From 471b68da9c658126e37ab6c2ea3e7e5f46cbc9eb Mon Sep 17 00:00:00 2001 From: Aaron Parker Date: Fri, 14 Dec 2018 08:58:38 +1100 Subject: [PATCH 01/98] Update run-detection-test-windows-defender-advanced-threat-protection.md Update detection test command to match the command provided in the Windows Defender ATP console. The command in this documentation does not work, while that command from the ATP console does. Command copied from the WD ATP console here: [https://securitycenter.windows.com/preferences2/onboarding](https://securitycenter.windows.com/preferences2/onboarding) --- ...ection-test-windows-defender-advanced-threat-protection.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/run-detection-test-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/run-detection-test-windows-defender-advanced-threat-protection.md index e0cf7f036b..38e82448cd 100644 --- a/windows/security/threat-protection/windows-defender-atp/run-detection-test-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/run-detection-test-windows-defender-advanced-threat-protection.md @@ -39,11 +39,11 @@ Run the following PowerShell script on a newly onboarded machine to verify that 3. At the prompt, copy and run the following command: ``` - powershell.exe -NoExit -ExecutionPolicy Bypass -WindowStyle Hidden (New-Object System.Net.WebClient).DownloadFile('http://127.0.0.1/1.exe', 'C:\test-WDATP-test\invoice.exe');Start-Process 'C:\test-WDATP-test\invoice.exe' + powershell.exe -NoExit -ExecutionPolicy Bypass -WindowStyle Hidden $ErrorActionPreference= 'silentlycontinue';(New-Object System.Net.WebClient).DownloadFile('http://127.0.0.1/1.exe', 'C:\\test-WDATP-test\\invoice.exe');Start-Process 'C:\\test-WDATP-test\\invoice.exe' ``` The Command Prompt window will close automatically. If successful, the detection test will be marked as completed and a new alert will appear in the portal for the onboarded machine in approximately 10 minutes. ## Related topics - [Onboard Windows 10 machines](configure-endpoints-windows-defender-advanced-threat-protection.md) -- [Onboard servers](configure-server-endpoints-windows-defender-advanced-threat-protection.md) \ No newline at end of file +- [Onboard servers](configure-server-endpoints-windows-defender-advanced-threat-protection.md) From 210cf9c3eb5bef2a98047d7c1bb02ecf5cd5c320 Mon Sep 17 00:00:00 2001 From: Ricardo Cabral Date: Sat, 12 Jan 2019 11:07:45 +0000 Subject: [PATCH 02/98] Confusion For me this part is confusion: "In Windows 10, version 1809, Delete command and setting the value to be 0 again if it was previously set to 1 will be supported." Suggestion: In Windows 10, version 1809, will be support the Delete command and setting set value to 0 again, if it was previously been set to 1. --- .../client-management/mdm/policy-csp-controlpolicyconflict.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-controlpolicyconflict.md b/windows/client-management/mdm/policy-csp-controlpolicyconflict.md index 5369a3d16d..dbbd120bb4 100644 --- a/windows/client-management/mdm/policy-csp-controlpolicyconflict.md +++ b/windows/client-management/mdm/policy-csp-controlpolicyconflict.md @@ -68,7 +68,7 @@ Added in Windows 10, version 1803. This policy allows the IT admin to control wh > MDMWinsOverGP only applies to policies in Policy CSP. It does not apply to other MDM settings with equivalent GP settings that are defined on other configuration service providers. This policy is used to ensure that MDM policy wins over GP when same setting is set by both GP and MDM channel. The default value is 0. The MDM policies in Policy CSP will behave as described if this policy value is set 1. -Note: This policy doesn’t support Delete command. This policy doesn’t support setting the value to be 0 again after it was previously set 1. In Windows 10, version 1809, Delete command and setting the value to be 0 again if it was previously set to 1 will be supported. +Note: This policy doesn’t support Delete command. This policy doesn’t support setting the value to be 0 again after it was previously set 1. In Windows 10, version 1809, will be support the Delete command and setting set value to 0 again, if it was previously been set to 1. The following list shows the supported values: From 10cf231a71d2702e52a8f5ff981589adb0bdd0cd Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 24 Jan 2019 10:00:16 -0800 Subject: [PATCH 03/98] first go at S mode cross-conversion table --- .../deployment/windows-10-pro-in-s-mode.md | 30 +++++++++++++++++-- 1 file changed, 27 insertions(+), 3 deletions(-) diff --git a/windows/deployment/windows-10-pro-in-s-mode.md b/windows/deployment/windows-10-pro-in-s-mode.md index 7ae037d1cd..b1efad37db 100644 --- a/windows/deployment/windows-10-pro-in-s-mode.md +++ b/windows/deployment/windows-10-pro-in-s-mode.md @@ -7,14 +7,38 @@ ms.localizationpriority: medium ms.prod: w10 ms.sitesec: library ms.pagetype: deploy -ms.date: 12/03/2018 author: jaimeo --- -# Switch to Windows 10 Pro/Enterprise from S mode +# Switch to Windows 10 Pro or Enterprise from S mode -We recommend staying in S mode. However, in some limited scenarios, you might need to switch to Windows 10 Pro. You can switch devices running Windows 10, version 1709 or later. Use the following information to switch to Windows 10 Pro through the Microsoft Store. +We recommend staying in S mode. However, in some limited scenarios, you might need to switch to Windows 10 Pro. You can switch devices running Windows 10, version 1709 or later. + +A number of other transformations are possible depending on which version and edition of Windows 10 you are starting with. Depending on the details, you might *switch* between S mode and the ordinary version or *convert* between different editions while staying in or out of S mode. The following quick reference table summarizes all of the switches or conversions that are supported by various means: + + + + +| If a device is running this version | and this edition | then you can switch or convert it to this edition by these methods: | | | +|-------------|---------------------|-----------------------------------|-------------------------------|--------------------------------------------| +| | | **Store for Education** (switch/convert all devices in your tenant) | **Microsoft Store** (switch/convert one device at a time) | **Intune** (switch/convert any number of devices selected by Admin) | +| **Windows 10, version 1709** | Cloudbook (Pro S)\* | Pro EDU | Pro | No | +| | Pro | Pro EDU | Not applicable | Not applicable | +| | Home | Not Applicable | Not Applicable | Not Applicable | +| | | | | | +| **Windows 10, version 1803** | Pro in S mode | Pro EDU in S mode | Pro | No | +| | Pro | Pro EDU | Not applicable | Not applicable | +| | Home in S mode | Not Applicable | Home | No | +| | Home | Not Applicable | Not applicable | Not applicable | +| | | | | | +| **Windows 10, version 1809** | Pro in S mode | Pro EDU in S mode | Pro | Pro | +| | Pro | Pro EDU | Not applicable | Not applicable | +| | Home in S mode | Not Applicable | Home | Home | +| | Home | Not Applicable | Not applicable | Not applicable | + + +Use the following information to switch to Windows 10 Pro through the Microsoft Store. > [!IMPORTANT] > While it’s free to switch to Windows 10 Pro, it’s not reversible. The only way to rollback this kind of switch is through a [bare metal recovery (BMR)](https://docs.microsoft.com/windows-hardware/manufacture/desktop/create-media-to-run-push-button-reset-features-s14) reset. This restores a Windows device to the factory state, even if the user needs to replace the hard drive or completely wipe the drive clean. If a device is switched out of S mode via the Microsoft Store, it will remain out of S mode even after the device is reset. From 53d08bfc48e62f62f0ad1c886ea02644d810e1f8 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 28 Jan 2019 16:32:20 -0800 Subject: [PATCH 04/98] Update policy-csp-controlpolicyconflict.md --- .../client-management/mdm/policy-csp-controlpolicyconflict.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-controlpolicyconflict.md b/windows/client-management/mdm/policy-csp-controlpolicyconflict.md index dbbd120bb4..f6626284ef 100644 --- a/windows/client-management/mdm/policy-csp-controlpolicyconflict.md +++ b/windows/client-management/mdm/policy-csp-controlpolicyconflict.md @@ -68,7 +68,7 @@ Added in Windows 10, version 1803. This policy allows the IT admin to control wh > MDMWinsOverGP only applies to policies in Policy CSP. It does not apply to other MDM settings with equivalent GP settings that are defined on other configuration service providers. This policy is used to ensure that MDM policy wins over GP when same setting is set by both GP and MDM channel. The default value is 0. The MDM policies in Policy CSP will behave as described if this policy value is set 1. -Note: This policy doesn’t support Delete command. This policy doesn’t support setting the value to be 0 again after it was previously set 1. In Windows 10, version 1809, will be support the Delete command and setting set value to 0 again, if it was previously been set to 1. +Note: This policy doesn’t support the Delete command and doesn’t support setting the value to 0 again after it was previously set to 1. Windows 10 version 1809 will support using the Delete command to set the value to 0 again, if it was previously set to 1. The following list shows the supported values: From 5103c23adfddb55af263f6a141db763b788c59e9 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Mon, 28 Jan 2019 18:04:21 -0800 Subject: [PATCH 05/98] Create assettag.md --- devices/surface/assettag.md | 95 +++++++++++++++++++++++++++++++++++++ 1 file changed, 95 insertions(+) create mode 100644 devices/surface/assettag.md diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md new file mode 100644 index 0000000000..d0cba22124 --- /dev/null +++ b/devices/surface/assettag.md @@ -0,0 +1,95 @@ +The Surface Asset Tag tool is a command line interface (CLI) utility +that allows you to view, assign, and modify an assigned asset tag value +for all Surface devices including Surface Pro 3 and later. + +## System requirements + + - Surface Pro 3 or later + + - UEFI firmware version 3.9.150.0 or later + +## Using Surface Asset Tag + +To run Surface Asset Tag: + +1. Download **Surface Pro 3 AssetTag.zip** from the [Microsoft Download + Center](http://www.microsoft.com/en-us/download/details.aspx?id=44076), + extract the zip file, and save AsseTag.exe in desired folder (in + this example, C:\\assets). + +2. Open a command console as an Administrator and run AssetTag.exe, + entering the full path to the tool. + +3. Restart Surface. + +To get the proposed asset tag: + + + + + ``` + - Run AssetTag -g + ``` + **Example:** + C:\\assets\> C:\\assets\\AssetTag.exe -g + ``` + + ``` + +To clear the proposed asset tag: + + - Run AssetTag -s + +For example - C:\\assets\> C:\\assets\\AssetTag.exe -s + +To set the proposed asset tag: + + - AssetTag -s testassettag12 + +For example - C:\\assets\\AssetTag.exe -s testassettag12 + +**Note:** The asset tag value must contain between 1 and 36 characters. +Valid characters include A-Z, a-z, 0-9, period (.) and hyphen (-). + +## Managing asset tags + +You can view the existing asset tag in the UEFI settings under Device +Information (**Control Panel \> Recovery \> Advanced Startup \> Restart +now**.) + +The figure below shows the results of running the Asset Tag Tool on +Surface Go. + +![Results of running Surface Asset Tag tool on Surface Go. +](media/image1.png) + +> **Figure 1.** Results of running Surface Asset Tag tool on Surface Go + +Alternately, you can use WMI to query the existing asset tag on a +device: + + - (Get-WmiObject -query “Select \* from Win32\_SystemEnclosure”) + + For example: + +C:\\Windows\\System32\> (Get-WmiObject -query “Select \* from +Win32\_SystemEnclosure”) + +### Using PowerShell + +You can use the script below as a way of getting the proposed value and +interpreting any errors. + +AssetTag -g \> $asset\_tag 2\> $error\_message +$asset\_tag\_return\_code = $LASTEXITCODE +$asset\_tag = $asset\_tag.Trim(“\`r\`n”) + +if ($asset\_tag\_return\_code -eq 0) { +Write-Output (“Good Tag = ” + $asset\_tag) +} else { +Write-Output ( +“Failure: Code = ” + $asset\_tag\_return\_code + +“Tag = ” + $asset\_tag + +“Message = ” + $error\_message) + +} From bab35b3348de47ed09feb38d97c8764ab21f7627 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Mon, 28 Jan 2019 18:21:37 -0800 Subject: [PATCH 06/98] Update assettag.md --- devices/surface/assettag.md | 33 ++++++++++++++++++++++++--------- 1 file changed, 24 insertions(+), 9 deletions(-) diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md index d0cba22124..4043ff458c 100644 --- a/devices/surface/assettag.md +++ b/devices/surface/assettag.md @@ -25,32 +25,47 @@ To run Surface Asset Tag: To get the proposed asset tag: - - ``` - Run AssetTag -g ``` **Example:** - C:\\assets\> C:\\assets\\AssetTag.exe -g + ``` - +C:\\assets\> C:\\assets\\AssetTag.exe -g ``` To clear the proposed asset tag: - +``` - Run AssetTag -s - -For example - C:\\assets\> C:\\assets\\AssetTag.exe -s - +``` + **Example:** - C:\\assets\> C:\\assets\\AssetTag.exe -s +``` + To set the proposed asset tag: +``` - AssetTag -s testassettag12 For example - C:\\assets\\AssetTag.exe -s testassettag12 +``` -**Note:** The asset tag value must contain between 1 and 36 characters. +>[!NOTE] +>The asset tag value must contain between 1 and 36 characters. Valid characters include A-Z, a-z, 0-9, period (.) and hyphen (-). +3. Open a command prompt and enter: + + ``` + msiexec.exe /i ADMINMODE=1. + ``` + **Example:** + + ``` + C:\Users\Administrator> msiexec.exe/I"C:\Users\Administrator\Desktop\Microsoft_Surface_Diagnostic_Toolkit_for_Business_Installer.msi" ADMINMODE=1 + ``` + + + ## Managing asset tags You can view the existing asset tag in the UEFI settings under Device From 873c53fb29617df1074c766e4e6ecb56f073e300 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Mon, 28 Jan 2019 18:31:10 -0800 Subject: [PATCH 07/98] Update assettag.md --- devices/surface/assettag.md | 34 ++++++++++++++++++---------------- 1 file changed, 18 insertions(+), 16 deletions(-) diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md index 4043ff458c..625d536e25 100644 --- a/devices/surface/assettag.md +++ b/devices/surface/assettag.md @@ -1,3 +1,17 @@ +--- +title: Surface Asset Tag Tool +description: This topic explains how to use the Surface Asset Tag Tool. +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +author: coveminer +ms.author: v-jokai +ms.topic: article +ms.date: 01/29/2019 +--- + +#Surface Asset Tag Tool + The Surface Asset Tag tool is a command line interface (CLI) utility that allows you to view, assign, and modify an assigned asset tag value for all Surface devices including Surface Pro 3 and later. @@ -24,16 +38,11 @@ To run Surface Asset Tag: To get the proposed asset tag: - - ``` - Run AssetTag -g ``` **Example:** + C:\\assets\> C:\\assets\\AssetTag.exe -g - ``` -C:\\assets\> C:\\assets\\AssetTag.exe -g - ``` - To clear the proposed asset tag: ``` - Run AssetTag -s @@ -47,22 +56,13 @@ To set the proposed asset tag: - AssetTag -s testassettag12 For example - C:\\assets\\AssetTag.exe -s testassettag12 -``` + >[!NOTE] >The asset tag value must contain between 1 and 36 characters. Valid characters include A-Z, a-z, 0-9, period (.) and hyphen (-). -3. Open a command prompt and enter: - ``` - msiexec.exe /i ADMINMODE=1. - ``` - **Example:** - - ``` - C:\Users\Administrator> msiexec.exe/I"C:\Users\Administrator\Desktop\Microsoft_Surface_Diagnostic_Toolkit_for_Business_Installer.msi" ADMINMODE=1 - ``` @@ -95,6 +95,7 @@ Win32\_SystemEnclosure”) You can use the script below as a way of getting the proposed value and interpreting any errors. + ``` AssetTag -g \> $asset\_tag 2\> $error\_message $asset\_tag\_return\_code = $LASTEXITCODE $asset\_tag = $asset\_tag.Trim(“\`r\`n”) @@ -108,3 +109,4 @@ Write-Output ( “Message = ” + $error\_message) } + ``` From feb5a7327dac1e726609c0fd72a1fadbd0095185 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Mon, 28 Jan 2019 18:36:51 -0800 Subject: [PATCH 08/98] Update assettag.md --- devices/surface/assettag.md | 14 ++++++-------- 1 file changed, 6 insertions(+), 8 deletions(-) diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md index 625d536e25..d95ed0ac52 100644 --- a/devices/surface/assettag.md +++ b/devices/surface/assettag.md @@ -44,28 +44,26 @@ To get the proposed asset tag: C:\\assets\> C:\\assets\\AssetTag.exe -g To clear the proposed asset tag: -``` + - Run AssetTag -s ``` - **Example:** - C:\\assets\> C:\\assets\\AssetTag.exe -s + **Example:** + C:\\assets\> C:\\assets\\AssetTag.exe -s ``` To set the proposed asset tag: - ``` - AssetTag -s testassettag12 -For example - C:\\assets\\AssetTag.exe -s testassettag12 - +**Example** +C:\\assets\\AssetTag.exe -s testassettag12 +``` >[!NOTE] >The asset tag value must contain between 1 and 36 characters. Valid characters include A-Z, a-z, 0-9, period (.) and hyphen (-). - - - ## Managing asset tags You can view the existing asset tag in the UEFI settings under Device From ed3198e10070f2c6070eda6d51b30cbd61544f32 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Mon, 28 Jan 2019 18:41:31 -0800 Subject: [PATCH 09/98] Update assettag.md --- devices/surface/assettag.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md index d95ed0ac52..d275723ba0 100644 --- a/devices/surface/assettag.md +++ b/devices/surface/assettag.md @@ -40,21 +40,21 @@ To get the proposed asset tag: - Run AssetTag -g ``` - **Example:** + **Example:** C:\\assets\> C:\\assets\\AssetTag.exe -g To clear the proposed asset tag: - Run AssetTag -s -``` - **Example:** + ``` + **Example:** C:\\assets\> C:\\assets\\AssetTag.exe -s -``` + ``` To set the proposed asset tag: -``` - - AssetTag -s testassettag12 + - Run AssetTag -s testassettag12 +``` **Example** C:\\assets\\AssetTag.exe -s testassettag12 ``` From 530699b0a6909de93cb8a43d25f6fb4469efdb88 Mon Sep 17 00:00:00 2001 From: Pierre Audonnet Date: Tue, 29 Jan 2019 13:53:37 -0500 Subject: [PATCH 10/98] Update hello-how-it-works-provisioning.md Correction of menu's hyperlinks and typos --- .../hello-how-it-works-provisioning.md | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-how-it-works-provisioning.md b/windows/security/identity-protection/hello-for-business/hello-how-it-works-provisioning.md index 2251f953d0..9ccd6b2fb8 100644 --- a/windows/security/identity-protection/hello-for-business/hello-how-it-works-provisioning.md +++ b/windows/security/identity-protection/hello-for-business/hello-how-it-works-provisioning.md @@ -22,11 +22,12 @@ Windows Hello for Business provisioning enables a user to enroll a new, strong, [Azure AD joined provisioning in a Managed environment](#Azure-AD-joined-provisioning-in-a-Managed-environment)
[Azure AD joined provisioning in a Federated environment](#Azure-AD-joined-provisioning-in-a-Federated-environment)
-[Hybrid Azure AD joined provisioning in a Key Trust deployment](#Hybrid-Azure-AD-joined-provisioning-in-a-Key-Trust-deployment)
-[Hybrid Azure AD joined provisioning in a Certificate Trust deployment](#Hybrid-Azure-AD-joined-provisioning-in-a-Certificate-Trust-deployment)
-[Hybrid Azure AD joined provisioning in a synchronous Certificate Trust deployment](#Hybrid-Azure-AD-joined-provisioning-in-a-synchronous-Certificate-Trust-deployment)
-[Domain joined provisioning in an On-premises Key Trust deployment](#Domain-joined-provisioning-in-an-Onpremises-Key-Trust-deployment)
-[Domain joined provisioning in an On-premises Certificate Trust deployment](#Domain-joined-provisioning-in-an-Onpremises-Certificate-Trust-deployment)
+[Hybrid Azure AD joined provisioning in a Key Trust deployment in a Managed envrionment](#Hybrid-Azure-AD-joined-provisioning-in-a-Key-Trust-deployment-in-a-Managed-envrionment)
+[Hybrid Azure AD joined provisioning in a Certificate Trust deployment in a Managed environment](#Hybrid-Azure-AD-joined-provisioning-in-a-Certificate-Trust-deployment-in-a-Managed-environment)
+[Hybrid Azure AD joined provisioning in a synchronous Certificate Trust deployment in a Managed environment](#Hybrid-Azure-AD-joined-provisioning-in-a-synchronous-Certificate-Trust-deployment-in-a-Managed-environment)
+[Hybrid Azure AD joined provisioning in a synchronous Certificate Trust deployment in a Federated environment](#Hybrid-Azure-AD-joined-provisioning-in-a-synchronous-Certificate-Trust-deployment-in-a-Federated-environment)
+[Domain joined provisioning in an On-premises Key Trust deployment](#Domain-joined-provisioning-in-an-On-premises-Key-Trust-deployment)
+[Domain joined provisioning in an On-premises Certificate Trust deployment](#Domain-joined-provisioning-in-an-On-premises-Certificate-Trust-deployment)
@@ -85,7 +86,7 @@ Windows Hello for Business provisioning enables a user to enroll a new, strong, [Return to top](#Windows-Hello-for-Business-Provisioning) -## Hybrid Azure AD joined provisioning in a synchronous Certificate Trust deployment in a Managed environmnet +## Hybrid Azure AD joined provisioning in a synchronous Certificate Trust deployment in a Managed environment ![Hybrid Azure AD joined provisioning in a synchronous Certificate Trust deployment in a Managed environment](images/howitworks/prov-haadj-instant-certtrust-managed.png) | Phase | Description | @@ -140,6 +141,6 @@ Windows Hello for Business provisioning enables a user to enroll a new, strong, |D | The certificate request portion of provisioning begins after the application receives a successful response from key registration. The application creates a PKCS#10 certificate request. The key used in the certificate request is the same key that was securely provisioned.
