFw54zTqzs{M(h;0`0(sKYioRR=jJV;)HT8D)w3?p z-Q)ExwW|q3i^Q`!lU+*dze{9e8b&|XG5;idKEF!~qQ3ONrC8@<)2} zjV&=wn2LfzgavkfHH%{3?^k+#U0q!eGXBiWOjvB}a59~m@*0st)R=g0CihyB|MP@? z_?QcYe%0}aZ13ry;$X5x-a@*$xn=iuE@(a4Swc@J5YcVW;bPf7DMuOTj{A^yb*|2L zedpfBCkP(Ec4wBQ;cTeX7tndr{zk|6XW5?aI_ZI+G>s&jCj z`%7{iE_j?UDyNa)ksZeN33L(^WODih{ zJw3UR-1m4WLeVSsk7KC80?wL<*^Yt?FIE%7qUePrCHWSsBJn)Z2kf%2^ya{U_ZGs+YqKo9nz~RXXr$|yj2Vl&j{MF3*z|i6PzZHh;8{8;WVNDX z*K~%dbuAf4xqrY1C6jkDExtY~@LjK!T-AfWxKp1@JBl?MRXEY*%lka@cQ$PEcXBa6 zVOqegvxf9{*`Kv?QwS}toqo@L&@yf?A8?dv_f%i9w}xwV>`L;Y^%U4#@y6P0=&U_h zsmt#~8RcBHyq0|Z>nSZgXE%yidFKK^G^B?Y(>g|R;!SV?$dFVhQzV4>?pQ)P+1;iVVPKqT<9R&jr|`#N!LfSd+Es*Y z_4L!{lbw)UmD_FfGBL3(Vo#$`nhRYIHnOu3b}_x(QUR?QQ|1WA<%K-S4qgEDC^@f{ z$4)jE^Ad^^8kWAVYb1t5iKLp{Pqm=4>I&$klERX?$DNEl7T*!bL#uwp=%H- zhm)oq*^ha>s#CueaF}pTRs+xhYm54)of9uph{sqqzvlhv--<4I;+FC^_>NthU&f&Q zpG_*UQ?=6ba2``#Rt$gtShrh~x4N|y@11BQ`5oIwQ{(+oIOWxcui;94SyMp{w492| zcCNbl+V7^h(3Urmq&LQmu?CTyHV{hH!L_L%W|&|g|K*?;URz$%QktzrJ;^Y9a&fa{ z)WNZSrU_nG5^wUfN&?r=OAAiPjWuC{T*NNYT}gl&DWmX?UDn5gMUDI;*x)+7eAKlT z1X93?WmFjP2tK zKy3f7H=674$`)7|c&|}5@1qBPy$BYEYQvsJBz41JhtVE3q1YzcLc5wYW$LU0_=}Ja zp`5_l z-?4_HM*KjP_GqW!wB(b+$;yS^Lln6n2~YjIvh(wU~F<(3+CF!kdzPz zofF-Mi>Lo+o3NAlAlvBiPPx)V>ZEn&RB&pDv*-h*^umQIyyk4youh6xqZXzF?5yC{ zZy@{_R5#pAKw+v$S#&eOt+w*1_U_A54cgAG`r)_C71nlZ! zIqU*o0i6za7dShaZQj!tz#B;58tj9=L-JD5e<&t6T)y)5;o@3w&`eA&uZU9ra}<;_fc?JgX+%Rqv|~Ve(zx`?(*}8hU|=Bi?e__ z`*7qlRA72lb5r+mbn zF4crolX;p7p%QB_x(m(J_28}v()FyCKjLa?Sf)6CRQkqp6Cm<}-Erl2MKiyyMoRAU zDkH+`6hByk?{)E$yX`L#Wz8>)3t8gJ7;@gnmmk4x0_xU`sWn^H?%fSYyo01G3ODw z*sa*$h~u~140N)RO$O^sLIb*QMkCG|j4H+1!;f`A1B!J7eYm^%H&lhUqA;cY9?JeB z!`o(*Wgf3jsMs9&LU?|7q7OP;^#;_NuV(`LVhjNtTc6f}BZ#$?>)8)1&DEd&-~)>u zgqlmJ@?WMtgX&J9Oox;6{>B{}Lx2`*z*t`br+~nnCTHsV5DBu1eRfnv*JhhLGq~1e zKsisY9bxCqB6mBEqgAqhJcz0L9voi)sVFOhV(?hIK3%g5I|}J2rO=QoCX&IZh&ETN zB1t|9hp^N8K=AmQ`0)C|o2J99HfU-M~jF*Zf^TU+%D>{`z8rmg4SZ z_$QII$^w^{8sB4Rt#0x+$Mlkqa!N#C9<0Y}hQjKC?o2g@;Xu5MvYWPei7CPlHJknh zqoIbPo%+Ye?M(FC)$9(3!!}P$6RassBO6xKsoyl&L_mXpFyHtn-($02*kNXZFY=%4X2Eg;*l5VHqVb7V zI+r)Vlmy`Jt{K-&F1DDxfxhsOSeeQqL0O4qYZCoQeJh8oXs24j>sgl zr9;ls8k)=B{n<9q5H78sgufl;8c?u}t`J!2$fC{`@f30WCwl-Pncbx>a%V0Topi5e z)&HVm$?!SoGi8dUJndOy@sG!YB_|u^^-d#&rS$E8Ig?#?BUDXjICQD*x)H1`!9A?b zcZ%NN`@}*Cs}uc{rN3?=L@1f_F;<3o(K-R>PH6f&GlohpF2hClboqftKV1kLS)`dA zwV4ku#zm7QE0lDtVuNw%PN|j4NYG0ZtFhIu7teMdIX_l35H^aKO;y=n;+Y&*Y>IZG z=Hw(-6F@Uop_ASiMuGj_QYKV;GRIsAV*TQs>Sm6(cEt#bPqtOV%#!NrU|0aLhHK4G zl`_~iHR~&8)+FHg$f>uO*|19uWB^M(Kb;K?kppy}I>#(5`uD1DYL|b7nPD`|o21>f{Pwx|=pRM_*SoDO#KWl}`j?1;gAq)Qk7IFVum=1l*MR5qZr|QO zw3yyZL6fQa*Q{10F>hM3JfBD%C(puD#(rKPRzS~2-k@@ z>!FYdC4`O3H=6aqIugF7FHT_73OT2y--{5xgc>ivgUItEgYQETa$(|WE*s@-v9n=+ z9sO>m%J7t8^-pz7!l)Aj`h)rkIR(3{@J)4$PF?4F8LewP-kONU)41b{kZ3Yh3y?~R zvJ!4d6jbzx(=%%nmdAa=-v+j21{o@ztcfAA;-n zsG&=ZkP-tgYdM_3nm49S1J8|SbWXRKW`Rda<51RUP{GsUk?ouk*{2T2Cr;nz`KDeN z@x(G}#gN@W(S9cJhh~=}h1A9>4%eF3JT%31cf5^zlE0u_w2P{2Aw#C3=E&?4Yy~%R zbplOM=MmYn&~cZq^S(cA(}g-o<5d90kDpM?j%8L1wTkr6Q|ydY1fZvfBFxCBR_xU-u1X~f*k!cgS`Xc z8P@Wnp9x@0?cb;#D|N?0HeT_l`u{%PJ@QknCFnrTZ#R2h{!fmDJc4+2f7f4avlbtR z5qURDx&OT=B1TI9dCBGB>CA3=!FDh?GTEF~Qh4;QB-TNe*j`cOClruNYhjn)Q{+)z zmwa%0x+B)1$)2$@7AheZRF|%^qVlZjaJX!&<DBl zuAGsw&d6gEF3Hsln=Sp!;x&WeKI;9uq-s)=elocyX|ocY^!7^^qHUz;N6F3(ibN{CJRgiQf#jCn^x=At!ND&I5rDCw++U} z2qXXg!Vk>rFUb(re{aLP%>tpI%vvgFR-d1OiuRK=LMo@w9cs^o>g;4kPjCK|*^H{E z=AV*|>prDhR_MY5|m7 zL*dp1Bi-Z$_leSrhCH_mod&egKA;?$7kC9Z=3O0m|no8%L0=#ity z{Rpq~)ioM|XZla>$o(GeMzP#T=uUvoj82>Ui1BTdj$;wR8)@1j4GIt!lqM z!pvHtz*_xdjIchh88r%~rM!#$0H*BB%W#WJ{-eL`SxC??0!iU_dlnTg!$5Lf5oJzVl`KYbVSMc30C z5f(FGTy+NZa^}1P&J~FI;d0E?`$dCpQVnazU6gCFN-K1%#kj6_lL)41@8E!19*2d* zmdUQKlizHjXB<}nzYY%Fi6Kx?y2OBSks;#zk*d%u`0?j*tx4chO~Hl|!ayBY{dk*R z?GV(@SH*VcHr&s$E1`rlGxOn%GCk&P27B-`H1Xm>3j*gl4d^v8h(jyz{P+i>JNb#U zIKivUu89+)x8+%6p&m~8+K1jeY;jgG7bWzE&s;`u`-hhjlZ$^J9y3KIm&`a_vnEev z9RO7~#GshJQ%0aop;kNOfh0fYV`B|t1UD#gA@HY#&4SOZqp)oKLV&{>D?$wil8=k3MTPVQatYKTuJrv)4(im3+? z3i5eeV3+0*kZH_g!Xxxo{%V#<#oXiAGGg(6(_+*@dd&SmY+Cr*Q8+ANIuZ zVo9Iv{|BScT4&E*-0x;JxZ&uK2OOnX(IRV>ozu25jcq%SbbVIm>J`G8rE^$xtB8+3 zSv?#So}$AI--jq)+)Cm%JR)&5F9+m&Nw6O9X$8C07#h22oqk?w#H-@wt##XTmEmN1 zElG4hDMdlP6F5bhv5meCyYfY-d3z9uI#&tF>HC!g9IgQlVNgwW_h5Pnrh2|vZk*3M zEr3|>2T5XzhQ}r@bf)tzve7@+H=Bv~R`qOMjFM-Ig}in;Nz6sx=7D8}X|6{4^LXy9E#ON`gwIf&-4k@HcQgP+bhXja+l0F9h|*m?_NOg? zkDXHk4_ePR0@!^z*utrKeQ}g}<>7^$FNiv@$dF;%fgb1Nissnd83j3#&_4-xEW)JQ z8i=~i@E1dCGXS&>Au@LnJU#^l^8>|cE52oHrs}rYr#?YuN9Tp-I^r*p(0D+y9S0jH z9&{-K6P*i6B?+pOFyfmCQ@;;o!^zMU1YXnLZcmoe3q))i9<^DZ(t3IaOb|TQJ+5 zy0=r;4^dEvLP#S|)47?%V-p9-jjBMNY0Q%3wY*i_QM&eL8sz!yPhf0R|2XV-F0ztW z9wWGszMl)I=b2ytxMQnJEy}I?g_kgCQ+cg6_V#NO)Ga=Apqj1(EUedHTh`>3UdnB? zYnauhc7Y6&ZmoFrCF2;?mYHk*u;xY)3+a0PVWWcr=~@P6e3o6$QN7V$#eaoXdxd}n0`k=g zP|qB8gOah5Sjr>bTB#J6*dM%-!H+M=Tt#`@aYqT>F&ahGt*8Govh>|lgA{!YA;MXP zBPq!uLO!+OQ{U_D z)qEmb?YvhwV$Y{dBvpe=;4ATMvPA?@zEZw$-=@nl@5zT}&`VLVr}}RA_t!aQ(8bV0 z({bTpIsz?GDnafF%a@8Tas!EWj{{y-5%pHRAL3hlx^50d+l+Oya7P$^nv4As_cdX0 znM`LDiSN0l;e$*nnk@PGz2I?erRej1m^bhVG4#+U{FIK;g)p^IiU;j@U_S$okz#nx zq&LVHZyUr_-6?l5jVN#Db*X!q)~w%bPEs;4=fmru^3iTh7}(vN4cwON@x*OK8y zR6lKyqY#>}V;p9W+_`AETKX_%TmFxY^HiFd{R>Eq;KC-|Ufx$heO;v0sn6K0W`2|< z(YzkMe^0KdhSBc~{AlzdyLN8>@R0Net|jN`+5q1|2>~xdfenE##H_jpvOri%1;3JV(9=})9V1@ zEJgYK*f%pHJ#!{cz`%@Op0Fr1HQuw%!$mC5=3K@KgEm8DO-PLY`b2xub|kM{`Q?&B zJ}z=Mlbw>9+9wv27`k4`UPwhn#?XP-_QBGinYl(8(h<2LW#LE|2{66(5P;;p+7!9=ThWf6>8WFjUhBP-eMK*k( zQSW-WZf_ft8D79q_-nMqkVTvCO*)OQh~x-d6f2O|W(BO(jaEwB!^McecS480FHp^! zlYm}8JQNg1I8!$heoKGQ5Hn0f%!)$wtR6*p0*w|Mf3@VF~XFbJhObNZo^A8qq+&d*y7QE%}gI`+SUZo_@C=x)EFbr-Lr@CJ{F8H2*Zg6-~ z#@hL5(ZwVgVQICe%m(NeLMz6}|+8@e3i_g52Q8LCWGC89*7vU6P{k;z3e`3L?mx@!752#PbcIuY<$Mu4FCTOhFuau&Eu0QZyZ3^!z zTRN2W@yIY*N}(C;zykLQf(*+)G|DXr# z$vuQ35ck4#pUY=7CAOq|lij+$CAz}J#B8a#p@%9mEOZ(GSYq9PT zGPXHf>!e?lUx8um8wkX7JwdIvoe^X8&{;(EF@F~pCdKHf(INs*-szRE`{_pdAfJ6v zZKvaG;-OO{aH=|KJ6!;6X?6Dc@c_&D`>+wDdBPn4vW(K~@bp_lkm8v!n2!|B0y+Q0 zOvQJ}Pb5Xq7jGm$&fl9Y_r@FJFZgw|O2QdzgMD<`zGopO5{O!r-$2D{5P~Y5rrP+u zS%`^;ebFMlpDSX^TiaP2*{1pEr?Ku@6f0ot@ryB^ja0Xc!NH<-RWYBA?d2sQ?Hu~W zO@Wn7aCH$1&x~*~(ZS_py$iANQPVHi&WjkW9p^UWR4*4+6N!cCEV-l6eENiMyGs4q zmdZEZO7ID?%H@Y~$ryS{WghoyQbvPFJr<PX$1zKLzdE<2J z;#m{xS}8jF7DcaiX3}-jLM6wqjgfYGB-Mdw(>nwinYrz8;|Gg}%tUhiy70}NqC&VE z{g=y(nQy^2qU_qu5PR{zrx!1_pO?nF>2KCwyGzb@f#A)au2x$(N-}O*_}{7R@>?E6 zOFgY2XMd!W4-O;!J-$edMk;7lyS{EKDa!}87t=9o_n;bya5GxY5BM-);p}K{T4er| z6jBz2k+pIzopalH0!@9`^;oPF5es(bFqcv|6Mfk)rY7Tm#oe7lii=;`x;A8is_AdT zU|1FCA%o|inAYQS(;D|9GlP4cdW-0R*u4dTQB%n4dwIsIzQf$aGKdW(NYqjG3+T|X z|D2|@>9vY&9T@f^L5<*{#Yjr|8c{cIV7;0Wsq}Z@^k|g~0piddOKv>pnBm{`bPeyX zn$&~!U1dRJ5iahXn9qX7gEk25x4%fVdbt0iX6W~ZZR_k4QW<4^zS)F82Ll_QkQudm zn<{Vf{K-PYEU${;k6O-Remxh`k>k|1wkyVDR{X z9zj;Vw$(fdr%egOd+iv(H&X@-0;U34Dnc@2cPA%tA^LhP!GR$Kd zgCkf;+UO%4wq~QAZmFid<=}&8XA!x)KK(6G{OrJrumDe? zIk;WW(DcEk>ihdXF$u9YREAY4?NW{j*va>=Yf_Mc zuYM2$-k>{uTd_i&76#a}c>PC5iXIk70=JtOp+D@V(b%a>Ti(VeDbt*GRD(TeN1%Q0 z`Vp>XB#`QuR~HfGc>yg#|7J1HF<@U8Rr$ML?zN!p_x>!E()WZ#-4PBB4HZ;&;+ipO zi?0_k#m70qH>Ec`oR4yg5=9F=yix=VAa3D=%#MpZ?9aZ}R)RjyGKu4+XH)`;<|8J5 z(K!An*6;fv7j+86#`rN(dthn?XWRk^I1TyQXdW>nq)aH77?704g++kEwUsO8^OGe4 zDMDUZxl~@B^o@a|YmBL68s|%XZLSbu>c~{2JpHVEKhAwN2GbPHmmKT}u6=!_!xG6q zOs|(8sbeDTSvRv=hqh9js|K(l9_A;TxEWu+9}Q!q7OHJh?yfuizLu1d6%lpBtM)ea z>lTZQ++~~d)24v$&^&ftD6L{p`fDbqu|NNIKCi@uN#L(kq^97g8@jkko`h9F!i4Rj zqf9xeb}CVk{5K*ck)b(SZyz%*Y@hZU?fm! zVnglVHstQIZJFZ?dVDn{qUz_7LV20etc~&{i;_KZ5qh?}`y$8qMh0~Bh?X4Q`Dc&v z1!dYt)`OqTE%;P&t2{G@Qi={&T?n=7cFn91vXV;Fqbap~&4Y*Fr$}-p)~WBU=8UQI zB08WC2Wgoe>MAM*vL(t%E#NcwU*s}PDrt(*-;91`mAavvGNzyQeSK#5r@Z}6y*^wG zkY;ixhEEAVFfNFCi{OQn9=|i1zk5vc7}r*EptT5vVdE0ID?LWh2kL7ViBHu!tASP^ zUbr=^Zu8|3xu&&RBQ3;es2_+9VJBHft-UL%K!%J>k?yzb-|lNn81X!3DwiM03PXiC zVPvT(xOu*CSLu}6R*EQj@L*8vI-DA_CnUt|9nb7>dC+2)+zvu1{r*7`JwhR2FDmQ} zpeMHYz%9w2NV+Q+(#pO@a~*6pMaoO{Nr7fXazcO(zU@Tv^ARPr8L5(YHL^0&R6aBB z$C=@nU3Is0341<9ypO*RKYU1LrU{FY5|*;$xUrsW5@19)@Zh4mNyPGilbCP_CgBgk z?dWt_l5^mh#gHTC;e+`pmOR2(Rtr(-7DbMbl2=T!Nu9D6M&1?GV2u!6|2X`a057Cg z1OeTZ5+;2*e%==M(Xg@xCecf4T0|j2K9!p$FANah4egGOQ-bfD4Tf}wTejnFC50miO8#fi|4x=XQj+O00 zaO5nCQX~X>VA=6GpuO$@0e(G@Pz3uarmseKR=n|rWg<;30tEF6N{uK${^!`VyIt?j z#VpPWW+^U*9_)+3#Wp6R%#k?}sqXAQg8ZkEfri_}KGtQd%WuOuFHqp;{m_RF1mZr} zy#VINs#J8!nAlq0Zu=!@<0SFkqnZDQy|;>sE8V_DDImBN?pCtzrv{vVV&wE%2L1}`}LSwU8?SW;7jY7k0syrQtM&}hZZM&_(_<7&cWwa?URFKCQ6u)$f7(IK|y z+S-hJY@z7ub8Lq1QD;wHxDex^h;vrvMFJ*E@ZWJ*d(;YJr|uGy*td+vErIZu9y z!w0k~o&?HjDj~0@Q(hn`Nm#pq!gbiBAPDW(R^NiQ4 zokNRDybBh8O$2C^GDC)!jHh^Ja;4BlU!xwx%x33OqVIkS696ap4F|Za-*Lrjs^xCK zLEYOcE!fi8qbF$8CR$JDekJ(k&Br*)>W}S6s>x9Yk!qi5=%_epQMDVly)#7vBhz(z zwi9x-;(3`*1r#$xBIkZno8oKc<=(*V6+5dW6GfOhiHv%;e3ey1XO}V3AYSjrQ5kmx znGw8F){YGqPlLnY3Q_eC37Anr{-WD9mW!K`8`_Iyzo^(aI7i&4o` z2CtN1B_o6h>Lx2;64>ygAdb`%X8&H3%CQYG@f+TqD8A9!??#V)D9I0`*V6j7SOJ>XMiXezbQXb_ z8g8%HCL5G(C7mdAolkLUZ==%lURME}5a;#d16F$)4@rebaF@fZRs0Np_NZ9av_%ih z5?RT18{DN}_1a-A)_$qxSp~DKj}@9*nNCdYP$EQm^PB4Seun3X?+}~=>8t*bZZAp; z$``+k4(3)i>MO1dk8ZSrjxc(Wo$g$lH;lf~tI!M{eYXpE0ih)RK)}|K?&TY^I|L`= zdH;NVC*rGkw5GY&hSI~!0nrM)%isZ}@5l%5Z+VA(?(HJeYO#*JLhr7;y7%GOTdvrZ zOrmG$Y(HKXfF0$4m%$K_ENInOa-yKJXMg?rT7;opD&yj{uJr>c`k^eYcbXq}lpI!C zEvCgAoY;?~F+HmEU=kNn75eD)4HKiedUtk3(q)!5!=4fB7K}0Yviv{WF1QAk?u`8r z;tfjszkC(JE$9sw)8mTn-C38KrMI*$lQwDOft6`LmgoCuy)eFX#@K`wb#>qjURR={ zVys2-Bqm!Bza^b5w{$v}!l(XP66?uF;A)}j$Wx1PZMNgI^-&ijE|=mIONbW{iKIuEvpC8LOl={9l9m-(5a(TOZ$w!LrGAgy8M z$GV|pn{zrdlk{3qOdKg$v`HMrhUqJ|3Fq(x#+x1IPfkLoxYRKPl+`j33+9j}u}543 z-9gEhR^YB`oL0>&m0#{0e-(g@2 zW!GiDrkP)b%rBm|6h00Fy_3P$532hS8XZEc+ngK~gEI&q)9Aj})Q_Ij;$MG6_l1Mn zK?LVnYm4md9kWf|@n*D;J1vpXI`4ozS*sf@5{f;v=MY2HHo^|R9;%61#0YXvB3~7= zP}Z?JURdJ2?2%yRI*1 z9+n?9O_sPpT6abQA7wH}zj zSP?N>Y0ztf09yUmoW@HCJyv_l+Eiya^{^YVEkS}VQeM8->{nV-lOiH#9R?>$w!|Q5 ze*g`r7AW+lIkbkEwfPEooD^Oe7j^VTWaV`ZB84(9N94)zWgklMpt;J87tj0G?X_B# zEr9G!@edXnpH;=B#irF@K+_JRp$3(Jr_obq&;aE|6WDNG?1V6yRFvt)bxi;pKWZ)# z+tdoZ;h}M9HwQ&M*eX=m`4w8CwaWcgQbT?_lAb!-D=rf(-z$!;E{u(nxI6)Tu)j%v zG__QZ>xqmQ$|&C2tB9X1(Dbl?04^S4wrn-DGo>s==^Db=S%cP)#F+@oa(THfFf)X5 z2bb$3H&&c(G;@{@N}hh3xB(ji-Iu|(hxwOPq3p9c4W(%4!QVo|_xh0<@}(8ltUmW= zNyuDrrZbgFxfLO7ZEewQR%~M+_RClWblwB@?;kBeWHkWO5QrL#} zfV^0s2ML4{{Z!-p(X5~_=7x*YQ9(}LL+ETwJ-ey|G(C?jU{_QRSm-QgOQ)6APv~xb z&Xj#K%otB3-r2j|JP&Bo->|ZokxPu$U7if&B3*fVce!z}xNnAO!&mG+hCSXGJd%t1 ztb*=_xeo6s9xyKNhET6|hjLy_Ol5y%!QY`yGCmU*4d7I2^M}5*T*w@M&+fYu1@jV) zc#l0)gdps_P$=2ar;{UbvEpPdPgDyT;IvRO9$?f6H_(W$~B=hw@J4 ziq2kR&ITpXFbMsd*z`o3)ByXO7HqTW5lgGaAe+PKfzW7a#WupLn$S)!AkRr3m9dp& zMa$3}pP+H4t?Y5&gYEI-gV3V(D{5{m&?D$twatkpv{Jq-9<8}1QBWy zhh!7+?l{M0x#C+)I6IcpAX<#&FDRTJqjDyf7h%Jdyu$5yzVUmPrDxkpISnV~_h(fB z(uDBbb?ila#=-S=|+YXNQnD zW*_Uba`LM1&r_w$4*ljJj03E|yUqSqC4(qp@+FbmxdzLgg09UqO8++x++A_WGD5ZG zWm!J~eOH78E1lD`Nd7f4(oi4d4{Hyqz^nBZEs*7e_r%q?y^tyYEsUk(td|8{s@YQdAC+^ zbal4g(IKR7 z``^sUP7Q51t2F)gAQe=P{`gk3?cpNrsOVx@_qdCIEJ-;Y*FW-3_w!6`Hl-NsZc*b4 zHvD_ZKthI@q`5wa6maav;270nM+JkJ#GAb%?;VRwSq)>{T$e>HBBZbqAfLP!EcdGIMy33f-^| zKTze`WFtakZ#`(y$7k~MSZq-7qaNr*PH$f>bHlP}qkCs?!Lm&=P9ATqF5N7J97qee z{}dHDX(KGH&|ADmy}N_6Aj2ppv%?XXla+XNra@B%MSir~Cifs6#NSEzh6uWOueAJZ3HznjSKnu<4iYpgm}T1FGl2_zkAR2 zCJ$T1@d&mU%^)|g2>X2J*LxDsARx98@MQrf7{jQm*pQEB4#~WK1G^rbArrpMWKFVn z`cfJnJGwW#)0>kCjdd{5h8DmW!n^R%q~Z~}HV_HLU+j#}cN?kI;!Pt!&Ir-wHgN`Y zU0M}j%9Y14d5QP3vSS#})*F_5IoP-0*FSNAo$`qdEV)%uQfvnc241V{*&UxnyxU@i z*{z>L;+Rfja9<*lku%Mcgo0})kdz0pV?HNa22n&vCh9^Y&=!t-A=zLBbl$?(=u#(V z^(RRM1|0@K&5b24&=O z4itrvk@3Yhc{$@Z)Yv%BUcMB_NcnK!&54v?g=bDFDvIoM>hwaMQReg-;b&91l%@_H z!p{r11?EC_@YW0ADDDEqwRai_A4k*iPcyO8Wps5>jB!wubJ`K~Y~adu2c&PlSpt>F*rdXhfb6Hnw4X$KvN6dXl#uZUf|7! zLMZFY33)x~tIXF)k}nq)liAMJsD5o6M_neecTGNevAClXQUjvGrxnqN>NJfspePzO z$%#B*a|^#iR!+kXtxCF`%aXN!j>q;6Q>NEq8|30_T>90(CrFn;>BMQ%DP81KOym*} zhWUEqGU)1SBYKK*5!86fvQ3#nXmY8RQf=bNC{vhppV1}^*edo1yUt~{_0p?A@l;p&v`dZAOam5W%|7xwTc_f ziu%E&ccxik8tWo%!|6LgxalIEuXOii;_IQXhkCVI+1}46@q`W1q7`iFiXX!Decls% z4AAfUDYv~b@6JYmUG+KGLYL_WAu*vl3Mrl1C*0~%>SF#VK{ITLU>LL{i` zJD9s0u{kTReskB$dZUx?!@-;Jq1C@+gjlzj zQT>d$;2Y8^6j?-4Bh79ev8?+%FJiV8m^s8S@|3WJ}!8NW#^U* z%qj?niFaDFV_z=D#vf7`@As+iNepy*&y{p?%2?zQc!bo>tiE+y*wtDVf=@#Q5;zc4 zlPkn*y0=1z)xtJ{`TBLfyA^>_v02N#m;E*3>feL&=Opiii|fx`A6kO1+kEd`;*w-_ zac6gJWtaxbeZwQ{06)iZ21~3!Tl76^YjwoWQRwS8;UK#r!X*v$*%W!0m)*2x%B;U^ z6gBzJ8|9ni~4)( zwdcA7HfFwMUC5@H*0pB|&zd4EDi_AJ8gHc@ zR`a$8=KD=UkK`Tg7Xi((-ryU$G!Gq}R266&JaL@CYw}mjy_6M-7M~C^NJGO#c=)Dr zrFyiBQ@lkzqv?PPYaHq=i1g5#ybr<`fRFdYK8$;qSfe=0UCN_Y%^-P zy5|i`bw?sKtmo@Z11*BZ(Ef7`eP)D5^bu;sI7B-!6mG6KM-kNNEZ5w&GEh|RQGCl~ z=Qs!Kz@>to6U|x7`?Vsdc4RNJ;%cP8j0xS65Kvjh_$!fY#+n6mUG6H8xzvqih9DG{ z%^fCG`o4ZzD(V~<^x2B+s#@~5VEyIayZ*8rj&k-+3>G-?xm{c&5{?&I9MLR37%}qt zi0;>~0+4KkZ`Wp?>P3IKXeIJ6TbeHD?T9supn5R3QtrL@0?DIu#BysDeN;sjq+Pl#M>)Yb+X+xF6BPf zH#8>mPLiYkwN9&6l<98sq?`N;YaK}eGBeeDFv!c={MH{04m+2V^&spCGt(-2M5pBN&w+9z;SFsPMOCMW8VP z7T27bhDL66wQB7$xc{%uKb=_!_^;dc1V@a3Mv^C7@<$RyDEa5VfBK0?_W#na92Az8 z_7tfW{CQIvH{yIWYsKsgfV=UTT__4x^xa!lHsl)fcXkLh#Oht2nqjXcM!tRP{PH^K zuWy*d`Do0$tM5-+n&uxA_;WUiXP-=d%XPR^O2*O~-#q6tt1kQmL+956X*h z0lm_-W#d}GMWaK~)>?$czu*5XjmAV|%Jac$9YBxBtqm<#!{nXbr5@mA!J19>-M)A6S`g9HEZ)RGhxbv*3t1Ir493YcarF%C| z!g*8_1vDOpSv!@Eb++Z;%i0lRRJ`@C)u_M>3ZbV|oO~wz0c|$OO&7GwmyUw#jHfEC|&mO7{txAv7}cFNxglG ze-ZX>pJf-r=x5Aq>BqT7dLm6!-^P-_E-4H0;T?*FdR;@W95wVL37T3sAWS1SGv{ffjMQ_k26$;4hrVCW?a6)(UC8TgF#d20XrxF^nz8{u~|+n{ns{tMRB@Kb6Bi0OmxMNnur;vzG# z%7lJ7ar@%fQSX49?D}~tu}q?C$9VB`Kvd^(IVRraBmMyL_0A&ky(wYzc-LpYx#=Kz za>JS|V8wst`ktp~dKwGxX!_H6eXBSm7(D*{yFa(ZsNvy4Ezpbz;&b>B+0!F4H8sVs z?WbQM=i?*l?BW6@B0^?oXTQ3>X5@bM_U+s8`S~JZcB*>R<#|ztr3;ikhvCkPNZDx) zl#KW9rbCR{3kdRKGNZGT-_Rs}JA7sXA16@bh>Rbd8b&54w8=Zv>D@qRD;^|%_n;7o z5h^G79Q~CEA7$UAHfMHL=(mUqLw6%G9#_FoWM4#P`pB-Ygsj-b4(m$+q`mOT*EjgK zKU|1|-?Hv);)kYuPPUON@^TyA@S|t$Sl8)Be}X2Qsd>3xa|j8){c4&+ zTc<^qPyR4WY{j#l{(j~P6nI2L2pbzlLPA2ZQ(6O)rEFRHMT>=?MmmFpl=de*LMs}z zJQgY(PJbr`^?V^6s4uFcHPaPq2c4c^tuVr~kuL-CNOHe{6`WS!Sd!`0ZzS>I6#EQ= zLQ3N;oAWz84!7dq+Xqfua>?l&_Y(?c)hfP5MczoMezSLYrM(MVL#Ga7zBJ{npVjO3c|}e>W11t-Q&%+N zkZHOyh^&XfaWAjp(XMnS0g-AapDvH{8%6u|mW;@+b@^eO!*@lt6-SdC4mY2!zEA0$ zh&Yq-Qa{kToepWz5Iggm9GFlTUoV($MsU@mzApohTdCD)4=W6H<#ew<@VlK%|21>K zdTy_r4|bFN`i$UFy+nht8uXcn67lYSxB0kD+R2GiN?LmD__%@)?(p!i*h&kyp5~>h zoB3PEvEjp$NQSD#W<4~irZ-rJ)yNS`JuuG!zoj&Rn}Y6fG?NmIu=>`lPRjy)M7?RN z_`cGfeK)Tm@$(rjc$&TMEbEQM&PO8?ISP_K;p}vxXGp%+)m4O|bTDxX9tSASAI5%i zo`g*?$p$Snx|1u6@1Iq9O~}}4x1%I~baLrQ3v&RG>Rvkuz!*6-WrbDKC(xTlTS4rV+x-y>G* zUU=g#n}p9})Uj3|G&tG^AmNCS*kg(Yc|qSp-F4InIsY)WsC{I3C36>XxN-bODJkOF zUy}^tO_rx+fnp0m0x#$X^w9^vgxFcohsKX!3mOaL0ZjxEQPC=&Ten_9Wq!EQNI!aC zKd+-^%$W9HR2up2+9@D@2YAbMSTF?#0_gNDO*p9NEnyfB$hzCSYrmqJ<3>gNfVEJf zJl))m?pBT3_%fv~-bO?4(foVQ4a9sNl3dA!kmHm{GvlW^@9w`bp4?vBIel#pB@|+0o3rsj+y{nGcA5qyAeGu5kP`gUi z1qIj<^zwK6fy)u#ue1uNqQwMPv_)-kYpyS6%it0%*y&4K7MBIfPQ6y`FH0e2{pH#9 z%eSSr9ajzoy%-Qy0;g+O_}s>fOC!n$;n$B}{iXMUF8wV$t38QpxUH`ZFgs{&1C&~V7+~OzR%3$e~j)$(u!fl z$?Q)oRQ5nXFu94xN-whM{(>RMu-}ao%iOe2oKt;^H+6#tbNxy}zro^i-Qu=dC*I)Y zmYWmbync^Xz@66+QTyUX#>5DHpUQHLi9DCG%)!dd_)-wzXa3Gbnjg z)7ReHwJA`4{J`?(LmVGXHi#P8Q9!<=jPdRKK2@A2}i###3Z6gI!NwX{ZG zZvJwP(1m$Jzdn`o+yO5}L3C*Bc1Q`Ghu7j*9wI@xuTvf?Zn2F@C@PA}`Gq*1$+H3n zcm3TvSU30sS0u|CcWF;1KwawXh5gH?(ON>*uhUQ& ze<5k{w8ZBqbkQ7s;MwDobwE>-keN}3KVZ(#u8xlt4-jf)2(HF{3&Lc~5W^?iv!d=! zpVv;750K!YtcQwA|nK4Z1tX^NSad zex8y%U&PO2pDj%Y!1u*39)x}ez{o@cWlubbGTjmS>=<6Z5Zcd) z9x5u4DLUu_vxbpHDt=?F>)z>Qg2ijk+3?#fW&E0?ud#i4aDUAR8f1h>jKWtY!{Bd5 zzaLEn)sG;}eKkYP^xP(*%`1P^Mou|P(hc?q^uzAVh!{*D=R(hJM*N% zs}N}61$*TC6YUm(F+4~|{20H%TffjcIvJ+89!sN{bcdd#%Q`DhTLUf_4XfMN_k6Ks#)@t1h16C(Rz9-8KV2FruwpAiGK1&wK_t-izq7r)Jy=bX} zv0C|WnGuG^CZV=?MrIA8&Xe!qA&G{qP?k5noSsXJkPel3VUp~MF^PeoFs;itW?4VR zEE0STScGK+JV|@y0O`SAEAvr8TH`{7vC4zMZ6#gO-=3%USezDx;kUf7gxwB0mKt4}nLF?S-jMVdD^OiQ;KE)fn(??Lcp%_KP=gM72w96TYn%>@ z#&KrQxz3Eq#F2GDlwY|}GP71RZ0_CURc`p!$gNAIw-R z4v}cXrnG>ai}Byz-^b&Y7{#g-EAO-8hQ-FgsWR?Gk&%^M?+QkJ+TgC=`bA2QA|aum z>_KN?047OLKcYoie~$CsXjr_4z@@;>??W%rc#qp7Qyb7XZtXY!T@+&2orn&X3RDDd zXSWVI_A$pgjmPprap6p_$={8Q!e(#~mrJZ@#f++nUzHiGh(aVhV|0;Cg80lVE+hR~ z=LG}p|E*QrkwsMBK3WOraDI3uW(v4f7XJ9qYQwjlfSe<+m@St#Y*9d-v6VAd=Z4dF zX#p=#x0j9A!iPT^bYCZ;BF<>W|0N>iu z5)a){gIdrMpu{_|=ryTnzvEzLMg{Wt)(OCSFmRuGa-j?gfLa{=JDP13 z1Ml^X4%T?eGdPDd@c05#!K!B0%8J4KD-LmS3V!<~WvnwK}*BOVG!;4Ltnwkf$-}DJvi8lomKC&s@cIEvJi71eXkOq!y!i{=;(GJ5@{~z zu8>qdQ8^Gv4Q{$&`Fx1k7hS*7WkA5vEe|xi_6G3B>%rlV2u8-g&GVe~>*R%v|EihM zx7|J(Fgtw7A-!oAHoU?F^?<)#YlMKfkImGX7%iz@mYdv9nzu8-7-X7Qe87ct*!lI%g07P@N z!#aA9xQ!);Ee9v!U3n?{c49nr%vrb}>#?t_)F0?k01b&=EAPV0pbr93>LSx&KMLN3X#lkF9nbj$WJg>EbI5r?+3k-P|YvNR%_p zu<@~(F!^F<1#Ee4(-^oh9VQuyNf_wo@%llb8Vx(pjY=Y3^oQ<6rqH#5(t-)SQM@~n zhS)i^)a-Gmn2Xrq5SQ`h3;C0ij?e97ooFhU!LLLG1`9eQMRhI;SF-Y4VzU^j#dDBS zxX7CMb*9s3^`-0~e^1%dbe$yuVK;V2+S-zhus;2#{#lq`Weof)XSE+TUd*g+lbcj;Bwflj# zGu7&O_}CYD-3$oxPfc4tiFAbpe$2By*w>D=gAWk`v1ghN@`b==RiBq*1H;2NPDs}L zS$*ka8TQ`R5h%21e2_|0$t+2vICU@i@lJ2CbT2Aa7?6km zD=ZM>%Su>S6nve{A>AAzgV`L0xjqI+7F^Yi01Qa$ zBgmC!!#{QnDBb*N3O}fh&J2_zNBo#I%NcY)gNIm~xqjH!?k+CX&blFS)kssL^nw0M zL{!+!{gHiICGHm#SM!s9xHZ4tk6SVSj4bhj;-7b9x{@2Pgp$BP8+jIrsvE7`C$bVBLpwRID{{pxJ&g%as?nn0^Qp5Xmrkb~`XJ=HqDKboU`OIB%h(rlrND zq=fn0UKoA*NSiF?BSfc|9tx0#CTE-9JT8~rpRxhkPk4BEPvZuxb%CQa|3lFi8yUgB zd-ra2IE7oQ*^L#SMavIZ_Q1FbFfT7}xM23|KH$_Gv$UiO4YdEv^8y>E;nFU(N(7k_+@LwHNkHr(g zoYneWU3qM&`>(DV0xf00;LSI@_Bfi)MhZuwq!tt@N>48RW0Wv+){sLd-*t}XxRsai zDq~ggIQQTKAK|eBbK!w9kFexxTuQqb$Iq*p!8%P>TW5BI<{6o&qGVBQoi z0Re=E2lwIOA)Ip@aBxozF{{k@|L)B`IsxCxM$t^K(35!HT-n@&`X1<$Tf+Y*wR_?x z+4NfqOOa0=ZjU#BP2&o{tIgaW?V!iq60G=^!mLY58NgT=z7qv zpn$&4VWpf9ZqM8g;Bz8aap(VJJ)+7 zPAMKwDT+m|H$Mry|IM(sw-uz2Ut>b zuFgDJQV+wHm7_0c2v#N;0i0uRe=PNSNmbCNP{$BAA|(o037{;}B>S^zY!X@KM~_8D zA_w&k^Ac}sSKjfd^e;eVitO*g)1W$VqJFw34trBYgW39QXbc;%704n0Wl&7#xB2Ar zs1Ln&?FCR1(k5&GfUg>-vlR;}$P_q$d6LBv>-fyjP0 zkp_);H3TZ7a9hISSbrJ1A0(~u=_f&?A7#{E0yy4kxrfuTtRzj zE}tjwGP+ui^F)$4tgY_Y#VKR=_d=> z;3;M~JTH?Z2KBFPTo4Sux5v*fL+$IL1-vd>lG=iSIjgApC0*bG@Tuz@5h&y>VQrB> ziz`W;H&zgDA{oX~>*{4at;dcGxC<4yG7)GBIXlYoye*aFWI^zrTnVxlAQn{zWt^o1qPoSdgpYo+^i`m_cu*&!wGu; zsKKa`{TTIc!5TKWaOQ%PSz+_yzDSs!GRB_ieRm~ZFtCZw*4L1QV{;}iZI5R~S=$w3 z0~?|!49~BS=aTcJ%|G$Lb^(`(^>DW-A9<9?sLUEIXWUze$oYs);XyyBi2<-neP}e&+Y9qE8?rw`6s=^CHGeP44>~3H%IH!e}QUP8NVhBWq z`xfHtIvYQXs3ty6tvdPdE0hSEE?J=Tl^3?yI6Epi z5R54nnsv7+w&aj<0sT*;Zk)8bQwpW90ZqS0{lS5r8fWq^p+rK3m?zI4~ zf1k!}fdObA;_)80*kIE5?B2K`DszKq9m%(AMx9Qqxy)rVNR^Ac*{T)N z=SMHK+Ra4i4%v?F;MHWMN!Bpx#aqM06yr#K4}BA?DjMXtM$sFgoIZ3n%e#|3Ul? zw9y|UCnXi|QJYA=4`^tEfA(y-ryMj&0{TziHx=eC*Ko%#;MZ83vp}i6EXuD@tDXUy z^G2~6JZ_W;=0GN?v+ei|$HWcGQ#Ibl)*0HkrbViqFBI!Ax*U^U_UZJO;F{L^mKF<} zE(|*WqQ}+(p`bD2KSROP%nTFqdrwcs$HAfpXGeDE7A7WUKj3~FQf1Q5R1Nc#SzwA? zNpONTVf_<(pCz&B6|)E>CnN-4TwLf|q1FAjj~DTyyu0&W0t9rP$B%%csescud{vH)t$fFi$=use*98{h>m?wfLzPQn|w0(X-I1GMA+q!ILccV=wxzW&`w4znI0WlZUJNs{b~o>WRK@ z9I)Zb-6+m@D)^+)J-fANEjvIunGm61(YGEfser=N6{O4AKYzARtZ4Gfz@pP;+bfw$ z>{A6jppO*^xI0-AkJ%{)k_7YrOcH1S89-m1-D0KN;al6~CUtG*)d==BWpji9Q2P?K zG5~EYKm!|GWy8brr8@N(ot>R86cp5>7K3fJ15dZYL_dFHlj!`)68s-puE{+!_ z*^I?uPP^Xgr>l)S4xrdWr^&&`CpaNM8yyFW8A&FLAqFy8#i;5TM<;P#RbZ8k1P?0$|1Hz}jv?ImMKagSvo|}}Bt=1%c zUYm^VpsycmXe&CkC>(_tz6``V^8u2af8n9-E~K9a2QupF30wn7!Y~6VptBXdW;e!s zzh|B-KpvUK@1UWNI505a_ucZ{$tytZwIue>^91BHApA{ZXm4+?fb%92P?zKMxp~*} zd*byIea+!{X4=r)%-jq&Fb_+>uCEpqh$VFd|L{|ndx}lslh(C>8HnoraH=pczok5Q_?^B!Ik4EPppU)>ON}@HS=E~<>g9Ma z$4Ns&vkL5CmUedP|NY0AA+X{#igyH;y;wcUefm*fO91OBoBt~Jce&)qE-d#C;q2%J8E!XRgBH=$7;a^#;9ureF zhZ&fK1tx(eXg&)F3cmDsyiIqz0Z)&c8MQ;OS%MeV?;K&?+o1ceBos_y$nZ|Fh6U6@`?T7zGGZy@ZY} z*11+#ng2VkY&aD`gceotKB9H<=|Qa5LZ-_#MUqHP2>(1{XJG9C zTNN!WEf5mV5S=Z|VS#R%KLs9W?T-()0-k3yVvlz&w2;vkqu8+(Xddt18{b|WhI3}y zBWMBMjJ<{)up0D<)aCLeEUy?CqvrhxS1dTKr)cEQ1tTjL*m}_{`D?;Jjre7g=%r!L#8V&w zgH_COR53GM`2Mp43TKgG(a%2z9E#OqtDfZ|@PcClRKFufe&iZF(n0~_He+UPP z4_p}t5CDw^AjdQVNnTs~Emu}E?9iOROCHNEqwf)jwH2GeuQb5usUCOQJDsi$VPEM#hiJTM5w{>TC5Y5T(C!J zF+X2Ww1|4yx{KIvEODBfHO-?r8p4PEb`_*bzW&J|lAq51W)*aqE%RBY%W^$C>UT%- z_cQL44=U7{`<&-xfTujtb>@Gg&a0g)sQxwWV@XBZ8!k?)Z_nYr_*c5@D7FC1yQQ`D zo0t89knEE8{BC6{0b!r&s0;`q0%s<#(on`f){|AV-6H_wN`AC%NLYHnVwVVi|52ps zM*Cv^2o7p+okEY#t`nN{14U-MO=k0FB!}B8h#@Eb(k)^O(QojQW*PQcB9gh`Ld`74 z#qNCQfEA#A%K$sp!u0{FO*-GmvXX$RJ}*YG*j@J1;4w5M@EB+~x=i8|A4%hFAehUQ zSU-6yEG3gVvR&MpucBvIbEPk$Jw3>E{^>&7{yjNa_`A?-rUIu)Yk(QMk0x@t26MQ@1Kk{ezsLy%t$66O(NeOdP+-G={A~EB*$35M`BG;F}a#h2XRO_MHX8 z2G8et<%Xzro-93c9}MIyqcH@9;^^bD%76bcqQK+l&ZkPD2mmau{M$zBs!0NBc0ca> z{PNTI+}vD7nE#8me}EzXxwXU!H|&#{d>AsOcw|+Dhl#nCodb7=`P&D$fLo_AOlYWh z`xa)q8su%%1kxPk`tJ_^a9LbJ7F29vpva3yRMNkZU>7`>mSJN9AKKZ%IgQ!oAm&f; za6-Oxyq%vdf8T!G-*8F5zVVP$Pf2eL-ga0D1(S1*^9&IoaoNYonIKQpAsC%|v=K`T zT>cl3|DGquX)#KQi-*U^{D7(EjM}-kXMHeN1?RFe`W#TPzY@A90cG^ztI4&5yGnvQ zJgs1P>xPM*y>idR+Vdl>I zktPoA%u(+kuu0>Kp&r?2bdS*YTCYjc%LCp5tp6h}lrS}=Vbg8MHZ`XFSn+H?05I># z&ZbOqL;uOalUG&_6Zf}gcJ?H_AZZQ%4wL@#v6L+*xiRdBikWlCM(g9Ph>`>IpRc|qc9&9IgP{V`XL=0n_GUDnNOL8vrT;2_t>4oqidH~A61<)~Um9v|o!MK~-+ zZMf-kl5S-OKisk8Mcy|=B`APd%#U(AHj`KOz%o(y%;cV#o5LoBA?d6!RD4cpp4V`qf}V;d>AzlfS}08t z+__E|56R~?cZh`Z^_iLNVja58YF`rNi+jg~%YPQhM((>=6(3F%Et$KShAdiYm zO)Vy_N4A2W0*qZ_4#ghv`$p>)x(!13?_XsR)}Vp_MpAzfMZq=q@ZoM-^v(jYk4i6y zpJ{D*jY^E9$Xg5_BKN+d+l0p34c^$Si3e8R=_cx|FFKad<9vE0dBeGTZk|g%2?;V; zA^X%B0L&fxfDKIwH6T4sK*Rx1>7IT|o zlrlV79*}7y)zIxeHG`la8LNa1hYiap4DDK5ZS7A`|5?Q+hFXmfa z>nYb`!|awi%Jn+r$znN^*J%vR7&oJAzwBXyVs)atleafF889{eY^6C;GX-3$0pd3! zqp-O64Z^iEB8(un#6z>qEL$&bC1p%-NQg0zUIUpL5fKpwaTJC=GG$Qg|6=d0qUzeZ zb-~~e+%?z=?!nz1g1bX-cXth*1QLR~ySuwfaQEQuR+D7^`Xh>b>1YQKE-vsRJ)Fpe9Gvkit4r8avBnYj0NxI<%N3MVG-1;Bcd8C z__RbKV%h`-r1JZRWdxFQff&P;-RRW+Nd4Rc%}ZOK?=1n+P0Fjpf?|Cd>^GrX?{@H~ z$Dq;Y#p7Q|Gx`$=U^-%qPWQk_>ZN0%1 zIniylQ^s^Y;i&uZN00!Y*>vZhaZwCo2((_&j)iH6v z)EpCZ0n$}}cA>J9pb5&CS}s!{)7#GU>dpgG5Jm&Am_FrC#(fTXjKX<18boJWf>l29DTFUp5c z1%PgP&8T+{W1ARxm?25AI*-@jdib!~4hGQs!jsD`1za^%0#Sadz%kvvs0}y3Cz~;t z@UF67YbR~Ks52djKwb&;^ks(v@scV`n2C6r=18yuUYg_C#4o5hAANeU7(%MfCj=W1 zQAdp4D$+?9ni3(`m01yARAGXE3=!|!HlOy&^mT7H!v)e?k$rjF*e3kT?mc!NXmB;T z?tF!Br*lSa9YJt5Zl|q8YbPfy*!(_r7)#_q?Us667Ew`VluJ?G5xIuVVU9tOH>Pr7 z&A0lVq9CbAXr|lJQ2I%HA6xz?&tvwyr(e=I+ZE8Qa=bCIH2~`QBdAg2u`yZx@cfph zH{3D)Ruoq}nlNg9QToijV#!`0$Wht$<_V|G(;1G(@X`#+*?xMWrXKD;YCsLxaQ(5O z&vMfu?-JZ*-ajsqBd?k~tCwPGlrpWt)# zuZ6RE+I1qjEjZ1Pu>-F|PeWJRK2Lz1QRc_4e^5{;e@6%itJ#&Wdr+BIv#7Itbqan; zTuxkGh6-(H>pCQt1DQ@cAUMm!FtoBsP%gPF%9m)$6+2UTikJ{5D!+_MAUhOa70SI+ zI9pGlEc95Y(GYyt%Nw5UgfmL01k2gspnF)D5+%_7XC5+$PZj!{S-d4I7`~R|y*RvV z3hcLc?bHTPJ#NX@a3^$OuM=ZkO742|jJ2Y*W~_VH3#BD({!%f-guQ z)2biFgz6y!rdo{2KkI7?2`~*wgz?Owf6FJ~2ge;rubps1=pG-R`cR@hl z&CH1|1*B_sehnMt%LBTzSQS{WKV!&$ z<5!{bZL6K?or9SWwfOB6v#K|FaXuf-$Drg*WX%v?SbcVUcP;l5axC9MLrKZ`u?i4 zE*hZ49}483;6-{{A%4`e5KhU!vUb*(Ya6??5U7&aEp$$#2jY@{G*>-1ply%wwpgy5 z-uv7lc@g4%o`+-<-oMvIYTgmWXh0f z5!C&QHwo)~zl5_);AGwwXlF69*mq1`gwRGVb#sT)(4PV zLo6U1QKzByIi=_LUx~eH^~Kj3lE>7MW(=PNdi)!38fXc@#G_YQ#QX^I$9Uh2mD8GS zTY}91+?4mW!ZY80*uQjc0t4q$@dXA&da)en5JlFSZ8ACzZ{BLjN17Y-a!1~W6C{t) zi!EX{L9sM(O*mA5n|?);w;#~I(ZEJnaFiJ8@4O>-M@&*k{uX|?aZzu$DyF^Vpv3n* z+H)higx#{VdO9mxy#?tiij`7Ava=uvGMO*Me*v18D_(>7Rrle({j2kpL#_uo-mBsb z)669?0{pMN=Q_K#UAS8U?&zJuz=S8FRM>msw~|~F4cHKP!lD?|pq@9fuRs*8lMGRC^ zJ3q*^1+;4Srv3C{bjZ%G>feIVm=Vffww*@h_cd%-%){84OfdximmqE*W2JYxi1hVxBoS&6yW^wHHixD0w-H`gMf&|r@Eq%Mvv(#HLK_tI$_;)ZeWk!0 z{>VDem^+C&^JQi@RHNuLc4o-NuD0XvEW8?53tca-gUO9a3}{bK?2a4c;R>IsK#e72 zMC-7`0@yS8ZE=Cn7eaoHCf2_-V8^v#xV$MM4cl{u=KX=PtbK+tfngYZmRq}bUzQ`F zS~KTgKC^A6<+Ob!o@pKx@(JwB_hfp**K^zAv1FglBE1`-$qmOXot&2Y4fY zq}{s?FQr;KE~PFSLptGU+C2uUoiZ?t)ZwRVP85i*_xarN^W#S4gkIQb%x6vpJqywE zq`j=(o~^D%@Q)xXA^bePSdd=788*6|CR!0sZG}Gq077FDLOwk`g2||MrubkXy%!R^ zl}HSHPg;+gPcN9r{MMF`)paw55q-WJFFbc2Y6;{z8Zy1!2bJ}nJU{83Zd7)e5oCLi zzS^cG#_6y09{~WAQmV^ZvbjzBI!9Jq0C-)lBYKvoNBU*uBKi@c?U_bQ4p~%2mU$Gv z`wf7n`Wh?gX1kPdOn3Rb`7@8n{@IJ?>`=_>lM$p1+R?J~`2~{WE}a69nt(do$xfalR-MXvsv(j3u7#^dN(3^8UEWYJHb+bVW?y zM+IiD8}e=QbJOt=gm9ONW zz{7A_6EAm;=R>uNi)uH}1O@aJx`Eu%jAv_9x`qCr8KiT|UB>UDv8F z9vRc*GF?CAAD^*bHlta=x#-yqRs&wrTKN4VHu_&)&Ypa4>K^9DeAxQP?a`4jFi}x^ z@I{+9K5zJ&YG+ND@fh-C<)3vDhfk#UqKigtSf2_6z7-Vd0S$UnhAla8B@dFU9jq=h zx3>?s`{k#X%^qK%?(G$ndZ;u07l@zlOqO>{GgX%++u29xy)%z3(n&Da&5h+9%==3o!fD3D>AR3Lv zm%5%Wx5g*%;f4uqQNyH}%OllcveP;3&_3jELgc48YCGzOs(%ZyLow;s;52T-J`eps zf6`rv$uIFxazBBU=QYSzNX*xX;`+d$TBfc0HPs@KNh10pcxb<>-lL=JkXYk;WTZZ} zHb*6*w3@n60plBctP5HzIfj+exZ}46HFHO(U?(sG7DKI0NuXi?WzwfB?&j`B(}J2# zFxaOe)nHFB+aI^!pjW`r}DgGp|65j0j2|2y9{EZ#IQ zdu-CUpx)kuVn_Bvs7+wZgiAlWqPs7rqxcB(Mq-p7iv~;cC_zvOPMPr#(47Z$DMFF3 zoPuT<|BF4}pj83_ZO;pxWv^J!}9#i?4qQTJpA z`ry+($P#{|7))zlnW+^v%x`JGtEFN^l7dzU!*WQ@=`za@RuZkkj+s+4ih9 z%7WhSt15NdDkbcOgZR~g2> zy${lUkfoNEk-?xZ#xF61)UL&c4jc`%AI`HH1}*yr=vKKT)SZOvZ<4 zEL_&l5F7%ch7AHRwiSyeE{AHlsBf=Qn^g-xL1vS!g?I5dG2*?YXmiW%bu%z{x&F<+ zsE{~HC+&lv7P^fy-v>+7cEiqs0_~Y49@87Xy!#~~(<4KT6@2o`*R{ZsBC#y#q*_Mv zRiZBOOQFq~``=H~$n}KerJP?P`Ntk3C!V;{t$me9p8S7X&%F&<4mIq8y1TgFtE8+y zt`^eEnlZDq@SlKy$&{r)SAW+Wn&4Tg&g00_c<@5>e6K-sS%DMvnHhWIrfGugj+%sy z5SvXlIKzjCpq`HCFpo@hefF+p!lfE>i8pz?PLz9i>6ir9WCI~-v#2-2cvFD`6OG}h zOjFDtEypPR=6N@v#tIGk@(@uvV*U4G1uCEA!rN8r7WMo5V7o`l&{;zPEpL{iB~&cX z@I;j!astx3sIe>O_(>VzNeG7G)DIXbJ@r2?`})^G;{~5d67jEkmPXW2>9T)%tU|pU znLu8s>`KX0c0bHAtu}M=P2zrbMBZ}$C>`DPg(xTiQO}RRSx4V^0=^`&F+J^0;__e# z?p+^4hphP%vM3)b$taRM6S(0z<1|8w2VLj8U_k{L?cet5zwtJc^p*yHa{ZarC^Mil z7r9?dObp9yoBKuXrCIxQks4V*KtQ#J4AAh8qy|VPJAVOSfpUZ^ot>zi=?_ICu+k{L z4IjHi7c`3PUry4Qw7B+cemAcv6M zNU5n+Z+$Rq^yZ-8LEbXuFYnHT?(67N+Z!U-Pl>6;Zh4Rle2x=l#fj3!?x8Z^a3x@` zyCZ!N$33GVyt;x|HiEnf@7KiUK-qZ%C@+*4i>6K@fqYYTd%8h!eQ^|p%vd6ZJhfSt zNhS%^n~9gMhPTEt?AD=hY@?lLFWqSC_1-2{U!s$)f6J*y*+i(KM{H)z!`>dgJW$-z zYa+&^Qv#Ua&50KH1m5m9QC#tS7H7Y&brEa}B37oHpZh&kwSqsdQLsU?}| zw!yAP@WV~$n)IjkHtKsoODELdy_ny~Y9e%%0eO}$ga}OrI^z{D4om3R!^5#8Yv(Qq zR(Gg;4{}PyJnyLAv6HPJ(?Hkt)vNT`@BCme7_X&a(}NX@j2*j8uycc16;(ELj(Ve4 zygv>1ZbY>`Z|S+G0R1$R54zsy>z*fL zs(uuI7lzV({5Sx6`%LNTH9ZZh)3!ji&9q=S}k6FbJ(E!_}f3ZKE0~^m!-y6 zljOD}`IV4Ddvp|{ZJZeeqAu0ccpu}ongh$~{SQKk-_ug>aZHa|d&49hPe;~laIEQ8 zDR%DJF0H1aXkzZ#ukzN-<}z7TiQ3f8!~AFRS;4)^JBy8i#RSZYUjt5xNfW)WC`525 zrr;P!Z+dtgjv1Hrv#&mxqH;#@}<8EuJ^ue;X`dz1$tFj=OhS-1ZIJl%%4@ zhQP2R8O0vIq-%I8T^`KJeO@t}Z6?9H(e%Urf_mCej*m_|GEt&MammEwe~07fH2uZ%T8;<~~OI5McZeajk7tzlME0K2ngUQy5=SEVAOUT7Vm3Ba@^Z%b zvB6i6x27C*>U#?Kz{kGH_EtB>?C{$nPl@n5<&?_^dc_LQ8|CBgj?9U}NDRG${})?p>W8HY{m1TES^l<9b|9aF<#hxO1p2I6jc@c5A6QxO8>d4eh(P!&IJ)3mx>BC(xoV$5g z^SvSNO+xHgIjDebvw}hY=0CUlE=-U7%Ky&Q6Vq4*eV-4ukG(9oC!NpCdI=1KeIg{_ zB()8%QpgIvQEr<{6)E!^A&qK$6VuQLm4YZ+ejoQD%@82@YGcyNmWqCH|9GE5up6@t!B1@jN$E?mzoH>?H2qdb>^Vr@KuZNsI@GNOmXSZX;9IiU z$+a2o4kfFRRil|gR`Tx>jA!0>n_3B$PaZ%P*+RbWG*6|vTtHON(9uh7v^_Uq7ELq{ zyXFM(ejV=`gqr~Pa3$D8h&W60Z@LcYrF|pd!BRCWKVu2a*D<_+n`C|OqF{o6Q>bHX zvQ-;itj0yZcj|l$d^Vm$b^nSHJ>@brQJg_l+X$m2^C7 zs+-~ZU3G}Fv0;dsmcOz`$1m|w8m`Yj2W0T85}hr@L0nlT`I1LNS((x%g*Rks_G#VG z82R4o9;|nfKro*%HahBUFRmv|wdE=QTM)7A+)f04a~X(-T=&)|`Sb~2eWi_A=AkS& z&5mFKmZN?g;bn0Yt&dk2<>i(sm2$)Sm#|J|!>at-E@K&tN-TVPw3#rj1e3yb)7Ae4 zi;>AZu(Sn6|DZws?qSdPbG@S#W+U4zY_GMa!P2h+4o@X>J3T@JfrCbOQoh@lCrmDg z?`x_~^OzTbW5t4ty)W&)m!5_(YED1Rj~IaVz=ZtW87eQL2Rl*Y^-3@Zb+-g2yo>7x z+cUSB)_aEj8?EQ{8tK+b!tP77wBz&Rutzc>`pXlRVQPhSTQIr_^KEb|FZI|iZZtme z*oF>M=5UuUcP|;!TP5Ljgx%}E2fzH*Uy{o2n*fw&u)-qS?a4;TY1A*nlsAZC0wIS? zr9_&+tzsh++0qmUj4uQs)|y$fzsNYSOYad#{;vAhj7)ZPW)x~H&VKN6n^pJ3LAYN0 zw7gFmbEcdC5M!X?tmes_k?IP}|We zY@YVl9+YSpV}lf8%UxgSYSqcTY?_RbpAlMO7EOIRu=3!;BvA6o#W&CA>C{^^A6tP8 zFqYdgyh!4?r$w-Lb8?V((3mxwO>awncy1QIpi@859O+@x#V}&__cUJOtv-W@cQdwp z;o~AXN8p9VGMz2(ALpzNAYU9JjzyQ7{B*QjH||09>#}#X6q0B4J}$^sJ(b0p!E~k! zAQn;_Q=bZ@&x_ysL+h^(RNa@pGlY(;K-3fB|)Q6R5ZCwF0Hz@*+t$=(Hy1Zk4Nuhos7=xx=3?U<_A>~I6z^9utYtoePjF*ow zwPzspw}g0I($24lEEGj?!1VZ23790C=dZB;sjV2K4DD1(Ye>$fX0F?w^7gSK}zPt)3z43p&*1qeo_@UoT zHuTG<%%givvJzR_+P8ZTguRAFOQ4r)!w*PeOZFRrhQ)guu6IE{LfLJ)O^8`b4*52C zStc!skUWCB9t0hJjWOFH1Z?0`{)$%JwGZp-TqX5*snfRp#603=C2KF5;p>SG&bmw3a15& zIqd=Y`$%A_3S_&9sjjiE)sgxb@ZXhFyoZq7j`YJ}fLXdX<_LLlfJf40GUl6-DQq`R z)@_7Z^{vFn0}+Dck9_`2{6bbdDzH0|kz{)Vg5f6~Bdj?N@DbX=U_~hFJ?!{gM$Kt| zg4LFiSWM-^PC(Wh8u{rU)k;D5Ovp?07?C{nG1;?#0q^w7@bBWuK9+AljeUGWl~Fp! zbWB65T@J^bY_lN$(pZW;|RNr-X7+!!! z+Q<95@)TY3mte!LMT&RH)mf@L2e(b_Md!Y2`lLm2WI#BLoeUyke_?UvM{;E2Bh7Vx^AjxrIA>R1mpOaMyKC5*P} zNoV1XwEgpzqD<0E*(X_lIq1;<{}IfBDzw8&%@1IBzL(g|H@+`{FC}>qag`mB;1+ndAj@xTQHk>&3ykpN*6R?d>X`quk~!7UqnPE{b)2m zv1&9lIaQxbFKn?S>qa#HSub~_{m>k~Lf`*(2HZUn-t@_@N9m@Emjev>D@5?eNh;c> zEk~JmESQ@<3qg0Povl^91_N==zpKvC*c$i*tTd@7g`&Ic`=k)=H>8Ijd@3%nf>ihy zHsa(yJc75NcphM@BfUW3ziUPzjr;aT@2ZG^+VMSU7mY^eGH}>DsjwInnl;2b0tSSc zob#FPpPh7UAYpH65YAe6Jir%cZ331v$<#r|mRAtpKWY;%u_NmzMi3c()fvJC!#lQ@ zHZ_>|S~gxarlwwh4XX|QHI|?r1_|G{!)}PT9y6(%9qCnNi)1Q-h>sgV$A>s@KskZ( zhr%6GyqvnXhZWspi@v=H-W!o`CSVgH&0ijH`I21GXmkRCpSl4=l3m9=4Xuqj(JJBF zP)9$GB!Oi-FhlX(>hTE$958c93B-lql#87#y)L*p7m%uEL^{hzy!y->nv1VU2Q!zz z?J??lQ(A`W*nnASf_E(HMnG7V>NsvaT$QVysQkWB_EQA`4ckISYpnRH_<%%w4*VX~ zAeqy6xGAL7vTq&{{hQ46OrZ+AMb7 zhi6(R?VWW20TvsIh%uJ%hg{M@BW|AApGI5J+;+``c`2yG2n$NVf)B_^?C^otRj|?0 zDw?tKGLCt%J9d%F&M*%xEtsoMSV>s#x+F6K-}9=*?!@%n#2D#%(^zTSBl%Je2QOFA zjc29O(;nHj@0lc%%7UHE;u#Q~%?}0zDgSAX!y^A^=Er$x&EEAa1{u&5pSp;B%KLz> z9qg$$kOkK1O()!3CcE$7_VT26E5QOE9umSp5*c&zH$dPRbncvW7oDFxg zA%0p>*WMWAf>U(@W{8d!o2b|*_U6RsRVkqs{DSR=Z3~j9BbvxqRedZ!q7DeQt~`JE z^nO!Ph>@NF7c5i&l$v@Cnz1NFv4V?$1e(j}Qo~=E zp3thW`-$Xe3|>=#?j)qsn0>$Sz_w59b8;Vh_1HQcn~P)XKpHqhYh5{fSB}%`hr_$6{+{3K?hh!!?zVATct>C@OtQ9R?j~ zsgG)P>nkppm*uNLHKIHPJMN}OBgWD)gn!U;Q)zoPbwgpVigP%0V%+I1m58eUInDPD zSC1fe40cTm;`O*!OdSM*NMBm@lT-2n&o;$`T+d0CP`EJ8<3l6Vmi68|Fg4yf%t=oX7>Xw+!>3;N%OrOOXNO;-mAT(#y#k^?o-#M&Vv?h@=Ia89M$ z9wThgIp8gI;OB;2+u2qj-v^(TfW0mUg&YTvfPmL*+ihaoQxcZ`%40)9ofj^agc5cM zWNS|VR28Gq3Mnm*4>tB=(5S3rpD|PGgBp=n(q zCz7XbO30J_(3*(8j9oRFaa4rZRfd93hC4IwUV0AglPWCR*ll{>3u1NFLH|*j zm?e>Zh8s3q>me;rn!jfls?Z!lnc$fkwy@#sS10utcU}&(9u4`SH+x;F=i64Rr=?CF zu~G8Gbu0Xjiv4f1Tj}{K%KJK>DAv&J31^^-$}MZ)OJN@*1KkbQ=u300r)tHCV zPz#*(!dhnMHWO!w-6>EZt}=o?3bX zm^kfZ>JnCv*}z^(Y^)?x)zSlyGM4{Z%tA?n#*N-M@%WEFAyB!v~NXuqPNDa*Y1vf-KU)+QsN(r9W?UlzZjrF8b5Q=`#U@`ikS-a10A zQ$^yUb@Ha$)1b1LmNWHwekS$IHB_xOW|V7>(rs(qC_- zf9QYxd=?)0=BEJTBfWNTL$U_g0QM&Se|${f)Bo=d{hxB~f;2(IR8(+hXJ^1X^mBIsnESycc$&Z)sn=Oi{=xoa z)T{|w0}6yC@cZ%s^K?GCwy~kOqpObFtoC{gWOEg(SAc)`DP#Sz;hZr8`%1+$8BP9- zPVsRKC`-s!I54wJquv$>{M1( z{^8c!R&{%(xQ!J>qqcjJ{V5x&^2H4LFBLJLo%SEjObh+QpJICXn#BJH{-OfZPLz^T zY-$0*7wJGyU2~uO;%i>Hd8#l^$3LIk`Rn z$Y2K~T>*lsl!*XP&ThfG2#Bt|4gwH3|CUhG{ZVKLDIy{gm++>}W|^7^!otwxZ|R@^ zehrXi>Fxt7)or0hd=?fGicLizXKiI)jO+m~$A#rgSQ0Cyc{dACT z^(e0kXQqYwSK}PV#-VfQ{Uez(2q6%e-|B$6U zbS7tDQDB}jQBiPkV1LSxTceM>AtE9gK&bb9X&rPe>;w$zu_}LlcEhK-oqV;jRB&__ z=7eaSXI$7p`7z$5@M=C3K<4tSpxOIj{U+i3b7UA8mAEpC)cs#8z zKB!%o_;KL*AiSV^+Pf_{5g<*o*)Y&l5c_r-J=K-l7{DIDQ=Nu?^Hr>%E-c%qr0t>~ z@-UkzXYt8l!6@%mE0Wu+>vMx2d2_VkXctamwNxGTKi{J;92ErvL)j1{CFUq8HtRTWlUtIYo>WMppl3qo4IcF!m#l@tz#PKa|0(VD(DE_)Ci zE9cC|nA7eo{+Z3eE*X(*8n(iTh|b-91g@wE7#G7kEBs>3MsUmQ^Zxnj3rZxNQ*o&k zM>8erBQhkU&9%*HpuKZ%2NNX(ALdq7qheIx?T|A9DbLv2x!iRQ0--UYIt~-bZ zmV#sK1W_j12snuQcju*8kds)Bu1}s?ZivqzSYgqheOS z#^b~DB5z&}dZvCPXlMYIwRRFrx@90LaoVW$tQFjKF(<>%H*&!xgZxO?m~XcSM&d&p zSRd5cqx{&ZUN`Q44SkFcws%7ezk+zt!OUcP#FTtG*3Rq<@q*pCM!^gVh8?pJTf=IV zU2q*;u5;qQHmsd(iO2CdhVcDr$DXXq9JRN2vZ4>6DGw-HZ$C%S1L{EpkpJKiA&k%O zC^+8L(E0A1g!&!InUquUr7DN1hv3Rjw?_e@FFJEuZgMz<=6Ht@TAL{A?#RcM4C|#g z3Ix3SK{W>-+qsW%(I#v99X%k=J9P|RrnuIb4TzG647_!3J)>kbK(5usvXmowXC-z&@xRe#W%ipAEIzQ6a3;D}?c{M9kQn~|{+l>#b z)z4QD9xLzQA8&>#&U;Y3zuH|0lDT6IVS0ffBM%EynaG}gN!TSHk+YrkT3A<_#ipH1SQilo&~%t+Ut`k& z*giocA~qrXK1nuyWis855nhqVp5DPGG)pK+cLc!sG*E)Dja^zqgU5grt9WXXoxYRX7qCZx*XvUI?=s^Ah0O z^1}CgN0dQN>uNAx(d0(kt+&&L{89BK_^vPf7QWAVG83wm_Y?)25cWupHaxu043bAi z&}IVk#ihl|esD=@kSw`rY!j)=yb07B$sI|YVQqOyNg1w4^Y2;N z0ww0h;WmT`&HG&6`k*!U)0egcP0z&H+aAitfRWof9CS_4@OeBA<9&EpOq1(d5(*!I z2xqm^Z?jjG5EKRiH;-qw92L97xw71mTF6GIbUwTG?-l9QjRtC4%qq^H6)SDqjh3P3 zsuP0rmWVbqMb3)$D!-&sWs?x-CSTJ%Z+IFC^3rmk2CP0##*!k$b+0F!Gd$zAilca} z!6UfBwwJk1VQ5WD$^bB$T*GJ2C`OAaY^0S)Q7J<-hfSZrspGfjR=dG*r$!tVpK!@p zliqNXjHz|=L_BC$_)m8an92JRuswWgrx07LPeI*KC2ASYm0T1eC4zq-5byueV0OMO zNXv=)9-$#vQxQK@h6IV-t{@VX_*qkrvSopuMmEwo(~p12)w+9!A(wK+?6gwMFJA~l z>@ixML{7H2On({E9w}sr_>{X5J+u{L3fh8! zld<)VT*gS;NCAh|hPh(cCuplmy|+d1RADj$q9Kf@Sh9Y5biEreMS*j>X#sO0OoSWu zG3|{#7*^V)dnGV{0Ggj;_uJ;bqN_X3h;xLvC1dnYGLxadiBEwyY-;ocV1c47LI04n zuNp70aKJLV*PYI&&x*=jMwA~JZ3$I}wUKAjWkiww$g)A+LvGUl) zlER?S`TJhH_JVTqbk5XqI7+CQz#UF`Zn3SN4A>$UqB~vri@O!ixM{w3dPvD#K3kyj z{k*~_6(XoG`o?C_C)4UVBRv86#ZJ|;HYB_iWA3-GR zam6VbGVK;_{I+|qq{z}zSen&rMoO${%mxoO>}nKeM3&`u1MOY=xp%Q(X)p`DBcfqi zdS2Z2=sWH`>jk%p9%o;o{CF8pno(=D%0Lo4L4Fnl;X|2Lkg(Kf*U=XNySUe5^af4+7UNi(!lUULMg;rEav? z>+0KslnBm_laF>TLgK|bSLh~bvLd--GvS;358$L9E|haeigZB43Sn(OP+ola4d;;< za_aEI`Vi5gxuLHQ2rAAsp)1eh>Btm-j3mF|7$v$@{g;pfpV_nSMWhrM*}m%Ym^rhl zQj-)hk;8XO4V!_hA7MzY+)0QK)AOl;yw@KSyiD2_2o%uT*I!UH`y|3yE|cG0cN^7v zXbTPgv{fkc@os)OnKU0mL&TgamrE9{XSCDQ;IZ>ajoM`o>KMIzz8&J{r+s+$Wfah$ z+r(blSO%?KHowrtY`1;)RKBZ5Z1p@URGzL=&x&IrSoO&LLP!nffzKMS*lBRH%db{X zPh)f|wO9&L-l8fb3bQbV#DEp<&y$p}ukt^t+qqS@AC6ghAo^9NhrF7K+NLEe=67lK z*~`CodFF>589R1E%=LO$7nm2*HhYj%jI9};s(}sk22xCyOWzTW>l)vOXLSwx$7vok zQmGQubf&TGXip9#Txuoo?qG@+KiMuap;U$r>Dzi1K8t-WHdx%}CdTD-+}_Baq2{5& z(nJ;Rg`!Q9^7P@E)!6?U@+(3hfnSaoL22S!a6NG+PY+uVg-{gbmvw-c$ig5JOxOFB z2@f&x!MN+PQm3JMl4@O=OgP1$B%WmQ;i zbN$Tr^h{AroyegR{UmMNeVofYyv7&MDvG!jarlRrJY5&*C36-{NGZ_Poi+JZ@#Zh0 zcN+cmwP^e$>ZSH+hUP#wZE|AneP}ks4}AgdmP`jh{DxAhdTPZEM5u85F->k?58!?P zX^&V_vy@%u-&Q^-V3hMU!BPah7HcY|2z1X=*MD#EW&fOsA%xWDmj$}w!f)&T+jaDtXjas zL_o5ke<-pycwVR6;s{TM13$2upy%Oj_<=_fuUL!*BKF=H%$;~Q^j%#-#?h~VZ z4|xK2h|qPOch5GpPZQ)So`Ayie|d-dt*9uwpAYd}%I|p5+U~wTOX1od5ij}T#$d78 zsJmXfehP~yWyKF}sB$q-8_2YD=+;w8!xsDgPMsPHo~Ol2av;;=7+JdQ+xPgu$UM0m z(Og_`I|S8aJHeBWY3RiJJrv z%J4lS(y1JuToGa_hsvrMB>Jm%9^*zXZ29Nl9*Wz)#7Zoo^Q+Nf)td~eH_GkLi<>NmSqJA37Hb~(!nrcc8p5P=Of4Q{TBWbv%WYrO!Vr&Kp~0`k60pn zQIdea6~buOD&UFIGMV!}bTSg*O#QqEJP#=;N;2I1f{KcdEaLj9c?;4fVkjQVvY7Fi zx@~EQZ2F;*e6GUTe!$S5Q|@s)0;;gPZOMKb*h>PE7n^GeiQ#K7Zrlhcc^TW=Yed%a; zB2z=Shxr^4Dr9qLo5GHR2VD*x5PVteclVDi&Tn-2kx;J9!(zI}Fw2l14bLAZXJNtt zp`)`?f%akc0g<=yowDatieQNmGhc^Qze58lw|AyRK^SSL_fjd>NqH~{W zSz4E`){XtC9gUNay7?G6iRIIPw^FrItT5Nkkv%n388_|tT z9PDC!$`&jI^EBrlQo5WP1`Qwigv4%1088)+4Ja(|r_bQQq*l3@AESUf7R(F!ft^zk zYjMx?uxKq|PwteU1ifyH_G6C{&SAe=2E+1LuMIlVvZR=R5UB$*5fB3)s^7&0I}>#{ z*O==}XSwB>SzL&_Tbaqi4i>b_WfbtpFiCR;FXhOhN;!8|0-1Z%-ju1=xkQo5G93wX zcrd*Y{0T+rg&GJu=2>re5-jcxWelUExurq&JO?xInD=>xe@ z^9z$o5=aiIO{^Nv<3@~%uYWz)b|+IZI*63zAnzX0M6Gk?pYLMT9*!|oQ_$?z6CJd# zMcv;Rf2WNgA&^`C6r6Zl#9JEP9fr{++l6O2i{ab$^}67S&mr3Zil^g(g@1424G`ST zETs4^6C2o-ipna=usq12HyJ5&JSJ#J!6xlx!{;|D$=-nARS^Hx?5{iEv#r+c6q4nv zZNPE8cRk%u&$ka#@ULdw)&9RO8W|qgFK+4{EgW$AjnU`r@&^;Jof6KlhP=So^baK| zuluM>_umK+Fug5VXtPjmk?B)K6+@M9iLBL~bqBn0D;Vj;9G~*EJH)!2Ir8m^0PpVy zdX%491}PAV0+Eryhhyi@Fil@QDzRo{254vJMcD3tk+jV&O!3gMW+mFI;X+bAlD~5~ zuho^Fj+cIL1Ue60Ar+wnk2%IBk*sJ}eM$XUWZ=iZM{!Cp-^s^`cauRG?!h?$o1dr% zdRpJx(*SclY z90x@m6dPEZ!oaxNW^aH0C`Z>H5mfbL!{Hf1)xt>*qo6xFXK4vxX=ypfaTu((rPO1( zeT8686WWMoF!rvXbV!O|-x5w4tVj_v4)? zab3DZVN44CcO$DCF*m(2$f+HM(B;~v)7I@0mnIHMdAc7wsai8>LS}}UiabZ_TgNen z=VxBe2=>p%bCvcfv3lHd-1Q&;(DMW7P~o$RMoW8D9AiEAoKcE8Qbud?l6UZB&sd>G zo`s=e;cowzyRJJC^Oh6N?clAY%dh8r!x%`Z=%J3>?E0f~$8Im)yy_p5Vy^Iv$kY@J z@Vu6S*oX-|NATv-cp?~op8H8RT|Z`?a)K`*wXY1+3}YPc7Cdv5doyTzZ%Sd4qhB<* z!bIyfm0UHDt4%M)sJm zYr)Uj{xM!z!Dnl7M_ZL5$!yV0o#p^T}A18M}TMXV!FO~dA3sD+;ihSLR%=DsQeF~)N~ zXops8<=M~2 zW?Uc%qe9`|19Y!RERo}fx8m|SvpVpG0}10gJ+`OYZISWa&q9m~hH`CZtMKn`uu)F! zBEGKYh_~JUS^0p|?Hc^~TH$fi%xO_1zGQSPI~?H-&1goM;%$83869hM8I6I@bEs|o z`C_MsqayVQ$EWcT?{z7c<54$mXwG}g>GYYWak-Q9m-TUroO`ncAw2R0G2OhrDf^Ud zY^ZNFML|o|fLHb_f!GpJu6HwI4Y6(HBm$~v{P%5^sa)+)lC5GH11+9>rkEH7V?p_n zY6pE|NC^fffV;o1nWsn>DU*jC_#mh%)gWbSs(;aI#e3OXV6vI*Zq4k2-ahLAIHapjmkPyyeZ=aW@g< zFvN5*)VFnm6ouhtCg>(;6~h$Rp&2VtzN>(e!0rx-FJQd@L=5ye;69m@M|he2sKob9Pq;_Y8xF`@$^^xpi{ zyM!X{_+RW91g6I;9H|2CAK{~KX66xj8QM0NQJbD5wIGShcy}rStD4+HXvG}JB`4`4FuL*Gsd;vaV!4_8yomdgfu+=Bfy2(}!Hi^Nm zI=2w#(41&@U0t*9RV7#eu66wo(Xm()K3}VRNbKFnp+37WlXb2D21I;Uy(5=)uAtxK zL#PwV69*?67J|%P1j`*u_*vzKo9iSrI#ceneXq!d3mEg?2lwN9@W@H6yyj{7*r_FEWi*FY=+&5WRT zZ?5?2?en*fu_SkofmlZl4?ZiHTWK`&SyZ@aj;JJwi!E8H3@6%@*(|aT+5&_M>!8va zvE%wT+Xe^6u+{9^%STxyQQ_aP!!ELX*GqHO<}A)wTZVO$C7+$H;zQ&Yq$=*Fma`FM z6zO$AOi>9rSxD6{uG6`jP{bV

1Oz>MQWP?&0H+?Fl0xykkEo7Ou!4dLH9ZMW#=J z9jc+XnekE}kG|velbUG(6z?tJQgY~J%CubPzR4-~XTp$?{#)&!+-q&dD?82s3FKeN}t9Py!E!&|{H;>*NlE&CWK z=gHn@;(o8^Z&mgg8@A!gUj(yv_X?!wwbL&6pfSDT8{LDCGmkBZ!|vgI7eXPy6YFM>a2rBN%TEBJ#qtW+JDXL zg}*b~59WKSj`xb%j9TVc;l3vC#EbHcZGpxKt&lqS@5JWK$q&6yKIU~rxR9X{O>_CK zmv|R}^lxO%=4-z%No>$jDJwwuY`w_oS~cMN7igF`?YzW*L!^^kJ|%645Uq0P>413v zEidvYfPj`sVd%pp-sv~Ytn2C7BliB00>k^cwgL=oRRyLgCX-_Y_^u}ptEw`jAjvabx_Qdaty&NgaU%XzD7cnA&A zSWS>A^T6iW zcENuQ$X2(RY`qZtl5Wb?O2JkwO?!qX5N5KdL^oX=pYJaioiuaCYK)v;pUB=Xd!y%@ zb_-x?M}wbm7PdRQM{Olg(K21@Fx&OEH~ElsugnTVc#yH}r91#qQaI6oY>bK7$iX8{ zEAFlXX|U}^?N0bQoS>eiF`Aj;B|_-@xk}80hl3*JGu|?1j8A_KOBmtt&B2U~#@^{Z zH4VIB;)PsVQTx&_xFkk&J9%cVicl48%~JbowkqlMkml}5tKlMtLRD0JAtBlPRXHz6 zvT{j%(6q8z|H}*K)IbD|qO`KjB!_o=iS)mZZ`{8{DCGE7ws0y`Zi(h-Be3R#iMpKK zxB(+wAJ0Hj!iH^?E3`W^@#4HA^u4|`Z9HYh^PH9AYyFWOZX{udb)EiNUZaT{H*tcR z*foZ!6R`2{5j`*EPl5eNcXgej0Ve5FPMAbJu9mBy^lpm0O6%eGnno+MSsL&KwJJ5J zo|{`cRydpmjH$w@^|`F&*yL5=B1efZ&lf0y&tCE~z@N8Zy10_%t((LQlz^%1y=on2 zspvzFn?azyK%wZn16}UypSS)8&Yx1L4-K7+f1FOSgw|b0TmH4Xt5smSb*WPG&GtFDp)~2e)aPAsnmM&)aV~CWbw8_Y1%AB#*uBaO%#UrVxN zv`a&_W6jP%OY2J+Hx7o^_Xqse>cq7LC7aH2>LJDq)PpSGtRN5cQUCYJRND_UXUt30 z0_T7`N-Z>!peB+wqm?K_%(UcqyeNJ(gW{$Belj#du>Q~V%fH=rq+l#d6#G}t>r{5E zayzy7w<}C8{t2cM6W@v8_07)*CfsnAy?su8BY3H1uJCCz=(WZ+=qUQGxX>UpV=E>( z?x#}6@&Q_1LncrFJF3elA+*lmCx9#~%=MtXXg<7Zh1Susz52xNC2i1MT=jIByCFS~ z7t!|%n!mi6KDi8|r6w6v0_Y??ve5=(iF6+lmZ6K}nOwC*Ome376~w73`lYO=B>mY2 zzGNG}xg10Fc1|1Ls?WCGj6eUJ9o3_UfE8+OE=g5t|3RbF7%(8aE?Auax{x-A{uteF zxtT*AxDe(w@Tcwv*_d)5{Yt^^q$r-;-dP9*$qlm&7G2 z0;Mp{QsN84)4081Zqf*KOGpY4F`bNRF>o(7h&Z$9=>3Z#KEtEYD{rnEIxIzYl>K?t=0;hy&TGhu}b z8e{(&`*~|~5c^47;p)w=Bar0D1jotbyBkR*g*5=JMix6vwoqVPM+d*CG(%{9Nm=yY zZSYD`7?afu-I=c&UFJ|*)Q*iJ@nKu)s_KBp3yV}{oto*P)@{uZer%Ty13QaxUdH5? zkR1>lZV^`C{7I{eS@-fK5r3_YMxK&>=w{=S8RC=quvyD~6PEuHk?F5_l}}c!7?2Cz z2gM3fh_r{q$n_f6>~L#Kd&{}cNq`(B%$$~!`0VIir)UYY#iMtOm>9*;^4;NU$XtC1dfokjGoN(ap}*U?+rK9Nh1b^c6qQ^Vw(-lPo}uH+NjIBX*IJ*Gj;T zg1_&_F9}lfX$sM0(zv^~FHQEv>wFQU_8CUqgm`%ZmgIEBHQ&I&LIFD5*glfmvP(7C z%QghiOGy&Typ{Lqw+Ni_70+5ahDv2__H%Xm)-S0L@^h}m875AtA|W(7DSvkoo#w{w zt^{JKxtEvM6iRN1jdTYH(ud22z){rVCd1zHhs$vK?Wnyi&dCRBog}{>Q3tbyey-&i zNJ36V=0})%%j;gKdXXCTW^ugLJ!UH*IH8zcTxR6ExJ6^>e7 zo(+y59DwCQ4^`g1|H6{{CDNC(9*_LbOI(h@XhpdA7S@ptgBGcs+aEsQq-t+3$`kR)+Zaxpd`;uF zbl64Vf0=Bg@@J z6!4OloXi@-mRtb*jF>^v_@{{XWj4OJH!u|87TeqLgvJLQFTGH@7kt)XWVkmR;sU{p z3vQ(?4AzE*Otb&mf{CE>Y2#$LFLP`h;jA1cm$JupKlk6Rz`HrlVuU>w;Zruyxz2vq z;@*2|Upz|I`+M9kLKWQHy~rl-L!u$#K-jTLVq|HF z`nU78%-2mtk0imwu0WXNIUMu5Ybd7{edF|#pXU8qTdeNJDOtGXZq5xobwb+B4=YDu|g z4)ZUZ-IC;HYO;|$2hry&3=BhFeQi~uVWrp*kPL!1QB4!(rFYAx9CgP@7jwamu$!jd zR`oqCp7SSvA?6h6(x@Bt)!TyFmwk(^+tQrPoug=!!ag-@tj%6%Lrtn*UCQnyrEsujqi`g4@e4O^{susM!4peUAy8x!c zm6;}b^)gjdPy;_hoO%*iM!hO_psYq;eN)dXeIvY6*R!wwTAWrLbsaDVK`0<3^S^EM zc?eR_R<$KkkRH0b))IwrQj6mslWw~CeFG@~I-va%GJlYuLd?ZU6_L4y2*{wZRgosj z$GbBFG-v|J^b47zh7{^$KKYo+Aa!4aSc!-C+|Mt}4d82rD$34S*d_T-1BE{yLJgkZ zJufUdmpD#g0rg_%TkbUn{-RZm^=q%TrhorLEQM(7mDO&<0l8J>xM+mt#!fumxVp!C zJ-@^dv`D(XcJv;hM%vbA7y26S4v(ao+Qyp}2lhFJd-ixtc(L2Bz!!80>0JKyg3R=w z{59E50BCR&a$&^y0@3p4mK;I4fcl!eD<_r(@dLDQpkxu#pL~?)VAQ_bEN06w^M0X9 zGm!?~vghLW+~xvgxT4`*i7K}EjjZAsil((LDMX}2G#+KiHpW?Bux~DXq^e?*{N9t%6 zV@q^)tmWC7O8k!z_&0$Mf)0fw5JId2B-EAuxeZ16=>PwC3G?gn)L(3k__ z{D`qb6!e5nR{9V#_cwG-?dJM1Ht0VX(Yq*yYAL3KH}-8*;%3Gph5707gnar#o?c*C zSu+h9gq+y;e09(EDSySXIwKsh%M%NjBM=Q? zvm-u-&F)ukI4HyA=g*(K)rD+6@1-%@zI~2+3M+efR=+^}+Lg_%Kad*!NZJ>u>(=ut zNebiFp6eIie@)9-Fc*wjOG^N68_~qKV&-li|IwaRF}bP99d%-^{{olF1(zy9edgWO zLXLN&SK9U>bv@4j+pQ+`@Vgd*Ve!RO{J~oZn#%J~V`DR}3-O4h*Xn+|;M$@sWgP>h zT4E$fFnCz*)7|%pO*CbC(1qzGZpfSKl&n@w?&52D5+f7PP<}m zyCQ%(&d5LRrkN1kP$oUx3pzXsbk9C#rc?}-HC?52pzRd(?8k9^%$eKkS_ktYfRopF z0ptgllLr;15hFrb5~-v6#@tV{X81>LgOe%2qyD##h{)&tRrB>M0m59*`<;*XJBgF$ z(^7BIcdw=)J+2;`iU;M)G&|;wvu50x21yX#f}k;~yNv^~F4<++nzLd|E1kcC$ZLE* zWLlnk`~dJS`d^7-@oZ>I)g%4U~zS(v$k*-XV;s!{{6LBP$xb$*uW{JW$nr$D-flSqxAI1z3AO-lgYoc+@UCfWyDt{k=eItFyi2#!6CwXR_ zg}HHm>~)CegE^D>>Fr0s%Zp@eycwakq~Y4(10dfxRyr^%QH5k>kwR?n82_1ZNs>Xw z$$;NW9R6U)$9%rI@Z;%Bz%QRw>uhs&B!yMoPX8cR>JXX?t}QEb zz2_C`L5L2^$X!Q7#y?7%LiBn^`&(wHcEDnafW7z&AQ#e7j)wOf(lUl(Bs63)j90hc zX9^@4o{Si}wbnO&U1jXI0E*%zm#Iu6Mnn$68Y&TM13ze7?VG;N6fU^zc!q?f1TfLE zVgSk3LX)=kk?~A+Cpynjl%H+hs1bo=E8lS1C$`oqg=%!AEiZoPpCi3zdI(?0cEvOc)^d<1|8)_t)me*$cJaBmsAF%E!889nwq-XKUz_%mhf6A2;oQ zL=)M@!|HyFM-nQ8y?%;4YX;IFAJpUH_-;OW#e+XlGhKQ(L#kbYe=*RiB!T4iz|4f~ z>)NO_I}#dr6os~KpJks^f&=41R}7a?D!Qv7Ph5!4n;nma`~frx4nWv>rLWi7zTaiJ zZ}S)4N7bY|8i;2hDV3TQ?!3>O8Jt>u2VpS+9{JinBK#jFzR$X4s$6-B1Ev+)uuqAi zWU9%*`QP}x_?G+DM%3LO@9MF=c=?Q8N|%R!kBg@kvo%!+g@&h%GFspP{%H3 zs~Sj8Bn>IdI&+kILGf5E5z;?6YP#XqBEIhK+aSY=0NFUF*zhCto7Ves)x81a2r6Gm z7r;hzjeTVH#2cGVMRQP*T#)7YJmoynNR$Qt0ZgkD+d9=Qhe}iEmT}DV|1* zOh}{=`urF8+z{Ux%-8#4+v%{IG|9DfD|Ps)$-SD$Mr={9K^t2z$%wQhw223Xe%i0#p-td|dQH3#YN?UChEcoPj*YO(!5DM1HB3XofZd ze>5o}?+m{Op9&kkz{g9_*L*#=_6m^{G^`EWY>lP>xlaw@|H8VFZ$1u=D@J5gV{i=& zeWQ(eyF$5dZBD?)g0ZB?A`9e?fkm*h9p}*kT|=Uh@6NLNSH7-J&(r{X?#QCn zNR|p#4<4MJuJX=XTV`I>7Z?b_(84OGOYO-}NM}f5L$Lbop6^<`G#99jIRnyHkYgXm zyUR*DLo)6yr|d5biB%uw1(1q0&_b%dzi(w^KMfJH^t$bT8=eMz3Yo2e;lrD7D0~U-b#Mumt?&bv$uPc|xOpUY>8P zLCX^^VGfSBL%?i&c_GK}xU1*GBjt+|D>t4tO$tkw0iAq}2WD6tgu;m( zVp_fGb$z-7Be}|Fyl}vBu+%{J7x&C}sw|UjrH$KnE$#4Nlgzhmzdcy{3$L0se(ky- zr(g0%w;tU#356{7Bs6^D>L(*GR}piQRxrkH+-bC^xWNkI>_q3qEDe{I(t+0PbWpzC zeb#CWW>K$mZ2xv#Xz1ZS^NeG3*S6gzruGU?3i=-EveLJ#@n+Gr{<@gH+$#O^v;ew1 zdLYGNX$O7TP00kJSL>yXk75fs5B```qiEs?UkK}-%!%b>+r6t=jZa>HBp&Cv2!8Gd{8 zwHtwQi34;nEf)BeE8cHvN9H5NX zK(?Z46^?rV8bq}BiR)+jtlG6}{(WgD-5Q^MZdp>= zlQ?mPv&s17BMLJaAoI+BT1yK3MA9F9|0RRj@fh)%l!dh5iBLpp65p`WT|*uRB=|Bq znoa6~O1BpfYEbza3Ryz2ugTji?rW@G0@7IMY8p&48*Kp}cu@_b5eIl~E^oBvJ+dz@ zLC~8%ImCXX1xua~&p~vR4s~s%#Eu#laYKB9j9$M~r&CWbQew3R;GkBEm0>Ff3t@;S zIG4|jg>#Y&(SKFaigHCtqoS#T15(Y*@;SokEpX#9=y(pcVKrl5e~6mO^=)yxLW1cH z5xFTKC$4>kVOa9$z2lnzkdte1dqAxyEtne73B)uCL?-0w&g8zVqoy0LaMNYp+=f;= zVtiDKBZ(L{^axW)iR32Jd#!h&j)6*IZyZ)~Iv}yjpvnB?Lt?!B=@`&2v$Q{li^BGb zO&0itmmIy_8|Cd}k@#egaj=!{?pF&uBo)5tFsEvFN!-R$1|=q=gI|q54Bar7P{8=yaM@{ayY~p9+Lm zJ^vcM=9d*~8pB1<{+<+x8DctEYI@)0(ZXPF?Z8K!XV~jf%_#? zv0{F~!zz~#EoB==DM9kT;q+LA>@%|k&Ti8f4PY*02bHq&IJ{k|jgookgGSbYxG_%( ztjqMI&tm5sR552OP&a}MCkg850XwFd&jGnkj_KdzWQS;_&wF>W?OBXotEF)UGiYIl zzoE3)XTkS*=+~Mw^W~efnju+JNx*G4DUpBZD>GnJxKN|1mZz`ws_@kk@Qs*KAqh>q zn`dIYFFGnY4x)Jfbtpi%SYy@r45#2;4+XN3zAj*2DDj65`uIB7>L-#}KY zYbfmkrn~zAK0l_00-?0yrYz?uUkO-#V4gc~C*S)V@vg+lipY*)_21|G*V@l~a7H}h zV(b3lpN+`GrT^Abc_oTa!1GAI6rB)$S$g?l)3YYPMTz~W9%}8b_VQ`WC zlgXIG!$x~56qj#WR+{*2{7H(C$?x%2>p zCjfA8dIJxA2(^}p47h=_WaH`V-5;qQh!CvcI(T|}dut$BfzRiC=vqy71OYEMn&Og@ zWviMb|GIE}ICF=b_!#QbSNlG1oD69{Xf^-Mg|McYnRG_dajOebZG9-M%MCu5t7EH( zdq-Wgm_mCstsoE1gLTbdGv||kXYEv*6_gw+%V)Oqi_F`Xi1(;rfH*uOspu^1p82Wf+hm0^~}LmMcaXlH7!_N``wOp9~2%D!OiOGFy_nje|CfSN!eLEW#+W za6d{@a*<_QN|}y@K#ZZA-eJzPFU;+}{X?l3uY17z?AVM$#ziaU?NhHe3On3VK@7)J z9g_W(z(YUw2U8pMPy1PMEVr6_#dMo&m)2*fFID;ZZU$;HSWr-J*D~TFY9a4dLxyTi z7l5WbgLifzaaa|Yl;-NH0{@|S2sTZIil}j)wzY2k{;FT2&yB*60X90>#XeM3IH6)& zA~C%|9m^U^8rZ4*$@LN++Ou9TvwK>X@9=(q?}<6J=H2vSRPhOp>LTjv3}%KvUxGpC zbt6rClPw&-63VxvLg+z9T!h+7`@h#%+kNv`DC0L9J%mpqJImvsmY=DFqiwDBC~i7U z13oFtNm7LkW$XRnU$Tk*#qKzKsUqhq`;!^$uJE^qH-ww2W&`IoVBy({iQ)BvZ-I6a zS5&#w3RJb4;c*j2o#8r@={PG*$k;zKGWTvHXb z(QD%kf0BN!toJF{O}+W7YBPpL9(^?hV>^LRnpUQhbqn~nExI34@kS#noNI`?@-@Xl#S>Huu z5IPF@9zG=pp4PC$h6z$thA5 z&3c9P$@2NhGngy#GF2Oj=Jv!WVdR7RO|eq48TYXU$Y|L2@$ksP&B5`TIaM%@MM&H8 zo%p`s6=n%*GPQ$T5{ah5;ZKAF9;O5mU*z>0>#$dip@j4+;?h7~W98x|Eidux>Py&R zyig^~Q*T7oK{PRRHmqwdj)9u@eN&zDK(&~l(dADGRLDI&9P4?W>)8j>t$;98k{Dy$ zL94mk>|VsFm4F>{7Fth6P25DUMtgZbi@*tTl2iu4uz2|CcN8_eg+TyY%n(^)nDMU2DDWRCxd$z4K*vpVhA0*>-cI zVSb}xDQ3+H7|m*~;xpxMO$FQOOETw;OZ$6J3+6duF(@uHJHYdIolrE`(+?9H8?IVx zY`Rumj1bxp-?`iH+0l8bx`Q&P#X$H1_}3^Ef($f*5QqC~y;pO~9YYApK_(|lE_O>{ z$X{#Cvkh_DdLpg_!bEuOYhS-mUykxuzhHwrC&YbMx3+E40*uj4N$N$*(fTej96yjE zWDgy9RMu|&M2|A8*Y|+ZRv{HvFV=G@9jyOhiW6ee$~<)ylEZi zjE&{rRzmM?skUM&yY4bnx9Cc-)TOm^ri6X5XaAw!UvW0_{&AmD36l^ z-p0xm&qv*?R?=+0W}d}+hWyFkIRcg3a}b(;4IvOxzpw`G4dqSQI>z~Ha!i^{v6EMK zVLBoF3FghqI{c`|u(*%OXrJ@GfHD*Fob#`mqpWxdVt1j+3lyeHRB?I_TFGOebKa!J z(<1z-@2@{ouVrmh7&qhGCJ?~nTWX?C17d}_&Cx|F?Me!dCuwR= zVmbC$#1LFRGWEw=<+;)-(129z`)Gd*_2iCGXSQs8ld%{~Z8%J?Y1G=is^)RX-%(v` zldign$KUO$?nZ}ed#A-4nO-<^ z!~}WSkt~u>`v1xI@}hm6p%3jy$J~@#-zPT{fEDl)Bt^A@^MmkJ~oJ% zzf|;bDKlOND9B8QbUW)~6f)!Xm{KmK0;vF)=8g>;!9jXQq^?uHzO8)HTe~E=cJncs ztfU@phzv{{A{Zsh_4wD3pM{BW!wg4dKa?-iDT&`@MZ&o9s`@yvxPQuUT$>RYmcuzT z7dwF%jeUpSLxz{Nd9kk_5`p{$8e)VGc9`4~Zh>z!ycL@pZ4-$z&J0q*B_75GvSV|7P4jxV zZr9}y>S!@Rp+tZvjHA(sIM%@tdT&#`!R5d`%<0zUTI~IE{oO_O56lf;bE@Ar=^Ixv zSI(PD0&sH9sNJi&Db8-ifEBSa3phCa8Y#Tsu!CBs9E?e$kg&+vVTglX*TS`gCA;k^ zI+}xs=xea^)ePou(m8lCKWV^*{aCMmd8mnvhBSOK-B8cGL^q>%;9q@#GqiJ!^O zj|EYz?k<02*P#@Is|8`C`A5 z2=xMmUa?;)6jQpo6vm;1`A^T26^vPpd8!cT;^-1LvzHaGtsP^&Ye;=37ciw`ik^5< zV76OCgOiAko*vmYebN_VXCv1CKxQ8kltNeiKA@G9=0%j@#|N_b+*t%;j(+SD-s_<4 z8^lBH<1Jnehj|=6Jvp!%CDyH{Q21B?ORtf9c3o;to}}af*DoPnH~ipP%+Z@d!MCF= zT$g=Xhe1hee?9Y3BH^fNJ-${G48f-cQo&PZ-2LDm*kmPy(9VM4)4M=8kKz$Q+$2unT*-*QXP0ue-9cn+Z_lU!^{4M;*^Y&YTvq&IeJmBS(` zez+Zz52xov^eu|(4-c%Y{@aqm@?I-5h1=1f@VB3kf&_ImR-nHwI@9Z&4t}KLBYJma zV6JivXQ>hRmCf}4FZ{l-L!By%InfzY4IloMq#P{0qgw_B&<*L^w zGaoJBy@aD+D`qD%+X>-&3{`#H>bjK-%0zH_a3_J3B=Er&yv#P!qQi!K4fan2>ELG3 zH*2tS-&xxrJKeaF8VZb_r?Fekt<}sIJd&r|fo?&`0~R0tJ*B!J<86qoE+s1*UXym7 zW_i)ntabcpaCp8_j-u6ckw92rE0QL}c19dQe{g0~wBl`6Ey9xQcN1UC)cIvKddwhM zoZR%t23v#G66VVjiuhSvFth2URs*}8JYa+2pOv)Lc?w~JGKIwLhP|cd$@u$gX{Bz5 zcRCD@CIQnGGZYz+>YdIOcu`pYNR=1qPkUZ-r)GGD8%truLXVel{oVA4XTh7y^JbK}l2_=7L;Z2Y0-m4E7uG$DMgy66?@KE`e zKb*}*oDK-Jx2(Fc1|&s};Gt%mPndt%+u|S5#w~a9Ej5FqzOx-~BtqOTy}YG5(t3nr z$n2w_Epqy1RzB!M@>_CWFrNL|*aac7MJ82)&iJ>lO6_jJX=w!V^72z9wa_}v5NTJv zM&F_ke5-7E`xw}bdFhB~1ngFku-+4>djRd+oqK}f%>9slgmbr5-KaUH#jkl;O%rzKRtl|Jtn z(&aB{Dt^|5&t^hlA&;@-loT6;hse_my$TUK=5^78y?3{F;QbK2FE2v0Z2>6)HfKLQ zH#yWPPYh0-EWImWK*+t@&tje(L`z&sVZ@~_yM(|)8YBQ=yYZ!>>eYwT;3-$I(VqiT zW9210!-)@|moL0SvOf`keR5L+R@8bQcXNPt0verJpl)~J2+Lo00oPna@RmXsD!G@V z{o2dU2P-|&EnTtUh2~25&0K>!IKCLK;-`BWgm1+V7mvoxzeNrmB-pG5N>8u}3*2QG z@o=@j{WJis-Ci(xHk}b*M74;b_YRLJ&pw_k5xU&{6gN`Ggn$k=|cVYCf`Uk z#+tW=2bR6ayUaIKr~`yr-r15UZf^ombMZ{%?jFj02)HokEz;xJ`-OpE$V-H1sZl>w<{Tlcb}}+ns4i5b}$A?WEE}ySc0U-gl z`5n&P7=WA^8rOL_wvF^9ansWU{dmC5-mc~%gzed!CqY(o9C8CteYMRQtwqZT3e1!b zsF1yW1eXYxMRzWb6#}H?-%{JTE`J(&CuhJbSt2a(r7RmLL!|+^6miKw|3&>P&ZJ8+ zpZqEpfps*sIzsBv+Xd!y_}U&woJ~Vw&`7$wt{y4IG1fk=xYCSIM1cv>MvD+_y6zwXUAiC@mU)n9frSXY>T^!2`+=FMhn4=apaLU-n4xv}?`4YgFp;^CQbi~j~f4BxnYAH*n8Mze0uLNv{+h4TKxF$9~h@^T}dFw#z7v7wGZ zG%*lDs56nP*wNJtr*c9Tie_FXi4$`7)sH9|Q4bgD%wv)blJ8$wo#rY1D<`Ek{Vs4O z@M^Oh|1uay&vrF`aGwOqH~&fXW|n?@f>4vnPM&wGVIi(A+@_|Hf>?IWZ!!3pH17;+4!OOMOQcfY1sT+NtLa;64vK~6Sk>uy2*tKuz4%x(o^DZ zi~+}Alg+YhNJj>}g6MX(ZzFH;pfoJ&VNJ9FLZ`fbev?*OK=?p3oA!Z2>{~=N7 zSV$(&e>Z&iAMD0|8*6;{|N6!+5FRe6pkD+8W|4+PgJkVNl5GCEFRF_<7C;P!5~8o& zoS~TsviIh9@8p2Oud^t5#M&FWbu>|B_M>AmQZ{8?m6b;vv}A|wua9~-NlcEIE^M>w zi?+Uy4~Ar}{Q3${@ykP0MQ#4(4*~SMR>aOaEC9n&U#5+LkLm$)ndbi@x%ogiSgt;PZl94XX@j z-~Jn!EG2*q%+XYsc`Z!O`Ggqg{pRmiRsc(axw#%o#4dbi45&4U#`-u@r^3G%nB_f- zox@dbiRfw&UnMYT)O=?;z^O9nG;55e<9A8g=I5%+ZF-bWI}w<)6iJT)2D0>Vfma*j z#5AI&s*W0a;cW2=&vrJJiXyGn>ZouXc*0zZS217o6!@mxNJ|y2PLgcAL%~fqa1CXe z(~U2vwExXNLi;~rsodsKMCwtosn$lT#VHiuPJqg@c*`*KJESe`gfkcgP6%9*5(YKAGO` z$w@N_KD^ug1aCAiZQ8(M7r93=v|;jdCfr>(X%|>_@@dePPmqfM-glDv@ND##$5i%b zVpm~=)R^^{A)I^R^riQ)K}+^VF$>})%Sb~+k^C^!B>LtD>)kPu6 z65-w>(lmja)3-K->-dQC$!PhP!GWL~wA~(hu<_kreQ)J`4cfuyE5p>pIMe9yTsEr- zBBFy)1TTg8=U&5*-e)y0GJQ1FPRbfBn#^{NH#OiMq&m1C zXMBZxnwk6BvYHM|r{LF5+QN=`O%XM+-^!X2pJTl2a{l1#t)GZi;C@x+vr1X*b*uMa z&Um#Ah4ofA36T^&;e;`3CN}<4Mf1;(@X5F-gOp_w)`(X;?|gl2|JvVXyjEencz&{!Gl>D9fypahBjKgvOvviR;}Bk%e?nV7Xh9P2#-{dt@^VOB;7qm}=OW_TWl*U}R}P%d zO{p7_8gckw3aG=G!MZ%A+|iD)kDJoS3T>jzR=q`Yik7D1 zy4v3zd-}Hph|Ll+yY2P+rFe+;y`U<zF6S__!UTbGW(UxKYnf?qrQ3hb31&S{iu zx%RA8oB16XyqzgBMbd_!v5y|oTmav|<8t}UI3c}z* zEn|PnXK$X|#IiI!im9F|p9h|U;47!sT{@PUex~QV`(FegdNx>z+itAHalygioBi)e zOb`jr*p~+=^ay@PKyqcf$?8A}VVwQVR`5rLNm~wYTgry3|BJo1461AE+BSg@T!RO9 zg1ftG2=4CgE*pp72@>4hA-Ma--GaNjJKxSZC+B(I{<^!WtABM>|ASq{UX!)P8gtHZ z-}4$6rF66XEPTuGO46If3q^Uyc>;|2P8_sc1j?p#VY~+R?cF(O;tYKLy{&lnuea~G zYd=OB-GxufcR4H(GAb0)#o$c6gSvT*rXaZz3uUFqGplIYrf z4;(jAej2NK+ajI``WZP?TiVUr>&a!X+6Z3sHu!X3YoO*$+-rT3O*1ga;H4vl+!BJ} zM8h2uWHoc1jLo2(3$g_jsXpH5v$`{o(4?CP*ZWii{uk4OaDTX6{FXoC<5ly^8YL|UiEfwlxG{| zBwfDbz&!jaK3^2TLi~u-*@cT7OP`ml_a$!%mS#x4Q=# z&)92C;DqoMqJAE>GXgCv6x%zsGo6 z)(kTf_U`i>9vTu9?iG_gGY%7qb6q#E?Xvo+l^CK|R67KCe{waK=^GXi^FOQ{N_BJ? zB$IDsA$8W_Uzhk~u9W`U+LB$AVlrv!_v5q!nIfEX-rPEKummG>MjsUDbsk;;je=&8 zmeV!XycpB3OCURMwTi|8zZc^~9wE|ma`pm=TCW97t+`o%+>f06GZX&HUi9f0eS;^S zDW^WVZb23fiJ`(YVB`5PZS7MTva45cuHZNM@+h!$`N?i~D%bR;!23M(JhR+gb(EzRZDfAG>65clzJIb6(f+wTb*xjVslN3!OF%9aI z5=O#tL*8?h`Fh5uMeu52kBprXip!iLlwZXd=@Q*+hb$W(U2f?&WhxYCCYsyn+iSUy zlhs=fGk7$6Tgi|UbST- z=8+omYyU?Of4yr4*|>Nk+9J5#9rer{ib{p5X#C5%_~8~2t`h$Pwn5G)TZ!35Wz}Hn zso@jeOT1d&c!KJb?UK4hoj0NtWc*o>34ilf3qEIkTc-kR${Hd>`g*j98ikuEKd8rD zP6FkRXdZY7$}tK5VkyAe)oRCLN?2W}T$Br>1mfNs7!;afAYu0kIUTQ{VXJrWmjy+; zIm{0JOVTJ#I@B)N!4v7Ey^v?m(x`cPTsWBFw5B;<--FUukl z_Zc3QEDpNGJ*D|qEnV1vyY5MiIa{YvxRYEzJK4Tw-Dd8MM>(-wpGOf@#^Lq;3`s2$ zzF*C#92Brp*1-A^!xqy_Lhf z3dL0GUpT5j2-em~;g)B$x^&6!!Cjuh5=oT~LLn)SDv8o9AIM9;vOy?UD*OY~$fKR* zbF2O8krKjNq)o|Is}gmGDzup^mD`N1A79SXOQvj8bkJN5EmLYFscgB+(GVr{7bIgw zXK*(SOx?vUW~^;qxNPzxT_sV)KY%n(=xfVJzkdu0bXB|Fu_?uc8l2n>9I}t}66OyC z=MlU?x|%Wd z;>SEu0cY#%cPs6xjm|e=a}Np$1xO}M(JfhjGb7YC{J`Ijuh)4|zn)dTg&1J5T%WD! z<+zRC-d|S&BkgWndGMT}>EtphnS^%a`%wT0EE zDLnS+oVoy!O{8JaHH=F4?^NJtdctJ)hHr6B`2!nG>3J_se1BD*Yc6o2Qr?X9v6gL@ z@XKn4^5QONqav#4%3446jQ0+UP{i|dpHlm*uDoS0OwsX2l@%w6mLy861ZV@1;Jt6n zNA+2I#OjmtkZtG}3UrkrNAWz3qzZGins{w_o~`{#aS_UKzQL7b^!!l-7Mj#gr3jCODO(r3** z2^BUg$n8R?p2Zq2el#c*v;ukH^@sNUqU`c>yPl2vQ4XmKZ6|O7owX>3a_+4bn+!=0 zUG6OR8waPJE$>-_Y}W@sqydtr7I4&FQ6;BMxjG|CbwhzwLOmYJ8+;W+=)+GbS$E61-HbXq9&FkTH{6ENTjk9C zv7V%Yz7>N}ejn*8L5*_$S}_;730C&QPzh@`;!-$I2xTUWNe+KnQyBJdIicFG$1Pw^ zsCG}VPA8bQS9&~XDu@De$fgC!-+zv^&A|F%(#Ublep+j?TUIrZ_HNE3m3=E$TP&Vp z)E@|MCYK{r;Zprtl1TXb6cmb&1L7i%^Cuoe6-Dq(pJ;vkmnrYvUJs*PA`$0jL)f7< zymhu-xwhKjH*%1GQHmj&3!dXClmaR*Ma=1hi0-~ z1A1ingbrVZ+>T+Af`%W!)>jC(SJw|-Uxc^3dW*Q2;`8nf4B307MJd_6MCowUhVg_Q z3<$C9#RqUCtViR{S_z^H8>2syj@J=;6Eh&N#j6j<5W=-?LP6*wIdc4T`K#z9 z^e;k1*DEDctBF#Qta|iOm(&0X|8VS}{kRR~V=YI&WNEHsY(`6&1*stR2UBrFU|Gh5 z72gL5J3i6o3FLwA|E=Vzx^CKxuulpdZNP8fBnHtM=xI2^+{)trhB|cAD&-sKE8#(J zsp?es)UhHlYw!jvk8jlIA=FIOj>nW(PQXw}_k4SJH_>nXp@O0a=@pKd(BSv!g#8Y@ z*GXi1%NtM=6gP<56?dwH;v}<&_m$+f)GR5bv2R&HMQ}@I!k*lp|94-qK;JZ^Q9zMInAx z2?F|#VVh<}a6JWgRi-TTyZ_478b(t0-bc!L<&A!GJ@V_4LEci3PEj5+yo9fDu$gx= z|0ReV5xu6EmRj81bO3WT&QIlJYsn1JoAj@)4kISZY%CcD8w4D5f*DgjR?jKfUXw7# zQn8}Und+`I{9a6tiQf*d;SEzyM-X_B3J8@Q?V727pvDGQ;ffj3%PsLbHAizQuZ&Ab zlPK8>`vcRk2LVn>IzS;a2U9e82`BxJ!0*RK->uK}PUA4(`41ksPVl#E3F@lwe@(N< zG}%~X;z6)j`WVvuw`}Ql7JYltY`BfUb5FJnw_>2cW(OJe{UM`UEl_S^SrWMb6SE3$ znc#&I5IFl2*xi^sRei}~Z*wMGJ7?wBufuIr`z2&G^A5;SimBfT{g`i|%2@RcXz-Ub zxWzd4L8lp~Yr&ZH);&n(EMSgXfVzYWG}j4X<0aK~`8`O)>;5b(nfWBc6YWjw5Q$B zEeB4~gxNsU%TEFI-fkJx%Xoul96NMX>u7Vf#XBYL-#)VYJGikVB`0T_46{$zSir=! z_f&0X@et%EsOCwp>N3~Qenp0>vBWb(K?MP1Yr6qt)2R7Efg%%{bh7BnD;AbwfSAx{F z#C*%WZ-;Cp+zB>DQpmywXFfVF!LFRZ)_rQkB?PV zj6h_smDmI=r+-?Dg@a0yptG(;0W-$;>C5lDtgO_R{?IJ8r|aS2h_3GXrM!5`Pz4$q zfW=n)k~GSvzjjDQrg2(M(ovJuTp5Y})$)?Kwc=y8zi@!~8pK5Wx!YVTf0Q}Co;)== z3>vm6WJ-K%eLB1)*E4>1F|qC*-;axj@%Zjo+onBhE3mh&!UXf>fq^X?h95+R3p8R8 z|DjLlCO7pt?i7l5ALRw|BF(X@H(W4+;H&4d7IT%BzTZ*zj>2DfREBk_XYb9a?SyP8 zY%?EmK3BApkBigLfR6q_-`N7W-ZtHoN~M?0-q?9Q#iW1~vv^f)fQ|!AV*P{KYGL7KM~lqzB>JjkQ1*SqORY40rbZ1j3S zieq({wJB43l>Sw=`(DdcNi(SRwfN2#+S;KbX3ui7xNNiG12#fhV9Pgol*4+g+s_qY z^XG~FInRYt{3b?Pm`j<*8yKGmu}d>jFR1rcrXdB6SDJA%b~58o$?K5;Zg`)fzkZ4N zn;mkvUcza&xUIKLdFddVuqdVAi#fKSo-+=qwG6n_E($kpngrv;W#YSC!9)XK>D z`m(Nj%(bVtL5lmm#Gb&SSzP62`J1xTNZptSxeW+H&E*a8>QKWRLs3j1)8q2Ahi`uq zMRTPc|m7o6@8DZ`aQS( zX13P}RxZL6$#@bw+un`iMw;qic1oC#TZZT8{(y7*zJ6~*S&Mti=lwz1454UWjQIQW zxPGJsPZ{S%p=&cI`FxyTF80zidPK})@f%xuj_$w2u89^4NOU3|I-FvhhcB<+NLSDB z#9d~^fK5-|GzXQ9LEoRQ7#P!8(}en$b#pFoR@U7*4fbcX>UoTkFF39W$ps<=Jam`i zA`W-%dVKM?@K`T_FB`;zykx(UCqqd9CwKNhcm_!hz# zU+rA&LvwTA?M5Dj%Lmst>d~_P z^i5=<&BY2Ew;{mamP1`uE8@y6u8VMp>JX7i0N(9(G&n<7=^Fcn&$k7OGOZYNC7b^q z8dxh8wdiM6iYX<<72LwZ(a)ybJ&Z$Ws6djh--`!`c%UJmLDB6I!?)PHO|fg{#<*alm!AVHt`v3 zb^dhIVa}vu#14|TgXC?$Jhe?aR`o1OqA7X`1pk7y+Y@o@x^Dwsahk>%)bwt-cb zNeqq{OS+-DK5ct{D}x*tj60t|{SnzqRp<@9PuElK@I~`@m8@w%k~f*H&K3F;)y`s_ z6-+aLP)g&0iaO5p;I-j&RYIJ+p?i4*c#b-a5H7N+^$dsmH(*}{{`xQy3`ZO9AKLmr zMXPC>pm?u}EDMX^IK#aD_*bXK1Kf~JTeF=Ho7Q~b<%dx~6C3C#E@nv2bbkrS8pFUM z%RD90p)NWg*M5=O6>#)_=!CdyjmqN@W$472e^c7ei;Fl^u-MA5#0J7H{fFN&+q}Rd zNRDwjR`w#8*4;Wp-eTp7ifokMcIQKdz)(@Yq3*X4 z35JAk%5b`=23Nch4CLqw9ZR=WxhF+en` zXpFD@9u18UZ-n|Vj!4kk6pL2^`Dqp!JSJSv3T1*eVSSxiKIxv;1Vvx;-vMHWFxifG zJH}(^M)1Mws2y=68XN8)V9BN(K+~{bl@saLM$@clZbub0`d}Vqxb-UCI@!xAhwNgy z*q=wfr+A9)I)}B}968}OU;9SXlm9}qVZ0YKSn(Nqj3`Uq7aI}^=BhY-Wnz zDDI|1dBF|+H0E;YfP|wgD@ji`3MNKy<2LQgK^tsc#7=6-Hy384%-&2fxwc&sU~_%x z1Z1&#P*4vcDX+G=nmVg%e_?j3u1n16zvhw@X(T&PACe=b`!@n?jpHJH- zHHm6uEadSn+mu;rjd$2#3dQ4v#*nJGe3cp#R0(BQ-LH^ywyK~ORrD@%Y&qf&>%6$e zdsZ_;$pXA=J}X-{=|w& z`BQWL)0bNq9Lz>$~1LJ~`IX-hfe&xXFI@|Iu6#{KWxD*lL zL9U7~x|;F9CxjK^u|WN6GzvxdAC=O8}fP(IS`D5En&ql99qS|=8UjjF_cHw^fm?OE1KJ|ib*49l@ zKhZpV$5M_)p%YgG_3UhbteboQX62<62@m6!`Q(JX#R?6)3PyWtQA5SW2)L*qHQ3rf zc>CqF&OL$w-;JDID|EB!F`ce2(2WQV{%Q}fWfhOQ5Zvw%9SW6mQ5j1#HOQ&H^O3Fo z8Q9YZ7Ign$P#eLs8Z!<}_OQ@mibEk__4Vy)L6Dc@6If;I4gHjFNdTD{1Fy|8>t{ig zQ>&?>x#cgRwTFPi7zRbRpNp%0Hu(LlWY~q23)$)w97#KUe}p6?IDb@0 zcMobfRnE9`LK7=!R93e?b2G?Z` z->SSwSK(5=Ua*KTE-gV(nBKZu_yjzvLa7Ldw_(Dl^*!==qn25VXeBK@>F-3t7kzM* zkn-i8qxFIv*L=l^L9Ff1^NX#owi&pew2m9<*Ua;MBngSS1fnWfgqE6;sZ9q}pQA%? zc)!=VqS)~aSt2$6#ZBw6BPOe2J*-kREy>Y(v9ZTl{mLeLneGn;0QF9KM$F~iB_@_& z^S5i&@=LcH_j}=#xF5Tf$ckZfz%z_CQ|rxX)U0Dt;TmPKm^*TJXeWdyq`q}v?vj8q@o*ooSUhi z68K)cF-lA@Rv_al8LYAsMYbBdf@!t3u5RgjojTdfu#N_Uz`{agz{|`JluU9=*M_Gf z&}$~Hxeh;5uv|V zMQ>eGip?_EDSE2LJ4`xwP&@)J$|XT^sSV*Bv|N8Xp>KewIv`hel}5-<*eMsiLGcw< zttH!?YqzY1|1MrltZ0s9-3`zkug1Q9ELUAapU^GkWj3&kY)w;e6~&TMK6xP z2u-1@{!2+%4u@lO<*&_^{3^+3kCx2X6tF)CD< zAQ#XCc4UUaJt&M_Sxtq>e*fhTH5-wJ;RI-1x{-8m3MtyanyA5p+w++0Ob7{c<7qg- z>g~%bLG?37m#xuv7X_kxl+pHr9esv%S*^pFjeT+P%1+peKpxV2>m_vP{AkpLPz+=s<=(D-KO z2?-@Fcjt?c>Ri>>fhkCy1z{IVQela?ydl&)Y@%*o4@=L*|*SQ-N6noDj zyrjsQo{-+>dYQ16shvwc7>F9TwxI0W(=e`bpGB{;dPapzX0X%jP~zfweut6OIxy1o z7nJ#fM+Jvde$JSWffIpP-&V!Atl-D>v(*GR>BEF|i+4@hEIl(&C$vB>gW5O@qt_IE zOAVX6y-A}xBl_6x31xdot<>IWNt1)7IW*dR2;q@?0DY;jVXt=N$Fg5~E0rDV$Euvk z3kDV=7B?nua*ZjV21~;i3rW6O57K+}p4dJsO}aOI$=%#^iy4CSZ7E@UZ3SB^F{?d6 zuuk8c>)ZzufA(wYtBTfKI=cDX`QuKF zsiZH7>bz!;(ZtfIzGs$m;i&dFRd=Ufjy&>g{~wC&fo4KGw5g zkYOO1=>a$DuatPwohOrJuH5vVlEPcM!XZ(;H=2P#D-%%3elE9sp-8G>g=%1P%<>qDzBvP)v6wpz=FT=IHWq;Xl~Je zbH=Z>%8cSmiyM{j@LvITV}kO&WojuBzhzXz0H-5**=T;?v*^RkJtL{ve*7G@=xQvAnVdSjuq{i6Ovmq zRbgv2oQ2oC{<6A6qija>5BAf};M4^3mZ7PMrR&&_x%M`e*a6kCr-sIyY8uTwYiP3+D32+_{=9(l~~?*8xjpDku{~ z?U6o5tG(`L4(A`YAm0v@HqOjqy52px!9lPN7f-2c`O6WT+MvxR?zS|hJif<-eCQdT zejm5IvLP@}NRS9ng$76VB78vR*JCH3UoHJMU+kb9XYeiqH7j>zV#=@8j-#{U#N7q( zGBq9g-ql)O1nBYPspSF#kw;h5;sa&(89Q1k8(QI$jqpy4!?{C!Pxwno&6+$45!PGK z02Z+G1kizgo7?<(m}A5G*sAIyAC4D;ve4?6ulH=e*e7r7%rZf`SS&F6!-P=aqN3NS zb3cUq40EQ`J<#+{7Q*}v;tcjUF}tj8bFxZM(``Fcj|@Em1HqVX={-Td2;IP8O~TJ? zxl~6)-m=G48%w;i`78J{>+4#!jBE{ER#x*yFOQ!Ea2qz)xEdxWb3$uuTzFq}-B7Z)Rf__^aG2}c5M-?ET7RC=!iCcieUr35 zS&Fi6z+K!T%Bm-NXD3?|awJ1Ytf3q^G$j43?FygSW?G5_0ZKt6!jTzU8On|X!+7O& zLuFEWEuZM0#(6N_FKzg8QY%L8ffka`@DK?2dy7kF*pO7Z#X^^%mEFGE2zbp@-LDBO z>x{c{-f9KZ(=U+VVrEGCm-`)t$t3r277Thi&-j>&i=_59LfS*&J=Rx~>aFDOKZqGI z!|YH0iHHUvK^_esoXgp3m%{znU~spwTWu-K_OP!-%Ik^5tj07S`^77Mgk7Z z0p&8r7(ybmvt%PKtX)BOAHI;!@;mUh-FT=sj|gwhg31Js&N>Xq_8E7Cts6FocY6&v z>Y%>HLY*k1GHWVizgpH`^EAdOqSATQQ6{d~6>6Ox@8Sob?H;46KinsDMH||_$`p7SwmdltJypa>fE_!yiY0NE)fd@(X_Q^N& z(Z|{$u;AGPD!Qq!v4MV{(V%8`UMLn%mi;YX_>dtgvdSXZm1}zt)T~ApF9R>%9x1#+ zYJZ->W}}-mw8Qa?t9|okde0E!*54X+kWNv8e~>!iN(hN=B$EZLP2t=sC+LtGnX4gR z2@|`~f1q=ISlHZ_Q`hj((w1oXthk;Ag5Z>&1cPFGOaGKt$qMJhD2&~t4JxL4IZRa9 z!ujVWxIeJl$6&J#rEtlX=D?!^bOVTJ%_cbK3-BR}`cKNLbI*@kRgw` z8rSbGPvhYL-d4ePD(gUiT@WyiV4=Xlak(OOXU9eI?N~1Iqj^X|=vWcKE_sFM*oDsd z%hHy+_Euig^APF?HX8!HliJpkj7bsZkTxCW)@9R~{i7=}QYB(PjFLnUA?Lel(Tgut zn(>(1TTc;Ojbz*b8i}NgHiMeljTOFjb=c$$j3Yl!=fQ|d0Z zgt{7!NbO_OD;(e9pVmz{(BtOG;Y=#T%N?f*0hhnHV7}Cv&D-Q?m%Y=F0|!aR&@4xS zc$`jhD|+O@0H0`!z>JAQ29Y@iJKCOCH!~Qt956^P4buG;QmW~sTIUR9szg9lyK1?b z%ryS7yAQ7{(6ejljLjIm=+NP8Q|R79t}o5+Q_{;_&tZ*4!_V7o34mVhBpPJx+~n#M z#?t5dc?DW}aobDSw4wG{S1;l5KtJ!9BO4J^eoZEPQ}(U}fYi;5PoFWv>k90BoD#~1 z@ilQ99em?%$l=)6Sq|cObTY%{D6|06vEYavYrM9KLZ6xVqozutEC?@5Ps8{gXS`7r z-eu77P|?AA2|u)qdl}Fraz+@KEIQG;As;xygZRra*Tko8?>1QPV{FD@+!vk(%4_M) zKk|PN%J#A^mMs#A66Flph6Bb5@?IqEGKr?v=#F0lJDGg%SuX!{Ha#&4ZKvK1bUk!XDe3mOZQ;HV4r*4paiKqww!+O4Y zg4j_Z3C|2SG-#2yBX&;V5$EwVn7^B!)e|Wut?1ck) zeeh3tNa?x!D3vG+3P>8j)ISO3>q`s+gAMHk?KPtJ6HN^;_v$+PNI0s(?x%g21x#!C%UZH4Z3WZuW423)c)x_Zd!TunsA7Zlp46nBrqzx<|# z^$h&)zBD#J5OH#X5fJ2Va5+%BzDm5{UwHC>>+%Op$tJ{#2Pw|0Q6F1*X!Qg_=iA(m)stg z$SFs-P>h8GWt4OnyZdEV^pJ!BZQ*q?0r~>1P5_+x*VIDxPTzsIKK-RVlslvROT``4 zW(o}Cx%tBcbBnGWhQ#&a4ut;e23L4Agc~;4*o$M%5Qfsi1h3zpNWBZi~ch zYv`|?bD%yRu~BwGfa_G}z+Gq==^u+P?S>Sqdwqh1K-Zf36~caN@0j^j4)}9ceh>@B zi04d{j2Bwqy@Z5aYt=m>8GM|j$fMd@P!(h*T`ed_tsxt&E(bH?tGSvhR_wJ0fMv_e zgW3o#2~{z>g?8A1d9S>ywmg7XSVTU%CWHWfzN%G6Jz2<6}D?J9SpWt!V}I{1jRjmCqVJ7|h>|P%!e{^{{htjbfAa zU_2r`YpCo*J#@dHd*ab!Ht5Y&5S3O2QgIj#VGQFN$>~_AT+G44q z{%c0Xi*QTY;;{L*S>hvOyn0IGtZbX9$%^V4FbfGoP$a@jYyz#m?ino0K{BBkeEo zX8=59-62z^kH2{QEC=bJfVt^vC!y(oXo2bpRQEv~>jwlh#%Y-Q*taWV zmjaD)5^kcRzxE_-@-(KQMsT^3&bw(#id9-{pozw1a@z0>`y&WBE1yW(}+_P{FN(4WkG6%E0Wx z3%iE>jQJFNO8C28PeR&Bv_7BDerDDBc1y{rQ~VGnl%p3qB=dyI*j@1Q>8OL6c}686 zx275O5I!M3{HMHrV(F)}#1nB7w;#)I!oDjn!pOLPzR52vGDSONbHw;~5hF0a%eLxP zCo*#E&i|P@?AwQ*n3eSE{!uM=L`)Z;jk!BAar+py{u2pOCXM(KK5qXy$27xr6%$C( zBVmR>fCw8XVw>As-W%38Wk=Bcx!T`BUqo2@P)aIdAWpK1lm>D5jVN4@l$>0>Yf`|rJvsJI{K{^0N#Olc@6fLCwZK55|@|zix!pUv}0fx zN?PVKF7EZeh=cx${y%?(ih6_b|L(W-d0fbu_3(X!8UVF;ZZ*F{YFOAlN66n#?7j{P zyzaXa%mp4qW`4^TGL;TV(0Dtj{=Ve;{71-v6kqYv2j^|f_^a^0o>JHE((VAvv*us7 znwcMTf5O5d1<#v~G6=hf+wN&g+TC(*EC$&c z@wZp@q?UcUk@MQ__=Xrk6546;)v#^kclxKys1o$Ex%Hdq!jD>pw(2CkL+>>w-0!Fj zbA=gKUC69?(>4UWkhDXa42ABAX=OCCr(U-Z=w-L#oVc-fQbdcQ(=F58X(TaX9GjutsJyVoL?zDGT`xvS3>X;Ai6V zgl^WrNtVdi@1K0Cy43cw3pUXll%8S)q~TLAtVKvCf2kZ3@+u&91%^QWbT%=#bj=QyNN4YnMgl~U# z>p`3TrzqJzvle?g!V{thS5BO|ga6JA_p!{(SnrH?Dz%8%l)-!LUtZdjV% z>|}O(zB%YRPuhP+n0cG|6|GU8vI@y0z{JkF^85N>|YjrUTVpuL_*Q zGRQ`%!f1H&0-Me3UBx^*^^XH=$N>ilXLR2l3Bwh&rZ05agH@O3S}zgXE84eI(xNN8t`i9Gf9kq7MnANhVwn(}`t$!AGE7*qo9Mo%momULGEozYLqs zd+=~Aqm^Loj(57xLS4M9iKK-5TfY`oNdogtzH6g$5Q6*e`f$cZL zsuQQMr|J(WF<{4dkW>TI3`CoKV4RUv!MQDj&+j1CP0zlPFSUyuw4DwqMO4n+uMhgG zx(g7?1D&8ix2TBcPcDN5@6Ky!hr=0U3JZr5QCI)ZlBXZ>vBneq>-TB_Zn&c$lkV;u zRNTzy?h@0T%CkgcQrBUmyj?f%?*Lo}{!PPr{i|p+szYZnfX^sfuiZiy_W#*C z;pxmOtVrCy0+syu=97<8x2b2?(jn$JGcWmt_#50?jvf;5IX6p)TFAuYJvFuE1=S7u z-=WY+lvQY4MEwYhQ`~f)OgV@gTvma%H=akz#-=hZ&kdU5`^QZ_sT;E)$>hWlgU~7r zlH@VQgrNQ!~T+s&-tOA2dHBQlXfbpiU>LFm{^0fv-;@7 z^Kmi9fJEs4Pv{w=#6@K`Ym{a8e;U-dD3$J~XcB~qj zF2Jg%iOkn=VscEPyahFNsl9+_bU!Y>WxyR*8Sn@S^wa#xsLB`GX?8%5j-wdWzQ}=S zJdkwefRE^kTxgVNxIO(w*x%k?Zoq!`*|(oHqK%r`!I{Ip zHbQ;~7=1tNPs?C-5D$O&<|7b#bwm>h&Rw%Oju(@)r`o$+ng1FyaHB=mM zC~&@fe8_>1aIsZB9G^`wvRjD|GXd!SRaNG_lsXb^o4L%z*cPyvBqY2D29r#Z&APL< zuqnG7 zrVbC6=;c)sSv;XXC|)V#D2$yakq*!oDbr6+EeAzNd7(5<5cWU|AciK(#1HpU>ZEFC_jb+fXIg~_!nH_*vtnKD33*iXw z+q=X~A@(@O@Pmzrl=$PM17#h2;VEc4jMe!O`1qLx(67}ghL)VxQ(D}f#jS|5f&lJ*{WeqBjzOve=~%6NIuQd zpYq2fD0EOhEE)DyJV^WrcdC9=C0H^%MrF=n1)7O7BO|6%gR=T0?)HXv`SzeWy7~6* z_T=LPKOgp0O6`$*r48?1LZaoh4(sN3v7+fi9veD27s*v#EKH@u%_kX;1#IJYz$Vm2 z&Dlp?gR;{P{Utf{>ArKp5}QYaS2HiA3mvQt^SbqO{GRKs)7ej#ZWxfYAB@&YZLtqH zl{leXHM8<@`mo|q@S9PLLXi6fLz7`Jh6+8j+txZz@qw0ShA4ufqQ;OQ-&njWN>*AH zQiH@qjf?u_P(;$lb!0a++@wh79$Z4-XtX1}9AtQnhj>>U+^>_3d z5n@*_>-=nB#J;{&)j02;iW!LcOK(`UqaVM^ih^uP^OH#D=jUSQ$6WUKrtnT)gk{SP z;3_2^BxGD(8y0MsSE}t1SQHw$008cY#yLGE!+*P%P+BkNS|p#OlCD?iI>#E!I(^ef zz0ICTCx95yA|n^a;p*sWrK%+a7GbbBqQJ@ z&W*izSI&^Jx4GXD6BDby^#SZzcu@Tl0lnvbRN6zP^oJxC1!&xf1}%C~bG$y*;PWQ@0Wt2gHFh-U_MuoSuCcaa+ownGy{9 z@9s|7$o+3mT_~9VzSVUkpG^sSwPR9f(K*NZ>$0dUJWNQ;k^1xK@`o#ux8RzVa=H@B z(m$5Ha8EvtkGcKsM3;IbtPMq2(`0nr75V&(>Fsc-iSqtU2l`1Gbi&eNQQ$VEi_oNd z^1pb`c`V9zDh;DV&zTX4bz+Fs^`WC?#+Z5INRZS3BZLn;l+h(K>(?;%Ng!}lKvDL zycF$FZ+fm17v^Pi=7T4X zkP%+Dnf+dL^o)?apF{VGxFnRDc~Jqn4E+EXZ?Erc{fE)V+EsbKS? zgPlX#fo3Puz79A1htU{yg98X94JrfQ-}#Bbbtpf@BKAeKQV zZ3drL5~-GHsz&9}!5i!x`=9re+mQF?&-lPpHS`9YSag$Vw;&|^xHYPuwU_l~fymLy zAF7f0y*WRzMmRE?;@>!MeR=DfbqZY&b)z@te8a|RKNKV^8cBJw zypN#J>NJ_-k^F!`1yqa@4QTyY+~{5S+HCrGChQji%<~Z$&QL6y%_+ znTV`lL9V$yS~SgaTU)$n+-W3Fbe@pjorDf=q_}TppyMSR$mrOJRiC$_NdIe2l>vUI zBWF^NrqJNJw@;EA!tK{Aa_+509%luG8#sGzx`af_b{4?1Bu4@hi0 zB6tlD2cXz@oES;syPTYTPw`x4TL)>09{Akz)#YctZ0835Z%-MZZPP+7+k9YfE0Sm~bsKI%r%giA%h?feWt z-@o4>*BM<~8e9A{zfQEyza*Cl3Sy8hiRyy{V#=l~I+32PNO#Fpxc)Ep&N8aXw*AwB zNOyOO2uMnIqqKCpLApUYr5iy?DGBNBP66o-*)-CP#HQy)tmk>(|IB=ywdUhqE_Lra zuj@RI-*N7{bHi5qA3lyKMLXvdQFPLAdu9Fd?xBtCwFNx4{ebd1G8DinMqRD&{VclfCK zx*_!ZzJcaD{*7_5K0@<18W`OQNosWRhp->?S3hvYm=u(6UA#^7!|KZCN_~ylb>bcn zgmVp)Qed{^RcO8Pi<3@2*Qzh_HMBpo+!LS@sz*K^_g7!zO)o?~wL*GV^cZ*AQbjK; z;gizK&3aV-@oBu)>k>oUzN9P)xiQ;KC3`jk;Z;>jEK<=4uflai4yL2e3TrrDaPkqs z%1&5`YZ3lyZT&Sx4QFa@42FBI2%^5nVn_ z8?JA#LHDJ+?kd`jn9ux(zs8o_&%$_=W0z#Sr|BIv;Hi1_a9|d0P0;||bwB;YDL?;F z$Q^5SHDxFT*6lkl-t|yW_5U1Hi_fn9>w2I+-rfsnIOV(d^A+b&{C>(j?GN-YuW4=!}g9t#H!950%eX zVweN&^;L??@b%wYS??6!NtD2|aJ)0WTy%(o)8XfMN5;5_XapqSH7;;GqkQFRTH76d)$F0Zy(oL}C^345I4}&7^JT3VUBd%&lqPaZwn5&0_Qg^7JYETTWF9%RRy{qAmFN?$Lvh zPLdj%a?C=q^V6sBC63ww-;=jSKuPq|JtSTpuFQNiW>x-ZG;;X9t%K?YXDJcOde8V3 zi8-$KYR0NOMW;Ei=RK?Sfbet2dmZV;v5rEh(@BAV@lvt1YpXAAH@<@?gx~8-_adje zI#t!M+82yQ9ni_^&z?XN2QCiEhx@E$K1;~Fe1Go(~w5)9SK?Y{QKosD%PGSDpZ}ZEG<-(4Q4m3VBN( zg0xfehRuslZs`v@=fnpck)dBVs3pu%?kQti1YRuWtaDfylK4dilW@2v1_lhA=JXtv zXmWKEHE(;{5P}6O3w``$~QCmaGLP5z;iD#7|!orMsm0ZS8p_B4ld{97;xOI&pN zgeZxZDBGB|8P^9hI z!V)>jLUEsrKo0!FH}1)}N|uu4;#xPj-LJ>JXfv33oUGgVjlLt`!w65@8ROg6)Ht4Pt@c4X)_EeaPpI8FlaZW6$*D%R6 z;4U4ZAmkO%fQm8@Xl|>Brd{1BOJ#!uMH2~?D{w0}$Fg&;q(P4 znqxc3!Ffa&>V-KRPZ7K`{(l^A=hb5TZB~+08eJj(8r*SxmVwl1SSM*Vm;h3tXBotY zovg&VL}3_N5%7XGu=>GEX`Yp|PtX@La7IB!SYcQ3b)F;j`ehh5yD*pCkKu#YtTU>L zP|H^Bwl&s+6;VfRpQ=$7l>Y%XdaoWp{l%_4(j3o;7N#@y3SgdSWpNwT-LamXft;@dkj4!M3okmr9)*V(>eKfidi z({_rf+yu}4=EONr!1b-;R?ef9 zK|e797~~F!8Yfk?Sb76=epwmjLvBi9jqijs325y}Dv353s$C(PrVpTY3?RbS5=TFK zfIBvweTlS?S0RL_Z=JqI;41IlF5SmFvIr_iyORy@a``#x8X+Y zdhVmaqstZTEPfNfN{le3Pn|CQcuHNY5z>GawNHE*!~FQT6Df3F$j%CfF%^PNTIKuF za2M5U{vMHNZUWEY0TsTT_aIpU=G zk-JCgv@a|aVqVn;L|%I$6|DykUKS*xZ0i^q825}` zybALgASe!$1f_^}!DR#RUFS5WJI^3-ay!TU^ztNNNoY9`8 z>8EYH#KCn&^UqI2^YOjEut*{Ef<~@m;08N4CGeyD_QnV7yy;gp9oT+-j$N+?*U-ts zx=XXDUM@1Dq!L?_t>smP+;tyv!9A1rRpl7rH5w4qUXy${(&e#IPYo$wIv7#L3oBu{ zLxgxK> zrpbk{ssghU+`ja}J63k+-RzC-e_)nA8+R$xqk=5ahuW-1!}R;-IzJh@@9U3HnHQOb z=y8M@*Ovfef8WQOG!l5`dtEMB*4SzJsib(d-msa_Zu9dkZfpcAW>|oDdJq}suAPnb zSgn*zcXN5x;i0ifA=YAKe_qte{D(?dB~(064^Z-YnYPS}D6ZdGa=lj>yFPLdes(fB z1=$#oix-iOx^f_P+?G>HX{nSSxeo39`Zx&T<{r@S4GNbR0mYs?5-IDkdqws&*aY;x z1ZZwtu7H9vcVL_rNK`)JK2VaI-A$M6So+udN!nWxO1_g&aBM z?e`Spv$#eOxRJ#4LEf|avIrs$DhhVJvr4T2&G|N`nmqczHul+< z8rp_tWT3KE`e=jlL)|&0)tmI$s_m&KF|t=an)1Cv>Kfh^R4jQ_h<}iep}U#yB^ zn;Rt+#=E39OCefPA+za~I=&N36_!y$RUpu?RGs?F2Je^3uIOkP*izd2lIa;Ga;3ZL zCZCO0GoBZ@+RJYNTQ((OwZs{^{;eTAR*<$KHPZ6)(lCXh^>zGLt9T-F>53o{1Np=} zS;yToT=6A$Y9s@RQul9Ni4K#B!%erWjU|0rvcdAG!!GahGM-n-VeKb=$WPZH=OUuh zRb}KvlKO42$6-NN#HRiaq=I$fdEcEpGg>P>7up$>C8-D24JN56VJ@=M7a1uB4Crgw z`tt+)=qhGtFI<*&zCG-qXC&TncXlwmDe*vs?M2YVv>esX3WkDB_$D0qEci zU)$_SNYQ<+0k?E{+?-T=Jg{=eJ^%`jjp08*j2###efM$@244X#l}f_p<1y9Dmr>(f z48d{%VrPg~j#9SQp-#-hpFH@`F%Ww z2M`UW603slWWVvm3l_VP2#OWE+VcmSDcHu2PyF9$TsQ-f^|`LQ{yQ@~^T0py^El7O zi#Jsh?XiX55to=)N1Wqqk^&3IbUo-_%f}Y3zdHrh!rqWRM&}69PV$eEw-x*=%)2`N zn>keIZ~ZD?WI`lgtK`@4^LnU&4rYf$$PXET`PW+ew4=23l6$VgRX9~8? z!v+lwcu4g#NeF8~3xrJh{9r&lk!+*j1Dh}L7Z=+u+S4)YsZk!phWE_p;bX$&^prp3 zK&Yk*iHbt^{lc8qr{&K|PqX~QPWhWLIgO@bJX*=IGY`+;FqwqMCvlCb>qRpd7i0-R zHarIHCPGCmC-Vo;|Cub$al_YtcW6_sSfnkXk@7l?FN77zAvk0%@|7aS(+{d>j}iSH zBf{a;irDyQaKAoqifuOC3ynAkE=aqFFwFb(T>O)`uK#6UgdvcOe<7GzjPRlq9w88X zVP))2*t4bLG3nrzhhHXRuR;;MWDx71aViWGk-fIie0!mt6W<-}Ava)wnY(>ggv}sX zSlkZ%YTp1dGkz0X?CHH74GSU||2A`Z(5>ENMUf@Ii6IPC&SJQYj{LN|Gi2(ua{k(3 zbW-Df1!1TQ{d@<~yMp27W)xgY2&}#fNm-_hK6sd^Lqo?llp)!R;7 zg;d|;;n{|I`SwFT^D|>Ujv>N#&?5UiT6>f`*>oKN(@#0aD1erJ>${zU*Uf@2-)33^e;p)-Wi`GmLzwcNk95lwZs#+$A`Nla9_9N*M!z6+a| zmn#fOC@7UoqP}MN3gW)97wbV$;h?^xvT~zkTAiII`-jBwKT(cpy-RDSK?&+i`KlT5 zv`o)oFGEAecyM-_qDHK#5e%gSRMcvJMUDEN-8L`>JvP#-?uki_AR>i9hAb=eMLutl1+ucyFEV$v?r%Nvip=htDcK#0L|2;> zdErV@FZyV4aH18$Qw)6=s6LPD!nR2lTH^K|30BtgzTl;DT7g=I%<<#qtW}A}R-Z1h ziX24`?D{lT>`pg{DE>~gP8^P<-xY3A+9mpd!fhQHqx0#63&Sx%Sa5z*OC{!_N1MwF zQw;&JPq97oM8v>OqT58R;A<2^MYe*TApzr}g%RrW?{`3xQKK)lBGl*2re5B}kY1;r zdh0>AC9C+{BKqAa)V3)V#&@KFZ&~gS-w@m$X^-H$XQKiDYKN0A%vpk1xjUen7Q6fq zN;+Yxn($eqvs=cTND%Y)XdiVN$=4aERjuMd#+P6By_iBd_&i5EzSYycCZyD-jTIQ} z))OD&ImL=(BsYrwXw&(9T|*k|Ga}!YOI&!*)bh#qgwbDK$B->qkJ0KW<~-r^_1C?6 z$>PLjHNl>%8#B55Vu?rnasVOm#divqFUKB3#xP?uTu)-Yiq-Q$|EU=cRjy8)^V}sW z#joiCV4?C@n15z5QCWWHG-pfqu#pJ_{-m1Z=bPEpMOG8 za_Hn;B*TgjlpCtPq{fBi<%|P13^^*8^FZoH6FiTrn0@%s0ZwStu;9S4wLJ7BZ)-N{zlZr6$y-av zKUN}BmG0(i@37KdSP^#uLPX-ig4VYOSRvNUVCx0ey6HD)NYs?)5B~yxkg#fDWXKNS zocrBK_5zE$&W}mF1iq&F@rJMPBSHIhuT3utriq`0_~5(Y@gw2wvDXw_e{9mBI+PP{ zb*v$a2-!Va54i_4{o67d>wh6u>G05p3Xr#37cYf{%)kD~k3Fs6ObB5>%Wu?S_WTM3 z;weh}Z=9ER`g_1QQTJFh-oy9{lEp1BQ^-hHL z08+>`Ha<$^C)5#q}zIi6^e;zp6KCfE%Sk9&}dKZ zr5hXkm##sy+9ottaiPBhO*_uDeoGVHKPxTA^g2<(NjHDeOwQt8@kDPSyVrr%aBpAj z`CPm+vQ&e4trAdlE(aXw(JNNF7`^9W-r|BghP$(>a{@2ZGnjzI%jvHpjsx?BsMp5X zl6m`yPU+4!f}n@&J%$}i`rl|$TXMIx-f{?2XZ=sB25mbR9)m zTy)ZH^p(Oj)4~dO1lz_i7U8CQl{CrQB@tIsH);D1#L5IqTtcHsi$QQC|W+X`tU} z>Nn3vEU`S`O3;8?YI$$|7T&NBC!Tx_vX;QHj=(oJfoJ#ak*6P?u1<)-rU0-I3XJ^w zVIw50>H>wqBZItJhP*pR{XTq~q!p9<;u@U%2n-6R}1INQ6Xx z0>DQ`=pTRXt%6XI07#CDQt%qHJDqYyX%0{KS5`q-v`f0H<1BZo+8#|THjn7bZ%WQw zPXhHlvc4j0gqS2KS)X@!I7og_Or?BPM$Jv@n0@jtI1t>h849o5yFK&HuP18)p}FL| z&Mqk|v@<0$)WqyUSvR8Ykngj27x}WQKaYj8^RY@^v52Y&a=M>`$K?jBRg7`Ktgo&<75}-5wzBR3uC|Mx%kCq`+l9Q?SjaDs==PI`|NsB=qrvz8 z;E~wh|6+LjR*FtR@ec1Bmy~5Q>xi^F3m5fO_UU=vp`O!God0kor#OnQ?bvm!SN>@I z=VtDfKtWa!7o?zK#}hP{i!(g_a=z`wesMG|~IvaHP>$ z_ue>VHb%1WiF}7iOupWE#|B+9OWb!5 zq;g_Q@#v!mg`|!P)IetTQr{VU&h9Gn3q5N$i)Q)*Ww- zjx&1Pbm7hdd%5ehPF9A1QyJbfsnT`Qyx??ozDR(Dl|bw1=Y>YVg-&|?M!lRHbuxc* zh>)n_$<1$79zs9`ErETq%)!(>Ex(5VCztm-+ww8{wT$04lrQ|Hq#3X-lpGoN`t#Jt zo<)kFEBw97rg}kNG5<=k2L924)ATA7t1`A;TWvXI3}=p>E6lo;al7w5jnTm`{HYN$ zK6V*(lppQS!poDUzoAreoq?Dwj0?r$IxSwzZ$&KRauF^EsJsxY(Mwq+?{p&DiG%y(=9 z-QEynT$hM|we&^_uxG%?>_7k z(3Vx`8QTUTtTAUHKo{Y%r zb&)Uv0sQ+UMwAtW77ms>HiZ%yk~|e&F+GzpT{llhRG2W`X?tRt4D6uhbmc+)q^Io!O^xb{0rNS+yF&k7HLB-a1Fw?0htBGj zAQ?Kvq`Q#;VS`qc3%U*z(O3rPxl?f^DG4>NX7ci_>tSZ!E+>q6d(1C*xLjBz_0fsc z4(S18DFp+4g?;qUK*+IFhm2l>G|kb~l9Dw~o3BToa8OYsm69=-Uq{k%Yuj3 zg9i5xW-{;nqyQaU4C!4Ap1ctBz-X5^TMo*pXji!(oo}kXaCWOP^VeJ~C~u<1QY?PZ z=1_5;kIx;0?>2_?wQXh&j^0UIDArY%s{1RFJP~IhR`GO*68whs*W>K-L!MV;S1_Z* z49sno4A4H82T6l4&JO}!hIH73pAzblTIN-;dbzX46>A0M4$6utv{=Xx@WR~hFDRwt zAQ>;*Q;AuF(Dc1_@@Z7a_Vy-+)C$58+4DNXNs@mO3Rn%`$?Wi_axUXf**%3rwo88V z_APqB%~JDQj?FsMjDMG8wuo<~d;ZS?(~e(MW^>c@yOJ;soQf`t0sg$&_8xa;K4?8r zv$T?(RoEH1&~~lXcPtAVp3X*Z=~JxfwfrZ(Db-)y_d7Wqw(>H?aC~z7=6xqZW5|i0 zDmQ6Cr~X`z(?J`x`O%)W?=7nrr(D_Iupt7DP^c&roJl1LS2W;5KVyoT5N)ZmGFH)v z@i@O0sX_4Ik^P$OyI=91dsUoN@{{s7UUC;mx}3Rt`a&RU>T4?~DIMjCdAfsSuWOAy zeljaBBetDS%)gl;Mx(UwC8Q>zW4`Z+zvUH@q0{)4RSQIM*ot%K3P7TqiYYnhV3u_x z+dA6`u6s%sLl)xkUT)&k%eY*?QdK`V1|95pQrt3YHUh==L z{-<;QJv+`d~3oARBev#3YQpyvY#6Y83w1EgWI=%|Y)#<-fuGo}ZJ8zUbN@p@#~pXO5+2U* z0h*o;AEYY246CaJSIqV@+YG(hzF2%D<;P(XyV91NePuJ%>nA$CrW5>?bfU$>=AWkpxgDQbp{N%?Q_go&ZOcd5Yc5hTf(xz*YmkDr!Z<^J1v%(hzrr$GcJNh+=+v8X|52v z;hP!UV7!4%eWAtlJ9$ySCG_uDpxLHvbtTD<3?U&{lN%-D5u?P5v=f6T$JOO^@?MXQ zHt30LRM(Y)%j8Ef2%i$(m-V&HQ+GJETeJOVg)gnq|NGt#iQc%Hiix82R_P;jNRQmN zylNG|dLVCtE`fU57FVIw^ALqZux?t`+$&0j%CuKRJ>0S514(zyW8BWdlBTk)c$*Uu zo)d(3!sf+l`-Kwq-J4~l`b+o_1|X@p6KP*x=mu6FAC=6u8cY9|WzLY$?^#LFBu*FE z&a!tMzgwN4BfCKTPcjt2L+$aAPIyTQYo;Y0O@%5cgi@;#Ry5M!yz`ZOgkqk<^@FRf zhA@M*V){sgXfS~~cL%Z8_9=3MF2?kYX6@ls^=OqrQXzr+BsCq`<+P3tKv@QyimMqg zu)&S%z(Bd#_q?^=C$p(K5~^^$r2mpv3>xj-wb7{{5%-VZqlbSRBoG){$MiJ5S<{_h z>vDVXdJ}gh$CPY=Qwd0kv+P13iO?~g^(l9kve;b<-$b4o*;7KugGE11uJw-eqrv!F zM>Z~-Q)^3z)F`t+Ye0NtoQ^iz4tDNQQsdS`VQJy!leY%ZJB=OXD*@yO9ETJ8!w#hR0 z+$5`o|@JKeT2lL^~rO%?&(L%y`*HH%kA6WsXBBN!MW1k<{4x?(wj_dCP%B2S_nbnrwk z((75WWZB@+&!rgJdfrFaco^nyPK}O)ZOwZWH5ig#s&f$1f8S$*A6gGZ?VWrcmAFsZ z$G~^+)yY2({Ls%}v=dKfVf{4gFz!u=(%o9~F|gKr?nVi+K_{1q`y&OLHPC)M9lBvK za{yq1ZPqI_RKGFCe$&(!KWna=&sMMCpengaEcmn=)ToL_krf;cC(pyYQ(`3(0Xu8` zojff#@cQuMCn%SBEAM0pFd;4s?F2Wf0S$v>#6&~B@$txHN_ZvC6t=!2nXq@-PO)=Z z;Lq4>k_2@86LiFsIY}&oB?L5bz$e^ zRvG@NDJMUlN{e)5^{nWfFHI^mFrc3Bh|TBcfH{ta7K4O)U-+QZC{m4W>0&I27`NFD zz-sReN$%7Y)q^~gPv81@!+izLqcP|I2x$gl!_0IwS!{YwR(qlKXS03V*6{;n@Rx3d z85Q=Re^1Aop~(gCo=tsqz1M=B6%L5dLw@C@#jR#XueKW%9=M1;T$+S{DsI4E7%(Pi zo0`cN26E9}ZgHWeUMUQlp5czo3ixt9LI&g%zBw@*X@^~05H2vN!?R=lE{z{ae7nb4 zepLrIPe}g9%~fmq$IYcHKNFT-;JeRK+8$v2eQ4+`YN!lo=gOING4YZoy;f`(t2)lUVzH% zf?jtW1OO_5m0eyV&L5mnP@7g@mF$TcsvP+ziuaDnZRxL*?d#h;nhQyRILk+8lhvI* z>`RYD_nP{t)*fDbw-;6wUWni~W?CF6`EN(L;n#;G`3VH4SN7BgtU3dHN}Bb!@DZiE zzCun{5M#c1`jbm)HQ=QNGd7tuhSm{HNS>ZEz^}JLwxf{=z`6mSDmmxAI^jO(zuTDPT}%hJHh$MXVZ?ZV(50CdskcAro3Ap-qOzeI7vuj!0iRwK$DKw&;)PFS;Ii>ylT^45p-?`6YdULiLh!aJ z`bUUkG}FBAtc_$t6P4&!j=DItSu+;I!2vD*_Yt`2muF6I^HMo_ZhKVg80|nJ^>vcW zDJ?*m*&t!E%yuFOv#qstfH)#_t*u2}3<&<^?#ct)T|xW9Asfu)2%Xo`d2nIlu_+yx zcv$L#>Tkv_Sy%3V`OL{=utv`|wC8lcj!&aGw(5ayyCfy;Yc$5#XTb0_toc5iIijFP zq~>1M^1!XL|IFYvwa#LOuf1B-c^coN@WdiRlcCc;b0=ZpWn|0HeOkr&8~VRm5|nD; zn#W3;yrb0vy=zVF8(@FfN$GjNlWX65?O?rwqm!e-xz9OojMQD$!!{`lm!5wko_{dk z%pcLkK9S1=SijmCdNC5JUOi#dR;w2MBOP-{GN>K~iW{elX-Q!p1WlPJQQdqMjXU@VM8CcC{CXPVEu+<$a7>^fGk$`FY?tvM`o z^jcZ>N^f;ww4=PKTTQzGM^XCG1ph=qSwWatdk#Cc=Fam3JOWyI)=Qy59qOf9&2LS1 z0&%9whp;k;vzASY()aRgrDMXpV7L~8n=9l~-0X-)*=gMD!d_H$dpv*&81EQrVm1kL z_y`!1QjiqlJh0!$d9}Wi=l2axlLY%>1Ei!vn3n^aoiue1Js}-Ey<#*~TNHaS$mfi? zPooln(@f-R17jTdg)!!*C=?H=haXMhlyDFQQ5bZ+tSXs-tkEovpWfiT zBjen&fu7a)KFfMZZzr(b7uYhUlJEsa26t{NY_dIrc`$9cy#<*u61V*ksmXt#3yCG_ zDfcUBU&U2;?Ky|q_?-WPe0-KuI61uOI823sSGKCmvT}k%U8zWR%&>iL!*q>}Hx!p+l~C;tW2Ng1T4)swug^a3f;=~j<;(z*TW91;CAcTKqb zrY659o84(Ankz|uDJO~y=yx3B2xqdB!Lq7){$bzn#U5|c7clYgz`j58e_Oo{Hc-Y= zBO0teSl&r}OZ=!o%~=ni4xg1$@uk0jxE~PH7>XSzzaQzzYP^(!|w`*(qc=PM^)DAj`a{#5b&3)IOjWE>s@ANeDU-i0v z_^_HxOm0^Pu~uE`LM;(tS!|Fjef% z#5GoULc1Qtno+DBfo$Firz2kzLQGeqwSHv;8@oue#nk2d-DUYlcdhz+zTQob-o=3? zi3WD$ooQZRt!=jg(roADaxxyi@yqI5b|6?((xR6{%&AoM(x*SDDm&{2_cea%q3bJB zjqu#^n+WZzQ*m_DKhSLBFEYN{E%0J}g9P*r8A z0=n+f`zzpU{GCe)u+pfPP90e)Yc9;qEKV@W#fS@W2I-%F7NZuq<9+v3B|WUP@9fK+ zdVB&BM$u36(QeUC8}PWuq^Z(v_t%^EiW$nRRmW57ZId?_h+ zM8BeSYsWA~n%=cH>@o2F$#Mzga{k5{&!r5W40tpl8yU4Puy0vjZuvC9We!`vS-J*8 zN>=uZJ27FfX$+cfoYlFx3^rDk zXqzs!8Y%;q-??J_f&)LIu}`F@r$g&^&ssHWcza%bAo`Sp5vuq&456bY2YXUz`b$*W zvk4nKecQr=Z6-ScGirT9ukrC-&+%$&8}}F1zmLbQDdtb4=>PVU=dI@Em>pADdCZKj zuo)v7k!6?Taw2tpz81LWVoNc4v^5@>Vv*^d*gVZp?elmOLftB#qB9DEo%4^5EQ<0T?-?lO~W`JyR(7IoUv&?3gr@q4QqT)9HA z=gwkYE6y;%s~hDoiQ4mrz69sGJ57*JKRq1tQ%yo*%`kT$*+Mlo40S-izu^sfk{J@T z97SgH!_|O?h|TP*0JDf^M9K2-{)z+IcO}g<6370IFQAmE#EcJzrq#ZVTE_%`3>rRG zJ*FKi;#l~t(>tHnSUbwPd+~s)>8Zc4E676XA-DR9sX@{OG{#llZ=5xZ z4M?JmEqx1YElIA#)ZkAJc6|0{9@98|CpOI3DzW$wH5|iqVuq)9H2`$Jk`<&nb?31| z>Tz=y_bxi!EQ)so#DJWgu)qcImzri78T!K~Ok(X71gz9gXx#8aMl!!R(UVX>P@R}| z%qnIbh5{UqF}42#FRJ^W&62-(Q8%mq#)}?bEy|+f1=~P+BQZ!B8w42$StLgk6u#zM z7KTs=d*|_K>A$ndPsb-fUS<7+E!S@wr<4@;gw;>SaX7oD6`5_W!*R{LN&i>N z;eGAP#l!KS={ha*k;$L7hubMZ50`qX&Tpp#g-ny3JbKa=JY~uCmeGv9y^>I6YgP~a zrSp95>siS{2Lzq<$VK1OfcCzJZLFXm*`9VC60&Y{SSY6-?uw7v*S-nKQcOclg&(&( zhiS}dg+z`}!&!`+J=o{zcgl1fGy&ET=7*9(5#KH3I8gkjk|NE-f43{3E*a>`6y%t{ ze!5g%oS~aF93XqDK>fUPHIgdUFgW6wkX37>b0V;NItC;gw|=^hr#{}ePv;s#lA|bW zh<5Iw8SC|>ETbs#BFVTP-+vWPTjZ}Q%hi87Yi0{qf72cd1DlyhsS~wTh|RnpNLI4a zm67STsgPfqP<^P=z}!uEbpd`k9AHfzH%W2vvoR13*w%a&)~<;y`gRsbh~LEcOdxy! zPJ$W1pUE%xZ@$jq>+1&$m(NMG?S?zko6vL)BDY#t6D1^kUH){8u-RKjru)CgODllw z8Py4U0#Bp&jkbAXmv+R=RWIleg5I#-+6*SWRDCjymdbLX?sAmWx-;Z(dsbS#1(<9H$1&s$R`Ql5fEC>nXZvcGfp_~)AsVskP1sr=nuOK*2tsWf~OW160M$_ z(m{h}$peHVOw&h|!4${i?$+Y*$9Y3$Yn}BErp``~ry}kB_AI<$&THCigSb<4Fhcb~ z_jMw}f6N+MmBpKO@k>v>`iF#$k|BLP^nV!qG63wlTuJVpvP0&-+-^O$Q$GfQm_2SB z&hm>*0hlQ*{nnGGV;rh zCyxNHBWi~s&fBrEjLQ+vzAD0qU~35>WraKjc_5DaQ|fuKfzvwmbomKeJNj*Jj-Wvjey=1KeZ1zvBQoBYTyOR;Ms^q+E7#8~H4de%d zY|1yVVUV3#wCV><`G|{f;o`yrLr=}VIW#?N{8!aq^GOX zYna?}BN6!2Nc_a6UEkLsR}bv@pR$FJFCZe4*?FLNk|z}q!>JAWv}c~$iobX;eC@=;*lIonn4r?+_LlskusgxUL}T#5-0}i@C&Kk;cH8_QsW05g9t}`h zDF0cE9V^KGEA4%=V9)Q-8u$S7_gcvH5xhw!i6V4XB;YGcG{`|V7G2*IDj27Di> z^^mu8qL@eCz;xj3)9G*P92GE^YWVhUqHTiN|D>sJuiS6*kRotm=krTJ%EM+4sz@H~;(aVGZ{>2(vDcDWd{yxwdK!je9pU!;v3Y!wCq1EK)EG*|8xIl@qP3I8DHm)9 z3#)O12{hwVj-pB?fS=_n39=HS%zL_eaM-CyjC5+Ll?_@}05f6zGWHipUeH?Kg`&51 zL+&jcO{{@7SdoI&j>GXDM+8Lp)_#{MG`yQgK=9Y&LJ07J-X(yM-K5nlcwKH2z^%rW z=%JxeiSE$ZW!4)FGL5kypnmGP0&f&X2peCUe{l7QRT&AKgBxl~VaiLxHATgIbnki0 zX@I%)76=yV7{H7}x^*w>vGyNjlT)WOhfmk>e2Izlm`vM1b!-qI%`#|Q*f}L+MO5Bu zaylTtY{=4=Yr*cjz5vBMe$*FG?OSA5#n!+Wa2ho_ER8KUlBWosm?L@I zdnx0EOuQT@kHz#+q(F1+ObNVT1;o7N+B?%+KM~$mq3d;%CpF&iBk{BJfOsNSpZnRV zF2~Ul+`!wkVR->s&UHef5XY3?*2zuBBHWB`s;Dm_l3G3yF8m{cY>^=WebBGH?fwv5 zo{!^WVc*C|?^K-`Dz4=@p+3Kdkl1U%yJaL)$9&x!5OjPMi-&%&q&)Q=+%i0ib}bBr zzh!jaE&l7&dpn$PyY@$F=YUrIzj)kHGjuQ@n%Jz;%Ja>0?-2HZ2^S&8ErNaLh~@m> zl7sx#7P1%C*TeB}o8Pn;DR8n{LY!q~{Fh>$WB6wTx1s|*p)R6h+q)b8CW%cKEwYU-a3b&lN5<1r zdKmDP9x_r;+cDv+Ua8dY&vksAy9UwL0-`G4}ht>5zu9e1CJ7%E+SQ&Lrn zcxO92_3kx>tYvCXucBH?U=5I~)Gjtjd@WFLPB*SbK~Djz*jD$WNYQc5cm``$^vOU} ztU^KuJM+u6D<_8~_+f+E)eE%g+q?LTGM9i=7^)0#(*OH&kwD+i-&rjE3%AMd@DRb2Z${h^G&YxkaGlR() zdqie-cckct65ehR5w%@}0=U=w^Z;mBBr(&;1WUt%M6BC3C<4=yj37AS8#1=qjL3`a zxGL5y((htoXc4z<3}6iI&TT z&kVo*m>@62Q$)gy(Q|_DP0TpeUNabDeeE6+7{S@ejg@*+FUkjh-a_5a_L^*=j5&DY zxurNFu10u!^!l8sC}7z*a;P1e+*q^Cu6lMg%_Luc*{LxAcWPcZ>C5acxS0d1CT9Hh zN{NN=Jvr^OpPEqKf%Q{z574?>xZC{i63kHyelW-$^i>chn@)3U&S!IL9+Z~-ptG?A zl@~3wWuw4-M(HLFTY1N5xfYRo78WWSePkZfz8%xwiQgNSI}eF1Dk1vKVcp44=l(I0 z;oMJpH{#$k&-4oCfZZlF4%MR_{1=Sz`FaYYXXjMP#RErSjc~>g&&*s^$}oaKihYeb zBys+3v@mg|itIaBSceSG6;zKlg2yv|!F-ymOH}%kmIXwz28&A&<7F`l9A zd!`t27B}e9zI;Q)sRYotz*eQOzEUpzTN&&tYB4IF-OQ7R@xYwm59q!q2gZs@#plTl zwTSOG4uT?3Mb&@%FgNw+f9o)v_`+k^vB@d!+?K_jvekF`$1?-JKm>3wFhb(Q0YsD+ z`QhoL(%r=1GzP%=&h4}9^L&MMCzBSCQdr3N*}X^mF)^6DVLHzP`khNQ%w5daf{hLl zNK)jCoGVTcX(%p9|w=&9qS~z3s^qx+7>162MIXzcbD*u{e zUHMSUZ@1^i7;Bsr^d7SKB!3=$ltPR4oqAi=e0UrkE9s86o|9H&IxEU1KFSOtZJ;!- zcATxy&IsRUTqi5AzFi>6*-0HevdX8Ni~1v^evC(5`>pcrpjAvm-t9{XztNj(?XBax z3Dcu_YJ;7b%%!<^^?r9cbL&KT-RjEc&(!5QiJxfktT_71eaB{t`DXoy z%(RbXidSy46&L9qH~sWa#<@5okggap&l?*hfl|_Vx%>v$={z$TA?)9+@AzhF;}0q_K@Hyd=eOp`L^w!9ZuASS)8Yj6xAmjlDKkyWru)Q!kj zo$+&kQt|1m|0%WPu>F_R@}#mj`to&w#tCLhr24+w!Di6onf12K@l+I@ zbl9tlWW>G>`{xj7KU+*6htgok$#>?$$w{vRJt-pkicLdEf^wzt-?N_k{eI4RHfQUv z+6O*wP@ zFZSLtD9)v8|0TFfaJK-#AwX~sl0a|^?(XjH8Ug`=ySux?5Zqk?1b5eA&XDZvy`T60 zK6R?jsq^i8nu40St-J5;Uh7)Ft4D`hK&y)E5xqPWH(E@^fYoNJ#Z~VM$Nf!1S2oHT z{L=mt*OXR@<4k%m5rC{h^m;;;Wuyy|a=D*^Y=Cs^PTE&h7d~GNdCnvC(7q+yiDWJC z+i|yZkb$j`&}Vy4HETnFi!HPQqGKN`-Tk%B1%Srjt~n@)j)*YeKLML)QK%qeT(oi>mxy(0F{}zn+&A!LUeaT zMm`3UJ)I89qJ z;VZQV5+A&wh!3UeZZ?;52O^8me9}F)Uw@@|H~mhz1;zCc0lK{!vx&3s^ECVc{SY91 zoGg;)IEc}#0Sn1IQRhDhmK6W0OeZ)hn*2W_a862>QW|Yf)YAvgFw7Z?e_)v9G9LbE zO%FzDysr8Z`&P<#RA58c1Deo0ur9K@J{^x8C4+PfV^N~2j6hS+0p4%c7_Y&V5YgQ5 z^G)Vj-GgdNsuhs;x5gD`R+%!E?BvkrRO`IU8l3f;RobgQhP{l3Az#Rc!o2( zNxt~PN$cv3qqKQlf$gwD0u4VZxdCi8i0$a$F!^^cPOrVjks;=J6$$!~g<=snH}tvQ zi&k92?MH;AvW+u;zmiopGMEI!1oFnEj&$yv#%-Vk$?*Slr#4Ij46kVHR85<(P?z6B z&V2~1#~4(gJB-LyI4YrwSATH%$0}p+%!gcSy?8J≀WkgnA3iU@^LaO~s6k0%t5$ zw+r<9kS&rL8M+oGdA7c!tu4iQ6*Me0(fqxq1xG*lv%LIaL^Ckte&Hlprrlud`-(9O z@|#oU`CJ(IaIO2V_Nl?e=}|%2)ZmC?K1b8nzqO;KtqgZysM;S(kL+lvP=}i?w`sgU zlGaeVEq7@aBQs=ci`1PJ%pLup3)`{+?V+ugKX=l_2fG61+pIW5`cZIKBlmj^_-zJ28RUmb!C|!h@Vs3YVsSmFL$9A{;%t*j^R?cCjV6 znmj(3(%9)Vj3<8kYTKnzQ-{=R=?mvHnVA9l{U>O$GX?Hf{JSnkPcuwlp=lz^^eQoH zfm0*|RDTwe*38Pd!2SXoWbHv-1wU`h`?iPJzl!H8`=2a)%K`QED9*H)c!AM@(~vRS`_lG|lj~ z)kF_!RajBQFjcrZfoKdN3C?Zbyj7ATiTHy9y^J6S;45RdSYvt}nGM``Ed2rt)Fu=) zeTyV>C}E0;yRUx;NO!6~o}-R_HaPxZl9_J)(1ARQ$KNsZC0x)AM+Llih*) zcv#9h>w-Os?c$}=A+qBf_rF3m-)OPT)jtu3Iq7Vf$H@AftFiyaCm@$7A@hz(BAa5a zJU1(tnwj`lM44dz22?53=j>Ebv*}&-U?Y6`QKN^0f4+X07F4b&td} zR{XcK5NQAyPn@Fz;uEjg!Nk^ zxIo1kI0VT5;y6>tZaPV2S@GYDU9q8eJr~^y+?^PFYFH57|3k!VbaoT`#Z^cf8@NiF z-nStI$M^ek3#-nl+ZU@aUQE&SjM_2y&mD>hD^ogZeJxu~_=cHq%rmw3t_j1fAX}Gr z8BId0!L9@jSg!Rn3O0T}$u#0R#k83j_wO{{*SG*(WC}eE&liM|JIRyaZZh=Wx~i< zH;?+H;Vt*1<95#9iz;OxQ<5Q2_D4&~*Tw(0J?(59zg6(ZX2V81cih%{ZaqbF@1=qu z6b?@Gz!oxxffG(RI_=r=n8oBi4L# zOt7RVHZ~*r=Fv)zmkAHRv@G8t%IS5KPZ7Wc`lD#Y{;=?A4nPItm1TGXzy~{fueC1& z@AJ3_cu==T+3FHle{vOhwA|lRB;@nFvPmylt>7iuQFrP9)qA)K3)wU{jQy=oaQ^^! zuMy)9u?}5JhB0N8iq7u9q)BAFxqEf}Hl8zK{okHLSZGegVrG8uq-9B{Y$>{j9l7qA zs#<%W80=X6t|GC)FeycWQz_4jH_q*Epn%?-nM0V%&jiaMd+2<|PZ3CSL(kgL=6|q} zfevat)LL(_jJ(6%L#3lre*wt9s(oK~`}RwH2Unb%% z`!jAWWmft&d*N0zOH1$mHfn__iWXN*o$l}8ec@w|D6(<4R9IFLP}($Z z$Z-F{&E-Q7=74$@GWPA+8sYj`E?m8tG!_SK!_}}3>%0+Tm|1GUac>&6}GLDF82wDmAp z|GfE~9{)_CvPDqVme{(a6Lvq5TK07=*NE2Q{lgz1^%rtqq8tw6d$wCf5 z6yl{t$C$Q%u}4{-O8%uPmFaIL1P^O@txt*(;Ssd1F5P(Zf;SYXkA*;|_%fdQ6wN{a zM`~MA)EhnGa5%E?e;HBT^Cw@%jCp$cu)^JihrsN^LpBSJD&dV&-`^OCMjJFt)^}Rm zNouaX<9z+UtWraYcv|Qgk zh6DLRtQ(G#$Q-j(?YY+9zX$sFo96<`ed`v4knwq8Yl61=|6y*pCDJth5|;j@_56*k ztbi*`)kLp$#Vm(cW^Bq*jWS+J{SQs2N-FfT zJhi>N>nv0^(yrDoLkAubvcF54YcHe2n5O)x6i8d-Z?9o2bLwHor9HkqF)8?RvmtG%){$6l~#4S@XdI z9sg~;(>V8avF%-N$Y~`pG`)k%Ez;)N-?CHNE5p(jXO%0bCC0am_VJpb0L?jhye;6H z=v4Yyw-h0OvxWHHRz+o}$7{_MPjn(82(*}q(^M{OUXbFe+E8mAKtUT#g5`q>*bkQn zT;dYL#t2&*rqAE}t9OmK44qaC+;uk+K`PEwb=%oj+on49AFRtK?TlabK(?%wUq5ZJ zEMogrh&jzy@UoeLl-XXvvskX}0iBN#e&;8B!Bq(}lwiOeZ#Jgf_&o%(8|C1|7j$Cc zkchq+o)hd7A+7}lSU4b2755!tvSX{T%BScR3`6aj-$o4Le=F zO-s~Q7)jojIp%Sdw(D&==54A{zwn*$OZT@^#NE9g7X!fRGAB1-9_M~fGD|_^^>qxc z)X$JrO8gho!fqSop5mQ8cHF!$tn0-${rxm`bv4wY_gXEFJpH-;zmb~i51e3M$ZvOr z=D=uf@Cu(=bl+N%bfqmJdLDkp{pA}bk$k3@>jQ-{_bWqbIwc&#O-boS`!tNI49c=f z2-*oGJ(EcuVY>c=9e{y?Y3u3|MKkG=`!1e`y&hQd@m705U>$?-^Ji-R#@9%8Ee(`q zLQaWJb4Sa~q*Phe@A#U-1{fbMlI8oFF3v zlkDX_743KN!vtcDA6s9^nVXS9m$&(cAM%$X6*i(F zS7`DoMB*}(Z5wQ=%8zPPSVAXZ?`+rRKV|3dA_ZBJ>gdceDjO;{s$W$|EaIZ zF-xzqSN{nFQrhE(v&B_es3Ir8wsbAJoPpL>zxj$OGkbUJ9Qm9~J#@6G%r$TM)6-Rl zZunCqZwH4Xm47oz@FUYQvklmRLik>BPo%x1?_?>^pHOiZA2t6GNLZ(zSoY zi;nd(RQC$u8srA2UYu0ulK6by%Fnyhm6c8#Ubb5gLjZX7I#5HQqyP%`cz|Wo7##T!XzN{ z0*;it4lHF9fhX^U&_&Ob2z;+5E)HvW9x~=t198_P7pR#vQbUR(03!c#-z|B+Ub9g! zFgD_+`MN}HH4+*BXVcy5jU%qWX*y&`c=AAWC~)8j{2_7)^Y<}@p8xL!W+|bIz_UVt z_xIp)z0(0Ndca>phWK?i@Dt!tiC;hOboKYu$ND)C8yj149e*h@z-H)rJKsn`uC1vA z(WH5HT3h^8OM`enz~r@Ok`~gMRH&UC(7>MwZ}OI7)Sx}<&uJoQ;6JbLo)_&}3qWOc zBNRzm_rI6sI0<9s7bQzfzov&&b6_0rsvJz395a>*zdurP2jKLg)2H9{iVA8**3z7{cv2422U%24)ASwAw=yJ)yRLIOp?DZ+1#1w!zdRKGXi9^ z!7{HE>nexjZIRzuDc(X+B8KA|BD8bu+4n!$3~4gD4L#T{A6;qd4?)B`6qs2~$qCG& z!+UGCZ=U?@{X&h2_d`72S*8U==QD#m9JWMAD{UY{K54|N#4+E`sb?_zXUj+*w1wX= zgiyXN+DP-cW+yGE9}x;r)$ZcmoTZ>_kW)`*j_LAz@Y($8esx+Nh9Lbe$cNKx9(^Sw zx>KK7=atEpFb5jLC(u`Syc!-n?il)X^6i2kT~C0qYn>mqX26$tDHN0}K^x*2m64+= zwtl>9A*-z!Z|O#m!t;~3p=uC=0myohTp<0Fx2^I(s$j?SV@PdntK#C}3owTC8mVNuaUFH)V*P_(-GRV!lQ^&6?8MzyJahd6^vXJD3|7>3F>NPm**Z8zFEVtshCG z3F^9_D=-ICka;P<`O&||44yIiDZ378$K5rHUDDOLzi+`^=w%8TCMMjiSiUmYyO^TB zyWQ)e!wWr=xprz?il0=nQw>ZQMKqVBpP!*T9^u0}0~AvChV08{ZZhSRDB4rBb*@mU(N2 z!vqJ{IW>b_E|u6l1tNQCRE$|8A&HCaLEe5lA*yB*MB^!%9b4e6vlTaN zdN^N=lojUk*`5czWOx&dMy|gFMTE0wfhqK^|eWw zEQ__#vao9=C!c1Jmp1cZjq97cQat>y_0wytp>wENQsk*d%WI=}PC>?(DJo3eNykz0 zvPqI3owWn84;oYn;3d}xsXZ$iZMp?2PL~5d@3O}$>3I`)uhqV+>35W9bI-R;K8)N_ zufIFo!_-7reUbQGbRzp~X_w_uO3$PG6rnvlr2D6wa!80xe$f#K(KRHHQfgB`&8Wo{ z;fP{3q<{u8`%92l@uO^{Y>fg2(GN^Prhj=cSE)iX8LiCC0`PZ6rt5qlnHqN*GqZ|2Y8i zYjhFKLMY!x1jh@EMi+V#ziwym+jZQ-`E^v;HOl0M8NNZGLYDGGxKs%lVVUo)t?4TZq@SSp%%Pedd1T?;-qtCf#-RY7d08=?SS}on^!TpP!$&t3@cvCfP z(jcdpar%awpM&6qz)+r5v)cnD9hIWG1mRa=!I_x5@8(O7T^>l?3hXvZMeZ8(1G0$S zr`8F#mIq?5V489wzELfUTGRQ^J(9e~@s0^yn$DiLImy*lcxtET?POmRlLEP@mh|i& z`+NjPC4UV!b0&E746L+3Mv~3(GA}sC6L$0*@f+b9XX9PoEx31i5pzCtU>@n(F4|6B z9P4gCJKiQcB2+WGu&5%^@EHPqQ>p?<4d(T>7K`3$!);>*%&HsUrD7s!P$?IhJlvdq zqn3o4hI2sN6du>27sSx)(YQ$|uS|ZSOs*3GB-TNaOOo%`p`9#H=L8;4FglAR59C%y zF0i|k>y#o(y0czeLD+xY(7$x`6eg|}qPN^=r&j;aF~B_hdIfYsos&`t3djT61U7us zFz^Qm8*Z08<=^7XF&%XVl8dy|Vl5fHJ`^yGd7IYKvpKhmNWxz5Is(uuY-$3oF@}QE zzf5|n+~bAp3AywY`xf?YYiaBwcktNZ2&-aw&@;Jxbx*F zR@AoUdVixE84*(SgBp4PhoumYm=cxp!Gnu1YpVimBlPiQ5{)s<{$^Tdu&YqG>s8#N ziEOO>rNq3`agg$hE?eR?`Ju8GUtwMd4cai7T25e-NGJ}Kl6ntgt}Hosi*(>+QGK8t z{MeIUq@{Orr=EJ@(#LDnqC^1A*Xlzc6@25DS4RwsN{kd@t)=&{cN5x1Z>=1{N+oUF zFlsMULw->;>jt6DX%UGdBKYaC4Kuj`9}%?cVe~Y}*n$%tc74UFe@Ffk$D9OH31~if zidtD|9h@#BGkKQl0GQxPO3LfOo69|alR)C2(&$BgNo6OEaNv04f1}=j-9KH?2&$wr zD6R&|GHI-Sh(^GUiWnTy{(7d79v(ebHevJA(eup&1|=-FUTO~Uum-324aO9Daxw5e zXfQg1YKiDA@n)daB5lJ${S|K|5j%$8MDb=8(^eV8RvBwrnZyqv`*If5jz}9g=l)J^ zk65ZL4zb2K^hmdEJ0U)t*F;e-5^Od>-_&&bXW1GZ%y5s zVHwn;1#Jccb%vV;q>=kl^>A3K7~4`6!11P4G5Q1Y+q(uqyB%-XpWHC6=nZf=!y1_< z(k|}`mgBBzB$y<6W21H#X9;o=4*_0#%oW&arsl9OP_!+=!{{OH6z6w{?)U?b)sZ6_ zp8W3fS1KLXUq zMjtySCTW0nA_j|$FD%ttF1Woz1jVHps)4|aTB4mGV4~CmDQqI^(M08f8c|11 zqar_O`@Qs$4eZj`%9)9Ow${({lzCnomc^SizaL5?5?JQ(V!I{^#KCv^nmfU+J1dj* z9>>>;$K5{15J^iu!3O4Q%JJR=m>%__K09dx43m>^N=NhU^f)%C827&8;tF2<>yKM_ z%TlH8O?1VwX-hKndBUBeNe`iC8lf^)Ej<^Pj9X)U*_wdGF>tBKK6P$hzbcscB4HCy zW-pT6?me02%HUKRyb|x!7^`@%dXPe+nx$&O`{>FJa}&+zVU2F<_OMgAs~a>2#gKI7JU|^cEeQPLM$Z{O-^=Ky0 z-N2g@6hsNhRDdw0GGZX|zJs6%qHBWoGr|!$iEMc~n%LtC98aX($eEHEzOupo3@5Ap zBu+0KK)~s$j`S%Mo7stDN-W)}{w~w%^ zmHWXnUAT5S)YDSYL_0Sl0cJgKlkObw&e=;^CO1vKzg@$ucRQsxj<;0g>gO~Kj#)t! zrnXir*lbE*#(mvP8es!a>ogxUUiNqu9i^XoM&zfm0!vP&;^gTXF3~Lz_V6_&CF=5L zPSWCcB2>(`8}7of8#h|m{=U^f9j5p?@F+q1Yn1rjwv(4^4Av->l9U@3{ z5xb5N_!>hcQgA$!JD!`|ClJ?*7YWifL+rGgWNF1s(nw0th@+(F-RkS)mW=ns zr8Ut96N;pcSfk3LZ)HmHleww2S%8vkr=MGIO`5$!Rj8HE$q<(<(h&_KKMIn05C28- zgH9m5H`DHPvm+>{-aA+&jfi7W45tMtZP76}VhwxC=sHhHEg_o$x+z8?r9aQAVCY(L zv_e86&N*qzOUBLZ0(0+;)>3_2CC_1fZLTM&+~pE%rNaW6o8NYrz0)97c9}rQv@<~= zSh1cql+9|>h|(;hUXe5{=n?)?aVb{=cG){ZM9*0N${(T*;r+KOhYJkCM(BLw>)Sh} z;tfCh?p(twn)*t+RN9p{pY0y+ggcwAa`Yzii4)+c%$E_frdWTjI+;;SS6&GnMlkZ@ zU~lDhTU7HWJ0}OIecSLodv!wH+VA2AG-Q4ybpp1|q<&`w#QIov^uw#%@*#ZJSz7Uu z-3h!}F(+jQ#Al-+pG*_*YoSVd2_?3>RDA)?sjP-aBP;^Mwv0Mn-sz+PDyWkm^5@|& zk(0KfmdpW<64h$Md(+vI-Wqpokn9bgKBtA}L1`pd)-+o&%G}%NEXTY+A?OrK@-0Cn zS0Lo5Q{lz=dj9Hxx_)>sgh`ZoQ_^2wr-T4H{sc6$<^%k*Jus(+f8D>b3uSA0Mj*|5 zJFCmoHv;!|HBu5&54m}P4w|>sP@IDg2mp~xE>}q{#F@cjp|R( z4+{pG{PjdfA7pIlc_yZjAsH-fq+>6q@Oc^2=Vf{JG@TZHKJ%joa_G2Yp2_)kY$BD(CF|E>AT{q*Po!V2$ROL_jNdkHd};rRo~Fm>!PlHr zU2iW-ZREaGr3uS))&zS=Ccs`8BK=3}7<*E~NlaQ|wcH~Y=8Fj83GZD^O&Q#JrV?#* z+nZao%Idwaj4|VQ4G{jhwS=zm3C`}$M#%6Z%|Po9q!5`S78BW2tYGl2!El8OA+gG9 zyg7~0T{bl`iiUY}-QaABheUKT4*b@-&|V{xu^JBFWPAI=!_i`fAl(FOEUeMToRP<+ zvajJO95{72rvGsLZfA8gbRvmzuTjwGT3EQx2y4Q7IQI1voa3GcO=Vd(5O?B@H<;A} zUezK+r!6W9`!ET5*JU-?Bm+!ff|~Hvct%=MIJC>k~^o+!@JysfBwX8;i3C2ZzZD-xxlfsHwf;4>2Q9 z+jDN9de->p1?GrVNhV2NCby|3iNo(Q!VmbZsjiHd)=}kqReZu7QmFu}CoLHrGgh=R zpxGHuIXar=-)j>$Fvs6~$v|3MMDD4Gy|LrmMi;MZ=-lufl52zPuq1Vr@lq+#L}Wjx z3AZW`z9WMeXm>!2D=THyk0srp@M0}?@)%Zgd1+r&I)ea-SY6rI1UKyA6ROw{QCFG~ z@cFBv?ut3ywN_Yvx?9h9)`fIxbH#iTldvzB8SQXum}rV>kC~)TZOxv4RfG!#6+NlT z^K4Z#`EJ1R(0o}jK}yVSmTDM(9s{ZaJK9PX(N zI+=&vG+*`H7AdmU^^URHOKP+lm2=_HrtioF5}Ld*{Y+~TfE|tSU4p=D+g$p z`eBp_A#U*6Z}31dcYjME^C;Yxt}YEWSy*WAh^1$pubqaW*~cGUd9BDColGF=F_Fr2 zt{ZlWGX!ZZ-^;6y5!veWDew-@+8`KzNrqhKuJ_%Fzpp|#;_+tVoODt$81E6PGyra? z;;_%^O&{cmNQavvd!InCdj4%3)TO9#gV~v$KIONr6xmCxW%h%KXJPiF!x}Nd10T=0 zl*1VoaRYdh6E6LBZrTQKbPjH3XyM264wVTzl1-0OtmB-wy6s!l(B**j?QV{=iz!Zi zE#o^w#;jtE4sK|$?61o*9&2r-U05UlXtad+{z9k&{zyLu; zmov$Mf7(b1T~5=L^r3?k>7ZV#>P!;a@SMm@>)Ro!zNk0gtWcvnQ1}MiXg=g_pMS*Y zSta*4KT@QIwZvGi^Hv+Z(L`JgTqQ1L?KWbb%=38V#66)@s+dNW`2*Z`e6c9E^_))) zn|RP#tx?OZd{|~~)9uCS8gFa-mR2WE+7e$zDLVvrPTMnF_tNUrDF=}Wd7I(7*II-> zNd*MPT||lsHcMUx#MS|qFes&^5Q}f1AOy$Ir@;Q_Us3?>!&;IxkX3L;<=zFv31$SlD|3mK3YYWX00n#3W)C))T zWEFG&ou{cfEEAD-)Uk~dKwJx;q-`YZo1KANRr_wO3#e|Bg$pt%@H@HMeYt_h9$O1;x;LcDi1KJoI!%{Q-!ZcnB6;4wX>S`XSev1sCW486z8n=6||%3nMS)wcAhG$Gkg{IlF9YuM^W~UNQ{9vxqLHY2xJ6O5M&2MCQmK zWF73j+rYp!)cCs9l<%^cGr&5ZM57+H==auQH>PSs^sR|H{?(I&_+UJ~ZDGrfS3DiR zc<8?hLXal)K2Y+xQELDq3w5+RnuoPc@UsQ&NOh<@o|4O=$ zV-_%L>qrzDB+xa$DAy_=*8s#_>Vra^Et{xss@8&a4snyvh)k)%LBMt-{A36rKx`P1 zkdR;L;21cSiMq>ahu99XM=sSU^s>RO_qn*WSL3|HCD8DKSVQ_Y_>?KM)GK7+rM|Q| z6a}z7k-r+uYZJ)WUv(xhMSy%qBG{P@(=$FiiQrN3n5X$#P7nRm=212$zw+1`&BMc^ z*32Nt*lJjB$>cT8A!1h)L!DhFBRu**Btl?L6Kyc_YDi1W2bbGBVIfr1<`^*(La8j7 z{;uyuG^M<11{)iUlJ`=qvF^u7?rLu6a!D!CD46P-Gd``T0IC-Q3>S0qjGI;do9|VgWU^!sHvp_A3(ILLq&U^5Y zl5%rGf_w*F5{z!DLTN>hA%gocI3BEGl%i~PkbS9`q-zuOH0lvwfxs|kpt;IV`qs+w zwCTc7t>cM6J;@nRShZh)K@{Sa0%a$W9>tQuUCCk67EM z_oQksCOz{|{Pgz%0UtUP%Q*i>Z3icxme%_IK5PuBkFca80m=Khk2qwk?C2@{P_YW< zrwlOQfaKv~HPpnna3luOe2FfT7308!j$nn{Lip-k+gp$FPK7fMK7I^zXZ%mHGh>eI z9VKKtJdg<<R`x`xFo6`$g7AS68bt0->~)8ikN+wt7c%Dd;L2-m;k zQ^gG>Dr<-NGrWU!HwdaMBjvOd&%Wo~0J}=uLC8O8V67c&2b20N#O$(vS{PD{Ksx(j z&cesw{?bncIuAj2`17Fu7`J?(!Zt~typ}*#U^9qf%Z^3+So_P@MXz0R(>id z9FBi|>(TOl?clfur9hFCjPV@4-iGd`t=U>93HrgkB4BQNje{CB*-OYz-0K+aU9B8Q zVXycT)5yJ2t*;Dt2@L=Rx8*D#&i=a<2ZtKmF$ z4i12)&bZH8iB`EE07~*C6fw8@aq3NjWc4$55Jj3@s>iQSMpWdxT&JD+no?g&A7hc0 zdq!F)xZx|WZ)$2bdZCcFho2pvH*I9=|eoH_&zU! zzs4%?Pr^n7zK9Y0*Ji+fd`To4eT;cx>5R7*Too@4Hs1S{I{4LD>m(*NLq31Er}v70 zBlmgM2S2|H!KokcN8m2f-`UXT*e&_r7xg>67~1})zyD66Wi$VmpJ!H(Ws=dO_ymV+ z*bnLqQtk7Je{kdy5fvSBJ=+j_wbm9QAsb(U0X{>n%%3pvC3ub9&3*F8^y(TUnn>G1 zrpTlm`+t`b%Tj9+c+QXRQ~#CL6CxEBdTOJ;wGQMc9bU>b0tW(<)vu!#!pSx8OjKM)XN!GC(M zA-bI71zxIU^5)gOmF`*vDR{FL>~sP8G18#kb0OVao6aQMxw0wPIhar5Es&D+KTldk zmf46d-!UwVs%%bJ=zCi|4DJ zrv0lY3VnomA^Y^f_raC0mh>bj#cgZtPW74*;w$V6*=mftp_jE5dI5VWJ@Q>JP~cXA zFM|3jbMBjr02yw_Nrx^vlB_rDtao1S&hJamAmfp(K}a~f=7n!h3vU{(t=Nj5!i4*z z6FodEoeOx^<8#J-X}v;}vs2L*rD-SHCyA^c1h&-cwqdpJ>jz&Lx&qCgF~ji^nr}qn z_WF~l@mnlEd6&Efn0Oi;oES0S@VG_4_^ajU{^#_s4*^GzlZ(gv(o)VxLV9)!1Joq} z(JEb4cx%I=a+ra>tUgrNk}U3aq}FheErsWs#}oL|-r(rhMt4Xf!66hlXVge304;>H ze~`P}7Nkpx*4W%!yoYcC3_*8ble!C2n9O@{jVZ}|Cbtt|NrOzkL4ZzpFg@*zVHY{vP2UyO3~nun230(0|MDt`jR~$*jqK4 z2>;x3U1ux@{hXj|EP2)YqvG66#x#HYCMP9sUYks!_v_NQZ$XbVvR^^6#WHv9v$HtN z{sPgU-@P>eEOb+*6;W9POE>yAn6KjUvLQ8rC)AO)hY)NftGCXI@IMDhXQ~2S^ zINL9kjymL4;Y8eem^Q4BG0nb5Q1(o0DNZ=-qJ<`ctrN^>I5%JAC*LS7Wh6!%FI9xO zyV|ketg+l&^sxroV^f|8BT{sWVA!#~SQuM~@=tAPBq9hOpJ(S|QV`Sr?}8KZbOA-C z*$*$QwVp8b)_o|rH)HJ=hREO$CNM&qo#BEMSg|%6TJDeo5i#X3wEAOfWjNs&&LXg` z+-EH#aD^{!b=dwITj2M)vRLrnx)bg*_u#{yib<9>!Re&TeF?yhO-(}z?d_t* z_JKrzZhIS5e+w)E6*k6TixZzZM+0CqDbdNiuuv2nLke{RCkco)SItW51!sPKVy#wW zrrb5;BKi3hmaEyOgL;3xZ(`Y}XIZxF=McKXJ!fj9Po`$(y90aC*Qx>(^`rh~ZK`MK zTi{7YdD$g{e*{ou#Ww!qtLo`!W8J_2V|)UA|6Ioz*bK;Zt{0j*ySpQW-7@r8R6@5Z zk@-u_`G@j&+JA{r+JmVD8KF0M-}aQCl>VAb?l*o81_>CiL8I2xQ+%YW)_*J}g>u4| znB>VPX0@;gl#9#dF(p1B=!hwf**@zq{_~ndhAa+Gz^vE+gaWEqw{TB3ZN^E} zZ=kscGvasbjM)>o-u4J;dnrqy>-x(W;I7AnO1=|EOy>A0iIUH)Y5)kYSz91QqE4~YjojhcKl zO!h;}@Oe$wTd0RFr(B!r%0D8JyXKjc#MR0C=Ew#IdK&s34KjUuXq|J7gc`M`7#|vs z+Q|)MgrT9g*4`wJE;n($D1ia3)@~8}1jU;pcJeK>F%52{8 z*0VN$PzZqd2)72nRw|R<*I2sSk0CA3jVb;2iK$_DxQe!4Oj* zbppQ;y?d&^(AWq(^2gFg?PZ#n&p5=86{P%uC$>QaE@b+OOuE+JFuVR1wT#JI9et}D z3WGnp4h%Wvp2Md9LHIJP^$YWmg!%CMTh|t;C1BSGAx)0Lv1-a|`^VnprHsy)%oQueHbMceIIg?|x-geL+zwS08(S9jBOs z@uNnwYHU>lJt5oM%-v}}i$S5qaxt1R)@-2gvIT2*5{~^qV#zz4Pq>|d!0*8)FeRmt zU)J&(so$o9VXjFwVe8JQqA)6*-^-uAi}%MHx7X_I-h{-#KD0AE2{{v7F0Lv4_8C7) zT-A~aA%-yI3H4tksD(p=I!#{rC=aggQDhvc|m75&yh!{zVO_WOB|NJZY4G;Y zupemIUmj~BBt#?7-fRpJ%WCt%HY6fZbXgvD-c3E+cZSd5DfrYWrC_Ut*ThiO6_AWd5A$4 zuzznnGK=GR&%V&;?`$mWg1j{zGgJvT0=#9CE@v9Jygu5QRfKPJYX(~1LXRvV2l-sK zy-`IOh?Ci5d$`A|dPKKJije>8jZdE+B{X+UJl^&o6iLiMpp~MLRaXbKZPgygu+`Me zXH0X**kYD?d0?*)y}|d6SS_H7czC>81D7ibKOBw7JqHkKho?K6J&8FIawBW-{Zyc` zw!Wt`%V2%HjNVcZNK)m}XHic|N$yJ7&+RB2BFxWfol1GH{;9io2mTQ&na)eQ?&Ae2 zW@Yyg(!AF=Za`Y#(QoBJA9Re49Vjb1n0@FRIS4JTvd@61IqYi6j7&W0IKcR5c-&l2UT|NHVBdq44xj{uaeT~7^F1ML{Tcx<_#>b(EV`2LXP{lQv+2@3u^MV} zXs4+%uSy*Wdu)425J$h~9e;j;XCfs7<5H*lcmaHpb0`K68kG-VGP!@*{tBLNJxvC78kz@zrRf4f&tu;2G6F$XgS<{dk1fGB&r7+Cjf+ zwv^XR_T&2sNI$!cBiKC^-CRugY2`Ho-Xh{vigzgHUby>f@6>>`1fFbQp^Yumbxg$@*fFqU-$3)-&1RN9NTXwdbX1DQ;Ir)`{(s1jM4jJfs79tCi1Ktd8*y@RqhLp? z9!=ysxVSzNF!Hy`?|3I=1eetijav?QmO7F6&W;fDOncJF7#q$FxK>zZI0-(@{n4KO zTKTwaT$SPlxqahm^Lk70c0WeTq(Yc!`hC{Dj`pkc4Pj|AarL?`8bXmggbsfZO;krQ z4j$!%Pw7UD~MmSTM7%()BEM9+K|4UZ^*n1|g-k zC6IqrwWRF3Uh5=0aq8I*z_pX0K9qP?5ikae1sLDXAE6sgZWpVgB^S0IjEDzR9qC5O z32wM-k#XyjimN4M??gsPey0_&!@l=r!VGv!p<%7-z_*lO60&tfH0-Xo|7owu?*myN z@|eCvGjwAZ`(dbDl<@ln$;RyWjPW`xMbBd|ZMwA_e-S>$;kjl_jiwKaqaRFLend3t zOgdlaE>@x#KM@7<>FsdrD{^_if56<1uuCJ{NOO^D_{9C6f)B+7Rk85u3WK8^=UpBr z%t?jK60l`*PD7UpclpemY%^v|Ui55bN;N8Hpm+Ah_IKsonFUlql8;?&219fxkf(=l zXQK{-nV?oazg{so#iCtbS~t}uMOn2%xY=~cok4VntFlz1@!YV3=R6VYh%vhs{pffE zn!(?s04K2s9yfhhbtmi}X^DL70|ipQ;e~VeFzD((P>rq)#mzF{^JcVcjzQOL{%q|s zU2}o;S0vqAMpG6R`j?1=gI+@TW7N%u>rXeEJ|lmU;k|2MAZ4-tc39%*82sx-sFP1n z86@-%xl=DMdak1)SjtTd z9Ena4`;=S4t&-b~LdxWgG9Z`}>|6_GclYdt=nU?v`I@~jYG9MhW@DD-3-tFo6U;H|_h$llu)Pv*=jMLQ7|4wcBM94}kyVJ0jvMKt z*Ig;H*VPByG*w$MW{GA@iyIlu)kPIwM?#F)D=THh7*-`s6^XrHQs&AJuSWkVKw?Eu z61DX~9t|?kn?9nyb^Yxwk6BxG4B!8vtgzEE1}=N{!ZP_4edG5Q_*(30o59kg2@GSj zBr^HXfNV(Q1GZ~NZ?WKEXpTy-=6Ah*g+{K;#^Qd?=gB=xvZ+EB!zizD=2wXZW?2~W zT>g4zl>-GUk_}pmg?+cr3jRo0I2FMH3*<5$ZgV0UqpFtiqK_txw_3sp(LgzDXm(3} z^ap*Z2My)uyXL5yos$dNv=|Tv)Zf8DIc0X)R!1K-T?~Dwc8La+vUN9cyBKTZOBv)n z%McsjW?%-+ruF3uuKLRE@J&^Dd#B=XnlrU!0M3c*3T;}hvLO6G-|9k}?ve>cc|uAr zEj7vhO{jSS=RyDb#>k_9*(1vdj}1dhJ~w3+ox$>z}@B#0|$xGgBW4Wq;5Xdc4tfn}8^g-#}WhY~Q-qT9tR-~Dcv zZkd`(x2s(;b%h;!CD<#X@KC?^FexnBi+WwjJr>ogbfaFb!2EeWdT!eLrxHm-dofNa z<%e(s04m6>g|+!cc?}Kj@@NG=YOT)qB3kfFsKEO*!}E;l;T6#M1z54j3c53zFv^hC zO&JA%lK&*OS>Oxl)MY42PG@~LN~Mz6Dk))^5xXg|e)tXv&2w{YisZYBUt^iYdfT#? zg=_)JH|*{JvA9}&6zjQ_bBAr+d#e%9FWwxc-nZLQG~%6YJ^e^w?g(9Yi!;V;#w4z{ z{gG&~l|V-HJ}2!XZlqQ#Che!7f%gaiTp+{v)s!-PSbG3CV)p0+!tqWw&clE<^|BCp zZrmZo^;~XrQS~QGerjoei}g^Y<)=?`hY0;EA|rbiAE94-oe9{E`}uV(@2Y4osL|aM zrc|A4L+H|KxmbkM^{F>=qh3YcEu%Cvd@wzRm#03~+uwJve_Awkft{E*xv0U+C>{;c z_mH=MWnqwj66cPbX%aU_y#WyEL_>}Xs?-4IeaVnCQaw6bZ$h}7TGWQ_x#2%?!_1Zi z>#cn?J^aRrOw2RZTl5efwf7SG=Md(pRtG8`?cqg~MaRaJc26Y@4ssy zJ4*{>F+3(QMA&lmCM{`XoSvuy6(~DIc07`i!FlUAiPp>}Bwe>{doyUXk%SmnQ!4(| zc=-mZo9WepN>@ps$Lihcv5C{!yZ;e27x_=_N>KCf*BQ! z!(F#w1&z9k0^c`H;*l{G&q)RaC0kNJn{oFvxM=vDCZNtiVyL!`;E`W-6hr zLumyDbW#IJz~>aBwO*!(>%Je+`BX*>J{u`11ms%cyv9x}_9TgIk@at$MO1l~{JG{{ zeJNm%y(QgN5A^EkWEIcPKW(g`^d=47jIMlEEkfh-(f=HSeiLgt>s{Dy)S0I=OOqjc zS3TrtN$I79aZ1JnFJpYgezP-SwWr_^hq$POIYK7n^r%$gY4Z*M==3( zC^*Vwgs@mw*>yRxt^l;q(6MWBC2SSc69`^P((A8R97s%uC;&q)7fotj)KsomLArZ2 zB5&vkHOH@H@oK)c?l%E8>kD_Hm;rZgs=}89HEZHQD`7Lz#3~~~2F8`elOb0fhO+hmdg^;# z6G<|a^=x!M%!7bxwU)+E4Q&{ozXxF&WJRCky)&3eC1;{-gigC)pmUwbr6gey#(P-h!TY8M3)evw~3PIj53Jm zL-ZC=l3=1Fh)(oAS`b8uZnOj;%BT}%yeI9xpSS$=uIF3p`_}r-AG7A1v#xTky7zDY z_P&TyvOdg7HB-u(zC$slu|+ltrLntSZe-&3_a;R98=O^r>3BI4tqqd=&db@8r`ZW3IFZ?Jb2RhZ`N z4pqqabboen(OZsRYzv38_qIL|mR;$1wK*DIl@YamPGS&f{;>Ppn-%dYrZ(wiS_GHX zZr+}Tf698c7@@A(ajDNaqPyl+`K2|Q>$cWs?_n6M>SVQe7dWk1T}Yr*@5dgz!`aT! zF)bFciB*xL_2HO8)pTyho$t{N@}EC7H$jf&?N&0ZO{(r{HGa&sxVH~w=5gj@sqcF- z+G1X1-cVzqt4(%eaEdhM*dH)+@VqM7zwxcYG z6ZCF-yxoF0zF`CV>#${)q=5+Jdq`M2=%P~QYFJ(+){}RzIO0OoMdZP1dV_Mib)L%5 zn^p@DQv-@~YVN8HpU*3H48}_xoWG5CpG$~%aZ;A!58;f@OmZ=^-btHZ)~odRX4{__ z$WP377Nlk#zjb!^G30KwO^cvQcE8+)-|0{*L&CwHn$7yOJm;w4*H3@QF_Ens!003T zG5RjxlX;F}_H6l^a0z~EGM@ZfX(#-5byqIe1ucb9UMsn8vl^MLt&Qp}6qlN&=$S_7 zM)Tc`p?k>v!H!bkHcO61+92cQ;)xAJVEXRd#M-&)hNey*Qm!chD$AQ=vB7IUULCVD zg+tj%TQ$s(-Cnyp)q(E``xqb~HDin#c4y7V@Iy5q#CZkLp?R&*JJ@yu0pvLOHD)nY zBsy2P$%rGCU5;e5oBRYS2)4Jnfw!zWmEC$q0%Kka6C5x_6?fb(zIoSF)rD^=`k0C5 zTjT4Tz-};d^C79zjP9hzbqx%pdKc{Cb>KraDN#zr@=^}#+sy!uqSp?F%SM%1%i7;M z795R-o!ZKDQ*J(4JnO!HKVMte=@TV_*KfhY52W8%>hxpe1?Sh-eXhkv%$T$_nHcRe ziC-jW^ilgoL5R-Jl`s2=QbfeohD+_P`sobs&cz_VX-PN z6q-Ni3ImxwBjG8_`DnqF;>MW{G@9LI+Bn;U#dGqIDVnHJ3C67@zFfxnU#S*H2Kk%{ z3z)h7blHM$aYD6tcx*Bn%8L3o(Y}pT-kpCr=`eCvgv@7ew&Fnjg=Vnrq?~K;uQv46 z;Zo5!w-EMQPppm4DV5GS&N6V&E|Jnb%-w!QT|GJQ-B>m%N#k18nU%f@(Q@ez($m(n zvDNAjxl&L0VxSt2zArcL28?fF&*_e=sjQqEgR<*K$#_=ngIF}-{{rS}f@p3LR7{CN zuDm7bpl4WW|8(Ei?|7*%)4Aj*B2AH=b*w7HNF6`R{=0(i3W4%>w~+iIe)GB6on@gD z>P+6zy3b7ooIf1ecFZpouP%bN6JfIrKJ=jeW(ea8aCL;S)2q!YpX;udChan(?Zo>} zI4@r?YYGZ3DtB{r-J0a^rK$9iz~nM0<&5sAmn0J1oTyHHEi6iuf7VQYu)NOef5;Fw%DzRm5 zi{s!GoYPk%mx@ZFN<_!JXZV<4X;v1vE+ewo`oZdGw$9sJttq%eZp1{#!gA@P_I)fp z-IXIX&qpn)^-Io|@8~GAWH5!ija%uBcVb%^h2rME|l?NXK zm=&hE0(wjd$DH~}#VLv0V>2FQNbyvsSF^PS4~{heuU+%-vV7y!UZqU_)b){`tB&OG zJovbCXVQBf9#uBF<8!^jQ~HDR^;q}0_z3z~YET86kIR*b78N4(7|M3`Pm|Qs{d}Co zwn+F^gvz5I-fnjs&lEG$q|yBIcGMQ}=PHk=V9Jtm+u)W^zP=e9OXA;_&0xh~+?Br8 zgc7LN)qn;`5i(6g@Gg~BQ9x{kj$FS^$6*<9wn|!=yGd5UQt=-4?KuhdP@&R;LP`D3 zA59jB7LEi!5tyTc$+4HaH65b|WanrrS>=7dU+{--N(F+!kb2q!X;p8RC-GIa+@h`E zdZY6;AJ2&e^Eb!2E8t5)EPrE^fU7ve;@}sE^W1uziA`g>^}>a)qWOI-+##bm~5zC(+ zNP1yFWReilVg7&Gi=CR+l8K2av6n;cXaN87wmP*(_~B5XG4_;1bDf;~Yw`~d9eD{7 zkL+UWN21ql6IWN#WFQHUoF8$}0kiVIn-lV@AO6>rlK-Fl|9I1RQQ+f_H-t+1Rla!C z=hYy;Uj2y;s8akP2U#G3)6*Ge>pj&rhMp!TCp~+XcVO25oaYGyP|*FwVSbSQb%19D zu^#(Fc`5)n)mNW@mP$ZE{DhDPe++rQ!Z7Fp`Xle(#=T$9{>`k3u_(@kt+~b#Qp(rQ z^p1TDPA!hO6!C(L^fa%$);A&`AfS*2r^`I5e1~|Zr}=f>0^?%|55>ck<^i`31{vZ` zsryjG1$;qhi$LbWT_90+4z^L}%x7`$^R^~%`^>QCRs^Mn5sAHY>&G-x1m2HlKQe!Y zlLfx^&kb|Z1^mB$ztH1;s)+aJzoYVX@T*@5^fcqti9vt<7gG0f2LH?m_z~w~BK%SK z&zGt^|CBNo2{hmT&4s+1ej}U6eN#4OT%@}C!GnjkwjZS)8XA6@{$AFK8);y3oOE>3 zviS26MVm)z+Y6f9qzaxz*j-Y40)=9UC7%4kWCLUaoAg z0;qRC+r`wS^=8HsqZW-VRLo6e%YQW~_- z2Fj3qY`EcFXmurC&E5P@ANU!`f_={#oeEl?F~1c8)Z*j>vszbOf+JvJVb6}{0Z=*; zNh@FG(l}O5*Tem%Z2q?-ASjlPdw2SdV{lfa_BB!hKp1U)0J+clC+F%nevpMzr^<0! zL(`M!AJtw?R19{1|GSUJUtGXne{umoR*e|ced$lWPS?Q&EZ4!p?0`u-;`ab@DCy;V z<@%np&DZu{v*$$wHvs9Dlm3^Pnxr9u$MPgQyOgzPUtQJKeC zBJr7N;3FREQp;pHqhqFyN^KHQp;Gf3-b>o{FYT+nqZ_^1NPA7kCBXLxlanCNgEuDb zB^JXoUtqSW3G=wVzYs=;RnVtBi)Ja5s4l)o%gcR5PS;VQVn9zk&{gv9MtW#Lf!_&P zK&>R~bitg)%Al=dssp+~$JzoI`Ldc8$xAmw1~>x1WuMTK{)?&CFF?{b=u>MucXar& zKcP4g6a?#D5Y938SzRChu}ae7Pt$LQ@-7=Qdi5)G1cR-v*He+3)welC$%lqLI3^=l z4}@?MJ2Sw%Iv9+_D=({-N|9|ZU_Ca*!j>i}Lg(>y>fV_~1|*S6mceB^5`WLx67dad zNTL^pQIO3zY6_~|y$baY(HI=WYJN01-JX4f-HA!S)Soa5?8GSeKgFia8C#(^E(rA~ z8h=MHG;z@>DmYKNX6%0_6wMC^6-sqUL?J4TXc*(+fFsj$KLSiUda~J%>7jOdOxeQ^ zDAotkQG(vkglg${u3f+DPv7~scvGk;XrDa3%ihJqlQOSy*q*f6Kci7&;Fuu!|v|Z|fvR_S; z*@%fd(~rAY#s(&5h@6#>?!eID0lnfDe@6M0PrXv~gkaiOGlm;B9s4SbQ??farP#s~ zolwfHAN&f{wI!noiY_iSUdmmBb5XWq9w6|B?zw|!u+$F)aKrL~|0!b06Qo*B2%7ShYbH6qH5K<(0myr$%NnFRI=sZKd4i?p8 zXV80%xXAyoL#JtuTcv*BCF&T{E?M(fRwf)dlss-0{+;|3#wDjQY?swYi3nbQ9>y}k z1;Kvm!9MD^SbP&sly7*1TKW<*+%Jl6MAKyk?>xBbc5l@{?t$y3MtvYLPU{pl*~5^p zy@^7F3q~LG?b9A`F7RVjE!*6bTBVu-L5E@8+yXUT@?A4ATvTN}IkMS(L#epi(0}G~ zCK>)y+C*kya!;euw#S}ShR63?BW3p%r1#`uJ6HnCpfG+!aG>!q=Kcp0VQM!j3xvZ) zKicsA`|)Z{&Vvtv=F{SA+XLvBo2?n64e?6uO1_|W^dOAmF2@}-Ee8+w;<|)mXi&gD zZOb(M6CO+n!3g0t$%kSI5R1fMXAknwP{ykq?X)K5apTRlhLZX2wOKmkA(A;EEVroK z^;me{uSyP`%&t92K44JG7dfL9uQ*F8RD3={dKQM%+Gv`h7j_Meu__v4sPS^VEMh{Mf?<3?}{jlBJngv=*tPRO$HA8Y0Znl9WB!;y^quDUMP`l25`_ zzd0@Wt;xSB9w&hQvU_$}fDua!9^Ayt)*uyg@_y8B!_AC)gN! zu0@Z-HSegb$0=vW>6cxUiHjV?p=>>PQtRDNE9AZEn)H0WHX@7F=L_=5H>}a65M@ir znD?2ZA})tAVvNm9YRgX{LUT{cNyyD8yOzFY8NW7i@P%zR@dR!!BHfkJ6L0uTMTFy8fh{hc`Z0CAo8XJv^YKKD+T?KFCxR#C{Zj;rkGaDYz3_ESr+?w*EcHB*$|Yev zcuHvCA7RaD09bg;6VztoNwMDH(!~}C>VT3ZQk`!cmS7Wc#^oTnh--XZW(4tV{lhe) z#8Yinv%;~=t5FYF;z^U$tU~#kH9wY@I4LTO^j-s>f46xD^@5bPT8=bmGud>&&c*}< zk_5kJg*+eau?cq2x{V#7FKzFw^S+g_FwnhPc7!URXy2h0TD|B-9|hq(@iZUqpQb0t zDO-H%r4`Bo@Iqo9x#Ga_495cl9`o?8MxBHo)E*Zpu5Ip6^A-uJo%<8=CcNvA&ukI~ zm}2IU`&~wW0owN4qJiZ4FoCR0y!9t5%+ts2PuW5`iZ0qb*tRrg@*s+Mt+fxBv+Hjd zlyX!CQU)?lvvatB8M?QFk|6bLg9nYv$<#3-z2`Ee8nt_!Tp}xf)m*4WHI=n=g|X>I zw&IFRA&J4TYwgV6WH^u?kFU0&VxNwY^~QL-+-~loAh36{I@?+Jv-Mb zTfYQ*+iUxESG3QJW_@TsyvogYYFn3SD@GkjT5yg$UpSCJ>siK^?lC7aLqoss$+$v3jvo^-tBm*K+ntO%9snzvZMqgo!$6v|KPT-XgYqSUh- z_I!sb674Js<7#5Xbo6m7tig%hH9%i#9$8|Gm$FmXq1)Xpc|1H(ZelyeahGx>mX*yn zn=1gPl%JA4AX?}{I9tRy{V8PlgcOjff|J}CYy5(uhPB^bx3c#v!PcTpA?0JVmiaj_ zhZzC?uVNGwrdPLECT8QUOjbjK(>o%`JvxGkt3-Obs1#AxOK2TLW=TyWiOADleOVL7 ze(@qig+(ogSMim5`UUtO-TD+7Y@;^5xYpP1>)AcnhrpYEULfzl-7?C#;a zNw?(dq(DzM!v%i45*Vpb)*M>9{;6lfEtOcntr;V=-fTcsc4xY83+Z)jLyN4HIr-TnGa#;hOGOG9MQ zVuB~B5iS-A@HtOJL@}i4F zs`-L8!kaNBuifwxPg$!ndOAvb{J*Bg<+=l)UW|(bizwQkWA7BT7$l-GnacP%Q|w{OYl*+nOy}@D4EX${OKllu;5TO{@U)D*rzVM@qVvJ!7P8pxYL*b@ zGoFKEgHECksAHtjGWQYQw~QOwez_qN-_7bQV`_;+ert@?4}mTAS=JFWG_&f(tEdiq z|D_5BwQ$nJ{qoxP!pa#qq9WBBJ>?kWD?m8@@{*{J2((nR5=N@vzcVD+;3&y_WEPC+ z4@zOb!KZ!bntCF4t9+0M6xvIg1U8){Lk5W94XBkq#Z3p9I_7JI^6k9bmMg~j(c_O_ z=<3;fsHGESBts}jXs6>G=9%l4ZVD`lsAUATj~Bh1BNzI3k@Dzi1W`BXRrZVNri)T! zT@iQD>azWuudYVBkxWXk?HQFSa5H?Wy9ZTkQVyarXFg~@9h$grVEl9!l*nN<(#qVn zC>`YcO`iLiB5*>y%U(-+EH8&uobXq9W~1Zswu%70`*{t937u;b>)A>BduaPHdm7%@ zK#F@sz?8xc=+A0KE6r+S#;MFsi$3q}%Uv#`l7TKt9fadXX$WQ$P|{dQMDW$W!sP_x z%B{cn-=62IG5QYI3x^BdpWi$a3z2pn&vQG8|3qtkioH$)Kfd%0FZ9;zFvVmuy86TA_j@fSggT2n=jmS0D;&>w zc%Y48xhyvp66O;MWi>3#11*iWLJurAD&9*oCQ0a}q?NIx!o|UmI}N@URtYBB9-slu zW`K6T^LWnMED!8L9a4TKHz|1PT)Mw!0CS&;w`g2J9qj~SkvfW+Z|erFu-7m>&o{0_ zrqq=9qMEvQ>9RMuPs``+Qg%=1X3YO8_Ix`6A3GVk%+rN@G9M}{*(874?@3sTD@$RF zqJpNL4A<$!h4L{=)VWjrXUppN^RmW8Hr6p>%VBY7@_?^S51<|r2(Ly(Lfp;^f+Ns)dV?%$7ub9*CM z!_s;#NjvW^#)KR)K@2q^+}jmg&;RHxPIrhw@LK?~kc%M%Degd*h|&Q4Oz1j@+H``J zeqOTtr(WzCf{fQWVL+0@e#zM%!FSLv<4L804CVh@MTaFr@rG^l%v%L-@6wmSZx3VZ zHQn`)0wrmTWxiechX;KxqsLeP+BGed{CV)?)qt9nzXhy+txWf|e;d}ZuGnVVx-k-# z%$&uSa}PjFq5wDr_~_p~qfdp8tN%;!g|l9V{wM7V_&78GtWf^lruSsQuK*GyF{r)0 zedIHOxyEiNt1E+Z`Sm4x3)BCwM>1)%mSMG6x%9n zdh#?#N~BfQ)SP~xR8djGzfh__Xy2zsDq9Z+J&ldj>FLVrUA@F5X1Ie1sOd~4S5;-@ zJJ$&2n(1jhhW{6kK21dhSJ%>gsy~qAGhFk)z(ChI$=ONFvsb)bYp`xu^s&qf} FKL99V?e+iw literal 0 HcmV?d00001 From 23a0f878825d4e0b9a81b385376b8c70fd13bbe2 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 4 Aug 2020 06:37:16 -0700 Subject: [PATCH 551/589] Delete autoenrollment-policy.png --- .../mdm/images/autoenrollment-policy.png | Bin 150662 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/client-management/mdm/images/autoenrollment-policy.png diff --git a/windows/client-management/mdm/images/autoenrollment-policy.png b/windows/client-management/mdm/images/autoenrollment-policy.png deleted file mode 100644 index 61421babeed82e9300c84de20684a24ac1b6ad12..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 150662 zcmcF~bx<5l`)vr8kU(&^kRU;VySr;}cZbCt76QTD-Q700LvVMuCAhP=F3aWp-rslY z{(bA-sp^`Zsp+1sr~5g5&ePptN(z#wD1<0)-n>DTmJ(BW^9Ek^HQ~H_`}*bunWFdg z2Is6IDe|Uzg811kroqH_0T`*KsF>A%qoSnc|&&3Ue3Tp%{1fE znfKpY`rI&6xEd3SIm-uYd~$#R`Si7Z8&s+yXanORXWsa{RK;loia`?q=IOP$eU z9&4Qg_Hq7mt@)8^Tcc@jd|RZd&d%(SnE(A(2b_mCm&5pFTPtg8a08uh_s?Guc#JJ~ z;NF)@UuhiQS;myj1hLdSyks{N4W;i)h>~ z!C%I!ARzhNgU{Oh&FpauC}+jXUH=%`b2*^r7GpZhBm6)rbKid4K!~84R9j#rMx)b|AFHiQ@6EWS^1VH&n-qB5 z;dOtRtX?fYkbnGrqGF_(ej zDXwZ(NuR7=I^RmTT&j7)AHD6Aa5acPXfSa7^b(vpw;7DM|iwdJl1TJhmoIJ|;c&szzK&(Bc?{J%GO-IF$Mw{KU;RI1hwzu6F$ z9|&kHu&a(YYc6?orWG5zxhEziDU0`AG(?9v$~pXg8i)yeA-@dqLy>$Q!YKHHPPU4$ zZHq=BPwy1JD~Ecab4#=_@<;wN5C}_A?5sVAJlLtYK}y3HDDeQ1ORGMq-JJve@w2g} z1R(tbyhIuJhDGo%?J(m{2JZ*OwjB7n)ZueN@2?`m$0Vnhu!Ps( z;`o+?t-^4XS;eAM)5S_s2dlPJwy9q*Im6MPF@E)wB{reH_}%F>P)%p%{frbC2DkCinilT0vv2x>7&(L)?!9!)_&XHnN}xhN2DSz|a*}M*vu=lf zfX1L(O`p!5U_g?#(}^E1$J7jp6UkLe#;eJva>M6#{KT5^XCri2*Dj5?*w{+qeax_$ zR4%k=E~t2n4SZV802!T$=dh?LbkZ7{zvPHc;%pK!gdhpMs7Sp>7C8GYOT19fA8lvq zQdC+XnC56&D|XCPo8ER28Ge6gv^9aFP@Cx?@iqE}yT*Fk z)|dh|34HjvFi+#X1&h4-Q+hajebvAoDTkF2O+DR-u?R>ZL>oXUTuE!rpH8AeuY4aL z)n)xhilB8t&$szPC?8B7#y}}U`UJu-Y>vYk**M5DTDu_>-&)BFa^zv{UUpE`(_PF1 z%@=04jO&EZc(U;7L)BCNdPo%!0I2&6i{GfoQw7U-i3UKZ*pvJ#sG2_uL4k#0;RyeUwBBtlhYShD@5Ut>zIg{dN!K@5WgQ1~qnPqTYf&G@cU$Wj2ih4?S@Z z=>8e-LGbBi_l5YS8>sPodsr>l(c`^icGe5JS?3H)Xl+Ya0Q+3-NSB9l4G7}K@KnY? z-MLLaFA^}{8cJfi2a)I_AP+J}K5a8A;1r-OhoOy^hQ}3PY&Rm{tNk6?eri7Eq8%T) zkzqo>q)g`Gz&L)mmq!=mAM>E%cjWHPZH%J2{lPgwMT#SM2$N&W`ke!6FcPAN&|sbt zi7BhrC+(V)55Xm?=3Ri|yi zzDQKFuINcj>%-7S7#4LY#TNdHX66Bx6gVA^7j1w9OOgbA8>kSB7v;@HCZ11=`9cxR z#THX#yq5f?041`5W|}8DwR7NxP(iM~eK+50(j+FKVG!{1f>TnrBZ1x`Rm@JdK5X#8 zF-sLlm9DTfxwyhaUQH&!)ZGcEq+zD)irU1WEN()`F&s^zkZd{cf8VJ0R4tHif^~y5 zjj6e*{L$hoR^Pt7>b9DD@I`9#ZBQ1so8CZ`eY`v&7VxHu^^gSMK_>_E;BtC(FDB-{ z5yJA6f6Lz&rz-cjlRQIcj}P6v@nsB*#AgFgWm$12mvS7r3aVcWt4l(;wCxHP)Clb;4oEvUMqx<66zphZKqqF&wy1g?iVZAJg?9qhi}wxYmPV_x`d zEID&8dbLE0`Rqm&AK!P(m7i~;3)<{6-S898RfSUFTR5W&GS%2I4?6`*&ozo=c>K%} zibr@(v-JAu*Vz~h_vHzg`U=^Y`Es?=1-uUJSw5=0%a)5QkJKD=_X+WIttzvRD|;Wjpm|Il#r3A-d+kHFaY&&`Y5rMW^StY z1Ab0t1X>FDjC~yqvk+S~{%2l`2`9_o7yjQP#L)ERlc*_y#YX8Bjlx;HjK-z`WYc~~!$Qr#~7o^IG-ET{YQ_4eFDLKV-w zchEFFXbWU@97)T45skcDh9*~!xIG)$gk{W>ihsUd_%8(;K!|tO`^RFQ?OD#H(rU{E ze@E;2dJRdv-|7DLHxiu6)pxJAfplkfc;A^@SS-%ZYgH{ca1npTCnn}|KO^;8UrNO~c8wYg0W=eSdZ|NKQPwlw@;67$?Di^t?%GSQL& zy@JiJNJ5RDFGEuXlf%$d{QaWM+;5cb(sIG4l1bw(N~QH?25NlR@aI>)R)BA>Qz?pR zw{_u{Pc@qpR!n_h@t2SgDROzLH?j>7+ck)=U2lhp^Xgtb(OFE(Top)>By2A}P($cVIE&*c6G0avMkKgbl3ADJp&{KTA^#a( zXkKH3r$9!beOnl;$q?4~*CGAFP2?jIR^X$T+`FV}33!GyA&AsVfq5sU#&CN@Vpo@f zniwa?m3%+3yF$v9X3B+Bh8v*Dc$NTsxx*kCy_1xf_)7H}8XE~e2G?0ks&F&ok2PSu znEXdTjB$3W?Lbtq1Pj7*)ELG9q+DzE6K5{OXG|7sR!u24RpWL#ojjDBoK2;r2iS1; zIitJzPOtrFLpi;y_8-YmO{NhiSfny9ghg6mMpk7M@Ya0p22yb(%ZPPCbD$uo4m?@9 zI668?PR5<;bbI>`MP$bSDxhbO{Ud{l{VQ@Hktr{(o!ie=Fwn|Fe^;^2LyF{E_?~s(&w1Q8b zp8`kjOJI|A^RMoI#qJpD8$Td*FcUX|Qzw_fm9WrWh<}kl&gAxmN5LQZJ)&PH7S`}k z6P8ZsymXPYyu7I;-nS%~LA5~3KkY3IBr~G=<=Fq~$M+6$Z<|(8v*CjA&_cpCY(x;k z-uzL?7)N?l~@%Ci-YJXBx1prKIhU49; zV&mL=7>E#scIghZ@!`;Yu0f?JGG?_pC0sjvL?&FyI-Td?^ykIWu=U;qdAFp@0Y7zs#t%vZ2>xsxm6oKUq9mQ7o#a01iM76s zBx(c0J09=S>Oi0drtIgN)bI}bkZgnHx%tr}PM)%60AYsKw|(`?d9)_F&4rgnI6K_m zqjbwCAnkgd@y88rbK%fsYW1ag8~A?r6WiIRgoK~8P;nnpR?)`Y4v6Nvo zrSsz+ymXQr?H&|XF0g6w2v*+B>yEfCnBZlV9Q?%oBYUcvp7wE?s{8<|Db zP8f%OFg)BaZ)ZMUUMJ!B^vFXnY|+x_FP@$w=v&#Q(&@l&=hIP9Jhw{_r3`enBbP=dSK{OHhb0eR!} z)yCf%du*qc_PV;d56;j3#HpBtOh2Zco}J;oLr^GT#SDw>THMJcYwh`T$|~T{d3kwR zTg!4^Sy>r0sq!|o+Xw44OfNWD>RgGP>@t3rR(9U4v&5)O^$q4Q3N(|0^IGd zVy{HQAeP&q9oN7rBccM+}F@uZ#QAWWFZS8;_le^bq8!yj) zu2B(DUe05~eT6o>&!4p>Vb5uWB%Ec?Zh*snqP|USkznc{j*SV_wB* z&S>SqniHfQmG@3Pl%0p@q-yb!lIVgzT@_$y6GLk7vNvi#{{&)Sm$`CvTMuJq<~ee2 zhi;bSDC)S@X5!g>`3C&r4r$+=Ugxz3c4qr9JVe~GT6yc|EZPTW4aN_(0Q{jh*Vhir z8~A*rF`0k+reCkcMdYrz&s&&6zxluVb>}kT2OM^H3pZ$^_DG^V#q}yPk-(cXFMg<% z%}coP;?EfGgNwr zzsWpa?Mk)#$)zwq|Lq(?VGy6qN2~&Jg)b(Z-)km<{DP~Tokuq8h&W-uV~)uz;Q61j zt;kE(j4QOkkS`^(W>Hrr!o5qz#FknuTT_$qjl%lni5CPKu)jlWC?0c%Iy3?@^d749mC6NTc#kQYbQdA z`nTcK`kqG`z-PXG_iER7t$DE1g7rksTo62&`( zw)=(DbhS}ZTZyuif>D>W)*zodw3hHJ7hJy$uC&pnm}<|3K;J%T;&~lJIbPKW_@K z+36*Fa*<G-8wnbv-#%P%N!~dRdp!HtRn?Yxj{Pw3gI#wC z-i&0_C0u=)|D2E)JZ{Vz=)2PyU|xk%3*OBCXsr*h(+)(p`;t@|y%4WFY>o$5sYk;U zbH{nBrl==OHPYxOsv<3Wc)?na7Ca@xQ24uS{A7!b0-$1kJK&2PybI`4@TkvKn8WKr z(J|^G6xt|A$dL4j$t3Mk8#>5U>sNR1SU8OEi&>#QKt;LcH#W5u@H}x5mi%!Su%E*_ zHTzX~b*ZG=ey^*1=oJ$!n-YPO{#QI0N^70!YttK8qxN zTE6-NXcWiQiL>HQ`hIEgT?pQK?)uJ9eRta({kuDjVLx;0v7fE=gt&?(_z)px65;#5*-)$r%tZ!HX_k06^Poj)8j3odPzza&u?LUdlcK8)-K*}>-{w~z zIvxanP5pk_Fr$9CL*M2^I(tkSMN?3KDV+IkULdwzu_)r=;LOi8T_T+*#C-Cz!majm z1#eZ277N~uT}wiIjc%rO)29#JdB&iR41h^*o5$y+V`a@#())*vX6T*s zqIpT@^~&gMi6HEJ%pEMpGqK3K4ladyo_vSTQFrt>wt#efXvy*0F0x2iXp}uP)&Do^}mbWt}s;R6e}bI&@6C1ht4QMx+Nrh6=6Mw@ghR}mWZd)aUYKcy_@XnD29 zckj7klgjFI?GGQa=7fll0`C$U+G3*h3-)ue9(Ld%jB8E~l3prD)RO{F(AiIXSB_qk zb(7|5SG0A*TwL1ACp{;4M&O0PEp9Og_SJQJ z19Q~C#rG4d3zXIJaDm^fe|5t^>l=$z-o7op#PlX&%&9G%?qi?DDqdu~V3RWAX*qAJ z&5aGH9S#+`+EynBZu+1HzmRD7WG#QWwbKUHetsw+W6)*>cuG*_tfse7hG}<~82B8f zJ=oA4d*4XhHDB(#P)JIzO)6qN+qO2UTNR#0@xowZkj|@(u9xjzKuIOfOcmuVj+l#u z;eqYN6H+=mv#hgv$KB<&68!Ho5AP;x)rhy*W%@YBe0sS(jNj*UQce?>XLLR8m}%D@X;<7;sk7w8?RMKPTdo9o0z6F@Z&e& z_bO%8=B?)v{fq}T?STGo55zBpAj~v+O;|A!+oR;0*|!1y!=^nYi^n$}zWQW7H$QWM zQn0tep^;(~J5~l&>artbyHwl4_oP452Yo2zs1lZK_pTmZy*-P|aVv@woXYQgo5}4A z_Poow1Lr(#N|O0NF9yl{&NrVR9d~EE&fqjwi|^e4zpIS;2X~}{80#ggVQH;b$<$DG zQ(oe`4Y_$ znW)bmBCH&h8J#>oOzT=h7Kcn`zeP{@U2ftT=(|!5n7@qrA4?}p!@xAKFe%a>w%7$-8!y+3(!0q4$hf1DVI#`c=bD<#!=@`j>f~o z8SXmclc#5@aj28K-akH|%}uT^u9Wvt^H9eMsw*62>&?2eAKN)3QvHaD7qpI1>meQG zZWl0{bsm+aB(0EivV3qR^9@^x{Qh+5ZtuCx2xxD#+>r=~9+&Yv+lN@h;yI2Sjm+#l z?@-q@x*Zj6&79cr3TmY)CXAZ>c4OD+T5CLh2y|I3Rl|ScKU$D^eC2=|{HMpx_8p-)+(w1Xn#+;NHCM%&amCKMj`1k?6%RZLW{Vrqvlfbk{+&CiALWgZ3^S_dWZ^F3ZNtbZ;X{K+#>p&l zahE~v)GGhMs6bLyf{GAeP_L zOiUUwZc^7w%yuB27@dsSFRC6Inar=t&4w&I@upO}R$7%DMer5f0L7Vk4*ys>S@FT2<;xLYyT~-^*cY@7t4M?o2&R?I{URLMazVh8}IwjLuO+ z3@MKnO+{W_US}uiZA)R zDi~P(NbIMvo{iUdB3)%JjCSqZY&Q`ZQX=1W98Kl}2@!-Yx4-3}C|cAYFtN!4?^ z*S=p*PmWCB#T^r%on9s^BV*tq#~piG{sg@5AVbgg+&^^(-}D0gti9cyhNx2T(|7zZ5?^%p@<=+@34wKO@L$Y4x^*q53Bj&)#cx&&==pqGCD}JI zvg5nH_~OD_0A|2j?SuZlj0+GXB*V59T=gGRE?;?GPhejiQBYof-z zGsF@_Wx4}b9c*X^fSy;=DY09M9(eKG?jilry+}qH2L^n+KnDVD$5_(uPiGn?i z932_o)y%&jPp99;cvF<=Rx-TYc~&$hYNM3VUAX3l_i{b+>yTH%9{XSkI_^Gbzj13B zgi77m$#ncikNR{>`uXqh%M)ay3tkDJptqI**x`N262 zJBtVym#(21=`wlDBy*GuGd{jhDg4RI^)RTgUzB)0?pC455dg*D?Um+fV8tG5^Ij>1 zK%!6L6iK&;{mdW%iTqM`xdyuR>x?8zZKP#?cXk;c8)$Q59<}r28#kBN)i`3{w>JO5 zn|(;WTIIvV&)JgUcKteWaO+)>#$C2m2{Y!IYg>+D^v1EkvfAAO7O zL^b5lM9_pt35yiv3(eBROGVB&4ST`WmL5=)^ILvT=0o`m3?fdr9DJnO`9u|JWldU- z0#&q_3MdYUC8)>E8bMI8R0<5Yio~7b`szq7HO% zkz#P-Azi(uAi0ayZG^2~NrEYVPu+LF=$hj=T)$x@h;`Sh=fsDwMx(-DUGRR#sF*(3<%SbnG!s03^oK3tJl_xnWb>Z>_|yzq>;(v->Q*r&ZLIa>0zeLCT6nnoJiVsR?# zF-+#PeKNe5{(;xd|!Y@#WBip<~m60ES2 zomTI76KGKQqXKCzcb|(;{&H`L7JZ{&IYQDeMh4q0Ry2o8_!1qN2X8LgOIjucM$Nh`Q8m{g`6-%YwwT&9zqYb-LLU)R< zoZ#YOqHE+3k$W#P|E9jXf2-0b^4rz}Takw!%E;mTU(m46A;FgVE@2U&>dLRWQgkNY z9kgh*5p)?M0h1aPt`(8OKp85y&s7$|aQX%(GmN~ui4JcnW__Q7@;m4QuC!@%*%Xr) z?R^X?q7shKut=WfR}q*b0Tw}iu8XQ{DS8y;Te#&|%Qt_ib?I>KE%!Bx#r;tSCyjA>CP!6CeyqX2z6A%-U{1`2pOBi`^`;Em5?Y1b4?KZ zD(;x09BJr%NStpY}nTtCh?=8D;r$Z`FDS1o<<(a^pXx4Q|yD$rW8?Yt?!$ zTSenUucY68VTDMo=%^0wy5NyO58@gqMG6+=bwB$Vj*He^TAJ)C`Z(=B-hdc|sLMi` z1259yrr+;?N>8q**JaPrHAcj{ENHd&pmq@XufTQfSms(U>YBjY4)Q{KGp*eiUmJvm>Q@~ez5j>p_F)wmIE<91@{VWcpZ4QG>XOZnh-IL;cTbfCp z&1eFpW=zYiZ5f%F+A1syt$k#(dZ?3TTR&vYe)>DBn1asvK;n)Jj9t${`X^!-Ip_B!f(LotWCorLudy{pK@~B zeI4TKYH^9Rgb$1NZBL96z(col`qg;Rr(i0Z`nt7g(0ppRggwheSk1HCj^5?@tamhr zY}ixEPHS~0_ovQOullS3+4e=f0;nVRT)#Jh7 z^pJ;{BKHZ`KN2N$VZaqiR?Kpfa6~AV5FI4o!|O*(l&a;!@pa4?tI<7WSx1T6EZE3< zWrbY}vK>h*VWOxi=Q^2VSz@#BO|ce$jhR|Mn$z7UC|Ates1i0HS{BEat`}cW&i1OObWlAg6FnMA# z&TP?YWUWyegrDkpgT$cOUJjp4YzP>ijsQ+c_ za4-1wMX30C*<5PjPXuQwtji@`9tTy4sFv4fF1Nvy5q^Sp%5dL+AG+?>#}rv2qH_X_ zXJ%6hZ6CL!Iu;H?*UvXqGg?ZT_+BP@3OiO~@>^v_Xtl+VTprK@7LDc>K&h<28;fBA zadAXy=esJ8zikn2e;6~%L9nH0!H#;vedW0!(XwxJ0?!aFPrV>$S-N}n5}UKS_HqqU zTs^48X+L-u#Hg95=R%>(I)xI&2t=GOD)~h3Ww@}X%f{ir@?58Z*C95XvonXx%jtL9 z9}owxxJzAF{K_Jz?O+4wS~T8zyNvU)xp*)^G&GJa7|q7#|i_31|!l!Y7b z=2L8^(Jl383Krgtce|r?=wrEke`X2n@;1MNGX8)tDoL;+R>R3*KEb(DN{}P%lvf)j z0s0%4;CZYL<^R?cL|w1o&^w6mEJyR5lYtscyB)2h@%wQBdj(!$9&=I85Angpj@v~}0ZncZ zSgy(PFK*cvK1Oy30^y)Q2XM5Uk@Nwg#oOwlBJQr|Ld_TE){~!(hO2lQ$;m-|!S8im zHHWcLz>3nSK2zge@Uu&4zn25C;S2o^X`SjyE|Q(3pO_tncr`I|DE8d;LGIx zJaa9&-qG{e09k{r#H+P!@*DsI*+n?CR?9+tqv^>R?sc z*jVD_Yj?})bU4erPMAagB5rUskr)N??ToT#ZZpNHkURmm1-nC8qVx)+EJVYW zlpv^&(Y8Ec?7}ODIJ$$Kq!Z`e*5c0o{2tMzAx8p5*dSHlQ_#4poenp43g%~4a+)UWn zGuBWOHbjS8u$xB_))}~$KRX`u(jSQXGX!mvtmb`n1T+q2@>Suur&1mC!-n0Et;5z$ zb~$a^&bmUSoK;KJD?uHkQM!DytBWgH+<3%}+p$nNn|BNo+8lyoWi!WR6)fnlWXDgm zjv@?aD`oJ?(y^)kS)9g34zxyXCc{teFI>EJV<(;z%=G30l@_*kMh#;Ox%>@BVjUt) zELjYQ626L*+KZ&clFAvdM-XPy$u&kTEn2XgN{b|PRn#G=Yp%%xDJ^Hp1fmd6STkY5 zkSpFhmkOA=8u}?QY5QtAmm(hh{Hlb^m7@)q5_|qs23}$c&(MW&RO&!DR=%i=<}T&q zq1Ml?prD{M+a_-qv6m*XlyPCYsHU)EXVWwCX|2rbp0YMTHc}d_Mt>IXy?tFQWJaC3 zyz5{&1-A`OaS?+lTWX%T%U4i?jRL-}MNeSHv~;~Jek!PECH1@S*pa`Z zUi|jprQoY=zmgz(d+NQbpI=EZ_kn5asz>*Phq`b54tAU5%U{1)LYfd}F(&kZtaCrR zNHztWAjdbnARu(Sd^Z9Ji+^D=8K|VRA_J=bSy)w4(DL1#xXZ1y0-cPOpr#Hj(_pci zC>jx7oU3msSKnd9jEMvMHF@k-_-T&4Sb4v-f+&3jMb+bn}J7xSdo|2C?mbg2L$~m_yyg&++FP;GEWhn{< zdin8DfnWAwTm9Ho79_iH4gU=3c^5DYL4Ugv%F#k7 z#3>Qm~y_eI5y)o50J*_e`>z5oo{tz)ax1g@BhMknc?kGkR7TSwun@JnQH#*fFYR}V*r7pExWYSsE~a*!l@Jr@(ccFteNY`Z%X8)Atj{d3;PWlc zt!%HX?riKxTizH<3BB)oZ*ClkRaJ}*s}&MmJwCMk{9(Q?{@rr8fIUbP&1qHi*!p!t z4PDj2Nnx+Gv{-D)7u+7N3r%_^!BV`cWb}L`VnQ6mT!$?-W)+JAN>ksjK{e6%4{ZvU zk^$|sgnvS>z0wLhofb0{H=d3a@y-PLr+CNV?dwJeFvF}Q7hbH5y1UZ_BJ|LTOVxgk z61e^~qN)-_E-&H?lr3Z6A@H$|`Wr!2wXnmcUte|-4mJ+xt++x!mH1Gaq6R`+>adRp z(nw8eI67?u-U1=8!%6$6vlnkOWgb}`Q>LYcKhgI*uU?)gov>78U~u1YnVzsk8WieBkpMPF4}AGf2d$f%bkdRLjcAV_m;#)|Ryb6*odcII*Zm-yb6f zZ_n7Bivk;^XkaVc`+_D-vq1cV8VaHhDmK;Dy3CYJig>|S8Fi}$rDlDAvu7UH{kk&` zy;uEP!U)t63X1}{xsMSf{935v{rX!$;5SA=!FiQlrO4}jVx5qnc4VzG^`olqpjjRm zVOgR~9f{YwEy=&G%a!UsPDs@4OUCWl^Gd#8I&;)5=NFmtqhXyqh#7tL`mikZRujd$ zCCa0fwMK#}gQOL19An%c#KuiDd2SaLDs5{JLa@-YS!_*G^V8{bUHPr*dDs7H;CZ*U11ETabOoLyc4#w)L2csw_D zBymSAlG~?&4;ofv2I{cK*1^p7B56qEy7%?QYt4L=7c<@co`KUP^U2Jnz-9 zU>Gpg7tLA*K5r$le8Ld#-)=k{!%dhrt|Qu=)<;f6DFSa@ww}yA_M~W-uvy>W(yhc* zH?l@TVbQwXMtll&^K$kZVeSwv303ST?Wh&g?Yp{-eZ-g9@+7fDZKHb4dY+2jUka$e zstz=_a!o*_ckcOv;dY#-q-tTuEnaKnq}onQEVjxIsaDI=2G`wjnGoJBG;v)Sf|Aak zl!@=Y`gFhfAn+?+AWn)NI|9M@vjP2IXRVIwGkYb<03`%Jcx$BiK4F%xxbKTZvc-7F z5k0qWYdtB__Scg9!viNM17FXM6G4<%;!SL0HY zO4JUvs}fYDjs5xPHfCFJark{n zsKEnR4!?Xmi0wZGPL%R3^u)TdBB4!I{_^8+v+bk6K|P&se)X3JtCxoQ&IT+@L9^UpH;cQHsjJ zdnYDy+r6lMJ@llCnEXaipU!86u_A@pDsrbG3(OJ3lvS&-zX8cpcpsj$1hVa zShS8bcbR12!Kp;(P^)ObZ5c24iHH&~UE0`6;+3FZMyM3XVXdZZ8ePy3^YK3+*X;p$ zKfvFuhlrF(gE^az?DIDS$e-L?-F~}dp9w_yzpkw%O=)MO+t{Sr(B9W$=Dh9=p9t6} zF48;Yem&nx^?B~_M(bD|0w4kep#-M!48(PvF<;{0d0A$Sqt3HMEn0J?MU@NaD>{4f zN|s>XN*8`4?MfNnVQOpT?e71x{s-zo?81sXq|5jLDl@kZ&oO9@W#K>Ftjid|fc=N> z6{H-0!Bb_Zk6=3Bi;zl+g=Q(yAUXc5q(>urTb0qhcWx9-om)WBjck-XdWv=V^fZM^ zLVPZp9Xkx!e)oi6%xv(cc(`!ZYbCuk@p}d10Y`e&^D_#wVp(!v$%W7%d0Q-_sWT$K zt?;KT@a+7WmX5-{4I<`)ziy9Nz3Y5-*>?F8a^hcmTZvEiMcRPmySveQ+s`yaB}6iR zufE!5`wzqaLcGFue8|n$v*p0z!7Pje_abx=JMN`03BDO7yD3dMrUM%KnZG;m;$iDC z|4s1G=>ur<&r#uGc50jP@R&wZ&OxIzgIg6Y+rwD-D&GE1J#*CetaaN(6uw%&rty-g z5oCJftJuk6*9ZiO99>_5zcoCrRKa7mZGYKUmf72Gsh`cwgnflm)QjD_1w$&48bpnD z8ctU;8i5Kbt}T!83MDm~kMqyga5@%D+8u7cWUJpCyDY)az=0-C?~WeYXNSGr#}&Ts zx(t1kIQ7r<=slAstER(ryRquof6Gy%Jlb%;Z$HVMqGB=MlfK+wUDacZQBPHe zT4+C%?}Gmk9!0IIo5Bq_izTclcbJK>Cy`c0`&*;`!Ufq~gvIz02HkCEj)2pfXbW9A5pxlu9%>zxyex>??e0WYqNf{Ic%kLdZ4kFS#M3yLz`oHP$tb zGyir_#`wvZeNlt@y!tCxeDvb1%UGCRSeTkxT3MNvHaQpfts>D|ccB_0PU*#UNIN-; zR=}+Y0k6uM%y*05X0STIonXDP;Z@kEw`hY z1Kbrk1BESeH-)t&-F1G*{xGrg6_vI46vc3~8*xv8;dM?L0tU~hE9)W)KF14G`!gEW z^}UUgVj&Mwv0BfnVi;G_Fp-tC`P5cd7X{YV(p6QT{$qcZd&k7XOE{Vl9+PQ>=Q`ce zA%~kI4zRZ}KS!{o3Y4@dXmFddLbX#8vGbPo*1)SMNg2ev7Jh1NYfabDAtEF^(oWA< zUFFH6KkDhnKzDzN{sQdG-M~Z3<%Ih2KZt&E5T=%K)sE1wV3zWBgUGzxZ&%^891CQo zIMG*xGd2=x&UF5eg=nXz≫`s1Cpcyp%73=Ws@ot2A3r|8_R2zn7d#s%xk(kEK(6 zsxsEn`QfyehC*7Q!Ks3o56ews;O#i@*cvwp5q8{^|P$ZnpsElU^18*bn zRZ^2aPm_W5TTLyvqb5tae;BlNwP~ya7FgP9X^&%aXc_qHIm{l~e;JU{*zaE7WZ0rL zNK_s2`5I0x;Ls&k$!VpiE-n3jQF7Ht5iwdk95auAV@u@{>QxQEYQIZ3o1}@W0pdwH!<}z>M3Iz>lbaZ+Z5Urqe(VuC zK0RlaC-z5_StPad_&#QDpU≪J*%4L@PgXVyqD|6+wZR)!FF3ydWc6jJSYjEpI_+EDL!uR(Ee~g({S9p(zGDdBzSIZ;1M`(3gd5K1Cbbh^s zt5E!7?8er_iMQBPqm^lI&smq3woD1%Rt`C{233GS0DA!B#M*xYys~m;pRV}_!^yjx zR@-V!KOl5)b4q)4WHkKPJ59GnY;6YYcqC_KB5PygO_Ze&lAPbh$n{r8jn$PWNVyTV0USnYhXdFBC)HwDZ(j=8Y zkQLocn<*f8aHXH(!);5E27KdHo~JSm^uKMK(@0iNT5y|VXID=o0hN~?9b(?zeOQ+J zUu2zCSX@iDu5ovQ6Wl#$Ah^4`yIXMA;O-XOgL`lY5IoShyAy&-L(`mIYyJP)dq1Zy z`f5JiHEUMYtQzAR@8|5KWT9u}6lmlwqafpNpr!X&%0UKGhI4kt#uX5e0%aG9e8}#~ z11zPn3K*lID+QntahnEG1PkOF(mQT+nl0OmzvNj~CW(B#0cTFJ;2Vvl$K3RTu5YMi zY!%^+-Y)lG(N2ug~6dcYh3iP|I5BJKZmNK24O~xaW-oR$hO-FO7 zwRc*Q>&qL^UI|22-5zAK4rt=)PlSSVoINhHt>fEf4axYpwcWEKf}TJ8vZ zTrJDe$sc2$lrw3v+JEsU(F)`g8#y}Odb-Q$(57Ye17SY)KCj?5G_VNjid`-<;DIK7 z=I2$2T+dQ-Rfs(N@OPOm98`%Vu3{vl7goci=^D zTuWT$TbP$r4*%do8(_TJ@Xg8bP~MWRVVg_z_)1diPB`s*Ti-ex-aOvkR$^}RSt?V( zSoz}Z7Y}QT8eMNdZN`E&U+Yr)-1B|=)of?-%t(c|CpRC%i{DG9Qi2vsr2Qz@TTgd;Nl$BgrX4_+l@~RCb#=s1+rR@>)yYcFz`a|v^0QHA zz{n-Jt<%Ygb=(S5sqyTu-8kO>k5dy(u(`_U*J}z9|(40XI=AcRiY%{iFH^KdYPJND`&lT%+1y_{B8qaCnykHU77QA zllu9flRC+xUc7Fqaifq~-Vo@vs1{RVa?zswb<1aGGD|&HGoYrP@QdT%~p$-%!|jU%WhHB|A5EmFE1P!kC^hAIx>B*V{%T~ z)P515&f1kdq(Bk}d=5*sm?F;{{IqQ)C1Na`=V%gTpp16w51*0*v}mozDdV_jXnxsO z3;R4jfeRw@O#=FM=xb8{MypIs4{9A^-eFFujM<<9S^OLn+&`~gAN`q^DyL`8RbH64 zBbDGF<*vb-dj6)2pz*-Z9`SxBU!c2QWEq-T@`er5SX{;|yW6Or^V)>bLWRKd{+1s9<;XT?#D7BTh zLZ=Nn^2E%Jc$cGVk&c8YmuGoCaH!z%Hp6*@$`0(i@t=sXp+Ps~&72-K`^bVn{s@Xu ztkj;+4KQ}1k7C4mSSS?syK{9`v$ON`)w5g7>FEi>5lE{i!@A04>MD~E=r*FyLMF_= zXd6K%EtI!P9zV^`Z%d%>9+tq*QJ%2>X6Ir>TyKaB+|Z}(Z7FZ7DWBPyYg)^7SbGYD z#Sb3XZ4qcgaW=5fz%-fqz@HFkBv^oDs4u%ggoaO;CUSD3c0&M3&OzWXX_@_IH2}Ld zV)Rszyk89S?lp5dfAo8J^UBpoRst*eg8O{un}-fFreY8L`3?(@=6&f~mO+QX+hB5$ zr{Ip)lRt%^CmE4f5s{$ZpV%)MaL?X@V)xw(fen{iZ)0aY@|n~1mzX(dpe5YVEYN84 zK8Uwz#CjpS$d~xe3$teRr187vt2J$lcQUrHZ{3y#;uqjKg zwxUx~c{W*M0iMh<=IfHDaK5xGgPjgz%cyd{$NBq#UtJuh?NelnZ=e$sG77C1O` z{G;1xGy3f!kDyM$xS7p!y6+Ahm7xAjZw>)cmkL4txO3ElLhnb$$%!9uk#)_*TwDwc zWaO0clh+%>meW>Qy9Pt%YcH}meec}#QNwBbPC6drXs2=`pC_ylOze1TrsR7^EStJE zmHo$TtlwpPMl9=fR911&fz>!hGe9WoDOk(Jx9)f{RNdCp*#3bXS8m*`JY^&Q@^n)$ zF`=xSuWFITt@YLJv?H69H!gk1(nE(^8wC%RxGj_Z9ZL775m4Vz#nI7HdwrrZUEI)F zn%fr`;SQZK3yE7`pg15zQ~uIwp_N;ER_b+AtB!{!pSyb1wj+;Qx>VVT;~9{@!YS=( z7kBk_tzu!qQqWIE!O4vJrPlKSL+ zY80O~>ectyUucy4`AKzY*Fq)<4-bDqbEy^mq)vXYsdUoB|DiG|FnE!%9YCda+WN}o zwccb=__n@R5=vJ+AHDU{tdVFMzjwU$!#5@AoS`xf2A)`9yI&=TCUpJj1@vPEcehyt z0iD$Jw;pETrmuIkprM_01OuJZ=HFT~Y%Z>+tje>EOSLNAwczz1bfv8(hiUWjnU4C` zj`HQwb$ko&eXL$H@yhR|^ZN=bdAKV@I-DPSN~cRA>+f{HzGfp3xy<%~+G#|9+WH?N zE-xD$ZpTgR3L5P-?wj3@ZB4T7@BqJlk z(-VDh(diS3{#lv&KSi}5YTUGb3fkb4d*{-FB$cnXcqo3WMn*zyN{ac@d#-DwyixCk z7%NStG8*BGv?zjm=Wd;03t6psTibYf=ll}bviSDg{RHvjCaacD(#55Xgu;jHE=mB| zEScuB_8I6%IlT!9`MpA~62?Y4Iz|#Q>~VFe3VOXB2;p0sYqP`Yo(>5ZdMZY8ZK7-R zX>z`b)($dua>xedoOTNVor)}nlTTswkw-s|*rW{_Bx|r*Mhr0ur>!0zIJ1Sg5xNOT zlU2_DRJqiCJHuWnLsP~~U|%9e)2>l-;3Pt`ZW*t=%)08TiT$?f+*e}4xQp!n>6De{ z{T^k@_!|Ai@3UGL_CJR*cQ|!l<`-tymTJEL=DtTB3GkB$lrZ?DAatVIn0K!4pUu)_ zyghpQ=giTmwyy3s7SczrBsKZ{@ayYY2`n}8QKMVFdeC5dr!* z$E~pT;Jm@f?#n*E;WE3Hz$rFeFimpIX3+J!JQ!$cpsbP9*v0L=K2x}zyh+8C`_-#u z-oZ2U(4ciLwnXUD5~~UDu-RK(L`Zuut=iBlJZ?Ft*7PumfZVBJ-(Pb!38My3)NHRP zZHXLj+o=LFgtWn(MnWM$Y38&gz#>3vb!CC^9a9+eJd{O< z#D06*W22uYc4Z`MRdt=+rL9fNYJTgV$fKpXH7{Zl_M4Rr*s!CUAI5$JEtPqI=_+To z3Fab)JB&K@+0k+?{k(Mp;`6*SV*ih<;(=quzj1B|1L(5mSCt%G?Cj5fmwh1YeSe{( z9t(|LAutB_@yl8o;qm?sWCqVy>>XTofk%T`Ys`en=J|Hj8?!6*()b^6Dfrf#e zrrsJHj(yuHZGJ$3s_54T_(xc1%g-Ot?!JmV@Qjl)`h74JCdOkA9xfZNYRkUUjvKVr z(tEer?Ohr4-HU#?qJ`1PxJG-#(Owbg@%#yMgO{GQOT3+xyFib%`4JZKI@>KNAf6=*X8@! zt`2a*_s!#`YcqJ=)z;T8O`pMT0<<@HsF22IT{tGBp6+YD|6AnkYGh_EFEPf)t9Rb9 zO^;POZ`GVPw zN*9H$j|d)huDY-_oAW&WDu8c5WqE(+vCP|+skQi(k&TV9uBxi)qS$k++)-OaN5e_N zz$Qty{Ps)RgfMEw}}?wAq+i!f>J;i0w6 zeWasFke;r^z2wccW;F+W%-@kSdRph`%-B%R$jVqooLJNAB>xtd_an!}@ zCqv#4#eQ+YT7534p})2S*pP5=tUu9$YqjqcUjfXES&*>%x1Q)l)@ClXSK#Xh&zdK@ zc74)!$Xg>OHcv)sWMu_qigy%vQ4ie4TqE|5~8wWJ1Gj2y6&vIpC)8)|`N zZ>dX4j-u#fB7eyIdkw}Ff3-k5{%u-^H#4DL8Xh9JZq$+pM%!O$@=|ADoFLC zMrwAoI51eBuGwAQlHOikKLve$R3QTvCgdr-9KYSQSQWYmE>6E2i}yUe1ba&TG{aA$ z)Qax%8DR!Los++UI#lXDEpE}NGq#~ruI|oWPd>02KWDvxE>!yc*MqliMUr}XE=^-h zPvk{u53`PXt{-JCU$67GfhKR~1WAg8-K9O>w9GSGFSee*n~$$Rf~3B*RhqkRe)e6Rt;!=xoCz5zw5{5yfT zd3GI%Ce<$eI?V@6G>&W|9LDYrg*xJ7hecw@Djb+3`mMy%TVdEypIxD-X*`3t)X;ok zqWjb-pkA*&MgEYpSn?-<0>5~*BGV#sc>tSCF`#opI6=Nr)8Pf8$klcMggr1@!dhqO zTX2uPy9r7WRX%pl^|_cjo5~PT5%Orww*rh8sk8zfpMS1zRfYTm4DCQFB0j*B>;a`f zx}jP6iJUQb?ClAQ`kiZ8pa4&mNn!S=HP@41yX@F8s-$6GIx7xZHXf{@b74r5aVPV; z+b1eKKMAU*7^(0rLx%L|rvQ8%mXt|u{EHAtCY)>EJ>$%5TC54ywV=JFWU`Pm}U;8Fe*-j235b)-<1SDuS?R!&|$%~uCPq*!-nhhZ{R zVU9S9lFtd_f1NdF3Rh1YcvVwskKtVbaB&A~_yxs4W8{uuSohA`*D5dKB4Jrr&U|Qx z!M2=7AJpFB`X2G0XW`DPbR5uLVPk{Bw_yBWg`msFxl2M8ojsq?@uLvB^ebl_p5sr@ z?X}|;otyX%z3SAcPnSR46UR;4Lv%7sO_H_H=<_)V2zevFn+*n8U&Ko4*b=tT?n&rVWssp=)-sc+C7o0gHa0v+-VYIciE zJh8kh8`6y&`Szxw6?3Po)-~GIYBfA4`S|T6Bj%hWEb<9k<~+}@bP9zFC42@MRC%p! zuG_KO!kr%eYI$?!%Y;gPCwx`LGCio-ze}3T%0QuJ;h@3(fPa9rM-?!F7U`gI%jVCA zNp~W=g_B1&tB#bIhL}BxGe?d75ikX1DpSYE*}WUa7uJp777Y6uO{fk(!wY#}q)nS4^Rr;|W&w~VJ7HpUSn z{CCO>1+2gKW1ivmg!`cG5{6`Q{KU$11CUKvF486jNPvRe8>9QKk}wQXKlX2k;*F)* z^J2F8nUnACV+NJ@SrA$(GnN3;magBgm@(U#ux^Trdlj`^=<~;qKGWhvo3?cMtNKgA z=$hSuKZb^2!e7C`&`pJCg!Qz>4vdoIHFC}oGjV6bfJECY$@U``e;qrOGW*5t`d7Gj`TqkREFQ)?oWhyiECEiF#o z+aToYSEfmDrj1*3>cvYZ^QGz2BAmDB8&c@F(SA=^v(w5=uusrNh3sWW+N9shHm=(9 ztiNi85yZWvI!+(L!`2qG*`rIPYFY_Bv^{hp^-$3z_UvGQB(u4L-|MVfafo}3Ya%z8 z67)*}4(QsdN~lPcOI1r}h^_k9%Vf*9t4HUs8IDytPq{L* zXgO3sMIKy~CI+6e=K2S3wc(h2gh;U)Jz=7wqXPqkg_p2l63d{#SwN-wNQz%LDduu| zc(cMX28B9kv2p^KAZ6>S2}LS{FENKp4jDRfTM3{vU5k&&@vS6V0UZc}gWlful zb_y1#GGN`u49hM+62i}!Bccg=sGR|2##LI9a)KCslAL+;2gs7*DTJMPg|>{ld6qyH zhC*}!l(YbDs_|pw&N0J5ZnYX9jH*DgfVpBKI{t*Im>cgmxYT=20CDj#CvHdI)t7)! z!c8c2uQ=sIabV-u2*Y|zxRfC)u62F=wRHh~gY`Uv^=>~xSf+$kOP;FMS;;;4{#m@M z7-vujXEI34$*?{vS!9KcA|Qw+*f=}#LVUu+&aPS-7RTKaNG)0#Toho*ElC_h-+$s^ z-#TRrjYr+9TACJ)mm9C$`>RZ=xKi98fw+{6TLZPLjCX)@@9T%`oDpZvoWWHO{W|q> zXn5{3PYws3V!l}0d%FBV#Xf2DRl0?8?UMPH;T-!kKv-^xjFf%bECP4@H?CZ6h)5|@ zu9W+fo35-1%T976Cq7vmS&3@Kt<*;s`Td8;DCNBp1)@5N3RCw;Xgm!X=FOIqG`_d1 zr?{lPo2hMKxf}?HK;!4~3X3(p<O3>`|0ICKg#0m6C6Toa9iH zQM5*MKl+6U>9Z6wR8hIAfL)7fI@A}OIxO;p17xWaTfU4>WR8jX64XCQ|ssRcVE2B3s_xOFnH*nM5L2u&ayIsZ_aOP~%}Ub1?y zOp(HrI2;;1`E;O#qL>VYgXqqh`dP9*nsZRy(v%`fzb(|qn>1Y!g<+v0JavFlO_ZmU zp;5#mk%${-l{kewBQf$rF;>Dvkv8EDt|o3-@^|he#UcQ9*4dzb2vqI>5`f<^4O>&o zfm@aF-jC!YA5iom%vZk-0rx;_kh2a@0dFV8T&8x8M;yHn{-$;#BhH&>`w_-G`BAL2 zRTb(#Q#3yQJ&@!vR|LkqCl(DUn!XpsPIsXvSyQcg3~dY_8IPtmZcIWK_v8C&McKpX z303R81CH{n6Ic|nq~ZNrN!!+hZ#jmfo&pQvdzf}XRr(<~{3S%m9J#1M^^pw3dw>XU zn7bn!sx~M=G>AM`Z;Tjeh-NCindhA;BM9$?pUOM|idX*=4g*PogSb6(UDU|l9kLXs zUcVtz+MOI+pkQJ)AgIwFNzG(TvYj1IN=Aq91|Je00(yi9@si3*b{9X$avHy)uS=DQ0Vie!!{ zGIp{mj&>A^C~6EsF*6!~D}yo-ZGpT|MxFwBmudlPHB+qeLx|)Ldb6NmM*9P+FTyyN zR^cVdz?2)rw6eEizam5Q73MSCHbC^R#jvhw9;Qa|@bL=1;$wmHc#2Bco~zO(FIE)G#;*zieBWRLt-WQe~MdD<3OnaVWWSP zASb_<-j}=5M29(u?>+HoRHaCb9Zu~N zM(#quE^E&kFY$Eu^RGV8EEngn*-I4}gSk1DDQ#?Il{UU5h>_G}((?7?SLbXbhMChD zvxBjep{7h=A&zmm_Zz)C~(r$mY(AwxN-Lm!#mrnH)Tj<(F)- zgpKA_#Yu@*lv5JpEMc0!R-=%No0VbpHO{({-s8oidY>C6x}=~f8j#GRE>*30g6>5T zeDbwfyHd?A9i>g#hFkA9T}y^7TDk(iRnHk^w6)r+jOYmN0E;8Te-@u=sNHatD-k#1 zDGO86qRL7{BXFcg7}l63XEWVJcKcJ4?|4H!5gg)PkBDQAP+HDF*u9pn0(>15V5^L^KxtEkqWd1l<`! zCkiH2Dp|xMfttJ><}*q`vPgf{_jLlHGx!6QI_+@KX|#J^SuWO*B$7HPzGqJq1G|0MX)ii-@1py9%GYKjSEk<&D z&mo?C^X(fGZK!-X75&c=LfAG6Xv@?Xm@*=aZ?=RZW163V4cMJuku0q>IhsmhP^fA` zwp7KklI1KIG$o^XQG}y$qFSV~l0&~R;OU2mB4@}yQT^v2t_05*d;s?m(I--q$;sIn z;myGXqJ?mB%A>isK$ck7`cZ|(;O0S!ZGMU?!DH&m1f|_-T-6^!k$8JGmhCE0bt5D6NFzNx zJ!4}GJRV-&R4a?W4JD?gB^1F>*$BHF#0mCoYdBG!G@2~PQ#jBg^x!WZO`=mWStEoz zBw4X&CPd%ztM=r?$_pf)zqd=hQ8_M{L^r9)MJ@*tHsi#tI!4;&O-uJ|{@A&H-f&JD z4UYty#tj@H!AV@*q7Qgs$Bis>j>9D%bB#vGV@Jf67ySw`rd6d^lYwjIcqd&cy;~#x zHJdh;LY{sPM}pU!+w!HvY!5%>IIKEtLahjGMPT+qzYZU4BpD#H6{<4CV$-q8JLKjtFBM zJg{HNDIs9KUsNY?6#K#cfjK<)a~p?UJ+0F_Opl>#QP#Myzk1Pv5~b~ZbfSd&K6X|T zQ^K$k6s{`N>N?cw?c3~sp1x$Vh!2z^Zhr}q8-OR|j~c~~GP&f3HPo&T!yQ;WA43FE zK@uZjh&U56(^C7@WOSjrPdSm8x)@x>G{KrEoIJ=xu&TGE^1uqw3vzbV_=5gK#jaW1 zN2;-{0?E>3hM&+Ml1bXhn^+mfsNTf>!J%fy6a}4^^m{E#(S(vus!?L0+Frw%Y5r1E zkU@O9$__6#{PK%#Y6Ci&(uH9hup zBLgHy`5%hyU#uR^{;IzMIRBcT98na5d>L>H;#8(M)^ZLsLwwT<3t|8GpSa^f8k77sGL^*rNmm}F zFe~IM0!4wYFi71#os%t~R5bxA8X(Pt|5rOrV9&nCc19F?!B0)giUX;)ub}m15adsh zZf|`Aufd4dwjbWTLrVc8VwXJx&c9%o1*rWaWbh0Vs5f^ut1^Oi=i+Pv83i6ds(0w1 z-XzAQC&+WCct5{VtcU;IU-cpfV(;CVB`#1PJwHB9{+W~lSG7V)^e2`id);QpT ze}B#s*+3P1jh2LjQz8AV!$OTcM#u!6!TmrK@viIR*Z~6~QAskg8U;S}DfJ=d>UNd* zhkb0$hYw7*53~((R38BY8D~NZoKs&0ycyZq8{UU^!k-Lm+^BZL9FeC{%Ow8iKOm)b zLT3>^zqmY8$XRG{{RMX*1O6l0JcLtQ7Dr0{kop*^D&b1)!M1aY5J+~_=JP(D74s=j zGFqIGR30xn6L<2EdcH(-%7PBv@ncOqK;6SmrpoR=;z&Kg4np}ReZU)Y%x)TxhR)jiQz*0# zh%hNzyeVy8UY}i={Jp5=zRl(_6?=mxVyIEOXE)m~>aWjA#O$!#zqjm)7fIfZv1`c)-UBd_G4hOzKqZN9rUjE zW|fR5pMe9gu#_eoC+JTASqj~{GzZMP_whgl~FcKwO!5-9MgPTMjvnBz(Or?B(LU^!P| zA-@IPy9}=$iQNxBk0ZXB1iJs~qqFD-RGxjz=|4!qd;@L2y$sS9K6#jEf0mMw8Hv1D zLVhe>3SbcVDr#5 z1c<#KTohz`f^kzILV$rt8jevHe08&Ws{`8c3d*84P59d8pC2wAHOl+WOAHrMYq6|w z01bq-`a<{v93VmYv~6<>GQwO)=THl9qb)CoHr3TWiL;g z^lLG?hxQ-fV1|^64{n%ygp0q+tTU_Iu@|&`fg!7$ zKMpPQC=0gr!JL|b4~A9Vj!0e(1k_vuSu2v4aa`AX*pjwM!hRsKw%^K^%550yFKDW3 z8fa>2%ug-9^zU62j{f0{w#Bo;lgbwotTtpc&C+Sc!)S@q2T$*FKRn8<_CS9+?Oi6) z3Fc#eDXsMK;6_!{)J!i5TXMDCG$GSh9{`+QP;Bd~4K-b;^knD@4b0C^rV{k{Z+Nbk}?cl~g zGz#|ZV_i4RHg7&!#bFZ6TP>d#QC%7)7+IKDSeRCUBL)ho6_-pJV{zub;RsD#pKr+v z*K#%Jmw?h=AJBww`C1!b}f$hdMGkUAmuAqP5}W`}hRkl(KQ0@Oy9JU3I;Z zCC#9_5u(AdM>=7bmiB>4y)S(a0Np{pFTnwiE-k|AE4Ex8`zPQXjayU!$#+LWBK?nv zowxIDsLbAUZ_nTZ9NLuw&Ekr~3Ub39h-B8~1%a%0ZysfV)*-mL=zE!r(6?}yl8GOs z>wgT_E4bCaIh>zEh5Ea**C?$Se|0mRyqogcvlD>!Q@+`XC&0K%9rwfR@o{zG94izv zZab5yNz80K_!FWtq=QHQ>MAA0uYqW14l`OU3{g#My#2M1v=S!uy*y{aCg*Pt{ zc!L)a0f|vsa|oVDBp$VegV1x}-bXEqxUFAo1AlGQ(Q3i&s?P3xJa$KaAPou{Eht0K zA3pVd4i676=3qhjA|7h`5epe^=J`jEE3}%~%ugBKMPz;ild-5jsFdQ6sm81aq}K_$ zT9@e{x8ckXFUn8P=&xFPJFHKkAk&V*;J+i{$$O5oiM|9 zB!>hy|Do6UMuvGSt<`?%Yhc1z$f(5l2E%%uDEP|GPEwfM4LJtwu(x?UJyrukuG0O!sp1s%z7IZ2owcV zd2Pcdjk7p2ZNENr`xDYS@CBx}QrAc$<$4VsyNG;rKLzvfz-&ux1CzIZF!Fm)IPK=P z#bsV>cD#I)D0w7e4djtJ-_E}8SSJI!zV;k+9Vw>_V!M6`KZZTtnD}9IKHvZJz4^@$ z=?vw|Q0VQkpoAKIBMQ+W@MT;_mxlJe(?JXxmVM&39ty@v@>`#u%>>ld5xes$nw@7s}04FNlO;LzxOsz^cl%*S^B+bHth9uB*E z`@5i&yPg~Cpl!Gt8@!Ik-=Ouo$IN{a;lGb&3Lol0{G=E;iqfTkfj3BM2Jcg315NPo zCfV?OHUJmARA*9{=FWhHWZ30#y3y%Qz-~m9CslCK>ywfjVHdU8WWV?=jb0fJ6!b*& z2p5((TeMtp>A<@B_G<%;_)&83D1V&%n3O5Ks{xKGpJ-kKv$pn~zkJNfequH5Kt*ZQi|sJ5~KTUK7H zvM0pFAvD6B%*XAyWk#j2&+%~GUD)7yH&-xbk!jqZ<;m2KO({X(*V$##v^riL7&M=R zUzgn>SgJne!uqM_zU6T{0$=F$r@{rZAZ%y_?r$!brlfIYyb*k>(cJ>awa2fg%G&dyqvhOQY&;d)5O zdLfLO_{H-*u%+d+RoKHOrn(_7>;j1DxC2rATIJ!P24 zehG5!HelTEa9k_k^u7-YT|B8B_j7(3EH4*752^KfWA69yUXQU(bRT=)?#rVT7ks}w zB@xe7H}j*4KjrR~^-#TljTHGy^m=ITV55miyVq!_kOJ|YPT27)bk-=Y>&M6qHu6-C z@#4doz`Mg{i+g=t%B!qj)Gkx&txu}gA!{@u8G;w|kJD>i)y7B5?s$g|e{xa^7O4QZ zm4TBw$_9FDHl>DvLpPOwGkt&kWdreJ{G$wS(A^gG3`BIKD&@j15D;&7V?e9FR*+>P zJIVNGXX4OJJJ5S8>{HgeLde^W$9a4ka=z~4{O_sgFJ|^SYufk#u&b-<#6uw92Y1pa zwaEZ)Yy(^H34gG##}OZ`r;+oY6!+s_YSS^WQ|w!CL&dH)YX`WaNu?%cHG2BCMqfrfhO!lxLvealdi?Qc8G>UGnCI0BX6M`_qq3fgaUvGa5hVtEDgWWkd6Bm^#-f|4dTu>Zefu#g5GRvg>MEpLDU_;FG+IAUn|%HEyQ zA}LSj6NMsJRdqG%kj;~n)W`~MAA=+{_3oeqf0TPO<~^sM5Sz+J!kbV~M2~Qu{F1(h z>7Uvuwu}Y*#3w;{Ijf;R%f~LdJm*_&b~O(EXhIXQ=>3IF4?Y>{$JgDjbWu%@QzSFB zpCEKG_p?rjWn*7=m;6#`ls0g-_dQu5A1O+9rzhevYp}zgy?M0i#ZxpmkaLu;sB(id zz|*Dh1<-W}A-A1qezZ-mWwg3(zb7I>JJm@RVWhUW{dVudUY(3>1=Lakj!%mC_$w7m zIWJ~8=jC-dxx){gJ@O}19JRTNtY>m+gZ~$Rufeq_R<1Ti{{M`grkm0IYYzbrdfJ#( zM})U-;Tt~ua&_O|D@_pJHSr8p(#5J2QQTs9IXStuwl)OVt|l+S4x>5a=C`(vmacm@ zEIijzANqjHjUeO3K8(SGK8H$pp3FJZS|Jv^Z z&RrO?K?&trS3fHIy{a+JVM`CO%c#w!p1GLH_8}+V{q5n;npUTg{$+HkS)fdX%I+`2`OHi>8rsjar}^*kOhxyT2{* z^4>RpN%bX>f1aFn`{k;}WV@qQm6~E%jeg-B+uLSCFwaE}9^+_Em)WC)t`*wRAHJa1 zn!-{?5%AEqi2`$K#K2dWS_`{dV+s_Bp8no0=r#oxa@!5iz)=Yk#&!BWb_<=d(nSSg zyQW<+WRE*o&9ns?$jpRpS-otURe5g!X3<+nI%W%c?TzRrs31#2ET#&)Xm4wIgS+m3 z8WCcLKz7bc1EZ9^&jU)CZj$r|3*XN88ZNEptd^cqgE?)c{Y`3xn}bkm!`2g`zJ`r4DzA# zww=8h(Rka%=}*a3ABmK-J8pZn33^W2*QS<)+mwoV&hI1LC5~apf(JekUYQ{AZ(x`H zEMByOlurkB%Ccylp;^0(5qK0PWwR;^`NhD6ZvDOz9SRU`v}l?5?eRU}1nwqU&$eN) zs;#IpdH|rJx-;*oCWCQt$Pv+frKTHgN6QtOqzLr z?3Ew@?YdH&T>A++M;*(Xa$w!~Q8|wmO}=-1+2kPlc!^Pn4o4jhHsv_Dl?3$-6pa$0 zzy<^uB?PA?Enb|TJ2*Koe{@Iq;k^SD={ zU)Txn;0KOpb%`19Vy|App}CqQ_=ZEf3|!v7^fU@06_Ryq!}Aix z!o7-#wBkaajvBr_EnfMxfqu@*EYXD@!I<>Do<=cyJJn(DUUwQ`{gcPeA$Eqy$e?s! z=^>GSo0$Ui2=SBjs`=B99oO$M4rrUs9h=suQQ|@Dsk}cxNWk0Y4K~-F0i;`rj^95J zSMrwkz5M}0aAx=(SiP!n_+o*{e4-&_!N>Q-w_{h(c12#Z!&M+LIjkbMD-m@t3`H;l z56TIi`!ak-&;HX=IuX}+mikn7N~%{6?B>tV&inr)+^Tn_3m@+NHk~njsXx=;gx>8y zcolSM$nmbWwn*lJ&U|CK3|KU+n06$be5%rXAITW>2!--ilYW9AN*S=s8VQb=_)8cA zrX_p?b!-Sx3AS)LafKKd>6ThCg@N)cSh#U8nLHmDQ9iVh%@<Z%W1ooC7n8(9L_6{e`zLjzF@&Bj;=z=8*REDnUgULhz;x3O@!Yx+=UiTl zS#J3*3WguO!^xB_SA<$ckQED2MolX(I;oPwLFULlNBHlqdK&>)N->QYVkh6-W1Jm9 zC(dt)mg7d1T$X@4_Ms2^#@lmD05GptrC#-54jeKJ{`a0f-^gr!`JfM`Kn?i8GRL;( z!J&t=Ylf75ryr9D5~D!8rbE=C7Cj_${#`aXU`mJh-#_Ft1}AG_%gf}NFuaR>6rp0J z4IBH>mkYvfmX2(ogxFW|A^m%)A$XvXE>#4ol^uad;+?Bg@-seaT4e1XVlFd|WsLt` zw#^2leogu+YWFjI>{W{bJrNCZ&GrAi24WrtvQU00`Oa{_!r9PZ=5H~G69ruQw<|jo zz|z>{;>zoU}OW57R#6|JBvU5@xC5JZpUnO0dVbIHAcRaGC@m9z}s< z4Fo^N980fLT`sSrHdA8Bcty^jxd1X#!*~%&Snm1%$+%YUMvfPbeqsqeh&G~b!3?0@?UqTB^S zl<=Y)(b7vL7LJWbf-LV)LajRu+1|=SBiz!TxtB z@jXQ*iBceyLv*`o<23kj3i9%Eb93tI>e{usO?LAYuP=|wOG^)rk0kNZvjVCT2Zm#d zvT+i`h`b0l5JyhaL{&)@L(w5mO^kO{j#bauAT|1=K(c91)azdMHfLDABXbVw$d0107mxCkygOkBL!6beYgZ+%QDerJruiJ8Gl7o1EOj|s0b zaD3+*X1vX>LUDlV6E2Aa*BhG5hxHKEI|zy6oj{T(z@vW`$;fdN3P@I?hqqgTDMMRJ z>teH;Pe`b@rDficH@wiOFJSf5W5Sa2i60LBivS^7S0EyQ+5Wd+oi}(j<{D)CuTWm!9&_ zRqm|snp(bPB+{GvHnR?}f6^m%Cg#~feeD#nn*ylbART#!_7HN15wj5?KLufy<}IFb z3=J3)>lh&<)V1jFu z#%s1p>aGu=F$8$XRHhIGh@rju)$7Nq?c@9+UK@Xb@7^nuex8p?zMyiz`_bd1PgB)I z^)xRiA*#oo8|%jZ%wvtjdqa5W94Q_LQgnG}w;KQ_&_kbFV6Um4mYo1vXj%#1uyF&k zLCoGZZhZ&y>Cq5fi9CD{CsG)`t{Xy+Aca9CFl$n1hh1MiI}>?$JuvFzY+g3EV^Z}Q zO8(zj3*oazQI~ zdJUrC(X^45pq?63iit}HxHEk#;GcWv2^@f}O>*O7*4Ljwj>6|opY;%60t4#%nR5tK zCr>~3g)x~wzK9S{6Hy#ZGj`=Ko}zewT@~}W)(kp1P1XsH!IpiiI}b2EB0#R4Tj*@x zxa#L2CxXYSD#JFoH~lz3WVCq4w9}voIL16%{u>v`tDl{`ItD0<@$fRPvfSR+o&(+k z8X6iF^}Ws$q=-HKu~_oCo3tDEr004JS1(5j?G2F_fMcuU_Z+Pa4xx6NDMcL)N({8Jn8 zQOv{n+1XT6K}PGeTmFhyl|Q&w54UbBvMf3M~8v8XYZi{_Fzd-3+@ZrvfEJZb`vCYw)k;A@Ve=H&8^4C>h9f@zp=y24fP(L z>d;bkVd|?O_b`z|&qY-^M0bp)!vq$oQ(qMJ^7xxuSz1a?KHj+|kGj*?&MW*E;O}E-0wiuXdX+Qv(}bhlruGyW>2-F~aoe-wSIP-E0Eh z-K{Qi`-&CzZ5kN_Alqks5;AVbB00bs#6QdQ0baV?Kf| zmnXj-{AbJdYw7FV{GRsC4vBNF$4;5}fpo>C21V-9Cr+roJcp=$8P97@laso2jt}jC z$|rY9@Z>rE`-CAuiOU;~S0`tAoYz=$%fx;h_z z_j5m--*;lu`qDVD(CG8LqZj3f>!S!9{|VgDuozc=7Ba#w5I6g*14SDlQwpNs|dIzzc*5{OG$R<-YfI9Wk2P`NobE- z%rM`+>F%o`0aa;0yJ$I}k}~Ttaem3eY9h8$HiDS;W2hRbHEU6@^Jc5f)5Cu1{L<~- z6!>xX=C*OY4z>kCy=XmLyhVJ~I{CemyzZ4JXXgm3M-?Y@HrH&Lz0!G;B8FJl&T-m0 z?v+&5u7Erp;pThS_X>Oje|HOR6L>qpciCpOA|%u)KyA`jmg8jx#`xxM!7RT;VUvZX zN`tE2o3K`@e-ji3u%VQO1@yx?7=zjpDOE*0r{UJS0`GCq^Q2$bN7pL=v>OC`J-;OO zJ=*rjo3ygE#K$KzojT@oyZA%HM7=Qrv2%0_%}*MoJ+0F8vCef9auBfP;n#myt25E6 z=WAfKP=DG~S!IO?GbvRes5BZ|lK4;bsmsd5@(_tfo8`R_c9ZVpkw9+%)xJ_5Lvb#%P0dnKZl6B81y z!Le58`Ux|RA2c+pBvfyGTvs>4nl*oN?_S5s77O6}yKnEU&*YgBHhAu^L>3BRBWJWi zP|>z?a`(!8Cm<2Fzj<8JvVn9)IA+WNYaB6rAdYj;`ztX{p}&p^@Qa{GXL^i?rf zns9BM1Erc|Fs-+q%=t_A(rMLOUz1l?pQpBT;6VBoUTq!h0)AUt->>#Ez~w2(=y+!S zz|<=Ho|m0bUl>^VsQ+uB_p*5kY+AR$>}65f8??cVL2N#*p!aZ{{ZG%#;{W!Xm;Ve- zMNpP_uUSspPYyCca!B=}F-VuO?iC$?nvB|I}kZ9G7eU9ts{srlf>5erci_500 ztZdGbV~@aVnp}JBAzqDh%7gVZ=kVZiXerBYXKvV}WYp@&QI4jc=Wge>&nZ5xSx|1x z#_0+F%}VZA3I{u0`QhA-#-@Hd9erWViMh29;Xzy?;RkQf+r^S-_aW9kT0dNr>4{9nfxMr>OdSF|Wfa<$$}N&RQ4cBP=-J7~F} zUil(rRD)5k1G+xJ9{l!t0q!39=<*>;hDesue(h$T|7N2 z`ME!$UcN6InEALzn%RddO)Td&mWC2>T6N6$2jzY^_`bKHWJnaAO>Tm^eSpB*lI9Qd zgI(0lgu2&O%E~)i3%m7$@2hz)rb;Vgn;#EuLQlg)lfK!>eO>0Q&MbR&qi_6tPCn#v zmkurCW)?aIzRyZRZLhDhzZG7et9@@@Y^n5qHvSJp*8fQ;qyC_iNgbdC3~Bp-3d$h- z7yM{R04gs5gb!sn@IR-G!gT7?8cRq>gs7A{^JX7T=5S?U`L6& zwiAs_#$DXs!-^GvRke_U(x6i9;|EXEBC(;M@QWqM)OZEN@ClgEc$gMp?gZ2Prd;;x zM*Ghn`Nq<~`a$lXP~s}pMWz%h3XI0Sr9#!$z{9X)s*=P~q;_k|hym-GQWx0zRgdG| zlyGw6qi+)Y3qvXOw#}y_S|N(m7^qkKj;*2vb6G^h;O4kGEoA&~h-B>~eLFBTW$1gP zK!!WE_iv6Znfm}^<=D1{5{6k3JN`2*IoZ_IwCMM5DoV;q-Bwl}9*^C>G0R%Z#l^*t z0VKE-ux}khAd=uP#_V=)N>*o0g0`jmFQZzrjZi(m zAooA@+5UkQApCoN%gv8cvbcZaA?gdx>u9!|UiEy_;U!6`Cr?pfI}=1SPf%OLa)rBD zj&5P0jO>{Ag8KEHa|&?iZl9;=eFgTwz}zCze;t=+NRcbxry}^!Pw{lktDnEXC&JA# zLs(2f240UqlmzwXn{8R>=K)yV1>(^&NO^gpqvPDkNbvsf8``58qLh)=7kH52D-^Iu z&nb)lRGx>PjnCK9|8#xYyjsg~+fiTSi3tI%xvchN!H-yVa_UJPGdp~Y3f<7ZH zL6fXTib{NoSCq`aLr6e;1|;AY$Bh7v{iZ04k?rP=^mHLi3zdnJX{r3Kqb*@!Z(aTi zJTX`cUx%+2?M?ke;q>hfP47578-W&l5hWx?T==}i?_gFcmy=W)z+1rqOS;{EzmpcQ z)$DN--f+oQO4mXSEo*usTRP|lZd=`8u>GVpl``7VHECVA1BZrx|LkuJr~v7*yLgCM zUjEEqybe1JHZhuU+fw;JD!5#jBGL}+9w(^v;{V<(U?A#Z9v86Z{O!-5YdlWipFaxu z&gSSW*4!fah-K^mkA0Gnz#H)Ay-oi8QlZ^beg&dP>jv(hfn5<()cBD2L|8wWVRG@9 zY+{sJtZC?Pza*6FA*6#6G2A|5Dt)F%Eg$iQ#$)GzH>079wVwPVC zH2v8zG@<_KVr5casdM6xzbPZu5&q)0B*m77e-3K$@YZi$6ng^PcMI25Y$xN6x%?k1 zj{J@;DJdLD1f~^44N;3E)z8(TZ-mN6(**fv7gE@W+e%?0j-*b`SXO--)=IM_aTYoXNcfGVBkyoLrh)r7=PRQC{fgT zCH2!674WYxl|`{UlaDbG!Y96m;bV37Kz+VPH`08M&m=SGH>_g%PnZVR`q3C>+IL8$ zHveRBcl`zhG{JOF3)hh>FV~wD;CJte%!i2@8cWx1VW#HtxuF~kxpq@02<;(#et|Ti zfu=+V=^oz`$tHWo#cm zaBTDpn?Jnmk3Z=)={bl zww!oKd0?Fc{&PT$l0gX2fg2n8t-6ZiuW#VHt|D5oB*^pIw{Kk=9AFD-kZs%|06u;E z;P>y}>+O$cLiQx|^ru(beac4#ePL|%b&gI>aYTFzv$H16tKfQo0~JnAlFMsQtS|*y zEO$j}xZdu~vz|WcP#(2?4?!zNm-E8$tpVa|HTNB7$F*IijI!1s$w+n*)pVn{_)bmSiN}ifD$UE-l)6m`eN!JVvu1gPh7|_;%n$5b0iUQLo zvM=16I7>h6zQ$;<<;{$N{H#Y>vR>J!*`J7*p=t{+K7oG9jIL}vb()N%r4k`;H%K0m zUjDxYLcaIWJSUCrgEyCTb$h!``F!27^$e)rxOR~3MYI`QJJrwoIBUHvP;U9%hMR4&U2k=QiyGkdayI;;hATmeb?Bbsk`ac!9GX#iB8! z@H-^2gw{=9#rm>ZBpP;955=ed#H4RGaA2!rW+8h)jC9!B!qk|(Q}EAA7tds8XM>Sy zDYAsoG?Ni7NM_NffjY2mY+@otqqf3+5wq;-1fl!>KqbeSVl5<^TWVT$&ikm>hGwpk zNhY|^IZ&jMai;%x)UJuKefO%v3T`BcR~;@gHa1tdx!JP-`?S}-{z;F3(7LGB{HM*# zcHob?3A4$6vRk7H5Eyj@8?cuen3c#=5%3*IITGzvH#D%*)0Y<)hgd2?3V%jILP90v zo|>K(*)RI^OwarDQW4}_ITv~$;My6hm(qNeg2PF)x>`Usql*a+YFz(bs$d4ymSb!8 zM_YS494sujvJ37Bw2BATOyXU62)yT~!M_{QV8ynq8EuGYK0!m2$5UF4F!9A*y}mj`_* zo?LY}3W>gx$hx6_sM2rtl9{;~2%|d{51qa_}9s`jrUZf?#Mf3-3Hq(2D{W`AGn! zdL7Nwj8P{w!}&_t!*`?YV_A8lWS*uxlJ!d$i_^wmdtGmU^|-2b2*9!uwBV|xg%HVyt#>*RQj-2Q!gCDqV}^b)L&6^ zb6z}IH1IKbxjXjra(ftjb-iZ)Ss(4@JUW89;eAwkJZs?V;d%1=@i#E14FL?sp8O{; zfq7?CeH=pu{fCJ88pR>f&tedrZsaxA&o^RWsA7DKdTq|{YaUnpby_Tp`Yqh-?9LZ! zJb%tcnSf)Hqkw2}VR8Woz>q_w%CIDbSgm*#4#UtOE&vEX048873X1J$clt;T%LBG1d488=&$cG!7k z>wfZIgD{Z}_a3;3T=RhZhv!mhzUkiaRm7=6K4zn(cX&(}RX-6V99ugCgbsyo8nE|S z4|;z5rx_5q`Qza~M)dIiJ!j^|o3PwWsc29Efz7nm%G{ibhsSemmba7>UeVPJjIjkX z7MOg_Ktm(^;{~*lze)5Ec7`vZGhD@Gu)0}r>69BK9vDQrxa>bXxKZz|a1a|9m^#B& zexa#R#LUZG{KM+t{UAZh;0yCT%Hw`K6WWczw1=1F;rlU=_(cdT)E&$BaT|v!RGVST z!DFtaRIQ+IUole&?#}j}x-7CWs4i#|b= zdC3{M31ZgTTApp)8Tq#xbLV5zT~jxw486@J%!3d)LI)O~;+f%KE_Komj?A(YS3n$l z;^1-(A_QaT<7X`OHC~sw9+Y9gPKn4(m@o-ic&X9J9_mJpo%nlyQE;-f1g@=>)uH1) zVpyM1R$4o)flP7$pHoT91kKzgNHV@Og~8wiYAe0!6o1Fc^3|kjdgHy13Dd| zIGLEG8o4*QnICP;`{BmEzPx(5dmbF@-#mG5`B6}&N)H6N+lk5kd3}iSh0#+JXi4vG zv-)m{!9=){Zw5%u)=o+#+O=TsqiJZ>;iyQtX79v)ZgiMX986_mf2enHs%&t;{H*qVX?~m(wwQGd3t*C+>ph|@i_z|4Jkrn@|^5b z%5?w={XvfNjl%;_pgT5ys^ocTCQvd*8GswRlVFq``3r_Eq}B; z!!$Pf>fgMu9^(33&+QusAM_ezCW%aEdgg7`jSh*))LlL%*JTQxSzHF6qr0#Zv3!=D zGYaZ`L~Y|Hg5%!HZs0Zg0GxofGdF>FyeGLyi=!`1R4wO%R?d5YP~nK55pTH+1kBDA zp(y;q^I(SokO9IZzhR42XkUvz3B0!6NP)XToR!N|lf@I$@-7b!T#siciQ}jfq=mDD zTP+*$8{`X=(V(Z7mP~DJ9nRZy6l@s0nc--{gBOuU`Y|H%3);H-42StX+|NT6&AOg$ zqWp3N%{JSAhh%8hCYR4WG&T)L9(_3ZiQoX~=x;LL5AZ&20rej*BL*MN+t!Zy4DgKu?>MhL77p)Kt4Q$EPueS4Vv@IoC6N)GQ*t=!x-<-H-P{zcKHD30jU?2 ztBLlI+ zj{sqQGqr&E-B4b_*(mBr7XDJsr$h)YNqM@}e#&np;>f!mU!K+0sQv z6Sl1l?*D-y`V||gn@?7Bq)4S$o`q!ZF(L$!R51Z7b{n!wn5Lg4I`Nx|wV{8vg9;T+ z5-W{wzJPe1Fn7K(%|1q@JRQ|ORJynrZB2mhR`i>(2$u{z1qQ9iaJoJT8jzR}rR0AN zGJF$qi!18wKC|2Xxv=D=?tuC?1!O_^>LN87ydh*pMR74DAKxpuX4uu$m7AL@A|f(9 zJ^lRrT***LA#(!@+ixsdsybAJkw`(KLPol;5}7FL0Eq+t^adR(LmQzHF9|9uzJ6YN{3`)vS^3bB-qCJe#Oth%iYhrZTUqy(~{!sDUG&af#vOj{u;}g;) zsp94Ojb*9Ge4kws;GzH5XeUvVbZ@~?UC7**g0cqz@(B>y)Q!k}7S`u7MIJDQjvEkQ3Y`rDxkJ&SDybq2we6uT9~_`P zVB8`p8mK$gSqz~Ph=w%4PbePP5R6+wov-Yekxmw%m}o3786iwc0kJat@V^EE9?$hB zsuZD@hmi(Qk1%940cyMua!}fQz?txasY)qy5v1r}SmYPtfS`|%;B=+-7sZXfE zD)2L`cs&3TJK;xW!+`G32v-`xn8J)b7&QK-=Lt>H2q+toBDCE60-sfSKl)qJv10yE z{qKL=30Sk+ixW7PGiZl{43>fYgc3IE&t-^S5#T9Z{Rt+TjznGpjZE|_h4d97+?^q$ zxug6SWe)cMa<@C}bch4UzcjxLM6eJ59FY2kWPhPDEbX`aoKddGs8~q+YK;E(6Ap)C z`}V$tDJV(hU30)i=U2GGg@PuR1t9Pr7b$=$Etu?K5jseno|+f_L%L#z$ zKxemxkN#DRx-eD*^*Q*m2T}Vy-TI2BU!MOzgYS`N^qcxHG#rakX5oU-UG`Je=IQgIidBb9Rc4jJgD9CHm1ZfI|m>6((bqY52{{D|2#l`zS zNRp?ktv}Ub2BPdP96>9ic(e5$W#$!OHS7uoFqn9=6I8FB!39qnQz4K?M=g9t{oF}9 z2u(z+JJqrg1H1IjdL9db|t?7R_2lIA*er_0M ze$dd+*z}0B6_RmwQbIiCi`@6p&gahmKF0;NIXc}x_PE{|xIL`2wqfGo;pOGyY31e% z`ed|m4EwYL8HDNmqcA%s#~Bhz(Y?88}Clj2nhj*2!Z zGgMCq|8fVJw|CFPi(R|Nd}^F!Mip0*+-0G!n=>f3i>U_wOHL8FL=6P<3O_6rhT|oX zt^gG=Y*UK!wGw_iHH6ONu0Mmr|NGR#(?uupgg)wtFI|=1ac>Dygg%{mniwq#@E3}5 zy}%~(57z*YzrP`U$U}`OC0aCFOs9cOTGM%UFE8Is9#gV64g_7{++PapA)3qAKDtrz zj?Q}ZIUPshWsAA&Hslp#5@aZ`VB)ZA{8a9gxw9LpFuTe4L{aQqXcHofx3I-~B5p~@ zkx8hLnFA$7Wr~=UNoce1_d?6JqrG?$zMn|0%Ho+ zE?ax44FG2y5l%}%OM6^9yt!-SSm3qRNbXyR>Q7|Z4F;6{5NSN#M7br5R5koFAs982m{G4pxAC>`| zT*^^Km`CjjJ!4lg2^5NMdHTQT4IR5zy?b|PM3M6-#kZD{i-IBt;1FPs`;UT-$j`Mq9Z!k3mq zmjzZla?*~G=Hlp}cd(fs{p457+t<6Xq+!8#v5Ym$G;lsreRtO&5~E$JEFGXMG6>O) zM8WLdE`!)!;=gr@La2>_K$_AMMktyCC50if&5Z!{^hulo78JKYl214D?Kw%t9wDAx znHfShRg@smAa@HDMSq)5(kq`nU>9>kET_wdYK*n+3zfgyDIp8#LvCh`O@8UsyL7(s zl4!g?PxrP@>d`B`2n+OEVk~lbfb*T(Cq3RV@xefssrsW#!&$@p#hFt>2oeIC$Yp8g z&sPlsdJshEdsElu&q2e-6W#PNB7$2}&_3m~ZO*!6e+?gxhgpHiQ5QXB(v{gnM_ho@d8BBFgWxp!|9jGKPnnQ6)G6;bQfXj@6onr=d_3?0 zD{GQVi&p}R!|fCvP+i_t)zwm#(P_6kL>9U&`m6cCRzbm6#^Q%9u7c{%A8Pcd8|x*& zLiVPHt}^})TiEcp@bKs%E30$t9!Lp(BQrfuT~l#)Xw8)PM6G4o(6pln_sSF(2^k4B zwdLkZieiej>w0}Z$5EWD%0lm?vMgQ?Twry56%EH%e*UlgWc&ivburYCzk;Lq%2`z~ zguhKsvm^{7RMBfFBn#9vwz7WPH&sv6lqsT);Vu6G@_*G=ey5+|$umu~LzYj|j z9sUcNgoqhGJ73swOHX*7MpPC<1rbg}6f!Ajb{Qd`>kdM?ors;k1)3f|B1~fD25zI9 zW~J31Wv80~Cf_Vw9OA}bA`(kQg;XR$+!#F|;0uktJQ;Kt|CEZM=aoH9Knw$hjKANp z{>$jZ>#qQTP=&($Xrtup{7{;g(zPPUjXb^nJ_PIj@uPzpyH6GOwSG%Yz11D> z(V%HW#B~hyp*cA1h*4Ms6_ky@hi@1>%o;DlLizeNegU>L!s-#>QUMoik2E0$2F^Lo zuSP~mB3!88L^k(JZaPThw$Sb#t}E`?fS{jESOY+P(o1b;EqJzt|9xX)1DxT{Q2)-n zbm!FoTgNKX^sbCp^;Ir(el#x{WFV-&oepACB@mtaa8uF6vAS~KZmZL0 z#Z&{Ef4-vvK&MHYz^m7f_qVZTvkJ$n;WA5$v6xOr$K?ue(PKRKc_uUGH@a3QKYDW| z{hIx8wx432pvi&|@Ojl?l?^FXA3;-k&C`I8-SW>z)WH8K7 zXzIa>dFD{QJd-C?yf`WwEWbe_TIh9GeWb!S9`b(FBsxpqJxg9YSSV0Lrp!B=9 zkGDUlG&%Z}<&X`5M4l`Fi<-i?)D+$>e#-?WN0yeKtwKd^p7lx75*%(8y#ZKlo1v-jCI6g%P z5H*6Vt;w6Sgh>uuU6i|OYf!}zG19IKo*CgSD=)$|kduY$Z&9BwQMrn0Gu5tCUQ&-r z;4e^zRM}znSKq#K!Z|iF(&T<~`LwYE9lBklJ*IYNt~R4C15{QFcjrgO?D;MB98_5} zNN41@WJ%R6S${Dij5Aa*-`c~cJDCoEuaOq5Izq!xsa0Q^rwA))R9lKqC2_C?XcRBN zi<6O}ypa8ZeiQz?jbNk+_nnm{{#r=$>p%NqpWo=&r20_g=CR_FFOXJuN*+%2NL4=%?7- zz}OY%Ab=uwFw9zP_(R9jgkp8zUx);FeXS*JTpSnUapI4W?1OCk@ASKu3ZRo7CJt}r zh6@fq)d=ADHb*t^^|&`A>I;K*$JJ@vMsB;)yG2^BX8j{4pC{!aloI9hy3fEj>Vwl| zm}tCbC=VvxmX?vPb**v66HFRXd|sKkyu{0Et9hI&FjKf?0%P8lA(aZ&DOYLP5BImX z3Q9^Lw*sbDEk=@!_UM#^@kTAkMdtEOojdmSw<$NA@1Fo^G)2OVMJ>3w@UY{7sAR!f zN2H>GOjNx1DsP=!8PNNW_9CR|s)54+uG4G;_MXPDPP}+0NK=9@!;8wjhCx!0g+2|> z0sYL~4h#`k6~W|@#w^tRcdn-9hB4y(hu0F01Hx)uUjDllt5d{RtrpM5vg^4CIY+>A zM^8P4Y( z;l?6ihT*|x3EL?VW8K70H~D!T@NZGR1yI%vv7i8WNpn02f&`(q@4N;AMVixkbHrAy zE&~#iYpI?AD)J*e3#wSUe17KpVEG93yat}EsS(Vpo?Mv83MibCw+u$O*yz}~*nc1t zKIwNfAR?F`M^3%uH`xn=!Xu+aiW(2Jin6K7l*BSQQ=B2T*f~41#?YD`Z#Cgwo#OhH zE{2+Q{o1C(&zbESd-sS6f8WWz&Rtj>mea$hoTYZw;hW>+AnEh7nI(Gr*Dp@>on$%p zi(ZR&cg3-;5JM;dW-+JJedI~Qb}vswzl%q(9ZOY3<7|3n6S~`qphIP(zqx%2Pr5!( z%X+wIKrFQ`KQMyKCr$)oDl_5)n@e+no)EDS*jOU8{yGueyo&1iZx742@|UWO$kNcF z5wIl`E#l#F5?j(m&{r#bA;{dg5%&=Y=punBth$IDaQ)Y`^5RC&2w?~Qg7>QP6ykb_ z(q*R>ILaz7Ti6L0jMaIV?kmf~)6CK26f{-hbY(FQ0`*?!z2h&LwXhbQMhl4bZWYNX&g zZg*RaT4UmmdTnzSRQDzIIaNU)K}UQS7VGiz-Wsxhg`)f}vsDgX!W@D8U8N{GzQ<{M zN3c|r0{gp40M=#7Eeyt12;vl9gfz*;Wm!uW?!J+=dBcADaaLvDZPb$}!bXrrf5xR7R&%Z1zUeS`T$+NlM(d3eT>`of-6}ODU*-LdiMFvlu_8y@(L7^Y?GPDbx~( z@QBpj5gjSBlT8#kgxfk`1@Pl1i-7fCrpI>o?H$G0@aY7ha`Idj8}FZcOq*&Sb)7+C zl9X&WZqp1r)ksi6C-$LXJ#;3ELsv_1aiDdL_rGx)(^otL5`wSqT|MXOKgj`##ZQ#v zen}$+5yDSSQt$pC4-c=BqTeG}h!Lu?23)X%<$D-C`M(T`(5^=X>@;&W+b1?;?AA+z zGmC8X`KD345w7;4B9 zDm3yhsQV#hfbdB>+A*3`MdFndSL~&TX{ZsZ+J>4c->26Rg?r1>c^hvvdUZ)^P)e$izq%ol7ZHi{oA+0A25%$FXwvqKrdBR*_Ej z;Dc#m?_~yvn=yZtt_)X|k&f*DVH}W{j4aEpEh-ugO(Yu0q$)=l{If<$Zd*1NGA-PS zl^pr;-6&yv{Q@IFwgOF#l9jR`VYdi*SA-??&ruY#7eX{Oq!*&HK_y{Y;*-DhNRkz_ zcBy!b1x1T8qwV*IXG@je$7<*?eVqbRo1ruXnw;J9hu$PW}jGP!qy$ov_1=sIEgHDtEE~)oOERC>Bluw){2lq25(sCr=O#%AiUIPl) ztjoW9x!gNnfU+GoiohtET(IKIx;%w+Ae%6_5fVVOPevFlM%ZQ8W3 z$dwG6&FB3z)ZxTZxClDebey7TD5|YZn8iA&IT;#o>XNC{1GfYapsutJs5x*C?0am4 zURt}|3^Q7P9lL5=zFL4C{WFstnR*bK4Q&9IWA*-b$iSu|1-KuX)Kj^i-4*b+C`;1p zfr+<=9jc+GzP`Mqu$XJqX>v1G|3P8M!rX#p`0EYt`@z{WX7w`?x0fZm-FK5jU_x=} z2FyVwP-efn0eEq!e@mS*!q4BCsG?GgNJ*K}vkU2OqEahOi*A^hdqRR_hUE1<4Xm9A z$CWuqmF(sg)rKW5;}yCYDdcNmOK_RBIkhn|TV~1{oev!Zt))ij@nf=r@^D7`q@7kp z5#2}J#lpvp8raZPPHZ=@C8NPGuN}d0f2TT+Y+n}Tne1a6Vru^{nhZf)J@0DLT z3E~D)j5LMR^Ugh|x8no6Qq<|@uVnH0TG!9T>H@kDZTJ@S^;XvxUdp@I89DxZ zkr}|qh!!IG!)Qgk)#U2BZwi~uk=Z!MSlF&kGZfj@1=H%prS<=+iSqLm`bx~Gu zZT`a5a5DfoMTbCoL}W?D+mh2CFG@nJRM{!?}KKsOxqJ?k5f&t1l|K`dUokn=o9F{?lDk z_Y3#K)5o9VpE_RW`E>Ly=kDx1G_5iZQ#uVgKwu@WS+lR&?UviIPGK>HxX$Z*$J<)lpH0;R1^4uez6k1__Y149cFB9}h&@1w;F#7Qi*B9Q ze+g!VJ!VV%-h(!dtT!EQ!ZgG~GOFB-4hY7qHy=QM{GI4Cetzm&GPlNA9l5k+bXjhB z8g&EkucjFg@@C?w^7^$WSZU`e)657=g41p4grT)H0nEhjv>}MNXdT(e6FuG1$Z7tG z5eKG8J~-o5`t%IuG^`o*Qyh$~#c_){1h%!i)l8kw?H{0OJSLFCd{bu?CA5KP_+GG~ z=GW4%QT7``HVIm?m?cqY&D1!p**TAYqZjovuU9sk&THW5du1a2T%;av;`m+l8vLAe zzwW#QHVxYXx@)U$D<@+;h4dfHJ_~;D+aFo)%~}MEnNsSJ z?z-_h@;5Yf9UZP;1}DigvvkRbyoi0(7kd0o2PJF`|0*n(j$d8Pze^ta;C!77O_J*#IB=~;W| z;?z##d1*Sz?mr2`fj)d~;eBR`G<~IA znxAe)p3^()dl9L2aSC&L)<_Vqr-jJ{flf#wVu*^PTxv zRHF$5r=q%B*@f%K4^|!t8Td%*qLoq6N$xxy zoA@Q#3x!tWBm3oJN%J$Ca_m!UC##bvZ|h2?Y9SnL1iM7S%TC9rf!cEP%5y!1_pEo& zM#<_!j-xB;wW}+C=fgP=(1b#7bAGzl&(~Iw>o&8M8RV9kbctP)2)~MN&z8`n)Hn{AiBuo0biP`mM#0XVr8t(0C>#qKl zQF7+3-JoFPJ$^_jKSU*LY{ARGCU&K7uW1gFgVe(b=tLNlFr-E^rjs!-DF4Vkeq9TU zI{C3PF*5fxDwbxrVY^kspp>At>?Dbd`|pfgg~#z!y({Ry8VE+B{3O#@4Psv$`~Y zVSDu}cm96HIzg1?gdBPuL!WOL6EksUhj~@c@BPB~r=5aa9dNs>)z9NLtItd+o5#uH zvG)hu8CSc8OmJ{M?+iot%#!KmgNq!F{3^Iwu#vdqI=t5}#F?@2l~UVO01>YWdrtis zKj-DLHO+}23fhv9BUmQcF#W=u!jzy^tl z0g<(-rn9T3R(1-h%XViC=X9B{Uhcx;aKVfCrBCP!;l0D?QGq92iUn2qhuMDVX$GZD zW9v6b&rQbWQFAM+gzz%a83lE)tesSpxuVT?`J?T6zOIGlO6zXsU%(RXlN-Up%269O z-gcF9F2Z}xu8d)N25a8to1vZ@IX8VCfNOJ2cc0m5_O9{IF_{M<;rT z!Se2Y&RRvkJO7mu5sB{|o9q^Xf#(j>Ee{zQeE;`}q8qre>W&UVZUb9eTN4u#BO}sX zKX53*octhr76Tc_gJMLeQanA~!T3;_DjjXI5VtwvUL2a!DqoZ_GN<*D{a&{gL7s4$ z|0gf7&Y5@f#!&yMEj_TZa(Q>{4*Q_WLJLxs0t1b#3z~ogMnzXe7t7OQ5$Trc_nrFU zngh6LZ1>pD!*B3`XY-@Q;y&`Zq>3P9@qvqqVpVsw?InxD3&;DW+V11|HH2#T9$Txx zLF3Mih_C4bw7=C7e3Y1a&=oqPlWL}~>A})jTVxRXjgrR5tTVufVVhnJV zFy7;S>OjuztS*yxb<|PRwW4in*Vni@6BSU6^G$tNVU}T5U7Na5o%6THd7HQW z_P%m<@@PYc{x9zSvz>_Q$=_;jixT?$zSDn)1z1U!KDv1yrE%WGnikh=*CN{;9Q(Ej z@N61GjD|JhE`>aw!uR)Arx7eX7+iet5q%%yuVUHm$iFA6`Tzz`(c*#mzYtlft4S+Q z{S>Nu7H#aBJC`*;Fh5JUKo0z*wPU*bMMzU3mS zxh-k4M?W4$WHHl*kOiqQdgU?fr;O-yRWz}78cvl)nff2qv8C4dT|8Go<=aHYqS9dh zKS54mXSIgC+^pO7KHKK%NOb|80lD(!-&qgAJ;68P(o);laXcU7M?uk`#4|D_sGG@H1@GoU@!{ZwY~hk7Ab|B)y4e8~kKvENj~uM=To0S^>0YRsEux>DP6J)+Iq8RKMTpU8$P?h21%_ z`~)-m@Qm#Nfp%gzuCr@SX`_E*E#^`D!-O|LhmYMTy> z+}T*#5QUDHa=0$gRpEzjP2Uic2-S`Zoaqe3A&gbrW&4Sm!Q%S9$<>Y{{bIK66+}|b zxD7G2*|@-NX2R+>r^V5osc4{HM}|I$a@zhH%2N4b`=em<#Mz&HihjK6<*Q+p5_uab zFJL6#!fnL955FF{pb0=gB#@9JURU*E$vGw!F>F2!UEz&6wTiFYIrHYKR z$^S*$TZY9IG~J@OySuxS;10nZ5+u00dvFQv1cx92LI@t*C%C)o5FCQL-wk=+`+fJG z-{%LM%w5r2nIN3(Si`zyn8h?6(&`!Q+kCg3D` zz-!EX;O62onr}1IC+QOu5O|4Y?4Wv+F+4QIEX?Ys`nJEH+;2N=ci>Wabd> z!@NK%rgrRrzf;e*cBRfb{?z1OjIpe_>5Uf3u2T;MF|(IgNkQFEDMIUmt#y5#&EDM8 z*C)PXt!0+Zw4&h&5x8yTq#~9Uto+Wx{3tJ`Z$U;*H%7wRcfU?XgPSXk(rnLZhHH633|}k)hFl zTC;m3_TS@9)>BFl*1u)^PV8B>&}=jMr-*p&uq`1|t@q0p7e-iMuYHJgPQplR#Axq4 z6}?aj19UNHMWz5hKR;iQTzvvaD?>-e<8JF{0GEyEgH8~2WUq|5xS$+KP-H5Qd2({{ zI>|z|*b2-j7YaT9NA2oMUpuciF|P8_cwc#*zh6_rB!!oWsV(V zDD<17YfSTkAHS_`vyi7Dd(7fP9Z7D^U7=q@fctYL zB5lnHR+kJWvUm5uX{igdbK%(PoV0t}n&Et2Qnd859%!l(l$2QS>oRg68{Qq`UAQ4j z!k*5yGkRv}f*JyoMM2C_Enw^~@7IDMOYL@5F55T%dTeK}YpAeyL|Bm{A1A}*$g<(1 zPiqye)YkC(4a{}|zz8#4TM+Y(f?SMhQn_c1#ABs*DD9QgC#34Cau)Vs(QZMux13`s*HFHopmL~oe-N{mirRyS!@KF8o6bMmWa>;k2vI+e z+0QR7Jve!}>d((n%8pBMfNUhXyY6B63}JHTktgNXlRuEqbjxCL;5uy%AXI;5hcP!|;w1k-QgC$I~@>$lA~OcF>O73=1M?v08>3`OY4LaPL=91uUK4#oZ* zJH!hJ2VPH?Mah&sagu-tMW#2hKoRM}he-;R#xOw=$siEf!WXf`S6+dLg?L$;Dqsal`>y9{Mc168ua-W zu?F`oP>QlFn!z(Lbf8aE68#4J3~*F1DT+|5>mV#~55@#hBR-1UY>dFp&xMMT z5C_zO4~bM@`*{csitM}|WC2>{05Jq{>cA`G>4*pMVyIqeFp^OQs2L=#LVoQeiCRyh z{3d7{9!p#*WI>ErEHG_E{M^(VdJz%Y3waY=JCk6MZTu}tGg*}iBP{mhrFbOF5>zro zCUP#iDCD^8s&B&(7osuqpVclHNLPfgxS(%RNOrNu*%oWX0>4W( zkl-MWptnlk7Hy%I1+`1XFa1V~b;G@ig#m&NI$_BHO#4>_@4R3yl_&%+r_%bLYEd2ic)U*x2*5_r#QPDTw+r|M^1Je^q zhHMJOMTvMp#EGxc}MU_~x7cX<;?tBtCUO)70P7z{dJP<`0t6i9&X?t)t9 zfsC&DSY^&Z`z3sY2TvfU{zEg{JkxwM<}TdZKq8~Lj6?BCD76@uPF@iAZ{`(x0d9S^ z`!r24f_bSIC}{B|u|kM7aAO>L(D0{xQR=|f1)&aDtd`~XWo_l|exI4KWN~^=wb))T z)#ol}-WxK>JsOkbSV%rBKD)g^Bk1&O#Q}~~dst*1Iw zMFX_!raTCkXV{O9&&!VaZ~u zh=}flzl6@xSt(O9f}=PUNv=#A;~%P>uRFDS%coH{^0wmj3vB%%8n@g6FDIA69Ykf3 zJ0rlIxOPL*JY#JjJhV=2U}FIkW`>u;wHTJsXJqZi!*BS$C%xN(F6g|i@Y7s5qd&&! zl25xyGA8scxw}5)CJK#)*=!rL@nMmGr`)JThG5R$$p2!^=M4V+L73VtaS5J9WA6Hk zb?t}*L~C_Vbqe3UFWsU(>-&kEC5hi_K^F!Ojoy&R!T484C*I1aq!x2xnSBZRc0f}Y z;k%Y%I>NF5wQcVZd7#6sRc2xwXB#mpiXsug?&=%kLMx(`=@%I-!Tx9FKfbxWZ{k2Z zH;SE*I~ij7R3?;%SYYC5*sHTFyCd_|2?7;1rD1Vch|@E^_-DTVn`beDx!#gb{qO^8 z1t%=l!(&T4rap0QXuw_@|8K9=zEw~#-Bh7!q7QhDQx;--Q7=`HV;+iPQ$#&Tfx0L# z;t^l_2bClWOcgOj$bV7<%7BmQQ2%}almQ<(VgFV8QU>JPApP68UdjM5;RL?Uv6nJn zFc=|Td-hTWe0&c9RQ|^r5-0;ceuwz~zVORnt}IQbb2gwRbq9KRh{L~pz470N0|A!} zfLZ{_kopAq4Gj%Iy7RYZ%GWdbzpVlkt(24$fboO`EnFWjTJRMBJ3BuQm7pZ%e(Ber z)BiRE^tj0`C`f!`sGxuxw*h(>92ycwd3iz$=0A-C-WT7s4si}$pO%%iG%=y3uHKn$ zsHB7%W^DHj^QG(YFAaPZ4iL#M22{i$3id?-3v-D6!`lAW14r}$d~u#`ZdLnfUsuM* zIh=>%*Dd=2DR^;!#h}8m6GS}-Uj!7@Lt;4T?u=N zQ6(3EW;bd`UM~VX?p6QVVt>}EaJT@z`RVttOQ`?5cpkDgJY>W*VBYOLf-Waey^!wf zZ0x}M`}m!V=)~PkbROqD^8fx(4vARR?nw>A!u;QtF}%5b{eeodTB7O5Q4V@sd+0hO zh9bp0@5{Gd6tC^V4#cfbJQ)hQ1z0mpNZNnxCYKSvhzasPt<%PBAvb{vH!jQA<0HZr zr5n%WB@)B&g|3Z91EZqE11xPXGPQfzgvB0os?fL@Yg-}DiP-}LI8LvTS%y0!o~tz` zmHWeF0?S`yl*9TW@CbT{13QX@vS+2wa&I|z#e&U~5czz~)nmR-qrNoG==JS65HSfr zkYQJ$OK%||zO>Qy!{irn1dMK+@<7F?iS7c(7x@mtXn<5s{p4uODM(ZBEA#0tL2%9q z&<-g} zll%e6K%Ar>))FE92Pp$opK~HYNIN~b+M^^+R1INq*?YPN+wiV=hc-*<-q6*7bs z^&tWgsVflD!~`Sn;J1!gHRu`KPeDRm2oGy);7x=1B4>sF$eCo0x)4i(vPT1}I_Vn@ zXcE9?*Be!7U^3|ny5Atuev$j_iIX76StW{yA%WCL=9hyH#}IHq8v=STo5o0xW$*+& za3m7ICm}qbMHG^LxCh9-t}Pl$>K^qH#hguTwgLW`7PsgrM4LvV8y8{@87C9F^lw*>XpT>HO<~ z-9XTIUrQ17VYm!fejj1uS|RVL7&s{*&**v?q3{6$EaBzt&FJk@+7W#!L}{>uVmCfw zGm@jsG8+1z^(Hb570Nuh4>yIXXriiEq!bh3=zwBdbq{?}G`q%N4-R7|hiVXvm>L#E z1|J;`QlN~y85WXc(6ZJ1iwOFFG!|cFXOD>UiGn`m9DdKMzx;vi?N4ZrAz_p~DXh?T z-|olXC+ei{f6-H!)H3$`K(p5D_f_BQ{mYI)z?att6Z|=dN0g66=Hl8z1Mcs z|7!@69cqM_Zemk5!DhYsxDpKD$c9%Tm`a0Ba>Bt#Gg9YYFd)PH`J5xCDBKX=31gBC zLQq$Px`d8{XX4Kq1&3O`+D-?rBya$%tPTIg`{G0~Xr=IQZi6TuojW(eZT$Dd| zwr{Yr(|kLQT~wvtiQdp(JeEZBT-A)fRiV4TIgucJSvjFIA_C)MrqsLV)u0WIy6ist zv9>0w>i3drgMkP?h+5fH*sPJ?y12CY-g!Vn9wUZ)!BV86Gb6YV<*Vu=PmW@;k$9)9 zESfbP!~4fiPf^ww?1S1*-uf7gp-I{43@II9l#jz$R7w3=DG>jev+`xNk#J@_a7!5q zyZevrAACHyv%0cP?1Y6T4drcMaYvJHT4KXEfo)@LgNB9%ZYc(~KvFgf0C(fj zNFB3Y*V!8{2}DN9_0LA%xc|mXxeJD*^YE8w$c0JyeLJeS>P;QIyZW_==MXNj5UYh7 z8kX&~z)_wtCspsVwB&tXwb-5s>7W&0`;oq*!6C34AyTvFa2@OG*Efj-%IM$wNb_&< z9kBp;v~os1sKJtLD~~cCo)egwLLA?$j99}}lGb#rXKCqq(=Y!$wum&gh{p5dH|>r2 z_^fyJyNCoFfV--THu~6w-0^&jZ_&=_w`Km^QZ1g=s?X!YK_*vUbdzOw<3H<`09)0? z!&8EmywYPUU;hN$R6KFhzfMc>pctJDUqu$iROs!278Uz!(<4)!#0-( z?(NZ%CpAxT9K8g+1E8m}l|fFfv4P2bBueLNTM;pSvhR>9=-G2^A(yKP3V;4vIDbC+dZxMd(wxoVJK6_a zo~@6=d3=HaBE9$bTd~=mRy~pBJMFHYPeaHrE0^wJ!agrMy%DUxJEzsc(p5lmF=49| zZQ6<+nN@3-o4K^V&F^L7iLSIn{M4Ds6_0H>Mk;)~Nr;7n&}7!UFg?KdJ+Gypf%DID zSv;PdXlcNqW<**|+UfUrbXcj)I@DUTo^ZXVeNbrD({E#AW9ue!B_*Y=O%BAGhKOU5 zfG+v)J&4yP=!*!rRv$C$JVo8X(e^TJx8i^IoEkkA!rDtor(r#_8)BZRB?Pw#LqH zIly=B1sg5+xgur9UnX>1cu&fL+HwsS1Jf}uXq080W}oNb0L7@=wUg$IUbec;Yvz+B z1WEE#=-S-MpX&8iEnh2VIkm>~{51T-vqAPhCsHO3u3;Vb&12VIAGV!2R&1Xb%4n7^ zm=Zcr{5$f%gB5MP#TDIi7qXx<;YeSxG1KDqSf?&7#01O~v^#&+@dp~QE`)r9 zjR6|ruh}Ta<4IgH$Qg0wUF-B++jiCVPEh70&4BxD;wTv|7o_o{N8hZoy+HF zXK!O#dvLDRkePY6B8Pe@%6spt<7)YZ;_c1ydPr^#U*f`QoPy-ylZmKle4C(hSOZT3 zF5SvNOO|eLnp|iy4s~I{Q(rye%ejh9CwQp)$I*4bxky7uD`qd}3iqORbE&eOC@E)A zRhMMll5dG2Y-&Z0p5Vs_lZQdaXcJ$JhmrcN!p>#nWXvVYLu|pp-WkPVBHifdC|x4% zO15BF4XPh?6hGBT<;mzoPxET?FDtDOZric>Td$k&;;mHfD~fdhUxM5<7S((L+h>GQ z<*QTe+Onc8bS%&_u+_B@%4R51sSTuPtk=)7#aRrn!c>-UpPyJNv}azeck+v}={I?e z?cXwA#2KI{$@iaJiU=R-y-5&lWtd%@FiEV@5+$cLD@>is@_svc)}0EH4w8&OF4PnG zAr~bVcoh^7`YrKAcM^IN`H*PO*bcXSpSC3Jae0~-D}IiB+GwwFn#ODI5#7&rP{xjQ zJ(HVHuCuzLJT|{ut~k_MYf;F#e&FOTLy;R^aZz!A>-%9(AZnifI<;-(Zu|B?6fsOd%t~ z_5P1X?RmjyUJa}ke?rfDJ09ITJiQ!B6Mirw^9Stq%+2bzBiqGyXGRyS#IEW&=FZN} zzXOc7j9^IP@|}{2Cjlm!x&&EVl!zgX`v$yNZq8L%nqSeq8w zw}+{vQ+-=305P9YL@gNBbz_Cnp?A*tt_7PE@gUt8hX)F#NKE>ylMW3{rj2iC<= zN7>a}cSZ&IW81hxsR2(bYYj&=7p)(Gy&bo<`Ky3`&s0qmu44pw41QVOJD?@c1p zL5MNDszhJ2(g^iALD-B%E)r^nIHa5AR`wP)#{R4Gof{rD;>5)jzbLNMy-j(4W8*f>m$=@!W4qc8Dd06wB@HtB(8`yfFgLjhit<(##DhMY#6X!uzFI(O%UVxlFsuR1 zKx+VPJKq>EPHrgHsRa=-)XRvdXs}QomeA>25Q_qne}~tsLsjR6)7&I~SdLf7{DhRK z`bH5$zA1@lTAraOnVt;eRJT9JA5nVn!*rnZWLCgVdg+YIGgX~epehm~(hW7+HYN@J z>LTI$2#x^=-*IB`piJ?{lT*hR9ntsI>Qod4M~85W#w7j0;-`F%A$H}I9|5|Bfh|;& z4-%!q+DJ6Pl#7Ig>A{ufz$^iEtEc#(kIS>)?U+X0@>P$p7sX@7GMs|qX9iz-M*WPf6>`dUafpYh-~CcazvgIYlaz)1+4-Xe zZ6{4%?tsp@{WDIY`gRx_bxP+BY}d|H6k|zxQp9hc*SCDyNb4t$JZ)LZR4^U#z6;&$ z6a>1C3_ypSfCCGqwex+I>Jx{04CL1@5&5@rR=3zdUd}<@3FKh``N+^9Ijn(mFwAye zU(X|z1XY65(%H|fn#DV~aOVLSn;|08Vx{;!Ofq+h}#EJ_Z z(ZjdK4OGE@U zAZ51~A?wqYCBvaT$EK6NTHOz?LnXv$RRg`{|1AO6kzU~w*yH=FR-F?tKU)rv3mDgUbvP8!!-(CRMaCti1+VxCi>hV&!^OMBjHl4#x*^3f~M`0kExjM~F)J z7u5@?5Y?w{)hCcoV{lU7vv?*v-b-G~*ejmZ?HF@<))#Xe^t`(cIAsfZ65?cDhlBG! z80P;AGQ9#$|9%8C4^T{~Ukv`2UWp0Gy!Pwmf3LWIxY)~plDv+=E11O(^$$vW(fj@b zmHl6>IKt;_ZgG+5MKT>w;DgZHoQz~3Lx<-Tr9FD5q!g>iX4%0@9_w?a1(2WIoEQUl zzuCStIvv805gZNc+s3i>_6yV`z>ZQ)_|i*GNI$>F#zww6oe_UW5hBygF%T$_0^x;b zMTichH3+Z~`>Q{J(ulHNQ6g-Jr|?&Z>eV9!0K=mjX`+V#5Aa9~Lbrilc&~$t5s#K6 zijy+}V3p=?2wSqKb8uf}+FfvNJFr%++Ym=CnvH&u3^T7y4;161*}aiS5c5T565L$LYap6JD3BA~3DFv25u z8!#H-;BF*jCKae5dnba}!Wp*>K$3at+U#vGLvXC$N*m#|Ee4y@>`B~cWNC3W(zQQ# zb(nBkQ9v4kq@ffz1{x*A0zdTu-XKWUb<@0Ds>XcjsC;7N_rGzf`XG2H#RG`)Bt(3B zjM)@pFh9#GB8aiX8^AXJcW>9gTfFde6s4r51_$^D%5vRY+x-K($-dqXkjHHRQGlR_ zU)F%+h>3`9e2s|EO7kY3iO<* zNWB0mQkgaXT(NO?H<5PoCb zX(CuJXq&|914{WKqHU-V$e@wo2V;B!F@BR+y>E&AGc-XlGm; z8ilXeec*FSaxw?f{PgsN(Q}sG6R4r%|);O`$k3hx&4jRgXE-z~2HHYS+gGEVSGM|48{flX(8E)fRz`oZ=(ou|6!oTayO_JqlLlJ3^PWECv9;+pe zgMj<+04^eTcXuOnm=?OE4oiS|>vin_$~br@sahEP5KZleuey=kp7E1HYYcXiL*K-qYiK(*9q?skTuWZ5cZ-{xlC2 z+j*%n&M?&37-@+`WubPqrHYf2{w3F(l|0mSf2!4YD$qvOQ-@~N5Qe!!5tPN(H1y{jcds<$ z*DeWcg4bA1-LJ|z5b?iH5pCl+PYt$^loQzydLMI+-*5P{P>QF|{~sRcd_+Fd z^6NS-{N8iBHWW(~pu1hIAdN`kiz$v+(Z?a=1(;vQuLtQTCO#M^IRZ znq4knCqkBpqV*%#fZ|IBsXX`E2kRgjCV{(i6BARakgq5WqxBaq?z z_tm99@v@r%!Od(OqWP-*-4M?Qhli|;jJLFBGJ&}UV09Z<5+Ylb+B#PqYYY}ug}OIJ z^unae72BHXZ@Saa)Zc(z6k7see}*S7ws?*;HI24GZK}}D{S4pAq`U=F2;K8{=E;|D z$S zywbbiy7(1|a3KmmyCE?NReT&tCHLf%tmo`JCIZw{4U@x!QLFt8F~)7&k0TyvZC@rv zdmmm@ta#l2S=_)i5Jg3>2;?n75|)+#`+_+>-Nw^du_mO-mwp_tKKqUXv@Dgi<{2bA zL@tP%Bshd@2_-A;uZN*~8P3ibAA1;`+w4O?ZG-Pwm$L)h*p2Pvn2&53#v&1-BNY@8 z4y=d>=w>K%n6^{2x(hdpXk=DLqsF$>byy9E*KJQ$OH79@gk4QaWwR40c4bXII!`y5 zlNlS6!my|^Te1s6D!sJj~Sh4>vc#`?DAYHDnHu)_xZs^=HHsENr$9`y2a{H>Z1h#aa1je*au*T8Q=2 zHg_{|TRu!^F)uF{Tfu>u!5}VtUPz=CREACMoAM$^GAy1PHS=M$sI9)^SOd~@LG0w*XFj=G|O_ zkt%O1RbAC1zrUNy<_9at%}dUS3F<$*bR~fdY2>NQwBLa_aX7C?VAfh*XXI; zOL`p-1%}m{ayD`rj*+=dPn{VxmTkA&WzQ?Nq-rCHD9pIo+is73$G#^GY0rG7cf3P9 zp}0dIK5B{RUX4AcUrruBKjg29qOG90#ljG1Ws$LXfMWqcL&6q_6duD*&UUvTaI{)a4Gi1JAb=NrSuykh)1+FbAV_pk?3^LCzMyd3A#W+{`Jp4=zNNs@#JfiG$Fw>( zBE8B-_)y+{7$yU23;)Fubkz6nZQlH`f7Hhh#kcOysZVC+nR^#WD=ya zMx&1fq#tbIHA3EnI3cJ<&a9m-@}FO49d49nO-Id!eQW(3+d@J#)JVE=cssxw45g%L zu#0mUcDVAZZ?i1G4lW$Ssi@>$%df+)A<|QaepV;5WiRlZ`A6NB9|g?}`8=z(11bG2 zUl-<3(byjE8(PYBTLfE>-e$8IROvZU{eXEB5SD4oP+F9jbC>P=^X7 zs*niqR|jz;!g0-NB>rit_+5eZ%WMpcS3Z_i)fRY9g$Y`wj@U; zeel*hJDn$)fnjGS*)(4u^wL9)IK+_mHeogVbooVz2al86&kvOq7t+!oplh0zv$CR{ zYHRkX%byliSkJ*QVBoMSOH0Iq$r2uR9icpPzXI~fa{Y+>V;na0SI`5RZ`JxYT^A2w za-11GQj4>A;iG)o%i$8YF!({kt`!Cu^agINUw76{@|1lh?Rme+fqmh>1_EP} zXo@tnOu~nEI#{c7Qq)CJ3MNUvNXG0J_BKfj4VMO@`OaqrMg94%Tlmj+Dzs~@o@CY@ zccjB3&VU5h#2oL_P<6nM>cn=)6*rqR%+@E;&2pcltSN;=xM*tLFryN9c@iPePOLf?h4 z`;t6I@W<)OlfE+5y#WcaJdgTx@rp3u_U7Odz=1EIa@?mP^08`N1%CP9JX`B463-Q5 zL7;k+kCWQZv7mR-_>XTho9}9rI&S{KZQ2p0t7OT1-8NX49*aEep$y_HKL{E&8&= z%XaH<+6ttrUQN|_3K9(r)+$iOJd}VB4WzlPR0Ubc%bLvBNn4LBP-7tMzZBl`d*v)- zE$3@m!IWr?>ANHMA0=S_Sv4Ed^3Y!EXCP5UgOs$FvN#_#h>ulNmTmFgt?Td=@?8J5 zHFTLe`gjLmz@N;Yzj`Z*2qYB)(QO>FA_$`XlI^CA zS3Hh=?6aPuBl4QJku*qYTI>=oi1(zC)Y{|Oz`2V#c5D^i+>NKatn^BGyl9TC_j+jE z3crD)_uwQ~bisLicyV}f@iwWh3)k?xs%#slrp_Y2cVWdhL5h}ia@GvE2G+aVtj?nr zmtaiC&+HL##*{j84ortp@%_*ZSb#>b;=ZPF9y+x&NVwFqltu6BBBap z?Y~FPzlrzBDrRO|*lXQtqDobfBYGQ=uOR8mmF(HF-wHJP_cgGm_nl`}HM_N_QUt(O zStLklJ(-2niKmJL9XM!$5XOstkA^ut^SQ1iXsRc>uMV)%v2@7fQ_4C--LjlleO@%+ z!}>{@9MwpfHM$xT8xf({`2D$<{E8s^ZNs-}=f)!ved;_eASh0AzB|6btA~%aIsK04@y>^Z=W3P-Rh$nb4zn0=_3sZLUK^<29(Ts>5-^FFY-CtlivaAbFjx9 zUf<-pIM@ZLuDKdq7QOLvT!O#C{$knqughQu2Klr+9Cs9@JTqY`cenH{k-sy;w;1Nh zL9qTEP7F4xb!po+%<3;BtJ%(bkkxd^n~`zwI0mJro8)dl_4=R7>ELz|EblLxbZQvT z1QUiIGBQ2(-1`d2^069CWZV|NMw1`Kj_x4kmraTnB-O2n{JKovDT?UzN9`}iWt8`e zCwbHU*QcQ-HqHLxT4}Bz>aGW=D2i+spm738OvO0rX?xe8t$xF(t)^LF0a=S=*XB>i z+WMw8ed6<;4N4YE|0%SS<^5464RI(-0{z)krq$99IX}f|$T8gE{)JbcK?Ic=-+RC=$6dLA9NypW6wde>HoEapRQ-HTue&Vn~^Ar-;qs3 zvI^_$*2pFzOeuVF=5y~jb0v>^JyB@LaR&dPa=(7cy`bPbER0~i%;j7${GQ`%#|q#D z6$J6DH#A5Q9BZGf!)49?NbZgtfe5uN65?8i{uf~eAaOVYxf0Npmo{>%PVcqFCrERb z+n4X2)+>IU>CVDeXy?W%J20c_UUdn;hu_pDNlP$b)Xrh5r+739tPBtM7dQfVN@ep# z?Q_JQ)SBQ7G%aZ`nIa8jocQ#I8-Dgre)b1 zb^nU(&}o}hSfK&Aq{;p^o4Cb*`&_wyOJj!TgAC!`^CNOdM2@$(`}dNyEp7*~r(^+3 zO~|fAN+qR)rtoW<_&;j=>PhC-pR{;#YCBp-1&Rtoc@ehao3pOtomfG2e09PpnA3oPM7Y*r2)Df#4rBHk#DuTlRv5d~<~ zz7Qi?E9tF#>(x6ip1E3aZ!~E>A+5RbRu*Ka@7VM>xkL^SCDNx)0)i|7Uy7NdB{T2Q z15w&iT(#U6u8_j87RP+sCybX+*;gek@u7t4r+9gk$W;GWoBPQoZ@{O+nT}!a_2>4> z+oLZHNKCNun2g=jsB;1L0}98Z4+qSZ0cQ)@mt?4)lm@DINbNkEXF!I&{Awh2wYCek zZ=Zz@Q?#B>(md02;OKdfegu7I8uJ4xt$bVD!D+hPd8zx&h4ZEi&3c7turl$Qp%8+(c-XJJn*DW)>~?9+Md#}1#%O2^0Ji_2azjoXL8`edVGUi+jw#G`Qx zTI>>?x6M%T9ZwAn&m0HkdzI~vkJ+Iz?})pZPM{p(ARwME;)Lf;E6sa?sSbknpsBC>0G+et|(uEhA^dWXpAM>6sYgW&j z@d&~D;r)wkwY71G(>9`%=z{{XFx&C{X;J)+|EJ-W^jyo1;jO`USiC17JEuxXirnNH|)4=0bum@^U)TW2cpu(lak+qt3SPSyBq-`kr=|aFFOAE za%>;kFNamjVLQW|bavS)Jyj_o|e zIQN4wu*ke#bbsVS0RxnL&&dQeBAfI6l5i?sTZV_L9~V2zneP{=qx4z$KNn4ejOE~_ zif|!p$5ozmWFvj9D=!ZtBR?x64^Lh5k8mt##>pSG(6~h(OFSq4yq$cLl=OB|HyJBd zReMQ0QE$l9|FlS$RUsuHEcz8ru@0CsDXIGYeD|9#uiT+kPFh(FFMMo*fwsifrJs+~M&GG?D;uU%1 z-8eXSD7tvtnW+2v>WRZs_V`psU5$S8mq%tlgSM7*CpBl(XzRN8`mLlsC$nWBbjJEJ z{e!|RJr~zZWVaJVWev9gt0*jcD{5|D<^o50bWV8*3OcUI`%{3?6Bu>#zf)(*v$vQ`6DmrTq+uSt6K$jgGt^BJI zx4I9@0aJ@+%RV@yJjh~lbPm50y=ne-kG^A!yv$8I?6MBGm!5_u(5%@LgM{jyh#6Vj zOv2a1SN+pYpf*3B+*=!O8m6RpKnZ(^sqQ2Ft|#mh-mW1UU*?_S*S{9(IqSmL71_Gw5kw;@>{+iaFrKbPU2D&s6Vtge-Oer z3`~n;qP9Z96$Oul7i7Vhn|W!!@5lq*0BC2A-kAt5@gZ&)d)D4T-YI3G966Z)ogY1K<4XF5!z zM3Gwyg!m~1j2>panhBQr*W07YmPB~cDg{5|xm~9$BO={j*3;b3?YKsnl6EQx7GXcP zJx-x8X_zP{nacWW+=JS7G$`pP2zSf+o3}9Z=1U$vEqzLubK=D&(VR)w;h)zaAp81N z^I;Rcv|2Ic!8$Mj@|-ZZORDxd5Z{aPSvwrM6l9ZbvCL$VNXYh$78O)s0@(~3T?{=< z(F_OS6^bpDuLvbW^yvdz1gxVN6@^lj9-IIk(X=cKw4aPH0jxn^1Hl_QC>D-#%QR~+ z)eV-GwHUSb&bK*ea$`@1DumVFvz(^M6i^r9zgLIR@dhQQj;)1Z1B?UhgI9+tV41-+ z@wAUKdxZYHB-m;H~5BV(ii= z3@`T;{%W;|Eyvu6MYv{#>mHnMuW7*dme9k?EIIRU6I~CdoO%P(2UFjYJ)bjiW2FjG zF6y|aQ>QQApJaVn{*&-SXzzR0*CI=c=PBlZ=GYHb5u+T?A*4eh1|D9eN?gT^3nPF3 zR5sFv3)+}gl4LiX$p=*-j|x2?g4mNJI90!>O-{1HV7=w~Y`iS{xS(LyicDS|x*>02 zN-h{8Z<1Fd(AKC>*u3W3-PhF^brRP+EjDzhSull7o|@P-SgE8`;##qL$R%?4b$Y16 zS3X_hwxC=Vbv39UW0rTZKpN_8AS`sL4#hIGKlv_<&SN^v2`U7_S{_{c8)zd__*F3* zuN<7-$?q`ckz_2y@B0wGNXK!E?$f~*Ld-xnKviC=he-brr%vBd;HimY3J~=krVwXS~W!fuBKYoD8;QHK6r!N+UinDwjxl7#c`XTBc{W zR?(y?2hr_8)})!MUW~#^(P$FF=naDy2jSPar`(bd);%&KTv-(Cm~aO{s{?|uW_Cr? zDtkNHygTs|M{TPL#bq=1agGd#D%L8^`Uy9ZE-NeuZ3V|H%s|f0W96pceFwV(eCFMe zkus<)6lnNwH_7t+7DUH2aDa~ppC%xl5cor34j5`6_Bt#CbtO+tq`(O zb;0VESP9`g1SCDaAU0F`hjTB(B>&AMeKP!d2p9|-+)SUcPM)4J3i^x*CgKUinm?aV z%o}Q)quxee!fS-koFFzU1mYj^ncL?qh^p`$$eS;#Xu+fj)&e6{n&neDFX<*@Y-9Bg zUvE6Z6@1gzXWb99_73Y$&{#T+OqAXaOYMNO4*7WDd?5%&cMh7aA7LEP`Um0zrf2&P@^aI4ic(-L68}R~ zV_5(1+dgR_7YDq@jY$hcEY6@AEa6k_d1J%(l^W5Ib}!L*$L^b#|@WP)oG} z^(;w3j7{!_>*DvSzcOo9=vCV;RS@55i&u@TUOsyrToP6W{4yI+m!Y3}v`y~`U|X#3 zWNY}=_KRV8u5X$*v@#KOHbnC_r(<*91~sdq*mIeiwmhpH=!!5Hk`YZwMj;^9U7H^!?Ex=z^ZFnIIz@ zWB1e3{M>QJmFSe{o%e)Z4MxJv)4i*Vae919qWuTy>4igLkWLkL@AfP=EV11}72Nki zbms44m#Gk@K?=~M$9Wwo$~U41vVs5p$w;TZ-ayF=@|O?$Ms@)hYxqe zN7yHC-iUSm{obM6lJ){e9hdY=v`V3v6(Y%EjyczcPaiZ%RrvkS6=B~CoE3LP)Ic1D zY{MUm_f_Oy!ab;ljH%5n?ZTK2LLfUGrfUnJ9@<_!b5zC+#47b~nr+NaX0TB2S*K6V zBO}4*YsHzF2l0!;ZC@I2LG)H17>lfc`iV&0lByTP_%Gm$XzyoTIIm8TCwj?D*WZ3|I|X*lqc+n% zWxvO_z`Z;b2I3i{I3h1Ol(m@WrcRf)bupUX7eY((r+^Py*87>%7nRZ zc!VsC{YS?yK!j7nWuVfX__6z|1K#$JuG_)Z(}!a8rWVdcL2Vjd`U(LR4y6^WhQBCc=}$?*t|Ul+x)JQr2VN}H}7P3d`excG-k+EFVb;;fZxvl)&b$C==m&n zR=MES?*VR2P0EFAO=DfZ;jOlg0K?;m^2pHG@`<1jA5XSb57ru~pwjy+b-xvrT)v-< z7C=b*Cvah?tu_Wcc?0*~L-w_jL=;)@cR}Iflgq_H!8CNchkKbd-!|Xew&TM|$fnFk z-;Jg-=M`Q-E2E@|3GFQIb`1f0IN~edswX2s^wO=xtE|~9O-F%k?}C_V1{$;G3C3cC z=V`qaHa(#x`}^;g{@{IeV~5QD(bpdK~O`^3WHTjUe&)6VdH?IovCeFGPCc|7 zjh2t+0D#qoz}<9-jjE#pn3kWTWn#;yr?ZJk_o|_<`<}V6hQ^;5d&yvQj)LJYni!-@ zLUZPEbP#8{g$7Bq%46kbe^Rj{`-_HeUbqH7CHekId3#~R}H8F};sCm{m znRake74$tJD#|SR%R3W4+=)la=a`X+BGhzlHEvTA_XoMEeQiA^Bpb`#qSIkCIcLvh93hb{^S7u_n0~RJ*Lm^`&q;<{bE+jR1WQyPG)hF|G-<4*CM~w1b*=U76_Y9 zZ&@im?eAaPry{}G9XFcGSU=Pj>~-WI3z=ULy6v@~TT2V3Qb^h)ycW3O>)?o?@3fa}l_H7i*Yo%{j9M7*9 z3!KQxNSmkcH#hPx&}-mzT;l&S|Fv^>nuEM=H%Y0$>g&e_W2FNhhH5U@_Ssa=cZz)b z@iO)F?~z-*($Ug<_{FA6O#7?r=ZipUjZb^3qo~mJ`^Lo^wDn9mxUz7`9bUxl>pR2^ zj6|rzpGxSPzR{ZdY$EB|l+SdwHMb7AUu1(E2xY6S@PT;+TDKSyXmtU4-b37CbbE@K z(|O#<(V>A%bnE1VQtqkvYOt%Q<6Xry%9U4;rq!l3DhV-yN3_yH7jLwNVSA-z5%bfX6MrLm&u0m z%Pt>U!)f<^>6>-SJqj67oY9bY_pd^0f>AMSNngK{-w`zcxtsG5yx%%dOzoe(SMKop@D?iA>wdNp7SrB(9y{k-un{067bl~~iPyBSy`s@#?#Kp4;8+(8v4w_2uy(<1mpque-L^@NBHqKp>SC z3F#VhA=^P}J)fP}SkgG1Z|eZ#>AV!sJ%Bk)#P>?MoH_{p0ZO3qSrn$O$vs!f0K$#Z zXL|K~s}?n4G+fTyuG@Sn#amQPLA&d8lZvy~5kjERCrOp&DH6Y~oW0@eHRuiT{z=!` zDPnt4ilcbeLe70Z=g}mkxP(k>`MIsbEAN{+O;+GlJ?Qs zzB+$x>9`TcrYf0}>#y@mBWdTY9=4O)(WXkxD18iWZuBnwKrJr@-LKhnf+5UBU*OqCX%%@VNSg$G<)UElN=Xbaa2)AaV#M7 z3A6|+BaB)IqsmpuNDV)Y!&TnZ7eb!De71Nn#*T@`5QeW<(7|O%yg;pklqV>SybQU& zFXyH=FdMyQXo48O$oo+UGi7dH4jp!N<3V{O{r+KkQZlxCa&(>kc`n+Xcq(Hq`0u&au<7VU41aJOA_zrbATo)q}We9tUnrtClqW-dd*AH z`=G`%v*9Ked5<@=#8LYnYSv0O#Qens%co=Z z-~PA$sYOK5Y2fiB-R0DaI6HX1@#TuZLTGXALmS>bm)01r|3R&CSPNgB-JmZwnBh39 z11{Rli{=0?OS*-Uw%HW}hMXYN?K-MgritPx{l#N<})| zBI1I}U41Z|sU0%Z5B~1UgQ^j|H%>H1b?mQ|fB3n|UJO>kmL#!LG}L?bSCIQKKJcvi zEmOUkiB;-qGHhe+pi@p_6b3{&U8SmeGeO@f!4;=`$yYUklT~e5jAUlB&dw?!4%2zv zIOB!8v#@$o%x~IdoGnIT{XD1kfnNj{TmkpTL?j9)T^P1N#MT#4=Oy=0kevhozNy&W zKNZPry=7(ihwpA+-zJkbqF>~yZE3u3z-91KS3x$Z5HRPpx|dLx{k_dN-hKWa4oO>) z89151GdV?==8qSFumKZ}Q2x!j^B&}VCp-yA$T(cPRyVj4=}n@!gdLsOc0O7UeY`L7 z4OR#cwm{qawrYC8pG>L|ShsAp5#v4YL5p4kIK>3@`V7 z1A5g4XtbV!yvX?dH~pRf$zB7ntAJC#_yI{N`on)sx(8M<7FP(nB`!B+wuKcn`=QR( z&6=a#n9B5UL4f9eLv_V&WtjBrN_A~*ZB5P8I;dyk?|p%jtou$(b2w~k`+CLw*>J@|Qq2s_VInVD?k zFPuvEYINQv`o7S)Prn!N$$Hx~w2Ki}L!-aZj=$>awfzn!_Y=3W_2$#u4|c+3)S>x7%WFiYXbMjNe=XG zAIknpqN9}-baRZV1$_&&)Z&l47bi^O{V6PZjt4!5weMT%Ya3O`rAy>#PB-2iJl&g& z?^n31;u5t$m#du#Z`0~An$CbKpu)%9TATSY?kcXvy80F9_SE#ALuEqTX;Oo;`>8Ol zm~tu3ek2PX2MvRzI(${PVZFWH9x~bUk|yD79RI)Z!qYi%@KV%hpHl?rI0rpRhwWwK zkI-mNHoc_r-4z#~YniVU`e|;B*MOUO(RoOi>}9XhaMTf(@MTnqO0;e>0Zj-)c2I+c zsdCSSSut`>Fl-CIqBw9hnKqnfHdeE+Lpx|LFgnXWxej)v&?@kr&a8%gpVW1pnq+Hmoht8KIohSC5VV5Hsdo3*Td(ND#JOE^ zSUK%ggk{#t&96y5nUK<-b{$ZC@7M}nDESU7>0&uLWBR4ua^rrVyj>ISElM6?Ke!FN zsj=>USWW)mg2=^4(|FJv>vh%`(f-GwtBzv=zhN{hv8;VQ+LUbV0{8&i>^o+SGITm#39FWj}- zf)=aLpN0|yk0x8#%U4{z8uPk&Z8C&M39{=ViY;B%n_Ri`d`zcjn+~YNd_4@m(AVDm zO?`F0eHF}=mKmeMkbA)(&X%)7IsNIsAp&dXTr*JVI+$Wi$D^|}H?=Kpv9co;T=|ji z;Go5V(Bt)2zB4PM-?n>&x@_sbBfQm$`_Sg^R^?$WUZxMP`oF4R`?h?+G%k5JXKm`q zW|LL1uv+#rKbuI^X_V%JBICKAnfp6*w}`Amv+D3!1OER|4(7ap`lV z;a9P0LXCv?WlGTk4?`oBbwgBM5%BzwV3lpxiutlLY0}1O~)JU z8ddG@(KM|E`KbC4gqaA@7M7Sg`bI4Jib(nH`OgY%0yM)r9s;LTSAK03E#6Elx^j6X zOOy4X>QvAQ)u^XukNH=fK<6fb=2o@TRFpUm&;C|}hwWDJu%2L7;()TxhE37s1?x%N zTP3gS=a(z*`@M&pTWxLaTDL$+wAU8g#87%7BN>#kM-Q5!^?%@h;y{ja&<=jEG%gw` z`aeWC81XXb>n9L{h%vf->B;|ZuCZX+iD4%~Uu?epkCe;CVFCm-7B2uh<(pI>Qd-m@ zC)hAKN*S7GI`jUXsTIC^f5w3?XSWmCCIKDaPa*ld$@3S@u51hovNPY##sp_XM|oL( zS$k9DsyipR%6du(Y7u`)&$^qw*>}p9htH&4K0EhGs|C}ufH=mxraeHKPf7=fLGx*$ z3Q!v7QhI$o*U88bJ1VVU_v3yB2@8Qk--*!{23ja)xz&8PG~1SXrxx3)W|NQ~l5B9e z-SUW5c3Y=stE)pi6(;EYKD!vFBNsr$x`@!ar$cWs@K|9W90Rn2+9T^jm0A zTj)LNNY}jR@qR3)u(HZedGJdyS0(GZl~)&iLr#>j%63gQLOJx8%Uv9@OsY%c6uH_m zd`q6iQ(sdflm~KxJ=FIVZqAOj<}7yiUyyN9={;y%RD zPf)cT81#T*$L|(%uaOBBz`{@bqyS6lS6t|qGPKQt4+L#z5Eqrnvv!1fZ%ni!h4GpN z3fyHAHynQ1XpSOa(k*PC-IaxC$V7f{vCdU`9S4HY^S30Jr_WeS({7O_LS$m>YyPy} z0V1r{kL*jz>RGuy4ow5PX88$%O8qbSow1yBKIH>$@hOCULytmq^U~saeeX}9mo^~9 ze}{32u1?$A+iih=z9i_`7l1!IL6=Oo<3;74P_Y1QVj>5AvmW~PXo$*V+jx5s628hm z<1=rFG`tzXL=zf1fXb*o#wFGFpcsF6#&qC2`X7Md(!QrxXUNLR6x7Ad2gt}ZH5GuM z2wQ*Qe)QUXJ*RzZD^S*NfDKV56)m^2uI(}Hww6-K3MMgFxvFis`&UJ^axpi59CK{Q zkfc%)*Kf<<{q07RA9Nc7LW~3WMKhqVTnUpmHYbX_`t95t?X60G>^wW7i7aa+ETo@# z6?wZfCf{XH=RmerS%2Q7>b=}OU%5pqRT>t#3l$W-rD(>Vij`-^tzQ6d)B=3(Xh(z@ zW-r3^BPl6GE7c=uEHjM@chUiqcW9gFRZ-6Ze_itt#4yfup+W}QY9w;85_!696350U z3eapQ(GhH}*1SPgZ%y2^>b~Bd7xQ@n)>xV%&!Gl3L1}0Zr?X_-=8B;Gbznu?rhYW3 z8&m&h)Zi1LRDBY#Z(jgy3OB~FpFzx*e?Nr{0NekG8fG|M^b*w~>n>jUh`?=iB(a4<6<+ z-+l)@d)h}gHz4yiN1FbaW@8g7?!_PpgZceIye=Wm(of2kE(8I09O&DFJO1k3S`3PE zmtt&p|G~l}NV1Ma{mlLwx1BxyI_FIXkI9#bg*9>~^SuG~mAh7g-8ToTzqCq}IUwJ< zC3J|x-V#*HS18N$V&qSneV6Ah=X?K#l_K9IlhP| zHRA^%2ip|=>c3JKlT(t<;W3#SFVJGW<^91Pp(C!ocdvWy<(cQH=c~dl$(VkiP_&=A zthzdSEfX}zb8>YQGQ-69;mL9+TVyVgNk3%69B=^#MpNoFjfl*^&pHNlqCSrIF5OS8 zYo0dI|1=3FKi&9^pmL6}HJguyUw{6QN5f{=_`@&|)RCjO$}zx>k|ReB5&qHS{z1N?^NEh&xAkowxIlG4vg zxBOO2J4y`XpiGrCV_!Dn*^hnR%8yfJd58z`DgRM0dbR4;Wj}0>5je`> zHCHBx)%ca^MY)CybgK-oX4)hPocy!OahWSWOK9767CL@l3T%HItX@V)-7$n=4;xBL zEbY=x8~WToBIapO*Hgnd(PtNO7Q5qpTRU;A>u7$?k}wUM8yov+p^|{Ylnmo_v^(!tKs{BC_!)|k^|OhS;9wP%OeRD?NY zRwN&=y>v1VInJ6t$dsl+TKB2(*vvuJ9((rqa>zZMuoeVV=4c*Ik&h4S>yKx_q>s(l zgc&|!1yfK}i4miicMSs3Gs8a;_BVXPtAz6-H1f zee8|}+u(X|Px#01l1mHSBA~yZ(qC7t)cuDaUiaLM%#WT#*RWb4Z$2PWw0MtRk1|re zLTDwSic>Pm#X$|#K*QTIQb7efG;CJa5s$oS4z)_EK)hCs_dhv~FyIDfC*n5r&GuQgkmwH+r1TCtiEjT)p8H)xBPhs9uY&Dv<7-qs7r`@rRf*no|&l?xbR)jA47CUyZ z9>j0RnMGv}grYA*Bct88+^6!Q{WTLG=K zY?*@ZW`B$-iYk{7f3ZGQLfWihwGo=X^|XpYzEV&R7@VtZQ6m3kM??5_-xsj~RyAh> zJ2UpQ?gc5=BIOM4oW^&J&Ra%DTaVJ4a9U8XdL@3nrUNpPZ7X|UqhnnFxZvd{V>=tG z4&qR|q7nPPPAS2RW$&P-$h6cB+uPmfV9H8v-7NMN%*FtkAI-_`{kM0L(lCmjarso3 zl4;tNx{do^_3loa1VG$Z68-qpS8}_|#1b7*du;cnH|fp>Dx7bt*ZSRA0Jf$%T9L=u zJTpiini_R^V>&4&ViJ#Ig=q*m&AL!h&Re4%d!;6Wm}scMWADAKU#(VY!O_sRh}%(G z(d|mL!ASNE^$+Ht*H+DkxwiQ8av?Ti!elzq7l~giZ!6%-{Dx$3>_D$9{4)cP<=`Yk zuC(=qqg%4t&aZ3nJaO|EKDm6+9&-liQB!gGMarSGSvS)MbpMq_u0`A<}_gkmAl+FN(QWzFzv@QeFr*( z2(hn+#0JW&P&`fCzE8-L_&#oqZJ!TL6a_C@o#8^K-#s)ep!bC(5iF&0fHwQ9v+4O? zof8pe6`J}=6saftb)r^e?k&~aJOksjET1L+LH_U;ywoZ3-VVh=<pXPX{kK3m?p-uNCm$c?w9Wo4E|TF8fUN zjm?}tfC1wcrwvg#hMA6QM~GtXKJ0NlUiTIp%*L7`#tpBa{`x1HhQJB6H<7+q-Ez9q zwcF+R<)|H{N>GC(+$(}(IcVus7GAR2Oo*3uCSTAY8hq0WKS!|+8G1IhHf4eLNO!4S z=L3jR5dZ@RT7}4X;<1&G#U6Ex zRAz)(aMo(Q@%7dNhMXpK{eoy=nYScykM@c~O)ah^nl5+xRyUFz^TEt?fBpD9!_mQ7 zbCF0Ie(;v5o}fvqO{0E6{Et93mer<<$nP%PXwE5keh)rC!*cXfw}2MZyXKXX2^$`; z^)=2>v9xjw9)F-RC(~BIY!qUcJKd>}3#L*FzdE4*r(!8Q{k2uUtSp*lt>$6*klFSp z>8}aOHPm28d0bYiUj8X$+YzzzAW544qMWks4}=HaK>zPcJ*Y8m zT&7u)1S_OR!)Fm&X2ImAGpjDl(K=^%Lm3V%3oPlkYgnbJ9u5(NOZF6t@k+lLoA=H??BKtXS7-0P+*lFqR~V<0WlE>$uGBu&tG$FbM?kWQ zVBHAXB7$MtC_YL7yJq&FaiVxCV?RXQB-d4HDs;kbI?w$1jBLbFiA12@ZJ8k$t#?JU z$FA+$aqRup5Ax?lVDMHGTF(0W(JTzd3c!xQs%h%Q@)^_0<7 z$l3Pr*pPkA*L3WMcgsS}#7>nQ7M#=%yEOG`wvUyhQrTh}uZ-~^drLLPw3~e%!vvj4ePM^o z=ao$!L-eAb#$XGX;|B1YLy+&|`s311_Z3*hS;Npc`vr%7wdvp#a32KkL{Q-kK6B#4k>lOkzotSylhI#YP^^?%N9cled4 zk`Hnn=-X^G_;pY0^+h3WK@%>*BNBm%dYfJipq|3}>7Tz=N2|GQljd#C5Y{f=txeK? zd07sIz#v9lp<~9!f1_raoiQz?7Kz&mG(X}99T?W-jOa!W59LRv3hCoU9a`>a7z)=3 z3t$-RR7~&9Y2^?W3g1*%Od&1&k!}C@Pmv(dB~q`j&Q5E>x{b=R_RQj1PPcbp{k@bM-Lg;Pt*ncq zBrE|QDI^t=OHfOTU~fvLaxGPn&4o|dc$+a9*d3Z7SC{8TXLWhbGiXpZW8rd=gsv8* z)h5cauKZXAe1Iy?=(VYW2tR~nAOC}&5k1RLOlyrxuzQ+}EDV*c>Cd(z((c$*$n0?- zk$(^uz0QfI9-=Gxvn>%f=_zet6_na))L=W^y1ip%KX{XYv8_RY?KEHdwLUFDZCAy~ zg&=xAh5xa94^jQQ)VMPgBO{?(c zb?fLdpMH&^y%Os`1xG;Dq0e7Od76YLAy5W6!j>C&H=XFV{P23ia~c+{jVY(bG^X>R zMqy{`;eGF$bC({{M*20d!(PBLNlaI!@#AQ%;kprlcbl@dvhoHHd@&0^+C=GVe6iE7 zDw?jby1MnAUl}@-34^*<)!*+KyGl6+bany7kn?lBDa<9ycS((-d!T0DV815NcpJ5U z6t}&u|Ct&O%tFoOQzCsTwIJAj%(3>Xqk-lF@Uo8m0-(7*K=@#RmLs2q`Aha8qO*Bq z*n#Y)iAQwkhJ*k7UD3+o*e|i9xsFsSEcELE@W^a9@b4~TU0+3HX)3Ls5{()(u#-0Q zQhRp~0T`PlU@+9=PNnaZ)X|f4l|!(X|7dwxvcLF5xY*Cq^XfF5F#rcUU~%R!94Wq> zO9>}F7AXziBvuo$JCnf^FsZQ!Hp!IFe>ciMWeEQVeVEKE>fjHX z@mH0WWWmqHbyfewC4CbMS}ujId_EUH(_iqq{Vi=udZ)~*qoBGo7+lzwI||O3WVa{Q zqEy?yIla_iesr4?t*1RRycg77?CXS9}12MO*Kfpf7=w zjPTzQ_K3P=QQu&UwnHB!#T6HPkY%FC)TMAp!xHA>G-x*Fg!sznJJ_qg@`Vd^3$5rE z)J%AGBoAqX*}38GU6roMD2)B9+rK)Q4tz_lBXjnPAstNebdbj6F<~vI{-H(NdT+ed z1N#3UkD#tv-*b9UO3djTfAd-5@L;R+W(yhn<9#ncDT5EWn_`$P=sX7kzHn0ruj8#* zZQd#YHU9mbVdpk8IQ4 z&RrjJ7q;DnuCvz(ZLJS{`jsa#bQgPBQ!pkbI<$3miNf4DugOErRYqqG$CJ1)$TDxU z+#a^w7(yPW<+#PIK&Y#n$GhD#&%HdWFwOl@PRKihthLXjCkG<~R|ee9XFuVQ9j!i) zVQjHG0L1%noIUWY^?FJU#>_Qgf;a%Bb`CEfq3o- z6_;eFQq5a$mmHUO67eR&{}6;e2O+2VL#b2UtAwYPJAD>cOf2RP*N=#Ay4Mx6_*7T# zsp((Ov8__B1afk-KA}bGJFWm;DE>+vXi_Meu%4=5gWpalF5Mo4z1WjeOwY8?b4YZw zcX^a7`7~$TpB&Tw-~Eq0`d;$}mjb-DyyfAPg6}Ag&T+Eq=Bv%sVh)`$)bK zAlu7v&^3RYoWrTGHH{)Ss=4S9l$$VL9X}v#e8u9%^LHuB^Z3-4UuUQ(y>rn0>pjD2@%YGr^*e5O+z&o87s<~d|d{sks&|D>J`4A z{Cunq!K!2CVv`l^ahlJz^b(e9)4}%emb5IMg#%T0_}-+Qx!>Mqrm;QDQsrs0CpDgi z;fRo#CesjQ9M*df@jZW|Z=2mc6Rj`60|TICWUFsm5c~a!gm*#d?4g}aW0qoyQs!Fc z!1^svu}Tv&SvpJ9;UY8!MtK$H_%~ypK;4PCmV>(!osy-n_w$(EFu4l9(AhNuB6@L{ zVFH-C)32MzWz5Qx<2Ca8x=)&EqNb~+i^bI|z z1&aOb0@A`O+VQA(kR$4GJ@eTDwydpAIEw$@5Ay6;7au;iI5}mxv)>zc{_&Ipp{!^N zbmr#X`~_LBf(x8)u9GYD+H4z9=q5S)A3}RDzaRIiL*HEUGS(+EV55!FG(IIZ=-{4t z`+PJvor03TLbv@SqS=eW4JhV-nwbKijG!B>;e9UdNV_W%AHPp!{;`3I(XK?#Cliug zw(kmK_R6)ulsm$wMDY_tx3CT9?iEBISB?TC>-YlkyHK}m4YIKfvU^UfzFC7BGnMX_ z$VeHPoYrms3S3*FO;&Lq@&s!x1uEqg35>XIMzZg*rCX2?{7BEA#;ww5R5v#8JScb8 zZAV(Jae>tVjsfaR8idZ<7yKDnL*Bx<=;DEC#G=4|7JVS_clR5Px+)&iFAp0>LaTnl+nw>AT76!9MPLtO zL`Ay5EH1(r>$^^Dyzw#&E~2&>`^rv<-YC4q8gAEVw_Mw@YtaBM)Lvx};}ztt!3PX8 zehdw_yBQ;w?$_BCs;qj~wll;~olHS%FEdnY##vFOW6*QbBRk<{i+z+YGa7xe;MX4r zQh-eq`O>eq(KsNYg%4Z+w8V3%an@j43nK|nnt?y1?i;k$R4ueo36Qp91Jttg)%5|j zt)NTa8gs*6m4CAx{`1w#vU+cAEQ%r1*XE7#uhjicmV{_@=~Hg-?zseHP(2<@JC*6f z?6xeeZeBNgqj>xFa|Mm{>k96MLRZK2$&>a4Ta!7UH?N%YD}^)fok~k58*b<;i~Q?N z!kJ3(FP#kTVUjJ+j!kT|{h#P)8<2Whu9YO|o{n48?g#V-mlzlvl`|K5C;PRp-u?)G zpHKE+=t==;0^ezH#x2M5OQFcQ#%Y9G5fMmw0?hnEt?9M+r0s^Sz@+{P3+Y*gp=0K= zyR5stUSOku>2qRD%x0Z&Z$}i~MjREP^XZ0>A{j?Oz{Ex>#*CY;@?|pbn9R|)#YEtTl8pM%*1&;^e^zO!LBfS=i?yr z1C}mny&nH9aqTxvha2pO7u#SozPuzWF`Z#13l76)IC?0rrg3jg8D}k=tx_2sRTg#u zB<3uaczfiOvOu)cM~sj+vCd-m#cQq1x8 zZg(;MMySYm573W$Tx>mS-_!h;cISQ|`-)6hH0wuyr@%i^XOwOvVov-nX+np z`>|klYdiXYI!vyz;707L^s`wASpgeW0fe@gY=_xEQ(ZyboJ_@R&S+lW>GHKuRQq3O zB~-6xo#P5Y7X9cstB5~r;z-~92N?rD*Q$XI6tDb~RSPFpvk*KU)o)#znGk$N^-nbl zVP>+ZzEJWT$1eh8z~!A?plLjM8ol;(>0d~aA3S+J8$xP-Q~mM_VRl;@jbS(QDFY6l zE~L-sn5&kfig46nVt{4>wA*_i0s4J1Hv{6;(g=!r?zaTwHy3cpnwOuWQidw64)_c_)WTT}~!a7%1|% zPt)j;0hji_!>7K-sW=!c9pSh?OSwS{&2`Js;!wbu-zB6u^G)0w-@`|gzEO!%wR$6y z&4%$}TrRN#9*{9DthT58B3REEQ15^BlY-v7*b)5LLEqy|gRl$H{g@QNbo7Y#k*Vkq zyvo-9i=vk}27I!XkQe*vFe=W!u<)scJ@QzN36K*9=^SpEb#>cSHxRuzogpKnLo0)B zVq^{G_|^}Kq-D;n6zRV>8H)es%lxP;{qAw`x_Y@XYxL|Hm;;@mr=8V(_crb<6k>@{4PAQH(xK1CL@$LH6zKxy9yf_?W?n>C}HMjzxBEe3L{i6h=gC|iW_MwFqeN^(|@eY>C9$?jO&`x z)ObRz>(v9DsQGOU=l94Cn_S=up?JD_0@|OkwkrR$Re@^js<~HAiaghSo;l6o4;)k) z@sO0a9|kzmpx1H1kPp@1a`lu@c$`bo0Ilbvb4uPO^E4dr;t6`}K!$#q$-H7;T(C!& zEkz$VC113E*Z`3=$1ak!`IhTyDbM{18_3~3FkPZvXKlpu8r#JigwUeC{QKzis&u)A zX^CrCcbZ9vtF*=cTj@l$d2q*A=`olzFFTK#q{Px>wfwUwF9%#Ytd3Md6?nVv(~?}) z&K+@P`>E7DAXY^h0-_Sk?HJNcTU7t%T6aC9sBGyeEQIaq$j#cAR|Iz7$t^U`Am&qiW$7bXJu20r41LoILZj|C+PA1Q5}m#g6p!!mht`y$7=Spq83LsM??;u0GJH-;$pF7OF@d_k4U z1dZG#BYI{`9Z*l9II>|bv)v)FkMETcog7@xh(K?ipvMbL=#B`@W&f`&{1AHF|9$+M zfrKmcJp%|Jd{@P{nU*WQ;E~TUAYNOI-Zf*$Z!=H_v{qonGH+}??02$326zeO!;}&Hj8{g_Vlp; zi)v}SnhB79z5^cT!ke_k!_VX7p1Tx|Q6tA6O^J0pr(`*PM`yO4wnYT5YUT@O@fG z{tpdf#$q(<7(;jMrx-ekw9l6ol>BU*T5X-5NQMgoPI4#^dq*=S%gHRd4W`SNb?N5q z<}i-fu!1m)2G1VeOJ!P`mUfu3x6`PYuSx%li3lJaotI9Tc8hr^K3G2Z2cDmYQ3R9q zvGAm%5H(HoFKvg(i9=be+Z?95g8|7GyxVmVmGCg#L*#H2huoIpqulEuiW+fVzct~7 z@%E1Kqs6rlHr`(VF1EiD5D}LO0`tn$lBDE-4AT z0v}5R1@3=9Y1#6<0RiorTDLtmQO>&@9T)F@LfcExJ9~p0B%u*G5TRl_2bH-%a05(DE6}qisV>Mo>(RSBU7r}=E%NDG4&l~N%{)PyYzNjPpIep^A zh2=@$WAk=+Oq*KE)uZjOynXj$cBVK^v8V!(F`w}ARL|ko;3uEQ2hv<|B}}B;>!tYI z)!gst|5;tQW(l$^_5*$`UTDKzsf>%Dz>J{4zuZTQtr)3%VqTTkBHTZJZGP{X^*Q}a z9*P|fAx-Hg2K_kw&HycSIEW20r~FKhvzn5W9d=4G*z+PZ+@@rdsjP%a{yXEy;CE)= z4@r&g4_oQ!5mi)_Z;L_Vv;js5Al>PhO)-S#L+`- zO4Nva^)SZ6H1$mrVZB6L zUx>-!(x`_K8AXLrpjGimv87ahRL_sM#g_)eb^Mb7)~c^;N?+C1F!`@iy8NvzU=dYU z2bA9npY3MGt~+)6cFw`ste7&mhn6PdIA*G&1V6K~suve`d826*f~YUFbA?@9op*v7V`KT;$btI_k8sB=028muF`FHT>lO zKq%|A88vYyR|4O-nrAhin6(Nw6brh|zpWhL*3QzQ3tz~(sV^aUj;4Oqs}EL3d#9lL z7TF#TCiEzyWmRVz>!Nz;W{7$5C!PO&EzrAv&mBU5J<@6u%@?X6Y?#OFMI58j`INhA zM-#1@lR~0bV*p=+=|&-*sg}t4C*hyC`er>1DvLit&DwT~GbK%=s?2r955Td6b_wjI z(?YXn7ysJa9Emreutaa`$a&b$-;&qSUe&n;X3z2*O!&1Q<=%2n;mD%)i9Kew#y>`{ z=;(NH8s*;#{=3DlN}EVMw0O8$KfZ~gs`P*LjG}hJ2_H+JsbUm+U(wiD(ayW*0k3Of zU1mJof(^B_EG*Ol?kJe2e&%V+vwGY4I*3(!S;=84u zjX>bIo154Le1*ofuMKe6FDVzJ5q~F0ic2~QIv(XW^mRVj0j5xwGaL^nIjL8EtRx!v zMW$jAiR*_@-mfiICGixpzq3x__3HHQ`1oKc4qv-NQ`!umN#Dh6j)it^=-~& zwM*a=!^fzFv428s_RZ@_J|YTF*&@t#rBi&lPr0eG@Yg}dr~Hsi!1NVgQVQQlRXA7* zbUKIhUJIZCFSGB+rHV@Mz&g5iPoL*K^_PlH3H$otvZi~pHH zT_Q6%<=Fa3|C@6NvhQGi?cSm5Zd6=cJFVp52#Z8Lr(SDM;M@53<5-R~d@d6Pm4H|| zws+pP^NnL9&OI?Y;%TN1{MDE^ z0oyLm;D95)bI*(r4Tp$buzul~G>Jmy#UeJ)uWfrKO)s3N85VV&OD-y!Jw9Lvqb(;Mqr8R8c|W}V2RQNjAy^~@V&t9pH5B-u*4XT zG>^O_;Hpsg7w#lScl8&-%n6RsVxtlh6p^&ica&ODz~NZ%fnR^XVf6E9%FetlM#W&& ztXD;X#ESEnu}r`a)id1wOtR<=!g|lb?$txQU{xv{I$;udr=iEGm!oe?ODlSD)l99pI5(`V>a_SPp1nhIsGCr&jd zV!|q4uf!Dm{W-V;*0cS4|4{Wnpe9IWpM5_cuByJkr!#Ix6WWnmzt1~fKA){iNOVA; zwb0o_pR_<#km3)Wc2)Y$XoHb9eZZ3atxSzXZ>4p;_s&%9b((xnT&1>_;Yc{;1wx>l zt8dK}4(08atG3hE(a?8)e5l2^)YXt zKbQKpbdoMGyDJpD);SVg&9MZ4DJu)sC(y>_KB%*zdY+MSnD|ffc|W>1Y3iEHF3y5L zyqb?|1ug=Y`who-Sn*6Ei&%{REjPPdiupFW!SYJCX6^*|Z2eG#HPQJGa=_^^G+=&p2BDe_iRZ%iuD zDJ)2-=m&$TlUGo1>HXBN3=#WE=%D=03 zqs%XSKiIU}J7QW+s9ksZl$CT3Y&k3JQ431-fEqlcpw$Il)urk$PkI}P@!X;0@Cuj)~e2R z*z#B-l9$>9!#Ln>6lRN&mLFWQ%^&$J`N{H^CsNOBCIyZV>ctZS9Wv^eJlB#9R+yjv zsB37xDbKeibj>ZR7?4{2Y?$j80njAujO7fAg3;ouj%OP-r2>yXr&tB=0E zs|61b(EaY1NjuqT`im#CZLPk{lwCqW0Vo>SKlOh8DBVpm^&hNXuHL#NhuCFqd3+Gf zr+QJ`;Y)+4=Eu@qrj^2+{T!Fg+z%8}={|Xbp}gCZ=atXb0F2S@>aUpp$ga%` z{vQDBKoh^MtH~U!~wUewJSJqlQdM%q5h*8LyMA<3+{pY4~8^~ z`O-(MU}5}Khx@wOplAMu?{%5&K;LL}20>NHjg#ws3CN-GI0*jE<+H)ICvsHH&hjjJcxpu>tkH zziV(8)j}=)`k(pJJ_q|5RFHae&EEB%A%#?-La3z2IxpI3W*L=1eyAEfMV_npo9>+V zl6B1(>pGx;FqVxNGc3lq8e>%Qs#EQ2PURT$5>%r&w2g8hjka$cW7#m;3dl7edQ`$i zrJwqON|T{d43Dv_f7KcPl06=1uRf)y7CPW>)gHC8=4G>t~*p`ihd;6Ox81^U>!4)p*i(HTF+vE?O) z=Fw38U9+Sg8eN#QwH;_DQu+Y#r&SOWRM7H|x8`iLw6#)KBserEt)Aa>W|*AO?LHpD$N?8ifsj#hZS!{v zm#$y2#|9MTY;SF7Xm?P!&WSJ7jaCu2cbx zAZ9zS+rD)1oJ|($C>EP$|2l8|0@GVWnLvg%sJX3cQiUeIng=w>P(A0L%^1p)yoy9G z58JI?H`wA{#Uoa*IwtJMecf!3_^D+>jh-^kRs2nL%)^-1zHHU_h8^x*cj|}!y<@$p6<~~WM%lKEb|H`P z;lJe6{<1~IXv=DhRXsXZrx_UQ3#e`bTB;3W-;Obaj_c8Uu>WwhH6ahH+zJtmE@X57&$jF(%j(xn8(y)) zkM`(%#g+I!XZ)+Essl;T_!z4i42bW5d&!OTk~85Y$ELR(nkG0jy$);x6-Tuxs5lVE zDygat1GUtM3sC$)0FV2^2Z~(8rDnKWteItS*drhtrylKa2+J!OFkj1HQNpjkmUz~D ziS^AJ)~oHp)8f&&BDAhU4;uN~VPrCBph$~{9r-H{+xUZLbaoE;0XkzCUG<=mKL(eQ z=r;W~=QBBZRB#RIWYnJAG=8BydSxA05IXYbzGD0)|C0ME_{bxFLm8=ku>@w+AKx_f zm%r!yy;NU~p1%IyKYzJ+uTx|eM=a&FHU?VkJsKCPQVOa&#>E#lu6Hmyd4&Kph!8=? zQ8o@SwAts_`i)PJTq$wJ(Xzr{<2CJQ~(0Y5xk2vxt7^>&|qZxz60T3N@ zVp?F}0VflS?VU)d;M3K!Z9*X*X!t;08VQv>J5bkPS-LmeFWzwVwktenux~K}3bu-Ggm6 zT_{Erl6&u+s4~~^RK*|RAN$5r=DCW$$w2&B*1cqhd&{Lgs9jVgLOLagNQTt6B1Nff z2Sds*CJh*~uF=k4r>H)Mp>)HU;nUQ6Oe$T?C|K=7!Y3QEnStcuxlFSfW=sW+_1J8 z)KVrwBq74q-VPR`=h~!WU8fRlO)uNlzGTz*5~>$LLfk0Z<}vooqku8iAOJzupenZ> zNX#+L-S4^)JQ~<;aUC07+Q-{=VjP+=4mgZs3&vhGAZH6SAIL-Ykwy7O$ z*F4&>9b?{%ac_Lrxd~%kim|JH*^Ly|g+#@7t#?-sYBr+dk?4K!#!(=?J^p|G%^UC1 zymGsZLMq;MsvU*8NaZC^ih9gX9R_Nt5f`BNg8&})g%8!_`zor#O}&o>J7+X&rE!yB0xb6In`miK6`K80klSg3L;=L{7k?2V!lmMqN;+RhEy(3t{5(7 zv~GPojFI;)mI_K0F>=?Z`p3hI+xwo5L?5NYG8}y z?jTh;L=q`Jc+Eo7LqV$flC`D7LspPn8Do2YH{+1w9Vh+e5Ogc4h0PS8&-@M3>jsNI zLsZ9pE*3Z*-434^Qree^qsxGfv9(X0cfTnn0gStMTK^+D*sKJvo=;Z+oT7Jn~ z)u3Fq==Sh_R?!uA&Oc%1io9%(1@H%kfaOH~O9%}r@zVVcK zuHtVJ5P#P7W1QOF@uWs^*qK1G#CNSc*S0B%7vI6TT7unh9{aL$C&o&1V|0`~_Eksh z7$BSMTY;z=?a-=z*bbF$R;sZ;pb>p&ORuyo_H7&Q+V+}5BgVQCV^fW>tsP_2{Hir^ z3>pW>$3|2(0gYwbINBQfl2!9)E9@xrhB7DxhjD1ZIOAu82`*LlUMuR{f0eT7N|$a7 zVd)Kmc_?9~OYInU(kKwevU;>t!^L3?wYSZG%_+7)t`irUqkQ|B@s2B?s(F_Mlv#HPPY8(YClTw%C_!>qpzw z14%d9uIVLUuzTCyT#8*R?@w<6#<~7ASK6!#*k6O&bXcaw)5kkYuCx`R8A%DhO)$okszU#~UVR zv~GPon)svFr^K6m_Lo;~ZYxjgiYM#1ZerqKH{aC%`oZ@;dgG0E-ye(mbjJK|wnta6 zc&vf|7emyHiIcvVxX*Cu7fXhEomu19`Br;8Z36A9e%rUtbwl)=e=ws@4a}bX z#=EL=KAkvm!J!jrcZht|ticZuf5YWWlL)H^bTidU24n;Tv?u zqckY3;Ebw4Z&SEw!~0o9)oJ&mM^_#zl?`ya=Aep)5r0YqkrV|QZ2Rrq_kI8;j{0ri zA;sT6)aa@6T*cp)PWc$ChB1z9Z+Vcz=*-X?jq|;$Fec4o1L<3mxYz1=k;#k&9t8A> zK=bC;Y^q*z#-XChGH;A=*_-zDFI!i>V^#+Qjp`kUx>xKf-?A^o7!zJ|$G>Vnl#J z7`rlzX(PtD8RJlav8`6Uu!4WtyyO)JP*&Tk7Q~BG`Ncb=mEL8e(c8f-=xtw%MvO}* z#=d=&740Rf#y6dtU$!kDZ4LIczT(BexY98u6&T|?O=}ZLU&H0|*#up1-uzjItKZauM2d<_+3Z zO`&(s=7F0WBCaYQL44G(Rk3Ne>Ts>>*8>z^h~gNTZ)Z*D56ZSJZ{OjA1x zkd~vFVXn`N#FUi8s;ZK#676Z>`r2r?=2kZ-y8J7>F|)d*Z^pGgr0mZ2mTFCXQJbso zbt4=Vv?s7xV-?!I>UsY9U3Y)a`3EzAAwUBYOY>Fr0VIQdQQKdIq2|4NhzbtT&D8Zp z8$bX4dHx>I>rm8B1Re;Aib8J^4@N2B3d=mqtj-?0R!@0AgEl>=L7OY{&^^zfK_#pX zRfDQ06wFr@0~q9IU@f&I*g7Ea+=)tXPHMYd9YGCnPG@~4mV(a4$DuZ32leNEIK)!4 zLjN$4;Xn3`r_6J{?VFFWZXDy#_Ldtts#g}4-1(PJ)vNX`uewrR@#cHBC@&XwZuBS{ zWmkuBqWyH5Y;c{kBm)2Ine1t9&A*X#kLJ`1Rw9ojU_mHJai z$5h|u@oqKmI5xd%L-_b;+xO9}`Zqe3ohY7bTRO(70^`H^_-O0WOPz*c)Fl@hzCR&; z4b_x&uh`?>bZf`hbuWxzoyW36LQ6h%Y{i&0W9%C-9(5Sk28|{i6t)#uAAn_e#5eU=4tATb8Wu{a~B<}+z`uH8rCz>wdjAI z`F|c0Bnt#Z%}79!WXg$#x14IGoM`{VzxD%{nm28$|97(Gr*ov$R~ReL)UEZU{Li#? zj9ce{B2G$!!0Ko%#)H`RmJBMG)Z%ZnZ4(rKQ2f0ZJjpYE|Id*L8N_Rw*DW-%IGT;q z?1Mla5h;t?mgTj5-KoUV8gvBiJ`@s!U3oLe-7)aedCil2BMg~{L(FuvJYwY+ejC@n zO34eya}|G6oC<(0dC7qQ#9y>PdLe=Mmv`mMj;&+t2%~H|OsbWUMO5RX)vtJT=>*+9 z)!JLhl(mc5bqL}f(qfjxyV#&O6-OEkl$k@z>k*yyCG7Gt@o$F;6MK+zx0#zf$nUv# zjSV4%miE^3krKL~uDQ!Mx@)Ra=Npby`x=!^5=7Waq$0?<$hHkW%@~`ym+Wz`I}otrGw)t-W*<_AK)rLz0#t|JSsu2_L(Bb3JOi#OV5*-?&@+xWfUM+H*TDI{bguQ;^Yl+(}T zbZ+%;`qZ1Wsf?Q|Qs4vvE{{>v!2QIm9SG$EMXclozC};qfTMgn!zWKuR z^tMqBO&C+soLf?ta+*hI?N~?JWsW#Jw{3+Z{>zJ9$6EOXWsI%oiSPS1jCG~G?$UvA z!X3#|Tqx|YJ=r)RQ1bp2oKI@YfiN=0zJ9bl?iG6i#)Ysuot#}xooChdnhP+7fWA=T zfJNWNuxxq7w9_D+dz+7x7SMhTD1P6Oq<5(;w!7EseBq4aj9J&XJ8$$xTx-MFG#>3% zMide4E_Y5oMcQ;*iWdn}Q>eTB@KZyXmxZj$vGip=luyn#|B>2Ln$h#Qdz)#Mq^h$w zC%0$3d()@4I2YSE@ps8<<>NUGN3ui|x$Bu~Hj^>?-!2 zo6K#gymM)73+$?1w~TzQ)%R}tz=eB(tGJYbTj5Li{wg<)$vzg*`n_!##Xz;3{B~-Gv`x4%8;T$6gF6J~FdN;me+lH~D1yeYYxjh?wTQC7~Okm#e zTI5ohu&N8;@I-E25Hl6R0LJdkJEIoxs*TAr-#vCca*fp-qpeM7Cvu8Udxu7G07>lNt zjqvE?%Vp9a|iUGb1@2Qf_*2n_C&x?GD2&kz;wW^<$fM*K&GPBg@Ra z?qz2z#;W9SZdYQX1*PT$su<)tCxZ($izrM%*;M=}X{JjW3@dtrGAWzP}BL3Rm zbR%6C%C9DqmipDa=8PZX(lRTVakPqg<|<{5TiZLqlyekGWIS=bSHo!QmjBr{y=T{m zu_t_TiheMiS6(BvtmOM7w66)Se%%uPwwo}5t-O@htm}iHb(MXS$vPfE_|dj{v~$JV zPPkWH@uNK39LjoA%IJrE8%6_3WLJ%GD8bm(pliEXHjXl{!8kNc5ASrUM$!uyhL`X! zIhA27OGlYCVXTU$x)i_b*t{}>o51cl5z_dfbsNU5b$M!MI+1!g0yoJ4`>JC-#;InE zW6fwc=IM5}M^ybn$3~1*`DZ8Tag5&UcNkmT3DYj{3VMYR>G*GaD$%!tU7E*Pe zLIA}d1OkCPInP!6O;(A&(GIO|x^>5il($l8tAiWH`VznOXp5mCk#~t}gBmc#xHmmX zC!|PmRh#pr*4O;-?|C*)bZ&glmGGJy<=0S3J&m0tWVv1>ePdsZvBtgO#=AzBglFTI zI5d8Gp*^IHd$)|c^E_>QK!c7a;ayk4D-MK1^+;wt?Mebs$G?4ociTAkmj5}nV60kz zvV7SFKiatk`<=$=I>eo5WAOGD36 zAetwsYhdg>*Zhe$W0D_bibEyFj&54cj;dog2eo6Y8Zef%hl_jDv0~d}buXLK0?ECh zxm|`nw69&dF*d{?Qcrj`Y2!K4FYySan_?E$@bihzz1gB%4kt9IWvo@(fg*NVeXm_0 z5Uh2tIW&#}T3NMZoJ#qDPc#hDQX?)v@dp9?=fs~}%%%`)vP#++626R2YHh45ttayk zh2pv26_bfXbmHCHcX91K0)kdNx{2F-N ztQ0~f5nEkR-1zMJh63cvBR3RRRAbxOe6dJGsl8p=(n04+cu%eR&yJ_qM*lrPkL|`c z4C=9Whm*GV$#u7K}Tx%$W-*vllTQvS7mvW44>lZ$ZOL$6P za>q({%G++;I!8&@>jgv!yOd1B;dntY^qDSQqg+b&R`H2qNtZ;@LlSUn*tXG~=rez| z%`e-ujB&tYTv{=KU6UdSF$AsvL5M6ar-R?dK(=@gXSuVMCkTUTI$eY7zXp=gqT&71 z)Hye0MI8tM5zx84;tuiI49feyol_zzqPu!=T?z_OP*BavB{45$5jO?qzvbETNjUXZ zb1#XDsnrIIOhz_=`KCIs>k#s8ROXbia&N=E$dVn!`SyO(55@fq&Wn3FO_>D zllHnh%cYJQlSkPU(1JPDevQt;iI6)aC60;YkvT4YxS2te{k5F1a;`&Q)mv`0V>Ih| z+#d$ZsgV_+_=5ocbK*})s7nahKVe14U3xpG=9asS3Qojw!7ifp7DIs>wRbnoq6${PWKz%(ZZfsbCH#l9W{s_A|&z z1e9#B9y=>?cC3^2-i^-Do#>)g&jgtW>5O*TxYx=l_BM^o?7nWU zv&H_1L1V^TBP0{gmc+s_v| z=U*;1xZJoUqHEE~%5NRmZ<ZPh(mFu}F+bqlV}aq9PB_!$nA3DzyIn3ccj)cT$;^YQ>HB78`mZx`trgyo0 zO=$gFZp2Rl+P^v7@s%4DgONp_}Cf$p=ax-XWG`CXj^*{zvfi)rzc9rIb>iQ3DZL8b504qvm;p5g;!h^x^Z0BQ2N*nT zy`Bspvy{?aHjB;Y33{ch|A_eO@38^SQG}kiCRgJO7p%Fl2M-s*ok8$e2Skz(c>fi9H zf87Bj$71YSF~&`=*cH8kPWy~|*{0OL*Fg8u2K+)(r960nH6zj(SS(UvG5*}&8Sl3}(D==2| z7|S}0Wi7_M7GqY67Hx*bSQ9Xgd}F5qr75Fc*}LGsdwCV_Ji;s(j0_enr6$5_;*mYuDu&>#dVa!0B+V`E>#@e)CoIpj? z3;U|p_Jt#VQ2f1EK=Fql*&+Jd?aV?`yEHpr5R`=4TfzIr|KXm_YJ2d=cBgVNwwQy}0#e;fBYDrP=R@-l^6@4P{E-Vl?~|HA*$8hz^AHSsGUG` z;$C*bjd8+_a#Tq%bU#jIl}c-(rQlJG=+uUBz@s)>w~PWp7NoUrL}$aXZCCk9ZEz!6 zqFFtB{A-rtBR8eRdrngL@t(ano|Q~;$y zIl`*a9w(9z0HQGZ%=s7xy>unDf; zLLsUAs^4)xchr*ek=X0zd`v;2JixpLw{fOP533Ks2@M7#yK? z+N;_5sn;(08ZQ3+jTyQ-th}z()OB{znoAM_u9gu60(H@C=}c}>(oHz&1fbo}y( zAV05r8f9SGxSX2Cj>^KAfV2iK+BXnH#;0=|(*0u!Ydh*H3T~%Hr&Y2*iz^<|bzO+O zf0&R@!Q+yHGq7l{)Ak1XxEP<(*-{sCr&%Cw1-&jOv!spt54U}lXud=cIqt&6sHiA) zuM==uE7PKmyScl&dAN97y^E!=R0SpZMHW{V$6PoKTnAb|t64}Zi48j$2rM7Yli-lL zUk%-3S%g6aF;(Jk-*|(NyZDrw(RZ?Q`g^RBRCy=+PGnXizt0=$>OZ7ajHZHu%cwm7 zugf|4O^p8TeJ3R@I^qJ@@8jcpF{gvfLKj>Eer~w#?(2!h_c(j=dIfobz7e;l!V3@P)8T(I98F8C`4!=o>kSv6{0C#ALL# zlw|l_t)OwGPw|1#=PLf@`RBgr)iKcvH_f|lrf<_X{;f0po2L8MPxWb-;)R{;-SDMv z{j|XPuY&8p3dGIyBTn~jnd;dv&8uO$PvaEthA+J8zwoaA+^24mPu-W^^;3Krrukr} z`!>z+YntJU1#zZ%H%|3#obHRA>4*KwukkCth8g~i)BUm2{FZf=C+Zw0(HBIwtp6-X6=GQpY zziyge-8A3289q%jy<4YwgA8jy+G+mHQ+%;sdNqLDK<%db)J^fLpW@pv8C1=u0aOs= z{8eDni~#IZ{|2!COK-3rH5Jrrl4tE?P#rXrrkQ~_5Ob;@TD2KoIJ8oJwUc}sKk>m$ z@xe|8@xdP7M${@$Sx^Ok99ph--DFjm>Qg_>w*dt3hbo|!sDq9-enf{~-S0s02YF2K zCl~YDN(+veZPs6{ucyCa!N#3O0xlA{BH5i|1}paby>^GG+4AMf^?#fE;}&nf#8#&2 zd)Z9qx6P|IuifEn=5@VBh^xMAWwc?f?gBmiWs3|J&)eXTm{Ch-i-`A&zwlNmPnrjE z-lf0!u!G|+{pAL~PtiT#<>YlV*nXdOK|)2ZSkPV@>tbuTK~Gn2<&sq!mYW_er?m1V*Q{sAH+%v=2I()=bkLgcy(&UEbS6sLKd(+@-s2B^rOHxyR*d zg-9f#U{kLKn(kY>2;Hl%?;2eWF825P`2v9>>@GZJvtzC9LJ)1;Cd0rx93rtg>9qYe z-MQ+t9#PRJ13isq&;0cDao^5fvh(QeJJ{+0lI7t?Se1nG7`Ohc7C6RSD=MhH6}{Vs>6U5YyR{hCwF6{<;)r5&YBr`CLTFzQBa zN`!|kusO610qW-=T^HKk+h0LWQ%;WCkL%8~pgD7ED`MR@PFiW1*xo{yi#qRQ+z8S2 z%<17}sK?lnN&g`J)B|#$i*B8xw|>9vrk!E=^zOQpbH_|}tXRB4U(Y~)uA%ew(lU1a zAlK>X>8*CT85Ll0V8_N~fBmlQ$)3_H(Jot-|E{a2tH0v!U)Suma=&~R+j-}#;o^He zHoTGz0wVkjR~KiOEg{8B@Do5S{uFHwX%&!4)Z&<{ zjw?U}J-xXz^er7P71Q|)_1V35>)tK<_bgw$VCmfNzS(s(v6=xy8>_9dz;ES-H7l0s z|Mjcx&W(;qWFAm>3}R|fz`@PS<}Y8pdd(qk3;nP352Ah+4SD`{2z#`>vB&nv#w8mK z7nXKjV#ef z6@PifC8S=2#1WHdY%)_o=1RJ_G9p*r#!|G<6|GEZ8(Y-D6L$-x-F#&i2O%<*_#SC1 zUE0c!;_2cRx(G+_ZKexa=t4Y0)W#4K7!vJ3WJ=pvvJSSqgQM)=C{#fXHrqj9$%#x^ zI~~mj+tZ7uONa~^fi5M`#cgy^E4`P3Yat1pn0eOlDEJ-^@20pve{|Oe%Uu)d zD{*8}VPyPy?`3DO3_;cj{om)z*|t8cPA1|bxz1~T-(%>UP$i>qx?;?9#_Jh{N0)KH zS3j#G>WI!qhrCm=T9ry3nNfUv{pa&+Li0;$EyIaFkn_CBEA-sbsRAyNl z&dEL61yxGP?9OQ8kN$87xS7;IBGue(3_r9ipsE005a+pd>7@D7o$pdP5~S*a%dY)@ z=!ay>L=r{rkT=n^6uI|k>i*|vE00!` zw+q!7pci3T(>0SN2M(LLrZUt!0Ymy(H>if0WWUDpv{OtCuea|stT^NA>!R^+km2s|C`~TP)<0OgFzyZtOugi9s6pz*Kygy;ScV!t-fV8G*dotc>+n(8LUGflgFp`{o(RS}v-6LT*5jYp__1Fg$ zq%pFsFx1;Wcy(YA5IVrl(%|*SkNRJz)>sZu-6MV|s~D<5Rw0+!)zwAmjPqEy*~a7? zaE|)yp1#&2D778w!BVaoeL8lh$E_;7Tp^dsB|^EdT^*CeAf60;Y0pefEP%we-SD^233!E+UVjkuv#`U77-z#-sUVNlJ$ zcLF#BcB%vT8w3!oeSgF=6C>Im8f^wYl|{L#N({WsXz53nCp z76kQ9kOcg42cP{(0P0lz0UTAwR|oaZe$)}P4-FYcI!#SYQ2aq2Py8vFl||=_etr3s zu^)~bKYqekz|22Cx6Y<=(oX1YHa~Ro8eW0O#fUK7Z}|@NDn+4!Yp2!3h0dq*3TaA& z*GVrrwr-qZP+U!mOb)(|dwU2;2S0NUP0nb+-!Dou;!kh0^}*oSW+~eDgz3Ke8!Qf= zN+8I!3rcJ4=qd3rm@sz22k(v>H-6l>aXLC5y}aXkdQAq%>hNDiM;oLU#>!rpvE?3J`_czrH>E|yjQoGBKn=Jcf;aY32G@2%Ad;D2*gE_PHc3dW@hc}+F z_(N~|x+RhD424{VueuqyYy9ft#mtV@^a~ccU;poocR!psVZy}mAH4JaoW1K#)N1kp zNtu;}*H7p!Kbqeq0A(p9jpf(;c8p!=U&w05r`?}+^~qFL+YRF{O)jO^5fDOCew@Rq zz!DOVC#lugj1vi4BOlUrpV$^q*nPv0oc5l(A&XXp+_+09PrZE8b&dPQfcYy=B-|}a zzZ@K7YIP1P=$Ba!EB^F0TOBzA`Xp#jq&?hn!4IFm^X}NO<0ed)Fz)@g-`4Z@Oi9&t zolM$Nc_YAZ!eY-mR011Zmay8M3^lXgq3fS6)ZEv`UUfWUz0N+jmm|*U@39XqNMj_U zB-TCHdfnN(h)9GKov=S~@nSAfYcy8N8Ug32h6Yy$;#=LXn(7uHZ@ly zh8~z=m)6bgLFy7NMFd($tFzK1ei}Si@rT0`&|V=&BvPeJAyOh-B_dKP6>=#8x`a$3 zQ^*B~QUnB&QX!Q~rE(eA1OAqS)<%@zQ>Ii(l}hkS5qzTi!S4bzDAD0y6m(Orl*Tk zBw~SFDnbndb<{{WG$NWU$W4=jRF(6f0Cx5V8K^~HKr5>X>e{Ko2nUKk2;ebC{umYc zVYc%=T;XsjIwmn598JtD$gZPk3n_3q_dl6F;M&PhAlwdGVX(pY{l^j;+Eiy}FN>UG zsRO>I({aO&{0*7&;DT@jW`Y0m3A#s|f_pqFsM1&hBdtle)_ zYF&?p^z)s1s+84PTapJfO0fMt^=;n{Qcp)i>FsNwk=}>atXbn4U0%^W@R9$gE&hhw zB;Zm)%?_>lb(ddU(ydzwsQ>e-Dzx4=0W~VPc6{lI&THftQu zrN+d?WQ4h{^Dd=wBua&5Bix-P4MDV6qpaY?uWVwS7^_6rFyr_Npsatz9D z%ywMvcrEe#(WAlU)?rnAasR0BLyEutj-+nTBY$t(vBfR~tqMv?QBw=KPCM zfj7>Z+HE&DmW^hPR;)GN{i2heZKh(d`1_}VI=H;1lvC$iY)x+B@i$Fv0wOMCx2yA1 z^8hmjZQ{GiQ$vDmx7&Fp#Kp&l+pJsf;BjHl**)OIX>Y7cK4-D$uxs?Sh=d3~lLO{E zEi_GL92gLOmx^9g|M~o-HQYKEcVDDivZFPm2{vyRdGOmf!{1(=e@juOawBHuNrzIHN@w4wDZvCp;ZN{ zlAyx?gDq4_fP4hXwQnzwg(4vMBoetoCPCG$tgYjAd36J&t5*b4puZ(REKn~wuu6!4 zvt8cZQB;htYym$@5UEe%@{d7fye6nqslo^cia!Y8F`xP4H8(E$6;o#Kl zPV{+m4TG*0k0}07Bf%btkXsRZ%INRimR>&DnkT6G(LU;%-Nh$odj0a1?b)o{4g`o@ zM!w%)YCf>b#R0xJP5gFll8XJ~zwS!a4BB z0qbCI7tPVW7QBd;@Mw9D>N)`EHeyD5mhDnUN29H_r(MqEQyJ}Yng?6eJc3o_v4Iwjt9C|Jqc3dbg&1zPbv^$8@mExL zC-bcBSHE~?QUn}!b)2u2*+%mVE#h9<4Y%z(>{RnB$;AS0x%Zww^>!JD4SW7_a$>!# z4{o%-sp_J_hRC4ZTMZVQ4ibNyt{C%=rtfvTg;r3+W@B$!e7C^sGWsPWr_>W}9M&^E z<8pAlXW*&R<$W#p^mxAF4_n{MryDq`fuN@ zzLrjC?Lf#pB@c}a+8u~Lbv7WS639w)yl;R~k_%-*nv6@8isKz-8G5*+lv07PLz@mQ z2FO;BU;w}#2`W*wb}Qw4p+LZ33dFsjyYs~Oh=9L#x(B4(rJ*efz6H_z(D6b6B4Z%} z5h5yyGB&l{ViVsgMZJL@R_FBp7byN9fX98|gG#s?=C|b6zxD=(gkA+lA8F)IhVVr_ zcS1M*W@O^!eg0O$)rja2$E~_YZ`>tNWW&DjF=Wp7ZF1B(uia{G7ZeHX`p1z!zO?T0 zo{c7kCN5X-Wau8XK{Vm3P6O_-nDDM^;&#PETs8(7uF& zYb>qeR`kA^s~w_GUyi>O8|-PkWyV19hYAaFOKDBZ;N?K%)TYdfKsXxt#azm688m#Q zE&f^sttFS8tybtQF*zT5?G~_S(8wRis@`rEF>G3yNKQ%g zFx#cS(9qQNG8SAV(9r}<3j%E<5HlXqbpuBJ5Cq6|TKrxkgTEIY3<=0)t2f>EY+7e` z32YAAfgeKrp_{U%M8}OgH}2f#bV+5@qmBFlZxly3Ic-?G+b8bo&BUaO{%)r3wvLIl zN|{WF_E_U>#-PXEsi%r%)&E!!(2g}pXErZezI@r1Gs(3rTKC5R4=?_RRdFF6w)#75 zF2=fH!WQwcNgZ$$|xz_lrNviIY}sa{wpZ ztt*$V1emP++drnD9UWg3GPw=0MjO@|EZg98I$r&A?&6mG)ITDWO8LMdaqZ3$}W}u zLsgxCo>iJ`wdTF~hL`hWim>b+8nvUMwaM@5bzU2t#1U}NaXZx=TaaI0bD;U68GwQ{ zMSvXT3aM1WXTf=lu0zE0VCxK^meT#whC~jqrwkF>D$XxAgQ*Cw+5dm zs%Yn^j&PVgEHXp&xSuK~5Ku#a`c#S#u@sRPMIN!RTw34?cBxQNIAqTE zZ))d^S~lq`9i#Z{#yje)Gz&t=nzT1-!wroWeGIDby+;v~i@sF~P%5=-uFTF3*o@|; zqciT)O-3PUK!Wt6Y`cB`QMp)v9T;4f1moj?KGeyy~Eb-Q~f{fiN3x z#~JC&1bJ@>I+30|AZM*6LpNDfWf8W2f1>m8M<0WNK3-(9Gqh2YiyAF6e%rKptC{zM z(}JrPBBP{vuHCZB=w4O>Tks)Wr`^6NT5EXp_niLC;W}^?i#XV^=v8W9Csaeuj&k1o zhpH}se|FvQp8V*eKeo8U^yfUd$NpnM2tut+i{1Odr$*N^>gcLGw0N)?TAL&xxhmSx za-NRPr(b@u*mTp%O@U{k2c6vmP8=4SSQZnsTxarUAAdC0aPg|`F3zr+CaVb#IJ68{ zJ9+XHJ%8_w-)^)w4@;(LT4B)no6|tkKFbzZSnl3zd9U@=mFO$i(olEFl3zizsWWF8 z-{@)V(L_)`Tk_W-PoLyY&90})a}|HY)^3%6C$mYh_TyK$oV!yb1`;=M0sT2bV)lqUba^LEM z{+T6BTt3iLAeB@iCDXg5BA`Ek%2NH04*P+B!0FXj5(HqC~ z$B^U#F8F2FX9Jo8C=SH#w@N8fph5!#RJQ>G#R9o3G4!{+=APlXY%VAc9FohVG9W4u z37SZi7X8XlgBn$E`G~dIO24bEATl^j!HEilCi?Z(7wI1AokIrgqaz(C{vd$I7JuMs z2lP!3t%pLUkjZ2!l?EpF zM3Ym<)E=5<=`esuBmyzPCdf@F5UN*k(9UX5&i8Nj=L`&^P^djDzCF7=>jmG5Bd+6%w zqXtT)>>f~Y)Iz$dvTCb$KY!fSTU7 zhDU$T(cT0(+~0x0--8^h&PqG7dMD5^LJqUvs(*CdpiOOWfPMvx@6UN~kNu~DKoTJS zfPCK<)mcj({MG$nGX`#g%P$9XU9{`YbaerM*VrSKh3P%;>%UZ?>~Rh@miUv|11MN0qw2>*LUeJm&IiD^z?vez(2fR znY#J_wfJ*96_oL}HO*?8h4b@mDNT$bs0A0ELqms=v+Y@VRsb z5JrUL$kX25&K|xV$IhS4X=L#cnXn_TCgbGMAYXR}*C6N6yxNxRy+vGH&%Q4jJV0;@ z?yfL*`u zCXN)LlDp*2O0YdTE~rZja-wf1fl~16DtrF3WYR{jcE+c=+^vXkH?;y zy!xXAExIoc+413Y$Q8rDi$Bk?kU^eB*BLjqP)TI8G#8d9?cQW)Z3o|JC2?}Rxt2#u znp9;|h2Gt0-9vaIL5m}OZgvWF`QTSCV*08aRY;tsO5T~rWjk#>J<1~ZWL~(`U;4HO zfN-XoI;|6jc3JW$#fzfYU@u;i4~H*{f@x285h8zSr`peg-H>%uU&PcC5y=W15^6>%F;SQU%JWZAJE`Aq5xB zp>n2X$R~rQV)0xgv8qMWF!G)j%p74K=bGJYgA+pd3FK(S?cS0~s>}Xj_1k=7bEaj9 z9@sNvgf1cgmy{tZD!n z|IzDJuk4zg@yY7u$AAOJ5=u_OLXxFPvr%njH~2~gbnwgZrvZBY?TkbjiV4k`zN^)= zq$<7U@$Uz1{Yx&H7ohrl;=;yKBi=7Im#W0t%G1jkpO?oe9O=8-19}&mObup_*Za^l znWq;@v}g#FL`yUO8>B1xwym?@$mI1=`xkqasfVdkZSnnm5#;OFP65wh z_Zhw5MgpMqdc#I4?$sxx=Dt63n6o?D*3auOUU&Ii%p|+njBt6Ro&sr8Xbi1TpK-)j zz&4Q*lfF}G{YF1f&FwvpED`+K+L>CvBoBxW^=O`H=G*1Qw7#bMfyKtA6h4|2+SbP3 zhQ6_l?Nwx8wiP?wC#a#ZY1V#bGR6!qL)$lZb;SsDdvHiTI%#%EYnoZ0%uRarj?XhCbNjOL;!5QOjN4}k-n9x+%LM78K}yDPRZ zt-Rckprj*y;(&v7;Fb5W!hSK5A+)yVd%-JB);{y*y3vO$R4MYZFTBU|8<9uOEjnh~ zEJ0(3lW#ixgdGK(z&Z<*Kq%<<9} zqUd#->!m9gM*L@K)MpVsFIRSGl-~CT(l+fKi~S%vn9iR;Qo_*&dF!e}4>2VS+ykSP zFlM{8#%;q6bQGjX*?ryh8anwcVSWOxi6BQQbdu8y+|jg--nN&;K90^`w<)8+gr1jA zhYt*)D?0-b92s8|H6$@ecs+RnJcccH*_XB?7w(@+({_EnufBPfkJd3#biT|koyliB zwI~WwlV1!)_0B^36)i!AD1}@X;x9GNna`CRWr$$MAu~DTC7Q@sBmE9$P%eb_tY4hq zB@U-n`gkGHFr3TZnZvBL2bV3Eiw`eTHl4C1IQ_bimZ{^rdGq#p|Y&cyW- z$V>-qA-42iv#%5Eal$nnHC@~!rdN1?9z6E>+#{YdvAszX&8*&(^?8-~B+LL}z>IN` z72twSjB#gCaV4=;O`H1+qX0MySk`FzcYwI4_xW7`$ZeB z_2lra66lw4tgquPVNgQX!H_xI#lziaNa^O{RPAuY6(o}*J?G){-#A!U9BQiibUG71 z>nSC!E#WuYi7I^8&ohq-l!Kz5d^rO8@g2C$)I*`X;;!9KZJN&CL@f6uY;%_kLM4ij z$KiBL0nBeg;a7+{P-6`<)>@W4P1X^>5d=|}JGCu#ye=5HxEAtMR&O)vd#6}9TPxbx zI7fDnJd(SHe_(Hb&3XWnt=fD|l=DT^@8*A5UA50fb+Gw|&H23Djdgzd?*g;x7jqF7 zNyGU$!2}10R{D}W=93^m^Y zYP~?)O`OJq8m%v1bCw1(^DJErwjwJ~kq|mV}(lA6BLS*{b za!9zWoTOZdQT-&h7PCCT{dZu=awaDGxcEyh@^eK3JDG|uvv!^5E5njBm`NpNQK2#A zAKf;`TWkF0_~}$EWYddaBiGv8BJ~_(^;xndZL7u0flS}{oQc7MlnbaGO_84wTAl{& zmHl8ywaU#!Lh|2u8w71G$F%(oY#Qb^ETV$;8E173ws0M(IeB?Wxfv@Y0fIw9>?d_g zwp=(F%Mwvk@CHb!+{f_EK^>dRu4Yq*FWM1!44BJ*oCh%;2-YlJ>|0`$)YFnTIDJOH zajfMX%#Gr)v46SuY81x~rl^eI-2C1$ddl^!l;CPgqKona(1;A;U8-26FH31Kmo1qL zQiq-t4l=q)jY~p$U{~+z=BimSxacFR$CCh7wM5G{A-Y>Kk-p@hteah|^=YLSUbIZd z)b!nMW;$HdH!eH&ukFf^-gby0;|Ym)xX#Qp^>H`l1RimDWsWLFVmi`tWg_Y#K>|c? zS+13vRj?ua1(1S!8%G#}+HpJx94}u^rtHqV9}cFY)iT0pelT~r&=$maS=^mh|6B4To)gI0XC=I_D>+ zDVr*$eEOSo!^viuBULA`O@y45+-95NM3cdN&>Jv4P!(LJ>K`n*pY zTWBxoj-Bq>CM70(MH$LyXALehO=CW(RaIqWjWTbHFS1X!_kS#stQ6Gz@}&75oEE#s zrHI}hTZ#@1ja1VYn|JmIjp=ZHlXWSJQ3wGROwzsNeirbB-#`!{1AJ2Uo_fSBXtgND ziJ7lk#fG-3sZkq6D*ad{vh7I%p;+v_OpEO9MVZzI#a}w{1Q-!hs;Ud?F}dIbSIkKm zCA*{QD=irzmr-Nss12Q!&b_+-gbAPFnA&4)z146zULV5B{_69u###Sb0G5XrnTnZ9 z$LrEFXQ!qJ28Kd?heN(72XDiOkJob`?C{K{O&6+FO<`SjJ8j3yRd{a+nQ@hS!CRz( zk8W=3WP6OK%`t+f1?&`r`q=Af;+T(X*Jb^?;5a0x|0qu6SS&4Cq;-lx3QqAz@>6Q< zn#4Qk}RzYoDs=_T=i@c%hji@jrl4@LZZQN8JwuL+!Z{KQRLBPf$G;s^$B%?mdbPyvRwxhPK7X~W}!c*L!wIOQ01Bp z*oFaeSP%lq_cKJQ*WlF)$-&T^BJt*{lZoXF5FVs-Xp)mpt@oDXt>FhQ$; zD8}R+(tvPt14m?NC>1J_gB*^ck}lazKuvNa3RzqkpC^9`rW-8R|Ec3Lfte`HH(!Vx zFGf$_Ply7dbt3pXnZ61-*hG;^hycU7UJAHZqDGDgM2l^h3f*a?fd)IR#HOV84%U-<-t00F_FpI)XkCcAFVi0&3G=ULjp*wk*ch&|X2& zkpL$KJRd{a-EUpkN=I^~8rsfM5@$K*km5=Rv(%yS}VA1%fSOR*&7H zs^}-@+c>DGFLPmVzP{XFoz2c~Xm5>!8*t0#9Rc06k$=SJtRVS;=dvY5G6-trOd2^= zXQ-|Prd>R*<{S6j`i-C8ypBADM|T7A*5P3?V2=YuW3pxhDP1DV@mMcmI&jIzEQchI zn)x}6CTwL?p79@?GLB{pes(^61NP=k{iG%%!DOE@3=l8g^X`RMG*d)J{nARk;BoZ| z>|%P!*d>T%lTuM*rePM+y{l~FfWX$2w5F9rT>OrKYTD|Nyfd1?%?r*m6ALD#WF)D7 z&t9b+*)~K=Ks-^p)B!5R$Qn0T$NyNzm&4M2MOyV0AR>(ig_g{d%DA|PzhxtVO@$OX zXqa=;Ar@*d{F0WYSe&~I#P0rIL{8>wtLP>^`{mVeB^5iK{)U3DyQqdxF;ukHU( zwM^JeN-~ZS5S4bYfDZ|^0i#Zxh*QDNL(xjTFcm<`0h_aD%!Zj*PE{?Q%m({hRs#ow zHT;n4Hy#F!*8w}{Z}sPgpO)g%>a@R&Qi`7zxP5P#C4{EG=lCKA2M4%tI?BNCB$FPk*Bq$Ko0TI*{)!l_N1&sDQ|B|L z*vUejahOb5BP^p6jnD0Tad`kjEh`P0(|;vwvfSJ#OTeLVpFTbd7zn2Y$9%=`BuDZ( zmjfAy58xhQ2NwlBEiHiX96 z`hp&+b$MlxC5Z)WfaQOI^ZyjQ1aN?k5x{oyyNw0xgyRwnME_d&@Kno*cE*1F4p5T+ z^kZ~c5nKx#v)nIF?u!pGY^-vF2v5S=9hwI24AgwDYWm|~@X1}h6C$#FA1caEb(r8_ zuWzIeFh4@p;aNxzOzmyOosy-y``#aow4ygz{*(pBUs5jMb8krcX789|ATctd1Rbpw z-f7k{OT}KnMc>owd=4ON4~^63bcj?wui#>qzCjPui8xpGO0JkM@R{FH>Z!n0k6Tf% zaA|fwl>;kYAH6HG`KqcnLoUX3Wi1Z<+{D)4w?M0COKSs}?#Sm^s?`&}8?!@CQ%=Yl1j-;`E6_FpubDp9la}vkqw!p>JUCm;tJ^c*L$DR`+*`eRy z;858py{?@?6vR3qlXfY+mAso6B^&YCCYlML7vK3vRgU_Imum z6KoRGxOqJoq6m7ftP48w6IL3~STKjf40ZJ!%0sVwMr9iZ655wwC_lCW@2yee)GUt@M6V_f$s+N5Lt4n1_^rmS zdfvvhBwSSbLa)a0NNsPczjP*U`co;9Kj7g0RE4`8e^s3Ql-HesJ%~=N9defP^=Ida zM<<8jM?C=5rNbK}k`Y?O)k?*G>5n!}=Yuhmnjn=c@Y0py-W0 zJ*>`F>Km2y4mO{vubb=ZptAL$-RfxCmEfL^mH)9TSP(PFAI>@C*C3@ptqCs46qO@7d%_BvZvcEOc_Pss1g(*zc;gb zd2<7$mU6~xXtuenKDr&U6y8He|EY1`h6U^i>|3$}v^p}8zC-G!48rTPMM{v5C9!H$ z6zOd^{|!9h%!F8BD-zyfc!#Y0Sy1#-n_Ycz=7QIXj!BBRDM~s%4mftsf4x^Ayb^NY zjGE?pqkV5G1}$EdE;YRctt4MZFK_iX06Gl{r>cj;`ZmR5nJl;$+IgzZ2MAJ9dpj3p z(KdBgPH}+v_M&)+|7|X_Jn$(GT*WX^;6gAAbtVXFaQ-p+P#C z0iVl}ikX?2lk)*|z`C5RLSY$v+-{CdPKE*fFwDR2igqEMqp-QT84(d-z1#%Wr)O+j z_$c+sk4HW%JUr*#qx;|G921h)4+1ACAPbnY{mIG6nwpx_R2*CEp8}aI8g!VTk;DEo zayPY2Bv0;uv;Bq!cH0A}ED;ivXD~k=9||9EEe{ZscL#=kHC$ z-aUCh2TJ^VUJH)>u0r*G4dVMXhJF9O@!!Z1L zt-0F_H;If#^cs0v63Iu}n}G9kUnl|!L!X;MQ1aL9YEYe-hUGtdw~w-vmfQE~B<$;$ z=RTE35|6DJHzR|n%zCW@lhn7NX~(hq7Hfh#HMG*CymMZ)FCtK7dFr)i#KeY>kXrO_ zqj@oZ;!T}-8TUcj{^iD_zd3U1m|dHW_7zgH%p2 zfqq4QC)u!%sRvZRWxvR+j&j0Fxzb@Q`Iw@S>grzRp@WtTSIHOsNxTbEovw)XU>@Y# zGxuT}Vx$TsDJiL_PGYIndH145`qnj{f4#hUiI^nf{S>(B46_9fYbd)t0Hu-j@>O#% z2$iCPC$Fg_pg+m{_J!la>@-C)e!C|_ZD7H|3{0eKi#eNJ_1;4(xeTy!FHi|_o4KJl zw=yT5X7YF{cWn3SZs|Gj(^Lm4W*NSAoaX9K+($x5urDB^A8u=%8hs#iyawG%Z-dp~<&Ja%zI@pMx7{>`PVHP*-v#qm&CR&DHoCcT-S(9MUf8Or2^evKv9>19 zqzz)iJ;0FCW2ymEs$*Du9<*LiK8dZsn0f{vHVP z>$A{KpY?_M9_7&#b-PWGn1RCf(;V?@#DV(R$;_4nR?}MBvlJE&tVJCe`JOUy zIv7=jpG18%4oOey1mA4j!;2SBA?my%X8Nis{H@mxW{=%l{uu&e%>9;voopl&#(ibd zX5DmMU*9v04sFVy<)FO0EcC5O;_Qimpoz2J94DHARHw%2LX*6PmLYs)Y{7b{k99$cS}xw@*p zRv3+@w<>ik2v{0-xwwcr1Lh=X$xvUn9(SYV$TY^tR8U&itSnMGOlM|c0vFtpgvj`c z2>Ff1+ZLl{lBIfu1X~NjO60F8Pz)0rap%s@C;y66i@o)_$n4wit#kW3doq`W@gxr3~tETB>}T0Yhb%VtqVueBu=ReFng!-tm;JP8djYY$B-f<)z@ z3Pf5;^ZDK#g}&70gKT{mtMGVB6KH>4*9P`mp4lWUUdAnot<&WQReFk~iB3m#S5BP< zCVs~<`I`1LiDVs#_((t7yzo3AI4dbNS%bG9{q;NHFTidm6P+6T4 zncR59WoT%Sl6|q$<01Pq4ysfDZP2urbwSv}{zGom$W(HBgv$Us+rTN;CWae(nX-}o zT64Cppz*3IOq%e!*m3MPSv3F0Rqg}16*blK969I2tQogww14f$z3^nOG;ul=5k5Kx zwyO^P*CkW@o+hK1+C||d*qPxSsgIz>$C-?_cOO}Utba)2{*3;=txyhRo-LPK*UotC zb`fE{EJS+NlVCLI9$t<>uz$1xpD%7hNmKKah@mQAaB!=4e;8Yx=`wD59q}{l4Ay*} zA}6ZauQmcN(gOTzJ~~?NMv`)|bWTr9Je@XTc7Hyk;W#9ij0IxkUlB$t8V`BpGjmTX210EDGhFDsw0*n2Sp z3d6E(+)Cr)FZ+kFwy0>K@9(ZREpygnI?m`ABnmO)Olie|#Ddv94n@}e^&A^LFlpRS z6~<>A{*-y+Bc*dn?ggAMz|J5*WcK;wQyg`6S?Hd%HuFrLWGBY^WP#H`?;L8aHT~cP z2`5y&oKm$H%Vp#nONj^paw>o17QX z>!7!G8MS;!6sgcwS{aKaTea`b+~A$}tvh2Ff7}*(-kf~kmlnxrWC?Hqz6$J3g>pGW zAM4c`22X&ODdcJpdAO#*oAMCYt}Kw!!n9OsmZ1@_!bw$qUNrt>1eF!!6bP3ObTb4q4oNn2e`TEufqCZ0x9Tl;#OPj>8@$7x@|aQY;vwBLGUmB#^hX1&-U0hi~Up@+FaSGi-PvM2R8x{6Gb6|K%Wg zL>HJ0y}WJbk+>LLU@l!3e7)Uur(jx=3?2|kZ^JtL0XRn=6$mMspBwFNx>p_r*QED6 zn6E{ttA(3PnR}acJP{!8ypCtZA0CVoO$h!TVgo`p`cZufpS+i?QL?(Xx4px^jC`<}XxyJeKmQ6uHi9xrpDJ z+v60Kw_WrKb1Z{xm5R8%T3&VNuSE;UI7N?yNs1clBXNC&VP(q zYF)dTdD}a^Gus{eKh5dWsC!H!%UWQ@WX@2FiuB%>GVRtxA9b%#+V6*aZg)s??RKr& zAiB7VW=GoM>WnA{%ZTAf0FExGcz#{%c$ExTa`EMW4&{&c>O5^2%5m_WNH3R=c1Q$) zR%WRx+LA>h*F5@^y*gDHHk=bY_N^{MzUsO%>UqXJaPn7W|8iD62{vO^dFBnIeDWxV zGp>|BpCG!jEk_2^B4~fI+&Xl-hxY!p3%xl;Z~N9ABNpg$7J=hRkh6p6^1fGP9V7kC z91Z)<^+Wl!;je|lKaLNy1uspve9BXYxAihuyU;n_*>Go$7U;w+=D!`U206Ec`|Gn) zFPZ0F_2-j46V-Fr);6}XoIM_#z_@U6X*O#eYgW(NzPvyow7eorIv}mT0sz9}b;IuQ=N+abWFHnmmC(vzzBa7U9OT4>q7>53$T=s~jl+plWV- zXbqB{tC}}}2(xc!WS_~p?LQOyvll)QVMG%63wz&W2MtC2r!~@=D2&tV2G7Epf$Ev9 zA$JvvPK)a(1-uh_xNNP@i@^){bt2-p(4A_GdhGhakJgzZ=+?Is{;rqzX|v!KcRB_Y z%|Q5xh|jN`VV!J$TK#*gNkpgx1C2I3)EBuS#W_H$H`)fLv4^Epgyr+NCPBjm%-H@h z-X$pIWn?nH}8p3X1HaZ+Zq^IP>ycOfm3!E~S2^`x_O< z@;`Zi3@(ax=Jcd_EIRrgcM*1_*2MdTShP z6Uk9dY5&+MJ^~$4gdEZ91be~-Gier&Ku;xaY(`Kq!-VdPWhx*q+8HwJG(5J znhO@bJE~>q+c8OeiqAyzsg5Ay7v^W%uE9Q%W;M1@IYQxN?&(3q_p{w?;^B?v)wt@L z=QwLa=5#1!BIGZIYKPllC0-_%m94Zfq) zd_RLELccB#0Xz9g9T2MpOcLRK_VL#ijEjxNvYx`5k)(F@1n0KvfTRy6RctY_0@;RshypVd1on|KPGEv z!>rvIGp(B3GA9ahp>5d+O+m*m-R6Djpfp~5e3-T%7fr@sVhF~N|2e&n%`~?oSsM-z zp=f9v=eCCv#ZIO3G$;k)BwJMP~-IemQV$%DOO~5w_Wz zwXEeuM*qfPN(}eCcGs+S3mZu0X(t?4)}735!YuHF`WxH3P|x$r8U?kYDwIO-)1-N0 zk8MZk==F*fkNnxVlM+j;ijPyV$t!5T|zSmDl6NyGvc z^~El0W0Dax<#TLGHlKm1UtqU+Uwhr)X9LMfzPZrDu`)fsfCThE*C7Wj8sB&n^2?+% zojP1YjU`=zXlDQ2p`i4`A(P7Dt6I}u88(EcDCW$!cI(z_AQFY#FD5(0$A+`fZks3b zrRVMsX^k(14VpI%Hp3=YbqIo!;l|(W|aoD|Z9AyQ9C}fVcZ_n9-`p>um^Z1_JR2 zm_EI3N>c{?c=mo<`Bs%CW0<$5FV-vMJ5B0m zaRYeG6M85~Gipi6<^m`e+TS-`%B_hrtQMF~3M(;(ODYngj+Vw?RE624pXMIAu=vK^ zCVrBBj z%?M?O$j;6#*X5naFt$rrg3^?Ayl8iOWo4gBT%{M#MLJAYU7?>4rN2AUrx+yR>0qxZD!%EBx>awNE z>nvv_YhnSjeud8#4eHui70IX?dKC>zvHAum3+40`*qlwl%b{Ek7uhxz0VZ3Rx_6et zQzGP5I9=yxT3CH7+;eDYQ!;3t8*0R=ujyC%`NLNTc=O{+0GbjgT z%qjVEOT-A$%>!W!PJ7YnR3b(Mbjg7@*gg5hTm|cMD1g{gVY5|B??quEfJ%KlLw)BAU+}v8Ztv?Owgha?vOqk z$r{bn-jYFHzTy3Iw|9BMA*9&kKpVDOm#`6nuUFwpgPYDpt=^r)WToYC1q+-?@1PDh z5LXUVTz{{)6H7RUygGB&j!!cH<=Eh$;{V;UQRIY(dVhj2|76TO9rtJsB7wQ{L^gyj zSXg(pKh(px5}8YCYWK}`+>aCcnk*`5mPy6e24~6JilK@3DBpg+Iwi}99s#!RoSYzR5`sW%k)+|Sst4kCR=+Mz(ihy* zmV5oDxJ5}Eb*T&DM6IO4t97{VP6mA{=bQI5o^Mbmebei$X2mED%SW1=7NH_H4&fp! zjhM`Uk`TKyK|9QY5quOo#Z`x+vUuuDmWj8n1>U8r> zR}x*KB2g}D%_q{Y_xoEVdLyar-S#G?q~h6H!+LTjRIqm%w=dfqeCd2gcWzJ7Ze#|6 zqmi+@cS{lGP2Te}l0_$t2ct9U8}CH^73V6kWia71k&a*TRKu;?`gN~15D*Z^Ya~ou z_>{`GH6IHmC@UI|HEPk1bs7hm&JlwFyW=$0x(>YGe*-?;>$r5QO?6qAtt=BCEfF6d zP`9I=)EGUSwYaxDdRRu6PidPpjlcKPwz2>HmS)~71GFtRqfZ~dH(LmKkw?kUL`3kP zwI6>3JU(Thl^UYUsYj%Yy7K0o?=wf~jDB|#!Jl~8 zk8zPwD^nUIWeJO}dh^VbHT9;hF#37{W1q?47L=*YrP?KGpRP8V$*w!r!`Up}nk_}0 zvVv{(JVA&E#u1Mrk)OI0xe=TMrGl{zzsb|ckiqKHa-~Zn?ysV2yHNjz^b%v4B9RO5 z`nA-7^!vd&ngUj;A6rk4-z$rUh-Bh|+xJ#uSKwl9^Z>wbVP0+ha2sMBxeo~t={fD$ zlIB}F{7j&Xh-#_;pxxA|02QnFvjdlB1q%z^@wuH=FU@aaZa{i7{T^0JZv)WLJdmc! zVx?&hL!I8fq&~<17Kry|9J9VF&qa};8fFH|=C`nB0!cYW4U<(W z6x9C2^1-h-z@pFir2b%hzWu_8US_njDBlRRTx_1StZXi&bqNK(QuTKCrJ6W97fkgzpQx5!o!O;e!rZ0u0 zK^HRqk35E2)wdUrf;*&+RB_6SbAZ8ush!u<*@}A1&&p|qTH(je)2nECISC1ovLtoY z2?b6^FI?*kcpm5RQ!y+OaTuZvctX&`L;q*ugU{23a&^_ceveRqtqIMwU7Qoif=*3p zGBUB32P-ZI{9bznUGm+JsWr>Vqj%xdR7H(^vG*3FWe$9J>8UH!O1M9nC0=-1?mc3F z-yMjQ)J*^o z1o&sQ?%vw3f6z~LeYv?5Q}GF&^28 zo#N`2)tP9^M#9x+S9Usq>jI0u@SD-|Q_7WB8lKarMWfadlqh(sl9Ez9jf9Hxh3#fE zV?}G5NnU79=y2k5Idq{4jj}q*=fRxq`>r#d<+9Gt#$CmX%Hlc$L^A?Tcr8}xO+HA!gAm;W3 z6zx;u@T>=!PJ4>$RrwC$N&!5k2A{yO5C~cSu2%fMyk#z6w$Y+T=s17euOvuj?SJ5V zlzbC!)ZwCin`DpwuvctZBNhKI^74M*pf$hcrxva96edjyA+9{#xv{6$tx!TQF1JgU zpOn%I=zM@=-~SKvwQ6a|+WiWA_Xt?-s8VE~QinPT7eZRxQvibHYG>Ds}|{lq}H zjPp-+M2lK>wvBh9u|B0YkEF?FZ1#xp^{f?AlJm-a8n$xR>lh}(lhqWl6V%fot|_bH z9(-c`FcOUDY<75*FHX>@&TZpRqq4~;bH~Kgd;n2-Y0XFN-&b4Fe9%v4jc}0_r8aU9 zvJ1}K+}~MR#Klegf_9=#jPE>9L2CT;{{)=_m_7p8fPQ}hEuf!mBRI+UU)ri7Q(u?IZ}e1#r0R6yo8tUVfBpe1IJdKe~$ z&i~}7mWVh^t)gEnloQBe)Fp#79eiIQVm#(c8(o4MG|{w!gh;k)53+R>m_vt9L;Hw) z6i`BAq`^V~hBy_$-QP=Tiz{txY#8IEl*ox|7tG_waV|6+X@cOK!FyfXnUS%#Nil7w zxfM@q;f|H()WbS3NRM`^r%^QN*o%)}GN(TyfOtKh{|OYU-y>*0fyeh)1yrv3`v77n z{{l3a|GM#kuKg#d{QD;T3$6l+%>Q4(?*IMbf3Q6N^Wlg!+{Y^~4cTNZd3OX3ZjsuP zm(;KhiTdog^G?lk->6jUpdE1%3EvBe{n$r*nlE3(e089^U&uZg-0s;f`!V2|K4u(` z(yWscdeP?UYp~<#>Gj8GuY!T28m~~HWZ@}coB?a?<`cX-8OVYF*JH{m{GGuIKMo{F zd~?0|TNWYx8A}gJFiN-K3$uQaJHkR%Pnmo}rEgJ`S@8yETl`9= zoko8G+^p4JILi1zV86d<9z4;j3?F;D=ppg%n!IwPv$R(J-w8s-p@z(k%km{ELp$~a zwZUUp%S)hDGOtsq0LM_VZiAC3MiDDXrX-JqZ;D@ls$-81-r)<>zmpPt?oNC0EeA=m zGeF476|iq_O(=lU|@Fg3uU`Ux%YqB~jBVQNzeI<)Z9HsgKHLk|_XCg5u7Qz%if z4G}xq_(;~J`<&@%CGQ`;;CnbMB7_+K&Y4Gt76)Xrxa#no(=#DGuh62Gu*|JOLfwqJ z|B^9AiX7d8?aK7tQvj%NNoNZvo0bxxI3v^a-pc)(BnYA_BI#n@v_#o;>)*a^0GT*9X9Ga@c7R~C7#IbcNRgtNj zL5hNB-~`avrQ%|KNCoX}1QdF7&xTRgLO+IV)3{ zmOhQu?EM9jf#Lx05dN)bnYfmCuLk_A zB)3-Cc46ObH*0nz$B4>8Snglslnubt=l%gSFn)TL>k;)xr@_=o|2EyZR#6ucl5AvX zt6Neu;*5#Pqdl*?i9nmzUyXk_OvhS%%KEcVC6b68P9b!}QQRc&)eNfWJ<3NKa$+gu z(rpMZlq+$@r-rbPvzWJ*NaxIMt{<=Sp41||juMmg+@4-8wm6{hWRDb#W|3O2PG`D| z&^n*5Nn^|xa=HLGJ29GUx7n4w#yY=KtZlgfhgJOEFu}&J&CVXInLyf>-!C>+@=0~c zpNjc7xrf}YbTXnThai?i_j(xrC_ zwOXGDtZ!VlqQlY%LW%hn6Io;4RS1XOgLShEyK=wejmDof9vHaqfTc4x;^`7~(ClAI z0JmX1AH#Xq$>944a)!?&QP_k2;0~Ycy_h#V6J{GZ3W)W z*8`3QFR-FA`JAU&6LYYGd#)9`uk{^3R)T}f~GJGIPE6W$vq;y82WYj zycV2yC_9@n2CZ@cAuk-=p{jN!!k%*}Faco@G^vuG{E|K@tN_^WpOY7!jU}=Hf@wP8MwYzL3>NjE+|d`3QCu0L_Z(UvxAk<~7_J>0En} zDmh(Jzh<+t-;UzX5zfLSW7NUTNkXF;Mq;vgr_V$ zZIw=M*RXkSe(ZyBVd>@Id$rCB9$P4D9Bp#NA5Z&Y1N0sXkyb~ovx25ck?-cfDk3K% zBO8D@o?1IQ_M&dgacnwFW^&`L$5xyjMyL=T71e?G2BfAk%Nb?^`G+C=6FXxGJm2tN zxpay^P!+UGX#eW(5Lo;DOhB$+sakYb-X5c&GpDJCdD3EBUa1F$=H(qF-(8qq_w7F3 zfTBL-3sYGRNU&K*pA960Z@5mVJU<@*IB?bX-+8vXqVF;)X?1Q&*G_@xTZ3&kI+|T* zGK!rRBhYFZ2C!3PtpbbrJ7rBO4KxrR)8qe2`)M-|^RaR_;&L3b_#7X8)hiP&Lv&L= ze}v)pjYR^K60iEqajzW_(29vqd?sJWL3H3}{$%w%Ha}5V?M*1WDcQN#>Isp%Na7l( zSM95P+P){>uKVW)s9ltu-G25~#}BS29!vU6am~BgNO^Qp$6o8;!dGK;ce>K)Iy=>b zGlu9s0&fX^Ve&e0J<}?u3n;R0#vcKH+aav93oj`~+cKB7Toz{xqW4) zMvExd)?VMT@zDFrKv&<);NXH=)oU1pH8%qm;?ZCZo<|kbLH`T=yewnLO$}eu#A{(G zR1iX}U~3}|kHYidz2mnNdObZoj-r60-J<}2z|mE{8>sE~o3p9;tt9Ql^Qm=*p`>w1 zLrKeQRWm+o^=*);6zb%Y7JEFI6jWY4C*^E^fB%fpQyjH4!E)6Q*G2tBw@1g@5<>}s zDW5FctLnesr*F?WSoE4xkpYN)d=rutk=sM@PcEW{YEDf_oBz26uONw+1>PxNC3-?rwpmad&rjXj~d=n#11vKj)tB zKHT^F(vPdxnsZjoQKLpx70+5a8jko|zGUP-l%D_f=abmP3EH zMZps@ie<{t_BZg~k7(N+Kh8mF*ODjaHb#FWC)uStiwDFkAEuw_#|{3Jm6a7$Rkgbm z-H%O3Mt{z&_4>hpY{}z0c2{{BsiZl*ip=`ep|7`BlRM#HN%beX&6l9JfZ2=kpr86_ zu~A^7i{zk&$BH4*>{%oT#m%j#t}I0@Zj9N zs1wVYplO+Z{|Wo+Slfn?nTZ3$8ET=UG1etg5dhq?k=7IEFu6r3=3?sIdpST#BPL{#y){vGne`O_JeXqN8%M`kq zu&1+dD>^y`08!%1W7D{G`Eo&VdG$#M5MJ!y49IfkdDMjteYtysFc8Hj3PW-0Uu*$^ zYz0=wois!@B-ry^=u_!ZJyAd!hatSRfQ#(4CW5};jE8gB_G$QOxK@9JpyHg^V&xVqxNVe5dV()u|YIv2cM7f@-x2LAR>N4^?AQN z`ltB@*Vd;*!ASkwOwv%-)f|t`iG62Fz6gBp%_j^G(M5scsO@Wi+0be}+E1u!C#Wnp z0Y?v3Qvn0M&X#M}znpZ#zw3FzAwYPpTqxaK*xT2wD3T zEbAa=X?C+>cIp}2%|H##iIOe_!I)ko+xCd3fM-NgkJ zZ1RU#Iz75B_aWjdIbo&W8TfYgtT8!uyQZ~rgIZ@MKAi(UpAp4hQ_mfPLM=)z7eR1r z*vHJ8R^W$(`@Y5ff<3&0JAQ6mXeDmXb?|-!@tFBptMK;JbWU>3xnkjT&lPtSFFJRX zjR=k}JhF!dY?$PWDpyx;{d8xVM{{E=sZ*)BCz2<}G}h)=1%oewn)0w?!E=3&9#sUFB6 zE~-cWo0FW=km0$Uwb%j100+&dX-qNIRC|_ zf_9$m-#OpJXc&2-XMD1`c$M$vdv`LzD9y)sIlE5i8R(WzlrGB$a?K=kDO8_)ima5s zJG5EF+MKdPx$(Q~CI7-CTEKV@Ry>aMbW9}dFd^RB2FqzMuMQk~ zbHH}FTGCZu$3Q>F7^#|>pVycFnQ{{?Ox`Iq2Ea@16FA|F1bddlcblg0np&{#C;|Oytw#J_4mckrt=mOH*CSVba`(k4?g=P zfsRD!g0gu}h4Y=Y`uoh54SDri6ZA(2)5>-ZAwR5cn!6137#vfkRdDTc0Zw8|m0Rp| z=5$f6^RB3A$j!Jb(3R>kq2#ApXUH5{%*)v3w*|)Zk`E=;GJNQ_ejxAUE_MltUf0S_ z6!$z=Je~nVx4SFbEmx_O#E`whBT(DD`TiRC(TzQo5tvhMe@q}wLa?IcYE*@D6a_AQ zgc4di+)uxhlhM);ubpUX#yCD3KQ>k@D~oti@QI%4(#8AJ{{^e(NQo`oEVqnWuAYPm zpvj2I?>cu@(id~jET^}>blZQgtEEI~QOo_?C?7uQ zb@UQGrl;rgf*lt5t1b4`@*jUFra~yz{0T9P+FPg;CjCIRU*Ix4ez}^mkGc~r#E|x- z8q=b!i|I!^wR#2Oyw%Zd49{LI?aUqzzN01)0-mO4SD~d^Y~gDa<(d@72GVqDVb;gLp6-v=sYi!q zG!EZTb)}Ffh`UVJj!y^>!rJ=fpyxrkuw>Y_MV>f4g1chyaY3R4wWZh`1H6<2+5VCHFlmL&u$tKcxmEd|YHq7t%gsf0ViodC zHM}+#Z4@%vOh%No&a~tkCUdbCTb^`~e}DjOJ2TF;$Sp9sEv{%90`zO^W#^9&7Dy{o@n)8UIISETbI=Jdi>p7;C@>pu=ac`>l&B7p)*d>^E`=hOL0>)nU+<@jUunYRA*&g!kF_GfrUuax($cwUuXmVeG> z%&gA)oth_#?D93I7p!Qp51Al|j7R=msCp*ky{{+~ts~+yv=<$Hg>>*nyu0dj=zs*H zivr=ZL+jzDqpxq^qE2FBR*HertmHn57~=O&VO`u{`XWpHe|}v|OJ4pxvHvvBeexmLE00=HtW!SHMW8&Zl6`Mupy!TO zCw7(vb|?@$c1*D$|9tS$NAWBND>8E2M{1hi@lW>R^r}z?S$8FWn-?zbLQJj?vH(pU zZt>3yI6FPEZGaOLVxG}|a(31&Xz3C!)@59~@T9l)*9tcftqtLm+gQ)RJIgPYj{pQL|B;QPw#fK)@~OYHVf4xZLMZO@EhM}Se4%g_hgxN|Nl2bQ{l?@tkLqQ{$m zRy~~}Rf)U z2{Z3)+Tmm-Ug&Ys*R5v7-k-l{iu_pVC+c$Ud4o<|FYF`i$i|O)g#QQbA?Bk9^G z(+Pw78C1a^cvvw`dnUf6Q|dXDJP61oGF4E}&xM{DehVHWGQVk<*+~c|ew5rpzfRa@ z+?n0M*EG642-P$t1q@0ns~DVQG-(*ogjnr6uZPe+1TM;clf7S_%y`Y{MZ?6)6z$*fseURIw-)jH(Y=p8k%fwr-a91xAMiKrdM+T#}~}qlNvDC zaAu7{p?&8FU@$lDD_y*0mb;Y~vy7NbTgPN3(h4$PeBPq@mX zcxe87_ontg4^$f{mbtsU>Ozrz_V>V;ASoiVj$}J#HaMM7&%MdxB3nVBPSJrgz0Pl? zv1$$_PyORtSDsbZu)eb_XarNY!3W+!^5Y?>$`S<6y?f3I8deh)hQ0TB^5zQFw%wrF z=Vr)J>~UnIs=3LvHCFoL%YY&XV%K5J^Zn+LCmdE1&}M8k{SN4bBZTL+Gm~bBcT4tg z+k_bxne{tuL)T|$y}i!o=19FP`B`F+nzc1!m?WD8mLr=+5kkDr_oneV!1f%DZ-Ol8Cs4E;Vf&(;-DQFG(%zU@Bu z>!L7!2xd(DSZBS^kuD$n0t`GO zsYz|m=~BvUjqB;B8S1j(TiVh%)}@XtVwFJn(YRPw<8_n!5nv@3BuIVSet&TF4671@ z!#RMD{_{=I+UUHxOA16}CuKG-^HQEB`=9liA3$#ap4q%pdX>khn^>&>W1(y?rsiD_ z(du=`=IKsEZ6|-oy2tp}`O(>z;%6`A&GDYHdOAJG8xTklC+*(X;k)CZJRV}QR4Ufl z!U!f%_)+424Cq9lVYFn79erdiHU z{ytt=ez=*yZL{a4lB^r#qmx=fMekz?oOEW%=YwKm#Gn9g`34~*-nmWlrFu}edazkNN*T7G(y zh6_1kH9}C3rv~h3BS}fm5SIXA-MX8XHy@F*@Fb%7?l&s^JermK3Aave`t2$uNezhC z!u>b{gx)Z~P^+CwOqPq0LAZ-iV|C3=yfh`^$|a6iwtgu!Ln<)N3m+I88J&knaNaNGD zvN(?z3O-14=hZ?ohgf!vR%t1S47X@il>Iu)%R>6lsx$@|QRcltH+N-H9|=Xjtf;%w zDp5Z*JHX7vLY$jDIat=<@e0|nYB9ICxLW_B2un=R|HMTFRbcL9WPLsxvxLeM>q@}< z{!27Kqu4u%OZTE|t!|1fTTF1Es;$)CZTsaExa#}kf0^u?*18xuDKl