The application sends the certificate request, which includes the public key, to the certificate registration authority hosted on the Active Directory Federation Services (AD FS) farm.
After receiving the certificate request, the certificate registration authority queries Active Directory for the msDS-KeyCredentailsLink for a list of registered public keys.| |E | The registration authority validates the public key in the certificate request matches a registered key for the user.
After validating the public key, the registration authority signs the certificate request using its enrollment agent certificate.| |F |The registration authority sends the certificate request to the enterprise issuing certificate authority. The certificate authority validates the certificate request is signed by a valid enrollment agent and, on success, issues a certificate and returns it to the registration authority that then returns the certificate to the application.| -|G | The application receives the newly issued certificate and installs the it into the Personal store of the user. This signals the end of provisioning.| +|G | The application receives the newly issued certificate and installs it into the Personal store of the user. This signals the end of provisioning.| -[Return to top](#Windows-Hello-for-Business-Provisioning) \ No newline at end of file +[Return to top](#Windows-Hello-for-Business-Provisioning) From 4a5021e1ef25fd253b5938d7e1e8083a077bc470 Mon Sep 17 00:00:00 2001 From: Pierre Audonnet Date: Tue, 29 Jan 2019 14:12:47 -0500 Subject: [PATCH 11/98] Update hello-how-it-works-device-registration.md Clarifying the step G for Hybrid deployment. IMO customers have to understand whether or not device write back is required. --- .../hello-how-it-works-device-registration.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md b/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md index 7f24f72843..ce4c2db9b8 100644 --- a/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md +++ b/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md @@ -81,7 +81,7 @@ Device Registration is a prerequisite to Windows Hello for Business provisioning |C | For the federated environments, the computer authenticates the enterprise device registration endpoint using Windows integrated authentication. The enterprise device registration service creates and returns a token that includes claims for the object GUID, computer SID, and domain joined state. The task submits the token and claims to Azure Active Directory where it is validated. Azure Active Directory returns an ID token to the running task. |D | The application creates TPM bound (preferred) RSA 2048 bit key-pair known as the device key (dkpub/dkpriv). The application create a certificate request using dkpub and the public key and signs the certificate request with using dkpriv. Next, the application derives second key pair from the TPM's storage root key. This is the transport key (tkpub/tkpriv).| |E | To provide SSO for on-premises federated application, the task requests an enterprise PRT from the on-premises STS. Windows Server 2016 running the Active Directory Federation Services role validate the request and return it the running task.| -|F | The task sends a device registration request to Azure DRS that includes the ID token, certificate request, tkpub, and attestation data. Azure DRS validates the ID token, creates a device ID, and creates a certificate based on the included certificate request. Azure DRS then writes a device object in Azure Active Directory and sends the device ID and the device certificate to the client. Device registration completes by receiving the device ID and the device certificate from Azure DRS. The device ID is saved for future reference (viewable from dsregcmd.exe /status), and the device certificate is installed in the Personal store of the computer. With device registration complete, the task exits.| -|G |If device write-back is enabled, on it's next synchronization cycle, Azure AD Connect requests updates from Azure Active Directory. Azure Active Directory correlates the device object with a matching synchronized computer object. Azure AD Connect receives the device object that includes the object GUID and computer SID and writes the device object to Active Directory.| +|F | The task sends a device registration request to Azure DRS that includes the ID token, certificate request, tkpub, and attestation data. Azure DRS validates the ID token, creates a device ID, and creates a certificate based on the included certificate request. Azure DRS then writes a device object in Azure Active Directory and sends the device ID and the device certificate to the client. Device registration completes by receiving the device ID and the device certificate from Azure DRS. The device ID is saved for future reference (viewable from dsregcmd.exe /status), and the device certificate is installed in the Personal store of the computer. With device registration complete, the task exits.| +|G | If Azure AD Connect device write-back is enabled, Azure AD Connect requests updates from Azure Active Directory at its next synchronization cycle (device write-back is required for hybrid deployment using certificate trust). Azure Active Directory correlates the device object with a matching synchronized computer object. Azure AD Connect receives the device object that includes the object GUID and computer SID and writes the device object to Active Directory.| -[Return to top](#Windows-Hello-for-Business-and-Device-Registration) \ No newline at end of file +[Return to top](#Windows-Hello-for-Business-and-Device-Registration) From 1762fc6f2d1e8f5e58aa67a1491780620c07e861 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 29 Jan 2019 11:58:11 -0800 Subject: [PATCH 12/98] Update assettag.md --- devices/surface/assettag.md | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md index d275723ba0..fd40037d93 100644 --- a/devices/surface/assettag.md +++ b/devices/surface/assettag.md @@ -43,14 +43,21 @@ To get the proposed asset tag: **Example:** C:\\assets\> C:\\assets\\AssetTag.exe -g -To clear the proposed asset tag: +To get the proposed asset tag: + + - Run AssetTag -g + ``` + **Example:** + C:\\assets\> C:\\assets\\AssetTag.exe -s + ``` + + To clear the proposed asset tag: - Run AssetTag -s ``` **Example:** C:\\assets\> C:\\assets\\AssetTag.exe -s ``` - To set the proposed asset tag: - Run AssetTag -s testassettag12 From 202ecd1de834659bdcca6e357389b6f53a7eed71 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 29 Jan 2019 11:59:09 -0800 Subject: [PATCH 13/98] Update assettag.md --- devices/surface/assettag.md | 8 +------- 1 file changed, 1 insertion(+), 7 deletions(-) diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md index fd40037d93..2922a2e974 100644 --- a/devices/surface/assettag.md +++ b/devices/surface/assettag.md @@ -36,19 +36,13 @@ To run Surface Asset Tag: 3. Restart Surface. -To get the proposed asset tag: - - - Run AssetTag -g - ``` - **Example:** - C:\\assets\> C:\\assets\\AssetTag.exe -g To get the proposed asset tag: - Run AssetTag -g ``` **Example:** - C:\\assets\> C:\\assets\\AssetTag.exe -s + C:\\assets\> C:\\assets\\AssetTag.exe -g ``` To clear the proposed asset tag: From c486711877f50590507e2fb1d0f5b26cce2bf2a5 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 29 Jan 2019 12:39:33 -0800 Subject: [PATCH 14/98] Update assettag.md --- devices/surface/assettag.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md index 2922a2e974..b8b4bf626c 100644 --- a/devices/surface/assettag.md +++ b/devices/surface/assettag.md @@ -10,7 +10,7 @@ ms.topic: article ms.date: 01/29/2019 --- -#Surface Asset Tag Tool +# Surface Asset Tag Tool The Surface Asset Tag tool is a command line interface (CLI) utility that allows you to view, assign, and modify an assigned asset tag value @@ -75,7 +75,7 @@ The figure below shows the results of running the Asset Tag Tool on Surface Go. ![Results of running Surface Asset Tag tool on Surface Go. -](media/image1.png) +](images/assettag-fig1.png) > **Figure 1.** Results of running Surface Asset Tag tool on Surface Go From aaf39cbea921daa9bbda1d29b6e15fa5e89a2c2a Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 29 Jan 2019 12:44:34 -0800 Subject: [PATCH 15/98] Update assettag.md --- devices/surface/assettag.md | 15 ++++++--------- 1 file changed, 6 insertions(+), 9 deletions(-) diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md index b8b4bf626c..ad0a8e6600 100644 --- a/devices/surface/assettag.md +++ b/devices/surface/assettag.md @@ -79,16 +79,13 @@ Surface Go. > **Figure 1.