aDruPGps_ z=kdFbKnG3tynJ}*ms?L0` zXDxa&K_Bquffo(oaizc{Cy|$)iJ7j+GWKzIW@1UHdmeJ`VoOtLivCNCizEvT`o5my zOHA0x_i>evbLkRu*Li-QhK3YxLDhifTC_m1YPEl{o;dV;UXCLgylGsqeg2nrQSzx{ zbRocHaECU_F_>|uShr<8^RMdqJf|Q}lXc2;!jZYv$)*nr<6c|RL!1!ZhzC<=-1t8C z?G8T++oO3^TH~u%`#WDlON)yvLpg-Om0rXh4s;h>t8QZ%pIPxggyP?*T%S{}FlI5p zWZ1NQ0sF*Zw;59b0d?yFV?&Guo2f z>hk$^;l94c8_gwtB%0Q5nmFfE%*C#sHmi~i2WC>0Dw76m};*WY_{|YC6&8{jU z#_LYmi8pP^R6)6(2CVs}`_^#-W>QkRl7E|m8w-;fh&p#>9Pn;_;XoA5PPK*T&SX69 z)Dg|wa}6-bp|m=0J97VnnfveI{39&~x@}7UZnhg<(l#m9Q__qxgmpy@OpJz40@W-Z zD?*mVTw5vjBPXv!#zDm7!oH_lmD4e0kHNuoG-#MYSDyOr_YU8mBYkU%{8(vaKOvvuKgnq)>RMOJ%$_9)_*$4l|JNE^*U4R25G*i8VP7Wm*WdUAYmO=M zVK1K&ciXgG`=QB2V2UESH8xsb>#l528f1PoZRt^S{ffSdesOwEQru)Ub(O7I73sT0 z_Pr{8)_u35c;{)pH#Wy>BuCbNaqER}7e)4ZMxvATbFKNAqX)}KKY2Wh^AA2Qt)i2( zbs1~O@v)r0m1~z#NU$j{1+cj8ZZrG%%-5v*ah;`D#LCn}@n^z2Jt*ZFY zJ4q`F%oR8{8wR$@cX}oB+D~+3-x87hUj8g4=(~xfB}oC-b7@!rT_;bf@cwEW&TNV; zj{Q59`|8|ie zH}Y$B3sp8w+8+g^-VhMM3y)YU_YTbZxc1D~vA)ge)<*S7*ie}U8al$0z zGiSf$7L8VplbIeIlZy&0-i(w`G@iJOR(0KaTHYSJXD`;|vc(q%4>-cZ6L4BNe5;3( zv?Q#{(VHv%E+=@6BYdG0T=OnirMV zu+KtE8Jj03#v775(HAdMmeNuP56KvzAD3G8t~@o2B>eC0nU5uC!qB8~4qVkv-xWb$ z`2$&W?kUQC+w%k1=)itnYIEm&gGAl3Z6$ekqlU?*c;YiFE7G(zZ8(sO$t6bJ^b_FS z6(GAR&JV4l0?Q`etZRttf zyq`sXc%yVKF}3HT$24TRl>>ISfBS5?JLLYz3u_rah^&@qb{IMmdw#*JOupMc)=yZ> zi&qRy`G)=zAO-J7buRUl}+|KFijh)6|6yjq}G1%`aI%VSH4M8kC) zCrsHr*Y%O;rU0?W`Veu!mZUn!$;!bV1Db}~NykfGRsn7(L=2*Y(WdmQFx|}#rmb9m z_!6gx6J}24#w+f-dFam2#{eh}+I7!e?lp)}j*YG$Riw3u3#y9f$ST$pXSV8~r%R)3 zFtbkJqT5D2f)Jr!yez9AW?mclO>{L%*FFrzSOR5jlT*KTApaUEocD`Tc*ko9>k`S` zHj=Hhc5!l@ESm1O?70xJvNIV432g;gS!x|Ny0YrV5RO)DB0vbT02&7xjs2>nd-(!8 zZWR(VqrC(vSNVknkdXVVE6Xu3#8g@G0e@DJja7n2dQi6Vr1LcAcdaTvZ1a_Y6cN(} z$^&J=pFcnJxTOB?Kv?|OPh$MD z-jqWBuKKGN@&v)`zbwN);opzre}lk(9*Yo5_W$#T$6lTH=g%k8{biWP#B{ALd3d-s z3i!p<$(NTO#Y3yL;~tV0OL0b=w%lhPg({ZzwMHI;& z+{l48ZtVana~A8`H8{#4|HalBA!4Wkyd6e2_l!DXzt$BMK_^AvtL>W*58`0@*$L#J z;nqDR+{!~%O^@Ld`@YxZ#U|99D`s`66iMS>q{b}|ist7v_UGzd?za=HT%z6ky?uRD zegxGeb1=0l-YvTFG^|RJ7hMH8NC$ko>Saj1r#0lT9PXe+%Dz>}QxOAKO6F^zagXd5 z`7qgN5wC>hpoqoyj3{1u)3JT!e{;PTp5Im2hJE_?JkK(!#`WQ0vcgs$~}FZb5Zj^FOM!gI~nYJ^H22Ky=6t|mRhrEbJ+Y!3qJfWm8^<>Q~Q zpBK7bcPd*Zb~7L^cne=s&E8xbyy3}#N@0>~^jM`WAjjU59us^`42T86@n5MD1k=(N zZD{^E)jA;UpVv^wl0MshnO-|rgNflTc(?;q&`e1;V<~4U|17M^qx95G zg09E}QmO74g9UbaXS<=s^A-)Ta!a*)iy|b2?AR`Sh4>&aQvSnq4omzsc%}N}RKRP7 z(XG^U|G4E)Fvg{?kS|b_V*l#!-jmhtVr;3(XNC<7%?as!0#SWK)gTZ4irx%Zr>4yA z+*fqJq67f4P#_k!{M2g4!miPJ%Btf8?5L{`g5H{K_Bl$ zBSc1K8*jS!qx1E5p^3g)Qu|-6?q+}CW8vDqW#6MCXVgA1T0a_lZg!Y2@>B&@i<1+?p4 z+_%`Lvt8(n*06j0ylKP`by17_3U-?##lZp=qg)a20OY6xqHq4jJY^W!g!<^$)O6Y~ zefm~|{jKXDTnM%y~pC@d^-aOO$P$A6TGiJ8UAqK2=I76IIx3;(M z%Jzb|ayDLC?lrtwj zFemf0#7;|-8UTp~hZcr9R(4+hG_r62^j(|Sd}m`xmYxuRjvFRbtgxYY1ahH*ZVyT8 zEx&2FKCyTK)lH z?9>crPreuk5-eakjbh;zxU7O>V+>sDcne_-NQkgilhEChCnG_&%}!R)0SZVO|80Uv3%`)MN(G| z2C{lZ)%)@h6k^C6Gj91yXug2SMz2jaGtWKqiISf`b$Qtuep!T3*d}nl&=H4uG9gV7 zM#h{%<6h*Ha$|kiY2`gbih+nIo^H!@bG-;K_R?B#=R4iC6uz1JI931YRz|UkprU_f zkrg#r9Hp+=$_-VW7@~Ds9RB5DgiS7qJcQ*B(NvKaD7ii>phj!B&EY?Vg4|W_G*x8v` zm2a>4L38*%9dr#DSdBQJ?PH9qnWpdwxF467pN8{2&HIy#6JDxm;0HyQ zV~uF|Rr@D{zYBZ(PE^M>yIaND^S36lM>`aZJAaw_@CS!%4(QiMC#-YLOs-(R z9@R^H;|-ac|M2JOQ1Lh4R9%g$h&kR*skTQ5(l76BilrQPI-)HhHGX71NB~WULe;Po z=p*mk#WAtD$RXfMiX%GaQAWE3;NtG5?cs|4;zzv;Lxc4;X^Wwn8jG>r_SA^b*zzD?`p&8{94zaA3%MK1 zK!d-Ti+t|2dpd(a_sY*AO?w{RwmP5L(xkHI%WScOJG8Fsfw*9?FC0M9LXeJOJ@E(3 zkS)uWLy#i;uF3Q5^4I9UAO^l|b?lV(vFQZr)bg4n?VX&9-6GI6*pXp=5|HwS1{Ri@ zt}+>S6Sr7uAKmqtYtXbIE>cr_oeBpHf6ASjB==97i>gkcYm^oh@yVU9OZ=5Oa#9&* zM&}oW$fEm9z->4pB5I8+>M!{uvHP!`afwPRGovQ1S`o)k@3feL_i?m8nYG>2Wj1ZR z6u7e1Y171(X@Tg=IlMH2=NXYYJ$S#XU<%jDdte1{#BPQ21`8-aqAUHTgJ0yjIn)+uu+s2CAHJi%> zY5({N)a*X#K(R?bTEXTQ^Sw#ZlYK*0M|6zcD$4aQlI+uc4_C?{vc}|by}9PTiD0@? zR&I+=pB>2Z!rUBJw@xjbewraAu8dGH#lVQclQkp|lU_a(1x_;4#?38gB^@-nhb+^$ z<;T4Pvf4zq7j@ZWRxfTU&QI(ZjPC8`{`!H$ zCmWwYG&Xt|c4Otl1zT0s`)lSrWV-gSIU{Qfy@8gIF#7d*5tuxXE_vcJbf71HryKBp zmh)q4T8HjwpdWMJ7_sbLeq&mjGrV|%c$zrQHhEqF2;A}Dsk8qpa1~s0LZ$wd9EcD^ zb)0rM8HGbByrZ4&{#0B zn^Ct^;=%63ed0*3Q4QQCPl zD|_)u_Nwx1Y^_xmr{4*WioK64TP;tPMEc;0MQ6WLsJ+b5#=fbq?zn7#eI7_x6|f!K zdh&ZPD5kn7qPih0w1@CQpKrSITftbeet!P(wpP|8o^JFR(a!g3B`pJBM41l=5A-4W5pMHok*Vxuel3eyY+E)un92;k2eO zX3&SN{VKzdIhM^$#-xsV$r0wCfu}+-g$J>ABIBIdqM& zMcII_H%9iw^+=!6Kb;9Z!wwxPQbF9b^YVr0n5w9&3hAWEswr2&Sl?uoske_Z2L7fs z2A(st5fnP!rChNz$0Dg9OPogG{FiTZA%|Pd1eh5{b+n2)h-Iq~x}1%zV4W7dM`3?} z0G;T#7F0tdJ8?;)$yL<9a=S~+7vSLsE|^fzG&c72DX7Tex7mHxRIN@4Pm33V7Qef& zk();a(n|dZV$;#N2@GH4@#MM+S>$p5Rg6-@r#9m7H$9X8r}|D{m^fwXc<&M88uc*` zUgJ`LJyjzWRgej?ijMI+ja^H%H-I^r46tSFOVph@BYtCf}O9fOAAuA<2{o>B!Z zsGA|C=}mESKfzJi>p!sBZ|6{+${YPI#?AJm0^GzL{;wgpOU_jc3u z7+g*<0W)ZGxgMBRa$1($FXbbzr)$mv-qu$y%ZUYlz~74TX?7o>LIu1+Y71S!?3K)s zG}5MM(zki@Sb}JMDyx-bFaC9sGO?Du87s<2cI6Ep&2{IRcu1tUxW0Sl1^#Aw`X@)_ zEkl`{L;c|JE{dC6ho_G+6DPR|CKw;q(H8Oy&O1NOYr1q|eE5%e+7X7aE$~+{FTopc zsJ`<0(-8=#_gE(pn3~kr(F#i6PNO+r9~~N&f|2Nvj)davo2uqOu5z5jMPd2dm+y8V4P$M)oontOoV5m_$PEQ8;fk5m84mZg~c~ zuyr!9Fb@o_I%Gd4V8e_>5Jq18A8pUk4GI8ioppOLUg&xO0(QP`eMw~8bj8pB)OhSk zw{#9$oogO_4PVvp+1ssF+jh@~u=gdaUr#PU(jjQNKIaq@uRap|$HfFncgjfIgJrD~3(J%5RafY0J&wPD&--@Wb&Lr|gV z{;xZydqtW}l&&@2And*Q-(sg1!jI$4{}(^EeS-#Ea6M~{S(2K?oCsk;r1E@Xdu<^C zf$&Tynin>csjgNP@9v7@_#vbR?k@z=;RT7|okjQ3seKQVDhC@aTrGrp>_PR4rl|Kg%EVW7wg37RwI|Cq^!#9!C#O&f zGtGxiR@CUso4CA80ll8zh9WvjX4A4N;_!*(viK{=H7&f~o~_lC*rv-qM(Ztmz3W@h z$adQ~RjBI1rg8VQhP#ktnFt&fAnfcGu)%L3i_&}UVG zAN5nNA7Ebd6Dz!@Bf~UVuX+R3I3$8bpO+f?p;>oqWTXy`{wYg*>#UC+A?G3(3uWJ+ z%$Yswi^dk#&c{FE*95A}V0iRh&Fjx@BeWkST2V%zu*Z2`@N@F|lh;F#XpBX1UIqVs zmaP?(I_Ik>G++;;x$CE5WRt;_8zARRU~G)Z_$15 z)!dfjf%nNjr0qadlPGM|xdVW79Mo#Let)d@0jzWBMX$WCNe0itn#`nz9cTxV0S>ks zkgvxD@Ld*ZRL2*H93T}fg%2-!x2NYeA=X_w{ilqzM1&-FG5fk&OlC-SI3}P?x6Jua z!w5rB2`O0hH-#~L`Puhw^7+YmjPJZnU&+w8%9OV?L)r%0zn<{>Bl`$_jd-^B-S+HT zpO;e6bfJ=p;QP{SG+K;*Pob92T{>wtp)nW8NDAE>?81Fy2j&wOy;l0yZ8^@co!FUw6CK|zZm_DgSFP^H z#te94gnD+X3B6uTlXThiWizF&Nl*|HXQyn$TrM2{JT>42#Yl?VdQPQ2y=k2cbDl#G z`JZg~8y25~H#FP0x#O=su-UZ47Z*>JgP{HEixyT~pZ0_qgCXNWDH<3!{j5 z>*UvRl=QLtnVMz6>b9;XA@>8~edotiuQy6b4-2izgQiO_!Z)b}14&>XO~e(~rlO1f z+WV&LQ4`F_^B^|D{R{p#`o(1o!N|(``h3w1svlE`&6z5`~wpg3A*5xxD?1*t3u=xK~T_Vv@9&Ls- zKK@=tXJ3-sjYi$KIeSsDcis3}O^2S#L~ZA(Pfj+CmkZ}rz#k1Q5hE^?9iC? zpv_XOWuT&_rVvTU>1pAO^LbF*APRf{A%SOMob0RqVvOf5f8$Bm1vVxKgi9fnxys7x zPo{EIj2q+*sM2c6izXvHI3yu8x!r0=I^yS zW-AaC90rP1D87-{1Ts@=2w+!PW|Leb5MPSalsS@NzhQ60o z>H{8#Hyw8H^LJt_8!4UUJo2il>c`vaWxOd!A&Gz5bwu7=YduzBrI#?-uUCe#36GIk zzX$_sF95zZSYpqT9P!G(z#HFf?nw3`H|Zd0f-R}1S`A05>SZ%4@!iy41LWqn5#=1E z-;))7H@Ldz!;C}sz{-|$aiz9XyE&hD+)2Qij69nyCyg&vzN~wG$QuXV8UpX04B-!% zU3{2}=#2wHtv%ssm9)&VkPgG=Ys2S#vFGbsJX`s~#)w`rwZRIK=ev;gmywTf*xEkJ z4RwMoP7OWGZGdj%MS)OWb$;^ceD~g0QYAErcnv{~PNZok&0;f>sXRV_(ip&(LR`v} zorwaBhZIT$YU%T+c@FHM=}yQ|-($DUykk72S^cbUi5K9APlofaQ1+aD)D1KctTcbr z5;x#Q#9sqt*K~KK;fXkVQn&r^t&xQm9Z1kHw&?SC;BP`Q&-0_bJ!&?Mz)#n_$W$Y? zGdORmn*taqra|EFcl0thfkT^r{Z70uSoh;n)TNzftP*YGj3qOOY~ zkG99g#>z+>QQbQW+qO|(MqT}I)zkBM;i9rptnK3`;g0cIF$Ua$3@<||Grk{lV3O~HCa_qaB-(*%(x6c=cgnjkt&zy?|buo zR@?N~usObn(z6N88dB?W$Rf?1X7|#e%>-WNF3@lP8Fm^2ggJdRz&}sxFj^C=E$SOvHj&`dVNAIW* zP_*2IDTVMR_MqNz`u9~ZUmcSwK|YkUt`Vv@%*^_tzq(M>F3LOe8BCT&zXf{T9JfW$ z&zssFA??3pZDj1$?nl@B_WZGxu}m|eOpK>XE>qzf1Wau?{tAvhKZcxjyDHLizL``5 zQxXOjLxWv>c;lR8ce~xi3|mQXh{UgF1f7)tMGn#^RjG0%P> z6$raan2YK-?|-S!k$h*crr2tAYPR8ZFB(UPr{MPKV|z9^8#KX7wo{)4fR}`;&{NH5 zl3z7>NVd#p0_GedN(VcbY=9x1m6Eo4gXp{(6gp{^)!WAE&%qv;ho$E_d_(km@f@-8lXnnfRN z9s3}pa8cR4OvqTv61z?oqWiE zRt-qPDdW|H9M4KtB7P(HyBES0I6djwOhI&v=VpA1{8BV0?U;X2Fc;p51J1Gb4ONWs znDcaN&(!NaB(b6sV6<7G$JfNnZC&lR8<3R^?GG+LVwyD^U9}ZL>Yu>OY;zG2d5737 zx234mvMvm=yZDdO!RcOq-~6%1<@QW$)%&tFhwi7*ACIl;i)U~~zY&8E6Eo?Ot$Dia zcFYT7N0BGb;Km^=XPVdEx-bq^#LYEj5{FHCSlrl;;*pg5a$QYu0_q+AP<2{EH1Xj~ zC1h8DVnO1|a;&*W+NK#O9QCVwO(BwslF&`C^=LoP&z=~b+OR-W&4!GzO3BAy`FFS?%RQ&u0w zB`65i-P)#bdb(M#c3miGRg#@^c~ciZuMK)%O2+0N>0Q8&RV_X*yNAt`l>`Bkuw ztUDibvvuh7i{RiqbR>ja*W>QPjT67G&RREwk9DG@TU={?6T{B9`iMN$A9S%Y%D|M{ zgzyJLpT82;DQHd;P=N8%Nz%BfGRi^;?8GkF3SL-i68h`gzq^t}Z&#Z~4==pmdv2iR zJhH%4;_6?W=z_%yA!abU>oi-5PY<0F2TYSj+b zT!4DI*}mnc+7mFV%{~oojl1*Bt%#jl6R9UAn>h-{(72GvcqnH6H2IjQH@9d=H!E~f z_<%rHY3zfwD44%*Qq42wv_J)4SLss#23|>?L#dGDB5Z27KPFqF$@_C!vo#_j(@APg zXXSUOu;<0!z1?^!UhyILP2_hPDetT&o8|krvL_>KSUC5R^$af)2z%12s=|5J1wtnA zkGytvBp^oDewlT_N8DY1kMx9EBS7`RyoZ7$56D_`(U}ysGmv{$S|0Yu(MM*@0%EqCqFp$+6UbGqBdGlZAt z*MC<^s{x5;98hna^g`RZp|ktlR!;$F{^%}tiJdmT75C6HV zKL;peX|(VScK^zoUS*HNyMqm4i#B~cug@CZ{gW>m*IaR@EiM7dZz%;u_pgE-B$X^G zSUN@+?w7KrXLzCE?_#0{tBR(V@jsa;?@>w}Xtf9hN%GCRB?7FiMWvZeNk7<&()Agx ztB4;;GOvB5vMZJ*bAReWJV&m5t93w3tb^_Q5+2ADkhQ)#9?3pf*ia8KyyjIERNT6r zH+j5exOgH-Bcz)=`P$5qq?R@^}O4DB;fhdr9|YO9FT0=B9$~7ZQ8yR_1G+-DZ`tR_*t1&a>BHL?fhBFC~Ia6SAlT*`MZvUnctf$V1XwD0j5Mj-!JD zys;zycCb_m2Ir{Lz$Rr9DQc-%#|}q9>`in{Gk~gq?~<`~jSwD1l4DQB+|21IU8koG zV761#hcnW8DjL_DOoy5k&b4xiXmda`qsWEcfEu|LzTy!ll ze^=IOkxPfzlW%6_S8vL3mhQT@U86AIJw4KApW{G-&2GQ4 z8BVtuy(s1vZE3{Jb&{F18Zy$c7m8vQjqyP^jF1Q>5B+Ejd#ce_!3bG_zwwtiNw)$Fr$+5ThO$7sjjinCP0@6d)g*J(Pnf!j)a8<3^TKFpErXS&JSM%ED z?)9%MOnSaUdL%g6c6-jjGV>l!xw&@1Qry;kXeP(e+4{f<-gL2#U6!=k=}e9=hc$PG zm#Tz}@3H_nZoce`^N6v&++SAv)ySYJ2RoqVsBEk2M6lh=Y@3FX-$dWeiyZRBs&CS!I0_KgAY1Hl0!(qQ{Umhov$TXEn0b2 z#%F#0S9xC*7S-GKivc1CDBXzCDN+(L0@6LCv~+`nG$`GjQqtWe2#j=hcXtgvz%c9u zzW;B(`{3Ot-^srA$I)C|Yo4{%Jx|^DFP=%GMs$WvuUS`9HM$q30>AM@I7V+)+&MXw zj6!)Oa9+=)2Ejgd7XL1Z-vG1gTZWTe+FpOZc2WqTbsW^e<>n;d#PV_N0)dnT#BJn8$8d|>5m-ygn$tcN#?k5QDpunnu)N9LAQh<1`Z zJmSU?X#M$8#_@r0=?swF%3G#*()!|HmgFr|P`E3I71EMqo1`r1>g61kA} z)g^YYhiH8`WMClN13Z`hGtV?TvwpSg3cee5fl<}LL+5ceN^aMQ3a?L4+YAX0AJPcc zd|JS8eKas#T5u4zAhv&K9OHwcqjbGq*pJ5N_&HmmDb9N|?iPA=jt8<>sF}vL4DdSl zI3LG(!o_enQ;_$|J$y$2{d#G}=zwr$3irsJgRSpS;)FNda+~nE)MntIi2fr8R@~n4QMOEO_~7Z?tXo5d|}O2ia| zc}~FAxuHF=diG*TW{9I4>m`=mM#DE2Uive1jfu{51>rtcQU#b^p*?-?1i<+ z`{9K@Ok8jbJ6A^GaRG%Z%Y9bfgY&jzkqNU6zA2sfWQ&`#L4p+=^Q)YuIJ#gv^M`UI z8fpi2&!~71hm)Qzx4WDqLj+1kWdjP=Z8Hyyq>8f7B#K0WTpby;`Rh*7W{>bC><22p zPOtp!WZ8b8JrqWiS#pZG7guYGdoXYsdYd0ibkg_$Vioa;d$gY<@(OVmr|k0i$?y5 zzcHpBdSRCCFj3#t>FE-(W&B_XqYP@(cU2smB{SktvnVaF`>7+m1&G0T`1}clJA_?~F zb?O2;Mlwyg7Du?USWgLEac3`HN^plLa(BPTFG$-JQ6wQx-ghnPbcu0G`v&LAj##AP zH)OM!s0Ck?T;4Z9E5(YCerIw}a;e$B5#O`oNF?_q2!)Ae>uUjX2R{@m_Z%^HOB8Yh zQvwI1{R~WHIq1goZYAaC*><;^V)zrk^v$86jP5~|XIkF^M9+PFn;=S>jD#F#Ut)OS zd0NbfTf_INmMU?I)9>DumDZx7ZT)YK7Cy8=qD)s-KUsiHLOOGz=E^qo9tBp!s4oxY z6^1!t^jIdc`2??f=%`^$)YxN#rHGQQJ7X9&64%L~2OCzmebGayY4t z^rW=v`v|7w4i44mxl@(mE1TFMV-hSAev{p3#5pR!7IwYAn{W=)A5yY#0{;}d&!A4g zA5G|%3KcBHwJn-WgutCnOt37Wrh;I5}vaqvE5`%39p)g@dN%oo8B-O`@K8^5YlMjKEyS%@ssA zyEsJV0(pCNl5at5w_67!e>KwlS ze;Zw$>yqa)e!Yys9R=8^i!mQ%PDNJg#I$-8xmo7f^rVqO$c|N0OmGXpLErqRB^~qR z6NgH&pvm3e)B4dcsae2DKx}$G#(dT>!C6aEyeNQ@6mg5tzpMaAG)3^kah;-B%dfwG zK4Io(V|xk=6zImkUJ%{WTPvocU?l_pU}~z5WVWND;}>&#yRwYTGvcHP`BNW4f5dBS z{nco8bOuukfjD@?(dWGiYc$PsWTXb3f1U^6%_AxNUq{c~p!=V|q5luk0^xyHifC<} zxTRE0zIT1iIXk?>H`yn*ITI>-UKqs_U;Q!;mX-xMGDJ% z#zd^}(D{TRna9QeH`|3b}6D4%k&swHgK{$!u4oNO=7(F|JLn$m}@!c{ak1B zhpKbAtG&DaG-R8v9Yh?5;;3hG|AKwE9vrpH3fjh;^pJGlK#JN8ZAY7@v6}CQT=l!D zey|F3XJU={%u-Z8lP<`2P4&+FPP*%~ciZ^eEPS+a&gkgZkX&G$MeR)?h*h;_aNlwR z7bxT@Id5i`dMJYBmB8ScpFay6Cg}Z?Mq5dQ^B*S_!WKd98T&d@-OFLOh2fY6SKchFCbZyxIdJN^m5;kQI$pYYebY#R~BQgGU8^}^-4}%t>GyXJhAY` zeP4yzP>3s~B^5WOIc@DoEcMsE*2T^3#j+!yThjaJ`lw}*|89UT*juZ>*x45VQ>luz z%uFVOKBDJ{)L_*SHzvm9%hGCE%u;3huzFQ0+Yp-Tcl9X_luL{5OgV6zX_IVa_>lFyqq5RBE`>b7}(u^_ty^^dCZIvY#wl-!FiF<`x2=#<(KA z4f>AYv*>V;+h*n=ZupM>*aRvo+p*IlPKk3dxIQ}i9*Q7H3$pfH+Pv$`htT_&|BL|TCh>r?;o42Pn?M884eVb z#*QVaKF8CxSm1gM0Nm zQB>F8RvyT*4G*j~v6{Y!ch7z%R6ZQm#8|NNVB4LvnY=ZfO+0lbqRjwOHrrS-HAR>a zD}s_fcEr!ipf))%+}n$C?UX~@lF?uxje$W{?%U~{$zF|3L;_TZjXXvyN!;2ptbb~V zQ{wF!N1Bn=a&lHw+$~m4(T)F6iLj_0`fo}E{}edUs=cCnO6{CSU#LeJiUTFkA4JTmcvHb(YYlezPNFf zyutv-yIi&XL+8%1Ay5=AAQ4c8VltQ*>uGW8P>cNB*d@JoT0ICR534!Hq$%hO+e)qp zU@!~~m6b<#m)@64Yf-5#e@RH6Z_Znf93M3K$v~L&tC*=$LelrRxX9{ijF~uVB_Xhx zTU2{ozm-U$%v5CDXw0XrnoI8BEZSENyzMcI1(r)7 z-<#rIJYd`o`96L&tExv4#IZQZK4q+89Wb$T+zo=8$ESOz7r$=)u;2C|);i2*limNF zo6_-Fl6t`t4%9dmpWc!yV!rdexVh_$$2`K#%(Y!7r>5b(P2mcF&~u{_-1w~cy_M5r zpT0<;H+>rx6t(+>4lO2l&zdz;3VnUaAvYUGbT}ksna}X4d+g&qKInbxbnX@mIE(F! zTjYn9=x^XJaL-<3uXGQIzSXzSqokpn61=q4X65^`W3ceBHEr!>RVNBSi8iES)MtET z7mfbdE3s~$Xf!yVxtbkflZ+PDQt6iwZSouTl0VO}rz7zt7ixQFWs@$yW4Ty#xtYbg zJTrG+T|?O+wOW-#T{2DCRz&VY#+@NSGUlWYkcg@o#EMV;;mhWcA+Yt~cYSVe_E}!P zEI$a_03mUC{QNWNQyJ99jOJc`HSMj*F=3eXU1?rY@qbY9gl!LS{=ULGZnJTk-vh@#n|54yCMVrlv)%N|I3v`XT*Q<(<6=L$G z>i8(^6@C5pMato1t&-#$A?e=h8!6@-atl4iAty9j5~*gcq5anU7Wh0yqY5cxw%R))(MFe`#(!FGu*4qOv=)n3_E2T*#X^n3%f9Q2M~?+{V*7`^Scfsq+u(g zsC)WT{e87Y<_baLV#l)Gj3oJW+QQn8;rVy&>ZS(Y(u^I|Cc%@zO2UA<)S96fpi{dx zOKbA9n9?7MG{)GQtD@K#G(%`c=c$Bs-ku)Ss$|($QLC#5<#xvx+8=OKm?ZC^KAErN zbFhxO%+pD{OvNmaOfm{DBx2|BwwK$i|2?{{cD3}Tkgxx=MPyMUe03x{D`GoC9)@nS zcr<p!@eo{xYIZ_y&llXp)6WzhR;eO>=5Max zW0R2Bzn?n)gN6CY6ys5ga@q?7RL}|T$9+{0fGHFPb852m4d0A9Xr?M6*1&LhP1kaG zc%^8}^t#fyB}1uSsFmSK`Qgj;u=5^P8GgmlAyH?06_JQ#M^M6bw&75=FJyxflO%NN zJuv`HU+C$-7S<=bIH<&GOpH=Lo|3p(l?kJ=7%Sh+Xem+>&?(uYn&27yYnQeFhx(KG zSHQ8?*Wc72eyCUjXl!7%2tZpy4fFd$|cI)ozp=!s9#T zco-c&;j#6G zm!JfCU4uiKswu03i5ZJ;Z~8**n1kJk`wtCVvaIWEWLykaqbFhlX|p35JMJHv*FPJ{ zxQwO9@9L+9Tkp>tkf&a9%v=N|rH6 z*DAgvMI$a>bU*HdG`^l9wQZZfQ4s$xi-`pyFyH3%-^>tDUC>;@BRAyPRpsOqAqj6O z@YWgYK85ZD#^WHS8qyyaX?zg^tc3<|FH3%Cyv?u5T1wq*_DqCDlQ5X9e>w1xGM4Yg zUdHk*t@(wXRLpGT4{Djf<84|$!{Z>mS1NRGk2=^m!X`N1dnj`&Ut ziGE^Q<$^?G92r&?PSP&6>f$gQA|ExFow9n)wmpbbY-m=?p4i-k&{Zh(PgLvT-Vy&B zw#15`8F7RNdkmRFS~M>IH&34MRoLq3@%@}=TdX09I%BX|n9No3DzjI?+Vkf1qq$d4R!=Z#m1N%~gErOL48!{XB?g6I z^>}nc=`Ort_BR8BlCx#yG?Eirgt_iABQ~aC&%CsNs_vpazzA7e$D^zD6{e%YFKdc^eOoQkGB7+d@NrlpPDaHqmL zVA=6n^EGVRTGob{u>C0qp8(UKDr5O&X-Rtb~w2)(6==o}BV4bgYeRjg7eyOji*9<{HMF>`i- zHDnD@WINAaZO#Q?@3MT$&*4E%f z&*Q0lbTwO;?o!19swMoGz;nhqmbN2~NGF=w2$cdmmZ9Y!@ZGq7XH8cJWaH`x3OLi5C|pE3p{ zC26HO9(KFWZIcMdXD6&7ITV3A4luvKT4eyITt+j5WKavZdcZiy53|GdB2zNcOL*mR z{Pc4pfo@fKeU9EKa|A~E>bsg=p}8Yw30&p9>^#?lzNdRk8Sf%JL@`uGQKdV-)D2rZ`Rpy7U5^-K1LAd_q=i_9+82z>17C|&asNw|pFIr)B5z}jmE=~OoM z#QmyGn<+!NP`?>|(3m(jiCuj0eSV(ysU9fc@dwoVI(q~2a(E=}+P0}Z;`14*r&7;g z_aA<3H(2Z8W;K`1m$P1zRGz>~^_SOV{N*~Ph2=VIp(coBQ%FLEdbvjWgXez%0c!yH zYg!gI9u(+55kO4avv^#vs)Y~`BcQ=cev(gW_b0yuhnE`3yze~3!**TlzGD4K&a;W9 zG|KyDw}3{udU%>068Y%E$9-3I@sQR;pXL~>+0$%C@83v z3!AdCvX=h*i4^W-T3ucJ3`O`?1jk*une{o)8d3!C%>JimXPg`yKi6mj-04tNR8SptW@W_5}a#gXH>s`EahzuDG~(E1VMviJxFg z4(+P-xDQHzk58ld0Kf;Cyly2tD3=fW64?RpY0Go;0n$?42T!nUn!rsTG&eVw_U~mg zGc&AI@ao#yOwbU3(9NZTSiKe z*x4&fN@S-vNA6H!Bxs9_KgiHCsQdNKEc~!@R|fr=C*4Jr*Mti0wVu9y8WF|3szu8B z(2pfsbnNWx-0|vu<*5zfadKAo_bV+o5Fnk=&gjWVU}UEQ2Bjg|pJ4#d%fLj(MEA!p z9GaPpjqBS(A61=YeBYav#$BnGOL>PErHn^|=oxEMmFiMifct_|msXdp%*YZJ{Wc-T z2G;tI#)}u#+A`s^Y8%MTz*ibM`g)xX{bGCLR>v$TK5jJq0nR2+*HV0Lipai9d1C6@ zzuzJkzoYC6Vk*JI7jVZGq3WQ{T1N+IVJj&~2+F!?y1k{R&i$zb+eW{iGX4}^9JlH? zB*%MacRwK0;J)QUARHqYzs}@_hNr_-Kg|Y=kRScHp|Wu0DtMik|$hAW+jZUwc3U&UzQ!f|}w{a8;)MN353_YFLoJErYYLw)DRulZ+k zr5)%_<-k|XbHT)25>3~fgQ*TjZV3tk4#+hx`5v`Lq9p21Yc7O9Rn^oIu1^6?f~eWt z=v+vy;aJ>p#c|Y1_8Mdxswxi_{Om9mPry{1jQp=|=$g1(nq6LUlONn6VE4N7&G6dr z#9V~jvj!KN*2^KUy<=>Egvjg8^LAptMFQ{lA9J}NpWa4YR(5#xSZqA)A}_q!*HP`t z{usx^)HI)#z~JK|#9}mlYPv``lhvR} zj*rc}1xu^h{DgQedH;-vshGiMsP>i2FYcoDoj<|&h4Y*cnh>L)G_S;bxQxZOuPPsL zPQ^=ITK^J)#QCN=qp+l+p{VLve@}03Z(r9(jlQlfaVaS&xxuc10l^1Y{XPBN{R2Is zl|!52C^c#e_OM=78g6?d&H0 zwZhiT8pE>K=#L$AeYZWwV%U-8SPURC#-?sx+4phCtU^r6meVgtsthzq_#l@j%Gz1$$@ zm*q7uz=O}XF7fEak#j6Fu;?i})2ExB?Z@<(***<2Pn45Tz{&t)ufBTqN=R6^wWXz1 zFG|6Mk-kepA|N;@L{eJX4F(-<^~Vx!r2xrx(Xp@yR?5SKZzmOoRU)y;;O~$PrI_~d z)(rSV!_la7HrLl#FDoh@-!0lm+Kur<2)gRn^+~L)cQBpMd;puy7P$W6m9oMT|CkBx zY(jB+08)WpT>H;eii->`=Zqn{05OUpN!n?!?#%wRwdb-drYN6~DNi@PPOa8MPc?5x zGqtUCN^fCd5>(f)?|%j&`}pbkdK5M&rT9mUAGi40M9|KP?#bX+4L)SQ+!$PfSloDJ zZf?aSsaK8snxWF}625uK8So(~(J+?lQqk@k!$tUB@)#^4p{k%m7B?oi5{%t4Lc&K} zSWqAj>lK$l!+MG)!NOW#viEUEN<6&9R?1w#I4ZSG)JIIzU@T&HhOlphj)o^v;gsSDK8fIb-}g++GdzG*Hg3MH*x&uB#3~? zlEOg6AXZe}9dbL;pVy!sBo3CXa}ZR#q@eJuHXYsQPx73Fw{G6f*_ezv-xjr8yA+f4QQNn2jGv4ys?z%8tKU?1shyQTHWFv-Lg6A(cp zK^T``SkZ=&jsl{tA9WNfzApLPZb}AmzG|Me)7zp3C2ft3{djfT%eB(d(hkq0LqbC2 z_O)|sDzOd2+7FE*gM75Qya?sCEce823odvGO_nCS2k3({G_d}u5MvqyRQoh z^1v9!L*^kOl3-&)-e-1LZ~sJ3Z^{$eI(IPPhh{4xE6RYaGtzF-Js3j!*%)y(Qy5gC zNYNRuG8PvbYnT&7o~t@^O{65be^QT5_^*IuBQ{Fw>VO5&bdlb@SgID>rDP^0g&qet zvrF^Qt{oOA!by;2DNS-2lX4MuUt!*Fohj%j8AXT4-_6An(dJPHChoPJOC$4T4Gawq zYFUg7ObkH{2hQEPz6G8PbvY&3ESL4?*@_y#>1z`7lghVs@!xE-+7dxhQiWtWf?i3W z$7$U+^G%m@*VKOgB2?6oU~t)KTvU|MtH@WYy$p;DBn)MX@OFV$_zn(ZV`EA&xPXX_ zy8ZKVX$n|kKvwc)cKq3pIb%;(JF*69 zaZUp|&UvA6aT7-KNr7u9&3qv3%;Q58TnjkJf$-A{ z*+$Qfv{Q~kx^O2AvCGr?%N89ocPp8Y*7s@#9svheV2t`$9sUNt5KY!=rQ*v{hQ7ePC_5$o<}r$XeJv>EPqB z>+x$@G&IIkojC@EM)5;xrya*;$9AqTz_%NiWPxb}%QMtLxh{N;jB|oTC#-Qn|MGZ! zks+C*?nVjvkUJ1MITu0VzJ9uF3G&ET4#u1vH7?Wki6=$Ke=97dF`nb%&xg)e0BcE! z+F9+mMpfxYstsD|1zyO7oTql3-g<@dZ*Dl;yJk2H2n&04T~5`jA)DEm(gkNRr`p4t zjDjE|NiEwYnM^Iu>)Azx%dQ{pe!zakmJIP09F2{Gy((3Y;yRN=V%B9~>+H;P#m~&e z!BdKsJsU(ivO1Iy5|y>JwY9XgB=(~Gh^HFxLcpqiduaNQEiOSjnUI(`$jG-dCo8u4 z9HX4j;nHgn{2JF>P2$8LV@k7@S2xQ#HDvqBRi(^ zi}@t^qEDzir|1nUpXH8(gOZuD2O2%io}iny%%dJZuWaoAAR3Q}CE26($dMmEevC4A z_M0LyPE}iHQC>Nj%=1E4_rucspMALHOBC2MKQcfa_c%nue{!V>5S|UT3jVSjOJ-5;wZ)pL z&TA%W1_lPs&(Al0fN`Nw*wNq-TVhdH^}OPJ%Y764o}ubkLuxwNxR~+raYeeAps1Fp z1iUlBN&jAvmqDf%;o15Dy zk~{Itp&!!|2u&`LGe+inJ6}k0$QW%TW%w&SMX7u(ty2N@lf8C>`<(kvAwahx2C^rY z`4$Q^8|wD#?6sML;Z%Id6cdA4Bur1w zT2nQv$y2V|>rCa>J`j=b&|0;BwKckog?Nf!rh-$`(ByoJ!Nm^5#lt)6gT_Zjeiy>} zFfuxN2Yw+rwRg$P$FXTat*_D)A7(}m)9$5w0?xGux*^eX!OUSFAUTee6#4Q*dUtE< t`Pb0|m8fX|vLPYjsiIA?>{{j_6e#8I( From c03947398ca0d5151797037a6cc3f53d580dfa80 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 4 Aug 2020 06:37:47 -0700 Subject: [PATCH 552/589] Delete autoenrollment-policy.PNG --- .../mdm/images/autoenrollment-policy.PNG | Bin 138584 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/client-management/mdm/images/autoenrollment-policy.PNG diff --git a/windows/client-management/mdm/images/autoenrollment-policy.PNG b/windows/client-management/mdm/images/autoenrollment-policy.PNG deleted file mode 100644 index ed1119f45c800e1d9a2370407b0f78e1c6cd431c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 138584 zcmdSAWmFtZw+4y@NU&hR9YSyou0aC?cXxN!!QGwU?(Xgcg1fu>V8Z}|T;A_H=R4>8 zzxT&ot7m3)S66lQmS^vJc1^gvtOUv@{7+C&P$)koMHQi-;9#JjU|SI3->2H z_959vK7%?|H5N5pR#i2Nx@QQv-y-t=>#$r76NeI0!1}KPg<=Nre_BfoDDk2HyGa4- zdz2`J-+ypU|?G}M2FjldVrM;H3funGf`>@ff9p}67y_n{k&=vNDB zdb$S@C|onW*8j@Ct9h*Fg^`8c7Go(Q=v|S$XoZBX>Xa2#~wW6{QS1@{KrbY2K-IkZ1gR&v%H8=MXh-U zesL~+>5;3mc~=97K@Fj5pbs%F@agTTpvP$y8Q1)wZ`QA7FnX#cPgp6a^4KSAqvK15 zpk~wo(&is&CcaSW98Z*v#|^};C2?fa@7@944>ty=1V3*gq6P| zL!1_fXf~o|NBieTR<;CmOiUA5F|lx9I&Z-}GT=x#LcI54Ud-Cl`}67itZ8Q0Fzd3% z(o=xmdeE@VswNsLZ#`$m;pe!2UZ!P{v}r>)`7E%;pASK2X1j?<3D3?%w}*sV0aYzq z+AYd96n%S@|L+mLn1b?F!WM7!$ii(%dM432FTv%z1*q*lQC~2d*W0sL@SY}$#FKpS z^YI7jkKX$J!SwYe?s=}_1@JgBz4nA+Tn)U%NBTbdz#cyM1|*hkk+9( zgsksd!ermDJ`5ej#b*Z{A7dUWD;FZy5)XqHd~qca9wyJ3(|EMqUP+Z0assX4?$pp! ziOx2~{WLQgoEKGgyH?mk{X$aEuY9%;+!E3C8OInZJ2!2Hht8;g9m6DQmt}dbf-57x z9b0d-+l}@uwVYKgFGBzE_W7!~=WYkF>TFJ|g)P!I*K{aF*lvuRrj}lL4|o)sJoBGx zF{80+q@ELN>dY5YX;qh%foaBWM)_Q699f`2rd&P@z{^z`X4Pe9D)BTICsRFt!IZEnTZI(n}T8Id0Bc=W4Pk1Ib6T zL?YVXbAi`+}omoZN5zQtO(+KUmhWy1Rpu7nVb zJ_Lc`5LkHQ11xfo42(bwm+8CBvBSU@=dnVyCqFhe{{H3DL?k`ztOV3ccsjAynryqHjx$~0vcFVSIHfU3bc?=OCFKcD4I5BUq`<%7O9R59O2R^QEvR3k6#zp*Za zUAqcMb8C0UWw1`evjJ3$5LTYi)IesR1EnTeNEHdMOUrKoo*b#PY}QrLCA-iyMfi&L zjum#IvYh*Q9le*vmrHvoV!}Zqmu}6D+8&Pkx1L8=3U#8}t zl{tXw=%21Gi+Wn8R1mMi*jq@sku;>XxFhOiBXn}9$VCU`+!G{eVYlJISu|s(QNZnJgTQWQ!z-0tgpVqnJ`BpcM!OHSwG;pI`O zvfgzvzhByw_U5Z};EdJ6XX;cPhk1>1M_fPUSmU~AN6;)doJoDgRe2hbU)rH}G?+V~ za;f^)td`CZ)Y&0i&%aLdZ>22h`Gkj@8Wsk9pm2V5Li`QNS>}SEA*NkRjQg6A>3Y0; z7Jmg^JX}vTZ@<0#<#-kpih3`bLL z)iDe^Ptt0m95!ZWid0jwdQ1(T2O1;cT%Ij6(1&eH{QKM9P0wW(qzCdbV4{)&uW3!x zwMY$4CD~Aij^!`EJnEQYN83ZTz7~5}fw{(no;3Scgo&2-!#ugWs2b8x%~$T9Qvr&7&OCeZCNz!Hb^H z;%bEbXFgu>O>F3uE#m=l-pM@|e@v%`%Ja)|SY?jQ#gx$H{9^2&6cygJ6X>ZrRr2!P zsSa~d?nwF3*R7D&;+w}=#{`J>cB0sViFz&3hv!RK@fO{B@2Z%u!=`cv-u?|wR84AT zR}1~cibKb74S>F$e{<>kG2|(Y-S0N5(nwlkVekB`+qIeT;!J4dRRT{b1XH`y=)KdmZ3= z_BrtLrtKs`o8Ru+S?0#}*6Uk~^m{nv?CyrH+M$&_NHMr@B!TO`NAPBT^d%ed;#dUo zgt$=CZnyE^_pKSC6D3EKVp@bnO!od=rXT#8DV9mf(Rb%2Vv=6WIF8bJ$v23Qcs*U*E9ZT?Gl7-mZedTSxgTj<)|D6~ zT(-|0%uY4SNifmcKb2 zwEjfLmAw=tf)Kmg>nV5+F^B#EmN10Spt$CA1u$IWpL4~>P*5AjrKdziMHv?ser4_m5mn;J8*4YVk6c|Gu)B?E=+g55^uR z%RRk)T&DMFnhzY65oC$n>a(*x9a(1GTe9(k3ilUyNDkZUev15TiRCbxO#S7v`7TMv z`tz>S1$xNd=??rN<5T2Z*}VZ(#$KSduGtZBn75#O_^mup=#9@Y<*c%TPJe_m1Q}|F%X; z-JnbxL5`iwj|Dfr1i$y}AGqIhA?DA~ey=XoIeh@%oGnX~2dP3;>^)Hj%>H^_2c8Nz zvj*09PYxUeM`T30S3;6hJqh)hl80k;ffO6Auz_KLKg03E_IJnVguM7MrKNjek+EXl zKL~gC_CDhfL@qDm8i%{n(vD7)l^&ZoKy+NZr zC#}DnV|dn4PvzeuPT5!LRi&CI*0I;t0{fUz<95^L$4jQk3@gqbf$F*keCTR55TRdP zvnm}eqTa4Jl|4`PJT-@RHmj`%?OaMB{+U2gBCS!ojOsE0NLNi(x%6!thXs#E*Z4vG zL{C-{pZcYk)00ouwqy2$W4Y`F`?ez@%@OidTj5tHfX!K9iO-fY_rh*>c=Pc$rpacK zHTz=buIe(rL*|KW&$~{ttBy!(r4!g~BQ+~D$8ubzZA5hD_O;<-&{5fNH%4o`h zNEU}S%g#aS`0RrJE8H{3!)!CZRXp6{F=MNm)OqPg3kdotz-pqW4@lthTjtNnrpVXb&J$OP?~(^9g|pp+f0J;W)Tw?! zyeixX8s%zwp6Vn)tv(q_0-Qw_f~^V*LX*If7%^k16|XGLuqhg~npDSZDXseCN6m09 znVp3?#+)&a=F%;mrUjv~ypiOi1QC$!REn`}duHJB7or0(P^%Q=1bZ@^!y59o2`Wq> z`6s?pW|-|lwXIQ&x!d{$dg8r8sx$lvpcRIeaVz>_3OzGNtcBc*QF-T9YgKCbt3L2f zvXk#C6RAq%gucC6k88DK5OCV{l?CBua-rv?L6i6r`uF$$I0kwCi}p!smkEs1g=P3J zj>%C0mIFriC}l^;n=Am;#At4YFX&J9aPvHe^_1oCeH0xc|6GJi3I4WkD`GYo_4Y*% z#u+CZ1--Q(D)D-W{lk^;5OQhtVw%xA?&m8PJ@=oC)^z*MD zL$oA?wz&6juMLqqJJw~`vF>R^qmn1dKU!kWftd&8<6pD5#Kh>?S*K4XCRE>;n3P(* zAM3eQ|B(m-H^atE(uwXc&A+F8`gMOc5^>4SJDlz!YkGch&o}}14u~o-y(ogX?hXa$ zgP`L&LP^MG{tzpI&(ZA&vFmwR^#1xzUKPM-VcmIoyBR1`zR~ z|GW1HbAUM1zlRC>%o_E-yHNc9qf1FN)WyLVhj#aD%>8`@XRwR6r3J=+i^kaAVH7bA z7Q~X5XRp=KOfVIjC@-Ju^t-UZ}4SolLlo|_M%K^qRzr>qv`Yg z+>y{k;tV&aHT|0uJBU$pxhvCo7?Yw(8Zc7%&(}MfSfU4uKd4uA%}8vfhN-c}hFqAA zyDwF3T&5f=xfJ|@>c3{NSDsjN=JK#0?nvB|>-(Zkw%{4ae{?g;TRhC_(hGqN+z7Gz zBAp>4ve^AHQf?(uCCrfdNo}ZWHZyd+v}^ff55YGFF$nDxM09>+HuXY`jUD{L&C`fy zf^TU6RQAj!!}Efz6};ecv_e50-~wy6C&n!uC$x%(#wDjj66)YYWm)dP6Ff%IqED5g zp|0xKmg{SnW3bZl&9bF+H&GRz3x z7;Z!u(gCzpQExtn;;`nrWVKoXAiIGtq_nfMy=HhwDSGcrGMlUfR0Xd^`0kuIpUH=x)vSRM?-F-?p`O2JcI9&|Ckw|;H147q%9zgk&HYoSA0$iHy8pSi#60ixl4A0=2rvXsx| z{IO+WQE{pMa_-Y=cBo4qL614SFw54zTqzs{M(h;0`0(sKYioRR=jJV;)HT8D)w3?p z-Q)ExwW|q3i^Q`!lU+*dze{9e8b&|XG5;idKEF!~qQ3ONrC8@<)2} zjV&=wn2LfzgavkfHH%{3?^k+#U0q!eGXBiWOjvB}a59~m@*0st)R=g0CihyB|MP@? z_?QcYe%0}aZ13ry;$X5x-a@*$xn=iuE@(a4Swc@J5YcVW;bPf7DMuOTj{A^yb*|2L zedpfBCkP(Ec4wBQ;cTeX7tndr{zk|6XW5?aI_ZI+G>s&jCj z`%7{iE_j?UDyNa)ksZeN33L(^WODih{ zJw3UR-1m4WLeVSsk7KC80?wL<*^Yt?FIE%7qUePrCHWSsBJn)Z2kf%2^ya{U_ZGs+YqKo9nz~RXXr$|yj2Vl&j{MF3*z|i6PzZHh;8{8;WVNDX z*K~%dbuAf4xqrY1C6jkDExtY~@LjK!T-AfWxKp1@JBl?MRXEY*%lka@cQ$PEcXBa6 zVOqegvxf9{*`Kv?QwS}toqo@L&@yf?A8?dv_f%i9w}xwV>`L;Y^%U4#@y6P0=&U_h zsmt#~8RcBHyq0|Z>nSZgXE%yidFKK^G^B?Y(>g|R;!SV?$dFVhQzV4>?pQ)P+1;iVVPKqT<9R&jr|`#N!LfSd+Es*Y z_4L!{lbw)UmD_FfGBL3(Vo#$`nhRYIHnOu3b}_x(QUR?QQ|1WA<%K-S4qgEDC^@f{ z$4)jE^Ad^^8kWAVYb1t5iKLp{Pqm=4>I&$klERX?$DNEl7T*!bL#uwp=%H- zhm)oq*^ha>s#CueaF}pTRs+xhYm54)of9uph{sqqzvlhv--<4I;+FC^_>NthU&f&Q zpG_*UQ?=6ba2``#Rt$gtShrh~x4N|y@11BQ`5oIwQ{(+oIOWxcui;94SyMp{w492| zcCNbl+V7^h(3Urmq&LQmu?CTyHV{hH!L_L%W|&|g|K*?;URz$%QktzrJ;^Y9a&fa{ z)WNZSrU_nG5^wUfN&?r=OAAiPjWuC{T*NNYT}gl&DWmX?UDn5gMUDI;*x)+7eAKlT z1X93?WmFjP2tK zKy3f7H=674$`)7|c&|}5@1qBPy$BYEYQvsJBz41JhtVE3q1YzcLc5wYW$LU0_=}Ja zp`5_l z-?4_HM*KjP_GqW!wB(b+$;yS^Lln6n2~YjIvh(wU~F<(3+CF!kdzPz zofF-Mi>Lo+o3NAlAlvBiPPx)V>ZEn&RB&pDv*-h*^umQIyyk4youh6xqZXzF?5yC{ zZy@{_R5#pAKw+v$S#&eOt+w*1_U_A54cgAG`r)_C71nlZ! zIqU*o0i6za7dShaZQj!tz#B;58tj9=L-JD5e<&t6T)y)5;o@3w&`eA&uZU9ra}<;_fc?JgX+%Rqv|~Ve(zx`?(*}8hU|=Bi?e__ z`*7qlRA72lb5r+mbn zF4crolX;p7p%QB_x(m(J_28}v()FyCKjLa?Sf)6CRQkqp6Cm<}-Erl2MKiyyMoRAU zDkH+`6hByk?{)E$yX`L#Wz8>)3t8gJ7;@gnmmk4x0_xU`sWn^H?%fSYyo01G3ODw z*sa*$h~u~140N)RO$O^sLIb*QMkCG|j4H+1!;f`A1B!J7eYm^%H&lhUqA;cY9?JeB z!`o(*Wgf3jsMs9&LU?|7q7OP;^#;_NuV(`LVhjNtTc6f}BZ#$?>)8)1&DEd&-~)>u zgqlmJ@?WMtgX&J9Oox;6{>B{}Lx2`*z*t`br+~nnCTHsV5DBu1eRfnv*JhhLGq~1e zKsisY9bxCqB6mBEqgAqhJcz0L9voi)sVFOhV(?hIK3%g5I|}J2rO=QoCX&IZh&ETN zB1t|9hp^N8K=AmQ`0)C|o2J99HfU-M~jF*Zf^TU+%D>{`z8rmg4SZ z_$QII$^w^{8sB4Rt#0x+$Mlkqa!N#C9<0Y}hQjKC?o2g@;Xu5MvYWPei7CPlHJknh zqoIbPo%+Ye?M(FC)$9(3!!}P$6RassBO6xKsoyl&L_mXpFyHtn-($02*kNXZFY=%4X2Eg;*l5VHqVb7V zI+r)Vlmy`Jt{K-&F1DDxfxhsOSeeQqL0O4qYZCoQeJh8oXs24j>sgl zr9;ls8k)=B{n<9q5H78sgufl;8c?u}t`J!2$fC{`@f30WCwl-Pncbx>a%V0Topi5e z)&HVm$?!SoGi8dUJndOy@sG!YB_|u^^-d#&rS$E8Ig?#?BUDXjICQD*x)H1`!9A?b zcZ%NN`@}*Cs}uc{rN3?=L@1f_F;<3o(K-R>PH6f&GlohpF2hClboqftKV1kLS)`dA zwV4ku#zm7QE0lDtVuNw%PN|j4NYG0ZtFhIu7teMdIX_l35H^aKO;y=n;+Y&*Y>IZG z=Hw(-6F@Uop_ASiMuGj_QYKV;GRIsAV*TQs>Sm6(cEt#bPqtOV%#!NrU|0aLhHK4G zl`_~iHR~&8)+FHg$f>uO*|19uWB^M(Kb;K?kppy}I>#(5`uD1DYL|b7nPD`|o21>f{Pwx|=pRM_*SoDO#KWl}`j?1;gAq)Qk7IFVum=1l*MR5qZr|QO zw3yyZL6fQa*Q{10F>hM3JfBD%C(puD#(rKPRzS~2-k@@ z>!FYdC4`O3H=6aqIugF7FHT_73OT2y--{5xgc>ivgUItEgYQETa$(|WE*s@-v9n=+ z9sO>m%J7t8^-pz7!l)Aj`h)rkIR(3{@J)4$PF?4F8LewP-kONU)41b{kZ3Yh3y?~R zvJ!4d6jbzx(=%%nmdAa=-v+j21{o@ztcfAA;-n zsG&=ZkP-tgYdM_3nm49S1J8|SbWXRKW`Rda<51RUP{GsUk?ouk*{2T2Cr;nz`KDeN z@x(G}#gN@W(S9cJhh~=}h1A9>4%eF3JT%31cf5^zlE0u_w2P{2Aw#C3=E&?4Yy~%R zbplOM=MmYn&~cZq^S(cA(}g-o<5d90kDpM?j%8L1wTkr6Q|ydY1fZvfBFxCBR_xU-u1X~f*k!cgS`Xc z8P@Wnp9x@0?cb;#D|N?0HeT_l`u{%PJ@QknCFnrTZ#R2h{!fmDJc4+2f7f4avlbtR z5qURDx&OT=B1TI9dCBGB>CA3=!FDh?GTEF~Qh4;QB-TNe*j`cOClruNYhjn)Q{+)z zmwa%0x+B)1$)2$@7AheZRF|%^qVlZjaJX!&<DBl zuAGsw&d6gEF3Hsln=Sp!;x&WeKI;9uq-s)=elocyX|ocY^!7^^qHUz;N6F3(ibN{CJRgiQf#jCn^x=At!ND&I5rDCw++U} z2qXXg!Vk>rFUb(re{aLP%>tpI%vvgFR-d1OiuRK=LMo@w9cs^o>g;4kPjCK|*^H{E z=AV*|>prDhR_MY5|m7 zL*dp1Bi-Z$_leSrhCH_mod&egKA;?$7kC9Z=3O0m|no8%L0=#ity z{Rpq~)ioM|XZla>$o(GeMzP#T=uUvoj82>Ui1BTdj$;wR8)@1j4GIt!lqM z!pvHtz*_xdjIchh88r%~rM!#$0H*BB%W#WJ{-eL`SxC??0!iU_dlnTg!$5Lf5oJzVl`KYbVSMc30C z5f(FGTy+NZa^}1P&J~FI;d0E?`$dCpQVnazU6gCFN-K1%#kj6_lL)41@8E!19*2d* zmdUQKlizHjXB<}nzYY%Fi6Kx?y2OBSks;#zk*d%u`0?j*tx4chO~Hl|!ayBY{dk*R z?GV(@SH*VcHr&s$E1`rlGxOn%GCk&P27B-`H1Xm>3j*gl4d^v8h(jyz{P+i>JNb#U zIKivUu89+)x8+%6p&m~8+K1jeY;jgG7bWzE&s;`u`-hhjlZ$^J9y3KIm&`a_vnEev z9RO7~#GshJQ%0aop;kNOfh0fYV`B|t1UD#gA@HY#&4SOZqp)oKLV&{>D?$wil8=k3MTPVQatYKTuJrv)4(im3+? z3i5eeV3+0*kZH_g!Xxxo{%V#<#oXiAGGg(6(_+*@dd&SmY+Cr*Q8+ANIuZ zVo9Iv{|BScT4&E*-0x;JxZ&uK2OOnX(IRV>ozu25jcq%SbbVIm>J`G8rE^$xtB8+3 zSv?#So}$AI--jq)+)Cm%JR)&5F9+m&Nw6O9X$8C07#h22oqk?w#H-@wt##XTmEmN1 zElG4hDMdlP6F5bhv5meCyYfY-d3z9uI#&tF>HC!g9IgQlVNgwW_h5Pnrh2|vZk*3M zEr3|>2T5XzhQ}r@bf)tzve7@+H=Bv~R`qOMjFM-Ig}in;Nz6sx=7D8}X|6{4^LXy9E#ON`gwIf&-4k@HcQgP+bhXja+l0F9h|*m?_NOg? zkDXHk4_ePR0@!^z*utrKeQ}g}<>7^$FNiv@$dF;%fgb1Nissnd83j3#&_4-xEW)JQ z8i=~i@E1dCGXS&>Au@LnJU#^l^8>|cE52oHrs}rYr#?YuN9Tp-I^r*p(0D+y9S0jH z9&{-K6P*i6B?+pOFyfmCQ@;;o!^zMU1YXnLZcmoe3q))i9<^DZ(t3IaOb|TQJ+5 zy0=r;4^dEvLP#S|)47?%V-p9-jjBMNY0Q%3wY*i_QM&eL8sz!yPhf0R|2XV-F0ztW z9wWGszMl)I=b2ytxMQnJEy}I?g_kgCQ+cg6_V#NO)Ga=Apqj1(EUedHTh`>3UdnB? zYnauhc7Y6&ZmoFrCF2;?mYHk*u;xY)3+a0PVWWcr=~@P6e3o6$QN7V$#eaoXdxd}n0`k=g zP|qB8gOah5Sjr>bTB#J6*dM%-!H+M=Tt#`@aYqT>F&ahGt*8Govh>|lgA{!YA;MXP zBPq!uLO!+OQ{U_D z)qEmb?YvhwV$Y{dBvpe=;4ATMvPA?@zEZw$-=@nl@5zT}&`VLVr}}RA_t!aQ(8bV0 z({bTpIsz?GDnafF%a@8Tas!EWj{{y-5%pHRAL3hlx^50d+l+Oya7P$^nv4As_cdX0 znM`LDiSN0l;e$*nnk@PGz2I?erRej1m^bhVG4#+U{FIK;g)p^IiU;j@U_S$okz#nx zq&LVHZyUr_-6?l5jVN#Db*X!q)~w%bPEs;4=fmru^3iTh7}(vN4cwON@x*OK8y zR6lKyqY#>}V;p9W+_`AETKX_%TmFxY^HiFd{R>Eq;KC-|Ufx$heO;v0sn6K0W`2|< z(YzkMe^0KdhSBc~{AlzdyLN8>@R0Net|jN`+5q1|2>~xdfenE##H_jpvOri%1;3JV(9=})9V1@ zEJgYK*f%pHJ#!{cz`%@Op0Fr1HQuw%!$mC5=3K@KgEm8DO-PLY`b2xub|kM{`Q?&B zJ}z=Mlbw>9+9wv27`k4`UPwhn#?XP-_QBGinYl(8(h<2LW#LE|2{66(5P;;p+7!9=ThWf6>8WFjUhBP-eMK*k( zQSW-WZf_ft8D79q_-nMqkVTvCO*)OQh~x-d6f2O|W(BO(jaEwB!^McecS480FHp^! zlYm}8JQNg1I8!$heoKGQ5Hn0f%!)$wtR6*p0*w|Mf3@VF~XFbJhObNZo^A8qq+&d*y7QE%}gI`+SUZo_@C=x)EFbr-Lr@CJ{F8H2*Zg6-~ z#@hL5(ZwVgVQICe%m(NeLMz6}|+8@e3i_g52Q8LCWGC89*7vU6P{k;z3e`3L?mx@!752#PbcIuY<$Mu4FCTOhFuau&Eu0QZyZ3^!z zTRN2W@yIY*N}(C;zykLQf(*+)G|DXr# z$vuQ35ck4#pUY=7CAOq|lij+$CAz}J#B8a#p@%9mEOZ(GSYq9PT zGPXHf>!e?lUx8um8wkX7JwdIvoe^X8&{;(EF@F~pCdKHf(INs*-szRE`{_pdAfJ6v zZKvaG;-OO{aH=|KJ6!;6X?6Dc@c_&D`>+wDdBPn4vW(K~@bp_lkm8v!n2!|B0y+Q0 zOvQJ}Pb5Xq7jGm$&fl9Y_r@FJFZgw|O2QdzgMD<`zGopO5{O!r-$2D{5P~Y5rrP+u zS%`^;ebFMlpDSX^TiaP2*{1pEr?Ku@6f0ot@ryB^ja0Xc!NH<-RWYBA?d2sQ?Hu~W zO@Wn7aCH$1&x~*~(ZS_py$iANQPVHi&WjkW9p^UWR4*4+6N!cCEV-l6eENiMyGs4q zmdZEZO7ID?%H@Y~$ryS{WghoyQbvPFJr<PX$1zKLzdE<2J z;#m{xS}8jF7DcaiX3}-jLM6wqjgfYGB-Mdw(>nwinYrz8;|Gg}%tUhiy70}NqC&VE z{g=y(nQy^2qU_qu5PR{zrx!1_pO?nF>2KCwyGzb@f#A)au2x$(N-}O*_}{7R@>?E6 zOFgY2XMd!W4-O;!J-$edMk;7lyS{EKDa!}87t=9o_n;bya5GxY5BM-);p}K{T4er| z6jBz2k+pIzopalH0!@9`^;oPF5es(bFqcv|6Mfk)rY7Tm#oe7lii=;`x;A8is_AdT zU|1FCA%o|inAYQS(;D|9GlP4cdW-0R*u4dTQB%n4dwIsIzQf$aGKdW(NYqjG3+T|X z|D2|@>9vY&9T@f^L5<*{#Yjr|8c{cIV7;0Wsq}Z@^k|g~0piddOKv>pnBm{`bPeyX zn$&~!U1dRJ5iahXn9qX7gEk25x4%fVdbt0iX6W~ZZR_k4QW<4^zS)F82Ll_QkQudm zn<{Vf{K-PYEU${;k6O-Remxh`k>k|1wkyVDR{X z9zj;Vw$(fdr%egOd+iv(H&X@-0;U34Dnc@2cPA%tA^LhP!GR$Kd zgCkf;+UO%4wq~QAZmFid<=}&8XA!x)KK(6G{OrJrumDe? zIk;WW(DcEk>ihdXF$u9YREAY4?NW{j*va>=Yf_Mc zuYM2$-k>{uTd_i&76#a}c>PC5iXIk70=JtOp+D@V(b%a>Ti(VeDbt*GRD(TeN1%Q0 z`Vp>XB#`QuR~HfGc>yg#|7J1HF<@U8Rr$ML?zN!p_x>!E()WZ#-4PBB4HZ;&;+ipO zi?0_k#m70qH>Ec`oR4yg5=9F=yix=VAa3D=%#MpZ?9aZ}R)RjyGKu4+XH)`;<|8J5 z(K!An*6;fv7j+86#`rN(dthn?XWRk^I1TyQXdW>nq)aH77?704g++kEwUsO8^OGe4 zDMDUZxl~@B^o@a|YmBL68s|%XZLSbu>c~{2JpHVEKhAwN2GbPHmmKT}u6=!_!xG6q zOs|(8sbeDTSvRv=hqh9js|K(l9_A;TxEWu+9}Q!q7OHJh?yfuizLu1d6%lpBtM)ea z>lTZQ++~~d)24v$&^&ftD6L{p`fDbqu|NNIKCi@uN#L(kq^97g8@jkko`h9F!i4Rj zqf9xeb}CVk{5K*ck)b(SZyz%*Y@hZU?fm! zVnglVHstQIZJFZ?dVDn{qUz_7LV20etc~&{i;_KZ5qh?}`y$8qMh0~Bh?X4Q`Dc&v z1!dYt)`OqTE%;P&t2{G@Qi={&T?n=7cFn91vXV;Fqbap~&4Y*Fr$}-p)~WBU=8UQI zB08WC2Wgoe>MAM*vL(t%E#NcwU*s}PDrt(*-;91`mAavvGNzyQeSK#5r@Z}6y*^wG zkY;ixhEEAVFfNFCi{OQn9=|i1zk5vc7}r*EptT5vVdE0ID?LWh2kL7ViBHu!tASP^ zUbr=^Zu8|3xu&&RBQ3;es2_+9VJBHft-UL%K!%J>k?yzb-|lNn81X!3DwiM03PXiC zVPvT(xOu*CSLu}6R*EQj@L*8vI-DA_CnUt|9nb7>dC+2)+zvu1{r*7`JwhR2FDmQ} zpeMHYz%9w2NV+Q+(#pO@a~*6pMaoO{Nr7fXazcO(zU@Tv^ARPr8L5(YHL^0&R6aBB z$C=@nU3Is0341<9ypO*RKYU1LrU{FY5|*;$xUrsW5@19)@Zh4mNyPGilbCP_CgBgk z?dWt_l5^mh#gHTC;e+`pmOR2(Rtr(-7DbMbl2=T!Nu9D6M&1?GV2u!6|2X`a057Cg z1OeTZ5+;2*e%==M(Xg@xCecf4T0|j2K9!p$FANah4egGOQ-bfD4Tf}wTejnFC50miO8#fi|4x=XQj+O00 zaO5nCQX~X>VA=6GpuO$@0e(G@Pz3uarmseKR=n|rWg<;30tEF6N{uK${^!`VyIt?j z#VpPWW+^U*9_)+3#Wp6R%#k?}sqXAQg8ZkEfri_}KGtQd%WuOuFHqp;{m_RF1mZr} zy#VINs#J8!nAlq0Zu=!@<0SFkqnZDQy|;>sE8V_DDImBN?pCtzrv{vVV&wE%2L1}`}LSwU8?SW;7jY7k0syrQtM&}hZZM&_(_<7&cWwa?URFKCQ6u)$f7(IK|y z+S-hJY@z7ub8Lq1QD;wHxDex^h;vrvMFJ*E@ZWJ*d(;YJr|uGy*td+vErIZu9y z!w0k~o&?HjDj~0@Q(hn`Nm#pq!gbiBAPDW(R^NiQ4 zokNRDybBh8O$2C^GDC)!jHh^Ja;4BlU!xwx%x33OqVIkS696ap4F|Za-*Lrjs^xCK zLEYOcE!fi8qbF$8CR$JDekJ(k&Br*)>W}S6s>x9Yk!qi5=%_epQMDVly)#7vBhz(z zwi9x-;(3`*1r#$xBIkZno8oKc<=(*V6+5dW6GfOhiHv%;e3ey1XO}V3AYSjrQ5kmx znGw8F){YGqPlLnY3Q_eC37Anr{-WD9mW!K`8`_Iyzo^(aI7i&4o` z2CtN1B_o6h>Lx2;64>ygAdb`%X8&H3%CQYG@f+TqD8A9!??#V)D9I0`*V6j7SOJ>XMiXezbQXb_ z8g8%HCL5G(C7mdAolkLUZ==%lURME}5a;#d16F$)4@rebaF@fZRs0Np_NZ9av_%ih z5?RT18{DN}_1a-A)_$qxSp~DKj}@9*nNCdYP$EQm^PB4Seun3X?+}~=>8t*bZZAp; z$``+k4(3)i>MO1dk8ZSrjxc(Wo$g$lH;lf~tI!M{eYXpE0ih)RK)}|K?&TY^I|L`= zdH;NVC*rGkw5GY&hSI~!0nrM)%isZ}@5l%5Z+VA(?(HJeYO#*JLhr7;y7%GOTdvrZ zOrmG$Y(HKXfF0$4m%$K_ENInOa-yKJXMg?rT7;opD&yj{uJr>c`k^eYcbXq}lpI!C zEvCgAoY;?~F+HmEU=kNn75eD)4HKiedUtk3(q)!5!=4fB7K}0Yviv{WF1QAk?u`8r z;tfjszkC(JE$9sw)8mTn-C38KrMI*$lQwDOft6`LmgoCuy)eFX#@K`wb#>qjURR={ zVys2-Bqm!Bza^b5w{$v}!l(XP66?uF;A)}j$Wx1PZMNgI^-&ijE|=mIONbW{iKIuEvpC8LOl={9l9m-(5a(TOZ$w!LrGAgy8M z$GV|pn{zrdlk{3qOdKg$v`HMrhUqJ|3Fq(x#+x1IPfkLoxYRKPl+`j33+9j}u}543 z-9gEhR^YB`oL0>&m0#{0e-(g@2 zW!GiDrkP)b%rBm|6h00Fy_3P$532hS8XZEc+ngK~gEI&q)9Aj})Q_Ij;$MG6_l1Mn zK?LVnYm4md9kWf|@n*D;J1vpXI`4ozS*sf@5{f;v=MY2HHo^|R9;%61#0YXvB3~7= zP}Z?JURdJ2?2%yRI*1 z9+n?9O_sPpT6abQA7wH}zj zSP?N>Y0ztf09yUmoW@HCJyv_l+Eiya^{^YVEkS}VQeM8->{nV-lOiH#9R?>$w!|Q5 ze*g`r7AW+lIkbkEwfPEooD^Oe7j^VTWaV`ZB84(9N94)zWgklMpt;J87tj0G?X_B# zEr9G!@edXnpH;=B#irF@K+_JRp$3(Jr_obq&;aE|6WDNG?1V6yRFvt)bxi;pKWZ)# z+tdoZ;h}M9HwQ&M*eX=m`4w8CwaWcgQbT?_lAb!-D=rf(-z$!;E{u(nxI6)Tu)j%v zG__QZ>xqmQ$|&C2tB9X1(Dbl?04^S4wrn-DGo>s==^Db=S%cP)#F+@oa(THfFf)X5 z2bb$3H&&c(G;@{@N}hh3xB(ji-Iu|(hxwOPq3p9c4W(%4!QVo|_xh0<@}(8ltUmW= zNyuDrrZbgFxfLO7ZEewQR%~M+_RClWblwB@?;kBeWHkWO5QrL#} zfV^0s2ML4{{Z!-p(X5~_=7x*YQ9(}LL+ETwJ-ey|G(C?jU{_QRSm-QgOQ)6APv~xb z&Xj#K%otB3-r2j|JP&Bo->|ZokxPu$U7if&B3*fVce!z}xNnAO!&mG+hCSXGJd%t1 ztb*=_xeo6s9xyKNhET6|hjLy_Ol5y%!QY`yGCmU*4d7I2^M}5*T*w@M&+fYu1@jV) zc#l0)gdps_P$=2ar;{UbvEpPdPgDyT;IvRO9$?f6H_(W$~B=hw@J4 ziq2kR&ITpXFbMsd*z`o3)ByXO7HqTW5lgGaAe+PKfzW7a#WupLn$S)!AkRr3m9dp& zMa$3}pP+H4t?Y5&gYEI-gV3V(D{5{m&?D$twatkpv{Jq-9<8}1QBWy zhh!7+?l{M0x#C+)I6IcpAX<#&FDRTJqjDyf7h%Jdyu$5yzVUmPrDxkpISnV~_h(fB z(uDBbb?ila#=-S=|+YXNQnD zW*_Uba`LM1&r_w$4*ljJj03E|yUqSqC4(qp@+FbmxdzLgg09UqO8++x++A_WGD5ZG zWm!J~eOH78E1lD`Nd7f4(oi4d4{Hyqz^nBZEs*7e_r%q?y^tyYEsUk(td|8{s@YQdAC+^ zbal4g(IKR7 z``^sUP7Q51t2F)gAQe=P{`gk3?cpNrsOVx@_qdCIEJ-;Y*FW-3_w!6`Hl-NsZc*b4 zHvD_ZKthI@q`5wa6maav;270nM+JkJ#GAb%?;VRwSq)>{T$e>HBBZbqAfLP!EcdGIMy33f-^| zKTze`WFtakZ#`(y$7k~MSZq-7qaNr*PH$f>bHlP}qkCs?!Lm&=P9ATqF5N7J97qee z{}dHDX(KGH&|ADmy}N_6Aj2ppv%?XXla+XNra@B%MSir~Cifs6#NSEzh6uWOueAJZ3HznjSKnu<4iYpgm}T1FGl2_zkAR2 zCJ$T1@d&mU%^)|g2>X2J*LxDsARx98@MQrf7{jQm*pQEB4#~WK1G^rbArrpMWKFVn z`cfJnJGwW#)0>kCjdd{5h8DmW!n^R%q~Z~}HV_HLU+j#}cN?kI;!Pt!&Ir-wHgN`Y zU0M}j%9Y14d5QP3vSS#})*F_5IoP-0*FSNAo$`qdEV)%uQfvnc241V{*&UxnyxU@i z*{z>L;+Rfja9<*lku%Mcgo0})kdz0pV?HNa22n&vCh9^Y&=!t-A=zLBbl$?(=u#(V z^(RRM1|0@K&5b24&=O z4itrvk@3Yhc{$@Z)Yv%BUcMB_NcnK!&54v?g=bDFDvIoM>hwaMQReg-;b&91l%@_H z!p{r11?EC_@YW0ADDDEqwRai_A4k*iPcyO8Wps5>jB!wubJ`K~Y~adu2c&PlSpt>F*rdXhfb6Hnw4X$KvN6dXl#uZUf|7! zLMZFY33)x~tIXF)k}nq)liAMJsD5o6M_neecTGNevAClXQUjvGrxnqN>NJfspePzO z$%#B*a|^#iR!+kXtxCF`%aXN!j>q;6Q>NEq8|30_T>90(CrFn;>BMQ%DP81KOym*} zhWUEqGU)1SBYKK*5!86fvQ3#nXmY8RQf=bNC{vhppV1}^*edo1yUt~{_0p?A@l;p&v`dZAOam5W%|7xwTc_f ziu%E&ccxik8tWo%!|6LgxalIEuXOii;_IQXhkCVI+1}46@q`W1q7`iFiXX!Decls% z4AAfUDYv~b@6JYmUG+KGLYL_WAu*vl3Mrl1C*0~%>SF#VK{ITLU>LL{i` zJD9s0u{kTReskB$dZUx?!@-;Jq1C@+gjlzj zQT>d$;2Y8^6j?-4Bh79ev8?+%FJiV8m^s8S@|3WJ}!8NW#^U* z%qj?niFaDFV_z=D#vf7`@As+iNepy*&y{p?%2?zQc!bo>tiE+y*wtDVf=@#Q5;zc4 zlPkn*y0=1z)xtJ{`TBLfyA^>_v02N#m;E*3>feL&=Opiii|fx`A6kO1+kEd`;*w-_ zac6gJWtaxbeZwQ{06)iZ21~3!Tl76^YjwoWQRwS8;UK#r!X*v$*%W!0m)*2x%B;U^ z6gBzJ8|9ni~4)( zwdcA7HfFwMUC5@H*0pB|&zd4EDi_AJ8gHc@ zR`a$8=KD=UkK`Tg7Xi((-ryU$G!Gq}R266&JaL@CYw}mjy_6M-7M~C^NJGO#c=)Dr zrFyiBQ@lkzqv?PPYaHq=i1g5#ybr<`fRFdYK8$;qSfe=0UCN_Y%^-P zy5|i`bw?sKtmo@Z11*BZ(Ef7`eP)D5^bu;sI7B-!6mG6KM-kNNEZ5w&GEh|RQGCl~ z=Qs!Kz@>to6U|x7`?Vsdc4RNJ;%cP8j0xS65Kvjh_$!fY#+n6mUG6H8xzvqih9DG{ z%^fCG`o4ZzD(V~<^x2B+s#@~5VEyIayZ*8rj&k-+3>G-?xm{c&5{?&I9MLR37%}qt zi0;>~0+4KkZ`Wp?>P3IKXeIJ6TbeHD?T9supn5R3QtrL@0?DIu#BysDeN;sjq+Pl#M>)Yb+X+xF6BPf zH#8>mPLiYkwN9&6l<98sq?`N;YaK}eGBeeDFv!c={MH{04m+2V^&spCGt(-2M5pBN&w+9z;SFsPMOCMW8VP z7T27bhDL66wQB7$xc{%uKb=_!_^;dc1V@a3Mv^C7@<$RyDEa5VfBK0?_W#na92Az8 z_7tfW{CQIvH{yIWYsKsgfV=UTT__4x^xa!lHsl)fcXkLh#Oht2nqjXcM!tRP{PH^K zuWy*d`Do0$tM5-+n&uxA_;WUiXP-=d%XPR^O2*O~-#q6tt1kQmL+956X*h z0lm_-W#d}GMWaK~)>?$czu*5XjmAV|%Jac$9YBxBtqm<#!{nXbr5@mA!J19>-M)A6S`g9HEZ)RGhxbv*3t1Ir493YcarF%C| z!g*8_1vDOpSv!@Eb++Z;%i0lRRJ`@C)u_M>3ZbV|oO~wz0c|$OO&7GwmyUw#jHfEC|&mO7{txAv7}cFNxglG ze-ZX>pJf-r=x5Aq>BqT7dLm6!-^P-_E-4H0;T?*FdR;@W95wVL37T3sAWS1SGv{ffjMQ_k26$;4hrVCW?a6)(UC8TgF#d20XrxF^nz8{u~|+n{ns{tMRB@Kb6Bi0OmxMNnur;vzG# z%7lJ7ar@%fQSX49?D}~tu}q?C$9VB`Kvd^(IVRraBmMyL_0A&ky(wYzc-LpYx#=Kz za>JS|V8wst`ktp~dKwGxX!_H6eXBSm7(D*{yFa(ZsNvy4Ezpbz;&b>B+0!F4H8sVs z?WbQM=i?*l?BW6@B0^?oXTQ3>X5@bM_U+s8`S~JZcB*>R<#|ztr3;ikhvCkPNZDx) zl#KW9rbCR{3kdRKGNZGT-_Rs}JA7sXA16@bh>Rbd8b&54w8=Zv>D@qRD;^|%_n;7o z5h^G79Q~CEA7$UAHfMHL=(mUqLw6%G9#_FoWM4#P`pB-Ygsj-b4(m$+q`mOT*EjgK zKU|1|-?Hv);)kYuPPUON@^TyA@S|t$Sl8)Be}X2Qsd>3xa|j8){c4&+ zTc<^qPyR4WY{j#l{(j~P6nI2L2pbzlLPA2ZQ(6O)rEFRHMT>=?MmmFpl=de*LMs}z zJQgY(PJbr`^?V^6s4uFcHPaPq2c4c^tuVr~kuL-CNOHe{6`WS!Sd!`0ZzS>I6#EQ= zLQ3N;oAWz84!7dq+Xqfua>?l&_Y(?c)hfP5MczoMezSLYrM(MVL#Ga7zBJ{npVjO3c|}e>W11t-Q&%+N zkZHOyh^&XfaWAjp(XMnS0g-AapDvH{8%6u|mW;@+b@^eO!*@lt6-SdC4mY2!zEA0$ zh&Yq-Qa{kToepWz5Iggm9GFlTUoV($MsU@mzApohTdCD)4=W6H<#ew<@VlK%|21>K zdTy_r4|bFN`i$UFy+nht8uXcn67lYSxB0kD+R2GiN?LmD__%@)?(p!i*h&kyp5~>h zoB3PEvEjp$NQSD#W<4~irZ-rJ)yNS`JuuG!zoj&Rn}Y6fG?NmIu=>`lPRjy)M7?RN z_`cGfeK)Tm@$(rjc$&TMEbEQM&PO8?ISP_K;p}vxXGp%+)m4O|bTDxX9tSASAI5%i zo`g*?$p$Snx|1u6@1Iq9O~}}4x1%I~baLrQ3v&RG>Rvkuz!*6-WrbDKC(xTlTS4rV+x-y>G* zUU=g#n}p9})Uj3|G&tG^AmNCS*kg(Yc|qSp-F4InIsY)WsC{I3C36>XxN-bODJkOF zUy}^tO_rx+fnp0m0x#$X^w9^vgxFcohsKX!3mOaL0ZjxEQPC=&Ten_9Wq!EQNI!aC zKd+-^%$W9HR2up2+9@D@2YAbMSTF?#0_gNDO*p9NEnyfB$hzCSYrmqJ<3>gNfVEJf zJl))m?pBT3_%fv~-bO?4(foVQ4a9sNl3dA!kmHm{GvlW^@9w`bp4?vBIel#pB@|+0o3rsj+y{nGcA5qyAeGu5kP`gUi z1qIj<^zwK6fy)u#ue1uNqQwMPv_)-kYpyS6%it0%*y&4K7MBIfPQ6y`FH0e2{pH#9 z%eSSr9ajzoy%-Qy0;g+O_}s>fOC!n$;n$B}{iXMUF8wV$t38QpxUH`ZFgs{&1C&~V7+~OzR%3$e~j)$(u!fl z$?Q)oRQ5nXFu94xN-whM{(>RMu-}ao%iOe2oKt;^H+6#tbNxy}zro^i-Qu=dC*I)Y zmYWmbync^Xz@66+QTyUX#>5DHpUQHLi9DCG%)!dd_)-wzXa3Gbnjg z)7ReHwJA`4{J`?(LmVGXHi#P8Q9!<=jPdRKK2@A2}i###3Z6gI!NwX{ZG zZvJwP(1m$Jzdn`o+yO5}L3C*Bc1Q`Ghu7j*9wI@xuTvf?Zn2F@C@PA}`Gq*1$+H3n zcm3TvSU30sS0u|CcWF;1KwawXh5gH?(ON>*uhUQ& ze<5k{w8ZBqbkQ7s;MwDobwE>-keN}3KVZ(#u8xlt4-jf)2(HF{3&Lc~5W^?iv!d=! zpVv;750K!YtcQwA|nK4Z1tX^NSad zex8y%U&PO2pDj%Y!1u*39)x}ez{o@cWlubbGTjmS>=<6Z5Zcd) z9x5u4DLUu_vxbpHDt=?F>)z>Qg2ijk+3?#fW&E0?ud#i4aDUAR8f1h>jKWtY!{Bd5 zzaLEn)sG;}eKkYP^xP(*%`1P^Mou|P(hc?q^uzAVh!{*D=R(hJM*N% zs}N}61$*TC6YUm(F+4~|{20H%TffjcIvJ+89!sN{bcdd#%Q`DhTLUf_4XfMN_k6Ks#)@t1h16C(Rz9-8KV2FruwpAiGK1&wK_t-izq7r)Jy=bX} zv0C|WnGuG^CZV=?MrIA8&Xe!qA&G{qP?k5noSsXJkPel3VUp~MF^PeoFs;itW?4VR zEE0STScGK+JV|@y0O`SAEAvr8TH`{7vC4zMZ6#gO-=3%USezDx;kUf7gxwB0mKt4}nLF?S-jMVdD^OiQ;KE)fn(??Lcp%_KP=gM72w96TYn%>@ z#&KrQxz3Eq#F2GDlwY|}GP71RZ0_CURc`p!$gNAIw-R z4v}cXrnG>ai}Byz-^b&Y7{#g-EAO-8hQ-FgsWR?Gk&%^M?+QkJ+TgC=`bA2QA|aum z>_KN?047OLKcYoie~$CsXjr_4z@@;>??W%rc#qp7Qyb7XZtXY!T@+&2orn&X3RDDd zXSWVI_A$pgjmPprap6p_$={8Q!e(#~mrJZ@#f++nUzHiGh(aVhV|0;Cg80lVE+hR~ z=LG}p|E*QrkwsMBK3WOraDI3uW(v4f7XJ9qYQwjlfSe<+m@St#Y*9d-v6VAd=Z4dF zX#p=#x0j9A!iPT^bYCZ;BF<>W|0N>iu z5)a){gIdrMpu{_|=ryTnzvEzLMg{Wt)(OCSFmRuGa-j?gfLa{=JDP13 z1Ml^X4%T?eGdPDd@c05#!K!B0%8J4KD-LmS3V!<~WvnwK}*BOVG!;4Ltnwkf$-}DJvi8lomKC&s@cIEvJi71eXkOq!y!i{=;(GJ5@{~z zu8>qdQ8^Gv4Q{$&`Fx1k7hS*7WkA5vEe|xi_6G3B>%rlV2u8-g&GVe~>*R%v|EihM zx7|J(Fgtw7A-!oAHoU?F^?<)#YlMKfkImGX7%iz@mYdv9nzu8-7-X7Qe87ct*!lI%g07P@N z!#aA9xQ!);Ee9v!U3n?{c49nr%vrb}>#?t_)F0?k01b&=EAPV0pbr93>LSx&KMLN3X#lkF9nbj$WJg>EbI5r?+3k-P|YvNR%_p zu<@~(F!^F<1#Ee4(-^oh9VQuyNf_wo@%llb8Vx(pjY=Y3^oQ<6rqH#5(t-)SQM@~n zhS)i^)a-Gmn2Xrq5SQ`h3;C0ij?e97ooFhU!LLLG1`9eQMRhI;SF-Y4VzU^j#dDBS zxX7CMb*9s3^`-0~e^1%dbe$yuVK;V2+S-zhus;2#{#lq`Weof)XSE+TUd*g+lbcj;Bwflj# zGu7&O_}CYD-3$oxPfc4tiFAbpe$2By*w>D=gAWk`v1ghN@`b==RiBq*1H;2NPDs}L zS$*ka8TQ`R5h%21e2_|0$t+2vICU@i@lJ2CbT2Aa7?6km zD=ZM>%Su>S6nve{A>AAzgV`L0xjqI+7F^Yi01Qa$ zBgmC!!#{QnDBb*N3O}fh&J2_zNBo#I%NcY)gNIm~xqjH!?k+CX&blFS)kssL^nw0M zL{!+!{gHiICGHm#SM!s9xHZ4tk6SVSj4bhj;-7b9x{@2Pgp$BP8+jIrsvE7`C$bVBLpwRID{{pxJ&g%as?nn0^Qp5Xmrkb~`XJ=HqDKboU`OIB%h(rlrND zq=fn0UKoA*NSiF?BSfc|9tx0#CTE-9JT8~rpRxhkPk4BEPvZuxb%CQa|3lFi8yUgB zd-ra2IE7oQ*^L#SMavIZ_Q1FbFfT7}xM23|KH$_Gv$UiO4YdEv^8y>E;nFU(N(7k_+@LwHNkHr(g zoYneWU3qM&`>(DV0xf00;LSI@_Bfi)MhZuwq!tt@N>48RW0Wv+){sLd-*t}XxRsai zDq~ggIQQTKAK|eBbK!w9kFexxTuQqb$Iq*p!8%P>TW5BI<{6o&qGVBQoi z0Re=E2lwIOA)Ip@aBxozF{{k@|L)B`IsxCxM$t^K(35!HT-n@&`X1<$Tf+Y*wR_?x z+4NfqOOa0=ZjU#BP2&o{tIgaW?V!iq60G=^!mLY58NgT=z7qv zpn$&4VWpf9ZqM8g;Bz8aap(VJJ)+7 zPAMKwDT+m|H$Mry|IM(sw-uz2Ut>b zuFgDJQV+wHm7_0c2v#N;0i0uRe=PNSNmbCNP{$BAA|(o037{;}B>S^zY!X@KM~_8D zA_w&k^Ac}sSKjfd^e;eVitO*g)1W$VqJFw34trBYgW39QXbc;%704n0Wl&7#xB2Ar zs1Ln&?FCR1(k5&GfUg>-vlR;}$P_q$d6LBv>-fyjP0 zkp_);H3TZ7a9hISSbrJ1A0(~u=_f&?A7#{E0yy4kxrfuTtRzj zE}tjwGP+ui^F)$4tgY_Y#VKR=_d=> z;3;M~JTH?Z2KBFPTo4Sux5v*fL+$IL1-vd>lG=iSIjgApC0*bG@Tuz@5h&y>VQrB> ziz`W;H&zgDA{oX~>*{4at;dcGxC<4yG7)GBIXlYoye*aFWI^zrTnVxlAQn{zWt^o1qPoSdgpYo+^i`m_cu*&!wGu; zsKKa`{TTIc!5TKWaOQ%PSz+_yzDSs!GRB_ieRm~ZFtCZw*4L1QV{;}iZI5R~S=$w3 z0~?|!49~BS=aTcJ%|G$Lb^(`(^>DW-A9<9?sLUEIXWUze$oYs);XyyBi2<-neP}e&+Y9qE8?rw`6s=^CHGeP44>~3H%IH!e}QUP8NVhBWq z`xfHtIvYQXs3ty6tvdPdE0hSEE?J=Tl^3?yI6Epi z5R54nnsv7+w&aj<0sT*;Zk)8bQwpW90ZqS0{lS5r8fWq^p+rK3m?zI4~ zf1k!}fdObA;_)80*kIE5?B2K`DszKq9m%(AMx9Qqxy)rVNR^Ac*{T)N z=SMHK+Ra4i4%v?F;MHWMN!Bpx#aqM06yr#K4}BA?DjMXtM$sFgoIZ3n%e#|3Ul? zw9y|UCnXi|QJYA=4`^tEfA(y-ryMj&0{TziHx=eC*Ko%#;MZ83vp}i6EXuD@tDXUy z^G2~6JZ_W;=0GN?v+ei|$HWcGQ#Ibl)*0HkrbViqFBI!Ax*U^U_UZJO;F{L^mKF<} zE(|*WqQ}+(p`bD2KSROP%nTFqdrwcs$HAfpXGeDE7A7WUKj3~FQf1Q5R1Nc#SzwA? zNpONTVf_<(pCz&B6|)E>CnN-4TwLf|q1FAjj~DTyyu0&W0t9rP$B%%csescud{vH)t$fFi$=use*98{h>m?wfLzPQn|w0(X-I1GMA+q!ILccV=wxzW&`w4znI0WlZUJNs{b~o>WRK@ z9I)Zb-6+m@D)^+)J-fANEjvIunGm61(YGEfser=N6{O4AKYzARtZ4Gfz@pP;+bfw$ z>{A6jppO*^xI0-AkJ%{)k_7YrOcH1S89-m1-D0KN;al6~CUtG*)d==BWpji9Q2P?K zG5~EYKm!|GWy8brr8@N(ot>R86cp5>7K3fJ15dZYL_dFHlj!`)68s-puE{+!_ z*^I?uPP^Xgr>l)S4xrdWr^&&`CpaNM8yyFW8A&FLAqFy8#i;5TM<;P#RbZ8k1P?0$|1Hz}jv?ImMKagSvo|}}Bt=1%c zUYm^VpsycmXe&CkC>(_tz6``V^8u2af8n9-E~K9a2QupF30wn7!Y~6VptBXdW;e!s zzh|B-KpvUK@1UWNI505a_ucZ{$tytZwIue>^91BHApA{ZXm4+?fb%92P?zKMxp~*} zd*byIea+!{X4=r)%-jq&Fb_+>uCEpqh$VFd|L{|ndx}lslh(C>8HnoraH=pczok5Q_?^B!Ik4EPppU)>ON}@HS=E~<>g9Ma z$4Ns&vkL5CmUedP|NY0AA+X{#igyH;y;wcUefm*fO91OBoBt~Jce&)qE-d#C;q2%J8E!XRgBH=$7;a^#;9ureF zhZ&fK1tx(eXg&)F3cmDsyiIqz0Z)&c8MQ;OS%MeV?;K&?+o1ceBos_y$nZ|Fh6U6@`?T7zGGZy@ZY} z*11+#ng2VkY&aD`gceotKB9H<=|Qa5LZ-_#MUqHP2>(1{XJG9C zTNN!WEf5mV5S=Z|VS#R%KLs9W?T-()0-k3yVvlz&w2;vkqu8+(Xddt18{b|WhI3}y zBWMBMjJ<{)up0D<)aCLeEUy?CqvrhxS1dTKr)cEQ1tTjL*m}_{`D?;Jjre7g=%r!L#8V&w zgH_COR53GM`2Mp43TKgG(a%2z9E#OqtDfZ|@PcClRKFufe&iZF(n0~_He+UPP z4_p}t5CDw^AjdQVNnTs~Emu}E?9iOROCHNEqwf)jwH2GeuQb5usUCOQJDsi$VPEM#hiJTM5w{>TC5Y5T(C!J zF+X2Ww1|4yx{KIvEODBfHO-?r8p4PEb`_*bzW&J|lAq51W)*aqE%RBY%W^$C>UT%- z_cQL44=U7{`<&-xfTujtb>@Gg&a0g)sQxwWV@XBZ8!k?)Z_nYr_*c5@D7FC1yQQ`D zo0t89knEE8{BC6{0b!r&s0;`q0%s<#(on`f){|AV-6H_wN`AC%NLYHnVwVVi|52ps zM*Cv^2o7p+okEY#t`nN{14U-MO=k0FB!}B8h#@Eb(k)^O(QojQW*PQcB9gh`Ld`74 z#qNCQfEA#A%K$sp!u0{FO*-GmvXX$RJ}*YG*j@J1;4w5M@EB+~x=i8|A4%hFAehUQ zSU-6yEG3gVvR&MpucBvIbEPk$Jw3>E{^>&7{yjNa_`A?-rUIu)Yk(QMk0x@t26MQ@1Kk{ezsLy%t$66O(NeOdP+-G={A~EB*$35M`BG;F}a#h2XRO_MHX8 z2G8et<%Xzro-93c9}MIyqcH@9;^^bD%76bcqQK+l&ZkPD2mmau{M$zBs!0NBc0ca> z{PNTI+}vD7nE#8me}EzXxwXU!H|&#{d>AsOcw|+Dhl#nCodb7=`P&D$fLo_AOlYWh z`xa)q8su%%1kxPk`tJ_^a9LbJ7F29vpva3yRMNkZU>7`>mSJN9AKKZ%IgQ!oAm&f; za6-Oxyq%vdf8T!G-*8F5zVVP$Pf2eL-ga0D1(S1*^9&IoaoNYonIKQpAsC%|v=K`T zT>cl3|DGquX)#KQi-*U^{D7(EjM}-kXMHeN1?RFe`W#TPzY@A90cG^ztI4&5yGnvQ zJgs1P>xPM*y>idR+Vdl>I zktPoA%u(+kuu0>Kp&r?2bdS*YTCYjc%LCp5tp6h}lrS}=Vbg8MHZ`XFSn+H?05I># z&ZbOqL;uOalUG&_6Zf}gcJ?H_AZZQ%4wL@#v6L+*xiRdBikWlCM(g9Ph>`>IpRc|qc9&9IgP{V`XL=0n_GUDnNOL8vrT;2_t>4oqidH~A61<)~Um9v|o!MK~-+ zZMf-kl5S-OKisk8Mcy|=B`APd%#U(AHj`KOz%o(y%;cV#o5LoBA?d6!RD4cpp4V`qf}V;d>AzlfS}08t z+__E|56R~?cZh`Z^_iLNVja58YF`rNi+jg~%YPQhM((>=6(3F%Et$KShAdiYm zO)Vy_N4A2W0*qZ_4#ghv`$p>)x(!13?_XsR)}Vp_MpAzfMZq=q@ZoM-^v(jYk4i6y zpJ{D*jY^E9$Xg5_BKN+d+l0p34c^$Si3e8R=_cx|FFKad<9vE0dBeGTZk|g%2?;V; zA^X%B0L&fxfDKIwH6T4sK*Rx1>7IT|o zlrlV79*}7y)zIxeHG`la8LNa1hYiap4DDK5ZS7A`|5?Q+hFXmfa z>nYb`!|awi%Jn+r$znN^*J%vR7&oJAzwBXyVs)atleafF889{eY^6C;GX-3$0pd3! zqp-O64Z^iEB8(un#6z>qEL$&bC1p%-NQg0zUIUpL5fKpwaTJC=GG$Qg|6=d0qUzeZ zb-~~e+%?z=?!nz1g1bX-cXth*1QLR~ySuwfaQEQuR+D7^`Xh>b>1YQKE-vsRJ)Fpe9Gvkit4r8avBnYj0NxI<%N3MVG-1;Bcd8C z__RbKV%h`-r1JZRWdxFQff&P;-RRW+Nd4Rc%}ZOK?=1n+P0Fjpf?|Cd>^GrX?{@H~ z$Dq;Y#p7Q|Gx`$=U^-%qPWQk_>ZN0%1 zIniylQ^s^Y;i&uZN00!Y*>vZhaZwCo2((_&j)iH6v z)EpCZ0n$}}cA>J9pb5&CS}s!{)7#GU>dpgG5Jm&Am_FrC#(fTXjKX<18boJWf>l29DTFUp5c z1%PgP&8T+{W1ARxm?25AI*-@jdib!~4hGQs!jsD`1za^%0#Sadz%kvvs0}y3Cz~;t z@UF67YbR~Ks52djKwb&;^ks(v@scV`n2C6r=18yuUYg_C#4o5hAANeU7(%MfCj=W1 zQAdp4D$+?9ni3(`m01yARAGXE3=!|!HlOy&^mT7H!v)e?k$rjF*e3kT?mc!NXmB;T z?tF!Br*lSa9YJt5Zl|q8YbPfy*!(_r7)#_q?Us667Ew`VluJ?G5xIuVVU9tOH>Pr7 z&A0lVq9CbAXr|lJQ2I%HA6xz?&tvwyr(e=I+ZE8Qa=bCIH2~`QBdAg2u`yZx@cfph zH{3D)Ruoq}nlNg9QToijV#!`0$Wht$<_V|G(;1G(@X`#+*?xMWrXKD;YCsLxaQ(5O z&vMfu?-JZ*-ajsqBd?k~tCwPGlrpWt)# zuZ6RE+I1qjEjZ1Pu>-F|PeWJRK2Lz1QRc_4e^5{;e@6%itJ#&Wdr+BIv#7Itbqan; zTuxkGh6-(H>pCQt1DQ@cAUMm!FtoBsP%gPF%9m)$6+2UTikJ{5D!+_MAUhOa70SI+ zI9pGlEc95Y(GYyt%Nw5UgfmL01k2gspnF)D5+%_7XC5+$PZj!{S-d4I7`~R|y*RvV z3hcLc?bHTPJ#NX@a3^$OuM=ZkO742|jJ2Y*W~_VH3#BD({!%f-guQ z)2biFgz6y!rdo{2KkI7?2`~*wgz?Owf6FJ~2ge;rubps1=pG-R`cR@hl z&CH1|1*B_sehnMt%LBTzSQS{WKV!&$ z<5!{bZL6K?or9SWwfOB6v#K|FaXuf-$Drg*WX%v?SbcVUcP;l5axC9MLrKZ`u?i4 zE*hZ49}483;6-{{A%4`e5KhU!vUb*(Ya6??5U7&aEp$$#2jY@{G*>-1ply%wwpgy5 z-uv7lc@g4%o`+-<-oMvIYTgmWXh0f z5!C&QHwo)~zl5_);AGwwXlF69*mq1`gwRGVb#sT)(4PV zLo6U1QKzByIi=_LUx~eH^~Kj3lE>7MW(=PNdi)!38fXc@#G_YQ#QX^I$9Uh2mD8GS zTY}91+?4mW!ZY80*uQjc0t4q$@dXA&da)en5JlFSZ8ACzZ{BLjN17Y-a!1~W6C{t) zi!EX{L9sM(O*mA5n|?);w;#~I(ZEJnaFiJ8@4O>-M@&*k{uX|?aZzu$DyF^Vpv3n* z+H)higx#{VdO9mxy#?tiij`7Ava=uvGMO*Me*v18D_(>7Rrle({j2kpL#_uo-mBsb z)669?0{pMN=Q_K#UAS8U?&zJuz=S8FRM>msw~|~F4cHKP!lD?|pq@9fuRs*8lMGRC^ zJ3q*^1+;4Srv3C{bjZ%G>feIVm=Vffww*@h_cd%-%){84OfdximmqE*W2JYxi1hVxBoS&6yW^wHHixD0w-H`gMf&|r@Eq%Mvv(#HLK_tI$_;)ZeWk!0 z{>VDem^+C&^JQi@RHNuLc4o-NuD0XvEW8?53tca-gUO9a3}{bK?2a4c;R>IsK#e72 zMC-7`0@yS8ZE=Cn7eaoHCf2_-V8^v#xV$MM4cl{u=KX=PtbK+tfngYZmRq}bUzQ`F zS~KTgKC^A6<+Ob!o@pKx@(JwB_hfp**K^zAv1FglBE1`-$qmOXot&2Y4fY zq}{s?FQr;KE~PFSLptGU+C2uUoiZ?t)ZwRVP85i*_xarN^W#S4gkIQb%x6vpJqywE zq`j=(o~^D%@Q)xXA^bePSdd=788*6|CR!0sZG}Gq077FDLOwk`g2||MrubkXy%!R^ zl}HSHPg;+gPcN9r{MMF`)paw55q-WJFFbc2Y6;{z8Zy1!2bJ}nJU{83Zd7)e5oCLi zzS^cG#_6y09{~WAQmV^ZvbjzBI!9Jq0C-)lBYKvoNBU*uBKi@c?U_bQ4p~%2mU$Gv z`wf7n`Wh?gX1kPdOn3Rb`7@8n{@IJ?>`=_>lM$p1+R?J~`2~{WE}a69nt(do$xfalR-MXvsv(j3u7#^dN(3^8UEWYJHb+bVW?y zM+IiD8}e=QbJOt=gm9ONW zz{7A_6EAm;=R>uNi)uH}1O@aJx`Eu%jAv_9x`qCr8KiT|UB>UDv8F z9vRc*GF?CAAD^*bHlta=x#-yqRs&wrTKN4VHu_&)&Ypa4>K^9DeAxQP?a`4jFi}x^ z@I{+9K5zJ&YG+ND@fh-C<)3vDhfk#UqKigtSf2_6z7-Vd0S$UnhAla8B@dFU9jq=h zx3>?s`{k#X%^qK%?(G$ndZ;u07l@zlOqO>{GgX%++u29xy)%z3(n&Da&5h+9%==3o!fD3D>AR3Lv zm%5%Wx5g*%;f4uqQNyH}%OllcveP;3&_3jELgc48YCGzOs(%ZyLow;s;52T-J`eps zf6`rv$uIFxazBBU=QYSzNX*xX;`+d$TBfc0HPs@KNh10pcxb<>-lL=JkXYk;WTZZ} zHb*6*w3@n60plBctP5HzIfj+exZ}46HFHO(U?(sG7DKI0NuXi?WzwfB?&j`B(}J2# zFxaOe)nHFB+aI^!pjW`r}DgGp|65j0j2|2y9{EZ#IQ zdu-CUpx)kuVn_Bvs7+wZgiAlWqPs7rqxcB(Mq-p7iv~;cC_zvOPMPr#(47Z$DMFF3 zoPuT<|BF4}pj83_ZO;pxWv^J!}9#i?4qQTJpA z`ry+($P#{|7))zlnW+^v%x`JGtEFN^l7dzU!*WQ@=`za@RuZkkj+s+4ih9 z%7WhSt15NdDkbcOgZR~g2> zy${lUkfoNEk-?xZ#xF61)UL&c4jc`%AI`HH1}*yr=vKKT)SZOvZ<4 zEL_&l5F7%ch7AHRwiSyeE{AHlsBf=Qn^g-xL1vS!g?I5dG2*?YXmiW%bu%z{x&F<+ zsE{~HC+&lv7P^fy-v>+7cEiqs0_~Y49@87Xy!#~~(<4KT6@2o`*R{ZsBC#y#q*_Mv zRiZBOOQFq~``=H~$n}KerJP?P`Ntk3C!V;{t$me9p8S7X&%F&<4mIq8y1TgFtE8+y zt`^eEnlZDq@SlKy$&{r)SAW+Wn&4Tg&g00_c<@5>e6K-sS%DMvnHhWIrfGugj+%sy z5SvXlIKzjCpq`HCFpo@hefF+p!lfE>i8pz?PLz9i>6ir9WCI~-v#2-2cvFD`6OG}h zOjFDtEypPR=6N@v#tIGk@(@uvV*U4G1uCEA!rN8r7WMo5V7o`l&{;zPEpL{iB~&cX z@I;j!astx3sIe>O_(>VzNeG7G)DIXbJ@r2?`})^G;{~5d67jEkmPXW2>9T)%tU|pU znLu8s>`KX0c0bHAtu}M=P2zrbMBZ}$C>`DPg(xTiQO}RRSx4V^0=^`&F+J^0;__e# z?p+^4hphP%vM3)b$taRM6S(0z<1|8w2VLj8U_k{L?cet5zwtJc^p*yHa{ZarC^Mil z7r9?dObp9yoBKuXrCIxQks4V*KtQ#J4AAh8qy|VPJAVOSfpUZ^ot>zi=?_ICu+k{L z4IjHi7c`3PUry4Qw7B+cemAcv6M zNU5n+Z+$Rq^yZ-8LEbXuFYnHT?(67N+Z!U-Pl>6;Zh4Rle2x=l#fj3!?x8Z^a3x@` zyCZ!N$33GVyt;x|HiEnf@7KiUK-qZ%C@+*4i>6K@fqYYTd%8h!eQ^|p%vd6ZJhfSt zNhS%^n~9gMhPTEt?AD=hY@?lLFWqSC_1-2{U!s$)f6J*y*+i(KM{H)z!`>dgJW$-z zYa+&^Qv#Ua&50KH1m5m9QC#tS7H7Y&brEa}B37oHpZh&kwSqsdQLsU?}| zw!yAP@WV~$n)IjkHtKsoODELdy_ny~Y9e%%0eO}$ga}OrI^z{D4om3R!^5#8Yv(Qq zR(Gg;4{}PyJnyLAv6HPJ(?Hkt)vNT`@BCme7_X&a(}NX@j2*j8uycc16;(ELj(Ve4 zygv>1ZbY>`Z|S+G0R1$R54zsy>z*fL zs(uuI7lzV({5Sx6`%LNTH9ZZh)3!ji&9q=S}k6FbJ(E!_}f3ZKE0~^m!-y6 zljOD}`IV4Ddvp|{ZJZeeqAu0ccpu}ongh$~{SQKk-_ug>aZHa|d&49hPe;~laIEQ8 zDR%DJF0H1aXkzZ#ukzN-<}z7TiQ3f8!~AFRS;4)^JBy8i#RSZYUjt5xNfW)WC`525 zrr;P!Z+dtgjv1Hrv#&mxqH;#@}<8EuJ^ue;X`dz1$tFj=OhS-1ZIJl%%4@ zhQP2R8O0vIq-%I8T^`KJeO@t}Z6?9H(e%Urf_mCej*m_|GEt&MammEwe~07fH2uZ%T8;<~~OI5McZeajk7tzlME0K2ngUQy5=SEVAOUT7Vm3Ba@^Z%b zvB6i6x27C*>U#?Kz{kGH_EtB>?C{$nPl@n5<&?_^dc_LQ8|CBgj?9U}NDRG${})?p>W8HY{m1TES^l<9b|9aF<#hxO1p2I6jc@c5A6QxO8>d4eh(P!&IJ)3mx>BC(xoV$5g z^SvSNO+xHgIjDebvw}hY=0CUlE=-U7%Ky&Q6Vq4*eV-4ukG(9oC!NpCdI=1KeIg{_ zB()8%QpgIvQEr<{6)E!^A&qK$6VuQLm4YZ+ejoQD%@82@YGcyNmWqCH|9GE5up6@t!B1@jN$E?mzoH>?H2qdb>^Vr@KuZNsI@GNOmXSZX;9IiU z$+a2o4kfFRRil|gR`Tx>jA!0>n_3B$PaZ%P*+RbWG*6|vTtHON(9uh7v^_Uq7ELq{ zyXFM(ejV=`gqr~Pa3$D8h&W60Z@LcYrF|pd!BRCWKVu2a*D<_+n`C|OqF{o6Q>bHX zvQ-;itj0yZcj|l$d^Vm$b^nSHJ>@brQJg_l+X$m2^C7 zs+-~ZU3G}Fv0;dsmcOz`$1m|w8m`Yj2W0T85}hr@L0nlT`I1LNS((x%g*Rks_G#VG z82R4o9;|nfKro*%HahBUFRmv|wdE=QTM)7A+)f04a~X(-T=&)|`Sb~2eWi_A=AkS& z&5mFKmZN?g;bn0Yt&dk2<>i(sm2$)Sm#|J|!>at-E@K&tN-TVPw3#rj1e3yb)7Ae4 zi;>AZu(Sn6|DZws?qSdPbG@S#W+U4zY_GMa!P2h+4o@X>J3T@JfrCbOQoh@lCrmDg z?`x_~^OzTbW5t4ty)W&)m!5_(YED1Rj~IaVz=ZtW87eQL2Rl*Y^-3@Zb+-g2yo>7x z+cUSB)_aEj8?EQ{8tK+b!tP77wBz&Rutzc>`pXlRVQPhSTQIr_^KEb|FZI|iZZtme z*oF>M=5UuUcP|;!TP5Ljgx%}E2fzH*Uy{o2n*fw&u)-qS?a4;TY1A*nlsAZC0wIS? zr9_&+tzsh++0qmUj4uQs)|y$fzsNYSOYad#{;vAhj7)ZPW)x~H&VKN6n^pJ3LAYN0 zw7gFmbEcdC5M!X?tmes_k?IP}|We zY@YVl9+YSpV}lf8%UxgSYSqcTY?_RbpAlMO7EOIRu=3!;BvA6o#W&CA>C{^^A6tP8 zFqYdgyh!4?r$w-Lb8?V((3mxwO>awncy1QIpi@859O+@x#V}&__cUJOtv-W@cQdwp z;o~AXN8p9VGMz2(ALpzNAYU9JjzyQ7{B*QjH||09>#}#X6q0B4J}$^sJ(b0p!E~k! zAQn;_Q=bZ@&x_ysL+h^(RNa@pGlY(;K-3fB|)Q6R5ZCwF0Hz@*+t$=(Hy1Zk4Nuhos7=xx=3?U<_A>~I6z^9utYtoePjF*ow zwPzspw}g0I($24lEEGj?!1VZ23790C=dZB;sjV2K4DD1(Ye>$fX0F?w^7gSK}zPt)3z43p&*1qeo_@UoT zHuTG<%%givvJzR_+P8ZTguRAFOQ4r)!w*PeOZFRrhQ)guu6IE{LfLJ)O^8`b4*52C zStc!skUWCB9t0hJjWOFH1Z?0`{)$%JwGZp-TqX5*snfRp#603=C2KF5;p>SG&bmw3a15& zIqd=Y`$%A_3S_&9sjjiE)sgxb@ZXhFyoZq7j`YJ}fLXdX<_LLlfJf40GUl6-DQq`R z)@_7Z^{vFn0}+Dck9_`2{6bbdDzH0|kz{)Vg5f6~Bdj?N@DbX=U_~hFJ?!{gM$Kt| zg4LFiSWM-^PC(Wh8u{rU)k;D5Ovp?07?C{nG1;?#0q^w7@bBWuK9+AljeUGWl~Fp! zbWB65T@J^bY_lN$(pZW;|RNr-X7+!!! z+Q<95@)TY3mte!LMT&RH)mf@L2e(b_Md!Y2`lLm2WI#BLoeUyke_?UvM{;E2Bh7Vx^AjxrIA>R1mpOaMyKC5*P} zNoV1XwEgpzqD<0E*(X_lIq1;<{}IfBDzw8&%@1IBzL(g|H@+`{FC}>qag`mB;1+ndAj@xTQHk>&3ykpN*6R?d>X`quk~!7UqnPE{b)2m zv1&9lIaQxbFKn?S>qa#HSub~_{m>k~Lf`*(2HZUn-t@_@N9m@Emjev>D@5?eNh;c> zEk~JmESQ@<3qg0Povl^91_N==zpKvC*c$i*tTd@7g`&Ic`=k)=H>8Ijd@3%nf>ihy zHsa(yJc75NcphM@BfUW3ziUPzjr;aT@2ZG^+VMSU7mY^eGH}>DsjwInnl;2b0tSSc zob#FPpPh7UAYpH65YAe6Jir%cZ331v$<#r|mRAtpKWY;%u_NmzMi3c()fvJC!#lQ@ zHZ_>|S~gxarlwwh4XX|QHI|?r1_|G{!)}PT9y6(%9qCnNi)1Q-h>sgV$A>s@KskZ( zhr%6GyqvnXhZWspi@v=H-W!o`CSVgH&0ijH`I21GXmkRCpSl4=l3m9=4Xuqj(JJBF zP)9$GB!Oi-FhlX(>hTE$958c93B-lql#87#y)L*p7m%uEL^{hzy!y->nv1VU2Q!zz z?J??lQ(A`W*nnASf_E(HMnG7V>NsvaT$QVysQkWB_EQA`4ckISYpnRH_<%%w4*VX~ zAeqy6xGAL7vTq&{{hQ46OrZ+AMb7 zhi6(R?VWW20TvsIh%uJ%hg{M@BW|AApGI5J+;+``c`2yG2n$NVf)B_^?C^otRj|?0 zDw?tKGLCt%J9d%F&M*%xEtsoMSV>s#x+F6K-}9=*?!@%n#2D#%(^zTSBl%Je2QOFA zjc29O(;nHj@0lc%%7UHE;u#Q~%?}0zDgSAX!y^A^=Er$x&EEAa1{u&5pSp;B%KLz> z9qg$$kOkK1O()!3CcE$7_VT26E5QOE9umSp5*c&zH$dPRbncvW7oDFxg zA%0p>*WMWAf>U(@W{8d!o2b|*_U6RsRVkqs{DSR=Z3~j9BbvxqRedZ!q7DeQt~`JE z^nO!Ph>@NF7c5i&l$v@Cnz1NFv4V?$1e(j}Qo~=E zp3thW`-$Xe3|>=#?j)qsn0>$Sz_w59b8;Vh_1HQcn~P)XKpHqhYh5{fSB}%`hr_$6{+{3K?hh!!?zVATct>C@OtQ9R?j~ zsgG)P>nkppm*uNLHKIHPJMN}OBgWD)gn!U;Q)zoPbwgpVigP%0V%+I1m58eUInDPD zSC1fe40cTm;`O*!OdSM*NMBm@lT-2n&o;$`T+d0CP`EJ8<3l6Vmi68|Fg4yf%t=oX7>Xw+!>3;N%OrOOXNO;-mAT(#y#k^?o-#M&Vv?h@=Ia89M$ z9wThgIp8gI;OB;2+u2qj-v^(TfW0mUg&YTvfPmL*+ihaoQxcZ`%40)9ofj^agc5cM zWNS|VR28Gq3Mnm*4>tB=(5S3rpD|PGgBp=n(q zCz7XbO30J_(3*(8j9oRFaa4rZRfd93hC4IwUV0AglPWCR*ll{>3u1NFLH|*j zm?e>Zh8s3q>me;rn!jfls?Z!lnc$fkwy@#sS10utcU}&(9u4`SH+x;F=i64Rr=?CF zu~G8Gbu0Xjiv4f1Tj}{K%KJK>DAv&J31^^-$}MZ)OJN@*1KkbQ=u300r)tHCV zPz#*(!dhnMHWO!w-6>EZt}=o?3bX zm^kfZ>JnCv*}z^(Y^)?x)zSlyGM4{Z%tA?n#*N-M@%WEFAyB!v~NXuqPNDa*Y1vf-KU)+QsN(r9W?UlzZjrF8b5Q=`#U@`ikS-a10A zQ$^yUb@Ha$)1b1LmNWHwekS$IHB_xOW|V7>(rs(qC_- zf9QYxd=?)0=BEJTBfWNTL$U_g0QM&Se|${f)Bo=d{hxB~f;2(IR8(+hXJ^1X^mBIsnESycc$&Z)sn=Oi{=xoa z)T{|w0}6yC@cZ%s^K?GCwy~kOqpObFtoC{gWOEg(SAc)`DP#Sz;hZr8`%1+$8BP9- zPVsRKC`-s!I54wJquv$>{M1( z{^8c!R&{%(xQ!J>qqcjJ{V5x&^2H4LFBLJLo%SEjObh+QpJICXn#BJH{-OfZPLz^T zY-$0*7wJGyU2~uO;%i>Hd8#l^$3LIk`Rn z$Y2K~T>*lsl!*XP&ThfG2#Bt|4gwH3|CUhG{ZVKLDIy{gm++>}W|^7^!otwxZ|R@^ zehrXi>Fxt7)or0hd=?fGicLizXKiI)jO+m~$A#rgSQ0Cyc{dACT z^(e0kXQqYwSK}PV#-VfQ{Uez(2q6%e-|B$6U zbS7tDQDB}jQBiPkV1LSxTceM>AtE9gK&bb9X&rPe>;w$zu_}LlcEhK-oqV;jRB&__ z=7eaSXI$7p`7z$5@M=C3K<4tSpxOIj{U+i3b7UA8mAEpC)cs#8z zKB!%o_;KL*AiSV^+Pf_{5g<*o*)Y&l5c_r-J=K-l7{DIDQ=Nu?^Hr>%E-c%qr0t>~ z@-UkzXYt8l!6@%mE0Wu+>vMx2d2_VkXctamwNxGTKi{J;92ErvL)j1{CFUq8HtRTWlUtIYo>WMppl3qo4IcF!m#l@tz#PKa|0(VD(DE_)Ci zE9cC|nA7eo{+Z3eE*X(*8n(iTh|b-91g@wE7#G7kEBs>3MsUmQ^Zxnj3rZxNQ*o&k zM>8erBQhkU&9%*HpuKZ%2NNX(ALdq7qheIx?T|A9DbLv2x!iRQ0--UYIt~-bZ zmV#sK1W_j12snuQcju*8kds)Bu1}s?ZivqzSYgqheOS z#^b~DB5z&}dZvCPXlMYIwRRFrx@90LaoVW$tQFjKF(<>%H*&!xgZxO?m~XcSM&d&p zSRd5cqx{&ZUN`Q44SkFcws%7ezk+zt!OUcP#FTtG*3Rq<@q*pCM!^gVh8?pJTf=IV zU2q*;u5;qQHmsd(iO2CdhVcDr$DXXq9JRN2vZ4>6DGw-HZ$C%S1L{EpkpJKiA&k%O zC^+8L(E0A1g!&!InUquUr7DN1hv3Rjw?_e@FFJEuZgMz<=6Ht@TAL{A?#RcM4C|#g z3Ix3SK{W>-+qsW%(I#v99X%k=J9P|RrnuIb4TzG647_!3J)>kbK(5usvXmowXC-z&@xRe#W%ipAEIzQ6a3;D}?c{M9kQn~|{+l>#b z)z4QD9xLzQA8&>#&U;Y3zuH|0lDT6IVS0ffBM%EynaG}gN!TSHk+YrkT3A<_#ipH1SQilo&~%t+Ut`k& z*giocA~qrXK1nuyWis855nhqVp5DPGG)pK+cLc!sG*E)Dja^zqgU5grt9WXXoxYRX7qCZx*XvUI?=s^Ah0O z^1}CgN0dQN>uNAx(d0(kt+&&L{89BK_^vPf7QWAVG83wm_Y?)25cWupHaxu043bAi z&}IVk#ihl|esD=@kSw`rY!j)=yb07B$sI|YVQqOyNg1w4^Y2;N z0ww0h;WmT`&HG&6`k*!U)0egcP0z&H+aAitfRWof9CS_4@OeBA<9&EpOq1(d5(*!I z2xqm^Z?jjG5EKRiH;-qw92L97xw71mTF6GIbUwTG?-l9QjRtC4%qq^H6)SDqjh3P3 zsuP0rmWVbqMb3)$D!-&sWs?x-CSTJ%Z+IFC^3rmk2CP0##*!k$b+0F!Gd$zAilca} z!6UfBwwJk1VQ5WD$^bB$T*GJ2C`OAaY^0S)Q7J<-hfSZrspGfjR=dG*r$!tVpK!@p zliqNXjHz|=L_BC$_)m8an92JRuswWgrx07LPeI*KC2ASYm0T1eC4zq-5byueV0OMO zNXv=)9-$#vQxQK@h6IV-t{@VX_*qkrvSopuMmEwo(~p12)w+9!A(wK+?6gwMFJA~l z>@ixML{7H2On({E9w}sr_>{X5J+u{L3fh8! zld<)VT*gS;NCAh|hPh(cCuplmy|+d1RADj$q9Kf@Sh9Y5biEreMS*j>X#sO0OoSWu zG3|{#7*^V)dnGV{0Ggj;_uJ;bqN_X3h;xLvC1dnYGLxadiBEwyY-;ocV1c47LI04n zuNp70aKJLV*PYI&&x*=jMwA~JZ3$I}wUKAjWkiww$g)A+LvGUl) zlER?S`TJhH_JVTqbk5XqI7+CQz#UF`Zn3SN4A>$UqB~vri@O!ixM{w3dPvD#K3kyj z{k*~_6(XoG`o?C_C)4UVBRv86#ZJ|;HYB_iWA3-GR zam6VbGVK;_{I+|qq{z}zSen&rMoO${%mxoO>}nKeM3&`u1MOY=xp%Q(X)p`DBcfqi zdS2Z2=sWH`>jk%p9%o;o{CF8pno(=D%0Lo4L4Fnl;X|2Lkg(Kf*U=XNySUe5^af4+7UNi(!lUULMg;rEav? z>+0KslnBm_laF>TLgK|bSLh~bvLd--GvS;358$L9E|haeigZB43Sn(OP+ola4d;;< za_aEI`Vi5gxuLHQ2rAAsp)1eh>Btm-j3mF|7$v$@{g;pfpV_nSMWhrM*}m%Ym^rhl zQj-)hk;8XO4V!_hA7MzY+)0QK)AOl;yw@KSyiD2_2o%uT*I!UH`y|3yE|cG0cN^7v zXbTPgv{fkc@os)OnKU0mL&TgamrE9{XSCDQ;IZ>ajoM`o>KMIzz8&J{r+s+$Wfah$ z+r(blSO%?KHowrtY`1;)RKBZ5Z1p@URGzL=&x&IrSoO&LLP!nffzKMS*lBRH%db{X zPh)f|wO9&L-l8fb3bQbV#DEp<&y$p}ukt^t+qqS@AC6ghAo^9NhrF7K+NLEe=67lK z*~`CodFF>589R1E%=LO$7nm2*HhYj%jI9};s(}sk22xCyOWzTW>l)vOXLSwx$7vok zQmGQubf&TGXip9#Txuoo?qG@+KiMuap;U$r>Dzi1K8t-WHdx%}CdTD-+}_Baq2{5& z(nJ;Rg`!Q9^7P@E)!6?U@+(3hfnSaoL22S!a6NG+PY+uVg-{gbmvw-c$ig5JOxOFB z2@f&x!MN+PQm3JMl4@O=OgP1$B%WmQ;i zbN$Tr^h{AroyegR{UmMNeVofYyv7&MDvG!jarlRrJY5&*C36-{NGZ_Poi+JZ@#Zh0 zcN+cmwP^e$>ZSH+hUP#wZE|AneP}ks4}AgdmP`jh{DxAhdTPZEM5u85F->k?58!?P zX^&V_vy@%u-&Q^-V3hMU!BPah7HcY|2z1X=*MD#EW&fOsA%xWDmj$}w!f)&T+jaDtXjas zL_o5ke<-pycwVR6;s{TM13$2upy%Oj_<=_fuUL!*BKF=H%$;~Q^j%#-#?h~VZ z4|xK2h|qPOch5GpPZQ)So`Ayie|d-dt*9uwpAYd}%I|p5+U~wTOX1od5ij}T#$d78 zsJmXfehP~yWyKF}sB$q-8_2YD=+;w8!xsDgPMsPHo~Ol2av;;=7+JdQ+xPgu$UM0m z(Og_`I|S8aJHeBWY3RiJJrv z%J4lS(y1JuToGa_hsvrMB>Jm%9^*zXZ29Nl9*Wz)#7Zoo^Q+Nf)td~eH_GkLi<>NmSqJA37Hb~(!nrcc8p5P=Of4Q{TBWbv%WYrO!Vr&Kp~0`k60pn zQIdea6~buOD&UFIGMV!}bTSg*O#QqEJP#=;N;2I1f{KcdEaLj9c?;4fVkjQVvY7Fi zx@~EQZ2F;*e6GUTe!$S5Q|@s)0;;gPZOMKb*h>PE7n^GeiQ#K7Zrlhcc^TW=Yed%a; zB2z=Shxr^4Dr9qLo5GHR2VD*x5PVteclVDi&Tn-2kx;J9!(zI}Fw2l14bLAZXJNtt zp`)`?f%akc0g<=yowDatieQNmGhc^Qze58lw|AyRK^SSL_fjd>NqH~{W zSz4E`){XtC9gUNay7?G6iRIIPw^FrItT5Nkkv%n388_|tT z9PDC!$`&jI^EBrlQo5WP1`Qwigv4%1088)+4Ja(|r_bQQq*l3@AESUf7R(F!ft^zk zYjMx?uxKq|PwteU1ifyH_G6C{&SAe=2E+1LuMIlVvZR=R5UB$*5fB3)s^7&0I}>#{ z*O==}XSwB>SzL&_Tbaqi4i>b_WfbtpFiCR;FXhOhN;!8|0-1Z%-ju1=xkQo5G93wX zcrd*Y{0T+rg&GJu=2>re5-jcxWelUExurq&JO?xInD=>xe@ z^9z$o5=aiIO{^Nv<3@~%uYWz)b|+IZI*63zAnzX0M6Gk?pYLMT9*!|oQ_$?z6CJd# zMcv;Rf2WNgA&^`C6r6Zl#9JEP9fr{++l6O2i{ab$^}67S&mr3Zil^g(g@1424G`ST zETs4^6C2o-ipna=usq12HyJ5&JSJ#J!6xlx!{;|D$=-nARS^Hx?5{iEv#r+c6q4nv zZNPE8cRk%u&$ka#@ULdw)&9RO8W|qgFK+4{EgW$AjnU`r@&^;Jof6KlhP=So^baK| zuluM>_umK+Fug5VXtPjmk?B)K6+@M9iLBL~bqBn0D;Vj;9G~*EJH)!2Ir8m^0PpVy zdX%491}PAV0+Eryhhyi@Fil@QDzRo{254vJMcD3tk+jV&O!3gMW+mFI;X+bAlD~5~ zuho^Fj+cIL1Ue60Ar+wnk2%IBk*sJ}eM$XUWZ=iZM{!Cp-^s^`cauRG?!h?$o1dr% zdRpJx(*SclY z90x@m6dPEZ!oaxNW^aH0C`Z>H5mfbL!{Hf1)xt>*qo6xFXK4vxX=ypfaTu((rPO1( zeT8686WWMoF!rvXbV!O|-x5w4tVj_v4)? zab3DZVN44CcO$DCF*m(2$f+HM(B;~v)7I@0mnIHMdAc7wsai8>LS}}UiabZ_TgNen z=VxBe2=>p%bCvcfv3lHd-1Q&;(DMW7P~o$RMoW8D9AiEAoKcE8Qbud?l6UZB&sd>G zo`s=e;cowzyRJJC^Oh6N?clAY%dh8r!x%`Z=%J3>?E0f~$8Im)yy_p5Vy^Iv$kY@J z@Vu6S*oX-|NATv-cp?~op8H8RT|Z`?a)K`*wXY1+3}YPc7Cdv5doyTzZ%Sd4qhB<* z!bIyfm0UHDt4%M)sJm zYr)Uj{xM!z!Dnl7M_ZL5$!yV0o#p^T}A18M}TMXV!FO~dA3sD+;ihSLR%=DsQeF~)N~ zXops8<=M~2 zW?Uc%qe9`|19Y!RERo}fx8m|SvpVpG0}10gJ+`OYZISWa&q9m~hH`CZtMKn`uu)F! zBEGKYh_~JUS^0p|?Hc^~TH$fi%xO_1zGQSPI~?H-&1goM;%$83869hM8I6I@bEs|o z`C_MsqayVQ$EWcT?{z7c<54$mXwG}g>GYYWak-Q9m-TUroO`ncAw2R0G2OhrDf^Ud zY^ZNFML|o|fLHb_f!GpJu6HwI4Y6(HBm$~v{P%5^sa)+)lC5GH11+9>rkEH7V?p_n zY6pE|NC^fffV;o1nWsn>DU*jC_#mh%)gWbSs(;aI#e3OXV6vI*Zq4k2-ahLAIHapjmkPyyeZ=aW@g< zFvN5*)VFnm6ouhtCg>(;6~h$Rp&2VtzN>(e!0rx-FJQd@L=5ye;69m@M|he2sKob9Pq;_Y8xF`@$^^xpi{ zyM!X{_+RW91g6I;9H|2CAK{~KX66xj8QM0NQJbD5wIGShcy}rStD4+HXvG}JB`4`4FuL*Gsd;vaV!4_8yomdgfu+=Bfy2(}!Hi^Nm zI=2w#(41&@U0t*9RV7#eu66wo(Xm()K3}VRNbKFnp+37WlXb2D21I;Uy(5=)uAtxK zL#PwV69*?67J|%P1j`*u_*vzKo9iSrI#ceneXq!d3mEg?2lwN9@W@H6yyj{7*r_FEWi*FY=+&5WRT zZ?5?2?en*fu_SkofmlZl4?ZiHTWK`&SyZ@aj;JJwi!E8H3@6%@*(|aT+5&_M>!8va zvE%wT+Xe^6u+{9^%STxyQQ_aP!!ELX*GqHO<}A)wTZVO$C7+$H;zQ&Yq$=*Fma`FM z6zO$AOi>9rSxD6{uG6`jP{bV

1Oz>MQWP?&0H+?Fl0xykkEo7Ou!4dLH9ZMW#=J z9jc+XnekE}kG|velbUG(6z?tJQgY~J%CubPzR4-~XTp$?{#)&!+-q&dD?82s3FKeN}t9Py!E!&|{H;>*NlE&CWK z=gHn@;(o8^Z&mgg8@A!gUj(yv_X?!wwbL&6pfSDT8{LDCGmkBZ!|vgI7eXPy6YFM>a2rBN%TEBJ#qtW+JDXL zg}*b~59WKSj`xb%j9TVc;l3vC#EbHcZGpxKt&lqS@5JWK$q&6yKIU~rxR9X{O>_CK zmv|R}^lxO%=4-z%No>$jDJwwuY`w_oS~cMN7igF`?YzW*L!^^kJ|%645Uq0P>413v zEidvYfPj`sVd%pp-sv~Ytn2C7BliB00>k^cwgL=oRRyLgCX-_Y_^u}ptEw`jAjvabx_Qdaty&NgaU%XzD7cnA&A zSWS>A^T6iW zcENuQ$X2(RY`qZtl5Wb?O2JkwO?!qX5N5KdL^oX=pYJaioiuaCYK)v;pUB=Xd!y%@ zb_-x?M}wbm7PdRQM{Olg(K21@Fx&OEH~ElsugnTVc#yH}r91#qQaI6oY>bK7$iX8{ zEAFlXX|U}^?N0bQoS>eiF`Aj;B|_-@xk}80hl3*JGu|?1j8A_KOBmtt&B2U~#@^{Z zH4VIB;)PsVQTx&_xFkk&J9%cVicl48%~JbowkqlMkml}5tKlMtLRD0JAtBlPRXHz6 zvT{j%(6q8z|H}*K)IbD|qO`KjB!_o=iS)mZZ`{8{DCGE7ws0y`Zi(h-Be3R#iMpKK zxB(+wAJ0Hj!iH^?E3`W^@#4HA^u4|`Z9HYh^PH9AYyFWOZX{udb)EiNUZaT{H*tcR z*foZ!6R`2{5j`*EPl5eNcXgej0Ve5FPMAbJu9mBy^lpm0O6%eGnno+MSsL&KwJJ5J zo|{`cRydpmjH$w@^|`F&*yL5=B1efZ&lf0y&tCE~z@N8Zy10_%t((LQlz^%1y=on2 zspvzFn?azyK%wZn16}UypSS)8&Yx1L4-K7+f1FOSgw|b0TmH4Xt5smSb*WPG&GtFDp)~2e)aPAsnmM&)aV~CWbw8_Y1%AB#*uBaO%#UrVxN zv`a&_W6jP%OY2J+Hx7o^_Xqse>cq7LC7aH2>LJDq)PpSGtRN5cQUCYJRND_UXUt30 z0_T7`N-Z>!peB+wqm?K_%(UcqyeNJ(gW{$Belj#du>Q~V%fH=rq+l#d6#G}t>r{5E zayzy7w<}C8{t2cM6W@v8_07)*CfsnAy?su8BY3H1uJCCz=(WZ+=qUQGxX>UpV=E>( z?x#}6@&Q_1LncrFJF3elA+*lmCx9#~%=MtXXg<7Zh1Susz52xNC2i1MT=jIByCFS~ z7t!|%n!mi6KDi8|r6w6v0_Y??ve5=(iF6+lmZ6K}nOwC*Ome376~w73`lYO=B>mY2 zzGNG}xg10Fc1|1Ls?WCGj6eUJ9o3_UfE8+OE=g5t|3RbF7%(8aE?Auax{x-A{uteF zxtT*AxDe(w@Tcwv*_d)5{Yt^^q$r-;-dP9*$qlm&7G2 z0;Mp{QsN84)4081Zqf*KOGpY4F`bNRF>o(7h&Z$9=>3Z#KEtEYD{rnEIxIzYl>K?t=0;hy&TGhu}b z8e{(&`*~|~5c^47;p)w=Bar0D1jotbyBkR*g*5=JMix6vwoqVPM+d*CG(%{9Nm=yY zZSYD`7?afu-I=c&UFJ|*)Q*iJ@nKu)s_KBp3yV}{oto*P)@{uZer%Ty13QaxUdH5? zkR1>lZV^`C{7I{eS@-fK5r3_YMxK&>=w{=S8RC=quvyD~6PEuHk?F5_l}}c!7?2Cz z2gM3fh_r{q$n_f6>~L#Kd&{}cNq`(B%$$~!`0VIir)UYY#iMtOm>9*;^4;NU$XtC1dfokjGoN(ap}*U?+rK9Nh1b^c6qQ^Vw(-lPo}uH+NjIBX*IJ*Gj;T zg1_&_F9}lfX$sM0(zv^~FHQEv>wFQU_8CUqgm`%ZmgIEBHQ&I&LIFD5*glfmvP(7C z%QghiOGy&Typ{Lqw+Ni_70+5ahDv2__H%Xm)-S0L@^h}m875AtA|W(7DSvkoo#w{w zt^{JKxtEvM6iRN1jdTYH(ud22z){rVCd1zHhs$vK?Wnyi&dCRBog}{>Q3tbyey-&i zNJ36V=0})%%j;gKdXXCTW^ugLJ!UH*IH8zcTxR6ExJ6^>e7 zo(+y59DwCQ4^`g1|H6{{CDNC(9*_LbOI(h@XhpdA7S@ptgBGcs+aEsQq-t+3$`kR)+Zaxpd`;uF zbl64Vf0=Bg@@J z6!4OloXi@-mRtb*jF>^v_@{{XWj4OJH!u|87TeqLgvJLQFTGH@7kt)XWVkmR;sU{p z3vQ(?4AzE*Otb&mf{CE>Y2#$LFLP`h;jA1cm$JupKlk6Rz`HrlVuU>w;Zruyxz2vq z;@*2|Upz|I`+M9kLKWQHy~rl-L!u$#K-jTLVq|HF z`nU78%-2mtk0imwu0WXNIUMu5Ybd7{edF|#pXU8qTdeNJDOtGXZq5xobwb+B4=YDu|g z4)ZUZ-IC;HYO;|$2hry&3=BhFeQi~uVWrp*kPL!1QB4!(rFYAx9CgP@7jwamu$!jd zR`oqCp7SSvA?6h6(x@Bt)!TyFmwk(^+tQrPoug=!!ag-@tj%6%Lrtn*UCQnyrEsujqi`g4@e4O^{susM!4peUAy8x!c zm6;}b^)gjdPy;_hoO%*iM!hO_psYq;eN)dXeIvY6*R!wwTAWrLbsaDVK`0<3^S^EM zc?eR_R<$KkkRH0b))IwrQj6mslWw~CeFG@~I-va%GJlYuLd?ZU6_L4y2*{wZRgosj z$GbBFG-v|J^b47zh7{^$KKYo+Aa!4aSc!-C+|Mt}4d82rD$34S*d_T-1BE{yLJgkZ zJufUdmpD#g0rg_%TkbUn{-RZm^=q%TrhorLEQM(7mDO&<0l8J>xM+mt#!fumxVp!C zJ-@^dv`D(XcJv;hM%vbA7y26S4v(ao+Qyp}2lhFJd-ixtc(L2Bz!!80>0JKyg3R=w z{59E50BCR&a$&^y0@3p4mK;I4fcl!eD<_r(@dLDQpkxu#pL~?)VAQ_bEN06w^M0X9 zGm!?~vghLW+~xvgxT4`*i7K}EjjZAsil((LDMX}2G#+KiHpW?Bux~DXq^e?*{N9t%6 zV@q^)tmWC7O8k!z_&0$Mf)0fw5JId2B-EAuxeZ16=>PwC3G?gn)L(3k__ z{D`qb6!e5nR{9V#_cwG-?dJM1Ht0VX(Yq*yYAL3KH}-8*;%3Gph5707gnar#o?c*C zSu+h9gq+y;e09(EDSySXIwKsh%M%NjBM=Q? zvm-u-&F)ukI4HyA=g*(K)rD+6@1-%@zI~2+3M+efR=+^}+Lg_%Kad*!NZJ>u>(=ut zNebiFp6eIie@)9-Fc*wjOG^N68_~qKV&-li|IwaRF}bP99d%-^{{olF1(zy9edgWO zLXLN&SK9U>bv@4j+pQ+`@Vgd*Ve!RO{J~oZn#%J~V`DR}3-O4h*Xn+|;M$@sWgP>h zT4E$fFnCz*)7|%pO*CbC(1qzGZpfSKl&n@w?&52D5+f7PP<}m zyCQ%(&d5LRrkN1kP$oUx3pzXsbk9C#rc?}-HC?52pzRd(?8k9^%$eKkS_ktYfRopF z0ptgllLr;15hFrb5~-v6#@tV{X81>LgOe%2qyD##h{)&tRrB>M0m59*`<;*XJBgF$ z(^7BIcdw=)J+2;`iU;M)G&|;wvu50x21yX#f}k;~yNv^~F4<++nzLd|E1kcC$ZLE* zWLlnk`~dJS`d^7-@oZ>I)g%4U~zS(v$k*-XV;s!{{6LBP$xb$*uW{JW$nr$D-flSqxAI1z3AO-lgYoc+@UCfWyDt{k=eItFyi2#!6CwXR_ zg}HHm>~)CegE^D>>Fr0s%Zp@eycwakq~Y4(10dfxRyr^%QH5k>kwR?n82_1ZNs>Xw z$$;NW9R6U)$9%rI@Z;%Bz%QRw>uhs&B!yMoPX8cR>JXX?t}QEb zz2_C`L5L2^$X!Q7#y?7%LiBn^`&(wHcEDnafW7z&AQ#e7j)wOf(lUl(Bs63)j90hc zX9^@4o{Si}wbnO&U1jXI0E*%zm#Iu6Mnn$68Y&TM13ze7?VG;N6fU^zc!q?f1TfLE zVgSk3LX)=kk?~A+Cpynjl%H+hs1bo=E8lS1C$`oqg=%!AEiZoPpCi3zdI(?0cEvOc)^d<1|8)_t)me*$cJaBmsAF%E!889nwq-XKUz_%mhf6A2;oQ zL=)M@!|HyFM-nQ8y?%;4YX;IFAJpUH_-;OW#e+XlGhKQ(L#kbYe=*RiB!T4iz|4f~ z>)NO_I}#dr6os~KpJks^f&=41R}7a?D!Qv7Ph5!4n;nma`~frx4nWv>rLWi7zTaiJ zZ}S)4N7bY|8i;2hDV3TQ?!3>O8Jt>u2VpS+9{JinBK#jFzR$X4s$6-B1Ev+)uuqAi zWU9%*`QP}x_?G+DM%3LO@9MF=c=?Q8N|%R!kBg@kvo%!+g@&h%GFspP{%H3 zs~Sj8Bn>IdI&+kILGf5E5z;?6YP#XqBEIhK+aSY=0NFUF*zhCto7Ves)x81a2r6Gm z7r;hzjeTVH#2cGVMRQP*T#)7YJmoynNR$Qt0ZgkD+d9=Qhe}iEmT}DV|1* zOh}{=`urF8+z{Ux%-8#4+v%{IG|9DfD|Ps)$-SD$Mr={9K^t2z$%wQhw223Xe%i0#p-td|dQH3#YN?UChEcoPj*YO(!5DM1HB3XofZd ze>5o}?+m{Op9&kkz{g9_*L*#=_6m^{G^`EWY>lP>xlaw@|H8VFZ$1u=D@J5gV{i=& zeWQ(eyF$5dZBD?)g0ZB?A`9e?fkm*h9p}*kT|=Uh@6NLNSH7-J&(r{X?#QCn zNR|p#4<4MJuJX=XTV`I>7Z?b_(84OGOYO-}NM}f5L$Lbop6^<`G#99jIRnyHkYgXm zyUR*DLo)6yr|d5biB%uw1(1q0&_b%dzi(w^KMfJH^t$bT8=eMz3Yo2e;lrD7D0~U-b#Mumt?&bv$uPc|xOpUY>8P zLCX^^VGfSBL%?i&c_GK}xU1*GBjt+|D>t4tO$tkw0iAq}2WD6tgu;m( zVp_fGb$z-7Be}|Fyl}vBu+%{J7x&C}sw|UjrH$KnE$#4Nlgzhmzdcy{3$L0se(ky- zr(g0%w;tU#356{7Bs6^D>L(*GR}piQRxrkH+-bC^xWNkI>_q3qEDe{I(t+0PbWpzC zeb#CWW>K$mZ2xv#Xz1ZS^NeG3*S6gzruGU?3i=-EveLJ#@n+Gr{<@gH+$#O^v;ew1 zdLYGNX$O7TP00kJSL>yXk75fs5B```qiEs?UkK}-%!%b>+r6t=jZa>HBp&Cv2!8Gd{8 zwHtwQi34;nEf)BeE8cHvN9H5NX zK(?Z46^?rV8bq}BiR)+jtlG6}{(WgD-5Q^MZdp>= zlQ?mPv&s17BMLJaAoI+BT1yK3MA9F9|0RRj@fh)%l!dh5iBLpp65p`WT|*uRB=|Bq znoa6~O1BpfYEbza3Ryz2ugTji?rW@G0@7IMY8p&48*Kp}cu@_b5eIl~E^oBvJ+dz@ zLC~8%ImCXX1xua~&p~vR4s~s%#Eu#laYKB9j9$M~r&CWbQew3R;GkBEm0>Ff3t@;S zIG4|jg>#Y&(SKFaigHCtqoS#T15(Y*@;SokEpX#9=y(pcVKrl5e~6mO^=)yxLW1cH z5xFTKC$4>kVOa9$z2lnzkdte1dqAxyEtne73B)uCL?-0w&g8zVqoy0LaMNYp+=f;= zVtiDKBZ(L{^axW)iR32Jd#!h&j)6*IZyZ)~Iv}yjpvnB?Lt?!B=@`&2v$Q{li^BGb zO&0itmmIy_8|Cd}k@#egaj=!{?pF&uBo)5tFsEvFN!-R$1|=q=gI|q54Bar7P{8=yaM@{ayY~p9+Lm zJ^vcM=9d*~8pB1<{+<+x8DctEYI@)0(ZXPF?Z8K!XV~jf%_#? zv0{F~!zz~#EoB==DM9kT;q+LA>@%|k&Ti8f4PY*02bHq&IJ{k|jgookgGSbYxG_%( ztjqMI&tm5sR552OP&a}MCkg850XwFd&jGnkj_KdzWQS;_&wF>W?OBXotEF)UGiYIl zzoE3)XTkS*=+~Mw^W~efnju+JNx*G4DUpBZD>GnJxKN|1mZz`ws_@kk@Qs*KAqh>q zn`dIYFFGnY4x)Jfbtpi%SYy@r45#2;4+XN3zAj*2DDj65`uIB7>L-#}KY zYbfmkrn~zAK0l_00-?0yrYz?uUkO-#V4gc~C*S)V@vg+lipY*)_21|G*V@l~a7H}h zV(b3lpN+`GrT^Abc_oTa!1GAI6rB)$S$g?l)3YYPMTz~W9%}8b_VQ`WC zlgXIG!$x~56qj#WR+{*2{7H(C$?x%2>p zCjfA8dIJxA2(^}p47h=_WaH`V-5;qQh!CvcI(T|}dut$BfzRiC=vqy71OYEMn&Og@ zWviMb|GIE}ICF=b_!#QbSNlG1oD69{Xf^-Mg|McYnRG_dajOebZG9-M%MCu5t7EH( zdq-Wgm_mCstsoE1gLTbdGv||kXYEv*6_gw+%V)Oqi_F`Xi1(;rfH*uOspu^1p82Wf+hm0^~}LmMcaXlH7!_N``wOp9~2%D!OiOGFy_nje|CfSN!eLEW#+W za6d{@a*<_QN|}y@K#ZZA-eJzPFU;+}{X?l3uY17z?AVM$#ziaU?NhHe3On3VK@7)J z9g_W(z(YUw2U8pMPy1PMEVr6_#dMo&m)2*fFID;ZZU$;HSWr-J*D~TFY9a4dLxyTi z7l5WbgLifzaaa|Yl;-NH0{@|S2sTZIil}j)wzY2k{;FT2&yB*60X90>#XeM3IH6)& zA~C%|9m^U^8rZ4*$@LN++Ou9TvwK>X@9=(q?}<6J=H2vSRPhOp>LTjv3}%KvUxGpC zbt6rClPw&-63VxvLg+z9T!h+7`@h#%+kNv`DC0L9J%mpqJImvsmY=DFqiwDBC~i7U z13oFtNm7LkW$XRnU$Tk*#qKzKsUqhq`;!^$uJE^qH-ww2W&`IoVBy({iQ)BvZ-I6a zS5&#w3RJb4;c*j2o#8r@={PG*$k;zKGWTvHXb z(QD%kf0BN!toJF{O}+W7YBPpL9(^?hV>^LRnpUQhbqn~nExI34@kS#noNI`?@-@Xl#S>Huu z5IPF@9zG=pp4PC$h6z$thA5 z&3c9P$@2NhGngy#GF2Oj=Jv!WVdR7RO|eq48TYXU$Y|L2@$ksP&B5`TIaM%@MM&H8 zo%p`s6=n%*GPQ$T5{ah5;ZKAF9;O5mU*z>0>#$dip@j4+;?h7~W98x|Eidux>Py&R zyig^~Q*T7oK{PRRHmqwdj)9u@eN&zDK(&~l(dADGRLDI&9P4?W>)8j>t$;98k{Dy$ zL94mk>|VsFm4F>{7Fth6P25DUMtgZbi@*tTl2iu4uz2|CcN8_eg+TyY%n(^)nDMU2DDWRCxd$z4K*vpVhA0*>-cI zVSb}xDQ3+H7|m*~;xpxMO$FQOOETw;OZ$6J3+6duF(@uHJHYdIolrE`(+?9H8?IVx zY`Rumj1bxp-?`iH+0l8bx`Q&P#X$H1_}3^Ef($f*5QqC~y;pO~9YYApK_(|lE_O>{ z$X{#Cvkh_DdLpg_!bEuOYhS-mUykxuzhHwrC&YbMx3+E40*uj4N$N$*(fTej96yjE zWDgy9RMu|&M2|A8*Y|+ZRv{HvFV=G@9jyOhiW6ee$~<)ylEZi zjE&{rRzmM?skUM&yY4bnx9Cc-)TOm^ri6X5XaAw!UvW0_{&AmD36l^ z-p0xm&qv*?R?=+0W}d}+hWyFkIRcg3a}b(;4IvOxzpw`G4dqSQI>z~Ha!i^{v6EMK zVLBoF3FghqI{c`|u(*%OXrJ@GfHD*Fob#`mqpWxdVt1j+3lyeHRB?I_TFGOebKa!J z(<1z-@2@{ouVrmh7&qhGCJ?~nTWX?C17d}_&Cx|F?Me!dCuwR= zVmbC$#1LFRGWEw=<+;)-(129z`)Gd*_2iCGXSQs8ld%{~Z8%J?Y1G=is^)RX-%(v` zldign$KUO$?nZ}ed#A-4nO-<^ z!~}WSkt~u>`v1xI@}hm6p%3jy$J~@#-zPT{fEDl)Bt^A@^MmkJ~oJ% zzf|;bDKlOND9B8QbUW)~6f)!Xm{KmK0;vF)=8g>;!9jXQq^?uHzO8)HTe~E=cJncs ztfU@phzv{{A{Zsh_4wD3pM{BW!wg4dKa?-iDT&`@MZ&o9s`@yvxPQuUT$>RYmcuzT z7dwF%jeUpSLxz{Nd9kk_5`p{$8e)VGc9`4~Zh>z!ycL@pZ4-$z&J0q*B_75GvSV|7P4jxV zZr9}y>S!@Rp+tZvjHA(sIM%@tdT&#`!R5d`%<0zUTI~IE{oO_O56lf;bE@Ar=^Ixv zSI(PD0&sH9sNJi&Db8-ifEBSa3phCa8Y#Tsu!CBs9E?e$kg&+vVTglX*TS`gCA;k^ zI+}xs=xea^)ePou(m8lCKWV^*{aCMmd8mnvhBSOK-B8cGL^q>%;9q@#GqiJ!^O zj|EYz?k<02*P#@Is|8`C`A5 z2=xMmUa?;)6jQpo6vm;1`A^T26^vPpd8!cT;^-1LvzHaGtsP^&Ye;=37ciw`ik^5< zV76OCgOiAko*vmYebN_VXCv1CKxQ8kltNeiKA@G9=0%j@#|N_b+*t%;j(+SD-s_<4 z8^lBH<1Jnehj|=6Jvp!%CDyH{Q21B?ORtf9c3o;to}}af*DoPnH~ipP%+Z@d!MCF= zT$g=Xhe1hee?9Y3BH^fNJ-${G48f-cQo&PZ-2LDm*kmPy(9VM4)4M=8kKz$Q+$2unT*-*QXP0ue-9cn+Z_lU!^{4M;*^Y&YTvq&IeJmBS(` zez+Zz52xov^eu|(4-c%Y{@aqm@?I-5h1=1f@VB3kf&_ImR-nHwI@9Z&4t}KLBYJma zV6JivXQ>hRmCf}4FZ{l-L!By%InfzY4IloMq#P{0qgw_B&<*L^w zGaoJBy@aD+D`qD%+X>-&3{`#H>bjK-%0zH_a3_J3B=Er&yv#P!qQi!K4fan2>ELG3 zH*2tS-&xxrJKeaF8VZb_r?Fekt<}sIJd&r|fo?&`0~R0tJ*B!J<86qoE+s1*UXym7 zW_i)ntabcpaCp8_j-u6ckw92rE0QL}c19dQe{g0~wBl`6Ey9xQcN1UC)cIvKddwhM zoZR%t23v#G66VVjiuhSvFth2URs*}8JYa+2pOv)Lc?w~JGKIwLhP|cd$@u$gX{Bz5 zcRCD@CIQnGGZYz+>YdIOcu`pYNR=1qPkUZ-r)GGD8%truLXVel{oVA4XTh7y^JbK}l2_=7L;Z2Y0-m4E7uG$DMgy66?@KE`e zKb*}*oDK-Jx2(Fc1|&s};Gt%mPndt%+u|S5#w~a9Ej5FqzOx-~BtqOTy}YG5(t3nr z$n2w_Epqy1RzB!M@>_CWFrNL|*aac7MJ82)&iJ>lO6_jJX=w!V^72z9wa_}v5NTJv zM&F_ke5-7E`xw}bdFhB~1ngFku-+4>djRd+oqK}f%>9slgmbr5-KaUH#jkl;O%rzKRtl|Jtn z(&aB{Dt^|5&t^hlA&;@-loT6;hse_my$TUK=5^78y?3{F;QbK2FE2v0Z2>6)HfKLQ zH#yWPPYh0-EWImWK*+t@&tje(L`z&sVZ@~_yM(|)8YBQ=yYZ!>>eYwT;3-$I(VqiT zW9210!-)@|moL0SvOf`keR5L+R@8bQcXNPt0verJpl)~J2+Lo00oPna@RmXsD!G@V z{o2dU2P-|&EnTtUh2~25&0K>!IKCLK;-`BWgm1+V7mvoxzeNrmB-pG5N>8u}3*2QG z@o=@j{WJis-Ci(xHk}b*M74;b_YRLJ&pw_k5xU&{6gN`Ggn$k=|cVYCf`Uk z#+tW=2bR6ayUaIKr~`yr-r15UZf^ombMZ{%?jFj02)HokEz;xJ`-OpE$V-H1sZl>w<{Tlcb}}+ns4i5b}$A?WEE}ySc0U-gl z`5n&P7=WA^8rOL_wvF^9ansWU{dmC5-mc~%gzed!CqY(o9C8CteYMRQtwqZT3e1!b zsF1yW1eXYxMRzWb6#}H?-%{JTE`J(&CuhJbSt2a(r7RmLL!|+^6miKw|3&>P&ZJ8+ zpZqEpfps*sIzsBv+Xd!y_}U&woJ~Vw&`7$wt{y4IG1fk=xYCSIM1cv>MvD+_y6zwXUAiC@mU)n9frSXY>T^!2`+=FMhn4=apaLU-n4xv}?`4YgFp;^CQbi~j~f4BxnYAH*n8Mze0uLNv{+h4TKxF$9~h@^T}dFw#z7v7wGZ zG%*lDs56nP*wNJtr*c9Tie_FXi4$`7)sH9|Q4bgD%wv)blJ8$wo#rY1D<`Ek{Vs4O z@M^Oh|1uay&vrF`aGwOqH~&fXW|n?@f>4vnPM&wGVIi(A+@_|Hf>?IWZ!!3pH17;+4!OOMOQcfY1sT+NtLa;64vK~6Sk>uy2*tKuz4%x(o^DZ zi~+}Alg+YhNJj>}g6MX(ZzFH;pfoJ&VNJ9FLZ`fbev?*OK=?p3oA!Z2>{~=N7 zSV$(&e>Z&iAMD0|8*6;{|N6!+5FRe6pkD+8W|4+PgJkVNl5GCEFRF_<7C;P!5~8o& zoS~TsviIh9@8p2Oud^t5#M&FWbu>|B_M>AmQZ{8?m6b;vv}A|wua9~-NlcEIE^M>w zi?+Uy4~Ar}{Q3${@ykP0MQ#4(4*~SMR>aOaEC9n&U#5+LkLm$)ndbi@x%ogiSgt;PZl94XX@j z-~Jn!EG2*q%+XYsc`Z!O`Ggqg{pRmiRsc(axw#%o#4dbi45&4U#`-u@r^3G%nB_f- zox@dbiRfw&UnMYT)O=?;z^O9nG;55e<9A8g=I5%+ZF-bWI}w<)6iJT)2D0>Vfma*j z#5AI&s*W0a;cW2=&vrJJiXyGn>ZouXc*0zZS217o6!@mxNJ|y2PLgcAL%~fqa1CXe z(~U2vwExXNLi;~rsodsKMCwtosn$lT#VHiuPJqg@c*`*KJESe`gfkcgP6%9*5(YKAGO` z$w@N_KD^ug1aCAiZQ8(M7r93=v|;jdCfr>(X%|>_@@dePPmqfM-glDv@ND##$5i%b zVpm~=)R^^{A)I^R^riQ)K}+^VF$>})%Sb~+k^C^!B>LtD>)kPu6 z65-w>(lmja)3-K->-dQC$!PhP!GWL~wA~(hu<_kreQ)J`4cfuyE5p>pIMe9yTsEr- zBBFy)1TTg8=U&5*-e)y0GJQ1FPRbfBn#^{NH#OiMq&m1C zXMBZxnwk6BvYHM|r{LF5+QN=`O%XM+-^!X2pJTl2a{l1#t)GZi;C@x+vr1X*b*uMa z&Um#Ah4ofA36T^&;e;`3CN}<4Mf1;(@X5F-gOp_w)`(X;?|gl2|JvVXyjEencz&{!Gl>D9fypahBjKgvOvviR;}Bk%e?nV7Xh9P2#-{dt@^VOB;7qm}=OW_TWl*U}R}P%d zO{p7_8gckw3aG=G!MZ%A+|iD)kDJoS3T>jzR=q`Yik7D1 zy4v3zd-}Hph|Ll+yY2P+rFe+;y`U<zF6S__!UTbGW(UxKYnf?qrQ3hb31&S{iu zx%RA8oB16XyqzgBMbd_!v5y|oTmav|<8t}UI3c}z* zEn|PnXK$X|#IiI!im9F|p9h|U;47!sT{@PUex~QV`(FegdNx>z+itAHalygioBi)e zOb`jr*p~+=^ay@PKyqcf$?8A}VVwQVR`5rLNm~wYTgry3|BJo1461AE+BSg@T!RO9 zg1ftG2=4CgE*pp72@>4hA-Ma--GaNjJKxSZC+B(I{<^!WtABM>|ASq{UX!)P8gtHZ z-}4$6rF66XEPTuGO46If3q^Uyc>;|2P8_sc1j?p#VY~+R?cF(O;tYKLy{&lnuea~G zYd=OB-GxufcR4H(GAb0)#o$c6gSvT*rXaZz3uUFqGplIYrf z4;(jAej2NK+ajI``WZP?TiVUr>&a!X+6Z3sHu!X3YoO*$+-rT3O*1ga;H4vl+!BJ} zM8h2uWHoc1jLo2(3$g_jsXpH5v$`{o(4?CP*ZWii{uk4OaDTX6{FXoC<5ly^8YL|UiEfwlxG{| zBwfDbz&!jaK3^2TLi~u-*@cT7OP`ml_a$!%mS#x4Q=# z&)92C;DqoMqJAE>GXgCv6x%zsGo6 z)(kTf_U`i>9vTu9?iG_gGY%7qb6q#E?Xvo+l^CK|R67KCe{waK=^GXi^FOQ{N_BJ? zB$IDsA$8W_Uzhk~u9W`U+LB$AVlrv!_v5q!nIfEX-rPEKummG>MjsUDbsk;;je=&8 zmeV!XycpB3OCURMwTi|8zZc^~9wE|ma`pm=TCW97t+`o%+>f06GZX&HUi9f0eS;^S zDW^WVZb23fiJ`(YVB`5PZS7MTva45cuHZNM@+h!$`N?i~D%bR;!23M(JhR+gb(EzRZDfAG>65clzJIb6(f+wTb*xjVslN3!OF%9aI z5=O#tL*8?h`Fh5uMeu52kBprXip!iLlwZXd=@Q*+hb$W(U2f?&WhxYCCYsyn+iSUy zlhs=fGk7$6Tgi|UbST- z=8+omYyU?Of4yr4*|>Nk+9J5#9rer{ib{p5X#C5%_~8~2t`h$Pwn5G)TZ!35Wz}Hn zso@jeOT1d&c!KJb?UK4hoj0NtWc*o>34ilf3qEIkTc-kR${Hd>`g*j98ikuEKd8rD zP6FkRXdZY7$}tK5VkyAe)oRCLN?2W}T$Br>1mfNs7!;afAYu0kIUTQ{VXJrWmjy+; zIm{0JOVTJ#I@B)N!4v7Ey^v?m(x`cPTsWBFw5B;<--FUukl z_Zc3QEDpNGJ*D|qEnV1vyY5MiIa{YvxRYEzJK4Tw-Dd8MM>(-wpGOf@#^Lq;3`s2$ zzF*C#92Brp*1-A^!xqy_Lhf z3dL0GUpT5j2-em~;g)B$x^&6!!Cjuh5=oT~LLn)SDv8o9AIM9;vOy?UD*OY~$fKR* zbF2O8krKjNq)o|Is}gmGDzup^mD`N1A79SXOQvj8bkJN5EmLYFscgB+(GVr{7bIgw zXK*(SOx?vUW~^;qxNPzxT_sV)KY%n(=xfVJzkdu0bXB|Fu_?uc8l2n>9I}t}66OyC z=MlU?x|%Wd z;>SEu0cY#%cPs6xjm|e=a}Np$1xO}M(JfhjGb7YC{J`Ijuh)4|zn)dTg&1J5T%WD! z<+zRC-d|S&BkgWndGMT}>EtphnS^%a`%wT0EE zDLnS+oVoy!O{8JaHH=F4?^NJtdctJ)hHr6B`2!nG>3J_se1BD*Yc6o2Qr?X9v6gL@ z@XKn4^5QONqav#4%3446jQ0+UP{i|dpHlm*uDoS0OwsX2l@%w6mLy861ZV@1;Jt6n zNA+2I#OjmtkZtG}3UrkrNAWz3qzZGins{w_o~`{#aS_UKzQL7b^!!l-7Mj#gr3jCODO(r3** z2^BUg$n8R?p2Zq2el#c*v;ukH^@sNUqU`c>yPl2vQ4XmKZ6|O7owX>3a_+4bn+!=0 zUG6OR8waPJE$>-_Y}W@sqydtr7I4&FQ6;BMxjG|CbwhzwLOmYJ8+;W+=)+GbS$E61-HbXq9&FkTH{6ENTjk9C zv7V%Yz7>N}ejn*8L5*_$S}_;730C&QPzh@`;!-$I2xTUWNe+KnQyBJdIicFG$1Pw^ zsCG}VPA8bQS9&~XDu@De$fgC!-+zv^&A|F%(#Ublep+j?TUIrZ_HNE3m3=E$TP&Vp z)E@|MCYK{r;Zprtl1TXb6cmb&1L7i%^Cuoe6-Dq(pJ;vkmnrYvUJs*PA`$0jL)f7< zymhu-xwhKjH*%1GQHmj&3!dXClmaR*Ma=1hi0-~ z1A1ingbrVZ+>T+Af`%W!)>jC(SJw|-Uxc^3dW*Q2;`8nf4B307MJd_6MCowUhVg_Q z3<$C9#RqUCtViR{S_z^H8>2syj@J=;6Eh&N#j6j<5W=-?LP6*wIdc4T`K#z9 z^e;k1*DEDctBF#Qta|iOm(&0X|8VS}{kRR~V=YI&WNEHsY(`6&1*stR2UBrFU|Gh5 z72gL5J3i6o3FLwA|E=Vzx^CKxuulpdZNP8fBnHtM=xI2^+{)trhB|cAD&-sKE8#(J zsp?es)UhHlYw!jvk8jlIA=FIOj>nW(PQXw}_k4SJH_>nXp@O0a=@pKd(BSv!g#8Y@ z*GXi1%NtM=6gP<56?dwH;v}<&_m$+f)GR5bv2R&HMQ}@I!k*lp|94-qK;JZ^Q9zMInAx z2?F|#VVh<}a6JWgRi-TTyZ_478b(t0-bc!L<&A!GJ@V_4LEci3PEj5+yo9fDu$gx= z|0ReV5xu6EmRj81bO3WT&QIlJYsn1JoAj@)4kISZY%CcD8w4D5f*DgjR?jKfUXw7# zQn8}Und+`I{9a6tiQf*d;SEzyM-X_B3J8@Q?V727pvDGQ;ffj3%PsLbHAizQuZ&Ab zlPK8>`vcRk2LVn>IzS;a2U9e82`BxJ!0*RK->uK}PUA4(`41ksPVl#E3F@lwe@(N< zG}%~X;z6)j`WVvuw`}Ql7JYltY`BfUb5FJnw_>2cW(OJe{UM`UEl_S^SrWMb6SE3$ znc#&I5IFl2*xi^sRei}~Z*wMGJ7?wBufuIr`z2&G^A5;SimBfT{g`i|%2@RcXz-Ub zxWzd4L8lp~Yr&ZH);&n(EMSgXfVzYWG}j4X<0aK~`8`O)>;5b(nfWBc6YWjw5Q$B zEeB4~gxNsU%TEFI-fkJx%Xoul96NMX>u7Vf#XBYL-#)VYJGikVB`0T_46{$zSir=! z_f&0X@et%EsOCwp>N3~Qenp0>vBWb(K?MP1Yr6qt)2R7Efg%%{bh7BnD;AbwfSAx{F z#C*%WZ-;Cp+zB>DQpmywXFfVF!LFRZ)_rQkB?PV zj6h_smDmI=r+-?Dg@a0yptG(;0W-$;>C5lDtgO_R{?IJ8r|aS2h_3GXrM!5`Pz4$q zfW=n)k~GSvzjjDQrg2(M(ovJuTp5Y})$)?Kwc=y8zi@!~8pK5Wx!YVTf0Q}Co;)== z3>vm6WJ-K%eLB1)*E4>1F|qC*-;axj@%Zjo+onBhE3mh&!UXf>fq^X?h95+R3p8R8 z|DjLlCO7pt?i7l5ALRw|BF(X@H(W4+;H&4d7IT%BzTZ*zj>2DfREBk_XYb9a?SyP8 zY%?EmK3BApkBigLfR6q_-`N7W-ZtHoN~M?0-q?9Q#iW1~vv^f)fQ|!AV*P{KYGL7KM~lqzB>JjkQ1*SqORY40rbZ1j3S zieq({wJB43l>Sw=`(DdcNi(SRwfN2#+S;KbX3ui7xNNiG12#fhV9Pgol*4+g+s_qY z^XG~FInRYt{3b?Pm`j<*8yKGmu}d>jFR1rcrXdB6SDJA%b~58o$?K5;Zg`)fzkZ4N zn;mkvUcza&xUIKLdFddVuqdVAi#fKSo-+=qwG6n_E($kpngrv;W#YSC!9)XK>D z`m(Nj%(bVtL5lmm#Gb&SSzP62`J1xTNZptSxeW+H&E*a8>QKWRLs3j1)8q2Ahi`uq zMRTPc|m7o6@8DZ`aQS( zX13P}RxZL6$#@bw+un`iMw;qic1oC#TZZT8{(y7*zJ6~*S&Mti=lwz1454UWjQIQW zxPGJsPZ{S%p=&cI`FxyTF80zidPK})@f%xuj_$w2u89^4NOU3|I-FvhhcB<+NLSDB z#9d~^fK5-|GzXQ9LEoRQ7#P!8(}en$b#pFoR@U7*4fbcX>UoTkFF39W$ps<=Jam`i zA`W-%dVKM?@K`T_FB`;zykx(UCqqd9CwKNhcm_!hz# zU+rA&LvwTA?M5Dj%Lmst>d~_P z^i5=<&BY2Ew;{mamP1`uE8@y6u8VMp>JX7i0N(9(G&n<7=^Fcn&$k7OGOZYNC7b^q z8dxh8wdiM6iYX<<72LwZ(a)ybJ&Z$Ws6djh--`!`c%UJmLDB6I!?)PHO|fg{#<*alm!AVHt`v3 zb^dhIVa}vu#14|TgXC?$Jhe?aR`o1OqA7X`1pk7y+Y@o@x^Dwsahk>%)bwt-cb zNeqq{OS+-DK5ct{D}x*tj60t|{SnzqRp<@9PuElK@I~`@m8@w%k~f*H&K3F;)y`s_ z6-+aLP)g&0iaO5p;I-j&RYIJ+p?i4*c#b-a5H7N+^$dsmH(*}{{`xQy3`ZO9AKLmr zMXPC>pm?u}EDMX^IK#aD_*bXK1Kf~JTeF=Ho7Q~b<%dx~6C3C#E@nv2bbkrS8pFUM z%RD90p)NWg*M5=O6>#)_=!CdyjmqN@W$472e^c7ei;Fl^u-MA5#0J7H{fFN&+q}Rd zNRDwjR`w#8*4;Wp-eTp7ifokMcIQKdz)(@Yq3*X4 z35JAk%5b`=23Nch4CLqw9ZR=WxhF+en` zXpFD@9u18UZ-n|Vj!4kk6pL2^`Dqp!JSJSv3T1*eVSSxiKIxv;1Vvx;-vMHWFxifG zJH}(^M)1Mws2y=68XN8)V9BN(K+~{bl@saLM$@clZbub0`d}Vqxb-UCI@!xAhwNgy z*q=wfr+A9)I)}B}968}OU;9SXlm9}qVZ0YKSn(Nqj3`Uq7aI}^=BhY-Wnz zDDI|1dBF|+H0E;YfP|wgD@ji`3MNKy<2LQgK^tsc#7=6-Hy384%-&2fxwc&sU~_%x z1Z1&#P*4vcDX+G=nmVg%e_?j3u1n16zvhw@X(T&PACe=b`!@n?jpHJH- zHHm6uEadSn+mu;rjd$2#3dQ4v#*nJGe3cp#R0(BQ-LH^ywyK~ORrD@%Y&qf&>%6$e zdsZ_;$pXA=J}X-{=|w& z`BQWL)0bNq9Lz>$~1LJ~`IX-hfe&xXFI@|Iu6#{KWxD*lL zL9U7~x|;F9CxjK^u|WN6GzvxdAC=O8}fP(IS`D5En&ql99qS|=8UjjF_cHw^fm?OE1KJ|ib*49l@ zKhZpV$5M_)p%YgG_3UhbteboQX62<62@m6!`Q(JX#R?6)3PyWtQA5SW2)L*qHQ3rf zc>CqF&OL$w-;JDID|EB!F`ce2(2WQV{%Q}fWfhOQ5Zvw%9SW6mQ5j1#HOQ&H^O3Fo z8Q9YZ7Ign$P#eLs8Z!<}_OQ@mibEk__4Vy)L6Dc@6If;I4gHjFNdTD{1Fy|8>t{ig zQ>&?>x#cgRwTFPi7zRbRpNp%0Hu(LlWY~q23)$)w97#KUe}p6?IDb@0 zcMobfRnE9`LK7=!R93e?b2G?Z` z->SSwSK(5=Ua*KTE-gV(nBKZu_yjzvLa7Ldw_(Dl^*!==qn25VXeBK@>F-3t7kzM* zkn-i8qxFIv*L=l^L9Ff1^NX#owi&pew2m9<*Ua;MBngSS1fnWfgqE6;sZ9q}pQA%? zc)!=VqS)~aSt2$6#ZBw6BPOe2J*-kREy>Y(v9ZTl{mLeLneGn;0QF9KM$F~iB_@_& z^S5i&@=LcH_j}=#xF5Tf$ckZfz%z_CQ|rxX)U0Dt;TmPKm^*TJXeWdyq`q}v?vj8q@o*ooSUhi z68K)cF-lA@Rv_al8LYAsMYbBdf@!t3u5RgjojTdfu#N_Uz`{agz{|`JluU9=*M_Gf z&}$~Hxeh;5uv|V zMQ>eGip?_EDSE2LJ4`xwP&@)J$|XT^sSV*Bv|N8Xp>KewIv`hel}5-<*eMsiLGcw< zttH!?YqzY1|1MrltZ0s9-3`zkug1Q9ELUAapU^GkWj3&kY)w;e6~&TMK6xP z2u-1@{!2+%4u@lO<*&_^{3^+3kCx2X6tF)CD< zAQ#XCc4UUaJt&M_Sxtq>e*fhTH5-wJ;RI-1x{-8m3MtyanyA5p+w++0Ob7{c<7qg- z>g~%bLG?37m#xuv7X_kxl+pHr9esv%S*^pFjeT+P%1+peKpxV2>m_vP{AkpLPz+=s<=(D-KO z2?-@Fcjt?c>Ri>>fhkCy1z{IVQela?ydl&)Y@%*o4@=L*|*SQ-N6noDj zyrjsQo{-+>dYQ16shvwc7>F9TwxI0W(=e`bpGB{;dPapzX0X%jP~zfweut6OIxy1o z7nJ#fM+Jvde$JSWffIpP-&V!Atl-D>v(*GR>BEF|i+4@hEIl(&C$vB>gW5O@qt_IE zOAVX6y-A}xBl_6x31xdot<>IWNt1)7IW*dR2;q@?0DY;jVXt=N$Fg5~E0rDV$Euvk z3kDV=7B?nua*ZjV21~;i3rW6O57K+}p4dJsO}aOI$=%#^iy4CSZ7E@UZ3SB^F{?d6 zuuk8c>)ZzufA(wYtBTfKI=cDX`QuKF zsiZH7>bz!;(ZtfIzGs$m;i&dFRd=Ufjy&>g{~wC&fo4KGw5g zkYOO1=>a$DuatPwohOrJuH5vVlEPcM!XZ(;H=2P#D-%%3elE9sp-8G>g=%1P%<>qDzBvP)v6wpz=FT=IHWq;Xl~Je zbH=Z>%8cSmiyM{j@LvITV}kO&WojuBzhzXz0H-5**=T;?v*^RkJtL{ve*7G@=xQvAnVdSjuq{i6Ovmq zRbgv2oQ2oC{<6A6qija>5BAf};M4^3mZ7PMrR&&_x%M`e*a6kCr-sIyY8uTwYiP3+D32+_{=9(l~~?*8xjpDku{~ z?U6o5tG(`L4(A`YAm0v@HqOjqy52px!9lPN7f-2c`O6WT+MvxR?zS|hJif<-eCQdT zejm5IvLP@}NRS9ng$76VB78vR*JCH3UoHJMU+kb9XYeiqH7j>zV#=@8j-#{U#N7q( zGBq9g-ql)O1nBYPspSF#kw;h5;sa&(89Q1k8(QI$jqpy4!?{C!Pxwno&6+$45!PGK z02Z+G1kizgo7?<(m}A5G*sAIyAC4D;ve4?6ulH=e*e7r7%rZf`SS&F6!-P=aqN3NS zb3cUq40EQ`J<#+{7Q*}v;tcjUF}tj8bFxZM(``Fcj|@Em1HqVX={-Td2;IP8O~TJ? zxl~6)-m=G48%w;i`78J{>+4#!jBE{ER#x*yFOQ!Ea2qz)xEdxWb3$uuTzFq}-B7Z)Rf__^aG2}c5M-?ET7RC=!iCcieUr35 zS&Fi6z+K!T%Bm-NXD3?|awJ1Ytf3q^G$j43?FygSW?G5_0ZKt6!jTzU8On|X!+7O& zLuFEWEuZM0#(6N_FKzg8QY%L8ffka`@DK?2dy7kF*pO7Z#X^^%mEFGE2zbp@-LDBO z>x{c{-f9KZ(=U+VVrEGCm-`)t$t3r277Thi&-j>&i=_59LfS*&J=Rx~>aFDOKZqGI z!|YH0iHHUvK^_esoXgp3m%{znU~spwTWu-K_OP!-%Ik^5tj07S`^77Mgk7Z z0p&8r7(ybmvt%PKtX)BOAHI;!@;mUh-FT=sj|gwhg31Js&N>Xq_8E7Cts6FocY6&v z>Y%>HLY*k1GHWVizgpH`^EAdOqSATQQ6{d~6>6Ox@8Sob?H;46KinsDMH||_$`p7SwmdltJypa>fE_!yiY0NE)fd@(X_Q^N& z(Z|{$u;AGPD!Qq!v4MV{(V%8`UMLn%mi;YX_>dtgvdSXZm1}zt)T~ApF9R>%9x1#+ zYJZ->W}}-mw8Qa?t9|okde0E!*54X+kWNv8e~>!iN(hN=B$EZLP2t=sC+LtGnX4gR z2@|`~f1q=ISlHZ_Q`hj((w1oXthk;Ag5Z>&1cPFGOaGKt$qMJhD2&~t4JxL4IZRa9 z!ujVWxIeJl$6&J#rEtlX=D?!^bOVTJ%_cbK3-BR}`cKNLbI*@kRgw` z8rSbGPvhYL-d4ePD(gUiT@WyiV4=Xlak(OOXU9eI?N~1Iqj^X|=vWcKE_sFM*oDsd z%hHy+_Euig^APF?HX8!HliJpkj7bsZkTxCW)@9R~{i7=}QYB(PjFLnUA?Lel(Tgut zn(>(1TTc;Ojbz*b8i}NgHiMeljTOFjb=c$$j3Yl!=fQ|d0Z zgt{7!NbO_OD;(e9pVmz{(BtOG;Y=#T%N?f*0hhnHV7}Cv&D-Q?m%Y=F0|!aR&@4xS zc$`jhD|+O@0H0`!z>JAQ29Y@iJKCOCH!~Qt956^P4buG;QmW~sTIUR9szg9lyK1?b z%ryS7yAQ7{(6ejljLjIm=+NP8Q|R79t}o5+Q_{;_&tZ*4!_V7o34mVhBpPJx+~n#M z#?t5dc?DW}aobDSw4wG{S1;l5KtJ!9BO4J^eoZEPQ}(U}fYi;5PoFWv>k90BoD#~1 z@ilQ99em?%$l=)6Sq|cObTY%{D6|06vEYavYrM9KLZ6xVqozutEC?@5Ps8{gXS`7r z-eu77P|?AA2|u)qdl}Fraz+@KEIQG;As;xygZRra*Tko8?>1QPV{FD@+!vk(%4_M) zKk|PN%J#A^mMs#A66Flph6Bb5@?IqEGKr?v=#F0lJDGg%SuX!{Ha#&4ZKvK1bUk!XDe3mOZQ;HV4r*4paiKqww!+O4Y zg4j_Z3C|2SG-#2yBX&;V5$EwVn7^B!)e|Wut?1ck) zeeh3tNa?x!D3vG+3P>8j)ISO3>q`s+gAMHk?KPtJ6HN^;_v$+PNI0s(?x%g21x#!C%UZH4Z3WZuW423)c)x_Zd!TunsA7Zlp46nBrqzx<|# z^$h&)zBD#J5OH#X5fJ2Va5+%BzDm5{UwHC>>+%Op$tJ{#2Pw|0Q6F1*X!Qg_=iA(m)stg z$SFs-P>h8GWt4OnyZdEV^pJ!BZQ*q?0r~>1P5_+x*VIDxPTzsIKK-RVlslvROT``4 zW(o}Cx%tBcbBnGWhQ#&a4ut;e23L4Agc~;4*o$M%5Qfsi1h3zpNWBZi~ch zYv`|?bD%yRu~BwGfa_G}z+Gq==^u+P?S>Sqdwqh1K-Zf36~caN@0j^j4)}9ceh>@B zi04d{j2Bwqy@Z5aYt=m>8GM|j$fMd@P!(h*T`ed_tsxt&E(bH?tGSvhR_wJ0fMv_e zgW3o#2~{z>g?8A1d9S>ywmg7XSVTU%CWHWfzN%G6Jz2<6}D?J9SpWt!V}I{1jRjmCqVJ7|h>|P%!e{^{{htjbfAa zU_2r`YpCo*J#@dHd*ab!Ht5Y&5S3O2QgIj#VGQFN$>~_AT+G44q z{%c0Xi*QTY;;{L*S>hvOyn0IGtZbX9$%^V4FbfGoP$a@jYyz#m?ino0K{BBkeEo zX8=59-62z^kH2{QEC=bJfVt^vC!y(oXo2bpRQEv~>jwlh#%Y-Q*taWV zmjaD)5^kcRzxE_-@-(KQMsT^3&bw(#id9-{pozw1a@z0>`y&WBE1yW(}+_P{FN(4WkG6%E0Wx z3%iE>jQJFNO8C28PeR&Bv_7BDerDDBc1y{rQ~VGnl%p3qB=dyI*j@1Q>8OL6c}686 zx275O5I!M3{HMHrV(F)}#1nB7w;#)I!oDjn!pOLPzR52vGDSONbHw;~5hF0a%eLxP zCo*#E&i|P@?AwQ*n3eSE{!uM=L`)Z;jk!BAar+py{u2pOCXM(KK5qXy$27xr6%$C( zBVmR>fCw8XVw>As-W%38Wk=Bcx!T`BUqo2@P)aIdAWpK1lm>D5jVN4@l$>0>Yf`|rJvsJI{K{^0N#Olc@6fLCwZK55|@|zix!pUv}0fx zN?PVKF7EZeh=cx${y%?(ih6_b|L(W-d0fbu_3(X!8UVF;ZZ*F{YFOAlN66n#?7j{P zyzaXa%mp4qW`4^TGL;TV(0Dtj{=Ve;{71-v6kqYv2j^|f_^a^0o>JHE((VAvv*us7 znwcMTf5O5d1<#v~G6=hf+wN&g+TC(*EC$&c z@wZp@q?UcUk@MQ__=Xrk6546;)v#^kclxKys1o$Ex%Hdq!jD>pw(2CkL+>>w-0!Fj zbA=gKUC69?(>4UWkhDXa42ABAX=OCCr(U-Z=w-L#oVc-fQbdcQ(=F58X(TaX9GjutsJyVoL?zDGT`xvS3>X;Ai6V zgl^WrNtVdi@1K0Cy43cw3pUXll%8S)q~TLAtVKvCf2kZ3@+u&91%^QWbT%=#bj=QyNN4YnMgl~U# z>p`3TrzqJzvle?g!V{thS5BO|ga6JA_p!{(SnrH?Dz%8%l)-!LUtZdjV% z>|}O(zB%YRPuhP+n0cG|6|GU8vI@y0z{JkF^85N>|YjrUTVpuL_*Q zGRQ`%!f1H&0-Me3UBx^*^^XH=$N>ilXLR2l3Bwh&rZ05agH@O3S}zgXE84eI(xNN8t`i9Gf9kq7MnANhVwn(}`t$!AGE7*qo9Mo%momULGEozYLqs zd+=~Aqm^Loj(57xLS4M9iKK-5TfY`oNdogtzH6g$5Q6*e`f$cZL zsuQQMr|J(WF<{4dkW>TI3`CoKV4RUv!MQDj&+j1CP0zlPFSUyuw4DwqMO4n+uMhgG zx(g7?1D&8ix2TBcPcDN5@6Ky!hr=0U3JZr5QCI)ZlBXZ>vBneq>-TB_Zn&c$lkV;u zRNTzy?h@0T%CkgcQrBUmyj?f%?*Lo}{!PPr{i|p+szYZnfX^sfuiZiy_W#*C z;pxmOtVrCy0+syu=97<8x2b2?(jn$JGcWmt_#50?jvf;5IX6p)TFAuYJvFuE1=S7u z-=WY+lvQY4MEwYhQ`~f)OgV@gTvma%H=akz#-=hZ&kdU5`^QZ_sT;E)$>hWlgU~7r zlH@VQgrNQ!~T+s&-tOA2dHBQlXfbpiU>LFm{^0fv-;@7 z^Kmi9fJEs4Pv{w=#6@K`Ym{a8e;U-dD3$J~XcB~qj zF2Jg%iOkn=VscEPyahFNsl9+_bU!Y>WxyR*8Sn@S^wa#xsLB`GX?8%5j-wdWzQ}=S zJdkwefRE^kTxgVNxIO(w*x%k?Zoq!`*|(oHqK%r`!I{Ip zHbQ;~7=1tNPs?C-5D$O&<|7b#bwm>h&Rw%Oju(@)r`o$+ng1FyaHB=mM zC~&@fe8_>1aIsZB9G^`wvRjD|GXd!SRaNG_lsXb^o4L%z*cPyvBqY2D29r#Z&APL< zuqnG7 zrVbC6=;c)sSv;XXC|)V#D2$yakq*!oDbr6+EeAzNd7(5<5cWU|AciK(#1HpU>ZEFC_jb+fXIg~_!nH_*vtnKD33*iXw z+q=X~A@(@O@Pmzrl=$PM17#h2;VEc4jMe!O`1qLx(67}ghL)VxQ(D}f#jS|5f&lJ*{WeqBjzOve=~%6NIuQd zpYq2fD0EOhEE)DyJV^WrcdC9=C0H^%MrF=n1)7O7BO|6%gR=T0?)HXv`SzeWy7~6* z_T=LPKOgp0O6`$*r48?1LZaoh4(sN3v7+fi9veD27s*v#EKH@u%_kX;1#IJYz$Vm2 z&Dlp?gR;{P{Utf{>ArKp5}QYaS2HiA3mvQt^SbqO{GRKs)7ej#ZWxfYAB@&YZLtqH zl{leXHM8<@`mo|q@S9PLLXi6fLz7`Jh6+8j+txZz@qw0ShA4ufqQ;OQ-&njWN>*AH zQiH@qjf?u_P(;$lb!0a++@wh79$Z4-XtX1}9AtQnhj>>U+^>_3d z5n@*_>-=nB#J;{&)j02;iW!LcOK(`UqaVM^ih^uP^OH#D=jUSQ$6WUKrtnT)gk{SP z;3_2^BxGD(8y0MsSE}t1SQHw$008cY#yLGE!+*P%P+BkNS|p#OlCD?iI>#E!I(^ef zz0ICTCx95yA|n^a;p*sWrK%+a7GbbBqQJ@ z&W*izSI&^Jx4GXD6BDby^#SZzcu@Tl0lnvbRN6zP^oJxC1!&xf1}%C~bG$y*;PWQ@0Wt2gHFh-U_MuoSuCcaa+ownGy{9 z@9s|7$o+3mT_~9VzSVUkpG^sSwPR9f(K*NZ>$0dUJWNQ;k^1xK@`o#ux8RzVa=H@B z(m$5Ha8EvtkGcKsM3;IbtPMq2(`0nr75V&(>Fsc-iSqtU2l`1Gbi&eNQQ$VEi_oNd z^1pb`c`V9zDh;DV&zTX4bz+Fs^`WC?#+Z5INRZS3BZLn;l+h(K>(?;%Ng!}lKvDL zycF$FZ+fm17v^Pi=7T4X zkP%+Dnf+dL^o)?apF{VGxFnRDc~Jqn4E+EXZ?Erc{fE)V+EsbKS? zgPlX#fo3Puz79A1htU{yg98X94JrfQ-}#Bbbtpf@BKAeKQV zZ3drL5~-GHsz&9}!5i!x`=9re+mQF?&-lPpHS`9YSag$Vw;&|^xHYPuwU_l~fymLy zAF7f0y*WRzMmRE?;@>!MeR=DfbqZY&b)z@te8a|RKNKV^8cBJw zypN#J>NJ_-k^F!`1yqa@4QTyY+~{5S+HCrGChQji%<~Z$&QL6y%_+ znTV`lL9V$yS~SgaTU)$n+-W3Fbe@pjorDf=q_}TppyMSR$mrOJRiC$_NdIe2l>vUI zBWF^NrqJNJw@;EA!tK{Aa_+509%luG8#sGzx`af_b{4?1Bu4@hi0 zB6tlD2cXz@oES;syPTYTPw`x4TL)>09{Akz)#YctZ0835Z%-MZZPP+7+k9YfE0Sm~bsKI%r%giA%h?feWt z-@o4>*BM<~8e9A{zfQEyza*Cl3Sy8hiRyy{V#=l~I+32PNO#Fpxc)Ep&N8aXw*AwB zNOyOO2uMnIqqKCpLApUYr5iy?DGBNBP66o-*)-CP#HQy)tmk>(|IB=ywdUhqE_Lra zuj@RI-*N7{bHi5qA3lyKMLXvdQFPLAdu9Fd?xBtCwFNx4{ebd1G8DinMqRD&{VclfCK zx*_!ZzJcaD{*7_5K0@<18W`OQNosWRhp->?S3hvYm=u(6UA#^7!|KZCN_~ylb>bcn zgmVp)Qed{^RcO8Pi<3@2*Qzh_HMBpo+!LS@sz*K^_g7!zO)o?~wL*GV^cZ*AQbjK; z;gizK&3aV-@oBu)>k>oUzN9P)xiQ;KC3`jk;Z;>jEK<=4uflai4yL2e3TrrDaPkqs z%1&5`YZ3lyZT&Sx4QFa@42FBI2%^5nVn_ z8?JA#LHDJ+?kd`jn9ux(zs8o_&%$_=W0z#Sr|BIv;Hi1_a9|d0P0;||bwB;YDL?;F z$Q^5SHDxFT*6lkl-t|yW_5U1Hi_fn9>w2I+-rfsnIOV(d^A+b&{C>(j?GN-YuW4=!}g9t#H!950%eX zVweN&^;L??@b%wYS??6!NtD2|aJ)0WTy%(o)8XfMN5;5_XapqSH7;;GqkQFRTH76d)$F0Zy(oL}C^345I4}&7^JT3VUBd%&lqPaZwn5&0_Qg^7JYETTWF9%RRy{qAmFN?$Lvh zPLdj%a?C=q^V6sBC63ww-;=jSKuPq|JtSTpuFQNiW>x-ZG;;X9t%K?YXDJcOde8V3 zi8-$KYR0NOMW;Ei=RK?Sfbet2dmZV;v5rEh(@BAV@lvt1YpXAAH@<@?gx~8-_adje zI#t!M+82yQ9ni_^&z?XN2QCiEhx@E$K1;~Fe1Go(~w5)9SK?Y{QKosD%PGSDpZ}ZEG<-(4Q4m3VBN( zg0xfehRuslZs`v@=fnpck)dBVs3pu%?kQti1YRuWtaDfylK4dilW@2v1_lhA=JXtv zXmWKEHE(;{5P}6O3w``$~QCmaGLP5z;iD#7|!orMsm0ZS8p_B4ld{97;xOI&pN zgeZxZDBGB|8P^9hI z!V)>jLUEsrKo0!FH}1)}N|uu4;#xPj-LJ>JXfv33oUGgVjlLt`!w65@8ROg6)Ht4Pt@c4X)_EeaPpI8FlaZW6$*D%R6 z;4U4ZAmkO%fQm8@Xl|>Brd{1BOJ#!uMH2~?D{w0}$Fg&;q(P4 znqxc3!Ffa&>V-KRPZ7K`{(l^A=hb5TZB~+08eJj(8r*SxmVwl1SSM*Vm;h3tXBotY zovg&VL}3_N5%7XGu=>GEX`Yp|PtX@La7IB!SYcQ3b)F;j`ehh5yD*pCkKu#YtTU>L zP|H^Bwl&s+6;VfRpQ=$7l>Y%XdaoWp{l%_4(j3o;7N#@y3SgdSWpNwT-LamXft;@dkj4!M3okmr9)*V(>eKfidi z({_rf+yu}4=EONr!1b-;R?ef9 zK|e797~~F!8Yfk?Sb76=epwmjLvBi9jqijs325y}Dv353s$C(PrVpTY3?RbS5=TFK zfIBvweTlS?S0RL_Z=JqI;41IlF5SmFvIr_iyORy@a``#x8X+Y zdhVmaqstZTEPfNfN{le3Pn|CQcuHNY5z>GawNHE*!~FQT6Df3F$j%CfF%^PNTIKuF za2M5U{vMHNZUWEY0TsTT_aIpU=G zk-JCgv@a|aVqVn;L|%I$6|DykUKS*xZ0i^q825}` zybALgASe!$1f_^}!DR#RUFS5WJI^3-ay!TU^ztNNNoY9`8 z>8EYH#KCn&^UqI2^YOjEut*{Ef<~@m;08N4CGeyD_QnV7yy;gp9oT+-j$N+?*U-ts zx=XXDUM@1Dq!L?_t>smP+;tyv!9A1rRpl7rH5w4qUXy${(&e#IPYo$wIv7#L3oBu{ zLxgxK> zrpbk{ssghU+`ja}J63k+-RzC-e_)nA8+R$xqk=5ahuW-1!}R;-IzJh@@9U3HnHQOb z=y8M@*Ovfef8WQOG!l5`dtEMB*4SzJsib(d-msa_Zu9dkZfpcAW>|oDdJq}suAPnb zSgn*zcXN5x;i0ifA=YAKe_qte{D(?dB~(064^Z-YnYPS}D6ZdGa=lj>yFPLdes(fB z1=$#oix-iOx^f_P+?G>HX{nSSxeo39`Zx&T<{r@S4GNbR0mYs?5-IDkdqws&*aY;x z1ZZwtu7H9vcVL_rNK`)JK2VaI-A$M6So+udN!nWxO1_g&aBM z?e`Spv$#eOxRJ#4LEf|avIrs$DhhVJvr4T2&G|N`nmqczHul+< z8rp_tWT3KE`e=jlL)|&0)tmI$s_m&KF|t=an)1Cv>Kfh^R4jQ_h<}iep}U#yB^ zn;Rt+#=E39OCefPA+za~I=&N36_!y$RUpu?RGs?F2Je^3uIOkP*izd2lIa;Ga;3ZL zCZCO0GoBZ@+RJYNTQ((OwZs{^{;eTAR*<$KHPZ6)(lCXh^>zGLt9T-F>53o{1Np=} zS;yToT=6A$Y9s@RQul9Ni4K#B!%erWjU|0rvcdAG!!GahGM-n-VeKb=$WPZH=OUuh zRb}KvlKO42$6-NN#HRiaq=I$fdEcEpGg>P>7up$>C8-D24JN56VJ@=M7a1uB4Crgw z`tt+)=qhGtFI<*&zCG-qXC&TncXlwmDe*vs?M2YVv>esX3WkDB_$D0qEci zU)$_SNYQ<+0k?E{+?-T=Jg{=eJ^%`jjp08*j2###efM$@244X#l}f_p<1y9Dmr>(f z48d{%VrPg~j#9SQp-#-hpFH@`F%Ww z2M`UW603slWWVvm3l_VP2#OWE+VcmSDcHu2PyF9$TsQ-f^|`LQ{yQ@~^T0py^El7O zi#Jsh?XiX55to=)N1Wqqk^&3IbUo-_%f}Y3zdHrh!rqWRM&}69PV$eEw-x*=%)2`N zn>keIZ~ZD?WI`lgtK`@4^LnU&4rYf$$PXET`PW+ew4=23l6$VgRX9~8? z!v+lwcu4g#NeF8~3xrJh{9r&lk!+*j1Dh}L7Z=+u+S4)YsZk!phWE_p;bX$&^prp3 zK&Yk*iHbt^{lc8qr{&K|PqX~QPWhWLIgO@bJX*=IGY`+;FqwqMCvlCb>qRpd7i0-R zHarIHCPGCmC-Vo;|Cub$al_YtcW6_sSfnkXk@7l?FN77zAvk0%@|7aS(+{d>j}iSH zBf{a;irDyQaKAoqifuOC3ynAkE=aqFFwFb(T>O)`uK#6UgdvcOe<7GzjPRlq9w88X zVP))2*t4bLG3nrzhhHXRuR;;MWDx71aViWGk-fIie0!mt6W<-}Ava)wnY(>ggv}sX zSlkZ%YTp1dGkz0X?CHH74GSU||2A`Z(5>ENMUf@Ii6IPC&SJQYj{LN|Gi2(ua{k(3 zbW-Df1!1TQ{d@<~yMp27W)xgY2&}#fNm-_hK6sd^Lqo?llp)!R;7 zg;d|;;n{|I`SwFT^D|>Ujv>N#&?5UiT6>f`*>oKN(@#0aD1erJ>${zU*Uf@2-)33^e;p)-Wi`GmLzwcNk95lwZs#+$A`Nla9_9N*M!z6+a| zmn#fOC@7UoqP}MN3gW)97wbV$;h?^xvT~zkTAiII`-jBwKT(cpy-RDSK?&+i`KlT5 zv`o)oFGEAecyM-_qDHK#5e%gSRMcvJMUDEN-8L`>JvP#-?uki_AR>i9hAb=eMLutl1+ucyFEV$v?r%Nvip=htDcK#0L|2;> zdErV@FZyV4aH18$Qw)6=s6LPD!nR2lTH^K|30BtgzTl;DT7g=I%<<#qtW}A}R-Z1h ziX24`?D{lT>`pg{DE>~gP8^P<-xY3A+9mpd!fhQHqx0#63&Sx%Sa5z*OC{!_N1MwF zQw;&JPq97oM8v>OqT58R;A<2^MYe*TApzr}g%RrW?{`3xQKK)lBGl*2re5B}kY1;r zdh0>AC9C+{BKqAa)V3)V#&@KFZ&~gS-w@m$X^-H$XQKiDYKN0A%vpk1xjUen7Q6fq zN;+Yxn($eqvs=cTND%Y)XdiVN$=4aERjuMd#+P6By_iBd_&i5EzSYycCZyD-jTIQ} z))OD&ImL=(BsYrwXw&(9T|*k|Ga}!YOI&!*)bh#qgwbDK$B->qkJ0KW<~-r^_1C?6 z$>PLjHNl>%8#B55Vu?rnasVOm#divqFUKB3#xP?uTu)-Yiq-Q$|EU=cRjy8)^V}sW z#joiCV4?C@n15z5QCWWHG-pfqu#pJ_{-m1Z=bPEpMOG8 za_Hn;B*TgjlpCtPq{fBi<%|P13^^*8^FZoH6FiTrn0@%s0ZwStu;9S4wLJ7BZ)-N{zlZr6$y-av zKUN}BmG0(i@37KdSP^#uLPX-ig4VYOSRvNUVCx0ey6HD)NYs?)5B~yxkg#fDWXKNS zocrBK_5zE$&W}mF1iq&F@rJMPBSHIhuT3utriq`0_~5(Y@gw2wvDXw_e{9mBI+PP{ zb*v$a2-!Va54i_4{o67d>wh6u>G05p3Xr#37cYf{%)kD~k3Fs6ObB5>%Wu?S_WTM3 z;weh}Z=9ER`g_1QQTJFh-oy9{lEp1BQ^-hHL z08+>`Ha<$^C)5#q}zIi6^e;zp6KCfE%Sk9&}dKZ zr5hXkm##sy+9ottaiPBhO*_uDeoGVHKPxTA^g2<(NjHDeOwQt8@kDPSyVrr%aBpAj z`CPm+vQ&e4trAdlE(aXw(JNNF7`^9W-r|BghP$(>a{@2ZGnjzI%jvHpjsx?BsMp5X zl6m`yPU+4!f}n@&J%$}i`rl|$TXMIx-f{?2XZ=sB25mbR9)m zTy)ZH^p(Oj)4~dO1lz_i7U8CQl{CrQB@tIsH);D1#L5IqTtcHsi$QQC|W+X`tU} z>Nn3vEU`S`O3;8?YI$$|7T&NBC!Tx_vX;QHj=(oJfoJ#ak*6P?u1<)-rU0-I3XJ^w zVIw50>H>wqBZItJhP*pR{XTq~q!p9<;u@U%2n-6R}1INQ6Xx z0>DQ`=pTRXt%6XI07#CDQt%qHJDqYyX%0{KS5`q-v`f0H<1BZo+8#|THjn7bZ%WQw zPXhHlvc4j0gqS2KS)X@!I7og_Or?BPM$Jv@n0@jtI1t>h849o5yFK&HuP18)p}FL| z&Mqk|v@<0$)WqyUSvR8Ykngj27x}WQKaYj8^RY@^v52Y&a=M>`$K?jBRg7`Ktgo&<75}-5wzBR3uC|Mx%kCq`+l9Q?SjaDs==PI`|NsB=qrvz8 z;E~wh|6+LjR*FtR@ec1Bmy~5Q>xi^F3m5fO_UU=vp`O!God0kor#OnQ?bvm!SN>@I z=VtDfKtWa!7o?zK#}hP{i!(g_a=z`wesMG|~IvaHP>$ z_ue>VHb%1WiF}7iOupWE#|B+9OWb!5 zq;g_Q@#v!mg`|!P)IetTQr{VU&h9Gn3q5N$i)Q)*Ww- zjx&1Pbm7hdd%5ehPF9A1QyJbfsnT`Qyx??ozDR(Dl|bw1=Y>YVg-&|?M!lRHbuxc* zh>)n_$<1$79zs9`ErETq%)!(>Ex(5VCztm-+ww8{wT$04lrQ|Hq#3X-lpGoN`t#Jt zo<)kFEBw97rg}kNG5<=k2L924)ATA7t1`A;TWvXI3}=p>E6lo;al7w5jnTm`{HYN$ zK6V*(lppQS!poDUzoAreoq?Dwj0?r$IxSwzZ$&KRauF^EsJsxY(Mwq+?{p&DiG%y(=9 z-QEynT$hM|we&^_uxG%?>_7k z(3Vx`8QTUTtTAUHKo{Y%r zb&)Uv0sQ+UMwAtW77ms>HiZ%yk~|e&F+GzpT{llhRG2W`X?tRt4D6uhbmc+)q^Io!O^xb{0rNS+yF&k7HLB-a1Fw?0htBGj zAQ?Kvq`Q#;VS`qc3%U*z(O3rPxl?f^DG4>NX7ci_>tSZ!E+>q6d(1C*xLjBz_0fsc z4(S18DFp+4g?;qUK*+IFhm2l>G|kb~l9Dw~o3BToa8OYsm69=-Uq{k%Yuj3 zg9i5xW-{;nqyQaU4C!4Ap1ctBz-X5^TMo*pXji!(oo}kXaCWOP^VeJ~C~u<1QY?PZ z=1_5;kIx;0?>2_?wQXh&j^0UIDArY%s{1RFJP~IhR`GO*68whs*W>K-L!MV;S1_Z* z49sno4A4H82T6l4&JO}!hIH73pAzblTIN-;dbzX46>A0M4$6utv{=Xx@WR~hFDRwt zAQ>;*Q;AuF(Dc1_@@Z7a_Vy-+)C$58+4DNXNs@mO3Rn%`$?Wi_axUXf**%3rwo88V z_APqB%~JDQj?FsMjDMG8wuo<~d;ZS?(~e(MW^>c@yOJ;soQf`t0sg$&_8xa;K4?8r zv$T?(RoEH1&~~lXcPtAVp3X*Z=~JxfwfrZ(Db-)y_d7Wqw(>H?aC~z7=6xqZW5|i0 zDmQ6Cr~X`z(?J`x`O%)W?=7nrr(D_Iupt7DP^c&roJl1LS2W;5KVyoT5N)ZmGFH)v z@i@O0sX_4Ik^P$OyI=91dsUoN@{{s7UUC;mx}3Rt`a&RU>T4?~DIMjCdAfsSuWOAy zeljaBBetDS%)gl;Mx(UwC8Q>zW4`Z+zvUH@q0{)4RSQIM*ot%K3P7TqiYYnhV3u_x z+dA6`u6s%sLl)xkUT)&k%eY*?QdK`V1|95pQrt3YHUh==L z{-<;QJv+`d~3oARBev#3YQpyvY#6Y83w1EgWI=%|Y)#<-fuGo}ZJ8zUbN@p@#~pXO5+2U* z0h*o;AEYY246CaJSIqV@+YG(hzF2%D<;P(XyV91NePuJ%>nA$CrW5>?bfU$>=AWkpxgDQbp{N%?Q_go&ZOcd5Yc5hTf(xz*YmkDr!Z<^J1v%(hzrr$GcJNh+=+v8X|52v z;hP!UV7!4%eWAtlJ9$ySCG_uDpxLHvbtTD<3?U&{lN%-D5u?P5v=f6T$JOO^@?MXQ zHt30LRM(Y)%j8Ef2%i$(m-V&HQ+GJETeJOVg)gnq|NGt#iQc%Hiix82R_P;jNRQmN zylNG|dLVCtE`fU57FVIw^ALqZux?t`+$&0j%CuKRJ>0S514(zyW8BWdlBTk)c$*Uu zo)d(3!sf+l`-Kwq-J4~l`b+o_1|X@p6KP*x=mu6FAC=6u8cY9|WzLY$?^#LFBu*FE z&a!tMzgwN4BfCKTPcjt2L+$aAPIyTQYo;Y0O@%5cgi@;#Ry5M!yz`ZOgkqk<^@FRf zhA@M*V){sgXfS~~cL%Z8_9=3MF2?kYX6@ls^=OqrQXzr+BsCq`<+P3tKv@QyimMqg zu)&S%z(Bd#_q?^=C$p(K5~^^$r2mpv3>xj-wb7{{5%-VZqlbSRBoG){$MiJ5S<{_h z>vDVXdJ}gh$CPY=Qwd0kv+P13iO?~g^(l9kve;b<-$b4o*;7KugGE11uJw-eqrv!F zM>Z~-Q)^3z)F`t+Ye0NtoQ^iz4tDNQQsdS`VQJy!leY%ZJB=OXD*@yO9ETJ8!w#hR0 z+$5`o|@JKeT2lL^~rO%?&(L%y`*HH%kA6WsXBBN!MW1k<{4x?(wj_dCP%B2S_nbnrwk z((75WWZB@+&!rgJdfrFaco^nyPK}O)ZOwZWH5ig#s&f$1f8S$*A6gGZ?VWrcmAFsZ z$G~^+)yY2({Ls%}v=dKfVf{4gFz!u=(%o9~F|gKr?nVi+K_{1q`y&OLHPC)M9lBvK za{yq1ZPqI_RKGFCe$&(!KWna=&sMMCpengaEcmn=)ToL_krf;cC(pyYQ(`3(0Xu8` zojff#@cQuMCn%SBEAM0pFd;4s?F2Wf0S$v>#6&~B@$txHN_ZvC6t=!2nXq@-PO)=Z z;Lq4>k_2@86LiFsIY}&oB?L5bz$e^ zRvG@NDJMUlN{e)5^{nWfFHI^mFrc3Bh|TBcfH{ta7K4O)U-+QZC{m4W>0&I27`NFD zz-sReN$%7Y)q^~gPv81@!+izLqcP|I2x$gl!_0IwS!{YwR(qlKXS03V*6{;n@Rx3d z85Q=Re^1Aop~(gCo=tsqz1M=B6%L5dLw@C@#jR#XueKW%9=M1;T$+S{DsI4E7%(Pi zo0`cN26E9}ZgHWeUMUQlp5czo3ixt9LI&g%zBw@*X@^~05H2vN!?R=lE{z{ae7nb4 zepLrIPe}g9%~fmq$IYcHKNFT-;JeRK+8$v2eQ4+`YN!lo=gOING4YZoy;f`(t2)lUVzH% zf?jtW1OO_5m0eyV&L5mnP@7g@mF$TcsvP+ziuaDnZRxL*?d#h;nhQyRILk+8lhvI* z>`RYD_nP{t)*fDbw-;6wUWni~W?CF6`EN(L;n#;G`3VH4SN7BgtU3dHN}Bb!@DZiE zzCun{5M#c1`jbm)HQ=QNGd7tuhSm{HNS>ZEz^}JLwxf{=z`6mSDmmxAI^jO(zuTDPT}%hJHh$MXVZ?ZV(50CdskcAro3Ap-qOzeI7vuj!0iRwK$DKw&;)PFS;Ii>ylT^45p-?`6YdULiLh!aJ z`bUUkG}FBAtc_$t6P4&!j=DItSu+;I!2vD*_Yt`2muF6I^HMo_ZhKVg80|nJ^>vcW zDJ?*m*&t!E%yuFOv#qstfH)#_t*u2}3<&<^?#ct)T|xW9Asfu)2%Xo`d2nIlu_+yx zcv$L#>Tkv_Sy%3V`OL{=utv`|wC8lcj!&aGw(5ayyCfy;Yc$5#XTb0_toc5iIijFP zq~>1M^1!XL|IFYvwa#LOuf1B-c^coN@WdiRlcCc;b0=ZpWn|0HeOkr&8~VRm5|nD; zn#W3;yrb0vy=zVF8(@FfN$GjNlWX65?O?rwqm!e-xz9OojMQD$!!{`lm!5wko_{dk z%pcLkK9S1=SijmCdNC5JUOi#dR;w2MBOP-{GN>K~iW{elX-Q!p1WlPJQQdqMjXU@VM8CcC{CXPVEu+<$a7>^fGk$`FY?tvM`o z^jcZ>N^f;ww4=PKTTQzGM^XCG1ph=qSwWatdk#Cc=Fam3JOWyI)=Qy59qOf9&2LS1 z0&%9whp;k;vzASY()aRgrDMXpV7L~8n=9l~-0X-)*=gMD!d_H$dpv*&81EQrVm1kL z_y`!1QjiqlJh0!$d9}Wi=l2axlLY%>1Ei!vn3n^aoiue1Js}-Ey<#*~TNHaS$mfi? zPooln(@f-R17jTdg)!!*C=?H=haXMhlyDFQQ5bZ+tSXs-tkEovpWfiT zBjen&fu7a)KFfMZZzr(b7uYhUlJEsa26t{NY_dIrc`$9cy#<*u61V*ksmXt#3yCG_ zDfcUBU&U2;?Ky|q_?-WPe0-KuI61uOI823sSGKCmvT}k%U8zWR%&>iL!*q>}Hx!p+l~C;tW2Ng1T4)swug^a3f;=~j<;(z*TW91;CAcTKqb zrY659o84(Ankz|uDJO~y=yx3B2xqdB!Lq7){$bzn#U5|c7clYgz`j58e_Oo{Hc-Y= zBO0teSl&r}OZ=!o%~=ni4xg1$@uk0jxE~PH7>XSzzaQzzYP^(!|w`*(qc=PM^)DAj`a{#5b&3)IOjWE>s@ANeDU-i0v z_^_HxOm0^Pu~uE`LM;(tS!|Fjef% z#5GoULc1Qtno+DBfo$Firz2kzLQGeqwSHv;8@oue#nk2d-DUYlcdhz+zTQob-o=3? zi3WD$ooQZRt!=jg(roADaxxyi@yqI5b|6?((xR6{%&AoM(x*SDDm&{2_cea%q3bJB zjqu#^n+WZzQ*m_DKhSLBFEYN{E%0J}g9P*r8A z0=n+f`zzpU{GCe)u+pfPP90e)Yc9;qEKV@W#fS@W2I-%F7NZuq<9+v3B|WUP@9fK+ zdVB&BM$u36(QeUC8}PWuq^Z(v_t%^EiW$nRRmW57ZId?_h+ zM8BeSYsWA~n%=cH>@o2F$#Mzga{k5{&!r5W40tpl8yU4Puy0vjZuvC9We!`vS-J*8 zN>=uZJ27FfX$+cfoYlFx3^rDk zXqzs!8Y%;q-??J_f&)LIu}`F@r$g&^&ssHWcza%bAo`Sp5vuq&456bY2YXUz`b$*W zvk4nKecQr=Z6-ScGirT9ukrC-&+%$&8}}F1zmLbQDdtb4=>PVU=dI@Em>pADdCZKj zuo)v7k!6?Taw2tpz81LWVoNc4v^5@>Vv*^d*gVZp?elmOLftB#qB9DEo%4^5EQ<0T?-?lO~W`JyR(7IoUv&?3gr@q4QqT)9HA z=gwkYE6y;%s~hDoiQ4mrz69sGJ57*JKRq1tQ%yo*%`kT$*+Mlo40S-izu^sfk{J@T z97SgH!_|O?h|TP*0JDf^M9K2-{)z+IcO}g<6370IFQAmE#EcJzrq#ZVTE_%`3>rRG zJ*FKi;#l~t(>tHnSUbwPd+~s)>8Zc4E676XA-DR9sX@{OG{#llZ=5xZ z4M?JmEqx1YElIA#)ZkAJc6|0{9@98|CpOI3DzW$wH5|iqVuq)9H2`$Jk`<&nb?31| z>Tz=y_bxi!EQ)so#DJWgu)qcImzri78T!K~Ok(X71gz9gXx#8aMl!!R(UVX>P@R}| z%qnIbh5{UqF}42#FRJ^W&62-(Q8%mq#)}?bEy|+f1=~P+BQZ!B8w42$StLgk6u#zM z7KTs=d*|_K>A$ndPsb-fUS<7+E!S@wr<4@;gw;>SaX7oD6`5_W!*R{LN&i>N z;eGAP#l!KS={ha*k;$L7hubMZ50`qX&Tpp#g-ny3JbKa=JY~uCmeGv9y^>I6YgP~a zrSp95>siS{2Lzq<$VK1OfcCzJZLFXm*`9VC60&Y{SSY6-?uw7v*S-nKQcOclg&(&( zhiS}dg+z`}!&!`+J=o{zcgl1fGy&ET=7*9(5#KH3I8gkjk|NE-f43{3E*a>`6y%t{ ze!5g%oS~aF93XqDK>fUPHIgdUFgW6wkX37>b0V;NItC;gw|=^hr#{}ePv;s#lA|bW zh<5Iw8SC|>ETbs#BFVTP-+vWPTjZ}Q%hi87Yi0{qf72cd1DlyhsS~wTh|RnpNLI4a zm67STsgPfqP<^P=z}!uEbpd`k9AHfzH%W2vvoR13*w%a&)~<;y`gRsbh~LEcOdxy! zPJ$W1pUE%xZ@$jq>+1&$m(NMG?S?zko6vL)BDY#t6D1^kUH){8u-RKjru)CgODllw z8Py4U0#Bp&jkbAXmv+R=RWIleg5I#-+6*SWRDCjymdbLX?sAmWx-;Z(dsbS#1(<9H$1&s$R`Ql5fEC>nXZvcGfp_~)AsVskP1sr=nuOK*2tsWf~OW160M$_ z(m{h}$peHVOw&h|!4${i?$+Y*$9Y3$Yn}BErp``~ry}kB_AI<$&THCigSb<4Fhcb~ z_jMw}f6N+MmBpKO@k>v>`iF#$k|BLP^nV!qG63wlTuJVpvP0&-+-^O$Q$GfQm_2SB z&hm>*0hlQ*{nnGGV;rh zCyxNHBWi~s&fBrEjLQ+vzAD0qU~35>WraKjc_5DaQ|fuKfzvwmbomKeJNj*Jj-Wvjey=1KeZ1zvBQoBYTyOR;Ms^q+E7#8~H4de%d zY|1yVVUV3#wCV><`G|{f;o`yrLr=}VIW#?N{8!aq^GOX zYna?}BN6!2Nc_a6UEkLsR}bv@pR$FJFCZe4*?FLNk|z}q!>JAWv}c~$iobX;eC@=;*lIonn4r?+_LlskusgxUL}T#5-0}i@C&Kk;cH8_QsW05g9t}`h zDF0cE9V^KGEA4%=V9)Q-8u$S7_gcvH5xhw!i6V4XB;YGcG{`|V7G2*IDj27Di> z^^mu8qL@eCz;xj3)9G*P92GE^YWVhUqHTiN|D>sJuiS6*kRotm=krTJ%EM+4sz@H~;(aVGZ{>2(vDcDWd{yxwdK!je9pU!;v3Y!wCq1EK)EG*|8xIl@qP3I8DHm)9 z3#)O12{hwVj-pB?fS=_n39=HS%zL_eaM-CyjC5+Ll?_@}05f6zGWHipUeH?Kg`&51 zL+&jcO{{@7SdoI&j>GXDM+8Lp)_#{MG`yQgK=9Y&LJ07J-X(yM-K5nlcwKH2z^%rW z=%JxeiSE$ZW!4)FGL5kypnmGP0&f&X2peCUe{l7QRT&AKgBxl~VaiLxHATgIbnki0 zX@I%)76=yV7{H7}x^*w>vGyNjlT)WOhfmk>e2Izlm`vM1b!-qI%`#|Q*f}L+MO5Bu zaylTtY{=4=Yr*cjz5vBMe$*FG?OSA5#n!+Wa2ho_ER8KUlBWosm?L@I zdnx0EOuQT@kHz#+q(F1+ObNVT1;o7N+B?%+KM~$mq3d;%CpF&iBk{BJfOsNSpZnRV zF2~Ul+`!wkVR->s&UHef5XY3?*2zuBBHWB`s;Dm_l3G3yF8m{cY>^=WebBGH?fwv5 zo{!^WVc*C|?^K-`Dz4=@p+3Kdkl1U%yJaL)$9&x!5OjPMi-&%&q&)Q=+%i0ib}bBr zzh!jaE&l7&dpn$PyY@$F=YUrIzj)kHGjuQ@n%Jz;%Ja>0?-2HZ2^S&8ErNaLh~@m> zl7sx#7P1%C*TeB}o8Pn;DR8n{LY!q~{Fh>$WB6wTx1s|*p)R6h+q)b8CW%cKEwYU-a3b&lN5<1r zdKmDP9x_r;+cDv+Ua8dY&vksAy9UwL0-`G4}ht>5zu9e1CJ7%E+SQ&Lrn zcxO92_3kx>tYvCXucBH?U=5I~)Gjtjd@WFLPB*SbK~Djz*jD$WNYQc5cm``$^vOU} ztU^KuJM+u6D<_8~_+f+E)eE%g+q?LTGM9i=7^)0#(*OH&kwD+i-&rjE3%AMd@DRb2Z${h^G&YxkaGlR() zdqie-cckct65ehR5w%@}0=U=w^Z;mBBr(&;1WUt%M6BC3C<4=yj37AS8#1=qjL3`a zxGL5y((htoXc4z<3}6iI&TT z&kVo*m>@62Q$)gy(Q|_DP0TpeUNabDeeE6+7{S@ejg@*+FUkjh-a_5a_L^*=j5&DY zxurNFu10u!^!l8sC}7z*a;P1e+*q^Cu6lMg%_Luc*{LxAcWPcZ>C5acxS0d1CT9Hh zN{NN=Jvr^OpPEqKf%Q{z574?>xZC{i63kHyelW-$^i>chn@)3U&S!IL9+Z~-ptG?A zl@~3wWuw4-M(HLFTY1N5xfYRo78WWSePkZfz8%xwiQgNSI}eF1Dk1vKVcp44=l(I0 z;oMJpH{#$k&-4oCfZZlF4%MR_{1=Sz`FaYYXXjMP#RErSjc~>g&&*s^$}oaKihYeb zBys+3v@mg|itIaBSceSG6;zKlg2yv|!F-ymOH}%kmIXwz28&A&<7F`l9A zd!`t27B}e9zI;Q)sRYotz*eQOzEUpzTN&&tYB4IF-OQ7R@xYwm59q!q2gZs@#plTl zwTSOG4uT?3Mb&@%FgNw+f9o)v_`+k^vB@d!+?K_jvekF`$1?-JKm>3wFhb(Q0YsD+ z`QhoL(%r=1GzP%=&h4}9^L&MMCzBSCQdr3N*}X^mF)^6DVLHzP`khNQ%w5daf{hLl zNK)jCoGVTcX(%p9|w=&9qS~z3s^qx+7>162MIXzcbD*u{e zUHMSUZ@1^i7;Bsr^d7SKB!3=$ltPR4oqAi=e0UrkE9s86o|9H&IxEU1KFSOtZJ;!- zcATxy&IsRUTqi5AzFi>6*-0HevdX8Ni~1v^evC(5`>pcrpjAvm-t9{XztNj(?XBax z3Dcu_YJ;7b%%!<^^?r9cbL&KT-RjEc&(!5QiJxfktT_71eaB{t`DXoy z%(RbXidSy46&L9qH~sWa#<@5okggap&l?*hfl|_Vx%>v$={z$TA?)9+@AzhF;}0q_K@Hyd=eOp`L^w!9ZuASS)8Yj6xAmjlDKkyWru)Q!kj zo$+&kQt|1m|0%WPu>F_R@}#mj`to&w#tCLhr24+w!Di6onf12K@l+I@ zbl9tlWW>G>`{xj7KU+*6htgok$#>?$$w{vRJt-pkicLdEf^wzt-?N_k{eI4RHfQUv z+6O*wP@ zFZSLtD9)v8|0TFfaJK-#AwX~sl0a|^?(XjH8Ug`=ySux?5Zqk?1b5eA&XDZvy`T60 zK6R?jsq^i8nu40St-J5;Uh7)Ft4D`hK&y)E5xqPWH(E@^fYoNJ#Z~VM$Nf!1S2oHT z{L=mt*OXR@<4k%m5rC{h^m;;;Wuyy|a=D*^Y=Cs^PTE&h7d~GNdCnvC(7q+yiDWJC z+i|yZkb$j`&}Vy4HETnFi!HPQqGKN`-Tk%B1%Srjt~n@)j)*YeKLML)QK%qeT(oi>mxy(0F{}zn+&A!LUeaT zMm`3UJ)I89qJ z;VZQV5+A&wh!3UeZZ?;52O^8me9}F)Uw@@|H~mhz1;zCc0lK{!vx&3s^ECVc{SY91 zoGg;)IEc}#0Sn1IQRhDhmK6W0OeZ)hn*2W_a862>QW|Yf)YAvgFw7Z?e_)v9G9LbE zO%FzDysr8Z`&P<#RA58c1Deo0ur9K@J{^x8C4+PfV^N~2j6hS+0p4%c7_Y&V5YgQ5 z^G)Vj-GgdNsuhs;x5gD`R+%!E?BvkrRO`IU8l3f;RobgQhP{l3Az#Rc!o2( zNxt~PN$cv3qqKQlf$gwD0u4VZxdCi8i0$a$F!^^cPOrVjks;=J6$$!~g<=snH}tvQ zi&k92?MH;AvW+u;zmiopGMEI!1oFnEj&$yv#%-Vk$?*Slr#4Ij46kVHR85<(P?z6B z&V2~1#~4(gJB-LyI4YrwSATH%$0}p+%!gcSy?8J≀WkgnA3iU@^LaO~s6k0%t5$ zw+r<9kS&rL8M+oGdA7c!tu4iQ6*Me0(fqxq1xG*lv%LIaL^Ckte&Hlprrlud`-(9O z@|#oU`CJ(IaIO2V_Nl?e=}|%2)ZmC?K1b8nzqO;KtqgZysM;S(kL+lvP=}i?w`sgU zlGaeVEq7@aBQs=ci`1PJ%pLup3)`{+?V+ugKX=l_2fG61+pIW5`cZIKBlmj^_-zJ28RUmb!C|!h@Vs3YVsSmFL$9A{;%t*j^R?cCjV6 znmj(3(%9)Vj3<8kYTKnzQ-{=R=?mvHnVA9l{U>O$GX?Hf{JSnkPcuwlp=lz^^eQoH zfm0*|RDTwe*38Pd!2SXoWbHv-1wU`h`?iPJzl!H8`=2a)%K`QED9*H)c!AM@(~vRS`_lG|lj~ z)kF_!RajBQFjcrZfoKdN3C?Zbyj7ATiTHy9y^J6S;45RdSYvt}nGM``Ed2rt)Fu=) zeTyV>C}E0;yRUx;NO!6~o}-R_HaPxZl9_J)(1ARQ$KNsZC0x)AM+Llih*) zcv#9h>w-Os?c$}=A+qBf_rF3m-)OPT)jtu3Iq7Vf$H@AftFiyaCm@$7A@hz(BAa5a zJU1(tnwj`lM44dz22?53=j>Ebv*}&-U?Y6`QKN^0f4+X07F4b&td} zR{XcK5NQAyPn@Fz;uEjg!Nk^ zxIo1kI0VT5;y6>tZaPV2S@GYDU9q8eJr~^y+?^PFYFH57|3k!VbaoT`#Z^cf8@NiF z-nStI$M^ek3#-nl+ZU@aUQE&SjM_2y&mD>hD^ogZeJxu~_=cHq%rmw3t_j1fAX}Gr z8BId0!L9@jSg!Rn3O0T}$u#0R#k83j_wO{{*SG*(WC}eE&liM|JIRyaZZh=Wx~i< zH;?+H;Vt*1<95#9iz;OxQ<5Q2_D4&~*Tw(0J?(59zg6(ZX2V81cih%{ZaqbF@1=qu z6b?@Gz!oxxffG(RI_=r=n8oBi4L# zOt7RVHZ~*r=Fv)zmkAHRv@G8t%IS5KPZ7Wc`lD#Y{;=?A4nPItm1TGXzy~{fueC1& z@AJ3_cu==T+3FHle{vOhwA|lRB;@nFvPmylt>7iuQFrP9)qA)K3)wU{jQy=oaQ^^! zuMy)9u?}5JhB0N8iq7u9q)BAFxqEf}Hl8zK{okHLSZGegVrG8uq-9B{Y$>{j9l7qA zs#<%W80=X6t|GC)FeycWQz_4jH_q*Epn%?-nM0V%&jiaMd+2<|PZ3CSL(kgL=6|q} zfevat)LL(_jJ(6%L#3lre*wt9s(oK~`}RwH2Unb%% z`!jAWWmft&d*N0zOH1$mHfn__iWXN*o$l}8ec@w|D6(<4R9IFLP}($Z z$Z-F{&E-Q7=74$@GWPA+8sYj`E?m8tG!_SK!_}}3>%0+Tm|1GUac>&6}GLDF82wDmAp z|GfE~9{)_CvPDqVme{(a6Lvq5TK07=*NE2Q{lgz1^%rtqq8tw6d$wCf5 z6yl{t$C$Q%u}4{-O8%uPmFaIL1P^O@txt*(;Ssd1F5P(Zf;SYXkA*;|_%fdQ6wN{a zM`~MA)EhnGa5%E?e;HBT^Cw@%jCp$cu)^JihrsN^LpBSJD&dV&-`^OCMjJFt)^}Rm zNouaX<9z+UtWraYcv|Qgk zh6DLRtQ(G#$Q-j(?YY+9zX$sFo96<`ed`v4knwq8Yl61=|6y*pCDJth5|;j@_56*k ztbi*`)kLp$#Vm(cW^Bq*jWS+J{SQs2N-FfT zJhi>N>nv0^(yrDoLkAubvcF54YcHe2n5O)x6i8d-Z?9o2bLwHor9HkqF)8?RvmtG%){$6l~#4S@XdI z9sg~;(>V8avF%-N$Y~`pG`)k%Ez;)N-?CHNE5p(jXO%0bCC0am_VJpb0L?jhye;6H z=v4Yyw-h0OvxWHHRz+o}$7{_MPjn(82(*}q(^M{OUXbFe+E8mAKtUT#g5`q>*bkQn zT;dYL#t2&*rqAE}t9OmK44qaC+;uk+K`PEwb=%oj+on49AFRtK?TlabK(?%wUq5ZJ zEMogrh&jzy@UoeLl-XXvvskX}0iBN#e&;8B!Bq(}lwiOeZ#Jgf_&o%(8|C1|7j$Cc zkchq+o)hd7A+7}lSU4b2755!tvSX{T%BScR3`6aj-$o4Le=F zO-s~Q7)jojIp%Sdw(D&==54A{zwn*$OZT@^#NE9g7X!fRGAB1-9_M~fGD|_^^>qxc z)X$JrO8gho!fqSop5mQ8cHF!$tn0-${rxm`bv4wY_gXEFJpH-;zmb~i51e3M$ZvOr z=D=uf@Cu(=bl+N%bfqmJdLDkp{pA}bk$k3@>jQ-{_bWqbIwc&#O-boS`!tNI49c=f z2-*oGJ(EcuVY>c=9e{y?Y3u3|MKkG=`!1e`y&hQd@m705U>$?-^Ji-R#@9%8Ee(`q zLQaWJb4Sa~q*Phe@A#U-1{fbMlI8oFF3v zlkDX_743KN!vtcDA6s9^nVXS9m$&(cAM%$X6*i(F zS7`DoMB*}(Z5wQ=%8zPPSVAXZ?`+rRKV|3dA_ZBJ>gdceDjO;{s$W$|EaIZ zF-xzqSN{nFQrhE(v&B_es3Ir8wsbAJoPpL>zxj$OGkbUJ9Qm9~J#@6G%r$TM)6-Rl zZunCqZwH4Xm47oz@FUYQvklmRLik>BPo%x1?_?>^pHOiZA2t6GNLZ(zSoY zi;nd(RQC$u8srA2UYu0ulK6by%Fnyhm6c8#Ubb5gLjZX7I#5HQqyP%`cz|Wo7##T!XzN{ z0*;it4lHF9fhX^U&_&Ob2z;+5E)HvW9x~=t198_P7pR#vQbUR(03!c#-z|B+Ub9g! zFgD_+`MN}HH4+*BXVcy5jU%qWX*y&`c=AAWC~)8j{2_7)^Y<}@p8xL!W+|bIz_UVt z_xIp)z0(0Ndca>phWK?i@Dt!tiC;hOboKYu$ND)C8yj149e*h@z-H)rJKsn`uC1vA z(WH5HT3h^8OM`enz~r@Ok`~gMRH&UC(7>MwZ}OI7)Sx}<&uJoQ;6JbLo)_&}3qWOc zBNRzm_rI6sI0<9s7bQzfzov&&b6_0rsvJz395a>*zdurP2jKLg)2H9{iVA8**3z7{cv2422U%24)ASwAw=yJ)yRLIOp?DZ+1#1w!zdRKGXi9^ z!7{HE>nexjZIRzuDc(X+B8KA|BD8bu+4n!$3~4gD4L#T{A6;qd4?)B`6qs2~$qCG& z!+UGCZ=U?@{X&h2_d`72S*8U==QD#m9JWMAD{UY{K54|N#4+E`sb?_zXUj+*w1wX= zgiyXN+DP-cW+yGE9}x;r)$ZcmoTZ>_kW)`*j_LAz@Y($8esx+Nh9Lbe$cNKx9(^Sw zx>KK7=atEpFb5jLC(u`Syc!-n?il)X^6i2kT~C0qYn>mqX26$tDHN0}K^x*2m64+= zwtl>9A*-z!Z|O#m!t;~3p=uC=0myohTp<0Fx2^I(s$j?SV@PdntK#C}3owTC8mVNuaUFH)V*P_(-GRV!lQ^&6?8MzyJahd6^vXJD3|7>3F>NPm**Z8zFEVtshCG z3F^9_D=-ICka;P<`O&||44yIiDZ378$K5rHUDDOLzi+`^=w%8TCMMjiSiUmYyO^TB zyWQ)e!wWr=xprz?il0=nQw>ZQMKqVBpP!*T9^u0}0~AvChV08{ZZhSRDB4rBb*@mU(N2 z!vqJ{IW>b_E|u6l1tNQCRE$|8A&HCaLEe5lA*yB*MB^!%9b4e6vlTaN zdN^N=lojUk*`5czWOx&dMy|gFMTE0wfhqK^|eWw zEQ__#vao9=C!c1Jmp1cZjq97cQat>y_0wytp>wENQsk*d%WI=}PC>?(DJo3eNykz0 zvPqI3owWn84;oYn;3d}xsXZ$iZMp?2PL~5d@3O}$>3I`)uhqV+>35W9bI-R;K8)N_ zufIFo!_-7reUbQGbRzp~X_w_uO3$PG6rnvlr2D6wa!80xe$f#K(KRHHQfgB`&8Wo{ z;fP{3q<{u8`%92l@uO^{Y>fg2(GN^Prhj=cSE)iX8LiCC0`PZ6rt5qlnHqN*GqZ|2Y8i zYjhFKLMY!x1jh@EMi+V#ziwym+jZQ-`E^v;HOl0M8NNZGLYDGGxKs%lVVUo)t?4TZq@SSp%%Pedd1T?;-qtCf#-RY7d08=?SS}on^!TpP!$&t3@cvCfP z(jcdpar%awpM&6qz)+r5v)cnD9hIWG1mRa=!I_x5@8(O7T^>l?3hXvZMeZ8(1G0$S zr`8F#mIq?5V489wzELfUTGRQ^J(9e~@s0^yn$DiLImy*lcxtET?POmRlLEP@mh|i& z`+NjPC4UV!b0&E746L+3Mv~3(GA}sC6L$0*@f+b9XX9PoEx31i5pzCtU>@n(F4|6B z9P4gCJKiQcB2+WGu&5%^@EHPqQ>p?<4d(T>7K`3$!);>*%&HsUrD7s!P$?IhJlvdq zqn3o4hI2sN6du>27sSx)(YQ$|uS|ZSOs*3GB-TNaOOo%`p`9#H=L8;4FglAR59C%y zF0i|k>y#o(y0czeLD+xY(7$x`6eg|}qPN^=r&j;aF~B_hdIfYsos&`t3djT61U7us zFz^Qm8*Z08<=^7XF&%XVl8dy|Vl5fHJ`^yGd7IYKvpKhmNWxz5Is(uuY-$3oF@}QE zzf5|n+~bAp3AywY`xf?YYiaBwcktNZ2&-aw&@;Jxbx*F zR@AoUdVixE84*(SgBp4PhoumYm=cxp!Gnu1YpVimBlPiQ5{)s<{$^Tdu&YqG>s8#N ziEOO>rNq3`agg$hE?eR?`Ju8GUtwMd4cai7T25e-NGJ}Kl6ntgt}Hosi*(>+QGK8t z{MeIUq@{Orr=EJ@(#LDnqC^1A*Xlzc6@25DS4RwsN{kd@t)=&{cN5x1Z>=1{N+oUF zFlsMULw->;>jt6DX%UGdBKYaC4Kuj`9}%?cVe~Y}*n$%tc74UFe@Ffk$D9OH31~if zidtD|9h@#BGkKQl0GQxPO3LfOo69|alR)C2(&$BgNo6OEaNv04f1}=j-9KH?2&$wr zD6R&|GHI-Sh(^GUiWnTy{(7d79v(ebHevJA(eup&1|=-FUTO~Uum-324aO9Daxw5e zXfQg1YKiDA@n)daB5lJ${S|K|5j%$8MDb=8(^eV8RvBwrnZyqv`*If5jz}9g=l)J^ zk65ZL4zb2K^hmdEJ0U)t*F;e-5^Od>-_&&bXW1GZ%y5s zVHwn;1#Jccb%vV;q>=kl^>A3K7~4`6!11P4G5Q1Y+q(uqyB%-XpWHC6=nZf=!y1_< z(k|}`mgBBzB$y<6W21H#X9;o=4*_0#%oW&arsl9OP_!+=!{{OH6z6w{?)U?b)sZ6_ zp8W3fS1KLXUq zMjtySCTW0nA_j|$FD%ttF1Woz1jVHps)4|aTB4mGV4~CmDQqI^(M08f8c|11 zqar_O`@Qs$4eZj`%9)9Ow${({lzCnomc^SizaL5?5?JQ(V!I{^#KCv^nmfU+J1dj* z9>>>;$K5{15J^iu!3O4Q%JJR=m>%__K09dx43m>^N=NhU^f)%C827&8;tF2<>yKM_ z%TlH8O?1VwX-hKndBUBeNe`iC8lf^)Ej<^Pj9X)U*_wdGF>tBKK6P$hzbcscB4HCy zW-pT6?me02%HUKRyb|x!7^`@%dXPe+nx$&O`{>FJa}&+zVU2F<_OMgAs~a>2#gKI7JU|^cEeQPLM$Z{O-^=Ky0 z-N2g@6hsNhRDdw0GGZX|zJs6%qHBWoGr|!$iEMc~n%LtC98aX($eEHEzOupo3@5Ap zBu+0KK)~s$j`S%Mo7stDN-W)}{w~w%^ zmHWXnUAT5S)YDSYL_0Sl0cJgKlkObw&e=;^CO1vKzg@$ucRQsxj<;0g>gO~Kj#)t! zrnXir*lbE*#(mvP8es!a>ogxUUiNqu9i^XoM&zfm0!vP&;^gTXF3~Lz_V6_&CF=5L zPSWCcB2>(`8}7of8#h|m{=U^f9j5p?@F+q1Yn1rjwv(4^4Av->l9U@3{ z5xb5N_!>hcQgA$!JD!`|ClJ?*7YWifL+rGgWNF1s(nw0th@+(F-RkS)mW=ns zr8Ut96N;pcSfk3LZ)HmHleww2S%8vkr=MGIO`5$!Rj8HE$q<(<(h&_KKMIn05C28- zgH9m5H`DHPvm+>{-aA+&jfi7W45tMtZP76}VhwxC=sHhHEg_o$x+z8?r9aQAVCY(L zv_e86&N*qzOUBLZ0(0+;)>3_2CC_1fZLTM&+~pE%rNaW6o8NYrz0)97c9}rQv@<~= zSh1cql+9|>h|(;hUXe5{=n?)?aVb{=cG){ZM9*0N${(T*;r+KOhYJkCM(BLw>)Sh} z;tfCh?p(twn)*t+RN9p{pY0y+ggcwAa`Yzii4)+c%$E_frdWTjI+;;SS6&GnMlkZ@ zU~lDhTU7HWJ0}OIecSLodv!wH+VA2AG-Q4ybpp1|q<&`w#QIov^uw#%@*#ZJSz7Uu z-3h!}F(+jQ#Al-+pG*_*YoSVd2_?3>RDA)?sjP-aBP;^Mwv0Mn-sz+PDyWkm^5@|& zk(0KfmdpW<64h$Md(+vI-Wqpokn9bgKBtA}L1`pd)-+o&%G}%NEXTY+A?OrK@-0Cn zS0Lo5Q{lz=dj9Hxx_)>sgh`ZoQ_^2wr-T4H{sc6$<^%k*Jus(+f8D>b3uSA0Mj*|5 zJFCmoHv;!|HBu5&54m}P4w|>sP@IDg2mp~xE>}q{#F@cjp|R( z4+{pG{PjdfA7pIlc_yZjAsH-fq+>6q@Oc^2=Vf{JG@TZHKJ%joa_G2Yp2_)kY$BD(CF|E>AT{q*Po!V2$ROL_jNdkHd};rRo~Fm>!PlHr zU2iW-ZREaGr3uS))&zS=Ccs`8BK=3}7<*E~NlaQ|wcH~Y=8Fj83GZD^O&Q#JrV?#* z+nZao%Idwaj4|VQ4G{jhwS=zm3C`}$M#%6Z%|Po9q!5`S78BW2tYGl2!El8OA+gG9 zyg7~0T{bl`iiUY}-QaABheUKT4*b@-&|V{xu^JBFWPAI=!_i`fAl(FOEUeMToRP<+ zvajJO95{72rvGsLZfA8gbRvmzuTjwGT3EQx2y4Q7IQI1voa3GcO=Vd(5O?B@H<;A} zUezK+r!6W9`!ET5*JU-?Bm+!ff|~Hvct%=MIJC>k~^o+!@JysfBwX8;i3C2ZzZD-xxlfsHwf;4>2Q9 z+jDN9de->p1?GrVNhV2NCby|3iNo(Q!VmbZsjiHd)=}kqReZu7QmFu}CoLHrGgh=R zpxGHuIXar=-)j>$Fvs6~$v|3MMDD4Gy|LrmMi;MZ=-lufl52zPuq1Vr@lq+#L}Wjx z3AZW`z9WMeXm>!2D=THyk0srp@M0}?@)%Zgd1+r&I)ea-SY6rI1UKyA6ROw{QCFG~ z@cFBv?ut3ywN_Yvx?9h9)`fIxbH#iTldvzB8SQXum}rV>kC~)TZOxv4RfG!#6+NlT z^K4Z#`EJ1R(0o}jK}yVSmTDM(9s{ZaJK9PX(N zI+=&vG+*`H7AdmU^^URHOKP+lm2=_HrtioF5}Ld*{Y+~TfE|tSU4p=D+g$p z`eBp_A#U*6Z}31dcYjME^C;Yxt}YEWSy*WAh^1$pubqaW*~cGUd9BDColGF=F_Fr2 zt{ZlWGX!ZZ-^;6y5!veWDew-@+8`KzNrqhKuJ_%Fzpp|#;_+tVoODt$81E6PGyra? z;;_%^O&{cmNQavvd!InCdj4%3)TO9#gV~v$KIONr6xmCxW%h%KXJPiF!x}Nd10T=0 zl*1VoaRYdh6E6LBZrTQKbPjH3XyM264wVTzl1-0OtmB-wy6s!l(B**j?QV{=iz!Zi zE#o^w#;jtE4sK|$?61o*9&2r-U05UlXtad+{z9k&{zyLu; zmov$Mf7(b1T~5=L^r3?k>7ZV#>P!;a@SMm@>)Ro!zNk0gtWcvnQ1}MiXg=g_pMS*Y zSta*4KT@QIwZvGi^Hv+Z(L`JgTqQ1L?KWbb%=38V#66)@s+dNW`2*Z`e6c9E^_))) zn|RP#tx?OZd{|~~)9uCS8gFa-mR2WE+7e$zDLVvrPTMnF_tNUrDF=}Wd7I(7*II-> zNd*MPT||lsHcMUx#MS|qFes&^5Q}f1AOy$Ir@;Q_Us3?>!&;IxkX3L;<=zFv31$SlD|3mK3YYWX00n#3W)C))T zWEFG&ou{cfEEAD-)Uk~dKwJx;q-`YZo1KANRr_wO3#e|Bg$pt%@H@HMeYt_h9$O1;x;LcDi1KJoI!%{Q-!ZcnB6;4wX>S`XSev1sCW486z8n=6||%3nMS)wcAhG$Gkg{IlF9YuM^W~UNQ{9vxqLHY2xJ6O5M&2MCQmK zWF73j+rYp!)cCs9l<%^cGr&5ZM57+H==auQH>PSs^sR|H{?(I&_+UJ~ZDGrfS3DiR zc<8?hLXal)K2Y+xQELDq3w5+RnuoPc@UsQ&NOh<@o|4O=$ zV-_%L>qrzDB+xa$DAy_=*8s#_>Vra^Et{xss@8&a4snyvh)k)%LBMt-{A36rKx`P1 zkdR;L;21cSiMq>ahu99XM=sSU^s>RO_qn*WSL3|HCD8DKSVQ_Y_>?KM)GK7+rM|Q| z6a}z7k-r+uYZJ)WUv(xhMSy%qBG{P@(=$FiiQrN3n5X$#P7nRm=212$zw+1`&BMc^ z*32Nt*lJjB$>cT8A!1h)L!DhFBRu**Btl?L6Kyc_YDi1W2bbGBVIfr1<`^*(La8j7 z{;uyuG^M<11{)iUlJ`=qvF^u7?rLu6a!D!CD46P-Gd``T0IC-Q3>S0qjGI;do9|VgWU^!sHvp_A3(ILLq&U^5Y zl5%rGf_w*F5{z!DLTN>hA%gocI3BEGl%i~PkbS9`q-zuOH0lvwfxs|kpt;IV`qs+w zwCTc7t>cM6J;@nRShZh)K@{Sa0%a$W9>tQuUCCk67EM z_oQksCOz{|{Pgz%0UtUP%Q*i>Z3icxme%_IK5PuBkFca80m=Khk2qwk?C2@{P_YW< zrwlOQfaKv~HPpnna3luOe2FfT7308!j$nn{Lip-k+gp$FPK7fMK7I^zXZ%mHGh>eI z9VKKtJdg<<R`x`xFo6`$g7AS68bt0->~)8ikN+wt7c%Dd;L2-m;k zQ^gG>Dr<-NGrWU!HwdaMBjvOd&%Wo~0J}=uLC8O8V67c&2b20N#O$(vS{PD{Ksx(j z&cesw{?bncIuAj2`17Fu7`J?(!Zt~typ}*#U^9qf%Z^3+So_P@MXz0R(>id z9FBi|>(TOl?clfur9hFCjPV@4-iGd`t=U>93HrgkB4BQNje{CB*-OYz-0K+aU9B8Q zVXycT)5yJ2t*;Dt2@L=Rx8*D#&i=a<2ZtKmF$ z4i12)&bZH8iB`EE07~*C6fw8@aq3NjWc4$55Jj3@s>iQSMpWdxT&JD+no?g&A7hc0 zdq!F)xZx|WZ)$2bdZCcFho2pvH*I9=|eoH_&zU! zzs4%?Pr^n7zK9Y0*Ji+fd`To4eT;cx>5R7*Too@4Hs1S{I{4LD>m(*NLq31Er}v70 zBlmgM2S2|H!KokcN8m2f-`UXT*e&_r7xg>67~1})zyD66Wi$VmpJ!H(Ws=dO_ymV+ z*bnLqQtk7Je{kdy5fvSBJ=+j_wbm9QAsb(U0X{>n%%3pvC3ub9&3*F8^y(TUnn>G1 zrpTlm`+t`b%Tj9+c+QXRQ~#CL6CxEBdTOJ;wGQMc9bU>b0tW(<)vu!#!pSx8OjKM)XN!GC(M zA-bI71zxIU^5)gOmF`*vDR{FL>~sP8G18#kb0OVao6aQMxw0wPIhar5Es&D+KTldk zmf46d-!UwVs%%bJ=zCi|4DJ zrv0lY3VnomA^Y^f_raC0mh>bj#cgZtPW74*;w$V6*=mftp_jE5dI5VWJ@Q>JP~cXA zFM|3jbMBjr02yw_Nrx^vlB_rDtao1S&hJamAmfp(K}a~f=7n!h3vU{(t=Nj5!i4*z z6FodEoeOx^<8#J-X}v;}vs2L*rD-SHCyA^c1h&-cwqdpJ>jz&Lx&qCgF~ji^nr}qn z_WF~l@mnlEd6&Efn0Oi;oES0S@VG_4_^ajU{^#_s4*^GzlZ(gv(o)VxLV9)!1Joq} z(JEb4cx%I=a+ra>tUgrNk}U3aq}FheErsWs#}oL|-r(rhMt4Xf!66hlXVge304;>H ze~`P}7Nkpx*4W%!yoYcC3_*8ble!C2n9O@{jVZ}|Cbtt|NrOzkL4ZzpFg@*zVHY{vP2UyO3~nun230(0|MDt`jR~$*jqK4 z2>;x3U1ux@{hXj|EP2)YqvG66#x#HYCMP9sUYks!_v_NQZ$XbVvR^^6#WHv9v$HtN z{sPgU-@P>eEOb+*6;W9POE>yAn6KjUvLQ8rC)AO)hY)NftGCXI@IMDhXQ~2S^ zINL9kjymL4;Y8eem^Q4BG0nb5Q1(o0DNZ=-qJ<`ctrN^>I5%JAC*LS7Wh6!%FI9xO zyV|ketg+l&^sxroV^f|8BT{sWVA!#~SQuM~@=tAPBq9hOpJ(S|QV`Sr?}8KZbOA-C z*$*$QwVp8b)_o|rH)HJ=hREO$CNM&qo#BEMSg|%6TJDeo5i#X3wEAOfWjNs&&LXg` z+-EH#aD^{!b=dwITj2M)vRLrnx)bg*_u#{yib<9>!Re&TeF?yhO-(}z?d_t* z_JKrzZhIS5e+w)E6*k6TixZzZM+0CqDbdNiuuv2nLke{RCkco)SItW51!sPKVy#wW zrrb5;BKi3hmaEyOgL;3xZ(`Y}XIZxF=McKXJ!fj9Po`$(y90aC*Qx>(^`rh~ZK`MK zTi{7YdD$g{e*{ou#Ww!qtLo`!W8J_2V|)UA|6Ioz*bK;Zt{0j*ySpQW-7@r8R6@5Z zk@-u_`G@j&+JA{r+JmVD8KF0M-}aQCl>VAb?l*o81_>CiL8I2xQ+%YW)_*J}g>u4| znB>VPX0@;gl#9#dF(p1B=!hwf**@zq{_~ndhAa+Gz^vE+gaWEqw{TB3ZN^E} zZ=kscGvasbjM)>o-u4J;dnrqy>-x(W;I7AnO1=|EOy>A0iIUH)Y5)kYSz91QqE4~YjojhcKl zO!h;}@Oe$wTd0RFr(B!r%0D8JyXKjc#MR0C=Ew#IdK&s34KjUuXq|J7gc`M`7#|vs z+Q|)MgrT9g*4`wJE;n($D1ia3)@~8}1jU;pcJeK>F%52{8 z*0VN$PzZqd2)72nRw|R<*I2sSk0CA3jVb;2iK$_DxQe!4Oj* zbppQ;y?d&^(AWq(^2gFg?PZ#n&p5=86{P%uC$>QaE@b+OOuE+JFuVR1wT#JI9et}D z3WGnp4h%Wvp2Md9LHIJP^$YWmg!%CMTh|t;C1BSGAx)0Lv1-a|`^VnprHsy)%oQueHbMceIIg?|x-geL+zwS08(S9jBOs z@uNnwYHU>lJt5oM%-v}}i$S5qaxt1R)@-2gvIT2*5{~^qV#zz4Pq>|d!0*8)FeRmt zU)J&(so$o9VXjFwVe8JQqA)6*-^-uAi}%MHx7X_I-h{-#KD0AE2{{v7F0Lv4_8C7) zT-A~aA%-yI3H4tksD(p=I!#{rC=aggQDhvc|m75&yh!{zVO_WOB|NJZY4G;Y zupemIUmj~BBt#?7-fRpJ%WCt%HY6fZbXgvD-c3E+cZSd5DfrYWrC_Ut*ThiO6_AWd5A$4 zuzznnGK=GR&%V&;?`$mWg1j{zGgJvT0=#9CE@v9Jygu5QRfKPJYX(~1LXRvV2l-sK zy-`IOh?Ci5d$`A|dPKKJije>8jZdE+B{X+UJl^&o6iLiMpp~MLRaXbKZPgygu+`Me zXH0X**kYD?d0?*)y}|d6SS_H7czC>81D7ibKOBw7JqHkKho?K6J&8FIawBW-{Zyc` zw!Wt`%V2%HjNVcZNK)m}XHic|N$yJ7&+RB2BFxWfol1GH{;9io2mTQ&na)eQ?&Ae2 zW@Yyg(!AF=Za`Y#(QoBJA9Re49Vjb1n0@FRIS4JTvd@61IqYi6j7&W0IKcR5c-&l2UT|NHVBdq44xj{uaeT~7^F1ML{Tcx<_#>b(EV`2LXP{lQv+2@3u^MV} zXs4+%uSy*Wdu)425J$h~9e;j;XCfs7<5H*lcmaHpb0`K68kG-VGP!@*{tBLNJxvC78kz@zrRf4f&tu;2G6F$XgS<{dk1fGB&r7+Cjf+ zwv^XR_T&2sNI$!cBiKC^-CRugY2`Ho-Xh{vigzgHUby>f@6>>`1fFbQp^Yumbxg$@*fFqU-$3)-&1RN9NTXwdbX1DQ;Ir)`{(s1jM4jJfs79tCi1Ktd8*y@RqhLp? z9!=ysxVSzNF!Hy`?|3I=1eetijav?QmO7F6&W;fDOncJF7#q$FxK>zZI0-(@{n4KO zTKTwaT$SPlxqahm^Lk70c0WeTq(Yc!`hC{Dj`pkc4Pj|AarL?`8bXmggbsfZO;krQ z4j$!%Pw7UD~MmSTM7%()BEM9+K|4UZ^*n1|g-k zC6IqrwWRF3Uh5=0aq8I*z_pX0K9qP?5ikae1sLDXAE6sgZWpVgB^S0IjEDzR9qC5O z32wM-k#XyjimN4M??gsPey0_&!@l=r!VGv!p<%7-z_*lO60&tfH0-Xo|7owu?*myN z@|eCvGjwAZ`(dbDl<@ln$;RyWjPW`xMbBd|ZMwA_e-S>$;kjl_jiwKaqaRFLend3t zOgdlaE>@x#KM@7<>FsdrD{^_if56<1uuCJ{NOO^D_{9C6f)B+7Rk85u3WK8^=UpBr z%t?jK60l`*PD7UpclpemY%^v|Ui55bN;N8Hpm+Ah_IKsonFUlql8;?&219fxkf(=l zXQK{-nV?oazg{so#iCtbS~t}uMOn2%xY=~cok4VntFlz1@!YV3=R6VYh%vhs{pffE zn!(?s04K2s9yfhhbtmi}X^DL70|ipQ;e~VeFzD((P>rq)#mzF{^JcVcjzQOL{%q|s zU2}o;S0vqAMpG6R`j?1=gI+@TW7N%u>rXeEJ|lmU;k|2MAZ4-tc39%*82sx-sFP1n z86@-%xl=DMdak1)SjtTd z9Ena4`;=S4t&-b~LdxWgG9Z`}>|6_GclYdt=nU?v`I@~jYG9MhW@DD-3-tFo6U;H|_h$llu)Pv*=jMLQ7|4wcBM94}kyVJ0jvMKt z*Ig;H*VPByG*w$MW{GA@iyIlu)kPIwM?#F)D=THh7*-`s6^XrHQs&AJuSWkVKw?Eu z61DX~9t|?kn?9nyb^Yxwk6BxG4B!8vtgzEE1}=N{!ZP_4edG5Q_*(30o59kg2@GSj zBr^HXfNV(Q1GZ~NZ?WKEXpTy-=6Ah*g+{K;#^Qd?=gB=xvZ+EB!zizD=2wXZW?2~W zT>g4zl>-GUk_}pmg?+cr3jRo0I2FMH3*<5$ZgV0UqpFtiqK_txw_3sp(LgzDXm(3} z^ap*Z2My)uyXL5yos$dNv=|Tv)Zf8DIc0X)R!1K-T?~Dwc8La+vUN9cyBKTZOBv)n z%McsjW?%-+ruF3uuKLRE@J&^Dd#B=XnlrU!0M3c*3T;}hvLO6G-|9k}?ve>cc|uAr zEj7vhO{jSS=RyDb#>k_9*(1vdj}1dhJ~w3+ox$>z}@B#0|$xGgBW4Wq;5Xdc4tfn}8^g-#}WhY~Q-qT9tR-~Dcv zZkd`(x2s(;b%h;!CD<#X@KC?^FexnBi+WwjJr>ogbfaFb!2EeWdT!eLrxHm-dofNa z<%e(s04m6>g|+!cc?}Kj@@NG=YOT)qB3kfFsKEO*!}E;l;T6#M1z54j3c53zFv^hC zO&JA%lK&*OS>Oxl)MY42PG@~LN~Mz6Dk))^5xXg|e)tXv&2w{YisZYBUt^iYdfT#? zg=_)JH|*{JvA9}&6zjQ_bBAr+d#e%9FWwxc-nZLQG~%6YJ^e^w?g(9Yi!;V;#w4z{ z{gG&~l|V-HJ}2!XZlqQ#Che!7f%gaiTp+{v)s!-PSbG3CV)p0+!tqWw&clE<^|BCp zZrmZo^;~XrQS~QGerjoei}g^Y<)=?`hY0;EA|rbiAE94-oe9{E`}uV(@2Y4osL|aM zrc|A4L+H|KxmbkM^{F>=qh3YcEu%Cvd@wzRm#03~+uwJve_Awkft{E*xv0U+C>{;c z_mH=MWnqwj66cPbX%aU_y#WyEL_>}Xs?-4IeaVnCQaw6bZ$h}7TGWQ_x#2%?!_1Zi z>#cn?J^aRrOw2RZTl5efwf7SG=Md(pRtG8`?cqg~MaRaJc26Y@4ssy zJ4*{>F+3(QMA&lmCM{`XoSvuy6(~DIc07`i!FlUAiPp>}Bwe>{doyUXk%SmnQ!4(| zc=-mZo9WepN>@ps$Lihcv5C{!yZ;e27x_=_N>KCf*BQ! z!(F#w1&z9k0^c`H;*l{G&q)RaC0kNJn{oFvxM=vDCZNtiVyL!`;E`W-6hr zLumyDbW#IJz~>aBwO*!(>%Je+`BX*>J{u`11ms%cyv9x}_9TgIk@at$MO1l~{JG{{ zeJNm%y(QgN5A^EkWEIcPKW(g`^d=47jIMlEEkfh-(f=HSeiLgt>s{Dy)S0I=OOqjc zS3TrtN$I79aZ1JnFJpYgezP-SwWr_^hq$POIYK7n^r%$gY4Z*M==3( zC^*Vwgs@mw*>yRxt^l;q(6MWBC2SSc69`^P((A8R97s%uC;&q)7fotj)KsomLArZ2 zB5&vkHOH@H@oK)c?l%E8>kD_Hm;rZgs=}89HEZHQD`7Lz#3~~~2F8`elOb0fhO+hmdg^;# z6G<|a^=x!M%!7bxwU)+E4Q&{ozXxF&WJRCky)&3eC1;{-gigC)pmUwbr6gey#(P-h!TY8M3)evw~3PIj53Jm zL-ZC=l3=1Fh)(oAS`b8uZnOj;%BT}%yeI9xpSS$=uIF3p`_}r-AG7A1v#xTky7zDY z_P&TyvOdg7HB-u(zC$slu|+ltrLntSZe-&3_a;R98=O^r>3BI4tqqd=&db@8r`ZW3IFZ?Jb2RhZ`N z4pqqabboen(OZsRYzv38_qIL|mR;$1wK*DIl@YamPGS&f{;>Ppn-%dYrZ(wiS_GHX zZr+}Tf698c7@@A(ajDNaqPyl+`K2|Q>$cWs?_n6M>SVQe7dWk1T}Yr*@5dgz!`aT! zF)bFciB*xL_2HO8)pTyho$t{N@}EC7H$jf&?N&0ZO{(r{HGa&sxVH~w=5gj@sqcF- z+G1X1-cVzqt4(%eaEdhM*dH)+@VqM7zwxcYG z6ZCF-yxoF0zF`CV>#${)q=5+Jdq`M2=%P~QYFJ(+){}RzIO0OoMdZP1dV_Mib)L%5 zn^p@DQv-@~YVN8HpU*3H48}_xoWG5CpG$~%aZ;A!58;f@OmZ=^-btHZ)~odRX4{__ z$WP377Nlk#zjb!^G30KwO^cvQcE8+)-|0{*L&CwHn$7yOJm;w4*H3@QF_Ens!003T zG5RjxlX;F}_H6l^a0z~EGM@ZfX(#-5byqIe1ucb9UMsn8vl^MLt&Qp}6qlN&=$S_7 zM)Tc`p?k>v!H!bkHcO61+92cQ;)xAJVEXRd#M-&)hNey*Qm!chD$AQ=vB7IUULCVD zg+tj%TQ$s(-Cnyp)q(E``xqb~HDin#c4y7V@Iy5q#CZkLp?R&*JJ@yu0pvLOHD)nY zBsy2P$%rGCU5;e5oBRYS2)4Jnfw!zWmEC$q0%Kka6C5x_6?fb(zIoSF)rD^=`k0C5 zTjT4Tz-};d^C79zjP9hzbqx%pdKc{Cb>KraDN#zr@=^}#+sy!uqSp?F%SM%1%i7;M z795R-o!ZKDQ*J(4JnO!HKVMte=@TV_*KfhY52W8%>hxpe1?Sh-eXhkv%$T$_nHcRe ziC-jW^ilgoL5R-Jl`s2=QbfeohD+_P`sobs&cz_VX-PN z6q-Ni3ImxwBjG8_`DnqF;>MW{G@9LI+Bn;U#dGqIDVnHJ3C67@zFfxnU#S*H2Kk%{ z3z)h7blHM$aYD6tcx*Bn%8L3o(Y}pT-kpCr=`eCvgv@7ew&Fnjg=Vnrq?~K;uQv46 z;Zo5!w-EMQPppm4DV5GS&N6V&E|Jnb%-w!QT|GJQ-B>m%N#k18nU%f@(Q@ez($m(n zvDNAjxl&L0VxSt2zArcL28?fF&*_e=sjQqEgR<*K$#_=ngIF}-{{rS}f@p3LR7{CN zuDm7bpl4WW|8(Ei?|7*%)4Aj*B2AH=b*w7HNF6`R{=0(i3W4%>w~+iIe)GB6on@gD z>P+6zy3b7ooIf1ecFZpouP%bN6JfIrKJ=jeW(ea8aCL;S)2q!YpX;udChan(?Zo>} zI4@r?YYGZ3DtB{r-J0a^rK$9iz~nM0<&5sAmn0J1oTyHHEi6iuf7VQYu)NOef5;Fw%DzRm5 zi{s!GoYPk%mx@ZFN<_!JXZV<4X;v1vE+ewo`oZdGw$9sJttq%eZp1{#!gA@P_I)fp z-IXIX&qpn)^-Io|@8~GAWH5!ija%uBcVb%^h2rME|l?NXK zm=&hE0(wjd$DH~}#VLv0V>2FQNbyvsSF^PS4~{heuU+%-vV7y!UZqU_)b){`tB&OG zJovbCXVQBf9#uBF<8!^jQ~HDR^;q}0_z3z~YET86kIR*b78N4(7|M3`Pm|Qs{d}Co zwn+F^gvz5I-fnjs&lEG$q|yBIcGMQ}=PHk=V9Jtm+u)W^zP=e9OXA;_&0xh~+?Br8 zgc7LN)qn;`5i(6g@Gg~BQ9x{kj$FS^$6*<9wn|!=yGd5UQt=-4?KuhdP@&R;LP`D3 zA59jB7LEi!5tyTc$+4HaH65b|WanrrS>=7dU+{--N(F+!kb2q!X;p8RC-GIa+@h`E zdZY6;AJ2&e^Eb!2E8t5)EPrE^fU7ve;@}sE^W1uziA`g>^}>a)qWOI-+##bm~5zC(+ zNP1yFWReilVg7&Gi=CR+l8K2av6n;cXaN87wmP*(_~B5XG4_;1bDf;~Yw`~d9eD{7 zkL+UWN21ql6IWN#WFQHUoF8$}0kiVIn-lV@AO6>rlK-Fl|9I1RQQ+f_H-t+1Rla!C z=hYy;Uj2y;s8akP2U#G3)6*Ge>pj&rhMp!TCp~+XcVO25oaYGyP|*FwVSbSQb%19D zu^#(Fc`5)n)mNW@mP$ZE{DhDPe++rQ!Z7Fp`Xle(#=T$9{>`k3u_(@kt+~b#Qp(rQ z^p1TDPA!hO6!C(L^fa%$);A&`AfS*2r^`I5e1~|Zr}=f>0^?%|55>ck<^i`31{vZ` zsryjG1$;qhi$LbWT_90+4z^L}%x7`$^R^~%`^>QCRs^Mn5sAHY>&G-x1m2HlKQe!Y zlLfx^&kb|Z1^mB$ztH1;s)+aJzoYVX@T*@5^fcqti9vt<7gG0f2LH?m_z~w~BK%SK z&zGt^|CBNo2{hmT&4s+1ej}U6eN#4OT%@}C!GnjkwjZS)8XA6@{$AFK8);y3oOE>3 zviS26MVm)z+Y6f9qzaxz*j-Y40)=9UC7%4kWCLUaoAg z0;qRC+r`wS^=8HsqZW-VRLo6e%YQW~_- z2Fj3qY`EcFXmurC&E5P@ANU!`f_={#oeEl?F~1c8)Z*j>vszbOf+JvJVb6}{0Z=*; zNh@FG(l}O5*Tem%Z2q?-ASjlPdw2SdV{lfa_BB!hKp1U)0J+clC+F%nevpMzr^<0! zL(`M!AJtw?R19{1|GSUJUtGXne{umoR*e|ced$lWPS?Q&EZ4!p?0`u-;`ab@DCy;V z<@%np&DZu{v*$$wHvs9Dlm3^Pnxr9u$MPgQyOgzPUtQJKeC zBJr7N;3FREQp;pHqhqFyN^KHQp;Gf3-b>o{FYT+nqZ_^1NPA7kCBXLxlanCNgEuDb zB^JXoUtqSW3G=wVzYs=;RnVtBi)Ja5s4l)o%gcR5PS;VQVn9zk&{gv9MtW#Lf!_&P zK&>R~bitg)%Al=dssp+~$JzoI`Ldc8$xAmw1~>x1WuMTK{)?&CFF?{b=u>MucXar& zKcP4g6a?#D5Y938SzRChu}ae7Pt$LQ@-7=Qdi5)G1cR-v*He+3)welC$%lqLI3^=l z4}@?MJ2Sw%Iv9+_D=({-N|9|ZU_Ca*!j>i}Lg(>y>fV_~1|*S6mceB^5`WLx67dad zNTL^pQIO3zY6_~|y$baY(HI=WYJN01-JX4f-HA!S)Soa5?8GSeKgFia8C#(^E(rA~ z8h=MHG;z@>DmYKNX6%0_6wMC^6-sqUL?J4TXc*(+fFsj$KLSiUda~J%>7jOdOxeQ^ zDAotkQG(vkglg${u3f+DPv7~scvGk;XrDa3%ihJqlQOSy*q*f6Kci7&;Fuu!|v|Z|fvR_S; z*@%fd(~rAY#s(&5h@6#>?!eID0lnfDe@6M0PrXv~gkaiOGlm;B9s4SbQ??farP#s~ zolwfHAN&f{wI!noiY_iSUdmmBb5XWq9w6|B?zw|!u+$F)aKrL~|0!b06Qo*B2%7ShYbH6qH5K<(0myr$%NnFRI=sZKd4i?p8 zXV80%xXAyoL#JtuTcv*BCF&T{E?M(fRwf)dlss-0{+;|3#wDjQY?swYi3nbQ9>y}k z1;Kvm!9MD^SbP&sly7*1TKW<*+%Jl6MAKyk?>xBbc5l@{?t$y3MtvYLPU{pl*~5^p zy@^7F3q~LG?b9A`F7RVjE!*6bTBVu-L5E@8+yXUT@?A4ATvTN}IkMS(L#epi(0}G~ zCK>)y+C*kya!;euw#S}ShR63?BW3p%r1#`uJ6HnCpfG+!aG>!q=Kcp0VQM!j3xvZ) zKicsA`|)Z{&Vvtv=F{SA+XLvBo2?n64e?6uO1_|W^dOAmF2@}-Ee8+w;<|)mXi&gD zZOb(M6CO+n!3g0t$%kSI5R1fMXAknwP{ykq?X)K5apTRlhLZX2wOKmkA(A;EEVroK z^;me{uSyP`%&t92K44JG7dfL9uQ*F8RD3={dKQM%+Gv`h7j_Meu__v4sPS^VEMh{Mf?<3?}{jlBJngv=*tPRO$HA8Y0Znl9WB!;y^quDUMP`l25`_ zzd0@Wt;xSB9w&hQvU_$}fDua!9^Ayt)*uyg@_y8B!_AC)gN! zu0@Z-HSegb$0=vW>6cxUiHjV?p=>>PQtRDNE9AZEn)H0WHX@7F=L_=5H>}a65M@ir znD?2ZA})tAVvNm9YRgX{LUT{cNyyD8yOzFY8NW7i@P%zR@dR!!BHfkJ6L0uTMTFy8fh{hc`Z0CAo8XJv^YKKD+T?KFCxR#C{Zj;rkGaDYz3_ESr+?w*EcHB*$|Yev zcuHvCA7RaD09bg;6VztoNwMDH(!~}C>VT3ZQk`!cmS7Wc#^oTnh--XZW(4tV{lhe) z#8Yinv%;~=t5FYF;z^U$tU~#kH9wY@I4LTO^j-s>f46xD^@5bPT8=bmGud>&&c*}< zk_5kJg*+eau?cq2x{V#7FKzFw^S+g_FwnhPc7!URXy2h0TD|B-9|hq(@iZUqpQb0t zDO-H%r4`Bo@Iqo9x#Ga_495cl9`o?8MxBHo)E*Zpu5Ip6^A-uJo%<8=CcNvA&ukI~ zm}2IU`&~wW0owN4qJiZ4FoCR0y!9t5%+ts2PuW5`iZ0qb*tRrg@*s+Mt+fxBv+Hjd zlyX!CQU)?lvvatB8M?QFk|6bLg9nYv$<#3-z2`Ee8nt_!Tp}xf)m*4WHI=n=g|X>I zw&IFRA&J4TYwgV6WH^u?kFU0&VxNwY^~QL-+-~loAh36{I@?+Jv-Mb zTfYQ*+iUxESG3QJW_@TsyvogYYFn3SD@GkjT5yg$UpSCJ>siK^?lC7aLqoss$+$v3jvo^-tBm*K+ntO%9snzvZMqgo!$6v|KPT-XgYqSUh- z_I!sb674Js<7#5Xbo6m7tig%hH9%i#9$8|Gm$FmXq1)Xpc|1H(ZelyeahGx>mX*yn zn=1gPl%JA4AX?}{I9tRy{V8PlgcOjff|J}CYy5(uhPB^bx3c#v!PcTpA?0JVmiaj_ zhZzC?uVNGwrdPLECT8QUOjbjK(>o%`JvxGkt3-Obs1#AxOK2TLW=TyWiOADleOVL7 ze(@qig+(ogSMim5`UUtO-TD+7Y@;^5xYpP1>)AcnhrpYEULfzl-7?C#;a zNw?(dq(DzM!v%i45*Vpb)*M>9{;6lfEtOcntr;V=-fTcsc4xY83+Z)jLyN4HIr-TnGa#;hOGOG9MQ zVuB~B5iS-A@HtOJL@}i4F zs`-L8!kaNBuifwxPg$!ndOAvb{J*Bg<+=l)UW|(bizwQkWA7BT7$l-GnacP%Q|w{OYl*+nOy}@D4EX${OKllu;5TO{@U)D*rzVM@qVvJ!7P8pxYL*b@ zGoFKEgHECksAHtjGWQYQw~QOwez_qN-_7bQV`_;+ert@?4}mTAS=JFWG_&f(tEdiq z|D_5BwQ$nJ{qoxP!pa#qq9WBBJ>?kWD?m8@@{*{J2((nR5=N@vzcVD+;3&y_WEPC+ z4@zOb!KZ!bntCF4t9+0M6xvIg1U8){Lk5W94XBkq#Z3p9I_7JI^6k9bmMg~j(c_O_ z=<3;fsHGESBts}jXs6>G=9%l4ZVD`lsAUATj~Bh1BNzI3k@Dzi1W`BXRrZVNri)T! zT@iQD>azWuudYVBkxWXk?HQFSa5H?Wy9ZTkQVyarXFg~@9h$grVEl9!l*nN<(#qVn zC>`YcO`iLiB5*>y%U(-+EH8&uobXq9W~1Zswu%70`*{t937u;b>)A>BduaPHdm7%@ zK#F@sz?8xc=+A0KE6r+S#;MFsi$3q}%Uv#`l7TKt9fadXX$WQ$P|{dQMDW$W!sP_x z%B{cn-=62IG5QYI3x^BdpWi$a3z2pn&vQG8|3qtkioH$)Kfd%0FZ9;zFvVmuy86TA_j@fSggT2n=jmS0D;&>w zc%Y48xhyvp66O;MWi>3#11*iWLJurAD&9*oCQ0a}q?NIx!o|UmI}N@URtYBB9-slu zW`K6T^LWnMED!8L9a4TKHz|1PT)Mw!0CS&;w`g2J9qj~SkvfW+Z|erFu-7m>&o{0_ zrqq=9qMEvQ>9RMuPs``+Qg%=1X3YO8_Ix`6A3GVk%+rN@G9M}{*(874?@3sTD@$RF zqJpNL4A<$!h4L{=)VWjrXUppN^RmW8Hr6p>%VBY7@_?^S51<|r2(Ly(Lfp;^f+Ns)dV?%$7ub9*CM z!_s;#NjvW^#)KR)K@2q^+}jmg&;RHxPIrhw@LK?~kc%M%Degd*h|&Q4Oz1j@+H``J zeqOTtr(WzCf{fQWVL+0@e#zM%!FSLv<4L804CVh@MTaFr@rG^l%v%L-@6wmSZx3VZ zHQn`)0wrmTWxiechX;KxqsLeP+BGed{CV)?)qt9nzXhy+txWf|e;d}ZuGnVVx-k-# z%$&uSa}PjFq5wDr_~_p~qfdp8tN%;!g|l9V{wM7V_&78GtWf^lruSsQuK*GyF{r)0 zedIHOxyEiNt1E+Z`Sm4x3)BCwM>1)%mSMG6x%9n zdh#?#N~BfQ)SP~xR8djGzfh__Xy2zsDq9Z+J&ldj>FLVrUA@F5X1Ie1sOd~4S5;-@ zJJ$&2n(1jhhW{6kK21dhSJ%>gsy~qAGhFk)z(ChI$=ONFvsb)bYp`xu^s&qf} FKL99V?e+iw From a5d2170efc6f4a46613a0c0b9f9a69dc20406d71 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 4 Aug 2020 06:38:41 -0700 Subject: [PATCH 553/589] Add files via upload --- .../mdm/images/autoenrollment-policy.png | Bin 0 -> 138584 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/client-management/mdm/images/autoenrollment-policy.png diff --git a/windows/client-management/mdm/images/autoenrollment-policy.png b/windows/client-management/mdm/images/autoenrollment-policy.png new file mode 100644 index 0000000000000000000000000000000000000000..ed1119f45c800e1d9a2370407b0f78e1c6cd431c GIT binary patch literal 138584 zcmdSAWmFtZw+4y@NU&hR9YSyou0aC?cXxN!!QGwU?(Xgcg1fu>V8Z}|T;A_H=R4>8 zzxT&ot7m3)S66lQmS^vJc1^gvtOUv@{7+C&P$)koMHQi-;9#JjU|SI3->2H z_959vK7%?|H5N5pR#i2Nx@QQv-y-t=>#$r76NeI0!1}KPg<=Nre_BfoDDk2HyGa4- zdz2`J-+ypU|?G}M2FjldVrM;H3funGf`>@ff9p}67y_n{k&=vNDB zdb$S@C|onW*8j@Ct9h*Fg^`8c7Go(Q=v|S$XoZBX>Xa2#~wW6{QS1@{KrbY2K-IkZ1gR&v%H8=MXh-U zesL~+>5;3mc~=97K@Fj5pbs%F@agTTpvP$y8Q1)wZ`QA7FnX#cPgp6a^4KSAqvK15 zpk~wo(&is&CcaSW98Z*v#|^};C2?fa@7@944>ty=1V3*gq6P| zL!1_fXf~o|NBieTR<;CmOiUA5F|lx9I&Z-}GT=x#LcI54Ud-Cl`}67itZ8Q0Fzd3% z(o=xmdeE@VswNsLZ#`$m;pe!2UZ!P{v}r>)`7E%;pASK2X1j?<3D3?%w}*sV0aYzq z+AYd96n%S@|L+mLn1b?F!WM7!$ii(%dM432FTv%z1*q*lQC~2d*W0sL@SY}$#FKpS z^YI7jkKX$J!SwYe?s=}_1@JgBz4nA+Tn)U%NBTbdz#cyM1|*hkk+9( zgsksd!ermDJ`5ej#b*Z{A7dUWD;FZy5)XqHd~qca9wyJ3(|EMqUP+Z0assX4?$pp! ziOx2~{WLQgoEKGgyH?mk{X$aEuY9%;+!E3C8OInZJ2!2Hht8;g9m6DQmt}dbf-57x z9b0d-+l}@uwVYKgFGBzE_W7!~=WYkF>TFJ|g)P!I*K{aF*lvuRrj}lL4|o)sJoBGx zF{80+q@ELN>dY5YX;qh%foaBWM)_Q699f`2rd&P@z{^z`X4Pe9D)BTICsRFt!IZEnTZI(n}T8Id0Bc=W4Pk1Ib6T zL?YVXbAi`+}omoZN5zQtO(+KUmhWy1Rpu7nVb zJ_Lc`5LkHQ11xfo42(bwm+8CBvBSU@=dnVyCqFhe{{H3DL?k`ztOV3ccsjAynryqHjx$~0vcFVSIHfU3bc?=OCFKcD4I5BUq`<%7O9R59O2R^QEvR3k6#zp*Za zUAqcMb8C0UWw1`evjJ3$5LTYi)IesR1EnTeNEHdMOUrKoo*b#PY}QrLCA-iyMfi&L zjum#IvYh*Q9le*vmrHvoV!}Zqmu}6D+8&Pkx1L8=3U#8}t zl{tXw=%21Gi+Wn8R1mMi*jq@sku;>XxFhOiBXn}9$VCU`+!G{eVYlJISu|s(QNZnJgTQWQ!z-0tgpVqnJ`BpcM!OHSwG;pI`O zvfgzvzhByw_U5Z};EdJ6XX;cPhk1>1M_fPUSmU~AN6;)doJoDgRe2hbU)rH}G?+V~ za;f^)td`CZ)Y&0i&%aLdZ>22h`Gkj@8Wsk9pm2V5Li`QNS>}SEA*NkRjQg6A>3Y0; z7Jmg^JX}vTZ@<0#<#-kpih3`bLL z)iDe^Ptt0m95!ZWid0jwdQ1(T2O1;cT%Ij6(1&eH{QKM9P0wW(qzCdbV4{)&uW3!x zwMY$4CD~Aij^!`EJnEQYN83ZTz7~5}fw{(no;3Scgo&2-!#ugWs2b8x%~$T9Qvr&7&OCeZCNz!Hb^H z;%bEbXFgu>O>F3uE#m=l-pM@|e@v%`%Ja)|SY?jQ#gx$H{9^2&6cygJ6X>ZrRr2!P zsSa~d?nwF3*R7D&;+w}=#{`J>cB0sViFz&3hv!RK@fO{B@2Z%u!=`cv-u?|wR84AT zR}1~cibKb74S>F$e{<>kG2|(Y-S0N5(nwlkVekB`+qIeT;!J4dRRT{b1XH`y=)KdmZ3= z_BrtLrtKs`o8Ru+S?0#}*6Uk~^m{nv?CyrH+M$&_NHMr@B!TO`NAPBT^d%ed;#dUo zgt$=CZnyE^_pKSC6D3EKVp@bnO!od=rXT#8DV9mf(Rb%2Vv=6WIF8bJ$v23Qcs*U*E9ZT?Gl7-mZedTSxgTj<)|D6~ zT(-|0%uY4SNifmcKb2 zwEjfLmAw=tf)Kmg>nV5+F^B#EmN10Spt$CA1u$IWpL4~>P*5AjrKdziMHv?ser4_m5mn;J8*4YVk6c|Gu)B?E=+g55^uR z%RRk)T&DMFnhzY65oC$n>a(*x9a(1GTe9(k3ilUyNDkZUev15TiRCbxO#S7v`7TMv z`tz>S1$xNd=??rN<5T2Z*}VZ(#$KSduGtZBn75#O_^mup=#9@Y<*c%TPJe_m1Q}|F%X; z-JnbxL5`iwj|Dfr1i$y}AGqIhA?DA~ey=XoIeh@%oGnX~2dP3;>^)Hj%>H^_2c8Nz zvj*09PYxUeM`T30S3;6hJqh)hl80k;ffO6Auz_KLKg03E_IJnVguM7MrKNjek+EXl zKL~gC_CDhfL@qDm8i%{n(vD7)l^&ZoKy+NZr zC#}DnV|dn4PvzeuPT5!LRi&CI*0I;t0{fUz<95^L$4jQk3@gqbf$F*keCTR55TRdP zvnm}eqTa4Jl|4`PJT-@RHmj`%?OaMB{+U2gBCS!ojOsE0NLNi(x%6!thXs#E*Z4vG zL{C-{pZcYk)00ouwqy2$W4Y`F`?ez@%@OidTj5tHfX!K9iO-fY_rh*>c=Pc$rpacK zHTz=buIe(rL*|KW&$~{ttBy!(r4!g~BQ+~D$8ubzZA5hD_O;<-&{5fNH%4o`h zNEU}S%g#aS`0RrJE8H{3!)!CZRXp6{F=MNm)OqPg3kdotz-pqW4@lthTjtNnrpVXb&J$OP?~(^9g|pp+f0J;W)Tw?! zyeixX8s%zwp6Vn)tv(q_0-Qw_f~^V*LX*If7%^k16|XGLuqhg~npDSZDXseCN6m09 znVp3?#+)&a=F%;mrUjv~ypiOi1QC$!REn`}duHJB7or0(P^%Q=1bZ@^!y59o2`Wq> z`6s?pW|-|lwXIQ&x!d{$dg8r8sx$lvpcRIeaVz>_3OzGNtcBc*QF-T9YgKCbt3L2f zvXk#C6RAq%gucC6k88DK5OCV{l?CBua-rv?L6i6r`uF$$I0kwCi}p!smkEs1g=P3J zj>%C0mIFriC}l^;n=Am;#At4YFX&J9aPvHe^_1oCeH0xc|6GJi3I4WkD`GYo_4Y*% z#u+CZ1--Q(D)D-W{lk^;5OQhtVw%xA?&m8PJ@=oC)^z*MD zL$oA?wz&6juMLqqJJw~`vF>R^qmn1dKU!kWftd&8<6pD5#Kh>?S*K4XCRE>;n3P(* zAM3eQ|B(m-H^atE(uwXc&A+F8`gMOc5^>4SJDlz!YkGch&o}}14u~o-y(ogX?hXa$ zgP`L&LP^MG{tzpI&(ZA&vFmwR^#1xzUKPM-VcmIoyBR1`zR~ z|GW1HbAUM1zlRC>%o_E-yHNc9qf1FN)WyLVhj#aD%>8`@XRwR6r3J=+i^kaAVH7bA z7Q~X5XRp=KOfVIjC@-Ju^t-UZ}4SolLlo|_M%K^qRzr>qv`Yg z+>y{k;tV&aHT|0uJBU$pxhvCo7?Yw(8Zc7%&(}MfSfU4uKd4uA%}8vfhN-c}hFqAA zyDwF3T&5f=xfJ|@>c3{NSDsjN=JK#0?nvB|>-(Zkw%{4ae{?g;TRhC_(hGqN+z7Gz zBAp>4ve^AHQf?(uCCrfdNo}ZWHZyd+v}^ff55YGFF$nDxM09>+HuXY`jUD{L&C`fy zf^TU6RQAj!!}Efz6};ecv_e50-~wy6C&n!uC$x%(#wDjj66)YYWm)dP6Ff%IqED5g zp|0xKmg{SnW3bZl&9bF+H&GRz3x z7;Z!u(gCzpQExtn;;`nrWVKoXAiIGtq_nfMy=HhwDSGcrGMlUfR0Xd^`0kuIpUH=x)vSRM?-F-?p`O2JcI9&|Ckw|;H147q%9zgk&HYoSA0$iHy8pSi#60ixl4A0=2rvXsx| z{IO+WQE{pMa_-Y=cBo4qL614SFw54zTqzs{M(h;0`0(sKYioRR=jJV;)HT8D)w3?p z-Q)ExwW|q3i^Q`!lU+*dze{9e8b&|XG5;idKEF!~qQ3ONrC8@<)2} zjV&=wn2LfzgavkfHH%{3?^k+#U0q!eGXBiWOjvB}a59~m@*0st)R=g0CihyB|MP@? z_?QcYe%0}aZ13ry;$X5x-a@*$xn=iuE@(a4Swc@J5YcVW;bPf7DMuOTj{A^yb*|2L zedpfBCkP(Ec4wBQ;cTeX7tndr{zk|6XW5?aI_ZI+G>s&jCj z`%7{iE_j?UDyNa)ksZeN33L(^WODih{ zJw3UR-1m4WLeVSsk7KC80?wL<*^Yt?FIE%7qUePrCHWSsBJn)Z2kf%2^ya{U_ZGs+YqKo9nz~RXXr$|yj2Vl&j{MF3*z|i6PzZHh;8{8;WVNDX z*K~%dbuAf4xqrY1C6jkDExtY~@LjK!T-AfWxKp1@JBl?MRXEY*%lka@cQ$PEcXBa6 zVOqegvxf9{*`Kv?QwS}toqo@L&@yf?A8?dv_f%i9w}xwV>`L;Y^%U4#@y6P0=&U_h zsmt#~8RcBHyq0|Z>nSZgXE%yidFKK^G^B?Y(>g|R;!SV?$dFVhQzV4>?pQ)P+1;iVVPKqT<9R&jr|`#N!LfSd+Es*Y z_4L!{lbw)UmD_FfGBL3(Vo#$`nhRYIHnOu3b}_x(QUR?QQ|1WA<%K-S4qgEDC^@f{ z$4)jE^Ad^^8kWAVYb1t5iKLp{Pqm=4>I&$klERX?$DNEl7T*!bL#uwp=%H- zhm)oq*^ha>s#CueaF}pTRs+xhYm54)of9uph{sqqzvlhv--<4I;+FC^_>NthU&f&Q zpG_*UQ?=6ba2``#Rt$gtShrh~x4N|y@11BQ`5oIwQ{(+oIOWxcui;94SyMp{w492| zcCNbl+V7^h(3Urmq&LQmu?CTyHV{hH!L_L%W|&|g|K*?;URz$%QktzrJ;^Y9a&fa{ z)WNZSrU_nG5^wUfN&?r=OAAiPjWuC{T*NNYT}gl&DWmX?UDn5gMUDI;*x)+7eAKlT z1X93?WmFjP2tK zKy3f7H=674$`)7|c&|}5@1qBPy$BYEYQvsJBz41JhtVE3q1YzcLc5wYW$LU0_=}Ja zp`5_l z-?4_HM*KjP_GqW!wB(b+$;yS^Lln6n2~YjIvh(wU~F<(3+CF!kdzPz zofF-Mi>Lo+o3NAlAlvBiPPx)V>ZEn&RB&pDv*-h*^umQIyyk4youh6xqZXzF?5yC{ zZy@{_R5#pAKw+v$S#&eOt+w*1_U_A54cgAG`r)_C71nlZ! zIqU*o0i6za7dShaZQj!tz#B;58tj9=L-JD5e<&t6T)y)5;o@3w&`eA&uZU9ra}<;_fc?JgX+%Rqv|~Ve(zx`?(*}8hU|=Bi?e__ z`*7qlRA72lb5r+mbn zF4crolX;p7p%QB_x(m(J_28}v()FyCKjLa?Sf)6CRQkqp6Cm<}-Erl2MKiyyMoRAU zDkH+`6hByk?{)E$yX`L#Wz8>)3t8gJ7;@gnmmk4x0_xU`sWn^H?%fSYyo01G3ODw z*sa*$h~u~140N)RO$O^sLIb*QMkCG|j4H+1!;f`A1B!J7eYm^%H&lhUqA;cY9?JeB z!`o(*Wgf3jsMs9&LU?|7q7OP;^#;_NuV(`LVhjNtTc6f}BZ#$?>)8)1&DEd&-~)>u zgqlmJ@?WMtgX&J9Oox;6{>B{}Lx2`*z*t`br+~nnCTHsV5DBu1eRfnv*JhhLGq~1e zKsisY9bxCqB6mBEqgAqhJcz0L9voi)sVFOhV(?hIK3%g5I|}J2rO=QoCX&IZh&ETN zB1t|9hp^N8K=AmQ`0)C|o2J99HfU-M~jF*Zf^TU+%D>{`z8rmg4SZ z_$QII$^w^{8sB4Rt#0x+$Mlkqa!N#C9<0Y}hQjKC?o2g@;Xu5MvYWPei7CPlHJknh zqoIbPo%+Ye?M(FC)$9(3!!}P$6RassBO6xKsoyl&L_mXpFyHtn-($02*kNXZFY=%4X2Eg;*l5VHqVb7V zI+r)Vlmy`Jt{K-&F1DDxfxhsOSeeQqL0O4qYZCoQeJh8oXs24j>sgl zr9;ls8k)=B{n<9q5H78sgufl;8c?u}t`J!2$fC{`@f30WCwl-Pncbx>a%V0Topi5e z)&HVm$?!SoGi8dUJndOy@sG!YB_|u^^-d#&rS$E8Ig?#?BUDXjICQD*x)H1`!9A?b zcZ%NN`@}*Cs}uc{rN3?=L@1f_F;<3o(K-R>PH6f&GlohpF2hClboqftKV1kLS)`dA zwV4ku#zm7QE0lDtVuNw%PN|j4NYG0ZtFhIu7teMdIX_l35H^aKO;y=n;+Y&*Y>IZG z=Hw(-6F@Uop_ASiMuGj_QYKV;GRIsAV*TQs>Sm6(cEt#bPqtOV%#!NrU|0aLhHK4G zl`_~iHR~&8)+FHg$f>uO*|19uWB^M(Kb;K?kppy}I>#(5`uD1DYL|b7nPD`|o21>f{Pwx|=pRM_*SoDO#KWl}`j?1;gAq)Qk7IFVum=1l*MR5qZr|QO zw3yyZL6fQa*Q{10F>hM3JfBD%C(puD#(rKPRzS~2-k@@ z>!FYdC4`O3H=6aqIugF7FHT_73OT2y--{5xgc>ivgUItEgYQETa$(|WE*s@-v9n=+ z9sO>m%J7t8^-pz7!l)Aj`h)rkIR(3{@J)4$PF?4F8LewP-kONU)41b{kZ3Yh3y?~R zvJ!4d6jbzx(=%%nmdAa=-v+j21{o@ztcfAA;-n zsG&=ZkP-tgYdM_3nm49S1J8|SbWXRKW`Rda<51RUP{GsUk?ouk*{2T2Cr;nz`KDeN z@x(G}#gN@W(S9cJhh~=}h1A9>4%eF3JT%31cf5^zlE0u_w2P{2Aw#C3=E&?4Yy~%R zbplOM=MmYn&~cZq^S(cA(}g-o<5d90kDpM?j%8L1wTkr6Q|ydY1fZvfBFxCBR_xU-u1X~f*k!cgS`Xc z8P@Wnp9x@0?cb;#D|N?0HeT_l`u{%PJ@QknCFnrTZ#R2h{!fmDJc4+2f7f4avlbtR z5qURDx&OT=B1TI9dCBGB>CA3=!FDh?GTEF~Qh4;QB-TNe*j`cOClruNYhjn)Q{+)z zmwa%0x+B)1$)2$@7AheZRF|%^qVlZjaJX!&<DBl zuAGsw&d6gEF3Hsln=Sp!;x&WeKI;9uq-s)=elocyX|ocY^!7^^qHUz;N6F3(ibN{CJRgiQf#jCn^x=At!ND&I5rDCw++U} z2qXXg!Vk>rFUb(re{aLP%>tpI%vvgFR-d1OiuRK=LMo@w9cs^o>g;4kPjCK|*^H{E z=AV*|>prDhR_MY5|m7 zL*dp1Bi-Z$_leSrhCH_mod&egKA;?$7kC9Z=3O0m|no8%L0=#ity z{Rpq~)ioM|XZla>$o(GeMzP#T=uUvoj82>Ui1BTdj$;wR8)@1j4GIt!lqM z!pvHtz*_xdjIchh88r%~rM!#$0H*BB%W#WJ{-eL`SxC??0!iU_dlnTg!$5Lf5oJzVl`KYbVSMc30C z5f(FGTy+NZa^}1P&J~FI;d0E?`$dCpQVnazU6gCFN-K1%#kj6_lL)41@8E!19*2d* zmdUQKlizHjXB<}nzYY%Fi6Kx?y2OBSks;#zk*d%u`0?j*tx4chO~Hl|!ayBY{dk*R z?GV(@SH*VcHr&s$E1`rlGxOn%GCk&P27B-`H1Xm>3j*gl4d^v8h(jyz{P+i>JNb#U zIKivUu89+)x8+%6p&m~8+K1jeY;jgG7bWzE&s;`u`-hhjlZ$^J9y3KIm&`a_vnEev z9RO7~#GshJQ%0aop;kNOfh0fYV`B|t1UD#gA@HY#&4SOZqp)oKLV&{>D?$wil8=k3MTPVQatYKTuJrv)4(im3+? z3i5eeV3+0*kZH_g!Xxxo{%V#<#oXiAGGg(6(_+*@dd&SmY+Cr*Q8+ANIuZ zVo9Iv{|BScT4&E*-0x;JxZ&uK2OOnX(IRV>ozu25jcq%SbbVIm>J`G8rE^$xtB8+3 zSv?#So}$AI--jq)+)Cm%JR)&5F9+m&Nw6O9X$8C07#h22oqk?w#H-@wt##XTmEmN1 zElG4hDMdlP6F5bhv5meCyYfY-d3z9uI#&tF>HC!g9IgQlVNgwW_h5Pnrh2|vZk*3M zEr3|>2T5XzhQ}r@bf)tzve7@+H=Bv~R`qOMjFM-Ig}in;Nz6sx=7D8}X|6{4^LXy9E#ON`gwIf&-4k@HcQgP+bhXja+l0F9h|*m?_NOg? zkDXHk4_ePR0@!^z*utrKeQ}g}<>7^$FNiv@$dF;%fgb1Nissnd83j3#&_4-xEW)JQ z8i=~i@E1dCGXS&>Au@LnJU#^l^8>|cE52oHrs}rYr#?YuN9Tp-I^r*p(0D+y9S0jH z9&{-K6P*i6B?+pOFyfmCQ@;;o!^zMU1YXnLZcmoe3q))i9<^DZ(t3IaOb|TQJ+5 zy0=r;4^dEvLP#S|)47?%V-p9-jjBMNY0Q%3wY*i_QM&eL8sz!yPhf0R|2XV-F0ztW z9wWGszMl)I=b2ytxMQnJEy}I?g_kgCQ+cg6_V#NO)Ga=Apqj1(EUedHTh`>3UdnB? zYnauhc7Y6&ZmoFrCF2;?mYHk*u;xY)3+a0PVWWcr=~@P6e3o6$QN7V$#eaoXdxd}n0`k=g zP|qB8gOah5Sjr>bTB#J6*dM%-!H+M=Tt#`@aYqT>F&ahGt*8Govh>|lgA{!YA;MXP zBPq!uLO!+OQ{U_D z)qEmb?YvhwV$Y{dBvpe=;4ATMvPA?@zEZw$-=@nl@5zT}&`VLVr}}RA_t!aQ(8bV0 z({bTpIsz?GDnafF%a@8Tas!EWj{{y-5%pHRAL3hlx^50d+l+Oya7P$^nv4As_cdX0 znM`LDiSN0l;e$*nnk@PGz2I?erRej1m^bhVG4#+U{FIK;g)p^IiU;j@U_S$okz#nx zq&LVHZyUr_-6?l5jVN#Db*X!q)~w%bPEs;4=fmru^3iTh7}(vN4cwON@x*OK8y zR6lKyqY#>}V;p9W+_`AETKX_%TmFxY^HiFd{R>Eq;KC-|Ufx$heO;v0sn6K0W`2|< z(YzkMe^0KdhSBc~{AlzdyLN8>@R0Net|jN`+5q1|2>~xdfenE##H_jpvOri%1;3JV(9=})9V1@ zEJgYK*f%pHJ#!{cz`%@Op0Fr1HQuw%!$mC5=3K@KgEm8DO-PLY`b2xub|kM{`Q?&B zJ}z=Mlbw>9+9wv27`k4`UPwhn#?XP-_QBGinYl(8(h<2LW#LE|2{66(5P;;p+7!9=ThWf6>8WFjUhBP-eMK*k( zQSW-WZf_ft8D79q_-nMqkVTvCO*)OQh~x-d6f2O|W(BO(jaEwB!^McecS480FHp^! zlYm}8JQNg1I8!$heoKGQ5Hn0f%!)$wtR6*p0*w|Mf3@VF~XFbJhObNZo^A8qq+&d*y7QE%}gI`+SUZo_@C=x)EFbr-Lr@CJ{F8H2*Zg6-~ z#@hL5(ZwVgVQICe%m(NeLMz6}|+8@e3i_g52Q8LCWGC89*7vU6P{k;z3e`3L?mx@!752#PbcIuY<$Mu4FCTOhFuau&Eu0QZyZ3^!z zTRN2W@yIY*N}(C;zykLQf(*+)G|DXr# z$vuQ35ck4#pUY=7CAOq|lij+$CAz}J#B8a#p@%9mEOZ(GSYq9PT zGPXHf>!e?lUx8um8wkX7JwdIvoe^X8&{;(EF@F~pCdKHf(INs*-szRE`{_pdAfJ6v zZKvaG;-OO{aH=|KJ6!;6X?6Dc@c_&D`>+wDdBPn4vW(K~@bp_lkm8v!n2!|B0y+Q0 zOvQJ}Pb5Xq7jGm$&fl9Y_r@FJFZgw|O2QdzgMD<`zGopO5{O!r-$2D{5P~Y5rrP+u zS%`^;ebFMlpDSX^TiaP2*{1pEr?Ku@6f0ot@ryB^ja0Xc!NH<-RWYBA?d2sQ?Hu~W zO@Wn7aCH$1&x~*~(ZS_py$iANQPVHi&WjkW9p^UWR4*4+6N!cCEV-l6eENiMyGs4q zmdZEZO7ID?%H@Y~$ryS{WghoyQbvPFJr<PX$1zKLzdE<2J z;#m{xS}8jF7DcaiX3}-jLM6wqjgfYGB-Mdw(>nwinYrz8;|Gg}%tUhiy70}NqC&VE z{g=y(nQy^2qU_qu5PR{zrx!1_pO?nF>2KCwyGzb@f#A)au2x$(N-}O*_}{7R@>?E6 zOFgY2XMd!W4-O;!J-$edMk;7lyS{EKDa!}87t=9o_n;bya5GxY5BM-);p}K{T4er| z6jBz2k+pIzopalH0!@9`^;oPF5es(bFqcv|6Mfk)rY7Tm#oe7lii=;`x;A8is_AdT zU|1FCA%o|inAYQS(;D|9GlP4cdW-0R*u4dTQB%n4dwIsIzQf$aGKdW(NYqjG3+T|X z|D2|@>9vY&9T@f^L5<*{#Yjr|8c{cIV7;0Wsq}Z@^k|g~0piddOKv>pnBm{`bPeyX zn$&~!U1dRJ5iahXn9qX7gEk25x4%fVdbt0iX6W~ZZR_k4QW<4^zS)F82Ll_QkQudm zn<{Vf{K-PYEU${;k6O-Remxh`k>k|1wkyVDR{X z9zj;Vw$(fdr%egOd+iv(H&X@-0;U34Dnc@2cPA%tA^LhP!GR$Kd zgCkf;+UO%4wq~QAZmFid<=}&8XA!x)KK(6G{OrJrumDe? zIk;WW(DcEk>ihdXF$u9YREAY4?NW{j*va>=Yf_Mc zuYM2$-k>{uTd_i&76#a}c>PC5iXIk70=JtOp+D@V(b%a>Ti(VeDbt*GRD(TeN1%Q0 z`Vp>XB#`QuR~HfGc>yg#|7J1HF<@U8Rr$ML?zN!p_x>!E()WZ#-4PBB4HZ;&;+ipO zi?0_k#m70qH>Ec`oR4yg5=9F=yix=VAa3D=%#MpZ?9aZ}R)RjyGKu4+XH)`;<|8J5 z(K!An*6;fv7j+86#`rN(dthn?XWRk^I1TyQXdW>nq)aH77?704g++kEwUsO8^OGe4 zDMDUZxl~@B^o@a|YmBL68s|%XZLSbu>c~{2JpHVEKhAwN2GbPHmmKT}u6=!_!xG6q zOs|(8sbeDTSvRv=hqh9js|K(l9_A;TxEWu+9}Q!q7OHJh?yfuizLu1d6%lpBtM)ea z>lTZQ++~~d)24v$&^&ftD6L{p`fDbqu|NNIKCi@uN#L(kq^97g8@jkko`h9F!i4Rj zqf9xeb}CVk{5K*ck)b(SZyz%*Y@hZU?fm! zVnglVHstQIZJFZ?dVDn{qUz_7LV20etc~&{i;_KZ5qh?}`y$8qMh0~Bh?X4Q`Dc&v z1!dYt)`OqTE%;P&t2{G@Qi={&T?n=7cFn91vXV;Fqbap~&4Y*Fr$}-p)~WBU=8UQI zB08WC2Wgoe>MAM*vL(t%E#NcwU*s}PDrt(*-;91`mAavvGNzyQeSK#5r@Z}6y*^wG zkY;ixhEEAVFfNFCi{OQn9=|i1zk5vc7}r*EptT5vVdE0ID?LWh2kL7ViBHu!tASP^ zUbr=^Zu8|3xu&&RBQ3;es2_+9VJBHft-UL%K!%J>k?yzb-|lNn81X!3DwiM03PXiC zVPvT(xOu*CSLu}6R*EQj@L*8vI-DA_CnUt|9nb7>dC+2)+zvu1{r*7`JwhR2FDmQ} zpeMHYz%9w2NV+Q+(#pO@a~*6pMaoO{Nr7fXazcO(zU@Tv^ARPr8L5(YHL^0&R6aBB z$C=@nU3Is0341<9ypO*RKYU1LrU{FY5|*;$xUrsW5@19)@Zh4mNyPGilbCP_CgBgk z?dWt_l5^mh#gHTC;e+`pmOR2(Rtr(-7DbMbl2=T!Nu9D6M&1?GV2u!6|2X`a057Cg z1OeTZ5+;2*e%==M(Xg@xCecf4T0|j2K9!p$FANah4egGOQ-bfD4Tf}wTejnFC50miO8#fi|4x=XQj+O00 zaO5nCQX~X>VA=6GpuO$@0e(G@Pz3uarmseKR=n|rWg<;30tEF6N{uK${^!`VyIt?j z#VpPWW+^U*9_)+3#Wp6R%#k?}sqXAQg8ZkEfri_}KGtQd%WuOuFHqp;{m_RF1mZr} zy#VINs#J8!nAlq0Zu=!@<0SFkqnZDQy|;>sE8V_DDImBN?pCtzrv{vVV&wE%2L1}`}LSwU8?SW;7jY7k0syrQtM&}hZZM&_(_<7&cWwa?URFKCQ6u)$f7(IK|y z+S-hJY@z7ub8Lq1QD;wHxDex^h;vrvMFJ*E@ZWJ*d(;YJr|uGy*td+vErIZu9y z!w0k~o&?HjDj~0@Q(hn`Nm#pq!gbiBAPDW(R^NiQ4 zokNRDybBh8O$2C^GDC)!jHh^Ja;4BlU!xwx%x33OqVIkS696ap4F|Za-*Lrjs^xCK zLEYOcE!fi8qbF$8CR$JDekJ(k&Br*)>W}S6s>x9Yk!qi5=%_epQMDVly)#7vBhz(z zwi9x-;(3`*1r#$xBIkZno8oKc<=(*V6+5dW6GfOhiHv%;e3ey1XO}V3AYSjrQ5kmx znGw8F){YGqPlLnY3Q_eC37Anr{-WD9mW!K`8`_Iyzo^(aI7i&4o` z2CtN1B_o6h>Lx2;64>ygAdb`%X8&H3%CQYG@f+TqD8A9!??#V)D9I0`*V6j7SOJ>XMiXezbQXb_ z8g8%HCL5G(C7mdAolkLUZ==%lURME}5a;#d16F$)4@rebaF@fZRs0Np_NZ9av_%ih z5?RT18{DN}_1a-A)_$qxSp~DKj}@9*nNCdYP$EQm^PB4Seun3X?+}~=>8t*bZZAp; z$``+k4(3)i>MO1dk8ZSrjxc(Wo$g$lH;lf~tI!M{eYXpE0ih)RK)}|K?&TY^I|L`= zdH;NVC*rGkw5GY&hSI~!0nrM)%isZ}@5l%5Z+VA(?(HJeYO#*JLhr7;y7%GOTdvrZ zOrmG$Y(HKXfF0$4m%$K_ENInOa-yKJXMg?rT7;opD&yj{uJr>c`k^eYcbXq}lpI!C zEvCgAoY;?~F+HmEU=kNn75eD)4HKiedUtk3(q)!5!=4fB7K}0Yviv{WF1QAk?u`8r z;tfjszkC(JE$9sw)8mTn-C38KrMI*$lQwDOft6`LmgoCuy)eFX#@K`wb#>qjURR={ zVys2-Bqm!Bza^b5w{$v}!l(XP66?uF;A)}j$Wx1PZMNgI^-&ijE|=mIONbW{iKIuEvpC8LOl={9l9m-(5a(TOZ$w!LrGAgy8M z$GV|pn{zrdlk{3qOdKg$v`HMrhUqJ|3Fq(x#+x1IPfkLoxYRKPl+`j33+9j}u}543 z-9gEhR^YB`oL0>&m0#{0e-(g@2 zW!GiDrkP)b%rBm|6h00Fy_3P$532hS8XZEc+ngK~gEI&q)9Aj})Q_Ij;$MG6_l1Mn zK?LVnYm4md9kWf|@n*D;J1vpXI`4ozS*sf@5{f;v=MY2HHo^|R9;%61#0YXvB3~7= zP}Z?JURdJ2?2%yRI*1 z9+n?9O_sPpT6abQA7wH}zj zSP?N>Y0ztf09yUmoW@HCJyv_l+Eiya^{^YVEkS}VQeM8->{nV-lOiH#9R?>$w!|Q5 ze*g`r7AW+lIkbkEwfPEooD^Oe7j^VTWaV`ZB84(9N94)zWgklMpt;J87tj0G?X_B# zEr9G!@edXnpH;=B#irF@K+_JRp$3(Jr_obq&;aE|6WDNG?1V6yRFvt)bxi;pKWZ)# z+tdoZ;h}M9HwQ&M*eX=m`4w8CwaWcgQbT?_lAb!-D=rf(-z$!;E{u(nxI6)Tu)j%v zG__QZ>xqmQ$|&C2tB9X1(Dbl?04^S4wrn-DGo>s==^Db=S%cP)#F+@oa(THfFf)X5 z2bb$3H&&c(G;@{@N}hh3xB(ji-Iu|(hxwOPq3p9c4W(%4!QVo|_xh0<@}(8ltUmW= zNyuDrrZbgFxfLO7ZEewQR%~M+_RClWblwB@?;kBeWHkWO5QrL#} zfV^0s2ML4{{Z!-p(X5~_=7x*YQ9(}LL+ETwJ-ey|G(C?jU{_QRSm-QgOQ)6APv~xb z&Xj#K%otB3-r2j|JP&Bo->|ZokxPu$U7if&B3*fVce!z}xNnAO!&mG+hCSXGJd%t1 ztb*=_xeo6s9xyKNhET6|hjLy_Ol5y%!QY`yGCmU*4d7I2^M}5*T*w@M&+fYu1@jV) zc#l0)gdps_P$=2ar;{UbvEpPdPgDyT;IvRO9$?f6H_(W$~B=hw@J4 ziq2kR&ITpXFbMsd*z`o3)ByXO7HqTW5lgGaAe+PKfzW7a#WupLn$S)!AkRr3m9dp& zMa$3}pP+H4t?Y5&gYEI-gV3V(D{5{m&?D$twatkpv{Jq-9<8}1QBWy zhh!7+?l{M0x#C+)I6IcpAX<#&FDRTJqjDyf7h%Jdyu$5yzVUmPrDxkpISnV~_h(fB z(uDBbb?ila#=-S=|+YXNQnD zW*_Uba`LM1&r_w$4*ljJj03E|yUqSqC4(qp@+FbmxdzLgg09UqO8++x++A_WGD5ZG zWm!J~eOH78E1lD`Nd7f4(oi4d4{Hyqz^nBZEs*7e_r%q?y^tyYEsUk(td|8{s@YQdAC+^ zbal4g(IKR7 z``^sUP7Q51t2F)gAQe=P{`gk3?cpNrsOVx@_qdCIEJ-;Y*FW-3_w!6`Hl-NsZc*b4 zHvD_ZKthI@q`5wa6maav;270nM+JkJ#GAb%?;VRwSq)>{T$e>HBBZbqAfLP!EcdGIMy33f-^| zKTze`WFtakZ#`(y$7k~MSZq-7qaNr*PH$f>bHlP}qkCs?!Lm&=P9ATqF5N7J97qee z{}dHDX(KGH&|ADmy}N_6Aj2ppv%?XXla+XNra@B%MSir~Cifs6#NSEzh6uWOueAJZ3HznjSKnu<4iYpgm}T1FGl2_zkAR2 zCJ$T1@d&mU%^)|g2>X2J*LxDsARx98@MQrf7{jQm*pQEB4#~WK1G^rbArrpMWKFVn z`cfJnJGwW#)0>kCjdd{5h8DmW!n^R%q~Z~}HV_HLU+j#}cN?kI;!Pt!&Ir-wHgN`Y zU0M}j%9Y14d5QP3vSS#})*F_5IoP-0*FSNAo$`qdEV)%uQfvnc241V{*&UxnyxU@i z*{z>L;+Rfja9<*lku%Mcgo0})kdz0pV?HNa22n&vCh9^Y&=!t-A=zLBbl$?(=u#(V z^(RRM1|0@K&5b24&=O z4itrvk@3Yhc{$@Z)Yv%BUcMB_NcnK!&54v?g=bDFDvIoM>hwaMQReg-;b&91l%@_H z!p{r11?EC_@YW0ADDDEqwRai_A4k*iPcyO8Wps5>jB!wubJ`K~Y~adu2c&PlSpt>F*rdXhfb6Hnw4X$KvN6dXl#uZUf|7! zLMZFY33)x~tIXF)k}nq)liAMJsD5o6M_neecTGNevAClXQUjvGrxnqN>NJfspePzO z$%#B*a|^#iR!+kXtxCF`%aXN!j>q;6Q>NEq8|30_T>90(CrFn;>BMQ%DP81KOym*} zhWUEqGU)1SBYKK*5!86fvQ3#nXmY8RQf=bNC{vhppV1}^*edo1yUt~{_0p?A@l;p&v`dZAOam5W%|7xwTc_f ziu%E&ccxik8tWo%!|6LgxalIEuXOii;_IQXhkCVI+1}46@q`W1q7`iFiXX!Decls% z4AAfUDYv~b@6JYmUG+KGLYL_WAu*vl3Mrl1C*0~%>SF#VK{ITLU>LL{i` zJD9s0u{kTReskB$dZUx?!@-;Jq1C@+gjlzj zQT>d$;2Y8^6j?-4Bh79ev8?+%FJiV8m^s8S@|3WJ}!8NW#^U* z%qj?niFaDFV_z=D#vf7`@As+iNepy*&y{p?%2?zQc!bo>tiE+y*wtDVf=@#Q5;zc4 zlPkn*y0=1z)xtJ{`TBLfyA^>_v02N#m;E*3>feL&=Opiii|fx`A6kO1+kEd`;*w-_ zac6gJWtaxbeZwQ{06)iZ21~3!Tl76^YjwoWQRwS8;UK#r!X*v$*%W!0m)*2x%B;U^ z6gBzJ8|9ni~4)( zwdcA7HfFwMUC5@H*0pB|&zd4EDi_AJ8gHc@ zR`a$8=KD=UkK`Tg7Xi((-ryU$G!Gq}R266&JaL@CYw}mjy_6M-7M~C^NJGO#c=)Dr zrFyiBQ@lkzqv?PPYaHq=i1g5#ybr<`fRFdYK8$;qSfe=0UCN_Y%^-P zy5|i`bw?sKtmo@Z11*BZ(Ef7`eP)D5^bu;sI7B-!6mG6KM-kNNEZ5w&GEh|RQGCl~ z=Qs!Kz@>to6U|x7`?Vsdc4RNJ;%cP8j0xS65Kvjh_$!fY#+n6mUG6H8xzvqih9DG{ z%^fCG`o4ZzD(V~<^x2B+s#@~5VEyIayZ*8rj&k-+3>G-?xm{c&5{?&I9MLR37%}qt zi0;>~0+4KkZ`Wp?>P3IKXeIJ6TbeHD?T9supn5R3QtrL@0?DIu#BysDeN;sjq+Pl#M>)Yb+X+xF6BPf zH#8>mPLiYkwN9&6l<98sq?`N;YaK}eGBeeDFv!c={MH{04m+2V^&spCGt(-2M5pBN&w+9z;SFsPMOCMW8VP z7T27bhDL66wQB7$xc{%uKb=_!_^;dc1V@a3Mv^C7@<$RyDEa5VfBK0?_W#na92Az8 z_7tfW{CQIvH{yIWYsKsgfV=UTT__4x^xa!lHsl)fcXkLh#Oht2nqjXcM!tRP{PH^K zuWy*d`Do0$tM5-+n&uxA_;WUiXP-=d%XPR^O2*O~-#q6tt1kQmL+956X*h z0lm_-W#d}GMWaK~)>?$czu*5XjmAV|%Jac$9YBxBtqm<#!{nXbr5@mA!J19>-M)A6S`g9HEZ)RGhxbv*3t1Ir493YcarF%C| z!g*8_1vDOpSv!@Eb++Z;%i0lRRJ`@C)u_M>3ZbV|oO~wz0c|$OO&7GwmyUw#jHfEC|&mO7{txAv7}cFNxglG ze-ZX>pJf-r=x5Aq>BqT7dLm6!-^P-_E-4H0;T?*FdR;@W95wVL37T3sAWS1SGv{ffjMQ_k26$;4hrVCW?a6)(UC8TgF#d20XrxF^nz8{u~|+n{ns{tMRB@Kb6Bi0OmxMNnur;vzG# z%7lJ7ar@%fQSX49?D}~tu}q?C$9VB`Kvd^(IVRraBmMyL_0A&ky(wYzc-LpYx#=Kz za>JS|V8wst`ktp~dKwGxX!_H6eXBSm7(D*{yFa(ZsNvy4Ezpbz;&b>B+0!F4H8sVs z?WbQM=i?*l?BW6@B0^?oXTQ3>X5@bM_U+s8`S~JZcB*>R<#|ztr3;ikhvCkPNZDx) zl#KW9rbCR{3kdRKGNZGT-_Rs}JA7sXA16@bh>Rbd8b&54w8=Zv>D@qRD;^|%_n;7o z5h^G79Q~CEA7$UAHfMHL=(mUqLw6%G9#_FoWM4#P`pB-Ygsj-b4(m$+q`mOT*EjgK zKU|1|-?Hv);)kYuPPUON@^TyA@S|t$Sl8)Be}X2Qsd>3xa|j8){c4&+ zTc<^qPyR4WY{j#l{(j~P6nI2L2pbzlLPA2ZQ(6O)rEFRHMT>=?MmmFpl=de*LMs}z zJQgY(PJbr`^?V^6s4uFcHPaPq2c4c^tuVr~kuL-CNOHe{6`WS!Sd!`0ZzS>I6#EQ= zLQ3N;oAWz84!7dq+Xqfua>?l&_Y(?c)hfP5MczoMezSLYrM(MVL#Ga7zBJ{npVjO3c|}e>W11t-Q&%+N zkZHOyh^&XfaWAjp(XMnS0g-AapDvH{8%6u|mW;@+b@^eO!*@lt6-SdC4mY2!zEA0$ zh&Yq-Qa{kToepWz5Iggm9GFlTUoV($MsU@mzApohTdCD)4=W6H<#ew<@VlK%|21>K zdTy_r4|bFN`i$UFy+nht8uXcn67lYSxB0kD+R2GiN?LmD__%@)?(p!i*h&kyp5~>h zoB3PEvEjp$NQSD#W<4~irZ-rJ)yNS`JuuG!zoj&Rn}Y6fG?NmIu=>`lPRjy)M7?RN z_`cGfeK)Tm@$(rjc$&TMEbEQM&PO8?ISP_K;p}vxXGp%+)m4O|bTDxX9tSASAI5%i zo`g*?$p$Snx|1u6@1Iq9O~}}4x1%I~baLrQ3v&RG>Rvkuz!*6-WrbDKC(xTlTS4rV+x-y>G* zUU=g#n}p9})Uj3|G&tG^AmNCS*kg(Yc|qSp-F4InIsY)WsC{I3C36>XxN-bODJkOF zUy}^tO_rx+fnp0m0x#$X^w9^vgxFcohsKX!3mOaL0ZjxEQPC=&Ten_9Wq!EQNI!aC zKd+-^%$W9HR2up2+9@D@2YAbMSTF?#0_gNDO*p9NEnyfB$hzCSYrmqJ<3>gNfVEJf zJl))m?pBT3_%fv~-bO?4(foVQ4a9sNl3dA!kmHm{GvlW^@9w`bp4?vBIel#pB@|+0o3rsj+y{nGcA5qyAeGu5kP`gUi z1qIj<^zwK6fy)u#ue1uNqQwMPv_)-kYpyS6%it0%*y&4K7MBIfPQ6y`FH0e2{pH#9 z%eSSr9ajzoy%-Qy0;g+O_}s>fOC!n$;n$B}{iXMUF8wV$t38QpxUH`ZFgs{&1C&~V7+~OzR%3$e~j)$(u!fl z$?Q)oRQ5nXFu94xN-whM{(>RMu-}ao%iOe2oKt;^H+6#tbNxy}zro^i-Qu=dC*I)Y zmYWmbync^Xz@66+QTyUX#>5DHpUQHLi9DCG%)!dd_)-wzXa3Gbnjg z)7ReHwJA`4{J`?(LmVGXHi#P8Q9!<=jPdRKK2@A2}i###3Z6gI!NwX{ZG zZvJwP(1m$Jzdn`o+yO5}L3C*Bc1Q`Ghu7j*9wI@xuTvf?Zn2F@C@PA}`Gq*1$+H3n zcm3TvSU30sS0u|CcWF;1KwawXh5gH?(ON>*uhUQ& ze<5k{w8ZBqbkQ7s;MwDobwE>-keN}3KVZ(#u8xlt4-jf)2(HF{3&Lc~5W^?iv!d=! zpVv;750K!YtcQwA|nK4Z1tX^NSad zex8y%U&PO2pDj%Y!1u*39)x}ez{o@cWlubbGTjmS>=<6Z5Zcd) z9x5u4DLUu_vxbpHDt=?F>)z>Qg2ijk+3?#fW&E0?ud#i4aDUAR8f1h>jKWtY!{Bd5 zzaLEn)sG;}eKkYP^xP(*%`1P^Mou|P(hc?q^uzAVh!{*D=R(hJM*N% zs}N}61$*TC6YUm(F+4~|{20H%TffjcIvJ+89!sN{bcdd#%Q`DhTLUf_4XfMN_k6Ks#)@t1h16C(Rz9-8KV2FruwpAiGK1&wK_t-izq7r)Jy=bX} zv0C|WnGuG^CZV=?MrIA8&Xe!qA&G{qP?k5noSsXJkPel3VUp~MF^PeoFs;itW?4VR zEE0STScGK+JV|@y0O`SAEAvr8TH`{7vC4zMZ6#gO-=3%USezDx;kUf7gxwB0mKt4}nLF?S-jMVdD^OiQ;KE)fn(??Lcp%_KP=gM72w96TYn%>@ z#&KrQxz3Eq#F2GDlwY|}GP71RZ0_CURc`p!$gNAIw-R z4v}cXrnG>ai}Byz-^b&Y7{#g-EAO-8hQ-FgsWR?Gk&%^M?+QkJ+TgC=`bA2QA|aum z>_KN?047OLKcYoie~$CsXjr_4z@@;>??W%rc#qp7Qyb7XZtXY!T@+&2orn&X3RDDd zXSWVI_A$pgjmPprap6p_$={8Q!e(#~mrJZ@#f++nUzHiGh(aVhV|0;Cg80lVE+hR~ z=LG}p|E*QrkwsMBK3WOraDI3uW(v4f7XJ9qYQwjlfSe<+m@St#Y*9d-v6VAd=Z4dF zX#p=#x0j9A!iPT^bYCZ;BF<>W|0N>iu z5)a){gIdrMpu{_|=ryTnzvEzLMg{Wt)(OCSFmRuGa-j?gfLa{=JDP13 z1Ml^X4%T?eGdPDd@c05#!K!B0%8J4KD-LmS3V!<~WvnwK}*BOVG!;4Ltnwkf$-}DJvi8lomKC&s@cIEvJi71eXkOq!y!i{=;(GJ5@{~z zu8>qdQ8^Gv4Q{$&`Fx1k7hS*7WkA5vEe|xi_6G3B>%rlV2u8-g&GVe~>*R%v|EihM zx7|J(Fgtw7A-!oAHoU?F^?<)#YlMKfkImGX7%iz@mYdv9nzu8-7-X7Qe87ct*!lI%g07P@N z!#aA9xQ!);Ee9v!U3n?{c49nr%vrb}>#?t_)F0?k01b&=EAPV0pbr93>LSx&KMLN3X#lkF9nbj$WJg>EbI5r?+3k-P|YvNR%_p zu<@~(F!^F<1#Ee4(-^oh9VQuyNf_wo@%llb8Vx(pjY=Y3^oQ<6rqH#5(t-)SQM@~n zhS)i^)a-Gmn2Xrq5SQ`h3;C0ij?e97ooFhU!LLLG1`9eQMRhI;SF-Y4VzU^j#dDBS zxX7CMb*9s3^`-0~e^1%dbe$yuVK;V2+S-zhus;2#{#lq`Weof)XSE+TUd*g+lbcj;Bwflj# zGu7&O_}CYD-3$oxPfc4tiFAbpe$2By*w>D=gAWk`v1ghN@`b==RiBq*1H;2NPDs}L zS$*ka8TQ`R5h%21e2_|0$t+2vICU@i@lJ2CbT2Aa7?6km zD=ZM>%Su>S6nve{A>AAzgV`L0xjqI+7F^Yi01Qa$ zBgmC!!#{QnDBb*N3O}fh&J2_zNBo#I%NcY)gNIm~xqjH!?k+CX&blFS)kssL^nw0M zL{!+!{gHiICGHm#SM!s9xHZ4tk6SVSj4bhj;-7b9x{@2Pgp$BP8+jIrsvE7`C$bVBLpwRID{{pxJ&g%as?nn0^Qp5Xmrkb~`XJ=HqDKboU`OIB%h(rlrND zq=fn0UKoA*NSiF?BSfc|9tx0#CTE-9JT8~rpRxhkPk4BEPvZuxb%CQa|3lFi8yUgB zd-ra2IE7oQ*^L#SMavIZ_Q1FbFfT7}xM23|KH$_Gv$UiO4YdEv^8y>E;nFU(N(7k_+@LwHNkHr(g zoYneWU3qM&`>(DV0xf00;LSI@_Bfi)MhZuwq!tt@N>48RW0Wv+){sLd-*t}XxRsai zDq~ggIQQTKAK|eBbK!w9kFexxTuQqb$Iq*p!8%P>TW5BI<{6o&qGVBQoi z0Re=E2lwIOA)Ip@aBxozF{{k@|L)B`IsxCxM$t^K(35!HT-n@&`X1<$Tf+Y*wR_?x z+4NfqOOa0=ZjU#BP2&o{tIgaW?V!iq60G=^!mLY58NgT=z7qv zpn$&4VWpf9ZqM8g;Bz8aap(VJJ)+7 zPAMKwDT+m|H$Mry|IM(sw-uz2Ut>b zuFgDJQV+wHm7_0c2v#N;0i0uRe=PNSNmbCNP{$BAA|(o037{;}B>S^zY!X@KM~_8D zA_w&k^Ac}sSKjfd^e;eVitO*g)1W$VqJFw34trBYgW39QXbc;%704n0Wl&7#xB2Ar zs1Ln&?FCR1(k5&GfUg>-vlR;}$P_q$d6LBv>-fyjP0 zkp_);H3TZ7a9hISSbrJ1A0(~u=_f&?A7#{E0yy4kxrfuTtRzj zE}tjwGP+ui^F)$4tgY_Y#VKR=_d=> z;3;M~JTH?Z2KBFPTo4Sux5v*fL+$IL1-vd>lG=iSIjgApC0*bG@Tuz@5h&y>VQrB> ziz`W;H&zgDA{oX~>*{4at;dcGxC<4yG7)GBIXlYoye*aFWI^zrTnVxlAQn{zWt^o1qPoSdgpYo+^i`m_cu*&!wGu; zsKKa`{TTIc!5TKWaOQ%PSz+_yzDSs!GRB_ieRm~ZFtCZw*4L1QV{;}iZI5R~S=$w3 z0~?|!49~BS=aTcJ%|G$Lb^(`(^>DW-A9<9?sLUEIXWUze$oYs);XyyBi2<-neP}e&+Y9qE8?rw`6s=^CHGeP44>~3H%IH!e}QUP8NVhBWq z`xfHtIvYQXs3ty6tvdPdE0hSEE?J=Tl^3?yI6Epi z5R54nnsv7+w&aj<0sT*;Zk)8bQwpW90ZqS0{lS5r8fWq^p+rK3m?zI4~ zf1k!}fdObA;_)80*kIE5?B2K`DszKq9m%(AMx9Qqxy)rVNR^Ac*{T)N z=SMHK+Ra4i4%v?F;MHWMN!Bpx#aqM06yr#K4}BA?DjMXtM$sFgoIZ3n%e#|3Ul? zw9y|UCnXi|QJYA=4`^tEfA(y-ryMj&0{TziHx=eC*Ko%#;MZ83vp}i6EXuD@tDXUy z^G2~6JZ_W;=0GN?v+ei|$HWcGQ#Ibl)*0HkrbViqFBI!Ax*U^U_UZJO;F{L^mKF<} zE(|*WqQ}+(p`bD2KSROP%nTFqdrwcs$HAfpXGeDE7A7WUKj3~FQf1Q5R1Nc#SzwA? zNpONTVf_<(pCz&B6|)E>CnN-4TwLf|q1FAjj~DTyyu0&W0t9rP$B%%csescud{vH)t$fFi$=use*98{h>m?wfLzPQn|w0(X-I1GMA+q!ILccV=wxzW&`w4znI0WlZUJNs{b~o>WRK@ z9I)Zb-6+m@D)^+)J-fANEjvIunGm61(YGEfser=N6{O4AKYzARtZ4Gfz@pP;+bfw$ z>{A6jppO*^xI0-AkJ%{)k_7YrOcH1S89-m1-D0KN;al6~CUtG*)d==BWpji9Q2P?K zG5~EYKm!|GWy8brr8@N(ot>R86cp5>7K3fJ15dZYL_dFHlj!`)68s-puE{+!_ z*^I?uPP^Xgr>l)S4xrdWr^&&`CpaNM8yyFW8A&FLAqFy8#i;5TM<;P#RbZ8k1P?0$|1Hz}jv?ImMKagSvo|}}Bt=1%c zUYm^VpsycmXe&CkC>(_tz6``V^8u2af8n9-E~K9a2QupF30wn7!Y~6VptBXdW;e!s zzh|B-KpvUK@1UWNI505a_ucZ{$tytZwIue>^91BHApA{ZXm4+?fb%92P?zKMxp~*} zd*byIea+!{X4=r)%-jq&Fb_+>uCEpqh$VFd|L{|ndx}lslh(C>8HnoraH=pczok5Q_?^B!Ik4EPppU)>ON}@HS=E~<>g9Ma z$4Ns&vkL5CmUedP|NY0AA+X{#igyH;y;wcUefm*fO91OBoBt~Jce&)qE-d#C;q2%J8E!XRgBH=$7;a^#;9ureF zhZ&fK1tx(eXg&)F3cmDsyiIqz0Z)&c8MQ;OS%MeV?;K&?+o1ceBos_y$nZ|Fh6U6@`?T7zGGZy@ZY} z*11+#ng2VkY&aD`gceotKB9H<=|Qa5LZ-_#MUqHP2>(1{XJG9C zTNN!WEf5mV5S=Z|VS#R%KLs9W?T-()0-k3yVvlz&w2;vkqu8+(Xddt18{b|WhI3}y zBWMBMjJ<{)up0D<)aCLeEUy?CqvrhxS1dTKr)cEQ1tTjL*m}_{`D?;Jjre7g=%r!L#8V&w zgH_COR53GM`2Mp43TKgG(a%2z9E#OqtDfZ|@PcClRKFufe&iZF(n0~_He+UPP z4_p}t5CDw^AjdQVNnTs~Emu}E?9iOROCHNEqwf)jwH2GeuQb5usUCOQJDsi$VPEM#hiJTM5w{>TC5Y5T(C!J zF+X2Ww1|4yx{KIvEODBfHO-?r8p4PEb`_*bzW&J|lAq51W)*aqE%RBY%W^$C>UT%- z_cQL44=U7{`<&-xfTujtb>@Gg&a0g)sQxwWV@XBZ8!k?)Z_nYr_*c5@D7FC1yQQ`D zo0t89knEE8{BC6{0b!r&s0;`q0%s<#(on`f){|AV-6H_wN`AC%NLYHnVwVVi|52ps zM*Cv^2o7p+okEY#t`nN{14U-MO=k0FB!}B8h#@Eb(k)^O(QojQW*PQcB9gh`Ld`74 z#qNCQfEA#A%K$sp!u0{FO*-GmvXX$RJ}*YG*j@J1;4w5M@EB+~x=i8|A4%hFAehUQ zSU-6yEG3gVvR&MpucBvIbEPk$Jw3>E{^>&7{yjNa_`A?-rUIu)Yk(QMk0x@t26MQ@1Kk{ezsLy%t$66O(NeOdP+-G={A~EB*$35M`BG;F}a#h2XRO_MHX8 z2G8et<%Xzro-93c9}MIyqcH@9;^^bD%76bcqQK+l&ZkPD2mmau{M$zBs!0NBc0ca> z{PNTI+}vD7nE#8me}EzXxwXU!H|&#{d>AsOcw|+Dhl#nCodb7=`P&D$fLo_AOlYWh z`xa)q8su%%1kxPk`tJ_^a9LbJ7F29vpva3yRMNkZU>7`>mSJN9AKKZ%IgQ!oAm&f; za6-Oxyq%vdf8T!G-*8F5zVVP$Pf2eL-ga0D1(S1*^9&IoaoNYonIKQpAsC%|v=K`T zT>cl3|DGquX)#KQi-*U^{D7(EjM}-kXMHeN1?RFe`W#TPzY@A90cG^ztI4&5yGnvQ zJgs1P>xPM*y>idR+Vdl>I zktPoA%u(+kuu0>Kp&r?2bdS*YTCYjc%LCp5tp6h}lrS}=Vbg8MHZ`XFSn+H?05I># z&ZbOqL;uOalUG&_6Zf}gcJ?H_AZZQ%4wL@#v6L+*xiRdBikWlCM(g9Ph>`>IpRc|qc9&9IgP{V`XL=0n_GUDnNOL8vrT;2_t>4oqidH~A61<)~Um9v|o!MK~-+ zZMf-kl5S-OKisk8Mcy|=B`APd%#U(AHj`KOz%o(y%;cV#o5LoBA?d6!RD4cpp4V`qf}V;d>AzlfS}08t z+__E|56R~?cZh`Z^_iLNVja58YF`rNi+jg~%YPQhM((>=6(3F%Et$KShAdiYm zO)Vy_N4A2W0*qZ_4#ghv`$p>)x(!13?_XsR)}Vp_MpAzfMZq=q@ZoM-^v(jYk4i6y zpJ{D*jY^E9$Xg5_BKN+d+l0p34c^$Si3e8R=_cx|FFKad<9vE0dBeGTZk|g%2?;V; zA^X%B0L&fxfDKIwH6T4sK*Rx1>7IT|o zlrlV79*}7y)zIxeHG`la8LNa1hYiap4DDK5ZS7A`|5?Q+hFXmfa z>nYb`!|awi%Jn+r$znN^*J%vR7&oJAzwBXyVs)atleafF889{eY^6C;GX-3$0pd3! zqp-O64Z^iEB8(un#6z>qEL$&bC1p%-NQg0zUIUpL5fKpwaTJC=GG$Qg|6=d0qUzeZ zb-~~e+%?z=?!nz1g1bX-cXth*1QLR~ySuwfaQEQuR+D7^`Xh>b>1YQKE-vsRJ)Fpe9Gvkit4r8avBnYj0NxI<%N3MVG-1;Bcd8C z__RbKV%h`-r1JZRWdxFQff&P;-RRW+Nd4Rc%}ZOK?=1n+P0Fjpf?|Cd>^GrX?{@H~ z$Dq;Y#p7Q|Gx`$=U^-%qPWQk_>ZN0%1 zIniylQ^s^Y;i&uZN00!Y*>vZhaZwCo2((_&j)iH6v z)EpCZ0n$}}cA>J9pb5&CS}s!{)7#GU>dpgG5Jm&Am_FrC#(fTXjKX<18boJWf>l29DTFUp5c z1%PgP&8T+{W1ARxm?25AI*-@jdib!~4hGQs!jsD`1za^%0#Sadz%kvvs0}y3Cz~;t z@UF67YbR~Ks52djKwb&;^ks(v@scV`n2C6r=18yuUYg_C#4o5hAANeU7(%MfCj=W1 zQAdp4D$+?9ni3(`m01yARAGXE3=!|!HlOy&^mT7H!v)e?k$rjF*e3kT?mc!NXmB;T z?tF!Br*lSa9YJt5Zl|q8YbPfy*!(_r7)#_q?Us667Ew`VluJ?G5xIuVVU9tOH>Pr7 z&A0lVq9CbAXr|lJQ2I%HA6xz?&tvwyr(e=I+ZE8Qa=bCIH2~`QBdAg2u`yZx@cfph zH{3D)Ruoq}nlNg9QToijV#!`0$Wht$<_V|G(;1G(@X`#+*?xMWrXKD;YCsLxaQ(5O z&vMfu?-JZ*-ajsqBd?k~tCwPGlrpWt)# zuZ6RE+I1qjEjZ1Pu>-F|PeWJRK2Lz1QRc_4e^5{;e@6%itJ#&Wdr+BIv#7Itbqan; zTuxkGh6-(H>pCQt1DQ@cAUMm!FtoBsP%gPF%9m)$6+2UTikJ{5D!+_MAUhOa70SI+ zI9pGlEc95Y(GYyt%Nw5UgfmL01k2gspnF)D5+%_7XC5+$PZj!{S-d4I7`~R|y*RvV z3hcLc?bHTPJ#NX@a3^$OuM=ZkO742|jJ2Y*W~_VH3#BD({!%f-guQ z)2biFgz6y!rdo{2KkI7?2`~*wgz?Owf6FJ~2ge;rubps1=pG-R`cR@hl z&CH1|1*B_sehnMt%LBTzSQS{WKV!&$ z<5!{bZL6K?or9SWwfOB6v#K|FaXuf-$Drg*WX%v?SbcVUcP;l5axC9MLrKZ`u?i4 zE*hZ49}483;6-{{A%4`e5KhU!vUb*(Ya6??5U7&aEp$$#2jY@{G*>-1ply%wwpgy5 z-uv7lc@g4%o`+-<-oMvIYTgmWXh0f z5!C&QHwo)~zl5_);AGwwXlF69*mq1`gwRGVb#sT)(4PV zLo6U1QKzByIi=_LUx~eH^~Kj3lE>7MW(=PNdi)!38fXc@#G_YQ#QX^I$9Uh2mD8GS zTY}91+?4mW!ZY80*uQjc0t4q$@dXA&da)en5JlFSZ8ACzZ{BLjN17Y-a!1~W6C{t) zi!EX{L9sM(O*mA5n|?);w;#~I(ZEJnaFiJ8@4O>-M@&*k{uX|?aZzu$DyF^Vpv3n* z+H)higx#{VdO9mxy#?tiij`7Ava=uvGMO*Me*v18D_(>7Rrle({j2kpL#_uo-mBsb z)669?0{pMN=Q_K#UAS8U?&zJuz=S8FRM>msw~|~F4cHKP!lD?|pq@9fuRs*8lMGRC^ zJ3q*^1+;4Srv3C{bjZ%G>feIVm=Vffww*@h_cd%-%){84OfdximmqE*W2JYxi1hVxBoS&6yW^wHHixD0w-H`gMf&|r@Eq%Mvv(#HLK_tI$_;)ZeWk!0 z{>VDem^+C&^JQi@RHNuLc4o-NuD0XvEW8?53tca-gUO9a3}{bK?2a4c;R>IsK#e72 zMC-7`0@yS8ZE=Cn7eaoHCf2_-V8^v#xV$MM4cl{u=KX=PtbK+tfngYZmRq}bUzQ`F zS~KTgKC^A6<+Ob!o@pKx@(JwB_hfp**K^zAv1FglBE1`-$qmOXot&2Y4fY zq}{s?FQr;KE~PFSLptGU+C2uUoiZ?t)ZwRVP85i*_xarN^W#S4gkIQb%x6vpJqywE zq`j=(o~^D%@Q)xXA^bePSdd=788*6|CR!0sZG}Gq077FDLOwk`g2||MrubkXy%!R^ zl}HSHPg;+gPcN9r{MMF`)paw55q-WJFFbc2Y6;{z8Zy1!2bJ}nJU{83Zd7)e5oCLi zzS^cG#_6y09{~WAQmV^ZvbjzBI!9Jq0C-)lBYKvoNBU*uBKi@c?U_bQ4p~%2mU$Gv z`wf7n`Wh?gX1kPdOn3Rb`7@8n{@IJ?>`=_>lM$p1+R?J~`2~{WE}a69nt(do$xfalR-MXvsv(j3u7#^dN(3^8UEWYJHb+bVW?y zM+IiD8}e=QbJOt=gm9ONW zz{7A_6EAm;=R>uNi)uH}1O@aJx`Eu%jAv_9x`qCr8KiT|UB>UDv8F z9vRc*GF?CAAD^*bHlta=x#-yqRs&wrTKN4VHu_&)&Ypa4>K^9DeAxQP?a`4jFi}x^ z@I{+9K5zJ&YG+ND@fh-C<)3vDhfk#UqKigtSf2_6z7-Vd0S$UnhAla8B@dFU9jq=h zx3>?s`{k#X%^qK%?(G$ndZ;u07l@zlOqO>{GgX%++u29xy)%z3(n&Da&5h+9%==3o!fD3D>AR3Lv zm%5%Wx5g*%;f4uqQNyH}%OllcveP;3&_3jELgc48YCGzOs(%ZyLow;s;52T-J`eps zf6`rv$uIFxazBBU=QYSzNX*xX;`+d$TBfc0HPs@KNh10pcxb<>-lL=JkXYk;WTZZ} zHb*6*w3@n60plBctP5HzIfj+exZ}46HFHO(U?(sG7DKI0NuXi?WzwfB?&j`B(}J2# zFxaOe)nHFB+aI^!pjW`r}DgGp|65j0j2|2y9{EZ#IQ zdu-CUpx)kuVn_Bvs7+wZgiAlWqPs7rqxcB(Mq-p7iv~;cC_zvOPMPr#(47Z$DMFF3 zoPuT<|BF4}pj83_ZO;pxWv^J!}9#i?4qQTJpA z`ry+($P#{|7))zlnW+^v%x`JGtEFN^l7dzU!*WQ@=`za@RuZkkj+s+4ih9 z%7WhSt15NdDkbcOgZR~g2> zy${lUkfoNEk-?xZ#xF61)UL&c4jc`%AI`HH1}*yr=vKKT)SZOvZ<4 zEL_&l5F7%ch7AHRwiSyeE{AHlsBf=Qn^g-xL1vS!g?I5dG2*?YXmiW%bu%z{x&F<+ zsE{~HC+&lv7P^fy-v>+7cEiqs0_~Y49@87Xy!#~~(<4KT6@2o`*R{ZsBC#y#q*_Mv zRiZBOOQFq~``=H~$n}KerJP?P`Ntk3C!V;{t$me9p8S7X&%F&<4mIq8y1TgFtE8+y zt`^eEnlZDq@SlKy$&{r)SAW+Wn&4Tg&g00_c<@5>e6K-sS%DMvnHhWIrfGugj+%sy z5SvXlIKzjCpq`HCFpo@hefF+p!lfE>i8pz?PLz9i>6ir9WCI~-v#2-2cvFD`6OG}h zOjFDtEypPR=6N@v#tIGk@(@uvV*U4G1uCEA!rN8r7WMo5V7o`l&{;zPEpL{iB~&cX z@I;j!astx3sIe>O_(>VzNeG7G)DIXbJ@r2?`})^G;{~5d67jEkmPXW2>9T)%tU|pU znLu8s>`KX0c0bHAtu}M=P2zrbMBZ}$C>`DPg(xTiQO}RRSx4V^0=^`&F+J^0;__e# z?p+^4hphP%vM3)b$taRM6S(0z<1|8w2VLj8U_k{L?cet5zwtJc^p*yHa{ZarC^Mil z7r9?dObp9yoBKuXrCIxQks4V*KtQ#J4AAh8qy|VPJAVOSfpUZ^ot>zi=?_ICu+k{L z4IjHi7c`3PUry4Qw7B+cemAcv6M zNU5n+Z+$Rq^yZ-8LEbXuFYnHT?(67N+Z!U-Pl>6;Zh4Rle2x=l#fj3!?x8Z^a3x@` zyCZ!N$33GVyt;x|HiEnf@7KiUK-qZ%C@+*4i>6K@fqYYTd%8h!eQ^|p%vd6ZJhfSt zNhS%^n~9gMhPTEt?AD=hY@?lLFWqSC_1-2{U!s$)f6J*y*+i(KM{H)z!`>dgJW$-z zYa+&^Qv#Ua&50KH1m5m9QC#tS7H7Y&brEa}B37oHpZh&kwSqsdQLsU?}| zw!yAP@WV~$n)IjkHtKsoODELdy_ny~Y9e%%0eO}$ga}OrI^z{D4om3R!^5#8Yv(Qq zR(Gg;4{}PyJnyLAv6HPJ(?Hkt)vNT`@BCme7_X&a(}NX@j2*j8uycc16;(ELj(Ve4 zygv>1ZbY>`Z|S+G0R1$R54zsy>z*fL zs(uuI7lzV({5Sx6`%LNTH9ZZh)3!ji&9q=S}k6FbJ(E!_}f3ZKE0~^m!-y6 zljOD}`IV4Ddvp|{ZJZeeqAu0ccpu}ongh$~{SQKk-_ug>aZHa|d&49hPe;~laIEQ8 zDR%DJF0H1aXkzZ#ukzN-<}z7TiQ3f8!~AFRS;4)^JBy8i#RSZYUjt5xNfW)WC`525 zrr;P!Z+dtgjv1Hrv#&mxqH;#@}<8EuJ^ue;X`dz1$tFj=OhS-1ZIJl%%4@ zhQP2R8O0vIq-%I8T^`KJeO@t}Z6?9H(e%Urf_mCej*m_|GEt&MammEwe~07fH2uZ%T8;<~~OI5McZeajk7tzlME0K2ngUQy5=SEVAOUT7Vm3Ba@^Z%b zvB6i6x27C*>U#?Kz{kGH_EtB>?C{$nPl@n5<&?_^dc_LQ8|CBgj?9U}NDRG${})?p>W8HY{m1TES^l<9b|9aF<#hxO1p2I6jc@c5A6QxO8>d4eh(P!&IJ)3mx>BC(xoV$5g z^SvSNO+xHgIjDebvw}hY=0CUlE=-U7%Ky&Q6Vq4*eV-4ukG(9oC!NpCdI=1KeIg{_ zB()8%QpgIvQEr<{6)E!^A&qK$6VuQLm4YZ+ejoQD%@82@YGcyNmWqCH|9GE5up6@t!B1@jN$E?mzoH>?H2qdb>^Vr@KuZNsI@GNOmXSZX;9IiU z$+a2o4kfFRRil|gR`Tx>jA!0>n_3B$PaZ%P*+RbWG*6|vTtHON(9uh7v^_Uq7ELq{ zyXFM(ejV=`gqr~Pa3$D8h&W60Z@LcYrF|pd!BRCWKVu2a*D<_+n`C|OqF{o6Q>bHX zvQ-;itj0yZcj|l$d^Vm$b^nSHJ>@brQJg_l+X$m2^C7 zs+-~ZU3G}Fv0;dsmcOz`$1m|w8m`Yj2W0T85}hr@L0nlT`I1LNS((x%g*Rks_G#VG z82R4o9;|nfKro*%HahBUFRmv|wdE=QTM)7A+)f04a~X(-T=&)|`Sb~2eWi_A=AkS& z&5mFKmZN?g;bn0Yt&dk2<>i(sm2$)Sm#|J|!>at-E@K&tN-TVPw3#rj1e3yb)7Ae4 zi;>AZu(Sn6|DZws?qSdPbG@S#W+U4zY_GMa!P2h+4o@X>J3T@JfrCbOQoh@lCrmDg z?`x_~^OzTbW5t4ty)W&)m!5_(YED1Rj~IaVz=ZtW87eQL2Rl*Y^-3@Zb+-g2yo>7x z+cUSB)_aEj8?EQ{8tK+b!tP77wBz&Rutzc>`pXlRVQPhSTQIr_^KEb|FZI|iZZtme z*oF>M=5UuUcP|;!TP5Ljgx%}E2fzH*Uy{o2n*fw&u)-qS?a4;TY1A*nlsAZC0wIS? zr9_&+tzsh++0qmUj4uQs)|y$fzsNYSOYad#{;vAhj7)ZPW)x~H&VKN6n^pJ3LAYN0 zw7gFmbEcdC5M!X?tmes_k?IP}|We zY@YVl9+YSpV}lf8%UxgSYSqcTY?_RbpAlMO7EOIRu=3!;BvA6o#W&CA>C{^^A6tP8 zFqYdgyh!4?r$w-Lb8?V((3mxwO>awncy1QIpi@859O+@x#V}&__cUJOtv-W@cQdwp z;o~AXN8p9VGMz2(ALpzNAYU9JjzyQ7{B*QjH||09>#}#X6q0B4J}$^sJ(b0p!E~k! zAQn;_Q=bZ@&x_ysL+h^(RNa@pGlY(;K-3fB|)Q6R5ZCwF0Hz@*+t$=(Hy1Zk4Nuhos7=xx=3?U<_A>~I6z^9utYtoePjF*ow zwPzspw}g0I($24lEEGj?!1VZ23790C=dZB;sjV2K4DD1(Ye>$fX0F?w^7gSK}zPt)3z43p&*1qeo_@UoT zHuTG<%%givvJzR_+P8ZTguRAFOQ4r)!w*PeOZFRrhQ)guu6IE{LfLJ)O^8`b4*52C zStc!skUWCB9t0hJjWOFH1Z?0`{)$%JwGZp-TqX5*snfRp#603=C2KF5;p>SG&bmw3a15& zIqd=Y`$%A_3S_&9sjjiE)sgxb@ZXhFyoZq7j`YJ}fLXdX<_LLlfJf40GUl6-DQq`R z)@_7Z^{vFn0}+Dck9_`2{6bbdDzH0|kz{)Vg5f6~Bdj?N@DbX=U_~hFJ?!{gM$Kt| zg4LFiSWM-^PC(Wh8u{rU)k;D5Ovp?07?C{nG1;?#0q^w7@bBWuK9+AljeUGWl~Fp! zbWB65T@J^bY_lN$(pZW;|RNr-X7+!!! z+Q<95@)TY3mte!LMT&RH)mf@L2e(b_Md!Y2`lLm2WI#BLoeUyke_?UvM{;E2Bh7Vx^AjxrIA>R1mpOaMyKC5*P} zNoV1XwEgpzqD<0E*(X_lIq1;<{}IfBDzw8&%@1IBzL(g|H@+`{FC}>qag`mB;1+ndAj@xTQHk>&3ykpN*6R?d>X`quk~!7UqnPE{b)2m zv1&9lIaQxbFKn?S>qa#HSub~_{m>k~Lf`*(2HZUn-t@_@N9m@Emjev>D@5?eNh;c> zEk~JmESQ@<3qg0Povl^91_N==zpKvC*c$i*tTd@7g`&Ic`=k)=H>8Ijd@3%nf>ihy zHsa(yJc75NcphM@BfUW3ziUPzjr;aT@2ZG^+VMSU7mY^eGH}>DsjwInnl;2b0tSSc zob#FPpPh7UAYpH65YAe6Jir%cZ331v$<#r|mRAtpKWY;%u_NmzMi3c()fvJC!#lQ@ zHZ_>|S~gxarlwwh4XX|QHI|?r1_|G{!)}PT9y6(%9qCnNi)1Q-h>sgV$A>s@KskZ( zhr%6GyqvnXhZWspi@v=H-W!o`CSVgH&0ijH`I21GXmkRCpSl4=l3m9=4Xuqj(JJBF zP)9$GB!Oi-FhlX(>hTE$958c93B-lql#87#y)L*p7m%uEL^{hzy!y->nv1VU2Q!zz z?J??lQ(A`W*nnASf_E(HMnG7V>NsvaT$QVysQkWB_EQA`4ckISYpnRH_<%%w4*VX~ zAeqy6xGAL7vTq&{{hQ46OrZ+AMb7 zhi6(R?VWW20TvsIh%uJ%hg{M@BW|AApGI5J+;+``c`2yG2n$NVf)B_^?C^otRj|?0 zDw?tKGLCt%J9d%F&M*%xEtsoMSV>s#x+F6K-}9=*?!@%n#2D#%(^zTSBl%Je2QOFA zjc29O(;nHj@0lc%%7UHE;u#Q~%?}0zDgSAX!y^A^=Er$x&EEAa1{u&5pSp;B%KLz> z9qg$$kOkK1O()!3CcE$7_VT26E5QOE9umSp5*c&zH$dPRbncvW7oDFxg zA%0p>*WMWAf>U(@W{8d!o2b|*_U6RsRVkqs{DSR=Z3~j9BbvxqRedZ!q7DeQt~`JE z^nO!Ph>@NF7c5i&l$v@Cnz1NFv4V?$1e(j}Qo~=E zp3thW`-$Xe3|>=#?j)qsn0>$Sz_w59b8;Vh_1HQcn~P)XKpHqhYh5{fSB}%`hr_$6{+{3K?hh!!?zVATct>C@OtQ9R?j~ zsgG)P>nkppm*uNLHKIHPJMN}OBgWD)gn!U;Q)zoPbwgpVigP%0V%+I1m58eUInDPD zSC1fe40cTm;`O*!OdSM*NMBm@lT-2n&o;$`T+d0CP`EJ8<3l6Vmi68|Fg4yf%t=oX7>Xw+!>3;N%OrOOXNO;-mAT(#y#k^?o-#M&Vv?h@=Ia89M$ z9wThgIp8gI;OB;2+u2qj-v^(TfW0mUg&YTvfPmL*+ihaoQxcZ`%40)9ofj^agc5cM zWNS|VR28Gq3Mnm*4>tB=(5S3rpD|PGgBp=n(q zCz7XbO30J_(3*(8j9oRFaa4rZRfd93hC4IwUV0AglPWCR*ll{>3u1NFLH|*j zm?e>Zh8s3q>me;rn!jfls?Z!lnc$fkwy@#sS10utcU}&(9u4`SH+x;F=i64Rr=?CF zu~G8Gbu0Xjiv4f1Tj}{K%KJK>DAv&J31^^-$}MZ)OJN@*1KkbQ=u300r)tHCV zPz#*(!dhnMHWO!w-6>EZt}=o?3bX zm^kfZ>JnCv*}z^(Y^)?x)zSlyGM4{Z%tA?n#*N-M@%WEFAyB!v~NXuqPNDa*Y1vf-KU)+QsN(r9W?UlzZjrF8b5Q=`#U@`ikS-a10A zQ$^yUb@Ha$)1b1LmNWHwekS$IHB_xOW|V7>(rs(qC_- zf9QYxd=?)0=BEJTBfWNTL$U_g0QM&Se|${f)Bo=d{hxB~f;2(IR8(+hXJ^1X^mBIsnESycc$&Z)sn=Oi{=xoa z)T{|w0}6yC@cZ%s^K?GCwy~kOqpObFtoC{gWOEg(SAc)`DP#Sz;hZr8`%1+$8BP9- zPVsRKC`-s!I54wJquv$>{M1( z{^8c!R&{%(xQ!J>qqcjJ{V5x&^2H4LFBLJLo%SEjObh+QpJICXn#BJH{-OfZPLz^T zY-$0*7wJGyU2~uO;%i>Hd8#l^$3LIk`Rn z$Y2K~T>*lsl!*XP&ThfG2#Bt|4gwH3|CUhG{ZVKLDIy{gm++>}W|^7^!otwxZ|R@^ zehrXi>Fxt7)or0hd=?fGicLizXKiI)jO+m~$A#rgSQ0Cyc{dACT z^(e0kXQqYwSK}PV#-VfQ{Uez(2q6%e-|B$6U zbS7tDQDB}jQBiPkV1LSxTceM>AtE9gK&bb9X&rPe>;w$zu_}LlcEhK-oqV;jRB&__ z=7eaSXI$7p`7z$5@M=C3K<4tSpxOIj{U+i3b7UA8mAEpC)cs#8z zKB!%o_;KL*AiSV^+Pf_{5g<*o*)Y&l5c_r-J=K-l7{DIDQ=Nu?^Hr>%E-c%qr0t>~ z@-UkzXYt8l!6@%mE0Wu+>vMx2d2_VkXctamwNxGTKi{J;92ErvL)j1{CFUq8HtRTWlUtIYo>WMppl3qo4IcF!m#l@tz#PKa|0(VD(DE_)Ci zE9cC|nA7eo{+Z3eE*X(*8n(iTh|b-91g@wE7#G7kEBs>3MsUmQ^Zxnj3rZxNQ*o&k zM>8erBQhkU&9%*HpuKZ%2NNX(ALdq7qheIx?T|A9DbLv2x!iRQ0--UYIt~-bZ zmV#sK1W_j12snuQcju*8kds)Bu1}s?ZivqzSYgqheOS z#^b~DB5z&}dZvCPXlMYIwRRFrx@90LaoVW$tQFjKF(<>%H*&!xgZxO?m~XcSM&d&p zSRd5cqx{&ZUN`Q44SkFcws%7ezk+zt!OUcP#FTtG*3Rq<@q*pCM!^gVh8?pJTf=IV zU2q*;u5;qQHmsd(iO2CdhVcDr$DXXq9JRN2vZ4>6DGw-HZ$C%S1L{EpkpJKiA&k%O zC^+8L(E0A1g!&!InUquUr7DN1hv3Rjw?_e@FFJEuZgMz<=6Ht@TAL{A?#RcM4C|#g z3Ix3SK{W>-+qsW%(I#v99X%k=J9P|RrnuIb4TzG647_!3J)>kbK(5usvXmowXC-z&@xRe#W%ipAEIzQ6a3;D}?c{M9kQn~|{+l>#b z)z4QD9xLzQA8&>#&U;Y3zuH|0lDT6IVS0ffBM%EynaG}gN!TSHk+YrkT3A<_#ipH1SQilo&~%t+Ut`k& z*giocA~qrXK1nuyWis855nhqVp5DPGG)pK+cLc!sG*E)Dja^zqgU5grt9WXXoxYRX7qCZx*XvUI?=s^Ah0O z^1}CgN0dQN>uNAx(d0(kt+&&L{89BK_^vPf7QWAVG83wm_Y?)25cWupHaxu043bAi z&}IVk#ihl|esD=@kSw`rY!j)=yb07B$sI|YVQqOyNg1w4^Y2;N z0ww0h;WmT`&HG&6`k*!U)0egcP0z&H+aAitfRWof9CS_4@OeBA<9&EpOq1(d5(*!I z2xqm^Z?jjG5EKRiH;-qw92L97xw71mTF6GIbUwTG?-l9QjRtC4%qq^H6)SDqjh3P3 zsuP0rmWVbqMb3)$D!-&sWs?x-CSTJ%Z+IFC^3rmk2CP0##*!k$b+0F!Gd$zAilca} z!6UfBwwJk1VQ5WD$^bB$T*GJ2C`OAaY^0S)Q7J<-hfSZrspGfjR=dG*r$!tVpK!@p zliqNXjHz|=L_BC$_)m8an92JRuswWgrx07LPeI*KC2ASYm0T1eC4zq-5byueV0OMO zNXv=)9-$#vQxQK@h6IV-t{@VX_*qkrvSopuMmEwo(~p12)w+9!A(wK+?6gwMFJA~l z>@ixML{7H2On({E9w}sr_>{X5J+u{L3fh8! zld<)VT*gS;NCAh|hPh(cCuplmy|+d1RADj$q9Kf@Sh9Y5biEreMS*j>X#sO0OoSWu zG3|{#7*^V)dnGV{0Ggj;_uJ;bqN_X3h;xLvC1dnYGLxadiBEwyY-;ocV1c47LI04n zuNp70aKJLV*PYI&&x*=jMwA~JZ3$I}wUKAjWkiww$g)A+LvGUl) zlER?S`TJhH_JVTqbk5XqI7+CQz#UF`Zn3SN4A>$UqB~vri@O!ixM{w3dPvD#K3kyj z{k*~_6(XoG`o?C_C)4UVBRv86#ZJ|;HYB_iWA3-GR zam6VbGVK;_{I+|qq{z}zSen&rMoO${%mxoO>}nKeM3&`u1MOY=xp%Q(X)p`DBcfqi zdS2Z2=sWH`>jk%p9%o;o{CF8pno(=D%0Lo4L4Fnl;X|2Lkg(Kf*U=XNySUe5^af4+7UNi(!lUULMg;rEav? z>+0KslnBm_laF>TLgK|bSLh~bvLd--GvS;358$L9E|haeigZB43Sn(OP+ola4d;;< za_aEI`Vi5gxuLHQ2rAAsp)1eh>Btm-j3mF|7$v$@{g;pfpV_nSMWhrM*}m%Ym^rhl zQj-)hk;8XO4V!_hA7MzY+)0QK)AOl;yw@KSyiD2_2o%uT*I!UH`y|3yE|cG0cN^7v zXbTPgv{fkc@os)OnKU0mL&TgamrE9{XSCDQ;IZ>ajoM`o>KMIzz8&J{r+s+$Wfah$ z+r(blSO%?KHowrtY`1;)RKBZ5Z1p@URGzL=&x&IrSoO&LLP!nffzKMS*lBRH%db{X zPh)f|wO9&L-l8fb3bQbV#DEp<&y$p}ukt^t+qqS@AC6ghAo^9NhrF7K+NLEe=67lK z*~`CodFF>589R1E%=LO$7nm2*HhYj%jI9};s(}sk22xCyOWzTW>l)vOXLSwx$7vok zQmGQubf&TGXip9#Txuoo?qG@+KiMuap;U$r>Dzi1K8t-WHdx%}CdTD-+}_Baq2{5& z(nJ;Rg`!Q9^7P@E)!6?U@+(3hfnSaoL22S!a6NG+PY+uVg-{gbmvw-c$ig5JOxOFB z2@f&x!MN+PQm3JMl4@O=OgP1$B%WmQ;i zbN$Tr^h{AroyegR{UmMNeVofYyv7&MDvG!jarlRrJY5&*C36-{NGZ_Poi+JZ@#Zh0 zcN+cmwP^e$>ZSH+hUP#wZE|AneP}ks4}AgdmP`jh{DxAhdTPZEM5u85F->k?58!?P zX^&V_vy@%u-&Q^-V3hMU!BPah7HcY|2z1X=*MD#EW&fOsA%xWDmj$}w!f)&T+jaDtXjas zL_o5ke<-pycwVR6;s{TM13$2upy%Oj_<=_fuUL!*BKF=H%$;~Q^j%#-#?h~VZ z4|xK2h|qPOch5GpPZQ)So`Ayie|d-dt*9uwpAYd}%I|p5+U~wTOX1od5ij}T#$d78 zsJmXfehP~yWyKF}sB$q-8_2YD=+;w8!xsDgPMsPHo~Ol2av;;=7+JdQ+xPgu$UM0m z(Og_`I|S8aJHeBWY3RiJJrv z%J4lS(y1JuToGa_hsvrMB>Jm%9^*zXZ29Nl9*Wz)#7Zoo^Q+Nf)td~eH_GkLi<>NmSqJA37Hb~(!nrcc8p5P=Of4Q{TBWbv%WYrO!Vr&Kp~0`k60pn zQIdea6~buOD&UFIGMV!}bTSg*O#QqEJP#=;N;2I1f{KcdEaLj9c?;4fVkjQVvY7Fi zx@~EQZ2F;*e6GUTe!$S5Q|@s)0;;gPZOMKb*h>PE7n^GeiQ#K7Zrlhcc^TW=Yed%a; zB2z=Shxr^4Dr9qLo5GHR2VD*x5PVteclVDi&Tn-2kx;J9!(zI}Fw2l14bLAZXJNtt zp`)`?f%akc0g<=yowDatieQNmGhc^Qze58lw|AyRK^SSL_fjd>NqH~{W zSz4E`){XtC9gUNay7?G6iRIIPw^FrItT5Nkkv%n388_|tT z9PDC!$`&jI^EBrlQo5WP1`Qwigv4%1088)+4Ja(|r_bQQq*l3@AESUf7R(F!ft^zk zYjMx?uxKq|PwteU1ifyH_G6C{&SAe=2E+1LuMIlVvZR=R5UB$*5fB3)s^7&0I}>#{ z*O==}XSwB>SzL&_Tbaqi4i>b_WfbtpFiCR;FXhOhN;!8|0-1Z%-ju1=xkQo5G93wX zcrd*Y{0T+rg&GJu=2>re5-jcxWelUExurq&JO?xInD=>xe@ z^9z$o5=aiIO{^Nv<3@~%uYWz)b|+IZI*63zAnzX0M6Gk?pYLMT9*!|oQ_$?z6CJd# zMcv;Rf2WNgA&^`C6r6Zl#9JEP9fr{++l6O2i{ab$^}67S&mr3Zil^g(g@1424G`ST zETs4^6C2o-ipna=usq12HyJ5&JSJ#J!6xlx!{;|D$=-nARS^Hx?5{iEv#r+c6q4nv zZNPE8cRk%u&$ka#@ULdw)&9RO8W|qgFK+4{EgW$AjnU`r@&^;Jof6KlhP=So^baK| zuluM>_umK+Fug5VXtPjmk?B)K6+@M9iLBL~bqBn0D;Vj;9G~*EJH)!2Ir8m^0PpVy zdX%491}PAV0+Eryhhyi@Fil@QDzRo{254vJMcD3tk+jV&O!3gMW+mFI;X+bAlD~5~ zuho^Fj+cIL1Ue60Ar+wnk2%IBk*sJ}eM$XUWZ=iZM{!Cp-^s^`cauRG?!h?$o1dr% zdRpJx(*SclY z90x@m6dPEZ!oaxNW^aH0C`Z>H5mfbL!{Hf1)xt>*qo6xFXK4vxX=ypfaTu((rPO1( zeT8686WWMoF!rvXbV!O|-x5w4tVj_v4)? zab3DZVN44CcO$DCF*m(2$f+HM(B;~v)7I@0mnIHMdAc7wsai8>LS}}UiabZ_TgNen z=VxBe2=>p%bCvcfv3lHd-1Q&;(DMW7P~o$RMoW8D9AiEAoKcE8Qbud?l6UZB&sd>G zo`s=e;cowzyRJJC^Oh6N?clAY%dh8r!x%`Z=%J3>?E0f~$8Im)yy_p5Vy^Iv$kY@J z@Vu6S*oX-|NATv-cp?~op8H8RT|Z`?a)K`*wXY1+3}YPc7Cdv5doyTzZ%Sd4qhB<* z!bIyfm0UHDt4%M)sJm zYr)Uj{xM!z!Dnl7M_ZL5$!yV0o#p^T}A18M}TMXV!FO~dA3sD+;ihSLR%=DsQeF~)N~ zXops8<=M~2 zW?Uc%qe9`|19Y!RERo}fx8m|SvpVpG0}10gJ+`OYZISWa&q9m~hH`CZtMKn`uu)F! zBEGKYh_~JUS^0p|?Hc^~TH$fi%xO_1zGQSPI~?H-&1goM;%$83869hM8I6I@bEs|o z`C_MsqayVQ$EWcT?{z7c<54$mXwG}g>GYYWak-Q9m-TUroO`ncAw2R0G2OhrDf^Ud zY^ZNFML|o|fLHb_f!GpJu6HwI4Y6(HBm$~v{P%5^sa)+)lC5GH11+9>rkEH7V?p_n zY6pE|NC^fffV;o1nWsn>DU*jC_#mh%)gWbSs(;aI#e3OXV6vI*Zq4k2-ahLAIHapjmkPyyeZ=aW@g< zFvN5*)VFnm6ouhtCg>(;6~h$Rp&2VtzN>(e!0rx-FJQd@L=5ye;69m@M|he2sKob9Pq;_Y8xF`@$^^xpi{ zyM!X{_+RW91g6I;9H|2CAK{~KX66xj8QM0NQJbD5wIGShcy}rStD4+HXvG}JB`4`4FuL*Gsd;vaV!4_8yomdgfu+=Bfy2(}!Hi^Nm zI=2w#(41&@U0t*9RV7#eu66wo(Xm()K3}VRNbKFnp+37WlXb2D21I;Uy(5=)uAtxK zL#PwV69*?67J|%P1j`*u_*vzKo9iSrI#ceneXq!d3mEg?2lwN9@W@H6yyj{7*r_FEWi*FY=+&5WRT zZ?5?2?en*fu_SkofmlZl4?ZiHTWK`&SyZ@aj;JJwi!E8H3@6%@*(|aT+5&_M>!8va zvE%wT+Xe^6u+{9^%STxyQQ_aP!!ELX*GqHO<}A)wTZVO$C7+$H;zQ&Yq$=*Fma`FM z6zO$AOi>9rSxD6{uG6`jP{bV

1Oz>MQWP?&0H+?Fl0xykkEo7Ou!4dLH9ZMW#=J z9jc+XnekE}kG|velbUG(6z?tJQgY~J%CubPzR4-~XTp$?{#)&!+-q&dD?82s3FKeN}t9Py!E!&|{H;>*NlE&CWK z=gHn@;(o8^Z&mgg8@A!gUj(yv_X?!wwbL&6pfSDT8{LDCGmkBZ!|vgI7eXPy6YFM>a2rBN%TEBJ#qtW+JDXL zg}*b~59WKSj`xb%j9TVc;l3vC#EbHcZGpxKt&lqS@5JWK$q&6yKIU~rxR9X{O>_CK zmv|R}^lxO%=4-z%No>$jDJwwuY`w_oS~cMN7igF`?YzW*L!^^kJ|%645Uq0P>413v zEidvYfPj`sVd%pp-sv~Ytn2C7BliB00>k^cwgL=oRRyLgCX-_Y_^u}ptEw`jAjvabx_Qdaty&NgaU%XzD7cnA&A zSWS>A^T6iW zcENuQ$X2(RY`qZtl5Wb?O2JkwO?!qX5N5KdL^oX=pYJaioiuaCYK)v;pUB=Xd!y%@ zb_-x?M}wbm7PdRQM{Olg(K21@Fx&OEH~ElsugnTVc#yH}r91#qQaI6oY>bK7$iX8{ zEAFlXX|U}^?N0bQoS>eiF`Aj;B|_-@xk}80hl3*JGu|?1j8A_KOBmtt&B2U~#@^{Z zH4VIB;)PsVQTx&_xFkk&J9%cVicl48%~JbowkqlMkml}5tKlMtLRD0JAtBlPRXHz6 zvT{j%(6q8z|H}*K)IbD|qO`KjB!_o=iS)mZZ`{8{DCGE7ws0y`Zi(h-Be3R#iMpKK zxB(+wAJ0Hj!iH^?E3`W^@#4HA^u4|`Z9HYh^PH9AYyFWOZX{udb)EiNUZaT{H*tcR z*foZ!6R`2{5j`*EPl5eNcXgej0Ve5FPMAbJu9mBy^lpm0O6%eGnno+MSsL&KwJJ5J zo|{`cRydpmjH$w@^|`F&*yL5=B1efZ&lf0y&tCE~z@N8Zy10_%t((LQlz^%1y=on2 zspvzFn?azyK%wZn16}UypSS)8&Yx1L4-K7+f1FOSgw|b0TmH4Xt5smSb*WPG&GtFDp)~2e)aPAsnmM&)aV~CWbw8_Y1%AB#*uBaO%#UrVxN zv`a&_W6jP%OY2J+Hx7o^_Xqse>cq7LC7aH2>LJDq)PpSGtRN5cQUCYJRND_UXUt30 z0_T7`N-Z>!peB+wqm?K_%(UcqyeNJ(gW{$Belj#du>Q~V%fH=rq+l#d6#G}t>r{5E zayzy7w<}C8{t2cM6W@v8_07)*CfsnAy?su8BY3H1uJCCz=(WZ+=qUQGxX>UpV=E>( z?x#}6@&Q_1LncrFJF3elA+*lmCx9#~%=MtXXg<7Zh1Susz52xNC2i1MT=jIByCFS~ z7t!|%n!mi6KDi8|r6w6v0_Y??ve5=(iF6+lmZ6K}nOwC*Ome376~w73`lYO=B>mY2 zzGNG}xg10Fc1|1Ls?WCGj6eUJ9o3_UfE8+OE=g5t|3RbF7%(8aE?Auax{x-A{uteF zxtT*AxDe(w@Tcwv*_d)5{Yt^^q$r-;-dP9*$qlm&7G2 z0;Mp{QsN84)4081Zqf*KOGpY4F`bNRF>o(7h&Z$9=>3Z#KEtEYD{rnEIxIzYl>K?t=0;hy&TGhu}b z8e{(&`*~|~5c^47;p)w=Bar0D1jotbyBkR*g*5=JMix6vwoqVPM+d*CG(%{9Nm=yY zZSYD`7?afu-I=c&UFJ|*)Q*iJ@nKu)s_KBp3yV}{oto*P)@{uZer%Ty13QaxUdH5? zkR1>lZV^`C{7I{eS@-fK5r3_YMxK&>=w{=S8RC=quvyD~6PEuHk?F5_l}}c!7?2Cz z2gM3fh_r{q$n_f6>~L#Kd&{}cNq`(B%$$~!`0VIir)UYY#iMtOm>9*;^4;NU$XtC1dfokjGoN(ap}*U?+rK9Nh1b^c6qQ^Vw(-lPo}uH+NjIBX*IJ*Gj;T zg1_&_F9}lfX$sM0(zv^~FHQEv>wFQU_8CUqgm`%ZmgIEBHQ&I&LIFD5*glfmvP(7C z%QghiOGy&Typ{Lqw+Ni_70+5ahDv2__H%Xm)-S0L@^h}m875AtA|W(7DSvkoo#w{w zt^{JKxtEvM6iRN1jdTYH(ud22z){rVCd1zHhs$vK?Wnyi&dCRBog}{>Q3tbyey-&i zNJ36V=0})%%j;gKdXXCTW^ugLJ!UH*IH8zcTxR6ExJ6^>e7 zo(+y59DwCQ4^`g1|H6{{CDNC(9*_LbOI(h@XhpdA7S@ptgBGcs+aEsQq-t+3$`kR)+Zaxpd`;uF zbl64Vf0=Bg@@J z6!4OloXi@-mRtb*jF>^v_@{{XWj4OJH!u|87TeqLgvJLQFTGH@7kt)XWVkmR;sU{p z3vQ(?4AzE*Otb&mf{CE>Y2#$LFLP`h;jA1cm$JupKlk6Rz`HrlVuU>w;Zruyxz2vq z;@*2|Upz|I`+M9kLKWQHy~rl-L!u$#K-jTLVq|HF z`nU78%-2mtk0imwu0WXNIUMu5Ybd7{edF|#pXU8qTdeNJDOtGXZq5xobwb+B4=YDu|g z4)ZUZ-IC;HYO;|$2hry&3=BhFeQi~uVWrp*kPL!1QB4!(rFYAx9CgP@7jwamu$!jd zR`oqCp7SSvA?6h6(x@Bt)!TyFmwk(^+tQrPoug=!!ag-@tj%6%Lrtn*UCQnyrEsujqi`g4@e4O^{susM!4peUAy8x!c zm6;}b^)gjdPy;_hoO%*iM!hO_psYq;eN)dXeIvY6*R!wwTAWrLbsaDVK`0<3^S^EM zc?eR_R<$KkkRH0b))IwrQj6mslWw~CeFG@~I-va%GJlYuLd?ZU6_L4y2*{wZRgosj z$GbBFG-v|J^b47zh7{^$KKYo+Aa!4aSc!-C+|Mt}4d82rD$34S*d_T-1BE{yLJgkZ zJufUdmpD#g0rg_%TkbUn{-RZm^=q%TrhorLEQM(7mDO&<0l8J>xM+mt#!fumxVp!C zJ-@^dv`D(XcJv;hM%vbA7y26S4v(ao+Qyp}2lhFJd-ixtc(L2Bz!!80>0JKyg3R=w z{59E50BCR&a$&^y0@3p4mK;I4fcl!eD<_r(@dLDQpkxu#pL~?)VAQ_bEN06w^M0X9 zGm!?~vghLW+~xvgxT4`*i7K}EjjZAsil((LDMX}2G#+KiHpW?Bux~DXq^e?*{N9t%6 zV@q^)tmWC7O8k!z_&0$Mf)0fw5JId2B-EAuxeZ16=>PwC3G?gn)L(3k__ z{D`qb6!e5nR{9V#_cwG-?dJM1Ht0VX(Yq*yYAL3KH}-8*;%3Gph5707gnar#o?c*C zSu+h9gq+y;e09(EDSySXIwKsh%M%NjBM=Q? zvm-u-&F)ukI4HyA=g*(K)rD+6@1-%@zI~2+3M+efR=+^}+Lg_%Kad*!NZJ>u>(=ut zNebiFp6eIie@)9-Fc*wjOG^N68_~qKV&-li|IwaRF}bP99d%-^{{olF1(zy9edgWO zLXLN&SK9U>bv@4j+pQ+`@Vgd*Ve!RO{J~oZn#%J~V`DR}3-O4h*Xn+|;M$@sWgP>h zT4E$fFnCz*)7|%pO*CbC(1qzGZpfSKl&n@w?&52D5+f7PP<}m zyCQ%(&d5LRrkN1kP$oUx3pzXsbk9C#rc?}-HC?52pzRd(?8k9^%$eKkS_ktYfRopF z0ptgllLr;15hFrb5~-v6#@tV{X81>LgOe%2qyD##h{)&tRrB>M0m59*`<;*XJBgF$ z(^7BIcdw=)J+2;`iU;M)G&|;wvu50x21yX#f}k;~yNv^~F4<++nzLd|E1kcC$ZLE* zWLlnk`~dJS`d^7-@oZ>I)g%4U~zS(v$k*-XV;s!{{6LBP$xb$*uW{JW$nr$D-flSqxAI1z3AO-lgYoc+@UCfWyDt{k=eItFyi2#!6CwXR_ zg}HHm>~)CegE^D>>Fr0s%Zp@eycwakq~Y4(10dfxRyr^%QH5k>kwR?n82_1ZNs>Xw z$$;NW9R6U)$9%rI@Z;%Bz%QRw>uhs&B!yMoPX8cR>JXX?t}QEb zz2_C`L5L2^$X!Q7#y?7%LiBn^`&(wHcEDnafW7z&AQ#e7j)wOf(lUl(Bs63)j90hc zX9^@4o{Si}wbnO&U1jXI0E*%zm#Iu6Mnn$68Y&TM13ze7?VG;N6fU^zc!q?f1TfLE zVgSk3LX)=kk?~A+Cpynjl%H+hs1bo=E8lS1C$`oqg=%!AEiZoPpCi3zdI(?0cEvOc)^d<1|8)_t)me*$cJaBmsAF%E!889nwq-XKUz_%mhf6A2;oQ zL=)M@!|HyFM-nQ8y?%;4YX;IFAJpUH_-;OW#e+XlGhKQ(L#kbYe=*RiB!T4iz|4f~ z>)NO_I}#dr6os~KpJks^f&=41R}7a?D!Qv7Ph5!4n;nma`~frx4nWv>rLWi7zTaiJ zZ}S)4N7bY|8i;2hDV3TQ?!3>O8Jt>u2VpS+9{JinBK#jFzR$X4s$6-B1Ev+)uuqAi zWU9%*`QP}x_?G+DM%3LO@9MF=c=?Q8N|%R!kBg@kvo%!+g@&h%GFspP{%H3 zs~Sj8Bn>IdI&+kILGf5E5z;?6YP#XqBEIhK+aSY=0NFUF*zhCto7Ves)x81a2r6Gm z7r;hzjeTVH#2cGVMRQP*T#)7YJmoynNR$Qt0ZgkD+d9=Qhe}iEmT}DV|1* zOh}{=`urF8+z{Ux%-8#4+v%{IG|9DfD|Ps)$-SD$Mr={9K^t2z$%wQhw223Xe%i0#p-td|dQH3#YN?UChEcoPj*YO(!5DM1HB3XofZd ze>5o}?+m{Op9&kkz{g9_*L*#=_6m^{G^`EWY>lP>xlaw@|H8VFZ$1u=D@J5gV{i=& zeWQ(eyF$5dZBD?)g0ZB?A`9e?fkm*h9p}*kT|=Uh@6NLNSH7-J&(r{X?#QCn zNR|p#4<4MJuJX=XTV`I>7Z?b_(84OGOYO-}NM}f5L$Lbop6^<`G#99jIRnyHkYgXm zyUR*DLo)6yr|d5biB%uw1(1q0&_b%dzi(w^KMfJH^t$bT8=eMz3Yo2e;lrD7D0~U-b#Mumt?&bv$uPc|xOpUY>8P zLCX^^VGfSBL%?i&c_GK}xU1*GBjt+|D>t4tO$tkw0iAq}2WD6tgu;m( zVp_fGb$z-7Be}|Fyl}vBu+%{J7x&C}sw|UjrH$KnE$#4Nlgzhmzdcy{3$L0se(ky- zr(g0%w;tU#356{7Bs6^D>L(*GR}piQRxrkH+-bC^xWNkI>_q3qEDe{I(t+0PbWpzC zeb#CWW>K$mZ2xv#Xz1ZS^NeG3*S6gzruGU?3i=-EveLJ#@n+Gr{<@gH+$#O^v;ew1 zdLYGNX$O7TP00kJSL>yXk75fs5B```qiEs?UkK}-%!%b>+r6t=jZa>HBp&Cv2!8Gd{8 zwHtwQi34;nEf)BeE8cHvN9H5NX zK(?Z46^?rV8bq}BiR)+jtlG6}{(WgD-5Q^MZdp>= zlQ?mPv&s17BMLJaAoI+BT1yK3MA9F9|0RRj@fh)%l!dh5iBLpp65p`WT|*uRB=|Bq znoa6~O1BpfYEbza3Ryz2ugTji?rW@G0@7IMY8p&48*Kp}cu@_b5eIl~E^oBvJ+dz@ zLC~8%ImCXX1xua~&p~vR4s~s%#Eu#laYKB9j9$M~r&CWbQew3R;GkBEm0>Ff3t@;S zIG4|jg>#Y&(SKFaigHCtqoS#T15(Y*@;SokEpX#9=y(pcVKrl5e~6mO^=)yxLW1cH z5xFTKC$4>kVOa9$z2lnzkdte1dqAxyEtne73B)uCL?-0w&g8zVqoy0LaMNYp+=f;= zVtiDKBZ(L{^axW)iR32Jd#!h&j)6*IZyZ)~Iv}yjpvnB?Lt?!B=@`&2v$Q{li^BGb zO&0itmmIy_8|Cd}k@#egaj=!{?pF&uBo)5tFsEvFN!-R$1|=q=gI|q54Bar7P{8=yaM@{ayY~p9+Lm zJ^vcM=9d*~8pB1<{+<+x8DctEYI@)0(ZXPF?Z8K!XV~jf%_#? zv0{F~!zz~#EoB==DM9kT;q+LA>@%|k&Ti8f4PY*02bHq&IJ{k|jgookgGSbYxG_%( ztjqMI&tm5sR552OP&a}MCkg850XwFd&jGnkj_KdzWQS;_&wF>W?OBXotEF)UGiYIl zzoE3)XTkS*=+~Mw^W~efnju+JNx*G4DUpBZD>GnJxKN|1mZz`ws_@kk@Qs*KAqh>q zn`dIYFFGnY4x)Jfbtpi%SYy@r45#2;4+XN3zAj*2DDj65`uIB7>L-#}KY zYbfmkrn~zAK0l_00-?0yrYz?uUkO-#V4gc~C*S)V@vg+lipY*)_21|G*V@l~a7H}h zV(b3lpN+`GrT^Abc_oTa!1GAI6rB)$S$g?l)3YYPMTz~W9%}8b_VQ`WC zlgXIG!$x~56qj#WR+{*2{7H(C$?x%2>p zCjfA8dIJxA2(^}p47h=_WaH`V-5;qQh!CvcI(T|}dut$BfzRiC=vqy71OYEMn&Og@ zWviMb|GIE}ICF=b_!#QbSNlG1oD69{Xf^-Mg|McYnRG_dajOebZG9-M%MCu5t7EH( zdq-Wgm_mCstsoE1gLTbdGv||kXYEv*6_gw+%V)Oqi_F`Xi1(;rfH*uOspu^1p82Wf+hm0^~}LmMcaXlH7!_N``wOp9~2%D!OiOGFy_nje|CfSN!eLEW#+W za6d{@a*<_QN|}y@K#ZZA-eJzPFU;+}{X?l3uY17z?AVM$#ziaU?NhHe3On3VK@7)J z9g_W(z(YUw2U8pMPy1PMEVr6_#dMo&m)2*fFID;ZZU$;HSWr-J*D~TFY9a4dLxyTi z7l5WbgLifzaaa|Yl;-NH0{@|S2sTZIil}j)wzY2k{;FT2&yB*60X90>#XeM3IH6)& zA~C%|9m^U^8rZ4*$@LN++Ou9TvwK>X@9=(q?}<6J=H2vSRPhOp>LTjv3}%KvUxGpC zbt6rClPw&-63VxvLg+z9T!h+7`@h#%+kNv`DC0L9J%mpqJImvsmY=DFqiwDBC~i7U z13oFtNm7LkW$XRnU$Tk*#qKzKsUqhq`;!^$uJE^qH-ww2W&`IoVBy({iQ)BvZ-I6a zS5&#w3RJb4;c*j2o#8r@={PG*$k;zKGWTvHXb z(QD%kf0BN!toJF{O}+W7YBPpL9(^?hV>^LRnpUQhbqn~nExI34@kS#noNI`?@-@Xl#S>Huu z5IPF@9zG=pp4PC$h6z$thA5 z&3c9P$@2NhGngy#GF2Oj=Jv!WVdR7RO|eq48TYXU$Y|L2@$ksP&B5`TIaM%@MM&H8 zo%p`s6=n%*GPQ$T5{ah5;ZKAF9;O5mU*z>0>#$dip@j4+;?h7~W98x|Eidux>Py&R zyig^~Q*T7oK{PRRHmqwdj)9u@eN&zDK(&~l(dADGRLDI&9P4?W>)8j>t$;98k{Dy$ zL94mk>|VsFm4F>{7Fth6P25DUMtgZbi@*tTl2iu4uz2|CcN8_eg+TyY%n(^)nDMU2DDWRCxd$z4K*vpVhA0*>-cI zVSb}xDQ3+H7|m*~;xpxMO$FQOOETw;OZ$6J3+6duF(@uHJHYdIolrE`(+?9H8?IVx zY`Rumj1bxp-?`iH+0l8bx`Q&P#X$H1_}3^Ef($f*5QqC~y;pO~9YYApK_(|lE_O>{ z$X{#Cvkh_DdLpg_!bEuOYhS-mUykxuzhHwrC&YbMx3+E40*uj4N$N$*(fTej96yjE zWDgy9RMu|&M2|A8*Y|+ZRv{HvFV=G@9jyOhiW6ee$~<)ylEZi zjE&{rRzmM?skUM&yY4bnx9Cc-)TOm^ri6X5XaAw!UvW0_{&AmD36l^ z-p0xm&qv*?R?=+0W}d}+hWyFkIRcg3a}b(;4IvOxzpw`G4dqSQI>z~Ha!i^{v6EMK zVLBoF3FghqI{c`|u(*%OXrJ@GfHD*Fob#`mqpWxdVt1j+3lyeHRB?I_TFGOebKa!J z(<1z-@2@{ouVrmh7&qhGCJ?~nTWX?C17d}_&Cx|F?Me!dCuwR= zVmbC$#1LFRGWEw=<+;)-(129z`)Gd*_2iCGXSQs8ld%{~Z8%J?Y1G=is^)RX-%(v` zldign$KUO$?nZ}ed#A-4nO-<^ z!~}WSkt~u>`v1xI@}hm6p%3jy$J~@#-zPT{fEDl)Bt^A@^MmkJ~oJ% zzf|;bDKlOND9B8QbUW)~6f)!Xm{KmK0;vF)=8g>;!9jXQq^?uHzO8)HTe~E=cJncs ztfU@phzv{{A{Zsh_4wD3pM{BW!wg4dKa?-iDT&`@MZ&o9s`@yvxPQuUT$>RYmcuzT z7dwF%jeUpSLxz{Nd9kk_5`p{$8e)VGc9`4~Zh>z!ycL@pZ4-$z&J0q*B_75GvSV|7P4jxV zZr9}y>S!@Rp+tZvjHA(sIM%@tdT&#`!R5d`%<0zUTI~IE{oO_O56lf;bE@Ar=^Ixv zSI(PD0&sH9sNJi&Db8-ifEBSa3phCa8Y#Tsu!CBs9E?e$kg&+vVTglX*TS`gCA;k^ zI+}xs=xea^)ePou(m8lCKWV^*{aCMmd8mnvhBSOK-B8cGL^q>%;9q@#GqiJ!^O zj|EYz?k<02*P#@Is|8`C`A5 z2=xMmUa?;)6jQpo6vm;1`A^T26^vPpd8!cT;^-1LvzHaGtsP^&Ye;=37ciw`ik^5< zV76OCgOiAko*vmYebN_VXCv1CKxQ8kltNeiKA@G9=0%j@#|N_b+*t%;j(+SD-s_<4 z8^lBH<1Jnehj|=6Jvp!%CDyH{Q21B?ORtf9c3o;to}}af*DoPnH~ipP%+Z@d!MCF= zT$g=Xhe1hee?9Y3BH^fNJ-${G48f-cQo&PZ-2LDm*kmPy(9VM4)4M=8kKz$Q+$2unT*-*QXP0ue-9cn+Z_lU!^{4M;*^Y&YTvq&IeJmBS(` zez+Zz52xov^eu|(4-c%Y{@aqm@?I-5h1=1f@VB3kf&_ImR-nHwI@9Z&4t}KLBYJma zV6JivXQ>hRmCf}4FZ{l-L!By%InfzY4IloMq#P{0qgw_B&<*L^w zGaoJBy@aD+D`qD%+X>-&3{`#H>bjK-%0zH_a3_J3B=Er&yv#P!qQi!K4fan2>ELG3 zH*2tS-&xxrJKeaF8VZb_r?Fekt<}sIJd&r|fo?&`0~R0tJ*B!J<86qoE+s1*UXym7 zW_i)ntabcpaCp8_j-u6ckw92rE0QL}c19dQe{g0~wBl`6Ey9xQcN1UC)cIvKddwhM zoZR%t23v#G66VVjiuhSvFth2URs*}8JYa+2pOv)Lc?w~JGKIwLhP|cd$@u$gX{Bz5 zcRCD@CIQnGGZYz+>YdIOcu`pYNR=1qPkUZ-r)GGD8%truLXVel{oVA4XTh7y^JbK}l2_=7L;Z2Y0-m4E7uG$DMgy66?@KE`e zKb*}*oDK-Jx2(Fc1|&s};Gt%mPndt%+u|S5#w~a9Ej5FqzOx-~BtqOTy}YG5(t3nr z$n2w_Epqy1RzB!M@>_CWFrNL|*aac7MJ82)&iJ>lO6_jJX=w!V^72z9wa_}v5NTJv zM&F_ke5-7E`xw}bdFhB~1ngFku-+4>djRd+oqK}f%>9slgmbr5-KaUH#jkl;O%rzKRtl|Jtn z(&aB{Dt^|5&t^hlA&;@-loT6;hse_my$TUK=5^78y?3{F;QbK2FE2v0Z2>6)HfKLQ zH#yWPPYh0-EWImWK*+t@&tje(L`z&sVZ@~_yM(|)8YBQ=yYZ!>>eYwT;3-$I(VqiT zW9210!-)@|moL0SvOf`keR5L+R@8bQcXNPt0verJpl)~J2+Lo00oPna@RmXsD!G@V z{o2dU2P-|&EnTtUh2~25&0K>!IKCLK;-`BWgm1+V7mvoxzeNrmB-pG5N>8u}3*2QG z@o=@j{WJis-Ci(xHk}b*M74;b_YRLJ&pw_k5xU&{6gN`Ggn$k=|cVYCf`Uk z#+tW=2bR6ayUaIKr~`yr-r15UZf^ombMZ{%?jFj02)HokEz;xJ`-OpE$V-H1sZl>w<{Tlcb}}+ns4i5b}$A?WEE}ySc0U-gl z`5n&P7=WA^8rOL_wvF^9ansWU{dmC5-mc~%gzed!CqY(o9C8CteYMRQtwqZT3e1!b zsF1yW1eXYxMRzWb6#}H?-%{JTE`J(&CuhJbSt2a(r7RmLL!|+^6miKw|3&>P&ZJ8+ zpZqEpfps*sIzsBv+Xd!y_}U&woJ~Vw&`7$wt{y4IG1fk=xYCSIM1cv>MvD+_y6zwXUAiC@mU)n9frSXY>T^!2`+=FMhn4=apaLU-n4xv}?`4YgFp;^CQbi~j~f4BxnYAH*n8Mze0uLNv{+h4TKxF$9~h@^T}dFw#z7v7wGZ zG%*lDs56nP*wNJtr*c9Tie_FXi4$`7)sH9|Q4bgD%wv)blJ8$wo#rY1D<`Ek{Vs4O z@M^Oh|1uay&vrF`aGwOqH~&fXW|n?@f>4vnPM&wGVIi(A+@_|Hf>?IWZ!!3pH17;+4!OOMOQcfY1sT+NtLa;64vK~6Sk>uy2*tKuz4%x(o^DZ zi~+}Alg+YhNJj>}g6MX(ZzFH;pfoJ&VNJ9FLZ`fbev?*OK=?p3oA!Z2>{~=N7 zSV$(&e>Z&iAMD0|8*6;{|N6!+5FRe6pkD+8W|4+PgJkVNl5GCEFRF_<7C;P!5~8o& zoS~TsviIh9@8p2Oud^t5#M&FWbu>|B_M>AmQZ{8?m6b;vv}A|wua9~-NlcEIE^M>w zi?+Uy4~Ar}{Q3${@ykP0MQ#4(4*~SMR>aOaEC9n&U#5+LkLm$)ndbi@x%ogiSgt;PZl94XX@j z-~Jn!EG2*q%+XYsc`Z!O`Ggqg{pRmiRsc(axw#%o#4dbi45&4U#`-u@r^3G%nB_f- zox@dbiRfw&UnMYT)O=?;z^O9nG;55e<9A8g=I5%+ZF-bWI}w<)6iJT)2D0>Vfma*j z#5AI&s*W0a;cW2=&vrJJiXyGn>ZouXc*0zZS217o6!@mxNJ|y2PLgcAL%~fqa1CXe z(~U2vwExXNLi;~rsodsKMCwtosn$lT#VHiuPJqg@c*`*KJESe`gfkcgP6%9*5(YKAGO` z$w@N_KD^ug1aCAiZQ8(M7r93=v|;jdCfr>(X%|>_@@dePPmqfM-glDv@ND##$5i%b zVpm~=)R^^{A)I^R^riQ)K}+^VF$>})%Sb~+k^C^!B>LtD>)kPu6 z65-w>(lmja)3-K->-dQC$!PhP!GWL~wA~(hu<_kreQ)J`4cfuyE5p>pIMe9yTsEr- zBBFy)1TTg8=U&5*-e)y0GJQ1FPRbfBn#^{NH#OiMq&m1C zXMBZxnwk6BvYHM|r{LF5+QN=`O%XM+-^!X2pJTl2a{l1#t)GZi;C@x+vr1X*b*uMa z&Um#Ah4ofA36T^&;e;`3CN}<4Mf1;(@X5F-gOp_w)`(X;?|gl2|JvVXyjEencz&{!Gl>D9fypahBjKgvOvviR;}Bk%e?nV7Xh9P2#-{dt@^VOB;7qm}=OW_TWl*U}R}P%d zO{p7_8gckw3aG=G!MZ%A+|iD)kDJoS3T>jzR=q`Yik7D1 zy4v3zd-}Hph|Ll+yY2P+rFe+;y`U<zF6S__!UTbGW(UxKYnf?qrQ3hb31&S{iu zx%RA8oB16XyqzgBMbd_!v5y|oTmav|<8t}UI3c}z* zEn|PnXK$X|#IiI!im9F|p9h|U;47!sT{@PUex~QV`(FegdNx>z+itAHalygioBi)e zOb`jr*p~+=^ay@PKyqcf$?8A}VVwQVR`5rLNm~wYTgry3|BJo1461AE+BSg@T!RO9 zg1ftG2=4CgE*pp72@>4hA-Ma--GaNjJKxSZC+B(I{<^!WtABM>|ASq{UX!)P8gtHZ z-}4$6rF66XEPTuGO46If3q^Uyc>;|2P8_sc1j?p#VY~+R?cF(O;tYKLy{&lnuea~G zYd=OB-GxufcR4H(GAb0)#o$c6gSvT*rXaZz3uUFqGplIYrf z4;(jAej2NK+ajI``WZP?TiVUr>&a!X+6Z3sHu!X3YoO*$+-rT3O*1ga;H4vl+!BJ} zM8h2uWHoc1jLo2(3$g_jsXpH5v$`{o(4?CP*ZWii{uk4OaDTX6{FXoC<5ly^8YL|UiEfwlxG{| zBwfDbz&!jaK3^2TLi~u-*@cT7OP`ml_a$!%mS#x4Q=# z&)92C;DqoMqJAE>GXgCv6x%zsGo6 z)(kTf_U`i>9vTu9?iG_gGY%7qb6q#E?Xvo+l^CK|R67KCe{waK=^GXi^FOQ{N_BJ? zB$IDsA$8W_Uzhk~u9W`U+LB$AVlrv!_v5q!nIfEX-rPEKummG>MjsUDbsk;;je=&8 zmeV!XycpB3OCURMwTi|8zZc^~9wE|ma`pm=TCW97t+`o%+>f06GZX&HUi9f0eS;^S zDW^WVZb23fiJ`(YVB`5PZS7MTva45cuHZNM@+h!$`N?i~D%bR;!23M(JhR+gb(EzRZDfAG>65clzJIb6(f+wTb*xjVslN3!OF%9aI z5=O#tL*8?h`Fh5uMeu52kBprXip!iLlwZXd=@Q*+hb$W(U2f?&WhxYCCYsyn+iSUy zlhs=fGk7$6Tgi|UbST- z=8+omYyU?Of4yr4*|>Nk+9J5#9rer{ib{p5X#C5%_~8~2t`h$Pwn5G)TZ!35Wz}Hn zso@jeOT1d&c!KJb?UK4hoj0NtWc*o>34ilf3qEIkTc-kR${Hd>`g*j98ikuEKd8rD zP6FkRXdZY7$}tK5VkyAe)oRCLN?2W}T$Br>1mfNs7!;afAYu0kIUTQ{VXJrWmjy+; zIm{0JOVTJ#I@B)N!4v7Ey^v?m(x`cPTsWBFw5B;<--FUukl z_Zc3QEDpNGJ*D|qEnV1vyY5MiIa{YvxRYEzJK4Tw-Dd8MM>(-wpGOf@#^Lq;3`s2$ zzF*C#92Brp*1-A^!xqy_Lhf z3dL0GUpT5j2-em~;g)B$x^&6!!Cjuh5=oT~LLn)SDv8o9AIM9;vOy?UD*OY~$fKR* zbF2O8krKjNq)o|Is}gmGDzup^mD`N1A79SXOQvj8bkJN5EmLYFscgB+(GVr{7bIgw zXK*(SOx?vUW~^;qxNPzxT_sV)KY%n(=xfVJzkdu0bXB|Fu_?uc8l2n>9I}t}66OyC z=MlU?x|%Wd z;>SEu0cY#%cPs6xjm|e=a}Np$1xO}M(JfhjGb7YC{J`Ijuh)4|zn)dTg&1J5T%WD! z<+zRC-d|S&BkgWndGMT}>EtphnS^%a`%wT0EE zDLnS+oVoy!O{8JaHH=F4?^NJtdctJ)hHr6B`2!nG>3J_se1BD*Yc6o2Qr?X9v6gL@ z@XKn4^5QONqav#4%3446jQ0+UP{i|dpHlm*uDoS0OwsX2l@%w6mLy861ZV@1;Jt6n zNA+2I#OjmtkZtG}3UrkrNAWz3qzZGins{w_o~`{#aS_UKzQL7b^!!l-7Mj#gr3jCODO(r3** z2^BUg$n8R?p2Zq2el#c*v;ukH^@sNUqU`c>yPl2vQ4XmKZ6|O7owX>3a_+4bn+!=0 zUG6OR8waPJE$>-_Y}W@sqydtr7I4&FQ6;BMxjG|CbwhzwLOmYJ8+;W+=)+GbS$E61-HbXq9&FkTH{6ENTjk9C zv7V%Yz7>N}ejn*8L5*_$S}_;730C&QPzh@`;!-$I2xTUWNe+KnQyBJdIicFG$1Pw^ zsCG}VPA8bQS9&~XDu@De$fgC!-+zv^&A|F%(#Ublep+j?TUIrZ_HNE3m3=E$TP&Vp z)E@|MCYK{r;Zprtl1TXb6cmb&1L7i%^Cuoe6-Dq(pJ;vkmnrYvUJs*PA`$0jL)f7< zymhu-xwhKjH*%1GQHmj&3!dXClmaR*Ma=1hi0-~ z1A1ingbrVZ+>T+Af`%W!)>jC(SJw|-Uxc^3dW*Q2;`8nf4B307MJd_6MCowUhVg_Q z3<$C9#RqUCtViR{S_z^H8>2syj@J=;6Eh&N#j6j<5W=-?LP6*wIdc4T`K#z9 z^e;k1*DEDctBF#Qta|iOm(&0X|8VS}{kRR~V=YI&WNEHsY(`6&1*stR2UBrFU|Gh5 z72gL5J3i6o3FLwA|E=Vzx^CKxuulpdZNP8fBnHtM=xI2^+{)trhB|cAD&-sKE8#(J zsp?es)UhHlYw!jvk8jlIA=FIOj>nW(PQXw}_k4SJH_>nXp@O0a=@pKd(BSv!g#8Y@ z*GXi1%NtM=6gP<56?dwH;v}<&_m$+f)GR5bv2R&HMQ}@I!k*lp|94-qK;JZ^Q9zMInAx z2?F|#VVh<}a6JWgRi-TTyZ_478b(t0-bc!L<&A!GJ@V_4LEci3PEj5+yo9fDu$gx= z|0ReV5xu6EmRj81bO3WT&QIlJYsn1JoAj@)4kISZY%CcD8w4D5f*DgjR?jKfUXw7# zQn8}Und+`I{9a6tiQf*d;SEzyM-X_B3J8@Q?V727pvDGQ;ffj3%PsLbHAizQuZ&Ab zlPK8>`vcRk2LVn>IzS;a2U9e82`BxJ!0*RK->uK}PUA4(`41ksPVl#E3F@lwe@(N< zG}%~X;z6)j`WVvuw`}Ql7JYltY`BfUb5FJnw_>2cW(OJe{UM`UEl_S^SrWMb6SE3$ znc#&I5IFl2*xi^sRei}~Z*wMGJ7?wBufuIr`z2&G^A5;SimBfT{g`i|%2@RcXz-Ub zxWzd4L8lp~Yr&ZH);&n(EMSgXfVzYWG}j4X<0aK~`8`O)>;5b(nfWBc6YWjw5Q$B zEeB4~gxNsU%TEFI-fkJx%Xoul96NMX>u7Vf#XBYL-#)VYJGikVB`0T_46{$zSir=! z_f&0X@et%EsOCwp>N3~Qenp0>vBWb(K?MP1Yr6qt)2R7Efg%%{bh7BnD;AbwfSAx{F z#C*%WZ-;Cp+zB>DQpmywXFfVF!LFRZ)_rQkB?PV zj6h_smDmI=r+-?Dg@a0yptG(;0W-$;>C5lDtgO_R{?IJ8r|aS2h_3GXrM!5`Pz4$q zfW=n)k~GSvzjjDQrg2(M(ovJuTp5Y})$)?Kwc=y8zi@!~8pK5Wx!YVTf0Q}Co;)== z3>vm6WJ-K%eLB1)*E4>1F|qC*-;axj@%Zjo+onBhE3mh&!UXf>fq^X?h95+R3p8R8 z|DjLlCO7pt?i7l5ALRw|BF(X@H(W4+;H&4d7IT%BzTZ*zj>2DfREBk_XYb9a?SyP8 zY%?EmK3BApkBigLfR6q_-`N7W-ZtHoN~M?0-q?9Q#iW1~vv^f)fQ|!AV*P{KYGL7KM~lqzB>JjkQ1*SqORY40rbZ1j3S zieq({wJB43l>Sw=`(DdcNi(SRwfN2#+S;KbX3ui7xNNiG12#fhV9Pgol*4+g+s_qY z^XG~FInRYt{3b?Pm`j<*8yKGmu}d>jFR1rcrXdB6SDJA%b~58o$?K5;Zg`)fzkZ4N zn;mkvUcza&xUIKLdFddVuqdVAi#fKSo-+=qwG6n_E($kpngrv;W#YSC!9)XK>D z`m(Nj%(bVtL5lmm#Gb&SSzP62`J1xTNZptSxeW+H&E*a8>QKWRLs3j1)8q2Ahi`uq zMRTPc|m7o6@8DZ`aQS( zX13P}RxZL6$#@bw+un`iMw;qic1oC#TZZT8{(y7*zJ6~*S&Mti=lwz1454UWjQIQW zxPGJsPZ{S%p=&cI`FxyTF80zidPK})@f%xuj_$w2u89^4NOU3|I-FvhhcB<+NLSDB z#9d~^fK5-|GzXQ9LEoRQ7#P!8(}en$b#pFoR@U7*4fbcX>UoTkFF39W$ps<=Jam`i zA`W-%dVKM?@K`T_FB`;zykx(UCqqd9CwKNhcm_!hz# zU+rA&LvwTA?M5Dj%Lmst>d~_P z^i5=<&BY2Ew;{mamP1`uE8@y6u8VMp>JX7i0N(9(G&n<7=^Fcn&$k7OGOZYNC7b^q z8dxh8wdiM6iYX<<72LwZ(a)ybJ&Z$Ws6djh--`!`c%UJmLDB6I!?)PHO|fg{#<*alm!AVHt`v3 zb^dhIVa}vu#14|TgXC?$Jhe?aR`o1OqA7X`1pk7y+Y@o@x^Dwsahk>%)bwt-cb zNeqq{OS+-DK5ct{D}x*tj60t|{SnzqRp<@9PuElK@I~`@m8@w%k~f*H&K3F;)y`s_ z6-+aLP)g&0iaO5p;I-j&RYIJ+p?i4*c#b-a5H7N+^$dsmH(*}{{`xQy3`ZO9AKLmr zMXPC>pm?u}EDMX^IK#aD_*bXK1Kf~JTeF=Ho7Q~b<%dx~6C3C#E@nv2bbkrS8pFUM z%RD90p)NWg*M5=O6>#)_=!CdyjmqN@W$472e^c7ei;Fl^u-MA5#0J7H{fFN&+q}Rd zNRDwjR`w#8*4;Wp-eTp7ifokMcIQKdz)(@Yq3*X4 z35JAk%5b`=23Nch4CLqw9ZR=WxhF+en` zXpFD@9u18UZ-n|Vj!4kk6pL2^`Dqp!JSJSv3T1*eVSSxiKIxv;1Vvx;-vMHWFxifG zJH}(^M)1Mws2y=68XN8)V9BN(K+~{bl@saLM$@clZbub0`d}Vqxb-UCI@!xAhwNgy z*q=wfr+A9)I)}B}968}OU;9SXlm9}qVZ0YKSn(Nqj3`Uq7aI}^=BhY-Wnz zDDI|1dBF|+H0E;YfP|wgD@ji`3MNKy<2LQgK^tsc#7=6-Hy384%-&2fxwc&sU~_%x z1Z1&#P*4vcDX+G=nmVg%e_?j3u1n16zvhw@X(T&PACe=b`!@n?jpHJH- zHHm6uEadSn+mu;rjd$2#3dQ4v#*nJGe3cp#R0(BQ-LH^ywyK~ORrD@%Y&qf&>%6$e zdsZ_;$pXA=J}X-{=|w& z`BQWL)0bNq9Lz>$~1LJ~`IX-hfe&xXFI@|Iu6#{KWxD*lL zL9U7~x|;F9CxjK^u|WN6GzvxdAC=O8}fP(IS`D5En&ql99qS|=8UjjF_cHw^fm?OE1KJ|ib*49l@ zKhZpV$5M_)p%YgG_3UhbteboQX62<62@m6!`Q(JX#R?6)3PyWtQA5SW2)L*qHQ3rf zc>CqF&OL$w-;JDID|EB!F`ce2(2WQV{%Q}fWfhOQ5Zvw%9SW6mQ5j1#HOQ&H^O3Fo z8Q9YZ7Ign$P#eLs8Z!<}_OQ@mibEk__4Vy)L6Dc@6If;I4gHjFNdTD{1Fy|8>t{ig zQ>&?>x#cgRwTFPi7zRbRpNp%0Hu(LlWY~q23)$)w97#KUe}p6?IDb@0 zcMobfRnE9`LK7=!R93e?b2G?Z` z->SSwSK(5=Ua*KTE-gV(nBKZu_yjzvLa7Ldw_(Dl^*!==qn25VXeBK@>F-3t7kzM* zkn-i8qxFIv*L=l^L9Ff1^NX#owi&pew2m9<*Ua;MBngSS1fnWfgqE6;sZ9q}pQA%? zc)!=VqS)~aSt2$6#ZBw6BPOe2J*-kREy>Y(v9ZTl{mLeLneGn;0QF9KM$F~iB_@_& z^S5i&@=LcH_j}=#xF5Tf$ckZfz%z_CQ|rxX)U0Dt;TmPKm^*TJXeWdyq`q}v?vj8q@o*ooSUhi z68K)cF-lA@Rv_al8LYAsMYbBdf@!t3u5RgjojTdfu#N_Uz`{agz{|`JluU9=*M_Gf z&}$~Hxeh;5uv|V zMQ>eGip?_EDSE2LJ4`xwP&@)J$|XT^sSV*Bv|N8Xp>KewIv`hel}5-<*eMsiLGcw< zttH!?YqzY1|1MrltZ0s9-3`zkug1Q9ELUAapU^GkWj3&kY)w;e6~&TMK6xP z2u-1@{!2+%4u@lO<*&_^{3^+3kCx2X6tF)CD< zAQ#XCc4UUaJt&M_Sxtq>e*fhTH5-wJ;RI-1x{-8m3MtyanyA5p+w++0Ob7{c<7qg- z>g~%bLG?37m#xuv7X_kxl+pHr9esv%S*^pFjeT+P%1+peKpxV2>m_vP{AkpLPz+=s<=(D-KO z2?-@Fcjt?c>Ri>>fhkCy1z{IVQela?ydl&)Y@%*o4@=L*|*SQ-N6noDj zyrjsQo{-+>dYQ16shvwc7>F9TwxI0W(=e`bpGB{;dPapzX0X%jP~zfweut6OIxy1o z7nJ#fM+Jvde$JSWffIpP-&V!Atl-D>v(*GR>BEF|i+4@hEIl(&C$vB>gW5O@qt_IE zOAVX6y-A}xBl_6x31xdot<>IWNt1)7IW*dR2;q@?0DY;jVXt=N$Fg5~E0rDV$Euvk z3kDV=7B?nua*ZjV21~;i3rW6O57K+}p4dJsO}aOI$=%#^iy4CSZ7E@UZ3SB^F{?d6 zuuk8c>)ZzufA(wYtBTfKI=cDX`QuKF zsiZH7>bz!;(ZtfIzGs$m;i&dFRd=Ufjy&>g{~wC&fo4KGw5g zkYOO1=>a$DuatPwohOrJuH5vVlEPcM!XZ(;H=2P#D-%%3elE9sp-8G>g=%1P%<>qDzBvP)v6wpz=FT=IHWq;Xl~Je zbH=Z>%8cSmiyM{j@LvITV}kO&WojuBzhzXz0H-5**=T;?v*^RkJtL{ve*7G@=xQvAnVdSjuq{i6Ovmq zRbgv2oQ2oC{<6A6qija>5BAf};M4^3mZ7PMrR&&_x%M`e*a6kCr-sIyY8uTwYiP3+D32+_{=9(l~~?*8xjpDku{~ z?U6o5tG(`L4(A`YAm0v@HqOjqy52px!9lPN7f-2c`O6WT+MvxR?zS|hJif<-eCQdT zejm5IvLP@}NRS9ng$76VB78vR*JCH3UoHJMU+kb9XYeiqH7j>zV#=@8j-#{U#N7q( zGBq9g-ql)O1nBYPspSF#kw;h5;sa&(89Q1k8(QI$jqpy4!?{C!Pxwno&6+$45!PGK z02Z+G1kizgo7?<(m}A5G*sAIyAC4D;ve4?6ulH=e*e7r7%rZf`SS&F6!-P=aqN3NS zb3cUq40EQ`J<#+{7Q*}v;tcjUF}tj8bFxZM(``Fcj|@Em1HqVX={-Td2;IP8O~TJ? zxl~6)-m=G48%w;i`78J{>+4#!jBE{ER#x*yFOQ!Ea2qz)xEdxWb3$uuTzFq}-B7Z)Rf__^aG2}c5M-?ET7RC=!iCcieUr35 zS&Fi6z+K!T%Bm-NXD3?|awJ1Ytf3q^G$j43?FygSW?G5_0ZKt6!jTzU8On|X!+7O& zLuFEWEuZM0#(6N_FKzg8QY%L8ffka`@DK?2dy7kF*pO7Z#X^^%mEFGE2zbp@-LDBO z>x{c{-f9KZ(=U+VVrEGCm-`)t$t3r277Thi&-j>&i=_59LfS*&J=Rx~>aFDOKZqGI z!|YH0iHHUvK^_esoXgp3m%{znU~spwTWu-K_OP!-%Ik^5tj07S`^77Mgk7Z z0p&8r7(ybmvt%PKtX)BOAHI;!@;mUh-FT=sj|gwhg31Js&N>Xq_8E7Cts6FocY6&v z>Y%>HLY*k1GHWVizgpH`^EAdOqSATQQ6{d~6>6Ox@8Sob?H;46KinsDMH||_$`p7SwmdltJypa>fE_!yiY0NE)fd@(X_Q^N& z(Z|{$u;AGPD!Qq!v4MV{(V%8`UMLn%mi;YX_>dtgvdSXZm1}zt)T~ApF9R>%9x1#+ zYJZ->W}}-mw8Qa?t9|okde0E!*54X+kWNv8e~>!iN(hN=B$EZLP2t=sC+LtGnX4gR z2@|`~f1q=ISlHZ_Q`hj((w1oXthk;Ag5Z>&1cPFGOaGKt$qMJhD2&~t4JxL4IZRa9 z!ujVWxIeJl$6&J#rEtlX=D?!^bOVTJ%_cbK3-BR}`cKNLbI*@kRgw` z8rSbGPvhYL-d4ePD(gUiT@WyiV4=Xlak(OOXU9eI?N~1Iqj^X|=vWcKE_sFM*oDsd z%hHy+_Euig^APF?HX8!HliJpkj7bsZkTxCW)@9R~{i7=}QYB(PjFLnUA?Lel(Tgut zn(>(1TTc;Ojbz*b8i}NgHiMeljTOFjb=c$$j3Yl!=fQ|d0Z zgt{7!NbO_OD;(e9pVmz{(BtOG;Y=#T%N?f*0hhnHV7}Cv&D-Q?m%Y=F0|!aR&@4xS zc$`jhD|+O@0H0`!z>JAQ29Y@iJKCOCH!~Qt956^P4buG;QmW~sTIUR9szg9lyK1?b z%ryS7yAQ7{(6ejljLjIm=+NP8Q|R79t}o5+Q_{;_&tZ*4!_V7o34mVhBpPJx+~n#M z#?t5dc?DW}aobDSw4wG{S1;l5KtJ!9BO4J^eoZEPQ}(U}fYi;5PoFWv>k90BoD#~1 z@ilQ99em?%$l=)6Sq|cObTY%{D6|06vEYavYrM9KLZ6xVqozutEC?@5Ps8{gXS`7r z-eu77P|?AA2|u)qdl}Fraz+@KEIQG;As;xygZRra*Tko8?>1QPV{FD@+!vk(%4_M) zKk|PN%J#A^mMs#A66Flph6Bb5@?IqEGKr?v=#F0lJDGg%SuX!{Ha#&4ZKvK1bUk!XDe3mOZQ;HV4r*4paiKqww!+O4Y zg4j_Z3C|2SG-#2yBX&;V5$EwVn7^B!)e|Wut?1ck) zeeh3tNa?x!D3vG+3P>8j)ISO3>q`s+gAMHk?KPtJ6HN^;_v$+PNI0s(?x%g21x#!C%UZH4Z3WZuW423)c)x_Zd!TunsA7Zlp46nBrqzx<|# z^$h&)zBD#J5OH#X5fJ2Va5+%BzDm5{UwHC>>+%Op$tJ{#2Pw|0Q6F1*X!Qg_=iA(m)stg z$SFs-P>h8GWt4OnyZdEV^pJ!BZQ*q?0r~>1P5_+x*VIDxPTzsIKK-RVlslvROT``4 zW(o}Cx%tBcbBnGWhQ#&a4ut;e23L4Agc~;4*o$M%5Qfsi1h3zpNWBZi~ch zYv`|?bD%yRu~BwGfa_G}z+Gq==^u+P?S>Sqdwqh1K-Zf36~caN@0j^j4)}9ceh>@B zi04d{j2Bwqy@Z5aYt=m>8GM|j$fMd@P!(h*T`ed_tsxt&E(bH?tGSvhR_wJ0fMv_e zgW3o#2~{z>g?8A1d9S>ywmg7XSVTU%CWHWfzN%G6Jz2<6}D?J9SpWt!V}I{1jRjmCqVJ7|h>|P%!e{^{{htjbfAa zU_2r`YpCo*J#@dHd*ab!Ht5Y&5S3O2QgIj#VGQFN$>~_AT+G44q z{%c0Xi*QTY;;{L*S>hvOyn0IGtZbX9$%^V4FbfGoP$a@jYyz#m?ino0K{BBkeEo zX8=59-62z^kH2{QEC=bJfVt^vC!y(oXo2bpRQEv~>jwlh#%Y-Q*taWV zmjaD)5^kcRzxE_-@-(KQMsT^3&bw(#id9-{pozw1a@z0>`y&WBE1yW(}+_P{FN(4WkG6%E0Wx z3%iE>jQJFNO8C28PeR&Bv_7BDerDDBc1y{rQ~VGnl%p3qB=dyI*j@1Q>8OL6c}686 zx275O5I!M3{HMHrV(F)}#1nB7w;#)I!oDjn!pOLPzR52vGDSONbHw;~5hF0a%eLxP zCo*#E&i|P@?AwQ*n3eSE{!uM=L`)Z;jk!BAar+py{u2pOCXM(KK5qXy$27xr6%$C( zBVmR>fCw8XVw>As-W%38Wk=Bcx!T`BUqo2@P)aIdAWpK1lm>D5jVN4@l$>0>Yf`|rJvsJI{K{^0N#Olc@6fLCwZK55|@|zix!pUv}0fx zN?PVKF7EZeh=cx${y%?(ih6_b|L(W-d0fbu_3(X!8UVF;ZZ*F{YFOAlN66n#?7j{P zyzaXa%mp4qW`4^TGL;TV(0Dtj{=Ve;{71-v6kqYv2j^|f_^a^0o>JHE((VAvv*us7 znwcMTf5O5d1<#v~G6=hf+wN&g+TC(*EC$&c z@wZp@q?UcUk@MQ__=Xrk6546;)v#^kclxKys1o$Ex%Hdq!jD>pw(2CkL+>>w-0!Fj zbA=gKUC69?(>4UWkhDXa42ABAX=OCCr(U-Z=w-L#oVc-fQbdcQ(=F58X(TaX9GjutsJyVoL?zDGT`xvS3>X;Ai6V zgl^WrNtVdi@1K0Cy43cw3pUXll%8S)q~TLAtVKvCf2kZ3@+u&91%^QWbT%=#bj=QyNN4YnMgl~U# z>p`3TrzqJzvle?g!V{thS5BO|ga6JA_p!{(SnrH?Dz%8%l)-!LUtZdjV% z>|}O(zB%YRPuhP+n0cG|6|GU8vI@y0z{JkF^85N>|YjrUTVpuL_*Q zGRQ`%!f1H&0-Me3UBx^*^^XH=$N>ilXLR2l3Bwh&rZ05agH@O3S}zgXE84eI(xNN8t`i9Gf9kq7MnANhVwn(}`t$!AGE7*qo9Mo%momULGEozYLqs zd+=~Aqm^Loj(57xLS4M9iKK-5TfY`oNdogtzH6g$5Q6*e`f$cZL zsuQQMr|J(WF<{4dkW>TI3`CoKV4RUv!MQDj&+j1CP0zlPFSUyuw4DwqMO4n+uMhgG zx(g7?1D&8ix2TBcPcDN5@6Ky!hr=0U3JZr5QCI)ZlBXZ>vBneq>-TB_Zn&c$lkV;u zRNTzy?h@0T%CkgcQrBUmyj?f%?*Lo}{!PPr{i|p+szYZnfX^sfuiZiy_W#*C z;pxmOtVrCy0+syu=97<8x2b2?(jn$JGcWmt_#50?jvf;5IX6p)TFAuYJvFuE1=S7u z-=WY+lvQY4MEwYhQ`~f)OgV@gTvma%H=akz#-=hZ&kdU5`^QZ_sT;E)$>hWlgU~7r zlH@VQgrNQ!~T+s&-tOA2dHBQlXfbpiU>LFm{^0fv-;@7 z^Kmi9fJEs4Pv{w=#6@K`Ym{a8e;U-dD3$J~XcB~qj zF2Jg%iOkn=VscEPyahFNsl9+_bU!Y>WxyR*8Sn@S^wa#xsLB`GX?8%5j-wdWzQ}=S zJdkwefRE^kTxgVNxIO(w*x%k?Zoq!`*|(oHqK%r`!I{Ip zHbQ;~7=1tNPs?C-5D$O&<|7b#bwm>h&Rw%Oju(@)r`o$+ng1FyaHB=mM zC~&@fe8_>1aIsZB9G^`wvRjD|GXd!SRaNG_lsXb^o4L%z*cPyvBqY2D29r#Z&APL< zuqnG7 zrVbC6=;c)sSv;XXC|)V#D2$yakq*!oDbr6+EeAzNd7(5<5cWU|AciK(#1HpU>ZEFC_jb+fXIg~_!nH_*vtnKD33*iXw z+q=X~A@(@O@Pmzrl=$PM17#h2;VEc4jMe!O`1qLx(67}ghL)VxQ(D}f#jS|5f&lJ*{WeqBjzOve=~%6NIuQd zpYq2fD0EOhEE)DyJV^WrcdC9=C0H^%MrF=n1)7O7BO|6%gR=T0?)HXv`SzeWy7~6* z_T=LPKOgp0O6`$*r48?1LZaoh4(sN3v7+fi9veD27s*v#EKH@u%_kX;1#IJYz$Vm2 z&Dlp?gR;{P{Utf{>ArKp5}QYaS2HiA3mvQt^SbqO{GRKs)7ej#ZWxfYAB@&YZLtqH zl{leXHM8<@`mo|q@S9PLLXi6fLz7`Jh6+8j+txZz@qw0ShA4ufqQ;OQ-&njWN>*AH zQiH@qjf?u_P(;$lb!0a++@wh79$Z4-XtX1}9AtQnhj>>U+^>_3d z5n@*_>-=nB#J;{&)j02;iW!LcOK(`UqaVM^ih^uP^OH#D=jUSQ$6WUKrtnT)gk{SP z;3_2^BxGD(8y0MsSE}t1SQHw$008cY#yLGE!+*P%P+BkNS|p#OlCD?iI>#E!I(^ef zz0ICTCx95yA|n^a;p*sWrK%+a7GbbBqQJ@ z&W*izSI&^Jx4GXD6BDby^#SZzcu@Tl0lnvbRN6zP^oJxC1!&xf1}%C~bG$y*;PWQ@0Wt2gHFh-U_MuoSuCcaa+ownGy{9 z@9s|7$o+3mT_~9VzSVUkpG^sSwPR9f(K*NZ>$0dUJWNQ;k^1xK@`o#ux8RzVa=H@B z(m$5Ha8EvtkGcKsM3;IbtPMq2(`0nr75V&(>Fsc-iSqtU2l`1Gbi&eNQQ$VEi_oNd z^1pb`c`V9zDh;DV&zTX4bz+Fs^`WC?#+Z5INRZS3BZLn;l+h(K>(?;%Ng!}lKvDL zycF$FZ+fm17v^Pi=7T4X zkP%+Dnf+dL^o)?apF{VGxFnRDc~Jqn4E+EXZ?Erc{fE)V+EsbKS? zgPlX#fo3Puz79A1htU{yg98X94JrfQ-}#Bbbtpf@BKAeKQV zZ3drL5~-GHsz&9}!5i!x`=9re+mQF?&-lPpHS`9YSag$Vw;&|^xHYPuwU_l~fymLy zAF7f0y*WRzMmRE?;@>!MeR=DfbqZY&b)z@te8a|RKNKV^8cBJw zypN#J>NJ_-k^F!`1yqa@4QTyY+~{5S+HCrGChQji%<~Z$&QL6y%_+ znTV`lL9V$yS~SgaTU)$n+-W3Fbe@pjorDf=q_}TppyMSR$mrOJRiC$_NdIe2l>vUI zBWF^NrqJNJw@;EA!tK{Aa_+509%luG8#sGzx`af_b{4?1Bu4@hi0 zB6tlD2cXz@oES;syPTYTPw`x4TL)>09{Akz)#YctZ0835Z%-MZZPP+7+k9YfE0Sm~bsKI%r%giA%h?feWt z-@o4>*BM<~8e9A{zfQEyza*Cl3Sy8hiRyy{V#=l~I+32PNO#Fpxc)Ep&N8aXw*AwB zNOyOO2uMnIqqKCpLApUYr5iy?DGBNBP66o-*)-CP#HQy)tmk>(|IB=ywdUhqE_Lra zuj@RI-*N7{bHi5qA3lyKMLXvdQFPLAdu9Fd?xBtCwFNx4{ebd1G8DinMqRD&{VclfCK zx*_!ZzJcaD{*7_5K0@<18W`OQNosWRhp->?S3hvYm=u(6UA#^7!|KZCN_~ylb>bcn zgmVp)Qed{^RcO8Pi<3@2*Qzh_HMBpo+!LS@sz*K^_g7!zO)o?~wL*GV^cZ*AQbjK; z;gizK&3aV-@oBu)>k>oUzN9P)xiQ;KC3`jk;Z;>jEK<=4uflai4yL2e3TrrDaPkqs z%1&5`YZ3lyZT&Sx4QFa@42FBI2%^5nVn_ z8?JA#LHDJ+?kd`jn9ux(zs8o_&%$_=W0z#Sr|BIv;Hi1_a9|d0P0;||bwB;YDL?;F z$Q^5SHDxFT*6lkl-t|yW_5U1Hi_fn9>w2I+-rfsnIOV(d^A+b&{C>(j?GN-YuW4=!}g9t#H!950%eX zVweN&^;L??@b%wYS??6!NtD2|aJ)0WTy%(o)8XfMN5;5_XapqSH7;;GqkQFRTH76d)$F0Zy(oL}C^345I4}&7^JT3VUBd%&lqPaZwn5&0_Qg^7JYETTWF9%RRy{qAmFN?$Lvh zPLdj%a?C=q^V6sBC63ww-;=jSKuPq|JtSTpuFQNiW>x-ZG;;X9t%K?YXDJcOde8V3 zi8-$KYR0NOMW;Ei=RK?Sfbet2dmZV;v5rEh(@BAV@lvt1YpXAAH@<@?gx~8-_adje zI#t!M+82yQ9ni_^&z?XN2QCiEhx@E$K1;~Fe1Go(~w5)9SK?Y{QKosD%PGSDpZ}ZEG<-(4Q4m3VBN( zg0xfehRuslZs`v@=fnpck)dBVs3pu%?kQti1YRuWtaDfylK4dilW@2v1_lhA=JXtv zXmWKEHE(;{5P}6O3w``$~QCmaGLP5z;iD#7|!orMsm0ZS8p_B4ld{97;xOI&pN zgeZxZDBGB|8P^9hI z!V)>jLUEsrKo0!FH}1)}N|uu4;#xPj-LJ>JXfv33oUGgVjlLt`!w65@8ROg6)Ht4Pt@c4X)_EeaPpI8FlaZW6$*D%R6 z;4U4ZAmkO%fQm8@Xl|>Brd{1BOJ#!uMH2~?D{w0}$Fg&;q(P4 znqxc3!Ffa&>V-KRPZ7K`{(l^A=hb5TZB~+08eJj(8r*SxmVwl1SSM*Vm;h3tXBotY zovg&VL}3_N5%7XGu=>GEX`Yp|PtX@La7IB!SYcQ3b)F;j`ehh5yD*pCkKu#YtTU>L zP|H^Bwl&s+6;VfRpQ=$7l>Y%XdaoWp{l%_4(j3o;7N#@y3SgdSWpNwT-LamXft;@dkj4!M3okmr9)*V(>eKfidi z({_rf+yu}4=EONr!1b-;R?ef9 zK|e797~~F!8Yfk?Sb76=epwmjLvBi9jqijs325y}Dv353s$C(PrVpTY3?RbS5=TFK zfIBvweTlS?S0RL_Z=JqI;41IlF5SmFvIr_iyORy@a``#x8X+Y zdhVmaqstZTEPfNfN{le3Pn|CQcuHNY5z>GawNHE*!~FQT6Df3F$j%CfF%^PNTIKuF za2M5U{vMHNZUWEY0TsTT_aIpU=G zk-JCgv@a|aVqVn;L|%I$6|DykUKS*xZ0i^q825}` zybALgASe!$1f_^}!DR#RUFS5WJI^3-ay!TU^ztNNNoY9`8 z>8EYH#KCn&^UqI2^YOjEut*{Ef<~@m;08N4CGeyD_QnV7yy;gp9oT+-j$N+?*U-ts zx=XXDUM@1Dq!L?_t>smP+;tyv!9A1rRpl7rH5w4qUXy${(&e#IPYo$wIv7#L3oBu{ zLxgxK> zrpbk{ssghU+`ja}J63k+-RzC-e_)nA8+R$xqk=5ahuW-1!}R;-IzJh@@9U3HnHQOb z=y8M@*Ovfef8WQOG!l5`dtEMB*4SzJsib(d-msa_Zu9dkZfpcAW>|oDdJq}suAPnb zSgn*zcXN5x;i0ifA=YAKe_qte{D(?dB~(064^Z-YnYPS}D6ZdGa=lj>yFPLdes(fB z1=$#oix-iOx^f_P+?G>HX{nSSxeo39`Zx&T<{r@S4GNbR0mYs?5-IDkdqws&*aY;x z1ZZwtu7H9vcVL_rNK`)JK2VaI-A$M6So+udN!nWxO1_g&aBM z?e`Spv$#eOxRJ#4LEf|avIrs$DhhVJvr4T2&G|N`nmqczHul+< z8rp_tWT3KE`e=jlL)|&0)tmI$s_m&KF|t=an)1Cv>Kfh^R4jQ_h<}iep}U#yB^ zn;Rt+#=E39OCefPA+za~I=&N36_!y$RUpu?RGs?F2Je^3uIOkP*izd2lIa;Ga;3ZL zCZCO0GoBZ@+RJYNTQ((OwZs{^{;eTAR*<$KHPZ6)(lCXh^>zGLt9T-F>53o{1Np=} zS;yToT=6A$Y9s@RQul9Ni4K#B!%erWjU|0rvcdAG!!GahGM-n-VeKb=$WPZH=OUuh zRb}KvlKO42$6-NN#HRiaq=I$fdEcEpGg>P>7up$>C8-D24JN56VJ@=M7a1uB4Crgw z`tt+)=qhGtFI<*&zCG-qXC&TncXlwmDe*vs?M2YVv>esX3WkDB_$D0qEci zU)$_SNYQ<+0k?E{+?-T=Jg{=eJ^%`jjp08*j2###efM$@244X#l}f_p<1y9Dmr>(f z48d{%VrPg~j#9SQp-#-hpFH@`F%Ww z2M`UW603slWWVvm3l_VP2#OWE+VcmSDcHu2PyF9$TsQ-f^|`LQ{yQ@~^T0py^El7O zi#Jsh?XiX55to=)N1Wqqk^&3IbUo-_%f}Y3zdHrh!rqWRM&}69PV$eEw-x*=%)2`N zn>keIZ~ZD?WI`lgtK`@4^LnU&4rYf$$PXET`PW+ew4=23l6$VgRX9~8? z!v+lwcu4g#NeF8~3xrJh{9r&lk!+*j1Dh}L7Z=+u+S4)YsZk!phWE_p;bX$&^prp3 zK&Yk*iHbt^{lc8qr{&K|PqX~QPWhWLIgO@bJX*=IGY`+;FqwqMCvlCb>qRpd7i0-R zHarIHCPGCmC-Vo;|Cub$al_YtcW6_sSfnkXk@7l?FN77zAvk0%@|7aS(+{d>j}iSH zBf{a;irDyQaKAoqifuOC3ynAkE=aqFFwFb(T>O)`uK#6UgdvcOe<7GzjPRlq9w88X zVP))2*t4bLG3nrzhhHXRuR;;MWDx71aViWGk-fIie0!mt6W<-}Ava)wnY(>ggv}sX zSlkZ%YTp1dGkz0X?CHH74GSU||2A`Z(5>ENMUf@Ii6IPC&SJQYj{LN|Gi2(ua{k(3 zbW-Df1!1TQ{d@<~yMp27W)xgY2&}#fNm-_hK6sd^Lqo?llp)!R;7 zg;d|;;n{|I`SwFT^D|>Ujv>N#&?5UiT6>f`*>oKN(@#0aD1erJ>${zU*Uf@2-)33^e;p)-Wi`GmLzwcNk95lwZs#+$A`Nla9_9N*M!z6+a| zmn#fOC@7UoqP}MN3gW)97wbV$;h?^xvT~zkTAiII`-jBwKT(cpy-RDSK?&+i`KlT5 zv`o)oFGEAecyM-_qDHK#5e%gSRMcvJMUDEN-8L`>JvP#-?uki_AR>i9hAb=eMLutl1+ucyFEV$v?r%Nvip=htDcK#0L|2;> zdErV@FZyV4aH18$Qw)6=s6LPD!nR2lTH^K|30BtgzTl;DT7g=I%<<#qtW}A}R-Z1h ziX24`?D{lT>`pg{DE>~gP8^P<-xY3A+9mpd!fhQHqx0#63&Sx%Sa5z*OC{!_N1MwF zQw;&JPq97oM8v>OqT58R;A<2^MYe*TApzr}g%RrW?{`3xQKK)lBGl*2re5B}kY1;r zdh0>AC9C+{BKqAa)V3)V#&@KFZ&~gS-w@m$X^-H$XQKiDYKN0A%vpk1xjUen7Q6fq zN;+Yxn($eqvs=cTND%Y)XdiVN$=4aERjuMd#+P6By_iBd_&i5EzSYycCZyD-jTIQ} z))OD&ImL=(BsYrwXw&(9T|*k|Ga}!YOI&!*)bh#qgwbDK$B->qkJ0KW<~-r^_1C?6 z$>PLjHNl>%8#B55Vu?rnasVOm#divqFUKB3#xP?uTu)-Yiq-Q$|EU=cRjy8)^V}sW z#joiCV4?C@n15z5QCWWHG-pfqu#pJ_{-m1Z=bPEpMOG8 za_Hn;B*TgjlpCtPq{fBi<%|P13^^*8^FZoH6FiTrn0@%s0ZwStu;9S4wLJ7BZ)-N{zlZr6$y-av zKUN}BmG0(i@37KdSP^#uLPX-ig4VYOSRvNUVCx0ey6HD)NYs?)5B~yxkg#fDWXKNS zocrBK_5zE$&W}mF1iq&F@rJMPBSHIhuT3utriq`0_~5(Y@gw2wvDXw_e{9mBI+PP{ zb*v$a2-!Va54i_4{o67d>wh6u>G05p3Xr#37cYf{%)kD~k3Fs6ObB5>%Wu?S_WTM3 z;weh}Z=9ER`g_1QQTJFh-oy9{lEp1BQ^-hHL z08+>`Ha<$^C)5#q}zIi6^e;zp6KCfE%Sk9&}dKZ zr5hXkm##sy+9ottaiPBhO*_uDeoGVHKPxTA^g2<(NjHDeOwQt8@kDPSyVrr%aBpAj z`CPm+vQ&e4trAdlE(aXw(JNNF7`^9W-r|BghP$(>a{@2ZGnjzI%jvHpjsx?BsMp5X zl6m`yPU+4!f}n@&J%$}i`rl|$TXMIx-f{?2XZ=sB25mbR9)m zTy)ZH^p(Oj)4~dO1lz_i7U8CQl{CrQB@tIsH);D1#L5IqTtcHsi$QQC|W+X`tU} z>Nn3vEU`S`O3;8?YI$$|7T&NBC!Tx_vX;QHj=(oJfoJ#ak*6P?u1<)-rU0-I3XJ^w zVIw50>H>wqBZItJhP*pR{XTq~q!p9<;u@U%2n-6R}1INQ6Xx z0>DQ`=pTRXt%6XI07#CDQt%qHJDqYyX%0{KS5`q-v`f0H<1BZo+8#|THjn7bZ%WQw zPXhHlvc4j0gqS2KS)X@!I7og_Or?BPM$Jv@n0@jtI1t>h849o5yFK&HuP18)p}FL| z&Mqk|v@<0$)WqyUSvR8Ykngj27x}WQKaYj8^RY@^v52Y&a=M>`$K?jBRg7`Ktgo&<75}-5wzBR3uC|Mx%kCq`+l9Q?SjaDs==PI`|NsB=qrvz8 z;E~wh|6+LjR*FtR@ec1Bmy~5Q>xi^F3m5fO_UU=vp`O!God0kor#OnQ?bvm!SN>@I z=VtDfKtWa!7o?zK#}hP{i!(g_a=z`wesMG|~IvaHP>$ z_ue>VHb%1WiF}7iOupWE#|B+9OWb!5 zq;g_Q@#v!mg`|!P)IetTQr{VU&h9Gn3q5N$i)Q)*Ww- zjx&1Pbm7hdd%5ehPF9A1QyJbfsnT`Qyx??ozDR(Dl|bw1=Y>YVg-&|?M!lRHbuxc* zh>)n_$<1$79zs9`ErETq%)!(>Ex(5VCztm-+ww8{wT$04lrQ|Hq#3X-lpGoN`t#Jt zo<)kFEBw97rg}kNG5<=k2L924)ATA7t1`A;TWvXI3}=p>E6lo;al7w5jnTm`{HYN$ zK6V*(lppQS!poDUzoAreoq?Dwj0?r$IxSwzZ$&KRauF^EsJsxY(Mwq+?{p&DiG%y(=9 z-QEynT$hM|we&^_uxG%?>_7k z(3Vx`8QTUTtTAUHKo{Y%r zb&)Uv0sQ+UMwAtW77ms>HiZ%yk~|e&F+GzpT{llhRG2W`X?tRt4D6uhbmc+)q^Io!O^xb{0rNS+yF&k7HLB-a1Fw?0htBGj zAQ?Kvq`Q#;VS`qc3%U*z(O3rPxl?f^DG4>NX7ci_>tSZ!E+>q6d(1C*xLjBz_0fsc z4(S18DFp+4g?;qUK*+IFhm2l>G|kb~l9Dw~o3BToa8OYsm69=-Uq{k%Yuj3 zg9i5xW-{;nqyQaU4C!4Ap1ctBz-X5^TMo*pXji!(oo}kXaCWOP^VeJ~C~u<1QY?PZ z=1_5;kIx;0?>2_?wQXh&j^0UIDArY%s{1RFJP~IhR`GO*68whs*W>K-L!MV;S1_Z* z49sno4A4H82T6l4&JO}!hIH73pAzblTIN-;dbzX46>A0M4$6utv{=Xx@WR~hFDRwt zAQ>;*Q;AuF(Dc1_@@Z7a_Vy-+)C$58+4DNXNs@mO3Rn%`$?Wi_axUXf**%3rwo88V z_APqB%~JDQj?FsMjDMG8wuo<~d;ZS?(~e(MW^>c@yOJ;soQf`t0sg$&_8xa;K4?8r zv$T?(RoEH1&~~lXcPtAVp3X*Z=~JxfwfrZ(Db-)y_d7Wqw(>H?aC~z7=6xqZW5|i0 zDmQ6Cr~X`z(?J`x`O%)W?=7nrr(D_Iupt7DP^c&roJl1LS2W;5KVyoT5N)ZmGFH)v z@i@O0sX_4Ik^P$OyI=91dsUoN@{{s7UUC;mx}3Rt`a&RU>T4?~DIMjCdAfsSuWOAy zeljaBBetDS%)gl;Mx(UwC8Q>zW4`Z+zvUH@q0{)4RSQIM*ot%K3P7TqiYYnhV3u_x z+dA6`u6s%sLl)xkUT)&k%eY*?QdK`V1|95pQrt3YHUh==L z{-<;QJv+`d~3oARBev#3YQpyvY#6Y83w1EgWI=%|Y)#<-fuGo}ZJ8zUbN@p@#~pXO5+2U* z0h*o;AEYY246CaJSIqV@+YG(hzF2%D<;P(XyV91NePuJ%>nA$CrW5>?bfU$>=AWkpxgDQbp{N%?Q_go&ZOcd5Yc5hTf(xz*YmkDr!Z<^J1v%(hzrr$GcJNh+=+v8X|52v z;hP!UV7!4%eWAtlJ9$ySCG_uDpxLHvbtTD<3?U&{lN%-D5u?P5v=f6T$JOO^@?MXQ zHt30LRM(Y)%j8Ef2%i$(m-V&HQ+GJETeJOVg)gnq|NGt#iQc%Hiix82R_P;jNRQmN zylNG|dLVCtE`fU57FVIw^ALqZux?t`+$&0j%CuKRJ>0S514(zyW8BWdlBTk)c$*Uu zo)d(3!sf+l`-Kwq-J4~l`b+o_1|X@p6KP*x=mu6FAC=6u8cY9|WzLY$?^#LFBu*FE z&a!tMzgwN4BfCKTPcjt2L+$aAPIyTQYo;Y0O@%5cgi@;#Ry5M!yz`ZOgkqk<^@FRf zhA@M*V){sgXfS~~cL%Z8_9=3MF2?kYX6@ls^=OqrQXzr+BsCq`<+P3tKv@QyimMqg zu)&S%z(Bd#_q?^=C$p(K5~^^$r2mpv3>xj-wb7{{5%-VZqlbSRBoG){$MiJ5S<{_h z>vDVXdJ}gh$CPY=Qwd0kv+P13iO?~g^(l9kve;b<-$b4o*;7KugGE11uJw-eqrv!F zM>Z~-Q)^3z)F`t+Ye0NtoQ^iz4tDNQQsdS`VQJy!leY%ZJB=OXD*@yO9ETJ8!w#hR0 z+$5`o|@JKeT2lL^~rO%?&(L%y`*HH%kA6WsXBBN!MW1k<{4x?(wj_dCP%B2S_nbnrwk z((75WWZB@+&!rgJdfrFaco^nyPK}O)ZOwZWH5ig#s&f$1f8S$*A6gGZ?VWrcmAFsZ z$G~^+)yY2({Ls%}v=dKfVf{4gFz!u=(%o9~F|gKr?nVi+K_{1q`y&OLHPC)M9lBvK za{yq1ZPqI_RKGFCe$&(!KWna=&sMMCpengaEcmn=)ToL_krf;cC(pyYQ(`3(0Xu8` zojff#@cQuMCn%SBEAM0pFd;4s?F2Wf0S$v>#6&~B@$txHN_ZvC6t=!2nXq@-PO)=Z z;Lq4>k_2@86LiFsIY}&oB?L5bz$e^ zRvG@NDJMUlN{e)5^{nWfFHI^mFrc3Bh|TBcfH{ta7K4O)U-+QZC{m4W>0&I27`NFD zz-sReN$%7Y)q^~gPv81@!+izLqcP|I2x$gl!_0IwS!{YwR(qlKXS03V*6{;n@Rx3d z85Q=Re^1Aop~(gCo=tsqz1M=B6%L5dLw@C@#jR#XueKW%9=M1;T$+S{DsI4E7%(Pi zo0`cN26E9}ZgHWeUMUQlp5czo3ixt9LI&g%zBw@*X@^~05H2vN!?R=lE{z{ae7nb4 zepLrIPe}g9%~fmq$IYcHKNFT-;JeRK+8$v2eQ4+`YN!lo=gOING4YZoy;f`(t2)lUVzH% zf?jtW1OO_5m0eyV&L5mnP@7g@mF$TcsvP+ziuaDnZRxL*?d#h;nhQyRILk+8lhvI* z>`RYD_nP{t)*fDbw-;6wUWni~W?CF6`EN(L;n#;G`3VH4SN7BgtU3dHN}Bb!@DZiE zzCun{5M#c1`jbm)HQ=QNGd7tuhSm{HNS>ZEz^}JLwxf{=z`6mSDmmxAI^jO(zuTDPT}%hJHh$MXVZ?ZV(50CdskcAro3Ap-qOzeI7vuj!0iRwK$DKw&;)PFS;Ii>ylT^45p-?`6YdULiLh!aJ z`bUUkG}FBAtc_$t6P4&!j=DItSu+;I!2vD*_Yt`2muF6I^HMo_ZhKVg80|nJ^>vcW zDJ?*m*&t!E%yuFOv#qstfH)#_t*u2}3<&<^?#ct)T|xW9Asfu)2%Xo`d2nIlu_+yx zcv$L#>Tkv_Sy%3V`OL{=utv`|wC8lcj!&aGw(5ayyCfy;Yc$5#XTb0_toc5iIijFP zq~>1M^1!XL|IFYvwa#LOuf1B-c^coN@WdiRlcCc;b0=ZpWn|0HeOkr&8~VRm5|nD; zn#W3;yrb0vy=zVF8(@FfN$GjNlWX65?O?rwqm!e-xz9OojMQD$!!{`lm!5wko_{dk z%pcLkK9S1=SijmCdNC5JUOi#dR;w2MBOP-{GN>K~iW{elX-Q!p1WlPJQQdqMjXU@VM8CcC{CXPVEu+<$a7>^fGk$`FY?tvM`o z^jcZ>N^f;ww4=PKTTQzGM^XCG1ph=qSwWatdk#Cc=Fam3JOWyI)=Qy59qOf9&2LS1 z0&%9whp;k;vzASY()aRgrDMXpV7L~8n=9l~-0X-)*=gMD!d_H$dpv*&81EQrVm1kL z_y`!1QjiqlJh0!$d9}Wi=l2axlLY%>1Ei!vn3n^aoiue1Js}-Ey<#*~TNHaS$mfi? zPooln(@f-R17jTdg)!!*C=?H=haXMhlyDFQQ5bZ+tSXs-tkEovpWfiT zBjen&fu7a)KFfMZZzr(b7uYhUlJEsa26t{NY_dIrc`$9cy#<*u61V*ksmXt#3yCG_ zDfcUBU&U2;?Ky|q_?-WPe0-KuI61uOI823sSGKCmvT}k%U8zWR%&>iL!*q>}Hx!p+l~C;tW2Ng1T4)swug^a3f;=~j<;(z*TW91;CAcTKqb zrY659o84(Ankz|uDJO~y=yx3B2xqdB!Lq7){$bzn#U5|c7clYgz`j58e_Oo{Hc-Y= zBO0teSl&r}OZ=!o%~=ni4xg1$@uk0jxE~PH7>XSzzaQzzYP^(!|w`*(qc=PM^)DAj`a{#5b&3)IOjWE>s@ANeDU-i0v z_^_HxOm0^Pu~uE`LM;(tS!|Fjef% z#5GoULc1Qtno+DBfo$Firz2kzLQGeqwSHv;8@oue#nk2d-DUYlcdhz+zTQob-o=3? zi3WD$ooQZRt!=jg(roADaxxyi@yqI5b|6?((xR6{%&AoM(x*SDDm&{2_cea%q3bJB zjqu#^n+WZzQ*m_DKhSLBFEYN{E%0J}g9P*r8A z0=n+f`zzpU{GCe)u+pfPP90e)Yc9;qEKV@W#fS@W2I-%F7NZuq<9+v3B|WUP@9fK+ zdVB&BM$u36(QeUC8}PWuq^Z(v_t%^EiW$nRRmW57ZId?_h+ zM8BeSYsWA~n%=cH>@o2F$#Mzga{k5{&!r5W40tpl8yU4Puy0vjZuvC9We!`vS-J*8 zN>=uZJ27FfX$+cfoYlFx3^rDk zXqzs!8Y%;q-??J_f&)LIu}`F@r$g&^&ssHWcza%bAo`Sp5vuq&456bY2YXUz`b$*W zvk4nKecQr=Z6-ScGirT9ukrC-&+%$&8}}F1zmLbQDdtb4=>PVU=dI@Em>pADdCZKj zuo)v7k!6?Taw2tpz81LWVoNc4v^5@>Vv*^d*gVZp?elmOLftB#qB9DEo%4^5EQ<0T?-?lO~W`JyR(7IoUv&?3gr@q4QqT)9HA z=gwkYE6y;%s~hDoiQ4mrz69sGJ57*JKRq1tQ%yo*%`kT$*+Mlo40S-izu^sfk{J@T z97SgH!_|O?h|TP*0JDf^M9K2-{)z+IcO}g<6370IFQAmE#EcJzrq#ZVTE_%`3>rRG zJ*FKi;#l~t(>tHnSUbwPd+~s)>8Zc4E676XA-DR9sX@{OG{#llZ=5xZ z4M?JmEqx1YElIA#)ZkAJc6|0{9@98|CpOI3DzW$wH5|iqVuq)9H2`$Jk`<&nb?31| z>Tz=y_bxi!EQ)so#DJWgu)qcImzri78T!K~Ok(X71gz9gXx#8aMl!!R(UVX>P@R}| z%qnIbh5{UqF}42#FRJ^W&62-(Q8%mq#)}?bEy|+f1=~P+BQZ!B8w42$StLgk6u#zM z7KTs=d*|_K>A$ndPsb-fUS<7+E!S@wr<4@;gw;>SaX7oD6`5_W!*R{LN&i>N z;eGAP#l!KS={ha*k;$L7hubMZ50`qX&Tpp#g-ny3JbKa=JY~uCmeGv9y^>I6YgP~a zrSp95>siS{2Lzq<$VK1OfcCzJZLFXm*`9VC60&Y{SSY6-?uw7v*S-nKQcOclg&(&( zhiS}dg+z`}!&!`+J=o{zcgl1fGy&ET=7*9(5#KH3I8gkjk|NE-f43{3E*a>`6y%t{ ze!5g%oS~aF93XqDK>fUPHIgdUFgW6wkX37>b0V;NItC;gw|=^hr#{}ePv;s#lA|bW zh<5Iw8SC|>ETbs#BFVTP-+vWPTjZ}Q%hi87Yi0{qf72cd1DlyhsS~wTh|RnpNLI4a zm67STsgPfqP<^P=z}!uEbpd`k9AHfzH%W2vvoR13*w%a&)~<;y`gRsbh~LEcOdxy! zPJ$W1pUE%xZ@$jq>+1&$m(NMG?S?zko6vL)BDY#t6D1^kUH){8u-RKjru)CgODllw z8Py4U0#Bp&jkbAXmv+R=RWIleg5I#-+6*SWRDCjymdbLX?sAmWx-;Z(dsbS#1(<9H$1&s$R`Ql5fEC>nXZvcGfp_~)AsVskP1sr=nuOK*2tsWf~OW160M$_ z(m{h}$peHVOw&h|!4${i?$+Y*$9Y3$Yn}BErp``~ry}kB_AI<$&THCigSb<4Fhcb~ z_jMw}f6N+MmBpKO@k>v>`iF#$k|BLP^nV!qG63wlTuJVpvP0&-+-^O$Q$GfQm_2SB z&hm>*0hlQ*{nnGGV;rh zCyxNHBWi~s&fBrEjLQ+vzAD0qU~35>WraKjc_5DaQ|fuKfzvwmbomKeJNj*Jj-Wvjey=1KeZ1zvBQoBYTyOR;Ms^q+E7#8~H4de%d zY|1yVVUV3#wCV><`G|{f;o`yrLr=}VIW#?N{8!aq^GOX zYna?}BN6!2Nc_a6UEkLsR}bv@pR$FJFCZe4*?FLNk|z}q!>JAWv}c~$iobX;eC@=;*lIonn4r?+_LlskusgxUL}T#5-0}i@C&Kk;cH8_QsW05g9t}`h zDF0cE9V^KGEA4%=V9)Q-8u$S7_gcvH5xhw!i6V4XB;YGcG{`|V7G2*IDj27Di> z^^mu8qL@eCz;xj3)9G*P92GE^YWVhUqHTiN|D>sJuiS6*kRotm=krTJ%EM+4sz@H~;(aVGZ{>2(vDcDWd{yxwdK!je9pU!;v3Y!wCq1EK)EG*|8xIl@qP3I8DHm)9 z3#)O12{hwVj-pB?fS=_n39=HS%zL_eaM-CyjC5+Ll?_@}05f6zGWHipUeH?Kg`&51 zL+&jcO{{@7SdoI&j>GXDM+8Lp)_#{MG`yQgK=9Y&LJ07J-X(yM-K5nlcwKH2z^%rW z=%JxeiSE$ZW!4)FGL5kypnmGP0&f&X2peCUe{l7QRT&AKgBxl~VaiLxHATgIbnki0 zX@I%)76=yV7{H7}x^*w>vGyNjlT)WOhfmk>e2Izlm`vM1b!-qI%`#|Q*f}L+MO5Bu zaylTtY{=4=Yr*cjz5vBMe$*FG?OSA5#n!+Wa2ho_ER8KUlBWosm?L@I zdnx0EOuQT@kHz#+q(F1+ObNVT1;o7N+B?%+KM~$mq3d;%CpF&iBk{BJfOsNSpZnRV zF2~Ul+`!wkVR->s&UHef5XY3?*2zuBBHWB`s;Dm_l3G3yF8m{cY>^=WebBGH?fwv5 zo{!^WVc*C|?^K-`Dz4=@p+3Kdkl1U%yJaL)$9&x!5OjPMi-&%&q&)Q=+%i0ib}bBr zzh!jaE&l7&dpn$PyY@$F=YUrIzj)kHGjuQ@n%Jz;%Ja>0?-2HZ2^S&8ErNaLh~@m> zl7sx#7P1%C*TeB}o8Pn;DR8n{LY!q~{Fh>$WB6wTx1s|*p)R6h+q)b8CW%cKEwYU-a3b&lN5<1r zdKmDP9x_r;+cDv+Ua8dY&vksAy9UwL0-`G4}ht>5zu9e1CJ7%E+SQ&Lrn zcxO92_3kx>tYvCXucBH?U=5I~)Gjtjd@WFLPB*SbK~Djz*jD$WNYQc5cm``$^vOU} ztU^KuJM+u6D<_8~_+f+E)eE%g+q?LTGM9i=7^)0#(*OH&kwD+i-&rjE3%AMd@DRb2Z${h^G&YxkaGlR() zdqie-cckct65ehR5w%@}0=U=w^Z;mBBr(&;1WUt%M6BC3C<4=yj37AS8#1=qjL3`a zxGL5y((htoXc4z<3}6iI&TT z&kVo*m>@62Q$)gy(Q|_DP0TpeUNabDeeE6+7{S@ejg@*+FUkjh-a_5a_L^*=j5&DY zxurNFu10u!^!l8sC}7z*a;P1e+*q^Cu6lMg%_Luc*{LxAcWPcZ>C5acxS0d1CT9Hh zN{NN=Jvr^OpPEqKf%Q{z574?>xZC{i63kHyelW-$^i>chn@)3U&S!IL9+Z~-ptG?A zl@~3wWuw4-M(HLFTY1N5xfYRo78WWSePkZfz8%xwiQgNSI}eF1Dk1vKVcp44=l(I0 z;oMJpH{#$k&-4oCfZZlF4%MR_{1=Sz`FaYYXXjMP#RErSjc~>g&&*s^$}oaKihYeb zBys+3v@mg|itIaBSceSG6;zKlg2yv|!F-ymOH}%kmIXwz28&A&<7F`l9A zd!`t27B}e9zI;Q)sRYotz*eQOzEUpzTN&&tYB4IF-OQ7R@xYwm59q!q2gZs@#plTl zwTSOG4uT?3Mb&@%FgNw+f9o)v_`+k^vB@d!+?K_jvekF`$1?-JKm>3wFhb(Q0YsD+ z`QhoL(%r=1GzP%=&h4}9^L&MMCzBSCQdr3N*}X^mF)^6DVLHzP`khNQ%w5daf{hLl zNK)jCoGVTcX(%p9|w=&9qS~z3s^qx+7>162MIXzcbD*u{e zUHMSUZ@1^i7;Bsr^d7SKB!3=$ltPR4oqAi=e0UrkE9s86o|9H&IxEU1KFSOtZJ;!- zcATxy&IsRUTqi5AzFi>6*-0HevdX8Ni~1v^evC(5`>pcrpjAvm-t9{XztNj(?XBax z3Dcu_YJ;7b%%!<^^?r9cbL&KT-RjEc&(!5QiJxfktT_71eaB{t`DXoy z%(RbXidSy46&L9qH~sWa#<@5okggap&l?*hfl|_Vx%>v$={z$TA?)9+@AzhF;}0q_K@Hyd=eOp`L^w!9ZuASS)8Yj6xAmjlDKkyWru)Q!kj zo$+&kQt|1m|0%WPu>F_R@}#mj`to&w#tCLhr24+w!Di6onf12K@l+I@ zbl9tlWW>G>`{xj7KU+*6htgok$#>?$$w{vRJt-pkicLdEf^wzt-?N_k{eI4RHfQUv z+6O*wP@ zFZSLtD9)v8|0TFfaJK-#AwX~sl0a|^?(XjH8Ug`=ySux?5Zqk?1b5eA&XDZvy`T60 zK6R?jsq^i8nu40St-J5;Uh7)Ft4D`hK&y)E5xqPWH(E@^fYoNJ#Z~VM$Nf!1S2oHT z{L=mt*OXR@<4k%m5rC{h^m;;;Wuyy|a=D*^Y=Cs^PTE&h7d~GNdCnvC(7q+yiDWJC z+i|yZkb$j`&}Vy4HETnFi!HPQqGKN`-Tk%B1%Srjt~n@)j)*YeKLML)QK%qeT(oi>mxy(0F{}zn+&A!LUeaT zMm`3UJ)I89qJ z;VZQV5+A&wh!3UeZZ?;52O^8me9}F)Uw@@|H~mhz1;zCc0lK{!vx&3s^ECVc{SY91 zoGg;)IEc}#0Sn1IQRhDhmK6W0OeZ)hn*2W_a862>QW|Yf)YAvgFw7Z?e_)v9G9LbE zO%FzDysr8Z`&P<#RA58c1Deo0ur9K@J{^x8C4+PfV^N~2j6hS+0p4%c7_Y&V5YgQ5 z^G)Vj-GgdNsuhs;x5gD`R+%!E?BvkrRO`IU8l3f;RobgQhP{l3Az#Rc!o2( zNxt~PN$cv3qqKQlf$gwD0u4VZxdCi8i0$a$F!^^cPOrVjks;=J6$$!~g<=snH}tvQ zi&k92?MH;AvW+u;zmiopGMEI!1oFnEj&$yv#%-Vk$?*Slr#4Ij46kVHR85<(P?z6B z&V2~1#~4(gJB-LyI4YrwSATH%$0}p+%!gcSy?8J≀WkgnA3iU@^LaO~s6k0%t5$ zw+r<9kS&rL8M+oGdA7c!tu4iQ6*Me0(fqxq1xG*lv%LIaL^Ckte&Hlprrlud`-(9O z@|#oU`CJ(IaIO2V_Nl?e=}|%2)ZmC?K1b8nzqO;KtqgZysM;S(kL+lvP=}i?w`sgU zlGaeVEq7@aBQs=ci`1PJ%pLup3)`{+?V+ugKX=l_2fG61+pIW5`cZIKBlmj^_-zJ28RUmb!C|!h@Vs3YVsSmFL$9A{;%t*j^R?cCjV6 znmj(3(%9)Vj3<8kYTKnzQ-{=R=?mvHnVA9l{U>O$GX?Hf{JSnkPcuwlp=lz^^eQoH zfm0*|RDTwe*38Pd!2SXoWbHv-1wU`h`?iPJzl!H8`=2a)%K`QED9*H)c!AM@(~vRS`_lG|lj~ z)kF_!RajBQFjcrZfoKdN3C?Zbyj7ATiTHy9y^J6S;45RdSYvt}nGM``Ed2rt)Fu=) zeTyV>C}E0;yRUx;NO!6~o}-R_HaPxZl9_J)(1ARQ$KNsZC0x)AM+Llih*) zcv#9h>w-Os?c$}=A+qBf_rF3m-)OPT)jtu3Iq7Vf$H@AftFiyaCm@$7A@hz(BAa5a zJU1(tnwj`lM44dz22?53=j>Ebv*}&-U?Y6`QKN^0f4+X07F4b&td} zR{XcK5NQAyPn@Fz;uEjg!Nk^ zxIo1kI0VT5;y6>tZaPV2S@GYDU9q8eJr~^y+?^PFYFH57|3k!VbaoT`#Z^cf8@NiF z-nStI$M^ek3#-nl+ZU@aUQE&SjM_2y&mD>hD^ogZeJxu~_=cHq%rmw3t_j1fAX}Gr z8BId0!L9@jSg!Rn3O0T}$u#0R#k83j_wO{{*SG*(WC}eE&liM|JIRyaZZh=Wx~i< zH;?+H;Vt*1<95#9iz;OxQ<5Q2_D4&~*Tw(0J?(59zg6(ZX2V81cih%{ZaqbF@1=qu z6b?@Gz!oxxffG(RI_=r=n8oBi4L# zOt7RVHZ~*r=Fv)zmkAHRv@G8t%IS5KPZ7Wc`lD#Y{;=?A4nPItm1TGXzy~{fueC1& z@AJ3_cu==T+3FHle{vOhwA|lRB;@nFvPmylt>7iuQFrP9)qA)K3)wU{jQy=oaQ^^! zuMy)9u?}5JhB0N8iq7u9q)BAFxqEf}Hl8zK{okHLSZGegVrG8uq-9B{Y$>{j9l7qA zs#<%W80=X6t|GC)FeycWQz_4jH_q*Epn%?-nM0V%&jiaMd+2<|PZ3CSL(kgL=6|q} zfevat)LL(_jJ(6%L#3lre*wt9s(oK~`}RwH2Unb%% z`!jAWWmft&d*N0zOH1$mHfn__iWXN*o$l}8ec@w|D6(<4R9IFLP}($Z z$Z-F{&E-Q7=74$@GWPA+8sYj`E?m8tG!_SK!_}}3>%0+Tm|1GUac>&6}GLDF82wDmAp z|GfE~9{)_CvPDqVme{(a6Lvq5TK07=*NE2Q{lgz1^%rtqq8tw6d$wCf5 z6yl{t$C$Q%u}4{-O8%uPmFaIL1P^O@txt*(;Ssd1F5P(Zf;SYXkA*;|_%fdQ6wN{a zM`~MA)EhnGa5%E?e;HBT^Cw@%jCp$cu)^JihrsN^LpBSJD&dV&-`^OCMjJFt)^}Rm zNouaX<9z+UtWraYcv|Qgk zh6DLRtQ(G#$Q-j(?YY+9zX$sFo96<`ed`v4knwq8Yl61=|6y*pCDJth5|;j@_56*k ztbi*`)kLp$#Vm(cW^Bq*jWS+J{SQs2N-FfT zJhi>N>nv0^(yrDoLkAubvcF54YcHe2n5O)x6i8d-Z?9o2bLwHor9HkqF)8?RvmtG%){$6l~#4S@XdI z9sg~;(>V8avF%-N$Y~`pG`)k%Ez;)N-?CHNE5p(jXO%0bCC0am_VJpb0L?jhye;6H z=v4Yyw-h0OvxWHHRz+o}$7{_MPjn(82(*}q(^M{OUXbFe+E8mAKtUT#g5`q>*bkQn zT;dYL#t2&*rqAE}t9OmK44qaC+;uk+K`PEwb=%oj+on49AFRtK?TlabK(?%wUq5ZJ zEMogrh&jzy@UoeLl-XXvvskX}0iBN#e&;8B!Bq(}lwiOeZ#Jgf_&o%(8|C1|7j$Cc zkchq+o)hd7A+7}lSU4b2755!tvSX{T%BScR3`6aj-$o4Le=F zO-s~Q7)jojIp%Sdw(D&==54A{zwn*$OZT@^#NE9g7X!fRGAB1-9_M~fGD|_^^>qxc z)X$JrO8gho!fqSop5mQ8cHF!$tn0-${rxm`bv4wY_gXEFJpH-;zmb~i51e3M$ZvOr z=D=uf@Cu(=bl+N%bfqmJdLDkp{pA}bk$k3@>jQ-{_bWqbIwc&#O-boS`!tNI49c=f z2-*oGJ(EcuVY>c=9e{y?Y3u3|MKkG=`!1e`y&hQd@m705U>$?-^Ji-R#@9%8Ee(`q zLQaWJb4Sa~q*Phe@A#U-1{fbMlI8oFF3v zlkDX_743KN!vtcDA6s9^nVXS9m$&(cAM%$X6*i(F zS7`DoMB*}(Z5wQ=%8zPPSVAXZ?`+rRKV|3dA_ZBJ>gdceDjO;{s$W$|EaIZ zF-xzqSN{nFQrhE(v&B_es3Ir8wsbAJoPpL>zxj$OGkbUJ9Qm9~J#@6G%r$TM)6-Rl zZunCqZwH4Xm47oz@FUYQvklmRLik>BPo%x1?_?>^pHOiZA2t6GNLZ(zSoY zi;nd(RQC$u8srA2UYu0ulK6by%Fnyhm6c8#Ubb5gLjZX7I#5HQqyP%`cz|Wo7##T!XzN{ z0*;it4lHF9fhX^U&_&Ob2z;+5E)HvW9x~=t198_P7pR#vQbUR(03!c#-z|B+Ub9g! zFgD_+`MN}HH4+*BXVcy5jU%qWX*y&`c=AAWC~)8j{2_7)^Y<}@p8xL!W+|bIz_UVt z_xIp)z0(0Ndca>phWK?i@Dt!tiC;hOboKYu$ND)C8yj149e*h@z-H)rJKsn`uC1vA z(WH5HT3h^8OM`enz~r@Ok`~gMRH&UC(7>MwZ}OI7)Sx}<&uJoQ;6JbLo)_&}3qWOc zBNRzm_rI6sI0<9s7bQzfzov&&b6_0rsvJz395a>*zdurP2jKLg)2H9{iVA8**3z7{cv2422U%24)ASwAw=yJ)yRLIOp?DZ+1#1w!zdRKGXi9^ z!7{HE>nexjZIRzuDc(X+B8KA|BD8bu+4n!$3~4gD4L#T{A6;qd4?)B`6qs2~$qCG& z!+UGCZ=U?@{X&h2_d`72S*8U==QD#m9JWMAD{UY{K54|N#4+E`sb?_zXUj+*w1wX= zgiyXN+DP-cW+yGE9}x;r)$ZcmoTZ>_kW)`*j_LAz@Y($8esx+Nh9Lbe$cNKx9(^Sw zx>KK7=atEpFb5jLC(u`Syc!-n?il)X^6i2kT~C0qYn>mqX26$tDHN0}K^x*2m64+= zwtl>9A*-z!Z|O#m!t;~3p=uC=0myohTp<0Fx2^I(s$j?SV@PdntK#C}3owTC8mVNuaUFH)V*P_(-GRV!lQ^&6?8MzyJahd6^vXJD3|7>3F>NPm**Z8zFEVtshCG z3F^9_D=-ICka;P<`O&||44yIiDZ378$K5rHUDDOLzi+`^=w%8TCMMjiSiUmYyO^TB zyWQ)e!wWr=xprz?il0=nQw>ZQMKqVBpP!*T9^u0}0~AvChV08{ZZhSRDB4rBb*@mU(N2 z!vqJ{IW>b_E|u6l1tNQCRE$|8A&HCaLEe5lA*yB*MB^!%9b4e6vlTaN zdN^N=lojUk*`5czWOx&dMy|gFMTE0wfhqK^|eWw zEQ__#vao9=C!c1Jmp1cZjq97cQat>y_0wytp>wENQsk*d%WI=}PC>?(DJo3eNykz0 zvPqI3owWn84;oYn;3d}xsXZ$iZMp?2PL~5d@3O}$>3I`)uhqV+>35W9bI-R;K8)N_ zufIFo!_-7reUbQGbRzp~X_w_uO3$PG6rnvlr2D6wa!80xe$f#K(KRHHQfgB`&8Wo{ z;fP{3q<{u8`%92l@uO^{Y>fg2(GN^Prhj=cSE)iX8LiCC0`PZ6rt5qlnHqN*GqZ|2Y8i zYjhFKLMY!x1jh@EMi+V#ziwym+jZQ-`E^v;HOl0M8NNZGLYDGGxKs%lVVUo)t?4TZq@SSp%%Pedd1T?;-qtCf#-RY7d08=?SS}on^!TpP!$&t3@cvCfP z(jcdpar%awpM&6qz)+r5v)cnD9hIWG1mRa=!I_x5@8(O7T^>l?3hXvZMeZ8(1G0$S zr`8F#mIq?5V489wzELfUTGRQ^J(9e~@s0^yn$DiLImy*lcxtET?POmRlLEP@mh|i& z`+NjPC4UV!b0&E746L+3Mv~3(GA}sC6L$0*@f+b9XX9PoEx31i5pzCtU>@n(F4|6B z9P4gCJKiQcB2+WGu&5%^@EHPqQ>p?<4d(T>7K`3$!);>*%&HsUrD7s!P$?IhJlvdq zqn3o4hI2sN6du>27sSx)(YQ$|uS|ZSOs*3GB-TNaOOo%`p`9#H=L8;4FglAR59C%y zF0i|k>y#o(y0czeLD+xY(7$x`6eg|}qPN^=r&j;aF~B_hdIfYsos&`t3djT61U7us zFz^Qm8*Z08<=^7XF&%XVl8dy|Vl5fHJ`^yGd7IYKvpKhmNWxz5Is(uuY-$3oF@}QE zzf5|n+~bAp3AywY`xf?YYiaBwcktNZ2&-aw&@;Jxbx*F zR@AoUdVixE84*(SgBp4PhoumYm=cxp!Gnu1YpVimBlPiQ5{)s<{$^Tdu&YqG>s8#N ziEOO>rNq3`agg$hE?eR?`Ju8GUtwMd4cai7T25e-NGJ}Kl6ntgt}Hosi*(>+QGK8t z{MeIUq@{Orr=EJ@(#LDnqC^1A*Xlzc6@25DS4RwsN{kd@t)=&{cN5x1Z>=1{N+oUF zFlsMULw->;>jt6DX%UGdBKYaC4Kuj`9}%?cVe~Y}*n$%tc74UFe@Ffk$D9OH31~if zidtD|9h@#BGkKQl0GQxPO3LfOo69|alR)C2(&$BgNo6OEaNv04f1}=j-9KH?2&$wr zD6R&|GHI-Sh(^GUiWnTy{(7d79v(ebHevJA(eup&1|=-FUTO~Uum-324aO9Daxw5e zXfQg1YKiDA@n)daB5lJ${S|K|5j%$8MDb=8(^eV8RvBwrnZyqv`*If5jz}9g=l)J^ zk65ZL4zb2K^hmdEJ0U)t*F;e-5^Od>-_&&bXW1GZ%y5s zVHwn;1#Jccb%vV;q>=kl^>A3K7~4`6!11P4G5Q1Y+q(uqyB%-XpWHC6=nZf=!y1_< z(k|}`mgBBzB$y<6W21H#X9;o=4*_0#%oW&arsl9OP_!+=!{{OH6z6w{?)U?b)sZ6_ zp8W3fS1KLXUq zMjtySCTW0nA_j|$FD%ttF1Woz1jVHps)4|aTB4mGV4~CmDQqI^(M08f8c|11 zqar_O`@Qs$4eZj`%9)9Ow${({lzCnomc^SizaL5?5?JQ(V!I{^#KCv^nmfU+J1dj* z9>>>;$K5{15J^iu!3O4Q%JJR=m>%__K09dx43m>^N=NhU^f)%C827&8;tF2<>yKM_ z%TlH8O?1VwX-hKndBUBeNe`iC8lf^)Ej<^Pj9X)U*_wdGF>tBKK6P$hzbcscB4HCy zW-pT6?me02%HUKRyb|x!7^`@%dXPe+nx$&O`{>FJa}&+zVU2F<_OMgAs~a>2#gKI7JU|^cEeQPLM$Z{O-^=Ky0 z-N2g@6hsNhRDdw0GGZX|zJs6%qHBWoGr|!$iEMc~n%LtC98aX($eEHEzOupo3@5Ap zBu+0KK)~s$j`S%Mo7stDN-W)}{w~w%^ zmHWXnUAT5S)YDSYL_0Sl0cJgKlkObw&e=;^CO1vKzg@$ucRQsxj<;0g>gO~Kj#)t! zrnXir*lbE*#(mvP8es!a>ogxUUiNqu9i^XoM&zfm0!vP&;^gTXF3~Lz_V6_&CF=5L zPSWCcB2>(`8}7of8#h|m{=U^f9j5p?@F+q1Yn1rjwv(4^4Av->l9U@3{ z5xb5N_!>hcQgA$!JD!`|ClJ?*7YWifL+rGgWNF1s(nw0th@+(F-RkS)mW=ns zr8Ut96N;pcSfk3LZ)HmHleww2S%8vkr=MGIO`5$!Rj8HE$q<(<(h&_KKMIn05C28- zgH9m5H`DHPvm+>{-aA+&jfi7W45tMtZP76}VhwxC=sHhHEg_o$x+z8?r9aQAVCY(L zv_e86&N*qzOUBLZ0(0+;)>3_2CC_1fZLTM&+~pE%rNaW6o8NYrz0)97c9}rQv@<~= zSh1cql+9|>h|(;hUXe5{=n?)?aVb{=cG){ZM9*0N${(T*;r+KOhYJkCM(BLw>)Sh} z;tfCh?p(twn)*t+RN9p{pY0y+ggcwAa`Yzii4)+c%$E_frdWTjI+;;SS6&GnMlkZ@ zU~lDhTU7HWJ0}OIecSLodv!wH+VA2AG-Q4ybpp1|q<&`w#QIov^uw#%@*#ZJSz7Uu z-3h!}F(+jQ#Al-+pG*_*YoSVd2_?3>RDA)?sjP-aBP;^Mwv0Mn-sz+PDyWkm^5@|& zk(0KfmdpW<64h$Md(+vI-Wqpokn9bgKBtA}L1`pd)-+o&%G}%NEXTY+A?OrK@-0Cn zS0Lo5Q{lz=dj9Hxx_)>sgh`ZoQ_^2wr-T4H{sc6$<^%k*Jus(+f8D>b3uSA0Mj*|5 zJFCmoHv;!|HBu5&54m}P4w|>sP@IDg2mp~xE>}q{#F@cjp|R( z4+{pG{PjdfA7pIlc_yZjAsH-fq+>6q@Oc^2=Vf{JG@TZHKJ%joa_G2Yp2_)kY$BD(CF|E>AT{q*Po!V2$ROL_jNdkHd};rRo~Fm>!PlHr zU2iW-ZREaGr3uS))&zS=Ccs`8BK=3}7<*E~NlaQ|wcH~Y=8Fj83GZD^O&Q#JrV?#* z+nZao%Idwaj4|VQ4G{jhwS=zm3C`}$M#%6Z%|Po9q!5`S78BW2tYGl2!El8OA+gG9 zyg7~0T{bl`iiUY}-QaABheUKT4*b@-&|V{xu^JBFWPAI=!_i`fAl(FOEUeMToRP<+ zvajJO95{72rvGsLZfA8gbRvmzuTjwGT3EQx2y4Q7IQI1voa3GcO=Vd(5O?B@H<;A} zUezK+r!6W9`!ET5*JU-?Bm+!ff|~Hvct%=MIJC>k~^o+!@JysfBwX8;i3C2ZzZD-xxlfsHwf;4>2Q9 z+jDN9de->p1?GrVNhV2NCby|3iNo(Q!VmbZsjiHd)=}kqReZu7QmFu}CoLHrGgh=R zpxGHuIXar=-)j>$Fvs6~$v|3MMDD4Gy|LrmMi;MZ=-lufl52zPuq1Vr@lq+#L}Wjx z3AZW`z9WMeXm>!2D=THyk0srp@M0}?@)%Zgd1+r&I)ea-SY6rI1UKyA6ROw{QCFG~ z@cFBv?ut3ywN_Yvx?9h9)`fIxbH#iTldvzB8SQXum}rV>kC~)TZOxv4RfG!#6+NlT z^K4Z#`EJ1R(0o}jK}yVSmTDM(9s{ZaJK9PX(N zI+=&vG+*`H7AdmU^^URHOKP+lm2=_HrtioF5}Ld*{Y+~TfE|tSU4p=D+g$p z`eBp_A#U*6Z}31dcYjME^C;Yxt}YEWSy*WAh^1$pubqaW*~cGUd9BDColGF=F_Fr2 zt{ZlWGX!ZZ-^;6y5!veWDew-@+8`KzNrqhKuJ_%Fzpp|#;_+tVoODt$81E6PGyra? z;;_%^O&{cmNQavvd!InCdj4%3)TO9#gV~v$KIONr6xmCxW%h%KXJPiF!x}Nd10T=0 zl*1VoaRYdh6E6LBZrTQKbPjH3XyM264wVTzl1-0OtmB-wy6s!l(B**j?QV{=iz!Zi zE#o^w#;jtE4sK|$?61o*9&2r-U05UlXtad+{z9k&{zyLu; zmov$Mf7(b1T~5=L^r3?k>7ZV#>P!;a@SMm@>)Ro!zNk0gtWcvnQ1}MiXg=g_pMS*Y zSta*4KT@QIwZvGi^Hv+Z(L`JgTqQ1L?KWbb%=38V#66)@s+dNW`2*Z`e6c9E^_))) zn|RP#tx?OZd{|~~)9uCS8gFa-mR2WE+7e$zDLVvrPTMnF_tNUrDF=}Wd7I(7*II-> zNd*MPT||lsHcMUx#MS|qFes&^5Q}f1AOy$Ir@;Q_Us3?>!&;IxkX3L;<=zFv31$SlD|3mK3YYWX00n#3W)C))T zWEFG&ou{cfEEAD-)Uk~dKwJx;q-`YZo1KANRr_wO3#e|Bg$pt%@H@HMeYt_h9$O1;x;LcDi1KJoI!%{Q-!ZcnB6;4wX>S`XSev1sCW486z8n=6||%3nMS)wcAhG$Gkg{IlF9YuM^W~UNQ{9vxqLHY2xJ6O5M&2MCQmK zWF73j+rYp!)cCs9l<%^cGr&5ZM57+H==auQH>PSs^sR|H{?(I&_+UJ~ZDGrfS3DiR zc<8?hLXal)K2Y+xQELDq3w5+RnuoPc@UsQ&NOh<@o|4O=$ zV-_%L>qrzDB+xa$DAy_=*8s#_>Vra^Et{xss@8&a4snyvh)k)%LBMt-{A36rKx`P1 zkdR;L;21cSiMq>ahu99XM=sSU^s>RO_qn*WSL3|HCD8DKSVQ_Y_>?KM)GK7+rM|Q| z6a}z7k-r+uYZJ)WUv(xhMSy%qBG{P@(=$FiiQrN3n5X$#P7nRm=212$zw+1`&BMc^ z*32Nt*lJjB$>cT8A!1h)L!DhFBRu**Btl?L6Kyc_YDi1W2bbGBVIfr1<`^*(La8j7 z{;uyuG^M<11{)iUlJ`=qvF^u7?rLu6a!D!CD46P-Gd``T0IC-Q3>S0qjGI;do9|VgWU^!sHvp_A3(ILLq&U^5Y zl5%rGf_w*F5{z!DLTN>hA%gocI3BEGl%i~PkbS9`q-zuOH0lvwfxs|kpt;IV`qs+w zwCTc7t>cM6J;@nRShZh)K@{Sa0%a$W9>tQuUCCk67EM z_oQksCOz{|{Pgz%0UtUP%Q*i>Z3icxme%_IK5PuBkFca80m=Khk2qwk?C2@{P_YW< zrwlOQfaKv~HPpnna3luOe2FfT7308!j$nn{Lip-k+gp$FPK7fMK7I^zXZ%mHGh>eI z9VKKtJdg<<R`x`xFo6`$g7AS68bt0->~)8ikN+wt7c%Dd;L2-m;k zQ^gG>Dr<-NGrWU!HwdaMBjvOd&%Wo~0J}=uLC8O8V67c&2b20N#O$(vS{PD{Ksx(j z&cesw{?bncIuAj2`17Fu7`J?(!Zt~typ}*#U^9qf%Z^3+So_P@MXz0R(>id z9FBi|>(TOl?clfur9hFCjPV@4-iGd`t=U>93HrgkB4BQNje{CB*-OYz-0K+aU9B8Q zVXycT)5yJ2t*;Dt2@L=Rx8*D#&i=a<2ZtKmF$ z4i12)&bZH8iB`EE07~*C6fw8@aq3NjWc4$55Jj3@s>iQSMpWdxT&JD+no?g&A7hc0 zdq!F)xZx|WZ)$2bdZCcFho2pvH*I9=|eoH_&zU! zzs4%?Pr^n7zK9Y0*Ji+fd`To4eT;cx>5R7*Too@4Hs1S{I{4LD>m(*NLq31Er}v70 zBlmgM2S2|H!KokcN8m2f-`UXT*e&_r7xg>67~1})zyD66Wi$VmpJ!H(Ws=dO_ymV+ z*bnLqQtk7Je{kdy5fvSBJ=+j_wbm9QAsb(U0X{>n%%3pvC3ub9&3*F8^y(TUnn>G1 zrpTlm`+t`b%Tj9+c+QXRQ~#CL6CxEBdTOJ;wGQMc9bU>b0tW(<)vu!#!pSx8OjKM)XN!GC(M zA-bI71zxIU^5)gOmF`*vDR{FL>~sP8G18#kb0OVao6aQMxw0wPIhar5Es&D+KTldk zmf46d-!UwVs%%bJ=zCi|4DJ zrv0lY3VnomA^Y^f_raC0mh>bj#cgZtPW74*;w$V6*=mftp_jE5dI5VWJ@Q>JP~cXA zFM|3jbMBjr02yw_Nrx^vlB_rDtao1S&hJamAmfp(K}a~f=7n!h3vU{(t=Nj5!i4*z z6FodEoeOx^<8#J-X}v;}vs2L*rD-SHCyA^c1h&-cwqdpJ>jz&Lx&qCgF~ji^nr}qn z_WF~l@mnlEd6&Efn0Oi;oES0S@VG_4_^ajU{^#_s4*^GzlZ(gv(o)VxLV9)!1Joq} z(JEb4cx%I=a+ra>tUgrNk}U3aq}FheErsWs#}oL|-r(rhMt4Xf!66hlXVge304;>H ze~`P}7Nkpx*4W%!yoYcC3_*8ble!C2n9O@{jVZ}|Cbtt|NrOzkL4ZzpFg@*zVHY{vP2UyO3~nun230(0|MDt`jR~$*jqK4 z2>;x3U1ux@{hXj|EP2)YqvG66#x#HYCMP9sUYks!_v_NQZ$XbVvR^^6#WHv9v$HtN z{sPgU-@P>eEOb+*6;W9POE>yAn6KjUvLQ8rC)AO)hY)NftGCXI@IMDhXQ~2S^ zINL9kjymL4;Y8eem^Q4BG0nb5Q1(o0DNZ=-qJ<`ctrN^>I5%JAC*LS7Wh6!%FI9xO zyV|ketg+l&^sxroV^f|8BT{sWVA!#~SQuM~@=tAPBq9hOpJ(S|QV`Sr?}8KZbOA-C z*$*$QwVp8b)_o|rH)HJ=hREO$CNM&qo#BEMSg|%6TJDeo5i#X3wEAOfWjNs&&LXg` z+-EH#aD^{!b=dwITj2M)vRLrnx)bg*_u#{yib<9>!Re&TeF?yhO-(}z?d_t* z_JKrzZhIS5e+w)E6*k6TixZzZM+0CqDbdNiuuv2nLke{RCkco)SItW51!sPKVy#wW zrrb5;BKi3hmaEyOgL;3xZ(`Y}XIZxF=McKXJ!fj9Po`$(y90aC*Qx>(^`rh~ZK`MK zTi{7YdD$g{e*{ou#Ww!qtLo`!W8J_2V|)UA|6Ioz*bK;Zt{0j*ySpQW-7@r8R6@5Z zk@-u_`G@j&+JA{r+JmVD8KF0M-}aQCl>VAb?l*o81_>CiL8I2xQ+%YW)_*J}g>u4| znB>VPX0@;gl#9#dF(p1B=!hwf**@zq{_~ndhAa+Gz^vE+gaWEqw{TB3ZN^E} zZ=kscGvasbjM)>o-u4J;dnrqy>-x(W;I7AnO1=|EOy>A0iIUH)Y5)kYSz91QqE4~YjojhcKl zO!h;}@Oe$wTd0RFr(B!r%0D8JyXKjc#MR0C=Ew#IdK&s34KjUuXq|J7gc`M`7#|vs z+Q|)MgrT9g*4`wJE;n($D1ia3)@~8}1jU;pcJeK>F%52{8 z*0VN$PzZqd2)72nRw|R<*I2sSk0CA3jVb;2iK$_DxQe!4Oj* zbppQ;y?d&^(AWq(^2gFg?PZ#n&p5=86{P%uC$>QaE@b+OOuE+JFuVR1wT#JI9et}D z3WGnp4h%Wvp2Md9LHIJP^$YWmg!%CMTh|t;C1BSGAx)0Lv1-a|`^VnprHsy)%oQueHbMceIIg?|x-geL+zwS08(S9jBOs z@uNnwYHU>lJt5oM%-v}}i$S5qaxt1R)@-2gvIT2*5{~^qV#zz4Pq>|d!0*8)FeRmt zU)J&(so$o9VXjFwVe8JQqA)6*-^-uAi}%MHx7X_I-h{-#KD0AE2{{v7F0Lv4_8C7) zT-A~aA%-yI3H4tksD(p=I!#{rC=aggQDhvc|m75&yh!{zVO_WOB|NJZY4G;Y zupemIUmj~BBt#?7-fRpJ%WCt%HY6fZbXgvD-c3E+cZSd5DfrYWrC_Ut*ThiO6_AWd5A$4 zuzznnGK=GR&%V&;?`$mWg1j{zGgJvT0=#9CE@v9Jygu5QRfKPJYX(~1LXRvV2l-sK zy-`IOh?Ci5d$`A|dPKKJije>8jZdE+B{X+UJl^&o6iLiMpp~MLRaXbKZPgygu+`Me zXH0X**kYD?d0?*)y}|d6SS_H7czC>81D7ibKOBw7JqHkKho?K6J&8FIawBW-{Zyc` zw!Wt`%V2%HjNVcZNK)m}XHic|N$yJ7&+RB2BFxWfol1GH{;9io2mTQ&na)eQ?&Ae2 zW@Yyg(!AF=Za`Y#(QoBJA9Re49Vjb1n0@FRIS4JTvd@61IqYi6j7&W0IKcR5c-&l2UT|NHVBdq44xj{uaeT~7^F1ML{Tcx<_#>b(EV`2LXP{lQv+2@3u^MV} zXs4+%uSy*Wdu)425J$h~9e;j;XCfs7<5H*lcmaHpb0`K68kG-VGP!@*{tBLNJxvC78kz@zrRf4f&tu;2G6F$XgS<{dk1fGB&r7+Cjf+ zwv^XR_T&2sNI$!cBiKC^-CRugY2`Ho-Xh{vigzgHUby>f@6>>`1fFbQp^Yumbxg$@*fFqU-$3)-&1RN9NTXwdbX1DQ;Ir)`{(s1jM4jJfs79tCi1Ktd8*y@RqhLp? z9!=ysxVSzNF!Hy`?|3I=1eetijav?QmO7F6&W;fDOncJF7#q$FxK>zZI0-(@{n4KO zTKTwaT$SPlxqahm^Lk70c0WeTq(Yc!`hC{Dj`pkc4Pj|AarL?`8bXmggbsfZO;krQ z4j$!%Pw7UD~MmSTM7%()BEM9+K|4UZ^*n1|g-k zC6IqrwWRF3Uh5=0aq8I*z_pX0K9qP?5ikae1sLDXAE6sgZWpVgB^S0IjEDzR9qC5O z32wM-k#XyjimN4M??gsPey0_&!@l=r!VGv!p<%7-z_*lO60&tfH0-Xo|7owu?*myN z@|eCvGjwAZ`(dbDl<@ln$;RyWjPW`xMbBd|ZMwA_e-S>$;kjl_jiwKaqaRFLend3t zOgdlaE>@x#KM@7<>FsdrD{^_if56<1uuCJ{NOO^D_{9C6f)B+7Rk85u3WK8^=UpBr z%t?jK60l`*PD7UpclpemY%^v|Ui55bN;N8Hpm+Ah_IKsonFUlql8;?&219fxkf(=l zXQK{-nV?oazg{so#iCtbS~t}uMOn2%xY=~cok4VntFlz1@!YV3=R6VYh%vhs{pffE zn!(?s04K2s9yfhhbtmi}X^DL70|ipQ;e~VeFzD((P>rq)#mzF{^JcVcjzQOL{%q|s zU2}o;S0vqAMpG6R`j?1=gI+@TW7N%u>rXeEJ|lmU;k|2MAZ4-tc39%*82sx-sFP1n z86@-%xl=DMdak1)SjtTd z9Ena4`;=S4t&-b~LdxWgG9Z`}>|6_GclYdt=nU?v`I@~jYG9MhW@DD-3-tFo6U;H|_h$llu)Pv*=jMLQ7|4wcBM94}kyVJ0jvMKt z*Ig;H*VPByG*w$MW{GA@iyIlu)kPIwM?#F)D=THh7*-`s6^XrHQs&AJuSWkVKw?Eu z61DX~9t|?kn?9nyb^Yxwk6BxG4B!8vtgzEE1}=N{!ZP_4edG5Q_*(30o59kg2@GSj zBr^HXfNV(Q1GZ~NZ?WKEXpTy-=6Ah*g+{K;#^Qd?=gB=xvZ+EB!zizD=2wXZW?2~W zT>g4zl>-GUk_}pmg?+cr3jRo0I2FMH3*<5$ZgV0UqpFtiqK_txw_3sp(LgzDXm(3} z^ap*Z2My)uyXL5yos$dNv=|Tv)Zf8DIc0X)R!1K-T?~Dwc8La+vUN9cyBKTZOBv)n z%McsjW?%-+ruF3uuKLRE@J&^Dd#B=XnlrU!0M3c*3T;}hvLO6G-|9k}?ve>cc|uAr zEj7vhO{jSS=RyDb#>k_9*(1vdj}1dhJ~w3+ox$>z}@B#0|$xGgBW4Wq;5Xdc4tfn}8^g-#}WhY~Q-qT9tR-~Dcv zZkd`(x2s(;b%h;!CD<#X@KC?^FexnBi+WwjJr>ogbfaFb!2EeWdT!eLrxHm-dofNa z<%e(s04m6>g|+!cc?}Kj@@NG=YOT)qB3kfFsKEO*!}E;l;T6#M1z54j3c53zFv^hC zO&JA%lK&*OS>Oxl)MY42PG@~LN~Mz6Dk))^5xXg|e)tXv&2w{YisZYBUt^iYdfT#? zg=_)JH|*{JvA9}&6zjQ_bBAr+d#e%9FWwxc-nZLQG~%6YJ^e^w?g(9Yi!;V;#w4z{ z{gG&~l|V-HJ}2!XZlqQ#Che!7f%gaiTp+{v)s!-PSbG3CV)p0+!tqWw&clE<^|BCp zZrmZo^;~XrQS~QGerjoei}g^Y<)=?`hY0;EA|rbiAE94-oe9{E`}uV(@2Y4osL|aM zrc|A4L+H|KxmbkM^{F>=qh3YcEu%Cvd@wzRm#03~+uwJve_Awkft{E*xv0U+C>{;c z_mH=MWnqwj66cPbX%aU_y#WyEL_>}Xs?-4IeaVnCQaw6bZ$h}7TGWQ_x#2%?!_1Zi z>#cn?J^aRrOw2RZTl5efwf7SG=Md(pRtG8`?cqg~MaRaJc26Y@4ssy zJ4*{>F+3(QMA&lmCM{`XoSvuy6(~DIc07`i!FlUAiPp>}Bwe>{doyUXk%SmnQ!4(| zc=-mZo9WepN>@ps$Lihcv5C{!yZ;e27x_=_N>KCf*BQ! z!(F#w1&z9k0^c`H;*l{G&q)RaC0kNJn{oFvxM=vDCZNtiVyL!`;E`W-6hr zLumyDbW#IJz~>aBwO*!(>%Je+`BX*>J{u`11ms%cyv9x}_9TgIk@at$MO1l~{JG{{ zeJNm%y(QgN5A^EkWEIcPKW(g`^d=47jIMlEEkfh-(f=HSeiLgt>s{Dy)S0I=OOqjc zS3TrtN$I79aZ1JnFJpYgezP-SwWr_^hq$POIYK7n^r%$gY4Z*M==3( zC^*Vwgs@mw*>yRxt^l;q(6MWBC2SSc69`^P((A8R97s%uC;&q)7fotj)KsomLArZ2 zB5&vkHOH@H@oK)c?l%E8>kD_Hm;rZgs=}89HEZHQD`7Lz#3~~~2F8`elOb0fhO+hmdg^;# z6G<|a^=x!M%!7bxwU)+E4Q&{ozXxF&WJRCky)&3eC1;{-gigC)pmUwbr6gey#(P-h!TY8M3)evw~3PIj53Jm zL-ZC=l3=1Fh)(oAS`b8uZnOj;%BT}%yeI9xpSS$=uIF3p`_}r-AG7A1v#xTky7zDY z_P&TyvOdg7HB-u(zC$slu|+ltrLntSZe-&3_a;R98=O^r>3BI4tqqd=&db@8r`ZW3IFZ?Jb2RhZ`N z4pqqabboen(OZsRYzv38_qIL|mR;$1wK*DIl@YamPGS&f{;>Ppn-%dYrZ(wiS_GHX zZr+}Tf698c7@@A(ajDNaqPyl+`K2|Q>$cWs?_n6M>SVQe7dWk1T}Yr*@5dgz!`aT! zF)bFciB*xL_2HO8)pTyho$t{N@}EC7H$jf&?N&0ZO{(r{HGa&sxVH~w=5gj@sqcF- z+G1X1-cVzqt4(%eaEdhM*dH)+@VqM7zwxcYG z6ZCF-yxoF0zF`CV>#${)q=5+Jdq`M2=%P~QYFJ(+){}RzIO0OoMdZP1dV_Mib)L%5 zn^p@DQv-@~YVN8HpU*3H48}_xoWG5CpG$~%aZ;A!58;f@OmZ=^-btHZ)~odRX4{__ z$WP377Nlk#zjb!^G30KwO^cvQcE8+)-|0{*L&CwHn$7yOJm;w4*H3@QF_Ens!003T zG5RjxlX;F}_H6l^a0z~EGM@ZfX(#-5byqIe1ucb9UMsn8vl^MLt&Qp}6qlN&=$S_7 zM)Tc`p?k>v!H!bkHcO61+92cQ;)xAJVEXRd#M-&)hNey*Qm!chD$AQ=vB7IUULCVD zg+tj%TQ$s(-Cnyp)q(E``xqb~HDin#c4y7V@Iy5q#CZkLp?R&*JJ@yu0pvLOHD)nY zBsy2P$%rGCU5;e5oBRYS2)4Jnfw!zWmEC$q0%Kka6C5x_6?fb(zIoSF)rD^=`k0C5 zTjT4Tz-};d^C79zjP9hzbqx%pdKc{Cb>KraDN#zr@=^}#+sy!uqSp?F%SM%1%i7;M z795R-o!ZKDQ*J(4JnO!HKVMte=@TV_*KfhY52W8%>hxpe1?Sh-eXhkv%$T$_nHcRe ziC-jW^ilgoL5R-Jl`s2=QbfeohD+_P`sobs&cz_VX-PN z6q-Ni3ImxwBjG8_`DnqF;>MW{G@9LI+Bn;U#dGqIDVnHJ3C67@zFfxnU#S*H2Kk%{ z3z)h7blHM$aYD6tcx*Bn%8L3o(Y}pT-kpCr=`eCvgv@7ew&Fnjg=Vnrq?~K;uQv46 z;Zo5!w-EMQPppm4DV5GS&N6V&E|Jnb%-w!QT|GJQ-B>m%N#k18nU%f@(Q@ez($m(n zvDNAjxl&L0VxSt2zArcL28?fF&*_e=sjQqEgR<*K$#_=ngIF}-{{rS}f@p3LR7{CN zuDm7bpl4WW|8(Ei?|7*%)4Aj*B2AH=b*w7HNF6`R{=0(i3W4%>w~+iIe)GB6on@gD z>P+6zy3b7ooIf1ecFZpouP%bN6JfIrKJ=jeW(ea8aCL;S)2q!YpX;udChan(?Zo>} zI4@r?YYGZ3DtB{r-J0a^rK$9iz~nM0<&5sAmn0J1oTyHHEi6iuf7VQYu)NOef5;Fw%DzRm5 zi{s!GoYPk%mx@ZFN<_!JXZV<4X;v1vE+ewo`oZdGw$9sJttq%eZp1{#!gA@P_I)fp z-IXIX&qpn)^-Io|@8~GAWH5!ija%uBcVb%^h2rME|l?NXK zm=&hE0(wjd$DH~}#VLv0V>2FQNbyvsSF^PS4~{heuU+%-vV7y!UZqU_)b){`tB&OG zJovbCXVQBf9#uBF<8!^jQ~HDR^;q}0_z3z~YET86kIR*b78N4(7|M3`Pm|Qs{d}Co zwn+F^gvz5I-fnjs&lEG$q|yBIcGMQ}=PHk=V9Jtm+u)W^zP=e9OXA;_&0xh~+?Br8 zgc7LN)qn;`5i(6g@Gg~BQ9x{kj$FS^$6*<9wn|!=yGd5UQt=-4?KuhdP@&R;LP`D3 zA59jB7LEi!5tyTc$+4HaH65b|WanrrS>=7dU+{--N(F+!kb2q!X;p8RC-GIa+@h`E zdZY6;AJ2&e^Eb!2E8t5)EPrE^fU7ve;@}sE^W1uziA`g>^}>a)qWOI-+##bm~5zC(+ zNP1yFWReilVg7&Gi=CR+l8K2av6n;cXaN87wmP*(_~B5XG4_;1bDf;~Yw`~d9eD{7 zkL+UWN21ql6IWN#WFQHUoF8$}0kiVIn-lV@AO6>rlK-Fl|9I1RQQ+f_H-t+1Rla!C z=hYy;Uj2y;s8akP2U#G3)6*Ge>pj&rhMp!TCp~+XcVO25oaYGyP|*FwVSbSQb%19D zu^#(Fc`5)n)mNW@mP$ZE{DhDPe++rQ!Z7Fp`Xle(#=T$9{>`k3u_(@kt+~b#Qp(rQ z^p1TDPA!hO6!C(L^fa%$);A&`AfS*2r^`I5e1~|Zr}=f>0^?%|55>ck<^i`31{vZ` zsryjG1$;qhi$LbWT_90+4z^L}%x7`$^R^~%`^>QCRs^Mn5sAHY>&G-x1m2HlKQe!Y zlLfx^&kb|Z1^mB$ztH1;s)+aJzoYVX@T*@5^fcqti9vt<7gG0f2LH?m_z~w~BK%SK z&zGt^|CBNo2{hmT&4s+1ej}U6eN#4OT%@}C!GnjkwjZS)8XA6@{$AFK8);y3oOE>3 zviS26MVm)z+Y6f9qzaxz*j-Y40)=9UC7%4kWCLUaoAg z0;qRC+r`wS^=8HsqZW-VRLo6e%YQW~_- z2Fj3qY`EcFXmurC&E5P@ANU!`f_={#oeEl?F~1c8)Z*j>vszbOf+JvJVb6}{0Z=*; zNh@FG(l}O5*Tem%Z2q?-ASjlPdw2SdV{lfa_BB!hKp1U)0J+clC+F%nevpMzr^<0! zL(`M!AJtw?R19{1|GSUJUtGXne{umoR*e|ced$lWPS?Q&EZ4!p?0`u-;`ab@DCy;V z<@%np&DZu{v*$$wHvs9Dlm3^Pnxr9u$MPgQyOgzPUtQJKeC zBJr7N;3FREQp;pHqhqFyN^KHQp;Gf3-b>o{FYT+nqZ_^1NPA7kCBXLxlanCNgEuDb zB^JXoUtqSW3G=wVzYs=;RnVtBi)Ja5s4l)o%gcR5PS;VQVn9zk&{gv9MtW#Lf!_&P zK&>R~bitg)%Al=dssp+~$JzoI`Ldc8$xAmw1~>x1WuMTK{)?&CFF?{b=u>MucXar& zKcP4g6a?#D5Y938SzRChu}ae7Pt$LQ@-7=Qdi5)G1cR-v*He+3)welC$%lqLI3^=l z4}@?MJ2Sw%Iv9+_D=({-N|9|ZU_Ca*!j>i}Lg(>y>fV_~1|*S6mceB^5`WLx67dad zNTL^pQIO3zY6_~|y$baY(HI=WYJN01-JX4f-HA!S)Soa5?8GSeKgFia8C#(^E(rA~ z8h=MHG;z@>DmYKNX6%0_6wMC^6-sqUL?J4TXc*(+fFsj$KLSiUda~J%>7jOdOxeQ^ zDAotkQG(vkglg${u3f+DPv7~scvGk;XrDa3%ihJqlQOSy*q*f6Kci7&;Fuu!|v|Z|fvR_S; z*@%fd(~rAY#s(&5h@6#>?!eID0lnfDe@6M0PrXv~gkaiOGlm;B9s4SbQ??farP#s~ zolwfHAN&f{wI!noiY_iSUdmmBb5XWq9w6|B?zw|!u+$F)aKrL~|0!b06Qo*B2%7ShYbH6qH5K<(0myr$%NnFRI=sZKd4i?p8 zXV80%xXAyoL#JtuTcv*BCF&T{E?M(fRwf)dlss-0{+;|3#wDjQY?swYi3nbQ9>y}k z1;Kvm!9MD^SbP&sly7*1TKW<*+%Jl6MAKyk?>xBbc5l@{?t$y3MtvYLPU{pl*~5^p zy@^7F3q~LG?b9A`F7RVjE!*6bTBVu-L5E@8+yXUT@?A4ATvTN}IkMS(L#epi(0}G~ zCK>)y+C*kya!;euw#S}ShR63?BW3p%r1#`uJ6HnCpfG+!aG>!q=Kcp0VQM!j3xvZ) zKicsA`|)Z{&Vvtv=F{SA+XLvBo2?n64e?6uO1_|W^dOAmF2@}-Ee8+w;<|)mXi&gD zZOb(M6CO+n!3g0t$%kSI5R1fMXAknwP{ykq?X)K5apTRlhLZX2wOKmkA(A;EEVroK z^;me{uSyP`%&t92K44JG7dfL9uQ*F8RD3={dKQM%+Gv`h7j_Meu__v4sPS^VEMh{Mf?<3?}{jlBJngv=*tPRO$HA8Y0Znl9WB!;y^quDUMP`l25`_ zzd0@Wt;xSB9w&hQvU_$}fDua!9^Ayt)*uyg@_y8B!_AC)gN! zu0@Z-HSegb$0=vW>6cxUiHjV?p=>>PQtRDNE9AZEn)H0WHX@7F=L_=5H>}a65M@ir znD?2ZA})tAVvNm9YRgX{LUT{cNyyD8yOzFY8NW7i@P%zR@dR!!BHfkJ6L0uTMTFy8fh{hc`Z0CAo8XJv^YKKD+T?KFCxR#C{Zj;rkGaDYz3_ESr+?w*EcHB*$|Yev zcuHvCA7RaD09bg;6VztoNwMDH(!~}C>VT3ZQk`!cmS7Wc#^oTnh--XZW(4tV{lhe) z#8Yinv%;~=t5FYF;z^U$tU~#kH9wY@I4LTO^j-s>f46xD^@5bPT8=bmGud>&&c*}< zk_5kJg*+eau?cq2x{V#7FKzFw^S+g_FwnhPc7!URXy2h0TD|B-9|hq(@iZUqpQb0t zDO-H%r4`Bo@Iqo9x#Ga_495cl9`o?8MxBHo)E*Zpu5Ip6^A-uJo%<8=CcNvA&ukI~ zm}2IU`&~wW0owN4qJiZ4FoCR0y!9t5%+ts2PuW5`iZ0qb*tRrg@*s+Mt+fxBv+Hjd zlyX!CQU)?lvvatB8M?QFk|6bLg9nYv$<#3-z2`Ee8nt_!Tp}xf)m*4WHI=n=g|X>I zw&IFRA&J4TYwgV6WH^u?kFU0&VxNwY^~QL-+-~loAh36{I@?+Jv-Mb zTfYQ*+iUxESG3QJW_@TsyvogYYFn3SD@GkjT5yg$UpSCJ>siK^?lC7aLqoss$+$v3jvo^-tBm*K+ntO%9snzvZMqgo!$6v|KPT-XgYqSUh- z_I!sb674Js<7#5Xbo6m7tig%hH9%i#9$8|Gm$FmXq1)Xpc|1H(ZelyeahGx>mX*yn zn=1gPl%JA4AX?}{I9tRy{V8PlgcOjff|J}CYy5(uhPB^bx3c#v!PcTpA?0JVmiaj_ zhZzC?uVNGwrdPLECT8QUOjbjK(>o%`JvxGkt3-Obs1#AxOK2TLW=TyWiOADleOVL7 ze(@qig+(ogSMim5`UUtO-TD+7Y@;^5xYpP1>)AcnhrpYEULfzl-7?C#;a zNw?(dq(DzM!v%i45*Vpb)*M>9{;6lfEtOcntr;V=-fTcsc4xY83+Z)jLyN4HIr-TnGa#;hOGOG9MQ zVuB~B5iS-A@HtOJL@}i4F zs`-L8!kaNBuifwxPg$!ndOAvb{J*Bg<+=l)UW|(bizwQkWA7BT7$l-GnacP%Q|w{OYl*+nOy}@D4EX${OKllu;5TO{@U)D*rzVM@qVvJ!7P8pxYL*b@ zGoFKEgHECksAHtjGWQYQw~QOwez_qN-_7bQV`_;+ert@?4}mTAS=JFWG_&f(tEdiq z|D_5BwQ$nJ{qoxP!pa#qq9WBBJ>?kWD?m8@@{*{J2((nR5=N@vzcVD+;3&y_WEPC+ z4@zOb!KZ!bntCF4t9+0M6xvIg1U8){Lk5W94XBkq#Z3p9I_7JI^6k9bmMg~j(c_O_ z=<3;fsHGESBts}jXs6>G=9%l4ZVD`lsAUATj~Bh1BNzI3k@Dzi1W`BXRrZVNri)T! zT@iQD>azWuudYVBkxWXk?HQFSa5H?Wy9ZTkQVyarXFg~@9h$grVEl9!l*nN<(#qVn zC>`YcO`iLiB5*>y%U(-+EH8&uobXq9W~1Zswu%70`*{t937u;b>)A>BduaPHdm7%@ zK#F@sz?8xc=+A0KE6r+S#;MFsi$3q}%Uv#`l7TKt9fadXX$WQ$P|{dQMDW$W!sP_x z%B{cn-=62IG5QYI3x^BdpWi$a3z2pn&vQG8|3qtkioH$)Kfd%0FZ9;zFvVmuy86TA_j@fSggT2n=jmS0D;&>w zc%Y48xhyvp66O;MWi>3#11*iWLJurAD&9*oCQ0a}q?NIx!o|UmI}N@URtYBB9-slu zW`K6T^LWnMED!8L9a4TKHz|1PT)Mw!0CS&;w`g2J9qj~SkvfW+Z|erFu-7m>&o{0_ zrqq=9qMEvQ>9RMuPs``+Qg%=1X3YO8_Ix`6A3GVk%+rN@G9M}{*(874?@3sTD@$RF zqJpNL4A<$!h4L{=)VWjrXUppN^RmW8Hr6p>%VBY7@_?^S51<|r2(Ly(Lfp;^f+Ns)dV?%$7ub9*CM z!_s;#NjvW^#)KR)K@2q^+}jmg&;RHxPIrhw@LK?~kc%M%Degd*h|&Q4Oz1j@+H``J zeqOTtr(WzCf{fQWVL+0@e#zM%!FSLv<4L804CVh@MTaFr@rG^l%v%L-@6wmSZx3VZ zHQn`)0wrmTWxiechX;KxqsLeP+BGed{CV)?)qt9nzXhy+txWf|e;d}ZuGnVVx-k-# z%$&uSa}PjFq5wDr_~_p~qfdp8tN%;!g|l9V{wM7V_&78GtWf^lruSsQuK*GyF{r)0 zedIHOxyEiNt1E+Z`Sm4x3)BCwM>1)%mSMG6x%9n zdh#?#N~BfQ)SP~xR8djGzfh__Xy2zsDq9Z+J&ldj>FLVrUA@F5X1Ie1sOd~4S5;-@ zJJ$&2n(1jhhW{6kK21dhSJ%>gsy~qAGhFk)z(ChI$=ONFvsb)bYp`xu^s&qf} FKL99V?e+iw literal 0 HcmV?d00001 From 1794d0baea6068d594b1b80c25f887b38d507baa Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 4 Aug 2020 06:39:58 -0700 Subject: [PATCH 554/589] Update enroll-a-windows-10-device-automatically-using-group-policy.md --- ...roll-a-windows-10-device-automatically-using-group-policy.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md b/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md index a1b759f011..f45e20d377 100644 --- a/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md +++ b/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: manikadhiman -ms.date: 07/29/2019 +ms.date: ms.reviewer: manager: dansimp --- From 77c5f1e75406d4b1258f9ca69bb8eef4d9197629 Mon Sep 17 00:00:00 2001 From: Deland-Han Date: Tue, 4 Aug 2020 22:16:31 +0800 Subject: [PATCH 555/589] finish --- ...ivate-using-key-management-service-vamt.md | 289 +++++++++--------- 1 file changed, 145 insertions(+), 144 deletions(-) diff --git a/windows/deployment/volume-activation/activate-using-key-management-service-vamt.md b/windows/deployment/volume-activation/activate-using-key-management-service-vamt.md index 01010689aa..560b6320c4 100644 --- a/windows/deployment/volume-activation/activate-using-key-management-service-vamt.md +++ b/windows/deployment/volume-activation/activate-using-key-management-service-vamt.md @@ -1,144 +1,145 @@ ---- -title: Activate using Key Management Service (Windows 10) -ms.assetid: f2417bfe-7d25-4e82-bc07-de316caa8dac -ms.reviewer: -manager: laurawi -ms.author: greglin -description: -keywords: vamt, volume activation, activation, windows activation -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: activation -audience: itpro author: greg-lindsay -ms.localizationpriority: medium -ms.date: 10/16/2017 -ms.topic: article ---- - -# Activate using Key Management Service - -**Applies to** -- Windows 10 -- Windows 8.1 -- Windows 8 -- Windows 7 -- Windows Server 2012 R2 -- Windows Server 2012 -- Windows Server 2008 R2 - -**Looking for retail activation?** - -- [Get Help Activating Microsoft Windows](https://go.microsoft.com/fwlink/p/?LinkId=618644) - -There are three possible scenarios for volume activation of Windows 10 or Windows Server 2012 R2 by using a Key Management Service (KMS) host: -- Host KMS on a computer running Windows 10 -- Host KMS on a computer running Windows Server 2012 R2 -- Host KMS on a computer running an earlier version of Windows - -Check out [Windows 10 Volume Activation Tips](https://blogs.technet.microsoft.com/askcore/2015/09/15/windows-10-volume-activation-tips/). - -## Key Management Service in Windows 10 - -Installing a KMS host key on a computer running Windows 10 allows you to activate other computers running Windows 10 against this KMS host and earlier versions of the client operating system, such as Windows 8.1 or Windows 7. -Clients locate the KMS server by using resource records in DNS, so some configuration of DNS may be required. This scenario can be beneficial if your organization uses volume activation for clients and MAK-based activation for a smaller number of servers. -To enable KMS functionality, a KMS key is installed on a KMS host; then, the host is activated over the Internet or by phone using Microsoft’s activation services. - -**Configure KMS in Windows 10** - -1. Open an elevated command prompt. -2. Enter one of the following commands. - - To install a KMS key, type **slmgr.vbs /ipk <KmsKey>**. - - To activate online, type **slmgr.vbs /ato**. - - To activate by using the telephone, type **slui.exe 4**. -3. After activating the KMS key, restart the Software Protection Service. - -For more information, see the information for Windows 7 in [Deploy KMS Activation](https://go.microsoft.com/fwlink/p/?LinkId=717032). - -## Key Management Service in Windows Server 2012 R2 -Installing a KMS host key on a computer running Windows Server allows you to activate computers running Windows Server 2012 R2, Windows Server 2008 R2, Windows Server 2008, Windows 10, Windows 8.1, Windows 7, and Windows Vista. - -**Note**   -You cannot install a client KMS key into the KMS in Windows Server. - -This scenario is commonly used in larger organizations that do not find the overhead of using a server a burden. - -**Note**   - -If you receive error 0xC004F015 when trying to activate Windows 10 Enterprise, see [KB 3086418](https://go.microsoft.com/fwlink/p/?LinkId=620687). - -**Configure KMS in Windows Server 2012 R2** - -1. Sign in to a computer running Windows Server 2012 R2 with an account that has local administrative credentials. -2. Launch Server Manager. -3. Add the Volume Activation Services role, as shown in Figure 4. - - ![Adding the Volume Activation Services role in Server Manager](../images/volumeactivationforwindows81-04.jpg) - - **Figure 4**. Adding the Volume Activation Services role in Server Manager\ - -4. When the role installation is complete, click the link to launch the Volume Activation Tools (Figure 5). - - ![Launching the Volume Activation Tools](../images/volumeactivationforwindows81-05.jpg) - - **Figure 5**. Launching the Volume Activation Tools - - 5. Select the **Key Management Service (KMS)** option, and specify the computer that will act as the KMS host (Figure 6). - This can be the same computer on which you installed the role or another computer. For example, it can be a client computer running Windows 10. - - ![Configuring the computer as a KMS host](../images/volumeactivationforwindows81-06.jpg) - - **Figure 6**. Configuring the computer as a KMS host - -5. Install your KMS host key by typing it in the text box, and then click **Commit** (Figure 7). - - ![Installing your KMS host key](../images/volumeactivationforwindows81-07.jpg) - - **Figure 7**. Installing your KMS host key - -6. If asked to confirm replacement of an existing key, click **Yes**. -7. After the product key is installed, you must activate it. Click **Next** (Figure 8). - - ![Activating the software](../images/volumeactivationforwindows81-08.jpg) - - **Figure 8**. Activating the software - - The KMS key can be activated online or by phone. See Figure 9. - - ![Choosing to activate online](../images/volumeactivationforwindows81-09.jpg) - - **Figure 9**. Choosing to activate online - -Now that the KMS host is configured, it will begin to listen for activation requests. However, it will not activate clients successfully until the activation threshold is met. - -## Verifying the configuration of Key Management Service - -You can verify KMS volume activation from the KMS host server or from the client computer. KMS volume activation requires a minimum threshold of 25 computers before activation requests will be processed. The verification process described here will increment the activation count each time a client computer contacts the KMS host, but unless the activation threshold is reached, the verification will take the form of an error message rather than a confirmation message. -**Note**   - -If you configured Active Directory-based activation before configuring KMS activation, you must use a client computer that will not first try to activate itself by using Active Directory-based activation. You could use a workgroup computer that is not joined to a domain or a computer running Windows 7 or Windows Server 2008 R2. - -To verify that KMS volume activation works, complete the following steps: - -1. On the KMS host, open the event log and confirm that DNS publishing is successful. -2. On a client computer, open a Command Prompt window, type **Slmgr.vbs /ato**, and then press ENTER.

-The **/ato** command causes the operating system to attempt activation by using whichever key has been installed in the operating system. The response should show the license state and detailed Windows version information. -3. On a client computer or the KMS host, open an elevated Command Prompt window, type **Slmgr /dlv**, and then press ENTER.

- -The **/dlv** command displays the detailed licensing information. The response should return an error that states that the KMS activation count is too low. This confirms that KMS is functioning correctly, even though the client has not been activated. - -For more information about the use and syntax of slmgr.vbs, see [Slmgr.vbs Options](https://go.microsoft.com/fwlink/p/?LinkId=733639). - -## Key Management Service in earlier versions of Windows - -If you have already established a KMS infrastructure in your organization for an earlier version of Windows, you may want to continue using that infrastructure to activate computers running Windows 10 or Windows Server 2012 R2. Your existing KMS host must be running Windows 7 or later. To upgrade your KMS host, complete the following steps: - -1. Download and install the correct update for your current KMS host operating system. Restart the computer as directed. -2. Request a new KMS host key from the Volume Licensing Service Center. -3. Install the new KMS host key on your KMS host. -4. Activate the new KMS host key by running the slmgr.vbs script. - -For detailed instructions, see [Update that enables Windows 8.1 and Windows 8 KMS hosts to activate a later version of Windows](https://go.microsoft.com/fwlink/p/?LinkId=618265) and [Update that enables Windows 7 and Windows Server 2008 R2 KMS hosts to activate Windows 10](https://go.microsoft.com/fwlink/p/?LinkId=626590). - -## See also -- [Volume Activation for Windows 10](volume-activation-windows-10.md) +--- +title: Activate using Key Management Service (Windows 10) +ms.assetid: f2417bfe-7d25-4e82-bc07-de316caa8dac +ms.reviewer: +manager: laurawi +ms.author: greglin +description: +keywords: vamt, volume activation, activation, windows activation +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: activation +audience: itpro +author: greg-lindsay +ms.localizationpriority: medium +ms.date: 10/16/2017 +ms.topic: article +--- + +# Activate using Key Management Service + +**Applies to** +- Windows 10 +- Windows 8.1 +- Windows 8 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2012 +- Windows Server 2008 R2 + +**Looking for retail activation?** + +- [Get Help Activating Microsoft Windows](https://go.microsoft.com/fwlink/p/?LinkId=618644) + +There are three possible scenarios for volume activation of Windows 10 or Windows Server 2012 R2 by using a Key Management Service (KMS) host: +- Host KMS on a computer running Windows 10 +- Host KMS on a computer running Windows Server 2012 R2 +- Host KMS on a computer running an earlier version of Windows + +Check out [Windows 10 Volume Activation Tips](https://blogs.technet.microsoft.com/askcore/2015/09/15/windows-10-volume-activation-tips/). + +## Key Management Service in Windows 10 + +Installing a KMS host key on a computer running Windows 10 allows you to activate other computers running Windows 10 against this KMS host and earlier versions of the client operating system, such as Windows 8.1 or Windows 7. +Clients locate the KMS server by using resource records in DNS, so some configuration of DNS may be required. This scenario can be beneficial if your organization uses volume activation for clients and MAK-based activation for a smaller number of servers. +To enable KMS functionality, a KMS key is installed on a KMS host; then, the host is activated over the Internet or by phone using Microsoft’s activation services. + +**Configure KMS in Windows 10** + +To activate by using the telephone, use the slmgr.vbs script. + +1. Run **slmgr.vbs /dti** and confirm the installation ID. +2. Call [Microsoft Licensing Activation Centers worldwide telephone numbers](https://www.microsoft.com/licensing/existing-customer/activation-centers) and follow the voice prompts to enter the installation ID that you obtained in step 1 on your telephone. +3. Follow the voice prompts and write down the responded 48-digit confirmation ID for OS activation. +4. Run **slmgr.vbs /atp \**. + +For more information, see the information for Windows 7 in [Deploy KMS Activation](https://go.microsoft.com/fwlink/p/?LinkId=717032). + +## Key Management Service in Windows Server 2012 R2 +Installing a KMS host key on a computer running Windows Server allows you to activate computers running Windows Server 2012 R2, Windows Server 2008 R2, Windows Server 2008, Windows 10, Windows 8.1, Windows 7, and Windows Vista. + +**Note**   +You cannot install a client KMS key into the KMS in Windows Server. + +This scenario is commonly used in larger organizations that do not find the overhead of using a server a burden. + +**Note**   + +If you receive error 0xC004F015 when trying to activate Windows 10 Enterprise, see [KB 3086418](https://go.microsoft.com/fwlink/p/?LinkId=620687). + +**Configure KMS in Windows Server 2012 R2** + +1. Sign in to a computer running Windows Server 2012 R2 with an account that has local administrative credentials. +2. Launch Server Manager. +3. Add the Volume Activation Services role, as shown in Figure 4. + + ![Adding the Volume Activation Services role in Server Manager](../images/volumeactivationforwindows81-04.jpg) + + **Figure 4**. Adding the Volume Activation Services role in Server Manager\ + +4. When the role installation is complete, click the link to launch the Volume Activation Tools (Figure 5). + + ![Launching the Volume Activation Tools](../images/volumeactivationforwindows81-05.jpg) + + **Figure 5**. Launching the Volume Activation Tools + + 5. Select the **Key Management Service (KMS)** option, and specify the computer that will act as the KMS host (Figure 6). + This can be the same computer on which you installed the role or another computer. For example, it can be a client computer running Windows 10. + + ![Configuring the computer as a KMS host](../images/volumeactivationforwindows81-06.jpg) + + **Figure 6**. Configuring the computer as a KMS host + +5. Install your KMS host key by typing it in the text box, and then click **Commit** (Figure 7). + + ![Installing your KMS host key](../images/volumeactivationforwindows81-07.jpg) + + **Figure 7**. Installing your KMS host key + +6. If asked to confirm replacement of an existing key, click **Yes**. +7. After the product key is installed, you must activate it. Click **Next** (Figure 8). + + ![Activating the software](../images/volumeactivationforwindows81-08.jpg) + + **Figure 8**. Activating the software + + The KMS key can be activated online or by phone. See Figure 9. + + ![Choosing to activate online](../images/volumeactivationforwindows81-09.jpg) + + **Figure 9**. Choosing to activate online + +Now that the KMS host is configured, it will begin to listen for activation requests. However, it will not activate clients successfully until the activation threshold is met. + +## Verifying the configuration of Key Management Service + +You can verify KMS volume activation from the KMS host server or from the client computer. KMS volume activation requires a minimum threshold of 25 computers before activation requests will be processed. The verification process described here will increment the activation count each time a client computer contacts the KMS host, but unless the activation threshold is reached, the verification will take the form of an error message rather than a confirmation message. +**Note**   + +If you configured Active Directory-based activation before configuring KMS activation, you must use a client computer that will not first try to activate itself by using Active Directory-based activation. You could use a workgroup computer that is not joined to a domain or a computer running Windows 7 or Windows Server 2008 R2. + +To verify that KMS volume activation works, complete the following steps: + +1. On the KMS host, open the event log and confirm that DNS publishing is successful. +2. On a client computer, open a Command Prompt window, type **Slmgr.vbs /ato**, and then press ENTER.

+The **/ato** command causes the operating system to attempt activation by using whichever key has been installed in the operating system. The response should show the license state and detailed Windows version information. +3. On a client computer or the KMS host, open an elevated Command Prompt window, type **Slmgr /dlv**, and then press ENTER.

+ +The **/dlv** command displays the detailed licensing information. The response should return an error that states that the KMS activation count is too low. This confirms that KMS is functioning correctly, even though the client has not been activated. + +For more information about the use and syntax of slmgr.vbs, see [Slmgr.vbs Options](https://go.microsoft.com/fwlink/p/?LinkId=733639). + +## Key Management Service in earlier versions of Windows + +If you have already established a KMS infrastructure in your organization for an earlier version of Windows, you may want to continue using that infrastructure to activate computers running Windows 10 or Windows Server 2012 R2. Your existing KMS host must be running Windows 7 or later. To upgrade your KMS host, complete the following steps: + +1. Download and install the correct update for your current KMS host operating system. Restart the computer as directed. +2. Request a new KMS host key from the Volume Licensing Service Center. +3. Install the new KMS host key on your KMS host. +4. Activate the new KMS host key by running the slmgr.vbs script. + +For detailed instructions, see [Update that enables Windows 8.1 and Windows 8 KMS hosts to activate a later version of Windows](https://go.microsoft.com/fwlink/p/?LinkId=618265) and [Update that enables Windows 7 and Windows Server 2008 R2 KMS hosts to activate Windows 10](https://go.microsoft.com/fwlink/p/?LinkId=626590). + +## See also +- [Volume Activation for Windows 10](volume-activation-windows-10.md) From b2024c556528e288777ad31d715a7a91209938a7 Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Tue, 4 Aug 2020 08:20:27 -0700 Subject: [PATCH 556/589] pencil edits --- .../activate-using-key-management-service-vamt.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/volume-activation/activate-using-key-management-service-vamt.md b/windows/deployment/volume-activation/activate-using-key-management-service-vamt.md index 560b6320c4..f2d59868c4 100644 --- a/windows/deployment/volume-activation/activate-using-key-management-service-vamt.md +++ b/windows/deployment/volume-activation/activate-using-key-management-service-vamt.md @@ -115,9 +115,9 @@ Now that the KMS host is configured, it will begin to listen for activation requ ## Verifying the configuration of Key Management Service You can verify KMS volume activation from the KMS host server or from the client computer. KMS volume activation requires a minimum threshold of 25 computers before activation requests will be processed. The verification process described here will increment the activation count each time a client computer contacts the KMS host, but unless the activation threshold is reached, the verification will take the form of an error message rather than a confirmation message. -**Note**   -If you configured Active Directory-based activation before configuring KMS activation, you must use a client computer that will not first try to activate itself by using Active Directory-based activation. You could use a workgroup computer that is not joined to a domain or a computer running Windows 7 or Windows Server 2008 R2. +> [!NOTE] +> If you configured Active Directory-based activation before configuring KMS activation, you must use a client computer that will not first try to activate itself by using Active Directory-based activation. You could use a workgroup computer that is not joined to a domain or a computer running Windows 7 or Windows Server 2008 R2. To verify that KMS volume activation works, complete the following steps: From b691fb6b7fdb411ce407a569212d291445cd63f7 Mon Sep 17 00:00:00 2001 From: Rick Munck <33725928+jmunck@users.noreply.github.com> Date: Tue, 4 Aug 2020 15:25:17 -0500 Subject: [PATCH 557/589] Update security-compliance-toolkit-10.md Added the final v2004 release and removed the PowerShell scripts portion as it provides no value. --- .../security-compliance-toolkit-10.md | 61 +------------------ 1 file changed, 1 insertion(+), 60 deletions(-) diff --git a/windows/security/threat-protection/security-compliance-toolkit-10.md b/windows/security/threat-protection/security-compliance-toolkit-10.md index cea2e3c915..9e241156a8 100644 --- a/windows/security/threat-protection/security-compliance-toolkit-10.md +++ b/windows/security/threat-protection/security-compliance-toolkit-10.md @@ -27,6 +27,7 @@ The SCT enables administrators to effectively manage their enterprise’s Group The Security Compliance Toolkit consists of: - Windows 10 security baselines + - Windows 10 Version 2004 (May 2020 Update) - Windows 10 Version 1909 (November 2019 Update) - Windows 10 Version 1903 (May 2019 Update) - Windows 10 Version 1809 (October 2018 Update) @@ -80,63 +81,3 @@ It can export local policy to a GPO backup. It can export the contents of a Registry Policy file to the “LGPO text” format that can then be edited, and can build a Registry Policy file from an LGPO text file. Documentation for the LGPO tool can be found on the [Microsoft Security Baselines blog](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/lgpo-exe-local-group-policy-object-utility-v1-0/ba-p/701045) or by [downloading the tool](https://www.microsoft.com/download/details.aspx?id=55319). - -## List of PowerShell scripts - -This list of PowerShell script names, divided into categories by the name of the ZIP file containing those scripts, is based on the download page content listing of the full package download (12 files). - -1. **Windows 10 Version 1909 and Windows Server Version 1909 Security Baseline.zip** - - - Baseline-ADImport.ps1 - - Baseline-LocalInstall.ps1 - - Remove-EPBaselineSettings.ps1 - - MapGuidsToGpoNames.ps1 - -2. **LGPO.zip** - - (none) - -3. **Microsoft Edge v80.zip** - - - Baseline-ADImport.ps1 - - Baseline-LocalInstall.ps1 - - MapGuidsToGpoNames.ps1 - -4. **Office365-ProPlus-Sept2019-FINAL.zip** - - - Baseline-ADImport.ps1 - - Baseline-LocalInstall.ps1 - - MapGuidsToGpoNames.ps1 - -5. **PolicyAnalyzer.zip** - - - Merge-PolicyRules.ps1 - - Split-PolicyRules.ps1 - -6. **Windows 10 Version 1507 Security Baseline.zip** - - (none) - -7. **Windows 10 Version 1607 and Windows Server 2016 Security Baseline.zip** - - - MapGuidsToGpoNames.ps1 - -8. **Windows 10 Version 1709 Security Baseline.zip** - - - MapGuidsToGpoNames.ps1 - -9. **Windows 10 Version 1803 Security Baseline.zip** - - - MapGuidsToGpoNames.ps1 - -10. **Windows 10 Version 1809 and Windows Server 2019 Security Baseline.zip** - - - BaselineLocalInstall.ps1 - - MapGuidsToGpoNames.ps1 - -11. **Windows 10 Version 1903 and Windows Server Version 1903 Security Baseline - Sept2019Update.zip** - - - Baseline-ADImport.ps1 - - Baseline-LocalInstall.ps1 - - MapGuidsToGpoNames.ps1 - -12. **Windows Server 2012 R2 Security Baseline.zip** - - (none) From d82945f25f0008a47be6072f79738620a3721f3f Mon Sep 17 00:00:00 2001 From: chrfox Date: Tue, 4 Aug 2020 13:37:29 -0700 Subject: [PATCH 558/589] Update configure-endpoints.md working on adding a relative link --- .../microsoft-defender-atp/configure-endpoints.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints.md b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints.md index bde1047764..7da0d32440 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints.md @@ -23,6 +23,7 @@ ms.topic: conceptual - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) +- [Microsoft 365 Endpoint data loss prevention (DLP)](/windows/uwp/get-started/) From af2602c04533cefebb67e8fa4e2a253ab7c513cf Mon Sep 17 00:00:00 2001 From: chrfox Date: Tue, 4 Aug 2020 13:47:08 -0700 Subject: [PATCH 559/589] Update configure-endpoints.md added site relative link --- .../microsoft-defender-atp/configure-endpoints.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints.md b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints.md index 7da0d32440..867e457571 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints.md @@ -23,9 +23,7 @@ ms.topic: conceptual - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -- [Microsoft 365 Endpoint data loss prevention (DLP)](/windows/uwp/get-started/) - - +- [Microsoft 365 Endpoint data loss prevention (DLP)](/microsoft-365/compliance/endpoint-dlp-learn-about) Devices in your organization must be configured so that the Microsoft Defender ATP service can get sensor data from them. There are various methods and deployment tools that you can use to configure the devices in your organization. From 0c2dad2ce43bd3ce7da2959d92529a3231d3208d Mon Sep 17 00:00:00 2001 From: Dan Orum <19275382+danorum@users.noreply.github.com> Date: Tue, 4 Aug 2020 16:10:11 -0500 Subject: [PATCH 560/589] Update web-content-filtering.md In order for Network Protection to be used to block 3rd party browsers, it needs to be enabled on the device. --- .../microsoft-defender-atp/web-content-filtering.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/web-content-filtering.md b/windows/security/threat-protection/microsoft-defender-atp/web-content-filtering.md index bbcad993a7..1bd463d9d4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/web-content-filtering.md +++ b/windows/security/threat-protection/microsoft-defender-atp/web-content-filtering.md @@ -49,7 +49,7 @@ Before trying out this feature, make sure you have the following: - Windows 10 Enterprise E5 license - Access to Microsoft Defender Security Center portal - Devices running Windows 10 Anniversary Update (version 1607) or later with the latest MoCAMP update. -Note that if SmartScreen is not turned on, Network Protection will take over the blocking. +Note that if SmartScreen is not turned on, Network Protection will take over the blocking. This requires enabling Network Protection [on the device](https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/enable-network-protection). ## Data handling From 161a4895911ffe5c3251441bafeb6446fdef5c90 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 4 Aug 2020 16:02:13 -0700 Subject: [PATCH 561/589] Updated TOC and added related topic links --- windows/security/threat-protection/TOC.md | 11 +---------- .../microsoft-defender-antivirus-compatibility.md | 2 ++ 2 files changed, 3 insertions(+), 10 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index ca67afe7cb..41cf1d1943 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -169,14 +169,6 @@ ##### [Restore quarantined files](microsoft-defender-antivirus/restore-quarantined-files-microsoft-defender-antivirus.md) -##### [Manage antivirus in your business]() -###### [Management overview](microsoft-defender-antivirus/configuration-management-reference-microsoft-defender-antivirus.md) -###### [Use Group Policy settings to configure and manage antivirus](microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus.md) -###### [Use Microsoft Endpoint Configuration Manager and Microsoft Intune to configure and manage antivirus](microsoft-defender-antivirus/use-intune-config-manager-microsoft-defender-antivirus.md) -###### [Use PowerShell cmdlets to configure and manage antivirus](microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md) -###### [Use Windows Management Instrumentation (WMI) to configure and manage antivirus](microsoft-defender-antivirus/use-wmi-microsoft-defender-antivirus.md) -###### [Use the mpcmdrun.exe commandline tool to configure and manage antivirus](microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus.md) - ##### [Manage scans and remediation]() ###### [Management overview](microsoft-defender-antivirus/customize-run-review-remediate-scans-microsoft-defender-antivirus.md) @@ -197,14 +189,13 @@ ###### [Restore quarantined files](microsoft-defender-antivirus/restore-quarantined-files-microsoft-defender-antivirus.md) ##### [Manage next-generation protection in your business]() -###### [Handle false positives/negatives in Microsoft Defender Antivirus](microsoft-defender-antivirus/antivirus-false-positives-negatives.md) ###### [Management overview](microsoft-defender-antivirus/configuration-management-reference-microsoft-defender-antivirus.md) ###### [Use Microsoft Intune and Microsoft Endpoint Configuration Manager to manage next-generation protection](microsoft-defender-antivirus/use-intune-config-manager-microsoft-defender-antivirus.md) ###### [Use Group Policy settings to manage next-generation protection](microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus.md) ###### [Use PowerShell cmdlets to manage next-generation protection](microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md) ###### [Use Windows Management Instrumentation (WMI) to manage next-generation protection](microsoft-defender-antivirus/use-wmi-microsoft-defender-antivirus.md) ###### [Use the mpcmdrun.exe command line tool to manage next-generation protection](microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus.md) - +###### [Handle false positives/negatives in Microsoft Defender Antivirus](microsoft-defender-antivirus/antivirus-false-positives-negatives.md) #### [Better together: Microsoft Defender Antivirus and Microsoft Defender ATP](microsoft-defender-antivirus/why-use-microsoft-defender-antivirus.md) #### [Better together: Microsoft Defender Antivirus and Office 365](microsoft-defender-antivirus/office-365-microsoft-defender-antivirus.md) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index cdb56d3bf7..a5221c20b3 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -97,3 +97,5 @@ If you uninstall the other product, and choose to use Microsoft Defender Antivir - [Microsoft Defender Antivirus in Windows 10](microsoft-defender-antivirus-in-windows-10.md) - [Microsoft Defender Antivirus on Windows Server 2016 and 2019](microsoft-defender-antivirus-on-windows-server-2016.md) - [EDR in block mode](../microsoft-defender-atp/edr-in-block-mode.md) +- [Configure Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection-configure) +- [Configure Endpoint Protection on a standalone client](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection-configure-standalone-client) From 7064d6b867f36e72910cdeb00518f85bc64dbab8 Mon Sep 17 00:00:00 2001 From: Rafal Sosnowski <51166236+rafals2@users.noreply.github.com> Date: Tue, 4 Aug 2020 16:13:03 -0700 Subject: [PATCH 562/589] Update tpm-recommendations.md Bitlocker doesn't require TPM + added info that we recommend TPM 2.0 --- .../security/information-protection/tpm/tpm-recommendations.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/tpm/tpm-recommendations.md b/windows/security/information-protection/tpm/tpm-recommendations.md index da6eece1fe..fb2784e2d5 100644 --- a/windows/security/information-protection/tpm/tpm-recommendations.md +++ b/windows/security/information-protection/tpm/tpm-recommendations.md @@ -112,7 +112,7 @@ The following table defines which Windows features require TPM support. Windows Features | TPM Required | Supports TPM 1.2 | Supports TPM 2.0 | Details | -|-|-|-|- Measured Boot | Yes | Yes | Yes | Measured Boot requires TPM 1.2 or 2.0 and UEFI Secure Boot - BitLocker | Yes | Yes | Yes | TPM 1.2 or 2.0 is required, but [Automatic Device Encryption requires Modern Standby](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-device-encryption-overview-windows-10#bitlocker-device-encryption) including TPM 2.0 support + BitLocker | No | Yes | Yes | TPM 1.2 or 2.0 are supported but TPM 2.0 is recommended. [Automatic Device Encryption requires Modern Standby](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-device-encryption-overview-windows-10#bitlocker-device-encryption) including TPM 2.0 support Device Encryption | Yes | N/A | Yes | Device Encryption requires Modern Standby/Connected Standby certification, which requires TPM 2.0. Windows Defender Application Control (Device Guard) | No | Yes | Yes Windows Defender System Guard | Yes | No | Yes From fb00002de5b615d3ab70d522b251e7c4be605eea Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 4 Aug 2020 16:20:14 -0700 Subject: [PATCH 563/589] Moved the managing AV topic up --- windows/security/threat-protection/TOC.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 41cf1d1943..2a225c80d2 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -133,6 +133,15 @@ ##### [Antivirus compatibility]() ###### [Compatibility charts](microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md) ###### [Use limited periodic antivirus scanning](microsoft-defender-antivirus/limited-periodic-scanning-microsoft-defender-antivirus.md) + +##### [Manage next-generation protection in your business]() +###### [Management overview](microsoft-defender-antivirus/configuration-management-reference-microsoft-defender-antivirus.md) +###### [Use Microsoft Intune and Microsoft Endpoint Configuration Manager to manage next-generation protection](microsoft-defender-antivirus/use-intune-config-manager-microsoft-defender-antivirus.md) +###### [Use Group Policy settings to manage next-generation protection](microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus.md) +###### [Use PowerShell cmdlets to manage next-generation protection](microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md) +###### [Use Windows Management Instrumentation (WMI) to manage next-generation protection](microsoft-defender-antivirus/use-wmi-microsoft-defender-antivirus.md) +###### [Use the mpcmdrun.exe command line tool to manage next-generation protection](microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus.md) +###### [Handle false positives/negatives in Microsoft Defender Antivirus](microsoft-defender-antivirus/antivirus-false-positives-negatives.md) ##### [Deploy, manage updates, and report on antivirus]() ###### [Preparing to deploy](microsoft-defender-antivirus/deploy-manage-report-microsoft-defender-antivirus.md) @@ -188,15 +197,6 @@ ###### [Run and review the results of an offline scan](microsoft-defender-antivirus/microsoft-defender-offline.md) ###### [Restore quarantined files](microsoft-defender-antivirus/restore-quarantined-files-microsoft-defender-antivirus.md) -##### [Manage next-generation protection in your business]() -###### [Management overview](microsoft-defender-antivirus/configuration-management-reference-microsoft-defender-antivirus.md) -###### [Use Microsoft Intune and Microsoft Endpoint Configuration Manager to manage next-generation protection](microsoft-defender-antivirus/use-intune-config-manager-microsoft-defender-antivirus.md) -###### [Use Group Policy settings to manage next-generation protection](microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus.md) -###### [Use PowerShell cmdlets to manage next-generation protection](microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md) -###### [Use Windows Management Instrumentation (WMI) to manage next-generation protection](microsoft-defender-antivirus/use-wmi-microsoft-defender-antivirus.md) -###### [Use the mpcmdrun.exe command line tool to manage next-generation protection](microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus.md) -###### [Handle false positives/negatives in Microsoft Defender Antivirus](microsoft-defender-antivirus/antivirus-false-positives-negatives.md) - #### [Better together: Microsoft Defender Antivirus and Microsoft Defender ATP](microsoft-defender-antivirus/why-use-microsoft-defender-antivirus.md) #### [Better together: Microsoft Defender Antivirus and Office 365](microsoft-defender-antivirus/office-365-microsoft-defender-antivirus.md) From 218bfa1d910e4904adaa978715ab8ca2ab2151e0 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 4 Aug 2020 16:33:59 -0700 Subject: [PATCH 564/589] Removed duplicate metadata --- .../microsoft-defender-antivirus-compatibility.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index a5221c20b3..8f16436956 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -7,7 +7,6 @@ ms.pagetype: security ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library -ms.pagetype: security ms.localizationpriority: medium author: denisebmsft ms.author: deniseb From f30adbdc59a4b9c288561fef67a9e3eb58f5deee Mon Sep 17 00:00:00 2001 From: gkomatsu Date: Tue, 4 Aug 2020 16:40:49 -0700 Subject: [PATCH 565/589] Update enable-admx-backed-policies-in-mdm.md Clarification that the instructions in this page will only support a fixed set of policies listed in https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csps-admx-backed --- .../client-management/mdm/enable-admx-backed-policies-in-mdm.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/enable-admx-backed-policies-in-mdm.md b/windows/client-management/mdm/enable-admx-backed-policies-in-mdm.md index 00caaaa35d..86a715cd03 100644 --- a/windows/client-management/mdm/enable-admx-backed-policies-in-mdm.md +++ b/windows/client-management/mdm/enable-admx-backed-policies-in-mdm.md @@ -17,7 +17,7 @@ manager: dansimp This is a step-by-step guide to configuring ADMX-backed policies in MDM. -Starting in Windows 10 version 1703, Mobile Device Management (MDM) policy configuration support was expanded to allow access of select Group Policy administrative templates (ADMX-backed policies) for Windows PCs via the [Policy configuration service provider (CSP)](policy-configuration-service-provider.md). Configuring ADMX-backed policies in Policy CSP is different from the typical way you configure a traditional MDM policy. +Starting in Windows 10 version 1703, Mobile Device Management (MDM) policy configuration support was expanded to allow access of [selected set of Group Policy administrative templates (ADMX-backed policies)](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csps-admx-backed) for Windows PCs via the [Policy configuration service provider (CSP)](policy-configuration-service-provider.md). Configuring ADMX-backed policies in Policy CSP is different from the typical way you configure a traditional MDM policy. Summary of steps to enable a policy: - Find the policy from the list ADMX-backed policies. From 4ce7a1e8ac2b4d50b72720c119ab8876aa3e1660 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 4 Aug 2020 20:21:40 -0700 Subject: [PATCH 566/589] Delete autoenrollment-policy.png --- .../mdm/images/autoenrollment-policy.png | Bin 138584 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/client-management/mdm/images/autoenrollment-policy.png diff --git a/windows/client-management/mdm/images/autoenrollment-policy.png b/windows/client-management/mdm/images/autoenrollment-policy.png deleted file mode 100644 index ed1119f45c800e1d9a2370407b0f78e1c6cd431c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 138584 zcmdSAWmFtZw+4y@NU&hR9YSyou0aC?cXxN!!QGwU?(Xgcg1fu>V8Z}|T;A_H=R4>8 zzxT&ot7m3)S66lQmS^vJc1^gvtOUv@{7+C&P$)koMHQi-;9#JjU|SI3->2H z_959vK7%?|H5N5pR#i2Nx@QQv-y-t=>#$r76NeI0!1}KPg<=Nre_BfoDDk2HyGa4- zdz2`J-+ypU|?G}M2FjldVrM;H3funGf`>@ff9p}67y_n{k&=vNDB zdb$S@C|onW*8j@Ct9h*Fg^`8c7Go(Q=v|S$XoZBX>Xa2#~wW6{QS1@{KrbY2K-IkZ1gR&v%H8=MXh-U zesL~+>5;3mc~=97K@Fj5pbs%F@agTTpvP$y8Q1)wZ`QA7FnX#cPgp6a^4KSAqvK15 zpk~wo(&is&CcaSW98Z*v#|^};C2?fa@7@944>ty=1V3*gq6P| zL!1_fXf~o|NBieTR<;CmOiUA5F|lx9I&Z-}GT=x#LcI54Ud-Cl`}67itZ8Q0Fzd3% z(o=xmdeE@VswNsLZ#`$m;pe!2UZ!P{v}r>)`7E%;pASK2X1j?<3D3?%w}*sV0aYzq z+AYd96n%S@|L+mLn1b?F!WM7!$ii(%dM432FTv%z1*q*lQC~2d*W0sL@SY}$#FKpS z^YI7jkKX$J!SwYe?s=}_1@JgBz4nA+Tn)U%NBTbdz#cyM1|*hkk+9( zgsksd!ermDJ`5ej#b*Z{A7dUWD;FZy5)XqHd~qca9wyJ3(|EMqUP+Z0assX4?$pp! ziOx2~{WLQgoEKGgyH?mk{X$aEuY9%;+!E3C8OInZJ2!2Hht8;g9m6DQmt}dbf-57x z9b0d-+l}@uwVYKgFGBzE_W7!~=WYkF>TFJ|g)P!I*K{aF*lvuRrj}lL4|o)sJoBGx zF{80+q@ELN>dY5YX;qh%foaBWM)_Q699f`2rd&P@z{^z`X4Pe9D)BTICsRFt!IZEnTZI(n}T8Id0Bc=W4Pk1Ib6T zL?YVXbAi`+}omoZN5zQtO(+KUmhWy1Rpu7nVb zJ_Lc`5LkHQ11xfo42(bwm+8CBvBSU@=dnVyCqFhe{{H3DL?k`ztOV3ccsjAynryqHjx$~0vcFVSIHfU3bc?=OCFKcD4I5BUq`<%7O9R59O2R^QEvR3k6#zp*Za zUAqcMb8C0UWw1`evjJ3$5LTYi)IesR1EnTeNEHdMOUrKoo*b#PY}QrLCA-iyMfi&L zjum#IvYh*Q9le*vmrHvoV!}Zqmu}6D+8&Pkx1L8=3U#8}t zl{tXw=%21Gi+Wn8R1mMi*jq@sku;>XxFhOiBXn}9$VCU`+!G{eVYlJISu|s(QNZnJgTQWQ!z-0tgpVqnJ`BpcM!OHSwG;pI`O zvfgzvzhByw_U5Z};EdJ6XX;cPhk1>1M_fPUSmU~AN6;)doJoDgRe2hbU)rH}G?+V~ za;f^)td`CZ)Y&0i&%aLdZ>22h`Gkj@8Wsk9pm2V5Li`QNS>}SEA*NkRjQg6A>3Y0; z7Jmg^JX}vTZ@<0#<#-kpih3`bLL z)iDe^Ptt0m95!ZWid0jwdQ1(T2O1;cT%Ij6(1&eH{QKM9P0wW(qzCdbV4{)&uW3!x zwMY$4CD~Aij^!`EJnEQYN83ZTz7~5}fw{(no;3Scgo&2-!#ugWs2b8x%~$T9Qvr&7&OCeZCNz!Hb^H z;%bEbXFgu>O>F3uE#m=l-pM@|e@v%`%Ja)|SY?jQ#gx$H{9^2&6cygJ6X>ZrRr2!P zsSa~d?nwF3*R7D&;+w}=#{`J>cB0sViFz&3hv!RK@fO{B@2Z%u!=`cv-u?|wR84AT zR}1~cibKb74S>F$e{<>kG2|(Y-S0N5(nwlkVekB`+qIeT;!J4dRRT{b1XH`y=)KdmZ3= z_BrtLrtKs`o8Ru+S?0#}*6Uk~^m{nv?CyrH+M$&_NHMr@B!TO`NAPBT^d%ed;#dUo zgt$=CZnyE^_pKSC6D3EKVp@bnO!od=rXT#8DV9mf(Rb%2Vv=6WIF8bJ$v23Qcs*U*E9ZT?Gl7-mZedTSxgTj<)|D6~ zT(-|0%uY4SNifmcKb2 zwEjfLmAw=tf)Kmg>nV5+F^B#EmN10Spt$CA1u$IWpL4~>P*5AjrKdziMHv?ser4_m5mn;J8*4YVk6c|Gu)B?E=+g55^uR z%RRk)T&DMFnhzY65oC$n>a(*x9a(1GTe9(k3ilUyNDkZUev15TiRCbxO#S7v`7TMv z`tz>S1$xNd=??rN<5T2Z*}VZ(#$KSduGtZBn75#O_^mup=#9@Y<*c%TPJe_m1Q}|F%X; z-JnbxL5`iwj|Dfr1i$y}AGqIhA?DA~ey=XoIeh@%oGnX~2dP3;>^)Hj%>H^_2c8Nz zvj*09PYxUeM`T30S3;6hJqh)hl80k;ffO6Auz_KLKg03E_IJnVguM7MrKNjek+EXl zKL~gC_CDhfL@qDm8i%{n(vD7)l^&ZoKy+NZr zC#}DnV|dn4PvzeuPT5!LRi&CI*0I;t0{fUz<95^L$4jQk3@gqbf$F*keCTR55TRdP zvnm}eqTa4Jl|4`PJT-@RHmj`%?OaMB{+U2gBCS!ojOsE0NLNi(x%6!thXs#E*Z4vG zL{C-{pZcYk)00ouwqy2$W4Y`F`?ez@%@OidTj5tHfX!K9iO-fY_rh*>c=Pc$rpacK zHTz=buIe(rL*|KW&$~{ttBy!(r4!g~BQ+~D$8ubzZA5hD_O;<-&{5fNH%4o`h zNEU}S%g#aS`0RrJE8H{3!)!CZRXp6{F=MNm)OqPg3kdotz-pqW4@lthTjtNnrpVXb&J$OP?~(^9g|pp+f0J;W)Tw?! zyeixX8s%zwp6Vn)tv(q_0-Qw_f~^V*LX*If7%^k16|XGLuqhg~npDSZDXseCN6m09 znVp3?#+)&a=F%;mrUjv~ypiOi1QC$!REn`}duHJB7or0(P^%Q=1bZ@^!y59o2`Wq> z`6s?pW|-|lwXIQ&x!d{$dg8r8sx$lvpcRIeaVz>_3OzGNtcBc*QF-T9YgKCbt3L2f zvXk#C6RAq%gucC6k88DK5OCV{l?CBua-rv?L6i6r`uF$$I0kwCi}p!smkEs1g=P3J zj>%C0mIFriC}l^;n=Am;#At4YFX&J9aPvHe^_1oCeH0xc|6GJi3I4WkD`GYo_4Y*% z#u+CZ1--Q(D)D-W{lk^;5OQhtVw%xA?&m8PJ@=oC)^z*MD zL$oA?wz&6juMLqqJJw~`vF>R^qmn1dKU!kWftd&8<6pD5#Kh>?S*K4XCRE>;n3P(* zAM3eQ|B(m-H^atE(uwXc&A+F8`gMOc5^>4SJDlz!YkGch&o}}14u~o-y(ogX?hXa$ zgP`L&LP^MG{tzpI&(ZA&vFmwR^#1xzUKPM-VcmIoyBR1`zR~ z|GW1HbAUM1zlRC>%o_E-yHNc9qf1FN)WyLVhj#aD%>8`@XRwR6r3J=+i^kaAVH7bA z7Q~X5XRp=KOfVIjC@-Ju^t-UZ}4SolLlo|_M%K^qRzr>qv`Yg z+>y{k;tV&aHT|0uJBU$pxhvCo7?Yw(8Zc7%&(}MfSfU4uKd4uA%}8vfhN-c}hFqAA zyDwF3T&5f=xfJ|@>c3{NSDsjN=JK#0?nvB|>-(Zkw%{4ae{?g;TRhC_(hGqN+z7Gz zBAp>4ve^AHQf?(uCCrfdNo}ZWHZyd+v}^ff55YGFF$nDxM09>+HuXY`jUD{L&C`fy zf^TU6RQAj!!}Efz6};ecv_e50-~wy6C&n!uC$x%(#wDjj66)YYWm)dP6Ff%IqED5g zp|0xKmg{SnW3bZl&9bF+H&GRz3x z7;Z!u(gCzpQExtn;;`nrWVKoXAiIGtq_nfMy=HhwDSGcrGMlUfR0Xd^`0kuIpUH=x)vSRM?-F-?p`O2JcI9&|Ckw|;H147q%9zgk&HYoSA0$iHy8pSi#60ixl4A0=2rvXsx| z{IO+WQE{pMa_-Y=cBo4qL614SFw54zTqzs{M(h;0`0(sKYioRR=jJV;)HT8D)w3?p z-Q)ExwW|q3i^Q`!lU+*dze{9e8b&|XG5;idKEF!~qQ3ONrC8@<)2} zjV&=wn2LfzgavkfHH%{3?^k+#U0q!eGXBiWOjvB}a59~m@*0st)R=g0CihyB|MP@? z_?QcYe%0}aZ13ry;$X5x-a@*$xn=iuE@(a4Swc@J5YcVW;bPf7DMuOTj{A^yb*|2L zedpfBCkP(Ec4wBQ;cTeX7tndr{zk|6XW5?aI_ZI+G>s&jCj z`%7{iE_j?UDyNa)ksZeN33L(^WODih{ zJw3UR-1m4WLeVSsk7KC80?wL<*^Yt?FIE%7qUePrCHWSsBJn)Z2kf%2^ya{U_ZGs+YqKo9nz~RXXr$|yj2Vl&j{MF3*z|i6PzZHh;8{8;WVNDX z*K~%dbuAf4xqrY1C6jkDExtY~@LjK!T-AfWxKp1@JBl?MRXEY*%lka@cQ$PEcXBa6 zVOqegvxf9{*`Kv?QwS}toqo@L&@yf?A8?dv_f%i9w}xwV>`L;Y^%U4#@y6P0=&U_h zsmt#~8RcBHyq0|Z>nSZgXE%yidFKK^G^B?Y(>g|R;!SV?$dFVhQzV4>?pQ)P+1;iVVPKqT<9R&jr|`#N!LfSd+Es*Y z_4L!{lbw)UmD_FfGBL3(Vo#$`nhRYIHnOu3b}_x(QUR?QQ|1WA<%K-S4qgEDC^@f{ z$4)jE^Ad^^8kWAVYb1t5iKLp{Pqm=4>I&$klERX?$DNEl7T*!bL#uwp=%H- zhm)oq*^ha>s#CueaF}pTRs+xhYm54)of9uph{sqqzvlhv--<4I;+FC^_>NthU&f&Q zpG_*UQ?=6ba2``#Rt$gtShrh~x4N|y@11BQ`5oIwQ{(+oIOWxcui;94SyMp{w492| zcCNbl+V7^h(3Urmq&LQmu?CTyHV{hH!L_L%W|&|g|K*?;URz$%QktzrJ;^Y9a&fa{ z)WNZSrU_nG5^wUfN&?r=OAAiPjWuC{T*NNYT}gl&DWmX?UDn5gMUDI;*x)+7eAKlT z1X93?WmFjP2tK zKy3f7H=674$`)7|c&|}5@1qBPy$BYEYQvsJBz41JhtVE3q1YzcLc5wYW$LU0_=}Ja zp`5_l z-?4_HM*KjP_GqW!wB(b+$;yS^Lln6n2~YjIvh(wU~F<(3+CF!kdzPz zofF-Mi>Lo+o3NAlAlvBiPPx)V>ZEn&RB&pDv*-h*^umQIyyk4youh6xqZXzF?5yC{ zZy@{_R5#pAKw+v$S#&eOt+w*1_U_A54cgAG`r)_C71nlZ! zIqU*o0i6za7dShaZQj!tz#B;58tj9=L-JD5e<&t6T)y)5;o@3w&`eA&uZU9ra}<;_fc?JgX+%Rqv|~Ve(zx`?(*}8hU|=Bi?e__ z`*7qlRA72lb5r+mbn zF4crolX;p7p%QB_x(m(J_28}v()FyCKjLa?Sf)6CRQkqp6Cm<}-Erl2MKiyyMoRAU zDkH+`6hByk?{)E$yX`L#Wz8>)3t8gJ7;@gnmmk4x0_xU`sWn^H?%fSYyo01G3ODw z*sa*$h~u~140N)RO$O^sLIb*QMkCG|j4H+1!;f`A1B!J7eYm^%H&lhUqA;cY9?JeB z!`o(*Wgf3jsMs9&LU?|7q7OP;^#;_NuV(`LVhjNtTc6f}BZ#$?>)8)1&DEd&-~)>u zgqlmJ@?WMtgX&J9Oox;6{>B{}Lx2`*z*t`br+~nnCTHsV5DBu1eRfnv*JhhLGq~1e zKsisY9bxCqB6mBEqgAqhJcz0L9voi)sVFOhV(?hIK3%g5I|}J2rO=QoCX&IZh&ETN zB1t|9hp^N8K=AmQ`0)C|o2J99HfU-M~jF*Zf^TU+%D>{`z8rmg4SZ z_$QII$^w^{8sB4Rt#0x+$Mlkqa!N#C9<0Y}hQjKC?o2g@;Xu5MvYWPei7CPlHJknh zqoIbPo%+Ye?M(FC)$9(3!!}P$6RassBO6xKsoyl&L_mXpFyHtn-($02*kNXZFY=%4X2Eg;*l5VHqVb7V zI+r)Vlmy`Jt{K-&F1DDxfxhsOSeeQqL0O4qYZCoQeJh8oXs24j>sgl zr9;ls8k)=B{n<9q5H78sgufl;8c?u}t`J!2$fC{`@f30WCwl-Pncbx>a%V0Topi5e z)&HVm$?!SoGi8dUJndOy@sG!YB_|u^^-d#&rS$E8Ig?#?BUDXjICQD*x)H1`!9A?b zcZ%NN`@}*Cs}uc{rN3?=L@1f_F;<3o(K-R>PH6f&GlohpF2hClboqftKV1kLS)`dA zwV4ku#zm7QE0lDtVuNw%PN|j4NYG0ZtFhIu7teMdIX_l35H^aKO;y=n;+Y&*Y>IZG z=Hw(-6F@Uop_ASiMuGj_QYKV;GRIsAV*TQs>Sm6(cEt#bPqtOV%#!NrU|0aLhHK4G zl`_~iHR~&8)+FHg$f>uO*|19uWB^M(Kb;K?kppy}I>#(5`uD1DYL|b7nPD`|o21>f{Pwx|=pRM_*SoDO#KWl}`j?1;gAq)Qk7IFVum=1l*MR5qZr|QO zw3yyZL6fQa*Q{10F>hM3JfBD%C(puD#(rKPRzS~2-k@@ z>!FYdC4`O3H=6aqIugF7FHT_73OT2y--{5xgc>ivgUItEgYQETa$(|WE*s@-v9n=+ z9sO>m%J7t8^-pz7!l)Aj`h)rkIR(3{@J)4$PF?4F8LewP-kONU)41b{kZ3Yh3y?~R zvJ!4d6jbzx(=%%nmdAa=-v+j21{o@ztcfAA;-n zsG&=ZkP-tgYdM_3nm49S1J8|SbWXRKW`Rda<51RUP{GsUk?ouk*{2T2Cr;nz`KDeN z@x(G}#gN@W(S9cJhh~=}h1A9>4%eF3JT%31cf5^zlE0u_w2P{2Aw#C3=E&?4Yy~%R zbplOM=MmYn&~cZq^S(cA(}g-o<5d90kDpM?j%8L1wTkr6Q|ydY1fZvfBFxCBR_xU-u1X~f*k!cgS`Xc z8P@Wnp9x@0?cb;#D|N?0HeT_l`u{%PJ@QknCFnrTZ#R2h{!fmDJc4+2f7f4avlbtR z5qURDx&OT=B1TI9dCBGB>CA3=!FDh?GTEF~Qh4;QB-TNe*j`cOClruNYhjn)Q{+)z zmwa%0x+B)1$)2$@7AheZRF|%^qVlZjaJX!&<DBl zuAGsw&d6gEF3Hsln=Sp!;x&WeKI;9uq-s)=elocyX|ocY^!7^^qHUz;N6F3(ibN{CJRgiQf#jCn^x=At!ND&I5rDCw++U} z2qXXg!Vk>rFUb(re{aLP%>tpI%vvgFR-d1OiuRK=LMo@w9cs^o>g;4kPjCK|*^H{E z=AV*|>prDhR_MY5|m7 zL*dp1Bi-Z$_leSrhCH_mod&egKA;?$7kC9Z=3O0m|no8%L0=#ity z{Rpq~)ioM|XZla>$o(GeMzP#T=uUvoj82>Ui1BTdj$;wR8)@1j4GIt!lqM z!pvHtz*_xdjIchh88r%~rM!#$0H*BB%W#WJ{-eL`SxC??0!iU_dlnTg!$5Lf5oJzVl`KYbVSMc30C z5f(FGTy+NZa^}1P&J~FI;d0E?`$dCpQVnazU6gCFN-K1%#kj6_lL)41@8E!19*2d* zmdUQKlizHjXB<}nzYY%Fi6Kx?y2OBSks;#zk*d%u`0?j*tx4chO~Hl|!ayBY{dk*R z?GV(@SH*VcHr&s$E1`rlGxOn%GCk&P27B-`H1Xm>3j*gl4d^v8h(jyz{P+i>JNb#U zIKivUu89+)x8+%6p&m~8+K1jeY;jgG7bWzE&s;`u`-hhjlZ$^J9y3KIm&`a_vnEev z9RO7~#GshJQ%0aop;kNOfh0fYV`B|t1UD#gA@HY#&4SOZqp)oKLV&{>D?$wil8=k3MTPVQatYKTuJrv)4(im3+? z3i5eeV3+0*kZH_g!Xxxo{%V#<#oXiAGGg(6(_+*@dd&SmY+Cr*Q8+ANIuZ zVo9Iv{|BScT4&E*-0x;JxZ&uK2OOnX(IRV>ozu25jcq%SbbVIm>J`G8rE^$xtB8+3 zSv?#So}$AI--jq)+)Cm%JR)&5F9+m&Nw6O9X$8C07#h22oqk?w#H-@wt##XTmEmN1 zElG4hDMdlP6F5bhv5meCyYfY-d3z9uI#&tF>HC!g9IgQlVNgwW_h5Pnrh2|vZk*3M zEr3|>2T5XzhQ}r@bf)tzve7@+H=Bv~R`qOMjFM-Ig}in;Nz6sx=7D8}X|6{4^LXy9E#ON`gwIf&-4k@HcQgP+bhXja+l0F9h|*m?_NOg? zkDXHk4_ePR0@!^z*utrKeQ}g}<>7^$FNiv@$dF;%fgb1Nissnd83j3#&_4-xEW)JQ z8i=~i@E1dCGXS&>Au@LnJU#^l^8>|cE52oHrs}rYr#?YuN9Tp-I^r*p(0D+y9S0jH z9&{-K6P*i6B?+pOFyfmCQ@;;o!^zMU1YXnLZcmoe3q))i9<^DZ(t3IaOb|TQJ+5 zy0=r;4^dEvLP#S|)47?%V-p9-jjBMNY0Q%3wY*i_QM&eL8sz!yPhf0R|2XV-F0ztW z9wWGszMl)I=b2ytxMQnJEy}I?g_kgCQ+cg6_V#NO)Ga=Apqj1(EUedHTh`>3UdnB? zYnauhc7Y6&ZmoFrCF2;?mYHk*u;xY)3+a0PVWWcr=~@P6e3o6$QN7V$#eaoXdxd}n0`k=g zP|qB8gOah5Sjr>bTB#J6*dM%-!H+M=Tt#`@aYqT>F&ahGt*8Govh>|lgA{!YA;MXP zBPq!uLO!+OQ{U_D z)qEmb?YvhwV$Y{dBvpe=;4ATMvPA?@zEZw$-=@nl@5zT}&`VLVr}}RA_t!aQ(8bV0 z({bTpIsz?GDnafF%a@8Tas!EWj{{y-5%pHRAL3hlx^50d+l+Oya7P$^nv4As_cdX0 znM`LDiSN0l;e$*nnk@PGz2I?erRej1m^bhVG4#+U{FIK;g)p^IiU;j@U_S$okz#nx zq&LVHZyUr_-6?l5jVN#Db*X!q)~w%bPEs;4=fmru^3iTh7}(vN4cwON@x*OK8y zR6lKyqY#>}V;p9W+_`AETKX_%TmFxY^HiFd{R>Eq;KC-|Ufx$heO;v0sn6K0W`2|< z(YzkMe^0KdhSBc~{AlzdyLN8>@R0Net|jN`+5q1|2>~xdfenE##H_jpvOri%1;3JV(9=})9V1@ zEJgYK*f%pHJ#!{cz`%@Op0Fr1HQuw%!$mC5=3K@KgEm8DO-PLY`b2xub|kM{`Q?&B zJ}z=Mlbw>9+9wv27`k4`UPwhn#?XP-_QBGinYl(8(h<2LW#LE|2{66(5P;;p+7!9=ThWf6>8WFjUhBP-eMK*k( zQSW-WZf_ft8D79q_-nMqkVTvCO*)OQh~x-d6f2O|W(BO(jaEwB!^McecS480FHp^! zlYm}8JQNg1I8!$heoKGQ5Hn0f%!)$wtR6*p0*w|Mf3@VF~XFbJhObNZo^A8qq+&d*y7QE%}gI`+SUZo_@C=x)EFbr-Lr@CJ{F8H2*Zg6-~ z#@hL5(ZwVgVQICe%m(NeLMz6}|+8@e3i_g52Q8LCWGC89*7vU6P{k;z3e`3L?mx@!752#PbcIuY<$Mu4FCTOhFuau&Eu0QZyZ3^!z zTRN2W@yIY*N}(C;zykLQf(*+)G|DXr# z$vuQ35ck4#pUY=7CAOq|lij+$CAz}J#B8a#p@%9mEOZ(GSYq9PT zGPXHf>!e?lUx8um8wkX7JwdIvoe^X8&{;(EF@F~pCdKHf(INs*-szRE`{_pdAfJ6v zZKvaG;-OO{aH=|KJ6!;6X?6Dc@c_&D`>+wDdBPn4vW(K~@bp_lkm8v!n2!|B0y+Q0 zOvQJ}Pb5Xq7jGm$&fl9Y_r@FJFZgw|O2QdzgMD<`zGopO5{O!r-$2D{5P~Y5rrP+u zS%`^;ebFMlpDSX^TiaP2*{1pEr?Ku@6f0ot@ryB^ja0Xc!NH<-RWYBA?d2sQ?Hu~W zO@Wn7aCH$1&x~*~(ZS_py$iANQPVHi&WjkW9p^UWR4*4+6N!cCEV-l6eENiMyGs4q zmdZEZO7ID?%H@Y~$ryS{WghoyQbvPFJr<PX$1zKLzdE<2J z;#m{xS}8jF7DcaiX3}-jLM6wqjgfYGB-Mdw(>nwinYrz8;|Gg}%tUhiy70}NqC&VE z{g=y(nQy^2qU_qu5PR{zrx!1_pO?nF>2KCwyGzb@f#A)au2x$(N-}O*_}{7R@>?E6 zOFgY2XMd!W4-O;!J-$edMk;7lyS{EKDa!}87t=9o_n;bya5GxY5BM-);p}K{T4er| z6jBz2k+pIzopalH0!@9`^;oPF5es(bFqcv|6Mfk)rY7Tm#oe7lii=;`x;A8is_AdT zU|1FCA%o|inAYQS(;D|9GlP4cdW-0R*u4dTQB%n4dwIsIzQf$aGKdW(NYqjG3+T|X z|D2|@>9vY&9T@f^L5<*{#Yjr|8c{cIV7;0Wsq}Z@^k|g~0piddOKv>pnBm{`bPeyX zn$&~!U1dRJ5iahXn9qX7gEk25x4%fVdbt0iX6W~ZZR_k4QW<4^zS)F82Ll_QkQudm zn<{Vf{K-PYEU${;k6O-Remxh`k>k|1wkyVDR{X z9zj;Vw$(fdr%egOd+iv(H&X@-0;U34Dnc@2cPA%tA^LhP!GR$Kd zgCkf;+UO%4wq~QAZmFid<=}&8XA!x)KK(6G{OrJrumDe? zIk;WW(DcEk>ihdXF$u9YREAY4?NW{j*va>=Yf_Mc zuYM2$-k>{uTd_i&76#a}c>PC5iXIk70=JtOp+D@V(b%a>Ti(VeDbt*GRD(TeN1%Q0 z`Vp>XB#`QuR~HfGc>yg#|7J1HF<@U8Rr$ML?zN!p_x>!E()WZ#-4PBB4HZ;&;+ipO zi?0_k#m70qH>Ec`oR4yg5=9F=yix=VAa3D=%#MpZ?9aZ}R)RjyGKu4+XH)`;<|8J5 z(K!An*6;fv7j+86#`rN(dthn?XWRk^I1TyQXdW>nq)aH77?704g++kEwUsO8^OGe4 zDMDUZxl~@B^o@a|YmBL68s|%XZLSbu>c~{2JpHVEKhAwN2GbPHmmKT}u6=!_!xG6q zOs|(8sbeDTSvRv=hqh9js|K(l9_A;TxEWu+9}Q!q7OHJh?yfuizLu1d6%lpBtM)ea z>lTZQ++~~d)24v$&^&ftD6L{p`fDbqu|NNIKCi@uN#L(kq^97g8@jkko`h9F!i4Rj zqf9xeb}CVk{5K*ck)b(SZyz%*Y@hZU?fm! zVnglVHstQIZJFZ?dVDn{qUz_7LV20etc~&{i;_KZ5qh?}`y$8qMh0~Bh?X4Q`Dc&v z1!dYt)`OqTE%;P&t2{G@Qi={&T?n=7cFn91vXV;Fqbap~&4Y*Fr$}-p)~WBU=8UQI zB08WC2Wgoe>MAM*vL(t%E#NcwU*s}PDrt(*-;91`mAavvGNzyQeSK#5r@Z}6y*^wG zkY;ixhEEAVFfNFCi{OQn9=|i1zk5vc7}r*EptT5vVdE0ID?LWh2kL7ViBHu!tASP^ zUbr=^Zu8|3xu&&RBQ3;es2_+9VJBHft-UL%K!%J>k?yzb-|lNn81X!3DwiM03PXiC zVPvT(xOu*CSLu}6R*EQj@L*8vI-DA_CnUt|9nb7>dC+2)+zvu1{r*7`JwhR2FDmQ} zpeMHYz%9w2NV+Q+(#pO@a~*6pMaoO{Nr7fXazcO(zU@Tv^ARPr8L5(YHL^0&R6aBB z$C=@nU3Is0341<9ypO*RKYU1LrU{FY5|*;$xUrsW5@19)@Zh4mNyPGilbCP_CgBgk z?dWt_l5^mh#gHTC;e+`pmOR2(Rtr(-7DbMbl2=T!Nu9D6M&1?GV2u!6|2X`a057Cg z1OeTZ5+;2*e%==M(Xg@xCecf4T0|j2K9!p$FANah4egGOQ-bfD4Tf}wTejnFC50miO8#fi|4x=XQj+O00 zaO5nCQX~X>VA=6GpuO$@0e(G@Pz3uarmseKR=n|rWg<;30tEF6N{uK${^!`VyIt?j z#VpPWW+^U*9_)+3#Wp6R%#k?}sqXAQg8ZkEfri_}KGtQd%WuOuFHqp;{m_RF1mZr} zy#VINs#J8!nAlq0Zu=!@<0SFkqnZDQy|;>sE8V_DDImBN?pCtzrv{vVV&wE%2L1}`}LSwU8?SW;7jY7k0syrQtM&}hZZM&_(_<7&cWwa?URFKCQ6u)$f7(IK|y z+S-hJY@z7ub8Lq1QD;wHxDex^h;vrvMFJ*E@ZWJ*d(;YJr|uGy*td+vErIZu9y z!w0k~o&?HjDj~0@Q(hn`Nm#pq!gbiBAPDW(R^NiQ4 zokNRDybBh8O$2C^GDC)!jHh^Ja;4BlU!xwx%x33OqVIkS696ap4F|Za-*Lrjs^xCK zLEYOcE!fi8qbF$8CR$JDekJ(k&Br*)>W}S6s>x9Yk!qi5=%_epQMDVly)#7vBhz(z zwi9x-;(3`*1r#$xBIkZno8oKc<=(*V6+5dW6GfOhiHv%;e3ey1XO}V3AYSjrQ5kmx znGw8F){YGqPlLnY3Q_eC37Anr{-WD9mW!K`8`_Iyzo^(aI7i&4o` z2CtN1B_o6h>Lx2;64>ygAdb`%X8&H3%CQYG@f+TqD8A9!??#V)D9I0`*V6j7SOJ>XMiXezbQXb_ z8g8%HCL5G(C7mdAolkLUZ==%lURME}5a;#d16F$)4@rebaF@fZRs0Np_NZ9av_%ih z5?RT18{DN}_1a-A)_$qxSp~DKj}@9*nNCdYP$EQm^PB4Seun3X?+}~=>8t*bZZAp; z$``+k4(3)i>MO1dk8ZSrjxc(Wo$g$lH;lf~tI!M{eYXpE0ih)RK)}|K?&TY^I|L`= zdH;NVC*rGkw5GY&hSI~!0nrM)%isZ}@5l%5Z+VA(?(HJeYO#*JLhr7;y7%GOTdvrZ zOrmG$Y(HKXfF0$4m%$K_ENInOa-yKJXMg?rT7;opD&yj{uJr>c`k^eYcbXq}lpI!C zEvCgAoY;?~F+HmEU=kNn75eD)4HKiedUtk3(q)!5!=4fB7K}0Yviv{WF1QAk?u`8r z;tfjszkC(JE$9sw)8mTn-C38KrMI*$lQwDOft6`LmgoCuy)eFX#@K`wb#>qjURR={ zVys2-Bqm!Bza^b5w{$v}!l(XP66?uF;A)}j$Wx1PZMNgI^-&ijE|=mIONbW{iKIuEvpC8LOl={9l9m-(5a(TOZ$w!LrGAgy8M z$GV|pn{zrdlk{3qOdKg$v`HMrhUqJ|3Fq(x#+x1IPfkLoxYRKPl+`j33+9j}u}543 z-9gEhR^YB`oL0>&m0#{0e-(g@2 zW!GiDrkP)b%rBm|6h00Fy_3P$532hS8XZEc+ngK~gEI&q)9Aj})Q_Ij;$MG6_l1Mn zK?LVnYm4md9kWf|@n*D;J1vpXI`4ozS*sf@5{f;v=MY2HHo^|R9;%61#0YXvB3~7= zP}Z?JURdJ2?2%yRI*1 z9+n?9O_sPpT6abQA7wH}zj zSP?N>Y0ztf09yUmoW@HCJyv_l+Eiya^{^YVEkS}VQeM8->{nV-lOiH#9R?>$w!|Q5 ze*g`r7AW+lIkbkEwfPEooD^Oe7j^VTWaV`ZB84(9N94)zWgklMpt;J87tj0G?X_B# zEr9G!@edXnpH;=B#irF@K+_JRp$3(Jr_obq&;aE|6WDNG?1V6yRFvt)bxi;pKWZ)# z+tdoZ;h}M9HwQ&M*eX=m`4w8CwaWcgQbT?_lAb!-D=rf(-z$!;E{u(nxI6)Tu)j%v zG__QZ>xqmQ$|&C2tB9X1(Dbl?04^S4wrn-DGo>s==^Db=S%cP)#F+@oa(THfFf)X5 z2bb$3H&&c(G;@{@N}hh3xB(ji-Iu|(hxwOPq3p9c4W(%4!QVo|_xh0<@}(8ltUmW= zNyuDrrZbgFxfLO7ZEewQR%~M+_RClWblwB@?;kBeWHkWO5QrL#} zfV^0s2ML4{{Z!-p(X5~_=7x*YQ9(}LL+ETwJ-ey|G(C?jU{_QRSm-QgOQ)6APv~xb z&Xj#K%otB3-r2j|JP&Bo->|ZokxPu$U7if&B3*fVce!z}xNnAO!&mG+hCSXGJd%t1 ztb*=_xeo6s9xyKNhET6|hjLy_Ol5y%!QY`yGCmU*4d7I2^M}5*T*w@M&+fYu1@jV) zc#l0)gdps_P$=2ar;{UbvEpPdPgDyT;IvRO9$?f6H_(W$~B=hw@J4 ziq2kR&ITpXFbMsd*z`o3)ByXO7HqTW5lgGaAe+PKfzW7a#WupLn$S)!AkRr3m9dp& zMa$3}pP+H4t?Y5&gYEI-gV3V(D{5{m&?D$twatkpv{Jq-9<8}1QBWy zhh!7+?l{M0x#C+)I6IcpAX<#&FDRTJqjDyf7h%Jdyu$5yzVUmPrDxkpISnV~_h(fB z(uDBbb?ila#=-S=|+YXNQnD zW*_Uba`LM1&r_w$4*ljJj03E|yUqSqC4(qp@+FbmxdzLgg09UqO8++x++A_WGD5ZG zWm!J~eOH78E1lD`Nd7f4(oi4d4{Hyqz^nBZEs*7e_r%q?y^tyYEsUk(td|8{s@YQdAC+^ zbal4g(IKR7 z``^sUP7Q51t2F)gAQe=P{`gk3?cpNrsOVx@_qdCIEJ-;Y*FW-3_w!6`Hl-NsZc*b4 zHvD_ZKthI@q`5wa6maav;270nM+JkJ#GAb%?;VRwSq)>{T$e>HBBZbqAfLP!EcdGIMy33f-^| zKTze`WFtakZ#`(y$7k~MSZq-7qaNr*PH$f>bHlP}qkCs?!Lm&=P9ATqF5N7J97qee z{}dHDX(KGH&|ADmy}N_6Aj2ppv%?XXla+XNra@B%MSir~Cifs6#NSEzh6uWOueAJZ3HznjSKnu<4iYpgm}T1FGl2_zkAR2 zCJ$T1@d&mU%^)|g2>X2J*LxDsARx98@MQrf7{jQm*pQEB4#~WK1G^rbArrpMWKFVn z`cfJnJGwW#)0>kCjdd{5h8DmW!n^R%q~Z~}HV_HLU+j#}cN?kI;!Pt!&Ir-wHgN`Y zU0M}j%9Y14d5QP3vSS#})*F_5IoP-0*FSNAo$`qdEV)%uQfvnc241V{*&UxnyxU@i z*{z>L;+Rfja9<*lku%Mcgo0})kdz0pV?HNa22n&vCh9^Y&=!t-A=zLBbl$?(=u#(V z^(RRM1|0@K&5b24&=O z4itrvk@3Yhc{$@Z)Yv%BUcMB_NcnK!&54v?g=bDFDvIoM>hwaMQReg-;b&91l%@_H z!p{r11?EC_@YW0ADDDEqwRai_A4k*iPcyO8Wps5>jB!wubJ`K~Y~adu2c&PlSpt>F*rdXhfb6Hnw4X$KvN6dXl#uZUf|7! zLMZFY33)x~tIXF)k}nq)liAMJsD5o6M_neecTGNevAClXQUjvGrxnqN>NJfspePzO z$%#B*a|^#iR!+kXtxCF`%aXN!j>q;6Q>NEq8|30_T>90(CrFn;>BMQ%DP81KOym*} zhWUEqGU)1SBYKK*5!86fvQ3#nXmY8RQf=bNC{vhppV1}^*edo1yUt~{_0p?A@l;p&v`dZAOam5W%|7xwTc_f ziu%E&ccxik8tWo%!|6LgxalIEuXOii;_IQXhkCVI+1}46@q`W1q7`iFiXX!Decls% z4AAfUDYv~b@6JYmUG+KGLYL_WAu*vl3Mrl1C*0~%>SF#VK{ITLU>LL{i` zJD9s0u{kTReskB$dZUx?!@-;Jq1C@+gjlzj zQT>d$;2Y8^6j?-4Bh79ev8?+%FJiV8m^s8S@|3WJ}!8NW#^U* z%qj?niFaDFV_z=D#vf7`@As+iNepy*&y{p?%2?zQc!bo>tiE+y*wtDVf=@#Q5;zc4 zlPkn*y0=1z)xtJ{`TBLfyA^>_v02N#m;E*3>feL&=Opiii|fx`A6kO1+kEd`;*w-_ zac6gJWtaxbeZwQ{06)iZ21~3!Tl76^YjwoWQRwS8;UK#r!X*v$*%W!0m)*2x%B;U^ z6gBzJ8|9ni~4)( zwdcA7HfFwMUC5@H*0pB|&zd4EDi_AJ8gHc@ zR`a$8=KD=UkK`Tg7Xi((-ryU$G!Gq}R266&JaL@CYw}mjy_6M-7M~C^NJGO#c=)Dr zrFyiBQ@lkzqv?PPYaHq=i1g5#ybr<`fRFdYK8$;qSfe=0UCN_Y%^-P zy5|i`bw?sKtmo@Z11*BZ(Ef7`eP)D5^bu;sI7B-!6mG6KM-kNNEZ5w&GEh|RQGCl~ z=Qs!Kz@>to6U|x7`?Vsdc4RNJ;%cP8j0xS65Kvjh_$!fY#+n6mUG6H8xzvqih9DG{ z%^fCG`o4ZzD(V~<^x2B+s#@~5VEyIayZ*8rj&k-+3>G-?xm{c&5{?&I9MLR37%}qt zi0;>~0+4KkZ`Wp?>P3IKXeIJ6TbeHD?T9supn5R3QtrL@0?DIu#BysDeN;sjq+Pl#M>)Yb+X+xF6BPf zH#8>mPLiYkwN9&6l<98sq?`N;YaK}eGBeeDFv!c={MH{04m+2V^&spCGt(-2M5pBN&w+9z;SFsPMOCMW8VP z7T27bhDL66wQB7$xc{%uKb=_!_^;dc1V@a3Mv^C7@<$RyDEa5VfBK0?_W#na92Az8 z_7tfW{CQIvH{yIWYsKsgfV=UTT__4x^xa!lHsl)fcXkLh#Oht2nqjXcM!tRP{PH^K zuWy*d`Do0$tM5-+n&uxA_;WUiXP-=d%XPR^O2*O~-#q6tt1kQmL+956X*h z0lm_-W#d}GMWaK~)>?$czu*5XjmAV|%Jac$9YBxBtqm<#!{nXbr5@mA!J19>-M)A6S`g9HEZ)RGhxbv*3t1Ir493YcarF%C| z!g*8_1vDOpSv!@Eb++Z;%i0lRRJ`@C)u_M>3ZbV|oO~wz0c|$OO&7GwmyUw#jHfEC|&mO7{txAv7}cFNxglG ze-ZX>pJf-r=x5Aq>BqT7dLm6!-^P-_E-4H0;T?*FdR;@W95wVL37T3sAWS1SGv{ffjMQ_k26$;4hrVCW?a6)(UC8TgF#d20XrxF^nz8{u~|+n{ns{tMRB@Kb6Bi0OmxMNnur;vzG# z%7lJ7ar@%fQSX49?D}~tu}q?C$9VB`Kvd^(IVRraBmMyL_0A&ky(wYzc-LpYx#=Kz za>JS|V8wst`ktp~dKwGxX!_H6eXBSm7(D*{yFa(ZsNvy4Ezpbz;&b>B+0!F4H8sVs z?WbQM=i?*l?BW6@B0^?oXTQ3>X5@bM_U+s8`S~JZcB*>R<#|ztr3;ikhvCkPNZDx) zl#KW9rbCR{3kdRKGNZGT-_Rs}JA7sXA16@bh>Rbd8b&54w8=Zv>D@qRD;^|%_n;7o z5h^G79Q~CEA7$UAHfMHL=(mUqLw6%G9#_FoWM4#P`pB-Ygsj-b4(m$+q`mOT*EjgK zKU|1|-?Hv);)kYuPPUON@^TyA@S|t$Sl8)Be}X2Qsd>3xa|j8){c4&+ zTc<^qPyR4WY{j#l{(j~P6nI2L2pbzlLPA2ZQ(6O)rEFRHMT>=?MmmFpl=de*LMs}z zJQgY(PJbr`^?V^6s4uFcHPaPq2c4c^tuVr~kuL-CNOHe{6`WS!Sd!`0ZzS>I6#EQ= zLQ3N;oAWz84!7dq+Xqfua>?l&_Y(?c)hfP5MczoMezSLYrM(MVL#Ga7zBJ{npVjO3c|}e>W11t-Q&%+N zkZHOyh^&XfaWAjp(XMnS0g-AapDvH{8%6u|mW;@+b@^eO!*@lt6-SdC4mY2!zEA0$ zh&Yq-Qa{kToepWz5Iggm9GFlTUoV($MsU@mzApohTdCD)4=W6H<#ew<@VlK%|21>K zdTy_r4|bFN`i$UFy+nht8uXcn67lYSxB0kD+R2GiN?LmD__%@)?(p!i*h&kyp5~>h zoB3PEvEjp$NQSD#W<4~irZ-rJ)yNS`JuuG!zoj&Rn}Y6fG?NmIu=>`lPRjy)M7?RN z_`cGfeK)Tm@$(rjc$&TMEbEQM&PO8?ISP_K;p}vxXGp%+)m4O|bTDxX9tSASAI5%i zo`g*?$p$Snx|1u6@1Iq9O~}}4x1%I~baLrQ3v&RG>Rvkuz!*6-WrbDKC(xTlTS4rV+x-y>G* zUU=g#n}p9})Uj3|G&tG^AmNCS*kg(Yc|qSp-F4InIsY)WsC{I3C36>XxN-bODJkOF zUy}^tO_rx+fnp0m0x#$X^w9^vgxFcohsKX!3mOaL0ZjxEQPC=&Ten_9Wq!EQNI!aC zKd+-^%$W9HR2up2+9@D@2YAbMSTF?#0_gNDO*p9NEnyfB$hzCSYrmqJ<3>gNfVEJf zJl))m?pBT3_%fv~-bO?4(foVQ4a9sNl3dA!kmHm{GvlW^@9w`bp4?vBIel#pB@|+0o3rsj+y{nGcA5qyAeGu5kP`gUi z1qIj<^zwK6fy)u#ue1uNqQwMPv_)-kYpyS6%it0%*y&4K7MBIfPQ6y`FH0e2{pH#9 z%eSSr9ajzoy%-Qy0;g+O_}s>fOC!n$;n$B}{iXMUF8wV$t38QpxUH`ZFgs{&1C&~V7+~OzR%3$e~j)$(u!fl z$?Q)oRQ5nXFu94xN-whM{(>RMu-}ao%iOe2oKt;^H+6#tbNxy}zro^i-Qu=dC*I)Y zmYWmbync^Xz@66+QTyUX#>5DHpUQHLi9DCG%)!dd_)-wzXa3Gbnjg z)7ReHwJA`4{J`?(LmVGXHi#P8Q9!<=jPdRKK2@A2}i###3Z6gI!NwX{ZG zZvJwP(1m$Jzdn`o+yO5}L3C*Bc1Q`Ghu7j*9wI@xuTvf?Zn2F@C@PA}`Gq*1$+H3n zcm3TvSU30sS0u|CcWF;1KwawXh5gH?(ON>*uhUQ& ze<5k{w8ZBqbkQ7s;MwDobwE>-keN}3KVZ(#u8xlt4-jf)2(HF{3&Lc~5W^?iv!d=! zpVv;750K!YtcQwA|nK4Z1tX^NSad zex8y%U&PO2pDj%Y!1u*39)x}ez{o@cWlubbGTjmS>=<6Z5Zcd) z9x5u4DLUu_vxbpHDt=?F>)z>Qg2ijk+3?#fW&E0?ud#i4aDUAR8f1h>jKWtY!{Bd5 zzaLEn)sG;}eKkYP^xP(*%`1P^Mou|P(hc?q^uzAVh!{*D=R(hJM*N% zs}N}61$*TC6YUm(F+4~|{20H%TffjcIvJ+89!sN{bcdd#%Q`DhTLUf_4XfMN_k6Ks#)@t1h16C(Rz9-8KV2FruwpAiGK1&wK_t-izq7r)Jy=bX} zv0C|WnGuG^CZV=?MrIA8&Xe!qA&G{qP?k5noSsXJkPel3VUp~MF^PeoFs;itW?4VR zEE0STScGK+JV|@y0O`SAEAvr8TH`{7vC4zMZ6#gO-=3%USezDx;kUf7gxwB0mKt4}nLF?S-jMVdD^OiQ;KE)fn(??Lcp%_KP=gM72w96TYn%>@ z#&KrQxz3Eq#F2GDlwY|}GP71RZ0_CURc`p!$gNAIw-R z4v}cXrnG>ai}Byz-^b&Y7{#g-EAO-8hQ-FgsWR?Gk&%^M?+QkJ+TgC=`bA2QA|aum z>_KN?047OLKcYoie~$CsXjr_4z@@;>??W%rc#qp7Qyb7XZtXY!T@+&2orn&X3RDDd zXSWVI_A$pgjmPprap6p_$={8Q!e(#~mrJZ@#f++nUzHiGh(aVhV|0;Cg80lVE+hR~ z=LG}p|E*QrkwsMBK3WOraDI3uW(v4f7XJ9qYQwjlfSe<+m@St#Y*9d-v6VAd=Z4dF zX#p=#x0j9A!iPT^bYCZ;BF<>W|0N>iu z5)a){gIdrMpu{_|=ryTnzvEzLMg{Wt)(OCSFmRuGa-j?gfLa{=JDP13 z1Ml^X4%T?eGdPDd@c05#!K!B0%8J4KD-LmS3V!<~WvnwK}*BOVG!;4Ltnwkf$-}DJvi8lomKC&s@cIEvJi71eXkOq!y!i{=;(GJ5@{~z zu8>qdQ8^Gv4Q{$&`Fx1k7hS*7WkA5vEe|xi_6G3B>%rlV2u8-g&GVe~>*R%v|EihM zx7|J(Fgtw7A-!oAHoU?F^?<)#YlMKfkImGX7%iz@mYdv9nzu8-7-X7Qe87ct*!lI%g07P@N z!#aA9xQ!);Ee9v!U3n?{c49nr%vrb}>#?t_)F0?k01b&=EAPV0pbr93>LSx&KMLN3X#lkF9nbj$WJg>EbI5r?+3k-P|YvNR%_p zu<@~(F!^F<1#Ee4(-^oh9VQuyNf_wo@%llb8Vx(pjY=Y3^oQ<6rqH#5(t-)SQM@~n zhS)i^)a-Gmn2Xrq5SQ`h3;C0ij?e97ooFhU!LLLG1`9eQMRhI;SF-Y4VzU^j#dDBS zxX7CMb*9s3^`-0~e^1%dbe$yuVK;V2+S-zhus;2#{#lq`Weof)XSE+TUd*g+lbcj;Bwflj# zGu7&O_}CYD-3$oxPfc4tiFAbpe$2By*w>D=gAWk`v1ghN@`b==RiBq*1H;2NPDs}L zS$*ka8TQ`R5h%21e2_|0$t+2vICU@i@lJ2CbT2Aa7?6km zD=ZM>%Su>S6nve{A>AAzgV`L0xjqI+7F^Yi01Qa$ zBgmC!!#{QnDBb*N3O}fh&J2_zNBo#I%NcY)gNIm~xqjH!?k+CX&blFS)kssL^nw0M zL{!+!{gHiICGHm#SM!s9xHZ4tk6SVSj4bhj;-7b9x{@2Pgp$BP8+jIrsvE7`C$bVBLpwRID{{pxJ&g%as?nn0^Qp5Xmrkb~`XJ=HqDKboU`OIB%h(rlrND zq=fn0UKoA*NSiF?BSfc|9tx0#CTE-9JT8~rpRxhkPk4BEPvZuxb%CQa|3lFi8yUgB zd-ra2IE7oQ*^L#SMavIZ_Q1FbFfT7}xM23|KH$_Gv$UiO4YdEv^8y>E;nFU(N(7k_+@LwHNkHr(g zoYneWU3qM&`>(DV0xf00;LSI@_Bfi)MhZuwq!tt@N>48RW0Wv+){sLd-*t}XxRsai zDq~ggIQQTKAK|eBbK!w9kFexxTuQqb$Iq*p!8%P>TW5BI<{6o&qGVBQoi z0Re=E2lwIOA)Ip@aBxozF{{k@|L)B`IsxCxM$t^K(35!HT-n@&`X1<$Tf+Y*wR_?x z+4NfqOOa0=ZjU#BP2&o{tIgaW?V!iq60G=^!mLY58NgT=z7qv zpn$&4VWpf9ZqM8g;Bz8aap(VJJ)+7 zPAMKwDT+m|H$Mry|IM(sw-uz2Ut>b zuFgDJQV+wHm7_0c2v#N;0i0uRe=PNSNmbCNP{$BAA|(o037{;}B>S^zY!X@KM~_8D zA_w&k^Ac}sSKjfd^e;eVitO*g)1W$VqJFw34trBYgW39QXbc;%704n0Wl&7#xB2Ar zs1Ln&?FCR1(k5&GfUg>-vlR;}$P_q$d6LBv>-fyjP0 zkp_);H3TZ7a9hISSbrJ1A0(~u=_f&?A7#{E0yy4kxrfuTtRzj zE}tjwGP+ui^F)$4tgY_Y#VKR=_d=> z;3;M~JTH?Z2KBFPTo4Sux5v*fL+$IL1-vd>lG=iSIjgApC0*bG@Tuz@5h&y>VQrB> ziz`W;H&zgDA{oX~>*{4at;dcGxC<4yG7)GBIXlYoye*aFWI^zrTnVxlAQn{zWt^o1qPoSdgpYo+^i`m_cu*&!wGu; zsKKa`{TTIc!5TKWaOQ%PSz+_yzDSs!GRB_ieRm~ZFtCZw*4L1QV{;}iZI5R~S=$w3 z0~?|!49~BS=aTcJ%|G$Lb^(`(^>DW-A9<9?sLUEIXWUze$oYs);XyyBi2<-neP}e&+Y9qE8?rw`6s=^CHGeP44>~3H%IH!e}QUP8NVhBWq z`xfHtIvYQXs3ty6tvdPdE0hSEE?J=Tl^3?yI6Epi z5R54nnsv7+w&aj<0sT*;Zk)8bQwpW90ZqS0{lS5r8fWq^p+rK3m?zI4~ zf1k!}fdObA;_)80*kIE5?B2K`DszKq9m%(AMx9Qqxy)rVNR^Ac*{T)N z=SMHK+Ra4i4%v?F;MHWMN!Bpx#aqM06yr#K4}BA?DjMXtM$sFgoIZ3n%e#|3Ul? zw9y|UCnXi|QJYA=4`^tEfA(y-ryMj&0{TziHx=eC*Ko%#;MZ83vp}i6EXuD@tDXUy z^G2~6JZ_W;=0GN?v+ei|$HWcGQ#Ibl)*0HkrbViqFBI!Ax*U^U_UZJO;F{L^mKF<} zE(|*WqQ}+(p`bD2KSROP%nTFqdrwcs$HAfpXGeDE7A7WUKj3~FQf1Q5R1Nc#SzwA? zNpONTVf_<(pCz&B6|)E>CnN-4TwLf|q1FAjj~DTyyu0&W0t9rP$B%%csescud{vH)t$fFi$=use*98{h>m?wfLzPQn|w0(X-I1GMA+q!ILccV=wxzW&`w4znI0WlZUJNs{b~o>WRK@ z9I)Zb-6+m@D)^+)J-fANEjvIunGm61(YGEfser=N6{O4AKYzARtZ4Gfz@pP;+bfw$ z>{A6jppO*^xI0-AkJ%{)k_7YrOcH1S89-m1-D0KN;al6~CUtG*)d==BWpji9Q2P?K zG5~EYKm!|GWy8brr8@N(ot>R86cp5>7K3fJ15dZYL_dFHlj!`)68s-puE{+!_ z*^I?uPP^Xgr>l)S4xrdWr^&&`CpaNM8yyFW8A&FLAqFy8#i;5TM<;P#RbZ8k1P?0$|1Hz}jv?ImMKagSvo|}}Bt=1%c zUYm^VpsycmXe&CkC>(_tz6``V^8u2af8n9-E~K9a2QupF30wn7!Y~6VptBXdW;e!s zzh|B-KpvUK@1UWNI505a_ucZ{$tytZwIue>^91BHApA{ZXm4+?fb%92P?zKMxp~*} zd*byIea+!{X4=r)%-jq&Fb_+>uCEpqh$VFd|L{|ndx}lslh(C>8HnoraH=pczok5Q_?^B!Ik4EPppU)>ON}@HS=E~<>g9Ma z$4Ns&vkL5CmUedP|NY0AA+X{#igyH;y;wcUefm*fO91OBoBt~Jce&)qE-d#C;q2%J8E!XRgBH=$7;a^#;9ureF zhZ&fK1tx(eXg&)F3cmDsyiIqz0Z)&c8MQ;OS%MeV?;K&?+o1ceBos_y$nZ|Fh6U6@`?T7zGGZy@ZY} z*11+#ng2VkY&aD`gceotKB9H<=|Qa5LZ-_#MUqHP2>(1{XJG9C zTNN!WEf5mV5S=Z|VS#R%KLs9W?T-()0-k3yVvlz&w2;vkqu8+(Xddt18{b|WhI3}y zBWMBMjJ<{)up0D<)aCLeEUy?CqvrhxS1dTKr)cEQ1tTjL*m}_{`D?;Jjre7g=%r!L#8V&w zgH_COR53GM`2Mp43TKgG(a%2z9E#OqtDfZ|@PcClRKFufe&iZF(n0~_He+UPP z4_p}t5CDw^AjdQVNnTs~Emu}E?9iOROCHNEqwf)jwH2GeuQb5usUCOQJDsi$VPEM#hiJTM5w{>TC5Y5T(C!J zF+X2Ww1|4yx{KIvEODBfHO-?r8p4PEb`_*bzW&J|lAq51W)*aqE%RBY%W^$C>UT%- z_cQL44=U7{`<&-xfTujtb>@Gg&a0g)sQxwWV@XBZ8!k?)Z_nYr_*c5@D7FC1yQQ`D zo0t89knEE8{BC6{0b!r&s0;`q0%s<#(on`f){|AV-6H_wN`AC%NLYHnVwVVi|52ps zM*Cv^2o7p+okEY#t`nN{14U-MO=k0FB!}B8h#@Eb(k)^O(QojQW*PQcB9gh`Ld`74 z#qNCQfEA#A%K$sp!u0{FO*-GmvXX$RJ}*YG*j@J1;4w5M@EB+~x=i8|A4%hFAehUQ zSU-6yEG3gVvR&MpucBvIbEPk$Jw3>E{^>&7{yjNa_`A?-rUIu)Yk(QMk0x@t26MQ@1Kk{ezsLy%t$66O(NeOdP+-G={A~EB*$35M`BG;F}a#h2XRO_MHX8 z2G8et<%Xzro-93c9}MIyqcH@9;^^bD%76bcqQK+l&ZkPD2mmau{M$zBs!0NBc0ca> z{PNTI+}vD7nE#8me}EzXxwXU!H|&#{d>AsOcw|+Dhl#nCodb7=`P&D$fLo_AOlYWh z`xa)q8su%%1kxPk`tJ_^a9LbJ7F29vpva3yRMNkZU>7`>mSJN9AKKZ%IgQ!oAm&f; za6-Oxyq%vdf8T!G-*8F5zVVP$Pf2eL-ga0D1(S1*^9&IoaoNYonIKQpAsC%|v=K`T zT>cl3|DGquX)#KQi-*U^{D7(EjM}-kXMHeN1?RFe`W#TPzY@A90cG^ztI4&5yGnvQ zJgs1P>xPM*y>idR+Vdl>I zktPoA%u(+kuu0>Kp&r?2bdS*YTCYjc%LCp5tp6h}lrS}=Vbg8MHZ`XFSn+H?05I># z&ZbOqL;uOalUG&_6Zf}gcJ?H_AZZQ%4wL@#v6L+*xiRdBikWlCM(g9Ph>`>IpRc|qc9&9IgP{V`XL=0n_GUDnNOL8vrT;2_t>4oqidH~A61<)~Um9v|o!MK~-+ zZMf-kl5S-OKisk8Mcy|=B`APd%#U(AHj`KOz%o(y%;cV#o5LoBA?d6!RD4cpp4V`qf}V;d>AzlfS}08t z+__E|56R~?cZh`Z^_iLNVja58YF`rNi+jg~%YPQhM((>=6(3F%Et$KShAdiYm zO)Vy_N4A2W0*qZ_4#ghv`$p>)x(!13?_XsR)}Vp_MpAzfMZq=q@ZoM-^v(jYk4i6y zpJ{D*jY^E9$Xg5_BKN+d+l0p34c^$Si3e8R=_cx|FFKad<9vE0dBeGTZk|g%2?;V; zA^X%B0L&fxfDKIwH6T4sK*Rx1>7IT|o zlrlV79*}7y)zIxeHG`la8LNa1hYiap4DDK5ZS7A`|5?Q+hFXmfa z>nYb`!|awi%Jn+r$znN^*J%vR7&oJAzwBXyVs)atleafF889{eY^6C;GX-3$0pd3! zqp-O64Z^iEB8(un#6z>qEL$&bC1p%-NQg0zUIUpL5fKpwaTJC=GG$Qg|6=d0qUzeZ zb-~~e+%?z=?!nz1g1bX-cXth*1QLR~ySuwfaQEQuR+D7^`Xh>b>1YQKE-vsRJ)Fpe9Gvkit4r8avBnYj0NxI<%N3MVG-1;Bcd8C z__RbKV%h`-r1JZRWdxFQff&P;-RRW+Nd4Rc%}ZOK?=1n+P0Fjpf?|Cd>^GrX?{@H~ z$Dq;Y#p7Q|Gx`$=U^-%qPWQk_>ZN0%1 zIniylQ^s^Y;i&uZN00!Y*>vZhaZwCo2((_&j)iH6v z)EpCZ0n$}}cA>J9pb5&CS}s!{)7#GU>dpgG5Jm&Am_FrC#(fTXjKX<18boJWf>l29DTFUp5c z1%PgP&8T+{W1ARxm?25AI*-@jdib!~4hGQs!jsD`1za^%0#Sadz%kvvs0}y3Cz~;t z@UF67YbR~Ks52djKwb&;^ks(v@scV`n2C6r=18yuUYg_C#4o5hAANeU7(%MfCj=W1 zQAdp4D$+?9ni3(`m01yARAGXE3=!|!HlOy&^mT7H!v)e?k$rjF*e3kT?mc!NXmB;T z?tF!Br*lSa9YJt5Zl|q8YbPfy*!(_r7)#_q?Us667Ew`VluJ?G5xIuVVU9tOH>Pr7 z&A0lVq9CbAXr|lJQ2I%HA6xz?&tvwyr(e=I+ZE8Qa=bCIH2~`QBdAg2u`yZx@cfph zH{3D)Ruoq}nlNg9QToijV#!`0$Wht$<_V|G(;1G(@X`#+*?xMWrXKD;YCsLxaQ(5O z&vMfu?-JZ*-ajsqBd?k~tCwPGlrpWt)# zuZ6RE+I1qjEjZ1Pu>-F|PeWJRK2Lz1QRc_4e^5{;e@6%itJ#&Wdr+BIv#7Itbqan; zTuxkGh6-(H>pCQt1DQ@cAUMm!FtoBsP%gPF%9m)$6+2UTikJ{5D!+_MAUhOa70SI+ zI9pGlEc95Y(GYyt%Nw5UgfmL01k2gspnF)D5+%_7XC5+$PZj!{S-d4I7`~R|y*RvV z3hcLc?bHTPJ#NX@a3^$OuM=ZkO742|jJ2Y*W~_VH3#BD({!%f-guQ z)2biFgz6y!rdo{2KkI7?2`~*wgz?Owf6FJ~2ge;rubps1=pG-R`cR@hl z&CH1|1*B_sehnMt%LBTzSQS{WKV!&$ z<5!{bZL6K?or9SWwfOB6v#K|FaXuf-$Drg*WX%v?SbcVUcP;l5axC9MLrKZ`u?i4 zE*hZ49}483;6-{{A%4`e5KhU!vUb*(Ya6??5U7&aEp$$#2jY@{G*>-1ply%wwpgy5 z-uv7lc@g4%o`+-<-oMvIYTgmWXh0f z5!C&QHwo)~zl5_);AGwwXlF69*mq1`gwRGVb#sT)(4PV zLo6U1QKzByIi=_LUx~eH^~Kj3lE>7MW(=PNdi)!38fXc@#G_YQ#QX^I$9Uh2mD8GS zTY}91+?4mW!ZY80*uQjc0t4q$@dXA&da)en5JlFSZ8ACzZ{BLjN17Y-a!1~W6C{t) zi!EX{L9sM(O*mA5n|?);w;#~I(ZEJnaFiJ8@4O>-M@&*k{uX|?aZzu$DyF^Vpv3n* z+H)higx#{VdO9mxy#?tiij`7Ava=uvGMO*Me*v18D_(>7Rrle({j2kpL#_uo-mBsb z)669?0{pMN=Q_K#UAS8U?&zJuz=S8FRM>msw~|~F4cHKP!lD?|pq@9fuRs*8lMGRC^ zJ3q*^1+;4Srv3C{bjZ%G>feIVm=Vffww*@h_cd%-%){84OfdximmqE*W2JYxi1hVxBoS&6yW^wHHixD0w-H`gMf&|r@Eq%Mvv(#HLK_tI$_;)ZeWk!0 z{>VDem^+C&^JQi@RHNuLc4o-NuD0XvEW8?53tca-gUO9a3}{bK?2a4c;R>IsK#e72 zMC-7`0@yS8ZE=Cn7eaoHCf2_-V8^v#xV$MM4cl{u=KX=PtbK+tfngYZmRq}bUzQ`F zS~KTgKC^A6<+Ob!o@pKx@(JwB_hfp**K^zAv1FglBE1`-$qmOXot&2Y4fY zq}{s?FQr;KE~PFSLptGU+C2uUoiZ?t)ZwRVP85i*_xarN^W#S4gkIQb%x6vpJqywE zq`j=(o~^D%@Q)xXA^bePSdd=788*6|CR!0sZG}Gq077FDLOwk`g2||MrubkXy%!R^ zl}HSHPg;+gPcN9r{MMF`)paw55q-WJFFbc2Y6;{z8Zy1!2bJ}nJU{83Zd7)e5oCLi zzS^cG#_6y09{~WAQmV^ZvbjzBI!9Jq0C-)lBYKvoNBU*uBKi@c?U_bQ4p~%2mU$Gv z`wf7n`Wh?gX1kPdOn3Rb`7@8n{@IJ?>`=_>lM$p1+R?J~`2~{WE}a69nt(do$xfalR-MXvsv(j3u7#^dN(3^8UEWYJHb+bVW?y zM+IiD8}e=QbJOt=gm9ONW zz{7A_6EAm;=R>uNi)uH}1O@aJx`Eu%jAv_9x`qCr8KiT|UB>UDv8F z9vRc*GF?CAAD^*bHlta=x#-yqRs&wrTKN4VHu_&)&Ypa4>K^9DeAxQP?a`4jFi}x^ z@I{+9K5zJ&YG+ND@fh-C<)3vDhfk#UqKigtSf2_6z7-Vd0S$UnhAla8B@dFU9jq=h zx3>?s`{k#X%^qK%?(G$ndZ;u07l@zlOqO>{GgX%++u29xy)%z3(n&Da&5h+9%==3o!fD3D>AR3Lv zm%5%Wx5g*%;f4uqQNyH}%OllcveP;3&_3jELgc48YCGzOs(%ZyLow;s;52T-J`eps zf6`rv$uIFxazBBU=QYSzNX*xX;`+d$TBfc0HPs@KNh10pcxb<>-lL=JkXYk;WTZZ} zHb*6*w3@n60plBctP5HzIfj+exZ}46HFHO(U?(sG7DKI0NuXi?WzwfB?&j`B(}J2# zFxaOe)nHFB+aI^!pjW`r}DgGp|65j0j2|2y9{EZ#IQ zdu-CUpx)kuVn_Bvs7+wZgiAlWqPs7rqxcB(Mq-p7iv~;cC_zvOPMPr#(47Z$DMFF3 zoPuT<|BF4}pj83_ZO;pxWv^J!}9#i?4qQTJpA z`ry+($P#{|7))zlnW+^v%x`JGtEFN^l7dzU!*WQ@=`za@RuZkkj+s+4ih9 z%7WhSt15NdDkbcOgZR~g2> zy${lUkfoNEk-?xZ#xF61)UL&c4jc`%AI`HH1}*yr=vKKT)SZOvZ<4 zEL_&l5F7%ch7AHRwiSyeE{AHlsBf=Qn^g-xL1vS!g?I5dG2*?YXmiW%bu%z{x&F<+ zsE{~HC+&lv7P^fy-v>+7cEiqs0_~Y49@87Xy!#~~(<4KT6@2o`*R{ZsBC#y#q*_Mv zRiZBOOQFq~``=H~$n}KerJP?P`Ntk3C!V;{t$me9p8S7X&%F&<4mIq8y1TgFtE8+y zt`^eEnlZDq@SlKy$&{r)SAW+Wn&4Tg&g00_c<@5>e6K-sS%DMvnHhWIrfGugj+%sy z5SvXlIKzjCpq`HCFpo@hefF+p!lfE>i8pz?PLz9i>6ir9WCI~-v#2-2cvFD`6OG}h zOjFDtEypPR=6N@v#tIGk@(@uvV*U4G1uCEA!rN8r7WMo5V7o`l&{;zPEpL{iB~&cX z@I;j!astx3sIe>O_(>VzNeG7G)DIXbJ@r2?`})^G;{~5d67jEkmPXW2>9T)%tU|pU znLu8s>`KX0c0bHAtu}M=P2zrbMBZ}$C>`DPg(xTiQO}RRSx4V^0=^`&F+J^0;__e# z?p+^4hphP%vM3)b$taRM6S(0z<1|8w2VLj8U_k{L?cet5zwtJc^p*yHa{ZarC^Mil z7r9?dObp9yoBKuXrCIxQks4V*KtQ#J4AAh8qy|VPJAVOSfpUZ^ot>zi=?_ICu+k{L z4IjHi7c`3PUry4Qw7B+cemAcv6M zNU5n+Z+$Rq^yZ-8LEbXuFYnHT?(67N+Z!U-Pl>6;Zh4Rle2x=l#fj3!?x8Z^a3x@` zyCZ!N$33GVyt;x|HiEnf@7KiUK-qZ%C@+*4i>6K@fqYYTd%8h!eQ^|p%vd6ZJhfSt zNhS%^n~9gMhPTEt?AD=hY@?lLFWqSC_1-2{U!s$)f6J*y*+i(KM{H)z!`>dgJW$-z zYa+&^Qv#Ua&50KH1m5m9QC#tS7H7Y&brEa}B37oHpZh&kwSqsdQLsU?}| zw!yAP@WV~$n)IjkHtKsoODELdy_ny~Y9e%%0eO}$ga}OrI^z{D4om3R!^5#8Yv(Qq zR(Gg;4{}PyJnyLAv6HPJ(?Hkt)vNT`@BCme7_X&a(}NX@j2*j8uycc16;(ELj(Ve4 zygv>1ZbY>`Z|S+G0R1$R54zsy>z*fL zs(uuI7lzV({5Sx6`%LNTH9ZZh)3!ji&9q=S}k6FbJ(E!_}f3ZKE0~^m!-y6 zljOD}`IV4Ddvp|{ZJZeeqAu0ccpu}ongh$~{SQKk-_ug>aZHa|d&49hPe;~laIEQ8 zDR%DJF0H1aXkzZ#ukzN-<}z7TiQ3f8!~AFRS;4)^JBy8i#RSZYUjt5xNfW)WC`525 zrr;P!Z+dtgjv1Hrv#&mxqH;#@}<8EuJ^ue;X`dz1$tFj=OhS-1ZIJl%%4@ zhQP2R8O0vIq-%I8T^`KJeO@t}Z6?9H(e%Urf_mCej*m_|GEt&MammEwe~07fH2uZ%T8;<~~OI5McZeajk7tzlME0K2ngUQy5=SEVAOUT7Vm3Ba@^Z%b zvB6i6x27C*>U#?Kz{kGH_EtB>?C{$nPl@n5<&?_^dc_LQ8|CBgj?9U}NDRG${})?p>W8HY{m1TES^l<9b|9aF<#hxO1p2I6jc@c5A6QxO8>d4eh(P!&IJ)3mx>BC(xoV$5g z^SvSNO+xHgIjDebvw}hY=0CUlE=-U7%Ky&Q6Vq4*eV-4ukG(9oC!NpCdI=1KeIg{_ zB()8%QpgIvQEr<{6)E!^A&qK$6VuQLm4YZ+ejoQD%@82@YGcyNmWqCH|9GE5up6@t!B1@jN$E?mzoH>?H2qdb>^Vr@KuZNsI@GNOmXSZX;9IiU z$+a2o4kfFRRil|gR`Tx>jA!0>n_3B$PaZ%P*+RbWG*6|vTtHON(9uh7v^_Uq7ELq{ zyXFM(ejV=`gqr~Pa3$D8h&W60Z@LcYrF|pd!BRCWKVu2a*D<_+n`C|OqF{o6Q>bHX zvQ-;itj0yZcj|l$d^Vm$b^nSHJ>@brQJg_l+X$m2^C7 zs+-~ZU3G}Fv0;dsmcOz`$1m|w8m`Yj2W0T85}hr@L0nlT`I1LNS((x%g*Rks_G#VG z82R4o9;|nfKro*%HahBUFRmv|wdE=QTM)7A+)f04a~X(-T=&)|`Sb~2eWi_A=AkS& z&5mFKmZN?g;bn0Yt&dk2<>i(sm2$)Sm#|J|!>at-E@K&tN-TVPw3#rj1e3yb)7Ae4 zi;>AZu(Sn6|DZws?qSdPbG@S#W+U4zY_GMa!P2h+4o@X>J3T@JfrCbOQoh@lCrmDg z?`x_~^OzTbW5t4ty)W&)m!5_(YED1Rj~IaVz=ZtW87eQL2Rl*Y^-3@Zb+-g2yo>7x z+cUSB)_aEj8?EQ{8tK+b!tP77wBz&Rutzc>`pXlRVQPhSTQIr_^KEb|FZI|iZZtme z*oF>M=5UuUcP|;!TP5Ljgx%}E2fzH*Uy{o2n*fw&u)-qS?a4;TY1A*nlsAZC0wIS? zr9_&+tzsh++0qmUj4uQs)|y$fzsNYSOYad#{;vAhj7)ZPW)x~H&VKN6n^pJ3LAYN0 zw7gFmbEcdC5M!X?tmes_k?IP}|We zY@YVl9+YSpV}lf8%UxgSYSqcTY?_RbpAlMO7EOIRu=3!;BvA6o#W&CA>C{^^A6tP8 zFqYdgyh!4?r$w-Lb8?V((3mxwO>awncy1QIpi@859O+@x#V}&__cUJOtv-W@cQdwp z;o~AXN8p9VGMz2(ALpzNAYU9JjzyQ7{B*QjH||09>#}#X6q0B4J}$^sJ(b0p!E~k! zAQn;_Q=bZ@&x_ysL+h^(RNa@pGlY(;K-3fB|)Q6R5ZCwF0Hz@*+t$=(Hy1Zk4Nuhos7=xx=3?U<_A>~I6z^9utYtoePjF*ow zwPzspw}g0I($24lEEGj?!1VZ23790C=dZB;sjV2K4DD1(Ye>$fX0F?w^7gSK}zPt)3z43p&*1qeo_@UoT zHuTG<%%givvJzR_+P8ZTguRAFOQ4r)!w*PeOZFRrhQ)guu6IE{LfLJ)O^8`b4*52C zStc!skUWCB9t0hJjWOFH1Z?0`{)$%JwGZp-TqX5*snfRp#603=C2KF5;p>SG&bmw3a15& zIqd=Y`$%A_3S_&9sjjiE)sgxb@ZXhFyoZq7j`YJ}fLXdX<_LLlfJf40GUl6-DQq`R z)@_7Z^{vFn0}+Dck9_`2{6bbdDzH0|kz{)Vg5f6~Bdj?N@DbX=U_~hFJ?!{gM$Kt| zg4LFiSWM-^PC(Wh8u{rU)k;D5Ovp?07?C{nG1;?#0q^w7@bBWuK9+AljeUGWl~Fp! zbWB65T@J^bY_lN$(pZW;|RNr-X7+!!! z+Q<95@)TY3mte!LMT&RH)mf@L2e(b_Md!Y2`lLm2WI#BLoeUyke_?UvM{;E2Bh7Vx^AjxrIA>R1mpOaMyKC5*P} zNoV1XwEgpzqD<0E*(X_lIq1;<{}IfBDzw8&%@1IBzL(g|H@+`{FC}>qag`mB;1+ndAj@xTQHk>&3ykpN*6R?d>X`quk~!7UqnPE{b)2m zv1&9lIaQxbFKn?S>qa#HSub~_{m>k~Lf`*(2HZUn-t@_@N9m@Emjev>D@5?eNh;c> zEk~JmESQ@<3qg0Povl^91_N==zpKvC*c$i*tTd@7g`&Ic`=k)=H>8Ijd@3%nf>ihy zHsa(yJc75NcphM@BfUW3ziUPzjr;aT@2ZG^+VMSU7mY^eGH}>DsjwInnl;2b0tSSc zob#FPpPh7UAYpH65YAe6Jir%cZ331v$<#r|mRAtpKWY;%u_NmzMi3c()fvJC!#lQ@ zHZ_>|S~gxarlwwh4XX|QHI|?r1_|G{!)}PT9y6(%9qCnNi)1Q-h>sgV$A>s@KskZ( zhr%6GyqvnXhZWspi@v=H-W!o`CSVgH&0ijH`I21GXmkRCpSl4=l3m9=4Xuqj(JJBF zP)9$GB!Oi-FhlX(>hTE$958c93B-lql#87#y)L*p7m%uEL^{hzy!y->nv1VU2Q!zz z?J??lQ(A`W*nnASf_E(HMnG7V>NsvaT$QVysQkWB_EQA`4ckISYpnRH_<%%w4*VX~ zAeqy6xGAL7vTq&{{hQ46OrZ+AMb7 zhi6(R?VWW20TvsIh%uJ%hg{M@BW|AApGI5J+;+``c`2yG2n$NVf)B_^?C^otRj|?0 zDw?tKGLCt%J9d%F&M*%xEtsoMSV>s#x+F6K-}9=*?!@%n#2D#%(^zTSBl%Je2QOFA zjc29O(;nHj@0lc%%7UHE;u#Q~%?}0zDgSAX!y^A^=Er$x&EEAa1{u&5pSp;B%KLz> z9qg$$kOkK1O()!3CcE$7_VT26E5QOE9umSp5*c&zH$dPRbncvW7oDFxg zA%0p>*WMWAf>U(@W{8d!o2b|*_U6RsRVkqs{DSR=Z3~j9BbvxqRedZ!q7DeQt~`JE z^nO!Ph>@NF7c5i&l$v@Cnz1NFv4V?$1e(j}Qo~=E zp3thW`-$Xe3|>=#?j)qsn0>$Sz_w59b8;Vh_1HQcn~P)XKpHqhYh5{fSB}%`hr_$6{+{3K?hh!!?zVATct>C@OtQ9R?j~ zsgG)P>nkppm*uNLHKIHPJMN}OBgWD)gn!U;Q)zoPbwgpVigP%0V%+I1m58eUInDPD zSC1fe40cTm;`O*!OdSM*NMBm@lT-2n&o;$`T+d0CP`EJ8<3l6Vmi68|Fg4yf%t=oX7>Xw+!>3;N%OrOOXNO;-mAT(#y#k^?o-#M&Vv?h@=Ia89M$ z9wThgIp8gI;OB;2+u2qj-v^(TfW0mUg&YTvfPmL*+ihaoQxcZ`%40)9ofj^agc5cM zWNS|VR28Gq3Mnm*4>tB=(5S3rpD|PGgBp=n(q zCz7XbO30J_(3*(8j9oRFaa4rZRfd93hC4IwUV0AglPWCR*ll{>3u1NFLH|*j zm?e>Zh8s3q>me;rn!jfls?Z!lnc$fkwy@#sS10utcU}&(9u4`SH+x;F=i64Rr=?CF zu~G8Gbu0Xjiv4f1Tj}{K%KJK>DAv&J31^^-$}MZ)OJN@*1KkbQ=u300r)tHCV zPz#*(!dhnMHWO!w-6>EZt}=o?3bX zm^kfZ>JnCv*}z^(Y^)?x)zSlyGM4{Z%tA?n#*N-M@%WEFAyB!v~NXuqPNDa*Y1vf-KU)+QsN(r9W?UlzZjrF8b5Q=`#U@`ikS-a10A zQ$^yUb@Ha$)1b1LmNWHwekS$IHB_xOW|V7>(rs(qC_- zf9QYxd=?)0=BEJTBfWNTL$U_g0QM&Se|${f)Bo=d{hxB~f;2(IR8(+hXJ^1X^mBIsnESycc$&Z)sn=Oi{=xoa z)T{|w0}6yC@cZ%s^K?GCwy~kOqpObFtoC{gWOEg(SAc)`DP#Sz;hZr8`%1+$8BP9- zPVsRKC`-s!I54wJquv$>{M1( z{^8c!R&{%(xQ!J>qqcjJ{V5x&^2H4LFBLJLo%SEjObh+QpJICXn#BJH{-OfZPLz^T zY-$0*7wJGyU2~uO;%i>Hd8#l^$3LIk`Rn z$Y2K~T>*lsl!*XP&ThfG2#Bt|4gwH3|CUhG{ZVKLDIy{gm++>}W|^7^!otwxZ|R@^ zehrXi>Fxt7)or0hd=?fGicLizXKiI)jO+m~$A#rgSQ0Cyc{dACT z^(e0kXQqYwSK}PV#-VfQ{Uez(2q6%e-|B$6U zbS7tDQDB}jQBiPkV1LSxTceM>AtE9gK&bb9X&rPe>;w$zu_}LlcEhK-oqV;jRB&__ z=7eaSXI$7p`7z$5@M=C3K<4tSpxOIj{U+i3b7UA8mAEpC)cs#8z zKB!%o_;KL*AiSV^+Pf_{5g<*o*)Y&l5c_r-J=K-l7{DIDQ=Nu?^Hr>%E-c%qr0t>~ z@-UkzXYt8l!6@%mE0Wu+>vMx2d2_VkXctamwNxGTKi{J;92ErvL)j1{CFUq8HtRTWlUtIYo>WMppl3qo4IcF!m#l@tz#PKa|0(VD(DE_)Ci zE9cC|nA7eo{+Z3eE*X(*8n(iTh|b-91g@wE7#G7kEBs>3MsUmQ^Zxnj3rZxNQ*o&k zM>8erBQhkU&9%*HpuKZ%2NNX(ALdq7qheIx?T|A9DbLv2x!iRQ0--UYIt~-bZ zmV#sK1W_j12snuQcju*8kds)Bu1}s?ZivqzSYgqheOS z#^b~DB5z&}dZvCPXlMYIwRRFrx@90LaoVW$tQFjKF(<>%H*&!xgZxO?m~XcSM&d&p zSRd5cqx{&ZUN`Q44SkFcws%7ezk+zt!OUcP#FTtG*3Rq<@q*pCM!^gVh8?pJTf=IV zU2q*;u5;qQHmsd(iO2CdhVcDr$DXXq9JRN2vZ4>6DGw-HZ$C%S1L{EpkpJKiA&k%O zC^+8L(E0A1g!&!InUquUr7DN1hv3Rjw?_e@FFJEuZgMz<=6Ht@TAL{A?#RcM4C|#g z3Ix3SK{W>-+qsW%(I#v99X%k=J9P|RrnuIb4TzG647_!3J)>kbK(5usvXmowXC-z&@xRe#W%ipAEIzQ6a3;D}?c{M9kQn~|{+l>#b z)z4QD9xLzQA8&>#&U;Y3zuH|0lDT6IVS0ffBM%EynaG}gN!TSHk+YrkT3A<_#ipH1SQilo&~%t+Ut`k& z*giocA~qrXK1nuyWis855nhqVp5DPGG)pK+cLc!sG*E)Dja^zqgU5grt9WXXoxYRX7qCZx*XvUI?=s^Ah0O z^1}CgN0dQN>uNAx(d0(kt+&&L{89BK_^vPf7QWAVG83wm_Y?)25cWupHaxu043bAi z&}IVk#ihl|esD=@kSw`rY!j)=yb07B$sI|YVQqOyNg1w4^Y2;N z0ww0h;WmT`&HG&6`k*!U)0egcP0z&H+aAitfRWof9CS_4@OeBA<9&EpOq1(d5(*!I z2xqm^Z?jjG5EKRiH;-qw92L97xw71mTF6GIbUwTG?-l9QjRtC4%qq^H6)SDqjh3P3 zsuP0rmWVbqMb3)$D!-&sWs?x-CSTJ%Z+IFC^3rmk2CP0##*!k$b+0F!Gd$zAilca} z!6UfBwwJk1VQ5WD$^bB$T*GJ2C`OAaY^0S)Q7J<-hfSZrspGfjR=dG*r$!tVpK!@p zliqNXjHz|=L_BC$_)m8an92JRuswWgrx07LPeI*KC2ASYm0T1eC4zq-5byueV0OMO zNXv=)9-$#vQxQK@h6IV-t{@VX_*qkrvSopuMmEwo(~p12)w+9!A(wK+?6gwMFJA~l z>@ixML{7H2On({E9w}sr_>{X5J+u{L3fh8! zld<)VT*gS;NCAh|hPh(cCuplmy|+d1RADj$q9Kf@Sh9Y5biEreMS*j>X#sO0OoSWu zG3|{#7*^V)dnGV{0Ggj;_uJ;bqN_X3h;xLvC1dnYGLxadiBEwyY-;ocV1c47LI04n zuNp70aKJLV*PYI&&x*=jMwA~JZ3$I}wUKAjWkiww$g)A+LvGUl) zlER?S`TJhH_JVTqbk5XqI7+CQz#UF`Zn3SN4A>$UqB~vri@O!ixM{w3dPvD#K3kyj z{k*~_6(XoG`o?C_C)4UVBRv86#ZJ|;HYB_iWA3-GR zam6VbGVK;_{I+|qq{z}zSen&rMoO${%mxoO>}nKeM3&`u1MOY=xp%Q(X)p`DBcfqi zdS2Z2=sWH`>jk%p9%o;o{CF8pno(=D%0Lo4L4Fnl;X|2Lkg(Kf*U=XNySUe5^af4+7UNi(!lUULMg;rEav? z>+0KslnBm_laF>TLgK|bSLh~bvLd--GvS;358$L9E|haeigZB43Sn(OP+ola4d;;< za_aEI`Vi5gxuLHQ2rAAsp)1eh>Btm-j3mF|7$v$@{g;pfpV_nSMWhrM*}m%Ym^rhl zQj-)hk;8XO4V!_hA7MzY+)0QK)AOl;yw@KSyiD2_2o%uT*I!UH`y|3yE|cG0cN^7v zXbTPgv{fkc@os)OnKU0mL&TgamrE9{XSCDQ;IZ>ajoM`o>KMIzz8&J{r+s+$Wfah$ z+r(blSO%?KHowrtY`1;)RKBZ5Z1p@URGzL=&x&IrSoO&LLP!nffzKMS*lBRH%db{X zPh)f|wO9&L-l8fb3bQbV#DEp<&y$p}ukt^t+qqS@AC6ghAo^9NhrF7K+NLEe=67lK z*~`CodFF>589R1E%=LO$7nm2*HhYj%jI9};s(}sk22xCyOWzTW>l)vOXLSwx$7vok zQmGQubf&TGXip9#Txuoo?qG@+KiMuap;U$r>Dzi1K8t-WHdx%}CdTD-+}_Baq2{5& z(nJ;Rg`!Q9^7P@E)!6?U@+(3hfnSaoL22S!a6NG+PY+uVg-{gbmvw-c$ig5JOxOFB z2@f&x!MN+PQm3JMl4@O=OgP1$B%WmQ;i zbN$Tr^h{AroyegR{UmMNeVofYyv7&MDvG!jarlRrJY5&*C36-{NGZ_Poi+JZ@#Zh0 zcN+cmwP^e$>ZSH+hUP#wZE|AneP}ks4}AgdmP`jh{DxAhdTPZEM5u85F->k?58!?P zX^&V_vy@%u-&Q^-V3hMU!BPah7HcY|2z1X=*MD#EW&fOsA%xWDmj$}w!f)&T+jaDtXjas zL_o5ke<-pycwVR6;s{TM13$2upy%Oj_<=_fuUL!*BKF=H%$;~Q^j%#-#?h~VZ z4|xK2h|qPOch5GpPZQ)So`Ayie|d-dt*9uwpAYd}%I|p5+U~wTOX1od5ij}T#$d78 zsJmXfehP~yWyKF}sB$q-8_2YD=+;w8!xsDgPMsPHo~Ol2av;;=7+JdQ+xPgu$UM0m z(Og_`I|S8aJHeBWY3RiJJrv z%J4lS(y1JuToGa_hsvrMB>Jm%9^*zXZ29Nl9*Wz)#7Zoo^Q+Nf)td~eH_GkLi<>NmSqJA37Hb~(!nrcc8p5P=Of4Q{TBWbv%WYrO!Vr&Kp~0`k60pn zQIdea6~buOD&UFIGMV!}bTSg*O#QqEJP#=;N;2I1f{KcdEaLj9c?;4fVkjQVvY7Fi zx@~EQZ2F;*e6GUTe!$S5Q|@s)0;;gPZOMKb*h>PE7n^GeiQ#K7Zrlhcc^TW=Yed%a; zB2z=Shxr^4Dr9qLo5GHR2VD*x5PVteclVDi&Tn-2kx;J9!(zI}Fw2l14bLAZXJNtt zp`)`?f%akc0g<=yowDatieQNmGhc^Qze58lw|AyRK^SSL_fjd>NqH~{W zSz4E`){XtC9gUNay7?G6iRIIPw^FrItT5Nkkv%n388_|tT z9PDC!$`&jI^EBrlQo5WP1`Qwigv4%1088)+4Ja(|r_bQQq*l3@AESUf7R(F!ft^zk zYjMx?uxKq|PwteU1ifyH_G6C{&SAe=2E+1LuMIlVvZR=R5UB$*5fB3)s^7&0I}>#{ z*O==}XSwB>SzL&_Tbaqi4i>b_WfbtpFiCR;FXhOhN;!8|0-1Z%-ju1=xkQo5G93wX zcrd*Y{0T+rg&GJu=2>re5-jcxWelUExurq&JO?xInD=>xe@ z^9z$o5=aiIO{^Nv<3@~%uYWz)b|+IZI*63zAnzX0M6Gk?pYLMT9*!|oQ_$?z6CJd# zMcv;Rf2WNgA&^`C6r6Zl#9JEP9fr{++l6O2i{ab$^}67S&mr3Zil^g(g@1424G`ST zETs4^6C2o-ipna=usq12HyJ5&JSJ#J!6xlx!{;|D$=-nARS^Hx?5{iEv#r+c6q4nv zZNPE8cRk%u&$ka#@ULdw)&9RO8W|qgFK+4{EgW$AjnU`r@&^;Jof6KlhP=So^baK| zuluM>_umK+Fug5VXtPjmk?B)K6+@M9iLBL~bqBn0D;Vj;9G~*EJH)!2Ir8m^0PpVy zdX%491}PAV0+Eryhhyi@Fil@QDzRo{254vJMcD3tk+jV&O!3gMW+mFI;X+bAlD~5~ zuho^Fj+cIL1Ue60Ar+wnk2%IBk*sJ}eM$XUWZ=iZM{!Cp-^s^`cauRG?!h?$o1dr% zdRpJx(*SclY z90x@m6dPEZ!oaxNW^aH0C`Z>H5mfbL!{Hf1)xt>*qo6xFXK4vxX=ypfaTu((rPO1( zeT8686WWMoF!rvXbV!O|-x5w4tVj_v4)? zab3DZVN44CcO$DCF*m(2$f+HM(B;~v)7I@0mnIHMdAc7wsai8>LS}}UiabZ_TgNen z=VxBe2=>p%bCvcfv3lHd-1Q&;(DMW7P~o$RMoW8D9AiEAoKcE8Qbud?l6UZB&sd>G zo`s=e;cowzyRJJC^Oh6N?clAY%dh8r!x%`Z=%J3>?E0f~$8Im)yy_p5Vy^Iv$kY@J z@Vu6S*oX-|NATv-cp?~op8H8RT|Z`?a)K`*wXY1+3}YPc7Cdv5doyTzZ%Sd4qhB<* z!bIyfm0UHDt4%M)sJm zYr)Uj{xM!z!Dnl7M_ZL5$!yV0o#p^T}A18M}TMXV!FO~dA3sD+;ihSLR%=DsQeF~)N~ zXops8<=M~2 zW?Uc%qe9`|19Y!RERo}fx8m|SvpVpG0}10gJ+`OYZISWa&q9m~hH`CZtMKn`uu)F! zBEGKYh_~JUS^0p|?Hc^~TH$fi%xO_1zGQSPI~?H-&1goM;%$83869hM8I6I@bEs|o z`C_MsqayVQ$EWcT?{z7c<54$mXwG}g>GYYWak-Q9m-TUroO`ncAw2R0G2OhrDf^Ud zY^ZNFML|o|fLHb_f!GpJu6HwI4Y6(HBm$~v{P%5^sa)+)lC5GH11+9>rkEH7V?p_n zY6pE|NC^fffV;o1nWsn>DU*jC_#mh%)gWbSs(;aI#e3OXV6vI*Zq4k2-ahLAIHapjmkPyyeZ=aW@g< zFvN5*)VFnm6ouhtCg>(;6~h$Rp&2VtzN>(e!0rx-FJQd@L=5ye;69m@M|he2sKob9Pq;_Y8xF`@$^^xpi{ zyM!X{_+RW91g6I;9H|2CAK{~KX66xj8QM0NQJbD5wIGShcy}rStD4+HXvG}JB`4`4FuL*Gsd;vaV!4_8yomdgfu+=Bfy2(}!Hi^Nm zI=2w#(41&@U0t*9RV7#eu66wo(Xm()K3}VRNbKFnp+37WlXb2D21I;Uy(5=)uAtxK zL#PwV69*?67J|%P1j`*u_*vzKo9iSrI#ceneXq!d3mEg?2lwN9@W@H6yyj{7*r_FEWi*FY=+&5WRT zZ?5?2?en*fu_SkofmlZl4?ZiHTWK`&SyZ@aj;JJwi!E8H3@6%@*(|aT+5&_M>!8va zvE%wT+Xe^6u+{9^%STxyQQ_aP!!ELX*GqHO<}A)wTZVO$C7+$H;zQ&Yq$=*Fma`FM z6zO$AOi>9rSxD6{uG6`jP{bV

1Oz>MQWP?&0H+?Fl0xykkEo7Ou!4dLH9ZMW#=J z9jc+XnekE}kG|velbUG(6z?tJQgY~J%CubPzR4-~XTp$?{#)&!+-q&dD?82s3FKeN}t9Py!E!&|{H;>*NlE&CWK z=gHn@;(o8^Z&mgg8@A!gUj(yv_X?!wwbL&6pfSDT8{LDCGmkBZ!|vgI7eXPy6YFM>a2rBN%TEBJ#qtW+JDXL zg}*b~59WKSj`xb%j9TVc;l3vC#EbHcZGpxKt&lqS@5JWK$q&6yKIU~rxR9X{O>_CK zmv|R}^lxO%=4-z%No>$jDJwwuY`w_oS~cMN7igF`?YzW*L!^^kJ|%645Uq0P>413v zEidvYfPj`sVd%pp-sv~Ytn2C7BliB00>k^cwgL=oRRyLgCX-_Y_^u}ptEw`jAjvabx_Qdaty&NgaU%XzD7cnA&A zSWS>A^T6iW zcENuQ$X2(RY`qZtl5Wb?O2JkwO?!qX5N5KdL^oX=pYJaioiuaCYK)v;pUB=Xd!y%@ zb_-x?M}wbm7PdRQM{Olg(K21@Fx&OEH~ElsugnTVc#yH}r91#qQaI6oY>bK7$iX8{ zEAFlXX|U}^?N0bQoS>eiF`Aj;B|_-@xk}80hl3*JGu|?1j8A_KOBmtt&B2U~#@^{Z zH4VIB;)PsVQTx&_xFkk&J9%cVicl48%~JbowkqlMkml}5tKlMtLRD0JAtBlPRXHz6 zvT{j%(6q8z|H}*K)IbD|qO`KjB!_o=iS)mZZ`{8{DCGE7ws0y`Zi(h-Be3R#iMpKK zxB(+wAJ0Hj!iH^?E3`W^@#4HA^u4|`Z9HYh^PH9AYyFWOZX{udb)EiNUZaT{H*tcR z*foZ!6R`2{5j`*EPl5eNcXgej0Ve5FPMAbJu9mBy^lpm0O6%eGnno+MSsL&KwJJ5J zo|{`cRydpmjH$w@^|`F&*yL5=B1efZ&lf0y&tCE~z@N8Zy10_%t((LQlz^%1y=on2 zspvzFn?azyK%wZn16}UypSS)8&Yx1L4-K7+f1FOSgw|b0TmH4Xt5smSb*WPG&GtFDp)~2e)aPAsnmM&)aV~CWbw8_Y1%AB#*uBaO%#UrVxN zv`a&_W6jP%OY2J+Hx7o^_Xqse>cq7LC7aH2>LJDq)PpSGtRN5cQUCYJRND_UXUt30 z0_T7`N-Z>!peB+wqm?K_%(UcqyeNJ(gW{$Belj#du>Q~V%fH=rq+l#d6#G}t>r{5E zayzy7w<}C8{t2cM6W@v8_07)*CfsnAy?su8BY3H1uJCCz=(WZ+=qUQGxX>UpV=E>( z?x#}6@&Q_1LncrFJF3elA+*lmCx9#~%=MtXXg<7Zh1Susz52xNC2i1MT=jIByCFS~ z7t!|%n!mi6KDi8|r6w6v0_Y??ve5=(iF6+lmZ6K}nOwC*Ome376~w73`lYO=B>mY2 zzGNG}xg10Fc1|1Ls?WCGj6eUJ9o3_UfE8+OE=g5t|3RbF7%(8aE?Auax{x-A{uteF zxtT*AxDe(w@Tcwv*_d)5{Yt^^q$r-;-dP9*$qlm&7G2 z0;Mp{QsN84)4081Zqf*KOGpY4F`bNRF>o(7h&Z$9=>3Z#KEtEYD{rnEIxIzYl>K?t=0;hy&TGhu}b z8e{(&`*~|~5c^47;p)w=Bar0D1jotbyBkR*g*5=JMix6vwoqVPM+d*CG(%{9Nm=yY zZSYD`7?afu-I=c&UFJ|*)Q*iJ@nKu)s_KBp3yV}{oto*P)@{uZer%Ty13QaxUdH5? zkR1>lZV^`C{7I{eS@-fK5r3_YMxK&>=w{=S8RC=quvyD~6PEuHk?F5_l}}c!7?2Cz z2gM3fh_r{q$n_f6>~L#Kd&{}cNq`(B%$$~!`0VIir)UYY#iMtOm>9*;^4;NU$XtC1dfokjGoN(ap}*U?+rK9Nh1b^c6qQ^Vw(-lPo}uH+NjIBX*IJ*Gj;T zg1_&_F9}lfX$sM0(zv^~FHQEv>wFQU_8CUqgm`%ZmgIEBHQ&I&LIFD5*glfmvP(7C z%QghiOGy&Typ{Lqw+Ni_70+5ahDv2__H%Xm)-S0L@^h}m875AtA|W(7DSvkoo#w{w zt^{JKxtEvM6iRN1jdTYH(ud22z){rVCd1zHhs$vK?Wnyi&dCRBog}{>Q3tbyey-&i zNJ36V=0})%%j;gKdXXCTW^ugLJ!UH*IH8zcTxR6ExJ6^>e7 zo(+y59DwCQ4^`g1|H6{{CDNC(9*_LbOI(h@XhpdA7S@ptgBGcs+aEsQq-t+3$`kR)+Zaxpd`;uF zbl64Vf0=Bg@@J z6!4OloXi@-mRtb*jF>^v_@{{XWj4OJH!u|87TeqLgvJLQFTGH@7kt)XWVkmR;sU{p z3vQ(?4AzE*Otb&mf{CE>Y2#$LFLP`h;jA1cm$JupKlk6Rz`HrlVuU>w;Zruyxz2vq z;@*2|Upz|I`+M9kLKWQHy~rl-L!u$#K-jTLVq|HF z`nU78%-2mtk0imwu0WXNIUMu5Ybd7{edF|#pXU8qTdeNJDOtGXZq5xobwb+B4=YDu|g z4)ZUZ-IC;HYO;|$2hry&3=BhFeQi~uVWrp*kPL!1QB4!(rFYAx9CgP@7jwamu$!jd zR`oqCp7SSvA?6h6(x@Bt)!TyFmwk(^+tQrPoug=!!ag-@tj%6%Lrtn*UCQnyrEsujqi`g4@e4O^{susM!4peUAy8x!c zm6;}b^)gjdPy;_hoO%*iM!hO_psYq;eN)dXeIvY6*R!wwTAWrLbsaDVK`0<3^S^EM zc?eR_R<$KkkRH0b))IwrQj6mslWw~CeFG@~I-va%GJlYuLd?ZU6_L4y2*{wZRgosj z$GbBFG-v|J^b47zh7{^$KKYo+Aa!4aSc!-C+|Mt}4d82rD$34S*d_T-1BE{yLJgkZ zJufUdmpD#g0rg_%TkbUn{-RZm^=q%TrhorLEQM(7mDO&<0l8J>xM+mt#!fumxVp!C zJ-@^dv`D(XcJv;hM%vbA7y26S4v(ao+Qyp}2lhFJd-ixtc(L2Bz!!80>0JKyg3R=w z{59E50BCR&a$&^y0@3p4mK;I4fcl!eD<_r(@dLDQpkxu#pL~?)VAQ_bEN06w^M0X9 zGm!?~vghLW+~xvgxT4`*i7K}EjjZAsil((LDMX}2G#+KiHpW?Bux~DXq^e?*{N9t%6 zV@q^)tmWC7O8k!z_&0$Mf)0fw5JId2B-EAuxeZ16=>PwC3G?gn)L(3k__ z{D`qb6!e5nR{9V#_cwG-?dJM1Ht0VX(Yq*yYAL3KH}-8*;%3Gph5707gnar#o?c*C zSu+h9gq+y;e09(EDSySXIwKsh%M%NjBM=Q? zvm-u-&F)ukI4HyA=g*(K)rD+6@1-%@zI~2+3M+efR=+^}+Lg_%Kad*!NZJ>u>(=ut zNebiFp6eIie@)9-Fc*wjOG^N68_~qKV&-li|IwaRF}bP99d%-^{{olF1(zy9edgWO zLXLN&SK9U>bv@4j+pQ+`@Vgd*Ve!RO{J~oZn#%J~V`DR}3-O4h*Xn+|;M$@sWgP>h zT4E$fFnCz*)7|%pO*CbC(1qzGZpfSKl&n@w?&52D5+f7PP<}m zyCQ%(&d5LRrkN1kP$oUx3pzXsbk9C#rc?}-HC?52pzRd(?8k9^%$eKkS_ktYfRopF z0ptgllLr;15hFrb5~-v6#@tV{X81>LgOe%2qyD##h{)&tRrB>M0m59*`<;*XJBgF$ z(^7BIcdw=)J+2;`iU;M)G&|;wvu50x21yX#f}k;~yNv^~F4<++nzLd|E1kcC$ZLE* zWLlnk`~dJS`d^7-@oZ>I)g%4U~zS(v$k*-XV;s!{{6LBP$xb$*uW{JW$nr$D-flSqxAI1z3AO-lgYoc+@UCfWyDt{k=eItFyi2#!6CwXR_ zg}HHm>~)CegE^D>>Fr0s%Zp@eycwakq~Y4(10dfxRyr^%QH5k>kwR?n82_1ZNs>Xw z$$;NW9R6U)$9%rI@Z;%Bz%QRw>uhs&B!yMoPX8cR>JXX?t}QEb zz2_C`L5L2^$X!Q7#y?7%LiBn^`&(wHcEDnafW7z&AQ#e7j)wOf(lUl(Bs63)j90hc zX9^@4o{Si}wbnO&U1jXI0E*%zm#Iu6Mnn$68Y&TM13ze7?VG;N6fU^zc!q?f1TfLE zVgSk3LX)=kk?~A+Cpynjl%H+hs1bo=E8lS1C$`oqg=%!AEiZoPpCi3zdI(?0cEvOc)^d<1|8)_t)me*$cJaBmsAF%E!889nwq-XKUz_%mhf6A2;oQ zL=)M@!|HyFM-nQ8y?%;4YX;IFAJpUH_-;OW#e+XlGhKQ(L#kbYe=*RiB!T4iz|4f~ z>)NO_I}#dr6os~KpJks^f&=41R}7a?D!Qv7Ph5!4n;nma`~frx4nWv>rLWi7zTaiJ zZ}S)4N7bY|8i;2hDV3TQ?!3>O8Jt>u2VpS+9{JinBK#jFzR$X4s$6-B1Ev+)uuqAi zWU9%*`QP}x_?G+DM%3LO@9MF=c=?Q8N|%R!kBg@kvo%!+g@&h%GFspP{%H3 zs~Sj8Bn>IdI&+kILGf5E5z;?6YP#XqBEIhK+aSY=0NFUF*zhCto7Ves)x81a2r6Gm z7r;hzjeTVH#2cGVMRQP*T#)7YJmoynNR$Qt0ZgkD+d9=Qhe}iEmT}DV|1* zOh}{=`urF8+z{Ux%-8#4+v%{IG|9DfD|Ps)$-SD$Mr={9K^t2z$%wQhw223Xe%i0#p-td|dQH3#YN?UChEcoPj*YO(!5DM1HB3XofZd ze>5o}?+m{Op9&kkz{g9_*L*#=_6m^{G^`EWY>lP>xlaw@|H8VFZ$1u=D@J5gV{i=& zeWQ(eyF$5dZBD?)g0ZB?A`9e?fkm*h9p}*kT|=Uh@6NLNSH7-J&(r{X?#QCn zNR|p#4<4MJuJX=XTV`I>7Z?b_(84OGOYO-}NM}f5L$Lbop6^<`G#99jIRnyHkYgXm zyUR*DLo)6yr|d5biB%uw1(1q0&_b%dzi(w^KMfJH^t$bT8=eMz3Yo2e;lrD7D0~U-b#Mumt?&bv$uPc|xOpUY>8P zLCX^^VGfSBL%?i&c_GK}xU1*GBjt+|D>t4tO$tkw0iAq}2WD6tgu;m( zVp_fGb$z-7Be}|Fyl}vBu+%{J7x&C}sw|UjrH$KnE$#4Nlgzhmzdcy{3$L0se(ky- zr(g0%w;tU#356{7Bs6^D>L(*GR}piQRxrkH+-bC^xWNkI>_q3qEDe{I(t+0PbWpzC zeb#CWW>K$mZ2xv#Xz1ZS^NeG3*S6gzruGU?3i=-EveLJ#@n+Gr{<@gH+$#O^v;ew1 zdLYGNX$O7TP00kJSL>yXk75fs5B```qiEs?UkK}-%!%b>+r6t=jZa>HBp&Cv2!8Gd{8 zwHtwQi34;nEf)BeE8cHvN9H5NX zK(?Z46^?rV8bq}BiR)+jtlG6}{(WgD-5Q^MZdp>= zlQ?mPv&s17BMLJaAoI+BT1yK3MA9F9|0RRj@fh)%l!dh5iBLpp65p`WT|*uRB=|Bq znoa6~O1BpfYEbza3Ryz2ugTji?rW@G0@7IMY8p&48*Kp}cu@_b5eIl~E^oBvJ+dz@ zLC~8%ImCXX1xua~&p~vR4s~s%#Eu#laYKB9j9$M~r&CWbQew3R;GkBEm0>Ff3t@;S zIG4|jg>#Y&(SKFaigHCtqoS#T15(Y*@;SokEpX#9=y(pcVKrl5e~6mO^=)yxLW1cH z5xFTKC$4>kVOa9$z2lnzkdte1dqAxyEtne73B)uCL?-0w&g8zVqoy0LaMNYp+=f;= zVtiDKBZ(L{^axW)iR32Jd#!h&j)6*IZyZ)~Iv}yjpvnB?Lt?!B=@`&2v$Q{li^BGb zO&0itmmIy_8|Cd}k@#egaj=!{?pF&uBo)5tFsEvFN!-R$1|=q=gI|q54Bar7P{8=yaM@{ayY~p9+Lm zJ^vcM=9d*~8pB1<{+<+x8DctEYI@)0(ZXPF?Z8K!XV~jf%_#? zv0{F~!zz~#EoB==DM9kT;q+LA>@%|k&Ti8f4PY*02bHq&IJ{k|jgookgGSbYxG_%( ztjqMI&tm5sR552OP&a}MCkg850XwFd&jGnkj_KdzWQS;_&wF>W?OBXotEF)UGiYIl zzoE3)XTkS*=+~Mw^W~efnju+JNx*G4DUpBZD>GnJxKN|1mZz`ws_@kk@Qs*KAqh>q zn`dIYFFGnY4x)Jfbtpi%SYy@r45#2;4+XN3zAj*2DDj65`uIB7>L-#}KY zYbfmkrn~zAK0l_00-?0yrYz?uUkO-#V4gc~C*S)V@vg+lipY*)_21|G*V@l~a7H}h zV(b3lpN+`GrT^Abc_oTa!1GAI6rB)$S$g?l)3YYPMTz~W9%}8b_VQ`WC zlgXIG!$x~56qj#WR+{*2{7H(C$?x%2>p zCjfA8dIJxA2(^}p47h=_WaH`V-5;qQh!CvcI(T|}dut$BfzRiC=vqy71OYEMn&Og@ zWviMb|GIE}ICF=b_!#QbSNlG1oD69{Xf^-Mg|McYnRG_dajOebZG9-M%MCu5t7EH( zdq-Wgm_mCstsoE1gLTbdGv||kXYEv*6_gw+%V)Oqi_F`Xi1(;rfH*uOspu^1p82Wf+hm0^~}LmMcaXlH7!_N``wOp9~2%D!OiOGFy_nje|CfSN!eLEW#+W za6d{@a*<_QN|}y@K#ZZA-eJzPFU;+}{X?l3uY17z?AVM$#ziaU?NhHe3On3VK@7)J z9g_W(z(YUw2U8pMPy1PMEVr6_#dMo&m)2*fFID;ZZU$;HSWr-J*D~TFY9a4dLxyTi z7l5WbgLifzaaa|Yl;-NH0{@|S2sTZIil}j)wzY2k{;FT2&yB*60X90>#XeM3IH6)& zA~C%|9m^U^8rZ4*$@LN++Ou9TvwK>X@9=(q?}<6J=H2vSRPhOp>LTjv3}%KvUxGpC zbt6rClPw&-63VxvLg+z9T!h+7`@h#%+kNv`DC0L9J%mpqJImvsmY=DFqiwDBC~i7U z13oFtNm7LkW$XRnU$Tk*#qKzKsUqhq`;!^$uJE^qH-ww2W&`IoVBy({iQ)BvZ-I6a zS5&#w3RJb4;c*j2o#8r@={PG*$k;zKGWTvHXb z(QD%kf0BN!toJF{O}+W7YBPpL9(^?hV>^LRnpUQhbqn~nExI34@kS#noNI`?@-@Xl#S>Huu z5IPF@9zG=pp4PC$h6z$thA5 z&3c9P$@2NhGngy#GF2Oj=Jv!WVdR7RO|eq48TYXU$Y|L2@$ksP&B5`TIaM%@MM&H8 zo%p`s6=n%*GPQ$T5{ah5;ZKAF9;O5mU*z>0>#$dip@j4+;?h7~W98x|Eidux>Py&R zyig^~Q*T7oK{PRRHmqwdj)9u@eN&zDK(&~l(dADGRLDI&9P4?W>)8j>t$;98k{Dy$ zL94mk>|VsFm4F>{7Fth6P25DUMtgZbi@*tTl2iu4uz2|CcN8_eg+TyY%n(^)nDMU2DDWRCxd$z4K*vpVhA0*>-cI zVSb}xDQ3+H7|m*~;xpxMO$FQOOETw;OZ$6J3+6duF(@uHJHYdIolrE`(+?9H8?IVx zY`Rumj1bxp-?`iH+0l8bx`Q&P#X$H1_}3^Ef($f*5QqC~y;pO~9YYApK_(|lE_O>{ z$X{#Cvkh_DdLpg_!bEuOYhS-mUykxuzhHwrC&YbMx3+E40*uj4N$N$*(fTej96yjE zWDgy9RMu|&M2|A8*Y|+ZRv{HvFV=G@9jyOhiW6ee$~<)ylEZi zjE&{rRzmM?skUM&yY4bnx9Cc-)TOm^ri6X5XaAw!UvW0_{&AmD36l^ z-p0xm&qv*?R?=+0W}d}+hWyFkIRcg3a}b(;4IvOxzpw`G4dqSQI>z~Ha!i^{v6EMK zVLBoF3FghqI{c`|u(*%OXrJ@GfHD*Fob#`mqpWxdVt1j+3lyeHRB?I_TFGOebKa!J z(<1z-@2@{ouVrmh7&qhGCJ?~nTWX?C17d}_&Cx|F?Me!dCuwR= zVmbC$#1LFRGWEw=<+;)-(129z`)Gd*_2iCGXSQs8ld%{~Z8%J?Y1G=is^)RX-%(v` zldign$KUO$?nZ}ed#A-4nO-<^ z!~}WSkt~u>`v1xI@}hm6p%3jy$J~@#-zPT{fEDl)Bt^A@^MmkJ~oJ% zzf|;bDKlOND9B8QbUW)~6f)!Xm{KmK0;vF)=8g>;!9jXQq^?uHzO8)HTe~E=cJncs ztfU@phzv{{A{Zsh_4wD3pM{BW!wg4dKa?-iDT&`@MZ&o9s`@yvxPQuUT$>RYmcuzT z7dwF%jeUpSLxz{Nd9kk_5`p{$8e)VGc9`4~Zh>z!ycL@pZ4-$z&J0q*B_75GvSV|7P4jxV zZr9}y>S!@Rp+tZvjHA(sIM%@tdT&#`!R5d`%<0zUTI~IE{oO_O56lf;bE@Ar=^Ixv zSI(PD0&sH9sNJi&Db8-ifEBSa3phCa8Y#Tsu!CBs9E?e$kg&+vVTglX*TS`gCA;k^ zI+}xs=xea^)ePou(m8lCKWV^*{aCMmd8mnvhBSOK-B8cGL^q>%;9q@#GqiJ!^O zj|EYz?k<02*P#@Is|8`C`A5 z2=xMmUa?;)6jQpo6vm;1`A^T26^vPpd8!cT;^-1LvzHaGtsP^&Ye;=37ciw`ik^5< zV76OCgOiAko*vmYebN_VXCv1CKxQ8kltNeiKA@G9=0%j@#|N_b+*t%;j(+SD-s_<4 z8^lBH<1Jnehj|=6Jvp!%CDyH{Q21B?ORtf9c3o;to}}af*DoPnH~ipP%+Z@d!MCF= zT$g=Xhe1hee?9Y3BH^fNJ-${G48f-cQo&PZ-2LDm*kmPy(9VM4)4M=8kKz$Q+$2unT*-*QXP0ue-9cn+Z_lU!^{4M;*^Y&YTvq&IeJmBS(` zez+Zz52xov^eu|(4-c%Y{@aqm@?I-5h1=1f@VB3kf&_ImR-nHwI@9Z&4t}KLBYJma zV6JivXQ>hRmCf}4FZ{l-L!By%InfzY4IloMq#P{0qgw_B&<*L^w zGaoJBy@aD+D`qD%+X>-&3{`#H>bjK-%0zH_a3_J3B=Er&yv#P!qQi!K4fan2>ELG3 zH*2tS-&xxrJKeaF8VZb_r?Fekt<}sIJd&r|fo?&`0~R0tJ*B!J<86qoE+s1*UXym7 zW_i)ntabcpaCp8_j-u6ckw92rE0QL}c19dQe{g0~wBl`6Ey9xQcN1UC)cIvKddwhM zoZR%t23v#G66VVjiuhSvFth2URs*}8JYa+2pOv)Lc?w~JGKIwLhP|cd$@u$gX{Bz5 zcRCD@CIQnGGZYz+>YdIOcu`pYNR=1qPkUZ-r)GGD8%truLXVel{oVA4XTh7y^JbK}l2_=7L;Z2Y0-m4E7uG$DMgy66?@KE`e zKb*}*oDK-Jx2(Fc1|&s};Gt%mPndt%+u|S5#w~a9Ej5FqzOx-~BtqOTy}YG5(t3nr z$n2w_Epqy1RzB!M@>_CWFrNL|*aac7MJ82)&iJ>lO6_jJX=w!V^72z9wa_}v5NTJv zM&F_ke5-7E`xw}bdFhB~1ngFku-+4>djRd+oqK}f%>9slgmbr5-KaUH#jkl;O%rzKRtl|Jtn z(&aB{Dt^|5&t^hlA&;@-loT6;hse_my$TUK=5^78y?3{F;QbK2FE2v0Z2>6)HfKLQ zH#yWPPYh0-EWImWK*+t@&tje(L`z&sVZ@~_yM(|)8YBQ=yYZ!>>eYwT;3-$I(VqiT zW9210!-)@|moL0SvOf`keR5L+R@8bQcXNPt0verJpl)~J2+Lo00oPna@RmXsD!G@V z{o2dU2P-|&EnTtUh2~25&0K>!IKCLK;-`BWgm1+V7mvoxzeNrmB-pG5N>8u}3*2QG z@o=@j{WJis-Ci(xHk}b*M74;b_YRLJ&pw_k5xU&{6gN`Ggn$k=|cVYCf`Uk z#+tW=2bR6ayUaIKr~`yr-r15UZf^ombMZ{%?jFj02)HokEz;xJ`-OpE$V-H1sZl>w<{Tlcb}}+ns4i5b}$A?WEE}ySc0U-gl z`5n&P7=WA^8rOL_wvF^9ansWU{dmC5-mc~%gzed!CqY(o9C8CteYMRQtwqZT3e1!b zsF1yW1eXYxMRzWb6#}H?-%{JTE`J(&CuhJbSt2a(r7RmLL!|+^6miKw|3&>P&ZJ8+ zpZqEpfps*sIzsBv+Xd!y_}U&woJ~Vw&`7$wt{y4IG1fk=xYCSIM1cv>MvD+_y6zwXUAiC@mU)n9frSXY>T^!2`+=FMhn4=apaLU-n4xv}?`4YgFp;^CQbi~j~f4BxnYAH*n8Mze0uLNv{+h4TKxF$9~h@^T}dFw#z7v7wGZ zG%*lDs56nP*wNJtr*c9Tie_FXi4$`7)sH9|Q4bgD%wv)blJ8$wo#rY1D<`Ek{Vs4O z@M^Oh|1uay&vrF`aGwOqH~&fXW|n?@f>4vnPM&wGVIi(A+@_|Hf>?IWZ!!3pH17;+4!OOMOQcfY1sT+NtLa;64vK~6Sk>uy2*tKuz4%x(o^DZ zi~+}Alg+YhNJj>}g6MX(ZzFH;pfoJ&VNJ9FLZ`fbev?*OK=?p3oA!Z2>{~=N7 zSV$(&e>Z&iAMD0|8*6;{|N6!+5FRe6pkD+8W|4+PgJkVNl5GCEFRF_<7C;P!5~8o& zoS~TsviIh9@8p2Oud^t5#M&FWbu>|B_M>AmQZ{8?m6b;vv}A|wua9~-NlcEIE^M>w zi?+Uy4~Ar}{Q3${@ykP0MQ#4(4*~SMR>aOaEC9n&U#5+LkLm$)ndbi@x%ogiSgt;PZl94XX@j z-~Jn!EG2*q%+XYsc`Z!O`Ggqg{pRmiRsc(axw#%o#4dbi45&4U#`-u@r^3G%nB_f- zox@dbiRfw&UnMYT)O=?;z^O9nG;55e<9A8g=I5%+ZF-bWI}w<)6iJT)2D0>Vfma*j z#5AI&s*W0a;cW2=&vrJJiXyGn>ZouXc*0zZS217o6!@mxNJ|y2PLgcAL%~fqa1CXe z(~U2vwExXNLi;~rsodsKMCwtosn$lT#VHiuPJqg@c*`*KJESe`gfkcgP6%9*5(YKAGO` z$w@N_KD^ug1aCAiZQ8(M7r93=v|;jdCfr>(X%|>_@@dePPmqfM-glDv@ND##$5i%b zVpm~=)R^^{A)I^R^riQ)K}+^VF$>})%Sb~+k^C^!B>LtD>)kPu6 z65-w>(lmja)3-K->-dQC$!PhP!GWL~wA~(hu<_kreQ)J`4cfuyE5p>pIMe9yTsEr- zBBFy)1TTg8=U&5*-e)y0GJQ1FPRbfBn#^{NH#OiMq&m1C zXMBZxnwk6BvYHM|r{LF5+QN=`O%XM+-^!X2pJTl2a{l1#t)GZi;C@x+vr1X*b*uMa z&Um#Ah4ofA36T^&;e;`3CN}<4Mf1;(@X5F-gOp_w)`(X;?|gl2|JvVXyjEencz&{!Gl>D9fypahBjKgvOvviR;}Bk%e?nV7Xh9P2#-{dt@^VOB;7qm}=OW_TWl*U}R}P%d zO{p7_8gckw3aG=G!MZ%A+|iD)kDJoS3T>jzR=q`Yik7D1 zy4v3zd-}Hph|Ll+yY2P+rFe+;y`U<zF6S__!UTbGW(UxKYnf?qrQ3hb31&S{iu zx%RA8oB16XyqzgBMbd_!v5y|oTmav|<8t}UI3c}z* zEn|PnXK$X|#IiI!im9F|p9h|U;47!sT{@PUex~QV`(FegdNx>z+itAHalygioBi)e zOb`jr*p~+=^ay@PKyqcf$?8A}VVwQVR`5rLNm~wYTgry3|BJo1461AE+BSg@T!RO9 zg1ftG2=4CgE*pp72@>4hA-Ma--GaNjJKxSZC+B(I{<^!WtABM>|ASq{UX!)P8gtHZ z-}4$6rF66XEPTuGO46If3q^Uyc>;|2P8_sc1j?p#VY~+R?cF(O;tYKLy{&lnuea~G zYd=OB-GxufcR4H(GAb0)#o$c6gSvT*rXaZz3uUFqGplIYrf z4;(jAej2NK+ajI``WZP?TiVUr>&a!X+6Z3sHu!X3YoO*$+-rT3O*1ga;H4vl+!BJ} zM8h2uWHoc1jLo2(3$g_jsXpH5v$`{o(4?CP*ZWii{uk4OaDTX6{FXoC<5ly^8YL|UiEfwlxG{| zBwfDbz&!jaK3^2TLi~u-*@cT7OP`ml_a$!%mS#x4Q=# z&)92C;DqoMqJAE>GXgCv6x%zsGo6 z)(kTf_U`i>9vTu9?iG_gGY%7qb6q#E?Xvo+l^CK|R67KCe{waK=^GXi^FOQ{N_BJ? zB$IDsA$8W_Uzhk~u9W`U+LB$AVlrv!_v5q!nIfEX-rPEKummG>MjsUDbsk;;je=&8 zmeV!XycpB3OCURMwTi|8zZc^~9wE|ma`pm=TCW97t+`o%+>f06GZX&HUi9f0eS;^S zDW^WVZb23fiJ`(YVB`5PZS7MTva45cuHZNM@+h!$`N?i~D%bR;!23M(JhR+gb(EzRZDfAG>65clzJIb6(f+wTb*xjVslN3!OF%9aI z5=O#tL*8?h`Fh5uMeu52kBprXip!iLlwZXd=@Q*+hb$W(U2f?&WhxYCCYsyn+iSUy zlhs=fGk7$6Tgi|UbST- z=8+omYyU?Of4yr4*|>Nk+9J5#9rer{ib{p5X#C5%_~8~2t`h$Pwn5G)TZ!35Wz}Hn zso@jeOT1d&c!KJb?UK4hoj0NtWc*o>34ilf3qEIkTc-kR${Hd>`g*j98ikuEKd8rD zP6FkRXdZY7$}tK5VkyAe)oRCLN?2W}T$Br>1mfNs7!;afAYu0kIUTQ{VXJrWmjy+; zIm{0JOVTJ#I@B)N!4v7Ey^v?m(x`cPTsWBFw5B;<--FUukl z_Zc3QEDpNGJ*D|qEnV1vyY5MiIa{YvxRYEzJK4Tw-Dd8MM>(-wpGOf@#^Lq;3`s2$ zzF*C#92Brp*1-A^!xqy_Lhf z3dL0GUpT5j2-em~;g)B$x^&6!!Cjuh5=oT~LLn)SDv8o9AIM9;vOy?UD*OY~$fKR* zbF2O8krKjNq)o|Is}gmGDzup^mD`N1A79SXOQvj8bkJN5EmLYFscgB+(GVr{7bIgw zXK*(SOx?vUW~^;qxNPzxT_sV)KY%n(=xfVJzkdu0bXB|Fu_?uc8l2n>9I}t}66OyC z=MlU?x|%Wd z;>SEu0cY#%cPs6xjm|e=a}Np$1xO}M(JfhjGb7YC{J`Ijuh)4|zn)dTg&1J5T%WD! z<+zRC-d|S&BkgWndGMT}>EtphnS^%a`%wT0EE zDLnS+oVoy!O{8JaHH=F4?^NJtdctJ)hHr6B`2!nG>3J_se1BD*Yc6o2Qr?X9v6gL@ z@XKn4^5QONqav#4%3446jQ0+UP{i|dpHlm*uDoS0OwsX2l@%w6mLy861ZV@1;Jt6n zNA+2I#OjmtkZtG}3UrkrNAWz3qzZGins{w_o~`{#aS_UKzQL7b^!!l-7Mj#gr3jCODO(r3** z2^BUg$n8R?p2Zq2el#c*v;ukH^@sNUqU`c>yPl2vQ4XmKZ6|O7owX>3a_+4bn+!=0 zUG6OR8waPJE$>-_Y}W@sqydtr7I4&FQ6;BMxjG|CbwhzwLOmYJ8+;W+=)+GbS$E61-HbXq9&FkTH{6ENTjk9C zv7V%Yz7>N}ejn*8L5*_$S}_;730C&QPzh@`;!-$I2xTUWNe+KnQyBJdIicFG$1Pw^ zsCG}VPA8bQS9&~XDu@De$fgC!-+zv^&A|F%(#Ublep+j?TUIrZ_HNE3m3=E$TP&Vp z)E@|MCYK{r;Zprtl1TXb6cmb&1L7i%^Cuoe6-Dq(pJ;vkmnrYvUJs*PA`$0jL)f7< zymhu-xwhKjH*%1GQHmj&3!dXClmaR*Ma=1hi0-~ z1A1ingbrVZ+>T+Af`%W!)>jC(SJw|-Uxc^3dW*Q2;`8nf4B307MJd_6MCowUhVg_Q z3<$C9#RqUCtViR{S_z^H8>2syj@J=;6Eh&N#j6j<5W=-?LP6*wIdc4T`K#z9 z^e;k1*DEDctBF#Qta|iOm(&0X|8VS}{kRR~V=YI&WNEHsY(`6&1*stR2UBrFU|Gh5 z72gL5J3i6o3FLwA|E=Vzx^CKxuulpdZNP8fBnHtM=xI2^+{)trhB|cAD&-sKE8#(J zsp?es)UhHlYw!jvk8jlIA=FIOj>nW(PQXw}_k4SJH_>nXp@O0a=@pKd(BSv!g#8Y@ z*GXi1%NtM=6gP<56?dwH;v}<&_m$+f)GR5bv2R&HMQ}@I!k*lp|94-qK;JZ^Q9zMInAx z2?F|#VVh<}a6JWgRi-TTyZ_478b(t0-bc!L<&A!GJ@V_4LEci3PEj5+yo9fDu$gx= z|0ReV5xu6EmRj81bO3WT&QIlJYsn1JoAj@)4kISZY%CcD8w4D5f*DgjR?jKfUXw7# zQn8}Und+`I{9a6tiQf*d;SEzyM-X_B3J8@Q?V727pvDGQ;ffj3%PsLbHAizQuZ&Ab zlPK8>`vcRk2LVn>IzS;a2U9e82`BxJ!0*RK->uK}PUA4(`41ksPVl#E3F@lwe@(N< zG}%~X;z6)j`WVvuw`}Ql7JYltY`BfUb5FJnw_>2cW(OJe{UM`UEl_S^SrWMb6SE3$ znc#&I5IFl2*xi^sRei}~Z*wMGJ7?wBufuIr`z2&G^A5;SimBfT{g`i|%2@RcXz-Ub zxWzd4L8lp~Yr&ZH);&n(EMSgXfVzYWG}j4X<0aK~`8`O)>;5b(nfWBc6YWjw5Q$B zEeB4~gxNsU%TEFI-fkJx%Xoul96NMX>u7Vf#XBYL-#)VYJGikVB`0T_46{$zSir=! z_f&0X@et%EsOCwp>N3~Qenp0>vBWb(K?MP1Yr6qt)2R7Efg%%{bh7BnD;AbwfSAx{F z#C*%WZ-;Cp+zB>DQpmywXFfVF!LFRZ)_rQkB?PV zj6h_smDmI=r+-?Dg@a0yptG(;0W-$;>C5lDtgO_R{?IJ8r|aS2h_3GXrM!5`Pz4$q zfW=n)k~GSvzjjDQrg2(M(ovJuTp5Y})$)?Kwc=y8zi@!~8pK5Wx!YVTf0Q}Co;)== z3>vm6WJ-K%eLB1)*E4>1F|qC*-;axj@%Zjo+onBhE3mh&!UXf>fq^X?h95+R3p8R8 z|DjLlCO7pt?i7l5ALRw|BF(X@H(W4+;H&4d7IT%BzTZ*zj>2DfREBk_XYb9a?SyP8 zY%?EmK3BApkBigLfR6q_-`N7W-ZtHoN~M?0-q?9Q#iW1~vv^f)fQ|!AV*P{KYGL7KM~lqzB>JjkQ1*SqORY40rbZ1j3S zieq({wJB43l>Sw=`(DdcNi(SRwfN2#+S;KbX3ui7xNNiG12#fhV9Pgol*4+g+s_qY z^XG~FInRYt{3b?Pm`j<*8yKGmu}d>jFR1rcrXdB6SDJA%b~58o$?K5;Zg`)fzkZ4N zn;mkvUcza&xUIKLdFddVuqdVAi#fKSo-+=qwG6n_E($kpngrv;W#YSC!9)XK>D z`m(Nj%(bVtL5lmm#Gb&SSzP62`J1xTNZptSxeW+H&E*a8>QKWRLs3j1)8q2Ahi`uq zMRTPc|m7o6@8DZ`aQS( zX13P}RxZL6$#@bw+un`iMw;qic1oC#TZZT8{(y7*zJ6~*S&Mti=lwz1454UWjQIQW zxPGJsPZ{S%p=&cI`FxyTF80zidPK})@f%xuj_$w2u89^4NOU3|I-FvhhcB<+NLSDB z#9d~^fK5-|GzXQ9LEoRQ7#P!8(}en$b#pFoR@U7*4fbcX>UoTkFF39W$ps<=Jam`i zA`W-%dVKM?@K`T_FB`;zykx(UCqqd9CwKNhcm_!hz# zU+rA&LvwTA?M5Dj%Lmst>d~_P z^i5=<&BY2Ew;{mamP1`uE8@y6u8VMp>JX7i0N(9(G&n<7=^Fcn&$k7OGOZYNC7b^q z8dxh8wdiM6iYX<<72LwZ(a)ybJ&Z$Ws6djh--`!`c%UJmLDB6I!?)PHO|fg{#<*alm!AVHt`v3 zb^dhIVa}vu#14|TgXC?$Jhe?aR`o1OqA7X`1pk7y+Y@o@x^Dwsahk>%)bwt-cb zNeqq{OS+-DK5ct{D}x*tj60t|{SnzqRp<@9PuElK@I~`@m8@w%k~f*H&K3F;)y`s_ z6-+aLP)g&0iaO5p;I-j&RYIJ+p?i4*c#b-a5H7N+^$dsmH(*}{{`xQy3`ZO9AKLmr zMXPC>pm?u}EDMX^IK#aD_*bXK1Kf~JTeF=Ho7Q~b<%dx~6C3C#E@nv2bbkrS8pFUM z%RD90p)NWg*M5=O6>#)_=!CdyjmqN@W$472e^c7ei;Fl^u-MA5#0J7H{fFN&+q}Rd zNRDwjR`w#8*4;Wp-eTp7ifokMcIQKdz)(@Yq3*X4 z35JAk%5b`=23Nch4CLqw9ZR=WxhF+en` zXpFD@9u18UZ-n|Vj!4kk6pL2^`Dqp!JSJSv3T1*eVSSxiKIxv;1Vvx;-vMHWFxifG zJH}(^M)1Mws2y=68XN8)V9BN(K+~{bl@saLM$@clZbub0`d}Vqxb-UCI@!xAhwNgy z*q=wfr+A9)I)}B}968}OU;9SXlm9}qVZ0YKSn(Nqj3`Uq7aI}^=BhY-Wnz zDDI|1dBF|+H0E;YfP|wgD@ji`3MNKy<2LQgK^tsc#7=6-Hy384%-&2fxwc&sU~_%x z1Z1&#P*4vcDX+G=nmVg%e_?j3u1n16zvhw@X(T&PACe=b`!@n?jpHJH- zHHm6uEadSn+mu;rjd$2#3dQ4v#*nJGe3cp#R0(BQ-LH^ywyK~ORrD@%Y&qf&>%6$e zdsZ_;$pXA=J}X-{=|w& z`BQWL)0bNq9Lz>$~1LJ~`IX-hfe&xXFI@|Iu6#{KWxD*lL zL9U7~x|;F9CxjK^u|WN6GzvxdAC=O8}fP(IS`D5En&ql99qS|=8UjjF_cHw^fm?OE1KJ|ib*49l@ zKhZpV$5M_)p%YgG_3UhbteboQX62<62@m6!`Q(JX#R?6)3PyWtQA5SW2)L*qHQ3rf zc>CqF&OL$w-;JDID|EB!F`ce2(2WQV{%Q}fWfhOQ5Zvw%9SW6mQ5j1#HOQ&H^O3Fo z8Q9YZ7Ign$P#eLs8Z!<}_OQ@mibEk__4Vy)L6Dc@6If;I4gHjFNdTD{1Fy|8>t{ig zQ>&?>x#cgRwTFPi7zRbRpNp%0Hu(LlWY~q23)$)w97#KUe}p6?IDb@0 zcMobfRnE9`LK7=!R93e?b2G?Z` z->SSwSK(5=Ua*KTE-gV(nBKZu_yjzvLa7Ldw_(Dl^*!==qn25VXeBK@>F-3t7kzM* zkn-i8qxFIv*L=l^L9Ff1^NX#owi&pew2m9<*Ua;MBngSS1fnWfgqE6;sZ9q}pQA%? zc)!=VqS)~aSt2$6#ZBw6BPOe2J*-kREy>Y(v9ZTl{mLeLneGn;0QF9KM$F~iB_@_& z^S5i&@=LcH_j}=#xF5Tf$ckZfz%z_CQ|rxX)U0Dt;TmPKm^*TJXeWdyq`q}v?vj8q@o*ooSUhi z68K)cF-lA@Rv_al8LYAsMYbBdf@!t3u5RgjojTdfu#N_Uz`{agz{|`JluU9=*M_Gf z&}$~Hxeh;5uv|V zMQ>eGip?_EDSE2LJ4`xwP&@)J$|XT^sSV*Bv|N8Xp>KewIv`hel}5-<*eMsiLGcw< zttH!?YqzY1|1MrltZ0s9-3`zkug1Q9ELUAapU^GkWj3&kY)w;e6~&TMK6xP z2u-1@{!2+%4u@lO<*&_^{3^+3kCx2X6tF)CD< zAQ#XCc4UUaJt&M_Sxtq>e*fhTH5-wJ;RI-1x{-8m3MtyanyA5p+w++0Ob7{c<7qg- z>g~%bLG?37m#xuv7X_kxl+pHr9esv%S*^pFjeT+P%1+peKpxV2>m_vP{AkpLPz+=s<=(D-KO z2?-@Fcjt?c>Ri>>fhkCy1z{IVQela?ydl&)Y@%*o4@=L*|*SQ-N6noDj zyrjsQo{-+>dYQ16shvwc7>F9TwxI0W(=e`bpGB{;dPapzX0X%jP~zfweut6OIxy1o z7nJ#fM+Jvde$JSWffIpP-&V!Atl-D>v(*GR>BEF|i+4@hEIl(&C$vB>gW5O@qt_IE zOAVX6y-A}xBl_6x31xdot<>IWNt1)7IW*dR2;q@?0DY;jVXt=N$Fg5~E0rDV$Euvk z3kDV=7B?nua*ZjV21~;i3rW6O57K+}p4dJsO}aOI$=%#^iy4CSZ7E@UZ3SB^F{?d6 zuuk8c>)ZzufA(wYtBTfKI=cDX`QuKF zsiZH7>bz!;(ZtfIzGs$m;i&dFRd=Ufjy&>g{~wC&fo4KGw5g zkYOO1=>a$DuatPwohOrJuH5vVlEPcM!XZ(;H=2P#D-%%3elE9sp-8G>g=%1P%<>qDzBvP)v6wpz=FT=IHWq;Xl~Je zbH=Z>%8cSmiyM{j@LvITV}kO&WojuBzhzXz0H-5**=T;?v*^RkJtL{ve*7G@=xQvAnVdSjuq{i6Ovmq zRbgv2oQ2oC{<6A6qija>5BAf};M4^3mZ7PMrR&&_x%M`e*a6kCr-sIyY8uTwYiP3+D32+_{=9(l~~?*8xjpDku{~ z?U6o5tG(`L4(A`YAm0v@HqOjqy52px!9lPN7f-2c`O6WT+MvxR?zS|hJif<-eCQdT zejm5IvLP@}NRS9ng$76VB78vR*JCH3UoHJMU+kb9XYeiqH7j>zV#=@8j-#{U#N7q( zGBq9g-ql)O1nBYPspSF#kw;h5;sa&(89Q1k8(QI$jqpy4!?{C!Pxwno&6+$45!PGK z02Z+G1kizgo7?<(m}A5G*sAIyAC4D;ve4?6ulH=e*e7r7%rZf`SS&F6!-P=aqN3NS zb3cUq40EQ`J<#+{7Q*}v;tcjUF}tj8bFxZM(``Fcj|@Em1HqVX={-Td2;IP8O~TJ? zxl~6)-m=G48%w;i`78J{>+4#!jBE{ER#x*yFOQ!Ea2qz)xEdxWb3$uuTzFq}-B7Z)Rf__^aG2}c5M-?ET7RC=!iCcieUr35 zS&Fi6z+K!T%Bm-NXD3?|awJ1Ytf3q^G$j43?FygSW?G5_0ZKt6!jTzU8On|X!+7O& zLuFEWEuZM0#(6N_FKzg8QY%L8ffka`@DK?2dy7kF*pO7Z#X^^%mEFGE2zbp@-LDBO z>x{c{-f9KZ(=U+VVrEGCm-`)t$t3r277Thi&-j>&i=_59LfS*&J=Rx~>aFDOKZqGI z!|YH0iHHUvK^_esoXgp3m%{znU~spwTWu-K_OP!-%Ik^5tj07S`^77Mgk7Z z0p&8r7(ybmvt%PKtX)BOAHI;!@;mUh-FT=sj|gwhg31Js&N>Xq_8E7Cts6FocY6&v z>Y%>HLY*k1GHWVizgpH`^EAdOqSATQQ6{d~6>6Ox@8Sob?H;46KinsDMH||_$`p7SwmdltJypa>fE_!yiY0NE)fd@(X_Q^N& z(Z|{$u;AGPD!Qq!v4MV{(V%8`UMLn%mi;YX_>dtgvdSXZm1}zt)T~ApF9R>%9x1#+ zYJZ->W}}-mw8Qa?t9|okde0E!*54X+kWNv8e~>!iN(hN=B$EZLP2t=sC+LtGnX4gR z2@|`~f1q=ISlHZ_Q`hj((w1oXthk;Ag5Z>&1cPFGOaGKt$qMJhD2&~t4JxL4IZRa9 z!ujVWxIeJl$6&J#rEtlX=D?!^bOVTJ%_cbK3-BR}`cKNLbI*@kRgw` z8rSbGPvhYL-d4ePD(gUiT@WyiV4=Xlak(OOXU9eI?N~1Iqj^X|=vWcKE_sFM*oDsd z%hHy+_Euig^APF?HX8!HliJpkj7bsZkTxCW)@9R~{i7=}QYB(PjFLnUA?Lel(Tgut zn(>(1TTc;Ojbz*b8i}NgHiMeljTOFjb=c$$j3Yl!=fQ|d0Z zgt{7!NbO_OD;(e9pVmz{(BtOG;Y=#T%N?f*0hhnHV7}Cv&D-Q?m%Y=F0|!aR&@4xS zc$`jhD|+O@0H0`!z>JAQ29Y@iJKCOCH!~Qt956^P4buG;QmW~sTIUR9szg9lyK1?b z%ryS7yAQ7{(6ejljLjIm=+NP8Q|R79t}o5+Q_{;_&tZ*4!_V7o34mVhBpPJx+~n#M z#?t5dc?DW}aobDSw4wG{S1;l5KtJ!9BO4J^eoZEPQ}(U}fYi;5PoFWv>k90BoD#~1 z@ilQ99em?%$l=)6Sq|cObTY%{D6|06vEYavYrM9KLZ6xVqozutEC?@5Ps8{gXS`7r z-eu77P|?AA2|u)qdl}Fraz+@KEIQG;As;xygZRra*Tko8?>1QPV{FD@+!vk(%4_M) zKk|PN%J#A^mMs#A66Flph6Bb5@?IqEGKr?v=#F0lJDGg%SuX!{Ha#&4ZKvK1bUk!XDe3mOZQ;HV4r*4paiKqww!+O4Y zg4j_Z3C|2SG-#2yBX&;V5$EwVn7^B!)e|Wut?1ck) zeeh3tNa?x!D3vG+3P>8j)ISO3>q`s+gAMHk?KPtJ6HN^;_v$+PNI0s(?x%g21x#!C%UZH4Z3WZuW423)c)x_Zd!TunsA7Zlp46nBrqzx<|# z^$h&)zBD#J5OH#X5fJ2Va5+%BzDm5{UwHC>>+%Op$tJ{#2Pw|0Q6F1*X!Qg_=iA(m)stg z$SFs-P>h8GWt4OnyZdEV^pJ!BZQ*q?0r~>1P5_+x*VIDxPTzsIKK-RVlslvROT``4 zW(o}Cx%tBcbBnGWhQ#&a4ut;e23L4Agc~;4*o$M%5Qfsi1h3zpNWBZi~ch zYv`|?bD%yRu~BwGfa_G}z+Gq==^u+P?S>Sqdwqh1K-Zf36~caN@0j^j4)}9ceh>@B zi04d{j2Bwqy@Z5aYt=m>8GM|j$fMd@P!(h*T`ed_tsxt&E(bH?tGSvhR_wJ0fMv_e zgW3o#2~{z>g?8A1d9S>ywmg7XSVTU%CWHWfzN%G6Jz2<6}D?J9SpWt!V}I{1jRjmCqVJ7|h>|P%!e{^{{htjbfAa zU_2r`YpCo*J#@dHd*ab!Ht5Y&5S3O2QgIj#VGQFN$>~_AT+G44q z{%c0Xi*QTY;;{L*S>hvOyn0IGtZbX9$%^V4FbfGoP$a@jYyz#m?ino0K{BBkeEo zX8=59-62z^kH2{QEC=bJfVt^vC!y(oXo2bpRQEv~>jwlh#%Y-Q*taWV zmjaD)5^kcRzxE_-@-(KQMsT^3&bw(#id9-{pozw1a@z0>`y&WBE1yW(}+_P{FN(4WkG6%E0Wx z3%iE>jQJFNO8C28PeR&Bv_7BDerDDBc1y{rQ~VGnl%p3qB=dyI*j@1Q>8OL6c}686 zx275O5I!M3{HMHrV(F)}#1nB7w;#)I!oDjn!pOLPzR52vGDSONbHw;~5hF0a%eLxP zCo*#E&i|P@?AwQ*n3eSE{!uM=L`)Z;jk!BAar+py{u2pOCXM(KK5qXy$27xr6%$C( zBVmR>fCw8XVw>As-W%38Wk=Bcx!T`BUqo2@P)aIdAWpK1lm>D5jVN4@l$>0>Yf`|rJvsJI{K{^0N#Olc@6fLCwZK55|@|zix!pUv}0fx zN?PVKF7EZeh=cx${y%?(ih6_b|L(W-d0fbu_3(X!8UVF;ZZ*F{YFOAlN66n#?7j{P zyzaXa%mp4qW`4^TGL;TV(0Dtj{=Ve;{71-v6kqYv2j^|f_^a^0o>JHE((VAvv*us7 znwcMTf5O5d1<#v~G6=hf+wN&g+TC(*EC$&c z@wZp@q?UcUk@MQ__=Xrk6546;)v#^kclxKys1o$Ex%Hdq!jD>pw(2CkL+>>w-0!Fj zbA=gKUC69?(>4UWkhDXa42ABAX=OCCr(U-Z=w-L#oVc-fQbdcQ(=F58X(TaX9GjutsJyVoL?zDGT`xvS3>X;Ai6V zgl^WrNtVdi@1K0Cy43cw3pUXll%8S)q~TLAtVKvCf2kZ3@+u&91%^QWbT%=#bj=QyNN4YnMgl~U# z>p`3TrzqJzvle?g!V{thS5BO|ga6JA_p!{(SnrH?Dz%8%l)-!LUtZdjV% z>|}O(zB%YRPuhP+n0cG|6|GU8vI@y0z{JkF^85N>|YjrUTVpuL_*Q zGRQ`%!f1H&0-Me3UBx^*^^XH=$N>ilXLR2l3Bwh&rZ05agH@O3S}zgXE84eI(xNN8t`i9Gf9kq7MnANhVwn(}`t$!AGE7*qo9Mo%momULGEozYLqs zd+=~Aqm^Loj(57xLS4M9iKK-5TfY`oNdogtzH6g$5Q6*e`f$cZL zsuQQMr|J(WF<{4dkW>TI3`CoKV4RUv!MQDj&+j1CP0zlPFSUyuw4DwqMO4n+uMhgG zx(g7?1D&8ix2TBcPcDN5@6Ky!hr=0U3JZr5QCI)ZlBXZ>vBneq>-TB_Zn&c$lkV;u zRNTzy?h@0T%CkgcQrBUmyj?f%?*Lo}{!PPr{i|p+szYZnfX^sfuiZiy_W#*C z;pxmOtVrCy0+syu=97<8x2b2?(jn$JGcWmt_#50?jvf;5IX6p)TFAuYJvFuE1=S7u z-=WY+lvQY4MEwYhQ`~f)OgV@gTvma%H=akz#-=hZ&kdU5`^QZ_sT;E)$>hWlgU~7r zlH@VQgrNQ!~T+s&-tOA2dHBQlXfbpiU>LFm{^0fv-;@7 z^Kmi9fJEs4Pv{w=#6@K`Ym{a8e;U-dD3$J~XcB~qj zF2Jg%iOkn=VscEPyahFNsl9+_bU!Y>WxyR*8Sn@S^wa#xsLB`GX?8%5j-wdWzQ}=S zJdkwefRE^kTxgVNxIO(w*x%k?Zoq!`*|(oHqK%r`!I{Ip zHbQ;~7=1tNPs?C-5D$O&<|7b#bwm>h&Rw%Oju(@)r`o$+ng1FyaHB=mM zC~&@fe8_>1aIsZB9G^`wvRjD|GXd!SRaNG_lsXb^o4L%z*cPyvBqY2D29r#Z&APL< zuqnG7 zrVbC6=;c)sSv;XXC|)V#D2$yakq*!oDbr6+EeAzNd7(5<5cWU|AciK(#1HpU>ZEFC_jb+fXIg~_!nH_*vtnKD33*iXw z+q=X~A@(@O@Pmzrl=$PM17#h2;VEc4jMe!O`1qLx(67}ghL)VxQ(D}f#jS|5f&lJ*{WeqBjzOve=~%6NIuQd zpYq2fD0EOhEE)DyJV^WrcdC9=C0H^%MrF=n1)7O7BO|6%gR=T0?)HXv`SzeWy7~6* z_T=LPKOgp0O6`$*r48?1LZaoh4(sN3v7+fi9veD27s*v#EKH@u%_kX;1#IJYz$Vm2 z&Dlp?gR;{P{Utf{>ArKp5}QYaS2HiA3mvQt^SbqO{GRKs)7ej#ZWxfYAB@&YZLtqH zl{leXHM8<@`mo|q@S9PLLXi6fLz7`Jh6+8j+txZz@qw0ShA4ufqQ;OQ-&njWN>*AH zQiH@qjf?u_P(;$lb!0a++@wh79$Z4-XtX1}9AtQnhj>>U+^>_3d z5n@*_>-=nB#J;{&)j02;iW!LcOK(`UqaVM^ih^uP^OH#D=jUSQ$6WUKrtnT)gk{SP z;3_2^BxGD(8y0MsSE}t1SQHw$008cY#yLGE!+*P%P+BkNS|p#OlCD?iI>#E!I(^ef zz0ICTCx95yA|n^a;p*sWrK%+a7GbbBqQJ@ z&W*izSI&^Jx4GXD6BDby^#SZzcu@Tl0lnvbRN6zP^oJxC1!&xf1}%C~bG$y*;PWQ@0Wt2gHFh-U_MuoSuCcaa+ownGy{9 z@9s|7$o+3mT_~9VzSVUkpG^sSwPR9f(K*NZ>$0dUJWNQ;k^1xK@`o#ux8RzVa=H@B z(m$5Ha8EvtkGcKsM3;IbtPMq2(`0nr75V&(>Fsc-iSqtU2l`1Gbi&eNQQ$VEi_oNd z^1pb`c`V9zDh;DV&zTX4bz+Fs^`WC?#+Z5INRZS3BZLn;l+h(K>(?;%Ng!}lKvDL zycF$FZ+fm17v^Pi=7T4X zkP%+Dnf+dL^o)?apF{VGxFnRDc~Jqn4E+EXZ?Erc{fE)V+EsbKS? zgPlX#fo3Puz79A1htU{yg98X94JrfQ-}#Bbbtpf@BKAeKQV zZ3drL5~-GHsz&9}!5i!x`=9re+mQF?&-lPpHS`9YSag$Vw;&|^xHYPuwU_l~fymLy zAF7f0y*WRzMmRE?;@>!MeR=DfbqZY&b)z@te8a|RKNKV^8cBJw zypN#J>NJ_-k^F!`1yqa@4QTyY+~{5S+HCrGChQji%<~Z$&QL6y%_+ znTV`lL9V$yS~SgaTU)$n+-W3Fbe@pjorDf=q_}TppyMSR$mrOJRiC$_NdIe2l>vUI zBWF^NrqJNJw@;EA!tK{Aa_+509%luG8#sGzx`af_b{4?1Bu4@hi0 zB6tlD2cXz@oES;syPTYTPw`x4TL)>09{Akz)#YctZ0835Z%-MZZPP+7+k9YfE0Sm~bsKI%r%giA%h?feWt z-@o4>*BM<~8e9A{zfQEyza*Cl3Sy8hiRyy{V#=l~I+32PNO#Fpxc)Ep&N8aXw*AwB zNOyOO2uMnIqqKCpLApUYr5iy?DGBNBP66o-*)-CP#HQy)tmk>(|IB=ywdUhqE_Lra zuj@RI-*N7{bHi5qA3lyKMLXvdQFPLAdu9Fd?xBtCwFNx4{ebd1G8DinMqRD&{VclfCK zx*_!ZzJcaD{*7_5K0@<18W`OQNosWRhp->?S3hvYm=u(6UA#^7!|KZCN_~ylb>bcn zgmVp)Qed{^RcO8Pi<3@2*Qzh_HMBpo+!LS@sz*K^_g7!zO)o?~wL*GV^cZ*AQbjK; z;gizK&3aV-@oBu)>k>oUzN9P)xiQ;KC3`jk;Z;>jEK<=4uflai4yL2e3TrrDaPkqs z%1&5`YZ3lyZT&Sx4QFa@42FBI2%^5nVn_ z8?JA#LHDJ+?kd`jn9ux(zs8o_&%$_=W0z#Sr|BIv;Hi1_a9|d0P0;||bwB;YDL?;F z$Q^5SHDxFT*6lkl-t|yW_5U1Hi_fn9>w2I+-rfsnIOV(d^A+b&{C>(j?GN-YuW4=!}g9t#H!950%eX zVweN&^;L??@b%wYS??6!NtD2|aJ)0WTy%(o)8XfMN5;5_XapqSH7;;GqkQFRTH76d)$F0Zy(oL}C^345I4}&7^JT3VUBd%&lqPaZwn5&0_Qg^7JYETTWF9%RRy{qAmFN?$Lvh zPLdj%a?C=q^V6sBC63ww-;=jSKuPq|JtSTpuFQNiW>x-ZG;;X9t%K?YXDJcOde8V3 zi8-$KYR0NOMW;Ei=RK?Sfbet2dmZV;v5rEh(@BAV@lvt1YpXAAH@<@?gx~8-_adje zI#t!M+82yQ9ni_^&z?XN2QCiEhx@E$K1;~Fe1Go(~w5)9SK?Y{QKosD%PGSDpZ}ZEG<-(4Q4m3VBN( zg0xfehRuslZs`v@=fnpck)dBVs3pu%?kQti1YRuWtaDfylK4dilW@2v1_lhA=JXtv zXmWKEHE(;{5P}6O3w``$~QCmaGLP5z;iD#7|!orMsm0ZS8p_B4ld{97;xOI&pN zgeZxZDBGB|8P^9hI z!V)>jLUEsrKo0!FH}1)}N|uu4;#xPj-LJ>JXfv33oUGgVjlLt`!w65@8ROg6)Ht4Pt@c4X)_EeaPpI8FlaZW6$*D%R6 z;4U4ZAmkO%fQm8@Xl|>Brd{1BOJ#!uMH2~?D{w0}$Fg&;q(P4 znqxc3!Ffa&>V-KRPZ7K`{(l^A=hb5TZB~+08eJj(8r*SxmVwl1SSM*Vm;h3tXBotY zovg&VL}3_N5%7XGu=>GEX`Yp|PtX@La7IB!SYcQ3b)F;j`ehh5yD*pCkKu#YtTU>L zP|H^Bwl&s+6;VfRpQ=$7l>Y%XdaoWp{l%_4(j3o;7N#@y3SgdSWpNwT-LamXft;@dkj4!M3okmr9)*V(>eKfidi z({_rf+yu}4=EONr!1b-;R?ef9 zK|e797~~F!8Yfk?Sb76=epwmjLvBi9jqijs325y}Dv353s$C(PrVpTY3?RbS5=TFK zfIBvweTlS?S0RL_Z=JqI;41IlF5SmFvIr_iyORy@a``#x8X+Y zdhVmaqstZTEPfNfN{le3Pn|CQcuHNY5z>GawNHE*!~FQT6Df3F$j%CfF%^PNTIKuF za2M5U{vMHNZUWEY0TsTT_aIpU=G zk-JCgv@a|aVqVn;L|%I$6|DykUKS*xZ0i^q825}` zybALgASe!$1f_^}!DR#RUFS5WJI^3-ay!TU^ztNNNoY9`8 z>8EYH#KCn&^UqI2^YOjEut*{Ef<~@m;08N4CGeyD_QnV7yy;gp9oT+-j$N+?*U-ts zx=XXDUM@1Dq!L?_t>smP+;tyv!9A1rRpl7rH5w4qUXy${(&e#IPYo$wIv7#L3oBu{ zLxgxK> zrpbk{ssghU+`ja}J63k+-RzC-e_)nA8+R$xqk=5ahuW-1!}R;-IzJh@@9U3HnHQOb z=y8M@*Ovfef8WQOG!l5`dtEMB*4SzJsib(d-msa_Zu9dkZfpcAW>|oDdJq}suAPnb zSgn*zcXN5x;i0ifA=YAKe_qte{D(?dB~(064^Z-YnYPS}D6ZdGa=lj>yFPLdes(fB z1=$#oix-iOx^f_P+?G>HX{nSSxeo39`Zx&T<{r@S4GNbR0mYs?5-IDkdqws&*aY;x z1ZZwtu7H9vcVL_rNK`)JK2VaI-A$M6So+udN!nWxO1_g&aBM z?e`Spv$#eOxRJ#4LEf|avIrs$DhhVJvr4T2&G|N`nmqczHul+< z8rp_tWT3KE`e=jlL)|&0)tmI$s_m&KF|t=an)1Cv>Kfh^R4jQ_h<}iep}U#yB^ zn;Rt+#=E39OCefPA+za~I=&N36_!y$RUpu?RGs?F2Je^3uIOkP*izd2lIa;Ga;3ZL zCZCO0GoBZ@+RJYNTQ((OwZs{^{;eTAR*<$KHPZ6)(lCXh^>zGLt9T-F>53o{1Np=} zS;yToT=6A$Y9s@RQul9Ni4K#B!%erWjU|0rvcdAG!!GahGM-n-VeKb=$WPZH=OUuh zRb}KvlKO42$6-NN#HRiaq=I$fdEcEpGg>P>7up$>C8-D24JN56VJ@=M7a1uB4Crgw z`tt+)=qhGtFI<*&zCG-qXC&TncXlwmDe*vs?M2YVv>esX3WkDB_$D0qEci zU)$_SNYQ<+0k?E{+?-T=Jg{=eJ^%`jjp08*j2###efM$@244X#l}f_p<1y9Dmr>(f z48d{%VrPg~j#9SQp-#-hpFH@`F%Ww z2M`UW603slWWVvm3l_VP2#OWE+VcmSDcHu2PyF9$TsQ-f^|`LQ{yQ@~^T0py^El7O zi#Jsh?XiX55to=)N1Wqqk^&3IbUo-_%f}Y3zdHrh!rqWRM&}69PV$eEw-x*=%)2`N zn>keIZ~ZD?WI`lgtK`@4^LnU&4rYf$$PXET`PW+ew4=23l6$VgRX9~8? z!v+lwcu4g#NeF8~3xrJh{9r&lk!+*j1Dh}L7Z=+u+S4)YsZk!phWE_p;bX$&^prp3 zK&Yk*iHbt^{lc8qr{&K|PqX~QPWhWLIgO@bJX*=IGY`+;FqwqMCvlCb>qRpd7i0-R zHarIHCPGCmC-Vo;|Cub$al_YtcW6_sSfnkXk@7l?FN77zAvk0%@|7aS(+{d>j}iSH zBf{a;irDyQaKAoqifuOC3ynAkE=aqFFwFb(T>O)`uK#6UgdvcOe<7GzjPRlq9w88X zVP))2*t4bLG3nrzhhHXRuR;;MWDx71aViWGk-fIie0!mt6W<-}Ava)wnY(>ggv}sX zSlkZ%YTp1dGkz0X?CHH74GSU||2A`Z(5>ENMUf@Ii6IPC&SJQYj{LN|Gi2(ua{k(3 zbW-Df1!1TQ{d@<~yMp27W)xgY2&}#fNm-_hK6sd^Lqo?llp)!R;7 zg;d|;;n{|I`SwFT^D|>Ujv>N#&?5UiT6>f`*>oKN(@#0aD1erJ>${zU*Uf@2-)33^e;p)-Wi`GmLzwcNk95lwZs#+$A`Nla9_9N*M!z6+a| zmn#fOC@7UoqP}MN3gW)97wbV$;h?^xvT~zkTAiII`-jBwKT(cpy-RDSK?&+i`KlT5 zv`o)oFGEAecyM-_qDHK#5e%gSRMcvJMUDEN-8L`>JvP#-?uki_AR>i9hAb=eMLutl1+ucyFEV$v?r%Nvip=htDcK#0L|2;> zdErV@FZyV4aH18$Qw)6=s6LPD!nR2lTH^K|30BtgzTl;DT7g=I%<<#qtW}A}R-Z1h ziX24`?D{lT>`pg{DE>~gP8^P<-xY3A+9mpd!fhQHqx0#63&Sx%Sa5z*OC{!_N1MwF zQw;&JPq97oM8v>OqT58R;A<2^MYe*TApzr}g%RrW?{`3xQKK)lBGl*2re5B}kY1;r zdh0>AC9C+{BKqAa)V3)V#&@KFZ&~gS-w@m$X^-H$XQKiDYKN0A%vpk1xjUen7Q6fq zN;+Yxn($eqvs=cTND%Y)XdiVN$=4aERjuMd#+P6By_iBd_&i5EzSYycCZyD-jTIQ} z))OD&ImL=(BsYrwXw&(9T|*k|Ga}!YOI&!*)bh#qgwbDK$B->qkJ0KW<~-r^_1C?6 z$>PLjHNl>%8#B55Vu?rnasVOm#divqFUKB3#xP?uTu)-Yiq-Q$|EU=cRjy8)^V}sW z#joiCV4?C@n15z5QCWWHG-pfqu#pJ_{-m1Z=bPEpMOG8 za_Hn;B*TgjlpCtPq{fBi<%|P13^^*8^FZoH6FiTrn0@%s0ZwStu;9S4wLJ7BZ)-N{zlZr6$y-av zKUN}BmG0(i@37KdSP^#uLPX-ig4VYOSRvNUVCx0ey6HD)NYs?)5B~yxkg#fDWXKNS zocrBK_5zE$&W}mF1iq&F@rJMPBSHIhuT3utriq`0_~5(Y@gw2wvDXw_e{9mBI+PP{ zb*v$a2-!Va54i_4{o67d>wh6u>G05p3Xr#37cYf{%)kD~k3Fs6ObB5>%Wu?S_WTM3 z;weh}Z=9ER`g_1QQTJFh-oy9{lEp1BQ^-hHL z08+>`Ha<$^C)5#q}zIi6^e;zp6KCfE%Sk9&}dKZ zr5hXkm##sy+9ottaiPBhO*_uDeoGVHKPxTA^g2<(NjHDeOwQt8@kDPSyVrr%aBpAj z`CPm+vQ&e4trAdlE(aXw(JNNF7`^9W-r|BghP$(>a{@2ZGnjzI%jvHpjsx?BsMp5X zl6m`yPU+4!f}n@&J%$}i`rl|$TXMIx-f{?2XZ=sB25mbR9)m zTy)ZH^p(Oj)4~dO1lz_i7U8CQl{CrQB@tIsH);D1#L5IqTtcHsi$QQC|W+X`tU} z>Nn3vEU`S`O3;8?YI$$|7T&NBC!Tx_vX;QHj=(oJfoJ#ak*6P?u1<)-rU0-I3XJ^w zVIw50>H>wqBZItJhP*pR{XTq~q!p9<;u@U%2n-6R}1INQ6Xx z0>DQ`=pTRXt%6XI07#CDQt%qHJDqYyX%0{KS5`q-v`f0H<1BZo+8#|THjn7bZ%WQw zPXhHlvc4j0gqS2KS)X@!I7og_Or?BPM$Jv@n0@jtI1t>h849o5yFK&HuP18)p}FL| z&Mqk|v@<0$)WqyUSvR8Ykngj27x}WQKaYj8^RY@^v52Y&a=M>`$K?jBRg7`Ktgo&<75}-5wzBR3uC|Mx%kCq`+l9Q?SjaDs==PI`|NsB=qrvz8 z;E~wh|6+LjR*FtR@ec1Bmy~5Q>xi^F3m5fO_UU=vp`O!God0kor#OnQ?bvm!SN>@I z=VtDfKtWa!7o?zK#}hP{i!(g_a=z`wesMG|~IvaHP>$ z_ue>VHb%1WiF}7iOupWE#|B+9OWb!5 zq;g_Q@#v!mg`|!P)IetTQr{VU&h9Gn3q5N$i)Q)*Ww- zjx&1Pbm7hdd%5ehPF9A1QyJbfsnT`Qyx??ozDR(Dl|bw1=Y>YVg-&|?M!lRHbuxc* zh>)n_$<1$79zs9`ErETq%)!(>Ex(5VCztm-+ww8{wT$04lrQ|Hq#3X-lpGoN`t#Jt zo<)kFEBw97rg}kNG5<=k2L924)ATA7t1`A;TWvXI3}=p>E6lo;al7w5jnTm`{HYN$ zK6V*(lppQS!poDUzoAreoq?Dwj0?r$IxSwzZ$&KRauF^EsJsxY(Mwq+?{p&DiG%y(=9 z-QEynT$hM|we&^_uxG%?>_7k z(3Vx`8QTUTtTAUHKo{Y%r zb&)Uv0sQ+UMwAtW77ms>HiZ%yk~|e&F+GzpT{llhRG2W`X?tRt4D6uhbmc+)q^Io!O^xb{0rNS+yF&k7HLB-a1Fw?0htBGj zAQ?Kvq`Q#;VS`qc3%U*z(O3rPxl?f^DG4>NX7ci_>tSZ!E+>q6d(1C*xLjBz_0fsc z4(S18DFp+4g?;qUK*+IFhm2l>G|kb~l9Dw~o3BToa8OYsm69=-Uq{k%Yuj3 zg9i5xW-{;nqyQaU4C!4Ap1ctBz-X5^TMo*pXji!(oo}kXaCWOP^VeJ~C~u<1QY?PZ z=1_5;kIx;0?>2_?wQXh&j^0UIDArY%s{1RFJP~IhR`GO*68whs*W>K-L!MV;S1_Z* z49sno4A4H82T6l4&JO}!hIH73pAzblTIN-;dbzX46>A0M4$6utv{=Xx@WR~hFDRwt zAQ>;*Q;AuF(Dc1_@@Z7a_Vy-+)C$58+4DNXNs@mO3Rn%`$?Wi_axUXf**%3rwo88V z_APqB%~JDQj?FsMjDMG8wuo<~d;ZS?(~e(MW^>c@yOJ;soQf`t0sg$&_8xa;K4?8r zv$T?(RoEH1&~~lXcPtAVp3X*Z=~JxfwfrZ(Db-)y_d7Wqw(>H?aC~z7=6xqZW5|i0 zDmQ6Cr~X`z(?J`x`O%)W?=7nrr(D_Iupt7DP^c&roJl1LS2W;5KVyoT5N)ZmGFH)v z@i@O0sX_4Ik^P$OyI=91dsUoN@{{s7UUC;mx}3Rt`a&RU>T4?~DIMjCdAfsSuWOAy zeljaBBetDS%)gl;Mx(UwC8Q>zW4`Z+zvUH@q0{)4RSQIM*ot%K3P7TqiYYnhV3u_x z+dA6`u6s%sLl)xkUT)&k%eY*?QdK`V1|95pQrt3YHUh==L z{-<;QJv+`d~3oARBev#3YQpyvY#6Y83w1EgWI=%|Y)#<-fuGo}ZJ8zUbN@p@#~pXO5+2U* z0h*o;AEYY246CaJSIqV@+YG(hzF2%D<;P(XyV91NePuJ%>nA$CrW5>?bfU$>=AWkpxgDQbp{N%?Q_go&ZOcd5Yc5hTf(xz*YmkDr!Z<^J1v%(hzrr$GcJNh+=+v8X|52v z;hP!UV7!4%eWAtlJ9$ySCG_uDpxLHvbtTD<3?U&{lN%-D5u?P5v=f6T$JOO^@?MXQ zHt30LRM(Y)%j8Ef2%i$(m-V&HQ+GJETeJOVg)gnq|NGt#iQc%Hiix82R_P;jNRQmN zylNG|dLVCtE`fU57FVIw^ALqZux?t`+$&0j%CuKRJ>0S514(zyW8BWdlBTk)c$*Uu zo)d(3!sf+l`-Kwq-J4~l`b+o_1|X@p6KP*x=mu6FAC=6u8cY9|WzLY$?^#LFBu*FE z&a!tMzgwN4BfCKTPcjt2L+$aAPIyTQYo;Y0O@%5cgi@;#Ry5M!yz`ZOgkqk<^@FRf zhA@M*V){sgXfS~~cL%Z8_9=3MF2?kYX6@ls^=OqrQXzr+BsCq`<+P3tKv@QyimMqg zu)&S%z(Bd#_q?^=C$p(K5~^^$r2mpv3>xj-wb7{{5%-VZqlbSRBoG){$MiJ5S<{_h z>vDVXdJ}gh$CPY=Qwd0kv+P13iO?~g^(l9kve;b<-$b4o*;7KugGE11uJw-eqrv!F zM>Z~-Q)^3z)F`t+Ye0NtoQ^iz4tDNQQsdS`VQJy!leY%ZJB=OXD*@yO9ETJ8!w#hR0 z+$5`o|@JKeT2lL^~rO%?&(L%y`*HH%kA6WsXBBN!MW1k<{4x?(wj_dCP%B2S_nbnrwk z((75WWZB@+&!rgJdfrFaco^nyPK}O)ZOwZWH5ig#s&f$1f8S$*A6gGZ?VWrcmAFsZ z$G~^+)yY2({Ls%}v=dKfVf{4gFz!u=(%o9~F|gKr?nVi+K_{1q`y&OLHPC)M9lBvK za{yq1ZPqI_RKGFCe$&(!KWna=&sMMCpengaEcmn=)ToL_krf;cC(pyYQ(`3(0Xu8` zojff#@cQuMCn%SBEAM0pFd;4s?F2Wf0S$v>#6&~B@$txHN_ZvC6t=!2nXq@-PO)=Z z;Lq4>k_2@86LiFsIY}&oB?L5bz$e^ zRvG@NDJMUlN{e)5^{nWfFHI^mFrc3Bh|TBcfH{ta7K4O)U-+QZC{m4W>0&I27`NFD zz-sReN$%7Y)q^~gPv81@!+izLqcP|I2x$gl!_0IwS!{YwR(qlKXS03V*6{;n@Rx3d z85Q=Re^1Aop~(gCo=tsqz1M=B6%L5dLw@C@#jR#XueKW%9=M1;T$+S{DsI4E7%(Pi zo0`cN26E9}ZgHWeUMUQlp5czo3ixt9LI&g%zBw@*X@^~05H2vN!?R=lE{z{ae7nb4 zepLrIPe}g9%~fmq$IYcHKNFT-;JeRK+8$v2eQ4+`YN!lo=gOING4YZoy;f`(t2)lUVzH% zf?jtW1OO_5m0eyV&L5mnP@7g@mF$TcsvP+ziuaDnZRxL*?d#h;nhQyRILk+8lhvI* z>`RYD_nP{t)*fDbw-;6wUWni~W?CF6`EN(L;n#;G`3VH4SN7BgtU3dHN}Bb!@DZiE zzCun{5M#c1`jbm)HQ=QNGd7tuhSm{HNS>ZEz^}JLwxf{=z`6mSDmmxAI^jO(zuTDPT}%hJHh$MXVZ?ZV(50CdskcAro3Ap-qOzeI7vuj!0iRwK$DKw&;)PFS;Ii>ylT^45p-?`6YdULiLh!aJ z`bUUkG}FBAtc_$t6P4&!j=DItSu+;I!2vD*_Yt`2muF6I^HMo_ZhKVg80|nJ^>vcW zDJ?*m*&t!E%yuFOv#qstfH)#_t*u2}3<&<^?#ct)T|xW9Asfu)2%Xo`d2nIlu_+yx zcv$L#>Tkv_Sy%3V`OL{=utv`|wC8lcj!&aGw(5ayyCfy;Yc$5#XTb0_toc5iIijFP zq~>1M^1!XL|IFYvwa#LOuf1B-c^coN@WdiRlcCc;b0=ZpWn|0HeOkr&8~VRm5|nD; zn#W3;yrb0vy=zVF8(@FfN$GjNlWX65?O?rwqm!e-xz9OojMQD$!!{`lm!5wko_{dk z%pcLkK9S1=SijmCdNC5JUOi#dR;w2MBOP-{GN>K~iW{elX-Q!p1WlPJQQdqMjXU@VM8CcC{CXPVEu+<$a7>^fGk$`FY?tvM`o z^jcZ>N^f;ww4=PKTTQzGM^XCG1ph=qSwWatdk#Cc=Fam3JOWyI)=Qy59qOf9&2LS1 z0&%9whp;k;vzASY()aRgrDMXpV7L~8n=9l~-0X-)*=gMD!d_H$dpv*&81EQrVm1kL z_y`!1QjiqlJh0!$d9}Wi=l2axlLY%>1Ei!vn3n^aoiue1Js}-Ey<#*~TNHaS$mfi? zPooln(@f-R17jTdg)!!*C=?H=haXMhlyDFQQ5bZ+tSXs-tkEovpWfiT zBjen&fu7a)KFfMZZzr(b7uYhUlJEsa26t{NY_dIrc`$9cy#<*u61V*ksmXt#3yCG_ zDfcUBU&U2;?Ky|q_?-WPe0-KuI61uOI823sSGKCmvT}k%U8zWR%&>iL!*q>}Hx!p+l~C;tW2Ng1T4)swug^a3f;=~j<;(z*TW91;CAcTKqb zrY659o84(Ankz|uDJO~y=yx3B2xqdB!Lq7){$bzn#U5|c7clYgz`j58e_Oo{Hc-Y= zBO0teSl&r}OZ=!o%~=ni4xg1$@uk0jxE~PH7>XSzzaQzzYP^(!|w`*(qc=PM^)DAj`a{#5b&3)IOjWE>s@ANeDU-i0v z_^_HxOm0^Pu~uE`LM;(tS!|Fjef% z#5GoULc1Qtno+DBfo$Firz2kzLQGeqwSHv;8@oue#nk2d-DUYlcdhz+zTQob-o=3? zi3WD$ooQZRt!=jg(roADaxxyi@yqI5b|6?((xR6{%&AoM(x*SDDm&{2_cea%q3bJB zjqu#^n+WZzQ*m_DKhSLBFEYN{E%0J}g9P*r8A z0=n+f`zzpU{GCe)u+pfPP90e)Yc9;qEKV@W#fS@W2I-%F7NZuq<9+v3B|WUP@9fK+ zdVB&BM$u36(QeUC8}PWuq^Z(v_t%^EiW$nRRmW57ZId?_h+ zM8BeSYsWA~n%=cH>@o2F$#Mzga{k5{&!r5W40tpl8yU4Puy0vjZuvC9We!`vS-J*8 zN>=uZJ27FfX$+cfoYlFx3^rDk zXqzs!8Y%;q-??J_f&)LIu}`F@r$g&^&ssHWcza%bAo`Sp5vuq&456bY2YXUz`b$*W zvk4nKecQr=Z6-ScGirT9ukrC-&+%$&8}}F1zmLbQDdtb4=>PVU=dI@Em>pADdCZKj zuo)v7k!6?Taw2tpz81LWVoNc4v^5@>Vv*^d*gVZp?elmOLftB#qB9DEo%4^5EQ<0T?-?lO~W`JyR(7IoUv&?3gr@q4QqT)9HA z=gwkYE6y;%s~hDoiQ4mrz69sGJ57*JKRq1tQ%yo*%`kT$*+Mlo40S-izu^sfk{J@T z97SgH!_|O?h|TP*0JDf^M9K2-{)z+IcO}g<6370IFQAmE#EcJzrq#ZVTE_%`3>rRG zJ*FKi;#l~t(>tHnSUbwPd+~s)>8Zc4E676XA-DR9sX@{OG{#llZ=5xZ z4M?JmEqx1YElIA#)ZkAJc6|0{9@98|CpOI3DzW$wH5|iqVuq)9H2`$Jk`<&nb?31| z>Tz=y_bxi!EQ)so#DJWgu)qcImzri78T!K~Ok(X71gz9gXx#8aMl!!R(UVX>P@R}| z%qnIbh5{UqF}42#FRJ^W&62-(Q8%mq#)}?bEy|+f1=~P+BQZ!B8w42$StLgk6u#zM z7KTs=d*|_K>A$ndPsb-fUS<7+E!S@wr<4@;gw;>SaX7oD6`5_W!*R{LN&i>N z;eGAP#l!KS={ha*k;$L7hubMZ50`qX&Tpp#g-ny3JbKa=JY~uCmeGv9y^>I6YgP~a zrSp95>siS{2Lzq<$VK1OfcCzJZLFXm*`9VC60&Y{SSY6-?uw7v*S-nKQcOclg&(&( zhiS}dg+z`}!&!`+J=o{zcgl1fGy&ET=7*9(5#KH3I8gkjk|NE-f43{3E*a>`6y%t{ ze!5g%oS~aF93XqDK>fUPHIgdUFgW6wkX37>b0V;NItC;gw|=^hr#{}ePv;s#lA|bW zh<5Iw8SC|>ETbs#BFVTP-+vWPTjZ}Q%hi87Yi0{qf72cd1DlyhsS~wTh|RnpNLI4a zm67STsgPfqP<^P=z}!uEbpd`k9AHfzH%W2vvoR13*w%a&)~<;y`gRsbh~LEcOdxy! zPJ$W1pUE%xZ@$jq>+1&$m(NMG?S?zko6vL)BDY#t6D1^kUH){8u-RKjru)CgODllw z8Py4U0#Bp&jkbAXmv+R=RWIleg5I#-+6*SWRDCjymdbLX?sAmWx-;Z(dsbS#1(<9H$1&s$R`Ql5fEC>nXZvcGfp_~)AsVskP1sr=nuOK*2tsWf~OW160M$_ z(m{h}$peHVOw&h|!4${i?$+Y*$9Y3$Yn}BErp``~ry}kB_AI<$&THCigSb<4Fhcb~ z_jMw}f6N+MmBpKO@k>v>`iF#$k|BLP^nV!qG63wlTuJVpvP0&-+-^O$Q$GfQm_2SB z&hm>*0hlQ*{nnGGV;rh zCyxNHBWi~s&fBrEjLQ+vzAD0qU~35>WraKjc_5DaQ|fuKfzvwmbomKeJNj*Jj-Wvjey=1KeZ1zvBQoBYTyOR;Ms^q+E7#8~H4de%d zY|1yVVUV3#wCV><`G|{f;o`yrLr=}VIW#?N{8!aq^GOX zYna?}BN6!2Nc_a6UEkLsR}bv@pR$FJFCZe4*?FLNk|z}q!>JAWv}c~$iobX;eC@=;*lIonn4r?+_LlskusgxUL}T#5-0}i@C&Kk;cH8_QsW05g9t}`h zDF0cE9V^KGEA4%=V9)Q-8u$S7_gcvH5xhw!i6V4XB;YGcG{`|V7G2*IDj27Di> z^^mu8qL@eCz;xj3)9G*P92GE^YWVhUqHTiN|D>sJuiS6*kRotm=krTJ%EM+4sz@H~;(aVGZ{>2(vDcDWd{yxwdK!je9pU!;v3Y!wCq1EK)EG*|8xIl@qP3I8DHm)9 z3#)O12{hwVj-pB?fS=_n39=HS%zL_eaM-CyjC5+Ll?_@}05f6zGWHipUeH?Kg`&51 zL+&jcO{{@7SdoI&j>GXDM+8Lp)_#{MG`yQgK=9Y&LJ07J-X(yM-K5nlcwKH2z^%rW z=%JxeiSE$ZW!4)FGL5kypnmGP0&f&X2peCUe{l7QRT&AKgBxl~VaiLxHATgIbnki0 zX@I%)76=yV7{H7}x^*w>vGyNjlT)WOhfmk>e2Izlm`vM1b!-qI%`#|Q*f}L+MO5Bu zaylTtY{=4=Yr*cjz5vBMe$*FG?OSA5#n!+Wa2ho_ER8KUlBWosm?L@I zdnx0EOuQT@kHz#+q(F1+ObNVT1;o7N+B?%+KM~$mq3d;%CpF&iBk{BJfOsNSpZnRV zF2~Ul+`!wkVR->s&UHef5XY3?*2zuBBHWB`s;Dm_l3G3yF8m{cY>^=WebBGH?fwv5 zo{!^WVc*C|?^K-`Dz4=@p+3Kdkl1U%yJaL)$9&x!5OjPMi-&%&q&)Q=+%i0ib}bBr zzh!jaE&l7&dpn$PyY@$F=YUrIzj)kHGjuQ@n%Jz;%Ja>0?-2HZ2^S&8ErNaLh~@m> zl7sx#7P1%C*TeB}o8Pn;DR8n{LY!q~{Fh>$WB6wTx1s|*p)R6h+q)b8CW%cKEwYU-a3b&lN5<1r zdKmDP9x_r;+cDv+Ua8dY&vksAy9UwL0-`G4}ht>5zu9e1CJ7%E+SQ&Lrn zcxO92_3kx>tYvCXucBH?U=5I~)Gjtjd@WFLPB*SbK~Djz*jD$WNYQc5cm``$^vOU} ztU^KuJM+u6D<_8~_+f+E)eE%g+q?LTGM9i=7^)0#(*OH&kwD+i-&rjE3%AMd@DRb2Z${h^G&YxkaGlR() zdqie-cckct65ehR5w%@}0=U=w^Z;mBBr(&;1WUt%M6BC3C<4=yj37AS8#1=qjL3`a zxGL5y((htoXc4z<3}6iI&TT z&kVo*m>@62Q$)gy(Q|_DP0TpeUNabDeeE6+7{S@ejg@*+FUkjh-a_5a_L^*=j5&DY zxurNFu10u!^!l8sC}7z*a;P1e+*q^Cu6lMg%_Luc*{LxAcWPcZ>C5acxS0d1CT9Hh zN{NN=Jvr^OpPEqKf%Q{z574?>xZC{i63kHyelW-$^i>chn@)3U&S!IL9+Z~-ptG?A zl@~3wWuw4-M(HLFTY1N5xfYRo78WWSePkZfz8%xwiQgNSI}eF1Dk1vKVcp44=l(I0 z;oMJpH{#$k&-4oCfZZlF4%MR_{1=Sz`FaYYXXjMP#RErSjc~>g&&*s^$}oaKihYeb zBys+3v@mg|itIaBSceSG6;zKlg2yv|!F-ymOH}%kmIXwz28&A&<7F`l9A zd!`t27B}e9zI;Q)sRYotz*eQOzEUpzTN&&tYB4IF-OQ7R@xYwm59q!q2gZs@#plTl zwTSOG4uT?3Mb&@%FgNw+f9o)v_`+k^vB@d!+?K_jvekF`$1?-JKm>3wFhb(Q0YsD+ z`QhoL(%r=1GzP%=&h4}9^L&MMCzBSCQdr3N*}X^mF)^6DVLHzP`khNQ%w5daf{hLl zNK)jCoGVTcX(%p9|w=&9qS~z3s^qx+7>162MIXzcbD*u{e zUHMSUZ@1^i7;Bsr^d7SKB!3=$ltPR4oqAi=e0UrkE9s86o|9H&IxEU1KFSOtZJ;!- zcATxy&IsRUTqi5AzFi>6*-0HevdX8Ni~1v^evC(5`>pcrpjAvm-t9{XztNj(?XBax z3Dcu_YJ;7b%%!<^^?r9cbL&KT-RjEc&(!5QiJxfktT_71eaB{t`DXoy z%(RbXidSy46&L9qH~sWa#<@5okggap&l?*hfl|_Vx%>v$={z$TA?)9+@AzhF;}0q_K@Hyd=eOp`L^w!9ZuASS)8Yj6xAmjlDKkyWru)Q!kj zo$+&kQt|1m|0%WPu>F_R@}#mj`to&w#tCLhr24+w!Di6onf12K@l+I@ zbl9tlWW>G>`{xj7KU+*6htgok$#>?$$w{vRJt-pkicLdEf^wzt-?N_k{eI4RHfQUv z+6O*wP@ zFZSLtD9)v8|0TFfaJK-#AwX~sl0a|^?(XjH8Ug`=ySux?5Zqk?1b5eA&XDZvy`T60 zK6R?jsq^i8nu40St-J5;Uh7)Ft4D`hK&y)E5xqPWH(E@^fYoNJ#Z~VM$Nf!1S2oHT z{L=mt*OXR@<4k%m5rC{h^m;;;Wuyy|a=D*^Y=Cs^PTE&h7d~GNdCnvC(7q+yiDWJC z+i|yZkb$j`&}Vy4HETnFi!HPQqGKN`-Tk%B1%Srjt~n@)j)*YeKLML)QK%qeT(oi>mxy(0F{}zn+&A!LUeaT zMm`3UJ)I89qJ z;VZQV5+A&wh!3UeZZ?;52O^8me9}F)Uw@@|H~mhz1;zCc0lK{!vx&3s^ECVc{SY91 zoGg;)IEc}#0Sn1IQRhDhmK6W0OeZ)hn*2W_a862>QW|Yf)YAvgFw7Z?e_)v9G9LbE zO%FzDysr8Z`&P<#RA58c1Deo0ur9K@J{^x8C4+PfV^N~2j6hS+0p4%c7_Y&V5YgQ5 z^G)Vj-GgdNsuhs;x5gD`R+%!E?BvkrRO`IU8l3f;RobgQhP{l3Az#Rc!o2( zNxt~PN$cv3qqKQlf$gwD0u4VZxdCi8i0$a$F!^^cPOrVjks;=J6$$!~g<=snH}tvQ zi&k92?MH;AvW+u;zmiopGMEI!1oFnEj&$yv#%-Vk$?*Slr#4Ij46kVHR85<(P?z6B z&V2~1#~4(gJB-LyI4YrwSATH%$0}p+%!gcSy?8J≀WkgnA3iU@^LaO~s6k0%t5$ zw+r<9kS&rL8M+oGdA7c!tu4iQ6*Me0(fqxq1xG*lv%LIaL^Ckte&Hlprrlud`-(9O z@|#oU`CJ(IaIO2V_Nl?e=}|%2)ZmC?K1b8nzqO;KtqgZysM;S(kL+lvP=}i?w`sgU zlGaeVEq7@aBQs=ci`1PJ%pLup3)`{+?V+ugKX=l_2fG61+pIW5`cZIKBlmj^_-zJ28RUmb!C|!h@Vs3YVsSmFL$9A{;%t*j^R?cCjV6 znmj(3(%9)Vj3<8kYTKnzQ-{=R=?mvHnVA9l{U>O$GX?Hf{JSnkPcuwlp=lz^^eQoH zfm0*|RDTwe*38Pd!2SXoWbHv-1wU`h`?iPJzl!H8`=2a)%K`QED9*H)c!AM@(~vRS`_lG|lj~ z)kF_!RajBQFjcrZfoKdN3C?Zbyj7ATiTHy9y^J6S;45RdSYvt}nGM``Ed2rt)Fu=) zeTyV>C}E0;yRUx;NO!6~o}-R_HaPxZl9_J)(1ARQ$KNsZC0x)AM+Llih*) zcv#9h>w-Os?c$}=A+qBf_rF3m-)OPT)jtu3Iq7Vf$H@AftFiyaCm@$7A@hz(BAa5a zJU1(tnwj`lM44dz22?53=j>Ebv*}&-U?Y6`QKN^0f4+X07F4b&td} zR{XcK5NQAyPn@Fz;uEjg!Nk^ zxIo1kI0VT5;y6>tZaPV2S@GYDU9q8eJr~^y+?^PFYFH57|3k!VbaoT`#Z^cf8@NiF z-nStI$M^ek3#-nl+ZU@aUQE&SjM_2y&mD>hD^ogZeJxu~_=cHq%rmw3t_j1fAX}Gr z8BId0!L9@jSg!Rn3O0T}$u#0R#k83j_wO{{*SG*(WC}eE&liM|JIRyaZZh=Wx~i< zH;?+H;Vt*1<95#9iz;OxQ<5Q2_D4&~*Tw(0J?(59zg6(ZX2V81cih%{ZaqbF@1=qu z6b?@Gz!oxxffG(RI_=r=n8oBi4L# zOt7RVHZ~*r=Fv)zmkAHRv@G8t%IS5KPZ7Wc`lD#Y{;=?A4nPItm1TGXzy~{fueC1& z@AJ3_cu==T+3FHle{vOhwA|lRB;@nFvPmylt>7iuQFrP9)qA)K3)wU{jQy=oaQ^^! zuMy)9u?}5JhB0N8iq7u9q)BAFxqEf}Hl8zK{okHLSZGegVrG8uq-9B{Y$>{j9l7qA zs#<%W80=X6t|GC)FeycWQz_4jH_q*Epn%?-nM0V%&jiaMd+2<|PZ3CSL(kgL=6|q} zfevat)LL(_jJ(6%L#3lre*wt9s(oK~`}RwH2Unb%% z`!jAWWmft&d*N0zOH1$mHfn__iWXN*o$l}8ec@w|D6(<4R9IFLP}($Z z$Z-F{&E-Q7=74$@GWPA+8sYj`E?m8tG!_SK!_}}3>%0+Tm|1GUac>&6}GLDF82wDmAp z|GfE~9{)_CvPDqVme{(a6Lvq5TK07=*NE2Q{lgz1^%rtqq8tw6d$wCf5 z6yl{t$C$Q%u}4{-O8%uPmFaIL1P^O@txt*(;Ssd1F5P(Zf;SYXkA*;|_%fdQ6wN{a zM`~MA)EhnGa5%E?e;HBT^Cw@%jCp$cu)^JihrsN^LpBSJD&dV&-`^OCMjJFt)^}Rm zNouaX<9z+UtWraYcv|Qgk zh6DLRtQ(G#$Q-j(?YY+9zX$sFo96<`ed`v4knwq8Yl61=|6y*pCDJth5|;j@_56*k ztbi*`)kLp$#Vm(cW^Bq*jWS+J{SQs2N-FfT zJhi>N>nv0^(yrDoLkAubvcF54YcHe2n5O)x6i8d-Z?9o2bLwHor9HkqF)8?RvmtG%){$6l~#4S@XdI z9sg~;(>V8avF%-N$Y~`pG`)k%Ez;)N-?CHNE5p(jXO%0bCC0am_VJpb0L?jhye;6H z=v4Yyw-h0OvxWHHRz+o}$7{_MPjn(82(*}q(^M{OUXbFe+E8mAKtUT#g5`q>*bkQn zT;dYL#t2&*rqAE}t9OmK44qaC+;uk+K`PEwb=%oj+on49AFRtK?TlabK(?%wUq5ZJ zEMogrh&jzy@UoeLl-XXvvskX}0iBN#e&;8B!Bq(}lwiOeZ#Jgf_&o%(8|C1|7j$Cc zkchq+o)hd7A+7}lSU4b2755!tvSX{T%BScR3`6aj-$o4Le=F zO-s~Q7)jojIp%Sdw(D&==54A{zwn*$OZT@^#NE9g7X!fRGAB1-9_M~fGD|_^^>qxc z)X$JrO8gho!fqSop5mQ8cHF!$tn0-${rxm`bv4wY_gXEFJpH-;zmb~i51e3M$ZvOr z=D=uf@Cu(=bl+N%bfqmJdLDkp{pA}bk$k3@>jQ-{_bWqbIwc&#O-boS`!tNI49c=f z2-*oGJ(EcuVY>c=9e{y?Y3u3|MKkG=`!1e`y&hQd@m705U>$?-^Ji-R#@9%8Ee(`q zLQaWJb4Sa~q*Phe@A#U-1{fbMlI8oFF3v zlkDX_743KN!vtcDA6s9^nVXS9m$&(cAM%$X6*i(F zS7`DoMB*}(Z5wQ=%8zPPSVAXZ?`+rRKV|3dA_ZBJ>gdceDjO;{s$W$|EaIZ zF-xzqSN{nFQrhE(v&B_es3Ir8wsbAJoPpL>zxj$OGkbUJ9Qm9~J#@6G%r$TM)6-Rl zZunCqZwH4Xm47oz@FUYQvklmRLik>BPo%x1?_?>^pHOiZA2t6GNLZ(zSoY zi;nd(RQC$u8srA2UYu0ulK6by%Fnyhm6c8#Ubb5gLjZX7I#5HQqyP%`cz|Wo7##T!XzN{ z0*;it4lHF9fhX^U&_&Ob2z;+5E)HvW9x~=t198_P7pR#vQbUR(03!c#-z|B+Ub9g! zFgD_+`MN}HH4+*BXVcy5jU%qWX*y&`c=AAWC~)8j{2_7)^Y<}@p8xL!W+|bIz_UVt z_xIp)z0(0Ndca>phWK?i@Dt!tiC;hOboKYu$ND)C8yj149e*h@z-H)rJKsn`uC1vA z(WH5HT3h^8OM`enz~r@Ok`~gMRH&UC(7>MwZ}OI7)Sx}<&uJoQ;6JbLo)_&}3qWOc zBNRzm_rI6sI0<9s7bQzfzov&&b6_0rsvJz395a>*zdurP2jKLg)2H9{iVA8**3z7{cv2422U%24)ASwAw=yJ)yRLIOp?DZ+1#1w!zdRKGXi9^ z!7{HE>nexjZIRzuDc(X+B8KA|BD8bu+4n!$3~4gD4L#T{A6;qd4?)B`6qs2~$qCG& z!+UGCZ=U?@{X&h2_d`72S*8U==QD#m9JWMAD{UY{K54|N#4+E`sb?_zXUj+*w1wX= zgiyXN+DP-cW+yGE9}x;r)$ZcmoTZ>_kW)`*j_LAz@Y($8esx+Nh9Lbe$cNKx9(^Sw zx>KK7=atEpFb5jLC(u`Syc!-n?il)X^6i2kT~C0qYn>mqX26$tDHN0}K^x*2m64+= zwtl>9A*-z!Z|O#m!t;~3p=uC=0myohTp<0Fx2^I(s$j?SV@PdntK#C}3owTC8mVNuaUFH)V*P_(-GRV!lQ^&6?8MzyJahd6^vXJD3|7>3F>NPm**Z8zFEVtshCG z3F^9_D=-ICka;P<`O&||44yIiDZ378$K5rHUDDOLzi+`^=w%8TCMMjiSiUmYyO^TB zyWQ)e!wWr=xprz?il0=nQw>ZQMKqVBpP!*T9^u0}0~AvChV08{ZZhSRDB4rBb*@mU(N2 z!vqJ{IW>b_E|u6l1tNQCRE$|8A&HCaLEe5lA*yB*MB^!%9b4e6vlTaN zdN^N=lojUk*`5czWOx&dMy|gFMTE0wfhqK^|eWw zEQ__#vao9=C!c1Jmp1cZjq97cQat>y_0wytp>wENQsk*d%WI=}PC>?(DJo3eNykz0 zvPqI3owWn84;oYn;3d}xsXZ$iZMp?2PL~5d@3O}$>3I`)uhqV+>35W9bI-R;K8)N_ zufIFo!_-7reUbQGbRzp~X_w_uO3$PG6rnvlr2D6wa!80xe$f#K(KRHHQfgB`&8Wo{ z;fP{3q<{u8`%92l@uO^{Y>fg2(GN^Prhj=cSE)iX8LiCC0`PZ6rt5qlnHqN*GqZ|2Y8i zYjhFKLMY!x1jh@EMi+V#ziwym+jZQ-`E^v;HOl0M8NNZGLYDGGxKs%lVVUo)t?4TZq@SSp%%Pedd1T?;-qtCf#-RY7d08=?SS}on^!TpP!$&t3@cvCfP z(jcdpar%awpM&6qz)+r5v)cnD9hIWG1mRa=!I_x5@8(O7T^>l?3hXvZMeZ8(1G0$S zr`8F#mIq?5V489wzELfUTGRQ^J(9e~@s0^yn$DiLImy*lcxtET?POmRlLEP@mh|i& z`+NjPC4UV!b0&E746L+3Mv~3(GA}sC6L$0*@f+b9XX9PoEx31i5pzCtU>@n(F4|6B z9P4gCJKiQcB2+WGu&5%^@EHPqQ>p?<4d(T>7K`3$!);>*%&HsUrD7s!P$?IhJlvdq zqn3o4hI2sN6du>27sSx)(YQ$|uS|ZSOs*3GB-TNaOOo%`p`9#H=L8;4FglAR59C%y zF0i|k>y#o(y0czeLD+xY(7$x`6eg|}qPN^=r&j;aF~B_hdIfYsos&`t3djT61U7us zFz^Qm8*Z08<=^7XF&%XVl8dy|Vl5fHJ`^yGd7IYKvpKhmNWxz5Is(uuY-$3oF@}QE zzf5|n+~bAp3AywY`xf?YYiaBwcktNZ2&-aw&@;Jxbx*F zR@AoUdVixE84*(SgBp4PhoumYm=cxp!Gnu1YpVimBlPiQ5{)s<{$^Tdu&YqG>s8#N ziEOO>rNq3`agg$hE?eR?`Ju8GUtwMd4cai7T25e-NGJ}Kl6ntgt}Hosi*(>+QGK8t z{MeIUq@{Orr=EJ@(#LDnqC^1A*Xlzc6@25DS4RwsN{kd@t)=&{cN5x1Z>=1{N+oUF zFlsMULw->;>jt6DX%UGdBKYaC4Kuj`9}%?cVe~Y}*n$%tc74UFe@Ffk$D9OH31~if zidtD|9h@#BGkKQl0GQxPO3LfOo69|alR)C2(&$BgNo6OEaNv04f1}=j-9KH?2&$wr zD6R&|GHI-Sh(^GUiWnTy{(7d79v(ebHevJA(eup&1|=-FUTO~Uum-324aO9Daxw5e zXfQg1YKiDA@n)daB5lJ${S|K|5j%$8MDb=8(^eV8RvBwrnZyqv`*If5jz}9g=l)J^ zk65ZL4zb2K^hmdEJ0U)t*F;e-5^Od>-_&&bXW1GZ%y5s zVHwn;1#Jccb%vV;q>=kl^>A3K7~4`6!11P4G5Q1Y+q(uqyB%-XpWHC6=nZf=!y1_< z(k|}`mgBBzB$y<6W21H#X9;o=4*_0#%oW&arsl9OP_!+=!{{OH6z6w{?)U?b)sZ6_ zp8W3fS1KLXUq zMjtySCTW0nA_j|$FD%ttF1Woz1jVHps)4|aTB4mGV4~CmDQqI^(M08f8c|11 zqar_O`@Qs$4eZj`%9)9Ow${({lzCnomc^SizaL5?5?JQ(V!I{^#KCv^nmfU+J1dj* z9>>>;$K5{15J^iu!3O4Q%JJR=m>%__K09dx43m>^N=NhU^f)%C827&8;tF2<>yKM_ z%TlH8O?1VwX-hKndBUBeNe`iC8lf^)Ej<^Pj9X)U*_wdGF>tBKK6P$hzbcscB4HCy zW-pT6?me02%HUKRyb|x!7^`@%dXPe+nx$&O`{>FJa}&+zVU2F<_OMgAs~a>2#gKI7JU|^cEeQPLM$Z{O-^=Ky0 z-N2g@6hsNhRDdw0GGZX|zJs6%qHBWoGr|!$iEMc~n%LtC98aX($eEHEzOupo3@5Ap zBu+0KK)~s$j`S%Mo7stDN-W)}{w~w%^ zmHWXnUAT5S)YDSYL_0Sl0cJgKlkObw&e=;^CO1vKzg@$ucRQsxj<;0g>gO~Kj#)t! zrnXir*lbE*#(mvP8es!a>ogxUUiNqu9i^XoM&zfm0!vP&;^gTXF3~Lz_V6_&CF=5L zPSWCcB2>(`8}7of8#h|m{=U^f9j5p?@F+q1Yn1rjwv(4^4Av->l9U@3{ z5xb5N_!>hcQgA$!JD!`|ClJ?*7YWifL+rGgWNF1s(nw0th@+(F-RkS)mW=ns zr8Ut96N;pcSfk3LZ)HmHleww2S%8vkr=MGIO`5$!Rj8HE$q<(<(h&_KKMIn05C28- zgH9m5H`DHPvm+>{-aA+&jfi7W45tMtZP76}VhwxC=sHhHEg_o$x+z8?r9aQAVCY(L zv_e86&N*qzOUBLZ0(0+;)>3_2CC_1fZLTM&+~pE%rNaW6o8NYrz0)97c9}rQv@<~= zSh1cql+9|>h|(;hUXe5{=n?)?aVb{=cG){ZM9*0N${(T*;r+KOhYJkCM(BLw>)Sh} z;tfCh?p(twn)*t+RN9p{pY0y+ggcwAa`Yzii4)+c%$E_frdWTjI+;;SS6&GnMlkZ@ zU~lDhTU7HWJ0}OIecSLodv!wH+VA2AG-Q4ybpp1|q<&`w#QIov^uw#%@*#ZJSz7Uu z-3h!}F(+jQ#Al-+pG*_*YoSVd2_?3>RDA)?sjP-aBP;^Mwv0Mn-sz+PDyWkm^5@|& zk(0KfmdpW<64h$Md(+vI-Wqpokn9bgKBtA}L1`pd)-+o&%G}%NEXTY+A?OrK@-0Cn zS0Lo5Q{lz=dj9Hxx_)>sgh`ZoQ_^2wr-T4H{sc6$<^%k*Jus(+f8D>b3uSA0Mj*|5 zJFCmoHv;!|HBu5&54m}P4w|>sP@IDg2mp~xE>}q{#F@cjp|R( z4+{pG{PjdfA7pIlc_yZjAsH-fq+>6q@Oc^2=Vf{JG@TZHKJ%joa_G2Yp2_)kY$BD(CF|E>AT{q*Po!V2$ROL_jNdkHd};rRo~Fm>!PlHr zU2iW-ZREaGr3uS))&zS=Ccs`8BK=3}7<*E~NlaQ|wcH~Y=8Fj83GZD^O&Q#JrV?#* z+nZao%Idwaj4|VQ4G{jhwS=zm3C`}$M#%6Z%|Po9q!5`S78BW2tYGl2!El8OA+gG9 zyg7~0T{bl`iiUY}-QaABheUKT4*b@-&|V{xu^JBFWPAI=!_i`fAl(FOEUeMToRP<+ zvajJO95{72rvGsLZfA8gbRvmzuTjwGT3EQx2y4Q7IQI1voa3GcO=Vd(5O?B@H<;A} zUezK+r!6W9`!ET5*JU-?Bm+!ff|~Hvct%=MIJC>k~^o+!@JysfBwX8;i3C2ZzZD-xxlfsHwf;4>2Q9 z+jDN9de->p1?GrVNhV2NCby|3iNo(Q!VmbZsjiHd)=}kqReZu7QmFu}CoLHrGgh=R zpxGHuIXar=-)j>$Fvs6~$v|3MMDD4Gy|LrmMi;MZ=-lufl52zPuq1Vr@lq+#L}Wjx z3AZW`z9WMeXm>!2D=THyk0srp@M0}?@)%Zgd1+r&I)ea-SY6rI1UKyA6ROw{QCFG~ z@cFBv?ut3ywN_Yvx?9h9)`fIxbH#iTldvzB8SQXum}rV>kC~)TZOxv4RfG!#6+NlT z^K4Z#`EJ1R(0o}jK}yVSmTDM(9s{ZaJK9PX(N zI+=&vG+*`H7AdmU^^URHOKP+lm2=_HrtioF5}Ld*{Y+~TfE|tSU4p=D+g$p z`eBp_A#U*6Z}31dcYjME^C;Yxt}YEWSy*WAh^1$pubqaW*~cGUd9BDColGF=F_Fr2 zt{ZlWGX!ZZ-^;6y5!veWDew-@+8`KzNrqhKuJ_%Fzpp|#;_+tVoODt$81E6PGyra? z;;_%^O&{cmNQavvd!InCdj4%3)TO9#gV~v$KIONr6xmCxW%h%KXJPiF!x}Nd10T=0 zl*1VoaRYdh6E6LBZrTQKbPjH3XyM264wVTzl1-0OtmB-wy6s!l(B**j?QV{=iz!Zi zE#o^w#;jtE4sK|$?61o*9&2r-U05UlXtad+{z9k&{zyLu; zmov$Mf7(b1T~5=L^r3?k>7ZV#>P!;a@SMm@>)Ro!zNk0gtWcvnQ1}MiXg=g_pMS*Y zSta*4KT@QIwZvGi^Hv+Z(L`JgTqQ1L?KWbb%=38V#66)@s+dNW`2*Z`e6c9E^_))) zn|RP#tx?OZd{|~~)9uCS8gFa-mR2WE+7e$zDLVvrPTMnF_tNUrDF=}Wd7I(7*II-> zNd*MPT||lsHcMUx#MS|qFes&^5Q}f1AOy$Ir@;Q_Us3?>!&;IxkX3L;<=zFv31$SlD|3mK3YYWX00n#3W)C))T zWEFG&ou{cfEEAD-)Uk~dKwJx;q-`YZo1KANRr_wO3#e|Bg$pt%@H@HMeYt_h9$O1;x;LcDi1KJoI!%{Q-!ZcnB6;4wX>S`XSev1sCW486z8n=6||%3nMS)wcAhG$Gkg{IlF9YuM^W~UNQ{9vxqLHY2xJ6O5M&2MCQmK zWF73j+rYp!)cCs9l<%^cGr&5ZM57+H==auQH>PSs^sR|H{?(I&_+UJ~ZDGrfS3DiR zc<8?hLXal)K2Y+xQELDq3w5+RnuoPc@UsQ&NOh<@o|4O=$ zV-_%L>qrzDB+xa$DAy_=*8s#_>Vra^Et{xss@8&a4snyvh)k)%LBMt-{A36rKx`P1 zkdR;L;21cSiMq>ahu99XM=sSU^s>RO_qn*WSL3|HCD8DKSVQ_Y_>?KM)GK7+rM|Q| z6a}z7k-r+uYZJ)WUv(xhMSy%qBG{P@(=$FiiQrN3n5X$#P7nRm=212$zw+1`&BMc^ z*32Nt*lJjB$>cT8A!1h)L!DhFBRu**Btl?L6Kyc_YDi1W2bbGBVIfr1<`^*(La8j7 z{;uyuG^M<11{)iUlJ`=qvF^u7?rLu6a!D!CD46P-Gd``T0IC-Q3>S0qjGI;do9|VgWU^!sHvp_A3(ILLq&U^5Y zl5%rGf_w*F5{z!DLTN>hA%gocI3BEGl%i~PkbS9`q-zuOH0lvwfxs|kpt;IV`qs+w zwCTc7t>cM6J;@nRShZh)K@{Sa0%a$W9>tQuUCCk67EM z_oQksCOz{|{Pgz%0UtUP%Q*i>Z3icxme%_IK5PuBkFca80m=Khk2qwk?C2@{P_YW< zrwlOQfaKv~HPpnna3luOe2FfT7308!j$nn{Lip-k+gp$FPK7fMK7I^zXZ%mHGh>eI z9VKKtJdg<<R`x`xFo6`$g7AS68bt0->~)8ikN+wt7c%Dd;L2-m;k zQ^gG>Dr<-NGrWU!HwdaMBjvOd&%Wo~0J}=uLC8O8V67c&2b20N#O$(vS{PD{Ksx(j z&cesw{?bncIuAj2`17Fu7`J?(!Zt~typ}*#U^9qf%Z^3+So_P@MXz0R(>id z9FBi|>(TOl?clfur9hFCjPV@4-iGd`t=U>93HrgkB4BQNje{CB*-OYz-0K+aU9B8Q zVXycT)5yJ2t*;Dt2@L=Rx8*D#&i=a<2ZtKmF$ z4i12)&bZH8iB`EE07~*C6fw8@aq3NjWc4$55Jj3@s>iQSMpWdxT&JD+no?g&A7hc0 zdq!F)xZx|WZ)$2bdZCcFho2pvH*I9=|eoH_&zU! zzs4%?Pr^n7zK9Y0*Ji+fd`To4eT;cx>5R7*Too@4Hs1S{I{4LD>m(*NLq31Er}v70 zBlmgM2S2|H!KokcN8m2f-`UXT*e&_r7xg>67~1})zyD66Wi$VmpJ!H(Ws=dO_ymV+ z*bnLqQtk7Je{kdy5fvSBJ=+j_wbm9QAsb(U0X{>n%%3pvC3ub9&3*F8^y(TUnn>G1 zrpTlm`+t`b%Tj9+c+QXRQ~#CL6CxEBdTOJ;wGQMc9bU>b0tW(<)vu!#!pSx8OjKM)XN!GC(M zA-bI71zxIU^5)gOmF`*vDR{FL>~sP8G18#kb0OVao6aQMxw0wPIhar5Es&D+KTldk zmf46d-!UwVs%%bJ=zCi|4DJ zrv0lY3VnomA^Y^f_raC0mh>bj#cgZtPW74*;w$V6*=mftp_jE5dI5VWJ@Q>JP~cXA zFM|3jbMBjr02yw_Nrx^vlB_rDtao1S&hJamAmfp(K}a~f=7n!h3vU{(t=Nj5!i4*z z6FodEoeOx^<8#J-X}v;}vs2L*rD-SHCyA^c1h&-cwqdpJ>jz&Lx&qCgF~ji^nr}qn z_WF~l@mnlEd6&Efn0Oi;oES0S@VG_4_^ajU{^#_s4*^GzlZ(gv(o)VxLV9)!1Joq} z(JEb4cx%I=a+ra>tUgrNk}U3aq}FheErsWs#}oL|-r(rhMt4Xf!66hlXVge304;>H ze~`P}7Nkpx*4W%!yoYcC3_*8ble!C2n9O@{jVZ}|Cbtt|NrOzkL4ZzpFg@*zVHY{vP2UyO3~nun230(0|MDt`jR~$*jqK4 z2>;x3U1ux@{hXj|EP2)YqvG66#x#HYCMP9sUYks!_v_NQZ$XbVvR^^6#WHv9v$HtN z{sPgU-@P>eEOb+*6;W9POE>yAn6KjUvLQ8rC)AO)hY)NftGCXI@IMDhXQ~2S^ zINL9kjymL4;Y8eem^Q4BG0nb5Q1(o0DNZ=-qJ<`ctrN^>I5%JAC*LS7Wh6!%FI9xO zyV|ketg+l&^sxroV^f|8BT{sWVA!#~SQuM~@=tAPBq9hOpJ(S|QV`Sr?}8KZbOA-C z*$*$QwVp8b)_o|rH)HJ=hREO$CNM&qo#BEMSg|%6TJDeo5i#X3wEAOfWjNs&&LXg` z+-EH#aD^{!b=dwITj2M)vRLrnx)bg*_u#{yib<9>!Re&TeF?yhO-(}z?d_t* z_JKrzZhIS5e+w)E6*k6TixZzZM+0CqDbdNiuuv2nLke{RCkco)SItW51!sPKVy#wW zrrb5;BKi3hmaEyOgL;3xZ(`Y}XIZxF=McKXJ!fj9Po`$(y90aC*Qx>(^`rh~ZK`MK zTi{7YdD$g{e*{ou#Ww!qtLo`!W8J_2V|)UA|6Ioz*bK;Zt{0j*ySpQW-7@r8R6@5Z zk@-u_`G@j&+JA{r+JmVD8KF0M-}aQCl>VAb?l*o81_>CiL8I2xQ+%YW)_*J}g>u4| znB>VPX0@;gl#9#dF(p1B=!hwf**@zq{_~ndhAa+Gz^vE+gaWEqw{TB3ZN^E} zZ=kscGvasbjM)>o-u4J;dnrqy>-x(W;I7AnO1=|EOy>A0iIUH)Y5)kYSz91QqE4~YjojhcKl zO!h;}@Oe$wTd0RFr(B!r%0D8JyXKjc#MR0C=Ew#IdK&s34KjUuXq|J7gc`M`7#|vs z+Q|)MgrT9g*4`wJE;n($D1ia3)@~8}1jU;pcJeK>F%52{8 z*0VN$PzZqd2)72nRw|R<*I2sSk0CA3jVb;2iK$_DxQe!4Oj* zbppQ;y?d&^(AWq(^2gFg?PZ#n&p5=86{P%uC$>QaE@b+OOuE+JFuVR1wT#JI9et}D z3WGnp4h%Wvp2Md9LHIJP^$YWmg!%CMTh|t;C1BSGAx)0Lv1-a|`^VnprHsy)%oQueHbMceIIg?|x-geL+zwS08(S9jBOs z@uNnwYHU>lJt5oM%-v}}i$S5qaxt1R)@-2gvIT2*5{~^qV#zz4Pq>|d!0*8)FeRmt zU)J&(so$o9VXjFwVe8JQqA)6*-^-uAi}%MHx7X_I-h{-#KD0AE2{{v7F0Lv4_8C7) zT-A~aA%-yI3H4tksD(p=I!#{rC=aggQDhvc|m75&yh!{zVO_WOB|NJZY4G;Y zupemIUmj~BBt#?7-fRpJ%WCt%HY6fZbXgvD-c3E+cZSd5DfrYWrC_Ut*ThiO6_AWd5A$4 zuzznnGK=GR&%V&;?`$mWg1j{zGgJvT0=#9CE@v9Jygu5QRfKPJYX(~1LXRvV2l-sK zy-`IOh?Ci5d$`A|dPKKJije>8jZdE+B{X+UJl^&o6iLiMpp~MLRaXbKZPgygu+`Me zXH0X**kYD?d0?*)y}|d6SS_H7czC>81D7ibKOBw7JqHkKho?K6J&8FIawBW-{Zyc` zw!Wt`%V2%HjNVcZNK)m}XHic|N$yJ7&+RB2BFxWfol1GH{;9io2mTQ&na)eQ?&Ae2 zW@Yyg(!AF=Za`Y#(QoBJA9Re49Vjb1n0@FRIS4JTvd@61IqYi6j7&W0IKcR5c-&l2UT|NHVBdq44xj{uaeT~7^F1ML{Tcx<_#>b(EV`2LXP{lQv+2@3u^MV} zXs4+%uSy*Wdu)425J$h~9e;j;XCfs7<5H*lcmaHpb0`K68kG-VGP!@*{tBLNJxvC78kz@zrRf4f&tu;2G6F$XgS<{dk1fGB&r7+Cjf+ zwv^XR_T&2sNI$!cBiKC^-CRugY2`Ho-Xh{vigzgHUby>f@6>>`1fFbQp^Yumbxg$@*fFqU-$3)-&1RN9NTXwdbX1DQ;Ir)`{(s1jM4jJfs79tCi1Ktd8*y@RqhLp? z9!=ysxVSzNF!Hy`?|3I=1eetijav?QmO7F6&W;fDOncJF7#q$FxK>zZI0-(@{n4KO zTKTwaT$SPlxqahm^Lk70c0WeTq(Yc!`hC{Dj`pkc4Pj|AarL?`8bXmggbsfZO;krQ z4j$!%Pw7UD~MmSTM7%()BEM9+K|4UZ^*n1|g-k zC6IqrwWRF3Uh5=0aq8I*z_pX0K9qP?5ikae1sLDXAE6sgZWpVgB^S0IjEDzR9qC5O z32wM-k#XyjimN4M??gsPey0_&!@l=r!VGv!p<%7-z_*lO60&tfH0-Xo|7owu?*myN z@|eCvGjwAZ`(dbDl<@ln$;RyWjPW`xMbBd|ZMwA_e-S>$;kjl_jiwKaqaRFLend3t zOgdlaE>@x#KM@7<>FsdrD{^_if56<1uuCJ{NOO^D_{9C6f)B+7Rk85u3WK8^=UpBr z%t?jK60l`*PD7UpclpemY%^v|Ui55bN;N8Hpm+Ah_IKsonFUlql8;?&219fxkf(=l zXQK{-nV?oazg{so#iCtbS~t}uMOn2%xY=~cok4VntFlz1@!YV3=R6VYh%vhs{pffE zn!(?s04K2s9yfhhbtmi}X^DL70|ipQ;e~VeFzD((P>rq)#mzF{^JcVcjzQOL{%q|s zU2}o;S0vqAMpG6R`j?1=gI+@TW7N%u>rXeEJ|lmU;k|2MAZ4-tc39%*82sx-sFP1n z86@-%xl=DMdak1)SjtTd z9Ena4`;=S4t&-b~LdxWgG9Z`}>|6_GclYdt=nU?v`I@~jYG9MhW@DD-3-tFo6U;H|_h$llu)Pv*=jMLQ7|4wcBM94}kyVJ0jvMKt z*Ig;H*VPByG*w$MW{GA@iyIlu)kPIwM?#F)D=THh7*-`s6^XrHQs&AJuSWkVKw?Eu z61DX~9t|?kn?9nyb^Yxwk6BxG4B!8vtgzEE1}=N{!ZP_4edG5Q_*(30o59kg2@GSj zBr^HXfNV(Q1GZ~NZ?WKEXpTy-=6Ah*g+{K;#^Qd?=gB=xvZ+EB!zizD=2wXZW?2~W zT>g4zl>-GUk_}pmg?+cr3jRo0I2FMH3*<5$ZgV0UqpFtiqK_txw_3sp(LgzDXm(3} z^ap*Z2My)uyXL5yos$dNv=|Tv)Zf8DIc0X)R!1K-T?~Dwc8La+vUN9cyBKTZOBv)n z%McsjW?%-+ruF3uuKLRE@J&^Dd#B=XnlrU!0M3c*3T;}hvLO6G-|9k}?ve>cc|uAr zEj7vhO{jSS=RyDb#>k_9*(1vdj}1dhJ~w3+ox$>z}@B#0|$xGgBW4Wq;5Xdc4tfn}8^g-#}WhY~Q-qT9tR-~Dcv zZkd`(x2s(;b%h;!CD<#X@KC?^FexnBi+WwjJr>ogbfaFb!2EeWdT!eLrxHm-dofNa z<%e(s04m6>g|+!cc?}Kj@@NG=YOT)qB3kfFsKEO*!}E;l;T6#M1z54j3c53zFv^hC zO&JA%lK&*OS>Oxl)MY42PG@~LN~Mz6Dk))^5xXg|e)tXv&2w{YisZYBUt^iYdfT#? zg=_)JH|*{JvA9}&6zjQ_bBAr+d#e%9FWwxc-nZLQG~%6YJ^e^w?g(9Yi!;V;#w4z{ z{gG&~l|V-HJ}2!XZlqQ#Che!7f%gaiTp+{v)s!-PSbG3CV)p0+!tqWw&clE<^|BCp zZrmZo^;~XrQS~QGerjoei}g^Y<)=?`hY0;EA|rbiAE94-oe9{E`}uV(@2Y4osL|aM zrc|A4L+H|KxmbkM^{F>=qh3YcEu%Cvd@wzRm#03~+uwJve_Awkft{E*xv0U+C>{;c z_mH=MWnqwj66cPbX%aU_y#WyEL_>}Xs?-4IeaVnCQaw6bZ$h}7TGWQ_x#2%?!_1Zi z>#cn?J^aRrOw2RZTl5efwf7SG=Md(pRtG8`?cqg~MaRaJc26Y@4ssy zJ4*{>F+3(QMA&lmCM{`XoSvuy6(~DIc07`i!FlUAiPp>}Bwe>{doyUXk%SmnQ!4(| zc=-mZo9WepN>@ps$Lihcv5C{!yZ;e27x_=_N>KCf*BQ! z!(F#w1&z9k0^c`H;*l{G&q)RaC0kNJn{oFvxM=vDCZNtiVyL!`;E`W-6hr zLumyDbW#IJz~>aBwO*!(>%Je+`BX*>J{u`11ms%cyv9x}_9TgIk@at$MO1l~{JG{{ zeJNm%y(QgN5A^EkWEIcPKW(g`^d=47jIMlEEkfh-(f=HSeiLgt>s{Dy)S0I=OOqjc zS3TrtN$I79aZ1JnFJpYgezP-SwWr_^hq$POIYK7n^r%$gY4Z*M==3( zC^*Vwgs@mw*>yRxt^l;q(6MWBC2SSc69`^P((A8R97s%uC;&q)7fotj)KsomLArZ2 zB5&vkHOH@H@oK)c?l%E8>kD_Hm;rZgs=}89HEZHQD`7Lz#3~~~2F8`elOb0fhO+hmdg^;# z6G<|a^=x!M%!7bxwU)+E4Q&{ozXxF&WJRCky)&3eC1;{-gigC)pmUwbr6gey#(P-h!TY8M3)evw~3PIj53Jm zL-ZC=l3=1Fh)(oAS`b8uZnOj;%BT}%yeI9xpSS$=uIF3p`_}r-AG7A1v#xTky7zDY z_P&TyvOdg7HB-u(zC$slu|+ltrLntSZe-&3_a;R98=O^r>3BI4tqqd=&db@8r`ZW3IFZ?Jb2RhZ`N z4pqqabboen(OZsRYzv38_qIL|mR;$1wK*DIl@YamPGS&f{;>Ppn-%dYrZ(wiS_GHX zZr+}Tf698c7@@A(ajDNaqPyl+`K2|Q>$cWs?_n6M>SVQe7dWk1T}Yr*@5dgz!`aT! zF)bFciB*xL_2HO8)pTyho$t{N@}EC7H$jf&?N&0ZO{(r{HGa&sxVH~w=5gj@sqcF- z+G1X1-cVzqt4(%eaEdhM*dH)+@VqM7zwxcYG z6ZCF-yxoF0zF`CV>#${)q=5+Jdq`M2=%P~QYFJ(+){}RzIO0OoMdZP1dV_Mib)L%5 zn^p@DQv-@~YVN8HpU*3H48}_xoWG5CpG$~%aZ;A!58;f@OmZ=^-btHZ)~odRX4{__ z$WP377Nlk#zjb!^G30KwO^cvQcE8+)-|0{*L&CwHn$7yOJm;w4*H3@QF_Ens!003T zG5RjxlX;F}_H6l^a0z~EGM@ZfX(#-5byqIe1ucb9UMsn8vl^MLt&Qp}6qlN&=$S_7 zM)Tc`p?k>v!H!bkHcO61+92cQ;)xAJVEXRd#M-&)hNey*Qm!chD$AQ=vB7IUULCVD zg+tj%TQ$s(-Cnyp)q(E``xqb~HDin#c4y7V@Iy5q#CZkLp?R&*JJ@yu0pvLOHD)nY zBsy2P$%rGCU5;e5oBRYS2)4Jnfw!zWmEC$q0%Kka6C5x_6?fb(zIoSF)rD^=`k0C5 zTjT4Tz-};d^C79zjP9hzbqx%pdKc{Cb>KraDN#zr@=^}#+sy!uqSp?F%SM%1%i7;M z795R-o!ZKDQ*J(4JnO!HKVMte=@TV_*KfhY52W8%>hxpe1?Sh-eXhkv%$T$_nHcRe ziC-jW^ilgoL5R-Jl`s2=QbfeohD+_P`sobs&cz_VX-PN z6q-Ni3ImxwBjG8_`DnqF;>MW{G@9LI+Bn;U#dGqIDVnHJ3C67@zFfxnU#S*H2Kk%{ z3z)h7blHM$aYD6tcx*Bn%8L3o(Y}pT-kpCr=`eCvgv@7ew&Fnjg=Vnrq?~K;uQv46 z;Zo5!w-EMQPppm4DV5GS&N6V&E|Jnb%-w!QT|GJQ-B>m%N#k18nU%f@(Q@ez($m(n zvDNAjxl&L0VxSt2zArcL28?fF&*_e=sjQqEgR<*K$#_=ngIF}-{{rS}f@p3LR7{CN zuDm7bpl4WW|8(Ei?|7*%)4Aj*B2AH=b*w7HNF6`R{=0(i3W4%>w~+iIe)GB6on@gD z>P+6zy3b7ooIf1ecFZpouP%bN6JfIrKJ=jeW(ea8aCL;S)2q!YpX;udChan(?Zo>} zI4@r?YYGZ3DtB{r-J0a^rK$9iz~nM0<&5sAmn0J1oTyHHEi6iuf7VQYu)NOef5;Fw%DzRm5 zi{s!GoYPk%mx@ZFN<_!JXZV<4X;v1vE+ewo`oZdGw$9sJttq%eZp1{#!gA@P_I)fp z-IXIX&qpn)^-Io|@8~GAWH5!ija%uBcVb%^h2rME|l?NXK zm=&hE0(wjd$DH~}#VLv0V>2FQNbyvsSF^PS4~{heuU+%-vV7y!UZqU_)b){`tB&OG zJovbCXVQBf9#uBF<8!^jQ~HDR^;q}0_z3z~YET86kIR*b78N4(7|M3`Pm|Qs{d}Co zwn+F^gvz5I-fnjs&lEG$q|yBIcGMQ}=PHk=V9Jtm+u)W^zP=e9OXA;_&0xh~+?Br8 zgc7LN)qn;`5i(6g@Gg~BQ9x{kj$FS^$6*<9wn|!=yGd5UQt=-4?KuhdP@&R;LP`D3 zA59jB7LEi!5tyTc$+4HaH65b|WanrrS>=7dU+{--N(F+!kb2q!X;p8RC-GIa+@h`E zdZY6;AJ2&e^Eb!2E8t5)EPrE^fU7ve;@}sE^W1uziA`g>^}>a)qWOI-+##bm~5zC(+ zNP1yFWReilVg7&Gi=CR+l8K2av6n;cXaN87wmP*(_~B5XG4_;1bDf;~Yw`~d9eD{7 zkL+UWN21ql6IWN#WFQHUoF8$}0kiVIn-lV@AO6>rlK-Fl|9I1RQQ+f_H-t+1Rla!C z=hYy;Uj2y;s8akP2U#G3)6*Ge>pj&rhMp!TCp~+XcVO25oaYGyP|*FwVSbSQb%19D zu^#(Fc`5)n)mNW@mP$ZE{DhDPe++rQ!Z7Fp`Xle(#=T$9{>`k3u_(@kt+~b#Qp(rQ z^p1TDPA!hO6!C(L^fa%$);A&`AfS*2r^`I5e1~|Zr}=f>0^?%|55>ck<^i`31{vZ` zsryjG1$;qhi$LbWT_90+4z^L}%x7`$^R^~%`^>QCRs^Mn5sAHY>&G-x1m2HlKQe!Y zlLfx^&kb|Z1^mB$ztH1;s)+aJzoYVX@T*@5^fcqti9vt<7gG0f2LH?m_z~w~BK%SK z&zGt^|CBNo2{hmT&4s+1ej}U6eN#4OT%@}C!GnjkwjZS)8XA6@{$AFK8);y3oOE>3 zviS26MVm)z+Y6f9qzaxz*j-Y40)=9UC7%4kWCLUaoAg z0;qRC+r`wS^=8HsqZW-VRLo6e%YQW~_- z2Fj3qY`EcFXmurC&E5P@ANU!`f_={#oeEl?F~1c8)Z*j>vszbOf+JvJVb6}{0Z=*; zNh@FG(l}O5*Tem%Z2q?-ASjlPdw2SdV{lfa_BB!hKp1U)0J+clC+F%nevpMzr^<0! zL(`M!AJtw?R19{1|GSUJUtGXne{umoR*e|ced$lWPS?Q&EZ4!p?0`u-;`ab@DCy;V z<@%np&DZu{v*$$wHvs9Dlm3^Pnxr9u$MPgQyOgzPUtQJKeC zBJr7N;3FREQp;pHqhqFyN^KHQp;Gf3-b>o{FYT+nqZ_^1NPA7kCBXLxlanCNgEuDb zB^JXoUtqSW3G=wVzYs=;RnVtBi)Ja5s4l)o%gcR5PS;VQVn9zk&{gv9MtW#Lf!_&P zK&>R~bitg)%Al=dssp+~$JzoI`Ldc8$xAmw1~>x1WuMTK{)?&CFF?{b=u>MucXar& zKcP4g6a?#D5Y938SzRChu}ae7Pt$LQ@-7=Qdi5)G1cR-v*He+3)welC$%lqLI3^=l z4}@?MJ2Sw%Iv9+_D=({-N|9|ZU_Ca*!j>i}Lg(>y>fV_~1|*S6mceB^5`WLx67dad zNTL^pQIO3zY6_~|y$baY(HI=WYJN01-JX4f-HA!S)Soa5?8GSeKgFia8C#(^E(rA~ z8h=MHG;z@>DmYKNX6%0_6wMC^6-sqUL?J4TXc*(+fFsj$KLSiUda~J%>7jOdOxeQ^ zDAotkQG(vkglg${u3f+DPv7~scvGk;XrDa3%ihJqlQOSy*q*f6Kci7&;Fuu!|v|Z|fvR_S; z*@%fd(~rAY#s(&5h@6#>?!eID0lnfDe@6M0PrXv~gkaiOGlm;B9s4SbQ??farP#s~ zolwfHAN&f{wI!noiY_iSUdmmBb5XWq9w6|B?zw|!u+$F)aKrL~|0!b06Qo*B2%7ShYbH6qH5K<(0myr$%NnFRI=sZKd4i?p8 zXV80%xXAyoL#JtuTcv*BCF&T{E?M(fRwf)dlss-0{+;|3#wDjQY?swYi3nbQ9>y}k z1;Kvm!9MD^SbP&sly7*1TKW<*+%Jl6MAKyk?>xBbc5l@{?t$y3MtvYLPU{pl*~5^p zy@^7F3q~LG?b9A`F7RVjE!*6bTBVu-L5E@8+yXUT@?A4ATvTN}IkMS(L#epi(0}G~ zCK>)y+C*kya!;euw#S}ShR63?BW3p%r1#`uJ6HnCpfG+!aG>!q=Kcp0VQM!j3xvZ) zKicsA`|)Z{&Vvtv=F{SA+XLvBo2?n64e?6uO1_|W^dOAmF2@}-Ee8+w;<|)mXi&gD zZOb(M6CO+n!3g0t$%kSI5R1fMXAknwP{ykq?X)K5apTRlhLZX2wOKmkA(A;EEVroK z^;me{uSyP`%&t92K44JG7dfL9uQ*F8RD3={dKQM%+Gv`h7j_Meu__v4sPS^VEMh{Mf?<3?}{jlBJngv=*tPRO$HA8Y0Znl9WB!;y^quDUMP`l25`_ zzd0@Wt;xSB9w&hQvU_$}fDua!9^Ayt)*uyg@_y8B!_AC)gN! zu0@Z-HSegb$0=vW>6cxUiHjV?p=>>PQtRDNE9AZEn)H0WHX@7F=L_=5H>}a65M@ir znD?2ZA})tAVvNm9YRgX{LUT{cNyyD8yOzFY8NW7i@P%zR@dR!!BHfkJ6L0uTMTFy8fh{hc`Z0CAo8XJv^YKKD+T?KFCxR#C{Zj;rkGaDYz3_ESr+?w*EcHB*$|Yev zcuHvCA7RaD09bg;6VztoNwMDH(!~}C>VT3ZQk`!cmS7Wc#^oTnh--XZW(4tV{lhe) z#8Yinv%;~=t5FYF;z^U$tU~#kH9wY@I4LTO^j-s>f46xD^@5bPT8=bmGud>&&c*}< zk_5kJg*+eau?cq2x{V#7FKzFw^S+g_FwnhPc7!URXy2h0TD|B-9|hq(@iZUqpQb0t zDO-H%r4`Bo@Iqo9x#Ga_495cl9`o?8MxBHo)E*Zpu5Ip6^A-uJo%<8=CcNvA&ukI~ zm}2IU`&~wW0owN4qJiZ4FoCR0y!9t5%+ts2PuW5`iZ0qb*tRrg@*s+Mt+fxBv+Hjd zlyX!CQU)?lvvatB8M?QFk|6bLg9nYv$<#3-z2`Ee8nt_!Tp}xf)m*4WHI=n=g|X>I zw&IFRA&J4TYwgV6WH^u?kFU0&VxNwY^~QL-+-~loAh36{I@?+Jv-Mb zTfYQ*+iUxESG3QJW_@TsyvogYYFn3SD@GkjT5yg$UpSCJ>siK^?lC7aLqoss$+$v3jvo^-tBm*K+ntO%9snzvZMqgo!$6v|KPT-XgYqSUh- z_I!sb674Js<7#5Xbo6m7tig%hH9%i#9$8|Gm$FmXq1)Xpc|1H(ZelyeahGx>mX*yn zn=1gPl%JA4AX?}{I9tRy{V8PlgcOjff|J}CYy5(uhPB^bx3c#v!PcTpA?0JVmiaj_ zhZzC?uVNGwrdPLECT8QUOjbjK(>o%`JvxGkt3-Obs1#AxOK2TLW=TyWiOADleOVL7 ze(@qig+(ogSMim5`UUtO-TD+7Y@;^5xYpP1>)AcnhrpYEULfzl-7?C#;a zNw?(dq(DzM!v%i45*Vpb)*M>9{;6lfEtOcntr;V=-fTcsc4xY83+Z)jLyN4HIr-TnGa#;hOGOG9MQ zVuB~B5iS-A@HtOJL@}i4F zs`-L8!kaNBuifwxPg$!ndOAvb{J*Bg<+=l)UW|(bizwQkWA7BT7$l-GnacP%Q|w{OYl*+nOy}@D4EX${OKllu;5TO{@U)D*rzVM@qVvJ!7P8pxYL*b@ zGoFKEgHECksAHtjGWQYQw~QOwez_qN-_7bQV`_;+ert@?4}mTAS=JFWG_&f(tEdiq z|D_5BwQ$nJ{qoxP!pa#qq9WBBJ>?kWD?m8@@{*{J2((nR5=N@vzcVD+;3&y_WEPC+ z4@zOb!KZ!bntCF4t9+0M6xvIg1U8){Lk5W94XBkq#Z3p9I_7JI^6k9bmMg~j(c_O_ z=<3;fsHGESBts}jXs6>G=9%l4ZVD`lsAUATj~Bh1BNzI3k@Dzi1W`BXRrZVNri)T! zT@iQD>azWuudYVBkxWXk?HQFSa5H?Wy9ZTkQVyarXFg~@9h$grVEl9!l*nN<(#qVn zC>`YcO`iLiB5*>y%U(-+EH8&uobXq9W~1Zswu%70`*{t937u;b>)A>BduaPHdm7%@ zK#F@sz?8xc=+A0KE6r+S#;MFsi$3q}%Uv#`l7TKt9fadXX$WQ$P|{dQMDW$W!sP_x z%B{cn-=62IG5QYI3x^BdpWi$a3z2pn&vQG8|3qtkioH$)Kfd%0FZ9;zFvVmuy86TA_j@fSggT2n=jmS0D;&>w zc%Y48xhyvp66O;MWi>3#11*iWLJurAD&9*oCQ0a}q?NIx!o|UmI}N@URtYBB9-slu zW`K6T^LWnMED!8L9a4TKHz|1PT)Mw!0CS&;w`g2J9qj~SkvfW+Z|erFu-7m>&o{0_ zrqq=9qMEvQ>9RMuPs``+Qg%=1X3YO8_Ix`6A3GVk%+rN@G9M}{*(874?@3sTD@$RF zqJpNL4A<$!h4L{=)VWjrXUppN^RmW8Hr6p>%VBY7@_?^S51<|r2(Ly(Lfp;^f+Ns)dV?%$7ub9*CM z!_s;#NjvW^#)KR)K@2q^+}jmg&;RHxPIrhw@LK?~kc%M%Degd*h|&Q4Oz1j@+H``J zeqOTtr(WzCf{fQWVL+0@e#zM%!FSLv<4L804CVh@MTaFr@rG^l%v%L-@6wmSZx3VZ zHQn`)0wrmTWxiechX;KxqsLeP+BGed{CV)?)qt9nzXhy+txWf|e;d}ZuGnVVx-k-# z%$&uSa}PjFq5wDr_~_p~qfdp8tN%;!g|l9V{wM7V_&78GtWf^lruSsQuK*GyF{r)0 zedIHOxyEiNt1E+Z`Sm4x3)BCwM>1)%mSMG6x%9n zdh#?#N~BfQ)SP~xR8djGzfh__Xy2zsDq9Z+J&ldj>FLVrUA@F5X1Ie1sOd~4S5;-@ zJJ$&2n(1jhhW{6kK21dhSJ%>gsy~qAGhFk)z(ChI$=ONFvsb)bYp`xu^s&qf} FKL99V?e+iw From 0b93d142f20b1cf2c20b3e578faa1f13451a565b Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 4 Aug 2020 20:22:04 -0700 Subject: [PATCH 567/589] Add files via upload --- .../mdm/images/autoenrollment-policy.png | Bin 0 -> 225665 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/client-management/mdm/images/autoenrollment-policy.png diff --git a/windows/client-management/mdm/images/autoenrollment-policy.png b/windows/client-management/mdm/images/autoenrollment-policy.png new file mode 100644 index 0000000000000000000000000000000000000000..1de089a0c69498defc96eb8cbb2a091f0954712d GIT binary patch literal 225665 zcmdSAbx<5__a>Z#1WR!DOh|AEf#5D-a0_k$g1g(mB*B6c+zC3kyF0;yJA*q6gAFh+ zEYDl@tM7Tg+W&X=s_yFQuI{RH_g%-&6{@N%i-S#x{p86L966x0`jaPUlaJ>QO!UVm zX*37SkC&&e>avng%EzepA8(#pN+?M@c~TYq^3LSN<2{xWP}lXz6ViA8oKNM{-=02s z@{lhlE%DjQ=qTfb7wNzv>L$v6ce*V|orxHm-QL;LR^j``$q6pji31k?Yak}!k9Xpd z%PS(ikB8Isy(P3&ZdJT8bBcBhk(GAX-YxWqvymfL*vQzdSxyqLt8f5Ynq5Wo)jH{jSYl6wCo(FV!u z|JwvQr6Zb*rW4yi-TTHTBs!H;ioZ7=6~<;wQIL>O8p(cboPG8Hq7?=GR@VIQr6Bsi zsz9-vJ*}sqaIQdfBoX13{@5BL`IeMZOv81FMWrO?475^JOi~Jssl~A1fAhH_Pz-b( z6H!YnykhvCt7#;En5>D-Yy0e-V!6RiaS_(ej&@ZoPtVW+IxjEj{F3g*+Ly?;NN*+X!r5gi7nC+Lt#}`-;8B&{5Y{#J5z~>=lFh+DlO6W&4fe`#f~|_2 zou3a55BplPz!T0lhpL+`*H*RffIWw-Fhop zqJil3q^D+kf9+|qcm!3-R5Gri6;k^js=uLG(&DE)&xYeCJ|P&y=h*W;2dqj+0(}Kt z?{7%}dFRvGe>*oZ;w}2t4>u!|LNI7qn%55q3fSrC!|an1}AB*09fDZM6g>= zH!2Kl3T-jS5UlO%3V0Om?Mof8yQj~gM>i(8{6INQn-9%EA2f@Q?-qK4p>LTH+b6+& zCIu0W#!0`B_b5Mv!=tSW6~pwsIx-nc7dSBH#9(JwJQ5MjLZw(C%kGt6W&n_lng)om0!AfMS#A=9oXcTmW?fKh$?}05G8bvGDPr#@P zbg=!J)MjRp)p2X2?Gvv+%-|n$N?n+0P5yY!mkNZEi=ib2NuL#7XLhf!8Sr^#&t^fl z4rep={XOAyX}1jdYNFceIeTMB1o>L-Id?zOpxHlTr+AV!1N8? zRlZgk-~Ri3^8JG~$m#1ev^Lb3G4vLnUE6)$Hq2n4?80s?b;bg#7%Cy;zjp7T0B^r+ z24<=gE~jIvw44hG&4(UY!Fe4U<^d=~mNapTzMpbS(9RZA6Qk{UH^OauWjt|B`xbWJ zEwNlA0a~yjPRg0tI8+n;g&Wn|`lFmfVFn^o_OL!>!R@ROa<9FX{Z2~EFRcTW&qx+F zZIbGRKXNj`e!bS#41(699WOC&$_g#k+X5j~7?mC_^p|zsE~h$})@Z@)H!mKQV1+MO zGKZS_=OlT19QD=TeLCa!4p|L8rGBFF4yhli^hG|=yo&$FM{RWAssptFtgPYn$3jkP zYh9Kc3+*N*5@{aC&hCEqZ9l|51EEa`Qp(9_a`irW^R&I^)AAmi)I*)CD|^%4Z;g2t z#-L(NBgQsMaFiz>Ma^q6`WjyYPf+JaNQi-_|A;$TVbrt3rn514$q5PmP)KU|%!0b{oVbh7D;>7uRsP>WBCBI;aLrrzM2nPPz%XCem~> zo;Mtiq5fD9fRR&3Ng$|Sy2i2)Z(aJz)+m}UFecM2TN0Q=V4I^<0khCBge7iNS>lL5 zZ-|uoY3UnPMKn;A$v^3Pf?`laboHo|w(<9^7*B1jPRCk6ceApkh|d`91zz_-wN$Q@ zt;0_D#3!h7S`X2Bp#pBdkg|WYxuRyLJ8kHeF$q3*yN#2)HEAb6TlLB6iz?3I z?B7&3(Gc+hukrNz&&4z`^c|p8h*jf!QujOp^@A@NI`$ZZ?`_6=zIfo0caE&g&S+gDzP0n9*64!|0#AM7uRVz;^BG?G?b=)DYYHg7n9#B_ZVk+hk{dUC_xb66f)i94 zAjr)<4+5F0^TqQB_wgp2D>u$nXmFSp;xCjka(r||&2RZKYM;C`9l62>o8gH<5}hS| zF}Z^;@*H8IJhvufjxz!SSz=!WdTx$_XiJnlpwJFp zLorYit!zLO#4A7&7(z!mAOx!|Kz1r$7;9_jlYJ2_=c0=yAN<`QW?Du(`9OKH@V)@0 zuh^EXzKZ^^3)c_4@Kfvubwwisn(nEfQC_5(gp)Re)i9oJ9QaI|CIqjfqc|=nyU3uM5dp*Hs8mYVGoPh%x2a9A4zjA*8+* z#T6(+H923DH9lt6&$I#l)w2Q5^Y zY`kSqPVN1{e%okSOkYS~Ssju;O4Q6E$ofipgtom|mrr zEF3yGRlk|8q31nSp$pvI@Ume%XZTsmsA920%NTYd0#yRmh>bN1Y^LygvuH4?n0>cq z!<#`3X0)n~9Xj-MYHLi2z3#tzVvBS1r-^;}bT~XkFb^l|?wGFjNGu^VeAa1RM1h9v zWVN-^s0>Rn`R!yD%NY;sgIp>VRzm*f*TR88+oyqxS!SbFYO8W_DbC$!GlB5jCvH0< z#NKHmTS2ye;l(HM=FOSr=dI2;QPQ_@1@952fi?_q`2C0F=qR%Pt5_l^X0BlU-F;W2sdj7PL=N$`y_v`enV7;aAwc3z)&TagtabZtn^b|qo%Zu z!c^%BJJA>mYEQc3&qH)nVe}T{=56sYTF;02vM;?hOGuux2H{Hze)c4;>!9gQW!JEt zaK@g?0y&Gq*fK=zdaxmJBVM~^v#qK?S+hnPf~ol1bkVHK-Qo{mp#`Dw>O+Dhz2Td)*ah3BsBP(7b=FzINeqT&zic8Ac`hK@hPP` zu-AG1B$=#vbWp}I`DlA&1`z0G5nUMsCkkSRwSH?jAPgmUoG=aE)7P*VG3kr^s!6HI z^salKc)0(iZzliu&_fQw49$Gp9;LbJeY@8$nE7->wC3}GzJu-O&x@0OT6iDSm}v1G zJZx5gX55L1AfsQ``_i^CO4bROIfCs(eS!*?i@Vm~xpqgFvz0T&t#;V77S~QDOJ4m- z_?Lj&?dbrmJdz}RsjWKqQjwkSrsjB#?_4*xv?2@~2rWDVZ*m7ht5qy&teL!3BKSOC z((`khVG}_VE$-&MkNBzvdUl@4Ub4#-TFX_U%WwJ#G?`Lw_RjM-)bcV^DIZxuV{pTH zf-a;S@)xVT!#)HneYwkNOTH=D9jy_bZ!;myIJgfO*Sqh2ZbBE%k+AePqx5}*HnTOW zIf;GcK>Y9Yuy&&#up*q&CPF>?{z|3^96v*v@)b6iEs5l<{IWgQm=(9Jw2#Se1j1I7GrQC89pXj2u)4_FGf0*CT|^6h`i3T5H%Um`O)SmRxrEnfR0YAfIZY@y`F&+~>l6w$FX0xrGZo)|OY+8h7*L$dp`RnvhO zp#Yi}vQ1@*`zhur!g!SB5OO^%q$4b~kJL!{2o_V$p*Dk-A_HT_dM=k~cT|!)zd9dN z2puywYM^*_CRW}UjF<1mc#{u4-POrCKqJz%-;<1O7KiiAa)IqIM3INaHz$xm#nhU> zW84k&G`cAGuj6!tVnuDm?uw-?;bfmEhHlH3H*xX4owW;AhSBPDzaH~sueR4gZljMW z^p~~Y5=YBTFZG3le6CIc5)u+__rMtcm`JU7mE?Pw^5gXWKBZiN4hQnv;oGXOBVQI9 z^v9D%FK)I<;_i+&r|xcY4|xvOx=vHn*j8f4s*eSJykJ`~`ZN8JnOcx0uqF;?cRYiE zu_f5Poh8x3)9-51Vd*C8tizFSJEAo$`FED*_~Y|{7?*{++8B;b zL&p!ti#T7q^bDhDpd%IR?Urky-{ej1h+Q(~+nogz=8ktNGaJX&b!*F^aT!-l3aGY`srNvOm?D-%G-=QNk^9fup zYkqIBFYgw`v`=T^6Taw1-SDC!>@q|Eu=fg?{NUX|uc37$sq#S1=%JW5I7g$~C>>rU z_A8x6~v1 zV>Z3Jm|gF6ovgqYw*aU0sdtpGa{c1~Cd4ZvgU|Z-hQIvI$j>ew*J)+*X9kQ zGixkXykwTtv*f3%O^yt0!Q$3)`!bZR>aK@POITY)5A#@-u|s_t#d~`qjLS=bDn~3op$5x8dkZ7fRo`w7J$}>Q_IAy5oI1C)Q=b+( zO~UXU8zP_D3%$2n6;;ky9KEKs-)lc1EHdAw>2%u=yBYRnr)c&P3W=uPzOL_kbu^hw zyV(B~Gma&)YV+(nbFCKwR!h+m>W6{n+RZNG?%*!m>AF+_T6Cb)`lTr(CfW>+b7zO< ztg2hiz&76U@kS$m8TXHWjYeT9Q>Unea5V?^Cs1|VTp+w4=c4L;53mCC%3>*Y6kHR$ zV?RldbKQvF+M)i?GF#eAIY8r1*PdlRP%UwMUEO04wNFQ2Uz^0PFfg&c(g9x|r*hIH zEFnPrITh;rY1DS@T}?W08SSD2ZrP*jIJ-Btf%mwuVt-EE=W5WXsHt4ytEFlpK|?c4 zRK5$k%B`)ECkj!>ZSs&yavp{5lo*p%Bfb^VdjeExN%1}0KT26RtQ8h6nGMW+$n(|i zFKsSf&3YZ4+a|U(>P%L0jGMXBn&qIBRFn8h}14fE298-vmA!PlADmfb^f-V9-t>C>_OxzR+%Y_H&ISUcQQ6O|7y)NCoe zzQ_0*#EulfajfPy@tqGUA*u%hC(QTOla^tP4|~qij#TGb>|a8So_V&qU*Cl5O`iyb zUm|gx)=F8e&2w7wY3**Cm`Bk|x96+SO7(>kas38d?<{1>3Y_ebZmI6HL&3+s6H`LH zPcuj&9FZdKVpg54@&Lo12snkC9rC5C)}hNrFDZJ%Z6->#P183*m~BiN!N^rVebN>G z(RUcxx#(PLbwi_Z(Wa>|>v|U{Q1AUV5`}58^6o{}K@ezKOji zTed6-bc;Fg{1JrP<8%3CCzzcY-z+KWglAEywOo(^0D#}FqwbN?va&=}RLIGQ&`>q@ zr>Ks{5^7fD^z`QfrL?h5V~q8ktHn0gTgiXwW2hCOUUYu50!ZZQohWtsOhTKa9Xl0Y za+j3nxzb@=>wOU|*ykLx4rSdNVyruHAnS;(h;8||mfSxhvGZFI)&(WqP$HTUzo4G$ zNolqXStG=W6JyR^Ozm)-ZlctXQP9Im#drNVNa!42f?`{J*0~9P5?nDJF-$UsFzi-J zoH}ZuwR2MwS`Ko44k1>{$+YvjTjK~8>ljR$nrU&gysq3&;=9r40qps%6zh3tQTLn} zi~T-nJZBaFn`07Jp39d&9!H3{*5qk{Q*~C8gzYn`J|k?k4#tvE^2m-@cIT?9S75Y(l!#^Ir`bT;-aa(RTgWAa$Xu(=hbx@@1jd3id?dMHNPic zt|yRK(Dc4!RMri80Ko+^GQ1-i#VNCAoZSidew$a6e)-`|`B=8$<_S6T8}Uf~9zeG) z-C$qgnJ(n_{it_t*YmM=pFj6XVV}SJqgX;Hm+EEJ7Q+YKA5O_r?^cOiJ1jtJG7|Vs zGX7mcWWQkpdq1#heHdXZ2ehP$UcU!>$Z{$ZB!a~t@>xi_)GshsQ^tnJS#9cfRG~`){9p{RfHVGQ#9DH_y>P-+N$l& z8G31ZokmOPOq_^_8lRL__aR@vk4_B3J@q-ZQ~UD_+e3H_Q{BII$%zp|Td47X&Wqv| z=*Ay*^lqvncCq(m8=Q5gVmn%w66|;O6YA+)d^p%2;FkX6jzB9TnGM~e2RQqIVtc{j z`n5;v3s>-6qLD2-3!RN{wXsr7u;0RFY_?1Js0AvZqxD8)xQs_BNSvjO!|T5~AL88{K`y;Sdt|*nllNuI8LNUj{qJ}RSY40Zui?2Jr^o8U zE`a;jK^k!#J2lyYZ?)#FMm}12*bh`5M@eEcHx6%ex$id(SJ+r1dW4qc!-j@CFwqsLf0p|J$Af|N;n}5- zlJ0TQ*maNHQT^p+3$BI}s6V_1(Kb7Aw&|#As*wq|>oB{py=T|pv=$X-USF*3Z{^x} zt()J?LKp91vGs5o-Au%vqBeuOuXSiO*DhpRF0Jh#n&Jw2?>LtgsEN}MFTZ8Doz$;H zZiX)zTI@g@Yt5C^pH;gazZ39_4Aa_NxRw7LL)5kb8#Y8G>n=?L>lQM8wY@hQhV3ma zrv}h{1HL(FxrWDeOnA(EBxFIJvX>^-t{ofMVwPJiv4O8%*()I_J{5b`DHtYBG+WzR zP=%=JP1NI^JL&PoEW-Sm1Kqr%N8FcGpvuQ7X825Oh14>iHm}#he%n&bt%8^)iigY8?Q1I z67CVFM(zHpbD#%@kIXV%l8{*)+yEq)bga`=XbjHPAqIV~GNk+fPu_Xii|1@`|FW#( zCaj{vq1%!U6)+w`8Mf3U9xP-V_~e*p2@~fSB6(IN+Io&sq?WnGV-37`i6LLR;Y9hxoFQ1V7YMUBtWls_!FVgb#Ry1V=YIsdQeAY4yZeLI`)mv+6cZT z8zju3Vy95^y#;G@;=TX(fp`1qv=2Cu{-W7FNv)?ZBp1CkeMN75Z~(=*+l{*wQczC4 zsx|e>{*M5smdYLv}lTKGUd>{9E%$0M%zhCk)9X3 z%Sm-~)?&k#pim!NSfYSgyH}hu`a^LH>Ahy&%5E0yY}h9pa$EhwMpAGTqiof2%DYLk z&b(#NM!d^DE+dZ*)Nv(V+?=l*ivt6z9=x!cM5iwqRm zmm@aqxE%4R?jcFfJ;a2(uofhW{#cQfrTIOq534zN$GiAy>5>LkYp4*|uYTYbEp<0t zz^+jGG4uBG?>|u#k*j$Nrb|OO%|`M-C}*G3vRIMOX=%Uh%fa-_iKwew#CmR1tib(q z8Yl{%o$L}u8RP9tjH4gbFKuRf*7AaO#PNn}CCX+bq9ZV-{e3RUW%H4i2)QrigdK7R zE%=~su2G(O!1?7$TEo}KqJEG^6tk2V>HT{14u583U)0muBSAX6UokVKQJ^_6m4t5U zfuXnT?OU|fyB`aD#NlJ>w?m?}$B@Xjoixdt{)^i+ksW;~iKHOf3gF>4oIm%>H=8ol zlJRfe=$A1qrkmc)3lNe$abA;TgBegJIf~HjBOH1RP(DlwciK369<)vU%AloqFwatq zi;1~@AW#R+y^@v1NNunSfD!64%7Q$e&e1F{RC@^? z2Kx^baIr5`S>qrhGIZ+a63q`eoi7SsFsjTuO?H0Qu*?uJI~o$`sv$G@{2=DrML{KG znV!KW;J3I&A*rXkxRNz4Sl$Uav-Wc@40MZbn-R6ta1Nl$)ou@Dn{lIUYrmm_jtU2R z0*NOGvX3ZkRYZw$jJH1(@lx3;RJ^b#)-_Seqr~0G;43g?7Y=&V&m+mCvHbkDo8Pn0 zn@SHuQEk6(_pS$^D-JO7+&I}@ttMv7V{!0jA~xvt0~93|i>ywE{dVnMuH+D&AU8Se-9Ra5 zVN$02G>JE@g=xz}HY&zF*;_g`K7M3jpYGgZj;6O*+2?yq6lwA6@t^*%_Ab-3T`{}A z(oHcZk>AzjqHCNNg)(W|>aqDg(&bv)@9}tuJ!R<-*-Hp=>zplUow6a3@RWJV66h93 z!Ot|sgg~3;uBJ27UR|3Fcwegz?j0ApXZp;8I6fRFn>5EAaWqV7fL?zaCtgxr0NRWC zASznte&gKcWSqR9wh)I{u<;w;uZYhjNCG_K{`%z6{!%$e zK;C#c()E$iTope*Dtq*&5KWrv>%&n=YVCECQv(0nYN2qBAWfplY+s+#F$gOrem38@ zGQ^=wuT>uzE{}X@y~4QD48)lZ7uWq|%Zs#Mg@IcaqXuqhn=cMeX~H>+`}Q9dQoFEy zKsxRCE3oD<$jLx>d!CXS#1+e{Dghz4l^YPe{i?CDMX3nPwiD2--o;Jr(wmRA1?@Mu z0k5(QIx@l+x{Yf0n+WG9gD%iM{J1(jM?$M7o719Bm8I@o+-(@JK(<4qX*t;Q?V^MD^1sK zxf;kBdl(`+PFmM(Qr)?c)Z0(<4Q^LC*WLNpL2qa^bgHuYr9T0LQ>7b3jRDA8sxv>v zi4@W)2KcSs7_XvK4Qac^4?#mq;F7*1G4`%aBMR;QhP)Y7n&OIPu%g-!b1-vSq%KpF zT#wu3cuqQa8*NmSdF&sWVzEqxjbWT7H zYfOAHFsogx+7sGN=5KlH-u2iij&qqh{W-p#V@nOWh<0{4l#Dtt>UnDB8zq?M^oQZ8 z2$APla#A*wqy^QbijDqoO9mJC^F>1ikJ>UMWLUnc(KN7!P9=_xC$Re)v*66nUT zyITucQPG?4U&(EJtzCES<=`OtA}A<+CXaw_z{SnLwK-xr6cSurX?)ie9&`~)hPD4@ z`6{Zw?_AD+Ig7G9_~(6_H!{w=Fy}GnWnGLAG9DFZH5XOD+|MQ#2IP$^TPx*?4h#}J zaEzRY4?Hb#p2o*>Sgi9dSz^W9FXg`Q+r`<@N1+4CuIg%9qyKi8F3YBm z7S(V-9|4A6x~|b3CoIbFndF~QN-i30Q;5CU+k2ae;-^B(5U4%*7^0xIU893%#FUqj zj9kIEtM2+9IHJF`tGNI)QLBmx?jFB-G+3JrBizL(hsN-F{7J(G0#=mqrTq6D22bmB z+Szoi9y~&|k40KhODV}C)&ofyc!eG+{_qGljK}zZDD{w!_BqYY!0n38bzltc!ipiL zHM`odC#HzN_rypaXSUO)<_#=EiL(CwPxB98I)>VT7o4{UM|tc%!(`__7-H^! zXZ$FW`GdNg^GNP+7ju8)x8H>?Ouv>UlcyEvQCBRbe;IMnR@vs}b4Z`4PokkN5ViFy zDM`h7L8PwnFa9J8j!!hPE&Jk}LqCV{wx@tPr%Jx=q5t0Fq=Tg3!!3^}*p(mMxoB%= zJ7HHyrPj~rt+v+X`mhB(S6FGYQ~LsSJ7^a}t7S`zC}Es-O8&52%CN|U~{@8}}jbq?0*Y?Ga z0hzo}(#KoNvoR0oJP*83Shma}o+NRH>(ttsNC0lSF!pXyA=5N&t^EmaA3KtS57t0{ zA~uuF^*HZu5WlpM2xv~UAN+o6zJ&belcgavhKoh zdR7omhKWyP8;8&(dot9fzV`z0#j|HXA*=F`vv1J1c?ss-y6I^XsaH}BoBHc~qEWkl zIqA;E$227cH@e*tVt7mCfU?X+TIjM!zs?qJj$D6t%^(asS{InnD9wo+KuP!2Ck1qP zbVs{viFJ5YVR{f)9hig#C{sc>T9_K=OKN&u@MpMcq{6Gteiwk|82f5KlE9Z=^|@+1 zjcvde+Kc79Z{+SJPw&aFtS5fVo~ND9c9!*$YSsNQ%eFbe{+{=Hjqj!P`VwVij`OfY z`sr|~4d?fb-a|#}8-cdycurow38Bdfj=ZGYR#9KpJ>q~R9`j{^(Gby`C6*19vgOB6 zmu%%rDgLCH%qC0tv&oAx zZ<%$XxVgsv9iS{i4(sR;#Y=ZJRZ@Qt#3Mv{aUJt;?<`{U5!*VSW+eG+G^EzpLf76* z_!-{B!Fk8&450#c(1J)i(O5w_Y{Ds_8C(osJ3%|qz6yZ^xm9nQ>diWIbq#&&%Wt%U z4OklEu1SmE#0er2+`UVtKD}XW(ZmAm?*3gX<7KP&3XX{qc$`ehtIJ}|b98n#KwG7C z{Q;UGDm(yIL6zswp&!oObeimUQn=x1D#>obiPelb(5N~Shl=sNjuj=dP{-Fxso?%B zB;6YYfouiI+alxUq3|*M9rzMO4WaxMWN+U zExQGyFCSt&Esct_f!;5Xu*9+!;euu*;spf+Fxg zb6pSb^J2<>w1i+>w%dt+`EnDMml~6jB9m5s{8!B5sE%w3To@y|OZi9bkm;4ZhVx}~ zA0sbSc;N@-+jyr{eSRF;ls&!PYE&(i(4}&AZb?tJ6b8RZqr;L(F>iy&&of(nIP9k5b zqBYY@OC@%)w;@}#`51CYyZ-hagOkq{S?hhr!|<-us_>5Uaj}-FR{|FaSkJ4=_ikr>7aL zeE0!-XdtcgIeD$eo(D_P?Nh4xd=B2)-wU(+*E(4KrT| zD}n)^b~7Rii(Q{WwjWcBdG+>Mq+Cl$r-)cRjzb^SWxq>5cVJ_nS56Pw!s3IU|DLP# zyKa)NLUy^b!-=KMTB{1r>ahVUE(AtlG5$Kiaay*3yg6-O*;|P<3IEc$UoVm*OANWa zWGw-CGZmQ2N-^N9>G+{nNf18zv zzJ8M7gEQ-shGc7bU}Ds4H~iV#;h{ zaD}U#k$2>Dt#s^Ub=88vH<-`()+f+S9Ba6MBoOgebJS-=0dC@5f!ODGZkO;az-i?K zblXE*sxf?=Gi@P22fCt&+%?rzo41RX2iit&+Uh1*j6)rlaY!yS09+UA;pP^R>|Qt8k931AjT z6d#~hv|`!-&62R!oNXU)F`}zIAlD7l9iLxcx6><#J^Z9yG5{(oGqe@JA|V-Or)04A za7EDe$GGwPnM*d8AA%Ih}TUZV5SOO}r(Erv}%|$%rLQ zuZD|_C6V5Q~B*F7@$5*<7T@M_HnL+ z^9OjV{#S+Q!?!_8LLlM2pg>=e0;BtU%Tf(!s*>kr!Bx3J*_A@oc__XgAS&%jXdkss zb$1^SJW@U%3fFoqG{BP$ue?mg_!^V`+u(uC72}Y|7gi+?gwb7~D-{^bkV^sJcW+Zc z(8o%8!ydfk5DXl+yxO>v{vh3w5Nznbk1UN%n{?7(a4Q}L8k*v(Q3J$ii~7tmQ(I@M}~$>7i+EUmK)VFx*u@(1q3H6 z)yx1nXfuHEV0CSFy*jPX{W#&#e&SRJF1QB`+!#9f!<>o!BNQ>v~NK8$Dcz%LO9a z#GU)QGb16+_e`dZQ_~w+Y(hUPKq6wsD=onWNy3HPkX_zX`x~Ou;10NZ;x&(aC{Bep zlJw+jw%xQEp&iT=jp}3!8!U2#7%5zYYV-E0pI$$0^02jD{w#jd+|Idfv*^A2kym2w9}bkxhw>!h(W9{i())xxsib3%7a7vW{5rcW#a% z8BfBb*~nb;mD}kG?GRM6MB@=Mlw&GzQ_ndRDbPrlrMxmOx*aE4BS3WZO)`z-?t{e( z-cU`4-8NHgEnaIyG&M(@_Cf`OGpm!gi+vkqw6Nz?_POFTm0A-0Xk-R*Hg~h!TbJU>!p>LJ`=oAZq4 z)O!jLW=2iZH4`Nd?a+`$J8J2rf-rl&jgpFvT>U<~RLU3rjLD+@uR_v?edVT$2;8VT zk}3&J6rxYoz)sIZ&}mADSFve78Ja406dhGZmU)aOPfhJD+k$6~E;GD1>}cdNnlGpQ zYH+!6&2Qfm>>vL2sq zB0vjktdv+tqh0cWBI}Hso0w|9d$ic)3-ZewvT5zbCJDm>H~sHH{fnN648wh4s*A!^kdCuxc9AnOa-7J~7kFg*~^q!$Yvd`W^sH47O-1k8V354|k@?snXA zQsg+RJ;45qv!dW|_tNV1*|~0rOmZK(iExn^kw=qiks93!!}{WfgE>w**#odq8cG4L zn2%CJH6mZjxPTUK&0#xWW$CRTET@88;lNKV?TXv2$*M6ZG;YT%2Q`xZV}!Nly4>1~ zlJ`2+<6bt~(V=HjE_Z(aGe@j?IcEWsoc$=4<#vZY%z$^IRt>G)Y9Wq!_al2Qb=5B8 zRLwS9c>$@m?~~6#>OWM4A65(xoPIK;c9_gTV`ZC3{6+K) z^`kt&Z1ppm5Jv@-l(xOuSv&;{qk&6*DwD3REQ_?fDT3m+F{|*` zX7=#4a!2LVhw|X|ytStb66g`uBHu`~!txY0x>KENNfA+>!jy{Ue=>~ro2BZz4%&8a zhM??F>-z14yL_d_(YPJTeV=$HGCDUEsl-S{oMEL=1M$uFMXj)ph1y9DW=R`)3%_V@ zYW%!Z+O7YpCODiAetK)EpSuEQtp5zEl9b5iqq4lpF2ALnQH?jRGrYOJF66<;-KHUL zU1(ZN{$)~=*kwlQquOXxk01DcWhZ3LE_8O z>C(q9h`D56I9>D;YWIU6Axk{zp9!%xFfjTE1RTSO0Y#+W9FZ*vu5&HY7G<<^ph-kceKa`i+drNAPZ7>GU|=g`DJOG8dy^N7^l<-g4i&dDx|VOl z=l|hkZFFEf2KyY$?C%7)qrd%pYquQ0?=hHIHlU~jzQ$&C=gh7fPc~$%Ftyp1SDjai zjg1=|8Byh8W!30gUZy@-DOqn5`X{BB!;S{>3neocTGW`_>&=$xkN10PP%Jl)^&s>K zA8yM($NmrJ&Fkso`pU!?$d67|S{_R-L(dKR*u4{r>>b?rvD} zcD2nn_P_Apephy#6y&C+M$q7}^4K)^7w#&ubIif4k4yX4!}z<0D0QHM{J+uuEdRgX zi3h!q2e32$8#maG91it=ESjut$>CvqbI~NyhJJ zwZsg&U&AkK+fQl=w;-Qp@e#%*-pwEBrt%0Y3Y-RaPoeV`oO8-Kku2r91Py1Nqo5Cw zXHIZL=qcnn;@nthHfB8RgH7-~xN9zZblTgiPBdE-68o|5Ch{{xce6@+4HnxV_JecC za~lrPHM@Iw&3dlYQw0sE0ExKYQAW%CN7VM`3CKT=eK3YR)^1tD=H4a!26$IJ4T!0+ zcb-rs`mL}qp>e2Drrch#_v!j9O>2uemHrV86ElbZK9z%sgs8Vb%2)HexJ;wIkt1rC zvpzWG*o{5gYZXjXYr626t#EmzYC_iX2=$rE`9tI!s$=ZgnQP4;!Es`oHqhTh$=N7a z{(d($E7cSl(I@{dsmJ$KTx?bfh! zk`|4OET#HC=iE!ps#Pk#ve-rAEsxdm!0lVr|kl%g@m#1k`)daoqInZ zbaa@GUUO^AtMN9y(6mPlRLA@<;9A8*4r!d7R{KfLJ2`kTq*!hsx8D zTmdFWwC!^H`8lQ3%7xV`7IeREhw;cP*hC>xt5ml>GAbm%sMR1ZRO&+1Ik*bG=Eteo zAN_gF&K`c0K34=|_13ggxUlECx^MT>k0={z(^$zeI>{{EQV}5yy=xP_)XI4A!qgx> z9)v|2=4+$G`$C!-X8rjIo!VQ_d)kC_~Sj&jgd4T>5GTu_}7CROPn{y4<$JX8jRrt~@2~<1WnC zv#x#9!)nt~Y78=c+4D!OBbp+zcf|0^&-cV?2C4Gu$*cu>yH%~Ez|YPEHxCoKWcjoT znG1;zTwz!2vtByt280rwb!Oya$wAo~gebW;M+t{zsK=F}xV>j=UaM{29%0%`7q<)p zB^4iyk<8^P{GI(MKERcz2*A!9aaD81(p4Lq&rBbf%m^mu{}jh@b}lFwEKl`3RoB(w z#JiR71CS$%k?Ze^%|0?`r|>uJit}nXyZ2R}`!ij9QEe97;qujkif+9wHKe!t(Jmsb zKc@{Q8Xo@ov-L_zyy+rk(AnEJqsx-*R@lleRK=XOQcy&cnhgGZU49PcLgk0@GWl=A^Tnqf8Tjm@T;OXy9>#cY-^v8uXS*X0*jQNJ z^3hWpZ;qxL3;<~JMwtx-RvlEC#ghvaaM?^7U2tF!8tO@Q zX>3l=Ddpo#Vl^~{ZHG?j1Qo<2Ya2+lLgkgxR8KPYCCQ(gwmUF0deRL1;mj&+O&u#S zb+#r3Xz`Mde(a_fjO?Y{xPzoH2Ksw>@n>geKl){$yl4^^7Z*#K_k>On_4vrh+t;t3 z;Njs3i-^2?m!%*kCYE47^Hn8w+wY)Z!;@_CK4NUrYQdvmoWD1H--pf6CH?Ynywap+ zL3@j$wpRIrZ7OX|0rkcK3E%p3M?|iHw45%lb9;X}Ei^rA(Z2`J&}X7eR>kM)sA~kr zhx`@`aL+mJ#S|q`eQg`!FsErp>-?;ymby9!SWa8)aFk?x zGu{z}B%dK>N&Fo)RUNG9xPyJyTrC&wxSoY85 zn}l>-EPn~rHZ32LD<6tu()Ryg!t1LmP%5hA%l5U;+L%y2Os2K?u9btW={Ra83XKg3 z3};nimX62#W#-U1sZuLou_bf5QvFc*gz1eKYYKly$#dy`!W1}i-n9zfhXO7c!I3t2 zLgFhxXP~G)M#rA_l4%65#{uSZ6_L?B@fRe?-RFf^7A96prWsJ0O0kMQR!QrZq7Yc; z`DDcP7K+lQ`>};(;@A^()1tF#MMNqI93TmAPa~F(?+79{R+pg(y()w+W3xQ_kQRIQ zWCT~qRI8)>6(wh&fw-WqX=}wz`dmPt%)-~+6thZ?*Jfba-jU0bMj3N;RlQ#@Nt1B3 zMq2&;U=BLC-+)6cY&OoQ&1bUBl~a)SK7oMy%H@w}%(rRbGigI%??|!Wjb<6|?*2`u z$%W2UX4eVlh&OKzBI^_j>aDmCy< z>h(vszl=H^SD*0*xD=w)ra+sXQ0ceJO&uhWt~1tVxZ?30xd zqC^y2SHuhs6I;R~q>{JTkp8Hz6;)`wgOV4l!+bAa0^P+1w?9f*T^+yght+fn3xs%y znT;u-qCB#Aa*o$<>|Ep-swO3fZ`l503`lG9Psvru{R!N4LH&o9CX0+S~16li2xS+VZ6azRKdKE6`MIvHWIl-&rCH4r7} zn~swc2MQCuiCZkwro-+@d=V{-C~?a<)mkiE z5iPPgpp6kXtQm<+K2~R!R9RHyZ@$4RseI#Dk?JbmTa3 zH&!QE3e?{prA`nh?dFDFSXjtPT$XLk(BaNhAl(O)D6)vWt9XyJA=!B@hJa;JTC512 z%~>|s=w&|W2LsVTYH9>e>Rw%uJIm(_4YIBa@}0rY*r7jeM=nQu2}?&{thQv49CDvk z$I0mcm|LgdHt9eWBK}LdN`}h3?UE5P?aI95j`p==(XwBaa)p(Iay7K&E0H=E1>2t} z{dvw5eU;A8Y$g7S7js%{3C2PVJpGZXE1B^?&OlpHD!?*P?4DgJnp&(?=ah_b@YBK1 z@nrT#5<*1;%N~W%Krt6NC;h zriDIUJTS}0GYss!Zp8?n^luOcmiNkEbq%yAbn$fP0^dzcTf~^7CEC;CD4IxjVu0)9 zy_W_(JKSRQYZGZu(U=}%=E0%$n)CgNBELoqP1ZA=Dr+}JZhn;#j6bLs0*+N@-zly} z|I@wFw^j&j5YP<*4kGPaATL63`O9veX#7Mi`Z(F=od>m470;Z*W(553g2n6Sh_`S1 zdpTo$j!d$RKFWdF-VTVpmO!VvEaT?g2tS!sv|IuK`p&03d56pwtrtAGLF z6AEa5!ftFGXGHowor$av-?IlZ-&+aw`<8-PD~(M!Gq*Hk(n|yQ(GDO8q-=KF>!Z!9 zL(#UGuFl>0nN!!=Ptt0qcrd}S<_BFdPMuHMtHHr0v+yabO4*dp%OrX2ak)cP%ylC- zGxwS=se`&r6~ac>hMpaJS8oa{fzvuoc@Il!8hxDd*o@mx9$wInn43%|%B-nqcE&Xy z*osbClcfCF#_ypTN~|$_NrTl>l$LFV@C`o;B7^9nDT_KGFF{_1Ure4t(m`b-<=b7N zE~V|jF8-0v&bfz|rHhb=0*F1VY{uB$o~+PXCV5r0uK~&Pl=3nddv<)DQIUE1EKsgK zV`^{x`1v}6)@?$;T>{>p65B5}NL;4Z&zRi)8D?0+BdMUZtpL+l#8!OK-YHR#2YMA6 z8M1);J_xswX3Q1uuE@V?ayoXp`Hhh0TqJ9AGA`1SRAdo*7c0IGy9H{}u zslA@m$2?YEbo7Z)DUQ?G^80QHZE22`Z_A(;QU(mWkq@g*M>gb2srI42Hg@51kK;IV zaI$Er@N9Xb+1pT7hy0W=0Ag{^?@||R#DCu17@w|ojGyrIqYp6%0!in$8W*Uzy2p3u zDFp1eJ(oP@PQ*rJx-c~%3BcAA850{2wp?nhlD`12E!^V9!pY{y&=NnH1sXz#Cx>=m zlC>b@ieXb(tl#O5US~UQb8~TB&es-c8i0*+Iw%H!g;tYb|2}b~S>d3xn1C*hWsAjU z)ZtVgRa0>Hu#5!ukg2a-#(H(d%)a=t96(dEZBOw8G)LgJv@9(~3j zGX2dbNdT=&q2H$6NuNEP%VsSi(nDw@L)-YS)z2sAllx*e<6q^;!m<;)amw*Kf!OprJ|<{m=9fVC~Y|Phk26BRxE2-POsIezkOwz&(rsz00fa?vFh`6y_rX+T;|I46=_6# zLOTFU%I|$aI|v+z(_<>Jg{9OJg>wRbWX-2?+iaNZQZ+D*t$&+NVyd>>;!8bVp14EV zy&JTOy7|1Mz6b;Ux7?5=B<}Xw0mmh8e5k__^o$8$f6&rDRoN8dM5D;)MJ(o<*g9G+ z2QjtFbnLFjGOfT!@u~A3g zlp8d}zmer=X4p&0J&u{3%67~V(wZr-1DkJ&sIC8IIKXZ}i2^?d0H|)bqG7n4Y)$D~ z4nZhMqmTOac6fDrIUCRviH*g)1!}#a#+|zK&H&V`*f(hMBe3f7m>*A{6{nF>LTzRP z?RuRpr^QP?hLKwo?T!ft8T!k@SySJ2J-WbLPsp4}&lMT(qSuw^e9!wKI4AwoC|Y#j zce0tAT#x4AVJsPe;{fxL2SL6)_Kh;~B=2 z@+e)fFe}pCji{QV=Bq`CbJ?y1+>kDskz^^^{E&!i-CZDk#5evSWiq8=6t`d&+z0vK zLZ=heDdBKqlv=eKrEeFq?-FH3B+1G7UF6)0lxl5^vJeX1<2iz`_=Tmp@r%YrlhSR1 ziKg-vZzOTI={1O*y1S{$(&?6hZoZ+6aku|&EF1-iTEAnG3{8Nu?l^1Uql>43I&`9~ zd5fY&9W7oqm71BX@Q8g-{5z&F9d6Zxua9MKeIFM+=wh;1BKtt(X3h3RUqm&Q0#D<% z%6Xzc00m7KJed=Nut{@neoL^X7y;~}E;L#2w}xk^pYl2s<*OVUvnf~< zd_-t=XQHs5W*&@}p7_#3MpfO1*dl&80$LrKy$Ms+XnDnPZ!1Q*xtbw~#lRP)cU%@{ zzH`g;NyW$38hRgX(uqz<8cUa?Yo>+rvG?GngHJ8*j2h~C26`h2-f=*pgAyxXhUqe1 zP>gvM$`%W1$xPBqj3~Nu@x9;I*|PaGlvd-19s5u>{6>x?8k=u zQX?!zjTO#|6#r#{`%Z1BltDAXb{DknAg=h@N;-(XTfj9kjR@0t$@aG=e@z3zJrF73);^Q-x)Q_GS$ zJWQwF$RPzLhTjk{g>J1ytNWVYE_?e|um`#Q=8M+nbS3jUZA=_zi&V|s!qE)RCpL<- z%0GXPLn+;fC56?tIXQEBd<^3p*sW8lyEE!^svUPc%by5_0}>Q8f4MF+uKnJ7AW~NG zkX|?aP{|)JW-BcbiFexqW!p5q5^5{TYTj#CS?+vuZ+*_~QPqN%LmY8!!h6j5h^M3e zVM*8|hFy+(NmOc~%{@M=Kjvg`@eKO0wpn7eWlzgkK3ZT%6}xZak7Q$I`Z%B4Ka);p z;NVF?b4F!(a>=hjiT^3hooq;P`Kg0B^eXy(>AijbIgR%dhz3or^=7j$23l)^wsDVX z!ma8m`n{nP{5vYLd}WDbk06)8><*8^&&8stiP*X^c+1O7B7m)l$08M*=8Ka}KM>u1 zhss_Hu5vI@OXRRa4B<^mCuk0S!0qk7`_di^xu4wCpN_CS_i=i1oyOh@+&VKZ`=C*4+CY18=WU8 z$QblhGM%Ljb3IBlbgl6@hBEk_#Kt}npdDN*!Mfj#4!)3?rm++D5sQvn!o#JB={g9y znV_CX@LJuUD~x8A0|t=^N2LgxEWCpyfth}MbqLotbs;R<ZRIZ~RYNB5A8? z{Vt(wQL$iZ%h(>L zJbJJul)#Mzx%V4aSE_Yi0D&^OZ?*sPy3 z0J2_GMzY2LSUd(G`&JZCv0z|AsgNUS2cI@Sq2_IeBnYI7#=WtPtKMt3yF6EFIV4ih zYuwZ;P9kzkeZz}W?RMt}&(T+$t`X6*+pqXi_2o<+<6J$RMY=VdWzYKycY}jq(7{?Z zydsRpu8*VM`7OS|pO6l?YHBbSq(MZ7%lQ=4>R~6<)VPkYJ=gGBh7WxKr*{wuYYyDuC>5Kh$- zK@iBr(1VgTimESU^`W;7J?nHSEyrn(H*mrePA`p5V%PT)H?8+FO-OvI_dEVMm@u%O zxg$W&a_M)zp9W$FE*S>;<8HwT%7dzGmySj{aNsxzFLiqot|VjdlCU zW;|1DqoKR$&bvMtJU?Fo5k{{(Q<|yuwua)_-wGbkV9NDo4}i0iYiD)1Ih~s86w9|5 zktP;+9R611Dj+%L@Og83h0R_cr+q28slngzNfkDc4b|#jm*2k7 zYUDA4&3S6Xbr&1Wa9YFSAhzL2Csn;wU~FEs`ILo~*MK<;`P+`)vCl~|Ssn!rx779j z@~Bk~gW!AXUuw=`sQun;LIL457-|5Sn5+@;xAx+G-Mf$Z<1%N3OC4>y9M@Uc z#B32}4E07Ml$;=lA2mD>I$%bv3@g1EVJ6%Y)shDuLxmWso zXo9UGNP}Cwj^);!4aUSyzslI8?@J6WB7E3@#bf4ktr_`ex3E#1>jN?UEPGoE1$mO& z3JQt^iH^kPy(g)KzFR)B`kc_g%8ewS>T8CZV^2>`Mczn;G-5Y;KPn`zv?J3oL z&~LtXE&~1HqA5Kho#c|jAz6!g(rwh%@TyJm*}6B`!d_Ote+@e}6Uv)?(Z{NL?2zMpCkUi360}&!>$ha*~Bv3ZyPca@HnQ#D~RR21lAdJWAiYqLRx^gpNYNrb| zo^s$9_xE&xb6XqL2mO_wS%{j&+#w$S@3miFB;{RfuZ)bvXP3S;R*WM@H!i%jCsdtf z=Lcy1x~)D0XjHwr?z~HJTe5Az&sF*I1N~iZ@a|x1wtd?w^fK;+eu?VOP--Y2bzpj3 zCpwG>h;+XbhzTUE>~H~jFFwM?k}ju?UXDVHl!G3K3#!Sp<&2>5p#1aqbmgM2(J-0@ zx~+JpyB^|Dj$*hY310Wfu)}VJH?v3p&?7KgRzdHaSP=*ng@ABhZlU1~+gjIUary#=x{uO}3q+JxPupEnj($@RnXJLf7pB)s-g=kH z;;KF&&#BFm5}K#U`1GT}pFFrH0tNJRl7`rhK}GMHh0N2Ocf_-(l!fB5yh#d$jm zM7;(`EP`Fre#2Th0K?a&98k$3D0dMLVHe>94-0;qoXmoRG9+Xc9;d&+*qM>|y4)0% zAepfe4V*fs{~W7V--TMr%BJKOosz}a9Isc_n>4i}cN6aeAo_uHyi_@^q+cv@#uNF& z_NZpOcgHWq!SOFOHm!p@9`~6}B!@2x%TXvG@;aPj!_N=BV&K@U`v3{2YlOJw_fEL` z41U_>5 z3V7}3^o0IhALW_wo$KPqW3wj9&m?7!mbW%e!nZmjm1(#Vs+QrqUt?Xreiy9~Z}{O! zw_ISoALEctQpp&e!N2q0US->#!efiWqmT&}C&n`n{I^yd{aXsxY6pMeC$401;kkSl z6nuxqM0SVN%h_hFg+bc{+GEy%EzyTMam(|#j^jpEMpo`mkJF!IMQQV<~;Zjq}Du2Tr4=tfzZ~x|e z>*<&k^a;%#AP|}$egh^6vR_J*9i1@Wp#Io=jaPXH&ztI-K5mNrP|W{ z75XkaS>MkV_pXS5%zFHq05zTWmOjl%^lz7M60RIU0H)5QR}zbZa)-iS!L7byHT_0U zj4bw~Nab+`xqFEI7fQE{5D4>@!Y=|wKaoXIcb<2h3UB3>HvQ~rdgZcba1m34k>^$i z#~pSqjirpRl)}|ii-5=xRmT01FEd>6~{~(3E8rK`MCe`B-=y7x6G;|o-Z?bZxgWM)^^jO z2ftn3$zo7&< zM;6PAEDXk0D=q6aTheq7A~{(vF!V=Z%wN zAGF}oKh*J1cc{x3i~RWjx%yQMsprXJKfcV^GVUa$u^dw5w_Z()C7pK>(86j*M{8v{ zo{1?d#^H9DbBjS{{Kex6YbljCOr)z;l`m07P3V7J^o1Jz}Lp_E+aPa>qr*!ao59lz&L$qwZ zcquJdXOgPX^*?igJ}$s`Np2mjjvU$JgyrxIkK?zx>Fj`#!t!VbXuP5v6@|n3Nyofy zfQzDL329lp+|&XC6|Gs5V9Nhzi@7F3e9IDavN+rxb~NhB$!_y@-T(Val_I;ZXXE{v z`01U`qnYQ{JH|cCspW>0=Qb}3GgtE7Y1w@$@qx~cw)6V6*tBQvV>V8=iz{odY@zsy z+}y+G%FIgR?5G4C8(7tQfY{f!9HMnHB_Z(8loQ3LEy zYuqH=u`NxSl?h5S#pzjSEjpc%KKz#>_6|5Xdz5K1PfJd?(E%>lAdxq5r@fB?OG-Z( zN))ft<2IuZ5#5AiWep+Qt)Bd(h)baS@Nuzbe;&ac8WPEdFBWjx)RI zLX2z??|g?c*?`%0f(9lswEc@mA-!@i!j;>BWQCQO{8b0V09G!9$NDz9B5J*UN@bnh@7A@(=y|^GjTp2VME%p!geBrB z?SHq%Al3yD@lK{H2$ip>%PgCc{2*i6zq=x9ph9SY(1=)B_HJRn(AOzy=Vf!O&ZPRR zt|hPbX`U91bDh^nq%F~HnF=i`mf@>y3>O|jO zzw>UnSZx7Bje~A$le2Q2j?=wXZUv=RS6s`Qcxtdf&h`BFYBl(tv;8~$yy8V+A37yQ z@{NioV#y`fK1rRMwcqAdZxM&rg%vT_SAA?l@78!G&nPD6)ahr$yk;1iM(R^ z2Gp7k_B~=I51jfO(bHIev=qvby)=FB*c!0l%jz@_CHQtJ>fZ{tIA8cqD!rGWqu0|b zi8^+BYWXyO)I!c7T`w=lt9jLsl3Ta zX*l<4>!iar`CK|fqN#gYTa%1wGdpFPD*)zSZrS$#`5mg1&u#+1pv4}qTRomA>1U!l z0{g0oW=0B-4?JsM8Ap_(yr_5P*|C{a+V7ld_A%GHRH7Bo_5o00 zQycd@7q6aD-8rhz0Sp$HrKwT*!wQw7!W7=~sSZTVEM2pwfX#L|;eRH$yPSHmKT|ILK)8-i;^`_iKOYlA}aWjAaPU=QAklS>BqO`@lw@`@3gER$TTn;)255 z&@^b=Vwx2CBF1SBaJbpddTItuu%-T5(dCXDv;)`Gc>FE?TNERj9WCFK1`R~0eBoJetpDO_^DtQ z$r5N=hZ`HtY!&E8+0|SLH%{3T>WI$}va!)G1@NaeU7L-h5JD}YeXsTf$Tqz6*pElx zQcPTN%yd9gx38vrbSIFl{x>n?eqTo|+Dix#q4$Jx85YlD=c+Su8kmbEHsvl{IpY{u zT&kaM0){pk_x~}~qh5AaN4jJ-u{TBDuNfQyH5-!Hnfa}PeV zX~87D#v2}zluphOFD9iGV7)hYO~04pG+2S~7HV}%U}SL3?+|-j6BXE(T}%J|(rID# z3sIXbi)8CpQH@iPe6e0nZklbCP~ZxQIGi_;x}i$Gmg8#aVH{ z>!FbJ{Qsg(_rPbTfftA$3OH_q&jZ#_N4AJ4OeS%T%;t1?i+sAsC^RNo(e%j=5>TpR zQ1B^b4s{MErQ=8m+CkL#0K`tnjVd~MdGnoVr+p;tKy-B7kfOlWU3G=yzBi#QUJmQK z(&gLa3HEHOlRY5F2~SbohA*RgUZ~!I9ZWKAJ2PXiOey#cKqX;5vm$eRJMuw%G_kj1 zzD5ePpW0)u9{8eYL?^+GcGlag4+E!GV2A8TK8VQ3i)>{b%PhrO^BswOJ$r~V8<{Cl z)&^hnT-#B3_cO3+gU*TISwrA_PHI8b8tV=LIz~0?o_hNjnyK6nV+mWtX>|G>N{61j z?Oq}a<^Ee+F}Q=E`Kj}^VhwNU4B1f{7H24(+IG6*Pgf`1Ap z1^iBF{rup{LI!U&LS*;J{x>%iHZUFD-rm`kEUS3*^k|vFFWbeBko06voAO&sfc# zukr6D5|wGy&kq_o^|7o1lb%dSXGo>+kR-WH=ac~ttIzMqFu#v@=T+UP?^r{w6gcsn z3x6c-4=s9*F1AW$vA2dVR2B5Af_mqa&_NDh6EE>bVY3RIR9|@4d zeON-KqebggD9Q%t&{@{|f=%@;J>Ee;y0HNrBo@k3S*L{ol(GCOr#e(;3VUJHJeqxPOh>vb9piR?NE)AWDtf zPHxQVYsrAI&>H{U%GJ<(Y|Y5}S##T598v*iV&1u9+lkZFvVd z>wf+lyfUtj)J`pd?J}nvEYjk;iARZ%}#st^GKP@(w|;AzYC%=7kHzyEp%RoT=mM+l4H(7}4oV$ja! z*Z3_V0RjDCJTVgO^$8&UmQxLZZiDBfb8{laflyymXYPJ!e2tf-PIk?P>`b5rCpv8v z^41s)uX5#4+2BVt0gJR@Dw#d7176bmEgVd;g~W`om!7rP$fOR}Z-@L}^>8ea65ROi zxZz@v|JU9@HSM#^-O;U1mrZuU=-lr1%@DA5u z)=YD{p-f9lKHhvntIaFAUFZD)d-<97TRG%HO?kBJE%ldJ(oY4coU`|$#njVoZfYLJ z6JjHeY&h>pRKa^a?xBAtq1T_GO`5kI$BT_&t(I}- zG!+4wEYUu>KxpEWG?sOO{N{^iDJ8#K=Nw>PWnK%hhAqcQ{qeJVFHA^QP zm1~7Ngfq=#3#u!5?_8x8RaC4OXx~H&dvj6OVs8uSzS}sSG42jn)rwi({`e&mmoy{{ zx{mZ7jB6a4aHkgS>Fsb4Pli0)}R|WQq4o`>8d4VC6-tdHo)>~jJu6ZL7*-3+KVMKsH zS>&e_x8JtO1btQnbeM(@WKj+e1sceUEE#WX*6{PCTSi2xQD!XWE2r#?67(=cLjH^% zAGN1uV{mK%F3Rx{O(`zJ)H-6K%|-2RR2l$N+w)q;4STQ7cs=$)7^ zZ9gA_4nBRuZMp9;d4F-KKpZ$KV@tX&SSb}R)V8>lp=fb8E%^|Ei!hYS=@aEQWQR#X z62z-YIc4M@rPu!)=F|j8?4d2Q7f6c%c_Z_4FnU};jo~NXzYrsYs2`v!0vYe>u()p& zHd7Bp0h_hYEj12r3sF)%3xXdEA&ObwOqvt+FZtv`A&lXfCwtq9U`tsiXA1a~s zfckN35?S>8r1mo5@;*J1N51ZA)T$Q>a&Q1KfdqqT`&d2%3^;G`K5ZSj{IeRLbO8`^8jPVY7R#&#yn>vC=vimY@oxGkzT-rL2L?mJSbGcD%uCE%} z0ahRmx*@To!J>y!%(MLi+yKbR8-nhL|>xLP)MI~PK zER-Ahl)Cq*^(FX*`rm#-!bW&U1fiFXlkAcy9%84>3&;z<*H`e#&FL1e5RaL!8|2lw zI*4k;mlW2H@h;{Y6e*0?nJX+xn3J@<=7&nRj`$cI27mkBdUWSiC}i_;KI=rQcI7fr zw?IRwvg%8s9oQx9`%^txPGLjE@utFda7Jby3I08Ep?V0O_Xk+E%LH26XwO9V1URS2 z;MsVmj;qv9O@jw?uL4sNINbX_quEzfnS7GBjksye8^7Agvah@20W9jnNUR8ag76-c zmg{;JXx1@Rkl`NQq50GpLkddtYhOr282O9cqOmbo_adaq1LO=YuK!o^c99e&1aYT` z-x{8`VH{vl2v)nzetCV8J={+ADaeP?x28r~?5gmO8}>>Y>U~MVv6|6W3XMd;mf&J} zw0$1H&uAYX!Ccg)X`j!;Y6eh}Vyvshnm~%VIV3DNp-Mh}T9DR4uJy6ib>=Xxqtzw*9M(-4uFngVK=WW8?(YoZPYivPyD>y!WknMHf4Zq)lnj)^$_$EIUb$$ z_@QJ+x7ZIoRBAOv2l9=Fdgdu9de2k`D_lIUad=C1NNvW11{SkgBptU)#B(aQt3HCd zQg$>B4M7+zx@pxm)A)yMEsAy)?^;j*Zw-$vWO^qux-`%Z(&>Ag;%d(yYaCb1?Nw`Xwh&&BlB zeFKyPSbJ7gK$p?=e|xOEk{-5uR_>SE^t-n%lB+I;JpU|cRi|WD)V%yV6F7$G1^;lh zA#=xFN!a0Gd-#coYI&|vL=?jWJM1L~U@lHN7*V)rf41G|3FgxmHl;?Be%hLdmG;jX z@zh58?J@ivX|2-YgA3M02( z#8VnR0^4Y|bky%z3;LJ6qMI0kwc`F~X~~oAi)d)UTFG58aRSAckVQCNJ#}LU%DWNx z!HA6~$~LfvPDE1g2f!5%s$XTW5Pr9?REA=#DdLuUG&JU$EEdY&eh>3|egRO0xjhZ`^ zk=-VbCSBI5j~`wIo%oFuB7?MJ(Dj>!bmuL7#Ry9tbdVA_`QL=6WY-^+W43)4+E+_k zimsC6GX3Iur|H8{?>zM!DZe{?{?M(9Q~PU!zVSe01ByKML|%{d4XG66Wke*I$Zmbch)F{^jx z2b0I`RV%gs$~Eh$n5cbu~>-9Zj zaoysh<8&@4>0aKUWmdZkVWvK{h8E=XEV9RFpxdt|76@%;fAjuz9KASB=q}x+EA}70K$czX5$~XgHE$g`a%0J5h_p#}H0b-9db#MXkul7Us75!Z zu{e&bT^Rl;TejdniA`hP)N)Wm=o1~pZ}IDp>Of^g1i?MuTpz^phFs<2Ab_~a%B_<% z`vR4(-#g#bK%S|En&1{%H6?D{-SBt0hk8@S09jbFGQ@rS&K+aYl7YRPJv=gs+qe^c zpQ*v-Jez|u*xzjIBx?}kjU@OgVklbjU0^>p0z)uRiKhatQLu%X)Jw1A#v32s+$}@u zX6%g!R+vh&wxhviEANyb28ItNP7td+>AuA8kig}Mv@OGYH< zX|?lGN9i5UDD*D7c~s2z+^4cEmO~NsGBoPa^3kI8}Az8iqwVTD};a zA>@k!eh3;aFT_|lDjbs+afMCj?KYAR>|&sj5)s@Gi1e#puEx3c4&e733SHw$RUh}e-O9$(9foO!RuA@tBPz4%KgorV4yDG zoI%-`K)!=YX7XCAysGP)rR*BAu*JIcIzl)ah9)4*F+UO8hEU!>I2HvCF9(g$@829! z>7ve2Lu~@ngY1?%x3?K}+8K#D&_}L~l?jX4cGCksH@c)olV0|@sItTH0cA_g$gx;J z_cf1Pajfm}9SbHDHq+}~q$V*Slg7LWc^31ZKc(A`$><9LO9X&VHPVSc<|A|OZYYOW zb_Sct^_eL}0I)Zh+)Hig!j_nm-m%DHLl^B}8mTzj>`!)MLPetwdg2HT$@%@srBW*_ z=21-BlW&>Nc5(MC2QnfH7Au0aK|7L9k$k*waPsQ{h@V@>`9!HUI&I^#b>Zq0+&3d4l5ja(LabzOQG3sJO!2Z_kU0U z1g6kE3)E_W?Qglx+t$r1OCj~H3*aqzjGB!x=&*7wS4J-57`}DpNX)_abYU;_tfr+u zu38cIJe-bRR2KcVKyIYMSgdDa%g+S&PwS#{VuyGX5K)SkvcLqZ1J;8&mwo|Y+1PF- zM-DnUHNCQE;df9IUM5Bqb``+yiBcvi}{b!gVDWJkmYzh zQSN(N13X0j*!{W1%H%=+ObOjSk1qv^Oq zo4#8}OqKTJ!NuZx9;u5v1WfZ~Bu51(Z6a-~Ms&k(MLq3pWaj-*{$2#JI$!IwgtCG> zcIH-pG!>5tnNca5-&sE;v7tD5!e(we-@-f)Dn!7`7DmYr*t(u4kY9C5hV!D96q0P?D;{5#w*m5qhLwK=bXtr zuWW<94CVL7UWWYV9fNzX3Au_=TMUrSNbH=bfWEEmRjsw3;(PEQgC{F!$vlmZQ7`4T zNCXeiCh3)jPAcEDN4-qulJdGk_Z{l=xq?~C8U_*Oe}s!%YWlh)rAuju}T`m zaQeO)SXo&5ZaNsVwTF_wp79Phk>OasKBY8Z)5YAG@qE4?R2xXxt0uQaoK)tQ)|&s+ zUpRaRU54kqu%~;&DSDM2TiRPuD_$0(asuVJ{3@&G$uMNr*L%<@Y@LmSLZ=|6WTMWj zQV{m>Y<~0;Ys-Bh4=jRt{nGVBubr`GWIqkAR+QfxNWycTXz{f$$^>Q545r;WSqoiV zh!um*vQ-tm`YTsy*M;mMl=q3Ak4?M>lHb1UsJG~8Ety0-64c2ncRrlqAL zzuhWZc+nzwh|7Y@Pl=C|scG51&&p+3@;c(ibaKI`J1lxRgWMKYddY-NLVD5a3& zIQ>5D!L!-`SjstPZa$^;_qL>C5&>@MnL#cMnkbbqD1X-Y0QCau8a@94c1I0CI=?xs zREp*0E|2B(moOasMt(bh$Vov2Jc9lzQ`~k}#pY{sE+&C*E{mf#yr-~S!a7<-`4=w2 zcHyakI2>C@n*?F-s6S=)W*6xjI?`^F3oN(sdaRH>z-KMbh$y~kjV&@lt|~KR^{iR5 z-kn-qek*yJaf|p>;G2(RQf0eN$H=DQd~J~}CZS}jd%Myfn;)E0H-qUCF4(-%fpALp zfhvWg46gx{$G+n)&j<0FKn!~c7g6X*brav|>`Rvd&X-rz zpk+OC+oP`?Z8YM+KfhMN|9c7yRomEzsAxdh-L*-NeBk1(>zSJ(5?s%O-|Ox(9IjG} zU|<{@1^oS6$pSwcomZ0w+7BfC@FPg$&6-?n`tDl{MUTTbPjQ3Lr0>QT5A(w-TOhG& zAiRT36Affi;|QTf<>zjz*dwt|8mKHL1EhzQ*7<+6nUG=-1Rbc?(2I8T*NT=vnw&pd zH#Q$ydL*h5epnrKsipZ1{kFAdI5b+wZ{Xc%!qwrqspbE#+dn^CA1~D;#q@nX?XvtXW&MeH_i(Q-{I~`O3S=|m6~WaoJZr&B@10{w??8^#uGmZ-zFwEk2q)PgkbmXr6Yw98VjNX5U;&Tpd04;3miz*2aKG~Goob1&N#7F*sJ8#Lg# z6<=Jc0T&8IzOLG&_LTU33?cn5sa$|J*pbtq!BJ)zn<~BDSqwbCU+0{Jf+yrF8AAvb zQHjVKJxb>*=Tr$c>AQL};(p1d*aHXqE%PlkIceqOrm`OhI%CTPME9GOB-5qJ>w@EO zMEbPLaA!qYQ0^BAeGcl@htl1`Ubc~oOubfqF(B2?QpmAnEP@{G9I5F9woWU-7E7-| zepk5PtZw6v1zLWm{B7&GSIXmCNEcI*o2-4rT~eJNWE(?o1M7nBj_@c6cp&N=MQkFe z(q$EFP`5ca!b51=A3^CQv<ShHE zutVm{8C%njd@iLbgl%6IpHN$owUm|hJ7yuYf1^eFSTnr>nxOoiu+jB@-aQ`o3aaHi zyimC)*;=@VjLK5G>p=IL7zBe#F-{}1uV7| zOlu(t9QXo>$KL2iQglM@y#%+g$K;}Ltv@A$eR=s<{S8Eo_Uj?tqd4xr8KRQq{W-?w z_O47sUdyx!^>A~rV|3r6H$pPkwAA zULun@h&1A;=O!n)vRM&QUj3{<3DsRIb@Epk7ApwXr)b5IA*J_>-2v=cVP3_BLoP?E z#&&HRASK9Qoa*;*qVpG{xK=puunO!BD=OAl+D!c~<;_lIPU9?McpvULM$|3K57IjkCIPpr zI9GQEOpH~=6UWwJ``NBcv?6k7_AZnj69t01gr`FH^cc&XNt7Y$Q7?HU4x=C>s9~ zm3XcJf17NFW?yKe=+`fuX>aLahiyRe6sa7|G!&4F+k3K)P!;ovs5kWdmytT!e|MIm z*(szGn_rcVu#NN1gQU?XrEKJr$H!s|Z5GdzvC=T?SU#ojE8_+pJ<=q*DP2`~QIR%H zyr((b}G@Jsq5Pk27vRTOr7vc4~2cm~FIJ6Rs3=-bb{OCmk`%*OvW+Fq~<4 z$eHYP;0$vCg}bTKpLgm&$qNPxm4bExO|K_MNcQMRKzvVcD>GW?OHYL?0y=9=W}A}z z;e4wOJ_91|Uk>q9T^jm$O|NnTydAySto5UJ>+zhHYiIEpV{*rGwzL)(=#aP`x={sTG^souRDJvcfEjW4FiS<}Wrd3p*szjh~a z+Kf!Y-R@Le`On*k%CUxzdvNNEG3Zk_1Vvlz=yunE1*T=uZ|V}W+i3PN&Be#zuV1B) zG(KLHk(v;-+?Q4=Mu(=l>S2R8{X5+Bj2HaPYZPTgdf}mr51hbune{jYA5G-uAFc%q5fEoy##FCbXFZ;FVBV_@q`^Y2Gb-d*3;38M+MKP4<$&`PzJ z3HXbmbGjz=j72e3>$^B%YOfwaYMo(o|Kos_b#yrjBClcNhjD@NnfKL>5)Oto+t8@) zv(B&fq}1FjrXE(fF5+|Q6U!MqvXvSCJmq#DqNk21YmaNLyx^#)jj0lq*z_A|c;9cD zGEEOBI!{@w9Ra@`ohHUkjL_{6-RUa3$Wu3J`p6PLRJD|+HBt!Ez$^awF|uG=-_3Po z^m9&5EySpgVB@{^eK|maKUJ!P=Dbamy^!+06r8d%uygj8#az)BtbGlG7Hq5d-qy38 zAP3}q)l=1UwvF#A*eb?|=9xL`&v>O(FR7{}eWfo>^{LA0@7 z2+vv5vUJq-U!KYz@XSj^nNL`Ih$yrjIZdq#$PY@FD>GMjcT)Eh?7^M}YNk@jGBE8A z7wYG2D~-UBB69*-Rqbcy^AV?f+A75?pny(=WB$pglcX`WwSBcFwkNsTo}9Wic7G00 z)Rx+Ht~)V{Q(0$RX;tJ^ikHSiA>tkKdP!E)Q|V87G9O#GqYQ$ zSOhrbi3Lb=;a<*dQWx$U`+vB5>%TUitqb&2fzslxCAeF0Dt&iJFT!tmkEuH6$$rd*RGo2rXcgQ-7fsraHfli(~xlZ7NNdXP5a986~koH49Hnhcu&lp9VvEW^L!(3QY5G}tlr!u@ zVykt*DIKd_%bG#-sZy0>Qkmvl5kpCXAzy|Hs!CbCW_a&WrRaWYM?!in`{d#}FSCRK z-@eFU8Mfa6RV-TjvSpabSgy}E8quCRm{2LA88EqPbLk)bSgPlOsxXJOK8@eof4Y6m zKRtTADf+(Sp#3BR0gAooK8oO_GHQPrg4U+;@sai7Jep4L#{9D`^DKrWFa%Obw)T+y z_Qbh!YBY$oPoVN$6eEMSw^Lw7i)RQINN(K{#8NEq0-f0O%G>+gsj_Ejn8Y>Z`K7Rb#EZ&X&R_=Yx1;0=l1R5@kT|_go99dEGL%gGsm$u`E zJZHLOOpwwlYH_W%>J5#3?7%H0+oK01oZUa}oSu4_*`?MGnu=mA$6W;_jwpo&w4opJ5m$i~-gAhj2fswiq+l2FXZZ00C$2+- zJ}3RAs2|1AkuFozjqx_cuQwu(SZF&-(I$c?FFSZKM(JSj!#4|UQ}kH&G5rX1?PL!| z`b17j?fg6r?YaxrvzwQE6%`S*kH+e)fdci~uNEq}zxSZtvQPrY$AFHFsfWWuy$( z8n=74;=M4z!DHC<*c<%NPpo;qj;Q&5y+K0k5j0h*qh4dKaQqc}T>DtwV z-`)b*joZ?P*px8qzKYLCSC+Ll1%FLW{daIpHi`244i*Q(9IP2OS$XS1`2`7CDRRkYkG6IstE*MPVGQxfBw#O{pGCY#Au{V^W0cn?%Sz#3&?(H7auTkC zM;mf-dHGut-I{g#UkjgVKoM9pY@oDVYycNiRQO+=DS`g(prHxPGySAT-oc_6?KCv{ zQUEpQz>F>^Crg0h@Rwm)wI9oi!YtD#A?2=##Pu;E1aomQv>-n&Ia{f@(k#Rpz$T4b z`Kh#k1wOT=Gthx2z^53@{E46WSp$B8P<1IGYkB?(LAH`sx}G1421)~z9+!djIv^NJ zK2{i)9ifeomxIs&01AJl-#R-(V6{p6`T5K@OjhZ8!fWYW^{7;wi;t?9)(*MZMha_f zMEn@RL4)V#<-Tz?zGzyWU!n?0j+?@3_YuNsgT*W*IGcpKg{&6EI7540gKDQX-YPS( zYS?3VOHUmC+}ZyJvEeQ2v)GI@{ffSJ)P{!M5tq4u7W~?3b)Om%ScLs;K%ffTG$dX4 zS=3;JdB~Y|xEq~wAKz=10uH|vOk0J^VTle7inSC!k^h?;aU(D$;_E1YeU1?R-FIBK zE}hSIrrHBZM)W8g#C$Hmz4SY}DAUiyM$}kM?W_aRVF(ggP0$7UDZCu-G-_-SHuXia zlvhE5F`gwbbuAoZIy=|GX9tK_ZAB;y#7-}es_YPt+N!?6uIHHYwrr&o&gYjsiz67s zX!@CA4?s~QpR}JbHZI56&c1V8OqKTN--HJd~GJRa4yq7F-u_(D`g( z8~eS5bE*B)$6Ieq=e^Lpv!m)3;w9L-mS8SIYwu=A)#w1FvZJxzi+i9jAm%&Yv=)(0 z#Jz6By-=g?`Y$%!882#)-*8fGG)#_+xfOC!MTJjn0)&z!b9QXOKYwNbWzjGt)H3(i zzDD<_#4o+W6gkLR0N(gXH?r4nX*c@p0vJ3xa|2pWUGQ(}x#9N_xZ1-MT%K>bCKfdl zyD0@!(MIc)8hyRjX$KDucR6}mYfj{{obcT3e!-OG4-7?t0ZH_0V55*Pm#4qsi&d=( z$pCErdL5C*71QIdB^fO+JJ{wr=gK}S)L)R-ibaH&!?a;nnka^BFrv(d;v9@K6HWX{ zR~>{ID9)Nt+v9`)*a@}R)9NR)o6T19mFoGDs&9YpGV^n85F99HjWIyRFwn9qp^v{W zbyISl`txT0H@X35smXlQ^u_TtX%=It$(ju9=)J_{=!C|bwG2EXmQIEW(rGB#9@IMb?I=Q~z!*c5eruTYwDaIt8R^;Ys z+9$cTrKF_9_WNbtUioDVtv+QTH{@?G?(W+TLci;q_W_xnI4vj7Sy)(#C#zx528A|d zutw8hu9vAOc8%4l=+;Q;Xp}BLo6!-_+ySfVTUe#>>ASX;N9Cm(m_VCViN|48_vzo~ zmKWZsoZ?=|4S}fxiHf6{7+7j!-dtF=nHX>78QNGfYIkr9rdx2cU(7$hcxNzPd>+XmR zzZhvMk=9#&wCM_lP>6adJg8d#Y&|nB8k6SXeUy{5CclaH?$PZ!Vd2V zE@aq7pGxyB0xuWS`H0k!>Vw`@5yla{T&0p$_R|3eWKyEF?+-L^wgXeNjaR3%m!a}0 zO~ZAkwBV$P!eYH;Bb;DgNT4h2DZR-dIotb@CapL6nAbRR48Y1;ED1PH5B7O~`iAQpD z_%)-jg9TsKMU88z&@d^L_17?nhFb~Z9UiZ&OpjNXrI7_@STsyT<>L2nbD`>(P9)sF zj55X6zdNeD#Mot~>*>XzCjIy|g)v6y8?cA*MC0i#Ht|UVa(^_mC!tGuE%e;iOy4wg|ViAXLN-I{!Wx;L4zanCMCKT*%4B@y!PDWerry8Pgt%6(PsUhh}UXd`#F)_zq-TS zOr<$?$B(?I4ZE*nmo{rsjJGz4Th4AV*GcM+-lE-)x=eeJP)8dLW`381T1v;0H7AEq zW1Bq&FH)dKbUXL9yuI7O7CnPMWuZMTMHhDH_Af}mO5@j`n?bef%07g&zLm9W?ilJ9 z?;Yq43~*JA-TSoc3D@uZ>?%z5ao|2`R7bEs@1}UV;baYcD4Lw!%}w zL+Jn%^*m1%%e=lPPBO#y-)5G)l8AHszIt}#4F2(#gKiS4XrxLi{iF;lL~a>Qg~D^Z zV^YL#GPN0p%~x6$)5P2f>sMcG5a{`01&{)vj-!U`h@lkDZ8$X=kK>YGd_rXZK+{JX zvW<FifkYZK%AQj_sBz0p^5s5TWn)ha(!p3wx{>#;+^<|+t5pXPM z+aiIO{9|PUIis>KzOIU#WZkWcU3e{JO!hY~`ptwCeK|vE1|jBOjZLpsh~s3GyxH9~ zrBkcBoHSilsR=&iRxmPtcL9Oq^66MZQ^P+$&!jwg3w|%$lDL=46ht9*f*nhrUzK=} z`Z35bE0L~c6+cVX!}{I3k)%XoI-K1NDIE|=6$TjEodn8x2jDT9(pUee=T~~`cMe~k z*T?WA(53e#FbCokK$n+Ygt^1;`|R0J6zPFi=xiRH;lq%Du*-X3gM}7B%Ns|1bDQ0AapmHp5qUaq;(tG zyT0`$W6KCSwNJ|UB)C!rzq0>T3#l)7TfHWAD!M6U>d&0^N{;ST^SaXlmB^S%tC`Dy z;#dI(?aSk@B(0y~`v)TEx#y@QJf|cI4Njvt0S%=wTj`%7@b8_34!_!Jympq}B!Du; z`z6TD9|go2^%VU6fM@DiX?qXsYZniBh|`5(KRD~hB6*^}~_i`^X> zoSbM^yim3>urK`Mxa)Cy=)yR9^)GVSn9n!2v=o_5k8PH35OQyXM@}uI(ylwZTTc)}Z*{!B(vI^b5*4V% z*@cZD+!ZpaGVnQ!u3x`g2{aWcQLyN9{+YpJ~2pD+<(zWqt_RTIPe5K4I z;d2%qixK_gRPXat(6ZKUBzHdaK-zJSb2quq{QHnZ9IbHTFfI0a<1XoMFa+eu?^y?` z(5VVq^7r92-@)N`mSUfLm1ML_Wh-a z#HdxV5d+kdhwmn2I$w45&SF^6|G-jO5|p)6Gll)C7fw02{MEK?9zPCY&mWM0HsKDrc4N2sDx zvNsw_w-SZ+Z5+cqy9B_wfNv~7o%w)2)lObq#*zn9IFw*dX2RC?1K>kIN(>@%XtHn| zQ#GC<;+e2nlPxJ|DG*wNXX5GWqzEcLE*wL ziKzW(dQbZAX|Is;Rkldbj>R!I!rNHdxV9Re6jRLVFutz=*QL!TifWi(Yo$76*;@+Ghc}Y7d z$tqdiiInOoCx=5rPGDt5c0Yj@EyeZT<9gTMB9I`Ky4W?h!31UQ?V+V8@{Tw9xVuW* zf^F-P9n0PWmep*XSYQFb^gg@yiQz%v!fCzez9`t@8e_=MfHo^I}CeN7bu@e;l zmc=8?k@S&fN7h+rY_Kv%V*H*Ojr>zfaTZvul8^zkgbEmOU}dT-m)zgKz<8%Q5A)yO zcazF2b zR2FDmtnJHx0hA%%;x|&mxd48NwV_rx$*GFoxzrp=U}yqwksVW$67-xUl1b|@2IH)I zs5|9PkyB82&?!F+LliVL~-!cNp^j87q?sM`vjrhnBt>FZLTgm;l0W_!DK z2p6RICrBe|7Q&qt@_;@p8T^g-I!0hgxnC^XeO1gQX}8w~N(E57GV_4LL5L{#^1HAT zlyuP$6UT_^m@yq%nE%*Z6YDHnp@*liXBlWeXMegZ@9FEK-_?WX{Yf|WTMEG+G*Y2l zZaZAxX}VwYx(qv6j;41W%<`sj`$w2opSqqwoujA)1{)QpgKk`P+r3`pO_E;@(3j}$ z9LpyBvnybJ^wdr~4b%+PXUC$uZaMrayBZT@|t7vI{X3Kma=WX!MyHub24= zX~s(S(!$J;&c=CTTofc2TM8;B#cN$Wz$n1m+qkHq0AyNSvU0{!<4OM!$;^u*Q204F z0a46ljB9Po>1eMhy6)2Dc_kmrrgeC(CMy!Yd{nzSkyy)y+UT=C<~Zqb7kkY%R` z^-l!d;j0^g0_?e)PRHr`UadOM;XhRhBJ^2NwS&F$VmLED+4MA@2+Z?g^{jDNm_2u; zFP_N>(Iqj*jb6WlxS3$k_cGJ5JTsiS!YC-q?(6RaLvvb~5OE^2?IsM^v40_Lfo#^h z*3f)II@*i_(FeVL=zBQi1#QduO&+J~6Ly9mQT%lKm_FfdmtO>?OF#P`WHB6u4L+M- zb~5fBoO1OxnWkC59yMLb%x`VzdDc+``$mTqH7XndD@C`mqj39;NJ3=gkr4=F`iylAfwv564ZA71}&W{!Ni3}H^FD2y)<7+%{RnKyv%;FqDsU^VX2vPbpW<7&N z17{a3I#qwi!Qrts0GBl?AhxG3+>1xK_D$OfhhwP|%<}>=P@D(NjgMIP62F#&lXKC^ z1E56JrX`SbaC|c-*o;q1&z&Qc1BPQ$6^^bDWh=V`Fu#*F>7%od1c$4$%7db#Y54z8 zVp|bYB!afd09kS_cB0PUH6)#-TvaDf=GABFboo}inD}AVhUAD?bUM*~w6ULG%tGzj z*!UUdNM3m&Xg6qzb$A}oUCw(%-lwzC>+YtdX~$?&+uGo9cN$$kWdJBkP*zkBp82<^ zM7miK>04^^y@u0aG%itNJHA|6m?xNvnqJYP(0Qh?^69noT%%{TPa7~Rvu_gPVfWIU zy4^PbLqv2PG$hmwu}HYSsCc2{4S4fZs+Q-U!o)hp$lmv^Mb}KXWjM5Mp1;}}anAO) zqCS!-zjB8N*bI$Y19G}7CfCdfVT6&;H`C`6Y_dp-i=_yi%bpG&*)pUfi2< z*SFgk#fifa4SVj!0tT%l zO5<&z$Ip-S;-+_y4P7IHMw(V(%daGHUZUJS{zuBV>4fNA-4@rx`#sea*3D9g8wKUZB^jV7y$$nTSXlnSqju3XxF`s%sSEzpiTDhRlE|m=44F zTca_NwV|URcl**clgas;3;5!Y`qXxCNeO05Oeb(tLtR5tGCCginOL?}RO|#Dt4IHE zVq)rBjg^?wsT{Nt3;`JdxSxr86?0xRD`r!HYug^2<(TLj-sd!bqW?u4%Pr0Vgw)P# z&fAm1R||rd1~3|azRcwr{K5)hWS+$4N=lUZM@ZaP3;uN1A-JyF16n|N2B3?iQd%$1UD|&GHNTE%xsr*{fLAa*ol= zItlrYU@Gg55cL)~mI-n)#IBhRVdF1n!arMOC0Ot9@}b#pP=AcwGC}rjF?|*AucOIT z_%}Zhb5Va;rO#d0rwZvj(Y-B{f(N-qBJ-i#PJijPj?TI`hZ9b|OK_R|_1h|Q?__WK zv2gFFMoH{!{ut)=5WxSiP4T(G_5-O+hqT@r(tR?`WFz#@VrorSAq#rRZSs75Dj+nP zMD9t~HqDnmvq;BSbb8oKtK)b_{0mz*ye=g})Se-O!W3PB<>&j`x1;h)1N~gl*LYgm25A?$a)c3ao@3Hx^mn{bUMosx50Ady zUc%U)Bwc26j^6o0!Pkwe`E>krHSvgM7jOiRTtp-T2meb)*}$%K^?o5^sQ?#%^*Ffe zg{Y8s-!n8>f5U1#Yix;oz!_6%NnwE!L{pDq{25G1fKgNFP3 z)1`LN^Cenmux3Cp=C}6Pm-4x-qPfk3(z&hONbS^kJNi_JYA5iz#Yqj>t1BSk*KGvNz5ZxTA~3m%HU8@L^a5x>)KCk5EsUgk$i2iWs=kEC18phjfrMZMaIS^ zNcpqVv!F%+pE-5))9q2n_;)v)rIi>I@ z|J(nq-=LZ^qBeOpcR>MxqO9|~R#`fB7{coCLQL8k#WrpUa;~0V8EpPd3{m|!Cj(b4wXSR$j#iJUWDW7cn~52oXLF!OdR zTH9y^(jh*et}NDDQ_n24ijnb9<1xl&g z-np+5@7tFT=c`a_f6AS+B1}ROab(u~(a;7N>ESsu3z;WPnOR$}f0F0Zlnybc+g4wM zIc6m)YAFC9ayN-Z0VPHKjI3H1jW+rUZm-jBV1ari%nC|s4|#JLiC`bO7j@D0_ZJCi zb7voNvz~{8S>F$7EQ$jt15ua)!Z+tT+8ex3NZja*CKio!$YfwtR@-~MZ^3+T<2j%Wx zm7yBcx;w6<*5nuH_@iT0D_xhTGnJ4~mOUYFLE!zWx9<@daB+LTK*6I)UVT1!C&|e= zEO6;a@m()D!}#Z(`r$AlC7nn`r*u9q*3j4k79$s%NN%sTIcY0L9ciRhltK#6jct>tLE{J!K>3FNsNagn&Lf_feG27#xhj61Q*6Sq~KoKNJ%{!2s_S#P%jnq`0 zER1s|OTi^wFC{|~+{#jzLQfa>qW}m>;{32Tf!s<+h%2pcL$rI*4>G5LLoWiR#Ltm_ z0=j7%F#ZCDeSb#W92k}H!qOLgBZjo%+vZ*QyW@|ocsC04t$Gd|Gii!SmMoAypgDLY zX@fBzh5c{wYV{GPly_}%yq8JuC zq8C|99VfJRJxoZD&%m;K>|~(Tm?5pFykTKLY;T_>dB+EzPBsiPnmN6StgYxcyS^1J zH}s4f+IQ5@Y8V2i#kd=AK3dNH@?~ccE-WQB%u3jF zo5KX+zK(CYE$7z@dpdr0*LQsQztb}cY|gsWEvXPIYoR5cf$K1vvBlC9(8~Bz4(-CZ zXV_Y54IC?W8W;YGU&4ed9CPArY%K@`^r-W$Tn)vvx#qkSz5Us=lUmA0FV~w53d^6= z(&XojYD(Lp_qH_;o6fEWA34eeZW-fG{=9$g?{{)})-^PQk4?;&Nr|cl!H3VbGfy< z{;ojie|$dx5E{4-#HS=xR#15Timy&%n%TRYSJlzs=dK^E`{pYGy5;*?hv@JNM_hkO zcPw4GxL_fX_1(3gn#k;b{lV030O8eO_P1O<{_S}FeOe761|a4?*Vrz@ z;P8v%kiSDS2FAa-`Q{qFhS#3h()@oq5uz^*)Vr?3iE9`7-#s3H=qdvM*zfiJ&$y!F zTCZy1#t{Xu|DUh)(8pn6V|Vxknn_m5eEG6N32}3C`_R6Z5Pr9InX+FRcSqNB`A3IqZHQdTAo&Y>3(A+MRWLn7(I zL74v&kaFKS1_e2l==i={L>J>>M{kIzoB8o4Cg6C{`o9zUkL4^={&xuedCiIZzwiI! zopss2|BsvY@9SN|xBv9%e?IW~|F9B2VY^?0>M-~<`8W|b= zyYJ{-jxQe`IGC9S_O5=D|LT}o{%1^AWr}9%dky3it%)EeCcw}zd?F&Sohb`xzWZc) zAX>$P%#h<2HQLC?NN{K<9tDMhi3tr#>hZrVenp_j)=W*`rtxQtXmw!fNuiFBfLD9A z;3AM~@1n=^MQWe$LTbMs5|5`HJ7><03{*;VRg<~EiQD>)SHnnTDonn(yc{|Qr9$ak zaQ>1OrlSk4t^M$L8XIVE|1tqYhX(-y;_iuZE%ag)B0-p+7){HW8R7o#Yzs#%K6dn$ zq67*I@2;u>myIruM26cRuzD;B)yj>Yu9`pV<&7ikqIwF2hu02fUkDcJGF903xL`l6 zuf&523ko7Y^8aaFU@Pb8p0TW~thToHel1hPbM$W*Rodesq_$kjxTC0J$K!zDp|QAl zK!>x7?GyX$fsD*u`hD5-{t9UiJ3mst+=s@GOHD9cBdYbQ+{ z*4GZXn7NWqg~$QRkGtlgd1onHzn%GL=J-hLT|phB*2Ng60EmB&CWtNz|6y@|=1k}? zTDU_buDqh6@DoHXAfVlO(8AOdfKt5e8@sr0GjsU~gR$gg_Sc^5=NXx~V-WOESY9kA zSGqbf4cH$(4L50QA&&c$UEiUyUWhze2-Z73AiF3aeq%umY{L%A3|Q1s%S=`dP$SyR z*X`*6;*q6)G~pfD^nI&#`qEE?c{z5H$3BQ3caYrfnbKAda1W_Me9#Pw&T&a}B4G>_y;Ih>$E|lnV`37)?X)p#+9co3 zw|*(yZ^&gI&t(y#Ic(~fQ*HKrsfYB5GAglCcYBUWj16(N_PLHlTW%N#tYyH8>>=IW zqt7niY8^W34G4%WZHEvW{oF^(sTpiZOkJ~tAw-3Q?ns+Et^?2DcTfE}M#lr^FFaRP z0)r9?V|eZRtk)t-iW=*Uk4%A3`u{O9VMYK#%Y~6Lw}CrNAvi3o#&KDEy4=tfz2@;@ zXFQKW#3PDUHipEd&3#`>tHQ{>bfT-Q;o-*LNK{iR=WMQ2`CD6k>0Em;WXtuoR%27RnK_$-!VoQgaHTY*l|K2%?N!U; zhXtAR$&8=7F!fxKZ!(xk;~u~x%1<-VG!#)xxrb-P)0Es38kF+a<7IZ&4ubfFY-XKn zQ>7@+#UfIMr+vmwi}Q-185Xn``ti~q$^MXiA2GI7X126f$3`X+fgyH>FuOLeEYle& zU?0-ul7$=-AM@HT(kz@uFjrifFGf-$?veuhs@(A9waU#q!%d=&guXh;a+*J;^V!X{ zCeEsdA&wKSbiDpxb`1NmRQvy}F(Gc@cQ8vSdsk0BZ6@OSI)T{1q*a!!cvGBWe3ql%gB>CvP)@Iicebg6so;Ts+N$m)0t z>GtFzLi36+v8cUK+wy`aF8P0U)!oc+kp4iH8_3X*5*HWuV5u!*b121i<@d9$uC6Hc zR%BiJ)9p-06c#fF2mhe`a=Rf0iV6Q{!8-G-Y)E&xV()`1y)<(t@FsKBPCJi{4RJH7C?u+6qsH$xgYuI;*JJvcL_}KAp^}X9~FlcZXrS-uKA0=J5^` zeW|V<>G+=3*9;hR%{>uzh+UMV_UnotU<1+3trGm&ySk{B*&CUzZzC_tD=!GHeNS&= z?Y%)(2-Ii2TK+8^7c<8j9Lpc-Ojn(nybsiq;Gc;1Py9Y)IgYH`rHEl>%&V7f3s9US zxN-HE{6Z9~(>Z+&IJ0>!cyTy$;lJxEzC;0($xmxerM)gc9H2Hz@9$acq~ohqjoS>_ zzu4BPbim1l;Xm`~UqpB(zGU*CRY+vIbf47FcBIjFcSttQBDz>uNbn zJG_)ThmWHuxuPfT8~8zrvD`AOO^h*y>UY2*D1d}F*=j4Rld(H#UE;D}+4bStDFLPA zXQ>zYV&Ful*Ot1}3V8~0;WYT!{Qg_NqGR=vC5L|AJX4uHv`jSoU&OLn70CBxxuJt4 zx0^>YKs~^}H!Y|u0ANq=iJ-al*>T^WCZ!!mX)yLN&-?Ufc~&NWp?o+m%n9I0wmtRm z^t76SY4-KkJpxJ_n%a+ihLNPf2UKIN0TpNWc-RMK5sB!A>E^|8TlK)MSPILVb9o{1 zEZJN8+GRUfw}G}|*3Gu1jTW+)v7(+XyQ}grD)7O3$?w{P%4bJ1+iOecmQ!qWcakVi ztYZOWB=)ZNSn@I(#jKeO=C%bi|t9#Ssb|aq;X1%`l**3G498+m0 z)QA{WSJ%#y!q!4+r`Prs!zw|J9l7~&%$x1jhgX(2g1Mn+n`V()1I-pT8 z`TjUb-kqKHpCiVMAukqpfbJnJ-=h zn>t<6Z|K4MzpM1n10*T=Ok7-CA%p*&vGMW{T0qT?%d=qok= zJl0F_oNhivKkW|)kW?-a<}C1QYDK2u?YdUIJY4EMxU(`Pj*}W>uQ$%&&mynIG@c); zLbB2UIywiL`}HcxiqPvV=4+i>@A~Yf=Y`f+w!=C)sF#eE{!)v63-ja(v6&anQ=FN0 zzDwQT?{~@``E}zs?ixec5)+mXpQh|=L6wFJra)l!S2Rb;LdoTsMlP)24a=rAS8Phs zSxksqAvP=;xY@fL@s_A5Unx0T+jdw~z~b(Vx^3_~a*xu@&R0w3$&5}_v-M}{Yf0rF!4Ry?g$V#Le?)y*8GBk<8nJCt z-Nx2db-;s<*&T|5h4rqT4xz4d@o46UxFYvan1yQ<8o&~-Q#EgrU7cSZ&yFmFS-Juc z5ug(IVXhnUOhz7)l#10k^@h<>Xmd5IxINXF9s%>qi!bg|c%CwBqWiS_Hrqe_2Z9Wo z=(nT)I!%$m1%GV-q?D^L<%pPf|GSKYyT(P{HK_`Tsbzl=2yNpv{yba^=yKV!w$<8< z+ApZ1Gc-QlY`!?2DQ&S3rs$Z`r!kxh)3dUF*yLx5;~0AT*(yi;?~&_{UtIY>uHZC8 zn%d3kqV^rzl|tdISJKcsK+U*9>zNXAKbvFL4Vtl=E*X-&2 z2*{8QRjQ&#zQmm`n}v6Um>{v15w7*!tmp@Lbk;Ya%nmw)Z3W@3cPX`5n6~``VVpQu zjx6!53qyT4W(v>;g16fS7u+F7`8wd{OP$eD`$sx0zVV-%Ge70zoSFdP5B@1t2PIj8 zn@OHHyXwQL$B|hxkPAC{1bZl`L4z>?2Y1xD1?0kNQ&cw>=85uI{$Cdv*P69y5lhJT zlI?tZOh6_DXy1ekc2-7!bHF8SR_VP3x3RC~Y|1k4m?=hYXzyIYr@@Ak=T(k2Nvf$%O zg~+f#$_s(C3qe_bao-9Hq!lqKdn^(H%B(ebGDByoQ*HwO{7XE|nS>fi(OZ03PzcA{JMM1h zgNLJw_E)*PlAPHEZc$@zDL{>=<=jrF`29s7-clZGIx0$X{y4rJMqSm}GZ7bTRGDQ! z;i5cH$MB${HqhsR)m2yEmMm^bB33pLl+(_JD8J?m$PDp~apC$9om=Fu;MXKzCSz~z zs=@-f$^|-DSyDeaA9Tk?|G-1O}U~^`OF+77~nzda1rjS~iTkXfa*kZQp{wtQhR2d52wmfHKBC7(0~7 z4zmQ!uS-9$F&2&5PsN#fkb3u#ruf05~yxquXfmSd;QKWqvX6uvCeGbxALyX@(aloOSmUw1Ci+K zY+63szzPnJra2iw8j*MEf}&(GgqJ^aEv_G?S! zGfFd`;r|T20vxV*W#7#kYvzdee8*mZ;|KaCKgugP0Y-z0s|>`JI}eU);`v@+t!TNa zLMJjIVr^d;iF~RB=w@(s2N%9{@q1V-PHP@SjROwD4(B7Q(%kTJnmyv`QU0u#7seRd zIb0Qq3~@!lYsAnEZYYK>skcF`A!PJJn;em;;wxg0=Z|R7`{&deW4-6bG3Lo;Z>;mb zQBXIAYAzr3(mx@J7k9zXvFa1ZtAj;c&~Ot!8SKm&eeriD_0on!wqIb)AJeA*r(uJu2W6qM^fFt%xlGSgkj2~?oP>^Gmd_+zrgttTxaL%`AU_t$5A z9#8k%5}ea6`{Pf)NO&!yRL903wb6LHix|?uvPT;`)dLFGCTNU7XH52rbkOgh!fB`~ zo-Y{V@XMBhLC->xer1&*Jh_Zlm&-VkI;y zmEs(?y5qhAA_ebpf-Ew)X9*V9x*dN~9TMiRP2E9tXa^f(Ki7RQHGh;pLcBRGKj31AM0IxD#f~Kxa z!4v=Gh)+sqju`N2S3k{_EvmB13*jGAc~C5Lus|tOI%nk`gXW9&&g87J_^sX?iUUU^ znb&_~xqFeKsH;*BUUJBx7FHbkh3+LV9 zq~MDr76Z%37(ov$< zv_#&P^yl+TWf+RolkMAUtK(Jo0PupmUdG};t&@3>2E44|8x1B1qASHml zt`XtNxV{IcPuVt=SN{lN5<%fXA?)ROFov*xT1lXHVZ6R$fzi`MAzer!3hK7(4NcJ~ zIZQ8R9svj(;B-Q)>5_Gd1g6G+kSl!MKOH)(*BtA1@D=bw3^JDu(ho2va)k-^3R2<5Nau>giE@@KOlZoVeZ?7 zlCBL{5z$0?tN@63)eox0KCbS**qyoa5B0S!M+Ri8^V(JQ`o=`Qn|MZe^7p6oQH{s$ zOKFWMS*LvW=7YKP)~szl940#e;@rg2nG$i3kWkDzrm>mx*N~U=xlh;3k>(YVfHua= z#t5CkuIbZW+q|^ulef6&9gmShA2k6bb+Jky91O!pFWko z`$JY4J8b&;PjwxDh_jzleix%(LKSp|vTLk_{MVSU$l)gsji;h~NUrv5^3=yg!Pobd z(G$gWll9qoWr9(qHId%y#Z*yx>tE*=0f_WI2DTCQ+WLB<&PLg*d?eAjU2w^CLp@Vx z-RCBQ*jq!#3FjaVvla$DccDdiU$xA-JJfil&%Z;H)J#OobiqW#zpSQeF@L80*4o-e z(;hLzk*sc!UT*8jJ7QyeD`sZhULf`k#-Zt{UZPjNXKh@b!pHoqO(%A4DVJ*ha=_f| zzxJR%5{-Kw&&&^sM$x?Jws>)|L{G2RMa#VpxF7Fj0>!f$-!*ir-?-fH`@q(RDvE47 z;GSl>cjjhocc#9?S##|7^*H}~`&kWG;O<6zbLHJjqgJIcwBOyo+>*+~bs2$CXpM`+K>rQs3x~v)exJ ztO_v9oi6}3^Lu045<8#}$i%I65Os_j0_He};j{dHXW>Aq#wf`WthJ*(n+2G{`T;ql zB8M77R_1JXfzPi-Ao_xYgS&EiKJ)A6W&UK9`p1X2JnYxIGk$ zD6lX_SUK))bOSvC7fAFn;Ycv4K|&9nNr}6WBcYsO^Q4^r%*!raddxGlazlYlE{Xdk z^=y9;hq};8mb7Iai&b&KU;Eby44l92%)@MfK4vYT29`LExA{Guq>g^g!9p#x{SIx{ zJ%+Lqm+I{_FX~j}H8M zOG${>g%s8O%abiHaApRy?@rm!l#Ckq{U^ceyF2nc#L>}F-+`ULP{$*ZGcWUqq%A8f z3~h6BQ|oe(0};SK^!LLTI$w^6TIUfff97O7>dR76xr!N|ldY%B;Q)4oCS>E)k(E|M zKvYI^485$Olbh(b@7;RIPlAw;@1CaA>N3`5tT*5EPYlOHsI}*qcd_6S964Y!yrRfE zM>}f&QMdHI(Al;dxBln+lnvXd-@n7o-xexonO<$F3ubz}@A4(K?VucPl(W@w>A|?; zwQ_RNgZD9?r#|k!Q7Y7m*CbY+TwNUYY3(jvB$oE+&Nwe8+Fj2R`p|%RE)rhbF5|PC zP!l!Kx3=fXr0n{6{O+@7`0I#*m|k$m#X^Ze{3Nf3ABx1*sEcEvo2 z@IWT;+Y**Gi^bMs${7nUG*V8>aEr!D#uYLAvRd^dfkHJE1mJ6-PXu{xPqy7@q#8bV z@3^rM@9ABR{?;97+`fAYLWeJu0{T=07An{C*4#WV^XwF3K1u2sGsnyb3$J>aJrtc% zS?lU)F-6ZczN_F~5&Rrf^{?7gesfKR9vVyqZ+tp^xftXIg*J1GwYsb;n7awTdi9;q z(yqSh^78x`;36wbJMNlOK~t+vaBNW}sw^f*1^d7-E3kr5qa0P9$@KVJZ~>#|4Mptf zk0@+zg=G4iLrIrriqh)-;iHQkhpXcZ*|PyK?aHXc@<^T}%oJ&?;873ZVOLI2Pmu?` z`r0af?75E;NTMAO>*F(O!f6G1OlWPyP+Zer(<>i0C7muOsXNHlRDZ^t~AjI`01WumbA$V7pWNE$|HjoIK?j9)Ym042O z^D%yfY?{1UFawm$IM_{*Bz!|;=jCy)us~?RGPIX&!Wq{kgpnA}+0@+-S&!1zm06nA zDyBe_s*2-o6G&wC`;NjkySXg)^Oh_8ru7V^fT?xkFH>ts>SB2X=praV4aL@Gl0WPd+3laoQS9OB#-*x5B(c89=>WMa5 z{5@wo`fGuQfPg8d{PULrk34I=D%flbCh{zjl@me{!T5&)CC%c{iz;piHDR)fw)?}A zhOp?v?j&{FW5j!BmmgI=uf(0tHH#Wf_DV%+GDb6{-p0ZE9<@zw7ppB7Xy6M8eIbm} z|Gl98PH6P-M*pMCk7D7_YSb~`l4&_3Y}=gorA2krG$a!=@w&21~&N|S5g+|si)c1pe8HDKL&H`>0QXva! zHQy#As6_iydKc0m(b*Oak&}l8{n7FvM~E1#&DL%RV%Mvt zxfOcTIar?IrC7?~uGj;l^LHn^*k<+gmhjO@cjIE@9MpKcM8;f#=Hh&;BEo&! zT%fLE@C;Xom}o76Qetg$3(6xd7IW0UpNLESFJlDNe#=paK=bj=`=^Jns!g0JNn{j5DNLuA|ap>6v zvUGdCmJ87xZa$R6->qDKg3EHs(+IFD(79z<ttAOoyO^&;7+ml2_@y>AB46^Rw=$`%mL5eosbA6G|5r-t z!uYj>YPfE!5+7@oW>r?HMm#e5^RoEg9~7Voy1ioj`+rN3pS00WMa;s(e}11n;Hm%1 z^bQWHiu8fwu+_%Vt?Q9aw5{)+#KLmb4yB8EP%%?`VTtqS|xB|dRjwMGXT(B)zs94(TK+T;Vys~ zOK@?D8VR^hqTA>JKU~)tsM&uK_0!#Y`@hTa&-b+;AGqaESX6X)aA0z>Gs$k;lyD0V zpFHcknwnboR@GI3Y%T$=$`W==Yb}>fgWkE_e#B9*Xr4u%G#(vXWO`UVdU~ z%4L5+`0Aw8e{^a}#?q3Bm6a7}4np7twG|HY0v|tp3RfAMRtAG>_1q0vXIHEb=PCo9 z4!|lbw$(|w^gA!$jlvXZs*YOYT+cGCn5v|oP&T1f{u*O zp8b*TcM%Mr{ZzwkXR(YSk~e0+v9MNxZ?>yY5a>oeT{T=rMM z?PO?Zm>}%R3=sD)WKdX`#cYKodT$;!B5|F9YQaXFAg8HFBDP0u7SFl4xdE2&6Od0! zHLV10bz&OJ<-2r%RoMI>w3l?fKfsomo&Pm6)2u(XH)*i7lf+9cdxX|xD(j)}duEKa z)ErDhLx5*pOHieGM)MJ^{4!T0&Wq_$hZFI>#(MiDFYZ&14C&uCdv6FI~WW$ z_rFj)I6Fjy2lp5MqL@Qx4sgF|dv~soM#-ta;bFBof1=4&?hwlI?o?ny{8b8^DwpTo zgbv_QU=TY$WAGJmAQO0gl0d1G?A2%Cbcz1Z5i#HxQe0x7#N~%gt2FxRx{!wM z+r-qT+=wev`xL>%=OnEwT#;9aJ?UNv*XLb)UmOXZHD@PXKw4kY8)+%F)Q4PT-n&V_ zVX}jDItrQFD3@(KtYu-Y7-LC12zfA=Q^1Hy{q|?+(uM?`Z$OW+@8=%b!EDcTqGG@V zJ@mTXVlo(bBLA}_Y!gD?3J3^%AqR_?K+Ax4zCNh~ZdS?U%8)HOai0|N_Vx~=;O(wM zRcZZnlsV9LGXQ#Yt;g z7V;0_uo>^W*4CnihJvqF##PA+;vMi`WMy|>XUYLfNX5tYkhdR!(|+5E7paB!{{R|_ zeGjbjqEP65O-ZrqaqbKIR$G4wW+nZBOvJvB=p4e&>`s=C?|=`Ts^w=@&Yx=H_XdC8 z{?|OD^}%#-7UFSU7vz?YEE1V<(p$+NJoORRMFu86{W>+8=M_mKI#s7~(akWXp?5SJ z>MLyafPqEXd}pnT-N-yr!|?e!TwWnthx_;{a?1(PF&eADSvBz%Ru<}g3&#EafXGa1 zo-JAbT-Ke9wFOVF+~NkWb-1-|>B#xcXPrb;l&V}5>9(?x*ALznut`tUpom|C$;xH@ z&5s)=7Tdj1kAzcH922?nxPslhS*5poW?D_|se*7!&@U0zb4}iZX|ED&mYe&o&mfOG zbY=;8a=>-YCd60Hf~LXU?E_szIGRA{A_OY0rAg!_Pi{9j~I^zg53-7zo) zyh%b%{?3raNKLJ6I8`*9q7e+)&MA_~J-Yni_u*^IFXvfJXYnaFU z$gKC4VA`s4T9qDx#!t2v2cho-Fj2zUh3jAB$QsLPBZ;@UP6>5WRiy`2Hip6NWR>`? z^o&UXReVjDArpWePh5AC&z^VkufBG}LbJmun&XPega=KQIEjutxp{vO6VDv{(Ay zipepMk(t?Lt(Qo<#L&h!W0Lj7i&qxjok2uRr%OIxbpN!u|3^J0MQ%LLeR^~% zsdM{zhn~0vw<7L{wXmLVc7{#tW&ewQ(9md?#@SZK`YxI)8=V3%#i21BIs})1CK(RS8O_KV)9804>2qBP)!4?%!MnATA`a>sGR=bMB)k^8dxF4@x zjoD*?nt44wv;ni5Pf&q1XD}MVd^w#QM$HR57xgr^tBgLe>*1|FwV&d2RkJM2Z{f2$ zU5=A064=z~B5|Gh@)>lO=iQFF6};SZygS@}p)Q!ArLQxGNrQU5_h>|h$FkipcRv3_ z06AL*WnG4X{-6b`#MlA)cl^J%B!D0?C?27lEI@G@ITaJM%~f{+vEi6V`dJl9aB%>h z;GXgEn8_j?s*mv2dq`wfX{kZ58}x354@>!vj_Xxbe@GA>AbQ8!$KFzH#@qmxxUoFr ziqAI>)Vo?xAC_8=_E5_%Qfw9y@MW;Oprg+&kFMx`Pi=kG`-cR;G!uvq;s_$vI!;@y zHWoG$Q1PMujt^KJd-TpGp4jISnEfad^#1Vy>%EnMw_S^7>@geCoZ809;jJ{i7adqy z3UJcmxI=nkv3ZxI0xCq;bWVMJB3nK5iQwoUEAp_*#Tq{#?yXLe^dJUBfmv6)gw0(` zj)?W#lH5GNeJ|Ke5s7Rz_5QgbB>!VWP!W|HX@R1*)Ha4w2aeVUoB`)Z{IhgYmh?qNDMY5yR??E_yk0Mx!o4;| zM_*D;xjEX2H#g*_!ULDEnmlWZXzjO3rfT=&x};;L6Y^Vqn}GiJ!9NPaar^=}oWBG% zb+g&L2OkmZ2(@DesW&?#WDt2RI#n&GD%#Ie>u%n5?s~G-iq*=sDB`Js#eji%13k~j zGQuwhoTPec7T+}{!-06AsecTy*74_%DF={UZHtw@Dw_ZxE;ny4fBoq$x9!9Wb4Gnd z4}1G!XNPJ|Cpax&c1eEzcWF8}Qxe@~i{4(isB*wnB2cg?gL!ShxTpP(U*Vd3-jGIR z3U2~DG5@G@h>47VcJcpzUHktV&;lUp(f8%|+=*+oi<)xRWhecVo6G!3F_OQvQ~dVp zGbqD<-)4Q39MTdX7S`6+O?eVa40H?)m0rJY(;6sU_hcP|%qJyLj*XAsfAnY#Scs{` zeG{Nq428rzuU2pEZ&=2vKrNU1od!WDnQ4~Ht zKJ&|$1LTQQE&${!^Y-mmZhf5VKDv>_2Kr~7N~+n_1V|D+dR^Oo97m zS7#@A)f$M^@h(w46NA+Z!rk1w4cOn}bAl8Ey_4wA?gL3t& zmEcAE1$%=u$a}n4kl_}d@{gVm^TIpHuZ=73xMsEd3Htm3yGNb!DjY%dG&^3v%%-Vk*dQY+H{R?B z@ky8$al7RP#ag~!L2C&RE~HUon@*5NDngQ^uT)?=kQ(+yP`|(L!D*ZIu~pN!VqdZL zKyfU|?F^d#)^B|y!Dyzc(`~hPdwwv+3+?PP0HX)+N=7CoZqI!~K+iAl>wDRiO#$iD6xs6tGHTEZAG;;mq6fCVzt8fMYZ`mE2n?Kuh+DtF2;J@ zq@-@!*w_ft1h;eo$~yPFEsciFp=3`*;ze#qg8y)eFtvo=LLE8o0uXVibS!%a*L;#K zXQ_{$=)ar9J~Tnf_|+96vfO%1ghCq+zG=OAWQXo8`FyuB+C^)6eY|)Q)v)g&5(daR zjjBtaIHo8SH_^^$7OTq5_l$=_$`fFX8l&v2!^N_=`Vsh=*V}F_`o;3%wj7+k-tvU{ z@91C}d(=1#zVdSi<^4-tRZ9<8@!Rx+oU}6eTdATjCnx;Oq@o_X3C2c$YK<=69FToYm<|JE7@13Lix{}t!Mh~Le=4MQ;%8$6}t4=buaxHg0*6nIt z&JepS=|1-u{V99j!zn%rB-&YkjYvC^tJIEXrzYQ_BnVB7p$?`u24#f92DU}e4o!~i zWBOYh7gJ!G9f6v9H+x&U_}rIB{rQj}(RvNQz~@MWTlzl}(n{cW>I>p>J3-WQ zJdvD|1jMmKirKEuN{~%*1qE3Z1@RT=-^2t|Ew@ux!{{W^ECm|NL)o&jOF~i(c)c7G zyNhi!5_r6MVn|EP>#a#yrTGodST%ytL`-AHLQUQTJ~TDl&U{*Cf z`hZ{uw?xxGFUpL5-h0SjmQoL?3y<@~AoLX6;QX+MuArz00T?M7bO+$;;Oh&R^Jskw z$5f5OyrXJ1SHz3j__`IydtRuIQya_BhfkFP+{fizb@AF?!8EFCv+Iwrm)_#ur;nGs zaQu+Sgl@`6-y^$zdCW}zheOn1AJ%CcK2OzjWTV=kBGG>Mon2|uB~}h)It%u<80`!W zOA}1-T=owvF-qUuj%>}EpE2rO*LiCh(dLvzx~-*<&D&>JlF0`O`k|4Wc%tmt0yUV# zP4zUL&RNLJ*O|d|WPn5pdF%#n?lg^jGi7uKkOZFXN6I3sQe6|Vg5c@!{e4=Vq% znE#|aJVd1EV$-}E!L5Ejaqi+3OeWXw)2GQ(ynf3yazzzzrjk19svK1m93U5k#irx+ z{Eb3<7!(#FOT>5xkP$OYgZO)`aV z1x8^MEl+)>P3Vb9K&2fz;e#CZUDNHJr-CM^N{Y zMEVZ&|Ms)hr}#&?w}@ZQM-R7NoT{yFSlp8D-uIPi_%NmJX-MFhfvPn)P;q}H1;Kz} zE82xpBB$)u)A+fHFxp3RYqD~tRM&OyBWgBe*p)f>$YeEW%Yv7decJ-*S`?=_{WsTJ z#e067lz7G4MlB7EwO;jBX$`0J7qu-+DA~DE=vl`*dyT;!iKT>qwO_OekV%UO#YBG` zpW)aWK@eQ0l7UfxQBVTt2O16?VXX&XRQSrGe9c*E;)qX{z$0-6R7cFiAKn zVqNLtPl6gAfPE1JyyAbg2K{s&P;Lj4uu#4!=3;D3-BPoMI+g2HS~&yqsd*q>FhfUr z?QX=3(&oH8CSbkJwViM~r!G$Gt3llFP2(Qg5wt_mlSsWr?}ymP^frcqk4Fna?Th$j zE~D%a0?NTt$u9>+rK)E;i>t_>GqJxEZL7CQjH6~+Ne!;iIRgWV%K5f;q z;B!GKYlmtE=#7%RQzVP-9)g|RHjkZJ&3k{eJ(_w%)ArR{bhhmHH%Gjl!_}r+gC4`# zIR#L4zR86IR5JbKuSF8!*f+u2tBwn@bB2m7 zo1`h)1ZzE??w?t>5pF-@7?TyQaD5&bAsS|9Nc%J{PLonoP0Ku!t&55v`9_n7^UKPS zT=P+SctlHga5UVKq|@r9G}mt?AEHMt2~MYC#*>MtV9@xQBlb8s2^}R>-T> zldR-Ep+%~;Q=2$MwRx~6CaW@wZ@pBJC??kNd2oykPP5Fv}3ztd&@bY`Va5Ya1%v0R(UP8+r~-u>_RcClwdJ|;mn>GiLwiO z`V1y3M3v_)CPaMF6LlJGo{J&9LE|k2rB8_p8XWO6srE^HgLN{Hxc`S&3wa_UB9ip^ zAsJ^VIsuJCC2`rHF%3w#MPISYlT?XvA8woBKW5i#dXBr1#K# zi{DWwYnpaN_xHPZs;l{QZ@y1(=qT=i{m|D}@$(~B!#7BHW!mISgE_mwKml?FWvR## zk(7S|z3e{Jn+8HS;Zxz@!Gs$f6xeM*#$PNY(kd5>79f?ldTbu3WY!*X9+sXzP;kVs z$?e}lMZ{Dc%P)hdHGSxM)e>#~VSCNss242~fQyYn(+EU}Gt8ZWoR6Nw@4B}==Zwr0 z5*!{(>5qN=iQ<*>&8(hqwUZIk?_ZjUXeG7=p2m(cW<1oKWj^iBh%Q) ztkgW0WydMk(cA#n;h18`W;&vapk*aT7$d|OH$G;Op%&-xR-LMDF=D70Ls%@;Ahbx4 z7oHX7VC;K%Ck=;v)EkENzo{N1RQ2&`X={HnmxmfM@Nm{zL(k!u$u7nBfQ$V( z%U~R+x#s=*SxwSGR2Q<;Q_bCdrRRKJDB-(ObA3cEz;mpS*l#xyoNgIDnB>-1h$(nn zp0lijIvxw+$lpXtnf%%VVyC)d8;K%PRLrMkXEQ6qV(w zFP>+-X(lW|61*nl%#h$kL$^*6Ibh;$|4RP|@Sy|AslR>uM_%5hlR-9rPEJmWuf74d73}@4 zoO-`f-&0!19b~0cZF}B@c=a-48k-NFoM2T-2xG}=wr?)!$uET(L80M?s=wg^_yr12 z+)pNwcP3n#ulie%NUnXINXjBivaM$GiB%Q|(s~hlgn=5*%Ah*joJA3_#|Jp?)`d1{R zIL-m}?Pa9DW3t_}`wugUA|xLSS*KotKp5Cmo}2)u4invOqr7O&y#7E&LL%wqRrf1b z!^R%?D)f5z&K=3a>x?04T}@bI5vs96QiYXccLf12BsD zgg#i-$jHbcwpKe5KqcURN|XZJ-+!_s2%tJFcFQ-MIzcbTVBg)hKD7jpS`Fp&{A!$k zg%kbECn7#=lCyII3AXEd|B8|MSMG>LmEDrfKIOk-NPfl3Tyy@E9Q>dE6ZlU?$*&LR z0TIN1K6*{)cnc^B&Z^&*I^if=!>V~&bm3^6cbq_NZwJF*u>aiq zn`Q0UIUq&@z-I2X3Rw-td0S*N6F#Mo*VKFz71fu$943VpT_@8-Jqn$0R-#l*ckn< zD7|NwAwXT}veJGBkym|k&AB<8%G;zFsqi!E!#cxwB>ddZ0tna|5)>%ke#g#qDcSs* zBSj)zTEXQ(+iNCG?L-^L^6wVgUW-*1i)L!=R&6ea&s#6bPDlB5d)cXOD!$RYSK{eN7#!K)8nZu zK~kGV7_7GOyH_I!e%p7>WZi?DJabNQRHMr z?X}+<&T|`zwRI*Enp7n-b?TPDyb8z}NtiD550Ln5_Bu>Mt5p1*l4T*ZfU)R;o`GH~ zm6ef^OsxQ;Q_9p(^6}`B&&)h?Za$7s{%tXx=!GwqmmXfjtD|oG^>vcS#tZ0R!&QQA z#Q?H^XPbaC#<|e@^&9anz*`6}D1<}kRv2?FV+?E@QFQKulk1-?EaKnlYsunh{5Jj* z{Nn~hm}&nELaKRNx|!s4WLCqwH7iIiG)y}GgAFmUmCMXDODgR^``BB>Ue`Nz53i%Q z7_LKK5Kt->J@KdcV44r<=>fGZ=aVRs?e3)|1LuXhG!BFAW6ZqM!D=Y5QJz+Amy3Q0 zX%J!Zvgs5Rsn|n4_M$Z!8JxYPnMmecKTy;pwD+v2sggUfx;MEzAIc~Uw_39+J-Sll zI$UraIg&@U4NAnQC`ePqcfVmeZrj}{|GcQNQSN>GqI$#>y@%xniTi);p*@rE`ca&^c-$GFZhrTsf6*YVCkX#q6yN8n*zkUCVYVC~rV^|Kq;+%a61quBMr zanpkJD<_Vn?wwLdg?qAl)KvOI_@rq7wSI4>qtj8YxYgv6rv$3&;tz#Y#iVz39NNTt zeIHP@u8?zx2P&x(i}GAQ-vs}8J;87PSWv?#FQT43jJz~!FclS`YEP@haY1*NCcV<& zXTs0VH8;bRFscTSf2|10ntzTS^}3uIF&j#_@d&$b(5;d-q&>nHU3ew0=y3Nj1(saU z4dklr75&znM`})eS1}uL7vkHPoRwCfiF=vOm(IZsy){`RZJC<{?({$Wkm$n#@ z7dHk+G6nXY#mG9CwNY|KbB0z)j1CK+w_9O|B^ym#N-M_-RJ~ux<8k>IQHcr_A6#DR4@N&ycra3S#$`l~>v#}(gIqEB6MqtgelW#XR zZA7LXy%wfi>!eqQdDP?bp!fcA*BoqlrFs82aW_p;UKvEjgDJP%b}_#8;{71K9;+!u zvg!HdX%XnY3frH#^@x-CS{3V%s;iWy7=df!uUACB;>UoL&0njH2e+Dmnv$Lx`>0=y z{aMvZk}t(3I`0Iepju9McY}NQ znF8{m28oB$v-YlGO!e}rX1Pl<8@6MZ$6Z#7W-ZH4l}nDrWZ-2v$OryxN{7V6Cu6ByBk>SA2Lwr>^!bMg z$}sD+AJ@1MfHxfR-x%=+gsBo|;LBEj;FO%!%JrER;V`|*cmnM^gvmO}8ZpF{u0(O( zAMAH#1Kn$;Q|26Oa?9DDDjqz545~rP`NL9NG_b6Pr0$n@?gtd_4LwTkD847BP7gH< zM)PS8dVbS6QLWzTv8t3%84%>%KJ2O^)%@yEl2g(Uy}HU)h*a9~DuJdshKoM6F{c-T z>bJ(Z*UEsZtCwEx-8pi^04twc&Vh5n9nApxxyr|iG-lJ0aS6enm6EVidiz7ii$n<^WJk4>?wMQBHUG- zFbeCzySW`leX7i~+0?=xXDiv9*gkGPTjS0Ot^FK>d=;93^f>t9@Z|B%tvAa(4dn&l zNh$YSA|6}p=4P><2IYPy+^)CR+kF#6Ob0SeNZS^j_Po{eI10aA@R}v*NU{Kv(6KC2 zV)Ct!!K;XX7Po>}-wRhYVf^rXrIU_kgy13B(f-tnv5-O=wWEpex++?F?09(S`YTEs zjxnY_-AmZf`Pd>_oKRJ-dOI^n_tn!plGZ$eaeIP_-j}a~(f66g9?n#Zg_2K7REJwl zE@#wnE%)yRlKlXhS&flhhp<9B??z00gZsV|aPP@4hLq{WIHQhsJZ2joAoyL(`yB0y zSw#2QV;Ts|8(nXnz&#=J<@1t?sBkMG!Rh4Q5xHm2LDO}Zt1%axo?{^!6F2k6swVXv z(IvYD`%HGO&vn_4*mibUxrQ0Vp9imoP-YQu!WwTWxH9O9yS<{?%gP@|@xQbb!E-m< zInh;1QZ+XIa46nTrE(fqpBomIAopg{j!lI5!&u=(WB%UHe&N06^Iy{CcBh9Y5KiSR z=0&pWF#QTP^gScq$8p{h7wlFO73)pSOTnFM2zI1I?;|*8w;ntf360g?n?|$%(0#r=A=c8AHiz~7w zHlK)lY)^8;Xi5_$b$LDcD^t~3kHB4nHlb&3XMSdi6J(c=ha3)*Ph><_U%C9IF)dss zD3Z8(lZ7Mxu_P&)<>MO-$U+Fr$jV%xk%?%0RH;4TkW#=ioGW-&v}}%B%DOh zNbtkUg!%Cf&bg;2dxxtZZMv3R`l@XzaIWS$&7W`K$)sxd24t**IzeYA90TVrwxiYy>d z_+ZLSg?`2S5l<`B*7+lx$(?y9L-24PGedjS*H7bT^Bv&tPBn3M*>(@#^@4`x(ms(d zKm`VjR)Z9Vo-uU5-ol0k{TvyQg5E@Lb>3*#(byTM6iLk?Y@>{8;u62e!J;*GmA}hV z-M#esI^LG3c`2wYFf}nISl;^zGk@A~Wo4wjl-cd-hYOdl%5sU));o)efmhm@{0 z*-lrxSB0XD8zj&ot{5=G*iLn>ganuKUX8vZ7ogou&FrXw)l6Tb`yN(X_YyQGv`&X6 zeTgrU&7DMT%+U{*Q1!V+`hWZI-4}tjFxQ4?+z%wZ`j&o$xE^qY>U>q#E{aDIo!(U# z1Cd|u44`RSQ|Xx+>upwU-~JqJ;NdLQAW2o?INgOamJU2AyjoQP%eX`1f|E;$wu^Su z47FsjbS*{kM(oq&gE>$mh;MxfvfoJA+d~X9PkPu!<&PjB01cjo;;Y-L(>nkSXvs$L z&|Bl{1CsbXQF$-jXC9)P#}`FT+}?qnSc&A~3D%!ATdTFBboR+bLxTu#R7HMCNsWFt z@}ZWev%DB+>-rRbz!(N8u`PStYuPZYVxK8V)ml8Dy#N2IT~3-?RI{z;fC ziIpOIhL0yV?!)uqq@~DGY)ktsf`yTe$g5yF?FKVCHR&Ar>H*CUtULFtauJpFk!VHL*xJ3Z`Wvfsn?os`kS;X-yg_c9<~K~ZDj;{0V2Ayc|2%>8&BZbr7hbh zk4kq{DQhSFq6}o8ie`!wySPUncJ^l> z)-TO_ox_TDfcXWSRMFsuFcFL1bvJ!Y$sx0TaFw&Irz<&ak>@K^A5$G^Y?Q{T;z8fg z<*Tz-){+%h$x?G~4D9$lLhl}~Y<47wmXL9^fXGY3)F)xK%{!_Z@*<6!7(^VG-wz8f zAQH1mei_y%2@)i>LAZ_^sw%rPJ$?FAb1MHzeSnh&X6#f_np0T#240#i12$iDZl;wM zm{il4ZGmbjD`N|03WtUAID8LBla&_SzGQ~zPv%}=uqoiVnv66Hl#!c1l7e~fu?9W- zc6q@a4QFas|E)IU$YoUC@@}Mt0;?4?SW=RPbr|V=-Zh<2@iHOzm?Pn&#cqc){mQ76 zR!676{B0x>X`5fH*`ulTNglL+Civ!hDc_ime^QHV-bhg`o-PX*)EEcN>xnIwbs+TT zZQccDOybUta&#=Jl@`>`K@+)*7P3 zuv0x@=v@ToE#!@a=ABe+BpV($?^Fo)D5Df(c44R%hgdQR03sf9->qP z*dH)WC3sh6OTx59YRT;p8;N8GfpTXAGiG+yd5nP&Z__Kp?C4*+>29=eUyzvQENH_aLKr zfg&8-8u47T#`_DA^9DQjXdy^zO8izVA*_>V(?8lF*@3Ip6WbzrW}VolGtbA*D$gdz zeEIIxD3S0Jqi8=xalH)g+q(oz8h!ef$^ycDYC<9`(Me#H)c9T`#?#di2wIEN)qfzF zh~D!-8#$_m&3lON9T6YzB4WMt^EroC0)`%mLvXCLXUJpUS%0C2_V`3FBj-u$O#Y~v zEkyB4`p&%4g1?x}En%kI(+ z_H}T-@j=#J@0ICI^PVu%IW{VKjga7D;qDnf)bUIf!OmZd+(e!U3o@c+MEQwL-5vk>qg5}g#<72<+qom&D~ArYK0(D${ht~eZi3F<(*(7 zv&RytMf7Xv8&mKZRX3G8Lk{|bk>w^89QzrsXHdFr6T#->qRP!_Be&n`!!0yUf5K8p(}@>j0f^yrqUa_sSBBZp*s|<~`w7yEErA)JM;%|CFKm zl-NX07SCz)(N&2E4#e~7DP;$ySoUQ;7W$H-R$5A=vmT9$ z^VO76T8THy+)g0lsKl2ejjxTEwnvxhq%Gb?(e^hHEp7|@ls+GG*z~7AM-z+hV#Jdd zWAb@xoI1@)o)0?S7-_i_7QL*9dk^;a_=SI8rkx8%O$~6#yS;r&2#BX|-@Z*qM&_x= z!vQq>o=KTk<2Z78rHBiU+ot`VI4+aQ3CjI-eDplQHst+$aVxP@eWmBA5wxjvQN^jeC=5dYOlSbmdx)0=blL>@;I_X#UT+a zU_Y3aM^r-6gk4L)m;6eDE$kK5j&36_WQ_bv*rhQIHm~Vw%~fe>RdMlLo06@f%s@0; zb=fbJtM&XtFiGC4ts>f{vr8m8sVu$fNdJNP?$+T2GHjOkcjRYRKGs=@7T;(77p>Qw zop4S~zQSoMD3h#}XCCs@)p-oNcfm}Dp=_Ut%Gy50y`7>y%_uY;dAoF2-#R1Pz2-5b zX&vy&`iv>caph8i@^D5d;?x*>BQX2s;Eua(Q|Sa&Xvvc*UE=t;U206(0>?DuXLx(N zQTwlOg*;bl3k!0FQNWl6$Qp@ANX&cPe0|0E`7h|Ub)2S&eiALpqjJYgQGO7C`Pw_g zSyE-tsr{FhoT2Cvnn6EXR@o+vUJ({>yZ>WHt?X(k{%O)O%XXb69D+LYfzstM_^X9P zIGHgn0rWwd59x2Lx#{}u@U-b_$RvfNP-xk9&qJL?TI9)q>JVeSL!R~NY2rJdc!guY ze>jq!&lLp3drhDFPThFWKOi3($;{gtP}u(<#8qR$@9x;%CnupFu+IfTaRp%9=aMXe zuNsrZn0X~FBW~|Ft!@eVF)`1>N$bUgnvPFNcX9d+8!w)~Ku}UZ2Zel*~v&KBs*v{&4vY@2=m>XH~pX=7Hh}?&-i_aPu&p#PBo5%HD*% zri=_~mSk=*>v9dw zV8keW4dKsmOx@dyf{@Z}3~+2Q{1RRIVAtyLMtCbhJ9p04yC-Q=mQ)e4ysi*{vZs$`#MO2Ilz9s_~L7xO6YWy~{tYZX%`|LAcR0-o|| zDzT#_&FBF())B>3^x++lZwc(dorD8FQz`NaZ}8rdnG|$Nx`Jh!?rU-;zrvkS8G2bVCLMg9WG98?^(n;i?qbn zXftIO;x06?@geuR{f{1il|TxX(5L(J-D7)|QC`;5Q9G6C1sb`ptjFF%2$F(j74CFB zpFjH%t~$G#7&1Lv-gMb-7pB`lQhV@D0ZA!rJ+W90F6mB^1D{zxwk9RWLxz5GR%kZP zZj`{_E2>J3{~M3iIs6%FqZj!*+0&;+#w7#B(Ket%)W2VDcNt%tS`x*lNaDD!UzLu~ z)#cN1<1tUyW1fD80muh+Uq-wk|O9ZhLca zB~H!lV7jaHrtfy7_j5?~ZRcdOtK|Sm(n$4!R5rmEb6a+^>A|H-Tshtr=3K`YaGd&{ zOzQZaoap#s4)M^`tx*R7ziTV+c8G%U%`Q?t+s{=+og-RS!%row@(hSKa+x1Q-<%b4 zx=H8e6DSBlo37ydjD;e@Bp7Xs_vk_Hja2+r(4oUghp~5~aMmF6^B=X_;#T)Dc(q4+ zJz#U>lkocL@YOmE-;-KcLiKbUi9nY39**d?rPf$+O(o}8jMsUF@eIo*1;Y|VbJ;Ml z=j!~{){;M4xw}K>97hf|xp{`}Yc9rFjZbS{p#n#K98YTFZ_Cj|ogneW7}QN-s9S{b z+;09;b#KIEcAD;BB`7skaFPU738QuL{TQzJqQr-c$FW=HvN?kLV1CKoC9(tBAtb&d z8j~L_QurW7sKW8aq8452WgnT6VRL9N+N}DTYWdbBB+5~udVbzR4As08O2X~k?V7;_ z`c6{O)mXCmNvEMwqvRK<9)LWn*JwO(|88k%`Q=x3PHABw&y@SZhW<~PieOM0$9$c3 zeMj}=bXHdu)J;XE+z<4#-|e;5@P2^oh7L6@<6C3pbxuC)1_OCIX=$9h`n)OD>09kG zk&l?h?(F4x_=9f4I(L$nu59-|yf>G+IB2Ka#@Kk)q}+cd!V_Iq_6nhyo1dT?&BJqF z#I6HR)zk8PmYgXbIIC&gyPaTU)tu?Wydg>Wc#*;U+`D2n=9!K} z2`m=jCib^QL5{EJ;qy7S%Sy-_-4SPNF|=Xi7#ccEYM9TP`wk8q35qd^(~S>NVfx*> zOI$~NXG3dKTXwT2)V~Q5Z_~~&0YOnAhM1u}f50gnQj?bNtWDqWVlfBST zZI?*g|I(5f$cE*QGp+UIL;23oVRa|tr>qc8Vb0-xmW<}&&^WG*RDlv@PK6_LnQK)F zAqR?=R$&%XUn*m@Ez3;goO1s!_TDNkuC3|UU27#IAp!vcgkYg@x8TxAa1ZVfJh(Pa zcM>3Y6Wk%VyIT|7Y1}0^jk`3qCs}K~-+T7OzBuRZ{Ps-P!=xfZ%F;Yt$Qy|#0e2ZjVX_zpk7NJ z@}}EYl#v>0V_QGz1rJb=(k+$>m2Zc zWa1V#!u5z6kx=QqeduoFAmFvdGa*#&dQf|&u^DchD6FTS+}>Q7?zY-axG`_}+@oQH z&m|R;CjsR-QA`N*O!HaJDd!d!gBS&(%G^&Ru39jdR0Ei9c8P^AO&^4{bLEj2r2J_p zmyw`7&9-`K$_4t9HQPtB-o)wpa-`u* z3Y!3^OY~HmQcVfa%1{<@IYN=^o371&?34B+W*Fuz`E-8|ari3b>{VZEcf^JLM}<1r z0qIO)x)e6J*JV$zIjGpHC3X>y=xELk?KK^>K7Z?zv?~?4CSGFK7jsO`7MVLj!|~&m z&=Y;YV+E0HcR)lPQYp}Q9=$>eU2;>>$S+sulW@^cS5I^$i3Ql3hhrOo-4btiZqFH& zUEDw9n$@eVz8b50(HSLpJ9+y{L7}M^@#{TxVjUJhX~s}9-62CB!Op{tFoC$vPpI7e zNNO*@C#KRtPl3r)z}rO+3ZH1&Za&APe95s-45&tS*TcM`F}deQQJVevj=ZJLkM|J! z{N%6`%5+*;gO4eC4c8q4!5W_a6+Qgvp$V@n9)ZjCFt1?yTF6=-LN2@1!Z@adB+siA za@Svt2lq{*lx-P)4VE<@Z_fDza&~yU95S>A5EX$ zL>8NFr&Y+`Dz~KNP@ivb2*Z{!=69!p6qmn^G+z37vROSg3lI9#_$Bst)VxOoV5a|W zOZv42n)Au5dP#m+$h6=d-1e7O$SzlkttlQ+Gwoe}WHP;~M$a&By&HWx>?+K+%0rTo ziRb>d(nW_j=LJ2~Dz?Hu;!o5laW%T^gL34T%Xivq!Njexih-C{y2f337{2I2R)>*Fb__D>un)h6Ja^BppMeMlC1aaB!^bB2Nws=wc3 z`Ex~W^krJnS?Y{(ByQidTe$}8X9BL*b=9- zSJ799~7NpC|yO?Uych}WbWXL|X{ki4?j-v6}wn);lDPo}*K4Am;Q;kPsF=e$Y zh?`bs1rVLJcRuuL{7xfAKVJk`pin6r^D_36W^HwCIfyms$(rT3Zkvw2nQWkH91ieuGvz(h?mwy+#GUT*P4$iYf8Df`A#F^>(HmGJK25{fCPY)Z(eoQ zK*r7M*qlN|lTqQ2F#CvUGZWwGsze5AA5+!!%#nbQuyuDlE{n^7ZB@- zji=N36Bhb&GSl_u&E7JPC~E580ARn}__wcX?!W*1{XXcs574z*?=df6Vfp}9@`?4^ zv)c*eB($NyF! zHN3nVdB-y<26#rlQ#y}WAK;)&f5VXS0T|Mq;XG;ydM8>JcX!b~!@s2*`-ac|@9q9y z&)vCj*m#@za<+Ts-4wSJ`~PRA7wbi}h@<1R9iDq&$n_kQ-B$9;E> z|N8@AsjlpvF_OTW3(9z^zdr=voE{z?I<;1sFE1_G+1pcaa2$Fh-8Du58!*7}{B7Ec z?fYJ!r10>s`T2|hMQKo~oMz;i!_M}$tdrASZX0;g@Be402vV}MqhnJmg)0v0@#A5s ziiilj)YMd@(*^Vu5QIJV(Z5TK+}+rRu=Om!>0Z37CG!Xz4zG*eC@Co+r*8jkQ%#`% znASIP%He0sBcWtMAS$YrhuUexzw2B7`)|5>88$vhrGd9Z&Ny^;&;*=7{rB~Z!>^{F zbj1_j=>E3htHA#;dBUZSS97RY3cY(stl zWd}h0)js7Qq8P|u{PP3PBmkmT`NZc1fMfZ4mH%G;f)D?FSa+Z9ll(iqzukc2zl;C( zcqGv2`2ULw8$cl4oP<-N_@q;_A8VQ)Cj0E}=IB$fGvbrYxe;`UPkP|p@9B{Kaj~J$ zZ%a9R;kL4Fde^BeF5ZDx=Fl}@X^Kt}MSwy{DuWZZNgQCM7mx2uSK`oNtQI5@R-6P* zewC7vPF$Rnewa*lrkmraTjYGxJwV-5d+>YW8&n!*fgZ8<&cWEF&K{clwhVYQvcHwe zV>y!S1z7FR-wBFYkclDP9yXPfNQPE0&z0&3rf_EQ)DUT9u)s&1`aOZB`giA) z5fTRW3}0M|3_Nx@P8ZFo)(M1&Qes5D-7?SaC9l*t{*@ZQ_kz&twzjB*E~w9#b^C1g z=Vl2W#b#o3=753&7Vh1m1}eu@GRF2>3?D1K-*0gID$@IHxHjR>!s*I%-TJBu_Klxr z-W{BtNVi?T%&_DniG$E6bLzo3d#EUeP#c&f;+RA(XSqwVV)@gp@V1t1kLIo6?}fBT zU*V`+g^T)R#lviXJoY8A3!&uC)_@`CsK7iyKJ^K;C6*wO{`dA+y%`1Pmtu920dCSO z5Uf*;R&;8%9SaLcwO(qruj21{BWcJ0YSs*FUKy;%lseBl2`6|yp6N0UKRWDE|C*5W zDyX=fmtcS^?OL38`)fEI6T`5O_V{2=!S&1wF8!T_G^O{&{j0~*15D*lTLel~c;pjk z^b=qC{^2uFq3hagTKWNh z_l3yaV%57p&3BQ#Hi2Va*b9*diD7b+0D2P`=`JNF(C6&67b_^1*O6@NW)V0>opK{5 zOtE#}BCwi$RwKtG3x~*@%1> zd#O@*CvE|=LVtG7kf-$Mc^XL74sGsqq>{qQkgIQ63avA=CItkHNA(|Z#VM4=t0jcm z5Lrx33$7SS0-Ff6INnSO%kati6A0ARljXxY{mGpEY_Mc@u4DAB;IN&IVv6Mz(N1EP zHm!AXoul6J$z9C~;Ml|kif>1+q(Qpx4YcTdg)d+7dEza{%yzIchF*0bW9b)}So$fK zb`{|Yn{8hsoF_Y}pD&}D=d4{Yol2L6+phrxpud=mddcKA0d1pFH`1SS9QFL6nU_?` zsqL`yV0G|}akm?-LYmTFB~#|!`9^eMn`s#(uT#oqpZ{geJX!sTg7F0aLNQwpc%tFE z5+0Y$V)YnLD(FPHx1xDsm&Um&3ux;1#|R>DT*SYkHUKxa&;0}8~| z|DJoBzc1;BEbh|vft}MDS`G|SF7LYhVurd~CWO9dD3ocKaT4r;(b+H}$&#B@mi9F; z5U64al60B%UHy_9{01-*++S%8PSTu$wO+;#XGZxx9;BHt>A6Q)Vi{1WWkdk!Uw`=w zjW~1ZWI^oP6w&HrODi~Xb^O^q zK|R0cxq5LG50$2Lh^)+eqY~bf?UlFhZOE5@R^Ys>{^a{^i@U<&1V`MPmdztwhzut#V+{jm z#|bDBkTw%3SI`(CYwS+ezPW@N$Tg8=zezl`)*8x!Fv@le zEX7)K;CxYMpR4me7-6*szX{k57iTTJD`V9ICHo&Y?i@|Maew&)D`~x8%-Tj%+sNAM zi6x^9i_K*;*AsEJCF2}i6jM(Shg1;MXT8vub6d4fUi@k4y zG)ijkmrzAj7@EmrY5e?J+)-k2W>|N!TQoqbe+cp8zH&V0cGfuo(ewGdzHF2ws`j&{ z)d^r`p;Av`BtOf$^O8VxwVa8EYFSb$OBeFz0|#^q$d^v@!z;EuxvZB_6+v-^!;LKV zmS-P3w(HxYUfT*H3k^{E3(KvF+Og(PY;t`U!8v%Tmk&%j34Mu)W-~ptc*-+*@LD(ov|zL?(BK=oo?x)I z6p&KP`Xx1tDkC$T*t$Ewx;~cocfI`Ls<^<}O3snWQ+RzRTly;OaQ+guo^&?9etmY* za7MOwvje_Z=Sg~LO3>5lZ1KG6Yu?s zCYAR&k$x~R*^{$#7QjlE{UakdFi#LyhsD9n29`zUver;c%dTgpc~!m0r0EfGRO%KP z1Du^h{H`N-*dRaX)o`SY#bO;jFX#~Hiia{Rz6W%O*y&A%oN5&JDWTb=0+S^dTJx6DMjJxb|3FWvTPMUOmf2JF48%-cD)d-TO=|s7J8b} z5MfWeePAoj_9V!`A7%&N+M+3G?|C>8{CpM}UwYVYlIZf3@`Fchkh5Y~gjm|O+Q42? z2i?&lopgtQI$^@2u?I|zxSw4N7Ba}2(OqE}G64Wb+ zT|)D#?W6d1`TFENb?V_5jnfVXc@o%X1+lp4ET=$e9X_zZldU?^HjX!6MrB=ekb4G~ z73Kxg9>L6)SPo0a7-XVrVUfBSmmx!)tnlBiL8;loupQk{7LU&ZO(j!4M~vAH()J>Gft4Y`?lZz4|jH|daIlfIU@f~pc)x1f0i@0^x>Xk zOS>HHu*`x+M`^meYm_A@DNA(vPMK-KSsg?gEh=p<>^7yD(JA)Jh&$PwhWtpeUXQ7| z`zMdEHti)55#NgW)@%*a-PRT3-vPR&T$nDzGiS6((ivzni??5b(&d_?GBPvAB9g__ z^ul*dj81HKpu-?9ho2VXr+jUz{whjA6-OV0Yo(fN_DK5z?`3PaF@6z*+(^nOA9W3= zuIFV>sNaP(KKem13K@_U<=7N>Z}Lswt9jp0n#7+h9B~;}g482?##FUNOt<%3$fgzW`$!PvYoM!PY@gckWpyLE`+Hw=jzvFFCMZdp@q|BE!Hw3GtubkoWUbxy zGxN-?;Lgwz&$I{vE0NDxGZUDsQtQ}qIvSx_I%{Z)GTjRk& z87V2?XQrh2Tq5{LjENBWaW(_>G?70>b5n;6p!tlG*LS!TccH7D&$K$fElwl#0guNG zNO#7iU>nbmS2AfJB$IACIE{Mj)?_(W3m}ga%_)3l7dk62J*I5d#I5YZ8UQRJU~f=L zU`~r9JZShhXXAd9kD#UwEQPPPIfVhfpjL&IOcOpWyCZT`NWY*zJEMi1Cn%!8)eGm6 zTUM20&JSQC1rz938(w8`>R{1N=<2*6AW$UR@)-%JeF?GdY(f_qA>#1ohfcS7rh98C zrTt|B>ASjrP@OZZ5qIR7K=YQDvB7Pwvz}Fx+2OIOqKc_?=a>}+`k`Jrh>dq2G;`x& zG-6`HvwB87i{0y`q0%7E!LJcporfkt$T3gEuMvd~4%Zejvek^RXeaF6h-}UJ?r#!` z^ed7sS`TE^m008`b;|J zuYZN6%M#CvB;6BU<%9@dZXdC3a2YWYTenKW8<9~{oxF(AS9?n;92F@|uNr)#3Qg^Q z{i3Qn{*)g#a<#66iefc1Bq)~lVwE9E2Nz+-GhNpoNFqP0#9bPPsfDRy&H&VIKx;%>)T zjC#vD+zuz<(QMU9r_>3Rqm(1N{C#;$ARr186Y0BTX5IZR{d)E=m_{eS>1gCG8`07m zIKG)E|1OnwVvTh5ydj^L#^gK2`kT8Dz%}=yWD>0WvOmh@|Cp1p&50pJM$SMZ(B`B&_+Ko!~BP1;|WBZIgELhkZG4UbivwEd*ku)?p%Ex?6(ca zycehj2)$}9hXA5;2s_!e@+i`|^Kvj%q(GzetANXH*9Ab40ABgn0389HMt4=((TO76 zbRf(5_l;?X30d_U4kqjzmDkxb^n0W^WQ9cNOr%znQ?S{F<7Y z+q1P1jOs=Hl9nJZpn3mV--xt{Is1cf5t`tP&Eej}X^{r>0Y0=ezVBR3lxmc_+I zQ8BS=&|QTspoFCtpF4J&DFa~1rBw7 zOKIk(kTVX)vq^}GZcx>|%iuCJG<0Gf>GxXe1oFH8`%R5RweU;|1*(DEKR_yKYi~#0 z*TOS5Gh0ug9x47IIiaK+FJ__Cuxm)i!0@fhpK91qhQ8RB|5~MALhdaFH6O-GCccuE zaz624LUvVR-V#apD7sTr3{^!bOdl1zWWfL%!p}>u0+_1>vZ@2^kz-dMF0N)(l=Wie zi7yPyX zz3aPkhvcBs{ry3y3Yz|DHo3&~^mIt!$j!|Susj4$hu0U!a8djwan$q~n#^W~3(i*) zmc<7h#J6h4rqlD6f_;iwr;Q-3qDL(@W9-feu|_FB?iWGZkU_X_sX3we))#!c%5`%!G2yn{?=o5f4c2!|(nftadB5wQvy;z~T~`(y_)3)wJhfJd z-4V87(;lth;?Pf%c#g(Fzrfq_{Qe~3rr*8y1Bq&_G*x)Yzv3CdjA?|O9vyiw4L$qB zQ3yE$=$SXb@rb6N+n?hkFB^i#EYC`ZmY!z!$?-X&Uzn-Ao+)|YB< zMskaE9`&!tkqA16kF0S|)=NbEc)Xq4vAw_)H=k`+J%z0N^;a3hWM4V0(31(XXhP%Y z^ud5Wwi=8}9)}&vgOBsdmZ_d3*jl+aT9OJ0)JyzpW|Kv8({2rXisQ*i16^I`-K?Y@ zm7@Gd6gWK9Bc*eg@(Tfq?x~s5VWOfMf;Z3$6~Hd_JU{m*!T7?8=#jLWEo=i;T&8}k zRCHfFxlL4Fbo>%@A$cNRU@*$?Fl}t`!CBr16P&$W@wDl<=}s6CYr#;Z$iHB19*qMU&OYGi@;04GrsSKk@LAv?Jg&Zjr8 zmd5zSb0CkN$-QRJ{Lo!`qiM^9$f8Qh@qg6veypm~cX?~CZ)|FW*ZtQlURV)xCY^w9 z#=c!8^YkgrbJ7@z+;Ls)Tq{kzKl$wAA_+{xBVXiKsmi7IuowRLid*=$!dm{g&0e3C zn`NVW$&!8cNsp3)wye25#nh1I3kLckC6K;)zR*2VvG!;hF`7rD|xf zQbthtPct5o>J;M=v6p<*S}2RTCeAJyxW(bNovvKew63((SaVdYzI4>|{MQVf%3BV4 z#a2p6)r(K7ghV1v&h*q;3r=$n$DUdQcFDmh#jVS$<_rwXGgc!vY+T}!>Reyt%KAaKrCp-UWDV5AGr#&v~qTJF)CN)M{gef#ld;lr3Txg znP3(HT`d2jBN?s^2CHSjm;vi3dPF_H_1p-&)3p+{Ui(5Xm;6BGG1;Q0Cr0^nRr3#s zfL2vvyUzu;4tC-BhQMCaXB3S+HWfP(p{)MB3397RBXy& zT}xUdJ@52aJW3*K8Ot5AB}vSMSp7b9JZad|fwRmDIlsaSV>wtGimUA7{3PM0W<6RZ zYu2{1b)Sxpi8}dbkP9#8=A%$6EKZjjJFO}U-*?$XR;5xuCGaIppdgz|{zL0(@WCl@ zV6@kT=QfVKTkZ0?LyGb}Is3%*(O0#>Sn{^6be9g$sq3d_>K6n#A~Ls;%Lu8}2A(pvVc zo_DJ-LoOmBUdQ6dvy|WQ&miwk_PNTSIg8|aLT0mz9`8P{=Tf3!v}ZA7Dj+Xe+F`LV zb|0a#)nlk*pYzUQ$!T0j!qgkHXGWp(%f_+{Vx>hjMLOMCxiT7MR(OE)lF0~-r44V# z_Z)~lq8@&aQ#cEDhRqh=7~?BJ;`%Zv-SXDv(+*>3jYwOjxfAbpD<7=!fGgp{Y^d$W zgIk;43W&Bw?b(Zmp&Cm#H~#rCMMhOek7!5vca^s_Yrcx*V{vK)sK0mr<4=Nzd~C)q z?yVJ?4Q$F;%{2yO62}Z>_rEqRtoPA%XK%0lb5gINE$&_?`%GiPT;Ac1UfI_%85j0B zitwMFth3du>oZMG>9=XjeG8Q_{XtD8b8Q0^+Rz{`?2&HPe(GVy6Wub#QD4YwX+l(LMYM7H&#uW8)>$1kv^Pzx?wb4k&YH&hLB&iwMbHLGx6+Sct zYi7uFISIAQ$nWI_3b2c=my{D&zR8?ZGh=i0w4Zni@{2AySt?^SJL2WW&vqj-Ro$shMQed7 zYqL(KN`*76(xI`KH^r2F2@c;+9?o@taJ=13;K%LW7ON9hHNm{E zuh|O6EJShsjLnsS+qZIs93Ow`5rK22Exf1cpFvL5SIt(|hBTs-qM4Hh>KS)G5-G^v@PNZbaw*}DBRrO2KlVyirKq(GyvZ z*m`3qMnnvUaSIm9^o--o00HfY7?Uo0C>U82eCeG|qF*0hv@>BZkQ?~4Fs_s%>|8*b zXvUn*NL^=9Pl-d!fHsc9lfo!_ulcG95WV1@Owwsz!(TW=FU@Ft<6lC!{E4@KdY65| z&6|}^6ea$Fz|Oy@!$Z?;)|;1WE3Zs2jRmXIaQ)*c`dyh#f)OUdJ~?EsU@_kEtNeql zQCKAgyUzumO~GP-cAB; zS^BQM#i0EM>z-FpOOD0z}0xy`On98|hS@Kx}$aU5PZUL1q+FW9u(W;6Y7 zm0p2Ul5hW@4SIIGS^7Ohg4Hm0vwWv8Ut^CXWbtaJV!_=nQc}B5VKUEt=#yVlg`~{Q zr~iaeq5c(G0qgjvx;hJnK!+|QX4~G4-l>yKf4B*O&WZnPr1`xa@a<>t_1RX#^%>Cc z)6~?vuyFO{_5@kgz;i;P-nw0)l}m`KA(1vhIvARRZ;rE@4%P(r4&kS9)e9>-)eDQa z+!}qO%zmY{wZ5z|dTpc3g_@`w7RC?Zg5jJq=&})F+|7lr<5Uo-0jfFO_NH+@yGbEA za78V!8FQQTCj`}yBuZ7ReOyHu&oG(#7%<)x-=4hMLjWg&c_*HGC*Xr=iKO!dFKh$b zT6k0^*5O{%nIvn`P_Y@28@s$tB454yxRnU3y?shz*sq?zx0C!fk2|664a4EK#x=?v%euj@_?1ekDF4+qTVFM{aSS%q zW)&byP;Y+Mk**X_u*EVii|S9XZS1eNy$+cG_zG!9KF?x(@gtOPIK}F?;lU*dOgEpN zWHVhwtz?I7TMrz@N$@!de|9>|EwEpfoXOmd^~B2GR@x+gl#?kqb+3BPJI-Yr%gkzb z5o#rv0^3)(Ii4nNI7()SaZ#OfyKXv17E2supPGJr+nSPcg?a}Odk$vnk5v5@RsryYs(#9X7eKi` ze{!2YM#W!HMVZ^+U(li?EuHVg^PnPAh6C;MS_*z!W(iV(RnnJP0WF0OoThex_@owbm4G`ZlCv!GY#sncK=DoNAW_Rw#q zb82$)d9?^f*HAxgL?Eu2^Nr=R&WY*8+;1utATRlV{;D9Eelp1gsF0|BL6 z}|z2?C~nw#&vPV*omSPuFea#pvtnrJhxzd#wbfOiXvlK=PvbH{3G~5 zsKH#wBSTN?8i+f-t-@UI{82Rol6mve^>ew|qnm>ZG%+S_H#yJ$b2Cd9t7A(pqhf7P z%I_Z5x>ebH9FgN%17Fm}9&t&bmMW@eBdU(T@YC^Ua;qyWJkYM+s&|f|(O;WQEv$Iu z^l0K7_b{0|Q-wBBVIY0xSIBlFj&$Alh!!}H0xX@;J3<%i@X@jQOP@B>CrSFv6AR+D zg23>vOrXY=ZU)!3d(^|0^E%nuVBG}MT3oG|9oeMD5c{niNu{bO(Qli1bj}Ms1C_+) z;HAfkVo@7`*)$1nT)2wA7{ygDayZ*#zIZ@pu#sWiH@PZl_pV>LFl<^!#BSa__*o&A z9VeA8Dk=IYLtxV64WK5uwf!OCycKj!7qCBB@1qmju|T75S}oF0G%GzkTU-6(*%l$| z@~1&oieU>_q-i)5hT+GeZ#I_9I6G7JhvUSfE67~7V{V~aTbQ$vhL9o8!+S?`aGPHlAAp$*NhJ$0n2 z5Oc0{%o8R1sZ)GBnvkr^z%5tmY~14Ls5l~t*d|(atl8JEI|ybX6at*&gvFY(r@)@C zA|BeVM&kY$%y`N%=4`S`@LgNyoo)wd!ML@VVbF;VRw(7$ejeJ6XV^!+FQHSR&>$A0 zlxR7FH2eg2Ky2Y(5 z1|0v$7LDHo0h_Voe%m{m;F;j5?R%4c9TP4xw18j+qr?oXHIl_B*0m#L|D0-=bM~MC z`kjk;&F(yroC2d%RCCY3ert$n9vVcv7)O;kHsQPd758yZ3ZhjhrHxpbuR4<_hy`OQ z>Vv$L^K%qgmh8d5i}ZZfCW1uGCu|)=QDv56nZMalSo? zW?wC+wwcnJ>$ex`M%~jsx7y?bva?^bb>*$azSPwysAq%|ee^q;f;i1Uf+*q6_jM-+ zwh7WTOwgZaaELN2j=H;E*ME?5vVW|3vsRF3+aa$^UN-8Gpot%_;_|PWi{7=rWPa57 z5J)#h2HIzh6>?4}gm4X-Sa40^0e@;I7Pp*o6^PWJ78o0Aj})5hjqYxA-RXC6-P);k z+v?}J$e6Jsn1fStARqcgNlcC}-*;I)bOQfW!Mpujb98jR9f5tml`ws5yB`|b)Mj@= zJ%ADQ4*Dh&E)e^1I2zn^Ltu+IA+v3){Oo(F6B(V4oQM>ebSo-A^}`SgffMewMloKp zBPmV8*=4VNjXN7-SvFe)U@(b(8S74c?cvfr8fQML?`nkKVlFhf5lvEsDG1Bz=tGh` zPkBerFPOL29WxC#Sz4h@jU6#wG;C{5F9R-2RxWhfpkB5&7kf=x9Zd#<5d=YJB~F7H za8g9DE>@&Ul=3Px*o!m7Z8^yWf@E$w8Bg#WMPQfPwmnZ=?M$CDwK9jr&ZLIaITM0E zPGl3a&A4LQa%EI$MafKRvJ`A)R@HJ96EU*8)Q8R#_FCOch}+cA;^vPFt7Gmi!LA~l ziyH^FY%AB7LrvKY+Q1qPPRv;pT0s>&*&$W-cAH#e(a=yyLR#-VVewtz{{5rHl}PUK zCX2klzwBm(f-}=SI4|EneP{kmfpel-lH8^#K18>(-1_XJF#6o9vLCjb&*C-ZB;fb` zL4JS0kBxaX@mG~=O=D1~OjQ3&-i=dinJ<2orivQRh%>Ple(y7yt0Qmh^PmG~HN6Ac zLaLA#y{odsAAiDbPULhi5GUi7$B7L@%GFB4L5TckHD6n(JZuViOjUZp`6d&^tqV7A zzEdc(I`Gkx7cMrjOldMZQ;^?i&tR#-^eiP3;Pq4MxazQFYRb>EGnVXcJ~ivl53U^$ z0O2S$KawwJQ{yEHk*!fV7_4gw8V(1W{^z`e5>%+R)Cr~p@?q~t{#5g;v2y+nNJ=^W z+MvhMgLJaiO41qt0@Haa*ZYu$j#QC{5JK=nERtVs?FqbXFT!=>-?g;<(ZK92MaNXU z2k1h`OKsolgOd-*!9K{r&TEJW6TLBe6^GMT8dzEh6D-Y~dIeoSBn*7iE(dx-ZR?qfc&q6QZmxBj)~m5t}9FWOxno`TDZ2wC3=6x7V; z+cKmh$Y)79i5I1$of(ZIKX^~(6gB?Ndg8__R=2LZ@CQ@i*hWtxU3eoipTqfQ8)B@) z#;;S}f9P0mV?GI>P`rRfohs$czUE5VvZxa|naLktoSe#^l)w*H43`R2f1Vukmp_tO zbt^qHGVjp1LBZqsQtrZ6cb|_8HF#p)@-9C+%lG@nQtsoEeoLKi~YR*q!g9Iy|A0Fq?vL01zhdbQj3=?;ihUt zRG6CgCfrZJtjuVW%K0J^SAUXC56_$jt9qtwH_W4E+g@%g4((-C)H5I;VlD37sE)6c zu zqln=(FZEs2~`t% zF|l@)v4+WNw#aqbkFZnR>RrFlTc!-H>cBF?z(AQ?>(h3^VrdI{R_3%E(aXw^1(<~; z16?2MkBYLPE%q%7$sp&|$wljJFf{7>ieR24qu#LlnM_vvsGSQ-QVA8^MYevM477f9 zOifWoMN-pumq!t%XTezuLz9flr$&yCD{AY0UP!V`6uA68tA5`5qmBu$+A^lrVJ--* zr5lVSWh~OF3s*dxTcrUSQ(AgMMGpl6{g2CsSdM3rwx*MV6i2un+1P!}ehB4s|q?@7xVec9cG2 z#P~i?d+#W&>42)Vwr(N>p_0qeO)bn91t{l^7UWX#Fh*4*{$=rsC30(tugdL}jI%C9 zqKW&~-ig0FSrGqfBgx>`f!#6qiBHeGy^f+EIE?v^MWM`;)pezEb~L%Ir@OL3 zh&9-%$jKXS2>GAJBRk|0CQA&ktFJ+J^>ra|+q33b$~6zsy88+b9ZyMwB=xA;U4go)c{S!UcV13APeaF}M5>yN*9n#M zqJpxQ%})`=C%fwbPRtbJ9JgKOYru4Lc3O{}7Ug@UX;g(4v+p^qNd3bo-KVF4l=W7>Eqpb8#9KwQ4A&<6sk9BsUBt$uNU9k(#{-Tp`(Xja{!Wz_!$@!;l~ogNLvM)%W#*1OTGK9d~K z4-%$iWh2)Gre3228&%7pIMy((DKkKy3XWVZkH*{Yb9We7T+MZ1IXSVpiEuwtHfnOD zyX8)P_t9NM+mtU^z1rxU)kqdb2}sq>zZVd}lNabj+|SHch{i5|=+*i;WTKmS1lt31 z32MkdP7H77%Pak8-kGn)1B1Q^)0@l_5?N2Sp&Ity__UuF9{!g4%W>L$r z$xZ$ut_{Q6-&CHjufrP)2~lFtHq|9;CMj)_xR+yd=?Se!C6TuB?UvmEhs~Sgl;Mtt z0Y{acOOaX~zA}RT^6qQzE2==)U~EhI{1aa25{Vl8i!o1K4j>43!aUr5pMSQqnL0R4 zd@kG4@^Qe^lIGbfI@&%KyRBWXU5%8^j{eY=Y%R}TpfwnInK4U@+&z z-t%Ogg(bDvmu)-RENvO9;UwFAzMQnY_NPpz6zoVRqr!X^&}cinoEGl5-AA|NI(O**I5ZVUQfP63IU;?-w2YR+M4xRKW;uo38DHq$@M zXOMj4S~qW=`+B-F&e0;SQz2;$Zp$VXlBee;{?sOVon62=7*D+jCq5_oKt+tPSEd;? z&pi7+B6;+v=PB8IV~~s;hbkJ?dxUFWR@vNq@F2+J)b#3#Q`Ah<9(nktv#+maX;Tim zyxvebsv3c_(|e+9nkOIYFxDQ__qZ~0`01{8l8O8+@?tBSRI_UJHKFZ1ZD!4V+uogH z^bc0rU0+I?fdNWr~X`gm{|<$c|j`hT9=PY_}e3#4);#;1=CJ3e+<66eeWzI&a@! zBedEN7=W6R#%ICP8hA-|lhq+8-fZL?4X^N}y>2d}+}e$NtyT9 z<4j)Ua5O@l@JY2BdSkq@%hrD>7R;uTgK-sA!-7H+rq`4uR7ll3OD%aXOcbi}i)fxq z%s9J>ndR24_N#I#%coRRgK`l!X6=`b%U|gwy9=f5GdD2LDHAGa6F@5sI_Nmz696 ziI&w?`!Y;}*lzrg6)Io*%dZ%np=8U6Nt9CUCtR6TdEcL#og{rq-;{R7E#h8>EU?Dx z2z4`gIuxi9b{KlBlQnn8wF#H4&-x1ZP;F|jab0x@`a%Tdkh4kCcG(lrZ&hv^MJ88QYX8PA=u07ds04xu_86 zml^Qlwd4G-Af42j88w2kt?>6dm=@FKNwMAH z5h0Yrr%r`?bPQJQX(ZyNRQd8NdGD54`LORypPAaFKr41fLw3{@>q;xfE@~#XP3um{z_XeZg9@>1zCGA2$95)W9QqFG?C+tEG;l|CI%sP#p(YfCI`vVEL-2(a$ zgTWg5#M&(hd-F$({7y!*WkJScql&u8ZQZr$Z08R5gU01eBvTMi-)#RhOY!=d6V(~e zV^K3%_!7yQuwQi7pe@#x77J3`-Mtjo6nA%bg0q3*?heJ>Jy_8ccPCJs;2sDB zZuU8IX1;sxoc}YkCTl(K``AyyG@kdK@8jTXT!a&d;C)%f;jNWSLWFnehUGk=+z))8Q45!Y~3ifY)! z$xze|EQV(Fh)cNpE+~PKB|*R1-i&)19>@00{@GvNRs#SZs)K0Jj1kJ$cE5tn?qWPG zZ>iGQcNI{T`qQ{K4|=YP{yEP*Iaq5D972LGB*S>dmQX#=!G~CTeFZq{)7Ue79Oq!c zk*`t1fs#)@qJEwQbHiq|j-HcH$l>iP#BGuOXux?&y+92q^zdQZm;0XLbL& z(7rbInrtpBccbYS@^||hw#-6Itz3h-R@}N>=f|p+U*tNBk4lID?&z!2;i8{{^%e~u z1D=nb`wc~oiViQ>crsU2b+je@v(d9ka0*ogUqwfw8O^lQGK;_l+EVu4DOPT@L{i{b zRJiBXnE|3K6#Lp7S-YPQwqVR0Nc*gXU5;R`h@YZb&V4vuPMGsTbGN)l$frTmQR%6g zv=>M;cyHN>=Aob|@g7V493G9U$Fq)it8dQp!wno}B$Pgkp|MSvCSMiyCRp@%FjqGp zylcCP``0^>un_BR=&yV<8uqX4QvHnPZK4R+M`A55trQ@7Gp4C`^HXBWkZRjO&6(eM z4nin3YLT-zX$L}?XZmh}XA^qV)G1)8cmVJ~Fl-ZiV733_7?rldp0vIz>PdQxjy{M$M(%?lFU(0O8a6xVuL6RxgDGC;I3O^v#lK8qFVh-LkqdHp;j- zW>w$CVbL&Ewx=c#`A$@CH;N*^Y;Uf5e$JKw>qvF>ypj)f>;H8oL|V)^S}yl@sWY(Y zjQ=%;4^A_wwpkf+$H|`TM5oE}R?Nq}yn%zg3V5$%cw>6uVhCS-BK!G${dGyDO{{V}cVqWNd0n6j8 z6%kG_iup5MsGv^}Dwu6tr_4xW*Ivfba7D*lTLR{Y_cClTKX~Lcv!T#W9Y`1!zCSWt zH$5#Ml_=Rs$Rmmv9GdpMYbS@Cg&a!!`nr-?Z!ZclTgQ7e`7}H+PBHgDquLQLM7t3^ zFe0koO0TG*89Z7a;X6AmA)BegsxGDMy!o@Fq>M;edLSpbDPY@OfRK5+TNAU~#;{1r zv(Br4-4H|+W?!{HVfeEPW+FgD)QIflEQj&iEWgv!7LB~^vi$o&Q^w+7YD#dx;4d#9 z)E@0Cr(l+hDCU)7fTC}3JAag`+B>}^fdm|#=)X$em_i0uI2!mWYeBK#eO23w z?zYg|9D(}NXx#Gh46~9!C--L+Z$fNkm(MXL3CnJ0qL{AgBFoGCR0HVSNy$%R0I03} zHouTh^rx)dyL}sK?S5#E>fJH)d9U(G{_XG&_i`Qk?Z9OM9Nj?qbbvfKU_vlJ6Ed}n zK47_*^yO%@B}3TrEDu>9J98+(Y~8I%V6zmdEGI>=&8eRAXKQ+w`TArz531o`5#7*U zSAhR~z@G5%^loQoPgP$tG;SVG=W+5`GHi3S4oB`QBWvCdbX9Nvi;u7N@+g|CLcx)C zH4Xq^W$r6}YkUO*CG7Hg5xX3oaFL{i&9v;{F26?4Gea^C8w z7LZ70)6Z8p$!1_9WoCl*X0TW;ew&}8vQ}p?P|qEMMvybCs>zcHSe36HRZ}Ihtq_rE zZ9Yv&)A`JE=8+!RtXWiHYwZaYkXa0P=B@Qxh^fZAr838>ux~PHsz}ne%t%x=5SR5A z^3Y`2#LxL|p@etg57Opq0~DqaOWBUqu#E5TE#yCTjQ*%;mxwPODQYN5l+on$?wJp? z=M8c{%H0eIzCa4Fc_Q#gUrQ$C=1A(*kvXgfQk9l@d)>T$QK8VNc0b^)&E8+cxltpk z80v9Wd)oo_V3qDLPum9Nypw`vxK4#Wh628GU)YgO=d5$$BrS{yerX7D;53)9L}OhG z25G(bYR`BrU}&WEkUAy;lN0l2dKhxwbqsi*jbf_7&B+A%%khZ(3_XZr21#(Xk~rzcCa@ILa7DONitHU3M>)lf6jaG=6fN4J+F1Ef-qkv|LE(Pg5yRVt zb;(r?=#oX!H|GIGDY(t(m^e?I?%U?M)Lm!$D>jic_ORcba*>JGlNCIlU^l`YvjLB& z;#2)Itv5&Wq9|e0_Gu$jS^m2=$J*O%Ya1PIR{IA^2Ybjbb26oS9?Ey>_t^&4eQCmI zE*HjBgI|CeRV_ksjJ6N64I50^Tkp&0m`mE4g0^zM}_FBF|Pb`+>DM`!k@2oQs#5pE?yv($J6Om@(9DcPNP40rJIW7xG z%%s-kR^Rm+QB83Gh@E+B;)(j2jUcAjFwGIv%@ts0Zi$vUyD0ITw65 zc!WD@x%NI>AgmwQhfhB1>$Dg@Eq}FX@YNEi;0#VBrKYI-+3=|uNo`(4PsnLCox5vE z=IpcoLF9-(^5Fuw7#Ax2o~Uc5rs6|Kf8$-zuBV;~5lcg3)|{XmuC{0ci7-A1wOB;e zZKGCku_V=9*(Ddd$w=y`-iBz*LQaRvc`8{*+(yHi9)nZ;(zhOR)Aqws1}|l{$|0cH z<{>o!Va%q65s~?FzFoH2*q@t4Sy|tKAcqrn!q%vCDd7j))3Z|DDD3QWnc|v?h$r0*y%gPpZgjK_&4zpq09uW&nzL-#h>xhekdFK`!J~31mk##flhXeJ+>7b2R7Nu zT$9nsQ#?o6eVkZFFC*XPuvt5=RmL_>P}WD-uk>Z?x#zwR_Gx$=5RL@UIAnu$nx7lr z;<)UdhBRg`iR6)1uNyBhxT>gW&(o|-hh!rVVMj=Om0X3~TE=xPD?#@q2S4Iv)t|TK$feXK zV({z9_ zKfQ)yd*G~EjSCYwb2EDwXS)GWx85qCY7MO_0C<8+mSnfMT_UvI6a*8Z1u+)`!{9JM z5Dt50t!ImF?>H85zmbS+-^92Q17?zK> zh*cy(VewGjS)$2jFcgEC2v^C6$J-X9j#9U^oN5H3%o=S8tH_VL`3oOzi|j!tDD=`` zaJ&SOmj&vuv}j4LE+o~*S^FlGyJvMz{JHH~wjz|M$|CF+xY->*p3@%X7q?(e+5)Ur zO{j2GqPnGv;JB(PvJKDf2>(m&FtQ=o5KjzEyeiC$D`-_rdrrg5$!7X17$~UV?Uht~ zSh&DGl{$!vHq#=Gj~Fu?zL6&Xthu19O#o@h&pU5zeO3gS;(7xJ>0cbhDA!K-Ue*E$ zJ2pR+hYX^Kfy1t0Hx%~2qmgn&Hzt==GPHCFq%!*xl~V#IJVjhXx%6FvjVNZ{OtV(? zA<(i=U4mO1$v~>VG*o9$*mgJ@EmLU*;cIm94d}LlzS!2rXx|}{h`1%Lm210k05_BL zOHQJcMT(2rZeFOO+Qg4I3d^@lrK%$NtEb^m@+G~a76+tiE=6Zn8qy28@x z*l4@IOc4Nq#ua`|oQ)evH+*iPvf6qF*Q{onW1b9O?}|BCE*2&WSjgo^KZ_^W@7?1s zv|8<^44uVynwSpjOxz0*P@GS>pb=kkSx4DgeF3=xUlzILM$`eUC)1$ZuQwus}D0wRlUQ2Qc)9&o)=>q z9wFJ5kqx2O@f}QgLfJ~fn1ljO|0L03{mlYC_f4hf$a_;JbQ8_VAd+PaR|JG}Wfn{J`%YX-WbUc9a?njGq1$QKTX+!#3P&LmFrC{D(YNB8sc58J=5G{)mfF#5 zIXkO4TW)K)>oHG7xQP`oqGT}(8}mN~qcj&+WyKGc4w*4~^slO9!fd**o4CT=Xg##T zDx1f4{*HZ&&TI*+do0B$i_NB!UKsyDvDSzm`~X+oQ?1~-E))%FlF-E++YHuPm zRquwJN>=p9)vs^_P86zl{jqK%yrOddl966Z+zSZ^$nk*s2-h%5bzxaw-AgwSw`8#8 z$iPd(Hqmad5LAN+AcBoX+#?p@0ySpT8#m!e*$eSfABA<4xcpR6ng^RnhvMr9mJ&=ZHj_L> zCuEdAk&5PUVN|8nvIoUFVX^4fnJ-0mhQ*U%%*(J3)qn@L_mmEtV}E{*T&1ix_w_Y#}&o)@|&Ds4)k`Tr@HgcbW54zWYGnUtzp7KA%0VQsAQN-Xk?} zaI$Yonu}i!JK0U%vqIFh7WE7#&XO-Ms>z^8u$pQs!tV!BwZux9SW#u2p2_!z+^DzK zGXbriEgR?4-G~RdH&9OK^6LIXph;5Gt+E$QM<#t}+`#I3?yZ(j*1^+ySCNiXBJMko zRgMyIT0E`01Tw!gS?H7E5mP(L=E7X zMu8EJx^531B9O63Ar?ohDEUR_D47M}ZGGM3;+D~9SmDE!`olyOhkHrc6Ztkx`PjK- ze_P<#l3O%J*aDl+jk1ZV3SWme9nI*Nb7y^A;46#2Y1&H8h2D#IL*GmjYFH+B4t7#~ zS9;U+EpsbyE22;DrBV5=H>dj5eO+9p<7E;aEVR{w7kOV7Yfl-jtkBEj?~*q;jd7cqyb z^l>b9MXTsE+1_$R=r;Pn?&wlj(=4Uzh$7~&wZy|xuWX8%n&;HmV9m|EirClHk_g6E zc)7mUTBn)#FrDKT;4k?!l*G(c-8x&)n`zIif7a7nL7!7C{&lT#M?tpfcFyQPq3OR^s;YxtVxJeC?*h5FL3G)URDt3pD$ zbF+K5j`1wGtzA_Re#yEc0-y0b@^xh0N-*B-biNChiTKlE`1}65iP>s7I9YVFL#8gm2NO`@uD zI^yP`a2!4ztv|5K3x=v_in~h^7FQ^xR^Dqaa;Y_N-6|f8@IuuIc~-|e;swL@W_^CM zA#jMtCtO=Tm!(8BE=$6nW|!+dD8wzu$fd_?%BCCdH>hV;o>~Oi5w=od)hxt?!z8^YEw|Nw5Os$4xI!7`kJPv=`i?7uU@3c02tyqBlO0HL^QyNp z;*LC_8=P9(alLid^%m)D7_<6L{fXJzWr=>z89EjEpnF!FWh{ED2cL$PS!GA|eb8{T zReUZl;p*&Tg=!vIU-AT}Wi5bCCY;Qc(hS*5pkFSp)r)JWzC;aD-u=xR%67K?U=1p{ zMZVvjPa{SBF2cpgHx1Qjn=`Z=bh>5Zq*i=sQUj0&rtg1Gk62 z5M*HP1+A(IyE4o>7j&aDMwu+Zg(&>aB4pBvJsVBTG{Lckalk@DwlWsk?VU(5-*rcN z$N9#PFwWNO&0M=TXJrWAiH_L`HVZp z#QtsXpxa#uNz(q=PG5}RTAN!$H6zVzjkxIT2IfMwp;$Is^b z29>}sm$#zEWx=atzq>x1JeZA2DX4E}~M^JfQ~Z6c#?vge%}~ZG8J~Kc1ilS8q4W$jBYJA*qmBE zap%ZDT&;rMovgA@cP4P9NUU1Pm4jEmm2mcv{qN;}) z62oQy^mugW(B{gy)BE3k+VOVx(a_2?Y&Q2lUrQ!MrCb!TltDOCyM?u|U$0%^39f6M z{ur}4N3hxPe>X7{B4%%L)OUUTG5oM}IIT~;C$!gxMiB2yN_>{PcKO8axy_`O*_(X; z0@t|%y-ADh*7k$t!P0Fzr~Sw)fHi#40C<@5$vO);d$+h>=$XFubw(TE%}WxN?yVSA zC;I(a!;sy76K%qvJ7WF>kWK;}&+W2k`zd|(`xH|;jzsmyr2i(1He{sL-UPH+| z7D_0*YQ%M|8=KP}IG>Y+5?=V30{|J5r58}u#!AzcTuq=eYd0TZ!u3fL^i`@PyfO4Q zPKK4khDhvf+v>^~g(20HT%~gGRL?M6dDyKxV9!xxK)q7X2EgiS1);&tZ5NjlBL#t! zwu1c`-^$uMQ-|J2+kp==|b2h7R|!BX%Fw^+rqUeWH;p$baN zHrLt6S@ah6PCxnehYs>Roa+tQ5aTMc#f-R)nEuB{YQ0yubgZMjPfHXlehZM{lcOM|)8aiHR?Z}3H z_Q=GfiLxS-p;JUVKgM$B}40Sz1rPm-yA+AHP18t@Tt)I=GXiK8M{YH2*c{0 z1NMCB*Y%kBLQEJmfXio`rTnZ!P_NBuq{bc4evGH6Y|P~&byK36HV?+nEiZw2m+D*@G~!>ww4u# zOoWO_p@S2l_Wy>9ylXNY?0lE)Zu^MK;4ZNtI&8M>wf0_d`du)~yt${r^3d@;;N6VA zD%~)&F*PFz^fyW4yScNF^a5rn(9tv$lThaQMevgE9hYqVs7WMWQQ_^{W^mj(vbcUhFW8CFZ^+fTu;)mk#jQl^2&mav-QAM(x>WIiS1 zX3$(+1YR9gEHG~*s2N{o#!zb^+0w|zj5kR!dfK0*G)||-agq3Uq1e>>M=i6*H?;v) zf9C(SFyJVOyG`8z(BiST0ddfhx%>8&<}TdT$$uzo*M%{`t-ZCB-UfuyPEJ8R;e`bM;GBc_T$AhbAwfoyxg zQls%laqnpBCqfulg_t>YcCrZL6&j}UszqP6y5M2s&T_mi%LXxr~x20E|LLAdq zhTt?hwqp|d{;n+`v)qqpzN5lKsK&wa&q4DYeR(BtecO8<*_Hwhmrldsw3jiA z#(bC!IREN>0~pK{*BG!g-*z+SqyWtGwbUIXe zsRFpQ6(~)M>9yKXBQ`zCYqQro%N1JthhJ;TOp)u)0 zx%v;zkRhhSaJFSM?zih^Q33!3(g5i6~fw5(fw$bTZQ9Y0smy*EOhzdPJn`~u=c+z~1-w6ojmr7y-MNThP+kEoNUMe4{af}nW2JjJV=bJ7& zZUf6|nMX^nD-DP098vD_th$R6M#H^P2i;AU5723lN?}NJx z;_hRamM7+|6<}130Z*EjJX2XuPTF{idsK$-{s;06Rg}Qr4XO_d`}y-gr#LAo>5bT3 zMo~%0Ct_j+35jjZnSbF|CmKGa1~Y;ex;55{moHGSoj@QOwAb&)b4sx29!O~-{!`#MR{>^Nku0V z8B|iKl2^geVA6M?I_rt{Ix&6rx}c<_;pf}|LE_Bip)Sr5gG^K;6$^P(q*QHgO{MY? zF>X+8DY`+R*uef5k@oX3xTSKB2EnAj1qmymPvT60TVKELyodLP4jV5*Gznu^XA zL13-hzJ6%duR5ytnQoLdg>=;KMIBj#DAo93dGpou%wNgp$XFf8R9rC1%9$ytg|hE< zgrKWKM>dszWTPo*Xpk49NlkMac!{6z6}|msk+(-Gr3>V#-+B>VK!%_l3wa4B1xFwM zd<*5uC4Kq{u~1pR`|`JfMSZ8}<7VjyWHc(i=yRm4t$Np}oz7Wu{Fi+yT)c#D^)<29 zUf^|Z2`peF)sK|&v{F{`kJfT!hY+=73*0Z8rK^Vi{=GYRDTk8#f-0&~Dt4bgvRfys zbK4n`+*`B%lpdOzI#_I5=U(qnxAD4|p5963CaP#DRwEHLUg4<}_=xh1F|bxWp;wAg zHs33b4VFQvPhGde27Z>^TXivzmZm<=(V5^jTiWK?N!q)=v!3p~^Y;7;`y%7!(p~Ye zk}mL`Gbub8SlEDgIBHHE>E!A|`ki0ks6Djgr_L+q0&dKOk{R?5Ji(Y{d5SuFZ-rLRjH0M_S!K3!tatGj>Y;R+=_u{4^(X`E9{HrWtX|ZCGI#e<~QT5U@U{PH&KKHX?GDFYM zd?}rLiZUuXLH5}0$-7h^esw!O2KWD&T@S4}H1?IFF^>^ZEs4GOYUs$VSXN;>FSphh zffY+d+4FdD*`&5x^09biPCiBdo8HSeD;G7ffr(X~k4>h`TtPt%D(~k721`22h!@=qzT3eW<2ZCSmiZTtn50P9;E*M0~UKc z_ZjUghb|o3rV*MO<2Ulv6uL+f+@y*L{1~{wY`DzPJ<4f=1<`yl?ymgh_2&JQnE)M~ zjD*f*SWNi!C<+n`N)J`F>*ow*l{>oD_GjG zARAW@W4EY4!YSWVd0LDtRU&?d8XN=Dej{YJG>0DHfaAA|qLln6ZRZa_0o($v!)1EL zlqviysO_;zw&r&BYyG$9k`q7Sh9n`mOR!)HJsBP0BYu|!*_zxb#evyc%_)VNj@z5t zAz}SkEzAUvQbRY>`SLJdIHO;;pfN9Ky1AdP#(OB@KMXF1d&&+CWNXVa%v=>QW1B26 zImmM*lKmf1;0DDc=yMDXZ`z3?{Rm6r=e{#s`vxa%bn;K2&`$}R-&Ak1y?-M-!~$XA zD^^}S(BxI8j>ygyP06iZnX0!3==d!s-l7OUH`lLJnpzW(KP6U(e;4hy>cJyzpW0EH zX_u=-EgvRrePA=Ui~^YHBX81VuH(KwJN*Ct{aQKQ7zK?$MB)hkQUbUpvoqQ(=+&!m z#o>Ip=c>y}(vvsJgZ!v775ahT!@mLl3g8cvaC=YO-K(l6%IhgmyfGga!lzG=@$WC& z7Ua!||Md^F@yr~NR*B60|2|3{r2!{#d5C)XsG0KDM;;VT`RU+)a_UjCRVbO`4+*J{ z)0F>51`Wl46h>YD0DoNsY*XNRJ24Xg2P71w)>exP%i8#5<(=+N{Xpv(>de}{xXdJ6 zWCFuf4_kZMFZvu~Tb}>>#5@0!(J^@y*+gUh?xJ2o8uEecxysCTyMUrF+}>iXHtG{3 z`Ll{@VnkdFwaRd$$28s-+|r^;!J=o{#G)OpHAqI~zT+0@C)w|uvya40fEV;Og1K*< zf*4T3ED6&C$Umen>y<^;g#03WP6MgRZtNY1Hd|4U|4Zpf6qhw+knm2h{VyPU%<+P# zq#>Jc?bPQ(n*MbZ5>wgUp8G%J_r=c4Gt(M|VXEKDU-Etx8TyjVEvUg*)+#Cj4kY#6 z)lyTGHEw)auPe&`(5{V=;HU?5KR4UDtEs1|mghaQs+=9#l>J!MD2c^6A(*Dqy!lmf zyI79i+^n9QQhC3K6kwIE(AZVgFeu-vB|9f6udJH02hB6;Y#4Txfpyiz%-y-US1!~_ zQjqYoB5)=V!@NjESw%@ccy4~7Y_h`ixE!Igs^>R<=pmU=aERVRYda?-$H*}6J4bfd zQK!bdZSLz6pr}}kV3~;}L;frJ0~O^$X)?6b35g$ik+vmvYu=xwH{Rx)b4LT^A|Y2b zZ*0>XH)|X}5BDhBRy%a5Bt>A~4BZ~eF0g8k?KqZRp0wg-aM*s4t`+)9LDPLdDZ*=` z4Wn<<*8}dy`P84aU|iVTj{_ebtuBcH9~F#btO~O}CM+3j^!J4T>TlwxchN_=Bff!L z5uH!`8xHMKO*)3wDgGD#E9~yoC3N(&Q@)rbXkJR_Uz!l7L+fdA@pGtkMUNL1MhcTK z?@Gv|NrKB~a2~wMsRaIHLOX7+zEUCaldgu!tJQY%^5m^|S)IHpHqhItzaU=3lkJan zPJ~8hfie}4b%qq~^MkLKbnCpA-%qSv{*n=WT%Jq#?3Sh|uTgiF`s}KIkh=T2-hAzA z=(wn2x4)JvJ?p!EyEE@G$A_a^pC{HIXP2hJd|^|33}LI%ymfB78pnOzwGx-k0zN-ej#^!L>GVYvF4vS* zG_~TTm9+*hU3Q3QOJ?uuw^SSSU+A9hq%8u| zNPYA4k5btT^+896M?r6x48h6$mMmLeawQ~hlJ0jUz)nV2?|DvJzP226IHo7>O1L;I zdZ!-uNEO@yE(goCGSB*1{=Ru)GUP0;9)^tH66ktl;v#Va`cBnj!<%yVabcfTwjcRB zJ^AwdI0;V0tCrk^zQ#z2~Z+0b!Uh|ydz2Gr-a zf540lMFcFe1)3_9*g?3t4)GIFt+?U(x6(MwWf0^h4cA(|n|?Y_PpB@D+DB=dgh)EF zhMPayc5jqG*n^Z8IafzUJ|lKo3cG3rX0%xG|O>c1ORdIMIdAy|1*A+`1HE%f){OR+( z+#lsO=$`sXt{Ep*a0nJg#~t~9$U2YsUtpOHZcM2JSI;UNae3F7!O|*M_B|-%fBN{@ z@8`RKXLRPh+F2M2RR)s3g+^Cfey`J3J` z>l?DixaY|LqlP<*Hyg?cqgyA0>xYU@`_ET2qcyK#VRE^=A@!%n8$AFFB?I6{TISc>^dM>~|ZV5zm*R&+t;>Ho!wpj~}U% zDP`W{O~9pS_Y>Y^x}N(t3s>hWIy9wqpi?i#qjh(wifYba&XsL?mnSdzhM)8q2!Kiw zldLl@hzC21E%@R>=K%rnZ8-^tvTNffi zn`|BtVeXsyYijD!#2Up~_hlt{T1ra&2=o5^Ls=zR8iC&tH%aKz;9~aCmfXJH{x~*j z#*ZI+?+{>PYjgP@3dH5*Fq0qr!6 zcjms(U^2YPK?GrMEs#g0GCMmLl7GAA^4=PDb0r6q_Y+cd$wcV2VMIx{l=kl^dP7$W~^A=I{E z&C}ELf0Z?lL=^fTZDd)4f$0I%I-(M|*0dHN9HAGVcdoi$>D*&> zGJa@%(Wp=7%|eIooHqe)UzY6#YyZ>vOM%wsHZfDq7dWbqg7 z5v+t$Z+v_H(XQj5@~L9ya>TgF6VCbwKQe5bm}$*0Esm9d+bY1|+_ha7BCk?2h4Enj zGTK@_B)otKe{zR*$VW!ek0??Pz|j~>;9E)9L&SAhbMv(a9Ua!s>w=Hld1uq+m*grV zndR>7`Nz5QVQ~h}xB;gkWO;nlGYnn{vA(u*Au0R90V!aFs;WNnh(wgt2bB*WD=4Z5 z#C(?3lY1B!@JjiNZAK(*bzkzi%hq@V-nws5}YBzTFwx zZ6p@-Ag=Ub;nQ1_SOmt9Mm5n?WX?&y7TH1&x;9tai15JQM$1n5iO|y%TiV*%5&OQy zx!JENenUGp*6s$$I8T?DnX{x6f2&?mu@|(;&H36w<2A0K)!(!aGyje}NjBXb=p)8Ne^(2( z+|lkQl}5O=8blj9rBbOI_^*hx72k?kaeWy-4lan+B3-e1_)WAQPxrptl+22G245qt z0IHcoz||m%q^%|Af|uW`Te_NT{sVO%x$}n}bROub@|RV9rC!JP5oC1Gg6;-_xZb1y z_wsRJ5#j{h=fum!?LUPYAR{Z0K2Q0d)kWx|GAoE*>UW0ARNxPseTG%M{0_}-t3K?t zFGZKwOMyuXWwkwI%CwsHh#zxKTBe!5saHN}y_HgRie+BF33*JmB3Sw7VOxi_y54EZ z=uQ_uWLYIScOSlPC19=7HY~v85VS5dBjIh`3OwNV{DcIzn9Q))W-eIJDY}^2k(pX3 zkV1Hw1?p-NWESa%fl)X=9$;vxi)UM3lD{o)*Sz8083;L_B9A{#R7n(vqF!ji_$$Xm zms}RZ=5golrDYx0s}knZ7Z+gC*NQ6I5@x?CtJHIPOwWK)&hP49h`g36;Vu`P|1v1y z+2J%glc=kN6EV&_m*$AoevvQa7WeB{Q@EBPt%LUR-;+GG=le{Kt?#7e#*1|~Zz(D} zt;^@<)e;D{LdIi`)|xt`ooq_{pBI&@Vq>HaSJ?SW(~ms^j_n*w{LaYphY_nn&0mV7 z9*n^b6o$U{{Dt@@f59=73D!2yT#@Jsmv&bta=*~AZLvt6hICi?u<2DRwqS68_C8J1QgNI?mi9x3EtM;12yhj~D>904rO zHrvH&sUTfzQg!E~DU<~!k8BAAtr54E-{!szN91=|~ z+>$HVteh8RBdm#3RK>ohkEGF0%4) zv`J$g_VX+7)aqgRNhBYpEqYEGnugL!^7dCuP?A^1e~G=H!TX0G*dym)ZT;WWu29#z z74fb4G)FlVI!&b-vu~}jP0wIXeeb5-s9ZlSl#52^C;7!F!2@0sj;ORTlW+TzcaR=5 zr-U)vmS_iO0pd!FZz+ zC?BS_@`O>NT8#~g9Mp!nU$zAMMCpNbWwyBE1+zf2pz(eZ-4Cs4SfBDFoO99TZ8}B21=Fd(Zq1(QsVD(Z`NK> zJ4;;y*rHJ2qRN1W*^bdP-|1q;N}yo8VNF^n*yVc{E1PTjN8uHZQq4S;CXU0w6;;qM zvwZ;>VosUhtiPt6lKo&N*MTOK0EY}xL{Dk;5Wx;1`*~PgkeaL|sG$guX>|mfthLfs zV|B2ZhJ^@dN*H&0V+LEEP*WTYzX{NH=ZE6}d!5F7g*fFdz@16T!X>7=8|PzI{QfxO z>AdBF_8rY7pp7RtYvF%MG)a|9p01n)CM24(bJ2uh#%mEgeu##L6-v3hPcsdjpIPkk zq>g|F`_G+EARP~GW5l7~YpM#2&6StL6KCd+zYW}uR-#_eAldI41jQ|n2gr-sqf&Jq z9mtFo@*LeB{+?(^MH2|V<9zsfiL0kQ*T_rbXIW=7j)@exlRF7!sSud=1`ytkL zMr{#ypa|z#5jm*14J5A|KaHOq6G3^BK2{{S@n-){Na`T4GVAj{il@Qvkj&>jSS){a z<&kat^!AkwtI%^>rLDRc1#fJX>9@F=>r*ItQcV|ZYCYV#lIiU<$dP3d%lM&){F<;k znPe4zrZzw{I^|o_!BmE}4{K6E59~+$-k<1&p{mC7x#oZNP%KO8`(ENzffNH~!P&(k zUbN5?_KcR-`{6>!&x)$7Gxp0qtQ8p;$8tiGwS|hMxyQ{hDgle1w){i23l$DlN=kJm zPkpVe{=A=ErJ|Lp1NDB8Vir2updPAYFsU8lm?vEy1&mj%=ru%rN zut+Mt>;=t1Y_UR6{z1Y$nZJ3OMQO2NlfOi|*sLC?#rGTr1@rT3?fDIOZ`n;Gcrnqh zOKOd!!9?kGmq8dU#tkRTwok{Fouh>OxS5!v2Ye@) zq6OX5cMEC=v9Q=OyI=0JRZmKClkVBFowgEi&gMju3Pk62fzRDbjqNx)LbvZpHG`sEEBWU2ll-6&y)lkBZ~9{x4-% zPM|Hc67$OHvoEaDUbb&)IlL)7k^qmEo-F&#M~1x8)Zv*V z>+L~f`i+Vi9VkwVpwxzvcpCsZ22!@iyM^#_Xr&m}uD?21F2@K?BTz)fpuv=Q|+q^#t zf)qoyo$IvZrGsk;JM737c+XrG_ukuD#ud53d$Yl3VU2?{Iss3PI;|)DC0!7{fO{5y zoytmouiiFhip=jqDUVq9+`0)yAte2Vmp8eE(~Cx3zdr#zSLCWK zCy>Kb5|4#6Es=W8XG8<9w8KMrLu~JM3n67kK%Zu?g^4p1kC#<+YwHysPo-$yqu*=Z z6q!;6YfydHSfGAKo98GV1RdU1=ZbCLV*`&!>-j!#b9A&Rbfv;VuaAB}V)p>DVKG=P2|o!qcIRfhs$zLo^HG!;u+DqJOv6+n4f&T+B=@{icfQiWb_tA4HNmx$58@@zJMmH1LV#0)J znu-0std-VR(1g8Zx-(gep3BgLTYF;CQ+fwIe|a9aIelEZ-BMyNlAMMm)NRkiM#>lOLZ&CC7=A~tWBnBLl}Iq!R;Zhs*t z!Z%9&+bo{!NzCFh`}(orTpn=V>tsq1xRs$M@|*^e`t zspdqMkWh3NlqWBq1-o@Jw^q8|_(ZQepgI9Q!Vv1uG+_1~Ta2eC2Y?1yM`Wb~*_v5z zIM3tuY{C-68vl>GS=fg8mz`-d-D>9p@9o=>6`u8jodYYxN;Id)#6y$ z@G4QAQ7vJv4cVIzPgj%KR$oLKFG0gK1;35qVzRlDJ6vrAehA5JgulbW?j672P zyq4qqB=_FS$qM`I`Cgo+TD13-x`=@TNJ}Ii-?95vAhdALd14{z`~#U%HDK_e8ezKm zNnFvM&|zP5I^Wh(gS1`t--;xWQ;;^dIUACuYJjmZ-RTJ0ggEP&@)(m~veSQu`L^$V zgfvWgsYLxBh`W;&tl=0Zvx}d`HqQ^RFe?h- z@Z4AUe~Ayq!D49FnV{^sP=`hJdz)?yn4k&XtrGSaz)>Pj5+Z|Or>Ks7|2&#yHET(+ z*ohlnuS$W8xO|oNmKb}yNWH^&E!MhiQ(3yHkX{@eXaCPlnBIy&AV_g<^FphLobsFn zH+r>hoJK=*N4CL_nP8@nq!Fao*Uw5I3dDEt@{HG27FRdmlGcd%HTy4nx`B^OdIeC4 zr<7oM{9kLI>fs5+y#Zp=C&XFmSWbIrB^-Kj;rS=fyb!hm62PtplKva(E+m&#E9mss z;p-Q3S>mjjyj%OU4<(HIDtavTzkm1{PAt29rX>@7>4$80g;5wdm-FQqga#%aG(#LK zw;2e|q+7Ll@tCw9D_ebABOFP|DXb`KA5q>?>*c)f_uS|Earf_?owe3pYd&+1J?0qpx$kc#tg}}o zv)CL`82+6c$}8Y`BHJ;#a*a9UrggR&DgqY-m>9)QnR&j&0JOV(wR~PR;Zs}5k&>6E z15%RKCghs0+cKG+K9o9t@0s~Q4Hh!&JCmy;?eI;5yG)nrpqY@>(6ZAcD1$XEn0T+p zw-Jpk)$oQnKt{;bIJ@Uu1r{Bt=+Jk>_~0llb9c)7+#l1>M_TfC3+$EFXdUe7{jYw- zu}-Vwc{oxkm={F7e_AM9;g#9 zT3uF8SQuvi^bWbIseG;Nn0UwYUkuvgIsgYKMIUEhFX2CXrKmLL!?|j&2NzOOQYYrg z_1RD5lmO*qD-8m!jQKgRyNTVk+s6DVWWb4bIT)V^akDf~~B@pq! zn`-=J;DNS@5IEF1m$p@#!US`FY_Oha&}<5zDH#jL2y(jfTckVeD+V1HPC9TNzZeV} z3}9za2WV>#s(pCkJ6$jGx7B#_kQ9+U-`Hw*(=m3NNk&|M4CTG11=*Awm=%CR2Gj^KpP1R77nWf;*EtJJweqNox#6VAokEfh08&b5`=eH{OTKfkc~d@b$y?&J z(c@)8|9wd*)^b|mzMyPdudzoetSlV!V^!JgBz~_M@KuR4d9;>racS>Ozlml8$tZZ8 zmaNP9juIy40G#OZ&0TPwgfXV|Pdh*2lJ^1kRkad`#+TTE?CGvy*f)&mCkwC?L90t% z>XNEuZVi+^t8@Uj$k0|v%Lj|AA#~4rlz6+NjOoZIXyR7fQqjtx1;a#`(O5{s$I6<| zjguHZ#c#sV_l&zsrfm+8%~LDtd%=r$pK}4eNC8^ zWL|#7mIdlZEmVZRed7o@vmcl|AU!N}+Bmd%+q|1nQc$${yhiN#IIl|TT-mvpm(SN1 zOyJ+bZgx+;>HO4qSX5E+tBETE+18b`LQj9WyTkKbg>n3SsaG0acYzeyKDRZAfxCP| zGuLbaN_mID_J#EJ7m_jL8dK4%hEXm{&m*-B2M6Ny%j5`a2p3k=C>+sw)dl#v9-dc$ zx_-E9ez)%-19Zv?G90-SmP~5YtnGgMcd__46Y)xzZ(8NWHcFTP;FN5j>eUwD)fm^o zlJ$eFcfTSU@3+fY1rN2KeN)+Wr$WS7?LGZ#g5nb|!X7^V>VOm3EP7rVJ3LNZuMz}L zM+HH^RUq>pK3{CglM`R$cdo9sTuqjCuE;3w(8%d*dRJGUgkC_nfepkhh54EF*9Qf1 z`QsJVro#34qv(q+R2Lb>lHRLFYDvVWR{fch!}n7RQxYzYVE&TNC%Yd$6sOqhUj0+a z@$|m7Z1#M~4wjlDz8h9^bqsFtzfD{I(~vnjcE&_G)fxb?bl{^;Y8f?kODWmfI4(># z(bF3=psY~MM1+no_q!gtJYVE%M%AyEJd1S+869^)kHAA*wKJTVfT-iGu2!cisFtt za9)i+d#5EfIp@bxTHsH4BJ0XIj_poRjh|hjyO|-oD=))EA?p_-GV7UbarSjN40w6t zzRi>Xq^%X}EtM(e?aL+4Vw|`pK}RVBZrbNyb>$}ESq?e0+ji%;TP%K;z8bM#lzlnR zqu+ghEQB7eWEGo0>K)8(;qy0Fgo>S;b6{nK6b%h6;!5ItQu6J&x)=IOEy6@8uU}j)6(*(}-%{GtX=Rpvo5rDyG$dGSLEi>hOgGj5ObSTfKj)KPjUB0V11(G)9Mz*J<6wO@mx39f+Aw( zZ%VC&x3DNMyN4%LJhS{aL8M0!x7+ero6UEGJHWY@FJ={8uJcASH2c=cZk#)?A+{%p{gW*)Pi?PtP0@?$Ppxk@*Q^TA4x$&`np@+8T629AyCRCD+ zOm#nbDBnJ`2c0hqdj+{y3bEzB1ZU~j{-sahZil~j3auOB(wz@|koOqG*8&z;wM!Xm zA^jeJ|1#%?b;WwqCe^{d>=rK&eVXo(!EEW2i4;t zt#I<~tK>J``I@&?#wwrP*1yYbPIqN5|BPCL?-aLNkzEMUA09a`3&?3Zg);nWnX1V< z7MjyQiy+cp*rxkSx}NQMekj$yl-6c3dhH}18f*8`qVD*S!M;JN61 zu0x2Se8L zMh*;*#JkqT-rmyZzFhcx%&`p&|H7J)PR34t_1@=IdT?yPD3dfbICTkKbR^#S8%z%? z%Fv{2C@3wo1e)VQBxL%?My8s9NzHx2(vbB+@>DNlhr7S%u7mc3<9XH$T0RZHK5l%w z+Nu5*Q6iaQX8HN-uNC@OKSFVqG#`jDP;Vd7dV zK<&94Wsv?>ozObVUIpl_{LHQf66JzFsew61o?1hkI9cVGMAn^YvEsfBxmDrm1VZ4G zYpNsGwyqMXa+F0?{=@Ht3k1??ZwJMemeZQ+`}~D9u3x)TAL&)yQaBI)IL^XsG{4|3 zwhm?(P}Q-g@I^x9b*Deu-UxhhcQ*i9_&mExd|D1`JCuPUT?YFMXU)os^@ zEKUy9&<1)p)Oprt#+mN1UE6$O_q;L@lF^}eb+$DSPCZp}wkj?V{n*B#5{@xMiqN?~&%QS_v+X%PO zZ(4kybiy6gV2lPR5mFZp$}K!rlkrNl6;HgPjpsgDLRY02%6mVe-t1uPDx_LrFfbH; zd!!lh%*H9#0r?&g!sxm_zSY;vZT2)4u$lol=1%XtrWmfk-=L7u-XzJPxYaMc z!odrOkp?_HeYm@{x%1g^7GoLDm~Qr%O>liDl}F>f|5ychx-O6p1d6xRQ)U6Tg3g*- zK#VRY2Jma^u=Va^fZORpPXc^W`P$R8vMgoZ_1cg}nPqAdlz{$V5)j9%5}f z6F^q*QK)2dcxgXbb8P22?r@ZI(sXla1fSdW&zxjlc#bWHh&;;_>jNZ92D#s6=7WIU zi)^uC-cGAac#~`N)iA?=X~A28Ou?aY%O?p~RC^VAq^}S3s5`-GwOULCbK5}hK~9gd z=GV>aj%NnMbtcKqVwF!uyUp!Z0QJ;9wTL9G+G$G_9NchtpCgpzfzKd-DDS;L>7D8h ztj%_(URm%9tmaJWc2K6WB6xijV(h8H%j(hYttZp2Ip*LWpDVmJ ztd@QJx&o}ut=sqU%?o#k@To3kY3!}+8~e-;OgwFm2Eg-)$MaMK?vo!+rp59E2R)tN zBau1x+cx`p_7t|XXl7=p|Af_(so_)odEIal`sOz?T7i%WJOI#Ca8cAHER&*7Q94O# z*#;*|MO?-By~2E_xEAysd{eVn%4-l^3`ltFGb5d6E^8c#t$#z{0JEVy-!Qm*RZw$r zRIB!a%gsK8J7M2+Zrx(6DH9;JyR;?tSU$IuDIEnu)`k6=o5uUKR-JRR`QjNq{V3yq zNS;ymIqJCOji8+v@bHM{*kqo%`m50`F3h{+O48!fuzg!fZke-5S;8(XxM#3e`ez$&A zKr9D-C8pv#%J#*J&Y=ZDj7c%xwjYi)G&Ae?s{7c94>rO+spGElVUYgT+ z5gkjlqe&kIgG{;EGXWNG%=-k);!>V{k&SzM8tX?bUq z3DwlTNh#*JSPre*f^gA!O2rsjG3=iHr;tncO9}7sHtAI=(7HsPpyoky{SdKisYU?7)rpHsUBlE|Mf%4D zS&||7D5$_CUSdWxzRr}Kc<}YvoBJ1utS8^lFifl7Vq)}ZhhE|4M*5+pB{Mt`@71U! zt_~;Sz`i!G^d$jevXS@V1THQ+9wC>90DA`<4_cDk-J1A6qibo(+^V~FPB0n?@=~dy zBeJci#Ka0U&MQ%tDM7kylYL*kSj9YJXALVCiZMvEbMLihl9dNpB}h_Ng~a zMRtY;eMZ=HJkV_xW=l6kRvx)>?jq7-C_ow5&V97%{zo!TMM{Cx8^_dAY4l2xO?f%= zko|pFrzP_dq4{0sVXaJW%Xi6URN0Z&^h{*;kO8%%R`PEP=o|IX}MBf%c} z^d+QeGqSk>gou7O^+$Vb-xxDFLQl@kw_n)%E~yB=J}(R$zqaVIabF`5 z>uzot&|dTi$Ii@&AHB~CdT`CQjM=H@p;@6yHMbMq#P!6T4Zv#`1>CGK%JcFj+S+^O zYS_-bWw=vH;<3DZ&r=#U$IGKXq83(1ABTdKEI95vRswrj1C%pKMiNKc&65p6q+JyX zBlrp9^Z8ixmdw6?YMx>>+oXHF4`KEn} zcnCi%$t*HWX`atJYx@L4lITDtH5o1RR9+9?IhK}}_x7~0SxPs~vjfp@d*dz7@2Ei_ z-}Y+E(pMq*8e*8?B*r z+8-{YP&x;2)nq}$WxpS-J(@QTN3KfM7OISdD0~FM@+D7EG{$JS`QsT)vFuLnnaP1a zdauv~?MRKgE(s(3`6zgtnbKIRwy>c$iu2#LlQUc12A zcMYpUZfqLhC=A??ihk}X?JY#A-ng(szKBkJr0&Drf&0CE|Ryl za7VCxs@|FHi%v#{YeHHi7z7NgT_Q@3Na^2a^nNGQHgT*)#McC+BYO0AkGqN>77K<7 znQ&5iiT`Lb5H4_A|D0Qtp0iCOmjf+dPFjc*U^h znaE62e&^`8aHZ8da~6;3uBY;u?qn@Psa4+K`q100yz@)wWi&MezWBnx# zZ&E4*NfGCc%};#sMSORRisX(@N9HH(GT$RqhXof6;EC+oy{4CcpGQ~nSN6V1kwxEI z@zAbE40+ySuk4;~4wXW3a&z4sPRU(+^bjjA*bP*{?C!I2nL+*7WF$i)@Mmp4hp<2C zsf~fwBDRzIU%8;yK6hSO`4zn^4%cs zw+9`ym_yEcB(^v&U)5gf?A-}o7bA;Pavu9;k5oE0u%(?id&z=`YA;QHh>%@I zYhrMvvisQqD9KaqoGJTnxll~_WwWuI8Hr0JMndH&sADB_{b}UotK+=_s!A(mBVj+= zh)85MVxqV=C-p%xDTm(;zjiL`udz7kWF=Lz^AEHixe}bFu0IXmwKQ{tjzOJnSCK53 zmb_A{=0nBb1EC|`?CA4$yW5OArNv(m_clCpIw$xx)A9Y|QmT8Y{B}oSp0%aw0Dvye zUyl?czByN&r5|pLX1xn}c&ap)giu&=E|<0ea&(Bm9I%fyDu>^l`eWQ=*(wODyIgQ5qBh zva(u>yH+*rhKUKGh11Yp)bByHw-mn7Mn|(sx(*`GkvCIMQ70BH%mZxHn%p)B?caOR z`Hz4FV1X@Jn^oJSJ0+s(ab&}W!T&xc>0#+tPlz2T50HpPU+~%=C(Q3)K{Z2~8Rdhc zlWP$r^ugys?Ji;G_fL0+5YCF?0vF*W{siAn*ByH)Ti6=!0AXQ@7Oe7(Tw4qIv53EV z6a2%5LbXu4cPjC&*zM~22Ri{xqpyOHeG`?ICDIpB0%$zZ#iO(~X8kgmBSnf%R|VbPp+&W{i$(Jq4sj2R7| z+y_b}F$H8iNsHQx87d3S5;r@2mL)On1*eM-I52zhKJl~fmlUkJ&5{zqik%;S#(FHaa$Kwg+?{=F*Y)bzk!uJ8*s|LicwM=y7R9uR3)jpGdp z78(^FU$SIlMXl`#wM>1TM#Bp(xWt93Z=IxEUee(#|FsYqG2X_aa~8foeKe^eGu0bH zsCc&}T9OQ02-YqJyh1?{m%m2%&^BHpu|Q?GOW%cTCz2~lcnBpAPdwrwNuO)*{mZuE zr(xU$_Ayi{N44==APp@~=Gmay3cpuGX*9H`VhFxR%J@N^?=}%Ktr{?aDnA2y`6(Y9 z#usGdvg50r_Zr5EUok}0p$spy?-V&hk7K58SDM?#;(X8Z6}ZWnq3b6pW?1w652MVw zl0yjobR^z!$MYqxso{IM4=?9bp>(m?!TI^ra6R~^e7Iz~)W(UDwIGRfb5gEE&%9UOlBF%hfI^y_3t8_<&VLa-g5*lB>iw{DB*v(2Nuwst2F`5Cbt{ z&?7V`ddhHW37RwM(|unYwZJMUml$Jv*RoGaIRn0XMQ>NaO0x-jf};o{W7(-BilIk* z;o-iM+oq-$oBfpinilMC+uzT(${7SCw=`NE2zhc>`L5MFw#-?YH5i0Ijci#TKJ_OrsQ=2hrS~pu10z-B3>4L( zYLK{Bp0Y_lUPsQ5`@*ngg7=jctDywsCUMOl6LSvI8)B~?0i0Io-~lNLs33_G#%1+| zdPLS)e5X9c}*W4YNL_Pq^mip93}2b-ChbF|!= zt&X(k_ka`^m+Hm#B`s+^*Ce@hP;otR>OHNDc3svjU@}EjCp!)E+ZIJt@9&>5|KLp; zaV7z+ikMl^M3;^1N>=a6vFfS@3AKrMVn!_Ngn3SHFS9S(_xD3)VM0~*4jT(SW)>F! zb>V*h_lK2}jsVa7L$rum=gpkQdf*!kE#^vFvaTL|F3sF+cm3i)fA(o!ym-xLRq{IC z1P99pCT*Z9_A0bX7_n%+qD|{?znE5WY0WHUa*VE3#=CO#Bg;nGm~g(4wda)*sRLz{ ziHHvye-j zjvJmn<{V~sw|Ayj=h{)D%JH1Ed-V%SUb408yb(5-V#A z_J%6xdcCPKgWT~i>N|!*TD}~hA`%sv*5v%W*nD?*9M-0}1^v#&y_7mLuvA-ZHJJCt z1s4hD+uN1mOhE3=X1j4~l5G1lo`rsp2DC}sK{W1gaf>3C1?pLq zl$RREzlk{yBEouVzG2F_sTU_jMR0^-{OG#kq~kwv^s6O$L`ZsSb3O7hHMU zHQaL)N}5tZ+38qA*fK`6X zju9<_q#WGdg%$_uDAE)*b0ig2*3aIU%lK#dq?Lry-|J18C=I zPuBNt95AHcH#_cjSu+54a^-VcfL}oTn){!eL4P&}4;#ST6gq#zJ}xO_5!M$ zcJz=fx3Vp#;{>JlUV2)5;Y9XwLlS=R=*=U#PR&`J`Yt-NMMS-${N z84TwsEO=Ab)9Vz$A(SzksnqWAXHKyv?T@K=IL9AHb004-IWfQa%w>p)r3$&cUK_4) zq0+7q*DOBnCpWD1)*JA8;m?*Dr#_hozi;jtF$$RpUk4F2TJfd%UBtaJ-yQH(4Y@)2a-G~>GCowY+FV%`%%*3FPi|@ReUfv+ zGCb7hD!H}M#&O`30cIPfB3Lt0g#Fa^$L=ok-6}yrhqkAh8*&OzVoXrevez{*E>=wf ze*K<|c{Z=Zo8>;C@w^=o^S8*V@8Vzn`aa?SVIpf0S*UA9OuZ5;P25QNO#%>A3o2F6 zq-Lx|&&mmm)d4f2{EJl8=-dTQae$wQDy;WV;T4-5ReV2YmfbGsq}98!lM->{K36aZ zpxOD8Cs41tM)={wC4J?MJ7Mfsg|X#I#}d{tY5-)$Yu00dAmm8y>ozly-?BtxXoR!n(=jTQ+=?QL9%xr5p0mI~X%B4(GtTQ5a zxa-aPbBzT0u&A=Ywrz+gUQH``(^a0%%=#br1Xve7Jq7JVNih>c;O2%P%jeIp^31}B z$hzMuB-#kOeKpc$k1P?6d*R6s5LVhjP>C8k6dl)|_Q}5LK0{%9*#SrJmWadpKPsz3ff*o?R6`m;9*OA0(|;s9(iw_b1!!t zc*r3^Nrxm%0ssm-EZU^1pqxlsyP*v9F^Lh^+)Nt3p_#&cy?iJ*wkwwo_N;aAgUBRn zU)TuK(F^tq_xbgtl-yB0k|IpIWBv24Rv7;dgvA^e((OWxIWvAnbn0bNud&8LO1p&t zQ;IQu_#IyV^Vq1@v==}$wE8c z4!Em!M(~^rT!eBT-_aD?#_j2>O~L}(G4Gl!w|3A9#SB1nVa7nl-{Oo@q=k6 z<`({6`Sbdq_Y9A0BDm(EdIGT!X$a(T!K|YEGsE`#8=KY5xk!?g7CeZI1^bxrZ#7&g z$m93_VE@+}MNoxh{(rOkZ-QR`&jF&mjxh`Lx+<^PzhX=`7T*70;;;W5@ZZ%dPx0Rt zDis%CWDH+eQ0L&_z*l@75@dq{?LvUY2dUt{nnC&XH!=TRxBLH7vn4=?2ncXKefnl+ z$3{s>`QKWviMicf(CqK;muSxUyUxghUvDNppC&RV#^451(~8H%q=TJvAB~wfmIRkz zPYX9RvGqzi@v;^c|BjW2dBH-{%xo>;PbbyXxneMoa7JXB5ujXPO$jh4ARvBs>)q&m z65}JOMPd!~dt7LZ>Eyh7h?9G2tfz+`10uaejTOBq$N;Bn5;Ls!tUyF( z`xDt|5TVa9?ZLHc^A@IkM#t5!=8p8bc=endMfytH=fru-Y&M|(QJaINj|)lDkXacs z6_6n=?8nYXbE@SxDOpHiUCX&({*64w|1OkfR2#=P5mZID&W#MR^#40kC8GV^Fe{d$ zC`>Rz^7N-K4Df53;I1}ZM!>nMsyXjyW~j+Kk5sstBN9u09< ztYYNkZ0MLjgUl#57GRY1mipJocX>@?{rH^VwX~$sV^FjQyMsg^EMy6#7?!G zo=3KkS#yO&Ij3PS_%$4*O zYHoFyQQ*8oyaMz|_CmsPfNZ~rOzM&g|3F`tl!xGKE>*M~Ck|_$JgicKI;GtIl9*LY z>~1uZ1W*$=H@?T{TRGPVih9PDh;V{y8ubevIGF;?_7$)=77Q&Tr?=nc&0aG_3nOWU zc-dj6dC!sl$Rnj5`f=dDN;G%WgfreKeSDe~HAnjioY^)3|M=hGp8s#__G0x49uxpx zk4wa@RJfBQn*9wXlutb4{lh7CN-`}qO`0VL@sZP<%77;q)(7FuPR~ zzG(aKtr7E%wubR520YOTt-i&*8txIcz_qb8p3!@z>zpTaZfrB{7=m~?e|i#r>U=z0 z|B!8I6yO{5LBK+6l5?`#yPIoV7^ASI-9Ir_ykV@t-W$ptuW-Bjh497oGn%L0 zzUOu~{o}Yk!{$s)Y7cp*e&Z1h1 zkzYd-mG=~2b*;61UtJJABP}CUL`1pHZ{0lK0QKS&xXAZoa@qQ*DDYrW+_dk zqN2jpUg%N$&1+auQs=|du@cu2(HUEZ_|;G}Udo=`n(pavS2R*K|5CsXonOZl{SO@* z>TuxI$JTR;S0|)iz4_UACFX!F50dnRgsK4@yj6Ba6e-q%wl=?u98r$-w#}msVzcOj z;H&QPUWRuv5?m!t4{~A#s>-Y{ zZDyusU}A${V-Esfat$n|AXG}bw^6k#RIhVBs-KH(ZW*1C_bdZmI;srv5?=}^pYQf2 z1?Z#&-8eyIh{$PcFP^x?|2OczzJfPv3cLg&qMN3@H*`}RpGs;%qfn`sj<}_W17{jt zzI-Ryq1hJ)2jPAq1S^`LFazf#TgMGa z`6r^HKP>!pyy0h93>4+tIgCOZ9A+xWt~W)>Pslmq4G0XvALFEiZ z#h_v0NG-c40p*Hult?>-{2;4<#I;~c62Y^(;BmdH+zwd^>!jII_7XG%{Rt4m_sa9ryhNySO-&Cy2D?d|lhUb+0C<&_xjr>;7G|XNb}-2&6q>jH$l4k|Knk<#in2q|5T;{v2x>ctv@6CKXn4_baB^;{+(pVS*i-dTC zk5(Ksx8GOh2G+DW#eyGGNlGB$(OZ!*=Y%S68fMgD35jIQAoT3}i!(PmiPSF-IlSTl z!PwUVnPn?NQ%Z*XEq~InB$8`R4gaZx#xb0JdXIObsV8IT$wx`KAx>waG&{33E}+Rk zv?Cu^%~ zZYr+g=CnAOLSieXLh!V>ZsIJjl2VM6mG&2!*$jbMIb-hv`Z$9C2?>~j#!KW?(Ltne z#qPBg$idHD^^^LTu#AY>4^)`9J0THi3`)?*TvY#!}UldEkpID@gPldFE z64MI~HU0|j6YlR6b_aYJE*ktX<_kW#q%iy)gx454#FSStkBejfbYQ4^o7pv1B%C`? zzN_#ZKjpnj4!Kd)Q1{0)`v*vA5r9=To&nY{xt}uAMn%4^ezKMmS(DC{Bi<4O4sH0J z*T@lVRL2#@17L`Apgg-GaPO4}<6#mA6;<(Oa4TKugQcs^s9|@P}juU zX~pY!?HBK6T=F&IHX9jBe`!9t%*5v3ABPcjN@i$GFR4opk1$5?QglP+!7HA(VF6{h zsXv}{pS=FRR1@-u>?XOY{O&c6#95Dq@M1q*;E%u;42`Tq67s3!Si;YvhX^)Reor$Z zr5x=3^lt~c(7LEE$r^>rf4(cB8H?PJB25uaGFRfYKRf$T(991twfR|{OGo!6Com@5 z`@1u$WRe`%<96Wj)aQ<|pQpk~$RPtTDb?EQh*4{DL|FitowP08oz3@hYu3~^v-YoT z^;EWcD{V5mIkMVV9FwJ#G&tAixM258;|!d$AuL=q?YMgvwWfA*ltuBwpFe!A>fsM4 zQI^fL*N)Yue+wog*;4ny2oSu}gZWA${hNk$(_SAA7w?D_zJ3)i(~!t;HZm z%vU?50)PBKbc*IJOSO1>l;3*4BCk?G#yo*yRGorU+CT;!2y&OPtLg5Y!ERhEb<0%0 zy)x9y8W~E^U65J*=2@}VC12ZRa_!B*xU)%3CA{%(cz?w2zFC5Kb|~?oRd8t3r=YDw z+_MW5q&a4jtLg`3E@xMbQq;`a-j%ra#!dVemdN&rDH_Iwy3@~k<5eQogX-f*g`sZT zctlQ_V7z|%sR4<+=)0L_ZM1Lulqz24bWgu^FS(fbNpv7bk&(%t7945wAXm-lE;YEP zHPA>w6Q278K0X8Ez27;rrC{&0v!Sf#g!SwB-f?T(VB5Bw0vfC=4Nmpj9fAu>OLsRX z%xgSenEDb_S#C~dFo8KDtu-DAW#{5;Uf+tz)vJ{sMp?Bh2a!2P=oVIv*@;}3jWWPm zz#EMr!FF9oOaj}{T2jCH>{X#OFkOc)_^xz3j*4|*j7EEz2Wwshq`fSR1?1MDW$lC% z-?o-?BV$^phUZpuV>S@(3GmnK&gcw(N`RSJf7v{bWR@Ye^$U$8ChQ-VNv`{O7j6m# zUC2LHu0Io4b0X2Qs*6Diibys=)1s$UKX%=Ytjg`GoVrGP1Dh@7aZ+-BuuUuWmuH~a z>Dot-1QQx?eaov}RW2AM8))gdDLPU3YsBqNs%sHFAGNH^d&N9~Atcm>4rg~nkvXp3 z&dHBgLNKwV*#E2(QlK>rbzrxra}R?Pkx{?bg-*J;rf2BbIg|CM6M4u;Vu|@Y0#1XJx`d`&pneIQ}Z%|E#vO+Ag^}V~~^i*(oke4)siyn z+_8|~O{zwOYgN}^ZwN{_FAhxO+@)Et3ELkg@G6fJWC+9DG0!GdXWfLF2Il%x5w=`6 zjV%P|slzNxx_HB#EXC0E!gvgNCQC`zScdbP5`9D8qP4T)lHiQ?WiX0An1+W|vs9op z;HAzsO9n>7wtaS~Ob=`Cct3Z&$qTMaS!NL~P&C+EBuy5IbPvC&@;TKsac}uc@BKEC z49NH6Fp%Cp2ZQK*U0}jj{^ip4aiEY&ymhDRqNgLiJ-Ghh|B*aB5bg6QX5HzV@}M@R zF!I|Uqc&EqcbTr+lLvv%_AVuuuAEXjM$^(7Pd9zGc$QV=pntGAd2~Y+A}+Y`C99`A z-}yY+vDLbqY#x+9ywe5^y4A9N)E7wl#WZPdT}*qvqoXRz4WGzLu0Hi+t=yV6KcMe6 zO+~wJLAb%FUKDI;u6J1?B+;Q$CCu6#TO(xaBW0<)i4)#W|BfT%bCOrI3Hpts-?lZZ zX19z)2@Hk_1TR(w*B*GrZ$kRFwmzC;g0<#TXAgO6U-qmOhrhTXF6rlXQzNw6;z;IC z><~d%oI+N1$#tn`n-brkCu~D9B+DqZ{4P76Zr<2bjd(EpcndPB>K8S9jfg!HW%>)1 zW6ht9bjVBn@*7@=5>n`6mgJS<<$bsHuVv>@wC`k(>AVf{^^WU{vr{ z-M+jjymXScVM7~IaZ3w3nZ0Xkqxkx@%ZnV?F;IN$NPGp4wu_TCRlt`XNZo3=7wXFp zTkzYgOH+Rt_`FMjp{UI%e2Lo7((`?~PJcG_>Imo%*PG+O;Wx2qRNl96x2E0fnYP?0 z$LSLrvsR68i#?B`H1RFt$$A?;O1#sM@Wz0;KBZE9yC`x#kx{wGrdDVl#JO@+?UFXW z#%X$XbpyXVc_IaQB`_A==nLNC)d{INY^~wpPKBG9d-M!XE~&en(BxM5_O>p6yc+MaX!M%=$hlXX-I|OdUTL1j2 zz*Xf@jV7Vg5J%l%SzG+CNyW085|zNz*xgZ?c^3iGwwivUR%LnS|DP^g@iz**KMVaiDSZiM+cKR0)q$?irj2$-%{L?YQ z7`#S^YD*z+av6J-x9`~-lPyXD^Woa#+AV!v3W;(@&$v32BjlDWaa0s0mJFMNOq@7b zlcTTPeP*NyyQg6lo^eM)dku&ke416n{)m|=2y1I(gtAQ~T?@hA?t+R(L7^Xo=cu(Bs`55DIb8^mh_R1iY&3@^8NiYw792^PJ zPl*v9QQ^ghyTp3B5(#wj8oB|=U!q3&dnThZAVK!?C9 z7RMrY@rSV3W2t|@!vHZ9`a8w$ZY#Dj2Oi>7)KsbZEjF{(JqVa}&8a_o!uhVRBfA1_ z_2!)S%D7pmsfhw&en3jek)4W%jm=9VIW@V-)lsbck zKmI6iy>$8*{Ji?ukkv8x)cSAwGB63|->H8wrxia)k#ou5ns$@beJaIu$8X@tzxHjg zS|r<}uz;>oWQngwds299xwl`x~>iMwIF_yK&Lp+vWZIx^tRMBIENkMdc`&Q4TGR-eA zA8i0kGWA8;xViu9^Vy_+f!pc!5{A!XWtP#JI>v{6cL&zupt=5UId7x3N?wS?j!Yab zN`wvU_qiIqkD-5T17ABZKEJ{>z0p7aFHqJ2)>KU!iDIDoxZ4cNdpt=fb{Hy=@fZfE zF_)Q~V*5?4Dp;2cZ**y+1uZgBRo4Xe$C{~XS^g>z4lM*$;5hF{Qv#PreYDxVZ0;PiY)fUXv9^9#|!mMiw8@sc`IKN zYg#kOo2(lm9ktEjWHN#*zv-t0bCVykD6ahRvXSbyCVlzUAG<{v=0g;qHz4BmPXS(I z>Q#+ zTC>f&-gPxLj$WS`;v;@TpHn7AuVI-+Z~J@Hc~(EdGty~(zM!iAD@AK4(x8=DZZ>sL zpsK~5yntN7LHdyzoY>M}yahp7*EsKBU(YD8m4vrQC?{8Arm$J{F+U5(Gz(rNXF;{*L(#u9XVv;CKTIC&wK45ao$gol zljRI^4Rg{o(am1E*tq4jpbowaG8dg--Tp=@Bn)`_+d0vxYu{oIQbSu?B48~I>5)h0e{#QM*2j_AX*Glj-&c3UqcvAcys@^)Pt*veM-g~#Dg1bX; zcPBtwEI7p-iUpV8&TerhxKkjwyF+P!prL4RiUf+g+n4A0-ZRd5*S~9xl`-a;bLC$1 zzJAyB-}Z^ZI-Hh~F-X441yY0Xi;6G|CNX=nKRKzPi5HZ58XoT0MmDw6J$%@IS7T!v z%t8awo%&3{B)doim_bp$_)ybQjhTksMR@tdto|?n`nZ}W#^}}^Y&Je^S;olh6JT6n8DN{_s;~n zr>}SW#PpYZqtw8-YgI?g`WEkD)+dIDa50`XX}+B-1+) z&eylpy1(o!9@*8Bwe~z=R^$Xo+nu)IwY-xZlSfxyw6Pn%U?NRITMdI6q!Z07tO4+& zO&vR)%uW7x={!7|OS5aobW_nn|436^s{sR{V%O)g(JiTNp8MJtxjQF}CLVtrv<#d9 zkwJTRDmm;Ml3L^?YOdBky-ykAl5E-)xND44Lgfdhe?nItLagSj>Sili6=-wp`o2^) zTd}IDKJ|wwQ^EyK&eiKKb4I8jUeWx*?(a(M^Uomb^hY-|eTGhq5gl8dA``f3-}9pY z352PrqGs-dZd37j6#$g;S+Y!}E4n?498iO4;K;slBSDFgQS-hSt`gdDfJd?zH|RcK z{%(u7lKD zy5|PwGU=f&Ej=OSD}xW$_2-*%BS_FnC79MH8y^9$sX;HLXot@*YdiN;d^ZA__X7HN z_Lx<&#DLIZRx<$`KBsS7v`@l} zY7xag?E!&}3VNY5@|G!o1I^ge9a08g^TJ^9m+3mVv8%(KvK{fjh;&}1rQ}L{Gqm#5 z6C@fl82{4?MPAWK@#z+1DIaap>5tZD=2F7lIzNpqUx${&i`N9Gw%`A9T`&R!k%pV~ z`EHq!3ob^pHG(+yMzAz?SP~kyLOx&-9lDAR7qHabGzuFzv!{o6Z1mc3l5n5DMbv0X z2%cx!taL6n>$=&&I1fyA@C;`R#I&2b&BNMBbTPv|25~@wqV$42L9{^ye(&jP?-YI1 zr(w2PWv#h5oQ5Toql4e8yAy}9+_=Y(sB2oRAD$ysHT(h&9V~k4|J~cZC)qt~ zx);5o?VIZyQFBypFwGq>fybi3xBGxO`G-g9SgPOBUqG+o-a&-n=F5Nk#W!lpn*31H z%9c#%?N&f;Nm`G6*Kq70R!k`Fj@CF*@W^s21%y z|H;~Wsor234mG~#4li$y9O$Q2WI8%|W zRl7ScaBfoA0{qs4KL<>}W(_|0 znCUg!8Np@0GNl4S6iDUQ`n29`RjmYRdlS_SOhJvH*=J&+OVJRmc#m!YqdDV|%vtH> z*MWoc2ABpN9(DbtE3K0L9W2v4x9V1tW7vM$=GIXZ$%lOsI zZNfH{HXrDFPbp^@+(rYS87kG}V2eM8Ib6Ih%be$T8Bj{|+TKqZ;52Oi>VQw~g069b zLKA5NrDzJij_c#=>EyuUCpQ~=pU7LO6Nn1)m>1h?Np^Leoxq^T0z&mhRDN^^xo`H{ znzX9kyzdgI+yGiMYt!tX-mqL=HWF{${`ekr7_4MzB(yUZVA9?xV~)f~QgREKSg(4r z5v(@RuM3c?^)P7wVFrOS8DHi9IGYgnSxY)LULEhQKGJXJdM`^iHE=W5x~p?!#Wj#) zDulhmryO|zxHL`cOV{<&=Wb^{J2Z;Ez~dsxPg76UqbJ?vn!e!6Tvs(jPS<<=BkW&T z+M7|9MWBY5`CarRlhM_5-92vBmeP&POERMzjh+-2Rk@~XEjLP3PBP_N^UAPg(Q%