** Results of running Surface Asset Tag tool on Surface Go -Alternately, you can use WMI to query the existing asset tag on a -device: - - - (Get-WmiObject -query “Select \* from Win32\_SystemEnclosure”) - - For example: - -C:\\Windows\\System32\> (Get-WmiObject -query “Select \* from -Win32\_SystemEnclosure”) + Alternately, you can use WMI to query the existing asset tag on a device: +(Get-WmiObject -query “Select * from Win32_SystemEnclosure”) + ``` + **Example:** +C:\Windows\System32> (Get-WmiObject -query “Select * from Win32_SystemEnclosure”) + ``` ### Using PowerShell You can use the script below as a way of getting the proposed value and From 4ef6fd76017acaeb50341b9441202b2499dcafe6 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 29 Jan 2019 12:45:14 -0800 Subject: [PATCH 16/98] Update assettag.md --- devices/surface/assettag.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md index ad0a8e6600..b7d69a385d 100644 --- a/devices/surface/assettag.md +++ b/devices/surface/assettag.md @@ -81,7 +81,7 @@ Surface Go. Alternately, you can use WMI to query the existing asset tag on a device: -(Get-WmiObject -query “Select * from Win32_SystemEnclosure”) +- (Get-WmiObject -query “Select * from Win32_SystemEnclosure”) ``` **Example:** C:\Windows\System32> (Get-WmiObject -query “Select * from Win32_SystemEnclosure”) From 2c04ff6401731f6178d96d481102d2b1c88b8506 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 29 Jan 2019 12:46:13 -0800 Subject: [PATCH 17/98] Update assettag.md --- devices/surface/assettag.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md index b7d69a385d..ad0a8e6600 100644 --- a/devices/surface/assettag.md +++ b/devices/surface/assettag.md @@ -81,7 +81,7 @@ Surface Go. Alternately, you can use WMI to query the existing asset tag on a device: -- (Get-WmiObject -query “Select * from Win32_SystemEnclosure”) +(Get-WmiObject -query “Select * from Win32_SystemEnclosure”) ``` **Example:** C:\Windows\System32> (Get-WmiObject -query “Select * from Win32_SystemEnclosure”) From 82ccefb4b28cfd11190f42aba32f28ead5adecce Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 29 Jan 2019 12:47:12 -0800 Subject: [PATCH 18/98] Update assettag.md --- devices/surface/assettag.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md index ad0a8e6600..25a9234b05 100644 --- a/devices/surface/assettag.md +++ b/devices/surface/assettag.md @@ -79,7 +79,7 @@ Surface Go. > **Figure 1.** Results of running Surface Asset Tag tool on Surface Go - Alternately, you can use WMI to query the existing asset tag on a device: +- Alternately, you can use WMI to query the existing asset tag on a device: (Get-WmiObject -query “Select * from Win32_SystemEnclosure”) ``` From bdeb331d61a9ed6032a2f09257072e1740b31454 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 29 Jan 2019 12:48:22 -0800 Subject: [PATCH 19/98] Update assettag.md --- devices/surface/assettag.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md index 25a9234b05..3c8c6ba132 100644 --- a/devices/surface/assettag.md +++ b/devices/surface/assettag.md @@ -79,9 +79,9 @@ Surface Go. > **Figure 1.** Results of running Surface Asset Tag tool on Surface Go -- Alternately, you can use WMI to query the existing asset tag on a device: +Alternately, you can use WMI to query the existing asset tag on a device: -(Get-WmiObject -query “Select * from Win32_SystemEnclosure”) +-(Get-WmiObject -query “Select * from Win32_SystemEnclosure”) ``` **Example:** C:\Windows\System32> (Get-WmiObject -query “Select * from Win32_SystemEnclosure”) From 4614b7c621dc4954a336b016a411ca5d4edfe2ad Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 29 Jan 2019 12:51:25 -0800 Subject: [PATCH 20/98] Update assettag.md --- devices/surface/assettag.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md index 3c8c6ba132..a0d8b242db 100644 --- a/devices/surface/assettag.md +++ b/devices/surface/assettag.md @@ -81,7 +81,7 @@ Surface Go. Alternately, you can use WMI to query the existing asset tag on a device: --(Get-WmiObject -query “Select * from Win32_SystemEnclosure”) +(Get-WmiObject -query “Select * from Win32_SystemEnclosure”) ``` **Example:** C:\Windows\System32> (Get-WmiObject -query “Select * from Win32_SystemEnclosure”) From 9a409d6c4bfcd4d4074abe6fa04671b66fd2bcdd Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 29 Jan 2019 13:01:34 -0800 Subject: [PATCH 21/98] Update assettag.md --- devices/surface/assettag.md | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md index a0d8b242db..b7424ba02f 100644 --- a/devices/surface/assettag.md +++ b/devices/surface/assettag.md @@ -10,7 +10,7 @@ ms.topic: article ms.date: 01/29/2019 --- -# Surface Asset Tag Tool +C:\assets\> # Surface Asset Tag Tool The Surface Asset Tag tool is a command line interface (CLI) utility that allows you to view, assign, and modify an assigned asset tag value @@ -36,13 +36,15 @@ To run Surface Asset Tag: 3. Restart Surface. - +### Asset Tag tool commands +In the following examples, AssetTag.ex is saved in a directory on a local machine (C:\assets). + To get the proposed asset tag: - Run AssetTag -g ``` **Example:** - C:\\assets\> C:\\assets\\AssetTag.exe -g + C:\assets\> C:\assets\AssetTag.exe -g ``` To clear the proposed asset tag: @@ -50,14 +52,14 @@ To get the proposed asset tag: - Run AssetTag -s ``` **Example:** - C:\\assets\> C:\\assets\\AssetTag.exe -s + C:\assets\> C:\assets\AssetTag.exe -s ``` To set the proposed asset tag: - Run AssetTag -s testassettag12 ``` **Example** -C:\\assets\\AssetTag.exe -s testassettag12 +C:\assets\> C:\assets\AssetTag.exe -s testassettag12 ``` >[!NOTE] From 555fd113f792695d443307a1e0bb4c8c3ccf07ac Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 29 Jan 2019 13:02:48 -0800 Subject: [PATCH 22/98] Update assettag.md --- devices/surface/assettag.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md index b7424ba02f..6f941d5efc 100644 --- a/devices/surface/assettag.md +++ b/devices/surface/assettag.md @@ -44,7 +44,7 @@ To get the proposed asset tag: - Run AssetTag -g ``` **Example:** - C:\assets\> C:\assets\AssetTag.exe -g + C:\assets\AssetTag.exe -g ``` To clear the proposed asset tag: @@ -52,14 +52,14 @@ To get the proposed asset tag: - Run AssetTag -s ``` **Example:** - C:\assets\> C:\assets\AssetTag.exe -s +C:\assets\AssetTag.exe -s ``` To set the proposed asset tag: - Run AssetTag -s testassettag12 ``` **Example** -C:\assets\> C:\assets\AssetTag.exe -s testassettag12 +C:\assets\AssetTag.exe -s testassettag12 ``` >[!NOTE] From 6493e1f8e4958ca377ae6b8d0ba521fc8f8f178b Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 29 Jan 2019 13:03:22 -0800 Subject: [PATCH 23/98] Update assettag.md --- devices/surface/assettag.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md index 6f941d5efc..3b95b08ecd 100644 --- a/devices/surface/assettag.md +++ b/devices/surface/assettag.md @@ -10,7 +10,7 @@ ms.topic: article ms.date: 01/29/2019 --- -C:\assets\> # Surface Asset Tag Tool +# Surface Asset Tag Tool The Surface Asset Tag tool is a command line interface (CLI) utility that allows you to view, assign, and modify an assigned asset tag value From d0dbeb6964c4674ddead33f1612def5b416f4c4e Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 29 Jan 2019 13:04:52 -0800 Subject: [PATCH 24/98] Update assettag.md --- devices/surface/assettag.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md index 3b95b08ecd..c65c78264f 100644 --- a/devices/surface/assettag.md +++ b/devices/surface/assettag.md @@ -37,7 +37,7 @@ To run Surface Asset Tag: 3. Restart Surface. ### Asset Tag tool commands -In the following examples, AssetTag.ex is saved in a directory on a local machine (C:\assets). +In the following examples, AssetTag.exe is saved in a directory on a local machine (C:\assets). To get the proposed asset tag: From 5f4b373a4b623dc21d941d7781f04ec97fc30598 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 29 Jan 2019 13:10:24 -0800 Subject: [PATCH 25/98] Update assettag.md --- devices/surface/assettag.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md index c65c78264f..0b14098d0c 100644 --- a/devices/surface/assettag.md +++ b/devices/surface/assettag.md @@ -12,9 +12,9 @@ ms.date: 01/29/2019 # Surface Asset Tag Tool -The Surface Asset Tag tool is a command line interface (CLI) utility +Surface Asset Tag is a command line interface (CLI) utility that allows you to view, assign, and modify an assigned asset tag value -for all Surface devices including Surface Pro 3 and later. +for Surface devices. It works on Surface Pro 3 and all newer Surface devices. ## System requirements From dde16a42f7bf3230abcb66c4722d6f92fa922c63 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 29 Jan 2019 13:19:34 -0800 Subject: [PATCH 26/98] Add files via upload --- devices/surface/images/assettag-fig1.png | Bin 0 -> 348454 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 devices/surface/images/assettag-fig1.png diff --git a/devices/surface/images/assettag-fig1.png b/devices/surface/images/assettag-fig1.png new file mode 100644 index 0000000000000000000000000000000000000000..5ccb36c85f679856b75f2815f5884094b98d779e GIT binary patch literal 348454 zcmc$^by%Ch)-M`@ySoL7YY6UvV8z{`Sg_&*ha$yGDJ@XkwODb7;_mLniWg~tLXlp& z_x|?X=iKj{d!GBx&GRJh$ZvjY&6+i9^3F_*rn(|778Mo%0Kk2&B&Q7kApZmaka#hG zPbHBLXfaO@Bu{NcSwPhU&EZo9#ZE>|1^}pehkb8}`jp3XQ!?@d0LYmCevzJQGo1qf zXd@1~h6qD7RWWNH!A{@(6KT^9cxoghhGyg!lzSMY%u_FrNr7ScI34 zpPNreOaLqffq?