RG+)6yN>tdR+cL>+$Z}=aRh(SirbWg`WrGRto%n)4C!IUQ$VPeek+j#5H(L z_AV1aR{&L1aE2;DuczGus_D-}}scKC2$q1dXd` zN#>;I6qM~3!z+*+LgIdS9JOx?4GA!MY7GWPYgx(w`> zYNQ&Qlhe4Mu<#V;hF;oJ1{n6CKWNrhiE=Si_7(rCBbgWGwZ_!6^ZtgxkyZ4#2i?DS zEuHCSfE~Bmmo-OHG}*uDoMb%P=-(Bt0IigUR%?(_pN1n;kHsm77z#?RoR?!czjt?6 zcg7BH{#sN4oyc*{V(=M7_8Fbxd&D%kse1c|;BAS4uv!gd_4CuoN>|pRItmze@=D%C zrDMi%!B}WZTGAC_?x+F@d5lO~%-RrlyYZr2;&MUPG12~7$s;ub&MKzC@$|l@cD299 z_$gU&FKMxpeU^vhZu{0AO`bcIU8Y@+ z>4n4pg{kZf9M9PtuS)6qA!Y%@Lid>pdUnI zpT2mO90Zmva`lFcrIVhz@|zzspol=32Zwj>YaN1X6_9Adm(fuZZ@FW(sp<`*qaf9G z2YiB+*4YZRo(aLuNtHEla-lr=A^nHW>1LgrH6^8AV7jTIFa`K^$ArJpO5Fj|RN#n- zzt9uC6a_|n4)$SS@AyIjcvj1D+1wW}a}}2z7nrL+seVmzsq0ynt{`$^o6Z4?V?Gfq zJ+0HX$smYowa^w0vvIkOc#) zWnKG=VAy~hQ3)LEi{4m!e13|A{S;7w9I>K?u-q|h7ugUT?A**8!WpWF!3TIRjzx(5 zVzDt)wQ5E5mke~bY#R|@9!pUI!|zQeB1-*iY^Y%Gh?hVs!Bh=R`Zc;w#wG5|fpedf zXC|u{B>pKK$KvAtd5f_5723E2e@9nf<678QGs@%Bl#pYv$T#9ZG=c<>cufhc^^W$C zv6FDfZK}_!kLc>jW7r6C>J|vO0G%+3Q{{)@U`^)#Y(5cWACY|`BGxc8U=WWf&N18m z`5gkHI>FUhwsf9y@JeXh{_wO@%DGRl8#BKo9(57@`N2q0G682?#yyhRzvgw49-8G) z#NUlFmw4;*(b04bp(o%y*I7`qiI`sQv7Du5{2&q8Uh~$7TasnWo768PoY!gkm1e^` zR+8In0?L8Per-3cpBejt|BS!QjvD1GD5zIeP-1tuxU9QeM2A?P#e4ruhLK%A$F5V{ z`EZIVfRG_HbfEM(OJ0@8$E5^NTCr#pe zduwHFg?IfUKkjJzk1eJ9&Vr>TjtOCtiOr-;4Xk^v;K%y>F=!ky>i^NAlcLB6at<6w2!1tVoe_LgCoC~3;xcpWAl_{H}MZhGm|44xt)`_?E^0QV_o0E zN(Thr8tE2EdQ^*Ge$$pKjqxQzbwREm-PCsQ%-}u9m<7!fd!g1%UAQqd# zOz$9h6%iV=ke=4z7be|uvPhw1(!jU(bT7zS?M1-kVTHLobUfGCpROO?#*dcvFr=cg z7U$Igi^|X#w82EPhT5SnRkbf{a5x-`$f-YO-hjR<AO$Lly*EhL42mb=P9shgY!QRSJ%f(V?tT7C8xUn6Y!*I!&t3?)^fW7%%j z=_NgkS#b!QHg!qqf{n&Z#FJCzFwhCFdb&wFIQPZ_c_qPa#Z0@5R z!1sJp{bWXzs#KtfozaCn{R}RKCk|Qhy)*fX51uG_&98;i1~=QxmQs_b(HKa#?A>hC zKlso?#Y%=eZ53(L8@1a0blRm60WzMb8s)If;&^DQL?wot$In7*-z3E0cy zhvm_`qd`!N+Lk2qlKsi)NuU1G{1*$SiRDY>x?6?pS(~54NOr8=_V|J#AQP zxKOJ-&H5GP0@5%nWlE#Ts8;j+Lst9!==N?;_C4B1Y)LJ^mDyWp1zQN$Tv}` zt-l(*&M z!g{)Tsmb=pp9Oe%F#IeeBb$=^wDY+yLU%NBlpqdZn$ z{|Lp>sp(kWcKp%Wf!LKS)085z?pOVn=V^p$Wy%a`znd!rK#`9lw=_?JNy!lIu+MM4 z{z>!xAZRU-6mb?6A8Y0ty^-f2t38v>+%RbRA|Wn4@?A$b?7P|N{!_^0)U@?Y9VFmx z;B%A8fxhn|2`F-31trE6|o7IcH&*_nFcqo=!?#9`-YM(l`pmT&3yss?eC6H=yb7X}!GnrR}*FzotclKqK6}{igJf zUy!mn%$y9Iz^A`TFE~a_UhqA!kfZ&4oib=Zh1gTmzoaL|LN>2Abw<4nqk;p-?w@q2 zf}kq!1JY7gD$b+FD+g4~%50wslGg$i7U>M(RyN;}POyi_Xc_3%_bTzkw3%iFxLN;!t%~LtELVhBb?2?xEVeo|fq^vb>>+(N!@4zuZ0b0Hj zaDW%11RwbP6^^m&OxpFVfJeuJZhlJr8jS|^F zx$wvdC)3i@ONzH#N$8ZcX5GO0v#Y96dp))aY|1 zn)nj@WF(k|e?5~P6YY?{o@GY1K%8sz=rOI43!lDk^@V66j07A}O>+>c(~Qnq3)b}G zwxv~hbN%;7bt*Wp|9NEe%bB)}^|*C=SBEDKZGQ4gmXhfyQ{@?xV47Zq!jftLIz_X& z>n+ajhfAPKX#o|T#Mwk`WYejbS5gepEKzfL=kI^t8Th}5ns9c%f<`7Jh?<2am)4xJ z3bw%G7um(_BT209CL4V!P`KEOa<|yNvL9XDc!od!npDxyd=s>z27VagLpxXiLs?%- z<_k5YZ4rX+=~-}T`*s#RzcpZL?=LS6Ctz(QMNWt9x3b}Be*dmxEO16FqE54Ua=N+f zLm{hSk|42bOE07i_58d6I4_jAdZ)`EnAwX=*lUezBP9m+__XUcUiC9H5PUlcyop_= z(OgL0cGHMI%Gvz2UWC4$JNeA@?xzlca(~?DBCC@Bc=b6@G~f;kcVjIvKes3e|c?hDs+QDVdwtZwh@-5Cr3!{5X@k2zk}vNFZ` zf1Mbr{A2phl%kAvN!fjCqym@D?4vF?h|&9~hq35l#kxLuJ38Q7;6%(#&TnhucjMHa z{j0|sN7{nOG=kfkjxvt06bX|hDFu31#Z6t;@rDloxPZp(q*5n?2e8Ec)!8&lR@Vi#8Pmaza{L&KJ#j* z^bjH<47wJFW<=S{W=`lq~yFL~lh zHmq8B@`h?E>yI;5x#><nyC-od5()0Muwvvre znC`1vId+ndI=W3nPxt>5Fa5X!Jm&V^GIrcw^>|zr9%`JI_QtQMS=uO5e)`WZ$w_aJ z0{uOuz9MlN&EfcY1KXb6NCRo5p z6EW!Fm`3A4_;1nB<$oU!>;EEX{-2@!pF1i%T>P(Lc&7*relNaQR>_5Cw?eb-wq3eM z!45Lm#Z0q;-VeC|@!`et+6rh_VV=wNx58j7gU*Lph13liqaK(V;)9M=lQ2@tz*JSa z(+zX4r9^y0slwLrkxuhIU-dP%P@z*9zV&{!ce8Q;rMUKG@h-=xGUY5PRZ#GmmuG0t z)}^qa>5Nn}C^+bU4;)(iP4*Xe>~ zpImF+3q{{Qd7qqL!_7iF=_P`1lTwxm=pH34*az&F|A~y8C^YcAF%i_ZI^S3g z%Eh5WWzWY>28It$ zG|5fC##8%)PPq=cZ@YU%nSm$ewgziFm+gGU*O>2{%XBYSsJHr!e{3gERCN+vn#y&Q zGecf2_HH~s()OC~73@f-ufu~$cijD=n4YhnA8?;;20mio zQuLG32K@N`HQ(~!&)Aig$WXaPi5k%1RjY8v$?@}XuzAY4{YE8G#G3rv7)&Pl=KA?= zjhuI%QT0P}sj1o5|Fsyqf+1-ddL|0Gx-`unk`conlw=U@5^*XS-J8s_Yiz1LMGENy zb^WT8rCdGQLYKt5s1Jz>5nVPA68=d|RcBoarrEf)9E>#%etQly+kgP_y;t3wkcTQ4 zI&U0V^kp^j^lG}T$`kAcW0AjlyJiaQb*8#LraKx@nyHp-C)FyvJ37{aChJ$-1D~#+ zpF}YBCg`dzOcMI7`tP0LU;gCZn)U9(7qfHebK&I!IJSTMT?K?=zU4SJXs#yW9l;TC zmY=ou6IT3a-6#wp=yscbBjEXV?TI7!?q{TA&xpfCaXWA9D^T#}^TU2EnfQGQ5d+=*1(?oCYrn2j$`6VQmEs z1J4PeyhH7DqNLK2vw`6|ixduQ_{cG$eA2Yh937d|S7XhJ=k^pciW32GT=eloG76>=g)K?TkFg_3i+2<)>vi0g`~AxRRxs$R^49yOs|&Cm;QRl7rvO=qMH8&j%~;H)m&Top&mu{Y^%{G2@d$Y?pq^{la; z+$U%JS;@IEkr@6Io--B>Kt$4FN6jWRS6oVrpVrchQj92&oACA(aWsF)Lzf!W=zBnI zVnxp`qpd?tQQ7BAn)X-pW}VR{5gUMz+QT3EE-$BBO*d52+QK8X^pZTAG))srSqa;j ztY^GYshZGnZF&=)J#F*MhUIH$ck!p03H}j>wKSH@D!DDE%m%e4ZLRk_+4Mni6;+N- zRRyf-Gp)=2RLGj_`dVjJ#Z|o1$V1)cbBv_ml{+t%k!WgYtb|roXP#MrkLgu0QHTHT z#d6DL*4D5RS!=D*5Jd|HEmbVaWosLz0OjRz2COfeA|F@@QQbZ5-iE=J?GB{*qtpBX zMk)8~XGt`?z84}f7dfyAJ3KHek9IRpY9Uqy!j9n3LPPN_b|5=MWy>g)we=P8Wp^!C zJTlVH+dT%5Z)fn^oh7uYi+;~&Nt?cU_>N<;X-JlOY@CrnBtLqP233Gb9w&s_8ky!2 zNr(=w)eUS{;1T*0k@l5|qG-k-h)()a5w}89UkHI=LkbALKw6pLLZsT~@fr4gWiKzA zuGk;0)li!Wz=ms6`tfmMX=pdu-RT#ss@VGM=H!Fc@G~P{um=vq3|76+FL@aXNRSH} zhfG1~#8Vt_)QFzIspl#fk6$!V|7ha7yrLT!6lr#uB zcxQkbF%48TC(!e*vd+rxY{Rt~^P$1Q&#IkFaV4kPV@#pt1#SaG6wz-yMUFDDQ$47>g$1-}~tj+VY zpPM!WEz=_;759}w!uPOfR^|s|$q})q9jFY%?&mBB<8makQjRIPZERJS;~aP94`T(edMDw#LJ5LT^ES3EO4~&(__jh#;oBy%W*p z>7MC!TifP3A4#d5)`IUNAL^YLn{Lzv|Ic^!kr$Vsvj;BOo!JZ4O6o27oB9Bh1)_UI zlX}0TnJ;R^J>BikqNQ{03WDg?J2rRts8OA5NNIh2A$KfiD?Fs^>|-S0ufLuz6lFhY zyI@`!)3?jo$sKa(gks#(eOVWk7>w(Kc}i4zo6*-dnVyPmf&CWV&AD{{h~oenp!4kV zoYmUKNe+iAZ)!BI<4gF#xmuj2{CQwPIR9J_mBW=OV||y=JEMwo;?oR4b1XH>u8bZ> zTq&08M%%k|35BtJf^!#kZzrJ*@ltPI=dQ?OQSTB?cB)GtT`R#|3RXR<9B$1$dw`O zS#9q#M~5!=n0`av?+bP}OCF1Rpy#%ugw;}qRb&9GmDA>cnS(2*5)t5A>z0`!r>c%Zr68~oMfWtEgCxgzl;mH z%)3HmEcis^#{$*(L9D&gPts15w0b#>Bt9m+&EHjMr+W?}aPBMc>5O z;?DHnn}*ZRDOI$0Ta$>tFmA^$B06y4m`e2>UY6>j8h`4w{(i`LMJ1v1QGs3+TTB}2 zbaV0nV^i2gilZf}?btY?a+fqfa5-x96Zr@N?9Qimr78#Sk8M8}cKdT;n#OtZV`e!% z#CvnC9;_=cj2loltqBVn;cTIqAI+1@K5=W@I{$!Ub(cn2F+RBWwyWtKAtnQ}n!&)= z7x(&|XgQYrU6t5vVqGV?e4nv=L`Bl9X^h^Ygt3Ire#@aFXTYSq_X%{I9|&tA9sE_9 zOTATK{bPwyn52#OCv?IHv%x_bkzuakts4?``D}emv9s;pkd?9A?SIRwS<+3dukil< z1SB*kO`m?&qC6^LwKU46{z(dl9j@K9-y^sv&^Gp*-*l=e<1pIu6lFtxRH{ZNlDSU9Us%jLQqfvgt;atLa zhk@8*m~72r9hv+4ie_QJN{>)#??V#!$TCAHm>PgX13LdlBs^gTbkr9SeYw@V%cH*y z`r3X-rdz#&fXD##1uQ8j_KL_GxA?=xxri7e8eLGL7&td%mOOOLrQCR@%=uT_ZqBs1 zae3uso$hn)C%;V7crxGjFMP`tL2c;8PY9wSJ@gCyboNO6yS>9O|C>@-*+#l`?suoR z6bAFv4O5roLT|yIm~-%BqIuf%t=kff7xnyb&fB?*W099eba3UgD$xBZ%+ZWLjqXJR z|Namm#iI30DvO&dN|3~Hxqng%INxX=ZfhB<@3)o53jW7{KzZi%`Q%Q~iE&Hl3INy5 z7S5g%_qxzoGGr%n|@7*AC3ds6$tN=($k1?Az73{0bE*P|?4MIMOpm{Va)mhn|H(xGARfCq$b)(+#)=V)aG<7Dj!wY{p z`0)koA}5n;adqW2PJ{0$8AjkKxusq{ORa8DEB~2A%_fSU!r{8zk@TN#2PC^ASDb5p zZ%F7=t5HmeJ%kqH5o`dCPrpvEsHq8QHEY<@`lLkzBnABD4W=~@y1xks1tkbgnej}W zMVP_2v(KX7YSA3gp$Z8ydTTL&PwM&`R-y2U#uN{^@{o+tN^&Qu_Y>HmJO zp|{Uz-wc!Ak>cj*2v2Hg{rF1GKu*7P-|otXy>TIH zB9MIJhzxdhl#wF$=ke?0=1Ep@D%9I2bZ7}|`ktLwwc<28p5*5Qw>k9GszwsqB4p=_ z2eUJyoae%Ji~Qt*b7}eewDP-Nd6!c=d!lQ`qUNH^4&7p<+2RjBW`D){`XBugJ2A-h zAP>R6JMj4)*&J>E5b8mRd%or67_~9vZOC9k_ES6CT-2pq)wA*Jz-#i8r0~kOglFjR zWGT4`Qo-Nt<>prg{h+%{3&Ns?#3Hh|Ind>$E$XeCeS>J%4EA)CQ6$Iy%CuuO;!E<9 zf_$ujVv>Ez=chUbv_HR!6eR+BiR@pAWMK1l6+nXag6KqZr?-sueFAK8vgX`RaeW8; zcmz0^kLlZ`GexV>aunL?;m~er3~TDG0W;m$r0RCO@*9cMRa2EXVB^g%8GCJqKGbv< zM`eXVPiNd@5w>hc33~#jxRRxT$O26%la$r$m9`!EfV3lZ1eSGoud(o=qMz$Gz7BgV zkp|1r@{eIya1)c5o?)zi1g6>>!SpbxJcW}rj;XiT_z4cC3{%s+H%L( z#AWjt3hyga*Q}$Hy<&egZZDrhYcv!MViG$nmB|V~BlTab9#d$H4Rb$#rKH{X(dzILji-#&;R^N2L(K$=)_@ntJVgb= z9hDrM228q~z?OG(}JbVqUJLqRl4qYDmdNa4BH3?2V-22cb9@o+)Y_ zV-v}6p5+!T;~JvfNk76j2p&RIFpi%v;c1-K(@m2uW8;`PBf@Yf9X}EU( z;HB{C4W+E1)R7j29}Q`s>YNEykb`^P0}@%UL-}LyUqN&jj^?pXk=SpoDi-da{!3mh ze*Q6aVFLmOw>N}=SIciv+daFnQ@;i*7eF;({hx~{yd2PWiJ&+_n0z*W@H9o2_*gxd#Qs;PT(y`&HXE-3o)GnMcvv;zsUyt1|9e%}HN?qCy0+$HJYlzdX) z`*!VE%0U|-7|F&V+!(l|+tuA#zv9njIo3>O!5arG?*=I7>`stZ3MZnF4E_U^+#;dH zUczJZuCLlB7)?wOi4#&VyX|)^(Lr&o*Se6J?2Jw8K9(0~raWnofzI=;V}k~^HJxD{ znq%^lS5lqs`LLNHgelN@K~vYXARME8I#$#jkjQJony2czVZ!C zjihe0f`5Kso;tlIv#E;NNk{+Dx*3iV7+9_5)0J2n^vdN)6&^&jx#){w#`Vd#8oNW9 zGM0Sojq3OGuaCwLiS0N&Z(inx?Q{rVB{vg+y#};7$4T(AatCXMTiUo6RZEmK0p+8Z zRyk=HTGu_F9{|s@Vh5Za`rrzGAnN-I(}0K5zq-;KKc_}j7pepdivmnAY}McYR;4f9 zZu72&r0wYZDQCjkt(~YQx?O2by7_~5H8@8VFx8mjJ*|I9P&)zSb$?E-xm(m_mvyMX z!O#*uFL5|ie4$6u{=J+pe`paTo;CXR3II!brIqn#1Df%+K=_YHhRVvvhC*KjPJu-_3^!y7$sG+E-ZSHXL|Jq=LuIn&InjiR>kLyV_snQ zBeP6xK|AUE;SDInQ4~Lio~R*pNpd8YzPe*%#nnSn#Lcg@4Cxnd9L2U5#7Z|+`5r-w zds%D1utL^%LB~MWyW6rymz&g5VI{2U-tYF)>ulf<)hiJ-{0ri<7X7*FtXyj6Eg`mG zhClrcb)#ZRC{6yrM+TdRLTy|M*|9ALXf>Ku+rz}~-XLuArkGQkexp)Zz$}si-V3%0 zg?WTk`ox@d1l|klPF((uc`71mq!S?d_D=N)~cV}dgJfTX`Z$dGn7)7R4GX{`%^87Z@$4teWza~#Z@)|9pip(awo_2 zE~<1G+$}9HTrGYBp<#-;@W=W;O`O6TDY-klc1@403QQlrTh`4SN3x2_1Z2fy7oy6? z23}v>6PmbWld-ow^qJaZkb7|?#_HBq8uROYr~;sdk-O9gYGfbE>4TQi^t`=QY8wMa zfTtR^hG6|P)VgAaUA{s8GzN+1=&5EODb5U}+6G;{_Bb@o;PvGvWKq+8$y0l(V$hcN z@0JBcg8lZxV}+4P>CbAXO%jalCv*w02pLb{2TMN z9Blbnr*09$~cAh^f|F z0ISeZUH*KA0ea-{bd~kFIGSFxJXnkNr2B}bc^awIA z0CHV>sR7rlxaru|4@?DfsrA13c!CKnOKN{SqcGDFXh*lt)ys~{p5StZk<+38hi#gm zLUDT9E#d~~IcfMG^51*~0tmv)_ak}m{)K~UTsp}+jJy(V$9B9K&lO?1f0U{3Et?() zJkMT@M~9${R~r7ZiFozWy1!v{HjUgN9y9a6#E)VGmQh>;?>G4x9lX;m9+O*)Gpa6C zBnPgD_0P_^xq$Ur9Eufis73ShIZK?2+~b)fjeut(J$7nVRNE&qtaxMX;6H60Sl4Ih z{SR22=!)HWn{m<4sA^zix?ts6CoA^aPgZ)$p$6GA)8pV;NunbW~C%EzBOkuW%VK8!qVHGHgZf% z0I24}VD-||OR2yizllEEI5TySHDLj=#gcCd=Q(!uTjKQwt8R#s4!z05!h)I35p&(s zg(t!}KP(EtNMn7Kv&t((s|CW94_iw?Y@cGx zbBh&|o#IGI$fWElN{m15kq(AY<)h~z0FryJ<8icDJ)EBIf4oTD=E5$_J?+EJ59NI1 zLzq2K!p5CW_B!-5OyT|;Ql5M^`JT0(j-gu6+%!xG$#dF=NTV;-L!m-8QJB4bFJ;`* zsIZB+zKe=1M@;mDD2R}DfwFE{d=5^ES_*QqDJ6;NAC>ZEoWgSS#c|vtth>n*Xo3o#i*S=AV7$of-adZc@$D z;P1XCDbamOUhs+m*!hL})r8fLvhpsa-weFaA;MC^Gnc4n@9+ z&v`)V$?bUm<<28tj!qvvcNJkSYMu|^O8GgZq@=9GieJ#w6g!e7o~7Lx>)q7ySvO_) zQEQ)E(l{TR)a-NV9(cqsn{6y8Z_b6X~WZ!l6Z%#Zx zO;zrXGIN@nr*3*DAtJbHAP~A1l;9yF->NX`&i3%7)sd}GH z);>DqQ}=La(yj~sQCGS4UFfFK{Ygr5;#Ff?*G|f<>or>aJDlL zOKrX!>2(^}`TdVg6?66a_Bd=ld*1yasB159up0=q-lz}}R+n2EBV6;YY7cCh{n~fu z{IUxl$+I6wD})`_bZMggUXb+qa1O+~!B|D?|YP|;L_u)2?ka(H#rRFx>sDfR6;v}KF; za!uhp@)~6c0Qv5WXP;mMDJ8(q^9)M|r~4_s6fyMm53X zkr#FND$5%{lLW%O^Pl>nh>ZGCHBVKsgw7@s$!WHivah4u3S#d4f(KX+^yo-;KMiub z#3}Tm&Bf7yIYyX}AbQ!30@m>IJ6b-_lB!!w$FYuvX{EibEyN`kne7be`55-_vzqwj zL3Tn-0k*TH3D_fF=DPww4BLF|6I3qS*J0YK=a(2Gy3;blo}FyuAxh`CW6dAie@SIlXTawu*u52u1SL-^RVuXo8?k)TGKig<<5VF@*o-PtJ>OFLna zxrwdXXB3Z*6COVg!htPl7|YW0093`qTxy(JbD3hrLV!=CSYPdFx2n%SE$^OFLSz@<$}ikF+DG!wI_k44pwhB@Uj9Z0Sx z<+UuCb~OrQS$2A~II~7K4N&6I34&u8JytAYX9c~BA_s>2n3RNpRV9ujn(U+l$3Uo@ z^PBRFu(S?3IIaAzU(1CG&mGYL1TblZ^0HFiy*qCLJC;sgS)DojK!3`j2rSE^cuFFj zx#_886$4Xx0Et+XIDgo^*a*=uZqL8%>k7>8#Mrf*1WYoI;PVg}SF`$vCIVmIr1U7m zvsGC_@=T?;0Iz@Xc6*K?+)=&X2JlpujR!65BqP3084ML#g|R3!dj_USv-e=x7W`l!}W=R=x|iooQDxN(ri>LTX9 zu|wjqwXFvlEn~@hZ*hfMR&KI{rd~*`TXL}=Vy>!cdcy81=xb<#|7i@G> ze%sSN8oxdoxiefgdlJFJ!G2NctZOp*?nmVtI$`{De{$&`rJ2xQ(sl<~F5_lFmuoj; z_OJNDMq1=_nWHZ5asF@R93<-}4wE|B%6yO^GTA>BjZ$CH`3r5C2Oi!a7TWE(BuraCNZI>q*p+CDx!QWocEj0B_4wB>CJqHiSe%Z?P2<_LXvSrlH5IoJcaClfX_8H~R@$ zA3CLmIaG9kn0JiYyXNyIIXeUnm4vi{NJg;y@!4kH>MAKQR$NcAJDWy_NKqydXA2`< z2~(`lCsc%ia zvvZN5idhTk(Y>ChxN+*L;AESljeGRiEC-&9LfS-Cu%W?Hz{^JTB&60jB2nlxFEizU z9hHfEC)JtOvVwZ2mgn&h0pB_&*gu@_c3Uq+#DtMBJIotHK|O+XM2Ftp{eWS373bj+ z=|bOPF1Knf+831XL}U^k*~T`F$JGB-KX`1u-P8JRRQb>{EoIxXqDRXH$jHTspJzT8 zx7zgikk3VTZZHzy_6#+ANi>STRhc|$TXImv_V}oIqohn!G*Qrk;&D-wv62$L@FL^S z!Xj~t1+`jeR>Y&I(5qk5`!LSWgEA8o(LL$RsA%sN0h#GFc_H2M9P|A~foJt_RF$FW z8qPUZsJFrzinSD#fiipu@@tXytDJM0KYcUKShv~K@uY-ElpcO*-d(*(h)T*%Y_dN@ z+)O0ea<~d5fd@YWmijHyKm%pT=S=+r)amcJ6VsKAg<>J~-gPxU>ZoIV4gW<==nkQ_ z4M2N4vJdqJ zsS%ImYHyTIO^%X}7F{bsEPl|tgUynCs`dy8cScSfA|gWx#x2!jvo#G%v6`= zVvCCq(VWB1uL)}Md5N$Tz861mF&hi1BQ$`;LCq#Ed@I}Kbb~97;n2!v$hfWydD~4`#ru|d zNfx`s$sHq|+jhh48!8hMSMOWB{jER?eF%MV1AVyEJj*$wFw!jI`qpRv%+ z9+=RIyfs?m-zv|jrZ8Yfev(LL5w%wM<>Hk40_eoj?0&#L)iR83Dxrg){PC6fjG7{o zGofJHZ<~I?cvpA(rl^5ETC+*1&S9EH`L?m<>=#Qc!7%V{4v%^p_&{SM^PoR}Vp+O1 z6ltR8NvNc||CL;IC|9Z3_eS_#7*Ic4?B=FG1T<7rL2)7>eA4EcdH?*!tPlY5)kB39 z@7BG}?1}lOs&hg%O6qtd^3LQGEQ8ck zq#X>*FScnXkWa0N7n#RBKT}x13{-LnwN5Z^DEO|KgMpQB6+mzcDV9vinWFq79S_lw z`~Vz)sBOem5q;)uwLnP+9&a39eVbZW+F47TZk4A$8J^Fo=fZP5yQe#qqKd=x4W~@! zroY_3y~0-~y{6foLPvzjL{>EAtJ$n}AZl|!l^h&9y>P(M_c1g}DW%=Kl_8$z6gAD7 z-nHGQjyHQkwZq`Cwi@2Zf#j%Kn{66y`=z1SIt&^5Uq1Uj_1sCA?zfmcSu~TA+W{0) zYl!XMvOl&ObY#;m^Z5>3e(viF#Ee|&)VHP2hqHe^3=*{E>(pK^Hcbv`%p33-ULumg z+TG}u@bhHGa9~o}pSq&mdOkHo);6J5688~!_yihY8C4>ZDUhK0-^u)3_g8qQOrI&W z^NhvDC}QtfFC-&4T8>lEply4l)?>QFeA#Xvd#aQ~lSP^}kb`x)5;pRRC8H%Yud$qC zB@jM&dH`(1zHz53Y%R>?C#-a5;f^G9XElGU4c| zM{?LWuu<+g4<0!E9}*spfWz7GHKYe}9_>a;^hR_31s35irxV{fK`k`l;Y7F_TN`i< zS2=ACKN{vDL{y%%?o=rU&l9cJi98yi1ek8pwq;51k9};>+VzX5&!L8I|HUHz&BOPK zC?dVf)l3occ_Y_45%=x6@&xMZIk=QAgW@xKY8IX<w8)j1HB3w>UB?5ELL7C69sU8ia< zuE?LzuGMfd1cbTI%<|AxF3U)Hp`bNz&4jpf*Eh;gF8;?D+ElUsFvb=v94>#pB$}1I z+Ec3SlEUUfGvY=AIYs3ygvQV-vR2RW z5~i{g9zU)!O*q9wAQEQ1l#m=ld6dI?%s$d|N-NkAv~uuttm6}tOlMY#lT*W-ynz&~ z-R@1uVKHX@(oM1wF01+8MNFOM_kE0NZ%|0jF#)51`_Fmp!s{Eyzd%U%pY-P6R)wqo z%{{(aoUwFn4?-k#&&PSL_Qt?>lR^tC>a%_7=8a}-BgWOXsqoKYt(m!G>SB^MdtIlo zxp@-%{IPuDyP(ojuhN;_Q@_moDh5hQ$`>@OH3n{RW(#jAqqWtfc1m+rmuD?R`IPa# z$v3dO60GD@&hFn)I5cS@vb$44VQfchS+O?bDq7kS3xyx+Us^v_`aEuL9(4W&h@kV& zfLiltkx;7op^_|xF*ZiA6}BDW|3oQscQwT_&t9t8R&0HFO6$gNWFiZR1OWAru8oFA zwNYJ92e#UNH{B7h19n{^uue`4H){PvQmd zzG4RKZ587}OCwnO7oG{jt)4#rnzftyrmQM%(D3*Td!jK_i0zCc73>5suAto7@#ZJ= zaNhBt$I{feg!#RY-qjq14p+|jWxpK!R@q-9zvSsJDmLI|v_R+SdNA7CrZiJbPfDyG zHm0d~j4TWBdp+1d1*K@!Jb#IKRM6*fQP38)qPuuYk`*0Vh>-3edDL_?=;ekAv=M;k z)ul^>?Z0Ba{d(_?8LRO%L>lGir}txhN=%T3z9Cy;3mKxLtb0=49@v3+VGCd<(BS)@ zW+;r03j3Wybs54QKXGW4T-=XP+hHbhMI`RhgNf>{&;0=nniQxVDr(d<#yM!XZRR)` z%7{xUl@6p5x^+e?iqmMwRhF1gFS_B?x(gEPP}qWc?_LLiih-1Z6QXVqaF>Dllqf1= z_ZS*aAHri`Pb z2U~05g-^_J>d00~QCqVwJl^v|_)S@B?w;-&xi2fL`UjhkXgi*t9!_RllKOgl*PP3a zt^A_Tc;Bs|!<$~n38n$;eI=A_n)*5Rk*AlQv1?u;foa2*=DbVnZi`>p8PXL!D?f*r z$1ZC=Z-(RYdfk;qclGpq)YZk?J4XHlRuR|v%bLyqvL*`zU^()KyT>c8ZgND==t2;@ z2zw~1efT@L@mjY!+#>cuTp|F6lvGh%{6mcl-OfimEN2g{ewwU|_xAXY75VJjY?Q}f zHq%*|Q~m3n+A^GCg94&Bc(>+A^`(sM|u`#=NtNBI&IgEG8_KwiYEpOwvJl+l$`hJp%MGuC6p!R)dNOzC) za1|BDHUD4g$ue<_f;4~a8RGxiGtWCnqol@>z%wKHG)_bo3>#wo$4x&GxmO=ZPke+k zXP%sZoOh7Y_nnj4fF3M z6^KKFlX0?qikt}UpC=ukXuo%VP%`a)}T2M-b_2lPPU3e6?v&6H87rr&FYYI&vtbzzn+46KqqWE zuesHN7n^xXzZ;MIK8(+=}tw2a%;F-GYeS|MqQxCp6F@012Y3BVD%8HVTqS{)~ zR}2sJMD}UmWL}B#)2}lIdis(|tAo2)OY2{im6BIKtcJM`f$FndhwtGn(B@S1)fG;3 zuhJVD4&5KG)V^t}_7G*y=RQ@IDrY$Oma2;y7DnCV;=|{AyO|smQvU~h+rnqJWcID> z>;LQ9ua?5%1?rd-5V#FRUH-G7-;=@ndC|Ye`fH=-wqVBM{=H<${$bz$_^9rI=zom( zx0i)G2C08IhQEjXd454jQStLX z{oiCgC`N8!X=}hr21O~CP7n9yz|=Pb9dQkFMEC=Ssks@H2&k=n*a67qsH3B2qULyE zd(t@D^i_-61d7mdiLZ5Z$M)cbj#RMPKAq)3v^B&HvMPP?xnU&AakxRRYm_VQSzjuQ zmIwYUYK-gt=`A~4hNkPgXlaAe?DQR}*go*;C9SNmHZSG5o1)a(w>0cmAxL!f>GF#1 zbtvlLDzBm<4_CXT_HjxBH$EXj+D$pt8u4|;l5RwfT$nnuwv^0D zD|sKg+K-xa+-+e|V6q4DhYbfqIpcB7ypP-ASgk*gyQ_2@gXiI<%@yUF4B?8UKz)Aos-Gh__7*7 zBkZz-n(mQtJLuMAo zR)+-FJOtUj3UPisBwXV|nh?&v@Jq2?cpRa5cu@|zbv1e%e{x8)VIrS*V;dYJR@D_C z_Pp-wS|Oe%Rg~9i&OrG}PUik)>dS3@&viXdSGNr&hlM?P>vOX1w!}aE3GDa!7UIl9 zi4hUBO{Ybcjyrl7RHk1swSVY|O~ePoNP>I6Y4rQ`Wn1sgONg&p5++Rnc zN?o3_%al2kQ^(rr(7hkCUx%9-Ro(Ti7b=Uxh;;j>_rfPG@CA_8(TKD=Z23lT<&Ap3 zqwuEzEDmqC3ue53aer`jPs6j54|Wj}jQsgil)ga(mOq^R$G@Dc-*0xLwB|Rt+rWJH zM=Vr?NKo?|N+Kk;wGb81IgTpvz!FOJE+F(txknHj?;8f}RL1eucV!HuA?(k4s*sKat1I6-p;(W&dKf z9`E3b?{zp+e5%*$oa()Il2ru-c`Mv!;!M~wwXUGT8M(r zXb-%~Y-Za^N^4U_3utZA_Z5yB^|f91)K^c>V!Fd#8eOlnrOY2#{7mEib;^i*!HJ#Y z%CVLX_wC=6!;l`7-WqDyw!K{)hT0e#EwjOz!2mPldZjdPRLqYRh>81?JIftm4Vio5=P~NA4xX z2*TYxp%j|-Z8VfjNk_$Qn@vtQUgK-z)E$*5m5e-r3{Od$lP5OqoX$pjTU^BG?zx1v z+JepADIC#Tztny{lh^ulo0wRQMuDv&J%6(aX|Bs8&DN@ZoN+NWSl{hzytzMJQ21hr zy4#=-t*NWuc}29p&}dIW-i7Kp?%#qv>>G;C6=JCpoe_?Iq+Z))9smdb*A zahk1xpm1N*iSNDLLf=K1(qLI>U3KZDEvX)V7p|cp_o;yNcQx$9voU`4@po)`d>)A# z1*pc^hDHORNH`iq#U%wS*U2L@G`{0bY;PNIPf$_8D{c&nIFQO{`5>)gv@PlPd-O#1 z{-vF|CYp;u1D9DZlKw^~qKNlwgE!5$!nT~4{iX@lHYK3%le*lal2+#&>?NSEjX?!K zaZ)J$$W4dL!VCD$Ks4hNg(#H!tF*+?(q<&o&nekIou^h&pG?X>EAHw?u&R1s$qHJt zeCHMZmcgpo`drW3cG>sy~%1|qZe#<=?PVB(d!kA~|)dd);% zjb}_0i9wPov6XW+bi)xFkWG}<2nT#b{WQYyiXN|pR$n0^3=$e~eSt!&sztEx?~3{_ zgBGiL+VyTk`)7i*9kr)CTxO*&hUXUG;SMygdRwHtq@i8ItZBdC=JD(oW9+T>f<6&F z#cyO7%AbrRjM#ai$xOpbUD7c~DL#|Sb->VOLDz=27WwP^jVD4qN4=Q1{6I|#pDhFm zeZ?LBWxeL}n20S9D7N(SWH8I7x5S2X=ajC|{?=qUmqRdmr1EJ9Q|;_-L$%`8I+y|U5TBs@Z+WCud{Z5v4dAN617+GevHV3!8;e&64$8|x1uT&H1{j< zqEBFe=&Dd*(sKb`MvHs6^e%t28YwBSuYd0f=t)6c1~gnpX{$c4((FLiWIX*)Lrwov zX}mE1=F2$JJGPM$E}^0m@~U>v+0gp7K%@b(4gvW#L7s?*L!Q;Peawrw5Ab$f?v=-e zk*dKC4`RBSxaIm2CBaUQNI&`MWv83HVEE}gPo+ zt0>3HyAP$xZBKmv2>Sv0_O~Yg$^an`LKUcH1e9 z@h8Q;u`vW5DF*)fmp=xu%8;jqQBk6W=SV)^AsAocrTFiN!m^S zTvw;gthq1U6J)cVCqZJ6 zlDFfZT3XYU@xWI<3;7weQ@wp{Yc{+A4JY8LXW@1;_nyxq8PCUcaUNk0y1VJ0Eks&f z_EVG!X48vSM$@uG24aj2EO~t3F(yL0nw4Z*A5P242gc|b|WQ$WM>dU~@7hoU1qv9(>gIol4FMOi80p<_n zAV*vscAoj!bVKqnKIi{gCbhR=X&+!^;k6=Ieh;#-2x1ZV0$S@Dc6YKDXe;NRnj3wK z#{wM9c-nwki3KP5v}9F+$E`z9mjXwU=gPtOxldTySUf4q^P%JVw&#wn`QbIlF43)@ zI0Rz|C_N#!O0T^lepAT%YyMgdM^xH}dS)IhS^`Zxl1!kDl^z0B@OXV)wZ(G7XCGpW z=j8A9hoc9`JqIssr6~3;?g@I*ik_e9qy!+lUX&|(nQXO(Uo?viZmwcR*t-|l8_4XI zo4O%=S)_+))fdoc{Sk+Qr?0W&#_It;c=<;+jB3Z}eZbrwkEpC4?7G?mio zFMEsP&2Q>?&Z@1X=TXx>;+lA+aM;ZwT-F(~`Nc3G6rX&O$R0>s5v~s1ggs7zn=pih z+nk!9qx*jMXi;@d7aKt$2%b0Q7gNQL`LoJ0lTjtE52L|lbo`;^6xU%a=90G&X@ZF1 zbB2&9dy1w!XSzY3?l`(rSM@tJJPV76SuV)bTq3M#`w;y`cm~jFW{R=WZ%f{u6Qc{J zF*X&90f#z}zRZNyXJSK5qE%3r36)j5GMU8gyBESas%FuuunI4t7kGVsGko0?xxX`P z=&Q4E&>%xA02PHr#QawDaQ*G>@RXO|W5d!`X2bzJ?H47Yya>4K=|10HaAUJrxK4FX zZQLm1wm((_?6mdWk&<1|nBh+=Kt-=-7@$$n>sNac+GcgbHM_g8RZm}{$Ibu1D%KS|+-QE@` zx4y|y1#NOZ;X`sv_Q#$|KCx7Co78*>b|4YVZZ*l zi*W2D zsc`i144*_xXHBnyA?jWSKb7N0lLl~$q9$G`j2$jxx0 z?HU#8K`r|oqTUuk4VUh*YltgkqO>$R9c@1{+BrIcfRz|)4GnYsf?4hx3wZ_*x`&jX zKJHREdk=l1{;+3@EU)6Fj^km1a*Ml)-?S-cwMdyXrw{QcwX#{fMo|G*Zu=_W&J{n_cfZrjt$%buyh2z5m!RY{%WIyxLxwH(7~b2 zyfa4-pvD-s2;TXCtE?8+mv|Cy2`f`N;Cd3H$Q-Ji5~dfSb(#1CX?pIzgo->n=;1wH zveQM!{UpxHG>kTT;zreTebbW<2A0gqoJs32KwB{@!Cw=cJhr77GurrId6hh1P^}(J zH|G@RkTfZoWGsu%=U}c8<9DY;Q(=M7mDo4SJVo-c1ix9FH>W?^cICn*ZxBwR+mhi@W>#RoT7Aiqo9rIhR4`$)|K zi@k5p992#K<*v@7q?4Up1{fLJU5wV-dOYw zKL09F->MId%5E?pUi$(#M(iGE%uR2=J}s+4>tO|0er6e>VccQHLq9fK9wunk_6{|B zC1`~J+52k-iv-N=UEYsdqmYN0|3X+l)#v(h7p1)vILN{z4F7 zlQArvdsO&7Cstm4TVxqQ;H*SYhAyA;hL6%tccZ;GJEEM}Il=bB2h*$TW6x1}5^cBR zn%tU|&d7$WdiJw{n}U9u3tUInE@@j^SD}W|T+OWB?lt}DjOri13Q%Y7N6A@uf)AuD z4vxO}8<7z=qK3>7x0eWZ&$Jql=mVY@cu3T|N|c)EU{ zOyk&T<+9@Cd8UCe>atCqvA4)p0-&E62e-!CJ?eRGjnBqFYg34vRBikb+h_djF0c8I z&qID5#5{Fp=LU`m*X&}$3_YnCfS$4)@%heSC3X<19 z$u&9#j3Zc#hCC89dF)n1Rz*U&HS9CoQ?3MpMQ0KI1w5tLvn9ZDHv7n) zRunZ2(>jMV1d>%6M**EeKBYt>19CpL`Ew0Gx5b5w^Ub^lLZH*vh{mIzeVytvA}F7g zEMU?^^1;kIR%(B=(7(ERq&z=zZwoRx;WuT5gZE92HikEgp+RKOUo?*UR7*amtDhha zdwU&NR_o-htXvi_sFW#Qa=ul4jGBiVF+-4BpZkobk5YY9_r~=70>EU@+HVVTH8?Uv zquYn=W`l6j&SNyzrzt4Np3c3VQhn;I&clMR8@=8qgP2ylIa9T7?ppfjBRrqvD#U5JvZ%l+t|EssmAtFrPRpuDeTxU z5Vg!FXnO6N%n@V;ealh9)nDuN*$qu@>$b@?gx+>v-Kvkc_{Labnpdn>t z&`R;g`?5P!aHYa`Z9^i^txkT2o9o?OFA}XIhkZ|Zd>7!UHCHfc*T1}mcuUG#8BJnS ziVZg1gsS6}wRIPn^+51nft7o-^!kDjhSYSfp5+Wq8ew% zh@}gelphcG8$xZGi&!>wZaX8OsH-NXmveC_dGv~M+MAshxF@l7&mv_DMvlaneDUXr?xb;sh^P5u z6=yI`n0H=~4fX6s4@{4GLmHOdannoArlv0}LR|;p8PH}9hk3h1aAc@OO+Godf6~G zIm3an)x&%oDlNFBBa1%Ao~X8+6ShSh^sDD%d9Xx(f1W+NZ&K2Mtgd`eRkr}S-DkZ% z4*2!@c1vy@At_o8d3Xk8&1qa~JJ+`d3!K!578VgV;F^4nrMMC6bSvnpCVYoIVzr&J}& z$~Y}*$R1OKmV4>ukKu{Pf9FCwy~H0MvpjgU(YKvV#U>=IJ7wFXt2%Juau0pbiPRI* ze%3bWM?SXQ@`O!lrnZasx`=~%&*U5Nj8e~ZhxW1$z=cIl@>d_bS6Iik z(1a3~qY`Jv**%-0ew&=Fy|T}0NzW&UEaJ00=lfowSkg^k=<{RzPMuA&y1(>U=8u|L z%t{F!&rhmPX;7N}W&y|hrZ1L;`=S~gX^F8aO zWs22rXZ3}AE9WAe1-U|2>tg|_x(+Jk-KB#iI9BmfzNSRw!kcs486acX5SqC(lUoHV`wVI*; zM{{*nBeMP1r-}?F4vIn*=_C4CPhk&j@=hmBSs~p)Qraca(c6nXi5^I#1dRv3wr-Q0 z>aD0CRm|l%;1YfV%bqso%Whdl0q>ricSpS5Tc+{eLPU<~gU4IILu1=c#B%wF^DO@0 zhNJm1_xYN&iR9hzAmf?RcRlk+2UTUd%ZK8RKH-rc2Sm&ZOuRB^A7fu`1IxBaVk>Fx z!$8Fi+-CdJl9UnGJ2e(6N)b=xR2up@AX2NVsJ(jwC06g(tAD+2g<_n?hq}^9S={Ek z=xW{~_0No$dKjRFBf1ufol#TaYGC?Uu%NFlaoC=Cgb{Kbup4A`4*f#$Z(1+Z$tV9x z3(%tCb z^YgbwX1coQBKGc+-x41)ptrJ!pvWD!4D8Y++c}J;PS0~=3Kyct{Mi{5eGSnPBkF^n z)pgf(b*9(l+U_ao98O-C4!FB^m{vWLr_H(%j-1^_K}XLjmuCQY z6yAY4qRu9Cf9oo;a+;r=l(Z{fSGV7`S@x?3+x~oXVTHO9bD%ll?Jr7(Yi!tP1XSed zw;P8c25D2+cRAlXLwh|>O340th^v@3Zcuh%RU|Ub^LXi#Vg9r7U2E;nH}q?YUI1pV z;uhl-8{Do`1*r=)JhN)EX1>)7+DkqC^&bMo^s%=)1)E?0%sRAY7emnIX$=NB+-~>E z!O$-B*Es40gm$po6m+-vZA7#qH3S($TE>49FcC~Dt%XDyd-%M)LZ^WEG5^hUbV~)p zQ|ps^&bB&AIxs7EW%{j}Xy>^00s+RBXg;}5iDojS)JI@WFVqGTT3;+*chaBJvR|S` z;p2UZspE6WRN2#C3wSa@KU*1Fxqw-&4@IHvi(c32sAhEjc;|nxH2yR6ipS~xUgp;B z!lb$wEh&p5@wdbA66(!Lvdrbh>LcZ8Qs_>nzLu*>B=|=iuj?W4lof%V-cqnbyWPml z?h|k0>u)y2QC;{4KBCSn2&5pBTD5`*v9b@{loravVg+gKx;E(1A;1~nL z&Knr0aj#CJU*4cPtOrS{+GLD<#V(@ys6%v?Wwj?j2Rl34JVo8&SO~GsS4v;lVXgkB zgo}m~E&m;f6+=jSpCeHBv7+62K}G5@JRY_7_@~z^o9%+{Hh9491!%rB^B!J%Cym9wdbvPy~1!G<5fIG689W<&oZh&gPBqgpF(ecAGHB~b-y~# zL02$(lRg06V0Xn*c9A z;uP}&E~#i0Gd5&55L6(>3v7LvXP^`|xKM*4vCybFK*6K&A?)>DN{X50sIpDgAWL7g zxbpNqnA7)j+(>GoNzJi&Z%PTnLjLgfM%PKXPD={lC>ry1j#?$dG5H0aHUwQ`YDbb; z9+d1Xw#**t)PL`3_zuulEQIkGZgcp&1K*yS^aLrCr-)?7o}w>+Z%iCIr<;mGIPA)gO3R#KlFaNry)a3w>CK+u5%c{hVTEOzI+YBdHJrJT zF1s>sZ63_}KWWplY=+se&-YjBLF!IOFWMZd=5>(reSRWwCUqXHTXz;mE?1K`i8SbKP4pq1BiLQaTktvy`wa zj4L#eCqDie8BZegbZ4GaTK4p;!RnC2q7=8zc|GjzYeW|R=&^ac@xyB(i`N6)d?*Tq z3XhYsY}>)Ur)M~U?Pwx){@}+~fYl!ZxC$1R^{@hh##vkoXNz@2xX|wQ)*6l`5C~U= z8XtMKwjPGG)Z6hPtm-+s-Kwp7ZSgtMBUQH9LJ%~AgRT#3Mvpm2UoFtWEfVRpGX$(Y zmpz~5`Nm7$g))Fybq;fRmK{7&Wj!A;e8xCX$DH;Wtnnv5&z3w5hQJegN^;V`I!=cUF6XieFnt7X{BNHY2UvO=C6}-2nenXU1G1wGv zNRu_$eplwIhUI(owl3(pe{qcj<1C98bZ3%u=49;b`a=`v?)ndx0gvqs+u-zQ0h~lu z5-pA_dqXHL(X{$~kSFlE-TtD~`7}f8tDlmtpkSLL(8c00Zno8Z`lzCWYV!rT2(-L$ zaL_fpI&df{`Jvd^W1c;Tx1{!ZGO-Sc)Ssqqf5k=Cn%)BdK+30K+*RII@A;6ZefW5r zDI+2P@F}xdo*nZypxk%9G;e<4FB?|cT)7RrR@--R2KIXGI5uVqjPzfKY1dxiN;qiZ z2zit~?{io^ONz1sFa)jLPtQia-@OxLvUL9~k8W&ZWsh%E7Z|eBpD*D0%Vw|Sl>#nW z^!3*ZzC-@zEP;q5>P>EOscKTcxx456v8qW~h546q3XC!x~j$IKPt>4>^q4!| z%d!?a6bfDS(e+2A_U7ttwsNpa#Nrj7`osg~he=2?mSxGFD)CF6D#b96M#mDqc->e; zo!OrbnE7et0W8^hn@!n!_Q+-p1sr}c%J2OI6{EU1Y0Srhvf4b^y@#=xMM5k50EWuP zT>YrTV>Q5_KVQB7g`GZ%S$-aurDh|qtJKu+VICTx;A4x7E0q*gkCU?X7W9Z*D=aT5 z`NYAOT5qc#ZH10xj?t5UW}HQ{ABRPzVCl$;Y{hpIF2E(JY9MMZ&r4oqfK5mwI=PsXH_B!$fV)GGzfYJbXdt8=7yCf^o8S{xrJ2 zd73J%9af|eUr7c!n`gQDTtez5^b4ja3!V__D&nUZoNHP1FEiyWk zT%oY;;=Nl%QCe%gsS130?%u?N9om5lokS-`@wX+^W;Ym^oU-(F*m>`#3n{7M3L=cx zuFUC#)OQ05dTF>TG!v-{sQTiwH0AAl7#nsh3Sv?+G}pmp>NhO3)IpOmngO(hC7dM_ zrTVFHSycsMuy49z25y2zMj+SVxP-Wes0g)>rr1QJvRbAI*s!LjNc9$tgqYY2$*)#? zg%4KZWhQ|^QgNz~`u0QReTET**|V!db$n$f0*6E~1P~}WHBH{!cN+LOms>e>YzlL7 zb&?Vi0FBeT?rYBL>m<>;^av}I+Hew7TX|ZG9zb9>5F}OU7KA`eWcCRjIq|jo3j$0$$mZnkc)(891a&ZiY(*7>$Y? zNx$X_@*K z7cZk@&ArQYmWuQFeYYQ3MbPEe8_3pni27aquR&gHRhPqkH29SW|GM)3SE4?=Lm_rf zCFa9$A`VZ;@MpE`oFa-y0b1ruPX00|*gP;g4HEJG&Gd|4r2g?AT{O`{u#&ymUh_%P9Rg-UUH1U3e)B<7M-D2= zO(TXM?d+&o#vj<6ZiM5)eLD+KwiY@(|6ow+5MSH5VjlXs44vvvUB$@ztE%80EcuU` z0>3&6ALY<%+FM(A(x}aMJ&Db?BZkz$HJG3vz?u_z=*~eA~Vqr3gai{m1 z8HZhuFwppS==!|+kNi$}wn9Mz7geC})=Eu2v4BfdaE*)_VLSa;6y^D_PoC=4kfQt0 zuFDIth*xSc+hUN=2U$*4lb;^=#0rX%?9mQy9iNP-`ViC0=_WR&U@rG$BK@Hp^B$y` zC3t&0&oRp9^)Tyab+8P_l8=}!-0{=g&fW=waBKpV{vm zw|b4DvRk|J&t2(#dug}|A9`0%Hb$o?iCY|hOa|Cm&tBA8SDwYz)*nbHQ~ zxE|4!JSaR}gx89;xZS)Rh<&RZkBcnEV=88!*UomFPH#Kh0 zbSc0KR02A@{<)G|Lh2j2)5DSWH>{0+P1i}@9!;A4c*__dMi%cCxFumeR=bwvHfi2Tu6P-raj zc$B>sfO}w}7Q+TzgnHt;st6T?pN?6^qj$^5AD`X)_bUsf-oCylZaV=ZK1cHTgfCT@ zf~W$TK;qG*$tmC8yc{G6aOujZnXegDgF)Yyy57)AG3cZM3eTSHdOyy5?ou+IDEP5} zk74$5iG1zs+`U*zWG7H>aeZh)g$GZZcyw(I`5!#aid?)tzj&4Fx2A$zIh6Snz!~}e z&jj-$0qZZzuRT>dx*MmvW2Gi{3HNg`cu#+R#CbHbG7f8N- zA7eYS4$sVIvm@3!7b-c-6kf5W$RaV*>ma2!WO8z=EhtRI5=%azY|)~fCUmAi&}Quo zRP5KUcCPK3D`SBnx=&uDlOFqgV1m~WcCT~&!#&4l(AlWO7 z!!ugHKal9ogCt$TKo(P#1oVB)LNFO28;1x7E;Ihbn92Uy%`_|U!sEZy{#uJY9@h+( zKm1?py;W4({k!ekzLYvpptuz%?i!p@w76T4;_d{O7I%s}6nA$o1St-|-5r7j3xu5f z*I8qqckOd`#<|=#xz6}~{dwm6Op9-^MlLNlgkSZ1J~mI-^*72{6p{H9T+(Mpqp{pq zBOenvmTxY1K>vhSQ)~hj)2f#QT-fQ8)0bo+#$UC$8mMywqxJ@-=~W?|C6UoM%p)fjuyEn)C7`c)*1WjvRl}avZ z)~{RJ(A~XpiyYczO21m2&a~Vq0bxw<&#WRIT6R~wK1kW>y?Fj~d^pw0bfwgp zM}OQnTun~6=;;ExG1*f0?DX)6EA4E%EcfRy-_K8Nd&T~rqpA4cM-$4ho8Do$=jq<- zH~!ptWDSOG{mt(rHZ+U69_uBJi#wpn-@1Q6VV<6SAy!juG#D@NU|~Fxq-|Wuj&~3r z>$e%ntDCj(QhzgzzM(_c1Jm*3_6r3A_e2uUNDc!{Shnx4uh;zW%Qg!9!<`5DCQh*D zAAv25?WV@yH_Ycx$rGn^m&}#+TXjv0DQY7jQ_y3Pm2bmTmPnzBRWFwvmAof!VU4tt z)B}0B3B1qdlC_>S!lweTeK#p_3acY98ej8iZ)V^v{VckH#%S&#zRwv?#~Y6FHEmN4Y(>ZKi2uE>jco81an@Dq}Q6B!BHy&~$z2;AWcV1o>nzS{PgaP-@jsOSiF;^137uZ*Z< zPP?W)J)9g&kp^IH+0VrgN#_uD&E{_Q57D^ZCkP8t$i$+ItN!c%+ekgO2*T{Ia(rf| zUeH-sWV(uH%p#Z4+&8ZrqEbN{v_|f3Tj#+nHsd1YIe_SrnKgezhww$UUKx$1{=Lo zRP~2JTs5&yzcynZ%ZvjgiWoMbJ^c&rNBy%0d@-y!A<*mf+c_Pfn<00LOq=VwGsOZrn~pkw0WIxWizZyVNy@ z!WqR@4mV}H!|@`7X)&7@BvU-UaSwSC;L|R50-TLYqDlqAt3-__%-1$Pok|6bW-Eei zICRuB5Ea=1g4;rueYYrJU9v(3?`*Nd_JG1kyGIVJ7v%>)v(_by(a3s9_#btbF6SIESA+bZ4oQU*9-*=B{9AZNNbV}}76oZfs|`trZHJU6 z^{Z-G?>{mYCYc2HYRVTk9E~$2gf`qEoKri_riyF=u4KKHeP3l0SU1n@Y^3a4rp~=; zAf|2#=LM3H*_mExrG5$HaHBcYOzH(M6nzC|;{80M7Zhk$+VgYH-yP&>Oxzvd?AD^o zEP{TjEKvDVrf8|2ZB;JE*X;I@mprhQG~VnE@*|?Ptu21i23Tu%%TkXe?2!7d5~ajV z$M(5D!#`=Es9ZPDkC*l`=QVQ}0}!B$zQBJQf<+O=Cc8pHbsr+@pz8&BXb zA2&xVx1rh?~LW~z(XqBdkCEDuPQ$5M| z8n|xFub#?Z2>XmyMi!?E7ZDU;g82{y_9_)&?`+tgD)C6FnKu9PoJsoiREAFN>o61U z`t=j8UKUZ;jw^1Q0Y?p5R!EfoM8Ibp^qZC%_*l7xOyw~(WO47?6uCoI;z94~cNS9TYc+Z|6P@vEnpS_nV%1$y7MIBtF1rx2k&xODSsun8Ruqsi=k zQuZb2I}8kM{fG}1MkXyZ*bN5l0$cqaL~be2oi=Bl-<$~aUNum08X6iU24bU1kDLA% z$s&f;>wJSxC@dI~IXs}@Lo!xVQN5(7TXy$&eyDqkn=!z|PTiveUJ z=?ER$Q2*}HnL4<(CN5e}N$N?MpE4YO;w{haY`pmt>Q&47&37Q8)^4;3B60#SOmV`HsFn8Y7AWkx4 zAkE~De?lN+N(2M4>w?-xRXHBA{55ae=R=?9s&*YX6|EjFw- zWP+QM`LCEz3@)jAHz!?oAZ=`3XdF>;6RY;}(k8^_^FwuKfkZQS*-~Ag%C2XyOPJS9 zk#7OGJ!SDs+M&DZcvkbGZ$0|ko6#{+l<2Le$D4T&Wjs>L7@Vz)Jg?&&oEgP_ zMIar;LY7to`!v#TlX=C{8UQCf%x4cvF((!2G$AXd#bG>3eWjv8(I zzHJ(O+xNzHsU_@ZOg=w?Q6=0J4*-bz9T-d^O@53ojf-0S52&oW|A!M2DZ}I{{F|XV z=L4Z*w9P#9TsvGb*QoU1@{#*%&WnU}L)C8LX2oA}bz86Bcq(L%8#QVa3`$=zGRJH+ z?`&NM2r>|Nk|JgM$H5t4{R|c8{+Y7b z{!2qsQ$WLC<*#3HNnYry0JEiCOP1K$TZ}C0nnEhVELPh5vIcu{6M2cRSArr)zf!F1 zwk@$y(WvE+lQq(y_X)q*8JI2C^S=uV3K+P*XH8-ZIsf&k3SDn^;JUq!#zHkmURd`M zNBm8jZ`P0B53(m$f8`?S?!FPCdhW|}Djx}k!6eULtaJq~z-spdwc41%|r`j?jOrybr`!Ebe?M_{NcP3F{`VWdh@XNo)DCNKSGXazTvnu`{ zYQ+D6G5jBt1&Uqs{|y8p8l_pz^O*A74ueK=@iQGwT#}Z2^j_tef9{NWQd~lkf|W+4 zQRF$LwaxI*kRmG3I~qlIccpn$6uy%wVO5*AmBpvQn+;*1*h~2(rC>*MpQdBFpZJ@@ zR_*8E6LNdsfrgCY9WwfHPXC=h)ZzMp_z4*M)U1FM`5Wtt3;_&s`aGg2C;y_FJbjog zkQCZo>bKaLodFy&$ouq05E(SsPXByTYsN{^GQZnPi3({MEGFDM=)WPU4YBKf->{@> zZEanGa3M|@6SE_#{-($<*R`)epxD=QVa4n>pSTMrYZ^oDQr!7`AvxQ0 zijH3qS?a3Zr*P2Mt$2n~TOV$WAtNk4@2!tm`J5&2$?zG!)(ay&Vegnfzg`U6h-6az zzaRyJMcydlfsqgc0Jf*GyVdQ(ZEg-_UUrY8>xuiQ`ScIT?b&b2n;s505wH%bT41!y z_RJ0=ZBs0h&prEm^euRxn-wL8Og%7-GVAut?12C3dt}aD2Zna0ku9Tb-|sU1O5RHR zFrFpQ8+d07<_*JK2)edts%XF4dL_}8di+%H=zI#kc=gS{*5ffT(X89_XQVJ|=X_k= zdVJ3~O{de5Xry#F#v#1$7YR|{8g7cra5=Z_&n1W+`MS`^;-Bxs$4v61<#gA7>}IT~ zoQZD`B_)g-hqHkwdcN{K8t44Vj^wJzdU)jLy{^_!b=)V{SL8Rms7yiC(o;hzF&G9a zN@@Uk=Z{P;ZHKBp{*3J6yCzc8@7nTzv?0OI^0Hb;9}Dp#yBqX>(CV^WO};r@nu12M zSuPi$&t+#bulXe|JOZ%F-!1~C(*5r#kb#(ia|z1lKfP2EhI;Nr9=DOV{-_HU+aV1V zvtLWQ3WmA?L; zMwV@kYvO_3zs{&{P1`83vhovT0rXJ{C2SHi(-AqeI{b)?5AC-p4{NC*<|3ha#Ja*D zK?%%JQeZa!F9ke__+|;&abi}xhJa{+ID>@Mhej@5)! zoV4voPSZg|R!~^i@kPIW=wmYCE-|E;A*yvqyFK}F8i^1++z^SiU^t5tx1;GHm@|eC zA;*x%N=3|~t1<--B-5+DZ=1hvfBU9DLn9JXL!h_Z$U3r)TzZT9Y*TxPtlXr?+H=7}TvHge-Xdt$oGjDtc>^qN)b*3VM2< zv9YH<7w%4*_7z)~?3$VV(okO7A#I#3H2qu{r}YS?t*&IGWe`aY`)jFM?;P&w6aSoc z4kZIuki=#f;$RGUZH&uFU-g(P)s}wRyjH4Pk$xX;lglK zX~qO@N?Lwwaa+SLn5n*P^h1-nNhe<@AqXKML32Ek-%;>mbX1733{+S>o|YnJY%Z3N zJC~mB?5sBZ*CT=BPrl_;EmLHy$R`FG{cn2FVg;w??KoepbjZVN<0J+K;#5{VWCQ-wX{&==(c8dk zz5t6%KWpx~7YsY#x#-M397}<$x^O~lht=E4BkID`cFBkcl+1@7$YU(&S>@??o2nE) zo8dziV%PDk8vX4tbr`$Lhz(!2J+h6dgX9XOwVGAAWaQMg;*;`kxK1u#f>=HmmDm)) z&~CIeWbIXjRE~(lWM%V8rg+M>vp6S%Rn)}HRk;P}md~x+v10W7%c>|qWIOwpTT7Ha zwm@TmInRVaxzA)};qS^^cBYJz6`bq!HnbVl_=M7`P9Z!89`v+uxKE7INTHsge|lai z^JkP$y*SRPz${5sLqpNcYfrG&@AYa2GHQmeclH`PziPcMLaMu5uaQ*MmKU_p9_k2v!n;vxx)AytP;i1{jR69dAL)wON3>P-hDXVM;_B`g@|7zu z{lwG=CFR*YGAOy^WTjLiYll9_f(*aStiChB`KwXO!)g^>6pnB@Vg>Ew;4R6?5-&g7QTsZ`aB!)DgcAQ>y-Ysw#dvubaO zw1Mg8z63TtD9+GUB^ATSdz1bea#wo`c>)rLt8#e>t>rDw7MR5+#jL!Hy)UT{hK5`i9GhPjA??WfRNmJ_juK%lG=QR zeQ2)a`>g$utIwlItPTCQ_bUDzPq{I>l{h(DrveM*Yw_aN)4Y*_qA z%knG2UH;Hx6(SIZ56!9$wpc|L2PqvE!0U#nXJ;3v-EN9`g@5{qS&i;j;mT@#*mJoU zhHv(k6)EPyb!Nk^_|@$}UF$8}5g3tsHO8@`uQZiD z?hb&JLHUi1N-bIK>(H{|ro2>}_I=~|Q<5iyR(Ecez(7gbNGn0H#MOZ2iAb|W%sS>= zMe6t;KSqC{lk>FBs6S!MU~E}WS7#i3 zW=}h%BR?MbGT2U)1uosaO5?wMR*UWs0@eI*zx9!6|8}sk7&ki`#qqGDQlrB#8eO^W zkhRzKpN85NB2&NVh5NW$dT3a^Y`%Hm)SM-uh|Pu_tcI>WuMN3xBEICzuJ_)Zfpa>N z2*)6r#nt%->MXA1PnHnr$m?acTIbU-kECLYiOlal6u_>hZRB1vOMCf4pNw0k?-wT! z@vCAbGw4yh=|Og?)w`BfyEkAsGZ@+Hw--w$;h?0Y_we2n94@%S8}+7`SvWJ0sd)Qn zx2$Sk?0rUCJSYQ^D(Xp|VrWKq182uW|CYJlo!A5JJcsVaGy@Iy90a8UC`HR5XB;Lg zA2CHrMlJ*xJv=?xrbC$b6kW-ODCbl8`?8h%5lW9$l{{-AzB+y;MnbL0_U9MU_}0>K$Hv{#oj!i`TJn z2n@yCD91I?B;NpOt_EhOU)tJd=?$Jw312`@!<%i`K(PW}w3{M2*|S$|%#GHc0A=sH z{y+)|Of0H*B(1T(u}yG-Er^TB>5gObsR0OdX?OYl;v8y&PVdc4p@6Y{3bm)?_9F?e z#7YLR1*@5{p^e@^1@(~v`fP3`?c48gBqs=ykC#fp?L8TXd*d=&s7_Sg=*00`aAR#F-^f& z-{zmOSEi6*LVb1Gthrv@QkY&xF{BcM2Ca5jan_*$Q~8_ywUQ0@DN5{TXW*42l7(&y zw({cZJW%8rQ4_pQm6MD{h_8c`;GG&gCUyKK>tUhYQ!pX)raGKsAMV zg_ebgolWmfQhSTXHn|S^8S9#6Htz5dLsjYm>^nRn=|p{BkKcylf%PTM6AULmbIkFA zX#A*gnXkn`RE~~O?95s=Cv9+OhK@Rxn(N_W7x_f(Mm<>PcBP1Uwm2NsWA20c&2m?r zoYDM+?G-tj;C;1QTzM#HPqc5prsZikdPVJGb$jMU>XBCB{47F^yl!$Z1bRcxyws3} zCOb|rP7*mq&|O@=DgiyDNdD+#TO?@c#X?grioihd*KyVztQN<#2HS3h#1hO91)+ZWg!RzEUm zyp%^!8~{>Da&|jquQ>7IwCTshJXslfyRMPxnO3!Y&(aW-r6ajNp}TP+kf<|)Sm@e+ z2236wXtM#5N>|Y6t~asnFCJcd=%ztz{+c$~uMc)r3Z{wF0VtJ$#+`7Fa6Gq*hs?RY|X z8taxVmOtDxgO!;NSLGI0nC69TTFhYzE2&@RS0hEC6u0r*<=gHe@#@2qCI7JH36m1d zJa5pkJaaq9Vg^=tvIhFK>UVswZz~S0kIVE)ujn?Hb++HSZWo;_3T3R1US6zqXPORa zzd!(3YTVDjuvWRnx`$^O`xw9NMw+75{6b|lUI(X9+NKF+dmaNE5AMX=nA3hl*W%T? zp)0GGRgL`_8NINo9{!Wr+SSenqWm$_YaCErF}MX7xHBk|Q}Y~nm#pA4I53q|Dwk60 zg7ljk)eT$UJchsWj%EnM{9X{vVKNVQxjIml7r6a?+t~sa(9r)d(PSm;L{^_JN7rm@ zY%#GSs#d@dJ?P-2H2RW_PKYiPoRC=y<&SJvLL)?(qSi*nRbYD(>8el)oiOhS%DWu? z{$Fdne4|Tr;_agUO+H=;lkxv?I~rFt?A60fK_EnDOTFDmUEa7exMozM0O;7y+8$%& z05ok|pN$W=RF^PL^f{!KTAM0ud0PK8!UCP-c{Gil$la1tw~%Y)Mp31P3zHGHJbrA& zLv3>SPXElWyBXg+(VgKPj)pGR94;i+0@>7T3293zS$7~I7p`}*;jmf4#=;OLzx+ev z&AzAhO$fmxfYq01qlLkEdz)RxYMb32WnaJVa zvUf_J30c7x&pjINLPR1JRZ1K(G;!TPxO@7fI_{Ku-Lb4=Y%#3AkIyps9~r;-LM|3czx!BS+Ww8Ps+pFK`K>Qa5db6mE~%%@g?;RX;3FvFRX3|CnFll+ z3#O#@wyn8VHibZr+(UbgUU%2T*q157a@^B1ImPuF3tyaOe_L)Us%VY-=e}q3%pzd+ zk7vhUOO$$SEZn$X*+#%?lqRo6cj&mh*{eWJdwm)G)qJpQ&`6SYQLUe;){@7>p5$Z3 z)H`Bp>vGuqT3@#Cd1^;OU!K4seT+b?1pzfJg-;$q8|}8}E*3Y!_8vceEBOBnGKhg0ItQ%CvNZd6Uo?UpvuSyRo-syv|M57hf*EWn zf&V1Z@9Cs&3wYpOv{9n#(x|8j-#y-vExL*}i8KXyKRDU0r@bLzJ)|fpT-Awm%5akx zbu9Mts4b$(*p>^K%nhdYM#DYg_4}~uvx)Qe@`|2~?K3rNdZ-0p3v$i$vRd^PA5Ye7 zg~(Pgqi)A%+lqo_WkH1G7~g=@)A*oN@r~(kaT~AdR#j0D6+qU#+a`SZM0kgr7@kAs zne;R#1xt4id#|B2a(T9KwLHO2Quk9roNOri{cr!<^{cdg<*E)|Sf8d8`$#EC)=3JE zmX5dri0EFHkEu-dZ$#{_=O4e9i;V+z5U(u^8@E;1=@{Tf+*409z9?d&oTTPqCLTlU zxN7QmXTqWN>EELIBXT{qGCa8dG;wF5Sgb)oWjmMiwN)J?APs61Ff!_EdMN#728Yb! zgT=ODMJJ)`$(X)teXYq_4if~GZKlutG4!Y08#RcxM;(`DHj3_(+J6lKTUv?y0M>#y zbu%9mbvhLegymM5aI(32m%mEDL;o8tO@fW`>ypP+$@>p9tc`m_Ez4VXuJ9H%31y(w zcO2Rahgor=ki_WjDZuK8Iz*0Q27Mm-u9h5>y07v^Snk5JH16eBxdp7n?R61 zWklC_lA!}4dfzM`%V;rbZ(||t8F+qLCbLF$I-)CRXBSN2td>g)OcPy$%G*`%^+5Gg zXY0Q=3z5b&NxUb1iRx?{ZTAZ)bML{!euPRIK;DN7N*`us9j`4b1UN{*+M{fz090Tz`=@0%^TW#cU>W&OVH;nLm_MR7?|)=K{$9u3bE^3~{d z|JkG|E`qx6PeOa+z(2kGCI>f&X6@L8FQdTSBHTlQ!Tsr}zW6MxtM??J$Y{F(xDtMa z2(m1fnY)Y>Q*m&#FX0&OF3%GNTl|ovtm$kr_)#M^>VgQ6ppaspprMIu*(Ec`0Y+QN z5!|df95hZRi5ZO2bhHz4`OTZu<+F114MZ(^qgm-fh`&y-{GN3u*NfDsOCfnQiW}G1 zN+6WTi8185|2usPr(2>wB_f@EmrAVGo9(Ls#AOH$Cvhl?jxi%7UPS zfV{9kM0|}7vgT^bA732((n$TY@b|h%^!)iu3HOJVZlh27@~?1HXYXXoXm&2$I-;@` zK>LG|ZB%SA_3c_*uD=1kt9l31(*X`h*u)*PuvnA8Ne&BS=;wQ7oMo3;nm`$wu#U>U zZWDl;P?@)m4%+>R)*+W0@QbBeFwS8+41qF&G_OzJ1{{|RdGtSut=5tp%h@8LVsK*Q z9S2JuT)#3|m$1m~4@@aU5wC@IRgJ^0n+nI=ks;s(o<2f97hgNJt|qcRw7?&{_=nNY z+vX9wHBO0KRr&b1x!%s_)E(G|*i4ECBO6oMZyI>q_FZLuwvAr$cQs%QkSBzx4@Pu$ zMcdE$|CC7?s5g^x$dr00yL-pSJ@ketwp2)gL1Vu&M0);=uyLE5*p8=q{NC8cYOtxD z(ZMB$vrkR}{tElQDDvt5wLqW8WtZU|)@I0fo=sYi@${iXduMxzyEBLq`&YhqWRP(+ z>#McprH3=PA5IrB$tiXT1C+#JtHLdA?k3>IJAt?xXwPrF;vpL<2%Qs35oXhRC`jtE zt+Fy<|0wdE27(nkIsXaL*!Ye4czb-(D&rfyO?u35-o89LSK)euO$bYLDej?tx69VX z)r;#PR1v-0kGj^0yyqPa`VdN`w%YkBgDsR7hlxz1qoW~$wX&nN5EqLEQmlocN+qlu z?n<3uDPgBUeEg8QA>>$ZoyS|q$(H(!cTQffJZPgbxaKn6p1q}=2G?CgGsl%m_#?^o z)JmAuuThjYhxff@@E|O32lct-{Ji1}u22x=of^&ctNFXD!^F{rRAhQ7Wk>O(Q`@ z>*qSKY*{87=HVEu1AYZTffDw72OMuysFE~vY{_SmmAb7ehrgcy&Di6ULec)xmw*1Q zpwuZNY7HB%eLVQoDRZmm@dEtmS^tAX8$lK@c3&fZcB)L3f}^sS$7DWBYCl{n8P+r7 z!&#lqoLD3QKjQU55K&c@GH-0PVY}9!o3Ax-y;$@9n{fQ<&;cooNVx}uxe{1MODy# z_;?+F0bX@H>5j0}CmZ(p`yKm`0_CJYb@DC$(>?lwtd%K8I8*BYh7-E#n;b7U-s61_b@D%UJY)Qd>eB_!CkhuNby!8)$h0=6 z*>~GdWMaW&L|1qN6v^!P;6mkMuAnQmShj+z9A?;60!Wy9d9dAR#)b11H=Wn#EqG$X zbS3FcD2V}b=1ZUqg~!~vqM3dyEa{rM#)){mUUl|^uTy}*9!h$6@%BDCK^v&}XD`>s zfh%TGKB;)N)hiCV#TjNpaT2E)Ju-yZP@D57zj?nU8HLOpd_Qf(6s8<~{nGkdTlXs) znj|?^+OmmY(y4IQTa~l0218`GazSJN3CVPpBIdToB0Hxcf;$@&n8i`6;%QB|vjm&?271iZ#Ji;)SjAn{B8XO+-vL-an8 z?q0%uR&A_>FV2z-76g2d9-|jx;WP@vzm>IKY6uWjZ7x}}bmW4qd_aPpww&iv7D}28U;c%2h%OM9E$QeaWFsVBd#M`= zWt{WRAR5l|BXc5Z&kL9FHvy!+a&o|gSXwscO2fr(+i$0|3yzPh(VyGAI@iB7kf+%D zqE(*zqVTwi7DEMfj?LrK)Va@n5lFr6L8jTqwW!|2_)|kbTAFj);tTGUu_NaUu!g$t zr!-(+dc@B#SnPj?9RW~{!HsT8h~>!ZOT%zGpo#66Fk$O=Him0_wNc4+?1sB4rt%ok zg5NSc5V?qOALlqq`{V_zTN>4MR66^y!KOjN-(vzfkk>$yCcWvgxR9C=l3MHe5XyI0zkcbI40k1t z_9<&BxD{6pDOYjh1itjsE66$6QRT@4C^{A^Xlc3WdrBHO5z&-EU#tuN2vo6vGnbGw zmE}-(+VicawbhEU$1J52TN7vYeqliw9gX1Ew=n&doR(1>-wLZ*?2d@oy~{3iSDVEc z29oiFIG}`;)tjNX*i^2HSNdM^n|{gAA8q{ue#CKeCCGRD?P09z4JJo(&p2g=OPR;$ zU@PRdq7S&0m9$qfY!KpX(p1TE(MHprL%PJoWYx^H(fg!?`%5Go1DbGCzSp@WOjRl8 zayJ&e&|nMRQ5clbqB1ZrkWvv#9|i+EqDH)I{&sv-8!A_ew3@ADdZ&cWq*dh|tUPK+ z583}(S5h@b&CMA!lj$=&<9St=%`sg@QYC(K?$(_jbAEMv@HCX79j!f@aA51JtCmNO zYERRU*$%iUX}#n@r7!P_XT)II3Ood@k!^y*@OUF4kniepg2V_gX6>yEL=1$o!NPxh6^WBwrL zT^QIyc4YW^A4OlAu#Ck_jnR|#(PU_BV=Re&ij>sVQoAxBFObeiz8hVUGfi$&oW0Jx ze5A!46}V`hIOTU#YGwqnOpMzbJ?()dc+>r>@`czEJ%yKy4!Lq_d|2@AOZArcqLaJt z4PkmaN-3TX8*X>ub z+858l5R?-ox!l>_W-0VaDWOFDQd2h-d`&IKarC|C1blma)i-i!kE955rScP5JunrF z7$o9R|7eEo;eoe`y8mj&=qaqq*t0Yv;Fsl!xflpmO#JD!Q4vvi_RoMw{ zb2{<@3<2-IE4H*#0H!s4=4yq>v$Og5TG@@4=qvo@gFRoZlT+DzQ5&ulc44RURD1oqaOid+c1Gu8ccQU&TaEI**{9+Dag zVP9#I9on8mWfT((oC=!k3jBk7LFvtLL{EiIgEt zF7!sxgWn5snsIh$E&MBA3XeR`Xh}Z}9!At@o3`PeuD80kM8)cmEkDm|c-2|TAuN2N zuJ33BOPxAe+ZfLNvbr52#H&R9r=-wZhS6G=i@PmU4@d{OIToGLFYFnsBFKNh8koz& z3!KlC68$9(96%skEFTa#GyLkF9v)kB%>c9x;Y1&}<72dp4JUusZ&4N`j7*r+yT${_ z!dO<0il83ldu6l4pwi@aSrpocN4A{C>9?zb^Y+ME-wI0hvWdg!W@d>lJ@tTjxUDiCGLsvF8Vy-K$ueOypaO2|*UF?s=pq=A0fSvWwrlyG0!IXtYPZk@1 z!zOI{gDQ@J%W10U#5PH|wOO!rkiqUo2&h8;cw{bNKkP5F?T4M)Uu5@Txb3rkt^HnB zQ~Bd5cb5VdY-^u8RaDEl5`|xu9bv-M3uQRQ}g=`=u*#)|T>n#S)It4KK}yDwF--kszA>i}O*Us#Rb8=7Z$; zR-59-Hy*^&yFjAqQu@!APv|%B`#R?&whZ^2O)FPciVCmBqynMN;bgp#MYjV!r`Dr% z19WE3~#x9=TFpz>Gv63Q%c|sX(Ij`N8{3O>U z35IwH>&WKRJ(pg`O?(>%cE6CIfBLiq#jjaQ0}lm7d^W{1lZ5yXo-+F^kH`2EfN0~9NJ8uPgxpv7f!2k0ig z@EU6*#u@;yL$WkL3HO}2>Ph&nQNt_YvAbG;GWP=l>X2%}h&AYW5X$C$er%id&lSfgUKHRFd?+(!W8 zV_Cc@>lwd6DcR*&#e&&)>Cczs~$8JIQ@Yf(wj|V@k zw4A?{(}S(|%uPcA_~_wEEsy8HWfT}BS2*H)en%f;^D)$@xXn5`e8Qr;j=HL#YBsYu zXK?+@4!@k4$7U2H_UOyObwZ|)e@aw*i2cRzmM!_Zu(+jEK0>3j#Rtk)9N3F`cKH9> z2Tw_bxcYUo^*-=KfXnEr@phaEPsDs}`WMSv6ERV5+lT5;>VON_+3PHs42C$7s}5AA zj6X{RRW;{A9h&%jw!^Q=*yP(COAxt*uk_?%2?YW5+o5-&6G3sf{7!(IR}=wn{2%^h z(m|EgizVbVbl&h2)sh-;e3YwyuIIJNo~V7d{JTylyttVHH!E9QrM8XLdHOY9O+Zyv z8@m^n=5kGx^~nJrQMS4YqRP6P$F-^qDZ6w=knT-)nXm&+CrT|CC`cPGYJbm~Uof6y z8@;jGAt-H2&XGLNN`N&S23-Gb?E7dngxNlLSPuvrnT~b(@D%euQ}~oZo63Udis!bc zm)|jYOYfbuQ+7`I2ksQFnYASd8X#Vl+gSXQ5BHqvtVf6D11^Owd?OnWcDQcl=tZk= zrz5LgL!|;6l#u6?-X!#qzED78QNXKj4H19T7W5HM%H^$DqZE zWl&NoDLC`Ao2$-X-8^!gG9cmV$?I@F5!>tGGgpzK=~&muXS}Y)k5|$Wnrh$f#;)$h z()wZHxT$Xi}yVX7+S|!um)4m_|)a6gW zJe4yq!wL~EIeZt1{P-Q3S$CGQ@uG<8L-wsuIeen%x{Sk|uiyDes%q96E$0M=?yPG|8<;Tc3^4JU;FEVll)MxB@Ra?pMbf|C zAmeX5kt{{EdVFg~lrI4XBcjG+6o~e_K4fF zB_5o^FSO~)lm5M3d)S8^?D+2+2V5@RI1h_3LoDVLd;6^}m6##Avg&>vnC~csk!%bX zx|j9ao@C@=ir+L=i(rFMw@}4yjOG&dsEBz>#%p27=G2f6yOo1VHu*q2M-0rsHMJKB zJ@BG|Fs&$@|EDd`^W$GkYd^)fsw#RKQM%B~M<3bp_o{i5>RPIL+F#8YLza%5-(I@> z9b+q~D02d2X(GBZA(yhKtdPVq7lI^p<#JzYjK;*|y@ZSmaRY-X!7D$1nF7>5NGBea zm1R)to}N)xPRx<>^K$}cS}P=5&pElf zOTtZz5sW=gbTav}y;LwvR?~{Pd}|d48|&gY!-11+Rc0Qn1kC66)|3_)}&l{kp|9 zil17VbNTjtDb4ImqQ%w05%%5$aevq*H6gF*TRGnB&!1~+46OZR3P9j&CTA-Cljfgx zq1DdYkI&7O2*>~QOfP`;7+M#Jgu1;_i4taNLov+vl5r*WxJN6h7?t*+_p76%{1Kbt zFF8%eeH2AdMIsHb_$czP&SiPL-0i@bk_zH>U4l50nZtC)FjE0P<5Pro~KFI=(U7bd8s zRA>80Toqb)aJ9*XZ)L}U6>D$4*LS+&Mfj(wP>qPg^#izgbh|I>gDeRKN|iLSchQ*7 zoQf!VPh0O1C|Zs4_Ilkya?N5k(ZJ_+sQW4uvk68al&LXzruI0_?uM$Fo33QiqNsV# z+5w{$C+E2^64C520<43KD-OMN*pg_2--nrLffx9zj!HSqYq*n11E zHrKTaceRC5iWP@q#f!UJTio5PxI4jutOdobxQF8I9;~>#1a}BQf(0phvcEmf*n9tk zGsejuNMO9r^WHM&HRbKpKc)%PSivsmEJ^E&KJx_Qqv>+H&2pwtNoMc@2-8CF%c`sB zX%TPd!rSKVqhGdeoyJKy?cW0@H%q>lRw+dKdnKgcGjh5wsl8Pu89UO1jQI2XG0>Dg zsxYiH77YDb&K{f28Quw1R_1gUYXpZiH!DG^!=3rg<943)EfRV-(&@aatqvS?;Fm#0wF1ttW=&ob`g`KDi zCp8}T;{iP5A$x5_Dgnjk`BABn0=!ML-E`3)QV$v6Ojm&H+iJm(z%4gl=Ajmq-;0x( zflrKemKTnG*Uf#y#R80`mTLMRr^253{qK)&Fw@1O?Bw4}FDs)_BN#gMw|Bm?QJL?}?swPI8|y4jGoV^Wmr|Oe%f2d)R}%iccgigY zj0kmtzWX{5BC`|3^Pv0v-q4|W4I2`qdq*7AsFT!}z(o0Yk!v{Pz2eHC4C=cSN^<3U z$|OpC61=7>avsWLWv|SN2xSi0cp5w$`#w0Vu2;_ON?soaCFLV1{^4$WEhrp#P33R4 z-IpyrCg^vHp0ePgip{>)A)Gn`T|X3Z#Vjb9QolCC?YkG8sn1~=Q|ZcANV{3V1DUKw zlr(U$gJ|_RT_|Z~{AQN>Q~4OFI&FGt6p#b&kO7y8^Y)Kbn|R&<$2g1aG@T8^Ze|lG z<6WmCBWW4y?v+fvW3^?*RnNRGa0e}T708l zLF>(7m~Rce3pyVNOp1w;@NctYqX%a?7hLXU^98PSDxr@#P_20_Tz3Z^6X%20R!r;X z$3HPy^HhqOwAN?n^J#`FV;D-VEx(5+6XdUKc)Yi@{B8jyb0xVuV!ILl;zaoUcbStE z?J14@VAD1;0Hnc5++aP{R_@=QK-9XK^~JjGoWTd~=Qhp6oQ2GM0S~rOI~Nqr@`?qx zq7b%?!jZus*k9sL%8J%bo!`3hBn7W7yc|~=Etl@+2(&)>vGApc3bx}qSYTM6fUDAm zOUI4_)e57NsJKV+@lV+X@sf@5Mcxmf-;%672|QlurkJxYz7=7*V@mb$iOBLM>h?d+cX0z(ejRLjhNLUDCT zPxmKg3tD`*X7hz&+9ZCHVlAhU zfG)CjFE-L0V7^%%ulC#cNtd3*rEI%ZmwBw*DZf#@__$U!Q5iTIBOZ&Ju~>G^^R`2= zOUKtdv$tQA19`^+V*U)eF;naB6AX%dkBTQ1gTkq=m7#U~@qG<`bDg)MAo_*t9|CFv z(b31X5949Vuek2nE(E;Iu19d@+x?AW28>K32#@*2vo&a{B(q$THWt}nE!zw(GBvtH z(hbcu_=`7+5pynO3@r5O60vz5g+JCBQJmo*h43?j+WkOd=QKKTi*i-swFAohB{gq* z&0vx2lR<1Y z_|yD<#b`z68WbvOf;bBwY&=hSVmlvh>b%cPu*sK(1_yRw(<>3^t2MZ8-o!Vi>9u=z z4Pl|(jZLB}JQ?sDqqcIgrpk$f!~7mkezN}kh-_s377jm7ae*7vYmLk<<}%?kKE?3% z9pSaJm#GcYFAzWx`ikq6!Anb51`JeFVpHD!DMd@WJWd40xs6qSVtEi9<}gi>}9&>~$KOQESQbaC@qL+mhAU zF2L2F#}>qyt7L2cne1N3%v?Ajt!b=xBq$&i#2}-z4vhX*1xzKb4a&!}n_`l(BC|wL zycgo`7O@s1`jD8Z>c7QcBr01Muqh1o#i9Akp1Z|!d~pdI+Gf1?kz*Dh+Sq?UXB5(T%$=AAd)8G%c zXXY{zWa19neapmQGnWD#EVDBZev7L#oaFYxFln#>%WUezVe`>Z*2Lfjp&izrkvwvV z);PNYG#>jeE`EPVE}$GiLpx*lW&5ag@#$NTR}ed3X@>s?fHTwJMAjCM7q!UkiPbIK z_++CgiGI%SV#51?b;&o~uFLpP>`d-SH&wfzYiTXWz07=jxkWJa-GSo1i+20j9pgN+Nn*)yIWClF}S;hR%t2}~0)zt`4UC40d zJNnt`^sFhF8W+DP8jjh`#bi>n;LjQxl}uwcxnB!u8#X|2BgI1)y{8j&0``-Wos~-F zRv#@QFffw3Ymybqr+?(Sfke=r(k#^KN3P)ouGC8W&1U?bep?TMV4n#mMt1jX5RRw3l>iTU(|_2=2e`nRINHXzHZq;@Vr52 z;RAs96y1PrPgmCX*QqlX(Lu#YNg`c=fnlDv17i#5Enlx%vwm9X$(l$?(sZJ)b}w~x zuXV~6R+v|Rl)6_4p`oYo;wI6zo&2PsssU7^>TgSz265Rm>x^PFC37 zePjF2tfKDjkakvHm1Jo@-e*$ci>(&s%*+fpH$7c%CuuHODiznwsR2nTPDPt1&KyEx zm}^p`NH7s4$%4=MCTdiC`08*!mmeZfLUY{BTqe3p&lBFd%i}DvBHx8eEH2uFTm^uT zI4IP4e3;c6VRK#|LiB4XzeqegDt1|Vyjt@Q2XXKdEPv^5{@L5l<`If=bbKQ5`T4es zED8KPx$>>g?}eji*r%t!7(6!+VwkmwX5?gGw_MtQQC>?ZuEpX5PenJQqN-SlAWyb7 zzTYfxlsk3m<76TIkSA@WnN6z2J(m=C*%dTTQjjnDhg#FW%9AFiAh5gJjFW8@=uT7l z?0Ixq2^pt={{uaou(X$O{$K}LrpjDFMvX0hK4A-YXRCk4$T)+O4tnSKxiNA_PqVDn z9xo-sp1tMdB7!ul&3AX?6~^+HYBhb?kO@=B!;6f8qjad|`!tIor`A1Wv=Qv#;BY|c z^DFDQn*MrGX58SV3?!$jMsvy^aF&G&OUD?i<%ADshx{YeKZviXX*wTNa3)vz+z`8OvWvb&`PYgP@t;Z0;7&nJ0{hf=h^0Ub>tidqhRAwz{-@aCpC2?7 zMkByo`$Lfk8v5Dw;;Ys;Ih!!@o-!*<@}X*a(JHB1zr4{zBlgp*aCsX;B67b%5ss6! zcmi0cgi0YrY)4yWx}wjPm*{v*dI$V-+X`DNKfkr%A)WGL~y(U}IWRT$H6ml^fO9wsLbb4a<&DIx> zVd%E&ExmqKXj?L0fv?$HGuM|dlo|p_GBS`>8K)QoBJ=nx#noLlFskxCQO9gW_*^?hy?it{$!xKJ_dI~ZKkf^0Ig%asLXlbO zikLJxR1Xm|CQh8BU7+M|0rtto8`eK0ZA8PSXz7{`wtt2tX48Gk?P8#3NnqQ}KK#Ct zgdeYofElRwcPjJT-3L8UdehHlFu!@9^lhodjr!qrAK(H#_}modKOM22zh}bYsPdXJ z12|(YFNBm`{0&T`l{hu^Kw(SglDj=U{r804%ScoaBh>b|jWkGHe@q__sVUnGE}yYNhj-3w?@>&iDH^tmDlHgcTC6 zo1IsI(6qd=2q8H>7~Mj>F7e`kt;S)$(VdU-1aN&tBeH<>gkY@j^(>HPoABUPG&^xM zUF1#u%xeWMo15(q#T}a=-TkYp8SKV3$kW_=euZe}wZ0ec`v^PIpghU_7CqJdd!-KT z3gSeq&<@mlBLzwy$qjr#<$nW7R4eT4X2yfVhjxyqY>&m_KCO$|zY}UANZLf2FJvaF z*NM;XoiJo77hHa)5(AUei&H(R+KxMEP9=K6`IW;ik&ka0z1a8sG*rn{avEdr)}O2G zP_y-N!W?iy&O7ip!+%6picU30ye(w`jp z^?BVpb-&-;dDBD%t*bmXuRelI7SgbNhxJ~;zFPb1V|3PuUQ60E>ywRl$^zlQf8!s~b$!*~o^JP?mbVOEMGN6}Yk%e4%D?+NE=9Wc6%1d){l2Vdj7 zBFL=A+i^BEH&mu%HS8%9nHpxR$<-~2oLcI3q|{`HvDr*{NY?$xejbKrVj?mC&lzfc zI_E~ynX)-ra%0`7O=IM0yT{dglNp6)J};@lz3K=&aao6m+?oPU6(lQHj_1WxA8v7q z!#}-yDf{pGd5Q^HQNIiR#EXo@`hU4Xb^kV^{80TbNRr;ab831^;{P+qV*NkgFUt1Z zf58!n{x4Z8_#E~hK>0`HsYXH#zTP4J>x)DGHG>HLl|NqbX|I&XC@i48XlPqgs&%VF#v5%{iedN>mIKyBp>BMLbu^cW1;Rb3bz+L9 zoRt&*^P5r{p+^QX8<#B^TQEGLxIFn}9Mc^`p-i)1T&SEmdPHgJQ+KP;LgtHoGOj!9 zFGWZ$byMT4>q&Si4F_Y$NypAhFsz80ktsc(0^)XURldD6h1?dt($`;34lK>_L&KsE zZL_qlxOsVVnpzAt+P7j@Zj;t}dd;o*UzZ1xWb`#@>YB|1cHABV;iIrr7E)EI?(3T* zZ-@7#$mKF{b!)w}ytwaqSO>bS=qXV@zQMug)uvWDvHfxUYl804cE$%oneY$k#g74G zpk^^g_W1nfA#hevS{S>53=czs_rmX;v+WbI{C1hCm&A9mD}{k?^fy%$NVreIxN zf$tA!JUSnxggKBHh1=7e`)HKsytvK3GGo$MKkoM3iFy0-{M0p;IZScFBoPnZ<#5MB z(}s#&h(CD451cI-x;;5q$0DpBdd*^t05NOv+!=)tieqSVi;grkL4|T@X#*bjzhz!K zcNHVjZvNUAqeD3@*o>&l?w}e|#n6vLT+Jc);Jv*T9AreWBLzyz?8w#9&<>S{GQNUj zNc>do)CDHq*yi>SE(mn zDgERpixQj{6{uk{1Gb6 zF?(87@>DBFmbE3mcSa10a$I2iX!~Pin$NNerpwq+mrLAyqv?xym9TiF=(ChZ2#Z~M zs?#Y9B6Z`7VSs<^B2tFc-N+z^D}-(?XLKw2g7q)*>)2N%SDa;nFjP&TXRq5R`{nZ_ zI^Ok6w5Q0Gyo5nvlWkyr96x_e+(dC_3N6rC=EX8W#XnC9+`tqa*Nv3HretS8$02dF zz8S?Xz@YaZ`(B=^4ka`n+B$|FI8Ud4$PX1@%G%$pR_AyEIVNw6GumF_>Zp5 zsws=Kcd9%}_?7Hi15Z566lwLI%l6Gwt>5J8w_OZI=i1z!35Y3W)HR?61HK8_D_#++ zH5wAr0Tm1qV!=Ej{B_>|!WAs-1Z+0PK zE3YX{g@)R)YUJc&c1G*iSaoyt1I|B8XW(nW{@i zioB)4UsB3;SL5BzwDFplH09NGI2q%sG%0rWD@}s_E_n5d{Cu+~miXdY)_?5E*Y(eb ztVxNy(toaVGoxPjx@22JN3B@(+k&6c;0c;qKoeg#=C7~N^gCS>*m2lV!z*TA!EkSv zd0pPIbv;v5Wrx@LEGu9e;~d<;oG>p>da1hX!fwy?9an;)AmyUae$m08D|FD1HSDr8 zpBLn@`qcI;nEGS7{baKv8I?uA{bZ2m@|egvw3svW*VQwtVR zi|n1ewl6yeJjX1lTsE4hdi(pA4@{w0=v84xgivr>0jI+sp`g>9k&~ihA$$U*e@21I zR_s%7)LOefcWo+2{mUJjhT>7>pK5mcZM#os5LR7SUCb$CO=5CYK)L26vSoypxWT5e zy~xq&s+`}L{VJ!4RBV52yX3r4?n;9)UY+-wEOMBPe_QA>@gukZahFL;`l^$+u%B5E zyif6FX?DNydWY)EWrQgx|6Pui>z1R|ZJoVZEE2LGSzP`zB3yU5&YUz_ht&qMu*#fc zPxW^S0fYPQj)_i{!Dv*9p%DJv>l{4oy{o-@bcUP5UZ`n6^w8gtl`HjWC2oK28)uRe z$e;gyY@sQjB#UV@g6Yi^lG?m+2@J9o{54=(-xy9)MFw41ImmQ07^Ngv_x0$+P1U* zErbJhRCKhsa*7gKNRmpbm5_so+RbVL1d%#mlOMR{G@lH8qNxi0cPWf4VPUswvW2tZ}lvo-|YcNn+FHp^_;zY!hDtRrd;odcm&Y_(fwhH^#ChS1n}Lt|6nK`Kk+^ z>cU0&3Fl(mu{1Y7Td}A`I*9Cjr{>AE7NO1B;6!?anH9D_%v$WcY*5ZC_H^k=cuKEsl^7A)auv z?XBSOc4C>Tthw1dVp(`UiSPZ||_4VM?&7iNcXX-}L z)7}Rj=C4VutQB7(A4X;=KgU}`_X3ghwBV2mDi!O4rC5WnjyLVSZ!Rj2ps@{O-@`DE zLu11Q*4Ni;*Nah&fiY0)M(X&A%eIn!2&9~6P)6s@$GZ=#Y?IkkkK8SOst3p$=oa>Q zQbl8|M2>kkvkH4cKK&v5A+|B}*A#Xm-#w*>D#uCei7UW!aAqTOL(}W0)(~zqelGVK zoCVAw5n^`zl`WIC+A%lO35}NZq|>#j@t4Of`da+F>d2&OQ16bsGf9~!pwVq$G!K7* z)o988hKs``*V>&*vFmQ(WvjvK2FbiivjVE%*P3zjpLXwU20oFVI(CwZc?hZE&%P7s zet*S5vFyjArOR-o!M=Oj7PV=^iM)$v`qn9A8&Y}g=Kk>o)^wAiSC3=cJf*`u52xSb z>k@Z7`Evr?hkA!mx~Y%l=5udM%30jo0N=$YZwB@L2+vN;Bw|;^kTmYRiwt$yFDcI4 zgX)q%rb3HNpIKgJ#!+fELY7?*ncJ)eP)@UAJ40~2HmdKynHC6RmNgqHHGt~FwmHaj z>F=~UE{5`K@bZ%Rp7774+uiw1g*L|zu<1wc@~By%Ml-w|gJqteU5fXc%u@zY9?mn+ zDJRm#lYDS};?g+8F>6IOmv~ZK4{-Xe#uq3*>{P0xlTbX0h{0X-R6{Ot7jVgF9gO@Y zpf{aKi29ZR;5o^?AYg0Cl$6I~$oPFlL+h5rn^hI3y2F#d8^Q@EM4HXFdIJjgbo0vO ztTwYvNLD=utFlBWbtvrSRub*d;A;AbV^%NMK3M^M-Oupb#ul%V&C(Gg43#1nCj~&`SiqkX`2nTQULpYrmu*pOO{K?n2?3c0ehupIL zQ?Eb?myU7cAETV0)JE^8bh>ptT%eXK&y$IHb8mObj&!_Ly~kG`6AqB5i&l!7mvrU; z2XKY^F;_g)?vJQYi++)v2$FjC$YTm{v-w>+L*9um79X4xRkJa+OB{$SX9)tG{)x?(GHL2L7Ra$XZ{YAM~hoCgIXxPhC(s}0ivkPkL|K^E)nCk%OHXHj^&Nltr>Gl71mRsB& zLVEL*_My6|ycZgC(Ofc>zx&p0A)gRd&>FZ1vIBl3vQu8DQ&5yV{(D#=16ul?DDcH!R>x6pU?CDGc)tn^UR;dXAk^AM{tp1?%LrOnRJ6W z?_P0ZS%KXf8Ast3>%k2XOTtujqo4A&?wF|iSVhInJWhi(FGciMEhvfU+NE6uKc~qa z-0T*}&xB;BC#mK9eNeiqoi4IE5^Iym6`~Y}6=SV;*TnrH;~8(Jk{0w+&Y}=i6oLU3 z6R%&|!Mq%*9RuHoQuPoSL!IYz@3jKP^_kdV-1e_ey}mMIuftgU-+|6(&W9{ zpY+4~Mf|^wma~qiK@W07rg=Q7#K|BQ(KEO z^q$XsRCTaU5Z!64|KFpR{=sJ^P*??tyB6uhl*-=l<14-Ldccw08dkG5S%Fhq^6o;~ zMX3FSgFnl=t|sQ4$3{9-R1YSrNgExU2F3vbzME0uJK0%?`vSaWdV_?;4_;OxDnwQ3 z;4|uhq7;I?GEr4Uo!p=nrBo}~TI-lMr>FPsJ6Li&@F6KUu;`*&HbEWTL$vkoIR2u@Ld3K$@mD=(GBGwAZ;l_7`zh z$vL#P1iasTKJGS?a6+F-bZ258Wqe!|H;Ogb61En}0RO_%KZOQ&9+QJAfODn1a;e0Nu4|Tx1{=9J_lxhb#0Z(hLbnS&CkMyt2^i;-oT02>vw= zo+L-P*YCj}@~hQ9jnx#2gpE=?v$m^GYbiT3As200TB%8tZb^3Qj^{bx=zd|GX>lZn z>woVv8spT(-XDA_8Ur@IBqxPv$$pG>WM>)@uWTyinZLRF(ojba;J zA$9G5f~I>zg=awYJU67QOr#xdS&Gs5*e)e}a3V_o7sI%OdsgcY6ufy=b0fhaftVsI zS*p11n63HXuj!4K2mP8=Td=avQ5MDfx2kgOyY!Jz+mLr8M>?+gT(&qLOdpioIOp+$>>{`OEM#F0YfzWRH!DDw!^HV?8`1 zfqt&VWX?rNCuMT*>!Kcxp`=m{MWe&#sIHOE@rw$hHm-bvppMxUyV2!sfkV4Rl+B`{ zYu^twQy~uRHZzk;Dayosr4j9M@zR=p)tx5oGT{1%Upe@m4uv?PWwBg)i28e)9Dm%i zsb__=&{tqIEI(%SHD1*AYB+gdx`I_8tETblmZ$^AGT=xdDlb_ zOF3rC!`7B!Eub|pE^iLAk>zA9eyxTk+lY2=l-ueFk~1ntL7ixZCk8R$#$GeTpaAXV z3hw1PzLV{#U~)8vwm4%MKQ&iM|4)y*bnijn0X26@M;c+_)gw$h&Si5vEL8LGU?~P0 zTMS)k+Bl3j+-7=XHenq?iwQHBh+PQuci5Zk0VWh4R%aZ)KnMc3uaCK{G?*HI#J|7y4V+SwhB0yRt)GGTwjY!>SW@%dE2?{ zc(TyL#p~eE1CE}OSBlU*HOCvN>v7DOi*MEmX(hkdMbZA>QS0^@fnAQ{NqU5|u3=nw z#ngVc`N#)vKjmeaZ0`1*y;X$cTqNocRR>>en*pHId&hon^aw*;?K!GW{03p{zmrq8 z?u?W?7#^d|?nQ6TPR_q3Gcg2!HvCZ^7e;bz%3?tzW{=%Xed?s+N9a4=F*OFBg7m zC}-7%wFUjMJnN-XdEwrk2u&5)7@Okm$$^kyx_41im6*li*{-(#B5>ms+0-S7@(y!T z$}=zrSjqm$^$Zj2N&b8NP7r&7Dzs%v5M0;cSc7K< z+%ap&eD+nX79EIgn|@m$-18Ssi8?NaR@b6X8BO^g104x>3mR4rVYbR1bJd8<_QYR5 zedq_Y`^C~c3-%n)H@*Iu+i{ywivoGFD9 z*hhVoy0Hhx#eJglg$(RuwcxA&1WTlzp+2gSJXMRC#cuSs4Z&cG?qFQ)r1Imsn3pg)gQW*+TQOyQEKhacmjvbwRXdWjID+(do0GY&) z3nd43kz7qb$%2cMvh5Q zo*21fDL^&Y8)j-~I_pX2qe#un!%z&2$*>0I; zHb#f6qsq3(Yc1MY1G~LvCNx7lQNK{uZs`SYw~#uUo@^g;>q1I zkgN&ODKx$yZBAGc{ugWsnYfha*+^crYJ0lWYqlhe#lZRXAr?^j&LY2)D~?B{4Es4; zrtpkOyW-%{(PhPpVzRHp8}NnfO7g{bsq9SXmN`x{+RtL2E5ion;vj9zYbn!dIW=g7 zaBcpTH0N5~p+f&Wf}X8Kc{jc>%%shJwBG|rLG!gr9x_tT-$*t&J~~-(`T)C0RU!8` zST%FjD>USB?+ncNf)$T5F*LUDX%>b9TkS$EXg11&yB}!K(?t6TZm(P+e^kZ0_Aa#5 zREqRkD7H`-hhL!Q+h%Nqa_2#RwZfdnb}zDe-pBFxl`DFjzPcY^1NW)}Mg}rz*b~e5 zzxY)#G%SSLZ1CUsQyhL@&Iu6coqtL_lmhD;x-i6E^yW8Uk*SE^Z#h&QMIo{h4Yg(V z`m$Jax!x-B(00hwY+tWhX=n~!H5}L4&uF7Rw`)QGG)`7M=@c!Sj=_2$;;|@`DqE-3 z9EuWlw}a$S8>D3UzSjygIOO4FXKK)RX+E^>^8~`NYRfiWK;t2ns3uFrbdUyzq~HUc zr9RF!rPJb1+%<<_ImCl>A=*wc+u)K(lPxn(UMK{+K#`F{CEV(0MO1m!Pt-n z;MV+ZxU}C<>!vXZCgT6lP$Mxr2};z(>aeS^zxi zjVRUUMe<{D_3U^v7r$N;2k=RvfbOEwAkN0R-clF zF#CX8{-DC6nmnc`3*YW)|1-|)U&6G#gn#NBL5m@A?6hq}HIr2l=BXv5#o|0Z3DzV# z8Z;grr=PnXyC*X0TFequfUR#HR0hX|U6U?_sdZR{*oWEGa!2-uv*PyKX->u6a9~BD zMjN7$?8>J?R8^;x<=s%mdTTYC%q(FDX#!j}iDM$=ODJ;k#H`>u8ncn=3FFHufvq?@ zEg?0%jhgKki6G9!BCNnU?wNZr`g^F{@~_J?UdDQu>&$B_*h*~#;SYGt}Ef5 z;hKbN0*c8JkB2vV#VosDRjqG3AotEXQf77|S?QYavw^)^r*!X=R~hnC>02vAxn&|F zrK=J(pNrM9(3str3pjSo?kV779NqM@yS5txsW~|I4E4{aGy#WS-=_>*jNdwiCO|w* z3g0{#um?3ek=S-1E)uxBckwk#ltnGqbUHlZp2)Lhwbdk|23L$I!w6=}G3E zRCJv2G8F-&R&GeltV7k1bJ+Wn^jPseFA zO+(G-t~dr7YC729D;vfxrV>~DlZEB&+=l!6DWpV?do+Z7aMDryHb!8odn3O~&LR1n zKtoSQlXSGT!;9`T3+RS`tyc6`$fJwPde0pQs;;RZ_sH0M+61Y|iBv(T5{e#!@OOT+ zvzhgxDpiM)HWeF2k);znZ1l@*$v^w5zj`&EiAH^pd`(<_$+gdQfKVn$Xj3E;I!Sf+!{_ICUNDL9&)Fka&7+WNH>t=JE|GCwZde)xT3k<8sAXv&!n(M<*d?8P7 zr42L_dY{VzIJvmZ?pi|~*P61h$WpnTMhO?niD|?F<_nLit%$7An~7C@A*Z(>s0(!Q)rW!K?3ObhHrx>{&7{280@jr}h8`%p z!6ZWaO4#vp4ZjSR(RxxGmW+|L=L<*y3{o>Xvu26x0)8mbG5tR0#A+yT zYI$0@?Ac&DpsV0`(`h3G=B3Rhlw`dF7ZGCUoNY~xaRyJh^yT%n2;QXsmI35w&)INJ zkEBm^J+l~65o)GhWr{fza|glfQ&QXYgo8-1izyuiZ`9UJaf#Cq1-?+X4))IlblZdu zZ^6^`1!7}yVxPL7@3ANbg#NjEZbt7U1{Hi^nymoJrVChz9`m1CL*Y#^htA>Qo8<7J zP8RwFD}AFCQFMIzOEKATO@Ix~aVo1-&tRXZzds(%9DB@CK1$W#y*4vlH~9BwGz->~ zfQ)W`mQ^notC2)fq*5W5Y{qVFNjUCcGeGg>f@Qf&{>ka&Gr35hvZjOSYb@H?3xVe8 zrr6P2%H8F_tq(Q$S4?ui(MM+;PkxW@D;?L4>kT0(EKqK{N6fg*s9&X@{{hgh*{;q+ zQF{+<%Jq@q5oG4` z-YDPp362l>-yxe{4vn{bqPsMk~ zE2rn0W1MyuSfDpHbyjoOI!YNzs>l3~b-qCCx5tJjm1)rVIvvmE<32D2(6@Z&GgE}w z)jQP~kt`nPQFs2c4J3#rI-T2&StM@Fzv1~`@MxW{|JLaJUyU(M;Oa3%6NaNF`NOQR zm_{U~D%zS8==2w<)tM%V*gzRaI(#NmqVaOuh{9|^bG%}#L{G4m7{o5_<9()5vyHzL zaKN4cH~^+uO4WN0NQrikUuZ)y)46irl-%;HdwdpQ?`}_R4Vy*0i>m~E4I)+*1p|iW z+R5H9vO`BLPD|~%1iUIOXCnwjHFCB;mMdJL>#fA=8?wVpRJBsGzWi=pM!0(Rk5vdX z5Ib!T-=M~1wf|@b>wZqT*xGvkHr{Bw=Z#{$ZSoI^g#k3%kD5K{WtpZLVV-FS#D z=cARQzz)A_?c0uc;z&LRGL}eRg5Lz2T;QDgrb1NH?=rdacbooC)=@Tjcy)akC3C7p zMeVr?b6p|&6s~Ekl67(&orJp_f$`DtMWy-s|nSg1}$C|ff#h1Dtyv)c#kW{ma3$v#(5%8r>Dq)!+KHS=D zs@la6MiFWAAcQGLWC&fE>eG`m=A=!fd4 zB@+!!($k*T1B!w1uUPf!QzS*Sb4*%;ZNk2;9zCL{RHc7WWwi0bp^*P>E4)H+&C>_3 z4Lsrm3sp4Br09BYb}8vM=cZlUKTO8?_6`d5xn6tb8>*UyO=eBa@G$D}`(dKF40J)i z{tWBA8>*yQ#!}VB8JsfwmVR^X$$ZxP=8c}r4uaF;gJ`^v1JjqIZ6p`tE4Xe?>p-ArG`!z*?9kTNk#euRhnL#cV0hIM(NxjVz_ZIhy`ELdN)=*qlL`&RC8AVRu%1Di)6&$I2ML=#P>f{g zAF-DYtE$q|^BKy!<~)>^e-dB=A+pU=LYRqJ6h<_x_~&YG3^cVBWWZn*sdVOt1k2J6 ze~Am$<9(GDF2hI-XwjfFJ|*r~1)abUJ5%FqRX<0%?ITcrqQ>Xy>a-8Z#Lxu1TqTfM zn5326D_A7c9^t~2VywcgrxU26BU(Wv@7JW~ZA3KEl2vE9oPw`efqzUCZLp{I4MK}0VT?{@fGFo@;i?(<+q$m(H)d3; zd#0-eFn8t`oxn2o35V&f#m{VfDZR789!!n_LPeJQ2o^-{SU3F?-6#O2&sHJ1Xhulw9%!lqTyrsSg*ngZ;E${+1i1n$8d*jSB6@M*3vpn2>21^Z%l4so%OZ<|R^x;Di_vkUt8b!r1HR$|E zxk5@1`pmt@`%#BkT}dl-et9ljusab&mcp~4UCk5FJf@tuoI;-Ib8&h8kMTV^_n`0V zE_OQaXUYR&l$G);t)YDMXY@j_{<3?rkEHVMDqZ$9;>iYQ&E8h1$h_b}bt7-mNQK<| zHO~bVE3zZ)B70d4IpvAG%1M`ZF=I;+*PuxiaKtc9XK_q)udv;~Qtr;nS#|8x3+ut$B| z>`_%HlFyAWpL$g4&K2oF`<H(R)py<}0Sq49J=ec-@jfyuL^D;{ zz*D49;J?>ODMI+ygQE!ID)ok$U&w6H=up4jasH3C@;O3F`zPX(GW^!1s9ToUD2#2W zRyXZjK7YMw^@)moHU%{UWfQ~l`0^q>Gm|GMNUbxcT0(ggy{k2AS(CW#O6so`XOq3* zFnXU=KylNPptFpF$euRA-hqai#sjwF*AE;2Ydesj%uFO_uOaJ&YzD+X)DEmg-PalR zzw1`QTjs13c*Af;ck|{rA;?)_hmzaoZ^9tEnNalO*K)%z=gCW|p~*Io^u_h0>MFyz zyZ{!1K%215bZsM?MU{18lx-JeH0}SJpNcdy{6FlyWmKE}+otFJ8R3yOrWj zf#6c0xCVk-TM86+w*tWe1b26Lceh}L0Ku6&|99_qIZ;LH!3~YP)XtJOT$SfVCAzscQNJ70?@RDE<0e0RctBC&e3G+*KtA*j z(6dr~e|fBG%A|Wk=Qz8MY&O;X&w~8_@jApcvco}AnVaS0Ge>Mhzq8Nx0Qn%lzIj5k zj3s}g+JvS90Fu-}$-X`yV{-MRG6PYI?~6m@*Y(L3J!9tY)w?RPu#ut^&L}8wv)iyz zd@)}gi5d#~z{GgB(?&0!o84TkGn4mekV&kWzb3!(N9X{k;RH?xgHtlW7nR!-0Bcp{_2Cd>wViP*CPp@=0JLE_KZE)v6{l0K9~lnYR{P3 zE2g2?`s%&cbwA?#X2}Zf=$;jG6v=J6?|oQIk7+5gUrtnLH#USs?^R6?h3WVJ7`G*vE+-0;{kpzl?&N6uD+uP%%_;0EXSEQvBj)>BLLv<#U^ITNa!lN z*QPJ&_fEp<9MZ!T_{r{W#x-}HEk27YDfgY{+|yjn^PU~)i3RB%s>EuYyCi?%mDZJ~ zwIn*%;6H_aklQ_~ZMZn*j&DgaR=1t*v(H`X3~0SfQw@IGTEh8~b=) zfVInvF3!&^#@i)W78;X+vqN0J7KcV3-o2ZeN=jK8jnn%h=37L2c0-qsN!(pM!XVdw zx6|yw#Bj+rWD#Mu60>ywqx1HI70=DGP*eD4GeS5|@vekC9aWP1WY-884XLU{iI|Mt ziES+#anJI|UjHqcqbReo|LBhshYPZ*1kJ9BTYP84rh-gl>R9eYRz0_mIU_M7Vu103 zrv?QESJ?)_Q}GpRn^erkd|y6oFMVh zkH~BfY0p(4O|thj)sFbtic%gid&=otr2lQfQ;_^vPxELYxjj@7D8r$V@zgK=fLPnA z*^J$=!U@iAJSz}?MA>_!NfB{niVMcJ++IKN@Fbp^8HvLra>zX$Ohj^A-alSE-7!4w z2(zn*D^8O823LY2Sx*L@ZVUW#0>?m^1rN?fWeIV&(aJ-+<#(NU=>Cy=G*2ISQlHa7 z4^w#EX{cTy3J1eX55BP5we-3ic$PrAQ1FwaE4*j$wT`iA_ZYq^TlZoRUO5*a=Iz16 zkuwFz*e*Y(%aza%7k@qCF+bk~K^IFP&j+O%iCeQk-S42MPazkTVd80W45IUqH;#{# zk2@|JwaY3TWDjM3hrAxALN9dbCXs|VGxC_Lhh~DVIRpQ(>0X)q#&DXcQtM6Li2Am+ z)3cz?UoQ3U^pV~)Wrfu_Y__rO>)2J$IoaUleku-WsocMtD2kWeU*APO_*gMv2-Jbz z?^suEF8silUH(2|yss~1zAv6I zAA02bJ7HIWt&}osz}T;=%n!~Qpp`{ecXWI)5l!KfGI4Tz(`DS+Q+euRbpJz2kJPv( zU+>{`EWYgN3lD7d0#Q&Pa*SryoW3vUik-q6xJi>>fBYg{xvr^c)&Bym;TU>G>9_<4(ck?dSwC+X)`>NwPjC5ib zoct7R^sJmg`j)CLXS2-bZ!}_u&~Y1FA6|Q39a&^O37!PfYG@T~T~Ni$M#^au=E1kM z-eMcmMaTRJ#gIh+|BMru#$HU}C~{E?`rBc9Bcsb+aw6u7VY5{1yrIPmSXGvLDv_^V z#i*C?m%s);b)K$lo+o_aa#r{7I2LHSI@#KeDELYM+o@sV|BfN+#?gO5>Nhu=DShY; z+`aXkTocyRP*$IoR7sy7IuX4S06speSm51)C4gl_Hriv6q5ueEt!QuMvD!aW1A&)9 z-2`+uB8}w%&!FTtkPH+&Li^3`8riS$gh0n&+=Df5+_#xh%T>15lxo%_PC>G0r;&!% zgGko%F&Qf2$mFyFPeg8*?|w(rO5v9$5cTPSDGEWMc0k^-kPyI$NWsXk^I`1RE&;vD!PPGrzp;2*0$w#E3^{^EJ*ILpD|x0)IZtjO7mjMkLvAGdqjU)wAo zWyJIrqGxUu1$&`kL2diei-Xp$`E#5x`)tOeZ((G<5p7*&_k3KMLI%3RBn*nEKItPI zZj>r&c9|OnFOaLRWdY0~w%UtxP)FnGGIqF}?T4|Dy;XUCH{_|$23$KtftBN4IV`BU z&@x@D-gsu9CB5P4V&t`rwcGQ$00%fNSIV_ELSVyRV&?!y#R!v{rp<4JX-IifW*y-0 zGhZz>t~~?(T?FuCh`0&N7YS*S=$o%|kAmD;0#>5tW`L}L#K2_%-*{1BH|J}G_h=}T zdi=%`7W?L(8M^`X~W=3dV;`>E4EBw}HP!7685+28JmNiVL=n1f21KS6As*t6!lt{zYu z{_rF(yTih4PBmN8=j*g*mL3c|&SMc!B@VTO$8X>Hj`wShcr3NBawN4Wp|tx;OM{bk znXpM4)F!u6EzjSJuC6N&FoyL--&i~&m&;qjO=p-2Dm&Hvqy2No7FyXm$H-fR+}-Iy ziZ{+SxX)R1oz@aSYOLYyz$^(DKar%xtbFx?tY+2vy^5pmO= zBMxt>!6@T%ctb88VJF%!T^qRJs>z|H13M%08Z3Tjy{h z$MFoL6+sF!>t6JdH?41ON1A(U2)UkpeH<13O5&A9iEC}|Ui5xLtm^gxJl9@?Y_6kQ z5((>7+eK8IepR7d8Op)&tpJ|2cT@|qvii(BQ+1DjE~ULk20pJU^IU9Q(#cD&SHYr2 zaawqp010!T$dc?;cZno>{xErHT>u`NmWoz8yGw2;BU?Z?r9>YE7Gt-YwO zjvgFY22`QChgdDP7D0S`v-%&C_324=2J=K!gfas23sVaa(F}uo0T9EeQ?I_}jz_xb(3QsIzyOkb6m`x}wr-C1vmH&-9$6 z8nj&gwW2xB5kHEL;$u*yMbEJGSSO3*g>lD4lSxb$d5kLK3eV4~ERB9q6%m5Fh^gzJ`=2U7>|wwl&hNZ7WrVFgMU8aeu?!shGg8MwfKX6{VYpvPaZ5Ym@K6b?l1w z0Z5%i95GJ!a>r^iNy-}H-|E>?&ddmztE@6DRuTjQG-u< zryKY&Cz9q&R(paP4(pK3eCAcxd^cO^#YrH?9F6mvKAQ>rybAYJjJ2llO+Oo|xw)wB zRVcRbRY}KGXE>U^gPK~O9L6RkcS}@6Y;n&p$+2?qYSkJybtx750T$e=abltWxv;Hw zIIDqf;iSaVA4qZ&k@nQe=K+6xTLXh(>m1nQAA-lPkio=D*mKFdEAUvd{2Ld?KFX&r zBkLPtATGG+T4}$Y{H!L9n{OTN6I)3mu1fDv)y3&i?~(l+BTsrPp?88{F4_L{jqq@K zdWD^3$mu$rRDxyJ67ZSB3_4;S5ANQUZY5lrHl{!kbpn$pCG`+Y&bxQ4{}NK?Ul-F%CmDly_FiH zwmadpEBVf;odRxSWJ*b+_WNHQ1FC{)+*VgAj_qWgB#V{Q;>jn}kr2OC+&+}^+TGaO0Yc``uEh334xV$YJ`C*p5zZaKR;>#f-0 z_j$Bu?zL;`gex9a)SdR6tv6y9#4hlZqpq$by-nB6dHg)o>#wD{h)5r49B}ZtD>!w6 zwP4K*G95hW53Y=b{dLA6)+(0-bbsOza^o}~J+bZXp?^#C5YAfl%It7DsR~E88<{%n zA!^HS(09Lg6sKVm3n_1sJuqMRd1ZtVGKHlMFn96*Qnp^V8Bh9Na6wmnW$e_k7S6th zSK0(iXN9~J!=hs33@MDZEJ^13Hk;wQ;H$yzXR^pUiEI=%g;&^g883NM+`%+(r()~L z%dx6X#kLUs);--3mLcJawD%L{GTx*Ui0^Xeein|qaX+J$+f*pm%EE zUv1m0M$dea>&NpaiXiQPYsGMzebdi$UcsH|Oa@>-Rz;}-V zu8$;h3y)GoTrnBOQu4F5iP&nm4#$0GzxNbHNHZ!K9*5ZvJ`5zfv2)d~*_cVIbgg%<5$20ce(aTvmB&NA&aBp!mu%9n8>U&U*yL)QDozhz_P22>dXj;)-Z>6cer_+Lv1u9)r%51{80ray|H~zHHtqdc}-- zk1RhLaypX?#~fmZs3_5%?rkk;J-hxn9S@rWRFA4 z_PUuDjV1GcoZ0Gtqj_a~Qt&|zGLZ9V{oepU4#mCkZU>H<8!zC9onrav3;e|jo^CmMFx0V!2f*?A1PseY(s z?3y(wLa50E%Sh@1pVc8o+xw?~5(~2x@d+!h$ObytxYv#OjaaVfRGkbP=HP0Cc=|FIEY{1PTCN;we8s!ncVW$bKy{rv<_mad1I z&x?IBDu9_iRc}h=EGzYEGTLqwF=QeQhA%BQx*5!4h~1-#9!mT{4R;NHp+x>AC=L#D z{JCr+FnSdmY2UD8|!gdO!1!E-V)D9ryKKqyDAlJ z$jR_799SP;7UOX|?rvS0fVdPhZ2$3C1eJe1T)9mf*p^u}t&XA-i$fGTa3HaomoKP& zgMo<_^;d?9>DiKn15sv?#&~pfcpjM$O18Hf&j0)aG?$l>(0nl!Z;4ax!D0Wn7}0*s z<8YK7lvhlNdfKB707y#*y5S3@u$rY?!&<-1S3B`tR2A6YwJr}99!uqk2z=8&j8s~4 zPoq8_iT@X|DX1)3@b)tDCv2h+Yct0vqvBmfdUCpu#uwf^5z&fdD7{-r8%ddPJmQu% z@?S$}4mfwCL(Lp`a6NV^!4O6DQfBVWGwV4y)tsHOrK&5LW|i=2E8(N1Uhgk^!hv&4 z9SX+eeRH!vH%Q0gK5NS7HJ+l=rQq<-PBiAx*_It_c}VIKF7-B;F1k=hZQ2TJ&oGtN zMxFf*I1~6(-Nqnp;>GS_5dTtYyRcHd2&!L1CA|IGP>+;*XPt&3%TR9VbXdomQNcYT zw7OszcJKoMF738%DQ8ONWU_DRI{{D|D(@C6UXri@$^cq?ErSa z^7XTx*mki>MC$9v`&(W<$bC^c676kD9d|zMe8Hs@wp5_#BaBBV6W4tg0CH{iQ)`C+!@eK;adC!Dz3y zC#OVsZB?)1MI<6z&e8>Brw zrKE&~ff>fvwZaNa^U~2~TcsC1C&^rU4E(%Q7Htd>(?}eu5!JAo84P@ZIAkH3R8Q#} z*m>B8O=sY#R-YRU94a#JFE2c>#;AO)$-=mTx~%@X$UKAIHw0o7NZKay#Jil1uW6n5 zAtkQ=oz6R}kQQPPdb>vWG|F!;Z06`#b_aBFYKJI#x7wI?Uc8v|baf%UGF~VbSqIwp z$!YX#y@)$l?8z7!fFWQYtWnBeMO{`7-P6#X=4!C8;jj$6`uC%UF+hU0SO(EsHKvXW z2&Vt!x+_LIc>|OPcX2fzPd96B@cN8C^a|8%^@j=9rn{ywI_+-PY^@_H4Ck|gl=sAT zR9jE~B$lkJaice=Jlm|w(Q1P)P1`zK0c^vKZ9?xkc#9hVksf6ViP#)h)3@q zs9|#bj!46$OmVTiUv_tGTtwq4-bzffwgNaJ9%R>g{doD4&YDTN=}_v{OVcoh&yG*a za?U}yLde|>JKal(O6fAlj1Ag(zqB@~xl^1Gu$9(av%mP=F)g_QrVieS^Qyk#Tp9|Y zazR$w_YyS!%`NkhdYAf*`ME}}X0)!WuGMOht22;+=3Lun8@Y}B7eeK|DWeIWexhBi zZE^P*Gia8LmG;a|WB@D!F6T--Ox_;&f|+A5T3Ydf31yD_&b1iy&OFv=7kzH@^@!7o z?l`uyTFCQz?XO!in43;oo0?qBhXEOK?)t7h?oueaI>eHw`6ymHzk8g7yOBmRJ2=}eWzM(tgXj&BcQl_J@X zLyE>;W?Ciz?N{XNSRMp!STbO-QiO>8pFQg}wA%zYUTy@0^vGOl8B_yz=$w=Ctu>uU zQFapXp{-&SmZ1}=c*K+{_4w#;*|7G_(Ntzx+XI#hDPRtBr*pJ7J#me<%Ve0)NK9Cg zU067%v{lV9UhHO+jZBZ<Pe021{fh{JX?b|r+v{4R`fra z8+|dWkuo%pAbIl$H=bB+t~C-8m^YoiCvB}s=?^=qD`cTtbb~W- z4*iM#7;;f!1gcI}ks2}eAU9uL6eGu|`fl)Ab?<7H$_H_Cy8p$({DbTwdP{zOMU zWifwQepv)v7}iR$`dPQ?#3%I@?%c> zsh{k^SEge{4)x)l8wxEaQ0Nb_ z@jO83#JI7~PtaXG+&q}F9+t{(v{vf!^5_z^2$>9@I?J9O6nh<74fa?ucbd_40)RyN zyOaRW9E`Tj7V4JXF+j-0kr2(K1CML6G$uuIZ+Cn4ZLlkZ-8s_qk6=OdgFg6QGxN_Zrh)U5xkQNa59k+u`vY|{W zn{5&6VUknyjG{US6tOECa^a!s9>n%$d>|zv**#3!5fcWl1Oyq8~n^c{KcQ5-& z`<4CD>hjvG{gNO^THe?Q|M2NmjKeN(Lg7)+NF9%)YfjTUZoA`yI=<~9`m+NQ5v8MK zcY~+M4NBHY_yx70ztpWHwWuz`x$g2bYQMjf5BDYTY>!IS*0Em zTr%avK{?A>Uw(YG{5x!rC356MK4}zri;gKM>mOFO599w?BkWdXZ#&{zSMGaCtE2ApYi8a7ys$A-E(w0SsAZSxYH~+oF98{Y2gDsrZzrJ;I$*$@uHAgWzonADNK^fhehM;CkI4*~5Sl3uvmN!Fz_fu_E(mk~py z7L(#sFJKq2{!c>u6&5RjLnZt65r&9_ZksB4@mpl^M%7b>jG+$NIkyrSx$D3p?v>TN z{BHNArmKG-0L2zSu6>{rm#^=Bv~eGxEhR3jtm>{!f6{DUANw8hQtP6s)25pqmm61S zW(j}pv%VZReo~$E?c(O@yOcK@C&JVjV?_YTgXw%?8bWBXF?*eZ*;B(3IBD*KAvsS1 z_~n{e&r!&HGVxT8)#W^5T7G!6)Z@*tM-V%0YT&i{Shi5Ea zxz2?!i}-n=pAwd)0CjvVGseTzDY+G!Xs-8<#hsBxve0S*<`pK}H@0FmfWOk0X6lJ#H9Sg!bvf}UZ(I%tRy&vs zFXO4gjwVZ~4i<>Ln1Q7AJRcbbH}=FuYVI5ftYv8^p}iJPwqr_186tunh|){11oL<; zEe#`lc&@b9=})N7F<(eOLg_ePCq%~IMXw=h&qy;v#Ymbhsa82Bpn?AmG=-NC{U{eB z#!*IUZ;0wlS7}jw5iBhvMJFvk&*-(7!e!AVcn)h!l#vW%;y>Njwnje;);B%k3fIS} zNxP1x6){Oy)=#ZT`;B)1skR(Gu?<~(D1B`C!@@pMLfpm^n#Ik`j72Ng z5G;TKxCIHW&!heLbjyr+78SYSFr7}JsPftUmAm|>w*l#m>s))kU`}mmWtUQm(I{u% z4>V&d*DMRGN_>4>W&+DO>#vlwVjb;-pD2sRo1*5XFs3vxglAAWN+_NTY8?+oadi1lIQI(wUj6 zONlbWVz-5Sr`1#7A$WtQ722rVm0g2g-7I7Lbpq4pQsc_$4T$p~=5b6S*!zz24njV4 zwfwtWC>XEGYdj|f)l$;-P|DMS1CFXQkvC>w1c4>{+4AmY4D0xEf>%NA5ljI9z|6MP z+Si}9mSi$edSu>77qHWVpO}v<+mz-Yr`yQPStQEfLF++C+c4XkT<UsEk01itO6x>ya8;7!MbMLPGV&> z=XwErQOtuMG>#9Kz$o_JC8anRszJ@3mNi()Xm#$YU0_$sSz`@*R|$N@peB<^d!8uV zLkA`;`R*CscMmmqVJa}odMm~#Y*VK_H;~(B*PKYXx}&PdWs(>z!9VN$>gkU`&Ip&k zAg5tbZ3{Y#QBka&5P+@Bu;I`FT)V;Nm>SjH;mg);K=UxmbVzj%5h07q zEtOFNC9M@~y2-m;?Dl1E^r%={;cNmFs^L=$>EclbmL;d~u(=n4-X4@&uRKgoMAEs( zF1A?9##nOUrzJY>H+j&mlq@&2F=KwS{=s6en8=m^D{aeHqrym#01?7LvgvUsq>T7X zi`w_F{gd5dBakusTjx(pspe2wI~$XCE3BY7CEHIXrZ7t@AhG3_5kK+yRn{hQ7k?=8K!9=?x_PJ&FbMb(VPg zvy@!n&{=88>pV;W(EhKr`Wvzqr;y@3>eJ|?)jkNAD-4D8AsH^JQ!;RcV5h7xmBO2qdkaS~&3%k9J~1FPG2EjzmB~eG_8~JiXW&+@yph3w;f?-wo=Wei$zCm%H>? z(*aM%md}G+4oiN5)D%t&%ZHk@i%zD-c1F2nth!Jet|G0 zjX$3R(V49b1NXVJoC27wkcW$lYrp*Oko&p1qfm#z>cru_Jxww9cKZXAhiAwj24ee; z4+%LucyBqHvGr$z=18w9wIcIMNBFuNK8UyS;)T7aNS!H%MSdokw*hyLVb?>;*7f(?D4WMZC?r2J(-r#?HfC7~*@bu_wEgABQ+ zvnnkRrFa4jLs?O!cTip&>KD7sb|e@_h zlo1Y7huWt>zCw|Ek<#t$o{wxU!FjpfQy0c<-M$y2NOmJ(F#XN=X7P8CY0-a}HV5+ul6|*&zu#R-d-aWD z>0s-q40}rn9gI4ZMCfmFg1$qH`9oCMbKb*+THEYpp6G~>wW6?Z0FMRzs!P4<6GS2D z(%JrW(CXGM@M4-SAxc{S)|P=;%!l_*OMmYY8C%ifUvxVds7ZE5VS``Ny%J0*5;5q2 z=FwQe?NMh|PuF1)Y0J$xa$nXlGiB(a@!bNbcGo5*J>NIYxW6(I8LGX(v%aIun(DCL zC5>6-?2Vxp)ry15fD^J9L@iAGgDDOFw-NpfdC-wEkjIK~U||^%n8%H!pfhsZl2XC; zEq+oVmV(0k*UFcxmqGhrEo2}hx~h18&i##h%|jl{ZqzQLt3AXPZJ=-6)*4PL8u#{t6Y)C1Pe27Z3KjFx2RHmkv%9^ng=&)USZX2?FmTK>K-b*bstn})$*ibxRP zhp@+$9yNEBC(x9jmC)?95+sAIgmGZAvv(joy*4%VA#rfBYre_qjRQTQj&L!^y}E1B z(FAknn|1{s1EHyzRYGlJZy6TjVxbz1ck}*&I6-5Y1YjqVC7(uJ9aHPW zA1!gBgrh6TEhqSlx83Rt1n}$YPjqj|-_;zwbwyPv9_rHB+~~WeD;VH!8B2_oYaqo~iv_XlX9Zs&DTm<+Zx&Z%kmDw5}WNQURvLMLPNI z$^j;_K&Kk@T>~w&h@5pO;J8pl` zIhx7CaP>r>?U=|b%;ff&xf-Mnif}mn*(!_BRX4|C*$1UBeVd;>R2DvZ%r=SoE4$(( z)ke&e>btvLsfqKw$rQ+H!m$qe48zULS{ixH&cMAi0CTtX{=qimvq0v@a+V7k@QPrtyauQt|P)C+w zs8jy%E~N2*PyuX-$WIvfqE$*FNlBziHd0bv?PNJ{VhbjklSv`+j3O}eHgg0I#@dA0 z0d$>Dc(I;_%0Sp?#pk$!Z6?n|N9@XL-2wIqtYS1o&dgNbU4|GYM_f2ff?{SXt1Vf` zgu~H>B4bSY(+6XdhFva9&tZy=v#3OQ!R5ZauLyZM4J%n#aD8ShNtblC0(7KfQ6|!{RDA1-6nRuzaJ53=XcNBfXb7w_i*In9(Y6w9 zVuO&2qQI4Re2$dzyc(ZYbGZ0Po&*DcJg{)&81|f^H#+MwnvsxVc*Rwgzv*|-ul5!t z63(An*tmd0a9*^xEFb4MpynB*#RcTvqf~=Nqv?w#?+fqOPzB=K(qCmi-P16suCmt6 zpvaRMa$;d)Ym=1@b2v;9ySqF3`1t&pZFw~mY`yecZisnXqTNe`ECT6`4hd7mrY|+@ z4PW&o=JUccS+r(NMYf*RT)+1EphH=kAT{^Cr6iagR1GUb< z8NTbA*`|`yJ}$^IqR4RM`Ju?OCulT|5K}tk>}QZnbipy6HB-M__^zvzi1g(w>fr?b zSDedhvAXHY)7IDYrN12zO0F+l)X@NIF-B^TJFH_BC{9!sURr9|VTpDE0WKwuijP7@ zO-rgmY_2g5ZrrDyw1(6fe2ap&w_NE456wn_L7l@djYR7u$B`H62Fg#dCRi2ujp^0< zPMw{xu+lJO3674BNh&=wZ&Vhd7$)y` z^GlfD;qApXBc~^dqfAI~Sk*7TvtLUvu^$fNR3cPO9XQ+k@q2I2wx3DVIpCxiG_f@{ zf}^{Mup8{JBfIZ&yee9hU8Ol0C$gDlUfQNPNyrHVvmG^E{3 z1yoO0c59iqC187_8M4ixD&YN$_2L0#txMS*pw`H)9J;bALCQcj*gB#(2%?T_*5!ed z@)7vLRap_}hdY*uQq!GXC-waZ;5Zl?}f*UE6H4T4^&CgPA zJk8C&_Da8vOa6Q+R8v^{L81rFHTzbTpn>tM*^ffS!o(hPE-@=SndoOPSY7Xw{!jyY zzA@7!yxfZTSToY2nYf2nw78ZW-|S_rk)9#-HJK^u##Mg^ouD|orO7i*cFc^#fIhpW zZ@>Ht^%OdZ16-42FCWSLLlE*iuI!E)&KMm&ib5VdDWHq$1ko}z8buQwjczapr`HD% zqXKE0rL&ipr%_i;fR+$!WbsEjp{K6x$nk@_IQQQN9S#3FCN`#|*e5f{cHinZ;RL+D z-~4MG`X4XFCqriezA6UtV@u|k$M*8#_xGKDMScI@A3;lAqtr-h=#EF$ZnOSB`iw$F z0#C+@W_0C31e=A#b>3g2;{RzM#&v_VUT#rNb8|Z6l~JFbp{~5AZpsOz&q~zose-H0 z6$0m_#M_^3n15g9N~jGDB`zMOSd1%zhB^*{0(j%$7o8M@!xYHn`VUHJy`c%k z0zlqhKf^zDdH%-|a*yOF{5MklT2Q)?g&~v|sd^cEI@iD7%>Z{h8K@E--c|2C-Jf7I z3N&u)>;xu7V5(dhmIF@|#(>=QBqRkOeWVQJ?N3T1g!I1;dBwBjwDAz@0%GKPUyi>- zG{9f~z=hcW3DaKbjL*2>x|?w^eqaH=X9%taYa0lNU|Yg1lCRQ#i@_03T`WkC$m=J- zU$0Ql82w~IkHLc2E3+jDGLdo|{8|?0v;+q4mw?B3f>2WPXWx z;v1+^sg<;DqsNkS4oFcQHFF*cQkJqI`Ii@Ea}Vc$8Y{9oJ7DCC(Ysx922s(Vqy{>( zIip;4ciOuyYQvP#jvmR11HOp9|3|+f@%L8E4 z-)B9AUAFf~!M2e{vyJbAMl_l$C|NX`{__|7-6-$rBeKRs^7(V5tLT#vCqvO40q=OM zI3$BFdlo7gm6e(W?>PV&Nly|nDxQ9sMp&i9_1hc^GeH6W^_(Jwv;U1~6swi9Mc>q2 zU3#zkSBrp~4G^%ur z0WH*GMn<-r>gLK(=-PjN_w-+o?yxA<$%C@d_2nGKIK*o9z5O9;sKtntJBx2VoP#Q| zG+@Nab}Fjtd(>;cn^;+FN*s@i_uM|m9Ng|-4}1C)vZ>gwS#oc^IKBPf-c%YOuM^1L znZ#djQc7(wZ}S_SZy^A2wq_+xvSLL7><6N)t0`1@Lj?e$~c0zvc{(WfwSF`hfB}M;#6;J*&sWyWO7y|#k|n*PdNdBe?=AN||8lD=DhJ)r zk;J!n#aS6g!|lGBH|=zEDxF(|+1M!ZQxNMUT<7h_SyZorJXmH{p*NOd|061f9oydQ z@bBOyO$Vu+{Yd;>sp3kvtm`A(mD4r>O|Ln5=NFEY#q|6%>B4ms(dvIBu>oRiGdqD& zZC+Ae*2zt$&ezz5NdRSA#x68}*r*0Pc~Rw~JO@hKnGG7e5{iSe?yxD|X2gz?s?KCn z33G-o%|YQTLJ^bLB6v)LO50~6X(H$m1@)T+MD>tRJ0lS-VBc4m-&kb*pw!;Uu#U^K zj8@ISs`i;Uld7m#tqC>sZD+SFvR9Z!gIn>c*(WA@f%>k-3Q zVer!bPFh2GdPVYrr{c>@gVRb({d$XsP6~(bm@>NG=37NiWKaXudxOV`n-WGs_|+hH zX^)k-@f_XXk-ru4Awaf{-R01eXD6t>nAwOUA0XS@cS2Ws{=kn1_aTB3(j)O_X*pRQ zW8x8Hkz?ecfZ)e;|BO80^ZiLOrA7VnEx%ax8e_tl8^+}pP&}#0t&Xb|lbok(7+k?1 z4sHu>_}Ok|b}&DhnVZcUyC{IqAZprZiSc;%bZ09AZTfiPP0tX&(_3y6&G~e}?r*Yv z(iD_?b42Pm=6`?pv{_a5q!351Y;}IOHnqLvSblzGwgAPW#h>lh;4C0Stk*pqXIag- zpqUV##xN<1CDn!RRrxJ(%!#){ zuuM!*%|wDv-xoD!pAK#8Z^qQuD{Z^^WN##obA*&!xpb_W^NoQ#4Z4vGbnBY}v6l~0 zF|8G5gqd!>0+&eC!O_-V1(JVN7USRKw7&*(5g;fr9KH za`p-de-Cg)_lIb-;v7hbe*(8zUB*cX@gI?Nc`b5#ZAsfyeq@*|_16I_hH-~Pj<32L zsJ8B91!;kUiKXTYIacou%2Wx^5ZIgdE8=j~HtUXkL-#j* z@Ojb2?<#yPg3fT_4V;*tZ9W6J!UZ~_ePN0AtsQ2IHlHx6o%Iyjb5?yG+MYt5ZYT}s zy+q@K(pxwlap1SfNGafsF(+k3P=D0>$%LJTZmFNq=>YJZD7?l996UpC5GhVOnd<~3 zh1;iHPSKaIrlW4;Z)5Aqiz0ZijgQ~P3n|Rbsg4d$_fdd>oR}3b(B>i8yeE^OJ>9=$rwqr@GhL< zSt|ojP!>|av~)3v36h=}MHe+zg)Gd}*OMyCrAy;3qeeM#m6{Zqj2+`))nnH$z)49l zNeK$-3QQ?CD3`PakR0%a_b9|=?9|X$Pr}aus(@f3aBLV1z`rDC{7Qh&B)b5;M~XX}gE7cZ1+6uO$p zT*vZGi6>^&5|fluLmB8;Bbqn4jL+-|Rn;zi_Od~E;=N|xpO*yn#Ap0BnvHbdH6I0L{b~Qv& zeEcUFEvg*?0(^*Df!fUXpwptn95AW^n3dCJDJZ{}k450E)R}%yVI@b3s78y`rLS!G za0YSHapDHM=MmY?uY^5X3Wh_vnjqM@(x@Yu>%`H))Vc31!? z%-G{t1ad{I!!GS!>3mI-%T^zurzmyRgeYbmOVQPZC>LT@>!le%G71e5CG3hRND5z( zkpAySt*_Vmy=#ninG04Z`K!}&)o-lTmz0&|*nz z*rRP0XVD@4c3hfv4lMXexcZV`IwP0WJxBw8CIP}ao=7(ZeJv{ z1DZ$0zeAz;N_pesmu+G4S`sFBTz#V>!NYXT-Not9ev0CJy(goe0$7_g-_5eQd3c%1 zMSubyivKyAk#_qQNce{GB0KCjhFQWeqPN_TV#H!o4iEk}>CFDR!2GR0mb*KNGc z*1g5b(*n=EIqS_vs6!3J2h-)d_E)Mm`=3a)c$JhzMe^tKn$!?@h zEuFHcI+({~%UB)-PrTTlsUmvFAK5sXva(5P*NRJc8~&6S_=b2n&CmC4q5vVKb=;(& zWDx;wW1fteyW)hN;-1jWhJ$V5yMF>t{yY!DL}YtMwO)`4#7Se&bDB=tL0jcYlAfgH zJ4!P7Q+pV)_|@13L;SrWYT{(L%H74iE)RxE$oGnLSB-Tudme_oQ~0{0QE7szPA-%y z<2l4dn?hFEWbUu{+j3F@v1#a)Ec-$fj|>EUx~=*4mbF<&58?+5b!u-6z6%R6Yr5_ZKMSv75Es6)$ z)|(Y|=E%wxkoa*9C!`$>*&2^Mu5}njz9Lz|yy(?kCvfK%u=IWAQ9k?FL9Env<>Q_6ng19tP z*rIF&JFa&|#34INpJtjIE+{x-0<^O}U*~5`4O%lvSk`h@XdB-azH5r2=n1N-n;=RN zfjSru-7hSm3An@qs${tfqbU8lrd`=YfA>2bdU9gxRGFfXVrT5G!{j}LqPG8J$R$7l zw81OpOM?fES9Qi&k8jjmZJTUP)iG>LuQ{m=} z??N@Y1S%b{L~lU_W8Wl(b!uXExP!Jf#*?Nxs3%=XcdF zvQjjaRo`SzGaTk57K?9b7_7n#T$XdbEj-(zCiTU1D|-}FhY|6%a_DD$kJ_xs_3+2E z$p6vaSB1s3bZsUfNN|D&Z3yn}kl+^F-CcvzNN~5{9z4O_T^b19Xn@AuEqKH9$#?$q zegE9d#XK|5Tufhe?_IlUSFKvBR=w})TJA#h9K0PqocaQUn>^l(BN|M`2cvAfX>Ns| zTwLZ1Cp~%#s_gqOqAD4AeK73jc@B$2ghr#C_jw{DqEa|~FL3aPdE?xXIjZDN7 zlQNsyoyPDZB{99Ap>V9s%DuUFnmCem?%%Lic^WMG(`4kc>Vk1mb~i085UCY6)<@pj+6!sG zz3mr+2wAo-DBe_pny+)q+jgxFa`5jA$*Tg)PjLq@2qw2+0lyDyCd==O8I|@~E%__C zsa>7PhPUVM?dL8E0@D^DFNvfSL5f);^s@FW<;xt1Zq zu{&L#*S;SF+tQ7_vE0-Xksp)a7x5!TNo6$MSaTlD;l`QfmW57gee#)n+Nzfd&U{141P6%eVf?#@0E==11f1IpVUZ-lY6D=&;@ zq($^e%lYr(@jb?CT+0Rg?;q#We&>$Ok+ikoU41!3Ox;+#V|ZE^my}ug{5Y{fQNh!#d%jngPB@z$CI{-kCm)(=Rofg@t>0E@6H zTgle(wG@)!bz;Bab^GAa735bat(wvM1TSQL%9kKT_bW?(lE`*Q0Y+Nc3fC? zj_6G}`O$$!YfDRw-zgh4hBL@)L6(AuAYnYNP4ouce!opn$^RRBYU0TKdE4`oBdV5j zh8_eK&BH#BPzl9zdguWV`_E=MFP)aYEjTz@WdtAG%Y{v^E0Ua@2xOes;n$iBf0o2J zE0h?40i=)O&yzpcbC+JqIlHqCl+432^%;yd*9ftln2dd;^q})>^HaljavK!q&$!t! z5zoGwZr3<>?aiCuH&HjAQ!AvhnZ z*yd8aCZDW`5LKzZ#SyYuMIsHbt#XP#9`^J1I9#bj9n}4UdP;(&OR3R?_pkKY__Rl7 z>uhd;6XK~XhGF#-ApC+Z90ri3qm`mwlAjeq=WQNMY|#wWh@3UgQbw4kvThU&#z{DC zJ-wj!J<<(5gHjd=+`NoPe(tQz(CMs=n0Mx^kNY!c2ig-l|5 zQ`6Ixp_RF?$zU$j&P#{Yjs`6d>W+nmrdX^|{+=Z*yi;Q(UcG~atBF0xn5%|t=LA)% zZ{*^@3lDGKH>%28UP4+!9WvLWIT7#l6D3q1Xxic5=+5soLmK^P@|s&;dMftQ!PEY2 z6&Y|{TnDnrDYzR7`I>q0D1&??;2T>7923?1*!Oco4o8Y?AkDACsDlnEuHQ5?JpPEy zh}f?+r38BRVPkfaKI<1dzIO*`vxL(c)`tJAz;`OC;V*NR?spLxaf^p|M;;u8O?G+Umm@3BDw2DC z?`1A|!&>hw=IzzDCM3Cq2XuXiBFsM!;}2Yi(;u*jDMvG(Jc0A=HmUJZCworN(#k=QlYQ0{3`F-Y>6Aww? z8-)iY9e;}Y(q&dH)Pv9>sm(lvi@~7;I9)O@izB7gJOwJZLExeJ>|#7AHwaz%?w#Is zdQhcUF=hUfxE+^A^1=x(a)G@NKy#}P;=p;o)ImdTFQKQ!f@yjyi8OoNowR30)0&zULz_ z-3iv(7Mocf?LT@6F=o+tcL;+Zu}JWnjK#ao7u;IZ%D-CB!Z4>;4XHQXHPw`GRb<1`%b8b)JZa`k!>x<4QSx}Jh1b!<)mLfn{#8cd-WeU+H@H;1!_FvFouDT1WDX)lR{jp}z~D%GnInT}w!PQ{?va{ZA0%W49tdtT-$d?vQ-#!=YCRXy zn@m(_)RLDL#|Vc1DIpU|>szLq2SYA)!(jEz}4*M4tMYN^om+;j*BqpI8CI5%x~3~zmmRGIoSyl3WOpxeUN}0zZaK2 z)e|H|n1Za zu@}9UtoLD}_vqslZrx`A?no?l_bc8Zn4NsF_ZZH%0J@XK-ocVOXg1rI; zsNv4Tn5mnSF7Nx;nP4wz8ddzE>yY?8Px?^=J6>!78k@%SQxXY2{cUR?ZioPuj!}VO%G3r2p#h`iD7e;Rk$=@U~OnCzvyRx_Kl!cpQbKiC}Ue3uM zMmpZV>v4GyK1$ee*(E(%JPLL&^g*d}d*ZG6Oze%G8#iNta>^n8&}tlr3g0iftQ$om&Kyy=ngIZfCH9y$7Ve8?2;Mn~Ow3)q@5?`G8*)7g=ud;*=N%A15# z3`4x;JGFLmX9xn_+C`0zjOC9kU+1!V`AWwHjNM;0LpTdj9*rNz<0~a*QnU#;yI;O( z%5dnz2KYj87$0P4h=2lxMfP7BCQbo|7ks?GbUsWty#S5rAU_A2w3qq@T&-oN3Hk|^ zr#gVnu}d&N(;<;+K&F;P;cJ&D3W*fC8x6}#dA0%Lyo!S_Ofj~&-&iAJfff7xl@U|L zP92{^0}|zp&CTKEEU=$U{Xv2ipVDgQ%Tvr{r*`Io#MlF_n5C zK|iq@uIX77tDQ0GXsVr9s8%ffCdN!yy%sZ(Cwa(Kvqtb0di3K1s~tv}?#a96H8w2M zat-p14K~^7aidWlsPmbmHMGHPnE_{$$4*e=$W~7JG(d-QE2`9Ul+^0WzU^b4TEEG9 zyl}M+@FUR9@7M2Xd*uB=++R+0Cs7emjRi+{a<40EZ~#KssVMcC(awwJ$le&A#q&!s zOZ1r7oJLLF%WS*zAda7+SfBebeZn7c=>jYer-kn&8faDf2&kx1tQ&FTW{OQ?u5*wT zFbOF+bs;2oiAwWi*)ew3?_c^v2nN&C}E$%O1?jVBnBaRKW)RQTx3 zE%9u2^*M5?cqb;#-r73AdRm@!-j@eVkL=vtLtG%qJm@xdNVT~S`E18}h+3!qw8*r? z!|}>k*jNzn!Qe;chqDjZVf)_Dwe_1F&9zxkug&+=H$-v2@h=7@)KA~+TbiUx_th%r zZg%-i21SgaYH^L0gb)_X*Ma7~(H^DqybT(xkVtfapx8M5o}`y2wT}4^>dNu&Me%k3 zX1a^B;T?4;7s`brqb!?@Hh77$aMI!|RDkiV1+kC8m!_+tPM|Uel_?=?tQau3q}ma=L|< z3jMT+ziDmnYXzAC=c9WFSS=AbZw%L*>zKeSPMf0$s60nOp8$m4OH02Y$qQCoI6;4$#suC9PLdW;@ON)z5L3QA(@N{YIun`Km00p80pYLj~I!rX6+94}1yp=cu$W^;yyVF&ll^0&_9DJQX3zbhds z(y2Bgir;&-nd&Cps;M+s(jyHzXx2sjAkIe_{T?A#D(`JqU@Kc&_`-H{PKRXVE;;<1 z%Pnvw#MSI0WRSQ?70TKQ^hjg=-S3KZB!@9Ldpu{D4dnnZr3Ba7c`n5am^~z)xi=0* z>Kl9N0TGw*b$YD(xOvm#db8}6Jug(E`>JXrytCmX(K4gbHd^QNV>O$-ji@`19fOD> z1%^;o!=|9E-J5#s^bDDd*xR_@-;M;=Z+8%?NR#P>3i~o)CPB9R$f$cd6&<6o0s3G9 zu>O5ySwOTTUK=0Lkd@EG9r=;GdEiuQcbPxAMdb2S)(=MG_GNPoMf@t~SWw&UC(H%@^;~xTZAW;Vkto(7$YRYK za`*c1dq)HZY2)51kYBWx5d6tl8e0@;ijM$%x<-a%-R>QphHc9#>Q5Ujsn{ovZ%9i- zzdNg+^}AlYgbdNx!-_g*R&X#1pG#>M)IDX!8!B%Y#%OI{+xSYDL+V>5QouJ!uvUx&A^(OQNc0TEU}byKz{+aTMRS>z=QanhlmPrmCOD4EpvO!*C{_{`^~bu0pi{?QzOeDf3&hWTW}7=eNcif_e#D zc0B$R8x0izD2`&;<(hB<;+2$~Zt!W|^(+dOpe(VWO@zqPO;z;*k1UZSi`+(y*CDsw zxa~banPg0~^@$_84c?fQ^n52rA>t>!FSY|s=SO!gf>>QBr#L(7 zAJyBb^=*5NlJop(WJZ6f}$r(p|grKQ5uI#}R_iBjkDN%pI~ zM8ODBF^O|{><8vMM&Rtg6{k3Yl&-vTZ z@~AYsGdM|s`~3VJ+!OjuSOR!|f-%^pL>&VB*goRi#*6)?_W0uETNB@2&EO3#cE;bmy9(cUWfZC1IQJHp9gHPpARONzwI+3cV zR5T=^QLGoe$#jGd5X$EQ*fWaWPaeig9{cKPiNLKs8zJSQ{P4V&zlS~$o7eI())2oD zn^u>eMlaie4oY{m$H@WlO};!~9?0$SD=31)ftJ%8eED`@@JZui%>=TmPhk7Ebt z*~dHm;9JHIr z5W>CE;a%zySP3{^R|*6=Kggg}<}Q5!K!l~9pEixn1<_JKF2?3FX!mGs?jnpJ_qOxf z10b9{8!1Aa3|<<$-RoALCAevQ^lxh#kP;;DykYuN3&W0GrHHM^u~;Ge$roobp{paF zcdF%fY|a;~SH~iFM2a*UA5j3%a(1Fj%ed|v|7TJVUL!A7LM&ojZMAgpRZ@s!u2atFy)i2Cv+HOuy(O>M?jZT7c#(@W}SP<+I);ESr;?>Te{7C>E<9VPg0UK zoBgduq8;m$(~H(awBA>z9Fv@O<^JXUfYe{Cw>9{vVTwU_uC~#8mM?;gsTVxh+Wh2h zNwRe9gUOT99KIb1;n1$K}3~Ry3=a`_`+ESvj9z~@yKah7ZK&B|of{#F3 zohGRFvAsBQ)~KOTYy@zQU7pgr2i^wh(dL`K&u8botKGD|OwSjZO6O9X_uCM--s6SB zg_+znCQdH56`}1{`g7ak!N%g+T{_nz_lq(fvouR;N^okt;q}16OUTshb_B% zS4TVHM#t>Lm53DeZD#n0aZ$&fDf=mKL)Ya_1qzeGkUe`;mpu9l!YH{Fd+Dz zLo{koBPyO$c)40edUdd7fbu*{#6Of&Ov+^W_Iz(zD!RhY5tYO-vcXSza@ldgaT9C2 zvbK9txiNgy@%F__S{dHJfK@*@xl{6G+uPtWew6V>%BcxIm#9@r{XsdL0n&jlEdF6D ziGuNv$u+`VqnSI5+so5904NKt?JM|s6yV=?KlUJZZRBh6e}RO=E0DC_V#M7MCl zQ72q@)pelSImno87#;@iZfvz-Hs9t6sW2hVU%JDs$a!mRf@ zT?y&9tm*?d>8k92O8?vy&$$ysb3z!BN9escKTT}GJ)BkHCFwNf(s%&-rSyx}NS$_ftEnhhJ(S`-Oz z3@>)CFDRj~#dowy5_oa%)|raI6@DfXkk~WtTop28`}6X^$8(Gz#Gr4NvZ&T!pp0&U z{-=2OQAkrJ(ehm7fWtE;j=Ioy!-%qiYjZT@w}I8B1>+^G1qRoEIpnPM@I;;>ETZ zpO%tR70D=|7czD_y9geRj>Hi%AB_Ew$H{nuUu)|(LzKfGe)-{?!*4H=cNNKhIbE4` z^6(g3Y*;};PNXPxK#{Q@(=U|F0)f;SYAm4c{pLHAG&{WLSyBC;lzCZlAw9p>rg?Ea z;qUkoc-yUUmo+MT0nfBaD}MS#il_LSqoE{7v8e^;Rx7)4dD4;Hd7o@+eyX?Qm3dfo z@iZS~>slJ*@rz&$@>B#o95jTFGxknr$m%V(AeOLLtgV;LZ+lQNf*K)#ySVG4iWTMy6kOY(7TW!dgszBrzH+h2O-w1|0VMyrDY`}pvY*Xx<0Z)n z){At|FTS@ zrKisnO(Cl@xK!$syD^^WH~G%!zRV&vtv5Vz$GpyTxXCw%Qa`S#O2K_K_S?vw4vX|D z05{0M&1|@EC(+4BN-qyN@l8%-jXY9MXT|O}AL`jHxg`AeYkS2((mtD88h6TrPI`b=R{lv|!U}$2ta$a)Y1_{JwYsAaWyu=~}HOKZ*<5WA+#;*qDc&j3?>9)~3H* zPuQ1Wmr~WaYBr%LHNnm_Iso$or2BjZM7AV0KU#T3eoZp62osxTt_3ai~NyA&g%3iAHf(0_1u%$7@ z@X6>fT=uMmI=I2WukSpJ{qLGz^@MS+TR91m&N#mGQ%a^>d1%8-D8?#aIeD@G1YVO3 z4A|an5F#0<0qiCWvXB)9pcXV>n-7d0Q-Cu8!oZ|a2HrYdMr>y0Gd@?mmJF%I2fM8S z)$h|)YYQ4Ip5f*uMT6XI{ya+VO(BZu^)vac?-6&=9dNqD^w!-LFk~)>^%k4R`~qZ} zA2x7pY{@7$!PdlAXkydZ8HURYAGgvek>u#@1W!L!Xi-Nw>h<^h&M{%s=rKK3$ch;K z?q4M&4)ziu7J3(|Vtwc&G(omH&@jE^M9r`G@UWfWsXy_M{lQgI1_H~W@uT#^*IX9v z@SD!eU7aIAqSxBn9n_}a;z0%Rg2#lbao^b9vX^HN(l20YvR8tgMg6mNi2bLM zJk70@Js=@VCo#rDv_!!+f9#r+xTLyGl(byfd~dLLU6#r2)J^VSCbb!*^GwJe z{^n4m8Y*QZ9hGkM*LK93g#b(z8d@jh_~O!iz^WSH#B-F22MN;xj*)ZQJ{ z-8A{X@U*fE8xhp$3C(`e3wmC>=Hi-g(oBr2h$`6_#7aRL!aU6r@ZxRUWZh72T3ry8 zN3#9`V6q4Vd_n>gb{I)NdrP-bS{MkvmI_NJ;4`7!ku%)wt(fY1V?#>QqfkY5?p>5qf{T8R8bRxF`_5+=jf9SlnlwOvGL89snt<*_(2N;ZhO3 z*`UoANPyFz|JGRK%<^Ci#|mqX1^R?-qC*4ISyEqsS5Rp?+%0AG~zeL|2aco>}vQ)-+y|+u%eidu>b!;|D{9!_eTik`kgMf zOmA#IfBz%0T%5lpXZ=Z94l6q~HLSF>6m*@G^ki5t_3it2q}kcoF^6d#!oRq3VY)wH zU--#%MtrC519zoiSM1i-7AVc(b}1(yO8;@bI2jd&*J%gCd0_FcKq4!>VxX z3U+Hh?0T&0<7uLQE^Sc~ICg)+m-Z>|ND1%>_VTc<6(za55`zErO-0t4$V^)GuZw@( zv5)_Ep~jD)oPU>BSw#4M_krB_8>-XkSPMB*3A*EE_QF415doByp61oU4ud7vSZgY`u<_ptf@X9#k`Jx*5oGMvylA!@;= z+|zOPH0wMjj45H?8+42O9Y*TwPs-Kku}Dc31j199^?QFG&MT{{|E{yYT96Oqsz5h8fqDx$NGaO(1SM5;oB+*5-Z#d6eNpb! ztuRdw2nYy|i1=t?Lh<(P+dU~2Z)g#DEKFY|BqYj2VG~Upm>C`(j(3{am={Bu_S{nZ!vFH?dR09HI$HPQxn3{0o&W`< zYc9;y*cc!xCYF$xSO96I3n7H^rlh1$Ff%IUJ1f>5Gt8C50I~U>4<- zDykBo;>K-)e%k#JgM~P9STsWq&dnOI72?d>;z>}<;yjQ9(Nty}aFvUjA3so&j&h!) z1%Fcz2%SxoG>Ya#7ZrjURBQVpg>5kKOUp;qsIPX%V2aogx8eE)L`YXo*0VyYN|-}k zf9OPPv@;+<%wo7kj@JEziH2K{lYWTww_y1=? z9EeLtg=^sLd}BSqxvnyNu|&9&W@irXl9xPb63PTxSn6>&1RQl`p{Yj@AJlRN+c|;w z_8hg2oC~&=!_t+P)KBfHNO0*pGJh!rrf?h_*~#bh$;y>B&c!+rA^*D&}1zMmv0a z!@p$|63?ujn$ODhu4c)?D6mCHvXVDs?MiP5=Q9pIJ|zqE-D8SJ?}BzC!HMsi5Lx({ zcQx$oJ@5w8mZrW=$PPnW&F}eG(~k5z0)yJ}BG&kitC?c?+^p(LC!7sJu%i~Tn=?W!#hl46&^CdoQB)Bm)zop)?R{#)nN9<%fn$tBVy>Yg z<&1#_KKT3zxPCG4%FY3G-$UdSgU`V6=f5mkQAO=0j5a<`8C+jvb6jxCj2dt#ar!7; zBd=FdY4|bKeVcg*sb7)#a*f*sfc}0sp?IjfD28FpoJy3R6)QECIjrvCm8*^qW~!=L z{BW|P;P_wztimfDe55|-ZW}6%XuYrwtl=Tdc^Rx3OgXSK_#$7FwulJ~uGt%qprtR> zWUf@@K6*(`l2{g;uk|unB@fN{m~+F>I%8*$ouOgy^e53t$#*Sz7Lt)Ar;ap(<*@wo zn!*Q_4|FD-!2qb=z~(SV)kb988$pcR0p!z$g~Lg>s2f9ZBkvH;I4*fz5rYl4WCPol zcE9$*d7bDo*Vw?;{X)~+0b7=&;1SjMx&F&Y{X{1N7ul$7g>GJav?O>}5j66|Ff{c&lT1~cKEHw%%{bGd+xD84 zkv}znp=B6p^$4NrhibL+4fO)E-m8&h-LsNgYJ*-v%2Kobld2_^2kVbHunDWqhVmi6;tBvr)mA z0yzJ|#m&s#U6}2RB-aruoxANs0#@&bMRS@rlFls^#M9d!`?zS%pc{o@Si2FbweXPN zcm#&D;e+hrBy4i@h;$qkbW1fpq~Hd8`#sGDRO7jtnHQ^Cft=kfz^8RmVV--1DA7-B zemkZZeS*GbJkJR`SCz^;fj%Hhb_6t*}+;zT^<#sTKr*IndaV6PA-|edzV*CUEMCHIBU&HBqbmrTt-@a`HqCQ>lcE5waDwZ z%MvUPZ=M~FLR}^J?PTBPY9M;2j^9f}iaI6z?3kn|#PuIMh==ppADd-i=W8&|=AG%< zyqxyGWAUlEeeWJxlGiSX|6@v^da9bku9!K*!;G69W!zNkl$qeR@3qhFyDx>rgh{2m z{ki%v@P>YGGPlE=X{kuwP!wvyc$bIZO<8w>+HrxrOFKhel2(Kko!H(iR$`Y73=AOt zks_Uhj`J`urNL0~-|A2;p_9E8M_yA~b?QT4z+|7`fNIS{yedd^sjv&67Qn^Q&943| z&$7V8+1LE>I&IezQ-q2^`TfS47-)t?8NX3Fbqn%^!icV1!^?De-1c;tq5^`Zr~D=I zaIgkggm(Y?FsRe__u1I#6CB*&ShvZup4l+-+GIIZ+Fc8ihJ?kMY`|L{xlJsfH@1bl zM{jF|arj8w$Bzs2sI2F~n<+|#coEL{c|X*dNDEj=%-J$o{eK!gKGiAg<*y<_QBfxi zt2n$L&)}a1&l%ub9AWmbYsZfaO1hw~n$jUMOGE3CB z@j->q3>kMOLn+Hu=VhBnS|98n?Ddubib6T1G}74cS&&x!3|iF0dkU@_;&!06(TNsD zd1sb^2Q!=-)`iK$+K`>t=o#;qPs+~Hf`(+^rC!Ved2xqY7RKM2y^v!;6S<27{4TPb z*b}F$)2NXF8=UVeJ`?@~|8{#oY+&PNA0t9kDOhre&a$DZnedTJ1+ zIB$IJL5ieS8c(;=*3OPQA9T|PErVaEf1>F9%CdIvhw|ul{*gDUIe`5)(Iusv#4ia9 ztqE2T8EUk#jWPTZ;aqiN`b(m=7N;}epv?qJEcZy=!c`6aegI*Qt^E4(rGLRh(j9Aq zZZMTx7OO`Jp*-3X?mb6}(Mr1D7A~DqG1`8N)-8|b>!HX5Wexh226oyDm3Ut;`uL%s zk;nUY!+e(OMW?8WBVtI(Kgd&st>~D7*oEGu`cj*O&c7^w69fAF zrpn8>64EC_F(d9HV;H4QPtx_{r-aG^shz=AIQ(_lT59Eo6m}AP9$7Q$)Sd@cec|T_|S2 z1IG;Xs__JSDDzdY2$|;asNsNcA)^p7`8lIlMFMbS(cpI=qqXLxN;=ZR_upy9Takc~ zaSDo0=x$!{ux)3EIqfuvbYc;bPtT{uH(2f4NrmwIMC5w9(h;HmZT?c=(JP)LTJxTg zULT?8J|Ag6Iqimq;Z|>0(k>5qd*e6LPt1UJ3;wK>ssZ+A&%*7ysQAXv!~`C9>MgP2 zuN(CQwf!%$oQN@iRRw1)@4{d^!p`tLcC@WXQL{%*l%*So5a=~#mPdBrC#ebJ=NRN; zU_poQmB~MHI2Y5=X;BBzFu$6q8+sf#abnBC6x3(_ifCQ-uhh|=tZ_ir=?kmOAUtmi#cx}_>~ij zz`01a^wCfdwNRz5HM#QJJ+JblwKBb+2-a9-`yNI5mJ6 z&rRU$0I~adJVh>*~)jYOEIGyu{U4~dopRL~T7joGQC4Z(h<>|3(;-Ma239m>b zSp!lKq{<2(d3MnKmkTPZk7RAlV^Gxo;x59{+2m4hL4hbhI0zMX1n3J?f=PV1F!XM5 zM2}_?B=K%ELe3&&D^6>qYXfw}%XBULv}mFW*(4kTDfcV%QQ{R`1Z+#wNKH%?9D1Cl zO}r|PA4C8q_&NlMeXMZ7&bNp73cb}>L6f@CK>vVq1kMfL*!S_ ztwgA3G)7<6edLdyfeQ)fDJLa1wT}`c=_&hb$SmfiBN8}_;t9~t%^X)e{f7Oa;@!fhPs(#?0-2ERlp{E%5{SU;`=Z7dPVd z=6$cpuuK-J+(+X&F+}0^e*rlvi}Y?3g;a6_$PGF{8_n3f9p=o8W5q`K30ToFF~;n^ z)XNG*hJma8Uaw$4y7N$_WlrJc@6*VRU??zV%W96M! z2Sh_%51G_c#S+}m_MdXnENzh~DNPB8KJ_L2U|4sfC1xA=Jj5R8G-nRLizTB04dW$J zI|i4OFu6b2g8~@f<8cQm>~83Yae7?UwF3puAGypasy9WQebztTKG2YB7X+yE*HWJo zpgVl-ea|)r0;%?IR&=vZpoC*js8gpz{XB9KCqDmDkxWOeP_9c|oUYrqE&hs`nueT- z9jUVp9Y8BcNVuJWmpffmG#>1#Oj=2r5u$2|v1yjydIvyX^rDr}S<|^a_84fbJ0D_1 zehcUzy?k=vZY0qP^^&tR>TN!+PBV^cpsCuhF`(i+VEmr+QftYDFe_|)(1H!ZS@&ac zyAR~dhi;%sS@ccqH4u-zGIVX>5ssJ46^?H4G( zpxIRB}t!;noucHiA(8E4}OmXQwB-mEltzqGTF8 zvCX!?OzRHx-p$UUkCREC<_`3G?6k?jC&Ta>bbJVHIm~3nMic4k91BzSCeB8JQ33Nm ziVoisRi-NJ&0~W7^^v=>C<;sEB(}KqSjJo~;|lTN%<%OKN{DW#EhSF{Le@ML&pq4V~&C=A39 z!3H1H`siU?_mJB9UOhPr?|37S%jzSWqf9r3{bLFU!6ag#SB`zF7SeL`hZ8L1^Q4(8 z7d1QJH+@M;IKz4IvBr+h89ca6ST_}FIHJ_{J$UEPnm+`~A23{(O03m%DE`U*b_s2t zUzfvw(b~^K?n*auNxI24ZgXLk<{#<((*aU&m)k$1)=3ENq$qSunGYd>p|&{21x9AxF`zy#HF9>7{qi^&7}_;|LF>mn76g?lb3|Bw|#2Q zmK9bpao+L1+Pc%K=p&CM7TAQ*PeyuoXD7eBT%PE~)#mppD@-!7=O|HrCZE_ zpt3iVl9CdOgaon^9~%?1ed}vhH2=KVV7qvec$Ft9XL>FCcZYMsRip*r%g#mgkk6i5 z=I$o03g}}(#`fO|TA54Z!IYKWqTHm9VfZjNUQFvZSi z%1+BnH@S*jZT?z3xBXkGuCOmU&7gCNi_Uh|<+Md4n*VR`GG_&$S3!sv^&B7mCXbR1 zB2`A7RG!xVV&q^n_g{P^)gQj{&v$8}fAM*L?%99&i~RdnvHF*Pc*H+XfD!(WJn(Mq a8BzPSrog5TDEkHMBO{?8UMXr6_&)&cljINp literal 0 HcmV?d00001 From 763a3dfb3145e7d7b7edcc14a7a1e162636ac2f6 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 4 Aug 2020 20:34:58 -0700 Subject: [PATCH 568/589] Update index.md --- windows/client-management/mdm/index.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/client-management/mdm/index.md b/windows/client-management/mdm/index.md index 44d416b67a..c16898d560 100644 --- a/windows/client-management/mdm/index.md +++ b/windows/client-management/mdm/index.md @@ -42,6 +42,7 @@ The MDM security baseline includes policies that cover the following areas: For more details about the MDM policies defined in the MDM security baseline and what Microsoft’s recommended baseline policy values are, see: +- [MDM Security baseline for Windows 10, version 2004](https://download.microsoft.com/download/2/C/4/2C418EC7-31E0-4A74-8928-6DCD512F9A46/2004-MDM-SecurityBaseLine-Document.zip) - [MDM Security baseline for Windows 10, version 1909](https://download.microsoft.com/download/2/C/4/2C418EC7-31E0-4A74-8928-6DCD512F9A46/1909-MDM-SecurityBaseLine-Document.zip) - [MDM Security baseline for Windows 10, version 1903](https://download.microsoft.com/download/2/C/4/2C418EC7-31E0-4A74-8928-6DCD512F9A46/1903-MDM-SecurityBaseLine-Document.zip) From 8949ebe9c7043dbf508997d9102669b124e5223d Mon Sep 17 00:00:00 2001 From: Justin Ward Date: Wed, 5 Aug 2020 21:14:52 +1000 Subject: [PATCH 569/589] Formatting Paragraph spacing was missing --- windows/deployment/windows-autopilot/white-glove.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/deployment/windows-autopilot/white-glove.md b/windows/deployment/windows-autopilot/white-glove.md index 2945f04f62..fd106592f1 100644 --- a/windows/deployment/windows-autopilot/white-glove.md +++ b/windows/deployment/windows-autopilot/white-glove.md @@ -70,6 +70,7 @@ The Windows Autopilot for white glove deployment pre-provisioning process will a Windows Autopilot for white glove deployment supports two distinct scenarios: - User-driven deployments with Azure AD Join. The device will be joined to an Azure AD tenant. - User-driven deployments with Hybrid Azure AD Join. The device will be joined to an on-premises Active Directory domain, and separately registered with Azure AD. + Each of these scenarios consists of two parts, a technician flow and a user flow. At a high level, these parts are the same for Azure AD Join and Hybrid Azure AD join; differences are primarily seen by the end user in the authentication steps. ### Technician flow From 1ee155551fb4fcaa2bd6d771ea4dc8eb63195605 Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Wed, 5 Aug 2020 08:35:06 -0700 Subject: [PATCH 570/589] pencil edit --- .../client-management/mdm/enable-admx-backed-policies-in-mdm.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/enable-admx-backed-policies-in-mdm.md b/windows/client-management/mdm/enable-admx-backed-policies-in-mdm.md index 86a715cd03..1f420a71c4 100644 --- a/windows/client-management/mdm/enable-admx-backed-policies-in-mdm.md +++ b/windows/client-management/mdm/enable-admx-backed-policies-in-mdm.md @@ -17,7 +17,7 @@ manager: dansimp This is a step-by-step guide to configuring ADMX-backed policies in MDM. -Starting in Windows 10 version 1703, Mobile Device Management (MDM) policy configuration support was expanded to allow access of [selected set of Group Policy administrative templates (ADMX-backed policies)](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csps-admx-backed) for Windows PCs via the [Policy configuration service provider (CSP)](policy-configuration-service-provider.md). Configuring ADMX-backed policies in Policy CSP is different from the typical way you configure a traditional MDM policy. +Starting in Windows 10 version 1703, Mobile Device Management (MDM) policy configuration support was expanded to allow access of [selected set of Group Policy administrative templates (ADMX-backed policies)](https://docs.microsoft.com/windows/client-management/mdm/policy-csps-admx-backed) for Windows PCs via the [Policy configuration service provider (CSP)](policy-configuration-service-provider.md). Configuring ADMX-backed policies in Policy CSP is different from the typical way you configure a traditional MDM policy. Summary of steps to enable a policy: - Find the policy from the list ADMX-backed policies. From 8944262a60017091b6e2b7dfde61057c8c1f7a9b Mon Sep 17 00:00:00 2001 From: andreiztm Date: Wed, 5 Aug 2020 19:55:05 +0300 Subject: [PATCH 571/589] Add clarification for FAQs regarding Target Version policy --- windows/deployment/update/waas-wufb-group-policy.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/deployment/update/waas-wufb-group-policy.md b/windows/deployment/update/waas-wufb-group-policy.md index d9b74223ef..fc5d903422 100644 --- a/windows/deployment/update/waas-wufb-group-policy.md +++ b/windows/deployment/update/waas-wufb-group-policy.md @@ -118,6 +118,8 @@ Now all devices are paused from updating for 35 days. When the pause is removed, If you need a device to stay on a version beyond the point when deferrals on the next version would elapse or if you need to skip a version (for example, update fall release to fall release) use the **Select the target Feature Update version** setting instead of using the **Specify when Preview Builds and Feature Updates are received** setting for feature update deferrals. When you use this policy, specify the version that you want your device(s) to use. If you don't update this before the device reaches end of service, the device will automatically be updated once it is 60 days past end of service for its edition. +When configuring the Target Version policy, if you specify a Feature Update version that is older than your current version or is an invalid value the device will not receive any Feature Updates until the policy is updated. When the Target Version policy is specified your Feature Update deferrals will not be in effect. + ### Manage how users experience updates #### I want to manage when devices download, install, and restart after updates From d303a13a164ac23f6d8c955bf2e78da6aa8f1861 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 5 Aug 2020 10:43:40 -0700 Subject: [PATCH 572/589] migrate content to mem --- .openpublishing.redirection.json | 120 +++++ windows/deployment/TOC.yml | 4 +- windows/deployment/index.yml | 6 +- windows/deployment/windows-autopilot/TOC.md | 35 +- .../windows-autopilot/add-devices.md | 184 -------- .../autopilot-device-guidelines.md | 47 -- .../windows-autopilot/autopilot-faq.md | 165 ------- .../windows-autopilot/autopilot-mbr.md | 421 ------------------ .../windows-autopilot/autopilot-support.md | 37 -- .../windows-autopilot/autopilot-update.md | 48 -- .../deployment/windows-autopilot/bitlocker.md | 54 --- .../windows-autopilot/deployment-process.md | 27 -- .../windows-autopilot/dfci-management.md | 70 --- .../windows-autopilot/enrollment-status.md | 39 -- .../windows-autopilot/existing-devices.md | 324 -------------- windows/deployment/windows-autopilot/index.md | 78 ---- .../deployment/windows-autopilot/index.yml | 38 ++ .../windows-autopilot/known-issues.md | 89 ---- .../windows-autopilot/policy-conflicts.md | 45 -- .../deployment/windows-autopilot/profiles.md | 49 -- .../windows-autopilot/registration-auth.md | 94 ---- .../windows-autopilot/self-deploying.md | 74 --- .../windows-autopilot/troubleshooting.md | 164 ------- .../windows-autopilot/user-driven.md | 148 ------ .../windows-autopilot/white-glove.md | 120 ----- .../windows-autopilot-requirements.md | 145 ------ .../windows-autopilot-reset.md | 138 ------ .../windows-autopilot-scenarios.md | 76 ---- .../windows-autopilot-whats-new.md | 64 --- .../windows-autopilot/windows-autopilot.md | 62 --- 30 files changed, 164 insertions(+), 2801 deletions(-) delete mode 100644 windows/deployment/windows-autopilot/add-devices.md delete mode 100644 windows/deployment/windows-autopilot/autopilot-device-guidelines.md delete mode 100644 windows/deployment/windows-autopilot/autopilot-faq.md delete mode 100644 windows/deployment/windows-autopilot/autopilot-mbr.md delete mode 100644 windows/deployment/windows-autopilot/autopilot-support.md delete mode 100644 windows/deployment/windows-autopilot/autopilot-update.md delete mode 100644 windows/deployment/windows-autopilot/bitlocker.md delete mode 100644 windows/deployment/windows-autopilot/deployment-process.md delete mode 100644 windows/deployment/windows-autopilot/dfci-management.md delete mode 100644 windows/deployment/windows-autopilot/enrollment-status.md delete mode 100644 windows/deployment/windows-autopilot/existing-devices.md delete mode 100644 windows/deployment/windows-autopilot/index.md create mode 100644 windows/deployment/windows-autopilot/index.yml delete mode 100644 windows/deployment/windows-autopilot/known-issues.md delete mode 100644 windows/deployment/windows-autopilot/policy-conflicts.md delete mode 100644 windows/deployment/windows-autopilot/profiles.md delete mode 100644 windows/deployment/windows-autopilot/registration-auth.md delete mode 100644 windows/deployment/windows-autopilot/self-deploying.md delete mode 100644 windows/deployment/windows-autopilot/troubleshooting.md delete mode 100644 windows/deployment/windows-autopilot/user-driven.md delete mode 100644 windows/deployment/windows-autopilot/white-glove.md delete mode 100644 windows/deployment/windows-autopilot/windows-autopilot-requirements.md delete mode 100644 windows/deployment/windows-autopilot/windows-autopilot-reset.md delete mode 100644 windows/deployment/windows-autopilot/windows-autopilot-scenarios.md delete mode 100644 windows/deployment/windows-autopilot/windows-autopilot-whats-new.md delete mode 100644 windows/deployment/windows-autopilot/windows-autopilot.md diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index c806d9395d..0aba8575cb 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -16294,6 +16294,126 @@ "source_path": "windows/privacy/windows-personal-data-services-configuration.md", "redirect_url": "https://docs.microsoft.com/windows/privacy/windows-10-and-privacy-compliance", "redirect_document_id": false + }, + { + "source_path": "windows/deployment/windows-autopilot/add-devices.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/add-devices", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/autopilot-device-guidelines.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/autopilot-device-guidelines", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/autopilot-faq.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/autopilot-faq", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/autopilot-mbr.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/autopilot-mbr", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/utopilot-support.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/utopilot-support", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/autopilot-update.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/autopilot-update", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/bitlocker.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/bitlocker", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/deployment-process.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/deployment-process", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/dfci-management.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/dfci-management", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/enrollment-status.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/enrollment-status", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/existing-devices.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/existing-devices", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/known-issues.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/known-issues", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/policy-conflicts.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/policy-conflicts", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/profiles.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/profiles", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/registration-auth.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/registration-auth", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/self-deploying.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/self-deploying", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/troubleshooting.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/troubleshooting", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/user-driven.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/user-driven", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/white-glove.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/white-glove", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/windows-autopilot-requirements.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/windows-autopilot-requirements", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/windows-autopilot-reset.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/windows-autopilot-reset", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/windows-autopilot-scenarios.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/windows-autopilot-scenarios", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/windows-autopilot-whats-new.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/windows-autopilot-whats-new", + "redirect_document_id": true + }, + { + "source_path": "windows/deployment/windows-autopilot/windows-autopilot.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/windows-autopilot", + "redirect_document_id": true } ] } \ No newline at end of file diff --git a/windows/deployment/TOC.yml b/windows/deployment/TOC.yml index bd4751ea90..edcc70baaa 100644 --- a/windows/deployment/TOC.yml +++ b/windows/deployment/TOC.yml @@ -74,8 +74,6 @@ href: update/waas-branchcache.md - name: Prepare your deployment tools items: - - name: Register devices for deployment with Windows Autopilot - href: windows-autopilot/add-devices.md - name: Prepare for deployment with MDT href: deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md - name: Prepare for deployment with Configuration Manager @@ -94,7 +92,7 @@ - name: Deploy Windows 10 items: - name: Deploy Windows 10 with Autopilot - href: windows-autopilot/windows-autopilot-scenarios.md + href: windows-autopilot/index.md - name: Deploy Windows 10 with Configuration Manager items: - name: Deploy to a new device diff --git a/windows/deployment/index.yml b/windows/deployment/index.yml index 4383221147..91a4c1fe76 100644 --- a/windows/deployment/index.yml +++ b/windows/deployment/index.yml @@ -13,7 +13,7 @@ metadata: ms.collection: windows-10 author: greg-lindsay #Required; your GitHub user alias, with correct capitalization. ms.author: greglin #Required; microsoft alias of author; optional team alias. - ms.date: 06/09/2020 #Required; mm/dd/yyyy format. + ms.date: 08/05/2020 #Required; mm/dd/yyyy format. localization_priority: medium # linkListType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | tutorial | video | whats-new @@ -53,7 +53,7 @@ landingContent: - linkListType: deploy links: - text: Deploy Windows 10 with Autopilot - url: windows-autopilot/windows-autopilot-scenarios.md + url: https://docs.microsoft.com/mem/autopilot - text: Assign devices to servicing channels url: update/waas-servicing-channels-windows-10-updates.md - text: Deploy Windows updates with Configuration Manager @@ -71,7 +71,7 @@ landingContent: - text: Basics of Windows updates, channels, and tools url: update/get-started-updates-channels-tools.md - text: Overview of Windows Autopilot - url: windows-autopilot/windows-autopilot.md + url: https://docs.microsoft.com/mem/autopilot/windows-autopilot # Card - title: Support remote work diff --git a/windows/deployment/windows-autopilot/TOC.md b/windows/deployment/windows-autopilot/TOC.md index 9b7c22ee03..b2e8164e4c 100644 --- a/windows/deployment/windows-autopilot/TOC.md +++ b/windows/deployment/windows-autopilot/TOC.md @@ -1,33 +1,2 @@ -# [Windows Autopilot deployment](index.md) -# [What's new](windows-autopilot-whats-new.md) -# Understanding Windows Autopilot -## [Overview](windows-autopilot.md) -## [Requirements](windows-autopilot-requirements.md) -## [Scenarios and capabilities](windows-autopilot-scenarios.md) -## [Get started](demonstrate-deployment-on-vm.md) - -# Deployment scenarios -## [Deployment processes](deployment-process.md) -## [User-driven mode](user-driven.md) -## [Self-deploying mode](self-deploying.md) -## [Windows Autopilot Reset](windows-autopilot-reset.md) -## [White glove](white-glove.md) -## [Support for existing devices](existing-devices.md) - -# Administering Windows Autopilot -## [Registering devices](add-devices.md) -## [Configuring device profiles](profiles.md) -## [Enrollment Status Page](enrollment-status.md) -## [BitLocker encryption](bitlocker.md) -## [DFCI management](dfci-management.md) -## [Windows Autopilot update](autopilot-update.md) -## [Troubleshooting](troubleshooting.md) -## [Policy conflicts](policy-conflicts.md) -## [Known issues](known-issues.md) - -# Support -## [FAQ](autopilot-faq.md) -## [Contacts](autopilot-support.md) -## [Registration authorization](registration-auth.md) -## [Device guidelines](autopilot-device-guidelines.md) -## [Motherboard replacement](autopilot-mbr.md) +# [Windows Autopilot deployment](index.yml) +## [Get started](demonstrate-deployment-on-vm.md) \ No newline at end of file diff --git a/windows/deployment/windows-autopilot/add-devices.md b/windows/deployment/windows-autopilot/add-devices.md deleted file mode 100644 index 24429cf361..0000000000 --- a/windows/deployment/windows-autopilot/add-devices.md +++ /dev/null @@ -1,184 +0,0 @@ ---- -title: Adding devices -ms.reviewer: -manager: laurawi -description: How to add devices to Windows Autopilot -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: deploy -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# Adding devices to Windows Autopilot - -**Applies to** - -- Windows 10 - -Before deploying a device using Windows Autopilot, the device must be registered with the Windows Autopilot deployment service. Ideally, this would be performed by the OEM, reseller, or distributor from which the devices were purchased, but this can also be done by the organization by collecting the hardware identity and uploading it manually. - -## OEM registration - -When you purchase devices directly from an OEM, that OEM can automatically register the devices with the Windows Autopilot deployment service. For the list of OEMs that currently support this, see the "Participant device manufacturers and resellers" section of the [Windows Autopilot information page](https://aka.ms/windowsautopilot). - -Before an OEM can register devices on behalf of an organization, the organization must grant the OEM permission to do so. This process is initiated by the OEM, with approval granted by an Azure AD global administrator from the organization. See the "Customer Consent" section of the [Customer consent page](https://docs.microsoft.com/windows/deployment/windows-autopilot/registration-auth#oem-authorization). - -> [!Note] -> While the hardware hashes are generated as part of the OEM device manufacturing process, these should not be provided directly to customers or CSP partners. Instead, the OEM should register devices on the customer's behalf. In cases where devices are being registered by CSP partners, OEMs may provide PKID information to those partners to support the device registration process. - -## Reseller, distributor, or partner registration - -Customers may purchase devices from resellers, distributors, or other partners. As long as these resellers, distributors, and partners are part of the [Cloud Solution Partners (CSP) program](https://partner.microsoft.com/cloud-solution-provider), they too can register devices on behalf of the customer. - -As with OEMs, CSP partners must be granted permission to register devices on behalf of an organization. This follows the process described on the [Customer consent page](https://docs.microsoft.com/windows/deployment/windows-autopilot/registration-auth#csp-authorization). The CSP partner initiates a request to establish a relationship with the organization, with approval granted by a global administrator from the organization. Once approved, CSP partners add devices using [Partner Center](https://partner.microsoft.com/pcv/dashboard/overview), either directly through the web site or via available APIs that can automate the same tasks. - -Windows Autopilot does not require delegated administrator permissions when establishing the relationship between the CSP partner and the organization. As part of the approval process performed by the global administrator, the global administrator can choose to uncheck the "Include delegated administration permissions" checkbox. - -> [!Note] -> While resellers, distributors, or partners could boot each new Windows device to obtain the hardware hash (for purposes of providing them to customers or direct registration by the partner), this is not recommended. Instead, these partners should register devices using the PKID information obtained from the device packaging (barcode) or obtained electronically from the OEM or upstream partner (e.g. distributor). - -## Automatic registration of existing devices - -If an existing device is already running a supported version of Windows 10 semi-annual channel and enrolled in an MDM service such an Intune, that MDM service can ask the device for the hardware ID (also known as a hardware hash). Once it has that, it can automatically register the device with Windows Autopilot. - -For instructions on how to do this with Microsoft Intune, see [Create an Autopilot deployment profile](https://docs.microsoft.com/intune/enrollment-autopilot#create-an-autopilot-deployment-profile) documentation describing the "Convert all targeted devices to Autopilot" setting. - -Also note that when using the [Windows Autopilot for existing devices](https://docs.microsoft.com/windows/deployment/windows-autopilot/existing-devices) scenario, it is not necessary to pre-register the devices with Windows Autopilot. Instead, a configuration file (AutopilotConfigurationFile.json) containing all the Windows Autopilot profile settings is used; the device can be registered with Windows Autopilot after the fact using the same "Convert all targeted devices to Autopilot" setting. - -## Manual registration - -To perform manual registration of a device, you must first capture its hardware ID (also known as a hardware hash). Once this process has completed, the resulting hardware ID can be uploaded to the Windows Autopilot service. Because this process requires booting the device into Windows 10 in order to obtain the hardware ID, this is intended primarily for testing and evaluation scenarios. - -> [!Note] -> Customers can only register devices with a hardware hash. Other methods (PKID, tuple) are available through OEMs or CSP partners as described in the previous sections. - -## Device identification - -To define a device to the Windows Autopilot deployment service, a unique hardware ID for the device needs to be captured and uploaded to the service. While this step is ideally done by the hardware vendor (OEM, reseller, or distributor), automatically associating the device with an organization, it is also possible to do this through a harvesting process that collects the device from within a running Windows 10 installation. - -The hardware ID, also commonly referred to as a hardware hash, contains several details about the device, including its manufacturer, model, device serial number, hard drive serial number, and many other attributes that can be used to uniquely identify that device. - -Note that the hardware hash also contains details about when it was generated, so it will change each time it is generated. When the Windows Autopilot deployment service attempts to match a device, it considers changes like that, as well as more substantial changes such as a new hard drive, and is still able to match successfully. But substantial changes to the hardware, such as a motherboard replacement, would not match, so a new hash would need to be generated and uploaded. - -### Collecting the hardware ID from existing devices using Microsoft Endpoint Configuration Manager - -Microsoft Endpoint Configuration Manager automatically collects the hardware hashes for existing Windows 10 devices. For more information, see [Gather information from Configuration Manager for Windows Autopilot](https://docs.microsoft.com/configmgr/comanage/how-to-prepare-win10#windows-autopilot). You can extract the hash information from Configuration Manager into a CSV file. - -> [!Note] -> Before uploading the CSV file on Intune, please make sure that the first row contains the device serial number, Windows product ID, hardware hash, group tag, and assigned user. If there is header information on the top of CSV file, please delete that header information. See details at [Enroll Windows devices in Intune](https://docs.microsoft.com/intune/enrollment/enrollment-autopilot). - -### Collecting the hardware ID from existing devices using PowerShell - -The hardware ID, or hardware hash, for an existing device is available through Windows Management Instrumentation (WMI), as long as that device is running a supported version of Windows 10 semi-annual channel. To help gather this information, as well as the serial number of the device (useful to see at a glance the machine to which it belongs), a PowerShell script called [Get-WindowsAutoPilotInfo.ps1 has been published to the PowerShell Gallery website](https://www.powershellgallery.com/packages/Get-WindowsAutoPilotInfo). - -To use this script, you can download it from the PowerShell Gallery and run it on each computer, or you can install it directly from the PowerShell Gallery. To install it directly and capture the hardware hash from the local computer, use the following commands from an elevated Windows PowerShell prompt: - -```powershell -md c:\\HWID -Set-Location c:\\HWID -Set-ExecutionPolicy -Scope Process -ExecutionPolicy Unrestricted -Install-Script -Name Get-WindowsAutoPilotInfo -Get-WindowsAutoPilotInfo.ps1 -OutputFile AutoPilotHWID.csv -``` - -The commands can also be run remotely, as long as WMI permissions are in place and WMI is accessible through the Windows Firewall on that remote computer. See the [Get-WindowsAutoPilotInfo](https://www.powershellgallery.com/packages/Get-WindowsAutoPilotInfo) script’s help (using “Get-Help Get-WindowsAutoPilotInfo.ps1”) for more information about running the script. - ->[!IMPORTANT] ->Do not connect devices to the Internet prior to capturing the hardware ID and creating an Autopilot device profile. This includes collecting the hardware ID, uploading the .CSV into MSfB or Intune, assigning the profile, and confirming the profile assignment. Connecting the device to the Internet before this process is complete will result in the device downloading a blank profile that is stored on the device until it is explicity removed. In Windows 10 version 1809, you can clear the cached profile by restarting OOBE. In previous versions, the only way to clear the stored profile is to re-install the OS, reimage the PC, or run **sysprep /generalize /oobe**.
->After Intune reports the profile ready to go, only then should the device be connected to the Internet. - ->[!NOTE] ->If OOBE is restarted too many times it can enter a recovery mode and fail to run the Autopilot configuration. You can identify this scenario if OOBE displays multiple configuration options on the same page, including language, region, and keyboard layout. The normal OOBE displays each of these on a separate page. The following value key tracks the count of OOBE retries:
->**HKCU\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\UserOOBE**
->To ensure OOBE has not been restarted too many times, you can change this value to 1. - -## Registering devices - - - - -Once the hardware IDs have been captured from existing devices, they can be uploaded through a variety of means. See the detailed documentation for each available mechanism. - -- [Microsoft Intune](https://docs.microsoft.com/intune/enrollment-autopilot). This is the preferred mechanism for all customers. -- [Partner Center](https://msdn.microsoft.com/partner-center/autopilot). This is used by CSP partners to register devices on behalf of customers. -- [Microsoft 365 Business & Office 365 Admin](https://support.office.com/article/Create-and-edit-AutoPilot-profiles-5cf7139e-cfa1-4765-8aad-001af1c74faa). This is typically used by small and medium businesses (SMBs) who manage their devices using Microsoft 365 Business. -- [Microsoft Store for Business](https://docs.microsoft.com/microsoft-store/add-profile-to-devices#manage-autopilot-deployment-profiles). You might already be using MSfB to manage your apps and settings. - -A summary of each platform's capabilities is provided below.
-
-

Key sequences blocked by assigned access

When in assigned access, some key combinations are blocked for assigned access users.

-

Alt+F4, Alt+Shift+TaB, Alt+Tab are not blocked by Assigned Access, it is recommended you use Keyboard Filter to block these key combinations.

+

Alt+F4, Alt+Shift+Tab, Alt+Tab are not blocked by Assigned Access, it is recommended you use Keyboard Filter to block these key combinations.

Ctrl+Alt+Delete is the key to break out of Assigned Access. If needed, you can use Keyboard Filter to configure a different key combination to break out of assigned access by setting BreakoutKeyScanCode as described in WEKF_Settings.

From 9e1a23372ae34481026d2e37b085fc1ffcc0629b Mon Sep 17 00:00:00 2001 From: RavennMSFT <37601656+RavennMSFT@users.noreply.github.com> Date: Tue, 21 Jul 2020 14:52:42 -0700 Subject: [PATCH 287/589] Update hello-how-it-works-authentication.md Added notes to call out remote work related feedback that requires LoS to DC in key-trust and cert-trust as pre reqs for first time logon. --- .../hello-for-business/hello-how-it-works-authentication.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/windows/security/identity-protection/hello-for-business/hello-how-it-works-authentication.md b/windows/security/identity-protection/hello-for-business/hello-how-it-works-authentication.md index c75524b41e..cb21e54fe3 100644 --- a/windows/security/identity-protection/hello-for-business/hello-how-it-works-authentication.md +++ b/windows/security/identity-protection/hello-for-business/hello-how-it-works-authentication.md @@ -74,6 +74,9 @@ Azure Active Directory joined devices authenticate to Azure during sign-in and c |F | While Windows loads the user's desktop, lsass passes the collected credentials to the Cloud Authentication security support provider, referred to as the Cloud AP provider. The Cloud AP provider requests a nonce from Azure Active Directory. Azure AD returns a nonce.| |G | The Cloud AP provider signs the nonce using the user's private key and returns the signed nonce to the Azure Active Directory. Azure Active Directory validates the signed nonce using the user's securely registered public key against the nonce signature. After validating the signature, Azure AD then validates the returned signed nonce. After validating the nonce, Azure AD creates a PRT with session key that is encrypted to the device's transport key and returns it to the Cloud AP provider.
The Cloud AP provider receives the encrypted PRT with session key. Using the device's private transport key, the Cloud AP provider decrypt the session key and protects the session key using the device's TPM.
The Cloud AP provider returns a successful authentication response to lsass. Lsass caches the PRT.| +> [!IMPORTANT] +> In the above deployment model, a newly provisioned user will not be able to sign in using Windows Hello for Business until (a) Azure AD Connect successfully synchronizes the public key to the on-premises Active Directory and (b) device has line of sight to the domain controller for the first time. + ## Hybrid Azure AD join authentication using a Certificate ![Hybrid Azure AD join authentication using a Certificate](images/howitworks/auth-haadj-certtrust.png) @@ -87,3 +90,5 @@ Azure Active Directory joined devices authenticate to Azure during sign-in and c |F | While Windows loads the user's desktop, lsass passes the collected credentials to the Cloud Authentication security support provider, referred to as the Cloud AP provider. The Cloud AP provider requests a nonce from Azure Active Directory. Azure AD returns a nonce.| |G | The Cloud AP provider signs the nonce using the user's private key and returns the signed nonce to the Azure Active Directory. Azure Active Directory validates the signed nonce using the user's securely registered public key against the nonce signature. After validating the signature, Azure AD then validates the returned signed nonce. After validating the nonce, Azure AD creates a PRT with session key that is encrypted to the device's transport key and returns it to the Cloud AP provider.
The Cloud AP provider receives the encrypted PRT with session key. Using the device's private transport key, the Cloud AP provider decrypt the session key and protects the session key using the device's TPM.
The Cloud AP provider returns a successful authentication response to lsass. Lsass caches the PRT.| +> [!IMPORTANT] +> In the above deployment model, a newly provisioned user will not be able to sign in using Windows Hello for Business unless the device has line of sight to the domain controller for the first time. From 1c1d6d63459d9fe76e3116a98cfe905494b7cd5d Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 21 Jul 2020 15:05:03 -0700 Subject: [PATCH 288/589] Update policy-csps-supported-by-surface-hub.md --- .../mdm/policy-csps-supported-by-surface-hub.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md index b32eded81d..a9afda6609 100644 --- a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md +++ b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md @@ -15,8 +15,8 @@ ms.date: 07/22/2020 # Policy CSPs supported by Microsoft Surface Hub -- [ApplicationManagement/AllowAppStoreAutoUpdate](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-applicationmanagement#applicationmanagement-allowappstoreautoupdate) -- [ApplicationManagement/AllowDeveloperUnlock](mdm/policy-csp-applicationmanagement#applicationmanagement-allowdeveloperunlock) +-[ApplicationManagement/AllowAppStoreAutoUpdate] (https://docs.microsoft.com/windows/client-management/mdm/policy-csp-applicationmanagement#applicationmanagement-allowappstoreautoupdate) +- [ApplicationManagement/AllowDeveloperUnlock](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-applicationmanagement#applicationmanagement-allowdeveloperunlock) - [Accounts/AllowMicrosoftAccountConnection](policy-csp-accounts#accounts-allowmicrosoftaccountconnection) - [Camera/AllowCamera](policy-csp-camera.md#camera-allowcamera) - [Cellular/ShowAppCellularAccessUI](policy-csp-cellular.md#cellular-showappcellularaccessui) @@ -65,7 +65,7 @@ ms.date: 07/22/2020 - [DeliveryOptimization/DOMonthlyUploadDataCap](policy-csp-deliveryoptimization.md#deliveryoptimization-domonthlyuploaddatacap) - [DeliveryOptimization/DOPercentageMaxDownloadBandwidth](policy-csp-deliveryoptimization.md#deliveryoptimization-dopercentagemaxdownloadbandwidth) - [Desktop/PreventUserRedirectionOfProfileFolders](policy-csp-desktop.md#desktop-preventuserredirectionofprofilefolders) -- [RestrictedGroups/ConfigureGroupMembership](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-restrictedgroups) +- [RestrictedGroups/ConfigureGroupMembership](https://docs.microsoft.com/windows/client-management/https://docs.microsoft.com/windows/client-management/mdm/policy-csp-restrictedgroups) - [TextInput/AllowIMELogging](policy-csp-textinput.md#textinput-allowimelogging) - [TextInput/AllowIMENetworkAccess](policy-csp-textinput.md#textinput-allowimenetworkaccess) - [TextInput/AllowInputPanel](policy-csp-textinput.md#textinput-allowinputpanel) @@ -79,7 +79,7 @@ ms.date: 07/22/2020 - [TextInput/ExcludeJapaneseIMEExceptShiftJIS](policy-csp-textinput.md#textinput-excludejapaneseimeexceptshiftjis) - [Wifi/AllowInternetSharing](policy-csp-wifi#wifi-allowinternetsharing) - [Wifi/AllowManualWiFiConfiguration](policy-csp-wifi#wifi-allowmanualwificonfiguration) -- [Wifi/AllowWiFi](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-wifi#wifi-allowwifi) +- [Wifi/AllowWiFi](https://docs.microsoft.com/windows/client-management/https://docs.microsoft.com/windows/client-management/mdm/policy-csp-wifi#wifi-allowwifi) - [WiFi/AllowWiFiHotSpotReporting](policy-csp-wifi.md#wifi-allowwifihotspotreporting) - [Wifi/AllowWiFiDirect](policy-csp-wifi#wifi-allowwifidirect) - [WirelessDisplay/AllowMdnsAdvertisement]( From bf51ff82f573a0ed7c14ef8c2a560ca620d14556 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Tue, 21 Jul 2020 15:21:12 -0700 Subject: [PATCH 289/589] fixing redirect doc id --- .openpublishing.redirection.json | Bin 2578182 -> 2578186 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 18b4fdd37ef24223480153af7915343121f0cac1..712426afd2db3669cecd0b503309d35bfed71e2e 100644 GIT binary patch delta 131 zcmWm4I}QOs0D$2P=9%W;woCjABA>`soX$R5(+0!$W+dQ;_JTS z^(;<52Lvh7NHS!}k*7eB5@jk>siE+w Date: Tue, 21 Jul 2020 15:30:32 -0700 Subject: [PATCH 290/589] Update policy-csps-supported-by-surface-hub.md corrects links --- .../policy-csps-supported-by-surface-hub.md | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md index a9afda6609..bf80772c59 100644 --- a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md +++ b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md @@ -77,23 +77,23 @@ ms.date: 07/22/2020 - [TextInput/ExcludeJapaneseIMEExceptJIS0208](policy-csp-textinput.md#textinput-excludejapaneseimeexceptjis0208) - [TextInput/ExcludeJapaneseIMEExceptJIS0208andEUDC](policy-csp-textinput.md#textinput-excludejapaneseimeexceptjis0208andeudc) - [TextInput/ExcludeJapaneseIMEExceptShiftJIS](policy-csp-textinput.md#textinput-excludejapaneseimeexceptshiftjis) -- [Wifi/AllowInternetSharing](policy-csp-wifi#wifi-allowinternetsharing) +- [Wifi/AllowInternetSharing](https://docs.microsoft.com/windows/client-management/policy-csp-wifi#wifi-allowinternetsharing) - [Wifi/AllowManualWiFiConfiguration](policy-csp-wifi#wifi-allowmanualwificonfiguration) -- [Wifi/AllowWiFi](https://docs.microsoft.com/windows/client-management/https://docs.microsoft.com/windows/client-management/mdm/policy-csp-wifi#wifi-allowwifi) -- [WiFi/AllowWiFiHotSpotReporting](policy-csp-wifi.md#wifi-allowwifihotspotreporting) -- [Wifi/AllowWiFiDirect](policy-csp-wifi#wifi-allowwifidirect) -- [WirelessDisplay/AllowMdnsAdvertisement]( +- [Wifi/AllowWiFi](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-wifi#wifi-allowwifi) +- [WiFi/AllowWiFiHotSpotReporting](https://docs.microsoft.com/windows/client-management/policy-csp-wifi.md#wifi-allowwifihotspotreporting) +- [Wifi/AllowWiFiDirect](https://docs.microsoft.com/windows/client-management/policy-csp-wifi#wifi-allowwifidirect) +- [WirelessDisplay/AllowMdnsAdvertisement](https://docs.microsoft.com/windows/client-management/ policy-csp-wirelessdisplay#wirelessdisplay-allowmdnsadvertisement) - [WirelessDisplay/AllowMdnsDiscovery]( policy-csp-wirelessdisplay#wirelessdisplay-allowmdnsdiscovery) -- [WirelessDisplay/AllowProjectionFromPC](policy-csp-wirelessdisplay#wirelessdisplay-allowprojectionfrompc) +- [WirelessDisplay/AllowProjectionFromPC](https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-allowprojectionfrompc) - [WirelessDisplay/AllowProjectionFromPCOverInfrastructure](policy-csp-wirelessdisplay#wirelessdisplay-allowprojectionfrompcoverinfrastructure) -- [WirelessDisplay/AllowProjectionToPC](policy-csp-wirelessdisplay#wirelessdisplay-allowprojectiontopc) -- [WirelessDisplay/AllowProjectionToPCOverInfrastructure](policy-csp-wirelessdisplay#wirelessdisplay-allowprojectiontopcoverinfrastructure) +- [WirelessDisplay/AllowProjectionToPC](https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-allowprojectiontopc) +- [WirelessDisplay/AllowProjectionToPCOverInfrastructure](https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-allowprojectiontopcoverinfrastructure) - [WirelessDisplay/AllowUserInputFromWirelessDisplayReceiver]( -policy-csp-wirelessdisplay#wirelessdisplay-allowuserinputfromwirelessdisplayreceiver) +https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-allowuserinputfromwirelessdisplayreceiver) - [WirelessDisplay/RequirePinForPairing]( -policy-csp-wirelessdisplay#wirelessdisplay-requirepinforpairing) +https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-requirepinforpairing) ## Related topics From 72d752e7661e6dc8931500c817da4a8571af30eb Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 21 Jul 2020 15:31:42 -0700 Subject: [PATCH 291/589] Update policy-csps-supported-by-surface-hub.md --- .../mdm/policy-csps-supported-by-surface-hub.md | 16 ++++++---------- 1 file changed, 6 insertions(+), 10 deletions(-) diff --git a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md index bf80772c59..1bad51c8b3 100644 --- a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md +++ b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md @@ -78,22 +78,18 @@ ms.date: 07/22/2020 - [TextInput/ExcludeJapaneseIMEExceptJIS0208andEUDC](policy-csp-textinput.md#textinput-excludejapaneseimeexceptjis0208andeudc) - [TextInput/ExcludeJapaneseIMEExceptShiftJIS](policy-csp-textinput.md#textinput-excludejapaneseimeexceptshiftjis) - [Wifi/AllowInternetSharing](https://docs.microsoft.com/windows/client-management/policy-csp-wifi#wifi-allowinternetsharing) -- [Wifi/AllowManualWiFiConfiguration](policy-csp-wifi#wifi-allowmanualwificonfiguration) +- [Wifi/AllowManualWiFiConfiguration](https://docs.microsoft.com/windows/client-management/policy-csp-wifi#wifi-allowmanualwificonfiguration) - [Wifi/AllowWiFi](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-wifi#wifi-allowwifi) - [WiFi/AllowWiFiHotSpotReporting](https://docs.microsoft.com/windows/client-management/policy-csp-wifi.md#wifi-allowwifihotspotreporting) - [Wifi/AllowWiFiDirect](https://docs.microsoft.com/windows/client-management/policy-csp-wifi#wifi-allowwifidirect) -- [WirelessDisplay/AllowMdnsAdvertisement](https://docs.microsoft.com/windows/client-management/ -policy-csp-wirelessdisplay#wirelessdisplay-allowmdnsadvertisement) -- [WirelessDisplay/AllowMdnsDiscovery]( -policy-csp-wirelessdisplay#wirelessdisplay-allowmdnsdiscovery) +- [WirelessDisplay/AllowMdnsAdvertisement](https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-allowmdnsadvertisement) +- [WirelessDisplay/AllowMdnsDiscovery](https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-allowmdnsdiscovery) - [WirelessDisplay/AllowProjectionFromPC](https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-allowprojectionfrompc) -- [WirelessDisplay/AllowProjectionFromPCOverInfrastructure](policy-csp-wirelessdisplay#wirelessdisplay-allowprojectionfrompcoverinfrastructure) +- [WirelessDisplay/AllowProjectionFromPCOverInfrastructure](https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-allowprojectionfrompcoverinfrastructure) - [WirelessDisplay/AllowProjectionToPC](https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-allowprojectiontopc) - [WirelessDisplay/AllowProjectionToPCOverInfrastructure](https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-allowprojectiontopcoverinfrastructure) -- [WirelessDisplay/AllowUserInputFromWirelessDisplayReceiver]( -https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-allowuserinputfromwirelessdisplayreceiver) -- [WirelessDisplay/RequirePinForPairing]( -https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-requirepinforpairing) +- [WirelessDisplay/AllowUserInputFromWirelessDisplayReceiver](https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-allowuserinputfromwirelessdisplayreceiver) +- [WirelessDisplay/RequirePinForPairing](https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-requirepinforpairing) ## Related topics From a9cc1de4c52ccc391df167601dc77618b7df571a Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 21 Jul 2020 16:05:20 -0700 Subject: [PATCH 292/589] wannacry redirect --- .openpublishing.redirection.json | Bin 2578186 -> 2578156 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 712426afd2db3669cecd0b503309d35bfed71e2e..29d82ddb1ccee127e5ed78e3360921b3741c35b7 100644 GIT binary patch delta 255 zcmWN@JxfAi7{>AY_T}+tS*D$`7hlS1aqxvgN5_J;8rp)EAOhRkMB;&;fAmXXB@R*}OR@+e>(J~pt4BDS!N9qginGAgKI5BsR$0Ec0;I4Y0- E0r8=7^Z)<= delta 178 zcmWN=ISRs16hKj)(eFHuag5`7g18PV7hv%qkV;grF^z?tR>H5e$O>GDt(A@U!1>%F z3Gb0?RWzZFCN=di``6+9Tc0jZv$0Fpxr*I=WhH?h8>X3ImO18GV38%3Sz(nm*4bc_ cEw Date: Tue, 21 Jul 2020 17:27:51 -0700 Subject: [PATCH 293/589] Applied "> [!NOTE]" --- windows/client-management/windows-10-mobile-and-mdm.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/client-management/windows-10-mobile-and-mdm.md b/windows/client-management/windows-10-mobile-and-mdm.md index 30f7e1220e..e8a8cb2a19 100644 --- a/windows/client-management/windows-10-mobile-and-mdm.md +++ b/windows/client-management/windows-10-mobile-and-mdm.md @@ -191,7 +191,8 @@ Azure AD is a cloud-based directory service that provides identity and access ma Microsoft [Intune](https://www.microsoft.com/server-cloud/products/microsoft-intune/overview.aspx), part of the Enterprise Mobility + Security, is a cloud-based MDM system that manages devices off premises. Intune uses Azure AD for identity management so employees use the same credentials to enroll devices in Intune that they use to sign into Microsoft 365. Intune supports devices that run other operating systems, such as iOS and Android, to provide a complete MDM solution. Multiple MDM systems support Windows 10 and most support personal and corporate device deployment scenarios. Most industry-leading MDM vendors already support integration with Azure AD. You can find the MDM vendors that support Azure AD in [Azure Marketplace](https://azure.microsoft.com/marketplace/). If your organization doesn’t use Azure AD, the user must use an MSA during OOBE before enrolling the device in your MDM using a corporate account. ->**Note:** Although not covered in this guide, you can use Exchange ActiveSync (EAS) to manage mobile devices instead of using a full-featured MDM system. EAS is available in Microsoft Exchange Server 2010 or later and Microsoft 365. +> [!NOTE] +> Although not covered in this guide, you can use Exchange ActiveSync (EAS) to manage mobile devices instead of using a full-featured MDM system. EAS is available in Microsoft Exchange Server 2010 or later and Microsoft 365. In addition, Microsoft recently added MDM capabilities powered by Intune to Microsoft 365, called Basic Mobility and Security for Microsoft 365. Basic Mobility and Security for Microsoft 365 supports mobile devices only, such as those running Windows 10 Mobile, iOS, and Android. Basic Mobility and Security for Microsoft 365 offers a subset of the management capabilities found in Intune, including the ability to remotely wipe a device, block a device from accessing Exchange Server email, and configure device policies (e.g., passcode requirements). For more information, see [Overview of Basic Mobility and Security for Microsoft 365](https://technet.microsoft.com/library/ms.o365.cc.devicepolicy.aspx). **Cloud services** From efb707359c10c2f6b4ec0415ce0a0818b6e8030b Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 21 Jul 2020 19:45:38 -0700 Subject: [PATCH 294/589] Update policy-csps-supported-by-surface-hub.md --- .../mdm/policy-csps-supported-by-surface-hub.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md index 1bad51c8b3..bb3bcc976c 100644 --- a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md +++ b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md @@ -15,7 +15,7 @@ ms.date: 07/22/2020 # Policy CSPs supported by Microsoft Surface Hub --[ApplicationManagement/AllowAppStoreAutoUpdate] (https://docs.microsoft.com/windows/client-management/mdm/policy-csp-applicationmanagement#applicationmanagement-allowappstoreautoupdate) +- [ApplicationManagement/AllowAppStoreAutoUpdate](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-applicationmanagement#applicationmanagement-allowappstoreautoupdate) - [ApplicationManagement/AllowDeveloperUnlock](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-applicationmanagement#applicationmanagement-allowdeveloperunlock) - [Accounts/AllowMicrosoftAccountConnection](policy-csp-accounts#accounts-allowmicrosoftaccountconnection) - [Camera/AllowCamera](policy-csp-camera.md#camera-allowcamera) From 195785081e6be0e3ac582d2fb982947280042b53 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 21 Jul 2020 21:29:12 -0700 Subject: [PATCH 295/589] Update policy-csps-supported-by-surface-hub.md --- .../mdm/policy-csps-supported-by-surface-hub.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md index bb3bcc976c..f265b57c4e 100644 --- a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md +++ b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md @@ -17,7 +17,7 @@ ms.date: 07/22/2020 - [ApplicationManagement/AllowAppStoreAutoUpdate](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-applicationmanagement#applicationmanagement-allowappstoreautoupdate) - [ApplicationManagement/AllowDeveloperUnlock](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-applicationmanagement#applicationmanagement-allowdeveloperunlock) -- [Accounts/AllowMicrosoftAccountConnection](policy-csp-accounts#accounts-allowmicrosoftaccountconnection) +- [Accounts/AllowMicrosoftAccountConnection](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-accounts#accounts-allowmicrosoftaccountconnection) - [Camera/AllowCamera](policy-csp-camera.md#camera-allowcamera) - [Cellular/ShowAppCellularAccessUI](policy-csp-cellular.md#cellular-showappcellularaccessui) - [Cryptography/AllowFipsAlgorithmPolicy](policy-csp-cryptography.md#cryptography-allowfipsalgorithmpolicy) From 2c71dab7fca0e89e47468c733b8c43c9bb42f727 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 21 Jul 2020 21:51:56 -0700 Subject: [PATCH 296/589] Update configuration-service-provider-reference.md --- .../mdm/configuration-service-provider-reference.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index 81d5779e45..9648c1ff7b 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -2744,10 +2744,10 @@ The following list shows the CSPs supported in HoloLens devices: ## CSPs supported in Microsoft Surface Hub -- [Accounts CSP](accounts-csp)9 **Note:** Support in Surface Hub is limited to **Domain\ComputerName**. +- [Accounts CSP](accounts-csp.md)9 **Note:** Support in Surface Hub is limited to **Domain\ComputerName**. - [AccountManagement CSP](accountmanagement-csp.md) - [APPLICATION CSP](application-csp.md) -- [Bitlocker-csp](bitlocker-csp)9 +- [Bitlocker-csp](bitlocker-csp.md)9 - [CertificateStore CSP](certificatestore-csp.md) - [ClientCertificateInstall CSP](clientcertificateinstall-csp.md) - [Defender CSP](defender-csp.md) @@ -2759,7 +2759,7 @@ The following list shows the CSPs supported in HoloLens devices: - [DMAcc CSP](dmacc-csp.md) - [DMClient CSP](dmclient-csp.md) - [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) -- [Firewall-csp](firewall-csp)9 +- [Firewall-csp](firewall-csp.md)9 - [HealthAttestation CSP](healthattestation-csp.md) - [NetworkQoSPolicy CSP](networkqospolicy-csp.md) - [NodeCache CSP](nodecache-csp.md) @@ -2771,9 +2771,9 @@ The following list shows the CSPs supported in HoloLens devices: - [RootCATrustedCertificates CSP](rootcacertificates-csp.md) - [SurfaceHub CSP](surfacehub-csp.md) - [UEFI CSP](uefi-csp.md) -- [Wifi-csp](wifi-csp)9 +- [Wifi-csp](wifi-csp.md)9 - [WindowsAdvancedThreatProtection CSP](windowsadvancedthreatprotection-csp.md) -- [Wirednetwork-csp](wirednetwork-csp)9 +- [Wirednetwork-csp](wirednetwork-csp.md)9 ## CSPs supported in Windows 10 IoT Core From 754027d1713d097647ac5a04f2e311c71ed08d32 Mon Sep 17 00:00:00 2001 From: EfiKliger <45028856+EfiKliger@users.noreply.github.com> Date: Wed, 22 Jul 2020 10:36:11 +0300 Subject: [PATCH 297/589] Update indicator-certificates.md --- .../microsoft-defender-atp/indicator-certificates.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md b/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md index e0233b7ae1..a60e510583 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md +++ b/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md @@ -18,7 +18,7 @@ ms.collection: M365-security-compliance ms.topic: article --- -# Create indicators based on certificates (preview) +# Create indicators based on certificates **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) @@ -69,4 +69,4 @@ It's important to understand the following requirements prior to creating indica - [Create indicators](manage-indicators.md) - [Create indicators for files](indicator-file.md) - [Create indicators for IPs and URLs/domains](indicator-ip-domain.md) -- [Manage indicators](indicator-manage.md) \ No newline at end of file +- [Manage indicators](indicator-manage.md) From 812a6541eb0b0d9891c44d839fc88722b966c94f Mon Sep 17 00:00:00 2001 From: Obi Eze Ajoku <62227226+linque1@users.noreply.github.com> Date: Wed, 22 Jul 2020 04:08:48 -0700 Subject: [PATCH 298/589] Change ownership contact Change ownership contact --- .../windows-endpoints-1903-non-enterprise-editions.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md b/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md index 43a5191c6b..d7c0067220 100644 --- a/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md +++ b/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md @@ -8,11 +8,11 @@ ms.sitesec: library ms.localizationpriority: high audience: ITPro author: mikeedgar -ms.author: sanashar -manager: sanashar +ms.author: obezeajo +manager: robsize ms.collection: M365-security-compliance ms.topic: article -ms.date: 5/9/2019 +ms.date: 7/22/2019 --- # Windows 10, version 1903, connection endpoints for non-Enterprise editions From 1df43f5a2d58bf669c681d640e6f29a9867dbfd9 Mon Sep 17 00:00:00 2001 From: Obi Eze Ajoku <62227226+linque1@users.noreply.github.com> Date: Wed, 22 Jul 2020 04:10:23 -0700 Subject: [PATCH 299/589] Changed ownership contact Changed ownership contact --- windows/privacy/manage-windows-1903-endpoints.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/privacy/manage-windows-1903-endpoints.md b/windows/privacy/manage-windows-1903-endpoints.md index 9d9c6e8fe4..580f8b4425 100644 --- a/windows/privacy/manage-windows-1903-endpoints.md +++ b/windows/privacy/manage-windows-1903-endpoints.md @@ -7,12 +7,12 @@ ms.mktglfcycl: manage ms.sitesec: library ms.localizationpriority: high audience: ITPro -author: danihalfin -ms.author: dansimp -manager: sanashar +author: obezeajo +ms.author: obezeajo +manager: robsize ms.collection: M365-security-compliance ms.topic: article -ms.date: 5/3/2019 +ms.date: 7/22/2020 --- # Manage connection endpoints for Windows 10 Enterprise, version 1903 From 70b19905d84388325d3a784773989a42e928989a Mon Sep 17 00:00:00 2001 From: Obi Eze Ajoku <62227226+linque1@users.noreply.github.com> Date: Wed, 22 Jul 2020 04:11:24 -0700 Subject: [PATCH 300/589] Update windows-endpoints-1903-non-enterprise-editions.md --- .../privacy/windows-endpoints-1903-non-enterprise-editions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md b/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md index d7c0067220..c4bb922fb2 100644 --- a/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md +++ b/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md @@ -12,7 +12,7 @@ ms.author: obezeajo manager: robsize ms.collection: M365-security-compliance ms.topic: article -ms.date: 7/22/2019 +ms.date: 7/22/2020 --- # Windows 10, version 1903, connection endpoints for non-Enterprise editions From 149f331650f62db938be73b93f7db3129529c455 Mon Sep 17 00:00:00 2001 From: Harun Kimani <52551080+Gental-Giant@users.noreply.github.com> Date: Wed, 22 Jul 2020 04:41:43 -0700 Subject: [PATCH 301/589] Updated ownership contact --- windows/privacy/manage-windows-1909-endpoints.md | 6 +++--- .../windows-endpoints-1909-non-enterprise-editions.md | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/privacy/manage-windows-1909-endpoints.md b/windows/privacy/manage-windows-1909-endpoints.md index 647a8b7122..bf56163057 100644 --- a/windows/privacy/manage-windows-1909-endpoints.md +++ b/windows/privacy/manage-windows-1909-endpoints.md @@ -8,11 +8,11 @@ ms.sitesec: library ms.localizationpriority: high audience: ITPro author: gental-giant -ms.author: v-hakima -manager: joshbr +ms.author: obezeajo +manager: robsize ms.collection: M365-security-compliance ms.topic: article -ms.date: 7/15/2020 +ms.date: 7/22/2020 --- # Manage connection endpoints for Windows 10 Enterprise, version 1909 diff --git a/windows/privacy/windows-endpoints-1909-non-enterprise-editions.md b/windows/privacy/windows-endpoints-1909-non-enterprise-editions.md index bbd3351acc..5cd6e19244 100644 --- a/windows/privacy/windows-endpoints-1909-non-enterprise-editions.md +++ b/windows/privacy/windows-endpoints-1909-non-enterprise-editions.md @@ -8,11 +8,11 @@ ms.sitesec: library ms.localizationpriority: high audience: ITPro author: gental-giant -ms.author: v-hakima -manager: joshbr +ms.author: obezeajo +manager: robsize ms.collection: M365-security-compliance ms.topic: article -ms.date: 7/15/2020 +ms.date: 7/22/2020 --- # Windows 10, version 1909, connection endpoints for non-Enterprise editions From 39b11c25f70498bfecd2e0af71ffc2d25faa2c93 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Wed, 22 Jul 2020 17:06:10 +0500 Subject: [PATCH 302/589] Licenses requirements update I have updated license requirements for Microsoft Defender Advanced Threat Protection. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/7094 --- .../microsoft-defender-atp/minimum-requirements.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md index a5cadb6150..a6aa522490 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md +++ b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md @@ -42,6 +42,7 @@ Microsoft Defender Advanced Threat Protection requires one of the following Micr > [!NOTE] > Eligible Licensed Users may use Microsoft Defender Advanced Threat Protection on up to five concurrent devices. +> Microsoft Defender Advanced Threat Protection is also available for purchase from a Cloud Solution Provider (CSP). When purchased via CSP it does not require Microsoft Volume Licensing offers listed. Microsoft Defender Advanced Threat Protection is also available for purchase from a Cloud Solution Provider (CSP). From 645c0bdc510a8919f5b5a156b7422e354d18efd1 Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Wed, 22 Jul 2020 08:06:02 -0700 Subject: [PATCH 303/589] pencil edits --- .../microsoft-defender-atp/attack-surface-reduction.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 67a5b7958e..dde4d8932b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -113,7 +113,7 @@ The following sections describe each of the 15 attack surface reduction rules. T This rule blocks the following file types from launching from email opened within the Microsoft Outlook application, or Outlook.com and other popular webmail providers: - Executable files (such as .exe, .dll, or .scr) -- Script files (such as a PowerShell .ps, VisualBasic .vbs, or JavaScript .js file) +- Script files (such as a PowerShell .ps, Visual Basic .vbs, or JavaScript .js file) This rule was introduced in: - [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) @@ -327,7 +327,7 @@ GUID: `d1e49aac-8f56-4280-b9ba-993a6d77406c` With this rule, admins can prevent unsigned or untrusted executable files from running from USB removable drives, including SD cards. Blocked file types include: * Executable files (such as .exe, .dll, or .scr) -* Script files (such as a PowerShell .ps, VisualBasic .vbs, or JavaScript .js file) +* Script files (such as a PowerShell .ps, Visual Basic .vbs, or JavaScript .js file) This rule was introduced in: - [Windows 10, version 1803](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1803) From 7ac6604793a392c9c96f49c5252b1e75d0f8c786 Mon Sep 17 00:00:00 2001 From: Manika Dhiman Date: Wed, 22 Jul 2020 08:19:34 -0700 Subject: [PATCH 304/589] Update configure-server-exclusions-microsoft-defender-antivirus.md Removed an extra bullet --- .../configure-server-exclusions-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md index 3365f5ccee..756e4191f5 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md @@ -403,6 +403,6 @@ This section lists the folder exclusions that are delivered automatically when y - [Configure and validate exclusions for Microsoft Defender Antivirus scans](configure-exclusions-microsoft-defender-antivirus.md) - [Configure and validate exclusions based on file name, extension, and folder location](configure-extension-file-exclusions-microsoft-defender-antivirus.md) - [Configure and validate exclusions for files opened by processes](configure-process-opened-file-exclusions-microsoft-defender-antivirus.md) -- - [Common mistakes to avoid when defining exclusions](common-exclusion-mistakes-microsoft-defender-antivirus.md) +- [Common mistakes to avoid when defining exclusions](common-exclusion-mistakes-microsoft-defender-antivirus.md) - [Customize, initiate, and review the results of Microsoft Defender Antivirus scans and remediation](customize-run-review-remediate-scans-microsoft-defender-antivirus.md) - [Microsoft Defender Antivirus in Windows 10](microsoft-defender-antivirus-in-windows-10.md) From 95b3c018ce247f3780a727982db6b47b6ae33bc3 Mon Sep 17 00:00:00 2001 From: Kurt Sarens <56369685+kurtsarens@users.noreply.github.com> Date: Wed, 22 Jul 2020 09:26:53 -0700 Subject: [PATCH 305/589] Update scheduled-catch-up-scans-microsoft-defender-antivirus.md added the below note under "Start scheduled scans only when the endpoint is not in use": These scans will not honor the CPU throttling configuration and take full advantage of the resources available to complete the scan as fast as possible. --- .../scheduled-catch-up-scans-microsoft-defender-antivirus.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/scheduled-catch-up-scans-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/scheduled-catch-up-scans-microsoft-defender-antivirus.md index a155de8626..8c3130a2e5 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/scheduled-catch-up-scans-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/scheduled-catch-up-scans-microsoft-defender-antivirus.md @@ -109,10 +109,13 @@ See the following for more information and allowed parameters: -## Start scheduled scans only when the endpoint is not in use +## tart scheduled scans only when the endpoint is not in use You can set the scheduled scan to only occur when the endpoint is turned on but not in use with Group Policy, PowerShell, or WMI. +> [!NOTE] +> These scans will not honor the CPU throttling configuration and take full advantage of the resources available to complete the scan as fast as possible. + **Use Group Policy to schedule scans** Location | Setting | Description | Default setting (if not configured) From 8a5af9df5bd4acea59ba69c0229520dd0b08d508 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Wed, 22 Jul 2020 10:08:34 -0700 Subject: [PATCH 306/589] Update configure-windows-diagnostic-data-in-your-organization.md --- .../configure-windows-diagnostic-data-in-your-organization.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md index 130d0e89ac..332e9f1796 100644 --- a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md +++ b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md @@ -13,7 +13,7 @@ ms.author: dansimp manager: dansimp ms.collection: M365-security-compliance ms.topic: article -ms.date: 04/29/2019 +ms.date: 07/21/2020 --- # Configure Windows diagnostic data in your organization From 55282e131c0eb097ddb9519bbc2b5e4c8bd2c2ef Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Wed, 22 Jul 2020 10:09:07 -0700 Subject: [PATCH 307/589] Update changes-to-windows-diagnostic-data-collection.md --- windows/privacy/changes-to-windows-diagnostic-data-collection.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/privacy/changes-to-windows-diagnostic-data-collection.md b/windows/privacy/changes-to-windows-diagnostic-data-collection.md index 8d79aa0bbf..19cf953b8c 100644 --- a/windows/privacy/changes-to-windows-diagnostic-data-collection.md +++ b/windows/privacy/changes-to-windows-diagnostic-data-collection.md @@ -58,7 +58,6 @@ Additionally, you will see the following policy changes in an upcoming release o | Group Policy | Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Allow Telemetry**
  • **0 - Security**
  • **1 - Basic**
  • **2 - Enhanced**
  • **3 - Full**
| Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Allow Diagnostic Data**
  • **Diagnostic data off (not recommended)**
  • **Send required diagnostic data**
  • **Send optional diagnostic data**
| | Group Policy |Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Configure telemetry opt-in settings user interface**| Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Configure diagnostic data opt-in settings user interface** | | Group Policy |Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Configure telemetry opt-in change notifications**| Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Configure diagnostic data opt-in change notifications** | -| MDM | System/AllowTelemetry
  • **0**
  • **1**
  • **2**
  • **3**
| A final set of changes includes two new policies that can help you fine-tune diagnostic data collection within your organization. These policies let you limit the amount of optional diagnostic data that’s sent back to Microsoft. From f8ea5e1eb40e6f050ba70873dbc3167e2636877b Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Wed, 22 Jul 2020 10:10:25 -0700 Subject: [PATCH 308/589] Update changes-to-windows-diagnostic-data-collection.md --- windows/privacy/changes-to-windows-diagnostic-data-collection.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/privacy/changes-to-windows-diagnostic-data-collection.md b/windows/privacy/changes-to-windows-diagnostic-data-collection.md index 19cf953b8c..61f9a5cf61 100644 --- a/windows/privacy/changes-to-windows-diagnostic-data-collection.md +++ b/windows/privacy/changes-to-windows-diagnostic-data-collection.md @@ -13,6 +13,7 @@ author: DaniHalfin manager: dansimp ms.collection: M365-security-compliance ms.topic: article +ms.date: 07/21/2020 --- # Changes to Windows diagnostic data collection From f583e149c5da31bfdf3cce0372bc834d0de772c9 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Wed, 22 Jul 2020 10:10:47 -0700 Subject: [PATCH 309/589] Update windows-10-and-privacy-compliance.md --- windows/privacy/windows-10-and-privacy-compliance.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/windows-10-and-privacy-compliance.md b/windows/privacy/windows-10-and-privacy-compliance.md index e285fe5768..08d82afd30 100644 --- a/windows/privacy/windows-10-and-privacy-compliance.md +++ b/windows/privacy/windows-10-and-privacy-compliance.md @@ -13,7 +13,7 @@ ms.author: brianlic manager: dansimp ms.collection: M365-security-compliance ms.topic: article -ms.date: 05/21/2019 +ms.date: 07/21/2020 --- # Windows 10 & Privacy Compliance:
A Guide for IT and Compliance Professionals From 0e7e96ce2e860532f981594308dc497684146aca Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Wed, 22 Jul 2020 22:25:21 +0500 Subject: [PATCH 310/589] Update windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../microsoft-defender-atp/minimum-requirements.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md index a6aa522490..fa3813e24a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md +++ b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md @@ -42,7 +42,7 @@ Microsoft Defender Advanced Threat Protection requires one of the following Micr > [!NOTE] > Eligible Licensed Users may use Microsoft Defender Advanced Threat Protection on up to five concurrent devices. -> Microsoft Defender Advanced Threat Protection is also available for purchase from a Cloud Solution Provider (CSP). When purchased via CSP it does not require Microsoft Volume Licensing offers listed. +> Microsoft Defender Advanced Threat Protection is also available for purchase from a Cloud Solution Provider (CSP). When purchased via a CSP, it does not require Microsoft Volume Licensing offers listed. Microsoft Defender Advanced Threat Protection is also available for purchase from a Cloud Solution Provider (CSP). From 22543b927dffbe1ff9fbaf272890451587c67c2e Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Wed, 22 Jul 2020 22:25:36 +0500 Subject: [PATCH 311/589] Update windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../microsoft-defender-atp/minimum-requirements.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md index fa3813e24a..8e0bff785b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md +++ b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md @@ -45,7 +45,6 @@ Microsoft Defender Advanced Threat Protection requires one of the following Micr > Microsoft Defender Advanced Threat Protection is also available for purchase from a Cloud Solution Provider (CSP). When purchased via a CSP, it does not require Microsoft Volume Licensing offers listed. -Microsoft Defender Advanced Threat Protection is also available for purchase from a Cloud Solution Provider (CSP). Microsoft Defender Advanced Threat Protection, on Windows Server, requires one of the following licensing options: From d85cf19ae2f4cfbd1fbea823e32de1c5d7ceb643 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 22 Jul 2020 10:43:09 -0700 Subject: [PATCH 312/589] Update scheduled-catch-up-scans-microsoft-defender-antivirus.md --- ...h-up-scans-microsoft-defender-antivirus.md | 35 ++++++++----------- 1 file changed, 15 insertions(+), 20 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/scheduled-catch-up-scans-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/scheduled-catch-up-scans-microsoft-defender-antivirus.md index 8c3130a2e5..ce7ad86555 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/scheduled-catch-up-scans-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/scheduled-catch-up-scans-microsoft-defender-antivirus.md @@ -12,7 +12,7 @@ ms.localizationpriority: medium author: denisebmsft ms.author: deniseb ms.custom: nextgen -ms.date: 12/10/2018 +ms.date: 07/22/2020 ms.reviewer: manager: dansimp --- @@ -71,7 +71,7 @@ Scheduled scans will run at the day and time you specify. You can use Group Poli >[!NOTE] >If a computer is unplugged and running on battery during a scheduled full scan, the scheduled scan will stop with event 1002, which states that the scan stopped before completion. Microsoft Defender Antivirus will run a full scan at the next scheduled time. -**Use Group Policy to schedule scans:** +### Use Group Policy to schedule scans Location | Setting | Description | Default setting (if not configured) ---|---|---|--- @@ -80,7 +80,7 @@ Scan | Specify the day of the week to run a scheduled scan | Specify the day (or Scan | Specify the time of day to run a scheduled scan | Specify the number of minutes after midnight (for example, enter **60** for 1 am). | 2 am Root | Randomize scheduled task times |In Microsoft Defender Antivirus: Randomize the start time of the scan to any interval from 0 to 4 hours.
In FEP/SCEP: randomize to any interval plus or minus 30 minutes. This can be useful in VM or VDI deployments. | Enabled -**Use PowerShell cmdlets to schedule scans:** +### Use PowerShell cmdlets to schedule scans Use the following cmdlets: @@ -94,7 +94,7 @@ Set-MpPreference -RandomizeScheduleTaskTimes See [Use PowerShell cmdlets to configure and run Microsoft Defender Antivirus](use-powershell-cmdlets-microsoft-defender-antivirus.md) and [Defender cmdlets](https://technet.microsoft.com/itpro/powershell/windows/defender/index) for more information on how to use PowerShell with Microsoft Defender Antivirus. -**Use Windows Management Instruction (WMI) to schedule scans:** +### Use Windows Management Instruction (WMI) to schedule scans Use the [**Set** method of the **MSFT_MpPreference**](https://msdn.microsoft.com/library/dn455323(v=vs.85).aspx) class for the following properties: @@ -109,20 +109,20 @@ See the following for more information and allowed parameters: -## tart scheduled scans only when the endpoint is not in use +## Start scheduled scans only when the endpoint is not in use You can set the scheduled scan to only occur when the endpoint is turned on but not in use with Group Policy, PowerShell, or WMI. > [!NOTE] > These scans will not honor the CPU throttling configuration and take full advantage of the resources available to complete the scan as fast as possible. -**Use Group Policy to schedule scans** +### Use Group Policy to schedule scans Location | Setting | Description | Default setting (if not configured) ---|---|---|--- Scan | Start the scheduled scan only when computer is on but not in use | Scheduled scans will not run, unless the computer is on but not in use | Enabled -**Use PowerShell cmdlets:** +### Use PowerShell cmdlets Use the following cmdlets: @@ -132,7 +132,7 @@ Set-MpPreference -ScanOnlyIfIdleEnabled See [Use PowerShell cmdlets to configure and run Microsoft Defender Antivirus](use-powershell-cmdlets-microsoft-defender-antivirus.md) and [Defender cmdlets](https://technet.microsoft.com/itpro/powershell/windows/defender/index) for more information on how to use PowerShell with Microsoft Defender Antivirus. -**Use Windows Management Instruction (WMI):** +### Use Windows Management Instruction (WMI) Use the [**Set** method of the **MSFT_MpPreference**](https://msdn.microsoft.com/library/dn455323(v=vs.85).aspx) class for the following properties: @@ -149,15 +149,14 @@ See the following for more information and allowed parameters: Some threats may require a full scan to complete their removal and remediation. You can schedule when these scans should occur with Group Policy, PowerShell, or WMI. - -**Use Group Policy to schedule remediation-required scans** +### Use Group Policy to schedule remediation-required scans Location | Setting | Description | Default setting (if not configured) ---|---|---|--- Remediation | Specify the day of the week to run a scheduled full scan to complete remediation | Specify the day (or never) to run a scan. | Never Remediation | Specify the time of day to run a scheduled full scan to complete remediation | Specify the number of minutes after midnight (for example, enter **60** for 1 am) | 2 am -**Use PowerShell cmdlets:** +### Use PowerShell cmdlets Use the following cmdlets: @@ -168,7 +167,7 @@ Set-MpPreference -RemediationScheduleTime See [Use PowerShell cmdlets to configure and run Microsoft Defender Antivirus](use-powershell-cmdlets-microsoft-defender-antivirus.md) and [Defender cmdlets](https://technet.microsoft.com/itpro/powershell/windows/defender/index) for more information on how to use PowerShell with Microsoft Defender Antivirus. -**Use Windows Management Instruction (WMI):** +### Use Windows Management Instruction (WMI) Use the [**Set** method of the **MSFT_MpPreference**](https://msdn.microsoft.com/library/dn455323(v=vs.85).aspx) class for the following properties: @@ -188,14 +187,14 @@ See the following for more information and allowed parameters: You can enable a daily quick scan that can be run in addition to your other scheduled scans with Group Policy, PowerShell, or WMI. -**Use Group Policy to schedule daily scans:** +### Use Group Policy to schedule daily scans Location | Setting | Description | Default setting (if not configured) ---|---|---|--- Scan | Specify the interval to run quick scans per day | Specify how many hours should elapse before the next quick scan. For example, to run every two hours, enter **2**, for once a day, enter **24**. Enter **0** to never run a daily quick scan. | Never Scan | Specify the time for a daily quick scan | Specify the number of minutes after midnight (for example, enter **60** for 1 am) | 2 am -**Use PowerShell cmdlets to schedule daily scans:** +### Use PowerShell cmdlets to schedule daily scans Use the following cmdlets: @@ -205,7 +204,7 @@ Set-MpPreference -ScanScheduleQuickTime See [Use PowerShell cmdlets to configure and run Microsoft Defender Antivirus](use-powershell-cmdlets-microsoft-defender-antivirus.md) and [Defender cmdlets](https://technet.microsoft.com/itpro/powershell/windows/defender/index) for more information on how to use PowerShell with Microsoft Defender Antivirus. -**Use Windows Management Instruction (WMI) to schedule daily scans:** +### Use Windows Management Instruction (WMI) to schedule daily scans Use the [**Set** method of the **MSFT_MpPreference**](https://msdn.microsoft.com/library/dn455323(v=vs.85).aspx) class for the following properties: @@ -222,16 +221,12 @@ See the following for more information and allowed parameters: You can force a scan to occur after every [protection update](manage-protection-updates-microsoft-defender-antivirus.md) with Group Policy. -**Use Group Policy to schedule scans after protection updates** +### Use Group Policy to schedule scans after protection updates Location | Setting | Description | Default setting (if not configured) ---|---|---|--- Signature updates | Turn on scan after Security intelligence update | A scan will occur immediately after a new protection update is downloaded | Enabled - - - - ## Related topics From e6841bfa6d88f3b24aa2c28d84dc907134566b79 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 22 Jul 2020 10:54:41 -0700 Subject: [PATCH 313/589] access --- .../microsoft-defender-atp/grant-mssp-access.md | 5 ++++- .../threat-protection/microsoft-defender-atp/preview.md | 3 --- .../whats-new-in-microsoft-defender-atp.md | 3 +++ 3 files changed, 7 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/grant-mssp-access.md b/windows/security/threat-protection/microsoft-defender-atp/grant-mssp-access.md index 18c087a539..fc801373b0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/grant-mssp-access.md +++ b/windows/security/threat-protection/microsoft-defender-atp/grant-mssp-access.md @@ -17,7 +17,7 @@ ms.collection: M365-security-compliance ms.topic: article --- -# Grant managed security service provider (MSSP) access +# Grant managed security service provider (MSSP) access (preview) **Applies to:** @@ -25,6 +25,9 @@ ms.topic: article >Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-mssp-support-abovefoldlink) +>[!IMPORTANT] +>Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + To implement a multi-tenant delegated access solution, take the following steps: 1. Enable [role-based access control](rbac.md) in Microsoft Defender ATP and connect with Active Directory (AD) groups. diff --git a/windows/security/threat-protection/microsoft-defender-atp/preview.md b/windows/security/threat-protection/microsoft-defender-atp/preview.md index a36d89c45a..2586120da8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/preview.md +++ b/windows/security/threat-protection/microsoft-defender-atp/preview.md @@ -49,9 +49,6 @@ Turn on the preview experience setting to be among the first to try upcoming fea The following features are included in the preview release: - [Microsoft Defender ATP for Android](microsoft-defender-atp-android.md)
Microsoft Defender ATP now adds support for Android. Learn how to install, configure, and use Microsoft Defender ATP for Android. -- [Create indicators for certificates](manage-indicators.md)
Create indicators to allow or block certificates. - - - [Threat & Vulnerability supported operating systems and platforms](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/tvm-supported-os)
Ensure that you meet the operating system or platform requisites for Threat & Vulnerability Management so the activities in your devices are properly accounted for. Threat & Vulnerability Management supports Windows 7, Windows 10 1607-1703, Windows 10 1709+, Windows Server 2008R2, Windows Server 2012R2, Windows Server 2016, Windows Server 2019.

Secure Configuration Assessment (SCA) supports Windows 10 1709+, Windows Server 2008R2, Windows Server 2012R2, Windows Server 2016, and Windows Server 2019. - [Threat & Vulnerability Management granular exploit details](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/tvm-weaknesses)
You can now see a comprehensive set of details on the vulnerabilities found in your device to give you informed decision on your next steps. The threat insights icon now shows more granular details, such as if the exploit is a part of an exploit kit, connected to specific advanced persistent campaigns or activity groups for which, Threat Analytics report links are provided that you can read, has associated zero-day exploitation news, disclosures, or related security advisories. diff --git a/windows/security/threat-protection/microsoft-defender-atp/whats-new-in-microsoft-defender-atp.md b/windows/security/threat-protection/microsoft-defender-atp/whats-new-in-microsoft-defender-atp.md index 7c19cb82ea..906f92f4f8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/whats-new-in-microsoft-defender-atp.md +++ b/windows/security/threat-protection/microsoft-defender-atp/whats-new-in-microsoft-defender-atp.md @@ -36,6 +36,9 @@ For more information preview features, see [Preview features](https://docs.micro > ``` +## July 2020 +- [Create indicators for certificates](manage-indicators.md)
Create indicators to allow or block certificates. + ## June 2020 - [Microsoft Defender ATP for Linux](microsoft-defender-atp-linux.md)
Microsoft Defender ATP now adds support for Linux. Learn how to install, configure, update, and use Microsoft Defender ATP for Linux. From d0fac2280eab8a69909c8db30b03c6adfdfbba4c Mon Sep 17 00:00:00 2001 From: amirsc3 <42802974+amirsc3@users.noreply.github.com> Date: Wed, 22 Jul 2020 21:27:07 +0300 Subject: [PATCH 314/589] Update offboard-machines.md --- .../microsoft-defender-atp/offboard-machines.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md b/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md index 61c0948f1c..682b701bc5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md @@ -43,5 +43,5 @@ Follow the corresponding instructions depending on your preferred deployment met - [Offboard non-Windows devices](configure-endpoints-non-windows.md#offboard-non-windows-devices) >[!NOTE] -> Offboarded devices will remain in the portal until [retention period](data-storage-privacy.md#how-long-will-microsoft-store-my-data-what-is-microsofts-data-retention-policy) for the device's data will expire. The status will be switched to ['Inactive'](fix-unhealthy-sensors.md#inactive-devices) 7 days after offboarding. +> Offboarded devices will remain in the portal until [retention period](data-storage-privacy.md#how-long-will-microsoft-store-my-data-what-is-microsofts-data-retention-policy) for the device's data expires. The status will be switched to ['Inactive'](fix-unhealthy-sensors.md#inactive-devices) 7 days after offboarding. > In addition, [Devices that are not active in the last 30 days are not factored in on the data that reflects your organization's threat and vulnerability management exposure score and Microsoft Secure Score for Devices.](tvm-dashboard-insights.md) From b0aa842360f65a47516ce351c1f4ddef015e4816 Mon Sep 17 00:00:00 2001 From: amirsc3 <42802974+amirsc3@users.noreply.github.com> Date: Wed, 22 Jul 2020 21:37:07 +0300 Subject: [PATCH 315/589] Update offboard-machines.md Added a sentence about filtering --- .../microsoft-defender-atp/offboard-machines.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md b/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md index 682b701bc5..8303ff7803 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md @@ -43,5 +43,6 @@ Follow the corresponding instructions depending on your preferred deployment met - [Offboard non-Windows devices](configure-endpoints-non-windows.md#offboard-non-windows-devices) >[!NOTE] -> Offboarded devices will remain in the portal until [retention period](data-storage-privacy.md#how-long-will-microsoft-store-my-data-what-is-microsofts-data-retention-policy) for the device's data expires. The status will be switched to ['Inactive'](fix-unhealthy-sensors.md#inactive-devices) 7 days after offboarding. -> In addition, [Devices that are not active in the last 30 days are not factored in on the data that reflects your organization's threat and vulnerability management exposure score and Microsoft Secure Score for Devices.](tvm-dashboard-insights.md) +> Offboarded devices will remain in the portal until [retention period](data-storage-privacy.md#how-long-will-microsoft-store-my-data-what-is-microsofts-data-retention-policy) for the device's data expires. The status will be switched to ['Inactive'](fix-unhealthy-sensors.md#inactive-devices) 7 days after offboarding.
+> In addition, [Devices that are not active in the last 30 days are not factored in on the data that reflects your organization's threat and vulnerability management exposure score and Microsoft Secure Score for Devices.](tvm-dashboard-insights.md)
+> To view only active devices, you can filter by [health state](machines-view-overview.md#health-state) or by [device tags](machine-tags.md) and [groups](machine-groups.md) etc. From 43c08d7bea66ebbfe62affbfb5bd77d39e2e26bd Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Wed, 22 Jul 2020 12:18:01 -0700 Subject: [PATCH 316/589] Removing important note > engineering feedback --- ...nfigure-network-connections-microsoft-defender-antivirus.md | 3 --- 1 file changed, 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md index 9c1e04a6bb..3f3d1f0b07 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md @@ -114,9 +114,6 @@ You will also see a detection under **Quarantined threats** in the **Scan histor The Windows event log will also show [Windows Defender client event ID 2050](troubleshoot-microsoft-defender-antivirus.md). ->[!IMPORTANT] ->You will not be able to use a proxy auto-config (.pac) file to test network connections to these URLs. You will need to verify your proxy servers and any network filtering tools manually to ensure connectivity. - ## Related articles - [Microsoft Defender Antivirus in Windows 10](microsoft-defender-antivirus-in-windows-10.md) From cb4da3c3a6890a64c288aa90ad22c2df6a8fd0d7 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 22 Jul 2020 12:56:43 -0700 Subject: [PATCH 317/589] Minor reorg --- ...n-mistakes-microsoft-defender-antivirus.md | 5 +++-- ...exclusions-microsoft-defender-antivirus.md | 19 +++++++++++-------- 2 files changed, 14 insertions(+), 10 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md index bbdf9fc0e5..7be3761332 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md @@ -18,9 +18,10 @@ manager: dansimp # Common mistakes to avoid when defining exclusions You can define an exclusion list for items that you don't want Microsoft Defender Antivirus to scan. Such excluded items could contain threats that make your device vulnerable. -See [Configure and validate exclusions for Microsoft Defender Antivirus scans](configure-exclusions-microsoft-defender-antivirus.md) for more information. -Also, see [Recommendations for defining exclusions](configure-exclusions-microsoft-defender-antivirus.md#recommendations-for-defining-exclusions) before defining your exclusion lists. +This topic describes some common mistake that you should avoid when defining exclusions. + +Before defining your exclusion lists, see [Recommendations for defining exclusions](configure-exclusions-microsoft-defender-antivirus.md#recommendations-for-defining-exclusions). ## Excluding certain trusted items There are certain files, file types, folders, or processes that you should not exclude from scanning even though you trust them to be not malicious. Refer to the following section for items that you should not exclude from scanning. diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus.md index d0b737f37f..0e81659418 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus.md @@ -25,22 +25,25 @@ manager: dansimp You can exclude certain files, folders, processes, and process-opened files from Microsoft Defender Antivirus scans. Such exclusions apply to [scheduled scans](scheduled-catch-up-scans-microsoft-defender-antivirus.md), [on-demand scans](run-scan-microsoft-defender-antivirus.md), and [always-on real-time protection and monitoring](configure-real-time-protection-microsoft-defender-antivirus.md). Exclusions for process-opened files only apply to real-time protection. -## Recommendations for defining exclusions +## Configure and validate exclusions + +To configure and validate exclusions, see the following: + +- [Configure and validate exclusions based on file name, extension, and folder location](configure-extension-file-exclusions-microsoft-defender-antivirus.md). This enables you to exclude files from Microsoft Defender Antivirus scans based on their file extension, file name, or location. + +- [Configure and validate exclusions for files opened by processes](configure-process-opened-file-exclusions-microsoft-defender-antivirus.md). This enables you to exclude files from scans that have been opened by a specific process. + +## Recommendations for defining exclusions + Defining exclusions lowers the protection offered by Microsoft Defender Antivirus. You should always evaluate the risks that are associated with implementing exclusions, and you should only exclude files that you are confident are not malicious. The following is a list of recommendations that you should keep in mind when defining exclusions: + - Exclusions are technically a protection gap—always consider additional mitigations when defining exclusions. Additional mitigations could be as simple as making sure the excluded location has the appropriate access-control lists (ACLs), audit policy, is processed by an up-to-date software, etc. - Review the exclusions periodically. Re-check and re-enforce the mitigations as part of the review process. - Ideally, avoid defining proactive exclusions. For instance, don't exclude something just because you think it might be a problem in the future. Use exclusions only for specific issues—mostly around performance, or sometimes around application compatibility that exclusions could mitigate. - Audit the exclusion list changes. The security admin should preserve enough context around why a certain exclusion was added. You should be able to provide answer with specific reasoning as to why a certain path was excluded. -## Configure and validate exclusions - -To configure and validate exclusions, see the following: -- [Configure and validate exclusions based on file name, extension, and folder location](configure-extension-file-exclusions-microsoft-defender-antivirus.md). This enables you to exclude files from Microsoft Defender Antivirus scans based on their file extension, file name, or location. - -- [Configure and validate exclusions for files opened by processes](configure-process-opened-file-exclusions-microsoft-defender-antivirus.md). This enables you to exclude files from scans that have been opened by a specific process. - ## Related articles - [Microsoft Defender Antivirus exclusions on Windows Server 2016](configure-server-exclusions-microsoft-defender-antivirus.md) From faf4e812eba117f2c5a998638ba584a188619f6e Mon Sep 17 00:00:00 2001 From: Kelly Baker Date: Wed, 22 Jul 2020 13:50:36 -0700 Subject: [PATCH 318/589] Update how-it-pros-can-use-configuration-service-providers.md --- ...how-it-pros-can-use-configuration-service-providers.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md b/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md index cf2050b0ed..f43c02b946 100644 --- a/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md +++ b/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md @@ -1,6 +1,6 @@ --- title: Configuration service providers for IT pros (Windows 10) -description: Configuration service providers (CSPs) expose device configuration settings in Windows 10. +description: Describes how IT pros and system administrators can use configuration service providers (CSPs) to configure devices. ms.assetid: 25C1FDCA-0E10-42A1-A368-984FFDB2B7B6 ms.reviewer: manager: dansimp @@ -72,7 +72,7 @@ Many settings in Windows Configuration Designer will display documentation for t ### CSPs in MDM -Most, if not all, CSPs are surfaced through your MDM service. If you see a CSP that provides a capability that you want to make use of and cannot find that capability in your MDM service, contact your MDM provider for assistance. It might simply be named differently than you expected. You can see the CSPs supported by MDM in the [Configuration service provider reference](https://go.microsoft.com/fwlink/p/?LinkId=717390). +Most, if not all, CSPs are surfaced through your MDM service. If you see a CSP that provides a capability that you want to make use of and cannot find that capability in your MDM service, contact your MDM provider for assistance. It might be named differently than you expected. You can see the CSPs supported by MDM in the [Configuration service provider reference](https://go.microsoft.com/fwlink/p/?LinkId=717390). When a CSP is available but is not explicitly included in your MDM solution, you may be able to make use of the CSP by using OMA-URI settings. In Intune, for example, you can use [custom policy settings](https://go.microsoft.com/fwlink/p/?LinkID=616316) to deploy settings. Intune documents [a partial list of settings](https://go.microsoft.com/fwlink/p/?LinkID=616317) that you can enter in the **OMA-URI Settings** section of a custom policy, if your MDM service provides that extension. You'll notice that the list doesn't explain the meanings of the allowed and default values, so use the [CSP reference documentation](https://go.microsoft.com/fwlink/p/?LinkId=717390) to locate that information. @@ -114,13 +114,13 @@ The documentation for most CSPs will also include an XML example. ## CSP examples -CSPs provide access to a number of settings useful to enterprises. This section introduces the CSPs that an enterprise might find particularly useful. +CSPs provide access to a number of settings useful to enterprises. This section introduces the CSPs that an enterprise might find useful. - [EnterpriseAssignedAccess CSP](https://go.microsoft.com/fwlink/p/?LinkID=618601) The EnterpriseAssignedAccess CSP lets IT administrators configure settings on a Windows 10 Mobile device. An enterprise can make use of this CSP to create single-use or limited-use mobile devices, such as a handheld device that only runs a price-checking app. - In addition to lockscreen wallpaper, theme, time zone, and language, the EnterpriseAssignedAccess CSP includes AssignedAccessXml that can be used to lock down the device through the following settings: + In addition to lock screen wallpaper, theme, time zone, and language, the EnterpriseAssignedAccess CSP includes AssignedAccessXml that can be used to lock down the device through the following settings: - Enabling or disabling the Action Center. - Configuring the number of tile columns in the Start layout. From 962f1cb5f08648132ab9af76aa45f00ab3bd1919 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 22 Jul 2020 14:01:23 -0700 Subject: [PATCH 319/589] intro updates --- .../manage-atp-post-migration-configuration-manager.md | 2 +- .../manage-atp-post-migration-intune.md | 5 ++++- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index 5890d7e96a..8f15c5d09a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -19,7 +19,7 @@ ms.topic: article # Manage Microsoft Defender Advanced Threat Protection with Configuration Manager -You can use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage your organization's threat protection features for devices (also referred to as endpoints) within your organization. Configuration Manager is part of Microsoft Endpoint Manager, along with Intune, Desktop Analytics, and other features and capabilities. [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). +You can use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage your organization's threat protection features for devices (also referred to as endpoints). Configuration Manager is part of Microsoft Endpoint Manager, along with Intune, Desktop Analytics, and other features & capabilities. [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). ## Find your Microsoft Defender ATP settings in Configuration Manager diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 736518b285..1db92d85dc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -19,7 +19,10 @@ ms.topic: article # Manage Microsoft Defender Advanced Threat Protection with Intune -We recommend using Microsoft Intune to manage threat protection features for your organization's devices (also referred to as endpoints). Intune is a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). +We recommend using Microsoft Intune to manage your organization's threat protection features for devices (also referred to as endpoints). Intune is part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), along with Configuration Manager, Desktop Analytics, and other features & capabilities. + +You can use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage your organization's threat protection features for devices (also referred to as endpoints) within your organization. Configuration Manager is part of Microsoft Endpoint Manager, along with Intune, Desktop Analytics, and other features and capabilities. [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). + ## Find your Microsoft Defender ATP settings in Intune From 45374dea1f9380f20b2f7ceb9973f0d0a5d96efa Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Wed, 22 Jul 2020 15:09:08 -0700 Subject: [PATCH 320/589] lowercase --- windows/security/threat-protection/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 8285168070..26ef59254e 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -570,7 +570,7 @@ ###### [Vulnerability]() ####### [Vulnerability methods and properties](microsoft-defender-atp/vulnerability.md) ####### [List vulnerabilities](microsoft-defender-atp/get-all-vulnerabilities.md) -####### [List vulnerabilities by Machine and Software](microsoft-defender-atp/get-all-vulnerabilities-by-machines.md) +####### [List vulnerabilities by machine and software](microsoft-defender-atp/get-all-vulnerabilities-by-machines.md) ####### [Get vulnerability by Id](microsoft-defender-atp/get-vulnerability-by-id.md) ####### [List machines by vulnerability](microsoft-defender-atp/get-machines-by-vulnerability.md) From 1567c14ac70e4b88645052838449dcb6f752f410 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Wed, 22 Jul 2020 15:37:23 -0700 Subject: [PATCH 321/589] added enterprise --- ...ervice-for-windows-public-preview-terms.md | 4 +- .../deploy-data-processor-service-windows.md | 42 +++++++++---------- 2 files changed, 23 insertions(+), 23 deletions(-) diff --git a/windows/privacy/data-processor-service-for-windows-public-preview-terms.md b/windows/privacy/data-processor-service-for-windows-public-preview-terms.md index 190bf05309..3d8d1c0ab9 100644 --- a/windows/privacy/data-processor-service-for-windows-public-preview-terms.md +++ b/windows/privacy/data-processor-service-for-windows-public-preview-terms.md @@ -1,5 +1,5 @@ --- -title: Data processor service for Windows public preview terms +title: Data processor service for Windows Enterprise public preview terms description: Use this article to understand Windows public preview terms of service. keywords: privacy, GDPR ms.localizationpriority: high @@ -17,7 +17,7 @@ ms.collection: - M365-security-compliance --- -# Data processor service for Windows public preview terms +# Data processor service for Windows Enterprise public preview terms **These terms (“Terms”) must be read and accepted by a tenant admin with appropriate access rights and authority. By participating in this public preview, you: (a) agree to the following Terms, and (b) represent and warrant that you have such rights and authority.** diff --git a/windows/privacy/deploy-data-processor-service-windows.md b/windows/privacy/deploy-data-processor-service-windows.md index b7fbf5e044..fd1635c253 100644 --- a/windows/privacy/deploy-data-processor-service-windows.md +++ b/windows/privacy/deploy-data-processor-service-windows.md @@ -1,6 +1,6 @@ --- -title: Technical Deployment of the data processor service for Windows -description: Use this article to understand how to deploy and manage the data processor service for Windows. +title: Technical Deployment of the data processor service for Windows Enterprise +description: Use this article to understand how to deploy and manage the data processor service for Windows Enterprise. keywords: privacy, GDPR ms.localizationpriority: high ROBOTS: NOINDEX, NOFOLLOW @@ -17,35 +17,35 @@ ms.collection: - M365-security-compliance --- -# Data processor service for Windows Overview +# Data processor service for Windows Enterprise Overview >[!NOTE] ->This topic is intended for participants in the data processor service for Windows preview program and requires acceptance of specific terms of use. To learn +>This topic is intended for participants in the data processor service for Windows Enterprise preview program and requires acceptance of specific terms of use. To learn more about the program and agree to the terms of use, see [https://aka.ms/dpswpublicpreview](https://aka.ms/dpswpublicpreview). The privacy landscape keeps evolving, and with it, we make changes to our services to meet our customers’ needs. -The data processor service for Windows empowers you to be in control of diagnostic data from Windows devices, and act as data controllers for that data, under the definition of the European Union General Data Protection Regulation (GDPR). +The data processor service for Windows Enterprise empowers you to be in control of diagnostic data from Windows devices, and act as data controllers for that data, under the definition of the European Union General Data Protection Regulation (GDPR). -The data processor service for Windows will serve as a foundation for other Microsoft services that use Windows diagnostic data. +The data processor service for Windows Enterprise will serve as a foundation for other Microsoft services that use Windows diagnostic data. -The data processor service for Windows offering enables you to store and manage your Windows diagnostic data in the cloud, on top of an end-to-end data platform designed and built with compliance in mind, to help you meet your compliance obligations. +The data processor service for Windows Enterprise offering enables you to store and manage your Windows diagnostic data in the cloud, on top of an end-to-end data platform designed and built with compliance in mind, to help you meet your compliance obligations. Your data is routed and stored inside an enterprise compliance boundary, operating under a prescriptive and focused set of compliance requirements, in accordance with industry standards. -The data processor service for Windows provides you with controls that help respond to delete data subject requests (DSRs) on diagnostic data, at user account closure, for a specific Azure AD User ID. Additionally, you’re able to execute an export DSR for a specific Azure AD User ID. -Should you desire so, Microsoft will accommodate a data processor service for Windows tenant account closure, either because you decide to close your Azure or Azure AD tenant account, or because you decide you no longer wish to be the data controller for diagnostic data, but still wish to remain an Azure customer. +The data processor service for Windows Enterprise provides you with controls that help respond to delete data subject requests (DSRs) on diagnostic data, at user account closure, for a specific Azure AD User ID. Additionally, you’re able to execute an export DSR for a specific Azure AD User ID. +Should you desire so, Microsoft will accommodate a data processor service for Windows Enterprise tenant account closure, either because you decide to close your Azure or Azure AD tenant account, or because you decide you no longer wish to be the data controller for diagnostic data, but still wish to remain an Azure customer. >[!Note] >Tenant account closure will lead to the deletion of all data associated with that tenant. -## Deployment of data processor service for Windows -Use the instructions below to easily manage the data processor service for Windows using a single setting, through Group Policy, or an MDM solution, in Windows 10, version 1809 or Windows Server 2019 and newer. +## Deployment of data processor service for Windows Enterprise +Use the instructions below to easily manage the data processor service for Windows Enterprise using a single setting, through Group Policy, or an MDM solution, in Windows 10, version 1809 or Windows Server 2019 and newer. ### Prerequisites #### Versions supported -The data processor service for Windows is currently supported on Windows 10, version 1809, and newer versions. +The data processor service for Windows Enterprise is currently supported on Windows 10, version 1809, and newer versions. #### Network requirements -The following endpoints need to be reachable from devices enrolled into the data processor service for Windows: +The following endpoints need to be reachable from devices enrolled into the data processor service for Windows Enterprise: login.live.com @@ -61,14 +61,14 @@ For additional information, see the “device authentication” and “diagnosti [Windows 10, version 1903 endpoints](https://docs.microsoft.com/Windows/privacy/manage-Windows-1903-endpoints) -### Deploying data processor service for Windows -You can use either Group Policy or an MDM solution to deploy the data processor service for Windows to your supported devices. +### Deploying data processor service for Windows Enterprise +You can use either Group Policy or an MDM solution to deploy the data processor service for Windows Enterprise to your supported devices. -In Group Policy, to enable data collection through the data processor service for Windows, go to **Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds** and switch the **Allow commercial data pipeline** setting to **enabled**. +In Group Policy, to enable data collection through the data processor service for Windows Enterprise, go to **Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds** and switch the **Allow commercial data pipeline** setting to **enabled**. If you wish to disable, at any time, switch the same setting to **disabled**. The default state of the above setting is **disabled**. -To use an MDM solution, such as [Microsoft Intune](https://docs.microsoft.com/intune/custom-settings-Windows-10), to deploy the data processor service for Windows to your supported devices, use the following custom OMA-URI setting configuration: +To use an MDM solution, such as [Microsoft Intune](https://docs.microsoft.com/intune/custom-settings-Windows-10), to deploy the data processor service for Windows Enterprise to your supported devices, use the following custom OMA-URI setting configuration: - **Name:** System/AllowCommercialDataPipeline - **OMA-URI:** ./Vendor/MSFT/Policy/Config/System/AllowCommercialDataPipeline @@ -79,11 +79,11 @@ Under **Value**, use **1** to enable the service. If you wish to disable, at any time, switch the same setting to **0** to disable. The default is **0**. >[!Note] ->Data collected from a device, before it was enrolled into the data processor service for Windows, will not be moved into the enterprise compliance boundary. +>Data collected from a device, before it was enrolled into the data processor service for Windows Enterprise, will not be moved into the enterprise compliance boundary. -## Managing data processor service for Windows +## Managing data processor service for Windows Enterprise ### Executing user-based data subject requests (DSRs) -To perform user-based DSRs, the data processor service for Windows requires your organization to be reflected in Azure AD. +To perform user-based DSRs, the data processor service for Windows Enterprise requires your organization to be reflected in Azure AD. If your environment is cloud-only and managed in Azure, or all your devices are Azure AD joined - you don’t need to take any further action. @@ -93,4 +93,4 @@ To learn more, visit [How To: Plan your hybrid Azure Active Directory join imple Once you have Azure AD join or hybrid Azure AD join in place, you can learn more about executing user-based DSRs, by visiting this [page](https://review.docs.microsoft.com/microsoft-365/compliance/gdpr-dsr-windows?branch=siosulli-wps&view=o365-worldwide). ## Geo-location -Windows Diagnostic Data collected through the data processor service for Windows is hosted in our datacenter in the United States. \ No newline at end of file +Windows Diagnostic Data collected through the data processor service for Windows Enterprise is hosted in our datacenter in the United States. \ No newline at end of file From bae6082e01f9d94953007fc989780faccc4bc9e0 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Wed, 22 Jul 2020 15:56:05 -0700 Subject: [PATCH 322/589] changing URL --- windows/privacy/deploy-data-processor-service-windows.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/deploy-data-processor-service-windows.md b/windows/privacy/deploy-data-processor-service-windows.md index fd1635c253..66bb8268c7 100644 --- a/windows/privacy/deploy-data-processor-service-windows.md +++ b/windows/privacy/deploy-data-processor-service-windows.md @@ -21,7 +21,7 @@ ms.collection: >[!NOTE] >This topic is intended for participants in the data processor service for Windows Enterprise preview program and requires acceptance of specific terms of use. To learn -more about the program and agree to the terms of use, see [https://aka.ms/dpswpublicpreview](https://aka.ms/dpswpublicpreview). +more about the program and agree to the terms of use, see [https://aka.ms/WindowsEnterprisePublicPreview](https://aka.ms/WindowsEnterprisePublicPreview). The privacy landscape keeps evolving, and with it, we make changes to our services to meet our customers’ needs. The data processor service for Windows Enterprise empowers you to be in control of diagnostic data from Windows devices, and act as data controllers for that data, under the definition of the European Union General Data Protection Regulation (GDPR). From 6995b95c985ec334435e44ebe000afb3b9a04653 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Wed, 22 Jul 2020 15:58:56 -0700 Subject: [PATCH 323/589] file name change --- ...cessor-service-for-windows-enterprise-public-preview-terms.md} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename windows/privacy/{data-processor-service-for-windows-public-preview-terms.md => data-processor-service-for-windows-enterprise-public-preview-terms.md} (100%) diff --git a/windows/privacy/data-processor-service-for-windows-public-preview-terms.md b/windows/privacy/data-processor-service-for-windows-enterprise-public-preview-terms.md similarity index 100% rename from windows/privacy/data-processor-service-for-windows-public-preview-terms.md rename to windows/privacy/data-processor-service-for-windows-enterprise-public-preview-terms.md From c5e8a1b7e931fb7e9176d889528a8df8f3b741a2 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Wed, 22 Jul 2020 16:46:07 -0700 Subject: [PATCH 324/589] first push for terms update --- ...windows-enterprise-public-preview-terms.md | 167 +++++++++++++++++- 1 file changed, 162 insertions(+), 5 deletions(-) diff --git a/windows/privacy/data-processor-service-for-windows-enterprise-public-preview-terms.md b/windows/privacy/data-processor-service-for-windows-enterprise-public-preview-terms.md index 3d8d1c0ab9..8697a6af0a 100644 --- a/windows/privacy/data-processor-service-for-windows-enterprise-public-preview-terms.md +++ b/windows/privacy/data-processor-service-for-windows-enterprise-public-preview-terms.md @@ -75,7 +75,7 @@ These Terms govern your use of the preview described below (“**Preview**”). 5. **Data Protection.** - **Generally**. To the extent Microsoft is a processor of Personal Data, the General Data Protection Regulation (GDPR) Terms in Appendix 1 govern that processing and the parties also agree to the following terms: + **Generally**. To the extent Microsoft is a processor of Personal Data, the General Data Protection Regulation (GDPR) Terms in Attachment 1 govern that processing and the parties also agree to the following terms: 1. Processing Details: The parties agree that: * The subject-matter of the processing is limited to Personal Data within the scope of the GDPR; @@ -85,7 +85,8 @@ These Terms govern your use of the preview described below (“**Preview**”). * The categories of data subjects are your representatives and end users, such as employees, contractors, collaborators, and customers. 2. Data Transfers: - * Preview Data and Personal Data that Microsoft processes on your behalf may be transferred to, and stored and processed in, the United States or any other country in which Microsoft or its Subprocessors operate. You appoint Microsoft to perform any such transfer of Preview Data and Personal Data to any such country and to store and process Preview Data and Personal Data to provide the Services. + * Preview Data and Personal Data that Microsoft processes on your behalf may be transferred to, and stored and processed in, the United States or any other country in which Microsoft or its Subprocessors operate. You appoint Microsoft to perform any such transfer of Preview Data and Personal Data to any such country and to store and process Preview Data and Personal Data to provide the Services. + * All transfers of Preview Data and Personal Data out of the European Union, European Economic Area, United Kingdom, and Switzerland to provide the Online Services shall be governed by the Standard Contractual Clauses in Attachment 2. * Microsoft will abide by the requirements of European Economic Area and Swiss data protection law regarding the collection, use, transfer, retention, and other processing of Personal Data from the European Economic Area and Switzerland. All transfers of Personal Data to a third country or an international organization will be subject to appropriate safeguards as described in Article 46 of the GDPR and such transfers and safeguards will be documented according to Article 30(2) of the GDPR. * In addition, Microsoft is certified to the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks and the commitments they entail. Microsoft agrees to notify you in the event that it makes a determination that it can no longer meet its obligation to provide the same level of protection as is required by the Privacy Shield principles. @@ -120,7 +121,7 @@ These Terms govern your use of the preview described below (“**Preview**”). 7. **Survival.** Sections 3.b, 4, 7 (with respect to post-termination obligations), and 8-10 will survive these Terms’ expiration or termination.

- Appendix 1: GDPR Terms
+ Attachment 1: GDPR Terms
For purposes of these GDPR Terms, you and Microsoft agree that you are the controller of Personal Data and Microsoft is the processor of such data, except when you act as a processor of Personal Data, in which case Microsoft is a subprocessor. These GDPR Terms apply to the processing of Personal Data, within the scope of the GDPR, by Microsoft on your behalf. These GDPR Terms do not limit or reduce any data protection commitments Microsoft makes to you in other agreement between Microsoft and you. These GDPR Terms do not apply where Microsoft is a controller of Personal Data. @@ -165,6 +166,162 @@ For purposes of these GDPR Terms, you and Microsoft agree that you are the contr 7. Microsoft shall notify you without undue delay after becoming aware of a personal data breach. (Article 33(2)). Such notification will include that information a processor must provide to a controller under Article 33(3) to the extent such information is reasonably available to Microsoft. - +Attachment 2 – The Standard Contractual Clauses (Processors) - \ No newline at end of file +In countries where regulatory approval is required for use of the Standard Contractual Clauses, the Standard Contractual Clauses cannot be relied upon under European Commission 2010/87/EU (of February 2010) to legitimize export of data from the country, unless Customer has the required regulatory approval. +Beginning May 25, 2018 and thereafter, references to various Articles from the Directive 95/46/EC in the Standard Contractual Clauses below will be treated as references to the relevant and appropriate Articles in the GDPR. +For the purposes of Article 26(2) of Directive 95/46/EC for the transfer of personal data to processors established in third countries which do not ensure an adequate level of data protection, Customer (as data exporter) and Microsoft Corporation (as data importer, whose signature appears below), each a “party,” together “the parties,” have agreed on the following Contractual Clauses (the “Clauses” or “Standard Contractual Clauses”) in order to adduce adequate safeguards with respect to the protection of privacy and fundamental rights and freedoms of individuals for the transfer by the data exporter to the data importer of the personal data specified in Appendix 1. + +Clause 1: Definitions + +(a) 'personal data', 'special categories of data', 'process/processing', 'controller', 'processor', 'data subject' and 'supervisory authority' shall have the same meaning as in Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data; +(b) 'the data exporter' means the controller who transfers the personal data; +(c) 'the data importer' means the processor who agrees to receive from the data exporter personal data intended for processing on his behalf after the transfer in accordance with his instructions and the terms of the Clauses and who is not subject to a third country's system ensuring adequate protection within the meaning of Article 25(1) of Directive 95/46/EC; +(d) 'the subprocessor' means any processor engaged by the data importer or by any other subprocessor of the data importer who agrees to receive from the data importer or from any other subprocessor of the data importer personal data exclusively intended for processing activities to be carried out on behalf of the data exporter after the transfer in accordance with his instructions, the terms of the Clauses and the terms of the written subcontract; +(e) 'the applicable data protection law' means the legislation protecting the fundamental rights and freedoms of individuals and, in particular, their right to privacy with respect to the processing of personal data applicable to a data controller in the Member State in which the data exporter is established; +(f) 'technical and organisational security measures' means those measures aimed at protecting personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing. + +Clause 2: Details of the transfer + +The details of the transfer and in particular the special categories of personal data where applicable are specified in Appendix 1 below which forms an integral part of the Clauses. + +Clause 3: Third-party beneficiary clause + +1. The data subject can enforce against the data exporter this Clause, Clause 4(b) to (i), Clause 5(a) to (e), and (g) to (j), Clause 6(1) and (2), Clause 7, Clause 8(2), and Clauses 9 to 12 as third-party beneficiary. +2. The data subject can enforce against the data importer this Clause, Clause 5(a) to (e) and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where the data exporter has factually disappeared or has ceased to exist in law unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law, as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity. +3. The data subject can enforce against the subprocessor this Clause, Clause 5(a) to (e) and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity. Such third-party liability of the subprocessor shall be limited to its own processing operations under the Clauses. +4. The parties do not object to a data subject being represented by an association or other body if the data subject so expressly wishes and if permitted by national law. + +Clause 4: Obligations of the data exporter + +The data exporter agrees and warrants: + +(a) that the processing, including the transfer itself, of the personal data has been and will continue to be carried out in accordance with the relevant provisions of the applicable data protection law (and, where applicable, has been notified to the relevant authorities of the Member State where the data exporter is established) and does not violate the relevant provisions of that State; +(b) that it has instructed and throughout the duration of the personal data processing services will instruct the data importer to process the personal data transferred only on the data exporter's behalf and in accordance with the applicable data protection law and the Clauses; +(c) that the data importer will provide sufficient guarantees in respect of the technical and organisational security measures specified in Appendix 2 below; +(d) that after assessment of the requirements of the applicable data protection law, the security measures are appropriate to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing, and that these measures ensure a level of security appropriate to the risks presented by the processing and the nature of the data to be protected having regard to the state of the art and the cost of their implementation; +(e) that it will ensure compliance with the security measures; +(f) that, if the transfer involves special categories of data, the data subject has been informed or will be informed before, or as soon as possible after, the transfer that its data could be transmitted to a third country not providing adequate protection within the meaning of Directive 95/46/EC; +(g) to forward any notification received from the data importer or any subprocessor pursuant to Clause 5(b) and Clause 8(3) to the data protection supervisory authority if the data exporter decides to continue the transfer or to lift the suspension; +(h) to make available to the data subjects upon request a copy of the Clauses, with the exception of Appendix 2, and a summary description of the security measures, as well as a copy of any contract for subprocessing services which has to be made in accordance with the Clauses, unless the Clauses or the contract contain commercial information, in which case it may remove such commercial information; +(i) that, in the event of subprocessing, the processing activity is carried out in accordance with Clause 11 by a subprocessor providing at least the same level of protection for the personal data and the rights of data subject as the data importer under the Clauses; and +(j) that it will ensure compliance with Clause 4(a) to (i). + +Clause 5: Obligations of the data importer + +The data importer agrees and warrants: + +(a) to process the personal data only on behalf of the data exporter and in compliance with its instructions and the Clauses; if it cannot provide such compliance for whatever reasons, it agrees to inform promptly the data exporter of its inability to comply, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract; +(b) that it has no reason to believe that the legislation applicable to it prevents it from fulfilling the instructions received from the data exporter and its obligations under the contract and that in the event of a change in this legislation which is likely to have a substantial adverse effect on the warranties and obligations provided by the Clauses, it will promptly notify the change to the data exporter as soon as it is aware, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract; +(c) that it has implemented the technical and organisational security measures specified in Appendix 2 before processing the personal data transferred; +(d) that it will promptly notify the data exporter about: +(i) any legally binding request for disclosure of the personal data by a law enforcement authority unless otherwise prohibited, such as a prohibition under criminal law to preserve the confidentiality of a law enforcement investigation, +(ii) any accidental or unauthorised access, and +(iii) any request received directly from the data subjects without responding to that request, unless it has been otherwise authorised to do so; +(e) to deal promptly and properly with all inquiries from the data exporter relating to its processing of the personal data subject to the transfer and to abide by the advice of the supervisory authority with regard to the processing of the data transferred; +(f) at the request of the data exporter to submit its data processing facilities for audit of the processing activities covered by the Clauses which shall be carried out by the data exporter or an inspection body composed of independent members and in possession of the required professional qualifications bound by a duty of confidentiality, selected by the data exporter, where applicable, in agreement with the supervisory authority; +(g) to make available to the data subject upon request a copy of the Clauses, or any existing contract for subprocessing, unless the Clauses or contract contain commercial information, in which case it may remove such commercial information, with the exception of Appendix 2 which shall be replaced by a summary description of the security measures in those cases where the data subject is unable to obtain a copy from the data exporter; +(h) that, in the event of subprocessing, it has previously informed the data exporter and obtained its prior written consent; +(i) that the processing services by the subprocessor will be carried out in accordance with Clause 11; and +(j) to send promptly a copy of any subprocessor agreement it concludes under the Clauses to the data exporter. + +Clause 6: Liability + +1. The parties agree that any data subject who has suffered damage as a result of any breach of the obligations referred to in Clause 3 or in Clause 11 by any party or subprocessor is entitled to receive compensation from the data exporter for the damage suffered. +2. If a data subject is not able to bring a claim for compensation in accordance with paragraph 1 against the data exporter, arising out of a breach by the data importer or his subprocessor of any of their obligations referred to in Clause 3 or in Clause 11, because the data exporter has factually disappeared or ceased to exist in law or has become insolvent, the data importer agrees that the data subject may issue a claim against the data importer as if it were the data exporter, unless any successor entity has assumed the entire legal obligations of the data exporter by contract of by operation of law, in which case the data subject can enforce its rights against such entity. +The data importer may not rely on a breach by a subprocessor of its obligations in order to avoid its own liabilities. +3. If a data subject is not able to bring a claim against the data exporter or the data importer referred to in paragraphs 1 and 2, arising out of a breach by the subprocessor of any of their obligations referred to in Clause 3 or in Clause 11 because both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, the subprocessor agrees that the data subject may issue a claim against the data subprocessor with regard to its own processing operations under the Clauses as if it were the data exporter or the data importer, unless any successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law, in which case the data subject can enforce its rights against such entity. The liability of the subprocessor shall be limited to its own processing operations under the Clauses. + +Clause 7: Mediation and jurisdiction + +1. The data importer agrees that if the data subject invokes against it third-party beneficiary rights and/or claims compensation for damages under the Clauses, the data importer will accept the decision of the data subject: +(a) to refer the dispute to mediation, by an independent person or, where applicable, by the supervisory authority; +(b) to refer the dispute to the courts in the Member State in which the data exporter is established. +2. The parties agree that the choice made by the data subject will not prejudice its substantive or procedural rights to seek remedies in accordance with other provisions of national or international law. + +Clause 8: Cooperation with supervisory authorities + +1. The data exporter agrees to deposit a copy of this contract with the supervisory authority if it so requests or if such deposit is required under the applicable data protection law. +2. The parties agree that the supervisory authority has the right to conduct an audit of the data importer, and of any subprocessor, which has the same scope and is subject to the same conditions as would apply to an audit of the data exporter under the applicable data protection law. +3. The data importer shall promptly inform the data exporter about the existence of legislation applicable to it or any subprocessor preventing the conduct of an audit of the data importer, or any subprocessor, pursuant to paragraph 2. In such a case the data exporter shall be entitled to take the measures foreseen in Clause 5 (b). + +Clause 9: Governing Law + +The Clauses shall be governed by the law of the Member State in which the data exporter is established. + +Clause 10: Variation of the contract + +The parties undertake not to vary or modify the Clauses. This does not preclude the parties from adding clauses on business related issues where required as long as they do not contradict the Clause. + +Clause 11: Subprocessing + +1. The data importer shall not subcontract any of its processing operations performed on behalf of the data exporter under the Clauses without the prior written consent of the data exporter. Where the data importer subcontracts its obligations under the Clauses, with the consent of the data exporter, it shall do so only by way of a written agreement with the subprocessor which imposes the same obligations on the subprocessor as are imposed on the data importer under the Clauses. Where the subprocessor fails to fulfil its data protection obligations under such written agreement the data importer shall remain fully liable to the data exporter for the performance of the subprocessor's obligations under such agreement. +2. The prior written contract between the data importer and the subprocessor shall also provide for a third-party beneficiary clause as laid down in Clause 3 for cases where the data subject is not able to bring the claim for compensation referred to in paragraph 1 of Clause 6 against the data exporter or the data importer because they have factually disappeared or have ceased to exist in law or have become insolvent and no successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law. Such third-party liability of the subprocessor shall be limited to its own processing operations under the Clauses. +3. The provisions relating to data protection aspects for subprocessing of the contract referred to in paragraph 1 shall be governed by the law of the Member State in which the data exporter is established. +4. The data exporter shall keep a list of subprocessing agreements concluded under the Clauses and notified by the data importer pursuant to Clause 5 (j), which shall be updated at least once a year. The list shall be available to the data exporter's data protection supervisory authority. + +Clause 12: Obligation after the termination of personal data processing services + +1. The parties agree that on the termination of the provision of data processing services, the data importer and the subprocessor shall, at the choice of the data exporter, return all the personal data transferred and the copies thereof to the data exporter or shall destroy all the personal data and certify to the data exporter that it has done so, unless legislation imposed upon the data importer prevents it from returning or destroying all or part of the personal data transferred. In that case, the data importer warrants that it will guarantee the confidentiality of the personal data transferred and will not actively process the personal data transferred anymore. +2. The data importer and the subprocessor warrant that upon request of the data exporter and/or of the supervisory authority, it will submit its data processing facilities for an audit of the measures referred to in paragraph 1. + +Appendix 1 to the Standard Contractual Clauses + +Data exporter: Customer is the data exporter. The data exporter is a user of the Services. + +Data importer: The data importer is MICROSOFT CORPORATION, a global producer of software and services. + +Data subjects: Data subjects include the data exporter’s representatives and end-users including employees, contractors, collaborators, and customers of the data exporter. Data subjects may also include individuals attempting to communicate or transfer personal information to users of the services provided by data importer. Microsoft acknowledges that, depending on Customer’s use of the Services, Customer may elect to include personal data from any of the following types of data subjects in the personal data: + +* Employees, contractors and temporary workers (current, former, prospective) of data exporter; +* Dependents of the above; +* Data exporter's collaborators/contact persons (natural persons) or employees, contractors or temporary workers of legal entity collaborators/contact persons (current, prospective, former); +* Users (e.g., customers, clients, patients, visitors, etc.) and other data subjects that are users of data exporter's services; +* Partners, stakeholders or individuals who actively collaborate, communicate or otherwise interact with employees of the data exporter and/or use communication tools such as apps and websites provided by the data exporter; +* Stakeholders or individuals who passively interact with data exporter (e.g., because they are the subject of an investigation, research or mentioned in documents or correspondence from or to the data exporter); +* Minors; or +* Professionals with professional privilege (e.g., doctors, lawyers, notaries, religious workers, etc.). + +Categories of data: The personal data transferred that is included in data processed by the Services. Microsoft acknowledges that, depending on Customer’s use of the Services, Customer may elect to include personal data from any of the following categories in the personal data: + +* Basic personal data (for example place of birth, street name and house number (address), postal code, city of residence, country of residence, mobile phone number, first name, last name, initials, email address, gender, date of birth), including basic personal data about family members and children; +* Authentication data (for example user name, password or PIN code, security question, audit trail); +* Contact information (for example addresses, email, phone numbers, social media identifiers; emergency contact details); +* Unique identification numbers and signatures (for example Social Security number, bank account number, passport and ID card number, driver's license number and vehicle registration data, IP addresses, employee number, student number, patient number, signature, unique identifier in tracking cookies or similar technology); +* Pseudonymous identifiers; +* Financial and insurance information (for example insurance number, bank account name and number, credit card name and number, invoice number, income, type of assurance, payment behavior, creditworthiness); +* Commercial Information (for example history of purchases, special offers, subscription information, payment history); +* Biometric Information (for example DNA, fingerprints and iris scans); +* Location data (for example, Cell ID, geo-location network data, location by start call/end of the call. Location data derived from use of wifi access points); +* Photos, video and audio; +* Internet activity (for example browsing history, search history, reading, television viewing, radio listening activities); +* Device identification (for example IMEI-number, SIM card number, MAC address); +* Profiling (for example based on observed criminal or anti-social behavior or pseudonymous profiles based on visited URLs, click streams, browsing logs, IP-addresses, domains, apps installed, or profiles based on marketing preferences); +* HR and recruitment data (for example declaration of employment status, recruitment information (such as curriculum vitae, employment history, education history details), job and position data, including worked hours, assessments and salary, work permit details, availability, terms of employment, tax details, payment details, insurance details and location and organizations); +* Education data (for example education history, current education, grades and results, highest degree achieved, learning disability); +* Citizenship and residency information (for example citizenship, naturalization status, marital status, nationality, immigration status, passport data, details of residency or work permit); +* Information processed for the performance of a task carried out in the public interest or in the exercise of an official authority; +* Special categories of data (for example racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health, data concerning a natural person’s sex life or sexual orientation, or data relating to criminal convictions or offences); or +* Any other personal data identified in Article 4 of the GDPR. + +Processing operations: The personal data transferred will be subject to the following basic processing activities: + +a. Duration and Object of Data Processing. The duration of data processing shall be for the term of the Preview. The objective of the data processing is the performance of the Services. +b. Scope and Purpose of Data Processing. The scope and purpose of processing personal data is described in Section 5 of this agreement. The data importer operates a global network of data centers and management/support facilities, and processing may take place in any jurisdiction where data importer or its sub-processors operate such facilities. +c. Customer Data and Personal Data Access. For the term designated under the applicable volume licensing agreement data importer will at its election and as necessary under applicable law implementing Article 12(b) of the EU Data Protection Directive, either: (1) provide data exporter with the ability to correct, delete, or block Customer Data and personal data, or (2) make such corrections, deletions, or blockages on its behalf. +d. Data Exporter’s Instructions. For Online Services and Professional Services, data importer will only act upon data exporter’s instructions as conveyed by Microsoft. +e. Preview Data and Personal Data Deletion or Return. Upon expiration or termination of data exporter’s use of the Services, it may extract Customer Data and personal data and data importer will delete Customer Data and personal data, each in accordance with the terms of this agreement. + +Subcontractors: In accordance with the DPA, the data importer may hire other companies to provide limited services on data importer’s behalf, such as providing customer support. Any such subcontractors will be permitted to obtain Customer Data and personal data only to deliver the services the data importer has retained them to provide, and they are prohibited from using Customer Data and personal data for any other purpose. + +Appendix 2 to the Standard Contractual Clauses + +Description of the technical and organizational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c): + +1. Personnel. Data importer’s personnel will not process Preview Data or personal data without authorization. Personnel are obligated to maintain the confidentiality of any such Preview Data and personal data and this obligation continues even after their engagement ends. +2. Data Privacy Contact. The data privacy officer of the data importer can be reached at the following address: +Microsoft Corporation +Attn: Chief Privacy Officer +1 Microsoft Way +Redmond, WA 98052 USA +3. Technical and Organization Measures. The data importer has implemented and will maintain appropriate technical and organizational measures, internal controls, and information security routines intended to protect Preview Data and personal data, as defined in Attachment 1 of this agreement, against accidental loss, destruction, or alteration; unauthorized disclosure or access; or unlawful destruction as follows: The technical and organizational measures, internal controls, and information security routines set forth in Attachment 1 of this agreement are hereby incorporated into this Appendix 2 by this reference and are binding on the data importer as if they were set forth in this Appendix 2 in their entirety. From 786ed3697eb1ded8b58f992ad5a65610d3849cf6 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 22 Jul 2020 17:01:17 -0700 Subject: [PATCH 325/589] more fixes and additions --- ...ge-atp-post-migration-configuration-manager.md | 15 +++++++++++---- ...age-atp-post-migration-group-policy-objects.md | 3 +++ .../manage-atp-post-migration-intune.md | 9 +++++---- .../manage-atp-post-migration-other-tools.md | 3 +++ 4 files changed, 22 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index 8f15c5d09a..68b51fc554 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -19,19 +19,26 @@ ms.topic: article # Manage Microsoft Defender Advanced Threat Protection with Configuration Manager -You can use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage your organization's threat protection features for devices (also referred to as endpoints). Configuration Manager is part of Microsoft Endpoint Manager, along with Intune, Desktop Analytics, and other features & capabilities. [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). +**Applies to:** +- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -## Find your Microsoft Defender ATP settings in Configuration Manager +You can use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage threat protection features for your organization's devices (also referred to as endpoints). In fact, Configuration Manager and Microsoft Intune are both part of Microsoft Endpoint Manager, together with Desktop Analytics, and other features & capabilities. This means that you can use *either* Configuration Manager or Intune, or both to manage Microsoft Defender ATP. -1. +- [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview) +- [See how you can manage Microsoft Defender ATP with Intune](manage-atp-post-migration-intune.md) ## Configure Microsoft Defender ATP with Configuration Manager -The following table lists various tasks you can perform to configure Microsoft Defender ATP with Configuration Manager. +The following table lists various tasks you can perform to configure Microsoft Defender ATP with Intune. You don't have to configure everything all at once; choose a task, read the corresponding resources, and then proceed from there, at your pace. + |Task |Resources to learn more | |---------|---------| |Manage your organization's devices using Configuration Manager

|[Configuration Manager: Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection)

[Onboarding to Microsoft Defender ATP with Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection#about-onboarding-to-atp-with-configuration-manager) | |task |link | +## Related articles +[Manage Microsoft Defender ATP with Intune](manage-atp-post-migration-intune.md) + +## Next steps diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md index 2a3f09a593..68c12f8a37 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -19,6 +19,9 @@ ms.topic: article # Manage Microsoft Defender Advanced Threat Protection with Group Policy Objects +**Applies to:** +- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) + We recommend using PowerShell to manage threat protection features for the devices (also referred to as endpoints) within your organization. ## Configuring Microsoft Defender ATP with Group Policy Objects diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 1db92d85dc..9cfa77689d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -19,9 +19,10 @@ ms.topic: article # Manage Microsoft Defender Advanced Threat Protection with Intune -We recommend using Microsoft Intune to manage your organization's threat protection features for devices (also referred to as endpoints). Intune is part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), along with Configuration Manager, Desktop Analytics, and other features & capabilities. +**Applies to:** +- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -You can use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage your organization's threat protection features for devices (also referred to as endpoints) within your organization. Configuration Manager is part of Microsoft Endpoint Manager, along with Intune, Desktop Analytics, and other features and capabilities. [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). +We recommend using Microsoft Intune to manage your organization's threat protection features for devices (also referred to as endpoints). Intune is part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), along with Configuration Manager, Desktop Analytics, and other features & capabilities. [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). ## Find your Microsoft Defender ATP settings in Intune @@ -42,7 +43,7 @@ You can use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/cor ## Configure Microsoft Defender ATP with Intune -The following table lists various tasks you can perform to configure Microsoft Defender ATP with Intune. You don't have to configure everything all at once; choose a task, read the corresponding resources, and proceed from there. +The following table lists various tasks you can perform to configure Microsoft Defender ATP with Intune. You don't have to configure everything all at once; choose a task, read the corresponding resources, and then proceed from there, at your pace. |Task |Resources to learn more | |---------|---------| @@ -50,7 +51,7 @@ The following table lists various tasks you can perform to configure Microsoft D |**Integrate Microsoft Defender ATP with Intune** as a Mobile Threat Defense solution
*(for Android devices and devices running Windows 10 or later)* |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | |**Use Conditional Access** to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | |**Configure Microsoft Defender Antivirus settings** using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus)

[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender) | -|**If necessary, specify exclusions for Microsoft Defender Antivirus**

***Generally, you shouldn't need to apply exclusions.** Microsoft Defender Antivirus includes a number of automatic exclusions based on known OS behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations.* |[Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows](https://support.microsoft.com/help/822158/virus-scanning-recommendations-for-enterprise-computers)

[Device restrictions: Microsoft Defender Antivirus Exclusions for Windows 10 devices](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions)

[Configure Microsoft Defender Antivirus exclusions on Windows Server 2016 or 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus)| +|**If necessary, specify exclusions for Microsoft Defender Antivirus**

*Generally, you shouldn't need to apply exclusions. Microsoft Defender Antivirus includes a number of automatic exclusions based on known OS behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations.* |[Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows](https://support.microsoft.com/help/822158/virus-scanning-recommendations-for-enterprise-computers)

[Device restrictions: Microsoft Defender Antivirus Exclusions for Windows 10 devices](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions)

[Configure Microsoft Defender Antivirus exclusions on Windows Server 2016 or 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus)| |**Configure your attack surface reduction rules** to target software behaviors that are often abused by attackers

*Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Audit mode in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender)

[Endpoint protection: Attack Surface Reduction](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json#attack-surface-reduction)

[Learn more about attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction) | |**Configure your network filtering** to block outbound connections from any app to IP addresses or domains with low reputations

*Network filtering is also referred to as [network protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/network-protection).*

*Make sure that Windows 10 devices have the latest [antimalware platform updates](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform) installed.*|[Endpoint protection: Network filtering](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#network-filtering)

[Review network protection events in Windows Event Viewer](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection#review-network-protection-events-in-windows-event-viewer) | |**Configure controlled folder access** to protect against ransomware

*[Controlled folder access](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/controlled-folders) is also referred to as antiransomware protection.* |[Endpoint protection: Controlled folder access](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#controlled-folder-access)

[Enable controlled folder access in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#intune) | diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index e8d3196450..f1016108d4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -19,6 +19,9 @@ ms.topic: article # Manage Microsoft Defender Advanced Threat Protection with PowerShell, WMI, and MPCmdRun.exe +**Applies to:** +- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) + We recommend using [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), which includes [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) and [Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection), to manage your organization's threat protection features in Microsoft Defender ATP. However, you can use PowerShell, Windows Management Instrumentation (WMI), and the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to perform some tasks, such as managing Microsoft Defender Antivirus, or configuring some settings on a device. From 9b5bd3bc0faf06be5d228271978c8bbeb7215cf2 Mon Sep 17 00:00:00 2001 From: Thomas Raya Date: Wed, 22 Jul 2020 17:10:15 -0700 Subject: [PATCH 326/589] Resolve link issues --- .../mdm/policy-csps-supported-by-surface-hub.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md index f265b57c4e..877db00d2e 100644 --- a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md +++ b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md @@ -65,7 +65,7 @@ ms.date: 07/22/2020 - [DeliveryOptimization/DOMonthlyUploadDataCap](policy-csp-deliveryoptimization.md#deliveryoptimization-domonthlyuploaddatacap) - [DeliveryOptimization/DOPercentageMaxDownloadBandwidth](policy-csp-deliveryoptimization.md#deliveryoptimization-dopercentagemaxdownloadbandwidth) - [Desktop/PreventUserRedirectionOfProfileFolders](policy-csp-desktop.md#desktop-preventuserredirectionofprofilefolders) -- [RestrictedGroups/ConfigureGroupMembership](https://docs.microsoft.com/windows/client-management/https://docs.microsoft.com/windows/client-management/mdm/policy-csp-restrictedgroups) +- [RestrictedGroups/ConfigureGroupMembership](policy-csp-restrictedgroups) - [TextInput/AllowIMELogging](policy-csp-textinput.md#textinput-allowimelogging) - [TextInput/AllowIMENetworkAccess](policy-csp-textinput.md#textinput-allowimenetworkaccess) - [TextInput/AllowInputPanel](policy-csp-textinput.md#textinput-allowinputpanel) From 2a5105099e76c1b08aa85dcb371397fdbcfa73eb Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 22 Jul 2020 17:11:31 -0700 Subject: [PATCH 327/589] Update manage-atp-post-migration-other-tools.md --- .../manage-atp-post-migration-other-tools.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index f1016108d4..045bca7db0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -22,8 +22,14 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -We recommend using [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), which includes [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) and [Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection), to manage your organization's threat protection features in Microsoft Defender ATP. However, you can use PowerShell, Windows Management Instrumentation (WMI), and the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to perform some tasks, such as managing Microsoft Defender Antivirus, or configuring some settings on a device. +When it comes to managing your organization's threat protection features in Microsoft Defender ATP, we recommend using [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), which includes [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) and [Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection). To learn more, see the following articles: +- [Manage Microsoft Defender ATP with Intune](manage-atp-post-migration-intune.md) +- [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md) +You can, however, use other tools/methods to perform some tasks, such as managing Microsoft Defender Antivirus settings. These tools/methods include: +- [PowerShell](#configure-microsoft-defender-atp-with-powershell) +- [Windows Management Instrumentation](#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi) (WMI) +- [The Microsoft Malware Protection Command Line Utility](#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe) (MPCmdRun.exe) ## Configure Microsoft Defender ATP with PowerShell From 6cfaa63fb771590052cd9cc73e38f0471b8c966b Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 22 Jul 2020 17:29:39 -0700 Subject: [PATCH 328/589] Update manage-atp-post-migration-configuration-manager.md --- .../manage-atp-post-migration-configuration-manager.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index 68b51fc554..c34c280c0d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -22,14 +22,13 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -You can use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage threat protection features for your organization's devices (also referred to as endpoints). In fact, Configuration Manager and Microsoft Intune are both part of Microsoft Endpoint Manager, together with Desktop Analytics, and other features & capabilities. This means that you can use *either* Configuration Manager or Intune, or both to manage Microsoft Defender ATP. - +We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). However, you can also use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage Microsoft Defender ATP settings. Configuration Manager and Microsoft Intune are both part of Microsoft Endpoint Manager, together with Desktop Analytics, and other features & capabilities. - [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview) - [See how you can manage Microsoft Defender ATP with Intune](manage-atp-post-migration-intune.md) ## Configure Microsoft Defender ATP with Configuration Manager -The following table lists various tasks you can perform to configure Microsoft Defender ATP with Intune. You don't have to configure everything all at once; choose a task, read the corresponding resources, and then proceed from there, at your pace. +The following table lists various tasks you can perform to configure Microsoft Defender ATP with Intune. Choose a task, read the corresponding resources, and then proceed from there, at your pace. |Task |Resources to learn more | From 61ea28a09a5dfc99c266593cddb270c90f59d394 Mon Sep 17 00:00:00 2001 From: Thomas Raya Date: Wed, 22 Jul 2020 17:29:48 -0700 Subject: [PATCH 329/589] Update policy-csps-supported-by-surface-hub.md --- .../policy-csps-supported-by-surface-hub.md | 26 +++++++++---------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md index 877db00d2e..85818fcd84 100644 --- a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md +++ b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md @@ -77,19 +77,19 @@ ms.date: 07/22/2020 - [TextInput/ExcludeJapaneseIMEExceptJIS0208](policy-csp-textinput.md#textinput-excludejapaneseimeexceptjis0208) - [TextInput/ExcludeJapaneseIMEExceptJIS0208andEUDC](policy-csp-textinput.md#textinput-excludejapaneseimeexceptjis0208andeudc) - [TextInput/ExcludeJapaneseIMEExceptShiftJIS](policy-csp-textinput.md#textinput-excludejapaneseimeexceptshiftjis) -- [Wifi/AllowInternetSharing](https://docs.microsoft.com/windows/client-management/policy-csp-wifi#wifi-allowinternetsharing) -- [Wifi/AllowManualWiFiConfiguration](https://docs.microsoft.com/windows/client-management/policy-csp-wifi#wifi-allowmanualwificonfiguration) -- [Wifi/AllowWiFi](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-wifi#wifi-allowwifi) -- [WiFi/AllowWiFiHotSpotReporting](https://docs.microsoft.com/windows/client-management/policy-csp-wifi.md#wifi-allowwifihotspotreporting) -- [Wifi/AllowWiFiDirect](https://docs.microsoft.com/windows/client-management/policy-csp-wifi#wifi-allowwifidirect) -- [WirelessDisplay/AllowMdnsAdvertisement](https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-allowmdnsadvertisement) -- [WirelessDisplay/AllowMdnsDiscovery](https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-allowmdnsdiscovery) -- [WirelessDisplay/AllowProjectionFromPC](https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-allowprojectionfrompc) -- [WirelessDisplay/AllowProjectionFromPCOverInfrastructure](https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-allowprojectionfrompcoverinfrastructure) -- [WirelessDisplay/AllowProjectionToPC](https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-allowprojectiontopc) -- [WirelessDisplay/AllowProjectionToPCOverInfrastructure](https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-allowprojectiontopcoverinfrastructure) -- [WirelessDisplay/AllowUserInputFromWirelessDisplayReceiver](https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-allowuserinputfromwirelessdisplayreceiver) -- [WirelessDisplay/RequirePinForPairing](https://docs.microsoft.com/windows/client-management/policy-csp-wirelessdisplay#wirelessdisplay-requirepinforpairing) +- [Wifi/AllowInternetSharing](policy-csp-wifi.md#wifi-allowinternetsharing) +- [Wifi/AllowManualWiFiConfiguration](policy-csp-wifi.md#wifi-allowmanualwificonfiguration) +- [Wifi/AllowWiFi](policy-csp-wifi.md#wifi-allowwifi) +- [WiFi/AllowWiFiHotSpotReporting]policy-csp-wifi.md#wifi-allowwifihotspotreporting) +- [Wifi/AllowWiFiDirect](policy-csp-wifi.md#wifi-allowwifidirect) +- [WirelessDisplay/AllowMdnsAdvertisement](policy-csp-wirelessdisplay.md#wirelessdisplay-allowmdnsadvertisement) +- [WirelessDisplay/AllowMdnsDiscovery](policy-csp-wirelessdisplay.md#wirelessdisplay-allowmdnsdiscovery) +- [WirelessDisplay/AllowProjectionFromPC](policy-csp-wirelessdisplay.md#wirelessdisplay-allowprojectionfrompc) +- [WirelessDisplay/AllowProjectionFromPCOverInfrastructure](policy-csp-wirelessdisplay.md#wirelessdisplay-allowprojectionfrompcoverinfrastructure) +- [WirelessDisplay/AllowProjectionToPC](policy-csp-wirelessdisplay.mdwirelessdisplay-allowprojectiontopc) +- [WirelessDisplay/AllowProjectionToPCOverInfrastructure](policy-csp-wirelessdisplay.mdwirelessdisplay-allowprojectiontopcoverinfrastructure) +- [WirelessDisplay/AllowUserInputFromWirelessDisplayReceiver](policy-csp-wirelessdisplay.md#wirelessdisplay-allowuserinputfromwirelessdisplayreceiver) +- [WirelessDisplay/RequirePinForPairing](policy-csp-wirelessdisplay.md#wirelessdisplay-requirepinforpairing) ## Related topics From 7714a221c21f9a48c16601f475c455c56cc8fb9c Mon Sep 17 00:00:00 2001 From: Thomas Raya Date: Wed, 22 Jul 2020 17:34:42 -0700 Subject: [PATCH 330/589] Update policy-csps-supported-by-surface-hub.md --- .../mdm/policy-csps-supported-by-surface-hub.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md index 85818fcd84..81c4d8306a 100644 --- a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md +++ b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md @@ -65,7 +65,7 @@ ms.date: 07/22/2020 - [DeliveryOptimization/DOMonthlyUploadDataCap](policy-csp-deliveryoptimization.md#deliveryoptimization-domonthlyuploaddatacap) - [DeliveryOptimization/DOPercentageMaxDownloadBandwidth](policy-csp-deliveryoptimization.md#deliveryoptimization-dopercentagemaxdownloadbandwidth) - [Desktop/PreventUserRedirectionOfProfileFolders](policy-csp-desktop.md#desktop-preventuserredirectionofprofilefolders) -- [RestrictedGroups/ConfigureGroupMembership](policy-csp-restrictedgroups) +- [RestrictedGroups/ConfigureGroupMembership](policy-csp-restrictedgroups.md) - [TextInput/AllowIMELogging](policy-csp-textinput.md#textinput-allowimelogging) - [TextInput/AllowIMENetworkAccess](policy-csp-textinput.md#textinput-allowimenetworkaccess) - [TextInput/AllowInputPanel](policy-csp-textinput.md#textinput-allowinputpanel) From b38905a9f6bbae0c8d9bff7f2ae4eab803aae5c5 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 22 Jul 2020 17:37:37 -0700 Subject: [PATCH 331/589] Update manage-atp-post-migration-configuration-manager.md --- .../manage-atp-post-migration-configuration-manager.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index c34c280c0d..09fb124b18 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -22,7 +22,7 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). However, you can also use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage Microsoft Defender ATP settings. Configuration Manager and Microsoft Intune are both part of Microsoft Endpoint Manager, together with Desktop Analytics, and other features & capabilities. +We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). However, you can also use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage Microsoft Defender ATP. Configuration Manager and Microsoft Intune are both part of Microsoft Endpoint Manager, together with Desktop Analytics, and other features & capabilities. - [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview) - [See how you can manage Microsoft Defender ATP with Intune](manage-atp-post-migration-intune.md) From 22024fbe514ec6c59a3f775348e013efba173e16 Mon Sep 17 00:00:00 2001 From: Thomas Raya Date: Wed, 22 Jul 2020 17:42:12 -0700 Subject: [PATCH 332/589] Update policy-csps-supported-by-surface-hub.md --- .../mdm/policy-csps-supported-by-surface-hub.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md index 81c4d8306a..5d2e766984 100644 --- a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md +++ b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md @@ -86,8 +86,8 @@ ms.date: 07/22/2020 - [WirelessDisplay/AllowMdnsDiscovery](policy-csp-wirelessdisplay.md#wirelessdisplay-allowmdnsdiscovery) - [WirelessDisplay/AllowProjectionFromPC](policy-csp-wirelessdisplay.md#wirelessdisplay-allowprojectionfrompc) - [WirelessDisplay/AllowProjectionFromPCOverInfrastructure](policy-csp-wirelessdisplay.md#wirelessdisplay-allowprojectionfrompcoverinfrastructure) -- [WirelessDisplay/AllowProjectionToPC](policy-csp-wirelessdisplay.mdwirelessdisplay-allowprojectiontopc) -- [WirelessDisplay/AllowProjectionToPCOverInfrastructure](policy-csp-wirelessdisplay.mdwirelessdisplay-allowprojectiontopcoverinfrastructure) +- [WirelessDisplay/AllowProjectionToPC](policy-csp-wirelessdisplay.md#wirelessdisplay-allowprojectiontopc) +- [WirelessDisplay/AllowProjectionToPCOverInfrastructure](policy-csp-wirelessdisplay.md#wirelessdisplay-allowprojectiontopcoverinfrastructure) - [WirelessDisplay/AllowUserInputFromWirelessDisplayReceiver](policy-csp-wirelessdisplay.md#wirelessdisplay-allowuserinputfromwirelessdisplayreceiver) - [WirelessDisplay/RequirePinForPairing](policy-csp-wirelessdisplay.md#wirelessdisplay-requirepinforpairing) From 9cadda881d7d3d60658fb4f4016d8278e14cf2e1 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Wed, 22 Jul 2020 22:58:34 -0700 Subject: [PATCH 333/589] changing formatting --- ...windows-enterprise-public-preview-terms.md | 149 +++++++++--------- 1 file changed, 75 insertions(+), 74 deletions(-) diff --git a/windows/privacy/data-processor-service-for-windows-enterprise-public-preview-terms.md b/windows/privacy/data-processor-service-for-windows-enterprise-public-preview-terms.md index 8697a6af0a..7661bf8954 100644 --- a/windows/privacy/data-processor-service-for-windows-enterprise-public-preview-terms.md +++ b/windows/privacy/data-processor-service-for-windows-enterprise-public-preview-terms.md @@ -166,112 +166,113 @@ For purposes of these GDPR Terms, you and Microsoft agree that you are the contr 7. Microsoft shall notify you without undue delay after becoming aware of a personal data breach. (Article 33(2)). Such notification will include that information a processor must provide to a controller under Article 33(3) to the extent such information is reasonably available to Microsoft. -Attachment 2 – The Standard Contractual Clauses (Processors) +

+ Attachment 2 – The Standard Contractual Clauses (Processors)
In countries where regulatory approval is required for use of the Standard Contractual Clauses, the Standard Contractual Clauses cannot be relied upon under European Commission 2010/87/EU (of February 2010) to legitimize export of data from the country, unless Customer has the required regulatory approval. Beginning May 25, 2018 and thereafter, references to various Articles from the Directive 95/46/EC in the Standard Contractual Clauses below will be treated as references to the relevant and appropriate Articles in the GDPR. For the purposes of Article 26(2) of Directive 95/46/EC for the transfer of personal data to processors established in third countries which do not ensure an adequate level of data protection, Customer (as data exporter) and Microsoft Corporation (as data importer, whose signature appears below), each a “party,” together “the parties,” have agreed on the following Contractual Clauses (the “Clauses” or “Standard Contractual Clauses”) in order to adduce adequate safeguards with respect to the protection of privacy and fundamental rights and freedoms of individuals for the transfer by the data exporter to the data importer of the personal data specified in Appendix 1. -Clause 1: Definitions +**Clause 1: Definitions** -(a) 'personal data', 'special categories of data', 'process/processing', 'controller', 'processor', 'data subject' and 'supervisory authority' shall have the same meaning as in Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data; -(b) 'the data exporter' means the controller who transfers the personal data; -(c) 'the data importer' means the processor who agrees to receive from the data exporter personal data intended for processing on his behalf after the transfer in accordance with his instructions and the terms of the Clauses and who is not subject to a third country's system ensuring adequate protection within the meaning of Article 25(1) of Directive 95/46/EC; -(d) 'the subprocessor' means any processor engaged by the data importer or by any other subprocessor of the data importer who agrees to receive from the data importer or from any other subprocessor of the data importer personal data exclusively intended for processing activities to be carried out on behalf of the data exporter after the transfer in accordance with his instructions, the terms of the Clauses and the terms of the written subcontract; -(e) 'the applicable data protection law' means the legislation protecting the fundamental rights and freedoms of individuals and, in particular, their right to privacy with respect to the processing of personal data applicable to a data controller in the Member State in which the data exporter is established; -(f) 'technical and organisational security measures' means those measures aimed at protecting personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing. +1. 'personal data', 'special categories of data', 'process/processing', 'controller', 'processor', 'data subject' and 'supervisory authority' shall have the same meaning as in Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data; +1. 'the data exporter' means the controller who transfers the personal data; +1. 'the data importer' means the processor who agrees to receive from the data exporter personal data intended for processing on his behalf after the transfer in accordance with his instructions and the terms of the Clauses and who is not subject to a third country's system ensuring adequate protection within the meaning of Article 25(1) of Directive 95/46/EC; +1. 'the subprocessor' means any processor engaged by the data importer or by any other subprocessor of the data importer who agrees to receive from the data importer or from any other subprocessor of the data importer personal data exclusively intended for processing activities to be carried out on behalf of the data exporter after the transfer in accordance with his instructions, the terms of the Clauses and the terms of the written subcontract; +1. 'the applicable data protection law' means the legislation protecting the fundamental rights and freedoms of individuals and, in particular, their right to privacy with respect to the processing of personal data applicable to a data controller in the Member State in which the data exporter is established; +1. 'technical and organizational security measures' means those measures aimed at protecting personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing. -Clause 2: Details of the transfer +**Clause 2: Details of the transfer** The details of the transfer and in particular the special categories of personal data where applicable are specified in Appendix 1 below which forms an integral part of the Clauses. -Clause 3: Third-party beneficiary clause +**Clause 3: Third-party beneficiary clause** -1. The data subject can enforce against the data exporter this Clause, Clause 4(b) to (i), Clause 5(a) to (e), and (g) to (j), Clause 6(1) and (2), Clause 7, Clause 8(2), and Clauses 9 to 12 as third-party beneficiary. -2. The data subject can enforce against the data importer this Clause, Clause 5(a) to (e) and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where the data exporter has factually disappeared or has ceased to exist in law unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law, as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity. -3. The data subject can enforce against the subprocessor this Clause, Clause 5(a) to (e) and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity. Such third-party liability of the subprocessor shall be limited to its own processing operations under the Clauses. -4. The parties do not object to a data subject being represented by an association or other body if the data subject so expressly wishes and if permitted by national law. +1. The data subject can enforce against the data exporter this Clause, Clause 4(2) to (9), Clause 5(1) to (5), and (7) to (10), Clause 6(1) and (2), Clause 7, Clause 8(2), and Clauses 9 to 12 as third-party beneficiary. +2.1.exist in law unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law, as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity. +1. The data subject can enforce against the subprocessor this Clause, Clause 5(a) to (e) and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity. Such third-party liability of the subprocessor shall be limited to its own processing operations under the Clauses. +1. The parties do not object to a data subject being represented by an association or other body if the data subject so expressly wishes and if permitted by national law. -Clause 4: Obligations of the data exporter +**Clause 4: Obligations of the data exporter** -The data exporter agrees and warrants: +The data exporter agrees and warrants: -(a) that the processing, including the transfer itself, of the personal data has been and will continue to be carried out in accordance with the relevant provisions of the applicable data protection law (and, where applicable, has been notified to the relevant authorities of the Member State where the data exporter is established) and does not violate the relevant provisions of that State; -(b) that it has instructed and throughout the duration of the personal data processing services will instruct the data importer to process the personal data transferred only on the data exporter's behalf and in accordance with the applicable data protection law and the Clauses; -(c) that the data importer will provide sufficient guarantees in respect of the technical and organisational security measures specified in Appendix 2 below; -(d) that after assessment of the requirements of the applicable data protection law, the security measures are appropriate to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing, and that these measures ensure a level of security appropriate to the risks presented by the processing and the nature of the data to be protected having regard to the state of the art and the cost of their implementation; -(e) that it will ensure compliance with the security measures; -(f) that, if the transfer involves special categories of data, the data subject has been informed or will be informed before, or as soon as possible after, the transfer that its data could be transmitted to a third country not providing adequate protection within the meaning of Directive 95/46/EC; -(g) to forward any notification received from the data importer or any subprocessor pursuant to Clause 5(b) and Clause 8(3) to the data protection supervisory authority if the data exporter decides to continue the transfer or to lift the suspension; -(h) to make available to the data subjects upon request a copy of the Clauses, with the exception of Appendix 2, and a summary description of the security measures, as well as a copy of any contract for subprocessing services which has to be made in accordance with the Clauses, unless the Clauses or the contract contain commercial information, in which case it may remove such commercial information; -(i) that, in the event of subprocessing, the processing activity is carried out in accordance with Clause 11 by a subprocessor providing at least the same level of protection for the personal data and the rights of data subject as the data importer under the Clauses; and -(j) that it will ensure compliance with Clause 4(a) to (i). +1. that the processing, including the transfer itself, of the personal data has been and will continue to be carried out in accordance with the relevant provisions of the applicable data protection law (and, where applicable, has been notified to the relevant authorities of the Member State where the data exporter is established) and does not violate the relevant provisions of that State; +1. that it has instructed and throughout the duration of the personal data processing services will instruct the data importer to process the personal data transferred only on the data exporter's behalf and in accordance with the applicable data protection law and the Clauses; +1. that the data importer will provide sufficient guarantees in respect of the technical and organisational security measures specified in Appendix 2 below; +1. that after assessment of the requirements of the applicable data protection law, the security measures are appropriate to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing, and that these measures ensure a level of security appropriate to the risks presented by the processing and the nature of the data to be protected having regard to the state of the art and the cost of their implementation; +1. that it will ensure compliance with the security measures; +1. that, if the transfer involves special categories of data, the data subject has been informed or will be informed before, or as soon as possible after, the transfer that its data could be transmitted to a third country not providing adequate protection within the meaning of Directive 95/46/EC; +1. to forward any notification received from the data importer or any subprocessor pursuant to Clause 5(b) and Clause 8(3) to the data protection supervisory authority if the data exporter decides to continue the transfer or to lift the suspension; +1. to make available to the data subjects upon request a copy of the Clauses, with the exception of Appendix 2, and a summary description of the security measures, as well as a copy of any contract for subprocessing services which has to be made in accordance with the Clauses, unless the Clauses or the contract contain commercial information, in which case it may remove such commercial information; +1. that, in the event of subprocessing, the processing activity is carried out in accordance with Clause 11 by a subprocessor providing at least the same level of protection for the personal data and the rights of data subject as the data importer under the Clauses; and +1. that it will ensure compliance with Clause 4(a) to (i). -Clause 5: Obligations of the data importer +**Clause 5: Obligations of the data importer** The data importer agrees and warrants: -(a) to process the personal data only on behalf of the data exporter and in compliance with its instructions and the Clauses; if it cannot provide such compliance for whatever reasons, it agrees to inform promptly the data exporter of its inability to comply, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract; -(b) that it has no reason to believe that the legislation applicable to it prevents it from fulfilling the instructions received from the data exporter and its obligations under the contract and that in the event of a change in this legislation which is likely to have a substantial adverse effect on the warranties and obligations provided by the Clauses, it will promptly notify the change to the data exporter as soon as it is aware, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract; -(c) that it has implemented the technical and organisational security measures specified in Appendix 2 before processing the personal data transferred; -(d) that it will promptly notify the data exporter about: -(i) any legally binding request for disclosure of the personal data by a law enforcement authority unless otherwise prohibited, such as a prohibition under criminal law to preserve the confidentiality of a law enforcement investigation, -(ii) any accidental or unauthorised access, and -(iii) any request received directly from the data subjects without responding to that request, unless it has been otherwise authorised to do so; -(e) to deal promptly and properly with all inquiries from the data exporter relating to its processing of the personal data subject to the transfer and to abide by the advice of the supervisory authority with regard to the processing of the data transferred; -(f) at the request of the data exporter to submit its data processing facilities for audit of the processing activities covered by the Clauses which shall be carried out by the data exporter or an inspection body composed of independent members and in possession of the required professional qualifications bound by a duty of confidentiality, selected by the data exporter, where applicable, in agreement with the supervisory authority; -(g) to make available to the data subject upon request a copy of the Clauses, or any existing contract for subprocessing, unless the Clauses or contract contain commercial information, in which case it may remove such commercial information, with the exception of Appendix 2 which shall be replaced by a summary description of the security measures in those cases where the data subject is unable to obtain a copy from the data exporter; -(h) that, in the event of subprocessing, it has previously informed the data exporter and obtained its prior written consent; -(i) that the processing services by the subprocessor will be carried out in accordance with Clause 11; and -(j) to send promptly a copy of any subprocessor agreement it concludes under the Clauses to the data exporter. +1. to process the personal data only on behalf of the data exporter and in compliance with its instructions and the Clauses; if it cannot provide such compliance for whatever reasons, it agrees to inform promptly the data exporter of its inability to comply, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract; +1. that it has no reason to believe that the legislation applicable to it prevents it from fulfilling the instructions received from the data exporter and its obligations under the contract and that in the event of a change in this legislation which is likely to have a substantial adverse effect on the warranties and obligations provided by the Clauses, it will promptly notify the change to the data exporter as soon as it is aware, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract; +1. that it has implemented the technical and organisational security measures specified in Appendix 2 before processing the personal data transferred; +1. that it will promptly notify the data exporter about: + 1. any legally binding request for disclosure of the personal data by a law enforcement authority unless otherwise prohibited, such as a prohibition under criminal law to preserve the confidentiality of a law enforcement investigation, + 1. any accidental or unauthorised access, and + 1. any request received directly from the data subjects without responding to that request, unless it has been otherwise authorised to do so; +1. to deal promptly and properly with all inquiries from the data exporter relating to its processing of the personal data subject to the transfer and to abide by the advice of the supervisory authority with regard to the processing of the data transferred; +1. at the request of the data exporter to submit its data processing facilities for audit of the processing activities covered by the Clauses which shall be carried out by the data exporter or an inspection body composed of independent members and in possession of the required professional qualifications bound by a duty of confidentiality, selected by the data exporter, where applicable, in agreement with the supervisory authority; +1. to make available to the data subject upon request a copy of the Clauses, or any existing contract for subprocessing, unless the Clauses or contract contain commercial information, in which case it may remove such commercial information, with the exception of Appendix 2 which shall be replaced by a summary description of the security measures in those cases where the data subject is unable to obtain a copy from the data exporter; +1. that, in the event of subprocessing, it has previously informed the data exporter and obtained its prior written consent; +1. that the processing services by the subprocessor will be carried out in accordance with Clause 11; and +1. to send promptly a copy of any subprocessor agreement it concludes under the Clauses to the data exporter. -Clause 6: Liability +**Clause 6: Liability** 1. The parties agree that any data subject who has suffered damage as a result of any breach of the obligations referred to in Clause 3 or in Clause 11 by any party or subprocessor is entitled to receive compensation from the data exporter for the damage suffered. -2. If a data subject is not able to bring a claim for compensation in accordance with paragraph 1 against the data exporter, arising out of a breach by the data importer or his subprocessor of any of their obligations referred to in Clause 3 or in Clause 11, because the data exporter has factually disappeared or ceased to exist in law or has become insolvent, the data importer agrees that the data subject may issue a claim against the data importer as if it were the data exporter, unless any successor entity has assumed the entire legal obligations of the data exporter by contract of by operation of law, in which case the data subject can enforce its rights against such entity. +1. If a data subject is not able to bring a claim for compensation in accordance with paragraph 1 against the data exporter, arising out of a breach by the data importer or his subprocessor of any of their obligations referred to in Clause 3 or in Clause 11, because the data exporter has factually disappeared or ceased to exist in law or has become insolvent, the data importer agrees that the data subject may issue a claim against the data importer as if it were the data exporter, unless any successor entity has assumed the entire legal obligations of the data exporter by contract of by operation of law, in which case the data subject can enforce its rights against such entity. The data importer may not rely on a breach by a subprocessor of its obligations in order to avoid its own liabilities. -3. If a data subject is not able to bring a claim against the data exporter or the data importer referred to in paragraphs 1 and 2, arising out of a breach by the subprocessor of any of their obligations referred to in Clause 3 or in Clause 11 because both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, the subprocessor agrees that the data subject may issue a claim against the data subprocessor with regard to its own processing operations under the Clauses as if it were the data exporter or the data importer, unless any successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law, in which case the data subject can enforce its rights against such entity. The liability of the subprocessor shall be limited to its own processing operations under the Clauses. +1. If a data subject is not able to bring a claim against the data exporter or the data importer referred to in paragraphs 1 and 2, arising out of a breach by the subprocessor of any of their obligations referred to in Clause 3 or in Clause 11 because both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, the subprocessor agrees that the data subject may issue a claim against the data subprocessor with regard to its own processing operations under the Clauses as if it were the data exporter or the data importer, unless any successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law, in which case the data subject can enforce its rights against such entity. The liability of the subprocessor shall be limited to its own processing operations under the Clauses. -Clause 7: Mediation and jurisdiction +**Clause 7: Mediation and jurisdiction** 1. The data importer agrees that if the data subject invokes against it third-party beneficiary rights and/or claims compensation for damages under the Clauses, the data importer will accept the decision of the data subject: -(a) to refer the dispute to mediation, by an independent person or, where applicable, by the supervisory authority; -(b) to refer the dispute to the courts in the Member State in which the data exporter is established. -2. The parties agree that the choice made by the data subject will not prejudice its substantive or procedural rights to seek remedies in accordance with other provisions of national or international law. + 1. to refer the dispute to mediation, by an independent person or, where applicable, by the supervisory authority; + 1. to refer the dispute to the courts in the Member State in which the data exporter is established. +1. The parties agree that the choice made by the data subject will not prejudice its substantive or procedural rights to seek remedies in accordance with other provisions of national or international law. -Clause 8: Cooperation with supervisory authorities +**Clause 8: Cooperation with supervisory authorities** 1. The data exporter agrees to deposit a copy of this contract with the supervisory authority if it so requests or if such deposit is required under the applicable data protection law. -2. The parties agree that the supervisory authority has the right to conduct an audit of the data importer, and of any subprocessor, which has the same scope and is subject to the same conditions as would apply to an audit of the data exporter under the applicable data protection law. -3. The data importer shall promptly inform the data exporter about the existence of legislation applicable to it or any subprocessor preventing the conduct of an audit of the data importer, or any subprocessor, pursuant to paragraph 2. In such a case the data exporter shall be entitled to take the measures foreseen in Clause 5 (b). +1. The parties agree that the supervisory authority has the right to conduct an audit of the data importer, and of any subprocessor, which has the same scope and is subject to the same conditions as would apply to an audit of the data exporter under the applicable data protection law. +1. The data importer shall promptly inform the data exporter about the existence of legislation applicable to it or any subprocessor preventing the conduct of an audit of the data importer, or any subprocessor, pursuant to paragraph 2. In such a case the data exporter shall be entitled to take the measures foreseen in Clause 5 (b). -Clause 9: Governing Law +**Clause 9: Governing Law** The Clauses shall be governed by the law of the Member State in which the data exporter is established. -Clause 10: Variation of the contract +**Clause 10: Variation of the contract** The parties undertake not to vary or modify the Clauses. This does not preclude the parties from adding clauses on business related issues where required as long as they do not contradict the Clause. -Clause 11: Subprocessing +**Clause 11: Subprocessing** 1. The data importer shall not subcontract any of its processing operations performed on behalf of the data exporter under the Clauses without the prior written consent of the data exporter. Where the data importer subcontracts its obligations under the Clauses, with the consent of the data exporter, it shall do so only by way of a written agreement with the subprocessor which imposes the same obligations on the subprocessor as are imposed on the data importer under the Clauses. Where the subprocessor fails to fulfil its data protection obligations under such written agreement the data importer shall remain fully liable to the data exporter for the performance of the subprocessor's obligations under such agreement. -2. The prior written contract between the data importer and the subprocessor shall also provide for a third-party beneficiary clause as laid down in Clause 3 for cases where the data subject is not able to bring the claim for compensation referred to in paragraph 1 of Clause 6 against the data exporter or the data importer because they have factually disappeared or have ceased to exist in law or have become insolvent and no successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law. Such third-party liability of the subprocessor shall be limited to its own processing operations under the Clauses. -3. The provisions relating to data protection aspects for subprocessing of the contract referred to in paragraph 1 shall be governed by the law of the Member State in which the data exporter is established. -4. The data exporter shall keep a list of subprocessing agreements concluded under the Clauses and notified by the data importer pursuant to Clause 5 (j), which shall be updated at least once a year. The list shall be available to the data exporter's data protection supervisory authority. +1. The prior written contract between the data importer and the subprocessor shall also provide for a third-party beneficiary clause as laid down in Clause 3 for cases where the data subject is not able to bring the claim for compensation referred to in paragraph 1 of Clause 6 against the data exporter or the data importer because they have factually disappeared or have ceased to exist in law or have become insolvent and no successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law. Such third-party liability of the subprocessor shall be limited to its own processing operations under the Clauses. +1. The provisions relating to data protection aspects for subprocessing of the contract referred to in paragraph 1 shall be governed by the law of the Member State in which the data exporter is established. +1. The data exporter shall keep a list of subprocessing agreements concluded under the Clauses and notified by the data importer pursuant to Clause 5 (j), which shall be updated at least once a year. The list shall be available to the data exporter's data protection supervisory authority. -Clause 12: Obligation after the termination of personal data processing services +**Clause 12: Obligation after the termination of personal data processing services** 1. The parties agree that on the termination of the provision of data processing services, the data importer and the subprocessor shall, at the choice of the data exporter, return all the personal data transferred and the copies thereof to the data exporter or shall destroy all the personal data and certify to the data exporter that it has done so, unless legislation imposed upon the data importer prevents it from returning or destroying all or part of the personal data transferred. In that case, the data importer warrants that it will guarantee the confidentiality of the personal data transferred and will not actively process the personal data transferred anymore. -2. The data importer and the subprocessor warrant that upon request of the data exporter and/or of the supervisory authority, it will submit its data processing facilities for an audit of the measures referred to in paragraph 1. +1. The data importer and the subprocessor warrant that upon request of the data exporter and/or of the supervisory authority, it will submit its data processing facilities for an audit of the measures referred to in paragraph 1. -Appendix 1 to the Standard Contractual Clauses +**Appendix 1 to the Standard Contractual Clauses** -Data exporter: Customer is the data exporter. The data exporter is a user of the Services. +**Data exporter**: Customer is the data exporter. The data exporter is a user of the Services. -Data importer: The data importer is MICROSOFT CORPORATION, a global producer of software and services. +**Data importer**: The data importer is MICROSOFT CORPORATION, a global producer of software and services. -Data subjects: Data subjects include the data exporter’s representatives and end-users including employees, contractors, collaborators, and customers of the data exporter. Data subjects may also include individuals attempting to communicate or transfer personal information to users of the services provided by data importer. Microsoft acknowledges that, depending on Customer’s use of the Services, Customer may elect to include personal data from any of the following types of data subjects in the personal data: +**Data subjects**: Data subjects include the data exporter’s representatives and end-users including employees, contractors, collaborators, and customers of the data exporter. Data subjects may also include individuals attempting to communicate or transfer personal information to users of the services provided by data importer. Microsoft acknowledges that, depending on Customer’s use of the Services, Customer may elect to include personal data from any of the following types of data subjects in the personal data: * Employees, contractors and temporary workers (current, former, prospective) of data exporter; * Dependents of the above; @@ -282,7 +283,7 @@ Data subjects: Data subjects include the data exporter’s representatives and e * Minors; or * Professionals with professional privilege (e.g., doctors, lawyers, notaries, religious workers, etc.). -Categories of data: The personal data transferred that is included in data processed by the Services. Microsoft acknowledges that, depending on Customer’s use of the Services, Customer may elect to include personal data from any of the following categories in the personal data: +**Categories of data**: The personal data transferred that is included in data processed by the Services. Microsoft acknowledges that, depending on Customer’s use of the Services, Customer may elect to include personal data from any of the following categories in the personal data: * Basic personal data (for example place of birth, street name and house number (address), postal code, city of residence, country of residence, mobile phone number, first name, last name, initials, email address, gender, date of birth), including basic personal data about family members and children; * Authentication data (for example user name, password or PIN code, security question, audit trail); @@ -304,24 +305,24 @@ Categories of data: The personal data transferred that is included in data proce * Special categories of data (for example racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health, data concerning a natural person’s sex life or sexual orientation, or data relating to criminal convictions or offences); or * Any other personal data identified in Article 4 of the GDPR. -Processing operations: The personal data transferred will be subject to the following basic processing activities: +**Processing operations**: The personal data transferred will be subject to the following basic processing activities: -a. Duration and Object of Data Processing. The duration of data processing shall be for the term of the Preview. The objective of the data processing is the performance of the Services. -b. Scope and Purpose of Data Processing. The scope and purpose of processing personal data is described in Section 5 of this agreement. The data importer operates a global network of data centers and management/support facilities, and processing may take place in any jurisdiction where data importer or its sub-processors operate such facilities. -c. Customer Data and Personal Data Access. For the term designated under the applicable volume licensing agreement data importer will at its election and as necessary under applicable law implementing Article 12(b) of the EU Data Protection Directive, either: (1) provide data exporter with the ability to correct, delete, or block Customer Data and personal data, or (2) make such corrections, deletions, or blockages on its behalf. -d. Data Exporter’s Instructions. For Online Services and Professional Services, data importer will only act upon data exporter’s instructions as conveyed by Microsoft. -e. Preview Data and Personal Data Deletion or Return. Upon expiration or termination of data exporter’s use of the Services, it may extract Customer Data and personal data and data importer will delete Customer Data and personal data, each in accordance with the terms of this agreement. +1. **Duration and Object of Data Processing**. The duration of data processing shall be for the term of the Preview. The objective of the data processing is the performance of the Services. +1. **Scope and Purpose of Data Processing**. The scope and purpose of processing personal data is described in Section 5 of this agreement. The data importer operates a global network of data centers and management/support facilities, and processing may take place in any jurisdiction where data importer or its sub-processors operate such facilities. +1. **Customer Data and Personal Data Access**. For the term designated under the applicable volume licensing agreement data importer will at its election and as necessary under applicable law implementing Article 12(b) of the EU Data Protection Directive, either: (1) provide data exporter with the ability to correct, delete, or block Customer Data and personal data, or (2) make such corrections, deletions, or blockages on its behalf. +1. **Data Exporter’s Instructions**. For Online Services and Professional Services, data importer will only act upon data exporter’s instructions as conveyed by Microsoft. +1. **Preview Data and Personal Data Deletion or Return**. Upon expiration or termination of data exporter’s use of the Services, it may extract Customer Data and personal data and data importer will delete Customer Data and personal data, each in accordance with the terms of this agreement. -Subcontractors: In accordance with the DPA, the data importer may hire other companies to provide limited services on data importer’s behalf, such as providing customer support. Any such subcontractors will be permitted to obtain Customer Data and personal data only to deliver the services the data importer has retained them to provide, and they are prohibited from using Customer Data and personal data for any other purpose. +**Subcontractors**: In accordance with the DPA, the data importer may hire other companies to provide limited services on data importer’s behalf, such as providing customer support. Any such subcontractors will be permitted to obtain Customer Data and personal data only to deliver the services the data importer has retained them to provide, and they are prohibited from using Customer Data and personal data for any other purpose. -Appendix 2 to the Standard Contractual Clauses +**Appendix 2 to the Standard Contractual Clauses** Description of the technical and organizational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c): -1. Personnel. Data importer’s personnel will not process Preview Data or personal data without authorization. Personnel are obligated to maintain the confidentiality of any such Preview Data and personal data and this obligation continues even after their engagement ends. -2. Data Privacy Contact. The data privacy officer of the data importer can be reached at the following address: +1. **Personnel**. Data importer’s personnel will not process Preview Data or personal data without authorization. Personnel are obligated to maintain the confidentiality of any such Preview Data and personal data and this obligation continues even after their engagement ends. +2. **Data Privacy Contact**. The data privacy officer of the data importer can be reached at the following address: Microsoft Corporation Attn: Chief Privacy Officer 1 Microsoft Way Redmond, WA 98052 USA -3. Technical and Organization Measures. The data importer has implemented and will maintain appropriate technical and organizational measures, internal controls, and information security routines intended to protect Preview Data and personal data, as defined in Attachment 1 of this agreement, against accidental loss, destruction, or alteration; unauthorized disclosure or access; or unlawful destruction as follows: The technical and organizational measures, internal controls, and information security routines set forth in Attachment 1 of this agreement are hereby incorporated into this Appendix 2 by this reference and are binding on the data importer as if they were set forth in this Appendix 2 in their entirety. +3. **Technical and Organization Measures**. The data importer has implemented and will maintain appropriate technical and organizational measures, internal controls, and information security routines intended to protect Preview Data and personal data, as defined in Attachment 1 of this agreement, against accidental loss, destruction, or alteration; unauthorized disclosure or access; or unlawful destruction as follows: The technical and organizational measures, internal controls, and information security routines set forth in Attachment 1 of this agreement are hereby incorporated into this Appendix 2 by this reference and are binding on the data importer as if they were set forth in this Appendix 2 in their entirety. From 15ac633b3f36565b004041860c916506277d3702 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Wed, 22 Jul 2020 23:15:01 -0700 Subject: [PATCH 334/589] fixing some item numbering issues --- ...vice-for-windows-enterprise-public-preview-terms.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/privacy/data-processor-service-for-windows-enterprise-public-preview-terms.md b/windows/privacy/data-processor-service-for-windows-enterprise-public-preview-terms.md index 7661bf8954..408f9cf05f 100644 --- a/windows/privacy/data-processor-service-for-windows-enterprise-public-preview-terms.md +++ b/windows/privacy/data-processor-service-for-windows-enterprise-public-preview-terms.md @@ -190,7 +190,7 @@ The details of the transfer and in particular the special categories of personal 1. The data subject can enforce against the data exporter this Clause, Clause 4(2) to (9), Clause 5(1) to (5), and (7) to (10), Clause 6(1) and (2), Clause 7, Clause 8(2), and Clauses 9 to 12 as third-party beneficiary. 2.1.exist in law unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law, as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity. -1. The data subject can enforce against the subprocessor this Clause, Clause 5(a) to (e) and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity. Such third-party liability of the subprocessor shall be limited to its own processing operations under the Clauses. +1. The data subject can enforce against the subprocessor this Clause, Clause 5(1) to (5) and (7), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity. Such third-party liability of the subprocessor shall be limited to its own processing operations under the Clauses. 1. The parties do not object to a data subject being represented by an association or other body if the data subject so expressly wishes and if permitted by national law. **Clause 4: Obligations of the data exporter** @@ -203,10 +203,10 @@ The data exporter agrees and warrants: 1. that after assessment of the requirements of the applicable data protection law, the security measures are appropriate to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing, and that these measures ensure a level of security appropriate to the risks presented by the processing and the nature of the data to be protected having regard to the state of the art and the cost of their implementation; 1. that it will ensure compliance with the security measures; 1. that, if the transfer involves special categories of data, the data subject has been informed or will be informed before, or as soon as possible after, the transfer that its data could be transmitted to a third country not providing adequate protection within the meaning of Directive 95/46/EC; -1. to forward any notification received from the data importer or any subprocessor pursuant to Clause 5(b) and Clause 8(3) to the data protection supervisory authority if the data exporter decides to continue the transfer or to lift the suspension; +1. to forward any notification received from the data importer or any subprocessor pursuant to Clause 5(2) and Clause 8(3) to the data protection supervisory authority if the data exporter decides to continue the transfer or to lift the suspension; 1. to make available to the data subjects upon request a copy of the Clauses, with the exception of Appendix 2, and a summary description of the security measures, as well as a copy of any contract for subprocessing services which has to be made in accordance with the Clauses, unless the Clauses or the contract contain commercial information, in which case it may remove such commercial information; 1. that, in the event of subprocessing, the processing activity is carried out in accordance with Clause 11 by a subprocessor providing at least the same level of protection for the personal data and the rights of data subject as the data importer under the Clauses; and -1. that it will ensure compliance with Clause 4(a) to (i). +1. that it will ensure compliance with Clause 4(1) to (9). **Clause 5: Obligations of the data importer** @@ -244,7 +244,7 @@ The data importer may not rely on a breach by a subprocessor of its obligations 1. The data exporter agrees to deposit a copy of this contract with the supervisory authority if it so requests or if such deposit is required under the applicable data protection law. 1. The parties agree that the supervisory authority has the right to conduct an audit of the data importer, and of any subprocessor, which has the same scope and is subject to the same conditions as would apply to an audit of the data exporter under the applicable data protection law. -1. The data importer shall promptly inform the data exporter about the existence of legislation applicable to it or any subprocessor preventing the conduct of an audit of the data importer, or any subprocessor, pursuant to paragraph 2. In such a case the data exporter shall be entitled to take the measures foreseen in Clause 5 (b). +1. The data importer shall promptly inform the data exporter about the existence of legislation applicable to it or any subprocessor preventing the conduct of an audit of the data importer, or any subprocessor, pursuant to paragraph 2. In such a case the data exporter shall be entitled to take the measures foreseen in Clause 5 (2). **Clause 9: Governing Law** @@ -317,7 +317,7 @@ The parties undertake not to vary or modify the Clauses. This does not preclude **Appendix 2 to the Standard Contractual Clauses** -Description of the technical and organizational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c): +Description of the technical and organizational security measures implemented by the data importer in accordance with Clauses 4(4) and 5(3): 1. **Personnel**. Data importer’s personnel will not process Preview Data or personal data without authorization. Personnel are obligated to maintain the confidentiality of any such Preview Data and personal data and this obligation continues even after their engagement ends. 2. **Data Privacy Contact**. The data privacy officer of the data importer can be reached at the following address: From 8942236fcd2476d1d789db06154da47d70b9b3fc Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Wed, 22 Jul 2020 23:15:51 -0700 Subject: [PATCH 335/589] fixing list at the end --- ...r-service-for-windows-enterprise-public-preview-terms.md | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/windows/privacy/data-processor-service-for-windows-enterprise-public-preview-terms.md b/windows/privacy/data-processor-service-for-windows-enterprise-public-preview-terms.md index 408f9cf05f..11aacc5fb8 100644 --- a/windows/privacy/data-processor-service-for-windows-enterprise-public-preview-terms.md +++ b/windows/privacy/data-processor-service-for-windows-enterprise-public-preview-terms.md @@ -320,9 +320,5 @@ The parties undertake not to vary or modify the Clauses. This does not preclude Description of the technical and organizational security measures implemented by the data importer in accordance with Clauses 4(4) and 5(3): 1. **Personnel**. Data importer’s personnel will not process Preview Data or personal data without authorization. Personnel are obligated to maintain the confidentiality of any such Preview Data and personal data and this obligation continues even after their engagement ends. -2. **Data Privacy Contact**. The data privacy officer of the data importer can be reached at the following address: -Microsoft Corporation -Attn: Chief Privacy Officer -1 Microsoft Way -Redmond, WA 98052 USA +2. **Data Privacy Contact**. The data privacy officer of the data importer can be reached at the following address:
Microsoft Corporation
Attn: Chief Privacy Officer
1 Microsoft Way
Redmond, WA 98052 USA 3. **Technical and Organization Measures**. The data importer has implemented and will maintain appropriate technical and organizational measures, internal controls, and information security routines intended to protect Preview Data and personal data, as defined in Attachment 1 of this agreement, against accidental loss, destruction, or alteration; unauthorized disclosure or access; or unlawful destruction as follows: The technical and organizational measures, internal controls, and information security routines set forth in Attachment 1 of this agreement are hereby incorporated into this Appendix 2 by this reference and are binding on the data importer as if they were set forth in this Appendix 2 in their entirety. From 5c6a742b7c6eb6a5008df81c10568c2c4311158e Mon Sep 17 00:00:00 2001 From: EfiKliger <45028856+EfiKliger@users.noreply.github.com> Date: Thu, 23 Jul 2020 09:25:23 +0300 Subject: [PATCH 336/589] Update get-machines.md --- .../threat-protection/microsoft-defender-atp/get-machines.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-machines.md index 74c8253d5d..75f9f0e49d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machines.md @@ -31,7 +31,7 @@ Retrieves a collection of [Machines](machine.md) that have communicated with Mi ## Limitations -1. You can get devices last seen in the past 30 days. +1. You can get devices last seen in according to your configured retention period. 2. Maximum page size is 10,000. 3. Rate limitations for this API are 100 calls per minute and 1500 calls per hour. From d6dfcd8fcef7848eb49bb61b3f83a180d83c3554 Mon Sep 17 00:00:00 2001 From: EfiKliger <45028856+EfiKliger@users.noreply.github.com> Date: Thu, 23 Jul 2020 09:26:56 +0300 Subject: [PATCH 337/589] Update get-alerts.md --- .../threat-protection/microsoft-defender-atp/get-alerts.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-alerts.md index b86855ce76..f13f6270fd 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alerts.md @@ -35,7 +35,7 @@ Retrieves a collection of Alerts. ## Limitations -1. You can get alerts last updated in the past 30 days. +1. You can get alerts last updated according to your configured retention period. 2. Maximum page size is 10,000. 3. Rate limitations for this API are 100 calls per minute and 1500 calls per hour. From 34b29289df62eca4f2019a015b12cbdd284734bb Mon Sep 17 00:00:00 2001 From: EfiKliger <45028856+EfiKliger@users.noreply.github.com> Date: Thu, 23 Jul 2020 09:28:34 +0300 Subject: [PATCH 338/589] Update get-alert-info-by-id.md --- .../microsoft-defender-atp/get-alert-info-by-id.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-info-by-id.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-info-by-id.md index 2f61ccb373..e4ecad3ffa 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-info-by-id.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-info-by-id.md @@ -28,7 +28,7 @@ Retrieves specific [Alert](alerts.md) by its ID. ## Limitations -1. You can get alerts last updated in the past 30 days. +1. You can get alerts last updated according to your configured retention period. 2. Rate limitations for this API are 100 calls per minute and 1500 calls per hour. From 979bb0f2f3b61c53dae1c9b110b2da8a29bb6019 Mon Sep 17 00:00:00 2001 From: EfiKliger <45028856+EfiKliger@users.noreply.github.com> Date: Thu, 23 Jul 2020 09:29:48 +0300 Subject: [PATCH 339/589] Update get-alert-related-domain-info.md --- .../microsoft-defender-atp/get-alert-related-domain-info.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-domain-info.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-domain-info.md index c9c257c1e1..ac7cf2410a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-domain-info.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-domain-info.md @@ -28,7 +28,7 @@ Retrieves all domains related to a specific alert. ## Limitations -1. You can query on alerts last updated in the past 30 days. +1. You can query on alerts last updated according to your configured retention period. 2. Rate limitations for this API are 100 calls per minute and 1500 calls per hour. From 5320d9736362c03729dff099b0e94c588ad0b9f8 Mon Sep 17 00:00:00 2001 From: EfiKliger <45028856+EfiKliger@users.noreply.github.com> Date: Thu, 23 Jul 2020 09:31:00 +0300 Subject: [PATCH 340/589] Update get-alert-related-files-info.md --- .../microsoft-defender-atp/get-alert-related-files-info.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-files-info.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-files-info.md index d99712033f..519afaa0e3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-files-info.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-files-info.md @@ -28,7 +28,7 @@ Retrieves all files related to a specific alert. ## Limitations -1. You can query on alerts last updated in the past 30 days. +1. You can query on alerts last updated according to your configured retention period. 2. Rate limitations for this API are 100 calls per minute and 1500 calls per hour. From e3f0e8ecfea7641af97bf20fa2e7b357ce9aff1e Mon Sep 17 00:00:00 2001 From: EfiKliger <45028856+EfiKliger@users.noreply.github.com> Date: Thu, 23 Jul 2020 09:32:17 +0300 Subject: [PATCH 341/589] Update get-alert-related-ip-info.md --- .../microsoft-defender-atp/get-alert-related-ip-info.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-ip-info.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-ip-info.md index 812e285986..cf783ffeda 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-ip-info.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-ip-info.md @@ -28,7 +28,7 @@ Retrieves all IPs related to a specific alert. ## Limitations -1. You can query on alerts last updated in the past 30 days. +1. You can query on alerts last updated according to your configured retention period. 2. Rate limitations for this API are 100 calls per minute and 1500 calls per hour. From 5ad4823330d01a7b7a9869889a338ddd0919088e Mon Sep 17 00:00:00 2001 From: EfiKliger <45028856+EfiKliger@users.noreply.github.com> Date: Thu, 23 Jul 2020 09:33:19 +0300 Subject: [PATCH 342/589] Update get-alert-related-machine-info.md --- .../microsoft-defender-atp/get-alert-related-machine-info.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-machine-info.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-machine-info.md index b3e69abaa7..2b030497a2 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-machine-info.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-machine-info.md @@ -28,7 +28,7 @@ Retrieves [Device](machine.md) related to a specific alert. ## Limitations -1. You can query on alerts last updated in the past 30 days. +1. You can query on alerts last updated according to your configured retention period. 2. Rate limitations for this API are 100 calls per minute and 1500 calls per hour. From a031e36fe4e43e6544cb0a84c960746ca4301d95 Mon Sep 17 00:00:00 2001 From: EfiKliger <45028856+EfiKliger@users.noreply.github.com> Date: Thu, 23 Jul 2020 09:34:13 +0300 Subject: [PATCH 343/589] Update get-alert-related-user-info.md --- .../microsoft-defender-atp/get-alert-related-user-info.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-user-info.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-user-info.md index f51040eab2..982e2a2585 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-user-info.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-user-info.md @@ -28,7 +28,7 @@ Retrieves the User related to a specific alert. ## Limitations -1. You can query on alerts last updated in the past 30 days. +1. You can query on alerts last updated according to your configured retention period. 2. Rate limitations for this API are 100 calls per minute and 1500 calls per hour. From b44124d110f3dfb9b1b6ddb17076766c29c2f016 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 23 Jul 2020 08:05:53 -0700 Subject: [PATCH 344/589] Update manage-atp-post-migration-configuration-manager.md --- .../manage-atp-post-migration-configuration-manager.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index 09fb124b18..9652006b5f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -24,7 +24,7 @@ ms.topic: article We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). However, you can also use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage Microsoft Defender ATP. Configuration Manager and Microsoft Intune are both part of Microsoft Endpoint Manager, together with Desktop Analytics, and other features & capabilities. - [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview) -- [See how you can manage Microsoft Defender ATP with Intune](manage-atp-post-migration-intune.md) +- [Co-manage Microsoft Defender ATP on Windows 10 devices with Configuration Manager and Intune](manage-atp-post-migration-intune.md) ## Configure Microsoft Defender ATP with Configuration Manager From 7fa558f95599b1c99f01c3dfc768ec2eb9c01318 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 23 Jul 2020 08:11:45 -0700 Subject: [PATCH 345/589] Update manage-atp-post-migration-configuration-manager.md --- .../manage-atp-post-migration-configuration-manager.md | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index 9652006b5f..e2a6164549 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -28,13 +28,11 @@ We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fund ## Configure Microsoft Defender ATP with Configuration Manager -The following table lists various tasks you can perform to configure Microsoft Defender ATP with Intune. Choose a task, read the corresponding resources, and then proceed from there, at your pace. - - |Task |Resources to learn more | |---------|---------| +|Install the Configuration Manager console |[Get the installation media](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/get-install-media)

[Install the Configuration Manager console](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/install-consoles) | |Manage your organization's devices using Configuration Manager

|[Configuration Manager: Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection)

[Onboarding to Microsoft Defender ATP with Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection#about-onboarding-to-atp-with-configuration-manager) | -|task |link | +|manages antimalware policies and Windows Firewall security for client computers |link | ## Related articles From 4184ae1ff3370319141b8697554f48f37c466d71 Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Thu, 23 Jul 2020 08:13:13 -0700 Subject: [PATCH 346/589] updated github author name --- windows/privacy/manage-windows-1903-endpoints.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/manage-windows-1903-endpoints.md b/windows/privacy/manage-windows-1903-endpoints.md index 580f8b4425..af34673c47 100644 --- a/windows/privacy/manage-windows-1903-endpoints.md +++ b/windows/privacy/manage-windows-1903-endpoints.md @@ -7,7 +7,7 @@ ms.mktglfcycl: manage ms.sitesec: library ms.localizationpriority: high audience: ITPro -author: obezeajo +author: linque1 ms.author: obezeajo manager: robsize ms.collection: M365-security-compliance From 43df8046af7c496c3122bca6ef57aa871e846aed Mon Sep 17 00:00:00 2001 From: Ronald Aigner Date: Thu, 23 Jul 2020 08:22:14 -0700 Subject: [PATCH 347/589] remove Infineon from list of firmware TPMs The text mentions Firmware TPMs for which Windows needs to be able to fetch EK certificates during Autopilot deployment. Infineon does not produce firmware TPMs and EK certificates for Infineon TPMs do not need to be fetched from an online service. --- .../windows-autopilot/windows-autopilot-requirements.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/windows-autopilot-requirements.md b/windows/deployment/windows-autopilot/windows-autopilot-requirements.md index a71d3bbd39..c1ce8c7759 100644 --- a/windows/deployment/windows-autopilot/windows-autopilot-requirements.md +++ b/windows/deployment/windows-autopilot/windows-autopilot-requirements.md @@ -95,7 +95,6 @@ If the Microsoft Store is not accessible, the Autopilot process will still conti
Intel- https://ekop.intel.com/ekcertservice
Qualcomm- https://ekcert.spserv.microsoft.com/EKCertificate/GetEKCertificate/v1
AMD- https://ftpm.amd.com/pki/aia -
Infineon- https://pki.infineon.com

## Licensing requirements From 9d652ff975461aba717f0f2d942674b3ddbd962f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 23 Jul 2020 08:32:47 -0700 Subject: [PATCH 348/589] Update manage-atp-post-migration-configuration-manager.md --- ...age-atp-post-migration-configuration-manager.md | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index e2a6164549..ca4bee2557 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -31,11 +31,13 @@ We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fund |Task |Resources to learn more | |---------|---------| |Install the Configuration Manager console |[Get the installation media](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/get-install-media)

[Install the Configuration Manager console](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/install-consoles) | -|Manage your organization's devices using Configuration Manager

|[Configuration Manager: Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection)

[Onboarding to Microsoft Defender ATP with Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection#about-onboarding-to-atp-with-configuration-manager) | -|manages antimalware policies and Windows Firewall security for client computers |link | - -## Related articles - -[Manage Microsoft Defender ATP with Intune](manage-atp-post-migration-intune.md) +|Manage your organization's devices using Configuration Manager

|[Onboarding to Microsoft Defender ATP with Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection#about-onboarding-to-atp-with-configuration-manager) | +|Manage antimalware policies and Windows Firewall security for client computers |[Configuration Manager: Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) | ## Next steps + +- [Get an overview of threat and vulnerability management](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt) + +- [Visit the Microsoft Defender Security Center security operations dashboard](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard) + +- [Manage Microsoft Defender ATP with Intune](manage-atp-post-migration-intune.md) From 0491cd8ee5b878e39d0a5392dedba3faa91ca1a8 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 23 Jul 2020 08:37:02 -0700 Subject: [PATCH 349/589] more updates/fixes --- .../manage-atp-post-migration-configuration-manager.md | 2 +- .../manage-atp-post-migration-group-policy-objects.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index ca4bee2557..fae1ba5590 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -22,7 +22,7 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). However, you can also use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage Microsoft Defender ATP. Configuration Manager and Microsoft Intune are both part of Microsoft Endpoint Manager, together with Desktop Analytics, and other features & capabilities. +We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). However, you can also use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage Microsoft Defender ATP. Both Configuration Manager and Microsoft Intune are part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), together with Desktop Analytics, and other features & capabilities. - [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview) - [Co-manage Microsoft Defender ATP on Windows 10 devices with Configuration Manager and Intune](manage-atp-post-migration-intune.md) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md index 68c12f8a37..3cf71e593d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -22,7 +22,7 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -We recommend using PowerShell to manage threat protection features for the devices (also referred to as endpoints) within your organization. +We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). However, you can also use Group Policy Objects in Azure Active Directory Domain Services. ## Configuring Microsoft Defender ATP with Group Policy Objects From a3fc05a7eb3014f533fc60570182883dd07d157b Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 23 Jul 2020 08:37:37 -0700 Subject: [PATCH 350/589] Update manage-atp-post-migration-intune.md --- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 9cfa77689d..db8a36ec1c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -22,7 +22,7 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -We recommend using Microsoft Intune to manage your organization's threat protection features for devices (also referred to as endpoints). Intune is part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), along with Configuration Manager, Desktop Analytics, and other features & capabilities. [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). +We recommend using Microsoft Intune to manage your organization's threat protection features for devices (also referred to as endpoints). Intune is part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), along with Configuration Manager, Desktop Analytics, and other features & capabilities. [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). ## Find your Microsoft Defender ATP settings in Intune From 7d0988c84890a3ce5dce6d1978faf3df794a5e8e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 23 Jul 2020 08:55:45 -0700 Subject: [PATCH 351/589] more meat to the guide --- ...anage-atp-post-migration-configuration-manager.md | 2 +- ...manage-atp-post-migration-group-policy-objects.md | 12 ++++++++++-- 2 files changed, 11 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index fae1ba5590..9e5ff22dc2 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -31,7 +31,7 @@ We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fund |Task |Resources to learn more | |---------|---------| |Install the Configuration Manager console |[Get the installation media](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/get-install-media)

[Install the Configuration Manager console](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/install-consoles) | -|Manage your organization's devices using Configuration Manager

|[Onboarding to Microsoft Defender ATP with Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection#about-onboarding-to-atp-with-configuration-manager) | +|Manage your organization's devices using Configuration Manager

|[Onboard to Microsoft Defender ATP with Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection#about-onboarding-to-atp-with-configuration-manager) | |Manage antimalware policies and Windows Firewall security for client computers |[Configuration Manager: Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) | ## Next steps diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md index 3cf71e593d..45114879b9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -30,6 +30,14 @@ The following table lists various tasks you can perform to configure Microsoft D |Task |Resources to learn more | |---------|---------| -|task |link | -|task |link | +|**Manage settings for user and computer objects**

*Customize built-in Group Policy Objects, or create custom Group Policy Objects and organizational units to suit your organizational needs.* |[Administer Group Policy in an Azure Active Directory Domain Services managed domain](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy) | +|**Configure Microsoft Defender Antivirus**

*Configure antivirus features & capabilities, including policy settings, exclusions, remediation, and scheduled scans on your organization's devices (also referred to as endpoints).* |[Use Group Policy settings to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus) | +|**Manage your organization's attack surface reduction rules**

*Customize your attack surface reduction rules by excluding files & folders, or by adding custom text to notification alerts that appear on a users' devices.* |[Customize attack surface reduction rules with Group Policy Objects](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-attack-surface-reduction#use-group-policy-to-exclude-files-and-folders) | +## Next steps + +- [Get an overview of threat and vulnerability management](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt) + +- [Visit the Microsoft Defender Security Center security operations dashboard](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard) + +- [Manage Microsoft Defender ATP with Intune](manage-atp-post-migration-intune.md) From e5e84eebd13eb910100f8994f4897d8b7726c941 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 23 Jul 2020 20:57:05 +0500 Subject: [PATCH 352/589] Addition of the content As suggested by user, the best place I feel is to place the primary page link here under the related topics so I have added the link. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/6422#issuecomment-662484547 --- .../use-powershell-cmdlets-microsoft-defender-antivirus.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md index de3c6cfb93..c03a3e259f 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md @@ -59,3 +59,4 @@ Omit the `-online` parameter to get locally cached help. - [Reference topics for management and configuration tools](configuration-management-reference-microsoft-defender-antivirus.md) - [Microsoft Defender Antivirus in Windows 10](microsoft-defender-antivirus-in-windows-10.md) +- [Microsoft Defender Antivirus Cmdlets](https://docs.microsoft.com/powershell/module/defender/?view=win10-ps) From 8a79ee1c7561187e94dfccb573825b4f9f474af5 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 23 Jul 2020 09:05:50 -0700 Subject: [PATCH 353/589] Update manage-atp-post-migration-other-tools.md --- .../manage-atp-post-migration-other-tools.md | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index 045bca7db0..fcb13b1db5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -31,6 +31,9 @@ You can, however, use other tools/methods to perform some tasks, such as managin - [Windows Management Instrumentation](#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi) (WMI) - [The Microsoft Malware Protection Command Line Utility](#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe) (MPCmdRun.exe) +> [!NOTE] +> Threat protection features that you configure by using PowerShell, WMI, or MCPmdRun.exe can be overwritten by configuration settings that are deployed with Intune or Configuration Manager. + ## Configure Microsoft Defender ATP with PowerShell You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. @@ -38,8 +41,8 @@ You can use PowerShell to manage Microsoft Defender Antivirus, exploit protectio |Task |Resources to learn more | |---------|---------| |Manage Microsoft Defender Antivirus |[Use PowerShell cmdlets to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus) | -|Configure exploit protection | | -|Configure attack surface reduction rules | | +|Configure exploit protection | [Customize exploit protection: PowerShell reference](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection#powershell-reference) | +|Configure attack surface reduction rules

*You can use PowerShell to exclude files and folders from attack surface reduction rules.* |[Customize attack surface reduction rules: Use PowerShell to exclude files & folders](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-attack-surface-reduction#use-powershell-to-exclude-files-and-folders) | ## Configure Microsoft Defender ATP with Windows Management Instrumentation (WMI) @@ -60,3 +63,5 @@ steps - [Get an overview of threat and vulnerability management](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt) - [Visit the Microsoft Defender Security Center security operations dashboard](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard) + +- [Manage Microsoft Defender ATP with Intune](manage-atp-post-migration-intune.md) From dea940404a1030eebde2941a07ff9863773e37ff Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 23 Jul 2020 09:09:42 -0700 Subject: [PATCH 354/589] Update manage-atp-post-migration-other-tools.md --- .../manage-atp-post-migration-other-tools.md | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index fcb13b1db5..540d4567f0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -26,10 +26,7 @@ When it comes to managing your organization's threat protection features in Micr - [Manage Microsoft Defender ATP with Intune](manage-atp-post-migration-intune.md) - [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md) -You can, however, use other tools/methods to perform some tasks, such as managing Microsoft Defender Antivirus settings. These tools/methods include: -- [PowerShell](#configure-microsoft-defender-atp-with-powershell) -- [Windows Management Instrumentation](#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi) (WMI) -- [The Microsoft Malware Protection Command Line Utility](#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe) (MPCmdRun.exe) +You can, however, use other tools/methods to perform some tasks. Examples include managing Microsoft Defender Antivirus settings and customizing attack surface reduction rules. These other tools/methods include [PowerShell](#configure-microsoft-defender-atp-with-powershell), [Windows Management Instrumentation](#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi) (WMI), and [The Microsoft Malware Protection Command Line Utility](#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe) (MPCmdRun.exe). > [!NOTE] > Threat protection features that you configure by using PowerShell, WMI, or MCPmdRun.exe can be overwritten by configuration settings that are deployed with Intune or Configuration Manager. From 953601c39960b774a1fdb77d870b3e787d77d42a Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 23 Jul 2020 21:24:49 +0500 Subject: [PATCH 355/589] Few Changes in the instruction As suggested by the user, I have made a few changes to adjust the instructions. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/7103 --- .../wdsc-hide-notifications.md | 21 +++++++++---------- 1 file changed, 10 insertions(+), 11 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-security-center/wdsc-hide-notifications.md b/windows/security/threat-protection/windows-defender-security-center/wdsc-hide-notifications.md index 72bdb507cf..0b059a219d 100644 --- a/windows/security/threat-protection/windows-defender-security-center/wdsc-hide-notifications.md +++ b/windows/security/threat-protection/windows-defender-security-center/wdsc-hide-notifications.md @@ -53,7 +53,7 @@ This can only be done in Group Policy. >[!IMPORTANT] > -> Requirement: You must have Windows 10, version 1903. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. +> Requirement: You must have Windows 10, version 1903 or higher. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. 1. Download the latest [Administrative Templates (.admx) for Windows 10, v2004](https://www.microsoft.com/download/101445). @@ -76,7 +76,7 @@ This can only be done in Group Policy. >[!IMPORTANT] > -> Requirement: You must have Windows 10, version 1903. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. +> Requirement: You must have Windows 10, version 1903 or higher. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. 1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**. @@ -89,17 +89,16 @@ This can only be done in Group Policy. 6. Open the **Hide all notifications** setting and set it to **Enabled**. Click **OK**. -7. Use the following registry key and DWORD value to **Hide all notifications**. - - **[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications]** +7. [Deploy the updated GPO as you normally do](https://msdn.microsoft.com/library/ee663280(v=vs.85).aspx). + +> [!NOTE] +> You can use the following registry key and DWORD value to **Hide all notifications**. +> **[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications]** **"DisableNotifications"=dword:00000001** - -8. Use the following registry key and DWORD value to **Hide not-critical notifications**. - - **[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications]** +> You can use the following registry key and DWORD value to **Hide not-critical notifications**. +>**[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications]** **"DisableEnhancedNotifications"=dword:00000001** - -9. [Deploy the updated GPO as you normally do](https://msdn.microsoft.com/library/ee663280(v=vs.85).aspx). + ## Notifications From a704ad35c8eb1ce2d24019ff1bad34c7f02fb9d6 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 23 Jul 2020 09:26:39 -0700 Subject: [PATCH 356/589] continuing work on the guide --- ...-atp-post-migration-configuration-manager.md | 6 +++--- .../manage-atp-post-migration-other-tools.md | 17 +++++++++++------ 2 files changed, 14 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index 9e5ff22dc2..e88562413c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -30,9 +30,9 @@ We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fund |Task |Resources to learn more | |---------|---------| -|Install the Configuration Manager console |[Get the installation media](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/get-install-media)

[Install the Configuration Manager console](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/install-consoles) | -|Manage your organization's devices using Configuration Manager

|[Onboard to Microsoft Defender ATP with Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection#about-onboarding-to-atp-with-configuration-manager) | -|Manage antimalware policies and Windows Firewall security for client computers |[Configuration Manager: Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) | +|**Install the Configuration Manager console** |[Get the installation media](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/get-install-media)

[Install the Configuration Manager console](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/install-consoles) | +|**Manage your organization's devices using Configuration Manager**

|[Onboard to Microsoft Defender ATP with Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection#about-onboarding-to-atp-with-configuration-manager) | +|**Manage antimalware policies and Windows Firewall security for client computers** |[Configuration Manager: Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) | ## Next steps diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index 540d4567f0..d6c7dab5ec 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -37,22 +37,27 @@ You can use PowerShell to manage Microsoft Defender Antivirus, exploit protectio |Task |Resources to learn more | |---------|---------| -|Manage Microsoft Defender Antivirus |[Use PowerShell cmdlets to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus) | -|Configure exploit protection | [Customize exploit protection: PowerShell reference](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection#powershell-reference) | -|Configure attack surface reduction rules

*You can use PowerShell to exclude files and folders from attack surface reduction rules.* |[Customize attack surface reduction rules: Use PowerShell to exclude files & folders](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-attack-surface-reduction#use-powershell-to-exclude-files-and-folders) | +|**Manage Microsoft Defender Antivirus** |[Use PowerShell cmdlets to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus) | +|**Configure exploit protection** | [Customize exploit protection: PowerShell reference](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection#powershell-reference) | +|**Configure attack surface reduction rules**

*You can use PowerShell to exclude files and folders from attack surface reduction rules.* |[Customize attack surface reduction rules: Use PowerShell to exclude files & folders](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-attack-surface-reduction#use-powershell-to-exclude-files-and-folders) | ## Configure Microsoft Defender ATP with Windows Management Instrumentation (WMI) -steps + +|Task |Resources to learn more | +|---------|---------| +|task 1 | link | +|task 2 | link | + ## Configure Microsoft Defender ATP with Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) |Task |Resources to learn more | |---------|---------| -|Manage Microsoft Defender Antivirus |[Configure and manage Microsoft Defender Antivirus with the Microsoft Malware Protection Command Line Utility (mpcmdrun.exe) command-line tool](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus) | -|Row2 | | +|**Manage Microsoft Defender Antivirus** |[Configure and manage Microsoft Defender Antivirus with the Microsoft Malware Protection Command Line Utility (mpcmdrun.exe) command-line tool](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus) | +|Row2 | link | ## Next steps From 3bed7a93391a12c4f1a243de5e3756e88f4bdb7b Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 23 Jul 2020 10:02:12 -0700 Subject: [PATCH 357/589] Update event-4771.md --- windows/security/threat-protection/auditing/event-4771.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/auditing/event-4771.md b/windows/security/threat-protection/auditing/event-4771.md index 016b2db1be..d8e637e093 100644 --- a/windows/security/threat-protection/auditing/event-4771.md +++ b/windows/security/threat-protection/auditing/event-4771.md @@ -7,7 +7,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.localizationpriority: none author: dansimp -ms.date: 04/19/2017 +ms.date: 07/23/2020 ms.reviewer: manager: dansimp ms.author: dansimp From 5de93fe17817040af0827f8cc3a67c998db04c37 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 23 Jul 2020 10:03:33 -0700 Subject: [PATCH 358/589] Update wdsc-hide-notifications.md --- .../windows-defender-security-center/wdsc-hide-notifications.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-security-center/wdsc-hide-notifications.md b/windows/security/threat-protection/windows-defender-security-center/wdsc-hide-notifications.md index 0b059a219d..7210da90bf 100644 --- a/windows/security/threat-protection/windows-defender-security-center/wdsc-hide-notifications.md +++ b/windows/security/threat-protection/windows-defender-security-center/wdsc-hide-notifications.md @@ -11,7 +11,7 @@ ms.pagetype: security ms.localizationpriority: medium author: dansimp ms.author: dansimp -ms.date: 04/30/2018 +ms.date: 07/23/2020 ms.reviewer: manager: dansimp --- From 78ed8849edc6d55b980551d69c6c2eeac5b5534d Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 23 Jul 2020 10:08:46 -0700 Subject: [PATCH 359/589] Update use-powershell-cmdlets-microsoft-defender-antivirus.md --- .../use-powershell-cmdlets-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md index c03a3e259f..6c5cb6074b 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md @@ -12,7 +12,7 @@ ms.localizationpriority: medium author: denisebmsft ms.author: deniseb ms.custom: nextgen -ms.date: 02/24/2020 +ms.date: 07/23/2020 ms.reviewer: manager: dansimp --- From f5fdc6c38647357cb5655760156fa1e5ce34deac Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Thu, 23 Jul 2020 11:45:43 -0700 Subject: [PATCH 360/589] Updates to CSP files Adds WLANScanMode --- .../mdm/configuration-service-provider-reference.md | 8 ++++---- .../mdm/policy-csps-supported-by-surface-hub.md | 1 + 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index 9648c1ff7b..2b0f4e8ae8 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -2747,7 +2747,7 @@ The following list shows the CSPs supported in HoloLens devices: - [Accounts CSP](accounts-csp.md)9 **Note:** Support in Surface Hub is limited to **Domain\ComputerName**. - [AccountManagement CSP](accountmanagement-csp.md) - [APPLICATION CSP](application-csp.md) -- [Bitlocker-csp](bitlocker-csp.md)9 +- [Bitlocker-CSP](bitlocker-csp.md)9 - [CertificateStore CSP](certificatestore-csp.md) - [ClientCertificateInstall CSP](clientcertificateinstall-csp.md) - [Defender CSP](defender-csp.md) @@ -2759,7 +2759,7 @@ The following list shows the CSPs supported in HoloLens devices: - [DMAcc CSP](dmacc-csp.md) - [DMClient CSP](dmclient-csp.md) - [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) -- [Firewall-csp](firewall-csp.md)9 +- [Firewall-CSP](firewall-csp.md)9 - [HealthAttestation CSP](healthattestation-csp.md) - [NetworkQoSPolicy CSP](networkqospolicy-csp.md) - [NodeCache CSP](nodecache-csp.md) @@ -2771,9 +2771,9 @@ The following list shows the CSPs supported in HoloLens devices: - [RootCATrustedCertificates CSP](rootcacertificates-csp.md) - [SurfaceHub CSP](surfacehub-csp.md) - [UEFI CSP](uefi-csp.md) -- [Wifi-csp](wifi-csp.md)9 +- [Wifi-CSP](wifi-csp.md)9 - [WindowsAdvancedThreatProtection CSP](windowsadvancedthreatprotection-csp.md) -- [Wirednetwork-csp](wirednetwork-csp.md)9 +- [Wirednetwork-CSP](wirednetwork-csp.md)9 ## CSPs supported in Windows 10 IoT Core diff --git a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md index 5d2e766984..8478da89b4 100644 --- a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md +++ b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md @@ -81,6 +81,7 @@ ms.date: 07/22/2020 - [Wifi/AllowManualWiFiConfiguration](policy-csp-wifi.md#wifi-allowmanualwificonfiguration) - [Wifi/AllowWiFi](policy-csp-wifi.md#wifi-allowwifi) - [WiFi/AllowWiFiHotSpotReporting]policy-csp-wifi.md#wifi-allowwifihotspotreporting) +- [WiFi/WLANScanMode]policy-csp-wifi#wifi-wlanscanmode - [Wifi/AllowWiFiDirect](policy-csp-wifi.md#wifi-allowwifidirect) - [WirelessDisplay/AllowMdnsAdvertisement](policy-csp-wirelessdisplay.md#wirelessdisplay-allowmdnsadvertisement) - [WirelessDisplay/AllowMdnsDiscovery](policy-csp-wirelessdisplay.md#wirelessdisplay-allowmdnsdiscovery) From 03a3dae7c26159ae112780adf73245b33de4861a Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 23 Jul 2020 12:19:52 -0700 Subject: [PATCH 361/589] retention period --- .../microsoft-defender-atp/get-domain-related-alerts.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-alerts.md index bdb1c4b423..93ffb99e7f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-alerts.md @@ -28,7 +28,7 @@ Retrieves a collection of [Alerts](alerts.md) related to a given domain address. ## Limitations -1. You can query on alerts last updated in the past 30 days. +1. You can query on alerts last updated according to your configured retention period. 2. Rate limitations for this API are 100 calls per minute and 1500 calls per hour. From b81e04747b95046a0548b367cac19ddf76b31338 Mon Sep 17 00:00:00 2001 From: Tom Henderson Date: Fri, 24 Jul 2020 07:58:23 +1200 Subject: [PATCH 362/589] Add missing TOC entry --- windows/security/threat-protection/TOC.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 8285168070..da07070744 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -842,6 +842,8 @@ ####### [Event 4689 S: A process has exited.](auditing/event-4689.md) ###### [Audit RPC Events](auditing/audit-rpc-events.md) ####### [Event 5712 S: A Remote Procedure Call, RPC, was attempted.](auditing/event-5712.md) +###### [Audit Token Right Adjusted](auditing/audit-token-right-adjusted.md) +####### [Event 4703 S: A user right was adjusted.](auditing/event-4703.md) ###### [Audit Detailed Directory Service Replication](auditing/audit-detailed-directory-service-replication.md) ####### [Event 4928 S, F: An Active Directory replica source naming context was established.](auditing/event-4928.md) ####### [Event 4929 S, F: An Active Directory replica source naming context was removed.](auditing/event-4929.md) From cfa87c669c513d5b95c0df09343e3f87f797a7bf Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 23 Jul 2020 13:09:22 -0700 Subject: [PATCH 363/589] update query period --- .../microsoft-defender-atp/get-domain-related-machines.md | 2 +- .../microsoft-defender-atp/get-machine-log-on-users.md | 2 +- .../microsoft-defender-atp/get-machine-related-alerts.md | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md index 8413a10a82..8efb45915c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md @@ -28,7 +28,7 @@ Retrieves a collection of [Machines](machine.md) that have communicated to or fr ## Limitations -1. You can query on devices last seen in the past 30 days. +1. You can query on alerts last updated according to your configured retention period. 2. Rate limitations for this API are 100 calls per minute and 1500 calls per hour. diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md b/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md index f5cb6a8948..4a239c0b99 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md @@ -28,7 +28,7 @@ Retrieves a collection of logged on users on a specific device. ## Limitations -1. You can query on devices last seen in the past 30 days. +1. You can query on alerts last updated according to your configured retention period. 2. Rate limitations for this API are 100 calls per minute and 1500 calls per hour. diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md index 0d100248f0..8d2294ab5b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md @@ -28,7 +28,7 @@ Retrieves all [Alerts](alerts.md) related to a specific device. ## Limitations -1. You can query on devices last seen in the past 30 days. +1. You can query on alerts last updated according to your configured retention period. 2. Rate limitations for this API are 100 calls per minute and 1500 calls per hour. From 12093f6a75cca2d40354409bc9b2d870d5076258 Mon Sep 17 00:00:00 2001 From: Harun Kimani <52551080+Gental-Giant@users.noreply.github.com> Date: Thu, 23 Jul 2020 14:32:09 -0700 Subject: [PATCH 364/589] Updated 1909 TOC and ownership --- windows/privacy/manage-windows-1909-endpoints.md | 4 ++-- windows/privacy/toc.yml | 6 +++++- .../windows-endpoints-1909-non-enterprise-editions.md | 4 ++-- 3 files changed, 9 insertions(+), 5 deletions(-) diff --git a/windows/privacy/manage-windows-1909-endpoints.md b/windows/privacy/manage-windows-1909-endpoints.md index bf56163057..92f03d2111 100644 --- a/windows/privacy/manage-windows-1909-endpoints.md +++ b/windows/privacy/manage-windows-1909-endpoints.md @@ -8,8 +8,8 @@ ms.sitesec: library ms.localizationpriority: high audience: ITPro author: gental-giant -ms.author: obezeajo -manager: robsize +ms.author: v-hakima +manager: obezeajo ms.collection: M365-security-compliance ms.topic: article ms.date: 7/22/2020 diff --git a/windows/privacy/toc.yml b/windows/privacy/toc.yml index 7378b77892..6d801ea292 100644 --- a/windows/privacy/toc.yml +++ b/windows/privacy/toc.yml @@ -28,7 +28,7 @@ - name: Windows 10, version 1703 required Windows diagnostic events and fields href: basic-level-windows-diagnostic-events-and-fields-1703.md - name: Optional Windows diagnostic data events and fields - items: + items: - name: Windows 10, version 1709 and newer optional diagnostic data href: windows-diagnostic-data.md - name: Windows 10, version 1703 optional diagnostic data @@ -43,6 +43,8 @@ href: manage-connections-from-windows-operating-system-components-to-microsoft-services-using-MDM.md - name: Connection endpoints for Windows 10, version 2004 href: manage-windows-2004-endpoints.md + - name: Connection endpoints for Windows 10, version 1909 + href: manage-windows-1909-endpoints.md - name: Connection endpoints for Windows 10, version 1903 href: manage-windows-1903-endpoints.md - name: Connection endpoints for Windows 10, version 1809 @@ -53,6 +55,8 @@ href: manage-windows-1709-endpoints.md - name: Connection endpoints for non-Enterprise editions of Windows 10, version 2004 href: windows-endpoints-2004-non-enterprise-editions.md + - name: Connection endpoints for non-Enterprise editions of Windows 10, version 1909 + href: windows-endpoints-1909-non-enterprise-editions.md - name: Connection endpoints for non-Enterprise editions of Windows 10, version 1903 href: windows-endpoints-1903-non-enterprise-editions.md - name: Connection endpoints for non-Enterprise editions of Windows 10, version 1809 diff --git a/windows/privacy/windows-endpoints-1909-non-enterprise-editions.md b/windows/privacy/windows-endpoints-1909-non-enterprise-editions.md index 5cd6e19244..357c78dd10 100644 --- a/windows/privacy/windows-endpoints-1909-non-enterprise-editions.md +++ b/windows/privacy/windows-endpoints-1909-non-enterprise-editions.md @@ -8,8 +8,8 @@ ms.sitesec: library ms.localizationpriority: high audience: ITPro author: gental-giant -ms.author: obezeajo -manager: robsize +ms.author: v-hakima +manager: obezeajo ms.collection: M365-security-compliance ms.topic: article ms.date: 7/22/2020 From 988a30c9364b941117e5d56b5fd8c4b6db75986c Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 23 Jul 2020 15:13:54 -0700 Subject: [PATCH 365/589] Update manage-atp-post-migration-configuration-manager.md --- .../manage-atp-post-migration-configuration-manager.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index e88562413c..fa7c07ee31 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -31,7 +31,7 @@ We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fund |Task |Resources to learn more | |---------|---------| |**Install the Configuration Manager console** |[Get the installation media](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/get-install-media)

[Install the Configuration Manager console](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/install-consoles) | -|**Manage your organization's devices using Configuration Manager**

|[Onboard to Microsoft Defender ATP with Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection#about-onboarding-to-atp-with-configuration-manager) | +|**Manage your organization's devices using Configuration Manager**

*If you have devices (or endpoints) not already onboarded to Microsoft Defender ATP, you can do that with Configuration Manager.* |[Onboard to Microsoft Defender ATP with Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection#about-onboarding-to-atp-with-configuration-manager) | |**Manage antimalware policies and Windows Firewall security for client computers** |[Configuration Manager: Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) | ## Next steps From f3dd1cdd0ae03a07f592fb2172ec048539aabd2b Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 23 Jul 2020 15:17:20 -0700 Subject: [PATCH 366/589] Update manage-atp-post-migration-configuration-manager.md --- .../manage-atp-post-migration-configuration-manager.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index fa7c07ee31..e7fb66b1a2 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -30,9 +30,9 @@ We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fund |Task |Resources to learn more | |---------|---------| -|**Install the Configuration Manager console** |[Get the installation media](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/get-install-media)

[Install the Configuration Manager console](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/install-consoles) | +|**Install the Configuration Manager console**

*If you don't already have the Configuration Manger console, use these resources to get the bits and install it.* |[Get the installation media](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/get-install-media)

[Install the Configuration Manager console](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/install-consoles) | |**Manage your organization's devices using Configuration Manager**

*If you have devices (or endpoints) not already onboarded to Microsoft Defender ATP, you can do that with Configuration Manager.* |[Onboard to Microsoft Defender ATP with Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection#about-onboarding-to-atp-with-configuration-manager) | -|**Manage antimalware policies and Windows Firewall security for client computers** |[Configuration Manager: Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) | +|**Manage antimalware policies and Windows Firewall security for client computers**

*Configure endpoint protection features, including Microsoft Defender ATP, exploit protection, application control, antimalware, firewall settings, and more.* |[Configuration Manager: Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) | ## Next steps From 46cea2df42597ea6256cc7f9f0482e848e2e89d5 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 23 Jul 2020 15:26:54 -0700 Subject: [PATCH 367/589] Update manage-atp-post-migration-group-policy-objects.md --- .../manage-atp-post-migration-group-policy-objects.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md index 45114879b9..a66a772f93 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -33,6 +33,7 @@ The following table lists various tasks you can perform to configure Microsoft D |**Manage settings for user and computer objects**

*Customize built-in Group Policy Objects, or create custom Group Policy Objects and organizational units to suit your organizational needs.* |[Administer Group Policy in an Azure Active Directory Domain Services managed domain](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy) | |**Configure Microsoft Defender Antivirus**

*Configure antivirus features & capabilities, including policy settings, exclusions, remediation, and scheduled scans on your organization's devices (also referred to as endpoints).* |[Use Group Policy settings to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus) | |**Manage your organization's attack surface reduction rules**

*Customize your attack surface reduction rules by excluding files & folders, or by adding custom text to notification alerts that appear on a users' devices.* |[Customize attack surface reduction rules with Group Policy Objects](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-attack-surface-reduction#use-group-policy-to-exclude-files-and-folders) | +|** |[Customize exploit protection settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection)

[Import, export, and deploy exploit protection configurations](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml)

[Use Group Policy to distribute the configuration](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml#use-group-policy-to-distribute-the-configuration) | ## Next steps From 76466b4aa122212390a5dba5a396ae82dd797a00 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 23 Jul 2020 15:30:16 -0700 Subject: [PATCH 368/589] Update manage-atp-post-migration-group-policy-objects.md --- .../manage-atp-post-migration-group-policy-objects.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md index a66a772f93..63d67801b3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -33,7 +33,7 @@ The following table lists various tasks you can perform to configure Microsoft D |**Manage settings for user and computer objects**

*Customize built-in Group Policy Objects, or create custom Group Policy Objects and organizational units to suit your organizational needs.* |[Administer Group Policy in an Azure Active Directory Domain Services managed domain](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy) | |**Configure Microsoft Defender Antivirus**

*Configure antivirus features & capabilities, including policy settings, exclusions, remediation, and scheduled scans on your organization's devices (also referred to as endpoints).* |[Use Group Policy settings to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus) | |**Manage your organization's attack surface reduction rules**

*Customize your attack surface reduction rules by excluding files & folders, or by adding custom text to notification alerts that appear on a users' devices.* |[Customize attack surface reduction rules with Group Policy Objects](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-attack-surface-reduction#use-group-policy-to-exclude-files-and-folders) | -|** |[Customize exploit protection settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection)

[Import, export, and deploy exploit protection configurations](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml)

[Use Group Policy to distribute the configuration](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml#use-group-policy-to-distribute-the-configuration) | +|**Manage exploit protection settings**

*You can customize your exploit protection settings, import a configuration file, and then use Group Policy to deploy that configuration file.* |[Customize exploit protection settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection)

[Import, export, and deploy exploit protection configurations](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml)

[Use Group Policy to distribute the configuration](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml#use-group-policy-to-distribute-the-configuration) | ## Next steps From 4e2f40310a57b542fba76f6a34193d34f7c1dcd8 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 23 Jul 2020 15:35:15 -0700 Subject: [PATCH 369/589] Update manage-atp-post-migration-group-policy-objects.md --- .../manage-atp-post-migration-group-policy-objects.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md index 63d67801b3..2ad606801d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -31,7 +31,7 @@ The following table lists various tasks you can perform to configure Microsoft D |Task |Resources to learn more | |---------|---------| |**Manage settings for user and computer objects**

*Customize built-in Group Policy Objects, or create custom Group Policy Objects and organizational units to suit your organizational needs.* |[Administer Group Policy in an Azure Active Directory Domain Services managed domain](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy) | -|**Configure Microsoft Defender Antivirus**

*Configure antivirus features & capabilities, including policy settings, exclusions, remediation, and scheduled scans on your organization's devices (also referred to as endpoints).* |[Use Group Policy settings to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus) | +|**Configure Microsoft Defender Antivirus**

*Configure antivirus features & capabilities, including policy settings, exclusions, remediation, and scheduled scans on your organization's devices (also referred to as endpoints).* |[Use Group Policy settings to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus)

[Use Group Policy to enable cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus#use-group-policy-to-enable-cloud-delivered-protection) | |**Manage your organization's attack surface reduction rules**

*Customize your attack surface reduction rules by excluding files & folders, or by adding custom text to notification alerts that appear on a users' devices.* |[Customize attack surface reduction rules with Group Policy Objects](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-attack-surface-reduction#use-group-policy-to-exclude-files-and-folders) | |**Manage exploit protection settings**

*You can customize your exploit protection settings, import a configuration file, and then use Group Policy to deploy that configuration file.* |[Customize exploit protection settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection)

[Import, export, and deploy exploit protection configurations](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml)

[Use Group Policy to distribute the configuration](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml#use-group-policy-to-distribute-the-configuration) | From 1ac43ef6fbdc71599d42ec806c46bd12df5d1f3a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 23 Jul 2020 15:37:30 -0700 Subject: [PATCH 370/589] Update manage-atp-post-migration-other-tools.md --- .../manage-atp-post-migration-other-tools.md | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index d6c7dab5ec..c1a8838634 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -37,17 +37,16 @@ You can use PowerShell to manage Microsoft Defender Antivirus, exploit protectio |Task |Resources to learn more | |---------|---------| -|**Manage Microsoft Defender Antivirus** |[Use PowerShell cmdlets to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus) | -|**Configure exploit protection** | [Customize exploit protection: PowerShell reference](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection#powershell-reference) | -|**Configure attack surface reduction rules**

*You can use PowerShell to exclude files and folders from attack surface reduction rules.* |[Customize attack surface reduction rules: Use PowerShell to exclude files & folders](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-attack-surface-reduction#use-powershell-to-exclude-files-and-folders) | +|**Manage Microsoft Defender Antivirus** with PowerShell cmdlets |[Use PowerShell cmdlets to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus)

[Use PowerShell cmdlets to enable cloud-delivered protection](https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus#use-powershell-cmdlets-to-enable-cloud-delivered-protection) | +|**Configure exploit protection** with PowerShell | [Customize exploit protection: PowerShell reference](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection#powershell-reference) | +|**Configure attack surface reduction rules** with PowerShell

*You can use PowerShell to exclude files and folders from attack surface reduction rules.* |[Customize attack surface reduction rules: Use PowerShell to exclude files & folders](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-attack-surface-reduction#use-powershell-to-exclude-files-and-folders) | ## Configure Microsoft Defender ATP with Windows Management Instrumentation (WMI) - |Task |Resources to learn more | |---------|---------| -|task 1 | link | +|**Enable cloud-delivered protection** |[Use Windows Management Instruction (WMI) to enable cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus#use-windows-management-instruction-wmi-to-enable-cloud-delivered-protection) | |task 2 | link | From a00339a383ec570ba2b4dc2c47e2484d61b614c5 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Thu, 23 Jul 2020 15:51:35 -0700 Subject: [PATCH 371/589] Teredo --- windows/deployment/index.yml | 1 - windows/deployment/planning/windows-10-deprecated-features.md | 2 +- 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/deployment/index.yml b/windows/deployment/index.yml index 502d036305..4383221147 100644 --- a/windows/deployment/index.yml +++ b/windows/deployment/index.yml @@ -73,7 +73,6 @@ landingContent: - text: Overview of Windows Autopilot url: windows-autopilot/windows-autopilot.md - # Card - title: Support remote work linkLists: diff --git a/windows/deployment/planning/windows-10-deprecated-features.md b/windows/deployment/planning/windows-10-deprecated-features.md index fba2f6ef1d..e34b68d47e 100644 --- a/windows/deployment/planning/windows-10-deprecated-features.md +++ b/windows/deployment/planning/windows-10-deprecated-features.md @@ -45,7 +45,7 @@ The features described below are no longer being actively developed, and might b |Windows Help Viewer (WinHlp32.exe)|All Windows help information is [available online](https://support.microsoft.com/products/windows?os=windows-10). The Windows Help Viewer is no longer supported in Windows 10. If for any reason you see an error message about "help not supported," possibly when using a non-Microsoft application, read [this support article](https://support.microsoft.com/help/917607/error-opening-help-in-windows-based-programs-feature-not-included-or-h) for additional information and any next steps.| 1803 | |Contacts feature in File Explorer|We're no longer developing the Contacts feature or the corresponding [Windows Contacts API](https://msdn.microsoft.com/library/ff800913.aspx). Instead, you can use the People app in Windows 10 to maintain your contacts.| 1803 | |Phone Companion|Use the **Phone** page in the Settings app. In Windows 10, version 1709, we added the new **Phone** page to help you sync your mobile phone with your PC. It includes all the Phone Companion features.| 1803 | -|IPv4/6 Transition Technologies (6to4, ISATAP, and Direct Tunnels)|6to4 has been disabled by default since Windows 10, version 1607 (the Anniversary Update), ISATAP has been disabled by default since Windows 10, version 1703 (the Creators Update), and Direct Tunnels has always been disabled by default. Please use native IPv6 support instead.| 1803 | +|IPv4/6 Transition Technologies (6to4, ISATAP, Teredo, and Direct Tunnels)|6to4 has been disabled by default since Windows 10, version 1607 (the Anniversary Update), ISATAP has been disabled by default since Windows 10, version 1703 (the Creators Update), Teredo has been disabled since Windows 10, version 1803, and Direct Tunnels has always been disabled by default. Please use native IPv6 support instead.| 1803 | |[Layered Service Providers](https://msdn.microsoft.com/library/windows/desktop/bb513664)|Layered Service Providers has not been developed since Windows 8 and Windows Server 2012. Use the [Windows Filtering Platform](https://msdn.microsoft.com/library/windows/desktop/aa366510) instead. When you upgrade from an older version of Windows, any layered service providers you're using aren't migrated; you'll need to re-install them after upgrading.| 1803 | |Business Scanning| This feature is also called Distributed Scan Management (DSM) **(Added 05/03/2018)**
 
The [Scan Management functionality](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd759124(v=ws.11)) was introduced in Windows 7 and enabled secure scanning and the management of scanners in an enterprise. We're no longer investing in this feature, and there are no devices available that support it.| 1803 | |IIS 6 Management Compatibility* | We recommend that users use alternative scripting tools and a newer management console. | 1709 | From bce4392827f0847897f513144585b2e12f31f7dd Mon Sep 17 00:00:00 2001 From: schmurky Date: Fri, 24 Jul 2020 10:32:43 +0800 Subject: [PATCH 372/589] removed $ --- .../microsoft-defender-atp/microsoft-defender-atp-mac.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md index 0b8a773d75..91e7a72545 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md @@ -96,7 +96,7 @@ To test that a connection is not blocked, open [https://x.cp.wd.microsoft.com/ap If you prefer the command line, you can also check the connection by running the following command in Terminal: ```bash -$ curl -w ' %{url_effective}\n' 'https://x.cp.wd.microsoft.com/api/report' 'https://cdn.x.cp.wd.microsoft.com/ping' +curl -w ' %{url_effective}\n' 'https://x.cp.wd.microsoft.com/api/report' 'https://cdn.x.cp.wd.microsoft.com/ping' ``` The output from this command should be similar to the following: @@ -110,7 +110,7 @@ The output from this command should be similar to the following: Once Microsoft Defender ATP is installed, connectivity can be validated by running the following command in Terminal: ```bash -$ mdatp --connectivity-test +mdatp --connectivity-test ``` ## How to update Microsoft Defender ATP for Mac From abb0b94e9d871633c6953bfb5db6247f8d8bed80 Mon Sep 17 00:00:00 2001 From: schmurky Date: Fri, 24 Jul 2020 10:45:51 +0800 Subject: [PATCH 373/589] Removed hyphens --- .../microsoft-defender-atp/microsoft-defender-atp-mac.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md index 91e7a72545..ae6569fd45 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md @@ -80,8 +80,8 @@ The following downloadable spreadsheet lists the services and their associated U Microsoft Defender ATP can discover a proxy server by using the following discovery methods: -- Proxy auto-config (PAC) -- Web Proxy Auto-discovery Protocol (WPAD) +- Proxy autoconfig (PAC) +- Web Proxy Autodiscovery Protocol (WPAD) - Manual static proxy configuration If a proxy or firewall is blocking anonymous traffic, make sure that anonymous traffic is permitted in the previously listed URLs. From 17eaba06c25e78d74d715957f9c67f9b41e16a80 Mon Sep 17 00:00:00 2001 From: schmurky Date: Fri, 24 Jul 2020 13:55:29 +0800 Subject: [PATCH 374/589] Removed $ --- .../threat-protection/microsoft-defender-atp/mac-whatsnew.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md b/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md index 61b9edd8cd..667852eb82 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md @@ -86,7 +86,7 @@ ms.topic: conceptual - Fixed an issue where Microsoft Defender ATP for Mac was sometimes interfering with Time Machine - Added a new switch to the command-line utility for testing the connectivity with the backend service ```bash - $ mdatp --connectivity-test + mdatp --connectivity-test ``` - Added ability to view the full threat history in the user interface (can be accessed from the **Protection history** view) - Performance improvements & bug fixes From f9137ba368e218c451f3de9816d772fc7665d4bd Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Fri, 24 Jul 2020 10:17:25 +0300 Subject: [PATCH 375/589] smart-card-certificate-requirements-and-enumeration https://github.com/MicrosoftDocs/windows-itpro-docs/issues/6777 --- images/sc-image402.png | Bin 0 -> 15431 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 images/sc-image402.png diff --git a/images/sc-image402.png b/images/sc-image402.png new file mode 100644 index 0000000000000000000000000000000000000000..8bfe73fd874acc190c379f85b540e2350e10c6e5 GIT binary patch literal 15431 zcmb_@Wk6Kz*7n8#MF|n~p}PeH1f)@r?x9n1WQb9^K?PB|I|T-Z?hfe&rE^fah8ViP z&GVf1yyu+vJKy`&kJ+>9-uJ!lSnIm3we}ZPWf?qNGF$)v@Z@Br)B)gz4EUqIa|1kc zaK0@B{$V+&%e({%2PoFSgImxSN-qGQB<$X~$!+lX?ps-12LQltz5Zc!!oQgVfbfi* z)C&z)BlIl6o8+UEmEE7Tt*#LgdeNf2&x2wrz8giF`U{OP4(K-4hA2Q^^wvr>I@lEy zv#mu?9q_Ym%zn#{>^Frb+3Qy_u|>rBMM*YDDL73`o_57gv@!CNepIqxD`4boA=1fj zlS^*bO+SM*ieF$>-7GsYPtHV|+?rhfxN4kRNq~0jy-6Ju36th^VrOUP27u(9?Y<@e zkfKIn18;Huk2YyH?*bOjs&;;L9OttZzpHa8e{4=duy$hqy^oINWqXD^i@EAQv>uz;Btx&N_g z-W~`1&M*ql7ehl54rIb?UkeyQ3Js|01iUvw%%&?AMZ*E#MCrfRb6unSrm)Ib zf?9h73?L+peB{hiFt5Sw-Q%Zm)AvpIE%&oB65*Q1vW(!Z5)5+1-Pu%CYl|GiLHRus zKNaS_%bcNf8$&@sv?x-U+L`ACM_Yv!Q?Gf@GAI-@}-|mae{sHuSRuMoEUhnyG zfz<&n|7Js|c^YSe5`QpU!qF}%+^CCs4=PSZX0S--!xTM3CTv zr=E9_n`Prs8B2UZzYWp23CPI0ubCt$CYm?$EbyR0IUg?8X}x9q-JC;yQ-XANt%JM; z+yi!QgD?9F|KDuB_FVpqS463=1X82~D?xH55$H4d3^U`hT5t+}etMDg=A!J)_Vef3 z!gLe&o$Iadfxj{@h&DMm%?Bd8es+)O5|`h!AH<|S?W252`uHAyL&{U?Jg|-6M8@~5eaC1PtRjF7M89GP?fU?h zlE5ai6iN`H19yFe|7GI}6$hf#c2X`@3c08~ovUJZNE`S_^pn|^Q!c<>ijLqKWrD_@ z&Ls_T^9a>9E&WJkqKpEEg0oSh_0x{_#DAH!e=U}X4bkxK5yz{w4TOXR;~`w!d+{y= z`1}NQQ#Y8XsjLZ3!^cSkAV_o7702tXI4!7jZ9QQ|!F5H6Q$UsdBl zVn6rQV8`|;!Un!sferdj`G2|bwDkF7H{rsU*E4PMD$0RZfcddgaQY|L3*_Uf&J86} z6#Oe`N_DPS(`efnt?=%UfyyAbqu<)Q`j=xz| z=VHrDUS{Af$E#PTRh(&K+#y6*>wDj3xGrm_5DQQxsqn^D|03rD6Q}*Q< zaOb^j>iZ|OO7a$ZRFRsNMu*S%%7zv10ji7@sW7cw9DRyHEQ!%q2S>0M_TS87yMztv zwYy!jV&0`xu2BXBTLXZG`Ym;(p%w*UA%)|PSoErdIYkj?A|iVy)PFz|Q8Bh3>K_aE zvd!OT_=j=Tm~%PP5( zs#9aalPj)3wGSF~S2X-pJKu=`->-6js~NpYBB#&^oeUF4!#>kyWKR{ghf{(h7QEBN zklK*uh=)=8gGN$<;qfeVz>%`)`Ewqv7S~~jTb|FISgMJVAL{W!P?`8xsA#2?u)G2n zZ!2%_h!rBn0S{0G$jKWueuOIWjF;Q@l*FU_ln=EwPb-K~CAgfR5vy@A0c*0*%Z8Nl zhF>KoyJm3dPPs;f7yIB^cD8&9K#mKcEF7^Sb^|Nd^d(l@6G&4xaEE)`>Ht*{*h^nh8#=Auc{Jv9e?~Oz>Fl{|xNBLbHZEMIvpLk|^=;voiS`L* z-NEc5?>gG~7m=xpogcqcj!APYz1tG^5)~{ik-0B%M|3W3=4Wa0#Q4{xapRhkKi5rP z)GP+uS6a51J}ZIab#z0lpT-mP=6-cw2`miK$yd<0PSKmQ+jU^6nbPJCzG0 zk!Gg{NXb9!n!d}KN%^4uYgj^@m0br3_EOCsK>Cb)IBeI|OR(jMSqBTmLx@gaCVr|c z7(aS|2w^nXr%*;oc?Ui`gb$=+z&i{2lN7wou>lDzc{gk#z;~T)6acnpMg!Z0r2rZc z7|ZBqYTzwZ=e57|6B-@z0V;d61AiHqtRGM|?BjWsb171;u6`d^)58Vp0(^1r!E@zA z;+wAYu8vH4gvYVJAVn!n;-X6^U6*Ruw%zNscl$}EumBCCiLlW=7V*-09;c~KrX8F% zT8p})lH&`8e}LBDw^GGuX6k;1da4y|(3+;76-lnI=32{|utFuc;{7gW=}uPU<%kpH zNE)jEAWikkNNI_bWiU-X0z!L-!ES z4!A+xtc>G@irE_Whje@N*9`y(O}`7!3;-vf8^7*=f7*Q0*VW~2^=*6~ZE$$x{Dw6W zxpq^OetX~LkYP%RUEGQCrpq9+;(Om5_eg32rYSx0is;UotNnvTAnXr9x4&b%HzzX8 zb{*v88yg!H!G-N-y%?X*aL!#Hb5EPob7W{NQ`uBRZ`nfG!S)bc0sDF5Zj3`X4s>QRQ2Oh?jQ21Vfrz6#K{e%--tjIWb58Hk1a7 zM*b6*Qli>a&AkOnzh~E&ukEo}T%l6$&m>j}us%OoU%B7}(~#}ef{s5S>+b1k81_RR z(Yo!Q931Z`UA8!PaXh8SK&%t-bEXSZMPE+Qe;O~rD5YqWc z$==zlO8gDrSGb;H#mYnUobbzBtk1=T1L%68!Ec{Hr&>4=4A9IIolzBR+LPB3ZvX-`6FL@Kv{ zD%&I8ZgsBvCP3QFsbCy&&)HZE93J0Qxh67Wi}jw|G4yigBMACfUpp*WHt}z-K7yXi z6Sy#rzy}`Kug@ldFaMc093T{}VqVERTd(Kf9vSwTBsKv%=O5|He-f9!?_pvTm5%VT z%oB|blxI^%cURkz6DV)+MZ>h=sEtj^h_#N1nZC`)&;U;5_({N5q~7^7QE_iiK|p$Y zts2Q{x9l&0mp!$W5_W#N+@LUyurPbV!O<&$2&GiAsUwG*0CkZ6c z-2!bGKRnRMsWO4icI9x{(6%1|0E^94^rD_`0!aNOZ7+<_`YF@>EF3lI=To&2tz0*im-eR*09-SdELxETO?@QO zrkt#@_zek@%}ZXJ9O_s7*@>ceyVqm@mf%#s`@h#@)EtlqW?I3EJ3xClrPcF6*HMGq zFK{Qjm3?}ESn}{It;hw-x|Wt!-_vwB%|AN3F5!z5(J#)!f$3)ircn?F6EUr*zw8T$ zSxJ~(z6XbQZ&7meha@RJxM5Q?lRRUTGcZ%l?G9fZc>xj5>OyN~XpsLCxHQhPae~;c z&bRq^Enq5T1SOLu&u4}*8uYQ1H+h{ZN*e4PoIE%^YMA_=E&QzczbAqJ-JOe z(+~tT)Dn{Ip8p`xzTwzDaE!}@2* zbs_An)S{`A@*R&{=9AsmUkfVK6x2ETCKROaO|$C-&KXr4gJ#4x?_UVQKOUyHAy&4M z)KKeV@njMivV7^!m=KRqWVMs;%#ZU136iwD8Tz!w2yJ3I^9Vb`VG?RK@uG+QWj>e7 zqvV-KefRyyi(VRlw#mQif#qIMuh&ha&G1|MmM3x4HMDbNp5Xq_lR%Ljwl+6UQ!SRA zFS-xx!MAA{(QuHwcx!Lt?LFzZ=bWGCRa`VoY+cWF;-weh{>~{Rf-YUUCHP}GCwQbjBd{hrz1&& zfom3*xo95e>~Qu%bMWf9Q}LOqhltV0_y=M_tFF#v*9IFzjrkxBoKj@0A`fXbYZ<9c z%Z^0ZKz65aCRE6N;~RnYKtNkwlB6_4H@t`bLB&QV9uwK#{|pf z`3^PWzIYx1ljwd^-{9m~gxq6tlg`pqj3|0(uCSIz*sOJrRvm8%lftZUj#!B-BIGOV z(xz=0F=-iQm_k-MZD{ebJ=n&z$X5*6f5>#?&>?(;9>nz=*eICjb_~+V*eS&E-xd9Y zQm={zQ4dX;MY<<}+5{DM9c6>d6A*i|r3)b~=jr;(b2~k#w@?jvH?4YfteB}yj<>5{ z+~`w|@f4#`DOL02;-RYT-e;?cdm-H{Q&-Dl*JCp+Fu_`tOPQC@R_zhT@EP|EvT?B% zU7{>hNvZFS(=t6G*GsX<;a-#%hYGDCMuj$vyr=X~m@d!8gk~&qM}(LLDt@Rd{-tSO zgr&8U5f!RjS*|p_8%t*S}^XlHgLS>;?L~N}Dey~o1Wfc zITrj?S3_al`>wMdW02p`P2YD@lY26ivN`QAz%Kfirj*z?PbN@PsMzRaX#-;&mV_5- zryzj!nC*}?EyA#4#HtYy%VVXBrFq$q$U620BFBpL zI`FGx7f*qD*UDDHq*bMXQcc0nUjDP;gk79xonejPd0jVd8>pGrnMyZTh&o=7E>*Yk zDN~a|($DQhe%-eD9Ad<{0HIlsZ`p&WE%Aoe1_}7f$T^=j$3(L!;Oc}Ov0<9{Gd~Zn zBq^T`!-c_dXl6g1sF{4UgImZU!@OW%^I6On(Zz859lI#f18)Z-<}NhWeMF<*c$>;S zCivbh;aC^9Itg$97Eh;-Fq8ld( zS*vCICEmnWBy+Kp0@PKgFO4`}f>NZg#~}tYREoS=uR`cmQe@UUzDX^6vAWL(v1!{f z467fxsJ=g8B-nLW>vo|vzlKKOuddIaexmXhY^D`BZH-e?yRCVJ@IfP|U8s~~ssw>} zX+u3s=PC;a_*0E*NUn}xe;L`*45*-i8bAM9xeGdHaG4I6PAXQ6T8`QftM*kysB&bHeRSn_F+9PQt01Ee}8F$ zp$0yF&CHgXiW6eo8_cZ>I8Bw)BRcT?F%5?cb?&rPh#m+JCX9ZnpC9HL!M%*CT6$eb-9rsv~_Hch6# zwog8NX^hEimV(OUS;e%jQ};u6*Qe9E%>&EB#OlbWFAjy9&I^$A3YU*NFHg-Neqka5 zXIGnX2!QQn>L#YX+TrLbzIJNB2h(&l-{b=e)Kj0r+r6On!T4OIkv^6@ly$j6UnPE3 zjikgFM_nW#dq27a0e3PT9y1RbQSjczrNeAq(7?@twFr>nL^*C*LDl8K|2z#Xw=T+H(70n4@#K^Cm1}cc7Aqw3it3jE&@<=X@xcQbml$b^^7i z87|<<4r3o(UtjOL^W7a>S{N7?gE1*vG~nr*uKbGFd@eAhq}fwGDBdUl7%D23TyHmHqke=HEl=Zr-mwXBQd6S zPD-In;gTT;Jsv($A#UiO@AzyKe?PeX1jPZ0*zF+bT^u!XZCrlN$M15mED8bK7Vb0n zYC@$umPS#1n;(#Q=;I{q(B$ejxHRzpPOnxS2IVpL)hbT4DsGLwL;01pC2V3=0HY zK7|X}*%m4HMi8wyRY_`kB1Ur+K883kBQ?-o#oz2`3P2T#%r0M#Usy=ee ztLqAPpPjP6wjcxnz=kfl#HU6y;JB>dLSObsuU9-}by6w#}9|H@{#~8=70=5_D|(#C0EggvNs? zayU#gg5HLo?B%4EMPn~>e>sJw19CZp8{}?1seX(5W}4>r$h&hwKB-n}j)o>G@NLU= zW!}Xf@zp$JV923v&GeP+rS-Z~)ibh{Tchz1JPFkUHg=lP$=>$~zN8UJ>zy9=zZIK+ zagXjZEMAHhfEruH&DU3P)aZ4ag?%&Etgw8oHJv2aZw6dAr`YQDlXKG<*|G=(*njoI zbCXd!SCf|In`lzO#EIS6LPG>Tsax`yim?hlgCd?ew-ERE-V_Oh*jDh-**xCmwYJlO z!C(d|P3K}zN6FCy?*ftw(mrmpp-O!#loYu{KqAz>eS#y?VYI5?{Vaaf z;L2!!sOMmg-6XgBBadL&n?Spr+o>WTylO#?YO^sgDD$J(hF@$4Lw&MPu)DTLYG71sx4#RnPICx){Z}E#p zZ-@r_mp9pZ9F1UT;-!M~MM?ub6@-@2ACn1zPgHtq;2Wm%}Ok} zW-anz4U9lsuyWr4UKT@N>iJ%*e~%8=}(p(&V@;f2KYyo{ziXt)=<-jQ{R*l!MUt zsTNefa{#jiE9f21>0=4%Ub}sFN_eF%=nCOIYxa2Wu4aw6v!Dv8c#7`0!33^@1H-7N zS~Qd=0`^%*okJiA2EUImI&;fqpq@~}s&f&IBwOcs^*}xn)_zN+k_(r`zM`fk942Tl zYq=)z_y?oy@Q~%(Si^#W(RYI3FqZou6gtvDUw)hj&}Ne6RKa8JTwWP(pYH7x!bkTy zx%VF#s;Q|RXh0fcqWOmWdYiO|S=9Lp>y=p15^hN^i!`@nZ>nM?3AEP=O=F)O_A`2j zxo-Rl3UIO2J@X$1jripDO8nP9tg`87vlI<+EkhU$bC!nCeM9GwsjuQrSLN2;xjd*&%AA1J4ZNt4>UD*306 z25|X5rbLD>JpEE7=|RoM_jS-;BdQHU6>`^@^+Ss1YNDJ}^$W}|^q|(J`2wvO#N6gl zhsQ9g!tKmis{?VzS=G)$NKQv9lp@dSTqjWyW!Yg~dM}>rZJe|}>yT%5k2tS6cZy=l z)@pVYYt}w0w&AX^v3Z?>rC;E1l%ISDB1xd(s|!t_!HQ&!1GYL{4-bdR@Lw3c7auUs ze4iC1&}uU`a{H%~yLJ#;W)J{A3}ddh`MKYE{}wD`UREhy=QvQzA0{)1orVN zWd4k^y*)!cLZi;{m=3Q(F*7^x!PhFgj|J;TIhM0N#iu!NP%2e2WYPVY54Fpvr)E;h z#o}uwC+N}6wWqjyVmF17s;pbI{<>~y`51H=2GyAG!Bh9^+gHG>1Y~dPuEt*DLxzjS z@X?{^Td)Ac=M)=v3!CL-LrpR5?#lWqIMl-ChMWD<(fSMv6nhu)N>*k_4qDWVqT z=1^PQ?dO>wy{fJ+_1eyVJuLjV>piFg0xnYYql><8mM<~BHN;IJ6Pfa-irIVGvN0cv^#3{B|K zIb*9wNq&&Bf{>819j;rB>f+b;)gL%`FEIsY|tIESibPO0I3%c8+AxltKwXP24 z$5TTf)v+D|(GjS`K#0vv-G7(BQ#oD_Zqthwa_ut)HHp_mz%nFqGoEJY*|oNgb27p~ zWjQECXUVXR57Mq<3;RrPd2qShp@iVPgN(&O#*!mHwS>cJ3~NLxMTB`r1{WaFp!H;! znDzF%DvX-!T})0zE<4);9=g@8jl(&x?4AYy-&z8(p6 z^hbz?(tBSN1gSEIrW-9*JECs$_OhNL?lM0LjinR6{UA#Z`)^c0&6f8l7Mzb%aCl)+ zkw5{=8us~WezCdVT16Bz!eDBJ3G-FaxUzAbL*q0Rxj!BVYekM7%>W?xBbaJX{r|GL zRV00fN6=N4pvVFc+E zFd9iS4?CKrBeEoO`tTaec^I+Fb(1SjcmUA!{3T0PXo4yncpfa%$jm@#=$zi94Ecvs zZLQ-YL;#`F^{HyGDYmBWvfp?4;d6iJ?+x2fDgw4$mxZu7GWDY zXpp!+2WKs6CqDRUm|c$a%JaB#;06%gx~!BJ2ZmDSQj?>aLwaZbe!GM`#@t*-fA)r{>)-2#OG&+iM9&pXw*#*>#ml0Z5#9vU|;!<3E}< zcCO-wkCm61On z{*-gqdM9Eh7j+zv$969jYBZ*vq}A5$Y-#m0^zIeR#q#`+Q&{}v70nYmcll&P;68mH z&*izourea%(WVqWl%`jC;V>g3scC-L+V1yz(i&x#Hj@d;UM&bhdR4H#grRCt&Lrns zXS@oFy3*k>DS^d4q0H)p^AK;->T0(9pzadoO8PhvLYcSVnX!z5$@;TlwkCD-BOm)i zEf5!iVK9i9140w;H223@a4DEqWo#wmVWnKK!f+rCM__g}a+7n096?mPznQ|WaU{L+cOA%vBiE za}~*)0Y>}V+m|{U-6{*sXr`ZWH@tpy&{a~mxkVn^i1&);k$kQ;vm0fxkBYUv zb!LL$E!{7M1t~^e@4^xqELRRKtuB{8wq~{lco3n%2d^(2a8Y`_q$;t2KqP0L)G{4y zVcwYL!10{j-Bmv2sDO0V>)XXn1|=9ARLmoG#9@wWe3xbGXx1I8E;NSFmgU#tE@h0h zu@g?vy0zqv0J+0rX;YPCuW46aeBBB!b%~p#ETmsMF!?DIJsg7?Q8@{u*=v=1{Cl26_@Ti{ z%3Rp3eYrgjgL!O&-_A+GVV2RA8D7~Ucyl6AxLec(x$t~EvHA2K`}NFTCYlbhgtg~w16_Vv3NW0P)6tT=}u8e zxFeNdya^X6iP}sl`K)?NNC=5jVYc3%&ruAKk1$MCMo6CuWa4j9TbuXRmXv%Qr~r-J z2+#k5DgKv)xPRi2|MRP%wG?xvD1q?E-b)ldN08b$_f9ji0U;r=jU36@cCM)4hb4d! z@IQUW8(p`8fKNn*9^_>6Aj*Pzd+(NIa8+tMb$9$ZoQ%XSOn%p9JgWH?IXjVjX~}=; ztM7dgpN_edsmkZ@j1M$6z%XwAt{dn;Kqv7Y>Y+KF8SrVoKLiY3x2zmaG+cQ#)>XKb zA@c%5Vv=m~=e*xOCqsV1L%QeEzLaKOwp@-=d=I#FPy9sL1j5YBmL3%q&7HN;BUp%$ zkFK#J@h4Ce{WG%9QgTmQT!21(9z;Odpqp!eK<(mhe0vT8Io1#cW-h}dP$YuG(o6rm zemEa*fNz{QLiFt^ctf{AgB#o)cEAN0H2h;6U)2QEA|pxV5+$E0zx=8P7GTWGp(bIb zRRc4IeTRzw&HhfRw??v`)DoEFA^+O$ck|D-LQtYF^B7;x8SarlFg5nwA(6?Y&ApBi zYmS1M9^m3bgr;z)uOD|c^QYX?xR3lK8~IdUSF#wZSe8#J(l3D&%NGav>5f90Z{Gps zdjO_{=ViSLLMr9+{c*&ds+0Dm?lu3}jFTI4Y>@%;9jl_GGlFv|XpcEwY<)04Cfj-# zA<lE6yFHBw43O|$eO?9Bq+t2vGz=nUWYAy#SXX8vm>xjF6A?SLxh5bv~``@!i{vj3qMQ%oq^X7zF)$+yBoWN{&jl)Xlj0(gi+(7%%TD#Ev z(v>p7LK={NuOWGGvC(w7AwT6XC<@iXB4Q&VKzzR85kT#+$$e5Jda*w|Cos4b6 zH(L~&&w0*g1vpg{x#CGBZjWl^+RoOF1_RL=i#A5vdg55Y}gzg$bZloM{@N1sx=2V|!iy>&`&Je%Eybw=i`=G&~WwdTWV z4hF$4Hmnn)62gqlF_@qBbA`!Yb$tl}6#*yGbe^y7`OYqQ&C9^#*#`b>s@Zv`&v|D| z49VS3)R#K}>Y-s_y*%pP$G-zghsSH?55|qF?(YATp_W^zSxMd4+8V1#)QpYxInegW zE;IL^Dj$!GKN%LkfTXZ1)i9TyfB)|5%*4#>hTf}RIO0Fv zKT}B)D+rSFl|x=oxJ>j?t#tcLmJciMTOgZf19h{&qOE2=d*zh@W@qq@Gqo=E;&G>}bkL2q&DGwu^ zda@T|w{?`{q~%}tHh)7(Zi9;7dsGA{orW<@ne~=56d<_f4@y$-O32NQ<`0t0xzkPQ zt~~f4MHVqU1&W>}(JK{xx-9+Ws&w|hBE>l3ev1;1y}yZbh@NH+Ft*pBuk$uEx-~eJ zK@!SKYZ6L#3Q2u?MW9m7nu7w9W?1*jdbTJut>R?NgNR8`X;Un4 z`TIPU6iQ4u~p|Je&48>$THe-n_ln2uaVUOMp$< zzdDUAGE?|7*EaO2(}1#nKgZ7WUBB@m`^|uHQ*cq#)%+oR?wa4gTIr%-b5%K!bj4d) zZT<*g`;I)4hz%Fyyw@Btx!PthCjrwQuMxlME>gO8Cods;!iBRlRpjwmPo)mVdGqK} z#M$oP=nsjda99HP0m)ORb}((rI{xA}b(#lyzXBAPEwKsRqk>BG%Sucz_eTl4U4ou> zoY_4Py>m?Tup{Esu^{ zfj7D=G(?oNw>vc%iH}uS7sJz7Vfu!Kg=zZlmU?2wjeRa!3B*0GE{+b&X#4MnQ3^Ys zuWL7zru~eW1`TbV&#)I}vHQ-2sBX=q%V8Ak4uN;kBO#C?2M}x>V+v)!alYK`^>EqN zJFC;OnE~BGobVOq_r))>;g@<4NdwLRu3(>?iityPG?wP0_Zm?*=`Fydpqmk?R`Ibp zR_ltCCc>3)g={4g7y&Q+a6X+}J*7BC3ieH5!M2m%nSAu!%0Nm^s=ItA#Wy!FW4kx6 zu<7EYVmHAbt$X>s){5`gx96@$uAJVCp;=Tbzr!F&bEu(W{FojDyD}m5>Ncpdj=tKd z?0K<(mI_OP!kzQIisCQcf-4AgV?9#E3ufaB7xxR;wF@Ukr&O{r-hnaU>@b7zaL>~zl7(I$P7Vce1stdlgrIfYI*j%0!BJk%nEg{+wX;c_55w9aTx+ zdSiS9I16vzh9t_qg1Kr>EH|Ywij%4d3>}F;_Qg^qhRGT$}X+E+3^& zO-44Pd-LW^@#AI!1_NI2he@r6RfWp)WvwNh`lcT{P0ND7F~Ltj_PUJ%*X?NS zMW3QrF-0Cl_J?IsiB?NW_PqwYZw+k`d!aV$;i7l;yxSVLH+n$l5EaF&vY!7-P~t+Y zEZD?SF6*|qwQ=Y-2DqcYiugtO43=mI?hrgM!krMKKF z;ie8cE0v>iZ5w7X18v?%P3;2)p=#2F5aST&RAA2SQ@4HWQ`M*MyS zx_;?bPwgG?YE*W+O=2%fpDD~uZi|XVNf!3Tad~7ayFLyVW=+z^ZidSX+b@1*D9?xB zZ)WvfB~1X)s<%Q%8J~G^*|=Xza6(#O~=f9b!e3q{VA`c{Y)K?L7;aI8~^iHVm2-B|BTUF6o}+y1aFk zaygJH<#9?T;r8lsmJR@P{-#g+wzO|(U(LH)S)Kei9OY`k&IM!as?`lDBBj}km+0+~ za>Wp@tKA9IqrGOj`Rt1l6{FA;(ngMjWo$YE5-|IirDsq%-#e!59&@De>0!+vT2qRMg3QwJEu}y1f2;J;+1M{Y*dU#9mYb7c8Sgq}LfH!tJ$t0_ufHWb+_0TzMSF zFt~M&dE*0@aiCB5)C1!4XhoH;UZ#s(DSNXH-Bg(Snjn&8DXAQLVqA$G{V$)G$}oz} z9)~oKtT|*(>j@;0ZS)V!Zi5-{5~pF_#A$Z-0e_@a?yL{t*+GF7geGcMSg(Hj5%{@6 z`qLO$J{#g|IQ{$R?;kdbEZ$#S+JKxjCSQKg*Z48gH{UiQ0;bWw&a}^-YTIu~h Date: Fri, 24 Jul 2020 09:31:32 -0700 Subject: [PATCH 376/589] Update .gitignore --- .gitignore | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gitignore b/.gitignore index 1be8bb9955..9841e0daea 100644 --- a/.gitignore +++ b/.gitignore @@ -5,7 +5,7 @@ obj/ _site/ Tools/NuGet/ .optemp/ -Thumbs.db +*.db .DS_Store *.ini _themes*/ From bda28068451fc6081533622683b8ee216ba76808 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Fri, 24 Jul 2020 09:50:15 -0700 Subject: [PATCH 377/589] Update index.yml --- windows/privacy/index.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/privacy/index.yml b/windows/privacy/index.yml index 8096eb0de3..b9b6ce81fd 100644 --- a/windows/privacy/index.yml +++ b/windows/privacy/index.yml @@ -14,7 +14,7 @@ metadata: author: danihalfin ms.author: daniha manager: dansimp - ms.date: 02/21/2019 #Required; mm/dd/yyyy format. + ms.date: 07/21/2020 #Required; mm/dd/yyyy format. ms.localizationpriority: high # highlightedContent section (optional) @@ -55,7 +55,7 @@ productDirectory: - title: Changes to Windows diagnostic data collection imageSrc: https://docs.microsoft.com/media/common/i_build.svg summary: See what changes Windows is making to align to the new data collection taxonomy - url: windows-diagnostic-data.md + url: changes-to-windows-diagnostic-data-collection.md # conceptualContent section (optional) # conceptualContent: @@ -179,4 +179,4 @@ additionalContent: - text: Support for GDPR Accountability on Service Trust Portal url: https://servicetrust.microsoft.com/ViewPage/GDPRGetStarted # footer (optional) - # footer: "footertext [linktext](https://docs.microsoft.com/footerfile)" \ No newline at end of file + # footer: "footertext [linktext](https://docs.microsoft.com/footerfile)" From 08e831250191f6402d70155edbe46be06facaf6e Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Fri, 24 Jul 2020 10:06:08 -0700 Subject: [PATCH 378/589] pencil edits lines 83, 84 --- .../mdm/policy-csps-supported-by-surface-hub.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md index 8478da89b4..3624010bd9 100644 --- a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md +++ b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md @@ -80,8 +80,8 @@ ms.date: 07/22/2020 - [Wifi/AllowInternetSharing](policy-csp-wifi.md#wifi-allowinternetsharing) - [Wifi/AllowManualWiFiConfiguration](policy-csp-wifi.md#wifi-allowmanualwificonfiguration) - [Wifi/AllowWiFi](policy-csp-wifi.md#wifi-allowwifi) -- [WiFi/AllowWiFiHotSpotReporting]policy-csp-wifi.md#wifi-allowwifihotspotreporting) -- [WiFi/WLANScanMode]policy-csp-wifi#wifi-wlanscanmode +- [WiFi/AllowWiFiHotSpotReporting](policy-csp-wifi.md#wifi-allowwifihotspotreporting) +- [WiFi/WLANScanMode](policy-csp-wifi#wifi-wlanscanmode) - [Wifi/AllowWiFiDirect](policy-csp-wifi.md#wifi-allowwifidirect) - [WirelessDisplay/AllowMdnsAdvertisement](policy-csp-wirelessdisplay.md#wirelessdisplay-allowmdnsadvertisement) - [WirelessDisplay/AllowMdnsDiscovery](policy-csp-wirelessdisplay.md#wirelessdisplay-allowmdnsdiscovery) From 770318a6cff010219c5032ba4519bf8c04078c5a Mon Sep 17 00:00:00 2001 From: Tudor Dobrila Date: Fri, 24 Jul 2020 10:07:38 -0700 Subject: [PATCH 379/589] Release notes for 101.03.73 --- .../microsoft-defender-atp/linux-whatsnew.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md b/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md index d2a63d964c..b20e62b3b0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md @@ -19,6 +19,10 @@ ms.topic: conceptual # What's new in Microsoft Defender Advanced Threat Protection for Linux +## 101.03.73 + +- Bug fixes + ## 101.02.55 - Fixed an issue where the product sometimes does not start following a reboot / upgrade From ccccb44fd9ab82c6cc04f4cac59d2baa5bf1827c Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Fri, 24 Jul 2020 10:20:47 -0700 Subject: [PATCH 380/589] pencil edit --- .../mdm/policy-csps-supported-by-surface-hub.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md index 3624010bd9..1d89eb88de 100644 --- a/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md +++ b/windows/client-management/mdm/policy-csps-supported-by-surface-hub.md @@ -81,7 +81,7 @@ ms.date: 07/22/2020 - [Wifi/AllowManualWiFiConfiguration](policy-csp-wifi.md#wifi-allowmanualwificonfiguration) - [Wifi/AllowWiFi](policy-csp-wifi.md#wifi-allowwifi) - [WiFi/AllowWiFiHotSpotReporting](policy-csp-wifi.md#wifi-allowwifihotspotreporting) -- [WiFi/WLANScanMode](policy-csp-wifi#wifi-wlanscanmode) +- [WiFi/WLANScanMode](policy-csp-wifi.md#wifi-wlanscanmode) - [Wifi/AllowWiFiDirect](policy-csp-wifi.md#wifi-allowwifidirect) - [WirelessDisplay/AllowMdnsAdvertisement](policy-csp-wirelessdisplay.md#wirelessdisplay-allowmdnsadvertisement) - [WirelessDisplay/AllowMdnsDiscovery](policy-csp-wirelessdisplay.md#wirelessdisplay-allowmdnsdiscovery) From fa5e594f63e7ad63b1dd7d8df99d86f42623ea4e Mon Sep 17 00:00:00 2001 From: Tudor Dobrila Date: Fri, 24 Jul 2020 11:01:09 -0700 Subject: [PATCH 381/589] Fix build number --- .../threat-protection/microsoft-defender-atp/linux-whatsnew.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md b/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md index b20e62b3b0..a35d6e6d1a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md @@ -19,7 +19,7 @@ ms.topic: conceptual # What's new in Microsoft Defender Advanced Threat Protection for Linux -## 101.03.73 +## 101.03.48 - Bug fixes From fd46fdefc9fdbf701c6f7adca77a259a587baec8 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Fri, 24 Jul 2020 13:51:09 -0700 Subject: [PATCH 382/589] Updating note about collected diagnostic data --- .../microsoft-defender-antivirus/collect-diagnostic-data.md | 3 +++ .../microsoft-defender-atp/investigate-machines.md | 3 +++ 2 files changed, 6 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/collect-diagnostic-data.md b/windows/security/threat-protection/microsoft-defender-antivirus/collect-diagnostic-data.md index 840b26d06e..ea6ee23720 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/collect-diagnostic-data.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/collect-diagnostic-data.md @@ -25,6 +25,9 @@ manager: dansimp This article describes how to collect diagnostic data that can be used by Microsoft support and engineering teams to help troubleshoot issues you may encounter when using the Microsoft Defender AV. +> [!NOTE] +> As part of the investigation or response process, you can collect an investigation package from a device. Here's how: [Collect investigation package from devices](https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/respond-machine-alerts#collect-investigation-package-from-devices). + On at least two devices that are experiencing the same issue, obtain the .cab diagnostic file by taking the following steps: 1. Open an administrator-level version of the command prompt as follows: diff --git a/windows/security/threat-protection/microsoft-defender-atp/investigate-machines.md b/windows/security/threat-protection/microsoft-defender-atp/investigate-machines.md index 5fd56526b0..19f12472bc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/investigate-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/investigate-machines.md @@ -27,6 +27,9 @@ ms.topic: article Investigate the details of an alert raised on a specific device to identify other behaviors or events that might be related to the alert or the potential scope of the breach. +> [!NOTE] +> As part of the investigation or response process, you can collect an investigation package from a device. Here's how: [Collect investigation package from devices](https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/respond-machine-alerts#collect-investigation-package-from-devices). + You can click on affected devices whenever you see them in the portal to open a detailed report about that device. Affected devices are identified in the following areas: - [Devices list](investigate-machines.md) From 7551a2b349b0d61907a5caef844b0e6d8820f27c Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Fri, 24 Jul 2020 14:15:23 -0700 Subject: [PATCH 383/589] Update collect-diagnostic-data.md --- .../microsoft-defender-antivirus/collect-diagnostic-data.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/collect-diagnostic-data.md b/windows/security/threat-protection/microsoft-defender-antivirus/collect-diagnostic-data.md index ea6ee23720..876f707fc7 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/collect-diagnostic-data.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/collect-diagnostic-data.md @@ -26,7 +26,7 @@ manager: dansimp This article describes how to collect diagnostic data that can be used by Microsoft support and engineering teams to help troubleshoot issues you may encounter when using the Microsoft Defender AV. > [!NOTE] -> As part of the investigation or response process, you can collect an investigation package from a device. Here's how: [Collect investigation package from devices](https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/respond-machine-alerts#collect-investigation-package-from-devices). +> As part of the investigation or response process, you can collect an investigation package from a device. Here's how: [Collect investigation package from devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/respond-machine-alerts#collect-investigation-package-from-devices). On at least two devices that are experiencing the same issue, obtain the .cab diagnostic file by taking the following steps: From ecc19d563e847b7011eea592d17227a88c9afeb3 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Fri, 24 Jul 2020 14:15:40 -0700 Subject: [PATCH 384/589] Update investigate-machines.md --- .../microsoft-defender-atp/investigate-machines.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/investigate-machines.md b/windows/security/threat-protection/microsoft-defender-atp/investigate-machines.md index 19f12472bc..bd6a081f9a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/investigate-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/investigate-machines.md @@ -28,7 +28,7 @@ ms.topic: article Investigate the details of an alert raised on a specific device to identify other behaviors or events that might be related to the alert or the potential scope of the breach. > [!NOTE] -> As part of the investigation or response process, you can collect an investigation package from a device. Here's how: [Collect investigation package from devices](https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/respond-machine-alerts#collect-investigation-package-from-devices). +> As part of the investigation or response process, you can collect an investigation package from a device. Here's how: [Collect investigation package from devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/respond-machine-alerts#collect-investigation-package-from-devices). You can click on affected devices whenever you see them in the portal to open a detailed report about that device. Affected devices are identified in the following areas: From 97e20d5c00b1b7052cee317e5347e109e800d629 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 24 Jul 2020 14:34:17 -0700 Subject: [PATCH 385/589] Update manage-atp-post-migration-configuration-manager.md --- .../manage-atp-post-migration-configuration-manager.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index e7fb66b1a2..d9cf44d22f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -33,6 +33,7 @@ We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fund |**Install the Configuration Manager console**

*If you don't already have the Configuration Manger console, use these resources to get the bits and install it.* |[Get the installation media](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/get-install-media)

[Install the Configuration Manager console](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/install-consoles) | |**Manage your organization's devices using Configuration Manager**

*If you have devices (or endpoints) not already onboarded to Microsoft Defender ATP, you can do that with Configuration Manager.* |[Onboard to Microsoft Defender ATP with Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection#about-onboarding-to-atp-with-configuration-manager) | |**Manage antimalware policies and Windows Firewall security for client computers**

*Configure endpoint protection features, including Microsoft Defender ATP, exploit protection, application control, antimalware, firewall settings, and more.* |[Configuration Manager: Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) | +|**Choose methods for updating antimalware updates** on your organization's devices

*With Endpoint Protection in Configuration Manager, you can choose from several methods to keep antimalware definitions up to date on your organization's devices.* |[Configure definition updates for Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-definition-updates)

[Use Configuration Manager to deliver definition updates](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-definitions-configmgr) | ## Next steps From 03316370bfce30e835523bf93e956fcef59a2a10 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 24 Jul 2020 15:01:18 -0700 Subject: [PATCH 386/589] Update manage-atp-post-migration-configuration-manager.md --- .../manage-atp-post-migration-configuration-manager.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index d9cf44d22f..546889a27c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -30,9 +30,9 @@ We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fund |Task |Resources to learn more | |---------|---------| -|**Install the Configuration Manager console**

*If you don't already have the Configuration Manger console, use these resources to get the bits and install it.* |[Get the installation media](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/get-install-media)

[Install the Configuration Manager console](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/install-consoles) | -|**Manage your organization's devices using Configuration Manager**

*If you have devices (or endpoints) not already onboarded to Microsoft Defender ATP, you can do that with Configuration Manager.* |[Onboard to Microsoft Defender ATP with Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection#about-onboarding-to-atp-with-configuration-manager) | -|**Manage antimalware policies and Windows Firewall security for client computers**

*Configure endpoint protection features, including Microsoft Defender ATP, exploit protection, application control, antimalware, firewall settings, and more.* |[Configuration Manager: Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) | +|**Install the Configuration Manager console** if you don't already have it

*If you don't already have the Configuration Manger console, use these resources to get the bits and install it.* |[Get the installation media](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/get-install-media)

[Install the Configuration Manager console](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/install/install-consoles) | +|**Use Configuration Manager to onboard devices** to Microsoft Defender ATP

*If you have devices (or endpoints) not already onboarded to Microsoft Defender ATP, you can do that with Configuration Manager.* |[Onboard to Microsoft Defender ATP with Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection#about-onboarding-to-atp-with-configuration-manager) | +|**Manage antimalware policies and Windows Firewall security** for client computers (endpoints)

*Configure endpoint protection features, including Microsoft Defender ATP, exploit protection, application control, antimalware, firewall settings, and more.* |[Configuration Manager: Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) | |**Choose methods for updating antimalware updates** on your organization's devices

*With Endpoint Protection in Configuration Manager, you can choose from several methods to keep antimalware definitions up to date on your organization's devices.* |[Configure definition updates for Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-definition-updates)

[Use Configuration Manager to deliver definition updates](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-definitions-configmgr) | ## Next steps From 975a2c80ef148dec64e2850bd3a5d13420f76591 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 24 Jul 2020 15:09:38 -0700 Subject: [PATCH 387/589] more content adds/fixes --- .../manage-atp-post-migration-configuration-manager.md | 6 ++++-- .../manage-atp-post-migration-group-policy-objects.md | 4 ++-- .../manage-atp-post-migration-other-tools.md | 6 +++--- 3 files changed, 9 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index 546889a27c..79850d79fb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -22,9 +22,11 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). However, you can also use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage Microsoft Defender ATP. Both Configuration Manager and Microsoft Intune are part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), together with Desktop Analytics, and other features & capabilities. +We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). However, you can also use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage some settings in Microsoft Defender ATP. + +Both Configuration Manager and Microsoft Intune are part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), along with Desktop Analytics, and other features & capabilities. - [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview) -- [Co-manage Microsoft Defender ATP on Windows 10 devices with Configuration Manager and Intune](manage-atp-post-migration-intune.md) +- [See how you can co-manage Microsoft Defender ATP on Windows 10 devices with Configuration Manager and Intune](manage-atp-post-migration-intune.md) ## Configure Microsoft Defender ATP with Configuration Manager diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md index 2ad606801d..87fb13aa5b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -22,9 +22,9 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). However, you can also use Group Policy Objects in Azure Active Directory Domain Services. +We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). However, you can also use Group Policy Objects in Azure Active Directory Domain Services to manage some settings in Microsoft Defender ATP. -## Configuring Microsoft Defender ATP with Group Policy Objects +## Configure Microsoft Defender ATP with Group Policy Objects The following table lists various tasks you can perform to configure Microsoft Defender ATP with Group Policy Objects. diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index c1a8838634..5e108a70dc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -22,9 +22,9 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -When it comes to managing your organization's threat protection features in Microsoft Defender ATP, we recommend using [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), which includes [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) and [Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection). To learn more, see the following articles: -- [Manage Microsoft Defender ATP with Intune](manage-atp-post-migration-intune.md) -- [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md) +We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). Both [Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) and Microsoft Intune are part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), along with Desktop Analytics, and other features & capabilities. +- [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview) +- [See how you can co-manage Microsoft Defender ATP on Windows 10 devices with Configuration Manager and Intune](manage-atp-post-migration-intune.md) You can, however, use other tools/methods to perform some tasks. Examples include managing Microsoft Defender Antivirus settings and customizing attack surface reduction rules. These other tools/methods include [PowerShell](#configure-microsoft-defender-atp-with-powershell), [Windows Management Instrumentation](#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi) (WMI), and [The Microsoft Malware Protection Command Line Utility](#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe) (MPCmdRun.exe). From 77f8a096b6e084c18121f498f0a353ffd8cfad38 Mon Sep 17 00:00:00 2001 From: Kelly Baker Date: Fri, 24 Jul 2020 15:13:50 -0700 Subject: [PATCH 388/589] Update how-it-pros-can-use-configuration-service-providers.md --- .../how-it-pros-can-use-configuration-service-providers.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md b/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md index f43c02b946..5fe68ff0bd 100644 --- a/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md +++ b/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md @@ -21,7 +21,7 @@ ms.date: 07/27/2017 - Windows 10 - Windows 10 Mobile -This article explains how IT pros and system administrators can take advantage of many settings available through configuration service providers (CSPs) to configure devices running Windows 10 and Windows 10 Mobile in their organizations. CSPs expose device configuration settings in Windows 10. The CSPs are used by mobile device management (MDM) service providers and are documented on the [Hardware Dev Center](https://go.microsoft.com/fwlink/p/?LinkId=717390). +This article explains how IT pros and system administrators can take advantage of many settings available through configuration service providers (CSPs) to configure devices running Windows 10 and Windows 10 Mobile in their organizations. CSPs expose device configuration settings in Windows 10. The CSPs are used by mobile device management (MDM) service providers and are documented in the [Hardware Dev Center](https://go.microsoft.com/fwlink/p/?LinkId=717390). > [!NOTE] > The information provided here about CSPs and CSP documentation also applies to Windows Mobile 5, Windows Mobile 6, Windows Phone 7, and Windows Phone 8, but links to current CSPs are for Windows 10 and Windows 10 Mobile. @@ -30,7 +30,7 @@ This article explains how IT pros and system administrators can take advantage o ## What is a CSP? -In the client operating system, a CSP is the interface between configuration settings specified in a provisioning document and configuration settings on the device. CSPs are similar to Group Policy client-side extensions in that they provide an interface to read, set, modify, or delete configuration settings for a given feature. Typically, these settings map to registry keys, files, or permissions. Some of these settings are configurable, and some are read-only. +In the client operating system, a CSP is the interface between configuration settings that are specified in a provisioning document and configuration settings that are on the device. CSPs are similar to Group Policy client-side extensions in that they provide an interface to read, set, modify, or delete configuration settings for a given feature. Typically, these settings map to registry keys, files, or permissions. Some of these settings are configurable, and some are read-only. Starting with Windows Mobile 5.0, CSPs were used to manage Windows mobile devices. On the Windows 10 platform, the management approach for both desktop and mobile devices converges, taking advantage of the same CSPs to configure and manage all devices running Windows 10. From c3afd06326a0ee8f74463741a6641390b570f8e9 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 24 Jul 2020 15:51:41 -0700 Subject: [PATCH 389/589] Update manage-atp-post-migration-other-tools.md --- .../manage-atp-post-migration-other-tools.md | 18 ++++++++++-------- 1 file changed, 10 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index 5e108a70dc..bce8c8a4c5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -26,9 +26,9 @@ We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fund - [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview) - [See how you can co-manage Microsoft Defender ATP on Windows 10 devices with Configuration Manager and Intune](manage-atp-post-migration-intune.md) -You can, however, use other tools/methods to perform some tasks. Examples include managing Microsoft Defender Antivirus settings and customizing attack surface reduction rules. These other tools/methods include [PowerShell](#configure-microsoft-defender-atp-with-powershell), [Windows Management Instrumentation](#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi) (WMI), and [The Microsoft Malware Protection Command Line Utility](#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe) (MPCmdRun.exe). +You can, however, use other tools/methods, such as [PowerShell](#configure-microsoft-defender-atp-with-powershell), [Windows Management Instrumentation](#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi) (WMI), and the [Microsoft Malware Protection Command Line Utility](#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe) (MPCmdRun.exe), to perform some tasks. For example, you can manage some Microsoft Defender Antivirus settings using these tools. And, in some cases, you can customize your attack surface reduction rules and exploit protection settings. -> [!NOTE] +> [!IMPORTANT] > Threat protection features that you configure by using PowerShell, WMI, or MCPmdRun.exe can be overwritten by configuration settings that are deployed with Intune or Configuration Manager. ## Configure Microsoft Defender ATP with PowerShell @@ -37,26 +37,28 @@ You can use PowerShell to manage Microsoft Defender Antivirus, exploit protectio |Task |Resources to learn more | |---------|---------| -|**Manage Microsoft Defender Antivirus** with PowerShell cmdlets |[Use PowerShell cmdlets to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus)

[Use PowerShell cmdlets to enable cloud-delivered protection](https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus#use-powershell-cmdlets-to-enable-cloud-delivered-protection) | -|**Configure exploit protection** with PowerShell | [Customize exploit protection: PowerShell reference](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection#powershell-reference) | +|**Manage Microsoft Defender Antivirus**

*View status of antimalware protection, configure preferences for antivirus scans & updates, and make other changes to your antivirus protection.* |[Use PowerShell cmdlets to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus)

[Use PowerShell cmdlets to enable cloud-delivered protection](https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus#use-powershell-cmdlets-to-enable-cloud-delivered-protection) | +|**Configure exploit protection** to mitigate threats on your organization's devices

*We recommend using exploit protection in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-exploit-protection#powershell) at first. That way, you can see how exploit protection affects apps your organization is using.* | [Customize exploit protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection)

[PowerShell cmdlets for exploit protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection#powershell-reference) | |**Configure attack surface reduction rules** with PowerShell

*You can use PowerShell to exclude files and folders from attack surface reduction rules.* |[Customize attack surface reduction rules: Use PowerShell to exclude files & folders](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-attack-surface-reduction#use-powershell-to-exclude-files-and-folders) | ## Configure Microsoft Defender ATP with Windows Management Instrumentation (WMI) +WMI is a scripting interface that allows you to retrieve, modify, and update settings. To learn more, see [Using WMI](https://docs.microsoft.com/windows/win32/wmisdk/using-wmi). + |Task |Resources to learn more | |---------|---------| -|**Enable cloud-delivered protection** |[Use Windows Management Instruction (WMI) to enable cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus#use-windows-management-instruction-wmi-to-enable-cloud-delivered-protection) | -|task 2 | link | +|**Enable cloud-delivered protection** on a device |[Use Windows Management Instruction (WMI) to enable cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus#use-windows-management-instruction-wmi-to-enable-cloud-delivered-protection) | +|**Retrieve, modify, and update settings** for Microsoft Defender Antivirus | [Use WMI to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-wmi-microsoft-defender-antivirus)

[Review the list of available WMI classes and example scripts](https://docs.microsoft.com/previous-versions/windows/desktop/defender/windows-defender-wmiv2-apis-portal) | ## Configure Microsoft Defender ATP with Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) +On an individual device, you can run a scan, start diagnostic tracing, check for security intellligence updates, and more using the mpcmdrun.exe command line tool. You can find the utility in `%ProgramFiles%\Windows Defender\MpCmdRun.exe`. You must run it from a command prompt. |Task |Resources to learn more | |---------|---------| -|**Manage Microsoft Defender Antivirus** |[Configure and manage Microsoft Defender Antivirus with the Microsoft Malware Protection Command Line Utility (mpcmdrun.exe) command-line tool](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus) | -|Row2 | link | +|**Manage Microsoft Defender Antivirus** |[Configure and manage Microsoft Defender Antivirus with mpcmdrun.exe](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus) | ## Next steps From f07822db04559b117738c5f9124b4366505e4857 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 24 Jul 2020 15:52:45 -0700 Subject: [PATCH 390/589] Update TOC.md --- windows/security/threat-protection/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 3a80ee88a9..0a747c96fc 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -28,7 +28,7 @@ #### [Onboard to Microsoft Defender ATP](microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md) ### [Manage Microsoft Defender ATP post migration]() #### [Overview](microsoft-defender-atp/manage-atp-post-migration.md) -#### [Intune](microsoft-defender-atp/manage-atp-post-migration-intune.md) +#### [Intune (recommended)](microsoft-defender-atp/manage-atp-post-migration-intune.md) #### [Configuration Manager](microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md) #### [Group Policy Objects](microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md) #### [PowerShell, WMI, and MPCmdRun.exe](microsoft-defender-atp/manage-atp-post-migration-other-tools.md) From d0d344780a1a9e2af3f3024b819d51efccb4551a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 24 Jul 2020 16:00:59 -0700 Subject: [PATCH 391/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index 6f838c10e4..a75256841a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -29,8 +29,8 @@ The following table lists various tools/methods you can use, with links to learn |Tool/Method |Description | |---------|---------| -|**[Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune)** |Microsoft Intune, a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), focuses on mobile device management (MDM) and mobile application management (MAM). With Intune, you control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications.

See [Manage Microsoft Defender ATP using Intune](manage-atp-post-migration-intune.md). | -|**[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction)** |Configuration Manager, formerly known as System Center Configuration Manager, is a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). Configuration Manager is a complex and powerful tool to manage your users, devices, and software.

See [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md). | +|**[Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune)** (recommended) |Microsoft Intune, a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), focuses on mobile device management (MDM) and mobile application management (MAM). With Intune, you control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications.

See [Manage Microsoft Defender ATP using Intune](manage-atp-post-migration-intune.md). | +|**[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction)** |Configuration Manager, formerly known as System Center Configuration Manager, is a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). Configuration Manager is a powerful tool to manage your users, devices, and software.

See [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md). | |**[Group Policy Objects in Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy)** |[Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/overview) includes built-in Group Policy Objects for users and devices. You can customize the built-in Group Policy Objects as needed for your environment, as well as create custom Group Policy Objects and organizational units (OUs).

See [Manage Microsoft Defender ATP with Group Policy Objects](manage-atp-post-migration-group-policy-objects.md). | -|**[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md)** |You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. See [Configuring Microsoft Defender ATP with PowerShell](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-powershell).

You can use Windows Management Instrumentation (WMI) to manage Microsoft Defender Antivirus and exclusions. See [Configuring Microsoft Defender ATP with WMI](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi).

You can use the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to manage Microsoft Defender Antivirus and exclusions, as well as validate connections between your network and the cloud. See [Configuring Microsoft Defender ATP with MPCmdRun.exe](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe). | +|**[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md)** |**We recommend using Intune, Configuration Manager, or Group Policy Objects to manage threat protection features on your organization's devices.** However, you can configure some settings, such as Microsoft Defender Antivirus settings on individual devices (endpoints) with PowerShell, WMI, or the MPCmdRun.exe too.

You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. See [Configure Microsoft Defender ATP with PowerShell](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-powershell).

You can use Windows Management Instrumentation (WMI) to manage Microsoft Defender Antivirus and exclusions. See [Configure Microsoft Defender ATP with WMI](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi).

You can use the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to manage Microsoft Defender Antivirus and exclusions, as well as validate connections between your network and the cloud. See [Configure Microsoft Defender ATP with MPCmdRun.exe](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe). | From b73879a46170903896e9a8e124c2f03fc682f073 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 24 Jul 2020 16:01:49 -0700 Subject: [PATCH 392/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index a75256841a..ee067db569 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -32,5 +32,5 @@ The following table lists various tools/methods you can use, with links to learn |**[Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune)** (recommended) |Microsoft Intune, a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), focuses on mobile device management (MDM) and mobile application management (MAM). With Intune, you control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications.

See [Manage Microsoft Defender ATP using Intune](manage-atp-post-migration-intune.md). | |**[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction)** |Configuration Manager, formerly known as System Center Configuration Manager, is a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). Configuration Manager is a powerful tool to manage your users, devices, and software.

See [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md). | |**[Group Policy Objects in Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy)** |[Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/overview) includes built-in Group Policy Objects for users and devices. You can customize the built-in Group Policy Objects as needed for your environment, as well as create custom Group Policy Objects and organizational units (OUs).

See [Manage Microsoft Defender ATP with Group Policy Objects](manage-atp-post-migration-group-policy-objects.md). | -|**[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md)** |**We recommend using Intune, Configuration Manager, or Group Policy Objects to manage threat protection features on your organization's devices.** However, you can configure some settings, such as Microsoft Defender Antivirus settings on individual devices (endpoints) with PowerShell, WMI, or the MPCmdRun.exe too.

You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. See [Configure Microsoft Defender ATP with PowerShell](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-powershell).

You can use Windows Management Instrumentation (WMI) to manage Microsoft Defender Antivirus and exclusions. See [Configure Microsoft Defender ATP with WMI](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi).

You can use the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to manage Microsoft Defender Antivirus and exclusions, as well as validate connections between your network and the cloud. See [Configure Microsoft Defender ATP with MPCmdRun.exe](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe). | +|**[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md)** |*We recommend using Intune, Configuration Manager, or Group Policy Objects to manage threat protection features on your organization's devices.* However, you can configure some settings, such as Microsoft Defender Antivirus settings on individual devices (endpoints) with PowerShell, WMI, or the MPCmdRun.exe too.

You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. See [Configure Microsoft Defender ATP with PowerShell](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-powershell).

You can use Windows Management Instrumentation (WMI) to manage Microsoft Defender Antivirus and exclusions. See [Configure Microsoft Defender ATP with WMI](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi).

You can use the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to manage Microsoft Defender Antivirus and exclusions, as well as validate connections between your network and the cloud. See [Configure Microsoft Defender ATP with MPCmdRun.exe](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe). | From a46996e9470061a723b0cae5d592407d051506e3 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 24 Jul 2020 16:03:17 -0700 Subject: [PATCH 393/589] Update manage-atp-post-migration-configuration-manager.md --- .../manage-atp-post-migration-configuration-manager.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index 79850d79fb..0a1f8669e9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -26,7 +26,7 @@ We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fund Both Configuration Manager and Microsoft Intune are part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), along with Desktop Analytics, and other features & capabilities. - [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview) -- [See how you can co-manage Microsoft Defender ATP on Windows 10 devices with Configuration Manager and Intune](manage-atp-post-migration-intune.md) +- [Co-manage Microsoft Defender ATP on Windows 10 devices with Configuration Manager and Intune](manage-atp-post-migration-intune.md) ## Configure Microsoft Defender ATP with Configuration Manager From f31da16512a8c4b31d0bd77bc0d1fd90c3b997dd Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 24 Jul 2020 16:05:40 -0700 Subject: [PATCH 394/589] Update manage-atp-post-migration-other-tools.md --- .../manage-atp-post-migration-other-tools.md | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index bce8c8a4c5..07119e1daf 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -22,11 +22,12 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). Both [Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) and Microsoft Intune are part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), along with Desktop Analytics, and other features & capabilities. -- [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview) -- [See how you can co-manage Microsoft Defender ATP on Windows 10 devices with Configuration Manager and Intune](manage-atp-post-migration-intune.md) +> [!NOTE] +> We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). Both [Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) and Microsoft Intune are part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), along with Desktop Analytics, and other features & capabilities. +> - [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview) +> - [Co-manage Microsoft Defender ATP on Windows 10 devices with Configuration Manager and Intune](manage-atp-post-migration-intune.md) -You can, however, use other tools/methods, such as [PowerShell](#configure-microsoft-defender-atp-with-powershell), [Windows Management Instrumentation](#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi) (WMI), and the [Microsoft Malware Protection Command Line Utility](#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe) (MPCmdRun.exe), to perform some tasks. For example, you can manage some Microsoft Defender Antivirus settings using these tools. And, in some cases, you can customize your attack surface reduction rules and exploit protection settings. +You can manage some Microsoft Defender Antivirus settings on devices with [PowerShell](#configure-microsoft-defender-atp-with-powershell), [Windows Management Instrumentation](#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi) (WMI), and the [Microsoft Malware Protection Command Line Utility](#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe) (MPCmdRun.exe). For example, you can manage some Microsoft Defender Antivirus settings. And, in some cases, you can customize your attack surface reduction rules and exploit protection settings. > [!IMPORTANT] > Threat protection features that you configure by using PowerShell, WMI, or MCPmdRun.exe can be overwritten by configuration settings that are deployed with Intune or Configuration Manager. From a103c543ceeafae8ed0b2dea79c56705aa90f471 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 24 Jul 2020 16:06:55 -0700 Subject: [PATCH 395/589] Update manage-atp-post-migration-intune.md --- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index db8a36ec1c..4abc3360f7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -24,6 +24,7 @@ ms.topic: article We recommend using Microsoft Intune to manage your organization's threat protection features for devices (also referred to as endpoints). Intune is part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), along with Configuration Manager, Desktop Analytics, and other features & capabilities. [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). +This article describes how to find your Microsoft Defender ATP settings in Intune, and lists various tasks you can perform to manage Microsoft Defender ATP for your organization. ## Find your Microsoft Defender ATP settings in Intune From c18d38b833fca33f4d40c7198e32bc86ed3192af Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 24 Jul 2020 16:08:28 -0700 Subject: [PATCH 396/589] Update manage-atp-post-migration-group-policy-objects.md --- .../manage-atp-post-migration-group-policy-objects.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md index 87fb13aa5b..3a057e1713 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -22,7 +22,10 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). However, you can also use Group Policy Objects in Azure Active Directory Domain Services to manage some settings in Microsoft Defender ATP. +> [!NOTE] +> We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). See [Manage Microsoft Defender Advanced Threat Protection with Intune](manage-atp-post-migration-intune.md). + +You can use Group Policy Objects in Azure Active Directory Domain Services to manage some settings in Microsoft Defender ATP. ## Configure Microsoft Defender ATP with Group Policy Objects From ad6d0572ccb468bcbd16feafbc4db57c6b03ef68 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 24 Jul 2020 16:08:58 -0700 Subject: [PATCH 397/589] Update manage-atp-post-migration-configuration-manager.md --- .../manage-atp-post-migration-configuration-manager.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index 0a1f8669e9..290737eb85 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -22,7 +22,7 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). However, you can also use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage some settings in Microsoft Defender ATP. +We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). You can also use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage some settings in Microsoft Defender ATP. Both Configuration Manager and Microsoft Intune are part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), along with Desktop Analytics, and other features & capabilities. - [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview) From a8ea97daede4650b94e102749790afe68395fdf9 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 24 Jul 2020 16:10:43 -0700 Subject: [PATCH 398/589] Update manage-atp-post-migration-other-tools.md --- .../manage-atp-post-migration-other-tools.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index 07119e1daf..4ea8ac68a7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -25,7 +25,8 @@ ms.topic: article > [!NOTE] > We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). Both [Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) and Microsoft Intune are part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), along with Desktop Analytics, and other features & capabilities. > - [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview) -> - [Co-manage Microsoft Defender ATP on Windows 10 devices with Configuration Manager and Intune](manage-atp-post-migration-intune.md) +> - [Co-manage Microsoft Defender ATP on Windows 10 devices with Configuration Manager and Intune](manage-atp-post-migration-intune.md) +> - [Manage Microsoft Defender ATP with Intune](manage-atp-post-migration-intune.md) You can manage some Microsoft Defender Antivirus settings on devices with [PowerShell](#configure-microsoft-defender-atp-with-powershell), [Windows Management Instrumentation](#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi) (WMI), and the [Microsoft Malware Protection Command Line Utility](#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe) (MPCmdRun.exe). For example, you can manage some Microsoft Defender Antivirus settings. And, in some cases, you can customize your attack surface reduction rules and exploit protection settings. From 163f6d5e322ad273c85256224d8a942fdb30145a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 24 Jul 2020 16:11:25 -0700 Subject: [PATCH 399/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index ee067db569..c6fb94903f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -32,5 +32,5 @@ The following table lists various tools/methods you can use, with links to learn |**[Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune)** (recommended) |Microsoft Intune, a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), focuses on mobile device management (MDM) and mobile application management (MAM). With Intune, you control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications.

See [Manage Microsoft Defender ATP using Intune](manage-atp-post-migration-intune.md). | |**[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction)** |Configuration Manager, formerly known as System Center Configuration Manager, is a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). Configuration Manager is a powerful tool to manage your users, devices, and software.

See [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md). | |**[Group Policy Objects in Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy)** |[Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/overview) includes built-in Group Policy Objects for users and devices. You can customize the built-in Group Policy Objects as needed for your environment, as well as create custom Group Policy Objects and organizational units (OUs).

See [Manage Microsoft Defender ATP with Group Policy Objects](manage-atp-post-migration-group-policy-objects.md). | -|**[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md)** |*We recommend using Intune, Configuration Manager, or Group Policy Objects to manage threat protection features on your organization's devices.* However, you can configure some settings, such as Microsoft Defender Antivirus settings on individual devices (endpoints) with PowerShell, WMI, or the MPCmdRun.exe too.

You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. See [Configure Microsoft Defender ATP with PowerShell](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-powershell).

You can use Windows Management Instrumentation (WMI) to manage Microsoft Defender Antivirus and exclusions. See [Configure Microsoft Defender ATP with WMI](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi).

You can use the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to manage Microsoft Defender Antivirus and exclusions, as well as validate connections between your network and the cloud. See [Configure Microsoft Defender ATP with MPCmdRun.exe](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe). | +|**[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md)** |*We recommend using Intune, Configuration Manager, or Group Policy Objects to manage threat protection features on your organization's devices. However, you can configure some settings, such as Microsoft Defender Antivirus settings on individual devices (endpoints) with PowerShell, WMI, or the MPCmdRun.exe tool.*

You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. See [Configure Microsoft Defender ATP with PowerShell](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-powershell).

You can use Windows Management Instrumentation (WMI) to manage Microsoft Defender Antivirus and exclusions. See [Configure Microsoft Defender ATP with WMI](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi).

You can use the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to manage Microsoft Defender Antivirus and exclusions, as well as validate connections between your network and the cloud. See [Configure Microsoft Defender ATP with MPCmdRun.exe](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe). | From f4fa0d98dcf7cfee9583cfb73e8c6b2fd08f0a6c Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 24 Jul 2020 16:12:36 -0700 Subject: [PATCH 400/589] Update manage-atp-post-migration-group-policy-objects.md --- .../manage-atp-post-migration-group-policy-objects.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md index 3a057e1713..3f9b7d6e6c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -23,7 +23,7 @@ ms.topic: article - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) > [!NOTE] -> We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). See [Manage Microsoft Defender Advanced Threat Protection with Intune](manage-atp-post-migration-intune.md). +> We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). See [Manage Microsoft Defender ATP with Intune](manage-atp-post-migration-intune.md). You can use Group Policy Objects in Azure Active Directory Domain Services to manage some settings in Microsoft Defender ATP. From 10e06ef26ba25120a16176dedba0a5c76518520e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 24 Jul 2020 16:13:27 -0700 Subject: [PATCH 401/589] Update manage-atp-post-migration-configuration-manager.md --- .../manage-atp-post-migration-configuration-manager.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index 290737eb85..88a0383b79 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -22,9 +22,7 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). You can also use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage some settings in Microsoft Defender ATP. - -Both Configuration Manager and Microsoft Intune are part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), along with Desktop Analytics, and other features & capabilities. +We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). You can also use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage some settings in Microsoft Defender ATP. Both Configuration Manager and Microsoft Intune are part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), along with Desktop Analytics, and other features & capabilities. - [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview) - [Co-manage Microsoft Defender ATP on Windows 10 devices with Configuration Manager and Intune](manage-atp-post-migration-intune.md) From a27cac874e1c8c44e5001b552b69ee71604c1a51 Mon Sep 17 00:00:00 2001 From: Brent Dunsire Date: Fri, 24 Jul 2020 16:14:57 -0700 Subject: [PATCH 402/589] Update URL for link to Intune content for managing web protection on Android The Intune MD ATP doc has been restructured into multiple articles on 7/24. Only this link needs redirection (In this article). I am not aware of additional content that might have links to the Intune docs. The key landing doc remains intune/protect/advanced-threat-protection.md and will suffice for anything that wasn't a bookmarked sub-section. --- .../microsoft-defender-atp/android-configure.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/android-configure.md b/windows/security/threat-protection/microsoft-defender-atp/android-configure.md index 4c9046ca63..dc28afd7dc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/android-configure.md +++ b/windows/security/threat-protection/microsoft-defender-atp/android-configure.md @@ -43,7 +43,7 @@ Microsoft Defender ATP for Android enables admins to configure custom indicators ## Configure web protection Microsoft Defender ATP for Android allows IT Administrators the ability to configure the web protection feature. This capability is available within the Microsoft Endpoint Manager Admin center. -For more information, see [Configure web protection on devices that run Android](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection#configure-web-protection-on-devices-that-run-android). +For more information, see [Configure web protection on devices that run Android](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection-manage-android). ## Related topics - [Overview of Microsoft Defender ATP for Android](microsoft-defender-atp-android.md) From b763045268109aa064a4d1887f3ac1184ff11ca3 Mon Sep 17 00:00:00 2001 From: JiayinPei Date: Sun, 26 Jul 2020 12:03:44 +0800 Subject: [PATCH 403/589] Fix invalid yaml syntax --- .../release-information/resolved-issues-windows-10-1903.yml | 2 +- windows/release-information/status-windows-10-1803.yml | 6 +++--- .../status-windows-10-1809-and-windows-server-2019.yml | 6 +++--- windows/release-information/status-windows-10-1903.yml | 6 +++--- windows/release-information/status-windows-10-1909.yml | 6 +++--- 5 files changed, 13 insertions(+), 13 deletions(-) diff --git a/windows/release-information/resolved-issues-windows-10-1903.yml b/windows/release-information/resolved-issues-windows-10-1903.yml index b398ac1bc9..e0375fb086 100644 --- a/windows/release-information/resolved-issues-windows-10-1903.yml +++ b/windows/release-information/resolved-issues-windows-10-1903.yml @@ -104,7 +104,7 @@ sections: +

Affected platforms:
  • Client: Windows 10, version 1903; Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10 Enterprise LTSC 2016; Windows 10, version 1607
  • Server: Windows Server, version 1903; Windows Server, version 1809; Windows Server 2019; Windows Server, version 1803; Windows Server, version 1709 ; Windows Server 2016
Resolution: This issue was resolved in KB4512941 and the safeguard hold has been removed. Please note, it can take up to 48 hours before you can update to offered Windows 10, version 1903 or Windows Server, version 1903.

Back to top diff --git a/windows/release-information/status-windows-10-1803.yml b/windows/release-information/status-windows-10-1803.yml index 1baf22a6b0..a4aa84810e 100644 --- a/windows/release-information/status-windows-10-1803.yml +++ b/windows/release-information/status-windows-10-1803.yml @@ -20,9 +20,9 @@ sections: text: " Find information on known issues for Windows 10, version 1803. Looking for a specific issue? Press CTRL + F (or Command + F if you are using a Mac) and enter your search term(s). -
DetailsOriginating updateStatusHistory
dGPU occasionally disappear from device manager on Surface Book 2
Microsoft has identified a compatibility issue on some Surface Book 2 devices configured with Nvidia discrete graphics processing units (dGPUs). After updating to Windows 10, version 1903 (the May 2019 Update), some apps or games that needs to perform graphics intensive operations may close or fail to open.
 
To safeguard your update experience, we have applied a compatibility hold on Surface Book 2 devices with Nvidia dGPU from being offered Windows 10, version 1903 until this issue is resolved.
 
Affected platforms:
  • Client: Windows 10, version 1903
Resolved: To resolve this issue, you will need to update the firmware of your Surface Book 2 device. Please see the Surface Book 2 update history page for instructions on how to install the October 2019 updates on your device. There is no update for Windows needed for this issue.
 
The safeguard hold has been removed. Please note, it can take up to 48 hours before you can update to offered Windows 10, version 1903.

Back to top		OS Build 18362.145

May 29, 2019
KB4497935		Resolved
Resolved:
October 18, 2019
04:33 PM PT

Opened:
July 12, 2019
04:20 PM PT
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after installation of KB4497935. Devices that are domain controllers or domain members are both affected.

To safeguard your update experience, we have applied a compatibility hold on devices configured to use MIT Kerberos realm from being offered Windows 10, version 1903 or Windows Server, version 1903.

Note If you are not sure if your device is affected, contact your administrator. Advanced users can check for “Define interoperable Kerberos v5 realm settings” policy under Computer Configuration -> Policies -> Administrative Templates > System -> Kerberos or check if this registry key exists:
HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\MitRealms
-

Affected platforms:
  • Client: Windows 10, version 1903; Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10 Enterprise LTSC 2016; Windows 10, version 1607
  • Server: Windows Server, version 1903; Windows Server, version 1809; Windows Server 2019; Windows Server, version 1803; Windows Server, version 1709 ; Windows Server 2016
Resolution: This issue was resolved in KB4512941 and the safeguard hold has been removed. Please note, it can take up to 48 hours before you can update to offered Windows 10, version 1903 or Windows Server, version 1903.

Back to top		OS Build 18362.145

May 29, 2019
KB4497935		Resolved
KB4512941		Resolved:
August 30, 2019
10:00 AM PT

Opened:
July 25, 2019
06:10 PM PT
OS Build 18362.145

May 29, 2019
KB4497935		Resolved
KB4512941		Resolved:
August 30, 2019
10:00 AM PT

Opened:
July 25, 2019
06:10 PM PT
Issues updating when certain versions of Intel storage drivers are installed
Intel and Microsoft have found incompatibility issues with certain versions of the Intel Rapid Storage Technology (Intel RST) drivers and the Windows 10 May 2019 Update (Windows 10, version 1903).  

To safeguard your update experience, we have applied a compatibility hold on devices with Intel RST drivers, versions 15.1.0.1002 through version 15.5.2.1053 installed from installing or being offered Windows 10, version 1903 or Windows Server, version 1903, until the driver has been updated.

Versions 15.5.2.1054 or later are compatible, and a device that has these drivers installed can install the Windows 10 May 2019 Update. For affected devices, the recommended version is 15.9.8.1050.

Affected platforms:
  • Client: Windows 10, version 1903
  • Server: Windows Server, version 1903
Resolution: This issue was resolved in KB4512941 and the safeguard hold has been removed. Please note, it can take up to 48 hours before you can update to Windows 10, version 1903.

Back to top		OS Build 18362.145

May 29, 2019
KB4497935		Resolved
KB4512941		Resolved:
August 30, 2019
10:00 AM PT

Opened:
July 25, 2019
06:10 PM PT
Initiating a Remote Desktop connection may result in black screen
When initiating a Remote Desktop connection to devices with some older GPU drivers, you may receive a black screen. Any version of Windows may encounter this issue when initiating a Remote Desktop connection to a Windows 10, version 1903 device which is running an affected display driver, including the drivers for the Intel 4 series chipset integrated GPU (iGPU).

Affected platforms:
  • Client: Windows 10, version 1903
  • Server: Windows Server, version 1903
Resolution: This issue was resolved in KB4512941.

Back to top		OS Build 18362.145

May 29, 2019
KB4497935		Resolved
KB4512941		Resolved:
August 30, 2019
10:00 AM PT

Opened:
July 12, 2019
04:42 PM PT
Devices starting using PXE from a WDS or Configuration Manager servers may fail to start
Devices that start up using Preboot Execution Environment (PXE) images from Windows Deployment Services (WDS) or System Center Configuration Manager might fail to start with the error \"Status: 0xc0000001, Info: A required device isn't connected or can't be accessed\" after installing KB4503293 on a WDS server.

Affected platforms:
  • Server: Windows Server 2008 SP2; Windows Server 2008 R2 SP1; Windows Server 2012; Windows Server 2012 R2; Windows Server 2016; Windows Server, version 1803; Windows Server 2019; Windows Server, version 1809; Windows Server, version 1903
Resolution: This issue was resolved in KB4512941.

Back to top		OS Build 18362.175

June 11, 2019
KB4503293		Resolved
KB4512941		Resolved:
August 30, 2019
10:00 AM PT

Opened:
July 10, 2019
02:51 PM PT
-
Current status as of November 12, 2019:       
Windows 10, version 1803 (the April 2018 Update) Home and Pro editions have reached end of service. For Windows 10 devices that are at, or within several months of reaching end of service, Windows Update will automatically initiate a feature update (with users having the ability to choose a convenient time); keeping those devices supported and receiving the monthly updates that are critical to device security and ecosystem health.
-
+ +
Current status as of November 12, 2019:       
Windows 10, version 1803 (the April 2018 Update) Home and Pro editions have reached end of service. For Windows 10 devices that are at, or within several months of reaching end of service, Windows Update will automatically initiate a feature update (with users having the ability to choose a convenient time); keeping those devices supported and receiving the monthly updates that are critical to device security and ecosystem health.
+
" diff --git a/windows/release-information/status-windows-10-1809-and-windows-server-2019.yml b/windows/release-information/status-windows-10-1809-and-windows-server-2019.yml index a684f5350f..1260d1f9d9 100644 --- a/windows/release-information/status-windows-10-1809-and-windows-server-2019.yml +++ b/windows/release-information/status-windows-10-1809-and-windows-server-2019.yml @@ -20,9 +20,9 @@ sections: text: " Find information on known issues for Windows 10, version 1809 and Windows Server 2019. Looking for a specific issue? Press CTRL + F (or Command + F if you are using a Mac) and enter your search term(s). - -
Current status as of November 12, 2019:
Windows 10, version 1809 is designated for broad deployment. The recommended servicing status is Semi-Annual Channel.
-
+ +
Current status as of November 12, 2019:
Windows 10, version 1809 is designated for broad deployment. The recommended servicing status is Semi-Annual Channel.
+
" diff --git a/windows/release-information/status-windows-10-1903.yml b/windows/release-information/status-windows-10-1903.yml index 4fe4e28478..e52c2bd1fe 100644 --- a/windows/release-information/status-windows-10-1903.yml +++ b/windows/release-information/status-windows-10-1903.yml @@ -20,9 +20,9 @@ sections: text: " Find information on known issues and the status of the rollout for Windows 10, version 1903 and Windows Server, version 1903. Looking for a specific issue? Press CTRL + F (or Command + F if you are using a Mac) and enter your search term(s). - -
Current status as of November 12, 2019:   
Windows 10, version 1903 (the May 2019 Update) is designated ready for broad deployment for all users via Windows Update.

We recommend commercial customers running earlier versions of Windows 10 begin broad deployments of Windows 10, version 1903 in their organizations.

Note Follow @WindowsUpdate to find out when new content is published to the release information dashboard.
-
+ +
Current status as of November 12, 2019:   
Windows 10, version 1903 (the May 2019 Update) is designated ready for broad deployment for all users via Windows Update.

We recommend commercial customers running earlier versions of Windows 10 begin broad deployments of Windows 10, version 1903 in their organizations.

Note Follow @WindowsUpdate to find out when new content is published to the release information dashboard.
+
" diff --git a/windows/release-information/status-windows-10-1909.yml b/windows/release-information/status-windows-10-1909.yml index 6029fe13f7..54406eaa62 100644 --- a/windows/release-information/status-windows-10-1909.yml +++ b/windows/release-information/status-windows-10-1909.yml @@ -20,9 +20,9 @@ sections: text: " Find information on known issues and the status of the rollout for Windows 10, version 1909 and Windows Server, version 1909. Looking for a specific issue? Press CTRL + F (or Command + F if you are using a Mac) and enter your search term(s). - -
Current status as of January 21, 2020:
Windows 10, version 1909 is available for any user on a recent version of Windows 10 who manually selects “Check for updates” via Windows Update. The recommended servicing status is Semi-Annual Channel.
 
We are starting the next phase in our controlled approach to automatically initiate a feature update for an increased number of devices running the October 2018 Update (Windows 10, version 1809) Home and Pro editions, keeping those devices supported and receiving the monthly updates that are critical to device security and ecosystem health. Our rollout process starts several months in advance of the end of service date to provide adequate time for a smooth update process.

For information on how users running Windows 10, version 1903 can update to Windows 10, version 1909 in a new, streamlined way, see this post.
 
Note follow @WindowsUpdate on Twitter to find out when new content is published to the release information dashboard.
-
+ +
Current status as of January 21, 2020:
Windows 10, version 1909 is available for any user on a recent version of Windows 10 who manually selects “Check for updates” via Windows Update. The recommended servicing status is Semi-Annual Channel.
 
We are starting the next phase in our controlled approach to automatically initiate a feature update for an increased number of devices running the October 2018 Update (Windows 10, version 1809) Home and Pro editions, keeping those devices supported and receiving the monthly updates that are critical to device security and ecosystem health. Our rollout process starts several months in advance of the end of service date to provide adequate time for a smooth update process.

For information on how users running Windows 10, version 1903 can update to Windows 10, version 1909 in a new, streamlined way, see this post.
 
Note follow @WindowsUpdate on Twitter to find out when new content is published to the release information dashboard.
+
" From c5668dba436325a47695716a6ecbd92eddd4cc71 Mon Sep 17 00:00:00 2001 From: VSC-Service-Account Date: Sun, 26 Jul 2020 13:17:42 +0000 Subject: [PATCH 404/589] migration-content-fix: fixing invalid redirection with id --- .openpublishing.redirection.json | Bin 2578156 -> 901253 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 29d82ddb1ccee127e5ed78e3360921b3741c35b7..c806d9395d8a52347c8935d92446ea3030f7c8a3 100644 GIT binary patch literal 901253 zcmeFa%aY?rk}bIJuSm(>%!phR!{g-#E`0H)@iw?(=#G9uD(?3kLGnm+&QKmPdR&s>C2E`l;jlj6^R{_+3e_x||fzvTbo zPm8q51M#oSFHiWxKMN65c~rjb%2O`<(#!I+RR8Vn5+z}JDZEe|L=uYJ^Rq0D0-t`c z7ojmdN!ZlEk#!qLShkN1F%fZB7yb(3O)bmM@dn7rGL&ujxL7|&1y1S$mMCvHY_182*oR;rOk@?Wv zZQfQBEl>UIyZf+w5dp637m=@q{K?Zl(H?d$7f`o(iGK#^>lSPIPxA%bBl;s=c@mSC zy25cez)bOc{D0xU3hxlbVqHZX`lWw&%T`#&*-!kVytO^rtJi3`eX~C7qRJ0A+dBo; z)Bj2)qxS{e=jV%$TdT@I+T+_W@{ur)z>D1K>o0A$P_>jtl>p~Tw7ECyl^}j)aT=B0 zvGVh97o>5F*NzwXdv&h7&YxrV_vff6@Zforp9vW2r%&spRc1Rpuc|$c`YBDz8dmc> z^UhHj9pz)}zWp@yuIQnS64=jY_2g^5ZQf@vNC*Eopr@pOIi9I!*PEwojkABoe^OQn zOq$oTop9I)g+*5m8%FviT zd=O+MK@RTHIQe>63GbMQs=Z(Bw2vGRy@{vW;7JgtZ)58?*yZ_!6|Lzs*Jv7 zi9A(3b?OAO`XJo_Ig#OqmFX1kCGJ$xo+n)V(uUi^9TrMQCLDYsFT9h8abYP3DCAiB z23OMr6A%_}MJdkOG?@?euKZ4Acb~)U3qp1xJc?c8zymU^L-+N?7MQo*~c1MoTl{5jfdTv~SWOe)Z{f7k9*?L>u)8_S7#gXwB%= z58k|U^Ta>iH~Jn^NC=D6(VTTx7l1`5vQtF9#5Wl_*k~Wk;V?Tm5Prk$F5);k3T*7o zfA!#QC>QIUsoyKp%qxPF!d);@!>TC3ho3+pM0r&xEO&+aaSOD6S$5c%f^NBFeEI&Z z7VzDfUgSfh$Zfex#Z*b}$;HS6VjqCkWHzkexR~1+p|RSL5T( zr_D{Uy2|OBq!-^O=Z&&S5qpj(38WoQ_k921@b=Zu-68jc>|J_)!RF4quaLaoo*xbc zoF7ZKFp~GkLJ$653pW_os3dS?p%fC8ku0(Pg6m5k8;C2sd?S)gme2fm=0YNxJGC$A zMktz;qlX^ttDlXU!TK@b27~Kts9n1BeGAtMk?F~p*J>g)a=#6I)9$LJ1gU$~2>H_| zWuZZo;3ePO@VJk_E+b`j-tA$U;ysC9n%MeV$0rWIj}H;qoSQjV?6ahwrDT&4Q|SfX zN-y(^0vG1e`?t}?BS(j*xe35NA01a&0mEK1v$Yl>D#pHTpM@wv09d9NO3y12au3lF z?<^%B#R)bP9y}JQnFYu`U&=KlPY^tv_%}OhW#F@{YbUn>9F#WBN^9x*tM*r3ARj$A zd0BugU_U{~9I1|^L_d3cf4~NRxz%Oh3RmSW8W(&>eWwkTg{fEs zymejCqUDnE3=&>$hmDWWO~y#qFD`jy~)wGJf-Ev!JH&bo9xA!!LCWG z=>4UR9-?fUTB~vke-A1lyDDYAE9`3$Y$V9!#~Y(^*W{ZdqLcwK)Krl&52Is5g{3e+ zQCv-FaOWz~ODMePfLk<|#UsaDY%1ZS(2Mi_^{JJ8v}gf$cjMuVivB$|x}yGOXp--4 zhTb$Eo3Wy2zXyF3`Pg1OfPc%xjoyOlbjw?p>xa-LE6VQ_?Pe?(>iYms7-c?7OP!m` z0&NLUfK?~xsOJM73(DfUs|MCo%Jp@%^TRW|*>F>+rWf*cV``YfGdE{bao#0wMH#$} z$!*4%crwps&(DKXMEMvLy&=1aGO^PHxBhxgrpGkxuC=XG;BqqwZ?@`tXHg1k!x}C@s6C;W3ASfx^ zNgX!;lZUw`RS7QXS{oZz7$undRfrxPX%fG=BX@I9yUMGeejRAi;Kb9v-g&fPF}Z7F z0?`4^&93+r2w5dzc;J^nWY&Red+< zyf=p#9YM^*r)p;8t6T-TojQpP4$*iUs0-|s=xa;wnZomBzb%x26eqa55?uG&Hrblw zBX8YE9WL*{c8yu-<9}DAb`d+rC;G5O#R8O6_XX) zX=#0&E^+7PQNP+?36h7k5OHv{%yjrIIfjsnFWGIdFZABtbQ`7TS;uc+Qup0aj7o!F z`@m?7#{E^W@@}5K>S?J10PwQQ*&1ObgRsugJOwlttJEh4T?nsAO^~3`WCf6RG6GH6 zxi0bh0DNwyFPIK;>Katk*}I$C2jdC_gLwNJ$G*(XsIXiY*Ot zV=vwRd!=TCCSh`*-`Y$ML5S;G9oY%6nV5|VWSXOIn-`$u4o$%@c*#2>Ar)0Q7%?Og za>bzUDfM=P=FTgU^u4UiQMucC9~=_(l~%;G9~cWHO-$5rHFv&4><;2%;!01{x^*Eo z#-GDib#)7=x(DfgU%gH8hB37e-6~s(Q6~hr zBX45}c_dAtseP65VsVYDE;=Tj5+7q!WFwqVUvMzu<=hviLQY8VyMdF7JC!eTr63#< zGo8?K1@JCg+mwxnUzny^%58Mn&btZoE_K@||6kNYbx8fIcE-MU%uWABr5BKUaY^hj@JizGFw1jvAF+w(g+i;Sn!K^aX;Y)U!Dqx`l3lmm~`S0kJCZ(uv!Fpl{KP<7vA$PO{8)FTT0WK*h81W~c-ypqK& zj0Q;^LG2K)$}T7A)dfOSPhn&h7AFFeXtoS599f_3=^yS~|AWjwye{^=8LZ7|_1;^1 zNaC83KM^}O$6ZGW9;%erfFppRu&5DGeKV=rMGBFNf<9{jZn5oX#e1Vfy4-f)y2T_( zr?(d;|20Y-D#99LvIEyaCYwxHCr!1kSV}Tmh@Iq9_p(tf&D~d{n$r$y2YGG!m%S58 z8^A8GNhZo6g65PBm#+4_o%-Y|yOS5-3fr=!(K{vj9(HFqt~(sPSE8pZ;4a(S6f?*m z;6UL!l?v;=GxU16k(lU^E}?+tqP5)JgiXpKI)PaESS!*)d7(Z9NFXTlNWR+Y#zf?; zAVpbVqOTVsAQ>f&?Sb+8KeQIUJ?OshO{ah?y}${25~wN*&LR5uxMV^@;-{kK;+2eh z@k*Yz*GPa$XWj2raR(|VgSRz8*F*1Kc8sF-ku~seexVMg5wi7+CUZx@_MkB_6eVGL z!AQb)k%MV;`7N|eJf`^zshw_2vcBsblDpeLonnvP2@c)TR7^Oq#}cJY-rAE}ca-m) zCYWYntbAnYgfJ>Gc9gINA}^x@wFZJq0lC2D1i3u1QLm)8j>!vP+YH?ya0EpAe4G&ZrDGmfd|h>99U~sqZ2B2Ib8B8L%otEvMmVJ=R->Zs+=2?V;K%7vik?iX zDXL5s0#A`(Zf3O*ELsEi2Aq8=bqrhP7b)qs&~vk_60MYxcyC%_P*&X?gEE=VG7eJV&wtwsO_nY)S384k6D zlr zf;-qa_!GbI21e6f`6Ax=B`l8@uc-2aPa|f99s}Za{@R8d4m{fYG8@I^0Aq5>anJl@ z=1aW#aYfF3gQHO%{FLeBUoY_Y+Qn#4Dz{8g?axs`MN;+!&0vd?SLEhIN9707OTkfG^cSe#{VCO_+L*iXn$MnO-{TFb2pO z#`(L?t*AR zaX^~1Kec)Pv74biMEoorb3eoAUXDv{J{z-3Gy89=+p1-!2W#Mj(YO_J(ApwIuV@VY zv9G!(L*o~!{^e3r$>e3|BjRT%%SA3?;TOWbFg4%i=K%>xDBMN|?=(fX%VNtmG$U`i zYXpvQGN6Xe$W~V&5eCiOq3bp{$Cykq`$w(AR+8~Ea{CIjPf%Zi?s7ES5O@(HLq|fi zbrw56e5GcD2;3o=1HVxW6kVCW(la2I($o8aee+(1*$se4Fy5taZvBr9&`XImxobNc zU{`0@D*6qn9=Tw9N6sArPgPQ?qS5Ob8gm4D0>#LmLHk!F@;46yWMEGpg?nu7sdIUj zQy)yYP;DyM8zRv_zno0fnu0+K-dhVyX>qfW)sh1(_zd3qGszZ4#HGz z3-u{zwUwaarM)P9ucU%c2dErHsSw^3#ksGS8wzi#B$lsdDh4~i=Ta013Cl`lxA+7^ zxlo~SR+yNDyxnWKu9Dk^{<3#WRPRx106R;r?s7<})Cp$JzB$P6HN@8{rm1iHD2AsK zF9>*}YjQY<&P5v0$H-A3>>+cJzOx^kqC}82@7VR-KysKjodD2ab><@JA#;+& zs0f@?e{E1M5~p_;os!N~LTw&hy@@qY*ZD*$7Ug8iu6?djsWG}vWiE~py57IFaXO&*n_(|ffH{aWJ6MiKams|DNvNCMR0|= z!3$_1+|^m0t2h_pw}1T%0A8KMsiLaf*X5f{19bKVKLT=fMy;S`5Jp3;1BB`6>TurJ ze-+)>-VrMj`FJ66nB)vFg?Dud+s{Um{)Z90d4Lz>skC`!C+ic+r9|!BLm*e@&kE`d z&+PDhE%Q~K;rPbE*#Q2AWRD;7E0JDZOczinM~l-aD-X%6tmJf%uv0{d-JxHc_9=~_ z!q`$$m>ebbgE-jfX4mB+|lZNv&g2M zazmBg)$e`ecX^##vNGEsL0x5pQ7G+k9*)p?M+_DMU!D0Ig0byNI4|XaO<0}S_8Y|y z>laa1OBsr{D`TF2vUK*sEZ^Lw?4480s)friO{CS*PG0!%yv@F#+G1y94Z}Dd+0>;c z^qq>H9oS3BU7)ugk%iR{xMlns(tX!{st@1lBrXuuWA;w$rCM6&Azq#9H3W9v5}c4( z@5s`@je3F&U0>(${NChtCS)fCcjg-0kX(RXoy-LqH^EqUWAB@P*0Tb)Gi2A$TMt5C zoqfi&xFOQ5jaZ%B1)^O9!Mjt-b1|>Z_Zq@HcM)z#F`-_a&PC#zN14^I@j81y7xn6# z^DM&^Atw4)r*wfBzlKq5V7wE=$q$UGMXx>Z-1975rSZG6|O z)5g3ym9w<~O0a*uQN@(VQP}=I)WGAISLge2J@EJijMc&Dr2tg;S!nN#9+gTJ1h7DN|1D?5vEbN46?Zsp*xG=c6Zs8xNsA3JT3V3e={w zt&5yNDBC34ByQ}Ow(;1fcvF>|(^Lb3I#R7cYT9Xa_MnKqclf!<`rRd0m`2NOB+7p7MBpZ!0b?)~H zac277TWBj>xhPUd78E^K@WD#uz~_1IPXSb;gT30@+n6?Ms@=1ikF#D9`sJX+6MB z$XO2+kCgRbI6;mcxqHmhDl6WRQX9kVG^sp-_a3M+Pd6G70pHB~QF)r&QT#5+<0wd0 zxg15sP95F8Ifm#^av-Yb%*e^8>FJ`{71^h6Dl(fCj+pXOq1q>L2=J)kewWG36OZo` znWCQZH4+#5R8Gfsm&dsY$`f5OQDUZGAqb)-w>tc6TZVRZj*W_*8h=~{pF@1Fg=2LJ z9}v?J1Ke77jf3qy+WR~o?dlva5!3nbdBs%WU7f-Q#PkrM{$)-|%!b7ERXQ>m+fq6k z?CK0J5z^V{H>7&VdKx0zDFUM;h(d&WU6I!bB-W5uC-Q-_9y#4XxP8#)Azhu@C8vBI zblxK#v2_Y=Z?ycbcOi*FM;i>7hOSdg-WmVo$0nR z;?^(+o{+9i+vL+OI|{iU0@B&c^MS6;?EJIs9>t>)*@Ef}aaEb3oYRD)DEq*18%UAZ zgY6QbI*r4R56K3H8819e(#QZeAn;AcwPWG8AeTn#0dT6BUY4zYIq4!$FiFZDh_9g2U8g>aw z4~Ko~=b=|S6#ELvp>RPD?&<`#+iRtX;-(p@Y>}LaSKA_ttFvbV^oA$6zrDDO-C}sI zE?k6uL#ju-H9feii|C^ShUq1V#jA+jHoXmjHC$H+WRoRV2=H)u#Ze;atCo$C9uj_v z*eb6~yxJxOW4e!xgdsqqR^MHwHm~F}d*=CN=?5>Ef|?)vK;U^FREh?Y+xrEAUr~|9vbvd3 z-o_xgLz)!S2RbJ+lG=uRm&i5M-H;-tCx|(_ZD98KG4Ehi(O(2{tTibc8BH7SMxGS7&#= zXg-XcLo_>JS0`_dXci|C$HwLGMG_!!1XDUIt5xVzHOvx>tIL)R&>M=~utIc-;n}Ki z3HlAG9#J(YMx}w|>(^=A;O!0+`y}-A4&yn^MJ(X8+mM8@L#MyI`r2SWCny+;P5Z%9`EB#_TZ%itqeSLgQu z4JU>15%3!lJ+2cwXji9is(4m-)$2M*l*1%PIG|9~1?$D>=lv?ESLb}T$gZ*s2H_pW zy*i~+#rUl}p*-T+O0{i$9HdGOJWVVahCY3jVkv~@^montf82veun%UV!?U<4JX0vLWm+>ss@)*R` z<;nu)4bS9_YugciA5(#kf!~nmi8_W&JgcOY7miV4u5|Yq7SKg#SLb-Ph%SQ9Af!FK z>=YWxJwNf|w=xQfCI#5$jb(65O^=j+-z3G?Ny~E(yFvY;CD@nXVcOZLd`JK`WN%Q} z8WH!>Oynw){IRpfPWNgn*>DR+?1Y=pS0{F&O^d$kujqg7(eTmA>9pm?k*?0I*~#fQ zhJz%JN@*MG>eNjYOEk?w9z6>6nzt-6vgTZ}8y@gs9lIRz>TJ&z)a7f~koGZ&9R|HR znG;1<|FtO5`N2rGNAhmwc1_4CpjT&nuK2F93i|>)3fmPzI|HCgaa1NG8&Sh>93;!F zVz3eQsim()>Q+N3<{oFqQo#mq{W3bkcot=e+^bpU3BR~Lik#uxx1p|1T<-wv`a7MJ z(QA}f#jecLYL6zar!*aMubRJSnIrSrF1(=wZ~o@$EVkoM|A(X^t@1$pEAz|Kpa1;h zPc2Zp=_Iv=Uq5|%|I)N5oOwr_Hmd=cq8N~N{V2TEkKo35HsFt zi$pgsb$pC!=TJWe*`_GozZV}{gMFzTA%1l-7mBXP^ECI)7}wz+ote}zO9~!e!RmXl z=(=hN_Tx)(M$WzN8dj(J5wR~KadtVN)=?RA!LH8mB4M73o>^`Q?&<_i6j5rv(N}nz zz47O6>r8m7v$!!{`+^5TS0`zPsMUtN>q7Ss(AAlJMEo8?&LW6j4b>)bBkxVpG&LUk zbXa(1J|IlFm#5B;(8JDYoU4n`M9t>#1vN+#`o**b~1VD#m{wNPdop2j{sWwyJt z0S&8*)w!B`I2%|&oK_)qtwvltsB$zOrWB|{bli}(=IbHaB_=c>*avaVZ;ygfsR z;7hl;$zBT?JB9s2!|`5d=o*p1=C?=TxkqJlhB0|n9V^arTyuDZi=DV;_w^kuexcT) zWT-eEL$W$WQ;d;jc7b=SFoI=g22tRZuPzDs+Z&2hUpY*~ngNAyS^|_@n9HZ{~PU0qw@HkA@(AC6EnZe{RZM}<%n==W> zVZv_QRNT~EL35bI!K;g#zBXU=6~FqWFy(b=su}RAjAIdCE^6c-le9oH5%f1GeXq*! z51My`u}6`QI!w#l%?HTM;~9aU(38Wi{rp&+;q@7+YcdPt<8u(`kX2)#ax+UV@Jf|V zVvcx%1T!KR1@3yj&p@cbK;Mw%zI()cw06~~nV~ZwyTLXZ{~2Fv5%`H$zGZ`HeP+$P zM9)R*3dj36#VBvTL{HlsUB`;(cyh5gu5mpM0(M__;3AW;H3gqaPt&UO;AW1}kVkvm z;;hymH(}rU39iUD0*amt>Qm4wSFJ>y=6ewEyI}fP5Mz!72HLyLZv*pvuv&_QSXE8O zMT36)_TTU(yhT|{X^3BAsBirMS9AuhM2xD=QjG3?laHi43b{;=TYR+$AAx-9zjlS~ zM3k2_f1yN^1n)rS703|YcfoU7Mh7#D-f0z`bdbIWZqb1SLtYE&(U_p|nVb*tPE_?B z=6>=)gLP_U>!1oAgy}r1O8-#TT7>< z6~Re_6|Ob+6t5QK8<^i8-ww-jkLSX3o?oMdNhedjpu_a`p}re-&*?sbh6n|XX)3(e z^E;q<0JFP%XYh)VX)%~HX6Z%b#Yvz$NN^5g;iR!dDuZgvN?>V447ditga@2xdXrz{Lch8$chXj8~_)8AsQi_lpfTa7aL#+BXV zv4hZA9$TrJI&tswr>E~u3g$3W$CynI2Xak2M4(3G7*D2ok%yL7vdbfPq0=d7~Yn@fr8xY_2}5}piTL_ z1r}(K9+mRJek-G+%C1i{RdGg?P~YQR#4?axOROvdjKr4BKo{Y%#G70jXXb+wWLqUcv=#xtMLuKmuMSXA3vgh5WZ@Z_@yT_pHY>?D*4Y%43!s7%FV?2qCFb$x(OnS4V zLm$?Lmflq`Fh#rn`PEraaq_zJe2vdIEX}C)ogc_z%ODpa?rr46`7BRoW{GJ1coTcx@<=NZUbZGErmVlQR^I1RiSPT#YEL0 z7I)ZDeH2{aMj>&B8PdDODUCxH$f?2b^JBr}zNNb5c`_K-*}#n!o}&b&B>Kqb(g=<4SH64JSkYM%V#k>CfbN|Eo$%$e46Cd&mbQKL(3Xh4)Z#GN$x8 zd=XdUu>*RM znQ$x1k(U4;0L#s<;*^gv^?hy@iW9l}(+f(DWLVOR&Z+^PKp&atfL1cH)d_@*?&A7< zNwH+qjEi9NalVIIq>3bJrwVT)v|||MxMR|M+kA|A-;5#=B|QR*-AzD@JiU>}32{#! z2`+F%p*2D9vTgaxI7K5^_}J0OM`XI_LrX18IW*ZY5+|6EU0r{to2FZi%1n!w8V4gQ z=o*U$f)7v7QIP6k5tVBY4)9T?F9IHHY38$X(gwoLi+%(#zJ8DgLjv0c!p;j^r)We& z-5H7#61+mr_n~HJ3=%t6#oKvL(c5Gt2#vk{5IczPr~7hy;~ilp>^acHfLmg30X#D0~aZNNv^ zoAs7*cW(}UT!{bp1ONBm|3m)czvTb^@yDMF1b3-GvgTGyByUD_;5~jjmyksjY9sN?%7BiMB@-c zI;P+RKN^c0?8uxMp2!q3#ow+1WNvVBC+@>7M0enEa;UoMA;}-1&kCJ%;4HjE<%u$~ zPyVZ}!cn?{hs7BH9pMqrG~AU4Pn<}{f6oSKGzh@a)i z`k=~+C_%1FjCUScX>um17b4V$Kj&n17Epd(&2z&G5HJO)IwUQ_E>!g+HT{u%4v8B6 z%9VC$T7NzS*dd+|ahhdqb6VfzbfY@S^Blm8Jj+x$N)e`dJ`}5Y>NX>z4gaFj4^yZP zNVaKzha$;>$48_R`yN5-62o!mtE?Z&FN=<{+kY@&iD23JMZ)MF5*kLwi0p+obgNJ`)9`YV*edrY#d=Xrjb4(d zmG+@MF8&)Q(F;(!%eZtjUom|-ArzLSDDlT=8y3q=sf= zZ@4C|;+mqa#d#W1SC~EfzoK*1iCA@+MI4G>NlZcM3ZvR0^APe&@l-bbWj=rU^vS~w zNIiO}JOKI^PrMhwQd6hxVJ)+B5%V!^rkthcOm=)AKM#2*=ow97E1w&CQTNfHYL!qR z7g^T$aLDm8#GFj4OkYzFY8r6ya5#*GpB*WCa3tU)8$Suvl5vtW0*Q|+wRe=qE3=QK zE76yJS!Dk36(>%B#mCuEBvif$ene2^XcDW+16TxW3=1DSCqzx)R#M%|D^#4+EL~+i zbDYD;;Q089&PXRK(nRHo2605GZvH`b;H;2rjK)-`KH0X_+t`-vCWB+-5B>~+@ne)| zs|sOdB{2m?P^`ltbkR*j4lt!%z&dt>Du_+{UXKfx;b{O5CrdbbKGFkUO|OkGDzeze zd}p$4qXc&qqMGzxkp2W&51=0q=zm7NyaY=lCK&`=3fw8)Q!hzTCZ*|*ebm3pJ)rIw zJO{fc8n+-i$fbE)24#+(Gck>+-?IJVjiW!p&DS>u?V#P)fZ)!Vq6myFR6NVYVDK4dYTKiBO*mM@XFx*h!wF61~k}TFD#!T@XD1u}e%Rl?()< z-3BFTMQKI0Dtu+Cxg0_{G>8n-8}X9rCuqR1B~#3Q^`n?#KW@nUs!MWduketCmQlto z`Bv1_h1&bO7dR-w6Th;E+KRcNg65)jiE(3h_C??CIAKWbR|(lD?S5r$9EW9VaB(+^ zGd0l*Fblygh8tWivDTo{iPo{V7nH%CvNW&n+t4=v^6~g0awJHlXxK=Vvn&DND+qjC z#Hk<3bbV5B_@yovWK1l-jfj&e+yKU(vap&Pv59ZB^(Ji^j!kA}g=37R_416#JVqW3gqkJSD`>>md~_b_p?r82|f=pbZo z8+t11J@gPEeBlXonN+YFupHw|1`rfsu#ysS@mU<;gTxJBbC*4y^Eq$|TCDN2Rlm`h zGBu4{wQ=yXQetocX0)NPCaEp-WKju&7F@?ej-;Hg)7knwBi4su@z z$}&bjFj>Wf(%f3p!83>EEIIv7j(}Hj-s^o}Nz@zNfkzhL(moj3KFi7kgcG6=ksE1~ zY6oNpx07^G7gdpAyHqNcOtEJ%8hYw-(GpzT3l)|0im%n@Lc|!Zi{{k(64NuFX#I$q z1z9JdR3!ZbkB6^29dBc zbBOZu1wEP3Q{pv(2Z#Eec+gUq|H&diilrN<_!u*e58Yu(wde7ZG3PU&~!7If!aOBjrUMm=+MI;{OrGw;*fK6$ug&wyDr$` zHQ!S)JHxgdk@PMuzKKYkVz!s2curA2Elp}Kq;ZQ z%EV_H&1vkjK|uUG)fuwN(V@i7jH5(p5>4$i=~a<@^dS|3lCF|6K68rYBH(WFu4zxI z7<0jN2M|nTifOv5YgFID>Kwb-OZB-zW_Y{%5$uG&;8#{n1-nC-U`deNqc=ZIdDBwQ ztUj*9eWevSv{OyLFP(}-Vaf81p54a6Bei2no18cgGch~Fw)PH_OAK9!;L$Kw<;gEj zD&#^lDiZ2eV0?eNY}g6r7vOhj7a-6`VW!N7!@;F22xGIKGOcEeIL5B+`kvO9>nP^tM>)MLDg{|w6lDp5$Q3#*3J~V z>=-a^7>-@@WFm4t=4&_AxuVdIK$a9mE@JVE+LdxYSEr+MfI+^_RW(ft0wWh9$J62L zy{0h|e&HUa?qi8;IlwmO6uEvkF)^~0r-ukhTLn}b{-Nh4a9kbu^Z*hEn0YJE>6g+q zX$wh?SlQ{J;bSNlK}y-IH1VZCUk?@Tq4zo_Nuse1-uL9fK%N!;&CF2XAnzfd&he@T zPzNcE%|=qCE+Bykf-svJ`L41p4{01SO@AL@dMU@Q#euz&w5tEM3uaaRU%1PZ&gGa>L|+7@BV&MM55gbRd4gzTm4zQsfcC`fIVSW(ko5*7i*Zhp4a*r`qIlAJBksVAN z#axLCMU*%Pjnd@PYaG0+NK#ZbZe(s@NL0KVTUp4MV%G^=V#m>s;O=OJBNwdc|`U<4lk`Q8q3?7@Z@~_GNWT9_5 zJVp-d7N;1lqwQF9C{&%mJ@oYPS*W{#m4zr%Eb}$72~L_9@D!p^tJqLVc&OXz;&E*K_EOso40~gA~B6 z9!Li}tdaxm86zCd5R8o9#w8jqmc~6eHB4n(;qjXOHi$U1P940FTu6Fh~xC) zRgsQmQXiyxN&&nZ*dm&KNydsmL`g>9V6rGDhTvm~da4IDvdc5S^Sy~n*mh&u@}Wm7((S>6JJ3UAV;bg?_eekjO6 zAv?Wk4Toz6h-1~`Q$;pgho(MB&K!(~SK!!ApgX{uR#Y@OxiM^IlQ?Q(OO=vv8j)*4 zciI*#V`m4C!ej7V-h+|rpIY|OZs=noD=OhBl~+A=JCS8#&YX_Uwk%nZV>^{sFouy| z_P#FhS*RUjynulloG7^0w{2Cg0d-A~_q1afJ98EuUV&pfp<{#5ZczdAH8eS`SY)X~wo_1Qi66T%BqvHt@S{E$@|go!q}!^E-7;h3hQG4)SQ5D;h`d$%_W(lr9=M$K_a|lb$_xZh)}M2g0;@8dfT;1b1v(b=|%X zq@_6Jpx9#7!cy$+O&#UML<@>o`Y>(~$1y#w+QCe^bzItu4WQfQ9;G#j>?B6_&`}i> zP;FFRHknqPv(nNfc)HTG16y*x0#v))wyWKx7HM;5c$W&9TAZq2e4FbHiESnoDYs1raj}joT$U-KkcmKjQYo5Hwn}FCNxl^WqBe52yq8dr6 zloB3WC{vcbi;y6mlv}F&hATNo$*0#jm7mM6>%tf0C;95p1am-DNL%DjA~A_5a1Xwq zio=TVs1LV%Ku3XGB3MkJ_0_jQw`i$~^X5!9%v@vtWpdqh zcogA@K(&P0vZ2hC2&k`O@CZeoLz!65vvBJ9CqHj*)79Gls-ob9W#MMJ&Q-T`W5(Je zq6T7Wn$ZZ3v{8!e7?rYTTPA=g!E8QNC}WQZH5|tFV(F_}cHFu;^5?85UIQ72_EgI+ z)|aFiEn=RKa;Sj4EvJH7Q)ElMG^1C%UoeIpNny6-Koy6XH>8vb8a-~y4=24WT@1}T zRs-RoL{g#7CKDk_5gBiX+7uoxI%k!Mjm{}yl?+`%YWtLANmf7EY>R=8#(FXk1s9J! zRcXGAx63(7q+wut@g|ek-lAm_Pnk_fZAs8+$oi5ofy%agW1P3`W!5pOYln=zt*#-! zjg9mao=8IjLiL%DPqV`6Id{YyDl!pJh~2VztgjU6_i;qIfX$e`w7@zAWQ_r4?-)n` zIzJ_d{pf7bPuvaya~Z-z7@B>srx)8e`kr%pL4-Dr_M?P{iH;?1<50Ah-!Z;<*59$c zt*>8Y0(uDj%I@ks6j(RAM3*!{Cs0Bban8 zEmtai5@;%C@h(;0eR}%z$;KI}zxLUlG}PbxYITL*7*_bh-U`2d|MbK53cr4TvM8na z+7rVHKik~Hr>_hv{AP89-x*eD^&Ea?kkZdqrSvm{lzz4Td-#n(O21j%!*2|G_}!{a^PSz;$AA;2{R#(VyA3j^PX?`&1(jQju!=DW2@Tb*t_>) zr&X)%CxfQ>X;afYf3mM>o~FTYPZt8~>aAxW)4~n{kWhZwzk>t8t6x?+kB??^fRy-x=N(->tqazB6c=XRDg# znL*P$Th%nr44UTIsu$y#LDM{2)iloxn&#Q6rg>)2G(W6rnjZ|B=7&{H^OHf-{IsfR z7-CP)R%1^;7-CO9tj3;xFvOmISdBgXc(Nav`SD~kGV|lfzMtmDlTAO(4+ekf53BFP z9}MrqA6DOoKN#MJKR?;L@qaQzxqn)Xa{pwAa{sg%<^IV~+4b|2OH?lu~@ndUWmEr!N+xYxtV= z=o-Fh(btBrS&y#an--&M_?q=NKE7%3ZGo>@_hR6i7QGnXKH1OQ!#6G3H250BZDG@< z!3r5}3!8m0zJ0Ra7X#n4dRy4DFhxYp>f>ortKhdEHoFRb`(eMU;CI-<_B!z3Yu3H` z-#`Dbn5ppntNof8eADg}4QiR?mDo-BC7=9NUcSz$< zI|^;!YYrFqgO=7#ETMp2Q>L&rt z-O%tz98G(Km;vtI%}d3``RYNG= zee=NAAv#vMPsG}gvsHj@&nxb^G%+E$QqL#`n3aFM5YEf(4*5GA-i zeHK-jjRIle1*R2QT(;%He3oU+Fda@w6u`}wi-X7oUayw5<^TeVOqgd18BdK3X`G!0 zxIxvcCQafuE5ytJ(saT{H&-LE_hjexPqPc9JVK+J%SQs0ka zhnCwI*w~O^71+Co{HT!1$uCaimQ$`g25#;ka)PPMN5IS#lDc5r;HTQhQ9;2LXGrQJ zVqnU+C7_TGeifHC%^XtI zg3msSZ%8y~KS)f#F-(JsJX|&zyN89JofO6+Jb;{}Xb9|FSbTpe#d9Sc^7|H92t_Q& z24s0zjeXqe`YHRMttzx6dV6vG?el0}f9j#7eYWtC zrXIYNVI}>fHffuJ$0|$k79;j4)V*ySWks2T8WV$*uQ4rf*6ykhT3|LZ7Uoo@LdQJv z5xotgV^sPv(%>jo0#iw5!_{tC8QDd~;igG(#)jNAY%WC0!f<^h8J7|sE3NFE=+%;` z(6BfGkxize0vT+$G`yfH%Jl42dF-8GjUxrcyPQNqfwCNVDES*1?0H3bnR}UEAv08r ztIm!hTnVgAeq+Q_$PbPr$mZg+!`9%ZZLVEEP;OliP1Xp{Rj~*n2bZJjVJu#D&HH0MWJB3btw{q7t$k>kCDy|R>vdK-d8F1l)%iVNGn1J`yz;VPtpF}Zmpa)>RE6Ph(%uTQb4;6sGOe7V@E6B_`X#Z{;DE$ z^q_)WxjC(762@~>U-(wUBo{LfaWRE=FO~AuN6J1k*9dGffpDx$3#kygMacxJw~#b& z6bb71kO`%<@g@50=b;^5rsJ{5QW4})rt@&^hhay*Zj%8xI&-R{LH0v|q8inUL#Y|N zC#P;;atn!7X2|icx`@e^N-|cDBOS<;Mk}YLK;GgF3>Mia1roLguHoi=ss4t!k1Reg zAA@F}yU?q$P?jPwSu>ibTR3d8lBTijVndfSga4)+|Gq^Qs)U;DmGp3`)vd|Hl^GkR z^4p5OnT&>;A*EhWNF!TDgd&KFt(#05&9)mPX#@~APs+|C>1w6gn#^ukJSfsaJ}JBw zWc|o08~yO)6Ss#U^Kdqcg5-^EnX~3uoPqWq6oSoDd?4l5V7%sxBjx*eoT% zGI6u8Il!L%Qo=_4b-C&waex_;9&ayB{%e%l$%h|frh~*4W}3t%J4rn^$!URchaX)8 zuU>$xYDfxDT}y4NvGst#(>?JLR?{tnpP~i}n-tN#EBm#}P6}5W*ACq?ur(PQD|@n` zfqTT=gT>2P-QU1L;-+A;$sWZ7THSF>-W3%wDc7DfMsFm$*g3k3VcO=@+!vC*B0ZEB zs#rw)4r36cQD4WX=&?!4sPNB7wMKj*+O+$#0k-RegC2runbYno&NS7|(hGb>CxIOG z;2ff|-I4_diJS_^Do|!O2gMW_vei`e+nDI}hT?GlLgE7i`GNqmVY|>WF-6Gya4G#Yl)pbj8%yY(rM=e|+=x zYk9z7Ii9>%Kd$iXLPK$+upuQ~_u2prs`JoE_%Tw8Ta#m+K1rg?@Te`xS{do)%+``b zPuDn-;X8_Ezo2aS>C=W%b^F7cuiF>~5RG%XmqQUv_R`ja3+{c|+S=Z zeZ3{B0%37Cm&ne1JffcAl){LMrS-=!%#PWs#uq6Q`T=_O{p|DVze)bt0K%@HU0~vsxQxj-NCW z`#^62k!N{?93LE9Uk`=gKd*Q3@l%)!#9>gY7s4<}L`eZ^n(&07^W?KurPTaHPDII1 zCsnCZSg;ZK3UDiGH}t{PSJ{sxQYX+Fj!IXdy+__LO|U>F zEetJ{zJe2!gz06yxLEz!77O#?Sl~zoc~yq533E~oMw-f~EDeL-R5I>=esvD6PeYlV zcY8m0sWK10MCN)xmfIV=txW_PMFKt!%C=n00b+#}oq9&u-^5IM!MQ=Bx1xZtvs(Y4 zp_4*P-2Awe<1IH%*1Ytidkr^@B>c*^`WKnK=wa4+FmIPeAD(?X~0ujt!FchZFp;``jb{xTEMM` z$+KCIBmFQz!*XOD(H4L9KIv57?RR+s1}j|9x(}$^MwJ$9rFi>=Uw_crD(lCw^6jpr z*GIJ(E%fS}cGj9>lpE!0$9_pR4e}^MYLj3*RNF874ggjbFwX8ZqDV-)5sqn=V?p{y zxVa6Bm9a9-yabv4Y;t1&Y|g?yD&=Uye76t6S|&UhMl*l38Vl_QN9)-*1%pi@%(^L2 zKMHU?(vV@gD=ZQ*ih+fQAg#!ceinWKOL;w&abF;690;@tWf zwPKyZ400v`W1$RvuK%iVbkL;NFJ5p(7*SzQjC9stc4ZlKhGfN4kS*RbdjKm&Q%HBMa z<7imOS^Zfw<20FXvn;%JeapH!dM>Wlpk)RJ129Zg zs{bm7hItgL1H{(bZ6XVv>gU2w;}|lFqy?um)eU%Z%7bkQWY^@k$JS&>7HP_Ikx|Ozu^*dO%PEPq^1KuFh~Ll88~m5DFLJ4}6m)rgMnvrPw>U#;LR% zvqhrIw+v(==BR~E8mx-r_HFzk-Ym-F3{b06iPSao=wpax+GXU&6re?! z1k%={qpG1-CY`@WTR!yKUQg!a2Qf&-$ksz}EO0c?MyE&QrmRc>V1tJ`pkF{d&g=Q` zF+~WX*Oi1Odq926!up!0Y`aw7%c6wt{Y`iH_NOhZUAIo7J1LBgC|N@*_pb5V^pM2+2kni4oMTgq+Ykn&un;3bLc2{ES#yaG&Hk$X#Tfd;uN1$^}i($Z!vys~om6 z2JHJ#?r8#I@d}`;Jk}?E<;g)q&brm!y8B zE9=cwYA54mVYyBz@hdzipk*-~ftWmt@|3RFA7PsDbO#MDL$b?WlPiUKuPAtt4$8W^ z)beSr>6!qIm%GkWhC1?8Wh#<9#XwZbwbVsXEd_7;p;J>iA1N=hNS^dCMP2#QX)doD z5_ty}FK6UBQMPa^($M%)xK8mMSp1w_`&PU--8L=n`h&YBE0M^${$s-9083~mic4Q! zqgS_TOTpENF`Uvyolj>#<>j`w+c>;5t`TMX1$tWO(M~X4kfje(29HHt*2kQNZ(xF< z>;mXkRzd`l%m>3>hNB^%WupUv5Bc=`Axg8J7dBX(yP9 z5U}#pLBh!lw14+KD}EslRbI(5dxES#9;T)sbBZ~Wl;aR(ZAiRanb=MgoHO~P;1a4H z5I1`K%UK-?toM-XkoA$c!p!i#@$)o{i;*>> zCu{c)y&$EM$^sU;ZUJKC>2i*!Vn-H~P!$=uTkOAAlodXLg@YYcF``1zy*Is_FXo4@ zG_H+ONP{Y;qFO53F2&LE3uXyY9%dnHXEY5*n4g5L)V)>7J%x6+2h|@$m+09&siBww zjfJ~3K-&tHB0=0yvZCbxN;m|8hYJ}58HouaRKifgayz1+eb`d|IH zQhD7|4M%0dnd`ywg)SE3Wno#mc|GZllO=^+H?U=?yA6hqA4>2dH#i3!=Gz>ruL}e0 zm$`R7&ARqZ%Cu1~b|s-EV-O1mJLt4_5;?s++l?T77<;99c%t!ICmgxS?1U-(5|$u! zl3933a=cwli$&Ui+=tHuEsije!LDH5CHFR1C;4S@ncO8(qvB;Or9+Qa12K#pnRP%D zmSo}!pJ|t6ys)z`I z15DV}eODy#tzTvsWSQ*yEag}a!s4J~3=0Q4ag@B6Toh^(NACb7uy&al$HBqM+0W1< zUEhq&P)~K^5lw!-RB9wyg`*|v>hM|iAPu9#o2>INc~eAumSH}m+yVUYK}b)Rj07U5 z3RC|Ia)%?iMVm8rg&4gRmqX^@Iz^*tr3Lb|%1o2ev!7sI3+2I3b3|OINFqu-^g^#Q zv81~>vYi^U6s_wFPc+5t%Jv-6CobTIuJI}!6L}VPy(X&pbX}0P?b>nEx zX!~SXteolBm3nB<<uL&8a6b*x6=BK3Ijp~$* zG;m}RCetWi&ZQiI#>yQjCHt=6`mmYL^KxJe0^=lU`uh(1u$Y7iz6N#iO~uK|>I1)(mZr#-T8AQ=*Ft&IeVx<0i<{vsWb-BweAV#$4$rlRO+E z%T>6#pW`%W9Nd{fI88o_?rtSV36s~q5J`by!DyCan1m3fRSu@@9@#}udALQMX#~O4 zmMv6xn!sOQWFm+T5o8lb858yJ)?&$`#6Hf%=Msyig4ZePu0XN!rH%DQ`1Jf%IWb*# z#3FgLeTucvO@+t7p$h3h`C;NHMS18SQHI~8&`*N92Cg+U{d>a!CKVaIh}X|{X?z4B z50g3KkgfLQ_TL-5M=L>af{VfW6x(uiwLgQH++)inmN?i!@d_gQN&hiO{jQrfwkRz3 ztGM*`;^eOOc2SIZ1i7B-(#b}BgDRlBoObn61bW_=g^eQSWo5X9O=3pGx0;Pw@ z*01Jeq2FlKQMVQAvt0)=2N?%*Qzg?6so@RGE!8Yqy0grGo23`X`$@#HU6o+IZ>k1x z%*vD3?`kv+yUXmi!c+{i=cn>~jnZvKrKWY7%?6>vOgeewE%5c4CA(94p%)!IFCM+! zki{pr45n0p3cHjZEBI@2Y{-Rr)U{uHoAS04oF)DwIi2Rmo3qmYq}{b54?K^KM@RVTqyEBoC4tlc$h=Z;stWp=i?aVW`eT3qe+ z_oxwN`6Y`hOZ+n$9wSN-S0uq!1o!Hj7FVm4l9$Q`^xM8b&5mAu)8cB8utxbFR`yhX z%i`+lT7m-xS5UOq$~t>rwXxzTFDu+F#o0#>_rTA?V)xqnJ$P5Bz}D;k$;Qm|kjzBq z4uiVW8th!%F?d^%nnqj?lskMKMM;yEbL0-Vz*Gy4I~>t7=`|7;7YH&~++nB8&aXvq zK5px6A5e)y3bY2}4nJM5H3cl1ZjdfW)Gd4tu?P>wfDAZ6;4m}`+)+XeJy+$JFFdVE z%z%|HpP@hSr92ab)aPQ;6-D)Q!Qjz+wCC)cm?VNE7E3bHsC5wvL!8U9|~jIjD%>rb5@?DR#}T zCu8GdFBJRgc$8^fiJgXx4Lu#I27&PLB3{w@VB1&s2odVbd@Ju%A9gN5E2?OOmHVjp z7^5It16xJd(DX^#TWIuYa%(sg&_rl_+(B8VXpZ09c5;3n2UWvJ_?T%VN>%%r90yA9 zMBxVqMRy?aaaE>itS)>`9o0v{$4D(LwZqv%)zB%40vxtn$mU5rLNpB-A9L!;JEs_w zhGfT=GNqnJ^2o8612^C>a+C+Bh^o-GZYtl>IBmPyZ+)MSg?7spga|VqEw!l&38RL- z1IYqclw_I88t^@piy%pOr+$kBIrEDGW)X6>PkwUTINmo42`4lAC_M|RO)JP+#JfY} zSsoSJUh$*sjG^IVh{ReAu|)FhVOu>sO3W1qNBGboO+_)@soRncOuJFTn*_>L;NEl9WLJf?N8pNYgd(>z&ZZV`Dl1!eOK1CXi zD;!-;hdq_oy+$;%f?tlhc${L1*Ll;HBuSEi<0MD$;5Z^nh9)3#l_@Sa@~B8j*S4E% zg;DMmZ%N>qbQxT3vc~518W%BU-`5RbX&eRHHs_mUhIf>_&PsAXy2#_=%5&ukizDpt zKUSRZis=(pV{zfBat+2MiSclSu-|Mgf)pC37;@n$*D&PHOO7ygA5N_1Q6G*YQq;Lp z-Jr-kPh4b(`w>^mks-;AH(Vc(WX%+2g#U}Ym0nV$z)`!B$&E@naGcqyRU@uD4GtuCKq%QyB zVd)Mi3w$9#RX(3kf_tpc19Inwb=ToD+7GMx!EKXfCSu@V;~LtgVsibl-Suy{zyP&l zFYwM)9c(NM#x)^VV4UEmomR>#E?ygo6WqKc=_SE%nWEab(DqtTdPm7?Lvex|WnMB% zi~`{VA4ytLJ|dO$V^C)ih{VsMlw0A9pmKsS%@)=B#}O`XZmxQGoM5Tlkd67YwV^n{ zO%dc##x6G+g#||RXjapwwEM4{3P<--yY9botXvM5MxYStHbr+)0HPMI+p3W6szJgC z2nYD6n@q~CZ@jczVX@Cn_=aH{QDDYu>*HhdybL3-&qSP3^D2(R(*3gim1F<&v`7zf zxVm*!(f_)A2I^y|qQ00XpIg-nL*Hj)0sVoJAj}clN5k&9M4R z1QE2LPJW0se%fCd4Mp$kt22PoN_4lZ$G7bCzbk*Kjv@wWC=jM9#W9acc$z6y2TWj) ziOAMF5ao&b37BUw9(p^|x)5`w1x--){4B$#Ro6FT*TNe@&2%t}wxo?RGpSW<-7Z~f zMixM5Og>zAV2(yWQqP2TvpDpAR)5&1b*ZUwb4O=FoU#LUIR;;O8dk8T;R!$xs4cH% zVug;RdV9Yh?~0yGK|mZdb~ZTOC|LDndyDU!H4i~Va9<4jCX zbj(7c{xrCKE{KQHr34DmBotFuC=Z3YbL40v3e_44a!%t{OBq~-rw3;>zSN1sOoS>w z_<=D0G#5&co--I4`zR)pr!(FD>5~_i#r{!Z9{pgj+S0XL?qEV4qGP3^osG2>`Nt$J zO87v~rqK7Eo7m5D=gW;{~E=D9swFqEmlp@9?6q;US&b^QE#&6)U zP{+<(h9VA&)z&It3rU06?4S9k2QfvEf(|(S1Aot}vSaRt53j%fDb-fE^$7*#?&1!3 zNQ?jY1ONBm|3m)czvTb^@yDMkRK)=B+QD%&N1qrXQDiL>uVG%Dz5F5Lzc45HE zGQgh}HwhdkrT(6uAnp{wsDo!m4m(yy6f-HL*=(@%|NdQu<{p=};2_^&k2hgf`869g z0&K1dbJQ^ zu^2+bNZ3?}b_nZf(na|W4SU(z(au*$RNMms*WtKV6*eD$gH6=CHny}R`H)V=IhVv3n zWe>7TGyLjwNbh;+Q8H^(59F)w-1zQlD;;$*H9i)aV)ha}tTl``DMEnk*Jil2(WpP> zg=8N=<(=V06mTohIE#m+x3hw4!qm^+YF*x`+V3LIKVwC>kPiqV7AJbQyul3t*Ru2s z(qHn<@p2;76cf%$>MvVIEABkL`@j2pD$U&vr(wpn4 z4^sUL^PjzK3>E(2>_pU`(lS;4YVw_>GvJQ>i2E+@*(|rUs`TOc|Q9phhZedz91zG#ow=D& z_KB6#Qxc8=oj)0#VdCoi&9zq!pDup58WXKB$PqjARBXZ9bm^_{paTrx!0(7y7ELL+ zUoqX;#!ZbUWn@s=3VHZjpw|$gy_Iebt`LW6cDZ>NG zuwQ_(K5`B-*gQsC6bh!6n1fJ!i@;{Ei}aqX(RhI>D!yGz5(XZ z7^22=w)xs8e0kHAH{9=Y#G6mJ-1Kfypx4&E-}v@ct5-`ye$N@XpA>2L&bZ{E<<~#O zqo1<3ww90I#`;>HTYZhqiPruBr8fO;>VGk)gNP1v#!m*i}gdgkmc$ez%aGv44MfJb5>B@{R9?E08 zMRh;2>3US*29=&{xSsAuHeC;`Lcix#+SW#zq4%BbSEW*Zwp`DxFTjN)!~Fk>LZmcK z_4Sz3+rEC)uZ^+qU5YKNCZ+MNlmouB={8-h%p7BR>*}P!4eb4)r4D|2)3s~Q@J8aP zfBL2?&^E6YS-eNrU(2?BF0<*4VcR5g!^KSHrWZfQyIZ|Fyt_O;>hjh* z=bJhp3TXJr8>I(;C#0jTD=07M`UU5@636U*iO=k1b@##X)jen&)vHo$cGDGQ3@{YM zOPOYUNH^`|ylo-F6101%0- z_$5oo+S|PDaowr%!5iP(YN72ldAMBg8juF$y6YSJinUc)(6PNWs&8(!#71ITr$S*s z=T(6mXm5{lK3SZqlGoO8c6SfwqbOWpWjLjg&U+Mu>&pKenr^~!fwzu9)hdMNqihV( zW^7&6@t`JzY|6TxXXRJ-y>g!3=WVUqv~%~KR^IzAzvJ~wPu5rZnQ5h;t*`V8(@MWs zU+Gt-m43Cp(r-*F{bqfo-Vo`icX9Zjt+mNU1pCE(Vy+DF zJ6ERusI4`=rqpX!H-WHh4t2k6YsI<)l<{ramENn5+gkHMh>*Hn*Q<{nBPYbq zkc6MU2?{S!bXmQl%Twd-!r#hQcG}MP@ak*tYLgjA*4_K@54QsM#Qf?6C=YVW*{DN6 zvd)m|#?j_&-L(!r^oI*A@2+-swA?HgEgh+Rl;Vl9YS(zIyD^G&7p@u)-u>v^ML!ri z*7Nj0e<6cU)On{P{w6h~Zm75N1vb3#55U@rp`rNix*{+w%k9Ap*1@0)qT|@g1lx_N z8s!VBOltyI^;4Kb9_~QeLNK(;x>r2!MQ7Q&RKCfvQ?Jo=ThpcT(h2KyeVnFq>hSO0 zRhF~Gq9#F3CWAR?CZ?hJZ${0aVEDp>%G8O?A#krG;e*=@tvN9i7#4x`W3*+;z$R34pW730-|OUvvm zXQNdQ8;7z_c3Kr=@XH@>MgZ<2IZoUBs|?^`iuUJEPoKU2_p^Mv(XV&^{`dDU-+p}i z`hUIt&r9)-r>Fn>?m3?;@@-C}H-Wr0b&b6oHg2YL$qvH0YI#B9@8%fXoNq4wP<_7< zAk{v2Qxa4f1wMo^tS#R!ghP3Q>u#6JkHu!|pRMfMQZVpFCRc2R!fm{q@P=Qy@EI@W z0W6ztKH5;q!U$>cV9_+LN{-xZNuxH=sP-3K@bP?H%7>OXGYuX0L-V!HzuRm3^T`lbGEE+CJ8^WrU1KsE zo-9)Gn0IN(ebHa8R1vgxj0=MHRLNQvIUo&n{rPQ$!VDmgpOq&=4L3S7`XMy zdw{YK`wGC~Mh`;Tl!VI(?@oE5BNQvcRDj8jmLM<;Yo%jx{e*_J%M})*{PuHw{|;6mK1Am&MgM8_n`dPqnVNQ)WiNfFCie3v zAI;g4KXc^cnCw0N>D74Xuj&yvn=^4mS!WyWaxwb`XoLbIu~a`)SneWDGjiIXPkR-STN8W_|xI5pylVhKE<(%`8HHAXvzgRyr`o z$*i=!GIQAA9HdkDO8@)nndh1;1rVW)rNN}5s+!*5cgn~wFv@THMK`5AqaZdV!eoXK z4RRMW4Cx+H?GnKSP3T661}b0BFDkS^i+UTA$z200;6oLdOG14j@fwLEVA_-#tTcje zS`*T7=F74i1uZ=P^3dori>XC9AzQQE$^ApK7Eucn=BtOrCvqShNzFNeyI=ZUWbGQP zDVi_X@|$|;L5kY;hpT}C6IV+22&Ap#$OuhSxQ9Mf+R;R2H;z=MLe+;jz0mJ8*Ti{9 z16FyA=H`Fi7@KGGt@*TSW2H1MskN2*)^5d^j8jOE{dUl*81lm~^yra86MWUpkG$9r z8Dp0~wCd?qOV3v0n>0g(Y}8DdRx=&@f9X=X2f=(o55ev=cQLsFTgms;_gBkJ*l3lH z%Ba>i&HKs-Y5(!@=>FDvKp7^FykS<`Eg;K;`WBNtbs&3jZm_?D=|%1?=|tXBdL z2>J#YADY_LHdg;UGpLh3gDTEfKX{{xW!QZ%LLU`i^Rq{mVAduXr59}>!pkATqr6ZMC%B18g!b79<8hYtw|QyZrwEcVNdxW zosDpR!LxO9z0>uIwSl}mn6dr#E?8|7XVu+tKl0ulz5t=Q7IkVHe)cTBz^rkGfiJtD)wpmV&c4rLETRZ6=7wnV|L>|VjCA9H7fzg?rD^|_Z>JjAG0F6YsKm# zq;61-Co-AuZ`Oq1va7caEnGg1o0r3f)k3M7W=z)&y!Rh=nWz@6oqfi5Ql}R-6lS_< zo8sf1<%WP(UM_xFm+H#ESNF*4virY*P_$BbgEWpYlo^_Cr7nNYYPnh@sHClo&Xjlt z)3ZSG_(xy5o{U!;*~%H{QK9pPRRMA~Jz5E)l^@Kn>UffwhfOHId-laIRjKt+4}XZk z!}2wKISC|(qG%)a4$&`qQMV%lPy_1xB3T>tYcD>SOBN4Sb5$j@NQr_|n+RD1Pxryc zm4{d;3qfU4>T7_K<36}DRKh3?KzNhtQkK8XJ=j|R-|iyRy3K^Wk^4!JZ)$-7kMhl< zzH2|mZ~mBV-s9qzPo?P4*)fGNk<_2BFr!#4gwnCxif5_ez4DCy-PDuX;M!8_S}A1H z+!WJy?1g|eLaXjB_+xvVOeZI^ZgRqy_T#3+vbmT)>c&$af47z#nrj%D`PBN}5a_qb3Y#w_=Y5tSEr`*tr?8 zzZWryxO|a)>{K&KynqH59>(#=+!J-2<;t6rY)tGA`}UTns=mYiZmVy%<3TUC(l1_= z7ziJ)OznFq-?9%I#?}PX0?@tFNgP(y<_={dq09j>&hl>=vhm(HGHlSuJspR?&xKy65X)2kacg9-&MK4Itr6{2 zWg1qW^(S|c9?A>#>27zDR{Hwm=6;MXI`<#$;%usJ8{u%vVO;tzq?ej-4!WhtJF5K_ zTUDMNdUWW#l`E|bZyH%Gm=H~^vZ&JzRM>~D@k4WuY9EUNfgBaq{I~~vV5!ozCabYO zw!{2->9Wn0EW%f5eX88+68%Qw@(+93uO!`YK(0rWz){-)QiZx8=A*KpI>3G46i&6k zuAyymlBow4Jw^{ggnK`D`KX&r`DrA}L$6I)!u(-94+srWWC)GRTIHM{b(=3DhMdce z${+YZUrv5mc!{{koD*DH-xs&YcGVhh<=50B{^jptBlPv2B#SK48>E z4Dr_&kuTMl&5x{qRag2Wc}$Nq@}9nZdX~PEr*BVBt4m@1>D@jm9bVULVQdzra<9Ep zL@nXoR8KOfORv_KMr5BB>&)h(+w^8^em+KC$T=wp0n15BP733KO>58SS*;_Z>EE{N z50hH0d^iE|{aLri1B#7Sy7 zcW!FL?=ErftzWMOIltM8YcqFbU$Tufj*OJo)3#8(hWtQe7@+AMOH-zQE|65Z za4_d0!DAEAPQ<-i7vN%{)zz5tnC@Fy>kSYab`W{AzwbWYIg_%G25nB)-AA+H&af#e*}<2rF0e$hIgRps zBTck=?wVQV^*J&0wk|^HTN=W!869Jw{>GHh(auYR%{)DG2@|weSJa&k41I939q%u1 ztz4FCLBG95^HqxrO}~8qwzdkpy-50^%>^PXN|`&B7pcE$aiP+5#7HAd!G>q?;XDTO za+)W(S0A^!?2E|vk=^ahQu$Gf%Pazs_$cS}p6sr)`7Xy|KQk@%Gsj|Ae%)W)*u4w2 z-q|l4i~Y*9vtKzDYx#z)ch=@TTYvOB)6Rb9*x6^M#XehHtSRU*J8aps=zZSe(qGdE zqb-o&fz+7L^18d<-g42pAFCRDuFC1Dju`I9*vHdg^J?~QI+JD18Sq!ebj`p#6pj$n@x$qsRjVY8jfly8lEx4@LfD`iR)%(>U~ysC z=%Pg(wFF<9$?!9TOyt=sYE)ORsyW-v8c)i#?^Nus~cVPYW+VUk>Ds zP|8S?3Smm)R2meLKUcnH26uV)0IUs3dWq8FMGeG6?ohDq_Fw(*&6c5Vx2vyhu@t!F zPieUR5b2Is?o7e?@mBTukG5D;|s1ApJ;|)4jaT(EfJoVvU=i9Az zC-gAw5?B9N%L{2&BX1#g?VrEd(uB;r#lTFY__pqSDlyH_GyZ_g2yETTDw0xt|9|%0 zWVvx9Sr^`)rzorSK{J(;QoX%q|LWh}2WSI9kVFXt&={mt9Xs!SKaUAB2@-Gzsw>N^ za*&jC_b)smJbb)KQds0=S8zx|W`X_!S=#qzfZBbol~f71`03FyWs5os9fTMcOjmx8 zVUkdbF`Cwz1>FE+&&+S8nujz|DN5LzjbuOywk$B())y3K4hq8(?$$Dcn3P-wVR*LUs6;LOvX{^`A-j}?C6+&ytTKxUO8J4sIgA(fEw@zF z3f0-SjPVa=iKXvlE=Ct*up6t>#-)`hZuZOUFihjr z(0_F76hUy=`SUsC1n-dJXw6k~uojNBR1l{;JDIYzv0Rp6PH44(MOFx<+)129P_-eV zoI>W|#r8z65YrTra*(Qkm}V_Ky65=sRxGCxv`d#w)C_~R57AFV_FzU|^f`&NUlr}E zv%U{iPRRkn2G~5_*dSBoj4Gjyawkn=L$XpFZ&s)w;4vhAaWk3{=qF%Ham*mly@pk zexc217%CtVG7zklkHYIXqD|MP%`dV&@6~Rn;Q`@Kl!WVqmD#bG#wvGq3~lsU_NztacVeCb4`X#yME?a<8E-(#dEx%>c z-OIkUCNRJ(yPI9Zuw(2n9BvWn=djjxdL&UL{Tf>DwxN5XPvA)oAa$2e?o7iM7gBnS zaxRo<8ox%&*GV6tNlXc0gp>4?GVBGTqw3?iL^(zYO^roTJr@ea&kMlk@^q8ZsBA@0Go%9etm?`P(`X+sR z&~de^ii?8cP7b)Rz<6KGyzopvREqAXIkyXHLO*qAgeIGarfA8YEFpgo%hpM?NpcJL zdcpCjoqr;sIxFP>U2ajkp+R1KwN-DXjf@4CTS)d;t6e}M#3u||>QO2HVuTVKuS1PX zEYbltof|!ctmAn>MeNv|bcK#l6_iq3KsMQMS~g<&?3;~F$qqd((a>89J)YnJ)7ily zJ8y(0mxw0grk}M0VTBcCUrKk^DslNkXH1fb^&WM&|Yy1 zs`0=@n%%+4%4lo?2nh`S4D;03Q^oCAOG-RmH z4K&MBjy*5T^K|}1yV^qBSqBzwf$KE6gtb#}y@9C3f~($p7VNGOW*2t&aU>(}Fl}~` z2kjaei3dru39Nft+EKrqImqN!{4F18*=CE>K&|VbTKf()(Lp)D~4XDWgNE z>Iv06m)2;XxjIaAcb!V?!l&7qC%Qs#`W4H9IJr(LJI;DTH8<2u2ct9kU}BK)u4@ZbObxBBgW)UUt& z_Ir_5c@X|9^UL$^|NQNDV^SGK+f@k-2riKguZA(WOib$2dR(H@XG6D@>-Q$Xo1)%3 zWKnYfJMW-orwXcvwXPdYQchHRG;*XnjB0O}D7U!vzWE!O5e=amx4MWj`wfC}YumolMFee=loqvd zp$kgepeiSD<60LHwLwo#$kwGUB4&%CoS=Cahd!pHC+PxXlqcCsEsBzY{s-Gj^##*5 zUPLsvO;T<}yQYhXuwA0u;-Z4T5w=u0B*jNjh8Hh@<&UCgTd3-n$ePve?j>798+qNk z=OKPp07Pt?L^(Tf<&KTuEqFwR;RJ z7|jpM4Cc5o>m_nD=WhIIM{^QKhGiJcZ27v0hN}p8l&lWt=qU;=hM`JC~=RLfQnk!?!`w^`agN(>(gPE3vbrtBRftRk?oASM?*nEmWD3kdG6;?x@gF%E7$-z zW+{_nbh61jOiI`!!7dFF1u^M}b{C4Lf)K&uVA1rB#)>7VhwT&Nl~DJ?rUeUs`j~6W zbm*JD+f6zGa#8C^tBXwAOySp}!z$Mygh%f}$2|4Pr5CIz!e`lPqtsYsgb9M4$E`k% z`ra;pGmD&8De}ttGl;7Ls);G}QJpfj6+VxkqvV*SgwHL&tRN+&8k&t>_bB&4V4y$) z)5a|Y&m7Yl|GbL_Ry>aWzgdrmx=LP|GNy;T#V%HBilA%mlxo<}CT@ecFp?{U4jI4CD9gy+o8K$5*rQ}+q^5S;%uB0C@Jf@2T4&KHIaVpD$WAv#XLKEP zi7-oaVk#ygFJGLRPiK|Eyz9L1STtS-L6{?VooW}E9_qKribzd+8$Doxv|2cM-ML$= zpe;%QvenJx;7Q6qGP0ssuE5Tt%B#t-O39I%?iS5{II9Gzwb%!$80*&n%K{D1VU-K+ z%k-4MhteM4`vxbpzvpuN-6F~?v6;cfvVN{xA+roTS*dPMiB#>-y_uso8V2SzZZlR( zc$^&bdg%ga9^;oXX{o%Lt*^5R(dHqFSQEH;(Ab)3>(m5TSEC4g8t?(FW3+9%L|7$4 zh4DFo0Z20dI8V0$I?QsR$A!SHt9og)>F~;xW()U$cPDqLKAM+%9NAVFrWayhU`Z&8;M zyDsJ6RrH?3HDNAcYYJwzx+(5nK8^4OC0PMUdyD#7TX0#2#q7`%5H>XDmnrI4^vP}7 zdNf4sQj-vn>QJ*hLN0drg=1JtQ@lZ10zzhKKot-?`e{B~NQ@$&TNR1C-sQApsc>VN zNT3!O8PV8QM}U1>^F^H%na_w8DQ?mH!z)z5++wPEFY=VoKzK%r=;uf-Qe9@4V zvdYzU!=RSe337{T6^JCP1CcmXsK>4zzP{x08ge_k%u~p7L0}WkVY2W=ZU%`gF41d< zcViI-=xDh^FdoUebT7bP7td8#^J&=S)G-qw@XqIV{wg9_PQ@K%1kbvDJ0Sr9DcK&{ zzv4xE@ZfTfmuM&chRQk(YE*vg6uS6>m!-%C#1lQ#v-%tWlem(=r#wfr{Fe+dyxdbs z-1PiT!jf`I=PJY@ybqV_+;HPTX(`A93SJS=^bVCi&?F%kWI$AEt*@)etjUW?T%Hkq zJtJv#HK82`B62H;7YUV2-`YyAEnx{Mal#)^PZim&Fec}W8iSx+xAaP1=SBvPJ)LVX z+5%YM>9Jfe3-3NPD7-OFWN5vb7WLE^c(Xvz?p}SF%drfuIbOQtsvkOb<$CG(jTaoLVBpw!ymCMI_K3TLYv?cUiK&*I!BqOz)%iB-}@773Fq#I zJ}lN>bcE);<9)wF%kjr}V@E8ns6w13Z)JY)imr7BHNb%G-tZ^PR~n~7bFI|SGc-5E zT?}8sT*$i5az{ZS^%zg=P^lEZ&8gL$T(P61DuMCJp(<|DqC7)q<^vmwcqYkp}d^-%K%|!S^t3Rl1@~*Q~zD1B@7NaL3}#n$elY^ z?(Xs6t`Y5?X?Qaaw^(6DLcj5;sLY;`OUv#)7)#x!CMDk33M?({7@el@V?V=;#hZ^7 zO$X;<_xuVwuj^l58V^MTcQE9iM1Kto$V6DA^+@}Oza_dMyOPAx3k_*`B}EVl4axpp zg;m|S_<&Ln8mtJfg3&&56{A5^9blV_L+=A!u(c*$W;_2u_Lwn?(b$9Pw&9yn9xX}t zRNN;nCoPsOtxjhIqb~@x;;~h{qHF|*W3FCZbG2f+0nkL@22;G~WD)Lyyi{S{EThB8 zz5;7SUVRtMVv-p@q>_hc|1E+csisZ5N3)a4#}Ah%fx(Jya8x#5A7(okTYWCL<;D>k z{eN~dhv!%9R8t6UB95;H# z!_yqwrWyxQY6hHS9PrpD6K%WOO`(Z$>oqkBKQ1#HM> zX$gsDqx;PwhDA=tDYA|dmlqy$u@i3%!E3^jLVwVGSm(Y`Ir)xwt z2~?Z4NW;v|>wDm|GTyxb>O$gM8%Sc6EiEC@2KpjMNI5{3U0@hp9tI^vLED7}OWarX zF6L>$olH#}7e|1MJ(z>)mYU86FCv9HIGt0|L?@#dd)q}X@g|sy#S|ldA}hRjD1#i_ zHgi$u3g5fKogxfTlaLR`E4ACB_or@4j9hSTDTioE%Swp|CJ~MX>y;Un4FYmVNMxj9-ZQJ4`-N}8Jh0@Kn~90Zz^|c8jS6wz0=Qn{p$q2 zL@~12j>xybUZ7GYB!E+cdU&FuH?%ZfUP~t9G=Vn}tgvRNnK1{X>;@VqEhITSR(~4L zq%PhOIyuVo2xS4eX{IoZ0I*hysanDqO_*!Um&8@tBC^}&yJQV;g-~i|q`D&Nj=xQ! z64KgIFKgoIsyG2-z!jPGDND#*XYRcDaiks5+?qW^Q$SV>`0;U%9U7^(My+wxIm4G( z_-RZ?qM?Qc6qwV&Z3Q~fYl;$bx;$&U*!nc*Ugr_At4OS`>c#Ec&f#5Wv|FSN-Bn~3 z+|s?JZqOEy9rb+C9{m{U+1`0iva9(O+7hy7KC%Z?CosfTxrJ>J6OgVxD48Xz35iMd zfj$El5wR2{8M)vcrMNz2Nl+#S6$&Q0o8+)L2juJ8@w zD@iZ-NFI{ENnQeh6n)y;k&~j@)8v*DrQ=%<7?oa71U_FNKd7q|H@r#MkN0vYfSb9l zT^ShjG0`O_AR+wA2b5>wJso8g&P5n0%t8)O6p%B@pny2-P+`d!Ayi(HCMhw=!k;B& zU8BPl1|=}Bpcb%2QA|#%3zL)4Q4^C7ZMvxAh14R}gX>Zy(?YR*(&5YVA1^a_B%(xeMxKauAF%AcH~@#-0xD@vnJJOF%a2IC4BP3#Ew& zNyBXos2(i>vRtyFcnfqbdW_8N*cRc5#K~?@7m(ky#0l;nu4bqg5RYkPEgzyMFBap1i5Ue zMR?Pod2WKwU;J8Z2nm?++0cms;R78lvALq^vcP8F&0fDry}rZb1>|xG^%<(?W0n6qFh>L_rbgUC{12b ztz@S6Rz1j>QPfeILZYfBQV9Enet}`bi@yUKi|QopkQ5TsY_Tv2@{dfFr`qD)2WO$h{&{41g1h#{M_d6Rta5i5=vlD7^E)*fjt5x#I>}9M5BJ@ z%H63t{Zbk9Y^%I$r46a}09he{;aT?_N4ogWYut8an#QVIrgq5HKPs{IkMgz(bZ!al zoL%oN3g4G6AaIMdbAM79pY`9yIN^nb&Od~F%N#SzU=kctbhf8)3a}Hx966%%3k&*F zC-lVWt3-K)MlaQakKhQ6yQBdVvn}B%Pxu~DIT`2f`g_IWmF$DID*4oK;^P<$&LN9) z&AA^sCgW~D!T_t(b%Qz_{Jxrbf=S@5zKGfzg`6EVI7ML1@8)S62yF=&UPM%jT~!%~ ziIjOtVPW;=qbC9V5&feUDaf91KIpW$3A{)kf@(6G{8UDl#nWg;6nPzSF=>$nfh0F%_*lzs?!NDeO=%B}6{WO`HbG`laqYodn-nw+3loN`!aeS{ zGh$6$&X04+k6?@%0qT}@j82%6g%(Xek&sCmDMIa?JijgWd(VX9q;yfi+!TYLJhAF zJ$E;PQHQJ5QF43nkWy!)jiA)wN(v=a`iQHr6}ZqDQ4*dKWi#k|@ERx5XhexRY>-`? zhwpwI>$i-ordT|Nd67mWt;+2{GQx~BCiPVi#1WjRg@@rU8@u+c7CpwR5TX%A{)RLL zfsArHAzu8FR^v@$ zUW3|j*%WY-nPkQ=O%b!8XF?vG&Sf2$g%bi1F_)Y*cXM`~RW8m5m(@fTc!9wDajMXY zBfNzD{8Z6VKjgu}1@IOjIyn~*>!jTEysN?iH=vbfJrHj)y*i*!!^4{o{NU3H;NdDiGE@=Te5t-> ztc~R`zgvJ2lWXm`WP5R<3A$<0o+k0~rNovTcB@u2fOC@zk!?E8NJy2L*saP6pQ}vW zI>J$fZtssLe2+6NgVEmH22?#)-j0Cp8md~0&hBt87 z1aVp&Jk1@&7~ux+G7LjW51WSb3fmh171Q|qMm-V|#ck_$R~|C=z`ARzPT)sq--hrG z$6k__(b0@!9WoKD9nmv2=c3m8z+L~$D6__yKa*c6RPhi{y&|aD2x=u&#YSJUtyr-k zvLgo=-oVBMUs(ze3uHA8oPQhA%Lf^iQ%Hm3<#73n0C^{;;z$-j@K=HIURGDYGLNz$ zgK>*Hya?`PRtnFbL8z(&ksV3z)8>njUS)G{>nV@2@CFZZP{b8A`WrH5Hgxa)3@n>l zxNU8BMAdN$iPw&~P1`P`TyFr}eOtE$R0O!5@rcGb^I*D*GtN3;FHcRfVzXHRJV zzJ?#9e>&mY&GuU7wRVFSAw*EvgvN{}Zb!v|H2QJdr`rh28`ze%UbY@9yKN+g_}v1G zH~a?MxoF!SjtxL(yBcAlTtangh!KU6fg3Bt46@GHnX~^~ysCf}Yq{}1?>s;qH<^*d#0JCme*g%H zebYvvMP5ek3`0^WR4`ZAZYGDl(rtXvc8S@!&0#6a$Vo2(bqr(}Gy$0p^lF?P8t+Qo zC@QckJ4{$mXmx2KcNCYU4ho(9;!F*F4w$Z(&Tix|6@nXVtOQ8rmn&n@=3p%tsy*6C zoZ&WDRWGtW8!~{D=_?Fz-M~ZsBy3U_k+=8!4S(XztKP+`tH=_meN$c_=8T-e&N{f* zZjfsO(&R%33EMy=3ND$dz?-`-?ox;zbz!NqG)KMg0vWCkN$sdhOKtoR)GyJD3S19^ zVP1p~alLZfQi!U5pS-x-!|<fK$Mn*?CSkUwRSYVWZ-}FJvMP$5StvQ&s zPVsOLC=^&-WlRJeTUJheA^a-VXQsfjYM8Es$fr2nBk^XTW^dis)2(N7o4SO&_9mu_ zK!vf$m91{aESRhN(=W$sTu7jx%wpqs?%lWY21TQ`JXr$s24*AhR(92lwNB^lv`MpeTe75sq%A5NJt7KB<3pRXtoj1x0Vr0YZ0WCZhfJ{ zfvog2&@n=h2W2(QUF=6>Z_<~Q9M&&FjBCiODa%TWN;umJ3ATO_V1g&QORcixBdo~c zQTu9O{9mGS6(o90$YNk}T~*7{HTFT1zO3ZBm&Yn=Zb*yDyTan~%7-bR7z0;EFjJ!~ zmSjB2p8#snpVX@}LFoZah{bQZUJaAv&@Fb8^|A`g8*E=oEoKGvfIOXjN_M18(5+Lj z*RBkDh&N`m(2)^)H;3f~b0m86gO5!DH;+wT4AIKlyTFsJT8;++xw4V9UgnW%IH(46 zIoBh4g{Zbw2o^&xqeNwsd3e#|?SmyK4u=>cB$LwrIrom}zUmzdCSTI!79M!`m%}{v zs|0a`zbxj<@z0BSxUWvO>SDI3HeEeiWSJ#2ZThhzkYO0@qnL^!H+YfQc>)hJ%8X+i zQgs1>8`hn+NLo-=XWXan4&g9GW-$}wH|PT&!OZfEN+ep43SMeG7n!`&re~1caUR~m z6+b?xnDnS}kP@l)eu;DXk902!#vlu_lAFY^_2f1Th)Jz_j?J$r>+bk*BZjozEVQ95 zCM$wzX>}q4)LysxZJH`*L=btC8P+98Q|I2-AvM$4>KWxF&8hC4rO< z65^6qd7S+>;o5Bs&HdJ9b3He#zHRBAcUQ1IqH&j{=jlT4f+;ldk01_1W_1+FcA+&8AFOI<#4;BnHQ|WKMbIiFGEbkEt zlk0Jd=E_2V1Ia|;Y4+XK&!@3l+H!y+=W+I!6^vTjnu%r^-lp39Fa3wVw#1i8HwJ) z#l22VtIBHF1U5tfu^uICIXo-zRzbVE&_m&oVo<*(W&<+m@Yl#p;)fZT`c-8fz3S>d zRmiNJyN}%4ZM=%0&bg>JJEhf#4IWhR0&;=h=T# z3z{1L@?7}3FJKF&eIC_;dG$1&$dw#E*kE|SVY1Z)edXwK3#spu@_xUmr@BgDS_h?R zyoq3i&V_Ge&eH%&)U4!45{VL=OfhQPD2z@XT_k}Z=LX*wN9!)`MDVid8(si&31HQM zRTIyl?ME%BU>&HTo*WauZ|=p1xRk~37^fLE7IcB>P2zVCm%R8zXw&TjFE7wpqE#My z7bI~}KGr+68r3_v%s=Sdqf|{qvVrL{t2G>Fy^1_HwYC85ptr2bLj}eqX zdb}ch47e6aOM4bv4H_#{)L|0g3 z(|w=1Wk^cgAS)uUeHi|kqT$6{L8m-O%^J7pGE1taM4G2w3=3DksVM&lf5DhFxMEWn z#JEa};2a*P!)WOj^NSs)KdaJ5SrkStKKMF|2*6pda=tXnNWoVKBdwW) zubMPxeo>&17A3`Mfa&ZVHv_PV97^C86)6Ta&^QNE37}&Z7<=ergu`s_(4=EY?Z6w1 ztcb& zozOv0Jt?!aC?e$A%vH2|Poz;GZ*sZ{j-zV0EfA-%DT-jBJ+XCF+9obUr+(Ae6GZId z|BNnGtB$XY*aEF79^9-`SQA9bSfG?tk;0K}Gax>H`t*rz4w?Z)jc{?k!NS1I_LYvf zd)eeg@FVe&pkRHn=5;g|nZA`_zG4Gyhe5Kel42$-1%+x4pfNJ%%G%vK&d;_RqbMMz z^>S**C%1@gYP{m_f+Ns!fv)AF>wbRl}c5si=)zX11L$(f(0;DQjg}q5P zit>Ey;qx%L3W%d3)*Xi@^(0$bheqRB^Vk$oKG(COuXSrTa(p`mRi>#!abJy*D5t*gK z-Hy^GXR5NBiOC>A5h0zc9Ze9H7>3y0gI5e0Ep(Rw5vi47hqNSYRGS!t-7|Zy-YxtH zAIuoU(dmpj0-TGrwGCxQ!Xj*56w%Dx&*SN(BSSvI7 z=c3U+-H=^)g&wb{Z+=`+lC`z}HuNI2tkp`{XHEhf3c6c(ta*$t3|1($LvXVXkiM>T z8QFyzrWs5!V@SEPPfwpd&D}TM!&J>WhS)&Bl8}+)GruICWhD8^FUeOKNxtz*@=ZpP zAN-R15Rl~S_fOoC5D5`Up19Ahuiu|O$w>0VtX+`gNk$UxQy7v+oWdZ(eF_r^nKj`) zg&~Q=DGV~-`S;0pnKj`*g`Z?j;m`bM*Jqit>ofn^^;zcZ`pkcJeU>@9KJ%YlpJmRj z&-`cCXPL9>^E3M?{P|hr6#l}$Prk_Pldt@1@>OO{zVhFUUuAB_uP^NTl^1^B%8QI|<%R!_f04Q4U-<9%7m+*unLShOD@aJZ~}m!$gBzb9sm4Ex)t>n?)j&dKpYZSaC!rnBZq+}_Z zA);NM**$m9pJl9i{_MeLne4&m&-^#zXPKLkKM(R*CJ*wNKMxWlWOh8iEi97<`TT|d z9sfn<9sh;@9sfn<9sh;@?D`^ecJb$?KFj2$K7Zl2>c7aGU0?Vu$S)#(;pZ>>7UUNh z3-T+!1^HFRg8a&VpL~_MPrmZsCtqdmldt^u$yb^Cgg+boStc9(`5XU^|0c8Jzwz(* zZ!$an8~={~CbQ$e@$dL=GCQ6>U-(%jU-%ta|!-0@ckJj+xFJo8rwfP~DN@Mn9-R0upj z^WX6@6#~!C{CE7b%pL#Cf5$(|-0{!+cl@)=9skUK$3M&5@jv+A@jqnV@jv+A@jqnl z_#gc5_#ZOwc>b!5XPK&vXa1@UkPxv}`19(YW%BBu`Sa>QLSjvR@aNTogp4HYr|=J% zy!s!X*iT`QkXaLUZ|V=3y!s#f8J!>@vL;XLR{al|jLsiV>{dNU$gBywRsTaKqw@!U zpF5BcSrh*F$q$+M$q)Yc2}sDS3A=CQhfMtB2Y>toBqY}4h2L5M2^mS)y{RuUwR120 zwR0dLvnK32{zayC?uEa04kTpOgx&6Xk(nXz@`>H<0tt~d;h%=^A~Ox)<%#_r4-ztK z!v2nbk(q|@!e1>55+ZBzng8tiEb?Z2`OJTIeU>@9zOYAvUcQLOn$gP1rr$Pa=J|u_o*uZjg{!6Lt^xlSpnV z)`Z=|4H7bI!hfHLFWkL7zJY|mntX>_?H`xJ0HrFAfB)xi zzn{x8EB?9L9nzrq$0Z8#v`CNTKZ5kKdykSs`d;h~;ae1hUJ(XW9+e+EzdA%^l$>_q zTbPs{kr?=Vd|-9K_x}|gK&Q;B@V|b;fB*a6>bL(-j>-RmP4l=+j`%kY*&Y>Tl%MV0^ zk|NEwXgD6DnSAo1m?FsL73Zo%L@%*7L>^vXUYoOH?vCl+6*gRGZ>1tEDQH;ij<s%w#XMk7gEcFiQB`Q)6_jYpd^ACw_(x)mVWtar{M<(R=!UM{pTho=2 z)IO_Z*V9s!k`kI5`(=2568muE25|(-Y4)a_Vk6aSJIupM2oz!d7Ut_BV0hp~po$I@ z;(&+h;O)bLVjT3~fHNA`UN%?j$HN>AyQ=B*K3(UB6^nBi$Kraq@&Z!tqx2G%c@(HX4mN+7XL(dGJd;KxA7ep4dKF+RyaN)7 z@ea@E1f+Q10&%|n5jZOUI1>^GsNCr<^Ydr#5!licknfzndr|3;BS3ODH^~Y}86B{5 zkrVIX?uw3Vk;zdN9;7cI_r*{A6FpbGG(Y)C^r!UR9cDm4@+=QCKM%buOyPU?5a+2x z5A8wv0&>5fKh!xL6|h=L+*U}@K#mMkRi%>=9b`hGrskd>=qOE%-p`Wv7j<+)CKbDCd=oV-)&#|(PY4yRR0RpIjT4=}+jJ*wXQIQmojZfmm` z88x_)&Qa#2N4$#gD9kQP!-0?7MadluFhfz4NRX!WKSZYpfA)efFSQ2*j%=91_TYc| zCRsO-a{ySF2S1 z+2Q`_b_@BO=W;8JXX@ehb+E=rFVfg1{$;l7d=7Hg_*w^}Jp6Zs3^p$)^VsuafELC} zpGsFQsh)0Wgod~h#|Q7w=Efx5@lb4}%;0FY5j;zcuCpeL)Wr|Z2$i|VI~`DzB}qZX z;+)27o>ez_TM4TuQAaAp1mfrtN!o?oEoUL>vLuZRZa4}Sl;O|PqW~;jh6Oep3Ko#j z0viIa2V9r18df}?F4MVO3%{s@t8x1PPGD0Q!KAwEVSm9oNA%<^N-MIpV4fAEc>xYN z70C+dZD;dww3{*}tF2HbhyUhBF;!o#sH2O@A-o27GE*(3GK2|rmFMBYM~Epwu|t%! zWKq6IEOEvyd@rlQNLmxBuc~basESP{bZ2WvceysM^B7+V<>KO_%rfxvHH{sMT+NIy z8Z}`g>R-|~JoxwF*~eMBxcl>tH^mjMxbex;1Ik+H;f}-1oHeHkTH?J$d0CO0NNqQ7 zk6YzXM@}gyNWBl>3@F1BInH!_R5U;5t$X4%xq|NqVYkIuW=8o9>5&ntRqz7AO@P~@Fe!$gxht$wZae)pn)uz%q!@lw;kLZyT}u^FQVNe#Cc^-{ewy+t>DVRAB{R5a5iBi+y4xOa#*S?3V)MXO`gD!BgznVMxjnu2Jd=_g z4!C>mW|)i0%sqI8=hbz|^*T3jZg?y9U@W|~;X{TzBC8jiwTIaUefL#C+4trUZ<3MN zWJJ&8UC!M)H>5IDB!se8HC^2Bt8Dqw?z6hKqFau1S%q;372exr!{@~np4WsErVsUZ zwRP+&xpECpDjizGtT6A!46S!eWpcOTm>jIWyU1-6!`L`>OozRVp@oz^Klg;1;D)`x z3|f?DW`uu6mkK9%bPP*OJWv{D95NVsfYBXt3E~(3CNJ_>=zLHG1TxDKn!7PqiMrRE z)6s6>_8=ew46TaFX3!8p!M2m}@Td}(yh&U{+A>92n`#C~S^c)298C=PL%vC=ZuU&0ZSGF2Czwis3AjA7ENW!zt=6RF$g{Avqqc^Jt38WpD7^ zfQ~-GwJ^R`7cZ)X7RuP71GOHc_k^hop;p4GfU2m949lQzMb%kA&W!4v0<-vD31eNA z>J?wB&+tv5p9ea+?NxL%i2dl&Y~rv1Wbfd19Xw5YkgeWRMnk7?xkdbN?i+hx^?Pa( zl3jk+!n80Q8ExNvPqkywEnChQ0afTiRKX|c*x89b6%%<~2TQZ;1^Qi#8@ux)LT4Ekgk*_q&;+!R+0};E&UZ%B#@x|ev~t!p^a+MLH?!>9gl)) z978o_@Xr*TiQqP+G1UUZN3mc5U^fY$|BTE4-y~I;!r9=m|4dd%BKxJAHX~F?dX8MFtu5tSvvX zZ7L_L8w|$Ok+XLWP2z$T59_Tk z_6ef4H1s7&lMguk3k3NN%C7<&CMhsDa)Ci-vAD}z3L5(&bd?pWkFm%-)QO?a1W1?*pZ!AhHzo&+dU$SFAq;q zQ6l*~^UJf|{zbJ{e_87Yy_3ytA-G-8WO0H{MFF0rb~jp&7xEaI+hctj2MvU@~lxl?mMmrw;dVu`*`beO1=lu7ulUCPmPTaSeDERUw|c+-7lj z2DuQC-(Bwd38&Sh_$V+PfI>dxrErL_?RWfOt)6Vn&R#U9^rO1JPn*l z6~}N;>VZQ?NU%rwy11$hL3oY9HBif5tIt(uprp#R#HFP|lI0n50i0eMJxvoTW<_=; zJ=RKwmd*~kiR!tK7_uu+4^}go#H!0S#ix+h4!0QI8npdwyS?@F_fAG-Q8cf0dZ&jT zMtiy|=Ij?|omD_li-d-9G%oXO&36WFXV<1R*P7-AHAW@ax$ zNf4t)m8uiOs|2o>EU<~c>*2YS1b;EybvCZNi`6N}Y}}0mvbZ~E2|ao+E*@!1%BN_{ z)WV-Zh*@gn)pk3eea^0@>GOGC8*7t7-T)aL8r2J6neM}Phhm*J_p!aj>#A5%t3VIu zaf)4dQV)0!5$)qK3O1vj<1DU^oZkGcU?9-kq$VmDZ}Yn*rkmEoLFU#(>-Ji1WeeZt zbWI%5#PWnbo9)w&9G$HTeMJMQeWgrfmle?z70o#0LhqEPRc6LI7=MPUk$@uxQ%g`0 zoqCw$<1R<#BwN4>XLH6~e@0hSW4mJQ=CZgM{A|Z=E7?fDuep1DVMr%(y;+nu4ktfu z6Bkelr-|$^N@Q?y1>F!Jdy%qRu0gWnH&~ z-VsQ{tjHjM#9G61tu$)Hj^+F5)AE=&p(jvhg`wRRp0aV8UxCA*C=o}+5kZxY3KnE1DvI|MovAJrrQw9g6{e_u9R8&2rBy;NE*g82B^hLR z8Y;HW>beIrG{vllrpqg%HmJO}G)B1yo|G7X5hki5XXzKOa<6ctrPE0|$_OtC6ayuL z%AEuKH#XzRFo8O|_$ts!N2Tt9P5v3*HtBGhs*E4D6g_8JWdP&>e&jGhm!DFFQ_=B< z%r01DIGY?y9>W5r>0ix(M0 z%+z;19haNoMDeHJymZ=%?~?1B$e>}fw~U@^NF+DSAOkY8o4|g(4B{Fv%z>2j%H}XWAIj{C z0yNynX<$UWke}n8)3Y@)hUVE0@FRl^9R@hdMQ=xs|w7azDPM)iHy$^Kp`Is_@SrvMw*{|JNiYL$NQ+H zu`qDky7!xM?NTGV1#%p^o?Az5m(5{|8!!rTpmW_?eZRdyRCrl?7)Z_9UPruu$xX-Wj>>aCk5g zWz%5FbQ#4f!?!z;#uETncVsP%qWfSxB-G)w0FS&-Qj-iH`7zK#y)!8z9TTUQFpo=C1oIFnNhowUH11ERplw*M+yiUe9uxUu$A)@4(tV+7 zKvatm>fDlE&@D4S8pj1dq171v_NH4l%=UD4Z;DYnln}a`yEX7S#%Y!ji1>xvO2)2& zbDP2|haAx9D}<>t{JjX?%P%vgM_dtS0N2Z)TKYD18CttM93{#utm#{Miqk#0%=drL zi^C|4O=4PHZmK7RRd_hI6f~pKCd&wj0T+TG(N=oZ9LVj28D*Np(G4fxZsu_VJ9?k)RTPr z-bCx7o~sh}{NMFsIoCYnI1VT-<`}&8v&=yKyFxMo9@0Vnp-O~wS17%y)!qq{0!J9s z*}6b*XQ<&cv;9H+lfy2Q4g3P98T?5g2lE#1tvUmj{$5AAl$)4(>*@RtbAT*z?B1z) zh$A9FoEkWXKeISRI}7`)O_Q5Aq2*!`{?~8#?|=VW{q{fV*WZ5oU2DR>sQvTr|NQND zvwpkRFf{edpYEl4TYc&M~sI)EIDz2BSJ3w_`=#JI_Dj*QLd_yTcX)*eD@TxXBAQ7Fmji ziVAKRZ;d_mw&R`wN^`grLGa=SXX;wIc@Q6Glp9CYW3wJ@b$}%h;A;$N8Q1pXI2Y{l z>z4BYm3dGT4)noAL01+AsMdzhigGhB{flm_w+KHo_mG-o@7U(@Q<+)?BV2#*)!X4$ zYXZ~ZLZ|Fa<-jY9A4cI?-V99A`J~uRU!C$^d~C!=I*sChBIK8$OP-= zDuOdofnprH=p+)HJ+zb}#o6Kx8)bDhO)7#s%1Y7J0iz^&wImFXOLe^pxUO1Xde@BF zdHBX1Y;hxm882`@Q2s40Z~86Dz#yKaNdgNPu40wSp`+;0YxwqgE>06nKMmb|Yzg3m zZW1;);>rx>qR~5RZIr~RPmiRGq!f%rVyB+JX==8t2WfGk?Fa9i)Yr(%0H8;J;Po?q znqXh$%~v2LWk}UxH;BqeY5FiNy`pX%yUDEX8-}oqlpQW$kRQVwj{ezs%iZnk#OqM3 zSGe90=Ua{53#xO zb``vKq8H&+!puVF$jR~QLTaJvS>st~)0LIf>>pk4X;bp%u5w?i?GxOEAA6z?GO{8T zt7E_}I~=bzbR=<(q5oflponyool*_G;@3{nCG96P?q`r0H`7wVZrAO^&1{%)z?nC? zn7mk>5otZ7@7jZEm( z3^c@kL~(hXO&J7(IP`PxEy~LZ$&!d~q-x~%3F+Ih-~$4SrjWYI4lg1XG>e1B6}{mo z%g5w4!V-BcQ_68sMieC5qPK4G?c~8-7|d~td_MccY~;upv^vW z$d=0dlS(7Ci!LVn4L;U@qm@lX`yx!xh*bN{R>9>OLs9@8!hLl*(Vf!hFD-_~AayCx zm+9I*`83evq=ajA*wdGQN#?iqp4cMaWWkn%1#hNW0<^@@U>p(7>a$U8EZ)lg&TZG!BM7ZYzmom2VyyMu}@k`Xt(C| z83CK|oL~$}T>JmURACxByx>q`A%xfAu5y7a%l>_7zT!e`J(Bzq9#M`Nrxm6*xVdAd z`pB+9?XOuo6HMoNjxxMnwu;J$wG##EdVcu-i%1o5xO$zrJ7~H$XF5;3N(TQ8vY)ab zM;na<#s;-<&o16)@6%F=x?N20@w?(SSzfU}lHi=9pbe9?Y@#;h@n{z<^<$CKgqy4| zBZ1uG3qpM;SW8d2pPfIbphr2X0no{N4L_QP57iv0HhcJb0cUoaBZbcN{pp;}3ZRsu3p*@-v|WBbv0nT0|daSOQh+`!G}O2(;By@ER|oSkU3p zbl2*{l*TpS(b*a&1>aayF1Zqe+8ZAlDL4MYtD#LRgtPWO&8G z%q}vs&eXv;K)o{B`IcMkg^6N_nT*Qem?rxasW5b4+jG4>t5!cKn?OFssT`6;1RvJM zF}#;YX7qH=0rV6r;rzIuc@|Z}vK6JNGt2Zj7^At0z&7X1G#YRbW}Owg^o4s3hU=WH z0uCkRCF%Ux41>4wh&EW7yaHEwLSAcoWY`)7FmZz{Saf9 zfgSPyAK{D_En696Mi(e|shO7D@J&-hVCfB0Hx75@Nw=9`1p~$^ydxz!;GOx5ggq5A zAtTn!&{-M^M{PHm1$iLM`Dtp44v5h!cd#%PBV5SCp*@y5rL(6Ycrc$sgn87Yd1QMv z)6s+hdzeotNL9-aTjOo>z#8*;ksiS@UVL!RP2@!g8Wjz6$e70GIGhe)f@TAz{{pT$ zwZsx?br(acfMnxUD?!pCzX|{(xVMy1(>3mf_DowRTIAOQAi!W5)1X9tUnmS39IOcg z{I)7mrcA8WplETi9vtCMa$QpldnF`l1_VK%J56;_r34doSCA9m=ml&Ox2dH-naq$d zNYtEpEBM^vMH(77ULyOS~QgvWY&U3!ptK`mt0PH;Tbk4n0%Y5P6K zDleW0iTQQHyGog>sPDDwR-!yO7azGt_`g23*s?&}!MLMv-8|m-p{w5sls|YaTLzC) zr33{cbEtVIL>Z5Mf^HUX?9gpF=A{yh9*N1Zqt?yo0)P{Lo6}~Ker?j;&j=kV=h-rf8HnAIEbXDNm{w#}GpG)5J ze<~O3XO;z^-f-49>!oAOMWpwEyFPK`EYac6|Hdd+VhE|iaS8?@=T>DgzzW0cUd&k} z>j4?|)K8vLa1SAMxWJ#52ds(B{rvDlbs0*M*}}c|4$js*b}*~P%&@_QM=ebCkWR7# zb5-n(j0E^3kWEM@!@i18U_cgqJ;@W_G9NKlt-3Bu_X_Kz1JF)%MCqcQ$v3z94e%Pr zXf;qp=0QkCH|1=SyNljXfc}EU-h?`OGrs8#Ew;szNp;3*D10b9uKM<@j6Q=z^6O%q z@sx5;`d*{oSdy0RtG*EGEA1__?rJP2$41vcMgFOO6&(eOyNK^QcqW0}W>_9oefO*9 zy*X)=Wq?4XId&*I-cWL<`Rgk3!)(hV+p0hx{QIGxPrNk@#?yk-v$in_ABgQ#HKh1jh8ztO_8jy|8rYtLPQdWn5@?X|-}6 zY>>J_T0rph-G`eV^1es%mET%bnk)!Nd_9AJ&S|$oA_*9@TOQ$w7pgLf>F%nX?Y)kE z{ou~(5rW%H*YebnGRrnApmY{=t)>olU%RN{o@e_bc9>1f*}S*@O+&AR_}W~ z>{{89vE4oF@Zy3aw>Cnlt(86xF_2;LgV)X&RI`7b;oG9gEUTWSP&cJTGy?5cKHQXr z`a83|w0$M8qZ}GUcKxqiVM!Vs#B$<_8nak)XRby(j7g6ZX(&!1YV=CXq2M?j`btm? zDMo__Y4NQ`W;F${3`h%(+UvI>xSSZOcqgv9<3L*Uc5W}(Wo8$`U|LNNt}!JJ5Hf5A z7I8gnhWX)zC4%iGj9?5;V*uYR-5;aV^u{mL%p)2B_s)Z%b0m>QkqsB0e{m7hO7 zecvQr!>q~zmmZICl+1qRJi6_yM!Vz5@FNR?lVpV{u@$zXu<=moMn1)S|O+5r6N3@BjSmcca6**D$0x*#TZU{kyoyjPp*atqgiL)~(Z9-1E%tq-KsSm3x{b82wDC>xkzfJ8qd< z{@j+ZUzo@6O>j})I(zrtVztraaFOTTf+%)b+X!Bi#JJ2;cu}lswzh!Nb~d938n(hj z_omWi00NFRGYkXuu4cI?E%(O({7y{5jhX zH17KtnZ1Lo&k(k&_P?h4^Ggl2B&IwG;6y12Ny|If}3^w3JI zY~9aBja^mMBzwyHMN0ak$9e6qQlB}M++x!9C7H?si^Lr`S`aTLvwh3i6+WPtJh6qQ zILlCX5K!+6nxA<>c?;(6rs&e}u-mdD)XtwukWb=El%PvY4v*|x2zk?3-N@EaGvDbQ{iGRDXst1;&^IV8CSzZS zojRu*PU`-TEV#Hz&d&ChIkU3t4G}ja5s=CA_NYkqBqX!NHiyusqTaJm-#0?ENo%pi zv&8K&tjOSKMDLqCyudx>(Gbh}*udA7jYZk+HIrm+7HK@&xjg}bhk28LtjaJv9+y_; z2e0T`NVWyT%vpV zuQ>Swy;x7uY$ zb2oM%S<;jnvP4dEgIIkFw6JOX#7%bCfuTA%>eNQHQFN)2w$y1E17qyjO((t}yrwyG+3H8zL(usG4RjEv6;PFJushuyL!z98>7O zWX(6BbscAbUwC9~y{YMR=-U5w5fZpflvhZXIdM5$7R#QPU>gk5Wfe8>p|{FW7W+ve zvR`{7c?Hz|toEg}R6@+{B{gQ$FnM0V-7HoUi^Uye&!}~um=+AU33OAKiJS?+1@_vH z0&*)OFrK2RAz6e5L=VY})S{dJ_^a`{lQkj02o$5|Kq?P|kbKkXE`~Sbh{nhoxB7vh zQ$Hn7R`J@}2E>d3FctzHbHs6`uZKU3EvVvMK zNtobI=^~xOCR|3Hlg$-wH@M)20jDNB-|i4aswy>`L70cWn1`4ZUKRFer3xoVCEz57 zMm)k8FIWm1z|vD!<#kXG+xq!ItqD$Xx<}(qL_N*;Hpy3sUde^nT?bf!3u$akg#^~4 zuAoqZj;z%#A&1H%{K-IPtv)hYW4J^SlGawVWFW%ru?gI)28-Y>8h}AYY_3(68Mwqb%?PU?VEZ7Nx(KB|>LI-R04a zkrC38$^7s_qmFv&?l`2e$U+T~*hRB-R*i=1*_HFSWQFm7%Lu*c`bHwZGL4d!5!fEH ztLlftU;;PHuuzy%=SN`FhELh*X73dLjy;s&MOi5j-Zrfy>DA_q^C1R>Sr&r?_DX=c zV+p#Qx?Z;j%BGC=s{0PUs@w1g1NA7E5-`%6K&_@J*H+ujHwq zYYaP6O4c@2UNOyhmzGOeK+Ykutb&@1;eINyiM2d@2JwT%#<~RHc}R^7>5xZ|*qvV{ z-9SA?BpvVu%6piS0LkFu;mxfFOPhQQG2I$tfLC}unZZ6F1cYr9WEGAE-kGWbe!&{V zScSsy2DO!!8X|Es)1yO>Rk$-o!Fd?{9-@tS9-J{;FQB%%{Hr%Ym{nNQm!m$BYiA#2 zBG`NibuJV|8bm6~!?n0T=WaA{J4Q&M({C%uL!6IyG05w@CXe8*@1uGda9tK*<|9%~ zbxxP8LLrZUU$Y7Bqg<{5qj7HnH8?j*fa=F-QX|K|i${RF!Iv0R#>}P5w#gFJ`!*Cz z7N%)Di9uBF!X`qiE7N4Q#DFqIP!f;-=B{#NSp|(#|Df}oQ;hK}&LJjg2bTlFwCG5W zvzi82>A!pU-t2Lg%?yoLfGO)Cu>q|GaGgkBoziHVvD z6}DF8C;ilN0R*P9!V5@xpoy=jRSkc_15GP3ly7AYD*;sQ;zt6S!3sTb$KplfGKCpt zP^hg~C+CCqQj+4UxqC@UXv#EBSm8)BO7*5ZM1Fy5TC5^LBDni-J|p*m+9J~*_=Ovy z$}6U+XZ8ZQ=o@mHwW;T5%7}PO;{*042K_{+z9e;(OjvMIUt>cG2uz2d)I;+C*U2Rm z4i(UFyZGcxA7(-pgcU@V6HxiQ&4ddznP?@A&%G<0$id-U8@Q-#Vo9TQk+3S<;6@G> zYVq4_8mCkKgwYsgLIwm_Zu$(=Cz3L2x0D6#?v8nkt^uZ?7PZ0Q6&BuNU$t8Nz!)8` zQ5Y^D?f$At?;;5a9WwdQ6 zkjjG_#yXWn4F(%oo53V2h%Vg;0T{wb%#}Dom|0j|+W=)q!gqRa*v9nyd%`|A`?RG* zHrKm+D7PW{2oJmv=)vt2Snb3c>M%F_S@F@RTc)wv>qxukoDK zuFR`Uu!8Uwk!3+1?z*{cZD;8GI?O8ftGIL)X~Pgf4#YOv%E-vUz7)>6ZrlcqeB4V| z`jm^#ziA1}35>9TQK;#(&@w$(1dXlIkMMCvV%-%$&A;0DBcIPDPrb9K_ql4iPO)Ws zNb?Qlx|{G~2=ryz-ObFSdfr{`5yG7x6PZ*7R%~}-ljZOGhd;b5cvM!SL%ZGuMsN?4 zT5OFiZGCI*%naUB<>v>FHZYwaD^Kmg^p65Wk0q#c&xozvl48r5=53I$K8MRO=$6LLCiTnntQ} zAuvR1F)iqxaP{Uy)&mVLrzh9Lewofv?HVvPKb}jPBL==I!@o7u8IvY+GXIuZuj^E} zWYeAR)u7_Y1e1`kW@oa~YbQKZfqDYtPthXTsQoMW5iYn8`6F$NfrVS(lI|l+>m#qh zpQxyYUrJ3s*4d624gBc(+bz>a<6aK9kkAK{b;JPxmW%v46>izCk7xHLZSr0Be6k`< z{P4wO9Jq_`WaUw1zJ@^Od##Js0lXLnc3Ww|cSimo&0%1Z5vq;vhp!_0@%>$kOCtQq zEJm8+IZRCpxF?Vs*lyBWOx|(Ty~)GEI&0`%)7r(Pw%XKI*48nLtQgg{G0BJZn1;ldvU3D_;Gz^ex9*_47zX33 ze+M@UYeA3lirQcoA0{;nY~?IT^OK)Mf9lr-iV(v*X(UQMiiK6i{uOO*wYxc4Oh+th z^?8pl1>O)ep&}=L_Yxz>2IU^0!zC3Z;Itl;HQviF=@nvJ^0jiP1(h<PLV(R0S&-tf}wEbVh}t)doexeoP#QrqROtQz4KNr zD*iN*i%H$z&ASyPzozgG?!{!kd&T7zdNCOvTHmGRytb@2B|Z9a5&qY2`0s!JTmAMw z>et_X`@KL}Xb}D@^UL$^|NQOu&T=->Nw4hUrDUB*?xwh9UQLpAU|}b+z#{P~OI(F- zp6!Aks!Cz{in^wZGT`ayIv9kc!A2+a4G4=m8y!( zXHT~oQ;Z=@Ca}W^k?Av{dK;hN zwKH954GNrsbf!Tt3Dcp%DUh~4oH<7I#b}zi_k&lwXvy@#{zGtMc7MN-V`wUQ0SHQF&&kcaf+ORBD94jS1{>ui7(e8vUM!fZ`5I8oZ_{6!aRNd^vtw;eL|dK zjWo4jl5K<CCp(u?V)-Ue=LBG&83mKD1C&?=Yj;B65~@vwQy|^VAXH8p)mQ;H(OZ;O z1zrWJX&BcbbDJ=$*vcFx>q>3LX8FHqQf1TK8sB1r;vr@@;dwv%7(_%lTSx&Ulp1eu zCY`@Vl2z0+f7MSTgwTz%rhYcj^O!nW5C(W0P;;)7%U}0?KPPO!WXMAd-E*-Y(V}9b zw8CS_J^~)qiu!U?M0VBPlo!LGFXaQ=EQ~`3o>qoYZw+oDF*#s600n8MJ}mJnDzOt9 zc8&h=J^2{I;^9-Wmi5c`Z>aXaTtWnqT^)p`S}Z4|jjL#f&CWjZ>rz76{OE7-=#tvc z?`IH>lDa9})EKm--H|Ph_Bk3iFW_&FBXX7KkEd?A4n9YMTb90#x;&IeSFF}R_2EvY zE2P+@Y+eScFdG3yyTcYO(r#TlgOnDRks7-1P@jun@#3BGYFEw9_KhDS#UvL3(jR0| zphkeE=~6{9H8~3^6{m|`v=&qJt*iz+Dwwa`BChnGo6;V{K!ncvL0HL0t;Y3 zV}{|KMzJ;}Fxn)MMGUJ!NaixdgVi1}7Zj3Ekvc{!VIU7(cbF%v3iq4lHmT1kee^`T zrYv`|z=MOzUI;NCh0fRyB{*%{76Q1D>y_m|;%+9Guo&MNs_>{#qqt_r>1r(N6Y|QY zY?79c`xyOH=f|Epme&Rbx)M=c_=&n-kYQF!!J-kZrMR0VA)HJj5Nl5Ua1XX;1(E&w z8#dSM9(y(3V_E~0?qP@tqZ}C}bo*kaM1?a2nK!+ql)r?6*<7uI7S(#LaA)6wYXV!` zcwxS9meFW##A1qq<~gsaRrhkkgHC-!P@Y?(mwoFtXR~MSAkQWL8yRzl2$Q={-ah@w zaWk1JpPC4dEMWpeUY(}B90VfmZ zk=^v-wwhC+XC{n~SgF$Bg-lOlGWFKbqXuteQZC0V54Oq}?r2uuyaAFVi~+l8x<2fg zz4nTn%@hw-Hle29zoHS!;(J@)L7qqcBJ}g%Ov*y?l4*|Ch|L2@{?wkyk_1lXKv3gC znqDfxkJ{oOL`dg1N<84JASd1mmtPykr8(w8IjB^T;zCfkl>L6#!TU1 z&`oo_a7Z8!aP$Kfv942Ok`mr)(p7c4Hm()Kgv;opbI+H`3a+1Zwc`o%6erW?L7+kx z$sCq#a!>{tS&z!RA9x^fyaMka&m_Nl%(NwL#dFx=T=i4x7Ikjvi^HC-;P59#?jVFi z*NKXuaz*%R$*)mnmzpt#*^tmsk&xyc`F{Cbv3?u4Qa&j_WQ17%ra(qK! zN98l5GDe2UpYmHORjg{M<5DwZ-aB-qc_d+0(B{{N@7cCQKwKH_e{dHiLlCZ z2xBy6fMYq$%IIS1kC?<7q{S?qy@)*O2Ua(khfS{c!IF2nIXaX+)+fp+Wmd^`w@y`0 z!>6ZhBCPVLh#yL#RHaTqZ;g7SyGhuaT_RPlnW@3qsimAkT2l7+qTJx=G43iY*(^(~;5#&)o5gTm=tDwH_pU=LBCeap> z-sI9#<8X25uh3?d-inHF4Fb%_i9udWT~OyUJj~VhzeRR6nVGinHF|Ui z(UzXO;3GV=-Zx#EaK<0Q936i{AxI9PngZY;vHLA3vW?4sw+%nM9+6f8vk-ReKmVo+!HRV1zun@$`Em6(+wm7T-Tz+e3{T46bCW~x zzoCMoO-)izUnk^4C8xiSs$;1m>Kgj@kht)X+=uXyswPHhqpAY>k8o2i^pIE*(|0t*r{5il2!FGvwbp9N2LC)KHC%( zP2gg2EVTT{?mXo_S`%W~P=Akx8M@v3Uc8AEoV{me!D2-Zf8bwBis95PinxM zmHKZ#DwAC`yWtkUn8HJ))1G#SFWG`ytrk~#-VOi5#)s&{%X(kCf3WxtX`){P)$kZ; zgP3L~s7_hiT@Ab3O^F7I!PU1Ll4^VZ>UvG6d#^um;bXx{WsIKzf%JDgIsx=q+Q_os zyjcBH1(H6n}RbjdOx3ow1S`fT_9Mpcgc;^Gq8%WXIQ{y!kQn>xLDewo=H^AkV* zz}S{r4eOseyivagni<&fD9qjXvw1!E#d)8?GvH3630yA@d6r|(1Rpzee2xMyCZ})B zPvoDH6zyFC+r5g8P$Y)L^Cul!x~6qb1B9BW8q#F?X4RCv&!0YhT^t8%2dnerZZy27 z=TBeeYLtcK-lb5)Hwehfnt;4)43M?3V1~hNo4WKFa}eyIq4qD@TK8IhF9pV9)R`ga z0zi%Ta9`Qd=A~r6L55k#FoESq_iC37XF0e#xp#msg}@vhnBh4cvYf6_SWE9`!~ruO z`O{0uJ^10w0+}ZiHe8~cgd@?0JS%p&^*}*-juangzN&{jr3p2}qn`ftJKf~;&weD^ z%W`qXWPr4|!IsTZxRweJjTH*KR_HQc?BX=w^oTLbXz6v&h9!-pYc$poZ>jA)BH7|X zHQu!*de?m9nUoLjkiI7>;x>E7PNQd7x$Q-r8nkteK`Wj8UAyL_NKHWr_DI>^ze4n8E%1wFi_JeoMd@Hm&L+8pj^7-`M zgrCVA)HlVNs+bnldmRY~dZYy`FF%XW>x;Y^sK-Yqf&{Ak7UEBHVYtFjeUI0^3ix4e zvUC%)yLI6TlU6S#vG^YDHwBsIXJdFBs~8DwD#6;zQoLpg3|fp=*0W)zHile`Nv|v8 zL@aC!l~j2KOve7o@U(c@7*73@Y%}g`%~hFFZ+_)W*2wzFB4;{C$w!-g(VhiazoxhGYBquz~|mxS-~*J{1C z>t70v7j?i>kbtv^|#MI{^x3cav*88Rwa=+ATDBV@z?p)_NufhMN zj8~M=B6vtIK0=CQw)}!{q(-JzDfnjkO86jzYj5lU4cOogKSor9{!2aYHgMo1*XHzN z2yR6?YwkCwoT$|MrJ0Xw<^%9;MJ)~M8`Q}Q$}~_h_)9VGe-pYR^HB`9qMc3tH=&}& zM6y@XFAq<7mv+vEZ#~5vWPOV|Y4*%7zhft_f83AOS=vVc+>BmY=C`Do=zLHj)_7+f z#_EvPY_AR`5;}~M7G_9znxB5TIi|QdW<$4*9uBg-x*qQ16ce)ODf>(LrYIlz*c4j7 zqN&sy2&K^XJhJB?x6ZB|TJP02tz+uftEJf8n;y6Tcq^-7d)2q6jn-oQb)(#Mqu6DA z1ip=Eq-A|OI$4|izqIi#ZF~&4mG!V@dNUfRyOGnVZq-AP>b`y@-%UuqtCC+&llu*9 z1b^%`^2?Kb-`ivsbnBgaJ+?P-@-?`!Ho>oBZ|eO!6TD66qFwc^Xk%>|{L;fa^zbp* zR@K0o<<)f$E??|r<>3G2-S4&K8V=t*j@dd|*XDP1m9wqdqvS0_fbOK4TzQ!vy!vQb z`s?K};pMRygzG5eRrXic&m&qUqj`NJ5sV5pvR|4x9Rb5jLT# z_E!H@fq7R>#KW+yr;9C?H>GHt$mAa=nC2q~xLOVniTwbPHQ&BO2m2x7~sraYkCj(jm$Z z1yk z82>~GC(X_LrGwLSZ~^$%(!~+hSJz1z3JImOBM0uVUKpQOeJ)^NZO3LFS<7F$c*-tb z0K9ef@Cf7U@8Bx&eEY`0X3jroS^(qj9C0_~gM4fe9y4C$g28%mxj_RQ9|)Xr8* zptp_=j&Z)aLQ?EdH861P43rh{tEKr=om>dOb=2|-^PAAjGC~jYLlpQJtJchQxyJ*u z9^LU~;dZbHId z?c+E)cyCplc$X7W7J@MG^C&G=1Zaqzn`kYV`rSY6ktyLH4j$%>=iw!NtMe;M|8$qt zvd--=&ineX{zZmE>&Bz2!xhlWIW%5G^d!hJ`Zy1h;I1xM>nPzU>#Ku$2;&f-&a+U~ z0d`3nPh3 ze+R))Qs!y3hwXn()AF8cQXak*rx%3ewa)bK6*9%Ib+My{s*9>x`Vh3&;PYC%Zn?yxJYjNFxTfD*XMudufoR&|c&O;uVF zp=)|xv-B6(lr^&(#BVjN8aiQ@$ER@xTYbWf4@)4-vpj-vSXBEW$fHap*^(3ZZRxAO zL3f1MO|kDac+StE3UA9pXuR}ONE-vNQkzNh)?+_Q293!8!?j*#+G(1~(63@|qRK;Z=BZc}6iGw36v z_ZZjR;q>x`rVgw|`&?cY6;-ux$fLIqHJtwJPM=p-ph4@Vl=t2~Qwe+Lk9{6(N6uwe zGfK(|1+UQM1aqI#{L$U5KW9KwHF~nEXRQafgK)AJNG_(Vy!p}UtBNy1dK>b`Y2e3? zuCS48$0Gi+N^MVOxOD7o&nh(~P9DNH+>p0jdCN-bA1=u0FYvPY>k3E@7nB}_K3-;2 z`iPi79_G6!e0nnAd8Y~i>)i?A z$P9}GGxr0x;U)7+e;>t=7tW^g?9sn?ROSciM_u}hArl@d9qiaq$&Kk#z6;KN0x$R( z$4QDtW@yocpYs|&@u>Xu6ZFgXZ@Zef)?Q|*8vN^(thsTVtR&dvtH3eZUax^SJ}n*E zm!JZ{{Tm+Pb~TIxG;glyOwmz%g4}_oZzJ?C51+BMC`0;*F$gFy&%BaIw4vn|6RERN zamLA8fNRG7ku*B0zdw?15q5D?XBdYxi}?+>~tc^>3XHa&n;}W#!{iIia81Vds~n zk5w~E2^SDfBo+5-{n(?xOyIA!E*ysx%o^isOW0Y6>c^RWLRoO-QR{QGE?(3x@GZ)# zqG1m=mzgH4$fGo@a>UC`w5Fap6BOTG#x))j!1CVDep##%&jmb=`qDVT{IP-TDIi1% z9_2_-)UF5RqF+IafX4tMOG9(tn7O;r`@_E+H-H_n@fSl*KQ=Fi%Ld?cy!>@AL}p5b zJ^ZmQdX|gr!PtZ(?$078c~`RJs1Zc(^A!^@ zXQJ(KgqNc)zD_uN_JIK`5zS@+YHK3=?|xYuB`A;@v1G}oS$fgqRgzVe%S&Axq;)*Z z&r)w4I-c>X&F84($W3d0uUo!l%s>Ahjro^nGG-k_wN_f$v)L2lMm2TWdy^=Y&Fy z$=7^BV?p+*<%bjauV3XHQZ>KhMN7KfeC1bpy5D~NJ!mY2z6big`97r88uENAsO{(Z zp6tO?2^V{mM}***gc(((`pjWr8yq<9hg?Onx z^giJOKF4-9_67wQRydqz$QGA zmq9B@@a2yud_H}8dxDFe@}p>2)DP7iNt+UVOG2Jmhk(@g`0rRpo=XO{226Nt!qhPP z@)m}*UP=|t?v-LmKBhZs?~10Cb*v+r=z`Vpb!|U@fo@nDm=Gl^N7t?o2ry-h0m(lG z0ak5eGk~p1oFhPuI4|_rY5Zc@Mn_SKQ5K}rIrp_tD`Cr-IX>1pr{1?GQJw>b3;}o}B~vmYhmu z|Ee!jNRLA2W8hch<)KBT7u9tr$GR%F%9og+lEbH5bJ{`d5UyvSVy!3qoeRyXd^wzr z9(^kWey~G9R$7kiMSQr!XDw(zIpS5{YeCy=Tw4>^<5X|5PVQDVHE-VA9%o{~mju5a z&pvra7t7|gidsmh<;I6sN${11qNO=is)=Lb#uf}_9|gDNt1oPpG+0B!Azu9wt$Nu0 ziUX8y#9l7>6sa4xJ6+XO7r?hUr`iZ0^j%dbQI)3&?Ci#zu`^jGr@gpc5a;F`3+-T0 z@m1q&cWuIw<{Z}?=>{~_@DO`Zy*%8_8Q0dr=$K_YTvB&@&*5)#{-8=3X6ZLv#Zetr z);(Wp7i+-__f2^Foosoyn=@|QZ4pD#7^8U9>tFo?g>zg1wkLHKqRn~Jc`EHUS=i$& z>OP@M16`GO4U2rFAg~8coUEXtfgXmVwKe?&_11K-D;cxg-W->KxVe3zzBPlsByVPy zfVerc?~L@Udh&lKmd&{u#JIcncZb!snQ?S8Qb*d+yQGd{@6_;yLjz0{~4Qqv|XLw*!=spHTN ztbm2n?3aY|%6HaiHn=J2^x)KHXt2j>Xp_O2O*Hz;vCqj5+ndL1nfH6GpGat{-bm{_NwC=fAO zngxmWx-+b^NDfG*;%|GAcLy{kBt~VHVKQV8r{ST%Fii+DiVinfLyX`02J01-pxt5642@o z0b_PvNig3Jqhf2y~g6cUats;bVL@=UC2tXus*yv0eePyo*+CcdW|{THpIaVPOk_iwF=xa zJvogJ(RxMpxCI-JxL4MuyU0&5YG87?U5frz>KHn;1=J?bDKwe%yNGHQglAcv0`Gx6 zwGK?^S9Q!trBFXHdJbrg<+zdWW!p}e{?N;pP{%ABT>-+%LPf6W9H(q;(*X3sD(Tjt zG6PkK@K}@5H1eP=-jMr8nG9)DvZVSh;2tbNQi$Svnd`8wRs1}~7*ZcdK8IOLO(+am z)zCbkF-voZtHm_l8o5K7d5S|>LE;(wcpb;;0nzFdChIO~VjmKS73m{#^u-fk{h=Bu zapE@)ko&AkBx)Hm?ZD~}(bg8HYV+#oh@N$%5&1b0W!e*%Jtm&9g%1daCM^F8in12% zsm-KSzJ@)7>L1N{`ITxAR3B7u&KcXa=G%eU1LAcfh_gJ1pYxuC>jB*=2G^IT8TM!G z6^rWu^ny|mRTibbXtZfFmd895`@TZy1Gxy>3(Wjn0c8{fG!JOh$6*L|g$+c^TXb_X z&3%kQ^?~LpiD>xFAn=yq)}1jtvenaoJ)qnk6{<2!4-6kuUgn*m7^b7`#f^qZuHy7#Sy$-9yuN$i;L|5fo za;lF>mIYBBX9>%rE3xbV>IubfImfgzaZ1R1AhAh>=5GgeaJ*vZd2fU6o@aRbW^!T} z=T$VnqwEr4vb4GE<$tFryhg~M&@1gAmV{m*LZJZ^ z(2ZTQ-%v;(8XzTAtpD%-{m<^VyWi}7_wCp3cTcI8NIY${NJzaj(-FHM@EUU{%CLgZ}q>t zx3}_f;(xpDXunqff;5syEpyx)b4Iv1_dXL-%sSF>W51d6XB)2z`~A+w@pC0RE(!C@ zs?XZ1{awiFixF{KNsv>DRKD7iI@=*5kH{;Ou3A6pF zA{Pc9?7c51z}t}j7i$~;?|0u=c(8F`ePgwrVX z-BvTU{Z)Uc6#mOr8@Cx^J$l~#ANwpH17C}CO>*&_U>~i|c8?aiF#YprBXzNRZ$Ag! z3c1gc?eDf)c^&_qtpg>i>5%m_wB0*feeP_ASbwpNu#x_4v-IIjtgk=V|E&B!U1O#F zSdBFnnDje3y*W#6vAadPZL7L_eQmCWSeLAa=#u#VN%n@Uf$`2fYatZARGRKBXmi%Q z^gmidzT~+iU*@8+eCouXvWzuXG}b<>MeIbk?}(bj+IC@2AMC!lLP{oMJu6@5S@CYF z6)(-yTawAGXj!d-^;PiM{K$9aVc`FDtqZ3tg%P_#_on};R=V;E7jMk7(p^;^?bYsQ zlf0)lGmVo-Ow9WNVju7ndeGtX?ihSmX7lQAKdE`{TDY z?aAK%VsCp?mTZ@=38%5r<^Q|V|NVpgFK@r`l-77w{k~C<{FbFQy>Yz!)@5+}9YBno1(C%wuorYHIwpr^olZYHgfGG@ z?2*9m8QDqsWS&jRd%d?$s2L~sAA6#GM=VuS_>|Oa+7pRsSo-jmKm*0u0(aHpYyI1$YJ#B=_6MX zIi*DAe#HJ-LH%Ai2I$!=B6LVDbL%w=m$t6_V)N=9#a?W#w=d0ej|kGvI{jQlI;n{F zUXNTq*cuKGPt~f7PNTAey(jeIL#L&YT!Vx2uJAaHgsJ9z`vkSE-hbTvdG{xa=QQm% z_KZZG@K7$+W#H{bnaeBRxI8_v(-+eSbawMywwJc@<=LD4cd!C@hpYu}V<+H+dCfRc zS$0hF6W@k5Ietvr#*jD@mC&9Uz$+rd=Jn93o*!;O4e5Wl1UKX#hz?={&{vr(O`U{f zJO5(O?`)=-bN7y^gy6eV)jl+m9o)VySz>HYgP-%Zy^dcc@jTHYSRmNZ-UR~t`^LT| z!Z%h9M9-61bYn+t9qn`8^c?HCu*-nX=w!vQ$nfro*YGv*D!Ra`IK!z0E4I3tRP(XDVc?Pf=KTusT5gV^Q9F~d6SDC)P3{goo=ctRgWr^FL%RJud zdp<-Q(dA|}XfoogKLMsbcAhABo(L~N4?DiyFC@Jq-*d&Q-H+U&B8ztfeq@SR6Q zSKyO8lSe{-4_IUd#7&&~*M8mdeh!{-M zrlQuWP-4Wb()q?zG;N!v`-+@6b0DlK-)rp8&fCivHa?Q_QsGPkLOO83GnKE@9KHT$cc=%MFv@dr<&zY-_N#A zK;)u%mmQ--32*G~e7%IR6dg0lBJOPw7hOCaDh+jxXNx6YW1JRmj-1GtlZ<6{7oD08 zIc`^+b`||+_uJiXcEjbi`Q{Y6iiYgbeP=#}pT?6q&-k83s`T8iU{`4Lo1@lCJ!Y>qsyp=-Yw~8 zkJWOL+EkLz-hEo^Hwo{)KRx!F9L~dky&@**{(OHLRn}SsvSr5Swy;OZWM12^^U=@a=jqwT^u6VOf3Q*9)|{=e5}Z%(!=|JR>kZZXF7$hxHFNkn zkaK(dI*_j`MC4fq*a>_ddVTyXja>znnK9-}t3bEc-h6UuUi^8`IK)Q@4GU!RdR zG@3lzl7|~BaEbv@N${caiSRhRV!EE^NN;j>HlC`V!ggPMmvr0M2-4Iuum)$+as4{( zm^l_vOA;k|n%-6S{Zf8cJ3Y;6H!|^0W^vHrCi(;VSQ7%5`;`7*<5tU8$y6?9}B@qfgJFva(&+~W0 zKCx(HpKI!xEh^`t^4OUXmE9CJpKP1T|664xel||ogR>vq@o0RUU?n1#A#&WTh{h&! z-S_L#7`x?MD<%&y*{a?Bj>X>V=)BCVUO=98_GhV4Ud)2MZ!s`H)wCNk@%8u6Ty ztfNnWM_k>n6oqqBc-;Jm&?bl7_oqf^>bT(1dT}{*txUb2g0G4ZA*16$`?}dTE26QR zzUGtDqw&=`pU`O#UFrU#xO}uejImGTklyHR^=g+E+wQhnySW@PKO(frVfX!(2;JWe zja^1R8qUzcx{Z}vmD|%)ZZ{bmGXtWmo2urM?NH{r&1-EwR$gLT9wS!!*cIp}=X!rC zy0*|Uf*xVf%g8%s*3Sc#PdU9$xzyZ=>?Xh6_uC;mooTbbW1wDp=evHz=k$Dzn*mYQ zO;z*BsZb{S)Gc-@(w62cjlIZf^3#34CRs=b*$MUp5Si<$8;_Zl&YFU$v7;`Uy6I^? zS(~Qt*Gl^@qVvo9szNQixErI8$Qv|v*A&NT!&JD@#a2{KMdcc^C%T&qci(S^?x3{a z)1&&-_u5Y(80=Oz(8TnOOA5t;a#@kr%H9_rBjS z*zB|$c5YMq#%ZFWbt+nynJ*FC9n#@BV4) zgWKD`*jK7sm?kdF>d@5T)69KF=n*k_SH-ZXcIVV#&R%-7lbEQ4f2t_N zdgeS&&h|uCqXCF+MXmgkJtOY*RQ(*UaljG}eN8=JbTRp0Z?;}}1eR)cQ( zn@`qV4LAk7ULWX@uS9DQ{G@pGB$?R{Hr_)=Tog4~>Aqi=A}Dz^?TLP*Mv&96AMKOR z_I2LT7d?xXY>Q)shD^*QG8Nk*M)<)-b&i^Pe(qW`D9XF3Za&!-$)DoYtxU45KR>!Dl^tT{vxcKsOFP32_vuKU1Pf|2kSPgbk`KRYwW0t zrY1Ap_gkT9e-~g>CP+I?qn+v$^^LaZ>87RmWLb=PO;*8Q%Q)#Na|9k(KuR#+1A?_@Pd%gSZ?l-$`$?bab z-`)Ql_?`bb@cZIlvMx)%R$7RPv!uC_ou~ZSm#Ug~u1GyS#IXX#kN+Bsd9Fu<#V!hJ zkJ2uR_Wnl9F!6_{Dw8%WMnT6$GH%qbP|eZM=oMhj z>#s&4RSwZdRV1!QV&A-o$TErX#+pQas_Guvsk`pNFuD$dCEukf$ND|KZebDB8Kcru&wAmW0j@^xL}sKLYz zCHs){UbD9gIx=ip*{zqA?G9`6>|?#RpF8EOh{iI7@y41oK3c|szQS};{I^+0iO1v_ zQiFrt}6&Q5Fo9uWM4)7n31gK$oMgcf2l??hkHp`WcC;8)el( zXU(k{yXM8aQO-4YBD+j2*Kt9)IPKCf2ePfibpJ?|m7zr$0p)TvMTK5XnoR+*@HV{NkjWqFEQ^ZTw%V|jlv zY@X0_tk-dV3VD6bvf0mJVAqE3Q$~Nfj6Sn6&-{qc;IDk$CZS%pPyDn!o+Ddx3R|1=P9)D3Tu--3g-rj0;w!9+dkhu_fW#ZzEb;*0I za(aG>A1B>Mu0eI$b62Bb`IAo_H})bcxG7)PB#W4~`!Qbc>1*kJjOD^C*m{@P$j@Jx zT(Fyv+DJ0;>d719nPS4teI_2~iZg`UJ4;SKFCwx`V!Ux0MAp4NueBm}dSe{=-Id+( ziAPWsubCoVGn~tDvm-i#z4G-m=&WbsW5>lX9qRipIKkR;BYZczpQ2xP*NL4Xd|ASm zpJA;M<<%kH*xo9Us(PByz-BBFIgU!#WNCl4^?*H+e%8HcpO5xwXG+utljZBysO_sW z_gXx5$9rCfh%hqwP*pR$Gg4#6pyyPv%ahI!zjN_B-<*l$GQsi2DUpmMa>mfB#X0l( zK2f>`rQP!(0)wye^^^z8iTd+^>k@O_NbEgTu!}KSN7=|_G!|Np3Ci;9no2)GTt~% zIynK7h^+UtQ>Jygegkcp)?u2mZB9gDa8|xcrLnI{SMf_B{roAhE8G*SvG52ZO;P=>>61Bl(`MP~-UoA>Y zcS&?_-W^u_Qlr7{l$8CQyFz~$zf;ZG8YGjOV+X?Z?zg+&?8*c+-}vwDe-8Z4{~Y*z z@h@1H<><$Se)Y2yxkfc1v5R~2T;u##;!5nTsqgYml@0ec2WTO>LU-xodL5H`?@j3o zuRoJ(aL*ozS5a?FdhK6Ruk7#Bx%|E}ZvRzs>?LT8*5VirONoCIf*?h zqdQkds65UhCU_`c*CmFvG|35fI@ymEq&=e6^pWxYrqgZBpML0Uh`us)@y5FJapLsP zRlWq@udiF#eymlomnmW|Uo6UX_#B9|;HZ2(9nzv&Q1MM{1Fzr+5BHF6W#br2qc6J3 zRK*)h(Sv~>^jP;Tq?Fa6Y$ zmPmCAsq#NP74Kttr>a0_PLxUe-R@MX|B!%oolUF@E7@O8_I zpH}ZklX6X8chZ(a*!6d|rY$+alM329v$BW?g+@z!KAXi&y%$jn;*_$B4 zs*x9;bMiTjjrLrfc@J5B0`#@fGps(e{X2;v{bIjwjnYIfOs;o!&8O<`#y9`_?$Uly zrEz6f+BuN3Ka@bIe8FIg;m^(EU@o*+JlkZ&t0Z?O`K}Ni31DUFXq|!)HUZ zo&v48g+`SGGDK$Psj}!km=$+rKBCv)&;uLW?@MLdJ=y2pWin0-JQo7Xk?*GMd+f-H zrnf{B(H8Qb_)SD+h}Q&3emaZmJCDB-*Ne!F2uu2H=-PGoXp6eHL>-b7wjwz?bX+1V zdJoYzjEE`GBGERUw(+AZ%H9%X)P|td?y9rK>Xo^wX|H={L$z1mc#532MGhG|qKoJs zs@Nawj$T;4PpG}FL^^7`j-s|{{78$ow?x~gDvpTf^n+elJ!a~Tfy^{3Ao@HAQ8t{i<3?JvZJ##IUGjQK zcCuVp&2!p2Ol+Nf4_DR=gIY-HAo003eVQ-JHrk&U3RlfzDbvz+MMoNU7HX+v*JD?V6-~VajV*jlai+Bsn4B1IO zj;nFwE1FK7rh2Cic}i_-$k4s~5x2v8O8pbYj;V-xOGL>#nzGkMJ7Gh{SX8|ws)pG4 zvhLcVc)4yGGL9nWEs>*r9Fa3U&Z-+Sjw0vO$!XTNjJ4&ZgW7e_vEwST-WpkD8=lTD zSN4ngm-E@bJ2rOLBx~%rimbOr)({(CdTN-S8Zwq5=&cbn#MT!q<|AL{?9VfIrM=+L4{aC+X4_mlR=QFeO+~%{ZMtt^z*#DgPZq=AqPSo^M&Q_ zOFf_8S;seOJ^L#wn8c-sYHI@qSt-yJw-)chJi7+!m*Ob0toL!t(VL zImK(hO5z%4zYp(C{L5egL{t!7^k6%#H>)91Q^KR@uh_aQx?}v$>!}!^vza*ZP=81F9u?>kh zezfad#V>IV;*fm8*`ZKP?ts$`iGpzg_C@vQ`|3Ny;9(4oAN~5Muc7gj6<=20y%?SM z#+vttgh$SlrMss0*kl*8_nLu8(Fjq*{r30Llx>STjXv(lJIAVdtX4o~fC@EMMYnQF z^C3>lzFWMpO&_i-JHcs}#Qa>Hzb!`b6t==>b56u*P*}d6KBteSCtfTf`mV|q#kuY1 zQaXuzm3>={&-ApG#{C!5u6L$s@j-NJDo0M+eqrXFzn$N#|jf>2{?>db3?`wlgcX z-X>cv1DuFT{vfKJ^1b-p6YIG;H}%2n(QBPJ=45VaYxA=a zL@x_JO_*xii>l`9vwa3z>Yhv2^kX_Ejj<)xn+;JrC$;liq3cPGEYfzZTAmRxclyi` zrEwdS+=E!?W+5Lb$^PlfKArv889)s!@kwmRJM$PsK{o|mV1KNjhh{@c*-okHwMvqS5?%9E?!8BTRwDL z5Pi$iSDp{?HYab>Mr!_zB`4B) z?OLxn{^IG>d18NwpLIdh#dja5?&f~i+%bG<{xTRDLw+-;Y@~$JZ(0z0{|9K5Ip!twGwo zS*4sP$L?|B*W9IOe^-}g(dD+g=;BPYSMzdMPhNKaFiHBb`~B|kRZQoc;yhiNY~3|g z8m-OWlSb>(G^Z32Z2k)U;`(lQowu>e}*r;;wI7cFu+6<1--cgVudZ`G8%T zdH?hA(a?1?=8Z)Ulx;jN+c>@6oO4!0@jk6xpNyw?E825T36c&yCO*r|h`}!6_CFub z;5wT0-ePO_(xn!oUgpfap|QJp=S3v%6WjI4c#^lGP3M&%>Cgz{hCd_PG+L zT~zLWKAzKcG%~xouH@yKr@u8XckY=H&HL1LeKMZrt!Ul3rAT`A7(E-aBNn^J+y8t# zi|c7tI(&Y%I?a8LS03(|-ls$21E~Y}5Dypf=AIoDbMAu=CD~NZu#5>yz;$Z$-P#D?`$&$LLj`8*$i0-TvpN z!Qs92ih8c9h@Wk*;b;5BUR8Oq$Hs_{ui)>R88NueTGuDz8Jyp${cL zi|x~Tvg@^|TRAhc#>|N3E_U}nA5ZfdmhBo+B-?hVZQD0HVsW3ju206ZIKO6v_9r`M zz`KRJMAUacDl@ZY-NRb5BdWU?-v4|&)oWU!- zYQNmEQKI8&9XKgw&RGzpT} z`0dZCN?5fjfh^YCGa*{L*xdhoJgw_!#QCL0T5-5mOtT@@_L=JXWGU8;&uZ6KX>l=} zi}kF_UEw%soQhIAloNZ}&krr&% zf?e|prj2k@B4E!ucZ; zbt2d=OjT$)!<=)?UoER5H!1+e_$C_bjN5zqR`5cV>BhHCY&<3Dl|e_)e{B z&xq*Vr?l&n@$}B^JFYD~=b}5u#khvfirDKSZU6J}>`kpXnrAn-oRxQ zcO&YG&%lazX@7pQyX$H-?6Qi-YSG~{BL=&O+y8u<4B~&1^+20mE6-tLK&G!5m$^23 zqdrcO`+fQD`eeM^4_VWO#7R7=#*Dt(y{|HP7bfZToR!yy4f$D$xpZllA)~kMOo-Ml zHupatPwU*4qWImCby%7Wv9`}t*C$J{HqQPp&9GvRj8M}?RJ~X(<^S3JcK4fI{@Iwj zrPw&sdTDAsvbflpcjlF2RpQ$#o3~W&qkPRub3^SWCs9zb$=5?>d%UGDoj089@m&9G zGl&1})lDA#y0*v{v)Vj~L`T&dqs+51?WfT0XAPJwY9AhK zHm|FhEB}i{+ZwbrSJ>!jvh3W8zmghjxDc%&AiY><&Au_6?ES( z5x4XUTPo8w#J+5cg^J|2NOJN+#$;ZSCm%L1$3)Ree9NXC%Kz_d-z9Yt)Ii`f z{Nr0C*eCn^?^V3%_YE)q(5i_s9OA>!2g|eQQPD3l+AWgy(Gml5GBCAONym3~o?Y1W z$$k-GBfI`s*`kVlF4v{@y6V2a#$1TlIf*^YN*SlM#PD|NF3TK?w>f#6T0{P7mMOaN z)+%{}GgY5WUE4fny<2xiMDLvR&aW-kl^*$$?Y`u&SrL2NV{dFcZP-kUlQvFNotDf0 zsb}>*npOF$#alQ7;geaHL?1s{G=>fmXu^joMoO2uxoV!yg|p%I<@$3XEtgZ?celMP z!us+frkhpWZF54LV1JzzdwsO!&rXBA_IW-RM#fp^;v|=FzgynQoI46a&oXj;S5?mG zXWLbaXF+W?nZG;xm3Pn`Vm*zo06rH6hm4+AlZ~4f>8dtb+dtc$t{OMj=fcW3eKl?j z#Y;OIZJ%zJ7qk_-6+W7#lD?Xw&(L^%Rh|>E*G5_UXQ#}b^i*5iKJ=70sZ0FZ^{eov zt}MQUp1QUU(NrhBntw$cUmn)gT5Z z^i&vXMk+ZM!FSI{*Ui%f_E=pve#XRYoy`8P-!8Y(g~N5B80(|t?fHEXk9?}~Xz3g` zx(z>?M$EHmyuDw~Rqul&*4kK`dX%Nt`Y6qxEv47S<$tD@2yxfO-OxE1UjeWNfjWD+ zbk4+Z4`T}c9;+IZC;O9LWM6c4fsMj`|ED=ddJXzs%p!WV|KVX>WzV<&7xPcA2I4EX zmQhF@N~qO(vQM=~V7XomYtDwK%`MZuyQQqwaT-$`Z|Nk2AuNlzKFacE^Xd+GdP<*cpbWAvx#5@zBVQ?@k!9vWmGr z%JOI9nOjCvvI`8aQXb{{9_9RVA!2hX`|idQyOx%mUv8u$yW+HM{(YJc@zzIJ{_J#k z!#27yy@?-54_E2VV|C{=w(0)7h`*e%zPs`KEn}hHR(sWl_>$vu(&wVrhKydn-#6zh zh|)eT^Jn8JUCSz+Q)14A+o|;8XFF-*(9^U+{(f(nXU_Y(t*%#Q_x!`|IH&3Ld$;6& zR8~=(>Y@BUqjYOy^k8RS9=`_XdvIiR9&2@;&WwoOScS^h)6tOPnL7CUy|wYs)1Ri% zmd#ladu8V0jq&U)<3qk$jE2fN)dDPax_ejtaPFB9t-)gXI-b_Ge95_`M*ifO{6@@% zSSvFYZ;WScTFrQ8ekf;e(q*2t`9`|XY|k$?8i!h&!@bAl#$H4QZ{_QFBInkA%gKrK zU7Nn!AAj*w<|y9S9#6R^f6?g8He~%)M)AV3uls!sE-h+;@!THX79>c%Uz_hYW@f}-nZ0;p>kM94h0Z(k3{_3DuB{rg zAhv>>@^w60(_5(z6+PExp>m$By3^!QrTKFU=&fbvK!ldbj5o#;x`YL~th~tH?6No8 z=Rtf0J>~26`Fb_`lC#U&>Y=Af^CKS19L5``!Xs8w?96b>^{%Q0 zVSmeoojJ(e)$V7rXSpXYOfN=}x<09g&72qxLd)0FWH@>*TvTVT!S6d`S5ckiqdNQA zHD|VKro?EO&3NNf8RfkBs13Q^{c1Y)&UmFFl|7Q8b&Ir?=1klMmF4T!xy9anQdfSn z`}e!@qs5YL^O2J5mt{WQ*tYE7S96Y!_s;6q@b?tAEK#sOX5t~Fy?os^4<4~pm$UWu zr|0^H_;EfPVy(rGo~x(@mG*Sv4S(pu?qAJAQg_}pDyfsLSDqcQ7^Ic2<5`@# zYK67*)^@Paw+hCtcmJ}ly{}c+G>SzW8;i&*VfuFmtve&4w@hukF`nM}D_Yi-9{Gvw ze&VoM5qm*a`MO2+uvR~t77ZK8cm63;zHFwveHO%4nW=bVdu%Cb?@c5NKIR?&~ks`{c%34K`~j2up% z_IG5_g+-TZ;r8w*!($(e^Ex9h(t@M%bv$WrMM};kx*=jC@_nvnI3$gDYd*tQ^BKf& zzB0C*0D^UJXQzw&eaE}MH_Q5^^0=PulS})BeR*Zp2J1+(W7z-NllAiJWz8!Mna_XU z-FOYTG;i+dJXHB~Iw;+l6+C3sR}a8xdH^FqljqB6X!&fM^Vi5QIbE~A~SjKN-@#SL_SKA`CP91 z?v|4Iv3ftBQOSLq+z%bo@gCV41bsC9e^=#Me!Kfk6&>l5+x=(%J@~}d|LhL?8{^-w z6hlM2Z_nQE_dF)APtQQQba?gAlUZNfV|!84`@u3->HJj@*GAm&&!$wz(g=Q*WPeFHmGCf5#(wFLr zzItz8!4dU*>^-LELh4W@x`xp;c3j0(nWuQ;6u3&-5~iL_V^NLH*F!AL@m__v9L8nW zysW{WyfTPDw@j7QYg&+9vn^WMXlYhjCaqsz!PX!}Ue=VHbWwqSh3)sLRs||jPKy-j zl#)&vVt;w0@3Yas*@5IxpG-&5jp=ihRlTaTR&)v!BW;Wf9X;uj@N3G~@t)7Lb)#{b zCfNj?{x@~a=$Mts_ckv(4nB7{&F;{Aaab08{ED-nsC*sI z+4LImOJyIvw`jR%qk=T;=sk8v?>LRP{5*)%GNJLtcv6?ph|9~2yv25Jkv+}$*=_5n zI17r(*YTXqr4flFvbPCek^V97tPY*{30W{=%~W$J9~OK0ms{=DoEMQ?COF<0Px5)l zkTht&1|7n;I1I|l*QGcdA4719X~=wwnKowj``UjnFW$2|L};F^i@^UJUBT`Z;NH`j z%GH0E8wop%~3^ zF`98}QjEH^OU_r{-S~>$Y5g(sP;ssVz3@L;ywiIZqEALYv#BUUxo3ZXc`p zv+?AZ<(gLosrS zjHuhsWwmQAVl8cwt!QOLE9bM=mmGKLqCV}DKO3)$-iC~vi#9vVlM}5uCHbAY{9qgI z`~OQy&AIS9tqm{Dn3LRhx4ve4t!g#fPNnCR`e!3hmTOq9tUcrVEsfER>&=F!?c+3m zHlEtIEIHDW?J=7&%VI9)s_$-l%r%+DUVX6NcRQ*#>A}se`~CBXrB9dAr)h?WG(X#n z&=H-lmzxza-bZ!*Y|D(VCqdG$ZTfW#+hQ>1tnY4n3@*1;p9^WjJ<>#(cNpfx?9Zk_ zpQ_kgWNoES`-oB`H$`%{Cr{_X{J0qJ;qxS2+qV|v&&KQ8Y4f7Y@>A7~laBLvNH5j8 zPG=l>sY`mPOV5HR%}MOL8&7F-^}IB$K2?ziGMX1=K|PrrMSg{|)ZB`?Y@F_ZP331; zJyc&k+4n_0RNOw=3N=r6jq!T2i(N6+M^*l8JY!Q6#d&<6tN0*XvRksg>j2{5@3YY= z-MCyY)#vJ*#I@%|B8DU}@FmwCZ-|Mnvb-_T7yqdT!0S9XV1Iw=G9HetyJb zAA$L^t@GFxWx6o`^`VM9-I#w%JjtU^;-}2dnDG=xIV*j4r^yk~p@>V!c0Ja19p^RX zdaa$ye161ZAA$L^?eT~mTR(k8xyhw+lh_CMRqT7IIS{EijeU39BXxOsk>%QMxpr|Y zzWRvDpN;3MY?%zp^W&r4R+TwVmI0&3+Dlb4@M^t}=|J~v^#qSq4Z$#7*!+2-Ca0!3 zK7Hdo)K+c&Op%w<)ps|Zyq}E zPDwAFwrre>e>G$!6P^1cwtaF+bROnaOd&0g78QwIOV_q%;#^1@>XDUbYmT3^SR0G& zpN)@7ETzSWcd&c!(d>o`yWY0=Uv2w|##=q-!rK&U)pD~Uira~8`*b|T>uI~?BAlH;3+!*bjLcEoEK@lcJ0>o=~5bR3cqDZ8Im4t z)1%|~7Kd%bwSP9A!*y3~Vx4r0q5lh&xX<>>?JMm%ICj^;d~4+zv!+#`o%ps-$FBnG z#emwi@fs2)U46W+zNoTST`Rg6ZlksRv+)csrOBVoAHJ?KF+((raxlkt#Ot<~=bj4@ z+fHZOr{jrTPwUPtH`1l!bZN|ocxxl8{j>4BO{*cPNgxj(E%?Po;<6eI@`g`lAH3Kp zK~qPC=N)g6*G^g6r{l?+Thq-e8`5TN+RVpX+_VwW{@HkL=FwRD)g97eOZA+Hm1?;; z5TWffwtYID(4{ona`GZ=*RAd7>k7g3T4eFnMpFA{OYt?XGOl|~77J}Gs17cd?*AOP zV=;cpQdA6yRCuMM6G2vFiK3UC}pRw>@5&18swc2~MwAE{)@6N@_8^Vg~|1Vb0-9Dycw3sLgM#|Um z6wMuZXq)LPvjrc`1Lg!V&I`*slEo>?SN6`s?xRt7b2e1^==5-DnkL0A zsAcsE-+H_wy?rj^46&N09a+&7tdy@?ritD(|Eg-_MG)PBJcHaGuP75#8ck7CrX}9k zGBre=s4;tIy6R5!4BBB+rf2A=ilShoeBCld*lzzaj;LFb_Bmerl*d!#l!=KqwoDFj zHuMjtO?l)E?})RsMblJ%=3!$j!h)ajb<2cxX`~Bd>^x5Zm?p+Bd|X9RnV@)MJW0*` z!gPDV%XYpZc#l=4?8^Q`XFpg}vn?mkmWw@XbniRtYcUoCm9MA8SSb>9E|Kx+xQY=K zOTXK_rTtXp6?JG_N=)T>+VLYRw$6>Ma?DCpjioA$sdzd!o(_vziLtSa^^dc-J2&oz z$F;=TSk}5|+K7it#2e$|8B^8xQ73+DQS@8OS<%PBYx=09xVCH-SuIX<;*^Pp zDx<~QSJkJ~1irJcUad;-gMGy+Ozk=6j(Xi7=YNqA6J$Vq)V1yJX9o$AhejOM9jYlY=R)p~>~?c(_V*$zH!mVNI4xhdOtNd)<_=q`y3ocK zrgOhmJHe!Rud7wBYv=Pc{LVcaqP9$Hys>p^-8u>43ue55Zm|Ef2Wg13r|RE?V2h|IoifWCnNT>nV_l zCS?b_lj)u>*;_Pko7~7|UQWyYTG=^cW=B+)seJ1ev&XXNXMr`yi6Ycoe6_pS@5ugQ zb|gs;FR6#e&5KAD$y9Esya%QT^;Ot*Gf}&vhyfyj&i5_?(E~ZgS(v zIS@=OmhT7*Z&dC1cOVrTzKI?v}KShs=hk z?WQ%Jyme|1sm9p%d9_2qD;mANl-*ibC(W(~&C1k6`P(0VMVW%v@^xELCTbdAEUSYo z{M$4HyLDepetg$15_E0(TfeJYUc4DQ0~K?cPqR)nKZmj|vdcur8(Siq>L|L0Wor~CSrtl(TS4zYh_?UtAU&$-Ts)1z~HR=`ql`H{n&XY1nf@Vu|tHy&#a`fAD{D!-TThibON7z%ej0@ zbmV+<)JFV%TuR<$_j=HLvL){lo%*ioa6%lY-W#F4B1Ts39DDA@&O#fLtO8V!(QUIU zdMrwtEOy^-i_%{z4f|?;veL`;oyYdQHs1nECXKU5>n0?gyd`^=9jeSZlwrHpyEJ*f z@W_=s*jo?QjZG}h!{Q+`AzFjU?(18kHP42ydPj`ty{+R^uE21;ufM#|xxCQB=0e1F zlNwLnF0tMVG0xn8Rrg@wyDJ!)8LX29w>_w@Yh#M5wM^y^`otrFUPy?N(L9 zXpV?cu5AyS8PVKLaXdL^nx%V}(YecC)n!;6G7loP zo6vZ2KBV58FZ1F5ITwFs$z6XxS6TSsl`_b7)PejY?>H=*(5ZIMc4@0Iz7AFI9!<()6YZ>cZj zEF0<1IrQgqRc(FfoQUAywEOy&2!64s4pnQMu}sJOPj<(S)VwQ-*XXOyLjS%n`U(yo zP3kHJa;D!B(TA|;XMf*YnR!&nHowwG?MPl(4>0S3EW+wC`?9@z}%Y zBWAR3;r_7u!%p1-i@rYI@@J<{9}(Jp`tmcfel!+;*!@{NS~RGy8|7u?tzT8y zsAr3}#ahchqv$2QrVQD4$AvE}CPi@si}{ z(%pAAkK{jA)&5V_%8gIz9k_^i-+YUFyAS$kk#Iicj=inH#5?<(3QKAt?yB$bZp8b# zKh0}|$S<%0q zo!wvUHxYs8>i3~yaZR$m*#GEDWmD31kexq~Yx!Th=YQPR)64z$8++#2tiRY-f7t!W z{`|o{xvWO%!NzQfalG7#o1BflyScbQhkP)3p$nXAkLGD}_&dIr%qxT3KSIV_`>@k& zO%nLmU)jH&e?vD5x!!GKqa5vkk7>qBlHVum`Lpqoj|~*vSXsU42=Hoaq*t@;&wX>h zB;WC3zuW?&J0k0$_jZL6)?2)Oj|BTEx%)f2u-LHMu;B8TGQC6CWkNpYT*zt8!kS|) z`f|eh?zTrC>ok5)s-1kTY%?O(AB`w%ACEX-?NLGSV(T_G-_N4W)-EFar4{a&F&15Y zJmt@}Ll?de_S}W(CC`V3H}s*>oyqo-#_DHi_(+PBoQA%;Qy?W}e7;K46f{jYCG}Ah zA$?5b&rX4m@UgwG)1CQH(k6#$ll`$2EjbZ=cUz<-t$gQIF>q*XAnB0i$ccnL+0UPC zj|7jKeW>EOob^ENgr$Ge|3A!<#$ zI|vh1CQUb{d8qItdX~>Fkyh!Zp}C$qMMK9_ z^yGx}-EET|Y75XoDfUcubf2WC@AB##R#~ch*tbK^5~|}o%R_BWRLyyn0+lg-PA4n# zjs0eqF@N6KsxFIhxNci}u0(qu-}$p`(oW?B^=0>Vh4G7ipRx^ja0?oNTO zZW~H89ZFO8n2Mf0Uh-#Kp~pQo>_u$Ir^*IRJC@K;>;t4u&+8w2M@GFKTqO08bo}^= zs+^p@yKPYQ!E8EuX?ew6#6QwbTHnt^)%LwnMUAZ(>Sk#CXo{FVM)GG{A?BY|?uykC zzv#YVhj{b9>~l`P@>=q=2OWJyrEAori=aM&jvZYQl~dDqw-us@C`Rts`(BN$G7wXJ zOdUVIqN*>c`6y~J$-JJr3&B_gG zq<%J9(RtKx5HBQWNvx2lA>?{*Rd(@Hxj~N>`D5MwSU-)^jK8St<1l}=H7Y%FNVE{* zlC-3K6JFi=YWk1v6xgTKNzqGbf46v4S4FovI&07kLxc_?beXvjtvQi>cUz;iPNkR{ z!c=|4B>8=^ozl({nvV4ey2B(X)>p7VoMZ7-%}r zG<(gjYq5GCsJbSUuQ$xsTW@|ubxv;I-4>`Oz7nTu;OBk(=E?cKL-+Y$7;leg3$~_q zJ+n`to5aJ%RP^-ml0Vx9J@l~kT`lM_>JNW0Ql3m3qS-i)0&adbX`v=jR$`Zx_};98 zF(WBbavJ*Xwm?dLGE2n$bDNP)p4g0{q>GXJ&9QZ0 zmzB0nr)9+&vp<3&BbWZZyKRtx_u)|lq5-}Ogj`d2E7BO<8lyCJqM=Xz^Jm+n0k8aL zqrrE}r^*OXF`SC7F%%s+0eyGdqa&{&Qq|B)6@#y5VfM4e*im(z(Km*oqmPID+4ku0 z9kcglQQ=p3S8*~2egYHKJ|gB2V#bcED9TCcyW1W`#IWuyml-($c3lwd{aKZ%JvowG z$MlV%=;-4if3^iWKA8RBXS<+Th*&~{SG3iuysOe zas{4?jI+@A9zU%%_Bwea=+*uWetP<|)gpZOUQ3R)d$;>lv1S|3w%Wl<8>>^AN39b1 zO3-(=?Nx$)fz$`Fa-@25trA3YSSj1j5Y10K+&??-($>3A-~GDiOF;c_T6_1ui}%8= z8M{hsaUR!LB|e%w-&OShzuo<2*T-f1v;Xe?XLs0l{^!8&i+{&9)`@Ggt=X3uGJ9iE zOkYCP0(Ms*VJUTu+8PY_$(q*(%A*K)sBARvS&a>xI_I*g>y$;$4#o;Gg;paThQ^zE z%tc>lm-2Nh`o|?9>eJo7Os57@?fLS}TK#7gF;(8J+oue!hL5I*DU%X!oCYy@{|wP` zI4$`|ij?4>eBClB>eDnV>xP%prknHe6BT6|;*Bj+;qfc=XqwO0$!)UZ##__{Q|0Sc zsH2OEcdEtjO+E04#0<|d?2z}4BxKdSU%&6pz5d<_E%hz@#opoMEwb)u7rsawPvVs0FDiq%@^y<;((CNH z+TZK7lHRY2y}s<5Cog+%U!e*8GzBzh=tb|7#`k%b>ksz+?f1RHB6BF2^UZ<=#bGCsFowz91q~w`iA}6VV%NmanHl z??=;~^xOX2nTHj!%AeHF>Z6}js%D|On~pgjOzXP$>SroxFGauBU4Ax1Z17mVo(i#d#@##9x4!p+ z6E2+BXY*8VjPUSfvFbSS%)7!7UxI$sWA@c!mI*y}^hIQu#CYRWh=jC{-#kzvxo!KY z$isL%D*C7SnVxvC^?p&}^Ef`IoeR+#ES9g^qZOUUp5KV&q94hMy3I@7FglUFI&?K8 zTZ5g8UUf}c-`yB}BH6FVK1oiyK@aoO+=~8UUwxH+wXy4t64&+XIT*?A^HimYY@9XD*(PpBvE}td_5*Nb`72ERGXZ*g9A_<=w&K^zxLm zB7)20#v7+V@UvOLsisMuu-E5KUk%((?3A-0LW95Zb?bx@oBGu(+k1;fQ3W+VR^@$q zWD_4^6HhhzBCp6^DGS!C(qD&oqpag=3@8b?hnyv6Hh(`MvM7+!Q z^L@T&z`Nx63C(crz4oMQyL9cEvm%1aRoQ14f*S>1> zu_Gx`%7nxlTOftbA783S1D!s6?+54b-Bhf&o@tWPpC^`O*JasFKh~lxSSnw)KpPn~ zKTqh{xFc5R+6n9K%4$V#E4}6YKt5K_eD4(zM0Qe98IH%Ts9(8SW%{ueZDq>hjcw58 zRohfmkoBVe8o6O-qj$z4-tPM=em1T=m&Thf@~CWt+Run!oZ`Hvv7;)2f{*fbn*`;1 zdV?A7hr_N2_pW3E4yR|>h>DytG4aM$$icQF0^xle*nb;6X*@Pg^x@g`5!D&2wJFjI zS01^d7AP{j=qk4Y$qe(A?>wqkbNJ~I-b;hZjt|mgy_#$rb0oTh-SYKx=q94_P{r%1 z*vMIjd7}4q>hTBJ?I!Knr#;KW9y;!#uuNaPaheo1>-EsgPt_h>_WD92J0mQyEYE$S3Cx5cL;*k}rWSt&A{-QFND_>8QN+c=8jiO?O{2-@BD?2eQ zgQd|Hab?otjng5{cft8SRpP1Fw&N8G)Z?xxE<=tG+mtuR-V=@0={VzRf-b8uE9=HN z=0x-co8{~2(u-E~9>e1Ilf|^A?j$kHwr%n|&8&#vGP&`_sSx~N+0N8+@zJ!dSLS%n zdc05cZrVwdcE(cu=6%KebRH__qP~Zn6L?riYgDr~JDGciH1aZ>cE|hVW4s@YVot}z zoVGi!T18@wC|^%y74cd=x5|^n9w+S8`z5owuu43CtM_9!J$vlkTA-2w`~S181ioiP zd+Ley9p`7yJv$=0Ome(&DnvK4g+nwtJGr{*<6|wLt9n#LrJ7$VFj9S$H2*Q0f6bZG zN)Vivucx{aJXed26+dQZ40{Fw6T7Y#Nr@>R% zFYS1Yc06p%MPIO0zHWg&D(;^ua@b==%&NXuS_E|w)IV;bpe+6I#ug~R&w6Lp8F|y_ zcj(@ie_B6Rn2KASoj#=d{xPE}f`X6obt?o>h38RAda$5NJged7Az_iJ`(Sr`GR1m` z`*x3@$S4yLZ)}B(8)LzDP!iEc%iygL$0Oo@vHPbzeJ_8-Mx%WPKWq#eL(vhkU%qac z4*E230x;{P_80bRjW#m!@e>tg8sd#DP(eiq_0(7aXp89k7j>NBr7+8Rk3e53<+pcf zl4D0!Bn2ns>sCmrp9@5Vz(=EonrQrzR6U)qm}FsDb&2z6_d>V+fv4lgS5%d0iZ@P+ zs@OG~^W?c3`rUH2w05sg!Pl^n7HPpz`T7<}lO@<^2@ca-?PQ6hGC}di7D?K#uGI;U z{S~xLTd!*bMMlVd`MO0iI4O#qY1Ea|IkoO3?Vk`w7ihZElKbI=559x_T*SL?cmKAZ z5#0c#i-zi=xn@9QmWhlvwm~MIfmi0RJ`%69VsD9Scy^}e z^o#f@iC=2YM1QbdzMcyGky#9#%!!y-;8^qCN8;9q_Fgb4FPZOk+TZ>CY(Ilu{Jxe% zWdMIy>aH&<{unEMy?N6rP^LfLIMr34-k%N4{gd(hqh0CdjV13IpSnqN)HjSKEI={{< z>wOm&Ckwn<9F8|q7dGuvIWFS1udk<`A5mSVIo>!;s&g44K1SXf5BjOvP2(AKKeg_n z>ZHn!fDiUOs#NIVN>5jvs@2y`alE#kc4kC!a9X}@g=A_@s68QiwV&Zq^<}C05?i@E zf+C|#M7(htWT1~Yzk^7M;=6tE-F`mm<0wjkf%0`5lsuZ1hSyHL19i#dPTyPSjPTsN zAHJ-%eyeTxD2k9W8S%#U2>EENJej4%{z@tdh*LaN{WQEXpS{msf#BUUU+rEMLw)g! zIyr}pu80a=%GWIr)vUDV6c={GP+x-%qQ3so2y=ZzWbmsI7bn4RF7OBYEMg6u>Vn>S zw(m;O2HA66_S_PqFCxn%#v9uwl9LzMAM;p6@=JW8|ALnN#&1H(?jZ>zX(~syQ9G&sv z6vq6Vw7Qn2MvOf*?(N>%civUjdz`ttub;Y4W|FNw^$M`=d}`H*HKBan{;ENApX|Qp z?%7X=M^5C6Ju<|?I7bz)oX>rY_-xO7kGxmgLWPmvFDSUK~%lZDS`R-`F$WWv}u5*wo5gxz*8MZ@V8EtY`nxtMku}h%S>H zZ=530^?jml{YFiR`>`ICx;OGUha#PLjExP))Rwq6%=almb!dcYpXRA&MkEKPs*PCp|eH@GZcw@5BKR`8`R%$kK$ zukN6KancXBMyTxD;r8wDF%>;!YT}J8(z9<>)hnOtnvByq;EX&?#EQJS0Uz?wKK*Q2 z7oNi&yBDHr%DW7Qc4XhsoxLqhI8+m^H%Fp7*ezdAneLozb~X?Za-S+yJz?Sc>cHvq zoY^CWr)K!jnGmUELgS6oBlWYfMt|Q|W0Lc{iI;?St)Ii=G2VaK8=hbAx~J6ppZk4X z?Q!DJYwm5$s#cI#AIjI$SV6oyA-m0QY(*fx>ihW9c_AKK z#hT~*5Y`OVmpqFUb~`zwr>bVsPZX2xKV0|EJ2N7=OmMt$8YJht;PArP#{|!G1E7|< z8T+EvnV4yGDa0b6=MC?o*?+a4;kA?4_g|`?M|B6MZ}Jmw>>Uw)IN|Hen8**V%h%H& z-?guwq8mMgKUODvsJHMuS>k=0eX2PSon0`%UGzM$s z>#5L4C+^Rc6-xxmBV+U$hbUqI$--~QHu%;O}?k! z3QsIgF;AkrOn1C-`jkr-vkz|C?giuc9Xvj)lOgZ3rKg=G5gz=OuUjB||EzjWv5$@=*OlLvc4bl< z`m52LJTz6Rv3D&-q~!I^G1?-oOj^9LP2%cOBkQ%xdfjKIK5n8QWW0Rc1_jhJc})Wy zdwwx1k*Z1RoqfL`F#_Tg^vt5BlFwhNO3R;3KZ%oWPL3N{kyIuq-q;37>@*{H=x30y zpMV{*e&^jv<7979(@o9rQ4}E||K;m8390vr^Aq$!6NRo3DZ@!AkEVzzlM-)iff(XN zbOB)>sGnoyJwcu;D-BC5^r$^_V`H?^h2wpazc_mY1Hx{@80 ztPS$Sy5sWW2%dYMM0uI+cw;M+)4w13QUpHrF#c%tp>w?goPMY7_fc&{oFw*+$dc{T zuv3h%$O>-C*R7Dn+309Kw`J)y22Bws!9tBLD6SLfFDPrZU)LQrrlO}zO}w!cdc2-D zY{xi1#{D`pk=GQs)_OH=qVN7Yi&Og7(n@_=>G<&#Rl!X8x*e)g=gf%b*ZnR!inveV z@2TH)f0r)C3R^h3kq#eI(Nm@--q->?UVZNM03Lh%#jHEe8vCih&D|x$EaA!f%=XEV zG*y?Tnsd}eVDMGGZim2nEgW&ih(Rby*zGwvMcpGO63PU`8`~tIUZ=Ld7t(h+el%MJ zd&PB@bWXp{snarkbVXF~Qof!dQKDxmdPGW@ka%MoqvjBY*_Y@klXj_MfMJHW>iFgMdWZI z4Ke5)$+8pC8>dLgm z8{44nYemf`{*kJ8C?+- zyp*q7A&R^|79cf9p^w;e@?^ApHfcawe9xDYhC$Z zjmi@0M({N0Zsq-7J{jA*>8nb+Eqqa(U(CtJVMoUpovv67{KPl!{>)nOVC+*(#%{Uj1{Ev8!#6vCxG_8Eh(Noo@M?cg zJ@%|RnZ7!il)u8VT5Ef6(D*|1RdS>E!jY6Xe)p?uxK3If$c)X~7yUa?Mi z42;v$-G+|J47aL@sdF|e_PBpt_x5B#cUjO=kF-cD6Bci5fiz#WA;!BprJecSzm1ay z(F?vu()+XVHQk|j!mdfLo_ef&;1tb{9M*f&=5!j3GY#uM3Gdj?GW5EJ=D$MRc5%Dy zdDAKojF+#cwhG)C%V=e?*<`k^>=(8=df3+mGG1=YyOqrouW|M@gN!z-K}5T+?I%(j zmO4;f*v}^>o+_r1_sD?7%7P8*Cjeq85P^F(tAW4iv+7%HWZLUn#;hEtG1ppc%BxJg zaayYlJ1SzY1X=U2{bL1aTRGa-nD*|n{7hCSR+hS55-VAog(I8f_?2ag^Qu)O)`;@; zTvrji6|cV`u1LLJXjA3kyYuidMosU|Yow@*3LkU2b)j#jM0%OZ!&A#31xYhd|V(+UuLm#?R_0+7|at32O2tHcMoa)$U4 ztO2YSo-2&X+UrWgN4>2_I&bYW&r^O-jA4Qp!;dUmp8*hdBaWTr~NNV2-0IVATORsHoSKx7}g zvzF5N$Lsv%XH6?W@Lj&1)(Vh!c#19=Q8$Q=_gEiZ|BdAUvGl$B(-*s<#aJEK)kFOf z9b~;GIcgca(lAB0LPGw_*Xao%f08;p-I%8G?DVDiu-8@#hhD-1^9U97y7aX{v!U1OI_=rM zm&#uJTs*zzz8iiXedp1euKn68{+gNHbD?beGa*vTgvJ}|k=i9k-XkV^PUrJ=NXAe#yG8w^N+a53$Du7^~k$7X6VU4?_aoSW`L+cjR;Ve%!sX=ttrM- z^pvTIH`b$PDtocMFB{9Xz9T%MHetQipNhPkytU^;)CQB~>*-S~`sSfe6qV_TH*tBO--SIBe`hL&$phx+D#FO1_ihgUNZl`?crGx@UYp!!tCB zk#cxbSvn%~ZOo%qiSp_YZ!Eb=?03|o+dgM9dA9wXd3$soVYQ$uCiy!~xbQCfT^++B zBBNCxGVqr+o}6IeBa1)XR(|ah^nZFkHSaNjbJJahgPKL~V$xrXHJq z`UTla=-)s8qDwxzENqwZ=tm-5zKwYhrDZzfjU_2XJER`<;iuMj!NT9ZAG6(W2e6&&VzNFDFJg=m9v9Z3iu_OPK&d2-p+YC^T*sjOLSI|?w zF3A`5r0@d^$p;ReR9!~jk;?d@>cB1RP7)yymMZn8$tr-w@#k$J{Zlmr9i z>-H#dned$t|2mso#j#BIs7dn65+83YBl*-byPbV&rv{)6h&nX)s@|Jr?p6S`&p`kl zlApop-jVnINL@|C!|@6yDpiscQLD*$*JMS`TeC0&-jju~_o`GpqI|US-NMX<&sD1P zVP@Q`ysK=qr=4gEmde*b6=P5j{Dg-<22iI@%__!kSwkG7&#kxzho)}SU1>V z5xs^a>17FzHGvC1@9+39`?0&oZja?7@wKNYzqP!N$TgYB`REdnBcbm!AG(W47h)HfqNjIPy z_D3|uhd3e7d-#fpEi+Ljpl&fq?p^N7qgMB=WEl-7;CE(4Qkg?N0=DNr%w{3(_Q^i~ zdu3n!zR?NAJFBGqE6scYdFjyQZE-(ofl_61dHlRv+pXmjh(3gWaAR}W7ju(l7|zA= zRKVS5n@ci3zJmzHUaWhOv;bN_w$5oqg6i}2)pQK?fcKJR8;6i(MkM9iy|Vb_TjlV* zz2&D6lM72b3blrBcMW%mFU>0J{8e?ryW6(t?DILZwcoZGI)bSt6-tyT8_q;}b7>1F zw@%RooOs6>q@T>r5dqkG7vE(0gGIpD1L`qiM(5Q&Njt-(1(F<>zFJz&nJxE;iP)jv zsf2ryYlV(o7Dyw*1%6*q17GD}A z$#;_9(pO8%_s`X8?Y0TK7Kz97)%fHYEXhCezdwfgD6uDy3?J|DJ{}M{GFdo^;g`6m zKVOFtA`|Qxd^Ah`pY}CT3duk6>|N&B@BC4=%!aFUVxAr(x79jK#S-U){9-Jp-m=KE z@8^N`yoOKFm-;$9{OhGxY}V=*%j8mbgC&~JVrXaislLPd!h9Ovg~iBl4zAa#;mI?0 z?$vu`6BYUwW+C#X?E38zz^R?o>9dc{Yiv?2X3_)Nxfs0#qJ{(eu6yJ>Lg{A)#NM8K z48_E0Fp(IDudrV8xs-M9-fH5Z?)${LLI)_~2K7DAqTnjS`1||E*{%7+G*xlT$){}g1SHANesnm`{Ew0zlO0r$DsY#+5-0c{z zXrhxN-5I0aSaQByIY+ANr+Q1Sk!wbU3Ilc$MvqZ695FHXU?tOAmg&z`RJ!g}Nv@IW zXOrH0#U3}DXCgLyWievn#_Z^z%TfPc9Z9xJc5~cVudzXhx!1jOt=!vPx%Z{N>03q} zAbA$@E|UI`e&wFp^X{jGNlVq}ZSLevVLaHVrJ2m{gpXLbqIX@mzV{d(0X~=nb_UopqTKKB0 z@5Zve^||_C_rvZF_Un8tqW#hMQ4+g(iTz0uYZ~ps=!M@uNn$rIv454sRucQu?$0K% zf0e{;SYnwY))iR=tg${CKS*LXFR?#LV!yAkKbYJqYFCb1#2ZV*FY3OAuPT3%#MUJC z&yv{9ud%XYsr+-R;77BPw8q8?TE4Ea#{RgIRZy2$Sp{V|O>e9tv9b#45-Y19$z%De zbtLvLvSYtn1%H(1HNuKr=5)8F=k?Q05}Vf8pA?Th0g3&a*4XcB?4K+`EzhfL4a6I3 zSOtI58e8oW^jN{4w8n0JjU_XwoL5A*$N_4NjTN+fU1N>?v!YwIHTKWDKT2Xptg`D! ztZKKC=k*uUI9g-NYiqo*hQ$8G^q{PQunPWS8b=Zv@>ssEBe8#!#D0$z{6+ED5jMd( z@z}pu4YStRSY!XHSi$Bc_OCm|W0M{GH`%e9m)O6_j;+NC{w6#21SD2=Y<-PY?N-^} zN^h*;dHqdxY_`TKOPl1e{M9-Vt4f&q8mpa&WjRf6tRu1Vyh38hA1H&6KZq+4LeYesITK;N{HTDPFC!)FnuPcDxzo>R=#45Xv#HzzaeU1H_BzEHx`=iCT zw8q97OTQ7-$Cj;ucw>z<_DAzIB(X_i72OJH9CBSpViny=R>6M{VE3L6Vsdj7g zR>4oQV{2>dPqJfAKw@Rb*4J2N5QbO-@y;4n!Jm{tsI9SoGL54QLdawJx{k!Et9)8x z|D@Wj&07V3R_#`8js3IEOgsUJRqa+5X+HR-RW~V&!=yc`SdmhQ$6=o>wg%`&W5hn~!e&)oMQ!D~MRZ-{g61USj{IoL6m) z{hR7zPe5W-9~*Wo7Ls}!maW(H#`1P7bEJJMqMIHU#}yv>bq5!Sj7rTQd)n$j>IZf zP?uQ63hEMB`g$FSRjeRM><`L$Z9GfMIm*g;)g@LruhP0&f4;^V%jqi0Ab19WlfPvZ z)Fra?^%@fU<4#sVT4Vnxt6=k1fjSG&P&~FIrS<3QNUY+qNn(G}8oPNr_9u0fuUQ2@sXq1uBvxx|eT`LgtFHA+ zU$0>m{G{ksZH=Y>v-TjA8GGlf){zl~&O5SL>{? zs_0I3?4Q)}_ypEi_1#Jm%N`=xvE{Wj-dJOe{i~u|-#jn8t{)|_n_gpmj+FEAHP%N% z-8f_Y9CBTHjrBQ_RZy2$b>kc&sqxMl5=(uZVgojir)J z5?hwkcw-%j)j0@tiB*Sy5;(;I6@>|f-0 zefPZRL8g8MNgm5zEibXmk#b(K#xfepd6nffy|IqOD(96X_9xRgs)R`rS^8=XiTz1? zX=_%&Pufen@#xkMwo62NY3pmO_IZ`o)%x>w)>!SDsY|Tv*t$fPzFtRSWydCoWgmj< z*pi&4=W9r;dcs7*tW`@@p(}q}r{JSWZEZ z#14_vcxQQurRH9H5JF-Z4RzQEX&iE0USj`ZF-S>lNbFxt-^lYCBB}At@)FAo$@5AQ z`#0shHtl(_a}?W6I}_QN=%b-7MzMYlxh}oNvXAz!sy6&qZAgFaKWL5J_!`R`>8u&I z3S44!lJbzXHQrf%jYVQrS5TK&)fI#^4!N!)v8pSmORVY&hDd6>vyQ~7uAnZlif)B8 z4!N!)v5IabiTy#I*XBL1A5>RRixvD}(P`~L7_z$hJ8P`5KiaCIc&x``*-5LDJBG{a z?~Lx}-Q(_c_q4m(UGM&}`@DO%d)a-m&;MSn)xY0;+1=WT@WI~tV((tsSJ%5=>@(iK zuurb-E585MzVE9&e`j|esyn{##y;Ww*e60f=SO8}YisO}sw>#MRlq5M=ex#!G@9?e z(f-wlf3dIcjr|+@^l|szh`+NtzWS#MG)^b#xdz0KZ3 zwPrusN`6tz9Dd8wx4F${^RvBuXK!EGde7XV9WLzM*KbmShCpWgC*D>+`}vId*&p3I z8@1btA#~T8caM@vy^NlB>$yiXeofiOwq%^J9*3+j zx7DaK)@YJP`@Y+1+^?%O2iugNcu}o4=qT4Vz9N0B)+uJ>Nqmi8}ArTq* zY`^X*t%N?~lO!4Lt2|Y{$dj~@jhO5DAacn1239=j+WYR7AOW2pbM?-2I(E~rRW82k(N?<``x)5P*acV<7nKcG zkH~#6${y@z-`ks4_B@ZsT~*%=i>#a2aw!&j&RQy{VN^Ztu+Lo5=NFaMx)Ea|JeegJ z`(ks4)D!0+?t{ghcyYfa&r)JvyjIZwEOU z18KlMotHnGgHDgJ5sCe|vP{VMf3ROE1B4bM_KLSeJppfe?0~mCN|!X<_3l@r3rjLI zV#M*%-;sW{dk!yW6u;ZXc#FE6tiHSDsKXk>O7xt(N1mGUay~k%`9JrSX~-B!y8Glg zf3}o#H)j*gL6sV|Ah}lROo*Tok&f6CmfL+5J$kUu$uFLh_tP9P?1dfrye{;J*_A4zpCxqWx*Np&;N z<@IBcJ-h#A!%%7aYE}=~WXV05#k8J}A3>4P$3p&WYhTN3nY-6h-$58TLbZM@rlVz$kK0G`iX=7aT5i7a-Tn2lLB(v$UJr6d7U>gP$EL? zR*~<^IJ8H8KHHPAV<4K&%XpWDhx=)VtXX{C|NBKY5>Q42C z?=mIc|FK%@v3}48@`!Vfc-W|kfLzM^?v^2-S#=b7t*DsDXF0cSquQcg(?mTXd!f#m zkGaNF^z`wPKRX?I&?rt4dL`8yowq$T1w-8zSOGabqc3`uND7Ekz6R&u%1-4I~d`$bO6S zX5*NV6A8Jr_uZ{e0&AZ41M*xsJB{)_Ksj4s z)W=NzY#oC3W5vY6KAL4l7hyU!MC|z7voAR#W5!JsU_6XUUqR@fZI}v$>Bzs1v_M;1me46lSmKt%9*T-7^Yz^|hR%EpIOQ2^- zv$r9qpK!`a?8p*PLDaD$DN=G8`tG(!O5UeaTnyzRA2(6ZC-?cY?NK04g&ilkH{Y)p z(uhg&bLsB8TSoHnHR$^uSw_`%QAyplqsq_18#7jt_CEQ}pDict;aQg|?c*$(_f@S{ z_}g^vk2;I)I@jo17<;tN*;1-UGnO24(U%j}cee(8K~coPQm&wWA^>%gzT=lZ*}kWh zvozAqU$MnrA;xK{5fwRotmMy@BL@rZsp<$%x5IkGx5 zZr?34$|5YMsPAq)!s=bnLrdjV{a$TG&W@}N9ptI)XYaC~OBa23Jd5LJsZpKAcjWt; zy;|VjG@PF;c}{26HM5-UB(6IfBDRmw{MmZM?#H2WUZWhzuSu0X(BYwEyh zMpXpml=R&#MGzGUp8v#uKr@l|#D1i+HvPw*Op|dwk=Gf-nUJi-*pJbnj1zb9Km2qs zuU5d)^l0KmRT&rlT{;!QPZcMJa&G6Xv}wF;&4p;~<1>G@6s=g5^-4L9jI_nn&O0VD ze4HfZxg_`9EhXi7?aiTaj_}t)>rnlp*hgP(YrSz7g?-%R&(@-Fybo}1_9Pu^IYm68 zixI)6-$8WtJa1jqq;9@(7G*g}eRtcXENYrXO{&kmug2|%P#({^a|J!Zrx`^Nl2g!kw`D@SipnEG zzZxm{5A^%RXE=A=F`ksZ(G)R#jO5RjA?A~5gD;hC*pGgEsdUZH-zpCApFf!{p`QMn zsW@!JB>A~?_uVZc`M0*xk6+#D*3^UX;c=(vL8)CO-nn(|u@y~y{N&HJOjFu#EZ>A) zFNbl{Hi{x7r=ag{8A9&O|Mr>kYg?p>s=d5})j3;QhmDvdzfaclXUj=`)Tbih^j7`Z z{-j!k%7Go2W=9+uMODW$Ns^3k0d{Xz3uyx zE;;Yhim8cTW|T!(A5;0WtrCXS@nD2SZ;A8PJ7dXdj-H6frM~ZODI(aLhMh$wG3kwF z9X~oI?LwDbwqIFuX%WO}$5OQP@sU4UhL%V3SLm8>Z@>TDW2doBdL5RpfaiYB@G;{i z3UW#ByIY2WKA#N^F*79ddk>_Wo zq?3sErKKJxAUfb0DBll$&R$HMJ9F$9ijJIszPn}U@M;wP^mB)`t1oqHZttvr*oaB; z`(!Cr=g$IBz=U7*Uav)6sXg3^~un#*@iBvEiHqEUh*>>zt_=KU$LbJ{ixSEhX{n z|Df|1nLsqcRh9eV+yy$ByI%0_3Ux1J-{UxM5~dnO5t38TceflN(Pe~wBwtNC5SNNm z=Kf6vmo~!7 zjk74rN$R^>gEBJkucmQ6eD}|Xv3JgTC+FwT5fmAHEacCYBID6~le^0H%A=CnU(%ix zWR%8_m?S@!?!LQaB%kP`d*fbj<#j^)KKO-M4)tzm>C^z2XhLd$Da9a zs_Ua}_{KixOp4F;NnM`K*|Qn0xt5<7QQXIE{%lQ(Q&m7S{+4r=SDGbD@^i&yoIfQR zS-9C_{#a3Z=^+9 zA6xmeZIT96A1zM)YB9pRen%7yr>J`rMMzFT-`zF|3B5wUnQQCE^ltY{71?+?>*~%n zuc}YabdRD4>0=^)wsk_NgKM5Ir1)Pm{x^)1_OTQ#IT3w#r$7t74OOHbE3ene$^IH{ ze*pm;_JFvX~;8E+d-Xn%6_$1uny5*pH0hgUi9%JEzYS6hrK~spqB1A1?`~--n-)=G?b$f|Xrz5H)*#m9he{dh{nEO>&s$UghJQl8YU+=u zNb)WwuzTJy#aI>B8-G#R$6@|#St^5@w*4XOlp-QPJreasRMvi}G^bmsWW3Ox_x28Z zw_nb_=G{q~dQ3%6PDtO~a`eCk{S>dQE&>~qDk3T*uD>y&ldK*rrntYZ5C>t8%rT=U zBKjD}pDjOecSKct-4@nsqq$dIaz&o%TV{F%6Fl8h-WFEmFKg{qa%s# zli~c?QWBl}9NhVi8LzL?xgq5^c++n?bPPpDPC(z?Qgm=$+t1&v=e}MhvX|<$4PPvF zarnrIgg)8NpKXzZs0BLjn(T25q%o89=Mvs`H@);OB`vd5W=;wD-w({%m?_CzATEs?b2%k?1FjtoljJe!f83Gw|NtMAH4_ z!TluaD9J0P>3+_W(H1z{} zJe?&fqd4Q^d@Q9Y#!AxOC*S$A>7_ld5Of>q#w;cD2OTwDtF<5bM()W{Bk$?_0;)`W z|0c3ePA@XJ)MD}zxDRd8jIR8!`$P5fk}g8mge`VH9Bq3RL}*T7-`(_t?(3VV#YEqv zZf?D#_WcNG5DQI&^7udf5A^zLh)o zklFi@;!N$|?G;M<-I3~bfBX%f-^BVpZfuqsSuvDz(s#E-hVTMX-y|o89?taT^Zmqm zeJ%ApH)cz{1&e7(q7EHr@zqCE{%o6kg$~3AiP~D~)yaQ+{MJ>LP8jT#Brf*Bp1iXw zc|>Byyyd4rlQ$7}Ri^rU~zPs)7_>0+w-h~D$G-<#32?m_#mUc@ZePlz) z(7^M*?P~}Zm&b59-8_iTJ|gpHZ=FvuxgL|^FlVjrZu=a16s2CzOzu{Car&56Zm%9b z?&7bHxcu2$<4=0;7`-=+IdPV=)OYt5I3q7{Z@N!@p!W?wHit7--<8H+JoXWoKYI&2 zK3klW{x{Nj^Xj}9XYrLY)OWW35$Tsm>P=-Gr;V~3V^@2Tej#oIXErWkW^ z*GF3ZY>V7QO?}!?5;ZTJVM!k$uLX^hl&NxoJhwze+&JQn8*Q>5*0iH97IWVE?zYGxx{hc)l+lk3?+hKt>3|R? z-j3yM{0NJwK8o^ZTV$$kBR-lw!*0Y@RIL8+x~d^#DsFN%`tG*KO~ebM-%qR>gyqxG^yWhR=va-ggWcq3m32X^GrB9W8##eL^xvk>x zZ-IpPf2Gr@^JqcrMPX$aGA5GTTsr&i#!K#y&TpS=wf<6**fg`z!w@NsHT_-XhY)?k z@1Q62ok@MOtDIX?$(A@L$zNhTMNJ&=Z zg-8E3I=2ng2UCofq&}DIzPs^KU$SyuY@NTiQ>@VnS9b0mr)ePhe0pK}z$3<9Z$M9q zE~}RcA1b}wHaaf~<{Cqh(Z@pmY(6sb6SqPq1R+>ic!M$Mj1)_4qYx>XA!XGv=lHxwO&7UnT#dPMt&waF&{%vHj##%7#GMtZ#BsiDS zzPtG(7*7(b1+NP4lFW;rWBOncOr)NSY>L+WXkY)qe%E6@=ebT#GjgJ!Pww+)^HC6y zmXEe#W3SU6&?^+M<TOJgF*&84&NZhpy)DEj?3$@N_gQCEHXF_iHhWXNy-$ViI& z;N9ipfzfSrd*!@P}C zpvJ~)UTh5+qko%YCdtpGyYFs#$>)6Z7hBgn>WF@z*5<0pJ2iCx^)sH4+W)S%pdY$w zhuX7E`(tp}$VvYDBtCz(l>9fD@TexI0A78IUq%n@i1kSRedQQGa+3dC#{2HplYg?S z#5eJ>pQ<^~`(%(OBlKnnu&!4R)`}KU4cY;ZKj66z8rYnyswO8d! zOLS?8>Bd-0<=ph$t;f_y(<0Zqf0+jHT-n{XlhB_nbL??kf95?X$RkV3gm<>DWeyol zaneUd{%k!?&MQJYj}10_48=q)_kDNkF%dQHzNZVzA-wUZIBM<>h{!xEsBEw<8|=7o z6+3;jL=+YO>k&=ApGTe8!o_t3oXzDZ(XKztc=#@ba z@-0jYk_F$7Pz@VDvCt>|`Lp#{@ZI+0#P{bp^_}a=l;E{fX~_N{_u%VRLEBH2F6p9b z>6s9pIfH$7+vIb99d34ox%hr=lcHthq7Gqi>?n(?K9cfh%W%b>R`e8+wxiU=?`<&2a^j&ieM~}8&DoylSRYnup z2n|L38d@*9Rrz;t@=Km=<$JuF3cXbJDV6nz^~m~^$lJ!uh~GY9^JmNO`%;~W;r&1# ztq%Y+*0or&HtW=O#Vd&ce3kCAQGmdC##RjFob=s|X9(*py8pY4S6@S^t-h>uPyGx5 zb~sRn?G+BUM$nyc+@~surwyHu;zG*nm$hQ zXY){#_YDAjemgE#nnEc$X1zJ|{^&W}GDDxg_`9%_HSVEj9@DI++pA zmwd3VZtS;z-X-;{-K=8mdzZbB9+4?_3!D=XOO2`M>Ek7THV-}cy!YQCj8M|%1LNTm z#eECsCtVuN!~EHCBO^)9rM2&F9!YNQfW*3C4mm>w&2VYg5B4kK7xYIZMic!kkcv2c z7`@w#oOsuuMN%<-Byp7RO&y_Hmd$TboKU_SkXF(-K4? zR_s?>zlLhA;UvyG=AthrtnY3;`aWBZ84nnb=~ttVO#QR{d2gTlF6kTlinC;q7XOs| z2QdS5EbpK%L;vmf(Da&pG%tRI=TwLrUzmsX`c10O$-5fD=Qd_V1ottUKUk;C;aXB~Xsj3NyhzB+uguIo?>0zo{qxnoOWq~reR7>YTT9BjY6M)Td$(FVcr2lMEo8TCM6L0!wWxwW%&Z4Z3 ztNht1P?oQ}?7;Rt*<@Xlr{=yJ%yBL*f2vx^v)9dPG4$F{@{S*S(U=q0cXz5Z)~Q40 zyc)vmEvQqc27_8fuN@S(dFKO0Wq;RhGe773wvOR;u2~Y{eN5-iPL=Se7VggW$htk$ zx^2_3U+SkHQX3t5{;>#8E(2y z#{k>BJmvdwR;SD@oz02W^as>>YC4I)TCAj-CPq*9bFVlhUBeh_=rOW)HkSC8 z-dheE^E=QuugW<(e2&5x93B6SICE2Wmd?({TyiGC4}G@qT96TrmzK$>&WtXr^o_HjvTzAeYo*T3O4N?lv>IQcrOQs$J-=EN$iV2NYMy5ga& z=}BSTCvutg9$!e~3td(nCtqh(iAU+ZIkKwOmvPtFj5l7LAi5^ZNy&LSj7LKy>dZ;m zQ97F^bLb%P`CB$wn37ZWALe&n-N^yIZVl(#l<&b=THCV8?4dNhl>Y0)8)6Tr_ISdIdv5Mhi*P5NQDH(EDoJNb%7)U}`Iy2w6SE@s6-qssTw`VO^$3Z^UYGGD?93{0DZMvOW~F({akmFwe}=QCUy9CAJThsW(RiqbK^nq^0j zhR%+Z0j0BfvxCg{5Rru|T4};84^|fZY|fm+nX`|4omC|srT6BMv)Wd=S!v|mrMY@x2lONsopY(5ONYwT z*^@G)bT$w6d=a17tuTdN7I(rI<`%-7kBz?o2GP;NGjr-YpZz51Oet|Ay>~9A#J$YW zh}KiIo_Wj@Fo#T?Yw;j3fe;@874>v$x{`dJ=jIu@712Y8TyWTTusiMp|Q;706J^htQjgdXF-be(%Cs#5c;vi^Wm(=Uz!UU+b!DL zg=#x`3`%BiDRN_v0Z;4ED=8VN0XG+S3(%HF~g1z;wsSL*l zr`6`HD|qXunZuvZ@2hpL#9TQ}md=(EKhk@1W=l7^9^ysLmwowClBP2zWku=ioQxrp z{;RAl!P>U{yhVL{U!U&lbNvE$7hS1214@`r@6D3|z9O_&gnn(|XipJcIy)cQiACOt zFIT-Q>c<^Bo>}sI`C8ImOV0mBoVg{gruWXr+)#JTp5JQSK8p2*_moV7{<>{n$I^A| z7+E@7Qbv@{=D-$F5i9h7>X(zFJVkQp zY(6OWSUYwfIa%5XZs>fJE)RxF(wS1?MtbjDOu1=x_T=o7U#$Ckj+)O;{z~xk5?NFa z{!To=mIqnuEtq!1wVW`ws$#3^TyMb{nzFETwp@m4^#Fb(?FmXIz^nATq`r+=naX!6 z3beA|tyv>L{5=VHyRtRuQ=Fctf2vzpMI zDdZYVQF%azjYs)!SY`qlagVaIzmsUFvoL1i{N9hVI%RI@?0l@YE;hz6%QKpm*Ds+36Ky4!18 zs1`}Eow7;I8IYp9bT&^0xTTn`EhTN?XfNSAy*CH6o4xix*wW6YRdqz2)IrYv8%DYcO|_^6tDKT^m(D z+=(R_GhToDV-pF}ctG4OO=qoIoXmO<=yZluS2(*rgrDrsfEricPBcaHoeT(-I>a6eA!$LTU?A6YtEO8iLg&4(?P4Umg@y6qO* zZe4biWan&15nno+6C3)X2swV>ZPa*Q$Q|(YMpxO(YG%Zx#9FlSAy~xyQJit)@2o8G zFugY)R^~VrkfOc#l!unh<`!PQLt&S3$H>;%lrpAtHXk;n+0b|xuH=WPHkgTd<@R6M z{u?eyXG)11>Am?dC9ctTPl9#YKg_b*N0!c(lo6$~d9mfS@n$opA-2lMlUAQLUhZ6u zM#!)7euXuk984NR&d#zDuhM(-VVUi4tTxwew6cxXmY1VGMRw_IPN>&Dx1la)?8+PG zQH@7azX4}viHqsI`7kqhzQ@gI(Yah+3D>ojbAI#Fyai`y%EHpw`4~zB3xD3VRKu{B zU?=t_|JHmWs$I2e2G1}4zBkE{AiCl!V7dYxDo1BYi5Ka;^RmR|jp|wxrdpwMdHc+v zXOaS4$(Y@v3~GCQU**|%@*A4N=Pc^7XbL$y%Tgwl&d$X$R-a#*^@UG6`R74aCT5a6 zHGV?v)AOa7mBp$QN207N1M3!bnzzkwP*<%}f8q&|y2|OqSB+#j3u6|Z?>#t6OT0|) zos*?HSrzX*6Y63fT4gj`)lLX6!d~WdYu381iE3XyHx{L4Vqj5*71jCJ=Ht{7cjl$+ zDxEEbd03h-%`8#p*rV9y8fm;0*&M^MvTU7ACH|!M=EJ5m=ODML(GTQaV$(X+g3gg2 zoAocwgVKJItbM+Ul^Hg+yq$F^vr1>@Vjb^Xr^efkjr|&xi`r4g&giV8&sy&t{3zI) znlFwPf8TW4VuiE6bt|1Ku_M2C?ui^icl=XH-5FToTzc=E47ABi`7A}x70E@>($y-T z2Txww%Z0NbMSAIMzAT7y4AbZ`p2^?D>tT~%+|FySHD&!WT(Zuj5_i&jOJtHWXDsG8 zQ&KjR&d$Y@SMkO@%WlUePSi7?h$FK%((a=~jLE;y=osF-kFpBAiJu)WJYI=Ua*h`r zpSp7^=GJLt?`$mbFTHmzHj=3UhloPG3U4?wKZ0d}*BQzaJWUj=)-AMcMLx-YTXV0d zrF6c=e4X3daYm=CEuEc<(b`4ddiBFfI;3^;Khg{=^?|_Ow}#1hAn`If%pRUYdtL?!?{x@8UuD@@?(@B*#1X@%1xiXAh2;n3Vv}AhB;|aGir~`OY0#}X z9mJf?7^;D$pn#iusEo0y3`@FJb9LXtKOJ}D+a=M?x^A|e)Y%4Re zt$)jsaU_?po8CJOlF8^*9ZXmIE$`n_NjOqdG?vazgVeYtoc$T`ln+hDtn~riGJ5OM zaYUCeoZg!X(d0Bz*`uDb7qN!lHCKoV^66S4iI+`9RP8yf&9DqLB924;_O=)@L?Tm4 z+ZmU#s&uvl#?h$-=E7fkl#vM#y2G$0Ils_bhiJ39Y@JOd{-pPoz$Rj&U`4AL!417O zok52(C@)WEP0EbY*%DY|IcC^<z4*4a z)nQ`TesJjSrz=ZmOUj7S*%H`N>R(`4%&Cp88PUG}9J>A-Dsg9CiEHV-WiSsff_v~D zn;l^2m^*B38tyN(T8?2Wqq8h!Qt50Omg)Nsvh0 z-8q-jV&{1m&eoKXrL*O*we8z-#vRAFwmh9RC7z`BmcyEMG?%(PEKGXq`8tMlhFIgn z*Rg%&?W{|gRXUr7b$uC2x$ErHKn(f)Iy>01Ca@I4+*B$8*w-;3$81Tiyfw7~%pTri zg+NZC_&Rde$CtD-t;DVL-W-@lzqI$l7%I-KCp5>8jh}-oL+4P)ugr63xD1^gDFaGp zb6^K?D_di>v=hqVynhXerQ`@NVLH7x2ZWQ|fPef+Y^Ze4Vir}`JGW)8+hx8oZ|5?uoSkJQUZwZuz%o{)d*O)I zRkYVG^*9l)$CKb3>f_KpQgnu-EGV7Lfg!o|2Tz&q>~$(aSZ6fW$}~&oj8#+SB#4}H zwUMSbpCcQTY7BQ=xNKWiy_We&cb2Y~b?S)*Eo--mved%ltjA+jZ=zH_jw|rF1q8i)>yhGXu=)MXrm^w2d*W#HHmZbTaTaH4G#h0=~ojE10r1$2{9L*BD6`RW{$*{k4x}wG- zfARIE=o!hcH$&v=EJ~SDI$Iixa`uMXZ6y!mP#)zZ>r5(fC%v~cCOt`H|JK)_QPv=p zrL!evMCoiUY>Bm=RriM)_1J^vt4wK?87@a>Nr@Nfy?L`F%rA9r?9YuLJ!eFU`qJ6F z8DU)niBxLb#hI}`GrCfAhLkvw-kS?U@N!Y<|J=muuZ0gp=*efn3#OIFS8`3~B5rT4 z^8Oy>LnP|VN!d|4n-6oW2h8r`hl{_;kFO%7RU~wSF?l)aOE^#O%?0&ao{+o$TF{o3 zBR)lS>1-~Dw|*kjkHmdhT-%qleV^2v0VT|*_vXWZuab|)zCbhHv2fwSgX{{v$dO%w z&fL6{ig@QmnHT%W(%F(SqI5QQwz#)xSe3{p>5QJ!HbH*QiV_dfd&^RvOGnvJ}lR84&h8HPiIYuC+WSpv*wG`>3$TuLUViR z4@n)O$1|9}au{z)5_RUJ>?oZrhdEwZawn0}p*;io)|?0SIHl5xwTiI(0{<0RN_v0Z^=x$mOT)AfEV$)(tFj{rLotg zwuGHoDSJw1OJ1@d} zBX@O4Y{8S}el%)H_w!75*Aw^>OVb&X<3|44au}0lTlore+zOLQ(;1UzNABvp853gO zykXB=J2V5wR+*AKoi#arodM!2(3mTb`3gb~ldnl79;Nq|%PP;WnPOG)?3$Dx^|K{2$a8BB=}FM_ zB(!%$R2c@@`g&Ankv%aNHqq-w=T_49>8nIE==MhsoR9L)RWmQft4HfA&~Q0AON;~c z<6Kx`nlNO7gbEVh<&<_gCCNDx>I|?a=FEh6+JaB79FiB1V?|Di&Je?Y{Wxca#8xu? zn-5}Zy^4KB|8ehUQ|`-=<4Rec&YC(~?1?$EX2^6!x4!nZzJ^HE8D#vZAD6|ToR#4m zI-Wy0xjKvL?6D`7#UhW%)IDN3yREzScpSzUF!VSVrre8f_(A@;k==~;M&C8_m2R5r zw->*=?^t~3L%ad|NYdAop*;Doi@7j`TxMb_^x|ZafZJOod#f!iNBr^-|0MGF>ITM!11Ui>L2^%<)FY!Ta0^Txbukv}Z6I}V!tSLP8PVT>mC53f;?JG)ghQ@KSbvB)wO*)kr z%juzs8NQRXL+vTnlBkCmHcq@`-E`Di0rhC24v1>h{)t(sf3yfl(=w)c3m+@9^z~`hMLW zOa0_^7S$!{%vl3-@O%Cudlq`{eh{{3Y{mJqFJJoP=qy5OUG2m!R&!$)Y0rO5gpX z*hOTTY)j+UalfDJoDEB716>-fgbP?e+8OJnSuNhg9&&D^D`%M-Wl1_y=FODrW@7fc z#;0`k$10Jxquf$5dvYJCIRoa+fIHbE&3vJCtlRm)&L1i!v>v0^UoKa-`24>GT*tm+Ou-wrlXyVb!{yCTRD%v>fqM zBA%)=IwPrGZm+hNP1RbsA7>Hsn{?86Y@%1xxp9Sx1mag8q~}cV-G`3B$^ddsd1fuX ze7Yl$jYF+>JI7Wt123gs1Ib*AoW97nCkFUI_WI;L@rfP_??fI*G@bm>jh1UB9sezp zw^pC4#?im~PGTo_-~MlWM$B*qg(vs#UxwrZSN7o&J!x1Ss1?<>n7-q8f{ws2s!4C; zN$p_H9q_~Nhp90j!}{Na-yFit<*iP0mHSwX_Z2X(vi9ketW`E)%Up}LrJlmFz_qhf zip#KeGUbWf*H`&1*q(Olr1K6PcC0p|9S5hg8&w<5>R8(b>0XLFu|UrCUYzwcj&|?= z=i<*7f4b;iAA04KtcTTy+r7aOCg_C^da-CD6b$L3Q#$;1$t-VO~7pu#&tUBbp zedwGkzJp(twdY>eBJHdCzFDiRMgXpXq%P~eyZEbI#UuVA{+0Rjb+wJ_4ONH**gVGukGLC?_CSG9mQj! zn72h7CUjhH>(=%;x)i%WJI~l|*Ut3sF(Krs$!4I_`x4MTL=IQqFs}3CbjOi??^urK zz$x}1xv*=r4u-rTCTw8M@}~00jNj1wb?}hy?5OP5htu1vL*9^~@>64zrg~#N+R?t{ zFz&f_>_=_)&i=95D_IA~8zic~6DurCKDFLqmvZ%5{<&;?)S5x3JvF%coBS3z6;~Hb z#a-gWqQfQ7zvChYGtD*E^&d|QOn!FjbdQXLQ=6+?`ZxuK)P$fA8;tM zmxk*#TeI!Aik2luMm3Cfalx;vld>$&IYbv#?^px_4Xu4tHS%HeI*Cm3x44Q2n0*-; z=F3CK^G2V8rCOgYDPqT;lTfB`l116TMX3Wuf>cd&IzO$q28_mTI zS(nqA0gVf`(SlcF8@%XB1nUrfXpSu?*D98f1r%G5WP+iqEVH34$svFL9QOZqA}4*T z3HyO}V%KY~ba6~P%~Rnd(N3Nj5+N8@8t)%+J2GU3%ko_iPnXT6JLGOl_qyK zpVbF@owtZZ{zX2~1?rO=u`!HMSbXGhIiIL;GaJqJ{&gLbTZzV&d-uQLyQCcR^4IqF zCim@<>S%~9dpt{;{}1of3Z&NjlYDl60(p(SV;YGl|+MOYDMmNZe)!((}Ime#!X? zlEZm??ezPZIHsWQ6VDmC5U;e_RbQGY10K}&#MPZ-^e@l8YFj}eE?JX6?S5WDuJvP# zmp|9FKAOp@s)kiz<*HJM#nV^ebK@PJKZe_NRoHJx;y1S`M$LArp)1yxusyB-#4q|N zK2tO$wdl{{=hGTl_E}`(Yc13=dTFNLO}i5*;%YLAzp3lKvc8M&9;^Fy;_rBq{XFlA zwVPZc5UKuU5J~Sn{E~bkFX^k?1;Je;>t7;km7FN@68Md!>B%6GF}}THIYw*w^Zr== z)U3y>$?V2h+1pn@V|U`nogiItjNeZq_w&bT`@0SOw&{c@VhKN7{B-f79CLDT#FkMS z-#r~-_j`x)$8!7oC?ctCxE1?UvoN&FFj><~MZ8SVdg(Uoq&DoKx`ualFIt&M9h#LH z$kx|oDSGx0Z1#U|M{2AwYoDjlsANnMv(oMoTx!HIb>6rC=(p^*6j_h7(|NnhG%lfGlUb=Tyg!LQ-c$^R{1g~KXa`?UWmoR>L!OpR4)KNxZ_ zU*$&;Zkd*v{clyrI**z9dY(eZUda!BP_5I?|Cg4FaH?1ByP~!Erc_nNlCypU*4eX< z=Z^6jvcvuHFrG&w$h9}CyK?Q$M@1mWCzo71BAgPt?XH+%9fEBdKXMcWl+-?rha%)p z_2r{rL;K(4adk?xke~Z1+UQ04YF^5Z#!q$k-uCqWPot&jm6HGejw6)kK-ijX%`}%W zU3JNld?!EXoL?H9qY?11AD%y=+TRa7Wp&rKHeNRCrbY1U-})RF+)j0MY`w(q!h9}R z^mqiOYmE_WwM{H z98Xe?^nm2rr}2=Ud)xSv74^2`#?pTj?aTQVQ9h289N{%whx_9pJg1@FH=6uGb|BRB zI?C1BA5T(_^nm2rr(=;G+Z#F&>%Q6RkR=bo$@L)XgIrPk1gDK(9_A4^#3tEa4vx|q zHpBf>pfum{XPrB~A!yCZ!%-VhS^Km@`JKceb>GOYk&1oCa_}OO zN9tIvAvoOMAIqtCV+d-&sP6o>i_{dV?@?;a}o~Bg*v8 zrXPoAQ^ygZb_Y9FZYnX>8l?aB=Jc-ZqimJ1CJ7Y;z*zJQ4S?C13fb$z&!QB&_$#Lu*?i;k#%T`iG{+G*$lS%PvQ+MK*MH zVIBinblP7?>sRURKU8wAe}jIleL7bE+N@gDv>=-)i@bS#%YBt6>q7UTQgEc!@EPtO zi&ScV=(miWK+f_fK`DBOnU?5a?LVSj@#t!HwZL5Fk_O)Y`#U-V`f8t!MQ7?2(Dz6e z{Htaiq_zo7`cZJoG}i9gN&X$38+FaqUimL#Z?KMHe}uXz?XFK}75<|3RUs4gs`=Y5 z^7lW=RT#qG3v)}>rLpHP?{lzkyViWF9kDja>@@U;E@R}4(7RtJR49A!D1TVlYQdBt ztZ<#76|a@7jE>FPdJx~=e{C4PjyqE4ht#b`;kr6BemB;sHRqWN`W3B<)T} z)xF$Vmiuvee2JYyS8tU8p@SvWG1v%dwd?-U=276`(tW3Pa^)$WTgrrrl)+u!UhMZ9 zLn4mg*qSJR-rv@UcS20Lv3Y>OqnEyKt4>tg_odl)UJ2TnS4Ka0Me!1IEJ~VsJh?cU z%LtC|9*gENERwW_CACM^<`ao4mE!%cPOXjor|diSw^d5AbY8^BFMmFk7pBdEj{i-3 zgm)|RVWenl9tc;=9M>{eZ~_*pK+D@wM%w8jV=7y)Cty4Y%9VzlY1p zaUCPK{P|d1>x`Cbi8T_xA#>rn+2LshL*AZ_wbhnzeXOh;*JUincaOz&yjLW4cq_X< z^<3!GFS6@z-5#UC?0=9Q8h(fOO+^)}D4w+& zxw4+VC?$*c)Y5Zi#Mm!?o+~r+C8sD!w~ccExr?yLKS< z7+cTOb?pwO;?%xUbtc7JDStkmN$Rg*tsomnqxN4KFAh~B)SY2}n`MUWhTVq$QEN-q z#(|PN)JKVb>u`BFy32@;?@o>GHk!$bbv#p-3JbJqEaf{AashJ%eqxU z@b`}3rq5&!tlTtV;;j^J4%_-~Hj3WERU2%a^9e{=*_5d5Pfc-9F1$q`&Z z@K28586o)b;)jc$E?neJ6M5UVb!>V{Mfye7pWgT0PQMl9VI5 zj%0gcYD98|Q1I(_UDtzx3GsByZCrZ2uAmSZtH-Dy=`8-c!pZ&fzh7UVt)kzpyT} z57*F_&AK+de4R07vDA;p+BDV;l1eMMvkeW;N(P&MJB!t^RqY&G(`rZ1>0C7~Rp@AD zwK1q}qU!0n(c##RYx8~_Ckxk*by){oO6H?@;3 z(`(C?Z9jthWaUV%BiNpp4$0UH>b1CQI)|;X&qhBs+dj0?YL%Ciqu4N7KTd~Y?Zt!_ z0vkAet8P_vea9tvIil-GwkM`Tw9c-&Yr2X#p7F7lbaTJ79L+H96oNaxW1ReE;>H2X>)LX8` zPGa6q@&gmBUnAN7#KCPEr`qQ3A&E0N0{Xj>bd1-rZBLAkar8Jne6`CjvxSI<>zvuP z9i!OyU1oQeIb3>^Dk`1Tz<8(;AmmKH2#zy|N$r`S^i`?ECU9$%-Y?#6(@q$-nGm zb@Pos%5!uXiL+z#zn#jH-QaL}Is**f_2c;%z+UKTk(Dg-L%+$=kzYr=JuwyXe-%wd z&a?Ubd@UGvEojTv*9Jp$`}m)WKVST5k6w7~-ye@5)S;72^(eg1ITP>YOfyr+hQkWN zqPi6yqsB#-=RKrj1U~*3`RTKXVmYWS#GEv<3-x!Yi3!ru8X;^&qG(u=zsg;vbdc#z z6_Qz8=g|FIs&?$N{Nvni(CwB#8kuSss(;|ZewKeKPuK2kt!(G>(e5{*!O&A!Jlf;T zY@hdyKD5e7G$h(ewWM)nd76HD`~OghDqGI65^Sdet#2KmCjl!n@$3&x&2Z|&$gK>H z{jT4rCdb^0;E1tFAUHl&-RoDM@{HITh z#|Ds3-4NEUWy+*86+>2}qrY#5ypI$e?J1V)XXByWR^eP-{Z4j%sV(Gsel2?5JwBJB z=O4s-iLdgL=zGr4=X7RcZ>t@G9>qV$zPFnP?7F{C_a7%$Uk&Q|KYe2V)gboGU5Y*b z^v$}*dyo8MuitkUf0e7ZO|;*7!to5=6GK3p`)zhpJDY2HYe%W4sap3#zIUm*uPvi< z?0>hk5_EBYBYOUwpdaMp?WDTtYh(Ru{S)t*JRy1?^2}GUiO3bwT{7>Vb>czTp%&Eg zP#(*~zJ=<9Ae;92u8{_EgY6b8i(_0Ln;4g^n&-gvc08H!8|=QR9IC-GaocyY(*@NJ zf??gUZ5h8v<(DP~!YAXxdHT;fdi!-UZzp)?$u(>S58^>HW1hzTd zKF@1ov@;U1yaKJ;MPF-v274aIc4|qN&-S;o`(jMI8}Le09mJ9;LN@JAj=wc%*0+RZ z!82N)_tIGE3jRLI_u<G@R zZ+>_2e|hiEJ+jTlV?~Iw+8z={pb`f|(yoj)(ym`}eq zcA8cxX#Ut`uUz`?s4UxE8+PLV(!39!8Bx~%>D}>gpT6lB;b6YqYe4HVLSC{~!tqwM z%8K7{wCnmBy0w}ub#An8$=lLr{opBiCss>2bJ(mNI?)8QYu5Pk@I6gd@i0lc_a)Wb zrL*z0I==E(`3bg+b&^qQ{#jOC>PxWk%T`WYm8Vusykab|^Gy8zA6H|e%#~w*K-PinC7zm3pr2TnTSCMP;%eJN zWanHcp+CKMYAys1wQKk#*fqZICF`%fpCyi^_Wn+ykAIaPN3){2D;d|usm3jxji-&< z*^W+c!XG z5^~1vj)=871GayBI>1<2}u(u4oUgF)9`r*}bfd^}9_ceNEg|--g-WcvaB%@smWSLWC;K z#v(>Z)D~|`sQzwu{F=Z1&)IC@o9!nn;uhU%vGCXW<>cs35nej0qko9RPxWTE$bd4Z z=EZ_7`DJ3=ZulohGVZl#c{fx;vCj?q-?E9@>i`zNTL0KT+9m4T8JG9+|8y|U|Wr1Tf#bN1eDvW9u zCOj|L-d7D?&5NFU(>$YfQ;$v7**0+<_h>s@c8>oN;?sNM;UB+&>LGe<<9Ao=tG+{P zr7SR8<)!gXvPad-7+9cvZEStF9qhd@gxs@ja)WPfRZz&9E^l2KW8YB?j;_%<9PB=P zWU2g}BPkC`XX9~15lr`V{5UBeRR7agoxB11dswEh`YU+X@f*JuYw5S<3LYSk!EdnI z*!!jv2Gy$V*)`6eW%6h1`(V}(#rcD1G<%1(jAH{P1bB|UELLiH_(-?)|v&c zo%cUUIa5A6mQkTU537!%U`TyejF9d-U7ii*jL|(Rz4H_W|N5qT-h|W2;(v(^f*w>| zwOxA++l-t7_Umtv-n12@tub{)ienRM-7SwL@h;s^LDVAjDy6oR{Wv|7rdcs{MeIZ6 zcB;2xKWlDPCu*eehF$YccHdaM^lYJ$rsiJ!y|GcS5V`tUtf}&Sc1YT>$~xIOg3H!N zeD_#OWZ!qQJngx5LJR z-9Avi!N%COPQGd0H{E!t2wP%p&^9gOEu;2UJY;d6nB{Jh8~!Lrwk+3l z@2~NKU9)?)?lA$hK}*n2kqKC#&rAh z5-`rrEX;Fsd^^6|DDFR>1HLt8XxaGe95t5M&J_=JP^!gWM7L9crO`&WSKMCd$2oWA zfOR5_VTK)RFEw0D5`UBk4c&1co631O@j>eN*n?WX1fHfU;JtfQL?&*xl+eB;tamx# zC?~%LyUtNQca&3;PG2nYN7!Fd=dF2a?g?kg-qLcRwjA-%8d%Vb-l32Dl~ms8{7bHw zWsb&N<)AO*sbf&MOky$o=0J z|9xPM%sHboSJI`F8eJ++h&DcohfinErWImL@^}*#5QR9U-ewQ`Cf&Z$ta7@4?f?Jn zwX|)__Mab9uccXbbdbm2U^#a=n>P3&ymHIqd;MtCJLlDtnmL+7u_7H$oBG|%vrLTS zJX&*{&eI^$D-&y|Y~Nq19nj8<&SfHb^H3e*j`4u!+^6$m9A6-Q zK{|)zGCr{St;Yf#nQ!I%i~Nq`+HsvjbGUX+Tw6~`o%e^nrdB{Ba&O}Ej_3b^{Hw-t zCsXfZ^K8jpXWA6eJ@&sh!Uku8Ga;Zp_vyS$!2TvKZr;W(f?cY5`8PRzXn%I9w@oFl z=3w`A+)*n&j=Nw1(JzcU)ZVZI#zMMwUWk0L2j|{Rdz%$xV7SW*Rsz`2p zWp|HMv@+VebN|=HGIL;JyE~xWeUjRH#8KYX&dW!6S6AtLbI`BW%u8djYfqC?+A5b~ zSLHLmW0vms|L^(VZ3Oq9ACv!$2k)J%iC7NAaPWQHiIuGWkYB`q!6!W3?&k*0?#1ZG z;dy(7fMko##1?_?@jghtrCYrzZkK5f#M;>~?iJ~d?-bjdEf?Rv{SlohMIPhK+Ed!P zUg=<1^Gb(L7k|0}mW=mx5;OM$MD@D7{2XZyUO8z5$k{P4?!Qat@*Q z&+$I1#>CR`oE~XV%ucdhogSjVu~kYAp=PJFyF|f^HR*WWkzloa5gozoVygIKuQa_^ z?J3=HzKL#lFZ$-tz6FL6*V;q1wqo~LFiF&qY6te0bbBWckZh4Ja(pjGvR%QscA~UB z=$a7g@e|`u_qa?;8|&n~V3zJrTEiCnBwWFxd?i}RQS3gyF6QGa=d>_v_J;aJ(7;^L zZcsM&F<8|B;X|@L+~4i~?ilB}&*#K`uoz8)2T!0Q9qhW-yN%gp+A3JwH_iTtx*V;$ zr?!|{GqOwR&Rh8*XN5-3->5~Q>5YZ#SGo` z<2iLT7PLlWsCW08T03Q-8UyDA<0U5Ksixnjv$-qdACiT2~Xfhd6iX}wb}eAJk9Uq=7jhT(|4GC zJkaZNV?*$dm-d#i)$SN~j4u`AtkzZ!9OqUAJ@4ptbk7^z*eYhrW7gk%y{v9!zR1C%#m>Sm^w^)C%?*%B09CfJr7H(+8wG)a*P9Bitr;pGu7J?&l?;-fEAjWuWF*BW7mNqw}AetV8ZN@*VkI zw8vM@iF|VY47Wai+xtqzxa|8p7rd4-Kkh{@ljqHxnlRl7&8!j1kMfDm)!67);&*f{ z?OM7I?|S{5sJD5Orm2Guyu<;oU})z#`M$G+@pB?v`>9zswKvh(^mia1jZP1b;`QE% zu6~q0Y_6$YQJv*))ln1_n@jx~}T;4h8e+PVSK z1@otizqK{$vh!PkR4>m z5}d!?(fu}b8IC1#jvm6VB1t9*{rTcgmF%M&s+QUPBbEB@LU9=Tg>5HCMLJP%u(qx$ z^IVSfW0TXRzHwHVbKr5CbDrCXBpz#TDCooY!c_GKv&yX>kD-qyQTkXWy2g9w^_)&F zU)#SDs%v>(%37^`2Z*kHmeu2VftF|Pdv&k%%|;~q^|@iAW&wV8@uS$^KMPK+8j>sD z$T3{`)T_$n90Nrk&aKUH_Iz|e0Q8x{Yq9ecBxuc;MX zI+goxnxFMev-`QC8k1cw8k$KOZac@;aryH&wlnXL9xLlWX}V$$vp&+_0j*S?kl)Fw zVOC0??UGtF8t22ld2SHT4jIH-?H1nPkQvQ?`ROc}-@2YQADhN>@ibxA@wTyDLoB`> z^J`MXx_;}Y~ zHTW3Y5yeZfvBFdFd~~de-M4-9ZNr0jr{+j5+ZgHHaV!qY0@Ia~eL5>58p*O3z%}tX zomR8Nc(LyP^ICWK_r7dw2)sgd899^d`0*dl|*@^6Z7~J|GwGaL;oY zU+uf6&tA;EM~$u%vt!rCddtl2(CY`El6qR1`mj9grrzK-JJ}6B$v5Ok?%+^4biFm_ z(6##iyoG$n9CCSE=5fbjq*ojMb?X#ip7!NoHur72*IeJWHEQ{M9{RTJS<;;v89waB zKM8)9hu4y2TmQbUIm@_>?~Y@mcHfC+?BJEOjGgvwy1U}dAE!D0h-D{fM{Ui}v00Jf z-ac}0{Kg0^f3D+q$UA7)n&@0Hyz^T_a2er_;yfDXX$izN0sU`o{#rL(U2>j++%>mm z^H}Y>dU_0#ea@_}I6Er0iiQfbIO|KZ+SCibJPZ%XSZinMVKLD~JpElXHlDzn#>-;W zc)P|onCF1o7kwP)Ua#91L$p)dOXPT+J6^XG32yJU(ZQO#O2+9tD(tE2m_?613XOc+*= z)cwsaSC(0a)c$56TkTS~KBQKw{TJ9%r>mxR8E|a(A-Q{fd~BnsHIo)SPEC{6Qczof zR!4X93?8oh`&*t>(?(_=wvU&MW4nvtzAIy4JIzVd4B1ex!8=6@v6~{&2iot&Hd*2{ znlg?Lm4jop524-b$743tJ%_%tb?M;sWU*~0v!bnw*iCk?X%>)HF1w(;H(cX=mzAD-arK;M6sPjoU`qnD%qI}eqK>+cdT(tF42 zZ?nDo-y2y=OP_VrW@vlW>i_n2)V8JL_)RfdIy()1A0@*5lk_@WmtPJ{AA?(yisQ9} z(DdG^@VfNwa8v5rc1E7#H^pe_>@@hLONGX(@pzDT_bNZ^-*4p1wQ#%-D9g&RT|#qu z?{wH^M%Qx_U2rV7u^eRM*iG?SIy((^U&QM`Pf7BM@IsOCA%dS5D(Q&*09RK9{xT24LavU!J$3HucD>(kyaXdR5lk=u^*+f9P`#z6} zq*g{%W&D?K$A+PSIVGl;b+ZZs}|+Tx)+|5X77tq?FBAaf?n!~@g&YpC4;+q~W565r`wduX-Fr2TQiZRSyp5BT?1gXP* z-_)n@_BB(3-d;=rqk|nC#6wQU+G2)X#7`+b=SRwc(%HQE(O+XqWvyoZGb7MuHac%~ z?^D(~`%2aMRANwiZ{B_nyLUmEpboT^)NRw59is$6j0+TYfL=(z)?>)qX8#R=OlR{!)yU&c?-`R*tFvF@8UE zin(blig!|HhJI8_Sf|LY7nkOlrKb=U|C9VUI!ky=?~RMjd$C>bnz}}N7du(4!>aw8 z`2Fryyi)7;bNry4iP2xJ}3v9?o`B_`MGG<)gH+GDcP?_F49;0-Wxf7%@ z*PYIr>`(i;m4|NUPl8eUn=_w+=@q)Vt!-yNo?IN$DQ-(=r^WQT?9ZWybv%|3nBE%~ zk3qxIiHiOETa(vez4afy>0r*+H~qx$xvvx)uPG)=XH(&IjXR|N>;?LcchTy*s1ovW z_r^iveG`9DkCA39KQyt_t7b>fhX@>^uD^BbB4 zP2L}fnzm~%iPr|u*zzHr$V(hYXu&8?NG0}p0$BE{%vz_&6wR+7LMH< zO7qvo!freZr)z_fMPo5EaJx3N#^0XrYMDe> z*L|{bJm-*`zcw|VSzEO`*w-2Anv@yuRlZ9OOAU9Cn`9+#Fmfe zA$N5OcBK9AAH~nethzT@8^|Eh>c4g2Jw^18@9!ARp)r4LOpH>MNWBa7yVNgYy@Y8e z@0&fQbs5lk4%WGDU5Fi`p%0gpqdSk}+|{wrou7WYlNq`6Ialur^GfiOKdr15H=dgs z&;ITE_KwdS67$zih0jWyRk(){}qU$De^lM{9+=_l(Uw?yG zr3Txo&se zo}%_Y7k|F^(?xo1pR;N3PWA{2!L{;m zoKAyMs;HP2h+TLimd4tuSKD~(eqYDnlo-4hUH8!FLG0i9+gSJN?&v%1IvsaVz7!Pd z)E}z#sTsB0V9O_X|E*^syRhGy&pdg*NSzpebL$;_DIM|g0KCa};@hY4P=CQOQgTf? zr6!HvX#FiYa=ZLCnK(|*iPPA(6*LfUi@gH=EVMM9EuvyXBZwN&4?H{_e8c42V7o50 zJATaSWA*ful6B6^g)^T8>o6m>tPMHs>4H01@!f)rhJRd4s|j&}&LrL@F8VR^>HSG)2gYwJp6g{NQ+Qg@!6o@dvxPTYQ5FSJhOQCLIl zF>fQphzdIjp4ACm?cZWDy0b9M=f^ z+tcF~KP~kn>_+gxKFZmX_*t|U>(-GwTsn^3b7MEvxjU(VQ2**Sy-BKhQ~cH>w673>d_M7Nl^2D_V6ziqshH4~$X$02m>|UN^>JQn7kMbMb!O~!lV3Ql;{0N&; z9eY`~tq6-uxR2a5f-%D2ScZ^U8Ku9~h_>>Tg_eG-0X<)-HC#a(Hw z&Na`JwQyoAc{qkoiD5MQN5L+A1@U@d|Ko@Mt@%vmDY+K>+xF4aY!g%MqM3d9deA(! zWE|J$#dYk*agV)KyR`F0G@21I%FB{+OrICiZJ$f9$??^owLgd^Cw~EdDBe$<^0UNQ zYq|ZzQ146*<%i48Q9n1-gLUR$T2I=wSRpayyY`m(9*3d3Eh9(qJWw3JWAl@st?8+( z7WuQ-=1c92nEQ5PXzkqJ?UR}#eI7_RpNQKgMAL?7@1YWNgwF%v?KRfz5VNw|l5xbI z60z73#PZF*cO@2udaLhy{CHHJKgtg~$GGMsWW%?u&X6mR*5+=n;)H$nIpyu#Iw!ZR zKd)w>{US^wUV7DV?-2Ijktf^DEQYPEDQzxIEnjEPIoZ>$vC>=uFz`|S;b>e6tJ2mP zafr+u<>y0rf0m`iSYz*o`u*}1h{}#QFVn3ue84(uj9qr9Kx|uO^LPu+!_)CFWmSJ2 za9CN=oM+w3Zfms}M`n)lbD{i86GwOzJ-8FSxTcONDKfj?(=m5G%%y8^*GjScGTYg@ z)sjjqSS@Xor_YTkS?9~V_!4|YHUTGJ!5FHOLiCvaq10!6ZgPLNY_a6`#^cG>Su+>b zfO+PlKdvSRxvcxc_jL@O4uj;%GtYqx+26&U#$%)N$*3#WY}q)YK8}i6G(WGC;XBuctvf2lbOPR9a#{7io1 z4en&U_$@lK&R08$BZ2OBtJzTunSZpOWE``n#O%X2ZG9*EkM3TB-H2g#EgEL@)WN_D@VpIf}e_22gQWr;XOPlr*u8D7cik3Ur_4RbR9wusgJB;%Mp9cGzx zK@O63p3UhJY}hSgc0b8DX3vG$yr2PUZk?0bR4^N%-R#j zV)s#c;(l!QXzattR}A)o=^Q*n!{p#dH5}HD$0PM2!f9T|T0Chj_#C2N z(XQ;hl)q)UI9}^GwI`0nD-)ZE6@__<^|y&%EYvk_3B|`t%du_9tsjraHZ}oq2aW;Z z?RaSH3C;DRGT)K;K-Yr!_w+4h3^M^@Y>b>Kg+dv7pzZc&&{@F(CuCC zYenB$F(=tO=jvRuCr-yX&B%IdvRup#@8{iGR+C|S_2KN&w~~lTGkcNw2>1-hSJw>U%a*q&&2=}Qb9%LF zbA}x?e3*;uopZ*h`tfv}>tEk> z@p#tBa#)Pr{=gxZ?!BzMuVPu#Tadn_&#SSOhk4w!B5@}b>J(4*G&bF4g} zlU4AOzsPg@OT}?(sH`8y!0o-Pid2_qKZ<_8bG*{pJ2rIlTl_xt)%fHd#D{m=_~jl1 z8`_g)d1%jl<688`I$41IQ%TktQ)h}jaV%qWTFRSry}E1g{z+`=#|HJO*OnDP=d!QA zkKu5c;K^ovWKBd{c%MSU<&fj)u-ko4Yth~*OD~1FWC9G~b5|zk(7PXnKX<~L4+r-B zTW+VpH_;ia$VB>>fy^0t4jZ|u^ zsXJ#XkxSujnw`?M8HP&8aXmL&Ka0=nlVBJ>2R*rTI^%k5iWs>=k(`%_V|QNIjr~|{ zPxO}YTat@oc)l1mk1{qhnf$l1>aM5jd}>1s)5I~7^U`rV&kN7Y$|F{yyT0efs<>WY zL@Zs&ztjp#CC;Z{6r+9yII-CMRK`laIdofm%Dk^drl zH=@&2tFCQc$RXB4pG+LP^TTdj2Xrge!;4^@{4HzdVbLJR_1tis_v>#P$$6PLcISoN*dOJw4$HFKNladQ(L6Rj zo3yurV|cz8HV=izIy7H6MRHy`j^}yd*<&5;okLzCj@xk@e9kw_wZ53tmaT`9 zTwMPeLhHvFtajb&!1w|&36i}ob27x9FWeMuG&Q(`m|i272_ z=-@}?=uK1SL0ukK(oQGq>7tdQxtp(fI*B@Oj1~3cd3eJV7n|;$_R;V2&4M2KI)4^E zZ6{BE7-x=^rt_uF6MJH8zNAsKom8RF4Mu0D|6SIK@8lmv!7{sj#W6#Rw6xcT_IY>R zElb7mYv`;WkH@e20UyQ2p_Y{$D!mxgy20+DFT;cMHbP&2mb>~kb#9k-w%T26bG|lR z8Cdnkk)5Nyj&^%u4ya$tPB+%*T}`bFN24E)bw{}2w|*Q8;lY-?7QK!&j%I%+`rINw zYK>^kAu;GK26UGk=QtwdUjqQKa zS;TAMOL$v#y+U}Rtf_wQDC;dBXu4GfID*e9s zT6kTj_mi7*ppJceVk!>gBEg5e%eAZxDb~X}kX~Ol2e#aiRW%y3-R_$mM}F49lXy+O z$Zmtqt$3a8@T!G2P5 zB-asaPn;IXYthBA*Q)E;YI`?_vD{H>n5-YiK&{#l?;CxK50ft0?<879zbVziYe6es zcD}9J2lemmNUS5!o)`~_#7T*Us->HoGk`aps32?NtK^hD$)`1A^e~AydJUWPSF`VpvYe%7B ztbUvdh4~d;v%}xXDo@ONO)-iZK8MM}ky}TsJuxnFtxBOi?P}c?D7sUtGuq$Vk!U!p zAIC?cP6lSekH&+sIoZK8G37(kgXp38v;}kym4zd=j#PVMOvK`UVdqZumuZm?@`+g1 zlkAk%)h8jh&JU4*qtmcgKTdN$QnHQlfl_@N?;FGuRSp)ihq-}@lIAp^iDk8I_$WJRlUj&y7^}1-YP8iedXcEHC)z@ z<04n9O^N2G$o(j`gzm)N$sP5OtKWbLCwLBO+IrnO`Ztl7vY#?j+ zmsML9`VAdjhMoFxJakcML!2L-araH5K1e33_Bc{ocimB}VG?k3)=_CsjE7D<1<%cz zuK6gRH@&*=FAYbnVX}T46SY*a>||Gk_4-BZ)#s*1%9<@tavyWw*%4Sro;@)>0`ahJ z0d;&&N1EZNejE>JeLem)rj7qJ_)E9rYdTyij^a9c?TIN-Y_ZdjsZXYgU5&F==yP+| z_*ki0U9-0BqT1xKuaq3+hT-~gN|Zk~H7MHGPh$YYwc>8aTZ#~L@x8x%9NBe5+Y?hF zo175sBd{%v9KN?B(QsBjj)_F_Rz2!!*;%YA`^v+STSu%tF&=X7#Exb9p!R&!yqB%i z{?)#_Bhv6zKaPvYn`GCu=CvFQrr*|4S4W#YF&^sTTtD)rKFF@WZ|_g7%5&r6Vkdkh z`V+mmZZE(X@^NGvZtKVCkZpSf@&T{p=dtPOPfgaE^=uoz{Zeq0*3oHCOoP%8J0QZN zom0q6VVV&AQ!Ki$6}%3Wha=Z;SwD`4+{Y$wO8WqQkZAatQQ7{kj<`C~?1}LZNA)Qk zvv;BmS-qLe6R&ToFV>91VG?k38useP@zAN&{OoEUWOqb;6xsQ#-@nQ^dHfH8R?Rfs z$u;eo!W5GA*Hj-X8%J~<$@av!i2f*u)xgFO>^Jb5m-l_Juxl6<$m>nOA*#zQ0i##^xz>7;PG`WLZ?h9$j#ae8`4#K#__>c99I17L+7sg;HFTpVV@nWcOP;3hU^zCyqs7n42X75 z%h#ph*fiwTkK?03IeUd#pa=c4?6Ys`N6DM0+hJO6L zF2z3TT1q=vYs%7ayc!zo$Eoo8AbT}@9!$9-cA-7Veh`h@?!mEceXCWk!zAIjt>e|6 zm(?gu8uuJR{c0F_Sj9CZdGqET2GgZC*qt^R{hv7`X=P!F4K+u04_74-DT|UXFP~bp3cN z<}D{b%q;B7HC>NYtTk(w7sJ21BeIS}dt!e?ein_X`Ly`)ubK`~A0#(V=PyucNF-G? z>}zA~E-^zZ{WfZ~Ywr`wN-KZk@?A%$;jez24x#8y)_|Dt_-FQ~{w)872joIBxgzAOFVp^>VnrA(Ge>qE(e}jYkR7l4j%u@W`cWOr%MopOtshT^ zXjWgW(-%2n(_XuU@`r`ekL#|~9Nl$P+Y{5FJLsDwcNd%1@@UJ*k!!fDAE!btdr6|j z#2e_RjAunHXpNVr^IWxVANv{~jN2h?JLDK?IveUNuqUQu1N};MSE&;anGj2^2wec! zW2TI77QA$<7Fe*a6dnDB?fP*_^xueP$0qM0-F1K7*KW2ts2?glM|&OR_QaHECz68Y z1KL&VYy2tI@!GSM2#t1vLAR0DLarehu*6!`%YH4NG&{>;udEwHr}XdN$QhmE`1hSe zaNL5*Sy1PGE6z^iUi~;FJMj+D!GNv?`|MJjRXJ82DotlYodx#9>DbV3X*l}p=Y%d=xnf$g%)9O-q0+Y@6V{aUoORh5#1hR(JsCvuxDt{S{UX49~@y%%peb`6;j zw}O5Ah{l6Zxk~o)?~UhZiL-)+aHCxVNPP_};1^l<-BJ)IP-U?wxRk6~jEQAEZi2BiY2X>D8i7SX>XT(PdEow&vY0wX=|EmR$8f z_ge=B*|$H1WSv8G?${IKbBIbAjpzAF6k^ro9mw#NXjToZjSIevh9hn5gxkNTGgdqxk=EzJY)~q zYmn8|tve+yfbaSGkG;k)899m#qxIvsDE_y+F|}@VCvBcm=Ab<`dONmo*+Z+(k&0XL zHkOC(Y4rB7a&!jNk#A3o%YZm@TX(kIec$>}-u;fcw;du4$EqQ*ew-Ss`&yanL-M{7 z=)?KGf5%x+N54HWE(@5d_8>k??O@VtjRs?&`Z$w2vn-N4;UX zemocI&1?Trc=F2%E%akCp327&T}QG#ab85bwx+8U(KuV*6v>WY!)N_CCW5tV+N*d$ zcFo-Q5At5fscJ_*@Hl*wf9O4IJIw25He|43tSQ$^b z?3mNa+gVj-lRYsmtH?9>A}ruY_JP)Xh59nD{JIgHql_3LD@U^7w0=AVl2tE~r+Fh8 zYdWvbDg4v#QP~duN+*seT-nZLBNgOn(xtkpZc_ieMP% z(jCmx0zF5Ea0C6Kxv}ITg}n2=+8T0Yhe*%ST}QP&F*dq&uYD_d%y>(%p{RmqMi3U( zjeL5PBlebF<-K#qCQ`&X57=L?4KB!q<_;MX8hZdc+AmtWN|XPh(^!^gr47mYX|KV# z3Iq6Ye)&85j9c~N^z2Lf^3xZLJw2-pE00-tTCGV=D7i>@%Yr_R8Ht{LXn8_+@*C8B zG6i9cSxIf5FT4Ld(@rgGXIhF83Y*_JN z-c8RF$&)`sr@@&2TBnZu;zST`iskJDnk9c9|Co^DIR zFph$FrfeejFdqT0cSl26HFCF>wH^ zr(hM0>jgFQm<$5T48Vt_)1r0eBFJAO;!PqNn+@@kDdgvjs58Ny7?Tn7?=ZgytL~NX zfPJD?8KpfmZzZ0l_BN4t;`W;N67p%5$AYmkUdEN9v%#=lKaR-;(|D{0SMp5 zO-WxK&g*_b`|d&8+m)I$9IbVf+7nZuRpV@GlUpntPc|00dPvaRYn%@qEVn#zhf2m# zY#6N{PmSWx$@^Y3Grnw)tr>#r>^f|^cRx&*<>UyjBio*s3gPx%+q+D1_CPkc-kx1#d*XDgvDm!L!ezJlS#UsAnMF78rqh)bUn5K-w#Qs6yf7bD zx=xJGo^d4YEHaMNkJGV8H6k(p_C7b&v0JyL4v~{1ypC*pVp@c2HQevA4g^1rZn;n=q8?%@=6uQ{(JxE?ASN3!9xew+%)S|!YC%X{m_0NoS6Ya+z=vNPXL zN{;S2s_luX(2Y-pn7HmH)h3}s`km&IzO41Vd9ryfD3xaQ{F zr*?;Snxv*P^`UGH=VQvwnNVkdJ#i`~gj`)Ff>Zmpy|`)@<2k7~dJUWP<5cL?8STVG z@oSM^-PYQ%zhry5dO!I%qU%VuC(eiHI7+j|On|aCWQe7fO2|=dn5`erhidE$x2}hv zJ1;3mc^%#M#B?Yp0zH=_cutgK-%(*eypSj% z`?w{}_93Eyl};{^`pDyc6>%+1E(1xeh#JoGvT~%?5pGYM7wK^(Y3xCDt)5%|`ZLQN z@rLL6aVo@PrKqk8(FERNjPV!o(Y=?auxqFbizA5X%qs2JWBu3h@1alE$BW~t$kaBR zTI$ZOI;-r7Y1kF_wxW~7y|9Q(SMo(}H)tKzTsQT<%ul0I7^J>^ z+tqG!_c}}}j@~+I?TKm73sQAu)*UGE7WD1v^iDz~Y_bCPhB8V2jfX;8`(dt!Yb zSj*GA zi7n>_9VabEdmZKW#58EfCVRd3BJ2Ni<26f>ZM%*wM%RW*#!+k-tskdCvDTG>*9Xzv zRNrY-7+u}&c5V~Rw`T1=2+N7&>?b8hcOBLC#5CxB6f`p^*9 zAu@7g8*b~z(<586($e`{j`2P{P?wgYy^eBwVtTX(y=|ZHzd61Q-zJp@*>4B`WGWv= zwBfaWoF36}e1nK~Jk8536Sdxk%E*yjN3=aLJ+f1uNbK!P_0iV$ld;V`R7Q?$!)^U| z3S{^BMjY8@iS+xAQW-h2>xi}|rbl)>f2 z;0UcF)1H_Lp`lyA`fOdIB5@Cxc9fs{aTkQRM@;&xBh_$NKTd^I`V!H3flLm1bI~I> zWE8Itz2(X~Y}k@K9Ib=5G8E&^8ButkfgPZEyO^P@Cf7pNyCx<{t)7H68KwmR|nR347lb0hXm zB76Dj=v-Cg)^?x!NypJVA2ic#JItuN5_^GO-1ma^?P9oJCXU>5AosmsQu}ScHQDPn zUs<~vGxLC*&TW%_NnSgBhHeGdYsB#WJHx}J=V(7C+7;`sf_NtXl3By_U!6kpRjyzq z+GOC6b-ZivkAFm2u|^K4OfDtoO7+56l5)JC3-3g2$Vmzr=6t5Q|4}?y?1o}b#`bcT zK>9Hn8U1MKtc6 z{G?r=hMaw7h1iD(?qq9g6QC3!iz z&yDVGHbWc%47;1PW^;sZtCm!X<^81NXkH4MEjki+`rFz*a45EOvT~%K2kBQ$P7!Y| zMlP8enuGUVR_fQL;zTE{Kd*3S*!_;^?ENL<7(Ne%+X&q?S!8BCVog6a2>#ksDw27$ zKFyrR@cxo<49^9_Ay1AP6>4nB7kg`Vj%&;S9g5(xTpYi1!Eah|!F*M^DSs7RY<_^< zAGyzD6yXoqbvy&#UHo;!+Il=0IxptJi;s;4|3x%8oWQnbKZI`oELX_z*L!p>Qh(W& zwf!N|a;(n<>v1o+;Q7n#|F>(A50{bSdM>#BB$f--igvV#cbM2TbjfK)IPkDMf2;J` zF4m8eo8y0;_{WY3-O?Wf>92x+Dt12$6R7nf!y5mgBVRSfaEUqQ=Yn~w)3v?ocCp-+ zgky9r80}V+--!ObZ8A#8nxGTN5_3vYKS(>yNVKNy>CRotRov&~<9MD6p0x)N@tpSi zB}+>4uRn;5k@qgL)-rjJ3?p54;Rp^MAggZ##&foMP=I$)2_?mew??V1&+_J&;Xw~Sn=GcahH4FC?c!UByHutTetdRT#fGi?n>>5p_#l^PC68loOfOky z%sLpeRV!zFhBzb6!-z12lDNy8tQD*W_)+MtVEvCnuA}+r@kMY|YovGbEu@rdsko&FhOSgO&Q0|` zoSjQ#r}=~43;(E>?B?pZMOe28b3Cg{))}*8#^fu1EW_1Va~x~R(skx6nK@kxkAB=# z$lj6Z^^1SutN$NSmook7cB(D*e;&aI)`8ejI#x@E8~_C}}q2-+3DU2RTorqvrezlQSb7%4lGmcgWa zhEJS<;`|yml{U8vE8B+S%idXcF4oaa6xM`lMDn|DBomCx?_B4<(yXfGtx>G7bbG`m z(;AbjZ#nL-($^)|aaVnT4u1Xp_!s|qoUSSokW z0iN($Eis;oE=UQ-W|fbSasPZ#y)`kwepqf@E7!$$d6Q>~3o{>#Nb zo4@*()?B7bsWkf_KTnB0^P#EdOzZftc)E45FY@2f8YL{CC;3Z5D{P&G$FgvrH{#su zV@$X{ckWRM_)a*cv%GB@ecKC2mu_m_--%6mEtVELGnmYj&GqfLy7EvfF`oQTx-!Hc23-- zo8S_?4P(`c=j__ya&xo?G}k^&i}rXXhtBTM>>lkyqLEPbOuIL(f3nG;JA=HPHT<0% z`rmc_)mRtqPs=|tT*+a^8y>%R>*=TY&FoL`(Xk5gq;v69Ts-XkI4=W#`aaFuQ$X(o z`rX02Zm#w2TW@Ln2cfsLMl<7C70cThO=lmDBT-+u`uNnnKJCgyo;X$Bcfx=NS(jL` zupQ(5(ojFPcZy^`wO^;m?hfp{Z^W6|WnkZxshLUdA7(6ScHT}{i7x{S68#QSL66&! zy5r5Q@Ry?9&}D~aShRiTc$0>`lSBWz&c8mkb+4a-f7C=N?^p$ykvWWSz7~$N7Q(mF zy#r@omt}odPS3u3!2+{_hWJgKe^c>q+PB~g?BiSa`so=+j?*NjeXqfUZ0wczsdSXj<9)O zwCj=O8TRF3S(erEA_=uRuc29o%zQpZa?XJ+*88rUf&+JrUs64gL*oOU=RQWByE3UQ zfA=@`u_0WacdVNCig%w`ZRXi05=Sqmo&1CTY`^s(I}2ysSghOk?Kmd`_xe7~o0I+h zpI^lTpp_+jg0;k$?wU9{RbWJku${C*<*S@w{X92zV~DR)Bep!7aJuZ0Q^?yb$v!T2 zuTN`9Qf~<}bZv`gB5O_xyQzC&6+H5+EGBZ@^;DxCCrM{S7x{fxrey?K#AIHPjg@xe ze3Wi0tRMKA;DhhEK8T!7l|Q`SdvUw3k3He~yzM@^*}O`e8NVL6!8*y8t0C{o8F)$t z4t*oey}+@)PjlzqaaqXj?-;}1QOX5(j`cAsT%R|`G*=dn#7kpIK8m%84?`zvyVvnW z_F3oX=+@3RKJGm^PXizOJ}rT#>4XqwZ>i-)Z!6yk+T4?Tjo;W60J$oI+#7N3^)W77 zUjp}jYdn;p@<#U|o^^G)tSe>QY2Sl;L<37}pQiPQs&>a8YP}TldVUxqeQ!9%-f;Lk z@l~+Kp8vX-_bSM{rdt;M6Y;lOW{PK?oGSLv_XeC>OXn651l}V2T4xrB#!c`iF%8MKih8ShQ2g+}TxUl|3;vyU4wLlc*LM97Fai&aiP9Hoe@PWyYcUaaxvX zk8LvHwR?KnIc_J~mTX1!yJ1af9`ExXv*VVx@8SEDCf}JP$mAq1_qiu$_gKj}2kO|j zCr-(M|EI~})i>D$%4K-^!tuQryI1YZsNNn(#{jgr*RUgOG?5_g8x znPpE*%dj>|*hP>DO07A&O!naI{FZKJ;_@u6Ipkp<8f)pw-}z*0sUJ_vr>=db`@$T!L0?X99z#3@1R(fzAxsFlb`dU&I5bmynI0K^RAr* zPb>Cmh`^-=~bGcYvQ)oglloYC|| zs7$vl&(5F5?>?41ogH;n*c0bu2fhw!iO9fnK6E{obw2b-&>3L(t{$0ln{W4FYGJ_;U)TgJQLt>&=p zBO%9h9n1E_RG7XI+!C49dDU@@c8v%=HcDHPmZRCQT0c&O=C()KVy>a1oppi;-peP^ z=F78SrijTNDm_Pj9r5j`Km47?y{iu=G2;BHCdVO#hRfymwI#U zmJ%xDmdBJ@=8j1!Saogd{Zz7b9vMsO$EkS43}rfOu>ZB%axyiwM+tj4w~^AS{5D(m zm7t@(j&^%uD%8J-&*#4J_@nFS%D|DS3%(0rj(8gFDoM-HY*?)yr$Y0uV*6+|m1g14 zk&GOiw3gItoEy0V)?b^foh4S)p4yvvoP3=jb!ONTQ!&IDF|L1qKY2O>4Bz$R`55pb zt3KJA%iHmudOfJ4-(=~?uOr@`m=5`LLbj@OqMpx9jMsXrfgU3K+Kq5|=%2zf`bG4> zaG5#E4a4>0R4D)2WMyfuz-~-Zrx84e)sN-R4&Yjzrxy)#oY@O35BJCWIggc@7T^Hrh7dd&zR*+2F^0$OQ%A4pTr#Db!6KUr$o4B4QMyZ<=G;qLUk-9N3!9xemo_T zbvjnNGD2ta;LF9H!GfU%!tIoP>ux_eIveUNuqRH*hFpb@X2{?besu;E_BVCeIqD75 z_2Vf~Z{3D;ZixBCUEB9-`#y;|!t2PkCr*iQEE#N=C)eSP_o>fEmCDJ{Y*?)yPlsmT zZ|2eKXsx5vo){CYWYJla~3#F1*`64a)gNS^`PS4eX?)$f)i2RQGsVi- zFCRy&;jw-k7qO||T5T7dX?iPYW}-coAial&>{Z-vvcKP?9XmMvJ8<^ZS!Yj-%f7p2 z|DgLh?Tyo|inU6r_3f^5Re`KK`$)yHYsjo0$Hnf$w~q9&A3}Rp5<_Lard9;qOC*%Z zCEA($V-vs8__KC2z@PE@N9D=-P=1IHfowMI_dl+5oh@~i*b`H*g|6Q8HNZ+B_X3XK zQ>WAS>$hG1zvb?G_oaykowY!DFkEhqaKmr?cuIt$1;eB^*YZQqoyyFST}QM%F+H-; zNM!BY$rU^Kg9(;=6|!cIZu{D^B3i)RJ}f)LCOsOvj#mxX{i~iq{?TxTxGQ{>8n>w#=bZ z$k&-c^>gWgg|OSGB#@r*cdEX_|q4Evr!O<(=fogp|VG(ztXUpCEs=I+f6BENmu5+(=e3xAOCal=ZimG^xv=D8J9oIxw#QN ziLN9&os9IhtwqF;9sL)%OU|P{fpyLE?Yh6VrH(I*?i6TXBKb?qm>e>Rp(Zumot#77 zzB<)774DDAE)dTioLn)@h5am_@r-dtS0BqGCX?);;TYG|i>!NGGG*H6LJz0)yZGO* zanwicy#ed;QAUpUj(qhCJnH*2uhoxt|J?MJ)XqxenUN9QwfuDrQ;!-wfrtiKMvZ0J zwDUgAKH84&?KJZA^{kIw-RtA8XE9&CG}XS^vB>jVGTdN$EFYL>1_oN%gO$WDauqIzrXmm za7rUXzsjdI=C_$HqE7E~qeX(P7wfNa)`y{IlEL8uxX6RTg9Q&Q+aV=ggyP2+sbxw}gUpy;gN!QuZWkuhWQ?NyCF=as< zn-AW!4}a`WLQeu_PgxE&I#DO+ICFGYV{3e>m&TN|v#5_V-Rsk_h`bf_q(+Xk^8g+) z-h1e+$4Y~@T6L(cJNz!6)xO8d;GDn3?>m#aOqx#G&ZaJF`mRjJCb*^ssolg4Bwmxokub+}_9~<_t zC+_QZsu>d@Kf>A8?SY~(wC*IDbU)Q)+f>qbwsl$6cV$er(Q}zh{&(Nl#A>GAZ(YsE zSs?zy?&(E-tWu9iBKBlzP2xKTS-R@sN7tUUaUPSdc@}9&{bTF1C+&Nt5v6%a-MQDt zwC?pWxu-d?mIcIajGY!94fXg2%xr}h!zJRF?P9a<%9xl1lW)yxfKPzGo5WvyNr zx{I^t)r@%h`Vp&(GmbQVr?GLOcu&nUTXuPL%TGIZ2MBQH`<9v;} zyq#g$?mxx-SNT!&Ys?Sd^J(So4C^wf@5*Tzb|*Z+9?*xF5nTDz>a3|YtO(Pff1k-jg@szrVZ zPvc)AU&Z+}luzSI-PzS;QQwuR*oFUyYRFKf+_q)NaJO}dIL2@C?0pko|FA&6(|Eg_ zV9gyTLuWxB=DXMD!Gh&^ThEVrM|l^`eOIPJIs1ousU6Y1My>;e_Lm^v=}C64?Dz2p z1nnR8y;xmlLt%4~PsN^wUB7w|=#ci+Z7Y$0dd0$eah~_!4D91u_xgMoIFxZAcae^2 z>~(IxRf#QcwVI-)GWNdh&%fi}g0rv7vc4g_sl)p2s zk6+#Er(+!1_Mv*&y>{_jti!qmlvlPfGN;_|m<88V02iR(u_r4WS)s+W9WuU;MTCG0%wl%`J9|pBxKDYoF=0 zx5WPLr`>%`Eq`ZRmsx#R#$?=AiLDYRVsEf(Rwc{XZ)f^1Z|xc4O;4Xm^Q>5FhReqh z+=tih_3;o)CL0yzU^idCn8rz$hvJ%^&*dxcD;39X7o&YwronEz>Nd_H-yUX5(r~Qy zA+vjZOsvK;#jhleNY)k^TDc5#pZ!9FH7}dXZ`KyM-1|;4Bkmjga`m_1(_OlpXkVGn zbeHzq#bfv+EVKT1HoGNs>r(60@+U)B{HNW-wXR*e^^*I4BUrKtlj~b!LM(7- z2cmPz-&eIZFZ<7@Th-$3Loj35I@X>hNR=7>lKwSdd2FkHr(ylXUqz!`ifqz#>{N1h zmi4o$eP=3`X^&ENwNxdNlZF+^r}vFb$u#6;?|xFBQqDf^a;00LnQ~-bsX5ZycYw-<`Wo*6WG>*VEo8Yz12@-ifY;5Q3 zCn3jl8@c`G<6` z7oz5qFAtaFS<3;v{qk}2wlUg&ek$}jW~t(8W7d({kIeR+agiGOzmio@ibXCDxiu@G z`+aqHHe4o-+crA;&!@v}x0424H^`c#R@CzysrJO;jd5L*nIpR&$?ZGSAv;7rb+(FT z@e*%|CnM=<>K$WpINwi#j`}vX`_IQkJr#R55=$ihZ*h`bMu)E1ME@;AfPDC;1$KQo zB+5wSNVWKV6LB>=Iv;mIlE=!`8PU&x_MLGVp_wqeS!@~YZ9!EByC))O%(>$kGOxhJ zL-X&O1u|iXR|G5{DiOzU8>#*0V`7-8z;}|ul#@4V!eITkD3%2g|-K=R^ON^Q4~_?K@NP1WkS;I=#)6cFshYV~-`&&dO?IQ1c)| zCxf(O-V#|hWX-6_u+5$G$lh7k=2rjtxU5r~Vt4VK{7^%?ytSt8;iPVXoM6SaBEJ2- z9fAFbYu}j?f!}Wwf!|*^0^2z2Kc5nTf7>Vm|KiPv@azcu+r>|^57{09?R&c&*j{V<&!<_1c@yl0x3(9y@9hZeM_l{PlnDH8qX_)Y zSK(Q#!rxtN&l{sU(7iEjJy$xPQU`9&8>0wxZ%hes?R!%qaC_buMWB0Q+9)fXPl>>v zHfjg{!_?B5<2~;qNbeFI>i4dUr|$ZgVgEy+kB^6;4rBI-3%K zKW}s=^0Omw7T%a2#2(t>UYPIgIv-vxJY1NosUN9ZtR^cBv zS|`Hyb{$yKdg;CCbRe}#TU>?t-j2W&Wu>zz5xC9V7;3Z}fhEkP_ohVPHgjWs^4yr2 z*nvM?{IJng_y^a4dth)%9k|V?9G*~Lh0~R`bT%CVf8OX$gzxPLEMYFaHzfkMxfA)> zcOrYN!Ba-%e%@%sI^WxMV5;XzXH)9HZSF*VmK~TQu!Onv-joR3=1$~i--*m-72al@ z$j@FUG7|*;eWP( z?hl*|0=HQ!_Ybd?n+*cDSu6Jsua%n(0{?&Z-mFJ%>}bQxYXkldhUeDxmDTFS?YqGM zb2}K!4=_r#sjMnhxfZF_#`oVR9)_aN!sReCc{0glKxi?OWR;r1_dT)4S?A1zUp*%> z8w9R%X2P$Y6PX19sT5vgx28U~#{<)t-_W;O@j%|h8gnB0+>XE@%%#_AB5;k}njp|~ zA}Pj(ztu$G8gn8b&}*cJF_&JgiNH1HL_nZ-Yo-_*{#Fx#Ys`s&K%b>QjJfn`O$4qn zCjtU}eqf5R;cqn&xW=3a2=qD9!C6l25RY9er*p2$1*L}ro` zc_$Y6`X*Si2D&FQyy~S_Yp#Lo^hDmdCo-EgaGjpWJNHCpgTOUbXQ73?V?EWg!{2IZ z;Wbugfk5wAAI4mIwH^Y0kjU5?JrSPUYhzNB4SlPLz;)Kf{NS}QGqD4ISZPF>=k_&l zXw^%v)m#JD8Ik_MBhs^31J@am{=p;Cvq9iGBho*3M0zF&d@pf{HTuFlx7&fKtvB?o zo*nppm9w*$WA1$-Lx{_-)kNSr`$XQmFFYG9yiQ;Ez5BwmLEt)l;rH$f&jx|(tW0?C zl?k&!;5sW4-g{-jOc40vN-Gn1ZjZ*~9&i8mdcN?FD~$*8+>XG0#N}6NB5<9xF+X}d za5h?ao$o*nqpN<9&t+Y#80xco{@ z1g_H)`N=(z*=XT)dLlo$Co&TR{wx{#HP#36+^&UlUEBY?o)-RjrE_C=Zbx80;_@ps z5xCAO{hz%`e>PfpopWP;_PH^$LEt*8vwrsKtl1!NojH-8Jtr~~1Ts;1jlM9??Vd>P zZ}fk!=ZP>yYMlu5oJc?3+E;2KaGg1kUpyx=8!f!foCqDmu7%rcUEi6SYv4L_BENV} zWHxKyI=eN0@tnwP5V+2q$SDZ zxJFL|1iB~EhqkWsH4(T*PXq*dUbqWsedlT-aE+b_2=u&gAKJRk*F@kN^THs|^TJ(7 z>pNEyfoseQgFw#<_o1!pd_4rdlXtPkXbjKo(U>l*b)Tz=z%}-X{3^9EKDDD8Yu#sS zB5;j;A|TNFM7puoeYPe7*Vrcl0=-Y98*ANX>ml$5@d?*x2lCu*2X>>a>ugN~uG1I( z!F}N^Dy07+Y<<~0Zr(P}o6F7h=3kqq&Bf+*^HI+Kv-v%L-F)5LZ9Z?VAF z+;=VaoyoUr`6+((TFzf@zQ}){<)_aiGs*<1b^5|Qx37U+t6lfGnh0E{FZ|wp;n}Q# z>-2@+yDvN&1g_H;e(%2UY!JB4`oQ;IA2=HXuCqSyz1IiM27&9W4}9yU>j+DXKEsFowYGP zd2P&0wD3<-BeKS54A1RrVBd<@K3{VUTxV^}PhJ}{n>BEqIgy_{Co&rZt}`P2lSiay zgTQr0q<`{=^lT8g&WQ9+9+9320@t~l!>^))y*8%p@%Epo=L`R1rL{3Uw?||85tm=7 zgFx~EKdi7m(4N~7nB%PfdrbtcuRc%_=xbm<-r84cB5-}aup-c>__lG@f2Jk^*XIi> z0)28(Ki=9`Y9erb)me%_ug+@Ytp7|s1g>#%5eW3jMg3^&x>6H?>#NRE1o{-;E~NFH ztBJt%Rc9#zy*jH8ZC&SUB5-}xS&BfP;@gF^zH>DZxW4KvMWAQp`q0*Oz9s_K8IktM zMO`@SKUWih>x@YI+?al}bzP~6z;#BX-+Oh|463u#9$IHa`n~rH&jf*VEv~Is4(55c zW|yw*KUYr+(=V}31o{rw{dj9%sfoaKdLrH@(ni_PnVJY(rzhflB13p_ z=4YQ=G#do2vo^*%*4vtP=uAy5yw2K~pS@#!Hf!KIb0Ru5$6CLdFz<#{7uhc}~I^%&pxu}h@p))lRxXyUsPaY4Pi5>Wp#KqRBg*_fP zwC3g4YOaCnj0gVY@xa-vf$NM1{^aq%*&uM8HPTG(^k_`3Yx}>~)WYkmk@g9e{b=jD zQWJse%!&8}%PyStpR0+$b>>8Tf@MG2x~|kiAf4N5jK+A!dKb?6&(%U89b;?sMD)4c z6X{1>ex)V?*XW6WK=0PfQ8x6wCIZ)}g+ZWqYYrhUzg7!@R0^+g4b2uYp6DORv>J;6KD3 zU!y0Y&+Q0IQ8x6gCIZ)(69IwVCo+V%{8~K({<_LO5%A}IB00*2zSlt@J6jQ#SX)-k zp4+wX5a!ZrH4(VJ3ROj*cdVxv8~#=cfj@{nw7yzJ6hL z^y0Z4ficF0Ki5Ry8rMJ&=xg9G=F+P*5xBmHw61|ZKQP7E@VA->TwhjB5$IXDVa%mh zYa(!s(HOL_&ksy7HvFw70@oOg0f8Qk8OB_CwI%}BSEa97*!zW3j17OQiNN($s44=z zN`Dx0>D8JDTwiUBBG9Y!Q;ZFNtBJt%)y60Sy*6eTbLrK32z)0t`T8mo*w4muA}Pj( zztu$GIz5qhKDlTHv$N1f?^Za;+@9O>!o%xce6`*h_`^!IFwgA>j4?L+xh4YFS()&I zS0>Cv3;(dfUOBWd&+TjA@VXaYt+@uSvohfa?-!oU8o18Ngde;zVFn1i-aN~nNBQq; zb1BEG&GqI*K7ZZZZ9dDlNBP8e&fmy?oa1NCHW%{gi~Rjre(qX6pKV?@ALYumoO_jT zPtEUrmG77G{Z4+<=LJR`%g=N^N>;BTk8_d57y0jVBcH=c-mQ(;o*4c-rM2-}ga0>q z;}@F`n|t|oCcJoSKEW$k2A7`X&%JQua`Q>SQoy?^ROD6$(jN0-{eW|~2GFbm8Z2eE9Qp_{XEu$jyta!?p28Tb_L}+Sxqq|>ZHM(sqbz;sJvVIe9U!o;a3&Z1O<|rRV zc6@bOl>a7{#haj*_&Qd{N3kgIEy=cgmcQ|_JbP#3tXtoz4(1J1mdTf?8HWFEY- zyyiz?;Hy~kL==hq#JMkWyZ8o=a))L?gTHWkHh-Su%_Cl1f0aM#^SnqV?50_v_LZcw zU>N!F)#+GpD;h^LyJQ>iVzqif-|0hh)v`j=Iy^Q!ITQWFC#@LLN+4=rs3_7rDd*r9 zdJIcV>ma@fi!_J4Jl;%Wp&d)!&aRk0!=LBGF0Hmf|7d;LXZiFhItp%m`h%;_!c!tx z)F8n;n7LjrXn&6FBXwumFuUTbb7ESY3s`RyY=7>ga&$Jtcpv^;mkoF?L>REy&<@1O zw9;Fv{yu-V<71o8t+Zej?;<}(|1jd?t98+@*zfmk)So#ME9+YRT&*?>(zX6?D?3Mh zjO*dgQ=%Rpf%RQ8*Lj@As|D*+3*L&%k0Ezw*)X%>t94jr(crWvhAI)OnpmPA5!>%w z9Y5R0hhv6}k(nbq#_sUvDUnUCm}o5(=JZ7HO(VYahhB(g`L<%aXpD3mxx;9UuhvE` zTKTfUEPZY3?p4#e^qkvW5^@B`7#;px8^L)++IpigU2AVH9Y^jkTH~v=k*n6jz1R%c zdsp9Wii;-0OeY&Xm#jXoVr4k0V|!~G$vNUrPF5>Z-o|`ElRPs6E$0I(KoFjf1 znCZ=|( zt7fXZ8{t+WM7vAWSrFrV`15ouAa}~-59@yf|4)Jurif@g4reX}JFtV8*Qu`bu_P4p ztOQIafCV~N<-Ex?Z!0fH_Ar{`t96k5LEa(SnJP1K-p}ajOF3ab&w8@bw;92Le!~dS^@pktYoa_W(S;d{BV1;?;<-#{4mPntF;gx z=2X6ydHqY=FKA2^{w{dVCF5v~@i_ds4q88o9rCrYJ@7BB;@xd(v#I;!63!|crM*Wd9Hb9Be}9sXPg-PDJFmj8%wm}f{g5|yK$1>e8R z@wD^p+v9s1nK{CTQ5|2cgK(l7bgWYG1jd;K`6z$uv?!hAMYPMKA7+b;mzbkF#_#aw zI_Ul?ky*O3Eyh6{Pcu1m_2b#=o)4_%?Fjd2<}SBi(f5<0vtStc@zp6=pdMv=&w|*$ z1pQQWYYy;cf%(f)1$X=T$=2*58^>{s)Zx$5<5(>b_V*$8%p^4J`)^n6vyR78i?Lne z87|9P)k_%X3FDngN)iYRm`qO()_NCy$En68RSr2j4kuOTP|T9y&(m{A-?L450{6@*Bp$CE zphf__65CJ9(>4`NZ+Wn>%h z$>A27Cv=Z+=BBx(I_i{mshi%zVK=F1rRwY$W<-2-YIfks*fh<azbegu_ z7(E4(=I{obficI1KTpj-vflVYnki{VRr8orJX89!=rx_IgyzDV0#WEMwBGV~Rnk^% z>0s^g%=M(`+!*FVeD&DeK!a)I6&r6&`{?b)f-ZSE-eW`$f1VQWI%kA_K|Fo+Qnc?c z>@scjt7fTb2IlnE`F5;hIP-)S*j;{(_+gaCS8F2vMJyOL?^*}z zXzxP%IN3SUV=NDUo)+o4zaw#3YFl-E*PNi{K+?=RRTMf6@^ zrXNnw!q?|ggx8Uob6^EhN5Y~3~dAV)Yb)7bgrGqyd_c+iA4*JQk=P{Lc z(tUO&JYc8QrS2X)CU1x?JcRU|8!`HaKTpdIjo8@i6Ws-gDG_AzKt4=)ku{%)DRs9Y zFAO%iW`0ZTH&0?7Z^PL*%)t2Sq1nj% z7LC5Pxd}&go>5>a*+=p$?!BmOS7z9*5_Zc(0 zBf{E#?~IYXG12kcF=niEoh`!*iLV}>Em|enXZx8>fidtUWY)opYnt)A*+XDbYf75aNq5UQ8EE;A`eD%02f=wY# zVY5ky>9OC(tLvSS_FB%Fl3bl3F$ab}ADST=SF>p*Sn9tu7Maa8wKxFrHf%NSplXRo zw`MuDYDFV{8tr!bZJhl^RE4PKw9mM4%yN(>EBj@`Do%O>^kFOq<^;&zX zR%)DYHfDz%3eLom&370`a36b^Nm1lrTm$@%uKQjkZXP)rM za|^pNtV@>8gc$3?pAXA~uD5k2_$U6!oGh*T#ahIkRDbdmJ6G$(Vs?|Rvt^he@ztr> z!lWzuo5IXDv&vHMf+>uuCzv9K=k(f~(f*NOr!jL^BPz_7Yop92&yn}$U(h%VF}_>* zotC`|-F57!yTmDUsq}I=oHx&o9O*EiGuWhS@snk|7iVtF&Ee0}GM9>cYI^BcfqkF| z-KG61L_G7}6cBkM|Iy{8(aiQtFRM7=Hxfkwh5YWYIxH{3S$?MTQL>^FOxbxX**n{Y z85Uoy&$cxB;cWXV>(RNa7TfPK+_f?dv+WSFcecfR8vb0LZS*6f-CVPQ{X=rCzT};0 z!|aN$)@Pb__q#qjB*$vX+}RcLXZUk{cBNIeuFVdu%?>4hXWcN<;;Z#pXZ6k=6*;W! zSX=JSvY1E1pQmIQ^UJAvBsNH#KlR6T&gBxL_Ed+4>4shL&vvXZ-!*|4;W+s?dWR7k zUp*9hmlxkY1ZEwnF&2kE*FmcFW$DCe{05!F6n1l=r}$MOLrkXpw7{;%>2bWR%pB#z z$d0d0hjJ!;J%8`!cx>XkA^ZPrfjBN@{_|P@@~lIfjIlTdsa^ zEK7}OJXH!g^-Igq9OHHPbA2>pM?N>*Kjg@KRqjV}Dk(?tFmmIo)1kOs=|jKOwPZ+G zr`5L$XT09AM!n-4-hs0(=GXA&Y1xM*&kPT>=-Yec#+i>(?elCu^?5UUVSCv)j)$=u zU!4}m%ooNx#a8tW%e(?=>Yguj#$hGy%!;`){J9>p-XuCt|351uzO=>Z^XRqi5O(YS zhj`LCSGJX*BYzm}@zq+$zixaHETwdI#+yV%uY?8E*ji-)z580ht-BHB{roy(P3Ln^ zd%Zj#J!ktk?eZY2#-+q2s2^e;EVAtCD$eDTGidC)*!ACYzQv3h{#=W1y1R-oi;S?& z#GndGt#W7Eb+hhtPXK{4)39yao7nYVbFK~ZE52HbYvlFV%T@g+t-g2?y=Dy4O1ZX= zyga>Cs<>!BW3GF4m6hW>M)L6IdN^-SN@7NJu;7@5MjnuUskbJIFs>Idw^)|PjN@8# zT@|S1H{&{Im`7aw@8-{&Kgn^|KgZ*uX&?8dy4W$Deb@EdQ||F5oNHwU&6R6R>3WcN zNUhz2{Lz@*65|df`%RxTx7qrh-)*uortOYedcfX|?JS_)=JM>P{g9bHz2nkQS3cIl zW$YE8|7>2e_L6w4ms#xn^Jk~CPR6_kw@u1CnX7G*zhCD2e~`!}8GOwS*!*o+_(iN2 z_Y020ym4>Fxwt$oYLv&Gtv7`qF!)+c8A*H@1_bTX|)s*d5ba zdE_>%ekDw1!GeEkx*ooXmLc0neww{WsV9R6x`!bhBY7QiK3z)hu)N8Y=q-G1>ha00 zyr(f-uc9 z#=q{K#`G~=ahIoMj>(5{GIeGc?#svdFvFRk{>wPc(9Hx#ei`w0M?K`X_fyx3E=PD9 z;eE1lBpXi4$9hP{)7Bm?^P7W}uUYIT@dl{5e-``yQtoAH40AVLB!-2j&Hh%*dAQsB zE>#R7C-ij=IH21zm@-(Vxns@et>4vLe(p1 zhYP_QAg9Mq5E1>hNFLOPiMH2^!${xRR%V&qu~fE^xzqeNc{;Tmh*6OVrl!*Ub3Bei zGO+YUoR!A8^6{9g#Al~d3QwN(niv@MTu)7ujPvb?r`EGjr9v%+-SaFzp><#n5*tX_ z>I{8pDpj^+=%L<@v$f1pyW_BI1p%?nqncLzFXmjL74L+BTJ;<%ThNRDk^8h(3Wk1= zGg^;H<;#m)dl6T<=usc)$<;o;ly&G? zRu?SyUG@zc<8!9$n@al5HsezHxKy@ji~&6uVzwUjiF>Se(SQ3eu=GZpm1Q>C9mi%R z6RW6gBI~UEj0R@vRNH&!-^d7SF7-IRw(mP|=9L*| zcTCGXa`e{e*UngYJ$oF{93v}7vf;FRJS37??|GMG-`wI-i)$FqvBVtJWi;Cz^-!H= zr?76cp0GV1fjXsp7leE&0!-jH_D_{s9#6{8)SiscB`c=nwK;NV`8(^3Q|057ta}t+ zfrt%N8T3PuG5#Ps)tbLgeu=!W`wp7x9WO6ObQ#HZM=eC_B$$V$3YQg)Xw+w^4kQ{y zq{{RP)8Fu%-{iX2A+?ddn;e}1hVSyR76WcYyFUuaG`0Nxz^?#^THxt*q&! z=WH;nmygr2A)iN<<|}jt+@pB&>bqkvv7-}lG1vh9ujHKdW2lw=S~KBpNj!v{ok3;h*d2#r(3Nn7j-^Mz0~}(eVn3hA9kMeMak0Q3v(8=`p7C4A zDca1N*lT%dq62ENJL}Fxn(*+e$m+S7XrHcb$9p%KgS zI27|NMx&F7*?V3qGD5Z!tw%o`-EZb&au4|9r?{H(?lgC7nVN64B=0OU4wa9GVwvU7 zsDgqWDUYZe)H-kOW0wsqB(xyOLds_&GuO}Sc$5;s8eJ;cAt#?@^;KA?h8{nX?H=r z_uvdHGtcfg6a(Xo9o(|&UiZd!oxeTIv}xt-j55BIkB4TI)o2Bcl-F!f$3m9iUVJUf z4d@QfWDHF2g*?04i6uQ|?3!No&a^Va?2dX&W7aPA;+aJ1;g!||Q#%+W;rS)t~_@b(SZ|J(=e%Q7)oJ!ixCgV!^ct|$&X}4h?llnZB4(l3KIrtuGcD?3K(^iP`+WOXO_bkFiLmlp- zqTMkaBOfJepmmsRRf;@YFoURohl~qa9G}kAfFNZbJK?n8&GkioRV% zmfHQ4?zr&ONQXQ9rUlheK(XKtCXcE|FW>s*}HE-7)**=5`*A8W9y z^nP5EZD(ChD^F)fnH6@&wCupQAXoi+<73e$@g#o4qu6cQnQr@yXw{c`YS?$n(;w+x zwYhD2E|zQl?CMSJDj~<5IJVrKd1c1g9aAz-Eox?5 zYUe5Wlv9j{Q+IOJu%771ZG-;qXLlqT&dSFrkx1Y3bF(t*YK?`%>U7)a0h`Z5tkl-5 zxUyX>0j-VK-MPEtS*I||72KMB@^t=`d1H4>&z~>Cm}|*28;&t!b6eC?)1ib+&G=3E4O5Sb$ zzCbTIed1w#5O6(>v>f|o%-bE)VW0ijDj)F-#PvUMIAOUlP-d6Z5OWM&53pu*)^{_shAgNU)xU2Bme zEO4Ja(>?zT4oxjrXGobDc1KNyEZc)9X@p!yq#l!2v8A*A+E|Yz!WiR%kAb`V5^$Lp4QeNr$=uy<+S$ zePZ!;sx|NoPfx$}$s=f)HmeRPac7%xseG)-w!V6$c+%?7l#JyuXPSf?9u-`V?RiF%_J`nQpqBi(RZKGsC~ZBu{IZ6W!(u3iXT z$3#%OrQ}F1BiQb!i{!q}@Yweb*1tugzR8RQwwV-28xXolX(|DOV$_>Ni zV@;HkkqvYEyVfmV-`nf^Hd1q>ml1Av)JA&9E5w!zot+x@WV&|S9*(nc-xioNNHte? zWp>`LFvcf<1ye}W8DjV^A8Rs%3Vw2G8u{=jXULT0l5xbAk!p9;MQk3SYj@M+E1A!0 z88fe?ZS&|9#W>nCwXB_0#+mZ5CaXepv}6@*$0d!Wzeu!^-E-Y*Hm~_G@^*HWS!H)j z$u6R$+U0g8SqGgj5c(f;hOxfh$ba;MYEN9dVzAt4xjb%_pQ)|2x@7e#SvzW-jv;kt znDM84oR(o<8?L-G{tMHL&*b}WQZ@J>NYEM3Vg8acjtS7`vL==1cZ`u$VBGQFf-|tp zJiB8`29iCd1C8U^CfGBq!c5M=lm1-k^9f6l?m%=I*5Fyw6RtKPo&)vp&%&uN<-hHZcUegMe z=4tlu=Kf7uf7Ctw2Yio{mm|82WV@p#qQ41x@!=n2g=XiyFe%7p0WEK}M#o^s!%f9$ zyo=j;qoLw6yCAzPH%GYPw|tx$;UJob6cv^2$nH%Oe^JC^w{X{^{NaA0!{kYsD7wU` zR0;cSd1z!QOikZcW{&$Z-tCThxQ}t5RmSLMF#jet3_W%lyCtHV_e;DAKQ2U%qscE< zZmoxvWIBmDLk$1rV?BmwUIU8os{0BZ5^WUV%exW&@~nXpTQlxMbSk#VlH zyJ9~*t63t=35}Jiv!ToayQ3Z(J_^Ebr51zvpv*#lYuKQZi|MaGhkTHny6tO@j$n@H z{U00wYcPnv`3-!h*6c?9&f|XUEx_;N_iMB$U0qMl=g4_7FL^r$jbY_uEe@Klxop^{ zUO64^)RSpV3$|K3y%$beO$zr@=c1EKIge+99!sq|eg-xwJKNsC=`pYUjJd}%56L?R z%iOa&rsN=deNd~3&cYg0T^Cz_n%mImz>{#NtMIGtCvT?T$W@50$=Tq_@^ zWaGC+GwF0yub#$weigq{cU{T3G_K+-x4pa8DyyD8ru3b0Wv1C3(=iU+rs&f7WT2xf zCa9>vQo?rBwO!+iSe>d7Jwk#{Y!O4#f743XSz;V0AE#%D_RWPTh)!oE>Y@9`J&JF| z=QlwC(RPiWG0lViIqGoX555|nnpQyb({vu(%707jM`dN0Hrr~9sV{A3Q<+6}$FbOS z)3D=7;_t>g{bZ4kv^GoU11KAb<`dZmM{%r#==Qx_!`nN>9Pjp(JKHg?_8W0l8t2N# zX<12S1Y99<55M>u=H;Dn@Q2*+66a8r^i}(b&l{<1FB`{k8NYVNv^c)~!^%QuP_g;g zWSfZd@#)`!a;*=RpOgW#;ghLoLeb zt;)Mu?BIQ0SvnI8=jG$HOwieOTBA;$Ue`72Cm|+8T;;l1z42;4$!CubF*Am>emChk z+RG@nJElfEc>;3itXi5y;LNyOx=)KB(!9;I2<1qh%zYw+p}hb2-_4&lf72@={|qmts9>Ut+MJxJE^D$U3BzVQ0;{3eM=})t_IU zr8UM^$TQ;kY+ltc$C0>es1mQj^;!(mOt{v8S(X8RTH~PKM1!esjm?(N2n${AS{bdG z2b(jN#va2y!OP=W?y-!kMH#Div>pX1Ur4l0`>m-4(l@{wX7+NLZ9fKkZsh;*URKuY z9reZkZvM98PtH|C89(CskeENFliHE?xD)qOXX~|}I@dQ-%I_GApt^znk=^X4)8>Qb zr*%q7S9WcAnjqC_ZN0D^-b?avJO}%y^l4iAh&QV>@OT$^33%mNyF{#(Gkg!%G^$G{ zu|{}L58FA~WBoOa**H!C|SYoaDbomtRdZ{N{XHAJK;rj7dqp?A- za2j)8j>C^(DLNAZ(o3IeG69<*>}sDPMYRc${s+l$ai8i8rX^7gb}MIys692BM0L*c z;%DhIkBb0wXX8`tF|}l!F(saa>(eqO-f!blkWc-JMtYb9qB;06zN%MZ^+Xx> zcE^-@f?S90d<|Oj{YBgPu`p?%R28+nxK_z(YD**R8QxtNraw_fzRnoqL-{y0W9X%_ zdUw1C>?@7^+BbB9zJ0Bo{M`5&WFW(oMV-7K&m_KU`hmY}emK#24!M=tjta*dqq_1; ztk)Xyb@r55V|UbH&uf!!5BkLTq|*<`u;^adr>95qXYSg&F29G$1Lg(7Br$lVjw}z)sioXq6Pn&rwx;IBE@(<>R!drH(*5Xs{INk_olVapjE0 z!F67-R@N*J%_Uo;9nI18cXt^%uFH6~JEp~TsO4u5A3XaolbDKqwCJg>$m8-c<0Rw= zHhh+kheU8{1+ua+FY;FOD!H}a1nm!kaaOM7t<$MR(QS21f${M&bQYA+Z+Fat1&(?; zn!9vgKk6OjhT-yYdX&@MpmS2!Xrjk(S4?3gR zp_e&~(=+N2a&{J#*<*K1$)bvW& zY&b0+r$=(Yv39xYzU48NtxBEQB=rBa-zw1(SYUI1KZ?agC9c+DYiwWlHK!ugcdkO~ zm>iEGe`j2oX?90V#$7fMRQkow8osbA)|+sLT{?9h5Ou(G36bNy75-5>xy-0*J^d0G zw7Wc=5r+5jaY{xoL00#Iqtl$Z33L={?+%_jJH+Xn1OA$}xt?kq>qR7x zOGvdx`~0qwbL^KfZ+FzkKKrdP)!O1zR3e^gmTg;fcgx1{Yv?Q=YvY%AI_tSk!qw>^ zcnunRRVya0lt|-`%ZtXQd4{eCGnRgPt?pmL_miM=q09lh<5*l^Jr6rdV&~HrMUKNP zAI`ir9zfg~=}E-OUQfzm51ZhP*^_J#%VlrJgw+58wHKaI<3>VyCxYqzSG(5 zyUNjdQRai)QJWX!xV|>g$F@&LOwwwkv0JFHAb$U;vF+^)M~zr}%#vvDv=Vi$7!%6J z+FU_H5WoK-mOB}(bp7+lPoDSKMqZBdGQRDO+Boly?}aH&c`u10KS%z45_B#Y(#yx% zTp&A3H)I^m1n+T0r27S0QB{(YQMPH6-gSDYL`wn35%E8ryU0slof1Fo3+9W)kS2!GnB~=<1p5`f#@SyZjfU zYKfXB{{PqN?pzP?yl9Lmj~U_HWAGny^)D76&SdOk@$lv)a{dDH16 zT44cS*xBZj@I*Vp+S4rT=hT*>Qqu0nzT)?&{e{P4T7(@Rb+@4h`Pb=f=I7k1QkE^@ zT{)ADr{&|}nT%Hh!|2>(cdx*;dpUzu$20+AXtxbJwUhdxxzqN6>GFH1oVbv?=oQkH z!78(?3PsO5lgBgp*zd}jTxPJ{QH#ls;%og|7>g|mTd_++w+8Hmbub!!@k#e_A|65H zPj|#H=6?RJXY=Uci)h*p^3!2r$SL}4yIHnD=N|7}I1`O$<>R54sCF=XyA_sUw-N`z zySfohvS+zYdBc7sGE98Y_U*ymz4^{rwQxT-Iv1-raFDxV_Pg%Pb!RFc^(j~(5BE-- znPo=W9krOrx*kU);7y3gYd+XDTvty-&Zk`^=`1jemyd^If%y;pU8-m)+XF*81h68l zAAk(kZ}K0JZ(^OA_reM_dy>5dZsgimxyrh$_Ni({YK|-`7RL~mT8mL9ZW^r1HuvWI z{+#h;rrRCUF&-8YaYe&1?Gf8jV=l}fQk&9da=}yLtNg9@seX2gGPV_{D4ABK&J4qS z`8Xvr&|@0AM3c35H;Q!-w$O(rZ^0UC5lcKV`yKf%&~dlW>G@%8X~ByijoK1*&Xl=g zchuqxS-3axn>4eHjv<0yX3`qju&b;b=Z50)aeAEFI{zY`2{9sk79w)7M?+-%X@U7> zEId50{=Fs6n@XkFyF(u8$vrebr_o9DWILB1^uc&3I@-%9w>zdpdyE9$7WGUz`%e7< z?GbtJzt>ho9W>XlN@Rr^h4qF1F0WcRZ@+YB~1PTSs$L4nMzRvy4f*V@hn|J5f!g znKkA~J<2*lr53S9>;U>?$c(w&O%`MNJA z-+Ng89r7(W1Ix^_I}X7>@@!1tbFFu1tyf#}&NSmu`8X}p)S|o=pPZ=uy=b@BKO*|< z+4d+`w8o1n5S?H^SHQK{U8n3H>AVv%*tMJN;o7|*f;?XL9J4T~V|k1zW%oYFit#GX|JcX{D-wRxke&0O zjDNdhIv!}2T6-fvziNwi6@nsPIYBj)Wwq%eO*;xtj{|LKoXdJ(^I0hGp8Co~2t$kEEmGy(p zUSR@+&MD@n(IuDn6$EHZcQsm=SZ0wc1K-~Sk+3~YQfVdHb!PS#K+*t=cdb*2!PFE(7tfuZDGA# zFI(!#)Olm9C?Ai<8#ofr>vB%eEoKuu+nTsvUXJ%N&h3ul;ob1f{DY-uM!+J~Eb40! zvrA|6xAkOqjB5z*{ql0W8=A|z!H`})&VdWeG{j;E6GGP>hPlWWqI1pc8|_-jd8>VKy7PU+Vl!{b_t8dT1}2 zd>HkxeO^*rpK_|Z8?=2xEWzVT+Bs$nDj#cbERPt3>XY5~2C=$HTeDw;d(?TM^_ZTd zOk7KB!Z>z3Njt~N+_F2S=a|n8`ybKG@IIftOV?IBVRu|_q*kzC5AaE68|%DY(`Sd1 zxHHRmQ$9}5EcQ5m6f1`A__UWJ_Y%4=!~9d-W0e|_CFYQFuW}rp*vk@InYsD8`(^quX6-+r|i&UrMagI@uiuwp}UW2o{7Kt zuF(an+GcfTu4(9DI88oTEG}osAtdS?>SIj%d<_m^Ik&AXkHJ~*#<_TV`^MnDHot@T z%x=HQInw4r-2C6>x90kW zoV9%%ZJ$35Yr_-|c$n73SxkZz8xGoBHmhLL{O3c{*%X+4-NXf9zWqd~HH5h^9n`|` zTls7&LBPINUNBeZlU!w*v@_je?&FxgjJN8mLwgnIJ9CWHA)na5#B8Sg8e_Yd-n}OD z>vX0A<$9l*E~<~ZEC^o-wpj`0_y(QzeH?F}UpDK*RA1c%&-SB!7R~NFJ`RtE-ib4_ z&A`4h$6#h0i!~j2FWNJ<&Q+W0TgD0uRydm0=FE0$>9#(1mTtq+!@nPAY#%?{=a0eI z{>npRB0WI2!eNbceG`s;k~19hSkLmfm_`$H%}H}fmyv?6E#2QW?dAkf_#jhPy|zLRJ)cXMrd3_NDM z`H*kMS=z_R_W60Sbi1fCJFCUaC2|yOUFEMvlhSCi&i#*VVdwHT8nvIx$9jLx_%^fq z&K!sFOW*zZSk`O4Z?+@757+JU$3Qyua$5DEy%C=4AR?u9bv_|GXl0#YG-Z85z4zb@ zY%{Iz%rO|aEvlAh`yERcZ7W%4N*^!U=a0h_>YHC>eP-&U)`D9$KfLR9{S6g7Oy5J# z#km8k;jyZ|I0mEDLd)aYF=Hk#BIm=tA7^ZvnSE!D!C3Yic^0O=N#uiE-|vlO6(%lQ zw6Y!1{whBQmS8hG4pC*RyVjElRPM8THx*@}iqs<|?aa$Ik&@%TFK2Wgf7|D4FdEj~ zini3wcAKT~aFf{H{#Rj?lKD8zEUcjt;rsL^pqV_YU4BAajj_)>(`_9zCH&ck1u&n+u z(F;B;u``Hx3*MS$vb(FIcsAxm^3>KLp)r<+=I5+Czx$`-?y5eyIimaU+df|h(KgLc zCp6%tg9@z!#1b;gDbA7Tv~N~&ofh6+?b>&*Z;d~cWSv88uJoOml0z^f#KP2XNaurI z%Js*_AF+6KT6e12BVJ*N`ZBpcp3;lo;S*PHL<-&Wg>v~|X-)BNy58uR_v3u*V_*CH zbbQo0pF3d>RqI$cYS}QI^;PT_CO3R)t~|??8~LMtJ~i)XGBBgLC9tEtEX%C6O(PfG zwpni3Ar16CRsi)Q=gkBsVq#Ov)7jBxLEo7v*`dC;GNY?1hD!A?wF|vJe#sSpZ)NxC`-{f(1-Z;`9pJn{Ta|6+P#A& zIbEB7%qsuVSpH+QLAT@_>upT;ojEkt^NtQ*-OILQE;Gk>ADY|e4~=i;j6aA?^CG^$ zgLtpc3-n(PZ@;vq<`{2dx$n%OF;0&c{w=esm?yxuP?f_sjpGEnUa$IEUta5Xm96uo zj~(svhvy4Etw(`M=pS$QYmNR`i8?ph9OyeUB{!Z#GxTM(mf8_D&Nkx7iD;H3;MnX# zV*7k8Y(5G~nch#Yg6);58B6OeI#tW13#VmiIA+_}>^n0(X0;2zx(nzCz|Ll!WmgKS z=1w=0l;U-aBpj=K$ZVglg;lCw;u_9Zsg9xBaviIxqO?y2j?Xp@`_4>{&s)hmGSzS` zSPakWxa&h%`~38{(;mN2=lPGt=WU^?umvB<@~a2R?^o z;P~uAWBdH{_@u)@>+9*RUI!l2XLkIxan^Tcdi>=zYD|^UE=HRwvkpv_<={B&LuLE? zbU0-~nRcF7XURId-OF-te714ecV=3A(%(eyI<<~WKvCa^J}BK;FYgX|5seRu>7mlO z=lL9#&{q+6{!)LhF&Luxc);{t*}u2Eb(&}eRg`^mWrGy7>f&7bsXjLMA79$ewmxpP z&riv=bb`XW&EJI+%pUq6xVRTQQG1-uCuZlE<;KQJ9Ld*~Z6)G3ZsWD@Og$W5%1Vy* zpi`aoT=QVsL93nGbWd~THd^sxWRo@f&{VOZ6Ub34Panj2zwQoyG(frn)R3HWqK^UX z^Yu6Z8}iu=xt&y=y0bhMl%J{1f-YH6i9GJk?WO7rX)~ek%wZXlPw!BV;X$yVo`Tv* zI^A)3+{kUabJ260?U!{IR)%td?%Zi}r0>kJxkLWH%^gC69`Kc9?=>Ha6>s$-&Zqi(8viz&X=4~> z_taxrK6hHfYYjN2Xcu-^9kKM1lpYc&Q-%>Bgi!FC@|+p-xW1;?wQv3#5s zuTM?Piq)3RN-CmQlbK~fY>G}V?SNhz5m3ntX5C3Gpj2+cwG}|3zRHy4KRbuJ-d?l3) zXR^)`ztcPpvlMKlW+Fb5;PDo*I?tNb7_X5%t+W$1wy3`?z>^%tB@CZhCXQ&sYxy_@ zqItu46%Ji`b!L2Woh#lu2ol3CXqUaw7k2st_O4cF!4G|2B?qsLh4r(juw>;0tQs4b(_?kJ;n4DQgg z`@gr-L+`NF?cN|LJbdp~Y)2S!zleQ7SEJ5W=QDWzvH;I6wdL)3$jV>JQ`oH6ZtKbJ zW;aRu+$RZNRc*~IAIqz1{?__2seU;&@L3ZnW_GFib@)3V^{SaVmHK{qKmUs61o<0Z zF#dPUOR~K9i~MG4m*&3?=hCy>-+q`syri8|WiHtrwK&COZQ^?H2!=5C?sD@<{wAAa zSsQ1O%EQ(S(-v*b5wob4Y@Ij8it=$<-o&vqs;jK}#O$TG4&_vO{ICS~wWm@Yy^G`= z^JT2t9f!fZPFs7GJd*7~+l3U@Al+8ykOt{nWok>@Ic5whAE)FP{S)*F40$u~Nb|B} z1;PZP?mcF)=$xPKKeX*}%S1~~gzR(GP<#qYp zDqE|aHC8^3-!g9Pj@tOef4*w)tR979H*hk z?X4ZpyU5IOUdFfGQ3L19GoS*5NRRFtP1KY;?89m!on~7M$;NSOs4O3+#BF=efQP1H z=@j-3n5OP%yo4OXW$fA=(_xr8O0^t9?;m?$e3n0Jwu{Shal9HD%f~748fSZkVs*qP zmc4t+6f1C=9ot4;j_)$A?T#t&%?^d+Xl}*Rvl$zg5@FMc8CEBddwX$hn&pPP9=fj% zC+7jRvFW^fjdxBZW#^JHrF^W*C4KYEp9$3g%()H~HO4TVonRAej8iEh@Jz`XnYX&m zm`fL%>dM*qROXT0QI}7~i`350)f4T7-eTt>R@e|#*4~4ghIJ2e#ePc~*R)C>&CDv( zoMC1an9L3(dFPxls(hT9bEdCMH`%*)3vbxM+edDW_cG4yj#_xP96+$oLjBsBHG$!J zNIs5VLudJTNc`q~9@Nk1IXr*sL3DIm?RM;);cwlE)foDcx~1pXFJs>Bm>TCn{+0{+v(JAxd`lC~AW*kc5&apDL?2eioOKmIc z3eEECZi{d%pL6D2n%1S+w#cTDrgOuPUp^k68*WuuBN=O~oza@G`br;$4Yw=*1kD<{tX9sfH zUT%)}GS2Oe8hE!#D0_Dg&0Az@sa;9eySvTrg8Z=SQ$FF*Be^EG=_KkLF$R>6Q*tE4 zO%(O*9C4q8r8{MlLALr`pJ%z$^pV@lt-SLU4EF&+1qJw~(&D@*OKQl4_1 z_Sg1uay%Pa%g35{&VBAMG0$@xr5r~a_0vexxl!hX-7zgUY|bQWy+z`6f)W#pFT{$< z_mp^%31Ro58(zd8XP*9(=!&)a9`U5keI@7|Foc(n^*NBPYpD;R7821YB2&y%xNP`9 zE#s?91;3E0{?2cO8GwUm$Anp;2 zt0AdDjTicbA@H-;iBC9tZo5@6b)$y*fCC%hR>p;-q+m85&HwVL>!}r z!1A#!M!R-7#&)OfmDvVon;$lR-@KFmusYDJ!8Y}^*l@j%6rBrY4%i*@;KKWc3${D2 zX<=u>wruE@qw~SgUOvu)4?jB}qIhxGuV`C7bj#8CQ09T%QI`*gj>Ne}F$Nu4^3FM9 zRQXt!bKSALurH79X=PPz@vJaskFjTW89EQj__sTb!Gq`TGejKg!&o;tIi3xzRmbh-H?6%?8qb`%du$FW<+tlcpscE3qg!-aI&Xk|nHtbnzmcdUFIzlP58 zaXS1`{ZI88b<9NWuNov%r=!(4)`w43k4`mC=OpD5&b<2PT=F1T8&^{A^i`y2GcfWV zr0qHlmiL~V&t)Fl9kuvOZ5>lHm>6jmFjaV6H3G4399Ize)D5fkO*vRgw$2-4Mfq5Z zH)%wKjyft-sqX&NXu&7>9`j|Lwq44HZDr;-FXP+pm=fpgNO&(5);h)Pv-D7}y<&r@ zyZth8oEi$t$LVl-(^xHPhXh-Co$GA3EF70*JlY-8;qq3jfUv6~we_#Ec3@vKZ(^PJ z9F~dW)KFMHPKVQv;_uxy)tE$fn3ql;B1k2!PHmdb2-4k@)`{EgWaKz5UCOW(Oy=A7MeEbgUU#mX%0D8}o-FDGuod9sJ(zGH?tzhaA} zn_v4$*g0ejDIe=|D9wypzOC;Kqt70MF*-fWxie%#PAOUEOqnZoM}5w8S#^DkQ9sbN z&NklH^zwE77(2?x`uu?_X}5!0U9r{GmXG7Nj9a^7I{e}#P+b@zcwKcx_z(|rmrhls zme9O^%`v3c&zcJHd-3VliTS!Rb)Fat%E#$=f|rQrfPc-=yohyA5hzK;v0BEc-7zgz zEndq?ZFQ3EZro>yx_*w(+!aaUH}uDnJm=D7^}~y~yaDH+F|2&7#lh12c`PdDo@Fif z>&QsCcO1z(=gM5OJ8E#wth4glU#Eu>I5J*Rj%h<|`8Xw}sTb31xxFjx_X~F2ja=6q zvB?2G$u}y?*a@3Gh^PnAyt?jO zy6YSs3|4yEu1GziwKAigM4cnXfby{xN8)}stp)kq)J)zs6_wg;q`pVkMW`zV?Cd~# ztReK*v5Tu(mrUHtu1bwi=p=izD;*!i)H$cp-tCT>xYzt;yw1lyZLo-#KBlo9D#%y`FGX80f$2u#JzqtC5c|RJwYl?mVqGz* z#bQC+%hXakv(_w9JIZ;?ci=oUmX(jk;-Tvq)iXmpaU7TNYj;eEW1UXG>Tg!lH(BSI zz(=(ull#aDpfT3&KWr~4$Fw1~e4HB7ye+0OV9n^P)%Dsd$f8Rgj?XeK?T#t&`PS_A z1TsI$DoZCvse5Uy7R2_Fa!eay%g4HyPCG8rUCC?;@Iw=~%;$|N8`R%iZw*)*`%_8O zIa20^-7y_U(7?BiJ)+ZZL(HDZ3|&{LsEScw7J6E#5Mn&eD)UjSzdWCi-6dtsn;hdE zI1i0w<>RzGBo=xh_7@RP?fhV8u``K~UT7*$d|DA6{&(Db{K6F`dS~ zumXswkDFOm(}MoNxlLu&ar9hP-p z~(KH@EkR4l|x`9o%i=t}6Yq8hSm z794kV&l5}MvN8eurumIzc==a8$=~d+65BPN%`IhfUu8X6>Kk*88-vToX*o`H^M@vT zN&VfU{Gp?T3iWk*#;~YgCXUlGKJAX_aEhI)v%u-cin}K?eob9Vs8(p#Cj7m*8fJxe z&rVLW3t>LsI(cwhnLE#nMdjm^JPX~zW^bjFe;*nP!z)yuWJUS1vAQ}|pSW9iciB1a z%Xqgtro%mXVapNN+=$ex!58VzG@CC(-|>yy_a^ofbF%Y%bN6qcv+OsypI89=<6p*i z@=8|Znyxj*xSV~b^agzmFou_p)2{($UxvyE@(5uPUUv;TzBxN&GOL&4I&DT{;WRRI z9+dHKckIstqI&G-fN!MO5AnNe>2|j1kJp0qC1hM4V5=lZa|*oFH+j_mTqJ`7fwq;^u=ixA#&hzT&eMSUBMU(bJiF5$Pnj2!W0 zq}v^3#E(JcxvW@izr&HAuH4(nXqZR+D}v9}z7dbde%jmQ__C+bt9qf*m+{hrCW*c`*_Tdj9}`kG;k!4R>_0zvdq$Ff% zP8Fkl&+ABRBd+hvzDT65Un^p)#)bNPog_CZ7blnAo^PGcA z-xgpO=l;PMCe)UiGoTOe?eqIGAolC9QsUl4#rr8o!1sB2M`;_4eP^adDgFFb`@L;V z({U|ua{9v+cR41feO5mw8(HH)bSydc`jFN>KP~pa99Vna*;Y8UwRL}q zIGWq2?K@LO^Dg$o{_pU#QN63x;K=U7ar=B3*}2XfvJv_t4Ak4vF=(?^mS8Om<1e?5 zwt03(Xd8)rXQoAHj>2}lc+5(EYU}PaQgKxGVYq$1jOsBs%-5i4-s9<`dw6BqrMO0?ek^S@3OAfd9Uk3zpwjk#O7y? zUCA8#mu>4@t2wmNBXq?ONx7A%G&84vPb!+I`_RZCwIT8Ew%X_Uvmn=#W1`malO95f zt|M|D^?xtxi2RMmZ_{jkoxB9{*(uC4gv|?~l9L@ePZ{0gB;d&GM`C_uUu4?OL;W?W zDYDr|_wOf)(cNU>Xw5O%|9xMy60yany#8L_&r}2IrPu3CPAw5fb3c0XD`hl~^Bkvs zhx4}}hP}G;ru(6f=fgkikw8#-Y>$u?S|i(M;@kCkGiil?T$wa~1gBOJbCKxi(f*xo zul2mqTl+}G*XDc$?*Cq1oAWoAdTexS;f-NgSoHcyzCSlL#5$KVo`St?CG`9eKD^F? z=DHGcwD+Sszfwl~I7_7VJ6#v*hZ*FS3Mf9drP9v7W4oj~AGYn6F>G2s*6Yc}*Y8T7u%-0e0S_kTBk+i|MyvHixrJ=J%!p_h;1Y2|SYEb|0!;?18P zlE}Wp*)Vk1gI9odYm|oIKxd<(l1t#i;ST+;$}H_qF+% z7m4>>i?+LOey2`Y{o4HI`C~nOD%+Kd3i4Z#flm9;UAoU3ndn~BCY|~c^!0v-N$It+ z^_{=%v{GgKTXkGJE>r9ceVY!KOi|Q%*YV_PR_=%9ip?f_kt#aYWbl0^t5}|gKYjd8 zB`L@G5VF&2Q{f!!QYm=*hc$u)LjIAx?X+Wo`q0ZJ|H#e}M6wj|%yp;QkewP|<+r?S zKFNQlj`!&$=D1I>J@jol+^73N_uJxO`a_<7XVUw>1^-NMUjy!^mYCyy2R{HQEjNPU=Vmo$jsv@Ou(n?ay4$|)+Hky^ zj2zo3euutIg>6G|8eu$jzq9+P9e+cJORr6ZzgyAwVZyLh_FTxiN^J1zc>w6&~Zv3fer)G+JIwcbxkm*Dobbr*){-BaBTO^7E&@l1?oz$NUh=(`$7wPuEO$ zJmU1N*c8n}l5m`+SRDE`Jx(pc-0o;3vXJhNn`arB=YYp%zazDLH7>pO`jEf_lhUyy z?K~S|R(h=-&&;3KE(K!O*hX40_4M5e(rY${&1y3VJRGeh5|;}f|Z z^BuHKvAv$=JUV^PVHc@5euog7UYiQPI-L-F;@gJ4;W&4(9y%GNH-%M z135G5F6af*I=VF>a!3k}&lH10-=@arN5Ld|o4t%IX4=(NO4UELp45QGQ^zz0bm~4o zb(?6EX{6jPcrq`yzBeg*q`^Uo%^9kq()QVw^D1H%yf?MKLY5eB&t=lPN zKX?FIU6WDk8SqdvU7Q1kPlS?SRL)Kt7Q6^`}a>#3oCm@EC#F0T{E zV8AKQ3?9dUud;Gu8O0eLt(SZKZrzYWCt^<2=SBXz5nmwH4LP%xiTU?ZWA&4)3h1(j zrf%R_K3~h3Q1?t6ES1j7#&J8eR_E8sYjf%5sQ<(0W$T=&G*7rX& zJ&^N9WB$Zr_Tx=|h6=%w9FBq0)170T%D;qCqJCBZJn{392~j*NX@V8kKDdU6DtZH95`hPX>NO>{h4F5gcY`o+x?~B zsLiq2|9yMZGA|2j^Sp_I;TMgoubKavn%g&B9aHDRGktz)s)(#_D+fnsKN|BZ`=L{3 zyM6oqo`}=nErHf&Su4Tqqx`M0U?!OJJ~^vXpkE|*##!!ql%G3g{7x$=M|h6o{_p!C z{EHwIOkaGjpo`JWzR6FG-xZ<*kIk8oy@LgcdW`@P=b`#e;|kXI)IC=TJ$=fYIJRt^ zMg6SFuk6F34-H4KW2o&Tvj+pT;-A{S5E~`Jru@*JzYzIPEeF#qx1u*rmmziK=IGBc z-v50c^oKni@Gn0K@-0&EO}^XYO|yB!nH=#Ni|w+QPnQApW#=sDM}2-}KNgVx+SdBf z$z#rlB%;f;ta6Oi_sjo`VZF<`_Q~j z@GsW3{`a$?zFeI>{cOpv)Mby(t1(+Cw~YQF?8?vmBIhh)pI@Wn0vqh&gnfshXoE7R zmQ0;BIXC*h@5dT^XZ4n~{+w89T6tbZfk&raCBI(%e{@(g?Wdg&sUt5(dyeV;@B5-1&s+0;SMrH@2agitqTcRNVq~Wq)dji3 z&+aJfM_qnp9~9DEt+gClTNa{3AQEeYNlA9C>_2N1#qItsyMKPNc9!K_>i@nE%QV7h zEb5zK!@5rnJl=h1eYJtp%gRySkLvu&J}3v@nn$>gbcSUem|W0($M_g+o-_1nLZ(4< z>6&gy&-q@&yTV+BQ>y9s5XHh?E@+c$Ep_LmE*}Zr9Y?0lntqn#SN3BKyK1NpO*S*FY(aCSQ+-wI zY3$oH*?M~6U&N-KT3U|u9MApV_d~i)Y#?K^rmiewXZLeE`ufq9U)cwJ*dHGRdBmKs zIr`R4^#F7V3A0$KI62+gl6|D&$j$ND|9wB?QYT`&Zk>r`ZPC;22og2~7C8HRhIt6s z-k|xD{EbC%%9#b&TSH=w_9@em;=QM#W#zjTK+7q`xsYgb-Jr~9eFw0 zb4>St-w*9!w<@zrh7jE!`wwxqkLKhgG1~uqdh`-SyAj+nBUJafqsoqoJW$Nv)V$s` zpR6#$*1*Q5LIRi-bJ)z-Q=t?Aa>ukHe{o|SrE zNjbuE9QS{(h49BFCi2|Odm(1BPW0wdaAfu)F~71sGT+3e)mZ`TEIn@5g!pIL^OK2R zoC{onURbo>S_vrKxR zM`M0vUvz#I4NokLS#dRh!=Yz)H1?w}zcL*f$xGq^QGufqFdoG#pl68QA!@|<3}R0mo8u+nNX_xs|9x7d z=F{ZJWobVUy1hHg6I*4cljDk?>Rg`O?3?a7gKeec2=7O9eq}m@gJj}Ow~dX;CosJZ z%V6l)9gR8W`oB+y#xRu=9LDPnYi(}H1v`PRV>~SFEa-_-$zXKhGH;3cr&GsX_ftCp4PWKsbO@xX ze?7=cpVkpqMw;C*9pZEXt?sI-nWVHv1U!0X2^mZ$DMz~DxO}XObnOl#c2CxcN&TKf z?MC`;l5(V%5pH)(hx8o7tn17QBsb1pW3~s=hbFeqRaSY{II`%cTJ0Y)R{P4wQEiwl zACHgfQ}^F?MYE&0j9$BAN)&6RhE6MX03rs4= z;(1c5qL$yQSi|ZGsztyqziJmVukMs^d)aVKCn%&5^0;wS)_HQmRJ_=#HA%Uiv-lico-(YZS}jSm9n z=r?vw7~;#vx|{&L_=vaiX1X|$TbY+~_tOGxm9?RLP1QNuyxY5^f;U~&^ELek$GNNw zIv*mJ&0JP>$2pTbV!Ksso$YWQSGC7}!n0@vcB{Q>`ZnnsUT#<1HmgJ|4|-L@bEi@A zE=$mvarpYoZQkv6%+R?wumDTRt$f!9eHQ!tQIF;BNKS3OwkPlF_p*>o=5mR-%WZU) z+arJ3EU8~)n|F&wjaO!VmMG;CJ4m;AZpZYRFijW65_6o6=stV5`}|r~X}m$!X(|Yr zrFJLZ+zQcpVvmY+absClb&PL~{XPlO>5K7I+)>_zZ#}mxlu#gyv{KJccC#TqyTr9T$G6rUGB;6k z^VsITs=H+#<2?PmMAUx~d*xoNbGOYM*(sXiZ_7e9d$lli+`UcrHe(dWpO=MbDk^MW zXpa)Q1s)^0`|}d0!lXl$>2uvl7U9i~ z$3NB)Ght5K(g~8;7V{<_$9W0c@%8!O{G;IezWI-p{$+FO6D_t!dRsz{^%%>g&-2Cl z+2)-f9xDfXiRnhvw3B&-5l?^2%)kn|`tC(9bHC@hmVeHWUFGV$Dsd^kz9e2@B|J2I zdKO>uPCV&*VHN{3aau&_tC!H5z7}K1R1J z9KR*Z#@7#x-~L$X>CCRKYcuu9$#Ea!y7YN_+_TbNi*2u!D)jXc-C^=CelXcHsvLBx zHFsUe9cugI1>hS{QGeEW2)AOvEN{(bR<}(#w%JD7qi)q5=dHbN$R27&k=cKCU*Avf zD$8SFe?5D`_8}jim%Q;~lk19SJCXt8&Eq3uvBQpdml*YyEdzQhOkpO?5@#HwPeP7E zR|dS3Z?Zb1*Ta+Qm1(8tEGVt|;rjOLe~k8XLF`kr+Xgl$nO$8MS?|NnM_L=iEch2$ zIYGGAQY>%fkDr|$Uo=@RgZ%q;GI8t%Y?eN4k6m!bJN#{dR!2T1{@v#9g1zuWj+_!+ z!u9Qu6KnNY>dRZh97h2Mhp(`THOR7Y6hBGOg}xpIbdCSC{d$DOOjp4vV#uED^LINj zen!`FHBr^);RaT_zH7_>uZ`D(&x7|v^y^<@Wj;0@u&s>$lB-v;C(}PS{QP=iCaK+& z+a9_v7*Y%M_W91a^GDo+yj%7?dldinQKEcAH^Y

eXhBW zk;cSq1<|-d*Ymkf9D^slXM0o;izjx^{%w})Sh7CMpC@D^V$L|Gro_~TMmu~Jt)Mfc zRMO;(*!_vg4rlWBZ{M>B=)-5R>_16ugVy+jt{U=eWD$s>l3PG?vS$=?2vv)shis=! zDu(b9$V1%A-TYhgUk&;H+)Xwr4{8mmN5rPM*!)MNehf6PsfVV|Z^-jNXU%&Bt4zxz zV|LqMc!^oyRA*DM>G9a{Yi4?9Su4Zow`QfY-1&LKakI5q4_Py=jusI)Z~pbM|BpIR zQ~iYS{~qrJ-sM%arErXuZ9U#=-@4YteKfe~tuPWZyryv zIMH9TIwEYszUnJ7>z}{dJ?xcX5eWLxY?eXz>23rEtS-S$OrN1$bLASji(TW+l{IoM z{WQ{tjaSBF{4-~Ncq(xmM>QfI%%gCD{(0W&{C${QI_Y<}7XQ@5!N*}SziWGJcIPT% zoUwXb$RC~1fd8%2VDUw71$B7v;931_?&^A@XH7kn#psr(-S?N2F`rn&eIw5?l5#sX zM|uDEsqo+ZUb?MVn_b7eFY~}OHuXW?G1-qhiC)>2<*m=%xZg%XbaZsd0==el|62mSy)|u*ICy>J>aK+)LyczkH=WvmYEv7rl$nwGGKA945_L9F)Mx{oiZyFK3tLxZ#d=i@_YV z`pK}ts1V0nzP?C#QkI3IwjZVWm1$9%znhZ1e>!=pU7y^snj^CR`!TV){8e;2ggP$! zahPA(9+%zqw&^s{zS=}0Dfon@=e0Kk3ma>j-@L?Hm?QJ+W1^>I?$n=pin03~ZjR?oY9H zE|z9G-68L^;62h&6vvI*t1Rnvci)Cig`y4|oy+>f%0#q_o;&71@w@dryRFdIfqg+N zjC-FJnEl>Ord<*9nsPk`uhz8Y?}mbupSmCEG|Zy9gsMB|)KqI#EKz4u9#a|mzJ0vq zcx<{6&zGH#=oY__yeHGW(OB3hTCqj18$C?-uB${2?cU9P8(Uw-m0w#D!Ov|Iqg(G2>BuCj24Ydn{<5CFTc?%awjfI(vrLl3!aAd&c-u zJ`tjC57#l$)7czvO>`&3cAQZ;Ylgnhk5OHFdxyB)7+g53oK;}{e>Z>I{CTs>ti;3b zY`2?zGKLMhO4`J1ou)=dW6t$feKt{JvCOFgyIJVl zMccd9HIHWu@i@P>1YH$8FDB!&!wCD?Sm$=wtD&p@#{Dk$yTH8buOa<)ScbVy8>$p* z>$L8-a|}J_m9|;~yZ@Tn^_JVQ52in)u}9Z>)Ny$XB)8+bzq{5O)_OVPuq7YF&(n#9 z7Vme?Ip@0h)pgc6H)qbd?YXV(Ic|+~YqV=E=svfMm`ncN+53ZdC*5GK8PiOp=McJ) zo}P8hxSeJ^B;#B!?yDEO-j-{{bOjjtwoI+aKBTS>J*U1)y@>0>?eyVcxaOL0Urm_4 zC)a^PS}(n}OdUwXlzrIo3hA|W@6f%&6xUvZdGwV1&*^^fJ_aU^cs_AF;$1Jc_2Til=Gt(KHXQ$+TnCO{5tgb0Q~QTJV(KS# zBg!kd_pdhee!gAev&Km08`dn{Pu)m#UD&;HrQKq~x-efGT^}0z%EzVflc{;INayF> zNzAmK4s=d#&&jU$<2)?$&+eEX4|R5Vy7JPO%G^`UQ`m0xZi{+M#&BFddQ2w7WRA}< z*L6d>Zv6XkT~}tl-7!C1_dzlYk784P63u3{h_2OKs~KX;N7rgWt66_;V3Jj}JU1PJ zVLwQZVR}DqnOk~?Gi*K#bE|R4Y8<=%xy?A1`+t#LNMFQ4dy^`VONl`IOF9RL27Z+D z|7`Z>{A-pEtKU`De#>6B^4Pqk8+kMTBkzfM0N&lOOZLol-H@(32G3mMZKv^u-jVCQ z)7EOSun1|w;>%aZ<;JHoH*uw z+895ryau|jX8bN6=j*F=zvn#e?E232T^Z$ehwHns`tDFXbDg)l&dcAC>pkOn`8apI z*A;_yUFW*4jBLBZbzPsXJ0!PUzm3;#UGK$pn(?`OoS#n9eq;6I!mI^$vAp$(Uy^h5 zZn-k5^$yo&L7N?eRj$W|^w`iFaSb+><8$naODjWkPS6+0X=1C~i5AltUeu8=50AQ% zPx3dtbndOWejAT`*Ka|;&5v`g{f4yP?(fTWAPP?+F<)=WX^-u36h=9^qs z4=}AO>_(JNcgipKr&amiYd2`XvK zKs)hVKe~P_Bj4_D{kV&MJT&)QQ%<8P``(-DOj{4i$NB2a)Pp<|pHZWx#8y3O>Qypj zZ0jAa6WcoR@Z55pH%906zZchOWBESEiW&3%^Y_b+BvgHBt&Gn6cy6YzxQ25LHx}`( z;mR8B&`fiEw~M~(drPkU#;yfR(tbX(#rIOsojq=(KG^3X_3t3QO{G(xt$7T#xfa|- z3l6<0*Mz613B5XoeV>lIqfqy%+5cva!9&-Qtc*3aWdHkK%RVFzQkQ-yy~x2b-Cl$B zOVL>~UVAOalZ)SXUryF@c898CDQmL6cjW9`D?44gT{m4@*P{7KvE(tUoiphanZ&y3 zc{$I^jm5U-$bl-2az zdeqwO#PR5MJ2BXa$KjRhts%WN{7zhtjc5A&djHuad-(mjE^}Qr9^tObf-XBAw_KkM z>9g{Cah*1v@$=MaEK(e2tUXuIuJP>-BA z&&IOsFB|9C+<4{|<&Z_W-CF3@L zvyqOAu@ZEyoIY1lf9#>DF}@M+42x+kwe#Ec8H{7lkX)TtYva{Z!zW#dKZtHZgFVTg zGl_{j${yLQ)Xuiu^;OEYG17JpItOj)wzH54Y{Nd*7^|_w!Y+9`57*1Xm(54feE0Il zb>H;5FG$xpwmy!1lNJ4=*p_Zr-s}+v$u(M#s&nczIQ2#Bo)@XXx@e+eb-K~kqTR+w zPrKaJ5>zjks_$d4$!F@4IhkgrZitB;f=`|g8|SOV@8TE?^Z8Cw@r&B2$0lBgo?;(N z@?95FRm^v)hd&FK&t#JNomW;h67q_V@%EWle1wXRxiHOj+>nmj_AR;g8^0RNuj<2Q zVzE;cIW%I`*seD90DTx@%jm)z(UxBI=sIvb>Rks09XKz(xh5RaguA^f*N5X*hWYA4 z{Jyis_hafZF-*Kf-9`FRK9O0|Nz8S-OP!%(7`pA-a*mz?N85Jkb2FpMJHFFw!MS7s zv=^RE`B$mqK9|2gHg^6rF>22_{Ar8H$T|1ss|An6FxPrxv|j1$xR%SA*8hD89L(b~ zA!bu=#~079=UqOo>rP$Q9fN1C@wU@=L+{A-Uca8puPjmTJxDYr%sF@6=d(_7R1bak zY(zU75j=@}T|E@nT>tH-|MK_bI&f$WNUzOL2a;zeQg_$n9jHFLkSshI2zG$fyu=rY z=~1h3x4CWZ@;t<&M1Rk-y@Yp-eQwvczWe)fo~B$J`ZhnFT86kU|8%zb&`eEXXI8J7 z@tT<-bf?$cN)1+OnyaEJo5&~qVr1s=|E}Z=J((XwLsGfzY&)D!Sb96I;ZkM~eVd<# zE4|&d$Y&xO?cEk%g+;fGwU<^mb;r%}8I~!+p5)(q z6o#f1ob>tmWWMg14!gW5=jM>DmtLEn<#&kc5|8?KuURnMQeiP{>R(Dcx<&!`qs0 zto&}Ae<{a?zRiz+DeI_O#>QlFtaC11a}HCd)&D-6XG6?NuPupZFTypA^n0edEA!UR zh#)!VMvDKTZ}a2EqeK>OlFF#`ou5fwjXm95BOOB{jeR@L!6DYA*XGATc1@yIpWSe} z=L$Ldj={e2dvV^S+#32eKi)ap$Y`7bm{R8bXcpnH+~!6lX`ufT3@PVn=FC3}x@>Pk5AGln+g96Md17 z@`vcdnBTE|<-BvPi);OF;o-Zz{N#JHZ8bIZP)yrS5B0xi?PPhDeimJIohQzdAx&b} z{=50}=Co!k<})*$30+LcrF0A{%)5lGQ{znHTJ0{ue7?|-9Tujlc~tDUk!O1o$6(ZY zx`l~OJ&DipD6?4}zDKIgn={O8VWQb*>ELZM=-uY;;+yEob1$Dl7mn??qQ4nt>P{?L zL$^FFvY&+BZGI6+{VEbd64ohA|1`a0MBv|=E63UM*>TREd1aip(VfQZ9qX(HiuL!7 z^~6IyJu4(@AslZw2sCjSzkpGyH-t)k)HOT z@AiJ&&N5%Vd^}WCtM)rzo;9}Hu2|be2baSi_xwwq{~_MIv#2XFma+&xGT)W+7#hbJ zQ)0}nI;ZOmd-n2B^OK!zsnvGsURM{}To0A?&{%KPbyLcx;cwgfL)}r;T=!^{nYT)% z@^h2jA(}wk;iajTd1)fgcXB0kXS+2wI#8wqVEi(_DWJ(1>*4KDjKCK_+X z5+<+mKTX!pJP;s3U54 zeT=VezgF%R^T^*5>q+;V*gMHfY2KVEzW4`Pr%u%NsX22aNYQ=TsX%4*^|`xa<*Av! zAW>=*ka8|l=TOX&;m`Bq5IuUI<(;y#mu7UChMljf^b&t;7^XAruQ$JaM+5yK%d=5- zTba7#($A(TB2D4^93rS+7{9G)m#j$o=;A8#@;d1IwHJcdq2`yJq(t=2KqC zpQ}|_Lfw)$26ERE;oN;i?|xfn;uC+9x1&DX7hE|a`C(47t5N8eLPRIF!;=j zV7$=zM{wdN7-t>C-1K#I*k6pV&e3t3NNj3%mcV(LlSzR*#2u_w~lS$2^XqJvaILUK6ryUsJfjoDSli z$LXJR1dl;5?~9xt-Ne)s5V>%?9>cm=6JD(j3tN}{0xz1F*;#|bPN3S^v(s#55>ms(!UT_PjqL>xz( zuM4+kIU#)_SfCMXev`Tk#V^%K%hS{Cr%7wBx+VnqDmm=k$5+dqK9PKlwd#tdcv8Dh zYj(~Aaa6wHnWM*^8_ZqHO8HJ!%6N@9YwGEAit@R9)+w3nf5@t-RS)0f8(tDstYmpF zB$q&qk)m09(7*t?U;mByqgvy%Nahd{yDLh}84`0~_;Z;dOv-o@%!Zl-u&uFKJS6lW ze7O={U^6gpL#J(EKX3=U0rwB`4L0%n;7Zr;m_ORPDnj3He%|~f&)+4hc!h9e4x=%? zIxRB0(H5__UGKI1J{_O&J8FOat8g8uX$35v!@uMky*q2HqG{u2XzfgEz=)l8VbWGq zu4`<-*3@{7K5d+y?;)9Etih)o%i0Fx)cj)c665MdHcYF#a{1-iCh ztl4s1iOj}TO^Fpjb>pccIn46KUiv0{Ci0D@Vb5)q&)LQ#gbiVmaV)nH+kd7emh-9u zn-h~q)ijoDnT}Jp8+5WPdP!}lU8UqW??-j}${}&y_6r^1?M!=FN{;Y0j{DC{i*W4$ z!h()_Db^cx+g2Wq-F~FDuavP%E-6?D=uqrI{9$TR^6#v-I^ABitnH$G*owyd|0@3; z|6gL$GP~)kJP~<>^#A)9Xgb|Go3`fZ&rKNbseRJjKG{b{@pK`dUc@)S=RS3Rtn~cH zKd9Gk zZd@;v|F-$_V;YHfMU>l8N3u^lNZ47{wjKJ?!0$D zv&Kl(+0@US_LcdtNh9FoeXyCa(6&Pd`FFIM>m;J)aEQpd>7;Emm`U;&OgdfvB-JPN zY`>{^L@goJuS`d!4*IJzOQg`nELNSiw46O{ZPRyVTP@UOjZKGpqN7>~&hCnFO>G=E zbv-l0hH)}czgD#+>8$JHSo{1MSVv^ya}$HdqWtDe+lpzq^qgI77WJJuMRrkPXSx3+)D=z> z`Pn9dN90ta5~-}5Iek27pFc(BkUt5X1oUS*f6|;@h?gsWx+LZ-YO|&9%qg;nT&`AJ zaMWG-oJYev>Xw-^sgF19^QXxq>XJOhHx%Q0YWzlLN}CaVXHJnR)agCRA7&5HWn}x9 zI(LS+(h|!MJ+@u;gMzG_ zIek27pFc(B5I=bNJ_SK{Qg974q=DMxoZ0ohmt9QnzZHJ1n^kj@kF#mcZ2Ga6P4t(35#Iy5 zYu${Rql}zYb7s{~y{rl|jdiCPjf{}L+v}_=B7%<+t6)bpekc16veTb;?)K$@b7pr-_o~UK>zYI)s5}?$7@07i z)kj8hIyUK^n#2K#th4XnTJ+I&-A(DLqbry4NcT1UCOI|DS{#EF>(MZvzr4RYHVP9b z*>#&}L2fDN4g&8szsO$Q?*;L^Ju*Ch+x&U+r%hiryL`TD@4iy@Xg3>dtQ_(u2c_(7 zb0JJ8r-lV;xwbmbKkTPCa+%f~su9k`n$ZfK`z9lbCdM$ zy=ui3VgHf{D|q}EWxUf>wwzwr!ua=@zCxqG0ruDg^$C2p2QsS39&Kq9a6Aaus*JuNFuh#b7NoH zE=Bo{1?m6AA=h&J+IaT_t-@u;LiOg-tLYP+$zA%KZ3+0ymNGiK?xBP@Jm1(~Nf1lX@+T#!nQY0(5QVaR?#x=t-$mEI z5l>jx-{+Qk;8^+7R8~)HcebO2*sB+U?r(x^Fh%tHV)J`r0b|$OY!dF7KlbUn``maR zx5ANIL9ZhHMc50EpPHx3pZHv^s7Hd|Lx-XxwT#bj$MKN*e{cTJ&Hvl1>eQ>ydr98% zMOJ#&Y!JPSY`f!jmyGaS?3C?SSRx6;Ni>7b>?d+FzP^SvrSz$*3PA0nH(B{L-~KP* z|J5HEHqWtakJDT)Izmgh4A&i@+h@18N2vC$FK0@TYx>jC^l^^jOl(f_t@onKi8Hu{ zuTkgc8eZe^Y5d0QopbSk!X65Gk7e?5d{O~J4G~`Pvs<29)T6py-&d~>t((*myVoA9 z$Z?+>le=M(2qE3M*AgdW?F`?w4u@;j)uxfrtLBXLRiW>x9oEhc=1{P&u6s%2P|ID8 z+(RMvS)%()OR>&CYFw7k8S5U?(mkfIs*YP_br-OUCO*pKEP78pjz4})^>uZ(-ip)$ z7>m_*mj-ct`uy+2qF6%3fUmIYTVVrg^O_mAUdOMrZoMAHdi7|kM^m?9Mg(&A;Ru)sLRtABz2N>uIG~0D4)1U0_)S z$F1YGO9E3?{cVd|R)zn_TA=HLA=TH|uJ_b;&TZGj*sfp|dqiiAq?1N`ZS6y6`@G}z zFnDFA)AJwoD@=6!Dpu_OBm34kTHC1XJL70Q3|dnk?M&9$w3EXz+lSEhdB^M&nALrh za$I5sJy<$jAn&Y8e~(+ZZPfOkaXjyj=k3rL_k5FxW3}NR4`hd_T529h{w$Qxb5^VT%&FITGjgwDz?mo5@>6l{HM0=`9 zcSb6o$?|{5PcjQ;n|I)h%2_k?{jiMsBxoRWo=+;)N_(69Gk@=4X)GEicW2HJQ}Szv zVGi}Cm$C|`D|Oq7$!)(E;hF9)|Ip~Fuus9+|KHx3?nZ87VYGe^keBHEjmPN($pCqm zL133x#BLidyO#|5-RB-&Gm@xd=vX%u-NyiBk$CWAii?)X%;k)50s=V?*GZVt=LLn|CWD zP6)Y17oM`!(L_?SpO5eARh`|=Scm3Wur>b(i?@`iuIqVu>!vc*F#A)sHmamKsy17U zT+P{S#a_JBRkIFyW%H4Vp{k1Ij%?lXupqatMUl;d_k|OJx~=jU^wo2_OC?);pPbDW zQ9@p4O!5_<3b{evuh0p7@3EHt+NH0i_vX=G3lfRLqZbjjV$}U6ZQby108)-|Z`7rypI>)~*Nx)i9}qK})ef%_O^ATFD@oNrV`R~Jp` zy}9X1D^{g;qGVs0lwrDQ`75X0xqdYNI?=JjWL?-PnAgY=c`038*K?D{99_N66q!v; zzMcOBjTL{bN0N7Wbn22&lCMefEot0EXcv*`z4ss#|KQnctg8sEXB6(YPr9F*KA6-4~Xacad-Sz;`97$|8Ikj<=j59U+~*M+duY_Yr8r;opRjx*L^EP z=HM+~-ESU5ZAxa>^)XX>cs0SRTIp%nV}|dLZ()o|ptoVyBo2w{H0;FetbO*_dL4Gr z*hOD@@0e+Hd3h4#B^|z~Ayi}HOlw%h0bM*hUOlJl!}KblGPyEN$)_*t;2kOhq8E)YUDc+d52whEWO z+N*#0w3;2(^P`O$F;;l1uu$1usC>N*^|6SiL*j~&NI?EI&q!H^@pX%DquA-oS!^-d zpPKx{Yw)%8y?tjDlIhBIsr_7Qb(3GC@rnFeeUJT!eTf=_^LXekH@_YLH`Tvr9?39tCL|{!S^3ww*sHFazPc11 z9dez#D(0`7-#5P*DPz8ubgr_M-lVrSk99x0z5e~gV4l7B#IhOm6IA+DV(W17jF!hK zl1n&Is&p;JB9 zTina(1VsHY}>}*DN`Oc?xzgY~PyxeG@cJoybh3cc(=6pA#{i5?H@ppN!s` z_4Z&|Inuejmhfz$k8{u0GEou46!N6_o{R5s^CQ;lY^U$6k9D^N6GC5^%|M}YUJLTlt%x?rzVSfPK)}|IuO*yU#!;IOy5~2t4LcIjoCRd zj*(28rj;Z~Jf9@~YL?Eh*%9X{)%EN3aqc<7UXz2kEY3%_Au2Lf)4`JF{7SNVPFX!{ zUc`2t<@BBPu}!SWv-!WM5Av6J!u;HecMJPjRL@Cu-x(3lDZTaUHS+vmJl}@s6wapk zTvqgr?QZij+&&B9w$5q#&ic6Z>|ElhcR`DO2+<_S0?wyoReSB6F|~om^41)2^0s*z z`@1L(CEX#~uMaN{r71HX=3QdNj)*#?o-X=3jY8==BjUN8!+2+XvfOpeJCoZn>ZCbm zK}63-bpJUK(~;cv*L5;Y{1{cL3#(cL&r5LA42aiuPUD^R@k$keC(G9G+E+S@9@G$(S#x6XoenqxLmFW9b*`k>vdAvRNmh zEA}6t@*Q%+`<*)7#DdXLQC9FYR&f9E7pr;Jj@t&Vu9Y!bvvlN~j$9pMF(>8<`G}_L zmD@iDAF*WO^fIwN=3-Jz63-l~Tb3&Tpsjj745zYWGu*vacK&4cs{2Gd+Um@--p3Gy zB{@1pwi0r5e{&?}*UmhW_bgQVz{gasFwq>xBdVvMdgv^OTXFk2$YJ_@BM+oAPop#A zl}Fzx##!vGojr1RSp{%MhJkkp^Lkib13sSBe6pwLLnb<>p>xbkh~KsITRn|ohmZcJ zbKC2Qw}I+%_XeH0PIcxwZZ5>I7%rcvdS%MkYXy2C`objhLy*Ag05M$-Zu1UOM$OI(3!jaWf;n#rH72rD4ybVdr^fCd9A!E%RHJ#H^2K zC&zAIqIVv8`^48IvPOPZmX6O%ZL?J?3IkOuA0& zxwtWw!}Iobb}oEpe9GdTN=J6xCT2pnkG?n+r=B}stP#n}Y2;-(&SG!v?7>|5G?thP zubIyK9zCU+72h_erYlTYL4Ei)unSM5Z5wUkymj> z$h`LPmOP8Zw7(vAO(rVw5ub4VD%T$EbIwVM{+VKO3MTX8E;ieljCa<-Cfek)>6~=h zirp{iwne^cIf`5-nNyvWL|TW;g!qk=w!f}}U*zc*WA`c8i+FeN?`)0Ti(p0Sl#{c_ zX(9n5x&7uq%(k-{@2rE_FCjNWUf5}=jH4{>B3l$_Om{Qk%eT+Qf1F7r9A2&aX$BZO<3yOYLUlyNQad~8okM2{ zskXI~&?mD5u>i4CSWi?4=Jb<#3|NVDc% Date: Sun, 26 Jul 2020 13:37:56 +0000 Subject: [PATCH 405/589] Update config to enable docfx v3 --- .openpublishing.publish.config.json | 875 ++++++++++++++-------------- 1 file changed, 439 insertions(+), 436 deletions(-) diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json index 5ba3dde324..3e1c1d1d11 100644 --- a/.openpublishing.publish.config.json +++ b/.openpublishing.publish.config.json @@ -1,436 +1,439 @@ -{ - "build_entry_point": "", - "docsets_to_publish": [ - { - "docset_name": "education", - "build_source_folder": "education", - "build_output_subfolder": "education", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "hololens", - "build_source_folder": "devices/hololens", - "build_output_subfolder": "hololens", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "internet-explorer", - "build_source_folder": "browsers/internet-explorer", - "build_output_subfolder": "internet-explorer", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "keep-secure", - "build_source_folder": "windows/keep-secure", - "build_output_subfolder": "keep-secure", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "microsoft-edge", - "build_source_folder": "browsers/edge", - "build_output_subfolder": "microsoft-edge", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "release-information", - "build_source_folder": "windows/release-information", - "build_output_subfolder": "release-information", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "smb", - "build_source_folder": "smb", - "build_output_subfolder": "smb", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "store-for-business", - "build_source_folder": "store-for-business", - "build_output_subfolder": "store-for-business", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-access-protection", - "build_source_folder": "windows/access-protection", - "build_output_subfolder": "win-access-protection", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-app-management", - "build_source_folder": "windows/application-management", - "build_output_subfolder": "win-app-management", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-client-management", - "build_source_folder": "windows/client-management", - "build_output_subfolder": "win-client-management", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-configuration", - "build_source_folder": "windows/configuration", - "build_output_subfolder": "win-configuration", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-deployment", - "build_source_folder": "windows/deployment", - "build_output_subfolder": "win-deployment", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-device-security", - "build_source_folder": "windows/device-security", - "build_output_subfolder": "win-device-security", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-configure", - "build_source_folder": "windows/configure", - "build_output_subfolder": "windows-configure", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-deploy", - "build_source_folder": "windows/deploy", - "build_output_subfolder": "windows-deploy", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-hub", - "build_source_folder": "windows/hub", - "build_output_subfolder": "windows-hub", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-manage", - "build_source_folder": "windows/manage", - "build_output_subfolder": "windows-manage", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-plan", - "build_source_folder": "windows/plan", - "build_output_subfolder": "windows-plan", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-privacy", - "build_source_folder": "windows/privacy", - "build_output_subfolder": "windows-privacy", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-security", - "build_source_folder": "windows/security", - "build_output_subfolder": "windows-security", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "windows-update", - "build_source_folder": "windows/update", - "build_output_subfolder": "windows-update", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-threat-protection", - "build_source_folder": "windows/threat-protection", - "build_output_subfolder": "win-threat-protection", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - }, - { - "docset_name": "win-whats-new", - "build_source_folder": "windows/whats-new", - "build_output_subfolder": "win-whats-new", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": true, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes" - } - ], - "notification_subscribers": [ - "elizapo@microsoft.com" - ], - "sync_notification_subscribers": [ - "daniha@microsoft.com" - ], - "branches_to_filter": [ - "" - ], - "git_repository_url_open_to_public_contributors": "https://github.com/MicrosoftDocs/windows-itpro-docs", - "git_repository_branch_open_to_public_contributors": "public", - "skip_source_output_uploading": false, - "need_preview_pull_request": true, - "resolve_user_profile_using_github": true, - "contribution_branch_mappings": {}, - "dependent_repositories": [ - { - "path_to_root": "_themes.pdf", - "url": "https://github.com/Microsoft/templates.docs.msft.pdf", - "branch": "master", - "branch_mapping": {} - }, - { - "path_to_root": "_themes", - "url": "https://github.com/Microsoft/templates.docs.msft", - "branch": "master", - "branch_mapping": {} - } - ], - "branch_target_mapping": { - "live": [ - "Publish", - "Pdf" - ], - "master": [ - "Publish", - "Pdf" - ] - }, - "need_generate_pdf_url_template": true, - "targets": { - "Pdf": { - "template_folder": "_themes.pdf" - } - }, - "need_generate_pdf": false, - "need_generate_intellisense": false -} \ No newline at end of file +{ + "build_entry_point": "", + "docsets_to_publish": [ + { + "docset_name": "education", + "build_source_folder": "education", + "build_output_subfolder": "education", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "hololens", + "build_source_folder": "devices/hololens", + "build_output_subfolder": "hololens", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "internet-explorer", + "build_source_folder": "browsers/internet-explorer", + "build_output_subfolder": "internet-explorer", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "keep-secure", + "build_source_folder": "windows/keep-secure", + "build_output_subfolder": "keep-secure", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "microsoft-edge", + "build_source_folder": "browsers/edge", + "build_output_subfolder": "microsoft-edge", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "release-information", + "build_source_folder": "windows/release-information", + "build_output_subfolder": "release-information", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "smb", + "build_source_folder": "smb", + "build_output_subfolder": "smb", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "store-for-business", + "build_source_folder": "store-for-business", + "build_output_subfolder": "store-for-business", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-access-protection", + "build_source_folder": "windows/access-protection", + "build_output_subfolder": "win-access-protection", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-app-management", + "build_source_folder": "windows/application-management", + "build_output_subfolder": "win-app-management", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-client-management", + "build_source_folder": "windows/client-management", + "build_output_subfolder": "win-client-management", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-configuration", + "build_source_folder": "windows/configuration", + "build_output_subfolder": "win-configuration", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-deployment", + "build_source_folder": "windows/deployment", + "build_output_subfolder": "win-deployment", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-device-security", + "build_source_folder": "windows/device-security", + "build_output_subfolder": "win-device-security", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-configure", + "build_source_folder": "windows/configure", + "build_output_subfolder": "windows-configure", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-deploy", + "build_source_folder": "windows/deploy", + "build_output_subfolder": "windows-deploy", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-hub", + "build_source_folder": "windows/hub", + "build_output_subfolder": "windows-hub", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-manage", + "build_source_folder": "windows/manage", + "build_output_subfolder": "windows-manage", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-plan", + "build_source_folder": "windows/plan", + "build_output_subfolder": "windows-plan", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-privacy", + "build_source_folder": "windows/privacy", + "build_output_subfolder": "windows-privacy", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-security", + "build_source_folder": "windows/security", + "build_output_subfolder": "windows-security", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "windows-update", + "build_source_folder": "windows/update", + "build_output_subfolder": "windows-update", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-threat-protection", + "build_source_folder": "windows/threat-protection", + "build_output_subfolder": "win-threat-protection", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, + { + "docset_name": "win-whats-new", + "build_source_folder": "windows/whats-new", + "build_output_subfolder": "win-whats-new", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + } + ], + "notification_subscribers": [ + "elizapo@microsoft.com" + ], + "sync_notification_subscribers": [ + "daniha@microsoft.com" + ], + "branches_to_filter": [ + "" + ], + "git_repository_url_open_to_public_contributors": "https://github.com/MicrosoftDocs/windows-itpro-docs", + "git_repository_branch_open_to_public_contributors": "public", + "skip_source_output_uploading": false, + "need_preview_pull_request": true, + "resolve_user_profile_using_github": true, + "contribution_branch_mappings": {}, + "dependent_repositories": [ + { + "path_to_root": "_themes.pdf", + "url": "https://github.com/Microsoft/templates.docs.msft.pdf", + "branch": "master", + "branch_mapping": {} + }, + { + "path_to_root": "_themes", + "url": "https://github.com/Microsoft/templates.docs.msft", + "branch": "master", + "branch_mapping": {} + } + ], + "branch_target_mapping": { + "live": [ + "Publish", + "Pdf" + ], + "master": [ + "Publish", + "Pdf" + ] + }, + "need_generate_pdf_url_template": true, + "targets": { + "Pdf": { + "template_folder": "_themes.pdf" + } + }, + "need_generate_pdf": false, + "need_generate_intellisense": false, + "docs_build_engine": { + "name": "docfx_v3" + } +} From 4f702f49b50634eb44e7698a0e80edb9de0a39a7 Mon Sep 17 00:00:00 2001 From: EfiKliger <45028856+EfiKliger@users.noreply.github.com> Date: Mon, 27 Jul 2020 08:17:42 +0300 Subject: [PATCH 406/589] Update get-machines.md --- .../threat-protection/microsoft-defender-atp/get-machines.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-machines.md index 75f9f0e49d..b62bd53c6d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machines.md @@ -24,7 +24,7 @@ ms.topic: article ## API description -Retrieves a collection of [Machines](machine.md) that have communicated with Microsoft Defender ATP cloud on the last 30 days. +Retrieves a collection of [Machines](machine.md) that have communicated with Microsoft Defender ATP cloud.
Supports [OData V4 queries](https://www.odata.org/documentation/).
The OData's ```$filter``` query is supported on: ```computerDnsName```, ```lastSeen```, ```healthStatus```, ```osPlatform```, ```riskScore``` and ```rbacGroupId```.
See examples at [OData queries with Microsoft Defender ATP](exposed-apis-odata-samples.md) From 4afbd1797d03d2c290a21e42aed2349387f93f4b Mon Sep 17 00:00:00 2001 From: Thomas Raya Date: Mon, 27 Jul 2020 09:55:59 -0700 Subject: [PATCH 407/589] Update docfx.json --- mdop/docfx.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mdop/docfx.json b/mdop/docfx.json index e6f79ff24a..abcead924c 100644 --- a/mdop/docfx.json +++ b/mdop/docfx.json @@ -34,7 +34,7 @@ "ms.topic": "article", "ms.date": "04/05/2017", "feedback_system": "GitHub", - "feedback_github_repo": "MicrosoftDocs/windows-itpro-docs", + "feedback_github_repo": "https://github.com/MicrosoftDocs/mdop-docs", "feedback_product_url": "https://support.microsoft.com/help/4021566/windows-10-send-feedback-to-microsoft-with-feedback-hub-app", "_op_documentIdPathDepotMapping": { "./": { From c509a4fa4c58a58e695ba5d198e83295a49566ea Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 27 Jul 2020 10:08:56 -0700 Subject: [PATCH 408/589] Update automated-investigations.md --- .../microsoft-defender-atp/automated-investigations.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/automated-investigations.md b/windows/security/threat-protection/microsoft-defender-atp/automated-investigations.md index 81ce65baaa..d6dd2ea36a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/automated-investigations.md +++ b/windows/security/threat-protection/microsoft-defender-atp/automated-investigations.md @@ -82,10 +82,12 @@ The default device group is configured for semi-automatic remediation. This mean When a pending action is approved, the entity is then remediated and this new state is reflected in the **Entities** tab of the investigation. -## Next step +## Next steps - [Learn about the automated investigations dashboard](manage-auto-investigation.md) +- [See the interactive guide: Investigate and remediate threats with Microsoft Defender ATP](https://aka.ms/MDATP-IR-Interactive-Guide)(https://aka.ms/MDATP-IR-Interactive-Guide) + ## Related articles - [Automated investigation and response in Office 365 Advanced Threat Protection](https://docs.microsoft.com/microsoft-365/security/office-365-security/office-365-air) From 8ddf20b2b809a841646ab41ff406694f89633d29 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 27 Jul 2020 10:10:36 -0700 Subject: [PATCH 409/589] Update manage-auto-investigation.md --- .../microsoft-defender-atp/manage-auto-investigation.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md b/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md index d1823bc880..9e3df15667 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md @@ -63,6 +63,8 @@ In Microsoft Defender Advanced Threat Protection, all verdicts are [tracked and ## Next steps +- [See the interactive guide: Investigate and remediate threats with Microsoft Defender ATP](https://aka.ms/MDATP-IR-Interactive-Guide)(https://aka.ms/MDATP-IR-Interactive-Guide) + - [View details and results of automated investigations](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/auto-investigation-action-center) - [Get an overview of live response](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/live-response) From f1f99036c766ff9c63394fbb225a1a95051e5d52 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 27 Jul 2020 10:33:54 -0700 Subject: [PATCH 410/589] Update auto-investigation-action-center.md --- .../auto-investigation-action-center.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/auto-investigation-action-center.md b/windows/security/threat-protection/microsoft-defender-atp/auto-investigation-action-center.md index dab80159ea..48ff761684 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/auto-investigation-action-center.md +++ b/windows/security/threat-protection/microsoft-defender-atp/auto-investigation-action-center.md @@ -158,4 +158,7 @@ When you click on the pending actions link, you'll be taken to the Action center ## Next steps -[View and approve remediation actions](manage-auto-investigation.md) +- [View and approve remediation actions](manage-auto-investigation.md) + +- [See the interactive guide: Investigate and remediate threats with Microsoft Defender ATP](https://aka.ms/MDATP-IR-Interactive-Guide)(https://aka.ms/MDATP-IR-Interactive-Guide) + From e285978ec45f4716deb742e260a74c6c021a94ed Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 27 Jul 2020 10:45:12 -0700 Subject: [PATCH 411/589] Update symantec-to-microsoft-defender-atp-onboard.md --- .../symantec-to-microsoft-defender-atp-onboard.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md index fa8115f0cb..cdf8766317 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md @@ -96,4 +96,7 @@ To do this, visit the Microsoft Defender ATP demo scenarios site ([https://demo. - [Visit your security operations dashboard](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard) in the Microsoft Defender Security Center ([https://aka.ms/MDATPportal](https://aka.ms/MDATPportal)). -- To learn more about Microsoft Defender ATP and how to configure or adjust various features and capabilities, see [Microsoft Defender ATP documentation](https://docs.microsoft.com/windows/security/threat-protection). \ No newline at end of file +- To learn more about Microsoft Defender ATP and how to configure or adjust various features and capabilities, see [Microsoft Defender ATP documentation](https://docs.microsoft.com/windows/security/threat-protection). + +- [See the interactive guide: Manage devices with Microsoft Endpoint Manager](https://aka.ms/Manage_Devices-InteractiveGuide)(https://aka.ms/Manage_Devices-InteractiveGuide) + \ No newline at end of file From cc5ddc63fd3e64101c6b8a280fee620956d11375 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 27 Jul 2020 11:04:45 -0700 Subject: [PATCH 412/589] limits --- .../microsoft-defender-atp/add-or-remove-machine-tags.md | 2 +- .../microsoft-defender-atp/get-machine-by-id.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md b/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md index e520b394a2..10de33a687 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md +++ b/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md @@ -28,7 +28,7 @@ Adds or remove tag to a specific [Machine](machine.md). ## Limitations -1. You can post on machines last seen in the past 30 days. +1. You can post on machines according to your configured retention period. 2. Rate limitations for this API are 100 calls per minute and 1500 calls per hour. diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md b/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md index 0348f58dbf..13be6a7759 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md @@ -28,7 +28,7 @@ Retrieves specific [Machine](machine.md) by its device ID or computer name. ## Limitations -1. You can get devices last seen in the past 30 days. +1. You can get devices last seen according to your configured retention policy. 2. Rate limitations for this API are 100 calls per minute and 1500 calls per hour. From 435762205f7b61455cc3af8993068e5e5eaa588e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 27 Jul 2020 11:16:41 -0700 Subject: [PATCH 413/589] Update auto-investigation-action-center.md --- .../microsoft-defender-atp/auto-investigation-action-center.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/auto-investigation-action-center.md b/windows/security/threat-protection/microsoft-defender-atp/auto-investigation-action-center.md index 48ff761684..cb7648e275 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/auto-investigation-action-center.md +++ b/windows/security/threat-protection/microsoft-defender-atp/auto-investigation-action-center.md @@ -160,5 +160,5 @@ When you click on the pending actions link, you'll be taken to the Action center - [View and approve remediation actions](manage-auto-investigation.md) -- [See the interactive guide: Investigate and remediate threats with Microsoft Defender ATP](https://aka.ms/MDATP-IR-Interactive-Guide)(https://aka.ms/MDATP-IR-Interactive-Guide) +- [See the interactive guide: Investigate and remediate threats with Microsoft Defender ATP](https://aka.ms/MDATP-IR-Interactive-Guide) From 5de2e6fd82713ba3ca3d462721caf99498597fc7 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 27 Jul 2020 11:17:02 -0700 Subject: [PATCH 414/589] Update automated-investigations.md --- .../microsoft-defender-atp/automated-investigations.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/automated-investigations.md b/windows/security/threat-protection/microsoft-defender-atp/automated-investigations.md index d6dd2ea36a..f0292e125f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/automated-investigations.md +++ b/windows/security/threat-protection/microsoft-defender-atp/automated-investigations.md @@ -86,7 +86,7 @@ When a pending action is approved, the entity is then remediated and this new st - [Learn about the automated investigations dashboard](manage-auto-investigation.md) -- [See the interactive guide: Investigate and remediate threats with Microsoft Defender ATP](https://aka.ms/MDATP-IR-Interactive-Guide)(https://aka.ms/MDATP-IR-Interactive-Guide) +- [See the interactive guide: Investigate and remediate threats with Microsoft Defender ATP](https://aka.ms/MDATP-IR-Interactive-Guide) ## Related articles From 3a867123c84be107f1068d4de3fe1c3f57f166ab Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 27 Jul 2020 11:17:33 -0700 Subject: [PATCH 415/589] Update manage-auto-investigation.md --- .../microsoft-defender-atp/manage-auto-investigation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md b/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md index 9e3df15667..913a4d215c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md @@ -63,7 +63,7 @@ In Microsoft Defender Advanced Threat Protection, all verdicts are [tracked and ## Next steps -- [See the interactive guide: Investigate and remediate threats with Microsoft Defender ATP](https://aka.ms/MDATP-IR-Interactive-Guide)(https://aka.ms/MDATP-IR-Interactive-Guide) +- [See the interactive guide: Investigate and remediate threats with Microsoft Defender ATP](https://aka.ms/MDATP-IR-Interactive-Guide) - [View details and results of automated investigations](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/auto-investigation-action-center) From 465b3619e240e9b2c8e4ec9a2b82e65f0e676f8a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 27 Jul 2020 11:18:11 -0700 Subject: [PATCH 416/589] Update symantec-to-microsoft-defender-atp-onboard.md --- .../symantec-to-microsoft-defender-atp-onboard.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md index cdf8766317..5f86727717 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md @@ -98,5 +98,5 @@ To do this, visit the Microsoft Defender ATP demo scenarios site ([https://demo. - To learn more about Microsoft Defender ATP and how to configure or adjust various features and capabilities, see [Microsoft Defender ATP documentation](https://docs.microsoft.com/windows/security/threat-protection). -- [See the interactive guide: Manage devices with Microsoft Endpoint Manager](https://aka.ms/Manage_Devices-InteractiveGuide)(https://aka.ms/Manage_Devices-InteractiveGuide) +- [See the interactive guide: Manage devices with Microsoft Endpoint Manager](https://aka.ms/Manage_Devices-InteractiveGuide) \ No newline at end of file From 984d8a0d57a441745d2a63f0ce6f0273373c4084 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 27 Jul 2020 11:35:18 -0700 Subject: [PATCH 417/589] edit --- .../microsoft-defender-atp/add-or-remove-machine-tags.md | 2 +- .../threat-protection/microsoft-defender-atp/get-machines.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md b/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md index 10de33a687..1137c1dfba 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md +++ b/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md @@ -28,7 +28,7 @@ Adds or remove tag to a specific [Machine](machine.md). ## Limitations -1. You can post on machines according to your configured retention period. +1. You can post on machines last seen according to your configured retention period. 2. Rate limitations for this API are 100 calls per minute and 1500 calls per hour. diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-machines.md index 75f9f0e49d..8cae4353fb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machines.md @@ -31,7 +31,7 @@ Retrieves a collection of [Machines](machine.md) that have communicated with Mi ## Limitations -1. You can get devices last seen in according to your configured retention period. +1. You can get devices last seen according to your configured retention period. 2. Maximum page size is 10,000. 3. Rate limitations for this API are 100 calls per minute and 1500 calls per hour. From cd92ce784e74c29f003a47b4d24996ac843af138 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 27 Jul 2020 11:36:52 -0700 Subject: [PATCH 418/589] device --- .../microsoft-defender-atp/get-domain-related-machines.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md index 8efb45915c..b6882a07d8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md @@ -28,7 +28,7 @@ Retrieves a collection of [Machines](machine.md) that have communicated to or fr ## Limitations -1. You can query on alerts last updated according to your configured retention period. +1. You can query on devices last updated according to your configured retention period. 2. Rate limitations for this API are 100 calls per minute and 1500 calls per hour. From 2af083c242344583c84e0c171373ed3c8b5c5575 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 27 Jul 2020 11:38:03 -0700 Subject: [PATCH 419/589] devices --- .../microsoft-defender-atp/get-machine-related-alerts.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md index 8d2294ab5b..7a09d3fa92 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md @@ -28,7 +28,7 @@ Retrieves all [Alerts](alerts.md) related to a specific device. ## Limitations -1. You can query on alerts last updated according to your configured retention period. +1. You can query on devices last updated according to your configured retention period. 2. Rate limitations for this API are 100 calls per minute and 1500 calls per hour. From c0b96753ccb1d3a0c8c34c11037646bc4b8399fd Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 27 Jul 2020 11:45:59 -0700 Subject: [PATCH 420/589] close block --- .../microsoft-defender-atp/add-or-remove-machine-tags.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md b/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md index 1137c1dfba..8b0046c9e8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md +++ b/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md @@ -90,5 +90,6 @@ Content-type: application/json "Value" : "test Tag 2", "Action": "Add" } +``` - To remove machine tag, set the Action to 'Remove' instead of 'Add' in the request body. \ No newline at end of file From 0eba33819816ae39adb5844a271e15275faa05fa Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 27 Jul 2020 11:59:19 -0700 Subject: [PATCH 421/589] Update security-operations-dashboard.md --- .../microsoft-defender-atp/security-operations-dashboard.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard.md b/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard.md index db1b08907f..6fb6a53bf7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard.md @@ -100,7 +100,7 @@ You can view the overall number of automated investigations from the last 30 day ## Automated investigations statistics -This tile shows statistics related to automated investigations in the last 30 days. It shows the number of investigations completed, the number of successfully remediated investigations, the average pending time it takes for an investigation to be initiated, the average time it takes to remediate an alert, the number of alerts investigated, and the number of hours of automation saved from a typical manual investigation. +This tile shows statistics related to automated investigations in the last seven days. It shows the number of investigations completed, the number of successfully remediated investigations, the average pending time it takes for an investigation to be initiated, the average time it takes to remediate an alert, the number of alerts investigated, and the number of hours of automation saved from a typical manual investigation. ![Image of automated investigations statistics](images/atp-automated-investigations-statistics.png) From a373eaf1b5a81b8d78d4732faf03b4805807ad7f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 27 Jul 2020 12:03:12 -0700 Subject: [PATCH 422/589] Update symantec-to-microsoft-defender-atp-onboard.md --- .../symantec-to-microsoft-defender-atp-onboard.md | 3 --- 1 file changed, 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md index 5f86727717..d00f9c4634 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md @@ -97,6 +97,3 @@ To do this, visit the Microsoft Defender ATP demo scenarios site ([https://demo. - [Visit your security operations dashboard](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard) in the Microsoft Defender Security Center ([https://aka.ms/MDATPportal](https://aka.ms/MDATPportal)). - To learn more about Microsoft Defender ATP and how to configure or adjust various features and capabilities, see [Microsoft Defender ATP documentation](https://docs.microsoft.com/windows/security/threat-protection). - -- [See the interactive guide: Manage devices with Microsoft Endpoint Manager](https://aka.ms/Manage_Devices-InteractiveGuide) - \ No newline at end of file From d401f713cbd27e4634911c9e31a67e76e78981d2 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 27 Jul 2020 14:52:11 -0700 Subject: [PATCH 423/589] Corrected code markup --- .../microsoft-defender-atp/get-machines.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-machines.md index b62bd53c6d..855fce68fd 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machines.md @@ -26,7 +26,7 @@ ms.topic: article ## API description Retrieves a collection of [Machines](machine.md) that have communicated with Microsoft Defender ATP cloud.
Supports [OData V4 queries](https://www.odata.org/documentation/). -
The OData's ```$filter``` query is supported on: ```computerDnsName```, ```lastSeen```, ```healthStatus```, ```osPlatform```, ```riskScore``` and ```rbacGroupId```. +
The OData's `$filter` query is supported on: `computerDnsName`, `lastSeen`, `healthStatus`, `osPlatform`, `riskScore` and `rbacGroupId`.
See examples at [OData queries with Microsoft Defender ATP](exposed-apis-odata-samples.md) @@ -51,7 +51,7 @@ Delegated (work or school account) | Machine.ReadWrite | 'Read and write machine >- Response will include only devices, that the user have access to, based on device group settings (See [Create and manage device groups](machine-groups.md) for more information) ## HTTP request -``` +```console GET https://api.securitycenter.windows.com/api/machines ``` @@ -77,7 +77,7 @@ Here is an example of the request. [!include[Improve request performance](../../includes/improve-request-performance.md)] -``` +```console GET https://api.securitycenter.windows.com/api/machines ``` @@ -86,7 +86,7 @@ GET https://api.securitycenter.windows.com/api/machines Here is an example of the response. -``` +```console HTTP/1.1 200 OK Content-type: application/json { From a8bbab9d5c4958afa9a06e04db8fcc6610474c97 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 27 Jul 2020 14:55:34 -0700 Subject: [PATCH 424/589] Acrolinx: corrected "Remidated" to "Remediated" --- .../microsoft-defender-atp/security-operations-dashboard.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard.md b/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard.md index 6fb6a53bf7..1fdb856b5d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard.md @@ -104,7 +104,7 @@ This tile shows statistics related to automated investigations in the last seven ![Image of automated investigations statistics](images/atp-automated-investigations-statistics.png) -You can click on **Automated investigations**, **Remidated investigations**, and **Alerts investigated** to navigate to the **Investigations** page, filtered by the appropriate category. This lets you see a detailed breakdown of investigations in context. +You can click on **Automated investigations**, **Remediated investigations**, and **Alerts investigated** to navigate to the **Investigations** page, filtered by the appropriate category. This lets you see a detailed breakdown of investigations in context. ## Users at risk The tile shows you a list of user accounts with the most active alerts and the number of alerts seen on high, medium, or low alerts. From bde3b5e61b11a8e072333859d5c18d6cef35c1b0 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 27 Jul 2020 15:23:22 -0700 Subject: [PATCH 425/589] Applied types to code blocks --- .../microsoft-defender-atp/add-or-remove-machine-tags.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md b/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md index 8b0046c9e8..5db1d001ec 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md +++ b/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md @@ -50,7 +50,7 @@ Delegated (work or school account) | Machine.ReadWrite | 'Read and write machine ## HTTP request -``` +```console POST https://api.securitycenter.windows.com/api/machines/{id}/tags ``` @@ -83,7 +83,7 @@ Here is an example of a request that adds machine tag. [!include[Improve request performance](../../includes/improve-request-performance.md)] -``` +```console POST https://api.securitycenter.windows.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/tags Content-type: application/json { @@ -92,4 +92,4 @@ Content-type: application/json } ``` -- To remove machine tag, set the Action to 'Remove' instead of 'Add' in the request body. \ No newline at end of file +- To remove machine tag, set the Action to 'Remove' instead of 'Add' in the request body. From 0c9482a45ade7a9dc601638e91725c31bfaa3cc1 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 27 Jul 2020 15:23:47 -0700 Subject: [PATCH 426/589] Update get-domain-related-alerts.md --- .../microsoft-defender-atp/get-domain-related-alerts.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-alerts.md index 93ffb99e7f..d03107736f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-alerts.md @@ -48,7 +48,7 @@ Delegated (work or school account) | Alert.ReadWrite | 'Read and write alerts' >- Response will include only alerts, associated with devices, that the user have access to, based on device group settings (See [Create and manage device groups](machine-groups.md) for more information) ## HTTP request -``` +```console GET /api/domains/{domain}/alerts ``` @@ -73,6 +73,6 @@ Here is an example of the request. [!include[Improve request performance](../../includes/improve-request-performance.md)] -``` +```console GET https://api.securitycenter.windows.com/api/domains/client.wns.windows.com/alerts ``` From bc7d9411aed2b1dcf04c14d5f14603887a99a06c Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 27 Jul 2020 15:25:06 -0700 Subject: [PATCH 427/589] Applied valid type to code blocks Valid types are listed here: https://docsmetadatatool.azurewebsites.net/allowlists/# --- .../microsoft-defender-atp/get-domain-related-machines.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md index b6882a07d8..26326b79b9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md @@ -48,7 +48,7 @@ Delegated (work or school account) | Machine.ReadWrite | 'Read and write machine >- Response will include only devices that the user can access, based on device group settings (See [Create and manage device groups](machine-groups.md) for more information) ## HTTP request -``` +```console GET /api/domains/{domain}/machines ``` @@ -75,6 +75,6 @@ Here is an example of the request. [!include[Improve request performance](../../includes/improve-request-performance.md)] -``` +```console GET https://api.securitycenter.windows.com/api/domains/api.securitycenter.windows.com/machines ``` From e6630a2e29fdc3c94cc9bfaf71c8bd04f337d293 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 27 Jul 2020 15:26:21 -0700 Subject: [PATCH 428/589] Applied type to code blocks Valid types are listed here: https://docsmetadatatool.azurewebsites.net/allowlists/# --- .../microsoft-defender-atp/get-machine-by-id.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md b/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md index 13be6a7759..4e48d88f8d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md @@ -49,7 +49,7 @@ Delegated (work or school account) | Machine.ReadWrite | 'Read and write machine ## HTTP request -``` +```http GET /api/machines/{id} ``` @@ -76,7 +76,7 @@ Here is an example of the request. [!include[Improve request performance](../../includes/improve-request-performance.md)] -``` +```http GET https://api.securitycenter.windows.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07 ``` @@ -85,7 +85,7 @@ GET https://api.securitycenter.windows.com/api/machines/1e5bc9d7e413ddd7902c2932 Here is an example of the response. -``` +```http HTTP/1.1 200 OK Content-type: application/json { From 09825bd4d290f4465140ede33326d5e7ef8c70ca Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 27 Jul 2020 15:27:21 -0700 Subject: [PATCH 429/589] Applied types to code blocks Valid types are listed here: https://docsmetadatatool.azurewebsites.net/allowlists/# --- .../microsoft-defender-atp/get-machine-log-on-users.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md b/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md index 4a239c0b99..fc56069b04 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md @@ -46,7 +46,7 @@ Delegated (work or school account) | User.Read.All | 'Read user profiles' >- Response will include users only if the device is visible to the user, based on device group settings (See [Create and manage device groups](machine-groups.md) for more information) ## HTTP request -``` +```http GET /api/machines/{id}/logonusers ``` @@ -72,7 +72,7 @@ Here is an example of the request. [!include[Improve request performance](../../includes/improve-request-performance.md)] -``` +```http GET https://api.securitycenter.windows.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/logonusers ``` @@ -81,7 +81,7 @@ GET https://api.securitycenter.windows.com/api/machines/1e5bc9d7e413ddd7902c2932 Here is an example of the response. -``` +```http HTTP/1.1 200 OK Content-type: application/json { From 529c6e60b761fb5e55414820b65e123ebd1b0fea Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 27 Jul 2020 15:28:01 -0700 Subject: [PATCH 430/589] Applied type to code block Valid types are listed here: https://docsmetadatatool.azurewebsites.net/allowlists/# --- .../microsoft-defender-atp/get-machine-related-alerts.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md index 7a09d3fa92..e8fb105671 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md @@ -45,7 +45,7 @@ Delegated (work or school account) | Alert.ReadWrite | 'Read and write alerts' >- User needs to have access to the device, based on device group settings (See [Create and manage device groups](machine-groups.md) for more information) ## HTTP request -``` +```http GET /api/machines/{id}/alerts ``` From 1c50af9f2c5d4a918a402c92e0a2cb0c2be5d2d6 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 27 Jul 2020 15:29:47 -0700 Subject: [PATCH 431/589] Applied types to code blocks, corrected code markup Valid types are listed here: https://docsmetadatatool.azurewebsites.net/allowlists/# --- .../microsoft-defender-atp/get-machines.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-machines.md index 8cae4353fb..4a790fb949 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machines.md @@ -26,7 +26,7 @@ ms.topic: article ## API description Retrieves a collection of [Machines](machine.md) that have communicated with Microsoft Defender ATP cloud on the last 30 days.
Supports [OData V4 queries](https://www.odata.org/documentation/). -
The OData's ```$filter``` query is supported on: ```computerDnsName```, ```lastSeen```, ```healthStatus```, ```osPlatform```, ```riskScore``` and ```rbacGroupId```. +
The OData's `$filter` query is supported on: `computerDnsName`, `lastSeen`, `healthStatus`, `osPlatform`, `riskScore` and `rbacGroupId`.
See examples at [OData queries with Microsoft Defender ATP](exposed-apis-odata-samples.md) @@ -51,7 +51,7 @@ Delegated (work or school account) | Machine.ReadWrite | 'Read and write machine >- Response will include only devices, that the user have access to, based on device group settings (See [Create and manage device groups](machine-groups.md) for more information) ## HTTP request -``` +```http GET https://api.securitycenter.windows.com/api/machines ``` @@ -77,7 +77,7 @@ Here is an example of the request. [!include[Improve request performance](../../includes/improve-request-performance.md)] -``` +```http GET https://api.securitycenter.windows.com/api/machines ``` @@ -86,7 +86,7 @@ GET https://api.securitycenter.windows.com/api/machines Here is an example of the response. -``` +```http HTTP/1.1 200 OK Content-type: application/json { From 95179d5864c4153cb82964cf9a92b4ac65bf79e6 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 27 Jul 2020 15:30:30 -0700 Subject: [PATCH 432/589] Corrected content type on code blocks --- .../microsoft-defender-atp/add-or-remove-machine-tags.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md b/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md index 5db1d001ec..07fcff8c6f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md +++ b/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md @@ -50,7 +50,7 @@ Delegated (work or school account) | Machine.ReadWrite | 'Read and write machine ## HTTP request -```console +```http POST https://api.securitycenter.windows.com/api/machines/{id}/tags ``` @@ -83,7 +83,7 @@ Here is an example of a request that adds machine tag. [!include[Improve request performance](../../includes/improve-request-performance.md)] -```console +```http POST https://api.securitycenter.windows.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/tags Content-type: application/json { From 095681e89bc8786628794a9d692b953e61db08d4 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 27 Jul 2020 15:31:11 -0700 Subject: [PATCH 433/589] Corrected types on code blocks Valid types are listed here: https://docsmetadatatool.azurewebsites.net/allowlists/# --- .../microsoft-defender-atp/get-domain-related-alerts.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-alerts.md index d03107736f..0aa06444da 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-alerts.md @@ -48,7 +48,7 @@ Delegated (work or school account) | Alert.ReadWrite | 'Read and write alerts' >- Response will include only alerts, associated with devices, that the user have access to, based on device group settings (See [Create and manage device groups](machine-groups.md) for more information) ## HTTP request -```console +```http GET /api/domains/{domain}/alerts ``` @@ -73,6 +73,6 @@ Here is an example of the request. [!include[Improve request performance](../../includes/improve-request-performance.md)] -```console +```http GET https://api.securitycenter.windows.com/api/domains/client.wns.windows.com/alerts ``` From 842694679b0286324f9f0401be965d073b79ccaf Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 27 Jul 2020 15:31:52 -0700 Subject: [PATCH 434/589] Corrected content type on code blocks Valid types are listed here: https://docsmetadatatool.azurewebsites.net/allowlists/# --- .../microsoft-defender-atp/get-domain-related-machines.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md index 26326b79b9..6b4dee50f5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md @@ -48,7 +48,7 @@ Delegated (work or school account) | Machine.ReadWrite | 'Read and write machine >- Response will include only devices that the user can access, based on device group settings (See [Create and manage device groups](machine-groups.md) for more information) ## HTTP request -```console +```http GET /api/domains/{domain}/machines ``` @@ -75,6 +75,6 @@ Here is an example of the request. [!include[Improve request performance](../../includes/improve-request-performance.md)] -```console +```http GET https://api.securitycenter.windows.com/api/domains/api.securitycenter.windows.com/machines ``` From 5e8cb831bca10e80ba0424ea02f7c58dbbfa2855 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 27 Jul 2020 15:50:09 -0700 Subject: [PATCH 435/589] Corrected "id" in an English sentence to "ID" --- .../microsoft-defender-atp/get-machine-by-id.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md b/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md index 4e48d88f8d..91b44caf50 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md @@ -65,7 +65,7 @@ Empty ## Response If successful and device exists - 200 OK with the [machine](machine.md) entity in the body. -If machine with the specified id was not found - 404 Not Found. +If machine with the specified ID was not found - 404 Not Found. ## Example From 620086410e612acf5e74477b51b5027418700d2c Mon Sep 17 00:00:00 2001 From: Rafals <51166236+rafals2@users.noreply.github.com> Date: Mon, 27 Jul 2020 22:57:38 -0700 Subject: [PATCH 436/589] added tip to key rotation --- windows/client-management/mdm/bitlocker-csp.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/windows/client-management/mdm/bitlocker-csp.md b/windows/client-management/mdm/bitlocker-csp.md index 3a1ecfb0f9..10aec13178 100644 --- a/windows/client-management/mdm/bitlocker-csp.md +++ b/windows/client-management/mdm/bitlocker-csp.md @@ -1072,6 +1072,19 @@ Each server-side recovery key rotation is represented by a request ID. The serve Value type is string. Supported operation is Execute. Request ID is expected as a parameter. +> [!TIP] +> Key rotation feature will only work when: + +> For Operating system drives: +> OSRequireActiveDirectoryBackup_Name is set to 1 ("Required") + +> For Fixed data drives: +> FDVRequireActiveDirectoryBackup_Name is set to 1 = ("Required") + +> Although not required, we recommend configuring: +> OSActiveDirectoryBackup_Name to true +> FDVActiveDirectoryBackup_Name to true + **Status** Interior node. Supported operation is Get. From fac610df5238439a9251c7fdf0cb614fbb2f1190 Mon Sep 17 00:00:00 2001 From: ashwin-pr <66497769+ashwin-pr@users.noreply.github.com> Date: Tue, 28 Jul 2020 13:54:35 +0530 Subject: [PATCH 437/589] Update android-intune.md Updated content to reflect Personal devices --- .../threat-protection/microsoft-defender-atp/android-intune.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/android-intune.md b/windows/security/threat-protection/microsoft-defender-atp/android-intune.md index cb62aaa586..42d75ed3b8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/android-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/android-intune.md @@ -136,7 +136,7 @@ Options](https://docs.microsoft.com/mem/intune/enrollment/android-enroll) . As Microsoft Defender ATP for Android is deployed via managed Google Play, updates to the app are automatic via Google Play. -Currently only Work Profile enrolled devices are supported for deployment. +Currently only Personal devices with Work Profile enrolled are supported for deployment. >[!NOTE] From 147a45d61f09e8aa4d9aab9e341549ebfd1a4725 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 28 Jul 2020 07:19:51 -0700 Subject: [PATCH 438/589] Update faq-md-app-guard.md minor edits --- .../faq-md-app-guard.md | 26 +++++++++---------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md index 80279200dc..94d907d9ff 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md @@ -114,7 +114,7 @@ Application Guard may not work correctly on NTFS compressed volumes. If this iss ### Why am I getting the error message ("ERR_NAME_NOT_RESOLVED") after not being able to reach PAC file? This is a known issue. To mitigate this you need to create two firewall rules. -For guidance on how to create a firewall rule via GP see: +For guidance on how to create a firewall rule by using group policy, see: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/create-an-inbound-icmp-rule https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/open-the-group-policy-management-console-to-windows-firewall-with-advanced-security @@ -125,18 +125,18 @@ First rule (DHCP Server): 3. Protocol UDP 4. Port 67 -Second rule (DHCP Client): Same as the above, but scoped to local port 68 - -In the UI go through the following steps: -1. Right click on inbound rules, create a new rule -2. Choose “custom rule” -3. Program path: “%SystemRoot%\System32\svchost.exe" -4. Protocol Type: UDP, Specific ports: 67, Remote port: any -5. Any IP addresses -6. Allow the connection -7. All profiles -8. The rule should be present in the UI. Right click on the rule > properties -9. “Programs and services” tab, Under the Services section click on “settings”. Choose “Apply to this Service” and select “Internet Connection Sharing (ICS) Shared Access” +Second rule (DHCP Client) +This is the same as the first rule, but scoped to local port 68. +In the Microsoft Defender Firewall user interface go through the following steps: +1. Right click on inbound rules, create a new rule. +2. Choose **custom rule**. +3. Program path: **%SystemRoot%\System32\svchost.exe**. +4. Protocol Type: UDP, Specific ports: 67, Remote port: any. +5. Any IP addresses. +6. Allow the connection. +7. All profiles. +8. The new rule should show up in the user interface. Right click on the **rule** > **properties**. +9. In the **Programs and services** tab, Under the **Services** section click on **settings**. Choose **Apply to this Service** and select **Internet Connection Sharing (ICS) Shared Access**. ### Why can I not launch Application Guard when Exploit Guard is enabled? From b51025bd3972d3b5f5bb40d995b083a564fdcf62 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 28 Jul 2020 07:22:12 -0700 Subject: [PATCH 439/589] Update faq-md-app-guard.md fixed URL links --- .../microsoft-defender-application-guard/faq-md-app-guard.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md index 94d907d9ff..ea2a6bf1f9 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md @@ -115,9 +115,8 @@ Application Guard may not work correctly on NTFS compressed volumes. If this iss This is a known issue. To mitigate this you need to create two firewall rules. For guidance on how to create a firewall rule by using group policy, see: - -https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/create-an-inbound-icmp-rule -https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/open-the-group-policy-management-console-to-windows-firewall-with-advanced-security +- [Create an inbound icmp rule](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/create-an-inbound-icmp-rule) +- [Open Group Policy management console for Microsoft Defender Firewall](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/open-the-group-policy-management-console-to-windows-firewall-with-advanced-security) First rule (DHCP Server): 1. Program path: %SystemRoot%\System32\svchost.exe From 6bf4b58fc681cd7d578aca09b3266757129d3cfe Mon Sep 17 00:00:00 2001 From: jaimeo Date: Tue, 28 Jul 2020 11:23:01 -0700 Subject: [PATCH 440/589] corrected reference to Office and table where it appears --- .../update/waas-delivery-optimization.md | 22 +++++++------------ 1 file changed, 8 insertions(+), 14 deletions(-) diff --git a/windows/deployment/update/waas-delivery-optimization.md b/windows/deployment/update/waas-delivery-optimization.md index 76b225825d..e4e27a9a8a 100644 --- a/windows/deployment/update/waas-delivery-optimization.md +++ b/windows/deployment/update/waas-delivery-optimization.md @@ -6,7 +6,6 @@ description: Delivery Optimization is a peer-to-peer distribution method in Wind keywords: oms, operations management suite, wdav, updates, downloads, log analytics ms.prod: w10 ms.mktglfcycl: deploy - audience: itpro author: jaimeo ms.localizationpriority: medium @@ -36,7 +35,7 @@ For information about setting up Delivery Optimization, including tips for the b ## New in Windows 10, version 2004 -- Enterprise network throttling: new settings have been added in Group Policy and MDM to control foreground and background throttling as absolute values (Maximum Background Download Bandwidth in (in KB/s)). These settings are also available in the Windows user interface: +- Enterprise network throttling: new settings have been added in Group Policy and mobile device management (MDM) to control foreground and background throttling as absolute values (Maximum Background Download Bandwidth in (in KB/s)). These settings are also available in the Windows user interface: ![absolute bandwidth settings in delivery optimization interface](images/DO-absolute-bandwidth.png) @@ -86,9 +85,8 @@ The following table lists the minimum Windows 10 version that supports Delivery | Windows Store files | 1511 | | Windows Store for Business files | 1511 | | Windows Defender definition updates | 1511 | -| Office Click-to-Run updates | 1709 | +| Microsoft 365 Apps and updates | 1709 (for more information, see [Delivery Optimization and Microsoft 365 Apps](https://docs.microsoft.com/deployoffice/delivery-optimization)) | | Win32 apps for Intune | 1709 | -| Office installations and updates | 2004 | | Xbox game pass games | 2004 | | MSIX apps (HTTP downloads only) | 2004 | | Configuration Manager Express Updates | 1709 + Configuration Manager version 1711 | @@ -98,13 +96,9 @@ The following table lists the minimum Windows 10 version that supports Delivery - - - - In Windows 10 Enterprise, Professional, and Education editions, Delivery Optimization is enabled by default for peer-to-peer sharing on the local network (NAT). Specifically, all of the devices must be behind the same NAT, but you can configure it differently in Group Policy and mobile device management (MDM) solutions such as Microsoft Intune. -For more details, see "Download mode" in [Delivery optimization reference](waas-delivery-optimization-reference.md). +For more information, see "Download mode" in [Delivery optimization reference](waas-delivery-optimization-reference.md). ## Set up Delivery Optimization @@ -116,7 +110,7 @@ You can use Group Policy or an MDM solution like Intune to configure Delivery Op You will find the Delivery Optimization settings in Group Policy under **Configuration\Policies\Administrative Templates\Windows Components\Delivery Optimization**. In MDM, the same settings are under **.Vendor/MSFT/Policy/Config/DeliveryOptimization/**. -Starting with Microsoft Intune version 1902, you can set many Delivery Optimization policies as a profile which you can then apply to groups of devices. For more information, see [Delivery Optimization settings in Microsoft Intune](https://docs.microsoft.com/intune/delivery-optimization-windows)) +Starting with Microsoft Intune version 1902, you can set many Delivery Optimization policies as a profile, which you can then apply to groups of devices. For more information, see [Delivery Optimization settings in Microsoft Intune](https://docs.microsoft.com/intune/delivery-optimization-windows)) **Starting with Windows 10, version 1903,** you can use the Azure Active Directory (AAD) Tenant ID as a means to define groups. To do this set the value for DOGroupIdSource to its new maximum value of 5. @@ -206,7 +200,7 @@ If you don’t see any bytes coming from peers the cause might be one of the fol If you suspect this is the problem, try these steps: 1. Start a download of an app that is larger than 50 MB from the Store (for example "Candy Crush Saga"). -2. Run `Get-DeliveryOptimizationStatus` from an elevated Powershell window and observe the DownloadMode setting. For peering to work, DownloadMode should be 1, 2, or 3. +2. Run `Get-DeliveryOptimizationStatus` from an elevated PowerShell window and observe the DownloadMode setting. For peering to work, DownloadMode should be 1, 2, or 3. 3. If **DownloadMode** is 99 it could indicate your device is unable to reach the Delivery Optimization cloud services. Ensure that the Delivery Optimization hostnames are allowed access: most importantly **\*.do.dsp.mp.microsoft.com**. @@ -216,8 +210,8 @@ If you suspect this is the problem, try these steps: If you suspect this is the problem, try these steps: 1. Download the same app on two different devices on the same network, waiting 10 – 15 minutes between downloads. -2. Run `Get-DeliveryOptimizationStatus` from an elevated Powershell window and ensure that **DownloadMode** is 1 or 2 on both devices. -3. Run `Get-DeliveryOptimizationPerfSnap` from an elevated Powershell window on the second device. The **NumberOfPeers** field should be non-zero. +2. Run `Get-DeliveryOptimizationStatus` from an elevated PowerShell window and ensure that **DownloadMode** is 1 or 2 on both devices. +3. Run `Get-DeliveryOptimizationPerfSnap` from an elevated PowerShell window on the second device. The **NumberOfPeers** field should be non-zero. 4. If the number of peers is zero and you have **DownloadMode** = 1, ensure that both devices are using the same public IP address to reach the internet. To do this, open a browser Windows and search for “what is my IP”. You can **DownloadMode 2** (Group) and a custom GroupID (Guid) to fix this if the devices aren’t reporting the same public IP address. @@ -237,7 +231,7 @@ If you suspect this is the problem, try a Telnet test between two devices on the [Windows 10, Delivery Optimization, and WSUS](https://blogs.technet.microsoft.com/mniehaus/2016/08/16/windows-10-delivery-optimization-and-wsus-take-2/) -## Related topics +## Related articles - [Update Windows 10 in the enterprise](index.md) - [Overview of Windows as a service](waas-overview.md) From df5ec7d303e31b193a0797b5eaa5462f2102daab Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 28 Jul 2020 11:46:00 -0700 Subject: [PATCH 441/589] Footnote text update-Set 1 --- .../mdm/policy-csp-abovelock.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-accounts.md | 16 ++++++++-------- .../mdm/policy-csp-activexcontrols.md | 16 ++++++++-------- .../mdm/policy-csp-applicationdefaults.md | 16 ++++++++-------- .../mdm/policy-csp-applicationmanagement.md | 16 ++++++++-------- .../mdm/policy-csp-appruntime.md | 16 ++++++++-------- .../mdm/policy-csp-appvirtualization.md | 16 ++++++++-------- .../mdm/policy-csp-attachmentmanager.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-audit.md | 16 ++++++++-------- .../mdm/policy-csp-authentication.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-autoplay.md | 16 ++++++++-------- .../mdm/policy-csp-bitlocker.md | 16 ++++++++-------- windows/client-management/mdm/policy-csp-bits.md | 16 ++++++++-------- .../mdm/policy-csp-bluetooth.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-browser.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-camera.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-cellular.md | 16 ++++++++-------- .../mdm/policy-csp-connectivity.md | 16 ++++++++-------- .../mdm/policy-csp-controlpolicyconflict.md | 16 ++++++++-------- .../mdm/policy-csp-credentialproviders.md | 16 ++++++++-------- .../mdm/policy-csp-credentialsdelegation.md | 16 ++++++++-------- .../mdm/policy-csp-credentialsui.md | 16 ++++++++-------- .../mdm/policy-csp-cryptography.md | 16 ++++++++-------- .../mdm/policy-csp-dataprotection.md | 16 ++++++++-------- .../mdm/policy-csp-datausage.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-defender.md | 16 ++++++++-------- .../mdm/policy-csp-deliveryoptimization.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-desktop.md | 16 ++++++++-------- .../mdm/policy-csp-deviceguard.md | 16 ++++++++-------- 29 files changed, 232 insertions(+), 232 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-abovelock.md b/windows/client-management/mdm/policy-csp-abovelock.md index bcc38faea5..ebc28b415c 100644 --- a/windows/client-management/mdm/policy-csp-abovelock.md +++ b/windows/client-management/mdm/policy-csp-abovelock.md @@ -161,14 +161,14 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-accounts.md b/windows/client-management/mdm/policy-csp-accounts.md index 83d4831dcb..fad4a74ad7 100644 --- a/windows/client-management/mdm/policy-csp-accounts.md +++ b/windows/client-management/mdm/policy-csp-accounts.md @@ -248,14 +248,14 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-activexcontrols.md b/windows/client-management/mdm/policy-csp-activexcontrols.md index 7a981c49d8..9c2b674cee 100644 --- a/windows/client-management/mdm/policy-csp-activexcontrols.md +++ b/windows/client-management/mdm/policy-csp-activexcontrols.md @@ -103,14 +103,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-applicationdefaults.md b/windows/client-management/mdm/policy-csp-applicationdefaults.md index 8171271589..ccc641c6a3 100644 --- a/windows/client-management/mdm/policy-csp-applicationdefaults.md +++ b/windows/client-management/mdm/policy-csp-applicationdefaults.md @@ -219,14 +219,14 @@ This setting supports a range of values between 0 and 1. Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-applicationmanagement.md b/windows/client-management/mdm/policy-csp-applicationmanagement.md index b2bfd70f15..6b55aa34e3 100644 --- a/windows/client-management/mdm/policy-csp-applicationmanagement.md +++ b/windows/client-management/mdm/policy-csp-applicationmanagement.md @@ -1102,13 +1102,13 @@ XSD: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-appruntime.md b/windows/client-management/mdm/policy-csp-appruntime.md index faf5c4b079..6e15e10e88 100644 --- a/windows/client-management/mdm/policy-csp-appruntime.md +++ b/windows/client-management/mdm/policy-csp-appruntime.md @@ -101,14 +101,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-appvirtualization.md b/windows/client-management/mdm/policy-csp-appvirtualization.md index e995b03a11..29788ea127 100644 --- a/windows/client-management/mdm/policy-csp-appvirtualization.md +++ b/windows/client-management/mdm/policy-csp-appvirtualization.md @@ -2060,14 +2060,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-attachmentmanager.md b/windows/client-management/mdm/policy-csp-attachmentmanager.md index b68b6cc6cc..cb2130e778 100644 --- a/windows/client-management/mdm/policy-csp-attachmentmanager.md +++ b/windows/client-management/mdm/policy-csp-attachmentmanager.md @@ -253,14 +253,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-audit.md b/windows/client-management/mdm/policy-csp-audit.md index a789c492c3..ffd4519182 100644 --- a/windows/client-management/mdm/policy-csp-audit.md +++ b/windows/client-management/mdm/policy-csp-audit.md @@ -4794,14 +4794,14 @@ The following are the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-authentication.md b/windows/client-management/mdm/policy-csp-authentication.md index 09c3eaa3ce..96f9787790 100644 --- a/windows/client-management/mdm/policy-csp-authentication.md +++ b/windows/client-management/mdm/policy-csp-authentication.md @@ -569,14 +569,14 @@ Value type is string. Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-autoplay.md b/windows/client-management/mdm/policy-csp-autoplay.md index bf7a6a2b3c..36a05de8df 100644 --- a/windows/client-management/mdm/policy-csp-autoplay.md +++ b/windows/client-management/mdm/policy-csp-autoplay.md @@ -269,14 +269,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-bitlocker.md b/windows/client-management/mdm/policy-csp-bitlocker.md index 751c0e3c9c..2f4c7acf11 100644 --- a/windows/client-management/mdm/policy-csp-bitlocker.md +++ b/windows/client-management/mdm/policy-csp-bitlocker.md @@ -97,14 +97,14 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-bits.md b/windows/client-management/mdm/policy-csp-bits.md index 9024caaee9..2bcc10ea45 100644 --- a/windows/client-management/mdm/policy-csp-bits.md +++ b/windows/client-management/mdm/policy-csp-bits.md @@ -542,14 +542,14 @@ Supported values range: 0 - 999 Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-bluetooth.md b/windows/client-management/mdm/policy-csp-bluetooth.md index 74dbe86c25..28123a7dc0 100644 --- a/windows/client-management/mdm/policy-csp-bluetooth.md +++ b/windows/client-management/mdm/policy-csp-bluetooth.md @@ -460,14 +460,14 @@ For more information on allowed key sizes, refer to Bluetooth Core Specification Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004.