$?VSJM2VPh+%EvN7=Sx-4hMtcOpO^lb<$H#}qho8sQ!;Y6vR8*7~ z4B>@9xStT*o_;O}OJ8mm&u9O|AP4uf_Hb}RIJmli{xVuxxq2Za8J{%$XBV8^{!Q!R z`7bj)8I0H0(v6po2mH57{{Y%p{~PD#<>B-X;WpO1a3{Dk+y&wJgys7;*3I4(;p%Dc z`oEz5clG}u;K{UVYX6q;-|FJ*{BIGS2zl?PZv4w2|1H{6*Ut^ks}1*b_42TW%X>em z`Rs3R+{9oWa7%=%hpwxu(|-+==6|USg2Da{j3|iBz`@1F)yI?lKia_MED>-?#=rI4 zU_Ne$pe~=Fn1GPjQyMHH1_u8Vs^)6rVC(naLZ3h){{!^NYiukLmjAC{8*4FJR}W{) zr#?G4TiU^S-CXP#LI1X-7|hkl)#FL>@ zxGmvUmfTi+U{N8sh^Qz(1pZ%a8XgW$bJEi3KUx23W%I-+Dhe015wPXs=7U?=JpBmp zKk@Lvx%uHj5Qwmqps1xK-(S!Fhck&OIe0z|v){kwk`CPcUnwUC&_Db~%+mVrypUwH z{_7BM8^(VXJN!5H_&<{Tul7Fn@F&v$jhFmWx~Hox!pG7BE@Ss(yZ;kMkHC+GdATK}!~|LM5@AGQA% zy|uliiyiza)bcX^fA7!#nRovG(I4KwLH3`n#``~e;XmsBBOpHw=Rb;`qWs_Fzn7P% z%)b{XxXY8NJf4=HQ48(Vr=^PlA#aHIM*#a9(RCf1;efx6_7sA|AcCO3;YdV`4=kM^ z7YzX1dlGGpZ|&F32qRg z5j61_eD~+xReV)Eg~#l7<=5Nq*yKE!nVD3K30e9Q|Z%Rr^lrHMp z+S(etl-o?JuCKe0q9|T`UKAIPkMzTqv1l-4YwSRFu=DY;vkSPJV@Tb~gO@Uji-T4n zHY7`{t2(`o4G}afHUm@a++z*Elamv;TSrq{n;};|I&pxzDyOg4k?+OEyhXnMkx;dd zf2&ol<1=6nzUgZUQ}muMb>^S#^AfNIh9ZR)mIO5a_#F^yQKQFGy1M*jPxxhS&~Vv5agrhN4X)?&ms7^C5)Ty1YJ!* zfyfjQ#C?=TmEPXTVPUUSpXtHCA-y;~Y^V*U+-m)uc#}MqwD$)G_6>$sZ;JLlgr@5O zENhHwQKq^uE>6EE;vPfV$NCO0R>mxHL_@2aK1(;bewAAKDlH*l%5&i!xMU}`pJ_owCl~wjrE5y8n5fjodXZy&TSu=qV*(A)8$;2ezFQp*JM9RP zXRMs2aL2I=^N+Vy?s0@YaH8pIWA6G4w%X^0`R9qypDacX^|oy^r_yHGOpXq8TNp`c z42ZB^tWGI2JEC;46w=x8sWFWKd)&NhZ8Tq%fi$HXIoUZyt#6x9%q$~4HK>s#{w#@J zYnzk)@bd?U3Bpe#n%&-Q1YNy5?`T#p+{zg92PiQv%gD5n48Kp?%A8eexAqU~MDXlX z5&~|S_(t-*vbgrN0rC?z8neb|Mq4TmTwTL}--0Q)1So`VFm=jO9w)6~ERU_%W81Q_ z)@-!*y`+0R*drFF&`5t$XrPY|y~<^VV0{v6#teHlL_2u<#Lx;#SZN2#P_$%bCm_u` z)v~lDiON~HqQcc~?3fE3)6(T8Yq?ZbOzL!?+pa?f%)a-d>_jRO-q>a|o%8nIdsER! zBMFaz#Ov~&&V$4g!@t=>nf3Q@pyeK$1{H%VfO~o5zO+285Y~K!2oDvW+ICyAd_~3r zG00pjvo|2?TN1bP%ujaoJtei>3eVSeEHjO}fREIzOsx&xqC-YTCykH7@KCYW%}%~= zrJblKtpX&LXj5=ntKlu|Z^~?mWY{+AamPvW)(Q{NE;H>Rt)^!#Z7(WIP?P!tM(+1o zD?t4ED8#3RzooscL#i%)!w3WEA9s|hBCpEE03-mpapL$!Mu5^gKM=o0qlo8Bv#nJ! zauI8eYAGck3UAwO1v1NsEj!A#%+aG_h)&&i%%KUiF(N~1-%og43bpW(G zGvpObXdZS=R84YEwu;m|@=h!{vVT23O!;y)m%89p+|pa%l>R;9Pj)K+HL_*i|Mt&g z@Z%Q{nfITYcYl0yO-zEX_k-i#4$=qTS2lfpbvdm#nIk=^^;k1VwiBG0%*>0rC=4s3 z1QaQW3p^wU53T)80-adaLGzeOK`a$ZPAms!`)HLfk8YwqVqkQWQ`Pz*DO%@qPNsU! zQsc@y=3FFvwF;>MecVly*xCWhA;^J*QiYt3t(A+4RZ_ISfPjFSK;UXE5{^tB_SiN6 zYo<6=z0QaF(?ySh$%8H?3r9oEpvWXZ|Wb8AmKYye@@u~}S&61L!=HU41Ck3+ zOkpi{;ssp5D2tEvP$bW9!wlS154Ssu3PdmuOspzMMEotv%Z>`+82OJ7!RDs%h2jdB zk(zJijFQ)PmAEoSKzu-g6*6H?L;szPDvN>|A?+Q3R`iO9{%fjyF$p$1^eFAq-;q^p z!#o7E9PlZy$^}(ORCL*bWR&lE3P0PNc3K888?-Jo?@0BB=C`C*v3c8Bcpvg9dDTK+93oCp2~V zA&L>L`?so5nWeZm9iB0=i0uiac(-)^cLIT^p4&TBsWiy5;fhAc9r1Z!`|&m&SQ)#e z4lT~5U5BND$4K*7%~%4m7=kB|L{=@9nMDZI!4(vIM&~Z5YNEz45)PRPqkg$(JWDBC zII3f0j?%L4uL+abXZ|x$|DbH*kBp8^k{x*@>a}TVgV|LA?SI*W3Au&ahEd20nT8#? zIf?~^evH;iP9;U^Ybz0fHDzo1YKBzf=qX_uDK)aI&t zx3rncL^L~KU?59g0j}C_m|l{%k1>B_O#CTgg|_dt&@$Y}uJ>8MsMm#SU39B(UpjOP z*M2%o7c*hE?Qs;qYy}j-V))Ryr3memTZwtSX-l?vyZ;mK{+;WZa^Bx1JLcgBZZCF<9IE;Rn^bUz~5{ciJl_ZbD@ z;(FG3cY4=D-ibI}6P@@)|LUguDTa(;Mph}*6)|~-EvkAPCGCbOE{^h7K|Q0~kCGsF z*Hq4zoz-JK3NzgenULZ+V|%TxkOp~jQ|!r=P9)nY+JK*JH8~s=o;`apf1UA z@+rIc!9$O=olyhb?3DM>{`GB$1j2%eOAf`h zSa+wDU-{@&HWhR(FkM?!T}0Z&Oz=HFA4X?wN**o>pVzD30{9WlN2F%HhIMaI8EN7o z4bT9jU<;Lr=dX{1y58Di+0FPj(wRhY2p}89t$19ZM^;+=DA*NP73P0U;ctXv)fr(E z)H}!_W8x&X`$+sbsE}NE#kK~gsqPN@`|qUaUNsLGL+Vf=)2y%+2EP`CxXY}Nw;frr zE)8BeFn>>B=0MvZZi2CXAl--#uW-gzd6@v|)1f9>hZ8_akrj=*exG0w;~gO$9AQD0 zw)#cynFh#gz-EV3UJo^k@DXO?moIdp#85~%4yxEsEaCnwcd?z3)`$L2XA*GtK;_sU6d<+@+u^x^dC zOFQr@DlZQKA~~jKv`|e1C!Iamfu(W{VFguq!Vzio2NOcJj*LLZc+6awX6)!VOU{mQ z48T|MS>>zNI3O*Dc6-65db}Wl1w#qPqzwltHY%)_ks+Q>VMlcoM+P9L3@Uz~O#HG_ zwX2lnM}=sLMXI5fs7{`Rn-Q3To#DPg?Z(mG4l9AXW~0DJI9CHUTt=7^p&&AkNf;8^ zm=tyqIqMJgpIco%WYf0x9>EM*eVdNwmCw(F&yB!m@PCKz?u=oZBEG8aWX!Os2SGMr zv^htBg!7g9nCfV*fc);(W{KYL+E$^2fBRU$A z4TEWDf|#54w?E%W{1{5+OyPae`D29h^T`>#dAl#6|3F)~At8@sW|iM=tZ)(7bNB?q znWspVI?RP~s5^%Q0SuR#^rVVTLirw0+D)w!Gkr+3^wFUGlRW+(W_bMc8jrZmBr(R4 zzoqBoxSR^0P(%+GOD34*vo2fY5YNg{m)lZubryCRVVhzf%$2*A9ZwpUVc^Iyrv3&q zLM-3J6TvX>XSl`eGkW}JK7RzB@<@e&=i##r2a=-LX{2+JM-;(%J13bBv3XJI9ERBH znE^5)Ztw2hA-2&{cAD`R0aB!qc54x8*@aXL;^E3J_^mAOLpsfQTO0~k2W{OaO-f{A z(a*JVyi<{q$_W&{zJ{3u?yt?_Zyac@(F+p9MnpwVG_w#BS!p5TXBS7Pd8Tn%ylgQQ z@GOm0M}^{DU%S)bgS~v+sz>s`-+Vqkmo6fn((2P_3WT~S>%r6#Q3Ta9NILo0M-O*k z2cgj+XT!A$#gY-;bZ-r^YE4&4me;=el8s)%bKc{1>0AIwR*a*hDSsBbe4yoP8Wpop z+#yxml2eZ7u@UKUq$~JnzK$$9T!Lt)9hrm9Jp&FOfskL(DBV_d5^81TWr#e3_xJz7 zRrfUweg1x3GbENg6p!Ecwt#fbAhM zh($`Xmm3nsP%q1{1cPKgOZS$e;GgXlc)V6br7;=h(jc>T=EO50AjhcqzD+#u@K$k^ zEyOANCy~NORiUv~B!YtNoXGIaQ1?q160}f5Dn#~8A~0yhVNM~_w`(6%AU{o0;UyxM z2~0bds7=E&9q*(SDo3*M4k7y?N6FGPpEE@=NrX}NQ#)3hCwL4>yp>Q=7gObI_vOZo zQqtW}`NIfKX;-%;t;?zse4nz-2&G${A+)2)`t(Jp_O1lF5ipw{I)EtUQDS zG@Wvf9ml`~nFg#deHhWU;KN-(t<~TtuzuzWRQi$7YZP5yhmVUJ&yY;hqeBSW>xUU$ z*ZU`dM!btzH_rv$1qqRRDWH@T5lwi=cvi!x&Gj-r;AbFKl&43K$q0SEOmWJG)J1-~ zY!O_MjaupXB%4&ttd4m?(4*ErbS<~vKOIslLqR&2sHAnyUlUzv(vO#tdqPV~xri#E zAZnWC6{zCSf?QN9oQbZn1k_LHalav5G-L6>CuTRkVObC(2=-5Ak53Bg4xMpen3*su zZ`v9p%n90^XlJa)8FwziDk7;FU(UK^ugTn|q4OU6Zl6D4J>;NcC64*NY9TGbxC@Eq zC2;zTKUdcn$;yOw_Hu|?wLF<#eUu?!l3Tdp^MfhrvwZu7wuVA9elA*A-1qPFxmlig zx)F8rQxFtnvB4f3iwvZrYWi5~1L_xlShJV^+`hO+9roMoM#qnjclp}#bNDUwJL&7x z7;l5+S37SPzx?VrGyn4HVQ-w8KIn3*;ibW6^A1(h=b`<{7&s*tR36#ZJ94~A=L9bb z5dFJ9x-y|%a>D$id7&cH3p(;uzj^%Y@`-+)vb@F}U?eDwVPa|pNP0ZBA8HMzFHfv( zn-I|kH?PT0CDLP#)o`8eo@hgjj-Ml=p|NiXGL|YxRPj(+wJzcEm264+@I;}(m~=_Q zY1Bs~YoX6E7uX~|F)flv=p-ocC~HzxTU7KDkY*|?x*jg*6WfLoP~B^?(z`)%H=uB$ zIj4_t;AlDg8LVHs;n6TD<2Q_c#yDCcmj^h5f;l{}HIZ=3w8e+D9jkPy)u`Gk%1M@D zP3qF!FP*cyZZiqvKtj)7j!56c>>gM{^+XDtyN5BGaH-IGTv^hiGJVJ76_1$$aQ~P( zU}8zq*jQeuw$!J(<e+$xp4_EfaY2gbfN@7mAr&?!j6@+i2gcAr)63Drho zc2KfydwyediBiqb=SGv>am3{!V@1Dv+ZdeV|m~Ag*Z?6dK*xnaVqOP8W zg5*XZDq?LHNHnliIo4UW{@g_wih=Xxs=ZtzRbWamUy@^R@}>p0352wF;V<;ZDxIKz z_}N-yT;dC>bl}%gBg7z57pr_HyLQ*{xSPa|`pFbOX@r-K0H8fIkczO5F)wD<+gh79 z^$Yo7C)eih(2fS23QhSV>Yc5p1#u;p(21lymVnu!AwO>F>5hKvDK!q^@zZhnp-5`Z zu50o+JsiLVLH-_P=QNGTXlkzXWv|zpNLcy#zGTFp8Xm$p2Qz^8K(W-zDl#W1Q!9Ei zL#;5rad?VRTp=ZppJd0H>PHLNt^zpcmWp+!7GQe>RfZO&I~BNxhUsZrH20VFTykq~ z!xrEe8di&gN=TL@v3Fl@B46+adDs%D@IrlF;Nt7*&02SUSS@rtZ(Aosh9^jA|3FDV zE#o#u|MF&e_b#E7lA`J@n_R=4L+}AkLk(_?1dix5F^?SqC8G(w?SZDBEp8D2{*jJ> zt$yApUhABl|NO_C1C~78DW@fZfn~)Be`3zZZc5u| zC!v1(utrTS`)orXg|R08p4=H=LU+La5({ll6u+}be4~M-%C=i3+Di>#j4?GE>9As! z=d=;v`&LA9ot|EYDJS4#!fGVyST``6YkJ9@F*S>hwbnYPs?jGC5@|E}(R#+>R|lGK z8b)3hQa!WHGk5;bfR|owZWy%p$JCQ2lO8CbkOJ~hZ1Sfakj`Hl0q@#EJ@+Tvb*ha& z(*>N=6!i9H2)n*|{F(FTy6H>M_mu|o+hP=l3gVD7Xd~p%bR8dxXel^(O;f;LTRDr| z9BtEJgNNys(N4_m0~|YZl*#sJWrd9~cGtx(s*-wYEa}#*A~SE@6XKG5s1aE=c5*je zHqTFyVA1KV$>xXP7EE+yaINfBRq+VFI^&4vR5wAfAFvPgTd<1_)KlIGGF3zJ%2n={hreZV3dVu()=HjdAxW8cX` z%f~HkRFe5j&rSv;ougJ1Q2hgCqd9CbKrNa`M{vZ zT*!}yhlf@aLJzw4KD57w4Ym&mNN&3M3(sv=P5BnKL!+$NdNe0w%nC&%zJ(%jr&HlN ziU#lUOCZuvPkP=M*2$rrY%BS5@RP*1pK6%bPZ7wl;{D+SdhXft_E(gb&jYbRxab%h z>L#A`hzqKQjwY;USXY$=(+OG3xmc33JCtd+N-v^5QKjVAO?(fEzuF-FApENa*_I(K z{5_ci&A}OFrnp47oXZ_DxgS_w^I?u=BqnC|&%}n*VmtG-L|`kjK6M5ypQq>xt$KoG zy$k$(J|tKHaB%r1qgTK2lP_)=NqD9oZgoyjPgB>Q-6R?rs{IItYsnlu6ko3-Ip-bB z*^*LpwKE}9rz_<|tV92_BPQkC*HL*93>H9n&<&r4FoAmLG^CW(JoNPxt+%up1=MvC z%s~gLgez2I_@^hTGRHa38xeM-*o?D2H!o_9JAi!9S}o%+=WS1Wemk5v^TVL}V4ujG z_)?R@2efP1YBmQ1AsE6owdD`UVh#;!Xq|}VOUm=)+zu!|AlXyNK$@&kkyW~apMER-`t}Qbn!#X~`i~zi9cSO#`;kw~6kCr19n7mlPZ$7jPn)p0K zZANK3<&2RX)iHS*3u*GvQzNlJ! zlT03uhooyq3t|M=cp`)npN~)m!s;@0Gz?fxrb5$n8V_Ic%f3sYYcyrA!=UO~MfHuy za^dxJ=?=xnK)0#Eljm)x$ohsG?veuVr46Y=!R7rh2Y ze$ckBV=^i^hbDvxRl1zHqs#qB;q;kGwczv4pbSvD<=^)WQ;ULDFL5XvbX>JJGx)kR z*>~sd%6|SiVkcgP=BA*xv2VpP^^&Rk!AwYc^R<-?=5b&pf(Bi@({u$?LdU*a-Xiu+h0%#)@3> zvCpz))UsKy4NLa8OCYHbe*{N!4PA#0!Ksd&aPYKQ^#<)jnj=EFI*z1GOsAJkH|BZ7 z5B(phqPA}x&q`ei_p~B(74)cMZT_4k+lY*ZAZ|%A)>ER=e>a zU17aNNgjE!GE96=sd0bweSNyE`Z1c=?F*>H7xI-CNAD~cR^eVpuXQHF?5c+S&TuV8 z0^bfU4ZQKrw9`)bq?J0=%cexD@7Es24M*!`(^~6N!=r*0T3kwx#mOEP5_k7mAYI0t z?#Jsg@gsDikV|vvLs)CD!IwS)NSA;t-a?N)(3bxw+gMyahnzdXioJ@NS`K*_P*)WC zHi0Q=1QW&*BH4(6)#3V$IWdOBe{3Hy;SH1}-yEK%Q8tb&+$NumN{ot%Dx@dZ+;%gy zNOfCxNi+Jz<*I8{6aq|P=$cXb3fx2YtWX{qdSJw{k0+j<{J14XK!Y7JxB{9O!uef5 z_Gf%EJwqQUMBnT!$n0F<{dPBh7Q#5A*6>i%cTexDOf*rCwJo%a7Sc!$)KaB<9{DgVlh;yZj)V1S3O)0{E7SqFL ztfDkK7Op(rPY1pHnR7RVo1xf%U%`D?q$?W{BT?j43jO$nR+}C&A)DP+e;GSOfx$OnSmn>@bK{;1b3SH8vI~5MZ&Y$sI0n}g#nI86 zu}r5aUTp;NbB5E~zs~qi1bQy=cZC*) zq@`&$W>QPfro|RPaZlvXXz-w6g({Dq8Pp=a9?Xekhml%2GAGI~RN$#jy%@vwDAIGFGL<7{X>ougVNG@n-Y26cA zgYK@MPGe5jI(}~RzW9B!bNqDV{OV+SknByr=cKgHWXEFs1g*P{ZZFfMUp$?}5T|!W z5L!@9cVGRKhC#q_f6Hut_tC_}(T#nFgfV^2sySU&Hcgc}UWyO?N1y8ypI-|;J{m4` zm8Yk?XHK78UFhk)igwhjJ?`2Z4_qt^`WVnxHo9=BfBtF|RKM2ps@Cga;>YX6+2g_T zW7e0iT%HcS*ETK|u`@q#fAp!yP@WYNf1cv&XL;ma?Kx&YDbPR6!kuvFsT^XY;TNlG zf+_>%D$h%KdppD8@856JdKEt>`p&vCcZ3s>Jbjc!mJM z-bSaSQiy0!>u$^ObhAAnRrM z73*3W-pSmm8h&JH>aTw7SvF#)RlNk?^dc3)vE;!=y_I?WY8y>>VC5|`L96_(T{upd zlaQ2$l`WCdf+K;s<{L8+Npy6a**4lQTZAa=5{fT(vXX|-0fTOS}1uo9LR z?XP<14m5W8IFfjWJDs!C+B*r5oS*4d;~7Uap0+lW!n|0Z=~GulZt0g9O486e6vQ6@%( z7DO~pEZ%+OMs$}eOa0W}W)jDesymzuL8eW&oZVuyJ5?h_!OJjOA0pL+)%O&pk#)Js zdAz44F z-uq&{kFwY%e)UxE&8@nK75qNfZ|&n_ny-1xe8IbxnR->>GE;5Fh2)#Njqa*=QP^t3={$0~u z?VYK`oLdg(EgjZ7>4!S$h+m^G9yoeNztz$YF(}C{f0b_b{=PE#>bfrAvsu8=rxH9o zyjM2`^k%Jy!?kHqM7}T@PF(d%7H&?g9Vd=^;@mKrtqWHA&tHSAfA!*DOWj(W?cn1{ zJzD(v9k5E@-uCmc?QT(e>CbM#`Z4`U;N|1v75?OUduQk4BVo@t5cqhFKvPJyEYdWR_-r@gZHI1j)iy4O>A)$T}dGPxW2P5~u_Y`H%NYH;fB^}&H5Q1g*eIe?cqy6y#-io!EuIG6jA?$_1|g6Xa6OZt zUv3SHAbgH-F5rhvSFCiksKky8bYE{Y$XXL5V0`cTBY@Haxkqj(-){fpuID|_E-5|p zrz&|qo@!d$+_ESjoWZS8fl1RD$+Kd(a1+QF&tia~tc>Ps`DsuONvsbthov0{+)4X& z=`N|j;Jw3Hq)qUe#VnB&$co;FV%cI!OZS^SaM*a-bICS3r+L@@Dk+<%rcT&z$2KkGw{8AWQ{F^fA_|G7M5Zr)Jm%TQ=I}rB`s{A1v%m{Dfeag^ zah#R3oN7`{!#?MqW6=eK$QSuuXPht`c1qmMX%0_sr&913=X6c2V0diQ%Yehf#1?l< zH}b`0b`AN+LyBDPpgr~?0CGl4j!_uhgQi6!akyv%cheQ{;UYK3{!|xky8p&bEp?U0Vx|W=;1Wmi@xzKA7#=6<`kjF5`vR?tpaerl zg>JlZcceLNZ=zmlE9xDREei)t75@2X0+St)=Q19fN)TVAXkadPYmqn!`?$vJoY191 zQr=j)uL7Zy&qp9PJ|~&B?Q&_NVPXE@DA$Heni|Gw^F_-FBXbgxiKa0Q!Z|S%k^-~} zwu-(&LIlGR#7K}G2(*uEeI*P-)0Y-_);Lzm12--&q1(1z9>KTaFkJ@&u3|;Ad;qPW ztvIwe^)z;vVpRY8ean1jc7U0M0>#lm9JxXY4nKAp%zs;TR{8@i9&48$I$OkT$YhYs z<$Ri3ltwhvoyk)X`~BL8L=AXCWlmX6u9nn!3u%2q^@QM}n=))FA4}G;ckI~DKmev! zgl49^tcV=HNtrp$D))ec$hVVGOvEfYc{{li<6KyZL9%PlXNJ|qrup!#a9$6g`ennq z-d3%_vZS@N<~L;+i7ovFRfL*k^sH6Y&wT4wq*v#eEthubL2f?aOUU9hd_w1FeK{n2 z^UM?2LYzCw^=lMXgOOHKHB0ykIAhf>vnR3m90SJf(R0oJ;x^VJ^v`gK`~A>c<2f&1 z-c5i>~2VcB-k-1|Z{J3Ta_7%!HbEq+9 z#d>uu5CDQj9bdKVn24WsdLG`~9Ng@+^nWktzhIDN^}!>5Q}FGFg`bC;M_`iopWV|_ z$C@Q0ning#_WKLlmlKEA9vz;w8&XCtw4c4nMl1V=f7>*mdW2nkH=8)4lW2z0(3mcL zZK)ls49{r!Vk-|hT6KHLA;oIVk<=JLMhpYJr)qJ*-lwr7e8Ymm^3jiswpgOOtPj}{ z=>^#TV^!n)ET>|mf}n<3Q}u6r)H_c$FBUnkiLw>o0C0n+0Own#@nbZey-y?2b+^89 zjPFdl7fD~)xM5|YH_=)5`|lu)>FP4$X3VkR&aCmZRAw}avb?h7y;eq+_G;u;R9VABsPBj8Qi{#-XnO%TIE=cub?w(UvWk-f{B9 z%~V+DXv_6k!zUWh*dtPLsk>Nu(fD_2Hh!h7>Cj>35FXg41PaFULpq{}2X%&K%_)p@ zK%@oo^3>+SnH_+U=OrtrmR5nv&n;?28V$_YppRVLi4Ot$7H3^w(vqQ+;S;#2FT@;D zJ292ibh-H@)>P7Dw#i6oMSW9edta@p_Jmi8;BZQRe+j}Z2K27C`D~#WRO)0FRGB*f zBb%Lt1bwLEgAX(WI3yBA3BE9O#!#B^rDbY5Zf>OJyR=89 z(!R~j#b3_bdfr_O&Mo=yKJ=@^Ak5gJGrkKmKlku!)}ugPHbhqgtA$saQac7O7K^gX zHK>TDfc~y5objh&ztdOi+U??aqzomLs6@b+r|iLs%~#y`lpkR6J>m#==!e-14&1ET z{bU)$vtntPUgb_9b5M`wzxedMs zQ8(#G5YJ4<;qOrjiLMqEnXs?1!6W$#oTF@$NgOKq!t@18s>K}_70asGTy?2WBb>~m zUv1b^M5ylutzXB?iM1&q6;)}`&;_^|~KpMZ`pZ?YPQZ^l?@9jaxnNRw>tJ}1y-SN3_wd>wh$q9e`e3F2hm`Lrg-a1=}7e} zlsxWFP;7`{1*2M8d{4k|`&|XSRq|u|HYa)e;J8GH%AK!}0tZ)h5544MmlPFsFS8OX zook@;zeo9GXSgcsNqWI5nlpAwDiI z>A(@<59|O)-70XRqIimJ`AlGp^TU|BwTf8OzgXxF?v2+dTqMxr9j`gnpKMJ>nRZ4` zp0SM3!RSEx1iwT+-(V{_9;5cM=Z-TTCE`prx{w?^cVNVzB{ZYWXlSE*EO!$#NB;Kw zSdshvbu-_d*lAYwwp&|V^EOd*4a+VnoWR*l_O-14)`>2aN;bv<;}&@+E}rqzpT9qM zzCciw18Lc0oQsJBcyNR*<_6UNDKz_b_^RvEwB}_2m`tn4HTF&M01%9P9@1+nrnLQQ z0rgM}I8uuC3@LxFFyDV~no94k@I}Ox(8&H9F*Z3TkuPafNvU>br0t=@9?0)5OD$!U zOi@;08zKw33_D(*m5Fjr+-10M@=?4WezTg&ojc?+AyWtBPQRHdB`#f2t@Vpu1AUAV zdai?$0x8Mfx6s6Qf3B5mTvL>``~J@lkw^>T{2$eN(giZ@^lmSXQIHB_YcPHyvr;i> z%$7;g^2BL{2x2ZeY=!Cd zu;gMSg}WqBz}2;+^squC80MY>^pGdH;eNR!m#L>1E`}%xj@b5Wp6GpT;lzW!TfYzV zGtqIisT^31V;k4#wd1*HT5J5Sn`zl5G<{TZux$|AT=YT7$kQr7@C0}}vM)$JHd(+PI{=`>;*r)}NwE{_HYBR6~J_P8zl%x1B&n#g=D z3?5{WY5AsC4*ny449CG?_Gbf?0u}A1PwzuV^W~dK`yL%n$)3e8j}80TccOMd>euIt z5JizTb;mF)K358y@KZIptI(B^1{Y5HwrsF8c9Mz+xfBoyOU zn2am-25$mGniu6R13W~`c%uvsJ}FS8YFRosYstFwH8%>T8^Zd*-+5U#Y zP>?M9YHm2jj5Brz=_h`@Fvk`Q+QH^cKStdcPIpNUlVIHpY9X$Ls4CR75jx!5z;(ySx%>{-+_p`%P#CO|7knl z;kwr$#8KAIP$H*ZqiuKDZd=z_t{+;WVCuhu&wi-%>fF^jfa9PzA0RF2m4kzomcHa2 zx5%|6?mLIB$dg$UWZ>0)Lf?3nYUq2fR>3Y^KP8jE(Tn2?L={d2wrU9#T7CUa;a@Po zquak7D9U}hKv8(8P(*b=7OMS-`x>+Gxo?kS$aX>zB zRA+RqAvW~dssET1!_4g$jo{9^62B-b?61|>CZe3>Kd*Q3Y4Pu#As0ZRaST@V-!%d+ zUOcMO;`CB38A_Sz(*>S~mH~5T2cCIx9OG?CD#+(sLYw6r%L@{8`zqAF{(?BNNQtj3 zR}_-}keJvVgzQBhe~uW+W*ZV7%cM()0J6P&rC8lHrSXowLbJc+H*y08sPs@(?kXg% zl4Y@A=#7nysVX*sWi2hkyD<`Wsb}W`y$z^L+kE8bV@hd~=tzBUtPfkhib!=8oM-l8 z0I$AKk!UoLRIM9U(3VXPrkF+`_ipbZYmTsll|i6eR|ayiQ!d&B3`5SNYz-*S(A{~#VEpP&L$u&m|s@*bJ<;YBE_-ejtX;x zQvy5xz5rFa1|4SyoIc;m_o)aBx20|c-wH^m#8PhEcdl%Ab*%if8IvDHXQePE2JcJG zi`aeCyS`SI6{63B!}jL(o3u46A3Hw7)$c6LbpYb#Z68cut<^$yh69O3uiPp(7KRVW z2^vh!mqYbd)#-QZgoP2Lq9gcK(*g)amjH+_zS7Im{~AddEAlf&hm1GOLKp%8`Z)1tnG!eAeKr?ktxbAnwrjp*(^gUC#&fhOGc=$I+NwYikSX@SVigI zihJTq)^Qea&}+s_mUVs)c}dZ~%M$g$sUTJ56EW#kAMF9m% zyHa15bE>T2%Z)Ax5bBo{rs!z?xP@W#XX#-J>Lo;_9822BwZkz6_SRewJzzfltQ7L8 zu3KJoWZGM@_RYpPYN;vN?4HGqc^1W$Ih>+1n7g2{wgIo?cnV_0v`9oQS$JR&<3cDm0H} zYVJv!Ph+Mkc73EtqE=e_oP%r5Q@NK(&f_Q~XIJ5_r(O*&`XFz2!gE z*wJ&}XOPZSskU^7uXg-D`gnC3KkXI zJ2BR!@CwHFkfOTB##rBWN@>-QufgIDkrAee*=h8cX4xNf-msOJ5V{#*&vLN!y&3aD z={}y^pYqsf(R*`IbK$X ztT@qUhcV<^bOs_{eQeg*(IRraeqTf^Y=JG7dx;b$n6ash#!=VS^mT}m16dth1_KIY z(asWO%eK{C{!ag-I5kW7x>OM!>ooi!1ZU#XO^X3v^S)8VhTw{q{gnQs&Bu`HBTHTX zAKH&2j>9}$EddNItDZbQOE=mI6!Y(HbZAIsPhX!Vn4%88uK5&6(XRmmV;bc^`+IZK z_E=XGOy&>wP*JEZ(pqY8hd(s=p~F64R`2}XiWwLF8o2XT*gW{*>eU2A^3_|Mo;LyK z$n!e6aS*De!3p`s`!qEGPdBCojiIi*T;Y9X<2DoapaX{P$f1X1tvNkM2_i1qH^1lR+#b z@fZZ%SG77H8`Z;7a>%~21ZTdn@vVrB*ALe+4$-R6wZy2#QL^iYwt*A$`sDM!Y||E* zC?g5A(uOI{RymLfW9G(+>WM^Ed>biS@NA48OWf~Aa+@Q125q`rehV}!yevo@4ZG4= zs3M4p3vW2^K=fKDcqlLq=#szeopR$rU-NJ|JM&aG{{EXmY=UxU8+U!2-OF8pFwU5H zR@TDjco7-aN8j^}w5D;&=f_%vL`7*cDdPq=v_z21fP4`f&*GI>gAP#xkV=-I>m?Np zN~^qJP@*J>t)GxHBO27rgpHc}eO(oFOxk6TMr1pgdo`}UQY)9Fb-me+Fc$~P-oJ&E z(=IlvFv{jVEptH7%pXbSeZ|i~RvN8!a$}e*Rd7Gam-JpiQDra_Iq}8#&yyV-eK81UBPfwQ?cpZiP9vDWPM(Up2F^mo1&jvDj(155UQCbCHlLE-je_SIMa+--^ zTHmktGvO#t1xzOgWmyk%l0%T2?Tn(VKeS<<#uES%~5rTHvhcDIViCo}_ z0u~Lcendja>(xgK$zx<5D9s~{l}#D{C8ld2gwVqp;WAMtSa}+qI3|0dhOsgZSZ|K@ zV@-v-j{q?WC@epWj3UOYOt+LcGxj>+A`+@@zC#bAn%JHaq17Aa%7dYYnElI)s21?wARvKd!FPN6 z5e7jWO+dUtbp2`5v=N;^&V!z@0qf~=YjilZ#8AoS0>nKB2xrgF#zEEUFk)(6`U2-> z{)p)ZnTRjyx4SxQ?L5s7@o@=vCC!ccBiDPu%e*5j8{Nx{g{Ntaz^wLYOyzR%1l*+ZLwH<^wEc`-_?4_nY8oSbCVMl$Eo1SnoZY{cM97R;PqY3t!^ zc)Yr>GozCyq&JV;hQjckwN(PtD2Q%2<71Q-fSDm%G6QRFu^2{s#$|)qd@?mAL|Z7r ztjc>Q%wE+^W9g@JC^@o(9d6B7LzE*T+ylU{Sg1c9T0hZj7hsk`AMTkG`!;l;$0)eJ z(gWZtH-C8J^hHnI#VZ^@95#r}Ks0#$KoEo*OG*fY(VC0OQ5)@IDCS*g`L$8M>?|5w zjF?o=&vEL11*2m?{TWfjXm~*VPZuYddZa1{Cq$51uWTtb0WO#cc`{-Wpj5|T=)B~z zN(UagAT;jjA!QT5pMI3ejm}1G99~-wDuRTPdJ)6QR3&IE)|0cOAz14mi5Jech7)Gx z<(u?0%z_NwLi)xLT`MAH;;k^wDEv#(; zYBL3BhbE71+hys~5}*vq;=kkI<{=(-C;-0!vTLOqL&*j{XKl)is~PR^0EqQmwV7GQ z4N7z9%q9!uwfymdE23N@sdoLVm;J^%V;Q+e2|ct%V}Wq}z1kflS}b7DG*?eT6!;n0i>X~5`CPQRT&M? z9X|Efshxm44|TrdFfU4l4wE9NWf$!X=TVyC!(6nvpCGK05Nns#D@Zn71pJO+#eJKv!Hqr^U9j^VKi^)8CDA<;s=E zAAcMf);t$KETIA!W-^&c;WpZVh+{IAV8|9Gn_WW4-ptI$mpH*CW%qP(?&A-)@7~y5 zFSxppH@JNg=38DGA;z#Z3)?J<#nHhhS9adtx&;gK!2JMgcblT!=K#;z$tO&dq_bkj zqt*^~_AeY>yRi507E_FE&Q7>vc5L|3f4$Q|tbtN{NV1P}`n-MnHYc;=y9*ABcaQJl z*lvFP!daPWI_VagS)f;Z5EydsVhw9iYd+T0SQa)8nMrX%Z z^pj6M`PgHR-gn=9M@L8U=(E>=mYkjc8HCdwo*Vf6ICL(xprH-g|F(5Fg0c&URjS;f25Y%fJ5M{SO{~_@Q&> z&cT3FAAS7MfBl>9Jonu5zxercFFgOktFOHB{0lGq^5vIae(9yxUw`ABci#E@=RUuG zctmy=%VS3W=D+^kn{U7U>Z`B6@!A`&zxMj8ufE3F{iRo4;-F8$zxc&3e*b&ld-mC9 z-w@tn^u71qCBn~t{&UTk3vXlBYiP#ayRX2MRA5jD1B%SkqAI{4FaNViC5;p+I$hh0 z)({A?;N1mgV(HOjerP%SQfVLz!InzM`nC?;jzK(9RM@Vz0GQ#VyYwskxoz|9h#o$| zrhZ%kYN&J|4oAxd9RyCiWE`?F^RnaB2sd)=_e-x6h=-CEe?wBqsOjtg}rI3Gv16S4BIGxoba$L!R#0t{7{jT;8k$}+E5k_!*wI1e|%;||s*Nj?%Wp0i08 zDNe2sImpo;dPiv)EmD}es6wqqiHoi?E| zEx!{n9mnef?c6Q1M)R@JB$u68@kt7583%t&19Tw}F$2zK(~|pADDo?$RDz|Yq%lWj zQcFH)oPVMWUcBo)Z51e+0X2uNk}7V_Y3Jwy&S<-~{O{~~Nb@XCiogxnkj<@UVp+({ zu9rz2RS*W{Mo?aD=$2?o&h%UVVDiP1;+FgvS1^+}hO>^kvW%8u!NmMNh7_qNC0M##xdkGL$f= zsxI?@|beO9m$g!J>asaB#45>s-BBJeN z7$=oX7q6&f;)b40sd;OFjN_cwj_60&qep=u)HXMCyZu!E40KD;;>Hk@)iJaYrj9Zi zFNXvCOd^|t=CDMRa81v|vv$;@r=##>Nc$^Y01e>yGr4_sSs_H0HFeZHNcIChYA6(M zOSmm#lt7`CV*)LOf_{)qCG=1YF$Suwr~p68*h^;-KgqIM=ypz@&9fEnl+}<5p`yh6 zpvpdHNN=)37s3f|&XyhFL4N^4!f&wr+j2=bKX&3%vZKF;fa}b7Jq>;HbWJa{l1v z)xCF5Z~BB|k8=$&lauHtgZV>Z2qUY8_36RR;f2F{4^HpjULWWKRb{Td4XBA88b}N; zIOb8Yf|fBMs(ay#+(sp9ugQq ziXvbM@zM$_QqyVV0O{zyXFk_nU1HF`<*oxx7Ia6aB~l&&sY2QzrBZ(2>Ppz*hUXW* z_ywoZhaP(9fd~8rxQf#PmF0}}(l1|m_uco-oxAw>=N>&eJW|Wn>GkU$|LobH5zEt0 zarg4XLk~Xq_~#y{-ca?}Bac4u`On{T&(*{IqXe^j@BMdQe&w~xm#_ThZ~o>NzwkwF zIKS|PFOVM&^j~}C8M-)g?b@|RAAOXYja#>F;>_>={_lVO^Pi_G2n48C^&Et5ptIvp z`*ahH>PTmnv0 zE^?fVxU8B*f2CyGx6WJ}`GmT_O4i5GS12$^JPk#o&fZL1A3+{PhujXp2C$!b< zxe5kvvs2j(ByNL4#!%Fr2_h9nIZGkcGlM#(_lW7zmX02HWb-X`ea5%_gT023GVpmv zuV__U4Rv7d0!5%?gFegHY_tH5@p?N*k!p+7OwaGs+AAe^5t@;@*?*AY&vuwcZC-e$t zSBN$ZcaWEG`}mF_6XzzFu`)BB=2N}_>WXG?V+lhx(C|mBnQ8JFR4g}gpw2$hA@PEE zG}LFe8eXa&u)2a|w5HFJgY_v`Y>yK*pjUCD0CW9`rZ|~aT|pR~k(mvUV%iOm|Khmn zImfkD4YgBM1$>_M(2{$)KnBe_%rid>0No-L)cOO>z^`7t zdT?-Xe0&#N=0Mqilj8*kYYbs!wg?+7qu7c&gTLF^>>+sEfEVuad;i1GYzU}MT1F!a z?(;SP4S6LFGeD_T1aO|Mcx@q$!btlY5Kb5ufYYtR{ewK^JYAfeeCbPH`ps{D``3Q` z*PeOinQwjTTmSr9|LmLJ{3gV6N9Q<6ViG;8)d}{`ojd>ZlTUG8f9k2Ho__l2FMs*V zPd@R~Lk~T2_3AbJxp3*?lTSUt`JOwCOP4M__Sj>WE?sK)ab9QY`Q*~bMsq%=t^h6s zFDrtC3EIg5LH3L@d4yi*5G`uqXILfqunl)^CTO}J06>^%D8*^ZPj%rwYlISAaRO!{ zTrnxCtU(+>iY_8V0R~+{w}_NqRWS-)6O9+&n%kKth`)&rOrbgTXwn2cY(wLW?&|g# z@01Ef&@!zcT82t5v~tKs65{ba`<@S1sv**T;=CFPP-Z0{Ei(`RZH!kTZLpDf~DM*)a*X`vukB6wBBTf($X=!V~k@DwvLV7I>T554-^LPaD= zb0|t+Ly5WZgKhTW2Bu+;Hm|~3@!k7!8=xn=ddStP39m`oJeL9SdFOg*R?ncSHX^01 zZxEHutj)NbpuP<<@&mn)NEKHWw-Y0jj#dM$Mj=M9;X|DnhIlZ3AU2l5tPq@bhB|`+ z)=x!pfp$7T@-~lxVNup@?o8r{s)(2oRwFo+GFLNgiPC*T5W4ZnDq<(ufUEc~=(s4OW`nY=?S2qcpS1!j&$EJHjqjSTp&N*bE`XO2cV1W}Pd zeemPB(W?kNBsL{v)VgG_Y;54{YsbqKR`@|@JV7k2m12FU$fxzWRZd(W*g?D|3S2#b z*@q612!1x%W{_zHBRSh;%o;#8IuFBOf`lcqrVGto6N7 z$`c_Y?8a!J5)wJiWZsCF&7CRO-dU_qcMtYg%Y_g8G*3pz>?t!