diff --git a/windows/client-management/mdm/policy-csp-browser.md b/windows/client-management/mdm/policy-csp-browser.md index 3f68b4b8cb..206e99f3db 100644 --- a/windows/client-management/mdm/policy-csp-browser.md +++ b/windows/client-management/mdm/policy-csp-browser.md @@ -4297,13 +4297,13 @@ Most restricted value: 0 Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-camera.md b/windows/client-management/mdm/policy-csp-camera.md index 98202881f8..0def6900f0 100644 --- a/windows/client-management/mdm/policy-csp-camera.md +++ b/windows/client-management/mdm/policy-csp-camera.md @@ -99,14 +99,14 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-cellular.md b/windows/client-management/mdm/policy-csp-cellular.md index dfd4e76549..3d156b1c89 100644 --- a/windows/client-management/mdm/policy-csp-cellular.md +++ b/windows/client-management/mdm/policy-csp-cellular.md @@ -372,14 +372,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-connectivity.md b/windows/client-management/mdm/policy-csp-connectivity.md index 5a058b41e4..ee83ad3d00 100644 --- a/windows/client-management/mdm/policy-csp-connectivity.md +++ b/windows/client-management/mdm/policy-csp-connectivity.md @@ -1020,14 +1020,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-controlpolicyconflict.md b/windows/client-management/mdm/policy-csp-controlpolicyconflict.md index d3c88d948c..a822c7a831 100644 --- a/windows/client-management/mdm/policy-csp-controlpolicyconflict.md +++ b/windows/client-management/mdm/policy-csp-controlpolicyconflict.md @@ -118,14 +118,14 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-credentialproviders.md b/windows/client-management/mdm/policy-csp-credentialproviders.md index d9cc3f9647..425fcf361a 100644 --- a/windows/client-management/mdm/policy-csp-credentialproviders.md +++ b/windows/client-management/mdm/policy-csp-credentialproviders.md @@ -243,14 +243,14 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-credentialsdelegation.md b/windows/client-management/mdm/policy-csp-credentialsdelegation.md index e59b5c4f9b..c8416c3bb9 100644 --- a/windows/client-management/mdm/policy-csp-credentialsdelegation.md +++ b/windows/client-management/mdm/policy-csp-credentialsdelegation.md @@ -103,14 +103,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-credentialsui.md b/windows/client-management/mdm/policy-csp-credentialsui.md index 7a91173c71..349800035d 100644 --- a/windows/client-management/mdm/policy-csp-credentialsui.md +++ b/windows/client-management/mdm/policy-csp-credentialsui.md @@ -179,14 +179,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-cryptography.md b/windows/client-management/mdm/policy-csp-cryptography.md index 536c9f26f4..55ceb74581 100644 --- a/windows/client-management/mdm/policy-csp-cryptography.md +++ b/windows/client-management/mdm/policy-csp-cryptography.md @@ -166,14 +166,14 @@ Lists the Cryptographic Cipher Algorithms allowed for SSL connections. Format is Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-dataprotection.md b/windows/client-management/mdm/policy-csp-dataprotection.md index 48da5e5f49..4c71a876a5 100644 --- a/windows/client-management/mdm/policy-csp-dataprotection.md +++ b/windows/client-management/mdm/policy-csp-dataprotection.md @@ -152,14 +152,14 @@ Setting used by Windows 8.1 Selective Wipe. Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-datausage.md b/windows/client-management/mdm/policy-csp-datausage.md index f77f3b029f..28f919ead9 100644 --- a/windows/client-management/mdm/policy-csp-datausage.md +++ b/windows/client-management/mdm/policy-csp-datausage.md @@ -123,14 +123,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-defender.md b/windows/client-management/mdm/policy-csp-defender.md index 49855399e3..c2fb83fe51 100644 --- a/windows/client-management/mdm/policy-csp-defender.md +++ b/windows/client-management/mdm/policy-csp-defender.md @@ -3101,14 +3101,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-deliveryoptimization.md b/windows/client-management/mdm/policy-csp-deliveryoptimization.md index 902ef8e8be..bdf3985bb6 100644 --- a/windows/client-management/mdm/policy-csp-deliveryoptimization.md +++ b/windows/client-management/mdm/policy-csp-deliveryoptimization.md @@ -2027,14 +2027,14 @@ This policy allows an IT Admin to define the following: Footnotes: -- 1 - Available in Windows 10, version 1607. -- 2 - Available in Windows 10, version 1703. -- 3 - Available in Windows 10, version 1709. -- 4 - Available in Windows 10, version 1803. -- 5 - Available in Windows 10, version 1809. -- 6 - Available in Windows 10, version 1903. -- 7 - Available in Windows 10, version 1909. -- 8 - Available in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-desktop.md b/windows/client-management/mdm/policy-csp-desktop.md index 5bd60e0feb..0ade992a1d 100644 --- a/windows/client-management/mdm/policy-csp-desktop.md +++ b/windows/client-management/mdm/policy-csp-desktop.md @@ -101,14 +101,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-deviceguard.md b/windows/client-management/mdm/policy-csp-deviceguard.md index c728512377..163655f59f 100644 --- a/windows/client-management/mdm/policy-csp-deviceguard.md +++ b/windows/client-management/mdm/policy-csp-deviceguard.md @@ -317,14 +317,14 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. From 397d3aea90e77498a0552f454778a809ddeba2b5 Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Tue, 28 Jul 2020 11:51:09 -0700 Subject: [PATCH 442/589] pencil edits --- windows/client-management/mdm/bitlocker-csp.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/bitlocker-csp.md b/windows/client-management/mdm/bitlocker-csp.md index 10aec13178..2fdbf93bd7 100644 --- a/windows/client-management/mdm/bitlocker-csp.md +++ b/windows/client-management/mdm/bitlocker-csp.md @@ -1074,13 +1074,13 @@ Value type is string. Supported operation is Execute. Request ID is expected as > [!TIP] > Key rotation feature will only work when: - +> > For Operating system drives: > OSRequireActiveDirectoryBackup_Name is set to 1 ("Required") - +> > For Fixed data drives: > FDVRequireActiveDirectoryBackup_Name is set to 1 = ("Required") - +> > Although not required, we recommend configuring: > OSActiveDirectoryBackup_Name to true > FDVActiveDirectoryBackup_Name to true From f519937288ce98b8883cba8fa62ada8d8975328d Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 28 Jul 2020 11:53:08 -0700 Subject: [PATCH 443/589] Footnote text update-Set 2 --- .../mdm/policy-csp-devicehealthmonitoring.md | 16 ++++++++-------- .../mdm/policy-csp-deviceinstallation.md | 16 ++++++++-------- .../mdm/policy-csp-devicelock.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-display.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-dmaguard.md | 16 ++++++++-------- .../mdm/policy-csp-education.md | 16 ++++++++-------- .../mdm/policy-csp-enterprisecloudprint.md | 16 ++++++++-------- .../mdm/policy-csp-errorreporting.md | 16 ++++++++-------- .../mdm/policy-csp-eventlogservice.md | 16 ++++++++-------- .../mdm/policy-csp-experience.md | 16 ++++++++-------- .../mdm/policy-csp-exploitguard.md | 16 ++++++++-------- .../mdm/policy-csp-fileexplorer.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-games.md | 16 ++++++++-------- .../mdm/policy-csp-handwriting.md | 16 ++++++++-------- .../mdm/policy-csp-internetexplorer.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-kerberos.md | 16 ++++++++-------- .../mdm/policy-csp-kioskbrowser.md | 16 ++++++++-------- .../mdm/policy-csp-lanmanworkstation.md | 16 ++++++++-------- .../mdm/policy-csp-licensing.md | 16 ++++++++-------- .../policy-csp-localpoliciessecurityoptions.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-lockdown.md | 16 ++++++++-------- windows/client-management/mdm/policy-csp-maps.md | 16 ++++++++-------- .../mdm/policy-csp-messaging.md | 16 ++++++++-------- .../mdm/policy-csp-mssecurityguide.md | 16 ++++++++-------- .../mdm/policy-csp-msslegacy.md | 16 ++++++++-------- .../mdm/policy-csp-networkisolation.md | 16 ++++++++-------- .../mdm/policy-csp-notifications.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-power.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-printers.md | 16 ++++++++-------- 29 files changed, 232 insertions(+), 232 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-devicehealthmonitoring.md b/windows/client-management/mdm/policy-csp-devicehealthmonitoring.md index 3d3d4bb035..8277ae0425 100644 --- a/windows/client-management/mdm/policy-csp-devicehealthmonitoring.md +++ b/windows/client-management/mdm/policy-csp-devicehealthmonitoring.md @@ -227,14 +227,14 @@ In most cases, an IT Pro does not need to define this policy. Instead, it is exp Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-deviceinstallation.md b/windows/client-management/mdm/policy-csp-deviceinstallation.md index 7cd828fb5c..5d67b14d8d 100644 --- a/windows/client-management/mdm/policy-csp-deviceinstallation.md +++ b/windows/client-management/mdm/policy-csp-deviceinstallation.md @@ -946,14 +946,14 @@ To verify the policy is applied, check C:\windows\INF\setupapi.dev.log and see i Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-devicelock.md b/windows/client-management/mdm/policy-csp-devicelock.md index 295364f046..f95a796932 100644 --- a/windows/client-management/mdm/policy-csp-devicelock.md +++ b/windows/client-management/mdm/policy-csp-devicelock.md @@ -1119,14 +1119,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-display.md b/windows/client-management/mdm/policy-csp-display.md index e0c4a7e431..9645a371ac 100644 --- a/windows/client-management/mdm/policy-csp-display.md +++ b/windows/client-management/mdm/policy-csp-display.md @@ -393,14 +393,14 @@ To validate on Desktop, do the following: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-dmaguard.md b/windows/client-management/mdm/policy-csp-dmaguard.md index 0f3bb358f2..e5511ffaa0 100644 --- a/windows/client-management/mdm/policy-csp-dmaguard.md +++ b/windows/client-management/mdm/policy-csp-dmaguard.md @@ -113,14 +113,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-education.md b/windows/client-management/mdm/policy-csp-education.md index df04232bea..9e12bc04e4 100644 --- a/windows/client-management/mdm/policy-csp-education.md +++ b/windows/client-management/mdm/policy-csp-education.md @@ -274,14 +274,14 @@ The policy value is expected to be a `````` separated list of printer na Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-enterprisecloudprint.md b/windows/client-management/mdm/policy-csp-enterprisecloudprint.md index 9916989938..c450267337 100644 --- a/windows/client-management/mdm/policy-csp-enterprisecloudprint.md +++ b/windows/client-management/mdm/policy-csp-enterprisecloudprint.md @@ -376,14 +376,14 @@ The default value is an empty string. Otherwise, the value should contain a URL. Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-errorreporting.md b/windows/client-management/mdm/policy-csp-errorreporting.md index 751350e7ae..79bbb1b92f 100644 --- a/windows/client-management/mdm/policy-csp-errorreporting.md +++ b/windows/client-management/mdm/policy-csp-errorreporting.md @@ -407,14 +407,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-eventlogservice.md b/windows/client-management/mdm/policy-csp-eventlogservice.md index 36e7be1042..17080a877e 100644 --- a/windows/client-management/mdm/policy-csp-eventlogservice.md +++ b/windows/client-management/mdm/policy-csp-eventlogservice.md @@ -322,14 +322,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-experience.md b/windows/client-management/mdm/policy-csp-experience.md index f00b37efad..ff50088666 100644 --- a/windows/client-management/mdm/policy-csp-experience.md +++ b/windows/client-management/mdm/policy-csp-experience.md @@ -1492,14 +1492,14 @@ Supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-exploitguard.md b/windows/client-management/mdm/policy-csp-exploitguard.md index 4a13105f17..1e1b072f7d 100644 --- a/windows/client-management/mdm/policy-csp-exploitguard.md +++ b/windows/client-management/mdm/policy-csp-exploitguard.md @@ -120,14 +120,14 @@ Here is an example: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-fileexplorer.md b/windows/client-management/mdm/policy-csp-fileexplorer.md index 0b74f58211..993073f411 100644 --- a/windows/client-management/mdm/policy-csp-fileexplorer.md +++ b/windows/client-management/mdm/policy-csp-fileexplorer.md @@ -166,14 +166,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-games.md b/windows/client-management/mdm/policy-csp-games.md index eb633b2e2e..63eb04a5c3 100644 --- a/windows/client-management/mdm/policy-csp-games.md +++ b/windows/client-management/mdm/policy-csp-games.md @@ -89,14 +89,14 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-handwriting.md b/windows/client-management/mdm/policy-csp-handwriting.md index 00a2e84360..8893695276 100644 --- a/windows/client-management/mdm/policy-csp-handwriting.md +++ b/windows/client-management/mdm/policy-csp-handwriting.md @@ -103,14 +103,14 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-internetexplorer.md b/windows/client-management/mdm/policy-csp-internetexplorer.md index 4a4b22eef5..a1b9bb2b78 100644 --- a/windows/client-management/mdm/policy-csp-internetexplorer.md +++ b/windows/client-management/mdm/policy-csp-internetexplorer.md @@ -19457,14 +19457,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-kerberos.md b/windows/client-management/mdm/policy-csp-kerberos.md index 19eb607a74..06023ba3f8 100644 --- a/windows/client-management/mdm/policy-csp-kerberos.md +++ b/windows/client-management/mdm/policy-csp-kerberos.md @@ -464,14 +464,14 @@ Devices joined to Azure Active Directory in a hybrid environment need to interac Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-kioskbrowser.md b/windows/client-management/mdm/policy-csp-kioskbrowser.md index 4275bfaa7a..5bbe648950 100644 --- a/windows/client-management/mdm/policy-csp-kioskbrowser.md +++ b/windows/client-management/mdm/policy-csp-kioskbrowser.md @@ -429,14 +429,14 @@ The value is an int 1-1440 that specifies the amount of minutes the session is i Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-lanmanworkstation.md b/windows/client-management/mdm/policy-csp-lanmanworkstation.md index e4183f08b5..011b60a5d7 100644 --- a/windows/client-management/mdm/policy-csp-lanmanworkstation.md +++ b/windows/client-management/mdm/policy-csp-lanmanworkstation.md @@ -100,14 +100,14 @@ This setting supports a range of values between 0 and 1. Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-licensing.md b/windows/client-management/mdm/policy-csp-licensing.md index d99c044bcb..c4e988fd6d 100644 --- a/windows/client-management/mdm/policy-csp-licensing.md +++ b/windows/client-management/mdm/policy-csp-licensing.md @@ -166,14 +166,14 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md index 1426fad1c3..8920a8ba90 100644 --- a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md +++ b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md @@ -3834,13 +3834,13 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-lockdown.md b/windows/client-management/mdm/policy-csp-lockdown.md index 0858f3de45..81f3ae2ca6 100644 --- a/windows/client-management/mdm/policy-csp-lockdown.md +++ b/windows/client-management/mdm/policy-csp-lockdown.md @@ -99,14 +99,14 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-maps.md b/windows/client-management/mdm/policy-csp-maps.md index 1824c9956a..87ede82676 100644 --- a/windows/client-management/mdm/policy-csp-maps.md +++ b/windows/client-management/mdm/policy-csp-maps.md @@ -164,14 +164,14 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-messaging.md b/windows/client-management/mdm/policy-csp-messaging.md index 5887db04eb..43fe8e0e47 100644 --- a/windows/client-management/mdm/policy-csp-messaging.md +++ b/windows/client-management/mdm/policy-csp-messaging.md @@ -98,14 +98,14 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-mssecurityguide.md b/windows/client-management/mdm/policy-csp-mssecurityguide.md index 15c99eedf9..7835ef3d3c 100644 --- a/windows/client-management/mdm/policy-csp-mssecurityguide.md +++ b/windows/client-management/mdm/policy-csp-mssecurityguide.md @@ -424,14 +424,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-msslegacy.md b/windows/client-management/mdm/policy-csp-msslegacy.md index 768f18e3e2..ad6734ce70 100644 --- a/windows/client-management/mdm/policy-csp-msslegacy.md +++ b/windows/client-management/mdm/policy-csp-msslegacy.md @@ -292,14 +292,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-networkisolation.md b/windows/client-management/mdm/policy-csp-networkisolation.md index 0613b4b8d8..3f42c5653f 100644 --- a/windows/client-management/mdm/policy-csp-networkisolation.md +++ b/windows/client-management/mdm/policy-csp-networkisolation.md @@ -544,14 +544,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-notifications.md b/windows/client-management/mdm/policy-csp-notifications.md index 76818866d9..fb3651acb0 100644 --- a/windows/client-management/mdm/policy-csp-notifications.md +++ b/windows/client-management/mdm/policy-csp-notifications.md @@ -264,14 +264,14 @@ Validation: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-power.md b/windows/client-management/mdm/policy-csp-power.md index 377bc2e1b2..5da2930e76 100644 --- a/windows/client-management/mdm/policy-csp-power.md +++ b/windows/client-management/mdm/policy-csp-power.md @@ -1731,14 +1731,14 @@ Default value for unattended sleep timeout (plugged in): Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-printers.md b/windows/client-management/mdm/policy-csp-printers.md index 315f762dff..e93f27025d 100644 --- a/windows/client-management/mdm/policy-csp-printers.md +++ b/windows/client-management/mdm/policy-csp-printers.md @@ -287,14 +287,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. From 2659e5a4e36317efaaa7cbece58ef10f0fc9eaf7 Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Tue, 28 Jul 2020 11:57:01 -0700 Subject: [PATCH 444/589] pencil edits --- windows/client-management/mdm/bitlocker-csp.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/client-management/mdm/bitlocker-csp.md b/windows/client-management/mdm/bitlocker-csp.md index 2fdbf93bd7..b6a6533744 100644 --- a/windows/client-management/mdm/bitlocker-csp.md +++ b/windows/client-management/mdm/bitlocker-csp.md @@ -1075,15 +1075,15 @@ Value type is string. Supported operation is Execute. Request ID is expected as > [!TIP] > Key rotation feature will only work when: > -> For Operating system drives: -> OSRequireActiveDirectoryBackup_Name is set to 1 ("Required") +> - For Operating system drives: +> OSRequireActiveDirectoryBackup_Name is set to 1 ("Required") > -> For Fixed data drives: -> FDVRequireActiveDirectoryBackup_Name is set to 1 = ("Required") +> - For Fixed data drives: +> FDVRequireActiveDirectoryBackup_Name is set to 1 = ("Required") > > Although not required, we recommend configuring: -> OSActiveDirectoryBackup_Name to true -> FDVActiveDirectoryBackup_Name to true +> - OSActiveDirectoryBackup_Name to true +> - FDVActiveDirectoryBackup_Name to true **Status** Interior node. Supported operation is Get. From b42e87de5bf96907111ae49e2e99a0165a6a4424 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 28 Jul 2020 12:00:42 -0700 Subject: [PATCH 445/589] Footnote text update-Set 3 --- .../client-management/mdm/policy-csp-privacy.md | 16 ++++++++-------- .../mdm/policy-csp-remoteassistance.md | 16 ++++++++-------- .../mdm/policy-csp-remotedesktopservices.md | 16 ++++++++-------- .../mdm/policy-csp-remotemanagement.md | 16 ++++++++-------- .../mdm/policy-csp-remoteprocedurecall.md | 16 ++++++++-------- .../mdm/policy-csp-remoteshell.md | 16 ++++++++-------- .../mdm/policy-csp-restrictedgroups.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-search.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-security.md | 16 ++++++++-------- .../mdm/policy-csp-servicecontrolmanager.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-settings.md | 16 ++++++++-------- .../mdm/policy-csp-smartscreen.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-speech.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-start.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-storage.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-system.md | 16 ++++++++-------- .../mdm/policy-csp-systemservices.md | 16 ++++++++-------- .../mdm/policy-csp-taskmanager.md | 16 ++++++++-------- .../mdm/policy-csp-taskscheduler.md | 16 ++++++++-------- .../mdm/policy-csp-textinput.md | 16 ++++++++-------- .../mdm/policy-csp-timelanguagesettings.md | 16 ++++++++-------- .../mdm/policy-csp-troubleshooting.md | 16 ++++++++-------- .../client-management/mdm/policy-csp-update.md | 16 ++++++++-------- .../mdm/policy-csp-userrights.md | 16 ++++++++-------- windows/client-management/mdm/policy-csp-wifi.md | 16 ++++++++-------- .../mdm/policy-csp-windowsconnectionmanager.md | 16 ++++++++-------- .../policy-csp-windowsdefendersecuritycenter.md | 16 ++++++++-------- .../mdm/policy-csp-windowsinkworkspace.md | 16 ++++++++-------- .../mdm/policy-csp-windowslogon.md | 16 ++++++++-------- 29 files changed, 232 insertions(+), 232 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-privacy.md b/windows/client-management/mdm/policy-csp-privacy.md index 52e0e7fde5..9b20cf82c2 100644 --- a/windows/client-management/mdm/policy-csp-privacy.md +++ b/windows/client-management/mdm/policy-csp-privacy.md @@ -5964,14 +5964,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-remoteassistance.md b/windows/client-management/mdm/policy-csp-remoteassistance.md index e36df3ff42..39e59b9ba2 100644 --- a/windows/client-management/mdm/policy-csp-remoteassistance.md +++ b/windows/client-management/mdm/policy-csp-remoteassistance.md @@ -371,14 +371,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-remotedesktopservices.md b/windows/client-management/mdm/policy-csp-remotedesktopservices.md index 5f404f8750..e4fefcbc62 100644 --- a/windows/client-management/mdm/policy-csp-remotedesktopservices.md +++ b/windows/client-management/mdm/policy-csp-remotedesktopservices.md @@ -498,14 +498,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-remotemanagement.md b/windows/client-management/mdm/policy-csp-remotemanagement.md index 692699bfb9..6c88c68b12 100644 --- a/windows/client-management/mdm/policy-csp-remotemanagement.md +++ b/windows/client-management/mdm/policy-csp-remotemanagement.md @@ -1152,14 +1152,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-remoteprocedurecall.md b/windows/client-management/mdm/policy-csp-remoteprocedurecall.md index dde7ff458c..d6b5c1ab71 100644 --- a/windows/client-management/mdm/policy-csp-remoteprocedurecall.md +++ b/windows/client-management/mdm/policy-csp-remoteprocedurecall.md @@ -190,14 +190,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-remoteshell.md b/windows/client-management/mdm/policy-csp-remoteshell.md index e233f89f47..534584eca6 100644 --- a/windows/client-management/mdm/policy-csp-remoteshell.md +++ b/windows/client-management/mdm/policy-csp-remoteshell.md @@ -543,14 +543,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-restrictedgroups.md b/windows/client-management/mdm/policy-csp-restrictedgroups.md index 24b822bab5..86a64acdd0 100644 --- a/windows/client-management/mdm/policy-csp-restrictedgroups.md +++ b/windows/client-management/mdm/policy-csp-restrictedgroups.md @@ -170,13 +170,13 @@ The following table describes how this policy setting behaves in different Windo Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-search.md b/windows/client-management/mdm/policy-csp-search.md index 340ced4d5b..e23ac51307 100644 --- a/windows/client-management/mdm/policy-csp-search.md +++ b/windows/client-management/mdm/policy-csp-search.md @@ -959,14 +959,14 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-security.md b/windows/client-management/mdm/policy-csp-security.md index 03d507debd..81eb2aa84e 100644 --- a/windows/client-management/mdm/policy-csp-security.md +++ b/windows/client-management/mdm/policy-csp-security.md @@ -707,14 +707,14 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-servicecontrolmanager.md b/windows/client-management/mdm/policy-csp-servicecontrolmanager.md index 337b071faf..f1ac63ed5f 100644 --- a/windows/client-management/mdm/policy-csp-servicecontrolmanager.md +++ b/windows/client-management/mdm/policy-csp-servicecontrolmanager.md @@ -112,14 +112,14 @@ Supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-settings.md b/windows/client-management/mdm/policy-csp-settings.md index 63725c1e2e..6052b904e8 100644 --- a/windows/client-management/mdm/policy-csp-settings.md +++ b/windows/client-management/mdm/policy-csp-settings.md @@ -897,13 +897,13 @@ To validate on Desktop, do the following: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-smartscreen.md b/windows/client-management/mdm/policy-csp-smartscreen.md index 0c11e9b882..2c2fceffc1 100644 --- a/windows/client-management/mdm/policy-csp-smartscreen.md +++ b/windows/client-management/mdm/policy-csp-smartscreen.md @@ -239,14 +239,14 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-speech.md b/windows/client-management/mdm/policy-csp-speech.md index 3e6b2173c0..aca2851f58 100644 --- a/windows/client-management/mdm/policy-csp-speech.md +++ b/windows/client-management/mdm/policy-csp-speech.md @@ -97,14 +97,14 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-start.md b/windows/client-management/mdm/policy-csp-start.md index 1431f9c0b2..31872e9f67 100644 --- a/windows/client-management/mdm/policy-csp-start.md +++ b/windows/client-management/mdm/policy-csp-start.md @@ -2094,14 +2094,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-storage.md b/windows/client-management/mdm/policy-csp-storage.md index 823f724dd8..0afd39b6c8 100644 --- a/windows/client-management/mdm/policy-csp-storage.md +++ b/windows/client-management/mdm/policy-csp-storage.md @@ -731,14 +731,14 @@ See [Use custom settings for Windows 10 devices in Intune](https://docs.microsof Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-system.md b/windows/client-management/mdm/policy-csp-system.md index 5eec6fbe04..73f8d6586a 100644 --- a/windows/client-management/mdm/policy-csp-system.md +++ b/windows/client-management/mdm/policy-csp-system.md @@ -2064,13 +2064,13 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-systemservices.md b/windows/client-management/mdm/policy-csp-systemservices.md index 8318b0cc11..19836d1ca5 100644 --- a/windows/client-management/mdm/policy-csp-systemservices.md +++ b/windows/client-management/mdm/policy-csp-systemservices.md @@ -388,14 +388,14 @@ GP Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-taskmanager.md b/windows/client-management/mdm/policy-csp-taskmanager.md index 186e946c60..9787467c21 100644 --- a/windows/client-management/mdm/policy-csp-taskmanager.md +++ b/windows/client-management/mdm/policy-csp-taskmanager.md @@ -97,14 +97,14 @@ When the policy is set to 0 - users CANNOT execute 'End task' on processes in Ta Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-taskscheduler.md b/windows/client-management/mdm/policy-csp-taskscheduler.md index 2e1ccf2db8..44a8f08bdd 100644 --- a/windows/client-management/mdm/policy-csp-taskscheduler.md +++ b/windows/client-management/mdm/policy-csp-taskscheduler.md @@ -82,13 +82,13 @@ Added in Windows 10, version 1803. This setting determines whether the specific Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-textinput.md b/windows/client-management/mdm/policy-csp-textinput.md index 79e47c91f8..e1799a0c16 100644 --- a/windows/client-management/mdm/policy-csp-textinput.md +++ b/windows/client-management/mdm/policy-csp-textinput.md @@ -1708,14 +1708,14 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-timelanguagesettings.md b/windows/client-management/mdm/policy-csp-timelanguagesettings.md index 506b7fce62..d029929145 100644 --- a/windows/client-management/mdm/policy-csp-timelanguagesettings.md +++ b/windows/client-management/mdm/policy-csp-timelanguagesettings.md @@ -91,14 +91,14 @@ Specifies the time zone to be applied to the device. This is the standard Window Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-troubleshooting.md b/windows/client-management/mdm/policy-csp-troubleshooting.md index 125cc2149f..881b9b3a43 100644 --- a/windows/client-management/mdm/policy-csp-troubleshooting.md +++ b/windows/client-management/mdm/policy-csp-troubleshooting.md @@ -140,14 +140,14 @@ By default, this policy is not configured and the SKU based defaults are used fo Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-update.md b/windows/client-management/mdm/policy-csp-update.md index 3c5cf80686..d9187a1854 100644 --- a/windows/client-management/mdm/policy-csp-update.md +++ b/windows/client-management/mdm/policy-csp-update.md @@ -4442,14 +4442,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-userrights.md b/windows/client-management/mdm/policy-csp-userrights.md index 69a0f091d0..73f3dfd843 100644 --- a/windows/client-management/mdm/policy-csp-userrights.md +++ b/windows/client-management/mdm/policy-csp-userrights.md @@ -1881,12 +1881,12 @@ GP Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-wifi.md b/windows/client-management/mdm/policy-csp-wifi.md index 1d300f2268..770316e0bc 100644 --- a/windows/client-management/mdm/policy-csp-wifi.md +++ b/windows/client-management/mdm/policy-csp-wifi.md @@ -436,14 +436,14 @@ Supported operations are Add, Delete, Get, and Replace. Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-windowsconnectionmanager.md b/windows/client-management/mdm/policy-csp-windowsconnectionmanager.md index 12e05d914f..4cbed0f5f3 100644 --- a/windows/client-management/mdm/policy-csp-windowsconnectionmanager.md +++ b/windows/client-management/mdm/policy-csp-windowsconnectionmanager.md @@ -109,14 +109,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-windowsdefendersecuritycenter.md b/windows/client-management/mdm/policy-csp-windowsdefendersecuritycenter.md index ab032c05be..d2c74ba941 100644 --- a/windows/client-management/mdm/policy-csp-windowsdefendersecuritycenter.md +++ b/windows/client-management/mdm/policy-csp-windowsdefendersecuritycenter.md @@ -1602,14 +1602,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-windowsinkworkspace.md b/windows/client-management/mdm/policy-csp-windowsinkworkspace.md index 3306ca9d6e..bc97e2e774 100644 --- a/windows/client-management/mdm/policy-csp-windowsinkworkspace.md +++ b/windows/client-management/mdm/policy-csp-windowsinkworkspace.md @@ -168,14 +168,14 @@ Value type is int. The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-windowslogon.md b/windows/client-management/mdm/policy-csp-windowslogon.md index ec19f8ef3e..d3793a4bb7 100644 --- a/windows/client-management/mdm/policy-csp-windowslogon.md +++ b/windows/client-management/mdm/policy-csp-windowslogon.md @@ -606,14 +606,14 @@ To validate on Desktop, do the following: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. From aab9f562cd47a03ea763fd20799f44ee372725ac Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Tue, 28 Jul 2020 12:04:23 -0700 Subject: [PATCH 446/589] pencil edits --- windows/client-management/mdm/bitlocker-csp.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/bitlocker-csp.md b/windows/client-management/mdm/bitlocker-csp.md index b6a6533744..f6cce218b0 100644 --- a/windows/client-management/mdm/bitlocker-csp.md +++ b/windows/client-management/mdm/bitlocker-csp.md @@ -1076,10 +1076,10 @@ Value type is string. Supported operation is Execute. Request ID is expected as > Key rotation feature will only work when: > > - For Operating system drives: -> OSRequireActiveDirectoryBackup_Name is set to 1 ("Required") +> - OSRequireActiveDirectoryBackup_Name is set to 1 ("Required") > > - For Fixed data drives: -> FDVRequireActiveDirectoryBackup_Name is set to 1 = ("Required") +> - FDVRequireActiveDirectoryBackup_Name is set to 1 = ("Required") > > Although not required, we recommend configuring: > - OSActiveDirectoryBackup_Name to true From 8cd009ba1f255de4e31afec1d3140d105c197f9a Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 28 Jul 2020 12:04:25 -0700 Subject: [PATCH 447/589] Footnote text update-Set 4 --- .../mdm/policy-csp-windowspowershell.md | 16 ++++++++-------- .../mdm/policy-csp-wirelessdisplay.md | 16 ++++++++-------- .../mdm/policy-csps-supported-by-hololens2.md | 16 ++++++++-------- 3 files changed, 24 insertions(+), 24 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-windowspowershell.md b/windows/client-management/mdm/policy-csp-windowspowershell.md index 7ad19cb828..cc4f87b917 100644 --- a/windows/client-management/mdm/policy-csp-windowspowershell.md +++ b/windows/client-management/mdm/policy-csp-windowspowershell.md @@ -106,14 +106,14 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csp-wirelessdisplay.md b/windows/client-management/mdm/policy-csp-wirelessdisplay.md index e261f4ec6b..eb74f99772 100644 --- a/windows/client-management/mdm/policy-csp-wirelessdisplay.md +++ b/windows/client-management/mdm/policy-csp-wirelessdisplay.md @@ -540,14 +540,14 @@ The following list shows the supported values: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. diff --git a/windows/client-management/mdm/policy-csps-supported-by-hololens2.md b/windows/client-management/mdm/policy-csps-supported-by-hololens2.md index 0a0040f58c..e5cdb0f0ca 100644 --- a/windows/client-management/mdm/policy-csps-supported-by-hololens2.md +++ b/windows/client-management/mdm/policy-csps-supported-by-hololens2.md @@ -97,14 +97,14 @@ ms.date: 05/11/2020 Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in Windows 10, version 1909. -- 8 - Added in Windows 10, version 2004. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. ## Related topics From dee09cc038623a291e1a2ce751ca6049069b6837 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 28 Jul 2020 12:33:27 -0700 Subject: [PATCH 448/589] update xls --- .../downloads/mdatp-urls.xlsx | Bin 17145 -> 18161 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx b/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx index b1a37416092ff6c6b25788e3c08781b71b170bb4..ef0d32e551a361643d3bbf9c240ef32bcc06281d 100644 GIT binary patch delta 12426 zcmZvC1yCGY)Aj;Ev)Dqg;BLX4#ogV42bbV(3j_!j+}+)R26qnw49zZeHRRK_5}t{Sq|LH!}!o!M^%ITVC7e#qr>T|Kll zVxbQ%mC18qO!B0Mi7etG&o5h|&(-T7uU#k2&)=Bsq*w^z!cZBsf$DMm)oZ!_RKg4P`?WF3?AwcU{Q0#A;TCxlFjd zWa8&O)oLx>wjO^Iqt2|~BoJ<}b&;6$YB#o6(*IhY$KVHF%dQR*EIyC^l=J5&@$Fb= z=cU{%D*_i?w+>0C*|FR9@A%&$;YfWhUjqOyFK~eWwi1>>hZ!u?N^5naa73^WIXG5~ zkdwd{vhVHuOZ4PZw#*WH3Z_pmtf@~%+^I1IEl)R+A}+a kTI?pdCxSLU_(9{CvF zZlELy zq+p0C5+9Gzxs6#6J-Fb^)66ZT?5^<}*$*9gAUA;{rg{IAy?0{sLseChDmV=;^Vi)G z4}5)FfrK*_WI0vRXP2do4ZT>~j(IrmhV`p}$+*@8H)wpd_8#i8P;l`67dpQ~z~8Ci z006i6Qv^JSu6;fawx6NZ%cmW86a;wyCw?$sQTDjxz;tnN1b$i@J~GluRpVmqCMC$F zh3HG(xMWzS^TvfclVAp9fs@ngR~c??ris%pqrN54q&(k@t&_uL6xIVy8#&F#j``D&D~npl);n$bQi388^=P*>y73Xe-ex=N zCD)8DyA;baVlvHQqoFboypkC!N87A7M!!u_fL|x3zECb_Kb-@rnv$5so7#QArpSzF zXJif@r-aYhylg+QHIla!?IPVR!YKtB<8K#GiXh=^sOYeP<~=aySYRLh3~P{jTOY-Z z#MuEt5NFTu%qWiy|quGtg-~mT5PLhvlS@~7#gY+uRkGI&AxGS)Jk>N-_RgYh$KkSU8Wwub z{*d?8xedi|A|$V3<;Lpx-ze>O{zU11iMRwoXnjm3gpqof(4V|uXh0_&@6_dg8?JO^ zn<)xc2K~y~nI38aedhZ~FVm|dKKDX9dCS=I?eh+E!}ArRqb}?U$0=~d8L|0d?U4!I?SZK8u<3= z8KQE7jvM_p=Lj@MoBJ5DNZ46570Q&HYEdYIA&T(W7cSjVyFAO5iU~=gX%&Nx7VpR!GJ*%+#S=gq0!@IS?4R}g%kOG99e;6aI%8j?n*mlj+R66kV~zlQdHbevn>z(lhs+>D1LWR4YK`-{iyJU6;>=+@xDV|)4Nve4Q>pfAY$lUZMD(;MZvKm6L0e zjvvIJ{YXFd_`vFG)7F|mm7%*v!>*ZZ^KSq3(#;(A=-5U1yED(H`qdXl+Qnlq^BQEl zv%|JAVnXTK_azGzXLS5T_n|ZE3DUVZCQ>XQP@TLqW_Mu*F=jAqVZB)D>}c!IV?307 ze2yP6{WN-fFxc|SgK_r3S!^W4wQ}{V_KOnE+u8n+Xq$)Yhx?79hm+R*LG*mTpWf5i zQAPF$TUIY)+XuZX>D_y7EF*$`ctFU>;LDuv%Wvb4$jK*Vb^5-|`+h^KX~Q|*ch4&u zfculHgWd55XN%6;$E5?ShUMxb#acUyPEXEq=7*)(X|?9FlBK&j^NYtNCzYuTV0-6t zC0M+&6nixP{=)pCl2NEBxavsQ?Q`vpFwW@H{oqJq#`S=k`QwSP?N0V_7Zc<#_6|}d z=?O_ehOD^}YZ~ILWnaI{KW0?^G$grk`{p+B8E*f$m&Cn%Wr}#gZ4S5HSjV;5vzF=z z!as576uwB|eD<)hJ8{+fd{(sdRuAaadq!FJJbwOQ*Xj98aw8jZypoi(XDs(nx9H@= zN@%EqbB2mIKl$7j@@ci-lm|i>NxgNObUoY4G^&IncCcWwabexmX_#ye<}(^Ss%d!A zvG@Iv4y@ZKG48_|gUY$MB`a*x@NVR{wS;K45*D}5+Spn_M@RampUR7J&EF)Qqt6OH z{O~ns5!-aAUwL;OadXm`o=xO^UqiC{+f^kivaZRj`Fx(>XSSm+q<&%e?3;n#!#BrQ z2^7`#=nrN(XJR^2im0u_3hoxOBq!CY`p-3kH=wBKapN_&;~~+(cl=(tTjRWJ-e;u| zmtvy{5kS#Ff$#+9PJ%<0dLLEB{7E)7#;r*p=Dl!Dq4;pGSz3|6_K5tcs2X00-5(s2;Hs*W`&eNM2lNodV?0 z3-JK;B+!r%DcW!T8*5?l?>(h#XpRGa_{hgWR8T(h|IZdSUn(q)(92#7WekHdhNSw=GkeG?$H24*1C=szV$yA^(iRwHbcv7PNr3jVy({S=I4~WFv!#{v z+Uyx36#LoH}y_2v{1*f z`mhaFkxZ1Z*fv1L3yXM482o{YTjE_M8kx~=LK)nQeJ&fyV%>;mVJvADeR~*#rjbV5 zy=`)!W}}N%Y}@9lNW1arVDxnq8xDEl44L|=M}>51eB7MuE3H7tU{^kX!F%3N@WQML zD~dahr9U9IP!RrmJ0T#SGH|e`>l+%JGcieu`Y#VTDJ262RwIqfY2r_OC^fZ^Cs(7Y z*LHwk@{UG{yL~`sX2h;-RB`;^FlQ&jRgo^NdhK&fLMU&!kNU6eVH+xhiZU#?UtkoL zciKD;tK@PrI7X0gxQjY?J2Mq>0QEHdN5*q%z0zKGc}W;{+a0)k;oR#!e@-b}1XpY$ zvxkR6cKQ8V_S7*mjjDA-k4?>uMy|}14;gPScZkSjZ>KZukT;NrBF_8*2eUsUaL3S8 zC*pnmW!ak(B`W`#dfcvLq}r3<1l1Ttm!2F4okp4BwqOVHl*@&OZ@g?1jHDwf8o>8l zpC1_rhNnXahb>72<~=6W;KwA1V&r(B1rXi&Bd`fhA@ut5MC@VZ1hK&KU%;pks(62> ztMD|0su)_?hod8F2cy=@7$JpQf+>vs)UA&HU6=!KBTHnSf?=2wH4y_Fxrk*l-^L6@ zQ0(0v59CEYHO|G9(A5-Qq0eJJfB;6UWo@^cMQofu#n_pHwb#QZ1Uqmh3$Hf_@0BZd z$a@SY!QKQ)$}L)PV?1;*WeOwdcm8a6vRjFwz^}ZmDY=S_HW@S?=dYAv*I7?l_Oft_ zGEnc83(w>>>1o4OLi46dIpCQQb0kQ(XA#755+S0m2(m1VGS*Z7hlw^v7und0jtnS& z#$fYtiXW|w&_78ak1Hjst)4y@&&64rO^oQIUS3vFRwO(i4?v&(U}%TzP3U4e1L~Op z3~BK3Vy%qAkS>6%KN$<_g~ISE`A}%>Amn-{`&oO*U z*^E@zCBYIKQ1@1$LBV$!sGCk9QhETvC|@;26AffbVAUK{K72S+ zhUW}aO2Yxsf67&sU=SYyiN2XRoAAUgizz1U7ghl@fKmu?YPnZCwREIiWc%T;j%Wdt z=^sC`07K`zPcvktXWUbh*jJDom(n%U#gdhhBiR*0U_}gMcgebKct^(44fT@x zih}DtJZeTp5hC+>dnzEWx|Lo|We}N5gIJ;34UGry?U7Ytf8B)GJ8Zp|d04iNVA0JV*B2{}0_n-po0z6uj zY)!UAKiMK!HMne#B1j-X_b$Dzn;FaZ!DH%i8Zy=Hj<#}Yy1y;hQ=BMWm<=k0uDWFK;MU)CC@%gVGt@Hv%>bb7V1(yK`k-lOt35+Y3REggW+WKiNQ7H6-cfnYEuqSnQ!%@sXy1dB6}hW)IlO zydN*GqLV#i*=VS$6QyxupixEJ_dZPhp3X+u$eI)y@7J{TBa@I<=NmScZCHca( zRLuLu+f*!^!jZdF&=gW&z)!~f;{c;KsO^=jPe?-YU#S2(PT9ywY}7>n#12+sKpr5a>h>=UPy%-gfANn# zib?EdA!$nAd!jh#+f6Cox`>rEm@EBd{0GoeE2?h10!lm<&eJd&ypjz_mB|7b!zW|G z45P_*q=UY@Au7@fuW~+P^1?qsb6Xz=F#@WBfGGsGeOSO5q}w3`9em)0N*o4XC)F#w z`D7soZ5QcZwt|Z8!Yg?7muN)163o-sr>|^yzk2WBC$fVcVIR)#l>J2hN)sE?BPcN< zvVJg72fIbV_#+h_VZQp#GV1A!5U;awO?2T7@}{7Ye6z*oXw0QK?$_1!FcK{If{ zo9+Z-R{h{y#sAO_50O&g2mGPMhlY2(yktW6DSon6+-Z=av}6tQOQhT|-=Q|HFCY#yt;42O~RI+hZLGDV6I z+Ye=gULOzyggO&;kt?3RTJ}3dhEAGQ8C$TDlAt$19IgmK@Jt+z(?{_9u2$_M%VlD% zYN(O}as-?5U@IUtE?za}Lk_L~`!J3Wx>y8xRR7Ib1nXD+rUkjEAuv>?1hm-MB5d6$ zbGk$pF_+leP{G3QiyW_={XWyBBFGEogbh*H*-Svfc2k_NS!3VTu_cB1+;V~2d$D#$ zX=osUo4(zK48@&sX*3>AWqQ!L=80?k<}bGA174wz6I+uF-gT*pM)g)LSJRXbtBiMT z;v>qw!jfHe?A>D4F*VW{P$9a?u1Q3%;N5~Mkr|SvwgcTnsE|{VyfV-ksjl!e147*K zAU}W+pNVNP0r|QP#IK>14kTna@eTVCLz)Gp$N8djTYvlm+bJc?^i)J$vIuJ8rKsT2 zC53!9oyxNE+RrSkV)1c8YL|(@EO|k~bK-}y;ft-zoy`dR#`6r$oHN(`?=vr z*r5pWKblp%6~V$wu7}TLzVGaJmC1RItn4hQW#EWU0>wu%5;7A0Y>&CQ{fHJ5Ut&Qd zET~cFRXc_7!HR{59=thZ_NyGxZJui2M{(y=xbHQI+?>+Gf7==l@?O(H5J<&fgr@;? z0IRS@dZ@E(;=H^!UrqaLO7 zpv;{!>0Dp{t9n_s=|ldTTGSs(O$MdD_eKx-=G#ux&kkrK%qTJ)D)nHyD>?FpjEUo- zF0@Y6Br1t{IsNV2sFhnn*&$PB?5GyCFO^G+Hg`j@RmevmRG5W)UgEqn2 zP1~op$qvn;#)?`0An;?Pvl)->7(DGz#Ph|2KlF+vc(y|bf zq>y8irQfPg3o|E3hohIbWeU_R@>uBn-dY<6%orFxRwDww#((*sfu%%4MHLE z#Xs$ls5(tblJfL+`cs9OxudKani^b`hgKB9#$(JHj5T#nw?6NSx$MHH z3FU=sqN(`50e7gMN{m)(aY`X@_$GU;;MHlN_nhURj*>I9#vwQ>|4L$i-70F*{jlUn zEcPF*U<(s}`D8$*GJ0nKRI8c!lA&VHHnd~nJP9XL$cV1HB}ZF1zyDr9V1D9nDC(KL z*y}@m#|Q7^X{t#_=9bRY*(JXC<3G`Z$Hc*V5l*%{7dgx$!)nl6#S$&U@N}0es|G<+ z8xj+=2NbD+Pn~!Kw%;Y0AH1G!H;)6apE2zhe22*V6N$u?E_?9_X!`7CefecBn{xyg zQQH*U#fyG;pV>b2sCbrLsnxZ(wAW<)742IL-Sh)845;_H;VH!D$xpsB@&cZ{y6KAR zlW_pg-ts8P4BQh=th179w{5aSPyJ#81bJw+ewG*`1!WSqnoRxtvmYyZ#03)gSyOEF ztSq05Se9y2#WMm5k`-$Y*{yS>K@^qthF6tcgDJd8PCH4V;g8k^y!8S2mXZjPGQRX=|i)cX1KvEk);alv-3 zJo)KE=W5%siy`;YliSx-cm8P2m$`wCQCFU^U#_Vh?J4E$C~a- zz3PdCmS#&ewPV*@pJbGkvC_?&{Sl>+B^|Szl{+_sYZ#F?_!^w`okz)w1lQ_=07k6J zxX-o$?+`iTHl`UCi7!5U16M6um`)G`YdkbMiBgQ@q4RlabeoOLT}`wAo?QD^erZBo z)klksgaV${P4=F3#qSc~RM`D}P!ucriI2g7eS5zgUBT<4(UAgICgR~mBF-#KN^$BI-hQ@`A-&^}sj}d|`qIqY7Z#V+NQ$nWihkwIYQa_~Drhk!g{rLnPUI%*ObVw& z*JvY8qchpJf!G0-ld1NhJ%&b48zhg&P;7&zD6_grK;yz#VvVzvKt0;lQbk|i5aC7_ z+@O`%I7Km6wDz`Kb0U(8+Jpoi5|IB=YOqUiD*9<(#+*eijdCDu_stWrzZ$3;_M6R{ zx%?dyL3bsyGbRMn%5Jmtha@R?DG^9usW5JI$+7bL_MkqHJpG<2q|A>hyZgn2 ziR!4zk2%ky2VW6eeT3Lt>6B+(&nF=+bX*N1J>OXux_hz?1PIg%rXLW_v(Nc<9_$pX zWs2%*@?6wMH_hK&(dE4A0?NcK(;+<(RZo@@u8}v+gHcuQ@BwH_d^<%Wa>8zosT8ct zv_WZ8P76iz12RsP5^V$!qhw82Y}0JM|Y+!Y3oHcWRs%1XYK8YtkIj<9xCeuC8ZLXLO4a@Qz81hNYfwykx6!o$IiNObBW^j`jPFGwI)~ zUs%kzu8p@GsT!a)V(fO*|44a#0p)` zMwSvbuV;bHz!4``{yNfn&N!xG4Cbt2r`z+5{koq{_Bkcn%=}FsAV@-zMlc!K%sk#U zoZ{J%BXxJq%qyQ5BFJ|+R6fWFe0%=v2}0^21@tcW`6!yHk3OmUA!d$9 zye(xOtnPel*357KJfHSg=2K=iZR$BHHgVZH8JHaYflV-Dkbb8L6ho=(FpXQjb)#ai zZRx4ThRw~{S`*1HjoUKl%j@%75;n`~&1!=;YxbS-K7!9_7?MGYclnkB40hu z&fq!~_)xswNWf1ugIF%7CKD7&ERT_$81;7S>3!#n%NG_=!hP+6_V0<7HkICZ(?z(<&s+4 zH#0X#_`8zN-n>aOY|X3fQqdOw09M+zbe)zuJY3^|#J}Y+lPDM3hf97R6#a9qDV*td zqk0MwYwt&dBfHy%UxD{~Yw6ve$4{wC<`&0u^li98wGKT#8IRc*pojG4Y|UgIzC>1o zJ2u{;KdGQ78?Kmh%dN{{sK_@eKilc=Qsl>!S6f}=G?sc7uQ~~OR;j%vh|;xbbZGr) z$JzFNU8(uXxSaRf8SKR53jdid#-Q8EV>zg>Z7z{xwjf>MO3M5l9&$Ldd=Jw*!&rTO!U+e0ss*AHvZuqF=UAg!;hrqCE!$zpiA}0{Nqn5d|>h0@O~YPIoj(X z=|}}_a*ep!&F8BJ#phV@gpb3%NJo?IgRNUDXTP_0vL~#1aC)>$XElm(Gh9=YW1|Yw z3|y%VUk(ghQe5@=!9Qg6T$6g-p4*A=) zPM;xT9QCP~;6`>by|kdGx;k{@k-~!->D>{1S3my2j^?;EXI8z+%T+^{D(1?z4wpF- zV;nY6a&Bt}(8{U-ysaqTprbi=(%?ATFhM_Fug;VKUe@%ZU=Uo0l&V3qes4?7H&=~6 z|D`52HuY1qw#NCIs1oXgIV6i&>KDw(7sx{YbNpUu8xW%Rn(!6(j{I%_*v zizkl5T(N53gFaxgRd7I}7>T0ob2C)Q>CxdNBN1*)LK5`wV$HTYPP8JX`t8u(Jvq4^^&S?0SXmeUc! zQXQt24~nF+n&!_0Kq030r~>IsaMys;O>^c~e)3}FLL_~yH=~M>j+HNK8kKcDvD_bV zMSgbS_ZFeyk@qD?A56z&l73wK8qcOCkeKy}_I3ETh0->sLJtuAKq)XG{&g40I1g!@#N4A^o?j!M2P@BE<9iG-J2abLfG5JL+5h zkID*VniXzzL9S!mA~Nethl&wZpu1-mAF_97am2=UBH-f$!!=*>qyfJ8)D&!+ZQbbj z3j4mWakQpQ!Yd9*0*-Q%7Y`avdtCdwHrKYDi>z7CbPusx|NZ&X;oU~7+wBWk_w@$! z0%^J9i0ct=5r{AsA+DgQYQ$+b_GZvWJOLA-30=wPk0b((G#=@EqTMFC2uj1#LLajI zT1nsCctZLFPon2{A47e|qZL|c?K509N$H4;_;+HRKTc$5zbEz_K99$R<30HHow}2= zwMy!fbzT+%A2m>fo}rjsp8QcNioesmA>da zF&^1`3_PI_=J>nMPSl>*VNBKuvgvfLi<1tKCePFok!UYt%lb;aSnesdLj9JoNE_*M zGnoj7R$kROHoxZDZ`1GmsS&M;A7{WLMy(E@i4+#&aG!0GJ>8QII75xpsoq)Nc7yP$agjnL@vqG{rb^J z>!USYo~@eAqS|U>4{*S+twNOdb4IOzrM`{lYHc4XHRoJ)a0VGYEN?y=IYk-@Bvwm=QWwehlq1TZCLhpixPV~dxGjkUg7BEy+#HfN>8U( z81%*<)t6j5p*HLBqOPN4-Y=*(;XW^KLUuze$Lr+55qn)`QtKAUHNzn8Cr{go1GHs< z7$NBl7Jr1kC7TZ?Zn`Yx$X%KQ!rV$@Q|3uxz`H>{UK~H> z+GDP70*C~-!6v!^+tdora4=YVnqNvTc3;0w(_KEdqyD(?(e6I&gx7!_5V?6JE^4OA zFse`_vYfNs&R22>CR)0I^RrTi(5_^S( z6%%Fj0U=HhSPG;PP8m@a&-Eoej#OqB=D2I2>3$pOKz<^TC5lxNSa)Y{S9!btf_^m#bhL?7daf0-ah%&7K zxV8y*pXLV_TesnelY74U(S+r7jio$x(D2ch?<2Nh8Hr)9^6bw>E|iEg87%3xO|*Gjq2Q=ISVVqA)}p{)S~YrV`m^4 zq;?q+iw=>Y4K3SDy&V8RyXB&wPO#WpvK|;m^3Jty z*wIfFSwGeBtl#wnz3$`fr_F~K(@vxsC#uuNHMz?2xq%(aGFNzp7h>I;%wg|URh<;& z7ng&l!z+wYAs5S_9ZxYPk55KhpugXpY*!%jKw|^$BN>O&C({K~P=e0lSQ1PiQYtzq zTO)e-x{Iu_LZY}d0QO>Z{nou**+9i^6%pwu9tN_oNL(Zf9%rCf0~^;t^061m0T)w; zfS^2&R}`Fy%Z8-_VPTQ51cLsrIJyLME4uDdji|4x5ju*hw|=v;4@eBj@;TOM^wqhA z3@l8}VX~quo9}mN)l_rzcubrinhyQ9NKa#*cdHidi{HgLW4NMj=$R2-fQ*@7$i<^_ zN?z@#Iv`7Eh>v2PTdY*|+GJy7Fvc1GHWHzwHjhh5F$vr^D5Gm|8c_}58Gk1q{EK!g zgd!O~RW6DD9aFx$Ilb^fdN&o*=-93@#+b$y-dLzBygcFdkX(NZb)oPK1aE+ntGVx1 z%*(`Fn7IT2MZ$?&%^JuDStFx+o_^)q&niC-8HN0AaBWST4mQxTaY(!O@f* zStF=lG$)fn)Y2||2o_~Kq>KYbE{ z(0s&dch|W=_f~N8v%|HrFAqTn5cB6)FAbqJ2l(oF%ERl;(38;r8R%cg`yfKlHcu5; z000w!1Y>G%qU>bv;LL1d?_>r&`lz$#1HwR*KCxg2uPHpD7o1GOs#(A>s?^aWr-c5v z{aNoGDJ?gxx$xW$&t*DH?9+CW;dir~ZeHGQ8%V;^Xr~di8JYvYwwI_ZBWzDRbO?hz zOaWC`z1iLa;8cbmmPgu*=)y4<%^K;Ua-C9|(arHL@)pw#B%KJez4iQjzS+nb$7={l zL$Mj?)Q0CF+s2V|kY^cmKnGrli%S)(W2r*Y%>hVJxiH8hI)qZJ&lh|wQwBaPwCu$d zD		QI5N|-BONDCm#jyTdN{kTtYW425(I+9{DN=ewKBcp)N{E6$ajh|oqm+eoxe@6Te%lKV zf|K(xgWWHr)T43B)21TvE|OrFf#u!ooZGr`@Dwb=zk8o`>8Cqep>Y3zo-|?o7u>GS zF7_YmZ2zELpCA{p1O@yi_!%+3eIV{JE;7>?WI;Mf2RH2ULm}oW1A zP%{jbprN=5;)ULOex&1A9aQlYXFBBT_kd0O%k4%#vF$+ zqX;A@{AuyDMPup(;^esm!C$Fy=v8^M;mXt_Wcwn6uTZ#5ujN>5M~h63lm`U0h;b-Q z5%y%3emaOG!?Hr%kPs~z$g?2`d$8LZayC1;lx`V4@^~56xo{jb)AL(BXa7! zSeiA^mBU)2K?4n}Ch|9=aF;f_}prGES0S?AwkUgBd# z1z}wU;(v%@#}|vDN&R=k{F_uz7y$TBy80`A{+!h+%fUlW0000q=v@j`f=%qt+y4WT C$S6es delta 11628 zcmZX41ymf}vi0EZ?(XjH?he6&1b6qro#5_HaCdhL8r%a31a}SaPjc`5?tAa=wPsEC z>Zq+zl0{}vy8gR+Mftm`AgRF?X zD(k=smt3ol5!P9>g!jA-vh^gW_-%1k$+X;vZ?Bt|bDUsU!3xFHR}b|>C}SsO%G#)N zyxCD=>o{<$o7QGiihi@gKC|Rv>e^N7y5qypsJ(0 zHy@u$oC?*3`wCNxejsQC1N}}P^3Bf~gGz~8a7{V=Ld2PD<+oS5d$ibjv?=R0e3`VU zQyy9-uo_f58lOqzX0gI1#Jc>}Slyz90~bDkscMu9<60nUkeZs&9;nR#xQwJbT~l4m zF~d`@9{ZP7Set3e4bQ&!wi6Cm$x_qLmD{X#8LV87g^g@>Ncj*S02jUuW0uCTd(^!k z0=r|`nL`K=tY4*ek%@+dpxFcJ(os$LVH3Hzc54=i#kw*WutZg&y4t!s0{d1C>2zFY z0!utP+}9|M_yPhJl6M8Kzri|rW8JGX$DMma2a7@@$KQTvBEj`OFfjD6vdn_^57i&V z<9~(%0N&pr03cwJ<=_$ETC`XxZb9HEHmyJqfdf^BSP{c7WPeADKP+t}po%Maiph47 zX$Az!ZKAZq6;l#y_0bTbYT}1L$N+l+eot;}3C10dlih#ktd2p)6rgDJtO-wlc6NuM zr*=t`cCOwVM)O#@Te{Dbk@u$c=!vJVYOg3%nAo9^Uc8cQK%HgQ!H2^rB@D+F$_&yQ zRkG9FHhruGTN2kes|l}f<0&{!p3MfXq?P?b5{cwfJYC4d8h16dT&wjPw%WoA?!$QXV^Yo;S10F0e`KGP8KWw=1L`$%UQOkC5A(ncRgGUx z1jmq6Y=b3>!eavQs7b1+Apihx7ytkTcOKH{wC?#l;_0U3KFQ{S>ozgZg{cH7yo4FPA1hKy%~f&7L%$5*}9#AtwT zTZnbd4iX#Zjj0u0o(s)I&`R?a(YCymFkQB(yWVZ+;yR^gsNdJH(z&+DLyvJ|%V^E1 zzf+$usGTrHqEoGi_UTWw63kbg;|7_z)o-A-l+>q{RxCv<4j)D85XxINs`rLZ4M1rr;F6+&y zbeP$5U9e&-1THMsu9urDt}hQFhV18boxeO2W*Es~(^UecEz(BB%$5Tuz{ zGC4#tI6TEB7!DM@O_nc>>O30okMKO!NHo*^IBaO)d^1U`x)Zj>*k2r{Dtx*2GW7i^ zMmm84<|BmjKed;=oAOLz_}#$I^HGB7+(~EdJ~}bD_5^=}9^RVjg@39CU;g$Gi^|_$ zpS_nZMOgnNnEAo^Kny*DKo?92C#@+%M%ew8Q+_Kb^%bGUBplFVB6FwuFm*Lq_yMzM zCQSV12iCK*KNyDzD`8`NB7B^gd!7bHwU8(V%U6l-xu`mG=<)77wxqFq-9Gm2=r9%mb{xMyh+J&vJot9Ket!zMYWFrWynFv} z_T1O=GW+iJVg_t_?ezUnb1#&==k2)!T)i-6R#EYsidb4S^=$Ok7206R=h-M9*?x0< z`Qi4^XvlP4m77Pb0%K{JyjVW+++l3lzFBs#>i5=dRO`S!<)~71=$~ueq3%gwE+hM%5D?E_F#?xm;v#}DA|sT+%~$6G6rhgrMk5BC8M zXYbJW??Yvo^vX;^HR&5)9d5jVrX2ap{y*b^&OXkaA6hdXZ)i#It_ly;}t&>wDY<-{X{eesGD__qd9+FMCy*RpaH+%7v93vcOX18~`@sw(1 zl23-i-u*qSXPVxAb+s+Q-HMzn#pmAmI`%!@z8pKZ zY}VOP==MDvTHM^exTrM>kO;j0*7p_{ULLq6d~06wV@m#d=3v>nW|&%H=h3iP*H>4o z6R-W+W@kD!@UA692W;EowSU=r+rIr(%YX6Sd$t9v6K3fZI)86?V$-kb6Fjv)l%{Ew zSc-D>ejod4)7EU+X#d-sm-&X7C!Ra%)$zjG5LwQbnmIsQ1Xz9XfTHs{aAeNe3NuHo z8?bT4qw=mlRu!^%ZuzA3vX=if;E*PHZ&$E&A68&Jf7O|jw}UrZa=oeN%X*VY!-iMF zf{HKDpz8Hhki7e6)CAloEL8zR-|#v*o;O-e#b()WtSX?Q#7bW^Utg>%=XowdscPfJIYz71C&xCt29Q#O05 zOqLF9N(f^Yh^QZ%7I@D|`czZn>6>DvnQgkGy$8kQnU6`CYhD5d#vN!3V*}jSPGHOgNQ2u z3Wm*$M09`QS%2rZhkcgk8HRHyH%FrxAJhAuHiXdnjT~T4Ufm_{!z~m z)07QH}iE&BjW*CKMhf=diPPO?~^Jh)sLR4Xx|2*S9Rvcxm-(Aa2}nl)r}KU0~$ePwih38TRKXjOemVaNyRI zOsII{p9&JdG+=Neb1RJa1Sb*M2wSKlixZD{k87Ae2W8ATbdb#C7%DM%=1?W`+Q^~G zP*^*UixR7-4^x$;u{OHwF{}{kc3{iq&4YB!LAuq6N8`se#O%&UT|WX451@eIO{k4} z=#tB_dgkm2Q=()LWyq|^UDw`JpV=i4WoqEQTT$|V_Nj`H$a!hoj1Ov8-*Lts1ewN* zFBkKVX`^cE6fSPRkFm<8(IC`q4M-uJM|vG7`4fDqU?dG@9Xm)MoY6Y>86iv3Vk^~K z4Gh1Ue`JR6#&E(0MtoPK{f@4ofSbs)ViZ>~jV7UK8ytxr^|@mEm<(O#QU82Q)ga@X z7lEvj3Yi=)V@h-z5jq5 zPGSta8GzniZWDvR@E!v_bCTvP)S7lRlLVPUE$yy4VncaqTuH>J@1Wnd?q0 zB0Qs0bi^O>sC1i!$_ipuf|sTpk7)RwUWr|zS>17=fg^Ew5cvvP`qyzS2Tw}uFL&Oc%BMg}*m}ZD#5=Yd?8atbU zRF>UrEJKf!<%SXWM@JF8bDU)pbI75j5Xs^58_|LGa6BJ1$cxdDi(vEl7w6fu9q%8< z(Us2-ul6LTX&lU_=Q5_s*Q)T``K;liaV0T@v&gQiswTvusle4jRaP;?kmKXKfw^@a z(!wT%l%~SYC#Kh|huqov*R}ANXj^P6ewB@IQh?u0>hX<-bHTirYiH0)+5y;Cr|qrL>e!! zmk1@E6-*9|7N&x8KT0~X9Y{M!W9LX3F($J-YGWCxvZd@LN%crzHT^^4O}Yv$t^pDV z;f)z?_(%|f34|zu9jfmOBHS)aA8A;?yXI*Y8eoe;f1bXCrh=p*>MEYO%o~#>r(Eq{M*DS--5rlC#2;(=irZJ#u z+APQdldb*TCDf=vL;{3^epTt~P(i8SQPE;nMuz(pJ<_4hQxp*j5Nam5zm9m#4^0^r z>`FN}Q^hf)SH1AY%KP!Ic{S*yT%s{CK|pwQI*EqUA;U_d37Wt_@^uf2L~JLN6G`k<8_Oe=z*RtDDlB@Kr6{}TdXFAN z=)Y;ljEMRI(+LO6PBjfAU7TNwLrRG1CaUoWf2380uVF_geiAi1e=L*{{)a;sxMhz- zs89Pc(@LNmFb*G_|1CqdPvRFMp5~m_zAEtB50XM>MEdAyx}>(m{zf4&vjVk1cauOw z4MfyP^8P_+SQjrCJ#3JZO2CS!$W7s(VXxaEq7hLS{u=Ao$;uN>_Y+zYP1wX0f=^Jm zkzHFr!te1{9Nd+h6Avf^A~xf+G4Rdc&Y`bq5xbl~(x9+M3peouNr!6!@oCx#^oYeX zb{$CLV-o(z{yj&bAavhz(3C3zhE#VDTz7^mjx7^`AWlgIQAn@V)|*n?DtKy8+x1c3 zoc%xe2G=9Fnx&XJfbb0i*=n5BM8j4nLUjnD5fuuVok6syN$fd)aRND?)Zd5{G<*bN z7h~>#7s2M$JAxPrn;Zsu{OHgdjNxGdjo=`@<38)4Ii=$b=U@6mso?aE(2leP(gxF< z>XSyqSkfbyfuN1>M;J}s)h}T3yiITv`$tsjDLDC2fE{09(7!#QR>foo9Ld|u+_2g$ z{Hor5zzbi2oU;R%XdkqU(*F;2>Y1eJTA?Hp=NG*QWNL*@xfMU@{!yU4hcWa;H$Z6q z@tN3#=^y&E;Fh*y|6x!5f+(`%?RYsLWrme_(_=Tgy2g#LS-f-yb9nx*K50a ziQ#x-{*_m|blVe2afFNOk77cajOFpx_gDS1(4F^NSEME_?h z=7cfzGwOBWeML&x$AkeVPoM2@LaEjNn)u++=Q-lrs-$|~!kcC|l_d@1$vIFbz!%UV z5*E0!A&mN&^B&n_VB{f(263XHmo5XOqv-)1losL^mzwUJ90&gKYYs@IS(;}Bm zm{2%Qv)jk1K;8OqUD=S2;md~D=Hv-w1(9N*x{95wXq7<9K}k|3s zEINE=i%H=f@7`q;>OZNNv9lhAI$EfoF>CUjRfa95ULepz5Zgtl%sLXP3u0Pa`whrp z?x8EIr2MbxO$x`TU-Ak(LrUXk#D~xtK=Xb>f-RGh1mmL`qy-rXeFj<6R4}pNzZXnJ zF`dAoZ?DrubiatOuh-)wWe#a;mst+@;pw_<2k;D8dC`Uvemo<7F~n6*PX1%GWYGMG z88k-exFv2&g&Rs%T{duX<^Z8R@fR)9k1Ie{>4)UpiMG2!A{@L-^SSnP$0x*r9L|4d zD||yiEmk#ouQIh5a?U|6LHuiE@~;}dhXcha_8P!Be=a1%BTmaDYn1$XQQ`cE1SCeO zs3m?2tvH22VKG_ysH`?#v~=No%27m+d>yekd3rcw4e+pJf=>OA=Z4_RE55rERZ6 zedOCQT3m;j1oo!u!oR}C1b>lP{*qp<8Zv@b5u(UU$Jy@QYFy?MCQ>{SQ{ry|po|qE z{(m7BFODJi%Tf=Oz$~2CJeKLLi*jtUv~;Nymv}?hVXo9n{JjkoX+Z3jpZ6cH5PxEN zT7Mu=JPH2RgO@n(PFMsR??m;P@U5_HuP|keQ};_|Bn;O6>emhr)&KCQIK~w8l2{4M zJv3nLXyVWzSq!q4K8L#0 zums&iCd|^o_}OQa%87qD=JKeBnxzj`U-*9HCRICms&87ftXRjjbUSUw%`b+KnDdFK zEGyiCK{sf&K3ze=#$^E$_-Dny*;z4BPRGS3`F2E#zn4YG*A0<7!LEvdhE(cAgWm|A zPuBD=>Hj5+hVM@Of|u(!mbL@@tSF43XX3n+i-sX3p?KuMpXHhP53A*HQlB_W*&}EN zDGf3yB2*->L$V^RoIcI$sL2CU`PjQSD?mGzKM@9U|0KvWnGy%{3C0}(Nb~bm5$f)i z&7BL9*B$(v2hODfVxD6S=`kVapZ^j%)H%mfElWqvw3JU$7}>iEgfMUY8VTWbKm>Kt zPLh9l6eY4%P7AZtPt1SQYiAlttGL^YTl;#lYzM<|<^Z|vt| z@ao^Nb>TDhwe6ab4o02etmXK4E|>V=zUh4x+OAJK|Myn18W(nQgd}Pc8<`^vFnl&G zp&RrCVwV>HK>Am;-PO(8?vv}ETKlQKvEz4MRG`SOUWo(GtWb1pRFjtGxMuZ>_}Xf> zI%?MbQSrU8!O}3gnZt~OKsd``8HJ?6_z+{@FH4uqgf2R=1#oP}n|aMi-PzVACwcW8 z!%IAqORAsbBj`pW!!s7ayR;gq3&Rfl${WgTpT?bzO80~n)fvwZo217V@zUHBG3e8? za2gltAG`duEiG!&ZOmOOydw*#}Xj{)0xxN3A35E^Hi{v;RT+vj}!>sXy%-ZZ02Tr z^-y@hqGL|QL=NC^(jb=x#;xIp=-8-goy5n2D^1yyts6NH%E+zk4}Yk`o7F|OCJo7Q z9K~yW!C6O7Zio-=2hP81)|hd5m5sX5a2!!7B`stS3>Kh_(nWm)^J}?2oOgi^nd*<9 zCLJixEu{fx*(z%ThQ-ows>|mYq-w2;rq=r% zUaNJLZZNt_{L+f41{NHeF_UNT!TY`dYVa2d@)JG;%R}WV0+;FzI35Llst0=_J)@0a z%s3S(mR6|M!f_xgG7HPgNgmSGb1gqm)ml)i`DvXnIlKD}b!+LHfnYGtVf^UJbjxo+zr zSmIK-*whE6)_^OIo{wv2ep=uj_hEzFx}K1!`D)9C+iu&1f&tZQ)W8>a8G$)W1rj$VZCh=vF8^r}L?-&kmgpkT93!sMB+G`|?=APcT`Y!wKGLTkN9*y&$ z#HbqF>6v{IDrUvDUy6%Nr`3mhb%_tHf*t;TGfm8i z4ZM5JF8gz?wSm*0uoMJ;{Pj7I8O8YwL@d&i$A4q;*E0@Tr{izdk($&xe~vpjlUp=R4D23x|1(SvHH^nxTiq5 zOhgWQ<&DoD7soHp_Wfd@aVleExufylRd2eSe}2;5vUT3D@diwMvxi<$-CfB-I4*YN z8A91Q$u3ws;vG^hc9-jxULi2z>0VyCeC9vmS2{f2S#WRmG>~3wJKXK=+&KPZ1ZSX& z;ce-FaN;2n?wMtCB z-97N_$q+;&IiWCAT*da`&Bj{x_PpKW%b1U({8Zm;?ldZw%78T=ANgIz<^9&=zeK*S zinbsN@3E-IvGu(CewS`rgA`Of$5Ru=Hlee#G7vlh)bwRH0q>hGiT*N>Z*zVk$%cOn zWk&t^w^8}cT09*N6Z*JjM)tDfRt&Zr)O%v1Ny9?VQS0+c)+*3Q7HOLzOf(I&F!`si zKsG)dAg3-bt5G}br!u)V2|rV%kI}dMTRT(mtuMVFH&R!GZf}$&4xTx=Kx*YST zOeyeF($70&jfrR`dDDuz@hiq-ybDUwIQF5~?~|z>8jkY?;4|3$Mj;HKy-gXSSeBI@ z3<#9gB^yZSbQme6ld$5vtRA3z@y=FX)Qz6ffqdEE7-5O&Sj5U0Ro{x-9A3G^4s5^$ zEe2qHp=cqw3%?{rDiNbnm6C;lqc?pNgIZx@d!#m}JhVj+F#SnndQ=py3MF8kLyPB% z^im=YAV{?d5h;s33We%0F0xXxK+BzNP`(S$z_UyHR6F~r$S_^y)O(R@OW&VM40{*o*O9twM7AHD?l=4{581fa39HOrncFvnn}(9b`%|T1eNp#ut8ueMC7Sh+OwstHiUH_`Lbui@hj#hAeW6n}I<- zFd?$%jvKX7{NqXSm?q13$d-e|lJrqor4`WS{+jhovsIbHtmn%HY$N^*?y`G7DjD?$ z&D`(41*6z8@?MlSC==9ZclGyBzNrIC^ zl@{_W?FSa(7oGdK1Ul~^T{##Q5r6+YGb7VkuaFGG{=l@upS1j}mvnS`NzbgNB2gmN z!++oAsxf78mBvgkrr&vLlgS;$6N(b5jFj*88}r(`}C%mpMcsAaGD zvVoclmPC;({8!dIhsRB~$?eh4`Qolv?k^PFUT#CX6Q6u&au#i|OP=^}XmVVg2l>)L zf8I6=P}XN9W-@K-2zJoKd@HvzHL^ntvr=z|Lm!FU^(^%JmV9evLR^aSeA$}`!Ev%? zaWW*2W-%QDM%;Mtk*=elnS_B)-_6`whX8utU5@)(tzEKKbe^%4LSr13z z9%g2g>;i=Zp1H|1DZ65!t2yO*BV{)2w0BXoz@`$vds*Fl>)qB}_m7QSO6=p8MN7fK zgxZ?ehUu_Ucn^)o=tVzf;G(p?_N)t$FT4~^jYloHV+(_x-FmY;^5{z>bQ(xAx1_(!I$9ek;t_&$T-Em~_l=E=2p8Nler=d% z6kkYS_LklgCSLL9O&%4LeF&NMRpD{CnOs>ax`QWOHBj`2+JWuFBgBLGB}1Vu=?`lI zA(;U_f_WW`nN|2Gz)Leb)cAt0)cdJ^oDE4HdJ}<{UBc8tB^->az>8Kr~37a z&b;t!{K5Hs6yk~ot0v!x4u4Z3y=|^P(W%H(J}n+!=qngz*R^gsA8&yrz~Sj-@pE8> z1rhSNa!%pHoOC%aqQB&qGoj;sp#Agv-=?1?OD=pcsDPXs6RG5IZXr&z-@QSJi9v~b zSUSQo@CiRHSNjJcOL*#8A>>HHHN(+K6+h7y%?T%XNLS#IX2C_pJ8=G;>!3=7xSi*d zF?q;_ z3{x@(PcwHbTj~Byaz_3uD}}k`2hinFjyNW|Z7iUV@H`Q2S+@-~=}Xkj0eQVI!mlpx zCoG-~&ka{_n+`ADou8e31+wpAS{y6isO|iL2#(r?ww18Ju5{hLGryM8mF+PLj$+&? zU5zDspIfI5#`6flay}YL3I+F)8+%X8M*TtY>Oh-*2g8j8S!ZLiIvs&pmhq-_AJE7EEJ- zB|jmZ_Zb($%_OUrs66qwDPJ&G_R83?t-DPrKH4D>?SWr$2Ou%%gn6I0W#ik1&!QH>@|w(G*Wp@sy7vY4na*H4n1KM7l<+Nh5^U(<|f%STrz?E(pDxWAP)k2plRt_U*zzYl2fB4cDh& zHqRl?tBb)))0wA?qtZlkSY(VJbO^OZzfrkeXux(s<59bXvPz{+rHE>yM|sHsaVHy! zD;UF^Kh?%Eon?%Z6vk)(dZ2gH0}bSyG@Ue2lPG57$I17h2JvPHhg550;{qEE9VE6! z*B;8p=pqduq7)LAht+K0HO=QNnKQ+o5;D+p^nTznw6w#^!|$+k`Vg4xC(&UU7f&kK z{DP02GAK$yjcs4%n@qu^#hJ+f=3p7H39AEd_DZW-Pps3YxgtA5ood-Xdq=UR1JKB2 zRJDU$=-NXY>5G2AJ~cU{@71WlDqBpj`qWckVsK0-8k+?l<-thU{75N9bk5PoMf|EZ ziX_9#!Jf|Osh3lJ5%LA_#SuD{SEaKvJlJZ6_N$e2HN(dvQW+!qa85cXV9_Wmb;AVJ zX#N5L#}L1FQGXcWuSZCsPFOJ`grLCA95dW&HmC^UL6qtY=kZkoQnph7gL6;|vDu>@ z6ZPAO);r9X*AEtEh-kV|YC%j^_IW|edWe)7suFaOSVDCJW?Sd?7=v0ZfXvQu(NzPw zN#4fHQ2Id|vddfwaVv*h)&2138|sZY&fd6JNEg+ZwXpL$8Z5uh7X)2eV;zH^J$LM}C?ep~Cykir2lHQxC<~6Y=2fUrSjiPfxEj z{w8z*8Ze;35G!Wb4%EBEgl~4UyK87GM5+)UY7T90*ntBAx3z51)?1Ht*Anvm?tahV zLD!*?IwMNu=YW3xwIlRWI59Mj9M=VCa4-0#Y3!6@I4gn9Y!H(Hg} zyW`QW%OA~Nf3Mf!D{O5=LsY^K(6#mZnN@+S#5lEQ@%16|Y|Epfj1?IFg4-S=A|)+C z4Mb*lo}Ki4du-M%q^H1(n($Y|&SosH)_E17`y51pfaX;ABM!9)f@RPr(5I1W-ljzejU&o&+($|LxEG@BOvp z6$wEw#$-%MCW8OAo&f;3{}ln987CV^N`d>6CbN)XCAUkWQvcr))PJRa)BJ7!{9BMp zW|hJs{NG!d{|W*C`%IvXjVO2)XR?VD7vbNT1ax~7^aDNPe;mzR$?@ED$s1Cr|DG!@ zrLe$-xszd}sR{nF3)Bp)2C^LOf9L=JV#%`7!t{-T0D!rpnW~GUlPimflhdCPnW_R5 UXlwPSc7_D70(GtWiu}3yf09s@6aWAK From b1cfbe873b54d5abc99e000375f6c5103477417a Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Tue, 28 Jul 2020 14:29:06 -0700 Subject: [PATCH 449/589] new screenshots --- .../images/tvm-event-timeline-software.png | Bin 0 -> 44062 bytes .../threat-and-vuln-mgt-event-timeline.md | 6 +++++- 2 files changed, 5 insertions(+), 1 deletion(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/tvm-event-timeline-software.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/tvm-event-timeline-software.png b/windows/security/threat-protection/microsoft-defender-atp/images/tvm-event-timeline-software.png new file mode 100644 index 0000000000000000000000000000000000000000..9f360f0b7e5e58c3c5b5c5783ae9be777473ab47 GIT binary patch literal 44062 zcmbrm1yodP`#wDCv5>Inl9pClQbib2a%dQk?rs=V1Vp-}MS2Dp=>`Sqj-g>hx@M>$ zhWa+=yq@2?zO}x8tZy%Bc0Buu`?>47ZbDUGgNX>J2tXhZk-Xe1br9$V1qgJ-_SOyH z4AZqhW8l|qCpleL5QzBa<@c2YPGV}{ z&Ib5t;@(}H2)}>f@7F3#ui;p-sFu{V+xQLR(HX^v?*zTP&%8cdWIyEbAph;CJ&W=S zd(g_o9(=FEv1d)H|u0X(&pFjpS1zK zNPd3HSVDQZ=<&Us&TGrPD}Jzae#?H~r~D7&Cy#+H{(Za^FyNb`{PPJ!PA3YC@1NuO z)T;5Hzd_d7fmi-~$cZ4n9RA-&w9xHlfUVB-A`<9)R8lY#-s6D|z8GjmcB z#2PFg$I8+ed1~m=#o~M++ro+o3?rc>{O5fXrE(!HmYM!}@7}#zg_@=6vR!){+BH$? z)WwoywY%6g)Z8f~O8#i*$3M5fz4xSF^=Pwv!0ljDH(kP4>)rF`nJ~Py0r*-v;rE}G zn+6}xPC1)3mVGydqtb=gGSW?9evq-Ew>Sr1Q`Fa4K46Sl& zzR=HC$sA+L^!xh!(RZ#Jzph4$_%bjtNhcY4B;UAkgPGl-D+ibqU>;;H+S)?@%yt_8 z!mb?95Pp9|1=q!vxw^kL(mgOhkKMdNaXmdfJw@EREKe! z%H%}XUEOlp??Jq~$wK``U*fLZ|93%HLTQOWlJu)O&pF(l{PP~;(ZO4{{m!>*W&i8c z(B0d9ux)Qyj?5_H;I}Hih7mSmPv`qW*Xpq0~+>+pUu7B z@4`Mn+l-8K+EYG8WvP?X~8?iPILS~aig3s?rhCW~Ha zliJqG-s=mcsHrNup*hpDm8V0l3&lNmP#VAu{ifH7i{Xm2kgCBj3>7RqBH=?_B^N>) z?4QiFkW%P&yi_8Pk)PFEbEBb%59L0F;If_J3;mHJD(O5e-SN!Bz+P{9GPkmJMKE7_ zql8j-Wp!oW$8+95|Na1ft5_kG{fNu?!1Vm+*%#Wkt>LCRJm0W10j^754khR68g#t- zcYH0rj{lgr?OxU9?-@1pJvK|MhA5rK)UVlTht3gLCgb0q`O0Rm?T*bBl9t4!oTP{B zBcWw-S28`$alINgFvh#nfY2~{jx>I-+=#Z0Sgx!r+dZ>2s#)r-RBpec)SK|kXCmgDdEy=HVAbEVP1&Rxs!ACJBJ51e(l(VdRZ=ADThGCLdQqY~^7YHis-KSYdhyl@VV~Eh|re^^$H(L-N)G`T)0| zex4CsxA1N)ta+52wmE5~d_SY$`ym^=@dI-;Q%{<-jSYlab*g7s-JfY5*Arp$XB@>7 zO}|;&=PNFiaCh}!9;3XYf78g(m{YRncgeXr8gA;ObEgZ=K`%Na0vNfYeKcfMzm(J^@Zn|NIRF^O||M(psq;Am-9QDNfNM~6eWP_qv8 zbWUDEj8|OJbp_n<>$6&VQ|VFLnU%7BTYR#T_(gEi#pueY@p$N~zz{)s(~quCF;pf6 zaXA}lU4ksAgHq#UZRUCe%emjChjsQR0Vzdxq+=GA+q1x^Wd*idD}3ag+Ak;-^OSDE zQ^9YRjjnpo-7!dUS0rpfvZK9>hW{i(kgm1nXkp-8r@ONV`q>T|(!NW)lg^*0@JTbn zOHytZQ!qxja$}N-I(SFI)Ps(C<545l8@rvzeJ2y?JWf1fntywHw)mcZH7nG%Zvb0U zp@3LY%hsa6YG=>OuAKL+8bk^A1YZhW_G6K&Y-pVay#u~NUaNMyz7o7>%3j_X8gV~3 z%aN0j!}k1a{!7QSXB2)MyuwHED@xm=n2`6v4@+)0?bd7j;LnHA+Zn`BH_Wej23o%V z@oRp?CGgn$;%?EihjWh6Uhe~ZB#s&zW{j1!pHPUOoctOK=p=&S)&hTAtn?=T>S|QE zaUqE<`NfI783?9wAX-LxOL*~75Z>??dyjscM&2+##{GjSX55?Py1q(8j%@HC&hCkn zqw+RRily0oH$w2o=?XE}=sFbofJf!%0`0qCcGTGVV;n6)$>EyAHRRvo9J0YwrBWc7 zjjYdzKuH_u-QM~6jHaloM{se6W|tSV{o8GG3fIE^E3Mx9`Qw4; zJLArNlo8IK)31e2N32-9c}8;6R%ztPsQz$mhLa@qZt}zCu9cqx#M1t0ex}NPUJEOO zpS46VRv8!jKHI+Sdu%dv3j^g&84tQ?<)z#rltii*hUtG_$S;K>Gd0~EU=1CrQ ziC07I9Wn7uO?o}Z9!=S0yM)9EQY!~-v&eTP_0s09{L&XHlq#}*E!aw%4d?o9S`Twe zv(BK7O8Iu|(H5{Hj`fC}4)Mg5+94S?;vm}r7Uk@Fd+-?aTHlWpCX9G^zOO(cJ z1fS|GlXlIGWg8tYIap~P!zWUj63t&1NAXM>tLZ{EC8k?G{ooL>(OC*$zK>LvAr6XC ztSSnkJC>x-;xpx#wo#d~s2$^=-3X=E&0KHT@~}3Y@#ykcxnVu<;@Dgxrd72cLnip_ zlR5RKLEJ;nl8}XFPW2Amy~=_oZMD&mJaBr~l026G>1P7_D6T89g3vI=4yR~wh1hWK zcx79}?;d+IPf?D+Ovwgb6w(GmU`po^#nvrbz>>} zH=O*v4`^t9tZ@0A60HQ4byswoG|1-Q`zd`By=7uYNK*}W9S{O?XP@a#<}*50_9Yzi zz!-&)NHP8U8OJf}6A>Mro>t4xPwn2iUN{Igjzvy9o^8(M>s_F2q`OqD6s7kh0)Onb zZLnxZ`P^Vue96{YIKq~@<|+W8OlkZ@TsWM4a8jb(exe$ksdLa^#OwD6?j-W@qbQ-oW$SE{djIFco6q#%^lRHg?!%4;Hfn3Bcxq@V zG5zh%-?N3fL5PlX24`J!_y*S<pH#BA-lDsV<}n`sJfPXnX%$cy8o z1bJ+g0!zP1UJ@*0Yi#p~Xne5~Rs@DErP&^YEGvk2Y?d9!PlnEyxd=#0ls*|Jyl?5L zY-RoF7I^1dS?ud$(}-iT1XTS?MO!%zv=EHs_ZH4uz|^EArq3{cmL)+i7RpWPFo?nP z=}J;8Hl!y%XqMmv^H1rGA_hs$NlzN}Qd7A-19=-H>$TYjD!o~Esv#k}Z&c6U2|!tK zneTV_hw8KS__f@-7$d%v@{ZnJqn4$6aGc6n`ExC_sY)y)x&32q!Jav5hwtdHQc_kg zFzRVCJqy!q_s%mH?cl@^f>PTv)vg>7qp_@#2hPE_QW+!47zSjTeIh5#8%M;a@)Epl z_#7Vh#so~b3x0A5gEYB>&3KL>HUj~P*FrFH8bm%EU(G>$ovdVKXF$087B%MTPF_<( zOs;TZQlvD+m+c_jdYZaLSM$w0s|p-+Xir+5lp}lVq(LJVrmP4h z1dX@NmJyqNi8k-EVm*{~j5@c9naAe9lKATtU&$DR9`zkzt3%Ze5ueTWh5G3RI@$AC z(J3@XuY0q`*54C9`w2S=*x#wLz8@8=XkEcfJ~VY$Ir#&k>?6yC3d8<7Roawn`Q}x z4*F392fnRRA{wV67>CiEcNsJ{` zE`4l>6(k{+>K#|lI;xawhQcT*J2FVYe~#4wyD_xWlBOD>;!xVHUDfGp8F^4B7bV;C z`M1Fazcr20&Lf+PlP(;3WA7)yCxcv&;3PK-n^N)7fNC)Oi@-Mt8ewty|o^;bVLPdax&yfVlNr8IK0xeV)W+Y z;Hss5MQ`vx+exU&&A7WN(5T4N;PQf^CPnjkSH!`Tn$0V^1Z?}_9^;t2_&HOxy{Cg} zD{FNFOR*@%jd=2zvCr(&XHg-%=>tgS5XI>w3VaH==O*iS&uRftbn(KYblcV^ZxsC{ z{sJjIW;-~o-+!K6bukOwr;j>&brEw|a6UIwutm&1m34RRxrnz;z-LKt06ixD=oj)L zzl8ls`vLh`hb{Lov`+%N1bQ3R)k(K2zDF#v{<*}E1UYuCB;6)pC3=da;cEn)bT>Lgp4=tz#e9FQqrJb?I-_9sSV>UQAj?w2Dt#A?b4&!58u5=@mF4ucQP#P z&abxFaCM;F+R(lLH}2MX1P6rc2;@6eO`*MHw(cxjFmJCpjLwx!UR2+KiZhy zg4J%^rz@+L;=4MR#|X~W`YhqZb7?tIKE2y-4Lr-G#Mi~DHUpa{ttnzsC8u8^4z`@E z(Y>hF)13rZhBOJ@je_nMc}7{2((m zZ1tH5jEA+Yaro$oX?4T=nUDjY_pRC?Zv&pLs&6kdBwh>FaA=z8v@oC9y1`v}M?>#v zTP(EZgk+AWii^EjY4+?;&BW~|Dk_W>+-Sv>d6+NOGw5qA3|r0$>c#BVk!EK8++!S; zHxPKu|0~uE*f9{>APqeM$0I{_COsZ@GDWIPG=)ASY>eKOS^SX*s+6A!n@bEnniVDP z$4x~uR?QodTme03xyg2}Abg(AY*_rBI#=qnYkN81Tp{4`tv;>joCk)Dctit&#V}v6 zM0VEK)XxBr)K>vDL-&YCKorzWDL)>WcUHCMW)4h!E#{Rh3=o~;HMB;}#NNd137V(4 z%W%!4T{p+~L~6U?Jn4puwp|nw^)m+#ND#P**6PA}CU#fZ7!0h;YH+{zcPPo5k*Q4a ztna~8{)h^_cbrX+ri)3|leeeG8W_zlj=T*U#kG@T1#Ba`C8yxp&9Fv`)HY!oE)M;P z2N~V;78Ip62%8~%_Z!kh@LYI!McHNKT6vtsLXk5l;M?`JK5aO5d(@+TBo`N?ADon6 z5Hg0)QQSqCY8<$R37Y0gPgOZ|&N2=6yJ{t`dniD1vzD$hPItI#Nq zTh))01V0qKYcq4p9sY_k5@|M$x2HB!A$_4xxcB*CS$8hwP#uAUetRdTSIridp(V#R zcDDUtjDS}sIX|z3Xv&bjdG!@sH1ne5c!$o@xhFAb*Cs9&={a2#?E2;9lC(si$v0P< z=#5ujf3y4y&JjY* zV?Tu>r{HxJjs2*ePuY$MZTG8j02N=vD5z->s6%9p1!6)78O0!+CPj{fiKH}49KIq zgB|n%MH>09*IG%W;?dagK4G-@W{oJYz2{Zm$G#S|*j2RL?n6k?laTkbdj9N5_&D#G}V#z<8Uy zVS5UnaVa@c3}m7}!kj{5r-z5VA?@z$9S|tIdW{7dM?@Tl1P7jNKsB>pFtzJMGkhM$U)zB=ca-Hr0hsI%2XiEHwlx@eDerdo^wxlfay zM4$)L&-(r|5RhzoYi=aRwAae-hHnt}LWc(aDlZ>Zt((xe?VD4gEnPagb@(=*Lq1Q+OebudcQJ~KH#sjkOu{6s&;9#__d zq!YAhgC&WIj zW+$^d(zNWcMM=t8=HXO}a@~2={aFkBWbRz$9}c*;ZZ{4YW_K)Vg7amDa^uzkkG@Q1 zjzj-(|CuCr-3VhNb!Z>2r}>+6V8*Hn3d$92TX(bsPb#~U42VG#Dt{Kv_{|et#xAWT zbwHIRiWscxkWK1kZ4EgIkvJT#B&` zHtyb|i`^sba`8dbZkw}OU2B>G%R!{WC!xvvaMb75V}9Hmgzitg4u!iHY&75T-ybW% z`3uc1&3sL&V*#Rr;*L*l+KCKxO@UMSL_Pw-Ci?o>Ld(Kb>v=lv@_=)-BlAb@B+)M8 zh1vWK%&|gNp8kI)!XPvEL>Yj4L;u}*KaKrv1aegPr&j!)xUp3d z%QbGNDs3InkWMU5I(#lpS`^P*KZYfg;C}((>FeZ;~&vI+*>H6S#Bte{#p5{U44M@Ur;qzDmPE8{Un5AxG)ybQa4hsey zf##q25lyHpOAbOZsFy|CRC>F8R@uWX6|S40aO5RuC^DD)AMFstMnT9yLAbs-Sq`9D z_@jj=_w`YB|D*Yk-IKGr31fHeQ4qnH{#%0kloPdYD-`MZmhD{G)TrefdAS;gLO8%wK#k27ULOZpGBwPs$Y4}7NQ@3zB~O_Q~&?q%>O<9NntxH$k90vb`B9d=@0{h zp1jfc7m@pJwRW+k<&PB`=<(Hyz0_3tFK+=e*ETgFbSlzQ?QU)F(9+%{Z8J6V1$wsp zE%G2ersU|oMIR^15N%YPTh0g8Apq4p8T^BH-a)^GZt<3k99DUeQjC1Kx_kE9q}Zzr za@O9Lud=?{BztCsM);Wb4eXC3lqWpRI|lYs$Detxaq?f(NZl~;cQq+Jw^kA*-z+nF z;EQVRD0F1?;Q9HC3A^mL_D)#$>h13<^!)z;ik;r=_B5U!R3wVUa&aKA>bmgiYetPu z`O-uk(!Ax(uE_4P7Az6X5W-!|G@U|wVt=+TwUR?v;|vTPVnSrZu2e9m$EcSs7b6+WJnM#zN*?ej<#nx-cq*+>bbVLlV`z6CE~hnY2e-u#yp^0cgrZ}s&R?`rW} z*4EyS7DsPi{ow+HU#H$*E!*55zVX)i`yVCrD_g6vqL17^*?GlOlvn+CdI@I|QX)bOw=&iOsy{%@E?+^Gcc)Zg?W@_^0TjwAD3PTOB zXgu1RlXvjyL5W6|_Z`}~>wK+?=_W`slAWfq^Lxlw*IX6$;~R)xw_eL-Ibp&9`K*az zAc`UXS2on{RMc0Zwh2G9p=)H8Ri1Z_{yxbV+NE6H(V-MH|=&d5i@;PH{9aGcUO$xzX@gjXUz;6@Fa!qN%QXV zF$53jF=?v=h(s-k>|DrB>NRY`*Ty03NsjLFyzt+6tat%sbCK4_&Y*2(PvHtV#u#XW z{NW$#{_890c2&Kq`^1vJ27~`AJ=puF>1cd+u0i(%{_Bel|X4Dq+IGQmT~n*qe{FP>)`ZDAk*Icz469$h#`8R?vHH#&*mw}B^W z&1UIJb9u)<^^6$1$YyAK5P>&J@Azi$0HkF1uaXQKz2|*M37r-c!@*@4=xK*X(8!^Y zz`weuhN< z<>^=OBPCSPbmmaAgc?VWlV@#9Nu>(f#EW8|atjXA!8{1uyasyk*B`&HMg(_iM7OY^ zJ0f^=RbD->SP9|KXjE?T(}KdxtZ!^ae|!yUG@YF(rJl3NkSMDVujYlMgNh1P%~ya` zE+&fS-tGUs@^;T&{RstOq$lft_SgLF8-YL!APVp=uD*LKd46P?F6yp84?D^_g*7`g z9WR@72(HDncI`N(@TW{(cZ!_z+2GdYA~SSHK~jY5Q+S$BUChnQth(db0V5O33YeNX z-Jc>RH~#fF|Gz!g|8{kS%p3TPmuIV|+r%;4_0Qy4grylpo(H=MJ_S_Uc?=qfR zW&v1wh`5TMDbCmUrNO#cfzyO1sc%3cg;wy5JG3oEHx=TJ@+ zQci-xYWev11kAf10%Hv&4i2MGWd7qx1KxP&AKhA0^OtZRC6){DqdcNKWn}}Qm~L^>(I6Wkrv`{JPn6Hi_GkJ`WKf>VHPHmpqPqZngnH>) z9)9VpZO^5dTx9$faOthu(^4@Ce4~wyccAq(zkow638#~*q>C$s#--9K*fqhZH{)j< za`pGn`Pw~un%g}9>s$RkXZUH?7T&y1`j}gYZm4g^ zzUO7c=On4zOG(H^(lv{_K8yP)I;rtj>5MA8g_6wND4Bb@jB#=af<#j=KEfvEFLF0X zyK3aRP9dhI_x3AAk@wli2fCp};Uin3yB*uX3n3_D{$HR}s}Oxdk&M&p_^Bv~^`xA4 zFmI-vX+_P-rRdXZSq(I2ZLRZVGhbLZp)mtF_^Vh!ID9|Y$s3x4RoZN<$t_UNMZWdx zQ?Zs=Bbs;lFtT>Ij=~YoJ}g1%7}BY=+I#C&Ey;0ZEg)A@kAZYp;~-3Vz6`CSR~YQk z%)qNsIFH5*DaTB5vG+)NT~4_ZopO3!FDHL%0HykO1i8b&NQ9K+!@5kmTeI{q`{{e~ zKv=m_xQ-Tgal{8Z5TeMVVJlhjS155xRV#VE=Y za7V5i6>eis+8-0`Z&)cJ#Q8B=L++)0?=XEnb{E_}gHQD}ls)%t$6L`_ahS1ebSXR2 z&eleWc5-AvAGJfyfsdP;bzu|KfMaWKy?_}`c{ zpzzDfgCv>fB>8KJU{9;&6~i-Ml%4lFMtfoC!%TyBCdOGF0l#!7yiBJzMD6@ln@^W| z^iHZnG*5nRWYH7QSFVH61!JMZ?^#&0C^% z@cj9?aOUtKET+(%w;53_!84ogE_+2DY)D+}#iUPd_QcYuxhI7??;n4P409f&|pdHil)W?ac{S7H;QE!AxNv)pOC)ewj^c;yIHLUfaVt zva<@e6#UJ|f*39WHSYU$1l$>< zQv(wIf#+xGp15XMbg?i-H(#5H_LWPI?{PNX-7;xxnOOZmp!+(YeD=6n^Xjqn(o;JP zGXe3Zj*>`n%`9+_B{-1A#);GE#A0jixU9)HL7zl?|C3Md;2Hi1pQID8gZug-457($2;sR=#2Gs)Qa7u$@F zaRfLFfmNtGj$F0&fa8T-D`9($rDx%M%T^fmuDyCR=NA|)tb^%tsmf zp$JRiMf^EubXItBE(g?Xh|Th~{Q7v|Ie&Le3p_WHQFjrtA(Xj^)+=sVqwMbFP`3_U zwBK6~RJj_9ci$al8`cc7 z#rkSV8Q3H&DTGT*o`7Ek&3RgJ+ei2J&`HJ8b^@EA`8(g_s&0A@Y*o1l+iym=IH zkPbFG`D8eDs8@-rF!RLz6x&^KTD7@a8wcO)7=BC+?ArFvJ@K=6gDLwpb*%@q2_%&}(A!@Swc1#;?lfkdBy$ z55K^$|~WRhDtpXya5gt;V)g zRx_g{iaNT<3xs+~d^7#EmJ;b`CAhuQfD|_sBfEHZIQ7_?CFHPhcYb=`CRn+L9>^+l zg%0RrPqv1W!UUM`rWn55&m3Rv%J<9tb~B=v&*^uhqEDNc2&_tqf-SAhjLxphOQwr* zTessl>M`uK=pF0hMd_(y{Zs{E^B%POt1I3Wr2;C{L_3o=883QNEtrx1g+1plsFncs z!*>dP$v_jAMM}bCz0(K+bJ41G)XYtk0fm&F)%wF$+Wp*^i~aS(n>n>nIz;?Q$iy}d z+`&!tnF~Db1h5C^M!;D5&TJ9#dbfjbO{eb88I{ec=IKg#AkL0xyR9w~8lZJDsZ9l5 z=RYurK5UdSb^ysw?GC6L5FzF&#yFayP(zlMr6-H zJ-^=i=WN33X58^*_Phvh+~$$o)sX#tZR}7ewxI|w_^d4LJOQqNSa{DB@LOi>SqQAc zI}&DOUS^>2-VR}yA_{mBA>?dTD&Pmxha37O&wNhAgt%dyxow9y8*KUE z>N`irm_B|eKeM^G^Ye=a0dIDWuxz9Ho)dSsj#m6KN#=0csSmdxp>3I2Ukq#{`@uE! z12cL2D+OH9`>sj$5yy*W|KXX5D26ciD!#=SY}D`!WtRO}z%zDseQhXR(MdE%w=&N6te$b4M6aU#5$r%Z=KK*7_*UE|}(^QcqNDZnFc zPKNWPLh!>>XFk|>6X+fio06QR0op;Nc85bUzw7v_TF7X{vSh7Fj+{$74XLu!SMAgT z1(tDJEw8g!nTx`s&?_S)B~ggZTXkVVh&H&FAAWIvk_A`{jO$PgpvOM z^80tqvnbBK5Ul0&W*J{>_f)hlTWg@vl1jiGk0=(co1`o$H}bCDia)GloRwJk zXp`wH13tl{F2GSnM_sRVwb5T|=g|?9!ZVEe(;M)!TyU5pk;+O_iO$l9ekJZ1;KxMy zEV*wHN|=etub1U(Tm}^3rTqD$7it0fyiXoopUN1IBIX)94A}nARL?4{9MzbUeXZ1R zDwPU#&@t$5wpEUNY-*iMz)eOvrw0#*jusp|cU%?z8M#u4W2(pKnJGJ8h;>SwFE$UQ znQNe$wvGXHO)mj2_C_@jN`FxHcjT3yDB_rR+$iyMGYoRu0UzMy~g87iW0;kF-O?k=@z69@}r@@4i zW23fbNz;|i$`K9ued@QRG>={(yPNDND&1yr9AZO=xsA<~IMOMzTHI}WsDI^wq+hCo zUc+;!;W+%FyE~ps2Jety*o>?<6rMf*Hic|38c)rMkEws{-d`)aSfpuxcsEL?hhv0w zyb<4$aZ+iwb9Ht<;$#%RLmtl_cHR+6b(ZZ9@T_a0TVpqI{2|JTy$|5-y(1CA4>#U< z7UAc^5at@ecD68h$I8KKkR$m*P(V zJO{}Bu^6xeN*P)UEgml!8K7fV&&%n(pAW+{7=bfRZ2+O@w>#Um9I&z0T0cR@A0Bm& z{-!@wvbC(*SlfMbcE%Lq*2sk7rvT_$yK|DvC&Bt=C&k)xv5cfCy{}XOk$8cL>cjr+ z%+uX&cftfh|iJYIK2a7d|KpO-Ri8c4;YSmCd`8;xwq>m3F7Gtx4eYx%SiOC>$NKTi2iNz>bya%+1_fJb{3^n{Al(ss>1cM7*q ztd5#3GkmIJjM%h6{b=G#FsBsqtS*pOuVpq*C@gX1;!o>EH^@wl4xwgD$)JVOY>)M z+}%pzn7uc4HK%8RQVt`O(4v*6WfIpeTnHfcH25T#163egW9`YLS$i!MD!Hvr4gJzh zeZ%@%$Vl@~iA$x+$6O~L?_B+pO?^_T)IT;%9}mx8K4!4wlHi>SYzv=md* zS&!2`rncQ<*RWz$IIVIUDYqSJ_}L%yBC@folnQ@zH9PQ6VU&`1Tsh=m(9at_yRJ;x z$(DJEw{e%Yk2xeAB!~#0xx73h5;xh0G5tL5ZXPn=kG^RV9P69vV2FpEo3~|>sE5Pg zPQtu-q?W?;!ogl@$R&UCb$xfWdto*#f^OZdu)!(N!*i@-pe))2~_J=I)@0yCn=*+?sfINEM%8St{x~FGwp+!>oXBy zVYD*~F_E|riR<3g5Pq_$#bW;WV##4+`o7vRhjJTJ>z4bkfc>(?OT0BQnG2D$+^_k$ zespjYnSddqQ?Dm(KTD@bhGW!^dQhaS&z`qP&7h;LF#f2WR4+)?piKB`f?2;t3 zV#2Fl(lye|2qpLVQxCg1s+6-`VX;bN4vRsgyL<<)yHDxs_hUf-RbB3rDRlBad>WXa zqIJr#o$Io9{^WH(d)@F^g6)3Ur0$NFuzDWWt)<%z2~%Y$kzFwdH1SZQN;=NrQ?4+8;?+d*lITZS zNIgeJ9ZDW$_K*ajLw ztIG8#tlyuCWrx8-j`HLeNjn%w$a;8#SrC_MvmBu)&8djfl{_j zWVEhb)7;kcqLXHjjhjZtk)&%ST=KdbqeGNN7%+8(m^GR7$IGg+JGPptD<}s9K)Pj? z5_?oyDiK?iqg6aMwY|ePJzgIW%?IpB$W%5Y9XHe;^po;VC_h#2gyM2Yj|Je@A&7}< z!6KMt1wkGC(IM;GOXeXhoEt(;=!4|^W#4xs1BZP0!;0NDb<;CPyMB* z4VH-YVUIXU?pFDM`erqckx5Qgfb*T*=S0`8PSp-v{8wmlH5PM5_YPu3; znarGfD^4V^hsODKUhWeM~REZ)IrKik!_9+=a?){B@xVXr)Q+RO9o#I(*aT00gl0Mo~ zKoy(+U&1y!{fuwbw#W1xyWW(p!Vx9I71kp_O=J=$Pz9@zr!)k(9RM>R2e_^M_J89S z|BcD~AJLEg`vIYOF^bD#)6M~n7wN+06alX0kCl#)Rbo6hP*igWn*;DcY(1aK_2UGW zL!y+x?eoxi#uK)@q&hGQ?_y*a2bnZ=*+PtqGLr zp|e<9ed#QnQ^>VbKheZ44mEiak$(hK@HneHDMz<5ThkqloChnXu%|%a2pk3zb`V3j zzC|edbNy>toOv1ZjeZUd!xhm<*)%x7urSmUi?r9uTavs9aM&t}6=~BA*C&#*gFAms zC>QHh@HhBFqUiXAHVagVRiV;CQ^BX+O52^!S#F~x!ShhuHS%~PrB#-Oou_y7o zaU>Z%I(vWJ;PK3t*~^y5J|PMj8tLSwTLxhn5;sjx{0Et$n4f(D&wrJodkGbwO}Bsw zbzyP%-(t@3^*ov@7SQ0o`wcQJu4jd{g>5UnUFEtWzsxiwT~0JJMEW!wAw?nE13uVr zMZo)M^|rExxtpCA{eIg8c77rWh6tSY33eeAUs-6ljTac3XN&j$cJeVoQFWUcR5J0c zj@YGAF4%>_Ej(ukXuCLrKUf-nUX-E|l7hK4J*9{A-INaWn}%01r^!~#wBr@i?2U_h z>ZnF^uT5&zM>f+>i?*h4cYRGuou(tn{ z@#5k{Qa-lP3|4UOG=*l8rLY*>82XNgJSHd172r)jIM~BD#xp1IRwQ$gKdgQ7S=pMO z$Iz_iEk*O)g{Fd7-qp(4`Lp$g9dblGIb-=9l(FJtO7xvGDZaQIYjcsv8kU3>-!^Ut z#2WUZ&l3I*nSmdh5`aMQ4OB@ba+?fC?mG+p1GBVzs2vdIvgcE!k> zPzHMUo@Lw1qSqkmiu!URbKTpNA4j2ur!L8S9sJG-AEapqdFF?^5c4zSCmaz!=tl)g`_K|tm zSAG)4a^lzzJdAYm9+qKUZO_V-)U)+k$-ifqcCF>uqFGyam3hDgrr7|9IlNxu$I7$e z)?lLO)-1=Spb7Zi%th?vNw4+YPvc9~emj)&0G|64RV5>zoC_f1P1~v(9qTnW)>aE(rW6n> zUr3JbG{9Xuy>;T|eHdaX1VEmTE(?79)`$GK)m^3sR5xFP3w~UdB@qa(mKexiR&P7U z2YfmO-)srq8zk@6KZXlXwG!dTb=hC}->g)LX?W~GbKh%&k(M#*btcQuN{DDS(M5f+ zz9woj34m>hw92a_eZs%yn_|v zhXp+Vo>kB3Cz=-L0lR@P1lk2K`#YS3J&o7MGl2gT@own8?XN1^vwkPur3L_~jL9$7 z16bl3n2qUqO^wu?7JwnxW_Js4J-Sc@d1pq&jd^VQr$P6)qZVTn^hVVjW2$)sq<8lm>5;p-vAmH;c zA$L;zgMQQFDkm%uLNJ7D^U7>Uj$WhT(8$(9Pv0ee;7jtik}?(mY7p0sh>IviyUu#G<@n5*tp6F;`}ZMBXMW=S(wHq*=*sd~GG^o4 zfc!z;1CTjFOB1|kCnPHMw!h15q78r7_b>yrSN=I6$+e|>GNW}uzar_g|D9VTVcY?} z5#7e~zm!-vCl$q`?@1-}hS6!1uc*jVfcFJ@-i)7z(>5oE$81e12n^_E@L%5#5B8?t zMOJ94uc>&Y;f|J+O!;>tihGv-lDDeNP>EQWb-};+Ylg0+3>mS{5GMw1*R*Dy-jlpJ zGTGRnuKd9TBNZcB@}k$c^CQ+mo+o_4@Pz&Ki>E)EHKtlk>}Kp-LvuP0syeXI3UA&Y z_nj#4Bgb|XLioFmMBCE-x^=t63d`}aOnLeaG5fSzdtw&P%GO0`b<%m91@tEGjP-Kh zp0^!3Yb@Tv&AzWz|K}5iG3Qh&nXr$4A94}5)?3p$MNVCKuAt0rI0@5wroeI(+ z-3=n$-7PHL-7MXm`y15f`#kUOdjEdsx>#mscV_Q7=iDbg=bU@s(kf!}ytPFr_Eu)9 z<2!zxKj9}ay#;+6Lv_EZucQjk#>;Pie1{r_o=V(5(YhYRSZ}=P-KY@Fcsgik{8d4B(U%S_EU`k5sOw*jqUK^0kskw5l>D#QaH-C)MST#{A zMoB%` zr-i!e=L%oT1dPYn^ia$I6PrsVsNtgN&1NJ9XJBI>YM3V^tY?BuB=c%&_L^Dr9l* zstI4>-JSLQ47~={xq1Hld75|-E~n`PvX+)sLu2F7>1juQKMD^IkFp;fi^72sn?6C_ zk(`HkIkDG}F(R~2U&QR2>Y`W5a8*IYDwF>^(qP7ZH^;N+j4(@%GJ7DA3x@o?N2ub{14t-j#1^Ez!F&f{=H8H9^y;*>i8S; z)Md578c+sk7nyP8f&=E2zlv_md(15$<)p%cyU(Z*Te(b4x<46mSkg4dV~XQz8-vmv z;p}h==i+BiDPRIOiixVAk{pS%zqbCny8>G56_g}xOd46@}{t>f*~`LNvdRDfHLHl5WBdID<@?r>y%<#HrvOOf7^ z$l~c77NW*|au7d^ze1+F9GaJde_T~ycy_jmKUVwwbkg_4>{_<({!n_Nkx+DhwzN;( z(npta3y}j~kT-_s97iP-+2A;a^=j_?>U(#+h?SWqXnd;kC+MHCYxej%x~W0#Q8;WO z;tc0;oBOXMbE+E)vLg$2_TJK~b_Y0ix@uEUgiJ9j56@N&eI0hJvYu*iH`v-mxZ$~w zx44_IfQlM#W$ZETU2rrXX@MA50P;f^ZKL{cAxYxP=waCvqvz2BdIkVf(aczFRBD0ZKEDOvTUjNC^nO^n2Nriu<)z?NoD)a1RCV&@Bs8d?MrorzDE)93O3Ef8G+N#wY2w8~ySmFI zzN}9?RDC)Y3G<s4VOaK3$+sS#|fL|$Z_ypT|YCsAz@(9D{th- zUF_usl5Kjr1~R8Zr%`A#1mkLZZr>$81`mNc>+PWJoZyL$M6$UH)H4G^-?P`QLI?sc zyV)66#t0^sB$|bDPKbGtG7I&tMBjcqb73aF{4zn{kyO%gf&)Dm;~$HyBrxiGr8dBE z5|h8#Pw=rLwT$1$_;#Yk5>nGkpTaG`e*hAC?&F+UubnWF@=?}yvN`7Oy>J4|_C02mU zT5b0(CY)b{)GbXytNY_6b<&*V&||b0Uo_(Jy%9KIXIseIn_92eRH+(k16#Uj*nifZ z#P%+Q(A!Q;yK@hsAQoMB{-pUwE8d_z;a#YVl9|Cb@`zk<&og*{` zY`YXAoU&(jUpmh0fy{3Y|JX>Sls?rt(~>Fq3VkYt*0RS40{?O-QfD!R3tRxUiV;lr z@KKGG*YFy`t*}AOJPD~fL7)1%Jb(z8#1(>}1#XLjcUlwBwL~ns92V`8g2j~Z!G@Cd#nu;_1hUwDNGXBmQV_rfrF#i`cRG1|Lx>MC&her?y8OKjF$2TG- zpI*$Kw@z@rtO6%Azof9quGBuQzzv21^E_-NCQ|D@@$!q1kM%^^(rbT3%$HQZyaoA; z(rl4@pBcuJ{W8L47r1^SV$)Q~w1I^?laYkqw?V4s>VMGsZ2T6NLwVQehiF4eQkLMI z#q?mz;~{>wNM+kw)e!<-xTN09v%Wi2y*~b@QBoEaFR3;^UrG72oEH$7vt&PMa^o6g z*`lCW=Z|e|qi1bZG>x;%=UI!I&t7V~dVz|%w2#+BRaf(Ulz`FMqgOEN&Ry{6LWOLj z7`m?f;xcqwmwQ+|5BA);yKImdc`Az#u(wBS|3ZQUJvo8_dD`U(p5W7)B21X+1zhfQ%S6V-f(Ts-EQl)H976fWNXvP zmWK3WU}AlHg5_e#+qjyoE-4;pTXnBxrc6Y9z44N>#_qg>`O7-3LY`s*V%kYa98||5 zjwH1wz<3WbFoYhi05+pJl7#P=mv&O$+8#Tamkhq6J-HECA%Fbs$tucPavwr7`b;(F z!N%S}7|+t8BYUJT%laTul}-a~7klq>O$}tE?m=yx*l2-;@g%ttZbwZc*nzw-8cjn} z03uXy>d;Q>tEFedvFFVT$1(#0cyG;6hD86(b7UCt_ckrV{+GsQ6x~lGQ1T~e3&L327ZbTYBO~)gq4ISxB=ojl;Z7GB}BMvyk(iob7 zP(+_|l9oBgR_8=bJvec-da+|c7S;Guj_x=K6bp1^5saX9hW zjkvq^O@YpfDF&*j$j#Z`=IazuW%F4Rd#MAI`U@2=-5{~qsc5O>kMNJKW8Lm0$tVs8 zf-fX2%iU7L8}xD;j*78Gx)x=BKGWZmh7Oeq9DDRons#F@T;hw=IawSoYSxi;&O^{Zhe`!$!*-C?%Q%A?0I`kvHIaFXj^i9!$Rz z96YqUu!G8}3U}2)8swsfkP#jThmp%8l4EW-v3&2)pIFF&38(AC!qORG=k>GZ$^IO+ z=`0TrzGPtb$)+V&tDe6E;bLO#LYM;le?^aM59G7;&4neJ%Nob0+K^4mhSq<>ax+!d z{go^54lrcZE7-^-J9@&TreED41cfMrp+Z4ww;o+^Pp;XEKMCUZ9l1r9FQ%^zHw(^rme()1JdOvaZ2pN-8P(;6q zmjMD87WEoo9UbzktE)9A)CSr|5d4PHao#>QUlco>@DNxV69XMxI0%>d^F#qbQ&W?Z ztLy64RzPARk%ff?9+?>L>3O4o9h9%hsdvUR{r+LI;HA#2KsmHrf*;!Ed?ua;UN`g%LQCbcsyJ_y@JllmNsvqB&U#^xlw?xOZwv|{g z%^6iQ&;}UmC`$FV9)Ujmx+T*=)q4&EVu)xvoe=&c1$aIw8Kj*zPHtTLxHmWXZ<`~1 znJJqRCglP0tSLPB&7540xWLH538C}eIf`H%k$C9wncCyc)_0O!D=MV-8A#=tYJ=ce zr$|?QoW-@+a#KI+TmJFmld$+KXl1qeivSI^8RVa(<;`*m=B?(R%C1+jY0e1Ec9v4k z*1LC4O>MTkw;g|nMnRAKRV!lgmHhyY0Flz*7>oe9TgXsHgsmKRkmiRi+=MM79sm%$^_VOU)+sO4wzl1 zlT(CG9g(C!O8Htlfs(|FA%|=bqeJ3e*VjS^kWPWxTqM|~E^8_)YG*B}l8c1|)V<7m zaKk}&nkY5GUYw$M_10y`QXd4n8gb)#F&e2tNFWNHb^j=Ny+V*gSR1qFdR}H7$WzQJ zM~?P5K+(|3;g-WigcToIj6zN(6B4v6X{T3 znKHl-$dtvz_FqLchcG1SvguR3=Y9F*xu+MY*di)qw`!5VyjCu`9=(zgixORZCw$Vr z-@nF@qAMqYk8>BkY=RntLm$-d@yTG?c?oNazUY8G$0UTveNSn>Lg$N{iS6%abB&) z=cto(QQNfl_h07_S?urE)Ye*0YB<({*f4V8jdN$&01fx{E%54v7>U@jw(=`0Pt$2D z`V&F*0xkX{5zumS%-d_$SIBv#&+ZqrW7S`>ev2jLmpr8@M+d3}Ak;^=1QX}oYd7FK1II0?u z`8@e;6KczQX~0IHBj|q+1=*Q(#B@idfQ?xx07%2bW*>`aWowU4p^zCR^Sx}_J%GxB zq-VD&w=cfQ=Ty&m4Y0C0);M8;krG8GP0ailGc3`CiD(f<^A0Rw<^6ZYTWI>0dOHgV zNXZKIHGc~UV$2>ba zz?xiW3>|r^YD~YCwPV*YZKUzGZW6PMhMV9ckGp1*(cNCh*1%aL z=J_l0I>)a&_2{)c0kB>FG(~$u&Vb)DRT5{bHB)jmv-x5K9TWKp+vYd4`1$phgQ43H zlDli0o5oDZTPTH}{r+Iq3iTY`t7w$-Z(D+(S2{=e71Nir`~I764q7>;R;K;H=Wo}C z{WXI@i)aIE}%j%ok z=CxtiUvZ{Ix7Ye^gOpL4+9dy(=;OH7mz8zR!XOjC{;jNg5?Wson7#nn4AKz}KydiznB2^W$Iss#r-4L-QT8dquRD;)F3H zYw7kmACJ5{IUmd<9Pk3a=N6CioF`VO_n3@SKb*Mp6(Pxqbg>%M=W3y?uZ?yqrjfBza8bFSqA*@+*; zG?4)-E4qL?(((-nkB*5c>*r5@;6Pwd5WV$hbVdsM=*su?_4WLuq@+$xPD|_S->R#5 zQc_Z!TwGR`m*39}X>ddla{Z0m0kW<|OoP?!938tyM@P@CMj()&hzLw-Jh5$p8!B&i zV9lQP$BvGU)Oa0l5dXNQz}?oGP56aR_=N($fg131W9@4M3Wa@;ZCQ&@fc9OzIm}W0 zzodZx9+Pj6ewm=%>EU6EKKt_izJ)XuUHVIfW)+wa|KLZfdqqN?|BR?C8tCzectL^U zeYa>yjoXn@pa1wbl!Hql2LF#aS5=jo*x=mvEgX=0$wphZr|q+ZP9vP~?f!sk>++Q=^HXc+ zRSom=<&JF+v)u8sOk?{aI&rbA1i&K(`gA+HyK~-j3)(KhsqK^XBr{^dTfDFNrxxH! zBX)?8L`^KK^u*2{uJQ+O5Q=Ti@h<4`-*EdwiDk-{3Y2`w>p{5@H2hzW4^5@IQ-(X{ zV9zOCo~qZ@6hD8kHyk{L+Y-U%>rV|~Rb=4Ynb-r8HRkK(HFI@Ps+a248~=E*yvmd}+>&YK zNB6xt;|2zXaWJ9&SMq~*n8h%6R4ECTCd-LB2?DI@(POLGf!a~xnYzH(>LT5<@5%wG zII<-Y%um!<4Z<5Qj^D8TU|sI%j*WP4C?ZViOVX2t=JK^PnwoaI0#YmVO}~Kvl4(iC z3FfW7?i9YhewtMbiz_`SSUW0O2sJXpzOW|UI`Uj$MU&qyD5g~VY~3<~73^7(%KU7D!5F3xKmr~f$hB%=(JvPuI&lUf zBPVC)8;>7`B%oNfE92h?31n(@JQ^h3P3VfJ=X9-)eoQE;-Reg)0YGyv)29 zb)bH^*O_joqhw#ou*keGj6CzX@m|f3C3c3VH~{@K!(w99Kl8GjUF#RRW|-LkYXf)C z%a@RMTbr-egdz2S)Tb-q>0as`i89T-ztV(rR$DM!=HbFgd>DA0sYH2~J}}vJZ0O#P z1rFzHlxhMP|4ec7y-B`?W~7`)ZHTGMnf9SkDyGdM8>;6adA`MO;^a_%qP4RHVBzo(p<&h*j}O?RQAnq zxzKK&n477q6#71jy|dg~gY2^+2JN#tbD3=%*>9Z@1KG!2Nozq=j1T$-Q1ox>uDA1# zj*sguL&vSy$JLv8om${-XRB$iGe7JmUOcKd>^Gb@ci+6)hRj`eoDvG=_)F@ISQ)ZS znUcyj|6sspKkk1XWl*AC5E*yWgux*}Q-Z(TSv%dhoaV+S7au}<#C4pil>KvJSlD+i0f zXWb*IFN-^SwhU85UB;&(8g$9d5pPj)hjSdwUS&uH)^owlQXYu*k@wTfjJq z6GF&u11;&kwzH$Qx*i_tUPkI=`V6(Ca0g_I@EFD#fSYW&vO}9{cv5mxb2w|s<)R7j zHUpj-KLLH{RYIvXqS@Rj!zxH=@8{4BE#{|v(}Dg&i}#U7<5pW0}L%_V+>3W|g+~vC6*6cEK!cak;_rYS1$*c(4JwAct zM6C4HY)O;PpR5|%;3qj3IcmMJXR&tfWo-IW%nth^{)%mBcPQ^2q@VR%XTNCYj=8yv zWh&c?y>Xz(YPhqBxSCy!=^F4rJ3OVl%TJ2?W2(bvJ}4=PSz8} z-q-msOEB#P3?|d)-95S&aKpCT&F>yRVqL$+-iR=T`7|VT_*56`buIrI4w?j+5MNl6 z6ChfacUs6cHwpF*5YrD(Y<2R*U~0(XA069K+$A~wEg?`g9?!!8>|9~#(Qh?p`s}>e zu6d|guxDvdh&s&_&jF0r?fd%Td+Lc|NGCbP$anhIccBIL^6WGNMbkx#j|BvOB=KAk z#TCdN%=T+OH(Y5H%)4;7_^aw^&o-KBu*;G(LBAk;pR1$9bVZ(iI36U?pYFThQ?g}c z9z%)NNM$%RKSVQAEgaUtGe)`Qv$IV}``|_eLUBEE? zjM6SqPU`e^&a7c&`6jRfYJNv^mygk~rSA3}1<`@a#e$?eZD9StMBtP4jXGm{9c}#8 zu=u&@1sv>l&Gb)(RXq5!Q8lwGq7?u329qygy-;jk>0Gxn0hL^%AGq1Qgfn1-#n-dp z5{_KXV5Dq9@O^^MXP!{!un!#0G=HW=<-ljoh}2Xqy;Ty8)L_Sx{40&mpQFz&5RtPE z>LHtV*QQa}IA!#Pyjz2PKTDke`%FQNUl5$jM9iOLGzk(aNP_7+!UFN!N`!ygl0wb4 zyAG*KTzYYif`9rbHD{lT7J(^suZN7?)L(D>Cb$C|^@CFvO|X**DBPTBlAA8DJJqR0 zC#*s=KKA&7`hG-FSSnaqLw~M8F^5DsYSJ_-e6IVOpYl;PxU0;{kNMkI$H|_CM7Bf^ zxsZ0G3uf&Edm2AL_u|n;IXkEb?mhPEkrgNm~tvU7s5!m(-tD#S**|*h6VQ zpEvSsL=0;_U*_qJ!ovL}zhK%K>b6*4!KBmm$NK2$o2#Za-+l}`WNWvjz4>&kbMxTx zK&GgtQT~nKRpCO5bmB?y9 zIS!b+9tN#v%T^C&vtMXR%LkWO`1o~3e6F@MQTJ?XuX|-a-+80h ziH*83>|0Q*1cUs}><#;7xjyL5n1Z%CyX@LG@$$$U&6J88BivUE(btxMDT%#(S;t^Z z(Nq-!PgGLR8Nz2tOHZ^L^Gpm&RnvAO=;(R6qDp7tF?lRw)uMk{J#arL3a@NfhyLv`e z`!k@LNY!wg#qu<4bawd}ok8qrW!`@Vot47txKAuDF3!b1aWp8DX*_FsgjRcNgv29w zPUp=-Gnyw)^$fT9wZcWp?QK5~7kak8AINP@`=o&zlk@W}O{1uIhj_y@l zd|(iE0<5z^2f86@9UebueisfnZ@PzFD02e#>^Y7HI_978pTW)?LPA(66ttY{Kyb03 zn#JXQchrUscOBLbCAQe*5qKC_c28I8GLja8X#?f(r1nz>r3{yY^>IH|MQUNohwUw& zBDk}?3JcRabCQ<5wasl1$YW)V<*Pw_FE9IJF+0jQ?=j2OwVj7oGwP?_#R9b9Fs6;c zyO>zPs(F2ydA$p`20$gKE@np>G_Pdlp5Fh=XzV`PPucRB@KE`q(iB8Z@>)-Z&vxLS zlUfosKk&OCm_tN4eZZ_U@6?g>aGSz$WhNsU;qv{y94JQ5t6ddAZOB}qQg z{#$bwrr)j1g|E7*Xm`#eF;TGIj0ovjxaNaf z=ufb2Z!fJNA`}Hwd>ywiMlQ#H;4znjscZSG-39Q7eHVvaDtK~ynG?V3?xw%T_hMmV zw{#UweYBpI`~oFseklFYufo>Yjbi1~f9l~N1R-yLWzPb`!Um~HQn`&^EH+=^Ubv-X z@a&rQgmam`Do}-lkrkB{)_a^v&Y*;(0~D*Nt*>VTVOT%?7hCFBXQ_VHzP)3)cDpqy zaJe(cMI6ry5xmW0p0;9e$AeQ|bb1WXd;LQ6UKrxPU!(OVmk}cu{NFn%T-xAZLaXsz zy1&D3*y2$38~sTPGXpO0?(l>F&h3#J=2Rm;Gi4j%?m{x4pE>~1>I@H*G=KNE@BmQV z>P0_)K1V}Cn`2Gy8(3ZsaJye>7i-{5WswJeKpO7p1X$f#V#v&wo164@QG7ovzRDa( zBUbE^%4v%^esVygr90*>YC3v@_lA*zOZ>l#g3yOo7_5C}S9b3hn&(G+zVi`jSjs;6 z>YQIL`(S0PNFzyZ(SR{qe|=HNr)7Wn$@%8%cS=-~r@PA;lHzMNbpKWyvcx7P28D&8 zEi5dI3vs_H!6B7RVB5ZgnUJ&RB5ueh(-_@2$nDAS&=NcBl|?H(I<$bwL-yxue>k#! z5*NqBb|%uizh?yhKMnaGtuk!;ZMZh*o@noYhdU4D~bJk73*5*hA!{p}=ZmX>pk4b~UuZS%84j;yRFAWK$=%gG=q>W$N? zPIa?0nWcak*tK?(h)1Zus5u2yue%0>oclVZ2vzuxodtsDxmsHQPF3P>wK8irf>Y~HH969>cUM7X4Tht}V~LAInXNt9%~!A6mROA&G1*FR5!Mn)#!=B7>(IA!eKy|)|B5i4jtcyhwC zIC4^{Y{v01%Og+ot;#<{$iht$aE@5?xGDV9O{@WQA4<|&lp-?Dx|7k__-3??+JZcwB~o+ zXl(frx4cGr4-lk>`oFV<<>gDbRFjzUp6Mp<7XSTAgs0;QN)!re303A0K{X!Rozv#y zW>|q`v;Cuq;NW;x0jSA$QuKkUbDRy0K zqc9R%dliMJ7BrDPYuhjXM=9%nRJr^h!(KBK`fh+!uq!UfOyJJVln;bai~05il2oEV zw5arA`ju=lfVnVMG`g1Lw@1AFjPSo2;hLo4V$0}Aq;IvgNqmQbUj*wIYhR9d)wsHj zZtPXpm|F`pyLo;e+$U(ekA*F7mtq{gm-BloSaMvx}pME$5Xd691CZ+ zgnUsJ3B8Mi*)!c=+A8dnzqCC!enz zMgVXBBUNMY0AzA|dmFUxxEm=Cf2M_QY$mc#HZZTogCURx#8@Y!MEiA#ky;i2lR{Gd za#tbD%%~}m=)^JVeiwR3Fc7%fa)g6itp#?hU%v#fT^$W@>Ry#~e*FVhn2?$ZJcLFQ zZ=RL0Q{7wR4o{3Q6_;nRFAZg<_KH=JFS;pct$rWc62YTE@-g$D674af*^PxRnOOzP z6s~wSRUz7s$a+(O)WJ=-ycXJfcVt#=b?zT6;p9Ac<6l*KeCyF)$=@(K-u9zqHGV*h z8w~psmiPADhwsW1t8C6fc+l~O?_P*eQ`mf}V4T{$tggM8qITw4St zJQ}`5j%%_~P*jrh@Wi&YwY|OIYcxU=cXr+e>IdyyPUVpo;$$F)7H%-uy*Lm`Faf=y z1x@#FBAy{roDFwR!H&UfZl{*Pt{2wJ)r;yRHr{Jn+i-s*g2jUW#I;@dhX?+fsPeP< zS3c%EI`KIzF=3N!5~kL!sM`2s#AiQXhn8 zyg>e>roMi4Z%<>Hw>y#tZm7Xj*~{gqku$Vwn75Kgu6%zP`Suj6N$n714?ITH}qU0z+iS6A-?@ajN74gpiVwy|Lg z&;|ex0P`@(O9>@mp|;mI-bsQsKDU|O3^GE1@0F?Qw{wJy+6B8l*Kaz) z-H=OydugP`a5YW4dD_-M2-EyuO6j-b8Xjm4Oegn)r{&JGvI4V6wvTia!D^}B*h7o8 zoo2a^!BtOwR2%jWVHFUJ_qxq}MVBks?~cJ3R|VJgJy^Y3b|4ou%q|cdr=e93!p6wW z86dqPYX)e$zf9Isc^e-aFJ)m!gXh7oeDuZQuq6zjh%C>oJIW~;o zd3ype3SY@oQ{j2-B^t6@dfmAy(yG4FWoKfG6$jOtqnI9$4Mdo#wGQb7^O>>ORJf1I z_@W5DX8bf<{0Yd)WpM-M4HI|e0z+CMMoPlO-yd@aTT`LO3P2>i)g!8X}vJ@_4h z=i0%#D&;Ycr5EhxK7akNXPMR6pKR=UpX7DjE27VJigUAYMA2~+Lfns+6x(%`p( z;}JN0IT=Q{m9c5!2jq%>1_oaOsFc0lauX14{H|y-ykdH}O402L9Gn4Vu6DU2z3uiN zgbSvUWp*uM%sIVXR*am&)p|Y0vb=3d`6o=LK$#v_){+I*3hJGYNiKWpW%?iv+a>vy zHD4^sQ>YCmCuQhZmIiPjS9jlC;dz^^vD75O^l}sNVEc9)H(D;=ZX;zCuZxDTx zsA8yji`a`2ds}Lh>bW4!P9~UmuE?o%#)<7h1X@hR=`T&+ym13MwrW8yf`DqhX-q&R z|Jf=blatkR$C7Z&l*kXq*_sYBs7~#^Z(EWk4%s1>yU^0$jr4BMcO{nF-aGJRb zuhxgqvS4?rZfcb__HnU=x1NqkXEjp4bG#SHPnB3}Ed z284(<@aHcjpb~c~21`^1T^NBLap2}DdiiJ8S6ndhycS8Qju)LFHEUT1e*3;L3nGG? zK1jn+S(E5*1Z%wczZ`J4&Yfj3av$a<(k^V9Gj1VYog1xN2g)Ps7B%N;CHO&$7zS zOd&!y+>y_NLr9D~-$)arT9{=+Ien_$U3Zt6mUHHL8DW_*sssRqc0l~ zrC19H-V@$V$uQUHVOx}h`Ri9*(JCf4-o5QQvPyah~om^MS@`+5 ze$jd~3tSHhCVcORg?xj{#>Nu;vxb)xncmWGJxhgjAaU`w*?;ziBW8qM3VJNL>fhA3 zBFey^8ilbK;s@#Tpewe+%IZ3Eba6^)J6V;M=AaHOuJQC4RaNDkvf!3zOOj^DvD2TP zrTVlgXks-N$L;s!19L!BWJg7-T)8xm7a7V`8V@(H&bI#1zkFr?=A?9W=c6;jUnW@> zek}YHJ-fu`8k7wa8B9?IQ2|QWAC#c|OMCfp9i1<6!}kfVITAH!;#P6xVIqB~w0zA* z9xe=Y7T7RJ1x(%hd|V%zdh#3L7aT>bJoE9_{dlYixqc{^KlD(~TfKJdE2kuO0cW)) z_qa|s(tat0!~fNX_!6ww?eT?of=gky!wWl8h*o-fwYLcSQy+i%p+A zRX5^6p{DaijB(#Ubzu0PFoi@6f2IP17j@iHEQmA7CwR}oHaqIQxMg#(kf_0sU^;WXpPN3Ru}Y8WYfdxCgaA_8th1(*)o}aZ6n#x5_H3Tc;e) zkDVruT}i|`J2e~T-oGQ;5B3@3d~1Z6^wa60tPwZk`4+LL-7c{LR-fhKU}ZsSbc6r1 z)eOntaxF`42N7g=DveWD<*p=RDQYhAm_wUuF#1@EgD?ZcnYZA@9ZJDXPQQ-!R8ruD zv_G`~d7x^KHEO=7!~hM04r;FT9b)w&_RaHGuay>*GaBwuNMSL>nl8QczLZEMakl;C^!0>E&vCa1L^V=461das2f!>OUuJYwoBFViZJ?HmG~Cq%S;9zqoRc*B4DTp@txV7uJ* zv}JB-`XWKNXshrZ>ESE?mq%JmR#S;r2-zx z1tQ!RK_yZtu`Hqg`Zg;MJ`j*>1t0)GJ1uuWvEc@YFH=%4j1KEr(pf@*HdKbpf1ndd z<|}7UgpH6lKun#T8i5J?i<+8<)@CT3)l}D=9<;8_%Gz~6BhwOacRM^hYi;j-Ca z;MNCry#$$`997=!F7E^-CMM>y%7@rCb!AUptxQgx-_VuLT3pq*IC_#eyZ*o9UL4_pD>ny9boybJ!<*JVMIsI)JDsO z&V*P(rd+U=w+JJJIqaze`7D3+;QxsV7ac4ob&5-m1_1bPV6*iXHFS_$*y;g%XI8RJ zvy)IoXzgo{W?kWgtoZcv@onYj`B3`f5)#f>-JK0SF0^E>3DM?xF-jc8$X}M(J73a2F}>C~J?qKQSz%d2LBWcHTJ8FZIFKF7V8Zi^26k0F8h=VZ>`n$% znd7nc9-C&HhZ^JnyLp>_WW=*f)SXoq`4p&Xs+~1%3EbhW)vBF(1y+4c$EC47Irnem zcrTI%ajxq`Qa^%Hdfj(dck&~&Jca>s*)5+E+_^x5J@}jzz#g`jfu)!8Zsm%Y8Rpqk zVpsV+mKFt31+{J+ogX5(Lorxzu)x{W)C|llG1)a@+0>m3_P3^LRZ4W_la&XGRhA#l z^uJqto*vo4Ni#fOhnj!Ncix$(qI%86gcoFIGP_8!69$x~jxAPx*ugTqdA3E#N1bu( zu&XpgMmw>;1_w8Wgo*rnF_E$G1EG5{t^T-dGSoZK>QEP@i-Oz41WwES{gQWREPT`? zEJ^gP>--Vu1_m2pYjyle)kpPPH1k93!aNmb#?rzSCb`f;wfu@K6)>rgZsJJ(6$&uw z;qAHAK!pIAhygObj70B8;|&I0R9k-DTJ;ygaB$-kt-pUM!FDJ?a`b0vC4dl?U}Q{GbTLNk8eeysHu<7cH%i08trleG022iLSE7nnZG|; zr%e6faeQXVKn4b1ah^qnX^jRNcz7Heo2Z?ee=6;pEN*BD(^4gwEzABXDgN|nol}u8 z9?}b9$hyG>L)4wqrT<%x``Q_yvTX#CQrv9^vdj$Rh#r&SL0UOpOk{usbt>=Dh#o!K zKIM1(EjTZoixZN*$azeLiPuIz%M#4vqsYDsU%`a{U-Q0JW zJm7@q$^THOg$q=+0;9j1=8cYt`sq4XUboXfIZuMQRC@cV;=5K5t_j#G&4c$8O`=x* z;}xfZ#9O4ZRFCElIUmijmnyW%ahVBuKfwVHfvDmCO>ww}{%@l>XX1Uld&vUg{c6=C zEo-tsbWUi3f&CL|KEpeKBFnGYM zaibJR+qiPOB^28qu4%n*N49Z&e#bA!rcxc^s?JkkvcBK$GanEYRsoYA+}?=H8FSvG z+`gHtzH)=Zn?F7j1zpRDRL*k9lYCI=7M3L#lW!!$AMpx@hf`k;|HGC;n!Wu!+Wbz6 z{LT!8o8}3Hpn@0$iQ1F%k&KLE^XwSNg}oW$cs#4aPRkfU-Fo^nyV;uVaXyou^=KE@ z29?__V_Ut>cd}9n#gm%v50N|_Y~Oh~n%Hk7Gu$6F^pTkrRmnkfGq)EnJm&AiDC_c- zRUW^22KSTx&s2IRjposmuQ_wa1=d=O*~8 z_s+VzHL!H>t-_XK%6Kz-lS00xAkO`SZYAo$-hK&O@r2Hh@ZFD-gSC_U7?Yh_!81j{ zL*Xb~<^<6QcsPNfvomA_=`W$AeTvo}W?$Gu+m`h*Po^@SVVPuK>W7Bn*6_aonC%n< zHJ{DvJ~bvh-@_2B*sz`FzPHAKokrdtO=v~UQOeLeo{ucAGumxE8ugmU5e-@#iCJ(z zD-JFmGd~`6S%bI(asjeAIq)o|xxXK`u!K&E^(01e>U9aYJHIT4r+f@ICblZcrt-qx z4#G&tlU3a&B8n|U^@b?y!~4P8|F6663TSGH)S&hF(JN5Sj=HkOr2X~aO z(RYbV(k|uo`)-_SwJ9F*NLhz_ORqp+_l?BUs)7%x2Ah|hou$obmiXGyJm0MU8H?sM|E^q=wEX=$)ITq3be(%x6>#`HJC(T3n@c45fukp3 zzkknwv8P_et-trLG*v0T!H0OFcdQAF;AnD7Fo5JSWzF?U3CPaNRl`z7YN_Se`ugpGZ<=J|_sB3wrGIY}zc=xR~V3aD3 zSwX$o&sd>^hAjVu|JlD$$?PC?TgpCb3Dv}zi}r3W45MYaL0({WN=AXL_utG#(2y^s z#jyGL#a|(vs6;~l@Cl)LuxD2^-Ox+%GUl58Yv*@gi1H|Ra{bw~HGK5D8sZyy@4iG5cRYOWmWN;hB3}lF?AgA?$ z$AezrRJK{A^*VAvE8DN1F5P=fHwOM_OZ#ejSc6_*jTOjHCRkQjDWr}1G2s`cI}xu> zSH4EC!zE2Xr$4HLg}iFVLvY3`W;oIW^AGYGed{__6VoRtjvk_ArjG6`w1r%^>-beo zt}i)D(_kamSb=en|Ao zF1y%GCu2e8u;shpL)uu_-g`s0z2 zxO0Kmp{QJ2QMC2hJqw8N72}oTe9>U4k?@4W&HZB~4b#012Lmeqntb_0D(nGVG=_^$ z$6|cVr8nPtgzfpT(A z;OP|80$ft=ZJwbmkS4tD94fv{Q9n8$;ZvATfFcL+VEFq;7tRHXK*x+s<(9+|`p73; zy5;<|g})Y0XvQ|3G+)fTE_-P9F(Ar1Exi$8ee)0&fhv|IAy8OXMbDz*JLHFg`r(a= zI5sad_an=Sp;_Ufpt7ws9Vn&P?{@zH{7-K=Mi%%dEk}B~RlW`>EdzE-c#a(gc9cy$ zBgy$=CJew+(RszMKA5W_(CBtj5>(xPEjHq}X5j)EVjh1vip=2SZ$c^GQeZK~_#}CVLKk0S{uir&l?}_QN3UB->v(m$ zQ^MkGvl!a4V@1>OW_l0BU%86q{eZnI;1Khix$k~OTW|gc9;bVp9P+v;Deqc^ZptvP z$}KT5h2u$fj|IkQg9xZSujG`D!eRWN9JVAqemjw%f*6O)FmnOUha$9BgRM^6Ng`g~ z0=oDcpDf-)k~fo#5(sKl@+^ns_i;>(nKjlQCCop^TmLEz5cW6VNmBTuh0l$5>}>$I z)UK|%V_!$mH{NGxwxBd2--`5zy+;?eBTDeHsUq^Ga=wbqerf?i;IiB1dX4G{|QUTz-5aBd5cE^f!yKXUhNK z8uCSgjLf&f)uK8>7wfdd!0gtd)Mf4r07XXn~g7fIP<5jV^& zioz|notAi-w3Q`W)Hlj)g|~#5ObDHVNfguWblkZP)3*9wRRLRLc4k81=_}$VDvL$xYn!9077m8ys=r3#jvk>vN3xD4$k>*Yy_=RkJU2;GK+RJsnVNP zxp^W_4-X$f7a7`_%iFZd7sx`J95p$e z4XUYyHS|-)a;MAnSlum@wX|JAwH!N5N1AvKzyG70$!w0+|9KXq)P8nI4vxM^mbCo3 z;tR0U%v0PQYnbF?f_gB6#T&Cqzcj3$V_WB?Bzw&eF$zLA$-e6@lp)EcCF@vv*>TR= zl@$C|z`h?#BKjxqQ`Xx5769SRtH1joA@wlfIp%H*e9X8Xj^z(%`rXdmH!HvKT@CPA za<*)El^bd?GD@op+xGD_Aje%IFY1UT%71@#W1C*Uhd|n$c{%aZ4cK%6bo<8V<1l{U zb&rjDA#<-_!yeV7Hv3AAv3u(2)2zA?zYaa`FL}o1u)~0KYf8xeY7V<~h1TX+Ku8A# zes^weroggBFH940UexRT+L%xkC@x48tv6U~jtAv@}F*t)aZU{I9*e#Ba8VqaY(-7RerM?oegQ zGS!VE5{ccI2H?7F(6grGGIw3{VlrXn|lp4 ztRKEDI(K$|FZ?AQdKPqu#-z`N4ho-pcM|`SOcF^Vuq-n3zUU!X)=YjX4obJ!K3GiRCZU?k*z? zX$r&J80UhbhN%{#ST5`&9Zc_^QWgd0)$2MK3E5T zn<@BwiB-xAP%k?J2e%*2uu@eFe)8Y1by=bSN9(zA{@J(pHN1`qEoDBKOU)$IMWCi2 zUCL0sKi&k0!UHuXK+`%-4PA8Kgs}ikCi@$g&6Y3my4S@cY?UqIu+F0^7C6NDzo7}u ze}Pdwo%n=&!ROeSKSkpfz-s>=QH9(27oxw$CB81*y}Ghy=qj*g=uR&;(^WOSwVmt{ zd(I=Egf;`>^7oL8tRWUq9{&}u+y4dc!1sC4|I#18@n?s>be*3T+N1X1y#7miIrTbqI*K|Up~uFQTvwlr;+GftDA^O`)? zJ3WTFzKGlnZelRrdsX~0`=>VEJ6P(>lJBhXlBdu1TJ-QPPr5q_!Gbm#hm58k;@$o> zJU?n^Z4Oyp{IJ>_;|w?i?R%6CvhHjFD#m3-V+Xo%)>gqUr18ppO|A&;1gcT_G9%y* zl66)|b2Ja1&9O!dvk+GR4@F6ZVYvUy0*aBH?e&`a$ z;5@hGHFY1Vk2V{OSvSSEUV|oy`5RU<$6xkcHPk-_%LRow3e|Ca_~K;IgGortb#(m6*v6ZLeH82%KaOYjNr}_j_UHm`RU(mseCf zDP!PJvJk;Ak&f*iX<2N3;wwH%O3Y^YiP{=>#a5*}l)_^aMxFjus+0>El?HXSw*}DdZDtM|Zx?GCyN~RvPU*zes&=!Dw#M$rnJf&_ z^|2E^I(mqV!-8jdFlA>SdGNSWE17^gSUG*>_1z(CqexT8gaFn;H)Kyjj0n9(x4iMT z*$!YD49z?BZ9z1;H(vI=0ju&2G&p*cuZ9n$V&8({3HwW?kB<%C#D?#Cj0XlwNv9(EvKe>_ z!B=~{-Eo^WO>Q=raWxw1NDZr>Z)xHgtO~Rfhpd_5TyNAxq)cN{!4IBla^nro68BSH z7Dka+t>6=r%|72m?(#^i>v%KU6INyM8;~a74UIV+fL>w0?sCDtB#Ox>G( z8@ij}(6(P|c}jGiK?V_?guAoN8j@OX$~H(XZ~r=UtBW)CN|{h;u-psphjVJ3KES$` zKK_hu-f{}JBMKgV`v>DKv=)7ATAg$~v-Xo)Kpo?*BUO$H!f{QtiNOzBzMi~N#Er6y zC+cQn5QsTeIV&LNl5=DzP@ih^>0nb*OWnp^;GuxU)Ev`-4_GZxBDi|3n=u&06P>oP zu(x09*CrsRU*6KyV-(EZrrt4!h4+@bIRsZ(8<50bfkNW+6Gp8XuEw9jEf~7?gti~5 zPSv>04aT5KV%(Pc?*N*#qI8HAG@}KY8Z6d@CSG;dDj4Ff={2%6)rNQu*b50m9&e#mg9nA57P9&^gy4$q%wi8SQfJ<97Ou`nVe#`)hCI zzmpe-o5DhJ{mfYzpld|(iL^K+Ci$Q&qKw2U-A5)F@CU2%V2n$c8YbxgnT0R_B z7H>*ciqbBk&yuhC(vg!a(A#C{|D=PS@N{XwJ0*?BVZ#Hkrhuifu-v-tv?AA@KLYKdqEq0MJl zpE&5{p0M_G@!YozqWoaS+^M=Ts$6Ge&})MxW&+{AhD>JR1TeV$l#;Ssj)rEku${Y9 zasJTMsM7cq!0~kjaq!4LS)%C~BZ3HH2xuAKEGcFux4ND1+3l<~t0fqIPgcE}j^EBK zHcz8A;pT?C7JE6<-Q->INCRlAWD3Lpi4>QDA_g)@okmY}z%K7e6Ze_pYJ!AVAD% znGcpTzI9j5-Sr4~9iLRUGqwho#kUt$Q5~cg-(%GZwyx@V*`VBH9D_bYJGXpvYa57sQFXuQ5PG%@zi+|{k-T5{!2ss4cmN5zmkIVgOrXtsq$CG>3wIoAbK@^*v9Fq z*N6m9D?BAjE}6kddaoeOlfN1zHvH3MZm@Wk709}#R2fu$7bIqLqw76eKbD$|vo*BR z$Q_`j`MvO50=WvZdVR6Z!1ua2f(=94U2__8N;kg$25 zWw4+{dviwS$9moK|C%#m$f5QiW5lj<7#HuKg%7Tv+GY&6avi!pIxZolrA#Y0ER?## zuNp`G4?&l*(>%|(H{j_TovAnVQaZOiF#}1;EBKReEp0rr0ud@Bt&ve{%17$s_tN;6 z0rDuH9`guA2hD0vI7o%JFa0-Q<`LXG*YXLmG4C=3hwD}d{!<@P2v{|I2oi^7RnalF zhf+|ZsxGq>I8mZTu1sxVZc9}ug#H!6xD4y2iXrI(9dt0ZO+|o!YJ6GJZ-<|b z7*{<9%eHK9v}Bd{Sw)P-&g>dM)3nK*4CrL-^M<;|NWFuEl0+(4!Yx-pRn1bCaXa+; zrOpt3($R65adV?)M$_*x_`F+;?c8qR(Zuug*^1{qbS>Z>eL1iy-uLAqqh^&im2rI9 zS53_5ksK~x0bt;~2$NE{lK%XY6WhhV6=(Hz z+Z7lvt-~O&HgEgKNf&!kWzo%+XOy49ch`i^raTAKW6v!8d`>|y*h!hq9sP0<%Ilzc zymw!EeWH-dp-NjFz}YkKIhz(ko@d98a$-6c17nST<(&e|Rh)5V;kea(OAGhVEsIE< zy}G0JN#Dz@PSnoTT46q3O{?RzB4l4-P|)hs&afNjksihI{hf=u3l@st30xW`Kx zevu_`8~$)T`G%xkP;S>cDoAoFq#Dij5ziS{Spm=?fkS z{^Y(h7-V&*mK46rTIRh3{ZZ=+zc*#r;-nq;?z?o7#HA8`NZ!2r37}U(o8}WQM=jHu zy#9C*AvS2fxO3x?`FU(^1tJjC!O=kD2P&~o_~ixkrT6YqF)J9C)lg_Km5rKtBR=*^ zWiOVJp$1vKyL+p3+&QO|t8(exG7JA1)^>0tpI~PSD*4W&6aw7iGgsW|UsyEVR2Gt$ zVj2C?!B&_!)~GH};_2o0cH;B#&#%5SEBdGN730f;S<9}GiciS-2{&ZC$mY@HHBr2G zh3k0f2btZO5;>>sO-eAxJ&4sb_pV#dUKPhKo>!BLK$R-op6 zc?rE-WlDax3S^{6SvCFScR!x9lULj6<3LJql3UR{i?_yLru7w=|8(KGTzz+O select the hyperlinked software name (like Visual Studio 2017) in the section called "Related component" in the flyout. [Learn more about software pages](tvm-software-inventory.md#software-pages) -A full page will appear with all the details of a specific software, including an event timeline tab. From there you can view all the events related to that software, along with security recommendations, discovered vulnerabilities, installed machines, and version distribution. +A full page will appear with all the details of a specific software. Mouse over the graph to see the timeline of events for that specific software. + +![Software page with an Event timeline graph](images/tvm-event-timeline-software.png) + + You can also navigate to the event timeline tab to view all the events related to that software, along with security recommendations, discovered vulnerabilities, installed machines, and version distribution. ![Software page with an Event timeline tab](images/tvm-event-timeline-software-pages.png) From 3ff2006fe7bf8f9167f73f05f3df68aac44e6e16 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 28 Jul 2020 15:09:10 -0700 Subject: [PATCH 450/589] adding new topic re: troubleshooting WDSI --- .../portal-submission-troubleshooting.md | 75 +++++++++++++++++++ 1 file changed, 75 insertions(+) create mode 100644 windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md diff --git a/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md b/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md new file mode 100644 index 0000000000..ca71a4785c --- /dev/null +++ b/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md @@ -0,0 +1,75 @@ +--- +title: Troubleshoot MSI portal errors caused by admin block +description: Troubleshoot MSI portal errors +ms.reviewer: +keywords: security, sample submission help, malware file, virus file, trojan file, submit, send to Microsoft, submit a sample, virus, trojan, worm, undetected, doesn’t detect, email microsoft, email malware, I think this is malware, I think it's a virus, where can I send a virus, is this a virus, MSE, doesn’t detect, no signature, no detection, suspect file, MMPC, Microsoft Malware Protection Center, researchers, analyst, WDSI, security intelligence +ms.prod: w10 +ms.mktglfcycl: secure +ms.sitesec: library +ms.localizationpriority: medium +ms.author: dansimp +author: dansimp +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: article +search.appverid: met150 +--- + +# Resolving malware submission errors caused by Administrator block +In some instances, an administrator block might cause submission issues when you try to submit a potentially infected file to the [Microsoft Security intelligence website](https://www.microsoft.com/wdsi) for analysis. The following process shows how to resolve this. + +## Review your settings +Open your Azure [Enterprise application settings](https://portal.azure.com/#blade/Microsoft_AAD_IAM/StartboardApplicationsMenuBlade/UserSettings/menuId/). Under **Enterprise Applications** > **Users can consent to apps accessing company data on their behalf**, check whether Yes or No is selected. + +- If this is set to **No**, an AAD administrator for the customer tenant will need to provide consent for the organization. Depending on the configuration with AAD, users might be able to submit a request right from the same dialog box. If there’s no option to ask for admin consent, users need to request for these permissions to be added to their AAD admin. Go to the following section for more information. + +- It this is set to **Yes**, ensure the Windows Defender Security Intelligence app setting **Enabled for users to sign-in?** is set to **Yes** [in Azure](https://portal.azure.com/#blade/Microsoft_AAD_IAM/ManagedAppMenuBlade/Properties/appId/f0cf43e5-8a9b-451c-b2d5-7285c785684d/objectId/4a918a14-4069-4108-9b7d-76486212d75d). If this is set to **No** you'll need to request an AAD admin enable it. +  +## Implement Required Enterprise Application permissions +This process requires a global or application admin in the tenant. + 1. Open [Enterprise Application settings](https://portal.azure.com/#blade/Microsoft_AAD_IAM/ManagedAppMenuBlade/Permissions/appId/f0cf43e5-8a9b-451c-b2d5-7285c785684d/objectId/4a918a14-4069-4108-9b7d-76486212d75d). + 2. Click **Grant admin consent for organization**. + 3. If you're able to do so, Review the API permissions required for this application. This should be exactly the same as in the following image. Provide consent for the tenant. + +![grant consent image](images/msi-grant-admin-consent.jpg) + + 4. If the administrator receives an error while attempting to provide consent manually, try either [Option 1](#Option-1:-Approve-Required-Enterprise-Application-permissions-by-user-request) or [Option 2](#Option-2:-Provide-admin-consent-by-authenticating-to-the-application-as-an-admin) as possible workarounds. +  +## Option 1: Approve Required Enterprise Application permissions by user request +> [!Note] +> This is currently a preview feature. + +Azure Active Directory admins will need to allow for users to request admin consent to apps. Verify the setting is configured to **Yes** in [Enterprise applications](https://portal.azure.com/#blade/Microsoft_AAD_IAM/StartboardApplicationsMenuBlade/UserSettings/menuId/). + +More information is available in [Configure Admin consent workflow](https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-admin-consent-workflow). + +Once this setting is verified, users can go through the enterprise customer sign-in at [Microsoft security intelligence](https://www.microsoft.com/en-us/wdsi/filesubmission), and submit a request for admin consent, including justification. + +Admin will be able to review and approve the application permissions [Azure admin consent requests](https://portal.azure.com/#blade/Microsoft_AAD_IAM/StartboardApplicationsMenuBlade/AccessRequests/menuId/). + +After providing consent, all users in the tenant will be able to use the application. +  +## Option 2: Provide admin consent by authenticating the application as an admin +This process requires that global admins go through the Enterprise customer sign-in flow at [Microsoft security intelligence](https://www.microsoft.com/en-us/wdsi/filesubmission). +Then, admins review the permissions and make sure to select **Consent on behalf of your organization**, and click **Accept**. + +All users in the tenant will now be able to use this application. + +If neither of these options resolve the issue, try the following steps (as an admin): + +1. Remove previous configurations for the application. Go to [Enterprise applications](https://portal.azure.com/#blade/Microsoft_AAD_IAM/ManagedAppMenuBlade/Properties/appId/f0cf43e5-8a9b-451c-b2d5-7285c785684d/objectId/982e94b2-fea9-4d1f-9fca-318cda92f90b) +and click **delete**. + +2. Capture TenantID from [Properties](https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Properties). + +3. Replace {tenant-id} with the specific tenant that needs to grant consent to this application in the URL below. Copy this URL into browser. The rest of the parameters are already completed. +``https://login.microsoftonline.com/{tenant-id}/v2.0/adminconsent?client_id=f0cf43e5-8a9b-451c-b2d5-7285c785684d&state=12345&redirect_uri=https%3a%2f%2fwww.microsoft.com%2fen-us%2fwdsi%2ffilesubmission&scope=openid+profile+email+offline_access`` + +4. Review the permissions required by the application, and then click **Accept**. + +5. Confirm the permissions are applied in the [Azure portal](https://portal.azure.com/#blade/Microsoft_AAD_IAM/ManagedAppMenuBlade/Permissions/appId/f0cf43e5-8a9b-451c-b2d5-7285c785684d/objectId/ce60a464-5fca-4819-8423-bcb46796b051). + +4. Sign in to [Microsoft security intelligence](https://www.microsoft.com/en-us/wdsi/filesubmission) as an enterprise user with a non-admin account to see if you have access. + + If the warning is not resolved after following these troubleshooting steps, call Microsoft support. From 22c220b3b34587668a3a39f6e0fe3571e49749d1 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 28 Jul 2020 15:13:45 -0700 Subject: [PATCH 451/589] Add files via upload adding images --- .../msi-contoso-approval-required.png | Bin 0 -> 57095 bytes .../msi-enterprise-app-user-setting.jpg | Bin 0 -> 71817 bytes .../intelligence/msi-grant-admin-consent.jpg | Bin 0 -> 37704 bytes ...-permission-requested-your-organization.png | Bin 0 -> 37877 bytes .../msi-microsoft-permission-required.jpg | Bin 0 -> 72503 bytes .../intelligence/msi-permissions.jpg | Bin 0 -> 173449 bytes .../intelligence/msi-properties.png | Bin 0 -> 45446 bytes 7 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/intelligence/msi-contoso-approval-required.png create mode 100644 windows/security/threat-protection/intelligence/msi-enterprise-app-user-setting.jpg create mode 100644 windows/security/threat-protection/intelligence/msi-grant-admin-consent.jpg create mode 100644 windows/security/threat-protection/intelligence/msi-microsoft-permission-requested-your-organization.png create mode 100644 windows/security/threat-protection/intelligence/msi-microsoft-permission-required.jpg create mode 100644 windows/security/threat-protection/intelligence/msi-permissions.jpg create mode 100644 windows/security/threat-protection/intelligence/msi-properties.png diff --git a/windows/security/threat-protection/intelligence/msi-contoso-approval-required.png b/windows/security/threat-protection/intelligence/msi-contoso-approval-required.png new file mode 100644 index 0000000000000000000000000000000000000000..90bc4428f990330c20f2f160dffc58d11420df4e GIT binary patch literal 57095 zcmYIv1yqyo`}b%h1cPoFf`EWDQbSY*NJw|5w8Tb(2#C}i(y0<6C0&CdJ(^J>UBaYC z=ice}_n!ZA&d$yg=YH;b?)wwh6{D@GLQTO;0RRA~Rl!en00072{O_8a6o2K`vrBvY zAAz@y$`e5O5Gw|MLhPudp#%U_CQ@Enli<&9c!G_+0f3vGe}4qY0ykLzfcY%dr%HNI zi>)~_gq_40ZhsDWE^z$5g^RqwPtfQq`l6js-O|eW%{%gY$MdJtU21n+jc7@f^oX4a zb@ETYTgkC~$IkE;E(+1&?RtgE$;D9yvInk|4xb}Wac6aq!=DNU(Gt9ykRUhZ z=UcM$ZXz}9ZGwWh5DPcDP9uhd#I}1`^WOuv&uaCu6dEEBETtTs$)2R0xwr$rM5W13S^W7Z@j4cQO$M0qGp z^}^E{E&xV?q4qj%cVc&5q-ntxS^26Zxul4bVKcwj2zljFlDK(d$!1V-w6oyi`_uaB zxTI9?#bn@%Is1g*=dY?|>lA28#-=VTcPm>Yr7o%(=a9Bd>k)k(Y(rUsX!=QyTS7pHG=7d+JcXN5G`P}0oex&7|+e5Bpwg3Hl$i}lG&s72XLNP~FX z_~WyUzy~G1*M~FpkQvu4|Ky{K(7H+CGVbqOVRkLBAkChft0vd|>B{v(qiN)UvEX9b z!*=VV6KB(m!yUi5yu<4G;LQbP zSHFG38()?UW}<4(f2zFlrU>-I4Mq+=3jN(3u%ctxA!Dpi*XGL(k^wx?E*Y$Iox@?* zbyL)m*pWtcU9!0yKkppiv^IiLb|)O&w1WKS6+?E0Rj0Tz?YjVd=#h3?bBG*BVA=8h~tRYS+Ol(1gHs*2ZZ9=iBr3_4M= zQ0bg;xVrU{nNURGu~Qt9AtRX@Qx3KzPRW3;$-KxWt6Hy#9hdN9Z98JXO`4(4GoPIQxdqGYNF|2 zakIP}aAAZ4j&plarBqd1?0or(54brc8R*If{83qj-LrRWUI*ez{@n|50l*uZ&6~#Q zh?^_k`jwtsWO1dppl~71QFhJEbK~RUArhV|4w5j|q5DME{-IS>7GO!OzollC1VWlY zw;9P?v6S=ZGj^+ih32^(R}%PD>A#W*o#}yMZIub5xC;2DBgxx;jkserH+8#t&TVchVS?RmH`F`IPL6P#bNXL3Ou-H;jF|(+ zmp^9yE9=vUHrQ_~(tRG`n<9@ZI}06QJ)QgeaE-Q;2#_pMbrQz9$6vA#On_>Fxz24D z78dSTJP^>-O3FF^rsOGj-2Ovb(28|-ZifgwDTl(}zLEbxz(EUJtPhdx@M?RkElxiz z%Rc?D$nQ?QX+Y_yqc@dxgzcpN9xi_%u)1@s`x+v<<2nT^E!%Owm}7wb|JGZ*z)qxl z1asbq6AqdQn+UT@x*&i{fF&g)G&p^^j5&>zDs$;Ps%-JKV+LksWZZ}S`^#|n@~`y5 zX{T~drpf=kn-@Zy zcy=bBB`n;?lmR~dU-iN$fVq?5`IX%a_JF_LaP85Sv}Lh=9xQ8aE`~D$A@$3yK0%)p0?-LYmlOotoeTvK#%evP%(?^tc40SC%=8Af;5bs$EZ+Kb|9fnm>eIZ9-^?4Go;8pg}fd+L#yC+ zeqN3vuf;OS?FNNHt~0Mjl}Qq!Szm*j&i|Cin&QWyH40S45Z7UB399lUMQLa?JYWl% zFvpmNDhL$J2&rL?V-MCNAI$k`I1YbmTAmNh*UAl437GLH*T`fGwS9aXbup&QcF#Nz zr-(KbY7#5EoY_S8^_Zn998AfglTWU`T&nOcoP&Oyjc1OvuHzoc|CIS%7k!<4JhXqd zG8n3bY~5)k+;KZlkagVki&k8K*PV~WJLigdsMFvs6fyIm*Roez85igp#d%nY3^t?Y z;DJ=C2re1-C3JOoVcqi*S9gi)8E%xH`_Ms?9eSdS;r5@YQn5^$JfAyq#?69ej~7dE zjz!TNA=1Go%?lcaW?s)6)pf@@r=C!&+QMDfLmeNl|8mhiAMJZ^WtIIgq`_T{tOAa% z+}+%gF>;){whBO58|JGnw1~7^G8h&zT&=!899I_BSfAauYT77|M&DL!uDYy;UVBvL zuJ0~1iaZSXxrRZ=k~MwJ%nj1bI6OKS%lEKMYYpBvx1aHc$YCyn=O-@?c+pJY} zwknE2^Ciu@t<8*JcIaX_rca<^>ryQ56gi2!mH=4v%=)iqV{&nqj%RKc3)jc>hbKsy z;0zFCz7;a(Yj`$4E>5q<|V5U0SPxrVT3a?k#8?I432Jmh} zl+FW=fmc1smpb#qb<|?3P6u0D3X&0SXoxUBtYwn}r2Jq#sc=*pG zmLrO?94EFu{93;bz2=SBE5AKi$2<4Yy>IH3Ins~5r`RO8d$3z`V(I>n zR$ekN$w&X@MJwWJl2vQux*|eIQ)K}fDs%jswY!e@Cg?&pw54Usl5!;B@t?1UgB~Gb zY(67On1+=E^@WT1lcu?CGLE3{mmV|qtw&`(r%TZgYv|>EPm$skMho+fI|2N+^TudG zPdj{8;-w006J+jhBXQRlmW9*jk9QFVeXTxY8dAyLVc++BHa(ERPFWcl^fiSDZe=V} z#WqcQf=0;b%sL5tI_WYuweTubT$0n@l5~)b>27HM;&~wH(9NQ`{5*e)fZcCGo}`8VHS%csf(Yds5*qBNuC{r(bbgq&#dCc$L?&xWDlVox*6KKW z3_8b>F!e1oa6U|J=~$7?%hx>!9jfm_NkQtUHnLb#wspOKw%Dfium`%H|1m_Gjxp`;u^zqKU0n`SO@ zPU^*v(l$k@+`%jy5Zi!*mr{jD3twY3#mo%MNdz9+Zad)R$c z2@J{taYws{zZcAsa&F@Lc&gKcFfj3{rak5eqq`SGW|!Tr34g<=E;+*v?y z1|Px0g+exl5IEbL2w)j(iQP6oU-q)LBKTo;@bPr^L!y~5YGCjJWFdGg-7&|Q6EZA+ za#t%U^%Va-@?I@7Ao)fpvjhGVV+1VE)Xoy237q^{$m^quuIkc){_V>a^NYellCmGL z0g<55s$^<_7dw|sUDHhHu=!B4nBY#p>B97NGP^Wx@1v07{eli}sS5;0JUP5*Hbcp~ z?U^&i(meZmA_Aqp8^R}leUV!D5GT$EuV43mm|=Z-xux-^+{3GH&^~MLPaucTN@BNQ zz4Te(VJC-0ih?K$cs^+b=@WHu=Rjtb^;_))Q)6s40raQDNy-AQ_vOXt#7SYY*y;V? zmCKr|2le?24z#jUj^4H}H-F8tLBSnV_$m!QD)bJ_#={HDj9U_^;7(-H?BN8Ncft5vl@6 zrcAm;kq6nk`3J*_$m)V(XCM5!b@(fZxbHgw=g=FwBTE7sMHXUImnblCBkNThCXquE zvqhxy*yiGvGWHu)(YnJ=d6|emhck}8{<}kqEsBu!IV*pQV@Bb|^`#-j2W-B|JCcsl z_}$K>e|J!nHaCOI-+q2QoNADV2FZV=6*Z0@X6fLqEn{2H7Fd3|`+3ks`(e`7qo}M4 z-!p`k%qrSvtpx|B(VJhSo?h{>UAMl!$L2x%U6|{OU18)Ejr$?~lR?ZJ-CrQ6I|dTLL(lpx-$$FM zry=_Lg^`GV9U$(xa$os2aWoWON@&~C0);EPvMOQUY8Cou9=j%_$=HC=Dx$r!8%Ef5 z!@|UDZ5YucZM!dqj*xZlGZrJC=Jbp8dM- z!J6#ZPSgt!nz3+4ssU?)+r?d1G$Xxb8HNwS$=La3GBTd4dq)8`DN*b+qONb0(QKAyGN~E!}<65WJJkINi3uZeGI9Z~_J7>sep}%i^ibdydb+sIQbwS^nqLzE39B5D5 zsu1XH=z|yxb@X`MpXB~xcwoL@T~fJc&L=d${a6j6;A;R$4GCD2$CRm9WZ&No^xTf8W3o7VK0%QZaWC0p_|l?9s+6{c-Qf_JC9l%dBT%vx9Kc!y%KAK#`_L9kx6x za5?o6-G|yVPfdzmkTQ3S@3r4REqmq%gGQk>B#m?nxvqLUA+T(`6qWr zfaV@cAqj+e>>;o}P zZ6aOTa;4{7$hwd8Ot&G*W95a(?QlQHt_@W~{^UP7x~Yn(5A?fs`U~(2Q~;{lStNbs zzFg_@gOyY$F=Q&5N2So`l2@l`EA6A^MZkI@o)Q%r2i)bH-sgrPZz9xd!{#=xHVVO>{(q#c@Rk!f&~lu> z?re*|mU`q9tmasm>?29a{}>B1g({>$3GFBh6cCu(oDP69!EqN@DwL(K=EV44x`SV~ z*+BHP-HvW-!tlXca5>a}9AQ z{v(NkbYKOsKzK{yDKXWGSnKec{L~f!zT<26e_{ZDnHcpeNl+wC$d9DwyU^XhGD?&^ zIv;0#ZyUGruS)wRLO@G20g$n^#&$`jyY3uC*gfz0d7<8!1)C9Bd>hO91^pqFItI_Bn%ca9m~x0~WNk9B9_R+0+jD*1qrui6?KUDEiQ*OT# zo>LLL?P71fHBu3BRC3rQ9P-HgHHs(u;e+gubIh9D@rk_8y#IPZ@X4Ii)o&@}1LWG( z4>At3o#x#gS7+u5=CD;XQI1`>ojpOf z5NiqUIWejy@gexlK(xZ)C!f)048C;(x7#LSF^Ny>=lo31@oT7FE72XOQ5bG!;o8sm zyW(V#pGE9t=x*SGI`V4UW2~}=-IRU_cUYuo-p*Jo)N+U>T;#x=_F$57FYTI6mt&h} zko)l-AD>Pd)jh5bo^h+s-VDk$ox{_Y z0s>ee$)`;BrebkM=BybHq&yx(dS!=ZbbpERsqfIWBS~nQo_-|^r{g5#*7hr_j>otw zh8#A}nD`{0;8!YJ0w$V`w|6x8*cpsQ%j)Md<_~gC^4a`;e%d5454}2ClMajN^X*}S z{p0Bl(+K0lfD)|%$+ zyfgLgf#L^YxsdhbYuITxLj1vSd9Enm_0f@AhGGU@+#|{X3Rl%P%ijb0DWR%aO<{6J z4R? z-5-Wbm$<*8$4~}Z-_Sf+;iPex&hzoj4WH()+k8-SK*{F^r(slavO5j7F~b&t+sS_T zX@O^LWCe*qtK0?XX9ar270o+M%M#~@ra^6_8(*pjYi;Xi+?#JRu*aY7ZTWO4MW}3? z?rG~^1GvBUCT-U*w01K2=)aDC;lo9sJ*&5epB^h~X1P~ej{S{bc0xviQbeh|qkl1a z>a_)i6kIo~aPcu1gl*Xk_K-<*SvMiLYxR!1V){DMtD z%^TV68eNQaSbkL=A}lr76+*SE9n$E|tme;oH6%dumZr2k$!9R_(U(VTI)1Nm zuHwtR@oZ(Ywb*XmS+|P~6-ASF?x~l*x(t=CuTPLjGhzEqnT+2Rq@2z#ZUeCl9}I7~UcAN%3-thDT9J{|f_quI-mVfpRR}*Mg~5 z^zEtKtWZ2R+B)VmV-TUa+JPVi{L5Yvm{T){1EJ5(2(A2ytNJ3l6Sm0Qv3#p|(fUuN zDRsl43{6aGrPWmb`lt$rd0n%?OHJtTev9+9^LO6#C8^#({APPO-2E8nPwRejoSmI> zkF>q{WthI*oM*CT7q9kma#uV#O!tP*g2G-n%}0uLM(st3(?mTz5%eHMc)t4w?{8aj zqPYlmuhn?MPinMnYxd-+dhA|XY|VPcfE!lfkBDLX_79hcK2p5kl=c2SfHk+D$MYL? zk~xP=H*|(e`7}uoAAlDbhHmuNlCz~P=1EjyM9ek7RDe`gd#ZArw42F6i*(VT7)PE3 zfJ`@tZCIDY7DLkzW|cMOdq>fK*Mv|U(A^4b&D$}7$;EfWhZJ#_x9{(x3G@vO5uiuz z@LN{lg^#8iNQWL=*D^49O@gCWQ>B{>h`$Y$2sT`g?uA3e??#c|bJsY~>R6Z~Mct%5 z*hR(q)kVhpg0Y_g0&-N5n&G76^AyD|_?zEX5Ozw#`Z#hxV0(&UCyJ83q7rqAR>B!d zu^Ii_$!cpvmg`ILm?!&>d(V7Vz+FC6n5J(*qvkjF?`5$x=r!z(K;?(-EZ$$g{@J5o zAooB7zyR}O-(OMs=E=`ZPF|uZ?4c7B{w?Jy-UW+&BFDjAf60*AtGiF4Ve5AcxdyOL zbATerdbvDDU|^cG{i+);3Y5>4jBSigw=Nainwdv*BrtaE%6rt z63nxOXC>FLEhvlxPRB@;;o1pf?Sj}P-?2uLuKn7VI4{0Z;N z`%4zT(ei)qb84oyq^x-Jr&ZuEffE= z(e2v7TCV*SFTz9@-rX)#<6692iYAh%6wBn~Ti`Zjgp#6;l#Yq;ZW#Uj_?ZPb5H!4^ zLm+IGLbkkd-rwJ#$}6~ji)KB!KBPHe$ZacaRf&oV5E`f4R5%Kj8dTIUF2IwJ75Qlw z);-ohS6U!JWo|qd82-lDtdG}2N1ekW`;BER!<`%gzE_p;me1@Bl;}pn?i6PsL?T(8 z{2#=Tb*fX!7}$Fy0pdEUZ%iA`zAL)5CmKRhxO|hmosNvQlqbmf{f^*pY!TP?lE%SP zB`#uxWj44bT^g0{*Zc$;;dsDkU4!?FAs!lW5o}|MPjAm&T8!c3rWeu6d`pvT(*PUA z8EC^OTQb8nk^bByqe11v;}1pXb;XO$IkzQpmXDotp|wR$p=Yk-_sd({I5!&J@uEyI z<+<~UrDYApKlXic!5Cq_@Kq25ywicAU?XB9@FuVT@CU6AD{o%b5u4$SC>nniF^b?u?f4v94J>ZQM$vjr0O)ljRXY5F# z3z|7{y9nbo22DS* z+KODg^RM{sdQxS0y)>ZH2JeJ%xcmd_#OROubpx=V6#!?yts)VKl?y04ZyWI!#}iM` zf+wv?sezPoF5r}&F#gR*yG{4MUF%H;7J_pzNx7aAROKE;+7a;V-sWQgs+j&379X}9 zFj1Ja&lw7sN2!?J-;uz5x#2gX=c~azfl#jcH&A2-yDV<$9ixIn4u_InTkV`lKdy&y zms;r$gG&4Jn*}NmuT9(=*P>qZUO1ub8t}NvFQDIaUeqZ#y|8c^GkOG!24U%JN#PFZ zA$__zaBhX-7f7T?Z|Rg)06M7;O<-#daJWGspgUPzpqTMG;b_Vd87A#u8wvT_g(Y9Cgb3471 z{=yu~^&)?2omjbdT@x=i=tSN(OQQt(*YOi)Fy3KdE~G~eROM5z;rR$(WmPmo%f>T% zW6fB_@O+YO7h~crY7eOLw7Y)$grTLp{HF1+nm~Djjj@h6{f8>h*ymUw69d&6k#W4F zYGqlIZ%8I>WF}#crX?ngxaAMhhXv0t=im+sfzpw`gN`Tq5`3FDQvU?= z{+T9QxGfPJ!SQ`be$NEJ-(B!0`L|&DWBb03qF-_4kd~6t2W~Q>Qmy;(1^2q&>>2P7 z-@e$c>KC$aG*pMZX~T<&mpd7~JD=a|z}1C}`9+{%oMFZmbcjN&TnhkzbkWgLfc5rw zX<=wI;qm0x1E3Cb0>Wx&-hqqu0Bi$L|1fOE6ryl;k1$PQ%B;Fg zIK|gD6^bcH6`~HC;3z9`*=y{MawZiQt9@{ z{C)z&$1wfw?>jkrZ)^JaOFm|5rMx4N3JV&`oY$-4@cU_P|G;A32+wqzrtZElFRE|Z zc5}vEod~at;HjXqGt9u$trow`-oi^|1fGDnBqEqKceLGg+#?jPCKDdrIJ61VU+~8M zE)m2l$fXV8x4`??Ho;C+HD81MMLUxY1E=j%w}mFu0KH#`Zd8qzzVC1TCeP<05z#kk z>LK5&UK1rslL~p7w9qgY3paMbEXXTFwm+`Ip@aik?G*QoY3$Ui7y*7b;Vtgfw z6hhqmuBi)o(Q|bUKl1m3!ax6y{+8aA&+1$052}r;4JW2y5Q!_mD98$fOt?*`(eacI&$`N{W*~(L8u0p|(}IX~gOr%ypJr5mYdnP1XwY z#yoa$x@X~~Awk>rDh*_4F+YV)+d$VpLKQZS(t-`M!CB^;Bb6zwt7cKkUEUA?!{L*rdEnwpl3IG1P zv02dTh2WEISEjK1ecc%)?W`a|X%JqRu@q2dkb6EXNjmb+RnYurp!Y!%Aq>}(L1oX^7IzJ@}%#Iho2IHf4-799#Jnw zm&ZUY>7}=?lM14qLVd$N2m1ALMSolvos$ePUWi;P!{{_IDRnQ!$-mL{f!sj&)XT4{ zSueUj%&C2(VRKi2{2>3~UtcfzZA=f?6 zz4CxjOyYV&vtDF{^j7#Dy{YR;B@|^wLa|PFMZsH{#E#C-sCTMzsdIu z;9}~akyE(<#ChpTdD+AzLtOYesJY`~YC<=ZIry#C*C--F@ETSMw1HBHgFvU=5Hf#F z3~yheo`j7@mUF4%oyp<%QpgDd)8tAkuQAS7K%bs9DdE{l_KVvzwkdMz)al-Mku+Yf zI&#%>GSZHuj|;}S#v;}9m9qeTl92wvOF5b9CsZADfHypw^nef@e}zQ?O)FYL-5vnj z_YF~nZD%b3_P)fB!!JV?#c{~}7yhOaKvWu2!+ssqOHPtqZ?24L--qL*p(j~(?P&93 zQ+D?;}R0t%lyeq78Z3mLF`l&`jwFbG*305utquW zc}F4{z}-sz6UQ-2H>FDQi&|sN)or@aj| zEYgm;Z|7t*dUclHeYP|H?b2P?R?CACarG#f0IunAaf_o~ITUkTOB*W@q<;N5H9Ro~ zk38?g3rnkfqgFG?0%N! zQTDPqcFkU6|H9DhC(1;D3m<>f+tf`fq3a;|sL`w6^2a9o_bH`iVS+h!|5ailFB(Nj zE=Fs-&*%c~u1oNh@7ZwZIr*OeuQa#)OaMH|Zm+ocq;iTd?LSfg>QH)(UG@gpV{8(w z!5J-uIZWL}OpZ1@3SymUnu8gFg%dX1$?2Y@X3|Ip_@gh0)1D!?i-lCFzyUw8+p1sc z&21dA{gb8aUogv6h)$%ZLk3vKJu;e9l*^~U2L&n9QD)6c4(1sw>1Pj8`Xq?pJP*^D zlK;eHW_H*AW`mQwqr1BTnH^xV2fvA%?sz!+tdOT#WJ-yQO)sRR_ji)Gb-9GKV2OxM zdPu)rdCS-rc@xpAj2LST9Tz5&J4BhLRn zyP^qP7iy;4;Y7#=k(o6OR&L9|^#`-PQvR-)E`oBt_RlkFdQC|I#tZqzt`k3yvD1^4l{Zz-@$%;{a}rv) zfmZwuLtA5Y*UBWu6M1zkpw9hO+(5ggHP&{@)T0IM2As3#|Cm8A8#k3=KT=?*t$)9o z(3qnKOUnNS({5Afl`NX_U{A67ZMbox@$P3U0#rZ@L4T)-q6*1q0evgC)qtEf4Ol8F=zzG^i)$gztSU`fJJX&=i=@=Kr|o@@P!n zieI@r_VTvJKE(X(C#ue;{Thj_q>3-*!?{4m5;$L1IS`ughcQ%cHEKuP{)p zbyKoqe0>5wn7-vm&1bblxuS0*OE&wpc-MEbP#Vs4k-YOetR zSlpr+Z#qp8ImKI5#{4SV7;R7$ySH~7MSPyoO+u3*y+5+uG zTZQh!EvBL&52(WgSO>*R!~Pxp+> z-t+cU$3~vefk+Y{d0jLkdvLwy=7N!;O;ZTbNaG*nKb|HSet=q;1k=4B_$^;dn^&^A zCW{w&7jH~bfG5>ez(jn~QoUhm(tr%_Ff!q2N1p6<1OKfrXsiLjSS5kwI;m(fJy@Ba zPa35-7i8g>rT&ZRmb9WY6)z?+s*Rd&K1U=BEa$I>pKa!Ur|+nY4G7zFc0(H^&WT}; z0`Np>9@2}0f!lI|w8Ri<(=ulGs78X2FyC|OcJ2G%vqk+r;i;LTD8rR;N>%FoU^7|& z^UQ_I!ndC)J+nlME}iYNl(pJJ`sit}WQwOs)0XW0y!J}$ooL2l6(cB z=hVz!0`8gn(wRNe#@PBkDN_*c4lxOi`vJAc2k$#CBNXGwhl?Rpcf~jLnf)iQ0&+p-uFk&Zpel=z(y08?C|=bz9!vkzqqKWR5&8RO z=(H{<|LIe?k8Br5Y8_KF@H~f15h_aBUgrk!n@yw3BLemh+XNE{KBfw91$2SqtA!9b z>fm{)K@JULw@h)2jK|>OCgAlxRa<$PBqE*+41dzpdoR`}^%aR+|9e7%cf6kiOGWt+ zqx_pu1UJHNkeT_@v{_Hc&)ox!>+4(V-z1T5f+W=H3GO~$`~LWz5rtOds{Ou`KfN!P z;V6`u^PX9<0KXvSccXWOEUyCEjuC{omo3L<3thJ5m?sk+N7q+wq{;ypdftfU#Z0LQ zl<7q=bfP?#r12No=!`N}o~w|r0-iPfxXD;x7=mZ^{`OerQXh?YqBr5&a)u%!*+-_A z&@bhb(7nzl-Ak-0SOp9=pkIi7pS z&848_PiA`x^4TvF38dtkGH761VOXA~nTkFb>)Z_?K)4FyN(cqF2i%a3kOzRrr+`s5 z-_j=<33n3IJS=m-ZQ4eQc{8SgI(0pdXNPE7mx7HS&;q*(j_;vb-5F0UPhz8W)aA-F zdj<4kx`^`L8YkKkHmH%w@jn!aQ7(mUggW!?FE53WIXy+7B$LM~n_A@@a8tIyTo%H+ zY9Zr^YfgO7#pM;mvO0f#@LCC!pqlsAYOPN*`|(-~=1o-RBRMl`S%oP1w?zEqDivlb zfY-V&O!B`R|KuJj59fL>O-5tU!CgKozaEbL^Y)7zfH^EuN=q(;b{rb+ILihJIdcm# z^}px*es^e!NQ?PtbdebP*?k(ltC8<@&+2j*(hKpZEhkW&(6E#8&1dgQX< zlkT76%l%7SVLZ}qb~;A@oMQZlpQ!JgbSTLZpGZ&x>Keo5Kaq2h$$0G@UF7t&J^PBZ zcfa`c%5NF>*~5rc*HT5GVP6<=pX>kdo36nos0yJfHU%5Ni_RMXo39lM{+DLK2fXkp zYc^1>;@~s}Rr&u-*|-DJHCXtYZe}WW3J{&?7Xvh>{4g@59{4}C`hW&r_Ad*AK%5*t zpI@x>^S^`umw7JZ$-oU;b8tC~>nwu`Wn7_)kD`}|m!b|yLy*C%tN*VI{7WPQ;U4|? z4+^_hGF)XLGP#oce_02=$x%%u<_jYjO7OpI1MzTiUa%%R@xUJ>0bj=3s-8Ig6e*AY zY+9p5{@9M~sBSbbp}h4P13O@4pNQ@k$B%_$^h1-EB6lDl)k8e|ZpGV*ucn zW_d%{7Cy%!a`pYcj#{y(?grWpR1$Tfk9H~<6SKsC2ae&ZE-KXU`%w~JCB`KhRxWRJ z?|d_v?aL5t8Jo-85_kB@zAI|m5M$5VK5lk@T;i-!)nOfYk(M?24c38TO}ge#h1zO3 zz@$(fnXlb`yfT0^6QTB)gDv4}+j&Nu#y`9P@9DdX%cAmkjyIHU^9f!#SMmrfr?1V# z{d5SdlT@u3xW`@%ON1B)_Pnid7+~Ke1go>g0Ux%lGoJ{R8uY)|YG+Bz`@mq3v}G>Y zaU3FGC@KG#9~Kl6mCqt&Wz=T$!wV&WUM&!1Jy zEv@i%lBvyQepRBh4GM^aZG^%%63)Ou1sl;YazCGw&tQ4i@+fI?Jn%skBcZN}yA zp<}suMa;MM#k&{Tkh3h`-2KHFI{3z}$8_}>q0QON6ehTO`Si4b+wK!D*qR%n*QT-g zYJ4<0KQi6Mi$@1jDq*t^ESWaeMlti}<%@pXI5ylX&0^^9jVkqM7dS$$sn7-FEtZ*- z_Px=fsOl@VG3o7l46HLo@KXeVg9N|XR|?Tt+GDfp1qA7oQ^!OB^u<*}F%;I8OFcS` zcGUFv?8}_4B0YMX>9bLI4S&TFnE=p)bKsXig8r@S*a-pd#})|NOoUGeCp;7jlE$ib z)%v`F!qs-0FNr{Bwi-DBV4`=d+#F@DeC~E->;hm4ONCB~sAU&@l{3s(yA}P*B!!L# z?bSxeuHsuTL#&j+*hk*- zSg3S#luiTv^G!B~R~glXrIqG8?!vN*Tz<_nE`=y6M%kRTRYWi#h0W^bF=t0x<%(*; zOE8wOEc`a*%Lgw^jFOXkibn)KF7b4Sa7DgQTD3P)d1k*DZhR(0{Dh*w({U(knp(ZT z96qk|sVwt_9O(OZ03BnA=VG_Fj*9suIAmQv~kuGw_7Ip z{egx+hw$kcKya~)fPi#LX0eFsoeFuI8PZ6T-YSs9YN#TPd<-(hkI?k*SmouMicfao zvX~4`tTEc`M&IUIcqsMhl93tyoZ4;M_r2nXaju!npGaT~%kYQNRijjh*UO!ck@G7V z&kG4r>yBXT&3=tcsvkCgV?~s&cWF?rwybde)b~%D?D_NFki$*fb-wGpqRV4|8|)IX z_ZRNq!>+qr#`MclgY@~7h)VDNAy>B7VfsT+92UV}OgvdlFIkZ!#n+mmrvKrI1QmfM zLp%sr7t8GgZg$Hj+@?uJs}DH*3F3PrIjQWB&xpwhA5pFtzBY z$exblj<0>&6+xz=e)c}8TPfr71yx=>)U~X$k zDVN-EW+n3E+FR{1o}7{x~hwCi?y5ly_`3If=ff9IrM;LM`+c=1y+GBgmK3czxJ{?qfh3DJ6A&2zDMYhf+X)w zr32L1qgP`tW7qt`wP`vf=p4YUPKf*nLuR-lv+8`QkUJ=zm&qT@Y#TP_q!ue3RloVT zvlVM#`+4>#!cOpqI`b{|P%tC2o4rW)Z02vx2)ruvoR-x!sd;hB)szC*A3!57Ny=4x zl;|ajE*lT#dRW(Ig-{{U`Jt~vry08?)?}M+GhJ>Y(Ah014<~@r9~h3r=RVkK|839g zLCg>EoS$c5;LIywoaZq*_%j>sdoxE*586{=gb?Zpw~aF{4nsW6yUm*{)^;a{#A@$F znsjjxKPw<2FQ}@_uwC4hc2k2WO{8(77MT+0Ag%Tc^@0oUPU#&#GRq6SCa2{l?r zaQJn9T#Ia&x(&H#7)mhI49iu`4f?=4WG*$L!L1t#KDS%kfRMr2oak8ydqwgDzq7Ky ze3Cx3mK5DPr~ykc_Cn40lQV%PW)H`XTlT;!n)7UWw$Mm z&9VHI2jh_pdV11yyo<#)8{bOg_{&99pT#YpIYX8^Wq;q2ah!`JeU{AX8jpm#e>vE1 zJHNr&_ATMd0Y&sWAvxFCgED5`u+`dFrV`C8S(KTw0N3FK>8;J)J#E_P7XiU|J7$t$6UG2-m}LFLHsqV zUVx^12-84kHB&`bH2=jhoa#efR1F-C5iEHgzwbLIg#QghM-|y?{U_J5x+pyP4<@fz zR^wIdE{n_>BMwkTjNy06FMJn!(Wgsjf#RQ{`P~ z<#cpB<#LhSl9!|z{qs5*4YUltWVyHc(rxB}fp6Fa!Jl>VFFW8?f0*ic!m%u}3d4Vu zT>u>*8>hU9M0c_bEAv-pR;`ogqQ?T?pB4-UC&z{5;c=jp+mPB>2_o$^7TAd6TOQ-= z6U0;3Y3;5a2}=1+Z2|+d?yAKNp$j6QnDE{@G3S&7zKQ6u>jW$f-LzP>wog#im*ltp z^jDgp?evpF(1zg|$GeZewuk9m!(W90X~$4PBRt4v=!0GH@H!5&t_8F*_5B_q0DJ_R z+qK0%%LGbELoGl1oXqDVJ1%PQv|}sN9&qDsF!W$8qUHv*q=5eujZ=!dr~RnpNx&_c z-CtGAL8kDCxJMOg9v$7YT^UdT0Gqax^z)I)I8mu}HX0)FwenAwx<@q0j-{5gbnQ*> z##&<6^*(n3Ap=Plo`wv$iOY|fZ7F*fdb>21eKUkiqTl5kZu+WN(s2EZ*Zc`>-Z`RT zfD?Y?Q>a1lBK4x{v0XoCzgz>+)yu4zZf*y{Z2vfWEHvN)b7S^NQiGW<+5Aa-^y5in z`_-Z;jhMyt2^=|ApQ#+<>dvBP7v`|C0VMC-`jmr0*^ z{}(uTxQwW4W8`O0#bZu62AEEuEMQWKX!1D!S&BE;!qK5P8KCG;417T?-A;VWiIroB zKJYn>2^`1fuR6d7i2T7+-(&MO5uNSi`sYm$weq_}YZxXsfkMda$LDSWKDDPWhx9)4 z>^k@)k5$Fybxde&76r)b>6Mj~q*}QkYI~;Mr%LlLM{NnQrFpT+z)9>h-T~z>ZaH5NFegcXJmbN?j-D!SaGI*e|B7!#Z@V^Az?g^nk;m5SN|x;K_d zipLhe1DYesea2bS|LgaS{-7BTa0y+MB}*fYUk1!$HVWF`RraQ z6^t1RkOW`U{V&8jd8?LM$MczT%!cEboiL-eYTT)Fm?ER=>+DlG&wpBvca?Q58qr%6 zY-t5~vXLV^!F?7Qt$?NohYJzPZK`Kta$beMD#?kpy-u>HZrhOm)G09E4GHRL2y;4` zOEv%dgPbpSCuPg;FU8K+oo=kBj-1pT4)ZQwV(d!-@BlyBJDmh>g19s>3TgeY9$ zUC8mn>wEJe@cNvM*J=t%@I^D2h4YWMee(T0dt6TGu%Sf7wNTlMm-;PBh=$8oI!;NQ zqSK*n^YO$y4Ni()(g4bI-F&Ow$DU6+f-o2b@>Ja<7lI6}2lX+XGJ1Y4n*1kHS~ccs zE&@&qLy$6{wv)Na&j>54DLF+Ona}C@gskqU=fF-A;xY1D+EJfg-s(Lc7Mt)&cR8;I z2xnUw5f9ZVIJ4en65xLqtHYS?n4L8Rp$jPSO;$epT!x@=mXHj77f zLaPN>Hmrw+xaVmZe8-d)`iFS0$%awW+Kgqsec zWS4m4Ls<2-BS+pLjiPLChEaMUs3v>o0TtXby02>QgGhi~ylmfQrl2DpX}LTwPnNo< zztJUkj&BVj;a(fW(=?A~D*EzL=0Z{{t&G2$+Dyu4{}F-dQWSNv>A5gJP|w!=onU+Q zB)nceq1*4v>_-=&XK;&uNJ}8IZ%f8$u3n^>ehLY5r51yLwJ=kk1OUr9U)t|oCw|*w z#>0#s{7L@vXw`Yn>eW9Cdt5*L=uMpv%@HTGLc;xE;S^7FL%p%^DicGuoy>4?DBkeV`9>Yl7{L;iS})(N(I#F zioPc(0SIqFrHh1~9Q|~FDqp5eY#@xtkt#baU-4DgiI4;eN4PuHSbHACeA`@NuvU_% z-faUFZX$AupT7le&0ya}Ow{sZj*EOpGa9J@smBnMLh*hP^%JEM*%A(#HQ=3wjG5FC zAZx{VRXii0J%q>r#X3v6Rq#57hwB$Bk6?IA^n>d-xs<5@I@`7F_m_u{cP35twnMkvlDv?^7JCH!xG|_evc^zyp{JS8LuFVW z)O`juz2Lp;!)5(#tuO)M{_>^vOl?T#$PAa%ZhA9w%gO_-t+#%pkb?B7vNs}+7-|Bq zKh4djcCTpk$tMPsu-eu2>cikdpG7(K`|cC5S|@!;H)%8p!AuJZ3cY>QXKF-zk0(h& z>#kVC!wnj@ejthwWWc}65}lPdN^m=XI56=v@-;yN=8ofB#YT@{D*q}U(?t7s{y&T) z9YS0DV|<{b)=ywkt&ME{X{-FRz+0EDP=FdAL9Jr)OwC5@ujeM!C_x%R#;vL=AL#dR zV%LwWI=j9$sR>tnyQkLZA)4>JHsF0UkI#l$xM@SV9J|sQ+FeKw$2E1E(`WZlJRxn( zmCwObVo2GFJNFWk#ZbySk)*S9F@BCkR_z$Q-7YB(XH8?CSP8O*lYj}+5**>z&#p8iDGWo6HPlk#-wxCq3%xx|4{+#Xyr*44 zD)_cuy?DLG0?oM=cf=D#D344Qvi7fGQpwbgYWq=g=&?$@b8!6CzbIe7pUA{owNQWt zm{Bk*3xfCMGQ!<30X1+HB;&i{`29HqE4!Pn$A zy&M9rB&O;+TDYW`(L57Tje(Ei2@QXFd)OZ%F(CtT96jz}u8FA4{7C`Vr-{~bOFH?8 z#2L2Dh9T_FUg(B2nU>{8LhE2~zJi}K8$a+-(n~g+n(g3|Y5p~|B-O;6#fj(ifSA|t zBd#~tQP*l1u0ohPd~3`6tsHB7X68*7YQK$O;@JqFz*rIoaTy8ZVw%zUM$6ruBZa4{ z)A4cZxuH)VZQ_r=>J)hq{8RGvD!l~Q&&LEBP%frVKB%%^i_}RzYDIt_pTF~eqOSs! z>J+0EQ+ZEFnRh9|#byQ0n9O?*%!3s%!+CLe(&e?T-@c!vOUK4|10+=3FYeyL%__WH zM%`Mi1Xn(f(@9?N&$Z4YfZ>`l%_eQqdm}e?@C^#j+c}`I0B8k0f=DkN={~ zaQoLMYQ3$<#_~^1kRmJdw3zFbx4-kt^A#I{0J#&#u20(wA*_pM6aP-}c!q-jk+x|_ zQCjbD5MG1&Wic1QSbhA^f$Euk+Rq;(OMrY^0$CeB>H;l|Vq3X7aE-{PZTB#;k7YdU zcl92<+tfZIc3hLq|3wUOPvvAVlE9x!qiGxZ+viY>`cZ)fqb~MoAv9v%x2tV0a;tNd zA)#hwH~1x_=d01c&9nqGQe9a<B{f$9J@6%-M?Nz`czD_IbI?8F;F@VMd&agJ|j&CyN=J9V*LT7QB%oLHLKHW%a;+ z=@r$JV3pZ*1vU=fB`MG*P%Ela%<; z!;=2sRSSm{$|vaB8aI2B@U2o|=i|2pYM=351$?LN3%@*s+9>#nAOotp(?o=?9URp| z8j(`{WxSvipy}+rkrp?iMo_{DB6jxzlcQ+uoPtI;4zI#ykA_u1cE88SVhKvLgaL~R zm_VjY`mN*NN@>xk-G z6h;R|rWYO%$b*T-KZ_AHuJ1lE^!`UQwX3BP-7ns6BLATssh-Npt75QCS|+BcltCbD~A`VyYp@QHUjuQ2l&UI;3*B3waC6- zksJ7oG^LON!ZMwjm?tX(adG*}gCFE&Q$x;%!pmcx_rDTw$$v%q{nI@!jv)?usJfRR zic4R7?dTS;iquzmkgRd-Gtk6K8o@D0&6@h_EHN}uYot!>gqbKicdVa-vYmYNGv91$ zP0ili5^rQVxuAP(|1v%zq20qR9fjes8GMo+2tOmh8`O4k@?nKr7I>0rF08xspV%xK zCMjYk&nbVYp7sfEWsKgM<@j$MwX>L>f0aA)d;Blp{}a1a*1hJrXr>y+{jmSHGc#TQ zQ%7vo26uf4t)m>*ZXmjEO!~`$?e)~oqj49p^s}2~iGu&qT-AW?72cna?*BA!;;yt1 zWEymMVWW_!}fYvgXh3yphM(VAHk!YXRV6grgEevbyb=mu6NTPStxtU=WL9&J}tXL zDU)-L@Ln_n9ACkkOLL#=Ch=Fz!7dDO^Duog32ZX>bT9MH-zR%tEO$f;7T!ee2&8)H zManq+Ej)aFp#6M<4z?IX zl5bFVYj@#B$fHM-O#fr>=SrK}VJUI@=s0PVtm6-9kf+GVke}p<*OY7vTB=;=W<5c6&pN!k$d$$){lLzbN_e zA$e2s7Xo)PwJJCKLhd>ZDon9g@GROrumvzcrymKunDTmBx@+Sa{~CK}j5KD}46eY- zUh4(O)7q*&M>!s~KYLFT?PzhJ_Yevfdg;t0K)mt{YI}`)J;^>s!GOwb8?E|PpD4G7+*ns zR2ZmhQ9ECxe^)^1U3N3YFivZF$ej={zzj#&sK+GmqRy0hB$=gNp5sThV!%_jKL7`; z{o~EAUkhgJZ#(Winc>ESdUowqI=yvGJwJQbYmGB0B;HrY@OaG7JhWrLqBtUG>mBrL zNx#cynPV2e(1T)DH-IGXAIHIF9 zQB41Ni07c(j(UEJ5`UE?pcDs#h*D624l26q#x=uif}Ep|>0Y3=nQEr^e-i)9{`}e` z%tu0i-vU*8<3N=_%Ggp->xxHvOluPPc}c8y`K)cc{X9>2Gi~0V5Nvh?_Fk?Imq}&j zpGOcM{T$;>5gCoWNme?vn5V&D=+kNPs#>BUw3m0^;&`(L0SbHdJ!nAUeVhyk2EybF zw}CJJsTTJlxv%WL;18P*2rDEA{Xp-3qHGaZp36J>i7am<;!D_9tZ4Q&=;B*!5;~r; z4xU1G4GK$}lK51u@@7MJq}=fI{~eoml5|+-OB(R7Qjlgjo$tdXzIxu2?7LG!saDUj zIplytVJjpW&CTRg+J)f*x)e`LKv4!IW<2{E6s5}}YIhy?qK+;5On8z#8SFG`#Y8Tn z_iLjBQgKB(Wu>)Wg<{W#Snt4w6L;){MX$|)`83%m+OLS5buFQ^i82f!zEI^xB*T714#lSuY;D-+SdU*CzY$iAKlAQ1JrCEs<3;=mOloP51RUINzxxA2=e+3_F_(QZ7iV;)&l0xJ=?a_zlnc$J4 zuUl~gtVVFAd+QkMnth3^N_ye_|A`d{mWUZFkUCu`7=?Fn8OKy!Vmz~5QoZP2`~~&< zk?*jPDi4%vNQw*bd#J#wWTT0jsbnVH>OjDHevp@hC^fwj1vyf@CSKQ{Eqy=7Q-p|`pR8Tt+tJpJktcYCJ+uJR+tSJ`H`j}kX}{BcRY95>%EFCj z;k0Oza^zX1w(kqe;WQul+PJY)uA!pKf7dGu;<~npv%A7D^;BIW>`J4!4r@ZUz_)+R zXk0dpJhG>cJ}+KSVJYFV;XLD;9-gjNtrorS(}2=6^SS-pnXA}UauRx{HalyUCTDgmI> zn|xmMq~$snicS=;m}CLZ9;j~6_u{;2=r4gsUj1Bs-di!MfIa_&8F#bOIHRjNw$uhS zjx8y^aF5Gty${0K4fnfjMYc|G@8OD$0zkvR67}hAUUoJmY{hzH;^*hQzEsY; zCz=R8hWkPSu%V>HC_R9O;6S6gm&UU6nY7d2KxcUU{N7W-+cflKYLYLQPgl;yz9EE;$s@pyxPnkkIpFed28J>jXYxxm`6z?@rr6eGx z1_NPEpc{Zq$`~SXkeWKh2EmB`s?Mxz@E`Ge4NF?OZ4r<>dAN_Bwd`_QaWj+9duqqD z09AH0obI@smk)DDE8IQ(Vt03TcJDcZ*qqceFx#yBNUd+7%qdmwsM3#JZe@~9J^I-z zWZ~RRa!U96u3v>3|2(|PdO2N_cKY<3uVBtX45TYvj^NkSdm^qTRl`)189GKkI@Q(A`XG}YrK6y-e0iK&ls}A zm2cD2G%n5F`DYE2&)kKu*xnudkj)D>D;9w{av7KvZs+qT@M++X45Vr0N(XOQ98yPU zlyeCk|5f%ID)+J?U3FFLbPZWnBS+VM9#e3_f|LeUI6wdrRj<(Od=%-Pnt!?!VnO}& zii6~cY?9NzH$pJ!H^U^MBgyvz@z2O>yj6}pBP$T00&m~_Z)mR64RwjeukV-Eo`~T; za*@4LaJVD!h@^wp=##qnGT3aM#q9q?XCb-GYG)AJLgjIkBha3BSj{`}XjzkF{M~;h zEqCe&$8F_@AcFBfm$AzKxdKk!@}%wqd}txx3_@Krz>fz13z!LND92~4560PIho1^E z!*P;w6Gh7*w{W0A3K1zVrJxj~2oI0rk)QW6L+M0A$DEtNJ$LJ-<}ZIx4Suo7d`FDu z=l^M&QI*fKc{=ZL!)L}x&|1ZgT>A6B>*YEh{%_XqFlR}V04+C-dyQHDuo3_9G=@4+ z?Kyb)QW-if%m44yXJp)UeZ?UHOz_2GqR}6{^F3jDBu_kuGgOfOSN*)kzyJP#1mIC9 zH`O=@CJVpy%A7Hn#e+R=%6RW{7`8M~3%M$}7|EvhXmeP&^z^Ya=ey@gZa7fQR>6|h z@#?Ej; zKo7o@CXdz@{R3nv)~hlT6R3+qnzLp74S)bK)^CP7G_N-N-*oT@2kZn`lXS z6pts{4YL&a(gWpZy^%jc=ASW_TYOuFaAR((_H9wxo~!4q4?1$s3m35ozMRT1nccp_ zJ*34t!@V@*2!<|N9EiP-dFk%V??#-Tie*8H9mo)s3V<879`$}=LI%$hoeg+=vz&CJidN~D<3ZCxTNae-kp=Sq!$KEYbGWKS6W8rAHc}Mi=EQ&p3-ynb zz6`ye;R6k<-(Mar{f+UsZCA*dN)N_zopHi-=IB$))2b!m z#rupdNM{nrLQlA+0Qn`g9O;r4zw4`ARk0Mk9dw5I;|G?^J@i1H)H=Q$PECYCI!boFgdoVVHIKk^65vS zOhfwP`e@0X%)PMoKx*L&_(Iho84Unfa$usjb%OYlqKkko-|E^r1z&IhO^t@9A zIIcmX>`!YTO#;@eY+~R?jR&86@IGR4 zh+!e0nlL^vjM<{DreJBb4)zW0N8Wxq8F-kvhQ_tFepP&2xxKh5c{lIi0Q>CKTKgjE zZp+Bd-gK>=zL!Nn`p++>vJV@^&wgaaL~VTxKhc)e1lLfO8dSH={hFsXk|!|YrIW9r zr68jXFN+{mq-c(KBkn$j6h_BYQwhBirMm+cVl${lKy-Z)&Dc2q3WSVm{x$<{|9uJI zMj?Ii*6(28%0CEM%^H%Vw#v2Ww1z+3#LJEPy%N2+T`yD{e@h(f{Mdh#%mV2Tp}B1% zB;IgWsF7mpbG2hv1nyyoj0u$UgqWc)0SdXmpm$b?T8^KPH=+O^WbPGve$C3Cz1Ys1 zpb0_id~=6)k>Fxb0JJstF2?DkJ&MnI;Pvl;t?^;bViPLMy7&63D_FM0c}VU_fUxomyu>HJO&%WJM9xO+oy*cb0XH@Eb!r_0Y0 z?k+Gto`yg6lH&DH^6N&=p1ECeJ)dgV*sDPMRpIwY_$vwmj{J8I&nSHZFImc7 zYX+CXEcF^d+Hr6X>n?5dVe-w8M#cPUfM-;pIe?;l&zFEAR`~l62U&wm*A1*#vc{ih zMOqX*rIh)wG4PgwVJCc;E=!ZlVw*`{gMB*+n)cA1@bv`ustuAnY~J`=IY1YATh;2p zTKTy`Z(}&~%dHq`f^?Fq!!DgXKf3P|!pK=aVp$ugKGj!%27CGV%~|GQ*BrR;?PlLC z@yt8+;~c2PZUo-nxYBbCYY6{jNA}=+LJg6EUJ0`1?aMMh%anEEnP`p%Yz?Uuo;;x@ zmVfuNd#64JZSowj^vnBg_RrWdET0Mv!mi`y?U654FAQvS_{43HmDN$hmaeBS-Q#e< zv>;V@_VXu(rANN!CtpJ4FiS8p=z{)11z%Q>ljV=hhKCIytMhv@UKad4VL9)r=mW7WY4^ZR5p>YM^fp7i!!>+Qv0m}I{#$^BMbEPA+-^r7! z=eOSGAuiq$^kA)zgqXf4T($S!AlJZM_;wZ}SxglSM_2Ce;Xx`;3)9i^;)Qr6xu0m_ z&58TD018BSGR50cj>1$eAvUoEm9CN=dmUc+v{U!i{GveiOA4(o*dPAdxkLcuvr6PP5-~&9w*`RD4{16Eu!pV6Zu9|G9O?Yr0)GXhL``zp#0W zW5M_}A~fg+rs0A9qpP+(?Svj7W#q}7z43&e+saOJ=2W}d&aTOHa9KUhlZnldj~3}A zAmR%(tSM+nk(l>5b#F`vmg!8c}kOP!< z`qDjLUa`oDP?3Z!%QV)#ZTUOB+*Rn{Ap@~Z=ehXr9+Q7XmJs7;2!L6v`3$0L0a{U% z1q_9er2YprX+$b(7uUfo`s9`1x0VJ(Elq7WGKeD~}4#$Bk zc0^AMGD)5PBhZ7;`zu)Q7Ch)8m<;mzf3jcpCH8&o9Z!E$({HKwF~ktk|F+prp5l?F z;*Jdf*!JBu0PKNP_wD)LOZqh6VR>KUN&<{`>d(-=NWA(glmvs7!e4%qc%q#eGKX`! z8T`N9JANq-vv_O^j~3|kzqV4;m~#ntB+Y0b9^cn~2!`i+_bc_BJk6I=Ln~ny_MyLm z2U6~x+^YNi49n)S^KN9m`yB?e`s0uCPG=@|`!6=ktDo!zWG^XH*Uqq4PSpr0_9b}w zuXGkJ7=o*BHxJ$3MI>DE&c%Y4-L2tSGp?uMz>yW*kNQ zCb8pmpg6`MvTs9-gQksm%T}WJD|Kb}8P`b&tHdk@Jr?}QxeEBkCdc(2p`6lqLI*Q{ zuXy)|uR@hmSf;V;&rhH|BZ8_5MC{xxY@gDLbRDM|Aj<#?4(Zobhib3c>b5vBvt}CJ7uQJ9sqxLG8~K`0>2~_Q;YPi$V@461@yL??6cgDg>Y4YBEq z_D8ima{M#hc}I7lXc!&C|6JVT(G=?-R|}Q4m`7z}=ajZ2R+1&{^4wYdT%xVqrND8K&I626u_Jx--(T=nqosWySjn7?;@cMU-My|8|LgTwG#fMMA1;Dzoqvy<-E?VR)F zZ$6l{hF6bMbDRHN-h@wg+V!HhB-v0?dHC%muKSb?|0|*zi6Tl9W%P_}m~;roGvqE8SVG~*z4Y=mi51w{5_&Tk z{2}vZfLIVEkyL;HCPQDn!`)+TpX2~g#1(nKez0dJ>lOkEYNq!&meieY*>#M})S|~+ z48Zn7I68K-C0j)C-Rt^-<5DQR=nD5Zr$vk~49R>N{fF9lz9Kwsb2}YdrIy(+@0u&K zH<#MI1`tlJuOPoS)bu-7(?LW9$K3HRVqmmbTr0mrq^Gc}x;_3idxm-kQ;LqOjSKn2 zh9WXGetTyUXFw=)x4sw4r@Q1OE%O+@Xs}N?F3KrPN#hrxW`ylHXkW=vcMyd|X_t`0 zBY65cs>`v|2BPg0?k_UUHg=dsAn)3jHa*c4YrH3prQL7U6+Q7! z5GuTBou_bQ^tPclh-IkxK!Ki6JM+86q-$vkG1}aXbAZBT9clr`T$r! zok(s6QSFQV%lJ-)3ZAYdB0-Lw_Grb-HJT_?5iTf3n!8 zp=c#+Ag!!f-IpTNE^}Nt?W;`ky!IY zG5|6~?PFYisJa;(W@dg#pz^XP6fDC{Ht}q)wvl%_|9Iu+4U(Q>cd&;ykQf)FT?grv z%zbD~%}=Mcp^eeAf(u=t2%ZW>MpQ>F1(@PPiYTp;HtT-l3#R?=My?fVKm$gAwWYOa zl#Uu%6kfiepaR~@r$`ZvJvK#krM{uUR89`8Z0#L4nplW4z1Srd8&#^3*J8DFw@0D> zB2@>BngIMz?aSI@A+~j)k3t3K1a*yE!usWWXzsru8oVC*g#wGEe5Bp5LMt z`rroMB)RQMVcuzYy%p}g&#Q;lU4kiYw@C|O*_EiX(B$iB*l{eQ>YlMmsTCRNF=yE` zSA+esIm1IM;q5PNnWXJ^1b(2Jf1ugz+|o&Z=poQOgR+#C*6{a8PyF-FLTx@WD-zrp zmise}iJu6CV@Y4aDYjFtrYvV1lQ}| zB|0JK^*I2eAY634uzvA&gVt;50U<--sjJ%rKU-SEKFl}g>u}g)rFGtZ3(4kVA*}kV z3zcvl1yDum;-)c?j?lzCy4di-lIS==0D%u^7o9xWd0kvZw+mbXc(CW-SIEI>GGy+s zTj7oX{0g&>@)FNVoh|uqX&dc1k z*vTQtjN#h4w^-#{&9}fw<|L38%U}gnVn#hmP28VXJMT^gw7$TTMr7oO>|)iImRyvH z7@F^nXb7ZLKEoYSjkhV`k9yrJ=~*>(&#)-Jda!~Tbo_gJA|IQ+q@5}q<&L)z9#=Nn zeV0Gm(aIq`!f*+EQtrD68M)rkTz4cJZrkBvXRtO%vynr!uLWUS_bT(UwE7a~I0D~p zYrp&xmk?LFtd6^z_se2*Py}DHkm*U?kC4>BRp6JuBsr^7u@YQwFY<*bQ|uo)z*e z{`~zWCK{0YwLkDL-jr(7+d8fN7nd3|dw~9XCRMlY9Ou_9e6$z6*81~7Oep69hjZ`g z)L!lwA#$Ue2N1XvGwF3n^?K)|5{Z^mnUEQyem2m^wFt~RrQSpJF3SCf1umFGa$qj==ksEZ!!u;-%c^zJ zH{CNJq59F~uiAlC9|~+TKZ4(fBO?D;A_6Vi4hMEmj-S8Wn1Q4Wu4)Df4|j&~FT8*n z?)k--K=YTHFb6ZOdCG@l>BFYcp|?(h2WU43U+nBu5>DBgWp}SLtk;MQA2F!swt!@mx!(&xjc-G*BdoHl6eK6{XNF6PT0 z|NKTPhQPq>bj@jN@5TU^$0`<1hOD^$i$v}&vl#~Q#RMO@FONm%`Rflw63Wn-VNQ7Z z^KoeU=%#9NW2(VS&_12_Z9xuvR{Fl0?kMglp!f&lUHLZG&#`^l%@{-xMLVzj~g_ne-K z*dZKATh*kJPrj$b3--*@-~hL03s}}o{;-3~v80V>E!O$_S{SM;m?+IK@K||MV0PHB z@DP1E!}o3V?`s;|N8Y^-he0+%ffnWYFdrAF2Xhj&6{l5FZp`)(0pLJ9XlR`< z2QL*X#QgoEO;}UHyJu`u2AyO;`PVg9Pt9VvE}AMuA)A%dthZc%;~4F%Urv{-u!s0& zEEqsYM)6`Sa5mtRk$Bsf&})J^qv~p?Vy3P;h^G9qNUqoyB_1wH`w~E8#dz<7kI4Cn zF5^?9CdTKP(M$YRKFrJ?Qon&&<4JSJ!+`A8mdECF6@*(a1*lava|}mo!RU-*6@WUY z32dcc_S(=V9A^29u;zHc)N+rM=z>oar^F6UO7jcP^k4LS&rX$`$xWn*8*d{!vXY~_ z;w1ct5t@dP%s_ci^z~>`SNr4mfdnFg3xal@LeViDhV$^^QvjH(b7o-4EJKHq;RWYIAa@HFN2F;s=Pi_Uajvgtu>6o zVoAfxpuQe3qry00dDS$fQ-}M;l}CmAJwhXpUBLL4Nj$A6tH!hUyO+AtFN0i%wo z8c>XuBY&102MqmIpl|chjzL!ZG^5WLG|6H^^Bo(3Yc_odGF}xQ7X!)AR*!WJgNk>^ zBhZ@KivAnhnFlC=8H{L8F{vm{r!c%n{tLgYj4Ota3YR8u=V%}SLS20`{HcwJo0?p3 zlEJ0|0Z{o&k&^#S!TN<;X5c`zvV?dR^B#kZe?fu%qtsg$r0p9{2}&s@3XCt7YzQGY z83Ic)GO4!p?|#O=yV|v1q*+W4%_KD99?C193|RD@6i#{-ZID~W!#bNQsT`aJW|Q++ z>q0v9S-jvTNlX9MVc3LI@?6suhreNkDnv06wY5{^Hr=-&Y`6{9rsxPQb$>`fV;7Cm zi29I(Umd+HiHI=0o2mCZ*+dZKr@Qa+><)~{ArnejSTaF$>z4|T553kJqd{Ec1pQiR z2TI_(V()~Ts-#M#Boi}f5l$x+otG+*U8;6dGleAO*Y^U(%q5!lEiWRM8>1;2fxZ<79iW{o;bJ z7l{pfkmt?=8kj3iJ(o}UHbIrGPlgMsX`;5auEw2_>0BJF zkwhc-#-_Fuu*ZLxYCPP$iocmLKJLR4*(6=GMPUy1+LfXh_K>$CJcnDd-G+wcRsC~i zvsGyeyiRlFDLyjaBEbLd&w!A}WIW5Q-gicVx%EyU0hz1EAB1ykF~3ek-A|r7pxfQ5 zozbWE?;UM`y(}2*BnS^pJmO%7_z=q#l z-w&}_5iozR@$(X&whd4qTb%#h;G=z2OZs-tU;EN&p}C;W|J{GuMhr$~634bgmS6A- z2tpiEgTfL5?Wx}2A8JJ={?>g#B2OPmiZajAcezQ>jie;*{;C|5&+}(*k@h6X8ll*J z+tk6H@5c*Uyepfmph~pv6B8!CcR1@-RH;>eXW?5qPp4?uJy6sv&rj-A3wA^gWraPHwSWe2MU+uQGx{!1HN!M_4zdo=^a^)QB6a zBp6Tg8Se%jNXTPQQCqk;SW$AOpdBz{3pmaGYZ69Z8A?#jvjKc3O$siL65ybTSsCqn zpGWjpNaAQT>1D@W-$J_CE{oSjbc}#rz*1~y<}7^)^Ig<$E8JaR#`D=2$LQ$ui`%n;^Fq(uwy70k zPA6(R*zg6Qx$8rf(P;^}azq6VGPzXzM(bEvn}ME*TR@7_~HkChmh#l z&i=BcC5k#th_f0YJy^y{(K>L{1YSXkP(T|$k2)wOZ}{Zae&8CZJ|E)vg@_)NfS#31 zVsF)InWHZNmWSnDt#g{&H`V?Wz1>xnW4{HHlyZggl}bmNG0C;Zre-@QAeyM9K3r^) zoILc0y)BJzLW@$-JaB6MPMD0KscvA`^bWO-Q0cjZ4=y$({>Q8Q&y_|?1PV0iqZ*4K zhm+%;5S(kG|4>UR*jzOplf-nf*{P94NgKS$i+O6h)W?ChnOFmOZTrT4<>IUL;W6Fc z<|op#Ku9lD4VwCrtE3BRhrFM$gx-@eC`fT<&Srixo!2GYJtGHU2;9)b=E)F$=6iyU|FtJd_jC$mo=gX+$W;czU->`@+LF!|EN+(%u(-oUH z6!7F+$P%SJHmRJn{wvoBXd2}ggqQ+mXNS*ICY+9KqHZB-tP1G}bAdMClmeHCRBlnvSjz7!S0OG1@b`(L+u_7>q0%a^U7!dl|2T zIfN30K;0fjg*zOXvAQP7fD@w-&DtfyJrGODUw4=R%i1iQnA#KKu?bRecNq@kFEThzpGG??ylAczfXu|8U31YtOCpYqtn&_o4 z6_Yj}BPmEE$!mq`!aMrkdL>U2iOlf*Bf-if{kAa*j2DoXBZjqxua94e+i+;-PI~ z`BTw;qbu#TE>WPS{UpOKA>S(EWNA#0R0d+5Ajk_KO9SB+UGHBf*h-Vt=eYCQ;4(5O zkwU8yr}FrESY~AGyVj@G+u_ppv*-C$c?%$_rTZ5kC*cXth5b)l=^}ycSc&oFME&OX zsMetDVPAf`z{lI`JWt01+z=X;PBsyTsRXkv3)6E48$HWf8^2VG0T1BB25e+@Nli6l zPy?HMmn8yr0LL1Hc6l~49kDg;q;k6$5evQ5T#dfolK0(#)q^o~2 z49J7C&fgYuMdgI}*=P_$bzvC|P}fzxlT_7tLO2Gii2GVbIf*@+X*tJDS!tybJx2nq zaItb@gd{K&kn@rrZ%dT;w+O1j^frbQ@Mi z)-|xyA^2ED=H3kUugA^h-O!V|idM?m07+XwhmPMWK!&>EP99#N!mrWn-!_;|G@!DX z?lpT8g}**kELbbr@#gjRXc@w6ZNLCIAl#C)JBB3#nj+GLWC0)Xmw9s!!JTef!@#vA z5UR}TvmG)bQ+k`IbF#sct?X0}Aw`3a4y6z(rl%bpLp~eC(Fns0u9^4NSgc3`JdczKl_*Ek1Q}w zs^1PaKc8FgD)c>Q85s#{DtIY8gAph?ctBSb%RSr{`}fILnfe-O@>vNwIf7tnlzy}F z%%+lY@>aLQCa0d?A{ee2czJ;OOgP4qDgxUl)&3?WD3C3nkTrBlB_=k~r};ogLjE3~ zK=Bc2$E$d`VM?O)liT=~Tbt4-gFbOu12sHigPAR&j^K%^FpTpF7fkZViv=&bz|Ar1 z-+%q~OkV2&noR?^Q9)<-|9Cp%t?bzP`X1}R6tTikp?M|&W#36c{jafRh*u7|nh+zCYg|fAJu0?)z}gxvz6w*X#BCBR4YnYa+3} zt1GqOfu;i4bJo2r)uv+Z7C;U|@SAldWrt>C>A$xeJNzZlVO|Uoyq`X`+EI{zWDxw@ znvgCj=dXqu7mu7&SA*L~=u#5@6DyZo%U*qh8ef8fEJI#{@Z_*jPhoDt%6}D>@{k0g zkW6qtD(UA6hiO$%{jsk`CE)c&T&?Sl>a|_riJ$I~Q_pbO4I6b(iGKiJo@{VG)*JA& z@&GMKTo+`j4(xaPr`fXE605f$fQN@aP}c|Ui)RE7=+OPFTXuBKMo(O@<&7o^N&nY= zHTzi$(&1F<$eNrDEt40)WCP-n69xbje64NC*Uon1OSZ*|k%*a=;GeS8cUC2NM&(@h z?UK?9I!ip8eL%l?Fq-+FuVWKZmG7gKtUMsyNp2yUzj?J}x9lXbeuJdO2R?csUjBA@ zKDnQ=sx1FGlT4Kx@=rcydEV!uJv62Aig_iIU=HWh+O~ASKCvioz zLV$W_jxW`LO>{)f&cidSP*~X;^c94#Pz81BJUqeWl^n zZgA3QbK2I9DF-~Ab}M>qwHo%qr{9m%9I!aYv~j^$!tpUGjPb@p<%_eAXJ70c%wFR( z8eV$jmqr%J6+i`Ro9%aCq4b-`KLR^B zzm^O*o;id35?v~)`pbr~A~KNk%b#E;Ki;`8lz;7yt5;=8W}vy)q$|6QJX2=KEv8^2 z^34-M&XUe#7d@scj#;<5mL*+>spFoy(PA88p8^0Od6bY74V38K2fKI@eFuCW{`qSA zU7c^|A#qN1m-b_&xjq?9J7=pfl&GE>2)$oX#q!K`PId}{WzskQm55@##RNuf59*wj zd2l1mzU6a)2=cu0;%O~+kd_dOko>9jg-%S=;I-BAn9l$*o>EVRbQ;5E7ar}ij@Qcc znX=O-y_D&+4V}+u2sv-grvSl$YwfoCn_~9js?4JB|uJ@4L^(le0=aifRDPP@MoNRt-;K_6Aw(z_xmtqirx)Fh&`j3 zo2Q*sX@9j&QpVnPnHzWxV&_VPGKY#GNWHKV>gOk4)0>Fh3RixR@sc_D{Raf-WAEoP ziK#CKtIxRk!Ic(S#@}6hmjh;m`Mv*m>6ulHpZaAXKM9A?gnFJ3hUa3{5xEvYEHx}uv zK}yOWR8HJ~1acS_gjd^ZpJ}5@C}w;w_F2ZX9LB;`3fH zGKoD5dD?R}@1@zPKQErJ2<p?J@domskQM;uzk#hLA(={~2&!x-72c8-jz7^8MKLw|@*r^Qr5l%atgzB-#V1$>+ni-yWLj zHrc74x7C&rhST%gu|4|Bd>d@*^74gkuDlS_kEUVuYiYUQFXKy5Yl$kcDpxggzR~-u zKU@rcU1{XF(a$GZ8VxZuxW#0EXdwiTmjx=vT{9k}6KFdF{b?+>T(5rag0CeN^g7z6 z(3QfW@GaJj^>s9f?>n)VYbftM>F%re`c(B^aD4`6il5TM=tm0{ zC6X-n95QuChbyein4gH3ccEe3s5T2-GpH6=#Qg+lDoIfwU}$vs?SMSQK2Mn2c4fXq zFEV`_Ro56(kQr@<6y7ai#^{Mn+SDwc)#-9i3g}dsZWo#SG?N@A|O)jv3gH*T{fcwOY+v9 zICJOR!mX>`cJLT~Lf>e2R5PcH*1=la?7a`61MdL7^v|KUlJPOblNxY|;awlcSO~1s zw%sb4^yW1H=qZ|rQ5atEu2QQ_7Yqt`1}2&ODa!V?T8%`p&Xs>*Db+}yxtNmw=)!M8 zKuSu(lDbpZYarr*9TS`Z;b=y=5Nk3MTw@sJbrWv$_^~$5>AJ&3&i!~;0#f%i?`fp! z#*-Irdu>w4?TymR@}@=ln4zd>aibJx7`jV|5}vg<@tkCd+QT;i_sLWt1jqUg7lkHq|c}63h+=pv)o9qJng@C z^I!_MRjAwHwge3yAY$_csKdWZEYvzGPIZ=jAx8jK`*2pE!JiqTW2QW6 z4T)YD;NmJx1Bt)PJ|X?mP^ko#}N;W;vW}#cuFwHc(RVBH(u;?xt^&qZf^? zolOGUE;m@O?B3#JVh|3QyX5^B=J2RKbDgW%M1;-fdP8PDuTMV?Rt&A4Tj2!+4PSUW zAOfFc0Gag#bQAm+f!YSs5~5b0*6}wWtWeuL0g1%UZ!>)=9T4=MHRGUn>F#|rzZnB< z$av({9(WvMUN8Z~*eno>i7!qq+mFBqJE~NlI0bMs;7$gSHYC+CRIA6wR~dHD|Le*k z#G>m@xufwThsgkF`Uhb;{(1LgUE~R$1I{4~Js5FsjT0{cl}QTVB!?O|tXmEK_sd-R z!RiKZKKib)J$gBGFFnT7upB9@`c=f}Ka2<%LFkThWx>SIUIwAYYAp*;;n?@#9{;oc zDe}w|-tGEaEyNlE_0 zn(oH`4;Rv+=+d|Cs_*@S&Uy8o8|bfVMtLw`Ww#WX#Ps_2www|swg3Hp3~m(*Eq&@1 zUs%~|Ee<(2V^6emokeLnl@|0r&2E%_a+^r@>3oJB%PBR1D`rg{fJ5~^{lF6=|8gO2 z0f0Sz*t~T2AA8Uk1ndx}*pAJWWOV#f|JO$)1+iEjAtYB~G@af8@3N-Ce;?=f^L0&3arT%+J34z1tUsRAcE0=^U%Js2au4^cRv)1iaQ+KhhW!+Redt``r{j^BD#IjQtxU{&_)y$g?Aj~B*U zVfTTH;LFZ7`9~V{S%h^?jZL%0cN+oAH$xW`501&>-~ECSN*>$lxHN936#>A>Z%DK} z_Mplfe^a(jYZ9R!9)sK=n^JO&-hTS z=Hx6oUPJVn`PA+p6o+@qBjDxyKR2ZR<5u_joI>3CaG%a;MvnCLLc`WK!55|UjX!Vm z79QjEO0Pw33@B%8_0&)J_thLy$BQ{5{^+`#$KWydP#0{gA!HM^74zh(|omoZ(Rp>9zB)|@D@hYdObF0LjQMRNo1#gKg$k+v!wn5T%7;gaGvyJ|su0JOb6 zTT3%+##PZkTpvJH*SZ7L65ewx(Yb&+Bot`NwQe&hFFU+s6e5w_5fVH&BF#=|w4X#A z&W*8xze-9=cu(&fL(mmu4%=5UZdZ9VsBnnRjQE`^{`tHI{VBdc{YPSX%idr2B*o!> zm}>27vRaSN)BRs(+Y|SFQxFzV2Zr^H)Ga(Rks5hn80WG`5yF zm`@?DdO&GB(D7UTgBPW({C!wNZwIQDTSn$3MwZ_NbZI(`5=`Y*!L5V)$bG$COo{o6?jMEazguo&H za=>zE=G)JsY2w*W=4@w}9aL5i$x%_PoNvvu{vp$&Kl6z-t2`qBWP3v%*bCfD_%z2w z5H>p)O>Qbp216IkX3m-TfkK%S+V7h2m&p1`MW0QWq%RHoG{co1e%hY&!b4a~(ZPX1 z0{4V1_4KC(6UMg=)EB1VA8kx!{P^jtCSV1Wk;uB3=QT|tIML<3&|E-=az(=ZE%W}J zga*)n>SB)kr_<-4enGY?6_+;t*oyAb<0u^Z-;Mwdz4WfI9S_rt7$=UolyVvlY{}dA z>b_fC7Hv%{EM~aB9nL|9r(HR2?Tu;@B1+;rlIX@I!6=`&qSC<|cP_1F&`>Q%v>X^^$|) zdtT^uptEQdFambrd#(4$tc0t;U#vg5qR@e7<1*8AG}CM&t92Y5%I+GY7&BJ7i}~9l zm&*b#dn>9+N>2xaPVoi$gk&?y2;EkmggJeFFSZRpr+#fE>zvMc0VRbq;>7Atp73tJ zG6Ra;j8zbVH*mWG9XMyeLMK!16<(M;h8(J!vA=ctX5E0kBg6V4$~<^nkz>}sU$* z2BYSG2pIYf0W3MKPd40jbm1YUxVh^Xdk6EbXj7-TtThuwS6sO)Q5MBK%e>sR2AicL zt-t3%1XKZnm)9CY1ujbc(SdF#79d=Xoa$zPJm85wdF{1&!o{iCYfY7HmqGGexKLRk z^V3iDDK|c%>|VK@18g2&wwrbh!^E0Q?pB5s&hiKSx_d=REPGWzJN4xU#3)A_U69`y zfl-j=i8sCH?4H16(XV+BI3ej1fkEp}RP;|K)R&wonV??Y%@>{>7^d%T^1C#HAKZU& zz=^ler3(~$zSGED;CQM+j`0cQIWhN8Q5$rY{aqKsM062#f=-1;L5}SVJn%4V=&{Nz z1Mq?a!& zNljJi_NXa%FsgkoY{1E~8U9vlR$97U!N^Gfpi)>ymkN>8%+gnt0DBPX)f+fivf5{{ zXz#3c_H$xqQVg$H2t9C^JVQ=!dyJAbl$o{#T`;@)POSQw^{GS#g|0IpdSdl5=3GDM z938iMlUQx-30miEp(zQE`OI@dG||#&ZLrHeow+uC^h|MO0@(~sX^DJ3%O@e37fFw0Cm2%KSp#pR#s38RC|yo!D4gF}4`oKX?q0M11~yvSVI}7a9zId62y}n4T=DY<7bBZ4&rKvc z5LL7_z~j;he}+EGGSBi=UmzxDNz63&a&Ov8pX@n<>%{G2lH(D>oylT~VQ(t>jRNpdFvh!NzUm5m-@O!SSg|=+KQigKC*h3$($JM~%(d z^Z1aCzF_u`MxZKQ<=*s-#x5$;GFRKJ{9;+$d%Z{HYKaUVKCn18?n27Slj3_D%H#;r zM^1MYA!(+QhsU(zuAyR+Tr2NS{ze6EMmPL_doh=SU)P=&$~t{nBH9wrpyvajE$Js% zpT2JOG&!^0vg7ZY#Nwil+o46qXHA=t1s>%eB7q3X&fAw#q}Y2TXbqoeV(501n8q~0 zOC5pUy_wGO`Q7#JFte^?0m*e9fq}KGuJWh)a!KWr&m6(XdfGR?37x7ssf%G{fhhTZ zk_R6CMs6q1diUioV1$JF9qrQk6juF~E61f1H8`7D*LLXmSNL*hIuIu3iz^oe5`Zge zI&`YTVIKB=biDLLv8{mfI znPV&Kq|P;esfKHxd8__~KK_t+IuF*r@bfLI1-TNC|NSzgYoe{^vQ(Gn!YwPeHvZ2A zebtHUGGRTJ^#Jz|%aC6NM=)3HM*686xYeJ0*wdlsx=IR(s$I;ON=f+UiMLf6q71!_ z*Gf|AZnI%R)p!|izXwuqQmvL*n|~Gc_z@1X!gffosVJH+rR?HjVz-42BX+Tq@L<0Q zE}(+6Ed;kLHZG5ga~^(a=z5^f2m9b>(yhX|p19m+SbC)eIlt-aAHm_b)fNI^v~=Ri zsm{40b(1@Wmwo!i^(wVe%&jc7V&)dIee9A;=JA@Gnqh4y3)~lYAIr?ER`qQ)N?UEE zX|B@xS@LyhV(ej?1`%&6eM(={bUciR=J0zx!j#=rWJ6}9!{G5;D#^0?O(z7}x2DTj z@^m`q#L=?%Vv=k>CyF(&v^G~d3U-I)jWQ6zmMir_>@T#L`&OjV<#(S)bI;N_a$X5* z$k;x^$+f>C?8hlo($fYyApqle66!myJ3c!dvjuz9$jl51JKJ&a`u+5buTOP!97Y%v z2cG|}$T{70kkr=GN3pBmJrgfNMSPgiN?ks;UJ%F7+ZdQ-!fg`+Dt9er|;II zIHHap!LL<=k-cT|aujWrd6M8k*8vwYZm<-$1z;cbfB^9>7QE6Hq&&=acuu zreI1!-2pJZD66xgD-2J8;(-TWU`9}ROW-*ZPFqo_fF;~{vRthHTVYnd^_ToHAM51; zJ5Sh{8`-+0jaZ9+zs$g%#tZM^g-qVLYx%$kzII)ZQ@V@sfiKs35mVxq(z-XkZFnZ- zH%t|8%$*5t?-?0qy@ufspUaHlL2j8Uf4tQa)EcR8M9%W8i_W<{kbRw! zNGx+wd?@P|%iN`EqwG`@Z9?f+o5Z;Thtw3WBu2#1A_T_k{;L}@r6i4X*3zz$r8hXw z#??Fq-njVXiLB+bJAM1J>~y>-X1ADRrs+DKG{an?^Y49m-xS==;Ts1layWDUNgOPA z5+Yk}(Q5MNw*s6o;~i^{YN!j}+wGg$SnV^;-`^}cD_wMFg2F+k?Fx5>D|X{xmFrTq zw?87^c2Fnr&ghRP{+=v>X2x-Los{djlN|^uy)m${Z_4LBN>0E^oL0{^u^L6mA0?`K^JY;ohPvp|Sp0bX5R~T>Z3Id4>IKfP{dwEZhA}Ns} z-)a{a4IJbyjF`4>d;9pjQ^!70FOZyc6qyNAZb}bif_-OMgLQXZh+u{URTgGs*roXN z+IPdUpTY8Z3gK%@@wYk(KOo$qOK{JL)x5Wx;Wf6CJfdE3zVWQH5S_cRf3w8K*9G>U zJb905z6)dr2K7@PP6elz4Lfa7fsM|I5g{gFnpDpc4kCWMD9Ffnp78xE`i4_P6S}FB zIzMnx{Jwk4%}$on=TG|v6~}eX`Mv(iF169~yllMB>6b=O4(6n`wgo();LL_n5>0hD z*U{{Z#bg-}6`;JOJ|7qfp8*TVay7lU%svo+YH8~Z99j{T{%(CS`FBra z5gL~Ey8Ef%tY2>cJ6L-}o>ehPgPp}-{FgyAQD<*u|4%4_+y|e4fe@>YD_RH=)@9vI zrHIRo2fXT{ICrqW3=6S~4R7RllJ*s_miK z^%9Xk=Py8`8M4;OJz{v)5CQZh>-X;^hTth@jB@jcYVaj1lmNvNeFJngnWy|uyjs1= zt5>{6!gFb^kMH?CZfGBM(+C!e{ul8n1?pxB8%A6XQqk|gh7wWE;+Y~x zZmV@>s;DY|VG)37yBm=koYwOFPTjNB4;8^Za$;|v5yEdloXYS(COt~yKzpylC&h$w zLfIGE_GeA0Aga1>03jYQQkZ&|FiU9v^_*74{Yh6{jCwuoJkGg|F zTW{>0e;LiBfB^x7#)W7`tg0?Tv@v*$rp$0wUf~#dr)Qkm2+gXQI3bLIz12jSl{#AL z`WG%6v`FbvKK)s5cgrr@%_%?Sg19mm<3oV)_qF@^FFJ(4OW>S#%el-k-T7xBj;qww-zlj;hz zJ%}{1v}z1JIuryxAschj0vxW5hWyms9c^8ZS#9uH!&PitT2~cK*uqB9L~R4QV@YlI zS&BZlUg`)RgAN+hPi*vHWknCyUT0Gp1+PwN1#O-u4e4>(t~#p!?T%_xwe{PdQfmeL zSB)>nLu7_q_vsN#5DUPncru-?ZXHU?l4=Y|uiqxq4nz+n!=4mdAaN=3LM^__4@leK zsW*eIGc8ps?b)k_Zgv6C>wkXn;w+L;B814PX~hy+T1@b5YQyTF-Q>!ydQ=OgJg}ds zzBnQ(;MVoUrm*W_?0j-!-}O?%1Jk;MgC3i{Hagfe5GJr!<>J{Sx`cllEyY0r|c|e*9x_4a=n|O z7Yd>Rj=V^xT3gVthCn?IazS``#~@nuklOxjXesu9cDVX?GfLH`P&Ux7MZms?E4@N_ zLh+-qz( zEM7X9*peqs3{J?&t5e-MsKScM-<;gZyg$Tgg8JMx$Iyx{_2eXMPq*T3PwjeK7msBI zWgPSvxKBA%nAl%m_@Zza7G9-`?Cj3ST{}2BWFUgFN@}K7)&R8gXgpjT-?G zyz?!NsbIuKNOJdQDvl+kK_X%?Wu#!MH7Ga}Hrj$ZB+hQmYuTi7Xp;8ioYeFUJ3>`G z_p?uIEk&V~npaL07wQHemk&Bl4I#B!3yAY?7AMm+-)zkHuzlBv3^lketJ_m~Uo-gL zy1LGn;nS+NS}KP{n`z-K5s@M8nT*^*Zp4j9@jM0y7PUSZ*n1vYSVpNMyJ<&C`m_qg zn&xl)Wa}X>F3E4ePvK0D{O`LzDq5)dUaPJWHj#%7i6qC;jC`iHYY<1|Jbzs)(c(^D zI&%2mNVno`!ASSPz6E2Y0aO#*ri2C2jC869`tZm)W_~mpLTZnc)^$#*$h8!sObH%Y zP`Stkmr15h$91 znQ?k;8@p2+rOP{w2i&0Hujs{Ma0Z#;+VyR59!AK}!kP+Vgboeji6)IRqlaH#$-iE` zb3b4#nvhVtn_+FNF%gGx7r`WYJj{#QjjcA4uWDrDQ*?vnA!ShUwCK46C**Rrz8?6hT3b!8aPw$Z1?cCv@RA6*>WD_w^>@X8Pvgv<^uXkj;rRH0{ux3ZZR7W9@sX?`xj0L$3C}k?hmL3 z#*M&W;IMF>V&>CIo59uQw$SY5RRqLnUT@~;5XE+WP&)d!#dFB=Y_n$gfp7fqwh7ND zH7S`TC@6lZsIf1~T69J5`X#7!z{uvO4Ie}D>T_fJKKPOM>MU-bqqRWIdJQ~Mi+I5+udFK~B&8e#3wUqFSkS!@O=&)!j+Kn@W4D_I*j5z6AB+YeK9A0|RMg(qEDMsoqxrMGcThmTLIGO&`&SRm;k8)DBvdu@ znxuBU^<>Mqsg#&5D|jj}%7C^S!i(ML%3;yEK37y@Y0|N(dPo_TVO)Q1F|d1;zx@|{ z-Krj|5qq%&NOrH^=T?z zZ+9cY{J2E8UnzJ$wV&wJQ`oBU{Ac8)OBGqU0yfG2oYi zs~H}JxSm#aOsj#m;|?{~XIs(y%T zBc6;2G2_sVCa2l10bktj!w1ZT-M(4%KY?}{Q$YJ|67S5Nuw2X5DW{a#DnBkle{3t5 zwNL;wQZ#Fh@7=)F{qg=6Mgmp+(+I#-ocY4SYTM7{i}PXsdK5&`_imiI$dG*bne#}f z5MZ{4$^V}n%1MAu4Yv{1^(U|a1_{vR@L*5EU+BMhz5SyOl9(gJJ!MJv(K{IMgGn-M z@oQ$oRPLWJJ8p}}Q7AwWn1rtmKcqtpTtJ}zzrBlEmG)nnECDk6*;Y^#&_WRI(QATF1*-YPrp%zFfoH@5dJM<84*IvACoX1! z+xoWIFu(stmX6mx!`JcDRBoF4VbciH%iQuhGGXdp=fGLr04B_qJYR=M8SCq`G}db| zI5O~iypZlM{b4}S^r#vyLrsY~xO})|uPb^@_H$R+wz`eTS@*hViN)<))hWIE8yp4# zPGF!ngfhU6a55I7rCHcz4r=Z%2M($(Dl9os77jMBrci>S$4f=SrxHisv$5*X464k% zrr=9k4}lvqv9QL-V3HMiGpmO1(;e6Eda9qeUDSGqH;P=5D_%MMTc{C!O(L>Sy3cFJ`m@#*&*bL;!De2592CinqLdRHboo1lNX9@Tj+2fz%fpo)@uIU34 z`f0plHy~WFKAg%CCds~M#>f^kW8PTC5-(Q$j3*8@qMH5VA=3V zgub2cHzv|c@$#z+VXYAY>}RP!F&H?v>OI|H#FVA*jJj=HX3-=Bj()~Q4lsM}JK+i> z1MIvuvhj;U7gxQpbcpJ8$jDPTUrAOTTz#pu`eXwKP;jmRT&4_$pStxQ%{mr6U=_N+ned~Vj?2Bp|o^xw|zSgF5;C< z_k;Xy*QJf^`r#3;VLBb@v|vem%j*5&A_IAOnf;aSt}~Dk!DRyu?$lD6xcuYIYI-b? zZT_;$WWaT>WKYX#0dQ4C{Ll&6h`pga6TzdkgdsPreSF~G&&5Tjq|q|Ak-PIGoT0R2 zbiix3(|DH*+jOaxo!K+-4ZEA;N6FRfCsw*)DTB2@r$QdS|BLd4 z_OwQ@XtpjLu6T^U9;}n}pQ!7V*&VbW>P~KY40`Kl!z!NrwYMdA&dK_DAN|9+k^NJB zN7SIm3n`@Un$(ntmr&SpTZktV9iA9buP)ZStSefyL=L|ivDw2nRkjgzdc>}8KP42( z3wZ^$BoL5ILk?G|R=^$y%!V>xT)wJJM>F66$Nr%gqR2;0W5?xmI)ST4v*1>JV8ZX8 zQrC!mvJWi4jli9mgyQ28If-{_=Qg;8O2cKem{S*DP)y=jn*{fMB;eM&1?{IX)`w#w zElRFJyL|!Pl1urfR@;lDMzUHZC6qrkLqj3nA ztkodn6*ArE9>+IX37)hYL=l7+i``ll8#vff3{t`tE8Pbw@)VbL_^452Ij$BJy!YXT zs2h1uwyrG4xJlz^vy`u%mhnxBV<~cDSwY@s@tT%mo>MkCFE9A$=PmawAVMFkJph}U zR`ifSYog?%gqp!fx57@%@W-JWi$^)zC>gKpIcj@zvZ-`WcOJAO!iBI;|06P_uZs_& zMp%h-DD?upmGkW@&!^9${VYVaBVi zv_o?7Ht;3);@n^{+qER+$%eL#cwX!ozrsm^d3`2iu6iSF3A8>{w(J4^=dww6}M;9~RsAS%gl_WE9Q$j~p%n zN9EzYc9Q!P8-bS``PFk#v3&3Ma_-+?z`Iei6|Hb65?d1JBhP18ZwFSP+5NpNTKHSO z=6S#-Q$1LE`{no%Qgb(Z`OswF#Y#Br#mK?Rw^_*})o!vH_tR7*%}dRH&x*SJ(0~VP zEq@HON*;Gh!R-62_0=3_Qu@4i!$N1h@g)P@vHWl{qWKQoRy~hQi!6?5Xw0GQ;=^o6 z8^wiK;vBa5XmVB~&u>d(4x5^zrcbqsB|aKCpg>~$w+T?`AM&dgX>_B zuGid!+2It7Xz@z@l;$DO6m^y04+`H#P1!arAJ@xNP2QpJA?K_5q^#Sa@`(u{6Mo%= zzy|DP6oN>AHjPV9E~Su`mu0^k@Gka7SW|~#k^2YBh#JFH9<2K2L15&n>!8Zcft=EI z&GLF~$O^%|kC7Q5N+;^1z!T$kOn=C0XwjUMh*QiQVY%X4jv>B6w&c*DG zi`r!%(@=GSy)sHly=NuuoLS%=&Zeu+4Qc5ul!TI3Zcm;}D{>>ilRftb)<+L|HgnjP zTJ54tNzY<;C#P$F-*x}VdGxt$9XP~8x)%pGSHmNx$7n=eTm`l{=)GZH^KE6v!G?v^ z%_h@4gvo$A%z|2E+P}{*5#T?OvmuJlW}0dx9uDtySd zv#{LWpjgw8>3st81;07Om9M7v2wd=?^hNdTd;7w;#ec;`47r&~+Pd0(lEqj=%)Slu zqAqLyd~~_O6L(z;JGoeayA*aL3w>pJbu!=Y<|6&5DPPd7y$Gr^(2>r9(94ao-uvdR zoVG#NxGHaYZ-Pqy`EzRzeBa~xep6U4VL{72$YSqHjWeeoo{bz(wOIcXI*1u35ANF| zM7;KvYTPsjLpnPn9ga}1R`s#rBV@yT-@B_+HSB!~d7DP53iO+V;*|7?gIfH8Nv?pB zcsC=5lc~#zA5qdT4+$${=&5y6&`-WQAg$kJoN?T+7?>aOA{wK6uvHP2t2FLe?SJ3x zm1NyjU-kL7_i?}%?hAnF|Me0wg+^~TVk635KX_KS2J!$H$VR-LUv*eJb_xQ|k z5PC>x*k0HA$OYfVO8>pzP&YCueImE{l5ObHAxWOw0o`zX;#zMS9GE1!C8O03*AZ$j z>vx+>a}mwmb3-oNHeJk7;a$cgBnvH5soyu$W3|XGqMPB$0fTAdhrp?jr(H*y=^ZM& z6jU#}pbVYO*KjG=`A0`0UVhUdBp}afYQH~MdnLy{FU&gT>$<+v+dNEk&{?Kmg0%9f zw1%aZQDV?e)0Wx6%^7=pByx9h4j0EAF4(h(tie|dUBauWtB2L2Z@E`b$>pimDxBeo zi#pubVzAw13$k506#x!zJzH*EY#(Gw@~+6`O#qgF{hl`SpPe}8RsWHPv=Ko>5L7Le zQpSyF1qyzKS@v*eZFjbxwjRp9u#l*o4#Ag;-MYlP0wKgV^S9YJH~!?ONC{l2_)+JS ztXdQX9k*Q>&C59XMg7kBYwI!WQF6d!u>!CZonRr{319A&VRS0Pn0TTA}wEF$|wP z7F8PVYr5~}51o~p4oYZ!6Vo(2a&)ijLE%g#KY94#Q&#zoZ3FV^cj02Mbv`mZDknH8 zz6LB^J+u<#B6?&PwfC#4LTwIb-hLK)95UR4jwfZ?k^NMbZd58&JHK7wM!3?48uF&{ zc>wV=8-pTNRSp!`GTODopyIH>&voddh1J><_*xs~xe@i8dpvw>Qko;>*TPAJBa;1B zXVMfhq=p@&uGVv%>)JvXwWqC}-vQ|mQuIT%QksE#W>;Y5L^a2VES0VzG%xYhMrZI0 zu|{I|=h>kF{L&}SyQy;rZ`nrrsuuUxmp^oEWLzmtlqV~+Z{;{Y=k;>{V$ivT zyWgkWh=x9}Lr>sjZ0iI+FLVl`7HuO6Z5-((tkf%-`j@)vX!~CpRoC&ilh7T=U9WdF zt%ki;99<}$-&nhtq@1oC+xDA!fN=^pT%8OXMWG@Tyd-q}JAjQ25S*%a>kQL5gAsUu z<;!;;I9y~(%IH_EQDCpp<&pdSoTn?v*b$ej?eqsdQ&*FbF8axT3sB^KxQ(K&|5MkTYQb4!+F+ma)3q?0t@xmkwN zaAiVxk>XXY$rN_Gj)0N6z=UkcN8_6o?m&5jWb=ZlA|&CsIbha!!MnaY8aQ_4lrld- zoDll6sH4a$qnx2W!cF-*9WWVYla(XBLY%nb{qL|U52ZyMmpiUoJpSe(1KeGh%6}2L z4m>AIION8nxv|r&heqK*>-i91;{B^M1;g9dJG_UDy4Q46&NAduKVgq_^89zLTBzo` zqZRtsh@xeLaHCZ`kvY=`pdZ9mv19=$nt!Km5x6U-0fD@?Z=?G^(QiGo4lu6zCQFB! zBXG|Y&~bguhdl;zk;8*K*^w#Hg}%2pRCqTS>HM#0Kgk}b$~C^yI06416(P+1-bOms zpC9h&gaF8GbJh&-3ADUGW*PI0Ct!7V;%)8LjjE($iUV*-ZU1Txz+U?AJx+S!pgZpN zuKa(+K*t}Kqn+bFB#4K39kTUo)q4?E02vGGhifQ+Rf0r~7nbC5*WYD!84GH;ibU(i~+)m)Bn;Y3mk|C7HDaqKK@ltA(A8Ies&c# z%wX(?N9sL)q5n>3$D>l917F^Py!uU8e!36h3X^2;ZwAK9wZOpRzp`W0z%yqbsM`BS z402K4xLu9!v1}gy(AbQ)H8|kA(yyumBm#&{|J|qk{mC@pM%Q@fklS*){=v!~3nwt_ z;Sb?9<^OIsd?}4z|ETpH-3f@=` z`>6^@r@G<`Ph3@8!*C*M=QsnD2wub96F^1Un5|hc3_$}zh|Q!rpmjsI!>@a@lqAIZ zTJ4<5v)TJ{d|nKuN;mY&^Eh^FtxuE!Q{mvR7dL{IjT*=1)Y*o1b&VGnyIs`0th=7s zDaWNoEoJMuMXCGBhVdFAvUQG$c*)2!$azon>!+sYWwius3iiGbh}@ZR9mrDTRX$FI z<&Ofr@rMPqN`~0UC$3fyU5X_>%=wjP)BRBIct^8o(tzl)RS#q_E*OA)`DmYP zy6t8*3=j8?CvJc$Q#6#r;8=_j2*b~;j_C$&M~Xq#K~s+(nWzmC|Q%gbIiYuT4@LZl2(r|<%;-;_wLl*KtY zh*#M1FK&`7unb#65XWPbaRF`b{ji zloU^1C*XQt$^AMdv&op5SVy{s4?CFRkP%F!+odUuhPI{l!w+166f7`89Fjtf_W*Px z0yX{$NPim2UA4#25&No|A03E8P{vf8R71OBU;mD>K=cJW|H%HnU5-TQQ2DjsfOVl3ocgDKUhV zPI(A;3g#L=$Kn2h?fcix4Ie6n9?Oq=%=AvJz##fl$zcIopXeU48RND{HXW0RmG9WN zR)}i0+gq&wwpCz=jy%&vGld(eMg02S_Ub(#fFr;pa|!~!CIAfWXFM{qRT@FJi)I^e zbCssB@_OeY(^2Co!1`&`sj{qgo%=zLC~?-;1VfZ3r6lVx{WYUScx$#LZNC=>5ibrf z+2J8aEjvZy#Rk|x z&4MAx5B140y5XtZiPH_bR&orK^PbiGxO;dJ4Ye@1BNp>Me6VJvcd;7Si1g!$mjL0( zv_T!O^6@}NU4TzK*=`;x85x&o_S*|~Ck?n3jrg?ahOW4d7mqk=wGeqr?gKGzkE5t0 zr{r1SiLkY|{7o`_6srzm)lJ^e!5$0He^LO{ZD7q9o7rqMRlR*zY#DiW{5h~=na&FV_)0;aj)S!2&p1LS{CNV*V=?J-`t z>}$z1K$6GfG@<(ahLNZmc>5)byU*Q(zs zoh(yY>t-JKGf%M_s`}qm8!OeE8s43{wi*jqk;m7mm#;WrUdTFOnj9|1r)sPi&qeJ^^z~L0?~gbR>o&kgNgvZ)C`()L#Ml@z1bZnAWRUDd$+Bk z(Hz@~_t0vIaxh}HXhWSds9G6{YYfpQRd2YQ(Q~}uc@g80r%H@NwSOAO+gs~-YDJ$) z{pP9L_f)b!hW;)a+6L5?7}EWC3=4=DS&Ye`tl0=915%Zaf=s$eg!3yGm4+nssnn>~ zW2{|TuR0jjCyMz2vs+q#o5-jY5^1KF@EgEv@+=gv$d6lIgww#WEu1d_op>%hfQ^+I zZ@Tq|JN!^W>S~N!*yNiLM?)21@_@~nn47oEzcOfGIp{Y{-eNI5cB5Xp(qSh}ymNy%t3l1GSC^myPlwY?54F@D z>Y${}%MfC{;3mjqg=3guEt2&6PphxCWS19(3YB5r(Y0jdliVe>%N z4t~fv9K!=%L8kcWG5kmnKhyPzY^q-Wo$OLzb~wsnduz3}6W~tTelc01E47?fY6Y-1 zxwpK>$^J_mCwzN-=*nLTTai9(#{ggf)yJ$FcLGbMd;0x|x4FAhMO_|-- z>dPIvMO#WC&(qd(ui&Px|J}M-HCHvwIF^@50N8sq{IwE5aLn!`Z3Qk~G(%7Q{J{30I3BR{h_p4oy`_bl3m{pL)>^$8 z2X8r8kMw{ic5J?e0HOndTAefQT$)B_+K^0?3TSMK&xa zZ@Nnpc8*tBb9yi-rWBNFWpR00x42c#a|Qa+!4zl|3}Q&cLuBDg3ZbDr4gr>YStYPy zk2=pdYib`Y5-0`jsS7OQ)B3hQ^wAD|l^w%5jIJC{W$12yRW-48k&#mzexOaC1C(Q2 zB@tK4>nh3}jXzVEDSs-GLmW!htX|l0e_$q{BqNU4clrg@2s=y?k^yMTt#%iW`~$a_ z)I;&iobs{)V)dwBjRu9UsX#cYw}jEgx`{fmtEr)zdBoWFae1di#3oTlyopfZS5><{ zOLgV}#Qz1u$e=l3%wUq*onI)33n{zUbTo?x5o{ z6K#M_OkqMks>*RuB{Y7z;zLpmeVG$%qfqG~JbKNMnCO&<{2jzIr<( z!l)rT-td2c*+H*@+6GJF&7XT5Jz=<0UvY~6M@8$@H>1bs>SF9D6TovNo{sQ2!(C0| zK?B^Np+0B<|qi7mjn_Z$6!>_7aV` z+%w{^bC|5%wSYr$@8KsfYkU*P8&#c*!$iOIZhF?(VVQW}k~VFK&Ve2w`UX}kn5O?K zvAdlz7nn8nvtW<(%Z!ZQ^rh8fGWa5TRCojMK@+Bt8Chim8QCm^o-ZJCrIYxvT}YB* zCBv|jVF*U2clUYZ^M5VZmb}$Q2@^hYuW%~Yijtz=XINl_nKU-=ZwrUQjOQdtWWgFq=$NU=`}yV|WyyRGJoXo0MbWxXTvU6S{a%7EW^;6o)1l z{O{j$wSP$(2zxmQAU;<+WWN+!7SJsz012hG6bsh-pYzTxC<{G*he)3C64)M})02)7 z3oOaIJQzM40APV2Js^SygjG?#0HyYaCUCpEb{-_`v7++%-kO_z9@Ua*Sc9{RaocLM zX=U29IWCsBUT#l>YDQm~AMh0;0dcLl%zYeWcpj0sYCyzsLDQjv6Ds zx__m}30co&iBaG!9#;V-+Jc4*;S-%YK943<*@iLu!8!VcR76-nA1j_Z0UgXd=8hK_ z#m}Tv4GIy6x$nAvL5;P7sgb=vxa$j83p<$ql+`@KqM*t(4EJ}^nse=M8@8BCJh~Yc z9w0nouRWh?8?ecpD$gC?rd&od0kQRev(H6Tbqhp6q@RcuEgkHO4Q~kR>?DZ&jnEo_ z2+b5ru<(G>P*cDcZlBxZZJ;?=q7V3-(9JdmxF<8isnSc>CuTxBbp388Rc-<5>^f5- z(Bw89oij^(r`(gCl~p!#nEn0!XzqXE!?YJ%lh!ZH4oVNQKo@(4)yK%-`-lK^#MH~M z#jfjHS`?K;gaJ!j7&33s{Vw_BBk-`1}z9(WyWyjW#+m6oCINh3VqJ{5#!Xk$ZJHJdXY${d+y%}=8;r0lU_VLWCJ93+qNi1C;LKl>Zf=L1l!9hI>>VIKt0Zf~DkvYfRW>P6C`tip(Y8OyW#t))e4Gk<ibLXhp`aEUW>3DsdW{xTJ+p{{Nt z8LAu_ictrKV<$Nst^TO+MB##@QWHj88){bC483hV_u!~JOsd)3G`W9qKgLRn??yaq z^p%>(uGO(;KP76l&@begLAC1wa7F~i-PN_kj*eJjXS*Xdj>At1itr3jpe2RhCE(#j zFceWkQ1z=e@b9GFL*G{q_BO98`DmGN0DR`j$mJ_J+NV>QqqsF2JiQ}w)81m|rfN@o z3E|;KJ~*F!JlX6pWEy67Ob+_yli1sEa88Bk*g9O^Py$J-o`EaAu-A?=)Q)qPIiJYQ zz8!`!Csb$%&^51Wri^7z$lDUg#l^Qzk3rYAMy~^>kb4)}>eU553r&XffiQAW5cw#m z#6J12eZq+QXAx(j-IALGC#g90V;a|+q2mO!7w>G z<7RQ~UP5Mevqw3d*#@(sUr7y>TmMX)_$~y~#ZSMaRz-shm4hY8(AA3i;z=?flIg zkmKwMb-ba>`S!oJakxb|WUhS&)oeB6b-szjw}yWYQAEU5*9h~nE{}d1Nq+d|!*%4;-~vThUl+i=DVcAmO&w zwzW*K*+^H{#TSi-oHraX4f0892t7WK`CWp-|IC%)H(v6tK+eU5rXU;@S&3EA*}C)- z*OGIllcE048H!WN9}02i5i6Y}y7Tsucj#J^e63!1)p_p)5x+-^uEeSf^6vUPty$+I zR4~)6U1+^UXiWvh&~p1Rp~ea=KfjuiI3BUQG;Ye2dhM=3Y_ts6(yz;e^w9m{MA0i~ z#?Vja7|*TP+uTj`B54e(!-~|++u&WM_4KSe|6cCxS#QCwt2bXz?;O8PF2N5%;PR_=|UsD6M&V(1Q~Ocir^d9(~7S1 z+TsKg$FZ4e-A%^Ru=pRGsqbcIhn8Igc=WEeKwJl(0*-eW+fk6OwfxNarQ+w+0=&TF z0TXw;eNeGdu7vC|;%buhq(b{2(T6cC#L;?{;rGU3Z+t%&3H71gqPaicY4CJk`_gyM zS~DNZ2in@>6vc-3S81cLr47z93O(<;@R+7S}~IBriX{ND5 zDK-35zvbtw-lc^1_o`0X~us%a@Dah`OW9*K|@>>)Q{By=r0+QKCzj52Fya zzO}5s56OgVT^l7tT&xfBiuk12-sn*612&})FM`rcm}?d1Q`I=XjpEwd!oRn(!e?8s zgf)Ln`-QIM_HX(D{wL)X(D@R`m^({BE|B>Tl|?GlbPJTbpB^Z#s8XrDzL(OQ=jdK) z@CW%p);9{9G|}wZ?PHb@)O&HdTwZiT2UJh#Z#A7c6NovWpW7 zHc?e*qLdwT#W_C1kM*9@?GwV>hh_c)FLfMBma^`{+pvM|KkNwdSIX-O;eiXJ+xw{@ z<^u$u>k|j(1r{E+yVnL@3GZ*g3-b6RQ|HeW`WC*9%k+f*DIeayOHtX+Rmi0H2kFjD zmwW}vWt`@3`!^j`-(;SJDp7=-YhsR%{Nu|@Ud?&cmqvYIfYiyY(zFh`-hcBO66R)H zxIT^dWn7?1Z&pw~Ou7^tX+FH+yAU0Bci?J8?wvE=18Tqvjk#aT;}2e7yX#E4j6S`0 z#qCc6y$e~F_jx6T8;TzA(>Y57r?c+3lzs1nA%r#S+MeCd+Qapz8}O=UziHE&cB9$x z{ch~Nk(M-1!amgQ`Zw<)-fid=~Pk2M!#h3l<|iH|*kvi-*<5<=gL4^L|r+BZw{rZ(Dqiv&-KbjNNA z;!>V^ipTqYV`*J04e3vR84w-sJ~g250bG|_Ed5#oZ0c(E8mZ&$1TK2G^)sNLH6&dk zVA>$JEeP_Zu=3QmF&#|bCbaZ4v3#`uo<;~dWT?W*YcB3b$cvUhLuZF`sZR_|uwGjZ z=Q!$9$_IQ@7h`Xr)z}Ko TqXR~}fFI(5)%n7+E)V_>^U`4Y literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/intelligence/msi-enterprise-app-user-setting.jpg b/windows/security/threat-protection/intelligence/msi-enterprise-app-user-setting.jpg new file mode 100644 index 0000000000000000000000000000000000000000..e68ffa40aa6a42a2be20df749e3ea4ab3630739f GIT binary patch literal 71817 zcmeFZ2Ut_tx;Gw0MMXfAq9|mPrlO$IMuB7$5D_sV3JL-$O24sveG-YNy|vDPO?S>9$mMWa$>`F%j=?hy`_)dkAJyQ>16&#nF}pUWvv@N z4>oOAx_Qgl#nsK-*U$fM zKwwaC_``_Es7KL{6B3_3OG^IfdCIHw*BO~vZ?fMO6c&+-OFopARaMv2eyaOi|E0C9 zy`!_MyN5P3JTf{qJ~25p&01JoT4r;&yp>hD)*wXw4_Uua_9wceV7k_>TPLzkbd|0( zYXjg*L~7moJx4ZdJ7Fn$-Fy4qqxUyTpNxN*|8bL&)&-`_4WE|HvdY>+Dy&t~{zln9 zN7#e^5oNy-_8)Z75L-mnz`_%eLZA@~hQ}AihRW!^2Z>Y3`#D0yRAEQvhv(klRH+bg z`^^+}dY(G7Fd;;kR^AT80(@n8n`h$;@TBL0ig6-@U@WKr=dbfnq)kGEA9SU$R7M%91hA)5TE5$83Ot9c@(?l>`a?(78z?w6*J(_T_Q zd&OZYO^9G|TPZF_8HP~^&Kz-a^^3K3^eH{9~1oPrcx zM}X3CK*4l(*EZdb1e-+Yc~@_kDy5Bo!h6_jW8f);D@%;^whotjg4$61LqNc0Kop!> z2&HSz34Ye&%SKg-W@h=Zmt$0emU^6 zX2&rBUZA!Dp7O0{y$696%SEX&0u)jr;FzH-tbw5raa|oN*!^rpGS@?vrjXN>eEahwaNGA# zKmfE3!=4%BCge;uJ|! z6(UZq2oZy4>3n;Omy^LcDYv6t0y2!Qv&Ej4hLDOF0T3FT6C&cuh+9p^T~i(#Hgqdh z!CuW$zy*3qPmN=`c00O65Z5Ch`9Bft=fn`ivBD_fGW1_6>cQJYdWd3(7;EfWQD4NtS5|u(S>2n zsSwCt4(pQQkNR8}BA#>$5fPGu=#@2^&;|=3qP9hd*sSymu%t(H_+C1q1UT&+C3&MaV8aens zYn_FN;mJS0FjYp1)!C;w-H2@HXmtUUW_#I2qYMl`ECJZ+UaS>#bh>1l`~GW*S7`Ol zMAlIpfzCyT3m!WRP#2?Ak-SalA!Dv26tN5|*K;bj>`%8f`K-)*)o2f2@3)zCRO5v? z2e~rBD6a+WTgVV1Hoy#>>+%>;@Xig@GK7eLcvcgUIzXiJTJ+N4*uY(H(|H8hyeH%U z`tuDTqAHq+6o}0T5%;wKmLE_R1>YiUga{E;n6Mc|@Kf3zsJ;C{KmTE5bZr9D(VrdRM=o5$Pp4Nk!NL)}j+S55iw=jx;C&3Ph_ zG64U|12lEM@bc7=d(3LPSX_)zGX;16}OLc}bPf5FY+PDP{av%Ywn8Y7uUj&{I|4Iq4 zs(I@H=20x9K^(-HEh{)(EVV!59 z4-fcCXq$(_Q^*wPX}b71^eOep0IX2k|Eytucwzc`zD1DI)VDqlUt70DeF5PTC=X=8 zkJ*cBP7DT0DY=1wBbCDBJaPuj>GUhSUNvKkT3GWSZ#%>dM&&<(g2Z|(p_54N`Lqo} z#7i8&RE5`$=USpf{^K@Z=gPr3FSdgak+qhN=_D3Pa(qEwa7j(`v#Uo%%ALh)$Y}PXZIbs@@B8Qipn`bp@K^q&VhRT zXvz9fK5>H4vuv?D5kN77y@P~W*Icc1S z6n{bTT`Oet;J@YbOyw(l?hSO>iREC&&vzXE#NXSc|3HgrXFjs|yOm1K(eE|?D5O8htem!Qr4!~H z(k6o+wf;{G|FZzPLQIghHGo0*^b+;oZ2n(jGcaTv_&e{uh>xR-hiVPdH}*KV*&gq` zYPbLgZOZe7w5vaX45$_-=AZ*w0riG$)LAto^f;yXr9;lUQ%9d~%Qz*)mHct3Pm{I? z2lfE;%CYH7h!QgHK2wyf&BWJ`B2qBX{)SdpBH8Sa&iF$UkJR{KXQ_+Lf|Ml;H=yKR z`3!2W2t;`)M2zSxOLNOLUT$nj2pd}XK2GMV`lV-=ap{W;ccA$Q&ywgafYXnt5UvOm zo~8`PrJvB;MkJE~Ab@YaHAL=q_+9y2YS(U31(mryQGjVgC!x7gJYM4DzWODZ75Hrl z4pUShYG4M3n!^C=ExZ8gJ@n+UVGMs$xDfGU3sicG*r>^0M_fj0L6_k?$8=)WXIFq} zbgBYsO`A~*q7*Jhl0Gs&O$}b8Q)gy|_$l0hRxL07Nq$gCL|Z@!KTVS0@3gEBJq0{xWqRN|$1pZt4+g9nPjse__)Q*E~@RS#W z$J4QjpULW@#?ZRb;3&{~rhXx;$9EL)ZNfd{(E0k!zaW=(v5?R@IEa37g{2*|D(x_( zRcQmibBMSB@g_sbR-2mGyoxlh!+#lXr`(pq=OOoG@w%)xts7S#OFf9 zL4c{WxTyBcGI3IUNfJ_Ez)Y41O#D?+7hxX#jmgd1fWfm!zB_)o;UMG&4DNxl#(@ST zeJQy!pIo?a|nM zHKV{#76l1>I|HZT2t_>C9T`PmlB$HoEt*%p>PV0);{P!xte&B;;+-J<-Gx<9NjDA0 zgQ*vrsY#-+)rp%8N>T;ya8#&b0G>=Uin=62fhUvuXC}jwZlW6xuVmu*?~fsWKR6wd zj~e0#)?oqWni)8?jSA+9Lg5a7w{lqV9buFE=CSGlR}D5}xi6}sdiptM;TM>`Hx$@r zzgdGYfey)#JONhozpY6xujIcckl0nAxG4G7h29_%FGNJX;)cNF+cEfSg3*7NxQxLK zAl(Bdb^h+mTVR`5W=aY+RG6+t4;Tkaadh|$q+DM<3-Ye{I5OJ@R^3D{2U=5UDmtgb zobQm@LoL6*ecn_dyvymYqhZHFf&K4`u1ByZQbj^qn3*2Q#j~hvB5+W`6p|1B1^s{M z68%@%l|EA{85Gr_#TdK)S%|2%423~})rBD{w}rLQC9_P;{CD+8L3}K%YKH#wKXdzU z@#YU|f(zLLx&1m}9eAFP!q2F z7yl`VnsyZ+$A7|Ep`gpVuL4EH>cH{EgoTl&o>3n08c-_uLV)B$Rt*8Rfq%{t(qSF> zooF$kC|I=5=n%pX$%I8qom2^cowTHV0AIfgW~Th_L+PK4>^J4T;e-DDSW~_>r<$>{ z$sW#XM7rR=|E%_ZQQY5=`7{3aqhS>hH)Mj)0~>&gSnm3Zw}BI;Kib&xY!ojOx$1n> zR-MmpW0!#H-;w&SsciJB4g7BOzZvyk*!I5}^}CSskDTDY8TGF-Dt6UJ1#v#%W74*B z6Nf@9G*44X6UN1AK6vXCW^O$-jkYFX|CR|L{5va7q36coi0EJso(O9|$#B( K2 zI&_}TYiM@1Ky3z|x(WCvLT0(?9 zSyG@`O7b$Csi8Wdd3x9_aMbcL5+cm!J$i8-i|+JVV)lxm<^xsn<`}<*@BKZZRj(`l z)O-6}Cok*=7&e^oXf$eJIb0b=Kcq6BAY~lP6lXx*1#=^IX*}w*(}_wMwh*yiCv?+W z{0_q|wtoqM-B|(kEds&cW_#FPR6vNhnJb9hY1$uOH#hUiVM+4R;`YKVR-rZ4RlCW7 z9n_C*UVhzS&9_{Wr>?swGT_9bj%HptE<^xWei69*Zm@anbP5KKC7XZxDHDvetJMWH zr23>|nQ7kL=n5g?qw$*yV~MdRPF1?>%f4W!F>@iZ_QjRn1})uM>`?!djmP#HTmL4~ zHMXTpoc{fSD@3&$z8pEQBLjQ;kXP$ghH7nZWv_3S)Re62tH+3a|3AC18KG@pAS@@9 zR`l#KN$622DI?0Am&IlY5eeq6fo>n9K+4zt1CsO8?hmBF&$H;8N7h2kVX~lBVJ21& zJ2Q?e@PYwpXqt_+WnsJL?uIoh$|5!C6tEIK!VYE=ZL3OHF4G?7gO6S%75LAESTKtd zz2ABqkIj3QX_v{%V`QGbZUXPi(KGHOgtZdIMwligKhi&~oC&-!4uVG&u4D?T`xe29 z6+SsSds^Gt8K2Y5jj||d_iO0InPNUzF#B!K6jUD&BHqt*X0^{#3zudHspb4P&)LD8 z7h+Fsn$Q~{RHy~F)@4W#CK;i79C)bXcG%x)_-2CZbqPyi{lY0BqI_C?QmsAL3G9-R zBsPE}aQ1)qo`&UBNj&PXtD{8diJ?Psmx55e!{#uI4WbY3zjTMdsc-&L;h)#(0fq#& zjHZ3x0*z?hFS~cJ<M$zRFES22Odz76qrsa<((WHN<{aWdY5K9mp_m*PPk~A{O}aE@&{P|-T|(5xU5;aYs}mZA;PNS_6srXOUHD? zTti#Cq)5*=9BN+{x&6pntuJp#3z_5aQk)-Wc6}@B+n8}hQEKsRNk2)9YtF*gp=Bs? zT+Lc*TkCs?)4?^Jv>dH|vu#GsiKhue5TCl&oACqk2g^%&q}(~(phZ&&M)^4EYwJ}< zJKNdC`MnRReT%y_rV(V5JLs(xO;_}mW$fmuvcd*7Rm$Bg(^mQVX&Yb!m?u@*wk>OJ z?+-O;&lwLtBSbvZId~(fX?kENWqCe;Kh!oqyK-LC&BPk?r_#b2C+a3f1lFvw1iKm6 z(CUM%tY?d;3FIM!?W-4VFE5|{I=$x;Lo1-c4C^o6u0Qll6%V#hRuK6n-f25o{+;9z zxDax^P`k}`GV|-n>9Bysmjk^p;1y%VjSvu6jz2K36&w|}I#=F~>K*^lWVFJg&;?k2 zx~9+a>NyfTc9!^9QIYwmU~xmPQ$P@#swc2XEF9}$P|7|pi@9l}^{BK|?4w4& zD|#y^rq4M#FFNTRDCeh+;52DN{e_MAu(|R8KrRDu<<-lSz`0?!oBnY+;Mexg^Dh&+ zuO9ru90~X-cj4Rm6!jDq5T{LD&(*ug(wXgDDi?Dp3%LJ`vsZFxImgRmWJCCi$*|oW z8mj%+yn)^;cAkD;4C=TLFbEw-Fy7?dRj|82sM*%5lKZA5sZlNFf_Y`r0v1d=hngP< znCGiI=+C&RUA7LSIa^EV&XE>_M*k*pvb%FmTjvf}RnLARfC#mhR7QbBn zi3ZEkXv>the8p|jE?lQ=%Dv6|Uj46J^7=N7=n_0X!Cncfegf}3#iXoUzDr60ut=VA znW-RZj}Xx!r_+01hzPph@EF<>_l^y3O(g~}n+5)G{nFYq(`yn)nuW_$RmKpO!$2<; z2eV&Zxq*&BTRR|O7~YtbnLbRXg@1A|WUhZU@vw+4&JA#UA2I76<3_M{EHseQ42)0A zAG*ui9_$&4OndpBmG#k$vLC4WCFU3CyU2zMWjI}=qJ=A5gTxs$J?L#RUMvm;w;_vo zXf%iIYf;AXbCeJwTs0NB>BH91!-Oexzza9qapG&@Y>c7A*r4B{s)Ie$wt%Js^QvDu z@oa#_;j4p~@RX=W2HHZzme~tCfTEULP`{V1T;CJk_Y0xT@k)z@&_LsI(`_s6rR=~$ zwigRu4Lm$vIq`7WUi7@z$$?#75<976m_1i~k_*-PPup|Shjf+7LYJ5I9#Ka{-ok-A zhrY5tG<}e`m0HW7?W!V5h3%el(D*j1W4=G9!YJEA-lr~O+SUtpLxn*q3&sN>{0LnI z0w)6(r0jMlF7E9lU0waWXbn1F1OK9zEBA|S4spk_E0*(BG8}0aHT$yUa~h@x76RyR zUQHL}tFy$a9g8R#!(yWCd7hz0?<}rUT!aXt=ikvMj0AObzW;Ir{ujqcnst`fo9<8) zvoh@^Rx?$6jDq(}JSl`Xa5p{icvZwqi*l04-hJHg$F0)|2Aq~U&&MS`sDO%eZi5T= zjmVJW?m(bw;3yNA%^t=pTya|ocPEKQlHR%#bS=EtHhys~z#!c!^eh>W4f~d+#$;!t z2O_V2^Xpf_z%B@jVa1i}61~I;MqfK!aDjH1YP80bkxX&UHdI0X90 zn8cj0?J__5(HToob_ld`VY>WRpJIy4TxG5&mFI@1;)B+^EhLx5z zXf8O3>2a!7Jlc84z+7qic#)Q)n;yegys_j7xV?#|(B|@axnvl>j<44WcyKE;hrcfp z?E1*$s_yeDDjfxNiJB`mD^WYUtr(O#63Ox7%9aGz1xn1d=GVKYn%OWYYsAwHo4_ZI zj*OD_w^PLW0u$NKI{28}$rWePV5L!2%apkIq*?XXWRy$u_PC#5N3O;#*58PB2JmIr zNDb%2q5hJ`p5HN-;u|R&0YEe@i6p2AW@F=s5_~js!12B{Z9}R!sn-C=>UXf%+cnG^os^v~?YDCy>#XZ!hE1h0TAHsS_)ED5vn zSu=8q7CF=pJo>uX0L+YoQ;t2HZx=AaYdh0%$nads{!e8Z83v>Y)r7?Q{1ymmrsmH~ zH%stEp;m4O%f^-!dH?kcY6ok(TY=kq`d)i%;59$o)NRQetLPSqV8zc+!bCNeR4`UPD?bT_L9zEKIB4=A1So{Y3EU5kP z%K+(pXvY?`WT>WxThS9?afk=Hb2M z-O~;yc@Un*4+Y>sl(b(Dp7D}Sp;WWVn zYBVYkS`ST}LGbyMR%pjZP;-)^#T~ZF`KKb!&DM$k_Kd2uCb(v zz$FWmOc^$(R}UhG(W`?m#gYAUOfqR7-`UqZ>2s{x%xisxs|f(Vu1AEb4HCsH;0&rK z%IsTjZJ7g6GKzmI`-IEuz*oH12Dnco%_7McB>;78T7Uwz=uq@9GBP{BF}$!Z%w7U-(b8*1x@hdw5e&`zWTJ8VwThS% z%w^Es=I#aMXzYX;B0`~#r4R?AyBqJIw=4yJ-9zj8ufC0V{^1i$8B_R z%0!cZucg`yNABZ6XrD^r5WYHBqy~_us0D^!DzLzuZ{?ecO*MZ%kc4ONL-{#0L;b;{ zfP{ex@)5CS(@?B}{{;33+48z1tpw<@AP5n*9r>-Z+Tgn>&$;i4)8;Y9$A*4X`oit4 zWO3r;DiJ|Zb5cVaSa+YjJgK9gV3GGiBQkn;zwQ-xaNCJdc(WN7H7P{+&f7c+B-B_B zC^O}%8}+JJHpC3!H&Y*xmIO{_?el4dJLhkh>8hnlN{TfuW-$$MZo~KulMY&iaczz* zo;nSu>A@%7*eOrq1+#|7v706XP>RQ;%S^&2DUOMP6!sghV!*cnELyXWm(6T|yP`IQ zX?+aB4)Xk>T2UPyL-Z|um0xxBvbPW^-BVyPkT?(c6hV6f<%ar*o5Q5~PrTydmR$Kp z89{Bzhj|AQfjkX(%@aJmu2u??85TZdsI%0+%eZYRX2aN=r&q#`UI_6Z`y+Frs+gic zsAh3p&frgea1JVZ{XS;4;Pwo~kl-p(KcDNF6LyH3*L&7HFlP@Jx7n@^8~Z5D57c$y zsyE3E%|{F}?x8pFZ)MUvSr_$Ec0zsq(9?SDZ|R>H{kq32h(45DGBYjOspNC(!CW{f zZu=$Z?q}-c3}??22i-kot`@NrT}1FYV1M+Bg>J7){7v@c^%$2vTIvQGg2ypytyn+Y zyqkZnlKZ&RiW_yNLtgA=r)u{~7;*Fyv$8l0##vH1S*$LlLDELG7^(~MAp;xovcK*c zCwbEgZl;U5;dQ;QL^SA@3J21eE{c*H>OgzN)iyUFLaah%*zS$er{}}=)(bib--L+b zSTQOLHunKvN-B0S^-i=xJ7F)7wzqYOAr1E}nh^Cb6qr5vT2uJ>5wADNne#$4bbXh$ zR`VB~Qof8lCvU>l%xXp8@i2Oj^!!_~7 ziOrtIjz5rn{#PoP)k^7KuVTvCXnSfQHKGo*A+B683_-KPWJb^hVz&ipp@;9z@<`tc z5he9AJ=7RxjyJ&AE<|kCl;rRG*`*d8Y3ou;5^Wr6JU0$i4VVp;nx|@vd`{c>GG6(y zF>uMxife<upPJF+nabX z#qi`nw_C{t(*yH*M`n9=)|oa$!EmE`lRxrNLJ$9k()jt?*IKN?eo`(k_In?9%L4Lk zRiHhS15mU=(=F=By${V~yY>c%*KN@CGYr?Dt0nW#*yFfpFsenAPI zrqtEOx|r)`%f{T&@9*!c-s(~F$TNbC;w0W+gjH1@H-j6*1qE5}QZ+r4_dGW*8Q+hZ?({t|(Bld>E;>LuhH{;CDzhMETb<%56ha|TF zRacx0`TGk#X7t=1qqv;kuz*A1rr>S(ytp@$D;C938NHW#)RMh!6Qm5^E+eEZP5z&| zwEqgdEWMv|)P@Go3ub>+a^Th9fb=54#^fe&>+RXvQhxY`OQj`uO3h6{c`|Q9#EUM7bEV<@Y}mM z8nkUk;@z5o33oZTSxAVGLHJ4A92ulvNXM^CF8AB)e*>HF`ES6i>{xAs3y+51jPQ^YY*BOR(V+|TZt=SI9y5wLR=e~QlERzJRxl#k@1>A{i1 zV{)}ANVY?Ij$z`N=)+|xqv>$7@7y<07*qbQCoIXE*`Ho5VsPQ?;+glgyKkLvK{MoU zrYXNCyIx>p-(NLTWT-mDQt|ySwg6mfxa#`$5pKuZZE;x<#f;%%t4daKiH{6UunE`V z9$1+4qdV1@T><{X_D5^cxBz)v6G-8l`Gs4!*NoY9`4(>SGZ8H)I)j*dlOwQgvJ;?A zd(EeO@#U!ExwfU&tY=HD@Og+6?$N`cl1F^b9?s&kIgae$Z=(Jt=Ua1#nD>zbcF(a2 z+rv{V(LCL`zPL1EweUs;MfyIvZ$jlhEQTHELa`)R zV-Yh47ck1nr{P_OQS{2*aY~ZHyK!P~9b~2v4|C)*uw>GBcMur3<}*wUS1J-DymUpo zFgCxVEXa;g^`F1%uJrhw(rW>e6C~T^9Ca9h$}FO6j4^k(MGC#$rmbLQd2e#1kxk5K z+%2C*a#?HUaf5-UE;4Y0#IPFN^YOC%D3w45eeDlkcWb|UYEgjEA|*oQ5I4u-T;AiM z*Ieq5Scu)RUPrP?MWoq~=v|I6S|8q@apJyhq}RmC($5#dSPZ3 zkU6e#QUR^)$Db6r@sFhOwx4G7#?Aukz1d=2cK!%Z)?oeS#g=|OlfqV-lgHYVw|c49 zz+M~I+yk&kOD#;HGm+s!#5El3MNE5aY_4Kry!?9sX*c=e*os|h8r|M80)ZvbA7ou*bkY(f$bv)MrvP3B-^)*wHLAP%lAcs zQ~uZqC7hK`v*tZz@KSi=Tf>gZ%&*Fy&3NcRI4}Exhqh@dz;>7D1p5O9)MCn4cF>0# z@Kxa!Ls7cm)jg%ep)!JcU}H-zE`-roeP4_f@PnC6L_SjMoATMH4ZCku)D;WDsj^~?)+k-j*F7O;tY zdxSkwC&)^&D1KLtn-=o36{*t1r_TP$w@ zJ}iiVj~kFJ;DZrXFgoi7p91Gf3(8&2~jiHX(B!V_H+S)$Nrpf ztd7N*UFETuuM3~<9z2KODWDvQt|0Ue=hX8Zyz;tOwsYlPNyOYx$xk{I!La5Bs|lWZ z!CSOD0Se86o2}d6LtE*qXZxPQXVqx%L6|kckJH)N)QK+uIEUtzp*r;VJQ(4{!5^0U zLGI1JNB)~b|JH=R+sd8)B(cNLGDifP0dNYo9$qhdFzpoACY?csHyNV8UM*DPGtnHFVE03G?z%e>7CpD76w<;zs`P+-uD=eV5&>! zCIvI-8f4+Kx=WU+2*H*c?Xf9x95rIul7Tjd7E7Au8)uGPTPBP;N}jf zDsj#>iqEZvTTYRJh#Rg!jBsd6FW1JZkm7b|EOFMxy5#-GEf4ggK0H?r5X`oI52p6N z+e~NQDM87`7*}>_Xi90iq}b(4*#ydW%-x8B`vTT!z<7qtj1b}8j-L1gx1hs&!}~z% zm#`N+3`Z1GI34&wQO^m~p_#tyzS8F|b*RtgTeGjfm)8-!yY-R@Of2OsMxwE?G2De{W6sVsf~S z`}~GjnbiLW9-BcMW}o{3>c%dWPwMPCW?Jv-ao{r^)-wf< zpSaOkj-P3&8P~IP3(D;2v|DYR#-@o!%0w+jRhKlW<4bv`95-{*hNl;=v@P-cLQ-#l z^#n}FQ%S5R^EFm$7MB)Kzj|=yATD}#`P{;o=N!$=pz#rUEJdqCu<(k4`@r=Wx#AB< ze{yaYr6rucmL_`o!Z`An!P7-b8#VYOaj_PSpU5NFGLet=5U#ZOJuJnWM5Ed=XDNGV zF5P%Z`p|YKDqrHB;j70yHhLX*8ZFHwSjEn#v2KPC(4`8wP<{MR1bt4EBefRDK1Z_e zszz^_30BO2Yd{b4gGt|Flkh5aKRGr5$Kg~EaTh)pk9Z+@`qkroh<|kDV7CSmPBSy` zz2sEeX0sxC;hbFC>m&2f{CIB4f+KD1+)|@bwOqWTNd^Juvr~S-!?g4?#gx~x?Vh2g zSx3%tE=p_;HNLC&SYoK&R@9RJa=$gd=1^h4SMreJcV+GTD=LDysA%%BoE*M78+2QW zWq<1%Q2(k2gWUHd6H4c7y&O$D`L}Yr2iy+_CSPpvd-uBJZfT$~+Gng)8X5<}C(eEo zZF_3dthm!2xcr`3Tf$cfu%Q_alpGbLnKK9xIn@^RK}}{bkM_^$@wTvZPys@VvLkn zs*K$aJo{+DQ_~fhn>GRGTPvR$7XjA?;*EvVvYI{+j@X@W zQ?QtoS{Nb_BKTqVP+55)R;Ga5$A zc&wO4X?T&Z>@7PLn0NcS*&wL(b&}A+M)M_Mm}&NQg{4BFyPnZ`iz`L3DvC4pJz8pP z0{jRzpGf@yd8*xW3OV3;o3!3h7I5k163&zL|T4(!c_?>o1+4o&|Q+Hf+;f+_S zb&H7;GfR1AY8g7^;))Zto&LJ5+JIa&+w07yg~bNhwkzTMnz*AgQT0Y$koqk6-KF)eLu^Xgv6ceC*%oVanvEB<1d`EC_l5=xF47iG3v= zS8W8*RLi4*ijFI@gaaoI2Gnllsm>R{ju)rn8Hy4Pwij%bqJ? z8sC(39Gq8;*z+NFU|93GLTtGY5E>HNv0*$`+VY3>f4eT(m4EO9-SRY4PhX4HtH5(E zxvuSy+3j=iQBK9XOE@FT;#Mz*@r7Y^J3p}X?2vSrAKaF>imM!WNPCuB*-=@PxcBN+ z?1Ix>9uYgx`-9x%+pW{qC34BuEq%ruYtW#(g>ti>qjzcLKka!{-&GAE3z>~Mot+`i z)XGxk_@4$s>uTQhv81K7qEPTZEb|rF1Gg`;c$>c+uPO40ig_Wtd%h3a2 z!4$qV(`3jAZ}S zNgKsIg+=WK^>bdHQ0v&1qpEXhUxz;sX8|c!-Qb6`+tGl>>;7H`3yD|{-R44UnmBPU z`ZH)S(M_Do2q7QxPW!m1vRoIva^i(j!i9&XI^%mz7b6QjP4%}=fOtq}=6G_1pO@450t&S?hlD*y zz>zyT3e1$z^Qfa_@()O~g~W$q-2}J0VTYh5&=2F0;jYz3$X@-Lq0GgSs#IMpjtGqQ z*a6~Rp;rxnJPZlr_XGm{4taTxHaw^Lj+Hkt`O!jzL5n13rsvHI$ux0%oIhU1<8ji; zeDZbggZuZ^dLI^pQqpe5m)92x&cRG`1w%-gB)T{AePS(~_p zpmI8v<_I(q?nF;uNiX5~jz&Pc6(!z3wso+R$nu<)&Zvc49my9S)Np z;?uc_)-C?}E(KkqmGKwdy{EPGt9|`6uKR^J5^rdHRO{=8w{0K3x@RC)8w}u2MTaIW zxGS2(4qr*!)u`NcH>7{SZ^2%bzF0+6V(=8np*G$*Zh$!dyJXG^d2FeK{eHkKOTE|r zs_L#_PkIGF51Hw4&#nDg59LVMY@T18xdf5~(+Fm-h2*CTZY9b42EO}x{IWf2z>YC6 z=aEgZ5ll3DvvEZIB_2BNMSD>QFTF*h*PIp3^`Sv7ksIfoq4vjevg z2-1tm7m_KL^pd}g-$N>bMF zCYj}pUU`b0D;}2}nnCo$okv218iP6*GSj#3h2$>gZU+^|9j>|WOmghe?30K3l8;*K zmTg_n22@>qp-)SYAVlT&_AJv7m|ja7>i4ad_n{H)=Q^0Vwqkq7ydp;7^~IeRwK55^ zCbFtNjo3n8O55hG&L>+{yua@i$GlOT==2q210nOOoRxN27!ZtlsI&gb6|n|h=!~n^ zi{c1{`Ot~|+h5SD`7faR_+f!ukS2SvaU-9Q?U&Zf}G>^3HUr0eLeNk`p4AT$9TCrr3l0B0b zRNBAwn!MSCUBc?RhE7@mApAW7)Y?Pprd@eO^@m6q;Q9|`?O3I7fAYf+h4!z!B_odB zc~M`JpbPxqZ>XjM^DK|^17A)2fI{6RVd0xp?xy zii*d69kJw;tq(q})A-Suw=!>vRE3DKh~QM2(Yw^5s7SK<<$*7~7b(<)kL|d!_`8Gl-?P z>UB$Kd=f2^sNIFy)pdx0F2ZVqUZ@>TDIw2_6K^KI=;z1@5glb^{Z7Nqgp5F0N!eHzV6_s(K#mODmz&Xq`8+a}m4KPK|AREX#u zIPgS}&ev2V9um~%y>oLLGw3Y9xE0QYsBWb+6Y!~Rj9GB_p5g7sV`Sv6>I|-lKd-3q z#Na|Frr=ck^JFyBkjNGIS|b$=G_#FMis`orXU*5O=PmD;gT1xqNMLo=&pZ%BN9cVM z&9Zc`dB+cfMI4pmdE1|G$lNUCbpp0vpep*PooeG^8FmQeFGOI8rKjmdqLDx$!+*!i zcD2G1s>RX$3GfEd>C%Ax`FiMj*!wqFJY6$gWb@P^)Vr-nKjs70lf0{Eq#|u&F5KJ^ zlw4nI)<>C`$)EP;&J8uhI-bifHV5C3oXI5?C&fH_4|Z)-R1PrQb^R3I1Q8su8uE>l zv$4AjetZ+dNqy@+=3ivtSd%1g93|ND11I6r@iUe!mo5VViM;b7qpXg!S=;Vu+aGb6 z#EU1@u(HCnU;$9AQCx=DgtxE*( z3VM;xtw#d))1-j~r)3b@-VIEO=K_Ob@a9)l(8k@av@ZB8aG1|DvT&|8=Y3^f>7nJs zDakhm@zsmfL8Gtf&VF>h>s0>CBbG~bs>et6Q3v}zTl#G2N#e{v#1D`z_+ z!h*wo{J-6X{+G9m8ME*XtFl}bdifJppr8`moExO~mzS>FaSNAqGML7;>ft5a>Y-08 z(I2(%rrCv1#j28R@x)EWTPs4U(*ZddbR^tB%F$()#hY}gP^~A(fXGzYU(&s?m z%;l6+vP^?*=ox0lSl&x-?C_xjfu7r&$`izjyf*_lR_k+rmVTA2ZZK{XQfYlbrrNW8 z4QcD1T~qA;y>?6w!yk5}=0ZtSDQBz?Zz#>U|mE4vU##J7rxJkVg`3`Ud$@fmE$oIu-ESe=3HF ztWHxXdffT7U(6$9(qHT{;Fo4z1-9tD67_3#(Y$(qe}Q#{b!n`?-CUb#5g;~6z21GJ zFs^4{7i^+)WojU@qUT}}MuC6g%E3Ga`OW;?Q&*oxQMPT}1g>KCxgHGjn8psmJ3)SH zW>LH0FLU7r)TDG)ByZO8M_E|n6XY1A2lRp;xr zLs>xw=M={j4mtVz1zH8~&fGmn;a~>69b8_7`ge`B-K?N=IjqPP5#}Q6%#Dv5)4dk1 z@#v$xHh2@SkA604M6^b~d5glu{v63HH_0~`QMNm}S3yTK%7rf>4Q)oS70`oGQ3tnU zF2_!+$YywD*HUhW_6DLFk$h1XcWQR%!B%o?FnBR(dih*BmTiCP3%pU*LK@k~BK=I9 zKL$p4hJmNm;PILOh1D@|7?uP%qNSH9wi+gAZ1@Q zQ%&|F?TVFcJ|`GY9(#HjW{nGmIPpT#u{CU?tL@dKw)&v#X+7&M-LAuZ1AW-|^`(I7 z!8tHy9Id!)1?^;1+aPa5PLUW(px%dgZQhvCMz@M)Ew0`Or+ER}Gv{#SCEtv7F8^Ji z&4rFoQ@|~wXQqpdQI=(vxt|xrs)dKubi;uAan)vlL^(Db?((cK8WF?nY%(ru*OfBz z%?M(?-exg=k}+C}NsO`}(lH}1B;HlS2Qrs5#jDdzrMrAnH3E|QUtfO0XIAJt-cV)4 zH-q-a-ciK3nAhCRE3^^w(n^fFMfjP+6}_#lL-c(5*w`n|#6U%&2{(Jh{>H9-p5)Ki zh|v}It8~*0PpGjp1((?431j4N%AUpQtcx}<8^(FCJz0hvc4|k|qnw+i#q!Ud71yU; zFWq0E2D%b+5qGUZx3#J)ruAOzm~{sIJ7$m4`u3W6-bQ!rRUmpdH%2yp|1M0Kd+bGE za&;N%;rMv-xmJ{&Ywpd-G>7IxoTvfaBQp->nOs5*B*#+Ce>>R)yLh%7ZRsxkrtG7z ze(G6Mvx*v!cwDWIcOWx@W%}tjJL=nA>Ocvegi&#)q)zYGlrE7&6yPW z7K&y{z)A6;j<1|9?5ke0Yi#-8zOXr{akDb^Fzx8{6y^CK^`6^nZqS~Ns1Lv-lf?2Q4+?uGx4 zz4s1lYFpREaamXvWFeL%2w5V6iojY5L}{@jB1S<$`m)g>DkZcqZFC_50-6X>ktR)~ z2?Vm}paMc@AwZ;t77_@gkYsv?d!4iIKKtxb@4dh0-sk!K;e(l(8FP#=$N0uq-tYY? zl+a^neE#VBGOD+xR$dmFY$hvbpQrc5-9QeAO8oyp&EA60WMt7olLak0!8;XVaP#yb|ieWlt zbFSF!J-P4PLK)?&l804w+UUrVnZ&~$x!tM~N>$a|f-#N94-3D$_u>q%jXEjW2ve-N zk}C8=$Fky{U&4?j(Dkq}C~+JM?s)*5sAFH9@~{EO9}dFO3_wRvTQe}Xe!`G#a#9<>K_pLzqKn&^-9K!``i{+Op!vsFoD#(vn2MXw|b5Ac!Ot z1c}wtb^*A+LsQUJ3!sV|Na$6>FBfTilOjLun4852`7yBIrR@G5@o!(1Z0*)5tGq8s z=yJ<6RjDY!)wzk8v0XR)=oC7(+RJT+@|I4qY0hkYV{$pRT(k!=<}q&WBQ3V+t?B6D zBdf6_S}%jk-XU2q0lC&nCGTU>& z~QJSPmDkRuSUH7%h9P0nl*eD@rW|}n6Ywn zw)fw~E2S9}gscb7@xIF19&#jG_f#c0Ol5Skqa{`u;DEp0PVcpcR*8?HMz)q<@{k)46 zVK8%0sL@SvHjAN!93OiX=#_sg>W*yk%3DtpAjIz05Vs{?%lSRDNSYm74b_2MxsRpx z*q#Bn)QC6gnl}=7%P)MZ;`4E@x22@OQBAF;MFTf>{zyg2Cz|5BVLIbFG$yvzSgsskZ^vF3Gc$b8UTk+Ynj%FMvmwJiLtWzH>K%hD0(S?N}#w(dm86MQGk6kl2 zi9x8uV9I9`AyWJh8Z1mS&gQ?>XsS^;IU0*Wp?5uOWg=>m{>m^!IbZEYvY8}0myXW5Upm#;|5c_vO6X-BB zXadB>6|d{m2J}d()wWLZc@SJN&@M;=wFZW`bHO*mZwif>gEV+}MT#FBYcVizEaChs zaYF<~JZabbw2t#tA?HW0#} z@puaX=@+(`->iI`(#K|+Bh!q#IL08qQx78|%1ff9z{E5xrS51@Fp1SUt6=1Dk;}XW0v4^Rmqp!DD+f?VQ8gujt&-)J>-S}g z$KjPuraHg(p6cs#ZlY+`1+;c>O7+!;Wk(>)e&!vj(|V~{CI-Cl|RF@R#az=&Y^ zE8F*6g;*DaUEeQIMbJrraUExFYRac*0qk7G0 z6HUiU9Bp3o7vm##!_Bw0HKpWD4?0YzIN?xq6IiG4EV)ldg0!H{c^B?3ukLo}YL^yq zJ%x;02S8)z3SwOsTh}UlDcl^S7NO&FC9mLRH&Bpsg⪙Fp1x2x+cm`HdX%3v_t?0 zH4LT@j=sebl1jrGw)btxJ3Po$eo-kGs_?|9NPQGFmYqWvr|2S^~|(mcJ&hj8@G;!Jh#tF@1l ziv~@{6{A9)VL_T0IL4lB2gA$X{Ax`f)uvfZM7(K2K#ZA#FERqVkf*Sxup*#Xgx*t~ zjB_(AKc`3GJKo#zy)}mD>G$qRIl4}!C!C7yRO&(!=T%9~7tM2R>hG-4_Sr$w89t#d z3jU65soB2@LpYjUplW7^B{&S9!vR_loGF664Ixl|1_lI1er0(h-Ak=)9;0?v)ABkw z0b*>uR}8-K#EJaHOM$+BfCnXdfH2BT0TJhwXHy$^>k!%lIT!#!O7}ED8H_YL(CN3+ z<-G%q1bf=~l-sDm1bwOUzn@kxlLwBBo2muGcTS>fqWE3+_D;sRPUe{A&`;{bsJ7tO z3;AM7Ed`cdytsDQbu!nEVP}7Juh>#G*`l5a0tbJz^7&LvT>}qxF)j^bq_vy-%GacS z`s_xqXsqBb4_O^InD{bPW1o6)Fp6TODwGd~q&v>91(j=1CVdADj}@vB@20pCzt4*o zG7CPkycf>!$T+dL>bd5~@Dnz~rnEf0R{>Uyhh2;IUQk>AW6cG$s7Dirf=omd)9!uh1}j*UCVLMtcOcNY`QWH($`ID&b6ab}?D zA?EdT(4N^#Gssn1BV6$#(IN5TYHbeY4|Ef`Ys_)s{Cl@bZvZG=zdb46W_pW?&Gem} z31$t?RJG=#xaluN>_yzl$_~*5Djb|)*`CB>mwQF9(ySAiUP7LWfyWo5p*kx~WnqVS zuT`i0Y-Q{;-21+&Sfy`_psTy>ZFPo9Jo2q&R4DXG0Z5x|r&^V}+y&VHL z7cItBptp;kQP8+(nME1!Cvk`N{d42W*G4ozwU4oVrJ5(WR|32X3ty&vyaUH<{Sp0S zic$}ZxCQ2LMQ;9$2J1Af1)U%V9z`$RE!+N&C#u@KwWT5*Oe~0{(K}kjAz+(UQ~znk zO7$ILKJ!NR#Wtk*X6#^7fIF{cvV1`+HQUXqiQOnaBR61Mif>_i_#B3sJLpRC*P%an zP|?}SzGyN^l2hQISHKIx)#)aceiWDcd(YoPN%R;hV3W!jc?>`$EEKcyip&Wa#N`AU zd(VRj)?V(bL)t6lz=^Y-Y~+H?nkuvEE0@6rJjqHmSjNJ8Y?Cbi>>1+E;r}qS?SJD1 zW5s@NqNjz1WZw^%k+(nq*DmLh>MsK%^TXLIvXN1q76aHxih=Q7F%lyU_uqC`)`^v` zU1`tX+uvP4@+v;HP$S0>=;1y}woSerzFG^dkDeLUct)u@ggLijSg4be)b5S&Hl%Qx z@y~vL75iw%B1symMZt=*E~D%6$98H?7IVZ_3AB@Ynv1j?#$j3Z9L?!g0KGOLp!{-| zn#_2{3+vrl3Fx$)6zq5<^ha0ahZ}K6I_0+Lpg%;3x7{C=-D*D_)SHq)vuVWo1>g@$ z-pIeu#K~pZQK8-T1(3?L6yR0#Ew|!*&M0 zDab?E&eaDl9?kOf-dlyWjGv}$QzBj$iyXoevm8FNH>c)iF#^jaIpT4gh&oPluy^`d zYw~Jcfd5g|>U{&A9@)8pE!-a=++yf7pqk5 ze^fD_p$`=~>Sbj*E?^(|#onm3btrp2an-}$XHORCF8B2waUxicIM^hJsTsO?=wP3} z&$IAoLTq{eFX1DdUA4%ntX94;cvH;>aMEKA0DJPGn3LL=K5Q>kxV)0zL3>3;rw;Mw zz8f>Qs#PXul~b zei!V4QNMJ`3=>bi!8Ye&Kn=0w{;AN_l+F<3sLWB9%6M(f#8z4e8<{#j_q@x6@vf>D z$82mfLvvZg`X{Z~Hu<0V3-xaUpVU2hgzXm@LkXA&HLc$e3}Dr-!g9p%S*%5{=@~ z+YN0T2Pu{2uK+Cm>UfG7<-xRP_-oPLMP~-39UNXqX>40SPM3r&aQEL1(PXxTeZmop z&IOkQra|xDFnnD2D1bNKl~X{r4&Ib?Y ztK9^S!Cph?=K_M4ahLX{K?kRgY#vd=CUv+=#}`c+2X;DYP()(&GQ_I3g^`APvK_9T z-kf-Mk*s%~zwdlxf+sxLfE}O%bJ4c|<59J~-C{Vy!vV#wy6< z)Mm6X4L(oHipz$>tDT3g6?Lbz_tv+DQQLzfEw5ulB>qs~aLR(dUk!E1O!M&N-i(2@ zLp{B1ypC!rv!95#k=4GuE^%Q`!;U*w_0n&+tSu?~btnztfdd27;} zvvVNjL5Nq5YhRf>ogFv8nCpelHsPn`M!w;*QnUm*kaBwa`)V_XW{rd^(bzFmJx~7VA9M=!*eubE1%~nN}3+*Y}>y2 zlXx`%=}(b<^2@ig?Jg`#|6mfUCbCD}A~L_vXplZcv44cx6yl=I8!zvT!fk6xmznD7 zv)(U1$K?yPi$nHJP4j0NLQtmd7{^Ht>=33Nyo0c*kt83q9K&Lt*fka2JvJP0Dl_;OIrE(~DMD_;npy@p7&|P%UfB z70sW+pOY&SoT>cwDK>KtxwUwlMiFSxft7Gj`pJ~jW=wjI;cq!kQ)ZG^8Se7BZGF7Y ziGfvPbly|28M9Uh#47?bN$!}@^@%*gYLrFyD>7lm=-kb~cufZ-J)j9oJ}yH9JR$B9 zS6K-pU{IR6JX!JnQGZ{3}V z4WDHJiXJ9jlr-dHqI1;*KNzsFG2!ZPOckDW%f*y_!Ti#Q=nS9X1Hx5bPvMBD{%mh} zyCBix%kqzn!s2e*_Md&(hgkDBil8GDFjdKP`Rf>n^1hk~3f?`H)$Ju~<_(1yy`x@8 z^Pb;bIfToKwLK-eyG2Cl3SGfKBp2}y`G9@RJ3W0yHrvBm_Rb-jS}(7iRe=czO7&47 zaQ+~I{dNmmp>wnIqv@C}`d*0H@4ZcYQ;~nly0=_O)N+pn;WTpTSK#z}PIl+>t&?k3_F%Kwjse zA_zx8EO8e@NSqD53)=VnW;??4YIePUa8x_=3-Am7Iwag2>A(m=4KcW2+dF1)FL5m= zHv2TCb7W(B+lAU*AXu$j_cK&_rhvmfMXUMb!oh%C+#0aU^0eS^Q z6e+CdY6_kP#=%bNpj=fm*kTw-^zyvxWY*K8c$Fd!GKzehcQxb~=_YkVbWr~Iy23rx zA5SFisac}&hp6LuX6#3RqH%zCHZPQsGko%Q)hf8pH_mOhIZ+M7RX+fzO>+<*SYmJM zj-Yo1*fr?)^gJE70=TM9&^TLoF$3_5F1g_+|fVx5eOv-e&E(ASiSn)ModiAr|DIXwZVzwmFK@74)BJC zm^#OUeIW)J{X+vv8|RYm&`NI45XD1@$3*-r(T~fsf#2VxG~R?$->~9ewWinlz<_z# z)b*m^az=4GHjFRfFJjqX)HzI88)( zsH13>5$bO2ZlC$0Io4LZr&o>2@?<;HHrQpQDrJc3Yi_Bgq8m)0kq( zUPF@5iwO=k5@24@NauJbj`qCopEfp1h|7{!Ih%$RDe}|%Uft|WG)=jbl@nN z5vWR^4`Bfu8fs8zj83S6T_@u#I)3>AZ}CvDAHXr`TB_ZeHO+^~D|zi{cMbmORCq7e z<)k!ltLGGE+c25-!=S!mZEj5)Y?jqBUBtumi!=to!apeeV5a8Bg|@WZ;5-MX#v2}+ z@jN?X_OfQwA=UkS*nCRV2}8WuJ?0!JGQ=yLHZ;}cu4jxeHyu{g(8Ppx(>AwuxyAEe z>!T!mr?XsB_|f5c?^_L8lo{e zEBo`b6NW0Dq6YuLaZqa=@f9j5Y1Hbr!MhevQP;W=qV0jDQKiycU^f*HFSfy_XaOVx zSlG#fq``ik4PDtT)h3K>0-SO4b(SH2Q^8G~JH| z@B|R4^H4uy<2NZKsbJu&bKLfoy)A&=5PAx!kk^aX%h-fWI}u2wiSbPJ4)@5YMRh&^ z92GP-4e#kGfp$)B@7;mi5$cyd*Ts@&29_B&gMyP(NwYZ#P>{U#xg?C*MMQ#qOql== z2-u9z3rK9VQjmdjM-^wy?7V{L?Fo(ij*VpPYPD}tr_qU_Z6ttxC|gEG%#%$sr}R&U zC1>Qc`bLcpG8}BuJ3u#GRrE2SK$jH1-F1>|*#Jy**@!vsYany!0(EYEKyuJi{~y^o z=kbfG47H95NgHuCmm?d=UUrh7?ZuY!6;cwORGKPymPSbMAMg}-9S}nOFJ+H?_ngJK zO8sa4l!y(0vM38rIQ!U!f`cC)@!k0t3#vW+ogr*X6+F%;vIM6w;b=jz6my_h*GtyC z&-kOCrXE0j&QSxuNZxLRfDfsL2#@uWbbOBORDi;K9rQdZ@_kc{dp&Z>!GtDV)(BU-=1AsC2=OXZGUD*A5zXBRNE_d~|!>}ue?S@}M&$&}mU_wN@7&QY&+P8OXiFSRnSf?Kzy zd$UA(`kvXom>;GpjZ#a@G6&GAzmidI1RC-^3fO{hqc6F$O}WdSTrPWSv-j=4tOz#+ zX;35>yr2J9{;Y4G5i)oHHksf6`1YN(C2~eMxxZes`{!$ZUn#?G&#prc+DSamQUdw` zpe+r1gI2?UUuJeV5_yUw;RI5$V4w1@u(E-rLo=UQ04qD9P1bhHHQ&S^IFIzPWiP%- zV+4a8AJ4m7>HUD<@M3$i{@tqsb;KDVrOzxSU%L|m%?9?Ab3F1xz^YA(}2 z>>LxKVm*TXn?)fCg1F5JGLP|_D)TANNP!nqPy&_}aE#zbC@br=CBj7D7Rqwgx-~eH zU0@AwM}-3!qe|gVqG1)h;3}*LASekyc05N3q7T+h{iB;~LKVPGZy|;@ywxU*+W+T0 zPT`cP10?<@@F)ZaXiK2H*Jbd|oW%P#{RcPfTmANRg_GcKn}zB=arz`{Eny+VdAa#* z^aM0=OW*-N$N>l}ir^9;fz+;dTH1ydfitJ>p8i{nB=Fdjk;0V?SrULb9x)Lgq{u*D zuAtc9m2Z&xR~>Mhg4Mg0S%5OACY<#pWD3v43uL4`Ize{f_YA}T>OaQ0zps4p-%0L^ zhd;6?Uu7TRMe@+}`J~yj(lE?uM|Ur&R(_lkDKjcTHQ1)`&P0r^&oFl%oluQ1H}xXy zh;UwlMhkLzH#nJvBVKm4=BID%-H`$)TpG0CVPU3Wq@*izX3Uf$PC2cs(XuzdUp-m0`g4Tu*)C5- zuFzWjZNS&5zFwfOE^NIs9dD;vc`I+uo8jmmxVmvyo>^I26dy?%hHhI|P&Mj|9}8cL z8U`qj3QAdLYHxDO+cqVZL@C(qneo}vCSoU!quJu5FVmq0eSR$^M2(Iuw1CigFI0Qk z*<{7^+$v$~qP}sL<#pp0s9N%oPjLPyCG0a<=*`U%V9p*6h+`a@4hnJ#D4Xw8n&Xq{ z;GmRdoI;c44aCduV50>us%mdgYL%TEZ-1crimdpNH4DEPBt^@0BE@N?^OskoxR`K9 zE%JhL;b^ek&>5o>9*PW2+@26JE9iSe-M{qjE(dFaQQ7TwQ~J#j zOG1^T$zCnTf&D+-+Sa=x5x6aCG+q~IjP7{gvhY;laMTlyr%@32SF z+A_is2XdBTD&vzmNxh?Du_{reB3!U$(d4y|ASQVhR}(LiyH!ePem*)~7~+jwcmgr+ zDTFT^C=7?39S+xVjw|Ia{Z1RE4Gy%IJtMZ3C5^}JL<9~RLtob~y_7xu#n9`uplotQ zMvKidcUk;gw^PnUER%8rM)((-G|8^lB0?dAqO^}qm)16Xu|ppMn(Ynukm*HaJ4t<; zQ!Ql^qYnOMVSB+qe43HX`-Ayj@TX0XK`I^l;v@F%nAcrCX_enb{Cax84S36J;%gc? zo^C6_yNNW?vr@F0&F6`=CSOBdq<@k2!Ynw|A=6Z1PL}m~&Fda@koyIH#~K^aewqoRb%cr#@JH99y7tlb;*^sCV7LDem^@U z>t~isy^)6r*c;$R=9p*;fbq&n9NPK9zR*RpO@z=U`z+#jF9mGjsTw zo7bHJQ{GmymQ0Z@CDG4E>CS4T3Z=3*!EEiblQJXPI$BjQ^x~G& zcr$JpYGABem-E#~zK-Bn>i1^a*4Ob=ycdJ_A*7m!m_)mLlM3Ft>OEz{K z1%cArtAg;E-r383oVLf6W{p3GVHvtFetTUb0ZFCpBxL@{5$K+NBmWU=WMTU&Z_M@L zw01hWvdHvhnQ1`?lkpzSz%|e!Ku+G=4r84zO+!7xTvvOgN9M9`>2n5RxdrTAv464U zX!9fI%A)cJhjRa_5@csd@bfi_$iO&3{|g^3p|#g|+wgFRaVJ@)MvbD5j#u!QzMo(= zabBEw?Mu>8n9tGl89>ZU%SJ3IQe=;hY9zjzv9)kpc`V~eob-LzY6BwL567EZu(D4t zN?!wqV@#bBt*pG+dXc5IGdqgYD(`z8WB*`S$-;Hg>@w9P-m4s9#~XGeFqw!NbJFdQr>m&LA+DUVIB(*W z?vbJgJBNP^spcBee=&VyAcxdy2rAcZWdBH?O(vLmJke!!h99|fg{JC8>CRkO^bYOm zunXA~tz^c+6bw0-)=ZitjH(8za`U?S*^pq}%4mM*rrAo_D6-M(X$($1B5zqk=E5Rx zT9X{*IItBTRKwNd_mk8*1WHmk1jyrG9Z+~sFfld@NeR#wYd%;f4|lb()xr=isoXbi z;Dq>U?b3wH?G_Xs67+rD2q_0R!ym^@c^*|JC8;Ck>vlYzXo_?+cHy z{!}6s7M6ilK}mBQa@X@RsV6W_W?7Z&X_Q&z7Rds7tP>ZK1z-*!HGomNyvr z*Rw2DQSOyJT6$o8u*J*i1)*)w79F#)aM{iF9#5dPym&YfSi->hVdRXshuG2~ZW&;M zj6Uf285>lwq)#0_2N|~?Ei9AFfvu3J)H8u^5-IvU2`Fwr2X(crNrna%)3Z%z6ecw0 zi;E-~%oU*R1@}Q-VOiPxnKaD>-N)FN$&8ni_CXMTY_A zX||=_D!oHAWl=7v3_23+SAp_jfn3Nir&!WYy{9mO3n3@`ze#mpz`$BH6%t@iyRw2o zu-9h<#A?BZnV;yA%)W~^>sw-CXW+5hg^7J%Wg9XRG2&kafVonBrm%o=<9kJjs{%~6 zV?bf!uNeioem|C%yk}Iu!V8{*^c>v?IkSB$kA;Cp;f~!y^+j!=)f>5sxLlHrMVCe2 zXap;3ZF-0$we(SCV`{hj@waNvIOpFYn7AlC)Q9Dqkq#x-G|eh<8CAQ6s##R8ojmpP z4R-oF;O}_Tl4rnpR90@`nxShDsZPbDO%LmyAFSgV4uj}$5g9KU%@08Sfpq+tT%OFe z_PU^`==9F5lXx?trCh?0eaNNE_c0YwgD*GFf9K2iFd>M^(hJM**kY=bnz2}Q-cFv>ql>n7vo=$gDz(PjkaOz{$5zFgKkK82O#OW!zWfBbB z($m^bvJ7NNe7tdVS0F5oJsxAz%=fH^=*9CiA<>Xxb_(_Gc#-?hQg>;veKv6!v!ojNa zkj><0KXd6Dt;&43rd=IZRF>BbFj$HZnIj#PUO7#ya@SCN*UW1 zoEH!+bNHt-6pwDicyzmbgnunirK}}yrBdqkU-jvD*i~45N-b|b5Og*Um;wtE`O(ds zVZw@5jF&U3^5&uzLEGTx05}-eeMBY9iv~<|I@ZV$W z0Niz_GxB5w=1c1qkm5a*0iIVuVCXffc!cS>Ot)K(dU@&e^|nzZt>GCnyO@@-=bQFj zf*o(|y$JmgE9Lc{HBYQbA!iqw(nkWxMp6oviuCJgpYSTdD8-YJ-Bam6MZbapt7fVMJq)ut-PGzZd-qt*gzPN zCbr)JWEf7s*sD>}K%Eqfj49@5W_J4y{b+-j3(OQ9>`K`W@#O$M65KIMx31Se(!ICa z+N^j-LOsu=LZlyvm*pcNp8=BOVP@e+9g&j|h_Qo~0@-;HB+CI5;o)vhC3-o27%$@t zwTCwev3Xs#ifCgu%}KMu;x|6p3&OCbjtcIkE4q?5ViUcG+jBR^zj@;yuqIJIina%<&ss+0VbnbIiuPNLxQ`bO~V^gwaiE?JqN)lF6s*p>N^WV zg4KPg$fo=Y!0Nt`i_Mv?bcsl2*!f&9mt~&Nd~>#kEl;DcW0zURyEtByuw_jTOS`DT zQW-~I!sHB&_%XXbQZHM0$$cOIc|vq+sJ~NZ!N*^bwI${sxRf8e8%(?#mClQFG(@Qq&0T|-x=AmC5o%@zyn7H(JyqL9&=4{Q#*wQef2 z=A4+`+NyJYfs)LkAojDlP_e^O=*BOatl!IGPEjp-*M|sR*`4agOO}5gsh%0ek5p?P zi=~=%<&~5`HD$@uo7sQ^!PtX?YLeX=fc-hJzx6>JH zF=;+zim1^?MvNhT5)_|aaDLr6&5Lmf47`=4lG_3RsaSJv@VIP}$GgP3Al3XVgX!&? zS1@gEl{8c*WtN0cAF&1u1|Hkue-A&h-NbFznJTQouHuW*p9Zjv3V~q5}5{+R0@|e@qvHN` z#P)6pZehi%rAYYAZO4>%=7xS*VTCni+}V~EyEm=vce+ihfh2RsyORwJHbt^v+eg|- zKK;hs$+@Dm^Ok7+J5k8~J#YAsCzLqX0##HAV7OV7)JGR9ccnC?7^_qgJZ5vOTzl7l zy}$c7k}*^yH!1v;M8=L*itwAKtqDm~t^2$b5WGx<;OX98^^3m2#9WPlF1KH&m_966^Pz5D%?6J6PXDP& zWx|$P@$4y)3Iq}|sQ5$Z-zk(?ebqC@N?oNkk&bhlhOt4pti?Hiw)!+^h|Bwpw$1GW3vVgd} zkeQM1M(D|ZyrWF7cSqzvC|mp1=e<3~(5MC8fgJjCm!xsLW!R15-{ zZ&TLgndh8f7ku`Yq#n89pOdf$aNrPJ)h2Zp)~F25x8SX3et6K{d|m`4dTBKAH=8X~ z8$*dM94M4D;_>|8GEHZqqN1XN(5O8Y#}YS}5Bkpyev>*nE%qxd2ypIjTyz|33m@Gr z$|c&Q?My@kGtZ@*z<$;1HS>}uB}Fc zK+#4Mu?F=0Q*{Fs!d6}%0kw+8>^7Y@2x!~cUD z_DcCU{rfGf`rglS(9ewnkVIgM8nF{t!(psH$8k~mFmM$z>L^RvZh#tN1VlB%Fe6TY zH{ko2z%Y(|AH?5uJKsqCIMr8Iw~e@or?0jPujb(MoGNxEqwkRDMf zr0@@c*ryj@0PQ9F@XQ|B!5#26G!b^ZDO?fvSt4c~n`f_D!3QPgZXt4ph=v;Jh3o}P zWb-3UCTAi%Uxqp~Jm}E4H?LfC)miUr$3;__jADr6iSMmwlN~`sElGBmd7V60*<134 zl3>T)SURZJO4=)T%N$=s4Z!xZd-#2wS(l^CwCMO0ICUH(=(@t)54*;|YJCGffUHcW zs4ybb;Dg9JMfpXm+ZK;W#j&?gzQ`8w{;fJgh@2C`llzB%5$w($v^Cr~BJguCZa3dN zDWh-Jt{&|2WN?wq2iaRVz}v*@24+RcQhY}3tAw^c}r%9z3=JUYJd~tk&hh^5bwe2U!_SA z4DAWP+FdkV_@52!>!{HH3sM>G8&=?GmHK7Wj>-f#?66`_d>rt~C)6uKHPhVCZEa9} zfUAVs$lxhxh~K0dEGZ*o zUuZs{3YNGr#HZchf=LE<9KRfM5TIDH28a)qkGyd{(lTz{7{TLo(glVNK&q9nVU=nu zFlAXvuR_j+-zw==tq|=S@{#EQ4nJ=aV;|{Y6g+?%Uj7u>>a%N?QNFuXR8K_vUGYsx z(t(-<_T@{b1DIw1tJ$spCo)@G*?*NWM~5t%Z8t{+lwk)_tH~_!<}sDBkz|9&Ma<( zJzD^raSIWJ2(9$z*LT~=MLoK4?odf^n&;ttILu6f0Pm1dcvMgts1zIb#7~i)imEpc zEVryIeLix4s7k9jWe|^?8>ST)bDP>;IlA>a?&@o-Au7E$&#=+Q6^cU7U}d+Q8>f6) z#MO7!OFk~)?fLE+b!_sTF{Ohu3Ngd^J&%jstrqATcj4l%k*=FJxBrD{Ni+`zC zmy?CpMJon8XmqK>o%qOT*ba*Lz27o}m+4))BRfbdGBy!X1+y;&VPml-XuK#{Z2#BLGcm;O_U;P5&w*1ocr=*K%16v7*VvJdbx&#aGH1|AT%D!|h zl;QL>ct}hxbIx1Ldikw;nRxKandA=L&qO+(q%Q0It8oC%IEa7XAJcw*g0L=$!(LCS$(`wy>YrPysTo0GcSH3TCbI5(l?b&C>dKr8o+Z7f+fF|T zdk4EeQdV@k+?y zF-+9JG9gAJ^c8yRnr+l*xmM2b`JHW$H$!B_%jp4BTN;DiS3U*EZw&Y6*JhFxCZf?e zZ|~6(!Y$KOd4u*QA#5I-hPv1DEOc+c1)LV&BBp_0pS;~O#>Y3s^+pVKa9H?9o75e| zCb4JX;Xa#Q`9d}>H-?(GtDRg9waG@F%^LP%Fs~xqDmLCx>rdl?{ zj*2R1YNaveXJ2;BUsCFl`6lHI#q)lFjey2vzC2Gr#LkhAkD6PWl$^P9!^_K$mrb+X zY2hW(LkL#o_<;k`JY&%0#trWjBuoDMurF~>^xm=HQmKHZhhtDAQhz=sd$=PTm%zOG zu83%+@2j3opFq=jh{|f}qa?~0xw$2b=05$YB)7>p1KbvCR_I?m4eLNd?GHV`t zdn$+0ZcZ8uS{jmV!0M+C5^&2U{wbm7I^^kXlP3?F2&nVr(+=iRAxRklq=wEJ+pNev z-F{WMIZF;|GA5Tvr~6m@MKrkkNqsSM5ldpv0TgEyYTfW`jgmlntoo!0{$f=(fC-hZ zXJu8slZdmq3&_NY%x_Xp*dW}2TWhmYljM~@U9N}Bt?3=n)Ayz~N`>^`7AzYs39K8w zOzZbn=MB}qH7ZDai@U!YN@!I(MU-s&PUukt&WobU1oSpLK{Q70s;gz&s1(2NN%P*~ zX2s7d<^`w)$?_5@OstV1K$~w5I{lhAlgVPG!vR^+)_jHXqfNbDEX&Kx(T@NsCm*_y-=$ zFDMP0CemFJ1?)nb1f%J)A~JHM+MsUbu8o_2u7_t{*Vgl?^UX{wX4G@?p0Ot;2G;hN zt=Rl3ciL8|DI+t_hta=hkbaPQA@O8!3wmC?l{*JZ%(FwzFT6eJAKfHJH6Gk7UJ^md;-7WdJVr})sQ@5iiX7*+Uc%hCbDFQY0hb8FRRmdCi!lj~0 z;0_+D6hb6YLOU{Nq_}_yZQsK7qA~ootF!VBj(dx^y8|@IRT@53%EuWBloup+C5j=` zw|+ha;(ktHVx-dJVbz6Q8cLJJOefP!Q1pehrV?Pkz*%kyXLRy`Cs(pmmX|WVWeerZgQv2 z(+XGBBASE*r^)d`Cm2wI2*ybO*IPay6MaT(P&R&kuyD)7cy&clS(L7sqU=#|N_VHR z=noPqkq?8?&NK&pQ?87ML#K|D^c2Uz-O~L$8+)6NcM(Neq6}L|d#Z#`tz>0+W#4Kh z?(pc2m}QM>CBJn&I>A%ElqD~HMJ0|qA;B<8=kWRIMfDbe`alTa|Wpv#psW$oFO{ zbsZS>#0{twoqiL^cpD#y5iL(Uu3lJ|o*nS1QBOZs(kAxr*m)-I*W@n{6|uaJ-UQWv z{njr^qDs=65KFS1D2_1(K5X)@9@oh$a2b`!2Pffu@^MT?1>TZ~u88aDgM);g^2?1V zmh!IvaS|E@zUM*O8*}4Z#O;|U|nyk9CLRCSDN&w(|!Nul)bT_fRfXt;zg+MJN&GS{q-7JAKH-PqLXhLxDCJ#(WwtQfG+*LH;j{~S}xSUPC;9TNjig(eMZ zsG?Zri+D8#&^r1Dc`Eh{D;}D6zKNJi&rbz}}1q{C0kI#ns`xt$UZi-cr~D$3!nCdEH8GyW6T{_B-a$9R{H zQKZQG(qEc(z~?_XRtEPa!hj(4?>MvnO1N?kyW&@qA)Vy2#`-s`>BS=wcLODrW>YKC z-WS_5YWVS6vY64YMlrhrf@}41?i9{$4?3kq-)`2Lgbek|%9^pN%y^3Qx0Z9TJ4Z|a z9@ithYc^c75kzqW3T464+VAti%_FC<>WqTDx8 z+l!}p{!w1a{Ka8}!JXlGn{QHm*nGw|*BvR=4=+)>G@@*W=H@k>@1}WbOPXQng7?u< zV`7bw*($RZZEdT4p&hPeddW{(DXjp`%ZK%Z^01(w?msA3@o$x~c$4w^-iC9w|9-8D zf9uD8cYRfQX$Vym0LU-)f_(0yvT$TYVMfHiqF#6SfZ#vd^`Y=<3mdux34f`P0~IAf zalL7cUYtiOJUwDnBU`^Ds;+rQ^Hp1gvcl~&q5O|j^ESSA zf(xxXp=ch;ly7DzoSIpZQyaR8v7&t4)6>Q`N$FX%2+d%dt%@X*gzGs40*?W0qGk3R z+wTL$OQqtdjq>>D@DiFs58+TzjXt8E(}Ot+!^?VnM77+W-yeFy=@ti2PO%ke8MFt& zI2a9I)0r$=#*T=V#6oTrPIT_3hWLIC4P4T(OkC3IfGt(BQST_SHD}UfX@*~)iJ(c` zg%WNJ^AP<#M^4jD>ixjwb7lI(#|88()(*3?p-CPzkpx}T9Ojc^!1=A>=m+`6_BS~? z@)-40Ib=!CX=OI^JcFgUDp8Ibdnu`yG#(wR$M;%uF6i;7sJ33Kx@Q~=dn-)Cq)%eN z?!gC1=a|h%yPsrc2=Na@2M}H*bEEsJ$yJ@wOS!i($!w<_VdoK0kZdi3^EHiwLM^L$ zkhkXDWZ(1>p`kgZwN2Lo#fOPO6CR%?Hr+9Cw&!-1dDZ&2{=!ZwLDiiD$?ocG7GJ-T z>jqOHBXWQ2Bfs!yEoN4|*qF@24I`IUOH?R)SWkHD0mDsd)n|fl&zZG?bw~B{T18jI z>?-XI=HBoknEW`bN;t^1?(|hJU5gJ=J{MD8*|j;!G2Du|xAHL7CtiESxY^>|(o)9H zzCd`XOn@~Lg2N29GJEJ|S_p&6+N|`;&1+ow&)oigoA~GU84hD#U*JR@-T&dsb;f<0n+c4qqDP%Qqz=a^+=iWFgqy1>;la+ zY^^07@kdvi7V)-;&a~1y%z$Xk($5{`x9y4b&$lhqXlGAGz1;3T)*6$`gxz0V;FUU! z-;&&0&a;$pg!y555J_miX+$+|0CU`|Lwo~Ut|`MDEgCr z#eZTnGAZSFyLZtS<6w!)ztV4>eWK-NzSBsZ_e^KPPPH~_;P;fPIJA$=5+|MfR$sIG zir&%%+7(9a*>ve4kL#-woGYv!R0l`x@WB(G znPfq3G47htnZP{O{gtzK&>vLFm!x5r1J>KRE2jcb)lCZ*J=Z%@s;gighcl3+Hwfvt znnMbu$z#8{fX!NW&nc!#W>(g$oNvkDnxrOwmyXKMH-ZUgp6^f{#I2Zp6#XpP>hU1l z7+a*8dR>iao)YK(YN5xN2e6hyD0um~<#dR!;-w^dATZ8G(z3Q!CpQGCHNjGOq7=Lz zONFJcmh1)_t)l5cWcal_?kVGEWkmD9!g;sf66cquLo@n?iVEpcB8P_7q)D6Pu6d^j z642||US5*Nt{#vPsh8g)_o<{W(%b_GmRNs|f?23pm>9=O8VTug7|u!BEX%(adsqx)PvLPPpWT zRmC_r9@L`iA1P4HlJgE*UGXkgnT)U&EI^*68qkPC^-`03(uWg}%U6z!DAi@x(qY6J zKH;0pIwV#<=JzPpN2j$_1Cdu-{}VUscBt30$frwB-$0?BOlXN?a6IOJg#95PP{94%H!Sf@}ZM{jvv zD<9hYg7N-Em7s#xGXq-1l&orrH3PUrGB(+33DGd4ouj;vR&auEcWN0$*+yGto zN*`0RTE=F}Jn&1NNdjfW!q;sFZI**HmQk>%JpE%s8F$=hh4SG@c zU97g|Rk+qf{N`4fau-jz`uvh@u(y*04BsZS^W!I#hTew#&aLvDukhjr9Gc{OpY)9) z`Pgr04P7S&?4fi(i5=he$(pMzP!uV(h(3@ubp4H`a`5(Pi-_P1dYTv~?bE z5);0hGCTWdPKreP7XZ+Q*YpHGY+9%0<`F>HK@KD z3uf1R(Pg`-o<_Ne9mOYuv&BvKgl83|#0R%Yrjb>j7lyolERdGoZnIsJ#HBks5J$iwZy*m5;RYx)_QUASQpx6_F!^Tf2P zf6+&9fl=3_tR0(&c{F`Z)CwG3fofko^kQWn@*1(?xi<2a4bw*4*TSjJMe+kRr!hDd zg?po2f@Plvx~`ClHes+m<{xOVKhMzy_MEY~5jCHL`#kNm1{5Gx zB!^5*@OR91!OUx*JYB7@?_wqYCT?#~z&OLe?Ff-?38w9oZ|xz|jZoe*87Dl1 zfYcbY34}3a)1UYXzyZ(Rv{0bmPl%VH63VtO80FU&a1#bD5^LnLwqUk`0Wp2YTPVMN zR8VcTuD*so=lEoL|G=xkUfR+yga>%v35Hxd)#ykkE~NGCh$mZg>t%{l$x=td8#)%$ zU4q)eSf}Q|mE8-i;XwyWZ}Z1m>T;fipDxv!PJQJZ5-|njQF9)YS4T0YBUObn2j|{G zapZ<)A}Xj5Wdc}y0vmZU^p#g?7tzpJ?e2H6D9@@qvERd$MC4kAO@3KXZkKmhPeXxz zaVKf9A^7WKz)6+59w9wqhhi_`1OR7hl@}cRzaLG^>yjgBxDv_&3CLa)BZnWK$JE2<*)bmGJ+$X4m>tEH5N0kF@dF^fxJCQLJ-hxvi}># z#|i5>bn1F#$aP+Rs0zGc7F%=WyVyGtf;!wlLneu+IDj0xAzCalFJ4UY}W2EL1dD~tja+951+7xu57kcPNmS@Y)K z#a>?mrMd*jcd<>t1(K5K!9Tr{^94{oBd#*xY}68%E>QLlM~c*ctL^^v69W(d?=klO z9OEwo^f$(1Km_UbA?oMlMJ7I5>YIG5^cMSkqz*gr1!4bBk2BcB{4c#$gGpWnhE9aa zJk1^T!V1)0-6yOA4TcBTm!z|%u@%rm+%mo)n*{2nd@O&t9WAg_VHc%jj5&rEav-tn~2s!`VbHM+NS^3Z2>DK>oq5piH z{^bj88$Ed&OtqrFo?3tX7@Ps-9JKHMaRxF<#zs=KT_rLOlZ>+x;Zg+x2kzWAQoP%C zM!}=CsYl+a{bNhE8g{IGp`gMDW4kr50|LGiJW)bAl%94%nf7d=(P^%A>T+9R#uVUc`ulBXH@h;$*tpAZl z{P4&b5BF!HK7dB2{3x9r+&EbGRJzc`P*<#T)r~-Uxe(?NtM@8UL6t3Ws&UM)*$=fZ zz;AxH{e6Lb3YB=REM6P7rQnfS2db)bKT7aIkj@d*LHm7M8CP*bky#)&FB(76CHfkE z5T!-Ly#b4L>aYO6N-GEDInvEzXQlT;Z(s78>W6PD6BMNHy&)=JELr}vejtT7JfYP- z6cW@Q2vX1AonKgQOUvr9p)5k{tnuHjWpG7W$)7BlM?L9s#>NY-8^~izmEP+W=n)-Y z!D>kg<Wv~i-t2wGo;^S=obxXxt&F=IsYE23sN%s=aC{6I1>{35tz?- z2ti&r{Jft$kmyC)TjK2Csw!&4R>F$rYQpT5VWb+{nqJ`T@BwPIRB2B*Z&rUK%%{C z&yzfA5+_fK-bSo1+G}S(<7I;x)9+Nd-R`mv$^d=s6b(@6GidO=Ovnr333;;?ZhR395U6AJg|8q!4)>DJ)c0UGa|ThKI~q5!7=%<+;&Znq3~cxYaMvS8oAW5?Vy5JjvBe z@=4EUQb%w`Dssez*+Cz;`%TUiw@xhTfnE`|!!YpsE zE;14AaX6P8dbnoj2(A9R*i6Fu*8!53wJ}t3!EhZOy@qHna<(86?#-Uw>Y5vTfbx4h zDLw&<+x62@g?%QsY+QdPIuP~CP+7E&8t|h=pmDTDoO_Joc~YmSmEn=6D9J6!4{5ix zHbyI0H7{$qu^SPC$+qj%8(XF=SW*J7rbQG!Pb^GYddjJ_HD2;$AEDl0zWuV{`tOm= zMD=Z*M{SOtN|%Ocuxi5-eX!ovc$|}u>TdV0z&3(GB3oT=@Y;h;@!_9C?`QBgf100T z3BGl0e%%*ZszivKPVPT;DcJZepYRcM2u#OK;C^!%^g2vEU)kR^Vi~}fhK9tCtQ3rUHa+V(26kU%KSb(Gt5|IqU@Q zzMQj9=i3)E`er_gds@W=2v5zym(M-PR>IO+txy6@2h!}0S6EsQO%O&>S?m1GJ3nAkYxdhfe*$-es&s?+e62&D=6;f`51021iU@Sed>{5F?b!weDP(w$?+0H z@<9@JD&j=3X9=Hp7k*9Dh?mtL?%XxXRkN+dU+Hn`E=4L=W9Yu0&aQqJ^Q)R+6zg8t zk?9(hqADHQYjgCgcGR`l1i65kP+S>l>?mFonSl}s05;SLmiPysvFkE{Bt8qA)85kj zhk{k%Z&UxptKjFkZ-Z}>%|r8=kp99~DGW*D$+Yg7mGH?36YJ%>^uHT1Rx;J^;Vd$vbt^hNK}X zz{Sd4&s@ifK38c-Hp^Xy&*}aYv#izIi82(dJPAF00s@I3(^f)h;%1f5b-O-x<0?Ea zT%XChB1UaT^(_|E^VU8aD9nFvgGkV?uC~QP2qeZFDnJExJN@4W!#wIDc%u zv2N%z+`Z~7xqYt73v_D8*cmLm(?AFO8Uq3?`MU9otJbbo!9}hePeJ;B(!m(G{JE z?Q`GjA9mRP_@87n$y0}CCK>fz%vwjNppQXLz&Fk{824x)%SPunRX+DcmM;1#Zu$1~ z4+RCZpl=1X^b6oXeqhk%ZUW!){Icu@eN4k1fkZH>Xx_;5h1tFbZu<9>Q1Rq5KYg&^ z1%sK@u+ZKJ2!3T;T>UtVqggJh$1Z&#l70@?H%QHO(51O}Q35-M!=s78)-@bDD__K? z7Y1POxhZxd_Y%}xdW#!V9SL8qQ{DQ<_mn28L#NV> zYqcXL@<%mrOxcf+SR=b9xh|(8-p?DRr3qip5ABN@8pGeL(BY@@lwn+u^=!-&L;q6t z0k&-j6Jsv%p0BW0nIpS?+E1TocHTq8Ey~=-bj{P9K zp{)|LN@MjW3M3fy)9=!> zwDU}}XTOY8D(+8lEYorttJFAGo#eqWw9g3XxyUrjW2l|$MXlAv8(wx^P^arFNSuG* zj43q3u9+HKqitCbNUPls_aCo!9ycdEsv3}WUe=MiNS^E=R%-%?$~51yGMq1hP4EPr z--b>oY=e~3B1@L6nhc75>7=*?)mzUvju6$w^MR=7(X%h?8ZsEDrZm_3Vgshj&s8$= zP%=aWdX0O7OE)%~L7A=zZzs&l>+9}c?&0=SnD-F5D&@jaK9z4+m(MZY2+~v2bPWUO zo)DTH0%5B5QIQn>*lIIZZ7gP)ys*e|yKOV0 zwtg9eass9t%HgNg(zXepYEglh4c1<8(6E$Gtd5^TiUJZ*qd0t$w?WfV3o}+F_BUOj?q%R$0&}po?{MO-?j*R)wA;aSad1I@Y5;v3WZTbSm z(M9rlHE29YsCUrX&d|O9vrN=W$txtT(o1jr4a7o;(|Sl2aFl>WOqFGgy1Lhh)|ZQ9 zp_>IzKR@YSn^2EniN2{xLzyaV+^#D1ch{4@ghQ%(>BMUj^d(dH71pu`fmr#rHgH;|2qXlZ zB#>;D&yqHn=#F)qwkEzYOi8uFhIuZB5`|+}fW~5{gF(!ikDO_OM)!P5+cxkyRm0ss zU#pBArMj|wOUjZ)PqkV#K%Sjx(w;9u7Fl~eu1~y<7hDbfVwCcz)@X1fbfdMLyGqN8 z8KK$|8f2R|8f{?a<@P3fhC&npHMUxl$t%@!B#%?(e1FYIzZTD_V$v;;qMFyEl3dtJ zF63e&2PTVBk6Y|g>1h9)@|aGWY{FNklad3%Hc(6N=WA!5BsqtOy1$FL8c5Jeyf1Ek zh@h26;8au5iqZb2d23&~1RVPdbK4+D>(nz4dXCR}U;O275*c3$b14&UMTJLGaB&Q1(J6;T`{%7dy{8iJt@Nl*&t@l0%T# z(JfWXlt_Psp9gyw9i!MkK4{jOBHJR27p@H^ke2O3DM=4sUAQvSDRsOj{@m?z0y5KZ z@&34i+Lbf~!;f+*R6qwv;@i$FN@3rF55TqpnOoFVCRX@MxH>@7J{7Hrdn#;Rux@2; z<)8D5^186Mfj$y`zS>yx1)YwWnaLIyakKm+I_mq2fX}+~(@Kkb6IbFqmM>p7@)4OP z<6a9SnC!wawCOK&ffOQdsGXggFkl~R*in9q<1JKbHr9W1tUy-6{a5TawKLW5&8BL{ zvEMAFda>_1ABp=Fhg{vv0rZD)fUK`avu|)M#&GvE(67B4G`a%;c~&QR`n12|r~M04 z1;>36^JZpGJ($v+3FGG@u2~FTi5P3x7{zeJppe$%$3fA+Arqj4S<%*@7*O$DOb$AB z9SF@tDd>Q-v`2u*$!>62FK9JX& zWy}ekCm+(wNC5?N8&*yUu`GS7ljMYPL{g97}B?MNaakGgS?8s5t`WkrkJ1ZwEr&Y=5e}!fD&ok_R{4>bZ#m6A) z6Ts;rvHk|9?11p8L)CkotuhPmutN2e`T$O`23E!`zoOySObAnQ+ixkWjS*_#>#fWO{YYu5*_WNXUmHtRf&w5G65?X-h%%|i)v70h`X6Z7PJ-!-(IsM zR-#^P~+_TXGv7>&RxTC@r3`Nk|8D=7pX>qy}t2Q~6zQamkvvWppPZ za3>M9cJ_7An5(pE&y<{LbVfmbI}j@Lt%RN9@}S@JCo@_TJ->_XA#?<-Ph3c_(H4(I z?N8{rR7(gcc?1*h$jA)hKx&QQw^5^JCm$xk00C&8G7w#Y4Dh5k^la0m)<4ow_QC09 zsUHa#jFAc+!A#@@r*RsokSkrc$i)ZlpQx%%zJ*^j!sPHeL=+qG0 z>wITdv&VHl%cWVCx8iWbQVR+C2}KkW(V8lfXNJoj_P*@s8Map)U9|LE>bh|v_`VSYpMWEWVVVi9RU6w0g zQ~87j__B9=_&B$WS0R_p`+WMzEX%jGl{R(zGN}qus1e?|C5MP(T(rl8jj3iwk5|7a z7_alh%SYt@trUw9UqrD7B!HR#KE%FtRJ~WMWtV%xp#@$k zm25WqiN&t{r^HAjHh`R*;CB^CRLUBhzexL#<8U%`JJ6z<*SKOSg{ARYIj=T;5giCA z0IoZI2ckF*_xeq3J8gdRJcJAQ%rN;nS1;MgDiHj1s7PSJL`4P^t&s>1=T?i1b@!#2 zauRL)m5L*7wVn}DvSq=I!k1o%8ylAH&+q*?v?k*+HsG@q0hG_eQBZxyTCxxQK#g^r zaVUAp;QYH&CDWy56EpO!Vk`xX@#vUau4V%l$?k-{KxksKa(ou+xvG%mGYZHNp!6B> zHvBl#|D#-GUcMK_?Ox9*q!KGm$v~kyWA_C*M;0;?#+HXj%sJWAzc6sRnUQOUZut7x z`L(8T1N*(%G^Q|q46}zIt^tHkK--BI0erXYU!u2)L%H1Ntcst~UXx;NyLlrDOfZs0OT$2DQDF z!vqbm0Qt&U2+38WTk*k}W`TyP{X_*qJ3AfxINkY;%@hLTp?B$1pFJNdg<_Fo3&(swb59egXW zmpcL%?CJzy%B%G?=wzyBLzD1g3n-9L;9LX9G^VOL>{4}@{YU(NH2@X^g`he?V#q+| zqYOn6WH3;mB%r%g-$agYA~z_5d?iMhhn;;^2IyI!V&D6xk7QO4;{j0X4*0VxM@TGo zsz@T5hes|eKJ`^hW~%*Z#QyY=*5eJ9JbS(ZiDK40X)!aQ==-6LRTlRz985ksFWmCa zga4=D`OAE|_J5|+Ur(pT|6k9h|6&3>*ZGh8<8Ms>dA_xw;1;a0QFiZ;--0M*jooN4 zbz$T>$+W+7e5M(O8{Nn>d?*lqVK=pX4|%IJ(YwSqz zm9zB5Uqi2E-D^7DV*5aUD%Fs3GfiC`K{osKUooKmr_HBnLvYbKod?(-=F>)2YxhTq z_`k|oJ^J622preb$lL=Su87*87mdb63kZABWX~b2F6>>e=Gwub65s1J<|Y-|5J+-( z64SrM=mL%z*BnIYm?mt%=7g%}d;yEQ=4Cp)?1C^Q&`}>R=^c#H>xoq`FrnA8>FLr7 z<3|gk8!coz1SH;(Z`W8c<40~c-Uga7A}e&W^m~CbGdo1B@%lG!yLFqjwJ$+-RaKYh z=Uh9r7iM3{uN0T)PMF9=M_%t+%6d4r{Rvo~4qLyKyLKe9N5n7tb^UbjY}pQ`+Q$y~ z(w2~GQ3}7Q=3aL|1-W#vZwvw;BxwfnflLrU$8l2LijvH=(O3OP+6r7oPZyZRk)Azi zm24x0VMLxA`)14b6S#S=9Gyyp(|D9$meX#ewg=ymk8t5_G59W~ajOFl1>3OUeAjRX zrdB>4O*;7|aY=KD@ar#my#pH36<>hn)2GLD-p|`<-{m?#5T4cc0Y5Z=Y z&a03l^9oTbIfdg;g~#Nr%Hal8-`tK2pQW{j&nz2#7yF}2w*q;)(NuweI^y)n8B-p% zwi1M*RmRJ@yk%}my@vIkXAe})`AI%ssZ)A%ziQ4+Qtbm|4?Kk8>g?D%a5=?UA5}$Z z+jcHVTu1es6%bNSq_Y<7hk!L$VZLA^Gay2_G7Wjb8m4ohDr(sFZHfY0QUU*Daw?0J zAueJ~1~_e4T;ICjM)nDmmluy44nd(Z$oE1fbLAe)hZ`2zxC-YCa0#$VNK|^BX>OG1@Q^IZ4KW2E)jMXIwd9=ghvI0=Q3WeU z(mUd?M@_BezM&Z#f+M5F&sxbfkC%uX&oHH4!(wNj*wk2+rd0c>_uuW z+SJDlxlo;5^vDRQ&^l3{VbR*u3Q(tc8SL>6(7Ym`slwMKh2C})H@xWx|Ix*K&R{xT z#A^aS1nTSH)lH*F6>c_YfcSUDeJ>R>H)RbheuKex-xt{tAMBe7-g^ zeo@xRAj#|J9z?JVB_LSkTNV1*HEW;nXP=KM;{CY?H_oPaSoM<;=O)__vBU=}13?h^ z246F`U45&bll(lzh6n;zzIe9wf$B%+lh>1mU5zy9tn;-#{XJ0r@`@T?2owY?7yv#U z8_hfHu;k;j9Bx`bIbT`oP%kjM-eCa!=Eb@w>ru*MFHA?QK$GZ#rm2GG2kfq>1QWs+ z5R72w%C6Nq=d!Jy>lL-g39~$34oxj)CE?zDaENH#m_Eqo1BM6aZi&JU48ZOM8`wKh zGxFmVA{UdO&wbbf+AJR|a2w(W{Im+A>=Vw=m3U^~#X2}%{BgTME7WS)vo*=PW*XH! zI{PZi3DGbckELjvP~=Pv$-;s*bDrS?!nS;!`xAd&0!_j@KgsYqukx|gWr-H?t}z|M1>^F+w*f)3ND@4u_Si)F3#}3A#XkFcE+IuOwY~lG61H}Iwxc%^ z2OW3TqU$@}fhmWW{IN4!yUqWoc(8)d+uYag?KS0XFt?WyhFdcZGBXGV15bZAxBlR} z*t2m_H*O{K+X>ra&GJ|M-*K_Y&3lwYhJs;^gBR(6n60 ziwGlO#us`R4YVs&y*Db;4=UF-94@NrWG!McVbJ${gMeaD5j23d@PvbdQF7kocxT?R zj|{orlD1s(%G)XI$uH?%Uw2Zb&pbrLI1QG!m$%c1$CV~AcokzC=0NPyn)t%8>_;l` zIXok@QD{Q!R-fnlhw2+5%tW6D=B1AZ>x#PbI^0K?iw9fZlx^!ZF@Nn$bDXDm#A*x9 z;D>^vMtA(|B{9-gF215hb1}xg_b%s7I1syTI#WZnN^V9?EONSv4Rr!O7rvtcwc;6n zK`e`DJ+DjP-RGZzenyY>`QC}RQg_x!^7C7PT1~ia?lRAL@sIo9&f7}S|DY3OXSy4f zX(*A?6>-J3``nxV**2HI^Sb|6S`}eojX!K?5!T;gCl!r^&rKAV8$S*hv0qiSh-QEv zZ{0!s0iV4XjS?<`K|05E%xOr^))ZMca1gQQarlye0ZL?P25QFD#T+S1rRhF^_m^Op zvl^DynbPX$J+P7E?)RI>MN3(d;e`h22z@Hy%i|oXGkxX8O3l1OY*uAH4g3pvxZ4>g|BkHfk4Zo84E*aA-{>@cb-E*)21$_th#OLDr%^{|R0 z7{tM<9?e?_b+1n>K~y{O15@Lb2VZVSiGDNPWO_|MrXucGU_cfBC_Hpay%f1dM?xUp ztykx2E8#TS>c~g8(B&NRDm32Im3_i58H)nv^)CK=xaINLw=J)KUdnw1N8Q!@RUdV9bi z5AHi~kO^EAwy*v)9Rww8j?|B9E3WudrfCJFX%+(L%005ptO3KGkvw@FUi*dn4Hg;B)Y`Z_7$h8V?YNHhSNGuKBE=)0n- z_LcVu7Nbzg`2j}+BgwpHO~Q7*WyZG0`67&Ffe4w65k&AdGobDLg+t*x7^9E-3vAMD zdpz!qqA&R)!snEWba|zq$|jF$zxY#02>)u*SR6O0i6TFrT7G(Zcy4;yFqpcMKk%Ry z`i%?tv$e2a5Jo9AW9i~ldzk2RL-hlbN^=fRi>gcT=Uo;+#!QXhQ})UkJbRS#xV)AZ zUr)_wuY0>T(o(x!J&k3Nn)-B%0R7F|uqqgOvmwsvT_w@_C%u$W|90I)z)fEcU#l9! z*iKxEVpGG0nP5`VXM?(e+*pARa~n{eK~h@Jo5|2$LXv{t4n1VGQ^ zJ+6hQx&v?xa?2doeqj6&KQMlLCY*68j=n*FVpc_)ZCNloRt=n&^ty$W`Uh|Q1 zA~K$F0sC`A4{c|9OT#`UBqpHbWbxR$m4KP(&x0VnCCLM9vR;?%CVZ|38M1$$hKnQ~ zf9>s5lFZIi&F%5dbbO*5aE4-VAe^Lf-8&E>8}1r7reJ89NOOog;oRPNz#;` z16z$>w$qPpj(2c+Rw^*+#QrSfJ?3kIH<+FgTK(+zRKx=EGD`#bBVO#PRJ(V?{Zr+S z+W_~`@AEFe9CzuzRrrl6?-X}Af!(ZzyR_2W<}<~{baH~aHfzW>hwlF_cDA8Ax1u*S z0DjXNr|&jt;x(DG2u{8~$G0`C9Uf=fic&_p`|X9hldAcF&5gNV7;T3_|G=raliIj9 zL7t;e8RBkiVppcQsOM`_4d4}&ibP$azdwuaUz0v9GU*HAx{uYxKEYpLDa9-5MV8(= zTq@*uCXsHjrlFkxxH|rFdk`${@=%j$clVx(V^zZ$=B2$>9Q7@?GwoA3X0CPXGu%V( z1gBJMNl3%Ts&1;CH0Ly6D94Duw3yBgXas!_sI!619n9*N{W zl+8hJ_9Qlbo;q_Rx9afuv7K6c1D@`w`Li66*;?LM=TCDK$b*2At-$zQUe@t`E%M6; zPV}%yDCTeXT}&2b)+ygPMpq#yTUK1*d%vx-2soqjK-hUyjkDgf7@_6rf^dq+2+TfR z(5|&u87yUueFiqO?eY(JBXs^FsXXTfE-a@sx`^UsAX8cHy;;8OOwSqoF;w!;F>Sps zlnOc@qM{;x^QzsBFNm8Kk%@#FG-&Al2yslO7uAAs+Epj z#wM}K&JYzbb#*j18IS?o+~+Sa zT>mVa)!SN5z~OB}M6 zk1J~P2wA?GtI5RX64lFZ7(;+3YdD@(cCw1GJ=(+L8iK8^o!wJvHsp=+y;+;6UUw{1 zAu}7W2GK7;ACIGJlZOhSBZpY1Rr00FSDR0ZXpwIb1vPkX%ph><6{|whkjW3ayk)m+ z_{fr&EkA}m4qZy<#0%FK1oFjIu|%B$Z`}jMtmfxW%$AueRr3;dW@6p@U${69ez^I{ zLgfq7^%UOZvJ1BKF}mJ+R?eIhtp_~IhJ&9VcQ!_fn5`vZ-hYdt_T#yyw%z}rq3Sn;-+j$D0$NpYNh#B3=a-eFUZqrANd0vB6Z;#6O}RH1;ic`%WE@@!-~cVM(EWG z#$OU*u;28bLXm(&BguOP=I@p|oXE1w?YNoyF;>eX5<{vv(=WBrC9wn|_;o#LGvyJ) zn}-s~M>k?ukEn^Hf+2z=3xS~|$jN7~!vw0!P@ZZLU-k&ly9vd9+b<-fVmoK?w!Hgu zmK@w}{S|V=uxRJ456nY24)M4@V9x0;0Crqo>&N*0fjSZ)IVbxx8zw9jGql&R%SNGq zGdAJ!>=8*e5@#A_i~BU&G`;)$m70Tnk8tO+Ys$()szmqFpd#^G08wAXq&JgRcL90; z!`ToNx=N+UKV%m9hH=gN7DGg5;Ot}r0fmI}ADxvy)EXB@wZQ4-<3KF| zxbF&&nj$WdZ$#=>BL&ZC*WDcHgYg36KGDp~2?g_Ae;Mun{&xw5qG|katH@IO3D6_> zgk3f7z-SuVcR;Iff<#v(QPX2ElyPZGK=6(DeySO}$pXy>WsbIA7`T6@7+SiOFSyzK z`MLjWj+dohtk+2F&#%4T5m4Lr8)`@t=ULV|1!_T8GWXP`p<{`|85jJkMDSw4QxLE; zQg+V7cU*Y=a8k5CBpsP8N`n;a}u@G@RwQQ=9MH<;IjJz=v!zgB z>7CoCjd-@o14oT|4zvTr@Vk$rSNiuv<3o+53{E`9-3`lHYnW!U?Xj8)L4UACQLIzj` z@iQelT-Wt&u|CXU*WI@)0+QNAzeK8@9^i5oVeD5M$+M-pjb_K-GTu%dxk3Jp-^DzP zPPL5RV2SfTLc*}`nYDFBe^VXs2c)dgW(I{*y&~j#mP-hO0qG8<3Z+PF1*u%M!3M{# z_Ql?1v3?LG>V03$|2EhmxqkZ;L#IRZSk`0V1jNXOS?)TZpB^uNp@$-&XnH)fcXYRo z+a66Ky+XjEYvWdY&cSms)|{K5^2AF89eHyywMPN|5z zm_~CgUv#)xdn444LMIVLVhE?Nn06ufFc1JDEkK< zlsUZPAj7vN7(F4B7-f&Sr`wm)Bq^?4sIDh$EG=*~z|yOxPex&m(>O7eubCpB2%R9yQe;Ar->7L8lQ(g?}Ds@l|TuovZuA& zAG7wTAyvO4k2zj6t~tY_vekqfCyDJDp?fM;mOR8+Jo!ua09aIc$0T(^wi&e}M76cC zFn=!P&8Rn{Q?uOFa!b^nM7@A$bjQ~4Wk8|8GBB+j?p4i_5N}20gqD7!tWCnim2}G$ zkE+m2Y7fjhgWm+S0?by+ZZcI%^1awh^H(R?1J6l;w;uD#G;~0ii$Ul zmH*goZ7>OMB&xCVtNRv3kdVlVB;{bs92;fWX4>$~sdBJuQgUNuBE;d{_HJ(}H&#?} z(+L;Tg&{XPzr+hE!;+USm253rd@=aYjq+$try}CmE44h&S;Owx^}b|b^9!S=GAyMI zL_j+EhDa}rk8Xy%m5d@t*jmTA>e%<}h(0_g+eL&heo3FU`V7!h$!V%>?>#>dA~ypUt5OIE2~Gs?KB#^t%KKCbu! zC>m=ZQE-A`mi{ut;#7admDpWmS!IgO2ZF^R8wy90i4ixlhn*R0C>zGc;Z) z$R?dEYJ6_EXqe~fV|j!5^b_9y3+W9e`G-{9FQ`@&gk72# zzn0>Qn4@vkgkK9F&GBxO?nxtKuTB**cJuRk1K>3?T(+o`y{Wx*yZ|!7zZr?fHIkzH z@tXs@D(Dj2Lo2(U6Wf+=HQb$kE_CJe&b+vEulaY6sO*{orSnNqe$_q!N2KcqKeCN9 zK>GC{&JD2ttiY7t2sEKSPzi(&QwD@vIHtka)~PD6_qgOdPsuAf-yLEQqIhd`In|D44CY7kt(L&>GVfW5Yj2Grp>y}jqPPF(env#}gv>j+h78ne zbI(Plc~JT|jT5{Jsu5vEh(j<^n+$XvVFi?q{E~`_6aHU zgReKfBB&P&BaG3JQXDy-}JH&lk_oNgjPCJ9gnt z?S+E;V-0w#UNhmNfgY1162r`$bRi8o(j2sUaWkYeT(3JY$xnN@NW5l`{E`!dsczRP%K*bkFf=i)7z8e3@{~HGbDm9dnA?-;fFQr|r+y zR+H+-a%-zYiMb1J4KdC13VX|cU{z|57g%w_8ccdYyo$4Srs~2-Y2(Y{#ZN;h{Wtjd zR#vV3%S$I9db8LK#7o|_S`Aq;>A`_N%XzC-a&*`wN{gMWT!`A&1pG1vEQ$p%uqs`0 zg9SUojw+kG@6R z+`G({4Xdw^J2ePDcY~#sIXXA}dITSHE^dAz(B&dth1_PfYYD;KncEN{mtXb}p=$T_T+gOx;Ga3@PqF;=WzCCK??k7$;71*x`Nq zdrkHz)FdeA!pOzN%St^eQG2v}uVLu76Bxz~EMZ5&@bR)dAc>pg&NUq0y=J*8xma&7 zV3*Xy!hR&n1lydt(Yr4_ymLyBz=sZ(V5P$)n7BA!4^qALnTPbNH8trL<#n(ps!_Yi zNY;tD8H*_r0}J`Iwn_y;v#6Me4GXeM;{-X7Z`=%ER~>FGwo1KB?c6r|U2K6EKbsKC zfkY^XY?3K}=#41?wP>}NwOc)lt5mg%7st*N`X5OLdr3Qy)6vuATnLsgZv=78zH zv&kP(qFSg>-`rQxf7J0f!G^wRq6U5|0t-vbVdN1;D0z`R&3+Pugbel${V$5vqh^<9 zhB)2!*FdJrBG=XaUDd~*4rZtPLn6U{hYJ0#Q=mQiiRpinVG{O(VG=IMoS3-A+#C~r z4Oxh2&>(9Op+(r6Uh5Xo_{H`RY%r_7rISSZGWeX2cUnUYLC2$NN)Vz$3^M|z5OLV+ z|7!0_qngULG?uRlCyaoAia-GhQV6I(P=Q1RL_|PE83F+nWDY3=WJ-vZ0ulvEQ7MQL zMFtT8fiQ(3C4;C8VIC5a5auBxVF+ZXzPx(9x>mildUdV$`d9b=d(S=h+P;eH!08;Tm!NrK7QBl1x>gWU0T-aQ~u@VyOe`K zEqU(PDyB|qL_pDY7=n*85N5CYqp2ddLU364v~*Z_Pg(cYK{e)Aw6|F7okeM!n$9HMycB64?W5q&JOk>Ee-rW zCNM%fyI!tL4jBR1e&bUP7Q-;lAedwJ7ZXshPuSF(CXV+P(F-l}#$Rhb3A}fq&$V+? zv*0PM9SXBqQy;4Z0t=S_pI@jD!`mqF8YYe*G#hy7JihWWm*&}Gz+Fxf;J+j}5+q|+ z?&@Fw2QV5Yp$w)oU6PNTtf@7ZGG4R;SjeQ+frF*ZYWuoG>`M>tfq}9_iBzn&9W(K` zVCocTupS+l7f6KDiu0x`B)K@Y0b%xD=MOAKy=;VZ+t(W5$2^bDw}h&bk7ChTjtg%s zYZm?$9v5BhsN!5w9=PmZi#efr?Lk_7NR+jCQ)ID2 z6f-qr{LqLWu@Pvqxz+Ic-E_qmyE4UTtBQG?D!phJrP5=v#`V&FSRvQh5~Vf#;P#n0 zvzJe=t8WC)Xv&?vc__D&Ls$YrhuXZJWrLO*qUdJIL)uJ^X_?%L7f48BjDf&N#zTrz z5~p&HAE6&KYMrHRfQECe}EjIfgOJMVW0)kwN@u=hNFN^jw z*NDg4Xlsg#?_dD#TcX?I5_@0Kgl{>uKCd-?B$d~tZB4)1)5pn&_?m3G%$U$gL9fVG zRFe7+mstF~I#{ON93nVwZEL=E;`*vte>FqJ!~kjwKO2>O+^9e?fIsvlBMaT-xK zLRPYc32k??{lU1m43GBxgGdv|jf2IE^ka}Uc||Vk0t%;+6)xV{qm#O>kE5NR-#X;G zt5fSF>=3T&v;s>i`^k(mcWQ@I3eoE|@};h0V?U>{*>vIK_GS@YKl%`(ehnWRBB8I> zjxn(E!jcKw3h8H3IjNyfvp?VNkq6>x+vidN2k1}A!l-{mVYad^WI5r{=qTm%?YS3E zp5A7s&82B?xqjg&qvr^oY z{LUL2f5>ZYHQg$|BrRAW2s)A@@Td=Vi+cZ^zZA538K=@_0Ja3%7g6ooT~aBu={=9E z58@;j4sqr(;-Mv!QK!Te6`WPtkcVdK6$4jb3N%F5| zD0b^}p*kaU!2QUOc5&LGwwBe5IafMO7RO<^heMyNcd7nD8u*G`@C1qVI*sl7d>@{x z&8G7SL%mPN=Q@B?4V^6oKoVCOZj`)~7vLUDQL>Wqox?qUKS_l(p5RNWe{yw5U>Po} zSzWCa8RR|7ZjH$u_DoqksU?0JTPbti78Grv_DQv2nv8k(TGbs^0RhdQCJ@VX|J`)e&is1UzsB1jTiYE|FP*-vW_dcP$;LsX?uG5>tLtpKj$BtWQ z^7S3~W(>vJG{r&cSm8G3p^Y0k%#P zHlz9=dtuMc!f|`cgAre#y+~$--9(M8Q+690C&ho5T>pa{PGwra={ko{IILadaXJiusElun1)ko2}&~=K*PNQ zRY$yRibgtbtjZxwn;oXs+!7{fl}Y5qyubzM?t1-KCUcl#>M0&kyCh1<5ZAX+KbK)0 zDhYSz4<<0z2<>rf$2~gzlZ!0p3^Q3tN<-}6MPcpO#Lc&KwfG^{;IUle^HD!?ZohJb zplMYXWy5U3Zj+Si)zAe_Z#{xnZn?LDD888*327ZixO0+aJ^M($b5m9L{6(h{m<=Sm zj^lC`I5-(sK-s9@WQ^JwSQ*xAiApmNC)S&fr|ofKc7mtvBDcK1PHOiczOm6n?V7}t z!3ShEq=Agp^pvU<=Ny+xjf718H;iB7Rr-xW|5l3d4_FOv+suk-jId6^@Q_h3;*~sD z*!>;BS5x+!&s|qbnMpN~gZL#*xK?6sF6@2kw^62f%uHLCqX0Rqwa3Nrz25SX)amC? zMcQmPX!-U@D@pbqXAw>zryJm)+73k)8JNavEw~s(9Xpdw3sMYm07BSO(r+@C`PpQO z<9jDEY3PD3^g!S_iG_xOg)vYPXm=8EeionOktN>&i7cX6Km?w-5bRe9ltj!P_}2<_ zs^bnVZ$(XRnc9q2>vh0?66rr5kRA}jd6H+(x(de03T~&P8-2A94%NV|wIsCvPQ^mk zu@)msprcgx`aFl3bp?M9p1ozCk~N~0J?Li51-H0t!5oHOgsuxlru5s|6qfF_RBB9MgL zzp3xi6$0&y<=G|*M^jWgZkHkb&e%2JuYv~teEnYs5&R_)buBEwWo+sHD>!leWZ|>1 zBD}f~z4WxMZ|o=Ja(iJQBP3;L#G-}LE}3T+b;cWsFOY;7^@oT&Kzn3zy-8HVzJ~2$Fjm87`%A7@=>@Y?S8(47RUB}b2!5Ies~2}oFq6eGZzZk z8I<)YlSxH8wLAuxdpcDD%|2@g;zjqGkviEJ0LB5tp;Q;MB#gg?&^lykgwSwfk7=SpqPi%08}5+{($Xt^0}mnOJL| z`I4?SE3&`?BKT18H}Agi(_2Z@t<29$>}?ZXqF@ipc~AQl9j7wOuK;lvAo;-MW?B(v zL`?2o@##0i6m(rnH5f>%`4cm%PR|&1#XFHIvSiwMNvs8b=JALZK}Q=t;V_6>8FoSA zcGnZs6jT_%=7V_`qQP=?9)l(tY_t{KWe?6%qouxQk}3>}AAx)JH?9uDrBO5iYdA^t zY(`FWHac;d;a*q8%Rh|B7a26rT5h#&>&Pe!xx^5PJ2`U|oRGEI8sWrvaGU|m!1?@# zYBy)M3il<^kU*~UMciu1(%Pjq3IEhSmUfCT0{r0=0(!lix108Jt7`g68)Gg*ywFCyQHhi4-8`V~b^4ge z#Mfrh`O^-TMrM*uJmY+;cS_^Io=C*)`85Mm^P-vvw~)hx>a2MRjT7H1`l?IrQQSz- zJh@{j+e+GOAinBfayYBVqZ3oyTw*PCW?=(z&NZE|lczzPxOrB&;;jzKC)i7DM@y)E zKY`4mxiqO7Efnl*I}CSAOiPH}}u8 zvFuR6_|!5?l0!r#Owr+$uW60`(yeKu6B2ALAV3O0n$;g8!b`w!3f&t%*Ag46(HV~~ zJjnLQHP#)qPLU;xm4@y8K@X7G6PL>~oQWsvpX-cPJS|JMXQ6A?%yP83Kz8vbBJ`Wl zFJXB!>%K3M-{wsYcEc}-=)SHCBq6C5z-7PM7K?ALbFhN(T1UfG?cqBq(*p)Rj%o)J zv_y=L1l=G37Zl&|LFnpKE+r2z?_KE&MPxT$e$qLO(a|vWHP-J0f}|2mZFvJ7E3-Ca zEx|_?do+WPaiw-|yx@7Ad17QhddwHe>w_Jkc<7f^vSiich_n+B_*fUThTn`*6OA@h zucYKw8zE-MGZ*j+D;F}Ze zNSMv5T{z(1WUkee+W!N1c5T1wFJc65hq?u?@y*S!>FplvW)(G0cGG#{**P$IVt5Y! zslohs>$bXZ*Yoe+b{XG&1`8|R>il@k>bS}10)nvOuBGklj5HXzTj~_+|nMT&_${Wcvs8nsf~`Ya+q#)>S8G* zO)+k-pc$kg#)-S;>kW&no!*Cz6zWjCWY@I2P}0 zro{RQzuwS%Fg-nWG7ARiLb(h5rFRAy&op@N#lXIEDj4~-@rcOhI}!7+tMP1a>pO?P z4VrNyjoVbj=q7;)-CiJBgv3^lF*Y%xZ%vPsn)>#?DyvZ57ZDshNjQSaR6xzd0Wjng z0F;Io>qB<{Xo7vz#WzwVd?IF64zYGo*4dN%Ao9N3fxg4Of@S@u(Gw}qsWb#vG63`c zuN#VA8lC;n!(4oCphZZjJA*s4X+0FLo>4%B*+}#02a@BlM=PIJ?9<&6mR9TIGHk6XW`>gmEQUul zhLGbHtax(4OR2HXz>xVNQ?pjjvP;<9(0>Bmc-|bu1u&nzSiQFG=iARn2pvw!@jWEo z=JD?rn$dVxV3qzjH|>?%!9yHe3&_3oCSZH%Ckvd>n`g zcpe)$X74d0C`M&gnFALx01)fl*_`6*dbd@oGmG-1{psYmoYq3G=qQJZC(L3FvUglB zQ&8QG(KCb>1GtqK0Yn_Ks+2J1O*tz%%^Q52%Ls;OkVrLzO7PH-Ybv0?7?s&01^8X) zjq3K{v5c1`$AyJo2Riob zG4x=4Xa)n>!`K)`yoQlT%yp`TgPOfllojSTx{=+-w@FoMD&g>nKI^EX9^<=`C3C6E z(${Zua@=5ca7|HQ_FW*7DEd`n$y^u?u&DIpB|BuR`jbS;ohGI=oo@%p$zz@NyE!X zg=pKWm9)CgjijnfGYpYyvs+p!v(k60lB<9^Fl2(TazrXdJ9c~79*B=HTY0Eu-gKS* zLLx~*_F>bl__j?(pg@-@<@oP;sEcRjj#Hxo1sy8>_#wbuSN~%uU0f?emZRP?IUrUv zAJI)mOnXu^G%+htz0Hec_}8?rHPC>6fj;%c8oMo7Qi|geWL` z*Oo^q3w%mq9uZm(WkeOgc&?PvdJ9_ZhCZj z3k39Ir!iP0vJ%)!>x4uSf4#@XXk!uEN?VK)0{BE>TGN&}vllg_N>$&H3JhIDg@K%;8jORU^m!O%|O{2sh z_o4eEy1=E#^L=H)GTy}b%AdN(tx}b$sswQEuKDM)4@ev?und3yB+Ev7#rgxKDYQ1M z*nA}s{={x)2s@d5C6|U4)E{)KmRSO_`kb_{QngH9UJlgja7^g{=*jO8}6)hlcc;p zhKW>0nf9`l(&Pguc`dO(k9qL=Q^TvMQJPVGss(w>`NSdh-D0w~_w< D^m?Vi literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/intelligence/msi-grant-admin-consent.jpg b/windows/security/threat-protection/intelligence/msi-grant-admin-consent.jpg new file mode 100644 index 0000000000000000000000000000000000000000..2bb2627bc2b0e66bd4dc62539a888b10cc49e7cd GIT binary patch literal 37704 zcmeFZ2UL?;*DoGLMMXrUDGC{-sR)cxqJW8tiij~P3Iaj~3oXQ`bV!J!AWc9)VIV?O zno>mwon)knNbevCy+aa85=gs`Gw&2<9Or%S_uX~B|NT$oS&M}^=Q(?y-|qVyVVAHU zwCU6dlM|p7D^`HM1O9=8y&xly$jX(Uet^#^;Ai#P)vH&nTD@LWbj{ig>o;r=TQ4Ri zzH##=@r{xj#l$wrZjzLemXVR!AR)I!R(i{3X&LEHldKQ{#;jVsZuRPQ(&A#`(*N;C z_#;SiEhul*Hjx!OK`SL!h)AvwR)WAF(2CW-YCkRbU!N5#fi)`K-bDut3+0bexhr|N>AVs zkzBQU$G$b2kDL>=yCt=A|MzR9k3M>y^LCw*_IZZPmD|nhWtDXXRG6Pg`-!rDkFdM{ zTa^7u*l%?8fHsJ%05(rV5(EQr3kDG75v!fSV!R!`-u*Lc<|e03=Ehm3vWeZte-OQt*Y z=&q_&OZhwLu=nJ{j6|=J^2WhX+GZ~w4GpN0m!DwS1g%A#G{LlNRgLiR-aRY?CFZ~h zG``ij88zP9=^n5xU=a!-G00Vzt!EbhwDE0wXt3qg z*qrCQeeFC0MyGKnxI*5+e=oha!o2o{6gGpmhb6L`kQsRtRa7JbWe(D%Xu#9qGN19e90q!EH$hVx979 z!GBPE4||W(5Q5ete*`ZmaXf{f)p|k@?>P8R@BUz`%L!#}tI*R(G|ue9U$OFvINwUE z^a&X28ZB4Wa*lv>+Y2E0{w0=6c7~w@H2qfp%to|_wKpj>H-N63Cj^~um0n``9Zdd- z^@+R`2i|Tx2;USjK;udGej*rO9>WmjuN5c=L2uy{AxP3D1vlPUrub={4dC~;@PAy? zxj!%5BbJ>A{e`di-Bm)+A15{b!)s-F9H$Ma(@RNW$)fcd5)k-f;n>CG(R8R^q@I%hxSJ-`Z|-!wkXqeA1U$FjiI$ z;R44K81~#gVhQ_pzKY|B>X0*Sl2``Jfj%zuY5o^3xxF zS`Nc>#&>W-f;>}@d27(-jQEvC>sFmQM;AN9oAL;j*1-W|1d)G@=$F(?FTIt>314@k z)FyMX!-KrPv`L9nRsfIe!o?2L_8nX52G1V)iJyR4^2HI$k%9UF#h0x(kP4}{Y7MzY z$-Vmv1~*6I{e_^7JBsh_#_kyKPe3l7T(-#{6@om6v!7z+nA<8n^kcryoHaBtv>&T@ zSDR{ie1w1Z>V^h3B-#%_e=Y=B%qONa&YtJM1|>ol)sYf)DG1yk&bDvyv1v)FX&s9D z_>HkKiBM~N5>SYuJdv?q_5+bj`JQUuBQ=F^SakC{Z9r`XYKAG*2 z-pe;q*e|2XgLApWxtg(V+ir$|S$pqUCMzHfiFCd>9yeuuiRP@tesh#jqbKG9=h}R< zk8pyGN?Zqz=tum!M%DHob@`9p|2u2`Uo>F*v0x5vWl3#6Mf`=Q1+Dq-?7?-p2BU8p5?!oijt_wle@0!}?FS-NAuYb#|eg>WMl za5VRv6iDz6#Yzq`EbjMhn=N)S|Kt{Vvu6e$~Jip~coC>&Bl4H`h z!}ldSbzt=2xwL+-+5pR8F*!OrwX-4oVEnqOd&OQGQcoMu{DdIl^eN{spmD8ZT*)4tXMju^+)ykCpKlZ zLKhsUKj}#aiID@8zlX=q!N3452~}?DXR3y}r(TBN+90n)_#*s7%PP~UhZMD^6_06bOY-BN z!v`R`+6^H4k1o6tb~|I`D~*2Q#u*{#^~In3=`7q-HOy&)NfPIp^Uc1G95wDmiJ+mJ zu)g|&Xf7lTTMag_7lNFBWzEz8$A~dIcZlf)sW8iCx0)7U_>sW&{~?+q+jG!^p?uf# zZ<$}o?tp|+yLAz(yAF}^lhJ(Q7=}NGCBoj#600A35r)7a$m#@LA;{n1d}ro# zVzYatmzIsHuR-rMeq9n2F^eY?4d{se)PF?^sjVb?dG3{5nqI#8E@X6Q-@bcqoAnw_-7*Rfx}v{58_V{{wh z3Pu$+PA-l{j@IvRy{@B2v**(1phA$rzs!Ek65=^!z=EfPKAzVOxQ}ssrOl*l7CL{? zmcVjJp<%T-*HdbpW1!NE%-oM3H2ODBbiBL%cx)IM6FpcO!MfF^)Ctva?g^s=xnpFK zsB*8ho%NFoqBmopuFAW)dE5wM6i55=X}_(7csZ1h7EiecSY{OO{9R8IqHm8?S^9Jw zIBHm8J_Y#muAfBdoWN`n{P#dF75kB@$`q8PImsfjP-c2hQl?zem@n|om#uAISS`_W z6Q2ttD3_;U(uOW%xpvF~Od8cQ{K#n&jdQR5&C){XLXm&{hTXZt{6->|NF0U>L1zE* zOcAMn4%yRSj0~uJR!SU(w=+S8>w0`Nvw-DZK*&ANmwUs5+Zi}X*+K$u_PWdOtdh?P z?Kk0_iq6io?49=djw_8>uT+c;)}htV-xQX~U1T~uFodLfk+5c&DWvQDnYSn0x1b-X z7JIp?ZA#=37wVy>epTVib$_cQGBInMqoxuhn@9#vByFgd-rm}e?hSM^$Fy~@a1+0U z;s1HOD1u`o4phgW4vo2k?ji=I@a}DuoP&!K&iUJL_M|KJ@s(gml9L zvVC=LnUOn^mF^2&_?J@0KOUHcZsHk`BCup}Mw>dH)iP5fs6`;|5hapr>iVH!|H#5yV-*7@^e( zO6_Pjoawoow$j}%Cj7*4)&fcNnr}Jj)afa%fvfWom}njlp6zCc26Nxhmz_+%fM*uzug&+@EqXpOosN#2=M5 z0nO+f2x~7Je$BBczir)Z@b>0Zsx>-zh&wI>snz9^ofxTAh#-rEbtUb(2&po1m~I1M z4apbfhS3$5HTHyLkMLum4NrHvEU_$7u?k_t0f{Q}`z-FoyXdQzxVnqe+f<7X>Ld6< z!aN^Hoc$VioXz1N7_tr~k=xThvh`uy%t42kPY)3*!1paWE%aDqX+{QHHsX!f^VZDRK^M21QX{&)f0X?}tQdoRjN>|}C5yV* zMV(+;o{lXJ^{vIpbth8i@zOOPs9Z{UzMm}bWGnWfce>L}6u1|H@^;m+HJRV6juwJS z>Qdh&a!Xmia39|IiR!IFP>51RpkP4ulP8E>%{?>WqxwCwrZQUA=S2K&QxtkAKw=NI(GSK+pF#;iNv}KGZZ4V_UdYzUT~4g8sooa?o#1E-LCO(t zVJwl?LQwNMn^*M97H^45%6{tro2?Ki2s$;Lbe>jOw~!t4iurEg6>pz%a+&~04>nrD zQ~(JvED(Yc-uRgcWYz?P?4d*pLGvAmT6}qgh7dHCL5u`UHR#fd^d&%A4qfBL@OI77 z1U|J(TAZ`1|M~iV7iX>l$!_)ap>_DBDYaqBfbp-pa7Wwl-~bN%cG>ZDv(A)_YRw04 zZ0Lb#9qO1XRPw-_~tWF-DF_OR@(FK(~&iYp=ieEW0A{~zYbo5gxj1XC}< zJ=r<`rn5foqu<4<%nx=$PbBQkEPjzn`UtC0yC zM2I;le%nGk)v3d^u|N<|hceraH0LK2>L&ielHU}EM7T=0?gg6=N;yg6|0FNUnc4m> zhThNW6DJXF`EuZ?tE3_??1*6KjcZOxM_*==JTA|i#Z20CjBs9uo0doa@7b_RR-yrJ z`1MsDahfrxWMj{pY_sH~Qwc7O?7p1#bcBl@s>f;g!){Rg*V&usxtyRq7{>J^;6oBNE*_2`jMm}gUO%9o!?bvsMF3*G>MkZ;4qrm@h* zN39Nx{AC}WD05BVv#!gRjwjkq79&Ho43EWO8<@Q|87_#TI z+x5!EOq>}rv9LmJ>s8*O zX9Yf22nt3kwYt@{HGTJn!6K%0Uz*f=Fp4vq2`<1gruRw&U4=v z6SruWy1fD|Tk)hBojl6@32Lu*m!}$YXtbMmFtc$B)~S`JJt+4{z&)$1NTp61?J4){ zSoa*W&eS~VYZgV6MDm%J*>?mooWQrxy$l=XJ$T8R97d8NxJ~h(&9(cEHwD)YMvNJA zDR24eVuPt~iCZQu6!k(YVBH19o}uNY21sWMeOv>t;1m~Eamo{LmpFu zNdJYpP=YUg(?mYR<25d2v}1BkC$8_nNGnW@n#KmpmP%Yr>T!-y)NJZ+nH}(+!6dak zpHn@?osFPKuuCjrk1%{|6t}jN+UNzRIbpJ#qnsWT6l|PO`C#5u9fiR~jFe2{BIc*x zWglo2Z01mYB=2XWL~JA`aqd|}w^kOMayO0fI;ZJy&wi;if-)}zxsEN3i;T;0`UdKd zK{0;P6f&vx+R42mdBw%WCtH}ap8h9Y*}cO6z@}Q%M@s134wgtUl+VSoQG&ZWzgI$(6P;2SnLT$fbJEGWcgAi1!#6a-xOv4tAT3EZgvo5i> zB**kfe?&$8F_Os6#Eu}sjgt`r!9+e#sh;o^g6=dLvs&*AlQY* zP&gYF@MtyOvMnH$+8s}%R}j851ew~j2J`C#;9tisCLad@X~SP9X#Q=m1^dPX;@Jk; z43IP=n$mb{d|>%e0-P3}v32TH2&i5Fq>~oPgrFZC61h&Wu@<%vv?3wz%59R zEd495$A9B<=AK<5kl%P6@!QU{ytt!{|7CYR8*v?U_O}WC*{FXY`Wt9|h1maHan5cX z|Bq4qpUc7j%n^Sjo&T*oNqV+k*0X%#&YVMppyY%(1t?yA=2~yFO-DW@k^*^8MMKE> zlx0(K90cg)D?{*LX@*bhI5+>C>&ni&g}XHvfVK)AFFU*&=L$h& zI+w_uCBKT)NzgO48K-$$y%K`1cIEj(D=@k5=RCYk1linpD4hiIa;Hb=`bJ1P_pFIZ z9~W#cDQtHTxm1{A3CYmQZycGX2F(G@d^p;y%4Y0Q=7Y>vXr}Cw)ZWWp_XLu42Cw!) zDjY}kypHK8WNy^oz>!n&H<>b||!B-_HbaQv` z1}FKH7~fPICv%9N+#UXl9@GUdz;fawsLv#%3pufa1h*#Jc?*)Dmej8Dy3IX(n~t4l zPO~I0l`w2ft4rZWTp$d}g^*_SCI_%)DK&~E7`%9X4BC#2mOXinG0PR;i{|M-^|u!` zu!2!xlJp)6N%ro6)uq(3))sULL7m_jHlDFQuJi4(LU`uO$^0HwBKno{x{*Grkz=s# z`{k3II=~vg6saVyb&Tr_;N41c6oMF$J$27g{WWfwohWFD?101%x?8{+ePy}$9!U|e-VxPk*dIyeP#D*GHy-mD_WPsbc{vxt$JMwH+*O} z=d5T53MPfM1P3nGy)!(rU5>5a-ats~>YCUG*Q;~D2|-h-$2_}WVXdd?CW$}!F(*}fI`ve(u! zDJK?BA=LoXIpy zJUGTZ)#T-Qfr;b$7oU!%k&V0Pqux{pcB_5;lZ8X}SyA6*7P<7F*w0VopBI9%1VRv3 zu$X*!we-3F=-Dn&Ev`R*f#K4@vY4_{KmDM&){g~7A%^m~r?5a**79xj+N+$W35vNb zQ77`kTi>;$kmTg6-ck~(F*9q?M2P0>{86BcL|bC1;6$@HcsNs!pckLvlwVBpuNWhd z15^V9FF%@}$>}GUMr`;vzI;K}YAs5yb!PN#`PR+U?YOs6Ddogz$^1KpQ36@f2ctmy zhrdr_m5&B1kzceX(*4~+i$xu3x2oqRdN0K%l{uZ2B@q$rh*!&0B~`O1r{%i5EJ22M%054TQ>9&4w;GL=eUP2s7*&g) z*tP=+_QrB?lpT=bTbmN3;c|U`dPWG!wd-~Pm>1@O4O@6M!a&>~>s0GhZqg~}7`^u{ z<}B)fpj{dH(Mj({_sn5MhpR&pa!x>4cv@ai;)ZD%2|m0b7vmJ0ke99K?xwL>kJ#};etogW*t(PH1Bb-8H+rq~ zH51%@9kD^~;5W|`cHs-N!`|YGFUIQFKnI6Enp_p>iw~^#dQ5q5Vgz{9eTTP?m1iO^ zwHv~2$(FcdeAArRow8Ck))gZf)iq0C2Zlltmh|zWBYFpkHgfC{22IboRaE9&50XB2 z{D155hE>@poo32CC{;t~|SyuGUJ@mLb*Atc~{XJWAJT;t^rX!&D(i1-ErDLWF~_e*IQ7$W250a!4QV zU1Iy*mXULO3$H{g1|pCLcR-=i9rf+g(awV>caU?#uLb9{%hbGg6d6Oi4kCj~)w59M z@+tv6&T-^Yx=!@#UYkStb?O##9&p3mJUlJy?)+d)=)F3;W@@sR{b1EXFN(NjJ3)${IRd+?{4O7{zL{2qGClUZMsUfK{BFh%%+_65)CEvMto1%4jS1vZrz}XDz#v zJOysM=sANYP9^?(HcA3u6r9qA(QrGY*Fitq$0~ZBcPw%UPn`#E#d6!d1PUDZ zjfIj*Mni~Wr^lI^+@l1{}xwB@C9yWG;( zdO)92#wkUfRG<&z$8zlAg35Ojev(aj@T0Rr(3xg8uGmzK_GKGutDPp=LXdagiA#Kx z&z<$VUi|r)6N192nuzrrJp;Vb!tc?74d8!wE7Ae;TlyXf4)3QFCC?ehzx zxpz@P_R(9Yj;7u>#v$3CzZmBIpVsZ>) zL!e8KS`ftMsmBajB}U%TOY01=VwoJFNKBgOIW~7hH?dw}tOw|sADf4~z{^{-=r`Ww z!3JgA+I0>=%#33-tqe*|j!Nvu)htnhZ*^p52kMZ5U%>U-uUOdmWy%g+BEip1ukuY0yATToY90 zo`pcVaxljQt6_Tt01ucvI8&kFPF#yus`1@J9;|KKtUZB7`-dCZZZrrThGWAb92yqY zc&Y-uc9OVu`7%Ce;W1^NwAP*}%JNt&1J8sN<2eJ(9p^#fPMiO5mxV&n)EW@PVSJP)S3!MzJy7KK$C#o*cN5{c+T8|ax%_y@QF{Dr zAji|Z>Q5Tb3p^vql(zw&Yjs0IaaY8q9FsZ}7I6BL^S(xcly&5Wh#Unr;PcF0v_TGz z1-qlt>+u!rWi;i!Td#tanXIR*%RE)3fj>U0yrd_=f-d^@SXvw1WQ$2V-P+aDx<|a8 z(|*7Zl4M=Zs7UTs-p^kM?^_8QIIL*KHR7G^C>3$A$HKgotsZ;}#~*spRdH*y{2r&r za-ge7FbZT)t`s$H_M%yIE>4*S>(1!aoGD=HCf{{bv{*JRmX2zeFPNpX_0Zk6V_9BC zN0~-eCK-V5lfjA@wI(gTIDG|kfx5BvbktiiIL2Dgg%&%5L)KlQcF;L6Ra&d)Os zE3UZCG#I?l17qDo^?VbYr^WJTM9 zI>(hh)a6Ahx)G#K-yZ?nFHpHO4saT%EL$MSSARc;&&~AkhS_(Is4Wv`@g*~-idFm} zVz;C9CiYW)c%yu3yIy@f{^Qavkst8`_FmcNn@I*GYu(euHs zxEXVaI}K84J{eSfCOYfYVA)kTGb}$5<>~}N24e2HTQydUI6u zqE6XEGx`cgH9#nceoEqZ;hkM*qJ1}IxVxDa!$*xHI7SOHOp&R?W38Q5*SdOw@(_7% zd@$9Mska#Pa!(J|YxqE!BFfr;m~VYV#b0Z?HlKbFihMNBJ9_6J?7reYrf8U|h9>xBo8>yhOxun-vn~tMqwNH}Hiy5FS)x7M&A+hXJ?-KV?GtI|ANy$mi)_x%a znTTpf%}23--h`+-OpA_AA;`ooJ7s{z2BNCKMdPSg{6@7t*k?gpW-*C-%okgGl^wu} z8zz6AvP4ZG51I`);_fGZ}_YuQQLZn*UZbw`N!QBy+MW~x)xj{6N5V(mzaY_dG_k`95no#RTQ9_reZZiEERth8ID&TXa#ts)`{E+?PXpj;MH3*?ODqh{mUwt8 z<<~7=_-&Ox=cIo{$#2|tI`_|rPvY@=UO9vsT1xm=6LhOe-&pt2Dz42Nw}8K$F~+kz zC6_u3k(>99F(1U~*R9&r`|(gllnr!4!^3s)b~SDv3G60Oi!Xv&0OsTjAf@^*O$uD; zZo75!nhc~7-x8^Nc!Zmt{OV~G<}folY%pRcT=s4Hy?Ve5JBjMQL5ZOxa(guT(xH>tKqqgxGj9;m*u4RV?= zS2DCg+sX=Gt+mb>-$lFHu3Ut(AL9M_>b8 z7Wk_dHOxiaGYnMHx{m9-qe1JJy64om7}6eE7*w5O{iEl@iDhak%V5H8zGZEHoc&zE z%)CT&7)iT5qVL&8;%^I%`0X_#H^^FErijA!=P{QeKC}!u-$?twt?V6u#_*qan_SpCULyOg=d`H3$)Ud+gM&!<)obP zKP&PjVEkO7_?7j)qvWR&#V=d^J1G6XKVk&B!)wZdk;#fm9k-RmOFR37z`wa`z{zOe ze272;OedLi1{|)q<=%;c(hilP<}CSvjM1Eg?$J2vHSPfK;n0<du_fzEt~t)|@X0pq0E~={J6sl~>TjqNm7W~E zd$PS}!@(uUhtQGd_ z=3QwnH6E%%iaW`f`YI*YeLS7U^#67mIPX`c_aPNeGvdiiTmVX&|MSd>jqtV%Yl^UHt#*U&eP7r4d9#Xl2-HNAQJ#BauC6ZkifESyy$a-m z{F2eG>E_uoM$@mSI!9ZTy>3zAA_yui@Kx`2z#F**@VeJHK6jrLRGb4G;SPd1VI-W5 z%(!~>W3^r!w+-O|O_&qlYKjI3$ew-C+iG z&CMLGj`e2Ny_LTaa6SDa3JT9;{9vustvXMut@+`u0)d@EFDcMj(es;!@H-#!@*<^5 zV#8&Wq*K#moo;0Z@y6!kQhDn()^n+7g4Dwqnx);#;AWtD^jiX5Z7x`Wo4;hNNPr}GM`fYC=E-oqT$Qx_Rn2l^OTX75* zV8gAeUbVctP^k# z0FbqvnW5RVU3+7Czbn!ht<$T|qvve9g3sq5eae}TY8$bmozn|jG>g6?(WpW|@0J;3p3k7cZ(^X4_K1q~3HUFzji6EWcqS=LoW^`s2@X4@0 zxf0HX;)wWJUYYkZiNjxHP|8Nrx35eMw_obAlQ+ zEoN^&goJ@+P6qcaI_F!)x z+JoOfh~v^0S0gYI506TXa;_L zhHm7uC4?Zk!-|&PjKs=iSWp)B$UqtLw0t_UPUq%i^xUC>C(7Se3qiNobpAWKSszxt zV<4xrs8!cgYo?94DvnREv4(Vq=0VTY#uyaKEwz+sb5D#3zAu2WKf-u6;LqPGQZp+M z=OkG7t!HUiAPRs(MW`9X1t1XCKGwQlE~G~X7a>s_7KIT2gr@6jmBTh$1uc~DE#PPo zQ`1L@K^pOzcx*Uv0tT(f#WQfri}=s@;)ZtwSk$C9Cg27NL7~q!LXI*tGoNuPOxya) z@?#M2jS73_z{%orP_AB_?@d^!3g?fvm9htRnllkC#69 zEku8yXwLcBQD!ZG`0KOT6Ms)9$XhGeZxbhcsN6#SOjPEPEkw)WHq9N6W;LQ6Q#^1F zSPfC?s`&2(F0PlU1V&6%hfflDYb$;4)n>}Tw$=r-=~;4~=lr=gH$m^JUvcekqA~*2#LOiD!mUja`z6}5?4ghpj)0!}uf8PJsvg@|OsM>EEVvCo> zg%(AGa^H{4q`uRLcCcV&7c9X0BT?jrJ6N3K3vYM#FDxktJu9C%ExF3KD0_!nMA4;MeCBM9a!|_G(!5Ubs6dVAkg$l@j@B4qdi-kG>_UHMW#N z1_~;OoWs{TJU;Gau|1W$%O6e4MpNb*Bsgo3g5|8-uR*YSFCfWT+YV;TF2W=x<#G3k zuE`VT+Lot-_ZuWuvk?@(#X062p3?E!J)%3+vO}3M)9^gq%DGe03Kw|pF8geo-HE^k zYEamQck^hf1z!z+Ec-eBGblBGrULI6rdJY0-F>syPcGZWxThYP5tQhq%k(uD24qS$ zZc`LBrV{C$i8hXMa#V5R@n}xHyY9X2vZ+++Z35&8-x)9^e+^pE&?*L|I?8c>m3#Jt z$*Z1;o8!waJ#JD~N%`-_>0`yP9|$abogAF__MDe%zi|-H036UFZU(<=Dps4VrMvce zsc&XDm*?+EVAt}%69z&M1!yk#8*(a$Vx?yN27Q}tBrIA+!_WZ=DM;16@i;6;HpzJik*>0i_;VZ(ctVa53x1O@a@Z*6*j@LHR1_5Q$Uhkk=_cFKU z_XvS~hS4U`0Ix9?y0kMTj%`BD51%yXOz7xAh1Oj%mm}SmI}zD)EkFZ@tqKIaCN4(!d|D$#7e0C6V^$6$Dpb^e}FcWn=C-6*U zxjN7S*c_`0qtMF09y7s97q?;VE+-{y?{Lu-cNR;ZnlV7M3fknT%bdnVv$9XY*LgzGvW5V?I_Z%%a%1~h%C9QNDHNjQX@emG@y*-s8< zuHZC;GKP?yrTaGWxq1pjJiRmhYficMb;^(2LLJ>4LF+v{Pf6QR(IL{0TSvij$?eIB zJS8HW`6N7V`RSSHW&fCj!=a+1uT5=;oYCb4@YiKRp3K>rZuHz)wnI+erXC2$@|$pl zm&+e5X#+P;K6i`Mtv%x@ce5Z~rT%Fz&<5#wHCtwq z_|=#}(af9SiEM{{+v}AwZxu3hIyZK-0I5HGI*3tf4_3o>3qcX|Y1#$1Mt?tj20#2k z+>L_g{1-G+MQ{nk!&U!K9ISRfaOk7cMIbWgYFqo6XZU$=?6%?q)_{WtTG6B?nVGbn z{*p+r+V1(Zq;;EsMn$Z}t-lR#o)Et}{VktNzuSHt;JKTMdzJwqn%JwmyhFV0%>nbg zxE=hlYp~k%dCFI7!T&~Dz=KShe*!(I_yl%$XG_cZHu=>uQG*`61AUe;bg_dGf&-|L zslr7$juE&bFpgz_g6~ndmHmk3+l38(=uM-|lM(FAccAG7r}V>P)4j+Dk#Tqid~IjuKt8-gBQxQE;l!iXF;6_105tW=QNLww zknN$SzVsTLI@t`a#CJ8m>C=YmRB)}S~7{qgFF?+ zID=TFu(1In=Ny$pUQgmepSZKGnTAC|*~h}Ams;@*yx(iGs;!r|d!`3o%GwKmj@g&+ zI?%Y4ckXsmN%x2$@iiXT$OYH1$3-UN)JG9Aykng@#PukjFnXx2ff#|l3Fv4Q+uotK z$uem_^qrv9RpbTW-xpB)>Vqv?dA6MxjfL)P!`p_iSG5CWu=6=BEj?gP9Fh`CmWYRt z`N7=0E?$#pn|bHMk4p)sYxQcnxL}VC!HiY*Q{I~5*@(efUFnY5tF0u7ta%HQJzX$Dl5%M2Bd*Z7WGs`MB)w)XGZY1vB`lJ022NljKx_TR{ z#?Q9jP967LmtG#qy8@Sa={yzV^KE-)6u}9mj(}U#G$dGd z_|&2$@By}C!Q#E*YEIqY{6I;W-_)gocAai$?jobqgK@55Is9yBIGC zJZZKh2BtC&xOb6Y7J9j8KFiHW@sTGtIs9O@*;w4Q8g%&M6_a@u_2#r~S)?*q15>cv zM08wVN`N;s^H8gi{G~o49VafE`;Y=8>6L(}>P->OcgP~RM{CWI#L0Th>h>6d42zUG zk)Qs`*1K0h@kHSD4=`83ArB1gFxa*ksl!RHhN`q;)d%~0=rx<2ZuWBSqW8IsMwh?K ze6xKzKh9A>(Sfw zJA!96z=zgcWJ-j%i#xZ_P21t`jqO(Ah|{h+jrZ>~X7?erC_u{74iF+=zE$1nF3qgx zB(1{KIIbspDIv3F=jEOH`->qTGDvf(5lrn$+uaPmR6E}^;4qnGPCMFs(qx)WbvzL@ zrnU@!qpUSgVW@E>Y@ai=su~9*?)h!s=NzN2!@k*5A^rg(%d%VRuMly|bz6l5PaNvv zLO-n7e9K+@sg}-M(znl+hCRE|k9D5yo!D2Q8b2EQwYUWehzB=&LyUCoz&HV^h%)FQJ(@T&mOA%*J=Y&Wes6 zE@OU;WFQ}ymBJmgr)(@5vNp(;pU5u`%a4mXwxbQeXYK;6s7!SU(hHyGMQ9fT-c1pp zH(K&6Bp5_nj1(5yM6YUJY>xc6Ra5H&d~ZFU&v=W=yFnsA%g#n89HR8d6apWs7)0bB@c* zCywrc%Ukst*ecNjNAZvJp!JVeEau6bwb7}QPFE`LRlbNRq&{&b8vz%kAS5}OW0rbR z#xH7KO?_Z5zi`%zUbmqxwPzZkKcc7*&J}`saYPk2`P3@7A9b$J9kZqCnO8V?x-GCG z-)RHGdH23M_4~1eKBy;roGT^0VqrvPPLISCvt*7YGqsPjmKwhb+qbZ7>CySo2Gf$Q z&%K7a9wr&gkh#1lx~D+=2@1}61+;5@xWOf(&bdek?*P-2r$Uq})xD(^+KX%(ZpDm{n|pTQ z2Tk_PL3;gWL~0rtr)>nMmXH3q-}R>+*zDb$rNMQ16w!*r9;f2yO!sUX6++K=tsoLj z=GUb*#4CyO@HK}OGcRV&J}(VWy?Y@}4y+u+ZBHMa0S^XzNRVT6gr=j411r2-ZrpI= z*3F#S^<5EdV`EOaz+(ZSFGu6EyXPzp4FGpwlfkQcE{~IU7q(=&;UFix&{tdS<}__b zCk6-&#&F;uFGsTVYLjS(6wqsZYt{bx&G3ED^V(sJf*I>IU=@7vBUX*f+~Ct!9iNFRkYBhx&XP~7cSmi|l72%s zJ~lUmh+^Yw%9gkbE2eZTJ^%+va_O2n+h$H7g5Fp;TgW}^MOopa&_pq#vgYCLTpwH` z1-h`r=D*KH4I-pCDMLohZrKX9wMiezNe?;EEj{g{ZFcv!*lsm!)T-qIEywz*HB}%S z_&ByoqKYDEHDwOxXDhx+uOFx>xmU657X9&KhUi#Pem5&VVkb5{JeVz2X7437XdKSF zmEvUH#3?rL(pn5cUvHbnxb>YGJ;Z33s|d2|miP!KH21+Ga3GxBaqL8YU6}d&V8J~t z5>Xbpj&`bT8d|3owL$-J6Lp$PfC?(9T=ntdKbx^^BHl4uauO2P@#LA4yjqZMXy_K? zCC{cE;TY8k*w8z8S?e$jXoZ=HcbFt@E;Sv*&uB?IQk9BY7RsPCCT-s|C*}o2I>h$b z1D&y+Gr7avIj!_2(Uyx=zAw=p-fv!D(7|QJ1<78`y3fmGXP`qj+1NCm zU`VF`ca9WHe^O)4uX<_LwkA4f8@D&!=v6s}uG*#`Prj1NG>*8|bmoQNAcZQ}PN>`l zed}V@a34)Rg(XhfK$n5~-K@UFNvaZ4E5z_R=7kmK{@9WGT#M*+SvuSUr)$@??s&RK zJMjS>Pv(w`P%X~pqpI^vgTmgYuvXEb58_D;qag4d9MWPF1q3PP2+H`bW|( zn_#}1D~h{@i#kn^q+P-BC(hOnil1++gsQi@5#>>`oy%q6K`dFT7uJ}Q*Q4sZONnZ9 zp#6w=2!uO#9NYYg!@U$WbWBm=HPbwa)ewGE<65OtoM` zW6w-yh%B>*;HcEZ^S`7KJ7f1qfFty=ON1Z=pE8j2=ql{i&#tM+pKMU?Vx1zi{?=h>nVdo4 z7*A8iLh&@9b5kBR0Dc3UmC*pIDM+5PxcDji_ki=^?^h@AD&X_+%tV1CS8HjI#$FVH zs_$sku5!)lJnp`5{l&@i$K2d4P6)PNl=#c}99NEY+wp0$F~eMCN)FrpjZC<{0_*#aGWISjZC*3eoYpm3U21DC9csiSSCPDgfZO)~a+(gz*d&+kbE zVjO-9kBQ+f1KVfJQ(__Kt0?p-AqZ%Mh+I2nlNB;GUUw;Ju zX)!BK@c?Q{e~kpWYXu<#9;K%y#;43WkY8QMceFPuaN52el2$aa&+02uqgjL5V4Ab@ z0)k~8zjwF3%Oja4pwnbM(0Trsh`x;SicjS2Tj7$oUW;>G4-H= zapiQ!>ppyDurg2`cCs(HKcH79U%b43^yOCpr(AG<@K9uB7V)E7miA@NRneeQ1S;Kj zDz2i(+R!C#XTAI-45Ao_IvVJ#DL@PU)m~^ROP*+W7m`8qnwf%g_ZmFnC4VH|oZ*rX ze+?SS_O%Z_1ihSLhf_%!fC~O=xsZQs{uOC>b^QO@;L{oO-^=}H_RMi5?_mvu7KY@H z)EoSbW=R}LWdqf)ugvwymW|EEjQy|nt~091bkAcOydt0?pdfM)5WI>E(iAYUA<~SM z4pDl55D}0Th|VY=MFbSaLH0*NDSkP;;nNg$CLT1Y}kAtCNNckk}KbIY9F zbN0jT9zNt#&ig*+eV*svfB)Yfh)DDp#qDb6Q&Lh&$ahNq)_VP&T~Q@bwslU4?59vD zgh?i?86hpxg$S;c{>~$6``skuKS{{1ZT~kKmGu2?sL0<_yG^={;qaxMP{hb^(;?)O z5u&#U%b;KT?XmprB`%QHGyoHA02TVXn?IjZ-GkY$6S*8&EILF?Xl2g10+GY-_z+rF z6yray-EG5n@uiDvL{QX-)bQ8V|9`1<1F3U{|5{l33dAlBQ8Gy z5=!tlOYQ&TiPGJXo~K|m_y~hy{L6z$`dqbt;|~bhAJ|fPT6Db?XfZh3uD1QO7;-2~ z63hx|YjNlxYu;%>U8lCaE*fz|EJ}o48f$~MT4Tzw8_KUwg_U_7>wei@xaW@61C2}C zBLH$MzcS_F^6m{jPQssy1AQ(pISD+P9sww}TQCby{*tHP0o#4>k);PrBC5kak~iMW zX93-S<(?$W?b^`CGd*p=RU&?pcnPKQ@l6R*tIuF1H7}}JdI+xWlEYg-&dd+YYU++Y z*stn1gI&?56Q;_&kXm(8N`sWb+dN>=&Zo}hpns%m7aCiH_(s<;h;l#*p7Uu-UBa=z z)%)lpDz$2@{fxqe#E*w%jfduMWto0Nb?&H~8z_PBSl09kxs&Fu4OwlpDFDjZD#^1Q zJ>zMBmAY%@l+1!RRRM@*?XW6(BcJx;EMc(O{%WLYCtJk!V@lKC4@ppZ%4XSIFaCh@ zJ0j1D;H8Ok&zMg?8IpCvVEZrAQJsyVpUp{>Od!ZomboH?@Gw_+kBG(7YLuiE`*^$f zT^inww)pxZ>}$ljMLSE<2ctn$x3iTs&&L_pSE+7``}D_8^8gMOV1qZ@2_QCxr11A` zLiXeHqZC9Qb!w$GA{Nrzu?$gxp=(HGn^kCMV9qKPi0tEOlC1AW7E!7!4^}E^J2TiB zou-CLeu4XB8i&Qt#-1F=$-P$yj(-t9ebcZyJV{i~FOWY$GKHlo)End^jcK^Roc%vu zErubC(7tzUcWH9w^@B8Q_;d&qXSS?&*^rwN`v&rBN_b3#Q#!ori>*E{DVIU64&&ves^?seXhOt{15$>0 zb9Y!@;WdK~DooDzFKn&tJsR-@+un(B*yuw;L+bw9(m$F^a z*m-eydGwMU&#AbIK5JfkaPPG|t<7@>&Q3O*1$Y~V-vhB^2jF(|1{fJ!5YzsXA^t^K z50Bvj<9~N{8xreFp#X41-~zNmcd!%o(`ds`7_CO4bVBi9?hV0#5!GBY92<6W&H|C< zCQl;7`Ah~W`UNOr!^?GFk+7;A=aO!yn%Q9ir2l5Ut;2RAe6{ zD0@ZsMWbBmzHerse3}TkaRUBLst}gWdu5&Bila_aSAO!ket+1b|im zqE3LBb{P<%Qx0JArnnBY?02@ox@20`j)w}dTgRr8vG1RWUzT)plbofJo)*cUoo=xSHM7L<2pG(Zbnhni4fw0X_NdETQO|%$<5;@$o{23Ac@Kv?14twrwc&I+2>W@bqg& zKu0)v!bWN`)ERzCEmo1Oe6vJi`B~y#5*^Tj_N$qz%Tb&kjKZDk5fw=%!0f@eGGV9v z=N0wCmZj(uh6Ym&DUM{V3ulZaOs%;%)W}?8>_QM%Y zlg2TilKl}yK}c>la8kTf8hECJBqSK-cl-Ln_2Ryl*M{IBZ{GQaH-da^GF1b@MR#4_ z0{n+;`xd9z5EU9e(=$dtQnQ-;+IZ_FOoF4~pKiYP+RVq7E_IQf6Pcmjms%NdUjkxEI)EqD z^N!@M`eXP{sCcS>W^$GfSwY+*fO19yH_D;X2Wr2`>{x+r56X$UkQwy-7k4lE5RtCk zXw;xXjqi(!5*@bd95;IySvve>*fm(qvrqLBed~(+iP0tG&^Dcp{I{V{@>MU1K_aiF zSnYL-LFsG`4f|1c!A%4Er+8$;IP#F#w6(xpi0K))i57U^9`$p|@e?)JE}NKLQvnQV z1f9u2%gnAI((^TXS9EX(q->|rul4x@pC=M2KJ$ivcx^<;F9B@k!9H!!ohHo9sk%f0 zxv#QnPjbjI(YYQI^qe?<`h%gSc~i_(lh|m+q766NZJn4J1;W7OpS~YhK1UWi1Wq;= z_vAZZMu6BGTj43}52*M;y7xxt&2+Ws+7HJ{?C?T_QpYX1!sMl9+!M!)Y#cxmK`fAX ze2#2#>)nH(jWI7h8k|o#;_FC?2%Tx72>KPTx!D4}g1%lZ)|&hWU8)`@=T$m(WKhL=3*9lh1{9xN+m)g!ve5fTWo(cAmXdVTUtKq~^ zX5!_*UC|+xFHFX*#i0}Sl* zAb$qV5C(37wvl(?IUBlfG^FR08dNlk5OIFqOQ&H=aHetbutWdhsx&u^%BphL4u#iz z_@B(p)zCxWFO4l?t`51?P`t68nF`%FI98QhjtGs6zKO57)>^@Mo_qe#E=Or3jyNW3 zr44HT+CNuyKlTAVxZ!qm*%-4q_I_0yP;G&+Tp1>egcS^`D?flzT`Wk~5cZ&tadfc;8W)sA`ty|&v$}=abQ$F1x;=X6IH%ES=M+(gb zs$`3w1rn^=1kzP(0U4iblDoz;t9T(yYEdz&scG#g9WBfsaIxnM?E^(EK-Zc$ZWg&e z%Msc3t`5x%vT%~qsk_hc%uAYa>7p8>8Z@OfZGOuU1=b_EgIl)9F37*N8w0hk5Ra7H$x zfFy((P(I8dWUb2`_wh5ECuYN~$-&JBEHs{pF^`cL5@&B2@W3B9<2<=;!-q7KqGSC2 zs_;T}U4|g}a=`)skaz zkXv3cmY+&i3giXBVpw3HOnPwQ3q4y1PD+uPCXYs*F7^oSh=GNbV>jom3hOh{MCf z))Qxq$vKvKd7anUXUB^Z%Monv(b{rrHPO~@)L1b3@54b4`PAHR$}Pd{wg5 z)w1EaLowmyE?%$?epDyRSKE8QgN|fD7v_BPqIaI+{78uOIJFUi0{!@gsdGtAK;lZ^ zR+Md&dt_sLFX+60{D#L(wW<-UYDMP<$me$Q~^ch1?QSUyea7}71rMp6Y& zXH6#)b_#7ugw7t+DnsODv#O%$0jldv>@EBSWC_&Ys+|$lFs}(xX}a>y>yJ~7VSp*d zCRWw#sgN>b$+~%uz9vpZiF{JQ>=Ttab%{O@TH0ki^MPq+N4W2PqGleL`nGOp!{!R}eK?twj_N*BZTzcRXg?+7r31BX~H ziPX$s?0egbpUbG8yTb6Y`UP!e;hTZX*rxq4Ly`MV`&GZbRBp~`ReL5gx;2Xesed%r z%2ke?APQcx$?)(V-Lt$ z?%aH65xKmMvIjI}@@m5PEfbw|@_tk)MBS z6{oSE6-7~jqH=MZ2PeibTme54&)sJMvrkt$G+#B|s5Fh<1#6pBQBBjKd;ZFWLq4T$ zq1P^_xigyHysCnEF}nn~BN4P8X30JgKMZ9#W^88(H4^}^2-3UhV&k}-&}$VS`f|KT zan4Nm1>sYdXb%|Fz{D}saXo0Z4-kjPp8N-1o?B2Qk}m2)6QMeAo{Z0j5g=+HsysT} zgvph$cH-%^RVhRxTF74r{?eFNW|Z(KxIZV@KYN!}Op!Rb@)sMo)HdekWmIy4uC#9u z5gCiGV+L5cm*1#kG&GZgNkDNGwZdjDvGkp&@T^)k_SmCZAgG zO91wi9=NH5Cup%ZOftLV5oBiZnvGA|MJaYU`O*E4ldmxW!;si1i7l_J`66%2qtqhz z5l_omr-3W8n!Zu*oTAi6m&mLV2v*ZBY25i|WnoLm80K2y0OPpty$VD8N>c`Fli>4V z3sJbCWLZRdG6a&F-Q?CyNGVKhW?fEljyIgY(0lUZPO^ahO{Sm3xEdhYcK5)Kd^9)x zgJnCs(!>(f`%Zp8JRMH<8Tl2+oGxJCS0HI<=cLfe(YiRc_b7+a)7x&}I}tO|JEUi{ zB9huL$&*EAxgf?#Me*?M$5hzSg6&<|_&EcRO~cbE!?#M}g*zaCT=DuLaNtREN1p7% zBaslrIdptZ>Xzqie0$l&$>8k!X($3YCH1OMmK7MAkA=N)o09gZn@b0Jvliu(7rx2N zMiofGlH29>+>6%7^m*GkFw!4tn74{j#A@i9rW$^x0^orEGAINYmjb%S%RrD_WcOLmb#pbr|iYp zmWPnvy?(Zg_pPgD)++@(TXeuK0cW$XKwGICkw%9Y+roBtU_&*z%i z8c~PX1=aCB`agybQEzd?eLzgH`l_RgoTRjX{q0nPfsqcAug{L6(upITpceV^Cw)w&$5>y33i`B#JV|H3ZdXaB|y+Me2N zaIhiE0TNnW8LP!lCAN#9n%t3m5Wukj0lK@?#)1A8pb#!U zG|pMwEQ|uUhAY9swcSo0Z|9G~q7;Rpl;6DOn@r+7Pq4NTX$cG?8Pt>{r07p(+?dJ* zT>HQKBjfKMefh|Rudx2gzaGgyY}xu=u3w_Rh}F9E{HNktR~zdp_|GP6U0<#n-F0u{ z|ALzZCIn<;Xbyq)0g0gC3@I3DBJmK8z7aN$sg#yOXJVnWh5H72PjF?tZTjz*AUE`1 VHgy#lUDsh#C6D$6-?8~N^lzdZYP=vbV zMNq2zTe;fa^cE3C(rYoXMEOu-(gyhm9J1;r#g4;+?7Wv4|UF+JC8ee?t;ue z6u=b^RcUYF-+6Z(uW#pU*~w`r0`>J_WT)=%4^(nk(Ow}onfwNZl{F81i9keXfV?oxw&7o z)30M>qU6IJj?AY}owV#@$nf4RQKs!;^=Mtc~ZWHoCWx8i*!r4##AUYWVQkqlmm z&at7vXOVNlP7;R-`a8TN0ldo>jgj2VkJ7A1Z_|=m(th`K4wnjeN$n$tzYI?=gA2u8 z=StVs2|bqfwUbav4%wdTX~br27b~18$jpm#Xb%y(i&Y|JNQz3J zZLD2ScDmbE-qQzdD~QLVeF){w6VTeR*IZNg0(wty8I!LClG~RC@?1StXCuwrY?p}o z*U=u{nu8h7SVG(n#%Wr43W;sy3u(1}^8;77y!*tdvz(3#%I0dntezB2DWPRER)ul* zN#<-@R9QF5+?@PavE`C0m^3cFPi`~c&1cGl+V_XoJ?68F_mr1e=a;sXceC!uybRC! z$IRBtUSZ!#u*8r4#9r0q%ecIxM7|%R*|IySxH?#0rxCeNc%I)azvC`(7<^>nvblit z4wr89$zh%eMtG>0bi6tc!c${%BT1or83>MA@*szG|3IhZ58ihD z2$YdNc&qFndq540tWW0}A8vR%^Y7?~^{<18gzUENE0DawvtbDuV3cz}C{iEJr{-*) zQc*QN6sd5Ptg|<~gM|?6rGgw2a{rDo9FF_Oa@)9MJWyssm^|uUN_mER<_My~`7LT8 zm&(6$L>&oNVX#`KuBwIkQ;;V=l{*6wUDEZv?Yioa?b*QT3^63?D(&dfNmq)-k4Otw z;;$QLujJFaPc4L|)qz+oQxm6pwv-SYlAHhAKvf`=^Orz2p6(BzWj;OfTIG}YM*nP- zsoG+=dt(Dlq{VeGwtCmW$c10#|21cTs53747U(!*^Ic6!{|yz9xH8^0q4nQ{c;&%j zvZTc%YQ+xPtrBt)=3j$QcDsFF0}0gEKz8J{RY!+Gta4!j87%3ake&}7{e8ukGDyPQ zWiYWXe>mtn?~*Enu%d;?WVwrbfjHY6%UlMSkh_pPlg_}Jv*j`4cw~#ofDnK!aJI{i z^IlRkO4Y%n2Vuv$?&LET0mmsJOjGO;IWVTlz@x=h(yQ^Q!Bbj|lgZXiGn$j*rA)zi zVPK`9ixn``qrzI4rXeCJT@agc@|7Ex=mDJlF}LTfW0Sb z4c6&#!}E=1gHQoAogZeCq@Lc0SA8m=%^-WAnNNl{iNICICn;m-eld>?$?9%T~8!c_c zrn?_1a|eNwll-d+wlKs(_(dCE3KRdxpCh#YnNsd6HVHMHHX|}{SmxDS9M=9tXG&R) z7<yd10RKoFo3h&P2eI;{Kn*~wzIogT=32$@VXx_2<9={d z1UtOoe|J}73pju&&7ZNtxNmzfaRUtN04&B3VKW8-w?fcIjT~#ISjWXMSx9tQ@#=2oP_Ms-qg1t$C*DQJajK1TE0;uw#VSIt zZGJCg)->#Pj1(LLXCX$XXn0f-UYAwp3`g*CLwJUYU{Cpt4ARFQRX!|4R&p@J4B4>; zv&`olPR|}shgILV>Oti=67tmtf^x4+;vC+nGvpaR-E#0&sW*)^H3vD_b*Rhi0yu_o_ z=p7&)5jav;!tgZgZQw{MSJ^7H&eEG$?>pVKCFa4mwCPrlkZ%LmboPNGW6Z#Z+mux? z#z+^za&x}*N?Jfbse=@xfg2t<&v)ECMM0N!R1)&3ttHK#WK_KfTZ+aNhk9K%EHdRSNxMB-G_d-u5;n-YVs6pXCX3cL53de?}~CP=($1oZOD6k?lm3u zJVow^z)rjZi(Bb>pN=d`0vx3kzK=3aJm7(D7oDgN=uhN4&5TpWsX<+z39(xCJ+=f! zQD=PSP2hJJ@@6fbd66Ap_0*Xooj5a(Dfu0?7)D#N1M2Ok027f_u#kXqIN8D2Ky2z^ z0z2(zj@ZT=2tM=%U`}VvDQRJpla|R|E;2RvSUDcFeCCpDh}6WIGw+r{M-RD8C1ivt ztv>T@%Ri=!OSpjld{!wL*;k73Cof5`m9a(17d59dw6vs(H8ZyRDljKRbw z$sm-RAtwEQE+&R!dbXw0$6`SEzjx}p!>7XVH+(n-fsrpMP!==)^EcLSL19(Y5W;_+ zulmx<3s2E1B?z55+Zg(X~n z-e(n--tgq!c5aw^b6GiK66DeOQO)0<*v&;LKI^wFK`V5b z*hOsU#})cm91gFH9%~yVfUBk?h`NtE#PI%i6BB#aO*An~jrH!29mUJ=Tl(`VaSVaw68% zi_=8%i=$JZ<6*^7y1xb1J)(HG>SugbJN8qYUz*`%{z$xS9ykDY0qzeqv1dFGWCt>Q zN+Ydk+MoubuX@zzM48`79X!1IKC6bGQw%(U_+&`u^}YW`1y0F2Xw0qG{F z#R3U#IH&uVv>nLC9=1$?K$afej{r_N6spO6jsPzn|R399l>IKd4BAd&h@-U z6qv}$Rvil_ev=nN_#YnMHRP-mY!Jt8b5Ex^N$zHfrTr#eS9_>i0)(jxV)1xd;Z`H~r3?bR4 z6o|snJqjl9LO0QZhesS%?i8sERswt~5DHlaAA_BH4s@Xr6ts-A@x-6>dK@c54+>=x z!f4@JR9(S$Mp>YG#8|Gy!pAVp8hBVTd`0tpDZG4Q;HoAI-$R1(jajc*e+}7&AL3t` zyF0gfiOML%at$vj*YTOhEn~faMw(syh1|7$&fsKg29%@FidvFjw749yDAPn~P6DbD zVLhT8W%t|tG3BDH_4j}T!QOL*&O;U-SJLuJh}_h*l}yk4al02u_-0OZ`KPAG1M?pQ zMehh7R1#x>rO}{5b`QW%DtHA3s1T0Ui$~K`hS(16O@Jg!Q7mYw8d1NzGJ-Iz)nxgu z$hKa@QPj=K#K9+ln!D7qdbg677(SpFW{0O*$d0|0#2euuC;M94266gu)DalCWiBe{zaxJC)Sv0NjZ+gE5Ro9J-qtmhjYN612`7t9W1$TSm`MCoB{q;P1BeRO<^+~s+z5*>3n(IfNrA$Tnp8TZ zVDd+m>dWT`-4Y@oR(_#&Y90$Bena@1pFK>tVZCW#)~XAfE{S&8Bf2eF=nmQ3M;e=mcU$!mp4EKDG#Kh+aoX z_)e2|M<=B!%7PsO%%>8qeP7l*v0c51fzqv}%VXwlZ`FmdXa4+jy@ZzgJp2zx5=us) zp&LdRRiZ6&n&m+8)Se(lG$2%l=$M4Pb<{4<$z(39%Td4HYH(-Na7EXNx}X;NK8lm{ z^3;~c7`Un&Rz^NntTmb`-rU_<*YzzsPHxfC(quhEM8knxGCE;i<nNS_|f3uh_5j%uPb1~Mc;O9JLBLgD0TdhE4^AFBzn_3YTD78NX9aYkN zk$~|B#ON$MMgKO2r*%7N7E3EM9%bKXNdPqpG^*P*sTBJ!P#7jayFAv+_|=YgUbTcW z7fM+`d8A_kZ_E4ZFyqyv8jtOe@f;fpkJCnN7s7~EsjsA-&{{kAbLV#+YEdOyz2o3j z(Y**JZgvN?0aI$F$*1zOEmpLEQixy4$2BpeUVJ_%IEyJohu!!o24*;~aAiax&1XN@ zDu&b;4F)|#Jykm9tEEiP_9@Y<8tc*JU)1+)EXOQl>4`sV6v5I(WwVilN5-F0E~BVH zyIxVsdOt=ICqv!tLc0oUF!5zASD{^3@*ds}Atp_P*de>z2JD7=?#lL1eiV-j5yKz9 z-#w4KzB?RUG@UG?q=zZMihz+kGZxdUFSdpsz>=9*fdFE%O9_kwVtx9*X?NsVB3tlz zM;Q0?ED`JN8fxyej}*lAeZd7zb?p63Sqlaoy8~q$$zel5p<@lK(2thb^fw2-UkE~# zT9D%-^35gnmd^0N5(7-~-=O4XIK--$x!4wSmiF&tEZbt%_h7w{JoHK*kW9*_R=@=I z&tew46q4`Xr{MHapz$MfWChH)Q^JiREU<|gNTB~K16U6QM!Hm%@peB)(1;fN-w;v< zVU;j#j9d^o_xDajD8D})QN5jY^te~ zYN+_YHyR6SEV9LHnfLxSJLyGB?(dqN?zUwsgixH$$sdK(by&C!%I-xTx&z@zO{H|Z zbDeb(6R(Q9?0v)vH4-S%yoWLEQCF!Ul=c?ITTz={=sho|_nmXZh29{uqfRrnBZB4$ z;rZ#wvD4Z>MVeD;^LZ$nzP>)?hR@h1iu&1r!!mAOa(mu2K=xe+Av8{~5GX*XwHE?# zoPG;2F^DVEJI4*a={1A0wNzAn)UwyS!G1I^e`0Ao#OyAckjR+V$Wda9S)C0^w?||; zwJf^5G#`W&$~yW8o{dl4#Us8zrTH z?|3hT{EmYBNS^#DX%Oo7O949JYWhg>ds{C&M*hURI{z?8em^LPTousxw8hCpj9;n` zSgn6s|KR=U_ws<w(XJNv|3HG}R z023^rzH`~oY%5$}#D%x(k1Bs_UM;JoRo~-45Gv1=f(LvJ9RwQp0@6O5t?a5{|ILds zBTWqoe%+N<{T6u5?1&GZaKI-7yxYK7^IBFW0xf#Ky+80>1)JN_Kn82mcE-jO=8Z48 zLh&u+?a)olpR#{fmj--5k-? z6jj}x-U#rb@49)!g(h-oNJ4VR2XsD|wC;lTjc3XsJ}-ti+{?1Xf>Nbsh)MM#0@Pb! z$72EOV^}-+ZDILgZU+X6tP_$IzxCVtR}QMHuP8Z~1yab#d0N2vi18(0kG0v#ACBLN zj7)EiixGcfs8UJsYjt_JFfCZ$QqLixNjtlGpNI&mEOc@4n`iB+YMQ&^l2UPdKIN-8 zoT}&RMvNcfmZihPJ&MKH#)v7g`JH~3fNBkPfA6Ui`OnLIC$jRJm zX#n=F{ELIn-fVJy-ZCy0sq!cD^3Hf1dT-iG-2DRcY)rsTZvRn^jQQ_iPr;oy)+)bM z<5~NjwMAx@>iCX&15ITxa()kX=z<`ggUb56bRE_ZkAf=k9oPGo1Fe=Ed~jE%M?g_&kZONJU*u z90V$2ZyWw`JE*w2^x1~d>Zsx~v#G!}`zyli$ij`h)?!8& z+a4eQi>TG4s_Lz5c;R-kQz$>(vE|>oy)-E9MpqZ2vUFonSL)%yE6!_7RCG*MhOT&W z;cq(^lqb6+Imlx2$+J|0r45h0seI5Se*#qe%4(w7B!{?f;VY~5jnqtK&hsLcoE=f- z2rI=K_D*(9FJe5^9-?xNo>^WHd=?(Sk@_jrLpimhY5U*cblQJ96eGj~t>M9S>{M}{ z`RW+1pedZD)bXo*^9WiB+ktdDIQH5wVWMA9$cAg&l>#N1fdFb;<$Sof`H~>et-G}T zUot!GzLoLBsMu99!7som@@@zqmF@L(OP?LIk0wJj*^Ko!P=mf=BN>B1-0hy%&0d9t zw~UU$A&)dp$^>5-9h3-p36`#-mfA$DFVxBm_lyo%LJK6Ph2{Ps;tkXl+Wglnp_9*# zHRBz`yKpHPR=Tr6Yw>}Rw%iTmjoI1xawddhld&+Ed$<->{Z9om=1mihDODeF!C%3= zf_Vi_t1R2(bUj;k;J202Pc5mA<#vTqzNj(hyDBMwxhkk_PK!9LsjA)i5n{(bBMets zJO{Bly4o3gaVgs3t;r`zCG6U5vZ2pJWU^-=9vff)q~*h`z;eR#Pfq`4FS3Gtu$>69sJ^e=(t6z9wpaEGiG9htF}?1d zTkTdV#bkQZ)GfvC2%UqseKkwAf9GYH4`&Fi^EOQ~lPS{H<%lfmdO;Ny5mwShWRawU!46ndL~) z1r_DT6P-PWKPlyZ5GWbOoA+j%q99f^`@d-CUyJsp6;w=;J&(3;ghxMw zpk!c$*T1jIe>dzcG4v%L&MkYK2E;Pi6Ae;1U1DD4lWdvg<{bI1%#Z+o_cp?XDgxNu zItMc3-R%VUiLd+-O_2Rx%w8>%MrkqJnL5TJowTcCGiwhUE1sqHDl#omkLAlqB-~ya z4W!lQZb%mxtxqF&FKCXSVZ03?pbRmklP?hbb1Zq!1($S>2TzX%W1u!O=}o(%#%Th! zU7amzsL(PH>J#Jb2)0(0oGkP9t&5kAdT8ap-8uQ=a$0BTM-uX0vs^|C748b2_@%;M z8$HW$P=A*o7t{Al-NCp|nD*a4<5EZYW(WCq)pMWG$KnCN; zhg+mZZgE{Ue((5RXxR*iacBePm;$mJ7j^N&n)1_&D*}`Gu)PV-WWmWOMgp<&GI^DJ ztq@g-JxO=tIf`S^`Acun@8ppLm9*kk1H^S?OaLwzIkB=XWz z(OY-77LIWrv)nr&BT#L%4r3E0tDA)#N0NeQof67*(jfZerzP~zU^_?ab#>EOKq)V- z*L;L>ObBz*s1xrFs(N7etl7t7b49=PBdOi+#5+m8WP#RmK8vC&L{|Fbb>k|v^+fBQ zZvA~dQvzvy_GI17>^8k+)~N^+@j;DHx{Cm+TkY-UrpxXia?NDb+ zuEvd)!?!y}=R+&!ViLzSzGj^h4wy1Nc`4CaBkJVan3TCOMou0U2ZJPabDIt269kZ--P{M_nAma>!ry^wJrt}x)0*13_{eLOU zGqsG^aO{~p?qIUArx|Y)xEIq@Eys(Ru~}@kMbT)>on(tRTo`0@2p(ry)WyhF!&Yu6)HiaOzcSB>FDKwHe(6|h`>GK8%+%4_)qyHh zsz{Ai*L0s8yhbK^yp++}2-y2XIeR#>_ZC?#x5H`k6jReFKcr@t$X33#RF~rjoKoK| zsDbOVq`Q0JzDg}a5J~6*=hovtci4ju$)V^LT*f6}JFUwpfo<=tFMpi^;--V?4>hpE zn{uhCm%|$L3pu@e*KM4V%O58!(nc@g0cUUOo^g1ztcmtfIQg}|LOT!7$x*lw%dy@2 zEoOgCFlksO$dG{`4P=sADSfv#N(NQ?k~ijUejBDM`2B2NE&CKcc+GuW6=@qvMO4?p zFlk}@<$?&h!bz9nX;u~dfGzKI$26L$ss9f#xz$ewVRkq%CYE(B^{b}L)r2 zWxar0ApFcGO)bfZ>)F8ln(PXZHD~duokWQ_UW;uD(T`E$uv&t z`&^D_xo2u0bNIpc(do=SRy_J}^No0ux#KrX%Tv&!W`nC!xn*0?_go}+3uWfJB!n_+ zy7q+zKKKIlYNz+(6P-xHMKCIb7fQk@zy0HCqTHE!*e7e*B6sjBciwvuK3^!7I}{oo z?W=AWC5=>EP0V1|*2T;M1A1Hat&%m5l$wZ>A;vxSAI?mC8#uKld+V9|uMqTp2&-Ch zWj1uJ=Y>9~E8>mKA%NQ(ih<)g6V@N!VVd+eJ3SbiOn9XBy7W%Vz|}C9W~^pDr}w`i zv8W%PTJE#8#*hM;n%<#8Z^9XLGAABHf}znN2BZ1Ujo&DSzC2(XcA(vbcTh?gd%95@ zvKidIiMz_gCYKP(O;6Pt7A|FEi@Hwp8w!D-L^;P^V3jUj6{)0Ui?3b&j%K2a3 z{%p}hi7`o%Y@fP8`{~wN+-LYY_G9Y2q-?;~UjKsD{H32qr0sq&ertT4*OQmrp{=B} zRy$oK_n>vX{Axaadn%zIxK9h|-;}IRsD)s=K~+Bg>OJ_tjYW<@Hv*wMzMm2?G|tl9 zC1SJs4i<9l27I+Qpv44O?I%86rIqwaZUw+kN1#7JzX-Z$w&U|};p?1f+)gaUmV;fxc*4HgU;@XmP3EJpWP1nx-&vMap1dSiHCR7A)}R~3-->+YDPXU9c`=r$K$bUur*x`X zA|waTFueF~T#7Pjms&@_p%0J0Ait59{zpr(AY)yzu+GhB9|I-{Jwq+V3eb01%yeF| zw`^ogy}t+Py$Ytwi!{79Unhx-7k4(c#rtc^7xo7k9l-aBu{C0fPT9Zhy^=nDB5uA4 z73eO0#%6h3e!APrf!6xKqeAE(87fQ++FyNaaLTFXW{NVOXoBavEM#i%N;^#3Y$w2R zVZyk|z^1QIu#gc;b;FCWK53pp*(b5nS{TwoB8t%4QTaoSO6WHY&VH=UyDqu}rrf9F z#iuDJ-i60bv*8Cq@jA`U_oL=t#dUhiAXKvyuS66 z>W)!&tWxHSuy-a}LLFmu>NmgXlsbuqHv}g_2d>L7$gm}3JNnTfIr;}P>mHA>SWN?{B!2~ng|=Uf{#i#gS4MnCXEL#N`wCs6 z+d6$|Xp+-1XT~+RIRy^WyigdcOMhH+Z$wW`NK3^2zl)u>`3vApDD(UL&3QpnZjWNGwii}zlna=?w-GXf@S^m~~Nes!r!Gmm*yT249|etyjC?Z<(K7p=+X ztB;C!per4efCP$b;194=KlKN9o~~P8LR?4TSmlp9$L3OZnovE3a(CeI$HyD!(|spp z4vLmuWm7i2P9Qd)H1HuTiMn&ZG@RiAd_NBCFJ=8U{ER#Osz56WuCodQjLg{lZtfiS z{Jzi0SxBnidhop<{cBo=#7aK(l5jp$3fDm?B5E%tG+D_g#Xts#}nnpM)6s0wscloPaA(YH<=y6Eyw1wB{Ar236y=?u6D|297Q1}8&cn`Ly*`c1>Z6RQj3=0_saWwW z(L3L6Fv(x7ATMwAwbdxg)^T5@kBo#}YdP>WP~%S^@n9}!zTSVcT))$h8BbV05R&I# zT$qbz)Iqu-Ei2Uzk^Uw>@n5b~}=nS6DvEj5Lx7zT-UHLS!pKWDAoS#UY%4dHM~?mA@M(AUt`nC}RqXZ>yX5?(W| zlbZi*kpp@`buU6n8+*+1DoRlV=m zxdj;>>K_dQ7+$#Va>f{SIj0yrey`a6-nZK4&v}%BdoC%aZf!sL5Wl+Dv?SZF!1_(o zc+1^QhMLg1G|Z2lq=!yNF`4gXZaW4>Fu+{FacbQsWYwx$1RW{kXn}jpy0DKiJ&u%V?irGeeg8; z4?D3XvRFO+3zPH-3D$$&Z~PB4Ni{^283SyKs!ktA*RNCn&qQ4_RROVBZ*T?}6|@2= zA#l&rb>gh6OkoWKayk0RDJWhQxLh<9HiSW_waYq_P}E6hTQS8X1(AoxuZGSnC1EOzTgYQ--~8PBr~OxEH|#N=;!!`8U7UL)Y2I&0X@iu zUXSSl&=RwHNl)m(-p1*1tIL$G))r32Z$so|sdqG;zUS)@K&3ZS+x|H;z5 zGo|$2dzgM)U^+l4#6wp7_ol~WDzxeB+c;1DOu9h*P7h~Y@U4f_8#Dk+5a6)6Eq}Tl zR1PHcK|sp2-5)qE4k8T$b@?E2ZCT?q06-4Vo4_$GkKM@F@LT!`4BIr#T`KE%%{C3a zRY;T2liaeCFJ|pK&I3X@N)&4U=8h%@H2o&#ekVkM)2jZ;L%;2`S+=7Upo;a=quh78 zp&Y%%gckH3?==F*H%k+Nz1Uu+5kMQc5bjb>cEfv*$d z0_`2zU&cVRinaLHVXW**=Hb*5O~6`Lfa4~B9lYF(a`DRzI|XV%V%~FLGl^`G`k>|l z*!F{N`QFy!br+X}X`nPa@nf0L=~DQE2lOb5ccK=iB;U^p3>!e@2{-~p^t}dzw zx$Z}(Y)2rm)T9X@a-pkYgXPLfNeRtTfUa!ZdNsPYcz~I`cJ8n>GS& zofBBnO|cUtH^j7Z=b0r70wMIKxVYGrQY*L zf&_`+)BTv!1{Uza9y#d?Xd0OB6XP6vTljg(Ci-;I<;2FFR*2M6?6mmyU@tDY$;xp& zR=$q4*E1?ClP=1ubdajL^mGX*t@oF`!EVr={G`3J@^w4VuOog>H|t=;yWY~s?BAxE zZFl)ScMWzo-e!k^w+j}_aFypbzAJRMV;gUSuh5>~GJ5gjO%#=|{2EoY!REg@zYEfw z?Mnv8kefy(CDhM#^OijER#0;5(L(>l-qc0SqYh2Sq7cwiR1sLx`<@|#b|AMx&xM{< zCScp8`8=gu;CBB#)!4RiG_WB8P-JBMkD6x>n^z!u8VCzPOUYpxp^BfC{mQ2tC_=1_ zdH^XI-55&;!v4tiV-|pLe<8yO_q_K$%}(PwA^cVEWGY4tpX9>~(`R-H#IKMG2{yh- zikCUhbIU;<5x=4j!oHl&K~Lri;2tl#->m6iBANDzJnO6VqPBH zH~U5JKR=a-+DR<;v);rrwR&%^*~t_3EDr)LK*fZt6wh&5w>5cp@|u2&n2!(g-0Vnt_lqt7AIoP!`tFcqX`c* z5D(O)fg)0_#3ram#Xq>|N2PbAH}TQ4bm+hhxzuXr_hwrc73)kq$}QNrFBuw)2x^G& zs4Q&Y0Z=%~V&UZ7FM|pedA1(@*_f0EM7b~`lVC2WsdDbYgK=}loP=&Ta;;z^%0QBeL_{LyW1F< z?YxSAmgR?)b0Y6m9zK;iR+M`*pXi-a&EpYGQQ9ny+Z@guH~qeJC$V{D>7M>;ql!8m)QNkidBdLC~wuu4*Ufp`E^l~p= z&=jfbXYuHN)a=_mYPwf%=_`S~?_OIhU|0}3WbZx-XEG$~ADZi7=T{>r-?;NS_5WLE z=G?fDbcNP1phA__C~`Q-Y38>Toh}ETP(GjDfJ%)<9-y9~cWK@oReGEt6#+`R6&`nQ zw`+YQo=Y=&u$X-0klQ-c#u_>$xNuR%`b;5|`4=vAbS$r~(UE&Pq|0}sx&9HQQxMOf z$oMZ~ySa=v41#+YCa3+1`=4sEve9`jZe%^i7pE8t>p{eyj)f6Y;8s$)_l??hxegfZb>&u{h(Z{=-|xRj;25Ga33UQm7!lj6=0wO(EeeaJ1^ zV@w=ZG}E&eV9p+kN7MQ1x1VQQy_yfcG_km@KQQxxE6H3C?-=ckjYwATmS$Qg36>U6 zPp4a6*FES@xy1yg-?giZh(JfrtM4ib_-N}2%zu%*I@_sm<1X;pK$)@0zxxk|wHuiw zkmmWjFY*dR>)V+R z&YveJ@E>>qw1SxVL7FU$fOm-bubnmwx3?2LQ$u#LXs--o^LAuj?xt?mECutq5PqV@ zThZw4FIO$KrNJT0T_NDsnDpyfRqTyS5RD>ZqVVRqcn&7{vM|f@=Mrwa%zcAw zHDRNPs{nlFhfMFXV3hgu!_q0*V}IhZnY{KiIksX|e5W~=9~>t4i73$?1ZyTBEA=y&zj*0* zl=aIn_O?82;{aQktiZPe8-C%!UB)ZK<4@?l4Q$u#>YZT0`EhfHOsOKUHTW6%lyKuL zc|*7u2uAxHgx7&ZJWw5-BJ&=mdB#v* z7VS4KQ2-=Tjh2>R;)74M6WM>c=F8&TDgY(x_9-O~xGD!Wb_b4Apron$t4F&DK<=ZX z0NW{27f_N+p2>ZTNBLAv?vbpvb=`%HF_eEZ7anev7NCJ^WDGNcm5jGZ{^g=;R(F0B zny_#hfEfcy9lF+f2qC$3Yr0L|_xNIv@yUz%S^9N`R`kX~n>?x3m$IwOzd9;4n&5}+ z{Uf>nsLR%5Zh?_RYNR9LaVEla4G?X#B$m^hEU#`rk0NGgX1TMQarGxBhe5Wj^BBfl z;0r=kFwHGBDd1g!%&d}a!N&n%A$ih0Cm>Gsk98wcY~WNek;PKo>>G>K5obmZOCB7c zq&GHDU5lXW42to&&hD>qq?r#UJ2lw~Dm^hS?V{S6id=qgq} ztpVN&Fy2eE`SgJ4BltlGZJkdsI;#IxnHP)R72_!^N?_muy{YQ$dDJ5`%E-f`vH~+* zu52Q5v#UCNW#WBg896RzMNX;SFI2#)hqNV(LJV1`zUVyURDAk@_d#k2Y+mhw==et~ z(8@f#wjc$Vj6UUVa%SuSChk}Othd-Bi^os=U?85(+yC&IJ@KStn316pTI_eDQj30T zBAG=Vo*;@s@;l(7EXdlcvA~CmtPsuspBmVn0tFyL z9s8RFa}CibZMiLL4x%MW)%-#@81&{QZ{<_aWs_t8y+i^+gz@WX6|fL0iFL$4*nxiI*H(1G(Hnsm06)rY%K~1i6UjVfo?SCT1o#ZW+ycSAB=^!?8SpraU zBn1KVNC6SD?r-NzQgK3VDuA}i1Hf|uK^%KLgrIJV@#|M0&jGLl0))2r{!^9Q5p$#X zEBrehe~tj;dVgDFgyZI`GY~5w7j|^r&sy0@ULnV?LxFv*c>rV#yld-2Fwvw6CNNGm z0o5hIcKNG4MR6NqnEomu$0a2W0fJFBY@=a5y6uYil-A2LDMdF|7Tc8Hc7J=zceGNB z6i&fZxZA5`JEP6Pbo;Fh++nlc4v;Z8cpNbwO0>8&**3}pJ+K3Hj6XAhR&)K}My8*o zmGo3XRnvPR2N+Olq~IMPGLy9A7z(^$DhODAbu)t%VH`gQHS5183U015n-5fH8PcM- zZ#4B`-KfbZhk;eHVz_8yD| zAR>1j+z%T)43%=KN^v)|n`DuuZDUemW>@PIC3yT!G6*;$!@Wof76e^KFk8(}CC&$# z6M-6;Y0e+*(wWfK*7=PCS|@;N&{-jV_h*BR;OLiP37*e}M5`CK3h1I2Vjn@CyywT~ z3WW-RhZqW_aFmTrL-XD?IAc~9yvnVZm2l!>RSk4Q^UfbLE#;=u`>dQSfP6T=H*oEE z4`#Sig8}me2+9eBy0zKRtyjJI7;3E+A=?2$C&{FmoYYM^JEX6`p83E3u7FOI|MRRv z>UJ(R25C5BXPLAR>U2%{I;u##C#UXF1V)o+RU~j12XDoZfDV*xF;O4@uwh-0c)72J zrbwN~2bO{ui%aVMQ8sv9`4|@yf3t|MkCSsEkxL;R;>p%S2WHATC{o*kD$DBah| zOo@(<+>#pN6wsO#0ik;N>K!o(cGo9=RmDNv{1~G5jEV##XPAf091#VbpK9(eHpIng zWj2X2Wt*tSgj+zYh14>ytrW76a4|WN5ps5%iVr>>sAW#=rEpk}c(AFZ+z}wLsO5Kw zh26RWO6@YTYi#BhfqdW!Q7jbzw4ym1WG?I#GTN>koovJ@nGG8>KtK{-!%Fk4RKbo< z7*q#|7&E8-xWd;~AGZgjyTJ11rb*ds>lb$)cHXwgQgwYeT9`6P2 zrwG)`f)k>sD)p2HY$KQD>tJATHspCMFgY3~ea1Tf+$^xWF?ylgwI&?-shYrpFzqSg zgP~`9o*WBCSCKexuju$vImkQ-!6y1~qH^IZJsmp|GmWjdw}*_A7v=uxaJ@Z7nJH;he)wI&{qLWI$ENsJ>t#hs{j7fZ$DA zF-}UU?(BvX0A<_I9*h*w)`6!Q63MoiqXIBz0AV{57(_l>F@&Jai*xEEmk0kq0Ixb| zi75LKIOR#UcQ!8H3@~Yu|CJpF+0vJ&k>CFcpkJ2>XRU=QaSy_yzE9f4^!b1;{ah$65JsL4Pe-yoNER>pD;eCf7LS$2(XE zAO6x-G8_5GB3Y0Bk-pW*qTrHDL|G@m!UAk7A<3`~UAUA*s$bps_^0Q`w=7oYhHMgV z6`5%nHE0%JT3UL=`7F(`?89rr6O8Zq z1gI)T&K8(CLq|a4OnTo4h_q?|%GrCK2Mmg4rC4iS%+ze$H9%2qQwbPnPp8U1ZGlHX zy>7&`f6%5U2_D(tnlz++({X$*Pd(>>;#LJWZ`3_1p3(Co8B7}nv?Le6!WFRB-Ayd# zqlQp+m03s`N&}p7N+B&q?lBqXYE(PG19sXHoT~fHy zCVHI9ml)&Jbu^OSGXH{=Y1ku+kw2;!SZJX!7J|JyIX(b8BFF>^XcMX5#aW@+{cycr z+*KIAUjTic}GAJugxQmCs%Cxmci9>f^iP zB8K;7J%M6cnJbhiH#fGMjsAqVl7Fv_)M`ORl0F#w-;}#so=!suv%LS2NMHWZ4op(% zt-`vAV%IdVkURz}xuA3{An%rGNr4am!i}tVx0W8fP}l-kLntjI0Zy`77)%x_8#pQa~(0@ zdl5?|5i$!u0!PI1zKj^()%_6DWEdOE&r;?0|G4_|cqqUBe;j{SPbrinWE*2AgREHw zP4*>w80#~;kX!u{JQQx1w?359q`e1*PbNy%h-ldOfPA7LP#Ar}y z2EH1sR6fXts425^d(8bihHS>yjT)|d!lHP++c zX-eYOXB%aY$MZ}I{|YK@AcRL9RzlUaweQyX{ws{Be{>4vVogl0s6JQNX^Cneb#*GL z+75TN#q#P02#by|^b~P)P;oUb6(MYd{FB?wLmJi+>MqeIp&Y35=7Sl?Cs>ojyKkmX zq02)Po_Q>ta=UX4ZSH9uEAcQfzZR-)nxOcaqi>p9MARXsn4y)rVd4s2SDk9ygw|L~ z+fsgu9V8FErDNfAuP&Ey?8kzH$=U2JVEWNiVxc8pBVb63k_jd2igAVE55h1#cPQ*! z340H)&Pe{|axA18&pjsQ3itxy0r0tAjW-~dl#u-z!SS1m4={8Gj(a8i|0Q~1vphxd z?Vd8=Q+lmq{~?~OA;dbx7s0V5_#F{h>3!kNu9VQ$Yy5WRA;u4h3Dw3?+A^R2M!`Bt z9_GCGA1WY}HlZTu7>PINKnd6&Evx?fL;23w&!9~ic=IwOAs1189CT$2-0KgmHJ95;OlLX@Y zmkgUpGmK`_>|V{-Ad4bKlys_KEd2TCNeI_fj?v>_*C(loL6AQ?2Wu6#CYhno0iCkB zQxdIvv0zde8|zdg_ei?r=uNd2L3QV}ZH9{L-5j{M#ire_n~_DkZ`dT9!m}(B72<9` zxxbgQ9v$GcI~;gZwuTTOX2KJ9ip(8JGNB$N5@?mzyIGc_w$c7e7+6pYPdDlyfxS?c zr$&O|Nis98h}n+4BrO|$VN#4-C=ix{B&YADe+mB?9Ucrw4$AjIBWUWG^LNmR^6LIb zOMjYnxx2gjH0_hKeZ)?5;yxw2EEn!+&zGL33KnQ(7H)fR;g-JJqXCo24tF1Ju`61$ zx6o}^2tt9DLmB!4(qW-81(>RR0p`KBYCq`R@F^^(2Zqd8e43$g48%ZQ`PfRI_&2eF zyTY28Mf0)5mWu_D1M6pSqv%ilW029Bb#CRYh_@tTeKMxJYEf)__MH&fhN$o>UUfTC zq5fmQg%Q8RWhi|RL3Mm$0~0N2V$RV+M=sVUb#3fTo!&-P4$bO1Fzs{OKVU(ICg+O2 z#>#AfM@JZJw#r5DSuYXFhns`Pv=={N?Id0&Ay6%|Q2MreB6_{%EXUxi8qVD20#}k7 zJxh=l4n6Pfb0QqcB{q=&-^s7lUFS#MGB4wL5-s=+CG@b^YaODdvob=u!O@@5%d^ne zvHoF=Eh6ojZA5npRC(HfWUR8H<{Rd~{-#yBV8|vzyu&Hoep<*prtmKDI%L+K(+B3q zHZNTvCE;b>qQ{X4SI%MnDq|+YI-53xchcQXgtMtiap}4s+Tc3ABHawLr`q{OPI0nG zC<%qTd!oN3F>_r$sE2kmx+S`cx?YEyMJ*+%U*x)Ky}~VqI5g5H7K>i6S;w<2e^}&3 z`{ItECcWl7aV%ulU>;&L`G)og2g`h$8+K`+!T;{nQw}@ib|MzeL%ow_ql+5$Jz^~MNn>$D?In$@soEdU(GEtreC$M@sE&1za@5!)$fWcKFpS(^ zsI&=^N>X2-Wf3!7W+a+eH=izdVP(87*7dEpFe}4V5FJYtczJ)IX)i(eOQDc%v)N=d z)3TsaH-tdGM_}FSC6XwN}1<|YN>F9JO;%=6( z)(_)^$=4j*%BGL{3qQ$4&qZXj(2$Y`e!0_zcP~D^qNKK$$2RD_J5#_}!%A53E4%8p zp7{17Thr`@>Pte%#e6D6$NI@OaF54fjJJ{WHgoCoKfA5M11qPjagq)C$tPyWpyL!9k z(aA(}MhnJFPbTII-B(2Q{SS8D8i|RW88YB}U`Q~q@abj;Q^@+lBi}nxH(n0CR*2{C zPMjRHH$oMb&idfda5maZVpM=yXZ&lfnA^RKlhG@wQ9-(9VWrfCvd*0Q7l-VOPuhem zSk67^59e4@e{w&T_tW{q8~TJ;2ME+9DZ)QQ>p~K5cK7_IR%y0mew_tXfFX+$5B7ZK zp7!{dOIM!kM|ttlA*M-|!7eqYT$thWir8Bosy^~wrHZ+=d|{dN64Sl?Q_RFgaC4$` zd=-;(B{te-g`N)Ivly#7DeWw7WR5XT&?V_A7$=y;Ej*}%=|m_y>yD+pdnSti=lSRE z&(`$SeIqr=wRqPa)5%a9D{R+KCRw0aQCUby-(whF)I!k!E)5DR5@3P+?s2S@aq;+% z1Qnoy8T}=l(jMpjX(t1yg!#vBBb4tP*DwnIqSrkDPyw)3r|s4ME|d5E9$`T_A_*** ze~=UvfCZWq4)^|l3QalT@a#*(WU;^68GF6fAQvTeFa9l=WPsvNP^}a`@z1^^b8xhA5E2i~M=xoD(g{<1MtE*}WFZ^#@&FSSo@C#aX~KWuo=%J5C&? zrM`s2G7(vSPU-t!^oU^<*qv3B0i>$3)xR6$r!F>3@Ue_e${ z=Db#FN(HBaLt)Fi1nTkt#RQP_{~Kj1J{&%I7i*8Oz1t6!5BpP6%6AO;1M;{mweagS z*m)tVDRrGzkQ30|ZCa`QKv79L$QW&Q_HI9SjqW^$+^3H8*sHcN>~qN=QFwS7;5Rhc zCnn*$#KZ^+DreE)r-}LR-k(=n;08MnnHH}2G0$#+mIDBq|8@+&_@da9kvfe679X1;3~o+qa$T-}uf(7oV3s#w2X zE}S-|Q2MkXn+jQdeQ6LLki;Gtt2}B;|NZT!Texvz@4$kYTIFx(jPu${TN_xuSVv;cOcT@S2BaP2wH62DWy*hD~+J zL$hTZyfVr{BVd>aBUHM2z$2{dpsBNT2`|!F=sxugJK9&y3EiWx|9TQ_6$ZmO%3n90 zK>CXoX?7!tp=v?GT!MVJ$r7n0@f$NHg^s8I-`E#5cNv_zI-fpy+f^eXdc$I_j|}z; z1Mo~Jt8j^|U#N{HSeIVx=3x7rX06}!mFT4iesy^TaYPgMhFguBu(53UEghZJ0_>k4 zyN@^TS40(hE|n2DxVd~k***!bk>{L5&$~%DVVU_k6Se{-af+Udj>C%c0N-bTx{W$_MYn0UR zaxC&bCt-uP7GcQ|#u1QM=x%$0RIInsf+$|Q(9`o7LN>H3r4A}mtxU!r7Q#cK48!6g zE@#ij&Sdnm&XPECJborFC3j{ls{?fpwV-u=)uiMd>%s}%FbYK@PA3Jx0CrR$D`SAw{;i96We=8jbtAJMddh4MG}Dkk+;CK15^)^5=mB+B17l8f|34x`!zcAT8! zS?uN*oMPAG2M&wKBDhh~*#ZB4Z~2OD7goxNn+lkqSn}p~d1uG`kI&taQhD2yp|`@E z1I%R<%&^>Dm-~vcKs4mnnMLAY$Ln*TsFy9s;rZQQsHPb+$zQ5`(cH?AN1iKm<#pZ> zOtXxWXlOeiodTdYcQQBXM+PK2K8w*@6lymsnaC@JSk9}D+~?$0o)%e3?2JVDao>iP9-_(NOl})x~gocj2b-Ph&oT+mV8g?N6(Iln{XN1+}b z&`<*TH&8~>18M;muV_Uj8W?I!UfeZd-eodS%vWb|HQB9Cq0Pa)N)mAkf3GGqG@SN1!hl0AMwC@gz+5e|z?|VG|4M;3&hvXY-ok|#6q@pO;weQ;_KI*z9 ztOYE@r~5TdwAH=vSJHd9h?vx^gfXIaI5Ik2oM|h8S_0V$Kshy*9gNZfBt91|zAL{E zI!)|dGNBJ-n<6Ok07;@+!gxp);v)^c!<3i>AG43dcnM8{?D(C5Ee2m#_x_&{Gt9z+ zt93xzhEQuk>1PNY%Ro5L0HF#IpiMPx{|*DgLtY}fJe!vr^36{nnb+a|b>FPL6>Gm; zw(ANKTvZ|^Pty(E^JF>E6?83*^RmcGa+j?8%0t?~e zS%jo`j#lm~VW>^K6xxK;plU#>kKVd_?fV0}wEc&m7#ajhPK(q{WzgLZE6tCPh(HG_ zc||kKr0%v=DbUfFJVl#8cuX3!iiUe%MTPe!ia+yv_aI6eWp~BwWp$6eHXFU{?yZyu zB)&LFx17`?q^ed{ecGqEJ@!e|e6%?v>UMWk+8{bjv!i8psMfKtbb?3UD{?lmfa<(m z08wJ@;fpIQPTw-N?8hxyhQ1~=cXX;hd5{cQqh09;OO0}q5sJutnWl0@>&vwoB%2Es zIc_gcN{MnvTzkAK;&cm5>?Mg*K$VnLYp|az5FS#tn!ee&y;sZniTNHYTn<89*`rei zWUl(SjY~no?KKOKZ@BLkLGA&G1@&^y5?On*J2Y)U<*FR17KN-5#(;Pygm+_hl#75* zQO5m>kVpNmimj&o5r=bIXXL+8f=c?1^B+c^^paDeB;yU}uYCJn%Uzr56ia)?N8w)2 zVbtvj0xkMgTzPh8P9{;Ec`wIXAAO=c|{U+4&CNUPnYhFgH6O? z-0oZe-xhKPCN;FD_o7!cnLG14OQjJ6S3^8CklUP5m{g%uA|LxUs~sjtD&a6Zt@$8$ z70-g>zG2;5F_gL-b6YABP^2+}%m;J{+Ia>y_oO@XhT2&xc!LJIu8Qdg;#a|cCp|8OPFBKPNDCEWf7^pbWJ338pgrABaUodC%E@JL8*^4V)E;L6Vf@s#tJzbc2ZA2Ho zXxLbHMVG^kO_7KXF`OP-vlhEJnV5-fMVd)fP#Qff!{LrMB+g0;%MfOXMK_b+yE=(R zjOhwK4=zjIxpw0r?5dG6gVS?HPG7ljcr~v|mpUK4ST{#|QhPGgPT%ARp2Z*JFug-i zs?Em1p3Mc6b7gPoF3MN50XoKG_ldEaRG@q^uFkPRx4sTBWYIAsb?jTK?iOjP1mG`2 zbC=>mqC6M2)O+dgvl%NJ5Lgq;x85=ayfVm$G*<4H_nu6vH58Dqj(^Zoo_((nL+{zif9hg`k9PHK@z z-n`Gu`iHN-xRxboS}CrxnKF~wFTb8DZCyfVJ{b<1jgM?>n!uqQnA;madY%|HS{yhZ zgo&u1u;{9N>`U_<8#N+;LYR`H@KB9CDky;iXer8Q%L=PvOC z6n~9TZT3Pg1ZPVThm~$w9CnNboSPW7eC3@fh5h2TExa&1R%F+qn*#s1ld;dnm~SMe zT*Z@ef)s=b*iQqXZ(sLg67J{PjLyf=9ct~}?JgwA;;2!zxKUOCRz?g-Pmjc)$vLqX z#VFr3r$ZkPsm~O==+w=q6v_KWaa7x4WuBU59Mm3ox|19k8!DFU+~9L^lD3u5S0lb?MA8;j&0RFbB3c_gN@foz6vGUF;MQHP?UHEp)c1q{G>%XMWZ? z7Me=>W@;PK!WfD@n0-|_U%I-^+nHZh?v>KXv zP9S*Y@whIL3ZM3cPo(n8BNtW_x|IJcs*|D2Ry*Ohiin6TpXOnqqhX(qicc9qFwo-jl!O z=v>G#TH=f&Eh(WNT0wvOs_r@>D~T$oxIG*m<^}{BuYQfNexIE&IC&>n!p6&BDc0cK zt?0^bJ9Ly+L+9F0BU?ND5%%2OmFjx_64H8~%u=_Pe?sdPnvOq+dxUXgFl$y<$2_Fu zFcDFvM7kQc`9gNc>rnB8(@p?W$mD8L&GLPQp6eX<=1HTO8sq+DkJY=`B4ccEyq9M>U zl)gGIEdMlM+T5L3ocY ziJjInVqk;8#Ow<-=tcFcB&x)n?H$M>otfQ4{A2&Xv>L1ANRW&dykd!WvS%wQOQZK~ zF#a7YQP2@D%*?0b8$lIh|3MT#aWdm`cxz>)B=(o)JWH~rn%iF8N#-?B6s?FBsYzZQ z2p7LY16767#KI4F)vJ&0BrRp;E6p>oRRmqid$nfV9A0Vcilv(w6DumSzIR@=7+gO> zFCcSJh69vwsFWjy!U=6R<;3ex_QXGZsg8X6{-X2avcu&QWRo~jH3D)}^VmBY$wZV6 z;=aPW6hltAZkF_BPfPADc4Q(^FZ|%eEevM)RIDycm9y%|PwPBwO)~DwWe2qtI-pi; zLxE>ifz0CeOh0rZoDeXj!DoYl)4ER8{>yAC%ov>9-bs}eOr!g`$XY{ks8-yeo=<#) zCp1NM<%;q))tN-W1(a{fMD8?<*SEg}s@+fSl1OgG(h+@9o8|53Mkj!HV^`8xCfMX# z8`2JV@QE;iCd0A|28ePQ$IZ}z_P8Jn≦qDM%@%^lE^+S-u9IMgaMkr5m8Br2q4F z!Ak@)=#g5L9@w<`vWDAkBR5D;Msl}QVRFZv5O(W#{9 z2T-aifAmY0A}NpV!CzzwgqH$=tNp9uspJy+r%T&=5yM3E_#g1(JGd`8e>p4{uddLM zmK^?&Wsu4Xb8dVw?7l@(HH1-n_*m#jU4wRj%*YnP8LsjEM!u=I+mK2GWncXNer2d7VN70=C1czx*QvO*}!V* zVOQkNSSUyC)ai~utyI0iy(p9YhPbiQL0T;M&OqLP;jVO&kJxwbCwsRb<3(U^L+*56 zx}lLA?~%7`8D#n_FdfA}dUKwfUO(WM{}7!$Y0e&BuH3mdEM_R6%!SSTvD7rH9AB_+mEgjF?3Tjscy|!!rW}<%F_7FJU%*13oSH}hEf3x-ZKAKWdxB3HfvIQa zF6c!@E8IzJG7T&KcyIyJW%1TEg}F$`MNFh9cjO+2lMt677BYr%O;;sZXZ zmM)b9+({6m&~rMO#QDaNyTxT%V(j~>K}(-45;R9`=GdGH#A?t6oHdo{W47j8yx0&> zC-qg1Wt1H5lJ8M+S24Y&7UX|Z37-SMo@B znf)X-^l9=luI#Y3{6LZgk3nhTeWIC#|CdDL?5NTEZOw<%B^*jeTIz_c9l8YeRKdnJ zpYZ2$GrYvXLLvF3EAwdb0)cU|f{@ZfJj=28hU=1sG9*Q)6{0}uppM@9VbY62k#CrP zCA{cKOl_RoxlZ@Jr7KdRws0?3j~LtiuWx$V={t%G5!PaLOav!_d86Q97nA&@!iS9e z^b(nCR%dI@AwP16)zD+(^nSirWuKXl!v$m78HmsQQfi^yx$Y$2GM|&N!zKnwGIvk0 zz8y+pQAgfUtUXcV&7rzP*btY}&AwjAo7)A%Yk7lU!i>vLrp^<6C9Ibi=lNSXNQQUg zi$Sx-5)&lZJuJZA5zR_SG))q4@6|oLLvR10A>^r_RnSSz#wF^f?)1r@EaC;lglzoD zN-R;T4m4`N_l1lq{b)qvUr9>X{Zt`d z^;~KZ7R#yS?qO}O+2S6F=SC;RlvbAed<^*h_PPMl?E+4kG9Eup+@nf1k(y(ffuQ(X z0bP%A#73Qk?lnn$;{l}g zteS)G)!o@APmFD$dhkV>QOLSW*mRzHHAKGW$3gU~mUa$)#A|*`cuf&Z|TT zR7Y)9ri8USmpv!zgn$hVwQtZ8x?j!QD%?Bxv{1xg0Ea<&d_+sf!^FwkF+g~Twbs(% zNXz5Yof)}j3 zQ{s+YmNAv?*45vHl$BlWEx$IH!NuYl%DJCysKyysY(K62MW}cX&8t)^805f;m+Ztw z@7mW7nenCO>v!37JOrw*djuuEIQ1BKN9R#QTg`roQ5c~l)t}ELscA&HL&5j!<66Ir zZhZ0YPs3(Ud`yDMWeR-Yb25if8&+Tw1KAh|EVjWMESY;yUy5@mlB^%tIGKbZX=~Wv zq(AKV_RBa2mGWkkT;cj&J`#1Y=ArSjNepgy;VTce9Eui;q-tRApmr=Aiv_YLi9b6D6IJ@Ve% zX)g;01zn@(LU?y{g=`B*Ozq962o0)s%u{rS6WzN*fnj*O!#hrtW32klqw3-PD*R94 zyK5+IV6-8O%RAQ1^p&yzLfe*zRU6P>cP@r$F$+zC*0j`Q*Hqk74 zqHf>9hVN~Esv;WJ%l`UM4)UZ}Fpjl@)R7Fa?Y>zZT@o**+CV#Lai= zBu(5pw0uh#9QGp6?D$OaG@K76bLGHxhAOJZxVpI=JWS?uVEjVtI4SfwvMU`gw$*+j zt-~kEcRu)ep{EV)QhBUVY+B^ro$bVBAx6@|*5gW_=CkfuA~zk(maSsYYDkB7JgKOF zjF*KT2xcZ?jcq2P>n!fcP&+PfkdMU@Hp}-6UOab-gWE2%7hn-+=<}5&-h7<06}5X- zo1}?48Nkpb{`%=jmi_DO*qA+nL83a+-l`_@+6Ys{+?e|Kd{Uh|9dAt_G?L0EFM5jl z>4wt#49$Pdf;oz;KagKn900vv@A7)bY!}Ng8Lk$y>xLzKr%-us>ZWO%zM6} zC!J^?hMRgEqdd=a>Ct#bWqohRD^Oz?VXbH)sk>^f=Tk>Zi`w!>3EBjF8%%+|RM_yk zr{T-WFgI7T^wW}~vFoadJN2DP2F(ooiZBODiyn*-ocGpLV4m&~Ot%=)mcM^<8fKRy zU-#m*a$h16_wUela&mICgrRa<25r3YSIH#Ac>?Ehx37Oq>c(?p+gKBQl*0`UH*9~$ zuwz-QQqb5@vR5El9)>?^?(9}`kX+)X77)mO#w1`cr4en#b%i!>K2nqDTm4$Sq(q<8 zx#zyi)3G>HptqPxcBg&x>YUP41LtrBb+f4fL=}Nl+F57Yl@6?_Z1_zq5#F;@#I%RY z4X8nQpEm7r_H-=M1-QQc_h3Q=>QCTWV1?z6zNiW0X;?E#adY5Fx;DbKF+B0! zoI`AswnNy)FON@?4(IYL(CE5E1(fS>wt>gXn*G-tM*;o%^w6Glf=prOzGm=BXvRy2 zHsCVkhESF*hHkJDi=Wm&(;fA6Zu(ZmPuy_pt&C6pM*as76{ekCiUD3te)bv-$r_Yh zHs1rF`F0`pE`VpU`n+S}Gjp9vk!hl4CKdyqfwDu0V`q4C{acXHdtc(Uf=ry0a60~^ z5>sBS^&!lb3ov3X5fdzq5n$3lAQ-C@(QKv?5urlbL9rjR^d3O1ei`C1|UyUACn8m0wIz zO!;=(iEA3`ZvdbLqK*84%vj=gs>xZW6nPHl6a2j8>o;>LAC^D&?Y+tpVTQcRm)@io( zdSTJITi2*qMN!5;$|`W{o(6~V6}({^@#LCqJrgmp-PuUpid@?>|PVvHvn?D7M30>0sVj9$u@V(aHq zthzjhNCRK3E4sZ8DP-#wM8JL5lk{znQ_^jv%aCR$KKPq z?l4vGr4Uv{>|Sr+AU68YEAM>k*b%XHI5Cuezs7vIX(4W#3?;Bfs4w!GVz;li#P&Y z!xJEO+-UNgd-&Y!z1NMzJ}7OXdB{IY0BidS6M1z#zdC9OPcJ#2S4}$g=Iv6i=cfuV z1R&H;M1`0i!KdFS#^pNliS=YhA4W?q_(YMGzK`r^yGpqdwF8Y!C;pWv9XFnUg-wc57b`b zq^W{Wo{=VmcGmaB&XQ&{EOFwNqE2CRdGhHu+0q1|bcZhqA}K5EFBBr+(;ir{0;=K{ z8G4KSMlD1pCHMJzKqC)~pYnq0|inc&3e^8}w{*hccGRwMdscpSAc;^bQ=8>EDm4Mjz zZ%{JkMhd8Q;2=1iu|vA*(xux%YM+9i@BO%~i1FX)#taQLe0m@ad=;qJi37@|~V z8xat%>6WyX;1a(G%%84+XYGnsykMgMt@m7RjYhM8RkHvW<7E}q!wi4;Wg8k}vQv)U zg?9NeTC$Atzdkvq0v2Br++=)P>i_wf6#j3G?yj-b8(MQ?IeSYLzXxtHL(VBiK|T#D zaOOec@L{fga;&F%WiPg@Pe^MRx0ZCV;(>#rjb}=ihMouuA;{rnkXW(7&J{tb^ySq? zgIE4Fik{6pIwmg~!X!eng4p(Ld3rK?G)c#2{@RpfbSQp#@f4uZZK|GNhv5YQP^G{K z1E^FQX&jB8cQQ8hPF~_;JgH^UVxhsbyxHe_} z7|M^-p;r$+v)hve%U$}^&ba)~!9+wsv*m@H7&i0ySn`>9?ks~bi7*dcoyU!H_ls4M zQk&B=A^U~PLS88n+eqTkd@#0EUOcHwRm*uEEt$IXhHT`g?iAJDDPh_G3rj(4n|T@v zx-1WNt5;_3Jc;g?EKxeJ5Q|gi>tP_QEO_5lOu#8dIy7zcngo;IseP;nv}YZ*N>CZ$ zav~~>ir#T(`r*+QPUL^tSpyB=^=Vv`$kOgsThI{U8f{z;suV75zS93>Fpt;T1arZu zt(e0zLBL+F8x=mLPj$AzZhhwB8`U81r7(Tm_lQSb@NL$@T44jFZr$dI?+Pievoh@} zMM^iV#n1?WLY&0&fHz({#v^w$eKi-7uZ?myXrZ<**=KMB7`favCq9hFscs0Sl*FEk z+qqwX2*CGQ>Jztqon@?0kY>I^+iDtDUDrG>YOdR; z%UeeAk|m%_y64*` zd-vr=Lc-V4c7qvDK@I&-Pz1m_WxKJC2!KSUaN}p+CZY}lBQo*qcAe8V^O`r`Z0mmr z=Tv$7$*bj6iz{^7)&zs(-a;b8cv`psa=QvzGbWx89`kj1Now5QdPu#UW}p|fhMRU2 z1NB+3*5)8VC3DZdBuPIG-OZT&w&jezvS{!XmJQu>iSaozF)_>kBjvCEb<)D z0iX0C)B{wb`C-NcqJpbc<%XA7N9XQqiSBh9CwumeM8Tdn3Nl;qY311EC9ai$^Xuzb zxQ3#G{393Nuf8po533QZ1JdF-y+hpTv-gXY98q&+E$(7nzF0bs1?A+4=S1wl<=K15 zQlsdbU^JKzEHwQU&3Au}(e)3pKTdR-BT0dW%0i=83ZL>s@?y_n^d7w5{O=0K=k~(N z1O{A9cLKx-(@gAXjeR4zgYA!`=YsU)lipZKniSA>Yb(#^w~Sp|GP$fWlHSgfB8*V6 z*ugO3OO9q|y*4!PnqL^mx7KTF<4wR|eg%}R$GI(et*Y`ZoNCKIngKN6idEVc{7N$E z`YQYFm)pY=r-GMEER*C%S#i1nl3u!V2-{>vqw|i2iaID@VA1Cw5u2H^#I=n z_24w2gZSDZK}tS-6Hd2|a2(J*@#FEQ_SES4-4NAz(d0Qxumyxh^6IpsZ_kU85goD! zUnAv4At|y+-NdIfx6e>7F#~yI1{*Ci)6+EoY&k36_$s9PlUUrAtGV~hM#pG}l=kbK zHJ!SLNhae+P-0PY)kJxopA*X68tS)9AK*cA;1ib^Sp^O{M|xZ1m|mLj4&ZDE)kH zE;q`GkR1>*P;N^o#Q>&Vxl=hP4%~Q<@+KnS=*}1WQPifU84ak z$Ro?Nz=nGX*nb_K(iu-T{7$zP44tYhtr_L7a(quct4$5?vS+OsQzsFD)-Y8YpU?!e z$%|Qaq694)n~lDo=K%b3ysplINwD+6;IFgp_Nkv7Q!ieSfUs~iPAyPSXgm3ld<&g| zddkV2!$e-?E$T|^{G*HF$f3}r?9exGF_oP+Rm^b#POjIs1kuS||Cn;E@8sQNSLGnx zOU^&EFgTC0ppJuYR@Fvz`S9u=Kie@5!P=3VASX%gVrtMD9Sa~E1kIByW|FSqN{-Hi za6|Z2v*f#BTP{{ed>$j%gFehdXwb$E4sJA^>1AmZFK4zx1T*4v0`BKI z1t!N0C4AMPLd2BteJClyt5^TMwTS5ZhsmX;G001R$vky-lVF(rU+lPWn!C@7K!&&B z(kLAx#Q8D}7%rY-!vY?whA*!!y_2yIOsM}7iJFW;9EvYO`hT=HA^(ulW){+W%q7KEY;p)OC;g_iWwv zwUC*N&{_7XGtxkAwi?>b>X>?LWn$AErJhuE@!dc1?URV&!_upLTa2xz|FK?UQjeBQ zFn&U>d|;7#X}d9;k3Pr+kPKmL8!r(8R1Hxsm{9;E64G?iVuy|J2lZ}Y&6)VR>G`81 zdqHE$FJv5$^Kz^(2PEBKkqheiqH#-ty;i-n|POnWG38uwMd%nioe0H>${c2B9m{ zXVssF57fe*7di$cXpRVz89&mbzOB9Q7O|BRu6A}I(09_#EjfGERQXEhea^{_zFgPX zaZz9#nJ!H6_1wjWTVi02KI=m~(aV)kKV;jUJ{!41oiPecBN_Qv((;?%A*|B!KjDZ> zB0tyYPIuu`_{F*6#Kv3CepOdb{q8L#T@kGmKnJtKEggpaH==6 zVj%TfT^j`eR8_b9JsqvHuchKw3=ZUwVtRQix`b01us2^>Lv)9Y*xZ+Lm69VZTv9#4 zgMDC~)r}4|4Pgym++GD6@(87SoVyZJ^UN3VIjSf)uim@zbadfr>8B#aQKn=TC&zh$ z@XeJoxD&l)&MFLADjg+JQkc|;KLmYv@h9-N6-+&SX96%!p5jjz)+lwx()j|tY3Sz647W~v|NT_(Z54TxR zQtqs)flK`L#%`SZH%pR#ezY8O-rxe9WXu)!Kqzq;?U3*7iIT~Y)g^a@`V*KZ1(X*e z+yZcoja_^Tj6#=6;lj*GkuA(XtoVu1bz}QSIYwy;`0ce-`B7s26uMcO3z8$zPZ zHsar-V7k`U+~UA8FjSZciY9)uoDbj}R1>}V9I=k%?&TGCx|Ma{!=48BDgAf7J2zNf z`R?z92f45$!fg^%C2X^_);(nPjp9~faE(OtE{{-Dv&>nrU3#tuCaAKIu+s30_#3%d z1G);8B%&#rSg?w++uf=^A6#Q@g1J(1(7{?YY5_=RmU0n4Ux!c81g*bFPLS-S@sm=^ zmx`U3rL%FPs1pE#YQcpnXzEIx#kCUXy_1eYp7J9goOY${QogNFpY##RwKm5}G#eA4 zxmXhK*%FkLK@m&n#Q{--OOEJ27MsZT;qaHBnayz=Q(^odJQb|{HK-H;ENLOo1eZ6) zpjG~W@DnIF(SQH41N7$q0#5jW!8N=QD8Lh1C@_5IAlDY^^#9p>KDYz0>v6};gOrQM zw$u_-j)?La7mT?RqIQJ$s4=|x{$E!0$z!nwy~m%ArA=-C8_{ltWuJlYW(*+TQS3yO zfSne{yF76z;;c6vRQ{~bHQJ|9X$LhHhs5%Uof-XF%6lg&F zQbK}7RfGE|POQ>S6M(%J~qtUj}x-fSFZ%(&f*)HLiGIY)%mYIRsb)K2JnOi^F`q zT-?KCtgkf(?wzGHAb_W24BYUjyJu5SePMFNrp{H*0@KGz)OmOsu)w*vtSFvj8AnEz zPkANx1PBw{|9RI47 z^jqk)BjyrdBK8~@r54ov-vg=wLt~oCKv4gp{8RJ){?h?iSc7)eZ+tZHbZ1Wdzd!i{ zSVIE`aiG2t?BRjPx_kxSE@(i{lxH^}fx79&&|McAc>0S!Mac9tMKy_< zUTM=%BIFw7-0j5gEkzene?9oPP2KwIF=MBHQ;P*ASqfjJdT;3<|3kDN%jrl13vky8 z!H4PZ0i_1IV}(d>3MpfbLihZzcC@;tPi%sGr15Q36%HjYhPhrM?n9c*di|89ejhxf zK8;o)Z$H#1P|r1@+?#kHzmh=J@L+!Z!#K*Ex^UzfjWHmfEZkfgc!=GUZ!?ZFax>;~BCs=wIfVkVFMsP1 zn##%7{$sZ4w+Z%%2?@L$$?Q(kfot={ZbCTM_=MCwH%%JJE6Sb4AyybG2SnP31^50Z0_EH||-c z$m{flgDYN<+TP|4sU7JQy(KKynfrdh2-9%hx>|@(xMQ5bMATp@>o8X6zL}EQ#uGN5 zlOjOH5GB6 z{4drM{=TSj{YzDQdlpz;Km4mY6jm&Z7tE5Il>4JQlpsd6o3Ej*0SIQSzx&#c7nCf? zzVMDeB18U}a_gVI^`^&ujp*%gicD~=Z<*wkgKEz!H;65?}m7K@@bN*iZ`tADv_HTLJDB zv>(VpFG* zSu;uLb@j#@6X#=ZpinRrH@m<_Y~~y zH-_V>@}Qf;1w#nm{QZ~vnT^={O}Rv{Q!ncNcl8}_Wvsev;^3hoF9xLDKW~WGm$#?N{aWCb+dQ>SZ zRP%7j2M7OppBs64Tglh^*VD)?`j%hcjy}Ajhr|8R)kpY{nGc!^fnl5#Tx<>EAHP+k zhSaY!wKA@@JXc9S^8ONb|4VDd5Be|qyAIo*m=DSt_EAR>FOLqBf8}LQ@mB59dn;{m zS)jcRsGWaBI$8dHd~<)he?i6f_qPvNgQMG&+3f+?+VmW zyVULrAG^zNV{+@&s@Bz2&pFMOHm5Mi_OAQ^a>}mnn?d8D`foqZqfaZpOFlf-R8f(; z|7-d~e7hY7hsx3WZ$qCRc+{GYo~IYHQ&6rCBs&@c(q6{RCoA|Lvn4h!7Y`c*f| znf8n8?!l?p*2LA<-wb>rHIF{L4tq;xx*JT&+l+{WaO_5|*9|INl^fcVxmWaU^vmIg z`ClVbGhM9}>+}XYlQS)s5AH@*PG0^!8ms8<`h%WRc{dKy;N|`E$6?=#5+TiLTN}l& zqH){dU5DXt>vwxQug0Ch^ciHSIB)jR&ZE{6on`9@)2_9WPb8LbHGg^DMtt!5Q)BSv zkE?OZx$X7x)+S>0r=*?<9?r#v{ioYvecqrk0{08;d4>!2EHd;Amq)u(Hhg10@=9o; zvVZQc&+%cUWZaDGyI2+JnVy@p_nO+Rz%{A=5og}Ucogrm7q4@_(IB1hEB@wwWY5uh z>`bmhcKvgeUKQ4`qV@SWju&)XoQ0ZpVv&*M!mUjA-hQiF?QlLgmF)dX+r7=YqRGLt zelo23vhv6xwK*-z!CY)>>$kP9Kj>{FTF7X0J36LKu<;;XQ6llTw_j|9_oe|~*d-Oz zL)Y_RME#HRDsr2Vt3=g4TKP=*%ChJ4Li6>XA8;V!C}zCFf~WgX3b9N<0p5FU$!6N+ z;89TeD%71@`0;%5e0mqIvV$Q-5gw^{!^X-x7FHIvIiyt(U`{)?7Nf{K_1UCw(ml9= zBWqUQ{Gfa@ToD3ZD2MKu{InfA+^?YG*Toxwd{Z{MHU9FYyS^j@D|Mju7Ts|3=_ zrGDwAn;HMI{tX;SW`@iCz=Sd(e)O(xj*qOJ@l*2E)R?K-QB7^%XeG_7GzDj%X`S8A!a3KU3M7djiMn{7i3 zMIo+6<`giYRl*`ziUD&hrMM>&e6?l!(~XgBcHU8-x? z_qBH)O`s@MXQw@xYrD9T>bU#H(FyWVKkPJq6!$kmVdq<#4CWyYBP_$@$yJAJ$yP;DdI! zN5+2|I~j2Ov^4%#|5n|@MO9(yU>@-(is&l=3tt7htE2zn~+ni-ve)y|K&D*_P8UReO;jTlx{DQwA7f`o}ybEiT7+J=g1Oo@`gACU|M7o3QE1#^#kxVq`$whbzwIg*a1*dMh{ zcV0%1?X~Oq{vYPpnW%eK++vg(hHu9h7<=Y-MiPefLR@F*z7S+)f^4T)o*qSX>%%jJ zWwXwmVO#&0owWP<{-S~l$L{52m&0#?n6|6~wAT(uo4*{3QzDO|UO5=F(eCCS<_{bj zr?pG%3B$wO!GfyHRQ*INp{_UC0-FTLd@MXoO~$wD=my`Ca+xVQ<(A`X8vH&_@14_p z=jy5G44X~}E`7`M-%S`|m=5tyHSg?N-g4!wpDQCj#SSX*xofd9rsu;%Y41xnCuLo~ zG)J9dJ-%1(v|7^6cA!@mkl`f#>$C=Y=eq=-yn`Qc-kZZa)th((1C)Bo;Z9lYNwgb; zt||Wto+^rdue(-WwF@S&({4>a#%#w<><8IhF>U5TurO&l;_WG-8yL~V)$^Fzxy1{MU-`jByH&X_RF_aCmRm=nQT9^1X0{*{vx7ew7l7Lt2&x_ zFl_*#fAel-N2E0OT9c+(Vzk?8&y?qnpa-k>56}~ z#gZxM-7@3Wyq6+L)StI%`mKJR4PPm1k)NOcw#8V4>t>TwxtmY_F6M~IY zv$9Ta7N2xM;F%$|bYLTA2HxmnzebZ+-`MW)zImr!nwEI;gX6`2dNcCUZ0=vkED)N# z1k#62-Ttu&A;t2K(d3iBluU?i_|qv|ti`T6YB>`!$E1vsJOK#BM#4#@i#8=@{MThm3hp4*lJ}IFHlq9pGR5*tiQl-wpkjwZCSOd!emj-4 z`U!3keO_L>s>3jU3id(=?vptkwPD)zFjn;Wzp}OsZeY`DbNbgam-75*lmZR^#~0x* z!zN=2&OQMp^=P5M#|eaVMOC>$4R}*G0^l7w7pVRTm99wl*3>r4=E{ASz0>qJq*uw=%R0N!zF>NJm6KLC97_gotSsBtW246a*X7 zfd++~TpdK_;RKB%p zeQS8vyQ2J{973#iI&kO!LPbRd@e}w)DEkl&2-PJ^KL3EPrQm1T7t59{UAku>hhIPBYh!13TAC%0qn9-hZfc=?_2KO1l^ zFz9kf=#?;Hctp&No3U}X;uDgR@1>-s{d_+?JLh3;UjC!UPo9^Q(#y(UR8-c~*3~yO zzHWNc*51+C)%~HTm&+Ue_-SNxYQc4Oa;Yo{1BdFGrOP&dyFWk|FSHD#v7N!Ub zu1drg{z`;gTrMxD%D!`CM_Lj zj=*q{9jwv9>M$L*kA}Z+m5AT}j}pdB;AXo9s}hVqYF>_0B5q)gf>o5w{qcv>#yLOj zX+goO70z%(U+bT5!GDo`=iAY52vP@2+`^RFC+EM;RAr|bZ$!yAr_IC3-|sm; z(CTQs(OSMaO^KN8<;>*#DV1mNew^_}?7u&=G3z4cPlb^Gl-7r?bLm>05>c}r0wNaz zkuiU1@Jfg48#V2}boB@u0^^Yrf8)&WkLwup*8~1+i{0z`2-vkcuycAfN_Z34b?;!+8(`NCv44s*pKM3)3%4(+d@Te! z%w}!~|28y^!wcSv8K>{qcl6exadye>e^km++DO()#7{om3Xt4Rqw!03@OE^-4O6aB%VGxSlNNm&45@5@&uYVApe$YoE zPpOUL*=ZVTud*-_yq1388QLSW9_6|5`OP&6JMJNXtzBLD=kb(Z#m77Dd+{PckMeQf zT`?g`W5b^(|MkNE{eQ3bb$bH6?tBDw2h9h~WVpcx3LW68V~69(*$F0wTWo0+K1Q|B z!mA)B#3au`w?FK$7J z82$uwwe%6Zx=D%9GvB*_`Sjc~i*!W#_-P<+4awo3Wg8CvRC~F2Yf{f9C1Qx+Dz}st zKMi7H-k;yr9`f^0x@e93_8CVdg2{i|Kn%bAkq8rKNI2QWX(giW^xI67Oh4(Q5}^k7 z{*#{s)d@gIq}^xD+02>uv|-J88EJ}07bPOgGc@XHcvu=vWZJGobYm9Zo`Dq?l&PF>_ z-gxCUMMJLG*~c%k&n~`XI!ZDB5m)kKy4~O|k$mtUGP`IKxGhSFxF8!x%Jj#Th|=ZB z4~a32)KybC&fymEH29;w6-F|q+F1zO643;W0X(NS+Ba<#=j`mL%N+sSC>hUGlg@L^ zHwGQb8<)(ydSu;CuZnA$W%bjxOQ-V2y*wKTv1JiA8CK}kj!~k?p5;n}c!JP-$O4i& zG4-Juj2Mz0gy?PoAFdE)puQftj>?3=E~yN-`ehU3T%SRgixE_QR%u+z48$pfv`L;q zc1*}R%R~?0udjbvGnE7H0qPWzQDcj=R|GBmAf|PsEp%XuqIKR|e~Q9|6^>Cwfxc#n z2Mpw6;&q*J;d~2aG_b6kGvO+RIH>5W_64t?jdGLW_@W2xMI(16dhAB&m2rNPO2ldA z#Wv=4qF)1bJ$;JMpqCyq-g|*P`N)t{@)2S^uOi=GTX~FHimAOPZ1ZM59>s{0yg=AN ziN(h-OXlpY_`_-S>VfCE8Cry-J)0M_N3%5JhNx4Ukab9{pbh9JGPAsjkaoXV)LoFV zU0~j#{j5azm$v(L+u_x7pN2h~pgp(lsYXLXw0vVkcEbPThf2yPn|yhqSDfMs&4ae1 z6Z0{s1H-59d;K%;UC(zJf;ibq+704lus}iTwhon;Jd_3~5&!7pEG`uOGwj_o2#+Pd zE-VkzpWk*wZB(zp)C$HXppDZ_)Z_mV*{JyVL$!mD=ER8MImTwHC(1xb^nm?tvxlD8t%&t}Ln44>IOb(v)JuChLHw9ovC z_erP-0=99X5_Lmd{uA+ecS~6+rk}M~M~jrL!pzoRId<`t29xxVHj=(kee$BHQHF~> z$yp(zAD(dkq3yxzqoT0b^LByUssWUH+`D#x_8E}#79R`6##I{KvO}R_=hZQoL;DUM z#fY`1Jx^e1AFw~~(Fo%*V|eB(@?)o`QY>!tJpTg5R=5{2b%+uCIvdU6FU=JXvK>D5 zG_j_)h3OnoOC`1sncrYQPx6W%9k<&MLn7PfESQbM1Lr_?mnLkKyL~7**S;@Gd{H1v z89R1F&3qWQ1SEE=OVipz`<61ELjqv_mtb|NI*=7Hf$B|<`Xx=T0M3idpUuGZ(~e|c zwaY)Q$dv2zG$Nu-Pj~UcDj*yDiS5v4j-s?su#RLRIRJ$cjO?c&OL2W=J`vSfk2$@_H>uKzC_Z)P$);RA_|aFu6)XA&PZ zV;O{*@6A4QnEEc8vj5B($NylCMHl$fo`-~NcyBpte%9-y;C{dBe%-Sw`*n`|c^uAf z{dSp->;I?6D%!R#%*XQ`5T72=`7a6GlkNK&TleeUy{pl^m_CkP54@R`1ZLtXzviZY z?76OIwj*IWuKQ11{ZqrZ-O;TZURJX*+50L)R=I_N&lUuJ+@`W{On-Q}{0?=}4J66i zM5ww9U{_T_4A$a(`+KXOkS&g8+n`wZxmVMWvbH6>HshFQj zOUV+#xx!IjDMcgg)`j^Urlsphlmc4jgx&%SiTP&jHO!sG&xFg1{Y2_+aEEA%!}45l zK1a2-WOT-D8tmWlZ&AmBdgH{t6#KUhrmZ)v7rruL0|U-G2VN{n!-sx+8+6tMKCDDQ zu$r%G-m53X<(LG6jpd@{`H#Im9N+#RAT-KazzuWcfaqN@<8fwR>z)aSzI>;W*(^sa zlfqAUKkwtz$jwhAS(}xILCeXHx24eMyBC#+Z3AeT5`hxQ=gGsj3+%Urj-3_-H{KX& z-He?qM7cy|hBd(z?XdR|wbnsxQQrMwdrN{v1?x)T^MflV)Aiut+)&F|a@_puQ19kQ zcj43`b_p@u0G{ZcwjW`GO&tB=SgYJ0KLjl!GP@fWsp7$0i!0rk5L+z?BvFkr8RpJa z^s7wnKW=`4UZi}=)Rro;r3Lja+=Y+l|_=W;`TyD z+ZTgoRF63HC?e5(dv}(%)5|d{ga!VfO_9E(r+@DKb z103C^!bX5ppy3cxmLRY8TZ5b-fi_g*pVd22a4IzKA!nv$!Rl~ITX(ZHXEn+33CX%6 zw5m!{D$U{UhUaAlrF=bCjYLRp_hM>vDg*A(k0x0ojj^U04K&K28gel?qXZuu^kqqjmp`_}=ST$CoPoz`p_No_|N`zBfOJ!zr>j))M5XSKdZlDemdc?dp zBRJjtJj@CoPVS?&(XtiWo&aO!Tj#gPj8$2pv_>|PXkGWyxtS9a5x2=wS!Hp|yX)O> zmA$V>(qM{uxnXMA3HxxklX~)xp~tE|*(e zeiC3ScG>&9kJgjMHBi;j1}9Gt$?zJQ*17RfMUgte#(I$24-I7@4;4#`^9G0p1Z`Z; z#0JZInCL;+Gi1xnJw!Vo$_|G%+3ASKG9&w3Mj^-_aVmexB{z@mpEn?N zu3w7`zm)2VMN?%N0^cbnBjqEA4(-F%z_Mr5g->lcGV*0mWUujz-a{-nDrCo+x;fqd zXLToGb9dvy{nR#PP>_mY8tg4>bW=D13ut^! zw^I`i!h?gDjW}ZY309}zOSnT!vtHD)%@;a+YcPD6mTaf?lt`^*saawTf($k@yXgG; zdCzZ}Q6+1eM&;xZMZ&l_L*tSBOUgb`Fzxny;`bBq$U4F#A#Zl->>;KSk&F}`QENN) zW+9;=l7dUrW+jIDMDFkK9fh~Cm_50J4)QN3XiypnIu;2xLZQSB7m9grX={UeH99js zzVGQBFFAi*CvG~tNgkpyIf$0tJS7};i5(H^-yR={`lzyOg)`L#sSWp3=IFXSmi8Hzh?Dq~p+PX>h?rRuC>bC+!5-%qcofr zoZoSFHouG_lksn0HKaA&wb2OCHd>wOVSaC2lRq@dlp5&CWZJ(+Ccjo+U16g$Lugbd zSWU#r2(H~B^s=}k*r^lc@9qeS#TW_Z11eEty~S@VJK^=~*niDNP7ZYU7bOE=CWZk0hReM8S6l|EFUo&8FY-(%qDSJ^ zOr&e!UWt92x`4$Ff3iA{m0*T+w-*cbT&jd;<8#KnQpCxT+1uZ0cpx(;P_pUjE7Wfd zzRn^oX)C2l5Bdt+J1m3!yq`In$R2Y9*^mLdf;C!{1M5ap6cnyArnEmCZP4>k4npwh z^9y`N_SJ8K-MG<|0-Q8;#+!13>RaNxqYTr(k0ZedDhsmZ#%*#;!B}NsX*Y6vN?zXm zrI#Q!3O1|Oq<*_`IYr2Fq7!r+nD|Gba^J&MISuPDUDa<23A$7P>0YT$8HX=n1^tNlnU7&0xt#rRetHrU)DxAzNI zA~u_v)x*wg*br9nLhq6~Ti@E;)(+f7C&Osj4YcFk{PQ9AF)zmECqfnxGase;+1}%o z`>!|ukm?bJ34Q^gO^Mh{2stIIn z3xzNo>{cftrIm{V&xj@$thQaOM7^Xw=Rf1{2fyrOxcaLvq+YQ}TciYhmI)Hth@Tj% zHZgpJNwW>;&9bu(cmv)t^#J*8A?YUoNU6t!F(0x-)lR#Xb-9)CF=KHJYZs6?>R2@8_~#bO+nU2{xm|1NDYwmgcL=n5Ys z(9KyZp^GN%V_BLGui&M{!o(5!v*WJshm{q6DC5$5f)Wlz1iaoki$;?$l0^{B5&Aqhdd3^`I0I-|qd0A1;x;YJ~^5j|(L) z)3?~1Xw;XdWJC$G*E23(=HXp}WG;A0!1b91j>3g4g9P2VuHPEC(nzbzI!j&5Heq}_ zEE0Wdp&t4z4oQi?aAfn_bA>*ZpPeqdZgU`nig; z{ukF+QS~b{iCI`a2r#{7yec!`;(i_Xpa1is&COV4&UHUR$MtZQTI=5_LJ#M^|Ggf3 zgNXWX)Pn!9jx#F;!2H=90L+6ruIXI9>xuQN2LSs1r<4D$Btfl<9$@J)w-QnH7)_G3 zkYD$e6krL~=I3Yoy$MRhdw!fqa+?(d^$ba-Ezy zkHHnvcp<^Jx-50Nt41+OoN6a=wzDfvKqv?gI(EG=FE7h2q=7LDEyYR2;ltv^2R3{Lu_4ca0Op&DIt3EZtAvT=O@two6-N845?GUWQg zoFR8s0_b8suPDJzvDP$7xN*`}lecykMe5wNNr_d=FeV1IAr!M3e+XJ-lS&RH&gRN7 zjQ~BIPo6row6$g?+g4E*wlGMhe@js!NYo0jjexgcqx$^n47PTo?V{NwM9m6Mv?*8NzRp;$}IRO1J)UZnzzWY&L={>53fdXa|$+9-ysL zP+@Ip0k?%dY(iZ_9Ko&c3+jeLOSLd^qLIYp73QA@l}WFVr_HqB|19`CeOA}*q$h>bUyTGD(+MUJIly^nNy*i|_7 zDcymLv`X?&F z#bEJooe&BQ*->xC4~(X2cnBC(+SCeG(;x+)2CPvUz#RH&-9_rrZJZ^AB=e^y1Fb!i zZMFi0tpeoslOC99pn-b}oMUEMQrL{V*C3E6QW?}^hJ%s;#BQuQm%Tz>zhL#6%5mhlHeUR7hx)V&veAoDRq-#P z5X^H{tXx+J)%x!2u(QwQU$*5)DX#ZNDq~T@ALe<`YEqyue@K%O0JbQkPqz=NUmNz7 zg633N8Qy*r_!kT(3)yWxkC&8f=|G*onMS<7HHJZHKiyr+DjlsCtd$?@W@^d57DgAF z$FjJ)LDJkAst?V-2f)w1A~$iWA{n@>06~wSenaCm^gpEWVsE3qDNB>ako(q(xzCW( znA?EEMqBw<8N_yk6q)(6Ft8u9W{RYHbhOdM?Pv_VqJ$fs-BC1D9r7F$-?P*fV6hz9 zqq)Z*TF1IyCzLjeY0?8AEC?0=oC(T($6YQ4b0HzHoWRUZnptP{H2KTR7~#P&8g4n< z#L}gq*GAVcjYRZ;$zJ+2#d1;dd3YPeq&6jN2=2&dX|Lg3sAe7Lo=95_Zb`^-(&ZsY3!U>g z(b2c#LHo3y%z0sl5^>T^ic(ZcPzK%~qF+HJ+p8h2ZMB(scJ-2 zp!iYPWO&jZz#_?<<9HOz_-vKh@{p>HyuvVXTxX87#Ij@pg}*M6|9n;kW0NIlY=v)C z9^9L0ND;4yYgqkuRN5rKJmWGU!2-n&q@=v7=-JK-NzNJv*5$fg`iV8&Mxai6Hc^G& zv)A$mx3sxHWHT{qjArcbFG;D?pkYeoEZPlsPMI zkGjb0sME(Fq4TY2w^uO6WpA6yfla|}BWGMF9NCI^M9{GAoFc(+qzw?`?WB#6&{bWkcpUJc8{RW;46{Q4fHmmTWweL zmz{Rj){6mgg5(HXt>O)jp*`Ge(rB=`eQp3FJ{)CoWcKd%%8sX-osUDz@fpuCkd+GA zQ>TQIIve(syAY(Rj_)r_TU1+ermWXKgL&Id=6D|H1>qWz@iu9V!6wIq(fKkfytRQ@ z1qUBcbZF(4?|?3?GbC-*mut&2?G&Kxb(a0bxL0E=0lfwH-H+)hiTUg;AZdMT@%e65 z*;g@E3^kw+j6Nn%@CE5RVL;8492}wbTa*ehriP^ju4j{dO+@S)jBVCrh8iz_R$wt;t%xe+ zOdgAfrHBm0Jn7A$aXMxhj)ay5bKla+nhgp;=I)v7Ii>*~kYMWK5K;?IrH8$Ya&~-A zqs=8+eS+Jgf+%f0n7$$!ywa7ML1@5~M0HWJ0zD(jvb%p`^_+K$oaErV+l^I6%-55! zBIGMp47}txb3+i?_Ia91to~d5b$3T@ilK}ASMUn?*B~&Ed-ENo6fP^ylcPq`KXsl5 zHwYw{UL?%(9IMwsc-EoRNJ!o$Yj~x;$fVACgT{P*T+w;0b)kCL{&(|Yg^r3yGSwur z<#X21>^2XxRs?#WH+RWRE|0i8;6MeeI9bXlT332IPg?F>+*Sykx&LKoc;3GBNdD5# z1}PJJj@g5IV5Y)_VU0GPKgv}^0o<-zm6?yZ$7ZHOzQH}k^gGS6d!2`Ibu2Qj#5^Ix zP9&c!}zCO2RUSq2-j__ z+2lMNAlGK^6*3d}+i42Qs;=k&Q6*{oBxsp`B|j?)d)3E@3l!!YYbCknjnnd*i+rHQ zDp8h_8H+_LZ%ok>-_!yn*q@UbA7{hEAij1eN$WJYTRvOJrnUf1wy;%U8WLXjkQ-vR&ps&PQ2G*7i0e{xf+S4^pkFj{c>6 zOm!4e!!L5K!CwqYlO3h|3EZip0RV#L>bARTg<%Cu_Ao68HtFL-blR;DZ^8Av4hy>78Q!j=g`{U_#;SeG9t-XRKyZ;UPjR3fSF63=8>y>9YVvGqM|=( z`xB&@jh>1!%vt+Lrz&CUgCUob)H(G{ep28voE8TY5b_S8=Z|J2wVZJnDI!c}D5`kQ zOJ%z`fgYb7e3Fc!dbk4XeY%5ZBbPW`ylsP54?6p-`s)~!3#S2!PFhCE~} zs}$EjSWWb|Q?ahmaC8xcCdPfp>ox;)oJ}*^n?VfeWpn(EPczSNKy`n~E{p4%8`M4w#*Mco@v6T0n~L%1H!zKYtf z^SRDzo?Ap1|9Z)NECBfaAm{jl<{&oD^;=~2uP^)SAQpGrI|6R@=SzQF`8Sw4>wTS{ zLa%!O+5~7fPyUn;&~B1`ZS-yWS2-#u|3%oD%}e72`@I4rCZmM8LQnT}!QPJ2kd7}+ zw<-~-W>m;Od~{MEvTj%n>Jy&Dph-uO*<7O2dU~+d9{AI9!^saRZE&xzrYIKhGr#D* zMN-deevJQtCH8;!17IjTa#u`R?9_vZU{;aU_aOU9D&s8Q1m+)`FMC&>l|k#KcaK=<^?T# z=gDF@#fmVPLKXROGanPoUsl`hZ~IhP`hNbF%g3L9S6|nL0$kXrRw1XxtCM_(X@9bR zY>J>+U@dnxQX;7LW~`vG5S4BsMVurYj2jA8t4n=05X2GwBu~GPfkz4QpkbP|5LM4- zuZ!-msXV#K?Yp))jz(_tNZcc4U2L!t0cwQu8BcvKb(xg?5~T?`^-s)K_6PNnW4Bj0 zD-1Bw#e-+V7FsbZZ;xm_5v`tZXYlLJd6fEFZZOhSnD*gmQJ!pa8UXw703z(C=x!U^ z36Jt!Qo`|4VerSMU}XHmIEC&2=QQ-vq>MaVM%EZjd^%E6tTDKZ$N*=ER$y>qnOxosd4ik zqOH6Kh=z{cjLqEQ&sXjBE5Iyji)O-6LL0;!r*}qnlrBB`IDewtYj;1VR(;?&OYpe_ zTlPb=sStS^3eec{w!v3d)KFM>ZrlRXTZy@aYMFfiTRXyPGzUeIMU>|WsRucG+;c;7 zXNKGwcZx0(6!UL%(rNn9Z5}pItfBD211@US)A!7R$3cakUUQM`4Mwu?EaW~>{?v+q zET0pBy=Zb6&*cLCo6r>@{6lLD*5Ra*YGCgd$+v@Q&P ziWx;l%0QNJjA>5Vj9n%7s}^m4Fw~4~h}H+07QGB^WQ1h)aA7rI$CYF~lBEpuioG(B zsV0nSNL-2U>MjZVUN#apx-c-NS`^2dA?)IdZE_UZtDIqnpFRf*<*!sULguBxM!waCeeCRO)O+6#;r(qfPmZd7PdUItrL# zM2pC@6NP86!%lr2OudH&NNFV4s!)vCTn2hmxH-Y1hZC7E8KEdD5p!%6xHZD_M>_}F zx%5;@6t^1d7&o=s@$vS$bd(@B99d86&1LKt3XV}~dp*h@j& zZsPs2<-4&fh`R&_+8=bYO3f#IBn-@4&zR~MYZZUPoeJ(pR#jVW8^H(V|D#|wmvmn^ z3Y$sDmPC@j$nd04a_9WKk<2>IkTUt`ryMy&TiV9#OrB=4S-6ezGcP)$ErV8%dqFiB zM;q%s!tO2@?0C_$^4nXW2?BwpPZsj5NYY5bF5~YSv-zGJ$*VryqLaSZ)!9n=8Ddq# zvW^J$lqomS_GK?7{!31`%_PLP(&lA~`$_th`c^J!bX(9r>xzYhfjtom7Eb8{Im%U1*)a)EPq?2*vq4 z7xUwBr0#a8sKSLR+ZF z?T%o}4Vykrcv!Kbtn-@ZR3>3vDL0QVfxm8_erh&H;jA*s2;bB#%4?RjRU%^tZDM!< zF_R33z`%=vfuZmdTQW-mdXdAj1IH&kFj^M+RL$sVNuzQ4f!rXnOzMh`l9^1x#~&PoW!a$1Q6Nm4GCjq^ z==GetB*h|lI}h~bNO2KrO` za7?#Ft$imc+rUH4;WDhwM~pC6$W2;93i00wCAXMs@vZ#IV;uA|iKf`Qefs-*D%*31 z+1kLP+l!{pbklOEF5M4eYYqYsl6>X^^-^`5qsaZa94DO57%YFZjV~oknFoTBD;q>k zYuWs#4du1Cb%(eD@`|-F7Y+Fv`gb391a;$s4;223N@-*vpSt#G#-x9YGo;3(g4WLP z?p%bYNNuVx=iCM~jb|=(VC;ps-g~0oYSNcPkBkJ%&{){43PkMpYa^CM*fUdd`uUZE zkI$#Y=e^ou_z*Ky)%^~$n&C2xSp~nXyfQsy|4Wm_o7^CSW$m_ZuvabeLXI*aA9ZR*s* z;CfbHA%uY6r+eNe9V#5N$xMmjMmYcu#>_mb!UDr_njxWjQt$+aDW_G%;$1qSa~f(c9hS~t6w)=EBu(D+yS1I8~_br#XAn%8=bzv|4#kq z`S3kIZ7^IoMB5`|H6$9=_11UY*Pzeo?LhXPlAW~GIs+1i7Z@-ZptD_MMdz8Xo{(%P zqvU_EdmoiLy(#qx2rf~WzQWCMRK_X0WA^Q1K_>4QyG5*nBCBG}U%Db<(`TW^5{^Uh zcAAq@%aMC%!)!}G%+>S+<44vj{n7vV=*fmGmtWVYb zeQl`4Va1!d-Y6Z!n=)U&0-^UI96=3t+ z9SY}F5@Jy^>eau^8=SfGdEQ|6uk!{@UdE~~?e;zZtUs2vSy4!#6G78!>?cL~p3J@$ z=QIewx6)6StSiywLpV(-*s1A-b-homtq6}C9%Y~B$Td^u*8@VzGm;zkILV!>aB!-E zOwF~MW^-gRlZfN-2QH3Ekyb_8)btA5vda zF`P#v6Op=$5cMN^^R}s*b;&0Ow-~+xvAUF%EDxR2jDOH~F2W_{hPRJt&Ouj>BH^`A za4m$RIpH-RH#jly{k8kj^XU_UdKJwL-7^}q6fL0SEqJ9T^RcoDR|@Bbl%!QNqHuiMLL zL|0xLz4|E8d`)r5hvEpAbA(Rp7G!Zm1`5vMnTJw+-lYB^5{8eoOTe z&MMLe9pTP6#TjD|NQ&HsI}_!woiqUdz=e?S+kDw(s|+*TV?~<&obgxiH>5D*^Q#r@ z&-Y%Sa8^{0FZ$+c7U$Q8s+QF5A{;Jiq-B<}bft~2tf1A5Jx}m4IA-fql9=tDi5yCv z-p&^9jH|!C*>1-BzNU6^%`LeIER4JQ{2 zuA;ND8Md#&e0K`X>u%YZ((vuX?6=3tB0muFUC8P=3bw=~M^yeJjbSKKtL>XslN$m$ zn)Y_|$3E+v_iDNAd@%jAN`6%IbP*MAYUw@Z*F7D246bvb&P)hqpkWIC$}Fr6-S!gG zPUT9UKx)0`b~!G=;x#3V_Y<(q#q&z)wMyUITyP2&h z&OX_EhFTpJIgt2`e%ZD86`A_Pk1ltnGw?B@Uox>%o45fuZmYngi4iDrlbO_VkapfY z97jR+W&pwslCyyFM?{hLlQ=xuE!bEZDQqC<;yr7o`92kQ)YYAJIARNmjLL~%OZ7pA zTN1q|YAtWJE^~A1h2TuWlUCWA{@Iyokj}mYL?lY@_z#r)QrR+|4~g3NyntBs z5+h6|*49LD`s`Sf>oW<4GFiL-=h2TeK599)E0nD_Vg7^>NIQ|63JS+mTNCX%&KGtr zPXZ$j+|D6BA8fC^=)H~pDY289F}el1EK8Y+++k%TiJnJX?)AKJevY-GmRmP_rZ^T= zLbwY@rF`_jlnhpHO!d%<-p!6H?VGE9*8b13o*5${Q1Yfog@G4zaLe-fX+hUwc!3(5gZu?ut|*86(j-U=ZNq=q2O=6Y{S9>8i! zFPwrug`(79y|+SmxXxPA%cx{NC~QgYZ^B5#=X-opKIKc!eJE9V#YZ8bGW3@5=$*2& z>}MyM&xotg@ZzwW7%E9(*Lvt}Nb8%jh+Lqn(KFD8?tbR}H9P?8zNf;wDAyobWZ=Jp z2QytZPe*ee60n>=HxM9LiZ>JJ4N}j>2=#$OJdR#1@94Pf(NM|E5zm~3Kt->yDjU6% zgrV@(#^8hVCkh`I_Mez})@cS=2Zl1@`gfjY5_vtOjzx2@>$)~>!GMvpua z!}4u?o_J5?Q#!WBTVd`TtB+mXzqg>8=R4uqnlF#`d;%@A`OlNwKZ=OI``iCtI=uy5 z1x=yk1$|4@ud~w5`*l1H?9&5du23vAqwzWGOdt7eudVuXcKUtjuX}6rALBxYIfo(n zMf_DzD%8`|rMDZ>nCnYBj}9L%Ss2ujk>QunaL=~}xA*UkLSJ1OrvNwI77oT&30gs! zI)G3LfrjKi$YoKf3JeFf8D$WLALHu01`_NW#b&q9NUTS?6@CKj3-Y%HP0R!lq(eG` zRUcpUFS?f1Tr}8pKF!*yFyt=f98SssLywVAqL;mx@~FRlW74+7gdnxIgn7=SkzDht z{n3OWhONkkT{m;?Yp=d$mOEV*pty*gwhuz-)i8HcY6lMwUOEAgez3S#z?!l&)2Y7J zMWjpVo2;7VGL{dY=pc-Q#C<=Tgu06o2p%&|iL&{%g?^_3vYMXYpMRG;Fy1=2)%+ZF zs_MO3VXLqGQ__`^J2(xmv2=URE%VSZU;Mc#)W-!hEGdXaNgqFv*4Cv}UP$3q-I}X9 z6B6a&d~abpb_l4dkeN8&Fcw?@@CY?q{-ta%8he%!*(gUvGaznxqrFG>{x;O{)==ka zEqvNF`F=zBEt%M;2{17hJrYD5E%{l7kn>}3DWAN`r|E&qE(b-0_?}FlsFTTd&XeoC zS*xXQBu;Imhc1*le}kLyYRvdFbr*9@Tku{j-;G~C#WeLg$5ee@^}aOG;Y5dETavB4 zm7_x5hZ+SWXdx}0MrW%xKADKv-w+pC47d8(%7yRM!1$k9E6`qkm-+dkWa z@aSZo)TQFF(g7Cj#1 z$;BHIAeuH5HCXLq$|FbD9UG7^y^^llvA9$+-RHmzzc$*qBoeDV{&=<}UUnPAw9F>o ze0P|Q%oq(nG%_rhTzFECxCDPA7S=Bpk*NQS!@elaR7^4osg2Ca zK0!=5bYAE@R+idpmUbcYdzv3B+D-PE5k$N4Ic)VJX4n8KK!%#DN#p9$(n_|b7Rf9+ z;E$G$yyf?K3QR*+rQ}8_-`>OaEur{iZhs&89TjS!`F{4_i-?61Unzk%FZFv!jE0co zgQlHrp9b-d1n6dQu%LRAi6PJWrH|iHMw?~%`(SxkL~3CEpw|Gdnv%yJ=Ey_mJyQ!> z1LstR!6;F{HA zgwRtWo1cr?brtO{%72B?ky3e%y%$Pv6W3RB*hC7ZW5H5zFFa_#<0?8FaAf_t7>zNT)SF_E8?7D_U>4O`O}h@u z_?>em&3F&t?q;61MSG~@O*#KKD*6pyUJ6g?hlOS#Q_<@`5C!#vYg*^Fwa*Ep4teQ^ ziYy7%64>i|CBi5fj1&x@xSu~)=L=3^NMzN||8zMWAk%M@ukfYhjbDkdf8u?@LAUw| z^wy%FRE6uiRwy9L4?P-BH86cv+#Zs+{7jO5!466F+x-58o$Ye-u8*x#!R581wKR0r zXJ*|^PE@3i{@SbPK2HJqvx{D@%ZDjv7$ofZ=`fvVLHTfJDH_$;`^rinxw>tjrF0bF_ zy}>LU_-Kef_}AdGAtvyDO?(%{Jo-HFz2dLWwD|p_D*XMVl;iNr_XL7)6W3*eI@OKL zA$e4Fpw|sblYDkhF6RDx(egH{KLRnYQ7h~4RCyp(nA3fZZaTE3m|jvA%Vz_Ee})O( zL6jH6bGBf#&lfn4trv&?#De#HyUA2H)$%ry1LZr&s7VBBPL~fYan5!sB6ua|cxkfx zzCrQV&9b^I&Flm&1N2gBK`-(`8aL75SZw>Tjt607cO2nQ?m|@ETXS7Za#&bkV8KHB zcd6*GmN7EmCbvFLVM8^6IUp`MC}I=^1O=@GwhNQbTi=qq=MtTo%|h|gkPn;0;mOsA z;MU`MgI~6m4%l1nn0G!m`4IbcK-dIz(*2yB&qH*Y!ISjDe6csk+AC*SmjK#Q|6a|N znb7!terk7JS>eTp9ET`;)kwM;XSUm%%ew8mPK1rOoYKa2OnqdwqMcudP4*}xS;%km zyDhoojpuy7nr$E#^ajz?&r>F8k{yIMd8)1RLDqHV$IRAGuE;B};*6wh#?y@AumsWdY=~aMZ8tF})-)*Q6 z=Q2f__wydM`{2A^{*;kq`(gn!(KHfFY-OigoR_j>CvpBEgUNyg1crHKFzEr?@2j82mr_0+$gdp^)^st@I5i)Mom{xnQ8gP4 z8V;wg+62#e8eJToQVBJlH0+%G)VUpNqpw35rO56D`flkcVwhMx4h<9^YTXWj_QkhZ zn$JN}gcO-LiTvqLF9liMotQPO8gFf$?dnP!4puwPs(e=5IaMSGW_9n~$g+VVuG-j` z!~+K=z;=HbswaeL`5fOKW>a#@!sZ1f;!dFtk>gn0VWHS5@hmOx6s)m2E?D4z#DqUi z;oG`*e`!Iq zpbhhh4*}34n%XL{wF9HGWa({@7Y-@y-Yaal4LwvM{x8nnJFe;TZ5zfquqskPpamgy zfr>z@j21%TM!+;qKxT14SgEoCB*dzKh!7Ql3MEllG9$7CGK4ThgaBcW!~|qR5=IiT z`d--Iug`to?|nbd`@DbDPyY#!@An$Vd7Q^_oPN`%7vHBRwp%ikjVh7LT6L)CL-gcE z(V$jGRf;Eb4iO6AlM$yl6VjOOe1D!CxHRI#mPP@s?GNzbRTHCir166usMk&OsH2C* zhmB*gKVfAnBlPY(!6k)NldeH=lx<3CF)BQGBU@1SLpV}2xiPo9u%ivyHV41L<%v1d;eV;ozO_Uk%wK185FW=Q8b7adQN&e<&x-yV}si%MRt;x85Pfjz6Spq-C4B$wd_ z!sYW%*L0oxUnY>Vf1in8YK8xLCPuEFi912t{{P3B2*r;^r|~!%$8#o?8tHoW&WWa`6eA!U4_*AZ9Cuyd&;WvRPejn+c_u$6aC< z99WX$Q*tc`Bg$)*^f0}cc$ZsCpH<9@rR|0OrAquK`@+fQj4P=)py}tFZ42G<+e+J^ zjo_{E7tX2@}34>a8( zC<+q&1P8pM`2g|@`RAcpOsmoG$X_aDtnenVw9_+2V5dRjY`qFL{u3uQ__*+8kA+z1 zBkHzV^w>N6TV6jUQ`TvKrh5W;%yE1n$~r7vdTE56fSFJBKvl9syUpZ~y;1(db~|GA z1uG9o2S7nKV60is{vodMHJe&vQ6vhsE$V0ie*th%rz;uY`iI|98ZdZX>VD~bkw4f* z4VhdHjQME=o|M~XE(^3_qFp_5 zU@Z9am8!^IsIhm67b-jrrA+p=%G{g>?wU5*MilMZAg%QJ^I^<|qurG_f*qjRlOusk z^HYhji-0hIy)>Gk2Cw7m&q??4MGwE3b$ow;&zQjDW~MTqo>gt&H`#(O5r?Q4}}K4+t(YV6vQH@o(vIpI-n;wFIh#DMm&zx=Ff zlXWvAgCy}#w|b!2_{77VjmsUxS#FQo2gJ-)3MrPeSi;PvLsI14kpb$Bd8tk*BY7BJOC^Wr`&17e0Od zxR=8!%YjqDqVh2pJcL&DE_1xjWi=~CSonRuf9}9+_l+1$ew(_G8Ys7w_~deYVc$5K zSb5UBG%rPz{3={u*&H{f{ETxuse=6^4Hv0Jr__=7jd zQNnd-%Y;`99qB|&C!GJFd*IXum6gMFk#JIQHp*3^XvvGwO}`0hL=70Msw zTxNeO7zcE=E6%$d7iCYyTdM`FD_aQkio`8N%2ZqJl$+9T!!8J5X%X)!-`YzKjJ=hBxF zMZh0~&)#Hk9W#$RWO%%ZUBveXM$0*SZ>7>y@mjvgZ78l=qEWqAno>688*V>VgU5;R z>v3NfVQ#V9DJ;{V#}88vMF7Tx?zVl+qECarzEwT@0O(*h-!_$>%Ncgtg?i&M6wz^+ zE+Z{8kx^c1K|XW=Ww7b4+Q=L+b2;h}k=d4-M32ThZ{aW zLza?%1fqjkTVK$SQIOYm-cUhGXGM6hB;>gl(%jPL|8$giQId{ zR+)jX8MI+VAJmWSpm(PO8mJtFGbjxL35ZUM$IV6r@`8Cg{ zw?|KQlDptFq1-eya0GJLWvT|A2-A@yAQHI6?TJx0GRDhk;DHgUkczF@HNB9!`ScXR z-Q}OnsaG9<8c9zNO>752YdGUK4^#w@jS`JO$4i2&nMidx28Aq}^MbWx&U~cpkRMjI zODcA-zXzvCnJls%RYL22lqZTb5`$IkATxbIT$iq6hx`#D0cB-OiJK$=sgqj!&`fOA zOFdsv9*3wp9oYGO4E*;4bN@7=5B=@4uRXhJAD!;`l3XKT~}FDxOrI$WcOFjE!;|^~&@(ulaN(9a)J~9XOvWFu-aH%i9T=O&$Taz$ zCxe*4<$a#t%~$0OUho-4j-DXDnxETABYb!pyPvBZi>JNBL4J9{nVs_v68)tzypZhk z`3Pi({9>;eFy%@t2fLJzbr_4;5jM`bJ!Fx7SKPAL_d?=RUqv+R!S3`fp6S!=NvXK| zak0Oav5rX}iMO-g?)UwIihOI%yL*mvy*ni&Qs zzr;hTq7V_d4J32c-Vd&AWsw2oeZs5(Nia7o3mmBaZ_VSnb7O~GXwO7$aL$QvBD<@M1?|Gdp9&NZ_;(a&uu5mCl+lxhrg?MAT{FhrFIQwJ1AblnTcaWA2G*= z>Crv7H>Rg+#L*kQ_XEB)V&`!q#qveyk6btSra@+)-~3-HsAuz@_Hf$LnvTvlr2nj1 zu=|`lCyS1J@_(6~mKy+~qP7em{}qJO5zo2s~*y4the(15wQP?Q(br)&dWlNSZ_bmNie=*V}ri#D)_CVvXCj$_I-x>hZc(56h{$FLf+S zetnaUH@-HdtW`Wn1Mo&$Zp$NU_`wXiO2%uuLpV=9%hMLl0fy@NR^@}y3a{-0zLB~4 z7V{NbzPUWKhjr9QUW(+iL%Ly zD>0`tG(m2Hr={fXOUzfjUsq&suTG#BXoz;1W`u*v3@X}naR~AdaN`th<-vrDkpBDy z$`ixBzf^*+o6CI#j|C&CwTjoJQ!IEY$*i5P0Ib_&2%2m`lT3VSGhOH%3=D+IGD(Kb zD^>v3%AU#~32Z%KOcKQ$=ii!Phf6yIHItFRrWAtz`HI3N z`<)BC5h?`Khp)VN?RSg(bbI4+{SwzJGt{Ms?nm?|Bn~((=|>FGPDT(Oz^pJxu7XH_ z+_xwdWggZ1@MNQhn6HE<&tKwf2hDcU?{ilvJ)v}ypq+~^?pQ2Be8i%?Dv^5+Brl2I_h>a`W_RKwJ8PYW)QhkY6TOdrpua+Lst(_!81OqIEXzW1N2_kRo_o9Sy%Lhi6ZPi)+Zww&pCjMHo{#N)@oay3u5KGOsUo zR2V~!g$*}5r*D6}`$RZ`pd1M)lcd)(-77lxR-azp{4_ikF4DMdDF(l(xq-9;x|8c+ zHYcvhS_!-*;=GL+5$DMu!zJm>&APBsMViQXasp=$ZS@6}5vloz{z<)=gdW&_jL$LF zD5bV%G-+UbK@(zAPH#xb!tv&;90g zAv&DV8|mi(pZ752&}C24o9Fg&jUg(2!~-mTPIpmA--+s^pS;@b!j+#@qD-{LFUTVW z(HYs3R$}qOKwZ%;+_Q<8l@hu;?R1D$?h{A(}Mcx!N=?BB@kJs`pfrnGngv zyGO7Yl=5%@h?TiK+&%Y38M}w)c=8QTxdYK-Lfv8xv`XAAuAwzk&CRsZEbhMt!JCv#OAy}ja>}6%}woMW6Z&y_W3&cMn1c#VS+OThHkeUod z=I+)E8=a8wDuRNV!UBs$gJM;Jae`>L`c=XQH1Vyhwgso+z6a&T`UmtKMlY5VkQwtH zP!1ru-hukvjUE&ILm$i(C2h)j>9B~ZQbzj6N0b`$$>P<;GZhjcz^Xj6_3l%H$0T>p zJs9^vSfi8iEuN%&OznxTC5f3?sH3AJAoKu2+RUs5PYir9!DB@n=_$ z4%iK0TD|%<39GKm-#PsNqp)Hu@~-4Y(?rXP=Ga2C!xVO{;Efvs!a(Z8_O zGxI%hc@mfc_Z0z}F*?>TYM#f)psQ!LwapOp34R^W=-i@`!KaJ$_N{HB=x|N!j!RsmY7IX$ zs12F!%fggTHJ1+BWzsm z&EQs3c3ws0O+`L&udJqzJ=?ZOqoPL*2n93I-~PVjwlUP?RQrNnb_GcyvW?V9C5`<3 zTA0LLZ-lAIg`RjHi7CsyLim+@k-swQp2wt7Rh8Q^(G1ep_)_zTCy1ay=CwoiK*vO1 z=#wQ}IIH@ewpp^92RCc5juRRCI$Ot-2Z^fs=%}a`phN+f+hN|cNPeBi|9ZgB%3xE% zsa|tECQM J%}4iZKUTuKWzU4fB)~e^UQOex`$B!E>amo*7Ic(eW|GX!$c3ew1^b zgHd%8OvGSKi5dcn#@MP-F>^2Pj5G+472vw0{Rx_Kg8@?p_@$j7WGT<+9>x1pZQ$;P^c#1z z%L;J0KGhwcGOip;#s@1tNOfAh=1mM%Uytuv#%lO$gN`;$H^a4S_E)05L*Ox9A3xh> zrc6TS4uSR=CJ^FK<|rGoa?ED=tY}Oq;>gDa?7-^*R2Z)d1UTFY^l#XP31ii#^;v!$ zsP-_}=-J^c`P4<|T0xv=S2;wNF5k@=IOP9LyrM1wWL02Q_-}7%t>fxdl>J{LjMNWG7*}8Q(_(lC>ozjW zu9_3<58+_&{Uzb9lDhzOxp9}5+X*lHNLS)VqY@%m@6)+f@=4bv%{hdQ#0 zg77XzeDd1jh4DY_W(D-<19QZl@o*);dO98^^=`1&avvz9Kcu5pI6h7gco(g zbd9>OaueJulUn8;a;~px5flobH9V^tcuKmMs55GISALSLZ;TYKvvS@?_+eoTuGco!bK~bwuq5s*skdjBO2F$&B3CW9|9Jk zW3q=SEfPB(IO9SKy-==(C25g~2|QnYeTZ@m?Y2z;E<$uy7*`*?TX^clbC>BU*o$A` z*bK<8N-^^c!05UTYus3FWv9#z|5>t#>zFScc2 zGOp$+k4PDVK2Q~u!MSA&kXs4Z;8&+1#S zT51y^^8rjCwZDNW6r~G%Vx#pzH#kr`OGGuB+aD-~-~lE8xh=k&)fX5wns!(IBVcS( za|$Y`sjo8TvKJtEVs`D%(4%=rfqTl2ItCvYvQiXEEYEJp(Q0?(C0hO*GUngyRh31p zVk*mbq0QXI_o6K%j!o&yP4QXN9DiyRJLz}G)!CU+(2?F(60X!#GnVaLK8}O*Uk#7R z1q^2NhgQi8UMpdv#DMSe##cV+0Qpfl4s3M8ou2-m=np-0g=HgdF8*hS{Vc!P)Awi( zNYk(S1-vWHM$8-Avnbc@aL7OwuIXH7Cp;eXftOs3GrhE?4py3`KlC=+9Tpdb6Dp)1 z1YqETnuK+}$GlD5*|BiMmQtP7&t)m-Bp{>;Ju?iax>qGaBVI~W?PbxmuZm;JD%q;f z*@4St*h_+s24-;#^}>BU;|QJ_p-L%xzLou8QQW!8p*KpnMd<0fD{);!t++Xr48)e)HHXMP*n!-W1;vzsn9t`#yH z^fkHchc$Wk&6IW5=|0a&IsfVu^Tt8P>Mc|c@&Mu#W9~y}b0qWe@9x1_iSN2?N(an)y0PFP2GAU)K=8~S zdTI)qQt~*{x*u{%au!_6_c7^;0u}x%j=O1@(2HShP?j?(cFnSTHSGrdL&GQ>r+^O^ z@gI`DGe_Tv*1)0N4!$mL*>d_mp8|w;Ky=<7%1rds5b$G{+M+J>z?gZ{_Ozif9Ka(g zCG_KcMU<1dt{jvYhRf#MLi0N|Q2(36od479SPTNy^CjLuxme4QN=lsg3Ph;aKd0^B zW#FpN`u^WKF%0P8@9?7;_R+at3*6fbz#3i9=!M^@hl~y=N9+os+ofk4R=cH;`R=>Na#}bi-3=5lk;8kce?Rk1T(Q-(my7 zMP$-rLlYe@_Lb{9JG@OkA!sm_26E&|5I+Y}KAgKefgYJ)0;d!&PO{r zbCDYE{Q=6ZyAHB|MTGn}uzH;+hq)e3pdHj=nsIZNQCvx&*O+V`6bLlp!Ub7^x+3Q+BwO2kCW)ou!0kkq2hV0H%;D{rjW5ZTMWJ?|U(T;w37P>X_pvsU4wIU>i9VAhHfvjVqkun80hwBmAg9 z>2ypIoI6E3P$t}(!vhgH=@rE>aRWht*E*H0Wr{XZbcxGMO9>Xz{aLtnTAeGid8%yg z9qkf%*!-okLFOlYcPv4^dG*;kffxLVR$U~y`%YA4O)ZOfKeY4h6Nu3qI7IM10_P_q zQ{g0Up*VIf#EEdxZK>N}UECG-0gzY>!mPib*|h@CDsQ1)v#x0&7{U=~jO^;<(j(@e zaU2CxG-EfqA)B~amLjs29Qrfxm9Iy60o9x@K(ys+7TSP7bP2C2 zp?k9ARyVV!`qB%m?e`MJvHGMLO8NxWCTH52qmI3aH+PQSdB?HU|GjBm7lmXE84Zc0 zyt?7{bO{tV=3v_lerIb2?|ip-a41tJ38TNxLUZZw!zy#ntBfrrbSSoU`^=Qv7CO~ToW|HBaz?>xz_cW_w|}b75-Fmqde*l4_J??bnLmhYUh%^GvF2Wl)1pW zC_e{DJ<{T7BM$qPBH5u zby21E=3|!P>ObXRee<0WUmic~au4>RG>A})*=nMCf#i&EY!6R@3}>6l#C(7kd%R5x z1xcbVW6RpdUHSq$dFZsKtC`?c&Xf^lM zfW2M=)cbIq&^>~10@Rjg>%989zxBpIW<~6<7Eql!ugQ9eAu#DIbG!12jE49_E={C& z@yhC%Vc0G#yc-&xSEojPP=Qo?ivM#e2!@xhoOv z;N2r2+ax9velNZ5xqxyQACN7B{{|lFO)Ee!dtUbEW;(zPkX)1SM%VUa+x9|H_Z>Az z`_EaXBL(Mg!_ElWl5)7{IG9#%Me#2FWtRDf z1B%SWMBn^N1tD^_=izst4!KLv&Gy`kDY^dEB@C=i)&TP1ES6$Ffb(d&L$w8>O)l}e z*a`K?^>ZcNlbc2Oj2R7tWY^#Ty*NP-oGa)bkeD461h$h3W~|d5n1)l!7kp*PF2ZWR z926wQ>E?J!0Sf!&r+tjx-DeuYiI3bob#|ngmmu+$MH57}A~GQG=y#|(qTg9L-88Lf z0|aS^{oM`=SlH%U^kyEzHU% zKx<|ggpCsJND=KB+@XP-_~JlxiRXA%+g~c5AA*!pyVXs6QUwfN`=<%?PoYT3xCC-- zYe6%mq-VxrZ17(dOwrhC)%os@-hYbv`L71pxr1}BUOssAUqzMQ0o|ZbyPOE=Jvl-j@UY5h{b*^Sft28zaV{MH#)Pr@rN#)cR9=+nC&)0UkCBtnt=e3e6crIr0H!5)p%8Jz1Xpubkn z?p};lB)T4Q-(zF-F`qt$m=mYpK6qjJp;#n(^nTI(r0y{~H5^}k_VTo-=HAz#sL(B| z+utNBBl634JG!T35x`JVr`|+?j_c=`haH2%o5V?Jw`eFBn_t_)Sp=u^_BAZOPc-vSI-{`@Y#CSdiJ0_R2<)+TSNriqY0?WG=IR?ghy0>lTX zJ!V^F+4y-l)9X^etKBE=*yd{hjXiDO+6jb_T`!2@+gTCI(?50^>s@x1g8x(o)L*KM zKbDHkMpN^Ba$FF_9yYaX|KuTS+bWqJnB9XrT#gTW?(+BsyVP`kP9Cy`%h3imY&oEZ zGow5^4dzcQ78jRf+2IIs$h@;z4)&0;xoehUuNBiQ-!nzF-UBeqSgoQhWvRD8$-4-y zU%>bA_!}iR#`&W;#l5w>kz=gJ-#9dx%TivyfWNYHk@h(fKX+CD_(Nn@#m3ybzfeFi z5T6}}z9nLTE|h~<|Cm3{ve$p*+=<^nx+RnNykprBso^WCNh#ppxn_4_b>hoYxhxO@ zV$CiztLJm3dYOmZ>vq7Q?@7T}cyzH}eh!MJ-ZdX|&|))k4J~KF&1Du3pB;i%gYxu~ z)>297Ct2WCuP%$r;Stgx#bXc<#kA*{srE}!7f;u|Wyc{h=FT;dR^P&HDCd*8wz?@f zf?H@zwW+Jp(`f&iPM712I1W7Ekj|3en>gE&&vedzFWftk9BQ8Wn$9l*V<+I^ndxXRT()Qo0zOu0)4Y(z60^j|8+6V3Z@V5Z5}w9mMV zJwLR3A0DsIl8i*p9ei}Gi|^Zq7qf3e(V{FZkO%bRi>mRItBSZ_P&#a|CFU7c6>wI1JL>{uhR9^ejB)c5j4d{Tw;8X6 z8jQ`mB^WxMTc`S`%*+x8D&8PkK5@Ez^JF0Lbj;X$*={^-IVA^UJ>)3dnqQ>OM&Qe$ z!NLGA`zOhpJ_Kvo7$UiBeJUq^S`*b`@OW%@`y(1t1W&5=inp|~PP+}=|9o0Id{C>~ zl4%jMl&T(VLl?swWS*zH0&^bkQI5`XDzl%MCy!rq8d3o3(vum6HChgK%GS`iaJzJV z13AaGxH4yqwgePvR(S&Foq}-2VS8bcUZ!)CZk*ikY%NvsFx@{dQ`wv;HlC%ML?ct8 zT~FOH!XNenrJV{Uys3CC13k)LJ5!^K-#d2J9lAgAQ7y$xuJyiOeyFUpjMN|!>D=<~ znBi2DqWEBv37Bp`OQF?NvgSO;=TB$Fz~oPG4Mh_9B|vt3y-pXlAg=mBkz;Ap^5!<| zv{3u^;BaB*xKK3#a?jc zS;`E}!3O(2LkWOn-paoB7p~0usjO(TWp-VZy`yezYZ>7k7)wB1b>t1c2nXZRB8Ff} zrpS0RL%HrXO=4HbD01_VWHEYmiz|BmB-{|tla&qdXj-?gcdTv3IS|eNEXU8j=yI*e zpRW(VlRviuTbfbh)J~z*Lv#9Up+9w#*x|I7-NHeAwh|%+BFZjLSQmTdonZP6pKy+K z&g{a3(!6A`70HW_b{MAwaxI0if2OMAZ+iPrM6UpyUfMk%9>ApCFV;LKiBy{O7FT?| zl<4=_G}PD;Ayc*~KVL)9f4y5@Lo5AMxOoQol^bG9i~m>+oU*^K$#NIowAI%hm(64M5n*xBGx_ULbq<~WXJM2V%$~etJ;*1|f zYPfP*dBwl5&Ug^R62CG6eQQ8cwnMabSNECYH@P{aMgEfSQv=lFcoQi{H7w4hY2Ju;8#Q;NDiJ8I^P>+DSC8#)3N+5#-&!5660&5ITC#p>?Iy~ zOPf*CM4SgWMqW<;z}{mG-8MzGl;Hc*X%8j&{^laKPVAnyZwK;^CEG(lkLyvdfHu;( ze@NMg5jU6(+Bir8$!Z2NhH@t@lXimG#E1k`N9mF80DHFtSChDT3Zn_RlXE$K0uCkZ zXS;qtH4cM_OA|@yp26lOc=;d*GnS+wD5uZcxTyje4%O18O{_sn5s(s>I66Nj_3GU> z^Nul0XNL@!+svRWHj-RqM*TO~z|{hA`{}v*8bMp{UDd|Tudt3e?(l{I;cD1Lo5i zv$7--&UlvdhEa=unn4Zg!adQxggjuIAh+4KmLPG4vLreuqZ0R7S^x!4&{fZ6Uuw8!Emibw;2#8~O^?-85_n;!1~|5-l;b7-g$gx{l_EXW%6mEx3HIkP7sb|M5F8{+PTCL~^E47!Wk zA5Uw#?QR40`l1m5dTBJ%XB5#>kxR|>wfBzLVjZ9}n3g=TTOnS+C(%fN&e@uVf8~`c zuBPKjc)>;8=G#zPvY%5;YT?VvUVhq~X>?x9<{TB^g4v_HOt|kOFt15zkWyH$Y|^`u}i9NhCkv`XE;sv(U{_s`^dl4RLSt@cap8B(vaH%gk*f$6sOGoO%r3QeT%>cbgf323p4~XOk2D_qkBQSAgH&T`=e$ znUn)7^|6xMPvDm>_LGcSYx$)dAHgLPsol``Wdmr@s|(m4XTcr1 zfUj3XHAhy(TTstWG^U>+hE{w`vp(eK#)i>WjJI7YX zJViYo@}5-Z*@G5{8QRtj(gtfo(uRC1PR(h}sNU{K1YzEC@T82i3^xKjB3ohK!;E_N zPlCRoP_Nk$jn9UQL_0+*U4UI4C7KIEC+^EP0T?DorRW~>tFn3r+61q`44id(iw=jYrnx-ox_ot zGvHaTk@z<>^;8sZ`k-`#KN*@ko7bZJ9Du(vpj=dFz%!v~D=^S4eHh)YTTwMgIi7R1yM1 z-DaqE4$r!n2#)NJ3s=DD>?rcfXmr-?EsTibB_6)an)hDJeN#n`%HIh>W0o3?CnrN@ zPGdO-HYTr5jxggCC9bUlft5vl$d{9q=>dI^8DiIV1TaApVV$AKZ!w_n`x>mKOZijQ zVQIP9g28@TTQW{M5sHW&YUWA?&%IG0hkQc-pl_5zuY-uxb$2da<{1leS5jq&7YuMD~Sw*D877zbwiM+5CdQo-DlyY<*VExG`k<7hy+{uqNA9_EvMm9D?32d zJz7NHz#I*<;wF`(8T?RQTam8(HjrFi$gE@rQk6Kq*BLKZ!n&LN?kCZ2WRVdzR#_}_ z_*a-HMi@FU$G6w=8%izvTkjQph40!r?4?gr#aJs)5^QkfAzYO$2Q|cV7usYJJiT;E zWPSdWRIMrwdOSQ#6m78BC5sm02x6$ZzSUYzN2{xL(YY$YDI}&`cvb#b};{*TP zUB#J&`lP8N25SwgEeH)%@Uz{7dq)=A0@eGMhV+X_H>8Sw+> z7nukQigE*TX5#|MUB)dJNi^d`ayxF(uEY)f`!qZzTDwwUdk@@Ksbbx34z2q1&H-Kg zYXIZ+7GiEN9C~3U?u|UeF+`A%bt41H*@a_f?kq0M6YA8*bbEJM42^_M%TCHJqF&Me zNM#uT2)-V-PN~&7PKlc6DmGYVO=NP9Ehz>)nx2aSN^Pf)mrWo+WxGc42dD9kpY_AR zwD=`z_~~lI)cRtOvYBZJ{Ck>;2jd`(1B}l+CsFpI)%@`TRW-Zo(^9RRmB>FcK;jK# zl$?XL`UF?U{NmqI?y-x7NdGMU7hp$bHZO<_Lv42TLBTXZ3LtZQf?L* z=8vjH>Z5sDoS09Qm9f+HO{xoC(O?k>;Nk3XSBo8Q_A0yd@5>U zV0I2FKJ}a(mZi_9Qmqr)71z0oT6?^RF5$DBvvLXF9UF zX1h+Ln7pt%(I4j{xG-N7I4_Fm$d*AO(a7o}5IAP0-io+e63?ss1A83zvf2Aa@-b=f z3ZAyw;8D0`G`NcBfrUfIdD~fr%H|lkEU*7QU(BX5WtPJ&yA?!}Mbnmo6mZ_u&iKT7 zSh6u5(6pozGO&1kWIy?*>ZaW*DO!>#kmqIVTNxI;IaZle&|AuobWsaRp>VFkiV+#< zf^rIzh8DpW>U&@gL;np!p0~=7|2-me)w%;1^3|d9|7OTDK{S3Ln2&jf52nxGs`?Vu z1OJy*V*ZbIV3l~a?;l~$zdRWW{0Hps`vT@d<}{B`DuJ5roM`WI2RpR|m`MBnn6wth zLl5U;O4>b~&yX6btR4Z7in37x@|6yNAGfB93xD8A<7I&!rIZfJ5xh{ya>z$P!4F@9}&ksOnY>F+QX>7hS zrz;C!ahj>0=huB*{8Ml5Iy)oFI3BwUM}TNx7AZ0Y^}WEVK3Yf6CW^W0fAi+`XwsB= zxK*Z=LbUAWAX&@Jgw)p%;)=(6=w)POL=}hr2Wj3`1ts6tM{*II&}ijt7w#Ri8BLe| zgr$=d<>bR)$PQ*M=vSd(Rz3i0S8Qbiu!r%Bvz)SMsR+FR191=-#B3mBF~%;NwGRzV z_@U+BTO0L%|5^r-ZnuI5o(5Hy$*Z*=_6SLdzv3kbk|zt!)m@~0lzwHzRF?U0lnPe~ z{3?$mx$OBfr5pQ8dg|{MAM^rkTKcD`#;@W&q3?2qg_5VP?soaLE2Qf(XU8C=+X9nwc@8jQ+!Iw4_ zUlr;#q!(ADeB6%`^>u290^=8JR~3iRKVz+Hh2akm#t`mY@5z2!xp1RzcQ>tV6CP;m zJwa}KTqOG5tT|z%aN05qb$uf53kVBuHaXSIkTy|Y)~6FQ0|OrI`NoJT0^16$cu*^| zl`xv6ikLZil6gk$c>-I}5{pd?7l=;;5xYu;lleY;G?kxY{roERyb zVQlj%QH1j43vRY7*tWt(Uc-ElcFN%{Fcq`&ac)sTR|b&GkU;=TF>4a-)`|B98f^4bdh_JBM!4JL%q~ z4unPeFH=4uGd7;7s{%05ZTL5|U6MQ(;77lgWmikEqae$NJP@T&@U4jE%t0NV&jZTd z2tT$uC3W6kjeyUs+XQb>4z2c%jToGJo)C$D=qvY0-in6cFO|X?N<^|!g;aM&m{tem zT%)cDmwEzAU|pJ5Th=!jz8OtB4xjdSC9J_mgB!Nu3rHR?00 zR4w#0mFW4567()3@BtmZmSF}btNL&BPs%3O=1KfVe-0(DY0meXCD;-r^FD-mn>%Ta$6G;r?!5{U)0Nyl<_Po#?ylHr_)25Ma$Vt^wo9ny=BkY84$@# zrGP-NFw>r?@hG>^*f>`;ja0PIt39@sa-%#Th>B`fNDhtK^R{Mgrs4OMiJ0 z`fAtl{An;A_2w3|GEV_!t`Y_{dCUh`{o>2;dpA-Q<`c*{4{P>z+XObM_-@}AcEeitK6}&*D}PI_-lIm zs@~y1^X=tC2c+6m=_pU_7N_x+2O{+F@Hz!=7k)iz zNK)1uiS6|~Nbd`2rK@=%%48b7JKA6I!7zYTRq8$34#9YH1xOBLUrX}gfTB^6lJQc$ zNf4Vbx*uwfx^5-PsCqV*k>5OGr+^o^_ql(liyqRz07O~);*He zzLFew6rLCyq5ernMZmgBS2)#nt8};ez4K55wO%iNjh~K}RR6a~uOxZ&BNW>Vxch%B z{|<~LH;qH9GZ$$MD?pMhib8I6^-aGtN6b)96UBtD093y`&QVjUOe*zjDuDVW2tbI( zh6+hFzRZXT5<|FiFmtS3pYnifCWPT!WuWEQ{3gBcO27%Qh1-`aaKg>ak0+%fs@CTR z$I{6n95HhjmW21=kdG&SBF7Ci+4EkdN?GUZ*i&kw*=C>sE9Og%gm}G1c#Ggm&egIY zfLRs>Z$s_Q3w0Xx_gfUAD95u~V0Yh4@o8;~!&zYTihfF$q_9b8^sE9CVr+w-JMp@* z#_oh2CR`yVBWnbnk3$t%6K-f_*9k|GG|+|iy~OLeUH6(0|N;}2pq%x(aDe-J-JzBT}o!U%VwwFDKUfug|NWHHAtV%~5u4=lrI z>Y>|TbkO^WK!E`)sE0v-_rCv^@cD~6-LD&9959*gi#pxu1z5v{KdS(r)a&o_fc`E| z;`O)wZl&Z37$JV)-&2r0SR3^#wx2ue@?W!tKUkVXh#S=t2A%6YV4FvrnCEJLZ~xdo z1kHeR3fSuhL`t^nu__i1r8S5Z8bUe~MrOGQm(dq6HYrZ}syREG+t zUE@T7g~K)ASN^{5t2r&Frdcnyoch9D)_8rpd_TxQCHmI;h3&}Y{YP|O6*yUOg39iE z-j>{sP`dR{s4CWp33l>L&&IKw+11fY5lQN!>54A0e4O;7Qr>s-%XF>9}G2{cQ{Jb3rc2WV`UE4c*x(w`9cq|{xi3_rkjLku4cCAI%iMQc63#|_lZ?DvFA76 z4}%7gaQlFHCxrAh3Y9l04Y3YUu7V{&2?Ybc^v0)9!E_#Gov_a zhwMPPK$QKg{JAK6A?`r>T%a##qohy0`Q6sI9`rd}V+iZ}&0-caIjTmT&P}#Qh@oRL z%3^;R0fmS!sx}zm!cPipf38vFkI5@POmG<$ho$71VQ^@z;In0VD1JQH0NtS9Kweh@ zGf5%IJj92`RGa6%zmPfQlCrg&N#FJb^LW?Fy6Us=*e{iW!`&HH^jo&J{OmvB>@cYm z$jw{>pmJN_^fCf%0dbt+-~hnp_A|adWY0pyUIN3I9Hvf(-Jdq5P!B}22N!EVHgGIq zVICQxfB|I<(=}=*qfC-I5}6)WpNjPl4qSJ>cZ#-KIuWuoJO$cU;yuYRvAhMiI=(3s zror}CpQyB9!pch@E$t2isj-T$TBth8dcQEO zhy78pm%mR-l@Xe>pdzrB{%(tCsJw&EJsHge^EF{#n6G>7Bd?^C=$qkrx?<2NZam$B zh*j+Jn9}mczmnE1WrlrJu zrkjwR`HLB^Qy2ppz#q|9&{NXLr`Dd5T(&&`=%7WCXeV-^cpeI)7lS;TnB&DUUaxCd z0YMg?#{;K)#$*pD;A>04k8-+c@)%APW!?12>61CxYER6YtUm5=z@&q5p#mK%b|ahr z3irHIcENvjMry_lZ@1|@OJ0%;JK@^V4}tq?12)2ZQj~TCz`Lem?jZu{{3h8B{)q_H z$+(fY&Fwm}iPFA#+&6`Q&si|YsOisEwd6^hLdj~@o5`1wT8hW<5JMsVO%mLIQkOXh z4$Zhl|D}SVCG=yT6SX1%-8+JLt3VS`kzdl+oGE=%^0uSUw+s|>BtH?9R{&xj&MLM* zTa02+Bf7=taMZY7$;2~Qx>>GMev77iYNJ>yg&JI7&#+HtU4DZDp(65#Fzx{m`rt6) zxn*3SCXOjAEZb#nmo=~k81OD=d*4&2mvxVKo5<{ZbYFs1Hq*2;-46&i(6ymFUSZU1ZshI#;iiw^)ZhXx|0t!dus-rh^5bCm10yb5Q0nz&vRwU(droI~AO zn4L^tG9=kEFvtmcBLJ&iykLS6|A|6_R2Pho`hZ>wk2qHu#oe6>UuO#^`ezR~jm&K4 zhEPEeEoB-42pp8|cVi0`KVvl`QtvOWDXuTe!@DT$9*b=jk=(5vqbJIN z{hPma6nEFk1|NZG*=RiCU`eUKvLOr6U*A?UL}lYo&lyB$HaHD1)=P9uOcveaEe%7; z$>)+LB7srP&4{pQ3*w&cZf&&Hu&O(5@#jX^V7^vLs&CPGrcYQvQh$r0{D4M;oeH7u z`Lvtstwrj_N=YrRAtf&}Yj+-Qc*?wLc8N8%G?U)0)Heyj>b&6+cTa% z@Rv$!`X&Xq+Zu=tnKE;J(Y+jI&eXD6eEP$WQx2z z#r0fZay}6on zz7BX!mj=<*@%u+-y>QVBOUUzK8ZwW)8GK$I&rO<@^o`9f0Z|rd6KJqF za&iS~9DFSgedlmV^mxCj_bB-a=od&Ad0wzi{Vsx8j@PfV!j^S5K+fD75e9Ct_7_X6 zOKc-{etG%S_q!e&rLH5^KT|#Pzc?9#0xDPbaQUB+LB`mnE>L0rT|jLq0$HNpLN;iO z#r}#or4;ucXX2YhZMXVCG^fEo&cv(!9-7g05+pc9=JVD~xg{+{n8?RJktpD86}u7~ zH$3Ju4`vAK+*~L=FHcN;cl4GXnkU1(sbp-GIGhk9kgSsP?8n`$3025tSG^IC77GW9 zEP7E*{d}34OSe$&GwrJDlMB4N4_F9j2@1IV%X5+!yc2>ARLehm%AL;}CB~L0Q}G_K z>e-vFI1M4(I!mh}3w<0Shb+IuC~VojfD4MMf~_U2^)WA;_QUuTBxpWUy@r$m}7r8yhHfjaGG5R8~?L<8=8wqbMu|Vy7ff_uVXUV*u zfz;g=sk%L|a4}MqS#q^<>>4k6^I;H}^QJRu1^$Y(Zq31=m+k}MOlwbv8&knBDM?8t z1iF9u_0CH?@>890_{-k@T17Au7yKri0jAU^sMSuRW}0>>q%X{k*nQ~0K(&_fVq2Sz z35eb2IRSFTP;s`X^*t~12&A!Uh}|nibQ{IeRU}UJ-PV^(gBIAcoxMre9;6ds%7QA> z;qTH=F>`x!O7CSx{wt~lri7nGIRS1U=7DrUquEbxPfn$#n zjK#-cUi`lO2*^{q(yV-n)#*v_^HC6wq|yxj{%rLrFzJ9*K5$C;#5WJX11(CcpVhzu z=>J`<|DzlDyK?{Ug$IrOr*hZcRiIL+%sKkUalWYQvnO!9pa72h4i1_ryZLx!87SSI z{wdwJV~TLjf*f+ThpqW%DT@dE0f4aaUOXt+nC>Lm>Iju-1Z(CAO>!&i*nlq92gOb^ zNp7#R{&=fhoLRK^Y^~owRUrs`0*?E*7r(1L32+1Xx5{e+KIndB2(D5a+Ohy}W)2SI zS$qq|-B0;t75F#h&qtKc`DSGgoQ^4kS_U=-b<6ko1s*a)fU=)G|1g!(jdh7!%MYQ6Yv(cPlz{Z6zHF-z2gQenM;Cbw|tnZF(SDbDbHe(TBFPN{ciYb@NF-ur6=m`uSA6MwgE|*L0L7~1| z?-ck^*Wny3-Ejtn1(*a@T{e0I9kdK9o2(4Vrh^#5G0+8klPhSfAA&awt8|0Z+(GNI z*?lt56Qc^VRU*&{6&LaxEv#tWLMCi^EILrS8#VINYt2)Asxx8LP{o>bVHrX2r3$|C z+)R{ig#_AmFtbWt8~=#Tt(}(ia^K#YRZtbW!Rc(@z=RK}>s+ARPgh4%iE* zEayvuF^V=RY~Z;xh$&h8w_JI0@zYvf&g%!uL%a)8zMc$pP(ZfAmn1ZQqJenSk5MAC zf90i@UDj35x_s}?0fYTR)5>&$|&T+wf$C2quzK z2K36Lp^Sd-xr2;}h{krsPQQr1RPL9dSATM*QBJ=Obu1i(()}lhhA(Pf%3aEA}TL1@8HCF&$`exGEuy^#|&1VkCHeo z64fV7NTREH@>f$LJzml25lnP|OmmdCWikzwzWPz@`Y9}fu!|?2`5ibC{cei1z!ws5 zH)6H=YWdl$N(Y9V1blj@jJX$?$IGPXp@n^ihV;`#2Ej-p$*napK;y60YkTonXbiN# zK#UzZNT<6Cl0THE;qL9_L2u?{yZE2^O&n~-HbVfS440=_wdVdQ4AljU`mj4lH%26# zp!A)#dB>k!+5`u3nT1}#su&S8pco1gc?Wad6~`y4Jq79mb+56SR(bMFH95y^=@IIq z@%zw^7H|~_t|4lR^n3Hkq^o&q_j0mtOyv%MJQ@Vw;3C1UG7Yw-zweW18~1`he|Mm6 z8qbm{<=3bXS7j4URtVPAgVd+~z_RKzFY>&{GzyEJLWr$g{qym6Fzw%2JtyKW!RNw- z0o2_Rr!R$T93;u3a+gmIPH1QUCl2ZGiI6@ICg~@BRGz^8bPVTAu|a{=lss97Rrw1b z{88Yv=!i0soz(rF)-l2wrFE6XJBLK~e{gydL%f+HMvo1UbB_6v{rZ_=3YaQv;p5>4 z1!1zEG_{7G^goSOTw-0R1lfQUZ))yvMA2d-{7q-zxL;2D6(=^hl|y%}EQ|cOBmQ&h zt_;jDK<~>s4mmR^TG=Io{lo4W48|KAZ`*XTrc=62v^+eHtZWj0&n!-(U+zJTtnINq%c-ai z-T$6bWs{25F$!}y+&3R?NgZKsfNIeK>uzCv-gP9^_l162qn?Zm=!O#M!ioi$h)Wvq z>fv@PZa|-Oz;uVc;wM%C@3*pyrlNx!wleQ0;c&h!G=Y{5*08gw;nNJz7(b zDZ&Or6ywdL(VXlJ6{9d4%`2~0aysWZyzE#`SRB!eTG1{eg8XeS|Geu^iNn1S5|}`kBnfk+p{rwF zxkCYdu1JGw?1F^wGoqg$mhyQZ*JVhBsOrN(Bb?bH6R+->i#TZKrHJfT_?g2UrA|W^ z16|lsWDBCjHdyZiz+y|ZcaLR1^IJ(A#uh)v+#!1YIyZWHwg>On1!b#|#H+c8hu5V< zjFSY~hu^Y74%pfSXNNcWJRhv?E+V5CKp(wKIx2XBCrft<56_31Y?bRMx_)F^yUbcE z(hZ-9c0)npyzU{xB_)rrM6KJ0b+aZ|mGdL^UNcPIZ?BV2XWCr$#ovIhcJRq&PrB;* zHms>QT!H3^3Z)9-lyc`zA>OFfei=wPMRTNl?E@QX7d26zzZ#^U^5BxhMN@XYRYZPG zdS?=94h%OZ0}GOvIfII}kn&_&i)E$e5KsjNw*UVKw^9<*t|`-$`F&TxQD1Ysng&|_ zkLJKZ2ncS%PmV2{gOA*pK6v#1YxtyQ`(5B~x9jEJf13UCWZnk}xBn7g%X(ZZLCzD(ki;P#F^ZAum~{9ND8qIU z(Ig*va#nwz9K`f&GCuV5Yul>Gd?){xUj3XciQA)=tqIAGN7&yMPK7=({)%O=P?;&jXkVm967xX@4Oo^oOL2o|~0le&s;U$WJbi_S7#M4dSbV!>824TV$ch1$fjUfrj36 zrCqi(w^f(3IRcRP2iP0&_J;*7X=yj9*>2M=PR$2HH!QdnV@E(>Q(0NGsw#eml9IU; zkLq&iGQX^Hae8=rM;Up00WW00sS0?9wf#yKcbt>BI)W9FZ&=-}uUXXy+zXTH(^!H1SZNSN zFB@gg&xjpqu|nG%@8AXmPMkG{>#|o6|6h)Dm8oF?BuG)rG3|A>H2~->`*@x?Mim_sfqN$$WM#9WKR) z0KAs2dTLuyU3CdP<))>1H^gj%TT@^*)}?$STHNu&O}*}M@acY=qHA`PUW>)%y7lXu z)Yz6vled7RKa@`qvUn@$^6J8UOLHCYVYoymM0?k>b*NsE|BsUwhUE>eFcK%)412X)l ze5H}ZMdd9IjKM+J))v70d2gBgT)W2q$mTQJ{{Zjxxh&)v#U4bPa$r{F+s&T?aLm7P z%YLQbQ}eFB8z?8(N^AmpYfqJszQE^k)0-+o`Wn>_h{M*TGl)m#Yc+@7S&*{ zQGC(516(s((mZmxj4y7WW$feEYtf%ykUtcnnqcXSF{-&F4w&3-@g^KC?h5IyV&$+d zEFnWcg<%)E4F7#Epo32IN^ls*(q81d3=C74+w_ZWbkEu20o7k|KIs=E)> z?aZ8o48+-lsnAdeIHO(7FiMpk`q$na=>2|Qq;vN{+d8BGv)=yM5SG3Jx>tO4)8x?x zwsS%Vl!4>rfERlPD^R~s3%KmrSE^jM*7{#)n%CZ4k!A$Xvc2H^3C@<7dK_F5F>y%I zp3%%ajyJuO)~7@c1~=GcfeY3RqVyM@ybj;PQgn2&$hT5RQQ%(~0U^Qi)wyNulhNTX zZs{<-mds`mj}L3#3J`D7=PB~EaOpE&$ur#5;nfDfW6QZ;6zN+YBee=~mX-y}dX7VVndp9YpaZgW*nL znoq^$IO@ad6`5?NAgr~E;A^3~A5*&2kL!g;DibB8l)*x1Wz&e1>wZL0OLQCMtOG6C zEapv;A{#!ToTFXS=?1(AsOlcW16c8+LCh7Ysh-192Wb;N6T^?c82BRC`zv`8yqI+;=w3_+>(TU_5=?RIiy}-4Orp3KmnL_amUO&HNqX71! z4Ju&~5UGGyeJXEi{no+0g3G>76^=B3OiH0LQ_VA#(VSIftmlWXM+k|_ONyD1qC2BH zr@a^tT9-+2ij0a! z$QC(K8!E}p5>eXlA3`_G4e`Edw;yjZrKyLB2}0#a0k}%Nc`w}^_ub)c3U5W|M=Guc ze#j1-&^HcK_h1Z?pkeA`0t~b?z7Cf>hb}?>9t5Yz7-3NsyLg8KBw5`Y-HloA?a#`U z{fblQ15>3IIaxna1XL8DM+wBp&DgEB1a{v`4|gdDOf0-KgbPo-j_Ns$B0ac4M}`p?R?MnorD zXr6XQhZe)3kI7wlUvG?tpOstUA-=(98xe}{dRr3pVcscl$Jg>Iwn*(D{4?gQbfzla z5+gZToSk?)mHpe2I%<);Yh`<&57L>kw-u4+ik>HaMaulZW)ZGA zJCHMp{84gEq^tEht?m5hsbH+(LZ6XXgNRQdg+h6RP$KR~c%fx(nxAQiAD1!~f*B

U$o<~1}`8roA7>QyDiFq6bG;4PhXcg zAM;%FMnO*jN6&lkiJnx~!(O+@leoAd`U83W7cd){wx+xi2>?BcreEOa|56D!FMm2m z@6qf_;x#eGUIboj9p3VEj@z+S`o^}#pTh+@#zpG;Kxco_kAqi-wIUY|mnO7c!q_PA z;JwfYxJba0)f#`%aXs7qwN$!u$x3(2b@MDXitX@iX6zX(uiBnNG_Q@YnXXLlALuia zl|mK5vlMO|s^tB3QB}xoVwHY49ugaWqFdo1G{`H{o(!$oDupUzp85R(;odF$g&o;Ve_avr!{$B z+hx{}nMvsR47eS9Ebj6Jf@N7nCw+5G#&fm$M;>*EzMrb33Jf1dh4Z~{$&8636jcch zB$0DXPM>>fc@7z}1avF_i7&c&4>8e_l@ z>EM0N^4WF3MHU}t-F}H(b~LOd;w4`Tp)HXRI5JB=Zl< zCT4ne%?0L2uM`7K97=?$I7zTmG*?!4ut6(8bT`A;$yd>vF$Is5QMfW-n1y^DbGH0# zhSRyCof*?`#yV7Mnd_ejm@&!Xn1lL(7|*RIup0nl*o)+;Y}Nh{X&QVNS$ z;*j{heF#|X0am9+;;PsvrLL1C%gi?9u6anuaAS=etL0J_v;+c?TTXLaGT{$F$FRNh zQWvngZ>s+K%#Wqe@gUtfeNSV(V!uEwB{@u&W|h2- z_zD4~cf2)=b8$;}F3@!H-h?k7trhJK3|O|dyYpEpB1o;E*@YF0y!*CC0-sHl41LFf;1e;v zY&6Aid2uG+Jr?EL%S{f_drP#_n2Qn;RU$mnvJ0+Nb3@e+7k*tzQ1UeTT_z^oh?Kcq z^~~b!gJAQRb8Yh0vE2ze3z&O*cXkC?n60i1?|(9XNNg$$P*_M8UF&aJBa@#=z6*49 zCpX>*2m`IRku(sQ1#*DrAYdLm(-&&&w_V-+kIcskj_m-Vi~6si(BTU2H2N{Y*Ty@S z1fD#Zp^H{6{)2CfbltWsLmFdCR@MZHcqqi0oj@Luf2g^@v45$9aW9UxL6zixPC79q zgM+?b=CDAok3OO&WY7T-vTD=x#z9B@pFIu>jXn!9WiwuDfiEz)s=3E9=Cr5AOZfAc z0Fdh~#en=v?13Q^~Yn+BSuN$X4D`U zEOrMGF^4o0yEz9QhXvu;5v~oCwHA?nBLeqNf^~B?StStH{oF#|W3VD|avJrjJaytV zXiB<>299^o>$3FO6?A~BSQ^qf5^x4A1x=dz@aiL@Cf-i8HzcVxT0St%z+x7M6OsoU zh-#mA;!Qar82ThAY6wk4z?Hst8Mf_w(Y~mPMh2cW?22lh<5`x-#m6%<&rMqA-jSV! z*OhgS@skr+@bsGZ(3z^R)*`qYRNaXc|dF$&CgJs5Xn<`+ibu>Psa2;1u~jGFX# z5!3(Cjjc!?*P_Z|LX~lS6t4@fppWnWU4Rz+PXRjT>d0p(4u&xng&spdMgJdP?V9ud z=Fr~_{)43pzXB}22H5X;g^yykVO{%O@-p8SetI#a-;`U^c}+IS^D-7l8`By{^}Ebu zARt;}Qg|p;R5Bdk-~cU+0>k72Z(`+ydqppW-ct%T_(lz)N@UDkf&ummcXbcCOfK7) z%hZ!Ed6mB?D=%|M*rvWYs7m9a>q>!leK6ifv1vxsNq?V9tWh8Lm6A~d)B}Q;IGoHg zN7AgL+2A5tCLnez(sf!}9?dG&C<#b|ngXk;j$O`nKt#WUeUp_q3_<~mjgzJ14*I_Y zxg=Z1JiJeB8tmTU`DY#D_rx<=UjZXtlyM1K;);#iLte_tiXf&|rC* zbfjWQfuR5=fM>9%#18HINiESved0~5ITu2z3$rLY^E@Nt(NZjs>clE%j#VX2L`!OY zjaQwEz(7<|h@L=yeIHD3-t3^5;JZ2r%p2T3kU6N01K8#K{%~ufbXe28J(%+bo}DG3 z+3wz;Os{x=cxn|+Mn*9C)H|~>kYPm{XM_ zFTYf^Bm%+^W2eT9pSlQ|9H*Dg^H>e9m?oBw;%kda#AVSf-&fVJ>+5U=kPF1*T>afU z144%BWdCtU=-L6odX`#hl>72EeqvfRO`%Qi@uae z*9=@qKqYZesKKI`(VRk|U!_4$ETvWpEdpQCnRt=oJdnbuEcS9cezGk)b6EN^_9Qx| z?)v(V?T3}S*~0Oqayy@MNe%$OXXBNa0)xJ|ZHHhDJL9Vk5)cIy4iAwm!gQ1h2!Qx0*M6b*5iD&;16bb=PU7d>Qi-f zJKzT$Ga_Akr2s`Ge{{5?#UNqyWPn(lR0obZZ`s@ zr+gjP7m~V$RKf7oWqpNSs$+-lytZ#wm`v1EBH6XFiVv$L^Hism4%|E53aqlK?e*KT zkjGs!8+`(`tMhQ`AXMD7<>#5@4>2P(4u`-yi<`3~@5<0D7yQVZa1=6HllvvQ{-hW$ zqn?m>_xdoca>|eUhE($b^f?V0^e5M3;;S0mP<2CFi9Y8Zo9uo3SohL#NT%<0q#%OW zysbLj>7xBkBX*I~=-rz=!)uQPX?!lLsJ>@N^5x@-*3MDhNA2UY?*OvOV9smeaK_=` z1Q7MAw73N|%)_6nDi0M`$;I(VxwVbzvC&W`JjkV4=|}{Kxa5P5u$^n8g~+x{SSVy8{ZVQ)B9b8GnMMESsdfcg2;NsS}J# z1fkKC0uM>z%h7`b zMWW5=4#UHEXEi78=`1!E;I|6Q16@POy#m5-6m;s`liEeeOThE<@;Ht7vA>%%G(Y?l|ajVF!fu2MVy4%Tn z(#PcWOClS2^GLPNC>rO?PmL~xuf0m!hz)kPp%)i<%b$ufWnhg0>s;w}?!`yP5*|#l z!*4ETMR#j^FP;RhItJk}cY7KTl-0FYBhsrRakH&ckv@n&DMn&26w!(r37qLb`xn-X zwNED5%M(+I!O_fxf%MTx_=C{+ReKlFrgE=l8|nhqHvvxPxm2&UiW6J%fS zw*Z%HfTk7Ar2V*9xbNT+^6N1vO2Dk}w!)L0`sC>&HDMf2aZCaILu%}+rQyS3bCeVc zR;)PPKZK8Ij2&UX>^V+Vs=E`v!kzE%h7VD$1C7}I$2-$eQTM^Ju*SVq)M3jlr55fQ za_^56GikCg=H5X4R_+K!-5XCApR6D{E-+s=%^wVgwSo%GciOE%mi8f!>Lgg_w@5TT zhYygU7~&1&b}MTl=r>&4USL+FzloR;&Sg)a^K14DHDv7%2zy`@A|>r4_AlL-Z^eBl ziQ(WL0B5d^LtglMBaS;diVWqAt(13Q7(p5u_eIU8F%5oav7!vNv9~GLV`%DWkw%)UMu;eUs-?>jC1tO zk#yrU0hR5;V_#F;Y-G!q$s9!VmzdG+SdKPHW4L$NeX7K+oIDY5d;XGQor?I@1)TP= zs82y8qvf7H@vAYb*8>i3c0JaRzA6*0jwx{TDV$R5E*2~fR}`_2Kk}6LLUX49>ln<- zCW2H}6-3j~Lse%o&+G#sS_AhlMq9)v!e0@}f*z>&0;jU#`W$6=fU$k+vtx0?0dTN}9x41(2E#MIF?O{QA4ikNog^(DO&pmbDOM%6C|CFlEz zUHZ8-)ywudO_`KAmvcZ6tL9V(@11$p+w`JEC{OimqQ6yh01k7-IW6Hi#EiKQtu4Aj zCT1xB1kyh2K_c;-nZ~?aynkI-nAWdki)&u`Rs-THWsK#pCF!1GOV5IKApB%o0M25@ zTOy{V!5J7bM(K4#u`Y{LA+Eo>WSE0cs2VA( z=c-|xeCD>kY4PK5)J0+XULyxEb-EQOw!W7RK>4}j!!R~jM zgt^n6uKF`Az(zyN4ju!Nj?sk`JgD#HwU+fwftu-B0ghJ0&LX%A|7ae^3_c}ZzSmME ziFA_7|NI$z{lfevTN?p_Go1g$(+~Z^)9q^UiD(_?Ip)Q^WLU7g8YcUZC+-2V0Bmf7fgwce_oHdU9osxLE?OH69na<9ewbAJ%<@KeFU$~s zZBjrxrw~2A<6TE{Nd)w$z%n-`h*BGG(FSbM2K&HRD6P9q5-V8Ee&57d9e4o5LaVp7 zvV5D?`CbtNs=yQRe%X+e(}xwg1=iFgm++#0V2wFY4J6OMpm7{bT;K)Ptjr`Vd%&=X zT9icO(xl0$#8J!x>k|=KVOl9kMk2M(X2BL%;7#+0!G~Ti`ZuuE2`5sbcHz`|-LqS& zYSsNN034aS3;@#!KnI*2asL#!Bh*BfD`K1XFC~G9<2#lbBjgTJ+9Fu_o;O1Bph1VIfQ7 z5GeCliBQQe(_)S>RtPmy|;8tWI0a=iXD|a!swXS>3c)>Eu|OFNEryYd)&A-7hl_yk56{X7AMRf+YA z)D8#XxZ_4{U7)|HosR5Z-n5>d)ozB}`mD08z>I1V6ts6FZJJ3A*Fkkb6>eviRmR*$ zsP~`|Z~)(pQEZZGPy;~ck7pzXN6J@J(vOZzO21#Wm>yz z1%TKaCi%cdgM{_X)#FL`Zj>b#_1pbP(vzpb*&wnFIe&JVsB$A?3&8+muaaD-@zi|aEhGvktOxYmM14y-+Y{Xe)8tVb68Om)_+|<^uJhR zhhH)H53!DcfF<*Fm#0GgHv<&b1DO}wR&6h}QH=>p>DaCVF7K1q*z*3!s)1TC4hUUz zxwrrK1CB^7iOZ-L`l>gq519uWtO{A0vZO{2ZxI-ltuB7)XB8Gv!x*eeGfOuv$h@p_ z4Xk6pX|ENLF6WfgiOy6wj^7TEfV!axNX3KZ=Ix5dR$ zTbq#q*gC(Pl`dphAJ>F_%(=|A6ts<3z-r;JgQ1bZZ#+{|QGs|{-r!Q#^Fo3-NEMUk ziUw{{xYHS7OgXc{(>DcNulYFd-}{e{?%@cwY27sjWut_7OrA|kiTpuSHh)cRKlNUS zTzzO!b@OY0%7{L}Z)Oxy>Z$n-$}c~ri=)-3w@gcoPg@SiACJV(Q6g)ud9PJ`Hx;EC zX>xI4$SGg`^fxQoY20ntGAEhqZDIr#;WL=|YYF_>WYqpjfm-2s;mQ^<*I6jnR7i?| z0d?!cWzQ7y7_GN3M|#4MA(_bstNn%;zM<6V`K$2qK1BynjI#SpLi!@Q!%;(=Dq%RTiiua{13&slUAnUwsU|;yP+DH9*dCQRLBFbdaorQUQJnN z-z|^aQ7x5%VSr|CwerHHN-$q=(FEgXZ0s>JYKMT)VbodVg)N5|o*OFoVyABXv@6mh z*{nW!Y*3-M&kNTJ^Bv%S6EfGyw7?Wt=_hUfkhh6W;qBWa}Sd#P!*7Vfb0BC%zTf&@CDytxsQk8S%- z#Ng5tP{AHP`qukr#U;?iji6r@oXJ>|)R1OJi^DCdLTYvEQGAlMO_sS0(4~sOjGhPT zLE&P&!{{KqpKe9tcju`!8^&VoN?Up0lzRpmNo;@2ehdHmG{zu?*X`LDw^zY_2|{Q0 z4PH%YTVh{k3wxT~3VWix8?>sXwTcQ+2_s!M{rGx})~OPSaaNDa_!(F*Tg$i?&s5#{ zfLLB<9UcT`y}<4A3*51HI&tXSd&^p4BEbA9H_rB%Cc+j=j_C3#YGx+XoZj(eM>})S zL4lZAmndDw#2*YpFyMX16-9bb4${eW41O`s(nfVx2wRf$f!wY<3Fbg*Bix1fT<_l3 zWYM0WB``!;fu$Q@kvAWU9HWL-Xa5|%{R{LMuzXP!%-ez-2H&e&JEp4Y_W1TBB1<+$ z9TH%JlkSF{K!;>M;#>veX52K%C14gAp@NO_Q$3r^aR>3Q_IlFFVYa^2T0G zd}hzPHiOiQMeiSEHi9)VA*us$YFYzlk9kec5J1rFlq{49TzYDIzL4d#M$t0uo`PLt z;^X+-kujB^Bpl&BcCvjhY?$hLv;A|UK2U{=esYp8#^o=Sn{*=y%|KD%I}+(19|W|T zp0n+6g(bK_nA>qtp7H<|j ztkZeJ{Kaun2~XBFZ}$6KDMZVjsB@CL0rni#SG3&NKQyEpNHLTHau~#VQTRK%=g~f1 z3`pBP?<(&CLR6Iey}3RQbj=3)K$n}CJkcnOT8zRlge+v=54{;Tc+gw2B8-|=7^PKb znEE9jRqnsv5Clq2&4)9;4gOS|osEJI_=#@1%@1DfxT=MuiHu?Uef!kP0lf)08B%eV z;Zv&D^uX*|)mew93a})CiohKD!EFyM>-AcIr%r`pkx(KybO{IZe z3#-v^?xkGUL2}OGwz2)hu8NhNMcg9&bTH4NyD8DvA!Y)Ec93KcA7HGQU%P_L3~QX? zT#IiHiS#=V%RCWF{-ERbr40DbI{Fw9e2kh_?f9}f0!cHvZ`f66yKlMZ)6!4ud3&Iz z`lUd7TY#xdBfk#-^Df57y0q~=lOh^}%@)4EEr~!o@%rGAomCEdtPSN8kg7tCS=H&f zDRyVFzJs)gRO3HRgx+tB`k_R?j4730M5mH2WevO87fmde#H9X^Lz^SSzUJBieWq`-n-k_?K{D8S(| zqLaUY^ion+i`>*!<}aP8IbgZFFegK2O7zD~0_b~^y$?NBzC|TVl$c5HEG!+^PMtG6 z#=U?Z2RoAi;pu3LHo8r=1DX748nF={>C~;WccE%3hYb}YIo7U~cJb7BL8zK58!^49@fe-vqiK6OxBys`b1oRtswroy0N@5Y{__x zxe7?hsrMJyD)>kT;vp35P!jPC>Oi}UO9>|0k4DF!CFe3WRz=3C>UZYcu5+OePX!hO zo)joy7t!Jer9;NfZ(hHpKd{N?Nkj<_(#0Yctg_Lkr!gWZCUZu2tHiqi-|Zh)VKJ~& zn7C{=39^*LjJU`JHKShz=z@+9Y5GkTZ4SbvHgI76Znwc{(#O>|`P3#6Qj~kdim!kE zY`bEdUFE$GKN8|(g1}S>zOT9y1c}w}t^!1Wg10URa;>wKI78$XI zzam>~ay|}OxyIo0>tT6>$g*yW{Q8d2Dx3N@6~K!weC`6fM48Du$whIxk{9|toP4dM z(h8H)@`a)<-VULz{$s+J_AqLcN?GVNv*l{ciaHumqQcSKCK>eJBbtng))yQ$$GR@p z$<7NOoBi~dJ!c~q1L-yBAtylQzKR2iA%md>D=VQ#%bv#Xch>-x={7y6lUl~L!j7|v z`pETULKE;SkSY|-3oQtHvWEoqvhG!OJ@3^3+WfuI$0-J2$#3HBr@2y|$uqpm>I!T# z(6y+KWDUv8Md{g!+y3x3=WFIY=#7bMmUduxJ)fgC@KMp0nC~Up2ir21?QFP016d?H z!kW0imTjrY>>ZT2I=^WPpq#wpR3cE#Li$uy8Zwh0>E;y+r2glL4o8x0$EL{&?$6X0 z@po@DKmG{hANs_EE@AF_n?kD|PEYIw*2CeS=wV^ig71SS?}JW4XC+F}_CRVvNAMOJ6$s+vIilMsmT(O3NlB_~JhJXWfD#_>J-w-f72>lqqT7Sri)xYt90T zHfg;pFix4SeB)_XMiYe=Xp4xszI>OMxVh3;%RmF9p}$soHcfOq=(c8v95h~l!}IUR z+{7up_;KG}GGdAH{(L{`et~5Rf-6EiVg?GqJqUfIdbrlvAt%mATtr&8Juu&YoC-*y zH)X)TP`_`tV6Vjcjy$yXpjnrZq804@{_VAMb4f;EBj|kwdp-KrvCS4!0~6%7KA~Tm zm;ff&;MDRm>sNqGe+x? zyVBr;?^jkLljk8VVq*d3R`E0qbeubcrv+uz8TyVCsnby>Utv1x4#YQ-efK-E^>4x6 zHwO<;#G%H1`$zAX2Vl$UZ?GkUS_}HHj>2}2drv?xA)qtYGsZN-l>*1lAenGVu^swo zDpb&o`=5SNPJ0=z{6`1)T{#%91R|-6&)%{EO-DmghIc1P6OzB`g1Eh!%o#UEOt&!V zdEN;MApGVao$Hn3d4--H{#tdi!-0k~b-ZE%O1C8`0DK_=K5IEo zOk`Ra1U^aC@{I3nvM9ePY=JG)5;ud)2BL8TkPP|{Hu`cHT(yfjh*Q!1+Y4rWmvl8l z6l$QBDa7_f?GRu{rN_MM&E2rqCZ{4qkBpYVxfeLOlFq07K1;AMeZKE(Wd#rzQSC;w zS&&$_ECl#;3e@esK7TNIhzEO0n}edNKXF1AMHL*mSsh;U^Y|52rkCbl_tlDw9fO$glI$DE zpBSBGm}oOZG_~E#t3_8kpO*wqDEv5iRQsdM2m}p62|=SZfWm$=4KfF1a3em*yn|)W zS&(hs67u8zWfY^pJFc_4A|d}0CYsYoYi;u+*w=nEBjo>m)-^i)=L$R8LbEfB4i2i?bI3m zz;@zCVAF7YU55K+rOxhhF33+#0=$oo#NDG4G(Twg@igCi<4$%N!Qh_uaLLqB+{v9( zXvclfjOg$>KM3l>p0RM{9GlNr0VW#vN_GJB!UMQ6`|Cy798Zr*@0~be?7Xr?dUR2tVw5YcZ`;8{}T?reefb<`8exW#y8)~)=Pd+I) zL*x5vnq6H!ft8X#v#Ak?O`TrOHp|mSKSDMVeGKFLvW|%KvaqY1yxDy(+o$nI8!NkT zheqD|mLhz~JI&o3G7n}S2nie43<8&`VCyLOrCnn#y6B06ht*8DWLyz)eqxMSD9!sF6*Kb%s z7cg&{q8{1rhiHrm;7f2bN>30L%PZgom{@wx4zRgr%EEubyrqC`qhipYtl-A>LobY& zHLS7YP^#MC2CD`ObJ(1W=@y*_<2QJv^j$_})eb@fOXw zp1bdfqjpfewP*BmDs++Qn@udA?{2&_z?Mp9R-(y`Va$=pC4#@1?2I}33f}?N6hJ|> zDwEaQX>RC@XN;+>DMD_b^h&HZIJUIPzGh)dd{dHzQN?)@I(wvL_$iiiAlKR}OH>(M zJh9Ug@R&Xl0GFq%adFk8ySs~~#HpI&+K7-!;E)MP{hq8~gWk9=qnY+#GlnvDeBAcH zC=7-dN{{w8A$xT04xbn%(wZ3Z2ZEZdGpAU%pW=}_Q4jP4I^^o^$CWm{$QCKfSHbjb zoE;h&psXkSOnVR*A@mexg*ozW>wyuUMf02i$L|h_ifz}5cl3#kp9sXac(#}2saMkS zd$HGA=<{6~3gl^ENzgDNXs!8D~tXTMI=ztrI?aCO5$4{rb2xt zenpd%X#!<%mI|lTyRmEUFI2VQyxw*Lt7SX#5bCP{3|<9gkCHSbN40x#p=M=6#01T7 zz(to2OF>_+@_gSxAFU&}%`Tw2yY3}g}Dzc zF=Dgb9)C=F5hzU{&wTaX=6My!ctSZg>>rP4)3YAsMtjTMqNKiHMfNGo{DCuPlr}N{ zcr|*@3}IjF7+T>aKCZ(1Qe0l@aICQ7dntRT3nWUej>ysqc*PEUs(Y!IVt_a3xnFJn z9!C?<_kykiYP@VjE2iNnNVl|i2@D!_>KM6Y!8cLJ z5IniK==3|vCc=em2?$6(O3M$|d_7qAy>*t*;8QKYuFC!Omnon|pZ$M&`_izcuC`sQ z10qGN6BUHKRs|=dl_AQI)S@CHjUy-ssUsp{s(=JY*eU{|ViW`_C_xdBGDKvODN!OK zDn{m+kbumXgg_EVvOQ0**1qTa&UeP^{P0R7d#|)ahc{H>CQx#)*L z9d>}Zt3c~ohtvL8hbn_(G_VnSWL03+9-56kw)x0PHl$Q6Y;H>+HPkHSdKNIjEYeS}7io0vNDpL-DN)7P2 z*#L2L=$)o1NLk{jW+`BYTXapxzs-MNkt z)&p)cboE0stIV8k*=x~;A2tA_jyS4&b@Y=9Htd)9xd5px^FAz^6*Ko?EQh)97Vg8o zhT!=!hePjwt64v$7ch1i+4L`TMxYo!pW-4Kt zS#dx_2+2}7W3Th_O64;j*N-IEPBhb|kn)nWchGrAXm;KoX8twCkm8#~e|Pm;%9U}a zN}hIzFL%Bp!?oWjBBNS-MUG{Yl zsLP0Z;&v29jgJql2vF4j>AFycJGxd?K6Cr*n z{l$j#6jv8=VC#pzqC8Zcp(m^0CEPRZ_AmD$&T>8I8JF&1{r>q6$OABPJ@+BJTytNU zhnMloC|dVw$c(~2sj%+%PwsxZ1;vBuJdiU ze)8cBInHUdnbW5{4$L`vavRD{QTPku+(A=v9eV-!)Z{yluq8c?^wWfi;RtsJqmk7j z^E}!-a>lUkx4}B^$7#b8N&ZOwAvWv87~1__y|zU=TM`6St@%goJ+}NN~us3&0P*8Hi+OvwaV1#lm&SG1;%EibqxN<0uI*$?n{R8&39m*1azCU?&ag|8Qt)6vtVy=R4*^S zZBb`;7A@}8fr^aN6yp@n5?s|`E#@l40n7!^OMOqHd+N zGk#Pi;iKae?=GQ?z2=FrLEv-6(zY0-xtkW9rj%`{R{iG5&mgjHBbP z ziog?*fG%Uf)DU7X_-S@H54Q$K1MGU7SrY-$DKNv7@wqX=H_sAh6f}@V%rf*18==q! zZ^#|p86$3bLA)NN_(k~f{-Z$ygSvd;EJ!?aHMa0b=t~F!>UWt)gsnv8Q)Y@Z(eEDl zCTP#>&y3w`hgVP?SsqGJ;{_a(Zd+?UVln$fUIFuoBkgoJ_;6%{K_hzGqeq;vPPgot z7(>q$0JQRoxk8yz>dHH4MwqU^*I-=geLLpswcY6}xh+ zhEU_Dr?p@tzFoJnDyIX--=+TaB<9=F=^i}25$ulIyl&o*)W75gma7SFiibjP#zh=v z;JoFDi#}-s11q{n(%TAmtmodi$;Ii)>I8{7>O0b3L+7Sr3f!L=Wq)7XjeN{ zSBsfqHRw$9wuYA4PC&jfR3Wue^o7T15$j8BNlC4USGz*sm)n=6sfp3%+OE78b&#N+ z*Ln20I28nt4oC}IAjX14KZ9N6Rj9N2JoCFStbGa;U?RjLegNRW6 zhA?~R_kn`=*n-%)h|SV0HRidkA9AcSyGAx%k92n-!3A-)Ir3vV_+wiV zF;PZvq%%E5#F1$tt#Q1rBj8-?I_f<8u&i7a^rEX)ilB3vfLy3^@9YXPWGJ!D2QP^APnd<2;y%FsS z_TkDw%u=+`-I{Qvm>JQ9XdIG-Y0VndTPs^$0O_uB+RvEZYKZGj0vd<<3&J9@ls~h8 ze)wVYN%sX|o9?Y=H8ExWO~&`pT0|#5fidls#9i-__V*ey^AMce8-ikrN7F~*h9IU6rX-{sp1QqzO0A(|x(9f)O#U<*=(*u9wVCDdqM*8bB+Y8gSE2 z>b|vX$Ld&KLQYjnZjXZHPQ#)KaII*GKB--|w$BW1(RHV#dpe($?cGx6KEC3T_y|%U za7&GryJ$up-T9O$%xb*TmE|NJUTp9~z|#QJ9Pofcn5661&@}SVT{WHZy(K}MD6gUP zTpyNPK2Tiw%niE-z|-VZ(t)}&nUF+jf7F6gfHaW=jm{TvRz$@wvRe#t;2XBiJkQpZ zZ(7?2qss_EGq~OxD>gngi%F9V}Uw88gu9+vMpKen`+Sl}g ze&3!hU>fvGn=C`$LM}$-2YT~8d^2M)sr7;QKu#@BD7dtKy!wondcDBxliEh3W^kGX z7l6o5*akU7T~?Y}Yxvt0`}>UUuuz+OxJer|U*>$7P8!+Av0-?tF zC%J%dh5kM9Wih_lT93Dh<>RjhajpqG98ZvQKf%L<>NVI(S*VC?hPB1W&AeM^TqMcF1TIF6$%s#MwkL5uHDqGGgFC9r&F- z0@A1uHBtB#$^5!WT4ZM+5$9a-qmp&PHgb=7=7KmH%;$t!8eOsWNRlP;j-$;rhsnl? z*a-`~wDu`zi^pj*H}hOaX3aj+b*Wc5zVTys!ZAsciQ@ONv+g)$ff-?%EMhF(H;pOR zW6%0iA}AY4MZh3AQw-b&#s)T+3Y`u8()VsBr9ZZ?kHAEW-^rmIw=NhXn`@%hZ<3nI zNFT!ECzU%$n>v|3GAp?uJN=aVss@UeGE4m)!!c+sO+p`YCUj9_3R4xHP)|vp2O73h z=Hy%L-)@#wN7e~KRjQnB`u*T`%M*;WL1UB9GZhV&8{Z8qZL6#D2QVo>X##B^ncOXL z6(Tpx-;6l%#x=D^Rvj&1<>w?E(^*CL33NiPv5t|{WhMLH`>iN#$aC$$IHFYrRExeU zuGa3S%ExAU#Cft3M@Ivg)0}0Yykb-nPPAt+A6;zZr{Zn0y0^U7`(wAF5Y-x+*7rV` zV=xCwJ1g#$C2Up?ckARxSpjGtXXv11+HeuC1Xz@e!i)vuj@T`piJnPe-AF48H28_Y z@7`XACPpyE!Th;=3-`2xY605>jj7?H0@U#=u8rq)O?zg+EARZGUb#Sp0|TNqmla}- zPd|8QK;rEwu~{qMurLxB(j$GGktd{!slu1H9=I^?r&g!zlsW~*l)ZcN$X|5?m#mPb zt1Ff_7N<26tDdsti#ZZ$Bkcu#DLy3ckzwKE1gD1e#H!r7WNM<%`&nAFXLN0#fg|oI zD`ht16SPTk^YQjJNHlR%e?bbHbgsaETXlbEJDgjdQI0oRoKffL-K-nBTsC*wK=86g zYvVp(-S z{@Me=o>qslaQb0uF_axcnDd5{KO4xAj&LesnMOLr#1=mj?O((MZ!e#|6%i=={Y=K9 z;5W?qBJ(kLE%LkrxZ-eSfQk_Q~v5M@4 zfmRJt=_7l{A#DF(gIcsw(zdCGDmX{~xThb{Gq*S2=w0f-TT9b+X=mIa`HD%}bF}0f zFkdl}B8X^HcFBU0`Yj#vnu5$%xqB{0?tO>9kvE2K@qcdV95!CIrvH>>e$$mj^QC)O zMW${LqZR{A$$puSe3vJ8UhuyTk)i>N5=nNUDGT!jo;j`xBk&Uz`dRjYPddE4n;oJU{;B#4*eOY1g zjEhXpS;JeIBpq=HihkhAq)n^4h}T+Q#*iicE-O1aZ?;CWEsB;aIdpjpUSaMZ#^w7f zmjBM~Yq91Y4eICiiR)w*yJku5$<1U&b~4ff+1%PzzP9#B>FOYF^p>~;kfm<%87>#kWEbVT`x7;5edDe!Vm6qsq6mijz+Fh_1~mHtoQBLJ8PXuE z4d&M#jxjrMn0$V_oZFY}Y^O}1VD7VdWN+Tn7T!Q=JO?~|iCl#G6K)eT%kWAfMyTw~ zRc3fg9#ZA=Tkvg}8}TPI5;B^#(n8EN)-h6oT&+NS3^5kSED#?!A8G(A)lG<1{LqNg zKY3;W;c+9r;J#AI>4TG2&X3#+GF5-fAK%}k;b)Pe%#N$6mX87SPR1_EuJA*`j+oy3 z2W|tFk@=G@)kkP$JVZJGNyi=jd`JgXuFW@)Fb>;ldL-!7-W1V)|N*8Ang zGTVyQytvW!!A830mhe578vBl6<+#2?U^B{?6`t05GW`KqrGbIAJyg2PnqK7YnyK(D zEd;9gI)$+x^`WPKgjf2hRiD%bccVR3%CRhOO!ut&e3J+rcZ0e-tx2~6j@7=XJ}_;h z^DmfM62*B<2^iZRa;X+?Lg97H_bNxs>+<=i>GgjupUm!`a)SR2~|Eqwwc zx+nX??x5X2FI9iRxonBA&>jx2?|FJ@Xh*_`MUxXFr?zOsS@OGZTzZYgTTwS|?7FQi zp|8}@qVI@1!g7C}?2!yOVxYfI>1 zklF4_2u)n{M92-#!m(2iDqe-iG8oNyr~e%)2r!X|0DOk|415M`mbXH7smg{p&b)5| zS3M}wH2vSp5SaeT&*Y*-aoS4<#?tn|J-46M(jDR)+eS|#-Pt;ul`&^V7-NxZ_lx!p z;%3yC-~iuak1K71&buxeRy2|w{er8%PBBfiz~ymcZ^=_tt=exn;Yc(~K5kJY8fDwc z?rDc1PZ-(vspk0`Nm(O>l^}l$f7aJ2hct|IA!onn_~a>*^YIOWHcAox15Lh&N6fEe z=gG=M%bx`s)O;jmDeOJS(d|_;@I`Wroa9dL613XciZB=dC0d{6MSV!mD`T{H6!?ly zI701}d_2QT{pbuSkn zzm;;m%M8PE{75a{>&6%=q!b1<Dh?5#KsVrt}nX(UL&t44FUQB8ESs?*6`~Kss6w z^f0eDw5A5c%xuM3M54W5D0h35=M~T^>wardfWvqu@dABjuMC?y^n3d$K{nS*M|^4l zA@|5ymeA>2?i1x@)L5kKDF%3$a;xr*NZl9}&{5_6<7EM&-0ec$)_!zl>C=+NTC*U| z6ZYsYbT0C7e+Ra^Fw}2#{`MpBgVT;gm{zaAFHe)!Uf9S{L#rnfBfGVxyNQU`Twe_E zUb%C&=Z{kIBJdZ0QMrWiJq2Fl%NcxnsN%5lp%D2kIj#9TC7J{pZK0slKe@Gi#TtRN zz(bi7p-bXwokKCoB+6QbjI_J4)9adpo4Mpr<@p2*DodJ+lS{l=HRuY!b`k=-)Zw`~ z=b{IlEF&)+Qh*YJ7w${ksEi#cJuZ5~CeEX~Kg|o-5q|s~O*fbi<`>H?H57iZL=!R( z6_woGyKTw!w19C|Br)rnMYStRy&i6sQ<83&uMX z8)eaHl%2U{CAC>VOnTs0^NN!2Dlw}K=<;R_NiGXRnSV;OeEcqRwOgYw(QgS8MT+nbmTRTIqB>(7p6oRA9E)2{%5SyPR7kMr+twGVoKN3-3$d=z?l8>D zDSTljb|AeCDplkaNVi>l2_wQ?y-1WAbGkJ+Ss9tp%(~}E%|)VA+7LJqt92ZNZgE%6 zWSXzidQA%dRgRs6DmkPl8^f=x9NLJ}8wiZOI+_14zJh;ng`^;;FPEzvOVVWiOJ>4n zEb^S((!?|_eA>vf3mf&!#Ik+Bx0a(=)C6u!6U7fKNbn{GM5G+7_5vK`V>x?oNbR<8ss7$M>mhg7ZSH+h(3V2c2S(@-n8a}jDRH*{b8Wdmv2a=rkNyoC z7DlUcfMDfT8DLrhGKhT=(Xb|@ww;>P;$Fu!@q+%KBxquCPbaqExmkD_F;NF+LD0(J zF2N3?HSkpHVWM*1p-R*JG9}M=tvgyB>lIEu5#)8J7SryEmy>>8Aj{zWK#qU+8Z%;_ zg;pL`Cekoy_#w_^=CnZ7Mx;V8@05#rI4@{*O3o#Z7N7KO3Fuoox5fE;@!JSa)J)=Hh3VsltjyGU z6Yi_pOoO%_f&`}wFe#T7$?o%CdAC(y4SuXO%Zp!<7R4S;C$VJswm`u+=KJa{!R&tQ z23fTHe52Qx9dp!wqDuL?-0im+EIBitCi7-8?R7v zO(3jZcJvv}FwrwV5+~oh#Wy#f<_Nw!X>XR`dopHEqqSqwP@q#m>&`~flMnh>Wh&+) z!g9E;aCz_dW+PEra6=rh+RIlZD>5EacGMWj&%B|V4*TPefcBKBjNFTOPhXD@)qs<- ztsg9kU%~Y8L{5@Gi@f1%^?(QN6Pc-*+ijks2^bmA?8__7j{8|RbWP5?{_C3DM1EYxk#&VyFcQbxj&|}&y zTaILtGhFLSH#1gNWGPH$Sj65OZc#aT^O*}3*rw9y=B=j!ne_AnPfq7LxY-z|M!;mg zZ9+~ut|bUFbzjmw{3*0^v5Xm>%K(){N8MIX=B^Z7xVh}c=i;CYmXmQEc~SQeK1Gd>DtfWIl9+5Hsm#z7Cx;% zjn+m3%p$8>Gl4jvKIl&2wx-XhDaD_~DM@66e51k zu~3JTeEh_j0GM12P*n1f7hvO2(~*y z{;Gs_A8HUWir%p>(M7=;ey^TbSU%>4c@c{tk$H`no)&=X9>dJ`JIMUkfg%6mah7CT ze1ycy^}u;Yma-7FlsE#=yxJ)J8b(8)@DE5M4#dB3@ou1VZw$7*yI7}uot&!BVZArw zYP5N}a9h^r9lY0jk2hgxC-0ANXZNhcR}ns5Rl|J%tbR2p#`%x5u`1_cY2jCOYHKcbH)iv(*?+)l^E!=(JZ>UKFVnCPPo5-M- zg}12mGdU-2wvhnF4SyqdU8x?Qs(nBxZe@G=A6LdG@1$=R)DXdl|+1%&nO5k2bP+Q<1GBh$UGHnPzTH!2(~I^<-1ph34)0R zfsTuJe%&+ayoWSR0YS2+Dfad>{^YN;?lSe~l34%T)HKs_VfAu_c)0*oo*{G%Fza|( z-z^I;yEa3dN|y`V@ARZeSC38mFj>h?7;!ix^5d^8y*U^=ug$g$U$l?@3{q_U7dt~f zQRRb!{q!THsJ0@w%>TH@sd)3moTDof@1Kr4pG%b;li!}k>(mBvNWMv!Wdj;>?$)3* zq3iL}XxYfEq3{r%dqx*)&QNQ`$B5LE&Mvp#KREFGoS2jVX=;OVeG4ticb%<`D=*Cs z?(wX>R&7~3X%n|=WjS(g3-@P?%}_k%njdiv0FQ{g!{`q=-X0P!D_0$HVJgHjvVdgN z<7Ke1-1w8))v>G%wQn4A$*0$yJ~3f}O#?k@WsqNEf;ZJm;&o*Y8Q*s|#_as#@+()a z=^6=Fs*xFN(i~7n*aLx54bO+I)#nm_rS%0=eT%OYH?$$4@z;a(^B?e=z>I=;uvE6)aM^1?_6fmD9 z8P!h)z`fVZIMcH8rwqmQYry11+#?I(J1*d%A#)?NB43s~XrJiZSvBf-P{&BL$*yBHG*2tgScnyy;#r}D|$9GiE^eWw$35Z0)3{%IGFC^{rD zOouq!W-*I5FG$}AoyWBr!MFWXg~mw1N=nbV#=2Z6CLi5b%c_yK4?b=epbF4SE8VN0 z5OmdO?FH*z0&EH5b#up~JLE=_M}DERK%-*aSkc&B(=oPIle%L_Hgbm94Gzj7#%TX& zo&5GMhc5rRwC_qkqG`?=4mwCWoRfEJd|$m`P9&B+2RXZ@DT29l2x$vUElgSYFpldP zHrT3x>mGKD8O9Ofq$iubNSTDYeUq7+2)Z<0-xbPkuZ+R?ObZv%l{3brB_|IjymjzM zALCvwzCq`EFBZQmlaSCN-C9ueNa4`95YX%Fc*$DhbavIQ+* zfHm6fD_;P@@66K-MyP>NlfsIDc&-EnPvvWO+i&n6k#|fxi3O6-89R_L%JS@iPio(- zXVkXp>uu>20L)aG3H)fl>0-FUwASWMzKCQp=DT>~u09+30xI#p^0`DmAPj7pFXgt~ z0{6p^B31Qh3e7e{I2G~Xue(15UjfF4fsP7Ita=JfjHMvE!)4V$(VKode|z`V-_HEa zfHFm)LS6Wob!FxTV7-KYz^Vd&nzj>&Sib&ARieB1OL?T~lL}b9|11gqjPJX56&KKZ zRS3RQRhVDMSK>{7E_?srdQJTFjybEUmn7M|hwS|CCs(t~SN>Ij31lsH?nHQ`YE{

rd*0Lz3xn5cfj=0G`W)#jB^mss{Lm` z>zlsXUqb+nqkfzLo(*WW?0vMgK_Z0S&qU5+c%p_fw;TX2WT<_!_ zLMN5OI+RI2x5IyAH+bAC7_f=rk$z7%@^+ub%Z9%nO&k8b?ymN27LP}t&+22_K^G?> zbbd+U0NhYEMyQPOM>nl!M-iP6wCG_9>6i-S0{ zE{vZLD4b+L6C@4 z_S#F=;)ksZtZK||`2WE{-RV12H{)PAzjifys;j`Mt}1`njXufyXK%l%hW2mQ&-{En zUMVL2M7f=Z{MLoUtO;=~?4t=fRc{b#D}Kj_d)~-BfSs=nBNWmi5OE*G z=((WX%E(x_SO^!#PeetIO^xIgSm9^6?}C%iO72oWQ1smwH3-IKBgs#5OGg(BvwS`} zzaJOT6$^sUE!y*uCKY5W@q{zKC1vBTig$MxhYxRZ`hk4c%xD9k+?3WesU*>oe@K?G zNwJL`x=sJDu=3OSP_F-C_b;HHISRR`wF)7-D1lMrhGio%VHxCQ#!C&)J{tkK@D;Q0 zpF-ll`YxtlBZ|Rppbl}o-ZPDnw=7ABw&mQnwCB6cL>s>KQC3CE>A*2-jfYZu_qk1(evx>&t$feIiM~Wp z$9kk|QCueFL<7aNd!t#$QTF**-IX6WEr*%%zyPQ&>%@F?qJ>){-P$^bIH?^nLqWN? z)Wmeq*?Dyj2-hQ}LFl5`vOhaLtFRY(qhDCGW||(7{W;hdc<2FMk&~potr54;iz|#F z$FVz?3LS=uX<;>n@%Dx-)8W0YXiSm5Jn12f4M{&4zppj6kb!%n1>6CkOcacP@g}p| zUt79gq&xbt?M;4tv~s$V6@C2oK>P)TE2OEFqbu^j!=9h-xVkq?Y@Ab zIYsu-9`d=jDUQM$8KR>*-c$BJBI|k@)d+CNw;g!ShTTWIeCwG8Ao0EfzkWoQUfUn% zZD-J!0gt9Pmg*bb=~B)F`8({%LSSh>=1*W>QR0YOOJn$6!Z5QvCgwwJZ~9jxX{e;0{fG7erd{!8GCS-k|sN=LAN- z-}iKm$=SO#)wrv5x3_Y&`~7jtoAS!m)XaCtn7B3Ha7vb1Dj29mB)M z^Abi(o7rL@ifpRr#T-mDYNtJ;y3g82y*`1~ux0*Ti3wg^9aa?vrlNf~o%}}3@lZx| znFI+=%aJWeZR@uTk5FvoH~Z2xm1)DR-ebQDf;bWha;})5Lk@X{UqV@#G*D<@1nvU& zA@(~7Yrvj0V!?eTtf6L-jrat%KK?n@Ue=jQtnLkpLnLbhDomT00 zBwA2^IFK^?8z}~mCxy$)oGTeeVb#NE~ZDMUjrp^TA0zGFr{kx z%S{jHTdCaDqeoW{Nc$h$*oFTY-<7}`T_y`bSs;kFFrLKxzP6hPud(6^x(uY$CpG1* zwZr-HeA!|MN-ft-6WqbbuLFnLBA$UzrRlsD+dwuAXcZ&wcicTxx#&SEloKcyJfupk z;jgOxH`OEi6f*8ttN4c|vh@E<6VbMiD;@zUX{T6wPY!hz3L=7gYeNg3n?$EVfD2V0UTH6 zY>8FK;Z>u)SHE3l#p3$kS|#S5sD|q6z`}pr3+jPSGQ!DYNjua6ETj*`3xbsb78>~9 zH)f=eLqtH;*aQIMifUHe5U+rg6HDaHj&ai0&Ol84bI3%~w=mh2TLS?K;_u=9TbIU* zhKRy!U#OptL*>Z;SrQ2ceJz}RzSDXL($(C2J4HNNiVRfa$IKY6aH}6^0-Pl*L2*Vm zExZ_jtug+*$o;yGh94{}mn+7Z28^66jl1Mx_s;8G!9Up{(iYJ3?Y`(BYFnb{#IR>i&DTQ^hMnXaN zI17(#jtrg9o|yefZNG@hc}q7{2>zNB0!#|e|MR4LGc_rIoTiZlA{T!YKkhm&__%@# zseW8vI#!O6b_B=6TufKMDe#D)H*7?CG_i)tRsFZ{6Cr<4|J)YD>OPgUn&7uw?7PGw6sf@o%HzUWq)vhVp;^ zD*sQoCsmw|TG#AUjyqtvyuEke^Es&!KBtq9t7ssvs;;;_MQ=I9Y6%!jtG>Y)(w~5p z_QinPP|8tx)-FlGg`4VpM-{+SnR=?KnK)I@^6Ax89m>{zrXIX_p@47LWaTgQdLRQG zX39Wx?|HXTKjojUwJ)~Y|L@Ol8K(8Dp5H))1f0g0-oQA;b+BMnrr*kEs>B<4{&S%QxW5)AYl$C&S(UuNqD;Cr&`=3XJI*w3;*J zfIQdvpRJYl=e7EIsr2vXNd9~DO|~CQQVjM?I{obP_2%dks#zNavFuj^>*8d68|_cZ zy$jWFf33COtZHWz`2dSMlm-!rJkS#G#jB>r{*NE~=BAGLsr6Cquw2+j^a)T>21}vk zHhful?Uncvl>khdi=c*o?@-A7FoB0xZLXmtRsR92m91)^-~N|P zIlmWlemf5UP`(RxLll%D<{p-u1;__JXE5eTd>NoD4 oi`A9N6jmQ=YCzjwsz*5r|T)5fEu2y>yB6B4UI9p$`d2BTW*TWI>XZyZq0&=T)6o_0B!-)v0@5oyaOI)6H+q zIlpg=@r|jxS3ZK+;&j6C1Y*^yRftFMAB21WVUJK)z53@5{8$73tX;o$?V2@fH!3Qw zTfb@JrcFv4m6Vh>t8G!o00sHMaizkW~usd)BPo zuy*Z+t;$NuTmRD!`A3B6dIfhyFNIaR5vx^KDX6ZJHzJS-#HzLMXnzj)UmvSh!(&{h zxPHS%CHMtpTM(;PDJZO7qwsUo@T-aN^N2O7Yt?q`KeA5U^`heL8(R*r2ZS9cG)x38be8y)*TJ~27HJjobE^ zbM=KkL;GiB|7(HW`F|DJzXkSx#nq44q_7H}JOxz*8XIumA6t zkx}4(%@_Vx1@iyj&t3K8%>1?ND5^z3d)rGDNmr}E20vwCyeJ(LN7`2;7^ZTo`D#DJ zzsYiD(jz&?@|p3BvM?~OB^|g|#!>u1Qm~IQr_})ilKS)k&LB{4#|xJj*Xg${ z8%dF2vX!qW>GE1r+6H)=Uxnn&>YF)i3^=$27VJY#6|HLe*awA*B^dp z!FVc9+hm>Cr?j-k3_aT4G%j0^BR(3BBKz5{3@}yVNw5SXv;8jkG+dgBAw4=ZHBXcy zMrhZC?0Rf$^h677BRXyzi*E1vP3_r82H1 zLt6k<_-6%2H$9A_;Uy*o0hG%rz=zZwa)gF-dkF8?w=2Ta$?5DtiPEqkRgNH>Z$x$U z&Aqw$mJvTucwm|*zH^OmGF`bP(frvG`9rxGJ_C>mosOuDQ-$gcTI_^Esa-&!=TOM4 z25~x>cHYCEbg(7Qwx4k>6ZQ7Y$$ydkcIS7(cQF(7eJ>D7OY1fv2Dy` zI^{+XH@^tgZ|`c=d1oNbaOl0C`WX+5YTmZ>$wg5!!5qh~r8ROynorD=$hVT6x6Ym{ znlq7@n?lLu+Evf4-T8 z+70@jV_PU2uzgsCOEGIWVIex7ZNKG6B9QT@y&$?-yfD?TnP4vS77fTE3bH=iq%K0Y zI>=m5@nEq)y)pf2!P|z5mJ%QBCsFk87maQ`1)?rMlFZ4ERl_S)r=--JBJWc{#O|bp8tpm>meKd-3XXUa(^x)m1 zg|r^>A!3N;QK12aN3>Lu?VIPEWsOVH+-dXf#~F=G#UbpEr#@=;IO+(ozFGMA24HUWDR(FGF_O8OHc=JWKomHPBvtTScAKZTJ+ysB zV2*I45o*+3H^k(Srz|ctfvzEJ3~S@c5nFnHe5o(!U997mDL;gG6t>l_k1_ z%rJ{5W>WNKqFwA;hP68)rhV1Vvaf|&#Lz%dQO0FQj;!(J=FG27nYlln_WSNpxuIk;cEYg zu>tGg^7j{VURU?OzLgmheK3)IqCAgb%JfY~HERLwcDiDN z*==Cs9$+Ird3dz`Da)1>Tr#YeEl14ZXqvJYazqFdJdN6q?_oDVCM*+k&#Uw1Z<4>O z8Z5)>C!ZRV_P6Bjmnny5sV!4zHNyVFkmSJhtF`{bcg-38efC!Ta(8k<&H2}O4`=J7 zid>(ms%R7w71>LfMwh4^ddS~z7nJO4|I6}_n`|X7>qmKiIW;sgC`_X}zqQtoJZDFM zllofos!A3RaF2qiNv{v@deygQ^OPL%@;oj2xGZJ*`{TCR`JeVXZWKZ2)B>BiuJhU3LObGD9Ib(upzOWDF;PBI*$n?m`58u^f(cYUYS zEh{AbaCd%$u}`hxRXL*Kh_x*s9wGp5NxhHJv!Nl}38DK_>gHD^6yl<~;p1`O23#JA zg@+}!Ed%suH*vwGK$2dkt>c@9cT*lBasTDkTGJ8YO{nKu)0~x@Xlgdcf^pBj`8VOdQ4t?Z^HR(FqS)w-IQ}btH(s|o3E7|5fsI# zq$$96{NX-F$zCv3`>GgES^+99c#ye{=n+c8m=~JortGkw*gu9UV3Bs>V>|_I;9X3Q ziRmJiDzmndF=b*8f)%d-+0=i{YQ;1Qmm95u_zFcwTUdO0v1W2&bh=Gj;qz14*N%xTI$((ZwJ}JRh1_Me+Y4N6efjdceEg7F}qc8B8+l zEU<`_JUuwH`{d6rMa))QpE|LUr@~i<2Z6GZz@?{z*K(Jj5~WjK%PTND@d6sN^4Lp0 ztW&sRRd5*(G-}}Y!@ygt|qvBOz}F>z^j%_|*UapY8k>boP@ak#^&aY!C5t?0p5u`#3qGWG=km z(ge^4Z|;Y>uMbRYAUO0_PbHsz+(Iw1J;Ez6u3K^AOh*^cQ!Z2Im%=9#&eiCRGL=DI zPY6|I`j+(`G`u_=hJ`4r$D((;t>ZJT2?dzP;W5^L? z9O}C|AW4nH3R~i(#&243L%fHQC^_iCs;cLz+Op5@tucp)LG+sd>AmzIuRyb@KiV(Q zN|aun0WUggh~)~`9K9Cre;VY{@ORph$h!q zjc9MBHbxI+Co0JiZO)aCt-6M_g>ea^Cg|CfZFxcO`sd^bY>3t0PgZr{vZGpME8H^X zU-UJC;UXC&7hmD{z6&{a(y;niWON(Y&E;&y^SRS~(Dgl;k_4gl!SBuniWVF`CBDNjbR`pf*8g(fk>elT0M zxN2xmt3yVrlg*o|q(iTP16IqOCplx$6Ih;AteXqH>vV0791+lqYHN$Hba~2@wY=QS zU^+!R(kp@W(!&BV*~D+6VPz<(WHq4k*T4^ULe0h3c!Rdtey9ldrVn5`SE{Q0Y4x@c zTL)J&xL$nPQz;lP^UrTk;lvnK%oM&teMg`k?0vcVztiO!cenQ{biRCH=rZMY-dPzs79+w9NR=K`9A3NC^`F8q;+ohW?Jy62j_M{#BNl0mSdAcc5aWK*tl%=W6-YirkDj2f11SzH zg2I*1m|X8VYoP7WxXaSw{=#AH{()g~72#TL!*oU)Rnk&y*j7gJezy3|J?-1@QGzw`Go{@kG`fHDI$>%b@PStr(9chTtq&5iQ+?(iAqm-fkAIvMj)qL4&sCAw>tI2BwzmKZi*4%@!X67(Vm!(zOj7@N1+f zrc92AEs_KiT!de8$Grm4!e8H~NS2tSZ;vx!ntUA6qBE(jakcTHjbKbZ9yv0~0q=Yb zalv^qV)|abu(UQ5;Aj@$>*Mz8KPNk&?)CN(qKw_CD^1ueE4A@M7GY#WGhm!Ex%Bl>nC+Ye4i!dCsWvw$D6Hv$tO>($kU3 z{2)h!4wo`QFpBtiPgwzd%Mb7CL*P*k4QT0R@l^WwP205W zUNk|k4j8ogoEzr5wn^SPtbmE+TD@l5Ajx5T{9zbWL`|ZM<064AoId*y5e-gu3bo!c z7C7Q=uN+ZN z8(|E@w5%v`27?_h{&7Fe13S%;txy~~VER=A15jYQCqC^wU5>b?UGF$H5GX)3J{Qj{ zPuq)Jz?e~)qNpCc{SItyp0i44$_yZLp!kaf;-Q7zd|iSC%ztK@B!@!)^%^BEA9S`g z;~|$f1ic4n4sd`*4ujwC-A`kDxkBnimZ0O%0eppi=}GW1vTmg(;byY!HdDxVLbAvx z8>tbBKVoCi+Y4q{k`SkukX))PUb0AV6k0X%2X2@%*9ZBn>msOfF*c+;R53-Tlm0gt zE4alvFZ-KM(j9>2l|qeY-pdih7wX_XyUEjM&Bx>S?8JM_-uO-S($-ke@G<(-Fjl%p z07pz`F7qC-4~_62khxTNaVK1xL$>uS=4K0|Fot4R3;4A z>+SwXKS9yWRC*0pSAXI^bWxzys1Z6Sk)vS$`o~SYwqK9Bd&~zeP~0E|fI0U^WVAV{ zl_EYAwYi07R>%1T?<`Uh4Bs7T3;DEUiRUjR5`QPjIv_dX(-UT&s6}*9xZG(z;Hy(( zH98%daPWs~jTPnqzz|RW;3pwf%lP+TF<{ATGk6KN&0gt^m8B(mS_Bkfw@FX22#%7A z_?-ID203E=5;ER9E(H)#+QZy21}+qcckQ*>_>(_n`uDCKgXhH3qZutY$63~kR*}V? zr8jq8`(DJlHv2v8OY$$SIkAXgi~g({^%DPNKF1RI|$2P*d5LZ zixUmhWkZxUjN+;5fyIqr1GMpo#S8Xdbd{;{Pst(JfxR&Pn1MD@8-Q|;#%Vxh3PN^3 z>%lmev%~EskC*m@-{wdp)33pUlKuG6W>{?Ef|bIIKsTRw$kyB@lA~M!m7d;aM`9RaRqVq!2wCu^b2<^nReK|qj zWG(RbzLBL$^ct+0`O0KdvJEVM~Ka@BlMzct!JAIYstx zk-myW2$1Xu_Rfi0V#Fc^#ROBfnMLf9M2OPduKq{Sfvr=ZChnu z(!Ra+wSh%Pqwqb;W?X86IhZ1eAh>iEnvEBA>IP*%N)F58@IHtJ)?SdkBdG_XOAMPa zanL?6Dj3owo|yhrT~-DReVSZuW5-CW@n}C55Xw)eYMM)U+dHL+icBHum%LFw&jI(w z-?89t4dHAu=m>Y7b^LWnWihSD0npcB@mb_P3+#?K(y*>okMuYX83!np7C0_;3D12J z^A%P_X_Dp>8*E&(iqf-!p1`VB;mC#p%6)oFH8->g}uO!$6 zf^jjf7+_w8slA!hjFX7fwN=OiaZaHBTM+9JqZlVgobM)`L`DN`TP2boDCSOLp}(SN zjnD>E5d8tBICYI8o_Lg5K#$F4bMlC_T1$9uID4=FnfUK zq*sr7t4I+h8lz+-JjJ29({E)y1ZTQzY0EL>6e@mH1qVcEiie=NT95{9!^CBLAAjFf zI&e9v13fUDik)A)FVzQn**t@UET{|GC7?CH+lCQuT~N&oSo29@LJg2aBnmV~mg1Xe z{R6zX)ZD=~-TUMTY;WDX{sdDRu~hN%%UwKp>ndX+ZwOwIkb!~*h-}fdHw|MYU0o9? zvKJIqyn?zpnq?;T4qc(Y7P`r_V&3}h1gM}6Bnxq#y;rG1L+MCu1nhb_LZ$8%9_vui zQF1f)!E!7U`(neIaVPJW>+S?b9Vcs!Hhg_=pW#v@T?5HjfT zwDsbFc*(Dv8>0{!)VcY2|Hca~Eoq$fBx|TS**6%gyyPLI{<#Y{w3rJ?jii7f#PpMK zvHcRKpH*goheb}6kF#7mX2+b{tuafF+Qq8VZ4uZ3V;d`@iZ@9CZPS-jdhhaL~u;LYeQRc9kWRGw)rFBZ(zB0)rKx zf#}u@6rcYaS|?1aV}p0I8V)kEr>$LzZD6GvZa3%?4+*rJJQ!OBJi2Jm_TwYUX03gp z=I|DCWbkF5*P||g>LbTwU^c{XVC|4NJ%fy=mauO_O3J|t z^;*_}oNMKM=Bo5DTFN4IGvT!CK1m-BbD$%FC&LH9u>1?l&U zwZ8*Z&ItVO@9GPce(T0MU+k%@&Gz`2BjKsl+Hvx4P_~Ix>EQWPs`fm=QxpdTa zm$5uXG8HY|Tx_d|Y&7d_gPRzM1-k^gnWJbW@WBEzZuIo>7)Ct&4y3@fN1cF!>yS#b z?oL6$P{!YaH{V)tN>yGB49Ev9o<@_?o>V%dJfnzKzQIb7*l2;T#M57C9}KG{?dv#pUUyhoW3<17OH1*%;F!B`N;inU03)< z+C^$b3LZ{Z!AgyCdmFzj1(YKOXuD-(XboPW1*r|`2UT(63oMLH)-8}IJ7DGD=H${M zAXRUxuj0TcX294k#;Lj!=NAC%o2Bm$@>!pp70&mx8qUqwv_r>UKqH^|E} zY~3t|tlvtHIdI3U&61$)CI8g@Xz^6laFEo>EeK_u>Z)PzVI?k z+Nd0HHgz5+-5OHA(vpZ;*WVkMZYL^>k-a02d1k_hR0p}H3Hc`zq)3>cVIlgiMAa%s z$lfI}B(Uwq&4*~?gydLuot6uXGQ?#y}hgv!)L!FI0?SyMM&0Xr*0!hqH1M- z-G912bGa3kgoa7Y);h3&4zp`OX{zeQ!=|`bo6z(!80w#kk(NL(R(rBMAkugbY=nzo zfuJfVn<1#BNS{_<=68E2!W}mJYG8m3ZCNWAL<{cwdDScgVNoqaDyh~-gb`e?6(>0HNP#x+`%S$Wf6TJ zIsXub_A~0rp%9yn?2$T1bbq9~Q@QT%dkP6@P($Y{2^B5TaBHS(^hB6}hHaCg6}z$Y zA3=K){EMWsurzxXyW{TcFT;pFIbw5P6$hTwr|ojYt8QdpT1&Fj5T-4W?L3=3m@?0- zE;w1z`98x4L35F!RDEf2d$`U~yU-b3m6^U>eJEIa*@x=`MnsvTD!ozC4Loh7hni<< zoZrk}Pw~&>FYo&>B`90}Q7p43et&4;P6C;o>)ftHkvP z7m1wKij8jwRoj{o;%lTcJdP8IfVEK-&Bz4o8tHG4wh;YMrEJpAxP%e^wWzfG`OZog zSj&_xEvC(C2(ZmC9Gy~W#;yUcvzxaSgpLJ!@0d)QqjHYr4Xc9usL^(Jwo?bZwvB5K zOpRl#r_YzfZ9N9#{lWY|{wD{sswmp5OrQCn%t-lANE`AnBZ z5uyEr_;|>^hzpDq8gtQ2%tUN);hhWxp+|!WrYYT*GQ+}^;$Dn9NGQ|TQf!}{kLW4A zRF(`}ne}6GrRYDRvLz;e0}Cwxrw?n2x4IyEk_q0T3ZA> z*RH$$F$%`1$*nCzi$R{v!H# zqHK`;OuDKo!X&I7+h0Yy8*01Vu1)&%H~S(HP~n#&>u1f}Q~8_W&#V?|Le0iB*=G6! zxOp}!*&#>df_GtDtiguju}7DwbRcE!j2g(iV~%{N)l!e{_vd}+tWnOxx0}sfTws*A zqC3g~Qmye(K}(}qzcbGxuEudxMFpteJ_4w?hz9ITBNuXNC^Ck~I8sFTX5ninx(7By zMP9rSlrwyxUc^?pLJn1CvU{&lGRvRAgja>UkGT}z>Q z4Pp9EQ?tB%T+EGRVz@;jHT2uq0ombI&Vom>g1xN<_@t%+PuYXO(5tbqL@Y_2)ZGoI z-~>71s@a2#pPgE+p^$OA24h7HTl)Z4TLRa``-L#uVK(bH@B$J|c6QRYUkLQxV?5eKQ~Jtw$b;nq5Z>N%CsiIb0VBpQnobv8Z}4#3nO`K#22qc%N8;&sVh0@hYJ&=)r7H{PRo?dWq z?q;25+)4q6#?BvOG(}V3JvqXxHM3v3M9Z3tegc$d6um2poe=p?ZrF&mH5=n|#8zFp z>jhAr;%w@u%smwK-8`{&U(YYsGt35IJ>VCqL8omAOq+WlC0VAeV?N=^x9dw-CC&`g z*u5uqyf|LA2yGPe*MsQ#DqKBP6{vq1qkXJok4B^6s&IqewnVw$C3GS>ho&a(&(AVc` zwv3SrfFj)XAs~g$4a(Ud6abVmX_<1w8-}1nRhQG|LK}ET_y1(du4- z>G)$ymk66`xS(=~OD}|NBg17vJuVPiSYtblgOTj!XSmYIiDlKX!wQ+~{W(yNpGir) z#Oe%qh=&86SYops8|WLZLhzvGT;&MUKT|}t8(mH_Dvs^c4B!#9$qN&d=2!?~h6O3bB>UdAT|A0~N4K5))UqPxnTLb}tp80t0H zQ7Y(gMSzL5C_PppkTpnQBHUuh6irY6Li+Bh@?YZE`#;#|_KuCMlYK7nN}uRQ7hflR z5@a!-4r8fet22u2$kG>GD=H7n+xT&=dD1_^httD1%wK?+6b3!xaa>}qyie@VwUjU% z1noN2+cN;KLh`e#&^U9%X%?j+HHwE5U}(45^~*g3SCWLkq)l7m%o$2Fe407yHC=^I zUyP!a2jz%M;8SGscM%~CPUbf{|FrY#L7Q5qzw6`ALy^M}V>s^|!u9yppVz8JsgrOV zW*_wxe!JLLC3dM5V)R2enbISLROP zWp(=cG?<^17{H+8iW>HaXfibYyIxiJ@FPGw3*ocOk#sFOm|`@K?_a9p@$5m0$p%SeoJ(mQcHzd*$&-m5(7rDNtX zB9)Qo-_wLR=szQo>`k&xe|~t=JWx6BS|nwP_66@iP2);)fVXWHZU)%3eg@ zseTC~E<5|os#D=`3WYy>Rl+G?nDEfe_3)ONJ{IvHd;>IPV)ww88;37c!!@K8)4OD` zb=Agg5ro3M#{p3=Jf7|9(LjZ33uElW5G2DKcNkC@1^PpH>_((+h&Q9&Y&B@;R#rZ(XIthrVm?Aoj!Y#9oYmtW(BwevVR(_|vthWhnRU%k{S&4&1uowKCM* zo|G14l2y@vJy{cc*vfdf!o1dK5B9jsPz_e#8x)X+>4TGDi@Psn zZ!bL4tC9L*+%RX(O+*+XMZ+)1pR#02s558HO}~&C0pcIsTUV((dJ+{gFb*$~EuWI6 zN+eyAt{q!{-gyLv3P?0eww_sa{J+_C3P*WBgjZg6KW5iWhN+Ka$!;s6F{k4=Vyo-F zUhRpP*MI(wPQY#;SP6Yx?ld$;2M4>qr!P99<4T}kq)Gx@eL_y9peO06+69@Ic4A)2 zsKyMWGeS^)ZYp^V)W0tShOLAG%d*7Qa!G*b zDck`UD5uVTrA#wzT?DuzLiaLMUZiM@PPt?=Fj!;rGoS3pxo=v7eFqLS-P)$R3u-Rz z%;#2NOt%vGB{4ZnsRq+LnnA9?3Kq_hz0*!rK5ZXQo0%lT`&uUU>j)XCHFo*XWvUl1 zW{ajmZ(fchP9~JVuG#!NPHeQYEF&#Q6!gbkr(O|m&DSLA4E%k%E@-kXz@w@8Vkh1E z@Ai2HW3SBX;R*4*5@a-SWy&Oiwk=qzC6UJQlB_L!483kr)j^L$bo&wX1>bvWb&H@E zK~WQXI3Fs*V_|>eva$bpLFkJ@G7mX3fLk1L)%gxP2-$Xss4K8R&?j?>t|hd5#XHvZ zviquYQ0dzaH5Dq@0m&SZ_iZogQh3NMgCWDd1urBGp*ap4uk}H)aO7svhRF<__|uGx zelLq(+#tJv=fl4PgAS6^L9)VRV)l?Hks{NY$60&A7+2>QX=hq})YDv^Nu-OgEOodn zZ!nOqQ#pUOW#;{xZ>J=vQ8_}(E^J!{3XJ99wqSAtpRyyP!>y=S=68nAtExgo2}E3) zw&JW0H}UX`KU?LTyT^q*M$D2vgp>0r()R{7Y>R92`|u#H=~HgIGa9d_sQbz?t|jw{;9%s0J-g2w|wr1>txW_n})O zpBEByaWnlOwL-OIrN)2$f%u@3R_uEG@qc+3&cK`ITHkYT-yV z{67L~7W+`$Q9LD^1hcDM+0@nr>L-8-yEQA_Tm*3gO`I*#^SL40*jxHs#@?WgF%|z# zfMBx%qOp_U5=FyTH1s#spRh3hhEts&gG1XOtL2O&BEwX<*1+m~_QULC6vxTZ8>l+Wog#%6D!=r-;LgF-s{STKHpC$ku1P*0-HrC>S87N~_Z_)<}^Y!SL3^Zd~;F-l@t> zU(><5LVbKNy9Q|Wg%kMOHtyx?Vf)=)3H&sRDY9_hFX5Fz=UFzeVT zMZcO%^FDXR*;bQG4>El*1WQ50Nrg1Q3r@nK8Pa~uOe7VkT^4}fb@@K*S>iY9WUqL-UTsb%nquha?05ASJ zpDQWd4b;NG?Wa9#(`y)y9H9OuCi=6{lQRy#tq>2~ds(#jKa1P{=ijGbJD}yi3~4Ru zIp)8YIq-j@5pw-iNGmHBYoFs?`-S~m-5NA03Vo-rU5p-}?FFmSl=1^he!OMtDr3Oq zIP~(YbTizBIinZ_Tdyst2m1$1R*2a`+qTOX`jpQoZ zODdsKAFsByR$VidYSJ6nnaCaVB^J>42_~5?ei}7pKgnG`v4WPm45TgHl|)&;qHG> z_v|Dd6x~aKyl0}{Q*VC2?7(lZ^;gczk_}TL0u}}^!4gZfBoRZG{sKqLEeO6GV=Q|3GA?pdIFRNG)&ho{{%y$mRk|9~zX(GJ@PtXrWw-dy-4#&cm_r(44*sPp&8 zc1bCG9tbV)cpii;jcgbK8dWD(fP`Hiy8Hre>-A1jVD!Pba-?$l-1)$<@MTL2)vpp% z`0^wiz}I$~i{kxJ7P{oRpJM#i82<7l>Wn+jabETrk^UggYMFk1dG7)eiu$&u>l|EK zdzYuC3|0_C4TVp2pUXeR@F=`-~@Yz4ezmfy7FZB z)-1my+CAel`sxY5lWN6K7|P6j_XJrs?@~#4lkhTtXMVWH{%*QjkL7xD}Cl^Uq&9E-W$bmkv32cbWHI zcaIrRrUuK6w z{_11(A>lIKKq3U*huD7smM0FYyPkpD_E$fcsY$&%Ys?}Fe0+Tdx0~l(u6*u_z74OA z!@BXuuLSkq4c=zS-a?zZdMq^(xJlzLXnvPGS!JQI>1GtHwR;$HVf^fgr!;ws5<)f= z4Fx7W8vHahk6Pr+pHaMWJZd5lJ|TqpxYGSJA#YmApBOg32dBhssP{dbthao> zYgO?7#+>+@2bH606_gm0PE-TcW_HUBzo?ANSiA0x}a*$eHf-%Nyy$?&#c=Q zDC&?U%2ah`8KXn+40}(BjTZln-z&Z#1a)4Ipv7CaKm6-rq1S%+I7nGA-paE?XcZUU zCbR39y&9_nw@wQ0taKYXa7z58RBQGVM*+W4cTJaJwZK=3$@%h?{~8PA!5% z+$UKZYbNre64n4jm#E0wjnfSm7*@=zM5JgP z8xX?^F%ZM&cb5loM#<{Z zy*;+hQTbquhl`;0FHO{GSwgK<4ixVfn@3`5p}l-Yj#X36jY_b&;=HY4!o5Sgj#2-j&f6?wB3#!Xoeo4aKlW zrAMV+2Ed#}kP>M9G&K{f;!S%`oUdl1$8@QN0$4Xqndrkh29j2FNYVc9e2!mVsLOSn zxX_}}ygyS!=3TZ$`Xo~FKTeH~=9M=<0!hGA{jGdLjO(f&W z_mvpE^Ay=eTnfLRZ8ySL8$wb8gGN-g4}f{+GNugTzp^eZ%4f^1Z(*=XN>8=0 z-$C*=SSdN9s4+UNb6sLz1yjA7!e5u(EYH44`N>IdOn+VE^lxr%Ia&=rb*C@i)-gar zd11kt_yCN+O{18!=?h6k0(QgjZsFReMQ?*#9pCoR!GMC?^Y?&6^|-QqCD7I+rH}Mg z-2|_KhEc3`j`WnG^loVmd_M9IDhJ*XwNKYWm>005>xBX;Jr z5-BX$`apY3FuuW4qHO~G9fXQ;i|vN>73nEeA^$-CJvn6w`-jIMbS3uE&_F@s!K0rB zbSw#}Efw`LjT%kE*kjjM+>B=i#N99t1E#%R1bp>F3q9@=j_^2YGo3X-`g3=!QnDPl zGO~gcuEa#y%3^|TPyvWM8-Gr?hIK@i_j*sOzYYIbmpbIxGYfNKWz_W9GDZ=*=E!U2 z*qej02Mfrca7nTYG!#xZ2eGfEN8fjvlx2N*Y+n5YKG{$4FUb*4Dty{0v`UZ~j|QR! za(#ywQayFJqkb`EE@}W8Wg`U*zQU^oh4>h^JIrQsSOLz(ecBZ%G&_j}Srf}}^NgPU zL9mWOcri55%3;iTm~hdz%Tb%zuNW+;Jr7x2&mWuQ1JFI{%r)ry z+D{8Q&MmsTx=OW;m7FQn%Kk^XGD4n>0vREfiB$T}2?*e3REF_pagFJV9`l1i>ZcwJ z*h@E*@Oxru^)f{lp+Q+egHqOTkxB}l0=ZCU^n>xpx^!FvZFAl0AXoESXJm~4zZQ8p zLD#AfA95B<5tcNgbgPA@b6-zwdwQ$H$2+J3<;;gxJoF0*PC{kcop6To=aur(6l{A= zdv4$qL@_rK>ll}IlQy@H;{M7oXLNDgJHw|63NDs1SlRQsIR0z9$Q5!ObrTkU5F;o> zMLaAZGea%%ISjaq!k{N8_Su@UvBHd0!D!=C*!%GajQ*_M78st#-$D>$;aOw&swC7P z-}QnGA5m(h!noq6-i=lVgWY5~Vy1*K0)3B8N)-gxvl|WsTE`XTPrtVvj(q-ZaG8}O z-CP0tPN%AJ62g6>|7bbW@d_U*LL==~sgLKH18P9M;b>c$u)JV5elx5P7S|-u;e)fH z3-FDt=73H$=Xol~8te10JtQWKyQeCy(?M2$fgxnSF{`gtHK%R$S~e5m)NI;;1$ce( zXR?9%{BQm>5@Oz<*AHZ$`aviv6_1-}7%2LilOVUb9qdM-f zI^<)!LB^bO$BMXuiMk;yq$=}he5$*vyxSysUYQgsb|2tO^g#`58a`}<^!U|O)f=ON zX?Ap$)JFS4#scw&p+x;W(MkjehG_TZN}a1;IJ^5$o>W%SyG+BPeoa`&VIC%CKIJC8_kr0W?=JN{y7i>XFxl#{Ih>1bz|gE#7# z)Fx)#aoRJ0&DD1P5kiM8`!w8ld{CqE4o|C(URQA=zxMlU-=N|UwWzPKNNbWpyas(0 zYh4R@=R?eCd<@2-N9S7_Sva_@5(<|tIiiueIh><9h=~$Ws&!5T64K~JL~?O1!4CAu zmfA@|`Z>W`J(*!pmE=6->vP!OF}d?6rC+(c$r3*8Z#UL=_?L3Vyag6uZ!LI}|8`NR zTNV)}N1#=A!^QxOcQ7{GzK3+lgNz?_=q4!gf@-e3tY`O>0G}?kNG7Sx)LC{>g%iz+ zsSPu|rGKRDiuJxQVUZ0k9P6sFg!dgh#R1ob7vN(-)Tvu+IYQg^_&VA@9tMp}Z>Z?2 zGvri0N0VirtKUjjvm(qi;ge-1vO%q5U(-CS&2i8}^H#BLt#|X9vWkDhCZcOJ%^s8RA%D^R;))&&RVRZoF;(s+W7>eQT(>l<4hbzi)JK`ID~656 zf$C=*|LD31_pw5qTE?o%|2Z{x-rJDT)xw@?E>#^Lr|i?9b^3)x**$hu=u#q|qas}H zW*WvVq1S=|&S0YAUuAX}_nP!W24xxFhd*C_4)OG(1MZTPrgYUc3;W|<@s#pDNz?IX}`%MHFo75*NpW~2Rrf*$yp+%__~UnweN z(;6@Jq5fd2-=dIQHI)u=Qm~;u+8BC2g5zgk(1$XYSYo1=xsC`Sp~oy3?vPM6RraCmg-^pmd(j*K*Y|sr0AVd=lyNuOBMH@n?|)kI`iEuf7(AC#9vP<= z48=OIoV@Sjd^_^2&?AY#)fTu{hvkA^ri7`CC}eAw!7)jKC(1xD4PHejq+j#f1$8D3 zxWw+Nq7xSe063Gk_zmz>?nI*#YD}`GJiL?gLoyD^`fOQdWG4S)yF0vQ4`u^F| zx71`+klppIaggKq@_3(249T|ac2I|BVDk^`CJQsgU~Aw(nR3w5y_5W3Beqw(X)S?# zQ$R}(9ieeEwHNyBZezxdt{SgM^Zs{Uc8dV&Q3At1`?DCSNLc-iphGiwSFw^&5EhC| z3DC_8o5)HBie#TN4QE)~=VgW;Vq`uN^sG^Iy4w)&`ptlt5BCXF&1Rmt({*aVy3zLQ zkhsY^i4yX1SidZTl67I(2$FI*G}{ks3nR!HWPB9-z`XJbuCU|;3D*F6(gf%g64b42 zXoS~NI7S0sj^5Ic8{Dr0O9YEgItvL;Dq(x7-8+|V?)U^B8YfYs_#lMq|Ielky zA*vpDJti@)y1HQP{!m*MP%s+6M>Bk15kQ$AF|J#0d7_UIAYDyAQ$_#g560vWseT`l zyZ;A!ZyME9)~<_USr(Dx#z5EAJ`M2Pe~fq?XogpdZ3EbpYM_P6&rqxKnh-#hNzW1RE-Qj(Rq=9+7* z`F79qykY~f91ZH-Qr-3nSK)ih7lPcb@HY1kBpw4J@q{zEB7 zqNC7{(o5L>R&EPQ(uZb4aV5%yg$YzigYVEaLDkP`$GHYI^&3~;2;M_05;NAevi1j3 zF0|`sE0zKIn4__GIjg>i+c;gejqor=hXX6GCFIT++Q-T;JPCy{UMAM-N47)zLPbT<++st!!-R)#sORcUcC3Hnpg3gO`)-arZsB zLfI4cLR>gjRyUw@8`sNXTDo61YKhgk?h`I zabt*_HNFH8V8|*Ca)2Gza8_-){s33*5rml`rmwo zbbxNqFD9Hy23GkA#EmnLw}ByGo!N#BB*l{y+Ia-u+MiHqEAgJJ-uq7Ed{P z=#h_{zxfKGhbgg&rb(x=fV9C`5R(90TLbc+lTm4TXkJ+J_m?}K0A`-A_~&&0eWjLK z4)^4{u6-A&*!Xu>9J2dAnf@zqFLuv1VQ&BZs5p4($=Mcp?B9)vw1#dZWMInv_WJ+0 z$Y=E4|Lhv&Pss~^zixK!|Moyo{<%6To=wupzrFvZp&$Q#7@sW8KY#uo7WXr_nx{dY zWubq2Ym6?P$;pftD){r8hO z^|woI`nPY$*x#>1%jgNADp9Qwt11za?--yh1Jz zclz{RN&-9+6(?)*e)=C3d?a2tF)@mjxnx@;-=47DL3);_trXAhOW4uD9&{S_#oXE< z>Q_p;$+Q`54jUg@8Wfq^=7i}<+tos#56@odg1>}p-d8noZTJg1CE8q^QCA zOpD9f?fQdQ6X!4xcLXR9csrT>8M6JMypmXB^Ey$7kx2y?fy+D*D%ld}-oFTk;kB*n zGk<$~-c!0(_ua!ia?kb`^Cb~=g7a^faBDP=%L!`BRD@E3_Q1geAiu3QaqqKEB&Z2lnu#rIW^Naxr5gm%`W|d@2nAW5|WSV4? z?;MKTQqYIO&N_okce!7}MuEi(Zaya5Ur*QONSk3R)?sbF%RGo5YQL(eaPfy6Kz^aQ z-!t1V(Jf@Yw@X{KnQ;jFp7Sbx$3SR^>nv)F+i5C3x=w$4Rx zT}f;9Vz}K4QcqWkSlh#YoXyVJIt{{%N`EYLW ze;fYzHpsi!-HW_I<>Q}QQ^OqRAbJ`k8TK2C)D4LMPIi)eQk3?M*B;u~;vcD>mmJ+6 z9^(qcz`{WW#O=8RXvm&k76-oO{(^Y@ob~7a_HQCq|N8eYc+_8_UjJR|v4QArV;1nt zes%~KpYRsz!ox|35r&fl0mnO3zU~OTV#a9m(YE|*+fP>WTXcsg4-$3>YQsp^ys`EjT_a!yv1Lq<*K=Da&21XJjONTDVHse?Xka2+9UHH#IN@-?d_)Do133W zX}cOd;$Ebba-ku)_(O1Q)?~tt!e$LzKUIAV7n_T0Gg+i*PT36`$jd=0pHwo)UE}4f z7GBklY!chQZNd!dgzTb+N&|12&4cuLXK=bOpI0co%XCF2zn0b8zAY_^+l+ZLnG zzGkn{^F?Gp0M|T?x=_2rcCtcDky(SxN&UGNKm11a-Km1jmubpnYx_ssv4DpS2+KLf zxNW4vtp&JMojMVOX>nA1FaZru{2YqY!i+vVd21o#{(NOiZNeUzJBl**(B>?(>C)Ka zfmDGGFGmAGRcCnR|q2T$J z3TUJF?NyR%vM0Q^Rbjd8UWD{bpSLl}&5x#}JTXaDArs3%-SuO;(f5Ak#v`*s(rb>1 zb^4qcEs}JQ#*c7tD*jF3njRQ0_I9$rf*%uBMt%ci!*D|>vfoIKLfy*HeL`1itL`dcQ;YQi@dic`f>m050?9twPqHEl>`dJf8my*dtc~FTS?Y>UYIfL1OnV z97b~1e2+o{SmY6B72(a?6j^wUI=n+@oO(UmvB!)ZuK%jbi-sAEnwlS@R-c)RztK&6 z;MV}^ltp(4nCI!^A;=jE8n}bKjMarqVa}bwcnlBAeW1^u%DJdRtC~HWaQGNsx)vDY zx^rSDmkTYSJ4vV8%`rD%a)BwS{}_iwLkBOHQPN{(&N!ail0RD zdz7&E*`GcxhUOXKz^w=$sSHqWhW5B*sHfy%C|5oq7OTHCxyz}umf zS;?20D3x>dj0juOK`5%U?=^N5olN)+q`F3}{D4K9Zh!G=vplsu>ZCk&HsCi{+xs&k z!bi`jJf!+Z$kk%XG$%Kuyf|h*^bNVX>x4_D!n&YX=AXuXfbNA2zN%Q36h?2Dou<2U zar`#*k7Ta``vz0{NM^uGPiPJEATgu(zR|Smug|)lK2A*-H{s;F_s;9)$<(q^atF&Y ze<$J7WYiGFct+JQ#|JzPU3p0dgK)p5wt4Jr`1ZeRL;u%#|K6}}39h*_;Xr7}J1ODs z_Yoz^$DNl7Fp|@6WM{G`5`JhSa;wqXnI!=>Ut z!$>EU3G^D%b~+>Qrc|!sQ1l$gSC;Iz&maGc)r{MfyeoeFs2{9!kYj!?+uS-v+w(DN zRQM#k@@y6KJ^pRsAV$FH?p0s71FXebBb!y5X5Hfmdw;fdtCf$l`5mRj4K@3Z2c&%b zG-*CEIZ$**ixM_96);{@x@xrh)g#0Z8EhIuKzYb8CGmQiqoXYUOf$&@xHZIR{_8NEPWm{PbB)R2$!w{zgn=&As1M>RLL&Fjn!AqVEAbwTxx^)oX zgDwM^us*Xx#nJAMD*N^|LqqeJM{fy;ffscQCokvSLJMh>Nu|Kip>KyyG)3An%y628 z`qH-q2tub-0*Ut^cj0Spg%7;9&48&v0B7mn62JZfZU(@+SaRLGT$y)j7vPaByo+-& zF7bJ6j*#x`1Yo27dBY$yzV{`77v;Om0KoGzc-|19 zTV&xC!BxHevdPoJ)i2U>4JXsinA7FFa+A6~DI9Dbry@jkn^l>h^(Yl~o6>zX04Zn} z*BgkQQiJmo70WMxuyS2WAy0$9&MSBd<4U&X^J@@NWAaCdQ&!W0#eur7DmQPLx747% zpJT5H#2jzJHdL=4_k_bUevuGJ%e6i_VU$1l$sf^Y?9+n$QPF>3+hb*pgU5nDbg5Ctmf#3yhE?4#VFqwTh^ddyoQ}6iZx%Y8PZqiB))sRQOUP$cRW-uFNPz+`WleUugEw%(+N8lN=)Y6sZWoyag})Q}vpib3i{^ zV$$)OViOSX?WAus_kk_sK!q4D`gT?V-r!o@3dnVm4N#rRHwt?}skEk)9%Xo>h`Vy3 zx~C82wvZ@LeeZmrR5mGud$4U+#d>EeD?t2E_PlQ$fiGQ0DN-AJvanp<#|AJ>a?4H; zn*uxw#z)lc?waBV1;P8PikcaZ^3Z(C5NBHNt4ddK&tMB54ZV$Ys-1S_AvRUXk2Da6 z%3Z4AtumiCuP=D9w#e!HvL=H!yGgd_dSxn|m#8?nTySTKE_g~#Hc>L%I65*|8LV0* z1xdl>z!x0c(WNYt7|Pw1Hvv+?ekdU+VXg9>Pl^DlcCxB|mJWSY*}3lI_@c}7+eAk# zBFY)S7w;kls8uM$BqF6>)>w%uo{TA*mt#61ev{%o{ff@mhO4kMz?Z^Ha3?h3nQq09 ztZ)Fo1+JnxuNB&dvvzrhY8AE;*W;ME9o$CjBVbM(Fa^b6&&>*L$E+-1tP0FLEok<> zR+aZNinP2OO&(YH<2~-op*WDl3BW{g54l%e0hlw?cdV3npY4X}F{lg$wc@)&cEV5! z&#KEXxS(ekY|4u&5O2AU7O|ck(;FEVfKHtK1E8i$G@Ak)a|Y-9^1?88LRunF>HY2; zTl?pvZyt4X2l4l&r$|TOeR(#-7{@1YNZee83i-b|+Wz0wIs21$1~}9IOaOiaxbmgD zt^dO(|4-6gV1GRQEvClVN`9KOr!~}&glt!APj+(b#7~%=-7_Pd_XIg!dq&HI7V;mI zw?WW5DBK>rZtyx;NM&&Buzf(O4**CYdV@v8?mH3(rmO>c9Z0J(t&|bpo9ZZnxX0-b z=nItMkwImymEvBYmnlqTLoa0+SSud!kzZec&AqO{qLzY5qMjzO#o~B@s>Gv%wU%@h zDCH2W;rAh^b(r5DA7Yb?#LG6kn|FVY$~TAr0L1R9Uu5auftCkRDP8jj7t#DvIln8l z+Cc7HA@r8pwZLn~eELyurXb9Wed`80NCl-2L}*PSfR-;vc&9BCCXSgHH!jNE4F_Oj z8-al9d13J_^iIHDIiFJQvJKt^AaapDPZIfIAXTnOjyk%3o^o4E>>M3J)J%sQqVd=d z<}7S%nnzA3ruTN#m-^ubta9>s0q-CRYX`H<54-d|j6{C-_Q*X=GrN3I{CZ`0mvnOK z{-OS-tUA@|gddc5#2Wan-_V<7-uU9^g^|(eViWrwMLgIr^IdOZHbO3uXf0sREgrJU zl~F_N?=L2qhURYWr9BQ)q4d9X#yT{T7-wM-emHXrJn zDlEUrT?e@;L*C;HihpD6@QjO1P6->Fj+Ch5=);T*kC%vNumSw3R0_n!Y%4J9^o-0l zG#jd08a)`3gV+|@gmGtgqj>8lyLA*g3ERp9=M|jc?g`_N(R(QAlBRfB?lT!47 z>cmaXfJqfrr_xT{7k|hNPw^EEm^R;89B35J>#Dv__yJlev$Aj3 z8bCiAuQ@~K@ zF(O#|fq~1TVw(+*d{sHtngq$_v2yS>3O~+amXm%Jgg@}lj9-7E{Ve}n5il06o#WaZ z8H)Q7-LZYF)jsyCO4SjPh5T1zt{|poUUaEEgRD%rL7vM-AxW17)GB;lYD6LB4X~?; zAAk+hQG9dDV)gw&rj-y^g%PG(Bz9}3JprISkN;p7HLn{wd(Kj)*h7i-L&4pz) z)h%a0R4@vltH1j7)5exEU%y2x1HEn-6o!7*oaR*xIgQ9hEuw`f9nc>&zW?`D;G+r1 z;-~DQjW1Sc4vUfqdAGDdiXG(oH?E9H@>9;KEbK*Dm`tUosl5It{nk~ZNW7S-KVi}` z21wY8nR>T{#eu*tZ=sGJAZv^*nX@(doE`UvXLII{EdTS-WKbip98I>+`0_`M-~{LcqjKVpPaF+Z7WO>-vvhC_ z&;>U%02?uuLQEw8b1EsIhe|8pmZ`p=n*q*)m-XWCWR?B*cXMri|Av0@_3wz+G{r_# z!Xg0;k??fa*vuIm2T<8ga{n0dqxW#s-8JrXKIC8 ztVg^GN|&=P{ke*N)Gv~Oo9_>X1j?fu#6Exg_K$gme@abSylC6q;Bt=cU%cjre=hHC zQOqcyzoxkaFU~)lgNsp?n)Ca8z-K9cEXL7)zpTZ-Ux_lj{$$Ai`SqU@-u>5lE)M_K zMf|xee+*IX3GVPox0*k0%^x!WCiY~Cd8Fo_tBec=G)UXM2eps*Tm{rk05bfm+VXr? zBzOnF>_`)fvvd7v#2T}1#oPJE2^W{=uN(iz-znyxgUufY;`pDVcY#&@ z>n3TT|A&sEKNF+Qlqr4^9@bX!FPki|frRO>t|MxV!a_i~B{o>)Aw@zDrZ8_9L!E%- zNMsL}2FuxAALu`(%zJJn*Ual036Jk0MGnTB62m|*f-vRtWOTAI?Pb+)#WsvqeJWt+ z)K1a_qY;G$+ejg@iwttI`)!Y_td?atGzl@69RnwW?8J2LH&AwGS&#DmuQ%URNVi8~ zdabX^cCHDp0cEY91dYjqzyCuSOS-<_6QN93GDTO++(pIn;&##r+4F3!uFU!z4&fts zFDF<}V&yj6vMNy}y_fL@-AMQS7zF~_8_z8s?B8!zwH^?ZG?Fhp+_`g*u68V8OAC61 zj8ao%LUrEwCO=RU+100)!@g~W8<^j#d8}Pj+aR1bN2CacR;zvPlJKSZ zBkHF`m9^f)-&eCM(fgZ7o+;%pB{VKJ>wvj|ImERd_x{594QVcL3m=j*R>*A6+LY_V zRgL%B4gHS0;aK2>6UV=j1yq}k-e#WQ)pLfqa&KCVWbL(;fmaPtZI8{^EB+ zsypJLAm`M&^Cq`v7X+9fb>I(0am0CFE6_Q!6icj-Kr77GXIJ?TA=Yq|$+MOtm-wYY z>=J~0ZcWH{j7&$5oA&ln#+M$)!=mFL5uxSk99W_*-^y!#&p%t-iob#Lda=VrHaXmh z6jdXa$es^Im2ozVo9cmw24t!3-X_i^K@z|q5mia3bc7%K&Q?1*!wYgP>6aQ8+Y;s0 zKHR)p=(upD11Z*sRO0g58@17}+`Be_rPo&A*rP_H=Z<$18tX5dMa7K5@Pd9y2WyYw z&}YANk|jCOGax}jetvkXA4qEPkMz@fgLm?O6KigqCC`O|NY}+b`6xiL7v@mX7aums zIj+z!1Tz3$<@e$l)N-ObQZp z9Hb0&c_yQU2y3$C7NnMpv0!O6C$e7`)co*io~BMk6nDR8rQTCr#tn-^3-^IXxloqE zti`Q$Sbly=YcPllJNQ8CGYuaumABYdAdOlS?#2brPVCpz7fz)B$B#va`)>NrTHPZp z!94J%L`uhb^?h6R8I>e(rw;fWAxD5iGJtq!cBZV7pn9mZP^i%j3fjtyS!gAc1G>v# z!3`zF7TmV#EU=GNeBUPSv#r>pEK8l(6!7MQaIY7AvL7{&vu^T4D{Hq`!tM@Qb@#o; z3%fW3cNZ7myl*>cO(SVPEF7p$oUsS_Awmc9GEjTrSkr5$r?p1Aoo6R%;E<0WWL@cy z>jX~uBtzExRpm@m(^{QoI{B$ST?CRY`R!||=0P8xmLPI6bsamV41XRB>7o2^5_W*t zc(cNUVxc`x>lyVrk8F9gX+$s=Ks7G)>(Lxp)B_!`9wMC|lv5%x%bA$fh1nBa?-u{! z<}0PQiP|<#t>lXpvx|}|(9j&Tkwg(%R(HqNKGG4Kb(FD&P6?DR&{%FbO4@M%BWwUi zUI46B-rat60X0J3pSY^b(V~q*^&RdnOH@!;ug?xI?Jr=cU-V*Wx6K7MvD#9mM9_eL zla=#&fz=7Rr7Uu&Y`H&WItJ18M4zs_p^YAL|D%XIOqK?E~^2dOA5+L`9XCjHx^H3^0vh%XoYtRhI6t^62nEi}2$ zG#h{-P7o3IvkapMy3=+6{X4-CNi>tKQ?*nx=L$ ztqd_l76^96=>i>rouv#_z5i0+P!&o*pM<&=c94s$mC^+-G-n7J0*^z*#rKB{t}Wc2 zycmLYZm;m`iLB<%_N|vLcLYR&Q5)3ez?chdq1%#KNlktD@%$hzrq1vKz4lzF`a>J5 zcIKJOz5&@4L-Vg_bp;(D>3f)_EW=B5e?i}G%VAZySbPW@4Ri^Z-6`jsn^PNY^O+`g zcLVJ>oJ>sTSK-ZMi1V~6Ao!i(Ji*#kAbe`-)6(Fb#R7L4l-Ut-jj^Wn7i8tAFmn@# zXEwd}qvm%Ohrdj@&0fs`=7qO=>4d577rMH4sCJWLDG#-B9RA^Lg50VV&>-90$+Mbi2#0l^@{cek`g z8p%R+mrt?BPf`e@kjB)!$!FDMR7cQi1dinH0vSxX3oCrpeGcMyy? z&*&4{e)A?Edb~ueCaMSC$EnKN_AxE>l0SO4x7)RJvy@=_AnX1tA0Qtx>C57;@qX67 zt!c(zmo5G=1@G$HzYXvS7288K{N%2ZZ1X*%K~!5}06BI*-N6VD4O!bJxoZjyHak^> z94IwkZlbVhS}XCHh1d>jKatla%Q7tN&mAZD=qtjDtovY<5lZ2qH>K53OnBgKw2 zO)5+pD_(F9gEbZAEs8^F-42t+{2<>9jjTVp-XdQhWG^c5}<@`ascm%cXha>vd9N9bxjirAdH(rk>)t6r3Ic?E+Q@W>!m{^=q^n=@F+LoZ=PT zWO=O=xk3I&yk;efbICwGJ< z9~1W|mUS5E*;d3}#Hd{`hFZ8{4zJBn03_ZrLqZmg^2{8e0V8R*c1+XGHcRiUQ-Oi3VBF zmpr>9~O-r4E+HrCvPq8otxnV)(kU)(`h&@{XV}mKVYZFLK7b z6*gw0iwWtbyHK-}h9FvOodU`AiB+83b@zdVL!9~{l;ssv2DvSoaRd=>HF(6!Q^&Fpe)Z6v50ws{zO4P=cterx~El~ZFx3s z12dOZ!d*Jgg|65GrR&fgLVLwNJ!|}yiFQn<3Ft`m@IjBU4_1y+-ai;rsnfo}{u5HK zwUEE=q6`2YvK#YJ_YxYnB;ZzKdTFwLqC{7f=T709I}Pb(f7jkqLk)I|C9IUJmz{@0 z;uqa46>`W$g>JHwSLxk)Vrq}}d;-h2td)70SI0t*+i!iAIB3EWy<$EDQi%-+ z_yd4LbQlOND>`nF3}p`oS6Nmse2R09G&HdbxPfI&j&{w0McR74mb-Mqtl@@-5!tj+ zS2rq+zaHv&xw!T@_Yq9s*>p6voJg0UYMhsRCirJ|w6Jrpy2WajaLb!9z>_o`1~ZZs z4GqqO4UIFer}s^!2Z*})Kqfo{+}-Ofpu#ZSB>078JL#Y1Br#Tu0`}%@$c?LT5N;|n zTo6mbzPppFHw_&09V8mqDV+i;EUeB7RV(G|)4aId9Vht+Ni?(-JS?BbZ98kH<3}QS z4^5oo<_+grpM7S~4L2}v#ksQtE`Aqj|K~y3Vs#~^#v!ygy^rIb4w@E?7r!RaAy>am zEX`Jy##kxhQMSS{bJE1&Zc&}Di@z_cooFVHJf%gq^xm4C@bI!f6k_tkdj&B_H=#9j zho_yXG<>d)Z@w@=EP8?|xzsVeEYXr@a5r>&(OYI&0WRMx^|9O-Vmlv1RZ$CZcY?K8 z#c5W{8uIz2@zTB>=9qWD8~6p~*sbIYeN`!nbz|AEgekd#)Cv&z8Fm)xSvi?v6~^r? zPA6F7>xeU;wUEnzK4{K6#ChY`8CWm>ZkE#+2W^DDT|h=X#t7 zol=_gbEoW##F;H8!Zm?#>=0!WD1jT?n|>`^C5iHbL7Z}eALH6mrL1H3q)}KGB_10$ z%#zqTT*eE)sioXSYquJPtO~Jh^J}mHcH*nbDcYyF#$Q3%bPCG7=zt8*34|)q8-$Af zpIeRe9KO7=p!x7jD5O^;D^`V zOz=x*7K_mGvPI)*dT8g^!6EJiDZH~K%YPbU{gz%|&a|3!ft92-q1;)n^+~#LDjB@K z=bH42f`Tz9k4=pwOIBy%U?5n6||r;X@e?lRr+qcXETmsW>+vgfzCn-m5sS8KxN za=>LtP|>a!Aj(UW>V{(awMeyKs~Rcy9;9rr+*CYlHd&WiMJ9m^%@OsN&C ztUor^S9jM&5d72Jtgy#MN$ri1>_(hq?}rg|OonM}wXt!ry037<=`wH)`R%OpcdUfR zC<71GYdJjSVZOt?`R&izM!J3#lugO$wa%kLq9tx4$xyiJMKSeegoMblQ3vtWjhA_x zDtyFg#mQ#;+2ZCxH8m$-7|2I49Z*qhZzZL8l<~~`z-v6vhm|1)%TptbY%~qdHq%eX zEtt{g(u+XrH)tSTag@v;9TeanDNHW&LM98EUxiJHPXO!XPXITZA{VEj&b00)!Yc+t zH_F_IYJpeRUeD;C=&;{QHCfNav5N(uH6w;(Cp_2A`k5SZq?LsCw}}6^vkx>6`mmF) zen!BfG@Q|A9wJ{(yR>Tg_SM-ls$zsWz4*R&h63aFSkVvEC7y&_Ch|1O{q>j@ zhV9T*8o3SZwrsfXdg)avF9fw*wzT@OOk^h~MqIVUvE{b#s0-M>G2jUNZj_@pm67Zz zrA85rxWME6K@JM?D+-f)$))WYY^?!N3`8~ITF=Kx&$cU;dIR!@ahxO-`i|;GEeZ%| zA(n=5Wxz$&#A)6u6Yk{cj>X6_ZCebF`)Qb^-fkJDH3BE^CCheVg>F6T+kUU&&{f89 zZSo2GQva$7Nj4364&+$gjv1AV(GVii+{PF4z{p|~26Ua#^)SqgkDS%v27h=fRE-GTfe%~?LbSWL`6mjQ@^dBz z9&+TbxEM&j;ak@F3FyFRkCo8=Q|TqNUap|_kwPcQTfIAGjQY4@rKo`=2A(Gw;6Of< z3ae!9gMOx0!%QM`#2WIsLMG)bB#XPS6Toah(I8TNH~r#5t8J|UWER2|hj>_2B}*5J z?x~5p`a%*i$P%I!hH1+1oEWU2zj)BergCehtk|wCNw`9ro^E9Zl(dMVLEM1+sTFsJ zRX)h@`GZK-4Vw;m)GFgwaXJMtfYVj^5Moxr?PWX*{Z?W8rir;!xWb*?Y7jjE zi%9A%K_4CgfYDc#Z481;C*#rtU5$jXm@J3^Ny3o;F6)+A&8y7!K>K0U;ZDyrnQxHLO$$+Uc9!=?6>A*C7QCwr#XYK9i0l>@)M?miD8GX7*_$}q; zs-r=tVzZo`0;}HtSRZ8aWTjd2@~Q21%TEEDJgl^buqnl(+pyCn6PfIVx-`s^Q(Gk!BZ zkX{X~BpE;fL0O!nU6^r^?7GBxo-686R%fu+GOsN>0QnI~tVtxePBcxzC=B$4F>Zda zymj_Baq`(##;X>Bc1bDqLs6IsGj=xnQSK1Ir7Cny3-PKyUG0!>mIZae7Km<^7Ym4) zrM2N#{mKv#{Yy)QtFr?VdoEZ8t(?8|RV8^RTVMuW;)zNfc3)r-N=C)H0!=`NesbM3 zJgQh-8WB28Y8Z4f1z`;*9NyN|<-Ik&FLsza{^JP%2azqi;$=z%Q551mOZ%;`C{+@_ z4)z2wvD@rF=25^=8KbaJD{C65dp6IBL zQ@_poj5Z7$s+N?#&rNsgbTqFc8jUXKD(KgnBg}O(z#E~XT3sw0NkSil3-E24LqQ!sHybKoS3 zCjndG^3;lQf@^8X8&QGuc{O5~-7BX6hw9e^6`HloUXWY=n>r1~^HKS-u50YEX`ssgS$kgyBu z-~Ohc-RPm#6o2quH?#(-o%*p%SsSb(U-z=qDrN>{0F0_!4mw}C4`KE6%q`O=PcR%Y z-Tz>f^nX>^L6$)!mrnhbD2s-|d=-bOwWeWk;blV(!DU;Io)g%Z)BG~OEFIJ3N7!v* z?QJu+*ce~ao_^Vl%Gl;9l>!8}vUJ=qgi_S$cv8Ya#VdfaIKXI^Rd>HnR()XZo!!lB z-%3&JC~BD(0v}2pHXVanU<0pG{5>t9mL$g8J+a5RK^bon<9~y%fM(7e*P1~cu|pOz zE_hPA$?-MKheAj*&mLnGg?A+9fZ#M}~ zmL&%XT+XzK$#%LOCDEw9hWy~e^jf&@^bORx@!;N$;Bs-QgxtE;v6wnqCj~A7K{u4; z)&a!S#ez`(3A7=s$ps-g@nx0dZuuLmC@6B){wKkKDuA2~BltU6I=32S_MI>v zXLXp=v6Xij=56MxK|_=%XR`-^F{hhd?loxcY{AzB0H=FwX& zdSU8^*w3}dkMp!Dq*+Iyfy_SrdOBtS8_($ug~W~YDf^AvLiGTs&fj~eT3GZ7S#119 z@&+gm79Mvd&`r-%ch90cnw*yiMl@|I@LK?r@dU$bYeVeFi@0zqSz8$cAvqFV;*cRV zuD@`Q|6SMQx-sL@OqM*;zU#nOl{c~9+VomHn9FDY?tMpt^ABYFU=Ec>S?vk$YSrg- zHjnh2Erm=MGZLVC#sqsgNzWwQTz6UZ!uwa5ea<_u=F(;&xP?>DbzMyU4|1!cgE);& zSrGxdPaX4*x3kF73zNfdNlP+h6nK5Z6>g1vw++ZNw8iH`;ULvT$tJxsft9E|v0tH59-j3USM06zhT0}4AH`y<86 z(5#~XX=TG%E2|^}HZmSc^*o)}RX0eT?~{<{6ADQDje#>DGVQiY&6wy%-X2kxV;Kvy z^d}hB+$OT^QCE*5-IUH+pL}y+Wke)ka}|30oBsSav2An4Kh1Zn&P@ik^)AgCh^JI% z9~?Tdel!hkKqy2}uwx$bw5|YMk5CA4avmjb@o-x()JnGO_#91vV|+4E>5Wcs&rbMQahy! z)Q=MOEV7;dIZ!+p=;q=;QDC5MFp!>y@?Qh}@32N23I6qJ>BdL*m$lzMhjBgLLpn~I z@B#przd8VLFVQ2IYAJ#F=bC54-v)85X^r<#^Db=V$I0=qqC%Bx{X1mdN#0ab@@Us4 zwQN(U&{DE%Hh?YnAHpCYcQeA3MhS7vrHOXr&0M3_?sMv9dRJ|sx^ms|_Xjng`_Ey} zg-Gj%FKAMGs2ckr@YwFnPV);0W^&{2_wftTnbdjog8eHi0lo@!EIHD2MnAMB$=NE+ zQqGSb!3_n#rgNxh!+G{?y29wj6H>o$q?r4y`A_K{aT1!pPxGPdUe+rUz*XmRt!wW{ z{F-+P+TK$GvL}NJ9*jx4ANIA&GcgN1@f6x!Kyb(NTc558au0{U9W&i#T8Rxx2YJ4l z;!cK6>(zj=WNad7eUqQJ#djM^S`Fxj;%9u26Hp0U3tGV7y*HT>+L!^wKUHYePZdAH zvG}LQowZy1>-1mcJ=afYBx--z32dOjY1JiJp^Xcha(R0SFBIzGu!SXLX`Iu89=)rJ z(1z*Itw2;gDw}CZBn~_GT!7rGwz*69Amp(fS=@KM=-$?d0Ids1mmJc@H*E#&`33ET zgzqh?8fQH_%yzj$Y*7aw(tYRIzeJ$edMfV054aa~KPiV9AXU)P^b69Sp;+1kTIoEz zsxgf_`kYH{-RjqW$pqrJyGLT&=&L3dVkdKwGcR0pCQ0K6*^TuV>GGM_skypc$APq+ zRAqP$3hzcgH5O!;{Syk>0x|ZL%6T=3*0WY<7#tRttpuu%b z(|+7yu2(-!QSNns7zbn|Y7#q73=wSQx>ce3W6rR{fBo!<*QST^XLmN>u@j}YJtXQT zlnqp*bx{9FPcY+w4W*}EFXT`OfsgCIIZ69;KslGT^o{_kEL(-b3how<)n$03=b^OV zBLVX9i~U;4cm;-sTjRBrD#^*eyb9Fepw2F5pF-e!-?C4uMLn6-fsbVMV6Ph#HXN(& z>OCs4h#WaiFQG!xJt2>!OCL8jp|^}JAd9`T9J3f9t8ROa{R+)riH%BEto=+hN2SRK z&J+FZvm-W)0!tJAtLI#(&Y3bo=14#^nbtXJytUfaBKae3m>tarP3JrtRbK?s2kdA( zt(KW9?c!|pGx32_FX!{4yrsyK%975Ok(Q8E= z8KfsoBj=8j*0oGD!67pMsXw3>ILHGI|KCaY{d$A<6?Ae4;`E-2C<|$h+ZM-c$`j!*(#GN zhxd^oIg@b`db&=Gfh2o0J{Le!a^y8dYsb5j`!ZOm+O%@*;#@4B4VVkDkV!NoaoROflVY#d~)wyMlhR*+UTkq&rg9Q6mehG|K%S`RvLQC{~ohI=HK zQq9hX?__%{=)EwBONa?btde*WtWMGDN(R!+m1WP7 zZ=cFuCF6`4tCCFATRii39kBX_G{(33c{6galJ19JD~pm}(X_Q|%5lT%iw(SnD_90$Rrpa|M|mLFFHkR)02&5Rd_tpa4Y$pe5-L7SBU zx!T|LUcsFF0v3)A2^;K5i)}2OcL;4K>&WS29KfzZ6_xro);n?*reepjITt}m9dc79 zqkHQ{gHW}3=^mzh3AdZlIg_P$&ZN&3fP~@9X;qye%I#p(!+moRSAfQ1QZviOa}F2? ztausY9b$R6%z5;e`)cgmUZ*N(kBA*8(&;6GXd?JNwz2Q&f=cGD<=UJlXwW7JlOEcD z-ppz@xavG=OR-^+MIMl6*ROn~GIrW=JlaC#ny+HJK-|{Q+M~ra3YUa{l-%t57`*Jn z%gKZ_d4k^b>&psn0a8xsZxS3x>61}%aetl8vsij2XqD30@6>yBQ~UTxG04mRvd!uq zyr$Cw-qPx)i96rMJmX3RA#ssDh>^G(9V?)vhLEadS`XwkxivO>7>#?9?o2#xtGqu$ zGT?b*)B|r;IkeQ%%*GUB%<4`#IyQ&vJCa7NR(%RpVaD*FS5{!Kqtd~zs3d5bkyHxa zxNv1{rYZhi!-|&5I98;uZ<-f2BXz-5+{$J9f!%a&I0h2@n20gUg}1V^O(i7Cxg5(i-$Rr=KU5 zw$eWo&9=xUI_@)1xDT)q&Xej2hpwt}$(c1j8)(2B=WRl_@{nvY+pf9LW-u@0q3Njm z3!u42i9~8f*$AG+3#3&nYastS|?Z3svVJ2Hc25b%>`Ai{yB_+&s2l zNc`URQP-@+xH7XA#V=NZ4L%dnTetKiFLp8idN!DjDk-fBT<9^JPOKW;$NZd?xey+sDjawWS#m{`>$!#D_c?Fm4~ zC-#=-*M4g@5)?Ds8R-OtDUKxUX!=L%vcj717c@mwLFYICj@;OadB;`rxVdo2_>J}B z@nTAvr3PD36x?xV@IA#lZL*kmkfii9b|%RuvqbBM=g|O5v1fe8$pX@m8}9}dAuSH8 zW6-}D?zzrBT9nY<^C>3ShsNiFhoq9AW-YiNVD2%HIIy38Df_CjNh$70qD^cuHUnK% z4!NBl3BT;0h<@Tv7#$bsbR{eYoU2Qyu+VSD5;n%1!4-Q27g2-MDi`b$eMcQ$L)X`p z5fGQ)&S){ZHo$|B(gi=IL&}0|#(}zX*oRi{P+PvB)nrRw%B&o0WQBT;XCJ9^-Cff9 ziT8SxAIG!ctz+E;N(AAxiJ-e)ieb z?DovNXMC>gVAga}0%0Z%R2y=-6b4O(Usb;C33S--+%O_^q;?*LmGa3#pnolI%|q$$ zMgKU8#>?tllB|Y)m4A0<2sf=B{%gyaXWmEA@Vxnim~+P&L3@W$n~UG!u}SUsGkr~% zFEJf2!B$ft-6K@izDAEBgNOq6DnVeTW4rqF4ed8HgSk;??jn0&BV`cZ#XT%|^oAM* zaFwx74Oku408ZcyR0F28g1Nub!Tr1WB;`U|Ut{&lmF4co@`c|~f|C1F>E3|}Cwp`s z32H0IsH$j>N5!ULqA?KhxSOrXHUKKVS4G5+zyMM&%GpyoO-}PDEvMA2PE5uQWAo*JYD-fblY#8& zAbr)Csa9;Cm?Dw(5ND7?Zfc!W+QFPu&rI#?yHsF{8%_aj$k&QMu)fC-Ya_R^xh9jF@MKs&xnADp^|c4c*iT{}6e=5&AhACq@Y*mapW7ZiG2EgRjyC z%WdpRT4!c_nsl&xL+Epko@`bu{|e^7=&zk~L|}UKF+It`yH~CSQ!A!b&%&*ubpQzG zd6G)qPn6HlZ{#yQ1&AZUN5$Xeu7XnsmAEUGM(-&m{}*R(9@NzNh7D_}Ql%J`DhfiX zB2-amE0D^PXw_1{G%B*lmRc8QF->vhFVsIEbdnK-z2!Zv& zFxcGU=KM-*Fa5=mKfJvr zA@Z8jw}D?1cUjG!!hl}wGOI?WjFJy2OJk$;1!aXf(I^q!(~Gx=chPEX1@@Qje={DR z|HVUVB{T;ygDNT&E{D4uW{pn9!@{Vtpgqj|4>scH!(TD&Z?cg+dBSJ)Ug;(w$vau# z8h`z`=j_x=(bSXrh*H+KE#n_y5c?4T-sBih_Zw}P%dKODb-ru~lO z=h^eD?#Y5L=Y|Ma_+LZ$(d%j;rR^zr-BfMvx7hP10ib?%C+&TzXFYiFKo?*z!#Kf@ z{lYPD+vQp0yBp^kk=ovKN_StwKZD6@_!ktX2?%v$F6`lD8O&&bRlilLzJAI6A5Qx*;)Hv{W#Ga9eF5{5EakM|Abr)z zo+Yohp*0|T;nMINeO55UY0|HCL$oA>bg(<01yKrl6JSZcf=UA!^1e4hM_LrZtFfoz z;UlA;$rF8aw^dg)JYXS65a#ZzYrG$h3}Je?aK!*R1esA`(1sWa!r!@^^?mybw^wIf zAAzd(5dG0TPj~p05L0=HS>2E;^husOSKmLs%SJU_bpxv)_J91a)+Uu~Td4N2d(>g} zT{J4khNp|=62z;k-Ojht2L!dE+{ahvs)7Tigy_Ke^r8h8bFORvA6q5nMm^O?Z8y;Z za%;aGtWG$dliGi}7r4jQK6!-Vy-I`sTLqBzRZlmVO5B?pT_pPjeg{LOW=?rgjUdIP zn3dIq5tm|&leUF{{DDP6!-4NA?6%H*oU6D{Pnny~p4~03`h?4+v;T1Av?C21aAqW` z_P0bm4x7clIDQS~viT!mZu$ADHx-D(oUf%9O`8oT7xd@N+-RHl4M;$wG8+|pLN&dc zJG{F}UU3Iqn%FQ?)6uA_e!9Vi3w`E*jmGj1IB195TcX2@UzyKZ60ITaTy<2^<|$5} z=0M7`ct9ZQ_l}qIC{C)l3Z7RZ^-N{Ty!}$#7q80C(&omlLa!%3W66)kMkp8BD(=%P zF^%(nS!!rxL;7fNy#1oy%lCcN?lM)q72`K6%;$|IbR=NoR$K=Z>f{ovlH z3+RUDoG$--q~SLk_~v2Dv!U8U>S#~l@sEvgss1nOgk6ftWd_X9b-_ur5er){f#d8? zpJ(y}PJ1SJaNC=H`KOZDa)%(A%N>)()QlK(Lhf|HtID3JvP=K?&sAW0TBZ+M5+%6n zO6O11qHtf4pfd05SsBj$m%9E58x+@*?a_Y}Ww>gTV}Uh-Xb+t|(kyY1(1^Sz>Co>+sjT%xmtCCeARu z0{^{mD7g#M2d|%u3691I&SlNmotFG?DKWGUJ)W-WW`-HOV;z*^j>|irx z%EH6LpQ_uiKfOopv19!}pMHpzxCryeU&tTxZn6wN|Gr=UC^1v(CF%f;Oq{SVK5Bhi zx(Y+Rxaq%D{4>LgtGQC-dWTY~MbYhNxpRVr(2Oet16VSlU###&^tZHJ%eBJ#4o4l; z9np95!129^0$*~-QcXK@^GP(>Bcf;?WXvH?tl+`CBWu&j-e+% zCJ5#63QOsV1V>Hyamn9)7`^VEAoa}e3m?T8JSgQcbq2K)8*!+PLZK-G~6Y_7u_ zif+XID?6a`VBke9h(}LQwSglz^_m2~tXFP}fXc|8G)Pyc%HRH?z84yiF$}Pn*(zd9 zkHb_A&N!Y5QLkoHCr1RRb9a?p}?j9=7z5AVAOgqrkd4%kco9 zo~IzIf_R`$@&Zj;A>MB!6LMJm{MuK?w9ND1aA;oSU5D^RSx4awC&4E z-^brcSB*MCH5r@4}{mGb$q_J5+yiJ|HGl& zg=7`E0pA^*hIK3Efw27-* zo;Ku)KX-sOhSvw@6u?D!*k5TodtwIeWh`R`#eUVY^cv?(s*G$)Jom!GF*`}41vkKP zcd#-4u47@Q|L_jW9C>}SfOp)hL4VY@zDxYRrXI{tPMTtg?1m=pp6ki%!h-VY&0w=> z`6LrFiL2611;^cGoeCWhBg6#fhcT5^*!kskjiRg(XsgXVhiyy#Wfe1;>ik#P;+fJr^dtwY)DUf5i8^8(RzR|whGT- z=ElT9JD}}k%)uj7pnQ68U>;60dvdMn)=J-kJbKfUe+q6z3@#uOfyMHTr33a7E79W{ zfxPF^lQWzfaVxBogdLl`ZK#Q0Jf+W^R=-yCL6;x|6duoys2|sm55{*CVB_IC9GU*j zB#R)w*3xeFr%5outo7b)n@1X-71%#RU(NW5s&Dh8gc)Y4TShKFmZZ&M3*hq61{#U{ zC;g|o`Cz`jez;m4UDO^|7!njTB#zj+arxUJoRcc1;tfzV@A-dnnjby6y{a_!+LM~@ z6X0x_QhvY2*;-b?vP~?bWaXv2C+-=mXy76ooDawzg2iX=fB$XY`^_rE2?6?>vy&RThb69d3h6It;N>L}Z0MFCy2Fphwq|nbfjN-) z)!A~#Q$W$7N8wHNI`5QbQFv)qc*o`l&`Govh4&ZoX705t}flTV>~f+3Co z*;SaEcJ?~+UuDMc|5=EnOsR%;!XG!OUaO?GToz8z3=+J|+*4WhqaCbMiN*eu8qwJM z`E&j7kQHS4P`BOjqaa(5Yvsk8;mx=J%56Ttq#>Ahb|I1VIx%+3=W2Se1!FM>}Dn`2Qe(ERL+0?E%Z z(D1?Qm%h?20-^W+yKmnAr&&R~ds|}!Y);wzBY#fNOiB0%uJBry84^HD0h4GcVFb1T z>dYjou#R&{3jrNQ%L3sCbjJatcIvcYmb$d1Ue!Y1FqONVsYoe?FlmlfHMF3fOE@$S zQWP8()VDWVc&b{aCFQtaFa173-(@C#*sZ!F7_a-LbDy>u-{&l-EG2k1@^Z7w7YF8^ z(bOOldJELdSySdH2bcY1MG&*G|JToE4eOrpZtBs2*OlMD$$;8 z6xi?NFWH(imM{Q{`OJ5yKv@v3s1&ya3^x|?jNgK4(@vNVH~kj;BOn`3DRle0?_Yl! z)-Z>D`z)xSx0bgc!_~2?Y}5y$ibjLOI=%Yon%(5x4t$jTs+3{;Dcv`?DLZO4oyt z6_V)@GDiLwU0Fz~4f*hF;Zb;X>Gqm{hLuM18g+zXixn~{m)=73l3id7>^OV%`a)`2 zHTZ3Af6(peVd6JOm|ZHGz#6c#|667Co(ebUHA~Q!BI=jAn4XwB=mYi+`So=f>ftD@ zt-HV4rXV5&!Cy2_)Hb4KOk9;h0pnE|K1uVQPu?w|&r&x|U(Nq+8W)*;>G6X8EfFk! zVtxjo$~DmUegQ!Ir6_#Iu<}|)&@wdlrI6?AY@ZfMwvAGtC)z|e#X&RmW@jEj&-S^1 z5H0wP#=0GQCBLO8qzYe@F+RvUNYN~~*(iVScE};T4<`E3kKZRcTde*h{v79f>Q0_$ zI_U?sSaK(vg`*TsW}glWK3Wiw_yC-t%m%F#u zP!@rR+&OOMzg2kwYMlRvIgm|vIwJ&V{+1S2NUBSNLnOPFlRXZ1^t>ISfXL+C(8$vb zN5`1@EIFs|qF^cNdnqw@o6con7-($c?Qg)ggp<0x^*)@Q3)vGPaO=x@;m-cVNGfnF zEFDO)BJY2xPQOwFn(c_;Nl|&KhBoVrv%7#BE7K!KE~lR#(R;TDO;K?QsW+vBP$wqO zqE?uGNmXj2Pp-q$O{VZ_b;HPj3)MtSx`mB;f&CPLTi|LjH|mUR>1LqRA;|V){yIY9 zm11cCLwUX_4t_S8O`%7F9KVn)`rJjvhUq5(ox`=Iq|`H2$)mLyr)U$$5GEXsU9=hRW?6r|d=M|VV?=dQ49ES0_*9E{gg z(DYdjS2!#2cA3SCP;$L56)dOz^bYcf%>!L(=s-MGhny9-velHEf2(&>N(R~`xG$xm zoVF@`YNFCV)|Sfo-kG=z{__eKZpZ<}mvP8#o5g+toy)eOYW&*%u(p$tG$EX8~;_6O{B|#Hm@Hxao0-&hQPkHDIH+%O=fvb<=CO0F((x!nQ6KvX%ZNAMKpcx?a@SkAY zcGGXk0sKO~BWEkVsYI;5{R!)7k^NIU>=K~a+&=n=x}m&W{Nl;c@?#H%+CW7auRtBu z(_$Kt-h6;3-?|yduI67R>s@}Sr<0v}k^kaR_3`e1knQ8;3r*tfOG5{_3GXt!N^s+Y z!9eo}qmEVZPSd%tgCaF~aU09$O8%5EdslD>B~u1;Ig?9+L1dF|8AEqk0xy9&w%Ph^ zr=yj=U3(b>X&yN*pYY_9j}%2HWml9mbE{X$7BDs)oMk|Q`}(0I!M9FAa>$pjX{$wv zIMsB}J>9zDE{+`sU%}C9rpZP{QrKAC7(JS<3yfui|2`E$z9!_cDOwFjyT!g0XGkKp zpf~q~NO)%(618CKn6GhlnJX`ZHNJ+gp>;t+B#E}wII0YsGB3*gsgsi&1BYOH4`vNYC?pzB43L+_ z6QHnP&YQjdUgy@m#8|EKWy_hL8YvRvee*5aU-rtx6Dd(zr#<$w1|?_P2^R}H%hf5( z($EF=+tD-Pgeg6^ch1>%Uyzrl>Z~Doh777Hp!c!kmYs-Tl;9$7K4GH;`m9SMcG&LIBCHOSF!7R9{NVd)O_R5^0Jaw{+XkRPK9e~6X(2oi) z+BBV!LpR7liim)s+m4N%ougWx1sOdQ$lJ4;!>*wZ$ayKc-D7p+C`u_lA_QCh@ve+5 zh?42n=`|OXmC!S(rDGlcQ+D&z(wz$nyWueqyA=b>9pF{{Q#DDZy|KYwXa2eIzTeVf zgEUH66AdLbM0t(O-6YrNaRzFoe(8y*C*TF<&-t2An+=WPo=rn$EU*vOStq32ESQ{o zP;j4$$~@SqBVts1ZF&%6)<8nY*`S@x_Dk1cfxx#pT}k;2>HNkNx2yq8ulBJt=^OQ$ za}s+K>$;-pgxVAaK6Jpuo%UNuq?RV7rh%hG*&Wn-nQ=gOv~0==HT7!YmulJtQ+vIt zRK03M*c1nhFchPdc-GP4rdX%@ne5U55uuBB0T6ib?E=39s z2lWTM3{*ZM_|Ki&n}bn4z+0hYKDqC7lcX_16EbI%G?GRjbIQj>wF4 z$LbWxOM2PBW^)>HIX2srLciLG0}4!o8P`L`vH@meAQ$ELZ6iapuA#cG# zYx+r%od^5RcJBCh9(t*jzNWWlGiy>uT?QIv-L=+kG_(*Y2AB9CgGM$SYxMI}VD2m? zV!c`)g?EfjF^$4qPtYu^abunu?{>B!Uk8m&=h&VWE6?U2$)V@-iUwmUTw0(i{e9{S zJYH(K6X?(5aWSOOXJ zzP)qcyrh77n}q{JPM^8twf9v{zM>e6GzmABWh=~6<3V;f9uanfK&=X+p+T{1)7t*2 zK+b3jNO!ox+6RQ}!g~ZVRjGGwi+V691LBJT1MiW)#pl$fqjjGkv{w`=aRpnTO}{4F zD!jR{wZb}6Qu;HQ823UvxNLvkg0AyKcXH;Smn*vBUbK;%Lcht{U8GLn$0;d)qdnuP z3o{k_+D8JyEDun9x>79A%dEtD9`+-h!g$+ zeMN&1C=cw%hWA+K?9w3Y0 zBN(%OUa+jQ@KPpr=WF+iLeqe?jI`f1tD@`@ICOu4Lv?la#|&wJic3u8thcvY@~iB% zw|BzET4B&U6^0WK@;#r4|7?o0QD@`SkXR9ZFpLwKf<3NV9?jzMz$C=*=)r`F5yK?+ z<8tkA#HpryPF8r_m+GuNONEo1&tmRaAh-cO%HkK(nE~_hD3p+&1OyPU1UQC0n@dc7 zEBRr&E|3uxm(dpxak_~RHFBY`2CE(QcnFpq+Qr;0eDXQK&@fO7WNis4<@$n3#{*7K zuA#e@W}-%dQ7MseLu9R^x;c4af&rt|o5 z_kPtkUn@8p2q+EW9WUzS>m)1$PaB2f92{?K@hp8&yFe{ z!+FIak=bn^a`n%n2rW_H4M^J@E_ zYivTx@ej0CGyh}2uXs8q1JvACOb5;_XX9Mji@u{u>Z{=hyok7is)J_yuIvbpGP4mM z>ocKjQvVpTJmTE0EN8U2*wVL7n|;cN$gojHCJ;b+cR6310o8^iN_e+5!Yk<4!BAE8{MHISeTeu1tPvv?ou1USq`A zj4KPv-6zo5Wgd)Q@Sm!(d3X@q(4pFx!y8V2p~ESRBp(G?u@Z};NBHH{iGls)`|;;l zD{87a??sFmp*CPc=I9s9t^X*F0WBPHrRbxyvxNiD4uqD-~zyO9VfFhU+WEhx*RQ>{2HjU znV2Z;ndr#u?O+XW!FfG!L4G%T!!rpb^mKhZOC5Ws7zABGN=wGfUoC@&aQ$L#HdjGykg;O#LEsi%ZLMZO;Y5l>LKsu`fD`1+7}%q{+OIl z21`8k0`w9e40FgQ8+wzrOlBi)@_iIe%r#n;(D^Y##snk*&zmjI6Ze?B)PSWFIwCFV zz&Y9l=O?8bI=wp}&UlfkyKxusdJSLgDRifCod<^dJ0}7OxpA5Z43J#C-Zu!Xw;z+A zfRQ+07ZVXToXyAq)E&UMqj|)Z43YPMnIGe?*pQzd|KBPTPAyrJ4{!^!T~Jb^*GR$8 zU3e{1yS2DjDt1}!CKytB?Dg%SrK>!zHZ`Uui{1HTTt#>$50w*L5zq-gzPfV%pC3W4 z>DRe*!7X76!5t36l+Hz&_H7njJ)C}h{E8Y1QP-A{Qn?uUUlB=`)MKn{L32Ac%a#5R ztrb8zE6bhgVhPT`A4ok$XPseDIAb?cyWkAf1{bBXSBHz*Z`%kWml^|qM9J71{x9^6 zL7)p7vSp->R-}V87gL|wRcrFS<|lPRd{Rw6`Niif&2AAOVuo22bR|0 zoyWV7?G?VYplW`cqvlCNtb5u0p$-5^UKitH@*Xx!)!)`&TG`uQDpFDtpGU0DHKH$1 z0D)WmC~LRe!qqljSxVhPaISg!lJzYw7NtwH(Qa8|87qGy^Ld2Z8h9Kuv$!1;P@*I_ z31YB?11AQav9u7{RWnkDZ4)Vp+%7d^JdqY0t-lB`Ar@xFFCXBWkw z3#2Hf*Axf3L|<&ndX~f!Y;{h0wxP6KnzW~pg{2lp*lWjez=-`dz53T>v-Vcp#-oL` zX+)MAA#dPEnI#RyJ6KNvP4sX7OzC{a*6H?)mhTg{GL!@0Qp6T@7P~Jje<+ggi6Tcb z<*HPjM?Q87{mw{lcmJjd`8yYwzaDzKy%axc-$aTcn>@!>Gz(C^W`Bx0nPo%}u+X`9 z_*DfBtRItAxsF|8t}3CEp(FrjGtnJcVrW^Zma&Dz<3fn)Z*<;?h5ZrrMm)&MP{jj{ z8T;{Uc6-YZiW}#Aud}6dhw6#=BJC|SQsN6(Qxscn_J&fEK}zlMmoP7NV%e3hoW@rl z855v)DF8kI^rt^oI8JBH6$&s_CP8$4Tn5|%5QGD`>t!OUY@s`kI z%>ulP)N^D4PAkJuO*}5I$cs)aj1cnT<0guf0r5g#KEw+nJX9Nvn)a|Rf=~aqKvME- zqs|=NZPAt%X}W< zwR_-f^YJnW^odpadKtWje5gvDUeH8{Ee@WlJ;}+5iaYPr@enxXRN&q9xibz2Z2VJk z3d_p1l_k6O2LmrUEkx7Hh-WI?=`-qlAO>pbv@63hTI3Z@f6g6OMcJMQMxH9 z)l;szA61SS-B10craMz@!V55aT;|RDlAn( z>NWl!;B}PL7H2_vDXBJ4ao|ZMqMxqyBrffRTQ?f~(Zj-w83VkzqJSWABL+}>w}tjv zfnkvP;#@!AOLc@4$#WAeyk1{B2{gee<;cPKCA?aLQ(Dp`)D*Chv)tUhXo2B6(^H@F zuf?MRqIKF$nEOoE)gy_BRp5d3*B~7EGO>dS$M&EDFnP>WgsxN&unK&dxHTc=RyIE8 z;szSQ`Yrw;S|=9gH6>XKz82`r&uuL|IK>-Huefv%eJnl$4)i-Oq4vvgLLk1C7!!f$ zTJN(SKP51Uy#G-wYrGteUl(JsZ^4UIn@C+Ww$*O!M}a2E>}$h&ed>(XkS%KL3-$b1 zNTV>ev?Et!Zi;=-OaroW4Cf3Bp)lv74cWbB!${MiN!hO|2IfwA4FE%4gCS^;5syzX zb0K{;(frG+nukt$#%|q|4pbTEH*$OvL;ce%(<{oaHDKcQe#Yp0h|r&w#076)+Uhn= zbMSe1W2bjuj}EE`2Ig+wZtpfa$0MDIAUS;u&x&UHq%Q{SNEsXdtvbEYnnGT^oHh{keyp=Q0P0xAc-dS`!K{iQ>Ar?7|LI{G{j;-9>yzA*k)&w?{(AQa zx59vb&O6zIUVd;bomwYVi63cNK%t&dmGy-Ip)2>bqkt?1;56ZOkU6IS**#EUW-G($}-WftQ=WYYs>|3d10WyNc z2G^$SQp_@DWDEE`$VbXZH=99I5_wj74Xg#~`lIxv8#(|^R~oWgZBsa%jm`9P zNx{N!xNk<}4Weo~Lx^6-li)z(=cB9~9Uu@suc;9@6!pykHurAb>36~BTSJ_vO`4E& z({xMznN%*lA0y%{h*nU$f%5X-+5^?GjEE%jl_vnwVlvCZ{ZJK}yR=U=G4O)RGUsa&g0^r));r#3avgJDCRpu-J7MK(wZ9ZAU~1`O7{eWHiR#DisJh<)?uPus)fO6YLEcLk zrb__7Ln)e%qDRnHh8{pb-!koNKO-xg5gciF*1c-1T~6;f)dbBK3;vx~rMg*xkB?6ZE#F9Z#>qo4S`|shqD&u=T(ZsQ+e7P@T?ZB(_X3#mdrZcy zF}Vnf>SK2*?GHjSWhAWkNA4%lB&u5#%yREGXh85#o$A?pYX8@CS^hU#OS47#U1vca zC4Lk@C|)7e@-r`&#h2x8$TAe@vL$}`QxFhnpC6rEq|PL6H<^L)e=9pCC_I_)yOJax zd?}NVFCw*s@Ez`4=vV%1t$$mjvi!qsEB|B_wPkPY)_nSJKga3I#gJ|TJG2XYqy^-l zZX`~~I$Indt+oGBJg{+wKZM~J3A=#u=WckVny59L8F1j(bdYw#&Lggew1@h_5+2{} zR?`D}%VUIq$R6vYKKB%1OVV9}jTMM{G|>KM)^8|9_051&_q=mGW)PC;H5#0jj4%X? zmEfQ~`NYtPP8aYhcld{n+NFbw{W4<|yI@T(c{eBHB+4M5-@Q<-cW=2SqNZHxi7WBK0QT0JP!$vk65r zoYCp&J3W;1{?wK@3`Y663G^J)DDm@OqZ6J`86=rxGl<^V5|OYq9g+GhYpik^#nB>y z-e;5n#!nO5TrtbLO|)Zp`(VEjA=FFRCf2;~fKa@XVsc)t^5T;{q8V1*jSGF&bhwSH zeVhqUP23S`lX7@Fz-1_QqJ`NPpwxb>0RyYXVx#?E^B7CgLhGqMlHNfdKVw(Uv?T-{ z8ei7^2}rr6U5n6Wl3}~D7t;p@(oFGH7>t?m<-#4=%_`sN6hsiYDLr$TH5i{{&chsIWR z3c(y8wg_M}8QW=bANJ2M&1bE#n{?BJQa>%2>$<-FL5yfG1K7Z3mS1$Sx<+DbawH4g zxr10~G7dYBRui|1`*kPzPr=$Fm=a!gLRot-;^oY%Wgr1G1r$q_?W8#}B>_#3t>DP4 zuyNz8lu+<}XA7!LnPZ^yP;3A; z&}NT$%JO%6EuRA{(Op~xIHE}n{$vb;yr)jCWTI|^+SXJSRFKnIz99RVEF1Hjt(M&g z*mF;oZZT&!x7e9DL37WIQi3^EeC&m*g?tyUNs~G7QOG22WMLE&gpy9S5g-y*9R5{j z!e`1h5k#uASgOg8n1xyh4D<)r?&OQde076gqg+g_zS9x|wu=uvjCombfrZI9Qtm7z zBS#t#YxQx1!euqfTaMJul?Qp5g|Zfrmgs+u`3;0qtpI ztp4Uxu;n^R$uGLiux`{|#mGi$a6n)gD`PTJIr0bUqwr?)X^@5`G9QTYT~_hdyR1;t z6vF0UWLv=2oFaYU7_Odw3f=Ldk0S#!MYMj!Y7{Y*fJ$*R-lv4M!SvJEj0opHX>)i! ztS)^(zDPOGHI);R3~Fw#V0qnQfm_Xq4=l5KC3kbsv_B+6Kw_S81`&t1~;{@8v_w*!F zSmX0K!igci3$_PMjcKd~Y_QTQ^4Cd}M@}W_FnlF(7X7rWr?j z6B|v0iypjGV#Z0JY^$OHy5|d0X%MF&WrA1JYgY(D_W(fRSB<%z?VFk>RSFZ@ib}C1 zGg@r#f-J7A?(k@g8-@!T^|BBWLj_h@pDndA)x?T5$v~)WBln9|WcYHJQHCwR#5DYS zf)Mjt;w0?xa3u#ycs5o(->eZIOYtSDGuYaQPi%BRm@32s5PNxN8mRBZMw8)e>B?_* zojc{^tZEUP2a~RV(7m!LdS6D!E<9TM0ne&Xa8v?;W2a!43x78UEnBw zGwJmF$^bb}N*TCR@Ht>MAwxBj-fD0ett>(I33!2bP70RpMNIqDc-hh#rfNGY(I2mQ zlQz5$ci7w4IT6O$Q_BNAf%qw6m!3v80Jpz5oduDymE{oUG%47QPA0-40BP7z+2S$k zj-w-l0|~O04+W{BOZAnMOdJQ$?x5tP9ewK1*6g<0bI>(~6gS~^=f73O?w~N203nS> z5&6d_f(fms>c`$F_NTl;c1O)g!(2i(;KgvZPSK4sTKxo0z6rzuyI6nm#oo7^f7977 z$=(c7QB#tkkaaLzl33f=?HK4E>G+lbLdwK*SYUhCNgUalSrG=jeSwbNtR_?C_^&mP z9un0S0icukTAocxl6;cRxJg1fDZ61!c*Y#@=>|-T1}v2f$9OXgwa1)ek6^#6Or3?+ zXJUX+WRUEJD>imCkhet|FkB!pr*7*Xa25Ay7`k{+ACrXo+p2qBP0ECd;3x`;C3QdG3J;^N{57CNa!tF%!(KWTVd=crBw?yeiB5*|M%y_sD) z0QBQ8BWecrmvaV^r88I5%{T+BVx2DZ1un5ric?1IJ5&?!j;4$RXSIUlGV+$>7x)O| zUYacl{+^uLK#fJs?feB`KdZ{K&>JV|@>@eBpAh_vHj6c}3BLZ1+J=@$Wj)YHS>+CN09`bDv( zT;H2KTMwkU>z3`jwHdxtD$Afycl1LW?L~Y?Wo?UF#>^wod!3s!csC2&HzBlSddk21%S#y-cIG+*fs#kb0>P(EgM-L$c{h zc?CVuSipEeO3{3@H0_DqTl@Y2IL5YE_E%HilZeMZ1iev;u-xbYR?gY(KMwIkyF56f zK0|xTI*2g~KR$Rj1*{uvpHRINHZ7P>?--bKf1J$4)+)>2FV^7Z_N*eI?29 z&KQg0;)#5g44vf_LkW5tCrP>8ZLe|PqpxwXp=4->dBrTU% zOfqlbU6CL+Ly>!ORX3Z9*^p|;)=tQcgYCND&4a^@Tvb(s_fcgr|NP8KFE3`C5I~`g zPNU`dd`AE^Hl}=aBYbfJm`m#4^zf6`fseT;WmJm=kU22)jg8vPQ8cbb-W^Z+QoR9K zK2NmyfzI+#L_#+kIla?kg z<@&Zfx58P~LVN}h)&n4QW73y>q_NXfe=qH6U*Z9vIhJu zjSuy@xW(R)tK_4#Z|g9^L5^y;Uhj3Zs;7GUV!XG0eHb|t3?6@=FUd3S689$^2p5HGIKEtXbw@}Dv!jlR?V3XAsi{UGweU5M!+0#&5`cC#8k zhE0IBgcFH~dvhZ_5C2+6+B=pXEs^#*$(DU1? zcmk7me1NE2WmN@r1CKL6v1rw%TW4VedlF_IE~lT2->c^W^MY3uCWj`xa^3%KKObGF zMjfg8M?XHLQtnB>J^@);Eg*ucVBTAMXP)vV>zhC8I(Ke3%vdkS%#4jTqWoEk4Gnqu z8r8t1I*;Md7;wIpZHLZApXi&AoiVeF%2T_aW&$+d;~N#OZ@SM$Htxotp<1D1qJZhCwNQgYIJJ zMfsAeDMR|;c@pTxXLGN$yMy+-DHyQ183yXqKsh4W#Ixr1LO>UB|6H!Xqb9xqY;SoX ztvl>3+#MMrlk@+rDg|~+vER|1CZH6^yM+xYVk}d!Hr@CUS*yhA!j|6awyICU zTNE}qFUa<($Ln7vcU%1C=Jno-t};=hgxyJAz_lCPkD!-s!fEXXm(df0PpwGE7U~!3 z6hwNa^Rzk;-k9Sy1b3&$Pe9=-hZ|UFfB0Q7@4X(YbAd);7IC}vZ$MVlH%~wN|MRDg zv59m;>`plIPt89K+Kapg^b4s;Jk@joV~@H~;^ud_*Y&GxA7Ot|fBBwr9$%4+c6MnN&0V@G-z_ZxNP~LQk?4 z6U{W+={ov}9^#C}FbHYJslG8Fa6_ECbcaT>n9~h^Qoci8Rzr8xw)j~OC9=Bu^3?e9 zfD=T|W&hNrGc8d^E29)vAJmVu0r3^r0xDOKCDJMDMY_iHmfm-+r(U`0bsO%UIob3M23=v6AH ziia@cmTBNG&xFTI)clYxkSF{8jpFI68u|ATTR%X&?d(q)^eQTwvWZxiG#?2J6zQ$- z0B~ST^idGgU`ySuu2?{dajsyNs{d-H#u7HDs<3p-qsNGw@OKgH?Oo(k3+hyFe)&V| zsveem=r~(Np<%$`q8yLCVtn_s*WUS^z-E-E`lgbddb*~TRed2>bYVEdMzM!vcn|%R z`ceC+IQ_DW{k2p`jQv%%|GSy_E-?%~iE!U%n}+Q3r*q)jFL`kDow98j0P zbU}{;cS}PJuy{RG;o3;I$>PlU@fgLV+R^tkiR?=+$#!P=%nW*Qc3yM)|`JfbZVwMF&U@-t9SWfGN=5f;Ya8;jAW>Mu2S*GJVPW z>cr1pf4+KE4X*(g3b;r3=tCsU^r-Cm1c%=R_d9e%-1{=|&B{xoT|9v}7BfGfrz)k# z#0_&4(Xtm9;5NsmSqo-n?RDM|!HMQ59ALSh8`s~sprvC}`{q(@?vpVW<&Rj7W7ol{wiD+=H~fc z20}d+NFTu|7o-Q26FoVu9hka_ndgTSGcy{Ikjx2M`=(9KNZYA!WX-n{;=*@$ySmut z^~nIrx&@4d^2a3p7*2TxZT%0BG=vr$O&mW=XJtox+^uN8$8vwFK5c#=aV9e$GwpJ< z_U)7j>|dy-ZB7HxBR`2}_wD9e;WCptSGKo2C-m0}OjG3;@Cp~&xq4dwrNrYn3fz#W z1L<2|ELKe>eXEX!M!l9<@mETrNc?krpP14LR8>u z&4BvtXl-h_t52M=sLMJr$5%E{e{31k1JnYikZE~R%s<0^8360yoD7aQ87_z(9OgXS zfk|@LriUO#I|Kbc=#Y|GL%_-X$Ngp9{C?LXs<~WKZ91&~-OQ=3n8a^EZeo20@H9-i z)vKy1ul#!90d{8$RnJpdR^Soe*$A(pP7eK;xv}2EsHkHXrM=W9^0s)+?@1DGcsonZ zYtGqf-grqHd<}QVnhvZV*8w-!xclhuB199wFvYQ8;&vo4#;cwAvU@QR;Vk(0Ka$eW zYLgl2(x3mr3q^1$-U%N};z>feQ#v=(+ZC>k7c|Dq+3~H#TJU3qSlXsT+KTu>8n&VsA2twEqh$g7jo_v%KIR7&QajTIuEVYKjyo`#ps0Pg;Dr= ziP}qfgO2TSoN_&CMj|^0gTmJ?)U4zT{MLxzie~i;F2iW*L(p$;6jloWN%`ZXVPaK6 zWdE@%%i${9CY_H2w+-)4{wei%-4k~{@xZy7d6S703p%?$D5XFF)>xQZ^>Ka7*+ecX zprSx&)6kF#TW?K-p}ND!Q~Bt?uY#u<)KeF95hhb&1UWdgNE%}GaDSKO zK#;__01mV~hk~e=otQ~$yWFH_!W3k?|o4823t9vwcq zLNxtFdT}^3-x*i*?^NK=i08f-J3J%-Po~7H?ChQK$|oOp*I#Me34;#uDr;3Z`+Ie| z6LV}EnRsP%(qSOe%h;^vc_5j-umI~X43WU_(Ei`5ZLWq4s2TSn9EA&=2oj0(ol`2H z+D-VCVlal^7S1;8Li+XOJO?q4&76923puJiEvlv)E;-bak_4)2!#KJM zC0n*#D+DV0X24b_g%CJfg4LP72{!)c>bO{&{dExAWD-G-8%&_S2eieh=TNlv zv7$j22^dc0n6$`Cicn=iO}_HwopmtFw`cJ*X@13bZ zf9*Bot7)?(qJJJ%Wg_fyaD3c%#eLAUkRUf%~@aQv4eVa zj~8lFlD;98;8yVpTb+u+4~h%v=PE#2)Cnz8)=&g0US04{H%Ij6n;=tHH-Pz-jB#ri zM)htg9c4Gjrub_0Y+OKR?jw1@?7MH{d6nQ8nfLOMnjgu3G3Zc)z2Ts`g!n~%h!y(- zU3+8`rV4bi;?jUmR0#t~s)5#p!v}iEZUyQDk%daYQE21AIfnGNzcz7`{LrO@D3;WW z4t;k#y(uJK9(SrY)?%L)E2x0Ql!BnfS|wGd^c=tNL3dPfhwEIRFS;vZ*%wXK0+2Kn z%ZI4vbs#BsarGQ#wuA`P;l7VT#?1jLH0jIixZ7-dLhjC%^w{$~0dSjzf$i}b z${*;QH|~{a5c2S(K^Yp8h#c?7?^Qa{A_-)vx z#VN-(!QYV306O^KMfU>xk6x3zr#?~0bWMJ(7^y-ehf z3UehkfqO@jfkr@?WI=;%BAj%gBh%~R;OrqTID5(#gyi=6RMrDZ7#bA;N|R<+m(ccK z|I^8L2)E$5sm4+Mxk*_7w5!m3{3OeZeS`MTZg@Rj*mlJpD`stw{ipL62lvL$ z&OL^$SK%%HHiE}CMJ)QH*{Y>i2{GQ_*jWd(w47^!15pommvv+yr+zZHj?il<(W){_ zCSSGg2CaxV`;%t$X@S~UDQHA)#vBN!q|>dbHo!8jcFD5q?!)9Sep_jwhNu!q%9~#| zen{;KUN$!42ieUhB&HX9TzEk?Cld3Gf}S8FAu-~ZQ=1%c#1rv%PKkT*QbDR(pDW01 zwe~_0IbLTbU3jUDsOzdZC$;fddsy{3X}t(t@{UI;9xrR$TMErJL^`a>$O2g6+ZpzK zdhLdB$hRUQH|~?On$c^nMyM9%8sgCx2h!-P-~g@4t&?fx`ZsZUsql}qnR4l(f#%}` zu(`MF$d)I^=5_}*Q?r`0(6T=0`_GJ9qK8raQ9%LnsYTkd9^&>(T%vierkPSAN#h{_ z0bwlRAw_UmV8saMv`-svxXUkmO03m{()|Y*u>#s2K`3i$9~`CHIuhuKvqQoQR0c+w z^=s4;Or7+CA%j9}ao1%s|S-4aUzYcxt|Vb6B7@U5Ob5SA6%rZ;_YAJxc9>dl+<+dxKpQ z(Wo8vNTT@9<^ita1Mvv?TtgjqRXH5>#y0lQLZIcT?j04aU^}>#_%;H;(vZPmbag&C zPIdF+T%D~^7J(Y4TCZP#2C;;M4Q)=F3cmkyW06?eWm8e$0qprk7Fhr- zICmKu1g$#YhT+P^Dv6ZNb|r0}>~UZ`q&OD5U%J>i0&uM>iD=Xb*Y#W+{R3mlefC;?T(Bp7 zhB8KCUK76pW%Vy^*aQxj>V6r1p+b{qYX)oWJ|Vly?Je2+C9@DdRKJ&d(AVHC0F)d;z6Ry(L_eA2icd+1j8^+)rtC`3FKtVvhxIBJ% z`0ByRJ#zl68DRh26!&Mnz_F%|vKU3I01P>Qy#H%(-(cH_Yf42C9qzM;`XJgQC(*6< zp@X9a)81L;0*j>{^CeW$|EN|=Uh2Mq@pVh2_|kA*TNB#f{=N3MAk6@EiTyg@Qjgc0 z6eY+SIG!d7*REpy4eadbm*tA;D2W&L9Ka3&1TLLE85-7aB;HSk3f~5@l!`3=LYCx!Rt?Y zTt2^VwYK;-fp6Z5P$Ia;cCR=myN1gXpj}BJ|b&(qbqL6*VPR=+&p5I z{o~eINDmO-AzEEcUyJF4ZF8rdmttG6V9s#PHR4G?Ps6&Q(Z={Nl2bKDi`zOYF+TOr+Sa_zwwPo{!SZDy{ zeaQE(vQk+A1wG0mV|xet;S{(mx8`Wl!rlai+b`_LECHpHrt(`%-W-J&k&oln)m6JjY5lN4NajWuVO< zg0uh2*vc`KfG7EjWUmxU|Gday_Y%R2_p(;D z&11Jwj&xaBUQ*Q?685pXkd2(8DrmtT@aR3&dIJg`BxzYIZSC99Asunu=letpE(~z( z(*Cf2HAGhCg0`mc8TNS*b~J~)rJDYTwvC*9rYNOeK-kqbW0{wFz2iK!4b$*-xfX~1 z7?SI$?K{=@0V2}t<CsL5PZV8gbejZ#Fq| zNjbfuP(#PDA8_z*#@w-U4g6$LSUUhYw8JY96a^5Qisvj$v70YD4_KscxlWq?HmN1_ zx^|rmxlVmlZXS=;l}xV=yTY`l-t=ek*w8Ne+VBJPd52;|rt`2Z3=Ljqj5m8A+R%7qJRwI(upf>l1p`BuJ{pY6DQSjU)3YeN03M>LLA=rTOECIMxP)nGMfMf@F}PyFJrI0i#ERvtNipi+-k2_J zxjt(yU&Mma6*kd{w5Nz|dI7#yieLrDp#BLiUTfPaR4K8A#&zXp9^!q8sA(=RAV*8%IolI*N`?QgZ zLJzrboch)PwA$YTdT7j7coaUf?#fYY25w5dRt;TfC>u5=v_kBg3xQ12x$8Z(Yexy1 zG?ffk2k20DB4@Nq=hd|d*KrIQ*RvC|8}$IpZ#*6+?CDzQw)OS@R>G{zdS9ptBTcNC>f&tiMaL-9$COk}tF2Z7z1d(6IG@*~w%*R%#rv!K`I z^AY9ZH^jA4c^0(pe8v`9R@Oa@cW3ICZ_(+zaF#NkQYxIg&~bJZ#^rZjU*78h#z~zc zO^Zsm@{zpOqu=f0)t%KmJJ7sYr}=3R_>T>ZMsCBoA5$Oc_PrTVp`tE_2z1 z`Lip{;`bo2y;)X^q6}c${Qr8*=xyh$7BR!7#Fq1JM>i~nYMw6bTamV}8=v*Z_Ts-~ zFP~X&Ua@YM6aIhx0}lwUegDswcPoxmaZyA%nAQ66#OS{sFZTcSpN=)=ZbR$I%{p%X z=j-qv$djATuK54*b=5r{jqn|G)ocpv&P~9X%B_F8Lv0@SVjlkEr*s2JVfu^m*gety zoMwNKGXM+jveg!nG-w@sv*~2{ohZ+r6r?1$t@6MP9r8R^y&ts+DBsldLJFHPJzKel6W?yM$dUO3ueC5D}? z{m?&#N)P*O}>~Ef84I_bM}!wuX<(bE;3aMEqX887QG72zOjGBXlg@E zHP%yhC{6NiW@buK^k8fIIZ)<9TR%2^(Qc?_#Vo`lYPmZ*)c(K(dv^!)C-xnkz&iN@ zI_?7~XT*H}g6;`Z%TA6X&@x7>^?t=`^hKz)oCI>3C_UcVZog?(z^w_RKxumzsPM)w z?bm?W^r(HAz?8n50ogDsWGOUJb8onrD4G!QIlT-YuCvKswaLALV4=2fMx8Qp?Jlx-Q3-}=`^fmy zUkLt`c$@2~qGdte-f*j>x9AicY#jnHF?S%K=v*MQV? zfNN}=XoVyF6DL*cZ8bGGZC%u}%`581X{$@xIKg29n-hs_oKG^>Nw#Zm$R+GIq0|Gy z6Vb+iqc3LfXa7WlxKcF&m_Su;K7l~XegB-_9$m!@ko9^w-SSbC|ET#-CrR^Yaq|6= z9Y6_0#$~NDl=Fo>V<|wAI)^?MJoMq(`sTEqS`GEd$&Jcy2#YP`a{e9K4>HAzZ1IfB z@)O2&s_+OOT60aNEzg`Z^yqr=M(kHc3j8jGSWj1PnRt5P1md9F{R5DpcX?!8y?XUS z7En#7oA- zGL_XA;D|$rIeFUD*;l4_nk}O}mn`rqwlCgoYJl}Ee}J{N&(C(fy!)z<`n(ULaZ8gl-|umXd9yboICZ~MG#*5w zYwmOeWg<2Tu)a~j?u1HCyV|+H&*P+uvy>eF8(=m#;b1TlPU@e|C=ZcTHKWc}$rife zW{)edvpt)&x-7T6FS@#NW64aK{QL){$hcD^ImoghC1RhndrJ#R?;+4yOSZ^21sXA8 zt+AW%L1_nfaG}Iz3&95 z>1%rZ+;571tN1!?u1YYi?B40LJ_a72U-6ziDPfk!TQMDWbrjAAPGaG?j$lZz*SkR$ zhT`bjMypQ_7)v*RV1mY1eW0`i!1cWwV8yJM%ZQip&dI{->FaReuO~A0iLZry*AuVo zeSrPb;;Q!3C4B(939yHZ=u70WL%B>;or2PF%P>eIEAa;(rrVYF{$ zl8ksiNWC^IH|1CQZZMrSOI>8B7U}{S-(2I$N$Ndzh7ZHAdMy!$aZn(@MfZZ)jw!3N zKwed#px(PAI20CaQ5(s4FvR&9wk>pY5mg2f$6SfgcBpiTGjnU;X*7m0w&4`*)beIt zAOCd4D8>vXYI1HdMgB{Q7cT-*Ums8M>Y>heYd(I6=|7XoHLh+eTyUM#oEufP6xvT! zJ^bu^gjE;$jJB< zrge0&d$D~~#8_G#`C#*kp$rSy;!x2We8HIMflkiOu)|O;MXkmN}T?&xEhjzBgd91GrKOEiOn42T6UINqHs>pe!o_PIn-p0@!Tfu3aPt#9!pMwDJp>m+!JBbvnyay8{?lR&Z^Ik~b6zhMm6QYVy z*w|me+C0@cGsu?jIh1sH*`Xj@1>7Yfznl?m!b#Ih$ar?O@h>WT57CkC{ed7j)#J93E{7fjsc%WD`jBUT5nctL z0q8;@z=9-jCeOg;*!yq7^j(y-J>`E{zY6W1n&yJNjrKwgvBJ7f{($j^T~$D)Q-_j7 zRR?;43DW5@JkaM3Nmch#pNGj(F3R)j7$(h{q5`s)>9${^Rc97A`9blUxX*JVo~{@v zLw;)&Z%wgDF8LIjWw8j&cZ#J|U0$G(2L@gu_-3$;Xm+M;0fhvWyf-9v1lQN?>PY%P zX2SV;6jz6vljYwf;2!Dn?E?B1Au-99v3@zcVhQ`c4|_&NibXqw0Y9>|$(w|cCD3eB zt3mjlMb}tnNs|@!URk7rf*un7x({Sm1(yhqD@n`a$nV*jv>;2$u~G9_YZ83QL@k9+ zfd^_0*DNUy?A!fx$O`|>S3eI0i+Mt-V7mT>GuG6;iMN$lM#tLRRVbCM4cWcTcE^m> zNuUp>RU0wRUa5yw?;}aImiqI3ZdcZ5WS{B9uHo7x_x%#&J;9Q(7Zd;sugG@=bt8nl zVW3JbBCt=Q5_BSHDKe5v+fA$3U8w_LA}ebT@Qwp(48;f2i|6^615p}_I*+>Chck1~ zuTT>UNQk=kWu?5+rHg4Tk?3R~)gnnty-t0eo8C_iREjlprA4{i_dzhnOA-O!KjYsw;r{uyGm%iLAEJPKC5i{o8o`82vs!_gaSxs48 zCi~3Ho2ZNd@x7Y}UrDb1*5<0mn&xLyS`V!3ykdI%sOiadiDw ze6G;H_4Z?aktrU~MznWP#JiOj4wIv|lL}|%O-MsjQ~bgP9uRe%0XNAYO&?y1h+Y^Y zEug>{_D(jqFdqjqmA!Al&MVU%?irhd5pG(sYxn$+3h36TZ8-J%XX93&s7b^aj3H%z z!;7e06>^)Bz-z%)sMl};NCATue~l$HVm~+>fMS4@H;&33{0*BPOa*A5B||k%$a6~O z^}QPY!_*esrhjhj!uBwPrh7Wkj$skOiv5L!z^QP|7xucogp8gaO7%+B2k!iUy&DGt zd%FXC30mj~`=lDuQ544;`CbjH2WToMy2g>GoM6@BA0P&)zcqoYdVRK}n$T_I(3J*$ zY!a|Y3O&0~i9o)C^>T2M%T}SCr1*{_)Ym5NkW>OmJ0jhu6#T8k|0jmX&Ul}u-(Yk#3EYz8B0p#`JzLyNh9q3dn5ZUMhu zJU;X1&qy2`?3)c|OnN>VxniE$GDYNQ*Ol}`x+`Ot!T&BewSFcfqm))gf{N>g6>1iHy_Mn&3SDcd;vM~qlzL(y+~I__JR(Q z8s%lYZ)Hm`ZM&b0oOG;fs{H+uLt3{dIFHgyvjy7in*6X6ZR}}BzA{`2?AF_1i`Fu? zqo!DYnIT{z?_+SLUM?z?+lVS~l5uZk`enWPo;DhQ-MBo zvT9%EdK>9`oA8z_+7c*aik8Q81gJn6rsrq&*Q8pbf9`lZZ9MGpUbV>(By2F`B|6hOZ-|xTgn>X>Ql=(VJ)u1#sV|S7K!E~uD zYSr)De}ARJlYQFVix(Nr%5HI>}Py|=$+ zu0G_S2>NF@dy5_I<7VHcBdu(@@Ehbhcodi*yvVvreLdRfoCiXX0jEOzg|GToDHt^? z0+yuphI11h7_jQrt}hQBsxDPw2V1-aec<0=UZl%#RF;T*w`Izximy%5RfYPH?JoP( z{BHj)6d-w!;^&l1E_?a6h-IEv;G!c5xLn)&<%wJ+BtrQ($s1-QG4Wz zvdZ04;dr2nqafwLegg3#K)YRTmP3+ENAk~AJRjsj=AXs8E3qH}8AB}^7wN)zIpjIq zTvp$;D7{5nyD&kc14rCj_#|v{MOc`xq6xxu+cqQ9=dvK`ZVZU~Bi&5;B;!3g{EI~y43+<=VHeh!%KnK^bZ{>KrQ-jE~?TuCt zRXDCtRM{@lZvz9%`9<`_9R3S1&yC6PH%%$|}=DD*<)k|L~B``cKQK% z^76zFV$Z$JRWD`O-bCzR0sCLIgJ7o|dv8A8Mbx6Q(fd0*=S^&pq_FahZtE|3U;eLg zvx_g&!0?>)C%By$Q^PgxSlI7#I&s@=fG>-+>vYD@0MgG0b+UclB6E+Y=*t|$Dl31FctoqhSYb)<@{|yShvm5*%($(+9rC|@~e=-Oi^CqX(N_e=#bFTRG>D)}j zP3Kp079W9B_E%^toT@t7!EvBUm}j=p+P@1IV|#Xpm6KWUpMyYxtvi0U8CaT0Yg6dJ z2O~Kl7U*)n=-wC!%8j5`Yh7lIi3wfdgtgS0gQvNrooZ;==1e_LkF8#PO^pRj=zYmMqhNP2-b zsaw=7f!Ffw%%!>7k&jD`jGe<3-O>p9xbtWf zG`KL}k7v@xeNRUF}>gcm0Orf(0Lqn}9P3Z#ghs+y&to3WMGRpTX^ zrGB-c>NxqX9?>*_c0l$_!N?gq?_B)rm`XwY*Poh+c`}#EsBY=K5jndVu49VHwyMac z_dRvB?Y}U*i$odM!7n_lj*z!|f-VfjB**Zz##Q)@SIWCtR^lJgOr z*k0Dwckncn1N-u04ezt{@pYB#@^nr7N|P=+o5?O(^{SG>XI~? zXqbs0h~^`}=Z2pAONNgpaXcj{oj2z#;`eU1<*(+eXLFku;*j;tHc(9Lz|*34i&9K& zGD=(W8Mw9TL_RnIY2<|M1NfeGf%=gn`pBBdlvt}Y!`TJgCBcv@5UgbOs86+{*tj({ zg3!UsWvbxPam~ksU+pviiQdqBl@UX^P-P67X5S^!P=XRADB=hSBD z;diKL?8a+wQdVP#LNDG-@p*WfWi^?n87|5BjXXGLQh#s2rgfh9T_2o%wj|~=*LAxM z_4&SUGxA5Nnu2pA*5(e#-_o>!-*YO*KPw(a#DrBv3tEF4Jv}488kIl2KBP7;F zhT;#>^p%XJ8jp0a@GNs@&E(&&&v3!Yxh;wVEpc2-E`4CFm4hxnk{-LTxx`gGkADX~ zC*D!hrV3EQW&?WxPU7TXXP$aT&#Cgfal^>uynO7F_0Nz?Ek9$HF7h@|t^#|!==sG$ zv~8GqtQ1g%@a>ZkPKCSgmB;wxAt_6MFvv(DN^X+DBAgwie zSUc?GE3Z*qZdbecnuE1&UJC}dgxA^&)3Jc@c5=$niSlL4wRZ(+#2K6zMG&~jVlifv zAAoV;rm=Q^yL-_0Ex@_E68}9V;N2I_v5=Q=NR7Mbht!r)9`)zeO+r9kXCjDm`!gUA z#g|B?EAF?>>)Y4Nd4L(_H=-S)tCl4wY{w12DG zZ;B&;c10)hFs`C(IJ`}|7&uCLh{1GHEL2Aw*vVfscs*))O?}3a4M2t0YeSqCTqi4mKv{!u;xd_veeqbl&_MWJxNsIo!%poJO zGJxVb-;x*4ot9s)F^aiw?TT9y$SCF){xV(ysTjSigYvutw6lZ(iu_F^tEj+gAEnCK zlJf5ijeHF(xA}@{?eUfZj#8_ictPazagKPe%to{w_7Bv?P_y30j-riTib4P*7;*_J zJu+cbW2@e|l*77jmePdZ`0x2fu|~t_W$GweO7}qZv07Ezv9J+TZ#U6~oOYoL?W;O5 z-V-c%!1kYyH{G1^86?!)C>q>|6_^-)PZY2UHlQb1R6$%O(JFK#;l6B8eX-oJC zj{C0s2!53vW5)YA_w;#RnOoD$=BUky5u`bQTtOeM{$u)6Nm_jfOlo|my2xhqfZD!4 zw9xS~JR0mRfl*VXQE{3xv%^zwtiB?ZNp{qwwGI(x+J$wU!yYMh1=EO{N~$PF;`t8k zoR4Y3uXoyomX>IE6<5N=r6&{8`h`r=xi2KmE13GqygBEtwY**93&q%sKd<=dV|si1LF*OR6JnvS|!ij7UVNk{^f~S8{4@*_!BnDNcY|GU)ZjLZ%C@uZ%EbP*CBbC*MNP3 zlIy8X8CM?|_LsfmYnubh-Qv|1aVO7W?qqm!2Jcxf}dZ1P7Kn|}d!yv0F zTMq?|%;m)|t5krI<2Mz^mFiHAEIxs4*$}hf;Ci~O%Pbm5>9l$P((WFkb5GD;d#6Ei z<{=IEIOze%O=wgWJb01&{7@^?DzsxyrBitPAXHHVg0)b5qRE8Ts=TVAgYzSRwk|AA zXGA>FwlTzu`wq^WyD79ehZbGF175e_Gi|5(476H&#Xr&~?$!YA&YY6b-Ngb$FGP(n zjKS=@(i}MGxymcrYK zjXbU@HYkBXd%=cheC0-aK%urnHs2m$)1#g5J|YFCo~jcWjU(qb`99$eM_?-C#Un@q z=mr`3u#^`&&CH!8SsN1*w*ex>x6oU{swZv=L~f+qx;CJ{X3+UdC^I1i(3|UaQRYt| zGC2*z{#@tXQkH>ibo$$+5%zcGrUso>((edCuKK^>Gq&^kH&>=KfJ*#+jAvUZ^j$z? zN967)9yeaG3#z!H{x#}$Go!!GG+br<0VlWnQYVQGRk?GuebmRVp{6}rmEgL#YS4Z; zy9xoD_-{BEF+U$EpJdU$^uT|%p%7jzl6O8TD{#PN9Cz>~rz!r#AqkyUIK7%m2AGav z(r?Q!wWo=28yLQcYIf{{iU^K{lsjc?nf3`J(d-(mt>hLV(t~r3jwMaud0vEPgYyhR z8z?610`-s2woIeGXUsNe9u=Qy`83;>J;y&Byf^~zqgnb!3bmc`W8mwn)$x5p$>HO< z5jOd}C~z~rXrtWn%_o2CT(HzT+sYnl%aHHLASE@5k2$?M4z1le-^>3t zxC8n@CEFz*@%lYm!*_;9M|4CkU2{FFMpH|)+(rxD+nt9k`YJv0hpcBb~^%jaP*TksdEu_ zaXiqZdoM?(c4UAPL(Alz5EJyl8Qj^DF7ZNMmW?n21M`nR5eB9pCuRs`Gg>PV7*NoD z?BMLp|LRwA6)>__MQLVG|JSE0Cfo2z0Nt&|ep+|NMT#@7JjLZroanrVE z%AmxE5z%8ogxq4lP`&eq?w%h1kig2$QFWC67YzRZh?j0TYSLaMb=d=1wsFGG!Haog zw3Uq7$U=HVo~Vbo_u0r(mFe~8fXW#H{!{n3KRGfd1(lboBtq#rd~ndx{li4ed@53! zvtqY^(;}Vf#>Y<%OF=PjL{cBi?D-HV(RiL}H|zM-)r2ZmhJZ70%AHFFs$$rQe z|KJnhF4_!sFmruMR4Y#t|ExX`xna7LH??ywM`)c_6Qmlys(ipb)C*VDx|bu(O|$z?|4k@qS_AH~a`m#hY?ZS091n^C?GDCx+FwVcBEi z+0j=mHeiq$a7IN@gRW7?&Anr@{Gl_+q%b|kJJo?9U3U|~-#k7yH4&>qDw-!7r!hbI zdyL)-X8#>3e7>7g5rry-nyxP!FMlm`(r&U3zJ!diO)HdU`Z_*n$u*wQcUj?_12#-8v2AQ_jBHkZFxpl|5;8eqD;N~UE*RL@V2k7$~k zb)pdIbJQO6gxr#(c;sa^c(M9kO=Uv1Bx*%5F0$`Kd>{7Rv+gnM#y4#7Cc^kuMfk>E zkFR`6o3lCq`0CZZT3P0Aj}bFw_M*~@XrZdkVWZJnOTAhT8t`-WrxuT%Q(31TRUtnC z1#@OQ&EByf(5S=w7`OCGC~iFB%`gAy?6QN_w18Z)uau9p{yrm4R1MDvc~!89e^J&a zj(NkvP!B8(To2`F9hOr*kl#~6E4Zx-_+prJ36FsCV~F$_v=A)WqsUVcY5VEsAPUdj zAU_a%V0^>QP?c{7ds`5?mJWTE7IWq#Ee&2SlM+Mqo(z<1LGk?69`TK6k*!neq8O;4 zr2A%gN7{#ynpl=HWW8RCL10VvBn`Y_^>4mZfBLbHtC2nGh93;VlodJ0ZY$aYJmNoz zaOv?ZaYdxgG-pWbkgxd|i4o_J=NZOkZEEwt*ORnO9aiZ9BcoGgk>4lK9h!jc_`C)& zn8L^o06uMe+YIAQD