`ggolES2rt|_T(gw zln}3DY8!w9x`b=FlfcT28=pM;v!A~F^2?VlU;5^^zWMEMfBW}-|M!3QU;plJ{^oD~ zn}73fe((2w@8O3ZUMv^;dwxRK%YwCHP?gH#G}(eT56;%e25lD}#hiH; z4i67FH$aD>QW2-o@q@$t^XJdQ)SO3Ms1H11x=6`N*Y5Cb_}SY#;PxJ5@Wq)~IeG>j4{-vt8NwgwSlQcUIl~6v z44yP&^;w2iX7JKC&(gvrE19+#; z@s2TBqpj1|SV(?dsD{v0O3bjjj2OrVKh%;RuF~RT8sy9jfIgJqF;4 zS+CTBAy;>lFhn3MvAG~?D7*q_bi$^R4%H}7X1YLzM)^@otF_yp(Gp@H+H4V=krFYF z7>Y}wHKLI~J>-S-Fqw>cXQJYf-j3F#S!a=%0+hK3PL>|VoS5P|JB~@*sER_kMy@J5 zn=270rzXs>8gTZ2`&Wu^(ojGIHblT{t1fk->!f_*ZKZfNJ4+f?Ozi9uQ^N?OoyuN= zP|lE}@J1)ZDgmI^?W|=T2l%?>I(chdqEFJUrzTs9S+5 zR4NxK=vc3z{k$iS&(P&A-dbwBNHgd8rAqh%3gQ4)UGm)7;26YDDh{u-I98UMPY;v& zfLSQ9jwuh)5Rspihi4QOfNbdnr+)^R_7D6D5(TEKI4Vh$6GWS>3L>2F>t<{NAPhkd zD2_Vlb%hqz9HYsozd+71fnA&YpxPM}5GL1&6x@ZR^PE|Bwiby`>rS5cJ8U?ZVV?m3 z7Tjp*11F53ivPJIcdC2RjbDw|w?#bP|C&wt{ zlm^d34?XnYgAbwrJt#-%-Me?mjaF(aEx|J1AAR)E&6_u&Xd{aO<_|yoFvn2;X2e^8 zPd@qN=FLxDd(DrJ-@SVWEAPDX4!0JszWOTSRDT{ApPoB+bo=(L7hZVom%n`RCqMbg zFMj@W_z3}3fL~5Rtt_>RK}2x)*=PUZyWjnLe!lm;@4fK+3rBu<-Lg3K;}KwF1;TYGeL#L(<>0UQyK zxqcYq2Vx>p6?jE-ubxkpM*Y&O9vb)oaA1}NU$_E&wg&Lv@t}8`t74U2c6GI~$RZJqq z5kXI3(|-!540(KEW^+e2LatY>uE7?amp;~0niD|lyG8{I8f_P zp|Z0->hwV3a3gB=I*KB1oh#_(D$D`apIV=#62fq)qistBpNZx7AeF#9gRt2E5)nJ|D<5GZrI=mer>n4=4h2mlTRq*CL$ zo;qy(z)sCL6sS1LX$ufHk+}<$ZT3MA;sb4C=^hTsY%vA;xL%IgU{Aa$b*GhMc`JPr8N=j{LD&;R_9hab7`zWbD+e9(pXBy2tTqA{5L zlmLBv@~s4SEtLBs1J~S@`!I-i1U@MwgHH76?s}KQ+ue)rUq8HkYiE0z!#NiuzqyjF zl$#rD`rMKqw_x_#oz?c<-HS)pFYkVMdWY*kW+V0O*XHPqyVRcEVuJQ?d-sTP+}b}p zxbNKd{d;S_nQzzc6`kfrMkk8tVJ7wd^z`kw-hTbH*RI}k^=r>O!|WzrvZ(|KkT)Xn zZ2Q?~pZ)&#|NC;eAYCv|S>9crE?#-{<^T5GzvsCA$Rm&VwJ>?E%!&L*Km0M5QBJcz z|M|~<_`@G^lK$lSjhnY_eeZkUfBp5>*fh4c_Bs6{`0A^#a7^c3f@-*N8GE*a^(tFSvbvM7mu5c_?vIM`R+UK9v&P#^~I+T4i8BntLWy9n=iij zGH!h7OJBNr_0rX$7Ou0_FLI9$mHkd4k0F?6K2c-ow zoU}#4AMN84x?QeRB~(h@Ofhj?tKhI9SkvGj65Ze!M$Z}DK6`O|Qx#i=A#NWp7icgB8z48?^POa5O`-ZUpba;i?Zwi+#p8R#+q>)KGCukH=8NU3ABTe% ztK3>JiLT(BpO*8pfA=EzxmEM82qP{f=OhNpgA^iw5sbTq#_l5OZ_omrM}WOA^WdHa zbiN7@p+r_dKRR)SK6Pc-sf7G}tFcEJsukisI3$txWr%|1XGqa}Gru=9=$>yEc-Qts1T19KyUbLKdI{iOU}Kj!PKqUOXY-!9-RxIUBY(Wv_7h;(jc{Sdv!ffV^PGa8tWzy< z*rH{7w2F{iv2Ew_5#>S=q!dX(Dm8@}`UZqB7^Zs+@o8F{mLfBqw%JoSc)PG|;iu!bpo+FmN!Ngn- zaAK~W1ZM`o@7%d_%%r2fu#{_g$v-~Z}YzxvEG&u|ib{PD+s z?bm+ofd?MUSJ|9C@x+t=;$QrW-}sH+=y#7|>leTH#ozqRcSz!I{Kjwo_HY00AO7JV zKK0a7CnqOA{_&5$|NZaR8K9>B_HX|dI%o7Re(?)`^hba6zyACG^*{WF|L~Qse1(HA zUe!rF`R;eW`{tW(-hco7fA9x?00Vb-zw_I_vp6~V#m|5KgCG0=RsBvL{6RC-UFE>u z{@w}4@o7n~{CX2tFNY7(O1v(i+?3zF<6962a$dJerUkiPbD%t3ERPS5j+i&@Xu19J zJL&y~`@N;%xXj!=mD5DOsQ&!G3P z+)x6yA_ai39f2eq8~&g8woH01 z1Wn+jhFpr-xu+8YfI=97C>e7N)aP<$Q2wYCpqCQ@IVcf;0gEtKt=+vdyQcaSd{LwOR zsIPVXe^?GSua8wngV6D1=|}d8nKq)d^O5dFohkVA4=4wlIJ=rx^{e`2m+Q zJ&h}L6iOLdv!!QzDBnZ?N)!fMDZ)_O0#=H^sf&SnRXPBrt$H?6fhW~jg{1?@i4bL< zin^3^htG63C$2;^0CZ_fsR^JON(44>7vluARisiC--JO-1E(*Zn~kuP0w}fDz@c;5 z1)2Q;z(*sx62p|nXBn?GeLQ2p#wuaA5eiAt^RO$%TwgEz^GkUm>@|c?nI(9bi$Xaa-QMnp zPymRVn!($my9oRsv@pXqQ_2ak-A(w^Gy6aNi$8zpp@;6d=N?T_`aYvk1%NvAG2x7$ zPAB3V-BuW&!N6>$d8EjFy9Ypz&t#UDsDO9hKRmvZXQUpVeCEjJ>j4QFE}tHfSW_g6 z8|2m2&fW7DZe7{`@bt#+&I%{+2D46Gu5O-zyu|@Gsebxnz1}}Pck%FngPr@g*M7)J z^<>7IB!PaU4cW*wyS#bx<_j;pc>dh^r=EJ6$|rnglmq(hTX$~XzJ1TttN-ku|Ffr`e(JHu z9>c`Nix)V=qvwSef62Y?H@^P$Z+`RFuU)(6^5x6uL?|``Po)KSx3S?(hCCrqOWm;>Cmg{f8fZ_<;u=xOC|fXJYO* z{{HX(o?DA=eB&Fx{oB6{1B;WuAAIn^E0?dl^71Q$f8V|LUAlA;g_*%zZWCPL&h1+- zy!aC3`_z+9KJefJ%caSoa-GDSd#sJEt+(EM>+QGS#pu&tc(MoXy(}c z(n~MB{@QD=zV_-HZ@l^9i!aheId(a^XFB|_(A#f+aQE)w|I7}^zf3fjP zDl8Wm%0mkg2Bs2(E^M?=7!?l-jC3nrq=IdMkUfP@UvHAK9NR9{Ieve`RppKt-@h**oHcZ+K_%)0VjmF@<}oB4OafUU9dT%(NAMvXuhyTxH>Tttcx-OymJ=Z28P4raHxq_NC^ z!*R8GOod%=XTNr5PPEWCl8~J2iz*Z|!h%ws;%#vWm?_bR z&8%WZjo3nUH2;8K;g53hT4B40A94`rJSuIHEg&1d1T{GiJoA-*;+cJSBJ7}zMo%M# z4Toc6lSn_)6(W;4Z7Z~pmC*Ve14@`|Ha7}o`}pwU&2!go99%v=clqS-(((SK<9>yyMJ|S=jwXv+SbmM z_3o9^-3!a@ODl#CE^qH&+1k5zk9POs&ffXGgFQ+jpTajsIUebRPT}5gl9bVsBaX=b z=HLDs4u~8ne(-}I{Ka4V#ozti-@W$QEB*9Ulh9a*luel~2bU@-P`0#p?%ZKsp&uOV zvn8P)sa|gm4i5j>Kl|tR-}e9%PVK!ZgdcDlaA#Q`AK%3RAiK;Cr&W&i+yh_{;6Trj z{hQzXX5D}d1Z~%^fAr#u&vPU2?QegZ5HRO_EE&~3Lc=@QUw!rES6+FAgFbAyN3|Rs z9dHgN5biX%d3f)=_io&{VYaroLE2iLob;iEx1sD8c{>f9jD*M2C`ik0?J~14@ROwm zk$iLrPKq$z`jH;a@!W?z8~Eu@fBFJD^9tc_2A{4@7XIc2uC|52&jKcOMoyM3r8RfbG2uAS5D>wqnrpU; zMO!|oBSb~^Wm*OOimoiyoD{W1@iB?+KhsG9xr7M=U3zQZiy#lC0U|>jkvkN~J{uqg zew_Dcpw&t~^$t1nbCyW}i!j59+t6pE87;%8oGCyMhD!{m+U8L@N}itX=T|tmv70%` zzHAXMGd(z29*)LO?sz*LFdNIXm6ajPK1~Pan5WmVy#gS1xhLt3gt@hVXEsEjp^8-u zKW@^Ecr_?qkpO5uZ)0dCpAptR-I{I-9VFTWa1CiqwLaa?{^pS1_lR-7_5nbM>kyLM zoL5}K^og_@6E)_chhG{o)JiGE+s+6>^$I`(ZRyPbc#+~2ErkGC4Ir5==V;~x;H-Lx z6~jt-XrUAbWC}=3u(NF10?baeSb!T^-5DmFZiv-ZLj+7W48vk&L7)>bhZ@#j>E_MP z-MRonCnL0j*9tJ##yr|C9+qJqWj6z$lPkJ2b7L$IL+wJh z#mOC~10kov=eV#rI&DXY4G-;4px$^v<+zLXLAblLdjdy^`T$4WfWc>vDG9r28Dj8P z{KWB$3k*TP6Vd=f?P@igv;dT_)ujM~?imRnJR$+`*|E8zz@fC;Y%@FUGSqex!CbFh zP!M$E&;85{*;30JIL%wQz@!0tu))LjPLR|EWB61pjMuA?8OR=J$7V|_&JK{Jp&u$7 zDT4tb1o|OLXMN!Se2n@e3ngTXTZ<+0)#RIyisKR|5Fe_egB@nd5`g9^ug%hnpr_(G zF_qcO488hoDK^eskV2$23Hi(dw@0Wee@E4mN7DKns73xW1&HwDjxq7)byO5x0K7<{ z>u!cmf6o3d|KgzsAH3)4Ro!HD4e|(H4<=ouFa*y3n!-7Pu88!sK1~Eq>!A3k(+{=uX3_a7cUdhx21gTt#kd-ornd*JBkzQdz? z505UNyS%q`WoL1Zzs2MN)JJ^RN$Yh~JaqmO4w>SB%dz<4#fx0&uXBq0@Z)#hefy)2 zKH@BR>Cz=R-6=dpaTvXM^A^mHJn~3WtRho!${F;74?fu6JNWw7zm5qG5M0PPPaoes zx$nOFpLymP*R_{w*hh)qym|ANFaC0Ia{BbsPu_d)wZ)S2kU9}(C5DqK@sGdemu_$3 z+goqFMVWr#3tzx7ZaseSi=V&z^26CbU;p)A|Hjw9 z@s+RmsiZG{>5G1y<>x=I7PCn0Enj>6mG|HO=&?s1|D!+p!*6`!>o6b!GssgyvClCrmt~I};I^tG(K0 zoEDsk*xlQAgZDXlE5ZLr0TAKz`MUl}j1R-Zy}f;o`^9P1&yaD&1TB<2NyRIp^N=7l zRs_<{o>C1O%BSS@q`S}Vs4=wW50p^$%6HZ>UkI_SxM3-k1%ju`#R>Awj(SX#-&5q> zs&{HoaLr2|%GvyMMK6S+jW^0OQ@Nf2Q6*)j(?$wT4H0Qm1Vi+V2`VmK2ZCdz_fFh4 z=l8jn$u>M{fFb)BxT-dkket3*Hv>Zu3FKt4=pDPq9f;GsR90jv2HM=Ln)XsaH0KAX zh7{0=zy}h55FAiiV|t$aXxbo{W#KEOv$)bPJ3EP>Mi-p*TRdN-7Iwvm54WFzQV@ z$!WI%R#kb5htW}m<5fi%XyzEICmAjONEb}98Ehv=W>NvInib?F*@%WSbF?@@4y5}Q zknwsTWQZl&*x8EZ!`tYwqV%oWXqix5jV;=GJ}DmnXP1AafYMRgPZX3=k>Y5OV zYNBF`^J&-_tl)47xq6G^36?JGdf4Ft-6jnfL;MQ@%&{=k^~k)7OcH46@&d)D_Zce#GO2kojICS}TKOq&xx8=@g*yp$*osgO|FD(&oCI#{2r@b; zHf0na#Lcx2^DJ&&PyKjsyQW8*aTr9E3PGxfJvYOFtH_BNfkUC)v^5ip56BSEp~7nG zbVV$&NY~=YZ=(SYXZeTjg+qYEjuG`Fj4^gsITI8z>^7fA{bH-Q$lxe&@~|4)K5e*MI$!pZvt9!pR`95)|=~8;;2NvI$Ty9F2VXOAT}I zy?XVYqobqCmoL+D)54w1;o%`sz*zt%1I~LMP|S<- z)^3tut<&x9NyrJ*0Kpw4e1Cs+zmEoUtY>g|Qcm0hFC7{!fwT|9V&U^$c>3_Bf@TU? ze{F<$>!ZY>(;ze@&?U*9WHqFFgiKK_R}1Dp449zymY7963sE+Z+qdu15?627tYwTx z8>C^-XEeKvJBqif<-wjGW1|*Ojux15pW*R>7+l}^P?L(1oG5kozzQwI-5oz|#eHMk zz+356Wr5|lOX`@`w=ZZ$Z;FZ)28fWc@;q| z≧V^_;Fz`X}DJS~%(ySdl4xH<7Lf1I})V5(LxJ)dEzQ)xL3M0%|i4)D350Radz`w88`s3P}4|N14Fd1b*OY8MrDH`Tm7 z^<3ObwyBSA{(=z1-kVhw0A3#&R9n~p)y4;ynif4zq}q;bRdL8GMKBEls^F|3FgrFw zZ51##cgqHawiy88k=cgmbC^lIEx>3P1@P<)IzU@z%FK|-?RuUlLWhE8x~%p3?<3bJ z0T`i0P3);UpjM6mUHt4~FDD3~@{KeiUXS&lqvMY)2>p6} zcVXI0Q+Q1XfFAH!o6$~HWJLv_fFlkL4_i8IhZKw*)0sE^ko9SF7_y^?p+Po}w(Hf& zitUxH%tw=cMT(qoHB6A~Dr}x-0hR&49N=XrZUcxwDN=u!?{OJA#UqGk4xjpk%v@Gv z9+bd-{vaK)+K2FedV0v^2ZBi{gG0Elhl#ve z%8+@(v{!dml4g0yeu=ik12{?!wIURzyy z`Q+$@Tl+7aTzq|f<)yn9puD!Y^w#3=y~WW-#|O8Lxs_fVp58uxdVF+aF|`26wq#PtV%@Q1(md%yn& zzyF8-{@?%mKlp<`;7;aW|LcGKM}PE3U;XM=i4g~)gI5uxh<=A_ixq6ak>n zh0SLVx$amC(WpL4mfc;9b6eIHM7oG;eZ(yc{zOUY zd?BhSF45$PGX&!*8DYAFNpEK+LYbZ&KVgprg}MXe>qoQKxZdGqo37Hj6i-Kz>yKNM zp@|299n*A`N@8VZmy3|{s4Axps`hM(0j+pHE+={NAx-X&dJ0z2hYANqbp}~Cu(SgzyPx^ z{^F1qrm_JlO}fxPmkde@Gk_t84GLRyOII?pORM*>-nIZeYSc3$!RPH%D6xqGpsP0w z?V`N+%!5>Uifj@=LNCGa!4L<)ttE!@Um3Sat39I<>rPN9;5ABHBva%G+bu3{XdnR* z4MT8%=Ft(~J0#`PJi;cWNiG7w&oEsybVwvK6)x8p)h0IOYEv6{d=QG$0(8}!?9JU$ zDh1e|b~B(nMQCTX0$u2Z;$^4^0Hug(*;2A!k-9`FK#qztwMp94S}Ixsp!(6Zj}|!^bF&Pd82&ip?n%$rf~#Pd&adLbhzP3gC%O8QQ9I-U)LFi0FVZwFQ`#{SCqx z!=0AS5XK3*UgNWO1n61;`RO$uPTV5iC|I-8oaF*v(VLWPj&)cl&rR^u4X+-YGw)EDMym`7PZn3`7dv^@fZ{hySBE3|D}1d~(eB{(%P` z;Jo|bgAa0K&u`6MZ#V!8h>2G$S6l6-7ve}#=HDpFUb#c2anGS{k2hU z@blg`9aaJ2DF5LPfB52yFWz_GefYrP`*(ilcYf=)e(QIC_jmu*zxr3_&!4Y#jAHuo z<;$Ex?%us?EcI~O78%8KjBcGfcMgR1i(mZW!w*0F*kg}z--3Qxx=%du#OFTuxl5NW zA!QUU__H;i8a};p-u?Icd#lxp9My z3%=3eBb8JHQp7?_)eN0xY>7gAAR#$F48V!DQESfOr<=SvfwTZaGY?RD5TuPLhj{dZ z8Z4tT0viThQj?%elV;@AnB^BTj4LXpP-o_rP&xli8eozLWpJxs6971DjH0%J(7d3a z)2S1n)0Q6qMSY$ohG~@L6xc3o?mvjog_h}X2yxmP(qKF_KtF8V z`8w^9Ck)=zg8;D6Wqk5^K7vRoXk&`KI8gB!0ZNAloW)FAyaVU~u?zi7NZ*RUQv_%@ zKu4p%(JEwgrW66nneF1te<e z!W~!@=Hbw;K?ZV_7Bq6y54XQ{0`+fyY-a@RD64M1p10lv)(g;PO zxULNxhWexKI+juB7=<#^LEvY_R<;0JyC8&z!!tvUSkUqj&8V!lNn|J~CD%5AE>P37 z0Nt6b^sq?uav20D=bU6V9j3ga>!pXkvNdFh<1225|EOii3H7%NEITK_8zGG97@UAu zpdz#tXQ(&;UZkKCGcbk~SQDC)3J%oijv7I-GbmYn;Bn8Z+P*78=hYY*w!T4qU{yb~xN`?b#ZZd-2Ne#@u6}kcB0B@qix`TV>nJt!-8d zyYR{b=hgzPe#F#+x6GDc>YH6#2lQ=t)fge>vbw`bNH<-P#NdG&ne}pY@%)8nzWNO3 z)Q>*;Xt`YawnkU-&Q9kz`i34Dj*pLV3;n(L!AP~yMUYY0Xqj_{kc3VG@EZj%93CFz zVYVrK{q@)1c;ij%e)F5({PLH-+*2~j?;an&`R1EUa9rqtV~bHV+_-V$t+(DnB*i13 zpV3@hP7e?F@4fdLg7EbFe;5U-0p}Uw-k@sn&P~r_I9EZ+dd&FY(ZPccJpkn=Kl#zy zZ@yN7+8KedZh(|buaQ7UBvR%!S#=j{wrogU9x-7Iem$`^eeVJdRa;#MPO37U zJ3E$KyQ%yr8%orZcX)vCj;fpSiF4d?(1iffi0I&=3Dl^95DR6dtrCZ(*{Noxt#pQ+ zjvCtC9We)B0HSXkR***=B3%GM?>N!hqkJrazz+rfAq$SoWKmL_ffFSlL`wxM2t`dg zS?lSkhXx}2PWp72Y{oO%$&wd0NlbH}uvAj7fJx9&EHbwuII-oo0xOv?XOZfWC!sO6 z&x~Z0Appc|q+2Q72|&S|3>j@(Ra%_@Vn@Me4Ioo@1XUuV<&4m$q(BPg1j?|9w<|vJ zLg58U(+hy3!K|1NDKN0skc(`XhFktrVMNfQ^G=EvVhvO?6#yA2m}%K$a?2)zs!-td z>r=_8LO_Now-_b)bPF9FOkwkX=y_EN05O7#Ts3*kBXJrUX$cW?