2=Z$R{HCG{lXA5EOm6)E+7-DUfNvGE$9$HWDJcR!7wO^&# zYsQ!nQ_u@emx|)DP|_m-cb7c9>sc-wFhX6^5}wZFG!DN6wS%@!Co&nh849)2M?NnS zIMH~zGl0*&@kB*S^JM&Hg}XqR_XI@!GzqYN^KU!Yla}T+mC;q21fYIVo~1T3z+>Ew z;PvGjfXP_X1911iHq0*ANXXZ2>#!#2PrQ;^J*lLq+Cf+G-lCJ^KWI!^?FU{})@)^f z(=VF`Lhhu|%=P6|q`gLfTlj#gVas z{1uhYLn*k{RLeULqUumBjVY{O=D>xoPj3(gd%ypEa&2}m6pTC4!+#;|KJtn2f%^i0 z9+Bbq7ODdYt*Fw#K9e^4W*ZzGZLb|^e)bP{gF~V-!@G4=#&7OV$>xK2^&ZhdobJUh zq|*ITgXv3~ys(WS`gbrE@|^Pfxow*~BYd@O6|NV^*t?}G^XD)w^v{#Z^P0+jFg)bx zBJ0X#Hbf>lnLZ0jYR1X{iT5t{DmPnht_pb{UYYU;ZIM6baT_=5qbjWOBKwyj&patl^GHX@_z_%5qj`%AbLHf46Dlq;dn%4jdbB}1Xk?0@@gmM{3DrsaDD zDP|u}y}RMnaMPjzjh8PTq&UC!vom}UM%px?*zi)ix?oB~KR1aiHH*!L9Zw5DPcm+8 z(K03X{w6P7AB=&o6sV}It-BmFyDQgt7e zOTWZ18PKE?^!KiD9V`JD}X?K;U1jEovZylnh2|gMg^#Gn7 zG)X)R+Yh3EEm)2k?6doPzF}7?=GhUo47aS2&)Dykz?MI;x;*c7giqMkLAjFO?304M z#-=i^--B&=%CVI~bo0DsVQ?w0fr)aGS(iV&IWLsj1u}|o-rtbOH=zm-Xg%!^RO87C zNHxpL>>~%dm*9W4ys1_3HA_14`P-c4F5DE~>I}KkGs0XGlPwCc-OFtb*88NwRuC+5 z{KOl$`}}3(c(jjpbMZUKuBN_T7#V^6z`aY4Oz`UKJeQg2fL#4zr;pkxNHXaG-W8=W|d{9DTzoaV}Ql4@bd zmS~!!x@lD|TUZc3P%avf@7m(`B0*vy4HbaA2IB`@g;DjTP|;#zn2xwaQ~h*Pcv0hU zt}<`2vmd#hW{*wE9Iph5Lp|J~+3rokT0^`lE~T6B08!hd$J3uQ5_A`?GV)wDXKpC| z!#*z!9s_HF^Q_+}4?OeM9`&U*D=O+kN>B8?h+mT;z_-B~3<&6RKR2?>vX8AM=soI?$eF}fEqqO$o^c-x^iWLu%Qzq2L|Aa`EHfe@!x?IVz0MY z+i{j35xGPHID=+4j-%R|Lq+zMQ9&7_wcDfn#q>6W5apgyfgd;=BItQ)$GW#*tlG~h zjq(jmJfULjB_nHi34&DY-B9GTrS7GwR$EQ-DDepZj+XPN7uG1VL9G#iilZII#88qe z&F+N{G#Yq|oC6OZPj0--kp1KMnsQb)!y>(|^h+_i(2hpV)?xdXZ?rHc)qI4opw^1l zvs21$a>L%Yw#R=*zzqolZ&Mp{K}V~4#>=Ppwa)X_PxdhD(rclwDcBpS-vadkc-%)i z^NqP--9@(52SXsLjl-=ionQpNLDEgrxc{hL?JaBpBZcp|*GH-Q}vxJCD~@-@%B|I^uN=_1zP${VZOs?YQ7 z`WO$b{tdI(CB9K{B2;|TIQ0Df`Ts5CT@hOdCJW8lhe|tkI!mBMp9OHA*CfeeG%F4Q zCDo&umw8=}nRd67X1`ymabq2deEc(Zz1ramW%nqCaZNwFS*b29%o1yeE{V@w&Zp!5 z62%)??QA@?szqt>NRH$a*TFTj_RXYYMV*B&aF1KUf~yt4rH{zNzq0%8LQ%=xdi!sg zFYY$(>>dhQv;l6j7fiRe<(3qeQEkLiT_o=2?pZ*|Ou3&d2Gn$lLeFpJI>*(@w#p^~ z__s7_HNHf$yHn@Ep%PBp^i1h^`bhFxi4zWR6on}_wg5}kRO}yU+ZW^b-0`Ko@wxv1 z!ZZ0>niF7mX?tYY81+>J>y4j{-P11d1g&p97_%>oht6UR;sFgUGpAc2 zH=$ys98zG(lzVdVF2`adC`Zbj`@PJGNdvVhJ?0PCc-^r=vHY-?3u)f77VtUy)m!GH zKki#ur^R}}(Mv6O?WcCOiRbafHf@7bT4QCJD$SJB&S!i}arBl==-E@(4Dg{?Nykoh zWyM^cYcO~h7Z%cw+0JMOpz0H5n|`vFeka1o&*KGICC!Of7LVY0z*n`+VQo} z|MAyx_a12scX%W%yH}ICAYM*)a<2f{@S&P#I+PrMj7QTfWexZHyR81xL0B2(rsO+J z*W!iZT z9TJy`XWiRlm407KS2^%UG`7bDFX0|#k0E%^zdNR&&#M+^!pD{1YA8Y|Cm0XGW&C^^ zWapi+Tr)tnro(?<5uXMH6vO~A9}Dxto2i*-1CSyVJ0weqc~RcR)^~M1ea^%c*Y49D z#RK)tjJu@-`ygXyJ584?bt-S23GH53n-QqzS-`LxPJ#`9%4cHx{)N?ypBv5pQXipa z!vp*e%E+X~UsGv0FQj<(p_X^!fa}U<(^ml#R?J2L+qD`sRhf_~31vOqxI)^_!|%7#Y^ zj4dFG?Rk|nAUAaO7(3o&^m2kry<^` zdn*ko(=cK}g%G)|SI4|p=|v{mn@Y`7I&cWDG>7n#=J z29voPK;#U%RY;CE10m5M#10gv&xB;X_o*olFuTv(h#ziS^Gv_IhcN^243nt6N1E_6 z7yq2IeaJZiWvhS80B!J@Jl2_>TEYG`F(E@O>qv`cPH*srl$~-+kwm(V3{Xn2!NYQn z%ec?H$qGTfo~A_%8Rt-MJ_RD9}avqeCp zRM@}cT$AP15%zfmDX)L5Tc$o6yd$nu4B;D<3{g0fSb*Qda-bPuF2QgE_xf?Rx`jo1+2alWBIJdvN@oP8{$NMYUx zrZqLx3qW?%sQn%eQWEs#mLt#lgT0T-^@sK&)E5jH{&PuCuggL(RO9hXptcZ{mT0tT zHcGJ)#AbHA>UR5fc7@79(~Q+&@%jBILjAym3X;3%58zkwBGeUQ43xQv3T~5djaU_{e-Sle@eLa z@8s_HX_ih*Kkc@6AayPO^4_HCmqOEKrAAr!+a$lTkN%((qKv#-4hboba@wY*McqL(P;MkFjMMPp^m5t$w@ zhO!+5I-cir2K(?zyHM!SQ2Zb(U$LyhALaGv@s*}KIBgQP%%|Yh#D=GdLQjyU$tdAz zY#{C!s100=Y*@DZ?NiqKlg@SJwtJanV3R&4`8Ile{s_cjE!<6T#DK{mmmMu=RSbQY1{`ML7X#H7r?YVO=T6g_cR|Kk?k`)5|3G^;blEA=T!@}zERnhtzoEtW`fgv&NT;24a%w;T7q)|4KZOIhaux^ zV07TlYd5t5vzWVUwYxpwm=Ay?oTl8$@;gsXG>*egHKiFt3n2QV?cH{aDJ&$)mWic9 z^C!x=Jh^^G=3|oTVVbR=vlJWxn`PoZ!%oWGYhUs%-8&;Fa|*_)5bHnAlD<_N#W=~$ z(sKg1E9HA@E?-rrvJ~|y^X|EqLW?ORSi<;j*Xb2=BljW(p$A5Ff|%dHbH>g$O)4@> zep`z<;iOUlQk0?Hm>!9INWi|O+FWSo99xI;eIpe;RAD$Ywc zBNj+&G4cA3Pme4sx>|EjL-7{Xuy6n5H0qN4cEHxwTn06ySg4J3VKi{7@!)rQV-j*I zt~S!EEA4mX#t$Lu8xlJeSoI39!oWfMJscdM;2w}~8F_(7$%Ngh$!U9#^$hA{SE<7_ z^f5^(Z`Ol9{qR4XN$k8`_yhI!9N>QApVjRNWo81ZQ_A6~rai}3Va_zi6&LQHg!{^D z9FVp9GbgyZ@-^&0Ypt^5O_;eWQJP)pUQXU!W0#yVz}il@dO6|_2nFkI)XaA;4?rZG z#axx!-X~d!AEd6QNA)v3Jvyh$Ikp~X(Jx&$fj7UflHQ=z#eX~5HijB#K6y}E2L=8% zMn|ZkfNq@oFzXE>x#3Sr;A?-oc+E(heqnyZz&6sRF7Or&3snn!Luel zNv9!%^Nnh;))VMad}o)p8UyT+8Yab%>8ajW)M{2Fe!X`H`z{H_Qn_!#TtU}K+25{q z&2f}eu$hOn+gUric7%2ZS7V3EmX>Vr&$zfMKv%IWkZzu!7g+@ri-mqt&3t?gMsdm(}(I>HE=;QH zmlf3>yt6$>Qo=rQcNOk2A1T}GS19UOG3cSZ7gj*mgH7A&yEjR36{kWWM&lwz6R}$S z2gQ>K&pB~A&=yQ?dG5qp&i`WXO~aZ@wzXkwRN4ViP-#I(JAq0g-3p{-NVF9ZFvgKl zLffbe0n!Rc7{a3>AWmsPr6ocT1Vn_0Ofn>qSyTuRAPkb2pv;hjAqgaT{0e(_Z}Zw|_YOQZeISmEmKr51AEMT9iRH&ZZN^D9p{U1Q&%hzs(jHXnW&xqc+0|F$ z=1ts2FCHf_zIlj3h$6Ed@-VqQxJI8RZ)ez}*uF4u6yoMrh;P!r+Gsfz5S0BS6U+@2 zIR3MGVPm>mU(5j20s%Tsp_@fS!prOOsrJlbUbY=_+#p6FY$ru>+(C)VO!b~}G3$D;a3SNtyO|2>)2VO3bEgcoNEwY3u!qtg%CPPo@CM(w zheWrdqMM1^F?us?c_Cdm5I$qAgf+mi0N|q1S1!Q7>C< z8I$r`0JVyg1KU?UyiAGKmSDE1!>NTnENb1(d=>F;=xz z7;4069g2OaZIQszkl(rWj=aFP*rKE+vAo#%T{{8U)nF*jd?g`$Iz4xvOckesR+7w z^3v zN@KyAuidP%FCsTSO{vt=I?iav;Wt9UG;0z8^qwQIq^*^qUqr4GSrGmEF0OzZ1?uv# z^Ohi8=s4Xog_A$v|_*4tAL z=94jnm%88j6-S$|2PdMd(*>*JhEa-j>UDRP>f9*Kk>vai=$qB?L(C=9*Muq&KQ#xe zgBvNwODUtR`+<}}J!~Ppar^Lk?5)U^5t}aYYR(rYkuOB-emJ~(HES^thD}WNB^P+T zq>gp4tHrBdS2=ks8?!PpB`^7?@-oscp&^LJV5Fw)b(f-Jk^_G!|6o5 z{?H&rj?%PS6()k23av~xH`&=IX4oaeZh}iQ(#&)X@hI)#V5-J4(amfDbS34-B2F-E zDTYt7w2yx0;4r{5Wuw7esMHlqj45Gx{n=DmLiOE6PZ(sN4G26ky;pNe;9>2cwoV8_ z1}FP4h`nMGIXZ=P7!;`vG>z?42<0DV~T5!T_3@hNT5RNT)J$FLxwTp9v= zl`e|W-s-P)G4~h z8=K9YZju}Q4t2)L^hSp6oH)FG=Gs*iS-p)+OYO4a_%aGmtE%a4r}cnbpkKGI$6&dh zR7k{kS7^O+KWg_}cDbY@<%G_i*Yx6gxoDJjs;7?I23{X1)DRoSjz_K?cAQtFNSc9BVnr#H<$x zM|GZbM|F0-o!J3c5;TrIiCoqA2>8pI-Z+hp2v9xjv>Sa6zj^4X0$Dxr7t z`SKB}E^(juiKc^_u9w|Iz<+W`;nxxz`eX{@uEMaCRkV!d<}#UdtpWSKZ50ay{)_9Yx!UTZ^RB{# zQ^Z`Y2DA&};@~{tcG=Ki) zezfi4tV+_6x{=+S08>5Nnl0+Foz#OZLe%T+elQZ;d4Saj^?Cu0=}w~Oi`C}mlMEiD zW=c!t%Q6B7-hk}h7}yH{O~8s}>=5JVW+@qbrKf8fSEc z5i;M~&uZI?&Qmgo3CB9dT2kABjj28mAo3QgT@K={I^jcjw5K1N`Bqu1M|}Yl_zHX& z#J@S=tZ`BIepNS6WkB@^)8BN7p(SV6F;grv;ol>nyc^X z5KG~-vC|PA9x0FWz_sM#ccFfLE}~scZv`ZWr-K}>J(_k39W^s~caNLmuQ(}6Ji?wP zp{sWg)0T{xeOsDe*hya6pa>rs1aZWH9H9z;ZC5|#F~E}4B00Fl9<3+>p&k7OAbmFS zP`o;d=Bxm`(#K-}j{b+ixCJG`;!u!=pcr*}cR9ULGgiOPFcjfkMwVC4mv)42+W=tC zzzS86t0N78L971porpqQHc(>@-hXL9hw&M#VFO4hGNQX|cImGWpcfEhoy8h)1XLZo zFC)V*#u|j|x}QB@N8m-p{ySWsirTpAi=MMRi!0dvr$4IL#Sq~2jO*#Ay~H5IKt^eT zNUImQ5W8AQmKz>o`zc1ew;>`BK5$<~IHH1YG4IDHnSkL(s*{=p@S>XpCE zvy0h4q9EXTxXKS1)|*xP)V1H05kqQL43^O@R@mh1l9DZli!BmowR!Ld(mFA+y2OH9 zMJMcS;ZK_2svC-(312~_=8R@lWZ!7 zv}6dZh{AK_66EHk8+*R(f(N7{L%y3;tEN3PM!0Lm=!-?ph2b|`=NDj5{g!KrNg%1t zgg=}%yrjT@hhIdC4lvEUVZs|L4tqjowDV*uMh272kIkDLr#zDN)KB_EBHAMiVBIK8 zDR5Z5D1iDACLZT~MMOA*CEKUFqzAEWcw)jUMq`eYE0W$3V|PBLC7gl?RP#2g9sC|Q%Q&mo z8Cag@xDn?lHg%zm)aTFi!6xIC^Xz!P1RnLg-=_Ud57X=eZli2E!#j-KHM7G#Eh51V zA#$Ahbuw49ck(Q86t(z!3EMjOVb+$sZ9IWv)W(iOjBLDK`zu1sB7+%j*`SBz$j;Ve z^!4HND;XZ|j1Su!zcj3S#a(bu52TA3se{Ick9*Q%1lB`atst&#wiTcXOI`HnQ3NO# z(mZ&pd4Ah5)Hw*?gAJvR=1m<%=I&r&sr~Z8d1k9Xy87Bdj+OLTnZxB`$iSb<%XRKW z$fV#qN0BXb?@u4s9h^6H4E0Mu7lZr*nz>8s@PXd)4Ah0io74VXKWk1n)tIbxk!kFe zySHLUR&2jwb}GaJ`Do2@C)#=$KYjQaI<{hW8hGtauIjV6Mo+}-P=fL*xp*GmQ6yiE&P^7rSz!#W8Z4ILqW$d3%yU~GrA-Xfr!FS{u*^U8lzJFn0Z|j-{j}hKw!)wp^At2uHvxZ>nS#W%(Zr# zKZBix4T}4~^_zjQl93w4PSI-|NlS2`1J>tkh;n{f33~JX1O?F4@ zO8ClZ3!d-qR+&s{;_ioL_8)y4a zC~w$+V}-jL=u9LZ5sma@b-ow9|jrx=JDToy9C+xhOsy5JJIR8Igo#jPs+gziOZ9a(XwKI3vNr)S8r!s zL#=teI%TPjdrAWjCh<<61H#Bu&4Y|}#KP={lSPAslamNxnqzR}3%*Ft<0|A$x2%p_ z*J0{lvJ7tlh+AgRgqwBNa^Th67-55803N%_J1jE$jC_o+VKQbeaYF(4 z!sUu_(dLs5_=kYjD|P}cu^$4w&4J#q%Co2RV)-UcQ_2ZyC3Y<7_k@VBn31{_gR>?v zX8s{q2kNu8Bdg=!YkqSj80wyq*pg@B1?@3_FvP>970~1Km-`PcU9J#cDc?o|n3ln&-(>Nj#28r_EM9)V=&I@KY_iMuZw|Iz<8JZR>lDcDEZBHX<<$PzoFDrF;MwDhb>>2eI7X!Cx-x0iVd2L;_y}B4*GEh{a`^X4 zcYkZcL+i*PoJR7%Lu&AWh0t6NYSC!g6@$ zmlk1H%bY5=fI{(c-qELR6>%w0sp&QlgkuAxQ*zY-GIRspoBjA304>PCIR07Or)qxG z>M~&PS_r7WY*bbr{_pwuff2AJ1uOOS-8}CW?e6n`?rO(r-7O%8ZGIRKfBkz+^IxBv zBPa7poE-n>M*m%7X`EvmyA4>*{?tfW=$E;l+Djq>Lb9cM0q@w~ImiC9^}buSc&9EU z1s*GI4Wi_fmrU@ZQDL%y8rQX`A2~&&@B{6U4H;GPeh?0ug#=lbX;wb(W~OqCSWkNo z48kO$72+BB>fuuW6zCa4VCu7&9=q=zPv5uw{=loq;F`_@xb45j=&XI4btz&`!tN-+ z>SVzq+W4p`U8^B9_Y{;e03c+_#Uk_^H8j86*b_rxJ*$Wfv%{_8n{;h!vdqa6AMF`= zG?cG}I7c6-FC$9wQbr-Z+}x}jV=dTsa|4XSc~kU`08XOtRa#B4}H;P zbhl2oW!6QOCG9LLMYe>7|a1XfK?Y;29 zOI%;8=U^)~i5r_P*Tq;?huv;aCQAr1Me!WT2GjjG5H36^)~@;0hp~!zt=io2{P*0q zy;i8eiYDqXK0AuP)SR(YjJuRLrh{i&aU*=B$c}wXQ8+I47`q7lwJg~R{m3}UM=BpH z$#^w)qk1}BL6@DoOsZmy0>aS;%4@j>Ig+4uts{_yH>$5=S;k}8K)t>p$D=BY&WxQ> zE+iO^7F09Gc=aG29z_bFE`jw8tJU=}Ta8}daM>1s8ye3;$;$!CoA03o>L)5Ae-x`1 z$BGxaFC-n84l@upE8kCM2El5u`V_Qf1-UH9iMP^}{`2 zCq}yD*;G)`_Y(|XlHm`&MAp0Ul5jy>h3z}4R!Q`?4q|d>J=k0SyL+)Pkfqh#V5G7zK!^qr`7hs?VLJ1F-H;#BLGl zgW`v@P9lV(*l`Mb66vwWl94lPG>>;ecr|hrm$>Ieb?UtIt=>aO#=;pHaS6x ze*0vTC=qe}y9itH25^h^sL>fy-p$DvVXZ}41T7zxFPoatLo<&mti_phfyuR`-k5xW z4LkCU@V(5@!JiD=Mb(*hM77Cf#>QI_NJ!wJ%_vCodHS$J$8}GBJ9sJKU@Z}x zR-p^&0_jX4AsUiQt*zijNEw)TJd?{f%2 z)MwWxc|Qe$@ajmov}M<-hf!~MlWYl8GV$q; z7=5fR`ch`v1*1^JSi5%1=zB`z-KJJMB=jVHCC_#0&;r5+p+bnA7zQmP4EyEN^EW5C##Pl>wZcW+x@%ra#z*^Y=m8U8LNP&@`o848$$ohgnfFH z|Hy#y$x*nx$4~`rko)NzIRaU}}jLLY+tvKSH zh}@zfIYzbW=;8emF+H_1=*9<4-_xrmPXR%^0;Htms(-LC0$xEf@AscQcDKhc$QD-a zR%>m0HL->1jn#1B`M7!)w{0sT*>{rdg9vL;-jxYPZXOF-Cbx8Rj*xdH$b|64b)jTBpDhu0Cf@6%q9j zylRjTR?XPWN8Hrc7b}uFD4M<&nD+aqzc8VE)DFsIZ( z=!Ch&R$@Q_6e?H&UA6TIrIjOiT3xNw*LkTMQL zYnnebVNz4*Yppv5lJKFl7As(qB1^l_zWB`%^Z2~w z-Gj&wscSE&zz%bMAy?dE3@F9B^alWm?4NBKerCSjC3+O9#ceBO>U#rTS8#tnLwsG` ztjsXR5#qf)V7Cn&(ouRJ`5S;&;orEM(PxYt)n-H4DLYGM08gFDH1Drz+U&1^0lj|v z$tr$8Xh;4)OyJ*V1*K@Z0m?BKg*54UVw`Ro^pskEKuoBot(R7Z5u$@E$t!(lr=R(L z#ffAUbc1SwLDhDC%T$+|BDAw<1SC=U_6c&`zijc037=Yb4PeoU1OfG0u)FyfmvwwE zN#Ayc4^+zXIuPA~I1f!%S(x;N_W4Ag^*{u>8`dUCV@yrHJ~7gr z8Rw-AP>AvsY%dl#7gIF|aNXSL;RD{r5%Q@2-xiP2ec5U8GM0dFX-c@FYoGtSiUTt{ zm`!(HKvj|stKEGrQ?!M$<3+t2Fr^b_#`ZqNeh^S+?PUJ7?xob22!f#e%qeU#Nbc)%J{v8f zvzq`G6&ft6%hmFu&aMFOmsE14(CCKtVbSy}7o1NyxGqM3D%b%KzeUztJ5)2~5thqd zS7$$P$86tyazSqEiHz6Gw{wLz7p$*+_K4`e9-OAt{87a_uFqq6m+abZjFD^W6sN7V zPM2jlwj3Oyid9rTt2^pQJ58~^JN8n5X)mIN{JzuOE^u;&_cm1{9Ip9mI&&~tK8J)! zZkGF7&>t$UP>f!nG$W45;sk`7xScK2{tM7gzcbPN=8PPx2;bxt+3m`TTUQ_oh)M_k zMz?EZPWJi}^%9oh7<#InG!GFmdr%K)e-Byf>A4=Qm;{+7%4dhYD4cxVl^pW{z*^9i zjK%(exE8-wfBQPiOyduElY1E z9nZTVm1MmQN!57RW6M4YpZq6FMAPBGTk-nyDq5`;WjJH{Xu5V@16J`7aRu^8Yp-Eu zkxem0B$4A1t2t2jY(U1cgwS;1Osm(Nho}lDoc^?E4?mmcifdKSS~HSoofG4mjtYZW zbDD8%k120E6fXvead5Ye;uYFnO%+kE2lK9!?QsU8lJaWxHZ1}PV5=5yQXyIXgW)p& z%SRIEYb(=)oLWa$r)!EIkkMnomw9RKgh>W_f&i9KPY!pUOgIOLb4$UXt97l`Cs?6- zG|o}@L2@}CXyJ~c|5~u0Z(8Ci>6i@>)kE{)E-z(>7F=d6XnLODM;er)_QD^+xfgTX z@JTiq%3FXFwlo^p(N`)Se>Yd34ZLV`>Qd&HzkHd4FYDmQ|LJ?7uH{eDmA8GrX1$;| z(I4->bTuur93C@|kdHKTpN9i^c2^H&6ky-m1LA}TLH6SxLEcz79RCSGu?5#%Px3OW zs7TMOqopvmI?Jf`@vo|3)YN70DX)uYvP=rFt)MU;ghnlt-LbDH`8~g0GnB&iT+R32 z*PK)qV%N1;p|gqQm{#LF6DzWM&w&K1z^vJ0P1Hbm9)q6p_SoU{QTZKHv-|J;HO{S# z8tG@LDdtgXI2JJ(0u4=k%g}_!8{vbQ9%FZ;;?5Lhn-8U0!8F^&S}z)i#c}#MiT< zrcJbysqc@2WMA7)>vjy7Ac)u+?!p#@iDAqbFFv28}7FO>riy3%{0q5p9dVT*ba}!X6BD)&42ZlueOMo{Dm#}mo-XdH!IFRzdAV!kWGNWG;nfiPBSt>HyBSm7v>YaI0+3De5 z2UH9VVCTd%FFlq;RnETUiJsC-m3r^Lm&NoPifL!V=yezhNT+!mM6z!1xOpLUk!yhP zL6mhggBFqosA||xAkHz;Et5iGFtcV0!yw|6$gGhZBMhP#At_DN}%`&``~iT=gzOj*mIYD-@jDRdZcS3zX^j>BMH8o^tP zZUjO3W+N8>`G)b!fhd?3M`B$hTOTrTM^?qJRujwo5k;RbRkUAjXdyTS^FG z$5;`xyZILf#Mu6b{YmX_mP6Um;OHAii%JT!(fzBQ%pFj|ignChQuK>gs8UnNxDd7_|B4Y(*y-`|!lN(9opb>y`p zE-}{H&Y%*_IIjd28{{&(diIFXm#j2X){0Sg)X5Udiq)J$jm)`AZe&S93#6NzKRtRV1?XY^4xE+rDgd&{!@jPEGk$8$iIp$q8ayRB}I=j#-43}`x-!1&;!oH1`!8`UK61$(0JSM z(8m?snTNBTQ3xeQAT}Odl3C7F*cXvY0kdY1Q0C?u0N!n!W4;tU&~)W8c3GKBtM9mo zd~I}HVWHfAAP!wPDs2Rk*da-AuMOHml@!Rp8y$l91RpmfgZ$||w_SVjIt8qfE=BOrVFiwTN}hx&_^5IrNCq1Z z9W{`&OjE&82YE*|Y!sQ)&|)o0t_FeU80xSXza_}#4veuI3r023FXe36u!JJgJ}zo1 z5vA!G#*i$lxq-t+8>CXE6#XuEh$$+0f*$;|BK0&Q+@8wgGVs9B7-_oa^_xi*^o($dFwu(S(Zq=}HhAR#r;{rEvB#FuL*Is+O3Ql_~f@DyxOfXQ% z>>OGemp+^w9Jm(9pthiE$IQ(EV!-j!RKEmMUH(z!y~f;Y)YDXLng;w?J$zP;a0QVH zw2ZQ@_*LwWll*R2+9_chiaR#(M&)^fu%^gAIy?4A8=u2-YHi64xfLZ&XO3O|<8(~#)(n`ks_hEt7NB`Xlw%58Uv^6q33 z3#yO0Tg~F%o|w@%Lsn>f8oc@5nIMvvmogN@x0Zz4gAC87CbtEOrazpXDir>-zr34e! zUY%^Hs5H9|L8C!Xl>h{<{#YF<=XA2F-NQyC7ew`Of*8c;HEYDE(~fe5e5A=Q@+(;} zq%PxBCZ2DuJRSHL6x5edx(hN(;pS|P-0 z0G1hfZ7{uP!SOt(RAK=z5nPJG6_pD%3}Ki4I*n>XoGUsy7#(B2`aDu!n{iLU zT)weK{~LGdXqShb3|;+{c(iI3cZ~q2RjrIRO8R7spk~A;k1=EJ=`;Kw*&RH>P`Q(? z61Hm9K)&La)?(=89}a2yKlq{-tQTLMQ~qU< zeAyT;kpE;1EN67j04dE_Mi;R1Ar1gz4^n4?!H3}=e2&;p$0yoE zllRxLcBJ4GGdpJv_VG)uRbWYHgEM8-2VyaF;1&m3X%QT5gM1U+;0Hzp&_BC-r%w-m zD8D7xxyYmd!@$3v>D7{7nI1LIer8SWrRl0&t#Q0hFWh4(yV)0k{p8 z3j4ASAa7<;yF4p8m{^dxDG>F$A9^YV@`!4JQ(RQS@#i|5>L?jKfVS5IyB^tt?%7M*6B>`Ezkny5ny6n# zB8F3z$PV5RjWocVGDYAp*u=+#g@YE`$bd4vvgEEtuzK!|fvz(Y zuZDb{^6Kj{b_6yU@c%54g}Y&}Rp)5}?E3EdF-m_pTG9_&sLV>o95})(X>0z*_UX+E zJN%iXqp!0Xmr2`>5N-k1XR-UfAepYfAJ<6Ow#}68fa%I`W|>RFX??&CeHTo%?#LIh zjyRlZqtONmM3cQ%nkZ@L8k-NnTf7+RO<>K znsyrh5kr}yE-L!hp;!MZRO`#<|I6oic?GoTSMGM%9zGg@8NlmU)2D_M(AklShqarV zeoZX%+Pn{1@rLN|B244rD7VMvX-t(G{IzD8Gkn;_;-=3loQVHTmDSVrK%$KtYV-=+ z8k4OMh^seC-t(}*%&{$a>pprOU?c0p742(LcArl1=p$c*SIMFuXXa$@A^C(a_6waF zNi3cOg#FaW;#3(S?W2lMmq$?nG2N0piLc|E6B&b#$s@Ojg9S_5a%Kn7`?k`wy5V*G(tc&ksOYSJR8$jr#8A|?pXtgD2Xt#U!up~ENJ zz9CAPdwFze^MY>D*_37C8k9NAad0y#-;;HMo{c;_3V2Y0ah{-LfS0<&^q3|0-hh4N zXwbYfS7QT_A5~5s05)nQS;Zyo!Hr=wRoX)VIrkzP$9P*P-Vifox1)|a1}G?I`)L)Y z(>rDHoLzS(Hc#igJRs_3iqjltE$8?tK9QTBP12|_GFeV6uhCh$zu|29t6Oiz#wmlU z1!>QFP3k1wtm{Q&jonKd!ZXq=8xaUbB*01208qfmD(-1Hp*O)n3J50B2cQc1=C2yJ|4xC&c5iCk zc)g3tFpyKvmXINng1dO4x!$s7~X(ElWP=2mHrv|C>%#9czZnYdLY1C+ta_RN( znyeR)D7u$;5VO_A)FG#y-Z_bqhcX!;kcNzgys!&p4mC+3amM^|s#`$;$=W0@FQmL` z&SLzwcjl)K^y+%~PMl&tv}Tys)9sj#?0g?T@O~m>v=gYXXLXL?=E-VBOeYU5o=1J( z5?hSpk`ms+k1B@HOKK(V1&BAc_6K0T}P4qZ& zw;Nk13q9{V2LO8yEOhGOE#Z|C>~9sj`^cJhBDX&EH@J=Eh4fek`?-f*G9|k+?eWNL$}~(bP)dv6rJY8PLFB2A>pPD5Y{Z*775Mx zyOj-8-B3Hh5Y=Ub5WbV*bV;)WmK1U3)wh~E(cKC4VVr6ZyejF=i$iu1a76#ec0)z^ z21b3Dpa}C7;R1Rwh~DcAMs8@ca>;4T00a^lCxjPyaQJ#CaDWy8^gO<^!erovT#J%? zT_YOu-%({F(IS%5rR+#;Vz{07Znog}lit&$BYKH}Liy0) zR~{CqpG8V(jmO%Ec~ne`nF}CnLAZq*HT01Zoy@&~zz9MHr|Q7lovc? zSlR(FWM)S0_Wsgh4TTSVWM~W8i@6wN%uP^nUXrn`4MN_b$?pQ(4JN5VcArf3-D{Ki zEIxXalTzn3nHh>8wXs04___6J(Xy|gwK7{b@uuXwI|2-{5}Sqzlj6R;XHe!qlYqp) zPd`T3rNbs{IJovZs;ZSLMFGXwG>_#7Ya*N9bVs1kJ@8@@H(YjEi#LRQ zg!%Axv{Q}-wAym>ZuAz-O+ceX+8!#rj#87k)rWMig0l#}CdEWgxM1h^taVCttCzT) zx)wRLx65(C!z}g&c@Cg%a*9)I4~pvZsu?_UD!M;OEqVG6dxa-;o!jtU*sWHgXuK8P-<9>PNRp@y^z+&7oqa%-Vs9p_{HNswCy%WHYJ(0so#Q zpMI^_Ckj{W5alKE>4+L+$6Z&+!@DI&PKf0|3__w$j}joNleGorH-mb8SI6tg`6-Ba zycaxc9oS8H;jz?NW+1IT$4Jk1!9@sBfa31}6=d%YtNfU3SjmpimEB1la$TL1%^T{j ztzd;N1Rp@Zq>>Oaqoz|L_c3Wzt;v z;T42SnF#OGT-YKzKkzcCj?kAxkQf;XuyNEn)Xvr^T_X)mVnWq#Lx*~uflPVm`!_-* zxbKByucEzp>aw(nIy|NEmsZOkk8~OPn^^sBuvdNs_@Lo+9t*6j`}U9C>91%>X+jk2 zK_wu&vi1UX%OzHxhfBp&#g^Xn^~b4BqGYLL^n5WJYar)D^JLtj`ip43hV0g3A|_%_ zj{BemH_oiR@yR6NmI1aehK}R#QE`SbQ)3HYsl*-xD^>Gix z^NSmm+5QB{sRT%L=3$-T?Z^hkJT~x#SvnCMZOE_U9@lO>L|IP@C6C*lKwgMk10WsC z+>T*ZUmR!%%vT2aUg7vO%pdYI2dVmQc1waMfp;P_XGuQ=I(w!|;cY zJ3s$d&A694cI6Kh@yy$C?e9r(E(p;*?^|hvc0Wk8X)Agy@gS={MX$}&*ye+L)w>Cg zmn1UI7%{p*#PKCyT!77BhH-D7d@W};=32Z3wHk5b2+{A}%&ArRAeVRqYIY6BTfnJNf98-DCN@2CW_@e;dd-4jO^G z6BJMWdqXsEnfRX*qCs2eK_jqUp!f<~_#0b(meK|Q zF#hS$t#4}0yw~UGDQ;Pp!QddvY~)+?OZQpMt8t zR+z&5Apdt!Xq#UJvAULY_b~_B{^%aWgi>?KV6y&|?$Q1?;r%JSU}c|=1H=z*CUV7X zsLDMJYIb}LgOb3%^*;+rI^KnY30k^A#D+nDK&C&P1)jhv3Oqo(;q!Wdzdm;6DyYGE zpSxEc2e(IzAx3wIhIKFBf(l{V86=O%qdhR~F@5^9xcFK~!s7J?!vnWZt_hC~Uek0| zIqEPZ1xzRX7WFMQtA5^om9$dj6(H4`_gD0O$7y|6=sXDH@0b&-m`he7{2A+F5M;bs$_nJen!)(L>aYMozC8sl+e5JZV6g!)Wr;Q%Ji1N z-^z5wdujt1-;{}0#|iA>!WLh<4#{JjAGaJp`TU;NK$9BqF_+hg-uerbkE#y&8pJi%A>UT%%Z|-ZEUZVV| zwZ4ff9%6^0LgX57t&64=N8%8BSnL#Agt&tGwggWKcZKpnyg&1MMV!apj%C*}Tn15(np#dt;VHT!~YxqW{-~5Oj8dbc+nJkZRO-!VsYJ%=%I|_S1MCUMoqavkgmI7vi7y087=r; z55b-Suizm7)~6lV!3#n2cr7Q?6dM?5@G?HN0&MSPLOpNF%oTd4rxG&dG!I-;d1U6G zZ{Zx;3(eOROO@)5RGHc?J>@D;L}l3rLXSF6Aki|iY@Y%IcJ>_4g6B1>K{mf4L^ot| zI3@?HP)&zdFcDC5J22{hbs7o0sRxe%3P$Dsvr|1WVCGVHME@sy#f5{x2+80S@CEPx zg$48vBUfdnJ=geb48RzEHgXl=V4mvdqkyWAeZpCtT(oG}1`1;`XE)Dc|s-Ih4OkKi0-pTh&WS%>IN|`s$8S*y&$V zXuK1CAAAp7O}9hM=5kokF}5S{2)KOI0$(Zzeo(@b_LF7y%wb*NRz~7|ky&ijC9o!K zHiifBl0p=lJf_td03&mpZZnra6eSocRS8UCBO2B`1w=uXu;i0&g@@FvK?g|Xo;)Bj zF!!fFzW$h-d1#^GUrii?szAx!p&p@p+AZjR^@p}Y3pM_=Zv@S%RQ@%V;lGb12MBNd zkN?BVr<{(NVqMEC=#ezX4Ai~9Cu?a|Z2+F0?}Lymqt0Z6>4o-Zfk;F;h@dkD#3IOHQoM8bqXDEWKSoG|9 zvc?OG7$yX-ZA!s{4CBSks>9i+{+b}HP?!mzD3*S9X`xy`IOU#L zkKHJ$KU(U;2x+}PBUXZk#jSWCBiOXSYl*gQ>}i99+Ca>*2ADnhmMPWStU6Ru7SkI` zF+F5SV*Mb2`fd+BjOke0d%^}G5Ia>PG;n_I zAqR^?E5`I^2O8w|1i5^~v)1)IMUbnuTdYoxl_bWD@@J+(O%zl^B~vo2B6&2eJ7cx` zea3xkmIXmRrvUrR@p6bG&xaV+ftq&H1A|+UWJe+gcy{~s)HNC{e97`ChN)In*7?!K0f@p{|25>t&fJZ zSK`#v!BAyaoXv|kRN7(HHU8k9{x=(d>268Z5@ulXd_t1yFIyoWI2F&&PiP4_@w~`pyZOA*f=Od&AafSTIl2aQCq_-{;-M6;*!Q$J6Izi=e@ZtS zlN1sSj4(oK#4os7dR@G{`e(T1eP2G}xRg~Gq1HE|q3?_}PZ7!!J3$H8$P@Aakoi~{ zajXMgJ9M<`HQ$YHAATrNSOQOkA^Oxj&^Yu=SiJkjv*R=^@%an^q&}i!d(lcoG8C>? z(sPE?fWK!H~@m-WnOXRyHR|kFY0Kb=!q6-Lm5a^#%Eeuf=o> zdD9bQ$d>tuFu(kgV-WNDQ7ax;Wk;g)`@kL*eAd-%^wH|8hf(3 zWfrx)nsu}2DazC*<&uERcE)DeKrPM^t3mv!2m7>$VvE6;6lo;$DKdUgn#a6|tY-al zn@;F_u}w-B`q9um zd-5UF6(bOGHgj9h-F88W=}vwRdT_sIeg&I)IO6Z<7mzVkGDK)@f$4=PJIX1bf!*2D z@NhN{xsh&>Gs;*+UIkhj2`W6=YB8d;=Me&o(hy9>b@W5~It^YqdK2k@@Y1~jtlECi zNKWVbfG0Rp+qRX8yS12-z4iSKw-%2pbAfUV#Hmxn2L8(?5XeO{(nsM$#}NX(mL#9Q9{?`>d3YW9Uvwf{DLa6 z3ye{&2;?e7k5CF-4G;|8U`&;dZkyj8f?iE@eI@qk8R>G|?}uVPUp z+>gdmnS#fP;)@}BHL=;;w+MeAUKbvO$$h@ z)=sP|OV#IrWB~c?m=|eJ`lxss@6?&1j@tg5Al7{ZD%8#bd(a{@A1J9*Q+Q202pq3i z&s5GloafH?T5=hqhWKjvrY)@?_M8yGn+9fwSoeE`>gchN=@DVaH_gL8zkCf*p!!*m zOIY&yqY50h9DpmVT@^dtv1A&vRQbfV1y6*U(PB;Y7T@kg4|IYoZ>)}*B)=U(YbZ3D z=(^`q@h+o3P*ys1dj$;o`?4LF9D5h2fj##z?l|y%=YM-YEfp+Hu|v>)*Z2UlbtcbT z#Gf6Rr23>1x+D&`ycT9b&Ull#MeURsppyGk+xNRmk%DXjh-3fI2Jur8mop{%XZ-U@ z^X2o&(Nl!I91KwY>`bm8I?lN65vyZBZueI-wtzZatqaEE_iuoL*8p`6Mu?>pJ@mP* zJkL=N@e6XYv6}HsSc;N-Zx7lec zqft@)Ou9+hi^fU5JP0NVpz}UWl-%0?cQUx0oM`H#@!bsXJ8us5L1IU^va8I+2b^Af z9Aq9Uoq%1|6bF8#+5YzH&zcVo1~3&n%51>>z_I|TR=Y9$XTdzCnsVF)4EpcSr+gOw z^=vSF^F~)YfZP4^j|x1v23XR9tXTuFMnISGZD1}OGNA?z$oI0{_x<_k|6v2}_ji&7 zPXafQLQ^Ek!YtAtH|J|y>Q8?t!W~pL1$cM&dL1kym zTc|>RU%q@H6AlC7U6D@*ZkNzujE#}|C3C3rEjV(}C?1>XJm&DyBtU#}UaJKlim@}_ zHCN7bBZFpjn;urfULI*u%53yflpO+5=#nYj4)%|{Bi#>TOLvP5MKvo75X&x@ zKV&`14px^Gnf|QlYJ*CtBP&kuW3BDaN->Odej4_2zP7y9A8A|jj%T4pm` zg)8U+WxnkJC2P{zWV4PKZ7pIxPfs-*&v-DNh(Lor+0+T8lNJ3%$%W9@b>qV~jHGNx zm>Lk@{t6W21bzbuiYw|7i#m=_yhzlU^aIcXZCZ*5G}}x>=#)tI>!;^P-b(N(KX`U| znJm_1&7!Tnvg1)4{B3k4XVEO+8-7`~m|Y*a2$o^QtIA#*bsl;f9@I~oCJT~Z2imm` zhbIyv``G1yIq%Be``5y8UKDZD`U(0TL5{*ys4laekwD1}SLg(#o_5hniTPIf zcqj_go6+=Jp!2K+wVa>53*@Nc7QH99d}pfwlQ)-eFXXx-2m`X__a_e^RKZT;JjhzX zLv}INfaw%XSZ%^O$gS1qy529xoRK&Tdh1r>awNJ{(a}*JhpF9PdEDn)#bY9npeel+ z11U>gJ5K~+gh^gc7nIYT0SHdrWoxMr5jHHCkws+PPn8jGuqL*bVYv6)BytY_Cps?4 zJ@8NhtYLF9?BbBWJ@N_=n{j3j&2tI{fZ1~t9X^nueVS^6v|BE^ZNB%mR0d+Aqy>kr0WeXx2W{@N3k+Gpqh6zm-x#tg1uuypw-8N3`t;x zp2hpPs(F3o9I3crm3W1SGTFXexO8A`xPV!KVr&(D!M@P6Q;pQDR6aTZuPqK`bGnFK z8Xr|Km9!;CV}M4udfgNnOv(1van5fudZ}mKcTv8ki4Za@T~}-;84iYoZ&h9%w2d4! zV=~p{eDQYpYCsTM3{BKd9s6SD<`;P8A##RzpK&wz*Z9deBoqe52Oz<@+`j*bh2kDzJBL}U1=I!;!Dg+`e z?}>BHhh#?01GFVh%u7BURy(cD;z*eh*LBiU?IH+nVN#!dah#^hc1s^Ft&jjj5B`#mGe)Q!sm%~zuy4=E^{hba zKNBWU7G|cNN$sQVCQ+DNyqI@+PlMv_4kjo?^|*8H#K^pdZ?y?KK?ipFiE3nF%#UUo z1M7@(&idUpAn`YU2fvz(!pPUC1UaKi2n!@ltQr@Mn|673Cco1r%=-TzHPlheF9zWm zLv9~+mPJ0L?v|C;t5Z9j&Qd_^q{Wekyi-9YI+wuoR&h*kR+~IA@-GTVFUeFi?+l=I zNGBWMH6vF&9O*CF1etj@(rg-f@yLl|@OtCiGCN_{L>k!$EAQ3R8X3(S@wFoqY_=KV zJI@-cpdaJX%;G?by~IF+bf6)4qZ>bqC%fZbWFscAKuBnOv%@aIwCI+ARuzwzqpab^ z2%hWD57?*arp;jUG`HNQnTgAmOw#K{rvj+2Z_h|vt>G1qP_- zd((`!Dt(~mU>N#4-0eO@v%-SlCD>1-j%|fXj^RnR4J76&a>56L^af4YpQ4q@fn z7SNMkutWRyh7BNZ&P-hH>l{BgK#-g9r;{9Pw3@!}-W`YO4pe!0BrEc$`jFI&FCC^# zHz!BEhmF|#*1Bae&XM?2WEPd14Xq(YVwOn=$J-K+h2^e@_zxgvWICR4d*d2(31Xh4 z34tV@uxZ!Z;`XH?*uQfKir3Ayeg>Fk-l~vyjYgUWK(BF>^@#EuW9^nz-qy3dD~-C5 z34toJM(ORF`th3X%$2^T-mVsOs~j!)s1Dl_lxZ*CyypknG_7xLHERJfn;q*U&L35J zb2SFktC`Cc`psKj3fFKu!S{PE2>@~yJ_o7gVwN$C+%Ri5mBQ6>U$t(f#2|+rV?7z% zD29m)JR@#o{=}}aY@ZZBjl7pBcRyl7GrYvtfy5|KGOiojptzDsjIwPVpXq+#TGo6y zxXwot1Ua2po6&$HBpA<}2FlK1oe)*i#$G|%LZ)Faw+lPRq0J^z-U%DwZandl`Pog- zW*b65HdJ$Lq3i_jrsTX(zkR?pj9KWdck!8Wx>DqnCWWne3jQ>6^7vvOAR9RwdW%75 z>~ePN_22ZS-6d$JX-vnX8pUDBlO&R1!=;wO@Zf!MPo9Sr>o?_^1G ztO`|bI}HcfLS8N;FdU?ZZ^SjzDOt%s=R(OgK@c6KC3Qk**|5rm+drmXC)**D>D07fg|4Z!mZtRUYiv zlfHQB=)A=h1$+9P;Wj!fYy9*sS!WvSPN_qMGz_Bv@^pd79x;l7&W|d3Aht(H4T1#Nr@y~Z;ILVs#Je|+~bO~j`lf}=m9ggr& zdHMT~2L;2`8(Q!G-Oa$O{QccO|DlCGXlHx0YWsS+g_JBavlRMW_Fb*neJQ9I5@ z^b|uKvSQw#4&oM!P`@hZb~3-#dAUFILP^L}7^9KrA z;x|Q(4j+h^gQKsvzsLOXlEih8dR?}B{H^#|T#g()K){vYZQL*jU(6E8&EsuGa-*9k zT8hlyv&XfpvPtHR#&tn9?YZM^SW9bQ)9pbi-)@=wqHMa3>4npVuE$QDu^9e-+DRuy z2_nL&#Pq7|?0$pFvJ;i<$d>}lZKD?Q4lB%uiVq-Z&f`Jri02OrU*9x|$>}E3aQ@Tu zGEk3n@uFmq1BJp`L@P7YfZldvJ@v_eRnS6K$pOZExV#^&-3q8Y4HghjR3gr1cskA& z-HyRuETqd(k#T6S2?W3JMx1F=xc5_Ut_{r1BfD$Wml;2LfB%ef2G>tZpJn}sUfe$1 zto@=9JS?qJbTVOGJknK+>3-UVU#LKyU2%7r)a+}Tb)Hp6#*I(ya5$hk8I|G;wN0~zI2SyD}vi{iV z_wf5`=x+i0PL3lnsdlE@pa>)Ke%hl@IhG z2|Lx5@iMJ}N&Nqy&)M&|52WNB_R>Xq@?ng6&3=@|C;}8xw-y z2{q-N8RS>Q6F8y$P3?P`r&HRll0q;q;Vy@8qNV5*S?6_W#FGK!S3Sh20|Aj(l=TA> zFEE1UOy)l1!LBzkYlVAJKmYXd(O9)Z;k|Q3;VZ9g&h5S1V0T9)l<*R-tGFawn8~4b z-K=bn)d|xU9!=~ri`#kju^Oz3KZ!*?M%JB~U|shOVts8fUR2Uewu{-lv zkSOk{YhRqmoE$#DUo--nHFBH%o*sDF%!cKbpjw|7lP6isS#DY`Mt?0|UfmaCTyci( z?{Jwv3^5OoUwtsM8EF5pxiS_}QKx&b&3Nh8#`n%4C$_^)Fqu_*dc8x%%nM1l5OiJ@ z+#h2L!bgkT{g!9PMDV?@j*59>dJv~3jAYxjy~Rrb45ZWacNnVc!`X9e&Tu$^<{_&% z4HDFqr^4RQqvWIeUEgW06GoI}y5r}ky==XVs)LLlHW8%S2XGJiXhi!q!aT)aYRI2dM49^br~sB<$JAPA8)F{OliwsLrt(puwjw%PtK<#nFKaIu=J zz$?29Q6;0@Mr(qq@wO+~b?!;L_Q}}jJm&fLqkswcIB$fxf;3-%yX9w7cC->3pr6(k zH<`xHhuEFWN&COD!Kw}DpAi(4?nU2;GUKg|kXnLr@?!@Cgw5PnntDLj-JcMeR z8eGKh6S(z3o>VcQ^e>6S?&iKq(2(pI)YWsfi*jh?C+5>5#&}}XcKi{EWk2hdLW}cq zVqwiu!gGAGGKU)zREiN0o~q+jN!znVWGmvYfZ=%JW*E@+6)+w^7LJ{{mA^&Voi6vg z^wd&g9G8%m_+;iktx5*X)#us8cmhv#Y5N_LqhLiiCthpzuC6iVIJ5O^P+Yj`U-{GR zC3YJvu+Ll1f7NTTTKJSd#}Jgb;>7n&M#wMUT-Mtf`ih5xY44Tq>fmZ0+{ z?OE*XpxLm{ZWhFZKU_;N5_pH*n>jtxyC37DP^%G706MZMY6z5XBf&UQ?S%G4@XoSO zZg6ar;=YrPoXSo_Kw*Z(bz@}sXKiIp5zG27_?E|L*K=v!z#OvmO|QO zvY1=6EkbSu1>wQi#CV3at{)zoR)Q!LiLU@0xKBw=0?lG!(7?iwC(dr$J^PibCX7+7 zu2KaT9?&uzXfN+(h9lKU+XM8dk2ySz#W^$`%g)UNc<`f&s$zaNdOfX4Ln3 zkP$qAJ>~>u^2)LT|EXiSV;z%S+0rscQFSL_apPq6EM^t%l71o4OH;!i>IVt=&_KO^}6{#5GBZj0U7_m9MF#4t~HQNqS2jrJ5|dPidQI8!d| z$~!948OBwGl9HT0n@p(ciBU?4)ezKU;gXl`yr1m4vF@exe%&-!xPc7fb7l0dLEh6k zobwB&Ahb%Z8KyA~eC8fVq&wnm(x+jw=xp)+4J&h74kj)&UdA4~&?y$##R6r#4{5Bh z3z{dlBAQ^dTXY6*oZ# zyW<08go{POUC0y~{6rR`0$U zu-$!X;U#0-ydp`upAh3Dyj*<6_3235gm*#5BjxO@fC&bCEmK{-B<}g6Jm=|B3jOw=xi-I0| z34rm#Zx5AVIMlEL_6CK2%L9FMw>vjrn;27`&z0)(n9C#%)`H97p2;I3_SvS1s0-g( zidU6*vTyXQ1(Z8M1Ma?Dtjn@@bOpi7*n&r1318@{{{L;CVTd>h!KiPOo(+ps} z_ztD4$sw#DA`S|2)3ZDr?QS?ad*B$8IQ}>Yp-fqJ9!(Wo<_+AH6v=SN)VCyI59v0r zA_v=Rt!FUvCGE$k1KgjY99x6mZ5erXBsvmZ6-v;N=r%zdsscn-7o$Whk*QWa2;b zulC)3gv81SUm)e5|Dx~6eWtjPr`k^~H+^HwT*V87Z?3qT?zy(sBX$D?2x)g5;GVJ> zHjA+m@D;l3MI@w@fir4iwYql61cT%-1M z_6a$~d3^haw6`s7+b+E)Lsb4{t zBsX85@FE$&LoI}I;R)xaB`&%|dCwE;4#%11>_B!st-=T%-41Cw zoi5tiUONR9KW97!W+1|m1EQ40mB>{)ZJVq1I`$?N%{(|%8zzrJUTzAPuk?dZp`c@mx?-N&QiF@bycd3=jXVneATq2@IWH0(=aK zZYwZsRA0egH~C?8aZOC0Ozn3pb1}WvG58z6_=8_b{GL_0Hze$F%4y1s8_Wf<{RLos zvzLuI#)KgUF`=8`20>r^*;K8G!t5B>SMU-<&mDm(r3u8g5>!q%Z+(2<6B?8>cAVbb z^uffT(Gm9w`Nilp8U2|1DY&g@ZF|H;Hg|JdbgCexa(&g_We$#)g-K|oDKOwDu8D|; z^o<-RjEW2Ciclv^F=A$u>Vg#!c7N#I)JN@snDz|y@wp+=1m>^xc8vDg9B@> zbyg))84EPGheLamTQ)x!zW5$ZnCu1RGtbMGv>(jRYd+t+`R>}UDu=X~a^%&d-J4w$ ztlPfknyjOerGA4(LanO6+0ZP|pLA+6_@fFd|I%B&pMjnAY2oshsADJhi`{=pQtxB3X zpleR`Lq5*uPKijfFK4 zd6i|U=QqH zGxXdOkxN85wA1(9%k%*5w-e^s%cQ-~mqA}U8o~yUWr@bw);$v z2Z#j~^F`gYL$E5aMjFsoXjnNrT`0b-4S1fw#!e&J!R5y9=qT!Ce_t$B86TumiCp7C z94wD^e4Xx96qCzmECL8~@}sY_cEhOeF8=&tDoE2JgCeHDHNy7WHA0Pnd##L2nxnhp za`sKH%g&nSlQFm@7&h1l%S!i{l}g30pvA^~HOLdRDkVNW_DnE6cEWTd_-K_cTPd5O z{J@{3P!bRVCF71Pq_s~=wnq?Eiz_!A4{4V3or2eaoRz_P&%g*u zGMgTIFV>93tr!LQyXO#Dw_01!)2vu4$&DNVLmPhN^|&YOoDRgWX9_z0q9c|LDFEqv0r`*g1JrpWIgGD^NET>188HpyK; z3nLkv&*|;yA>UD|)kc`Q%1@-re`vo4{8Orh#Qh?a(=!&V-Zl=Hxt=j@uA)!zp;&usVDdz`ZnQ-fPb zG#Tb$Ta33Sx9n^dH+EG_gY6`kI)M494ec_Oye$Ql7R6O(#uws0sHceWI?3? zlA^e%Oh3!*MaL~eLs3(hS_MMk$DP8Z6HUt-x<*XfY^-64X8g?1or1@Sc5Zi;mlo9%Hz`AKQ>z8wCer zK$5fYpxqS6I#DT#s}yaV6ljNk7mlHY;1W`54J{`%q+ zeS%c>=_MxC*!*(*Z;vUkGx+uRuNQ!f+n92B<--I-MvTg#w5jNSQwURTTbqZPpIj zFUJFXAXYmNOOOV2Im4cwofDm3p9PqHGk-a5`HK_-GT_u-4{QE%{;@B+cEtQD<$vDp z^E|0IrpxrNX{y^_S1{cx) zII4fN1pi=?{!qK){%CEb+2McF3cu)npxgiP;|d=Bk$j~8!NmVJEB&|6{v#dr2e-TT z=vP_AZzf2kkbL0!&PF>DFqo;)VBgvHw;f3f{cq}t^R0jT=DGcg3iim)`xz|?r2x@< zuuuM?LDtTRJ9`?G`$U}Jgj8OrV_esGYPm4^1aKYLac!7$100 zk$`9CU_Ko-P;8lo$ZiV^fUn13^A%Jr&GURq*yy85^ds;nALUFcTnRksgm?SaUGx$_=R589>OY*GsxuRM>a-1W@bg;!^&d5R3%~{G?VA1dK%npz- z#LB*!P7nhEq|HtKq>?0hDTdPb1u*twF$jpD%O-ThtyIJVzn<-KQFvZ-W3PYBa?iN01?Wx4=LuIKP2Jyv()g|izz&JvXQA+>LyonW%td@8$|~mA0~J|;<_xA zusF!|J!99p4wY;Wn{1oLE~pTcek12kw|OB8aFx6q2V8!k(6}Iq&5ZKaiIi^y7!k&G za~IQ;Nb{BeD*7#WReMQ)0z&fP=?G(UE9V(-G9ShqORJMpA^Dndmo-9r&?iW<-L8=j z>O_y0NI406RYs0YT9ZG4mH#8);eQHT{J--0d59QG*;`shuktP~VNf1kN>Aertj){v znksV7R0N>|Uo`np_S_nK9nNEqjkwGXmEx#`k4baDW{cH9kV+7JC7er2{&`&O()x* z2~-xuR>gWu%1>@D1LCqzQ{@jLsq+=b^@v-$PO^K;|BkvQ2Y# z?_mc6l+;{n4?jW)jt$_CkB>xNxPkJQuG}`?LsuVr{K&U;gr&|kD9c;Wau+K!z%8Jk zOrt+&y7qubE@@Qbi#+jR; z;D}>r7m48je{qKb750kVF*SRMb8(}h^>y_(iA<)muf?qp2M^jRakY^Y4-!s_b?_9a5#i1gsX=NEmXE5;xEHBQ-4okNWlk4O=a9Sw-1yDOLI;L7j%@567 zK@l1b=-?5HUhd2=uD$Ap|igERoA8PD>`@h#`vC^ zjYYs(gJd8K)I)nYtEa6|haRi7J8N^hPu=&Z1Nka-N$@%+l7T><${Bimxvv|Nok$mt z+&&^yYE)v}lqtrD2|cyoW4ciFg0^Q1O4B^)E^W{;k3JWyhNrPgd>98OHIo-wF*7 zy{FtAVpEHrK3|$b4qpJ2L)jow>xW=diMQ)O4|b_kJrk&04ATL}zLilQJRWi6fDUU( zgIs4GS*s{-KttCXBbN7~q)@pF#~m59q=r&*rshWw%q8yah69~3?8wsT1Imu?f6|() zs{bhIRG{YnyspyU+7FFMwuPmK(O1%hd-)_j=9DXea=CWcgOJQ1% zl<(lmjTKgF^ZdC?J{<&MU*JS0c6vT%N^Vv&FBP*@MUS2n81NUlRCrBmm?)}8+U{}) zNc=^%JoY7-^G<^oJ{;p4ZiKd(OGjI)a1>axhOuLArpAw(>N_>p8MP~c__Ju(>E+1|K`ll$;t%p`3cnUhPMrIy+7AKg39Lyg3_EkUVcZ}s*7GjGuwII+ zPh5ewYnUYIa^h`=+wB-H6E5HqM#bZqIh#rZe9^_B;wW7D5$fn}XG{8J+Ud0u8;WZtxe0%be|bwv3{}lDoDq3T)ohC7hvZ zSEUy{lzG=@CYLFzdmq&m|8**W%?#n4s7_cHG=Vyje@Ev<^uEO15GY>dRRW2XcR|X-7^+5k?Gt)e%$x9?PA7( zPPp2;i>P0*XfUk)#e9jNNSuRO{(Nlhl;c zfHwsD1@aPP`UVU#ODP+nt8*=tPtIPsDs~5Z;?^m$tO19p6ur}(!A5oKL?+j3Uh;mDj>0qhb6 z`2Vd;47Y+0E1H_O&0`B+|203-}Pf7b%FY1g+`Ssp7G? zgDR%*D&P}RHTd#rONAB)8lzEw!|(HfDsTW$^3DFkft0xe%uiQX&D{$6bOloI2t3*u zpeg2<{(e31SfMfM243rL4+Z&$a}X zBe?XsvHI{Z^@#Q7-dwvzItoB#$l|#e-CUQNBU8=tN5-GK*(@-bWIh2{g1Jhsqfl*IEpj^fE)Sp*JX_Mf#>ts=#(J8BiSCmn za>KOPI5s5rYXQLkQ>kA5C8b<9mePaH?Y2FnxT(vO5MoWU`TztBt{{HSuf4Y}NRV(-{wz5E0!26NHI z*#x;afU0DPbO}dWvuE#yk53G$>ckB};*kaHNm@?9Q&+%7e0b**Tmtms ze)}d4{-?gh!q<7q@FYoOll&NP3ojlZ&(*fm|+HW;-)G604wlKg?GMH(!i;S{sU~%VB~~cYauc!DruaAKdRI!+!@zR ze>S_~N>+xOM8>QyiphE@MYV08vd9P1HSS=u6`@r$8}^>Iuob;U zT#krSw19O+QQo3a{kAD^gRJoNh%jokL)Y5B!e85T|GX1_z7ACj5}tX$g?fcOajI01 zGaFGHq)hcY8(@UIOy$3)mV=}P@*SCqk=-$SoMH*yR9qc!EiBi=VLiL*VXW|hQHOu! zw35}sWV!eaXj2W&+LC zffMn{70xT3a;V|gO!~fQQ((_>cm%DTvwFq=MvYRE+EYm`t%Mm`h~}n}CYssZ3~xHm zGy};6j?8say&XKceMQ@cvo8t&`|^|yE*`^9uhjr(sHjUUCVmg_Vi!A9(Qez9>L|2I zL+_@7RcpQ+V5BZF`F)@%=@@eUtll|(g_ZZf(ud5}o!UY8LJ<7C0IH#{$GiyqaDFi18cZ9#kHQ#R|h%asN>BT_7v2ef!-jYxKKc~ zIcO2)pV%`pjrH*xxFB8SP1T9AS8YsKDg3fH!U${X)NICo-jg;n4J$n?<*XMJZu^^W ziLc@I@`MEfAl0iJPrIBl=k*e=V44z2?;&5K^;$`~sUs*g4^2(^rKh5;t$tgl2*Cii zRNbK3j7QH{%K4zSO=OEjM0R670K_t;)rTK>@OuZrkV!|qbV1&iEqiKPDOF`QK!R({9)Ci!0YJfyq0WZN+J1<&;Wi9+teTh z=FUXTFFNzz06ndzJH%9V>``nI#8jCRj-{0Tt1&XZXkIFVswMZp{ z{6)O4h=%)xA^f`p+GL@#b-nvs75QL07kWYMp=AtquGeNwLQmljDtfDr|0_mlfcEpB z9=F;yKjJCbJFNp3;ODdaUN*+8-4-Kzm~7p?bGFW8sdD#)mxXbYR>&SmtXm7Y)7HD~ z-57e4!~Y7Onii8&H`HgP(=!E8$Uf|)pj*Am1_5->w-;$!+#0oCI<5%opk9JX_Gu0d z5LTU*SnF>0`!4Qc-CHLMP?sEBxP@&@oqQ0_<_73;mqX=&xsFuFTI0UltKIPm!?r#|(HNhwrDDMae%gzu%0hx&)yFFNk(e6#MJ8Q@;$Ml3WVm{n+9b@PV z?Vob)ZQ3N<+NOTOlYKFE48s7}W*?;t^Ws4A8?vD$7-eM_r26=X6y_?$S^v-?k`IOST zxK$)`fn~U2kNbelyE02ldSNK*)C(!MgD>7V@-r(LCW^}{%-lgbXWLZY*Nwfvd;;Q} z(AqDv4;z5O7~eK+Di+%HmCCBaWcTdEuVMfi<&D7qHVCa|5CPMwT?^d`bB9wD5M|j4 z4c4;dg4F%0O~FnzOb9?b-&x}}4dSDM>!`dfFp3t5)|3oZ;|4aW*%pMoj^SsbmDbDc zyOm2iF^orMtB6IIg=5r}_}76Uy%V9&MpwjZd{jxIo5COP-}qbws`{zZ84p})>RZTd z2O;RxN0pmOSs|RK#>L(SKy}unIf;M1A2WgPI&B4)|_$+6vZc)j)5xNN_r<8ok__2hb3(Y?Jn z&Z^b+jPG9T4H-_6k?Vl2oxy9dFU^2Q+(2X%I#I^S=rLtZYE&&2KC)O2w#2jBOE-d& z81J0-$LN~Ariv1@40<-(-@x_^{-VWe~Ti2_UnR zoFrNDgU{)W=vHVek~fK$j~-BwEycItEsLxe<^I>ANC{^agM>%UQvBY-B%Uuh4vpKT z%QZ!+5vdiW%hucVmHGPzdFM#ClXcj!$VqcIEA$hB@FIq@vrS=vUy&Xlr^WgwyueHUpntO#{;n{Uelf$^BkZ6;23j%7%jRK|{cD$kM^kzc9 z5WIx^*KqO@>;h?Yv$o_6S!^wl$#}NHnsUrKcgN7;fv+b0vIMMQkGVDyQdAbu+vr+hphXo1v z7=hLY_xa7iDAnhA9^t-^(oD0Q?6<${xXM*$ExS zXH$W9Zpd37oR>xP2&y^&UZJG(O8}m8c_IQXb3y_635J`a;sXh;yMdMS7iEIR-NQym ziRcEV#BPfO?@bUckD8howJ+Qplevgsm7X+XUiL<@ld3&KgEg(&Km(`Ls zO}!XcJU5|@pTA@t=ytytu!#}9eVGUk$Ar}EH_^3RoiH6}=F}y&nAhyf4lT6@p6FuB zM@)E!6`jX2l%TOxEx%w_r3o1Ek?Cdtvc0_y-q6Sq42OHBItEX*t#6qc!xZQ!W|Jqt z&CT8BqzKH)CequQBtD01sCJ&xuU1Z*mz%Zk}p;?Hx{}PBa_i zf4t8EtcT|5;l^b;N1M-rD*L04SL&YyG)m+^*T2bI;g<;@nzg8jmTffDID5~c!snF5 zP^Et|vmTgr#ZK3lOUH-e4#vu0xqVq9`+^}$%*&O7Vo#RGr@^>^FcUhIcaW|OWDsWY zYCOYHwoZKVp;3_oJS-bCv+L&})QRWBmF*dV)1c1YL2e+%ytN-5fw<3Y1Hu(*$IcwZ zgYRDkqFdE~%-)RcAz$y#AI2#1a3v0OU5*B3QKfNwRNdw?bzJN)6kJ5F0?WPDa&AJh zYJ`zcw!9_45BaLjBeONjStFlkSDk3LQz)b3odI!3t=V#GPjQU~QpgXByi*qXU+S z)M1$eEr31Kb&KlC;(}-@zd^Mg`jUa%KZvzB)oL8H{M_K77e(^*&O{1~reT<6n2y}( z3g$d7vn@HDp56mkpDL822c~1fPd9!f4zRG4*#ZJM?lf5K6xKB6Lotjw{$4c!#3=4I zenW4MnuuvS?FpH6c|`?tv|$-ke1d4nSweJ`+iEaZc_wH*FA1xK>)N#YZd1n{0=Vf4 z#V>k2Xh_o>HC~pK(x5e5Mss!-`EU0-drpjb5#|aYtPDIG3twVI{!5j-^ZzTcOgap_ zUNJiG@7Ba{E_%aAY)m+_xNs3vKr0H^z8tWDV*1xO9Ftgbc)dY#Z|^o$IjSQquTc43 z4PgJ-$PF_n!rXR!eO%88)cgXv~c+ga~uHASH;B zM+_171rQW|odLkKp8jOnv`&Z7ud0y@n)PQ5miO8iF@o=U3A&*dqsPhxxcw2VqhaK# z`%W&98}y1-I46*HpLaR?WI4xxR8=gnry_sKrJrQGQBKBo?qqY}FS3zHh0Zfch;hzf zAKuNeEOxJUaw@u(s=PA^gvbzfI?jcfJ)RAlaqT24Q$0#GV-TX(nG0zkSe4m6q1_n> zqL3#6cUmKcv$9n1f7tu-u%^y+Uo2JYfGCJ47NRn#h-?)|MMzYr2pFTHj6$lY3=y*x zkSSqV2M{Tyioli>q9PzNL}r;1Wh__-5auZ)%wrM)B#>lzKh$>Dy}S3_=iGD7J@>ii z4<8{}to5z$d*|Wz_OuMncAotu7L0%aFfH+*^Y=H=@nVe+rPWmRT>9CLv+w5a?oQtt z;9XK6370Jl6Zi44m?qj3ZPtZgE3gp#sbq&N3&~uK?zWyG{7zSI5fT)nY8r|yr-s;- z^sQ0HJLu{ffsCs;lITq8ikYKQWfJGEYrkYSOfd0W2Sf3qwu^JmftX~AWg0;c6IfZ9 z`_{Pn+-pUtbd0%bH5rZM>6=@XzM4k^uYM5SmDwVihqmofBCxYfez)>nQ8IU?W$a1W zqHTp(v@;JX1^Rv_ZF86C#{OHc_)^l389iGH5LlNnE7X$H^r>AuKizruN$h^5q7UNs zlZ~>*?N&?3QZd1yu%!pUC^bJ&!aJXCr)qnTxh{W2Z=J!Mlk)OB_$9_{KKfx1VjoO7 z32aKQuLec+NUmzRo+3haZwUWxQupL55})lruf~9IN|qtxMv*o-%rA1;94v8!TPV!J zqT=}>A%hOU&OR8^2~?rblI}Q&+9ZpgAt{~-J5$`27k_=OQ}vE+bEbchxvX~Ng4q0- zC8yNDB6_iRf+C1^Dj+#WqMzW^ z%w)ygR(?s2z|<>8@a-@DRaE4y6PZod>zx9R@S+{)CS_X24Nua~5~c%Nj`a7Hn8e^LJTOW zyGE8RP%EIXd}+!7!8WXr4$^aG5>%a#Ec4@QN27g!+Iy(-)ve*hO=C2-dF| z&9k)0+Z};sLJ*plEu^Iqmp0|$6h=F}tJ2aegOiirnO#G6_^pJ1H4Mc0d?GVUJhW(t zYW^sc7~Bl{mJyoLI0Z<~K0(kp<+nMEZCK;_J>DxOf5WRvNyQywZ4Dy&EfPk5V)mH7 zacr9Zj>zPB9rnIJZFszF{5gszo5i?oBjo_^X5T>Cmd^B%Dw|<3Y>TK zyfj)Q^GR<#)#oug=}e3`kAqd{^jP?5!8L1DF>?;tOFlc3pu^y!E7Ndy<9MO7n^y@bHx{LHnTFEiPX<0J!XqF^66Sq*G5xKS>iKNku%2AFr~Q((jGc$J4FZ*)G2Z@ zh9lBZNCz*qGZl(H&|HtP)z*$-6P+2~#m*bttz5J+z&pfM7;F%eE$O)em7!=^ly@>y zk(s6J4x@nYAa~t$n=BR0S>BA=?1@!qEe5X0(rmN(Bu{Vx0Cd$gB~gm!_hxZQ@y?+` z9uv7Kz9m+i4pRdFmEu~6PYp1z7OT=+#K9+v!+>tZv-d zx-r1Ux1Bm=7x|$@Xfdh#fAUWy{>A8q&SX@h;^TspIw!-$DYn}H(j4$Ft6u=)-^Ln< zShRT7yYb*gDnHy45`qXi`6NgY#(<~_*r`AK3YZuuws`ikDP>2(^)Wf%=H9jeelpb^ zgxdh2-nL)-1#BdJ{4jTPYZZ^qo}5V4d~6Kj!k5~P=Wr*JvXIFGo>%=>em$e))`TyvpuH5^dZ~pu2!6$B5JU^Tecn=yGq4R;s zfdG?lHSIS-OoccqfQ-5TqFP!GW)Qf!5WL)W{?QUZBwxjRqQu{k04;$scY-Xbww9~? zV;ZpkrNc7e)1UvIgc!m_ufmR&@F7VQ?V<#gZXxux&uGy$+O8$9vjtA6%GPc8n>6j3r$ zG$KTSbzZx%53uj=`P2Xgd0xR-(|u^q&N{jCi<<)8jq%yL6@2?YU;O87N!F3cp6&7o zKx&`Pf*{=nq`Cwt6FE%-14xVdh7odOFZu(&bTD{DkaXJu;e+xSKeeCkWXkK|Jy}f_ zf4fMvAZ3c+-y3BM7n7&>`S2Xlp5ddwm%Rb{slW}O4-A*`*Hd=Nsu?;F6(YPSck!&TWy8|DM)U_f6PVfvJ!? zh`hK(rM3M{E}l)CdvU=6 z;<1`WwMh3CO{EWF;-Y4_mgEjNXXvp6&vn2c< z9DC3D|AMbRDUW+@m{0(S_(3oH-Akq#JFgG?_+%sA%!^9)& za(Fr|t-Zf6zsp-%;}5c}$$nT^36Guv^gukZEKDG)b!TS5)_{mt7*R#qz+&40YE41P zJee)3l=BEQUBtYTOVz{yKvJ=Fx@)$$zy$6@l?oAZKt^K2~K?LFpJBI)+)qUZ=yp}!n3CARemEO`r5ys-N|o! zbm#62de)au4J?w2gAHljQqj$8)*WQdq=o+5~JwRcn?C}|(#!R1hQWnmk zedPk?SXU7=Ptk7@wDsfR;Tox51eXyOqFKa0Hg`RL$J}$lYGf)x)X%o;x4`HE9^VPPR^W7t$87H*n;k|)r7<_t_TX->!4q%2^=bfzHVol%f4K#t`PAT68*iXP zAa!?fT7PI#viPRx7{Be-6{-EQn7blTYtA+;^b|qDJIkmrSSb!WD<-FaG346*Zo$bV zI~4Cd98_A4?f1v_r{$OnR&nlUrL}vYHsO><7D{07rf0RF3;vR+(SsWSqNNMe|L(oq zl8zC0BfYi63=B?l4cHx0Crsg+U6C4yBl{J6`c)%L&0YkY=T;wjH62oC8oM3F_^M&c z>+t4~e7Pj`yaJP9mB%_l+3kapMLl7-KyV8TyJHRuS!n+nmrbels;PG&$a)- z&qf_@$xjJ8e{?njM-2Bjfv47E8KCcTNV++(H$bzB?N%(#@Zs7#ztije#Uu;rW>4E& z32fhX_RQraic`vH1XO7vFH-*sRkZK$2k+qQ#mJaE!K!LIrxsCp0Y9lFFPAOYQ{)>s zNTOc5Ss(F+s=gc6^au*gOAa`^V5YON*9M>R08QEpEw$p{B2`VI@Yg#QMR^n?|57cI5_dCzf7sbq}T-)p;-HvPLw&Zu|isQBJZv6kFNZA8>8F zY{9SoKEK2ya=0_ue_qr$chqE3bM8lE<7nI?Sh0B*Q7`q_kJaf%M@2nzx;1B$$pX9s z9~Vj2(WZyL5I<{Wp0b)EhSP1nxlWkZc-$Av_*%?*L*LB*sduA;;ecm$x(`L6ew^k^o^c*Ibpboo+H;Mn z;2Rvj{B4}eov}dG6DbQt;~#4l{;1mLU;Jzd*%e3NM%vhj8%fW+RMCR%j8|5Z&l8T|8_;zS$DFZn|HP&F8zRf|tROMFALT8;4dVvyA=Pc=_= zZ118o7rWDE8^q=P`phuDutwov!oK#N9p?-40pVbS+^ zEIf)$y+YP)pJ7iL0tbhLETj?I|UB74sC8z<{I2t$VKq) zq}(=q{wl9Mrs$<9+w@P68dTsMvRv%`QtZP`etK=Lp_*gk%}cJLzTt^_Z?550x|-zi zT~j%wCLT_nere3C!?w@NE{G}I*2kQPx+|O8fr<=w$v!@PnazOs+9$=0iQ}s8IFt5= zU%{=-zIp)V5tQZ4|D14*RNL=+Q4l@%6nLHM#zR&Ta&V5-OH;z6146btdwy({Nu)9; z-bUP+1@kGW<$D9%u>}^Ay=Jvmi;(0#Q?{o21=-%#V{_FN8XA;x`>Zar$)A*tMVSrk zkkwAh&>Zw#(?fkYl~MU`UpM#$Kh}(6n$t^qLCtf$M1w}$Bfb(-l%EK!!Ik4D_^qjH zD25w?ViHqHsp{;3_HcUUm+EK8lUv#nl%chZ+q0`|RzN<<^Q@GG3+!&t!Yx~1=e3yz zat#zmVg(*Je&m>52$hhPKsZ1|^V-bZIPvx%u`36pu%efS5~b2VRWZsqdTA}-YEkdP zNXQpr9~U4L@3g!?sJ3`rA9>z8%l(Q&0qXW5F{8( z?XrE#*hrg_etYg2p1z^D;o)=_DRM>_SaTJ03roHE^#xpNn6N#-Pl<#JGTm`t!m{J6 zT?~D{pe@|cvb6+k{#PX?S_avH$-?wQ$Q_;-dww}uh@O&-PG<@cJ)D#D<}y0r8y-ePxd zDEX=Qi{Ud(xxs}Rcu{sf%b%ApL<=qzaNn&+Zk6u8$_ak%+o4d-W4oeLz--Hy zs6Ll%aBJPN(!{X>r<%_SnqPHS!e< zby|k>3|D>mLB8En?q-<^Ym(|tsaYJNIYO}YV&{GvO{a2%Ngf5ALr-bMnATT1by1Mo zfi_jdy%I+bJA$f&y<>_5cGi}-p%zo}{w>p&ra`Pz;^|^=Cq!jDNF$50x#rwG3(L6i zQ`3k6tAz02@4u0RCNKm!4p}8(m`0+qKUdvlt1wT`LB~RZkRT@8mJ7zY$FsPEmEyyo zYy#Of=aiYGkeT$gD#|7iKxeL*ZSfL_yExPe49>nmx=%O4u+EP)koQR=!70);#afbRIn=%FAApO$_&5H)vh5@fZ|`7IDk({Qj#L4RByWH&4=ndPA?pK9f#Y~BFbF4X?TtZu zb}UB44iuOAy7$-JPFPPqS=55B?J8%Syta4L z2|p@|^G@n716C%pRHH~;mlHo1-sggF;4^P0HOvNY7L`&gnhB;gK;(R1D(4@vO8nM` zt8m_1*_mG{3dhm+*i* zEXclLg1v)KGc~_T;7XXAJcOPmmnb2l-da(b#SE#ydfZe`@XXtKXbiF5!+>KpB6KVf z2C_Zxpd`}hiZS$Rsa5)Dh$+8r>K@}_NeSsV^Q0A{4a#yvD54YQ#>~CjVK- z-JT*N)Kdz?Z&*$xUJ!iS8^&?e&kZCp){Z&mu%Ph*(IVD1m7i0U4VB6JA@A}`>&z|u zL*Ypn#7h8-P$exCwN;$NtuvTdsAS%miA2bDcAd;R{h*g1()-J;zJhzXB)1CVYvXMi z+N=_DcOe^h8JlyA>ND_UxwwGao5l4sJpGzK^fb{Cle*23edN8IcAe)KF88HpP-yYW z0PM-4CQ~Fb>g8B5e3a2;0h|01hYb(WDd5xZ!zyqk25~BEQgrGVW%oHO@B*ZI1SO~p zjQg{e>}Q@ELbI_C(-ml|iN0{Rz$`O5n3Gnwv+Z<#aQwEhQP`#eJBJ=5OV{LV z6_-8{Bg(CyWRJKz680G5{In)%N{E&~-5KikZ-aW;!lg^D<=5m`zw#|4L*1n4Tg%JQ zYdc4sw9sytxlVQ$4$OgEqWN0vBRJe&8CUf*aa>KiI?ON4P?*r_&n`tX>_WB?k5J2z zcAZzE6YIDNL4(L-s{BM}LguUjIm}28ij2FT&wuIZshmu*k!8zAqI?jz|QLTFIa}j3ZSXeNE{*~ zmn}C2?6PMrqXk8$YZTyUQLp-YxdnB%@wH-Z+u0^~%V@$z$@N4dY6oFPG4~lp5ukF^ z3sk=^In$3_I$rcck$s0B<`mp|f%V|MT;NJg>5O8x31gMiH|kU?m|MkMjSINaGSNF- zzc6J1<(5$=&d^p6ofrbmF=TAW#@CG{J60n+!yFSXK>I<#Tq&2jW-MyFSA&uN%Bn9X z|G{oIhz<;%pQ8s8z7_{_)qPI2(V3iL#`2Nax%wyvwrgOG&pyzD0I8jvJ9;2PzQ24- zt$7s~pNrXS(Y#qL#C@^7@>~jf~!(9nxmf2kf_ubY9{}T3#pUn-4o;a zq3U30lv%=4KHD~zqz856)fnMST2*1VIQ?K@^@N&!CH`w!B;O~Ryt z)*kKXdXO3*o6K#5hr#HSo9`akE>7kCn--|5IZ4X^Rh?+gJwQTLf6FJ8>E1O^A8?cX zY|CqV*<+$W880JZ_>@ZOT9me{_;$cUUfG|!Eawg^%d+@O5u`5Xo6p#go{PRE5Ywmj zUuo)GZ$k-SiMrsS+O$4qWGre6=#hGm9&nyl&L)s2O)d+6AnlBGaY z9n}|CAkj1)Iq&avNv{3+H zXCK>Ua)WOSsA)Hf^x+zWJq0EciBsI}om>>`IOU(1boSO<(wT>~WBp}8KdGqop}9xIQ5nAgYxo(1KP=knJal0eBoj1d$~gr{huhHIWX@G9}PBXtr)5b zSz8#>p_%=v5mo7b@hv7i96l*IUPp!peR?&;c&^R(qqnR%pqO z?u{@-?wE_eW<#BEegvbtTa~{8Gu8XuBXACaUwSq9l@)3_(WRUsVH7OxaJe2WpgFe@ zwPmFj`$$K=Eu7z_?|Q+KA``(Yho($5xg=v@Rgp?&jOe;a87W`=+~OpL;rq44piv}5 z3s?w*XP$NoXL@t+Ybu&^yKL&BilA3BhYx}Yjs5i{>=i`wR1bJ_oZ@=V%y6F+0LSkG z19B^L*#)WQMS_`xtDD5SLwYUmVORxS`i)%s62awPh#VOm|fkBu+)lARy?;+rMCjydplp*JHV zAcSYtVwlS|CNqdUS?wfBU7T}55OX^&zW2`6C+SaJwic15jRNgb`ygd;*O4~Au2M~j zu6@h8EtuVwz5Hho(9-uyndSM}?IU(;>tOmfCpBK=SnZgpNNN7-5ZI3_zC>Y9fmHm0 zrehPJJ|GDfmJ*A(ysrIdj#g)0l#~Y-uly<83FUHeK2G%E)~0pAk{GmDCWmjNXMI}u$6b&o zkT#Di!@7)_QOghOxnV5&pKBJ+{nP$ji5*Ng>l9_shJW23)7*z-ea-aO13=Ig0w4 zfgwOGo~Hk&GguvXfiT5tH98*spx6nXOaT?gp!#W%Y~`=qtLy=qgq8G>Xm1#s<|fUf z2HifacL&7v2aC^LLK{rlH_%O;u=AIK>Y)$IZ1$Fwe)w)pbl;?&d8-k|x(Tt3WF_jZ zVem=`L~1w4)_fqQU+>&T@B+G4xbED=jHLfK)SU%>7?Wd7H(8tJN@imL$up)v z8)E-V@$APRX20_+(t0GD1=-FnXlB&vBU3z4D4ijse#fRQn#{8~ShGm+*LPjd4-? zUr}mF$W#ATJ}6|a+|up1#Ve@qNQ)ZWoUSa{;nxwYg77`oC55&jkf2tgU%$Hd}HkplrwyF z|MbGXxty0Cza(5h>k|_bM}y4TDy;NPp|tT%`yUcy!>=Asx#(Xx$DY1yF>h?&!Wyn2 zQG-h4t5B=Njo##v|YHSBWFKtS-Gx=i1@WX6Cs=ldD$abAR7uZjRoZk)04Eoy{o z!~K>oNU9&BFtZww0#)vY2rgUE(^bF0_g%2d74IK=JaZ1rA5fk$JH(~kV&S|r_BYe~ zoJq!Qr)=DFiU83ym+S!O4h-JCL4Z+RrSXk8zOT#M&7omxfaTvqiZ!RyhhC5*_<*RL zWc@)M&pN?)b!@|UP!*LEX=ZBnWDI)|G6h9zk1RXr>uFd@zh#(V58-Iz)X?i&CmDBi zj-Kl1K|yoltIDC3elCbNA$ko-B?ZCp_9x@UHZg9w(HCaeYdmosK{{0LtNB(LPc4Mo z|Ds_=liERFbp;5|WbKXv*T7Oe=n; zCS7a_ECOv9XjTd-xaaH*FfIL`fl~a--^n8z>92A35bJiq8v>3GyEZ?4ozSUz)KTAd zn8cH+qTjy>1TI}8w1qrfU>YRFVZ&|$&7n1metD5c+U_r&8rf=VTB+@ zfC?z}r;3$Y(FvXjg&>-$PA{nqGgFb7K z(hWoZM*1s5n(}Cn6p8z;qbKo`dBl)wJ17TR_pY9&R|$)L2k<9 z<-rn0iQj|=+K36Nr z$4u)=X6roJYxA}Wl#lZBdg3!Bk$RFNpobhFscn~M6|hWe>znf;6xOs%`K|gneG7Kp z(|08NWO=%$NDb~8GGq3qShRPj zH;AA?OC1E&mFmc{qTPvCQ+hgZUK{F!owAhSCptmu2>#CDM8VSAdS4<{V}5iw7A^_b z!AiIZ30h5wEg+pkJ(VlLr_|sVcc^#KD5q4!of_MbOiyxO_Efh!FEFYegaKA?y?0_9 zXP!4_Xtfv}u7Ih!mmJ1(?=bNdfyD z1r{+~rlW?Fl&zo$Vnn{}MK`+C73xETciNLDt|Zh9<(B3EGiGy2hjyM9Vgr~P>Y7AK zW;>59&M@q|={>Wgm5@jZ9KI2v)q#I6wF;N~F0 z9h5dS0n_Wxu1m!k9Nt~UwDKg})+o&5e#)?=gj($aw4}P;Sx-ie-)0xf8eoJE)G;o~ zfrEPU0w9*$5?m`UyB>0dqMw=bl9avKJ}Y#1*oBu}s!=U-e6q^$pY^HKlJ;VYn&qH3 zF91>4Bm2q9&H)F?Rf~Ff@!AGQ?T1)8AWn+1~Cu_3r z37PAqC-NHyvTxbMwAmHK3G^@Jg%T3CT3& z$kv5N9$o5vq?w|j4ELuUq~y7U-X_HSq_0HjhLILDH#$}>=}2EiTkjzl{qtD%SpF-| zX;RI=VdS_}XBI&0@e}xs701^h=DXu~T$uH>eoM z%)5Dk6s=Camz!aGswgYF#d|mJB(n4+rj!LQIjF9pa_b^D9(jtMP|rS-TU->zd%L=( zbmuCv@`zyUgd;u6b1s!`ktd8IHiJWb_8KjAf;B*Cu0V>I6WiJ!^`8fkAVKYfv_Qf; zxWV&Rd-C_4M0-Y_j)#g<1e-BpH_kwd-3F75)0H_1y0<5jQjnme(qROLY$-Y&=}t;b8X(V;U%n*VrCTbrJj z;?gdow=QhTl~Lg4hq}PBB{eLoR2h!Nt=}~uunSKfwZD#RwU>yPUw6%2&Wur1_7K?< zyf>tIYPYec`wKBMOA3JcEC7|rZQpdZl)}-$fzQ1**weg4`+Oviz(9J6;$8hoUkX0n z3$AVQ4u&Lw5^d3S|I9M9Z5i;FFWuOy)s#g}s(Qi@rv$lsfT6kw%zP%wx?Nyjuow`wmb?FZC zYXR;EVZX7q96^^U^w=WxQ=ui4wqlo~kZwCa~kqJ}oVMh`z% zq~9=9`VD0Cv%~9WACv41q>OoO|6*C5`Q)i>mlFZR=wkSBuTk9>`RTkjJ1f^B)?@YCQq1ut+4;7o)~S6;>+UJ4|Z7zA**=hJ0;{jYiEyLhfI;D%!NtoHo2zk0#+hk(T znlsVQr}_u`;0c7Kb^V&fWmM>*o0C+RPa@w%bGGL4=ct4XP?;}^5;iQqE9N$_-he8q zNupJ1mnTZkCN``-uLu&yIiNwU(h+R`eDA{pIC(Lp!qu=)&~UTAB8D|la8tCILw+}p zs)M`Q3Nd^}xvGW^R_Pr_vfuPD)dXikl#IgL#Eu+;jbnCBF$GULz3f}TtJ#(dljH)v zrQOQKs_2&QFFEvGTpp`&*Wis}a{wx{99KFN&KXzVJIZonenFafl2bX3L~&Sk4D?-tuY*p5e-bTBColsd0~>l_;jwhnGb_&g%!Vd# z4B0xeuFn1e-=Mc3OLOwc2)wCf!gT+0hf$=xG1HrFIFAZK)huTQX@vEm#b-j+G8zq( z(5l)4C=3X(%(Rifk)s6@8D<8Y%sc%Uw|+AK6T1s;3sx9jY{#F!?t6=u1ZHKkZw4ve z0xCrkxvdJT+*O{%OAIY`#;t01Vg?)9H6*eTGt4NN-#YQZ3h`kO1yh*O_7CjQ&kuY^ zT9}NQI-|GwOP2SO{5*@BU&3Fe6^|^Lu>}qi$XDzmZT?UFMF$Kpo8_=K&qfgL(6=?A zww}%D8f{3KBf((GA47%(wI)+%9?--gF5 zaJ(S1v$wk@hX>1y?e_>)vYiF0l?0`7C`Ei_p>=(j1PLqY#fD9QE6Q>9W2nuqT6_ms zS0*NhS^XW^ic^;*(NSDlXvhY^+fc$<4`Zj?hLoR0Rw8sepoKhxNnBWg$u5&gscla{ z!dpY~3@+XjPy#(SWc?_Uz>PO}V*~u}baEHFL|~%UKAc zWLQb`m9~Sg@|u$wp`BX5m-CgN{GZ%<2k&<&Pr+-*HD~Gs=zHhkW*#FaEauVo3)K$; z?5|t>IK*fSO4B9)u3lBzQo;tqUw~ZzhMr8p+xVFjZYc_{aK2vscomlM<)}jpb)~6Z z@`%q!egYyZw`t0)!zkUeJVmr~CCWSMEL<*j<4z(DH_mvka?YP7j%O$acbrXR0FgOk z(kRAr;;&S@wis=H%FmB@t`mJNHio{bM3^u*N4!5fbLo2!P3_&-G{o}FP^vArd2DQ! zzCtv1Ka3B(g;k1*3LB+nZs*Ku1NWJ(5CNp>t6F?$xpZ%n0mD6hH{67G(Q_)o=GLK} zNi>T=wznA&VK?oVc-7U!fLmpX$<>@<_4S_ikg173^Fk98qM9kR69;p6>jL}?UCb?W ziyLjH9BMQwteb!&3G-#I^2{3Ty!eydh7+=%w@ShfYPd*_dBwF-`L&jfrqAPfTSG6t zR?Mk^(INoVx2Y*t!H!i%-^&O$-2*W4I&8J;$e{!ccc8ezzbo`oIx8d3;ZjcVo!$DE zu)xR~2pW_g;0M1=SQmCOzfp>GJGU$el(p}9L)BvQ8WFtjg~ifc{ESEdeJ#NUxPIBH zEJObs3!?!FEC}+X;lLm=Z0K4kHcO(1ebNQ+2%J6B;3Rc;SSn8IaHa5v06*M$$`=g;f)VsHvVJ-UmCzi)CY4cF1RU$piQ-J6st)`mqz?H& zv3_(Bz2gSdQ7;gG(*p{iizq4YyZ7<%i*>ySK9x%3Qy{f!yK*N#clyM}2P zr!OTB>Z#Wf^Z1HkxjoBB8f})jw`>aMb#gl-u`j|A9`mCaL~RZ;@_K3?E~gqT)l|h5 zvlz`OA|Mb#vW+4Ta^MXfHyYUoLt-162ErtOE!*kN7VROd%oDL$pG4h@WXCSQz9ZNNE`oH2gI+xznCsodDmf(RuR_ModHVY$k8WT&R&S{_ zH)hhQY??k_gUqEVyB-SEr{3-p=#Ak}X?}qqKx~Ntb;K7*WCEvn73nbMh~78fHS1ua zj)Mlm?+VHg%b47wM00SAy;PloRrBGboJGm6wLF{@Q~n0M=?TeNUAKaq>Kgc`G1u#| zQ)Qq~1_Xu@jPP&yo^*L}UN#ANq%D&+g{x`Zg$sE>0m=Mq`}|Q*Z!6VH3b;4yn%i(0 zY`jF&h4N4KfWW7mx*!t4y5aI=qhRW6+sTyrS=@y+^ez;x&i3@4>cJ#5=_r`lM~|G5 zTi8Jv`7prmKjfDx*sP_$Q}JFdO;LJA@LVk+%RRZIsciIX;kE16q`1bsW{9DvkysAkR1-NG7y@+kgJ1&TDR}I(@h>ys1oRFF|%sRW+ zoNV3ol%EilluSl;e#alI7ZsAIq$c`LWb>R`7`V0||K0)p1nh&Hfer_aO=26Mt-tJM z8ixaEVI2Hu`cmANz!K?^BWC!^l2Sd;3c1a%8m6RX#&J_~MFUI)T0CQ5e*8rqi!g&; z;bE+ySHePb)Jj^}M77gQqfF)$0c7f&lV|#wP~N?Gs>W^0(LHp2@mpT?^FB$^Bh&?wNxlRE^&6_kF{}lw+S=z&&ZXk zCef5SQ$;x1unUGv=xaZ*I)Z#rE&wsPu3zCW%az|7o;VU07Ve@Wu}gGw6ZNhfAnNr4XN$?* zK;96ZD!yX#NOC25St4A>63^MQ(Csm=*rigtnz=R%*-sk0bJgS*Wef1;cM*DlQ%^BJ zGPe;&$RM6O#lqxJ+A>Lmy-diE8K-+YgJG0e99%@vZ1?Vko&=Di zx>WQ%91Qetve8U3g`ZfahLNy40`=N&g*zY1y34` z;JugIyeL?oMU}@WS>ciGlf8KK!>$3zqjHY7`a?q(6ZU!ZPgLC=h}UeP%}cQABdi(i zl^2g@c&hE%;hsdNtY)9P1t=W(B19WH=Y<2vp^zHsC$aYgvg0j)X&PZ7C4Lj^_UkpN zR;l{AJA(HH?mH{;eW|gNuXC$E5;>uTPe?ezt7I5Gd9s0$zzkT4(VQk-juV9#$bq7TXbZ9D3L_JTHx7MZtj*hF?Fb;i@8_# z;p%YFsccg{V7G*$ z-xHafDry=toEI_J87cgjXq}h^!kjmwJ&6P#VfMo^T)Sd^KnxWOc&m{d>hLNGjdmlv z#3YxEUPUfc$I-)YV)p`GnrvN`+Gn;L1Y=4|n=;&sSWtf*lW+g+*M3W*P96i^F6!Q; zh2LD?&wjBqhOd)kc|!Y28saRQcsj2s!*owtK+e&o^!IX2-(^|M>p-tT)jLTa$wOgd z1?l51YRuzt!4zkY@8SrvO_oyMCDXYYJ1Hl{DqK)rm#-EUM!US5cssACWA1srKd7$o zYlT-el_&}<-yqsg0B%Tv<3kkcT2SA!ErHnT9_w&MWHF5`e5#nyk?)|pb1jpfa^a8YaMg{%u=%2G zD$}TCVS#N*i<&k=cqme7pbppLy_`y}1t03zLY5d0_8w5DUX)Nlli@WspEk1{-WXu( zSa6T4;N|T$-0Vh*s#Bzj06^A)e>pgNsWxZ(bx+jhEEY8S(+a0?j*EuPHxszy1;+Vx z^o>2=SieG%noH2hVuK3mI$zR;j$OWmxvE9M4yd7pca2iLL@}!xp?G;V&Ak{Tc5eqF zI~UC*di2aMz3NT8%-vU9Yd2{XhW#9O1RKwiJbH&)IckUe@of1y!q@!rfy4<(_{p{5 zLZjAbZ%+J<85;|s;Rx|C^%A%j6_j}gpK9`@EtNXi)E)1#5?H7Tw*?C6vQr(vwuT3T zXA(9wJvSI?cP=`>>jCpXwju7oD!Bs9@kS5h2jkA@{(0r$7lU6>%{*OI_?eOC1c$h< z3RuL$Q}5-*P&PDO+3k#oNyTyiV0iLLyYooQzTPpMiDfz_dpWdld3H(^@+H6bX+~YT zO=73ji#o*zhSR#h!mKqSe=&m6YE-stF^s^=b|VV$CPeClt^9z*WsSN$&}O%z2zPW^1(=1FK|nAgG4UKHz67gGaWM-NXx8T zRx&2)5a8f@P^iYn*L>03mqpq?#2K(9$|)+Rw(t!$dV=Dw@O~GAa?I+Gbphwt>S@vh ze~Ai@v6`rzBsPD$;FlkDDgRYz?iCQV_wTSvmoDMRkcTlEZAbHN9Xrw+lXYJ&q}T9{ z@wT1Yq!gtW*+Hbek+WO=%4*MmSG;~P&-h5LXXdoBRhB{^6hYS-5Ay#Zx7bV*BMAY? zUIWop>8Qe4&*Ld?a63jiW1f1a9C_H&ZT=29gz^0mf z(LEi%f$x#;Lx>BQf(8pjdTqXjp=P^V^bsW5!vq^JV8h+_vPPk``ibIUwxx9C>nbX|pqYLM60P zJpaHHozXRRT*7`A3C6hd(0!-vmpqp`@ME&LqtZPWGs^ul${8fGAPEm3F>5$Dg)x)z zxB8t9=EJ7zQb6`=Y&&hU7%%X5X)_?47aWOpOEe#lz1%c$g*eaw0!_(XY;)43*gs(; z@#L)ca;0$35@pxLR4Xk^N=hDqzqXONRp#3_ob5I-4;CRO;4iI9IgEQ68wH`{;Flu{ z&B*I^if|NgAPNBj*@xxDGAh`L0mWqn_Ao-=UHW`&_j5(kHsW0gJj`^0cZr{J7;>1T za;{lWZxcw5JnTfzPaaffN>`Gj(f3Mhs}Y;@b0e6`T|Lzz<9lzt9K(7;rqrv-pznX& zRnlK@Ta&Mm$F1AvP{3g2HbW-ZMSQ9$DC?j`>XC(M!b+(>zxpm}<7n^x(&mTdHieRD zqGa7--K{8$h&jjY(P=x=lo`^NayDhkoeU5au7I}3GAeHFCCm1X^#Zor&@D zPR6&!65JKz4IeOm1{HaSfVzv+P!!lvf}!N`d|_w1j^r_Fs8$Y`8sIGTQ^ko^O%vV; zF4h}2aMULUK6Fkv=nD=2*?IGF9!*J{&}3szsj(Shy|bc9DBI;57yt0Bj$@l7@119Y zNuyD)%Wh{qu{-%Ru-@FsurpH797EsJ;O>2Dee+YHAx$iuhl2^g?s~!g7Wi2=>06QE zei=CHq8yt8Y3Kxmz9^}#fNx?StS*Q72p$ebVEt_ujXT@RxD!u^pCbTgHg_jNA9|g; zBo=hup@1WWHUt@*WZ;9;c?Ir}RRCGLecDz6Y;So{m69*$8f?rzyNX}o_L!I>K+%rB#W(P*x*UnKX}sO-~ZDmApu7G z;=Mjx*!+oaPJR>=PgXNN-Ws5&kidm_+mDjN@}r>mfGYLj9sZRSfNG$B@Uowl5ViO^ zWbm%0cY%ca{7wJ+yv9E~vj4J;{A>juq}>OS`Rw_u>GL1}2eN>~Q}dtH!rx!?pLyD! zE%HBh1&rZg&={3$#q|cSeCk)u_>6rF{+OuEWtE?iG`I|pt%-mGQ)B|0UrBzEmU;71 zkhI$l_=19g4^X97$DKc2W*Ma_6#^xBW1ptLI9|8A@Y8j_^5Q??=6}ZTpB>)+qvrx- z*?))}_$Z40O2H=wDgm??3l=|F%@kW1j-m$_&mV{+43Ls&LGAx;yM8_4zaHJEllWIw z`+rQw-hjx)|443rkcVIi0DDdHN1~gus3eO1-yoV#is=6q@&CG&fNwz@wOa3=p7=k! zMoVB!k=mohlk3Ek<55#*L1roXZ!Kmj{{g_+6k7eqnbiL-6Q&biAO-pG{%EuNS)L^L zC1D@D#Gd%kL>P=zo_cvt&WZHFYd^7kM}K5?fQ`M?CHzqh5GjEWZ0mVDg%FU+1O3P> zUy>a+SpU4NX&B@wVjt164ARdvr(eo{joZ5^%B>BAWLFZ(Rh2!J&BB;T=*Qlm_%AhR z=FhM1p8O#*u>GD<3jdfG-@m?Bh05{23vtwJM&LRwCKi2##2Y5i7({sq^DB>A@K3-O zYtRcVl2M2%e&=2~Ko_BB>|V$NBb3djHDA7Li^&P?TtD5kzCAiwZ{5lU^41ttMJMIq zpXv~Ow8unw!GUsU>12sHhoOSYr=)^Nzl&@6vTC+ZsYn_J@?+{-skSW2q|B_yzgr7TEF#M#iivZW$PG(!vw9a$*m#o-=t8` zWvid1)nq<{?G)L~jxvU3<8mf7Cr~Omi!nxq}-cT+wzlzWguS-U0m6odtqV$w~!N8 zAp~3H2bO(m9K%w%+>wn}E^O0{{ODd2dLgmXlxjk+TbwvFUIOz7WKZ{ADhKg`%*G!e zThW$umg>;0tGhs{)o$XynfuLbgP8G5yh^ zroJ7|;3-SBg|$E|^a$|=o#CudtNemUoaaI>ZciLH<@+~#Ix8HvQc6NJyiadNe2PD} zIgW~t8){MRb)#>j?dWw=cW-_s3UR@WgwEo*!l`0DITVk$$ycdu0l#94=B|YkVpPXI zae`Qe?7>(eZ*Hv7I)l;cLxH;MTgL11i1x|t=}7P^!f6lSCp)PqFVLA#UisLPR^;xI zado=Os28DgFbJBpzl%o$ag>wT@wF3=pu#h2l?5k+=lwr`DPlT=Ra&90?pUQ_yVm+I zpvLV(OZrVgdvJT|gLc!1V#OLWI4L!Kosxh&X00qH(z&geLqmxhDMg)lQyy(=d!nVe zOhvJN&IEe`WJi`4J#DK^xM*YJWr%Sp5aiE152sPGN*z1ZM`LBq+_&P_bO zTGOC|JVMT={&)v^pYSjQj(l z?3}`{r9YJ8H;YoY+C9b6DSA?76z!CBuzQv~mgDWdMr!U_p#gbyHt(l=VXEt-LmZsEC8fem)+4g4Rk%9z%RVYSGYP3Mh{hc(-45S+8xOn}RuC zF=M63%dHFaHEu7ax|R<{Z8);q$;|}jN|`SOl^-8L=9OxV5947(Q})vSqYGL3-s2`fAST%yI~aC!G5c9lN-hmFUcI2Z6}&&2R1 zcY;ghqM;B*K%C>7)*yDcJG>fD>L`}#9dBbd01`KBU_F{fhDMTgVzd|WG6FA0v1D3^{d?p?mnRC z`OO`+vm@UvkiJ>Ot#)2(`!d_R^2X6z?7^Lc7kKjfYh7`#aq>gVTB|hIpzWQ-Ieya& z)W+ljS))k}pz5*pZ7t}Bg34#`h#myP%sd%+c$-w;SGMvesx)xEmu)q^b`5kiK~}}a4Rz^^+3vX z{AHTh!dwW-9$2d;2{Z)nfqZH_sIT|*R|S^%e&NfmGw@BVrca|4v`LWQ#=0hWD& zz=Ow#j}y`xkl~{%6YjljFh@(FQl@Mb1}@U7uWOUFChErz*Oau;>gUtI1hi=PPM+Cm(o4~W;a=xzK~&r zQ(!&|XgXvztH;$Dsv?Ijm9^#+H!Nz9RZ(wbd^ie-zAs(b0y*psgSo*~`B9+q(JC!$ zUT!l11ClLQ?P0zkkf&U=UrG`t$q1f(w8WS1n>yIERwE0&#Whhqf;~p-c@BGlLGZ2UtuPW--HGdBDe zH-|e#!%ohhhKgvBn$LDag!V$oRla;3Y#mdHr1=J_p$d=| zKYCI7<#1Gb1I7sFC3w&|#-oQN6?b@AT+Ny|O_XNcR7_c?2#^KoV%1~-H`1tez*ITr z1h8w(T*9@kmOviIJjE5OW#Uvh!j^e|C?H8}-#kuoMuGjw)fhUM3gw6{bj@F2W=pJ% znrGv>zFq?Rh_`<+0r6hmg|sA28E#s;ir=;w7|?o+vwhi!7vy(j1UpGNb=VJ3giGjj zjK%w5Vt7XC`(f8SBd+M=sP{`F+)72ghb$6u^PKqhPgJUdHdHcST8P?Vhqr?&;Ci_M zT9-j_&o0M`pL6V7x=FyCPO^XIGn)byV4GY>@9l$hfPJ$?)4O)P-1!iuGZS?iG3-}I z@Ec->jZh!eIcRS)xku)owcaSsB9lSW$^!H%3jf?pO*YCM%&-{R{ej+>_sZf3cK9fW zqzz7u4%cj(NNu{lVcyjl-BRSz$3Evy)>wo9jK6?!n;#UB<1lGIkq+tsM^~Hcg+hET z;1yrSG%rC9iI#Bb_w20_RHn%E1f`=m>sG=R{uUWh_9YZCMdXLpCfFmH6ko>mQfhln z&g;mY7D)*e#B=p~yji0BW(sh#jV$&E7z@;wVIDcNj6f(E`Cag^U&-!4;=ZJ`pNo1Q3e+V$^@5*Dl|d zr1(?CkFw!ZuYid8Nz4WpYPqzxDXoGo+Y>^;oJphMEv#<*EeZzNwgZm`Lj)nkYqqXo0U z39M|rJq2&bpTnQxX~veQG|tnkeIczD5I498@(kb*U7~tYg1S>)qmE$RK%JC9yAWm0 zhfE{j+PH_Bn3`pkiHSE?upydSv#>-L^f3E^HDAAGIk>I~&Z-w*@Kg~W+cOvB4GkwL zLYp}W`mP9{m8G`xL2%?9WwB6r$m4zpgyD2*G~UqF4!hettaZua}! z0Vr!^TZGXbA^_Z6D%AuY!d8wT$Gop3v}oARFvI`!UsZxaqtPVvFlD zM-W*Kk&8UaOJt)$pk;zF+Ud`7UDJ=Cz5xIgO^f)Mdr792M~2*NG25JA^7PQfMuIkI z-+E)cgAe6`wwVV)#-=P#zy8szIWx&hxOde8Xh=ImQYHCkce{Ry<;Vs)ncOAD zZc7YM*If7axo}m$ScSW;|9uOC1~o2Sx;q5T|Bj1h+dXd56PAMYY*Ou{UO zPl(BuIAJgzHQWTN%^RX`1%14Q1meuO$#Z&9m7nF_PDoU1L@*8@Z_pJb;q?NCm0&d) z(1sSp?y3oa67ansSToeD0(;LUe8hW6*v9x&p0IX6TjcUuV#TB$%X6IUGGS%CdqyDL zI1b(gYS_gV3gY7^*UW+HT+xgA+UHFkLTjywt%z>m)Cg-zc^XBdbAYi zJ_q5vI40Fi=F);WfIl9^*;Y0v-Q(Cb$^bA>D6{uWynWP2Wg&LSw32|jV|pAWZv1xJ zFaLnl{m+5Z`=Xa`wywE4HfJRTklo&>*^4{NtyQ)3tPL=LG~^Q-W;{OJ>Or;C8SB>N zZ(#RK_-IVy&aWIQZb%IIZ*Z`8@v{kjhg%S#LFhfr>^VptRM+o4u#B=}9#}x^nep4_ zJ_fIuM?~f{m`h|A?3-l!KvrFR4y`olAZ>~mcn)P8pKt{%2}ZypPUfcaZ8;aADooBq zPHKWewHi@b;PFf%oDiA-m;ubzza^i$qzOg-GNGlD&rJ3&7Dp#;eg0a?1`NFTLwxyq zGwA8UUcAjRei;)sJuu4pQsrj12YMJ9{>6v*M9bh&weQ8du>p9s(s;H2iYpp9A(O5; zGVTQKSw79$G^&uAJVXRY2!%)=Xq~9UonSM`+FBX15(L#}Py;y_6}O<>=r3{bQ3k4W zOYe-SSv^hMA~zG$ue28oje@cJEV;P7~{E$=KTqr09{Tp~W3n%UqfCIWm>_KX)N z{Rv)ePb>1r+#uPwGL}T4RSSA4 z+-pq=YKp)dz!?f&P&=sTHQW8TePdzPyBN54`lxcYMp zi_O?<=tj#ofkHB1Qv~DfEMMx*BZx97L((F2uL4uyGF%Z~+@lyARt${rv;8c0eC`(X z93at2Rd6GIUFdL=iY@xI-A)t2O9A1doB)t{iKEYOKUL`Xx72bsVMKma zNBVkjQD|O8@-zW?0X0sZ)$z}Jh`6hSvEym|GJlQb7SLIe5`VHJ*^T`6C3_ZC_`p&& zg()iP+?k&^w5R;7_&J^5Mf_P7Gk>ccH)bV@8A{;?OCxhedaw2CCf`T|QPiwQW`V>` zlnl7)2KL8l9^{_w$kS>R?>AZ+T9P5z0Dia-l$>dm)@#{Rz2uuOnFn_M{V7tWRfcOx zX)JN<{b8&%g6_QU`f!Wd_@26W!|*W%g@8sC5so)=1~kJ#a07&;s*Vp@q$rp#?N9l_6;4zML;5ejEapQ_T8?zcFEGe3v-hxU*yl93HR)5A*{|s*k+Sh1%+KL^s zn#j}yxb2Fz59Ixv_s!wA91 zHul?>h`zkzPB-gV_Q4X3At%!-#Zfgvf$NdUqF#I$c@~?bjGr&P*ja>uPtvzoxD3*j z0hvU{XhA3Sd}^;YufKld2VaD+z4FLV0PYP|`Ir~yiP(LrH`*F%yLdxK&bMRv#>H{D zzaz(A747kww6zJutKWitgHdpK@b~dvxi>G-NozeE_NKS40x(rLn4yyP`|yl?qNp_{%M2%`u9y^>+0f*djVVCnKuuPBEp=NvFdkuJt+gH8l%ZFQSQB| z!5Ip>HW2ewrG%|hRJDwe1O3bVn)ZG|CbNc&h!bkU zQN(K~BFGYLv)aY`#17Bl(qPDZN7n)5@`c?H1GTuYMgu9lD_?8z123;e_6=Vrk41?v zQ(k|3e8P22Vq^DtM49nrCVZ2q6vbaNEmP#Xxtg8I1YAwao}DF9@=O)TM}2ZF(WAiD}HiNLr{ix_wEugC( zpsgQ^?lju?)4Bu=vcht86XI;!iu|1fc<9?(LCZ@t5Vo}Q|MO3+`N4ExwHOn5kWzN< zf~{kta)D(spqq1|05PhS91$bZgYmFD*KNyv!g;s2puhpPUURs#MW~OchsjH?#lhA$-~L2b!id zad8T^8Rs_2y~5CLx3B~gqrcf%)Z=5?AOQoS7f`A@ah2)sVkrfT9EkG0hr~)+&Mo2s zrygtES3RT#?a&K{cMJ>R=pOgHH<`{NEi1m`P*4SD#{F#9f~H-2`)HG%Oja6 z+Y#2oz0ANHdc-E~x?*wOC1^P~F?k1~420kB0Nhvj81eXx_WeY|49Nk$eHaySV>vI3 z12<;4h*61IuF6pg(jR)xbi!3cS+&k;Dz(^g?nq5U z43Xu5EZOkxB)gatB&Ai}2S&Ss!tnhzT*iVl&-1udux&VGRrwp&<$;%=^re?Y zEM^=d93uq!sD9^P3eG$sOqyK#y+qLMAw4^XH5;4GUoy#%aW125hfoVNIQdFpN3uFR z!$ZKzc^WRB0Kwba#TCW*aRNj=lB>6#;ev*1`KUn+Uun~0htG1UK=sP#K)Dk4^O}fZ z5`CXHPTKU_@i0B1PY3kwZj!Qmfk=-dJwAVO<=54nW4p2rrjB)2yLuM%Bi?eaYUxT} zQIXkB?!I;ovIMP&%mG4{Pd_=qM^P#zO-+~~28|RBeNqQQkuOtS-7_ba%irJhauFEV zDWKWc-sm+H0HoyGKuk}mBhijw0F^9=EKE}|sWar~F0yzr;>Q6R5kyICCkRzbk!l=F zm=Sg(?(CfB{Z9rv%j|=_Kt`PY@GVS1qE5Itw3P+VI&v&9lg^@bDzK3{sKZM zsgEz*Ok{??nTrErA-Y-y(GF?N#(ae-mff9fut zRMUAt)(-f31584%d!>yFeEre}tlKO|#KP*rqfjsSj`E1;Ix*W2pljts;(EWXfv?K= zh9RI!ef?Jp6+(gx_7G+!YzB1?AOz0+0KOjLW`OxmV<1n$^bJH3ar%{X$E z^KLto?J;uoCUa^0S0D^n=s*hwD*Fg~bN0-xCh8W5%mg$ger#BIoFp{Op9-43hiRa- zdt+tXql+i3>HeDJ9uQ%2B{A*O$#-Qla=1%?rou-bri?qTsd%NdxJzQ`WyEXIHg6M3 z7jox0YL9a9euJbOwHe|~pToM1zaZ!Ul5g*I>Z2SlPhPUID;sYM&*Stvo~0jg<)#s$ zY>LE2h8in7P)@D_Oct1-tg&_-zLC95e$HtZgGyw-LGb+9K!*z>qE~T(wu;Z987e`@GE}M2&Aox?8}G#BHT71rAMV-0~BE!b0e< zccWJ=mZl0E2VY{A7iKJlqYgHYHRp?!$Wh+pJ|r}pewV$Tiu!@CWP#+Mu;_}AMyMys zmNKUcEzdZ&6+V`m$2?&x8^ZV8EhkW7IG|Rcw(l25r_-c1T{M?z%0d4mJ0cr+R0CJ% zU#3OnUF+2;$r|hRZ$-&idOZ75pwB(XZ+5u+Xt5(vDL>)hK`rhjDpcZ(mM9zhx}N$7 zvH&0+S&Pd2s&_h2arPF;ab){H<4_WJ@v*=4FCuf8@OZ^A8#BZo@bN1uxD0h4KD>v8E;d^j-!_o&7JwS1RXS%|!OeT0jY0p0VNDZfW@Pw7>3 zH$RbNR;9FO5$h_o5aGo97oBx*iI;xsg!*&Z%D3LB40Y(cDElBq9b*N^w zp^v%6DD-J+==ArXi>TZG2%vZ#sC+{P^SF|fU(M21q`DG!a16_(3 z@(oZ_T2}A0pub34>A^Vsc!dV!_wD#CJp8+-I@H#U9_$zIw*d}VLf|@=cNcu%!)Z zEyI!TVH$8JJSeWjb+x&cC;8oC8_1i=_HorG(3z4%ZE9c&jsaTzRi`!f_SpZb5Ho<^ z@1EmTWe;*2vXf$D2|{mqX5#T{g?CHzqJ=4!PJB&KCsZsO1Bs6tmBibss|<02GZt%k z5)_Spj*8vwZd4SA5$elx0PMl*8h=e`IDS{QZZOC8ZqTpoPFA$9lJgvUPJL7ywLo4K zo#!;2(lmEwNYF~@k)E&T?)kvwA+Ns0mNxyAfK!0lAyrX5d zVRA1aZUh411YxQ-B{DJVu^bPQ2YZVMF>btK=wq;vTiwOpjns-MoO0n|N#eyE*n6tv zP^V<4@qs5()%RVXL1YvmQ1M*l{-rRnOEepQq|;O4l?n!{cNxr>^y=hD)U4^vCxF@Z z-dwIH*_b{3CMiFi@y9vfZ#Q}^O8tY08PYqqKGD}5tMTuQ@@LkO?KH3+aNe?f-C@Z z30VMFgqH11*aLt!)15tFtg5sc%Vgx310_p=17HGHfhmtMgc{BFa4Mb zCVUO(@=c!_U>8w0ZHd(-UfP0I2S<ZIvtDX_2VV#2eYu)j0ud_Oe>cXC+lYBc>sBSj8DR)5qXD! z=x=J-;_A=^Xqaa6$x{ce&wU3V9DQkSm~|FtpXBklSeafaDAHW;-GqGFLjDR=JtMZX-! zHxJ(fqSL=I3cr_7*D8clt|#FFWD?0|IhWu8+I5O((H~x4QPwe1P7n`Mpy&GI^l-Y~ z1BsQM@WAK_I*Y^p0`GxdGl6xHKEIu@hrTRa;ff&ZRUuW@iC@jZ4bAJisyajI4Jw@r z*a)@wh>`Dm2i%ko@A*|0$ZQYT!SzX=U?AA>Tm3*6iatk4xgN%QgfCN)oa;APh$$@6$oxX z+KjevdS}3B0f(fde4(JI!Z*^r9@5t1Uv>wS3k*kX=0=tW*0krQ*l!j;26mikgIF^a zq{tr&Mifh~|G>Fa=0}q0I+|9A5szGW_6oyOPB%HHLI-=rY!$X^lof|r7-EYS!CK~1 zVeZeA^Nl_2dcmx-yo2P%k`fg6vJq_aRS^kU*iqaQ)OOqNqqVH|Ca$nHCuql{!0T6L z-~ml7e~@_{$=lq@2BeW868XU#6-QDPudl~~fpPEv)8YVyOY)HL^iyIwzJ&(8U6>gg zgT$k>@4MhT-PuY;{THkJ)U)H8Gj<5NN&;%@TAu5!I5=0k9N@0D<4r}x!T#MC4Uo?_ zzamDnZgxCer`ZOI!-$8(;%kKY@p%0)#7|~*SwHXYPxJbyJHGQn8TRBDJVlHs~i4?j2rPj_DJ{v!!>FHW*Hulb6?BgV^5Cbzn4FZHB=F zch+8cMe)Wl*+Y96=)dgtLo9503wC_U_pw}+thx+*Lrnd@zTsc1^uJP;R7no8H?{w{OxNV11aZ|FPF+H%bO4}k_zY7zxVrwY{S@P{a`qmLW-AqD^D zQd?Gp82aBS#A~t3>;Cp;tHI5d0(AnJ&|^>Nf2!G0`uHJW?Ej*F;fO(>ij#8J|EhM$ ze^I%6ZQpLk{6+1?|EhA1#pl+l{Y9}6e^KhLnXRjWe_yb1*>8*W`?ddAFhu_Ei}m|; z0CoPSulpB+LHyHL{1@{{L<<|J}l` zJqWT7<%r*WQcMk*XZByXBA_EWf9S}{uC09dzxc%e)y`{mKgF^54@rlX75jk%t}M~W zUuE-8PyEj+)}NmEKT+Kk{~yD$`wtAljTH;354PmbaNrLm`ET3^uy*#YD_Xua2o`U` zmS*|cd3cu=VB_c9f0Wke*z8>u{%2ullzKC{k)yo9O>hXxEi1vD#9Qf2XYtpK5=vSd zie`hB^tmkJNK0Ryy+|G*oxp_IyM?o5QhMB@Jv40g%AI8RiQ3RNESh{46(#4Y`8){&d zk_}VpQ;3ihEHUnUthmWjJ4tCXo>H91UBt}L6J?Wr($NKRluqErT9Dnu(SHj10yHd4 zsRtEgipX~SQyFP#jpkW^su?MsDA-T%8ax|A7<%hn;bgO1br;LN7_!W`vj8L?8p(5> z16&_cP~1Qbv1ich8$Xr z%Vv!~Yodv3wzaqc(xc5PHwYh>>u-Y*7rqZH;;Im90ZpakyJZ1|gF@D-SpzO9*u9>@ z7V$VqzjH{;Mfa?fS^m4ct^fM`UpZ|5&#lGU^M#-|o8ER(?%y)~{_FAo+v@>+?)e{Z C@oJI) literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/intelligence/msi-properties.png b/windows/security/threat-protection/intelligence/msi-properties.png new file mode 100644 index 0000000000000000000000000000000000000000..196a5fce92daf1b1443155e02f9263ca9f4cdfab GIT binary patch literal 45446 zcmcG#c{r5e`#xNeov|cjCnU0#CHt;yNr|$AgzO|^9b1fS+4n(;lqEYE`!M#gWpC`p zzK)S$%+L%?itVX%>A7Abzj$co>%lELmgVG8&sDrU7~%UtNHlS zr7PG=mo9TrkO3pBTcPg2ugl(#b<{7F4{>Y&2c!;a25OfsRVGlM+gt^XDLr(}y)Rv& z>-_t38R`D@74Rne15LFjV5=Ph`CF?8X_)BRyIwlaA2i)}K*iV06sC6XZV$K_`J(h| zWuNXeeg6sX?<;+%x7TdspNvI!lH62fytzmb!b1_pqk4sOvH1iY4tsV$&GV5vky|x{ zRGM<(VuOk{5bJmfUTh-!?Phkaut%7oxcF=tTc4c;p z!{ekUBSI%zTn{x)Od6jL6P{neA5^n2!Y1v{wl&pY*s`3+3fu$yZ0M}(xD z|6pM&EG@y5lzwnZ`4%tq?o`uw_Ed8MA@eZqG_NYIxLoT_!j8}vC+UU2gmEM~1&{ZC zU|^7XadFWu@DBvB@9V|Zw|>IpJIEh zbIb4gxYgK31s*)Eo^O*O$;8}MP6`)x^%{j5DpoASho+BtYj(0%d;{?eF@#avBS(Ia z+3_!HKyryx!Y9+Bz4wKX{i{8>GFz9|{vgL@RzIF9^p7X|-^})AG@s&ED^kuuX_}l2 zZ;NFoFtyeIYqFk0=IrSWe!lkcXzzzFKFa!e4KYmT*uh6u+T~9oyu3IL1yxAxDtq}+ zHQCNahopT;Pb42*k6+x}A`NPCiV7&2e?-372W2=LLyLOv3?0ac9pjs-Q>8@UR+~+E z51;$AGLK-X`v&Tw1{yncuPBbKw4d7NZgImftOZ-F4~DCAwyubu2HHWN)_}(Mo`%7e zy)7P>%NL0V6*BG4Ed9xe0(-|vda0c{kYudyo+FJXT@}b{RW@;& z%{9J?zmBx|UD6(e`dmMIggl%|;%cJxi@^BI?#P{#bB~B`u=9_MkH6At_TOaIGQMWN ztq;v7wm?$PhuR;XRx>fn5Qah@i&(%iqE74B2W762N~-KVY-W!8rEPY8^T*5wQqmEK z@)N;}OwJ`c-07`SQ@lP*Hje)H8=O|YXpGyBu-&IA>FIjf+L6x~V%IyfcQmtvN`3`N zO{UQDGG))vA*8RfpXx!m7I2XaHRxMJ}b%VulJ%RMNcVK|Sc$|M-Mb26T0YpP(# zftI`HmHu$`8{s$$Xn9&U5UUAid2H8p6YYZd)mUmsDRJCoH#d5wzh+UMes3~s#mb=d z4yHanrPrRHiowQv@cyBEGMZOK`ncHO;dAc(r5-X7GAEG;PF{ZbIM8Z&Z}_{L*Vc~y z2vSNS)%WG6qHw%H{*^;FXeiFyImMFoismR(Nqwt@S^Qqc(x-)ewR%mXOT#F%&d^O^ zLn=vdLk?blL04x#O<8RTXISBg+L7c~cVOincOtsl-Ocj)%w8Cxe8WEWM(l?KaT=_a z=H?0EdzmUaamtp~ES3*`?xLfRo*l@+PwB62B@wYM8+-W3`uVH7Y6*Wu*qL=&qS=)2#n^DZc&JwLoer5o!v zwp+ta;IxZ6I&${rDDMng)2T}sc9%pr$>NoE3|foJg1IbQE66u-WBG3s{8OHw9nKVj zK8&lZ?{HIU628Zp16a~BZdobwU)LkQ$_?`8T7)u2aEEpK(Ex!#L{m`x@*?z+W{qpp zh^?kYeU3y2b^GBrRwr8&6C>m2`jhWVc@iX=3f&PxQ1J*km~Yz{^io$yKAl6Hu2vME zevadF@3Ijp(>~={s3FUdg~R5LIf}+N{5fA`uh57~`|*wEv~5YuR!CnVcgH$D%0nPD zD~>O_bNQ1heTwnAVoR;oC+WZzeuekh8w5rL|D-oFfYbB`FZ%KKGy5in?-Y02E=|9j zX%Cf^8Fz^p?skqD{(Lc>d~Vi#0acGs2ulc*bd(7GT0uQ~X=v4eA1kMf;kc~Zq1y4C zjzYUHK7Zc(dzTnL2v2W?TMXkeHu$YHOTzjzpL<7En+EeSxSN<`65r+76XnhM<^mb2 z&uN;aco1en7W=quzhDU5EEypYEAdj1?ZGh9cVcJA8<8xA1`7AOpwuX?<)p(gZia!J z7oTMvq8Y43EwCc1l}(2$T$zXlXE&s9JALVHQ{5m#PuR z1k^T?StwM;FE1??8&W`K5|%v_;e;H!!=O|K>WG{!BvQ}80kgpP@6l;5mr>)ttX)RQ zgoJo;Jp>T@1*)VO!-UBXUWi9DL`3-F1Wm+W~|)E_B&^BM{5UJ8x+ z`br^QAuC^pgFh)(*M<}QAeKo}89gFUia*TEI?DM;JQS1X&@eZ|p5Q&QBzTo!R+1tVa;l*HO$G;Bp4F6&>B~_7qc*0s5Ds z8V$U<2hdSNa7Xkqvcd80tY0{OWo0GyId}dJ{f`K!hiJq#*G+?ACb9@*&i&D}@3F=m zr!Q4VZ*UzghFzeHo|rA_G%c2Cvqt(cU@27K6$l@GGKSI`;YE?{gs3_1w_R)ov9ZJD z&`0>IVXz-O>USvw7SEg5Tw1nX*dG-KrZ9Ql2apHDicIh$N<>`aWZB&Bxh|^bQUol` z?Xwr?_fXpV5d-50dA=l53Ge<+Fty5M9PlJM0@r7Ar1J^u{1jGwGC*$f zd@+#mwiYXcji}+UbQ8lQ`5u{zWH-5uu8MS69s^CR?o5XBh^0F$4CZlT>5t^vS8;w3 zjwt1U`G_MAD~5yEv_<>kAs3Bon+$KxM?}@+VrM<~FxWmf{+4Usy#@Ks1R<$S#j%EyjNJ8YCg#7n2 zmR1F>&#q!yo!!sg&V4qtO{S!Bjoco=>K zefmhaC1N{eKtf63Ps-hq?rOmWb~&gs5g_G2s$&-yUn^KeBIF8b<+zs85$Yv_ z>BSAXU#TFZBd>RGyUTPf2Z~3#)NJJxXDe$cT-oWXl%vC>1uCH=|E{0+{$TYMRz|3E zIqxJahnxI#^j)l&%RLNTVl3~5;zmt!b~Ci4H{eRd^^vvlJlEgHk&}lo zL!iRPUrJe`|aDe zw~_3BACMm{+H6?FBzcin)}4JtA`C6P(!I#$CC#=kxGuzqkP1V;pOd4XhVjb&%SQD< zPliRT+LQaB9g|lXVU2`}H4r#NiMNzQ{NPpSA=9_xx`=y&oq@R62)_;xtj^yZ zE2Siw%Ku*gyrz|j_?rLhA3BUv9>o6tI6P3pghj!Wl4DrJ`!b~+J~uY{d2D1eFtZ77 zO_n7O3=FgjjD-ss!Fql-`PyURcf3}5Y)Z1bdY;#?Z+rGo$6a+~ba5x0Q)sV=Fb}FbOCtTUAw6k){8wz506eZ>#0yuBOO>uE|kMFW}M0E3^0`Z_; zV3gv_H?F)~%)IJV<@rY5`N1PR&icIZd`-4BtuqSrz|b%rdwfjmru2^fiLwK#&zktl zx=%d#!rQ#*_2495=~t9PUeIlb&E_L(YuSdkw(aX8;^OJc$oM{S$bt81j0#bDwtijq zWN)5(ZZo^MxL8NV#Y`M>fq~qvcNYSQajqZH(jJfg{;kxoavU8KliGT^)tUrMZR^{? zxT|ltEOCLqbe-|7{VG6>j1I_sVjDa!t^}NMV%renl_)U>KXK=1W}T8KuE zEuP#3Cc2>BYnAFWS>=MicW9_?iMTeXDbivt%K+aB3*McRKP)32=GpJ&$ZLZu(w-J6 z(SIYZst|?j*3WDIoZ|a{874nrWp^Q>#UZ@JKOl&>lT!&UG$tfq_EBE_opn7uy_GQ| z6-mN|?`k0k!vFnQS<=1l&w97brB}P-BHGJZ{MP%;%|R=pUt+o+xz_j74^37eXJwX% zva2(-tfz%4c#YG*&PY#cd|jPPfMxmf+Q;|F`empp#&YAM5}3zXR0SyIoQJfRW$8=ks5BPj9T{q7xZ)Y_WE z9`R|_#)Ug;dVOcN?}}q=+I{0z8y8BZxw=?Gbt+e6RwtPLK<{iylh^htYNPSv$94fe zVPWAz5QOMkb#R1Q6(=4lRM{bMyzZXQpJ$ynGL$L!?*0HNa0P4GurdMsOHxLL-)Kin6|O zMtKhqfl|xS*?kxymq+ns#A8+O;lnCShPOdRn}-Aih3f}s!<+f~28c>$TKX2*ax!7g z=Q8Wph$tnn#J*vqLta;Y&j8&0y%;9uM5f%L(Iw$*-==j(=m>*KRyhx!Pmg0)so#32 zr?)y$_5x=Sz!i09x6*|Kt*p|zhbhlum3;MwT-DXXdKLQOT^f#btQEZRHMAr^9J&yp zq@=4mxDW#k8Q9nq++jlI2PvNQm?>gGT#7#k{ndlh>B?PReVS&LCMIKgI~xmlRF7_b zkjM~66ocwBvLRZ+9pR0l=I#w5HgC##^7EH3_FrLi+LY9TKJET^?#XzE7Xe%`_)*aB zO8CLgFfRJTi1shV#j~v&dsrqsuT9K&?{Dvh*KCcS_2-V(vr~Slu{EL_=cl}12b+-N z`F8Ge%;cRriqsYSR@{0pUm(hnSLLy{#?_3P(~xhC&>5{?$Lv}eKYMZZIKbP@(Yjn7 ze=lg*n~)wP@+KdYp{)G;1we-BUlr6Jj>1gz1SD!nskCTPIk#NHPHPWW$NHp4QsSFS zRu7M$eCCkqCt1i_>lN0mZV@ZKv2A85SbBv3Tq!N*1KkEUJKY0{pUXK4EVf;P0P?oy z6>l9(5rM^3CmY0dgOwbSW+y5UIJh@|_Io~&o3J0n7`!n$>1OhnZErW%j-z$R{|vpQFqy38Qr6tvw)`JzV=oV=}(N=U!+;*EyS zl`H2vjkd4e8(--lrw8pW4#dEmC(A26@imLSEdpuod0To<@4lJ(b!37t54q z_`(~s*nssL-JY)2R~h8KkE~g~2nuiwGDFFCM=zj9HYAtc5?g}aDQ(GJ$K>vpCE_Qt zDg4X5cRjI2Z5ai`KiNm`J&&vNE)XAr`+T;ij89Kd!LPUK9Y@rU&Wdrl?7P&eEi0&? z#4Vo-cw?3AsnqE~La^fyM!c-e*TaaKil%0g_M|I81>e)+>vgm?*nS5QdE(i+(ty<| zH@EU4Vv~)wgR*|Kt@fvx^QQ!Ky{W!KNLRj`y9W12_)NH-eb_?$eo}f_uZPZ~?Cj5< zsQ|! zC9BHH?wCpxu`#T2wRQTX<|CQ9!x_Yb;u$U}wmC^_zBP0F8W&!)Lw~u(&&00qIE42( zgH5&mi(xwG1BCS1Mdv)R*`kHRt-o9EbHv*I$70Uhe20|xM?Lxi2D8iZMI=^vF7n7*nXonNe6dwL&z;B>qq1dPYY3ObVN6)omlV$MuPML$ zE=Pq6dFL@WvdY&Si`rdUFu-ChyvphMp-i(%CaC9QCv_Qigit4b8a1nUdj*>3c;=3P zE`spZ9F&`89T_Qjy6rbq4Q^53rN+cq_2$oZeO(phSAQmcd z!*?2&@tU9cR2zNe)DjpXN3>PC7gn__cA0hPxa&@b>&W90wNxytz=`*&pc}2JDX&oX zW;x`3%->ju@bXmh6djVspeaWd;qgF?oo{W|BPRPP`~Iac*iSAce*~I;LxI8qaj(#F zu3yfEFnD1ncjq1%`SAi;mut>j#(n11Y}TQ7 zp6&R+L~lxJz?Iei#dY}N5lW?=?}l2KuI9iZ^BQlMM?1R?^a|((mmq~Hf+-fDhN3BS zxfn@ik9(t9Pve+RBi#2F)S!ni2Xu|N4~GsUIs#S!*z@&;G|2m}Kwa6%J3tAG=YB^n z!2_Se=-ZZuJohq>!ITWQ!F}}CC&Jyhk|^l=G|eF>s7=xBmBr0INyZ9BYz;=8zauAK z=PTp01Ua=*xePJ-~jxqs)(at3Ys}g>>SD7s}Vzv z!xItL2XZ7kakThZ1``mT-F}T@>@`@agx`Y$!HtQp6Qqf5iAGlc#&#{nJ{z`s$=J7$ z9}5fPT6ag=t~01|IKUX3Em%_IB_tkQthryzz{V2sBaUIP#2XIuo)^J3n_(HBK(wM~ zZ)lXnk+vb#b4PGS?TGeD2r)RoowXt#^RwygMp84ZVb_tJeDNuG$TDEGo}SQo7S@_q zQ6}QLO{#=pB^mz3R3RJ0ww&lC@d+XSinRa5xh(Qixy2D|Y~_$o8ne^!o;qC5>UC*Y zaJNI=^od!9Oj?cYsn=<=Buw%KCxyQtwMP)CW1gQkW`^yRB1);%#AI*kj6Ruqc!P;j2OrRd~qR^usY21=whv#R3`e7c-uMi>bSE;nAz$cb($>h>vXS3LD;#0i zb8YCFwt7crXVmU0P#uhgJ`h^}9e!pM>)7hZ6)DTawDUv$N=&vgm$cO`Bl!_LE9uBepYjWJR)dd<(%5% z3zToe?BoDAQ7FZu4kRRYe>XcfXF?n`sX)YZkTAuAUB_;Wt#PPuCykj9)@d+7T7^&#H zJNGdk8FJ#{O)3-ytFvQAhyMBAijU`%Ji3eKoSpdt0w6 z1|J?E#Rc#jC(NqD6;{ogBHG7hq|MEF>>9DSqk%kQ=9%jxi2*AcCPF(<9#{2g#XW8S zH72P&8SA|Q>!IYLpa+r98EOo3NUUyhArJ;!D#3I9ZfwCmpu!Q-Adg22A0>c@#xO|1 z5WxphG=g@mF2?59hixug-kM(4Qb0xVpzZs*NP3kl7_7lX!pm9rzLz0=RXKuq$m729 z8fHe_MEdTBEZK`|UOi)cjBxDQCl}iv<^~8_LG|AUUi??8Vy6nlD5Mcf`v?+7fF4~+ zpJpjU&bBCyD_vCrc|LnhT2%Z}gMv4W0gGiOR}aYu6k0#cCcjU14c)tleDx~Sdx=!Z z%3eqxNg}>SIJPFF-m&)eO;@M7z zcDt!KIqnP(flSfb+RaVmsA_O;}_fQozqhgG+(%$bNbm*)%V+wA5{Pb3?xLjxLkmBFX|l>TW<-$Hfh zP|d}YbndLYtl+OxAXc$%x%OMCHHorYGVW*>YxIiNJ=^D&P4aSdJBFgS(b}kVN2Ntx z46u+?Jlp4q7bm4Wo?JC#`~&m~<3WEkCYb=bTFwb)`FaSc+xZ(<5{UjISzcLIbvo^r zP>fF)45#&oA5L$CZgZC9QnP-1xay)wM?(`!rWlr!_x%}}?I;5hhM8)Yl=R5(iO#Ub zqde%@a_lxASk#h?gr7h@T~#8yKlDU58pOTcrqp~iRXv^Dy^?cFI zx^}<&qwgd&AtuuVtkPL4#BYpc(QGX4IesM?24lHP*>1B!%Af3eIkK~IpUWGj!%oRI zGf{ZX5aTtH;srKM|XnoEm|!eZ9XhL0`*Uld*i-t^mG54S z2qz~N8L*d;Z!C3D=z0u3EfaRdw-#<9~*-DE)q$1l3i1OxM>IQ;CS-|2k1- z>8znx?uR(_?+Cws`8W!)e@9`AtU5+QgkJlKG=`^PDxF+$xDKxOQY*$!)#RP+8~LJQ z@G+orIN$`V*b)cjSHC>N3Dl(pA#bm52*FExr7j2W)<`Ze0o z2o-hQM38zaTdAQ$Z$z~7kUELmCKERT=BtAu%oT4*Utty(EZ_(mJ(tCEBLETYEozm&YKADSj<=JPT60E}$!dVmb@|2O9^y8n$>}M= z&RSZH8+iwH;xHB8Av8&E`nl&vo(n(O_r}+UX3y5YS|FGE&h+y(u1&?GFy!Q(5 zA7!u~$V=c+)xEz=;@MFdO^sQ7NUqLp6Hf7pyC|NThC%|=bJw zz)DBDc2vw|I5yBTDN1@rPeHnn5-p2q#Qg)6R@;xEo&Iocn*lr!Hecd6UeBtwnY`{u z&3F$b0y{*|hkZeKK84WCET!ookk;uSmMCAXMBvnUr0#K5Ux4X;AAOqt+3s|2I^KIA zC6ZN@gK0g+I}qV!p~Yd&?)i(Td{t!i_*q zH6u&b2fP>Ait>iH^JPB^t}@D_TxjerM_T@17+O05DOZTY?ie6jNyVuWRJFlQnGR1olF@4(+`b z)iZh>(wbQwsqDUoO_H3xkFu`f^_8QdV1M=Y!-<=P3OnGg5!dEEQB+@VsEefb&mZ*L z3&Ab3ri8QnkxU9DS*xIC~Gk>t+#}Bm|O(*z91O^{loourD z!_z1A$Z^raZYgV~d$4bb3uJLDk@PeXaYBlUtoLq7Ek&6b8_|D+D&l;WGKu7Mu3U^6 z=Lx#))ywe7HcxZIhD&IkiGz{$hl04WCxIux=w{qEHJmdQrsq#dL*U0K^A7xvFJ>t!~B^8fO z$XpZXk(~gE$cjpfopST>o5K%r|4zzjBK(Fc3j~8BerF6n%gYixKGj?r8fkd{Q12CQ>nP6kOKe}_r*HVqRGFr zc6C3PavK>Goe3Rk6cZX5})qOMx$9Xh7pU1}brdbc%8EI6|%nu*p54TGHN-|Bz7cAIB zPfD-#b7px)|EE_v`FE)G^8a1#uXcgX0StoFx8JOIxz$<>RwTZ7pK99k_o{#21O#4h z^w0bXN0-`uvvjw*k#yU?b~NB+zmy@NmS^=#v@&&v@rAO*aDC4`{;B1GpV-Z{3JU); zWNMrNP*(%`U4Ki^*~&_9vc|z582wT2T&K%f(Px0#Zj42eATi4_03FIUd5%O7rL1Kn zhY+P`z;T&6M)g?dwb)|D0BGm5fcw9f^p~&+Ybh-^uKGs)SYs@m+kes5^jF*A(oAJ2 z1eFdsd3p1|prEovdUkf_Rw#H6tu$R}7e!zNS<@Tn=_M1+PG(z`XvsGbqU>JA4(PcGMnDzQe+tnVx-L`i*K+phRw)6+wKquL?kvh3TA}i54N+ly(u9v{9!X9f>a?@P@O$7c39wUqy!rx zFfb6#JOjoT78VMqs91M&bVROIt|jjw<2kGSJQVAEe}HUnh%1<^8fzb}WpG5H>)8)7Z40~+ zNH*@3sQv$n{zYWThQk4obM!6Y4MGE5ep?LnhQrIfI)C`yJrLE;kt#^M>p-j&e z{-Y(BfFG73l{&K#eMuv6zpVv)!hkOAB-ve<3OLzK_1T)}1upZ7fIpu2sv5yR8cL9h zWZG*xP)wIs0|I+FN%xgV%CH=-v(wWctzo9ka8HenKW!QL24*@|tfVV@P7(i*^XXP{ zHo$EFw&yomcRtlNHxop{VDsSaX)5W6_=OL`a$2aD`xc>LZX9ZueLZJ zxg7V53#4TAPTf*Y@H81@I}>_2)Of+_wE#CllyBYY5i5j?vWu-( zS5=iVw9CNHKNNHXgBJjQf^+Lnz2FGUqw9UMb8{{_cPP$0XKkK86ZFU_;8yr@QH=?DI28+B}#eLQ$IeuvR$eUsgYo_*r#r3 zt~32xs?JV6k}mq^B_Cfa$bVPwp>zo;L35eS>!_|xcb}&5GD~a1)c+VcWNn^P`z!u( zpM4RB%&`L-+H9ni6kGf^1ep}o{;%VsH~xP^)BlG?5c`LRa)O347r*!PW5$n{t?4G7 z1J}-s|2vEJ55w}^2@s;*hGnZc9>c=K1qXMif| ze^1S_veXq59?+~XJ~8po*f>!UauMj!`%FzVEhS}YN00<4!z;U*4`5*dkdqL2Lm~~qjku`{ELE=Od_{RfK9sWv0`dzWYpu~b6tO~ zggGJL4pV%?Z!u&0o?NbE1Hzkufr05j@#oL6w;u^H#s>j04X|z`_w_y8*w{FIXscxZ z(`&VF!D^2V@K$&c@IKC${EiMs<4a@W&(rdpdg?NL74(yS}NKI z1V}*r28ji+bwKEk6B84|_0V@HOn$!G$-2hE0up1pBx!AIY;#owc7D)tk-)72^H~1y z@!QBDKu@Ry;?>i1Wc#MEbiJjJKdCj!ZmPq+SQYlU<-zs6y}bRO0f#@slnZK})uA2h z$cDx+;-60dCk$W7(~H9=Uv8!yKbU9oM#GvvZoO^-4Yd+}2+Vw~uRp1s`QUs3cz|S@ z-Ci(NeFm^(4q!=Nm>x?J0Pg{I%f!06y7qhS>Cuc>=o9tlRMgZvO_!`?q5hi-9q#)R zN7)Ps-QC^oW$^IJT8);rpAnRzhhIxd*yg-!Uq0a#7Vf2b?H+sGEBs}G*k&cKK&Fp& z4@eMx=rA@b@J9`^kcM8Is;rz`=}YaG`85%5QNOu)Tizer16`B=L=u_S$yJ}L&GQ7h z7e-<$i25u1}{qo)Ue8&%{5k7w@qPwu4S(=u9AUi4Ib6bjF zZhURkQu}JN)EAzbt430vvZ4aj)jJll>H*U$M^kC3{>7M@VEb=`KYj6w@X|@TgGg? z5W2Cj@N)J#>n~y9`evLZDWNulHCmc%$pc*f>d*SHnIC&tOLcW;%2C#xy@GJ^FJD%F zO@;t@ne2NifBT2(P;wrg7P_4LR&Pu^?ThGy1mZ*Wn@6L&x?x=64&NBA{o;bT^zA9G zAkfRFLnu^zw9o45Dz4$qojay;d_@ve=(~X-iL|8G#Si$#kx~Ivvj_1Z;Znvhz{%B= zbIhtRepMsJj;GHZ4HuTwzH97T4-#jP9t|@?{&=9T&vC=g^LPc41~Ca!9%a2xN0T94 zY{afMZPOQEG*NEO52%&tb8{9Y5||!JJRELeUj4dO)I!4gv4M4aHX(eEm@H~t_arOp zhJdv6*lxYkn07YG3~Z@}awJtJm}<@IS@|2$AL;DY^hej=+6BZlxHWU;4Gn`!P$SlI zdq6&01s+j`nm3Q{vO_rq4B!MiRd0rT6TL zw|oSAT?%+_{J8L#8#MxnDJ5jLc&`tunb&v}1o?KOP?J>nRFP*r<(3Mr?AAZu_C_wh zd{SmzZ@4y;d1vu8+X?v)t!s1OwA3uQh6bvibIfQXN})B(_HEBrvC=y7(8k88mwd#9371Gw*f<2J(nk(2n~w3rv1MD zV`ODmkC%AceItSyd>bHD?X_=J<{XY{pBwpwD*pD`jP_9f%uDJdG;?{x=r;hZZJ8Qs zGV0cYHzqBrS;Qcel5Z{JJ*~mG^GnUT3zy;t|Gm5SGp?o~H*jRXl{~V<{dU>O5gIK~++| z2d94J1}OhRRux&BK3X%d%Q9XE*ioLfgYo%_<*w0C`yB%6m5yx;(4=+4cz}d##m^4BvbHwW zD%t(%6Q4j2g`FnY!lG2E0*qi-%V~N>i9hRpd3Ic(^27B9;5TF+ig*@`D-C^TE&*xz zja!Lk(ufr4Hp!R#sHow#E-txt+4saPOKG<}S3!RkmB=|;|Da^Uh#~+baVz4iG*j9o z4`5dS?7{gPTX+c(TIU4M9n>X@ zb2)EDfV(bz;;LbaBvqfL^sif#Jv+!gcg%KwK0GFPaNy~6>eax!3jQj&%^?=aRoMt3 zDsPqH5S0Ej*Ho~NVk=2|PY83y&9-u&De^zs$ zz82?`M@YH0<0yh@a%35>`qMr7vSJL<%BE^6?zEj z#3Gd?4d~q$U@px$VKHSZX{o*w{BSc{i=a!wQO{>j>)iIfM(WT@%U37Y?U#Q94^1RK{ zWhP?9kL#BBp6rjg!S9B|1&I5W?zuMjigsvyAfT&|D!m$4uJInJ$Hf^81T1Z8eWFth zDq-oLJH5Kug)2Ql{7NTAVOGm56%#fN3(GdxVQ2nn;X4-Q7BDx3`W)}2v_|h@z$Glk zy`(`Gu{5NHJL5{DM$W86=jP3 zKab#*`R-c*V$(iGu5Y$44t-sb(!J$Dx4R6CzU)F*A2z<2F{80Dx`?oXK zo=NNnjJ!9bY?^n6R3xmYCA}uxiu!cRTHJ70<-vp6Pr=^=|Md;`u~Xxx!lDk7$I4{1 z)^M}L`4iXVwtyhq$+q`S(leD7`O0~+f!x7#5ufW6s|Jg9I$3DK_znLND*VRBEaJI4 zye{-#YjYOYM%>jP<1r@6!R>0{@3_i9&*m3&zqb=(H<66~twwyYJ?=Z4vpGY7aeIJC z7uOHjnkcKaPRhBJVV5m#4zOxyQWOa7=wEMQ{h;J{)F=vjOTNpQ{a^ER(MBTBk6=Bx zliaE}=Q!3?8aht|e|li}d!w#({>V9vTzkEhN_n-}4oTNLI9LhcUt>51x?LZenAo+R zlLuNg7Z!G2hgG;KgZJCYm$#Bu?d@?#$Kd5H@-7AIv*n{hGx5NyOn(M3h=ZwW@x03p zFM^ZFt*@?p4|5CnPnoOb_sq{u4I9m+T_yb?(afW$sQ395)tc*KFsT@+Agaq;8CA}VQF?3IT1&H zd!MPIg+)bEzJApOZ0$*o{J7I?pwR$xQ$@w74p0i3PnemRP2uT)&-a3GR_c(aI0RF& zQ!$2|>{@2K2?{<}%gap_IK%DKT0stvkB)1})H;s0fbYw9`QpM$g};+SwlDt1e@T?S zrU7#ofkxLx@-OOMK}A(t1`X5tiJFn#j|*QIk;HhLO(EUIc5gP zlYj^rUMY;a`U>E4=l|)h=i^f=`r@Z%%T#T@;KWl?)1JRscWWzZH#_C631b`-1UPvk zRYwQ2O@VCdS;cevliB7o>gd>5iPNXO#&*{hrp0gd)Wgp9_0m7r*H5l}`S0EB-3A)P zQFB`#iT;)a20D*tc8J7^aIHfHN_#04hXiIU=0+?3#l3^@0B~_ZftvFCk9Pn0%Ofqm zdm%!E-ee&!UQzvbyHhq@L4fA(GF>(8zrcBpyM_gyBycE;ju;zH*zJ)9S-O^SOtsFp zglzH9IP|X#GG4!an{#KU%I@r4bbNeO<^QzyABr8V@yeDZ03}Mwf&f9gKm6ZTW zgws1acl3U=>6H}}6lhPeOtl^z9lF33S2E|f>upaD3+y9S=cJ?4o%iM%`F$ThwxS~b zhnfM{fJE8rSTq=W{$5iS*K;^0IBnu@BsL-YfGEw3{Fm&>No1&%0yfl$zc3VvKYkTA{uqiOo?zNfsLQO@EXXmY{? zun9cGVE5?r`fRGzyt2OJ`R9peabJkD_`p-*_N^q)(BzD7tsuXCsp_ntkWlO0@ND2j znuUKOwf&6_#N|L@VP)lm$KUWP^(X26%oBU+c!-PW$9=e4W@)=fV0+F9|GvHE#mfjqs1o#(R= zOzz;hdZY(^%iKUpZ3VS@A8HcGsz@?6Nf+hiiiSUUJ(y!d^W~_p`+oJE0w(ZtzthBu z$I0%xy3pe`LqUnOb!2UAZ58p|_w&37xD|M?Lc>|$=JzrG;a)qxw}mc-j)}x~CZUr% z^LGh?rKVg;xva|@<0Z-ehpe-JimD6Wy+JAn1JaU13eqWELxY4U-5}DSFtmhpcb5pF zG)PEENT(>>3?)5u-#vcccmFrmaxE7khnYF&?DOvTd7j_9wCv*AZ8JA9!OX?Q<*

nq6R)8lyGPF+#1c%i3fb~89Q zm{eJ*vB9&syu4&vucV}Cn~GnY5IQORiR0o~uwa#enOVSOS-(dy3)2xs^9DX4;ggor zA48Fj$k?bTSJtp1X>*ytU%!7hAto(74f{Jd>%E01YZgoL=`SL&r$YD}-|Xj=V77%E zg=qK~)!|$AX7i~!5Qn><0^tTdlCCe|$;A6%g7+Rghy(3_ z2@b-cbb)cPI*2z2OA(Nf(Ymbl*UY^|yRypmp%Wk=Kn&+fYtNh@kLYGGHc8nV`(zkjo| zO8QlTh5@Vo*%bFP``+(f%Z`5#*m}*IJM69H3aI{J3z} zHpH{niP(FNUj*IEwm<3g?=lp(4x+pKN?HU6>ID9K5M2qll zZf;x~o4;SrgLN&s?a!7i@8)tE;#ZR^>&}psTaSa3&5E{cHqnU>8D%AXrTX=j%=^oO zf%k?7sj5MS@b`!T931SpKmqyf#NN`&A_V!v^ zz*^2o{O{?zS$NS>N#}h~pfaWzo^x_=z;|aOm*^Ijw#a0NMjJ2j6Wv!bj(J4=Ar{}w zM7j{_FJ9REctW)c!jGvU0=jBX+b(|#t$4s+( z@e&UT!o+vfV8n;x7W;X!+Wk;tNCWEt7nc;4<^=G@xMq8Mo=h#%ywfhxXJHz+hSQ2R z?O?g$P)>!EaY0M5+a=#POxOHQnv^{43c}so?!MKQ@sw_zOz3+|Yd7ug#DtCW-okBG z;BAAF*|xZDle1ovG2}!JW(b)Dy7ejf`*cNZYiArlXd>`?2i^CDJjbr7u#ZgwJNzI& z-UL2awPVWisg%fWUH=e$t=3>@h>F;!D-!%f%7o_=8}{I5Y-?Yui@Amp=^f?J|fXY5C`fwc+} zh?9+bdrJddJnLvzvCv?P@j*(^ythb49v~6n9IiUie2t33(5FDJFn!OTg#;UJiV7V| zbnj=z-xsLvzLfNJH0Hgvr==nG=Z97hDwIl#*--&>Ma5Fm+w!Sc9C_@dcM-P(XUd-} zO}@{2SD2&L;-;pZjx?r^aZU56?DvC9DMOswv9MNZ{KZ)N$oa4wLO{s_rBEFvbPmX| zLi2|_Pz&;0ciWz_p1#keTK~yLMI}<}#f$0XXfzOjC$AlFlpI>W8#HY0ckS2O*%jkM z`fU5TNHo)vP}`W4JgT$ZT4F_Ki|mZLY5V0(6pv*7sfK+M68^_5+;hd#=egklsS;gr za59|f4$$f{T&`fUvbeyC>@vtVE^O!lGd665S50`7-iFnpiWH2$&rCr{weC)kBH+&t z98Lp~B|Ppnm*2fauAYWD3^_SUh>2=1fM`GH|VgxnCKpFn1u6r>pa~iyh>r zZ1!ps&fJhO+Nz4^VSiLdvDE*p{P0iXW548MAl>kJ1uUTst02e;{0MFx4}UG=e^9-A zWhUQJUESf4hHX}F-oax^;q-QtOgHw|2m81;ileIqc`NJS-6Mrr~Do$Q&ZKR`n~reaBac({Mc5gmTN4peq* zE)sBz;*x;3{(6#*GrUuMd+kg8W^Dh1vRaNZ55k{j3d$^J2Mgq9Wn(LSH{~VrtA<6% zNBb(3bl*mr@s+MGn>h1Y!+adv8y`b_jrb%vI;3*zsp_sDot?S6hG|X(k<@M29Lk;# zrc2!*zPawA2w}>+gpBLiDQlGiT|LWILmxLs2;Fz~7qn59lt6M5E&Qpr>TLLy5yN*T zax`I#yNhZOoyIA~pG=rdv{d*xZAo>$8~56Hm|Ml{Gv>E!9Qx|VGu;fVp}W$XRQl5j z&rASuGgThM3tx!)(C#K4hdUgYaft`lY5%0LS$6qYt|;JJp!BPH?tYB^Qsm~Kj9*@1Ga0H8 zj}3d55_WXF@G1#a*PBYAc~7?cQTz_=ltW&%Q5AWM?74Z~nCTFuKNF+T7W-*xeLKp8^Y?2x8lez-mU;3 zu&|q}2SVxB1N8F|4}@Dpje@o*y|R>Hr}lSq`HfCq#R2&-8tjd{hm5+BNW)3PStjwp z%{T`uKn2*%Ta`1V{jGqD3mDOTjshHpkO}`+b3= z*5saf1Dp}Br02dYFuWc*F+i zmk0qxUop+hCH`(tZQNGl82mF?smug&dT4ySIb>bzPup?-v({f8{qo=C?BVXXWmwcv zi$4UI!rZYzdEeEnwbmTfqx6o=WjZ$7lkD~B+8>>+zJN#KW}H-UIsz$}>6415k3R*Z z3r#aH%wC4&SfxqzDj9qt+|+O0!o>0@fFSN?SK|WAz|^8%Z>v&5V_i%=kvdt+YXN|P+Wlwl)vGmqK z`O*yM4~jmxPK>ufYRG_vs?*@zBcLbFqN_*OQZb(^G0!m89j);?ztU~X&{|CrPelJTMOj@vH}iEA2M?WPYNS6V zuI4yxkaR?f)yw#FW*7UasEv)3u(I;6d< zdvx$obJc_VvyXOmS>QLd#VXNFc+a5w`ec;#^((vrd4x?yh!dLd=JD2?ow(6%PDHlX zWyKSwwk(c_Z_XNwGJ>=cez&h(qg>Dgg0SeaH}Hip`-dyNr}=Ge2}!C^IBm^jJn}S5 zQN)J^)>%?rhm$<1hTY5lV|DG^OHEAvIv81$Okwx$-k&iEoA5Al7SBTa)wfGuw~lUV zIg*~1Q1;mD`J&iw*A=1X;Aw~-7$ONMML+uA4?J}DJlU!ly~Vx!{(hI_1juC-lI;;6 z2zjg)T9S*2bitD$g&|rUf>qCHI#RWx@z(by9SRRNuF zOxPXltole?3=w-w?A%_?Kj+>S0T;Nn+bsOR9X*X3a_*la7lDa^HgQD4py$9tYPlq35udKa?4XLC3>vCC2!Izw$ zJ9(L8(3^1cdeQwXb9==2Ak498+|EI));4&ZDS9LkNfBqzVkc)aL8J;5t zM~;wn@ZU-0Pg7`HuE{91?jQGv!p|vpP@pq;_dfQKfUIQEQ zv__Q8xM?wMYm8tne;{tXvqv+hi2g876E!skIs3XnHw1=rMqr3wSw9P-&y@k7A92C# zbGNRJXP`eVARsVVIm##|CRRh){onR4|;lxqh5OOD_W)OeMky%5Srm%yP*_XaZJ)tNQ?(8!1yxNjq{R#Po?njj6T zfpme`t*y)6!a_R0<+1*Jn9xe~x?>?8bAJWCoSDNUE+evuYE7EWK>FZEI-Rd>Qy)v> zHzb>4d((D=9FcMW+ss(`0!X$z?8WkEekX*VM96e;vi+53TTl|OdNFI(Xu>rL@CT$L zP8WI#BD3+lSbkMQvW_sIJ0KWK(VL!>_IetpLM#msLq65+3gKtTTnQ$jDsiy%CWNkm zruY1^RV6E<+I9QX7w3)ZcjM!+qd%d(WO0o14^$JUc1Dcw=@9MS-toy=?m9&HZH@5I zXC0pX9wNOVu453nXt?D(Ychx4V#p`ijJtU)b#>kMOiu2wO}mIRizyf)LIuc4v5iIh zPVqymK4E1!CLJhv8M>~-Uv)%lVtl`q8?i-bf^)Bi!H^QKo@kX$P= zj_Er`ALmF35Q_$Kk(}=~<(CFOG1POu{O9 zRX&s?lc&t1HEaVQtxuW${%~);9C{N_Hws)dQ06ZYcchGmrw8Kfz^@G0sE(D-FD`LBY z250EvH<9i}hw5h3HG zp6h+fg~!7@P^2xlwzlg!6AqPBR8qvK)k=s(EttQ?72>$?r>Cd#OKV_l9EPL>r>Q4A z5fUvN&xux!Z#siKSY08dgpu|M@>bo;H_tbY4e`#xmBmc*t;iT|yOf0o%?o!GNN*r@7P zzTY)=_M`!=p{B=8nO-*XGSIMwr^1nvBkXSWOiEt15k+o(C3trI+`aKOQz5Z9FtnFl zHv~l!YMff3w1D5@Om1WhZ%|T7l$f`HZWJd+dWvaT@ zHa&v6AR}Fbxl*cM^_CLgC;1xFJSxA@@#d2 zpNqqvovGQcT+>cF*3fZr!56k46h@~NQTJ(ue-@_kSir?G?X(G1zO;XH;dIC)%$g66 zm8!<#n6Jhi+`c1azs%h?=aWLc|CdTP> z47J2?a#9kG`=5Hrvy1bI`7myBAmj$p-XT&C>27qnNV=j}RQ4?^Dy@;q;3P(4_omp_ zu_T!DlA-i}kUO|Lk@Bjir?(p8))LXKPyI%%f&k&bk;%1yI~^%uBqU-{&ko0Uj8>+} z{W$o(2SJzGH+SjE0Vj=!6ibSz=PB7XxOZXY_`eX*3$h|~hkc6S+g~@^oH!N3!tWKo zvlM1k#q9HkTV;Eg#kh!|v17RA*Sm_g``|C5gB_mMtr2Ca>W!vq-s!ArY>?>`b+5v4 z(z8Z;>pFHXZ6qeIKQ-QhybA&Y z9S!H2V1pO$N{NI+J{*D-Mc5Vf;9BGFZ5O|HN}v%mEc<5Ju8TDyL@vhTo=1n6|3j`& zOkzlgyp=GL4uNr7-f%Er=osttb}M`!Z2ZvETDyC8sE%o}^Cb+&W!6}*s);pSKyrw$ zhgs58%3nV`s=5UdH7Fr5Tw7C}@>YH9Zoda?0_p5h94qDB9n9@0s>zSW+o#`+yOe2@ zHgdmIJxV&AGwdDnTMMU9b#xpGf;+@!epj!8Ls%DU4B`g9SwfR$#X#15yc57GFHAUB zQoPANcJpqpA%WAoCwK)R-4Gv52r{NF)Js_~O6zO_O*aRB9|GjHM|8OA%R~bwr5hF=xSLX*87p!~!V#!oWR!h1 zYk?Eiw_2w<481d$C1mHz+WQLC5nL)M=kZUAg$B}5S#>;G`VEkn86(keap*TzA zrS@}mE-jeI4mb@`_cPZSm03GU1*`d>(OK>>BIu%L3B)9N?P2P8N$LWRC`s|{vqQa7 zU&a?KDxfM54zMIZ@D_4ziL=gCQJYU;Qb=7npZ?&&I&a`N555d3vLb`E$@B8^%A0pQ zZxAo)7YPZ?wF*jqc|e0=Ud?Ez!&U)B`sM4!kwA$(fj0I-{c@tdkRgz#%@tA^`W0a4WFr^|ds-oawA=qp1jm3qX| zqo93C@Y#dzii%aH$jRmUV<>q9&x=Zq$AGU^D+XDZUQOK$)fi+1&H(P^ND zqRZkmJny$)v*rOc-SH8~N{^sVrIk}IA&YFPg@SFnu3}Em zx<3q)zc2zY0ZcBW>GZ^}#N!TQQ>}MbSVPWGku=_>$b6KB3eEA{4jA<7Y9x-%t5*=& z+O2KbjHHoDsfwucXf&FUz~8;Ju z94(x6sSEukgyA2vtrLvT6!onUm{Y%1{z|dy4wexTs?m#PwiN2J67S&eVo>uTY;ic@ zncf%hpGd@0<7t_7O~|gS%vc^9AJcUZUNIGyVUqg&`^U${>5BeU>pvi9+S--k)Hmb$ zE1*R*TDUQim9^Ja$Ce_U+nEhno2v*@t{O}Xa8?(q`Dj?mW*hKnhu`9r?I((dyST2x zK4z!oR38GCo%F|5BYceaVxxt#>2c6tl65WW;z{))uWdft8cbqJf6q+z<7cmS*UobpC;@($H%S>sAQYF8_>ByZM~79HSFn^$}e`kE}gnRSt!lb z)Rkl#Oo&sG^1;6gdCc+)lI_(i-+fN4r>(4M#K?T}y#P zgyqC1W{zYv@w1n!L+Mt9OUt_@di;HD=m!kIfu5O&GI%;)U%Knmx<)<{cUAWA@UVUA zeO}$4CM2zzC1_%F+#YuC!M!-ZdP>_K>M7DJj946I1;9<@*&2oU@6U-SXFwRYEB+D4 z*o^+&79?hg`|`s{GIRlqeZJhJDMQFb_W||OS5}KyI5-JVxd(c!kvR^4fM+5^Mz+BX z9DPM4C9%?$)1scPN6^;MIOu5@aijEu|~cz1!lb-o)w`GkPcS4LKL z(kw9{;iY7@&u-S`A(MDb*KEz(aNH9XR@SQN|9m-bOxw`BK_&&X73e@qC;{MBfPLz# zf7Zs)11dq9ii(Q36u2~Tf3^TUP^8dAP56>IjFL2&)Y2NAOU6Y(uMTKo+93Rf82KO< zXB&Zr<_-KC{aJjPRHVy(mr9YtO#f#5Q137$2Y8g@fpa!h)HCTyMQV6_{CCe{d+?T0 zr6jC+C}sa+@HK-Z^&>VQ@oRSnzklEB1-*1&U{J7EjpDkq+Lt<7Sh7YXsRmb(c-K;_ zS3Ab82Do&~+y5mOzwLMWXOVmf@syi5XecO{>Ks{CUo#W%LM#0G^?79_)x>shU*C3k zDKH>tr&OtFYJQ0Pvb(#RoYyAB(mg~S^3lP%!o7kWDr!Inh1$MUb91X5$ll(WZxK%b zIn=+qU1b5#5^1pmz*dw+UB40DI+)SgYPrYRKt;kT;4l+|&{IH-4B>t9vm`&AfRKpg$-qE>TYFJ^OpfpIVNs*%=TFSF zMxnpKJuF}Hx zy7?A*CHJ^Xz9&=MVKb;u;7NADKEuv)nXo#sHV21kcVJaa<5kJc_rKoW2Oy!Ifu7iP z;Of99eoWgc2{?m!^!m}saPGm~-JP67o8&Ox{NzQcKGh$*-@l(buMJYN<^ld5 zdxM)VEr_PZ0~^ML@99S+juoz~4$Q}RlurdM{Zu~}6(!|-|IT%!-Ybu+Q624II#+(z zl6{&b3I)Cd=i@_`3*XfGX!q$XutLWduq1%o|1wt?w<(c2+V-}cHvZn~rTJn~eeTCJ z%vE3xwEG5@3yAf}3d)f-C&CHL222#<^E3kXGv!prH8t9ybsle(-}VpnRpD)~7BFrm zGJUPBO<(@l9l1G6CN z(WG4=3s?bGc8zDxXcQC#R)D~{d`u9{2Ml>3Wo6L-fawlCCYCO&nJSokVsgtAt0Izd zy@_E*rBE%C`_5A(;NMdMfw`bDZ$j{VYDmXF1l@*-3nD2|W*P}?HoeEe{Z|Z7(b-Kg zRCgv#YU3@ss5%r*?6xz(MZfO;4!CZn=9sab6qS`#<+U`G43t_m1O;I zjhJi)UrpD><6jDAmH@to< z8&!DK7jumZy!{@ND(n^oG7?=i5&AA6T1efd*B?dTdlD%6EH{+d=OEpvj~$>+#(|-< z+YRuV&4D|k5|BO5f?IBch01-ik7P8({=9Adbp=4nz4q<*Z(?I1m4NH$$p(VOo=-Bl z*GvH!61j;dR=%x723TMm+a6PKjVNZ9j6=vnV&dMjgEjNxVjX^Jm=@r;#SaPC#tftj zOp0($7*N!M=7PfD`@o5Ltk={o4huej%dPGyW^FcBf6(pz6uy_k*I(Mzr5FA5Z9$1W zJ^jSRij)g=s<=az?d-Q7zgT}JnE^$=#(uo?$HccF+~$0h^ejODpV}5k7dt)iJ*ll3 z1TM4kGY}efEmXM@hu^%YY1)vB@G9nBGg$=y$mB;*E`I*8)xI09krC}-&8R2o0@M70 zUZ*i7)NAWN(BJNP)w{!?d~>zn?J~D)cQaLO{Q-e6pSJNk@8`K%aCNSw#-&+GW!}iD zbQ&|@Ls%BrvoNY?GB-Vu%uY&rjPmVo3XtD!#ci&sfe~{Un!g_~Juo(CwoN@6+sDVk z+DpD}7OOX>dM09ioEm%&uO}&qI91#?3-CLq#mq@RubF%gK-RgJFG;SLbh(CLQIQ7Y zQ6>Q1qVBFHcqn?G?oKvMi=?zc9qrk{>B%Ozb9DObtq#xKa@3-p`qeJ z>%Lzx#0^VYcSwl5)X&5>!@4dm#w@T`qHo121@>4^JBxHP$AOnaC1)3%k!YKuh3qT^ zxS&Raga=k^O*f3&t4&5z37Ix6Y%NR0;;)Ac0XAAqDJkem;*k4?tM&Wo{Pxus zv^8W$W|Vfpl5Osh5h3Lm-9%pLWwUTN~ojwRTk&A4J8k5QL*X zZrfKGoO2hq3X=U1old>@kE{!{v- zwya>kFd5zZSImp73zE6>c%~>^0}A${9BSIH`~p2qmAduM_057O`fN5CN^^7{Z<6@bcXVvh2z9dw83PtF3L)_gjbVRuONR!V4%D6AEceJN>`r8HD4#C)nD^jiyD}X%b+q5XuhYt(!`{S!|w_kAu7k837#Nn&QDPs-6oavLefnPJE6hPby$_ zJlgp7@E%AgXlhKwpE{MAxXm1bW;POmy~(!V0F%W33`Z;v@F`qhoa|Nw3AmefKQkgY zp_#hhdQt0pFg~_-T^Q8sh#gVrPwUo;sVa44fB8_Fp+QA-pIYwk5#3E^SF`;pr)X<%%SRJ*o40sP)y zQRI!_DKmBLxA@~~)5WE1i4?rj!CGOt3{4!7>8#b}jma$FR?%KJqkk%mu0Gh!aOH0& zh*@PdR2g)CMP_)E3Vv2E?t&A+7(pF1@Kx3)!`IEOBC=py33VKyHKzWVHF)q37iywI zXg)D?J%C!PXDWSlb#mg>kBi1Sf_hC2kZFpVws7Vw(I@YJ`ac&M1%Gj^fCZW$-YXFV zykeXTG9ZoRz>6mz05YK$PbSKuO2;x ze}C{^5AUiVax6T{JnDT{HhwDLM@iYU2M6Ot8q%1b#$XOJved@gMKmD?xTz$g@x2oP zJc`b8uVbmg)wCz5JVgxArqi8%mC-G?NBai92NBL}iNM~qc6=7YCzH8ATZ~!J8y*UX z7kpQjF`^H4eT@YPD_ssO^KjckLqjW;@EthXtl9jjqS+StvE0x|kKCwq(KyFh@*s=f zJpy-y#+x5=GH;|7m*?9y*{{WB5e5#VhRfyQoc*^#T zq>-uYCWF~0O-2CBc)zgdK!6cOc$g7iRiNCyJnuyJjAW2$_g?*c@rM#YrfMkkUItSV z)cHk;zBM|}ip-}fj+L%O2}&WxwV-d`%$!<~JXfvQ=WOxfv|>9eqaz}R2jc=#CwcZgpI?YmC}c4RsW`VS(?XQ-=y6C{JFcN<5O;OgnjqvU5#a6*BL zR_{YF(owlX7@CmfKWCuFj;FG$1}+)`J7ptvN%2nJNpz6GNJKloP&6F8TeiukGH}Q* zWnbsCoY-0g>lcwi_d`CGj7~9mNevmcM&rVJXjm;f%ws;JV!b`ZH)iw030rMp^=My? zdP-zZdkKB{G~uq36crBZGHo7PLhMUV%sFAC6;_tlT7Q-W^_J>zJcm^FvwKugr0np^ zvlfv5|F}n~7V^6#HRaXuP^B+$FXJ@H_a&dDM83O9bVwQp^KgoQSy^|apHHHH&waFI zpNcR|_R&GcWYzXlSjgTW2MB22iF{_3kE!14ERyml;5sb%_YbE7f$5QPogs(DI@K7{ zcLebf3$mBAVGs|}s=!!$Vk!5~6{hPc&BkciVd%F{(76|XdcJn?s}5^EkfGZjy|3K# zN!UUX-{*L;kpE%GCPu8HU_WqKzm^rxOG-8c7KIsSJG#?4dx&?!{l&0C>cU$W_(q~O ztID2iz~|hs3v#FX3MrX{Aq)&Zj!zL4uNI|j5XL#6GpEV)r@!G&La2H;uZybnvird* zxg@3OjVsmL<3*9ZtlJ;35`sC22dPikambf`)Q^`Kwaj^x74f)_Jcu9{1W|K3|5-A8 za0W%L9tBqpWN=Aa4y0LAG9yIi5q+Rcx_vhuUvA7ynNt_AxEB^OF_#vE3Q45_5`)y( zuah&y>|CtNSPK(R{LF##Ej0hWq?(Ym(auq$k)*gQM#;VNP!-Zn_@Y|MwG(2Gmgvyo z@%oTeLU&ZhogzNm6_)jM3JS#Dwv^D@Lis-wf0}l7e;T+fXV|fa>F|j22xOl*UyP}g zO{>Vf{`4hw6!vCTrOEEb-uiX9^{H!GfxQQzq&_Xa zM+o4_6140SLr+g5yO$h9+5($sxOIX#-7fY8`evI+KVXR>3)BeAMD(9|cqGg^DQrm_ zUJh~TH`8Cc(#0&-U3G`g@AwW`WVOulvn>m(Fj8L^c$KQ!Qx6^4d-g8ZP&7wQM|C*7 zAgMW-3G$XNWoth$5g#{f_chBPbVW?Ev#seK_qSJxA$F(i;HK2aN7_U9W+7bua@Y2r zNaqzxy&(@L8~`Q5xU?j@ct+(z4KUhRGs#A#hy7jKo7YSg)S+fEAS>@MWOtVC`LQqD z3@OlO;EC&?HV)en=(#!;3F^zXu%~vjjcR{N;2SR(WFt`9qF110B16zY?PK&d0`=5$Kh1L)%p6E&?uWn zUaaanJ?`M#`_Eq*VYq+Lru?p0P*gxQ$1Zj68l% zXm4#Q>7vV$TOI*4F@lbBt)ccPjW;q0|46W%9WefORboJF(UvLDF{nW4@w%LR;}-cz zjzrr}WPX9`0{Tm)^>p&hm8DscdROsz{+ik=184u{<{Dk+NYWD_&#ABt(4Xxt$)|9= z0;2-x`5AjNs`VVDROkp&2tmH^eghZ1Byz!n>X*x+yQBQ|6urRZ`$PcfCTChh$eb4G>;d2c+$H zwD}eE-M{eid-DZdd+3DcYx7ONojZ2JZf)`$e*oYe0aDk*$a;eEMo!kWKZIG-5b z75%_2y1UsH4W0lwq=lta6$5*OJs}~HwKVqL=WH=|eb8K{DPpNrz82oby0!5u)Xe#y z^X+E6+_05J!SqoC&ce1))$5NlTo-{^_aOzMZOiioJV(l@ho!(0=5Rb=uf~w{ zn&CV1x_VmgaTcc%xEW)}u#QJH!6fN-EqwuLmS%oHD@2MRi|#JnHO^ZPbVZA&0DtY& zF-Hae+h!yp9HHBok4gHz$4n=7P^{%{hOBrg8kA@-gU;Q(!FZy4Mqp zsA4IrY8My;<%m14=LDjm%fDO~V!hOfIu-L=O;90QMJzTkDHql|8P{YkwRw3u_XLyJ z3K55jbW<RyammR{V1^J95dB)ehH;DicN8uY|7-gpo>YT5j@{(rzMXS9q!u44i{I4L zaaiLQ;}Eh+8HkCQh~xtr$R`JW+|F7C-(PVqJP0%}ZAH zJ#d!2^zb-k9)n(7?94X&Gh2knVhgn4Q5djaC?9$|(71fmYcE}4!Ix!Z+el%?frfGR z8&|i`%ds&1RF`@~DshTgi)aZjMTZ^usp2?Xw^73@Ku0h6V_BJl<9%6o0o3HFOkuZ1 z`t|AQX?kvM4OE&J_a~sSPl{z`cqswc{t5tu#l>c^a~L+pfWs)7F5wFK?qq<;lM{Aw zc{Md-h**&~lv>Z9gF(@eS1Q*)Mfo{4W_hEXPyqk||DFuUVPJoD(Qfj5(=^?U((9^A zP3;DKmQ6~6!*DusLzZ=y$Z}LXy`X^cLLjT>gIu)k{zHpE4K=k|Fdr>6yR7WZn>X@c z@*PBhWels%>#VX^r%4xO8jyW}hIZP=llj}vM#Dhs22*kJb7E~Z~=fj;D28Lhl5>}$k9j;Z;Ti{6a#LKud_zN2zNh zG|eYlb5G9P-QzsgqCi)>_x*j7N{3xTXo3fWpkVhs_);X~tdWi9 z64680@L*_ToiQj6ZdI34XjBSRD)Q9BGH5WK64&tsBp=WOyE1O*3I1U_JjifgpI$G-TL~x5L+c zy5+)_YUFhn~yh$xLQj805!u6Ykk{W?H8N2Wx_ z`d@ls-^cx$buI{fhrdkQ+N%AKc6~JByZ_Uwn;fp&vxg2iB!>(P43%IYo;8@B2bGbFdXxl`Ovg9fAz0IeWfTF4VshO$-lLH+ zBiVRVf}FgSypN>pIWcBDI=sQy)vL(b>}0ca;7J6wEA9Vob)ec^>%UFDY)H{Ks~urL z0s!1fmFHU|wW%Uv9!A`A122`hKFTsZTLY20ljw*YS(*IP^HX_W-fp4k;mlPEnB^=RED9tblOeUwWUr{jP3#{S$LTW?lp) z+SN}6CEM;7+GBSq?$nrF@C$jZ$8aexn}cn>>zj@9BRGmbwcW1A?@&oAa46e&0_H-N zLp2&&CM=9RDDCbk8hSBoVW_JylXIN{6rL;DCX5^7p#}Z_@#cKgVI`NFeP@g-JuTQn z@i)dkH($c*8CSYnzQsV-kWcBqeUh_(5q0hSCGyFGdkGv7-zCclt(36_+JmpO>!?MY zWuyQ)YHp57xLy9z*!I#uj~T5E{UF!h@;V{J z3#%m8p-L3vj)?_)C-ZhO^D=nApqxbosDKIdv#_}xEV5X|t!S!%??m~V9)m%27u8Sy z!r185y*L^w&mn78;ipp{b93i{I6!a{-0a~7Q88_L*ju}%@qK-Lwqo>2p7veMY-=l0 zxb+}r2cNlr|Gu3#I}3Xahlx>>$I-`_%6$nRFXb@EV?+P9w8CM?r~k9k8iqZ8xMG37 z)6sH3Z~|bch(C#}e^g$~k^T2s|36Qj`~UiXi4IZE)>K_^B#>3I{O^ELs2i%6SNgxV z`1b*fvIIXzv01*N())n+_}_{Gpl-nJZ5?#a19ep8C;vVPJ6YG)(0--=dgUXKcC%@2 zFHzEeP?lVOU2Kz}<7a7LTyi!rpZ~PV$9T5?J7YRV4Q&goA?oVP)6%%A|K6*b>A@;@ zJX@Z=t@fL$?TSrh(+fZEW@UuXvr@l~X7*G&qw|Xu6euw9-&aE#og*jD!Mo({W1QZP zx5MS%AVGYw+N0a@RL7&HHRN3Nj4fZ*GK(Yj?6ykfa6Wn~QRS)3N47(oWVOMg-m<%T zD^O_NT84l-+SlI7c)rS0t&jaU)^SFd;;}lCSCt}l&y%uP5? zvVMt`G@oFW>4!x|iT#`yKa>N#9MdOje_z^jVMrVpyQ`!Y-+pFuO{D{{2mezfbUs<% zue;#yQO1L`U$A&26kZ zJsyWmze4|hwjtVoPjwR@w;L@OLBsEmN6OpBYT{*e2N*(bC$Yl5WNf*ov#Q6CE8y|5P6=V|5!{c*63=&= zjKHnMkh~#VzDOtQ;u)e98k^Bf5;wd5l6!NSfxA|_IfOm&hvkLPwFURkBg}oVc2dY) z(=3^k2NtMT)_eHxm1@@L@6)XI9?ThIbC^3Qr?MTg#_?J0^loQp zTkra?bFn;kX8Wvsys#2o66d1uJ5F~Fy6WiMB1g~J@Phb!wR`CucdA1#PamF%TAj*4 zOiniCORKn`8E|!aheT!4NZ$OKS#Y_?R?^+&u}0v5a&jfpe1=xwI+1(6cA~ShtU(K^ z11nD^_iMUVu7_N#a6_v##16|imzt&6t=`D@eXv5VpWUy2@e^uu*=ug^SOGb5hXtVL%I{bw_58mqpAAnZTR;vO-HW1?P<3%A7(|UX5P9La zY<4!?=5wYhnSD7kvoW3B6w}2h>M2$?LXVQv`BC*R5xCu71oC(HYl7j4$-M+Oj}<<7 zJ(gd}q)mjuNqQQ~AD>MWYG?-~C@KCR>|y_sJl5>PVk3|@U-mLdzc@D9yUL=%H!CB| zKH;-{Z2FJw%H9?U%fRZs%Y~=dLp#Y!VzJT{k=$Knl47_!v1HfVm4f*LQFrARz7VR8$KnLs3|#=Z2nG8l~j?}INotIreN0NFBUlX$~W^4y1` zL^dknsG9^NEa&QV>kX$^ISd!89bUgqsI266zxMimXMJ-s5tuNl<^?vlIoOzExG&7CA-Wh}nRA61b!pIauf9X?5l9wb|&)LpA2?bhBcVn@b${|&B8O~M7I5&Wc1GODOSBgG^-%vL@O}2 zDWd_FaYf~boL%3?;tk_8H|)()*9Q9amlqScuOzeJ9tgIv+J$J2i?}bcMM`EfOQBNW5TUbZ>GDc#0OP_`7v#)FiJuzS0 zDDqe9LwptE*$!Ca-ZSC}llVw{fgIfBneDG|S=v;p0GA#$7^XwWTF=#@<0DWh;d7yw zb*W=pq5pUzPFzrf{pJK0y^_C1fvTCV6sR%tefU^g`vPFe zEk-LXlzyyj>41cEY}%jKDD-17U~huW5+exWk@lOs1NhF#X1jD0&kn?~prC|L92?V~ z1g?Uu>Dm|eGj+5=z+)K^-e2J#aOWeSCEGJGDS`RIl<(z%6#TYeD_FT65D0(`jUx_J zXYQwaxiTQTbdcGfiSamND_68kxmi0M>+yi*kJ@}=X!!cV zHIStH9yIU889#Z&^)uvDR(EONO69dzQ0B)~pN8(G1>IB=9KXyLpFcLfps!!7=s#eM znY@4G=>b|!xf&!8QBHc(!N(e&?A|WYA z2@D|vA|;?OLpLZfbcloqVj!u6bax0ymvlO`4EgNw{@wq2_xMJE`3%Q%=A59;(0EgWI^+%E9X>l+--aUPtVbqV!#buBRinT}CmHn?pqQ2%x1MbZ+wi?(&YQ^oDWaA~&fiUBxM z%$2j1ESKV?cjP#Q$kmYE=7>E2GH?Sz3cV;%>npX`EJUI&091J>kVfIZhmMb%xb3zO z+dDWgLO+3v&>|`in`J8t+5m;x3(JL^Yu5d&O{=b~lKxQMmt9_6qI4Dc&5>d&J}8;T zE&r40NM=!Ns7kIy(Pq;36%Gd_2Af~wUUyjZ1u~W~v0twy=zQtf#l+rG87?}!mAH{6 zH#l(1jk{DO`RE~i$t<_~nW>gMS!qWu%FkBz!iV_2V1kT(c*E_ozI@|ldOQX3?4NW@ zTVl;bUJe0ckkF@$LW|$Dx&QVmfKZQiUp}tBW>oNkJ@0{hms5)Px7yuy&-A5P9;q&W z&m7IV6{DLM=}A?))b8%g(LgOQLJde=09gYxG^P|MKxTsIef`t$5@#+*&Zfr6Mh==d z!y;e3iaPqkylcZV`~4;u_s2!;KR>B>my@GJzB$VSlpLa08zco*MTvIz_6nry-LR#A z8ETC7L7AihtGF;GFP0Iy#m?S1I3}{K$SWv_gFNg2xe;fNchuWw4RwT<*4{JixVmxz ze$8AL3j@Q`{9OI{p7yj|GPkD1g9S(^fb<&(cF3n(~{hUb~fs~xPA1e zzQ&mAVn_Gm>EXE^mN2WUQLaYczyMLZytTDuXl4=lGESN^h?!{l?BsA<_XZS;>|&0v z2IlPE-d?x)7UH$l)nfn0bj4b(u5mOA$Z_DZ3Gs%*3q`q37yB}R%XQrHk*~ zAV}>8!T#2I;RJgYtgH;t9CjcXcHWaV zWC7U^fHm;qwUba#0I$^zAoNVe$+ipxjK-WYvS$IX2jroXmG%tBiCKq;#4DP{)_)Gh zJ>W&a5S-W6Ha+zGo0xdEmOSx#Y#J=OR61LcDpEH0=i-w4`F9&b54E@|gD=M2`;t3*<^oOZZ_w@d->lc^@>15mN7ES=AZRjY#36qA8Q~Yf*SrQD zr+vU@{{o#`V6k}g?W&0vzrG=XQ75#FY{>=(Ic9ALe_u1&eiLk8Kem7hFPqVjkd^$J zA1Fi;wkFG8p((@{o&y-10`Aj<{Z0>dL6*wmWj#G2LD+Y(crXQpVomaUDfg|~#rZH^ z+y>}-+AT(1^9|S1Xr=_qd<75)-MCF+;dmL&4to=l@bcOy zc@wJeUWmyOiDG~$C6)EoRM>wu!WRr8-)@SJU8lLBt>z>9OXgVO(Y*(CLb#py$)3cB zOd7-nghp1=?7QO&Ae=1AxePoe(VBU~a!DCRPZ2Q7FFv**2UFQsO%_eL9Pr(8r-+Up zmGw@Kgxh98(>%*{m&3L>96p0JZ%V6Qnp;)2>Uysv#p_HpM_05mK>KT+Jyw6>$3>r^ z!&Upy;?!B9qix`t$)>&_$ypa7@J^ecz6#H>9fK7xp;V^~yh$0g*sZh{ZP824V^x6aEK z_e~(ig0Mf{Tsf6Gr@voxlm<|lTsPy%x{|sTG+|>{+{u$`to{D$eMkFzGvTe+4H|PQ zgAqQ+(lk}_C_hj9Q-p?ESiyE@B33@Hl=nkl-3M9O;?8R*(g^xCX~nU>eS4X|5Lv`) zQ8>&+-!hnHKkI5m>M*Z(@Kc+&{x1b71mk|P)0B$k8s0cE=q|WarWF8LS1}W3J#7jQ zGojJrcj!;)?3&Z#-0hB9Eh_sZt0{q{7cRbP*ijnmX2Ph)wGm8WvsJ}m0x`1&U4Qu5mPEPdw^@$Pf|g{bwek3fKTe6hE$KgOK_6Dm%X$4YcS_8#766X5P1=JRMU*%H+_F}gWzH6L+A3(BL1Ue&@}6K zG|ZP_*s9z`d{VO0C!t-jM*d^ld#p+W1y_^b`j$o!7o+v#?!CNJRwTQJ;y?ntu(|tx zT{d|bT1{0%yxqGDfarE)1Xi)DLj`P{rH~_AY`~buBzax-({iAKF!E&^_uVQd+Lh#7 zm(^O2Ps3wgmfjL;um4GRRqL*OOnqlN9kKYAxCXO5d?i0N_IYy#%Hx@h?Vtav%Tu52 z!gzi17JlZ@r4ZDY9ue#FvN;vTu;7)MYfl9}5mNb!+sUzdEA991Q=a2bQgQ@a0<87e zWbZ6;BfZy^!D&8K{IcxgP=hn)Y4qwJN({dE1ZmIHg~9F(=*EuQ-|f?Xnqg6<11Fwz zR@3$b9+83~L4ItfS75WeS!1*a)94Q_<@3HVs{rFZp9gyaAnz)TNm;-^o zhN5;zylVC`#AY!F7&<_;W8v*ZPs9s>Rs5Ifs>A+#t0sR;1{#1qh4Xj?JKC*uaX)?e z$}s7*J(<09;UPoPTdEEIPg_9fdLL(hdCk!}m4BHTu8}tc`On*rqWDI&)WLBK7p?T!bdCA10VaOne67{?|c+!j@HwWZy~3i2pGrKz3jrPv@cG z+&-PSVdt!2=Z>DLO1yRR&!?*uENSuaRKz4CNuNI5e;FN310=a$h+LeUlEBt*4TGtG z{}~*l;^P+935&M*yo&`=&79ql29!c(d(EgdWbzLw%{FK_R> zFJH8}y1H_~982i2Yz4(df`zN=&VW2q@UEW62)f-^7w}}?|J#mj1=MPuehalH4?aKi zkc+p|$x{Cv&7n?SC1Bn=?cwWWm0;6GGco%vkT>RKOnDBo>m~-{67nM25%56)L-poC zA2R?0$KC?QvOZ?n#koLy!vM@=wbAR>uL~;cyp~?sGyHlU6AB4zp=mxoG{DC z6R?Lh0yA+wRWwUUPG$|xV1Sd%$2EuddSx|E0CUmbY&zWaz|9oTs+#a%vr~J@N@Avn zyPDq;%gIA(hHprqwFYQuyF-gb1agK3^_Boy+He2>Er+jpLf1inOnD|2V9|_)&%t|h z$qQ)%Hf8GB>*#HYIAD+vScUw`*UtPp)JeS{GuABo7@_CqcaG*hrndY4NgxxU8&8=Dx%o| z?)?#cOb3WC$YH@}Ynb&{Ok9C*&e~t`b#Xx-WEYu~O@!@&Tq??yo1+WuF=U~GiOGp- z0E|kr2n!7K2njfA5;g~n2SS3Q$&{zWdyN8FDJcR*LKewjT$oM~7G#G7E4CSfe+LAj z?82=c3Vz%b8{ZL!d2V+Snb=faE>sx0C%MGSb?=KmU2NT>4K|I5vg?R$)*o01oUK6( z=_0kVA+uFgcMhd;Cd1~&qz{F!$Wb!tutfM0_<|Af!4wadSqd1`s)M1PC~2WO%A8wh&{@_3=PDSS7l5Rk zvY1(>$kY>%#?l4Gd|R%#LwxaHhiDbV0;hXmF@!b#J$l%cU{`e5r9-nl0kAFin+`UD zHE^fb{J&oPHpow=k>nc?jXuJh=7f?g%{AiR9eT|FpR9ntpYH!Ov;Y6bE?0x(#j5Qd z@!;05A-E?j_`RSB*z&iE;l4=xUsxFBcKF}0uD_Dc=;**#gCu6E8*^lwV(H^ojE=h6eNPtE9$U^ zj?!}o#O^72d3`4w)g}eo+W6P6`9bH4!R$XCLtYH`s0&w3TDJd=5*J62c`|s24o|rd zoQkgjcp1Oxqnl;YF!=NKNT?J2l$XuK#G@sU!dUuzjcWXxLp~V1fpn&{$}!`YuU;j_ z#E@43QZO#j5TvR@D?R2FaYGv1|GlePTWLO83gnc5R(F~e!fgi@T!S>`-|ff^$L{7} zW1+$)JPCem{SH9yf}x*kmIYR&ZlGDfwZp+p44!YdfNaB^Pgpo1;KYPJCR~-oF$sAL@3i zLK%L&Fm?q5j-n2AmQ4Em<7scTFWtkKqu}TIaXjAuww;HE$5cB5YJa8d9jI8Rr#?5? ze|>)==dE%r`h#cCd1J69&M!Ds<*o`B(G(%dJSns5Qv*;=8-!f!`MIBiU@S$qkFO7? zO@`$zv$iSIb-t#+YRoPtCpS1T!7ndw=VWsE^68fcu0mYOg=Td)=)2z25PxvDL-|l+nM1LmJ#YM%W>)6D`oB6dq2(5Z^69c2a*N^jYTYgpxpE=6Ait6 zE9w(ui)be`bu~rFS?O-Ssf+x)-_~o1Qbf1y$HKzWFg#QVx$yDMW7V5tVoG}8**hcW zo%`X#z_O7Q%M+a}d5I>d^3$iEmJIdcafQLpFOy~;xiL=B4}I?8(Q)WBx#;Cn(|d7L z^4Q}x5D+268b2UflDbFK8@>Orp)%{;Lscm=l9`yAiX)}o$Z$>99oPn)ukF!NnU3*g zy%9(XYCCVt8pMn;w-%g0B>%zO(pAc}?S;s=K?D4P9d zs|?^P)Iu(xndSI#(|1&?6pvejzQQvlRw&Z4*-H(%1UO(!JUxy&bd>u53f(V{jUQd= z{>9(`%4u%!$>tUJix&2`f8kJkH)rq1&(G&HR{t7izq53hPVA*P96sfel!c|~)bWX2 zB(x)0l5O9$xu={2h6j^^Qdlfj&(M$?)Nw=J*~&OJ-~d;VCcF>Q2x$63Mu5ofrjMx$lwC%9zp`Zmn8g{QgUYko377$1RD87k>$Cr=-`8k?)$Uj_r zeqp(@)eg~Cq_+Kk9wmCBjflNw6l8$xh|F%k+z-hS6}KfWCRS4jBx`+XUxyzu#;-Y@ zO=|x>y4l(aA4Mn9S=nA&0ykaJM!snipC{%w@Ca=<)xKX#sVx7^a0|)F-lz?yVx_g? zk=rT%qM>gvFsrVSA&n~)V~YD60goQN-fDgsm%G!nsa;f!Q4T2anI)2j7xYM877>W|IExv$6dpOc5QLLnxq;rV!!OiWxj zb9soUz!+GL*c_~bZSq1@k)4d|d}YsTi6JJJUjucS8<5KL^K%bIC010bccJIY$Il87 z-N{{Bi#FaFy65}ee`=f+pue{7yjV|6Oi9rwTB${NY z0`c&~Jo_BSL6=ODwLBV)PQWhv=w?|zw%I06n~d=Vjb?aPddS`Am%L`@0!9VJSD7&H zUCpTK@7QUY!LqEXhw^pOP8~L@Wc|-;%-c}QQ>fqF1@4*c?++ikyMy-Q#ayh*30TtQ zG05L6;OU8P>b_TFsSbB$7zO^rJrVM9%o|Yb-Vu8d2(U*0Ez%(#YOVoK;8;Y_S9A7m z>W*tYIIoj&TFMI6aegLxVsn8i&p=at^p)@mqD__s;%We%>Q+~{DCP-jo^n&P@Lld- z*&KgRdkQTe_O`k3Jvp2(=^I1;7;_jcRQK>GXS2o;+MOfS7Nxo=8*5TpJwQ7czQ@Bp zFXb}9h2yMqBuf&Bo~7-6ck1|4T;(wal9oX6IasU}*sb^eQ%IBL?9H=E?|KN8-%^GT z+pWZGmG?;c4_$SZMhm;DCMK|G+HOvomBgn@@L(U`5y8V7g8S5EYO9WaNmq#Qz;UipE_hxfI`i{icain zlzY?RX8ZZ6hf@^nV2y`$l33t_@L8~55bXJcBUrH{XzZsExtoiUa9ps;`KTRkP2Xaa zDv&xmY0?;d`}dxbP^kyYCVC#|r5$I;L@Pek_wO=58sx+Ht7T{55aB=|TE-*F6hZj= z6Dk{WqfM)o*h`rVMftwTEd+u=-j;;eA~ohfTkD=UsF?Na5Z#rP7Xi{3-L2~ z1u_LHWh8kf0AJl@_s;p&<+qjX*K}uKIjn4YYmr2L3Y^0_bTH4wZL6|g1CuJZP%^Dt zof|i9ObnDiRmL@@m{<<{5P zOgZmO4?^OMozN8zO#t(6{)fo zSBmXFf66YuMyN(ZO5In;_4|ECUe4_{H#A1fX9m9wvbskk`1T9_33D9q2ThdQekE@X zI{tB0Q!p^D(POh4WqG}|7pjT{DWqX8&+=NX^$7Tr4O>S#p7765h zNeO8=4Fv7Rm!q@N<^8aE-jw#At{v~60L>E(0?HOb%o7n2QEY`*^Cmjm`S#^goLl`B zo3o%mlr)TO&gyRNwjvh+8?Q*i%tOk3u{mtMwkop#kr?YLy$wr^1L^n8U999ybw&KzxNm&@; zG2qEZahcJovVra^UB_wfi@RnLaMMD(I?mnJ!i+;$%ox1NE$`qt=hrmH!0*yJ!tFqc z8|bS;!XD5Fs}k*+_BM^M;#O*?M*oP-ILp)Z2+H)Zyed&ME~sjw%c5j+bbROX^}v|7 zn=v}3gOXo4w*v5#O+mo8sg7j(J!8%fkp0C@KeL75*78tM=O>JX?nd0}9X3=#zcU{X zEJxVLm#fJqQgepdzp*zezpKV`bNVaFom^Dt12tAxVIpm-Qq?l#f#j}rb)JgN-doiP z7t6`}>B1`~`)fmnn~(QJm4dBGd?yXPp@%nbzdB(#xsisTi~RB9!ALhcJAVuN3Obn} zwe^9;OG_x4Yqcs%7Bt6_W9%Z>R*Cx-`2p*EnL-DeBB&v90w`VTjw^6uV0diDk8~BI!aMf^%&jn~X^nNc>FMQ0 zpOJIJ8M!w8)ip+>qe&QV^Q4ylT}PBNhCq%5q*2P3sR+)%m7yvhC&}OTynsFF>Y*3k zRK9|I1F;v9%m}&E*1e_7_cE4Q*$0p}3^(Co7w%gF^%So+o=t!MhQkfSf)X`!uVqGQK0fNh%6n!amr_y(K>!4^l8)=RY zQhylMBiM_(>CAk3Gkobq=X^xx)fHYVxD=Yl@MNCQskA9dYlk|mfG~~EfW?vsR0Uke zBvy#L_p_+q;-He-j{HqoVL{G8;FP#d0G`5Z@r?X1BO_zMA0|l5hh>;%Wi*H^rv^FS z>0QrY{%2k_y(#o>F1c>L*KfVss{2g}hNdOyADyZ7CcNT{W+q0)rrD2jex<~K5mE(( zCQp+p^?uL(SFfM^C$TIq3H0Fvgtw(6IuDL2-{XEz6xVN(|qru&VguVt zQWBE6Ed^i1f3HKG9RGapJxwhggvhIc!g{2C@h-N)dD^0kX zETiTc^P?iJtanRv9AFN2Kq%KcVkb`0EBH;Quj<2OkC{t;H-!o@vZDi=zhO*tRJc=x z(hxPQ!QoloAqg=*9vB;2lD_>WOs^>PK&30Nb5qNp`MSG0sy_BvC(m z?yGWQV)FP)`r1vF+nM^FyX-FOVGqJZ02uz3Q^SR0`v2d01*sFsR4C=ukSVtP3i?K%>2URSv__%SUqFL09}t%F$S1SA!qwbod|X80 z=Uie8oLl0%6A;MNCats%eUud7o8;>ZTx|D!r+>PtPb9DWmgMbQ9gh71PruZ5Itcm+ z!uy!!Ej#i@2Hj#~we!}aG;#0bwX&K5upY3rl7$cKU#}8!^^p=FWkIqmBd1@gTa-Wl zSUW;w_3K_gc5iu{l0K$An7KJ+%^mlR62Jq=NMHOBY%vB z&`UAKOs4FqSX&%l>$b;N5hs?jp`WB4DI3{GXJ;#N{$?d*wgA^@pXRq}O>zA!UBr;d zfE{D75g12ALF!}`nfRry5ek2vKTvuj%=E??U3_Wzjmql$+ZBygr1XyBj-KF*CyO3n z`HXC|-lf>-X^z~Yi&3drfZZ*o#*b8-KY}`8!dD}6J&b{rH z$BNr5Fgw+7=pgz_?H=Gg;pk5q(y7m4cC7ePh+1Kr-p*3sIpge?2|lW6L_i0&RV>4T z)Y&ee))p}U`QBL2w8sJBfGxH|3+!`2w{8tI@&4WJ`ubS~{_{roN-}*Pl8NV#4&pgPN578S@asqn1NAdrs)%{V;|9bW#%I{QCQP+HMc( zM>pkg{CCICgpdEP!1teqUvkd8_5b{t5bzBB+YC&ekB`TL^;4wWzdvip?~AaWVD4XZ zN*^q(Nb6G3s=2qBR^zllm9^o=msEfD(D>nz9>0LF|GO3=O;s(L1)ZA8U-1^SI!PN0rW&_E{ekI)zw1eil=L*kyG!7Y`aNysLM6+f{|87MImZA1 literal 0 HcmV?d00001 From bb1b6d5bdf9b7fa1a09291b849792bab4e358442 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 28 Jul 2020 15:15:21 -0700 Subject: [PATCH 452/589] moved files --- .../{ => images}/msi-contoso-approval-required.png | Bin .../msi-enterprise-app-user-setting.jpg | Bin .../{ => images}/msi-grant-admin-consent.jpg | Bin ...osoft-permission-requested-your-organization.png | Bin .../msi-microsoft-permission-required.jpg | Bin .../intelligence/{ => images}/msi-permissions.jpg | Bin .../intelligence/{ => images}/msi-properties.png | Bin 7 files changed, 0 insertions(+), 0 deletions(-) rename windows/security/threat-protection/intelligence/{ => images}/msi-contoso-approval-required.png (100%) rename windows/security/threat-protection/intelligence/{ => images}/msi-enterprise-app-user-setting.jpg (100%) rename windows/security/threat-protection/intelligence/{ => images}/msi-grant-admin-consent.jpg (100%) rename windows/security/threat-protection/intelligence/{ => images}/msi-microsoft-permission-requested-your-organization.png (100%) rename windows/security/threat-protection/intelligence/{ => images}/msi-microsoft-permission-required.jpg (100%) rename windows/security/threat-protection/intelligence/{ => images}/msi-permissions.jpg (100%) rename windows/security/threat-protection/intelligence/{ => images}/msi-properties.png (100%) diff --git a/windows/security/threat-protection/intelligence/msi-contoso-approval-required.png b/windows/security/threat-protection/intelligence/images/msi-contoso-approval-required.png similarity index 100% rename from windows/security/threat-protection/intelligence/msi-contoso-approval-required.png rename to windows/security/threat-protection/intelligence/images/msi-contoso-approval-required.png diff --git a/windows/security/threat-protection/intelligence/msi-enterprise-app-user-setting.jpg b/windows/security/threat-protection/intelligence/images/msi-enterprise-app-user-setting.jpg similarity index 100% rename from windows/security/threat-protection/intelligence/msi-enterprise-app-user-setting.jpg rename to windows/security/threat-protection/intelligence/images/msi-enterprise-app-user-setting.jpg diff --git a/windows/security/threat-protection/intelligence/msi-grant-admin-consent.jpg b/windows/security/threat-protection/intelligence/images/msi-grant-admin-consent.jpg similarity index 100% rename from windows/security/threat-protection/intelligence/msi-grant-admin-consent.jpg rename to windows/security/threat-protection/intelligence/images/msi-grant-admin-consent.jpg diff --git a/windows/security/threat-protection/intelligence/msi-microsoft-permission-requested-your-organization.png b/windows/security/threat-protection/intelligence/images/msi-microsoft-permission-requested-your-organization.png similarity index 100% rename from windows/security/threat-protection/intelligence/msi-microsoft-permission-requested-your-organization.png rename to windows/security/threat-protection/intelligence/images/msi-microsoft-permission-requested-your-organization.png diff --git a/windows/security/threat-protection/intelligence/msi-microsoft-permission-required.jpg b/windows/security/threat-protection/intelligence/images/msi-microsoft-permission-required.jpg similarity index 100% rename from windows/security/threat-protection/intelligence/msi-microsoft-permission-required.jpg rename to windows/security/threat-protection/intelligence/images/msi-microsoft-permission-required.jpg diff --git a/windows/security/threat-protection/intelligence/msi-permissions.jpg b/windows/security/threat-protection/intelligence/images/msi-permissions.jpg similarity index 100% rename from windows/security/threat-protection/intelligence/msi-permissions.jpg rename to windows/security/threat-protection/intelligence/images/msi-permissions.jpg diff --git a/windows/security/threat-protection/intelligence/msi-properties.png b/windows/security/threat-protection/intelligence/images/msi-properties.png similarity index 100% rename from windows/security/threat-protection/intelligence/msi-properties.png rename to windows/security/threat-protection/intelligence/images/msi-properties.png From 070692b9b3221f1103249da7bc8650510feb64eb Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 28 Jul 2020 15:25:28 -0700 Subject: [PATCH 453/589] adding screenshots to topic --- .../intelligence/portal-submission-troubleshooting.md | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md b/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md index ca71a4785c..6de66641a7 100644 --- a/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md +++ b/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md @@ -41,35 +41,44 @@ This process requires a global or application admin in the tenant. > This is currently a preview feature. Azure Active Directory admins will need to allow for users to request admin consent to apps. Verify the setting is configured to **Yes** in [Enterprise applications](https://portal.azure.com/#blade/Microsoft_AAD_IAM/StartboardApplicationsMenuBlade/UserSettings/menuId/). +![Enterprise applications user settings](images/msi-enterprise-app-user-setting.jpg) More information is available in [Configure Admin consent workflow](https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-admin-consent-workflow). Once this setting is verified, users can go through the enterprise customer sign-in at [Microsoft security intelligence](https://www.microsoft.com/en-us/wdsi/filesubmission), and submit a request for admin consent, including justification. +![Contoso sign in flow](images/msi-contoso-approval-required.png) + Admin will be able to review and approve the application permissions [Azure admin consent requests](https://portal.azure.com/#blade/Microsoft_AAD_IAM/StartboardApplicationsMenuBlade/AccessRequests/menuId/). After providing consent, all users in the tenant will be able to use the application.   ## Option 2: Provide admin consent by authenticating the application as an admin This process requires that global admins go through the Enterprise customer sign-in flow at [Microsoft security intelligence](https://www.microsoft.com/en-us/wdsi/filesubmission). +![Consent sign in flow](images/msi-microsoft-permission-required.jpg) Then, admins review the permissions and make sure to select **Consent on behalf of your organization**, and click **Accept**. All users in the tenant will now be able to use this application. +## Option 3: Delete and re-add app permissions If neither of these options resolve the issue, try the following steps (as an admin): 1. Remove previous configurations for the application. Go to [Enterprise applications](https://portal.azure.com/#blade/Microsoft_AAD_IAM/ManagedAppMenuBlade/Properties/appId/f0cf43e5-8a9b-451c-b2d5-7285c785684d/objectId/982e94b2-fea9-4d1f-9fca-318cda92f90b) and click **delete**. - +![Delete app permissions](images/msi-properties.png) 2. Capture TenantID from [Properties](https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Properties). 3. Replace {tenant-id} with the specific tenant that needs to grant consent to this application in the URL below. Copy this URL into browser. The rest of the parameters are already completed. ``https://login.microsoftonline.com/{tenant-id}/v2.0/adminconsent?client_id=f0cf43e5-8a9b-451c-b2d5-7285c785684d&state=12345&redirect_uri=https%3a%2f%2fwww.microsoft.com%2fen-us%2fwdsi%2ffilesubmission&scope=openid+profile+email+offline_access`` +![Permissions needed](images/msi-microsoft-permission-requested-your-organization.png) + 4. Review the permissions required by the application, and then click **Accept**. 5. Confirm the permissions are applied in the [Azure portal](https://portal.azure.com/#blade/Microsoft_AAD_IAM/ManagedAppMenuBlade/Permissions/appId/f0cf43e5-8a9b-451c-b2d5-7285c785684d/objectId/ce60a464-5fca-4819-8423-bcb46796b051). +![Review that permissions are applied](images/msi-permissions.jpg) + 4. Sign in to [Microsoft security intelligence](https://www.microsoft.com/en-us/wdsi/filesubmission) as an enterprise user with a non-admin account to see if you have access. If the warning is not resolved after following these troubleshooting steps, call Microsoft support. From 8195374edd59cf8032a91825093aaa815d946640 Mon Sep 17 00:00:00 2001 From: ms-adir <68929429+ms-adir@users.noreply.github.com> Date: Wed, 29 Jul 2020 02:19:06 +0300 Subject: [PATCH 454/589] Update commercial-gov.md Adding ASC supported OS versions, calling out TA as unsupported. --- .../microsoft-defender-atp/commercial-gov.md | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/commercial-gov.md b/windows/security/threat-protection/microsoft-defender-atp/commercial-gov.md index cf9bede7a1..0396320e6c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/commercial-gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/commercial-gov.md @@ -39,10 +39,15 @@ The following OS versions are supported: >[!NOTE] >A patch must be deployed before device onboarding in order to configure Microsoft Defender ATP to the correct environment. -The following OS versions are not supported: +The following OS versions are supported via Azure Security Center: - Windows Server 2008 R2 SP1 - Windows Server 2012 R2 - Windows Server 2016 + +The following OS versions are not supported: +- Windows Server 2008 R2 SP1 (standalone, not via ASC) +- Windows Server 2012 R2 (standalone, not via ASC) +- Windows Server 2016 (standalone, not via ASC) - Windows Server, version 1803 - Windows 7 SP1 Enterprise - Windows 7 SP1 Pro @@ -52,6 +57,9 @@ The following OS versions are not supported: The initial release of Microsoft Defender ATP will not have immediate parity with the commercial offering. While our goal is to deliver all commercial features and functionality to our US Government (GCC High) customers, there are some capabilities not yet available that we'd like to highlight. These are the known gaps as of August 2019: +## Threat Analytics +Not currently available. + ## Threat & Vulnerability Management Not currently available. From e04b6d97bbf177377995e143a00d53b63005de07 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 28 Jul 2020 17:44:50 -0700 Subject: [PATCH 455/589] fixing broken bookmarks --- .../portal-submission-troubleshooting.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md b/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md index 6de66641a7..b5385f6f5b 100644 --- a/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md +++ b/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md @@ -34,18 +34,18 @@ This process requires a global or application admin in the tenant. ![grant consent image](images/msi-grant-admin-consent.jpg) - 4. If the administrator receives an error while attempting to provide consent manually, try either [Option 1](#Option-1:-Approve-Required-Enterprise-Application-permissions-by-user-request) or [Option 2](#Option-2:-Provide-admin-consent-by-authenticating-to-the-application-as-an-admin) as possible workarounds. + 4. If the administrator receives an error while attempting to provide consent manually, try either [Option 1](#Option-1-Approve-enterprise-application-permissions-by-user-request) or [Option 2](#Option-2-Provide-admin-consent-by-authenticating-the-application-as-an-admin) as possible workarounds.   -## Option 1: Approve Required Enterprise Application permissions by user request +## Option 1 Approve enterprise application permissions by user request > [!Note] > This is currently a preview feature. Azure Active Directory admins will need to allow for users to request admin consent to apps. Verify the setting is configured to **Yes** in [Enterprise applications](https://portal.azure.com/#blade/Microsoft_AAD_IAM/StartboardApplicationsMenuBlade/UserSettings/menuId/). ![Enterprise applications user settings](images/msi-enterprise-app-user-setting.jpg) -More information is available in [Configure Admin consent workflow](https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-admin-consent-workflow). +More information is available in [Configure Admin consent workflow](https://docs.microsoft.com/azure/active-directory/manage-apps/configure-admin-consent-workflow). -Once this setting is verified, users can go through the enterprise customer sign-in at [Microsoft security intelligence](https://www.microsoft.com/en-us/wdsi/filesubmission), and submit a request for admin consent, including justification. +Once this setting is verified, users can go through the enterprise customer sign-in at [Microsoft security intelligence](https://www.microsoft.com/wdsi/filesubmission), and submit a request for admin consent, including justification. ![Contoso sign in flow](images/msi-contoso-approval-required.png) @@ -53,8 +53,8 @@ Admin will be able to review and approve the application permissions [Azure admi After providing consent, all users in the tenant will be able to use the application.   -## Option 2: Provide admin consent by authenticating the application as an admin -This process requires that global admins go through the Enterprise customer sign-in flow at [Microsoft security intelligence](https://www.microsoft.com/en-us/wdsi/filesubmission). +## Option 2 Provide admin consent by authenticating the application as an admin +This process requires that global admins go through the Enterprise customer sign-in flow at [Microsoft security intelligence](https://www.microsoft.com/wdsi/filesubmission). ![Consent sign in flow](images/msi-microsoft-permission-required.jpg) Then, admins review the permissions and make sure to select **Consent on behalf of your organization**, and click **Accept**. @@ -69,7 +69,7 @@ and click **delete**. 2. Capture TenantID from [Properties](https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Properties). 3. Replace {tenant-id} with the specific tenant that needs to grant consent to this application in the URL below. Copy this URL into browser. The rest of the parameters are already completed. -``https://login.microsoftonline.com/{tenant-id}/v2.0/adminconsent?client_id=f0cf43e5-8a9b-451c-b2d5-7285c785684d&state=12345&redirect_uri=https%3a%2f%2fwww.microsoft.com%2fen-us%2fwdsi%2ffilesubmission&scope=openid+profile+email+offline_access`` +``https://login.microsoftonline.com/{tenant-id}/v2.0/adminconsent?client_id=f0cf43e5-8a9b-451c-b2d5-7285c785684d&state=12345&redirect_uri=https%3a%2f%2fwww.microsoft.com%2fwdsi%2ffilesubmission&scope=openid+profile+email+offline_access`` ![Permissions needed](images/msi-microsoft-permission-requested-your-organization.png) @@ -79,6 +79,6 @@ and click **delete**. ![Review that permissions are applied](images/msi-permissions.jpg) -4. Sign in to [Microsoft security intelligence](https://www.microsoft.com/en-us/wdsi/filesubmission) as an enterprise user with a non-admin account to see if you have access. +4. Sign in to [Microsoft security intelligence](https://www.microsoft.com/wdsi/filesubmission) as an enterprise user with a non-admin account to see if you have access. If the warning is not resolved after following these troubleshooting steps, call Microsoft support. From c685c1b5775970fffa8f46e99ec8e41a3f680354 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 28 Jul 2020 17:50:47 -0700 Subject: [PATCH 456/589] broken bookmarks --- .../intelligence/portal-submission-troubleshooting.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md b/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md index b5385f6f5b..8e4295e1df 100644 --- a/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md +++ b/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md @@ -34,7 +34,7 @@ This process requires a global or application admin in the tenant. ![grant consent image](images/msi-grant-admin-consent.jpg) - 4. If the administrator receives an error while attempting to provide consent manually, try either [Option 1](#Option-1-Approve-enterprise-application-permissions-by-user-request) or [Option 2](#Option-2-Provide-admin-consent-by-authenticating-the-application-as-an-admin) as possible workarounds. + 4. If the administrator receives an error while attempting to provide consent manually, try either [Option 1](#option-1-approve-enterprise-application-permissions-by-user-request) or [Option 2](#option-2-provide-admin-consent-by-authenticating-the-application-as-an-admin) as possible workarounds.   ## Option 1 Approve enterprise application permissions by user request > [!Note] From 7089b78d01b18b9844ec4ee51147317bfbd3ff8a Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 28 Jul 2020 18:09:41 -0700 Subject: [PATCH 457/589] adding TOC link --- windows/security/threat-protection/intelligence/TOC.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/security/threat-protection/intelligence/TOC.md b/windows/security/threat-protection/intelligence/TOC.md index a01098c5a3..48c382b306 100644 --- a/windows/security/threat-protection/intelligence/TOC.md +++ b/windows/security/threat-protection/intelligence/TOC.md @@ -34,6 +34,8 @@ ## [Submit files for analysis](submission-guide.md) +## [Troubleshoot malware submission](portal-submission-troubleshooting.md) + ## [Safety Scanner download](safety-scanner-download.md) ## [Industry collaboration programs](cybersecurity-industry-partners.md) From d688c4487bfc0d5f6442b6fa04c063ce181d5225 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 28 Jul 2020 18:19:55 -0700 Subject: [PATCH 458/589] Update portal-submission-troubleshooting.md --- .../intelligence/portal-submission-troubleshooting.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md b/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md index 8e4295e1df..56dbeb9ac5 100644 --- a/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md +++ b/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md @@ -16,7 +16,7 @@ ms.topic: article search.appverid: met150 --- -# Resolving malware submission errors caused by Administrator block +# Troubleshooting malware submission errors caused by administrator block In some instances, an administrator block might cause submission issues when you try to submit a potentially infected file to the [Microsoft Security intelligence website](https://www.microsoft.com/wdsi) for analysis. The following process shows how to resolve this. ## Review your settings From 47dd6c685deabdcb2bb5b451c881a79c0c698670 Mon Sep 17 00:00:00 2001 From: Rafal Sosnowski <51166236+rafals2@users.noreply.github.com> Date: Tue, 28 Jul 2020 22:26:57 -0700 Subject: [PATCH 459/589] Update bitlocker-csp.md corrected last commit2 --- windows/client-management/mdm/bitlocker-csp.md | 9 +++------ 1 file changed, 3 insertions(+), 6 deletions(-) diff --git a/windows/client-management/mdm/bitlocker-csp.md b/windows/client-management/mdm/bitlocker-csp.md index f6cce218b0..da079fe497 100644 --- a/windows/client-management/mdm/bitlocker-csp.md +++ b/windows/client-management/mdm/bitlocker-csp.md @@ -985,7 +985,7 @@ If you want to disable this policy use the following SyncML: -**ConfigureRecoveryPasswordRotation** +**ConfigureRecoveryPasswordRotation** This setting initiates a client-driven recovery password refresh after an OS drive recovery (either by using bootmgr or WinRE) and recovery password unlock on a Fixed data drive. This setting will refresh the specific recovery password that was used, and other unused passwords on the volume will remain unchanged. If the initialization of the refresh fails, the device will retry the refresh during the next reboot. When password refresh is initiated, the client will generate a new recovery password. The client will use the existing API in Azure AD to upload the new recovery key and retry on failure. After the recovery password has been successfully backed up to Azure AD, the recovery key that was used locally will be removed. This setting refreshes only the used key and retains other unused keys. @@ -1077,13 +1077,10 @@ Value type is string. Supported operation is Execute. Request ID is expected as > > - For Operating system drives: > - OSRequireActiveDirectoryBackup_Name is set to 1 ("Required") -> +> - OSActiveDirectoryBackup_Name is set to true > - For Fixed data drives: > - FDVRequireActiveDirectoryBackup_Name is set to 1 = ("Required") -> -> Although not required, we recommend configuring: -> - OSActiveDirectoryBackup_Name to true -> - FDVActiveDirectoryBackup_Name to true +> - FDVActiveDirectoryBackup_Name is set to true **Status** Interior node. Supported operation is Get. From bbe07d7723820c7c07dc1c5baf7a7e6f7b4093f8 Mon Sep 17 00:00:00 2001 From: Rafal Sosnowski <51166236+rafals2@users.noreply.github.com> Date: Tue, 28 Jul 2020 22:39:43 -0700 Subject: [PATCH 460/589] Update bitlocker-csp.md --- windows/client-management/mdm/bitlocker-csp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/bitlocker-csp.md b/windows/client-management/mdm/bitlocker-csp.md index da079fe497..b84c02e4e8 100644 --- a/windows/client-management/mdm/bitlocker-csp.md +++ b/windows/client-management/mdm/bitlocker-csp.md @@ -985,7 +985,7 @@ If you want to disable this policy use the following SyncML: -**ConfigureRecoveryPasswordRotation** +**ConfigureRecoveryPasswordRotation** This setting initiates a client-driven recovery password refresh after an OS drive recovery (either by using bootmgr or WinRE) and recovery password unlock on a Fixed data drive. This setting will refresh the specific recovery password that was used, and other unused passwords on the volume will remain unchanged. If the initialization of the refresh fails, the device will retry the refresh during the next reboot. When password refresh is initiated, the client will generate a new recovery password. The client will use the existing API in Azure AD to upload the new recovery key and retry on failure. After the recovery password has been successfully backed up to Azure AD, the recovery key that was used locally will be removed. This setting refreshes only the used key and retains other unused keys. From 9458f973f733321834417ca4dee0a92c3625ca7b Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Wed, 29 Jul 2020 08:28:12 -0700 Subject: [PATCH 461/589] pencil edit --- .../intelligence/portal-submission-troubleshooting.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md b/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md index 56dbeb9ac5..bd74376bf2 100644 --- a/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md +++ b/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md @@ -56,6 +56,7 @@ After providing consent, all users in the tenant will be able to use the applica ## Option 2 Provide admin consent by authenticating the application as an admin This process requires that global admins go through the Enterprise customer sign-in flow at [Microsoft security intelligence](https://www.microsoft.com/wdsi/filesubmission). ![Consent sign in flow](images/msi-microsoft-permission-required.jpg) + Then, admins review the permissions and make sure to select **Consent on behalf of your organization**, and click **Accept**. All users in the tenant will now be able to use this application. From 4af5ca36590c83a3c01830a55b6852055fe39903 Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Wed, 29 Jul 2020 08:32:31 -0700 Subject: [PATCH 462/589] pencil edits --- .../portal-submission-troubleshooting.md | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md b/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md index bd74376bf2..df44f6142a 100644 --- a/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md +++ b/windows/security/threat-protection/intelligence/portal-submission-troubleshooting.md @@ -32,7 +32,7 @@ This process requires a global or application admin in the tenant. 2. Click **Grant admin consent for organization**. 3. If you're able to do so, Review the API permissions required for this application. This should be exactly the same as in the following image. Provide consent for the tenant. -![grant consent image](images/msi-grant-admin-consent.jpg) + ![grant consent image](images/msi-grant-admin-consent.jpg) 4. If the administrator receives an error while attempting to provide consent manually, try either [Option 1](#option-1-approve-enterprise-application-permissions-by-user-request) or [Option 2](#option-2-provide-admin-consent-by-authenticating-the-application-as-an-admin) as possible workarounds.   @@ -41,6 +41,7 @@ This process requires a global or application admin in the tenant. > This is currently a preview feature. Azure Active Directory admins will need to allow for users to request admin consent to apps. Verify the setting is configured to **Yes** in [Enterprise applications](https://portal.azure.com/#blade/Microsoft_AAD_IAM/StartboardApplicationsMenuBlade/UserSettings/menuId/). + ![Enterprise applications user settings](images/msi-enterprise-app-user-setting.jpg) More information is available in [Configure Admin consent workflow](https://docs.microsoft.com/azure/active-directory/manage-apps/configure-admin-consent-workflow). @@ -55,6 +56,7 @@ After providing consent, all users in the tenant will be able to use the applica   ## Option 2 Provide admin consent by authenticating the application as an admin This process requires that global admins go through the Enterprise customer sign-in flow at [Microsoft security intelligence](https://www.microsoft.com/wdsi/filesubmission). + ![Consent sign in flow](images/msi-microsoft-permission-required.jpg) Then, admins review the permissions and make sure to select **Consent on behalf of your organization**, and click **Accept**. @@ -66,20 +68,22 @@ If neither of these options resolve the issue, try the following steps (as an ad 1. Remove previous configurations for the application. Go to [Enterprise applications](https://portal.azure.com/#blade/Microsoft_AAD_IAM/ManagedAppMenuBlade/Properties/appId/f0cf43e5-8a9b-451c-b2d5-7285c785684d/objectId/982e94b2-fea9-4d1f-9fca-318cda92f90b) and click **delete**. -![Delete app permissions](images/msi-properties.png) + + ![Delete app permissions](images/msi-properties.png) + 2. Capture TenantID from [Properties](https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Properties). 3. Replace {tenant-id} with the specific tenant that needs to grant consent to this application in the URL below. Copy this URL into browser. The rest of the parameters are already completed. ``https://login.microsoftonline.com/{tenant-id}/v2.0/adminconsent?client_id=f0cf43e5-8a9b-451c-b2d5-7285c785684d&state=12345&redirect_uri=https%3a%2f%2fwww.microsoft.com%2fwdsi%2ffilesubmission&scope=openid+profile+email+offline_access`` -![Permissions needed](images/msi-microsoft-permission-requested-your-organization.png) + ![Permissions needed](images/msi-microsoft-permission-requested-your-organization.png) 4. Review the permissions required by the application, and then click **Accept**. 5. Confirm the permissions are applied in the [Azure portal](https://portal.azure.com/#blade/Microsoft_AAD_IAM/ManagedAppMenuBlade/Permissions/appId/f0cf43e5-8a9b-451c-b2d5-7285c785684d/objectId/ce60a464-5fca-4819-8423-bcb46796b051). -![Review that permissions are applied](images/msi-permissions.jpg) - -4. Sign in to [Microsoft security intelligence](https://www.microsoft.com/wdsi/filesubmission) as an enterprise user with a non-admin account to see if you have access. + ![Review that permissions are applied](images/msi-permissions.jpg) + +6. Sign in to [Microsoft security intelligence](https://www.microsoft.com/wdsi/filesubmission) as an enterprise user with a non-admin account to see if you have access. If the warning is not resolved after following these troubleshooting steps, call Microsoft support. From 23ff7e6d147be3e63db3770254c90441b663e2b2 Mon Sep 17 00:00:00 2001 From: Kurt Sarens <56369685+kurtsarens@users.noreply.github.com> Date: Wed, 29 Jul 2020 12:41:35 -0700 Subject: [PATCH 463/589] Update microsoft-defender-smartscreen-overview.md Adding a note that no SS events will be logged when using Microsoft Edge version 77 or later. --- .../microsoft-defender-smartscreen-overview.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview.md b/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview.md index f13b6bff37..9bae1e6575 100644 --- a/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview.md +++ b/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview.md @@ -66,6 +66,9 @@ When submitting Microsoft Defender Smartscreen products, make sure to select **M ## Viewing Microsoft Defender SmartScreen anti-phishing events +> [!NOTE] +> No Smartscreen events will be logged when using Microsoft Edge version 77 or later. + When Microsoft Defender SmartScreen warns or blocks a user from a website, it's logged as [Event 1035 - Anti-Phishing](https://technet.microsoft.com/scriptcenter/dd565657(v=msdn.10).aspx). ## Viewing Windows event logs for Microsoft Defender SmartScreen From d656668eceee7af49bbc91c67fba86e19b9315aa Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 29 Jul 2020 13:08:32 -0700 Subject: [PATCH 464/589] update xls --- .../downloads/mdatp-urls.xlsx | Bin 18161 -> 18213 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx b/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx index ef0d32e551a361643d3bbf9c240ef32bcc06281d..84b5f2a66467e388d41c0299d5193fcf0b3e2fd3 100644 GIT binary patch delta 11008 zcmZX41ymf{wk;4mxVyVsa0_n13GTt&oeHi2LSw<*-932Y1Pc}%0>Le~{7%k2|GxKs zkI_ACgrp@>ft$_6Sf==ul8l-uCQXPOf%lPEK}g z-VXMaS`JPb92n1{HZQ#wUieBVNTt7UV62mu%MR+Vw|9bVDq&=Xc*@G3ZnEU%7Ch4P z9o5XhUSPMWu3P@6#wzA326uWbZt&H>pd3#d(+4*(@cMhgFQ#*ZYdD?ipVGDg`sqy- zD{`?+$E3hkjRRD_mhB}?o*rjW&GRN=&s(IePFEzl>VLzD$8$=bj~t!B8T0EZ!UncxMIxaW>6zDY01TEb4vx zA0#Z<3=?=P%2Huj(uzmW(A(qrei))7)2$y+3@FtmdT9ROi6`@7P9?6bCPoxdY0>s`xsqp! z+=RzChU+IO&jK68#sl-xV$R?REJJ;) zR9-v!qO!wNh-6ZCh+6vndaH8+`>@qTWIye}Wl*>}3vfRoPit?)%Zso8SH1 zjQ{K4!GV`&hP=Qd+;-7ppVF#wb4dlNK^$2Y26@NS`C>BmWZ zM}ePh=$MLD0!!GBF*C~Fpj>x2sROUxqCPPfl-I$cy3W-bALXz3krXm8`}4 zx2)S6S3is_NqlQ`(2^SYj`wTqFDbsV|E-P%1_6fTP?JJZ`qX0Gw@H4K6Q_{SVvFSL+#%duw-HUOEAHtib3(#E%o2UpHtg+8{9!$BPpB zj`Kybp_gUH96-MYIlcMYuN;6GP0fyJV5{`Gel?JJl-(ikwNS!Sojqs5{C(}+=TurJ zt83ilms1z}>zj%dSLeOo`=XslKvuzzr~J(ZL3(7){ga0n6`P0I9_ zRngu60jZc-Y;`V zWLDAM26+EKl1YonuBPt77+B^hh;nk(DNGZG@Zqko5fKkW+mE=0t9u@VvO9a&*V=mF*VvGNK7VPzURTho)dQBGY z^+cu=#q~tS6sgW;c(Ry_t1Y^c%}o81H;-GDG@Iz`Q%5_DCD%E9#yDLkD~yLn#=;AL zN)b3<3EKx&GiB@cOBB72zUaP)tc(A6vT5Y@wsIL2TEbM(VD_N0iVO)w%&2-Mf6O+( z7^aE*1xJZdDF#%7Fx(vtYt13VY^i+Z&SKkm&LHxZELnP2O?3Yp1N5O9MN%nIs3>|z zO)prONpV6FxeSMkF-_fs%o9A&ZxjpAUz_2g7c$Ji7hb^zX{NvoThqiHuUx3bN2Z0k zS&(dnx|L{tmQqkmkh3U@lA}zPpo7yuRvPHOaH3bov7uJ?4VGexQ7-hKqvgUVX%dJx zr%;aZGNAn*Ar9<`P5MeUrnc9}m!7uLpLuPI=;f;F_vc1sMQni!h5l`VVP;fqO4}k@ z$j@_gg$W9jpkPKgIy3z4|926Qfj*L`%_!F2~@HcR5f3W~hu__D)NKuz#&hvpz{hOkUC*`%L3?y2nh<>=V zem@qHqRf_=*q#f@AlyM*1xCTl7Dr;AI^WRaJ*qy5O-XTG8K5tsESW6EEC2{GaUP)+OW`KHDP z%}jp%Q4OQl+|LI%#Rn#R8jJH zCdjYc8sHo))cRi0&B8gb0IrzTbDM;81s~y>U4zteRsAG-mJ42o2qM?!KLtFXXb3(_ z$+*cUGq>Jl=`j76D-LHIYU@?4MpWy|I%%W{1yi#RJrI(4MXRleXE(l=7+5Yqg#_0r z2S?G+efc=zR2HejpDB)dnw)Yd>A=C&*E)-gSsxh+Rqe&b^ z7Qb}!EzVP~0pYkD50sYzsU-oXacgQ$YH$$7?*8za6kK??pD5+5pvmevPwxAXoYMIgHtA0tyE9v3&# zOO`-s7h%!OjdRnZqot*#9u!xD!ku_pfp+3 zB6?wL=BZ!ZsAYu&-;m5?qJ#3G4ro3wo&?x^%_>G#4K5jV9t|e-`M5*+YT0DJOSuT+ zl`Xm?Ug`EEK!I#D4Ek)A%kWVUNeiAc4_S$oyHvr5$Py!hiFzsDF2qz^L6BNV90z%d zVpR8_s$3vBG4UV#h-&o1yA>-{+<1O&Yl@UmzS6nY#SK61p?Ya;c*!z+;S(j27`Ah6 zVdVqq(Zr<2_b>tCq2QhZj6)ht!hujG4j+wZASz4}ckax{rafMj5G9OBk5U2;vphG> zZ?Zr&Oqh@nJ{qPJ)bjxYJME7+NYZk{5#)GRmLbQze%kBCM8(-VX&|1IHkbX4B}Pu^ zuQtrMBIT7#Y=a1tl~nsf7&;sv^rcyQSSL!;(3Ng;6%G_$hZ4v@whK6pXaG*a0UA1v zCJq#Oy3$R~LYZ`gev~^jtn3KPAfzD(dPTujCDL@@6K!cfN<>yDC77v-&zjj3(ePNc z%qAc>LL}Th)w7NK^qn`dWTS*DRUfv2xQurSW;RbBNZK1k7R{ySZl zMo&MP^^zT=tlxGcLzvY79OMv3bfpwbkN*k;abqHHRCR=t;dgKuoV#wBi;No{SBgjn z7l9yiKlV?9BI*gNS-1m!D+_gX^*{X+rb7Q^l!Hzqs4Pr{U*j$6sYfy^1pQOvgl?Rk zO1-z+KoqAef&Pz_Zr!oUP|T@t)AVjbsd49=0po?Jqs69P)xvz7d<#_JO>A0err+;9 z3MCZ&BO`UfAt@$~CMe|flwcwzoUNiPo4|J6s$%aLTO15Ot*rg9T5L^5y=o5?VhHV5k07Lh2tSG%x>Ef+-iJ zIHnJh=TDgYP6)Y{x>82Lg2)5P7m21yMv#FAoQ)u#uRs&P?OW!nT3xylN=hk2=uz_JZL1ngJb%a-R^}BE_Aa? zi!nXw5#xhoO&8^HxT2#ZOpvGgm*>u`&N5Au_D?q;=Av3AiL#;*2N!-gF8N=QkcJrO zdLcHX!rv>7>J&GErb`H*TyD~YR(q6UXPaw{x}=+{%O46R|A(qXlUOq>ls{Bqqs%$q zDOp5RqJ-Z$2lx6@VWAw2Wr-!3{LAY9f}Y(D!|M`4M)s3PQ^8e+#S%Xn+oh)dl=Qcu z`bt1h{een)16H-xH$dn&A}SIS6In9yC35BvQ_)Ogj-1FxmH=5yq-b3t@KJz`qK4pt> zA(m6cQiP$B8`%isArTX45la8*>;op*t9Y1p05oTg1M-DXDwydDp;WJ!3__{9)IpHM zX0nN&UR`V{NXGkbwV_w#xwxX`WlU_LNtI<(`(LqwFfBOzhjxYJy(MI6s25ZHhKfG? zO#}Io&@0iGq@poUMpx+|Na0->#9?oT=OhVH&eaYu$i0IvYp*j!D`M3F^otLL1PsVI z%2=PaxHVS9B&&JC_RyK$Tx`;qF=3-xa6md}T0Dy*hv_%}`DX>ag)$+_e_AeTh@Woy zFPqa4HlK&3AfsPK$?>Stk4IpA@~yaMwfMI?{}(hh{?U60(nP+Bx{Lz=eQTuLE04_A z7>taJ|FJtca}sQuzaqE!BXSucNJUhoiXjytq`{80=$f~ImsgP?gEU;B1yRAK?)eh# zIXSaX+z5|}EA)gEnTv)WktjH+Ao7d-m*l$f9V@4P?ozRdQ*N9+)Mq`LxJ-yUB{5k+ z4!aovs1!T&@jMXkjJF`OqXgHyia`>H>tOm?n0p`U3XeC*uiBTP>NMmM@eEZ(K|Rl>@ic1cfqyhuc4W!b>0ucBID2tzSQv! zPbTvU9}!~4Th!*5iaaZ9+G`vDJ#d{#K_AipT@2kLl5C^9RvCf8BSN&%aKGOj+wjx6 z{^TflL+*!lk0E{prkx@`WpV1(F=6(Cd&_72kLKA_v!qbWY0XTCw0t*|$n!Ck32Mo2 zq&o{$mVaJ}=jEmC_cvSU)b^Yh65%lX4KXDGDZ_-B<6<&kpr!@86@ewGVxV--2AK}~;o+4Y_2oVg z{WC{%2qHn#DIoT6ls~TpQKr=JG0b_VZ+(AK56@)SH0Ie^u&}0Uw;o;#2&yt5ngJ#L z^$}}#SA5CyChn>+{j_L?JX;F(-H4FBSvkqJyN|^HykFw$yYutK_?TEKZtow8t(}sl z^4UpAe+)fudPL+kc2U+|n_7AwPv5cd^>$Zey^y9b@~22YJk{YM%2QdLMEZYDQXspD z=#%<2|3$_Ic^2{JU@>0NTxx8k9Nh~BJ)77*KmJ|cqybU=h|zxoW+GJpGa{EX$k<+( zxuLQlDJ=@rlRS$9Jf)c6lhs4`H(NXZVS#50lqN$`%<;*YIu48NQ(dQz>^XxKljFdz zDQ30dEaLj(f5$Z?npGw`H&1Scz$s9@)2p}s5Y~Y@*w51_apA0+HwPxGHMD{H_V zl7#u+9Lg=bHuWoSk8gG)jQDHGouU*=nC5BBf~Gjyg!cpdF8)Jse13-ir4^&nSoU0i zIaS^vzmh50rV$D4W2&B!peD#*r<`uQ(Yg(Uh-|1*U=#(UHPfgDLWBVWlqp`hfVApCP1DWmK+>zF#%gWH4wa$j5yZ)Pe zoO1ewjgkhM#_Kp|?Kq<6M`z1f}_l%HV@YiSwr=frn zEB~m%wY;D)H``Y_l4N0qid`2l$(q|b;7rfF{im3jAwWX$Id#h)@_W5ymqOF;HC@(h6Su^|Kxl9@`Z11jv z$Q`2hZKgHDSnjH~2jFu+oO?*ipF|IM9^+5C&UCRB5#B6SLgjBHa_thDm67Df!QLztrYBL? z{VpW5nUEbT{1@)`JO=P5oj~xc|G|?^r`Foh-LaN&4@&VfO(8{Srg&swqx~8gHa8dq z=XvaXjg_>SB#ijpiyb#Q_p!jg^;UF2!;flRJbkKh69c^p2Rdk^D;?B0@OF~hrd13zK@TbK(;5SNs#NEx`@M+TV@^{_+Q*D4q zxu=(Lb434j+x>!hcl(sr;MXI&-?gh`<-no{t_LuNzHaQdvPuUCRH9`Zk9oX!bO;^2 z&yf6jWBnU&IDVzlQbX(qdfe!%z75>z=(jwU@2Hq~@&H;oRif#gbpm`wU%Hn`ue*L< zKg5s{n$=NN%o`nxuJH#1*01b6yLCKx`u`+eCv6#4z(GNU z@`B14r~w5X@zD8e+8Ko|d_&z|-RT3+#@NIH#jpL^Ujn(6VS-Zd7>ZU`E9YoEkIok_ zV@0?LZ^R~N2imQew$*P3MBE|=r5LE$hD7hUP>4v)EYhPR>C`!LSaf7W(E^`}a(+qo zInu}4yq1d`r^l`;5m}k+LsGQyq$^SC$$2YA7N~`1%?vmSDz7Lr;?tCT zQ|vd4EYw_`DE_2ctWka!NpHZ8!fIAzdU~lNCoPLqE9j-q)A-X-|4mgJ69Q)w`jEU& z=?6OV0C;x?La^`$^rhov!;Eld1@Su$g=#CIiKe!x`Jg1dX0scTL0R}G9po(CyiBBH zkQ-ovlbY*AzoU)0!JObcZToGiTla=1h$wY2B#;5Sj0H76B$@k7a50OMi#)cdI!VSL z&+Z6SjiXuEXU}Q2-P&s%8)|X^zK~}`eG#q{qIiES*tolhuDCZFQSjWLag!8bc_zDT zZIpW`<%uN3jVdi+bbJjR18CnQcC1d{=HGzMblA$3=V`)7s4Tw)sq^Gy z$La~f)SN2WD0fo*c)45LDZz?*K zZwsU2>2E7`ah}QLtKN3NKSj>g;qbgIO%f>=F$D)r4AL{k+_J#c3kdT0^uLYf^gIGg zZ*{G#z}W()Qw>JS_p6+Zlws5=en3@2a?OF98(>F_j zFMCGOg9S65gzZw7s+_0wi?HVsX_oCaR(w!vx-PMs*xrR&@#PEZ1-H6xo-z39y9>U< z^A6k?Nl0ajJ*XMY!4kz|9LqqtcLq#$q3oX*S!7Syr)_W!`*h9xH2I6jCVgHdPi!`E+2M09ZSCfFKXrqGhuDS`C)o1G`a{o zr{fXrKD6^9(`N7#`DVQng_b{os^Wc66=1nL~nk+Y$A@9~ZuZOZ}E?|?iiCR1z$w0pT_O;~oN%TUzsDVAAbqaWXt)_ana zR_yazTZu5B>S>Pf`9X!aSh-N$(->Nh>#)!_~h2lYHBnLmur z2`#ck(KWr6N1K2aqU+gko3SxBIps$$yXKAGaR{XUu7^6f)elC0eDjNgA=_VD*e7~h z)Xy+m-wZd0KzqGMIaf>wK!a|pwO~5RzCPyCZoVGya!VRb>Yo+b!bPgW%H({w^QL;y z{W`EGu&+OR$alHUmpC*ge6v;D?`Cs;ZGLyUZpGGro-Z9xi> z?NYJ`Qq>tS6I8r%zMG-1*jpcOf|7G&(t8>?E#jr|ulMcl?Lcq@h$p0K2_3mwnV`OY zS8~aD^b0u8^Yb9(Atv3+pS8~7u9^PLR!wAdc(HZBv@iH>@8audavr_`0T*8;#o&^| z?|Rs3+%mIzxXYFb!5mFwfrp=H@U@1!T`TrNIl>DzuzPVU)=f4g(>6JNpL*Ofw2!|J zHsO2Yu64a)#}jBir1+_wl;BfS;$xfW_?mRev)qPevp^j{y5KF{nT0jdu3^ zk#G$j3aW`13JM1bL@td76zV!St?)vg(3-piot5x>ELwcGQmM#Apv;F8(?C(Jc0^6h z$!i*=DL)#0b9j^am?)LxF!F@KZ+epD1?~W+0>ULo`iSO5@3pgxoWGk&NDHRe`p$px ze`xTVHvR5`dnv{2GOvrga<_fIV9ZwKfzml@;JqQRyWAuXtVQhvGlC>gP<@H{-|>@nl_qQ7@PGkU1#C4y&3 zN$o<|emIs8_Z}>HGN74Z@%zz;SX<;Fe@jVmw{N81VHemLw8}U~T!(?1cD zEkq`yJRVto{O%1KMd^q99WYLJTeRC57W9};Zz{*5hBqt zcj*I@32iC8WPI34!uUJW0`FfM&0Vl968A^3RCkTxNuIYcX;a>Tef%Q)E+i?~L_C;H`J!N;2%9HXAfoij*k(-Y5j&iT}{L#h7R3k*N z=8HT~l7(ql@&SbP*h$Aip6c(*t!CUXEZ$=BbtG%&;iyOqwk8L;x>A15!*Sd>mKc)T zl-hIQ!;6vv`kppPmW<&e9fzYC_-0rMeM{u91d0?5@nemX>yU{E+ZOmkXQq?aEA92_ zg*K5LfS*SnyxnflSS>p1e%Zas2)6+A;hKruKYJAv)8VsP|He*K5_k7nk?gR>h0by7 z^nHnfT!8!K8JS(Ej7*{p1+79F{IfZz9{PSk&0(wi1>VV{f%$>!ye$OINbmedtrW(w z^b3pi4`Ww5=`{^iPD%BlUh{l%wM`lOu`ae~K$x+VJKiUq_I8+jI?JZn)Vu_>U4A|$ zIYmNe!2n4Q#!J^r&pmngCUyI@jZ4B6qSxy!8>`3rW9&Mf?_b6TKIjxI`eyC~P%A5W zdgJcxmvD~e>XJXKbd>pY_>b*XU9#rfR8Fq!5YHeefs0i{Ti(sm=V%wda`LB;)YCI= z1o+kzVJGwxcuxNj_O2uSFSJ>$X2*~6tbT&eeaJG8|N;c z5k*epzqtj5W?!1eu#FPqXYtD^;4e;k&l#);(Wj(n8`VGV^os`xR@XB+PGlcW=jxS~ z1jQjqCX9~$LdigUVFzazH>`e=32`mx1tOSg%FFH4`cyvxl#wbLNF7u?x;j>U29lMf|^xX5XCeZEQ0R=x=?fOTQkj6|cwY z+Nh2#qlv5DG7oe($qaTr)sv-EE%bK(5U$<4z@(5xBGGbh#*$uBd&wu)>;0rGJnj{N zyTUf(e)ogY3d;N9u-`MH%Gki`Ou4hm20u@`;6e4v0jp>vN{mlb5tXu64dDFd>+DJr zbxn{8@;qzm(G&X*=8IP<1aH#~B}f!`uJ$l%%0b?06hH#MY3*4|%LGu<&MGwz%gaof zds8U0lV--pW{$w{QjaZHtXKkJrRis<% zEmn;);D7w8QV+&|Z{!~ClLa&2I(2nYvZ$aU_0z9=ppow~cub;ns4*I-_t1T*v zoM34cX<`O5gMu`o{A6Z-EY3i})Rln#W=M+e}5*O`9{ zQLNEtKhQ=u1P7J9AAPS?Um@CX%`fvN7H)e$t!cdr!Rphye#v?I4UR`(Z*sN7yg|{( ze_}o|j!ae<}&URs*tugRR_nqjI`^zD_SKWR0C6fQ@^_V;H z_OoZ*zPA3l=F_{y2fQ_Vi3LCtldNM;`s=BG(@D!3*s>*;U`$$L-r>I5d8P6>Moz;6 zAicK6O%K35JpElA=R{w{WAnZxCuijwsuAm~c`AvJC!Uxm`9Oy6e3+>H7HTAGpQT34 zBLX>+vHNoonY!C&vlk7;IK2(+u5g18OD{hH#~06ZL>o>Sb+_PF7d*hGpOfnQL1G6A zapIF4sM(gHwMH`b?05UgO~=9UO;p`whDG}46$I89nsA-td+^zPBWjJR5yJ^y`Gyb& zE_hV14b##lL~J&U zJ)DAAJQP!{6n?L9GsD;=zl+t^IDSNL?(iQ6awUT%Q55ChzCOla#SJw{l8}i)amnX5 z506qZV){_ApCft08@3@Z{H>5Wl(F2P7`8r9Za}e5HI7u;f-x3gcC)az0gFE)8fHR` zXNqbb=jSjZ3Bt+3Q3`BThEi}DQDkn8bD}JbE|wZM9|n}JwBBCda%}Dkpfyg16})jt zN{7KE)cm4YtSTB>1Y7c6U`T=0Qb2z5K}-9TI@W+Is9d15Gd!ibr*)i`38^>IE~`LE zKFD=5c0{)qcbgix;v>)Qu>G2qA~*SV?oFs$vdg$)Xd7%KhCpy3R+3^bEsYi?tL$)& zM+aI>fP{0sTzGc~bY5DTyop&HlHyI`yRu}B6s`dm$2?{pSwcRNw(((u`X4qfHeK8r z(CX_b`deH-{L$dn3~=M7V|BE}!Ea+bHBoHTk)=MFDw%-*#aOXWKACWj3%Q`zoHOTW zw(h$y8E!#6M(wuhkzgE>14R5Z_U(kaHgPiosP|hib|Uv@MSAb9epNo(%xBXt5lBkC zH`6qE-N8F$vY>}TqoFFvXwT$J7#z_qLQ-NbteAF$Z0c6Tusv*vRgV}FCN3l!`t64x z7!@~_vpLU3)}QzRX{V71Pg}9(r41%$Yh@B}vBVO$!H9EdT6QXJ$SuKDGO)yoj#I=G)bJ$L=PwLPw0eb@TLrkaj{ z6NLAv@~T<7jJyz?Qjq5wad;iJ zkm?WG-n@`jo60RfG|4jt72nwZbsCmy1g3@(*Io) z3L2DDh86?iNU;+Ccaa+u6ai$R=zm|XAOk6B7!FDhJ0&itRSJXdzjv0PpiuvdgKX6> z{9R${=I&!}0pgIxCH~(RH2)JD1|pMw3!Mxyk>(}-Yx!{}TjN1FDl2{KwHx rrSYKOfZ%25VgG0W#3_RZ!z~1oml1(314TeST|t8~bnupvf8zfS96p}- delta 11037 zcmZu%1yCGYvtBen7I%WX1@|oO?ht|pcXt^eK(OHM1b2cZxO!QSTH```Ee zsy9`;b+)#(4a^JRBoy+U77he*e*pragFqlpTUHMTXPfs94mK>F zcD5Cox(@k#IR1uK&mVR?P!JVB+=L;ZMY-dW1JlKUVT7r-2vJd1YMPg8H>ts{%_N^b zk4c4Rxoli|un1)W3*6k^Kg;lIvrL?S8uc!TC4ctI+&Vp6MqxkTwvpEwNgfBzU!I<) z^sNC|4u#&{u@}fNB1_}vQim*!$L;fHp;s2QTd&_TmJ$_-YQ(s&F^moS_cYmCFS%uQ z+NWBclTv6E8x59WAt;-%bG6R+VD#A(1^Rbj>I>&__c1u4sw<0I;MVSgHbtk!I-+t3 zxFvnh=jHlHt&x1B=@%Jp5zhcBH0BdmtW+W5nJ}>-1FhfS++)Fg^mFV1+HHLlcQO}8 zqId_UCuRlIm?`2l$e(c3%MB?uzmE0Y-yI~$SS68qn zm9dxURM)9l8jPKTC7O0lajf^^MW>D21P4CVwDC1wHi&`Bo0_#Y({KS+M>;k}ufEWC z)p-rYaH3@Jaq^>eZ*Z0OJ7!V3o+E!@(fgW=iy(Egpg(%U&|#gnzt&JVF!ZLdqim0k#ME~~8ewt^#;}(|h;976*15a$#T{(=Usg;hlptXjpZd#P zZr_?ek8>>er#gPGY{&HlmO9M(!Yn=L7S-%`=U=X1eD+Q=jr>M#FMXIrf7SmD{z>%) z9Y5w(?h)1;ecnUpB5_C6WEe|Innj^3h8W^QZ-h*H?eYvq8YYlT*Ceb~3v6361Q!F4w4_0M$NY{@p7b zZ2zmF48p~&smy&*$u1^XnHXo=*@s*~#`3mJl~xZbmUh_zrUu}*NAw!`@ARC#%(d*j zZ@;}8+68{xaOkeB?U+zKa=i1Y2-O)Ntt}>Ec|xe;N0Ej_oA#gzFvS6ZT;o6>0#HJn z1W`f>7z;q#1Y_w&OU!~1r|Me9BPx2uY)653Ig? z-C7f@GW5`F*fo=D+U>hux|!o08NDojeeU&GzxwP%zjzE`T^s9Yw{46ZSHAXp&PK%> z83Rsr?>n*|fsVyd(PBZt>XfBX`%5#xn8~o2{c@?Jy|rDB`B3iRDPh?3!^rW$Kr_52 z^US@A_;9FOZ0@h`e{U4spSJ7|py&I~`b_0S7daqqSv`+#AM~tb zbnUsb4GZ}bfKLaW=lq^ejO~z9PRr`_{eY%@|H0MtpEQFYa>I`=yyF^``TZrMo%v%ZDXr)yYh7TgOu+M53}3XC(jkrTJwg zv+&oDsv{BikF`4@cq5O$2Zoa}ulwE2A5M*JcXEz9Sq|gwfGR03AQc%{b0^g@1n|~! zuAk>0GAm~d$!^@gxsQK@+du9h^C(}LBwcWy!*4UzaclCbr8xrLj2}8jEK<3g-*4=W zU-dkl7cITg1AF(JQ`bF>UEJGucs-Hb$b}xSBq#3~%iq^6Iyyj&G(74!`2ENL*KL#-_u`F0 zDoDt~05G z+A^f*VKGB?TD_|OR5Ngc6&*8Xyykv9C^qo=jd$MG7(a*4d1>S?@sY$xu-JfLM50Rv z(IH#CuNrgy1cy5F)&z$(bHYSCQ}W@28hx^YZzCdU+G3*H_5XuG(OsicA+@mp-Pi$hA7PNPcjy3r|oPmM!B$rYA_%eV_0dm--M4(18)}RqN+R2+6 zYY~a>-K898PW^xQD95m9pnR17;R~NH6_G&f;VhQXDF}x$hHKzuh55|TO=9mhFvR53 zjYZz*(IiM@(#RFmPD>QT^5Qe3zwXybO>gVPXgJcdHjAUR9>Xrw(s8vunF&a51*XsV zyf4&xG{e&CBuX`t)6;RB8F19tl#D3NY$zSz$7$8@tSC1js+38RbejgKVPS-9J5IlP z&F-_yF)%H{u}Yb_F&Vbi=nIT8J0*q*B(e5$d@30txiFnbb7YkDS{;}om3rHVFfdcD z|LDgeeWMo=#y65zD7^q|oBE_0T4>-|z2AnYN+n5JY#X2w zghxIm4*bB!FY&1oi^}XXp$=)nxsVHEvu-4?FqSflxjl?U(@dxD+BP{*x6wr_wrzD& zqTl#%F!C~*1CO$BnnL5uvqB~kG^)6hipk zMhwcQ4jSn0{DubSLQ0mZ@zYaYTG@b!-AFTQiu8j3N=+^B=w?*)(jN3v!O19Tw-@Zf z`l53iRe~@i+{M{&RkRbk{_TYpF_gF5SL5gQkPQuDMHx2SPY4Rz>$iOOtCaGxct#O$ zmvspCW~!7R+9?D(<_myUue66#K?;V`b_XtBB=5R6fLj_L(GADQ?Ee0cQ(^y>Gi}sN zvugc?=cd+1BTrW9`^;Crc1S4XZl|*BkvEVBBhUSV26Emf^2X9tClP%4Y1xw-EvE32 zcFewHxY~>86xA3-myr?=olb@7wqWNmkB5NJc-bZdNk>d9P~Zuu&yNa%ATS_Cz?LL| zKR+bb5XL5pVdQ$E1(MtaAaV#zBK8FEMebqe2D8Dwxr9+AR`q#bSK(y{RWYox7f(md z9!9-~IZ_(G1XBd(u}g#Sy9gKPMvlZh6~iz$dOQ|3Y7yIHzLgc~LGjmne9sDL@vf%C zZl;8ay`J-dL;#F<^V)6~oA}t9RAUz|_8w2)P@JIYY=WL(0(du^(03TlLOqGp)LZlt z#sui%DpW=?uLC#;(?9D&{Ryb#}v73B@)=C_Z zEclrxHM_N*F@(U?Le$!WcUoRXYqMBrx-W5&IqJ+cq6tLZdW_cUlwQ-B|PWdw$N z0n7S>v4~z648O83tycC{H)`oN!35^}znCV)k}s8$7%1eM#7<%vq?MD-6A`#!MVx^? z5JXf$dd&^GlZp!gbSD5&^-L@~2nS9QrXYlI7fudY)0-hr&Q8E7VoSx0T-P!yY zSqmqTcMJZUS-4u3uFlW!R|I87RK}tiMnZB%nI_9Tdox4@o#Z_u<>-{1T6s+9bzRNa z61}^&#(VSju!Os|3JnUr%K}iCPQIY_1Vd21Xo)2m$d$mVJF32af3AYS9i*I&hsF3I zPeqbRVh~FVclvzX3#Tl$n7mI!71V&0N{m;_yV{|xBjYO92Zwz`52DVnvtt8?&H0>V z%E>6yaFSur&^FNVj9_75PpgtQ#;5*L!@^D_GS`8yi+%!qK59(r0#x3Ap2?FE%`iQ@A#W7pmXTdGg;LStT_tDSN^(%;j2#Y)b^wdBdgs8~8tQZ(!R7 zj+F9putGa=aw-~RPjSwiLGP{?7metzCQ&f=g4y8RKA)Qh(J7zdAd|wyz&1yL{JjWm z*AS4qs6VS96d_JjO%4%`>I|w}9}OGrRe+U$K|j7?>P2b}njXOgI0XdsC^=djN&a$0 zuf4@T2zXn!e=@ZdJUbTB^QpD@%i|IGlRZ)Zl}ei(P7?qHjP=4_&EXq74Q zh}xehyq2d>{u_l@iFKUS{&GRE>PRxn(`&Ou05)fsc0!bC&}VQc2dgLS#OEK+@G&V~ zaU66s)k!k=vCyod?|m1p@teU$#mJf*FGk}}9WmprLJg(Ft;C>^57ST?$Wg;7{TCN0 zztlIeQi(u)TUgUbpdl^YS75kJTv{sF#Ml%g3nB7hd240cWSVW7l6(@rzbC1}J70jqt+NZq`w;mNwSIJ1|A z5&!LR1|cvnnWhK@kY$lV4@bq-oYhd&z&IhwOvwG@G+hCufy$6Bkxv0JN3ls=Y-C?E z_8zGYdUsRHw=U!44CYFI8vk+VnH5bJK>;-Z8~0f_9YM(kP-U_}!SumcDAQ=74e6lw zZjgrj(z{&1n6mIs(%ja^8-dlZz^O#Hz1ZMsq}xG6K!*@~sTz+V&_M%FFrOj}(07vm z6)ULdPJ#mXzeK+vD8W37d;G#d@U!O*VLT`J0rvjlPQ_pJuQIVQHH;D~D(4Ra1=uYL z#vic=h{HyyG4UTJ9%SEwg8c4$En$$n{;|)hkDR9RFZ(K?_5m>pO!Zw8+B$L+*&@hR z2nW3^YM1cJ+3O5g5JXZ0SEkYda+<4vQW#grmB=Shy@FtU7u#O&G+fB02hpfiA0$ud ze`$vX$!Q1!|IiXb^SfR_DzWQ~Fhx85ELcfKs)qGBN`B~XHGXp1(p>RrSoul;I&uer za>Z)st;A<>r5`y6HuI+`gw7;(jgR?-%A?fKFaF6PtWOttrK97qE=9KwqJ;^*eBlHm z65>$j$;xo4(2W(#2}b)C#Lu}MM5jSZ=f;%WXLbcyE+gx8Y-KJLs#IZ)A1a7FzF1hO z)8UtS68WoTC#kXwGVFi~j!-2vQBR@-ToIzsxda@yuh7L^t-2lCucTVFFl9&NNDh^O z7EoM#f?DkRT>5}_;as5%afk}20h@7%*6;zQ1$n5UFf^t_^f)=999^k%x+E5{zi_tM zRd7V!6**nI_Kq}CJzcb#ft(LGhm)pRAKs$-p-gfHaavE^2s zdbU_~OpP@ARY|ULYLd_^__v@+WQC@y??9Uf4RUI-cP2VB%@u)GV5kSd4{+p1QhH2K zzOEzbOX#2j0HH%kxSU5!=@!(U7mF^feF^s*XVfrLlaX~PqNqu~#Dtc9Q7LpWs4lCl z&1Pd4ON{4Dq2xQVvbUs_g(E!;k{HfR%uM{#9`o}0URaEOio+sfLybnS+9^Z` zQ7U}l$)8K%u*wzF>ZJ~OkZ?(Z`(Bg8%PlkXC)g@D1n;yQg}^jSMg*E*M~EtW6yT}B zwu$%r&U`ifqmd&?D1}J?A>%z;0Uh06S=c!d6nJS&-v#O^@qQwR@?>G##6_9AV9~k6 z09W;}Z8L`cH?>#*l$ruc{o4mU^qXHBNgpSul{mA=bg&0NNl>E4PGmLMP8TQ7vkpE0-2+?gm>_eKFw-uC1ahtsNO-^@j!qY(lobZlB$z zI5vqHD`o%Vfgi&iO#}?bkSWI^zE7TSVjkhSOg&0Gafpy@@KgqiDdwoY4<-B!T&{Y9 z$A_l8Uk3_3X`5V|ZNEznzQjz~03u(%9;sT^gp+0jXWem`CJ53g|2^kSSQcWE6>@E| z^;z|5W99}6^KLuzr!$gtPzqck+sx>mjDn(0vL&s^&O|IF`=oq*6I9vt+k36vo~9yvz( zLn8k_4N)vVNy;~KGOP!uSe5&b&OZ_tc+A!xdimlSdz;c#y)a#Z`3#vh=Y^kx@;^S= z_#wwCq_p2>9B~Sw9&a1E?=TwT5gS z^T`E6_HJ4k+IYs%N2!5PR`=a;^aWu2KmLQf+aDZYAmLYVB0Y~LrV%5pMb=Q{627&$ zJBsjBQI1}GddSVr{A-f#&QHp2eOPIACLy>YVY`FWG7-jgx?VU}aW8XFiGB)5e;}z& zmzJVFyPf&~q&r`1|2-!}Yo%W}$*H5M!$o^)M-y#4#IC_u({^|1^FN!*EqoYPS;!%o zO!(X3j`fpCG3w3EsYH(7-KXmCn?3Lt!Bgp5i+_9C5acP?{ThlkXmwTdl9mg(^>Pfi^`Qy&x;asU;n zL(ZJ}1h-!&n;*QKYBP_Ate>;&LkG@(5|OmhbuS?iO&{Pi>&-87-JB!3jNYc=Enf5| z_{j0TTh*)VO1-YxwXG)muWa99>SFAdWkUU(7m-SOk@Dy_tsv;tqnn|$J`oS{>M4(w z%EUkA#y&5(cHgE*^3pFhKvaNE>*q&OewZvD?%kn8mA48L;d+4U~|O0uKMZyfcEU8UBmO!;)3m5dCKGaj@8y> zS3};VNB1wQ9&ci_p6B}8&s=Ys8(-G?XkVXf4p_Gsvcg&2yFWTkt&EY?Ivd~npWj(s z-SoM495VB+86IJblmnIS);Gp+Cp$l$o>q3oN3WMQvO1mt=yUw%XE>0GJRCeu9XCbT z3l!pSeK#=(AP_HC!T>!LK+a6wZO!nhUhPy;TdTR6)~R!@S1Q`dSovnn;fUJEl7Us; z%7d55Eu6#$at+D;&Zq26hHv#=5F<`?%y-*>e~^-S8`BJ%%#RSEfv1)uTqhWNEG#CO zTAb{@<7skan}fnbU913s^6k(3(!{zdJBy9P0=||_&hB-k?~)NT08U@;n0e4Ty?WMU zZ`B*65hZpr`jiR99`WFUx69)e4Y9?X%=@Xd8Y~UWriI2gm%&bf1IQ)Kjv0LQc=qzs zl_B&mel#fe%UaQU_M3PiINOm9a8WDI9M6-y`e-9de#a$SW%1_fQxj`%czk*zIl4v~ z`jrp61xKBjkj11lDxjkATJ$FSTpF)L*J$IjW=D!&1F0h{H%sk(TP&U4TP%eaOvN?? zO0uh)M0BpqCDwRbiL@iF%~g!`4Uz5)Ar0C|jgwS!MQg9hwZ@}pXidlv0`s3s4R(pn z#6IlHnzPBLQ}?Iu;y#iFsAF}(ezU=y%ijUxrF01m<0IQ2+W~@@p8KikT^2V%?R@Oq&o*skqND9+IWrrA8t_ zq{Dg9rAEttw*~iNDKPGtmig1U6yvwrsMCRD=F7$!AWKI2>0^G%Eo8&k)~ z$am3&HcIyXKtQlwDC2;5o^#Hx<6x&?ElW&Si|?{N=Ii|36+ z(Jvs$Y5`p#g_C4tk5!X9y{WyPO4wn`Impr?=Jjl_nRpVEDqn_ME|^DEjUn7soD6$@ zabNZ`C_bj;LmJjez$pwuOvL>Kb zQDyafr!$@foRB}F9MHpei*pj!YFy-9(wRPTjsw)6Qoiyfd}X6q;mJT5K9PpxG7g9( z3+x4OCJJkW7BIU0&PUNod+<%$4>fZ_;%_eVWcLu@ux5n=5%{*jn@^hAv})w4+QjGR zWMXm!1bu}W?Q9_Mzto<53#}^w6H%t?8`8=csB(`^GEuM^zLR!xeL0`E_{=RfR^CCwu)}s{GjU zYOBlK#!{c+Rc9fuD)pB{(YiK`jxDqH+^z4{o34z@`M;gRj!&$-IoHJ)a9?>S$0}@{ zOX8X-$WXkJHh)ck9Kov4&GOo~x`X0&{~7wS_1_u|LIfc}Yc>UlTsCHM2@wQ}Psn5; z0oELrcrg6QYMukn)QLLPj?C?5X$Zl^uOj+%Fy`p52W6rZ-%@JE*KR&t-77uCNhI10 z`5_%mcnq{`t(>21?c|JGb>nrvEuGOU#?N$1Rf&r(OgC_&HGDoWa7}g7>x2A|({oGi zc7JMpx=N9^A%Ux|)y_(DStw?!|DjN@3?K?%qjW&55}ZE*qg?fAn2<(J3cd8;$GSRn zn3n)N$dT7kK0!ud}%adBxMV%}!iR)^Y^gR zCN4^Ir8)#V`gx?m$Dhqf_=;QnNWMO==(;-WOz1hm(pzyfFz))FYHvB5%%1L7jU~fm4gevg0sQdeHLYb7I}%OKanqn(^^8 zHY_)Zx1n%GhLV(O8{cbx5gddCJ=e5r{fJMI{cefve1y1EhpFw0BBi3PHJb=3#Pk_a zB%coH?3cc2%KGw#vRI`MNnaZm7*T3p`Lw24S=SxMYlkm7+ez3{ghoKwn<#TI6`MtF zxArB0LtQW_`vd*Uh;Iv}tSd9Ip;KYQN;Yc(dRQC8BQb=?HF)d$Ys1LBm&=13& zCPiJvv?QA1?1xm|NX8E`kQ@jYKU73%PRIZO~KGZ?; z=FQ#1f4a*gZ1ohOqnVSIaY_(MOlPyJ&ddtomGfa00*LKi1_s`3+U#dMO)6 z5(aUgkzzlFfqCC&oVXcm%L1ZFUf-vfyQH7O4iwr@U%jzYQ7qG{aAyd18|4+1U1vE| zimbxAdvf)qc#RfMYHTkGIZiZO^P^1e7f47;#j)AejY+6*=nWr3`?^Vd#U(|=Rc`X^ zNyqJg?{L@Z*1B_!+(DSjKUKYuo~+h}#WeJSU$-hf^pBYzxuJq-AWitrHQ3z@1# zo^|1D2HOz`nh1~UO2ycb2{zJsW(bINndl-a4^0Wb&+%^|e|_Tx^a`EE%0UwV4;M;fF4(^sJ=?~VQvk?Vo!J>>z#heP1 z57NxC1} zVx1_L!Qi$y;TUD|L@ODE_B^_*uiS&}k!ma4X9q zg>`WWzy8o=`qY$>pbPVdUp1p25&h_0IleVrNzopCewk$HZ)8mb*e&+kb?hm&5Xu@4 zA+F`#dc`9n>d8Z*i~Nb|zG5GVT{su{%>-dlO7V5Qd@$0svu5~gt8TNXzS`Ig?l)|$ z5aa)tSu1F%Z{xLE+lxxeJy#u)N_AZ=N{?h;-}%Y|mNr;jlf)|(IW-Z#5Z_|s?(SZ{ z);-_!aQ$Zcc!rW1c>CRikabEr>nJht9mv=ruUT>MV`H}4h1=VPk{NPoDsE#5O$s;l z$GLlRjqe$(hsF!P1?P7&UhwD%!EVzB<_~9AO2oNobnL}QIp$-dU#{f!HAZle2zd+= zg0dejYO;(EU(AuTVmsI`O789K32790N1#*o7#X}TJ)2r#0`x|!fAQ>u*{mmsxs6cx zJfq%3_&(!??uJ^9)hR$C_d3m_*DX?NhOl@ay=*HE(3S;bg=I3?0uXzbY~G)`>#~(2 zcWM!d@G5^AWcTvY^Crx_Kb%s%S1K-*S+*0VO^3JX}T_iA~&b5J4;Y(&BxIsQ%96RROW3B%R5)E{RO>zgfsu!N) zVX${MJ(pbWzI>OiyL@3!Yqwx$|2zGZ-+&VowRt5WW~Rn8qF5xloV(p7P>Fwl;b1-Y z3|AM!%>sh}=}0@5P3Y#~*Qi^8A?m6a9|Q$ef4ksU3*ZtKhsVZ_jW&9Z7%v1a1=EP6 z4y#Dy`H>$-sc?#LVJAM5AuS7jP>lTqJ-qb)bW=5@$-M+=URr=4^pxpJnEZq;`;sD} zE-0{6YgkLOw%nlZnoo*53Sp~Pwc)vqY>X%)G_p*)AFg%W!?)?))z*C|^7OYr{Yc{S zI@kFzW5waMSDOF*L99}Okk)bYV#qA(6z^Jb&I$0i!=kn3Ar$y^$v@5BWO|Q(Z`f>Wku=2k0=F7rs`hMph8g3cwOv^mw&yci8I(YoyrxliXh5Mt4r{7|zwk0c<$4mV)5@Ote(On7@ z7%|O?F@WORc^t&`?C5SRmp8V!n5(U$9F6^(H@;tr!kLNpGAPKfv`if$Mu%8s>fI5CeE*|Qo1)~~yRU-t6%(dQ$G zzfGbUBdL3fZ*rCGdjmU~ZLau)Ak4luk;~bmrZyq=MnWEefuJx}l~O#Dek|3PG9d+R zf${h5M4KXoCmIKMAIUg^F@+(pf*R{Qo-NTtT2%)H*c#R&)Lmqc6Bfg#1929k>$mLf z$^|KPsfx-(^D$9`N8uw`@VS7+8#s6lQjWdJ4tQAF1%(v&yrbbvTsJHgi3^KFBoXz0 z#xo?MTQPK%YDRxii_}q4yY-)$xkqA3QOLDMW30|AWMX4+36~RN+kCf6udbG>$7kZK z<=A%%AU%$L+^t%4D1II9g5id`p=U;XiDk?JLn#rRTLQnM=7=n*DKUb1VX;!xW0QlC z$sBKdVkAmWYaXAPY7(?>P{z>UJggSVH}+Z~l4zqfsY($gc&cXLlKNwF-!Zbt)@XoaneM$RQ!mrO5+K(T0-Lb1W5Q=+P{q@O+!t!5Kd$`RFc(g#8o*b`L{P>94 z!I-n7J#@s@T#&1$Nl$Ow!AIf$H^)Cw_5yX1Z|GnERpk$CI3a6_59kG_6R_$QaLlT8 zbSbG}KW=C1J)&gfr?eKH+7Nh5he&-}Z!-OFmNU%D+iZi#*c$CMqc_8HK{yVQm1V?j zNr#T%u!pHw6;`<0dmy~Zh{N(In_*oz)}k3BJyf1EYBPp8{zd*`hW_MJ5sp`0A1^i= zx#Rf(!*mpz{*Jc@d=%Sw@{S5@1CHq6D+vkdf^}>)Aj2Gl6rBfyJgh@3&Hi*Lz&2^% z%SO*xT(Kg0pB3%2YuhF5VU!F1*O>mWh!1OQg=H%WY)a45*A|n5L5H#UVTnSzZ1q4da zM;{w(4X@FmHK|Gl?)1p+}& z$^D;8fh8f21uwx$k`Y#iJK+mA&7WQW=?mkMxUeof2_rlV3FuN7#D7Zqcj$3dX6XIW ze+z-(O;F{pyo?fAAp;0|KeSfQo5`=L}Xn}qUCEQ8T KB65iTq4*y$DawEV From 3d28a3f264bf1387e2021214a37e621f28da7b65 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 29 Jul 2020 14:02:59 -0700 Subject: [PATCH 465/589] Update deployment-phases.md --- .../microsoft-defender-atp/deployment-phases.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md b/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md index 5daf2b2aa2..350568b2e5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md +++ b/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md @@ -12,7 +12,10 @@ author: mjcaparas ms.localizationpriority: medium manager: dansimp audience: ITPro -ms.collection: M365-security-compliance +ms.collection: +- M365-security-compliance +- m365solution-endpointprotect +- m365solution-overview ms.topic: article --- From b012728b7da60aab384f728a13ce68a633c9be84 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 29 Jul 2020 14:03:47 -0700 Subject: [PATCH 466/589] Update prepare-deployment.md --- .../microsoft-defender-atp/prepare-deployment.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment.md b/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment.md index e1d07ae2e0..8e62b93b44 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment.md +++ b/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment.md @@ -13,7 +13,9 @@ author: mjcaparas ms.localizationpriority: medium manager: dansimp audience: ITPro -ms.collection: M365-security-compliance +ms.collection: +- M365-security-compliance +- m365solution-endpointprotect ms.topic: article --- From c6f5f218d91eba4d3f0fb14ea58de9d4f4e3387d Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 29 Jul 2020 14:04:16 -0700 Subject: [PATCH 467/589] Update production-deployment.md --- .../microsoft-defender-atp/production-deployment.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md b/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md index 33a1b59c0a..dd1f0dfe6b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md +++ b/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md @@ -13,7 +13,9 @@ author: mjcaparas ms.localizationpriority: medium manager: dansimp audience: ITPro -ms.collection: M365-security-compliance +ms.collection: +- M365-security-compliance +- m365solution-endpointprotect ms.topic: article --- From 1047fb774a9ff73dc0aadf60136c727395e25fad Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 29 Jul 2020 14:04:40 -0700 Subject: [PATCH 468/589] Update onboarding.md --- .../threat-protection/microsoft-defender-atp/onboarding.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/onboarding.md b/windows/security/threat-protection/microsoft-defender-atp/onboarding.md index c73e519c52..557c918348 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/onboarding.md +++ b/windows/security/threat-protection/microsoft-defender-atp/onboarding.md @@ -12,7 +12,9 @@ author: mjcaparas ms.localizationpriority: medium manager: dansimp audience: ITPro -ms.collection: M365-security-compliance +ms.collection: +- M365-security-compliance +- m365solution-endpointprotect ms.topic: article --- From abbbe68e65dfc62a75991145798be977c03cce91 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 29 Jul 2020 14:06:10 -0700 Subject: [PATCH 469/589] m365solution-symantecmigrate --- .../symantec-to-microsoft-defender-atp-migration.md | 5 ++++- .../symantec-to-microsoft-defender-atp-onboard.md | 4 +++- .../symantec-to-microsoft-defender-atp-prepare.md | 4 +++- .../symantec-to-microsoft-defender-atp-setup.md | 4 +++- 4 files changed, 13 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md index 0261393243..9e26a9fef5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md @@ -13,7 +13,10 @@ author: denisebmsft ms.localizationpriority: medium manager: dansimp audience: ITPro -ms.collection: M365-security-compliance +ms.collection: +- M365-security-compliance +- m365solution-symantecmigrate +- m365solution-overview ms.topic: article --- diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md index d00f9c4634..974c635e5d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md @@ -13,7 +13,9 @@ author: denisebmsft ms.localizationpriority: medium manager: dansimp audience: ITPro -ms.collection: M365-security-compliance +ms.collection: +- M365-security-compliance +- m365solution-symantecmigrate ms.topic: article --- diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md index 5f7918273a..2a678e94e4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md @@ -13,7 +13,9 @@ author: denisebmsft ms.localizationpriority: medium manager: dansimp audience: ITPro -ms.collection: M365-security-compliance +ms.collection: +- M365-security-compliance +- m365solution-symantecmigrate ms.topic: article --- diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md index eef8e48d51..692c6a9e61 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md @@ -13,7 +13,9 @@ author: denisebmsft ms.localizationpriority: medium manager: dansimp audience: ITPro -ms.collection: M365-security-compliance +ms.collection: +- M365-security-compliance +- m365solution-symantecmigrate ms.topic: article --- From 0434b61685c6f9662204bd6e99953a10d75de27f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 29 Jul 2020 14:07:03 -0700 Subject: [PATCH 470/589] Update evaluation-lab.md --- .../microsoft-defender-atp/evaluation-lab.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/evaluation-lab.md b/windows/security/threat-protection/microsoft-defender-atp/evaluation-lab.md index f85dc02558..dd21e36602 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/evaluation-lab.md +++ b/windows/security/threat-protection/microsoft-defender-atp/evaluation-lab.md @@ -12,7 +12,9 @@ author: mjcaparas ms.localizationpriority: medium manager: dansimp audience: ITPro -ms.collection: M365-security-compliance +ms.collection: +- M365-security-compliance +- m365solution-evalutatemtp ms.topic: article --- From 2b73a81a78df339ff9f02a0cc08c41faa67dbfdd Mon Sep 17 00:00:00 2001 From: Hao Chen Date: Thu, 30 Jul 2020 09:52:02 +0800 Subject: [PATCH 471/589] Update internet-explorer.yml --- browsers/internet-explorer/internet-explorer.yml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/browsers/internet-explorer/internet-explorer.yml b/browsers/internet-explorer/internet-explorer.yml index 407a4dd1f8..d35939d994 100644 --- a/browsers/internet-explorer/internet-explorer.yml +++ b/browsers/internet-explorer/internet-explorer.yml @@ -41,15 +41,15 @@ landingContent: - text: Web Application Compatibility Lab Kit url: /internet-explorer/web-app-compat-lab-kit - text: Cumulative security updates for Internet Explorer 11 - url: http://www.catalog.update.microsoft.com/Search.aspx?q=cumulative%20security%20update%20for%20internet%20explorer%2011 + url: https://www.catalog.update.microsoft.com/Search.aspx?q=cumulative%20security%20update%20for%20internet%20explorer%2011 - linkListType: learn links: - text: Getting started with Windows 10 for IT professionals - url: https://mva.microsoft.com/en-US/training-courses/getting-started-with-windows-10-for-it-professionals-10629?l=fCowqpy8_5905094681 + url: https://mva.microsoft.com/training-courses/getting-started-with-windows-10-for-it-professionals-10629?l=fCowqpy8_5905094681 - text: 'Windows 10: Top Features for IT Pros' - url: https://mva.microsoft.com/en-US/training-courses/windows-10-top-features-for-it-pros-16319?l=xBnT2ihhC_7306218965 + url: https://mva.microsoft.com/training-courses/windows-10-top-features-for-it-pros-16319?l=xBnT2ihhC_7306218965 - text: Manage and modernize Internet Explorer with Enterprise Mode - url: http://channel9.msdn.com/events/teched/newzealand/2014/pcit307 + url: https://channel9.msdn.com/events/teched/newzealand/2014/pcit307 - text: 'Virtual Lab: Enterprise Mode' url: https://www.microsoft.com/handsonlabs/SelfPacedLabs/?storyGuid=e4155067-2c7e-4b46-8496-eca38bedca02 @@ -155,11 +155,11 @@ landingContent: - text: Contact a Microsoft support professional url: https://support.microsoft.com/contactus - text: Support options for Microsoft Partners - url: https://mspartner.microsoft.com/en/us/Pages/Support/get-support.aspx + url: https://mspartner.microsoft.com/Pages/Support/get-support.aspx - text: Microsoft Services Premier Support - url: https://www.microsoft.com/en-us/microsoftservices/support.aspx + url: https://www.microsoft.com/microsoftservices/support.aspx - text: Microsoft Small Business Support Center - url: http://smallbusiness.support.microsoft.com/product/internet-explorer + url: https://smallbusiness.support.microsoft.com/product/internet-explorer - text: General support url: https://support.microsoft.com/products/internet-explorer From b32a12685e5397991d6587db2c0ca20a0f9df2fd Mon Sep 17 00:00:00 2001 From: ashwin-pr <66497769+ashwin-pr@users.noreply.github.com> Date: Thu, 30 Jul 2020 07:49:52 +0530 Subject: [PATCH 472/589] Update android-intune.md Removed, corrected inadvertent references to internal sharepoint links that were part of actual URL, resulting in a broken URL. --- .../microsoft-defender-atp/android-intune.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/android-intune.md b/windows/security/threat-protection/microsoft-defender-atp/android-intune.md index 42d75ed3b8..d2f56eeeb1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/android-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/android-intune.md @@ -26,7 +26,7 @@ ms.topic: conceptual This topic describes deploying Microsoft Defender ATP for Android on Intune Company Portal enrolled devices. For more information about Intune device enrollment, see [Enroll your -device](https://microsoft.sharepoint.com/teams/WDATPIndia/Shared%20Documents/General/PM%20Docs/External%20Documentation/aka.ms/enrollAndroid). +device](https://docs.microsoft.com/mem/intune/user-help/enroll-device-android-company-portal). > [!NOTE] @@ -45,7 +45,7 @@ This topic describes how to deploy Microsoft Defender ATP for Android on Intune Download the onboarding package from Microsoft Defender Security Center. 1. In [Microsoft Defender Security -Center](https://microsoft.sharepoint.com/teams/WDATPIndia/Shared%20Documents/General/PM%20Docs/External%20Documentation/securitycenter.microsoft.com), go to **Settings** \> **Machine Management** \> **Onboarding**. +Center](https://securitycenter.microsoft.com), go to **Settings** \> **Machine Management** \> **Onboarding**. 2. In the first drop-down, select **Android** as the Operating system. @@ -283,7 +283,7 @@ and then your onboarding should be successful. 4. At this stage the device is successfully onboarded onto Microsoft Defender ATP for Android. You can verify this on the [Microsoft Defender Security -Center](https://microsoft.sharepoint.com/teams/WDATPIndia/Shared%20Documents/General/PM%20Docs/External%20Documentation/securitycenter.microsoft.com) +Center](https://securitycenter.microsoft.com) by navigating to the **Devices** page. ![Image of Microsoft Defender ATP portal](images/9fe378a1dce0f143005c3aa53d8c4f51.png) From 58b776469725ae71b7fafb334f27fe81a1458740 Mon Sep 17 00:00:00 2001 From: Hao Chen Date: Thu, 30 Jul 2020 10:57:53 +0800 Subject: [PATCH 473/589] Update internet-explorer.yml --- browsers/internet-explorer/internet-explorer.yml | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/browsers/internet-explorer/internet-explorer.yml b/browsers/internet-explorer/internet-explorer.yml index d35939d994..7a2759960e 100644 --- a/browsers/internet-explorer/internet-explorer.yml +++ b/browsers/internet-explorer/internet-explorer.yml @@ -38,8 +38,6 @@ landingContent: url: https://www.microsoft.com/evalcenter/evaluate-windows-10-enterprise - text: Enterprise Mode Site List Manager (schema, v.2) url: https://www.microsoft.com/download/details.aspx?id=49974 - - text: Web Application Compatibility Lab Kit - url: /internet-explorer/web-app-compat-lab-kit - text: Cumulative security updates for Internet Explorer 11 url: https://www.catalog.update.microsoft.com/Search.aspx?q=cumulative%20security%20update%20for%20internet%20explorer%2011 - linkListType: learn @@ -157,7 +155,7 @@ landingContent: - text: Support options for Microsoft Partners url: https://mspartner.microsoft.com/Pages/Support/get-support.aspx - text: Microsoft Services Premier Support - url: https://www.microsoft.com/microsoftservices/support.aspx + url: https://www.microsoft.com/en-us/microsoftservices/support.aspx - text: Microsoft Small Business Support Center url: https://smallbusiness.support.microsoft.com/product/internet-explorer - text: General support From efeab4a9774a167e572d65b438718da49e230ec9 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 30 Jul 2020 08:32:39 +0500 Subject: [PATCH 474/589] addition in note As suggested by the user, added information regarding autopilot profile setting. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/7121 --- windows/deployment/windows-autopilot/white-glove.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/deployment/windows-autopilot/white-glove.md b/windows/deployment/windows-autopilot/white-glove.md index 95c0f4f5d7..c1a09ffab6 100644 --- a/windows/deployment/windows-autopilot/white-glove.md +++ b/windows/deployment/windows-autopilot/white-glove.md @@ -62,6 +62,7 @@ To enable white glove deployment, an additional Autopilot profile setting must b The Windows Autopilot for white glove deployment pre-provisioning process will apply all device-targeted policies from Intune. That includes certificates, security templates, settings, apps, and more – anything targeting the device. Additionally, any apps (Win32 or LOB) that are configured to install in the device context and targeted to the user that has been pre-assigned to the Autopilot device will also be installed. Please make sure not to target both win32 and LOB apps to the same device, as this can make troubleshooting difficult if there are app installation failures. For more information, see [Add a Windows line-of-business app to Microsoft Intune](https://docs.microsoft.com/mem/intune/apps/lob-apps-windows). > [!NOTE] +> Select language mode as user specified in autopilot profiles to ensuer easy access into white glove provisioning mode. > The white glove technician phase will install all device-targeted apps as well as any user-targeted, device-context apps that are targeted to the assigned user. If there is no assigned user, then it will only install the device-targeted apps. Other user-targeted policies will not apply until the user signs into the device. To verify these behaviors, be sure to create appropriate apps and policies targeted to devices and users. ## Scenarios From af0fe5983d9bba72677c4af4ed381c71a63404a4 Mon Sep 17 00:00:00 2001 From: aktsuda Date: Thu, 30 Jul 2020 14:32:07 +0900 Subject: [PATCH 475/589] Update kernel-dma-protection-for-thunderbolt.md Add the following FAQ: ### My system's Kernel DMA Protection is off. Can DMA-remapping for a specific device be turned on? Yes. DMA remapping for a specific device can be turned on independent from Kernel DMA Protection. (i.e. if the driver opts in and VT-d is turned on, then DMA remapping will be enabled for the devices driver, even if Kernel DMA Protection is off). Kernel DMA Protection is a policy that allows/disallows devices to perform DMA, based on their remapping state/capabilities. --- .../kernel-dma-protection-for-thunderbolt.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/windows/security/information-protection/kernel-dma-protection-for-thunderbolt.md b/windows/security/information-protection/kernel-dma-protection-for-thunderbolt.md index b36af3f717..c951585127 100644 --- a/windows/security/information-protection/kernel-dma-protection-for-thunderbolt.md +++ b/windows/security/information-protection/kernel-dma-protection-for-thunderbolt.md @@ -115,6 +115,12 @@ Please check the driver instance for the device you are testing. Some drivers ma If the peripherals do have class drivers provided by Windows 10, please use these drivers on your systems. If there are no class drivers provided by Windows for your peripherals, please contact your peripheral vendor/driver vendor to update the driver to support [DMA Remapping](https://docs.microsoft.com/windows-hardware/drivers/pci/enabling-dma-remapping-for-device-drivers). +### My system's Kernel DMA Protection is off. Can DMA-remapping for a specific device be turned on? + +Yes. DMA remapping for a specific device can be turned on independent from Kernel DMA Protection. (i.e. if the driver opts in and VT-d is turned on, then DMA remapping will be enabled for the devices driver, even if Kernel DMA Protection is off). + +Kernel DMA Protection is a policy that allows/disallows devices to perform DMA, based on their remapping state/capabilities. + ### Do Microsoft drivers support DMA-remapping? In Windows 10 1803 and beyond, the Microsoft inbox drivers for USB XHCI (3.x) Controllers, Storage AHCI/SATA Controllers and Storage NVMe Controllers support DMA Remapping. From dab9d35a393921b83694cac9a13b8a8c1cbe8840 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 30 Jul 2020 10:34:21 +0500 Subject: [PATCH 476/589] Update windows/deployment/windows-autopilot/white-glove.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- windows/deployment/windows-autopilot/white-glove.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/white-glove.md b/windows/deployment/windows-autopilot/white-glove.md index c1a09ffab6..2945f04f62 100644 --- a/windows/deployment/windows-autopilot/white-glove.md +++ b/windows/deployment/windows-autopilot/white-glove.md @@ -62,7 +62,7 @@ To enable white glove deployment, an additional Autopilot profile setting must b The Windows Autopilot for white glove deployment pre-provisioning process will apply all device-targeted policies from Intune. That includes certificates, security templates, settings, apps, and more – anything targeting the device. Additionally, any apps (Win32 or LOB) that are configured to install in the device context and targeted to the user that has been pre-assigned to the Autopilot device will also be installed. Please make sure not to target both win32 and LOB apps to the same device, as this can make troubleshooting difficult if there are app installation failures. For more information, see [Add a Windows line-of-business app to Microsoft Intune](https://docs.microsoft.com/mem/intune/apps/lob-apps-windows). > [!NOTE] -> Select language mode as user specified in autopilot profiles to ensuer easy access into white glove provisioning mode. +> Select the language mode as the user specified in Autopilot profiles to ensure easy access into white glove provisioning mode. > The white glove technician phase will install all device-targeted apps as well as any user-targeted, device-context apps that are targeted to the assigned user. If there is no assigned user, then it will only install the device-targeted apps. Other user-targeted policies will not apply until the user signs into the device. To verify these behaviors, be sure to create appropriate apps and policies targeted to devices and users. ## Scenarios From 9492c24111fe147728afc68ac4bea59bfb555ce8 Mon Sep 17 00:00:00 2001 From: schmurky Date: Thu, 30 Jul 2020 15:20:12 +0800 Subject: [PATCH 477/589] Updated mac-install-with-intune removed $ to avoid messing up copying of code --- .../microsoft-defender-atp/mac-install-with-intune.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune.md b/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune.md index ff78248097..c0a298139b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune.md @@ -50,7 +50,7 @@ The following table summarizes the steps you would need to take to deploy and ma | [Approve Kernel Extension for Microsoft Defender ATP](#download-installation-and-onboarding-packages) | MDATP_KExt.xml | N/A | | [Grant full disk access to Microsoft Defender ATP](#create-system-configuration-profiles-step-8) | MDATP_tcc_Catalina_or_newer.xml | com.microsoft.wdav.tcc | | [Configure Microsoft AutoUpdate (MAU)](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/mac-updates#intune) | MDATP_Microsoft_AutoUpdate.xml | com.microsoft.autoupdate2 | -| [Microsoft Defender ATP configuration settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#intune-profile-1)

**Note:** If you are planning to run a 3rd party AV for macOS, set `passiveMode` to `true`. | MDATP_WDAV_and_exclusion_settings_Preferences.xml | com.microsoft.wdav | +| [Microsoft Defender ATP configuration settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#intune-profile-1)

**Note:** If you are planning to run a third party AV for macOS, set `passiveMode` to `true`. | MDATP_WDAV_and_exclusion_settings_Preferences.xml | com.microsoft.wdav | | [Configure Microsoft Defender ATP and MS AutoUpdate (MAU) notifications](#create-system-configuration-profiles-step-9) | MDATP_MDAV_Tray_and_AutoUpdate2.mobileconfig | com.microsoft.autoupdate2 or com.microsoft.wdav.tray | ## Download installation and onboarding packages @@ -69,12 +69,12 @@ Download the installation and onboarding packages from Microsoft Defender Securi Extract the contents of the .zip files: ```bash - $ ls -l + ls -l total 721688 -rw-r--r-- 1 test staff 269280 Mar 15 11:25 IntuneAppUtil -rw-r--r-- 1 test staff 11821 Mar 15 09:23 WindowsDefenderATPOnboardingPackage.zip -rw-r--r-- 1 test staff 354531845 Mar 13 08:57 wdav.pkg - $ unzip WindowsDefenderATPOnboardingPackage.zip + unzip WindowsDefenderATPOnboardingPackage.zip Archive: WindowsDefenderATPOnboardingPackage.zip warning: WindowsDefenderATPOnboardingPackage.zip appears to use backslashes as path separators inflating: intune/kext.xml @@ -85,13 +85,13 @@ Download the installation and onboarding packages from Microsoft Defender Securi 7. Make IntuneAppUtil an executable: ```bash - $ chmod +x IntuneAppUtil + chmod +x IntuneAppUtil ``` 8. Create the wdav.pkg.intunemac package from wdav.pkg: ```bash - $ ./IntuneAppUtil -c wdav.pkg -o . -i "com.microsoft.wdav" -n "1.0.0" + ./IntuneAppUtil -c wdav.pkg -o . -i "com.microsoft.wdav" -n "1.0.0" Microsoft Intune Application Utility for Mac OS X Version: 1.0.0.0 Copyright 2018 Microsoft Corporation From 07d931fa5e92278dff3f7c8242544dc429cdfc82 Mon Sep 17 00:00:00 2001 From: schmurky Date: Thu, 30 Jul 2020 17:12:54 +0800 Subject: [PATCH 478/589] Update mac-install-with-jamf.md Removed $ prompts in code and changed 3rd to third --- .../mac-install-with-jamf.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-jamf.md b/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-jamf.md index 4cb0f6f707..4520ed853d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-jamf.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-jamf.md @@ -34,7 +34,7 @@ This topic describes how to deploy Microsoft Defender ATP for Mac through JAMF. ## Prerequisites and system requirements -Before you get started, please see [the main Microsoft Defender ATP for Mac page](microsoft-defender-atp-mac.md) for a description of prerequisites and system requirements for the current software version. +Before you get started, see [the main Microsoft Defender ATP for Mac page](microsoft-defender-atp-mac.md) for a description of prerequisites and system requirements for the current software version. In addition, for JAMF deployment, you need to be familiar with JAMF administration tasks, have a JAMF tenant, and know how to deploy packages. This includes having a properly configured distribution point. JAMF has many ways to complete the same task. These instructions provide an example for most common processes. Your organization might use a different workflow. @@ -45,7 +45,7 @@ The following table summarizes the steps you would need to take to deploy and ma | Step | Sample file names | BundleIdentifier | |-|-|-| | [Download installation and onboarding packages](#download-installation-and-onboarding-packages) | WindowsDefenderATPOnboarding__MDATP_wdav.atp.xml | com.microsoft.wdav.atp | -| [Microsoft Defender ATP configuration settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#property-list-for-jamf-configuration-profile-1)

**Note:** If you are planning to run a 3rd party AV for macOS, set `passiveMode` to `true`. | MDATP_WDAV_and_exclusion_settings_Preferences.plist | com.microsoft.wdav | +| [Microsoft Defender ATP configuration settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#property-list-for-jamf-configuration-profile-1)

**Note:** If you are planning to run a third party AV for macOS, set `passiveMode` to `true`. | MDATP_WDAV_and_exclusion_settings_Preferences.plist | com.microsoft.wdav | | [Configure Microsoft Defender ATP and MS AutoUpdate (MAU) notifications](#notification-settings) | MDATP_MDAV_Tray_and_AutoUpdate2.mobileconfig | com.microsoft.wdav.tray | | [Configure Microsoft AutoUpdate (MAU)](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/mac-updates#jamf) | MDATP_Microsoft_AutoUpdate.mobileconfig | com.microsoft.autoupdate2 | | [Grant Full Disk Access to Microsoft Defender ATP](#privacy-preferences-policy-control) | Note: If there was one, MDATP_tcc_Catalina_or_newer.plist | com.microsoft.wdav.tcc | @@ -67,11 +67,11 @@ Download the installation and onboarding packages from Microsoft Defender Securi 5. From the command prompt, verify that you have the two files. Extract the contents of the .zip files like so: ```bash - $ ls -l + ls -l total 721160 -rw-r--r-- 1 test staff 11821 Mar 15 09:23 WindowsDefenderATPOnboardingPackage.zip -rw-r--r-- 1 test staff 354531845 Mar 13 08:57 wdav.pkg - $ unzip WindowsDefenderATPOnboardingPackage.zip + unzip WindowsDefenderATPOnboardingPackage.zip Archive: WindowsDefenderATPOnboardingPackage.zip warning: WindowsDefenderATPOnboardingPackage.zip appears to use backslashes as path separators inflating: intune/kext.xml @@ -208,7 +208,7 @@ Once the policy is applied, you'll see the Microsoft Defender ATP icon in the ma You can monitor policy installation on a device by following the JAMF log file: ```bash - $ tail -f /var/log/jamf.log + tail -f /var/log/jamf.log Thu Feb 21 11:11:41 mavel-mojave jamf[7960]: No patch policies were found. Thu Feb 21 11:16:41 mavel-mojave jamf[8051]: Checking for policies triggered by "recurring check-in" for user "testuser"... Thu Feb 21 11:16:43 mavel-mojave jamf[8051]: Executing Policy WDAV @@ -221,7 +221,7 @@ You can monitor policy installation on a device by following the JAMF log file: You can also check the onboarding status: ```bash -$ mdatp --health +mdatp --health ... licensed : true orgId : "4751b7d4-ea75-4e8f-a1f5-6d640c65bc45" @@ -237,7 +237,7 @@ orgId : "4751b7d4-ea75-4e8f-a1f5-6d640c65bc45" You can check that devices have been correctly onboarded by creating a script. For example, the following script checks enrolled devices for onboarding status: ```bash -$ mdatp --health healthy +mdatp --health healthy ``` The above command prints "1" if the product is onboarded and functioning as expected. From 223b7c58dc18b737c715fa66866dd2ec3af05424 Mon Sep 17 00:00:00 2001 From: JesseEsquivel <33558203+JesseEsquivel@users.noreply.github.com> Date: Thu, 30 Jul 2020 13:14:47 -0400 Subject: [PATCH 479/589] Update commercial-gov.md Linux is not currently supported in GCC high. --- .../threat-protection/microsoft-defender-atp/commercial-gov.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/commercial-gov.md b/windows/security/threat-protection/microsoft-defender-atp/commercial-gov.md index 0396320e6c..558f93dfb9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/commercial-gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/commercial-gov.md @@ -54,6 +54,7 @@ The following OS versions are not supported: - Windows 8 Pro - Windows 8.1 Enterprise - macOS +- Linux The initial release of Microsoft Defender ATP will not have immediate parity with the commercial offering. While our goal is to deliver all commercial features and functionality to our US Government (GCC High) customers, there are some capabilities not yet available that we'd like to highlight. These are the known gaps as of August 2019: From be6424a162873845158dc073cfeca2443ec3cd57 Mon Sep 17 00:00:00 2001 From: ms-adir <68929429+ms-adir@users.noreply.github.com> Date: Thu, 30 Jul 2020 20:36:52 +0300 Subject: [PATCH 480/589] Update commercial-gov.md Adding Linux to the list of unsupported OSs. --- .../threat-protection/microsoft-defender-atp/commercial-gov.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/commercial-gov.md b/windows/security/threat-protection/microsoft-defender-atp/commercial-gov.md index 0396320e6c..558f93dfb9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/commercial-gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/commercial-gov.md @@ -54,6 +54,7 @@ The following OS versions are not supported: - Windows 8 Pro - Windows 8.1 Enterprise - macOS +- Linux The initial release of Microsoft Defender ATP will not have immediate parity with the commercial offering. While our goal is to deliver all commercial features and functionality to our US Government (GCC High) customers, there are some capabilities not yet available that we'd like to highlight. These are the known gaps as of August 2019: From 15c2d08f65d49ee85968f17829fad3befd576c64 Mon Sep 17 00:00:00 2001 From: Louie Mayor Date: Thu, 30 Jul 2020 11:22:51 -0700 Subject: [PATCH 481/589] Update advanced-hunting-devicealertevents-table.md --- .../advanced-hunting-devicealertevents-table.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicealertevents-table.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicealertevents-table.md index d568ae26bb..cad9c6214b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicealertevents-table.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicealertevents-table.md @@ -43,6 +43,7 @@ For information on other tables in the advanced hunting schema, see [the advance | `SHA1` | string | SHA-1 of the file that the recorded action was applied to | | `RemoteUrl` | string | URL or fully qualified domain name (FQDN) that was being connected to | | `RemoteIP` | string | IP address that was being connected to | +| `AttackTechniques` | string | MITRE ATT&CK techniques associated with the activity that triggered the alert | | `ReportId` | long | Event identifier based on a repeating counter. To identify unique events, this column must be used in conjunction with the `DeviceName` and `Timestamp` columns | | `Table` | string | Table that contains the details of the event | From 9134e24e0deb9ecf90f5394837bcdf36907f60ca Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 30 Jul 2020 13:39:46 -0700 Subject: [PATCH 482/589] Update kernel-dma-protection-for-thunderbolt.md minor edits --- .../kernel-dma-protection-for-thunderbolt.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/information-protection/kernel-dma-protection-for-thunderbolt.md b/windows/security/information-protection/kernel-dma-protection-for-thunderbolt.md index c951585127..6ea046a8f3 100644 --- a/windows/security/information-protection/kernel-dma-protection-for-thunderbolt.md +++ b/windows/security/information-protection/kernel-dma-protection-for-thunderbolt.md @@ -117,9 +117,9 @@ If the peripherals do have class drivers provided by Windows 10, please use thes ### My system's Kernel DMA Protection is off. Can DMA-remapping for a specific device be turned on? -Yes. DMA remapping for a specific device can be turned on independent from Kernel DMA Protection. (i.e. if the driver opts in and VT-d is turned on, then DMA remapping will be enabled for the devices driver, even if Kernel DMA Protection is off). +Yes. DMA remapping for a specific device can be turned on independent from Kernel DMA Protection. For example, if the driver opts in and VT-d (Virtualization Technology for Directed I/O) is turned on, then DMA remapping will be enabled for the devices driver even if Kernel DMA Protection is turned off. -Kernel DMA Protection is a policy that allows/disallows devices to perform DMA, based on their remapping state/capabilities. +Kernel DMA Protection is a policy that allows or blocks devices to perform DMA, based on their remapping state and capabilities. ### Do Microsoft drivers support DMA-remapping? In Windows 10 1803 and beyond, the Microsoft inbox drivers for USB XHCI (3.x) Controllers, Storage AHCI/SATA Controllers and Storage NVMe Controllers support DMA Remapping. From 1d04cd0829ba18fbaeca6363e7b178bcc54ef906 Mon Sep 17 00:00:00 2001 From: Michael Niehaus Date: Thu, 30 Jul 2020 13:42:55 -0700 Subject: [PATCH 483/589] Update add-devices.md Added additional notes to help clarify that OEMs and partners shouldn't be providing hardware hashes to customers. --- windows/deployment/windows-autopilot/add-devices.md | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/add-devices.md b/windows/deployment/windows-autopilot/add-devices.md index cb55dd325b..6105b5ae0f 100644 --- a/windows/deployment/windows-autopilot/add-devices.md +++ b/windows/deployment/windows-autopilot/add-devices.md @@ -31,6 +31,9 @@ When you purchase devices directly from an OEM, that OEM can automatically regis Before an OEM can register devices on behalf of an organization, the organization must grant the OEM permission to do so. This process is initiated by the OEM, with approval granted by an Azure AD global administrator from the organization. See the "Customer Consent" section of the [Customer consent page](https://docs.microsoft.com/windows/deployment/windows-autopilot/registration-auth#oem-authorization). +> [!Note] +> While the hardware hashes are generated as part of the OEM device manufacturing process, these should not be provided directly to customers or CSP partners. Instead, the OEM should register devices on the customer's behalf. In cases where devices are being registered by CSP partners, OEMs may provide PKID information to those partners to support the device registration process. + ## Reseller, distributor, or partner registration Customers may purchase devices from resellers, distributors, or other partners. As long as these resellers, distributors, and partners are part of the [Cloud Solution Partners (CSP) program](https://partner.microsoft.com/en-us/cloud-solution-provider), they too can register devices on behalf of the customer. @@ -39,6 +42,9 @@ As with OEMs, CSP partners must be granted permission to register devices on beh Windows Autopilot does not require delegated administrator permissions when establishing the relationship between the CSP partner and the organization. As part of the approval process performed by the global administrator, the global administrator can choose to uncheck the "Include delegated administration permissions" checkbox. +> [!Note] +> While resellers, distributors, or partners could boot each new Windows device to obtain the hardware hash (for purposes of providing them to customers or direct registration by the partner), this is not recommended. Instead, these partners should register devices using the PKID information obtained from the device packaging (barcode) or obtained electronically from the OEM or upstream partner (e.g. distributor). + ## Automatic registration of existing devices If an existing device is already running a supported version of Windows 10 semi-annual channel and enrolled in an MDM service such an Intune, that MDM service can ask the device for the hardware ID (also known as a hardware hash). Once it has that, it can automatically register the device with Windows Autopilot. @@ -51,6 +57,9 @@ Also note that when using the [Windows Autopilot for existing devices](https://d To perform manual registration of a device, you must first capture its hardware ID (also known as a hardware hash). Once this process has completed, the resulting hardware ID can be uploaded to the Windows Autopilot service. Because this process requires booting the device into Windows 10 in order to obtain the hardware ID, this is intended primarily for testing and evaluation scenarios. +> [!Note] +> Customers can only register devices with a hardware hash. Other methods (PKID, tuple) are available through OEMs or CSP partners as described in the previous sections. + ## Device identification To define a device to the Windows Autopilot deployment service, a unique hardware ID for the device needs to be captured and uploaded to the service. While this step is ideally done by the hardware vendor (OEM, reseller, or distributor), automatically associating the device with an organization, it is also possible to do this through a harvesting process that collects the device from within a running Windows 10 installation. @@ -172,4 +181,4 @@ When deploying new devices using Windows Autopilot, the following steps are requ ## Other configuration settings -- [Bitlocker encryption settings](bitlocker.md): You can configure the BitLocker encryption settings to be applied before automatic encryption is started. \ No newline at end of file +- [Bitlocker encryption settings](bitlocker.md): You can configure the BitLocker encryption settings to be applied before automatic encryption is started. From 29b7702a6a2f6c1337495b3564deb8ef09626b5d Mon Sep 17 00:00:00 2001 From: Kelly Baker Date: Thu, 30 Jul 2020 15:11:44 -0700 Subject: [PATCH 484/589] Fix warning in sync PR --- windows/deployment/windows-autopilot/add-devices.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/windows-autopilot/add-devices.md b/windows/deployment/windows-autopilot/add-devices.md index 6105b5ae0f..24429cf361 100644 --- a/windows/deployment/windows-autopilot/add-devices.md +++ b/windows/deployment/windows-autopilot/add-devices.md @@ -36,9 +36,9 @@ Before an OEM can register devices on behalf of an organization, the organizatio ## Reseller, distributor, or partner registration -Customers may purchase devices from resellers, distributors, or other partners. As long as these resellers, distributors, and partners are part of the [Cloud Solution Partners (CSP) program](https://partner.microsoft.com/en-us/cloud-solution-provider), they too can register devices on behalf of the customer. +Customers may purchase devices from resellers, distributors, or other partners. As long as these resellers, distributors, and partners are part of the [Cloud Solution Partners (CSP) program](https://partner.microsoft.com/cloud-solution-provider), they too can register devices on behalf of the customer. -As with OEMs, CSP partners must be granted permission to register devices on behalf of an organization. This follows the process described on the [Customer consent page](https://docs.microsoft.com/windows/deployment/windows-autopilot/registration-auth#csp-authorization). The CSP partner initiates a request to establish a relationship with the organization, with approval granted by a global administrator from the organization. Once approved, CSP partners add devices using [Partner Center](https://partner.microsoft.com/en-us/pcv/dashboard/overview), either directly through the web site or via available APIs that can automate the same tasks. +As with OEMs, CSP partners must be granted permission to register devices on behalf of an organization. This follows the process described on the [Customer consent page](https://docs.microsoft.com/windows/deployment/windows-autopilot/registration-auth#csp-authorization). The CSP partner initiates a request to establish a relationship with the organization, with approval granted by a global administrator from the organization. Once approved, CSP partners add devices using [Partner Center](https://partner.microsoft.com/pcv/dashboard/overview), either directly through the web site or via available APIs that can automate the same tasks. Windows Autopilot does not require delegated administrator permissions when establishing the relationship between the CSP partner and the organization. As part of the approval process performed by the global administrator, the global administrator can choose to uncheck the "Include delegated administration permissions" checkbox. From 5195ff7a7c5c7014c18e8be03ae0d44b3d32b979 Mon Sep 17 00:00:00 2001 From: ashwin-pr <66497769+ashwin-pr@users.noreply.github.com> Date: Fri, 31 Jul 2020 16:12:47 +0530 Subject: [PATCH 485/589] Update android-intune.md Fixed a few broken URLs --- .../microsoft-defender-atp/android-intune.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/android-intune.md b/windows/security/threat-protection/microsoft-defender-atp/android-intune.md index 42d75ed3b8..d2f56eeeb1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/android-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/android-intune.md @@ -26,7 +26,7 @@ ms.topic: conceptual This topic describes deploying Microsoft Defender ATP for Android on Intune Company Portal enrolled devices. For more information about Intune device enrollment, see [Enroll your -device](https://microsoft.sharepoint.com/teams/WDATPIndia/Shared%20Documents/General/PM%20Docs/External%20Documentation/aka.ms/enrollAndroid). +device](https://docs.microsoft.com/mem/intune/user-help/enroll-device-android-company-portal). > [!NOTE] @@ -45,7 +45,7 @@ This topic describes how to deploy Microsoft Defender ATP for Android on Intune Download the onboarding package from Microsoft Defender Security Center. 1. In [Microsoft Defender Security -Center](https://microsoft.sharepoint.com/teams/WDATPIndia/Shared%20Documents/General/PM%20Docs/External%20Documentation/securitycenter.microsoft.com), go to **Settings** \> **Machine Management** \> **Onboarding**. +Center](https://securitycenter.microsoft.com), go to **Settings** \> **Machine Management** \> **Onboarding**. 2. In the first drop-down, select **Android** as the Operating system. @@ -283,7 +283,7 @@ and then your onboarding should be successful. 4. At this stage the device is successfully onboarded onto Microsoft Defender ATP for Android. You can verify this on the [Microsoft Defender Security -Center](https://microsoft.sharepoint.com/teams/WDATPIndia/Shared%20Documents/General/PM%20Docs/External%20Documentation/securitycenter.microsoft.com) +Center](https://securitycenter.microsoft.com) by navigating to the **Devices** page. ![Image of Microsoft Defender ATP portal](images/9fe378a1dce0f143005c3aa53d8c4f51.png) From d1f2faf7cc58d36293350943bcd3954081fb6d59 Mon Sep 17 00:00:00 2001 From: ashwin-pr <66497769+ashwin-pr@users.noreply.github.com> Date: Fri, 31 Jul 2020 16:27:24 +0530 Subject: [PATCH 486/589] Update android-configure.md Added note on VPN usage in web protection --- .../microsoft-defender-atp/android-configure.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/android-configure.md b/windows/security/threat-protection/microsoft-defender-atp/android-configure.md index dc28afd7dc..92405839bb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/android-configure.md +++ b/windows/security/threat-protection/microsoft-defender-atp/android-configure.md @@ -42,9 +42,11 @@ Microsoft Defender ATP for Android enables admins to configure custom indicators ## Configure web protection Microsoft Defender ATP for Android allows IT Administrators the ability to configure the web protection feature. This capability is available within the Microsoft Endpoint Manager Admin center. - +[!NOTE] +> Microsoft Defender ATP for Android would use a VPN in order to provide the Web Protection feature. This is not a regular VPN and is a local/self-looping VPN that does not take traffic outside the device. For more information, see [Configure web protection on devices that run Android](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection-manage-android). + ## Related topics - [Overview of Microsoft Defender ATP for Android](microsoft-defender-atp-android.md) - [Deploy Microsoft Defender ATP for Android with Microsoft Intune](android-intune.md) From d2840c09d1926bf87841adcca8858b0bdd3302aa Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 08:50:15 -0700 Subject: [PATCH 487/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index c6fb94903f..678b668c71 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -22,13 +22,14 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -After you have moved from your previous endpoint protection and antivirus solution to Microsoft Defender ATP, your next step is to manage your features and capabilities. We recommend using [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), which includes Intune and Configuration Manager, to manage your organization's devices and security settings. However, you can use other tools/methods, such as Group Policy Objects. +After you have moved from your previous endpoint protection and antivirus solution to Microsoft Defender ATP, your next step is to manage your features and capabilities. We recommend using [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), which includes [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) and [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction), to manage your organization's devices and security settings. However, you can use other tools/methods, such as [Group Policy Objects in Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy). The following table lists various tools/methods you can use, with links to learn more.

|Tool/Method |Description | |---------|---------| +|**[Threat and vulnerability management dashboard insights](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/tvm-dashboard-insights)** in the Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) |The threat & vulnerability management dashboard provides actionable information that your security operations team can use to reduce exposure and improve your organization's security posture.

See [Threat & vulnerability management](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt). | |**[Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune)** (recommended) |Microsoft Intune, a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), focuses on mobile device management (MDM) and mobile application management (MAM). With Intune, you control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications.

See [Manage Microsoft Defender ATP using Intune](manage-atp-post-migration-intune.md). | |**[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction)** |Configuration Manager, formerly known as System Center Configuration Manager, is a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). Configuration Manager is a powerful tool to manage your users, devices, and software.

See [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md). | |**[Group Policy Objects in Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy)** |[Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/overview) includes built-in Group Policy Objects for users and devices. You can customize the built-in Group Policy Objects as needed for your environment, as well as create custom Group Policy Objects and organizational units (OUs).

See [Manage Microsoft Defender ATP with Group Policy Objects](manage-atp-post-migration-group-policy-objects.md). | From 1bed55dba8bd17397d349de33af460754a6dec65 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 08:52:36 -0700 Subject: [PATCH 488/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index 678b668c71..ef1b840b47 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -29,7 +29,7 @@ The following table lists various tools/methods you can use, with links to learn |Tool/Method |Description | |---------|---------| -|**[Threat and vulnerability management dashboard insights](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/tvm-dashboard-insights)** in the Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) |The threat & vulnerability management dashboard provides actionable information that your security operations team can use to reduce exposure and improve your organization's security posture.

See [Threat & vulnerability management](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt). | +|**[Threat and vulnerability management dashboard insights](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/tvm-dashboard-insights)** in the Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) |The threat & vulnerability management dashboard provides actionable information that your security operations team can use to reduce exposure and improve your organization's security posture.

See [Threat & vulnerability management](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt) and [Overview of the Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use). | |**[Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune)** (recommended) |Microsoft Intune, a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), focuses on mobile device management (MDM) and mobile application management (MAM). With Intune, you control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications.

See [Manage Microsoft Defender ATP using Intune](manage-atp-post-migration-intune.md). | |**[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction)** |Configuration Manager, formerly known as System Center Configuration Manager, is a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). Configuration Manager is a powerful tool to manage your users, devices, and software.

See [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md). | |**[Group Policy Objects in Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy)** |[Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/overview) includes built-in Group Policy Objects for users and devices. You can customize the built-in Group Policy Objects as needed for your environment, as well as create custom Group Policy Objects and organizational units (OUs).

See [Manage Microsoft Defender ATP with Group Policy Objects](manage-atp-post-migration-group-policy-objects.md). | From 9e2c4b5647a915f4e5240c29b219219f895e027a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 08:54:15 -0700 Subject: [PATCH 489/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index ef1b840b47..831eb26632 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -30,8 +30,8 @@ The following table lists various tools/methods you can use, with links to learn |Tool/Method |Description | |---------|---------| |**[Threat and vulnerability management dashboard insights](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/tvm-dashboard-insights)** in the Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) |The threat & vulnerability management dashboard provides actionable information that your security operations team can use to reduce exposure and improve your organization's security posture.

See [Threat & vulnerability management](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt) and [Overview of the Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use). | -|**[Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune)** (recommended) |Microsoft Intune, a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), focuses on mobile device management (MDM) and mobile application management (MAM). With Intune, you control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications.

See [Manage Microsoft Defender ATP using Intune](manage-atp-post-migration-intune.md). | -|**[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction)** |Configuration Manager, formerly known as System Center Configuration Manager, is a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). Configuration Manager is a powerful tool to manage your users, devices, and software.

See [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md). | +|**[Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune)** (recommended) |Microsoft Intune (Intune), a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), focuses on mobile device management (MDM) and mobile application management (MAM). With Intune, you control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications.

See [Manage Microsoft Defender ATP using Intune](manage-atp-post-migration-intune.md). | +|**[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction)** |Microsoft Endpoint Configuration Manager (Configuration Manager), formerly known as System Center Configuration Manager, is a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). Configuration Manager is a powerful tool to manage your users, devices, and software.

See [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md). | |**[Group Policy Objects in Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy)** |[Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/overview) includes built-in Group Policy Objects for users and devices. You can customize the built-in Group Policy Objects as needed for your environment, as well as create custom Group Policy Objects and organizational units (OUs).

See [Manage Microsoft Defender ATP with Group Policy Objects](manage-atp-post-migration-group-policy-objects.md). | |**[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md)** |*We recommend using Intune, Configuration Manager, or Group Policy Objects to manage threat protection features on your organization's devices. However, you can configure some settings, such as Microsoft Defender Antivirus settings on individual devices (endpoints) with PowerShell, WMI, or the MPCmdRun.exe tool.*

You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. See [Configure Microsoft Defender ATP with PowerShell](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-powershell).

You can use Windows Management Instrumentation (WMI) to manage Microsoft Defender Antivirus and exclusions. See [Configure Microsoft Defender ATP with WMI](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi).

You can use the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to manage Microsoft Defender Antivirus and exclusions, as well as validate connections between your network and the cloud. See [Configure Microsoft Defender ATP with MPCmdRun.exe](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe). | From 06f50de5e8d4dd3d4ff2268ee3c9be4ec929b496 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 08:58:20 -0700 Subject: [PATCH 490/589] fixes per tech review --- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 2 +- .../microsoft-defender-atp/manage-atp-post-migration.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 4abc3360f7..623f638702 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -53,7 +53,7 @@ The following table lists various tasks you can perform to configure Microsoft D |**Use Conditional Access** to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | |**Configure Microsoft Defender Antivirus settings** using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus)

[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender) | |**If necessary, specify exclusions for Microsoft Defender Antivirus**

*Generally, you shouldn't need to apply exclusions. Microsoft Defender Antivirus includes a number of automatic exclusions based on known OS behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations.* |[Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows](https://support.microsoft.com/help/822158/virus-scanning-recommendations-for-enterprise-computers)

[Device restrictions: Microsoft Defender Antivirus Exclusions for Windows 10 devices](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions)

[Configure Microsoft Defender Antivirus exclusions on Windows Server 2016 or 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus)| -|**Configure your attack surface reduction rules** to target software behaviors that are often abused by attackers

*Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Audit mode in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender)

[Endpoint protection: Attack Surface Reduction](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json#attack-surface-reduction)

[Learn more about attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction) | +|**Configure your attack surface reduction rules** to target software behaviors that are often abused by attackers

*Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Audit mode in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender)

[Endpoint protection: Attack Surface Reduction](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json#attack-surface-reduction)

[Learn more about attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction)

[Tech Community blog post: Demystifying attack surface reduction rules - Part 1](https://techcommunity.microsoft.com/t5/microsoft-defender-atp/demystifying-attack-surface-reduction-rules-part-1/ba-p/1306420) | |**Configure your network filtering** to block outbound connections from any app to IP addresses or domains with low reputations

*Network filtering is also referred to as [network protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/network-protection).*

*Make sure that Windows 10 devices have the latest [antimalware platform updates](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform) installed.*|[Endpoint protection: Network filtering](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#network-filtering)

[Review network protection events in Windows Event Viewer](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection#review-network-protection-events-in-windows-event-viewer) | |**Configure controlled folder access** to protect against ransomware

*[Controlled folder access](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/controlled-folders) is also referred to as antiransomware protection.* |[Endpoint protection: Controlled folder access](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#controlled-folder-access)

[Enable controlled folder access in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#intune) | |**Configure exploit protection** to protect your organization's devices from malware that uses exploits to spread and infect other devices

*[Exploit protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/exploit-protection) is also referred to as Exploit Guard.* |[Endpoint protection: Microsoft Defender Exploit Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-exploit-guard)

[Enable exploit protection in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection#intune) | diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index 831eb26632..4dc33bb128 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -33,5 +33,5 @@ The following table lists various tools/methods you can use, with links to learn |**[Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune)** (recommended) |Microsoft Intune (Intune), a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), focuses on mobile device management (MDM) and mobile application management (MAM). With Intune, you control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications.

See [Manage Microsoft Defender ATP using Intune](manage-atp-post-migration-intune.md). | |**[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction)** |Microsoft Endpoint Configuration Manager (Configuration Manager), formerly known as System Center Configuration Manager, is a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). Configuration Manager is a powerful tool to manage your users, devices, and software.

See [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md). | |**[Group Policy Objects in Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy)** |[Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/overview) includes built-in Group Policy Objects for users and devices. You can customize the built-in Group Policy Objects as needed for your environment, as well as create custom Group Policy Objects and organizational units (OUs).

See [Manage Microsoft Defender ATP with Group Policy Objects](manage-atp-post-migration-group-policy-objects.md). | -|**[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md)** |*We recommend using Intune, Configuration Manager, or Group Policy Objects to manage threat protection features on your organization's devices. However, you can configure some settings, such as Microsoft Defender Antivirus settings on individual devices (endpoints) with PowerShell, WMI, or the MPCmdRun.exe tool.*

You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. See [Configure Microsoft Defender ATP with PowerShell](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-powershell).

You can use Windows Management Instrumentation (WMI) to manage Microsoft Defender Antivirus and exclusions. See [Configure Microsoft Defender ATP with WMI](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi).

You can use the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to manage Microsoft Defender Antivirus and exclusions, as well as validate connections between your network and the cloud. See [Configure Microsoft Defender ATP with MPCmdRun.exe](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe). | +|**[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md)** |*We recommend using Microsoft Endpoint Manager (which includes Intune and Configuration Manager) to manage threat protection features on your organization's devices. However, you can configure some settings, such as Microsoft Defender Antivirus settings on individual devices (endpoints) with PowerShell, WMI, or the MPCmdRun.exe tool.*

You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. See [Configure Microsoft Defender ATP with PowerShell](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-powershell).

You can use Windows Management Instrumentation (WMI) to manage Microsoft Defender Antivirus and exclusions. See [Configure Microsoft Defender ATP with WMI](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi).

You can use the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to manage Microsoft Defender Antivirus and exclusions, as well as validate connections between your network and the cloud. See [Configure Microsoft Defender ATP with MPCmdRun.exe](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe). | From 69b8fcb5740d5b2e1654f7475b0c64d6fd6191ce Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 09:01:44 -0700 Subject: [PATCH 491/589] Update manage-atp-post-migration-intune.md --- .../manage-atp-post-migration-intune.md | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 623f638702..45ade40e9f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -61,9 +61,18 @@ The following table lists various tasks you can perform to configure Microsoft D |**Configure Microsoft Defender Firewall** to block unauthorized network traffic flowing into or out of your organization's devices |[Endpoint protection: Microsoft Defender Firewall](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-firewall)

[Microsoft Defender Firewall with Advanced Security](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security) | |**Configure encryption and BitLocker** to protect information on your organization's devices running Windows |[Endpoint protection: Windows Encryption](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#windows-encryption)

[BitLocker for Windows 10 devices](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) | |**Configure Microsoft Defender Credential Guard** to protect against credential theft attacks |For Windows 10, Windows Server 2016, and Windows Server 2019, see [Endpoint protection: Microsoft Defender Credential Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-credential-guard)

For Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, and Windows Server 2012 R2, see [Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft, Version 1 and 2](https://www.microsoft.com/download/details.aspx?id=36036) | -|**Configure your Microsoft Defender Security Center** ([https://securitycenter.windows.com](https://securitycenter.windows.com)) to view alerts, configure threat protection features, and view detailed information about your organization's overall security posture.

*You can also configure whether and what features end users can see in the Microsoft Defender Security Center.* |[Overview of the Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use)

[Endpoint protection: Microsoft Defender Security Center](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-security-center) | |**Configure Microsoft Defender Application Control** to choose whether to audit or trust apps on your organization's devices

*Microsoft Defender Application Control is also referred to as [AppLocker](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview).*|[Deploy Microsoft Defender Application Control policies by using Microsoft Intune](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune)

[Endpoint protection: MIcrosoft Defender Application Control](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-application-control)

[AppLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/applocker-csp)| +## Configure your Microsoft Defender Security Center + +If you haven't already done so, **configure your Microsoft Defender Security Center** ([https://securitycenter.windows.com](https://securitycenter.windows.com)) to view alerts, configure threat protection features, and view detailed information about your organization's overall security posture. + +You can also configure whether and what features end users can see in the Microsoft Defender Security Center. + +- [Overview of the Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use) + +- [Endpoint protection: Microsoft Defender Security Center](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-security-center) + ## Next steps - [Get an overview of threat and vulnerability management](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt) From 02fcb153a71864e1340b53d85f764133f56ca3f3 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 09:06:44 -0700 Subject: [PATCH 492/589] Update manage-atp-post-migration-intune.md --- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 45ade40e9f..3d9a877996 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -62,6 +62,7 @@ The following table lists various tasks you can perform to configure Microsoft D |**Configure encryption and BitLocker** to protect information on your organization's devices running Windows |[Endpoint protection: Windows Encryption](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#windows-encryption)

[BitLocker for Windows 10 devices](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) | |**Configure Microsoft Defender Credential Guard** to protect against credential theft attacks |For Windows 10, Windows Server 2016, and Windows Server 2019, see [Endpoint protection: Microsoft Defender Credential Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-credential-guard)

For Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, and Windows Server 2012 R2, see [Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft, Version 1 and 2](https://www.microsoft.com/download/details.aspx?id=36036) | |**Configure Microsoft Defender Application Control** to choose whether to audit or trust apps on your organization's devices

*Microsoft Defender Application Control is also referred to as [AppLocker](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview).*|[Deploy Microsoft Defender Application Control policies by using Microsoft Intune](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune)

[Endpoint protection: MIcrosoft Defender Application Control](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-application-control)

[AppLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/applocker-csp)| +|**Configure device control and USB peripherals access** to help prevent threats in unauthorized peripherals from compromising your devices |[Control USB devices and other removable media using Microsoft Defender ATP and Intune](https://docs.microsoft.com/en-us/windows/security/threat-protection/device-control/control-usb-devices-using-intune) | ## Configure your Microsoft Defender Security Center From 7c8f31d383801d6a0054e8e69047fbcfd356edd4 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 09:22:09 -0700 Subject: [PATCH 493/589] fixes per tech review --- ...age-atp-post-migration-configuration-manager.md | 14 +++++++++++++- ...nage-atp-post-migration-group-policy-objects.md | 13 ++++++++++++- 2 files changed, 25 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index 88a0383b79..b61f4e43c1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -22,7 +22,7 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). You can also use [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) to manage some settings in Microsoft Defender ATP. Both Configuration Manager and Microsoft Intune are part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), along with Desktop Analytics, and other features & capabilities. +We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) (Intune) to manage your organization's threat protection features for devices (also referred to as endpoints). You can also use [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) (Configuration Manager) to manage some settings in Microsoft Defender ATP. Both Configuration Manager and Microsoft Intune are part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), along with Desktop Analytics, and other features & capabilities. - [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview) - [Co-manage Microsoft Defender ATP on Windows 10 devices with Configuration Manager and Intune](manage-atp-post-migration-intune.md) @@ -34,6 +34,18 @@ We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fund |**Use Configuration Manager to onboard devices** to Microsoft Defender ATP

*If you have devices (or endpoints) not already onboarded to Microsoft Defender ATP, you can do that with Configuration Manager.* |[Onboard to Microsoft Defender ATP with Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection#about-onboarding-to-atp-with-configuration-manager) | |**Manage antimalware policies and Windows Firewall security** for client computers (endpoints)

*Configure endpoint protection features, including Microsoft Defender ATP, exploit protection, application control, antimalware, firewall settings, and more.* |[Configuration Manager: Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) | |**Choose methods for updating antimalware updates** on your organization's devices

*With Endpoint Protection in Configuration Manager, you can choose from several methods to keep antimalware definitions up to date on your organization's devices.* |[Configure definition updates for Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-definition-updates)

[Use Configuration Manager to deliver definition updates](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-definitions-configmgr) | +|**Enable Network Protection** to help prevent employees from using apps that malicious content on the Internet

*We recommend using [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection) at first for network protection in a test environment to see which apps would be blocked before rolling out.* |[Turn on network protection with Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-network-protection#microsoft-endpoint-configuration-manager) | +|**Configure controlled folder access** to protect against ransomware

*Controlled folder access is also referred to as antiransomware protection.* |[Endpoint protection: Controlled folder access](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#controlled-folder-access)

[Enable controlled folder access in Microsoft Endpoint Configuration Manage](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#microsoft-endpoint-configuration-manager) | + +## Configure your Microsoft Defender Security Center + +If you haven't already done so, **configure your Microsoft Defender Security Center** ([https://securitycenter.windows.com](https://securitycenter.windows.com)) to view alerts, configure threat protection features, and view detailed information about your organization's overall security posture. + +You can also configure whether and what features end users can see in the Microsoft Defender Security Center. + +- [Overview of the Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use) + +- [Endpoint protection: Microsoft Defender Security Center](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-security-center) ## Next steps diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md index 3f9b7d6e6c..8ab131365f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -23,7 +23,7 @@ ms.topic: article - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) > [!NOTE] -> We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). See [Manage Microsoft Defender ATP with Intune](manage-atp-post-migration-intune.md). +> We recommend using [Microsoft Endpoint Manager](https://docs.microsoft.com/mem) to manage your organization's threat protection features for devices (also referred to as endpoints). Endpoint Manager includes [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) and [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction). **[Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview)**. You can use Group Policy Objects in Azure Active Directory Domain Services to manage some settings in Microsoft Defender ATP. @@ -37,6 +37,17 @@ The following table lists various tasks you can perform to configure Microsoft D |**Configure Microsoft Defender Antivirus**

*Configure antivirus features & capabilities, including policy settings, exclusions, remediation, and scheduled scans on your organization's devices (also referred to as endpoints).* |[Use Group Policy settings to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus)

[Use Group Policy to enable cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus#use-group-policy-to-enable-cloud-delivered-protection) | |**Manage your organization's attack surface reduction rules**

*Customize your attack surface reduction rules by excluding files & folders, or by adding custom text to notification alerts that appear on a users' devices.* |[Customize attack surface reduction rules with Group Policy Objects](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-attack-surface-reduction#use-group-policy-to-exclude-files-and-folders) | |**Manage exploit protection settings**

*You can customize your exploit protection settings, import a configuration file, and then use Group Policy to deploy that configuration file.* |[Customize exploit protection settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection)

[Import, export, and deploy exploit protection configurations](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml)

[Use Group Policy to distribute the configuration](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml#use-group-policy-to-distribute-the-configuration) | +|**Enable Network Protection** to help prevent employees from using apps that malicious content on the Internet

*We recommend using [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection) at first for network protection in a test environment to see which apps would be blocked before rolling out.* | | + +## Configure your Microsoft Defender Security Center + +If you haven't already done so, **configure your Microsoft Defender Security Center** ([https://securitycenter.windows.com](https://securitycenter.windows.com)) to view alerts, configure threat protection features, and view detailed information about your organization's overall security posture. + +You can also configure whether and what features end users can see in the Microsoft Defender Security Center. + +- [Overview of the Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use) + +- [Endpoint protection: Microsoft Defender Security Center](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-security-center) ## Next steps From f4d4779938f69da99c4e72a3bba07b5a30b9983f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 09:24:04 -0700 Subject: [PATCH 494/589] Update manage-atp-post-migration-group-policy-objects.md --- .../manage-atp-post-migration-group-policy-objects.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md index 8ab131365f..a21257dae8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -37,7 +37,7 @@ The following table lists various tasks you can perform to configure Microsoft D |**Configure Microsoft Defender Antivirus**

*Configure antivirus features & capabilities, including policy settings, exclusions, remediation, and scheduled scans on your organization's devices (also referred to as endpoints).* |[Use Group Policy settings to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus)

[Use Group Policy to enable cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus#use-group-policy-to-enable-cloud-delivered-protection) | |**Manage your organization's attack surface reduction rules**

*Customize your attack surface reduction rules by excluding files & folders, or by adding custom text to notification alerts that appear on a users' devices.* |[Customize attack surface reduction rules with Group Policy Objects](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-attack-surface-reduction#use-group-policy-to-exclude-files-and-folders) | |**Manage exploit protection settings**

*You can customize your exploit protection settings, import a configuration file, and then use Group Policy to deploy that configuration file.* |[Customize exploit protection settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection)

[Import, export, and deploy exploit protection configurations](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml)

[Use Group Policy to distribute the configuration](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml#use-group-policy-to-distribute-the-configuration) | -|**Enable Network Protection** to help prevent employees from using apps that malicious content on the Internet

*We recommend using [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection) at first for network protection in a test environment to see which apps would be blocked before rolling out.* | | +|**Enable Network Protection** to help prevent employees from using apps that malicious content on the Internet

*We recommend using [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection) at first for network protection in a test environment to see which apps would be blocked before rolling out.* |[Turn on network protection using Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-network-protection#group-policy) | ## Configure your Microsoft Defender Security Center From 526831ee2e3f81a3dab5a1062f5881cb2a75ff99 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 09:27:54 -0700 Subject: [PATCH 495/589] Update manage-atp-post-migration-group-policy-objects.md --- .../manage-atp-post-migration-group-policy-objects.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md index a21257dae8..60966bfab9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -38,6 +38,8 @@ The following table lists various tasks you can perform to configure Microsoft D |**Manage your organization's attack surface reduction rules**

*Customize your attack surface reduction rules by excluding files & folders, or by adding custom text to notification alerts that appear on a users' devices.* |[Customize attack surface reduction rules with Group Policy Objects](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-attack-surface-reduction#use-group-policy-to-exclude-files-and-folders) | |**Manage exploit protection settings**

*You can customize your exploit protection settings, import a configuration file, and then use Group Policy to deploy that configuration file.* |[Customize exploit protection settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection)

[Import, export, and deploy exploit protection configurations](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml)

[Use Group Policy to distribute the configuration](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml#use-group-policy-to-distribute-the-configuration) | |**Enable Network Protection** to help prevent employees from using apps that malicious content on the Internet

*We recommend using [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection) at first for network protection in a test environment to see which apps would be blocked before rolling out.* |[Turn on network protection using Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-network-protection#group-policy) | +|**Configure controlled folder access** to protect against ransomware

*[Controlled folder access](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/controlled-folders) is also referred to as antiransomware protection.* |[Enable controlled folder access using Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#group-policy) | +|**Configure Microsoft Defender SmartScreen** to protect against malicious sites and files on the internet. |[Microsoft Defender SmartScreen Group Policy and mobile device management (MDM) settings: Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings#group-policy-settings) | ## Configure your Microsoft Defender Security Center From 2627595e5d594e6c6c181e2e86106f55c3032057 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 09:42:10 -0700 Subject: [PATCH 496/589] Update manage-atp-post-migration-group-policy-objects.md --- .../manage-atp-post-migration-group-policy-objects.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md index 60966bfab9..8be3abc883 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -39,7 +39,8 @@ The following table lists various tasks you can perform to configure Microsoft D |**Manage exploit protection settings**

*You can customize your exploit protection settings, import a configuration file, and then use Group Policy to deploy that configuration file.* |[Customize exploit protection settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection)

[Import, export, and deploy exploit protection configurations](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml)

[Use Group Policy to distribute the configuration](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml#use-group-policy-to-distribute-the-configuration) | |**Enable Network Protection** to help prevent employees from using apps that malicious content on the Internet

*We recommend using [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection) at first for network protection in a test environment to see which apps would be blocked before rolling out.* |[Turn on network protection using Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-network-protection#group-policy) | |**Configure controlled folder access** to protect against ransomware

*[Controlled folder access](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/controlled-folders) is also referred to as antiransomware protection.* |[Enable controlled folder access using Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#group-policy) | -|**Configure Microsoft Defender SmartScreen** to protect against malicious sites and files on the internet. |[Microsoft Defender SmartScreen Group Policy and mobile device management (MDM) settings: Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings#group-policy-settings) | +|**Configure Microsoft Defender SmartScreen** to protect against malicious sites and files on the internet. |[Configure Microsoft Defender SmartScreen Group Policy and mobile device management (MDM) settings using Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings#group-policy-settings) | + ## Configure your Microsoft Defender Security Center From 967cd12276203cd53002d836fb3a80c2112878d5 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 09:49:07 -0700 Subject: [PATCH 497/589] Update manage-atp-post-migration-group-policy-objects.md --- .../manage-atp-post-migration-group-policy-objects.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md index 8be3abc883..e1feabfbe4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -40,7 +40,8 @@ The following table lists various tasks you can perform to configure Microsoft D |**Enable Network Protection** to help prevent employees from using apps that malicious content on the Internet

*We recommend using [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection) at first for network protection in a test environment to see which apps would be blocked before rolling out.* |[Turn on network protection using Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-network-protection#group-policy) | |**Configure controlled folder access** to protect against ransomware

*[Controlled folder access](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/controlled-folders) is also referred to as antiransomware protection.* |[Enable controlled folder access using Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#group-policy) | |**Configure Microsoft Defender SmartScreen** to protect against malicious sites and files on the internet. |[Configure Microsoft Defender SmartScreen Group Policy and mobile device management (MDM) settings using Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings#group-policy-settings) | - +|**Configure encryption and BitLocker** to protect information on your organization's devices running Windows |[BitLocker Group Policy settings](https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings) | +|**Configure Microsoft Defender Credential Guard** to protect against credential theft attacks |[Enable Windows Defender Credential Guard by using Group Policy](https://docs.microsoft.com/windows/security/identity-protection/credential-guard/credential-guard-manage#enable-windows-defender-credential-guard-by-using-group-policy) | ## Configure your Microsoft Defender Security Center From 3e077b61a4acc2ea49e539641458791917a48c41 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 09:58:29 -0700 Subject: [PATCH 498/589] Update manage-atp-post-migration-other-tools.md --- .../manage-atp-post-migration-other-tools.md | 18 +++++++++++++++++- 1 file changed, 17 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index 4ea8ac68a7..390a13b85f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -41,7 +41,13 @@ You can use PowerShell to manage Microsoft Defender Antivirus, exploit protectio |---------|---------| |**Manage Microsoft Defender Antivirus**

*View status of antimalware protection, configure preferences for antivirus scans & updates, and make other changes to your antivirus protection.* |[Use PowerShell cmdlets to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus)

[Use PowerShell cmdlets to enable cloud-delivered protection](https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus#use-powershell-cmdlets-to-enable-cloud-delivered-protection) | |**Configure exploit protection** to mitigate threats on your organization's devices

*We recommend using exploit protection in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-exploit-protection#powershell) at first. That way, you can see how exploit protection affects apps your organization is using.* | [Customize exploit protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection)

[PowerShell cmdlets for exploit protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection#powershell-reference) | -|**Configure attack surface reduction rules** with PowerShell

*You can use PowerShell to exclude files and folders from attack surface reduction rules.* |[Customize attack surface reduction rules: Use PowerShell to exclude files & folders](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-attack-surface-reduction#use-powershell-to-exclude-files-and-folders) | +|**Configure attack surface reduction rules** with PowerShell

*You can use PowerShell to exclude files and folders from attack surface reduction rules.* |[Customize attack surface reduction rules: Use PowerShell to exclude files & folders](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-attack-surface-reduction#use-powershell-to-exclude-files-and-folders)

Also, see [António Vasconcelo's graphical user interface tool for setting attack surface reduction rules with PowerShell](https://github.com/anvascon/MDATP_PoSh_Scripts/tree/master/ASR%20GUI). | +|**Enable Network Protection** with PowerShell

*You can use PowerShell to enable Network Protection.* |[Turn on Network Protection with PowerShell](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-network-protection#powershell) | +|**Configure controlled folder access** to protect against ransomware

*[Controlled folder access](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/controlled-folders) is also referred to as antiransomware protection.* |[Enable controlled folder access with PowerShell](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#powershell) | +|**Configure Microsoft Defender Firewall** to block unauthorized network traffic flowing into or out of your organization's devices |[](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security-administration-with-windows-powershell) | +|**Configure encryption and BitLocker** to protect information on your organization's devices running Windows |[](https://docs.microsoft.com/powershell/module/bitlocker/?view=win10-ps) | + + ## Configure Microsoft Defender ATP with Windows Management Instrumentation (WMI) @@ -62,6 +68,16 @@ On an individual device, you can run a scan, start diagnostic tracing, check for |---------|---------| |**Manage Microsoft Defender Antivirus** |[Configure and manage Microsoft Defender Antivirus with mpcmdrun.exe](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus) | +## Configure your Microsoft Defender Security Center + +If you haven't already done so, **configure your Microsoft Defender Security Center** ([https://securitycenter.windows.com](https://securitycenter.windows.com)) to view alerts, configure threat protection features, and view detailed information about your organization's overall security posture. + +You can also configure whether and what features end users can see in the Microsoft Defender Security Center. + +- [Overview of the Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use) + +- [Endpoint protection: Microsoft Defender Security Center](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-security-center) + ## Next steps From 1457d67542c2de98d37757cb83fc19322202f384 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 10:06:09 -0700 Subject: [PATCH 499/589] Update manage-atp-post-migration-other-tools.md --- .../manage-atp-post-migration-other-tools.md | 9 +++------ 1 file changed, 3 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index 390a13b85f..c920b94b37 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -44,11 +44,8 @@ You can use PowerShell to manage Microsoft Defender Antivirus, exploit protectio |**Configure attack surface reduction rules** with PowerShell

*You can use PowerShell to exclude files and folders from attack surface reduction rules.* |[Customize attack surface reduction rules: Use PowerShell to exclude files & folders](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-attack-surface-reduction#use-powershell-to-exclude-files-and-folders)

Also, see [António Vasconcelo's graphical user interface tool for setting attack surface reduction rules with PowerShell](https://github.com/anvascon/MDATP_PoSh_Scripts/tree/master/ASR%20GUI). | |**Enable Network Protection** with PowerShell

*You can use PowerShell to enable Network Protection.* |[Turn on Network Protection with PowerShell](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-network-protection#powershell) | |**Configure controlled folder access** to protect against ransomware

*[Controlled folder access](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/controlled-folders) is also referred to as antiransomware protection.* |[Enable controlled folder access with PowerShell](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#powershell) | -|**Configure Microsoft Defender Firewall** to block unauthorized network traffic flowing into or out of your organization's devices |[](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security-administration-with-windows-powershell) | -|**Configure encryption and BitLocker** to protect information on your organization's devices running Windows |[](https://docs.microsoft.com/powershell/module/bitlocker/?view=win10-ps) | - - - +|**Configure Microsoft Defender Firewall** to block unauthorized network traffic flowing into or out of your organization's devices |[Microsoft Defender Firewall with Advanced Security Administration using Windows PowerShell](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security-administration-with-windows-powershell) | +|**Configure encryption and BitLocker** to protect information on your organization's devices running Windows |[BitLocker PowerShell reference guide](https://docs.microsoft.com/powershell/module/bitlocker/?view=win10-ps) | ## Configure Microsoft Defender ATP with Windows Management Instrumentation (WMI) @@ -57,7 +54,7 @@ WMI is a scripting interface that allows you to retrieve, modify, and update set |Task |Resources to learn more | |---------|---------| |**Enable cloud-delivered protection** on a device |[Use Windows Management Instruction (WMI) to enable cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus#use-windows-management-instruction-wmi-to-enable-cloud-delivered-protection) | -|**Retrieve, modify, and update settings** for Microsoft Defender Antivirus | [Use WMI to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-wmi-microsoft-defender-antivirus)

[Review the list of available WMI classes and example scripts](https://docs.microsoft.com/previous-versions/windows/desktop/defender/windows-defender-wmiv2-apis-portal) | +|**Retrieve, modify, and update settings** for Microsoft Defender Antivirus | [Use WMI to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-wmi-microsoft-defender-antivirus)

[Review the list of available WMI classes and example scripts](https://docs.microsoft.com/previous-versions/windows/desktop/defender/windows-defender-wmiv2-apis-portal)

Also see the archived [Windows Defender WMIv2 Provider reference information](https://docs.microsoft.com/previous-versions/windows/desktop/defender/windows-defender-wmiv2-apis-portal?redirectedfrom=MSDN) | ## Configure Microsoft Defender ATP with Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) From 4434672bae495ddd6e6fa76e65acec7e3550fd2e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 10:08:50 -0700 Subject: [PATCH 500/589] Update symantec-to-microsoft-defender-atp-onboard.md --- .../symantec-to-microsoft-defender-atp-onboard.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md index 974c635e5d..6c7c329a2e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md @@ -97,5 +97,4 @@ To do this, visit the Microsoft Defender ATP demo scenarios site ([https://demo. **Congratulations**! You have completed your [migration from Symantec to Microsoft Defender ATP](symantec-to-microsoft-defender-atp-migration.md#the-migration-process)! - [Visit your security operations dashboard](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard) in the Microsoft Defender Security Center ([https://aka.ms/MDATPportal](https://aka.ms/MDATPportal)). - -- To learn more about Microsoft Defender ATP and how to configure or adjust various features and capabilities, see [Microsoft Defender ATP documentation](https://docs.microsoft.com/windows/security/threat-protection). +- [Manage Microsoft Defender Advanced Threat Protection, post migration](manage-atp-post-migration.md). From c446c8346396c7004c422c1361e635d0368dd0e2 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 10:12:41 -0700 Subject: [PATCH 501/589] Update TOC.md --- windows/security/threat-protection/TOC.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 5383032564..ee3730fb83 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -326,7 +326,6 @@ ###### [Check activity details in Action center](microsoft-defender-atp/respond-file-alerts.md#check-activity-details-in-action-center) ###### [Download or collect file](microsoft-defender-atp/respond-file-alerts.md#download-or-collect-file) ###### [Deep analysis](microsoft-defender-atp/respond-file-alerts.md#deep-analysis) -###### [Submit files for analysis](microsoft-defender-atp/respond-file-alerts.md#submit-files-for-analysis) ###### [View deep analysis reports](microsoft-defender-atp/respond-file-alerts.md#view-deep-analysis-reports) ###### [Troubleshoot deep analysis](microsoft-defender-atp/respond-file-alerts.md#troubleshoot-deep-analysis) From 7c3775ee52ebd730e6613b455ed040faeda8f09e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 10:13:45 -0700 Subject: [PATCH 502/589] Update TOC.md --- windows/security/threat-protection/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index ee3730fb83..fa86eb0bc1 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -325,7 +325,7 @@ ###### [Consult a threat expert](microsoft-defender-atp/respond-file-alerts.md#consult-a-threat-expert) ###### [Check activity details in Action center](microsoft-defender-atp/respond-file-alerts.md#check-activity-details-in-action-center) ###### [Download or collect file](microsoft-defender-atp/respond-file-alerts.md#download-or-collect-file) -###### [Deep analysis](microsoft-defender-atp/respond-file-alerts.md#deep-analysis) +###### [[Deep analysis](microsoft-defender-atp/respond-file-alerts.md#deep-analysis)](#deep-analysismicrosoft-defender-atprespond-file-alertsmddeep-analysis) ###### [View deep analysis reports](microsoft-defender-atp/respond-file-alerts.md#view-deep-analysis-reports) ###### [Troubleshoot deep analysis](microsoft-defender-atp/respond-file-alerts.md#troubleshoot-deep-analysis) From c5cfc089326fc13b905249e5ce65bea6421c81ad Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 10:15:50 -0700 Subject: [PATCH 503/589] fixing build error reports --- .../manage-atp-post-migration-group-policy-objects.md | 2 +- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 2 +- .../manage-atp-post-migration-other-tools.md | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md index e1feabfbe4..9cee59b503 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -40,7 +40,7 @@ The following table lists various tasks you can perform to configure Microsoft D |**Enable Network Protection** to help prevent employees from using apps that malicious content on the Internet

*We recommend using [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection) at first for network protection in a test environment to see which apps would be blocked before rolling out.* |[Turn on network protection using Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-network-protection#group-policy) | |**Configure controlled folder access** to protect against ransomware

*[Controlled folder access](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/controlled-folders) is also referred to as antiransomware protection.* |[Enable controlled folder access using Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#group-policy) | |**Configure Microsoft Defender SmartScreen** to protect against malicious sites and files on the internet. |[Configure Microsoft Defender SmartScreen Group Policy and mobile device management (MDM) settings using Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings#group-policy-settings) | -|**Configure encryption and BitLocker** to protect information on your organization's devices running Windows |[BitLocker Group Policy settings](https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings) | +|**Configure encryption and BitLocker** to protect information on your organization's devices running Windows |[BitLocker Group Policy settings](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings) | |**Configure Microsoft Defender Credential Guard** to protect against credential theft attacks |[Enable Windows Defender Credential Guard by using Group Policy](https://docs.microsoft.com/windows/security/identity-protection/credential-guard/credential-guard-manage#enable-windows-defender-credential-guard-by-using-group-policy) | ## Configure your Microsoft Defender Security Center diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 3d9a877996..32b597f11b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -62,7 +62,7 @@ The following table lists various tasks you can perform to configure Microsoft D |**Configure encryption and BitLocker** to protect information on your organization's devices running Windows |[Endpoint protection: Windows Encryption](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#windows-encryption)

[BitLocker for Windows 10 devices](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) | |**Configure Microsoft Defender Credential Guard** to protect against credential theft attacks |For Windows 10, Windows Server 2016, and Windows Server 2019, see [Endpoint protection: Microsoft Defender Credential Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-credential-guard)

For Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, and Windows Server 2012 R2, see [Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft, Version 1 and 2](https://www.microsoft.com/download/details.aspx?id=36036) | |**Configure Microsoft Defender Application Control** to choose whether to audit or trust apps on your organization's devices

*Microsoft Defender Application Control is also referred to as [AppLocker](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview).*|[Deploy Microsoft Defender Application Control policies by using Microsoft Intune](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune)

[Endpoint protection: MIcrosoft Defender Application Control](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-application-control)

[AppLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/applocker-csp)| -|**Configure device control and USB peripherals access** to help prevent threats in unauthorized peripherals from compromising your devices |[Control USB devices and other removable media using Microsoft Defender ATP and Intune](https://docs.microsoft.com/en-us/windows/security/threat-protection/device-control/control-usb-devices-using-intune) | +|**Configure device control and USB peripherals access** to help prevent threats in unauthorized peripherals from compromising your devices |[Control USB devices and other removable media using Microsoft Defender ATP and Intune](https://docs.microsoft.com/windows/security/threat-protection/device-control/control-usb-devices-using-intune) | ## Configure your Microsoft Defender Security Center diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index c920b94b37..277cc9bfb9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -39,7 +39,7 @@ You can use PowerShell to manage Microsoft Defender Antivirus, exploit protectio |Task |Resources to learn more | |---------|---------| -|**Manage Microsoft Defender Antivirus**

*View status of antimalware protection, configure preferences for antivirus scans & updates, and make other changes to your antivirus protection.* |[Use PowerShell cmdlets to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus)

[Use PowerShell cmdlets to enable cloud-delivered protection](https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus#use-powershell-cmdlets-to-enable-cloud-delivered-protection) | +|**Manage Microsoft Defender Antivirus**

*View status of antimalware protection, configure preferences for antivirus scans & updates, and make other changes to your antivirus protection.* |[Use PowerShell cmdlets to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus)

[Use PowerShell cmdlets to enable cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus#use-powershell-cmdlets-to-enable-cloud-delivered-protection) | |**Configure exploit protection** to mitigate threats on your organization's devices

*We recommend using exploit protection in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-exploit-protection#powershell) at first. That way, you can see how exploit protection affects apps your organization is using.* | [Customize exploit protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection)

[PowerShell cmdlets for exploit protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection#powershell-reference) | |**Configure attack surface reduction rules** with PowerShell

*You can use PowerShell to exclude files and folders from attack surface reduction rules.* |[Customize attack surface reduction rules: Use PowerShell to exclude files & folders](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-attack-surface-reduction#use-powershell-to-exclude-files-and-folders)

Also, see [António Vasconcelo's graphical user interface tool for setting attack surface reduction rules with PowerShell](https://github.com/anvascon/MDATP_PoSh_Scripts/tree/master/ASR%20GUI). | |**Enable Network Protection** with PowerShell

*You can use PowerShell to enable Network Protection.* |[Turn on Network Protection with PowerShell](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-network-protection#powershell) | From 1444461279695a180b17d5ef92b11003d4c0db0b Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 10:22:21 -0700 Subject: [PATCH 504/589] Update TOC.md --- windows/security/threat-protection/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index fa86eb0bc1..ee3730fb83 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -325,7 +325,7 @@ ###### [Consult a threat expert](microsoft-defender-atp/respond-file-alerts.md#consult-a-threat-expert) ###### [Check activity details in Action center](microsoft-defender-atp/respond-file-alerts.md#check-activity-details-in-action-center) ###### [Download or collect file](microsoft-defender-atp/respond-file-alerts.md#download-or-collect-file) -###### [[Deep analysis](microsoft-defender-atp/respond-file-alerts.md#deep-analysis)](#deep-analysismicrosoft-defender-atprespond-file-alertsmddeep-analysis) +###### [Deep analysis](microsoft-defender-atp/respond-file-alerts.md#deep-analysis) ###### [View deep analysis reports](microsoft-defender-atp/respond-file-alerts.md#view-deep-analysis-reports) ###### [Troubleshoot deep analysis](microsoft-defender-atp/respond-file-alerts.md#troubleshoot-deep-analysis) From 0c12a92e71502aac020cf834fccada9cd09f7004 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 10:25:51 -0700 Subject: [PATCH 505/589] Update TOC.md --- windows/security/threat-protection/TOC.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index ee3730fb83..0ab3a24248 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -326,8 +326,6 @@ ###### [Check activity details in Action center](microsoft-defender-atp/respond-file-alerts.md#check-activity-details-in-action-center) ###### [Download or collect file](microsoft-defender-atp/respond-file-alerts.md#download-or-collect-file) ###### [Deep analysis](microsoft-defender-atp/respond-file-alerts.md#deep-analysis) -###### [View deep analysis reports](microsoft-defender-atp/respond-file-alerts.md#view-deep-analysis-reports) -###### [Troubleshoot deep analysis](microsoft-defender-atp/respond-file-alerts.md#troubleshoot-deep-analysis) #### [View and approve remediation actions](microsoft-defender-atp/manage-auto-investigation.md) ##### [View details and results of automated investigations](microsoft-defender-atp/auto-investigation-action-center.md) From 5144dbeff660f275a823f90816bfcefb01ab5816 Mon Sep 17 00:00:00 2001 From: BradL-Msft <49081806+BradL-Msft@users.noreply.github.com> Date: Fri, 31 Jul 2020 10:35:41 -0700 Subject: [PATCH 506/589] Update trusted-platform-module-services-group-policy-settings.md Fix description of OwnerAuthFull for OsManagedAuthLevel = Full --- .../trusted-platform-module-services-group-policy-settings.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/tpm/trusted-platform-module-services-group-policy-settings.md b/windows/security/information-protection/tpm/trusted-platform-module-services-group-policy-settings.md index 94634c4b79..d94485704c 100644 --- a/windows/security/information-protection/tpm/trusted-platform-module-services-group-policy-settings.md +++ b/windows/security/information-protection/tpm/trusted-platform-module-services-group-policy-settings.md @@ -41,7 +41,7 @@ This policy setting configured which TPM authorization values are stored in the |--------------|---------------|---------|-----------------|-----------------|------------------| | OwnerAuthAdmin | StorageOwnerAuth | Create SRK | No | Yes | Yes | | OwnerAuthEndorsement | EndorsementAuth | Create or use EK (1.2 only: Create AIK) | No | Yes | Yes | -| OwnerAuthFull | LockoutAuth | Reset/change Dictionary Attack Protection | No | No | No | +| OwnerAuthFull | LockoutAuth | Reset/change Dictionary Attack Protection | No | No | Yes | There are three TPM owner authentication settings that are managed by the Windows operating system. You can choose a value of **Full**, **Delegate**, or **None**. From 213d57311ec8c54984148920fc41a8d0e8031e46 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 11:04:26 -0700 Subject: [PATCH 507/589] Update TOC.md --- windows/security/threat-protection/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 0ab3a24248..c9f8c972e8 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -115,7 +115,7 @@ #### [Configure next-generation protection]() ##### [Configure Microsoft Defender Antivirus features](microsoft-defender-antivirus/configure-microsoft-defender-antivirus-features.md) -##### [Utilize Microsoft cloud-delivered protection](microsoft-defender-antivirus/utilize-microsoft-cloud-protection-microsoft-defender-antivirus.md) +##### [Use Microsoft cloud-delivered protection](microsoft-defender-antivirus/utilize-microsoft-cloud-protection-microsoft-defender-antivirus.md) ###### [Enable cloud-delivered protection](microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus.md) ###### [Specify the cloud-delivered protection level](microsoft-defender-antivirus/specify-cloud-protection-level-microsoft-defender-antivirus.md) ###### [Configure and validate network connections](microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md) From 47b3051fd219a3ab93c1f869fcfcf66a4441e08e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 11:05:06 -0700 Subject: [PATCH 508/589] Update TOC.md --- windows/security/threat-protection/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index c9f8c972e8..2ec2e30055 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -199,7 +199,7 @@ ##### [Manage next-generation protection in your business]() ###### [Handle false positives/negatives in Microsoft Defender Antivirus](microsoft-defender-antivirus/antivirus-false-positives-negatives.md) ###### [Management overview](microsoft-defender-antivirus/configuration-management-reference-microsoft-defender-antivirus.md) -###### [Use Microsoft Intune and Microsoft Endpoint Configuration Manager to manage next generation protection](microsoft-defender-antivirus/use-intune-config-manager-microsoft-defender-antivirus.md) +###### [Use Microsoft Intune and Microsoft Endpoint Configuration Manager to manage next-generation protection](microsoft-defender-antivirus/use-intune-config-manager-microsoft-defender-antivirus.md) ###### [Use Group Policy settings to manage next generation protection](microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus.md) ###### [Use PowerShell cmdlets to manage next generation protection](microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md) ###### [Use Windows Management Instrumentation (WMI) to manage next generation protection](microsoft-defender-antivirus/use-wmi-microsoft-defender-antivirus.md) From 8afb6caa444c8683584e7b959f37edd06c256e53 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 11:06:33 -0700 Subject: [PATCH 509/589] Update TOC.md --- windows/security/threat-protection/TOC.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 2ec2e30055..755a490fbd 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -200,10 +200,10 @@ ###### [Handle false positives/negatives in Microsoft Defender Antivirus](microsoft-defender-antivirus/antivirus-false-positives-negatives.md) ###### [Management overview](microsoft-defender-antivirus/configuration-management-reference-microsoft-defender-antivirus.md) ###### [Use Microsoft Intune and Microsoft Endpoint Configuration Manager to manage next-generation protection](microsoft-defender-antivirus/use-intune-config-manager-microsoft-defender-antivirus.md) -###### [Use Group Policy settings to manage next generation protection](microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus.md) -###### [Use PowerShell cmdlets to manage next generation protection](microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md) -###### [Use Windows Management Instrumentation (WMI) to manage next generation protection](microsoft-defender-antivirus/use-wmi-microsoft-defender-antivirus.md) -###### [Use the mpcmdrun.exe command line tool to manage next generation protection](microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus.md) +###### [Use Group Policy settings to manage next-generation protection](microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus.md) +###### [Use PowerShell cmdlets to manage next-generation protection](microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md) +###### [Use Windows Management Instrumentation (WMI) to manage next-generation protection](microsoft-defender-antivirus/use-wmi-microsoft-defender-antivirus.md) +###### [Use the mpcmdrun.exe command line tool to manage next-generation protection](microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus.md) #### [Better together: Microsoft Defender Antivirus and Microsoft Defender ATP](microsoft-defender-antivirus/why-use-microsoft-defender-antivirus.md) @@ -308,8 +308,8 @@ ##### [Take response actions on a device]() ###### [Response actions on devices](microsoft-defender-atp/respond-machine-alerts.md) ###### [Manage tags](microsoft-defender-atp/respond-machine-alerts.md#manage-tags) -###### [Initiate an automated investigation](microsoft-defender-atp/respond-machine-alerts.md#initiate-automated-investigation) -###### [Initiate Live Response session](microsoft-defender-atp/respond-machine-alerts.md#initiate-live-response-session) +###### [Start an automated investigation](microsoft-defender-atp/respond-machine-alerts.md#initiate-automated-investigation) +###### [Start a Live Response session](microsoft-defender-atp/respond-machine-alerts.md#initiate-live-response-session) ###### [Collect investigation package](microsoft-defender-atp/respond-machine-alerts.md#collect-investigation-package-from-devices) ###### [Run antivirus scan](microsoft-defender-atp/respond-machine-alerts.md#run-microsoft-defender-antivirus-scan-on-devices) ###### [Restrict app execution](microsoft-defender-atp/respond-machine-alerts.md#restrict-app-execution) From 2728b7d4e52122bad4450f528e4a2c29b9436e4e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 11:08:29 -0700 Subject: [PATCH 510/589] Update TOC.md --- windows/security/threat-protection/TOC.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 755a490fbd..245796abc4 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -425,7 +425,7 @@ #### [Ensure your devices are configured properly](microsoft-defender-atp/configure-machines.md) #### [Monitor and increase device onboarding](microsoft-defender-atp/configure-machines-onboarding.md) #### [Increase compliance to the security baseline](microsoft-defender-atp/configure-machines-security-baseline.md) -#### [Optimize ASR rule deployment and detections](microsoft-defender-atp/configure-machines-asr.md) +#### [Optimize attack surface reduction rule deployment and detections](microsoft-defender-atp/configure-machines-asr.md) ### [Configure portal settings]() #### [Set up preferences](microsoft-defender-atp/preferences-setup.md) @@ -1218,7 +1218,7 @@ ###### [System cryptography: Force strong key protection for user keys stored on the computer](security-policy-settings/system-cryptography-force-strong-key-protection-for-user-keys-stored-on-the-computer.md) ###### [System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing](security-policy-settings/system-cryptography-use-fips-compliant-algorithms-for-encryption-hashing-and-signing.md) ###### [System objects: Require case insensitivity for non-Windows subsystems](security-policy-settings/system-objects-require-case-insensitivity-for-non-windows-subsystems.md) -###### [System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)](security-policy-settings/system-objects-strengthen-default-permissions-of-internal-system-objects.md) +###### [System objects: Strengthen default permissions of internal system objects (Symbolic Links)](security-policy-settings/system-objects-strengthen-default-permissions-of-internal-system-objects.md) ###### [System settings: Optional subsystems](security-policy-settings/system-settings-optional-subsystems.md) ###### [System settings: Use certificate rules on Windows executables for Software Restriction Policies](security-policy-settings/system-settings-use-certificate-rules-on-windows-executables-for-software-restriction-policies.md) ###### [User Account Control: Admin Approval Mode for the Built-in Administrator account](security-policy-settings/user-account-control-admin-approval-mode-for-the-built-in-administrator-account.md) From b013cff1cdb7ca7e6db6c4fde17d870ceb6383ba Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 11:09:37 -0700 Subject: [PATCH 511/589] Update TOC.md --- windows/security/threat-protection/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 245796abc4..0d071ba0be 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -825,7 +825,7 @@ ####### [Event 4765 S: SID History was added to an account.](auditing/event-4765.md) ####### [Event 4766 F: An attempt to add SID History to an account failed.](auditing/event-4766.md) ####### [Event 4767 S: A user account was unlocked.](auditing/event-4767.md) -####### [Event 4780 S: The ACL was set on accounts which are members of administrators groups.](auditing/event-4780.md) +####### [Event 4780 S: The ACL was set on accounts that are members of administrators groups.](auditing/event-4780.md) ####### [Event 4781 S: The name of an account was changed.](auditing/event-4781.md) ####### [Event 4794 S, F: An attempt was made to set the Directory Services Restore Mode administrator password.](auditing/event-4794.md) ####### [Event 4798 S: A user's local group membership was enumerated.](auditing/event-4798.md) From 83dedc9dab3fc026f90c4e539365da19ed803ece Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 11:11:04 -0700 Subject: [PATCH 512/589] Update manage-atp-post-migration.md --- .../microsoft-defender-atp/manage-atp-post-migration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md index 4dc33bb128..f716c99579 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration.md @@ -33,5 +33,5 @@ The following table lists various tools/methods you can use, with links to learn |**[Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune)** (recommended) |Microsoft Intune (Intune), a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview), focuses on mobile device management (MDM) and mobile application management (MAM). With Intune, you control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications.

See [Manage Microsoft Defender ATP using Intune](manage-atp-post-migration-intune.md). | |**[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction)** |Microsoft Endpoint Configuration Manager (Configuration Manager), formerly known as System Center Configuration Manager, is a component of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). Configuration Manager is a powerful tool to manage your users, devices, and software.

See [Manage Microsoft Defender ATP with Configuration Manager](manage-atp-post-migration-configuration-manager.md). | |**[Group Policy Objects in Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy)** |[Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services/overview) includes built-in Group Policy Objects for users and devices. You can customize the built-in Group Policy Objects as needed for your environment, as well as create custom Group Policy Objects and organizational units (OUs).

See [Manage Microsoft Defender ATP with Group Policy Objects](manage-atp-post-migration-group-policy-objects.md). | -|**[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md)** |*We recommend using Microsoft Endpoint Manager (which includes Intune and Configuration Manager) to manage threat protection features on your organization's devices. However, you can configure some settings, such as Microsoft Defender Antivirus settings on individual devices (endpoints) with PowerShell, WMI, or the MPCmdRun.exe tool.*

You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. See [Configure Microsoft Defender ATP with PowerShell](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-powershell).

You can use Windows Management Instrumentation (WMI) to manage Microsoft Defender Antivirus and exclusions. See [Configure Microsoft Defender ATP with WMI](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi).

You can use the Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) to manage Microsoft Defender Antivirus and exclusions, as well as validate connections between your network and the cloud. See [Configure Microsoft Defender ATP with MPCmdRun.exe](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe). | +|**[PowerShell, WMI, and MPCmdRun.exe](manage-atp-post-migration-other-tools.md)** |*We recommend using Microsoft Endpoint Manager (which includes Intune and Configuration Manager) to manage threat protection features on your organization's devices. However, you can configure some settings, such as Microsoft Defender Antivirus settings on individual devices (endpoints) with PowerShell, WMI, or the MPCmdRun.exe tool.*

You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules. See [Configure Microsoft Defender ATP with PowerShell](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-powershell).

You can use Windows Management Instrumentation (WMI) to manage Microsoft Defender Antivirus and exclusions. See [Configure Microsoft Defender ATP with WMI](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi).

You can use the Microsoft Malware Protection Command-Line Utility (MPCmdRun.exe) to manage Microsoft Defender Antivirus and exclusions, as well as validate connections between your network and the cloud. See [Configure Microsoft Defender ATP with MPCmdRun.exe](manage-atp-post-migration-other-tools.md#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe). | From 1216e7fd8d977eab1d2cd0e773152a0cad5f0d5f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 11:11:56 -0700 Subject: [PATCH 513/589] Update manage-atp-post-migration-group-policy-objects.md --- .../manage-atp-post-migration-group-policy-objects.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md index 9cee59b503..1c62f92013 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -1,6 +1,6 @@ --- title: Manage Microsoft Defender ATP using Group Policy Objects -description: Learn how to manage Microsoft Defender ATP with PowerShell +description: Learn how to manage Microsoft Defender ATP with Group Policy Objects keywords: post-migration, manage, operations, maintenance, utilization, PowerShell, windows defender advanced threat protection, atp, edr search.product: eADQiWindows 10XVcnh search.appverid: met150 From 3d3a0949e1c713f870f4910c813bccfb3c5260ec Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 11:12:28 -0700 Subject: [PATCH 514/589] Update manage-atp-post-migration-group-policy-objects.md --- .../manage-atp-post-migration-group-policy-objects.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md index 1c62f92013..1e7317f3e8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-group-policy-objects.md @@ -35,7 +35,7 @@ The following table lists various tasks you can perform to configure Microsoft D |---------|---------| |**Manage settings for user and computer objects**

*Customize built-in Group Policy Objects, or create custom Group Policy Objects and organizational units to suit your organizational needs.* |[Administer Group Policy in an Azure Active Directory Domain Services managed domain](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy) | |**Configure Microsoft Defender Antivirus**

*Configure antivirus features & capabilities, including policy settings, exclusions, remediation, and scheduled scans on your organization's devices (also referred to as endpoints).* |[Use Group Policy settings to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus)

[Use Group Policy to enable cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus#use-group-policy-to-enable-cloud-delivered-protection) | -|**Manage your organization's attack surface reduction rules**

*Customize your attack surface reduction rules by excluding files & folders, or by adding custom text to notification alerts that appear on a users' devices.* |[Customize attack surface reduction rules with Group Policy Objects](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-attack-surface-reduction#use-group-policy-to-exclude-files-and-folders) | +|**Manage your organization's attack surface reduction rules**

*Customize your attack surface reduction rules by excluding files & folders, or by adding custom text to notification alerts that appear on users' devices.* |[Customize attack surface reduction rules with Group Policy Objects](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-attack-surface-reduction#use-group-policy-to-exclude-files-and-folders) | |**Manage exploit protection settings**

*You can customize your exploit protection settings, import a configuration file, and then use Group Policy to deploy that configuration file.* |[Customize exploit protection settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection)

[Import, export, and deploy exploit protection configurations](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml)

[Use Group Policy to distribute the configuration](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml#use-group-policy-to-distribute-the-configuration) | |**Enable Network Protection** to help prevent employees from using apps that malicious content on the Internet

*We recommend using [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection) at first for network protection in a test environment to see which apps would be blocked before rolling out.* |[Turn on network protection using Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-network-protection#group-policy) | |**Configure controlled folder access** to protect against ransomware

*[Controlled folder access](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/controlled-folders) is also referred to as antiransomware protection.* |[Enable controlled folder access using Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#group-policy) | From 27c1640d051e7a0fafb808f4a2c8eb8950db13dc Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 11:13:18 -0700 Subject: [PATCH 515/589] Update manage-atp-post-migration-intune.md --- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 32b597f11b..f73c304475 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -44,7 +44,7 @@ This article describes how to find your Microsoft Defender ATP settings in Intun ## Configure Microsoft Defender ATP with Intune -The following table lists various tasks you can perform to configure Microsoft Defender ATP with Intune. You don't have to configure everything all at once; choose a task, read the corresponding resources, and then proceed from there, at your pace. +The following table lists various tasks you can perform to configure Microsoft Defender ATP with Intune. You don't have to configure everything all at once; choose a task, read the corresponding resources, and then proceed from there. |Task |Resources to learn more | |---------|---------| From d5ed2bc71c9cc5d9b2ab2dd1f6237fdc27d29667 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 11:13:49 -0700 Subject: [PATCH 516/589] Update manage-atp-post-migration-intune.md --- .../manage-atp-post-migration-intune.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index f73c304475..2dfb129024 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -44,7 +44,7 @@ This article describes how to find your Microsoft Defender ATP settings in Intun ## Configure Microsoft Defender ATP with Intune -The following table lists various tasks you can perform to configure Microsoft Defender ATP with Intune. You don't have to configure everything all at once; choose a task, read the corresponding resources, and then proceed from there. +The following table lists various tasks you can perform to configure Microsoft Defender ATP with Intune. You don't have to configure everything all at once; choose a task, read the corresponding resources, and then proceed. |Task |Resources to learn more | |---------|---------| @@ -61,7 +61,7 @@ The following table lists various tasks you can perform to configure Microsoft D |**Configure Microsoft Defender Firewall** to block unauthorized network traffic flowing into or out of your organization's devices |[Endpoint protection: Microsoft Defender Firewall](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-firewall)

[Microsoft Defender Firewall with Advanced Security](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security) | |**Configure encryption and BitLocker** to protect information on your organization's devices running Windows |[Endpoint protection: Windows Encryption](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#windows-encryption)

[BitLocker for Windows 10 devices](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) | |**Configure Microsoft Defender Credential Guard** to protect against credential theft attacks |For Windows 10, Windows Server 2016, and Windows Server 2019, see [Endpoint protection: Microsoft Defender Credential Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-credential-guard)

For Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, and Windows Server 2012 R2, see [Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft, Version 1 and 2](https://www.microsoft.com/download/details.aspx?id=36036) | -|**Configure Microsoft Defender Application Control** to choose whether to audit or trust apps on your organization's devices

*Microsoft Defender Application Control is also referred to as [AppLocker](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview).*|[Deploy Microsoft Defender Application Control policies by using Microsoft Intune](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune)

[Endpoint protection: MIcrosoft Defender Application Control](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-application-control)

[AppLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/applocker-csp)| +|**Configure Microsoft Defender Application Control** to choose whether to audit or trust apps on your organization's devices

*Microsoft Defender Application Control is also referred to as [AppLocker](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview).*|[Deploy Microsoft Defender Application Control policies by using Microsoft Intune](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune)

[Endpoint protection: Microsoft Defender Application Control](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-application-control)

[AppLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/applocker-csp)| |**Configure device control and USB peripherals access** to help prevent threats in unauthorized peripherals from compromising your devices |[Control USB devices and other removable media using Microsoft Defender ATP and Intune](https://docs.microsoft.com/windows/security/threat-protection/device-control/control-usb-devices-using-intune) | ## Configure your Microsoft Defender Security Center From fecb9904061662a1e4e4499553db725393191f92 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 11:15:11 -0700 Subject: [PATCH 517/589] Update manage-atp-post-migration-intune.md --- .../manage-atp-post-migration-intune.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 2dfb129024..1692f971c7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -52,7 +52,7 @@ The following table lists various tasks you can perform to configure Microsoft D |**Integrate Microsoft Defender ATP with Intune** as a Mobile Threat Defense solution
*(for Android devices and devices running Windows 10 or later)* |[Enforce compliance for Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection) | |**Use Conditional Access** to control the devices and apps that can connect to your email and company resources |[Configure Conditional Access in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access) | |**Configure Microsoft Defender Antivirus settings** using the Policy configuration service provider ([Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider)) |[Device restrictions: Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus)

[Policy CSP - Microsoft Defender ATP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender) | -|**If necessary, specify exclusions for Microsoft Defender Antivirus**

*Generally, you shouldn't need to apply exclusions. Microsoft Defender Antivirus includes a number of automatic exclusions based on known OS behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations.* |[Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows](https://support.microsoft.com/help/822158/virus-scanning-recommendations-for-enterprise-computers)

[Device restrictions: Microsoft Defender Antivirus Exclusions for Windows 10 devices](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions)

[Configure Microsoft Defender Antivirus exclusions on Windows Server 2016 or 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus)| +|**If necessary, specify exclusions for Microsoft Defender Antivirus**

*Generally, you shouldn't need to apply exclusions. Microsoft Defender Antivirus includes a number of automatic exclusions based on known operating system behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios.* |[Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows](https://support.microsoft.com/help/822158/virus-scanning-recommendations-for-enterprise-computers)

[Device restrictions: Microsoft Defender Antivirus Exclusions for Windows 10 devices](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions)

[Configure Microsoft Defender Antivirus exclusions on Windows Server 2016 or 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus)| |**Configure your attack surface reduction rules** to target software behaviors that are often abused by attackers

*Configure your attack surface reduction rules in [audit mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender) at first (for at least one week and up to two months). You can monitor status using Power BI ([get our template](https://github.com/microsoft/MDATP-PowerBI-Templates/tree/master/Attack%20Surface%20Reduction%20rules)), and then set those rules to active mode when you're ready.* |[Audit mode in Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/audit-windows-defender)

[Endpoint protection: Attack Surface Reduction](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json#attack-surface-reduction)

[Learn more about attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction)

[Tech Community blog post: Demystifying attack surface reduction rules - Part 1](https://techcommunity.microsoft.com/t5/microsoft-defender-atp/demystifying-attack-surface-reduction-rules-part-1/ba-p/1306420) | |**Configure your network filtering** to block outbound connections from any app to IP addresses or domains with low reputations

*Network filtering is also referred to as [network protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/network-protection).*

*Make sure that Windows 10 devices have the latest [antimalware platform updates](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform) installed.*|[Endpoint protection: Network filtering](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#network-filtering)

[Review network protection events in Windows Event Viewer](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluate-network-protection#review-network-protection-events-in-windows-event-viewer) | |**Configure controlled folder access** to protect against ransomware

*[Controlled folder access](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/controlled-folders) is also referred to as antiransomware protection.* |[Endpoint protection: Controlled folder access](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#controlled-folder-access)

[Enable controlled folder access in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders#intune) | @@ -60,7 +60,7 @@ The following table lists various tasks you can perform to configure Microsoft D |**Configure Microsoft Defender SmartScreen** to protect against malicious sites and files on the internet.