=mDWE;!rrlA~UUs#XZzUr3h^0Y&?$g zpC*TR)Xn_pffEyhP0|n#1G<=WP90-@GvUKq5O?WFC627>nu@C$_zzOvIZN|Db%Lct7Gc!1?oEy_r`i#t7032CMF3JJAw0?GD@&q=t#{f6^mJOOs z;xsidI(P;uR=a{~!_%3$8~`|@APkpYTlhp597+Qm^gz3FXnGQ`mi&;qagdYuJMX*$0yA@uAGK)A>YGc1X-0@W z!<3@LGv(=Wv0QkAF|o0PIko~ilS?)3z5m{OKmF-Xxjo38fWMrIhDRQG>o5&!owzaAIt-nAkKgzgzj5x|(Yx=y`!|2{H^2PlF9{RJ zuyu6q=+>><-}#Q;slQm9eCu1kc6h|i%!$I5^(c=hx3HL(qk}_N(fGr(Oz5alO`9~o z3=!o~kU|=n6i{;K&YfGg{GJ@>Ah<*Zpf`IJA-8qF>Cg=d*sf=0>Oa5E*kg315Jw)7 z%y(SPqNrC@9zE6u9SG6y>VTZt$QfeVXbSPi1u)?wt;Jmh-tar)-5VhSLshazgRNK@ zvNJv@8ExqKJe5*z97Yj`QI=Mn5L?x)BBWsKE4gJK@ur9MkXC1 zw;)?HlPm#P)G>dZBfDl~X&Fk5$xN3Ppu3+tOLWSxzt51jRtZ^V70ApeEdf^wM|q(G z9XBvaD>+?x7%JyqL3Jz%Srtx zc8&N0VRgD%=1(zzBgOhEC$e61S4-xzr@%nxcgQ9Ja9?I%AP)&K!X=x9idtrzBqPXq z4pl0F4SIiRr{*}5YankF(~3}P*-{E+D@>uA59q)gBW9X#@G@+&fwwJ`PFlb-UQYxN zpjKwEG`y4H=AWn;8WU7O@FGBTW{Nj7XWdMA0O`7l&wzibb@I7_?KYy~0Q9?e?=BY$ zrhAiECE(2l2&0V!gi=^?*X0Ly$0$POx6A(!Cs`y$Xmd88aGaZ!7vu}nI%gF|>5kNK zRz%J4u|`~Ro*M!s!bl5_a@x`XHH>8?l*cxibYl5nd+*-b zIoUo3H&=7-FHV_1>YinZ1=b8_%3YQVr+uqyy?E%{oyX6=b>Z|aVnKwpo;jiCX&zUU zpd78XI&!+)y0ALEceTFf)W`p^lemDSV{&^$v)#Y*dgIoud#_z1p+>p0vp7C}@x>Q^ z`s}mI)$+?<{t5@^ew>Z{t9d0t!~ETQG=K2^`+xuUe~)_{_o?77e(6gW{6O;C%ms58im=4X(#GZ{7Ux zgAcj)_{A@N@yaW&Jn_U6xX8Ku{P}b5zyHDY>(}3Y`z;RQ@4fflTW`G$!_R*9vv=Qp z?}^WU{@T6wvW>uuMdIRWhc@DiQ)Fy;>C&YO7cPGIpxUHg6wYSHJY7FX0IbmKB9UQfgV|`t+UeeCNOX zm%k8^l!D;qn0B!F{X zzT5`)P=X-0PTHGlHM)D7Ap;aSyGeG^3PHdRwC7U61!bMNnS_YZ=EUQS(!06Cpww%_o=tDeC2F$8-ue;=@ zqe3;%!bi6)zzqrXQaVa-Ce~!?4>rmP;^=gRfEj>@AIbpblT!*Ko0_)v5IGK8gsG-kLl|v7+f@N;E3O6ZqfnVtcg@&wpl0E$7XT%-`g7GbvlsYo< zXF3R>=OIX8ON=4bZK*Y4P9`d9xoAmEmMRMy`V|=#Sgpf>P8<-n`Ycjnb(RusRi`W~ zccvf)PRhXDHOP;Ano4i19RPC~i5GL(7?yPKIp@$QS11`AQh_8Y{s3iYm$Af0ZCFJX zKm>qIwPgmxSn^~(50a`uf2P?X3c@L+pj7tBnGLWLH)tydtr0@BpCNtAFe33V6XaG6 zT6SBAI);@nJIFjt9-@Y{gs9NGIH)dGZSv`3ZjmUC5fx@Tcixf63b*j=gkcku+DH_5 z^G~<#fwLpikI#Bw+fJZ@#YI(=jySqBd#*JcdR_iqMu`w)zi+A-aI08^P)|2l`F-z`#ojwNc8<3XJooV*elAp=A?Xti zmeK2taKqVMEIxOB`Q*j-4!7Q6$w2cM;>~xq1T64BSHWZjfMb1fdSSVB|7v}e%ecA1 zLC>foM@Zxt;oY}3)~CnECojG9GKbDL-+Yq;>+{b&_tFb5a58@B<(H06PB<_A+OK_s zToNnS%X{y=_oI)lfAHZ4A7B6QjW^%m2>$%@&%g8TI~UJiI66H1=;M#CT)FzyuYQ&7 zW0}wAy!qxEw{P8k_~C~hc;FhY)+nA(6Pz19`skxqUwIv8zVL;oFI~KdJByPAdaho% za^uELPV+Cn^wM(}c<#mb-+TAVU;gsL4?WC%1?SiKWX~ia`0&FIpFel*y?5Vx>+QE* ze);8>UVizF*Iz$(?%cP&^{opRE@T>aE?>UF{Rzf7&=ct!Z_vE?-h1!&&)+`$;Da1d zJ(bA}P?-J_VUh;PU-=;eS1#Z4(;FscWxbj z?sHGxci(-mVV^*lr)(D1G$ibD4{+(?mHX~{pnsX`si&X5cF(mGr9N{rfc{RmfR-## z%<@B(Mh{iNF`7|I)Rhb)D*GBa&UBd$WG#Lr{P+w?BLX%Gm#p#$_A{Fwx;aM|W{V!4#ASkQ}C?G)Y zkcp{+qd3b@Kr{YM7I__P1;)EEvseJf0tli<-=@%j5+j{pvT_rS`9oD$taiW*r8wb+ z8E`CXjX9-_l&;c7y?SUn(X~}JC`HoZj7k8Q^9lnR^aMiL0&1@BbUGIq^%w?H>o`UJ zU0T6a4+nKK>B)(40Qzu;arcvv9~3E?jl!Ii6H)=|w2?I&+PS31DA&q^}09KMS88s%G(y)OqHO7j(eTp>h^-H)~QV2tX_{TkNy~ z2zqebumz%fQw?ac`e#Eb7@X0O^mj)~mbOoo4K1vb=BZWrjE4*d6Jc7aGeWsbH&V76 z%MyAg9o+x=R@0HdFYg#pM|p71waO9!*AUQ#bC^SvpbPYY;g~}4vh?p!(hnIi{4K)ml zP^-J%cl++bp^HjIvXN$FK!?8iGA#AT)KZ zy4VlUk$KlMX1A_@>x>ALB;9z>kmQHr!G3G&c<12tJBR=9&fe|qE1U&9=b(R`Z@Q0+ zIpT#&U+b2b9avKHk;gUJn`g{Pd)t< zr$%?oX&cqCt({k2eeGvI|7kz(0nx8of8xns{Nfj{zW&-hSMTM3OH#O$!tnj?f1eBS zm%sd#YuB#&k@E0!poy&c(Sa7zcomU{U!GRuy*y1q95Tv>R zaDn9bm+z?Z%woClFrL}39(dqH z9HclRATTgT=F^X6nOg!{F8mr6M&t9U$BY^RAc8Y3d%M2J$B7>rl@Nqca-}(pVtlpq z)Wsbj!FsS}6Upztq8~juJ#gFUwLis64mt0V;nnoZ05JGe-tcA4As~RObaC5f*vPRp zT29_>-#tFr#}bpcb-M7+7x=D2YyRB1!{v$DgJO!az3%6PjaS+00E+>&{CFqkhg@`n zxQGr1S|m*o@8Ai3}V${F43qqAq&`{jZPf{$BgQdnXt5kaKq6m(NdU;0O1rGAV^a^6Tz8H z6@>wpKp298LK7HmZAH8|@Twp$vr%BCG`ixht-O=L+GI;%Dq-wkOsE*S%=;X&zoCm8 zbC!zCwq`>h08(mcwm*%~&MBQZ#}EoIS`=Hv&rw)~fmu(HNGVHqgdbAI z&#F{a&35_4hEhhW1eg-5>^$W5k|`+%8XR?6Epk7hbLJjt$alVZF3p{}f#^Sq9nOVe zP8|r!B&SF+jzx{kD(f~D5rNM~_wj_yA5Nc}^wKQjifwVZ8vC%!xu|W-wVs!PhO%{N zZZ(-n7ejaE2n0SDI$E|(DcT~Xm#4~61p=8JyPI=4X|>{|0f()^*-vN8^* zR&O}b+?|SUrAlwxE&!t7q!~bjZXBzjk>qyaler9@06BP}(EJ07h5MV2j8nLtX~JJ6 zKJg9IZ2&xSKENX99j%3q0(21PYTR0iMut+T7SIR^oe(`xO;BQH>#S68J>sDt`0L zCl*_KXiu5pqK@HBE)}g6tU5{Hm_FP;xb25*?!wKg^S#2|ox_9tttBJP6vSuiW^3op z-CG+L?*KAAIN*+*PX zEw7UWF}Q9$W#*wmag|PM5;GtW-I)>*L(t(#51N`Gc20dXI~{Zg04Yy?^yNpFL3d)B zD1X(#{zzjO9b%ILNh#_Nme9{ZjUY%Q-B57D%E2NtSf6#s*_l6^3o~JQso3&w3=sR+ z*GMc*MvtEBF#IX7ImY360z}HhkCGrjocFW56bz>vC`d8N$&yK~D!&wk9caskC0+!k zIfI#3ZxZ%=I}ban^*GR@7JopjE`dc+iZ$O9sPU%$EZJ`h3nZrrXa zZYP{0@83PS92{|L=V6-JWpq0q|6sJSAmaN2>#e)T$E*~H=%?`f1WtZ+gp_k_V2@(R ziQ3sF>Mj3nppG(Y$r-jVancYFgc%bQAGZO%OLNMl1?QP5toP_oLWm1r(CpQYgE{_s zugGv*1u|;=8(H21|lPuLrxuN80BHXRuv5J6NMxdH%rNRpmwVYPP);l_1Oe?`N4@7yvi$BsS>Gj z?pvC6=(NobP;F&~UXdZ?TeYqs-^s~n>1CLm0SBon#+f^`0WgFIB5alfF2fcg&ZqEl zzlVm>s|o-?8$|HZ!Qq5R4bws_LyQU)jPhAray7%nWOK}eUQQrF5>OA8Bw%8qPU%&9 z6sn%x(7Vmy8*PVJbWBuq!8UT@1>0-L*d*)itPo`O7AW4lRk^I;2M7Qn#zyy3VaA8} zT>TxwC00JT%pOU!0<-%u`uo-d>)mxTGOwOV1HfAA^!3lz)Z(FhWi69@rWhnfoXvdR^1BxWHx<^~i z#yClxF+-=V27RUjBGb?y8ejy5%+cicq^g`HLcl&MMSCPwe}_0Qc$%-d%!dcC*o^fY z_7sWQnp1Q1he0S3C2Flp5arBOmAw~AyMRn#V85z=9SuFPi^vn0!;#Dnf>2nDjRJ*( zF?nG9M$>>8l!3OCYJ);M6M^{eDI5>_M67ho!N$C3AV(c^Ey*O;AU|OqK{vX=FW1I? zTN~aC7?!0{&gKNpGB>fnEWUZN*RxH4qi$irDGK0CRm{MUZ|IU=3|rq==08%b8aJ}C zAzL*tl2$_2#O}`C;lYCH_F&BBikRm|W>tQ1#QlXAO?#i^cVOrxP$%%)|MkbIcs~14jpkKH;2JEH?v~?KFYpXz0h9{k7j|Yizj8VR&}- z_Wc&v{_BJPn- zlZ=aGhx6_9-~=K#NLxUuW_8kqfwu3=lvp}# zU4@*MQNQTM1)mf`QG9k@U^A5(WCn5B4 zay3L@4GAT}N#=`#01Sm0yDnj@Rwk)(ox)Q=x{Zx)!z{f@+AUzWEm45rCoSUTiCNCkd*`{oF1xD z7@pX2sRm@ul!2CF&c?1uYp}HNfapVt4WvM~LJdmk5ZT=O5C`1Ir=b`Uu^;!aU^h?~ z5NWq=l#+la4b*-dRJ!u7xP@>NAk+#Cl>$lR)(B$A0gc07PP_nM?r`rv;yh z0$4)sP=hMS)8Ja7VrRY;5GkdbEmuOXh0wzzJ3ASp*+m)gVmvJtMyr8C2eK?jh=i=N zZD*Di2D*jW98Tj=DH$0E3NZ+ti8dqBW7_C2f3V-=2mD0W9-hK5&A8Mcw9Obub24{l zX6T!E<)L&-0XEe_Y!}~v(xKE<0KDqm?ah^UJ1}|S^HHw7Tyu#fy%YvgfYzrIEjYGj zAJB}6un#LhCd+W3lt+c_mLpI)4ArlHQywyIk2t0u3K;h^3In;RC-$cq$3qt^YsyE% zXZiu<(?v=*Fz2(3u}1;mnhaY3S3AQ0F61%*6f4_o%&oltZw&^Ch|U0I#$rY><_R8G zxO{rdP9Wu(frylBt|o?33e$QBz|_4%lSJoYh?fy#l+BAS49h$^l@gG_fQJEGgsqMO zuz|-gwLsi^+j~?ttT5r9S}^7D1S>27bZOZP5xSPwzO(Nau*F~6HAIeup6|E)u?}4t z5z|#>0C~C!=pIF^V10`sXQDU|wchv4M8C9^Sxry?f~dts&*i827Gb?KAq)Z4038RS zL{CbmRkJ>j3YF`pDKIkyT-J=c;V4s}kBR|QA(fmAg=Qar81kJ{v(cZiKr=P4(azmM z>uJ_WiJ%0E`c=f}I**)N#Q5Qx3^0!;F_S_l0SNA-=!=JmDsP5F)-FXq+s!NpmZtuT z!yE?3wVSNw9>lFh1KlDsP2m)h!cKIg^0DJ;t2eEFGGD2%mDv_X!|+#5@!pG5a$qV@ z4g>SmaH^0kBI+}*NgYQ|I6-I~4}hQ$z4~BW=5PY+&Uqt1M#?j$quSzCozy6!IH`3b z;@YWi;nBB@HXKWu?rK>EGuEpVfGSwf53%2bQ;U&ex=-BStQ~%~xV=o>I}4FD{A9_) zJv6`mA+qBDAJ{~YqMeatfBkfhG>NYAvcc$Z9+Q{eAsog&cxC0&E6b5?XI3o0D6(*> zFSx{{A+*)jdgZ+pQJDMfh2n;`T5;d8V2d~)Fw&7_g*Y6W7Qv+!*JhB_lS>fX{dHc0{Hbjor$2dNaQ+7`f} z7bzw4Lp|HA!lYR8+I zfEaHy6gpb#WdKS9HhE|XsBS`Yz*T;_>+@=_L3oA$D!8Wl&* zqZk~SO>9J`Fr!%WLhYaHl!vN~l!4IJXPud#U9v|TpOtEW;FSUp#OHnX@bE){M>Zy% z8DIO&`qjV?2oMRO6qsp?qgD=JBe!Lk0nUI3Iv7PtlR?IqY)V0-TZ8hKG9I=WwMwVjJWelO$Z7CL!%oT^?#X76K4CEfV`0$6Wy&6tX7}W|&Bn`(#T*%fm zt)o*ip|mZaVryrYBb|7l%=I%nlFl`62%^H&ZS0dk6%LWh(Wc&<>X9|t#wLNE;rS#<_gAw zUX`hMi9mHC=aZ>;0tI?G8IRK=8vu0p;R&028c-3v@U+wa0NyPQOrFQiGv(zNq`T)EfYL$A{sFXisANba%(!r%ZP6)_t4h=ZrW3sFbYTOeAcy`@08VoUp^g^=7;= z$NIF*T*6ir+@{7|Lv;c?M$l#38=JB3-1?~`J#n?NEXg2ecTS2-x}V_GN~#nfO#ftCYCCS% zL+8kBxf^BMF@Zy*vSBk)oLesM5>SE?GBab8_$gurIA3wR)LXANWkM}=>-OUN3ckha z>{zwN@J5kM!!T;)K0&_=8XaRQ>VzZ@ksgYK-kg&5yuhPmnH&Ae3`3Y3lOP@+_r zZGluo$_7u74p~32P1iQs4$(3MMSpNJjxEFaY52 z&}yqO1ZIR$^O;(zV|b2W{r7GsoR}7gMY`ZVY1-PQ_$`WU<|12IM(a<&!w(SC44suz zPXcfPFqBA}9Zez*mD^D#(!W`>zqbz`L=@s=&CLM42ue~uR&^edI$%A(uZU7kqu*JN z4xE=8J9)h2r&l=$x;O*qg&&5K#bV@(%OY*k5rbnTjxPLk*#@%{0@cH)j`;XL$za9h zJ#ai+#mRBe2@o^c#0uih<5blJnLPmIa*xB=Q9M4*natHZnv$!?1{wOJX26+VfH9X= z5<|?3e6J$(s-qQ=EB6zAwVzvnxt;(n-Ov+2O=%f{%iWT5!@=&M2lSji4Ur9ZoAY^h z&)pRl@_kO^9>d)l2y3}mAD^7xKexYoNEswJ9YPu}-KVNYPSC1d10r8qPE55S&d;agetE_zF}8Ag|1m z^$l_I%`1IX(U#s7?(=r6WJ9E?h~AgX4_MbpmD7T^OUukgcQ5Knht0EO`E%fKhEc|f z$D%2UQ83zBRq<*Fu7@Dl3@2>Nrz2s9X81uo$gc8v9vJE*CfIAcHNc5o|?RDvWY_RudT?j57~F58q(eV54P#C~#viLj)mjNu3BQrOX|LQXYr^ z#8SY?Yn5a~OS~{@ZkiqMa$|jb-o`706+QVg!erH>%PqrSDZpq^>%6Lf&?GaK_G=FFmSdCyn_=}2tcWl3U)er4+bbxm=W)4%jX7NYKf6sY*&6(+7`9iwxZ;a}**p452yG zWTL`lfY6)XcH5fI0EJB#WF9RYWR<6YWu`@K^^_m5_L9kV!NW;2<{4siI#ge)hi-vr z**QHX#BP`e0)SLGBE(f328QYh-2mf+4Bd*VU`NXgqPmG*96%vZ&S(&35r)(oZ)bC~ zP_*GrMQ>;m3lxJgm~(jr*RhpP6Vb&eN@VbQ4kwIbIwE~$sG4cVwwJ&e9paw`C@_@1 zsi9Ky5Sav@tD+8<0kAX41|5?^3s3EqSz@*x#iFqM0Bk)mK(7dZR1u&e0JwWYh7boS zfL9QtF!KXtzzh@yz+t75I|?{D$%0fC9G#Ot$U;A3KxdQ*P@sb(2T~X{Ut#by4gj-4 z_E{OS!$cgS8JM?CAV;41Hg*62aSa62)3m!qbKaYV^6?LTV$DOX&lNo6dkXO|w6UgO zr>!cP10Wp*Z_VQ?c!@@o<-Zsw#*0kDvL)XehN?g|u)r zMTOFfD-}N>)(S0MvWjB|xJFS$1Q=?`028sH1ekHy#N!w^+3$Kr8&D+51_LiO8fkH$ z`Kvj0{|c6p(d3F%P(J1@XF|YEKpyfyFL!`gExqE}naUm$>~Rd$9Y*1Y7)rNFp%h0q zDhGg^3!R{|6Tr-`{(5_Fwc6V{J@h6G6Go@Q0Dk!-&K=pTI}`ZR@VyZ- zwKFGe!UE`yDrr7}VvQYqW+rOt2ZTJ(M%5?+x=nJebTkYy10^yVexa!@z2H!m8HWxI z_uc4$-X_9;$fiH@^&3syt>Ujschh8P30ER0;mS4ok2vnAVCC2&#bCA^ynPjf_clGRrV7h zzom+#PVVlx(M-E)*CR<(53+QbofL5L+0a>r{@yde=)>K+cQ64`ugrWNtS(n4W@vj0 z2D)Z`&*Y#kn>D-~bNx-2#zM@fM+MWo?`F^&Ned1JYN1i#0jYq9IoyVVqwr~DxpbL(O5784W7_!Vr?Z#7D#Q~&ZU(iXkd8v|zLN+cL z9O8ZqA^5>j46(PGD2Zdc`Mvr2LpN+uRHUHZY=C%$b`2y3lqea1hOcFYLH;BLt?|K*?g)HN>$MXnJKiY zPT<5yw+>H6K>@Q0s1TBuDAxsQV1sTPS(pf@6rSO&%3<{0g}H+>M&YlO#IO4dz!