*Microsoft Edge should be installed on your organization's devices. For protection on Google Chrome and FireFox browsers, configure exploit protection.* |[Microsoft Defender SmartScreen](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview)

[Device restrictions: Microsoft Defender SmartScreen](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-smartscreen)

[Policy settings for managing SmartScreen in Intune](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings#mdm-settings) | |**Configure Microsoft Defender Firewall** to block unauthorized network traffic flowing into or out of your organization's devices |[Endpoint protection: Microsoft Defender Firewall](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-firewall)

[Microsoft Defender Firewall with Advanced Security](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security) | |**Configure encryption and BitLocker** to protect information on your organization's devices running Windows |[Endpoint protection: Windows Encryption](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#windows-encryption)

[BitLocker for Windows 10 devices](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) | -|**Configure Microsoft Defender Credential Guard** to protect against credential theft attacks |For Windows 10, Windows Server 2016, and Windows Server 2019, see [Endpoint protection: Microsoft Defender Credential Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-credential-guard)

For Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, and Windows Server 2012 R2, see [Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft, Version 1 and 2](https://www.microsoft.com/download/details.aspx?id=36036) | +|**Configure Microsoft Defender Credential Guard** to protect against credential theft attacks |For Windows 10, Windows Server 2016, and Windows Server 2019, see [Endpoint protection: Microsoft Defender Credential Guard](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-credential-guard)

For Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, and Windows Server 2012 R2, see [Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft, Versions 1 and 2](https://www.microsoft.com/download/details.aspx?id=36036) | |**Configure Microsoft Defender Application Control** to choose whether to audit or trust apps on your organization's devices

*Microsoft Defender Application Control is also referred to as [AppLocker](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview).*|[Deploy Microsoft Defender Application Control policies by using Microsoft Intune](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune)

[Endpoint protection: Microsoft Defender Application Control](https://docs.microsoft.com/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-application-control)

[AppLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/applocker-csp)| |**Configure device control and USB peripherals access** to help prevent threats in unauthorized peripherals from compromising your devices |[Control USB devices and other removable media using Microsoft Defender ATP and Intune](https://docs.microsoft.com/windows/security/threat-protection/device-control/control-usb-devices-using-intune) | From 702c6aefd8974d59a14208c4aff7b1aaf9b52c83 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 11:17:13 -0700 Subject: [PATCH 518/589] Update manage-atp-post-migration-other-tools.md --- .../manage-atp-post-migration-other-tools.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index 277cc9bfb9..88f4e96298 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -57,9 +57,9 @@ WMI is a scripting interface that allows you to retrieve, modify, and update set |**Retrieve, modify, and update settings** for Microsoft Defender Antivirus | [Use WMI to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-wmi-microsoft-defender-antivirus)

[Review the list of available WMI classes and example scripts](https://docs.microsoft.com/previous-versions/windows/desktop/defender/windows-defender-wmiv2-apis-portal)

Also see the archived [Windows Defender WMIv2 Provider reference information](https://docs.microsoft.com/previous-versions/windows/desktop/defender/windows-defender-wmiv2-apis-portal?redirectedfrom=MSDN) | -## Configure Microsoft Defender ATP with Microsoft Malware Protection Command Line Utility (MPCmdRun.exe) +## Configure Microsoft Defender ATP with Microsoft Malware Protection Command-Line Utility (MPCmdRun.exe) -On an individual device, you can run a scan, start diagnostic tracing, check for security intellligence updates, and more using the mpcmdrun.exe command line tool. You can find the utility in `%ProgramFiles%\Windows Defender\MpCmdRun.exe`. You must run it from a command prompt. +On an individual device, you can run a scan, start diagnostic tracing, check for security intelligence updates, and more using the mpcmdrun.exe command-line tool. You can find the utility in `%ProgramFiles%\Windows Defender\MpCmdRun.exe`. Run it from a command prompt. |Task |Resources to learn more | |---------|---------| From 23713063f3886026e5a84dad23c37f3d3bdd2228 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 11:21:25 -0700 Subject: [PATCH 519/589] Update manage-atp-post-migration-intune.md --- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index 1692f971c7..cdd0080bd4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -24,7 +24,7 @@ ms.topic: article We recommend using Microsoft Intune to manage your organization's threat protection features for devices (also referred to as endpoints). Intune is part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), along with Configuration Manager, Desktop Analytics, and other features & capabilities. [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). -This article describes how to find your Microsoft Defender ATP settings in Intune, and lists various tasks you can perform to manage Microsoft Defender ATP for your organization. +This article describes how to find your Microsoft Defender ATP settings in Intune, and lists various tasks you can perform. ## Find your Microsoft Defender ATP settings in Intune From 119a75bf8d674cb8e8ae2103b6956613dbe1a32c Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 12:04:30 -0700 Subject: [PATCH 520/589] little fixes --- .../manage-atp-post-migration-configuration-manager.md | 2 +- .../microsoft-defender-atp/manage-atp-post-migration-intune.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md index b61f4e43c1..022658e40b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-configuration-manager.md @@ -22,7 +22,7 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) (Intune) to manage your organization's threat protection features for devices (also referred to as endpoints). You can also use [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) (Configuration Manager) to manage some settings in Microsoft Defender ATP. Both Configuration Manager and Microsoft Intune are part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), along with Desktop Analytics, and other features & capabilities. +We recommend using We recommend using [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), which includes [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) (Intune) and [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction) (Configuration Manager) to manage your organization's threat protection features for devices (also referred to as endpoints). - [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview) - [Co-manage Microsoft Defender ATP on Windows 10 devices with Configuration Manager and Intune](manage-atp-post-migration-intune.md) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md index cdd0080bd4..6801853a3f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-intune.md @@ -22,7 +22,7 @@ ms.topic: article **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -We recommend using Microsoft Intune to manage your organization's threat protection features for devices (also referred to as endpoints). Intune is part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), along with Configuration Manager, Desktop Analytics, and other features & capabilities. [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). +We recommend using [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), which includes Microsoft Intune (Intune) to manage your organization's threat protection features for devices (also referred to as endpoints). [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview). This article describes how to find your Microsoft Defender ATP settings in Intune, and lists various tasks you can perform. From 58d4505bbda7a95f75a0af0b4b69f137833254b2 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 12:05:47 -0700 Subject: [PATCH 521/589] Update manage-atp-post-migration-other-tools.md --- .../manage-atp-post-migration-other-tools.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index 88f4e96298..ed04b85ddb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -23,7 +23,7 @@ ms.topic: article - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) > [!NOTE] -> We recommend using [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to manage your organization's threat protection features for devices (also referred to as endpoints). Both [Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection) and Microsoft Intune are part of [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), along with Desktop Analytics, and other features & capabilities. +> We recommend using [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), which includes [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) and [Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection), to manage your organization's threat protection features for devices (also referred to as endpoints). > - [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview) > - [Co-manage Microsoft Defender ATP on Windows 10 devices with Configuration Manager and Intune](manage-atp-post-migration-intune.md) > - [Manage Microsoft Defender ATP with Intune](manage-atp-post-migration-intune.md) From 5c5e0792e7c270f8d154ff31bc2ef09c31208955 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 31 Jul 2020 12:06:46 -0700 Subject: [PATCH 522/589] Update manage-atp-post-migration-other-tools.md --- .../manage-atp-post-migration-other-tools.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md index ed04b85ddb..245b969459 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-atp-post-migration-other-tools.md @@ -23,7 +23,7 @@ ms.topic: article - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) > [!NOTE] -> We recommend using [Microsoft Endpoint Manager](https://docs.microsoft.com/mem), which includes [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) and [Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection), to manage your organization's threat protection features for devices (also referred to as endpoints). +> We recommend using [Microsoft Endpoint Manager](https://docs.microsoft.com/mem) to manage your organization's threat protection features for devices (also referred to as endpoints). Endpoint Manager includes [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) and [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction). > - [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview) > - [Co-manage Microsoft Defender ATP on Windows 10 devices with Configuration Manager and Intune](manage-atp-post-migration-intune.md) > - [Manage Microsoft Defender ATP with Intune](manage-atp-post-migration-intune.md) From 72e4832b2d939e1cb25b4f40f7e8c0244c3415cb Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Fri, 31 Jul 2020 12:32:44 -0700 Subject: [PATCH 523/589] weakness updates --- .../microsoft-defender-atp/tvm-weaknesses.md | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-weaknesses.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-weaknesses.md index aa166b9796..44d6dc5285 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-weaknesses.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-weaknesses.md @@ -27,7 +27,7 @@ ms.topic: conceptual Threat and vulnerability management leverages the same signals in Microsoft Defender ATP's endpoint protection to scan and detect vulnerabilities. -The **Weaknesses** page lists down the vulnerabilities found in the infected software running in your organization by listing the Common Vulnerabilities and Exposures (CVE) ID, the severity, Common Vulnerability Scoring System (CVSS) rating, prevalence in your organization, corresponding breach, and threat insights. +The **Weaknesses** page lists down the vulnerabilities found in the infected software running in your organization by listing the Common Vulnerabilities and Exposures (CVE) ID, the severity, Common Vulnerability Scoring System (CVSS) rating, prevalence in your organization, corresponding breach, threat insights, and more. >[!IMPORTANT] >To boost your vulnerability assessment detection rates, you can download the following mandatory security updates and deploy them in your network: @@ -52,7 +52,7 @@ Go to the threat and vulnerability management navigation menu and select **Weakn 1. Go to the global search drop-down menu. 2. Select **Vulnerability** and key-in the Common Vulnerabilities and Exposures (CVE) ID that you are looking for, then select the search icon. The **Weaknesses** page opens with the CVE information that you are looking for. ![Global search box with the dropdown option "vulnerability" selected and an example CVE.](images/tvm-vuln-globalsearch.png) -3. Select the CVE and a flyout panel opens up with more information - the vulnerability description, exploits available, severity level, CVSS v3 rating, publishing and update dates. +3. Select the CVE and a flyout panel opens up with more information, including the vulnerability description, details, threat insights, and exposed devices. To see the rest of the vulnerabilities in the **Weaknesses** page, type CVE, then click search. @@ -60,11 +60,11 @@ To see the rest of the vulnerabilities in the **Weaknesses** page, type CVE, the If the **Exposed Devices** column shows 0, that means you are not at risk. If exposed devices exist, the next step is to remediate the vulnerabilities in those devices to reduce the risk to your assets and organization. -![tvm-breach-insights](images/tvm-weaknesses-overview.png) +![Weaknesses landing page.](images/tvm-weaknesses-overview.png) ### Breach and threat insights -You can view the related breach and threat insights in the **Threat** column when the icons are colored red. +View related breach and threat insights in the **Threat** column when the icons are colored red. >[!NOTE] > Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the threat insight icon ![Simple drawing of a red bug.](images/tvm_bug_icon.png) and breach insight icon ![Simple drawing of an arrow hitting a target.](images/tvm_alert_icon.png). @@ -76,6 +76,10 @@ The threat insights icon is highlighted if there are associated exploits in the ![Threat insights text that that could show up when hovering over icon. This one has multiple bullet points and linked text.](images/tvm-threat-insights.png) +### Gain vulnerability insights + +If you select a CVE, a flyout panel will open with more information, including the vulnerability description, details, threat insights, and exposed devices. + ## View Common Vulnerabilities and Exposures (CVE) entries in other places ### Top vulnerable software in the dashboard @@ -84,9 +88,9 @@ The threat insights icon is highlighted if there are associated exploits in the ![Top vulnerable software card with four columns: software, weaknesses, threats, exposed devices.](images/tvm-top-vulnerable-software500.png) -2. Select the software that you want to investigate to go a drill down page. +2. Select the software you want to investigate to go to a drill down page. 3. Select the **Discovered vulnerabilities** tab. -4. Select the vulnerability that you want to investigate. A flyout panel will appear with the vulnerability details, such as: CVE description, CVE ID, exploits available, CVSS V3 rating, severity, publish, and update dates. +4. Select the vulnerability you want to investigate for more information on vulnerability details ![Windows Server 2019 drill down overview.](images/windows-server-drilldown.png) From 4639ae48f001b340d087d831fbe43fd61c199720 Mon Sep 17 00:00:00 2001 From: isbrahm <43386070+isbrahm@users.noreply.github.com> Date: Fri, 31 Jul 2020 12:45:39 -0700 Subject: [PATCH 524/589] Correct server availability information MI is not available on Server 2016 --- ...ndows-defender-application-control-with-managed-installer.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-managed-installer.md b/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-managed-installer.md index 8ad3ce6f98..2b4dd900b3 100644 --- a/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-managed-installer.md +++ b/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-managed-installer.md @@ -22,7 +22,7 @@ ms.date: 06/13/2018 **Applies to:** - Windows 10 -- Windows Server 2016 and above +- Windows Server 2019 Creating and maintaining application execution control policies has always been challenging, and finding ways to address this issue has been a frequently-cited request for customers of AppLocker and Windows Defender Application Control (WDAC). This is especially true for enterprises with large, ever changing software catalogs. From 418e863358cba8c8d18545928b20257184662a69 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Fri, 31 Jul 2020 16:29:29 -0700 Subject: [PATCH 525/589] image and text updates --- .../images/tvm-cve-detection-logic.png | Bin 0 -> 13280 bytes .../images/tvm-weakness-flyout.png | Bin 0 -> 50781 bytes .../images/tvm-weakness-flyout400.png | Bin 0 -> 75775 bytes .../microsoft-defender-atp/tvm-weaknesses.md | 20 ++++++++++++------ 4 files changed, 13 insertions(+), 7 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/tvm-cve-detection-logic.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/tvm-weakness-flyout.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/tvm-weakness-flyout400.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/tvm-cve-detection-logic.png b/windows/security/threat-protection/microsoft-defender-atp/images/tvm-cve-detection-logic.png new file mode 100644 index 0000000000000000000000000000000000000000..6701a4521b73c375315b38dddde3e3e2c61745d5 GIT binary patch literal 13280 zcmbuGbx<7N*X9Rz*FbOyfx$KS;0YewEx5bG;DbXFBzW*3!Ciy9ySux4cKH6bYTw$o zUfcbnYihb~ci-E6`##V4oYUb-3ep&;B&YxY0OO;K#Ag5iMijasAtOTftPW@TL4Qyj zWVDpQGB+?cV1ra80EONjK06+=&C;?LSNIOo~u_4t++5Jm* ztKe=&hjy>Tf;sVrhp)H^= zlY;#@)CynQF2jyKL`%tqg$V2qq+*mJm+23l!3t+?6e|DnJJgn|v95|(qQsYPS2exy zoLadu_rZ^?v@y+_;O|qbbHo$AnwlCmJg7b{MPnHdND0wEK%oR-{|8L|cI#NpWrAYG)! z0>UP&orP__)o}^ikV%MlaeYv632QvNzffoNfgY;2_u|sS*aHv3rY|yqLH$xJsmYQ2 zhj-FHC?9ubcHsa^r|j>lMui#w6n;v(hsB}fDe*gT;@HzXM7*w*yhd0CXO7^*^tR6J zev0ykH7fN*IKJ$L=rrfHKOTG7FV~ZPK9|8{pPqe*8bjhzbgk#3_0nJPlisHMKrX_w`H`iro$WB1s!#ujtk$C>WW;jHb2!lo>P=`&ABS|rOE$~h~@TQu>FgMDNBvk6M+6`sKq~c zblYz^(t5+bcjxgFw#56|QCN5|(P$0t!{ENZ5j72vl*$3?1w&rrodd01_0;EcmJ+eb zhkDn)XTw6GwZITa-sjlzMl-vhbOto?_0*4Ht+?!p1_%8iKWe;r^j=i)o?pyRNsbt7^6&l>xA$1rJ=p-3Xw z!%e2xdhh)Fg$8>$;9W&l|n=q_$tJYR7wLMHir}5Ay@BjIv{$qv7-gcNJ=8O_Leu_5c&vdS=?Hqr?#+wrMe@j zJ#JjjUa;o5`EM=%+FPVNF@H8=x+=wH$$&5aCGB8#=4l~Smg5XhGzycs%1Ms2($n4M zOC)V5f_c+?xTJwA9yrIb*n~XsAzR1W9^T=ZLOkZuLf+q+-<>1)+yLol(6%k&Fx_59 zu^Fem+qql&isfZwDb&_ut^Pe%V5EJ&bZ){HFKj)_^`XqJy~je``K*0Mposwr^t7l5 zl3v{wqq6Gvq;&A0?_az%0#HbgG<;)SUNFKbKu2s>Cdf_T1AoOIln^IMqU6_iobdnQ zeg7XW5C6mFd5o}p3v*!lu-U!OezTQ3>|BBxehDplmu7H<7{q{XD3sCK`#Y)7av%pn>fIb3Zs zzn`tbeO|uuvET5jgPXQkZ^upVP!~2nBit(KlTBczT25T+74-w)=KTaGOz?(`q|cKL zdAOBoCEbOlr*4R`6O)G(-x|ol2ImhWeoN`pElt9S|8(h`aF?qkdDn6UrQkHsSwK_A z$k^5+v)TCOQD~zbQwRKJSuasfpx^iXK}X-d@n!d@_4XIG1>*KGSO6`%3#d#$gdlOr zHOI9ND7C-Tg2RQvWU@{&BG7pIX7YPGGDkkgwNHW;aSzWA-FKaHv{Ansq6KXCGt*6N zNE9OlPS$$VxPI?=R^845 z(;=<-8p}%QB?r2m{HRLcTvS24mJeft<2Rv_SRK+?LEO#~1%DSr-|JL&+sN3Yl`zur z0ol5i*yG>6f~q?{Up#N+w>^al1z-Rlzsv%*cG!DQBMU|^02wq*07`uDH?o7dS=5ud zp4rHVm0+PEO3X zS#no~mZ4U{rd78O0t{fk>I^g9>v8S2Z5s{}!yT9Kej|Txw9L&95esIA_fCWBzkbLr zS(yCbs{7e(o%)OR0b?5^D{#p4*k$UHVQOzYTCp&IYWF)x{bHZz2GO@UFe%Z?*8(kp zvAFpqyq15rt_d^s%`7eb=1~6L5y7R0un%o;u{j=7Gv;PqLisOi-6vr)JKLZWF^$ho z;g4o2o>;T&R3pODJ1_8KOQAD(fDO(*2N3>q#rqlygTa{-dB{-k7Avr&$GH_ETxQgB zo_5pY)Db4k?oL}ck@KdtFRG%gGGQBon*Lgkf>gu`YcXMa$sNPft~A@t&R7@2a$|v% zpW_;7a-JnB=|iGqZ}Hnt`qtJD!%;*gOtwKQ`hTL#Od9xY_JGVHWYj}uA82BArs3gFLGU0^3=TvqOXQm1hWi?=A& z5cvsS8RO>QS&D`2)t3VQkLmm$s>;7@KEEmwMi)j2Z+Po%nz(0FDYNnMgxi=o?Yx9Tydhg50ME(SX3O>j}Z^XJNwbB)eU{du6Xdu zDSGe0Vozx|b(oR*+mS#L>VCSM08}_$^RqnUIuCQ4Usu_LGmdWINtrvW`idNnG=U~w zF4ZHckuqx7+$^3OChGd|l866v%?Y!-_2(Z-uWJkpf^BoTc`XAi?%5Ebptvr0Aqd8{d(nlA`-YW$^|n&o2~Xm3vgDiq&;=6=ONl`~Bqmyf3*F zod_ZJu8*nnL>Ptfu3)LN^WqAl95B|<2HUq>6WT4+H{8QEgLI=uHhj4Hmlg_rCSsYA zd;lE4%9eZfRc9k6|NRIAc6zz%MnBn~yh;lqw8z;o6nR3Rk%h5Z% z?u;c(r~z{*9T?EZUQXh{--CYX4M^t84e|EIuNf}SC{q&j!SNLy1@l7mk3EQb6kzFHlhSFprJ;7gvMXakBk;m0Hkiw3S@E%EWo+prfST1O@12vV~FiR#K( z7dfc-i3+)DMyev6zjbpg0xT5~z_3{}7O*ycAhj$8M%8J`Kk&-zv|yHi@E<_Y{L3d1 z$65eEQU6yH)NXi1;-I3mk9Z6OJ2pl8W%^94Sl}WCB~u2mBI-1olNrEoYMq^4Fl*4?$z z$SA6Y#!!eb$zFl+=)-m@yN`-ch(KTklKiOz)@I1cYPn-y$rlTlE+yNvjJobWxi2PH zGcK!&WfoO|uY)>9G>qiP5z2f7+1t*)e8J;%VWMKtYY~}^dzs^~lfR?oOb{g(e#{&; zAOWdhv1RCQUGKyvdtn|WB9n=+n4n4z&f*|R?kP(&;W+GwhYmiw&Qyxni z#+LNdhi?iT$>Z{rv!=Vk$nqQbY{&Nw z9?V`yi09P>GHi}2akK`~;mK4#!T3CrL55+iNtvjNnqS{U@r1@FlZ*p<Ekm7M*SdszWWVV(?C)Qw%GgKfy-;F8`nrJY#?Q*xIA zcT?xK9zmc(mmVxK)`7y@+hfSaz-FBA>AO6v81{`rhL%ZY(9ZzbNCXRFJ&sfhc zfz7vjd$`ro`du{dc6v3pdJWK#j+F2xSy+|dS27lJXe0~tKlo6W$m7uhI>7RhV{KT$x8s6Ctoc?whT|HY zF)Y}(Pi0xN75Oi?tOY2gRG(utZ48m-1gZQZ;(iiutE~5Lg_zw35ItuxnscUU+&M!^ zE?`yFDk3Plp0cZi@gy4RWdTVW#A2i;3kbruh>qMOJ@=Z3o0#*y@o#idq}emkoMelM z$>Do9`glet@lasSHV4w#Q+;kuYEEs48c)s7l#hX9PWnQOFXQttXxbC z5`v}2V}2zf!PV>{m>w#7ffpzt9Ei5x3AMUvqqohxN){?v2`mh-KsK;QP=}DFO)v5wowU^6r9fwb`(HSlIXtqQOBC#s_eFQKM^vz%j1{ z8nPL9*4FFoIOzm|J%^^dNs<~Voby3+WaLK0X13TE7J%}`Geq5|8=cLcd)P-b*`kAhyXkkc zuIGyqf>NOo=_e3tUFhh0!sq%L_kiw{n(Hw9K6KhzM3gM+I6XsOBeB1j5Ncl|jn5#@ z@lNVM>hO;c+F8vYk-B#iBpDl=&xHYktc3(7+KyEFG(|8C?XTGIwgeUr9+XV^UsJ{Z zT-hE~02nZlLsZn4f-brELo)E3SQ=-M!)bChO|V&!?NXl~YqAbYmb2|Tt?_&*k?Sf& z5XQjo(apj$YgSvJfp@3hdgEpOW!YzwpMh){@as-DbpW2nbtE=V1ESz3_bQo`$?4lF zz9tj8z>LMUNTAiZPu({;VAn=u@J3?h_$j_)puJlKT&zYPDlLR#E&=v#s~_*`<|gY` z1x!nekjKSVKfP>G_qiG1{LP8f4!cM?d`i>UJdh6WcV2lKI!m?R(w-B^^4K`tdjr0J z=AGX>#6iR#dudcqPIf}0|9l_X!mYu zOkX!LsNVyC^SUK{ZsxD$6IH`%-9)%}lbhOJZU9zfmtWYt)>FDa4Jn3PTR77F=q?cQ z63y=?7miJmrKBcPlq!3(3BUNYJKAU_VZk#S%zaa`XuX ze`B}W07W{M{a0#pCd`a_TrfpxL2P1zhBLEiaj_@1`(&g{UgU5mOsP9z{HNY=6hNOb z9nu#&PO3|3bIk^K#PzZ))=H*R2@aAmW-S2l>+(qbK77S2^qy(1jw!jcRd&G21(TOi zI{L$kG9N@Ba^J4!Fnpsk(vr--c#V_>wCY1IYl{bQhixs+VcV6bcytsgM0!H{76a8& zFQu%;1=>Rpi; z$n726=-n{Eu(fu%Q3WPL<%MxkJ@ElpzOQWHA0&WRU(x@ereM^g)k!0_1*AJI(EvHy zQ9n~%AVA}Cms}yef}n%?js^-H{NF)+ft3T>3L^RTOjEn`%E zp`+Q^9XnQBX){^B1welM;t~d2Koh|<34_iomnA^RR=@pC2qV9tOM8kcKqkkMMFkjx z4G&|OqzzV+uK%+qrsEr4P1wjLOxOjQRQ7l2x#0V>?{;N9Lkw_P!FLYMTXF)NQO*rg zIERNtlkw0iUfKP)ORARbi1tRmMkSe-8*9(n%pb@NBbY;0{)A)_U|oVR^!a?DAwX>4WFeA z4NzP!Tpk1SzQ5cJ6QIALe)L9I*W8Fp$zM#+Mb0W%k2@ndDl==43S}Tp*;R$^mTRH}R9xF_tYUuXbwL7h2BIiNAw>pk42~apJbR>&* z*1hCxt})Y&qx-U!MBGai=j0hw`ZqtCJzHtSAnFY_?JiSdUc0ayUv<|7@V-M+I2mf2s3 zy}}E@2*ATZCuI>j5)mLp`{O$-Sk3P1#YTjCcaRbLYyRqS z41pdwkOAx8WU&78S^Mu2UjI?^qIY0u001=uU-ffjO?UK2ehH2iOI3eJ^qgjXAFDC9 zB3IH^GkubZW7B9ly{E&y06O|mL<5FeoJI$X{^6}*I_&))Y-B@*)fF)E>+lz97AwW{ zA_Tu9>N%-UXyS_%nrg$IU5_Ep@@js#BF>p;nhY_jUA?tQQf%4^J2eFKX-+Fks2S=x zMoq!H^YXr2$$ci>eHV2iJawB>mSLZ| zY+^(PjL!O~>3@!0Wq0y%W~+lc&EBScPb5|M?fOOEHWv>iM*?sCWGGi34bBeX6t1=6 zmxy#67Ht(2A{j*@sST})%j~!6=I&|fnMd)9oy>ISUzd3=J-S=}SeO9B(f(PKg<8s4 zYTUMu7ED(4;S^?(E76#G#{P8ZR5rLF7SGbR70x!>^Rf`=qBS{=$5@(vy6yVQQ?>Xv49B?FrKoBX;KM`R~ z`p^<n>|# z*u)M-)R|O!g-vb4h0G@AT~0s?r@K6H;mF%8sFC+V)JW+LfFeG{=WGQxPm?e=8Uz$-UbgjWJ_XNF?wB{dS-Lr;9RGjr|>>6XMM@VtqpA_noU&&)e z47>hlwmv42f)uWWxovoQMsGA9z{Ngqr9IYGUSWaQoBqKJ-jim*mx<&m^eSQtK@shdJYqlGYmdc~> zW=Wr_XC=n1X`{t2x_Uz^zs~RW1RmJ_*7HTUr;})^vBYVqp?gSlBv0b@qd0%0|GNx4 zboWLR#56H(#uPr(Jb!e*5N1w4k}M)7oD5otSZ=x=%dSkvy0yS@Vezf@Fq3D?9*FGAy)8}7d#9)#dSZ;hVjc7^$iiOT}dKA$Q;qhT)oBXQ=y(o!OpyhkrY>UjMx;_s%m!mUf3Foqokr&lpDRz=UoaB8hF` ztV}iN{LQ!-eHZ=pzve6qf42`c@I51vm@)( z(LPGw5;?SDwpI;oPxo4}3Z_W#DW^-unbahjr1RcC#qvUulXvmvG=&kHL06$ey}^BZ zyrs1dK;iBNv~HF40eL?>fx5SU*ga1s-WUXrM#2CZ+3faI&Yh}xzs)338oR$;*zp(% zGAwg^>x<*-S5bMhFr~H6&GxzPm^AQVD?X>Yx5wyoJkN{>T$r z{4lMtjQm>m0OR|wZ0LWt;^E&5fa>`z0L9qJ}KJ!>oX=nKOGisY(#wfF>k zXRUKfk!rx4x>|y5F&On+;}e?S5~6xpwk=b{3Sq7NB(ZXtZk>8&wY^o)5`2gnJfLv> zdasORYHCVU8ULnE3KZS(GGKC@=~v4+Apz~CSuSrwvk`v#XUW1FSU7;8@t5DyM4|*m z*r0?#QW5$IOV5aEDK!{LKBT?4+=Q7ur`d^`cyIN^I7qXswqvNFjL z3(00wBFH}&*{tz})_DYn2liLSuWnT?cPqJ=Zb^5OYI)~eUfQIFf8FLy9un&M zzgCk2aQ_S`Z&fW^LRHNYRgP9q$|H*l8D(g1L{8}uOVhw-cq;QCu(DF>9Aqp+m@4E> zK|a{jI10*nc)bWpjnY_M&EF%SXm>eMyVRL#Bqa$GXLt(G50Q6HAAo^tF-659RuYX! zl$`oS%m&y7c{f|!u-wB#yks=3S&_|<0%nYW&C3tf0z;8qG_79|sv5giaJl6u&jl(W zXs+y~^?^bAp$to-g&C^Jsm}>(c{sgFaa|)>gs2S3`lR`7M>SL}clXg4Ha0dEix&n$ zv8tg1f2}Ne%BfoXHnziO6-i0w?)KkxR(xeu`Qb#Gu1|`&Sj6~XnPlI|kGLSbx??#7 zOLQMddoxtNq+CP`)|E?JsTYi4#3P}2kQ?vNN4WpR%GOWgcRd}15-VOfA~!_x$PG;_ z=JDv3AQO_kb-SlpI)*xmFoFy?)xtm486u^}ve7uN42%OeQ0C|-IE=Cp;hA%FBj+iooOB@AJHe4V^Rtnki|*Y1$o z$uuQ1kvq~(lp33YBOmz|a%B_ZTtARb>+Frt@)OzA^i0&$z}Yh{6`D}ReK|Q)CmJLJ_iDtg&Bl^Cz1B7{f%E}Kzeh8RG}Uk=DyJ}E z#ZWWl&ld(TG|}uOdbA|CLwKcGBSk;vE0U$f0g*ap{^0_s`b;aZE9^Z+?LW7r4mJ}( zvwmN5x~EFK3?ZsjcN66xPFx}#?vPDP_hv}CmKuhwaCmFliDbTjoN--hqAs@f z+k~uOV1cyj@OCnZ9neY95_7I{nVgCE8-0(rtxVkJ(Q*6h-4hfa7P6Bah}Q>d4eh?Q zd&%PqWrGxdUT&2Q0{15{W5upxWV~WwGm76qBEp?364p#IB*6DSSfV14tt;s|7YnsG z&VDLJ@~M}M0&z1P27k;|Tlx-)3}#=J#7Z7|H-FA<6TWhEx@hnN2fqJE8Q`F+*Vyz2A;E8X)cRcUdXO{4dbT^fqHrzn$RlkW}BcUxBvqi`p zlC^=a$Vu&JC2>C{nqcVc8;aH$9(R-rk0$aCF3lJFXL%^p?Nb=i&s913kb=KtTAZpSh*ZLUGbE-kU@vvJ zuw^d$uArJjQvB`0kv*V7zwj&WkCA>$3`KU-;z6l3Ba5;M3mzUrEET2;6Tgwsll@IK zu`LO2_qYQQq&ZCpcpM1zkwTm_qAE-2XcYm}K=$(lA{G=L90jnQnAF zegTh&$vg63v(fE&RyWjhXD1wt#6-QxFJ!ou_ndCE1XiPr5l0cW%K36fr1XqgR=>7% zdw3WbsQmJs1>OfPUcAkMf_r*zv1At)l$!4rXmspcB|7hZycdw|PKjxVrKW5YbqYI# z+taNNRiukl8j`lNOGwl*5Ets<5G+^(TlD2Ko3=0B;Z96JBB@ySm0py!C~Is*@4!bRM+%2n_ZS<|$n~vfzrHB!Sh`rB$+vBn!Yq@iZ%2YmO zZ*^?mwGwi! z2{*#4Z-OM|m^<)s77EQwKpyqeyww09|1cyllJ7pB6e*lVM5T&CB4ox4-l6rJgx`Ka zq+m~A5uvNfLWntGy|mNO@LR`$_-Z;xf`uy!1uzzJo~oDJY)~|cPR~+hLAEA+0LRyg z4eQmQ$3@WNDX-MTmQfoKUO)r3$tg6*-BdUDf~e5}!^Iup46Q~|*}9kdCv_(NZes`* z31E+1k;-JzI0mM21md$Ag~Qr-(T0EgkoldL&ya*SwNrHpak_w5qQ=<9e+o3` zIs#$or=Z-S2w}7I?&qk3lU&|+H4mKIe#%^O?rhFz1-I`GpguIeSzD_-KV7Vpm;8H; z*WWlfzPo~okWiLFqM->hsr%EUCDClp^`m-<*7qTQEoJp{6aVd-Thwu-cc*^? z;E){Fz;}cC+}ua3vYiL_-J||?vrR?fZAdcM3Jep2GrhnzbUn=@&Nrisaa@CjbZRF9 z2Xst4(xtA8HacD7t*jBIojvlrM@P-w=Ar*83DNq$Ym)!HL;p`pnE$_;FVV8@B>wDD zKQrd7Hd$LwT(~f{doyr6T~r%Mc>_C**Pe&N#m!?;)~DKPC3%W3Czt4Gz5MbNwAeV- zJnw~T1*MrM7HGpI8$G}?wJm)6LD{7Up{{G`yo;8u(qv~5ln!Q9X+YAeC5tM6asyWC zgbWZ~~-bR}_sZ7fZerUs6fLn{!ajIFv1l}QFBF3i}hG=#x&Ltheha3NeVl$%pn ztJcK&FL>n1m?Fu~G$f1qy^^i=j-(X6qq^e(VM>Uty>M)i=g$oUx=FgK!=_{&78N`g zySbGVOMVvbNe`Jk{0+(A?r=^qAYK{kovwy!GdsG*4dlZSx=>aLx4M})!!xr(lxNi?8GF7ofjlB@&7MJS0{cUj(#Z(kb>HtJTe^%f!z26WeLsNQ z(}-f-x}6s~IpD`H_+*PvFth??nsiWvpFoOtLnbdT#mViu@2!OWqVrR1L(*O2HKjmx zYoNd83!UFIV(#(x%kf(!JD63>%#Jqz)*bb@?Sj@H&nRsq!U$@)sn2LW0#BGDXHKiJ zzOf7I?hZTSw|r@y7}lLqbr0Q394mt@zbX8$guc(A&QQDFd3g}bBE1AVXE)Cz6-En* z*FHn(wvLlSG_Y)Q1*srQANN?hrxXgZ0f0LkgH7V8^`L)%c12kI9R2aC_MZj~VKPzd z1Qj~8v9Q)FbnODT{QEXRTweMyPZeANd+e5D!(Z-Si;kwWp8jAh=JI+hlj`= zRrtNwi08^J3~dOd!&)URL3&cAX@b=*i%kRIrDDQ$s&wVMw2b;pq2wtMR zr)wJ($S0s-G?|~P6Py8S+ZK{vxWPGA5U*luXylHsY!iyHy;8TDAy%M?&x<`jI6s*! z;i*u_M$Yq92}T+9Xgy<&#F!77c?t-BuQ%_&BC%D+Nw{H%{>vvgBWg6kSF#xq@S6P< z^X}B~47WKE{c-6q<5IH%C$p;$8+LGZjnwX4nTpoV-|LQDvx4!ZZvMFBntW~r71@}m z93%FR2UJmWIE6cR=j(|-3Xak{J|*|k+rLjXHK)Sgjbwc&j@1c<(zD!&NI7Ja7*2n} zk?NM1t1DFUp=a`a>KTe0T~KBI;118&-uA}BiGWg=BIp_5p_tnFh^3P83EusZctH~T z@p}=np`TS(`58FxjT|gM5Nc~pDy6ku`sf^JRzhmM04w}&4U)Tk6u#qij|HkQLv!_C ziAiRd8-`S2@1ar2CRJ3T!!K_4`YCG2+8C%gR%D|^Ywh`4ckmkJ$UUavTB2P|OR`P{ zFncZ!&pC2;=+ZSszz2R;!EUWnXCkmC$JGZi>+pL4w*JZ6mwj{m)?@Uy9(=`U;Q%${ zRZ~phQmSe6h>0$3$V}=Z*+zJIG)Mo0#b&qPqhS!kuEq8^=G~+9dilglM)i`s3Yq|R z1Pubk!wEXI6R4;S${u?I+f|97xxim5l!6TsKU(-9SPQe~MmuF^Ae0Kvs%zSr@_%@H zfOwfnDM6wqyDb0HX9H|c=o_IUaYc~VotgD<3sSq(+VrpdH zJh>6q^XHGI@;hB{ug!=v9Ogfu7*pgF78SJ~NMSE_O(0W`ip?Z=22ujXG}dppe>`ec wXV9P1AiwK_{pV{Gg#YH3DgS<1fAUx8K`W$b{4x#wItTDkQbFRkm|@`m0>q=mF#rGn literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/tvm-weakness-flyout.png b/windows/security/threat-protection/microsoft-defender-atp/images/tvm-weakness-flyout.png new file mode 100644 index 0000000000000000000000000000000000000000..0e81640cb2058a4606c494c3873524cb265445fb GIT binary patch literal 50781 zcmdSBWl&vR*DZJw2ojuN!QI`R;3QaZx111y>%ln$Cpf`9xVyW%1$TE3?$Dd(dB3jP z)pfh->)ZE7|41Eb*E;L$z1G@ujxpw#`T1Ev8s#niTM!6@@=-=Y83cOG3j)DdBESJx zQbb?9d?4D$XxW26s9i7rUd1q=5&#$B9X`rS!f(Qp;KEa&VeuD(K%}6L5~8Zk$%oCB z7CH;AJJ%xpDeWjW6Q;~bYmj7HNh!;7IMk2BZA=oPpJ`nTIsc%e%(GFi8&OS32D8a) z%7|R<2J+k88JqR{e$$rI`?wm(4hgEKNbCy%HHR1lescXIlkqbtOP+9iubDt( zzUX3oTH^2lFV}?Ni3ouY-wQ$q8{h+d-2PAd%K({C(f{6n&5E-rr@sfX&jiq&!sD;c z&CR2y7vYUjPPOSi;=s(hQZ09=(8o1u==10^OEih&Xg?nVl=Kl1y6V!cans`981wtz zf!zNNByLGakXok+i0pTNr^r$jb&lO~t#fc=;JLBVz{_W_Hf8<5a#Ou>r;kL_C-TqD zM-2MzFFp+C6ZSyY%|Sm(AG=mMQ}S2eINCvBXP~F8J-nY#6~fjRqa!;!FN2?jTcA=@ zL zkL4cq+#gvM`X3mY?mACy8!t**0z}+h@K5%nZH{m!ZUjo7_@IwdE8Q$k?e(vAS6@~= z&WGfvSFzg8iqre?CZEKT;-vLX*8TZ!+FIISwT<1=zMJ!%$Ro$YRbx#P4bscA7H!m) zK8ip1m_O4%haqdHd;cz$`|iV^@OA5F+*WUl{?2}-l%$i;hqq7dD^|U3m>4sQ4}#E< zm(l<30Xj&;JI&tSPGV*TY_6*f3)5(J2tE@;u$-3 z_TS3H8sCPTk-r?8`ZFQH$Lf>S9q29YU!GCUmD0Zg&-c%PXU~r_f8#_haBt95a&4`! zUbYqeCa2eXz4WgK;!Szm-oTh4>_6uXCt7CY#`B_@!`2G4dXPF2s=Tem#{;6^1?ETC z6UF;~cliF-kMIAM8BVM18S)zfz49UVCqDMGPp~(K+k*6k)}rzb$5s!m}lGJ@SJ@^)Z4Pl8|~U>JC=M@YyYWD=HE|_ zCB%|z$XxB8?F>f{%Ncg&vNz9W{mlQeOCyQ)fvb~cSmAsEJoxQoA;@O%2eXCqERij< z99AU>N{uiM_=rf%XV@Hgfh-x+Pt%NKxV4LQ)#jB{GX7n(#$fIpI1v4<(qMHE1?TGO z2Mf9G2nN~jalr3-)$K3Vk;ahBB@^hihz&n%95fVCn0D5N0q=Lj@gF_-TrDw$5Om}b zqx)UFfV)<`p(~gVAaO9F&|DA4;4n7kl~dJ%`RmGB!bJj|<=&@E9#C{%1Zmu=O)&zh z)KU4GuUrxROsVlC3F`J~!qj`Vezh*x5Oa|kqI!Jc86q-y)Q$O1!r{sj)*pmd!XM>iRqx_X#lJ4@J12bfEur^BnBb)5^ESFL z^(2{0uM>Zj)zf^i=p^62mSrT7D^)`93%11Xq7_0@NQJRzA6Rgcq0N~S!(JPSN%(P3 zP5c(j8d9k5Qk6~d66OUQM%yuFEUFslUb8ByBv9Z~o6O(gRl*pq8xr%Z4>Y{nGN=hP zC1T)Wl%E@%v_9i5A>X7q8)IDKFrue_{|1D3iOW1=faoS=IPy9_nad$(YR;UkOmcMk zQZ#oO1IP|`a1O)mY)iX$oh=!N>zpxcp-P>p!dqj0dvpx35b>Yx%UJz?{$#MU*xH_`c{cPy2pkq}O=;3-jaC?Mr<&Hp=tT1_h%DQ)^T2H_DTGY_}eZaDT7R`;S-pIV*W0ALQYZA#KxI(1KQH?-Bv6)lWYJ>`wjN@VCd8x z=Yey+9;JJxH2qGfWMc^iHRNba^v#Dip);UK*Psdacb#S>?O1Q6=}PBYaI5z693c|G zd*$H6+(J#<-mJE!W}X|~o9<7wa2Ja3Yo13X=)A$_PiSo}7G<=02<_NmY_DqgO-@{y zLifcI?l49X(Ca% z6}KL*^~7(mYt(?z!W)*`hyB2p7>=p8Qb5MqVsXn}_9mC7C?m56*VF4*!L+Jzgo+>h zv|jp&yw$wHwy~A@NRHAeeE)Akr2oI&gZt6c;N5+!*9&6Vl=}w=cp!kPf2Hsd z<7qfpq#f<4;GU|*z)Ul!w@lSz#qQ)k?F8SqH)nzugHtQzUVzKk-Z9qH0Z-lY)=FFL^I)rA zDa?mWnp33KTY;Ocl-e5&&y$q{!4)}-fcn5Qr%K<&VaZ7V0`MUvAik{T-kud~?k#TH z%ANoEV%|gJb9?ye!OF9J)2#>;t>06(Q{?ecq|^Fw@Pza>eC11a6uY-L-g}GR%c`i^ zcGH2!SY~&|)ndr?b|~3JIJf;7lbjW7*&Hc_Ms%r?`9%_8PYbuta4;$dZS8_qyi(zl z2T2_(QOl>`Pvf08`s+HWX0NHsv}>1e^x%Q)GggH`YDlc5y52CiY{Kl zs82Q>4m@dnyaSK-c_>NG!O6pW=ns;Klw^{Jv1g=**;XIx$6gU1gZq7fo6(lXfSVbS z^Nkyg=OyeYip?Z53?!K^0tmkw0to~@T97bNfQIwuB#i_?pu9~Iqpt^e0sGZ3Jh&Lb ziK1D+m|OJeu-F*d2z>0f2TJL0aqw$xojEh3Z?AFL$}oGb?B06CzE&?Q`_*+d#`Zc7 zc+U3mGIl>I52fC|X|}hCf-1o>1!u@|ugs-;13?i3RLLJ2d)BViv93YI%XvnKl7z&P zAQ@U?=~FEi1iw>Imfdtws~w_7X||HqTmWaubag{;=#V8B%gf3CGQNbM@T|DnKJx_I zdcpF9&`Q(XdGdI5vJvM9#cO3Rl2`QbCAm)^>8(|<uOZ7!LJ1p|+?^lk<-T{dzK=u*6|W;t zv0jfU$q`OMqzkSrh~9N3BU1uLs~k95JBqDcCoT76?$3(PSgltV46FB^VJFXj&@xY# zM7ljOpWs@aDmDHdt@12{FMc<-Nu=7e5*FK=u7JX<#0MFPH#xE*_m80tmn4OWxzB=$uvC%baNq2a^#Wb7A9*9;f4t*F6_c4K z=fI%kcz>v7g8p;5Ohb+$L7*A=1tRh6rTU!voUCg+?_Hl3KR2PZzJKyRy-(vVS1#Jn zkcPf}ejJ6KI~W6*n6ov2AlzJLtK_wep`*E0pgP`cuAM|cx_6H`NUR}B>WxR|tKMi6 zaTM88X@s9D(x-Zt$$G>mD~}X0m33ovp`Dq=k2f5TMHR7hU;0Jt%uyM_%|VXkk?*^k zM}lcy!i68RywW4+dE21r&C`>jk+uUsQV2xl6g}S=SbE_0n*5bdZgVECWMS7VfMex^ zV_bA{^B~CE48HrKm!I7G`WN0?`Uy?~l@77xZ-@-toWGXbry8|-Wqr}7lYj1);P;mg zQpCvS)jyR;_;IJ2woaFERv&90e$4ci*e!^K0no9G0&KrrcUG&m)}sKgZzOJ`rt36s zw<^&~lz=+Wc%SchhIl^quC$5Vna1_!mOfMFcwPzI?6jhFLGP;k-b5rSfDP$`|4g$_ zM+9d^T##MU5^A4+Zm;7DTJ*D zTA94*+!JvJhO#cXcwZF?0;Glb`tFgNdi^~zmfD=g#H{nSt_7urgn>I2j0;G{kUR=~ zga}+ry33-{l}?V~--E9?tAuO+4tQ^Hlf%Di#f}Qjh?H!^UA2T+uiPQd$Sw;$qCR1i ztS?ZAIBs_fC^2-EVX`mhksqbY8E@r_0N;!AK9;b73WiwMY9ikkN2c}GHY)S-xtZMv zl5|{Pq!7Fe0q!d}NcUTG`0H;!)Sz^U05{!A7f?}siN$0m7*hXhQpW#~r~j`ha7`WM zNcQ?t^oc7YZkcXYB-i#c`VIk^qa)! zWNV2r6L)@a$KV3xF@GTi{!I6G+;`lzgJc(t9Hdw4l`y6he+Q-yRBYH@rQ`s8Zl7TB zP13a|QA7ighJLNmp)w$hCU|t=r8qUXK=l>USun=e`t6GaO!qY=+s!3xLaC(kl1vGJf(d zEj4KMci6kj-1$lfsIAKeR+*1M?xZdLsXx{*X%>CdbV6*J4$I@NPf+NK9Aqlmv{Gz1 zUVHqBF9z|_^|UE2B*!!hKXyG+lNa>kEsj+W>*t%eD^md`5qWq8NLVlH=hqJ!c zoOrmdJx)~l`>Ulsf~&GJm#%NKIzt}Y?5l*{Ki`G#1ZbpFXfCi@o&*OH+@iC~BSUF}7I(a06R zbQl$SChp%qx)Kg;RH~HH?A6LId^9*rf8D*tq0;$FGi|+TUn0+WvQ{0B%b;*eGtj7F zmw9Od+aAiTFW6z?vhh~$TG)o(4Lq>^JMpa4aIGck-A7=(ZZZq4l_dQqKtDoFxWJFY zra8H&KO&34gv8h}yXg3NJYMtQt?lH#ll8v<2`&_?r;mAB7^v5U^*S})I>`hRS`CxE z08?T&E01OD=i&V?h$TW;?ei)NEL=KME00<`p&0 zG6%2%(6`3WGbwZSekCbH2E$5~zz;!qkzQa2tW8N4p|xRzGjNOTPHtoz_BX-q}uQuDOnbNmgg~gqVa>Qlhvg z9@FB>tJ>u|m2Ycr*YJ?u3i9v41kvXawh@Z{A*X;puUo@}oCb4a=SXul;S`u*c;jqY z$#u((VNfKFGxx0PfbP~021L8LGBTujt7zqPHPI$BTBIC4$wqzHHBpHlL8x%3h|rjb zYss7Cul|;wEA^SdjVP+1i03S*@?dN6gKCcn>JX?&srKYl|Aj{3cF0|K^ts(vKb zJA;Ec5|4)bhPPC9Q@Ld8S`NeS)NzS`NgK=}l0UsLW%@Sfujz6GeI!f4fv)O&-bq(M z#WXd*brY{0vUw6RB80u>ir;$-4AiH>MJ|?TK`B`qsY+hG$U)jFj5vDFT5I~MI|@Kz zMCN85ly7OslPG7G+@X7kw^>NZjw}Tw9=qY1k)H?NmfDzD8MyEGzr?vLo66zq_Eo}~ z_b4xDx&baX?*&%dt??dVVgE<6$6K}CHT?25|&ucr6EcfbioezIf< zW3x4zf@Co|5LB;Px__vSq-GLwF?Iv-SmUMqAz3JCdW_^T4 z!T*5+*s<~A!sn_7?!i3yWdM=7B@oRLPY|VAY-lrD(yo_xNOCz-0yn(vh8;Cd1wm60 zR)v<3i2@rIgqVHEw-_R4-0)e?qS4cF{8)YA)zHXqd18?Y13avqFKrhm$thYAHYdAy z*BM7SD#lJW2 zxf_mGWeg5qf#16e!U;ZhG-ooTKVW{E!-Jd53sN1yCvN)dkS>TA8$y#KhLS@=I}sJQ z)&EIAL$9lC*hRH0tiO&8p+3g6H@TFXHGW(tjURx7RrYh33PpTx6&dw?GA1C?G)A^> z+Y1$PfXkGVWnX`q(J9(~>N2W8P(90ZCD2M6&^suV94rW4hByQkn5wwc&^3QU9?}MbzdSBm3^;+Mo~+XrBR9~hqk|S*pVWo;^l2WLVh@yZ zYZZ^zH?Lp= zSlR2sgi6uBZ`YIy8yOS5o9N;9@3X;=@jpF`>ofU%a}7|FtBtr)%IXI`cYZ6_MvB^P zkZineIwV1=86XIB`1VWfSjtLVkNe0MJ7I=zC*Eg|DBogmU)<5{2oKXt`rr$X!c^8) zMZZE0rHbZ{|J%U)W0J<+xn5ap?^N(k-30x#C<@?dhF9;_7VA12Fjkyr49G&cESCVN zO5w8})##snJnSJjWsyhZdxfa0NS-c*YH?)vlOE3z7KE`lm;kYiU_CgVCdBMs8c9oJ zw3|#VPD(R;<-Cxma<5Z|IeodR09u3c&gvuSURVyheP{Fn(1|@!sV~Y>b4li}_tk@_ zZBx)m=u>&i6{WXZq3NY{^(ca+-*>pm{b-j}ZJ9J~m5kw!9_|tPT&!$_qN~~n&PpdX zL;)F!t&d=BqQciRQ8Jq0kQCRs>;wtn(goMAyh|0tUZ;ZJ^l}PbZ*Tycl{$GJO&`9c zNnr0DUOx8TBWM&0+xCE_#iCK|77=U_8uq2baq+_vPJ+WR%TXA|N46lXrEaNjSdp>U zZ#snm@WB_BOTuk%@NK)=bD1l z9BXTS-_@o0ZHq2;CWmX|I{6%Qscmfdop%$nE*19pL>ymnZ4=nDoNx>fzX2^CawZyN zqb|Pv!x*{KI|KpBm;tTDK8+BDbK$}7NeI6Zkgp0j0wrSdlfI7Je$pU-n0ku$V7)E; z)TgJ#vc3xYDsa=0?H5t^2V$8`CnY@ViKELulB=$mKU4TAbtNAqU#IJQPKgoP+CH@) z`uVv>nhfW@{L20vnXkMf@rSxr@8+4$)`E?^UcPq<2>n}RlTJbVZ0L8eA8gh6PJ#mWZwV&3o{x zJfuyPfyu#PJp97mI$X#B&6CAKvwQCH3EIrlcn|Np_X^-MEtKmF4JB<;!>cHSANabx z_XpF2uVt8UV@z2+X<4hvfQUL7Oa!;v^vs#l}T69T- zG!Y_q&P~~{Oaxs`THLCg{`R{7GTNO#OdEq+B0$&?Or@7o#@jadJw%=0WYvb-miAR) zCTV{4CGhbPUs?yOqDw{eLODYGdqZ1P7Om!|cY{?&)}=PMQNv>|H%1rPFRK_lC9H;x zwro*;oWVMcp3kWqi)#C^y+2m*nIE2Ml@UOX2Lo)sZZzfJ;TiO-)tSBX zD|_bYo20#RM4uJOd>V_@a};CsQ#{vNq@66wdDiSye!vjZ>CIET7ymCW057sxZzIvy zW6u!mExMxV%K-2UbbYXRXgS zVtBP$V)+IBE8UW=Kq)K8lrmF0Q99?%cZLQh5>fWbu>RPUqrVLbVtY@(DL1jP<_`^x z!K57Jr!!JI)h*Wb_ALa&lb=(PayXVhQ>xarp07S{Lhqb$S^W0i+VYDQT6YV*+et2^ z@p50DVaTNk4MK;g;I!hami^T<;13%2;Au4T0X9zm@XMZ-ID%|a*7bMA+^g%~NfT;J z=S7A_14S&^dh9*Xjskg)5B5g3e|KCRI<0nc^6m4KqGP0;^J^eqd5Z}Js!Vhy)BxpG zj%#wSyz+o#+0ljjyNa6YiuLrVa)_^*)36e{XZ;-^m@4{htYq!zbf}N|W7ky8=x)n; z(3rvedlRhaa*q>RyH;!)obJC~Dj=BW$Y4(HJiGfxw_(j6*5Bm8@GKPzpPnH?T=mXlADL{P2Q`?d^ zbcCS(#GYYHF0X<4J-M*Aau}3an=9Jt^HP5fy7rmH7zPORQ>F^JUIYXS!_9^WYt|6q z-{LfE-flYfVxDqfORmsRlYOni6rG#|ES-hUKAL@&F{KNluRlz;W(A3&d*&k-u%`H_ zH#$O{ZBQ4aIi&bZCPkW#&Wb+g6r?VzLUJS_oO2we=lF!J^>_GS7#WnAsXc0J6%xoU zkQMInu17Xo$TK7?4yakW;*m*&Z_`Z{jHadED%E5|<7C%y7 zTG|Pe+pC#o^s`s(&@-dITX6=d^d1_x@85~dr~8kd0|eOi4|NyO)w^}HV@b)rHy>`} zHQ;Pqo0HIA|9JGRg8%Ojn6T@^RXm-gG+brAV6U21%;>|uj=ib zT8drDcYil0QEjdV=iWuQnwx2k5AepF$;>z_9$l|p7-1W15Dp#LzPgJ&aRfMsK$KgQ zuky5kuwE;V$Bzprtn^acW|M#F{Duo@Yj7t;smF&&A#rV}sj?Uyf&JoKT!eb^l)MJL z3EQ7+f++bO`{U9qj)zeDxOl_2ZT_^m4C>lCM9ka6x|rUA!HTo}y;&c>3!5 zV}r2%=A}#bq=kYgW(xZ z^wdaIpR(7k`_n#ABSOTW|MV4OHlBT-EEc@EW>S#jpIukc`!hZb17H2AUO3%+ZFN7R zSy=maOHzfHT5Drl{?*d?_?i88Brd&=Q~7Go-{y37yRt1z9?foNJ`eCu!XF=<6iM$0 z4$WvD>}9+&Po2Xw+bSwRl5PFG>I97Gy0U&P~8{FQftSvSxR_>?h8pb0yu%6l5pIKr+`hIILQ5S-2id zFI%r3t!1tw+o)q))AxOHLY!t=P~P;&k!n6l%PJGu+@q_ig#EUQb|oLJ?otn_7mcyu zZOm9-X>*;?4ee7t&gTi-H21o6v~96oDx|9ODZW}{QpM(x=)5micDGr$Ls z@5c|;IH8&lMqTR)flS?`Wq@KN^LJ`IAF!}4?iDOgDc&d>tXp+%wJk4pJeG&{W)N>IH9FEVXj=(@{q{GSI=PsH9esu{km1fztV=G&m)wZD zZ*vtxWFyCrUR4qH(-fS$`oaQwe$vO4JvQB`F5IcCVJvbS{cvm0^UOY@ut2CV7f?=0 zE0P@7d^eydpL@yu3aHX#rxdQ83;H_#Xh1q4zDi;`Gn-P70neL?HvuWxm%C6%2iKw_ zllUL&jpbVL3V@bN(E^cky>KBi+IrUSjV0|Qds8B@Jyy7<@if2I4CKuK`%xq414!@J zU|jY3n7bBtDl!|Utm)xkP{*U$%9(7XZ_F3`e%jxcUbzN=dwO>zF}oo~l`lVWhuh9& z35djO0g8}?AX2JXt>)zJ&0s!@!mF_grfz%c5^~Nw`O&GeYx19w(4!kz6iT+N9Qzs` zh%QDg4nhv=5$~20cDkrh@~JpvMvxj-MMiS!i8A^jbt4v%xF8$Ps0&}7lFpV`__FnrGOaA~V$dRbF~v!QnGn*-K6`2QPn?c$r8 zieQ~38A__DhX3(%rY(X?2}nDW0#Osc9KrNC)_iCnJY;b(iMfHN7YK?`%`tK_piggN zOJOh;{_b|9YjPr>B+;`DQ)*q32$TFf9|e>O`C7*m!Ds?R@-Jcrl~nZ&W~UHN>`6on zeJ#^S5vA0A(FeYksJ-E=|KabtsneR%pmVS<%I4#haU=dZof_RVX1UYR(sDQHMY}E| zeTwFL)nig76stBsklcA?H!y}nUauGORhlgV9`kl7R)9?wkdlAZhkD08O%vL9l8o2c zKjpNTk053jVQy>47*1DyB{4OaQQ9Mcl;1)aH{ZoCRrKwR$1WGA^Zrsa_y}@5wPW;g zn;GxR?G;+sk+2^W#5LxYoiC98wqLdJbQUp$Wy3~y>Lc0VA~6DKwR=eP zJ}0Bzd4ti%*_C_{Joe!4w}6AE+BQ>Vz)X&0!$wPBBu!phqgObzTFvlmo4mujWpTbj zO^(4v2yt;m+7cPBo*0AwdvCv`--@>FN6pY7;jU=82)Pi4OO zU%tQOPiVdq-W)Cy#e8hq-Pcjo5Jzm%b@7ece<$^VR>M)MTgarP*_4KoHyFkN8Q>Mt z^^*PqlHvCvujUSB{cVmG#|j}+Ro`5OOMhE@#8R3_);$T7pAD!L2byEJXH#XITaLx- zkA?+q)q!uw9*z@dOy}wTs|3g@|Nb_cn)R~|9x=bt{NG4Z zva6uu4}lY8pn~A|$x)zwTm-J@c4D7TEwOV`Q%m`_Ak5#B{?}R{?Qc9LWF0mXW-Y&_ zK0Fsb74ab(Am)HGEDe!c3lq0k%A_pC+E7_9WX@LS^+41`JF&XsZ^2Xe09J3IqC?-w zJpqOIyE2&QNIAu%!dc!;D3RKJK$QUr&COfZi5a8V%EZ zYg`lNr|X?D9w8sM2~&%rz?qx(*AF2sBXtYE3a+tjG43erFY?6|j9Y;N8nXI5v?3r< zQPqi>Kd8kAnf0g_2`Gh*@cNdv>fXw-w_X^-bw zkaIq37K1+|6g9IV^fMcC)KWB%TJ#SSo;gEcKV%RDs={lYORWdm7*MwvP{`$vD;tMc&kHWalhiI%{*cIg30(S!Kk3d532#;7AkZj0cM z&Wtnl@YG&*@{+UJ%MJRp+Hcxdo;)s5qf-AcnBf-&Bf)I_3fkK|4NfJ?wIp;brz&hp zZTP;iJb9~mVRRnJICyrCvp)WZk<5wYW^!iuUT6aNvog#yjxO{%HtvnFHr=ymfPOyA zS-RbJ%}RH9P_l>t^mZ$M+=@HwmTuWS$W zvj{%d&-M2$l7Edd-G}I5iq1X;N1&lxdD;>G$Bl#=Hld)z=KW$f|9_}M)ET0N-SPdk zztheH%r0%0gJoQddka&+c0XGU2+jQP?2KzqqNdBRa9grm)Bjr8=O;s+#*eczeYn2^ z2;S#u)pCb~`GpfW55;-7T$dtA0EQmFqXXY$7TlrsdYL@8GC+pod4`(8wa9*YaVX9Q zV2f0>3&e}9<@q#wF4h>-874QJBo7czE@jn*q1^M!&Jjio%v}qr1D+IckP2?N(QlQd zlw1!k**?8C_)l*n({NR|U%xo>-OH-V3m>wj=jtx@W=qOzXU*^~ky>h%jsVGueUJNE zghC?S95rmX(lRz;FqYKx`GAHpxI;QSZnG@faw#GUceZLY}sd_@Qq*F%#k zw%8c6BGVUP{~;?Cn)#EUYhf)|zyM5T5I{q4O(S|f5v>IcSRu;cHG6ZN3%|q9XAs8_ zSC-|!Z=jjR-hDNm8b5_blDJiAm>*F0{&%$p2vq8KP`UmMvVZXjf&s&`qtwn%U2T_g zW=E&dpPRK0)W8FBJ+JeV9Ty591o0N*mUlAIW4XuKcItB~yDyd7t%d<`LBNbkGrQ11 zp3b9F`DopxQ9#QEX{LIsw&-N!FYar_C-_Do-j9r%Jci@Oa0FqdOU5t?umY^%C}ChF z0^WhWe5Z5krvbUV#`Ho76`40g8R*_iT1S(^Ey+h(md|GyT37oS!~VKe-pv5ATBM~8 zYIJPGI>Uf``z1*tJ9LM6pUhN29pW+{Z&(#xrz$$PUr;iPdv>(g65iW0DUShJrv z1(bT@TR=0v9?5x_=B2P+uBWhWi3ET@GfPibYo?uUt2)3090#6@n_Q%Yu3wb@V0vTI z9b)_~Ay2%iiDnNw=`bW0defz^ws$)HqqKwW3Vcvf0&VmI3x(R-&En#)99O>0%ZGH^ zV%h+;>roP^t-4IYD|=S~)4-$bef80WEEZXmG(lFV2-Gmz$ehGnK%gozUof4xrfG3d zZC*QCZL-+$P&H0rzCePp1FXc_hael_gW3Qt*`lUPpn3wz~*+I0VwB^xCsyhm$~3^B2L_hhG6yOkU zZ$xf)QS~|`HS1HkF+}~i#BrasP2(-PiMT{g=K&1}sA&gGu>W+|pHcbBi_(-QZpMd` zqO2g@3==ql(28R86`koHM1>t+B_XKWyARa%6&6j6M-jz&08`j(7yK%HKg58JSH#}Q=>dA@3w2T~rfW5R%tM4bkxz4%J}Ykxx? zGiD&FchW@gdw{v=Hh{qh@)xm|tlOoS=^rB*AwWs6Mh(S96e#w177Xz`@|o_ru^+gsYF!Z0&HPXZ?jKY;@97P=$Zi>OxJiCHjBZfx?1FiLcRQm-w;D zz+Q=yvHWm{mt%5UQCda@2d`kFQm#`){F1iRC&I#X-n%roSEPO&1?(uWS>@a1;s_?TOBgqEa3fhV=n&a439HJyo3 z36b60#~t5pOkMglstw zaRILTtX;vSDh#0Hur8%_L+ue}Ur7nuj@kWlKoKu{#`TXHB*|NYJDkmtDyKAV)qavA zLiU=_Toxq?B^fVr*&;_X9hORu87)Dz1RJKOEw{Bj;v*Ugt{TZnJr``Kan&2{Zjvuh zadf?sg)*xLMn*m$;$Ex+oiVIs7u{HP*3o%mXem{|0FTk5Jm4*TUf0Yp4e?CGfSzB} z5}hU_|I1M)Q8?Qs``A=%9#C3pQ^0Uz8JF2#n`FI14Ph-;9YInggZ?B<(CW+zI_Hqy16>>rCdV2 zd%V#3%#Sxr2idCpsiH!F<`~~pA|lBZ1&p*4U&e`E`jQE?r81K>>?ew~l~`_wWvxKI zuGp|>T(uqIuVOTYM$nZ=7BEiy8`AH&~%fbMby$ZAt7^1rX$s&`(LL;a9P>Ou$AsYgsrK@dd3e zD`9xtDyfwq0EMxqxk=4NCtSSL09O=q5&uG( z3ZJv{=PC;*v?-pWKuSdXy-dCot!cJxcBbdN;ImUKS_R4EnK`;m(Zl98T}2 zRK++Ezyf%6x^!=Lbb->6yvk_M9Z=iV#a%reJPHT3SCZV?u(O#LGDfVY*^W38jgACH zJha8=lGaNmllJz*nDt%?IFi0|xm zu#!O&h2LRR5^sp2J)_&r$b>E)_b7~C+yN*UXJ4Ap`q-#z=HS{_mzY=bA45FSfAnlI z#{X&4CT>rAeJBbJhmQTvdvLP{%F1? z7#(s;n=}B?9w)-}M@dO8wFX33+3PnJwOV7wdbkI*MPIIwd%+IfpT{e4JGk@Lm~U3% zOQk3##`&UkPm8Dm^-Cl-2cYg=opv|Jdo2ziWrdg2j0@>ZvOeCR8;{4cK=ApB;wEW4 z!ONDM|ER}McX*Tm&5}oI*XH@bF^;I10<6gTgd}9_L4sZmH*hbdc?~}{`6>ltD=3(t z-I(n&Z9efexf!Y=f3^2oy+CZKKbNf8u1o&DeyTP-V8Edco`2$5zkSz!j|*X#mStFA zASrd2KhcUF2+mp2Inel%^k?LkxYoM-!ju(Yx>{*n(_ZL?Hlbz5PT{HPOqgz0Brb{WfUMgW6c@35rK)T`hM z$uG?#v7PvAd)H?#XA^HWP99pbg*a`yoEY#KO@}|tac!RGRb6Ot$ppl83FxQ@|FQ{8;x5oa8Lo6(%i zQk=QdDy!Kzr_m;uKLDG#DK;uOSVW0`XP_V{N0s6)mMcbu|10x#bN5Nq9xdp3J>Zkiu3IkAP~_b;5j- zx`!#|p*^K2Zc0*4M6p2!TOi43I8s$DwmD7sd;T3rqtRAc%oMQabSxWrox1A?EYe&w z7ah6)UfVoQ1(2E}xHJvnxHu=JLScDQWUj~4b`Ro_s(Z8C}wT9{F+=?C&kS{~><0|9b*#eHZrw?W=9MooY)t6#C6vG=3 z>?Ebxj0CK1(h4rdNFGD#a~xkH0-+;;^+$a3#1X*xssvdqDR!-{<*gwHfZ6Z78Se5v zCAXSmFke90RkOQl;Z)7@D?MoNCz3^5Ai49?6!9ebj^Pa|{FfKtG3D)D$!$Cfvi}$j zA+?x>5Od9l5JQ;!Mm4D-py1z2M>eFwR)KwOu|XLev&0LXDB(QlFS7Gt$b4sVcL+Mp zkYOj76euN3aeV@428z+|Lc_HjjMvSPrFr~Sm>*;UVX_Hv2YCZF}kSdW5WR!I)PeCe0$E^M5~P9rkZ)$!m1Z%{>BzSE9d5 z^9aF=6oTz9A~M@1fnQl?63W2q(&z?sd!Q3q7%rmkgrE7Z9Vdf4Pi@CPc8@K2@X`04 zmPSbBal}X1>##6e#iXPq{$U-&PkQ(hy}Y{9Vdr`>JIW#i(~hbxN&&usV|T;+`ltmX zrhuVi&{YeNe-Wssa1e+1tHmK>)QuMfYw@@f|QIKB9<*$P@PvnTuxfPW9-li35N$$>Jeobe>9gWC(eM#q)qmer)&=c7o- z2aN4?@pXZ3gpysb)7#zXFXTg7jtVr% z;(mcPH>u$>ujs~yzYj_G&if4B6AJvTmzA|(z(IlqfN?Ju{_HDf{XYgYv_{*Z*qMy^ z4+sQzF5Ui@f2|-GQIa~;V*0ELY5w&0J9iV#C~1v?k13q=V$sS!9p+6lhk=s1)kvoG z)P{eaf|~q3`&8LiGa4Q~31&x6z@a9mR5j0WjSyyV`&d0?YLh4H0Jm@pM=juLX;6Jl zM^?Q5a2Jf~fP2lRv8SU*aM5awnC}`7Z%Sq{$hEH6n);&oGT8z+b-q7 z*(Tbml~aYAxQ!m8Nykz)ReS?J5nA>8RWb%Nr2+6Nv_;cwHXQzMKzPZW+QMGgmkvPp zD$sSuvwl8+2Dq@MTSa~^|8NYU>FTpVh#_Y!9&I-9D+A-3OHY5!JBuz*?ED(UONa(4 z>&s3#kEa3j3O2r}w!_%69Ln0@xkFmG^?4REiMH4Vps8P~6@%uik(L+F28fL|_CT-A z*2h_*OFI1-bNqK5{8;9~7-@SJ*>zJa-npDqY%u(ja{P`p3^HpnFlu#@ZaUK8Xz(^f|R_V%8>*R00sq z_aJhHGsxYg7eTJ-JR~<@?E(tcDxB(1dRAV-D9yl8lJ%iLIbiC1|v&6o- zVlQuxWZTG<=HlNa&jj6}H%(?R$KAID!8S0{hZgM1HeqkPW119zOEOaOF)9OD8oerpRs;xmf34i&pyTN*f#s0mhjRVs!VyJ<-Rp<^}e^)nMBwFuV(iEP39Ox?+$&%$lH|mJ0sK0Jxs4;!{%@sDD`V%B6cWVRn7U~Go!~q zdpY&Qqj!KlKi$zPrS(lnW~+$VCtiQd08zGKF{ngu3zDC^pwdblTLQ#8;J?7o?ENa} z4|M(^ZY%zt}S; zZy+J}D)(CJD&OmK-BhP}_6e>ll!FIcx0oW7tEa|L+d{TA=5g1mo@=wX4(l{W<k;yi4Qq371z7vT|t?{32_I zcxqDQPB{CVD*}r%A{rnZ?E^dia2s?D@ukO375ZA#220vgZ50ImN#JsruR#Uv6K^4S zlVFeake2dQ>Xb&uv|8omWe=c%>$EgGovk+_g%&MZL0z!n@hIh1-c1Ese2%UVRViyp zx~Z*h$7~_m@NIMD-67o4+NCf9`Z|}%x&dDpj^oMQO_2ig*qPGp=AmxRL#xix87}JG z+2**pW?xn*-{X?)z}t6?WI$32`vC;A{eAKZye@BbGaqL2>utijR+mY1O!^nJ%-~V7 zAnu%=_nywQzS{Xs5x;htdbvud2azA-6mMH>-F^ei_s>4vuL?KbbQ_6BN-4lHB}eIs zK>H=IAj5{4M_rYF)R%J{z*&kEpzr-l)Lp5(#RjQ5hYc9uyuDwM6k-p7*tWW_PEXyk zZco;w4lO8n3!0dWjIx>m^7YSd4;UpxePT#&cdxc<>L>Jyl_D)Vo(5 zn7l2)mww-U#v51}WXd0CEO^4{&X&i0OR1vRxj0Sz>+{dV%+&T#;u(vFH} zpW}JBM*8$sT9VsqCmlP7)Wz&B?oc>zeCH_+LJuV=9(EtNhQch7P}SC+b4mF&qnSsNL%jdArPT4rIxT@ z@Ym-8G)Sh`x&u;1c*Vlwd-{rHZh}lye*cAIb9blTNu&aLT$25C+MCz3<8`Q#ua@G) z!|%1P$rwvb-}W3!NKu3=iKHvPuuQNK3BG3q=*umUG8EEu7Xwc;$Gfzc_6xhRWNs=E zQ?GmvQZ~Uef$T9-4p_&0(_3>^-*tcO@s}u-Q+YP(B2S%G0oxHam==)gMewNYyE;O7 zu~nk=UvLH`{#Zq{`g_m5O2yIg0M+zcE_|p*=%Rh)5(t)Qx6bRo8(7pY?)EA=k~2y>_gQ;~`!)-9fK z>gy~)npU^y%1r@pJJ!=-a{^#VF8pHSsaaC)X8qwhlw-4!E-g)YNU>z5f+@CEZD zL|IwV+rXGtYh)jFSNN4iUMnt(zRG+G64wT>8m-2HnTHqkf9sU*Rv99lIFfNcEXxli zgE|)~J<}nBwfbFsZ9HX@2m8u*3fCXInkrKKqT@+Cv5pY36gR)^%>FmdF&6APy>%nt zBA+%>SKO!acb`CXJwbB!7Sot0laQOLQM||^#3ROSd}HqLG`R^8_T$fu7^?i>9(~2} zbGtLzBRs*$f>nPY+XVcBc1IFZJ(#@g|7*c_Ks6? zxciu6vmz?*RwsT1+HHDJ1n9ZsZl@wiZ5%86h{qp_mm+)=5_`Qlo`pZ}d-bF~Q#LD^ zm`ts3p>e@+2SIhqJijrWlhi1i@ioHj3_09!6O4bH_t#c0)xb$B1n30(7<>_6LMw3_ z%$@?ltk1Jdpxv{g%qD(kFwJ5+Z0*Il=hss|)-N`Ltg$+kXN=CAU%rBZzm0q!Vj%eT z=wWAE8qnLpIja4ogYEAI14{%U!nC01Jb)hDE)T z;pz;9$$tUddzG)=7+KI{w0X9CdgHMGUOm^&i~bFI_cH0(M6WL0uWHaj`7XQGQ|g!U zvzliyqLUk8yq16Uo5eWmaDW7b;mZ%9YaNK;%DR0vVWk=#zE>J^36LJhW6k;h*>%_M z653@BZS`%NP}8j$N_&O7Jyz__{h1WNhYY$tQgrq`aq%jKPT%Ul{15IZ`tyZO4{#_M z_C5G_=!N%cKlUk+apg)g&Jxho`|VnwVq*(S0T7IZ0T>E$P@hmEj;+OO4=jP?J0V_A z+q3;aNc`)k`r`;+0cO7R&ZXN;cSeDD0;ow{I4{#XCvB;y2PGn^iGgs?fYIt9LJTDd zG^9M2xe2mS(L>FD@#K9x_#zaDY5jxWXx~=zJ|st$v@bQ z3BhIglYbW!MclK}U5(bW$>0E>XzsEvp`QRO+Tfe%58ON5Pbw1iyE0|GNsD`jYhOAZ z@16>*8nGHu3N`BHIW)Q3)Z75Db6!Ap=-<)PadkVK??k|AUG6VTBXdr-8^^9wy2*LPPrIcb_PxuPy%DRT zzFDr7{;%GEu&#HaL!~I!`tbsaPehU2=G3oS@~p!Y=u5cRoygYDxGs{jzPejuX3alM zHNRiOciEV#4@|i@0tjt22dB14h{O@gpEr$1FK!p|Yjt`q05A$VuLD*Yd*pI%C1yRh zdRx8TvHktf%TL^|yK|*e%8(d3cj?oEK5nc#qqY~j2!(8ofHhe9bJgWik*lcS4K9;R z&&dd&#dH0Rn8?zjw^Bbn-G~@}ZPtY$_uc@j_;mX&yjIn?ZCd?uCq3)7jr2jqe_ZUw zhyqsuAe5tzFu^9P)r+1-Oa2<|ni9Twrn{1~K+_>UgE~;-Dl-K&zj8faysD{shxA$7 zFWD~xmp&f0BwiL9&|_Kgcj*%NYhnj1%JPL9=Vcdm-rQDLgZN9XN~Bo16VSK%Tgzeh z;Q6p1Zhm|Xb-fm&9k$FZS&_6Ha&x^)QOi zV_d!$CD!&&-(>SsVt+-EC1RBmg4RQgLRVp0Qfk^6>XVQ`cIN2%DwR@KQ_#isA^ ztTwp3>vup|4X9%<`XO*av@;Pn7lVl&lCYie@K6p%` zyO|umYAO(&yyy2Y=WWLYvTEFx5aK*sy}NM{aar2b|%fi}Vz>duLK-7LFLA89{L zgBIRgS$SMuB{aA0HujlI2!n?u%Eitlkhsc3m?!6O(&)MKgY%}c|M~K7HVp> z==CM&Hf_;&kS9~jpYromSde;op@QLdN`6;+K4t*uj)4YD`b=#Qq@bIBMyr?W1)lO119XBW+PJTlgsFxw7uV;4kt`(+Z6 z!>M)qs=Ku~D+f(e7eslet~vf%FjuH)*KCd2a7*b4J<060q+?OJrMKk9B3Gl-b??&I zwQ%zknaFVp3RKbC?sTTowRGyc-y9A-*Ng9MmL$&xg_|7l4|(MZZ@*OU@{MSoh0sy2 z-jFu;ZK^o2Hx?tys^<~Rw!SP8;vD)>J@17QYADU*q>2MaZg0>dhSwU~JHzFJ!g|~KK$xB`zkbdsTlCc;jtN}DzqT3alQP9MhyjhC`_LN}o3FJ9sZ8y?Sar!J zTyb-5tDSZ7gLakf4&^F0Cvh2Xlol6np3LPcC;7;T^o)nOMsYQ&5pI2|-j9(bjQAcf zh$Z$3S*xRYDOvm?e_AkvS`?HKA3}y)ph5f3Ub$}+aF}qrf(RPIzcT18?$>{$NqpP> z392aH>5~BFD?@SSM|L4`Pr`hqvgG-GeUNIZ26Ya;)u!R5ol&05jQrRvH)iQN;*nU@ z#TpwPrzJA8qLMJ+H*8KK;X5+j)ea8q1oL!Nlw)arb^Yx1pH=DZ>}i$TlVO)s`7Cbd(I9pzww^gF45rJHn+poWVWd)S@1Ba{b@;~Jen zE`^y8D@T{6ck_rFthok~F6GUPsms`st>ndC%~?#3^rM|=4Ec`j*IL4(RC zp#6G$$LT&6*lhnZ{aR9gdKnl-Ea1Cuiz2Z9CRlKxWO!Ol{F8FC6-PMwbIF~@ zUtVAJdl(IT2Sj9a=lWspe1MgVI%3puHJ=ZYtG+I1t&zJBA28;o(4nD1W-IKwb{YLJy5^?Me_R;MPHeU zM|f|n)I*M(!{+!#t0abJj74(`W(RS3<=dmor|T=ymn-tV&W{Mk)TH^8G4(%oJI9%t?{-b* z*HUZ86hxcPrkr$E<=&AoZ$3w5;ZIhoVGW&xcDWE9G({?V2q4`x5oM#7%(o~y@vK^wu^C<9s;HLj zmIH5|PGT=#KbGIoAb$oM5mWPK|KTWkuwgNpzvoH6@Q!8NC|DZ4d_Tv!G;sm#k_b!h{}tl^%?4n&b_MIZw80{9ddO(8CAVh}wklRJzC&g0{qtSFIhK z)2X6J>|}REqNnv#G&5QywDdHMHwf=sIUv~KY^8&4OV)*(N7TsRe1kP6q=%YE zZB6Rfqqk}=v5wQ05mc?wj0)rpD~K(w42pU+(0V!KS3Mjv1a5?Gx{N8>zF9q@7NZ;v z^!N9vJK(p@2#jRRMWW=cs|05{jHXan3_YpzGHu`0STwQYB0f)}RxpqA0cQ(W-v{Si54? z0@2xQzhN%E!}mKTvnpmf;Ij7h(y9Bnmf8Rt1Z4yK`htA}Bdl6>A6+P9J+6J6BSRSG>*i>X zHDhTz1(9@bbd9MKHOx{A^cFT|@Ql>xrFZInwrfj|t*3?-_n*6&P}$hkiZuQqAnHtR z{WQ_B0rHvh!wGy8MWix3;}6&cNgwA8Ra2U^oPz;NI?HC3eacASXn$u?z|1V1##X&= z4j!m|^Q;1V6HJjs%`rF6f;<00a@xOn>bMu2Sr}TG9qX~Y9dWGcFv3kTQ(=URyKr zq1sK}w>5E6uXu1m+`OK>T2ch*jYq(nX&wXRLJ*@4j`j*Tl*a0!<5PaReq746f1zZS zVeVqo#w!%h#KY{8vM+z2IZRuay)cDtF^p7>`rbmbB5nfFSxyU~s+@2h8Jw~ACVZ1e zG#j7QOvAQ@{sJ}a4oQz%%H%VVR~!5$$oq*&_wJ^+X`tm-j`62LZj4kSxHX7w=~CpR?+g8ghs{j0&N`JZPwkcy%W(@F;rS#Igz05^5*g$xa8oZK?JVEa*tCovuBODTHMK~b82@NG;nky;S&a&9lP;k5TiVnd){#u>>dT&t?Ht?K$*u%PQ*L&v$gva~d%lC~F<(N@j;J#HO zAC1!k$RPa=1*>yFMrl88t>)M z9x{tUrXMZ$v(4Exh4p6TP{C?{qSK*+@6}`o`yr1aL?$mLlNl5~v*@s{)Zgs@u1x&B z(^3ZUQxhjAr`=cNubK3KN3A5Hf=-hZVJwiq^fr#_v}?~%o=#X!ff>i?*QW4NU1h3X zMt#!Z`;b@5wUDy|%R5xm7gA;~K%na}?{`6A-L&64qX1GoK>)ygUgOlsPUaCT>Z6P4)51)NO@nKuac}0FO4~e_uogZ$F2=)LQ*|Ohm zM$nfWyVlR2+yI&cITX?Es>Y2^oI~w{;CL^|2_daxCx91&-a*TG^!ZPW)s+6cA zQYu+9W{|V=t`eZ+%?JZUDPTf!^;J{`@_-0-nAGD$EP$*juJ@8g&uJ%|565Cza4*$7 z&14F5^QSjzY0OgOz|hv`wGS(JuidxHQ-JMj zHt8Be4W#~P$ja_WVDt2hpH*v@L-NThI$R6bV@ovALEO%;uu=3JEi6u05|^1vFzs9i zvMaBo0lh!~Cb!?lx(!iXh}?g1{!iGuqYQ+dv4%D-$7D+qyVvji-!rl0NnG|>1@WKW z&QLKl}ecqy9oaIDVSWMw@VwnM+!&z}-o zFEQw2!GOYg7mu=@%x(GI69GwYE1-?UX7aFf-$$er$ zHtg>HebB%Kr%Ob0o`RvrwAT^NIxHWnZQ%Gwcm9mxOcg_71PjA`=FOCm2(yb|lw=J} z?F{aad@s?zb9DC`ao3M-KG=vGvR!tUBdhX-zSE;k3b*Lb-W#R+(lZ-=>wX~-T52Ij zwi=9-(h+F6hrC3Gi047@hCkq41<5{sQa#6jm#Z`#uax?Oq#dV|miO^or8=K(F>^`< zA{;C3Lz!l9S!D{?5nz&0-h^Cx!nEHUBVRj z-+;v3gK@(DFu6j_ocE1KTgloQmg^{nrj+2ZdBTXg@wpYPwY$#3+EX{wfstJ^Jjxdn z==XUFCQoFVh<^U1I23_x2t4_2GtSzZXrro`})4>(JsB)TA4J zSfMHVYO!cBERpcO1I&}}$NjW4S_m|BX!6m?=Zy5wIl&NY__71)z75Z7h{77Cj$Fu6 z-JCw!0wRQomy7PD9?zlfyJxSEr7(5jf#-L{*!6XHOs?OnJWSh2-xREv92I}Mw70GYHcI*kpy(j@6$QMVgfBU^K2mh^grthAT{1;1Kb>)y zQF< z|EPhhJ8vzgujrFx5^8QegX}_J0N_!-&y58AKi$>;(g}5hG!QwM8`{C(xsvGuQ@GKUm!E^s0>Zux^f+ z5`&UB_PQ^1-S+JhS0>;^9JnGE)K$>^)WPpm41ULoKdb+QMc~|$i>UnKVJg{QCE7Zl zf3r=u8`dd<-AKB0tcSEM z*=Ojde*G%5?0#SAl%0EO0qNhHw<=pNbDY44(>w_B9pFrg! zri%*HvL}LH^}(6wwZAfEw*8V@t8y)T5Cid(J=@>?+*@1hLtGdvzRuU`ZN?e_vfi;% z^(0IDtIJMrni!Lsx^bi{Up05xFs`4hG?CQi_$`IcZ5H_Yd1d4~__=^qqJcanID_Lr zjeaSyp@_B9d1i7#b&9JGy{y-mk^vM4W7 z4&TsvoTQNp@ViOV4oK0rQ>+@Aj=5Ovb9C;B_H$+LteX2_@C#BnYvRUr>S7;!EB0Y- zGF6yiyy{FFQpDzlt+zTb|OiTS!6t&!zOnfL(+vhdcd&@b_`ieJ@tr-N2z* z)2H+w>C!z7TGZZe$;|Es_UYnMiEdsUHwXSs?lavV4ZI(BLaCV9w^yfo-u&{QUYT?H z4Y~0ahhMCAXl*RGA%Z{OZH74i*q_|qb26ceA)-+V?KpL!HW9N^S4?r;qKy_08JRFF z7W8f_=7=9e|X|?<$as<738ste>jq5ziFlj%)d_9PeGhAN*Jm;P%H zR!g#}BNZ^H<$6|__5@#C|FBK%1SFWymOV=!e|D_qZ{xH3ON}fyb&wf-)9IPYrtCqd zH7t5@!FN7tcc4f&Mb=(4Cw2_(bJiq>KOd~botFR;;>3Wzxs!Djp9RTnl?crO+>1Y* zo{93x)ii8Yde9`&Zd2c#Do!FU2#jpRY*f`1!0hf9d-k}|r_7yLZ#F?w8fo{2^Nzf? z?H5#9Pr|0{7truWJSZ06`5qSro@zX2uD_IIsyTxfbNk!BozA4l?55pLyv4Zhr`=E- z%+e!^ARJU-+Yx@I<$EK4kiJv=-{Mjgyg z<-ys)>BQ1=+YXkk{IHYIMkywmh9cccDTg$3>RCv~z=%WUn<6+}JZ}&G#N>Q8FemH= zEc@nQgwX1l!^qFIBj+(Y&26&O@b{BNd{$6y3qxaCZ+&ljLy1o*yC{u1TdGwlJ-l*} zu`>&ir}P5oM_;{Kk=obv;4=5}6AZ6F;Cq9ejS1J$%#7WV5A|-|eD;F0jJy7U*9vjp zj@`QUw-zyz3z-)yz_sA~$k*jkdT~a9ZVq{;0P^UUG{4vUsm~JR_%db1H`X8r18VsM zYjlY`ZalV`=+?GB8!Bk;tqX13h~AiGbo|?HeDQtr z(tP7lEK%h~qQdr8NnuN;!SEk*t|==5O3;bVJ%-)Q|6Q_W)=TVj91y zWH898&uyd{&Izkx+@-vB;w#g2YuB-2fwisroaIFG<2Tizej|U0X=bcCA5-cW+^Zkk zjyNZ-Rgj>F=$4(jW9$`iy1~qnT`F_^8Syf~Y_*i;HW0iLQr2P22i067Mux=Pn z7PlE`>g*Jl)vs{yf;y!)kvl&IJgIoQD=QR&s*zWn{Fl=pHj!7!?DUU>ptQQ!^IA*> z-V+lF8585ckN_(_)P&%bB0E2|M3OvkQvF`BmGr40_dXvf7TG0le45)0t(M!l-&Fp* z2zUqt%%9?7Wt;GHI{g__nOO<4pGog!Uo}MIuQxcSUOlON@e0w!G|1%C#t>pifMs+# z?RKT0nX*nXQZ;?D#0yzs0JZW&*-+504F8|b2{@QP809zVLcqM2^`Ix?_xV#U&4 z{c4#{69F@Pbq#fzM-%?sLXx(|I8SDTk z>H*AEy-I{Am90ulq0L;%5JQ{Qu=8y74|}GHpwc4M4hA&03-6qsh!F8_8#ypKO}`4Q ztz;j4GLBTk(XzIh;qu;P#8h}3E{U29sB~JpgOdA>lF7Z8G_NKYF*Q$?%1S==@m zrl%;&K{SXOf>$3gGIRl6q^4KIotMwTmXdCwASJw`f{eyi4%ADC}aSNz-N-)HO z@6I;@I%BH*RA)G|^!JH){F+=Kj`A%O+@p zg*l&}u`6vMek4q97j33i=TLvNZ+rakao1@&?!Y|{Xn_7o9Sy3VRejpcxrKw#1FbgP z)buQJ_rkBbL8v6ClFO4!hi95Mv>b5vhMzfcbuJ20Dg#QmU0+fFH@EMp#sLL%*Y5cI z`~<$=eo6uVUOX0ZHOB5j+();avW!LhT>0FP67LBz1yu#A@FWaR?AK0R&(9`_!y-=*hv z3z%K~1a~{6>ciSOb1)u#s)HTewtNOSnW1Cqc9mIFUvS1d`(vt|mcV=ML^v&ZmnPJS zNVk<}H)>-)6FV`8FbZ+(rt5)Y2+sGp7dqDUYkaT_5l9XKw}uofkqPri9iF^pQNIqr zxydg3C|8J#wt8&N*XhmF=(i~BcUm5(8X!G42d`YBDC%{a1&f)8H%6xz%V%Vpox4m@ zW~!(P?nLwHYI=6YJNiAJ(uu0CszRIy zKV!nkgk^k;!mQPaSf)Q$r$pokCDbf{(Iu% z>+35M<8l&cM3_D=B|gzw_Qg0T;FsI*O)7=kBaAU?>s&?R+@%XmYcgCdGIRVHBzc8M zvrw6EpQkWPG5XidC6zc;S^ILIJk8&6AnEf!qtUoLKV8-?QBeTXvn@H(7+-uCu z@>HY30lGgwIhA6d*+(U48c%{HaPFr!kQWMnyh{`J9-F4hsj+o=M~b>b@}Vt|<2h2+ znSbP;S0@#weo|KP0>}Xo0UIxYAOCL^@P8?-x|I+AyMd5UcJ!W9tMEJh2q2fcmqYh| ze){>}pUD3#Qzosv1NQiE_f7cOJI~~~Z9qKzl+$rfNBF);Yavs;yKrKa-|VvIt+vVw z{NY3D9jb^oN-EC^bHcAjwnLIO8!#U66Z)-}N@7k+R<{?cG8#u@UG&b;2pymQJ5QQ# zwOG&64o}}YoQ;{?vk?}1f$*q%$-v-RTrd8PvMbk0=1hL$gyx%@4_V9|po)as-Sdp= z9W`MtPF(N{4bEHBlfDh41fv{{%4>qeDFQtD;fM%8YjU~ zhkNhUY-s@9G;e|SE)gs_Ni;OLDfF{ZyF#a_bV5voZ$WVnh0seIS0YZ)8;(#5n)QJ` zY{G@)&=^3-PHsE6|IsHA%o6?Xpm6s`2EWuQ=tq$oFfGiucex>>DBH$Q8`N9TMxR$J zZUyDv!OpQR>E_9{jDk_~JNosR3x!m($#s8^Y=B5BZWPn`H=(MQjC9z#`S&J?ekKcj zwqZx6;_vUBAPwZoLL@^@8ozU`uzwVm^+?{V_=MzBJu5w@P=F>%VB_5QT|aAx>fj_kz2osjzltB5 zz@WE&v$HEy0m{;n=i^2C^9Vp2%)ZHP!O|jnRF+9hmB`BsRIG-lQ?FeKgGb3NlUat( zQ$(l*V~M5hA;S_1An5YWZ2UE!>M;&#Y4be9XYk65L=-eLF1#!XZAf0h#xXYS@~pcA zzdbs#OtsiHV)bT1{k>rU9*E&Dmr0Sv^kZH)cpCcsgDx$Ao_wBL=6*%i`h#AQwDXVh z{I*XsTq}S;h95agHMgBFzOgNA{S^?G86bt4UwdgWwlsIgP`-^7(j&qY6ZS6#8akh; z181^w{;$H$B66r>qk~2$=2z^7W+jKut$?=Up2Tf>|64`H4GcF71|!;MGUr_ftU&vf z$8P%S(`mr+eF>wh6@46=RB336AR{Kmqa@G(u75Y@s!wRa{}x^AKN;ZvXtyBWxS&qn zaN58%y0yCI4 ztVTYi)6-zO-n^Dygl<;Z2NQdqK+M3;MIOv3&*6PKbz3+EHM25%}I|U{tVjl;7#t!{nNTRT7yN z7h(k7YpVI`K%H*<+yU9hH0jw&UfDawrVgu%-<|}B*%DaRm^w3G@!l8L74iOPoYbBo zW+U+D!A}{)O?R(~f})#lvbY1!P+$)$w}cXkUfp?d&$BlE`ZG8%X)qO%M_T$!!Q#E~ zbXRXugs9*S&g|(PYsZlMl@z?;4K<8;H9KQT#Pqr_inOaSEW;yCh@0U#dBgLfh|wlp zpU5?M!jFXkqdYaQco$MS%Z=%}WI>_S_*T`A?Sg(TJ{h6**3o-_>N`^!RzrP#t!B4xm~iN-^=m7d1wf~*P3-+ z3(w4quUl=Z_Mj@G+lED^mm`jN%SK3?otM={oZl%fLlo>Yr*+7&->@KabP9#ClOZ{mnSP*?;(F2>QV&opac3W%ZX=_N9CEhydpKri zJcd1CVMcJk?T}Lkbh*%(@9b~<1epx_!jG#Vr$(Y1W0Fr6pm_qdY-h#Z(9q6uk z*Ye*>_aPpb1#4erPrBH|=}WvPei04^@+{Vzm#;Js*`UnH!tG@hT^p>MibiBPZ3WjoL824$BL zNh?J~H2$`~_oW7xFM?Z?MS8U8g6asJ>z@Vhh1mL#kVlg&r}UZ=swMM2_qM;LE5elL zzB6`D4_b3+z$Zm8KMG&o*A?ayJi%wz;XpSx>Eac8MTCu!{&D;KJFszv(R)jqA~pSu zyPP0FKAic?SPpl`KjBlAcD8|bN5cw+x5NbV=@mPP#qsfUoK`JxNZ;Ta%D10Q0g7Tl#^|Lxj~F^GDS zVwqyBh4rV{Hu%CcPoqcb`Q2FgRdt z54T+OlSWYKD#M+2iX`61IB})3EsMKatdzoUKcUv!1MygCM6N?gja-luXXPmpS3y4P zV+&2aRU+^6k3Y$rriQ8kKk1&XpP9;vVMtIqXaCKlux8!(#@9x~wYt z!PVUps{?gAt1nwq84Mq`50?Ax2nZdo_Q{5vo_a|ZNy~P0jnYl3U#E^f-HyCy?0PaC zHXZW%8mLjlObzT;+HlO$A`8H?W*QAG9&E1SLyr?~i#e_Wvdlo1vMBf8W()t(S=B)? zjRl~~{7+oLVdFrCLyVBS4Cf9!5?Z#a9p?Qb2kbNR_EW+1dE<|}|7HQ^kmXaRIXugd zcfkeZ`GriMa$;HfEN{7hW!)ifPD;o-&1k(y4yUHC~4M& zGrSVVdsGoKnEUdn38K7jgv^x6nK6_dhU%7{P z@d4)?c?Dc*f4RK&Ah31sUijdWbFOK#NG8ff^W!VVvUv)Hhl`QqQNQU>=0H>ljkhB9 zHa>bBV<@MHosKN>i{-OZECzMPWJ6oeINzni6%7vLZJV$Y0b0B=9)=RE;#pq<4Q1tXuL!~XCMlAES zdZh#j+R}Sx)tlB<_dk{ty5++uS5m&9V6oO>7(OzEg{qPV9DAyYvj0xxT9| zamiXXeI?xgpq4xzs3>>P@R-VsG8X==VQ}rjH~u)R(L*iAYcFD;q!Yh>bsF6CgubVv zht0kSv#~x7;DPE}H?;5Gk#Va+%AY2s66701idO-sS+Do3c1ZX7Ab&m(xzaus_5WUI z?~=3nbG=sWTO79U`<@aJR3$>LWmzyH-J~}r8$V^OiV4c0I}z#A=rQEV9-NHphp{V~ z>P|mHHufl1u7I^#SAW)cz$2!I(wl{~&RU^YM6)Fu^P$p5ivkrsCNGtXnjHhuw?Ad) z*AM+AZD{zr#>-i-A>gRE;_xK|m_ClplHQXowxcyU&%=k_M~b)&>p)rWY2}@K%v*vZ zQOb@peY#u1_@J4tT~2VBEhnn=nsD(JK&JVm2^6^5c!^RIL5eD_lBKKuV_D1bZWjQ? z7-p8k#uGt9h9*ocYqp>n57MRG)X!X(^s^*BmEeiJ<&}+5$8wI+$l0{Nc_;UA|3(bg zC#m+Vt3)2a?+Ixt$EXuI-`*!BgCRh%yLN-t@t-yXk&Uf0TD(`Q-^n1b!*hF~f#D|V z7(;Ev&;ki;eD2%emzO|GUr=XR)PGufS!>-t0;Sg>+9AF)sWA)@*fVHy`U$!Zn&$N%3AlzQ+%r#de|kcc&k03WB1Ed08%<@S2cXv zN~KxYMEUc^?{L})1(;K9G3Oc#sO|UbxBl@6A`_L25NY!92Y9OC-E_GnD};D_3aTzM z=+1z;k*yG7lRd>S^)~|edP-nFzlR#aSM947K>jFHabWD&-#GWDxs+qxN1mi7s~My%n6_l6a)90POIIH@g*@u1vVQevY-3p_uZ*Nc z-AGP`-bKr(RH9xNe^XxaTwQC{7nuAoG2dz?uf(Mt3ZFl7x%usLrN!w^0tsThFYfae ztk20m8KGK+n#h^^;}FpuMN&yeGxz)j{yru2j7N1O9vrvhMB?%|Rf(kFjieQ&2*szw zVNnBM4QnaY618dNhUI%JItD6rP=I)pp5{Dejx9kY#x6P)^f89*Q^||Zz4kv)yn7f9 z%pHf16Up@_R9<7F3-9 z1;8J&x+T`@r7VjNDdg=YD99rsIC zW-rUdY*V=qrnu=5=z2B&=8&RhK>c&`!}}%Bnpag6n+LS9n5U+p>QN(cj0|*qz1`6pd^V0kF6Ni) z(4?`he~?HXmZyoG3p7QO?=t5n6akI`VngtpsExxZlPQ4ttcI;>PjP znlZmCPlN5lRNpHt@C=nz4> zIk$Y9ffu&%17ZZm59JY_8IVKN2zhYwd7QkY|Pv&9k@D-&iUMwmcCeXw;~imbLnTeFV6$R%Hm`{PNREN1)Fx)W#w zPkAv)PG_8M;DOS$f0jj(fC9Ku+v%J8LdB_U8mF<%79#shyQsAo=53R1EE!zWtifFo z6Y&}DO^@)wdahi-_<5MOUO%5+EH{o}`!&#hfGa)s>5l5tm34G@PT)K#^>QhA$cmwJ z;F;3|1;fX(@>(~Sw-2RgYeFg~x$9%EDS|Ryrc3-R>swIC5J-)qwmLXJen4lc_p7qQ zxh%b8)fvV(5n_63%)(HYa%g(cgAW@zI@)~^SQj7c6pASprbo9>$6w7?=h~|`N~eT( zJ21M-ydy96EJq@9fvG)SaBGEg7aN@PI7hnrayAx`6x)|%55J%9OeStg3 zB|N0M3V4Sjv0momNEN|;ykE~R`-nq+38Z(9b_TWB{&{!`%GD$soAsK3C-86!P zlC#F?Pp&Dgh;xj}p!Nwkx>HqF(CU>x7VqhDRG#SV+KLnGKHcj_11YCi6nL&wxOBLu z2WBdmXgRRjo;_2>42G1?2XmNbkk6Ja+O1|4Z;!M{!ddgwR>Hv#Ur0@_w`S@#inc6k z>w*TGetf1i73JF~_^>e2({!>9(vcL7>MtDb_O~o)r`K|>hn3IdFIi@)RPdBf%?e5U$#v;KMR`v+4(C@YMl}`jod-xOPOm4 zzT2WjW*sr-ppS#&&bc`?9q3Qp@b&%!TgTzu)ewEg1xJ z{IszX$0536CL%b9n{NqMp~Vd)5+1^K_M;c)g01AogLdLZG=0-~vlLX0W>yA7h>s~|K)D*a)7Cq#1Ql`wf@ zBOdjWz7YhBc-!bS2);k0Rq+T)H84{B*ZJ(>jBaDW+!>BakL6gwgI^&Xe1Z-Fk^n{W zhOuUrVo!PY)3Hm|0H zjoY>W%lNqR4lBD4h2Ko4e(NWNe^TH{Y?^B_sPMbtxKmQitZB9^)~25qtuspdZu>@; zr%yBIoEZv$2ax(~>nUHp8jG6_7TnYFV6rbo8rgd0_Dfax?a7y;=FUI)vspZdv;l6U zKuG-c`;C1{5~L(u;ozTZRcdhB_b&a;!nhtzaV*K7!Vc*hpDKum+{#^(;IG~Fa%f4U z1^&!zbIFVwXBPYW?=-Zcm|eRb>VG7aWY2WA9luPu!56TfmL2+a{MY$MX2^_Wq$>69 z)Q_2`Z3V1}2b287M$;{W7`yME62rTtCi;|K1#LF=ymvsi{~_YTd}53A0*z@gT71%Z9P9N+3Rkuc<)$ zM=h|b!?d=PjFLus7(o!)G-boNFv9cMIcR|X310C3G-VbsjF*PRO7KQbRzeE5y(7C= z#kdbWJ)3p=p_8QP%_9R7+3+9Uy5wePc~WX;;IZ(eiHpPyO#`~)D39M#T=psWoqGsx zvj(c3foI!f2-51(zg=mHvr73S4FpEc?^mCGOcT4-;H?4su04<3^9@SbB^{`*{_7s7 zqcqVbRA#i1ceQB?nwi6aL|NIpQkXh%Ef2?S8;Lf;PL%8}mq^toNr|hSypuRtrx31% zQImppBA4XqJRU}mjnx^3oc_P1)tQIkk&&je?%R3b6aoSY8BcLUDssAt&00g(eRYep}bY;4Dbv@ z13Au~VvV!n<|%^((}7D-#ZFb{NfYsb)bgjv>rEO5cg=CJk}hiOWSJh!ZEkOG)2_V+ za^tXM;}(0_>!_$G|D408^z`Klg14Vu{qMy&Sr4()fChwcy#LYNcLp^Twd)2EQ53L& z(k&DLY0|q2sPvZ510vF!l+Ymv3QAR~^xhIkq?bSdQ9ybNNC~005Re)mlpDV9o^$8U zoSE~Txie?(z5B=dk$JQB+N-|r^E~g~w}BA9Myzq7w%(hNEyJM&+eK~z*~Q2GxiRO-nw?b86Ybp?({HIt z4x^9GMm%rS(~3D8w}0BZ`gtcHIU@J&%Yj=R>Mvt;pI}icA_aoK-{%(O8S9|NiU7rS{c;t9#`S-EiG1Po6Mp z)%p^5$;wLPdG3bB`;Yqb=H!$+A1e7EF~)dxX`$#^lRso~=v*P~J$T5tmN9u=D+}fI zne@EsR(x6U*QmdK@X9ibZ7;P|=|(r1MH#EIPO-Y%RT|#~DSMp4pzJfOtJ*5}M`wn| z*-EYMPE9N1l~S^#)KY`~!E=lcjc_{w9&I z$f1-KwuFQ8)G6j6SW|edhG{W5k_Pq{oMR(RSCAY65Gn-+Z{>BXU^KV6Hr{u*dq-e| zCwAf4=36rRwc{>hFHQ9@%-B;TvXju=FPz}-?q-2cu58T7Tug~^Rj?M!%Zy%VKvOKH zn>lr%__8D)&AqZuay=#2>0}AGz-pzpRR}3`6)5%4mT}>83(yoJ=hHpT`ypMABxkP~ zMGZ!FI`_i7e|fmOaU2J*IELogw#(Q5A?L$L?&t3`fTqtYn%|%pcQ}47@spdJMa2X- z4>GpwpFa5Q=gdo$a)p!POK(^nqqiyfz;Mhhl>7M2*xXgt4`SZ1am*GUX(3w8O6E#k z|ExGb)6d<1^{w*c4kYJNukLt6ZQx8nN0PI>=(&d`5b zbmHMpCG~G!{qwqLGN+-Hp)o#q-9?Gq%g^~dDPppo<^=jvr0C<8eL5wsnK>-9{YVKY zzNfNK^Ul3D{;gI<4_+Kg3BFAxz9-?-JVsE5`JY>YewP|p9}LyH;>Wj)rRKS>&HtUI zG-F-a{`5&;N4h~NFwUMeM&W{}X02@gwzJen(NH65^htg2M#ITV#F(X$ zsLR7$1hGcLp0nd*E3;$9A7KjZk*>#aRj4RA?F&3m=@d4()=3nj@V?%|#qOjndk;x6 zINotJd3&nva&}rg19JPQgXbUTk0RSGDPbA%$!L(QH#w!*pMAOA2Hlgp%)W?5&G@Xo zWrUtQ7UGuJo;|ncPcn8zEA>HX=@-p!*O%?FDm*37XU=40hQ=%_!N&CQx_EX?nlPb z!lsnMu659!<(0}8>2JDGpmf^t%v<$Xh^}cg(+%zZOCu_DA(BR_}#&{a(vjo>1r_=JUp-|(`av5ybla5jySsl^*O5WgbVZ>}m|z<(>Lm-IHz3<`KxcGaM%3(_JYKyZa*ULid>?|wNEpHRTn3M^a*vDM|PCQ=3`(={W~}63#N|m!{BJjrnOIIcX62l)-0RXVeBk}P zl2q#vC!y7s+T)M#KFbJGY-}lBX>krd!<$rYDsv`K^fld3rVKxOM|0DP&DG0eo4)9^ z26rKMB)dL+hc^~{{nFH(Ug4RMaj&~~oF9vco7pM~yl!=U!~6L3WgPT+-|vdwkM~7u zZp-fqz2DrKO9E*$^*82cXnVKDj7qdL(L#IYzkeJ2JKnsrS9_gs*`4e$hjK*mTo?$< zdj(B@J?1)bH?1~?3p$@JIs6M%7M;w!pw!)CPAC7P`gM_Fs^g-T_avRnYu6B|QcC z@xH`Lk`J<~y;^JRqt^`S!^c){=u`(HwD8)Qy3}mTmSXx$S8Yr2ZT4p3-Ngb>`ufUJ zSAj%~AFxK&r?4S0;m|IS~*ctD>p1|MQ!h%j5XO*5Dwn9vcU{q7MuC`*k zjw1fkCl06-83D*s%@mGmRrpf$6OvmBYGFqwXfuEekF29zIpLW(#^glD$(D8TMrSOXK`~=gHNUGui`96 z2W}-af9tL6W@fTwhH|9sJ+W7E@bTEtU<5vO%H?glAG^J)PwuVaU?wP0p@aHYykX;) z0}mD>Iijjf4{!E*EN)q0CMPRV=i4PzQs4486~_$;>oAi z%s$1uNZ6&zWH+;plBSMQdD>;K{6@T-w=TSRZ?sG0H^!>H_`p$P_)1tL*ZgO-JJ6pJ zqxY)zitlyM5P@uNi-qqd?-{W&XobYw<{`dAw4KbOQ0s!-^odl*`-k7$egr{-yv8?e zEpWu;N@aXdxsqF6c!M|~q@=7&Gj73ChQr4qtye-0twIHOZzf%((g92J+;l-93^_2` zY{}N2wGFP#UV6$AwoiXT@l>ciYE`GTk7F&bhR%NBuI9<;qK~2zb>hn|boh0UM@-=3q%Yz&ps_?xpoOjU% zC0zg?K&Y591~wNMJ#nA~d)|0QmTiKu+^i%=@0D7Oo)VTn_qJ;?LY!%E{)JV+kj+cq zGB|L)4A5c0%EhbZSdlB|_}r$QzXtY9lGE_A$%eG{t1kBfP$E7ZYIH&PQ4~v#Q}4FL z;83=s$X4ni+Q61dIj1O*LM8nFNeCjYwRasO3f?9YlgVT4ye@BJa(Y zEv-`^XXeU4w0q?dY4$&J+-A#Vd`7X(nBu7$@W0EA60XukG!RIbf{S?ZP-gZc)iTZK z2wINiYWMUXR>y5OgYVywQN7jVqF~aW41e+_Zj&~y{Kc;nFZ*WHQCjx4B)w;uJZ`4s zkNHFvBGh#W_TqkO;tICtZiitEcwX&E;{EWV3+c&2Cs6=)`q1m|OhAo7Prumnj-vg} z?(-{YnuloLqfz}mR`NI2%p1hPd#sGsHiAi4sN6~}^x8Z&iAdZlL{(S;Ljpe9>HW-; zlLWNhC=kbVW4<{7^_CdQiI%1zLsQ*>e9ys3i}!E+ zC}8JT0kHG5(n|>}19LW>748MpCrEV*CEP7o+8$4Ck`c{IZv;srP%u_|l=o`gi^Ukv zUnGuZPW{2j0!<9q($1{zObQBTUZb9ozHry5&rC&INWama4!2&B$-_)tx?bl?Z!r!T zXp-_wnp=Qf_caW59+ycpLeviz@unX7wpaVX)9O=j_2?Ba& zM$(ca=nSsDL$VYLUNfYKtwmDpt&n?OmjO{g!E?vfUqB=*f=;IJ(Cev48iY>~RB}j{ z*RyW!;(b@iNZ=Ptr%}R}v8-vKAqwk zuW5}ImyI8|qkLjTlGt~>K%7T{pMM;ym=AvkZJ^6cyqyZuluk*N4NNUBk;lSAtkzjL zEDgh0P3BF8OyWxFH-hs$84ReuO;XR4|5diNwO!86EH5xJCJ#DASS&kGGgHLERx|i> z7hvGd(e>8{4vvoToYEQZ+Y9||E5|RLK{3~TwEEgE%hlfn92F$Hx?k`)rVXN^2803O z5u&%M%3wv7LV&i`JcD7tl7*z&9MEFmECZD+ zm#b)NYYwJD_{HW^-b)3c5bIbN2M($fZusZYTrfNF)aN+|;Ut9*F=Y_W**)yKf_=yo zvF_L*q`o`tZ!6|79xjtA_be~u&x@AF8)lD35KUYS?qy)Mij~!ptqLL1`#7|vxI`V) z^bUO!vZ+8zyc+U~5pMH#V|cXQ>NsWrxBM!i2RKX3OXL473@n?YDa$Wzg{SMi8dzL( z>GfqQk(s;PwgJT)JmIVT7Mc2kg=Wrv&=9&!jnU!QfCVq{Krdr&?q(4{*{=I?RM4>j zV$HU6V6+Km@F5j=n09nZ@W&l!|6I5nU7oONNP(++Tz9-0aLk9A8M^D?|pwW~}oy5Vs`F&NgsXkP?FujycUSgPI(dMBhO6dy)bEF6@A zI`6*Oa-IWx49Zo4mWr zAA)z{D}WOZR*$Y2He0cxc4G;xz5*1Uw|0Yvw?L>3tn=93THXYyoBN|cYFBNKpM(KmJ11;)R6b(-+b?q}Obm}bNP5fhP z^NJmKY_2w>>Yjf5nK!xuC!Z&)56#XyWJ-O^>vB>g({Lg#u?Q@@e45=0pJe@xvdxT_Ms#)gJCaOodEW z^xsNXtHAfobUcI-)7Y__1ZI1~jylQR`OxOkt%qq0-o&VBeyKeF^9JL|%khi+nLZo# zlyFMxfyo$ds^?fc_$}94nLb#Uh{CWEZ?OrU0PBS$;WK3cpuoNB{S+;fSN&S*O%9X< z0tld!8G`m(aJlwJ^}<)~u(<3WizY!&47qQD|-)&J~-Rwc}Yf$=a5O)O()mK!Qe zq~dTGhn9^^V~~!g6&W(CbXS8qn8br(f_9f8*XoP}ZBf7M!a3pizH)z-BD*zpJutXQ zW(0B6;KkJ&4f1zx+9(F^L3$(7MO5;{UWl5fy=-GnAPA7Wg)9CnM18;f)B>x5GYgm82po24Y42zSoKG2bH`RioCz) zOs}kU|2a&RZ2KnbS+rIs$Y;F&OMkcO7wos{R>XSoNTQ-bOXS6w9I8M%t%WYiuD}AN zj?q({n7OMatnsHZD#<1JD&M}i?vQ?lO~#-3{d%>p7J=X9)3Fu zI`M$mrE=0<#Kh}BT1r|``d}&{RfV!FXdgr5?H3uRG4NemA z9fj>CC3yz;v)Q_S?i)=XL;;jMD-~e}em|s1C3SY~mF&^hp(_(9H;E9S z-iyPQ48bNN(hfo%%OK%n1x&Z1oj0)cT)Y}qnQ6|l69E7 zbAO&=5*3mB+Q0bhb4PTm_4#Wg99yXs2V=R(hZ#>rg6{PLAIo`*FT0R3h3(8Z_P`|x zVIQ=me$?WJn50pMRvP4Y_h#c}8Lt`zvT_Q$=+`!u(5=SJ|*j@ zJavaNP-v`kPdmv0BlMt3kf`)4sv3s4r;A7KPp{KyKdmoIVu|CXo)+}{aeK9dw@bd_ z`PYYjirm5PC4I=>vRRcjLHmTH#xx>_l6WJ0f5G@;0uo2XQA;bg*A{GpNK+{1sQTEd zmEWXVkf8wrf$rdggNAIALEg1WdO{t?VVWXIet~B1fDi#fgZWo@2$YbMVMynwKX?UP zKT+y0um^i|q08mUpS_O_@-2M8g+&dQ(y3~jln!N>oZ!dJ(Z3j&;J(`6 zq=(Hv?S`@3U|yM7aSQ6Zg)jOCE3EZBH~*NF`86vuG^4U3n`LvF;K^%waQ&($qQ=^A zV;;p$kiAM70=2Xq7_eRQShVmWV&T$Ix41hg(ni%H`PYM!i_^qXm?74- zw_)u5YRZ*}@2|)V9R`Eyg~{%UChqIi)B5w8e|6?MS|y+LLA79_$r@za$hy|j2hb`~ z3|(&!@c(X9lwcDbwdU6_FF$* zfqf)4k&sjnl4ijXjGU!xy(6Kh?O*eFc@^NJa0bC-MX>Vxewh1l%)k zU_=NFX55enbPcTd!Mtw=nxNm?>bxC@3}1`pCKR@33btLs+X8%`3F?~X0R$x(zH^94EpK$z|Spv+bq2WYsz+t;^aBQypMpdwWy0j+h_>?+Z+;_ME?6VOm z!pUWkysgi0v-A?}_tZxFh|G=Cw8>p&y_)s%~%j)p5GLpud^=-%=D;5VOlE{IC30{lNTQCtopc!8SpuK0l%l-xJ_&{6ak%)JHmLLkDz2Ns`$3D0En+D%W~^kby8#F;jNaQv ze3|P3y*RPSf}FNu+Exc@E{AXH1z0&as@enxl5vZ`NbU{qrZ7@lwKJ&=^!HM_fN7CC zb9JmN=Gk?4G=iAF)qlTf_3S+h{Ll2Xw*$z{CWP;1cSB4iG>+MihDzX9*LDLVxn%~H zK5c(}HtT;b`N$`)1r&tQ?J^C4R-}VC#>D@AqcLf@lEQ@iDBTTJImKvaEufs834 zV-iLm74OvjoB&DxMTKsmNnMXeX`4Mr28L$d?&o#0U)X6@_g?br+iZerV=iauFs8zQ zrZYSK`>wnOqq}AdsEs}^(B0S*_@fPiKdksJ*W8)G&udrjap%jhdq^-@eSTy!OrV&HeWq3(-VSIbI8g54`bu@=MB= zUQ8%oUv}hBszdk?D~B(5XV&DX&j##YSqsxBog=@g$kEhcGv^++d1d41%K}eOEXkjc zftN7T&jV)?zj!C+!_R0A*w>3(l(tR-CzN(jh!dD;6X-2z*zkf9mygH0=REegcuHU# z8M;#c>?NR@z}JU@Q(DWcj1Brot@C9O5E7mEjp^E(ZmVqe7Fq?iwWDzw$cQ#;@PtsF z-VGUbw`~XQ_}h4f8izh+j=nOk6a@^^nZpN8m0qo}R!Pd_=s=>7{?zJ4q--7~Oecms zxTC3c#u1Uy+3v`jr263}GWJ;!UDga;8^gZ9C9y~7BX^vVUoA7xURx)@>={=;`dF76 zO>7An3^WiQVYxp%U$2_^`u3CiQ@6aLBn%wpJ^*Z;$@tu6%TSRU4Ke7n?+IH}O1_)C z6T!C+LsuZZ9+7FjwDaeLnRr0*=IGQFZ1ONphE*~wo|$h?OOVm1fFDwqv=inCiQtnD zoF5Av^vRg!1-gO{b_Tgs0`*z%?~`q+R6Hoz@Dzw9a)DxV$0T z%8h)DlS@17taRsK&ze6OjQwq%h;a!tN}eXkyk4Pli!1l$!R*ZvPTsGYvi-I4wu{EM z4WVuhnrwg7=K8U6@CHmDbrmu%YtC^jfs%lkEt@T0d;^oWG^huL1rX=_$&l3J zF!rM-h7eC2=kL`43Fpz9 zM93URQq#1De6K6KM|I^aAlLi=m=^$(r#3@k#Kw9$*564>M9k2vnp3LF1#%WSx-Mi-F&(-gaS++di&sb%n5kR=zfwaB z7F;xmNBmfGGOXr(Mp9eP+=1XNveFh(U1rXhcL&DgB`g@;k5h@ybS7n2Np=H8O=aw~ z2bfjC8P7w2iHL(^YQ<8wml((mtX*ls4{U6dYypD)(b)B#H%zl#n9R?W`UN`nxotkB z%BbZ}8(QSEQQu>S8*(O0B=66SC$td?rt?PtZ*SHh6Xpx+vg&SKgY`+O4xah^)5C+m z8f2C?P#074=E}(bGfm7>Kg7y1;l>DI%J9!_Vy=m^&G37=g2 zxU#@>>7Rusn71m23LVSbB_w%oA%dI*LXG6U=nI-lny9tI9U2r|y34rUY#wx`iLIsE zeHLuZNNmN`C`QoEI!L@s|BwfRquM*T0mQ7_;3-Drun6v=X(mtvdXCTHA|w?_LBbYL_> znuk29EacAuK5FP^cvlAl{qjZMB02Q2|CKp=&%Si!Vt_3JFz#9mpdlr&f6c`L=`P?%F+$;I(u}B(Q}#iBIR7+SrAe;)bSD+})-2fzhs04I zZ?}Z*Lt198x=?k93&LUVaKDQXsFTn1JA3cEfBghAM~|2ONH-#Ql*M#4l>TV62QOM? zS#ldvd&!umnQ{2&Rp57eNHJ8%#wvF5S8< zk8K))y!_KPETZr>nhsm}n9Jg0^l*UMls(Bmg*4|yUZf!EhU9jl#VE6B!st3Z(HE<= zh%$$o*3dj`=)04qUnn|gekGbY*MnT;-_vSU#u^r=KXA*Fc(7)%) zM%rT~4NPt}PlhL*`KzuSfoszBRX}yif$v{$aV!a=(Nq5YGYFYF+_J98&CHUORWJv! z$zaLJ>!YofewFP;iXmp{JyJgJL56O#anW;BQkitQvGMQW+XV9kKMsYPX<(Mb83)r+ zi49!oAF{L+BXpm)J5d6QDE<3n@vyq7Xc=c^(IFm6VN)qTMcsBQgM3j=F&-DVFYz5Y zJ>OLFi@ieB;b=1i2#ZZjOt9OZS?)AD1Yh~Hj)rpnbzAJgOr^g=x;9b(*d>AQ$QyI$8kW(%?7S({3Hf+4u5;98`s4~@m8}G2}*edha#lJyt@4KL%Ga^$lsm#jIVjzSlX+JI6>Y$<+U|dM+D(&e} z0hX2EvRiLsofi#%5~Rnyhrer4?1>ll-5~dS!XdwuMUs7}JeVnFBF9Cw8SI|V--ZSi zSkOV#0RSI4sI_dPTlY1zg;$@MNo*(2GOB%v2Cgd z`HsRxhnI7e;7L?{ScIn^T!Qs@%E-&6=tPeT5MR#(`UP&73raV(k!J|y z$|)^F^Pb|!L2NT-9O^VMQ5yl7Kh=?38>Dq>IW#*$nK8)F*2b#Dx4dU;cXyU!N7a<)_m` z0g!v5UFT*O-TNR?z*JFGwUcQscqha>)#l=d<@QULDLiaEN%xw4g-x0EJ+mwySm`0~ zSr&=QIraS~Jx21&=KC5Uj6Gkc+Fmm4@3O-Mhjy6pH2PLWCxOAP276mmP0G*?hKjy* zvCR3=ikW`?3xIEF7Iki->YYs6_hHnFB{Owrfy;#=QR3qWHuJ=c*Pm-h2G)XXcwVPt zRY@=|q`~(PDsOVnm%G)+C8jod0D{S}lE1_c02~b{k?T?FWV#d|MdFc>c_yQ810=uh zD;b?lwJ9{>5$9qKu?xix?ob@b{;rdxSfW@xEN6zZm|rbi*<5;++*ikaMRB2|k%x)p zR$0?nQ}%Kj`%w!ZxcP112NubP3kz!;IKI(YdOhm$_muNnB{KoT(@GGV2u7c!y2flO zM*_O-8Sa>REIsMoH>WYWP3b3sgZpMk4{p0e6t+K>(7|ytz+i`Q*ZgCIc{j)9ivYR& zq_c;6H(aKozT7(IruyeLtc1PnLHe=7;MzYnK>>J*{O9)DVe@It&3%}(x#`1cM=^T| z5d3WG;F_-d=s{Zm0C0`_oGNYkzEi9OJl~FkSFisI<+bkM;Q%@H->N7G*Nn;kq!W$f zM%)NdtRE8{f;7%tivaB4+Mw(vgP3(gaU8~QszjkQWWKtAm`#nCE?dZdoLF=1T`0vx z@O8?V8_IFmGd+v3Bl$a?w!xvDP>Iap^7+Mv35D++RM$1wV1ApjYUWihAwiBC=_W-B z`4Ac3qO+Gfo79NgWtgw{$|}T)eiKRUn+w#-j0d_3+zGDcXnA*M_v{X4A&P!){w+Ke z9_wJZap}ZPIg?HZe+r!mGRm8i!23)Ev(dF=e}BY%-#BR-stdx>sJv)M#*KcA=pKry zWgvN;#g3M7)Zy+&M-D9Lz#qqP3mw+S2r<=-Qru3(3hS0&$Uw046pp@i38^h^A_?E#Ji; zF-!6oL_DY(+`W-*s8W4fQqmxAqZY5Go5a}bu}85%^G^M9Mf}aZ>FKr?XJ0mV*Qle= z)+b0#%p(6oUR^58P~x#N7gBHw_zsaZQNlpJpVm>^~+;2Xi0rbYnG~0 zqj*~)%p~%3HMt1#V0Z~Ka892A@pD|7eFGc+pw9xe{fh!Z4HhN&U6%VH$9H^>NJ|0M zcYrV@J+NicG`wQXpM!N^7R$f8r)YM0I}&iu=#s#U=agJtY-F0X=C^`Qv}E#axHbQ> z-LW0Ky~EmWc7YBQXn@1B6Z@dKLqb;7evV;-$6^m zA)-BYB}gL@0~2}3Wn9WEKEW5+FHs9R#9tknx+W0A`mlTDGS@Fn-45xZwYTY_PFtoX ztW1TvIr>%PFK;~yq5@o0A6T9lVaVsNZ#fu$68O=*Sy5$e4A{(L%{IQbf_xmfse49U zBqpu&m0s`B1!2zz@q5_vmyimWYUE29kghGJ(OROUKzWZ1eG*>Yw9A3uC>ss(q```< z9&HxH;Ec^8L#TvrTTf2=p!E^ar3 zs0Nuz7W;8Cs$MNm7MxjinW0bn{b1K%jb$D zvEP3br#{&KcpJHk4EJ1jK&9g8y0`exV)D&6I7&b}SQ`wRp9KewHP6>gVvl>hz(>WT zZ>30)R~M{~N=0T4l+&Q^(pY}b=`i(LMAu;kyCg8!!bgYxY2O*88@BuLSt~`ZX_Zo9ccyWZSX#cQs@+d?($rI z{p#8{$5C49eofqS{N7;KSfX!du5aXnnloK8tR7oJcJ12j*kX5Q#FRXqz}NYPva&*sr;gO04kr>C7$R->EusO#@a5g0EWmgU9_- zt$p_gweReA(KVq~R6%GIko-G{UjkS>Zw%*z&s9Kkf6Y5C8f73PYox?OrKMV|@c$b^ zT~qUN0%~-MWF~ut>{S1n@b5qMfwitvYDIf#W)-e9rfxWH7uqL_`q*CjD`f|ATM|>T zWrSm(nyQ5rYRAbJo}N+Fhunhy@sqW@^pyS$16*K2?Hh$~O9<<`AJw}Vy$$;|h=wt@ zhLHtL{asID^K>oMYeBb7DKQbAm%jw$U6nW}W}Z<&>9p)%5{qJd4_kB+-zMaWu1Vs7 zd)8zrVW~Q)APT_c2(V!&5I={2{b%r*3Kv@1?k1?V-{+N{xcjac_CiH^sNGwSVb1(* zrDGl$I!#7N1Gufa4J?(jbNG%f1L$qPpj8-hN7%z*Kg4-QyeCy}Bsw&TO9@a4%PCv$ zi2+r}&1j{a9{cIf3UdI4YKM=)!j8zmucRH>aJq>mN32xK=lMkhRp5I$2wY z+-39kmZ{R*N@ZX^xC_we5eFuI)n7GvN;aLnw#{)Q8U}mQlte~L3@m>#_ClaaZ*ZI$ zT|{PA>c4lm__}k%vO0Ee0NAJg5jK&}Yw{?%Iy*bZRw|`ST)VH3C0sM*vm7>lH1g-Y@z=;LJT>!2H0M8KA|u)h oWNlJx&G|yeqWNFUOvV|#MavpH3r+zDEuTFNdw&QVI+<--T${(slUBsygL4Y%S|H`(avHi2=|A>F6ze4{l!QcM( zLNE|lUY=6jO=osGN0JpsskDp*5{hj^4KMbu@k_CUzKupYtxk8Q){`Qu57On|1UPUT zdt7%=@+vj{u)TKu`mK@QGxgc7;6I-Z213Kht7G{r5DXL!*&&|qOYI#%Va&0wqd&PE zQ40V=MT_gF^fa*0P9pTkkR_Fh7BWDuP8iU6xw*MlT)CB?15;C0Qm}v+EQ(EqK)W-z zhJ=woNZjB&hq&XNKl$+vUmU-jU7_DRKY_y9naTNVkMdVLcwikggK-g)|KBbIaINSe z+w%epV*(qTn>n*S`&28zxVvp%wY_4zWs~3VDW<+H6{#hEc0UnCn5StX;O^^jp>#dj z%ppP19hW10LyY*OtfZv$=s~_bd)qVg1$A`yBya^0zZ$^*`~&4o&Y~&?a28o>nq)0E z6wRWP?HBksjyHQf!BSr{*ls6T;WCK;jrB9*H3!U(r-Tvq>({SdAij+zf0n)NZU&#v zwy7C!3nP{%jAyL7@v1|jl$ik;YRcTB&uS`YEwe429XXSx@NhWPs#MW@vQ#hq`GdSN z3H;ykexGV|Iuo@4_2NuQ8xMhRvcq%2-r~Z^*rhWQpQ~1CC0531%1^aKdbEhc&+rc3h2T9(r{nr z-9X&0XwpT}Kephh=j0^d(8&|2x2r55Ob#@8@Cm9#1-hlfBg><*UR0uNgU2bb1ZFX9 zWX0d89?Nvc%PW*cNB?mpZD*n=ZGbW}6l2@<1@KHcS z+Ta!)1<00NfyeXUoa_(5Lm;O+5qbV^Hd$c=a6ty zYBtu-g=o!l8ZOVtnPZ*{nR9VIWhA6*Q?#K3q98YUX9bTr?PDphQ*QUS-L$nsFq zj{M-aiM1}bp{P_~AWXllW&f@haI;>il60Le5s`Wu&0ZquaXfJxTFC1pdQiJOvraaC zPV5k`Hpt8+sh-Iso)eyAedlcLT}o>lKc~O8`JN#kuc1m~_w=S->ToGIlQIU7wMN}r zD`J^Za(a!+=_}xk>&<3>E$pbn%dcnr9$7GR zTG(q6S@7r8M>^l&-C(qQ26y(IVSnbtf;gGz*%QF-f0wUPy#ZC=lrbrb^yj_|tyB(F z^1WOpPLP;#w0spo#nb7v6;hKkaP2bFlL^1;WMa+wAT{}by`2Nm9<55CaC@*n9uO2L z?1~AXEYt`?|Bt~UwV!~Z3I73_`P9Ivp9Z;jeQaOFC;mwK=5YEWv@jUct_|EjKk{od z&n2;xqM*&1OckUWgbo$@&|fsIN~*67W09X9jumh%-D>IZ<9gNSajH_%;%qz`C9{N4 zIWmCZm}oCDttccFLWY>U;Ci|OZG+k`(89);+>0J2RfOhqf#=58Rplr@S`U0A5LXtlpr9fT0Wq&*ZuOx!m)y`To8$=vKQ zR0fG>F|=r6Fn5SUuru_D>$$im9lNdTS&h0WKp12WZ^ayxv|w#KwrEvCSa%>+_=%(i z>spYNz?0t3UpLPcFZs`rZcZ}L#ICHlq9J)(Zp-F&LK@z5#;=gh#i%qjBj6|F6ZIp? zZqUMuXP6QEVoB}JI_V$%C=MC-rgTP66Vbbc-Awu!rEj4rV~=1hKRQ z)RHjp`aE0s@ZO;V)QI65aFfb*4WT0 zuA$bV31bJ9s+@?h^+^D(G(yh6E7Hv!@x*km^=wkc?D4T-^b`E%9eGxv?YE8xIN00M zv5G~TjHtyuVBw}vsM&=$as?!~Kc4QAyMhtO%$1u$$oLOPy)!o#d?(OpDh>*U-lKG) zuDT{D8(d<&T26s0Oz%6)<94w`fmsAa;cdO+N3M_e!t3hl?&d@{7GAg6lnZyg-l1K3Sdu%!ywa;Q?b(BjwDrlJZ8Jhrcy~vq-8&S~j)+~fq?}mPv)Z<#%80FGwbeA7+ z1Lg;7uhoG|s@;Rt2k~kvnI2t`L`jK;fg5M<rTW`1lscGHO_EB*@s`Bg zA5f@d^@6-_JcIa|qDZbhFvB9&WqWCqZKAD8Zjoyp9MY#;36C*og)~)BA5L}P+x@@|$w_liu{#y~iP+e6Lt*@Sk zu)gmXOv{pJO z4ieWD3>`^#tV|I3J@aU!jK=iTJ>FM_9^15eY@K`5vi*T^0s45I-)}7G>5Z=Y!QS+Y z?lus3@-cP!qqr}&$pw5tsF+Q0R(#(WbcKn6{6Z{FMtnQc4|y6k`=Q_kVwXtW^L!p_ z^z=9%8&d5e(K^zy2_=ybe8Ko=ZsBvMUrXPUMa+Eg8bz59XGiVmqF9*5hFuCFdcx4F0Pp&9;?OUgTfZFZ!(tZxE1u&-@( zGQ%G4Qg*V59nSVp<^P!rT(Hd{Yjy$68iBu8`z=>pb`9T$GlbVUewLbJqRklrVA&;7|L=ud@xSCMmy^pvO;J&YTPqbr{jWd* zwwRPjc&^0>YFxJj1L$VcU?@P8d%J{ZvapIavpoNu9ux>=OiiX=#qmYKkQ_Je1wg}- z{n@3K<)zw7p{R6(ic}COtH)L3@B9k?8Cknos+uiXa&PhNrYK|v$*9@JNe4Rq(9~b+{}q&CNl+MEC}4j9N_~Hj&iKpee)Z<`@8|{|dnA+$ z50g$0CJeQC&uV*;xfqWgpBqX4!5g=p7qd{`Jvjay^V)d%odT_1rFFM7#_K#Bb!4^SHH%eaKf{5<~Bq+!uiJXg~ zA1$+Sa&{m1MA#}aIDW=|;@ZT`v#g|>F0NAcMU_#kwzNpj#w0Pc4NZk^+^HyYFCNeO z_U3C`?r1c&Gqwt8Z!6F0=p-V|h&(9+U5ZTOZ=K?SX%I3STij#;KZT}6MN%o!KW_TL zUORAZFUfghJdS9CGd1$#vt?7dJu-|r@hCaJro3e?pPjF5ZF9%MS&Ecw`_Ft2AK&wP z0{Jenu?M>rPg`tk1ho?Q_;6b0sRjATJEu)m^UG*Xq2K`<)g#`in2A} zR~%P_vWNZL!lk_Ew!`)$MuB~?aKctQ8#2|smSmB*!*3G}xa+|oDVYLkqNR&9ZkDhHXT4d7to86^H)RVwJo3lfp z0~g%jHaL3#GqPu}Rlk_M6^Okt)P9-OP{;U*x zlKCUoC1?uO!)5czNNv&lPjd}s#4*wH!-+KbK|hvOy&!YF_Z&rFGz=B&_>v_s@+Cv@ zl*-U_PT#}joesQX7ICg)>%G|%X7qaHW(f+DyvUb~2}HEF5e+ZE0abT~k?e2x+WjYeK%Tv~l5XF(tIotTqS7X`Pgi z2`v)xtv>Uo>ROJBxDE~s$du%Gr`bQ!it8n8*3T76)|k#pEL3TWE(Mc0{fR%r@yV3i zH?}_>?+y(HW5!LCvZI9jZo!-U%a5rc=q=FDWN`%Q-y8B_Cy}qs#4Hpg?r(Q%i8Kg! z)WT#C^8zpyV+HSanfX+0Yfvl)^c6e%GaNc6GGY+>g`@hlLnq_3@+A^H0L#nkI4gtE z^%;P;iUkq*2%J0J8C9*vW)V9DdT14V1Me5R5Rdz>@cpO(#N58@AF~uB?L}xw*ZG&( z&9LXme5Lo`<`_Q`@a9kg%9dDcnBuojj-i%^it~}YwD$I)S5`D5*fw0-Ub*qz2mWA7 zmRcz6P91;r1)LYo4W%DcxevblGuLl$?5~7j!ea}!^J|Mk=-@F8Ag+cxUtw+OYg)+$PXcl1ty`MD^${ojC;C_rZck1E=)o{dg(=jJnwTxtlwtW zy)To~8$v&Y?aERgZxNd=M|R_+9j1GxGvnt(^nBd=7Z(r_V!pFB$&+nV!Dj7yV0`K< zN{^tm`6Zf3GqEs}CrMX&mz0!EDU;v>tXVOt@vao<@ME-Ny{fB}eb*z_zPYD+J z#}*;VOrAYH5YiT})ove!vq88hf1B2H&E82w7&Z8Z(yw!_;KUaPZwKIW=-)4oGnSV% z!j3m{Kr*EQ=3=+^EM(0{|zPnzYEN>){Ud|{{<{U(b`_xrT^oKnQ;)m6!*H`y{z5v zeto(aw1Mm$joa58U79bZk2ik8iR-sw+qE)z=tp7O<$1E0oqeaj$>fMUi znicG{$u5PiKFETS(m`KbF)Q96lou_2@U7x3{Lb%oQ5&h<;mi5B{+HBw@PAmz<5OGc z-yZw;!tZuvaaoQi0ULFF-{NpvBVJ%UEaYdRcWLD!NLbnt?ew7&3@<_D2>J4w|5>_x zEtJqRFB^=O_am7R6U_d+oLoF1zW^~T6;A|iB8RTgM;(koixUw-%oGk$f+nPLk-wlO<8g-$+J)Yf1c_h5gE(Xr}D39(N_24rmf_Ah7x%?%`!ZS8@E?y+Bc6~0L4h#BhGZ=T0 zs!=*qp0>k}_AOL?rSFJ#kmdw9(~p?#6J!cy$0SQS?@MQAw^SxPosFs6ranTMG-IK9 zJZfG*oCJ3-a7I&;$SRtWvl2GV7DVSQ#Z3EdZG4+d3Eeoq@(93i^WcKUs3HdfUv3=1Y-tmwcf$(x zypS@jX``sDojQCQvo^4+x^N3Z@5AMV2q+x9yBTEvLsZc%jaD7z{%fx)unJUJMR_FY zsZl>dT;Y4=5bJn5fAe?9!azNjcO{U5@cZu*aS$g$oI|Vme9WuKSga{?V)W$~u>}tz zu|wz8Cj&xLDZmB76U4>ViaQURn)A?6*_Tj*@%R9OlWioCYmkG4T!W zxgAaqU!U&VAk7t*E@q&z+J5%%aP0+7FmC|Cj2GUmbQUo=e@g0NXKSJPy(IBx1!D2K z!jiBjJdZoU$0o(a3Q=PxGZ^3exjw!MRNoF{#Kbin>lWFrOrGqHcq02q4}-Y{_bpOc zjoPogH&BO&oh4xnndjn@tI;BE?YueaMVK1mAVmGS*w@(|-`jn%P1GcPnwYf2B8Rfg zm2wHQLIpz%dK-NnGVd5di}UCV6U9sbo#$T+D7q!T z`hd7pvi~V=^I$TAZq)94<3Gi(c878TjqKY#dNb;@&5p0bvALjDstJ9Uxd9f{M6)2A zjX}i-^3_0yx;^g}(1)^`2BYfDC^|B; zMnxXj;V!K$V_=ot&N`h6rby&O*{oVT~d#c5dG_kPvwIuue}u zRmQ%^;PM}KBkSqOt=nvG*83Z7Fy$<|)ePEr(UwGCpDnGPmmnv0_1dYimz)~oC6QXA zT6YYjdaVb}>JopYGMk9rEQFTi5~8m-KlVH9NAmWI>k@p&|~04XskO6b5)F=>!CXO7IkJdm(cx9_C?})Da;^sh-k|) z97RxtwOpeL)!7a$TRTlk8B{*tW}#B5U}v&_vTw_;5uN46W?QjW&pQK(h(I?`hC;S~ ztF`vLo{u>WH*1=wJgRh#bPAa6PyVb2$`p3A?VNr-ouXhFpk2{^5oapu2<{ta= z19gcUD$dr9H)vvi(KD=vq6|n!nP;De%+9j_FmC}{d)WQNPfF#w%@%177w2c%g6fuS z*YrAWzfb6#jrUg)0y`PBxh_AL_t>@G+&c>KhMp|3`;ji&>AZh(xmxIunzyT@%H*ogUL$;oGD> z><_n*9+xq`uDBl8Zi?&Rn}V*l>MEipyeCLj}8veYOwBWJy%`wCk;Ck z@+S1Kk@Q~QNI}>>O?9K_!+`f~U+bd-uhzJ)h!rsayZbg3wnh}}i^~7$S^xtfuj`Ms z7N?Z=i`GM;@qH?}Z*O&%fy2{!omImAzGga+q=1uZz01XU_Ar-x4z!#7Qv)>YDxk*B zGY#%6%WOi1V?2YZd2L}GECQC__bIoA_5BWxh!dIG`9tL{EhgRk2Gg{Dq5DI;b$W8* zg}s{*pK6yshs|f+mE~VHzG@2GvyOVTJ#RcW;D_3|uDizkhoK2{Z);A5Q~t-#5GGk4M>gTR74FDN6wQ`>r8H;*=HpQEm6i%1ye_ z^W}F|dwh~KZDYIAj?RCmX7a{D;Ol-u)4#ETmv}SzpLoGr^Zy3g{C|4qQ5GYtt17eN zS44*I@G+B^p{TUMzF~HQycAwEs1RYNFbGpwp9Dv!4D+GF93#kZDj;_+oucwqaw zql;$V)wNvDcmn|#ugUam2Cz#LRda{7Xo3tsJhGnD^=b1SexU8l9*y^nB2MVQJaN{B z^i+#!Lfol{)YW-7Rx%cM!#OT%scP3;UH#ZGwG$T?5NL5-F_IGDTIG+eXou;>&0fJS zVbsr1#EXhry)UaX^03W-rl$Cc2KJfg03J2#w>F|bi{I*ZhK>^|KJWQUa!W1C} z236HKk5e}vBR7{ z?s%2$i}GP$1ew!`CiKJ%7fikeTd)2N-bQyp!A8=$PrQblS*vyz8J|ufBy9d^ALG#d zAp@g8q$leN+ONJcO!1FV+`r(|?4orMP@Aq#>o|?Sj*MBkp&txjOCIihR&L}phjSr2 zd0bq~KfZLkWtzf4b$)d-L-slZ)ETW4ktt^F?ZpYuXL2X8EiYPLe=|119Gx}niVm$j z?nk1YqD3>o*4@CI}Z@ zUH1JqSi@XW&XW~8kQE3`pz4qN* z$z4EPF2WB>d~B?D2;-)Fwql+xF-)^Fur8xj$+kA*;Cj2*WZCP6U>z2b(quNJ<7S_I zp)#`g{)+T*S#)rkvg2ie%T~@MH?3LBvi#xbM&WwoC11OaC-Y!Ebb5ULG5kCEJdefG zNnc7@vpds(JnB?@)qP(&Yqsr|u8NWA63~I)fKu zJbcC#)UpvO1gcMK=Ocnwgcm(zyfo&*Bh#!2T&oYxM|U)B)G<$RbhUPSeu#g5n@Yl&G{rYSJ`gwr>-*85QBySr$)B=Qx;-?ApOjx}!<}{F}EfU?r$S$R0C;OMT|>4|4xRy0C_nVfw0h?Nu-e zGd?psaYkgtI}42dGNMEPZvr|cXl+3NL-y8tnbz647U^W7(*vczBn8xPPyb`{`4jI0 z%HCdHjOXbpuI*-)_|V^wjvArSj8BGE+pZ?3{p7cPz7+7rdpetT)7|kpp8gw8m+!lo zIsIzjLNmhoE4;SA1Bq}Due0})EPeF=)DL66leGimVL9smJREVG6nvG2|iq>h^axdHR!th zNThv%fqDfDM+fgc!#AAW7Exc3x(M zx7*uLQhI>9>08@Gh385nvHLgpQ#DbQ)R1D%>O-5&TVKJ_SjFbbgUU0jif{(=`SHTf zZ#7YNt4(Y)o(Sb8glRXox@+ri9D@L&(ZbGI#|{g6-GTeJ{V^%pE@P*;J%YXO0Ipk3 zJByW6Y$ZvMk+lPJ}$3cg+Q za$z&?4pLn9xq1Ck5@}u82<8%!GPrKf z@%w5W?kY{}?1D?6;6&|s#FIGXv|6&b?92D>S}W)_63yr`b+gHUdXgK3L9Tu~+Idac zMMbPZgghwB++ul6Wms8PHFNXQwhYAMP4cqG6c{US6||fTdeV{CW8yEbSdpqJV!z1@ zMXm`D2rO(7WCP%gZ&y?sPOU&2`Nt*oJ0)jxX}`{lPmCYp7Dhs(kNdPbz3^u@+E7+Q z;$C#d>79^qf2BxrkE{;Wcb>2;L_8k)356Xo_>|6DQBTiZo$q1#`fBpfDJ<7I4mh{1 zS~#)*(HgU0bKW`v-EN2SWO#(tvn2M)K}XS=`}?GBUg7HHhbE$7IsN?N5c9{|zL0a~h0CH>Ee-FP~@C| zqt&|F{@0e&xv_Q8$>2s+<`>iO5+D!%(n@%VXy_O3ZP+H;OojVp>S^=&y`l0W0Viak z=&l4*b(YLw%wVO2?v>$}D>^hk>6cHsP4@c}KiTLbs=n(dh$O$%kK@0iPO~*JI}UzB zeb;K^UQV5PwQw4Pr?|f&AP{N$ak`fF5HvnQU&W!%vVAJa=K!mg1Z^71uoZ2Qy?0+* z&g1i(cddIo0qfB_G#>JE0Xgs1V@O@=pt4O@MLTf_uDB=4^3XJDFklN^OUz&|BBF%+ z;?ZaU5Rg-x?U{+Y>P%DBwIieXO>9@llN-6$%hB0ET3H6kLtxRcpON)^CNNhC^J%)c zmcSq1o-C@;!eXWI_N(SCPrDQLX2(4NQ|C3N&E(#nX%7Cm2`cYhL4V&%=s4AyNg{=0Trbe8ug+r=P&umTxz))%|1m<#8j#=^dub{cs(Dz`;$df3g-+e;h{ zcY$|t1PjL__Sgku=2Dr6?e3?>j{CFSj^_zl)_UjZut(kdOA=%3?TNGH`ZJeotn8hx zg69=S7YA7cAx-*of@52BIc;)EH#R*epPk&ue2FZD0c{6gJ^U`oYAiRO#OMUUEh}Zf z?0#G2%FTf9&OwJn zSQ?KWgi#P0-<++gCG~QA0YH7RdV7^x@?o4;&-X|`XKV2Vh6Os4F;5N0Mv9$!8VM0D zP8g2z@p^IM%?xecdE4}+At-?jiujn}Eorp^J!WlnVF{}O3g)Y|6TB!N%Of#&-*F$N zD=`ORMxGd1pDfNCkSV88dN){e!)P-YvdRCg0}svyAwUHb$$4w)uxn9p-mz-Dt0SMa z^0VDVGBeof3~wqhJ8+`5sjhpdH;vb*ggXN_m2aES0Ou7~d07+29#@x(i#HhNhn=0Q z&7?+NCC3cfw>3T?vBNqH!BZnlq0lBnsz>~>FA$G-edX?L zGY}%-R7NezvFC0$*RmI9u`-WzBBptQhb2}u|I=p&#WhJ0+xQY_k8RS3wmP?hAbI={ z_dCqAtNij-%lDK}CWMuZcTRU*$=mHY4mJ4m)C`=#OybS$(nAB2$*Mkzq!TBE>*CfR zy_KfB0FvK?7BkX{UU+fhTaz z_92H+Nq}y}`RubmHDU&OrwN5`1E%3~ru}(VyAEfb_gY)H%u$m?48{Xx^S1gtF@X$KzQk)k z?1d$~@otu?)iq7bG8B8CJ{dtpm>1II=M~^da$&Qgsm3C?+S!q|F5iHM&Mnu$Eavpu zJ!OsfO9B@hdgpj@ntVFJhX1QvO{ZIC66=&$}n= za%?$~9FLIx89JD#)^Zb&muI zgSF~B96pM+b8-c@U>POpX28|bJC070s8Y(7QBu+xKx_hoY&Z`SPN_1F)Rz-Wbxn4c zlI#VVT%tJdZmx3kXrtKD|G3^a{dpB|s5QQ!`klos<7I*lWJ!kyU22QhUH*WqxkyFO zRRuVxszwwn{J7^MrsM1IA?@2p?Vs_Q#hH76xeOj3|NX13<>IH2xzW&1Q~|A8Ka^#& zo!^3K1NkV|kly)(*E3g~|8K{8i+*Rm)GoNsUa+K-OeRx`CE@BdYeH zH9Pj-Z(kM|E4{Xd_B&R1GlJv1JeyBOnpO9%%^6nv4p{S+=UKEpIuic0FVqz;1@h_g zn%LnFi{`{w42;fKEZ4=jO?t2gC$jWS+kD8WG?dC2$8j%OJCW^qNBo;($9TRPGM|y4 z)nLhjun#=WiFdoA;3*nni*~xU2@ZHN=z>5@1Yh?|IEU6DlvEFb9XzbDmBay~RKx-O zJN1l+?E)AG#emN(4rXr$2(GwZu-h&hT!Y}TiUH%F%kVE@$6JDbJ^reLCMiTVs5qhh~f>r(B%<0wZ`*MuO%*DGSm2dUhN-~-OZADE7z#R zkqtun0oezHYs+1(Xv6_R*~51-`2%}sOCQIeZqr(i5=X}BNbZ^rEmNAJPzL;Rd|MC? z-!8Z4Fcv0inq2yd__NYOpSPI+ge!274^udC4`RLXvQ>3c)uATE0n?S9ozzsM?VawQh)krvF3WT6acI1Ikx2>17TMK_(dTq`8rKFRUIrXY|C=C9l@h0B{|JSp7?#`pF;ENg&LJ_L^ z%o1BQrSXEPAi9ZMi&FRb`djMs{pKKpUz}3){EwQN-qAZ_#cZoQtmKlUb4*!<@>yfj z-eF-xUJh&d*C;|+e7=g`r}T@fnjigM)B1vY z=T;(rDPLiC9yhRnkTy?7ZoWgrhuQ?f04727bl1pJf{PR~(d%?{kEYU=!vZFvSQpbx zn=n~35SH1kgKDG9p6*5bUB;d}*mD=l#Gl|=2VR|F6UU^=xrSB-(WF_2X5>O8>iSpY z_6A5sCmzk0e=79b(Dbq=hU=wjq8pGb&%k8$?pvn9_(?x;gt|4Z15)`LBlatBKheX&7+{0;wL$_=i!pIPjF4$xfZu zBUZ(DbdBiXXLB(RC&WV0F`357)gvFsXvL~fTIGjl1?PKjnrfO*_Zi1@a!|CZVD1Ln z>M-|dP88?zYAeJy_IPV+EKN0WR~s}6Oho;hB5ttnjm#KE*W?&=vq}V&&7JY<>M)GN zUgqJdXVx?lUHr6<#nV=o!kpvjqwF4?b-&tyG}h=OZNBaoU@w|E^ek12rD>%bF;P%$$nh&)~eoTYexTn&y;SPPi??A{>)rWa67vh+>UwL$wNrF-aVnNd@3c ziTPjy#dwYTu{JV;sfFm`0f#xg4Fau_7Fjy!Mv z3rh2bmK6?cgIQVyZ{~O(c!Lo!h;HAMW>or(zacY3=gyCA`h8qHpn|OvwxO;OeTbJL zE`+{m&3!^lUuW1&n{JSHb#R}0kZw5x)#!Zh8H-_L$>Ed_$W5iw$lo>cI_VlCJY0tE zS7tOmWh17KLmU|SMwJ+mMlGrwH`r8w&T4}QWAfhk6yvM%(oCJxp#C@%>u$@)N3P%U z-Wd8N-caOkcF#wd-R3$$`Xq(doID4vOI@F+JV(sGC&M0xlr-Z);i=ZL2&-=hFfr^y z6x8LyWqQ|VPj4D*gMl#Of&a-`WDgfA|Bmrm`8R{)?-8drd3dqBwwm8EZm*H$z)$+> zAED<1Z2fwoW5F3RilAHwS3*@|VnK2KOkf**R(v{8;UWOmyE39K{^S|EgiAzIUiqT( zLh+lju7=f`ri{M2g8IbeWU+D!)--m+SQLWjyG)r(z4E&`)>Hs#8*N>@Dvh#!@%gYF zyJUm1A5w6d8IVu3hGrPS4S~-7hq5fMOdWj5o9cc^ab3+($cx{+I+l{b%jNJ$0M+|9 z=)8lyUyZ*l-kda#+AzdfEHpcu&LyU=wZ{eH3NS2OR((t z?M_!Kgcdy&n$lf#i(QnnH{T3J)Zet5D)|QF?_HkYk|C~BEn4-*N8y|PsV=Qa1;m>Z zwJu&Nr&HE1 z4&@&7k5*l@;E1E1FD}ta}WFnp4X*0}ZXVJS`;4 z=hMF8xPY@bs>KlFm({-5#kzUZh0eZ9Ih200-B!85Kke(-rAH{=WMjDA%G_Kp zxP3?e3rp_sqOIED;pE*KrRngezS#76YN*AQmC0yTA(i_e&5aDHmpub4r}9-!rxxaO zY&!0P`6+9PNa9|LnQ)smV)1|SQ>v-!i#L`Ha+@g%mR40_fi;xrsO+b5%h=p#o#gXd z>!cL_W{OiYB~U=40Ap8wh7If@`tEh0i?Dl6EUk=Tp3tETLARhE29 za^rJ;;CVAAT&ZIh)hwfKBe$A6o2R^}tY66*vRHn)Us;B>xS#PGQ%$q7sH*BfMsRNy z$&9KO*Mm5zuk_^a5zlD4KC``+sC{bYBe%ihLQPWK64Y%o?R`7GJxGbo$*sOgI#wyV z)9@_SKL7lj_35cRqfZin!d|W5vxHP$mt5V#e5k|sDq^?F%tcxgeQRsALB~Owp1}`! zZ_zhl&)9CN#R~VE~s<#y_gBqj9oG`*fqS{pxh4m1yUs*MK@!UgdAjnfG?`5B<(O_}G$O!LjXR zp?-1LG;9Voma}yg_fBJGb4nnjdm0m4;9wWYXpyk_^xIydo3qzknb@+vHXM^;aPn%V zo_%AHRaxDd+aS02Du!K~;AYVc=HlKPX-s$ulUMwu!U<;|V+wJ!D|<{MYNN-I97 zthNPDU|CVu>q+DNP@UeOn%n)pin^}QuTfRo=+~a5jp{oTo(}#>0VYboLSN|Y%Bn`g zHQo95@+Uj}5vRpNd5Pp^!3mhE0tUI!K{K*3l9P>G%vVK|lK_r;-CA~u>^HlPZ-aOy zn~gPv>eYZpEt`?(m_1tw>DM`v=|$_PZ8<+h5{DP^&DALfyx7xx-b?;%mgD=#AZR4B z+%|gA{4U3d*LPQYE4G0-{judrJ85h%S#sACQ8+1hcKHBN2;%xtF~c@5GE$1KBM3SY zdHUqxPi$RuVZHm`%{L6}_zEjbrQQr6eellgnO=Je`ZLLMus2R)x`BHCpj&x(n8M)n zP>%UYU`4T$j?WT{?vJ?!<2l2 z*P{4GkHO);_LGV;fHYbaXr7Nqf~SPZlb_J zN{rPC=A!B^yCTN?7xn;K9ZmzSI_&TbV)-VEujl9Sj}O;YnOu90w6;Q$s-s5>RnXxt z=C$U#a0-%xN*3r+HGUW-272H1yjXQCh^=oZ*WfK`$lB5UbXsF^>!YtsZB{=^wl<;t_R&b z3eX!ghnJMpo0@5Et=8iM22!Z&?G)IGSve;S7%yV>?w-hg@&4YTXPWt{rnfe}7rq)U z4d_{!P3VhE3Gc|>v9-nQS=UiY@l3~z}H;* zXh&YHf_Sl*v)6aj5^I8~=c~6zi|x?r+LEcyV-l=P61B%$q*o_Wbi}i?@}h)P9#!VM zAZ7poavyDOWlcd!&8{cEmo`AeNX(gpAEpzBS_ig7o7IYt3Up?^7{}Z8fKmuqbJwU? z7U?hT>n~r~QBDV_zcgWF=?#xcVV*-xEU|b%!zze5f2&HxBGhqmU+1#r#hM(5JZLz@ z4U5Kc1re-B1hxugtFWMdV

&@sph~YComINorM2PX|{LIi!}U^mmv3N-Sz^koKv^ zSDzEa+Cv+w`A$mYqTZ5m-pMjA8*b+Vesg2f;*xi0vOL(8Bh#?&CVW zf~1S?jjE2a+v?!U%!oG_n(@*AGy#LsRhv;V@&vpcJ6!*>F;T`mc6BagD zxdb|R*tFLBe8ActdU6t>Ux#h((;)h4eY0HSjmy_d_66OF&nKL-)}Dy=ov}pG&e%OK z@POwf6?lrMOchfH_M|X3IKSpXe=X}y4y+W*G31M82vtD!qey4Nv+(}h3z;sjIXmp$ zro;~$q3`W!$9*0as95q=8paaO3nI>1KV71p*`S;OQ4f@U#yWRmh}hE7qs3N`sNp-qVQ7EoE20f{bJ2+Ca*SuAng8A75GdNWlJ?H}c4i(S zBFahlT39)=yNe=YRvKFHWP>FQWQ>R(RRATLOQy)c`e%|c0LByU;uU!LP7P1}-KXd2UI z3XHy5ys9M9Frry%>V>Elt}~^Lo6^e5(lcjqn=(%7@vctSelut2nD<;brOEETF4e9i zs{LNpA$JG8=Q9g)M5T68J(Jgh5{BG3bzB)jhqJ-peUTXEEoOmq%cFi(W4~YsKhAbvDE_S5`MZA|2 zv{JDa>U~_)nU16k%A_KNvZ|^{kNy?nf?F@^J5Y_iA*j;vtzxgI95x zvMIPeHHP57Mh2851J|x8-L6m|d*~q_t08V0$vP)Ht=l9$lmLG^i=L>zL_P6#pQ}d4 z>gf#rWaZ$S{iQfgfnJaLT$(OfgE5C{V82uh`lw)h9lapu!9qHe${|((JK`5MMWw%t zPF6{Lum7{U4yq<2=%{ebE=T4TIWxiF$*WSWj4e5nq66LPy!ZbAqd;80ucRCyV^!8^ zY4X~gl3JLQH=;UizqEM99;rsu`_`#%O3B4qsU+>NG;{I}sY*1cf|w1`_ZvLx@c21Dioy-yG>7>)^w@MM0ilwks z-$}dUimz&~S!cFN3lGLgg;_DulJ8!YmdBS#(Fek$_}mI<$Mk2U(;3y0zNSbTH*=wM zsU%Zc`RjL5dWA?=#2dHf3u*O5xnRu9T7w&zHvSOfA``)1e@4;RtDan)p$2So&o`m?Zbsx~fcR^NP()QyD%z&VoVHY2Gv-GrswiKY z{@g6-qDC#9UGtSR`&6l<&N(GLKVgSdEoWMNQJV79QYmuZbZOikQ7*D1sx)cwH{+#D zc~EK~ev$O@^kbs7CF$&jucQUX(j~oKD;-(7Pzo3QBXa8`Y0vpWQQvCm&>Yd;^BNV< ze;Gn~NEHAuTI|v%<3N+oQ#GS9fYlvxQ~#t+;PAa}UTHoc%HM zs!9TaL$DSym|NQ7tuv=q+t?+wz|GO#xKh{J)r(*Yd9}C&F81+;U6_OuCdu77T5 z<4ZG_IE0sug}F0McE+8k@bqhjou-PUlbiW)^eepe;m;(fjM?Ic9@F{s>?H2^79uW z+#4)95kY0S9(#LhT;+YT%q(zl5V2mbazqQLsmx*Dqz{CguQ6s@F*P=xOu5&BFW&ut zx%+$P+8=lxqiA=u!2idCgGV%5CGJ3F9Le9)f9s~>TR?dNigM)C)3|w6Q6Qf0cdu!Tp0z^GL z`g&KEfAa}rC-0y{5&Z`Q87^kF*8+l*!y;t9yM5e!*@-k;yHg_@hTXTCy9Q4<1xb>J@iaK`?eZU-d zSAQ%;8R?5sSUTY|QQvQ}`b;#%HNR=3|5%J;S<~^M=bafG%c#WH#v3p1OitN%p^M9P zqP2CPlanV8e?E(O^XD^n?mYVYnXWYnJ3_m3XT+;xm?PqwH+c+Q{GIV@(Ho0|tsHiG zmoDE%+`cTL*mHXSs1NR@pA-D}i+vk&CBO0`-fHGaR=&+4fP*-yyB^{km zZkLW9$EsZjSGKOQBA|6X%Ql>>-_S58j6GF%8aHFC(?pV*Bab54MDIO^Yy0lp77)Uh zlSRHn-o6_B1kR0d&XpE1`MZUK*Ua>1son%L|L z;rCY(zV9r0(Gi_|vPsI*h@#78&9O2Jk_|x}o$>wGXU4qC_r5#O4~LHbV%GRCDM~p< z!Bw+dENOrLdrTbrF$HnEs7%_!ynRW=7n(+jqL_QJCBs5&si{%n;^xhc*d$R$jXLo) z<3UYXBJr8c88>}CU%ogTS=U{kT8_`yg4@%-GVj-~=;tN|FGn|eoZZaU3-aJyWPE%F zEgAj8%T(-~&(Y*!+=IJt|0D04%J3KNZ|`wkU25gwi`TJ84xBS1phGtT&+bGgISb|f z+s&=a%^gvfrW2Phmv0qE4{GVt!O3)0#-7_g8N+w)Jw|-gadftBXftz-yTGPL9VAZ} za}FM!oIiHV_-?AWFaz&kGj`5DV%#>p^4vKwU^mC1$5Tu-)ywzK^u*e`2a~2wW}s&= z7jr7{3LVOiqJ6m>{)wx$QFC&~?ou-H-l!!}J2+ctI)4p8cYH+Ij;-)aZvuoOsK*R1 z-{#nNe}-wMw7+|*8(HCtNecb|ucAofCj{jE!D14#F&MPM00_svTRY>f#4`5I4n&+k zMydRcqdbvC*>}+OI^&PEs|Rfzd+@HQ?@b>6GCf*av3pOnaneLh++OyY-lP3dyn?#& z;B#Lv+gRT}a(ByyjUxZ~+@b;zDx~{JT495&u%JBy`w-&qh_#upL|vVY)|QO9tt&3V zN_zI~QJnhfSss1lVICj5of-=pyq)c2gF#@4ldqG}+PO^2JNQ@4e12K73$3*qZbmCz zSVPvf*xA|9@u4>;+43%ri}>F9Y8-{4hHac&D2>z5{qE4;?7C^=PO@0HT-d0 zjSpxWaKyJRmY1G;iYccwygj@nmNxb{8h5iZCv@aHyzaW3XN0_u&MM-QcSaa@ptUr# z<>2y<2wTJ@ps#uchWZ{p6Du3CMH?UENq2mBPz#y3%vE(atb}$@{VsfpMCNR9iHgR>d&9y(a#oR-PQ>kVMx6_ z{av!ZdqK!Pnm9AzS-3c2;~LB(&kke9#EE1D-%nNC!um4&cs!ZqYHS@{jr&Ahg}EDp z@60B}zb_ubV;ypvH7cv-$j#GE7-Po0y+j*uaB{%P+K~sJeuxb}y~U$Xe1LlBDEfI` z+0-&SY8#_PdA{@GYPt>_inCi6?4_MN_xQt{u*Zm##1%7tylA(NJxzFtC!L#BGWF3%#I@Hbyzd9P zxYze5;|9`J9T+eumA9UHm}TXi>Dxkhy{0y5W^RLQkioR5cjb3+oI z-5=#6|24+6e~R_sp+Rn!KdNP<%>(qwn8dF;W3jMz!%-e&1lIQU*orh-^}CPMuqiwt z*Z0@6DN^0qa)kdT{@<-c*H-1QanETnSly4CsUrU_vW~Cgba_Wc-P`_ZMR+sHPx0N0 z=NP@|W#P~LStRnKj&ZmyfJXBka%`DZ!d^YR`Zlc2fBzjE_I~Sf{;ENC8 zew88j`y}sQBaFO0+%urXty{+bqx^5LL{Hzr!>@mhecQgc{>{om#!Pr#vRCk@5aG=& z#C@j2KSRRm=lFU}I0HKe{iBqJjG4K)@x6uVZuDeZu(r^Fx!|_mnpE z_oD2DrJ$gopkPGV3rj&kK|$efK~W$I3JMAeP2z7*Ak`e7v5CaL=##%S2|HMDvcPoI zKrVacEvHOf$iW#qDb|#7aMGl|W&f(2!;?6idi6p9jVgoFdlLRFo5TH<8cxjFOhVPw zPaTli<8El%Rs3Ewks zZ{l^^i~L?-cfytR9DffI>5<2Y&-tCtPAmM+^EW6EHK|8pDb)NmuUfPPah%Awc4Imp zZhQJ+T&$}|IvR&c@5;c@qX~6^OKYED{>e&HxWAr?ltZLk^{r#j2?ds!Q1~|u-Wt-5 zou}Zc1$|)G<{lm!*aD04NG80rMhxNqNou$ho_zDo2Q6J0_Wb>XI{wZ}(450O@zZYO z+5}C(1tK&5BFp4=IKKEr&SYOx$Tyi8|JUz4(4J(ogPR`?p z9m&SuRT&Y)Ut761q4M}t=A5|2fnSm+$w(u=;)-D;Nm}Cf&E?rgNAcjOm)ROCFUI^G z@*{ct`)$I6ymbr}aZGsfA-1IaJ-w(DG|%r85T>0 zLra33YKYu+k^Gt%k}DjrD~M$Cp5w&DsR`~BfRu5Z9fh7aWQ1|*TrwWP?Qya$CoVh< z*A~{C-FT7E2fC2G_bfFw73|--o|tTVT6$`TNYxP1%oX_?(U*kmR<41@Z<)*J)MXsm zv7V!+Vv)Ss;cJ!8{xw^PI2%i;T`(;?AbxusR&9KZ>r3*_Z>8F)EwvX`k?r#^-2!Yb z=R@u6Mzv_@t@{RD9u#t7H*(>8HYd{Rur(B5<=};lxtjB5({b{0Bs=;dHQG$JZaYA( z!JQCa7kPqKJ=$_kZr@JWsVK@UJqh%*Bjsc~1)@_$#9pEzDj%y(&Ya)BpEyxwt%Kar zWt}1--;7HqcXKfO0v0Ws)5@uen4<|q#vH}MCxqOHJ?uYrlDt}T0{y&6ONt~T?lh;* z*P_ZV!opvavxPb8%oBtcI@8jlVP%b$OGh@a^KdlzcoX7f#rZHfu1Hc#bp$u}!_wT0 z^29xC*d0NkUPp0wDQ%wUfpumitG6EFT)7n;13jwv411mMIPMUo$%AAv#;0_yRDXb&BMKQ2rgEY#BM%CPFV`!VMi%)2*gUn zzj5b2Qj7cu?HY__X(HQqh&WPm@e6E4@r5nqm=7*E$$^(RIR+W$Zp2ON~n?&0Vi7EUZgAOcXun8+c_EROy9{Y}j)~V)S<@mYn34

A~fM{aSdJ>4w|PS0=q)15#2lh*sN{BUiaJawA;2 zQ&(HbDfM^W81{=n`JNt!5vx zY{B5Tso7%;lo_bw(+~ABTkPL{*RL2 z)!!G%K)+m?oVs??-H5i5`$yuA9LAK-Z+qH_JdxedPY@-`Rl5CZHk=f7d}H?UJRt`{ zVbqEK!3gApYS^D=#F`@#*1Wuu2zSKzwrwNZ(QZL0f)SD?sU^$&49@MRxM5a*Yn~=_ zkB5vw+>aFzEtH@3u22sxOCWwXG55!>Ef1bN-js&YP#eM@y`j55A9B3D6!TVLvp!jB zL#zI__jdP(dAUI=sk*HHvqHb^Gbrr&OjR@}d=5F?(VeFn?hj`!J($(t{&^|Y=Lb=PkQj%ojr(5efa=XZE7qioX;r+KU#l(EmF!D{r%>h zphdg5-aru9a%Y00`B0pQHG`EB8J&I!7D>iekH44{`l56V?7-|Vd1e^Ybfqz(DYC5k zDcRe9--i>Nm%ZDQy*Vm0zbwGh%u6D|VX0M4kWc}#A%-I91U)}n8H?gqZe(qbXI&HX z$Hi^06)CkuMm*d;ebO&f*jm$&!P#t&OVjH6aE@a&!vDuD?!x+Q?=L%>p^A?*y7eYI zQaibYW8ohC6RJVfv-MmGOa!cXv9OR?6TUHT{DMaHv8%$#qT~-1Hz5k zk%=I1oGQt|aazq%B8wj{VZ@!bBm^H{#e}LT;1NfnQ|8EB+8U5`JyAMNmZF7XeyQEG zk-A@2yQj@vY7BEamhtWt7>uMCjE&1D%G{Lqzn7DGe1l2pH6V+%ODP@6kkEk~HL$uI z3RZsa>B`{`PdF*S{6z358uaEJisP|>Dh6KTtgt8Eei6Z{LD{rd&_DLc1?=qHZ;@g) zEP=?`U)`Dw9gjXdOrkD z+n)2GP5<(G`_5w&Xqd_<35_)6EK7;6zQu`VIr4GJa*5?m1*LGc6Vr@0##k&kyTD^;o&`+Q}<~Z$#+el_na|{tryd<~Y>S z_rFva{$P;x>X`>~d+&azkIG71Be>sQ!`Y;aS zL%j4Skj?P7#$C;=IVe5Tbw1(Q;#{6i>BYjMz^pcCi5%|dHpmx;zTA&g-c0^_;5q8J zWAmKjdFz}N&v!)m<4(!2>tmou4-gdIY(34X_RKAhKk#m?Ij5^7ubdV4oG?i4ih5E^t{0_1&cGxON+G1!UWSA$A6j#m)-n8q z>MNI(oR*c@ai+)EHVS#<)uokSpH$XL{o4F<=upRR2O{UzaVV<)0nqS?*jb6|IEOI1 z3OlzUve@9}HsU#xTw9AOS6gQ=^jknqfEEwc@qiEs8sB#r42cXEwp%6iVxAkj4LLj0 zWAwQX*5y_Uqe*zY?s>IArq*}|xt&QD2$X-Mg4tKqibXbOpNtHWp@;Ox%U+Yo85txw zzlknVsF>U_^-0T0YykPy&C?w`ve6_`m?AN&q8Yk13n|Va&jB0bne^IF%HSO(=CHhb z_C}4<41-}J8R^^Wp!tM7k`=KRR_tZw(yG#z#=2pLu>^r=+qlBJh~RN{Y>K&<@MOB< zI{tsy?9p48mcsFRiwhi15mk5=6PbeG4q63nwCLCZ}uVBMV058+*S z1BjB^IhiZY)=J@8V|~YQax1x+Q2Qfd%QLp&jk7$RZTbGxrrIhOv;$1cyb8vI@pc+1 zQkbxBA2DZ9JT!wzz{i^9qomAStal5)ZEU{@rU zSMM;=g6)$QREE;(;^%G!0#K$3z#1*Tw{F>|21)hh3r&z!=*`1l+`ah%>mzX!4$f9K zTXdO&S|s%ux5n@Y36^3JD`9rvqVu|ESai4RANSLiOp(^`AdvGRAE{uC9qL}gO+9ae z`WL2-v*e;_3ynE?Pb~RP?XvW@#4bii$c7@4AsFVn-FV(o<#1u(dpcTE1w#qnK90P% z>mOA}f@OH+8>Pzx&v*J8sfr2R2lC+C#OF0*=-j-cI=& zJUyuU5)|z5AgeJAPN)qh!Jt&4?EMK8vO*wLUvbWS~nt4Dkhu#G- zG)jIP2le~q*B62Z5By<)ohJLgI0|My{--?2Lt3WLZA8XOme%C&5!^5w6joXb2Hba- zy0u>HA>$n$=c{2JWjueR8Fd3f=GbQm+5H^a198HxwZQII-}#DQlB8T=Bh)eN6Dl>S zBap1g+*81){#x^MdijUjdgI@Dg-65^5;X{TFzK5apO5I%Gt~}MWvyI`73GIrlK7=Y^KQ0C7^nVRFE&cPs8gU9Tug_sP32x&~J;A6iaAv44{0o z_FG42bRsb_V%$IWS0rw<#I9guxV#>w)Lz z0;f|uT6x~|1N2-@o2{I-FI-MB^DIOlZ#6 z-yzM>{`R*<$8bQ422^xkCYz$+pS}xn?GrW+;=Tk`-HN!aov+HKWq(@ zs6J+1T*zjBl=HJmCg^-{;We*n4t)<|hIJhQ&ET?jsn=7Ap^vn;l75nquGX00Ib%A` ze<{^XfCYqzmLodlI?vsmL$2H=bsJZlFAaxf$?(%|=`-liWW``ASAkgiR2_55Pah>> z(;K@wZYK;oZGp0=@OSac)n{VIm)nSd5CkOc#q-bz)_R3uG$|Ig1SFziuEza6{`IvQ zM1zv%FZWs{^7}yizrz$VtN*|=7N>vn^AC)ROUEvv2!tb6{#*=Wg5N(j3AVDrr#>aK zX-tV^(E;dt$$2D^*^M6sCzrU}#?{is%2*$5>?U`|mULz>0v$@9^#F@(tuMpT9W?R} z1_G1+eeXdzSRZk&?iwWB-h@>9cDF_mye z!tEEUcJ0?2R(K09ZsZKDN??;$H_q|<87;mHBxm=gI|qKc9rvE=DeYRQd8ZPyC=8K6 zBQLb-_>57I6d1w!0|Dz2xGIp3l)JFHAItb4E*g|P?}Z#y7Ypu@xE!_y*e~qzxnS=Y zNf$!ofUQSnbWvoHT`5HeOBHU7Y;F^v2-zIpEK$$rNKwYH?Lt-OgPpV5iaLHmG>l@G zJ<0J^gQ+z^;hCkWf?2Ci;Afa73?lul9HlkdN5pq5&>LKq_(o$WcOxSP9V5(3q5@<=zcWP{ zX@5&E0&ek#=7{tXjvW(;Sl~Uw`1mHgQ)P`(ze#@m^sJAGL$x-%V*c4eLY$;d=VEw0 z2JB*hE2%=^f7aB6#B8zAC1x?1+_Gyc6Fc7;|45NNIZN(|M$U_2j7eR-;Tuf9nJ({{ z5$40XQE*tU>r)bM6o*}MeCu?3OfV^jk?V8DQq^(h*~zHwxLD%5%rx74+asIS0b~as z<79i;iGdpJ19s;w#`U}VVnq4|(YUGUFdn44%u;BM&bBb2N*5vZ-{h6Z+Oy`pK?X}% z)8A6CiPA^>YtLHWHNE^QEAT)n6~0wlv~+&ze+gBQ#8@fBZWleU%l16QV*!cn-yF}~ z0bolaMLt=oZcWn*-xb_sK2M4Gy&FNuICA7q&(LeALn-Q8>Gpj(Lk+|p(r=3~tsaL? ztR1TJnMf%-Z++V_S-%l`(K~lO1qcs?+*Zt&c7O=|&0$;Rm}k-*)@-i(7((rnZWWI& zDuz=-q|9Kq`M8Y6z>IACzDZm2n_!mX#`bZ7O}jMeBH@*EnVFgDKn?=%PgkKBp9fym zO}w#a3sCg2etyK-wq&L=q;8F?KBL;rof83N_kaa+vaC49*1jXPc{Lu>s}tX%nQ{sr zLyNxs#?#~;il#aav^n^dfbD!EMzKoLA7bn~K$?G**2$9Muz28z;6A%pFqq;vt|#?) z?nG_b&RuG$$O$t<8W4Fr`eEd^uMiM(T&5IHbF}m@L77)R52v63J-cbxrSka-7;NYV zcElJ6S2~Ee8~SkC*7;i)cPgo@yEoO;Z-n)SBww8d-X<8?(b`!Fv4XmGXHZ}V9q3t! ziQx)Alv11)iQ3oK&gE0(ngvlcG>~bNa%oaulhgg(nV741Ob1ttr2TzrYq!Ii?pt2q zpKGzODunUHa38A8q269oyK6!!561`o7i=^#-N+V5#9{Z_p;jxveN|I$?1&ET9&2(E zS9EMEvYUO`zeM?w<_KsQsWXQBo5_z*g(faPSw?noU-2pLn$U_OCl*;(PWVBfvH%1;t{4u_n0$g zyk|*fLh#`E0IBK~JTfcw7o3sidCCx1$;k}MLBvy>*~zac;-h?gf$=|n^w0aP-upz~ ziO79v%7687n+YuC=nN@daUJ3$70)jCkFv*I&?|4P#pMsPI^4na{72VAWlH0^~e|XN`Ue&cA(ck^=D@rRELSxKFl`M(=C4$`o_9{q!ep7<2z>Sn1;Nwf-qsG zD5G6npmlxHJYPEbqX~c|fA8>?&eQtH4`#3A_n>Fwv8PPY_DmLie0XgD-!PWV^x{<& zL7+`_T=F@eiD{u}&iuq$3BEH{lq5FXSK-VWU5QBuDD9(}RYqzMN(|Fk8@RU0*-Kjz zGo5)+rnNl8%l6!63=Sgy-0`nOt<=eCcs|4P=}4A?4fK24lDqN-DtlALEFXV8M(+L} zr|aq7)$PWf=*8KNMcNOq9=w3grOH-Pe_V%MswT~FX_8s>q(Ljnh@(xPls$+-7}`@+ zbvA6$DcScLJ7@AopqIBu{-j7)pQ6#$PFl|8%IOs2$z9LB*CFx2#$+U#F&#RVjq20S zDy~Y)L6jV>tGcNb^=a#~wOfNqX@k^@i=pwA<-zk`FAndPz%EC9VcbO*LAtj^KH@j& z%A)z~9T~mSsuxwuFRqUYN0%Qg+ANE^A<3CPXVR#z@-EJU@TT7PFH7 z&GW`2a6r0k)v~Ciiue(oy85@;5b2guFo`~yyTRHyCPv@-+Sg*xzb1!>x^##QPb)Ur zzrE04_>}SlT)TnP%lLKg19V-taOnu$G>&iAQ4Kpv*wTJ@_Cvm)3TOcGzZje z?-jeBx;rbP@WqLGJfdt@ipB@%T05LdQ6BCb)>OA?DA99aWaRZKDp_rIEhf_m4fs3R ziFC_Kb3Prcb(&?QTk{&6<3WCYxA};F(nLgR!*MNQc=72&&&0e0$ci6E;_&ueJNe_% z?EIfLRV)Qi{*K{1$)?F$S8e@_)(Z^Sii3Ro^M)_ z^Y=TVQSkSGS&ubOd|KMQ@dDZsN>6@aUHJQyZVx5J)-+w(L%2)D}Cg6d;O>E3h!Uz6D35BT3 zo8EyyJLFhjrKDIcj&TT1ZF5y6-lv-fu?@&*Xix)5$YF4$0o#HelRk~xK0KA&x)$^d z6>5y@sh>Pls7&na#kt_H{e8>T)tbMU6TGQ=ZbU2JDf1tzwYeSZ&UKxD?C0n4L; z!b;pIncO}T>?mA!FhJd?KKqFS+(1Ig$XM={d8-{55Yv^4%pHaA>f!NdBJPun5hy@G zVXZ|#!o*YpwC+DG8ZhvichqFz(GGXKK~KeZ=TsS+!f!DiV;YqT(sh?K=Qd z?C>ZDC#fW1@S6)0V8-N+wxLUE(c-(_@VL9|KzC^2M<}FpRTC;2^tPO@R;D9-+^($a z9!H{?@A?;JX8Z?yMG?E-z_S}`{%we6!4SD2OTT^f_{OZp&IBS}j%?UFNa;*4_95fs zrYe~TW)uT^m#KgK(!u)r`uyUeP{>n#Y;5eN*t^m(BSoLn7PM%B(xhc}^KyRzXMQ;K zza=}WVriXMdj)AtW^v0CKCts1OXr%#9QR+uXXnM_n*HU{gagnSCZXln}VO-XZe z?6tk!aF)Dukl(kx9CMS0= zdt0N`qrp{b9ZSw>putMZ$$u?K(mbSXWOdJ}LG9OurxT;Oon^ll3~trGudZUk&}+a`*Y9@yu1pVCB_m ztkwkUz_zc^FxqkNrcxZ#`NNc9W2lx~bgUWxcu^NT9sZ#zQ!cSyl|=>HyA%j!GR+JxU{eYfHKccfOIE#VGjG&ZCE1(3741npmbI+jM| z)U5w1h1Vllp0A|Yug;nKRFhSu+h%ReUTC=wY#ofEkug;Eip%CiAOzZB=)jjL$oS?` z&$JPr<)lZJ7U}Gvs22(FQGB;3#JE@q5<+v^SFt(!_50?pd6?HWZv2N!b!;5oKkC$Z zHY4nLH9r|uMemX9IVI)bZpABr{<%tjeu~ZrcPoC*{k*Naa408#N?lWJvW-{s{8>9J04^q93vfjV0Qd9^%Z4yu4{t!l?5+_UebJfCj2X;Yu# zFTi}YS`|yx;CT2Up7$pL$D59+ni{1sy}*F9$E~{dJ9u%d2ba&gF^_{|zl(jC%%Cb! zWK&y5l&Q%CDYu7Tk7c4H)c4z5aslMcKGJ*Z4V+G+n#ATfD=gT$ z^XUYB8|QUfz}3)op{mo{M=p)9Nc3DjNWZ=$_fA3rht9sn0cA`hN5*P5-ejss`m#yR zSp)p|5<_h(d-zCW5Swy8B%>j4FQ;SpIz_x6Pnh^c5>>aw4+WLLN4ga(z5}|SNr!(V ztz;zP@0jeH@=*$64E~}%(0+BKzwa<=alQQJFw>%6(>Ur&0Y5!D#aGQ5@qsadZ(Yxa z_CXbCIx2sRanXAa7uDE99DKXM{bISX znsrUVhoS7uH0R)(nAT$7fA@acU5>qT%%FhM$ys9ymq;mg$(^_)W0d?Q*2KHPc7{m2 zOpRi1YVxb^&VRGg(bgZO(Zlyl)Dl%+84nUZY;$iGQUROxyS2v`5&D`W^$T- zn8@IMmHf)oJ^LCU+0iA6Z9lP)3h@2&9yA-9Gq^R3n&!LnKDl^_lWrr#GU21vz05H+ z``#vIw)AgqcJ6t+Sv7K*v&3l!4c@55tO>htIk}IfQ~uwB3$F(}Jm{I13LO77Cw4D) zz6ag>V0s3>`*3|eSi?@)RjLuX(C>Jk)x=HPgL%6}=xpDmqJ371Pk8*9iPZLpyx8od z=q(U*EI27{#n30gQli=#67l4uXDRnDPWJ4xU_XV(ADGa7M_1@vws#2R!M%>hU;qoD zZKQIwKmL(XlYQO)<<8&5px(p4&YBk)=ckxbgi2p~3smG`urv%_V$r~gR6Eays=5zPaIyTbz$4+7yXQywzlj6}Jh`1f&18yRcCN5(Lx{j*wv`}A zm-KP0`KA?e1b19OM>3e+<<`(afB~ZMa^8ax6RzYz^Z@XuRKnU(G z!GpU?65JsKcXyY@nhucQ?(P~Ojk^XKr*U@(u8mv6^#A*6F6QE#s+m)BF3#1y>eajU zuC?}hpZ9rwD_s-$$xZ`uKH_t3JU^jZ8}p+X=kBmiSPUPNZAsN7Ex9t|4R(rDKxqi- zWG8RKGBF4u^|xKdWw+?<1@}DH=2B^khZ%k`eRf~pTj7{ku^;$8F?2$M7y=C${E{d* z`M%83KEf=U*du6v<)`K*Hgc(%m$11t=3T1G@Uua5UpiZzM`DcQBtpHww6tBsSm5_F zJCV8xJ0nBep;Nvl6gdz4m_H-k++lBj&pFbWsEL-7>B-9 zxOaa6?rk607+iDC?$vnA3cF#F%MekEtWR}+ezR2rqWai; zW`l#%`S_<^Ot7yM-D;sa-oRtr5zSlP?AhrEGFC?x*BXlV zMvQ8?8>ajG{Y2H--E*uTFH#m^XC{WwH4SKbyMjo6hia^NejO?%U??e}E`M!f3h5Hq zW@)q^{j46C9^kJeyc{hh9pOmDmB9iPNjA}BlUc=X2c1LEz|F8Hjqj}$YyN5V2|3Fg zX_-vs=rE+MvpC|12nySB5vAOGT1XA?STU9%WZ{n3&3j#n4-ljMYKd_sqpMANe{Yt^7;G-F44b=UoY0PDpi6l_ z5QlUXPC#Pqf)9^jU&%MU`Y=<7GhnoLplEH+Chlq)<9GXN7_KZe`;kalhQld@WyrTpvwRjk z-`e*QPYX!l!(E^`CZ@|!?#VEOvwBia>dqu2mKb8WwG#4RbAB*S^!Tw7k*6}hcXp^x z<)!L3I9EMw*+ULtM245WzNf56*R0ERAAKDA;)>z@i<`5UNC;z%W}=KMO-v3QhSRn$ z5AI}E-_5%8Ofrul9+s;aW6br$=#?rlwRWhYZ8VP9UTWEhQQR+`pA=yxtqLWjTF0(G zJt^YQksbVDicqZ!r#st`thuP=o&=a8#AlIl`ukuF0yLU-$mnD}X+x!M57la<9}>gS zZ@R}=LeAA5mx{Uy)&+l*$&+M%wS6$sYdcO4FC(U*4Zk`3RL$?sf^xHqH_37++XN0^ za@~LLMZTn5F)Jh0HT17iUrtX3nI#oWR|_D{F(OoOb5nbVQFPHw`CCuV=HMG=(y>|Z zFnPd<<2t+K8;Z{0H2$S1n@Zt3Wa%lRwBD(!Rf{lBuwi2&rt6?@Y-ZmQhj_nOwLr|? zZr6R+D{+~PC*2NewSrm(dpsifaZxJ{}Nhc|+F#I3Q^ zIxbN=v|u{&m?5;cA-bNQY@f%USvd1jycs|&saL1dKpPxYe{xK~f)PQbdhkp!vlROa zqC5l4@56Vrk~AdeDhO(t4uRlx`0!NRM&2tNo}(TqTB@*PnB_oK0Hcn4X)Eo-Y|MV! zT$JdGt(yN%7Dv~Bw#SMRxORry6l;-^e*87gF98>qSVEyo1 z>r|l_5XNCd<6iD4q*MrBiTLdAvCM6^f)TUxVy{r-KB!*bCP$F&(ch|RA%X%_tlEjP zr}P|sj14p@;M$h;I160yv7=L*KkgIg4z60BTI{k$IlA2szXdoMm{0{}0yK=Kzxw&L zl^yxT1Ow!Z?W9^xTD%-=0zA}7ZP?Yq;STv%F4E(9_1Q&{+coAxq{CqH&FdNf6UiEhsqE@IxPEJG(i-dJ{Y)uL~1@6m}<0Cmg63O65rOlId0GKEh(E9(#$>a!2S-g6F`!jOq z!Ef7Xe9*rgH5zL`VuA=OJ{}qQ0h<_y4q7hoMLgin+i#PdTLR=dDoNuP`JwC=f8ii@ z)Xm(vPCW2Bix2Rk<0~8HPJ%Bd^$ouVDSzLSR21^$Yxv&Cx3B}5?yJ)F$x&$k>Kl$4 zr>e$1GFdy+5(`gFo>25T>zcYQ5Pnk&DqtrBQ@PeToJsom<|& z5_qdi4Rj&NM0BJmHzxUndu|>aFxtY2aHMQg$@_sa;;T-xwsxSLQiSXQb~JXPGH*N0K99Gcp_#;}cz6^kMJ$-< zw#(IC6ZiR8U#Dvv3l&1Md>Elq=k~7nq+sh?x+|94Zqzg*9#vWDJ9#&oPdY<&`m?W#MS)A+BIe;@KRU$tvAJDO4+P_6ab?iqA<3fr(PLQmfmdn}ueaulewZo5Ns zJn)t?V+^mGw2!R@prTP?p<5{E{$7tdP9R5iw$N199bJLiwt`t96~ujkrd{8~#am;og7l;B%b|2jPGr7YjycitF|rSBzuJbM)-7p;&0C z)vlW69UqbS(?|NFoU=t0*xBJ;>crA)e?;opZX&^=2Pm^UZQ&B4k#)F`YwO=$F(+j3 zp9kOTDlQefaYcq)%>ojr;`3Y7CLNc5W3IlKOSFJL01S}+ei7sMvX0ve@m5qvb_$;s zWaCb2pn}o^#>pvtZtO$Wub5O<{6CCXbxNsJ#oydGt%Ry9HP4gt(qIex;W z>%3V}Gh#Djc8iI+|8&yidXPeE`?HnAfBay#V?D=vxR;85!MStymo zw}M>vW`sWf60(g>jlBYT{hX|Myw00za7%6W8t9@C4vA1$!4W-v@l^5SZEEJqx{Y-g zvizEt*3a}>O$gCZZ)D4X42)prO&`?gRC)V8a-NL3r_U`X^5u#Rp-=_%J@NS+?DK|y zHZ`uL>QxcXt%HhZ*8~Re^6?5el~QD8RR8;e9yYT{HJ7V_0*T|?rFpF|t&`dqPJSDp z6n5jO!or=o#QhYiyz#dV@}No?k!oZ?UxG;*g?u3Zf(%^pZ~eLcx#?6QKO;C{>rA{! zXO>2K9|LgUB(t)Rtyt|zzbE{!KwhYAw}@a+f0oB?09U4SO6lYpDy5z(uP@b>Ois_Q zm*$`Lf9@rmgg*6i0c920Bj-6Rc7nWUP*k>p5)X3)_UM2TzvweEj-hxVJcF*D=#cBALq|+Iy7`| zcMvw5hojM)RE0W%3!8{cB=4RXwQ^b@ez{bR2B;tO-moh?1YCT2J>^$~q%EuOHZY|z_TRSZDg9}xln7#x>!OZ?1Wnq|@$gK; z-f!*EF)~ttkT1Hbf{PK17+tb_$cN!n<(lLaZ!3)J%-2hJ@j!tk}; zwJ%`=lFEDxV3VutFn(BkLvVy;R=r6!vnQ3^8@x;FestTi;DDMRbV0bpqThiiV zhuw7*=^2<}@~A!Qekd|S7klY-^P%d!9ch=jkAsf$8X9Rmt=C6Ge{L<+6zF2o5FWGY zxeJfA$8-DNdZS5HqoGFfQa-lX=7#f*{N~?%aL7!|C-qem$vA&~*}NFzoXYLBs+(M0 zRd#f&avxMhLq!$pd{t0yeesZ(JNXjvvYm0sz~eT<^f17nTs{=N5%V`%nR+ zoX&NxK8UVq<0Ft3sj3DeW(;9OG$<^48Sw)oGsxI2$@8 zAMR}40xS1sDx!@_SClXn?&$K}{>T{l zN<(&U+f-UhLwY!4XfA~u-JZ6Y*wTBBDmX{J72{`E)tJG@=nnkhO=bowdgu7||S(YlcSp>$4 zHHN(^^t$Z^&%2b!qz`?nIwfI5yn>CM#P>{V-Lkpk*2bn)a%Zc8^)ST`LC}qc`JA4k z31%&QWNcIB;@0Bml3~`$Ngxb*A2KU#ssuU$s$7m(9-QK~3TN70lRz)QUA^bjcoZd0 z1t`kq23<@gtJlo8YkoK%>B$zfZHpaa2Rq^YIAl+&6)E%wQmzI_eaiF&UsExbu~N2( z_|rb)kYn;TBx-&eEAKUz7Tq7>_Xt#{>tn#C`WLLXC;2TGKjHDFU-iY^){m$k^L%DV zKwKV#c~%{`a@YMPE4$Ksa~WJ+(;U7v8hvbhiHaq0N1R!Q^=+AWbmQOWn`B<~gmjfN zBw+bUQ%WVg!h7o(#AR>Jz=t7&??DIY-`IRML_RI?8j!5|S~0(YBOVsX=vBwalSy$@ zN5bid+j()sK83p99ARlPrA9NmtXszwTB7wPB!z(#ondC}IZBDM)(i60Zn;1Xzh~?H zdKlfq)tPLrix_h>k@}4ZE?IQb4az}FL7q-k+LAugN^J-my4h4W_MV*lgSlq|-&7!D zM~L!f(&n?ny0)UrF=vU9j|8{_E=~n}c-N$YUII`6x$y|Np2vkJ8L9tdKsQ|&nm_+b zc6RYBTj#UUjz2?Frv=}*sS;b(3YST#nWlRk74oq(JJ$8&HDOcqzvK8$XgJ+LpPTOZja*s@c3U*fyiz7kh>Z(p?NG4@rv zX*P$r@LNST__LOj5P{`fiJ;S$>-NQO`TFP@-zjZY{Dv!MX-aB{tdilgL!?}JXqlO9 z&FtS7DhbthAq~_enw6_&6#VLItLlrwy60=|QdzgJ@bF$!jKmiqe5`QNv-Rif{REE! zTb9+ar=1a-iKwjtwvS`X3aKRcK(Bk>dl(im*WMeYxyFpwG(nTB9+3nnGihiN4ir4QQ5K9u&9zOd)4I z_K|ShP|i+8h!99kWZ=WCOJ(7Hk8+E9@R6aKMCa)*?VZ8ZdloBERX_cvLaMw(Ctx5; z$lEK{J}BbIBV8;WQ0%)x0L`tqhk&Fcwf&}p)t@EVHm)2{r!Ql#=Y2c88~tKcB%IWX z0$>c_HaemAzj{t2XVR7<1&}ovixYA@wq_?e(cb%@=sXPTORc~ev@y`~Yh2L4UAOP} zvPl^XeMPjD6iQsj8AZ=~_(jF)Ik()_I-JPgi4dOOv{!lTOEzzo_@yl{4z_$hI4fIL z>+7F=BzAxJ+&Bs~AFkTl0)8(Ill7R{tKNr$?Md z-Z4&8x0|~dQlgz-;r;-TNO%>iGAHgX^n1j5yY86aHx&324VPf9gNH)pMWFQN;m;e{ z;)-C&P&*su9A(?5?3h<(+$8E1*E;$a_ZIFX0tPN0H1)eo0fQFo6vT&V;ELiT4uK-~ zXCb1(s?ISJ>C$@dUq=qT980EH;p6d{F*h0dASII_Oi%%SpnWXV<;$rB(F^>3hOiA&4#=tR zUtq_9n9Xa)#d{rmmUko=MMZR*a_@!pnK(EKD=Sk}Dlpvr@CYm|ziSGZt3L_{p=jX| zXcG2go+$dM6LLv@JO3WcZo%1uMB?GM92~kZ86!+OgD3y~h}vC}SQ7Wxu){BblQX;| zL^y+mxzBgl=6Jtfd0Tooj_xV;&|C57Pf1N@LhsHPos2ZKc*H@g&f^w^f&VH6>lkb4 z^g;}n0k@;=15gKjsBO3`UI62{k+tEVvMg=5>@69=wM>C8MnQF1oYOMauv8DB79`5r zBjG*e4Nd6{jj)caACMu_-Vc@=N=4V+7WS6`jWHL9ibKo3_5657*IbbmHSEQ@li7R& zvpWS{^X0VHN*HD{JTYdC)p3Z+dH~8MZu=qA&>*0)r?PB$8%DG?`-6q~ zt8&G~As;)W4xMt#^3!HcmKPfN5@qV%1=~ayJFX7@>G(yH_oHfgu>aaP-YH}FS1*t= z6J6HR?<7#GLh!e<lce-AMWJMa2iXy?$qC!A+jddT^f)d;D za`N!ABta6{QqAIuT$&3(?r8crk+WELev5t?KfsKOO1B!tcX96V5qI(Wk8&spXp!j( zYL!S!!0{rv&C;OUALkFV~%DW1t6}z)n z3C#NPcqCHRx*(dTEN6{Kl77on~`CZ-*JJlI)8rQ!3-rT;$F?Lb21>!&|O#mk4@*@f9MN8tcRk&{!Wdi|s7vz)1= z?mq#6Z-=Qbnk?*o=M6CiC8@E!rFWklf)zZ^bDvj!#D^|M!1jg3T#0F?HOjdtJq@2Y z74PLgSh?ekRT;*(aeSb^ekZaxkKI?SZHU+wJ1XNQAbhEZ`7*GZ44 zn-feJ(RY_2^D9lgcVZMClzno7f4cPRv_A4&=bn0*R%T;O=c_5qv@!=4MKb?)K=EdJ zHR;Q9k9SG7NT2KSQRtzYfX0zP#FtIq2rqVPKN*~RpHQaRM|Zau8!soF{?1BVH#aP` zxhASqbmjaF6Ja4s&3~2@CKE|K#JJC^bp!`ze`O|9(!T@f3$#5EMN8lFitx-T1#eTh zLxGog!&+e&s;kxZZ|v8eC}|zynK%8+5egTBwwQEfg=t!6f(bNm8!nTm9YB*8YI z#iIBCp01nh{eg8d@R)+3CMre<`=rM_9uZk+stg^!A@TkrJ!qV?gmDsjz070PHoBgs+CGA5#Bi+gd z9`UX}?|sy0*{4cW-s9=2PsID7OH3?&`=ySj5LYVFUt%|GpHb6lA087upuHE8-}VIU z=bLav!G>5B(+FhKuaBBP3q%eMigdT`RFpZ@2{CfUH@ONef5@<97wgWTU*~jw_HX-;?XOvB+Z zpvs8zg+1rlpM!#)%x5o{ul||(FR{Iw_r*QQjE8=q)%-`AlUh4R$Z#+#i_7-!OBH&0AM8&xMo@aisc^`O7G&4q4N;CC=^Jw~-5ZF^ zQ^H2^xEHsh5_f+V{fhUzFmf(oFBHSC<~L@YNq=Z1G#GKD`m~P?7fDJydPC(_jlc+r zUxL7h5ior`1#Gq2!!A>Fm)PovMuE{X>I*_{(=Q~M9Zv-+TAi zo^Q0SZ&2D(w&II;pR^AAWd9Ef>-NZJJFJsp@h!TLn+s3O0~{_3X11Ns{e9keKkD2s zrLna9Zk+SE_=B?J@Ju2JU8TawuO?GEP9zn(CkL??!&#ohtyxVSbO%xvU>5?GN zGkT>sQ%I*iQ&)Fw<+0Bl(HDN@E};kcGox9lsbcmpt?B~nGm?1!+R@>DgYBY_eH(@d zfW%zVE;f6Jofv+w@lSW#>1ux29r|}HB&Xfv??OY-g<#ySbp|qB^YNy48N(jm(&J1o z%IRso5z-t}I;DyjmK@(GpTGEv_9APrEprM2k!eK>&_dgP?d7zPz5KlweL6U$67x?g z!joAerEK2AG|EUFk#KHHQ+sq|DlVmIY+C8W`)UwHC7k;?NQ^+qa22|_4x{qG1Sr9F zw_ijD8JDqcS5B`n7#Rl9I5;>~90-yq{*=JGNpt)+D05!iu%2o3X6EK`B}}jbbA(?9 z2fK&}|4765H}5e4`1~Py>-PI)Cr*cu zP-C$6%cbCAm7XZjqwG6#{gU7kX8ZVym_Y1AB$b(40TDBRf)qgDWQWDI_68C+{usLs zH9rGe9!rcfs*jdVdJDb|%T$O~u|P+H(KdSq<&dbZK~}Lkq@CKrOt;5(dAr_--VP?> zd-w@+N1i#E9}v6t7Ak#fgq^S6a*7BfD6*#qt@TnwYfUFsm90pBb`|H0FWUZB@*djt zpAbbC*Z(aBC%zDpCL|`t^1S&E8}+&I|3h$N$Q30n=0TLO69!s&k=7dj@keVe;OV`# zfe%S)XJZoKbi6nKKT6rp`{csD`7mMG8vx`Q2q+Aq%k~~_1P*Fy8-08>gub)R>Y=@? z%Qnxu*$}8yVJpaQ{vk9jF*;CgDeFmCFp*XB)4im#&vXy_v3iRD%*9xk)dF7G(>WEp z1*$X*1&u91OR#dbA6WkUGmiCF@_CGXoJ=UfgCK71=AqYn;Aj5ytpWG7$eM}j)rtQz zggi%nVQ6%$Snz9DGpE+r>QIq@gekOAmXpIfXB8tx7r~Du5`hu!`ork!tbwDB+SxOFD@&3=I5^WOwjbGgc{I=p753!dvJQqpiz zfLTbiGzeV)^Atbx=sLlHL2K=O90c?dA{U`!5+pDb420!Lti{H|Q|8^!G z>>NpUO+)jvtJkXJ-mp^znw#3N@Q(gnuPsh7CJj#1Q>tjTz>t3P);* zya|ZG=IMQ4Io>iAek6cJjmO>^b@i)GZn-U6+8)zw&bIf{^A_$Jbi&o#fZaXy)aq<$ zhxNUGoNY(I_N?O6S-;G4%=Z!%oW)RgIo$xHH(LnHOB>*Y68Jv0oj)@quCapb#*o7R?Xf&IQ%^- zhgOVOWr`$z{tsn7gjpl?|B!9>{q*awDLn<58`D-tDAFIb${9jy4IOJQ%((xov`hm; zpO@V4Z5}i%1g`v#oy12o#{<5EUw6sA(?4La@^6Xvs&Ma~j0)9#m}NZ_$;t&qR7FPd z8P{HzM7sZ=gLi&NQQAAe>MVhHh_X@1KiCU)zA`(>Yp?!s^Cu^^@l*wqNORJ*Zt9!< z7sI;1-@VfKsq>RN&1;qQb4lvoJ<>uNX?268(JS(r%i?gkvRjswlzZ6uomXT7O!*if zGP3R%^k)7(p0tFSL1ShGt(9q8y#)1{RZLKN;D}v8XRTCaX;_4CuntR_eubccrfLJw z+qGrEN*774D`qMO^0&B(_)w9_#s+}dkb3Y6WF3*g|4aQ2653Yo+zZL+GVMT%0N0%f4yPv%R?nHAPZM#Q0a`=n`zLbx@ zGSe5h9M-=)ICm-aaAw|FRaZ(UA9_yqE3;*@IEdodkJ=B_zZd_;!*Y&xDk-Id=59SY zkYjG)q!<0MOhREU)xY@xo3as;`?e_m0EBFg*WuSVgh)Tt>W=E9#x8y9jcAFqMI{Tm z4Q%qh>g8<*;x`7sDBn4KLO;M`rFt#j6&D?G5~))tkzSD?qN8!zD-Zu_D_pIUbnuH< zj5o>YE~!N%I*N*FsP%T8rfx{4H_-FAYBGL`krW`XS3r00*0OGK|Maw^v2jl5U+J%( zKc6VC_W<{w!9#m4{fntC(+6LUbsLj0Mw(2rUC^`*J;aG}gcpP~nasz1=WxbxzL+rN^5ZTCV(=mtaoYZU8^Y*QV+-KdpFi77x@6zWs)L$%uj|Y}=@)gE zGZ(6>B5YsUL(tfpBPwJ(t34Olk58n>!_<{Tj%fY}^TlihOQ(U7TIHrx5lV`zFB;y! z03HE_GHe(lNoQH!xR%6ntIEJ-VAf{-Cl?p*Yu1jgDC3)*QjKLtCBgZvN@D7 zx5frWGlc~x4BPp*3t;{7WGt&lOW@O{!wV8m$I!#!6t!{o9GIWROIC<(Yik1zJL^`h zrp?#|AxeIjxVX64s#yGAwU+yd8{Y|y0AdLRm=zYi;zv-OsVDcu8lej@Wjyat|47v z*z8^Uw3Sui9qDSwY!&5u3lAtJuw=MRPtfO%jR97AssJmHsy)WU7E`MDjyHok4+PT5 z(*9zgOmn^Q0CSRK+rry@o|db>b;Rk|(K58oDGDI5fm`&xvEZNa=KG`Ty}R|KdBYV+oYcVc4yz&P$DoGu_CtBNjucvL$Xgk#s6K}0KaDcn4lcMCttrnUEV|`n zs1&^EMemKjJ2Cse@%Xoc&jU-aN3C2M9;Qf+BF5><*E23r5=-8MdsG?=#$vQxygwER z>f@xcHe#1&{A2ux-lu%fVtut-TMrwnh@BRM$vctk?U6IdgT(mKGs~{z^HV#Mlc~gI z)pJF>_b+g~2W>vWv1)Z#iKAt>d3ds8@dEVR+%C?p=;rv$u>3x&hE^~t}TC6#c zO})tXbc8aw?iAY(?}P)2m$hmWoW0&nYwLfN(R{NTVdYV33{__Ql>nP0D)Q2)ndRLA z^)wjpFr4~jGbv1+4Xu?ewmP8+>F-Vk+@OgHe!}hDgtxz3Gql&Adc3{ai5XFaEN>G# z)-GjdHN8z)5&e&-qM`)apZDgA?`=LvS#E~kkP-hQ81Za^?L=F)c&%2o5vAObA5&yI%Bt=K)X&EH}=RR$| z%%%G+Y;!2us+O_vbOCDKUy1a&yzCIXNc@9r^|J1m1v(WH6?Z2%q2ObEcrwg50rwv` z?H&zu(Y4hi2vCZKUP47;?@^wY$!6&e#;?gl->C01tqhlL?s2lo%qPn8rr_*>=_fRT zWl9Iun#`0ng@At7(iOKj?)wYrjoI0c`e86M9G|%6m0|w6`8|B(cedv+9QDCDX=$rZ zB`hjm4K@{20=&shIdlu@va)z`2bch7%Jr?+{tm)>el&LUJN8_Pj4)tddxanx~^k8K*EniYjc_`A>&;iUnF z&6FFGHKKsQEqcXf@3>TV+XN3Y;pbOoM^?^WJWVQch*UgDTeEl2R)3!7iaB?+*F&Mj zL@W#u2J+y`ulL;e^g6Oh0)KucoY=zZww<}(P>{IF9JLy7&3eO=CaW5bgCt{6zi!w> z)8O{}Q65xKa)Ij*V6=ZNEIORQ!~;wX z`GABFRWx#lv|Dpcbn79m?=M+wiNmkxM@GAi^Yal|1_>$-h$^dc7c+x^PyVC0*qheh za^vUJTu|+qE5aL&mCqZRx2}`>_)piT9$J>umIq^D>a@fH-03qNLcC3UainD9*pG0I zcprSQcXIpSh@kbM8iMy?(;mz;`04Mn3Z=a)JALTDCgY=Z>aztw@$$Ze9XhQ{jFpo2 zC);=Ht8U*SwPNzi-(?Oq>D$@u^8?gtfwZ2%9J^HjqrG9*PtB1d;PE`cS~vSL=3z!w zhS%d00V|gaBcft90@JAkRM)=z^1?83W58)pjTM!yE-7-Xf=7F8o$2zCL)1N^HN8)S zLt#9`SahJXo!P6z$=ok6d~-Wwsu@JDsO4<69r!gwB~7XQnv>a+7q~5{)?jrxVNZ78 zBrNrC<9IwID)rRoPLk7wfC%tYz(58{OSQ^iz|{)vG1{}<)bC0I-{+%Q6*$e z8=o61|DK*Gc>V9=+atfurOkt4BHiox%GJ)qi{5C9-)1c|(j%?cEDJRNj(cgVZza)m z%+%ONyV|;rBGH!v5cMW|_OpP_DBz;6Ocr<0+DBQVaR&LWE{S##0A%S`%Lqo*+8Y6P z3MydrFL&p*Fqg+jeta?t$13vsxk9)hML?%-Wwwm4R4ce_6$ZPpn70OOfS`VKD3Lx6 zgy@bZI@!keo*Lz_8<@1?QBm>O+f(5u;MGMz!ZZHdAIwoFU(u8G##&ulXXio$f-M?~ zruxXYk)?tkpmcKL5fM)sO&G~^6tI^Qx^}iJ4%%sz!!}pl(=RO}e zL#$3r)-!%NfR(pWKry}d3cT_U(@*6HXhxB-ih64~3%HwBFyr(1S!WNuJcw{HyNwPW z>*9V%&C34;@u2~w{2yH~fz)0d6#dR4HcuV9U*t=H5`Ms%pE`MZvM0$L9uoN;)MMs} z`Cmu({1@orB*<5*Y%>`$0B#;6Uu(Z#X=Z-jUrf4b*Ed0H#PmWYo2y z?HmMqtI!owq%q|$o9Hu)l0k(cqBJwpJgvAYBU;g#2hf8!UBRy8b|Ju9WB?e;l^dJm zlkTSZy2B5p8g$7}|B=hv9@H$B;Nh^_N=^v8CsEX@wAMDI$an2Pz4|`Asy?y=w&nsI zFyEx`PL`@tT|pzeS8_)7INC=p*z^}#FR{Ob!{1*|3irdwi#Mr91a|R~@k3?S7~`I) z`7@(WPo3=S?Gb$pJvq5Sm=(2*0#DsRZxN;Ut5=NM@={;Ei(Ka#fOh2ZS>ZoBildqM z(L#2S56MXPIrX!qZ>l{#CuY=CfxtH>W?3y&LG^r!Lo8J#9g013js@j4IUyxht(7-X z(mgY4%q8G~2~!z$-;`|=o|@}SRb4ggZfWiHz9HaiDM4I(mi{@00a4{D3Y{t~y`vGP zD()#iIqszxx5g@CMO(`%9ji?DmJj`nR_F}z*e_#cVm#m;#dQ(14`V&%xq2j2VF_;L_Pw=KF>hd&Pm9vjz$7L`xCu;}#u zra)Qja^gRVpl(0nJZd^AoVDoXD3Opp5;whHqlw^Yj9(?BPFWrv6m|Ci*#@W~dWT7&rHLokkn7_+D8x z&RZ_4Iq zKd-w#M0DUyB%c&P0mOK+7!04p30KuWNdl~e+Pvm?Hm~I0-uo4J*;^j%oz?j|f0Xv) zPni8D?Z&~k+-amN6CjKxVH|EP#ft){WGpO0%4B~H+LqaM;O2C55#1>_KJShoREc!l zlbALxT4P;ObRzsP?>}_0`V0STtuKd^1DQ^C^J8Se6$`wFB+SOtvyp4BMWh9uvv;29 zg<`&i?vR!_9L59Q`CZ{8rBRoBL0IT+_ny>4IMvt(L*V&Rsr7;zm69ttQ2jYdV$Tiv z-ELyQ#3;i3Fj8!-%3$utO#e8qM#P_yDRp%ElqkF5d1c7n5c7%1xHl{YL)7;SIJ&M8 zZN^>gtIW)`w>B6pu=dxm^r6}b;v}O)saPK?QJO8J?6B-}6%+GsG!krOaAC5fr(k>L z0HMIpTzofEKeIgzCJINw$?}~{Ht@X0xVq&3HaYi6>v#Tq+$RH<8{Q970K88(m#s$} zg{qpQ6_}*HjfxK=LA(6Keq&vzRR%pBfVCb05f<|F!^sS+ zKYPYa5pHg0+y9RB2IfVSvV6vr4Se9AW*nBkx?5u>vbRN5{OL%vl_$V&+;27+{`|TS z#eGPK7A8E$rYoX}o;cq1!_+9*zh*J`(zzv_3`{8rDUqIuI6<_wml6HihEk4sF&Oe~ zHlA#MBitiwxT(G|5R%*8SI5z=l3mhe6JPGf(AW^)<|=;He$N0N!$zPnhgbU`uK#k! z)D)#n8P2+%@SR8XzL?1IQg}ApA^*xJ7@4r;E9+{4IN7{56M6|0@HyyoUxe-QR5I~S zEd60*=qGDf%6^4IUu8wB#Z?6t7WD->F$=Umy+*aSF>@Xg4-*T9U8Bg2A)xzT$+MFe z{rN7H*Ss$=zPamXH;s#)U(OZku+`UV#of%3iNa^d{ym09zS>z}I^bXuWX_6+U}lwd z!un)5GvA0!Hyk9+nLFY_>b zqV!;{Sg^RU;#nfc?nO8ZnrshwQHpu&ISmZn&&L1T9O=9j=;yTamq!+F9xPGZrtzuL zZmWCEkQbCXy5Ri2&Us#|7IVH}&bLsV#0GF_ZjzO3Y3x+;Cm#VOn0ikp`~ifuCyFV| zYv@Qbz5jXVU_7qOYYtRLk-M3gCR&@dV~;t-BAygMVf?LxWRy?a;A_JAEmpEZMX9rc zs5mUK<+>B4<+&b>M67#WNb8{jl|+yrc15~f!kGu9mPdzYnV< zSXaAhL^K4}Us7@vcr83~d_8}QAx)`jNUVJX2I>KA6%?G^>|*IZ_sPCM@^qElr7*fB zk9vP{(Nxq3jN-Ep=<46uLFXOTH2!ugp6*_#b6u$%1Rrde?Xs?Xw(c5fzWqJ9U&Tf~ z{JZGvZs@1Cor?g4)tYvsi>gp&AX4%%blQEXg>iCZxo_vzdfgQ7~ zxjdPcnYRV1{ue*&1x|8JZs{{UFj{LAWw98ctskn7Ow_lTV30PcJ~ zB!D6!a?VU7=k}HFt$xE1`uXxTa|RO-Uki-Wk!j& zDWC8E5-q?_s!%Jpo-O~ylA`m=rZ>fbz$sv2HEz6rrX%J=!eHs<3I!g4}4zHc*4iTHcWTU(H=rP#j9LK1t93!3j>V z;O_439y~yB3l6~@LU3Dbakt9!ScF&_FNAhlNR~Y(QpcEe`&M^+~`o%j3S%y-;0=%GuJ!M!rZB}T2eP{PszbwGAANJ zi2x@UJPqYxD)woc1cb6Wdq~aX48OZ>(!)m)Z)T709Go-!hpvm;`O|Z`ey04C2WXab zE^$BwOdu(R%nTb3wrF3vUC0c4DRg{<)~)4$iT(BvGoQ?uYV?TXc-Pwka@T7gu{u`; z9MS7Ol<#_4CMK?TqGI8^P$AxZdxv4Io`8SsB5RJ@PK-S90xd}bYG@sn>Jf9$&wSP@ zw1N;?4wbKhrBWDKbhO~IAOv_xXT7p5qF!?ASj@t;@tym!upv~?>~8GQ7epibfueWk zW{6)c4S7Cum919Z{@&*|^ow|OiNQHRE1)}FfX)~-QN;jvmJ0YG=Rs4ga4zR{-ssT) zG9iaKy%J6w15Z7I2{C)Bg4R&|*EK%o#|=5V6s|8>zEM76q|Av5W=jxqvt~|5 z^%}5Pr&v&+=p`xca~D~TqZ%VIudTu`$gwpaiowmy!DyCm*)u2~?*z5+*V1dxz0Y77 zet&l1R;qN&dj$*N5_@q^2+3453eB8i?Z!7YluZJf+O8JF%1nZq#Acv-P6$he-U||; zKbe~Lolp(N!w=pY%v7idpL0xqNlBYvV-vTB^u#Y)40Byg%iY;b$Px&j6NcvgNbJ(z z9c^|$F%ihv9QEaR4BpqzND9@p#lY~rd`F;6HkQ5`pHO$F1@!rHM~c(~ilY*75$Vw6 zI7NG3GbV(qdK=FBS(QPJWvheJ4kj(xZ6K-IglPKmK^n+vW_(Zd(B7o1vmVC#i%QVM zN9D!W#!F*+rGRrAXIg#PiWDl;OwGuQ@RYGVo_UYgABkywzZl)zo6iesi{bm+IkME! zZPmLKm}uyv&TBGSppfg**$(hH?d&U*ioEP&QuW@K&g~!WEfmZgJn!TOb3=B18f`}-YR*fE}N*CpdNsA|?+ZzEz zG`Z@MMcLqpYg@y~>Si%~`(TcPsYa5C$GcPP(urMf1$?0vr>%(T*)RO3x!^f*fez-+ zGki}Y>l-e9^)?(aqU4fCGffD$J7@j9TzGp6-?bKJX~=4590LU~y)eGHwW9?Fx{01n z0Hj+d?>23-;QqlCVetT7A5poADxGS{06%M%u9xlvM2bN1uOQ<0j4EZqorDitLg-y> zxF&CWv=;$?$0jIE1b_qcmj|2|Dg+a`N})&6w0Ypp|w^VmGXX~hVV85~0^?%-BPz|gLu^1hkGCBlR zPxg#KH#0h$=HtuJQg<(%&4*7A8bw(Sr&y!=jvKID-=u0;m^)PzRB4ts^7~FbZDx(! zU$7)iT1Ihk_&;EMKX3!)3dc(g8fXu3F1+~ivZ(-vKBCI0BYMz?-V!>i1SZCN8aflr zCEN}=m{S1$_JyMz*eomjsQb{+8@|w=ySs+^N(?lw&Ja02hi9cRSN+DxmP7#GpXri- z<*T%{Dcq92T0QjVNWiww<-913AAbfzGTr52x8$k@)P#4ISLA8_ltBZea@khdRtz`l ziYh-sR}%BiVR-ezSDysF9Di6I*5#5~9_rbH7OPY)Xg_s^_-C4o>x_+?E;zv#cRTBfeV0-?^bdGv;^K0RyI5Yi|+QR^X?S21D35EfKg7&TNwS9oNbeJ#>AKiUK!8o= z45haaFm`L%=e2LZkwL`wy2Kqq3D*t7#@(6hH>LszI1#e3f+Z%{$oo2whR-(+>Xb>z z2KOh`J{4AlYDOT>&wUaWFbHF*BF zb>bKHP#8&H0naeQ;<3xMyWZQ0%MhSywbU(e{h4yMrGm)A*;+Uyuw{koPxqX3w5x`T zj=j2Xmc6~z4;C3kXhZu3;h0vXH~ci2aArMpQ5UAY(9A_V;>xpS*YT!$b4bI&+v%k6 zsv{6#QiWIz5{JRD?_j>IN+BzH`SwPJsk$?)|Iw9Ot7+(6Ae)zwQ5R}7#*i8+H>NY@ z)#rCSI!NXuynp)d#|NpiVc4sGf15n^QK4usb+EB+cyIZUx1EwB#d#-h^B~$_)U^7h zd~GcgIzLX*kJq(z^j*${3Ow*`o+JDIehNJ;uTPgs5BhvXArN6(xN-(xB08a;pRzdE zR{pW6fA1A13EfiIUzO!F+roS6skRp>MJM3HpL#?0!E)+P@VLH5_IqOtR&pnVTl^tSsX5kD5>EabV__Rt8*~q~ zZEA^Bd@W#Iiut`n(kf(&Ca1`F_VYx3>6xO;i6GzT%=pZ9Jw0B`Sb^Irc4 z!OXNw{Q-IAx`gib`=H(K(|rV{)l00no`_B=Wf|L(f0TW0ev0wf^IsQPoFA~}l=nAC zEmQ6OtoF_OOdnNuFV)xvs*J99VplI6ddxNB^cZq2p!@qZp1tm$!;|N0ynSpB+-Ln$ zc2aR)nd?d+_XE0n-FH_ag1l!9&ON%{-F@p9O1^WmW&JP(+qt;E($3!Sd^%llOxJOnP3$qztpfYI7x;8m8O zZVYQ{zE19Z@bj4k&8cdm$f8hUV?P{S-Y`=wT9e_bF8;AZ6A|Y%)OSnw1L;-vm_Zx! zZCJNIA`YbL?Em9(iPE13w-k?LUv(FE&;!GvpF3p=m7I+jz&Xyaq4b7fu8sU@(wT?t zA|vmttM04-9ydb2$u)F9dw2(VNBUR2KtYK9L}H)1-<*WB2fVMppz-b1F0&sL6^Z`1 zM&*5}zJIL$Hpn~8Z@6p0kzNd90Lydqe)mIkJ{}(znduT{wl&UnH%N^e{&NZ-e<5ZP zGD$|Jv8~$Caew(lg1OXuK5p;EQ0{-=LRq{V`0W&v8SvWw`p)jAg=T)Fnvc&KrWDU{ zHl1$k>Sbym%bl+#ExH|n@eTZ7Na&+ScO=)G?=yHK?0ve1o>?D({Nln#37=rp5z9na zNHFnyMlFsBv~Y5sy#km0T4$jsDt4j`P4SP*YD;nIx~FeiF_i;5qedN#ut=;D<~On< z33nu9z3_&OnEEYBtd;Re89tA*?=Drnl$0Mg2t-c2;CEzei>UI z*;nYc;T}+ODTjoRhf^@_uc&tmR}AY3JikObe`6xHdKtOsBX{RG{W|bz7f|Xyu(l?c z-yE2wzN;P2>MsSjh`RRo4id1}WVNA-uO!cpT{gS1gpPz@9zf?Q1U_}K(8s`}N3$2DsuNm=Q z!0ojESB#pa-M<-QVi-EgAb3sA|J1B#Dw97Wc>A6WU*q}!B@AWFGBP%P1hhWK0qH&P zWwOgXKhq4fcl+-N5H#+}r07bBcYOlWXoh1gmcO*HRS6=FwEMW-`Yp05!)+@M9)_pB zF24OKBn-m!YLqfgN2`a^RQ9Z^T#~ook{ns)qS7U&aa~^8nPiKGAlX?zfL~al9W6c< zm1100=(OP7t#_RD&hs72U^}bvanu3t6>Fvs&c=#Bh>E-YGD`YbVwfa~3w~Qc4g>sg zmAdl@-g5w9z*&jkSi9N3aL={LcKm3_bx+K)LQG~wTQDvwVvzHu&?IKPOge5*K2}%1 z=J7zK8Q-C2HNXyi)PDRx^=bS@4El+yhcwiKy2rdXuU4Xxk6~5kxwg93#(2U(u%((f zH2Sm1^AJfgk_Kd1LH}D>PVKBlA*pHXx_6Dk|QvAMpu><73 zyzpaetSg48ShejHgl~NNpB*pC`;ts|@ zyKekIYh!9aM~RBH`1XqKNE^Y37|h}{De&Awhji_g|DOLyx|Rd?;2U_b3K6p0N4*15 z_;m*UlVz*nclM0}?*H;8X5nObmXFkUg6Qo^+=lMU8uO~QjJ6wE!Q|HhPOpYT z?=)z?>nTT?+4Jh1`-EtttQgGOit61ecLK8fE5?F~4Z`CdLnVUP!$4oL0?AI+vF+f> zA|bDL){UaV>}EJ*kM;VwNm^N%M6}W${DYmYFK->L)f$O;GY$)#sqJrWvcLbd937j@ zc%J!Ez%sn-qdpnc>+f=Yu^*QhKP@!g-@FS+F^~s`#?LbLMTbIQpEkvb3HIe9)BO;RH^BpkH=J(wBo3mk#BI^E zVXd9a+W6%A$Cw1zD}i{^60lZenaib|{Hj}Tj6<3EzxoADi9hoCa{mnUko&#p_jvb!>M}HZ*pbG6n9r~EoZiPLqt&N})L;|1~?aAczAX%p-*FQBp=)!mR<9l*R@MTH`JQ$Ia1MP<} zpS{!k-IVcu~ETB z*V3Aq6p}nzM}Un5`6(ncG}2NZhLxV$R+6IIg@i@o2VeOCG*m}_=R3H4{Jg)8)>bnl z%}3IBvRW5hCCP#xPIR)aHM%zY(p$Zm?%n;W*cVZWaG!9h-XzugzJvHbu&m;s9X?#y z{7~|KwRloBl>|{(l2I?J|1kzAs92O?SRWGq!InhX#QKlWX8y*NahEP`C)M~YJ=szq z^6v2K2ZCgv7Ex&#_b9|G#y(QtaG=iO?w~q+U0rb|qIMaOt)jo~^8R_BB1nHkWv#y# z?E27%rI#y+B>zDvmw2K~j>2pXP^zDpps`8tu~oa%8R> z*q$vlXe~sBy=7REw1QAi7CWTbs9oV~j(j3fp*UGu6n`8-4Mrt#fyy z+{_Oss?Hit+X16RNZjJbg#RjvJptYB3Q!Ns7stIZFDfVs5gHo*dY{~q_&C@j4`QWy zk!F-hRV4f}o()niZ5<*;Cs5`YBo#?fK8hxFUtk48wP68Zjvdjhx5lYLOD9 zKhck9hRl+W0!B9LR7pkeBB%B3<@a2h13D1X%NEMU)LiIy|0y3<(*~)-k2Mo8WmuBj}};t;3iJ{}Be`3)?KprU+k_ORWbgTbVF4Yha+ye=8xQ z*`3l*Y)t<}NcrsU(Gy;rjb(@FENKW3dN%ai-`A zT~czA5Vil8(R*^3{j z+zblpU1@?xv$r?tas|SMY4%eSt|sWlS5rWBP^OG$81egSS;qLP?O49<(y6>sBm1GE z$^uzu^V5n92f-Az>F3GYn;8#0{M@a}c&p@0Ly4o6z>B{})p#GjG4{HHyS*rDR6Q`U z8lq?VgzG;941=^prIGJU=O{Pz$s3_7IWQ4lH^Wtw0A)e*+(4j=X@3ng@_@q?@5%Xa zIEb8sUr3=;Yin|US1*?yqUlLqOLP4F{fg&PRD~kdVlk1ic@_?2AXy|UxlD7xaVDR{ z*sy5;qGhYWWF1;!LQ_rLwoNjfw1?fjAededlB-)Svvwt0P-r+kSD2Km2D9qtqdRb4 zRNoaoR9b|qR587GnXhmQ`XYBE)EtQ1p;_5xxsxm%zSM!FVenx=%ysb?^sH0Jwf9N_WJ>kG&H)}gHZiL8UTReO zd-AZJVtm%o3Lx+ZjZtGipeK+2cq)xZAo-3fI=Ulu?ocJ`o?M$m$9vhg$kX*6($9l- zZvA>7{-x;ocOfqS9yat=@(=nnN{ff4}7jD@vLZ=d27a z?dR^FRFv3SsEHaripVvn)$=eIJDEjShT+Dpu0`pMzF*jHovF*Gcw^?$n#Fh))0GIS z?nAABB$(c0-9r#&^1Zm+1@WPRH+eEfp8~pBY^LW%nkPsEa@vw(voKc|@wbk4gmuhb z*51gDUNDs{wu@Z*S9!28;a^ix|CL|q)i7>!H4j(s(MK1R73q}#ovdd@mCPHXACqH5 zDB2l?*iMh6*K?93@(oNgzD_#W6m32cj?&vEkdC}t&U%!5Y|}OgM##E2i#by6Ac#G` zK>NH>8v)JYOH9fy^y%<^)Jfe~1(cYre{si8Ie4;J>*fIAmrmae;!+R=)o@cxMl}yW zmT*tEzAZT4MbEB$GHCuqTLQ(%7X2NYlR@s@E|3;^y7aC6=DJpt21x}d&yTc1w|D0# z=Xyo86*Rt!bmRKzmQcF65_YZ(oNCQ_7AtoHdx6>lS+8j9lCajHxjTZi($7HEZc%2H z(ZpDVQ00i>g5K&(}i!9Ab^dM>bXyQVEvvRdgBLbvHci_^Ch7@SpOw^^j|(| zYmi=c#oTf_ii>0A0~Z#Z-qz`X%%3#9CHGNLOcCESNAWca&KJN1j+P18FV8hTyhCVA z_^r}K>FO;d-YZwL#`UtHp1>o!Jzq;Kuvdvq#Z29r;=?z*QTfcR_OnP~X)jl_tzbI2 zWL{^Y@E`U<{gNJS5r84lCZX?W)P1K|I+`4~fi5-O*zTxKZ{h} z+A7a(!V7*XuHsPEcm&D^E!}z)P3C}@jor|bms8IUj6{u_B8iXdvnL$N4wMqo9aSiw z`?75pI_R!vA=aCF%$9;-2>{0vc~HMOhZ{|0lq_ZN%u{l}x8_B4Wh%FBY?LJ3{9 zR92yjN6B4~wfDd_HF>ue*3AUV&Z*j3++KVP6J-rOowc5@2-t48MB~AAv5cc}s{Qp3 z46 Date: Mon, 3 Aug 2020 14:41:55 +0800 Subject: [PATCH 526/589] Update mac-updates.md removed $ in command line snippet --- .../threat-protection/microsoft-defender-atp/mac-updates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-updates.md b/windows/security/threat-protection/microsoft-defender-atp/mac-updates.md index 782c6a98e7..16b648b1c4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-updates.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-updates.md @@ -64,7 +64,7 @@ The `Production` channel contains the most stable version of the product. >[!WARNING] >This setting changes the channel for all applications that are updated through Microsoft AutoUpdate. To change the channel only for Microsoft Defender ATP for Mac, execute the following command after replacing `[channel-name]` with the desired channel: > ```bash -> $ defaults write com.microsoft.autoupdate2 Applications -dict-add "/Applications/Microsoft Defender ATP.app" " { 'Application ID' = 'WDAV00' ; 'App Domain' = 'com.microsoft.wdav' ; LCID = 1033 ; ChannelName = '[channel-name]' ; }" +> defaults write com.microsoft.autoupdate2 Applications -dict-add "/Applications/Microsoft Defender ATP.app" " { 'Application ID' = 'WDAV00' ; 'App Domain' = 'com.microsoft.wdav' ; LCID = 1033 ; ChannelName = '[channel-name]' ; }" > ``` ### Set update check frequency From 4fce88dc65ec9cde2b1bf6da533b68e2ac7c7926 Mon Sep 17 00:00:00 2001 From: schmurky Date: Mon, 3 Aug 2020 15:21:34 +0800 Subject: [PATCH 527/589] Update mac-exclusions.md removed $ from command-line snippet --- .../threat-protection/microsoft-defender-atp/mac-exclusions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-exclusions.md b/windows/security/threat-protection/microsoft-defender-atp/mac-exclusions.md index d96e6da0ab..c0fe9490e6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-exclusions.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-exclusions.md @@ -74,7 +74,7 @@ You can validate that your exclusion lists are working by using `curl` to downlo In the following Bash snippet, replace `test.txt` with a file that conforms to your exclusion rules. For example, if you have excluded the `.testing` extension, replace `test.txt` with `test.testing`. If you are testing a path, ensure that you run the command within that path. ```bash -$ curl -o test.txt https://www.eicar.org/download/eicar.com.txt +curl -o test.txt https://www.eicar.org/download/eicar.com.txt ``` If Microsoft Defender ATP for Mac reports malware, then the rule is not working. If there is no report of malware, and the downloaded file exists, then the exclusion is working. You can open the file to confirm that the contents are the same as what is described on the [EICAR test file website](http://2016.eicar.org/86-0-Intended-use.html). From 2a97883a7c15e92facdf98caf2b075372e6b02d6 Mon Sep 17 00:00:00 2001 From: schmurky Date: Mon, 3 Aug 2020 15:32:21 +0800 Subject: [PATCH 528/589] Update mac-pua.md removed $ prompt in command-line snippet --- .../threat-protection/microsoft-defender-atp/mac-pua.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-pua.md b/windows/security/threat-protection/microsoft-defender-atp/mac-pua.md index 0f63486ad1..5fbcec859f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-pua.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-pua.md @@ -53,7 +53,7 @@ You can configure how PUA files are handled from the command line or from the ma In Terminal, execute the following command to configure PUA protection: ```bash -$ mdatp --threat --type-handling potentially_unwanted_application [off|audit|block] +mdatp --threat --type-handling potentially_unwanted_application [off|audit|block] ``` ### Use the management console to configure PUA protection: From 9b2ca128841634202cac9006417cd22c7b8d6ba6 Mon Sep 17 00:00:00 2001 From: schmurky Date: Mon, 3 Aug 2020 15:45:09 +0800 Subject: [PATCH 529/589] Update mac-support-perf.md removed $ prompt in command-line snippet --- .../microsoft-defender-atp/mac-support-perf.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-support-perf.md b/windows/security/threat-protection/microsoft-defender-atp/mac-support-perf.md index fccc1b4442..4bdc6a325d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-support-perf.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-support-perf.md @@ -42,7 +42,7 @@ The following steps can be used to troubleshoot and mitigate these issues: - From the Terminal. For security purposes, this operation requires elevation. ```bash - $ mdatp --config realTimeProtectionEnabled false + mdatp --config realTimeProtectionEnabled false ``` If your device is managed by your organization, real-time protection can be disabled by your administrator using the instructions in [Set preferences for Microsoft Defender ATP for Mac](mac-preferences.md). From f4b64befaa25b39bf26889e469c172a490b38606 Mon Sep 17 00:00:00 2001 From: schmurky Date: Mon, 3 Aug 2020 16:01:47 +0800 Subject: [PATCH 530/589] Update mac-support-kext.md removed $ prompts in command-line snippets --- .../microsoft-defender-atp/mac-support-kext.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-support-kext.md b/windows/security/threat-protection/microsoft-defender-atp/mac-support-kext.md index 04021812ac..650b67011f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-support-kext.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-support-kext.md @@ -34,7 +34,7 @@ If you did not approve the kernel extension during the deployment / installation You can also run ```mdatp --health```. It reports if real-time protection is enabled but not available. This is an indication that the kernel extension is not approved to run on your device. ```bash -$ mdatp --health +mdatp --health ... realTimeProtectionAvailable : false realTimeProtectionEnabled : true @@ -63,7 +63,7 @@ In this case, you need to perform the following steps to trigger the approval fl 1. In Terminal, attempt to install the driver. The following operation will fail, because the kernel extension was not approved to run on the device, however it will trigger the approval flow again. ```bash - $ sudo kextutil /Library/Extensions/wdavkext.kext + sudo kextutil /Library/Extensions/wdavkext.kext Kext rejected due to system policy: { URL = "file:///Library/StagedExtensions/Library/Extensions/wdavkext.kext/", ID = "com.microsoft.wdavkext" } Kext rejected due to system policy: { URL = "file:///Library/StagedExtensions/Library/Extensions/wdavkext.kext/", ID = "com.microsoft.wdavkext" } Diagnostics for /Library/Extensions/wdavkext.kext: @@ -76,13 +76,13 @@ In this case, you need to perform the following steps to trigger the approval fl 4. In Terminal, install the driver again. This time the operation will succeed: ```bash -$ sudo kextutil /Library/Extensions/wdavkext.kext +sudo kextutil /Library/Extensions/wdavkext.kext ``` The banner should disappear from the Defender application, and ```mdatp --health``` should now report that real-time protection is both enabled and available: ```bash -$ mdatp --health +mdatp --health ... realTimeProtectionAvailable : true realTimeProtectionEnabled : true From bfc9ea2997d04a7c93ccf5a9e011b5ed5ba3e45b Mon Sep 17 00:00:00 2001 From: schmurky Date: Mon, 3 Aug 2020 16:13:22 +0800 Subject: [PATCH 531/589] Update mac-resources.md removed $ prompt from command-line snippets and corrected a few items --- .../microsoft-defender-atp/mac-resources.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md b/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md index a4780aaea9..602205a4ae 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md @@ -30,7 +30,7 @@ If you can reproduce a problem, please increase the logging level, run the syste 1. Increase logging level: ```bash - $ mdatp --log-level verbose + mdatp --log-level verbose Creating connection to daemon Connection established Operation succeeded @@ -38,10 +38,10 @@ If you can reproduce a problem, please increase the logging level, run the syste 2. Reproduce the problem -3. Run `sudo mdatp --diagnostic --create` to backup Microsoft Defender ATP's logs. The files will be stored inside of a .zip archive. This command will also print out the file path to the backup after the operation succeeds. +3. Run `sudo mdatp --diagnostic --create` to back up Microsoft Defender ATP's logs. The files will be stored inside a .zip archive. This command will also print out the file path to the backup after the operation succeeds. ```bash - $ sudo mdatp --diagnostic --create + sudo mdatp --diagnostic --create Creating connection to daemon Connection established ``` @@ -49,7 +49,7 @@ If you can reproduce a problem, please increase the logging level, run the syste 4. Restore logging level: ```bash - $ mdatp --log-level info + mdatp --log-level info Creating connection to daemon Connection established Operation succeeded From 2f289d03f03274fb8398f70710d69036fd6124db Mon Sep 17 00:00:00 2001 From: schmurky Date: Mon, 3 Aug 2020 17:19:46 +0800 Subject: [PATCH 532/589] Update mac-preferences.md removed $ prompt from command-line snippet --- .../threat-protection/microsoft-defender-atp/mac-preferences.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-preferences.md b/windows/security/threat-protection/microsoft-defender-atp/mac-preferences.md index 018c229b01..b95777caa1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-preferences.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-preferences.md @@ -747,7 +747,7 @@ The following templates contain entries for all settings described in this docum The property list must be a valid *.plist* file. This can be checked by executing: ```bash -$ plutil -lint com.microsoft.wdav.plist +plutil -lint com.microsoft.wdav.plist com.microsoft.wdav.plist: OK ``` From 0c9371e07baa17649de99927b9d15a46893c4ebb Mon Sep 17 00:00:00 2001 From: schmurky Date: Mon, 3 Aug 2020 17:38:20 +0800 Subject: [PATCH 533/589] Update mac-support-install.md removed $ prompt in code snippet --- .../microsoft-defender-atp/mac-support-install.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-support-install.md b/windows/security/threat-protection/microsoft-defender-atp/mac-support-install.md index 4e380f4e2a..0728dd83ad 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-support-install.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-support-install.md @@ -30,7 +30,7 @@ For manual installation, the Summary page of the installation wizard says, "An e While we do not display an exact error to the end user, we keep a log file with installation progress in `/Library/Logs/Microsoft/mdatp/install.log`. Each installation session appends to this log file. You can use `sed` to output the last installation session only: ```bash -$ sed -n 'H; /^preinstall com.microsoft.wdav begin/h; ${g;p;}' /Library/Logs/Microsoft/mdatp/install.log +sed -n 'H; /^preinstall com.microsoft.wdav begin/h; ${g;p;}' /Library/Logs/Microsoft/mdatp/install.log preinstall com.microsoft.wdav begin [2020-03-11 13:08:49 -0700] 804 INSTALLER_SECURE_TEMP=/Library/InstallerSandboxes/.PKInstallSandboxManager/CB509765-70FC-4679-866D-8A14AD3F13CC.activeSandbox/89FA879B-971B-42BF-B4EA-7F5BB7CB5695 @@ -45,7 +45,7 @@ The installation failed because a downgrade between these versions is not suppor ## MDATP install log missing or not updated In rare cases, installation leaves no trace in MDATP's /Library/Logs/Microsoft/mdatp/install.log file. -You can verify that an installation happened and analyze possible errors by querying macOS logs (this is helpful in case of MDM deployment, when there is no client UI). We recommend that you use a narrow time window to run a query, and that you filter by the logging process name, as there will be a huge amount of information. +You can verify that an installation happened and analyze possible errors by querying macOS logs (this is helpful in MDM deployment, when there is no client UI). We recommend that you use a narrow time window to run a query, and that you filter by the logging process name, as there will be a huge amount of information. ```bash grep '^2020-03-11 13:08' /var/log/install.log From 000071285edf4a51099910ad8c967ee7055b6645 Mon Sep 17 00:00:00 2001 From: alons8 <61512160+alons8@users.noreply.github.com> Date: Mon, 3 Aug 2020 14:55:05 +0300 Subject: [PATCH 534/589] Update mac-schedule-scan-atp.md --- .../microsoft-defender-atp/mac-schedule-scan-atp.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-schedule-scan-atp.md b/windows/security/threat-protection/microsoft-defender-atp/mac-schedule-scan-atp.md index d7a913d13f..4fc24b4545 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-schedule-scan-atp.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-schedule-scan-atp.md @@ -36,8 +36,8 @@ While you can start a threat scan at any time with Microsoft Defender ATP, your ProgramArguments sh - -c - /usr/local/bin/mdatp --scan --quick + -c + /usr/local/bin/mdatp --scan --quick RunAtLoad From f6d0148212276570c81ccdf11b334936199aa12a Mon Sep 17 00:00:00 2001 From: ashwin-pr <66497769+ashwin-pr@users.noreply.github.com> Date: Mon, 3 Aug 2020 18:07:15 +0530 Subject: [PATCH 535/589] Update android-configure.md tried to fix the 'Note' highlight for configure web protection --- .../microsoft-defender-atp/android-configure.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/android-configure.md b/windows/security/threat-protection/microsoft-defender-atp/android-configure.md index 92405839bb..9022d913df 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/android-configure.md +++ b/windows/security/threat-protection/microsoft-defender-atp/android-configure.md @@ -42,7 +42,8 @@ Microsoft Defender ATP for Android enables admins to configure custom indicators ## Configure web protection Microsoft Defender ATP for Android allows IT Administrators the ability to configure the web protection feature. This capability is available within the Microsoft Endpoint Manager Admin center. -[!NOTE] + +>[!NOTE] > Microsoft Defender ATP for Android would use a VPN in order to provide the Web Protection feature. This is not a regular VPN and is a local/self-looping VPN that does not take traffic outside the device. For more information, see [Configure web protection on devices that run Android](https://docs.microsoft.com/mem/intune/protect/advanced-threat-protection-manage-android). From d23bfee4918b64285fee50f77f1f630e069851e9 Mon Sep 17 00:00:00 2001 From: rogersoMS <44718379+rogersoMS@users.noreply.github.com> Date: Tue, 4 Aug 2020 01:29:02 +1000 Subject: [PATCH 536/589] Changed EnterpriseDataProtection CSP & Home to supported Adding Home edition as supported for Enterprise Data Protection CSP. --- .../mdm/configuration-service-provider-reference.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index 2b0f4e8ae8..8d92777c67 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -1108,7 +1108,7 @@ Additional lists:

)op8Ofghe0}?Y@2Jy0;_Yq=vqI z0_vy9SEaLd(@tVyGQ~ZCxJXqT*t4C8s5o#5z}vBkuoW9QCi0kL6G*7&HCaQHEDD{N@q%z|S}R}pq0l{&j1+61}%&phk@vwLCPQn^@H zCNN=ty`@wcwT_b|YEB%!K#g%?mxjcB`^mj*#At}$wum3rq|#+b2MQ*9Ojx#P17{X9 zIXRHQLwb?F?tNk9m2hy;SWZ^9rhR}lac67jJ7fqRdE;4dynZ|PlJHfywi`lc?+Ui9 zIzpYHkjRZEsJU#MR1mp%9~F*)bP9GLuyaqEHMil?uN%o0X0Sn*Lez$0%uNgE5ccfB z86Q#P(MQP9obt>P_I&>%seS{*ac_#(zt4$$6;aDiQev94mUU`5nT;HwEBP3LI(!Q8 zrt=M4+&!0wENgmq@Fgw&6czGTBmA9Y>^ z1p)0D+^Y?nXKp1~UBiU~i&+utNUtvKu(7zv_QOT=5NX@Qj$v&~F}0WWvn8>PE}dKB z>)49UZ3B@i&a-yIZd!KgkGH;zB1dlq^y|TeT?dISsU~jcT8>vYqessmYLnNpH&ON( z)SO3O1*!r}kYsc2cg`dTT*WliM2)>mO>^z;0UZ2A51!w6nK(rb45e{6n1$`Q8 zf0|G8ovnYN*^id)^-91(48pBL1MzOtgD#@2$OC1}=7acl8-iozG&aQ+ zQ5iXl`8h2``S&1w?I&EkiF+w4l=s(^7~96+;B>xOcv9pbpLK72N?lty-`3=36%l9Y z#ef05sW^OqgK59@8LX__gdvenT$#9L<4CZpE9Ds{IFVj%+zt0)@)-=N+nIPoPk)hC z-vlnVtHUsyjt7N%byyI4g|#0r)k&8A1MzNAI(B%w$mq*q6R z+IFOOTc1C^rt5!@TT&qIT?W!4`A|SI#ZgTk9|NVDr)L0-sj%;=-ozG20ib` z(IK9iy6d^MW?0#~;N@b4v$r44&YiepR5F>x8mdlhAnT67I5wDuC9xdTKh4NNZ3qgw zjR7so*%kUQFWuHc9Jgh}14D%;l717Hy+Y)ph^Iyk65)gB`}n7{H(hDK*3FsTxAi5+ z+vx^n)Rs@57(h@+7lw9EAf@n%0Ys{o*ACweC)Ea4?-mJkMP=!fQGoftR-f)uKKvY<)R!A@c@%pY`P9C;EsE z+?PAL39Go+blTh!4-Ypi9X#;$az{8v_}%*sy+m8+GT?UXQwk|OxQrtKeyED`QR(fd zO)I{fhVJZMlJ9<>UhPHO={Aa*gd+_2-#XSGyT?G4?%G|y2x84&- z3iDt{pRNS87Io)U!I?r!;YoRlc$?v7SKk%QE#y7qTySvr!^f+B=YhV@K1a7!K@1u` zlA4@2*8h?~2jTVQ=T~FxXh(L*joy)HiP@XQBTqj8 z-0^JLnhv@7Wag`Jakj(F-Cfj`JH9?HL~LG7vp_FOMBQ6C1QVNCB>Gba9v$ADpn-QV zO52M5J=zmIb^3M$o?T);qt0n^)`lAHoXr5MHvp9L2Ne)ASE& zv;j%pQGQq*g<4!|yjSfDvBAsd_v*GjWeaC7wEPahgtE54X0A9XFZxpKi|16G^!E zbwH&pr7&s-+K|53yLIJ>4~Afu7r}Qc&s^L!#a)mNV)32@FM%=ub>k*yKP8gkyA9*U=oLf^MVwh^)w`h;r3S8*>XekF1HTe1Y;_nxXkIR*ZpDJOAEKX*~;{TjpxkB`6y=D z=A$BfI;Zz6<3@Y@%B$7&!eKg}ltBF1(?q1E-oOesA?Yc}DaN*$7kVsBo~Dxm8%G9_!J@UNMSADh9iB_GfB;VHIY3HU8YhmOV0i!5_yv1%;Or67($YD1 zcq=g)H32OHh>Oq0$=BCd-z}TffBWT6VQGhpR7!qfiBNu~bB%E8b~{dSN!WXeGy?qb zk-Y%ZHP^1UuJe` z<*SI7^LTPQ`Nb zHwphgb4xGLWi0Kzu<@{`V^A>Gmhw)jj$DjBOSM}&9_k;8cVHlHE>8HhZjQUN1Ky$% zU9HVAx3a^*qdB3X!v~g}CMq$D`~ocjp~1q1ccpn7Uop_MCA2b{GYMIEb{t7aP;;7j zy5Q2bB{fMg6qvQ=fl^6-|p`L@PIxYe$HLQav7AX7g4Z-1GdKEku|Gi}{2u(Wj)ZgHq_yKQeb2U5<* zQmz%QbN?O$`nzLqZ;xkyw{bH;3u_0Qy<6gGC%TxK1wO&9;+2=+63PpU~X&>T`o1+7sUjD+uu9sSGW1ujyl5V$mGQMx9$AV_vyWx>>mguy6 z{5rIwLx--o)#h;a;w3Bs`*MGeme{%a(aolah_gvpv>d>lty>Y;yBkA&^NBc}LRMBb zcFo%3ZEuQLC{|l1XPSljio7}C8|;m}@GLECoN)GOgL}hR>*z-p>vWQe4Ft7lg}Zli zT8fME&cwE&?&V1p&HZbMiiszyuoQRy7Py)=;lwVGjvc%?cjhc5bpdo4GK3L54Md)Z zBdf@lhu#^6izsg!M_2sY1YjrJI7=&AoZZEs*DRDvXS4C{5JHz`zFdeoD+Zx_EZv3S zRFX&NpdmDC(+$t6G#s1vCCEROlnNJG`k6lPC5FqEZF`U%cZTGgDhAzt2Q5Xvv9z|r z+0zXt+bc@I!7CX1tax&3T?h^dz}+VVKW9skM{DdHJqR5z67T#-Vv@2cDuHGqOv9d@ za=jO&UNn|(eqk{!`aR6Of%zOilS-C(JKlPvC$=`;^d8!o^iwCfROHIQyLt<&ERlq? zJbc=Bq+RPkyqxSs8}Y`)u3j!nb0;eEqlu17p~~EohlURn?ZgVp{Oug^8_5H$-GmdC z%APRMKML)+=gkrLx%tw=K8uUFHH7pXCF<=wr_N;wg;IcLiw=0YIpg29IZl=q#?2)C zTKi)w`m&w)?H%Y@zhR+DD5a22^ls&WmAEGNjezFWsO;J?aOW-v{Es4`6OAYb`Pf;GfhrX6m8<(=7Y#4Vc%0uD0)Df{}9<=C0ptGVp{#Q{pQ&dn;P*5pnj$KKN-Eck}A`}#^hB`F#puG`*!^njjDvY`qhE|QEIc#^7czl@a~i?jGMcL zyvD1!{z77ot{}4UGX6h-wziU@qCyG_>;D=)k1iQ>RFqesGh8W0ZC#bIJxY?eR$3pv ztkLIg|KFfjQ&L%X(|m1P_5~N^Z$3AsHjPP7%q7iqcr^wJ_f2Kw)1%oJSMb-AnPi}{ zx(2-@QI~p{$LB|wE|^dyGX1s5#NXnK*^+bHShptTFWJmgQ-W>S8IoRy`g#-l|6$}Fp1_o_T;p$pt`_Yd zXdE#sUm`r^>K%Rmek8IJ^SI~L@l1XH0X~22ar|umJxi+eqOO}()q3K$Eo9Q-)oj|h zQT)wg{_Krpl&PsLOJ&m6@3HRemECz0_s=9YubTLM^I5)fjq#oxn~zX_y^Rb0$>c}y z!uUPL4JL2I$Y+0|owuFo$b=ZkHMLqA>D)$Ca$uRnw{vH6XNSh$C%*;iikY}@6S=}L zk(GL__L_=tXv5ocKcM~Z4;ME@HYT)M!(XKIr21*CjUuyf^5r8_|IlmYwk*+N&_g^l zs3o<CKwRA5=*~R)4Qho| zSp=K+RN~aGEgb?Jh+2CFkKR4G7_kX^pEe|h&EwRu4Se<898%T(^y(ahrM7@YAHK(! z#apm&wxP_a3qwMjNZs@r&wVnN)vGh;@lY2|Z##^A^X53!r1IXoTWEVB+j?jDWz+V%?m?vIm%8Iju+}$6qiUdB` zdYqya7~H&yId5;_LdkM=UUH$m z*=gQ;@naUQEo0CVy>S-zRp!O;^G`E5dN7ndfd?m2Yoza zAAEtyt5;DQdN=0B$1`S06i4=_5PIhTnmg35Pbp0c~ge8om1tz^TzEKpou8*jhQ+Jh(1C#O>$(w^KE z`zdeL3~yU2(zm_CG3&c=IQuiRV{+Lxbqm3RdU1aFC%p6R3{J@3sBY`ts6Gm5(ccC~ z*Y*UOcFdE6)wbrxQG7XZ6(?0KxxGg-YE!oJ?sFe9Z*?&PpX@{Zwwn?Kaml#d^%PGI zA3)Du{cx^MBr3y_kN|6{)pg`9h{XP`LHLTO3zLqa^Xp3Xw!L(G?Q`xEa&_$33>yo} z%Nrc(>Kf|fEG_T3gJ!yOjD6~LCM}O5_>TVg)~566mT+S`iOntJ*RV3~?AOxRPEKz6 z0-6uw!or7mbL?^wo%%5}Sj~bDHWOE}f~|43bh16i2hU%d587ifZp&T@R*&OoX$W0>68Y${x0tm$hdz(@$L-421XudUnOg4X*NjDzeSi&vGx2G_7=CmJa!5e%?49`Z=q1)G>HuFfkjG>F{`WGFE-f zci|SsK42+4g$q09Gj+>mPDIDxS{ucNOL=Ucw2{C;eTZN6DQ}ON&fX(s^t_`twwic0 zj9DtmYzA8oouYdXy!_e+L>F7quUiMKP0J_FuK$)<%Xe`2;2{D#cH>081&)W_zB-mpARx`{S;PgIZWF=!|=A(act>$KK%L@PA7UW z@U{?=_D*8O*6qxmnNGWo1$^=D`^?`Ej!&n)G*5`_1@^_!M$Msd%g7ArNc-Smy7uUW zr?vv`-XrBAo(lgN{_Hvsp zOIJ&Y8-I{C#N|oT7B7}E%Il2MT%lIl_tSmS-ZY)@$e=Ek=6ya>I$fldq~g=kOK-21 z^0H4$kH7G}6kBc(Aqu6{uY4e#EfYVhBBWo(?3OO9oh*I4J42kPm5xk)QrdMPS^D|G zr=?XFs>Qi%Y2mXUOK}zA=QU*R{Yv_7XQuIY!qQRFt7A4v3gN9 zLUFP3j5P7}$x@CGJ#y|SX?H@6@ty|CQw~Y#m6BAG9VX5EWxZ6XO_08Q;B_fFw?hNhNvF(v)vLkk03;CA~%^ zZCx=z$|zO;wmwR#rKAJ(o=73kjf;TRCM5b>FW&_#V<)ZvGNTmJT5_+^^K6d zNWLRmn)2q`(y=s=ITLz)rgZv@TqxDjmWi)PQQ2wI;-^jZaTPl0?3yLgjUD9{+H%V0*gLHn|IO$YYos@TEf%Ma)RZ`for22MsnOf=K zPa~x5mrU(MQz|VUGh2!*P)ky2jP%l*E2X^r3(~VMkCmd!^ddx&wC3gaq%)=BXH}#$ z<%^wC+{WqB2RqWli8|@{l*gql=hCE!k3AGKu4B#qA0 zh>Vm;E1#M#B?o#=;Z z>B5fj(!YM#B-Pc5zCU)Fv@f$!C#flrzMi^V%B;~yHJ1)ZBcFO+I+iQMIJZoC;nQtW zb!DtHX2eV>CFivC=+r%uy0JJ$s-(>`Ka(;m4N^(kDQWwGXeoW?x6+35azTlUEIT9B+F zBWe7`7)fK$OQ~t8QbmPYD$h6}ja#-ysw&NvetQ2UX-}#swCXJB%a^~Aj%TJD`$uJs zN;)`miF72rR7%*rO4@ZIU8=~Bkru36C8^X}>A;3%(g|@*SDq$~UB6$d(aLS8o(tPn zO8cU-B~3+!^s{Jl@l~SD)#XYHU;9>yuFuYY1fe`c{wt*H>})A3E9<6zWnz4}#h2(_ z40_6ov#F^Z-|R-;enI%2Oe486A6G|f+^ict0d-%i3)v9+U}mA7zTb(GhY(6)sq zW)=?g8`2dkVSH!Ct9kssp7nb#`3>Y>?t8Hc@Mc$Z7AYmA+;L|QQqLq3Q_!A1E#0`k zy(<&Ge1|F9;v0Q`!s z<~m!UUNIKwa@R0iL@~7NdKZqW8u0JIxmhps>Ic(Fy2;}$OJ_gUe*ZFWf4!7!Q!pRb zcKEy7QB##h+NL#p{Pt+Rn6QjpvDueBY)x%09_DRn=4^|dt1Ir+mpB#lEbV=)F}Jdz zxqUnG%c_umQy->hN{wXKYAUg}aKX>n4oeq5hIjV6Y`I^Lw)geJ6*bXEj&WhjL|%X8 zWoGQHB=6#J_V_$UXXB120StV&yD@wN=J=zEpC!urUA8C6wdl3P2ITCy2eVXsU7kE*m=~Qrl@5XPY{IY>1+R4)&6F=u=#&5rf zuBx1~#V45e#T&f($z%%7oFQFqCq4Vn$=FUj8Tzabr;~GuUKvjFmwJ;F7Ekut?}hAd zGC!h>3z>x?Trc``kgdoY<-?qo{?&~A_+38yX&FTguYm<4>Z~M=sZKHJJ<(3S zT}fq90_B(YnsK3@+fk9;Xr}H+xap%ndz&_N40bgg$@nwmg;vac>t!~?H$3n<&hjM* zyma3%tQv0}d<|{y?}r;2VvZIw;@SSjPa3#3>ww0x42{l=5Wm*A3h&v~zY7m_48hXI zhE{G4R94>P@l5|08Q>@6Y}bpP>7|#y7h~n!j*o&9j87JhT`F$$^vIEx?YmN5T1oop zmH4-5*oW*!nA0|(55B_Fb!`@cons}%F^AZEU_S4>_A*l!9U`Tm8p%P#8`>NzGjjrL ztC{%22YmF+bh0YyQ}*fFl|H_r-#hs8N@!u2HELx==FLrps7g8EUQ-rngY^G zI^xx-H^X-xAycZsvqOJ8cI>7gGzc%Daa!~m$&{%xXjQC^@ z(d9s5+ zPo+gAF7}NUel@C(Ymo=#>Y6-iH3lSIHJ8qb&L##dOKUYX;+*{QwxHtL0m2+Rhn~Fn z?PO+(vRkrnF^~3Zg=2amWyXP9O>R=UF=PX|d%og`?+c==XY$f*0pg4W&AL3s*o8k} zK50D18twXi6?zqM5vK`o39f&{VZ@BigNAZAY!~NCCQ@)k zgW%kJ2p^7{N#Eq}Sd%2tw(q0-G_}5+Y(6%DZr41IckOaNUi&wQcG8(UTZnez*ojxh zO*XcZ`KxyD*==G(yv+6UA=MW1^QMcuHFhGu{_rk-9#_AcFce-n3-FMun42do9EyCnHjU@uxRCcUL4x; z@*pTr{8@i6jAuUjg{k8{r?r3m7NQzeEp-OD52#4a??OxOKbBwL4&5n@%OfQ>4(C>Z zsERVFx#r!7nJB-af;?(uW741@GbImypUYd9{?~KM3dF|VpRBSp9_SThYy!=D+{LAJ zD{$%3N;KD-Ahdn&PTknDcp5)Wn9A`>qJktVTHoFqtJq)p{>LBqan=qT?|zs7J5PGv zQ%H1@ElxJUgbuF5!Q2iDeJuw!%;A?`e&$@dFYZna9*?ksH%#JZp#XMS4x~$v4|h0Z zG4|*2#;}tPrCzpJ8?bc@qE?@R+rX~E&T(MyTdg@d`-l4QQ#O&SZhS)tdnWuM;-5#s zkPi4a+RM(ZMOSKfFJ{X@;rW=(T|p?G7CqUy@MnHmww=71`VQ+8(t{%lR+4!63viZr zdjzs_=Fd!Be~8j+K1k=_6^gCZNv4h;C*+&S@w9T&6_F2@wzLV&WZL+#jGa1Pt~RKQn#aV)9*j@^PnZW{eSa`r|sXYp;GeZynSMQ79rWOF5k@ zFJdZX|Ag`4{yF3hXiLLR^7Rz4XZ{2ckBIBrWg_kn`g9Atsv(;>2l3@YPDE@>5Jzg_ z_bjas|I=6!%)8;^)X*~3#BQ1*(wWQ-vp#fb?#XS=Mf~tfeLMMOU-ECt$=WVhj6$h6 z_wIy~nLPtuYt4!IKN`bNn7E$otJ=v8@?mL9TgM_+PoKzwRa>dL=8dauP;c%x9OdgD zg$yFzrP0Ng<*;z`6v}Qt6-0S-SqKw5!-*3<6J=b?Va&9 zR)aYm?tB!lq*aWcv7N%-?5f!qTY5eD8CAO`Fjkc3tc5YOZPy>0Ke|Pfl>=QIvRN`? z8p&6h>~GMOrZI2EWG2m6OEXumt41l003UL;ZAW_IcH{dbm-a(QSogiC-^H9xEBxJ= zSKi%6Q4+p@adJ7#T~5{&*G{BkL38t3*3A?K!NPqMtLkG@muIqP$^?G+W-2M6gX!jW z<6+a*&K*@&tmwC=QQP`*k7G2OlHBOr+?+!*-{oAxrwL3rdW6#1rj&8Ni1zvY3=&-5 zU~u3c>7D-_-1jmWMw{44 z)QNmxZEK9zcwAjk|6KwzD;%9{(N=4)b{2|D*g3W3B3*IG(#{FT#yv>Vp{i7gan@c~ zXR@45Vz4(8#=i!g!9uvn8Y-&AoffkEW+FK|%nWK#4jSy79qY?bpcnbAsu7J_SZB6Y z7TAb>2UY19T?9o4Ej3}zNMIyz!*tdkm}b!O-2V*CoD zRxQfnn))!)>x}ovd&a5MTI_9Xgmb7Can%ZoQ^lUI_t9m-v$V4^P*Eimhj7#FErsH@ zcE(D019jM4-iT4HDi`H1+X+GjCnwB}d6eU^79NVZ@S<#tY1bplth`$I3KpU~EU~t> zMq4GyS5%+838iDB*t_P9dNZZr%Iz2?Zo5)h%4&aS|qFMv=gED9i8pb zszg1B_F^G&TU$|i(|ni-pP-nqa+v@xg4ZOlMjWwo$~ zC9Fh6$?eQuqQ+3gU;Dj1l5T$(FsiW5elZEyybkWL^?X*$=D;$c6T=RKRtC-I?=W*jQ`p=T2fQ3GCrQOb#OGc z|H}v$xVE|)b0NR6NW`(Ks#2tBiLIzVOL>BXkVmUG$6B=0I?<(V<%uc6`_|}$j8<0S zoG3q0*0REo`vRKYt&-Av%*Ro zNIEr@)$-I|3+$cb_^*`L-%Z0x^w`)~`Te-*?Dc8izP+-QiNcMMXGdK;eTevMF*vD8 zNpot)XAcY#9pFFLz!en!3CL54<0DoQzSo0C#@@#teCqWdM^PXOe;vZQD=o;TRCr#p z$K>npFTAa*A3rH5C|n1*@8qSTb!?8$KWMW_MS&?L5qfJNGq9*ldI9XLt8n>0hDc3HlspDMO21@EcReY8W3&N@Wi+k^p9dkIJ z|JN+$$vqp+w(yjzI<}@FhogzP=*qJgyLLad>N*k=6R1$@D7Y9)a&Dz5i)wd>Z?c8kVVD zpW@gx98a&G^;DgClH*B5e@u~8M)T{N>-hsqf&MZoBc}89-b~X`J$h|1`_^uy>M!jJ zRqUU$fV>;odVhejqf;0cChAF3$hnA%)LbKEUX5wg zKmI@S7bp-(cmjI#rX{hGyx_*z7Q}huZ}G4AlMMA?e%nkM?$?_JS$jG?_z10CCCUhR}hkRtpQ-h2( zg%>$;F-MeX{c(f5CUFI(`^9~iPc@<;ZsYCZrjiR=IF%`Tg$Am!qBxaYRBsi_G8@xv z6pwsPq-Q+WC~{-n8&5RIZn{SfZ@lNXvRuxWDWdv($a0%P%5_%%%NUO-*k$DUyPS{T zaE%<-9-HL)P2ap6=XD}AwwL;N>hBfD;@->YH(a|mueQw@cz++9jdL&>7(uE(|{T@^8}-i2ED*hw-$yc)9EwhchC}b+dZ>@8y;@Qxx5pxD890 zv0ycOww^=k5KO_M?^#pZiLRE%`RVI$oITT+xGI8zlWSPD;vmW9Eokpn%%*gEp6caG zcK9-WnXrm|hj$a3ucJ*{ch*1pGx;4o*}Y;lr()7^^a>>;&`oH&YK~6*l@&*0I9uXE z&klB++8asy@qH}avK_roM_PMXb9Cnn<}BJs_~~=FwdjnW>3hw2F{@d7TB36s9|~jk zvMbB1ePvS|UDWLp0g~YEkl^mF3GNacf(IXl;4(;n;O-8=T?Th|cN-+Q&ftR%T;8|t z54a!hr(LJ3y6W^fwNJ0^z4ls>wFpWz!l%#K$xH-iYhfu4%;9X(W|Yer0iv6=cmEjS zz?H!s4Z-@e8SJPU6?)a20eDBqaKrguNoV#(B~W|~lu*D3sCYDk&hn$qUsQH-u0qls zz!V=A8cl6^BBV_b`FFC5ymP=*N#y&h#T>?Imu|PceS2Di8+p&7XJk%Y@?jn4yg)Oq z?FbG@?9=4e%|dn`}@_B+z={RRA@oZ(x+q z#o^38eTn_D>sHup37!`i!^>#Z7_W9Lu>f{_Y84Le6K)I_k}GnZs?yb@;RN-@0G3-~ zuB4NxFj&hsgd~Q2pmC$KD^Av!Y=sA@jV|=ynVIG$sG`L9M;Ar|Jpl(nP`N~NegaC1 zY~#hry!7dsXS#QeiFbtC)xxC)o=lb5^Jz!PY9qDhEf)s4sI+utaCdD-yWe02iqI-{ zmpiRqxkX6*zAS!UB4$y|UNWKppX4Yi1JhIjzpp|@4_(^u6^oyw z@^X=YMqVN2EhK0g%3izVM3W^l!5E>}y@u!4N|Gm70(&J%@KzXHGe<1h(>EwY zl+AxF-pDH5RMnI{{y4)wRBfi?LDKWCRh`uH>Y)U>8iE05f>)#soZ@H5vs4vP)uqEF zA2X1B<#dJODcv=H*}i@e$RwIJ|4OALO~KYURXM|$82OMh^(W14xy_us^>@!*Ih7#r za4;+T;O?kl$Hj{wF%ppnEUx-lTmm7vg)43N1h)wzg$o%E#Gt-*G}C7mND!{NyIH&x zpG;!_LYk70!W3aU&3*6iC=L4S2TlYMElmEllgE_$TS-HIR#_*s_4R?BFwSS;L7O8P(F}25nzoU4SgC&+;j+(wx1} zOqg{4lL$WTz2BH(n>caWxXL{6Nw{Ki=)4N5Ev{9z5#TWP{Fh~+VAqs7s9EKG*L|a~ z3NIW@JAFCgqQdyl`5867uj^+Z&4On$K+1_r-j& z;x{W8g44-IGgQ4xdD1Es%wa-%_ti~|=+ZW$A$5GrSp*rg>2>;^K+kMvF>n|<(rCNG zJ`>cCz+&gPI%)hm|DO1hjT5A{O7Y zE5E0AYI@qarBmrIhqrh|IK3osCuN?}j$Yp%Dd?Dkou(oO6b$SFFIOwl6tv3kAu5X% z`*eFdF@#JDIV;@R{XG z-F~sj7q6o4kmSno)*Dh;E1#kw9E)cskd>q1=&UCtqwttPBJk0-{nFp5xzGU22h*Ww zJ{K))<}^k#_{*~j>gV2LWH%Jk7+HNObb1kHCb#Hu`BmgJqnLrGv1hq=DoZGoyk5IU zySLhMAO5{Vy#zdCnYMnJBR`o5-{lzb_qf#_WqO-H1 zc&8_w{EX3|VqE>ya5HU{6u*vPQ+c2*u{s5+rq9I3RJRXsO02E|=Fe)Slsz4sE+rnF zb>&ttmJsG(GBtHH%h|wc&)lOgXOrrZDhw%^U%ag9E)i_vQKS1QlsbHgjS(_69XUO3 z_iVtFX*Y1-C;UQD_oB<56qLlZ>T31QVd&8**yc>ujI=y)A6=EPiFI59W4y)KyUHD4 zWn~|Hc?5ALBX@__Fc@r#sp{!0*Db<~UBvhpLKZs zuZ$`xj`iQESgdFeGL+Y)Cjm9GF7F{R%nQg7W;hltiU2i@Eg1_Ky>L<)Zwxagi+BY? zltH3ZReC;;mIHxna0zDSK_i$&r{$tANkP%R@v=uYhtU;ogi%RHi-2Y%S`^xk)}n~% zV7P@|0*r5qt(YQenUfBH4{D6{%eN1Yqi*av8xLm1%M^i^NA#48ZDrDWO^wWBIUedO z+D27MevizBWy+@&3ngUfJ~@}Z`axVTMXE_;>XgeCzE07#ofTSoZc7QH0cMXX28r*S zDZek;8&ziB^v|9N)r*vA3?FB4Clx3E6qF^Co=1|cidnog9L>mK!#)@^+K(J^`jxQm<1a6GMm%c7{%?qy^hyhc~K@`;}L`_(LJHu%D*Ix18(4{ zm2|Hnz^$tf#x9ucA)kzm{p#~>{z2KPS|@Q8-BHu7Hn)pTs`e+XEE5cG3^(6+<*22% z-S9LdPU{w7QSR@MUE$7?JUw}ue>YOv~)Ppv(wR&^Y)xfSS`;gy!P6%(*m zqG&79>nR%HpL8Z4acc{U7iDlup z=btd0>n$79eTbR#g@%Ndph<;N*W`a3t#&UX%$ukE-q&yH-R5*# zL#$xU(RNjB5rwWu^}MTNT4=s-W6*+&PKh_#5yibP7?p_g?x ze0Q-Yx{!f_b>5))U|JzxL#XKsZI^CHt_8P@bNujs@4&8U{l0#EhD(s!N8(T3`qoWn z?oyvOUwFUbB0(hNB9D)>WzJ|v3;jgGd`0b5eV(wcLzu{?f}@plD``VJ!=9rbr(wQ5 zch@}qS@V(Y54;%dFRB!XpX3wJu2b*&rpIZ1#%V`Vbtq{+*b938@d9_p^)9&V0zSL7 zUnIL@(-mcr$KXSb`GY!oDWAK|TkRyAj(?lx+G8|fRXi=D;QNV+GEU`;2 zmCDCI880_jAVmWZPzUk5&_G%WKw|_~lCLaQb$XA#APb)eo>3cFYTD@MUD_O4JvR2} z$od?uF5)X_uZu^WFu4^(?3{|YCo{Uc9k}C%nk^bJ=K>#>b=T%vOpgW;^I_C>OdG@7 z4|8Fzi$O4>P8Ww9S+9l;5>7|!DP_PD3eRvk5<;Z*nGsi zGexmeuJAt9ka@}xfS-x?{>x7C*~COXlCG&NDQh6q;}W{}q$`!)@QuTCb4V})3nBYQ{m1`^nQXxR(})M9HW zm|xsg(8$tguT;zgx3!$i?1|DqKDSq;ano0QKpJxH1k6sbC;lqEALwTF*IRI(b8uUVIAk&lqlFiIjx-W^HR{ z7LAnc%9FaMxdmy#X(>j!VLgzT=dA>f>y9aM$koiFd)%*at@l{M99if#7SW&e4Yj{j z_u8{e!S3Hm-y{pVD3g6AVdErYX}CRy^f%sv$acI+!lLVH+;+aG@A-eRqiySY`9Yp# zOm*AAl@SqHU6(hGAk4(%m*_KHe+b;R#iQkS5GB2OF+kmAfD%`v+iizU^F&*(}(e6+7FhOrn>Ip>mIyJ$40+EHu8&Gg0;rr5c+<0 zp_q7maE$WGIK;v@nP0x|EwSHix#-oTM~t(ER6bzMe%u!(Lr}G%JTw#1uRN4WYP?ej znzTIG@X?K#p_&atwp<(()m&~<<ZV_! zcRqclP}gX_AEyI$T#K*?yohA$r+r~sV2x}$<*Vv+VQOLbmZ}Qv)t1Xdv;vp(yd*xt|KOs<~@K9e7HK6+L&Hgh7KQm&VlP`&HZHlbg=W_roP+UE}u^ zFT15+InQry2(US>MSW0K9)HZ*tzCp24&ilq1Dj9Zg2yvb-Omp<#x$=fR&ulyNr-qv zW;u;#|0bmR3|XwX3|R)q(g{6aUt%T2ceG)+SEkgVT3$2_zQb%_V6n=a%(JR?J3Y%k z^V_*=1jJtnd6W5jfjzONZ+%n=Bv;V&2SuFO3yNefYK~896ozF-{ zBKX72U#@N2ac-z0ehtm(+(PAVrs04kY$HjwzjhbvKU|(QQXiGOrwnP~V^go9`fP?t~VVHAg_Rn?-}p2pne$dO5?-D`c4g$eL%RFZemA(BZ9nhC_#nWB`r;aI z$>`3MqGd0~yKa~HnQ?T;b&Abo?c6llw~8#fRgBN=`k>0W-Q&E>FBIyVw2VUeb2u)8 zl1eh$$&}-4!JR&?QGv5L^%)I1G zO>efQrJYbU@6UEdLr~*sTB7QrPqpV}&*h{>E*ID#bR z{xQ&;ah20x{5CL}$dBJ}x5`LbuQ&{0JZa`oi4d-01$Z8?cItwIDBDL;7W1OK6ZN;B zu21HnX(RA>@uJOA7+jwKs66mw{OHSFdwb3tkWS)E&qcjV(Bw)c=$^GgToZZ- zDdBd&*D;2_f7H*U-<%z7Unwu;HmF%V-5a!HcO7?rDJ~s)Qn@`F&}>gTscsK-o)ppm z+@@uMMqF7|a%A^s>o;5CwXB&Yi%af_2y-eGHS4dI^=6LA{^d1(PqthT7AKpLzL+$u ze^Pf%`=ARk>I%jWf%-K$ncM^Q{dQbQ73bs{URKZf|1v0(ttCbsm2g?V2%VQ~(QlP& zX{0x0q&EU39+ZEYM2fF#k*3~{S`MA@`>G7|;A_4#in2YUp%&T*mvGu0x$k?@pp+g8 zGzZ@j_v+C{-OaSkcbLmu#N?_^s&=V3Pdaf$7cUJ_r#m+z3Tf+wm=XJuiuZ@+jz7pl z#=Eycn?IWvf0y=!2z710IFIjEi7-g)8}kQ{=@{$!Qbe^k%?#`1=c%Vf=v{9KC3fb^ zg4v?x~!GD)3|Dq^(m@r_%9W zV6F!$>1-_{gEc)3XJ~7mRx@N%8en7IW}W-KKj<&C#KbNrio;IOps`rv`+|hE$9s|k z_xTClM{6=i@iP%8)RauV_$bP*F_q08G%b9`8pGV$ipXz_h?&`uY(r_9LaED%wVO=O zsV>idMdkA6i&$j4Q5hM|o~#yt&CaZVOXPswyy;NIo9@Ym(AUI! z|1E!z?NXtA)Q)cyr>s*Y^IuN_tR>3;8~o2}IELDmp^tHlqp_pn@n0P|M(Z@>*PUa9 zZhx7*JB=a)#g1FvY&$Th(@ygnDZ;h`t-X$hMLlBOZa??Fz19`ZSm`jQUP0RP2=3p? zch$zC`VYv?gN@HL8rYCg7B2GoQ_lK4v~Ob~9h@8cDSMKz5&gY(ZT^}RG#5(7 zbO#hKbNas0`1qOkm}C2`3lAZXrh4tGwmj)KBk}@=RTU!}B%?22j|e-v&2VqWXQ2@$ zhHpEROm9Onblo|#eRC7TENrBMPRv0U<&9_`G51Wb zPzx+>F=iEQKcGc)&q?kb;(IzD11~S_F3>OuA%`mN=5J1#UMBE5)^Ll2B3>V*^k>1!#UY9#7j>95cW~>q)2U_1vROGKqCKb$=ImO z$4|HieV>oB-+4$&nVwkxty+w1%Aw%zpjZe{EhX_LkrxAM0{voQu3VK!xj$r;=bmP_PC%$2U=?J z7&^!2J`prB0^*;)n;1}N({|nOuwdmyG63V^YH=;l+_LNE7~t)H0a7bZ`Mz&2>>hia zD14U=shTIgQwn-puMC*ynr4H7EmRvPebbn0am>SP?RV%F-_o}=yR5i-O&`?b# zMhg=g(-<}rMmI?C9o3&tH*0g)>hPThfE3wT($?N@KT_z4aM}@CfEweB=HzuGk?c~& z>Bj!5b)4YBLnF>k&>_<(Ls+=@&-TT(;sx-J2f+raMVEo-%MKjP^f{CDe^nYOO75%d z|5be%X^T=mf@2WPUmuZQ*q_&QUHje)F8m{v{^9axXYY{~BKD;G|YKkcAb$Vv?y(Eoo%YUQ23FDj@}|^5Zk~^yygoJ9C9p(B0F| zH=G%mwaiUHhwphaj6hk((HM>14|tWnANxJ<>+TTq`TAK=0AJ?_YvWsiM4_=6sLx

Mobile Enterprise
cross markcheck mark check mark check markMobile Enterprise
check markcheck mark check mark check mark
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Platform/PortalRegister devices?Create/Assign profileAcceptable DeviceID
OEM Direct APIYES - 1000 at a time maxNOTuple or PKID
Partner CenterYES - 1000 at a time maxYES34Tuple or PKID or 4K HH
IntuneYES - 500 at a time max1YES124K HH
Microsoft Store for BusinessYES - 1000 at a time maxYES44K HH
Microsoft 365 BusinessYES - 1000 at a time maxYES34K HH
- ->1Microsoft recommended platform to use
->2Intune license required
->3Feature capabilities are limited
->4Device profile assignment will be retired from MSfB and Partner Center in the coming months
- - -Also see the following topics for more information about device IDs: -- [Device identification](#device-identification) -- [Windows Autopilot device guidelines](https://docs.microsoft.com/windows/deployment/windows-autopilot/autopilot-device-guidelines) -- [Add devices to a customer account](https://docs.microsoft.com/partner-center/autopilot) - - -## Summary - -When deploying new devices using Windows Autopilot, the following steps are required: - -1. [Register devices](#registering-devices). Ideally, this step is performed by the OEM, reseller, or distributor from which the devices were purchased, but this can also be done by the organization by collecting the hardware identity and uploading it manually. -2. [Configure device profiles](profiles.md), specifying how the device should be deployed and what user experience should be presented. -3. Boot the device. When the device is connected to a network with internet access, it will contact the Windows Autopilot deployment service to see if the device is registered, and if it is, it will download profile settings such as the [Enrollment Status page](enrollment-status.md), which are used to customize the end user experience. - -## Other configuration settings - -- [Bitlocker encryption settings](bitlocker.md): You can configure the BitLocker encryption settings to be applied before automatic encryption is started. diff --git a/windows/deployment/windows-autopilot/autopilot-device-guidelines.md b/windows/deployment/windows-autopilot/autopilot-device-guidelines.md deleted file mode 100644 index 7784e955ea..0000000000 --- a/windows/deployment/windows-autopilot/autopilot-device-guidelines.md +++ /dev/null @@ -1,47 +0,0 @@ ---- -title: Windows Autopilot device guidelines -ms.reviewer: -manager: laurawi -description: Learn all about hardware, firmware, and software best practices for Windows Autopilot deployment. -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: deploy -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# Windows Autopilot device guidelines - -**Applies to** - -- Windows 10 - -## Hardware and firmware best practice guidelines for Windows Autopilot - -All devices used with Windows Autopilot should meet the [minimum hardware requirements](https://docs.microsoft.com/windows-hardware/design/minimum/minimum-hardware-requirements-overview) for Windows 10. - -The following additional best practices ensure that devices can easily be provisioned by organizations as part of the Windows Autopilot deployment process: -- Ensure that the TPM 2.0 is enabled and in a good state (not in Reduced Functionality Mode) by default on devices intended for Windows Autopilot self-deploying mode. -- The OEM provisions unique tuple info (SmbiosSystemManufacturer, SmbiosSystemProductName, SmbiosSystemSerialNumber) or PKID + SmbiosSystemSerialNumber into the [SMBIOS fields](https://docs.microsoft.com/windows-hardware/drivers/bringup/smbios) per Microsoft specification (Manufacturer, Product Name and Serial Number stored in SMBIOS Type 1 04h, Type 1 05h and Type 1 07h). -- The OEM uploads 4K Hardware Hashes obtained using OA3 Tool RS3+ run in Audit mode on full OS to Microsoft via CBR report prior to shipping devices to an Autopilot customer or channel partner. -- As a best practice, Microsoft requires that OEM shipping drivers are published to Windows Update within 30 days of the CBR being submitted, and system firmware and driver updates are published to Windows Update within 14 days -- The OEM ensures that the PKID provisioned in the SMBIOS is passed on to the channel. - -## Software best practice guidelines for Windows Autopilot - -- The Windows Autopilot device should be preinstalled with only a Windows 10 base image plus drivers. -- You can preinstall your licensed version of Office, such as [Microsoft 365 Apps for enterprise](https://docs.microsoft.com/deployoffice/about-office-365-proplus-in-the-enterprise). -- Unless explicitly requested by the customer, no other preinstalled software should be included. - - Per OEM Policy, Windows 10 features, including built-in apps, should not be disabled or removed. - -## Related topics - -[Windows Autopilot customer consent](registration-auth.md)
-[Motherboard replacement scenario guidance](autopilot-mbr.md)
diff --git a/windows/deployment/windows-autopilot/autopilot-faq.md b/windows/deployment/windows-autopilot/autopilot-faq.md deleted file mode 100644 index 1cbfeeb11b..0000000000 --- a/windows/deployment/windows-autopilot/autopilot-faq.md +++ /dev/null @@ -1,165 +0,0 @@ ---- -title: Windows Autopilot FAQ -ms.reviewer: This topic provides OEMs, partners, administrators, and end users with answers to some frequently asked questions about deploying Windows 10 with Windows Autopilot. -manager: laurawi -description: Support information for Windows Autopilot -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: low -ms.sitesec: library -ms.pagetype: deploy -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# Windows Autopilot FAQ - -**Applies to: Windows 10** - -This article provides OEMs, partners, administrators, and end users with answers to some frequently asked questions about deploying Windows 10 with Windows Autopilot. - -A [glossary](#glossary) of abbreviations used in this article is provided at the end. - - -## Microsoft Partner Center - -| Question | Answer | -| --- | --- | -| In the Partner Center, does the Tenant ID need to be provided with every device file upload? Is it needed to allow the business customer to access their devices in Microsoft Store for Business (MSfB)? | No. Providing the Tenant ID is a one-time entry in the Partner Center that can be reused with future device uploads. | -| How does the customer or tenant know that their devices are ready to be claimed in MSfB? | After the device file upload is completed in the Partner Center, the tenant can see the devices available for Windows Autopilot setup in MSfB. The OEM needs to advise the tenant to access MSfB. Autonotification from MSfB to the tenant is being developed. | -| How does a customer authorize an OEM or Channel Partner to register Autopilot devices on the customer’s behalf? | Before an OEM or Channel Partner can register a device for Autopilot on behalf of a customer, the customer must first give them consent. The consent process begins with the OEM or Channel Partner sending a link to the customer that directs the customer to a consent page in MSfB. For more information, see [Registration](registration-auth.md). | -| Are there any restrictions if a business customer has registered devices in MSfB and later wants those devices to be managed by a Cloud Solution Provider (CSP) using the Partner Center? | The devices will need to be deleted in MSfB by the business customer before the CSP can upload and manage them in the Partner Center. | -| Does Windows Autopilot support removing the option to enable a local administrator account? | Windows Autopilot doesn’t support removing the local admin account. However, it does support restricting the user performing Azure Active Directory (Azure AD) domain join in OOBE to a standard account (versus an administrator account by default).| -| How can I test the Windows Autopilot CSV file in the Partner Center? | Only CSP Partners have access to the Partner Center portal. If you are a CSP, you can create a Sales agent user account that has access to devices for testing the file. This can be done today in the Partner Center.

For more information, see [Create user accounts and set permissions](https://msdn.microsoft.com/partner-center/create-user-accounts-and-set-permissions). | -| Must I become a CSP to participate in Windows Autopilot? | Top volume OEMs do not, as they can use the OEM Direct API. All others who choose to use MPC to register devices must become CSPs in order to access MPC. | -| Do the different CSP levels have all the same capabilities when it comes to Windows Autopilot? | For purposes of Windows Autopilot, there are three different types of CSPs, each with different levels of authority and access:

1. Direct CSP: Gets direct authorization from the customer to register devices.

2. Indirect CSP Provider: Gets implicit permission to register devices through the relationship their CSP Reseller partner has with the customer. Indirect CSP Providers register devices through Microsoft Partner Center.

3. Indirect CSP Reseller: Gets direct authorization from the customer to register devices. At the same time, their indirect CSP Provider partner also gets authorization, which means that either the Indirect Provider or the Indirect Reseller can register devices for the customer. However, the Indirect CSP Reseller must register devices through the MPC UI (manually uploading CSV file), whereas the Indirect CSP Provider has the option to register devices using the MPC APIs. | - - -## Manufacturing - -| Question | Answer | -| --- | --- | -| What changes need to be made in the factory OS image for customer configuration settings? |No changes are required on the factory floor to enable Windows Autopilot deployment. | -| What version of the OA3 tool meets Windows Autopilot deployment requirements? | Windows Autopilot can work with any version of the OA3 tool. We recommend using a supported version of Windows 10 semi-annual channel to generate the 4K hardware hash. | -| At the time of placing an order, do customers need to be state whether they want it with or without Windows Autopilot options? | Yes, if they want Windows Autopilot, they will want a supported version of Windows 10 semi-annual channel. Also, they will want to receive the CSV file or have the file upload (that is, registration) completed on their behalf. | -| Does the OEM need to manage or collect any custom imaging files from customers and perform any image uploads to Microsoft? | No change, OEMs just send the CBRs as usual to Microsoft. No images are sent to Microsoft to enable Windows Autopilot. Windows Autopilot only customizes OOBE and allows policy configurations (disables admin account, for example). | -| Are there any customer impacts to upgrading from Windows 8 to Windows 10? | The devices must be running a supported version of Windows 10 semi-annual channel to enroll in Windows Autopilot deployment. Otherwise, there are no impacts. | -| Will there be any change to the existing CBR with 4K hardware hash? | No. | -| What new information needs to be sent from the OEM to Microsoft? | Nothing, unless the OEM opts to register the device on the customer’s behalf, in which case they would upload the device ID using a CSV file into Microsoft Partner Center, or use the OEM Direct API. | -| Is there a contract or amendment for an OEM to participate in Windows Autopilot Deployment? | No. | - -## CSV schema - -| Question | Answer | -| --- | --- | -| Can a comma be used in the CSV file? | No. | -| What error messages can a user expect to see in the Partner Center or MSfB when uploading a file? | See the In Microsoft Store for Business section of this guide. | -| Is there a limit to the number of devices that can be listed in the CSV file? | Yes, the CSV file can only contain 1,000 devices to apply to a single profile. If more than 1,000 devices need to be applied to a profile, the devices need to be uploaded through multiple CSV files. | -| Does Microsoft have any recommendations on how an OEM should provide the CSV file to their customers? | We recommend encrypting the CSV file when sending to the business customer to self-register their Windows Autopilot devices (either through MPC, MSfB, or Intune). | - - -## Hardware hash - -| Question | Answer | -| --- | --- | -| Must every hardware hash submitted by the OEM contain the SMBIOS UUID (universally unique identifier), MAC (media access control) address, and unique disk serial number (if using Windows 10 OEM Activation 3.0 tool)? | Yes. Since Windows Autopilot is based on the ability to uniquely identify devices applying for cloud configuration, it is critical to submit hardware hashes that meet the outlined requirement. | -| What is the reason for needing the SMBIOS UUID, MAC Address, and Disk Serial Number in the hardware hash details? | For creating the hardware hash, these are the fields that are needed to identify a device, as parts of the device are added or removed. Since we don’t have a unique identifier for Windows devices, this is the best logic to identify a device. | -| What is difference between OA3 hardware hash, 4K hardware hash, and Windows Autopilot hardware hash? | None. They’re different names for the same thing. The OA3 tool output is called the OA3 Hash, which is 4K in size, which is usable for the Windows Autopilot deployment scenario. Note: When using an older, unsupported Windows version OA3Tool, you get a different sized Hash, which may not be used for Windows Autopilot deployment. | -| What is the thought around parts replacement and repair for the NIC (network interface controller) and Disk? Will the hardware hash become invalid? | Yes. If you replace parts, you need to gather the new hardware hash, though it depends on what is replaced, and the characteristics of the parts. For example, if you replace the TPM or motherboard, it’s a new device and you must have new hardware hash. If you replace one network card, it’s probably not a new device, and the device will function with the old hardware hash. However, as a best practice, you should assume the old hardware hash is invalid and get a new hardware hash after any hardware changes. This is recommended anytime you replace parts. | - -## Motherboard replacement - -| Question | Answer | -| --- | --- | -| How does Autopilot handle motherboard replacement scenarios? | Motherboard replacement is out for scope for Autopilot. Any device that is repaired or serviced in a way that alters the ability to identify the device for Windows Autopilot must go through the normal OOBE process, and manually select the right settings or apply a custom image, as is the case today.

To reuse the same device for Windows Autopilot after a motherboard replacement, the device would need to be de-registered from Autopilot, the motherboard replaced, a new 4K HH harvested, and then re-registered using the new 4K hardware hash (or device ID).

**Note**: An OEM will not be able to use the OEM Direct API to re-register the device, since the OEM Direct API only accepts a tuple or PKID. In this case, the OEM would either have to send the new 4K hardware hash information using a CSV file to customer, and let customer reregister the device using MSfB or Intune.| - -## SMBIOS - -| Question | Answer | -| --- | --- | -| Any specific requirement to SMBIOS UUID? | It must be unique as specified in the Windows 10 hardware requirements. | -| What is the requirement on the SMBIOS table to meet the Windows Autopilot hardware hash need? | It must meet all the Windows 10 hardware requirements. Additional details may be found [here](https://msdn.microsoft.com/library/jj128256(v=vs.85).aspx). | -| If the SMBIOS supports UUID and Serial Number, is it enough for the OA3 tool to generate the hardware hash? | No. At a minimum, the following SMBIOS fields need to be populated with unique values: ProductKeyID SmbiosSystemManufacturer SmbiosSystemProductName SmbiosSystemSerialNumber SmbiosSkuNumber SmbiosSystemFamily MacAddress SmbiosUuid DiskSerialNumber TPM EkPub | - -## Technical interface - -| Question | Answer | -| --- | --- | -| What is the interface to get the MAC Address and Disk Serial Number? How does the OA tool get MAC and Disk Serial #? | Disk serial number is found from IOCTL_STORAGE_QUERY_PROPERTY with StorageDeviceProperty/PropertyStandardQuery. Network MAC address is IOCTL_NDIS_QUERY_GLOBAL_STATS from OID_802_3_PERMANENT_ADDRESS. However the method for performing this operation varies depending on the scenario. | -| Follow up clarification: If we have 2-3 MACs on the system, how does OA Tool choose which MAC Address and Disk Serial Number are on the system since there are multiple instances of each? If a platform has LAN And WLAN, which MAC is chosen? | In short, all available values are used. In detail, there may be specific usage rules. The system disk serial number is more important than the other disks available. Network interfaces that are removable should not be used if detected as they are removable. LAN vs WLAN should not matter, as both will be used. | - -## The end-user experience - -|Question|Answer| -|----|-----| -|How do I know that I received Autopilot?|You can tell that you received Windows Autopilot (as in the device received a configuration but has not yet applied it) when you skip the selection page (as seen below), and are immediately taken to a generic or customized sign-in page.| -|Windows Autopilot didn’t work, what do I do now?| Questions and actions to assist in troubleshooting: Did a screen not get skipped? Did a user end up as an admin when configured not to? Remember that Azure AD Admins will be local admins regardless of whether Windows Autopilot is configured to disable local admin Collection information: run licensingdiag.exe and send the .cab (Cabinet) file that is generated to AutopilotHelp@microsoft.com. If possible, collect an ETL from Windows Performance Recorder (WPR). Often in these cases, users are not signing into the right Azure AD tenant, or are creating local user accounts. For a complete list of support options, refer to [Windows Autopilot support](autopilot-support.md). | -| If an Administrator makes changes to an existing profile, will the changes take effect on devices that have that profile assigned to them that have already been deployed? |No. Windows Autopilot profiles are not resident on the device. They are downloaded during OOBE, the settings defined at the time are applied. Then, the profile is discarded on the device. If the device is reimaged or reset, the new profile settings will take effect the next time the device goes through OOBE.| -|What is the experience if a device isn’t registered or if an IT Admin doesn’t configure Windows Autopilot prior to an end user attempting to self-deploy? |If the device isn’t registered, it will not receive the Windows Autopilot experience and the end user will go through normal OOBE. The Windows Autopilot configurations will not be applied until the user runs through OOBE again, after registration. If a device is started before an MDM profile is created, the device will go through standard OOBE experience. The IT Admin would then have to manually enroll that device into the MDM, after which the next time that device is reset, it will go through the Windows Autopilot OOBE experience.| -|Why didn't I receive a customized sign-in screen during Autopilot? |Tenant branding must be configured in portal.azure.com to receive a customized sign-in experience.| -|What happens if a device is registered with Azure AD but does not have a Windows Autopilot profile assigned? |The regular Azure AD OOBE will occur since no Windows Autopilot profile was assigned to the device.| -|How can I collect logs on Autopilot?|The best way to collect logs on Windows Autopilot performance is to collect a WPR trace during OOBE. The XML file (WPRP extension) for this trace may be provided upon request.| - -## MDM - -| Question | Answer | -| --- | --- | -| Must we use Intune for our MDM? | No, any MDM will work with Autopilot, but others probably won’t have the same full suite of Windows Autopilot features as Intune. You’ll get the best experience from Intune. | -| Can Intune support Win32 app preinstalls? | Yes. Starting with the Windows 10 October Update (version 1809), Intune supports Win32 apps using .msi (and .msix) wrappers. | -| What is co-management? | Co-management is when you use a combination of a cloud MDM tool (Intune) and an on-premises configuration tool like Microsoft Endpoint Configuration Manager. You only need to use the Configuration Manager if Intune can’t support what you want to do with your profile. If you choose to co-manage using Intune + Configuration Manager, you do it by including a Configuration Manager agent in your Intune profile. When that profile is pushed to the device, the device will see the Configuration Manager agent and go out to the Configuration Manager to pull down any additional profile settings. | -| Must we use Microsoft Endpoint Configuration Manager for Windows Autopilot | No. Co-management (described above) is optional. | - - -## Features - -| Question | Answer | -| --- | --- | -| Self-deploying mode | A new version of Windows Autopilot where the user only turns on the device, and nothing else. It’s useful for scenarios where a standard user account isn’t needed (for example, shared devices, or KIOSK devices). | -| Hybrid Azure Active Directory join | Allows Windows Autopilot devices to connect to an on-premises Active Directory domain controller (in addition to being Azure AD joined). | -| Windows Autopilot reset | Removes user apps and settings from a device, but maintains Azure AD domain join and MDM enrollment. Useful for when transferring a device from one user to another. | -| Personalization | Adds the following to the OOBE experience: A personalized welcome message can be created. A username hint can be added Sign-in page text can be personalized. The company’s logo can be included | -| [Autopilot for existing devices](existing-devices.md) | Offers an upgrade path to Windows Autopilot for all existing Windows 7- and Windows 8-based devices. | - - - -## General - -|Question|Answer -|------------------|-----------------| -|If I wipe the machine and restart, will I still receive Windows Autopilot?|Yes, if the device is still registered for Windows Autopilot and is running a supported version of Windows 10 semi-annual channel, it will receive the Windows Autopilot experience.| -|Can I harvest the device fingerprint on existing machines?|Yes, if the device is running a supported version of Windows 10 semi-annual channel, you can harvest device fingerprints for registration. There are no plans to backport the functionality to legacy releases and no way to harvest them on devices running unsupported versions of Windows.| -|Is Windows Autopilot supported on other SKUs, for example, Surface Hub, HoloLens, Windows Mobile.|No, Windows Autopilot isn’t supported on other SKUs.| -|Does Windows Autopilot work after MBR or image reinstallation?|Yes.| -| Can machines that have reimaged a few times go through Autopilot? What does the error message "This user is not authorized to enroll" mean? Error code 801c0003. |There are limits to the number of devices a particular Azure AD user can enroll in Azure AD, as well as the number of devices that are supported per user in Intune. (These are configurable but not infinite.) You’ll run into this frequently if you reuse the devices, or even if you roll back to previous virtual machine snapshots.| -|What happens if a device is registered to a malicious agent? |By design, Windows Autopilot does not apply a profile until the user signs in with the matching tenant for the configured profile using the Azure AD sign-in process. What occurs is illustrated below. If badguys.com registers a device owned by contoso.com, at worst, the user would be directed to sign into badguys.com. When the user enters their email/password, the sign-in information is redirected through Azure AD to the proper Azure AD authentication and the user is prompted to then sign into contoso.com. Since contoso.com does not match badguys.com as the tenant, the Windows Autopilot profile will not be applied and the regular Azure AD OOBE will occur.| -|Where is the Windows Autopilot data stored? |Windows Autopilot data is stored in the United States (US), not in a sovereign cloud, even when the Azure AD tenant is registered in a sovereign cloud. This is applicable to all Windows Autopilot data, regardless of the portal leveraged to deploy Autopilot.| -|Why is Windows Autopilot data stored in the US and not in a sovereign cloud?|It is not customer data that we store, but business data that enables Microsoft to provide a service, therefore it is okay for the data to reside in the US. Customers can stop subscribing to the service at any time, and, in that event, the business data is removed by Microsoft.| -|How many ways are there to register a device for Windows Autopilot|There are six ways to register a device, depending on who is doing the registering:

1. OEM Direct API (only available to TVOs)
2. MPC using the MPC API (must be a CSP)
3. MPC using manual upload of CSV file in the UI (must be a CSP)
4. MSfB using CSV file upload
5. Intune using CSV file upload
6. Microsoft 365 Business portal using CSV file upload| -|How many ways are there to create a Windows Autopilot profile?|There are four ways to create and assign a Windows Autopilot profile:

1. Through MPC (must be a CSP)
2. Through MSfB
3. Through Intune (or another MDM)
4. Microsoft 365 Business portal

Microsoft recommends creation and assignment of profiles through Intune. | -| What are some common causes of registration failures? |1. Bad or missing hardware hash entries can lead to faulty registration attempts
2. Hidden special characters in CSV files.

To avoid this issue, after creating your CSV file, open it in Notepad to look for hidden characters or trailing spaces or other corruptions.| -| Is Autopilot supported on IoT devices? | Autopilot is not supported on IoT Core devices, and there are currently no plans to add this support. Autopilot is supported on Windows 10 IoT Enterprise SAC devices. Autopilot is supported on Windows 10 Enterprise LTSC 2019 and above; it is not supported on earlier versions of LTSC.| -| Is Autopilot supported in all regions/countries? | Autopilot only supports customers using global Azure. Global Azure does not include the three entities listed below:
- Azure Germany
- Azure China 21Vianet
- Azure Government
So, if a customer is set up in global Azure, there are no region restrictions. For example, if Contoso uses global Azure but has employees working in China, the Contoso employees working in China would be able to use Autopilot to deploy devices. If Contoso uses Azure China 21Vianet, the Contoso employees would not be able to use Autopilot.| -| I need to register a device that's been previously registered to another organisation. | Partners registering devices through partner center can also deregister the device if it's moving between different customer tenants. If this isn't possible, as a last resort you can raise a ticket through the Intune "Help and Support" node and our support teams will assist you. | - -## Glossary - -| Term | Meaning | -| --- | --- | -| CSV | Comma Separated Values (File type similar to Excel spreadsheet) | -| MPC | Microsoft Partner Center | -| MDM | Mobile Device Management | -| OEM | Original Equipment Manufacturer | -| CSP | Cloud Solution Provider | -| MSfB | Microsoft Store for Business | -| Azure AD | Azure Active Directory | -| 4K HH | 4K hardware hash | -| CBR | Computer Build Report | -| EC | Enterprise Commerce | -| DDS | Device Directory Service | -| OOBE | Out of the Box Experience | -| UUID | Universally Unique Identifier | diff --git a/windows/deployment/windows-autopilot/autopilot-mbr.md b/windows/deployment/windows-autopilot/autopilot-mbr.md deleted file mode 100644 index 28c376ab92..0000000000 --- a/windows/deployment/windows-autopilot/autopilot-mbr.md +++ /dev/null @@ -1,421 +0,0 @@ ---- -title: Windows Autopilot motherboard replacement -ms.reviewer: -manager: laurawi -description: Windows Autopilot deployment MBR scenarios -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: deploy -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# Windows Autopilot motherboard replacement scenario guidance - -**Applies to** - -- Windows 10 - -This document offers guidance for Windows Autopilot device repair scenarios that Microsoft partners can use in Motherboard Replacement (MBR) situations, and other servicing scenarios. - -Repairing Autopilot enrolled devices is complex, as it tries to balance OEM requirements with Windows Autopilot requirements. Specifically, OEM’s require strict uniqueness across motherboards, MAC addresses, etc., while Windows Autopilot requires strict uniqueness at the Hardware ID level for each device to enable successful registration. The Hardware ID does not always accommodate all the OEM hardware component requirements, thus these requirements are sometimes at odds, causing issues with some repair scenarios. - -**Motherboard Replacement (MBR)** - -If a motherboard replacement is needed on a Windows Autopilot device, the following process is recommended: - -1. [Deregister the device](#deregister-the-autopilot-device-from-the-autopilot-program) from Windows Autopilot -2. [Replace the motherboard](#replace-the-motherboard) -3. [Capture a new device ID (4K HH)](#capture-a-new-autopilot-device-id-4k-hh-from-the-device) -4. [Reregister the device](#reregister-the-repaired-device-using-the-new-device-id) with Windows Autopilot -5. [Reset the device](#reset-the-device) -6. [Return the device](#return-the-repaired-device-to-the-customer) - -Each of these steps is described below. - -## Deregister the Autopilot device from the Autopilot program - -Before the device arrives at the repair facility, it must be deregistered by the entity that registered it. Only the entity that registered the device can deregister it. This might be the customer IT Admin, the OEM, or the CSP partner. If the IT Admin registered the device, they likely did so via Intune (or possibly the Microsoft Store for Business). In that case, they should deregister the device from Intune (or MSfB). This is necessary because devices registered in Intune will not show up in MPC. However, if the OEM or CSP partner registered the device, they likely did so via the Microsoft Partner Center (MPC). In that case, they should deregister the device from MPC, which will also remove it from the customer IT Admin’s Intune account. Below, we describe the steps an IT Admin would go through to deregister a device from Intune, and the steps an OEM or CSP would go through to deregister a device from MPC. - -**NOTE**: When possible, an OEM or CSP should register Autopilot devices, rather than having the customer do it. This will avoid problems where OEMs or CSPs may not be able to deregister a device if, for example, a customer leasing a device goes out of business before deregistering it themselves. - -**EXCEPTION**: If a customer grants an OEM permission to register devices on their behalf via the automated consent process, then an OEM can use the API to deregister devices they didn’t register themselves (instead, the customer registered the devices). But keep in mind that this would only remove those devices from the Autopilot program, it would not disenroll them from Intune or disjoin them from AAD. The customer must do those steps, if desired, through Intune. - -### Deregister from Intune - -To deregister an Autopilot device from Intune, an IT Admin would: - -1. Sign in to their Intune account -2. Navigate to Intune > Groups > All groups -3. Remove the desired device from its group -4. Navigate to Intune > Devices > All devices -5. Select the checkbox next to the device you want to delete, then click the Delete button on the top menu -6. Navigate to Intune > Devices > Azure AD devices -7. Select the checkbox next to the device you want to delete, then click the Delete button along the top menu -8. Navigate to Intune > Device enrollment > Windows enrollment > Devices -9. Select the checkbox next to the device you want to deregister -10. Click the extended menu icon (“…”) on the far right end of the line containing the device you want to deregister in order to expose an additional menu with the option to “unassign user” -11. Click “Unassign user” if the device was previously assigned to a user; if not, this option will be grayed-out and can be ignored -12. With the unassigned device still selected, click the Delete button along the top menu to remove this device - -**NOTE**: These steps deregister the device from Autopilot, but also unenroll the device from Intune, and disjoin the device from AAD. While it may appear that only deregistering the device from Autopilot is needed, there are certain barriers in place within Intune that necessitate all the steps above be done, which is best practice anyway in case the device gets lost or becomes unrecoverable, to eliminate the possibility of orphaned devices existing in the Autopilot database, or Intune, or AAD. If a device gets into an unrecoverable state, you can contact the appropriate [Microsoft support alias](autopilot-support.md) for assistance. - -The deregistration process will take about 15 minutes. You can accelerate the process by clicking the “Sync” button, then “Refresh” the display until the device is no longer present. - -More details on deregistering devices from Intune can be found [here](https://docs.microsoft.com/intune/enrollment-autopilot#create-an-autopilot-device-group). - -### Deregister from MPC - -To deregister an Autopilot device from the Microsoft Partner Center (MPC), a CSP would: - -1. Log into MPC -2. Navigate to Customer > Devices -3. Select the device to be deregistered and click the “Delete device” button - -![devices](images/devices.png) - -**NOTE**: Deregistering a device from Autopilot in MPC does only that; it does not also unenroll the device from the MDM (Intune), nor does it disjoin the device from AAD. Therefore, if possible, the OEM/CSP ideally should work with the customer IT Admin to have the device fully removed per the Intune steps in the previous section. - -Alternatively, an OEM partner that has integrated the OEM Direct APIs can deregister a device by calling the AutopilotDeviceRegistration API with the TenantID and TenantDomain fields left blank in the request call. - -Because the repair facility will not have access to the user’s login credentials, the repair facility will have to reimage the device as part of the repair process. This means that the customer should do three things before sending the device off for repair: -1. Copy all important data off the device. -2. Let the repair facility know which version of Windows they should reinstall after the repair. -3. If applicable, let the repair facility know which version of Office they should reinstall after the repair. - -## Replace the motherboard - -Technicians replace the motherboard (or other hardware) on the broken device. A replacement DPK is injected. - -Repair and key replacement processes vary between facilities. Sometimes repair facilities receive motherboard spare parts from OEMs that have replacement DPKs already injected, but sometimes not. Sometimes repair facilities receive fully-functional BIOS tools from OEMs, but sometimes not. This means that the quality of the data in the BIOS after an MBR varies. To ensure the repaired device will still be Autopilot-capable following its repair, the new (post-repair) BIOS should be able to successfully gather and populate the following information at a minimum: - -- DiskSerialNumber -- SmbiosSystemSerialNumber -- SmbiosSystemManufacturer -- SmbiosSystemProductName -- SmbiosUuid -- TPM EKPub -- MacAddress -- ProductKeyID -- OSType - -**NOTE**: For simplicity, and because processes vary between repair facilities, we have excluded many of the additional steps often used in an MBR, such as: -- Verify that the device is still functional -- Disable BitLocker* -- Repair the Boot Configuration Data (BCD) -- Repair and verify the network driver operation - -*BitLocker can be suspended rather than disabled if the technician has the ability to resume it after the repair. - -## Capture a new Autopilot device ID (4K HH) from the device - -Repair technicians must sign in to the repaired device to capture the new device ID. Assuming the repair technician does NOT have access to the customer’s login credentials, they will have to reimage the device in order to gain access, per the following steps: - -1. The repair technician creates a [WinPE bootable USB drive](https://docs.microsoft.com/windows-hardware/manufacture/desktop/oem-deployment-of-windows-10-for-desktop-editions#create-a-bootable-windows-pe-winpe-partition). -2. The repair technician boots the device to WinPE. -3. The repair technician [applies a new Windows image to the device](https://docs.microsoft.com/windows-hardware/manufacture/desktop/work-with-windows-images). - - **NOTE**: Ideally, the same version of Windows should be reimaged onto the device that was originally on the device, so some coordination will be required between the repair facility and customer to capture this information at the time the device arrives for repair. This might include the customer sending the repair facility a customized image (.ppk file) via a USB stick, for example. - -4. The repair technician boots the device into the new Windows image. -5. Once on the desktop, the repair technician captures the new device ID (4K HH) off the device using either the OA3 Tool or the PowerShell script, as described below. - -Those repair facilities with access to the OA3 Tool (which is part of the ADK) can use the tool to capture the 4K Hardware Hash (4K HH). - -Alternatively, the [WindowsAutoPilotInfo PowerShell script](https://www.powershellgallery.com/packages/Get-WindowsAutoPilotInfo) can be used to capture the 4K HH by following these steps: - -1. Install the script from the [PowerShell Gallery](https://www.powershellgallery.com/packages/Get-WindowsAutoPilotInfo) or from the command line (command line installation is shown below). -2. Navigate to the script directory and run it on the device when the device is either in Full OS or Audit Mode. See the following example. - - ```powershell - md c:\HWID - Set-Location c:\HWID - Set-ExecutionPolicy -Scope Process -ExecutionPolicy Unrestricted -Force - Install-Script -Name Get-WindowsAutopilotInfo -Force - Get-WindowsAutopilotInfo.ps1 -OutputFile AutopilotHWID.csv - ``` - ->If you are prompted to install the NuGet package, choose **Yes**.
->If, after installing the script you get an error that Get-WindowsAutopilotInfo.ps1 is not found, verify that C:\Program Files\WindowsPowerShell\Scripts is present in your PATH variable.
->If the Install-Script cmdlet fails, verify that you have the default PowerShell repository registered (**Get-PSRepository**) or register the default repository with **Register-PSRepository -Default -Verbose**. - -The script creates a .csv file that contains the device information, including the complete 4K HH. Save this file so that you can access it later. The service facility will use this 4K HH to reregister device as described below. Be sure to use the -OutputFile parameter when saving the file, which ensures that file formatting is correct. Do not attempt to pipe the command output to a file manually. - -**NOTE**: If the repair facility does not have the ability to run the OA3 tool or PowerShell script to capture the new 4K HH, then the CSP (or OEM) partners must do this for them. Without some entity capturing the new 4K HH, there is no way to reregister this device as an Autopilot device. - - -## Reregister the repaired device using the new device ID - -If an OEM is not able to reregister the device, then the repair facility or CSP should reregister the device using MPC, or the customer IT Admin should be advised to reregister the device via Intune (or MSfB). Both ways of reregistering a device are shown below. - -### Reregister from Intune - -To reregister an Autopilot device from Intune, an IT Admin would: -1. Sign in to Intune. -2. Navigate to Device enrollment > Windows enrollment > Devices > Import. -3. Click the **Import** button to upload a csv file containing the device ID of the device to be reregistered (the device ID was the 4K HH captured by the PowerShell script or OA3 tool described previously in this document). - -The following video provides a good overview of how to (re)register devices via MSfB.
- -> [!VIDEO https://www.youtube.com/embed/IpLIZU_j7Z0] - -### Reregister from MPC - -To reregister an Autopilot device from MPC, an OEM or CSP would: - -1. Sign in to MPC. -2. Navigate to the Customer > Devices page and click the **Add devices** button to upload the csv file. - -![device](images/device2.png)
-![device](images/device3.png) - -In the case of reregistering a repaired device through MPC, the uploaded csv file must contain the 4K HH for the device, and not just the PKID or Tuple (SerialNumber + OEMName + ModelName). If only the PKID or Tuple was used, the Autopilot service would be unable to find a match in the Autopilot database, since no 4K HH info was ever previously submitted for this essentially “new” device, and the upload will fail, likely returning a ZtdDeviceNotFound error. So, again, only upload the 4K HH, not the Tuple or PKID. - -**NOTE**: When including the 4K HH in the csv file, you do NOT also need to include the PKID or Tuple. Those columns may be left blank, as shown below: - -![hash](images/hh.png) - -## Reset the device - -Since the device was required to be in Full OS or Audit Mode to capture the 4K HH, the repair facility must reset the image back to a pre-OOBE state before returning it to the customer. One way this can be accomplished is by using the built-in reset feature in Windows, as follows: - -On the device, go to Settings > Update & Security > Recovery and click on Get started. Under Reset this PC, select Remove everything and Just remove my files. Finally, click on Reset. - -![reset](images/reset.png) - -However, it’s likely the repair facility won’t have access to Windows because they lack the user credentials to sign in, in which case they need to use other means to reimage the device, such as the [Deployment Image Servicing and Management tool](https://docs.microsoft.com/windows-hardware/manufacture/desktop/oem-deployment-of-windows-10-for-desktop-editions#use-a-deployment-script-to-apply-your-image). - -## Return the repaired device to the customer - -After completing the previous steps, the repaired device can now be returned to the customer, and will be auto-enrolled into the Autopilot program on first boot-up during OOBE. - -**NOTE**: If the repair facility did NOT reimage the device, they could be sending it back in a potentially broken state (e.g., there’s no way to log into the device because it’s been dissociated from the only known user account), in which case they should tell the organization that they need to fix the registration and OS themselves. - -**IMPORTANT**: A device can be “registered” for Autopilot prior to being powered-on, but the device isn’t actually “deployed” to Autopilot (i.e., enabled as an Autopilot device) until it goes through OOBE, which is why resetting the device back to a pre-OOBE state is a required step. - -## Specific repair scenarios - -This section covers the most common repair scenarios, and their impact on Autopilot enablement. - -NOTES ON TEST RESULTS: - -- Scenarios below were tested using Intune only (no other MDMs were tested). -- In most test scenarios below, the repaired and reregistered device needed to go through OOBE again for Autopilot to be enabled. -- Motherboard replacement scenarios often result in lost data, so repair centers or customers should be reminded to back up data (if possible) prior to repair. -- In the cases where a repair facility does not have the ability to write device info into the BIOS of the repaired device, new processes need to be created to successfully enable Autopilot. -- Repaired device should have the Product Key (DPK) preinjected in the BIOS before capturing the new 4K HH (device ID) - -In the following table:
-- Supported = **Yes**: the device can be reenabled for Autopilot -- Supported = **No**: the device cannot be reenabled for Autopilot - - -
ScenarioSupportedMicrosoft Recommendation -
Motherboard Replacement (MBR) in generalYesThe recommended course of action for MBR scenarios is: - -1. Autopilot device is deregistered from the Autopilot program -2. The motherboard is replace -3. The device is reimaged (with BIOS info and DPK reinjected)* -4. A new Autopilot device ID (4K HH) is captured off the device -5. The repaired device is reregistered for the Autopilot program using the new device ID -6. The repaired device is reset to boot to OOBE -7. The repaired device is shipped back to the customer - -*It’s not necessary to reimage the device if the repair technician has access to the customer’s login credentials. It’s technically possible to do a successful MBR and Autopilot re-enablement without keys or certain BIOS info (e.g., serial #, model name, etc.), but doing so is only recommended for testing/educational purposes. - -
MBR when motherboard has a TPM chip (enabled) and only one onboard network card (that also gets replaced)Yes - -1. Deregister damaged device -2. Replace motherboard -3. Reimage device (to gain access), unless you have access to customers’ login credentials -4. Write device info into BIOS -5. Capture new 4K HH -6. Reregister repaired device -7. Reset device back to OOBE -8. Go through Autopilot OOBE (customer) -9. Autopilot successfully enabled - -
MBR when motherboard has a TPM chip (enabled) and a second network card (or network interface) that is not replaced along with the motherboardNoThis scenario is not recommended, as it breaks the Autopilot experience, because the resulting Device ID will not be stable until after TPM attestation has completed, and even then registration may give incorrect results because of ambiguity with MAC Address resolution. -
MBR where the NIC card, HDD, and WLAN all remain the same after the repairYes - -1. Deregister damaged device -2. Replace motherboard (with new RDPK preinjected in BIOS) -3. Reimage device (to gain access), unless you have access to customers’ login credentials -4. Write old device info into BIOS (same s/n, model, etc.)* -5. Capture new 4K HH -6. Reregister repaired device -7. Reset device back to OOBE -8. Go through Autopilot OOBE (customer) -9. Autopilot successfully enabled - -*Note that for this and subsequent scenarios, rewriting old device info would not include the TPM 2.0 endorsement key, as the associated private key is locked to the TPM device - -
MBR where the NIC card remains the same, but the HDD and WLAN are replacedYes - -1. Deregister damaged device -2. Replace motherboard (with new RDPK preinjected in BIOS) -3. Insert new HDD and WLAN -4. Write old device info into BIOS (same s/n, model, etc.) -5. Capture new 4K HH -6. Reregister repaired device -7. Reset device back to OOBE -8. Go through Autopilot OOBE (customer) -9. Autopilot successfully enabled - -
MBR where the NIC card and WLAN remains the same, but the HDD is replacedYes - -1. Deregister damaged device -2. Replace motherboard (with new RDPK preinjected in BIOS) -3. Insert new HDD -4. Write old device info into BIOS (same s/n, model, etc.) -5. Capture new 4K HH -6. Reregister repaired device -7. Reset device back to OOBE -8. Go through Autopilot OOBE (customer) -9. Autopilot successfully enabled - -
MBR where only the MB is replaced (all other parts remain same) but new MB was taken from a previously used device that had NOT been Autopilot-enabled before.Yes - -1. Deregister damaged device -2. Replace motherboard (with new RDPK preinjected in BIOS) -3. Reimage device (to gain access), unless you have access to customers’ login credentials -4. Write old device info into BIOS (same s/n, model, etc.) -5. Capture new 4K HH -6. Reregister repaired device -7. Reset device back to OOBE -8. Go through Autopilot OOBE (customer) -9. Autopilot successfully enabled - -
MBR where only the MB is replaced (all other parts remain same) but new MB was taken from a previously used device that HAD been Autopilot-enabled before.Yes - -1. Deregister old device from which MB will be taken -2. Deregister damaged device (that you want to repair) -3. Replace motherboard in repair device with MB from other Autopilot device (with new RDPK preinjected in BIOS) -4. Reimage device (to gain access), unless you have access to customers’ login credentials -5. Write old device info into BIOS (same s/n, model, etc.) -6. Capture new 4K HH -7. Reregister repaired device -8. Reset device back to OOBE -9. Go through Autopilot OOBE (customer) -10. Autopilot successfully enabled - -NOTE: The repaired device can also be used successfully as a normal, non-Autopilot device. - -
BIOS info excluded from MBR deviceNoRepair facility does not have BIOS tool to write device info into BIOS after MBR. - -1. Deregister damaged device -2. Replace motherboard (BIOS does NOT contain device info) -3. Reimage and write DPK into image -4. Capture new 4K HH -5. Reregister repaired device -6. Create Autopilot profile for device -7. Go through Autopilot OOBE (customer) -8. Autopilot FAILS to recognize repaired device - -
MBR when there is no TPM chipYesThough we do not recommend enabling Autopilot devices without a TPM chip (which is recommended for BitLocker encryption), it is possible to enable an Autopilot device in “standard user” mode (but NOT Self-deploying mode) that does not have a TPM chip. In this case, you would: - -1. Deregister damaged device -2. Replace motherboard -3. Reimage device (to gain access), unless you have access to customers’ login credentials -4. Write old device info into BIOS (same s/n, model, etc.) -5. Capture new 4K HH -6. Reregister repaired device -7. Reset device back to OOBE -8. Go through Autopilot OOBE (customer) -9. Autopilot successfully enabled - -
New DPK written into image on repaired Autopilot device with a new MBYesRepair facility replaces normal MB on damaged device. MB does not contain any DPK in the BIOS. Repair facility writes DPK into image after MBR. - -1. Deregister damaged device -2. Replace motherboard – BIOS does NOT contain DPK info -3. Reimage device (to gain access), unless you have access to customers’ login credentials -4. Write device info into BIOS (same s/n, model, etc.) -5. Capture new 4K HH -6. Reset or reimage device to pre-OOBE and write DPK into image -7. Reregister repaired device -8. Go through Autopilot OOBE -9. Autopilot successfully enabled - -
New Repair Product Key (RDPK)YesUsing a motherboard with a new RDPK preinjected results in a successful Autopilot refurbishment scenario. - -1. Deregister damaged device -2. Replace motherboard (with new RDPK preinjected in BIOS) -3. Reimage or rest image to pre-OOBE -4. Write device info into BIOS -5. Capture new 4K HH -6. Reregister repaired device -7. Reimage or reset image to pre-OOBE -8. Go through Autopilot OOBE -9. Autopilot successfully enabled - -
No Repair Product Key (RDPK) injectedNoThis scenario violates Microsoft policy and breaks the Windows Autopilot experience. -
Reimage damaged Autopilot device that was not deregistered prior to repairYes, but the device will still be associated with previous tenant ID, so should only be returned to same customer - -1. Reimage damaged device -2. Write DPK into image -3. Go through Autopilot OOBE -4. Autopilot successfully enabled (to previous tenant ID) - -
Disk replacement from a non-Autopilot device to an Autopilot deviceYes - -1. Do not deregister damaged device prior to repair -2. Replace HDD on damaged device -3. Reimage or reset image back to OOBE -4. Go through Autopilot OOBE (customer) -5. Autopilot successfully enabled (repaired device recognized as its previous self) - -
Disk replacement from one Autopilot device to another Autopilot deviceMaybeIf the device from which the HDD is taken was itself previously deregistered from Autopilot, then that HDD can be used in a repair device. But if the HDD was never previously deregistered from Autopilot before being used in a repaired device, the newly repaired device will not have the proper Autopilot experience. - -Assuming the used HDD was previously deregistered (before being used in this repair): - -1. Deregister damaged device -2. Replace HDD on damaged device using a HDD from another deregistered Autopilot device -3. Reimage or rest the repaired device back to a pre-OOBE state -4. Go through Autopilot OOBE (customer) -5. Autopilot successfully enabled - -
Non-Microsoft network card replacement NoWhether from a non-Autopilot device to an Autopilot device, from one Autopilot device to another Autopilot device, or from an Autopilot device to a non-Autopilot device, any scenario where a 3rd party (not onboard) Network card is replaced will break the Autopilot experience, and is not recommended. -
A device repaired more than 3 timesNoAutopilot is not supported when a device is repeatedly repaired, so that whatever parts NOT replaced become associated with too many parts that have been replaced, which would make it difficult to uniquely identify that device in the future. -
Memory replacementYesReplacing the memory on a damaged device does not negatively affect the Autopilot experience on that device. No de/reregistration is needed. The repair technician simply needs to replace the memory. -
GPU replacementYesReplacing the GPU(s) on a damaged device does not negatively affect the Autopilot experience on that device. No de/reregistration is needed. The repair technician simply needs to replace the GPU. -
- ->When scavenging parts from another Autopilot device, we recommend unregistering the scavenged device from Autopilot, scavenging it, and then NEVER REGISTERING THE SCAVENGED DEVICE (AGAIN) FOR AUTOPILOT, because reusing parts this way may cause two active devices to end up with the same ID, with no possibility of distinguishing between the two. - -**NOTE**: The following parts may be replaced without compromising Autopilot enablement or requiring special additional repair steps: -- Memory (RAM or ROM) -- Power Supply -- Video Card -- Card Reader -- Sound card -- Expansion card -- Microphone -- Webcam -- Fan -- Heat sink -- CMOS battery - -Other repair scenarios not yet tested and verified include: -- Daughterboard replacement -- CPU replacement -- Wifi replacement -- Ethernet replacement - -## FAQ - -| Question | Answer | -| --- | --- | -| If we have a tool that programs product information into the BIOS after the MBR, do we still need to submit a CBR report for the device to be Autopilot-capable? | No. Not if the in-house tool writes the minimum necessary information into the BIOS that the Autopilot program looks for to identify the device, as described earlier in this document. | -| What if only some components are replaced rather than the full motherboard? | While it’s true that some limited repairs do not prevent the Autopilot algorithm from successfully matching the post-repair device with the pre-repair device, it is best to ensure 100% success by going through the MBR steps above even for devices that only needed limited repairs. | -| How does a repair technician gain access to a broken device if they don’t have the customer’s login credentials? | The technician will have to reimage the device and use their own credentials during the repair process. | - -## Related topics - -[Device guidelines](autopilot-device-guidelines.md)
diff --git a/windows/deployment/windows-autopilot/autopilot-support.md b/windows/deployment/windows-autopilot/autopilot-support.md deleted file mode 100644 index 762aab67e5..0000000000 --- a/windows/deployment/windows-autopilot/autopilot-support.md +++ /dev/null @@ -1,37 +0,0 @@ ---- -title: Windows Autopilot support -description: Find out who to contact for help with your Windows Autopilot installation. -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: low -ms.sitesec: library -ms.pagetype: deploy -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.reviewer: -manager: laurawi -ms.collection: M365-modern-desktop -ms.topic: article ---- - -# Windows Autopilot support information - -**Applies to: Windows 10** - -The following table displays support information for the Windows Autopilot program. - -Before contacting the resources listed below for Windows Autopilot-related issues, check the [Windows Autopilot FAQ](autopilot-faq.md). - -| Audience | Support contact | -|------------|---------------------------------------| -| OEM or Channel Partner registering devices as a CSP (via MPC) | Use the help resources available in MPC. Whether you are a named partner or a channel partner (distributor, reseller, SI, etc.), if you’re a CSP registering Autopilot devices through MPC (either manually or through the MPC API), your first-line of support should be the help resources within MPC. | -| OEM registering devices using OEM Direct API | Contact MSOEMOPS@microsoft.com. Response time depends on priority:
Low – 120 hours
Normal – 72 hours
High – 24 hours
Immediate – 4 hours | -| Enterprise customers | Contact your Technical Account Manager (TAM), or Account Technology Strategist (ATS), or Customer Service Support (CSS) representative. | -| End-user | Contact your IT administrator. | -| Microsoft Partner Center (MPC) users | Use the [help resources](https://partner.microsoft.com/support) available in MPC. | -| Microsoft Store for Business (MSfB) users | Use the help resources available in MSfB. | -| Intune users | From the Microsoft Azure portal, click [Help + support](https://portal.azure.com/#blade/Microsoft_Azure_Support/HelpAndSupportBlade/overview). | -| Microsoft 365 Business | Support is accessible directly through the Microsoft 365 Business portal when logged in: https://support.microsoft.com/en-us. | -| Queries relating to MDA testing | Contact MDAHelp@microsoft.com. | \ No newline at end of file diff --git a/windows/deployment/windows-autopilot/autopilot-update.md b/windows/deployment/windows-autopilot/autopilot-update.md deleted file mode 100644 index db4094b8a8..0000000000 --- a/windows/deployment/windows-autopilot/autopilot-update.md +++ /dev/null @@ -1,48 +0,0 @@ ---- -title: Windows Autopilot update -ms.reviewer: -manager: laurawi -description: Windows Autopilot update -keywords: Autopilot, update, Windows 10 -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: deploy -ms.localizationpriority: medium -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# Windows Autopilot update - -**Applies to** - -- Windows 10, version 1903 - -Windows Autopilot update enables you to get the latest Autopilot features and critical issue fixes without the need to move to latest Windows OS version. With Autopilot update, organizations can keep their current OS version and still benefit from new Autopilot features and bug fixes. - -During the Autopilot deployment process, Windows Autopilot update has been added as a new node after the critical [Windows Zero Day Patch (ZDP) update](https://docs.microsoft.com/windows-hardware/customize/desktop/windows-updates-during-oobe) check. During the update process, Windows Autopilot devices reach out to Windows Update to check for a new Autopilot update. If there is an Autopilot update available, the device will download and install the update, then restart automatically. See the following example. - - ![Autopilot update 1](images/update1.png)
- ![Autopilot update 2](images/update2.png)
- ![Autopilot update 3](images/update3.png) - -The following diagram illustrates a typical Windows Autopilot deployment orchestration during the Out of Box Experience (OOBE) with the new Windows Autopilot update node. - - ![Autopilot update flow](images/update-flow.png) - -## Release cadence - -- When an Autopilot update is available, it is typically released on the 4th Tuesday of the month. The update could be released on a different week if there is an exception. -- A knowledge base (KB) article will also be published to document the changes that are included in the update. - -For a list of released updates, see [Autopilot update history](windows-autopilot-whats-new.md#windows-autopilot-update-history). - -## See also - -[Windows Update during OOBE](https://docs.microsoft.com/windows-hardware/customize/desktop/windows-updates-during-oobe)
-[What's new in Windows Autopilot](windows-autopilot-whats-new.md)
\ No newline at end of file diff --git a/windows/deployment/windows-autopilot/bitlocker.md b/windows/deployment/windows-autopilot/bitlocker.md deleted file mode 100644 index 542243d569..0000000000 --- a/windows/deployment/windows-autopilot/bitlocker.md +++ /dev/null @@ -1,54 +0,0 @@ ---- -title: Setting the BitLocker encryption algorithm for Autopilot devices -ms.reviewer: -manager: laurawi -description: Microsoft Intune provides a comprehensive set of configuration options to manage BitLocker on Windows 10 devices. -keywords: Autopilot, BitLocker, encryption, 256-bit, Windows 10 -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: deploy -ms.localizationpriority: medium -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# Setting the BitLocker encryption algorithm for Autopilot devices - -**Applies to** - -- Windows 10 - -With Windows Autopilot, you can configure the BitLocker encryption settings to be applied before automatic encryption is started. This ensures that the default encryption algorithm isn't applied automatically when this is not the desired setting. Other BitLocker policies that must be applied prior to encryption can also be delivered before automatic BitLocker encryption begins. - -The BitLocker encryption algorithm is used when BitLocker is first enabled, and sets the strength to which full volume encryption should occur. Available encryption algorithms are: AES-CBC 128-bit, AES-CBC 256-bit, XTS-AES 128-bit, or XTS-AES 256-bit encryption. The default value is XTS-AES 128-bit encryption. See [BitLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/bitlocker-csp) for information about the recommended encryption algorithms to use. - -To ensure the desired BitLocker encryption algorithm is set before automatic encryption occurs for Autopilot devices: - -1. Configure the [encryption method settings](https://docs.microsoft.com/intune/endpoint-protection-windows-10#windows-encryption) in the Windows 10 Endpoint Protection profile to the desired encryption algorithm. -2. [Assign the policy](https://docs.microsoft.com/intune/device-profile-assign) to your Autopilot device group. - - **IMPORTANT**: The encryption policy must be assigned to **devices** in the group, not users. -3. Enable the Autopilot [Enrollment Status Page](https://docs.microsoft.com/windows/deployment/windows-autopilot/enrollment-status) (ESP) for these devices. - - **IMPORTANT**: If the ESP is not enabled, the policy will not apply before encryption starts. - -An example of Microsoft Intune Windows Encryption settings is shown below. - - ![BitLocker encryption settings](images/bitlocker-encryption.png) - -**Note**: A device that is encrypted automatically will need to be decrypted prior to changing the encryption algorithm. - -The settings are available under Device Configuration -> Profiles -> Create profile -> Platform = Windows 10 and later, Profile type = Endpoint protection -> Configure -> Windows Encryption -> BitLocker base settings, Configure encryption methods = Enable. - -**Note**: It is also recommended to set Windows Encryption -> Windows Settings -> Encrypt = **Require**. - -## Requirements - -Windows 10, version 1809 or later. - -## See also - -[BitLocker overview](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) diff --git a/windows/deployment/windows-autopilot/deployment-process.md b/windows/deployment/windows-autopilot/deployment-process.md deleted file mode 100644 index 6723d50e35..0000000000 --- a/windows/deployment/windows-autopilot/deployment-process.md +++ /dev/null @@ -1,27 +0,0 @@ ---- -title: Windows 10 deployment process posters -description: View and download Windows 10 deployment process flows for Microsoft Endpoint Configuration Manager and Windows Autopilot. -ms.reviewer: -manager: laurawi -ms.audience: itpro -author: greg-lindsay -keywords: upgrade, in-place, configuration, deploy -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -audience: itpro -author: greg-lindsay -ms.topic: article ---- - -# Windows Autopilot deployment process - -**Applies to** -- Windows 10 - -Windows Autopilot deployment processes are summarized in the poster below. The poster is two pages in portrait mode (11x17). Click the image below to view a PDF in your browser. - -[![Deploy Windows 10 with Autopilot](../media/windows10-autopilot-flowchart.png)](../media/Windows10AutopilotFlowchart.pdf) - -**Note**: The Windows Autopilot for existing devices process is included in the [Microsoft Endpoint Configuration Manager deployment poster](../windows-10-deployment-posters.md#deploy-windows-10-with-microsoft-endpoint-configuration-manager). \ No newline at end of file diff --git a/windows/deployment/windows-autopilot/dfci-management.md b/windows/deployment/windows-autopilot/dfci-management.md deleted file mode 100644 index 550420a264..0000000000 --- a/windows/deployment/windows-autopilot/dfci-management.md +++ /dev/null @@ -1,70 +0,0 @@ ---- -title: DFCI Management -ms.reviewer: -manager: laurawi -description: With Windows Autopilot Deployment and Intune, you can manage UEFI (BIOS) settings after they're enrolled by using the Device Firmware Configuration Interface (DFCI) -keywords: Autopilot, DFCI, UEFI, Windows 10 -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: deploy -ms.localizationpriority: medium -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# DFCI Management - -**Applies to** - -- Windows 10 - -With Windows Autopilot Deployment and Intune, you can manage Unified Extensible Firmware Interface (UEFI) settings after they're enrolled by using the Device Firmware Configuration Interface (DFCI). DFCI [enables Windows to pass management commands](https://docs.microsoft.com/windows/client-management/mdm/uefi-csp) from Intune to UEFI to Autopilot deployed devices. This allows you to limit end user's control over BIOS settings. For example, you can lock down the boot options to prevent users from booting up another OS, such as one that doesn't have the same security features. - -If a user reinstalls a previous Windows version, install a separate OS, or format the hard drive, they can't override DFCI management. This feature can also prevent malware from communicating with OS processes, including elevated OS processes. DFCI’s trust chain uses public key cryptography, and doesn't depend on local UEFI password security. This layer of security blocks local users from accessing managed settings from the device’s UEFI menus. - -For an overview of DFCI benefits, scenarios, and prerequisites, see [Device Firmware Configuration Interface (DFCI) Introduction](https://microsoft.github.io/mu/dyn/mu_plus/DfciPkg/Docs/Dfci_Feature/). - -## DFCI management lifecycle - -The DFCI management lifecycle can be viewed as UEFI integration, device registration, profile creation, enrollment, management, retirement, and recovery. See the following figure. - - ![Lifecycle](images/dfci.png) - -## Requirements - -- Windows 10, version 1809 or later and a supported UEFI is required. -- The device manufacturer must have DFCI added to their UEFI firmware in the manufacturing process, or as a firmware update that you install. Work with your device vendors to determine the [manufacturers that support DFCI](#oems-that-support-dfci), or the firmware version needed to use DFCI. -- The device must be managed with Microsoft Intune. For more information, see [Enroll Windows devices in Intune using Windows Autopilot](https://docs.microsoft.com/intune/enrollment/enrollment-autopilot). -- The device must be registered for Windows Autopilot by a [Microsoft Cloud Solution Provider (CSP) partner](https://partner.microsoft.com/membership/cloud-solution-provider), or registered directly by the OEM. - ->[!IMPORTANT] ->Devices manually registered for Autopilot (such as by [importing from a csv file](https://docs.microsoft.com/intune/enrollment/enrollment-autopilot#add-devices)) are not allowed to use DFCI. By design, DFCI management requires external attestation of the device’s commercial acquisition through an OEM or a Microsoft CSP partner registration to Windows Autopilot. When your device is registered, its serial number is displayed in the list of Windows Autopilot devices. - -## Managing DFCI profile with Windows Autopilot - -There are four basic steps in managing DFCI profile with Windows Autopilot: - -1. Create an Autopilot Profile -2. Create an Enrollment status page profile -3. Create a DFCI profile -4. Assign the profiles - -See [Create the profiles](https://docs.microsoft.com/intune/configuration/device-firmware-configuration-interface-windows#create-the-profiles) and [Assign the profiles, and reboot](https://docs.microsoft.com/intune/configuration/device-firmware-configuration-interface-windows#assign-the-profiles-and-reboot) for details. - -You can also [change existing DFCI settings](https://docs.microsoft.com/intune/configuration/device-firmware-configuration-interface-windows#update-existing-dfci-settings) on devices that are in use. In your existing DFCI profile, change the settings and save your changes. Since the profile is already assigned, the new DFCI settings take effect when next time the device syncs or the device reboots. - -## OEMs that support DFCI - -- [Microsoft Surface](https://docs.microsoft.com/surface/surface-manage-dfci-guide) - -Additional OEMs are pending. - -## See also - -[Microsoft DFCI Scenarios](https://microsoft.github.io/mu/dyn/mu_plus/DfciPkg/Docs/Scenarios/DfciScenarios/)
-[Windows Autopilot and Surface devices](https://docs.microsoft.com/surface/windows-autopilot-and-surface-devices)
\ No newline at end of file diff --git a/windows/deployment/windows-autopilot/enrollment-status.md b/windows/deployment/windows-autopilot/enrollment-status.md deleted file mode 100644 index 11a393eada..0000000000 --- a/windows/deployment/windows-autopilot/enrollment-status.md +++ /dev/null @@ -1,39 +0,0 @@ ---- -title: Windows Autopilot Enrollment Status Page -ms.reviewer: -manager: laurawi -description: Gives an overview of the Enrollment Status Page capabilities, configuration -keywords: Autopilot Plug and Forget, Windows 10 -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: deploy -ms.localizationpriority: medium -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# Windows Autopilot Enrollment Status Page - -**Applies to** - -- Windows 10, version 1803 and later - -The Enrollment Status Page (ESP) displays the status of the complete device configuration process when an MDM managed user signs into a device for the very first time. The ESP will help users understand the progress of device provisioning and ensures the device has met the organizations desired state before the user can access the desktop for the first time. - -The ESP will track the installation of applications, security policies, certificates and network connections. Within Intune, an administrator can deploy ESP profiles to a licensed Intune user and configure specific settings within the ESP profile; a few of these settings are: force the installation of specified applications, allow users to collect troubleshooting logs, specify what a user can do if device setup fails. For more information, see how to set up the [Enrollment Status Page in Intune](https://docs.microsoft.com/intune/windows-enrollment-status). - - ![Enrollment Status Page](images/enrollment-status-page.png) - - -## More information - -For more information on configuring the Enrollment Status Page, see the [Microsoft Intune documentation](https://docs.microsoft.com/intune/windows-enrollment-status).
-For details about the underlying implementation, see the [FirstSyncStatus details in the DMClient CSP documentation](https://docs.microsoft.com/windows/client-management/mdm/dmclient-csp).
-For more information about blocking for app installation: -- [Blocking for app installation using Enrollment Status Page](https://blogs.technet.microsoft.com/mniehaus/2018/12/06/blocking-for-app-installation-using-enrollment-status-page/). -- [Support Tip: Office C2R installation is now tracked during ESP](https://techcommunity.microsoft.com/t5/Intune-Customer-Success/Support-Tip-Office-C2R-installation-is-now-tracked-during-ESP/ba-p/295514). diff --git a/windows/deployment/windows-autopilot/existing-devices.md b/windows/deployment/windows-autopilot/existing-devices.md deleted file mode 100644 index 2ea6052a20..0000000000 --- a/windows/deployment/windows-autopilot/existing-devices.md +++ /dev/null @@ -1,324 +0,0 @@ ---- -title: Windows Autopilot for existing devices -description: Modern desktop deployment with Windows Autopilot enables you to easily deploy the latest version of Windows 10 to your existing devices. -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.reviewer: mniehaus -manager: laurawi -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: deploy -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - -# Windows Autopilot for existing devices - -**Applies to: Windows 10** - -Modern desktop deployment with Windows Autopilot enables you to easily deploy the latest version of Windows 10 to your existing devices. The apps you need for work can be automatically installed. Your work profile is synchronized, so you can resume working right away. - -This topic describes how to convert Windows 7 or Windows 8.1 domain-joined computers to Windows 10 devices joined to either Azure Active Directory or Active Directory (Hybrid Azure AD Join) by using Windows Autopilot. - ->[!NOTE] ->Windows Autopilot for existing devices only supports user-driven Azure Active Directory and Hybrid Azure AD profiles. Self-deploying profiles are not supported. - -## Prerequisites - -- A currently supported version of Microsoft Endpoint Configuration Manager current branch or technical preview branch. -- The [Windows ADK](https://developer.microsoft.com/en-us/windows/hardware/windows-assessment-deployment-kit) 1803 or later - - For more information on Configuration Manager support, see [Support for Windows 10 ADK](https://docs.microsoft.com/configmgr/core/plan-design/configs/support-for-windows-10#windows-10-adk). -- Assigned Microsoft Intune Licenses -- Azure Active Directory Premium -- Windows 10 version 1809 or later imported into Configuration Manager as an Operating System Image - - **Important**: See [Known issues](known-issues.md) if you are using Windows 10 1903 with Configuration Manager’s built-in **Windows Autopilot existing device** task sequence template. Currently, one of the steps in this task sequence must be edited to work properly with Windows 10, version 1903. - -## Procedures - -### Configure the Enrollment Status Page (optional) - -If desired, you can set up an [enrollment status page](https://docs.microsoft.com/windows/deployment/windows-autopilot/enrollment-status) for Autopilot using Intune. - -To enable and configure the enrollment and status page: - -1. Open [Intune in the Azure portal](https://aka.ms/intuneportal). -2. Access **Intune > Device enrollment > Windows enrollment** and [Set up an enrollment status page](https://docs.microsoft.com/intune/windows-enrollment-status). -3. Access **Azure Active Directory > Mobility (MDM and MAM) > Microsoft Intune** and [Configure automatic MDM enrollment](https://docs.microsoft.com/configmgr/mdm/deploy-use/enroll-hybrid-windows#enable-windows-10-automatic-enrollment) and configure the MDM user scope for some or all users. - -See the following examples. - -![enrollment status page](images/esp-config.png)

-![mdm](images/mdm-config.png) - -### Create the JSON file - ->[!TIP] ->To run the following commands on a computer running Windows Server 2012/2012 R2 or Windows 7/8.1, you must first download and install the [Windows Management Framework](https://www.microsoft.com/download/details.aspx?id=54616). - -1. On an Internet connected Windows PC or server, open an elevated Windows PowerShell command window -2. Enter the following lines to install the necessary modules - - #### Install required modules - - ```powershell - Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5.201 -Force - Install-Module AzureAD -Force - Install-Module WindowsAutopilotIntune -Force - Install-Module Microsoft.Graph.Intune -Force - ``` - -3. Enter the following lines and provide Intune administrative credentials - - Be sure that the user account you specify has sufficient administrative rights. - - ```powershell - Connect-MSGraph - ``` - The user and password for your account will be requested using a standard Azure AD form. Type your username and password and then click **Sign in**. -
See the following example: - - ![Azure AD authentication](images/pwd.png) - - If this is the first time you’ve used the Intune Graph APIs, you’ll also be prompted to enable read and write permissions for Microsoft Intune PowerShell. To enable these permissions: - - Select **Consent on behalf or your organization** - - Click **Accept** - -4. Next, retrieve and display all the Autopilot profiles available in the specified Intune tenant in JSON format: - - #### Retrieve profiles in Autopilot for existing devices JSON format - - ```powershell - Get-AutopilotProfile | ConvertTo-AutopilotConfigurationJSON - ``` - - See the following sample output: (use the horizontal scroll bar at the bottom to view long lines) - 
-    PS C:\> Get-AutopilotProfile | ConvertTo-AutopilotConfigurationJSON
-    {
-        "CloudAssignedTenantId":  "1537de22-988c-4e93-b8a5-83890f34a69b",
-        "CloudAssignedForcedEnrollment":  1,
-        "Version":  2049,
-        "Comment_File":  "Profile Autopilot Profile",
-        "CloudAssignedAadServerData":  "{\"ZeroTouchConfig\":{\"CloudAssignedTenantUpn\":\"\",\"ForcedEnrollment\":1,\"CloudAssignedTenantDomain\":\"M365x373186.onmicrosoft.com\"}}",
-        "CloudAssignedTenantDomain":  "M365x373186.onmicrosoft.com",
-        "CloudAssignedDomainJoinMethod":  0,
-        "CloudAssignedOobeConfig":  28,
-        "ZtdCorrelationId":  "7F9E6025-1E13-45F3-BF82-A3E8C5B59EAC"
-    }
- - Each profile is encapsulated within braces **{ }**. In the previous example, a single profile is displayed. - - See the following table for a description of properties used in the JSON file. - - - | Property | Description | - |------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| - | Version (number, optional) | The version number that identifies the format of the JSON file. For Windows 10 1809, the version specified must be 2049. | - | CloudAssignedTenantId (guid, required) | The Azure Active Directory tenant ID that should be used. This is the GUID for the tenant, and can be found in properties of the tenant. The value should not include braces. | - | CloudAssignedTenantDomain (string, required) | The Azure Active Directory tenant name that should be used, for example: tenant.onmicrosoft.com. | - | CloudAssignedOobeConfig (number, required) | This is a bitmap that shows which Autopilot settings were configured. Values include: SkipCortanaOptIn = 1, OobeUserNotLocalAdmin = 2, SkipExpressSettings = 4, SkipOemRegistration = 8, SkipEula = 16 | - | CloudAssignedDomainJoinMethod (number, required) | This property specifies whether the device should join Azure Active Directory or Active Directory (Hybrid Azure AD Join). Values include: Active AD Join = 0, Hybrid Azure AD Join = 1 | - | CloudAssignedForcedEnrollment (number, required) | Specifies that the device should require AAD Join and MDM enrollment.
0 = not required, 1 = required. | - | ZtdCorrelationId (guid, required) | A unique GUID (without braces) that will be provided to Intune as part of the registration process. ZtdCorrelationId will be included in enrollment message as “OfflineAutoPilotEnrollmentCorrelator”. This attribute will be present only if the enrollment is taking place on a device registered with Zero Touch Provisioning via offline registration. | - | CloudAssignedAadServerData (encoded JSON string, required) | An embedded JSON string used for branding. It requires AAD corp branding enabled.
Example value: "CloudAssignedAadServerData": "{\"ZeroTouchConfig\":{\"CloudAssignedTenantUpn\":\"\",\"CloudAssignedTenantDomain\":\"tenant.onmicrosoft.com\"}}" | - | CloudAssignedDeviceName (string, optional) | The name automatically assigned to the computer. This follows the naming pattern convention that can be configured in Intune as part of the Autopilot profile, or can specify an explicit name to use. | - - -5. The Autopilot profile must be saved as a JSON file in ASCII or ANSI format. Windows PowerShell defaults to Unicode format, so if you attempt to redirect output of the commands to a file, you must also specify the file format. For example, to save the file in ASCII format using Windows PowerShell, you can create a directory (ex: c:\Autopilot) and save the profile as shown below: (use the horizontal scroll bar at the bottom if needed to view the entire command string) - - ```powershell - Get-AutopilotProfile | ConvertTo-AutopilotConfigurationJSON | Out-File c:\Autopilot\AutopilotConfigurationFile.json -Encoding ASCII - ``` - **IMPORTANT**: The file name must be named **AutopilotConfigurationFile.json** in addition to being encoded as ASCII/ANSI. - - If preferred, you can save the profile to a text file and edit in Notepad. In Notepad, when you choose **Save as** you must select Save as type: **All Files** and choose ANSI from the drop-down list next to **Encoding**. See the following example. - - ![Notepad JSON](images/notepad.png) - - After saving the file, move the file to a location suitable as a Microsoft Endpoint Configuration Manager package source. - - >[!IMPORTANT] - >Multiple JSON profile files can be used, but each must be named **AutopilotConfigurationFile.json** in order for OOBE to follow the Autopilot experience. The file also must be encoded as ANSI.

**Saving the file with Unicode or UTF-8 encoding or saving it with a different file name will cause Windows 10 OOBE to not follow the Autopilot experience**.
- - -### Create a package containing the JSON file - -1. In Configuration Manager, navigate to **\Software Library\Overview\Application Management\Packages** -2. On the ribbon, click **Create Package** -3. In the **Create Package and Program Wizard** enter the following **Package** and **Program Type** details:
- - Name: **Autopilot for existing devices config** - - Select the **This package contains source files** checkbox - - Source folder: Click **Browse** and specify a UNC path containing the AutopilotConfigurationFile.json file. - - Click **OK** and then click **Next**. - - Program Type: **Do not create a program** -4. Click **Next** twice and then click **Close**. - -**NOTE**: If you change user-driven Autopilot profile settings in Intune at a later date, you must also update the JSON file and redistribute the associated Configuration Manager package. - -### Create a target collection - ->[!NOTE] ->You can also choose to reuse an existing collection - -1. Navigate to **\Assets and Compliance\Overview\Device Collections** -2. On the ribbon, click **Create** and then click **Create Device Collection** -3. In the **Create Device Collection Wizard** enter the following **General** details: - - Name: **Autopilot for existing devices collection** - - Comment: (optional) - - Limiting collection: Click **Browse** and select **All Systems** - - >[!NOTE] - >You can optionally choose to use an alternative collection for the limiting collection. The device to be upgraded must be running the ConfigMgr agent in the collection that you select. - -4. Click **Next**, then enter the following **Membership Rules** details: - - Click **Add Rule** and specify either a direct or query based collection rule to add the target test Windows 7 devices to the new collection. - - For example, if the hostname of the computer to be wiped and reloaded is PC-01 and you wish to use Name as the attribute, click **Add Rule > Direct Rule > (wizard opens) > Next** and then enter **PC-01** next to **Value**. Click **Next**, and then choose **PC-01** under **Resources**. See the following examples. - - ![Named resource1](images/pc-01a.png) - ![Named resource2](images/pc-01b.png) - -5. Continue creating the device collection with the default settings: - - Use incremental updates for this collection: not selected - - Schedule a full update on this collection: default - - Click **Next** twice and then click **Close** - -### Create an Autopilot for existing devices Task Sequence - ->[!TIP] ->The next procedure requires a boot image for Windows 10 1803 or later. Review your available boot images in the Configuration Manager conole under **Software Library\Overview\Operating Systems\Boot images** and verify that the **OS Version** is 10.0.17134.1 (Windows 10 version 1803) or later. - -1. In the Configuration Manager console, navigate to **\Software Library\Overview\Operating Systems\Task Sequences** -2. On the Home ribbon, click **Create Task Sequence** -3. Select **Install an existing image package** and then click **Next** -4. In the Create Task Sequence Wizard enter the following details: - - Task sequence name: **Autopilot for existing devices** - - Boot Image: Click **Browse** and select a Windows 10 boot image (1803 or later) - - Click **Next**, and then on the Install Windows page click **Browse** and select a Windows 10 **Image package** and **Image Index**, version 1803 or later. - - Select the **Partition and format the target computer before installing the operating system** checkbox. - - Select or clear **Configure task sequence for use with BitLocker** checkbox. This is optional. - - Product Key and Server licensing mode: Optionally enter a product key and server licensing mode. - - Randomly generate the local administrator password and disable the account on all support platforms (recommended): Optional. - - Enable the account and specify the local administrator password: Optional. - - Click **Next**, and then on the Configure Network page choose **Join a workgroup** and specify a name (ex: workgroup) next to **Workgroup**. - - > [!IMPORTANT] - > The Autopilot for existing devices task sequence will run the **Prepare Windows for capture** action which uses the System Preparation Tool (sysprep). This action will fail if the target machine is joined to a domain. - - >[!IMPORTANT] - > The System Preparation Tool (sysprep) will run with the /Generalize parameter which, on Windows 10 versions 1903 and 1909, will delete the Autopilot profile file and the machine will boot into OOBE phase instead of Autopilot phase. To fix this issue, please see [Windows Autopilot - known issues](https://docs.microsoft.com/windows/deployment/windows-autopilot/known-issues). - -5. Click **Next**, and then click **Next** again to accept the default settings on the Install Configuration Manager page. -6. On the State Migration page, enter the following details: - - Clear the **Capture user settings and files** checkbox. - - Clear the **Capture network settings** checkbox. - - Clear the **Capture Microsoft Windows settings** checkbox. - - Click **Next**. - - >[!NOTE] - >Because the Autopilot for existing devices task sequence completes while in Windows PE, User State Migration Toolkit (USMT) data migration is not supported as there is no way to restore the user state into the new OS. Also, the User State Migration Toolkit (USMT) does not support Azure AD-joined devices. - -7. On the Include Updates page, choose one of the three available options. This selection is optional. -8. On the Install applications page, add applications if desired. This is optional. -9. Click **Next**, confirm settings, click **Next**, and then click **Close**. -10. Right click on the Autopilot for existing devices task sequence and click **Edit**. -11. In the Task Sequence Editor under the **Install Operating System** group, click the **Apply Windows Settings** action. -12. Click **Add** then click **New Group**. -13. Change the group **Name** from **New Group** to **Autopilot for existing devices config**. -14. Click **Add**, point to **General**, then click **Run Command Line**. -15. Verify that the **Run Command Line** step is nested under the **Autopilot for existing devices config** group. -16. Change the **Name** to **Apply Autopilot for existing devices config file** and paste the following into the **Command line** text box, and then click **Apply**: - ``` - cmd.exe /c xcopy AutopilotConfigurationFile.json %OSDTargetSystemDrive%\windows\provisioning\Autopilot\ /c - ``` - - **AutopilotConfigurationFile.json** must be the name of the JSON file present in the Autopilot for existing devices package created earlier. - -17. In the **Apply Autopilot for existing devices config file** step, select the **Package** checkbox and then click **Browse**. -18. Select the **Autopilot for existing devices config** package created earlier and click **OK**. An example is displayed at the end of this section. -19. Under the **Setup Operating System** group, click the **Setup Windows and Configuration Manager** task. -20. Click **Add** and then click **New Group**. -21. Change **Name** from **New Group** to **Prepare Device for Autopilot** -22. Verify that the **Prepare Device for Autopilot** group is the very last step in the task sequence. Use the **Move Down** button if necessary. -23. With the **Prepare device for Autopilot** group selected, click **Add**, point to **Images** and then click **Prepare ConfigMgr Client for Capture**. -24. Add a second step by clicking **Add**, pointing to **Images**, and clicking **Prepare Windows for Capture**. Use the following settings in this step: - - Automatically build mass storage driver list: **Not selected** - - Do not reset activation flag: **Not selected** - - Shut down the computer after running this action: **Optional** - - ![Autopilot task sequence](images/ap-ts-1.png) - -25. Click **OK** to close the Task Sequence Editor. - -> [!NOTE] -> On Windows 10 1903 and 1909, the **AutopilotConfigurationFile.json** is deleted by the **Prepare Windows for Capture** step. See [Windows Autopilot - known issues](https://docs.microsoft.com/windows/deployment/windows-autopilot/known-issues) for more information and a workaround. - -### Deploy Content to Distribution Points - -Next, ensure that all content required for the task sequence is deployed to distribution points. - -1. Right click on the **Autopilot for existing devices** task sequence and click **Distribute Content**. -2. Click **Next**, **Review the content to distribute**, and then click **Next**. -3. On the Specify the content distribution page click **Add** to specify either a **Distribution Point** or **Distribution Point Group**. -4. On the Add Distribution Points or Add Distribution Point Groups wizard specify content destinations that will allow the JSON file to be retrieved when the task sequence is run. -5. When you are finished specifying content distribution, click **Next** twice then click **Close**. - -### Deploy the OS with Autopilot Task Sequence - -1. Right click on the **Autopilot for existing devices** task sequence and then click **Deploy**. -2. In the Deploy Software Wizard enter the following **General** and **Deployment Settings** details: - - Task Sequence: **Autopilot for existing devices**. - - Collection: Click **Browse** and then select **Autopilot for existing devices collection** (or another collection you prefer). - - Click **Next** to specify **Deployment Settings**. - - Action: **Install**. - - Purpose: **Available**. You can optionally select **Required** instead of **Available**. This is not recommended during the test owing to the potential impact of inadvertent configurations. - - Make available to the following: **Only Configuration Manager Clients**. Note: Choose the option here that is relevant for the context of your test. If the target client does not have the Configuration Manager agent or Windows installed, you will need to select an option that includes PXE or Boot Media. - - Click **Next** to specify **Scheduling** details. - - Schedule when this deployment will become available: Optional - - Schedule when this deployment will expire: Optional - - Click **Next** to specify **User Experience** details. - - Show Task Sequence progress: Selected. - - Software Installation: Not selected. - - System restart (if required to complete the installation): Not selected. - - Commit changed at deadline or during a maintenance windows (requires restart): Optional. - - Allow task sequence to be run for client on the Internet: Optional - - Click **Next** to specify **Alerts** details. - - Create a deployment alert when the threshold is higher than the following: Optional. - - Click **Next** to specify **Distribution Points** details. - - Deployment options: **Download content locally when needed by the running task sequence**. - - When no local distribution point is available use a remote distribution point: Optional. - - Allow clients to use distribution points from the default site boundary group: Optional. - - Click **Next**, confirm settings, click **Next**, and then click **Close**. - -### Complete the client installation process - -1. Open the Software Center on the target Windows 7 or Windows 8.1 client computer. You can do this by clicking Start and then typing **software** in the search box, or by typing the following at a Windows PowerShell or command prompt: - - ``` - C:\Windows\CCM\SCClient.exe - ``` - -2. In the software library, select **Autopilot for existing devices** and click **Install**. See the following example: - - ![Named resource2](images/sc.png) - ![Named resource2](images/sc1.png) - -The Task Sequence will download content, reboot, format the drives and install Windows 10. The device will then proceed to be prepared for Autopilot. Once the task sequence has completed the device will boot into OOBE and provide an Autopilot experience. - -![refresh-1](images/up-1.png) -![refresh-2](images/up-2.png) -![refresh-3](images/up-3.png) - ->[!NOTE] ->If joining devices to Active Directory (Hybrid Azure AD Join), it is necessary to create a Domain Join device configuration profile that is targeted to "All Devices" (since there is no Azure Active Directory device object for the computer to do group-based targeting). See [User-driven mode for hybrid Azure Active Directory join](https://docs.microsoft.com/windows/deployment/windows-autopilot/user-driven#user-driven-mode-for-hybrid-azure-active-directory-join) for more information. - -### Register the device for Windows Autopilot - -Devices provisioned through Autopilot will only receive the guided OOBE Autopilot experience on first boot. Once updated to Windows 10, the device should be registered to ensure a continued Autopilot experience in the event of PC reset. You can enable automatic registration for an assigned group using the **Convert all targeted devices to Autopilot** setting. For more information, see [Create an Autopilot deployment profile](https://docs.microsoft.com/intune/enrollment-autopilot#create-an-autopilot-deployment-profile). - -Also see [Adding devices to Windows Autopilot](https://docs.microsoft.com/windows/deployment/windows-autopilot/add-devices). - -## Speeding up the deployment process - -To remove around 20 minutes from the deployment process, see Michael Niehaus's blog with instructions for [Speeding up Windows Autopilot for existing devices](https://blogs.technet.microsoft.com/mniehaus/2018/10/25/speeding-up-windows-autopilot-for-existing-devices/). diff --git a/windows/deployment/windows-autopilot/index.md b/windows/deployment/windows-autopilot/index.md deleted file mode 100644 index 93abebfa65..0000000000 --- a/windows/deployment/windows-autopilot/index.md +++ /dev/null @@ -1,78 +0,0 @@ ---- -title: Windows Autopilot deployment -description: Discover resources for Windows Autopilot deployment with this guide. -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.reviewer: mniehaus -manager: laurawi -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: deploy -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# Windows Autopilot deployment - -**Applies to** - -- Windows 10 - -Windows Autopilot is a zero-touch, self-service Windows deployment platform introduced with Windows 10, version 1703. The Windows Autopilot process runs immediately after powering on a new computer for the first time, enabling employees to configure new devices to be business-ready with just a few clicks. - -This guide is intended for use by an IT-specialist, system architect, or business decision maker. The guide provides information about how Windows Autopilot deployment works, including detailed requirements, deployment scenarios, and platform capabilities. The document highlights options that are available to you when planning a modern, cloud-joined Windows 10 deployment strategy. Links are provided to detailed step by step configuration procedures. - -## In this guide - - -
What's new Windows Autopilot is always being updated with new features! Check this topic to read about the latest capabilities. -
- -### Understanding Windows Autopilot - - -
Overview of Windows AutopilotA review of Windows Autopilot is provided with a video walkthrough. Benefits and general requirements are discussed. -
RequirementsDetailed software, network, licensing, and configuration requirements are provided. -
Scenarios and CapabilitiesA summary of Windows Autopilot deployment scenarios and capabilities. -
Get startedInterested in trying out Autopilot? See this step-by-step walkthrough to test Windows Autopilot on a virtual machine or physical device with a free 30-day trial premium Intune account. -
- -### Deployment scenarios - - -
User-driven modeRequirements and validation steps for deploying a new Azure Active Directory (AAD) joined or hybrid AAD-joined Windows 10 device are provided. -
Self-deploying modeRequirements and validation steps for deploying a new Windows 10 device with little to no user interaction are provided. -
Windows Autopilot ResetUsing Windows Autopilot Reset, a device can be restored to its original settings, taking it back to a business-ready state. Both local and remote reset scenarios are discussed. -
Windows Autopilot for white glove deploymentRequirements and procedures are described that enable additional policies and apps to be delivered to a Windows Autopilot device. -
Support for existing devicesThis topic describes how Windows Autopilot can be used to convert Windows 7 or Windows 8.1 domain-joined computers to AAD-joined computers running Windows 10. -
- -### Using Windows Autopilot - - -
Registering devicesThe process of registering a device with the Windows Autopilot deployment service is described. -
Configuring device profilesThe device profile settings that specific its behavior when it is deployed are described. -
Enrollment status pageSettings that are available on the Enrollment Status Page are described. -
BitLocker encryption Available options for configuring BitLocker on Windows Autopilot devices are described. -
DFCI management Manage UEFI settings using the Device Firmware Configuration Interface (DFCI) with Windows Autopilot and Intune. -
Troubleshooting Windows AutopilotDiagnostic event information and troubleshooting procedures are provided. -
Known issuesA list of current known issues and solutions is provided. -
- -### Support topics - - -
FAQFrequently asked questions on several topics are provided. -
Support contactsSupport information is provided. -
Registration authorizationThis article discusses how a CSP partner or OEM can obtain customer authorization to register Windows Autopilot devices. -
Motherboard replacementInformation about how to deal with Autopilot registration and device repair issues is provided. -
- -## Related topics - -[Windows Autopilot](https://www.microsoft.com/windowsforbusiness/windows-autopilot) diff --git a/windows/deployment/windows-autopilot/index.yml b/windows/deployment/windows-autopilot/index.yml new file mode 100644 index 0000000000..cb59230323 --- /dev/null +++ b/windows/deployment/windows-autopilot/index.yml @@ -0,0 +1,38 @@ +### YamlMime:Landing + +title: Windows Autopilot deployment resources and documentation # < 60 chars +summary: Learn about deploying Windows 10 with Autopilot. # < 160 chars + +metadata: + title: Windows Autopilot deployment resources and documentation # Required; page title displayed in search results. Include the brand. < 60 chars. + description: Learn about deploying Windows 10 and keeping it up to date in your organization. # Required; article description that is displayed in search results. < 160 chars. + services: windows-10 + ms.service: windows-10 #Required; service per approved list. service slug assigned to your service by ACOM. + ms.subservice: subservice + ms.topic: landing-page # Required + ms.collection: windows-10 + author: greg-lindsay #Required; your GitHub user alias, with correct capitalization. + ms.author: greglin #Required; microsoft alias of author; optional team alias. + ms.date: 08/05/2020 #Required; mm/dd/yyyy format. + localization_priority: medium + +# linkListType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | tutorial | video | whats-new + +landingContent: +# Cards and links should be based on top customer tasks or top subjects +# Start card title with a verb + # Card + - title: Overview + linkLists: + - linkListType: overview + links: + - text: Overview of Windows Autopilot + url: https://docs.microsoft.com/mem/autopilot/windows-autopilot + + # Card + - title: Tutorials + linkLists: + - linkListType: get-started + links: + - text: Demonstrate Windows Autopilot deployment + url: demonstrate-deployment-on-vm.md \ No newline at end of file diff --git a/windows/deployment/windows-autopilot/known-issues.md b/windows/deployment/windows-autopilot/known-issues.md deleted file mode 100644 index 8dbec94be5..0000000000 --- a/windows/deployment/windows-autopilot/known-issues.md +++ /dev/null @@ -1,89 +0,0 @@ ---- -title: Windows Autopilot known issues -ms.reviewer: -manager: laurawi -description: Inform yourself about known issues that may occur during Windows Autopilot deployment. -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: deploy -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# Windows Autopilot - known issues - -**Applies to** - -- Windows 10 - - - - - - - - - - - - - - - - -
IssueMore information - -
Blocking apps specified in a user-targeted Enrollment Status Profile are ignored during device ESP.The services responsible for determining the list of apps that should be blocking during device ESP are not able to determine the correct ESP profile containing the list of apps because they do not know the user identity. As a workaround, enable the default ESP profile (which targets all users and devices) and place the blocking app list there. In the future, it will be possible to instead target the ESP profile to device groups to avoid this issue.
That username looks like it belongs to another organization. Try signing in again or start over with a different account.Confirm that all of your information is correct at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Provisioning\Diagnostics\AutoPilot. See Troubleshooting Windows Auto Pilot for more details.
Windows Autopilot user-driven Hybrid Azure AD deployments do not grant users Administrator rights even when specified in the Windows Autopilot profile.This will occur when there is another user on the device that already has Administrator rights. For example, a PowerShell script or policy could create an additional local account that is a member of the Administrators group. To ensure this works properly, do not create an additional account until after the Windows Autopilot process has completed.
Windows Autopilot device provisioning can fail with TPM attestation errors or ESP timeouts on devices where the real-time clock is off by a significant amount of time (e.g. several minutes or more).To fix this issue:
  1. Boot the device to the start of the out-of-box experience (OOBE). -
  2. Establish a network connection (wired or wireless). -
  3. Run the command w32tm /resync /force to sync the time with the default time server (time.windows.com).
-
Windows Autopilot for existing devices does not work for Windows 10, version 1903 or 1909; you see screens that you've disabled in your Windows Autopilot profile, such as the Windows 10 License Agreement screen. -
 
-This happens because Windows 10, version 1903 and 1909 deletes the AutopilotConfigurationFile.json file. -		To fix this issue:
  1. Edit the Configuration Manager task sequence and disable the Prepare Windows for Capture step. -
  2. Add a new Run command line step that runs c:\windows\system32\sysprep\sysprep.exe /oobe /reboot.
-More information
TPM attestation fails on Windows 10 1903 due to missing AKI extension in EK certificate. (An additional validation added in Windows 10 1903 to check that the TPM EK certs had the proper attributes according to the TCG specifications uncovered that a number of them don’t, so that validation will be removed). -Download and install the KB4517211 update. -
The following known issues are resolved by installing the August 30, 2019 KB4512941 update (OS Build 18362.329): - -- Windows Autopilot for existing devices feature does not properly suppress “Activities” page during OOBE. (Because of this, you’ll see that extra page during OOBE). -- TPM attestation state is not cleared by sysprep /generalize, causing TPM attestation failure during later OOBE flow. (This isn’t a particularly common issue, but you could run into it while testing if you are running sysprep /generalize and then rebooting or reimaging the device to go back through an Autopilot white glove or self-deploying scenario). -- TPM attestation may fail if the device has a valid AIK cert but no EK cert. (This is related to the previous item). -- If TPM attestation fails during the Windows Autopilot white glove process, the landing page appears to be hung. (Basically, the white glove landing page, where you click “Provision” to start the white glove process, isn’t reporting errors properly). -- TPM attestation fails on newer Infineon TPMs (firmware version > 7.69). (Prior to this fix, only a specific list of firmware versions was accepted). -- Device naming templates may truncate the computer name at 14 characters instead of 15. -- Assigned Access policies cause a reboot which can interfere with the configuration of single-app kiosk devices. -Download and install the KB4512941 update.

See the section: How to get this update for information on specific release channels you can use to obtain the update. -
The following known issues are resolved by installing the July 26, 2019 KB4505903 update (OS Build 18362.267): - -- Windows Autopilot white glove does not work for a non-English OS and you see a red screen that says "Success." -- Windows Autopilot reports an AUTOPILOTUPDATE error during OOBE after sysprep, reset or other variations. This typically happens if you reset the OS or used a custom sysprepped image. -- BitLocker encryption is not correctly configured. Ex: BitLocker didn’t get an expected notification after policies were applied to begin encryption. -- You are unable to install UWP apps from the Microsoft Store, causing failures during Windows Autopilot. If you are deploying Company Portal as a blocking app during Windows Autopilot ESP, you’ve probably seen this error. -- A user is not granted administrator rights in the Windows Autopilot user-driven Hybrid Azure AD join scenario. This is another non-English OS issue. -Download and install the KB4505903 update.

See the section: How to get this update for information on specific release channels you can use to obtain the update. -
Windows Autopilot self-deploying mode fails with an error code: - -
0x800705B4This is a general error indicating a timeout. A common cause of this error in self-deploying mode is that the device is not TPM 2.0 capable (ex: a virtual machine). Devices that are not TPM 2.0 capable cannot be used with self-deploying mode. -
0x801c03eaThis error indicates that TPM attestation failed, causing a failure to join Azure Active Directory with a device token. -
0xc1036501The device cannot do an automatic MDM enrollment because there are multiple MDM configurations in Azure AD. See Inside Windows Autopilot self-deploying mode. -
-
White glove gives a red screen and the Microsoft-Windows-User Device Registration/Admin event log displays HResult error code 0x801C03F3This can happen if Azure AD can’t find an AAD device object for the device that you are trying to deploy. This will occur if you manually delete the object. To fix it, remove the device from AAD, Intune, and Autopilot, then re-register it with Autopilot, which will recreate the AAD device object.
-
To obtain troubleshooting logs use: Mdmdiagnosticstool.exe -area Autopilot;TPM -cab c:\autopilot.cab -
White glove gives a red screenWhite glove is not supported on a VM. -
Error importing Windows Autopilot devices from a .csv fileEnsure that you have not edited the .csv file in Microsoft Excel or an editor other than Notepad. Some of these editors can introduce extra characters causing the file format to be invalid. -
Windows Autopilot for existing devices does not follow the Autopilot OOBE experience.Ensure that the JSON profile file is saved in ANSI/ASCII format, not Unicode or UTF-8. -
Something went wrong is displayed page during OOBE.The client is likely unable to access all the required AAD/MSA-related URLs. For more information, see Networking requirements. -
Using a provisioning package in combination with Windows Autopilot can cause issues, especially if the PPKG contains join, enrollment, or device name information.Using PPKGs in combination with Windows Autopilot is not recommended. -
- -## Related topics - -[Diagnose MDM failures in Windows 10](https://docs.microsoft.com/windows/client-management/mdm/diagnose-mdm-failures-in-windows-10)
-[Troubleshooting Windows Autopilot](troubleshooting.md) diff --git a/windows/deployment/windows-autopilot/policy-conflicts.md b/windows/deployment/windows-autopilot/policy-conflicts.md deleted file mode 100644 index 3c4126ff73..0000000000 --- a/windows/deployment/windows-autopilot/policy-conflicts.md +++ /dev/null @@ -1,45 +0,0 @@ ---- -title: Windows Autopilot policy conflicts -ms.reviewer: -manager: laurawi -description: Inform yourself about known issues that may occur during Windows Autopilot deployment. -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: deploy -audience: itpro -author: mtniehaus -ms.author: mniehaus -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# Windows Autopilot - Policy Conflicts - -**Applies to** - -- Windows 10 - -There are a significant number of policy settings available for Windows 10, both as native MDM policies and group policy (ADMX-backed) settings. Some of these can cause issues in certain Windows Autopilot scenarios as a result of how they change the behavior of Windows 10. If you encounter any of these issues, remove the policy in question to resolve the issue. - - - - - - - - - - - -
PolicyMore information - -
Device restriction / Password PolicyWhen certain DeviceLock policies, such as minimum password length and password complexity, or any similar group policy settings (including any that disable autologon) are applied to a device, and that device reboots during the device Enrollment Status Page (ESP), the out-of-box experience (OOBE) or user desktop autologon can fail unexpectantly. This is especially true for kiosk scenarios where passwords are automatically generated.
Windows 10 Security Baseline / Administrator elevation prompt behavior -
Windows 10 Security Baseline / Require admin approval mode for administrators		When modifying user account control (UAC) settings during the OOBE using the device Enrollment Status Page (ESP), additional UAC prompts may result, especially if the device reboots after these policies are applied, enabling them to take effect. To work around this issue, the policies can be targeted to users instead of devices so that they apply later in the process.
Device restrictions / Cloud and Storage / Microsoft Account sign-in assistantSetting this policy to "disabled" will disable the Microsoft Sign-in Assistant service (wlidsvc). This service is required by Windows Autopilot to obtain the Windows Autopilot profile.
- -## Related topics - -[Troubleshooting Windows Autopilot](troubleshooting.md) diff --git a/windows/deployment/windows-autopilot/profiles.md b/windows/deployment/windows-autopilot/profiles.md deleted file mode 100644 index 5cb74ed199..0000000000 --- a/windows/deployment/windows-autopilot/profiles.md +++ /dev/null @@ -1,49 +0,0 @@ ---- -title: Configure Autopilot profiles -description: Learn how to configure device profiles while performing a Windows Autopilot deployment. -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.reviewer: mniehaus -manager: laurawi -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: deploy -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# Configure Autopilot profiles - -**Applies to** - -- Windows 10 - -For each device that has been defined to the Windows Autopilot deployment service, a profile of settings needs to be applied that specifies the exact behavior of that device when it is deployed. For detailed procedures on how to configure profile settings and register devices, see [Registering devices](add-devices.md#registering-devices). - -## Profile settings - -The following profile settings are available: - -- **Skip Cortana, OneDrive and OEM registration setup pages**. All devices registered with Autopilot will automatically skip these pages during the out-of-box experience (OOBE) process. - -- **Automatically setup for work or school**. All devices registered with Autopilot will automatically be considered work or school devices, so this question will not be asked during the OOBE process. - -- **Sign in experience with company branding**. Instead of presenting a generic Azure Active Directory sign-in page, all devices registered with Autopilot will automatically present a customized sign-in page with the organization’s name, logon, and additional help text, as configured in Azure Active Directory. See [Add company branding to your directory](https://docs.microsoft.com/azure/active-directory/customize-branding#add-company-branding-to-your-directory) to customize these settings. - -- **Skip privacy settings**. This optional Autopilot profile setting enables organizations to not ask about privacy settings during the OOBE process. This is typically desirable so that the organization can configure these settings via Intune or other management tool. - -- **Disable local admin account creation on the device**. Organizations can decide whether the user setting up the device should have administrator access once the process is complete. - -- **Skip End User License Agreement (EULA)**. Starting in Windows 10 version 1709, organizations can decide to skip the EULA page presented during the OOBE process. This means that organizations accept the EULA terms on behalf of their users. - -- **Disable Windows consumer features**. Starting in Windows 10 version 1803, organizations can disable Windows consumer features so that the device does not automatically install any additional Microsoft Store apps when the user first signs into the device. See the [MDM documentation](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-experience#experience-allowwindowsconsumerfeatures) for more details. - -## Related topics - -[Profile download](troubleshooting.md#profile-download) -[Registering devices](add-devices.md) diff --git a/windows/deployment/windows-autopilot/registration-auth.md b/windows/deployment/windows-autopilot/registration-auth.md deleted file mode 100644 index 547b2f07ea..0000000000 --- a/windows/deployment/windows-autopilot/registration-auth.md +++ /dev/null @@ -1,94 +0,0 @@ ---- -title: Windows Autopilot customer consent -description: Learn how a cloud service provider (CSP) partner or an OEM can get customer authorization to register Windows Autopilot devices on the customer’s behalf. -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.reviewer: mniehaus -manager: laurawi -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: deploy -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# Windows Autopilot customer consent - -**Applies to: Windows 10** - -This article describes how a cloud service provider (CSP) partner (direct bill, indirect provider, or indirect reseller) or an OEM can get customer authorization to register Windows Autopilot devices on the customer’s behalf. - -## CSP authorization - -CSP partners can get customer authorization to register Windows Autopilot devices on the customer’s behalf per the following restrictions: - - -
Direct CSPGets direct authorization from the customer to register devices. -
Indirect CSP ProviderGets implicit permission to register devices through the relationship their CSP Reseller partner has with the customer. Indirect CSP Providers register devices through Microsoft Partner Center. -
Indirect CSP ResellerGets direct authorization from the customer to register devices. At the same time, their indirect CSP Provider partner also gets authorization, which mean that either the Indirect Provider or the Indirect Reseller can register devices for the customer. However, the Indirect CSP Reseller must register devices through the MPC UI (manually uploading CSV file), whereas the Indirect CSP Provider has the option to register devices using the MPC APIs. -
- -### Steps - -For a CSP to register Windows Autopilot devices on behalf of a customer, the customer must first grant that CSP partner permission using the following process: - -1. CSP sends link to customer requesting authorization/consent to register/manage devices on their behalf. To do so: - - CSP logs into Microsoft Partner Center - - Click **Dashboard** on the top menu - - Click **Customer** on the side menu - - Click the **Request a reseller relationship** link: - ![Request a reseller relationship](images/csp1.png) - - Select the checkbox indicating whether or not you want delegated admin rights: - ![Delegated rights](images/csp2.png) - - NOTE: Depending on your partner, they might request Delegated Admin Permissions (DAP) when requesting this consent. You should ask them to use the newer DAP-free process (shown in this document) if possible. If not, you can easily remove their DAP status either from Microsoft Admin Center or the Office 365 admin portal: https://docs.microsoft.com/partner-center/customers_revoke_admin_privileges - - Send the template above to the customer via email. -2. Customer with global administrator privileges in Microsoft Admin Center clicks the link in the body of the email once they receive it from the CSP, which takes them directly to the following Microsoft 365 admin center page: - - ![Global admin](images/csp3a.png) - - The image above is what the customer will see if they requested delegated admin rights (DAP). Note that the page says what Admin roles are being requested. If the customer did not request delegated admin rights they would see the following page: - - ![Global admin](images/csp3b.png) - - > [!NOTE] - > A user without global admin privileges who clicks the link will see a message similar to the following: - - ![Not global admin](images/csp4.png) - -3. Customer selects the **Yes** checkbox, followed by the **Accept** button. Authorization happens instantaneously. -4. The CSP will know that this consent/authorization request has been completed because the customer will show up in the CSP’s MPC account under their **customers** list, for example: - -![Customers](images/csp5.png) - -## OEM authorization - -Each OEM has a unique link to provide to their respective customers, which the OEM can request from Microsoft via msoemops@microsoft.com. - -1. OEM emails link to their customer. -2. Customer with global administrator privileges in Microsoft Store for Business (MSfB) clicks the link once they receive it from the OEM, which takes them directly to the following MSfB page: - - ![Global admin](images/csp6.png) - - > [!NOTE] - > A user without global admin privileges who clicks the link will see a message similar to the following: - - ![Not global admin](images/csp7.png) -3. Customer selects the **Yes** checkbox, followed by the **Accept** button, and they’re done. Authorization happens instantaneously. - - > [!NOTE] - > Once this process has completed, it is not currently possible for an administrator to remove an OEM. To remove an OEM or revoke - their permissions, send a request to msoemops@microsoft.com - -4. The OEM can use the Validate Device Submission Data API to verify the consent has completed. This API is discussed in the latest version of the API Whitepaper, p. 14ff [https://devicepartner.microsoft.com/assets/detail/windows-autopilot-integration-with-oem-api-design-whitepaper-docx](https://devicepartner.microsoft.com/assets/detail/windows-autopilot-integration-with-oem-api-design-whitepaper-docx). **Note**: this link is only accessible by Microsoft Device Partners. As discussed in this whitepaper, it’s a best practice recommendation for OEM partners to run the API check to confirm they’ve received customer consent before attempting to register devices, thus avoiding errors in the registration process. - - > [!NOTE] - > During the OEM authorization registration process, no delegated admin permissions are granted to the OEM. - -## Summary - -At this stage of the process, Microsoft is no longer involved; the consent exchange happens directly between the OEM and the customer. And, it all happens instantaneously - as quickly as buttons are clicked. diff --git a/windows/deployment/windows-autopilot/self-deploying.md b/windows/deployment/windows-autopilot/self-deploying.md deleted file mode 100644 index 4bdb15131d..0000000000 --- a/windows/deployment/windows-autopilot/self-deploying.md +++ /dev/null @@ -1,74 +0,0 @@ ---- -title: Windows Autopilot Self-Deploying mode -description: Self-deploying mode allows a device to be deployed with little to no user interaction. This mode mode is designed to deploy Windows 10 as a kiosk, digital signage device, or a shared device. -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.reviewer: mniehaus -manager: laurawi -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: deploy -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - -# Windows Autopilot Self-Deploying mode - -**Applies to: Windows 10, version 1903 or later** - -Windows Autopilot self-deploying mode enables a device to be deployed with little to no user interaction. For devices with an Ethernet connection, no user interaction is required; for devices connected via Wi-fi, no interaction is required after making the Wi-fi connection (choosing the language, locale, and keyboard, then making a network connection). - -Self-deploying mode joins the device into Azure Active Directory, enrolls the device in Intune (or another MDM service) leveraging Azure AD for automatic MDM enrollment, and ensures that all policies, applications, certificates, and networking profiles are provisioned on the device, leveraging the enrollment status page to prevent access to the desktop until the device is fully provisioned. - ->[!NOTE] ->Self-deploying mode does not support Active Directory Join or Hybrid Azure AD Join. All devices will be joined to Azure Active Directory. - -Self-deploying mode is designed to deploy Windows 10 as a kiosk, digital signage device, or a shared device. When setting up a kiosk, you can leverage the new Kiosk Browser, an app built on Microsoft Edge that can be used to create a tailored, MDM-managed browsing experience. When combined with MDM policies to create a local account and configure it to automatically log on, the complete configuration of the device can be automated. Find out more about these options by reading simplifying kiosk management for IT with Windows 10. See [Set up a kiosk or digital sign in Intune or other MDM service](https://docs.microsoft.com/windows/configuration/setup-kiosk-digital-signage#set-up-a-kiosk-or-digital-sign-in-intune-or-other-mdm-service) for additional details. - ->[!NOTE] ->Self-deploying mode does not presently associate a user with the device (since no user ID or password is specified as part of the process). As a result, some Azure AD and Intune capabilities (such as BitLocker recovery, installation of apps from the Company Portal, or Conditional Access) may not be available to a user that signs into the device. For more information see [Windows Autopilot scenarios and capabilities](windows-autopilot-scenarios.md) and [Setting the BitLocker encryption algorithm for Autopilot devices](bitlocker.md). - -![The user experience with Windows Autopilot self-deploying mode](images/self-deploy-welcome.png) - -## Requirements - -Because self-deploying mode uses a device’s TPM 2.0 hardware to authenticate the device into an organization’s Azure AD tenant, devices without TPM 2.0 cannot be used with this mode. The devices must also support TPM device attestation. (All newly-manufactured Windows devices should meet these requirements.) - ->[!IMPORTANT] ->If you attempt a self-deploying mode deployment on a device that does not have support TPM 2.0 or on a virtual machine, the process will fail when verifying the device with an 0x800705B4 timeout error (Hyper-V virtual TPMs are not supported). Also note that Window 10, version 1903 or later is required to use self-deploying mode due to issues with TPM device attestation in Windows 10, version 1809. Since Windows 10 Enterprise 2019 LTSC is based on Windows 10 version 1809, self-deploying mode is also not supported on Windows 10 Enterprise 2019 LTSC. See [Windows Autopilot known issues](known-issues.md) to review other known errors and solutions. - -In order to display an organization-specific logo and organization name during the Autopilot process, Azure Active Directory Company Branding needs to be configured with the images and text that should be displayed. See [Quickstart: Add company branding to your sign-in page in Azure AD](https://docs.microsoft.com/azure/active-directory/fundamentals/customize-branding) for more details. - -## Step by step - -In order to perform a self-deploying mode deployment using Windows Autopilot, the following preparation steps need to be completed: - -- Create an Autopilot profile for self-deploying mode with the desired settings. In Microsoft Intune, this mode is explicitly chosen when creating the profile. (Note that it is not possible to create a profile in the Microsoft Store for Business or Partner Center for self-deploying mode.) -- If using Intune, create a device group in Azure Active Directory and assign the Autopilot profile to that group. Ensure that the profile has been assigned to the device before attempting to deploy that device. -- Boot the device, connecting it to Wi-fi if required, then wait for the provisioning process to complete. - -## Validation - -When performing a self-deploying mode deployment using Windows Autopilot, the following end-user experience should be observed: - -- Once connected to a network, the Autopilot profile will be downloaded. -- If the Autopilot profile has been configured to automatically configure the language, locale, and keyboard layout, these OOBE screens should be skipped as long as Ethernet connectivity is available. Otherwise, manual steps are required: - - If multiple languages are preinstalled in Windows 10, the user must pick a language. - - The user must pick a locale and a keyboard layout, and optionally a second keyboard layout. -- If connected via Ethernet, no network prompt is expected. If no Ethernet connection is available and Wi-fi is built in, the user needs to connect to a wireless network. -- Windows 10 will check for critical OOBE updates, and if any are available they will be automatically installed (rebooting if required). -- The device will join Azure Active Directory. -- After joining Azure Active Directory, the device will enroll in Intune (or other configured MDM services). -- The [enrollment status page](enrollment-status.md) will be displayed. -- Depending on the device settings deployed, the device will either: - - Remain at the logon screen, where any member of the organization can log on by specifying their Azure AD credentials. - - Automatically sign in as a local account, for devices configured as a kiosk or digital signage. - ->[!NOTE] ->Deploying EAS policies using self-deploying mode for kiosk deployments will cause auto-logon functionality to fail. - -In case the observed results do not match these expectations, consult the [Windows Autopilot Troubleshooting](troubleshooting.md) documentation. diff --git a/windows/deployment/windows-autopilot/troubleshooting.md b/windows/deployment/windows-autopilot/troubleshooting.md deleted file mode 100644 index ff194c99ab..0000000000 --- a/windows/deployment/windows-autopilot/troubleshooting.md +++ /dev/null @@ -1,164 +0,0 @@ ---- -title: Troubleshooting Windows Autopilot -description: Learn how to handle issues as they arise during the Windows Autopilot deployment process. -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.reviewer: mniehaus -manager: laurawi -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: deploy -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# Troubleshooting Windows Autopilot - -**Applies to: Windows 10** - -Windows Autopilot is designed to simplify all parts of the Windows device lifecycle, but there are always situations where issues may arise, either due to configuration or other issues. To assist with troubleshooting efforts, review the following information. - -## Troubleshooting process - -Whether you are performing user-driven or self-deploying device deployments, the troubleshooting process is about the same. It is always useful to understand the flow for a specific device: - -- A network connection is established. This can be a wireless (Wi-fi) or wired (Ethernet) connection. -- The Windows Autopilot profile is downloaded. Whether using a wired connection or manually establishing a wireless connection, the Windows Autopilot profile will be downloaded from the Autopilot deployment service as soon as the network connection is in place. -- User authentication occurs. When performing a user-driven deployment, the user will enter their Azure Active Directory credentials, which will be validated. -- Azure Active Directory join occurs. For user-driven deployments, the device will be joined to Azure AD using the specified user credentials. For self-deploying scenarios, the device will be joined without specifying any user credentials. -- Automatic MDM enrollment occurs. As part of the Azure AD join process, the device will enroll in the MDM service configured in Azure AD (for example, Microsoft Intune). -- Settings are applied. If the [enrollment status page](enrollment-status.md) is configured, most settings will be applied while the enrollment status page is displayed. If not configured or available, settings will be applied after the user is signed in. - -For troubleshooting, key activities to perform are: - -- Configuration: Has Azure Active Directory and Microsoft Intune (or an equivalent MDM service) been configured as specified in [Windows Autopilot configuration requirements](windows-autopilot-requirements.md)? -- Network connectivity: Can the device access the services described in [Windows Autopilot networking requirements](windows-autopilot-requirements.md)? -- Autopilot OOBE behavior: Were only the expected out-of-box experience screens displayed? Was the Azure AD credentials page customized with organization-specific details as expected? -- Azure AD join issues: Was the device able to join Azure Active Directory? -- MDM enrollment issues: Was the device able to enroll in Microsoft Intune (or an equivalent MDM service)? - -## Troubleshooting Autopilot Device Import - -### Clicking Import after selecting CSV does nothing, '400' error appears in network trace with error body **"Cannot convert the literal '[DEVICEHASH]' to the expected type 'Edm.Binary'"** - -This error points to the device hash being incorrectly formatted. This could be caused by anything that corrupts the collected hash, but one possibility is that the hash itself (even if it is completely valid) fails to be decoded. - -The device hash is Base64. At the device level, it's encoded as unpadded Base64, but Autopilot expects padded Base64. In most cases, it seems the payload lines up to not require padding, so the process works, but sometimes it doesn't line up cleanly and padding is necessary. This is when you get the error above. PowerShell's Base64 decoder also expects padded Base64, so we can use that to validate that the hash is properly padded. - -The "A" characters at the end of the hash are effectively empty data - Each character in Base64 is 6 bits, A in Base64 is 6 bits equal to 0. Deleting or adding **A**'s at the end doesn't change the actual payload data. - -To fix this, we'll need to modify the hash, then test the new value, until PowerShell succeeds in decoding the hash. The result is mostly illegible, this is fine - we're just looking for it to not throw the error "Invalid length for a Base-64 char array or string". - -To test the base64, you can use the following: -```powershell -[System.Text.Encoding]::ascii.getstring( [System.Convert]::FromBase64String("DEVICE HASH")) -``` - -So, as an example (this is not a device hash, but it's misaligned unpadded Base64 so it's good for testing): -```powershell -[System.Text.Encoding]::ascii.getstring( [System.Convert]::FromBase64String("Q29udG9zbwAAA")) -``` - -Now for the padding rules. The padding character is "=". The padding character can only be at the end of the hash, and there can only be a maximum of 2 padding characters. Here's the basic logic. - -- Does decoding the hash fail? - - Yes: Are the last two characters "="? - - Yes: Replace both "=" with a single "A" character, then try again - - No: Add another "=" character at the end, then try again - - No: That hash is valid - -Looping the logic above on the previous example hash, we get the following permutations: -- Q29udG9zbwAAA -- Q29udG9zbwAAA= -- Q29udG9zbwAAA== -- Q29udG9zbwAAAA -- Q29udG9zbwAAAA= -- **Q29udG9zbwAAAA==** (This one has valid padding) - -Replace the collected hash with this new padded hash then try to import again. - -## Troubleshooting Autopilot OOBE issues - -If the expected Autopilot behavior does not occur during the out-of-box experience (OOBE), it is useful to see whether the device received an Autopilot profile and what settings that profile contained. Depending on the Windows 10 release, there are different mechanisms available to do that. - -### Windows 10 version 1803 and above - -To see details related to the Autopilot profile settings and OOBE flow, Windows 10 version 1803 and above adds event log entries. These can be viewed using Event Viewer, navigating to the log at **Application and Services Logs –> Microsoft –> Windows –> Provisioning-Diagnostics-Provider –> Autopilot** for versions before 1903, or **Application and Services Logs –> Microsoft –> Windows –> ModernDeployment-Diagnostics-Provider –> Autopilot** for 1903 and above. The following events may be recorded, depending on the scenario and profile configuration. - -| Event ID | Type | Description | -|----------|------|-------------| -| 100 | Warning | “Autopilot policy [name] not found.” This is typically a temporary problem, while the device is waiting for an Autopilot profile to be downloaded. | -| 101 | Info | “AutopilotGetPolicyDwordByName succeeded: policy name = [setting name]; policy value [value].” This shows Autopilot retrieving and processing numeric OOBE settings. | -| 103 | Info | “AutopilotGetPolicyStringByName succeeded: policy name = [name]; value = [value].” This shows Autopilot retrieving and processing OOBE setting strings such as the Azure AD tenant name. | -| 109 | Info | “AutopilotGetOobeSettingsOverride succeeded: OOBE setting [setting name]; state = [state].” This shows Autopilot retrieving and processing state-related OOBE settings. | -| 111 | Info | “AutopilotRetrieveSettings succeeded.” This means that the settings stored in the Autopilot profile that control the OOBE behavior have been retrieved successfully. | -| 153 | Info | “AutopilotManager reported the state changed from [original state] to [new state].” Typically this should say “ProfileState_Unknown” to “ProfileState_Available” to show that a profile was available for the device and downloaded, so the device is ready to be deployed using Autopilot. | -| 160 | Info | “AutopilotRetrieveSettings beginning acquisition.” This shows that Autopilot is getting ready to download the needed Autopilot profile settings. | -| 161 | Info | “AutopilotManager retrieve settings succeeded.” The Autopilot profile was successfully downloaded. | -| 163 | Info | “AutopilotManager determined download is not required and the device is already provisioned. Clean or reset the device to change this.” This message indicates that an Autopilot profile is resident on the device; it typically would only be removed by the **Sysprep /Generalize** process. | -| 164 | Info | “AutopilotManager determined Internet is available to attempt policy download.” | -| 171 | Error | “AutopilotManager failed to set TPM identity confirmed. HRESULT=[error code].” This indicates an issue performing TPM attestation, needed to complete the self-deploying mode process. | -| 172 | Error | “AutopilotManager failed to set Autopilot profile as available. HRESULT=[error code].” This is typically related to event ID 171. | - -In addition to the event log entries, the registry and ETW trace options described below also work with Windows 10 version 1803 and above. - -### Windows 10 version 1709 and above - -On Windows 10 version 1709 and above, information about the Autopilot profile settings are stored in the registry on the device after they are received from the Autopilot deployment service. These can be found at **HKLM\SOFTWARE\Microsoft\Provisioning\Diagnostics\Autopilot**. Available registry entries include: - -| Value | Description | -|-------|-------------| -| AadTenantId | The GUID of the Azure AD tenant the user signed into. This should match the tenant that the device was registered with; if it does not match the user will receive an error. | -| CloudAssignedTenantDomain | The Azure AD tenant the device has been registered with, for example, “contosomn.onmicrosoft.com.” If the device is not registered with Autopilot, this value will be blank. | -| CloudAssignedTenantId | The GUID of the Azure AD tenant the device has been registered with (the GUID corresponds to the tenant domain from the CloudAssignedTenantDomain registry value). If the device isn’t registered with Autopilot, this value will be blank.| -| IsAutopilotDisabled | If set to 1, this indicates that the device is not registered with Autopilot. This could also indicate that the Autopilot profile could not be downloaded due to network connectivity or firewall issues, or network timeouts. | -| TenantMatched | This will be set to 1 if the tenant ID of the user matches the tenant ID that the device was registered with. If this is 0, the user would be shown an error and forced to start over. | -| CloudAssignedOobeConfig | This is a bitmap that shows which Autopilot settings were configured. Values include: SkipCortanaOptIn = 1, OobeUserNotLocalAdmin = 2, SkipExpressSettings = 4, SkipOemRegistration = 8, SkipEula = 16 | - -### Windows 10 semi-annual channel supported versions - -On devices running a [supported version](https://docs.microsoft.com/windows/release-information/) of Windows 10 semi-annual channel, ETW tracing can be used to capture detailed information from Autopilot and related components. The resulting ETW trace files can then be viewed using the Windows Performance Analyzer or similar tools. See [the advanced troubleshooting blog](https://blogs.technet.microsoft.com/mniehaus/2017/12/13/troubleshooting-windows-autopilot-level-300400/) for more information. - -## Troubleshooting Azure AD Join issues - -The most common issue joining a device to Azure AD is related to Azure AD permissions. Ensure [the correct configuration is in place](windows-autopilot-requirements.md) to allow users to join devices to Azure AD. Errors can also happen if the user has exceeded the number of devices that they are allowed to join, as configured in Azure AD. - -An Azure AD device is created upon import - it's important that this object is not deleted. It acts as Autopilot's anchor in AAD for group membership and targeting (including the profile) and can lead to join errors if it's deleted. Once this object has been deleted, to fix the issue, deleting and reimporting this autopilot hash will be necessary so it can recreate the associated object. - -Error code 801C0003 will typically be reported on an error page titled "Something went wrong". This error means that the Azure AD join failed. - -## Troubleshooting Intune enrollment issues - -See [this knowledge base article](https://support.microsoft.com/help/4089533/troubleshooting-windows-device-enrollment-problems-in-microsoft-intune) for assistance with Intune enrollment issues. Common issues include incorrect or missing licenses assigned to the user or too many devices enrolled for the user. - -Error code 80180018 will typically be reported on an error page titled "Something went wrong". This error means that the MDM enrollment failed. - -If Autopilot Reset fails immediately with an error **Ran into trouble. Please sign in with an administrator account to see why and reset manually**, see [Troubleshoot Autopilot Reset](https://docs.microsoft.com/education/windows/autopilot-reset#troubleshoot-autopilot-reset) for more help. - -## Profile download - -When an Internet-connected Windows 10 device boots up, it will attempt to connect to the Autopilot service and download an Autopilot profile. Note: It is important that a profile exists at this stage so that a blank profile is not cached locally on the PC. To remove the currently cached local profile in Windows 10 version 1803 and earlier, it is necessary to re-generalize the OS using **sysprep /generalize /oobe**, reinstall the OS, or re-image the PC. In Windows 10 version 1809 and later, you can retrieve a new profile by rebooting the PC. - -When a profile is downloaded depends upon the version of Windows 10 that is running on the PC. See the following table. - -| Windows 10 version | Profile download behavior | -| --- | --- | -| 1709 | The profile is downloaded after the OOBE network connection page. This page is not displayed when using a wired connection. In this case, the profile is downloaded just prior to the EULA screen. | -| 1803 | The profile is downloaded as soon as possible. If wired, it is downloaded at the start of OOBE. If wireless, it is downloaded after the network connection page. | -| 1809 | The profile is downloaded as soon as possible (same as 1803), and again after each reboot. | - -If you need to reboot a computer during OOBE: -- Press Shift-F10 to open a command prompt. -- Enter **shutdown /r /t 0** to restart immediately, or **shutdown /s /t 0** to shutdown immediately. - -For more information, see [Windows Setup Command-Line Options](https://docs.microsoft.com/windows-hardware/manufacture/desktop/windows-setup-command-line-options). - -## Related topics - -[Windows Autopilot - known issues](known-issues.md)
-[Diagnose MDM failures in Windows 10](https://docs.microsoft.com/windows/client-management/mdm/diagnose-mdm-failures-in-windows-10)
diff --git a/windows/deployment/windows-autopilot/user-driven.md b/windows/deployment/windows-autopilot/user-driven.md deleted file mode 100644 index 2f93c58513..0000000000 --- a/windows/deployment/windows-autopilot/user-driven.md +++ /dev/null @@ -1,148 +0,0 @@ ---- -title: Windows Autopilot User-Driven Mode -description: Windows Autopilot user-driven mode allows devices to be deployed to a ready-to-use state without requiring help from IT personnel. -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.reviewer: mniehaus -manager: laurawi -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: deploy -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# Windows Autopilot user-driven mode - -Windows Autopilot user-driven mode is designed to enable new Windows 10 devices to be transformed from their initial state, directly from the factory, into a ready-to-use state without requiring that IT personnel ever touch the device. The process is designed to be simple so that anyone can complete it, enabling devices to be shipped or distributed to the end user directly with simple instructions: - -- Unbox the device, plug it in, and turn it on. -- Choose a language (only required when multiple languages are installed), locale and keyboard. -- Connect it to a wireless or wired network with internet access. If using wireless, the user must establish the Wi-Fi link. -- Specify your e-mail address and password for your organization account. - -After completing those simple steps, the remainder of the process is completely automated, with the device being joined to the organization, enrolled in Intune (or another MDM service), and fully configured as defined by the organization. Any additional prompts during the Out-of-Box Experience (OOBE) can be suppressed; see [Configuring Autopilot Profiles](profiles.md) for options that are available. - -Windows Autopilot user-driven mode supports Azure Active Directory and Hybrid Azure Active Directory joined devices. See [What is a device identity](https://docs.microsoft.com/azure/active-directory/devices/overview) for more information about these two join options. - -From a process flow perspective, the tasks performed during the user-driven process are as follows: - -- Once connected to a network, the device will download a Windows Autopilot profile specifying the settings that should be used (e.g. the prompts during OOBE that should be suppressed). -- Windows 10 will check for critical OOBE updates, and if any are available they will be automatically installed (rebooting if required). -- The user will be prompted for Azure Active Directory credentials, with a customized user experience showing the Azure AD tenant name, logo, and sign-in text. -- The device will join Azure Active Directory or Active Directory, based on the Windows Autopilot profile settings. -- The device will enroll in Intune (or other configured MDM services). (This occurs as part of the Azure Active Directory join process via MDM auto-enrollment, or before the Active Directory join process, as needed.) -- If configured, the [enrollment status page](enrollment-status.md) (ESP) will be displayed. -- Once the device configuration tasks have completed, the user will be signed into Windows 10 using the credentials they previously provided. (Note that if the device reboots during the device ESP process, the user will need to re-enter their credentials as these are not persisted across reboots.) -- Once signed in, the enrollment status page will again be displayed for user-targeted configuration tasks. - -If any issues are encountered during this process, see the [Windows Autopilot Troubleshooting](troubleshooting.md) documentation. - -For more information on the available join options, see the following sections: - -- [Azure Active Directory join](#user-driven-mode-for-azure-active-directory-join) is available if devices do not need to be joined to an on-prem Active Directory domain. -- [Hybrid Azure Active Directory join](#user-driven-mode-for-hybrid-azure-active-directory-join) is available for devices that must be joined to both Azure Active Directory and your on-prem Active Directory domain. -- [Hybrid Azure Active Directory join with VPN support](#user-driven-mode-for-hybrid-azure-active-directory-join-with-vpn-support) is available for devices that must be joined to both Azure Active Directory and your on-prem Active Directory domain, but are not connected to the corporate network and must use VPN connectivity. - -## User-driven mode for Azure Active Directory join - -In order to perform a user-driven deployment using Windows Autopilot, the following preparation steps need to be completed: - -- Ensure that the users who will be performing user-driven mode deployments are able to join devices to Azure Active Directory. See [Configure device settings](https://docs.microsoft.com/azure/active-directory/device-management-azure-portal#configure-device-settings) in the Azure Active Directory documentation for more information. -- Create an Autopilot profile for user-driven mode with the desired settings. In Microsoft Intune, this mode is explicitly chosen when creating the profile. With Microsoft Store for Business and Partner Center, user-driven mode is the default and does not need to be selected. -- If using Intune, create a device group in Azure Active Directory and assign the Autopilot profile to that group. - -For each device that will be deployed using user-driven deployment, these additional steps are needed: - -- Ensure that the device has been added to Windows Autopilot. This can be done automatically by an OEM or partner at the time the device is purchased, or it can be done through a manual harvesting process later. See [Adding devices to Windows Autopilot](add-devices.md) for more information. -- Ensure an Autopilot profile has been assigned to the device: - - If using Intune and Azure Active Directory dynamic device groups, this can be done automatically. - - If using Intune and Azure Active Directory static device groups, manually add the device to the device group. - - If using other methods (e.g. Microsoft Store for Business or Partner Center), manually assign an Autopilot profile to the device. - - -## User-driven mode for hybrid Azure Active Directory join - -Windows Autopilot requires that devices be Azure Active Directory joined. If you have an on-premises Active Directory environment and want to also join devices to your on-premises domain, you can accomplish this by configuring Autopilot devices to be [hybrid-joined to Azure Active Directory (Azure AD)](https://docs.microsoft.com/azure/active-directory/devices/hybrid-azuread-join-plan). - -### Requirements - -To perform a user-driven hybrid Azure AD joined deployment using Windows Autopilot: - -- A Windows Autopilot profile for user-driven mode must be created and - - **Hybrid Azure AD joined** must be specified as the selected option under **Join to Azure AD as** in the Autopilot profile. -- If using Intune, a device group in Azure Active Directory must exist with the Windows Autopilot profile assigned to that group. -- The device must be running Windows 10, version 1809 or later. -- The device must be able to access an Active Directory domain controller, so it must be connected to the organization's network (where it can resolve the DNS records for the AD domain and the AD domain controller, and communicate with the domain controller to authenticate the user). -- The device must be able to access the Internet, following the [documented Windows Autopilot network requirements](windows-autopilot-requirements.md). -- The Intune Connector for Active Directory must be installed. - - Note: The Intune Connector will perform an on-prem AD join, therefore users do not need on-prem AD-join permission, assuming the Connector is [configured to perform this action](https://docs.microsoft.com/intune/windows-autopilot-hybrid#increase-the-computer-account-limit-in-the-organizational-unit) on the user's behalf. -- If using Proxy, WPAD Proxy settings option must be enabled and configured. - -The hybrid Azure AD join process uses the system context to register the device to Azure AD, therefore it is not affected by user based Azure AD join permission settings. - -## User-driven mode for hybrid Azure Active Directory join with VPN support - -Devices that are joined to Active Directory require connectivity to an Active Directory domain controller for a variety of activities, such as user sign-in (validating the user's credentials) and Group Policy application. As a result, the Windows Autopilot user-driven Hybrid Azure AD Join process would validate that the device is able to contact an Active Directory domain controller by pinging that domain controller. - -With the additional of VPN support for this scenario, it is now possible for you to specify to skip that connectivity check during the Hybrid Azure AD Join. This does not eliminate the need for communicating with an Active Directory domain controller, but rather enables the device to be first prepared with a needed VPN configuration delivered via Intune prior to the user attempting to sign into Windows, allowing connectivity to the organization's network. - -### Requirements - -The following additional requirements apply for Hybrid Azure AD Join with VPN support: - -- A supported version of Windows 10: - - Windows 10 1903 + December 10th Cumulative update (KB4530684, OS build 18362.535) or higher - - Windows 10 1909 + December 10th Cumulative update (KB4530684, OS build 18363.535) or higher - - Windows 10 2004 or later -- Enable the new “Skip domain connectivity check” toggle in the Hybrid Azure AD Join Autopilot profile. -- A VPN configuration that can be deployed via Intune that enables the user to manually establish a VPN connection from the Windows logon screen, or one that automatically establishes a VPN connection as needed. - -The specific VPN configuration required depends on the VPN software and authentication being used. For third-party (non-Microsoft) VPN solutions, this typically would involve deploying a Win32 app (containing the VPN client software itself as well as any specific connection information, e.g. VPN endpoint host names) via Intune Management Extensions. Consult your VPN provider's documentation for configuration details specific to that provider. - -> [!NOTE] -> The VPN requirements are not specific to Windows Autopilot. For example, if you have already implemented a VPN configuration to enable remote password resets, where a user needs to log on to Windows with a new password when not on the organization's network, that same configuration can be used with Windows Autopilot. Once the user has signed in to cache their credentials, subsequent log-on attempts do not need connectivity since the cached credentials can be used. - -In cases where certificate authentication is required by the VPN software, the needed machine certificate should also be deployed via Intune. This can be done using the Intune certificate enrollment capabilities, targeting the certificate profiles to the device. - -Note that user certificates are not supported because these certificates cannot be deployed until the user logs in. Also, third-party UWP VPN plug-ins delivered from the Windows Store are also not supported because these are not installed until after the user signs in. - -### Validation - -Before attempting a hybrid Azure AD Join using VPN, it is important to first confirm that a user-driven Hybrid Azure AD Join process can be performed on the organization's network, before adding in the additional requirements described below. This simplifies troubleshooting by making sure the core process works fine before adding the additional VPN configuration required. - -Next, validate that the VPN configuration (Win32 app, certs, and any other requirements) can be deployed via Intune to an existing device that has already been hybrid Azure AD joined. For example, some VPN clients create a per-machine VPN connection as part of the installation process, so you can validate the configuration using steps such as these: - -- From PowerShell, verify that at least one per-machine VPN connection has been created using the "Get-VpnConnection -AllUserConnection" command. -- Attempt to manually start the VPN connection using the command: RASDIAL.EXE "ConnectionName" -- Log out and verify that the "VPN connection" icon can be seen on the Windows logon page. -- Move the device off the corporate network and attempt to establish the connection using the icon on the Windows logon page, signing into an account that does not have cached credentials. - -For VPN configurations that automatically connect, the validation steps may be different. - -> [!NOTE] -> Always On VPN can be used for this scenario. See the [Deploy Always On VPN](https://docs.microsoft.com/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/always-on-vpn-deploy-deployment) documentation for more information. Note that Intune cannot yet deploy the needed per-machine VPN profile. - -To validate the end-to-end process, ensure the needed Windows 10 cumulative update has been installed on Windows 10 1903 or Windows 10 1909. This can be done manually during OOBE by first downloading the latest cumulative from https://catalog.update.microsoft.com and then manually installing it: - -- Press Shift-F10 to open a command prompt. -- Insert a USB key containing the downloaded update. -- Install the update using the command (substituting the real file name): WUSA.EXE .msu /quiet -- Reboot the computer using the command: shutdown.exe /r /t 0 - -Alternatively, you can invoke Windows Update to install the latest updates through this process: - -- Press Shift-F10 to open a command prompt. -- Run the command "start ms-settings:" -- Navigate to the "Update & Security" node and check for updates. -- Reboot after the updates are installed. - -## Step by step instructions - -See [Deploy hybrid Azure AD joined devices using Intune and Windows Autopilot](https://docs.microsoft.com/intune/windows-autopilot-hybrid). - diff --git a/windows/deployment/windows-autopilot/white-glove.md b/windows/deployment/windows-autopilot/white-glove.md deleted file mode 100644 index 2945f04f62..0000000000 --- a/windows/deployment/windows-autopilot/white-glove.md +++ /dev/null @@ -1,120 +0,0 @@ ---- -title: Windows Autopilot for white glove deployment -description: Windows Autopilot for white glove deployment -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune, pre-provisioning -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: low -ms.sitesec: library -ms.pagetype: deploy -audience: itproF -author: greg-lindsay -manager: laurawi -ms.audience: itpro -author: greg-lindsay -ms.collection: M365-modern-desktop -ms.topic: article ---- - -# Windows Autopilot for white glove deployment - -**Applies to: Windows 10, version 1903** - -Windows Autopilot enables organizations to easily provision new devices - leveraging the preinstalled OEM image and drivers with a simple process that can be performed by the end user to help get their device business-ready. - - ![OEM](images/wg01.png) - -Windows Autopilot can also provide a white glove service that enables partners or IT staff to pre-provision a Windows 10 PC so that it is fully configured and business-ready. From the end user’s perspective, the Windows Autopilot user-driven experience is unchanged, but getting their device to a fully provisioned state is faster. - -With **Windows Autopilot for white glove deployment**, the provisioning process is split. The time-consuming portions are performed by IT, partners, or OEMs. The end user simply completes a few necessary settings and polices and then they can begin using their device. - - ![OEM](images/wg02.png) - -Enabled with Microsoft Intune in Windows 10, version 1903 and later, white glove deployment capabilities build on top of existing Windows Autopilot [user-driven scenarios](user-driven.md), supporting both the user-driven mode for Azure Active Directory Join, and user-driven mode for Hybrid Azure Active Directory join scenarios. - -## Prerequisites - -In addition to [Windows Autopilot requirements](windows-autopilot-requirements.md), Windows Autopilot for white glove deployment adds the following: - -- Windows 10, version 1903 or later is required. -- An Intune subscription. -- Physical devices that support TPM 2.0 and device attestation; virtual machines are not supported. The white glove provisioning process leverages Windows Autopilot self-deploying capabilities, hence the TPM 2.0 requirements. -- Physical devices with Ethernet connectivity; Wi-fi connectivity is not supported due to the requirement to choose a language, locale, and keyboard to make that Wi-fi connection; doing that in a pre-provisioning process could prevent the user from choosing their own language, locale, and keyboard when they receive the device. - ->[!IMPORTANT] ->Because the OEM or vendor performs the white glove process, this doesn’t require access to an end-user's on-prem domain infrastructure. This is unlike a typical hybrid Azure AD-joined scenario because rebooting the device is postponed. The device is resealed prior to the time when connectivity to a domain controller is expected, and the domain network is contacted when the device is unboxed on-prem by the end-user. - -## Preparation - -Devices slated for white glove provisioning are registered for Autopilot via the normal registration process. - -To be ready to try out Windows Autopilot for white glove deployment, ensure that you can first successfully use existing Windows Autopilot user-driven scenarios: - -- User-driven Azure AD join. Devices can be deployed using Windows Autopilot and joined to an Azure Active Directory tenant. -- User-driven with Hybrid Azure AD join. Devices can be deployed using Windows Autopilot and joined to an on-premises Active Directory domain, then registered with Azure Active Directory to enable the Hybrid Azure AD join features. - -If these scenarios cannot be completed, Windows Autopilot for white glove deployment will also not succeed since it builds on top of these scenarios. - -To enable white glove deployment, an additional Autopilot profile setting must be configured by the customer or IT Admin via their Intune account, prior to beginning the white glove process in the provisioning service facility: - -![allow white glove](images/allow-white-glove-oobe.png) - -The Windows Autopilot for white glove deployment pre-provisioning process will apply all device-targeted policies from Intune. That includes certificates, security templates, settings, apps, and more – anything targeting the device. Additionally, any apps (Win32 or LOB) that are configured to install in the device context and targeted to the user that has been pre-assigned to the Autopilot device will also be installed. Please make sure not to target both win32 and LOB apps to the same device, as this can make troubleshooting difficult if there are app installation failures. For more information, see [Add a Windows line-of-business app to Microsoft Intune](https://docs.microsoft.com/mem/intune/apps/lob-apps-windows). - -> [!NOTE] -> Select the language mode as the user specified in Autopilot profiles to ensure easy access into white glove provisioning mode. -> The white glove technician phase will install all device-targeted apps as well as any user-targeted, device-context apps that are targeted to the assigned user. If there is no assigned user, then it will only install the device-targeted apps. Other user-targeted policies will not apply until the user signs into the device. To verify these behaviors, be sure to create appropriate apps and policies targeted to devices and users. - -## Scenarios - -Windows Autopilot for white glove deployment supports two distinct scenarios: -- User-driven deployments with Azure AD Join. The device will be joined to an Azure AD tenant. -- User-driven deployments with Hybrid Azure AD Join. The device will be joined to an on-premises Active Directory domain, and separately registered with Azure AD. -Each of these scenarios consists of two parts, a technician flow and a user flow. At a high level, these parts are the same for Azure AD Join and Hybrid Azure AD join; differences are primarily seen by the end user in the authentication steps. - -### Technician flow - -After the customer or IT Admin has targeted all the apps and settings they want for their devices through Intune, the white glove technician can begin the white glove process. The technician could be a member of the IT staff, a services partner, or an OEM – each organization can decide who should perform these activities. Regardless of the scenario, the process to be performed by the technician is the same: -- Boot the device (running Windows 10 Pro, Enterprise, or Education SKUs, version 1903 or later). -- From the first OOBE screen (which could be a language selection or locale selection screen), do not click **Next**. Instead, press the Windows key five times to view an additional options dialog. From that screen, choose the **Windows Autopilot provisioning** option and then click **Continue**. - - ![choice](images/choice.png) - -- On the **Windows Autopilot Configuration** screen, information will be displayed about the device: - - The Autopilot profile assigned to the device. - - The organization name for the device. - - The user assigned to the device (if there is one). - - A QR code containing a unique identifier for the device, useful to look up the device in Intune to make any configuration changes needed (e.g. assigning a user, adding the device to any additional groups needed for app or policy targeting). - - **Note**: The QR codes can be scanned using a companion app, which will also configure the device to specify who it belongs to. An [open-source sample of the companion app](https://github.com/Microsoft/WindowsAutopilotCompanion) that integrates with Intune via the Graph API has been published to GitHub by the Autopilot team. -- Validate the information displayed. If any changes are needed, make these and then click **Refresh** to re-download the updated Autopilot profile details. - - ![landing](images/landing.png) - -- Click **Provision** to begin the provisioning process. - -If the pre-provisioning process completes successfully: -- A green status screen will be displayed with information about the device, including the same details presented previously (e.g. Autopilot profile, organization name, assigned user, QR code), as well as the elapsed time for the pre-provisioning steps. - ![white-glove-result](images/white-glove-result.png) -- Click **Reseal** to shut the device down. At that point, the device can be shipped to the end user. - ->[!NOTE] ->Technician Flow inherits behavior from [Self-Deploying Mode](self-deploying.md). Per the Self-Deploying Mode documentation, it leverages the Enrollment Status Page to hold the device in a provisioning state and prevent the user from proceeding to the desktop after enrollment but before software and configuration is done applying. As such, if Enrollment Status Page is disabled, the reseal button may appear before software and configuration is done applying letting you proceed to the user flow before technician flow provisioning is complete. The green screen validates that enrollment was successful, not that the technician flow is necessarily complete. - -If the pre-provisioning process fails: -- A red status screen will be displayed with information about the device, including the same details presented previously (e.g. Autopilot profile, organization name, assigned user, QR code), as well as the elapsed time for the pre-provisioning steps. -- Diagnostic logs can be gathered from the device, and then it can be reset to start the process over again. - -### User flow - -If the pre-provisioning process completed successfully and the device was resealed, it can be delivered to the end user to complete the normal Windows Autopilot user-driven process. They will perform a standard set of steps: - -- Power on the device. -- Select the appropriate language, locale, and keyboard layout. -- Connect to a network (if using Wi-Fi). Internet access is always required. If using Hybrid Azure AD Join, there must also be connectivity to a domain controller. -- On the branded sign-on screen, enter the user’s Azure Active Directory credentials. -- If using Hybrid Azure AD Join, the device will reboot; after the reboot, enter the user’s Active Directory credentials. -- Additional policies and apps will be delivered to the device, as tracked by the Enrollment Status Page (ESP). Once complete, the user will be able to access the desktop. - -## Related topics - -[White glove video](https://youtu.be/nE5XSOBV0rI) diff --git a/windows/deployment/windows-autopilot/windows-autopilot-requirements.md b/windows/deployment/windows-autopilot/windows-autopilot-requirements.md deleted file mode 100644 index c1ce8c7759..0000000000 --- a/windows/deployment/windows-autopilot/windows-autopilot-requirements.md +++ /dev/null @@ -1,145 +0,0 @@ ---- -title: Windows Autopilot requirements -ms.reviewer: -manager: laurawi -description: See the requirements you need to run Windows Autopilot in Windows 10, Azure Active Directory, and MDM services such as Microsoft Intune. -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, Autopilot, ztd, zero-touch, partner, msfb, intune -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: deploy -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article -ms.custom: -- CI 116757 -- CSSTroubleshooting ---- - - -# Windows Autopilot requirements - -**Applies to: Windows 10** - -Windows Autopilot depends on specific capabilities available in Windows 10, Azure Active Directory, and MDM services such as Microsoft Intune. In order to use Windows Autopilot and leverage these capabilities, some requirements must be met. - -> [!NOTE] -> For a list of OEMs that currently support Windows Autopilot, see the Participant device manufacturers section at [Windows Autopilot](https://aka.ms/windowsAutopilot). - -## Software requirements - -- A [supported version](https://docs.microsoft.com/windows/release-information/) of Windows 10 Semi-Annual Channel is required. Windows 10 Enterprise 2019 long-term servicing channel (LTSC) is also supported. -- The following editions are supported: - - Windows 10 Pro - - Windows 10 Pro Education - - Windows 10 Pro for Workstations - - Windows 10 Enterprise - - Windows 10 Education - - Windows 10 Enterprise 2019 LTSC - ->[!NOTE] ->Procedures for deploying Windows Autopilot might refer to specific products and versions. The inclusion of these products in this content doesn't imply an extension of support for a version that is beyond its support lifecycle. Windows Autopilot does not support products that are beyond their support lifecycle. For more information, see [Microsoft Lifecycle Policy](https://go.microsoft.com/fwlink/p/?LinkId=208270). - -## Networking requirements - -Windows Autopilot depends on a variety of internet-based services. Access to these services must be provided for Autopilot to function properly. In the simplest case, enabling proper functionality can be achieved by ensuring the following: - -- Ensure DNS name resolution for internet DNS names. -- Allow access to all hosts via port 80 (HTTP), 443 (HTTPS), and 123 (UDP/NTP). - -In environments that have more restrictive Internet access, or for those that require authentication before internet access can be obtained, additional configuration may be required to allow access to the required services. - -> [!NOTE] -> Smart card and certificate based authentication is not supported during OOBE. For more information, see [Smartcards and certificate-based authentication](https://docs.microsoft.com/azure/active-directory/devices/azureadjoin-plan#smartcards-and-certificate-based-authentication). - -For additional details about each of these services and their specific requirements, review the following details: - -
ServiceInformation -
Windows Autopilot Deployment ServiceAfter a network connection is in place, each Windows 10 device will contact the Windows Autopilot Deployment Service. With Windows 10 version 1903 and above, the following URLs are used: https://ztd.dds.microsoft.com, https://cs.dds.microsoft.com.
- -
Windows ActivationWindows Autopilot also requires Windows Activation services. See Windows activation or validation fails with error code 0x8004FE33 for details about the URLs that need to be accessible for the activation services.
- -
Azure Active DirectoryUser credentials are validated by Azure Active Directory, and the device can also be joined to Azure Active Directory. See Office 365 IP Address and URL Web service for more information. -
IntuneOnce authenticated, Azure Active Directory will trigger enrollment of the device into the Intune MDM service. See the following link for details about network communication requirements: Intune network configuration requirements and bandwidth. -
Windows UpdateDuring the OOBE process, as well as after the Windows 10 OS is fully configured, the Windows Update service is leveraged to retrieve needed updates. If there are problems connecting to Windows Update, see How to solve connection problems concerning Windows Update or Microsoft Update.
- -If Windows Update is inaccessible, the Autopilot process will still continue but critical updates will not be available. - -
Delivery OptimizationWhen downloading Windows Updates, Microsoft Store apps and app updates, Office Updates and Intune Win32 Apps, the Delivery Optimization service is contacted to enable peer-to-peer sharing of content so that only a few devices need to download it from the internet.
- -If the Delivery Optimization Service is inaccessible, the Autopilot process will still continue with Delivery Optimization downloads from the cloud (without peer-to-peer). - -
Network Time Protocol (NTP) SyncWhen a Windows device starts up, it will talk to a network time server to ensure that the time on the device is accurate. Ensure that UDP port 123 to time.windows.com is accessible. -
Domain Name Services (DNS)To resolve DNS names for all services, the device communicates with a DNS server, typically provided via DHCP.  This DNS server must be able to resolve internet names. -
Diagnostics dataStarting in Windows 10, 1903, diagnostic data collection will be enabled by default. To disable Windows Analytics and related diagnostics capabilities, see Manage enterprise diagnostic data level.
- -If diagnostic data cannot be sent, the Autopilot process will still continue, but services that depend on diagnostic data, such as Windows Analytics, will not work. -
Network Connection Status Indicator (NCSI)Windows must be able to tell that the device is able to access the internet. For more information, see Network Connection Status Indicator (NCSI). - -www.msftconnecttest.com must be resolvable via DNS and accessible via HTTP. -
Windows Notification Services (WNS)This service is used to enable Windows to receive notifications from apps and services. See Microsoft Store for more information.
- -If the WNS services are not available, the Autopilot process will still continue without notifications. -
Microsoft Store, Microsoft Store for BusinessApps in the Microsoft Store can be pushed to the device, triggered via Intune (MDM).  App updates and additional apps may also be needed when the user first logs in. For more information, see Prerequisites for Microsoft Store for Business and Education (also includes Azure AD and Windows Notification Services).
- -If the Microsoft Store is not accessible, the Autopilot process will still continue without Microsoft Store apps. - -
Office 365As part of the Intune device configuration, installation of Microsoft 365 Apps for enterprise may be required. For more information, see Office 365 URLs and IP address ranges (includes all Office services, DNS names, IP addresses; includes Azure AD and other services that may overlap with those listed above). -
Certificate revocation lists (CRLs)Some of these services will also need to check certificate revocation lists (CRLs) for certificates used in the services.  A full list of these is documented at Office 365 URLs and IP address ranges and Office 365 Certificate Chains. -
Hybrid AAD joinThe device can be hybrid AAD joined. The computer should be on corporate network for hybrid AAD join to work. See details at Windows Autopilot user-driven mode -
Autopilot Self-Deploying mode and Autopilot White GloveFirmware TPM devices, which are only provided by Intel, AMD, or Qualcomm, do not include all needed certificates at boot time and must be able to retrieve them from the manufacturer on first use. Devices with discrete TPM chips (including devices from any other manufacturer) come with these certificates preinstalled. See TPM recommendations for more details. Make sure that these URLs are accessible for each firmware TPM provider so that certificates can be successfully requested: - -
Intel- https://ekop.intel.com/ekcertservice -
Qualcomm- https://ekcert.spserv.microsoft.com/EKCertificate/GetEKCertificate/v1 -
AMD- https://ftpm.amd.com/pki/aia -
- -## Licensing requirements - -Windows Autopilot depends on specific capabilities available in Windows 10 and Azure Active Directory. It also requires an MDM service such as Microsoft Intune. These capabilities can be obtained through various editions and subscription programs. - -To provide needed Azure Active Directory (automatic MDM enrollment and company branding features) and MDM functionality, one of the following is required: -- [Microsoft 365 Business Premium subscription](https://www.microsoft.com/microsoft-365/business). -- [Microsoft 365 F1 or F3 subscription](https://www.microsoft.com/microsoft-365/enterprise/firstline). -- [Microsoft 365 Academic A1, A3, or A5 subscription](https://www.microsoft.com/education/buy-license/microsoft365/default.aspx). -- [Microsoft 365 Enterprise E3 or E5 subscription](https://www.microsoft.com/microsoft-365/enterprise), which include all Windows 10, Office 365, and EM+S features (Azure AD and Intune). -- [Enterprise Mobility + Security E3 or E5 subscription](https://www.microsoft.com/cloud-platform/enterprise-mobility-security), which include all needed Azure AD and Intune features. -- [Intune for Education subscription](https://docs.microsoft.com/intune-education/what-is-intune-for-education), which include all needed Azure AD and Intune features. -- [Azure Active Directory Premium P1 or P2](https://azure.microsoft.com/services/active-directory/) and [Microsoft Intune subscriptions](https://www.microsoft.com/cloud-platform/microsoft-intune) (or an alternative MDM service). - -> [!NOTE] -> Even when using Microsoft 365 subscriptions, you still need to [assign Intune licenses to the users](https://docs.microsoft.com/intune/fundamentals/licenses-assign). - -Additionally, the following are also recommended (but not required): -- [Microsoft 365 Apps for enterprise](https://www.microsoft.com/p/office-365-proplus/CFQ7TTC0K8R0), which can be deployed easily via Intune (or other MDM services). -- [Windows Subscription Activation](https://docs.microsoft.com/windows/deployment/windows-10-enterprise-subscription-activation), to automatically step up devices from Windows 10 Pro to Windows 10 Enterprise. - -## Configuration requirements - -Before Windows Autopilot can be used, some configuration tasks are required to support the common Autopilot scenarios. - -- Configure Azure Active Directory automatic enrollment. For Microsoft Intune, see [Enable Windows 10 automatic enrollment](https://docs.microsoft.com/intune/windows-enroll#enable-windows-10-automatic-enrollment) for details. If using a different MDM service, contact the vendor for the specific URLs or configuration needed for those services. -- Configure Azure Active Directory custom branding. In order to display an organization-specific logon page during the Autopilot process, Azure Active Directory needs to be configured with the images and text that should be displayed. See [Quickstart: Add company branding to your sign-in page in Azure AD](https://docs.microsoft.com/azure/active-directory/fundamentals/customize-branding) for more details. Note that the "square logo" and "sign-in page text" are the key elements for Autopilot, as well as the Azure Active Directory tenant name (configured separately in the Azure AD tenant properties). -- Enable [Windows Subscription Activation](https://docs.microsoft.com/windows/deployment/windows-10-enterprise-subscription-activation) if desired, in order to automatically step up from Windows 10 Pro to Windows 10 Enterprise. - -Specific scenarios will then have additional requirements. Generally, there are two specific tasks: - -- Device registration. Devices need to be added to Windows Autopilot to support most Windows Autopilot scenarios. See [Adding devices to Windows Autopilot](add-devices.md) for more details. -- Profile configuration. Once devices have been added to Windows Autopilot, a profile of settings needs to be applied to each device. See [Configure Autopilot profiles](profiles.md) for details. Note that Microsoft Intune can automate this profile assignment; see [Create an Autopilot device group](https://docs.microsoft.com/intune/enrollment-Autopilot#create-an-Autopilot-device-group) and [Assign an Autopilot deployment profile to a device group](https://docs.microsoft.com/intune/enrollment-Autopilot#assign-an-Autopilot-deployment-profile-to-a-device-group) for more information. - -See [Windows Autopilot Scenarios](windows-Autopilot-scenarios.md) for additional details. - -For a walkthrough for some of these and related steps, see this video: - -
- - - -There are no additional hardware requirements to use Windows 10 Autopilot, beyond the [requirements to run Windows 10](https://www.microsoft.com/windows/windows-10-specifications). - -## Related topics - -[Configure Autopilot deployment](https://docs.microsoft.com/windows/deployment/windows-Autopilot/) diff --git a/windows/deployment/windows-autopilot/windows-autopilot-reset.md b/windows/deployment/windows-autopilot/windows-autopilot-reset.md deleted file mode 100644 index 8510d7574e..0000000000 --- a/windows/deployment/windows-autopilot/windows-autopilot-reset.md +++ /dev/null @@ -1,138 +0,0 @@ ---- -title: Windows Autopilot Reset -description: Windows Autopilot Reset takes the device back to a business-ready state, allowing the next user to sign in and get productive quickly and easily. -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.reviewer: mniehaus -manager: laurawi -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: deploy -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# Windows Autopilot Reset - -- Applies to: Windows 10, version 1709 and later (local reset) -- Applies to: Windows 10, version 1809 and later (remote reset) - -Windows Autopilot Reset removes personal files, apps, and settings and reapplies a device’s original settings, maintaining its identity connection to Azure AD and its management connection to Intune so that the device is once again ready for use. Windows Autopilot Reset takes the device back to a business-ready state, allowing the next user to sign in and get productive quickly and simply. - -The Windows Autopilot Reset process automatically retains information from the existing device: - -- Set the region, language, and keyboard to the originally-configured values. -- Wi-Fi connection details. -- Provisioning packages previously applied to the device, as well as a provisioning package present on a USB drive when the reset process is initiated. -- Azure Active Directory device membership and MDM enrollment information. - -Windows Autopilot Reset will block the user from accessing the desktop until this information is restored, including re-applying any provisioning packages. For devices enrolled in an MDM service, Windows Autopilot Reset will also block until an MDM sync is completed. -When Autopilot reset is used on a device, the device's primary user will be removed. The next user who signs in after the reset will be set as the primary user. - - ->[!NOTE] ->The Autopilot Reset does not support Hybrid Azure AD joined devices. - -## Scenarios - -Windows Autopilot Reset supports two scenarios: - -- [Local reset](#reset-devices-with-local-windows-autopilot-reset) initiated by IT personnel or other administrators from the organization. -- [Remote reset](#reset-devices-with-remote-windows-autopilot-reset) initiated remotely by IT personnel via an MDM service such as Microsoft Intune. - -Additional requirements and configuration details apply with each scenario; see the detailed links above for more information. - -## Reset devices with local Windows Autopilot Reset - -**Applies to: Windows 10, version 1709 and above** - -The Intune Service Administrator role is required to perform this task. For more information, see [Add users and grant administrative permission to Intune](https://docs.microsoft.com/intune/users-add). - -IT admins can perform a local Windows Autopilot Reset to quickly remove personal files, apps, and settings, and reset Windows 10 devices from the lock screen any time and apply original settings and management enrollment (Azure Active Directory and device management) so the devices are ready to use. With a local Autopilot Reset, devices are returned to a fully configured or known IT-approved state. - -To enable local Autopilot Reset in Windows 10: - -1. [Enable the policy for the feature](#enable-local-windows-autopilot-reset) -2. [Trigger a reset for each device](#trigger-local-windows-autopilot-reset) - -### Enable local Windows Autopilot Reset - -To enable a local Windows Autopilot Reset, the **DisableAutomaticReDeploymentCredentials** policy must be configured. This policy is documented in the [Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-credentialproviders), **CredentialProviders/DisableAutomaticReDeploymentCredentials**. By default, local Windows Autopilot is disabled. This ensures that a local Autopilot Reset is not triggered by accident. - -You can set the policy using one of these methods: - -- MDM provider - - - When using Intune, you can create a new device configuration profile, specifying "Windows 10 or later" for the platform, "Device restrictions" for the profile type, and "General" for the settings category. The **Automatic Redeployment** setting should be set to **Allow**. Deploy this setting to all devices where a local reset should be permitted. - - If you're using an MDM provider other than Intune, check your MDM provider documentation on how to set this policy. - -- Windows Configuration Designer - - You can [use Windows Configuration Designer](https://docs.microsoft.com/windows/configuration/provisioning-packages/provisioning-create-package) to set the **Runtime settings > Policies > CredentialProviders > DisableAutomaticReDeploymentCredentials** setting to 0 and then create a provisioning package. - -- Set up School PCs app - - The latest release of the Set up School PCs app supports enabling local Windows Autopilot Reset. - -### Trigger local Windows Autopilot Reset - -Performing a local Windows Autopilot Reset is a two-step process: trigger it and then authenticate. Once you've done these two steps, you can let the process execute and once it is done, the device is again ready for use. - -**To trigger a local Autopilot Reset** - -1. From the Windows device lock screen, enter the keystroke: **CTRL + ![Windows key](images/windows_glyph.png) + R**. - - ![Enter CTRL+Windows key+R on the Windows lock screen](images/autopilot-reset-lockscreen.png) - - This will open up a custom login screen for the local Autopilot Reset. The screen serves two purposes: - 1. Confirm/verify that the end user has the right to trigger Local Autopilot Reset - 2. Notify the user in case a provisioning package, created using Windows Configuration Designer, will be used as part of the process. - - ![Custom login screen for local Autopilot Reset](images/autopilot-reset-customlogin.png) - -2. Sign in with the admin account credentials. If you created a provisioning package, plug in the USB drive and trigger the local Autopilot Reset. - - Once the local Autopilot Reset is triggered, the reset process starts. Once provisioning is complete, the device is again ready for use. - -## Reset devices with remote Windows Autopilot Reset - -**Applies to: Windows 10, version 1809 or later** - -When performing a remote Windows Autopilot Reset, an MDM service such an Microsoft Intune can be used to initiate the reset process, avoiding the need for IT staff or other administrators to visit each machine to initiate the process. - -To enable a device for a remote Windows Autopilot Reset, the device must be MDM managed and joined to Azure AD. This feature is not supported on devices that were enrolled using [Autopilot self deploying mode](self-deploying.md). - -### Triggering a remote Windows Autopilot Reset - -To trigger a remote Windows Autopilot Reset via Intune, follow these steps: - -- Navigate to **Devices** tab in the Intune console. -- In the **All devices** view, select the targeted reset devices and then click **More** to view device actions. -- Select **Autopilot Reset** to kick-off the reset task. - ->[!NOTE] ->The Autopilot Reset option will only be enabled in Microsoft Intune for devices running Windows 10 build 17672 or higher. - ->[!IMPORTANT] ->The feature for Autopilot Reset will stay grayed out, **unless** you reset the device using Autopilot (either using Fresh Reset or manually sysprep the device). - -Once the reset is complete, the device is again ready for use. - - - -## Troubleshooting - -Windows Autopilot Reset requires that the [Windows Recovery Environment (WinRE)](https://docs.microsoft.com/windows-hardware/manufacture/desktop/windows-recovery-environment--windows-re--technical-reference) is correctly configured and enabled on the device. If it is not configured and enabled, an error such as `Error code: ERROR_NOT_SUPPORTED (0x80070032)` will be reported. - -To make sure WinRE is enabled, use the [REAgentC.exe tool](https://docs.microsoft.com/windows-hardware/manufacture/desktop/reagentc-command-line-options) to run the following command: - -``` -reagentc /enable -``` - -If Windows Autopilot Reset fails after enabling WinRE, or if you are unable to enable WinRE, please contact [Microsoft Support](https://support.microsoft.com) for assistance. diff --git a/windows/deployment/windows-autopilot/windows-autopilot-scenarios.md b/windows/deployment/windows-autopilot/windows-autopilot-scenarios.md deleted file mode 100644 index 16abf999ea..0000000000 --- a/windows/deployment/windows-autopilot/windows-autopilot-scenarios.md +++ /dev/null @@ -1,76 +0,0 @@ ---- -title: Windows Autopilot scenarios and capabilities -description: Follow along with several typical Windows Autopilot deployment scenarios, such as re-deploying a device in a business-ready state. -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.reviewer: mniehaus -manager: laurawi -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: deploy -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# Windows Autopilot scenarios and capabilities - -**Applies to: Windows 10** - -## Scenarios - -Windows Autopilot includes support for a growing list of scenarios, designed to support common organization needs which can vary based on the type of organization and their progress moving to Windows 10 and [transitioning to modern management](https://docs.microsoft.com/windows/client-management/manage-windows-10-in-your-organization-modern-management). - -The following Windows Autopilot scenarios are described in this guide: - -| Scenario | More information | -| --- | --- | -| Deploy devices that will be set up by a member of the organization and configured for that person | [Windows Autopilot user-driven mode](user-driven.md) | -| Deploy devices that will be automatically configured for shared use, as a kiosk, or as a digital signage device.| [Windows Autopilot self-deploying mode](self-deploying.md) | -| Re-deploy a device in a business-ready state.| [Windows Autopilot Reset](windows-autopilot-reset.md) | -| Pre-provision a device with up-to-date applications, policies and settings.| [White glove](white-glove.md) | -| Deploy Windows 10 on an existing Windows 7 or 8.1 device | [Windows Autopilot for existing devices](existing-devices.md) | - -These scenarios are summarized in the following video. - -  - -> [!video https://www.microsoft.com/videoplayer/embed/RE4Ci1b?autoplay=false] - -## Windows Autopilot capabilities - -### Windows Autopilot is self-updating during OOBE - -Starting with the Windows 10, version 1903, Autopilot functional and critical updates will begin downloading automatically during OOBE after a device gets connected to a network and the [critical driver and Windows zero-day patch (ZDP) updates](https://docs.microsoft.com/windows-hardware/customize/desktop/windows-updates-during-oobe) have completed. The user or IT admin cannot opt-out of these Autopilot updates; they are required for Windows Autopilot deployment to operate properly. Windows will alert the user that the device is checking for, downloading and installing the updates. - -See [Windows Autopilot update](autopilot-update.md) for more information. - -### Cortana voiceover and speech recognition during OOBE - -In Windows 10, version 1903 and later Cortana voiceover and speech recognition during OOBE is DISABLED by default for all Windows 10 Pro, Education and Enterprise SKUs. - -If desired, you can enable Cortana voiceover and speech recognition during OOBE by creating the following registry key. This key does not exist by default. - -HKLM\Software\Microsoft\Windows\CurrentVersion\OOBE\EnableVoiceForAllEditions - -The key value is a DWORD with **0** = disabled and **1** = enabled. - -| Value | Description | -| --- | --- | -| 0 | Cortana voiceover is disabled | -| 1 | Cortana voiceover is enabled | -| No value | Device will fall back to default behavior of the edition | - -To change this key value, use WCD tool to create as PPKG as documented [here](https://docs.microsoft.com/windows/configuration/wcd/wcd-oobe#nforce). - -### Bitlocker encryption - -With Windows Autopilot, you can configure the BitLocker encryption settings to be applied before automatic encryption is started. For more information, see [Setting the BitLocker encryption algorithm for Autopilot devices](bitlocker.md) - -## Related topics - -[Windows Autopilot: What's new](windows-autopilot-whats-new.md) diff --git a/windows/deployment/windows-autopilot/windows-autopilot-whats-new.md b/windows/deployment/windows-autopilot/windows-autopilot-whats-new.md deleted file mode 100644 index 8d69cc5d75..0000000000 --- a/windows/deployment/windows-autopilot/windows-autopilot-whats-new.md +++ /dev/null @@ -1,64 +0,0 @@ ---- -title: Windows Autopilot what's new -ms.reviewer: -manager: laurawi -description: Read news and resources about the latest updates and past versions of Windows Autopilot. -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: deploy -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# Windows Autopilot: What's new - -**Applies to** - -- Windows 10 - -## Windows Autopilot update history - -The following [Windows Autopilot updates](autopilot-update.md) are available. **Note**: Updates are automatically downloaded and applied during the Windows Autopilot deployment process. - -No updates are available yet. Check back here later for more information. - -## New in Windows 10, version 2004 - -With this release, you can configure Windows Autopilot [user-driven](user-driven.md) Hybrid Azure Active Directory join with VPN support. This support is also backported to Windows 10, version 1909 and 1903. - -If you configure the language settings in the Autopilot profile and the device is connected to Ethernet, all scenarios will now skip the language, locale, and keyboard pages. In previous versions, this was only supported with self-deploying profiles. - -## New in Windows 10, version 1903 - -[Windows Autopilot for white glove deployment](white-glove.md) is new in Windows 10, version 1903. See the following video: - -
- -> [!VIDEO https://www.youtube.com/embed/nE5XSOBV0rI] - -Also new in this version of Windows: -- The Intune enrollment status page (ESP) now tracks Intune Management Extensions. -- [Cortana voiceover and speech recognition during OOBE](windows-autopilot-scenarios.md#cortana-voiceover-and-speech-recognition-during-oobe) is disabled by default for all Windows 10 Pro Education, and Enterprise SKUs. -- [Windows Autopilot is self-updating during OOBE](windows-autopilot-scenarios.md#windows-autopilot-is-self-updating-during-oobe). Starting with the Windows 10, version 1903 Autopilot functional and critical updates will begin downloading automatically during OOBE. -- Windows Autopilot will set the diagnostics data level to Full on Windows 10 version 1903 and later during OOBE. - -## New in Windows 10, version 1809 - -Windows Autopilot [self-deploying mode](self-deploying.md) enables a zero touch device provisioning experience. Simply power on the device, plug it into the Ethernet, and the device is fully configured by Windows Autopilot. This self-deploying capability removes the current need to have an end user interact by pressing the “Next” button during the deployment process. - -You can utilize Windows Autopilot self-deploying mode to register the device to an AAD tenant, enroll in your organization’s MDM provider, and provision policies and applications, all with no user authentication or user interaction required. - ->[!NOTE] ->Window 10, version 1903 or later is required to use self-deploying mode due to issues with TPM device attestation in Windows 10, version 1809. - -## Related topics - -[What's new in Microsoft Intune](https://docs.microsoft.com/intune/whats-new)
-[What's new in Windows 10](https://docs.microsoft.com/windows/whats-new/) diff --git a/windows/deployment/windows-autopilot/windows-autopilot.md b/windows/deployment/windows-autopilot/windows-autopilot.md deleted file mode 100644 index 16e1781d6e..0000000000 --- a/windows/deployment/windows-autopilot/windows-autopilot.md +++ /dev/null @@ -1,62 +0,0 @@ ---- -title: Overview of Windows Autopilot -description: Windows Autopilot is a collection of technologies used to set up and pre-configure new devices, getting them ready for productive use. -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.reviewer: mniehaus -manager: laurawi -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: deploy -audience: itpro -author: greg-lindsay -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# Overview of Windows Autopilot - -**Applies to** - -- Windows 10 - -Windows Autopilot is a collection of technologies used to set up and pre-configure new devices, getting them ready for productive use. You can also use Windows Autopilot to reset, repurpose and recover devices. This solution enables an IT department to achieve the above with little to no infrastructure to manage, with a process that's easy and simple. - -Windows Autopilot is designed to simplify all parts of the lifecycle of Windows devices, for both IT and end users, from initial deployment through the eventual end of life. Leveraging cloud-based services, it can reduce the overall costs for deploying, managing, and retiring devices by reducing the amount of time that IT needs to spend on these processes and the amount of infrastructure that they need to maintain, while ensuring ease of use for all types of end users. See the following video and diagram: - -  - -> [!video https://www.microsoft.com/videoplayer/embed/RE4C7G9?autoplay=false] - -![Process overview](images/image1.png) - -When initially deploying new Windows devices, Windows Autopilot leverages the OEM-optimized version of Windows 10 that is preinstalled on the device, saving organizations the effort of having to maintain custom images and drivers for every model of device being used. Instead of re-imaging the device, your existing Windows 10 installation can be transformed into a “business-ready” state, applying settings and policies, installing apps, and even changing the edition of Windows 10 being used (e.g. from Windows 10 Pro to Windows 10 Enterprise) to support advanced features. - -Once deployed, Windows 10 devices can be managed by tools such as Microsoft Intune, Windows Update for Business, Microsoft Endpoint Configuration Manager, and other similar tools. Windows Autopilot can also be used to re-purpose a device by leveraging Windows Autopilot Reset to quickly prepare a device for a new user, or in break/fix scenarios to enable a device to quickly be brought back to a business-ready state. - -Windows Autopilot enables you to: -* Automatically join devices to Azure Active Directory (Azure AD) or Active Directory (via Hybrid Azure AD Join). See [Introduction to device management in Azure Active Directory](https://docs.microsoft.com/azure/active-directory/device-management-introduction) for more information about the differences between these two join options. -* Auto-enroll devices into MDM services, such as Microsoft Intune ([*Requires an Azure AD Premium subscription for configuration*](https://techcommunity.microsoft.com/t5/Azure-Active-Directory-Identity/Windows-10-Azure-AD-and-Microsoft-Intune-Automatic-MDM/ba-p/244067)). -* Restrict the Administrator account creation. -* Create and auto-assign devices to configuration groups based on a device's profile. -* Customize OOBE content specific to the organization. - -## Benefits of Windows Autopilot - -Traditionally, IT pros spend a lot of time building and customizing images that will later be deployed to devices. Windows Autopilot introduces a new approach. - -From the user's perspective, it only takes a few simple operations to make their device ready to use. - -From the IT pro's perspective, the only interaction required from the end user is to connect to a network and to verify their credentials. Everything beyond that is automated. - -## Requirements - -A [supported version](https://docs.microsoft.com/windows/release-information/) of Windows 10 semi-annual channel is required to use Windows Autopilot. Windows 10 Enterprise LTSC 2019 is also supported. See [Windows Autopilot requirements](windows-autopilot-requirements.md) for detailed information on software, configuration, network, and licensing requirements. - -## Related topics - -[Enroll Windows devices in Intune by using Windows Autopilot](https://docs.microsoft.com/intune/enrollment-autopilot)
-[Windows Autopilot scenarios and capabilities](windows-autopilot-scenarios.md) From 4b1bcc00227375016f15f519091f6ae6ad0fab20 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 5 Aug 2020 11:00:04 -0700 Subject: [PATCH 573/589] fix warning --- .openpublishing.redirection.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 0aba8575cb..6284a56979 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -15692,7 +15692,7 @@ }, { "source_path": "windows/release-information/status-windows-10-1703.yml", - "redirect_url": "https://docs.microsoft.com/windows/release-information/windows-message-center", + "redirect_url": "https://docs.microsoft.com/windows/release-information/windows-message-center#recent-announcements", "redirect_document_id": true }, { From 3cd8041d9c85ea188286fbbb03fe1584ee14fc6d Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 5 Aug 2020 11:17:25 -0700 Subject: [PATCH 574/589] fix warning --- .openpublishing.redirection.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 6284a56979..0b08814f6e 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -15692,13 +15692,13 @@ }, { "source_path": "windows/release-information/status-windows-10-1703.yml", - "redirect_url": "https://docs.microsoft.com/windows/release-information/windows-message-center#recent-announcements", + "redirect_url": "https://docs.microsoft.com/windows/release-information/windows-message-center", "redirect_document_id": true }, { "source_path": "windows/release-information/resolved-issues-windows-10-1703.yml", "redirect_url": "https://docs.microsoft.com/windows/release-information/windows-message-center", - "redirect_document_id": true + "redirect_document_id": false }, { "source_path": "windows/deployment/planning/windows-10-1703-removed-features.md", From c87ca0e63096f0183c8193a997a823c2b62b8ba8 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 5 Aug 2020 11:49:58 -0700 Subject: [PATCH 575/589] add note --- windows/deployment/windows-autopilot/index.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/index.yml b/windows/deployment/windows-autopilot/index.yml index cb59230323..58b2d5ac4b 100644 --- a/windows/deployment/windows-autopilot/index.yml +++ b/windows/deployment/windows-autopilot/index.yml @@ -1,7 +1,7 @@ ### YamlMime:Landing title: Windows Autopilot deployment resources and documentation # < 60 chars -summary: Learn about deploying Windows 10 with Autopilot. # < 160 chars +summary: "Note: Windows Autopilot documentation has moved to https://docs.microsoft.com/mem/autopilot/windows-autopilot. See the links on this page for additional resources. # < 160 chars metadata: title: Windows Autopilot deployment resources and documentation # Required; page title displayed in search results. Include the brand. < 60 chars. From b3eda39ea7953ce912b10fd173e9c4a2054537d6 Mon Sep 17 00:00:00 2001 From: Jaime Ondrusek Date: Wed, 5 Aug 2020 11:53:26 -0700 Subject: [PATCH 576/589] Update waas-wufb-group-policy.md Corrected capitalization and voice. --- windows/deployment/update/waas-wufb-group-policy.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/waas-wufb-group-policy.md b/windows/deployment/update/waas-wufb-group-policy.md index fc5d903422..8707f69961 100644 --- a/windows/deployment/update/waas-wufb-group-policy.md +++ b/windows/deployment/update/waas-wufb-group-policy.md @@ -118,7 +118,7 @@ Now all devices are paused from updating for 35 days. When the pause is removed, If you need a device to stay on a version beyond the point when deferrals on the next version would elapse or if you need to skip a version (for example, update fall release to fall release) use the **Select the target Feature Update version** setting instead of using the **Specify when Preview Builds and Feature Updates are received** setting for feature update deferrals. When you use this policy, specify the version that you want your device(s) to use. If you don't update this before the device reaches end of service, the device will automatically be updated once it is 60 days past end of service for its edition. -When configuring the Target Version policy, if you specify a Feature Update version that is older than your current version or is an invalid value the device will not receive any Feature Updates until the policy is updated. When the Target Version policy is specified your Feature Update deferrals will not be in effect. +When you set the target version policy, if you specify a feature update version that is older than your current version or set a value that isn't valid, the device will not receive any feature updates until the policy is updated. When you specify target version policy, feature update deferrals will not be in effect. ### Manage how users experience updates From 63e39673e800d814f57132f41de84fdcf126048e Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 5 Aug 2020 12:21:37 -0700 Subject: [PATCH 577/589] yaml error --- windows/deployment/windows-autopilot/index.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/index.yml b/windows/deployment/windows-autopilot/index.yml index 58b2d5ac4b..c79114c414 100644 --- a/windows/deployment/windows-autopilot/index.yml +++ b/windows/deployment/windows-autopilot/index.yml @@ -1,7 +1,7 @@ ### YamlMime:Landing title: Windows Autopilot deployment resources and documentation # < 60 chars -summary: "Note: Windows Autopilot documentation has moved to https://docs.microsoft.com/mem/autopilot/windows-autopilot. See the links on this page for additional resources. # < 160 chars +summary: 'Note: Windows Autopilot documentation has moved to https://docs.microsoft.com/mem/autopilot/windows-autopilot. See the links on this page for additional resources.' # < 160 chars metadata: title: Windows Autopilot deployment resources and documentation # Required; page title displayed in search results. Include the brand. < 60 chars. From b6580df67c0d55084fa7cbe81e092a0f49be9a4f Mon Sep 17 00:00:00 2001 From: Beth Woodbury <40870842+levinec@users.noreply.github.com> Date: Wed, 5 Aug 2020 12:35:14 -0700 Subject: [PATCH 578/589] Update web-content-filtering.md --- .../microsoft-defender-atp/web-content-filtering.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/web-content-filtering.md b/windows/security/threat-protection/microsoft-defender-atp/web-content-filtering.md index 1bd463d9d4..cbe01b56e6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/web-content-filtering.md +++ b/windows/security/threat-protection/microsoft-defender-atp/web-content-filtering.md @@ -49,7 +49,7 @@ Before trying out this feature, make sure you have the following: - Windows 10 Enterprise E5 license - Access to Microsoft Defender Security Center portal - Devices running Windows 10 Anniversary Update (version 1607) or later with the latest MoCAMP update. -Note that if SmartScreen is not turned on, Network Protection will take over the blocking. This requires enabling Network Protection [on the device](https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/enable-network-protection). +Note that if SmartScreen is not turned on, Network Protection will take over the blocking. This requires enabling Network Protection [on the device](enable-network-protection.md). ## Data handling From 113c560bcc9897d47cd69dea01ceefed76c868bc Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 5 Aug 2020 12:46:58 -0700 Subject: [PATCH 579/589] expanding note --- windows/deployment/windows-autopilot/index.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/index.yml b/windows/deployment/windows-autopilot/index.yml index c79114c414..d7c52fdbfb 100644 --- a/windows/deployment/windows-autopilot/index.yml +++ b/windows/deployment/windows-autopilot/index.yml @@ -1,7 +1,7 @@ ### YamlMime:Landing title: Windows Autopilot deployment resources and documentation # < 60 chars -summary: 'Note: Windows Autopilot documentation has moved to https://docs.microsoft.com/mem/autopilot/windows-autopilot. See the links on this page for additional resources.' # < 160 chars +summary: 'Note: Windows Autopilot documentation has moved here! A few additional resources will also be available here. See the links on this page for more information.' # < 160 chars metadata: title: Windows Autopilot deployment resources and documentation # Required; page title displayed in search results. Include the brand. < 60 chars. From a2bce345bcf9cf13aee38021a43201325b4b3ef9 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 5 Aug 2020 12:57:25 -0700 Subject: [PATCH 580/589] no HTML in this field apparently so removing it --- windows/deployment/windows-autopilot/index.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/index.yml b/windows/deployment/windows-autopilot/index.yml index d7c52fdbfb..19763ed2b7 100644 --- a/windows/deployment/windows-autopilot/index.yml +++ b/windows/deployment/windows-autopilot/index.yml @@ -1,7 +1,7 @@ ### YamlMime:Landing title: Windows Autopilot deployment resources and documentation # < 60 chars -summary: 'Note: Windows Autopilot documentation has moved here! A few additional resources will also be available here. See the links on this page for more information.' # < 160 chars +summary: 'Note: Windows Autopilot documentation has moved! A few additional resources will also be available here. See the links on this page for more information.' # < 160 chars metadata: title: Windows Autopilot deployment resources and documentation # Required; page title displayed in search results. Include the brand. < 60 chars. From dba2250c10f8f4534b60073b53c0478433e27037 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 5 Aug 2020 13:03:57 -0700 Subject: [PATCH 581/589] grammar --- windows/deployment/index.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/index.yml b/windows/deployment/index.yml index 91a4c1fe76..dbd960b4a7 100644 --- a/windows/deployment/index.yml +++ b/windows/deployment/index.yml @@ -1,7 +1,7 @@ ### YamlMime:Landing title: Windows 10 deployment resources and documentation # < 60 chars -summary: Learn about deploying and and keeping Windows 10 up to date. # < 160 chars +summary: Learn about deploying and keeping Windows 10 up to date. # < 160 chars metadata: title: Windows 10 deployment resources and documentation # Required; page title displayed in search results. Include the brand. < 60 chars. From bcf554c9a2ab5843d2103a47d8fc23c4005eecf7 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 5 Aug 2020 13:18:58 -0700 Subject: [PATCH 582/589] fix link error --- windows/deployment/TOC.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/TOC.yml b/windows/deployment/TOC.yml index edcc70baaa..27f6ebfdc9 100644 --- a/windows/deployment/TOC.yml +++ b/windows/deployment/TOC.yml @@ -92,7 +92,7 @@ - name: Deploy Windows 10 items: - name: Deploy Windows 10 with Autopilot - href: windows-autopilot/index.md + href: windows-autopilot/index.yml - name: Deploy Windows 10 with Configuration Manager items: - name: Deploy to a new device From a0d4665779f34e6103cf701490f755b4dbdf7eeb Mon Sep 17 00:00:00 2001 From: Tudor Dobrila Date: Wed, 5 Aug 2020 13:47:57 -0700 Subject: [PATCH 583/589] Add note on system extension to what's new page --- .../microsoft-defender-atp/mac-whatsnew.md | 20 +++++++++++++++---- 1 file changed, 16 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md b/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md index 667852eb82..0a442a8808 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md @@ -19,12 +19,24 @@ ms.topic: conceptual # What's new in Microsoft Defender Advanced Threat Protection for Mac -> [!NOTE] -> In alignment with macOS evolution, we are preparing a Microsoft Defender ATP for Mac update that leverages system extensions instead of kernel extensions. +> [!IMPORTANT] +> In preparation for macOS 11 Big Sur, we are getting ready to release an update to Microsoft Defender ATP for Mac that will leverage new system extensions instead of kernel extensions. Apple will stop supporting kernel extensions starting macOS 11 Big Sur version. Therefore an update to the Microsoft Defender ATP for Mac agent is required on all eligible macOS devices prior to moving these devices to macOS 11. > -> In the meantime, starting with macOS Catalina update 10.15.4, Apple introduced a user facing *Legacy System Extension* warning to signal applications that rely on kernel extensions. +> The update is applicable to devices running macOS version 10.15.4 or later. > -> If you have previously allowed the kernel extension as part of your remote deployment, that warning should not be presented to the end user. If you have not previously deployed a policy to allow the kernel extension, your users will be presented with the warning. To proactively silence the warning, you can still deploy a configuration to allow the kernel extension. Refer to the instructions in the [JAMF-based deployment](mac-install-with-jamf.md#approved-kernel-extension) and [Microsoft Intune-based deployment](mac-install-with-intune.md#create-system-configuration-profiles) topics. +> To ensure that the Microsoft Defender ATP for Mac update is delivered and applied seamlessly from an end-user experience perspective, a new remote configuration must be deployed to all eligible macOS devices before Microsoft publishes the new agent version. If the configuration is not deployed prior to the Microsoft Defender ATP for Mac agent update, end-users will be presented with a series of system dialogs asking to grant the agent all necessary permissions associated with the new system extensions. +> +> Timing: +> - Organizations that previously opted into Microsoft Defender ATP preview features in Microsoft Defender Security Center, must be ready for Microsoft Defender ATP for Mac agent update **by August 10, 2020**. +> - Organizations that do not participate in public previews for Microsoft Defender ATP features, must be ready **by September 07, 2020**. +> +> Action is needed by IT administrator. Review the steps below and assess the impact on your organization: +> +> 1. Deploy the specified remote configuration to eligible macOS devices before Microsoft publishes the new agent version.
+> Even though Microsoft Defender ATP for Mac new implementation based on system extensions is only applicable to devices running macOS version 10.15.4 or later, deploying configuration proactively across the entire macOS fleet will ensure that even down-level devices are prepared for the day when Apple releases macOS 11 Big Sur and will ensure that Microsoft Defender ATP for Mac continues protecting all macOS devices regardless OS version they were running prior to the Big Sur upgrade. +> +> 2. Refer to this documentation for detailed configuration information and instructions: [New configuration profiles for macOS Catalina and newer versions of macOS](mac-sysext-policies.md). +> 3. Monitor this page for an announcement of the actual release of MDATP for Mac agent update. ## 101.03.12 From 96e4041ef9e672a50698814be7b85ca366a9d634 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Wed, 5 Aug 2020 13:50:16 -0700 Subject: [PATCH 584/589] Acrolinx terminology, punctuation --- windows/client-management/mdm/index.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/index.md b/windows/client-management/mdm/index.md index c16898d560..aef061ccd2 100644 --- a/windows/client-management/mdm/index.md +++ b/windows/client-management/mdm/index.md @@ -33,7 +33,7 @@ With Windows 10, version 1809, Microsoft is also releasing a Microsoft MDM secur The MDM security baseline includes policies that cover the following areas: -- Microsoft inbox security technology (not deprecated) such as Bitlocker, Windows Defender Smartscreen, and DeviceGuard (virtual-based security), ExploitGuard, Defender, and Firewall +- Microsoft inbox security technology (not deprecated) such as BitLocker, Windows Defender SmartScreen, and DeviceGuard (virtual-based security), ExploitGuard, Defender, and Firewall - Restricting remote access to devices - Setting credential requirements for passwords and PINs - Restricting use of legacy technology @@ -48,7 +48,7 @@ For more details about the MDM policies defined in the MDM security baseline and - [MDM Security baseline for Windows 10, version 1809](https://download.microsoft.com/download/2/C/4/2C418EC7-31E0-4A74-8928-6DCD512F9A46/1809-MDM-SecurityBaseLine-Document-[Preview].zip) -For information about the MDM policies defined in the Intune security baseline public preview, see [Windows security baseline settings for Intune](https://docs.microsoft.com/intune/security-baseline-settings-windows) +For information about the MDM policies defined in the Intune security baseline public preview, see [Windows security baseline settings for Intune](https://docs.microsoft.com/intune/security-baseline-settings-windows). From 986b5bb04c028cf07c3ec5fee0ccd4572f3cf7ce Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Wed, 5 Aug 2020 14:30:30 -0700 Subject: [PATCH 585/589] Corrected spelling of "utopilot-support" (prepended "a") --- .openpublishing.redirection.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 0b08814f6e..47e645bcc7 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -16316,8 +16316,8 @@ "redirect_document_id": true }, { - "source_path": "windows/deployment/windows-autopilot/utopilot-support.md", - "redirect_url": "https://docs.microsoft.com/mem/autopilot/utopilot-support", + "source_path": "windows/deployment/windows-autopilot/autopilot-support.md", + "redirect_url": "https://docs.microsoft.com/mem/autopilot/autopilot-support", "redirect_document_id": true }, { @@ -16416,4 +16416,4 @@ "redirect_document_id": true } ] -} \ No newline at end of file +} From e0f0a32c792e8279e1a88f6789c1a8a5be41fcf6 Mon Sep 17 00:00:00 2001 From: Tudor Dobrila Date: Wed, 5 Aug 2020 15:36:17 -0700 Subject: [PATCH 586/589] Release notes for 101.05.16 --- .../microsoft-defender-atp/mac-resources.md | 30 +++++++++++++++++++ .../microsoft-defender-atp/mac-whatsnew.md | 6 ++++ 2 files changed, 36 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md b/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md index 602205a4ae..bfa2d7bd61 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md @@ -100,6 +100,36 @@ Important tasks, such as controlling product settings and triggering on-demand s |EDR |Add group tag to device. EDR tags are used for managing device groups. For more information, please visit https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/machine-groups |`mdatp --edr --set-tag GROUP [name]` | |EDR |Remove group tag from device |`mdatp --edr --remove-tag [name]` | +### How to enable autocompletion + +To enable autocompletion in `Bash`, run the following command and restart the Terminal session: + +```bash +$ echo "source /Applications/Microsoft\ Defender\ ATP.app/Contents/Resources/Tools/mdatp_completion.bash" >> ~/.bash_profile +``` + +To enable autocompletion in `zsh`: + +- Check whether autocompletion is enabled on your device: + + ```zsh + $ cat ~/.zshrc | grep autoload + ``` + +- If the above command does not produce any output, you can enable autocompletion using the following command: + + ```zsh + $ echo "autoload -Uz compinit && compinit" >> ~/.zshrc + ``` + +- Run the following command to enable autocompletion for Microsoft Defender ATP for Mac and restart the Terminal session: + + ```zsh + sudo mkdir -p /usr/local/share/zsh/site-functions + + sudo ln -svf "/Applications/Microsoft Defender ATP.app/Contents/Resources/Tools/mdatp_completion.zsh" /usr/local/share/zsh/site-functions/_mdatp + ``` + ## Client Microsoft Defender ATP quarantine directory `/Library/Application Support/Microsoft/Defender/quarantine/` contains the files quarantined by `mdatp`. The files are named after the threat trackingId. The current trackingIds is shown with `mdatp --threat --list --pretty`. diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md b/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md index 0a442a8808..4b48c8771f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md @@ -38,6 +38,12 @@ ms.topic: conceptual > 2. Refer to this documentation for detailed configuration information and instructions: [New configuration profiles for macOS Catalina and newer versions of macOS](mac-sysext-policies.md). > 3. Monitor this page for an announcement of the actual release of MDATP for Mac agent update. +## 101.05.16 + +- Improvements to quick scan logic to significantly reduce the number of scanned files +- Added [autocompletion support](mac-resources.md#how-to-enable-autocompletion) for the command-line tool +- Bug fixes + ## 101.03.12 - Performance improvements & bug fixes From c2ff67d89d6eedbe78a8c3b7a8607f2c0e0e7cb8 Mon Sep 17 00:00:00 2001 From: Tudor Dobrila Date: Wed, 5 Aug 2020 15:42:00 -0700 Subject: [PATCH 587/589] Style --- .../threat-protection/microsoft-defender-atp/mac-resources.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md b/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md index bfa2d7bd61..eb1a1339c6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md @@ -25,7 +25,7 @@ ms.topic: conceptual ## Collecting diagnostic information -If you can reproduce a problem, please increase the logging level, run the system for some time, and restore the logging level to the default. +If you can reproduce a problem, increase the logging level, run the system for some time, and restore the logging level to the default. 1. Increase logging level: @@ -63,7 +63,7 @@ The detailed log will be saved to `/Library/Logs/Microsoft/mdatp/install.log`. I ## Uninstalling -There are several ways to uninstall Microsoft Defender ATP for Mac. Please note that while centrally managed uninstall is available on JAMF, it is not yet available for Microsoft Intune. +There are several ways to uninstall Microsoft Defender ATP for Mac. Note that while centrally managed uninstall is available on JAMF, it is not yet available for Microsoft Intune. ### Interactive uninstallation From e6ef614c45f83fc657146c2f20be004989cea9ec Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Thu, 6 Aug 2020 08:34:17 -0700 Subject: [PATCH 588/589] new image and note --- .../images/tvm-event-timeline-software2.png | Bin 0 -> 53000 bytes .../threat-and-vuln-mgt-event-timeline.md | 5 ++++- 2 files changed, 4 insertions(+), 1 deletion(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/tvm-event-timeline-software2.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/tvm-event-timeline-software2.png b/windows/security/threat-protection/microsoft-defender-atp/images/tvm-event-timeline-software2.png new file mode 100644 index 0000000000000000000000000000000000000000..cb98b850f9f3ccd15ca5dbf4a8c30dcb92769640 GIT binary patch literal 53000 zcmeFZc{tSV`#)Sti9!h>TZNE)%dV1rU$gIokQn=r6e1Ma#=Z@MAu)Dii70D~nJi=9 z#$*PAv3sWbb9djLyWj8r{{DH6<9Uwfc>Wo4nDc$T&+EL-^L3rqdA{E7*LpgtmnfMj zPn|k-NnK6Z;MA#eoTpBm22h+M{U=^pJ@C{ij#KK&_lyEg|3Fiv8EuCzAF;pVO$KJD z8h+W-P@D%p^0S*%SNEqWnYhG_zVt$-aQ;nxb({o8XS$lE65af(JlV9zg7a+j)^I6(! zw5KUK&%I1my8Q3Mkj9Ar_gnn`WBhLX|9fm2{_V^azVI8rt-kPma*}UI-8a<9Pv-D5pE`Lenm5dnay%Dh&n}Pbs>$6f*1l8&gbV% z`RQS2c!WPTIjm}x@HQF?@SLN5To`rT#-cD0w(%}Ij#DelpbEs?H6EP$av`2M8PWOv z2imzjOEXsz+nYSvo^darbZw9iRQ#Y-$ou=z6Bn1%n5@>XhtnS@NpiB-!X`9z~|AX0#5M9~4EC{ThOSQoCyD z%?_$=EmroS5HlPbAt9CmERt$@e97@b*9z4R7~%rc%xM920wXb5+ojCQq3rd8>%$M+ z01;9&+Zo)C{ej8n+!-76ZPs&`YTFyO-Lhm~Hb`R3ZhJ`ATiWq6EpZCvd*~#VO0f@r zDNY1*R%Xx$FC=EJv?146Hh5$TLqu}4F>V>@Pf=UIXV4(?AMAw!nyKA%{O zM$isA(92dB3uJSIpacgG37LIzx`*vf*_CI46^AnB2Z5Xzc%itEK!42vW`MZVjb1Wk z;fEP*kGHH4eV-8vKtwbuYt$1pE>Bz~`WiH`wOI8_DO7g5SYa-`a6L=Aq8i@EK)uv- zfTzpZeJSCg(4Uj;H89)fu`eQh_SMhOc*{A|eLq^K3pE8H|3;M99%M(_gi789aMxg? z%C=o>zE^r3YqvPlbWr)x8$EvL^H3!va@rJY*VkMlv(jASmcYAHQP?ib9D2R*aT|GJ zjEBY}q4UG!v@BQ01J$6?@eK$~QQgMU)dG#Hs`NQn2KxYporA&yVcgj#El+q2k_f|f z(*-x%sBC7Q8kKRYjJi>N8+UNKC{ePVYnAI<(Or$y>A9^OjqNtEv%Kx(VEs`*&8n`S zs#OEpu>Uqiz+)%|WZpG?zL-NgnS(phgcON!NX^lwsBXmUJjNXg5GXVL(HLZ`ZB~JX zNt8~!`{9#kkZ|g=wrQYi7Bh{IX+Vri><-XvSOdB>K)B=lEP$%B4#iuu_tr45%QE5F z5twFJWJxbMMWd{?+c?>b!+n6>5CirN$e<2cZ6?~Qchx+Cp2tETLziE`l9BkKnJF(P zqs?mpFE2AjSgg!=9ND@VxFGX)obHU3#L2xb>RP`V=sCPIz9VM}S{V-qXi)?>inO+MaGy(WdHH*rS2 zbPxFg9~aBqf~^G^P<@RxGLU;fl^xCNJ#IZXnU;zuN7i=Zhc9(Wj31+{UOKR?w^#-F zcEZ;9lNNSuYUtu#2RfPLJtnc>XGm1F%tq=p7+l$ zRPU?kLdU#~OE;S-K5SY(xg**nCjxu*V-MoQJqY&(Vk+ijTc8;agyD zU6Oofk`IP(O)=Xcejb=+jfCl#Fp@9X)u~jmmH{zXV^Ca4b){CLL10zk(QFf@)-6s3 z3vPOX>2FN;1`}47#InwZnJOYTjbtW5x+DC}UeCMq6UNzUEw1f0wyz4FM6EfDZEoPs zO#5NvcCRGwbu~XXeg&2#r~bmqQrO>MlUB{W7%XyQ$)-lhJ5j^c;ubtzzw7>+IbDhT9HloVUEXDrHE1Uuuc&)HzVSbx%9T zwKb$SCg_yQ_XB=U*uV#3wF`TXLg>iBNe&d~WIhc;n0#$9*^5`ld%2im27C_Fw9Cbd z;u|tm1Na>Ap}vFFhz?6{U+;L(hvx2RDb}fZBulaXQ3$~h^F_qYn#_I4w~5})v>Wlh z)R$kiOo@Z_(RyRd7C=D0DW|w^1H)E^$!)<91B*hvGJS@L7CH0#DKeGl4=vc;rmz~K z;iL~*%_eLTI+8Q>^botZ$M$$ouchy*vxI?A^$d>MpVGblX?t9u| z2Of~6%fY7LWwIiBvOij{4w}C5nf^ZNwLf#+LFbB#Nr}w(+fjjBW81lg>_(KJl!Nt6 zVsjrrE64*aJUp>q88)?spSFvaK6xhPIbG~?r@{3@O5l#}YAENt`EnMXN{A4Px4u(S z+JM8qc08gkLb7)p2qZ-cR=}LS$0vi)63bR`_GZM2hQTBw6X^7@+;SN}apom9vuR1H zUq(v)fD2Gz9v)Q5(m-qo{*g9{#`tCrPdtKNA9vXQS_9!bs+3y!%(NYIvLv;?Qjp-g zzvX%~(R!2-dW5wpD=7H1@4t%RZ8(_iIG?n2!F`HH9JWx3_*fQtVqz7FySaQ| z+~|j6JNl7)l5CEPYg@vCkBUfXeJ%3OVlg3UvTLkj7NSTN1Ine_+Wm z!-}D1^g^CO;qMQfsypi_Gvxw@Y&rO*jDJtBliMS#`p#b-KfL zq9q^R7!L%t9Ph(i8_S(w43kZk^by&7_ zIDEvX=Js{9sL?^gB|C@q4(3+|{VOAv(^%$wJuG|(I7Drhy>13h*&N%iIahBlJ3O(N zGhWIa=yn8mt8|r6g^y3L8XAb$c&INIO*mkp3VpBlnYIWvO*tckA zDRu*_!9kuQa$ZDR3VrUnHPkGaujatEW&7io1%OFxO~*jP4%cvR--AA~GH#0&b6~B( zriU!^!3oYwi_HVEIIKx<*_$Qe zQr8Exc2euZ7t)><))GPtKJ*5@@17q&T7dQk8_Ou2R4oq-`d6gwUFLFQ`N6y~@M-Hv zR*NW}TV4jEzjQdfy+h=%nii9T2 z6O^UvrI6+GsrgVa?9S~5fju$FFGqkfhUV2wF%wIjHLN!irbmW`xyXnry&hTUc02(F z$byUAJn9gh9|m~JB;qdcB%>yIH3lWD1jKJIVB^0C7<@!+;!R~eM^OYKx4yj$k^I7 zLf5;K>&b*BXZxy(Z`tmCA*y{blkCfZY=)w!DA8nmA5frA20Z!00!qVIGb|rpPH55Z zo+$btJ7`tMt_Yp4uD!QWG;8D^0@-po{G2{5asYaKWo8cuYt)Oq4FLL#Ec4!dU#)|4 zFZWn%@hl7z6T^#%Rum23b8jSjmJhgmuA1w+wA>62AlSz@yvdbYP6V!1==V()IF+Xy zGaDHLccd3v63x0ZT?KrGFt~o77MR4QRq;sG0!RZsRg%(U53OeKBV;J3b*E(wU>cih zzfCuG^9q~Q7>?KT$Vwd(hRw3QwVb^c`!;@vVVm*afEMtfzADG*R8R%46DunFXx^9e zaTbfIDvAU|1!Duw$|sWtGwC0u zIMYO(?sFS2cJDLblMhYGhA$|7N^4O%UI9{%oEk11Tno^iK3-rtT3V+OCkk03_s?qp zAcVQ$=4Nr|jdHSBpXJP_6Nr7qj>aW;wM^hBxel=D zmREr8+BA@=?!KSb-(%Z1elqiltam>wdR^^ z^0C@HHfZ-nhcx+~D8loS#d-@P`eWkKivfnRh)r15@R~l_JC3Q_?&DJ5 zoe>cJ`q1S%+Br~QDQNZ0##^b(=L;>U;A(xAX}*yMigyh2cy)IV`}do(jeX=GvI-W0 zP{sV4Sq8f~(?gYBImM+bEE>0pHck#B<5P4-U}vNYJKrz5p-yZzl|cU9b#r_`Qi6 zu_I_2Ga9o?CLX@nTE#1Xxs;>(RXg?L?-2@y5&LY0*KAM7myvE=Y{Y(VJ!8$0%G>3j zC)ufX1KeipU}U~=$*}P;yU#(1l*C+N+|so)gAzU0>MOvNMt*c-d$X1Yvi3FR{w>0d z9$>?h?S^KA&c|&%8#>Jdre~vPlg%YQf8tFj@4NK>IyJXHz#E1t6<4-(=+K#RBEME9r6hr;qvq(TN>XWQl@TXfvDSjuJ;3k&?bu zwSnz9c$slDY?$TA(s6Q!W`W5iw`!B)yPH`BV6~|uAF4q#w)kqcd&RfC!FdICLrT~C z6)z(C9KHqyx^6dR>(96klwF{cN3lw=934qlXvE%lh!ITh+lJQMZ|dfv51u?>Ne$g| zy)sKemtj6L;>{&CPE=0tr9PiHiHv|s7Npk_cQMBxOEyb3JgvaNu@BVCaCZ;o8sVM2^ZI%mVCfbhQj0S zGzWWFb6OIv@!Qq3l3EkHwO&XH;ZO{PWbmPJHkj_pamg7Y_mFS!>ZPCZ?s8i#r=;}j zy5`S1cGK%!(i>RM}R%F6ja{zUQe$0OOBW(?Lw;x!% z+=xgz;KW*zN(Y(53M*WfQ3^pfU;tf_ePK!h8cLXqSfsK13b>x$UgG}*p^Jm73gjph z4-8bV9_pg7NSk9C7%30JjObii9T?ClqwTPWFyDuT9^e%qy`f1)!yYg9r|um&5-ZD% zw6Xz}G2H&d>;LTV3Uq%|uWll|{Xkv%n_t%S+>T zZcDUEBvp<+k&>}Ms2?|$N2xBqD({P!?;B_PoVqq?1sb6lqPAHLcfUU^7yQv! zoN$fbu*7Oih^L?GVS^Ay@72}SqEci2URQnF;kU+yV*VXLNhck8>2%SMKqgodUE=%g zA&^*UVLW@1Z-IZ_a`*t$+l8%sImkLCEh?@lm zS&Xp#fcNvR(8`=q1j`F0^ix%lo7{VpCm$I(O4-vq)#nqk93<@o@LCcwF9|gTc~;0n zQdO7&dv;glX(qH>73WkDn- z!y(L{u|}HhJtn`WifFrmvsQ(=DStdmSu-3VbIf55~r9 zo!SQLK_~Q+H?J!$y#l17G;9t7t!J9B3$F|KmZeuc9TloA$_rC>=0%dr^uD^9C3{LN zetv>VtBWb?#{<3Jji$C*`Fyu>nNfsdC%|dAib{hF2*AV2^hcRS<90?;{O|>hrMoU2 znk+`vhLA*a!?d?9&k2GRRb~xa3=2+zeHVFr8n#=6T3<__`3g!uM)#W|Vwuvr8;XZ` zvGDw5lwR3f!ZO2{&7%cG{@_N&RP0M4(AXwCl{fl=>pR|sep5Sc6zuCHyH{-!oj9sc z0FqK^b*ne{2s;YvLA*aLrnemAZmd6#)jtKFR~xQ<2---}eY~~uO;kugsHI#v=Wx0h zFtQxebP)&65M`V$%qSIGE^3|L>e>=Fq~H(^AUjXPR`dC#@N&H?s~zQ4?eMeYv=MbQ z(HBTn@fAZ(WxIMUPN?YdN-RqrS@MmhxPbGY2aEINNJwJOrw?g!&tcj%9uhOcT1tRX6H3Ss9{ z;U%s#XC;pJzwEbvOQn}FDv7ZG>iVa%5b^$4yQTVKdZq016`wBYv@V``M1_`<(<%Q3 z-@znKkZUD8n>Y}!yCu3>57?foS9M(pEea9RZVYY67~5=XUU(MMqjkCyd_kv9T?blQ z4gxidj1mtsz}ToC%=_RI^mVJCJ%_%KDm%CMeN@j$e-i4D|I)yfVxdJec**;7@5M6r zssGT3}+H6yHu7!2%_JhTwZS91)k^~4qRY@KHt1PJq6mVc!81Z^9Y|A5UZ@4 zP7x&r?!?}5IWzLCy;MN<-i2b#+q!zo@?#@}Hn$57fF@_6gCqPP*0fpui=o~%jDhL)t^r!Z+F~Y^(9MmFo6mO^$Pu%f`OMf;86}`DXlVUGca$xT+$LUok4en*V z^tAm$Mh!f~Ig8Ou2YjkSHVwKr1<<5Oil6LGU~+`Tx;vSiyONE3vXr?~C;o*ss?d9H zK;P>ulU*^xHYq;#^1t#v?~wr;c+1jxQr#|d%2>AM^=S#;^@JUZSq(T@n?7rOxm7Eq z&eJWRx8eIKaZj`**8K^p;ANph63SvdeM#Z%&cOXxwLCxhkB@BPaENf!4z_K|1-6>a>_OFsnm_61wWQF}-?PNvQHs#k zR{JW?<8u9)CU(*>J&(N^367_cc^~3lY#-bdAdxAS`9}Vkc2Q}!l-oSfL1ug^FP>)n zY68yJGby66*7qZI^KLnHUmBm-;e(ad_m~!svh9evuMz-zl}AVW5|HoaVzlo2gInb8 zCu0%c1k^5FOt)4=QoWQZtF#KPV4}Oho1V%k5I4TuoF-w#YKB$_kX-9`-2MC(RI55F z{%t}))0A^dq2Hu>?{O!a)SgM`LlgCYf@GbC241MFjMnAm z0heQ=GcZWekFFG>c-&0DVaWbt{cfZ>^Q%6x87{v0PGWDywWf>?2~8f_L7{i z(Cjc&N=r(rAHHre8QuY9po78N2Z8)M`9OKrt#ywz>mMnGoK{ZEZ()Qf6q2YvY!#C|K1a?I$ z8~&qq(9uM>@x+Mn#lFB5w%)yY;k*SI)s{S2yW$G3L?*h9Hxv4o$4YSn^UWqxw+%*i zsGPCxaEGr~bslXrv82y~%`k#ynW@9+LYwH(gYA)8*PuyX$fC8WXc$cpa~|Qo#CFr% z6V#eSZPcvn?BVW*CivP?Xz$Tj({yLKaDFzndMpQg>btMV$Z~M`4+ni6yZtRobbu3A z36{w(uhxvmhdn54q<^zr?sKNN1vv&_uE(EjgW4_&^b+*R4g=GU1t0BrzV&I8Lgo9O z0w)i~I9%R4pFUL@x1=z!AM4(KU(EA?ifn^5SO_45WHY=22$4k(HPGMC3V8r%U0jeP z!fIVm-;8J@J9(9o_CNg9OX`mhbc0q z3Pp-phQ$LS_g;AgKAQG1p`IV(^s_7Z`S- zboKK*AFrTB)B>czL7pNVM{OVgM4QKeYjZF$-8jnjCr=vZMQC!D7Qf#q-tlzxFyhyc zD*S|V`?{J_KfL;tdlWYKUgH%5sGVoz%mRS^r5O?{o`GbSb&7kfKX*1ernRYOzj4yT zdk(tz!+Vgi9FkYZrSIrZbQmSmIWR}l2ksaH97AQ&E>1L!Xgcm^;4F@htcoAOUKs+N zgKw_uW;kz8oi3^-EclgubG|f`y2>C>aPrJuuS>6!efN3DL@9ZfXM5&7sWZWXME`DGu3TTnc2*+E=Czi}h4?x{Uz*^5brzqkM{;7{eL%W}dJVhawMt-2roGzWO>{6ok~J_FX07wbN04S?&AF2$2(D38~tLE zQA~#@KDoYc=)o9Ib9$#Nd z%bd>d2?2bwc*$za*sZ$*-~vMXv|N^sp;MV`bRCTfo(dI-a;R0y&mG;AaW{@L_H4lpM%Fix8swWz!V^M%(gT&KG+?PZTb zrDp1@@)dT+8rdgDjuEYPu+B}VM5pCbBr4u6XKqGj0q!^-f`d?N{WW{Q+vp@V&6_^# z`+ev4u2mE44k|&9(i>HldTmHMU1dh^7F>nD?Ext6YeX*sWh=D!<$aq7s#SqiY@6(POjW92SZ ziN*nHN;BLaEd|aAeZ_p*1JTJ68fPaJk;UDfy$xpY^m%wL{&>+Fh#Pn|DtpwO0I|&H z>N*jeX6REr6@Ho9mXfhwvF=od?_7Phlxu3aye7AM~x-<)Q@^hx?S#MXT zmascnQ@6TtbLA%3Mrv5U$KxW`&*SE%J1uetngLhVvat;eCnm0A*uU>uJ zmnMSzPV4-J!e1CmB}H7gNZQt~vHk3wxds$w8Er*8$GqUtXHf^79-+B+rSmOSnz=J4 z6ja@q(6R$Mzf95H^%k#sWyt09NX)_`Wnyt7a>Yl@jO8=R#LYONsj_!Glj){$8}kE* zPPLrX_ietPRgV;=npCoA>#C}c0=8}`JPgRfrrlohPa@8cPLztA)!W4v%;kad4UF@l z?jLqkyym^BxJ$}V7Sc#n+g-}1)-=<=2VY4jI(IpjtFx=R@<>_&CbNuy6y-Eht)Cx| z`Y#sCIg_^OF2hF6Y+s((Gc1aE2_dJ6U4?aAFPYwt*Su8YPHMz}GgLykznmtcSV=au z))&53V}Ab)t87XN?RC1JTnSo=EpM%8PBmWroyzAJ?13%&f%e+;ds^n7$KgNu6DpaNkVu1)K+ zsTQzXAB`<;aCZ>5>b^-C&0SSW!$Wx}jYSQ28c#&^=TANv*?cv(iCKMF9tR}sz4)d5 z8|83o`um5QdFnSs5(=4q-TzMpRQPGSyBih0z;DISbxjSv?T#kAI%y^-Asb}td*!Vt z&mZ{KyfCIP=r*vKw?r7qX8nwDT;QhlHFo_kucj}D^NeWy$=Ydqb*C+jmT_~6%j>^a z`zPl{a2@x$ZnJYE`*?>O6KTXx0og8+L<^7b=Jt%Q${%^S=ixHcd9=*L`+jM4nO}*s zGa3!Jb^V|E+TNwGlsFb^NU}4RpL|-aVW2sU7?c<#$ivz|cdM42Fbto=*UQ!~{dtv2 zqf#ZwXEEtqN5APru~pZ$TUJ<1(^9OMx#tS2g%@GHsw`wO?;>tk8K=kNQqLDAhB(MK zLl|o%N&prS)=z66$HfzA9%WI#{-dGx^A@(96eJdsy&wIBhyUcIT}vTr4XdsQvuj{@ zl4NxJp*G~J&SDdfLII02*l=>35B;|C;(gR(b>Fh;%?$ICIJ!oGXWBsy;9u;j@XLI{ ztCI~r%PNn@)g}KcO#he$@QQFk$I^7VmlEp$%l=&s7rGp!x+WW+wwT z10?^L$V&Jr0nVW3oqWGrEi<*Pm=D%D!Z+94Vejw@q-@V#5EkC17&p5`|Ig+6FQbIN zyG2@3wQ-BW|3T*RPnrLZj6*tWcEZ5*YFv=8GJ5t+qt7rfH`p;1qsC`45>>-y4Ndg? zgcG%A_!T}6Zwc?;_{wkgnUKqXhEU|Lk?d8~+dHI1bv9^g`wM5{bl!nt94`GQcg z&0w?V=4@OxiH7t?*wzb^Kfd5?hckWl2l43F#zF%8G%^7Isg&r_y;2kN$jqXkkyRbq zBvT4bhnY+1#FUwpNg6*Uwm+c!dR5rSt$+4`Id~KV>+Y+pGdJu+F+e=KeW6BBkh5e7 zY-;55+`8K+!~}Z2U#?iQXg@k$(YknO>4CY_L%-7SwmO3ez3^3}%?bDEzhHDg*qdV5*fzK^_B3;UxGZgVxqT0zW4-a`vt zbfS3cd(vrKs1*JT$e9j?T-v#gsn!MRe|osB@Y!d8Zt*&kMTum-cbL*Iz(5-?eL@3T zl3W7loDQ1O;miJBx*Dw2{_=>C)FP>A(QcRJFO*I;_u1wY@Uh!WQup#wRMvbfc&~d7)gq8M<-Gev7Ncp*4?1ehKctdc$&ez+(k%-50ZA~dv+5i) z(75!eg;{-jx>ISjxki1pW6@0qYqz|G{wNp8q(AZP>1nE=D|2L14UWHdjz8Dk_U+kb zhx;X3{Iw<}5J^V>@G8RoRg61*Q-w915m+zZgsZFHq(dt>Wx)i3gZr=j;GgUL2RQWHRPxsfv`zahsd}yyM)fik8GAbYz#@75 zm(lN%R>S@-o^?3#R}%BTB$90uq=2+Pi4*K^@F1|SRiZ>?cWl8!DrzM z8`sHcnYg{Wwnn3Jj5ECaipS#@Z$IyO!~<8zm#8#byBVUn`&T-DvG%9F0y-hT>-&i8 zw07efc6@UV>n0!2vrnX%fL9EQuw~mk8LcSD#^V;~N46I6t-0vRu?ZM_$KTxFrN@d7 zVmP?=y_kCNI`=Ql!t-cJVRIYtn(i;7|1pc1IfnW|J)3yR6`q8C!(IQ8EN*&BG2Px2 zt)1^Rm^cUZL4VgD>>--6JBMn-J__CyPv+Z37}FFiH69e4aC`P>K>U|a2%jZ;b3x?n zit_9Kb{$fR`i?5ZFB|vefv{g+@#YIlAszAr6u!YLvg&w7O!|5PYaj}%=GqID6! z+rW{sc^c=@s#oI9b56|k%h6GUWY)T1x`^2nHK;i@?XT51M|xBwx;>Gb?RUg#q`P~0 zWJG^Z4>4b6Bw5uI*SD$DRltH+FoT7B7N-w@i~XhX#aE<-c#x-)`M*(uZp5?A8|% zc&!y+e|27jb^EH)%T#4pIf6A%24#{cGdI37bOjm+z1h;?Qo4oaS>i=l%{~mG`uiAh zn(ms(E85DFW~Vk$jkf>Nl!PoOw4RLp$9_Uv^q4WD^8LXqS(nB6y4EA;K&E`zwC}MB zJMi$GPR_Ajv2L*j**S$umn65n<16yJ(+MSF^cHHy)1|1Gu~!i325y-I`7+hktwNB3 zn$RV!23Dl{)9Hl{#UDL?wCn%$kWYrsm&0cpYy=TT>GvrJ_`YAZ=5}zF8j=X?c(ZJ{z}C6DhI&cVk$o^#UCA0a@wo+-$bL;Zjd@h zFR3n;-H*QPslNFuPJTtlN}f{j9M(OAoHm@v2Biy^(9IJ;pY^^0J`W_PzDc4W~fL|ySvmG{hRk!QC&Z(g3mIk$p||X9q&W<==~;Q@*ZeobJj0fvl?tK zt(i*}VN>WBWu^91|AQ>yd2}CS+gKWRU;i&B`&g~q2io6?lhqc3KBfSRc*toJ;}y#A zc#Q3gQq`N$esh1v}cdPEHDML$BbTY_K)-rg4bTRtoY#1F!I-2IezZtZ`)u0mN(Db zU<^2USxm2tzmtgnfk&S!{~M93eg;7;i`(k? zpt6rfi)&t`vKe596+FJG{H4rW3X(Ev-(O$-A4awzK?7A7d(wm7vElDKMJkhIIPG{0 z{#}HW{ZeuY9s;$fe|MKZOB^H(u3aI?M83>Y`*)H0^`Et}x4`Qt(A*7l>rH8nJer`~ zDATgSdX*|a^{fjL59>-7J9CTkPi}54m7P4`QT|J(@Ys8~QpEQyW>UpgQFDWe(C-;p z(y5~Vh3et6w}pRDa>`J9Axyn8@)GB6B)?bPT9fy1t*d5@QFRwDD_7%kN;dycYxboY z(}gqYt~d`}LtXb^8xo4ojP*V+5tWqTo6)(BUbT^RgU;!q$c?D%-*vOtFD z7)a-H2EbRV0j}_k@stfEUrl}k+4;XLdHU=*otc54qfe<7fR0up@-vJh6jaiMtBlsB z+Z3AHU2i9SbPrQwIWrb6|8lIAq_z+47cMu4#%n0j8MV{Dq8xqZKbm*1_q&_W z<+Z4Uo(e+*&Lzw%{pP5^)5~E^|inv1F5Twm`G`fao;w~Fy={y zIZ_6y6yvgz&^l614Om?vBs{*?0O9h>au(34TYo&UT_`qP$PeyxWho@|yKI*vrLrt3 zZ%tNR*K?UbY$F7?w z1e@Q)IvT1X&jwyESUXYM?@ub|Ce`-@NTE+8T;3HTJhEP6VaBF@ZOi zm4z(Y+A{p*P;ImqEM-i{O|RZPAv18XRIG=pNrkwymN)HItJYwUH;y)zZYE|1cbrU> zf1md^BYs=TZuv3-e2fd$OR760Rv$gn9YY_vR4l(KV39!8^n{9eAg=mpB_ivFZun^~Wd=(;>7{+}M zUy5%lMjDh|jRdQE)fQP>`mH^}IF&wPLcK)f!-~=}vTC{RAsz_EL2{4)eqxl8e7Y>Bb^i^Y4g#Z##G5XU)n^|MC&}p7S~q3b zpr++TtoDVoxcyfj*QnS4UCZIk(0ffMs|w`D7$^UCCt|vXSy86gsbHyWKBx z_9sqY$hbPn6lA=+PPHEeK6kVdp8(sK>Kga0Q8H9iR2{F@^$b*94tJI>4lLyp8v6EF znacVO;_I?CYVc&qjvgLR$ri$iKHIW5N)$gxM~#}>6e+=*HCMgihYbsVpW@o|sLpnn zZ?(y}9*o485kKo<&x0ykOKL4dG8S0BUo~9zz`}x;b+;G!!@!jahvmlYJ&jTWfi!%) zgGW!M4lveJhJJx3>3HdzMqr^gUL&!U(u4dOD{a%P-wIbLwMFR*<-$B<*@kiuIMhPX z1Z-l`W{|0j+E8gE!-Y~e;8*GVXBr?(OZMplZAS&#P!tg9#{6I(H{L~=aplzrtDoH` z{DK`RFOARy8C(1NBl{b|V&7H>2pKJh+n5R5j%Rz4=&UnR_lq`WQdt+Ohh(fT{%EBQoS;4Ld=qkvhtSII`bnzBU`jM#X0%B#22%B9765e@Ut z<1>$XN~MwBo9`8vS@oWNy@B2^v-wyKa*WHMGl@--t+-HXJL#BSv$T)xV+xA`N=q&G~8B6xZQlPxyM#hPt%X5TACo-W-@oQ9Aru|ww5>Z(DwQ+0G}SK%<_sfHU?F^adO#<_LCneA3CFp$s6M& zhaO<1DT$lu9VhQaqYu(b{?0Q5nZxa*xL;mH0=0u-YQ^urSL;vjc4Wz1L01T!1iR!M za(Ba}Sy3P^T{WBFdp5^Ul-vfZ;$4u1bI-_;8Qz>=NHs*;I84E;Q5obHyJdSA%>W!K zFF?J=jC&hQR5@dOs~NP=s~7H3rhBH!#6L#WejDL5{>24g=SL zzW~e3F2JjN8WRu`r8J~&PBMD7bs11K|bHhXmAMR?bL{e z6dM7Lo*j)2pEn}(K!XHnk*qXfnl$}dtERz411*=6mF2^4-y#RQj*0bd&zzxojN8$q zhXae)PRw6Xwn&sFddNH*pPo}@as@oNwD9_*$J%vuQ%@y(qTE*-*e823LK#_D8?VFf z;Z&zd#G@;n49~cYa~cD^V#wBnEHJJRsF6C9rMhr9!O%uQ!ns_`qx+p0zNN>M&zAdd zJ4dRt$#Qpc;nHZy`C74_^vaT}4ZJp}c!RKs<+hdHVOMQ*s~?aCgb$U(ANhLWc$>`X z%9h^@Z5xBOveKxVC3M5j2=O0}Wo+-_!PPF>Ty#O7YObCP9(TNU%ugM>irQrrv!CVv zYtK4Gwk#lgk&3ghjh>vcL}_+{5z;to0(Fzg7ZS?K{o+u#bdvrSJT5hkuj45krlda( zyEMLIQfw4lhJOg??YQ9)t328${v)c<8B|(hta<|1^6(naPaZ|wN9K-ZeLIRFt#Zfa zL7#gt*8`{FUH9!IMn#s_>Z78aVr8pG>U5-OrG zl{uxGtv`sxJ^KvJ~@RCtL~!ZrHqs8#0#zl5ZBMNLx{ma!G3lBz`*rH;q0#|^7?6tco!n^h7D8u=HDGA+o$B2BAkcs z{7Nvzib$vG`9XxUpx({%-U6qBmnx1^PTX3p__FTm%V$7ho7V5^E1$NK!pCGNV*XJ#JO{E;6 zTAP{km1TOE*O!7e(~sN^av!j+U04gsGgIfrzzs9974sckiUkFB-%koO zs}FIt7P~K>^R*?6#I&Rvb<6gfSMQrm^Wjn*;kz!Wyz7Tii z-s|qipcZZ`b&_M%NQUZxn-skm`N(5>jf=RCY=KD%tPN&%Wv@Ov8Y@$dZuPmz%Cq~H ztgV}@?Z3*P#JeyC;vd4BIYs|EO>&TGP3$=zaSr`0<$I_=lhr4I<_S3HkSTme09|)0 z*JFCODjtOVGBADG$LmBV3V5=QsHW_zFmU~V4IXMHR`218gMDht8HNyax`Ow#X7@M#suPj;7fKf{R^O+p&P)Y5r?jDnyBbz3A?@Nkpec&IHFVVBYBZM^U7`&t3Ee6L?1 zCvOnF{hV3x@V#qso=|ya@rDRUJL?Etmn1~!q&5zxliQlsQ3R#?b zt@NljbXPzd7~FE~J8%(*Lq;PrDIUSHUy$?Ea6ilPtcM%e00j!8vdzkQO+(7FXeP^9 zDq3~InvWff!%nau*7tuf`53~?wMk6A!Q{aqb^$L$WjDQ=!;AfZDq#&(qlOdVBnzAm(@=zDf#;`NHLJgRAzPYcwjd$~ z?S1C%$M1MNtBLr5`|?|+x~@BSc}|D(^5q<4&$YgV>#f$#QQU4`P~Bfb%qz^DyL+ef^PB`s@I{5 z$4-`A<@Z8vB!3)M1eM=RK<5tvXHQF5w^)X4KYG;3$-=p)>9={gl;;}2M1i3@ z?rf9{VD-IDwj9J!6q4cD=(^w-`ToXpCF}oF4<}H{nZz0*JrmPPaj_|d_9&5`?B3r{ z_WQSRPR45~XAEf?C@=h7#rV&++$b`yRzP!<`$rO~Xe+91G$(zCy`A=tga7~jT`gxg zX^|fzqR!p0?NH9`CTpf$6QSq-s~LWq)GlJ2)#2&=RlE6TsqANS`C{bHN_d{u^?w(! zeEG9~@=`YI&i~Lqx%RVv5-IBad)MUe2KLj-Kl>+_alRk_hyID}&;H4^ubuxx|K#D% z{>j7okuReEl?wc(eFP^-#`ZSd`F|H-%p*z9f$Qf9i%^iW9QEDSOzLh| zx?<0<$B`5rbydUZuk@a)-HND7DK5l%>|(RoRyk@q3EhS5O$CZMO^a(hs}mSVmGVDo zhc~Qw-Rk)Ji15?@BMmrm*E<%OPYiS^Z`|iIF4zgQUa;U*oXqur+&OD(9H!O_E_A+l z*g0GBlg6-Z+fw>@F;=kT0$oOO0Lm&G0hjL|uA0Z(PxenJbDBF#UVO*Yoy7RSm42EX z2@0(+wzp3glGuR#=cOy>X)y-mz>qG?&dWVIOy7X*>;=$BM@c+27 z@QbsNR-DQq9-Tg)xFAJ3)gRrMJGbY@mo7RRo|>KZo46m=f6+aHH@Q@jPT)ABOWjmDN;#kwyRg-xJ#z15d(r8W>ZRd5Np_k1=uCk z`Q1i@a^~ITlm9Q)-ZCu8^?L(V1SM3ERFDv)1?eu4mTra?$)N;>4hf|cq`Mo25EwdD zKsp9yXfUWDWx%01FS>R6+vohh9Y1&tTrclDweGdnz2fPe?Xxa?n&G7?(E`G3hZ%4% zL$_7?@yfnrRE}j9y*EJ#kMIsVc$u?RamJ17ExkXp>1QH!i=Dari}rC1;IIvhLnodCUaevrTVaUTQ?n;}P)}BuAj+y-NgFi0vFs)J zu6HY{FaM!=7tj|dT1EYR={=Tp%VQ|u32e47D8N)3?4(OybX2G(k32{7wEAVGGU=8& z%a`|bdfgndL}er$ri(cSxsYF$p(^MZD`)h#homvSOcH6kMy1`xYzHw<*xY(EVh_(A zVJh1BGSN4VZkUP=_i0k~uxqEaAHm1m=IQxV7PZ~^7!+Tuqf9~?AuwrdXRxg@Oa9dZ zwM-f;O8HG_aSETH;uFU}U-L@G=&)^3H;n&o0!Xrd8+O7fplMZESq~)3heai%Lp85-hw0rp$+Hr!?bxDelk1b?8Xm^eTr6MR3;$TT7BBozZ=qf|CdI*!g#T9V|Vxm2{)6L3V4fVBwyaOl?MW*>~wG?w89PkeQJ6GdM(azEpBIq0q3 znccF0orRsK>y?DjL2bTRZX%sL6!|m`r`0-nk<}BCle1(VAUI#HlJ1sFd8cd^#Cm#* z%=~{X1&Vke{zs*|{*gkr)XtZXN1#A6XS(>yCbz?$+qLmv4xhG&370lqZ?WMQ{o;hZ zHHBV>4j_q-kQ03c66H7EaPJN=>$LZmFv9aSvgazP4J3AA_D$-g+LO1LroWND`m}Z< z`-_g2S4Ak<3Xh>g!#19G{3_7SM7ToMG4e(k21n7j(GZ7!EfH6@vo|vfl`?HrBnqWZ z5Hhw{f)b@L8@scU*Xz8Rn|X8~r=>uGZ2O3uF6fI5mj5A(4gw^)>rr5TAeqcj2>dR^<=VH?;Y@_1n)XhXma#SSUJ*X zkdwPpXce-S@zQi1t3Kdxxtd#j?NmwdvsgZ2P!$}d9eJasy!q^&L+@z0cD=2j;3G%M zCwibk5O3N9lZSm(&ysUfoeNU1Tlp|k;2uRHDKQV81Z=V}fbCg4;H|tPo1+%8TBP|%w*_tk-n!j4k#eoY=#D=&u z6UXjvph)jGlwlU({?FSwQCPkH84k#%g$CAu$fyl70x~vO)?m5i@=}Y|_dz?wMYpME ziCy(b0}ko|w;j}5;xqx4TRfW__+%n=kEjy-OPmng!$?E#+4moAGAzH2G3%Ou2a#%- zX`t#(oP9u5E*6@p?jF`DYFewG@05*sKjeP?ipCwEN7UL&yI9*pqH%1kJ1%N0@*V~$RJ+u_0O0J_?K#QLJqwmXSTNl9?RL)(=kbz2 zr>kANb=bw)iu9!%DTlI_V>>ALrnL`J}X{u;B%0L@w!(tSW_@wML6 z`XBw@(Z%xC)4Wx6U`yq4NI7YGGf)fO1D|79dVkT=0miSJ)P#7d#r+^J^u^9tv2<4g zTM6t+@x1RRN}H+csrF6$0s#QpxH*&h+ZSwQY2_1x9aD5Spu;FsZ;O;5$4zCyHYVr* zzWtBLJ(0CcZ&7FTm-Ftopxm)snrMC^?F2!N0<_MiThB8Pv3-huzCjnn{eWrM(L<|n z|8f7-mozn^q&($3x{MoJFO`$zYG!G!4G4%UMJmd_w5;y?xcr7ap;?TiP_#^2WTkA{ z7B6OVYfb`cnf911Me9Dh1lV@~ZJ)wr+34;QeT#iy319T3YB<&A>9fr|3zFKgw7Z4B zg0;7$0?l=CKi9ddZ&9Ul(#=xr&X~LbPsLYFc;p+jj+c_fwC0q&(0 z{^}&k?eQF%UpDjk7?bB@HQk-(2DqLB;~GU^B(ya_2M$2@7BNl87> zsm|KuSynUHBH$HO-9B>nofmeekjWJOT3S1x=;~QgpUqHQTChA-9a$?>eh0)0cXW96 zMU}!|f35bh7Sh&TmuGmQ&2I!E0xf@?BFLeYSOj&YOzSLdT`$V3D}rvNjvWiSzI(T~ zZEF4I^ zzKQOgZ`ZWo<&P|``Dbz{G^yTu@_$C?<*GV%C`oelu1H!Ir%~c<>0d+8Hw)Y9%v&WD z8kDTX_MRLPuq$g#+F6IQUYgQeuUHw{SSx~K@@C>|n+KIiR6Q=S!|lg_($abZIqy=z z84JY&#M)Nm!_2$v)&|S^Jt-4K2k2`(#Q$}vezVts1PW&3K%u~pvDD!`_WzMoz(;mt zH=}tu*v@M`R9sV|MeBc%qnaU75XY>>mZFR*OmjpDT-ODnn4cf+0O>C*|DRbfl>Bz_ z`%VWdL8KSXIfJ2@CoJUlRAT=Bot<$RTMTfiJ-L$q7s7v!_#a3k$tKD@e}H#Ug8g4I z;WzK_f4s(Q60f$W)=J)`BbLn6Fi+nnYLT!~S5ZZo3Fxdd@k3;jd(N~4^c=k3fDr00 z$bZT&3vv~b7ivuhp3XnM#??O6%Wdm{zTX?Sy#evz?Ga#Q<4nw}5Ts!Ih-0uCpKN!m+yF0<=yA zA=k@~o?lUG8)hH>aGc+BvjmcUUu$Q_QyIQqHvXfjc6Sj70KLzkoY+jRfVd9UpPf>< z^qdXe%=ziFzBaoIRB|n5$dCQ!0Lo>*D6wrvI6g5eINPynUOxXk(Uyqa2x8GkyF=^1 zqZB@dG@jtOX4ugt<=H!GepQu|282Frm)CANO{N755)y);=W3Vi18*TI!HszAxeh>v z{?hnvbS2~~1VkeAxd6nU>}x&L|L)kgoDjW!M;RVp0`U zW0DwdVgzGYb+t-#I1FJO`^rl*>q)lD@1O?d{PT&Vj+uqpC4E4xQu}ifQWvHVu4Pax zTr|HYOcZIb>hEdz1nS_t0?L~AZDeA#C^Gwyxm|0*ZFso5an~o)Yi+aju-dTmfPRJG z7cBS@Wi!gqj!a_zwE-8$Cs2YwxkP*a{nf6dS7eE#0sJ|;qQPU$;&|^2%7`N;yq&#D z-TlVKD@+a7DPc@Sq z6qh!ie_eP>RCjgs6J_};%}0LM4L>AS-R_7*S>%o5U~6?Onckup2jSq8A`#LYHikG3 zN;0EtF`!4>8u!fmKRjh21NE`oHn^Y4RE;BjR_SWJ^~@^vt$4~3ZzYn;LwIG@b>5l@ z4b+frgKpZeZZ)#8R@pY;j>=+-u!Kic4Tn`}PP@I@=&7GFsvvdmdFr}1)7)Ll>qf=# zU<$i_*w9!yM8BBSay1iw|3E4=v2cr^NOXOfpFbfqtI>9wr{70F=cX0~Z%}8gpjV|H z%+CW~w~eJ|Rd{PL80{O#lPDC=2lpVA3FM(kE1OKJTf-FkEjRh(8>$p;qWSe)jZW9D z$9@~W%PL-{ilghCC$*0FXqSJdvwB#EKudB#KyO-}VB!>}y;k5b{j~9@F39hf{G*sU z6vCPsWBy;s>mv9c*AT)tEkWzd-&kFT6>h-Vfi8dH;i-@syt~OxNJ1S=!kU<(fm-{) zC+=^aDP)$Vi~E$r?&gO#4O*1aV(M30$L`x9l#gc)M=3=_G@|^r@RHM!rCsefX*>yW zi71+VE>;f1s4LGYQ<}8nX2A;MRUP9q#(8*8Nz>Hl6B|C0h~p<0CzYE;2tTW^sIac< zZ=cwP20ud;3YWleL*h-fm^_~uPk8#=6+C^rs6m~jV&R|g)jf+fDZP`XC;sJ99^-~@ zD1!A#4Wx`3*Vz<_4NYXT9%4x?JV5^OeYh&?i5({rDpM;a_@9H8259g-* zu<&M93b+w+^o2}V+9oz5I@Jw;W;aIIX)O52J(vWJtSZ=Cr174!`uKa1#Ca|<4t zYD4)W-V48ho0h81+E@>Sz3F;KYt!GFnMbYc{L!HP7<|{4t@2AqQeC6mi+Ec2jy}h{ zc6QEmS$>+9n5uTGfi10VQ=L7(yWfOq&3+p={>emv^VMIdkHWc)r_p+g^}mpBqkkE_ zc_>b6)7dkoa7?uwJ0|I_V&}&4I1+B>t;nlnRzhC6hbMCI?BV2!x->K;w^w-`9XK|( zQj-Ad9ZD-|ABc&)>OIfr!3-UJWw1hLt(rOu=k;3VAuy~=b<*nS)KenguWjD#{X*&YR*Spl&gB?k-!wI@?%Bn2 zDTaDo9<2AA@1e9YUn!@|qP+HWl2`467PyU+vr3Z@VoJjS}#IoD=S@iD9lDVQI zW#qBzU4-=T(97b%pot|dhJCdm?O6VT_&aYjdT&5H9`Vm5v-sJo$tINK>sZNzx%RQw zOuC)>yM9}ZS$zO?jj-}T41%hrrzo~+ljdLl&INc`Qr2o;t7$cqXi>eM8ojAw&j{yU z60J^fEP97BFBInKytP6<`GbD$l>PR{wX>wB{YA*#)v{GE1(fDje-A=t)ZqWoc+%<}Cwh}&YFQHH zv9ZL|lKw`rva(0ZX-?Ye>e;ksJE8ZA$3ChEXz{ipjN3gbSJac%(_(OFB9)K@VMoi{ zo1V(4gX6OM3HI?P+pU<)+`K%YvwKS}g?BqP$^pHmiIZinKos zk}G>mO(4KEl)ZVxx)Zu#|g9>8NG-|1(h{T(&?7I6G&R(fZZY zl44(qZxxVxupuIkZ2^ZVJIOSlt7-+;ouA8mmGiogUD_WH8HZ@AKtoIYP#!$7!P2Zbh zB1EbU$_Tpvg8{rhIzy0P)MP{`UTt)!dqgbTEuNjUU{HoxNX?7!Sza${v-C=w`8b1p zFZFhM|39^CKZ8P2bJ%?p$`H=U={an#2lj@yH1Cr7E*$5NHkh zz+D*e6eiJC75Ve;e*JMdjyvo61cQ?A5uS?k3Wx5G^(P4dAKX-^Nz01~NFXz6Bs#mG zL>KW~BF4r$AS2JX*slx)=s14xvPwiVmy!m>&5?2ok^<^OwyM6@I%7AUN30PQtVYHq zh=JIq&I=;ukl^_nK}3V=!xMjRboN!Od32>HZ@$_VyEPrX8bRzzUu(L|w9z(<@#dz^ zp~sN&JfP4rE5*8OpOv~wg5%KbPJqHHcVW67UG}J4;ZH#b5WIt6Jx`7O5yJGb$MgO` z5`$XA_MI{Xlw^AQcZ(*`GBB9l#QKaxp;rZv-0r)A)XhlX^LCDtbgNby`LmsU% zgbbVcfcjy-{?j0$ttg8tf16h)nv3eM$PEcPQoBquv;@9j%~QhrT0^N2HuXS6d2b@02E*||0d~T_sS>#O zfy88ftg>>o6;1pvr$8_fRg&(#T~#d*v?a+A85}^HZ4jN`aODOLdr?V1dmE+i;8U`K zw&E#^6GrTNw?cNdq<{RaNIFb$#M;)##GUh9=fcE&ECUQ4nAe^y7vaLa!5z5w^KiE4C)Xc*W{c`)dzg2pv z800zW?!Kf^j1t~E%F_dniO%sKPrOuG)Ai@{2D;p^^h5Eub-2qMk^F>E7nKR^%)-Vx zTxq@}G34L%yn)kr-!>o|EzDDJrV@FNjCD4~p3g>!!`Cf58dj{>)VpH~Vu|^|33p^a z^D0S?Dy8s@rslGO!&4$yHEJB0ur->a?(zQ-I;ldG1-Y&M)68_qC|&_Polhocf7H)&MMhA61bx2V8iuZI{uym0~Q%+bYKg zhp@M9K;D(NL{&Pc?@e15<#rI5o10wQW?@GIKW$-M^R;h&YUrV?*i-1;t~Vpm;{!9v ze)g-LhAtjkq-eEnys=NwuvGC>S*p`t=*rbmo;><$z`QCwL)5DL@Iq6TZ;1~mT&uY$ zV>*Zyvvk7TDZm4j?xov~U}Rbq>VlQH{ad>3xi_ z#c}$>qqk8|M4B{RLz*Y<#2jHWFcVoluyF}zP#Nse0v zVLDR~CYYRR*9y`KoYI0_){J!PgWq*Xz)1=0CJLhzmk(&GZ%tefS7PWM)bQWU+AGqo zISU3qLeVmp7WF(GXY7e&MrJ@wVzrs0OolntbOP4DRuFP%+Z^A>i<9neIc z?clPrqq8bKc!_g=IN`}jkIzF3g#n96t0c9+;=asay29`3puu}@i*Qag6C72hzTw;R z$@4c@#o;HPHFLlAM3)s8D=he;-{9lp?|q;>t5RJ5&;=BBKF6N-*%p_T zmtUWC9o9Miu{lwwLM1CF$3{;tZEkLkr~#TimH?P8MU8{6x0aKSBt3Ueb==EvDT$I5 z@TeOB#skWpn?cW^!CpBO8=CWH#FdZlHMH*K{HER7 zRupR`IzREcnSy=hwfoo>7Ci{LwQZEy&{;qpoDJ~o~!Dww$=nqy~u_S4sW4v zRJMVt=JHZ?4GUR6Jkb2I_ATb45B!jpzmlhgB;=b(XP+%Ve7E%`upY4`@igNqMgTqAyeMxCgk})K4j)7{nm|A3V0u9-xhMHF|)IU zfj0FBw2(tE8Lvo9{%=Nmez&pkYHC&%k+ zJ6kEfP-Uv#Q`JaX?r~c$M(RC7RXkdfyuXXAP39b%GM;f7}Vy9$gma;J5aj5%-=*$oDUs(pM5q*Npd{Kv0CuYXwmLVDJwe? zZa>Y!*qhGPRCn}hRT(_lqAKV-Jt__O5)3k?TdMR`msI3=TpMaT7MJ2u01e{pAe>Px zyaQMqUIID{NBa|D<6R)Go)3y+^^H#;(RTu4g;a-~Fo!<^Uhs~?jwsZUi>Z(;Wy-vz zAH|eBY#|`|xkQl;h}76SV zcwnE3#QeFnjml6x)`0f17P|GUpxLe=jB$HllijZG5~%{Cuv*D^#+^RF_^y=HQDDy( z%r{xqN87wbLNV5dRBt){*=9hJJduERa2+m=xz5I_x zEWL$0NhkBjq;B_%JX@O~8OH!*^`seT*Z-bWc197fz7vy}l&p&Pbr*0}cK46=L}6?{ z@LIE)RSc`MMw4wyzE({gfe``@y(;ie83gg~W;h=>o5GpXvLn`0#Poy{_zFBX>BSog z>;2K+1^jARRNGwDmdN+Vzi!))$)mk(duit(^Oq{})8C4WyT6EaoQKvULG>SWV$*WE z@K}{l_U!R29;10jsAaP0DoEOVyQpTnVSLF`;dp;c9$V%~Vx7HlndwKGQD*l<%69+U z+Cwdn-xt3J6p}6AemlQ{T z{npqvJ|$4<_w!tG26kjbm1t|`k2jT8DBmuLff{bTptNxzQ)4V(lQcv%nLJ{ zck%mjpkzwJITAhSrbgX2eC-S3O}k-P^TwJZVQX1v_mrznLVb5kQcmosZA3j2Emd~R zhk~x9BFK_L65Mk6>W&FGMB#PM;mE9g7PBwN8nA?4U?gh1N%+v?`G)2X zuzY-+N2m*hFrlA3^^%Y_bTEsN%{Ez!t7-dE7ubmd5AYkK8>eWBK8}u6Olm}MZ(G16 z34Kd_8I!JkwKJ%0zyEMDvAiWD#=HB-NS^hqN3g_tnt7VqtC{#=TAp#1BDbOB=*KKI zz2$CWwk;2tM!##T2(whFVN;P{?|(F(0@lNjm;9Q&q>(S8U!0l{5NH|5g!IufKmd$R zsB@|uLl42%R&7pqLM8WlwFe!01e8$vnO4qYvP+^?;FSQdSGuxJ>B)L*Ic)szPX+_{#|ry zFVl9YX;UW)0dgvg;eiA^d|&p!H3K@I1nyp{F7&9bT&rl;8L|}@dPMoft{$CUYkx-3 zw8X9`+NM64$}j}hcAu-!jgP|}SEgh3$>{6r({^8ez0a0V0v-4UJ1a4`mw#acV(Bl2 z7x~X^zz8Q}h(_PFlBUF!&%S@f_c~q-i^$3@smQC%Im*WwrPK-@?ga*WGUdaUXeH;<~db-{M$eelpFJS&+i8?E2e05~hi3LTPN$+C_q&iv z^Hm`h<4U-TzUsLS!rgX*Y~`SsT01eI%*_l|EsX|7`1i?S5AgQ9K!b@8Zb)TERQyN$eOBHKl)s1nQM*Eatx~BS$%#tED zU3(&QX74Gjq&aB@G^!fR*lBt?=Z9~RGy9zcx(t#EcBLgWG6_vj9F&KRetLIh@5sW{ z?LNPOxOgxqVxl0gW`D~r8k1ZyayUme<6cwkk`5PIT6xA+FD;ul{w^)P9)4&V)d$!9 zM5=u)*XM_>y=oy3CT(9JBH_5(bgwr#24Rztc^dmoe?NDAOF*jiy~Tu&dM1yq6?>bW zz51Pz+kX(`asZk0oW5S5t4bJtXBcoAqkXw9M@AL6+!YYqA>c&A1uzS$M2 zFvHCNqCFMIs;hE@$1%jw`6G|QNczWH z301(etfS)jXT~hA#8)$@&H0ZQ#zbgtKZ@z=J&d_(M81fvP5Z|wq|3&>8tqYj%{=Iq z74{?GUMl%_Kg4|$ksh{RGfK5WDkNJqwT<1Hz^mIVH>9@#vlVYkC(N3 zlyVhC&sJ0S*{ckv(wdEJXB()UIMDqR-vp4p z>)9zilbFwQj@va%VI&*{qW$mWf;^ecem9!|b^|(~{Cb5sdi|-P*Tl1zU-OX?qGUL} zD}$|h+)XvkK%tAj5_Q07BGX>6eyEwaOGhR%VxptsjX4$6Gof~UQhQrCb4FrCP|};N zgd_AH`!rh^+xNWAAxgw~kmy#`IYP2Om58tcq(k`n+-~aR%GgH}%F1DW_cL4ZRqn30 zt(ouRA2*Nhn_a^+5h8E~j|hH%h^#U~3dVx{RQsQIVbU!Pj(ZX&8k2f(@vU{rAq--D zXd}V*M(7mIp?xN?dU2|?lzDVRnVb08Ck;lG=n>v01uIY(>rIhpuiC+kVH1+~U(@Ft zeW>x8CAP#6uUKo;-@$znqCf4ZcF7a=H&?)+3o2o^{U@sO%Shy_?ie~3LO!p0h}OxOcdN`YqXja?mLde2 z{N)4XO?dkjLul4FDcMHfB^>!djE3!#o(_^KBBn{K+6!Pb!A{{(!38u7>;p}=U{rYK zsINx#o%PRZoC=?b4|Q!kQHRA zJRqXU%a!3-H8lKqF^;V}8@RnM6DbVoU*jd*d# zgLimIKChj*1P=$}6{z%5zTeQe1Pf@3UQVMtcOZGq0T? z#TOi9a~ii9zYpXoq0Pym{=6ZDk1K-0KKxop>^GO-+&G?kM>h?e;@6U~W{WE(tVIf& z`gAg**OJ*hKC}Ge!N(IEoH-c!zv95A)XyF*vank`(!7g>J8tk|Eg7XOFNaNpOMJP| z0zWn?AGkN=-*n{vd{Wl{o@Yz_gG@iqZt9~K8m)sbXx=A1U}vu(FB1paX(}lxxt$z5 zCnFV_R8LwE0a@&8SU-np+*a4`bFS+3ogN!8%~7oz`PpKxt1 z2N7MK^V9zA0siai{rPlGMu+>k-S6?>pWpod_nPc(tZT3hxfQHDgmfNSpuyEKdF8p7 zJv7npvqaZbti%^y!#jYnKSH#KrlCAlX1^uX(To5?1(Zb zRN2yUeSh*{sLe*%HAd=qi_pEvtFE(R3*!d_DCf)7A@P?4Ss#}++uFY+*zvl#d$Z6B zmyU=C>(*tBCv1Nef&g}Jx@>lTgP_i`grvS=du$!(_@?lDgULJe9P^Y^w$f$SnlXRf zlrR$D&(*PhSf`rFNI|F)WG@BMk(k|=c?)3~{5w5A@J8R!(mthVZDcL?6W;wq$Hoze z>y$+*lNvLx(ifmZ2EqoT3;f>7NxiKT!Q{{7>gHk0C( z-6WmjJ-*GqLi}|1u?MD!9_QbvuuZx;=&bVLS>aQWY(4i$IG>k=FM3dLy4j;Lidxhv zW3t{UYXB}b!0kGe&mA3njSzHPq?VQFmFl{j?3K*t^J8OlG*7<#bXek8dD)g`IawI9 zk2EzrzIO9&)sIb=0b$nxF=fg=TS{7ZKu=$-)#K92(7SN4`30eJpH!-ujwQV*jwYf_q-Fa6sKBBw;G&p`^{>1p#LF z?)~#Ia8^bH*29Ab+3wdCT1vyTdl-K4U-F99brxE!6vyD>y9>ln3YL`LCKz$x4R5iH zJ6&6q-gDP#6!wYA^`@Ym3Ex)KS@14c8EaeH5;A3x=U+m|SlHOuG|kO(UR}RKtaP`Q zEHIl)zumu8#BDYE$L36#akIPKToa6*o*vo}A}&pDL#6iNLQEuYncWY`a+9gi&HKsu zSDszC;qA74LfR@0Hyw13prZT|UfH~AUs&D*n6>F{b5=0r^{h>sz!|`14v8$=Q(&XI ziGxIPFa~w#ZS#Jg(tKam^i9K=>Y&05G-#~Djvw}is!TQMz^1E?|JJ;-*WE+5oEg-s z48Jcfka|f5j)^`u8EwO}EwtxeNOYX4E`Y?11%Q@c_eujaGcrK=t?#llr5-^I*||R zY6@1uH~xjl25f-=s@xPS(SakRi1%sr6>rzs>*b~vh+t>NlL_yH8!irL;$18q96G>8 zE;p?2dmY8X%KA?3NwU|+O%0OeS4@Q1L^}^JFATdrdzMe8Za-63zOO|0zWpe28kmv| z9#IHx`I&oNU9HR^z)h_`9MC(Gt8{*Ez#oAe7(HO-UGhtt<$V&qOJ0EL9NI=<^yGaq z-=aKKwxzKgD)kM3=S?6JoO18)|Lo^6!wUXqy+nuFQI6z+v>LapR%-kdqTqyizz_QPL2K<5aY| zMD=t7`aeXh)D_%GE$$Sl;6`)XAA{-Nt-b*x?g$aKCch>42rupxP!DsE^@7^0N)is7 zGOSxn9X6F$%!j`JjLzAB0Hvd{z8Rpm&ZViCWX;B2lv=v!sTbM)K#e5sD2(g{mwc}G ze14DhvfanLlp*Y%M0R$MrY|I7c|=QII&iS}GrWdDi?sdOxc>fN0Ud#CsgwYZMgv

PfpY;6s2{s5=5EQi z=k+K=+1L2?Vkg+6upqyil~gFbZp?0zyS7p8mxK}{fWXBvT6JzBtUsLqjj={8qfKhUW0XYlB^_5 zb}-l6hS^moK2iDSlzb3m7cbvRuv^+^orAVAHGFZ4@Y}7hyCh)GXobsP<9*Ek2i|VcWa!k(G0xHJI1V+aTsd1 zIA!$#O?bZp{7hq#X@%;QtCI$v0H8{e?VR}fI3C+VN-mm~5XEC*-wUcXq-xU`O#*@g z)vy_zy)9YvzV|Fi)AwqYHT633lP0EhT0Y;_lhThCULa?T5fW>TJGIKJiCFo?XK1tu z$`6(=xFORITl5HTI%t#W3ZVdFsMKsbZyw*R{0$oy9NS1T){h%XBrmG!shwI2PB05e zFnSq-6tZ+&@Tjz@!#wn1P4(XC_pkdIk(_n|b{asV;c=~wGcjb%?dqTBV_f3}oecG7 zX-+CSE1ciC05e^ZV-6O}>p2sQLxr^c2sp{BwY9gw#ks$NPVNN(%VM-?M8eEe!DQ_o~H5C$$^f2k;93@Qau6iWeB zhjjy$%Tfr0aokpzE$K9FUEo``+30{!CHC+y{s@(fV$xx)xgovy6@PW7Bo?PpzCpwF>mxEZ)5@*4qtGCRuh7A5uQGo$ z`ePrwUS&MQP%P9FqxpK}{e(4#P?Z`vG+lSidd7E|!k%!WPQ&Nl!JktIRYS@|FPS5M z4D`maiF%LE!%Wm@#YjlrUgn^2pK?tPw*n)01vTv%y*T-;fJS8y(eljI zF_q`$R44nKH2-=hw=r+K~{mP8`eh@BU3-H}NG>^i#zekkyK2Vb=_&dyg z2@6KTG7Ia^_&noxti99Aymd+_3vF2{*>A)E{W(-0#azW}z8GqPR^kE|*1iF$dFfPbg)#ZDgzL{ZC0P+uoRha)VCOU?+NnHsRn$R;-#9Tdj)XAJVd={awR_=Gq}?Ta~2} zR-43_c;#^5p3@vn5g(=@t?o!!l;7s1E_e4Eu0n~GE$t5xm6=A2NX^BuE-lE+>WG2u z2dyxNKg)d?J5@8=a;8pGKUrJX%D8UdYelD_#eg=K?xEV~^XG`h#EPy`_WR%do!S=w zNTg40sFy8MI3nPfK_uL|mz3W-s?as>hfvMt}9}+uGI}WYxwvR+i706v(Tqnvvg*=Ad3n)*CAn-n&mK6T?;5Z1BtTt~2pKbH;_bQ~Xj*ruKof(<*L z$57VD#s4X-$A(@a(7I-iJT&ZLm_Q#{@AZ-NM*OHR#qstNxju6GFyFS1?7`JrtHz3_ z|KcZ>e0Kjxj!D9e$S`$%&xYL4>!XbI^QDoM&8iN~?yw-DbAvXcW8KOhO2aq*DAyNS zFX*thLnsMkx(aOiCa#R5zwELG(u-m=PbT2|$Mq5;)hP^QB${xpiR6mZkav`apH!5Z zph>wi(~5bdK2r)nEVmGYJW(X!WVmGBzZ3Ci8DB_g;kvz!)?4We&PZZohu3EXIO0&} z8ZppJyKNLlo?!weY!{{2Rffh(ytjKK>w<_?G$bqj)c9gYNa-7-fMcIX7JvVb`;hFV zBu?XTpyuH{&c-E3crfYSRcAu&WnYT%fo-}D9YWT1{`e0Ua%%G|P`t9Obnanm{t2Ok zdeP-8q;o~l#}N+AZW__yB#6pishm88NHYc5re=mn)=z?GuIVVI*s_a*C!(5w2X59_LBmb z?#G@uW_H(Ep^OJCLg1g!}|7;sw#DE zZf+fc#gSJxrk&4EMOtj*Kp7sH#92P73(beiY;e~Ne{ot2x^Zd;Z~YtxW*x7~48fLSR4no+`< zx(h>T5x@{(2`kmjTbf^TWi|En%lnEQzWhYJqkY8FsZbXes9ufx%R43J?RA^eu)40; zKa@!^444EcF6MXG@gGp6BgJkz*?HU=7oRWDe(>_D*kOJYjW}pCl}M-Y?o_obtx6`e z61@xUf|6wVs8Sd~baZ;bel5-z$EnU&!BbO5+wEsdoO!a(@|&*T$qimd8frb6V$OYP z(H~6w_|@u3o8P9^zef2DCMlxaP8QZbEAdN_(IsQM6sk@P0S9omc^mcq+qbK>)64R- z6F-=1};zqnRX&f_xRZeS2Aa}U12 zUHxWVrnifSt9&-s4N(N8t>H_1*>B&T9p_X1S4IO6Hp3 zKWS0LZ-DKYwuvGCSG`_*0tk?sPSg3X9|gO0`C)8#f^c-x)_JM5EN#vO!HIPeKawG( z3j--foh@Dn_s9&j8>JEA(PA3c%R;b$`W7>j~wGOg+3d}zbA|5 zT33oEC2Nf2XJFXSApUVgY=w>U({;P}&TKZofzau7{?9!bbkA@EB=+9!W_ro#mFwq3 zYH2du~G${;;aXBzkH07$&YDn&$p zzd1whZ{Gqy+H{pg7>#&-71xER0a!3U6)W(mk;8S_rY8u8Ozw_Mt-}o6lHjv@J%qG% zh`1{9_wH|!Z9eU?0=eLnCX2@;%%ILN8}e)?Pa`FnOM!McxYF8BWU&5&8S2CbA`jI9 zHs=hJPB*NTe9yc*;8Yg(LzGfRqRHcKs=hQyQ$VHFDs8(jB}Al27%#Lgr^+=@ z%3kE?CJ^w=evC;-8rJyVR|9;KlG!!@9{Zaj_Q`s!Y8fJoHJsQNdqAg--L&8wtSMkW z67A|Te#$I4ngn#Doj5;k2l@9h9<9)x7sGp^uPJF2Gh^XmS6yPbht+^C7Wt#uekvlV z4+JOtoT`8zNDFSvmed(HH$8L)4s(WtA1Ed!X3OHICb@ao}B= zA;Th5q|L0_K;SA*VSNfeFql9f^U$yUPnh6AfF1Bd` zH=dN-4*8|4&#+3Wr|o1+$*)%}!0vPdO^u_gqLF@);#Ep!CQ@h@t^hp#Hv|%~VQrNp zzap$0dB#ho^ztA2c~OZ*_4>D$VBU%`_JZV8j~BXrh&{pSz+n9)4g z%7osPa>a2Vjp{@n&{_Vo!rK4oyPs`~!*lh<*k_eAKF4hn*{*JHlN$la>_LhE=^j)f_`fj}fE&sHt_|L=)SWL~ek>TNnZ}y(b6+|ii~wc?qXZ`1 z@d(pC;k2wQTMM@4cy@{)^v@=AY*NgsG`ce|SmXdWZMaykLu|0MBmS#q#R5HIWA~PT z?)}|rk_joVK4Q$Vh+e*Y84(`-UA#*I*c+l+te<-E&iBe%J~I0SM_A1h=^%a;IEGnO zyWf2?sBV)FxEqU74)E$e2x;Q~&vw3$x`Ct~WWxvFwQ)dRWWhn_&%0DXW zw+9lW*zq|vqQp>BGhr|yER61wM!`*HKz>NEIUDzNjWbe8xC4&UE@Ua<3{C5h!Yl9e zW2=0ld21}^29s{>V5iD>g!n3x2vj+iS_E4U#BFs%_0 z5x_MEMM}f2KbaQ(z{l&z<{~@5s(o+gzcKj^@d=l=`t?Ph6*C|Jup{wHz5O0A5w30E zSR6Af9|DHl5zz)zj9~!|SXx{010F!zJP$lSTQ{9PU6JgEQa#`3f5`EMGdx_E>&uwv z7VdNER3OC#`<^G^A64~BZbE81GA;Y#A^jYb2YYbTDLN~(7U#`HuUiy@^U9mXxYLha!aI-o6)0_F8C>(wy9DNO;TaBVhF7G68SC z2fX>-_!QrN3QV$dJ7NVK#@l>6=Biw+yW(i%lcRdC1gl)Ao>y3=Ett%+!yZXg&FkwP zH*1O^v%!R=@E4bVB9_z+el6~N;V94FXo@Qy7z}c^NTylPpWnTKeosnnCD~&)MX|Ip zDcvzk${ShYzrCDR*2Tp@Hw^>pIfxMd9C$o|(ar~2R4Ey|+Xu-RE$Lvh7*8qqvLAsnwun zS`@Wqp`G`3z`0(fsdtGxhk+(Hi9B$cS+J9%SXr84sZ+&HCWE64VxE+XFk4ps{9DqTW zIE81`T6AKOZOuE7jiY8=%WYFd2=8dN2lX0*105OU#(|%Ric5f*rz*w#PpfS#sSa#v zu^=KUTD{4|l%@SMfc_q&G-}(P<`GN+G+6l*NY_@6CUKQprg8+pc06>d)`f)jJ z$7<$*s{K$(Xd|n`ZgNXJiM~Ws`?)c=qEW6DFu|{6dFD?03xcJS&$bceRHr5&JA-7_ z(gUL%*Wj$sleXgR?M}b#mb}ejvAo9>vQXppOfOsMz|1%%R{v4@^@x*GctZd(rJY&Y z!Mi7n$@ih_pL?}_3L&5at`4djOkGFv588xRP#&W$w+dH8>WN?UxysF@mrZl(3Jo=! zVG2A{Yrs<_B`3eA=0FVU9?R9@i6n;#Th|T7xzLj-NZdqfD^nXUH1KZ+qK@WTav_M+G;`5|_#&FK51U7&-qW}h&m@2C|bkOg1x z&6|7J4jrp=fJ_af05kq{F=Oh-9Jrkdxa&P6=YJiP7gEl+2d_hRY~u~`y~EgOZ+wo6 zpCcmjTzXFcIT^X90_eU5_F_`3!NTxgaN>z~Vf2^9#z9WXD*0AZtVuB)S4>u>9svyH z17%~=N4tL`<%@ItZ=;A($Xae<~UZpvpfm+TPwSl5u{@Cz@0m{rT}?hCFw zv0XHps!S>VSD}Pd4Q~2EdwYelnx1|n`SihJ@DbAVZ0y1QVs0lpVDfn$Cno;ID!k~( zz5}YfhY#eg=}!_30`V4P(8Nec(+dWM5A+9)E-r6a2egf?ZeY{=ng(`S2acX`0eccB zEOlSQuJlJGh|FFkUwn|I!%cZGY`EZG^5CaZNtHJ{WK3FZKR>JY2k94oavieGRC3n& zg)%3~i?jq3cBkT)Vu)L9?1GOP^)UuhL#de|MG8bv>3&c`{@eobOGOpeyhu5o#-;;w z&*O3|A|Mc1M?PPHe%br0JO7I;f|KD|TNI|>6eaU0P$FGOV_|D%Wre@cI}k9o=!v|; zMgHkp_S-z-OMW3v7KbN2zWf}xy^@Ta9Kl3j`)d-oLV>gc8D;%Nsyd&GvOs}h7sjCx zRdH1S-hnMqE|4k>1ob45uAo==zO(qcsx?CkHDj39yyo*YONZ?FQxfeh8`kLi38qe+ z?pXx@fNfAX#KtV#K6_At$N$KvAZjf#eLBOE9yJM)K zOA(PAU;3-B2iM4Am~-}h&W>yEYwuoB)doEFIoYX-A#nAz zhc2|j`*Aa&1WD!}SMC3~%GXf4tGTc9ABr$P5HA2C9dMn2h=~7%hX1_=d9;fY)}5zd z-*A{y?z2}RXpN58L-EBB$n#Spz*OzEL!+QxSty1Qz?_C_BloQe1|D+hZpmlh;Q>U0 z$b6?j#VCVQulU?*m{kZEFB(2va+&KV`QO17jEfH6#+SFF+ zVr9NMU&x<#@Cq^l_eGJqzHu`pJ9xM)iPKI9;F(>_ODf)p_z{l#3gVjqTruFh4i(HB zo$iGCD6h&U8|7Gh^A)s4JF%h^0r)OjB3#Tn8~FuAJI?VNbcNfMEeW4HHDKH2+U-3U zS9wAqj%unT)b(O-va&lz`NuOFinohG=~}(k?Nial*FC3TUZ8bn`@`)&=tRIVX3J@5 za+xZ73+MK9EoM^E)GPpCjUjIGAG9+Z3}s*>Ngb{EvLd*C2HE;_2vq6NpCM?CiLenv z61Xlj-=*(`<&$Bs&o$!t_z7b2NkLDKtwSU)yUhN`F1&3vlkI5)A629Sea;(Vx0n+Z znNTB}rNk>i@Yacj=1x=hJfN>(=c={wmqG1g^yaMHjs;(=>FtL7ok|Kfo5Lml%Gx1m zm4)Q-DThaH{e13O&r@6Z*F1ZGdUXr#(}-mh$Wa`gw0EeWKi9mvL8zHsN~-1XM(Hu+ zcxCNRJ#__H=Dz&NA&k3H-!J2MZ^)(Tcv4djD&2MqA75$J)95GO5r)=#ntHCF=w5e! ztWu%3()cV+4ZvNxfBDO!w0O1sQy5|=}iU7p~b(D=kHfPdQlvNTFu{DQzDZ=& zJgc6zNf{uWrGj$~YYld-;f4LR=x#f;$z<#5+(3FJZaBNCAffOhaeKI)_khjnu=UX?xSyb#>?ykqns=D!Ss(G z-0W=%vabvX;dt_~V&QA0tOl2&(AsEoEuKro>gNV_s&I&-(6tBbl>^`|gP}?Osdla- zAuf-FCd5WB4D;<^d1Tk>-P~|+YMnBEKt z(I(wp7sD=WXW4%1lC#R3l$8;+4Z7S;rLsRf!;8cI7Esqvzyzt}ZikW!l(Yt7kI*sw z3}7%EeSx7c?7MP41My0^yR*gBE2};y5Bd^CP7|NCKwjbOVY#zPwrEjQIatC`z+c~y zaSj|+`5fKdVK@_^!m6}QQ&V^byLCE+`ReQRc4}es2{d{bMsmJD4h9vXLw^mJ)h zFbwcQbcRKO8}#con)U0BgTO6Y^Vuv=WEGxlIas=+WSD)oJN{k}YN+jcEYZqDLCv0U zh5?gQ|CbALm;)oldQoEhEAw=l(`+bctumb0eQPS^`Kw_B@@r|UBzj-%5NF7EO9@i`+_Sb_Au>vZv1{{6z1 zUQmyZQoUf@?&^bNsIZ&fm!h&656_QMm1O%*}HByrf5&s z%4r&uClhc}mhstFsYV8soRPc~br#02dg^+u7$&o?svHy<&qfw*>#!1MG9J=11!w;7 zl71Q~!D!??W$CgJ9W~>G71^k$sJznB(mJE0ALgE72@U;xuexr2SPRjXz^+Phe~CmI zWt9p?_2LD>`!Z39JPxZLZZ!*1i8E;r?9th`XfUlql-|-bfgxx)O7AbUtjp17V?`$YE_X{Q9C+;`?vO`u;Sp>j#tY z!8$|n`1}M{ikXKqK2YYv;jmLoWOmJ~nL>;=|F+%fbkF75c2BS2ub}m1h+ZG|&x@t_ zQKR)rCT$1+Had45!SH_JT2>RYk#|h!TKML2C>W1Pl~5=Y|0?AGY8`zrqmsEYV>2@x zkG?WbDnLeq;zK$Fj^i}H%Z#nLWj2@uVPjt|iFw^==q*7VCsp?0Ls6^~u?s{CN}zmM zD1Lba)6u$>rKztdOe^5z=+4g0O1BU8k%|C?f&i@c^j@EN9|aYIjs|xo32LN$v`=H|=+C&O&7xK_Pt)s9#bAK(Uk3XyqTxbbJ?y4mNWkx*YLJU=f`;kKI(Vw9G( z30q9&byEb;s*A*nUzGU0A6r7r6r4c8UIHBJDuKf+_WK{#b~Xu@I1K#veJQ3NVBpS^ zO7Hv>;E$#H$`gEr5u^26c1EG!GyCDk_E8usVEoi(j~>swp>f>)g6nnk?OnMK`BeuG z%ke6n&Q6O&sx&CRKgQBV=Jr40RJjIJ9_cu)gH@>Vhqi)(Fyd)0@%232=S$a_@~ow$ z5!WPecacvJw{~@;QT~cZeEaY@H@Di4oTvGnh&kmM0Kf(3B|eR8US3{MTRw?Mq|o;r z2t7?ZUmH#DlO9tK2J)tAD4#9|=l*;YzAgBr;!k&zcxyk<>-})K*wx)``Co<={;z;s zqehU7AOU8hB+1`Pz#(!y9gtF~v5ch#a!|&~%0ZTWo|m{w+9B%gYyF;k+W(9QOT$HN z>g)j{<6J;ZSi~3HP->LD-#LB>7P=34o8 z=BJ=FYSU<~l6aMkO5skgQlf0KMI?Bv62Qe-P{aY4B5rr1)cBvLEKLkqYq57IhReYsDn`WjUSA(jnWhR< z*GU4}P$lptDKd($=C2KU17YAtY;IrrzjYA?TajR(ZX6S<#1e;3=1M4no5;CeXd3{-I}FqkL04B!pnBbAU%}z$ zUp1pfYQ_{|i$se3vz+96?nx5}bhNs7-F|O;P#b{7Eo?+3FPHT5*5VLy0tM*ZQPM!= z)}_v|V8kJQ8Z>~sK9vHB=+wq^rnB|QHl>#$ooMe}yfwjKyE`1c27zw85^KIe^y^c= z=Y7R)aRS3@0f2#I3-i|Ra)eaD|3)B|wQnfA}Zsh$Ns%PB*~T;i(7@X@9^(`>g~f`=X*>j_&SnE_mWH1W(!=T!=&gf=(Y+QZR^B0L8SO#{F+saI)k0tIfL!BB~&2=RC00!@$7&^U50pabCwx z+lq9iB_;M=g^efUD-oC+mK|Q1Y&Cj%2suyr!s}Tl(by|A5?({i(~o7`S)hEcG8R7} zMGZK!s4z0f_g3T+_k%!US&YN4xb~`#lGhJ8T=F-VAIRgiFCVUdU`tkspq36A_{P34 zJ;l`PuERBFGZIXu6W_c@C&L1N_er6S#yZxr0ED;DxWq;R5L%4A4NW(1^L;aa)Uk7F zT6I2cOJq64ISy{onF<1U!Oeq=Of7n$Tv1zD(0rc(M8Z~pFqQoh;+hwjVq~;xk_jM9 z?bnJuTGuVIqzq8=FpDG4w%+eHLxj2#ue{ZGb&4(9{aoXjI2W8g9Tq{cD*+M{;#)~ zVMcaHtH~-zW4w~;iOd5RM)}V+5MJNfWd2c96>Z3TZD)SgoibzVsAJa(wgb^vJvrU`V%kSvvSf1ZRNIp{lJ(*G|A<*g=DNx&C*WZ1)eFWDl ziGOH__?lonwhiok}|WrwD_VUN~T2?RVU2(8{Lfc&3%)fmRUL0^Gd z>(OnW^AAla=0D%3QB<^TL$}Gy=lXr@!!V*^VlHr$rvt$vbNS833=F*>aNNsU;L_Q8Y6s8Vf^ zDS=eI8l4WEWKB)ODcX2B*itTlOp-KrD<69WVVkkL(1h$34_?nc@Lq7Us3S;aQ)Zr3 z+{MO=PNNLIdyDGzzM{708)vSyXlV=01c99K?6na|qh=qYA`qiOufTqR+JsXl#33)u zwcb9HtiM&wl+IS}jr00M(ZgfJcKc^}n#((nNVdxUx)NK?hhemL7d%<|-a#dS@$7JTLqQ-<9G#OGT3giP@b%1F z#)-*RDxtvCro&>L)H+eR<+?<+{b=dpkS=+M9f(&bGEa|&-ryPZEXltumZ zjdGS{S@4${*Wmb=LY?vZD!jBR!qNG)9>Wq`BjznAGV%nBmrw2~{R{aJ(g8z~PBugN zFph8&_V|`~R#PJ};YzE~@{W>@*O!XkSC9x}A{<9;qG+^r*nDFb7FFM@-uAkUK7Tps zaQar^mnZ9ojf2PEtc<-%rP}st4cq89aI$xL%w95$&{=Awxw!PKl20 z)RC1_0RNlyY+WZk0$$gpUn+c1q2*pX3BW&l#ce`Ef=q@CctNHz7}(exmoAxa0tTuL zj!-}G&L_)+Nsm~Q_ar&E60K|}33igx3NjT;B-!4p-a=tN%YN{-aUz*}>4`y!k5K5oyW0K@^1MQmb=6~XRIkWJ zlG|jtvl?V%G?T+i-eTym_77d1f7b6X+R{x9Otjk6nfJb$aSyXFuoBWX{;^A@G$QpoV(;pmJg67tM z=&>(fNt}T2Obtk|HRXO4Z(+Cy5|e$rD{qpYb$Y$WLZ!!FdeO`E){3CRBb()Jh}*Te zX#pD9BzcAKcwIm7wCiza+D#`;!MB<3_a!Q39$j5az+tx_eY3(Sp8zV-6DZJY49|^B zo{M7f(r-bdSebIQ|K%lOpymn^wdvk#1h?Po;KAs>U-Y_8Z$Rf9S^x$IA%LbW46iQi zGTb`e=}NbZ=nmWXB2XUb@RX~?l#UjKIb zh_n~lIbqstX52shldv* zcs#&3BRgJPeKm99Q2$mH7bvizp2rSsr(F(bqvFHc#=G*{t3xes0cb!~)Dp%O=u%^8 zMS2OM1wGDf;;!#rc~}5{T@S7$Vk`mBS>4>;c+^=Z z3mXn+;mgCuoer9DC!hgaGCL^^?m>^Ocd@^}2-Y1I)c042;&@z2rd++;URGx~57A&K z@GvRuw>wUW zed;Oijr17Jb$oa9Bjoy#!qpLhNZ zKvFl%=lYfZ_6vYu=79P*v%6}N|2pWGUjt;O=YgUr{}Zh%SN`)xFWhTjF%%+mHH!4V zjQ0Oo(mf_X!1L3{f1HhfmP^sc2~<81w?`{pYQqazw#cE~Y~ohE=q|Lg72GQca55*V zLlZ~JKxB^K=YC|^9@-?7DlsFJ+ueF85ILm0n9!HYdTQs>HPWgepE7B~b;Aucm`95d z2OI_BT{T6t)6Me$=w4!yx2aq2@s&aEfETc`N-xcq;vN9Yw)OB!H&C6-8`9UN9aZ2-p zlY#|A;f<$3M~C5mm1iJJ%)B#B;BHDCjs=ckt6>7yv>ViIvxp@+-f*$@{Jh%bNvT4T z3t795w(Q26$nm5kd?dV28P68o1K(LMw0%hDBDr6)n`elOdes2Qd_V}JtuFu-|3)0D zq5;v}JYwW8NRh}N4&)W(uRLLTiH{TT)dCaG7^)bUHf-VeY{}x<;qF@ZTK8D}0af2* z@+tTIlw`NX_(LC)H64L-x0GDjHl>wHyQ6hgBl0H&p2oi025XjQFB;CyJFN`>RCgx(ob?%m!8(OontSy~Xp4q-dGlj&~b3;32(p1YE1_D4*iF z<*vs97g(qhn4n#6Iv1H9X-YL{Vxr=e_?G(IhyVKCF4q8M^0tvz2wSSC=E&i;L)Li& z&d8W!X@+_&*Jx)?JSd=xZ=yL?&TPNyoeImAu19K_yW?jA6}YX!F_>&m=3CFYDRHIw zC^V&}0`Ytcs(JJdh1-Qn?D@!;)5Z*Au@0L~DB*3r)oH&rC?XPpWwG4BEe5{UTt~h? zcoSrO#u@#nVBkYs={2So__C!sSUZy*v`=y+8J^72D*u8v90?A#GaCz1@#I^qYCwX~ z9(x7M-{_oHL(h}S@kZ$|yzW@3E*$W-P3(ufeEZ;LROZXc(pzN-MAvBhvOW`KC%vp4 zt1g@gH;5)*8OZ!V8Lzp@2IGhA`e9m>V{VkXi?D@MN8IXFh1Ht}O&mWyq$rk%)zd`d#|_bPw#%x<=f?XDJV5JYd4oyAoX$&7RJp$-nk+l%DMyF| zeWnfiRxbo+=_Jw1Kk^Dz#ePVGT94~c7P&MWi&>>wFvB02_mxCedg83b=(w@X!nGvP zn5J4f!m;|8Y(cqe-v~blapq8uoO$2SZiA-7?feZGj+l#*717xd|6R@mQC!TZ)(i(Z_t&BriFz838=UJs1A`;-fIhTtaGPw2xPL_a`6 z%)~|W$r8%N+Q&RpRJL!`*$WLp;X}d|YGz&aG`x0FYWxD}eu;YW9iJ4f54*QE{f9LR zBZ!90_HBFV52EYOI$@?m>h(eu)P$Bp=^QS8*fB@Wa!#~0?RB{Yja6#nP8(0g!H!3q zJ!9^w3PxTOL)AFkA=blVhF;@=1D9IA1q=T+0S3+OEO)dDrOb7ijpAVNv2t}{dz~KUxt7-M4A|k&W9DCXJM*Ru~NW`<()J8wF$dh zX>+6T8TOPT|>2N8hN5q0$3{hhPto;rwqUBTo_`|qlgtF80)Sizhgm# zWWtE?UAX#j8UHoZwOL1L&{bIBINvub44)^B=6e?9Pwa4~KEKjK6Ot?ESDcY}kznNK zRyRpf7XNU@JHI1UuGam5F;|S>{&B`}qhSvLi|e$J4kjY)8huT!ZjXy~Wxy_r@U=zJ zUVNNYvm!Y$B+HVkk)Dr*MF{T_Kkp$jpy7~#NH^ihQ7oE%piO;Hm*TbQ*|?&GGIpD| zyob0P!ZRW=vfXjSeHe*T3^E^BBN*G-a)MsdDUk~d8M56q%0Njt+G*t;^3=@bca?$! z%Q$pZ+o;XC?Pu%748Rj}u@Henj@yp38#yi(Y)&;ab%phVn@@?LT4yTwgo8`#D5>hI zJ-I`>y-e(;mF-gELkAKOPs;aUDRs`O^&{jjNQSSPm~RYY3(LZr!6Js}+*PF9d)tfN zl&(pqk>?&SAYEgF<3{@1fl{bH4|iA)GOk>mM=Ir-=$w3%R}Xn;o9vvSSzL_!`stS) zf5-d8FJ#Gl85{L^TpK zHkmtFOrw+RCM5JBjwXgru1qRN-!4UY=+3AIwMlZv(~lZrL_tebbL;B^>rG4E0BwjB zn;?&scV1D@m#(+e&ZL)^74^A;5mVDr?uRjdqM+@wo!qp91?tB=VY=>R3NkB4XZXg` z{-Gl@G+zTDuO|7$MMj^zP%FE2wx)mDAbxUl>zdX!&AkSqZ^J?a@3%^Vz@DN$XCEu9 zCF2Q0dP-HZLI($7sj*rziTr%2^T8`A^4X4)I|DrKKF~;FR$gKAYIPE5z`W&bhB+=3 z3B-fvh9oh&QlZoi!R>i!(t&`9%vyoB6HFNqMn3)H9tDUI_f`ivECw%K2eI713^_;`Ze<>d zNLyG_(=)10il%smibX50cHd=@ZMCKCpXb2i#+Uc-=#FDOW8UTF4F_` zW__GB(m?{oy13W#we2Qh(&T6Ici2p^PPq9?BO9b}xG&-`v%AED7UiA}@$5v_Ts5Iv zMm1IIhFFw*uU6Y9S z&FSyEg=CV>{8L;xrK~~5g=Ot!i_l$}La(m{j~HZZD(bR)m+hbAn$JJxdD@TY>o{w|4hoxV%Ut@aHXbH(+fO);Qs_0LIei<9 z+oM^Zm!d~K({$5Lp0zY(ze%{}EH~<&VP|-dVpm-{@8iqMVBOjOlIQA|lPon3r-1gA zCms1m3TR^_Vx{=%D#N>bCLdSqE35^V&eIjsr}3d6CDR&4!U&m}y=4-WCqwUHOy-iw zj0_bUD6gs07*(Ig(A?)aoHSQ`OBz1D=?L)8RPgb@b?K){t8?{nE07kw|ico`CqxB{r1z zR9{9O_}Ypjbu`UP-`Cw=6zw{)>M3xNT(lhZB__bK*R7xC2`TP(fsM}%V0Vv{S6e7M z=4M%{Ic|d$PfLe4&>ma7nVRC3L8@XisFBQF%>lBI53=I|-PJC-s>g{}V)bzh z8|;4KgokOe;Xmv(R%ai~L)5FuSvPXVffKj%f*E|Mb&~d<-Q~y$E%sb49%|66&zXuY8nE?Y6~s& zGMI@ygH?+x+3K2~_2+s1W1Q4Pu=!Lj=u9WElG*rZ0h@mang}VFTTv)JI%^z@;u4x} z@KpT(D&mH+m|Ezle50l~B654*SW>kVJTi&uubg*vBP8M_r&9LB=y;~8!D9TuXu&55 zK@q-=L~yy(z{31!8XGqbzoz)6RSl7d*#fwU=Ih63s#&4-_>sy1SwXWwyhcu{G#~dT z*HC7o{*1wX2ZL#H$Y%-o8FJ~lbgSaF%j+t=&?Qm}0T?v}%V);^-Z7S7i7N4-W25Ip zP4+^Gizk9Sypd?8r;aJq6Jz6@EK%&nZ&c466EEJSgF|8Y%03}JN=L6+7QMM)*%v83{q z=D=7t?M!hR-eS^J(OwsvL>8`UZS%rCq?Fm_-FZs?p`cvK>x42aLn7!VsYkZDK)!&b3^ng#DF=?m%zYAp!Q*qK!q>gL z7<$R_2&H#}o3B$DYw@K5UwII&HcJ&c4v=|wvf-KXDHU3GVX{|tZ3^}366@qB_2d@& z08Akdo|r;fsJSP+ueR<`Q+t|_F@^j3GQIk4LC(!kGP^X#oVN{$0TYYyClmD_#Jf!H zuMka;arh4OXg)E|3q_{9^`B$;B?$`lNSstS^fO;?YRtCy^nfa zmz{c?QieI?D&d^^R1e(;q!ZRnB4!k$8$3n!UOtVG_;j*8GRDCpwOodWqcc}eC39z* zaiE+5WU(UXVkotalri$NZeXK0I^0{J6@0|}<{%7puR8~55tpZ*s>!&kV@)xbK5{-0(ip5qea{s?b z!gs(UYyg>#i`nVeHq@QC1Fo>Bqm$rgdndoXU8(@Q5gZbeHs%<5#3HD0e_F-*m`DTP zo`;6ZGl9cOci{Yx3H>aQrGkpI;^E0RpJ+`eBTrZaIy#&F2W}bl84a5Jxj7w+8zAC> zk5wQ^izN}}5F4?jNB7e}1|AbcZABIIp1ikNu zo8^UcCe)_MBzBIN&0881vr@{em_a)jnDXj|8tDegk+-{^?ZH+GogTAEloCu2ib8f- zkoq%7nLG=|O>UWWZ>CFDM-q~*n+|Pu8m#XP#_y>&iPd@1RScfZI+Grn_)>d&zFMak#FFf;eIl6cf68uBJ5@-h7?AsA+NVr( zXoqR(4akAa=d@8)@1USv>3ldyJNSS|j(KjY5O-|m@DY5J*rA`7a(l6qnBgvIMUdvO zn#A?))&~p)x=ajf2xgm?;%iWY-(B(qk*{Z&;0Z0$)1F7C)TD%n*!WZAuaW zEdnQ}H>0166W{I|1e32c7I(43W<74z3~@EH85+CogFdEKKUH8w-VU|E@?BZNH4rTNCe z%VSWnDYnL4AyCM%b}?S`KWz31^f}+| zL_fKJ*^e_G-QDsOB~{rKD7dRG0)=(TtqxM~Y?U^Nk`Ufd5njMVt4bM0XH5#1a7>C# z2|8ZjDp2`AuD+E(DPin4X8Cros!4gwT{HKiFcZNtpIe||r#)<+TZurj(<<(k*UQ5B z?Vw|{*I86gL~fat1>POYQLJ^i zXElOrs_PH9f|<@anBs|KxZ?;hSMMOgMvZ%D==BQm_qeO0(Vb?u<rNF~DE;H^l{*7x9k`^c<&$2^G}uq*V=j|l zNT@bRf@ZSH>hbI;6xmCZ)lKyiH;}dTPcTh z=fKBeqy<@^IXiuF{+(gnYll8?d8x&dcikFOT6r^{tQHbD$yrTCJEPfh9CJQ@djFA< zC1U!4iL2FbLwGQTjKa-x2efGUP!Z|!!dw_;PcPq4wN*sJHreW(fx&$EJZw*G6f6)Kek}2=~@2~tm@;~1JkMe(V y`O~ZXpIrWTkN)uIz8{VM>6ibba{qtG[!NOTE] +>New configuration assessments are coming soon. + ### Drill down to a specific event Once you select an event, a flyout will appear listing the details and current CVEs that affect your machines. You can show more CVEs or view the related recommendation. @@ -114,7 +117,7 @@ To open a software page, select an event > select the hyperlinked software name A full page will appear with all the details of a specific software. Mouse over the graph to see the timeline of events for that specific software. -![Software page with an Event timeline graph](images/tvm-event-timeline-software.png) +![Software page with an Event timeline graph](images/tvm-event-timeline-software2.png) You can also navigate to the event timeline tab to view all the events related to that software, along with security recommendations, discovered vulnerabilities, installed machines, and version distribution. From 4bdb33c578fb5f28894809c30595115ded8a8929 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Thu, 6 Aug 2020 08:35:35 -0700 Subject: [PATCH 589/589] move note --- .../threat-and-vuln-mgt-event-timeline.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-event-timeline.md b/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-event-timeline.md index 1b94ce456b..b7505d630b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-event-timeline.md +++ b/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-event-timeline.md @@ -75,6 +75,9 @@ The two large numbers at the top of the page show the number of new vulnerabilit ![Event timeline page](images/tvm-event-timeline-overview-mixed-type.png) +>[!NOTE] +>New configuration assessments are coming soon. + ### Columns - **Date**: month, day, year @@ -98,9 +101,6 @@ The following icons show up next to events: - ![exploit kit](images/bug-lightning-icon2.png) Exploit found in exploit kit - ![bug icon](images/bug-caution-icon2.png) Exploit verified ->[!NOTE] ->New configuration assessments are coming soon. - ### Drill down to a specific event Once you select an event, a flyout will appear listing the details and current CVEs that affect your machines. You can show more CVEs or view the related recommendation.