_~? zE#LwgCOsIViFpcX@v)9JQjjD2Ju$O{{&E)JnI8wvqlaAPJGz)LJ%V$%h2@DHWtr=t+f zUQEoKN(LV;cR8Rk$NLTe2v$QW6iO}`KK6x;p_$W_6=>9>ja?uiYN{eC&7?!5o58aZ z1*)eT&Cr`A3|kpMWN=I#yoju9<#FDVYbf8^+ZIACiO9l|6( zj`pDKF6}7BV553jHi*C}v$pAt&}uQ71vO47Y7#&ag?uQ00;)4oMnwF_gP9)yS0u`3 z7#S=K)nW4XVr0skDVBNhj4@qTY~#36nGCW9Qz?wQ+a)SS2>=&&{Y_Y(neDAlc2-L+ zbh(Y;px_5Ya1deUifnOVbm(;JXm{tFU#WN3_rSIfR=a!4t?dQ3*M0_PA7rt!yV%}c zY(d}S;BdUXUhM3xw$HD(kJj7!_>iTmI|QX$R)O^t|AlGqGJ+7sOt6AN!6QfgpN0YG z{LDN=&kvl@UrxtB01(PCqf*A?rDEzvCQL}%Hg&W*m+!S4A^3@iL99C5v9MD5 z(1F>3;&5`oh$<|qvu~e;7eSG5cd^m^$iM0WQAtA6h;9sTBOvX2ny8+Lw%U& z<^%=R1Kx{Ke(1rT69@eq2O;4yGlm2>P`6R28}T0^2+;W|fR`UYj}B0VTm~YDPS2N9 z2ryRzw=8Tkp^r>*zeyX4GhR+KP|^7onz0K2<-tALIN*EJ9Ss|i?s4OErix>kr+HI# zaOnBZPa#b}B$Y*po@d8z)F4c_5d}~OA3x1kiV!KY<0G%hy(|PF_HikB-#Cr{+&a`K zD0HA*{H4i>&<(LflQ88LVswnTFiY_uu0hV!#K>y3+$VB(aKHcGg@a50J*!;$Ge^Vm z4uNp^vp?k-X5x)Vo;;N=PzFmV;3#eC5G9D9M0_J~`P3-TrLCUghH9`f(K-bi3`Hbv zfDVx2eu`j%O=fhKr`ExV2Z@>{F(tyDq4C@iw+Bf*s+wa*PxVib^aa`nsk!1Xv^!G* zpE~=trAs@z+O~cIWuDte!D&5!gk{jF=~ShOf`~$p;%t4bStZE~IVVfI+%{`8I)?x7 z*AtYM(ovCYj|HN)G%vR5ED=Bh_(;X469v+R z2`~aBo3hRlM>!cnwmkNs$AMbmavO~_{*!q&)w5|j<>Ge-nw?{bo|^sz4v(MzB^m@-Cf^zcXj{C`hmsi zL#I0rthX+Bvd0ySllZeEX-@#IZ(WV2_RPG+L>!DJiDwm-C}pDtvZMj8{oJsC!5IeQ zuPjnpn(|o+EqK`g6Be8yreB}Tm4d7+tnfPPfwMS(9$F?V`;*SvArOEepxulIq zfDWdfnEDgSnOeFCmIBgx3w`LPTbF2ovSqy>>PdwWbkK^ptK*L=j*}isj~@oSTt}c5 z<8$1Yp2(J7B2eN?nUDI+OX=XK1nJZ(GeKpi;`io_wj!C^DWB7W0Mt!{@h}3$Fk9o} zZM6W_t7^^(c-umi(3TBk#?S0d5QzaDtxoWU7B0aekE=5Y0nJR49yAIkmr&IVlunD< zR`rH{KR6eE1tNwRA1vCY5g-kYrht<_044CNO15a&<33-UrOzp|C4n6h<)u(_ov&oW z&ne|SAAXW%Jv8AN?Y6?}=mMPXa(#?#ZWIZlu|xOs_DDt#9P(5SLh$$>5+bEk?L3Jy zv2B1N@FHsr0ftB^1C%^1-ZmCA3?(+BV4yUgRX9zDU52W#Y;q^JvokHV6IVu^@gaLcyi_s?b(o* zD&~vv3}y4t#W({nGJpd*EYX(n;e(5sV>g;TGO0vE%w7CMj{o^hy**V=cV9u9D2_~i z=lg2y$CATtjR2};IS{HGb zG(*)_I?jrzFAw8oYrwUK-IfSa&=aqM=MQ%-A8p@%ap%Dcrw?D=e(aw8`wovEK7V@u z`Q?Kb*AJdsK6+{A!E>vJ&TTz*Y4^eN-U%G}2GGUR)B6@%4;`-`JUM;v?&$+d4)N=U zILFg2w;niI-?!d=V6nPywSM6A^xAss==3x-q1St~{knZzN^Vmtx@>lgDFw=;6AGiS zH34wY8WA($^L|%{OUKYQ=3W@g#epP$KBib(h0Nkea0uP0+0!|u45EcUeB*${@*uI{ z9VKK}r?*)Nli_SA450+1dWzI~f)J3fAgsyA!I=e_>aMG*cbzx_)zR|I7YSq&h#DYJ za%z@7Y(b%$sSgL#aI@~Re(W(?x`fULD=JzV79?f@M27-$$0!RTe1k%1%IRwHibxLJ z{c{h2&zS|uKB3VHs<)T^F#*rkn0BmlL`F}y_jYzyz5fUiAvc6vD%eWEb;Wuf4C#tv zh&KBI8Dm|eX&i_nrGXTW7%{O@gHv7UgC~nD#>Mg^1v$!Z&+kR;-IMhL1y6bgTIZYN z30b;NUY#R$JZH|dkR6BCA9~xntJ8JAuvJdPb2o*!&V~phA<#?l1LJ%K{Qv3tmnO@S z)F9){4FJ zR0HzPj^p9J{1G0pW5+({WEOl&y*;Gms)*orfHUMRwg#`Tb-*V|g#*N_{EC@K^|d5t((WlyHCoH*I0Uq^ z==vrDp%Qki|W@~?+Dk$;rE<&gnwmN%{; z^A1buB%mqV1r?Vdb#i|CR%vJ}EFbnWJ5hSh>l>vGddApIuU^j?qJu5L?@WNtC^G+% zcWCyCOB3Jok%g3yQ(Q9=a7$;Y&%YKK2OKZ>M=+Y7slsGsb$u35V31$|l%HhqyQ>92 zcXus%jJO$Gk|gl;e5SSL8dGrUGd|!v`$QMMt}=^m6Y{Tc@=>(iFv}i!xN9Ks!&^^1 zt3Uzs?*Eey;UYfr@s%AdeptpXqL>{3CKg^uQ}${VAtT*}xB=#!_^I*}M}ElT$7}B6 z-Tk7Y;x-=N6R!Vc5@mwwTS)Pq5a}9ZL*$KLEjho}Wp0*ZSU_)`9ivThA@Eb-l5?B} zo%CvzyJHqtirKhL>?$d4;RdG6kb*V%`pb_xY*J({$9dirm&dIJ48=?Nya<_*agvtEJ>zl{6hR-p>28LS{x5j)p z-l=s{1;NGbv^|z=R#0ZDbsI@$PS)+1(+?zf(tg=IN#{!=NgF7#$U296Bso{j$N$rR^WW4U^vlWq|NFoFZ~ygw{a^3TNT0lA&?n%y zmen`H{19rGR{fOCJ3!w4z!t+8xjVpX0vh>%29 zgu2P3t|a@Ge_Sbbd&$4Hn_qUMk8Q?r)2S%v>sLf`>4W~T6LqNoDo^4gHP4aBG6q980Ym@>!)={q>h@; zn5s`+L@^&{&968Wr^_2Ame;XHt*ZRMLAGws$eZMeg)S!Hu(Q*jAs|)%>=H@5 zWnggiP(W5zwOMAU>u{)e4xm?DfqqC5#ScvM@3;2B!dw--LR216eQL=Oaj%=GOs*D8 z;dAwcnm6umJkY?mTo=O?I`X#C2w#d>k+X$-7rLuIj2*Lf-H>sm#AJy3b&>f{Q zuOup6Zxj#hYbk+ry6}!LPTG}P-b;#?+)${CKVG}_;S)V~rO2j?eBN~Zvb%E&;aT$(K^TY}#v|L=nbJC1f5ZyT&Q(&v928Akd2<5h~Mikg+OB(hi{1CW4=2 zzk6)mdP(sg;?6L$knT2^yv8m^q!`}F5!KsOgoG%O=K>`y{U84i?>Dz~o-)wE4`)ju9*<(v`O`=kDfXH&m(7GKo zw~)*UB@2xwzcPQvpusTLrss-Et)8CpCk0Vv_x)ZN0=t=u_+LxNpM^0xU!$Zu{p(A{ z+}6XRlSA_ij1eE)PbW7+U`_=vw*!ao9d2thX?H=2L6wWa==NM*w+uGhGaoG?>xO$D zV*{O4xW%iPDtkkTBxS0}pYB7%`}R2o5zbtjJLn}R=}{?1)B%F@Qlz%d<1=~ANk>$A z+{o4*53BRJRrI8ESC1L5$^uJRuj|@9`-K)3QRaDPE`kiFv&0vyE^G6c*6a zb#B(37U^n9rpjHU3l(4(3es6244R2HN&NijzA`Of#b>YxGuwNWPDp|wtUR`ux3~R~ zr3`RRFq2Ox7JTwBxdd?y9L1n))paZj2>VK*v)EM(TnsYQ)47Y~KNg@QeR+N@4 zqH{x4mlcTBo-sh;i-}IbvkFCVs79Z@etGKW8)v#(fm8E4`tXy-$yE&)63m^yVA^>b z^&>2!v6$FC?i-a<-h} zf3X%6pxyN_iO{m;gQFu2O#Ypnvk{#FQfVzrR`7(cz35_cuIqd-=OW&huOJOq;(juw z9EDQMWfiMyf2eJ%ajgo%wWvit__fonI|-WY-JMTe;PIGsQ6ZUb&KXXKHleG=FcS`= zOFq@zT`R;sDy)8++gW?Mr)8p~6gd>6=I-885pAcu6DZxoJo}zm&9=a6HeVjI6;CAr zVf>`ZrEc$860Q3Cpzc-@Te0zc@o98F*=XDc6vISPU-+%j^ElQWe+yt;2ZxZyH3Cu-AVS4iIkxs?t zBK3)T&>U$t#`IoZoX$YvE-z=1pR4II&(9Wi{}J?5pL{0c*XBlYvZ_SF6>jh4jj$P} zVjJd?fo=QlYT%r6l1NnOHW>gB;tOg18PoAFN=B|Do8jlDuQp~oQ!5;#+nIEm+x9EW zahg(}X>CRvrugagbczr1ArmO>Ckbk3&aUqQ{D}^3BqYm5%}`Ixl4T#^+w0TEpU+u!IdbPq3YJLcNb7>w^5+uM?>b5%nelD`IcmAMdF^Af z4Olw)myDwA!&25HUmqMyZ9w^v#}+c59USwsZ-#Q^yw<@P!j*XLa9)N?_T4VEx*gHE zmdZ|iD1-0)e$u(a=xzyCJGs;0nHbu_V$}-VZ8Tc20#2&IU0Sb{xcSja_2x(8>)~{# z)F}B9p4P&|i;hT6J@NtfuJ@k%xZ-RnNhY#fFfL;EW~vn}l0@e+RHG1i3|j|`?f_5E=K=$n*MVn5F0W

=Ppb%$kjR?CF-GUVD3In#O5>gFHr$sy|GDdKGN zr!br0vRycRHPVgreWJ7M7yae+TjsFNndFN-Me;l_CP%Q=!p{$n^qT@_Ur!O+K>H&n z2RjCDultkPq2+)~6aFSD;f(b3I~FaZHnZP%c{d7q4?s(zrP59kK#?2fBsDl8z#fr% zE2!tTfHAa?ulXgsJWG&IC80i<^mFazW)xZkARKLiX7WSxUpDhq+Yq5vh}C?fh9OyE zxr3Dty3U6eSD1kb0p@=aA%Z{JbD$(dU_&ARs#{AwleDou55s>V$=^+tvJ&a> zRxFuGIX*{~gQwl{S!ms65)4NDmY9~HPSUN9`z?l3CDwJ7?$$pbMpCSH_0zT+4;SV= z;u7EqFP)9i5_9)*Td7;%AcsK!W9lUN#c7MCjpX6X9p5do_Nm`O6k>*&3b1 zgmXdb&;Q-tS>ZX1fAX_V0{9adM&@*Dr!?F6u>thMJ>-g)e$Tk)`xU`uM69>cwsvw| z$D#a-s4&Apocll0Ydy#*;KjXWA39^q$Hl$fcGd_@#sDPRc)QlB+QZE?IiY;^2bTs8 z1d~di1ZJL~-J{%yF`fka?4D#c%V080fHtXnlyZ&-moHeeOT~gHO$dO*as;O8O3t7P zKd@oYvO?syC?IFO)|OFC^HXKCGg;TN%VD+NbywIpC>6#DXK|x7Q%F_^_N%uUrsxH0 zNAXo;n6{I{GuRv@bdy;=7cfzZ%#KPTw2dkst2p~+IRwNOrsZn_=UVQ^xh2WO*ROPH zJ%ZpR?pDDhb`p)ccfnN$V=VOd6>z0kI;n@QYEmv%HrYi{o{TzYvsbhH>BH;ik8h6T zY4ay6U&82HH@%bPrfLd5=`mj&b>H?#Bh2!d|ymdgQ39?RbdMBm|J+@Ii$sq zSP#5n`n(rcHB8(sQ(f{gi1X$dC;J!)GoK?og2eNqT|N_PJMCEjZMQ+>>St+ENq4lT z_d}u0RQuuYI^6J)`vF)Jwr#M?JKIYCd=8xy+6@^@duOE+rd@*=L#&0*pByPqk{zVn zMo7y^)5#TuI;d2L#k%ps@R~|Ap&^o)HEMaTst7a6#d(!F_@6&sUcU7<|LV%^Vo4TB zse}jPDqdQ7?Ug{RQmBr7Zt+K(!sf{kO^#MHL;_#N&@v+38Se2WQ}N-$Z(o0Bl>Jo& zveh%m-EkfkW&USt`I<7P)%fq8lBp!r7T|x@v@g!7_=hisVUou^eW%XHxklx<;fDlx zvli7k52OMJoNS-wGw+mZEKbZm<^2Ad30?_4%s>Lpwa}VDXhq z5(p8>0W-PoS%;9!79y8l$Ly4mv%_Od9^UrJ8h4Sa9rJ8+pi;4<* zPGWa0Fxwih7AYX#R04po$;qe0Dhnp*$)vx^(i=xF>tv3YEXql%QxlU6Id1`AHgOm& zipjN`Egv**wC0g;#G)?aravLxTBy8Y%BY?t1_|Up8l_+JrHeL)l!oR+`#rImf z%EfAig!OsKvK2{)ZXp^To&J@o{~xDJ*O;`K@Kf6?m22OPpMBEkd?gQcXg`q7G5+g$*u@>F;uun*2Z zfN*TV6hu}Mp0{RrKm9Xb8VTKj#5O~?&LvvHIRU%I7RFnd$E0iOGeHT`({?_Lb7*+Upy9zjfBxn)eC_U+Af7FSZ_TyFg<9M5_4xqo`1m4}p%6)3&$FE3d)Pfsr|FVe76Fn{S^ zc(ifkFL>-QXRtNKrxX~lxBOwjFTZ^?uosSAzkmJmRfcartem8w8jS2XVu~fj21h^C zO7#fwa{lp}n*rNQ;hU^ezKb; z{QT8YkMMC)x^f6fp1)WvmQHq!xz!`L;v)T-t=T|q--N7SAhVLLRjNDY>3Ju}{{E|) zq@q86|Lv#(_G zjK+13T06e}a}sE^GZsb4e0?&5U3mFx_gQbM+PTaBxp=wlZlyS^<}LQud?7*zo@J65 zd3`f#a@|Z-d~HdbYng-=k3oO@@yAMP`-ac*=$5^b4tay?BpF(PlLHX)KfnTEl$ur- z#Yx`n3lqL_82p&JZK{cAZL6WfD4s0$A+-vZv%bZb$2P}7Vf=K9lSZb=LmyB*?P}@` zDQ7cd`Qe&%X~zK%FE8BIXXfK(q|`aeKqld#3xO&Zohw^+0F-rn?S~x>CdmMFUQ)nX z#db4g!No~D%UqOQGWjSnUpQ8Ot3~l!SPCn2bHR40^46si5;reyQ_&`kF6r2^TK+Np zxq=7ke=sB1{J>Z8VBoDRsZehNLu$hXV{K_(WkFpzqp*qWokwPiac)FGK{TbMrQWRwN`4` znpj;?rjk8gp^Bl|(EL9DWfp^_7v?O0*C)@|3{A~zDv8`=X@l-*fdsN1a!cCUK0@b> z#E`mdGogA?)kb_RKa5?!l3jFLYdKeG!eq7BFx}l=p1(ZHy$9u3@W6ATWdO{DP|0|c zgEpkL8Cc$}lh23O{JXQX8)@FP?Z%>%1!Rf5zUAPdGcl~zO_FeK<)g?pqE7TVM>X5{ zL{{=jVQZQRb=+U1yRlEJi7Mr;k$>mOEiahl-rvM< zz%W5GVIB`#El;2ArG!~&ozvfb`;CMD&;RTHJsA4sWdFbXFaOKG_?Q2ZnGvS$OEDt~ znREPeuF6G{S@XD-BL-oBJ7GbZ(_y;lXB{AheT?HIRt4~Iu9-T>7&3{yZAhIQEswnY zX}$LGJQCni97^EY_jSeU>|{!G^OSZTowEcRjzvN&lR8U=x;$jR=(H6O2Gwe|Th>YA z@}DE)$^xmStw|SR{YRADfyHjUt3xna65X|si+&Ty-413D*ZV0-n%gSRnhWMAll5xp zeE)t<;R}bhNsUK#&!`u|aV9=s7?<`0-HMAGHJKz{%J z?d#XylEud^q(4 z-Ks&0dPB-qWyH_VUp!QpXn;LoLgiuLJAJO(PamCeb7aiS)EP43$H6g zGBSy%UFPCu481rBH*oEQJs7$|6~-Y4rOA z379#*{nzB|PPECU^#{vnthD??^f4ja3=T%ZkpI8`{qOc=-R7B55V{FjgdR%W7Zbi~ zo}p_5Lgq~@6UvH7!=>GLwdy%MYErXdscqs zxeyGHgy#*1Jnkgvn3L7J16JPtTw*BW?fb+lcZQfc^}(? zqDtxdZ1efE`*eP#q-$V?C-lmTbd$qsl^ruMU6{q1`K*=(31Z98Lp~Ec`Lw`>eMgxe zM7wrX8UTK_TB>D&bcfN-(CdU~J{L}_gRu|^^Th%yfklt*cy>SX;e3+c%CVXB!B0h$ zDUYo;H3~BkazCm`IuZiQKRU6+VTvW!^p^jaB!e>iK381JV;C3uYB%Iv z7SoA)e*l}1LtQ)yGQ2scW!+lpW590GWf&XGNB5C4x~Wi1^hxr*rF&ZBy4j%iH_#Gy z*F~@ETn4#XJfJdmegPzB0(s}WD0gc_HxIA{r#qSuqeVkXgF_k{RPF}NtCFL=!P*J@ zbjDHy$kmhRH79KR$t~05*qVX${LqhNB5E~m=WX*1eq;Rn>B;tzczK48H;cUABdS@) zvH|hYO6&xmDdtl*x*pPMo;1i82!ZVaA)g68URu&!w)iVh$bC(_gkc7o2_iTA%iG)M zClfCg`CHGk$H{WTG>Z*6B~3M;uQ^RrFj+O+|M-9X=Y@xUIobcu|MUO+Km9-dA8epA zl-fI?aFI3LCl62ei&A|l(~zL+-3e)WL7h$0gi;zL?dAS}M@(GdWSrxzrVb=aA@SZX zAwP+=ll=@w!LW~qRG(^D6~oUvUc2eUroOqixdFst&O4Qvbt2TYnDxgkpEW$?URK6c zCxY&JNXzA)VHZmzc zeNQ*vg81?C<+;B==|sf&*RO<0Z&&pOix`l1Li64WS4qHm_q$CY6A7tEPyMnW6%VtL zIaq3yL16Qn{ynKYDL`N;(VLUKW4uGQhe}D2Zy-ECI(e#_A^iUP?>mCW(Y}Y>%Yo~J zxMC3^T`E>fW=LcrdQ-~@NGgIVOVa<5KZ~0WQ*uM?DDvID9QRXXSMC{_lBVFeRJCu= z@s>bk_!2r9bY9}&%NM6rLW5dO0)x5kk&{4ffRfaOd@KSXWbMxWn17b|+V3!vJL3wM zah7JziU(Ruh9zzfw?@qhMyC%L>XB6h228~>6`pXZBDwT6Tp4^4I_l8ouMG9PzUj;q)Pr^d!5=3A?;0s#(2dc;Ku*$O{>YO+KATA8 zH%Dl;{9{m}c52w_u8fFJbZZ$7(2XNI6;FKbF==HSQLoFK73Sn$S`9sJHBj(`v%)ME zyrZyJ$UV#qGXUpWLhbw~(WVMaE302!W#_T5#fZE`q-6rIRCW8^v>$4nSha#jymKpper{9y-#6!M;?qtgh?Y$Q+cUm{4l0R5cyyRARi+@7w{=*oL)nE zZ+l0WD$r}NV*)6NsD*h4=Uw@^4+-0W99sl4^MIk90s1EO9-cGjJaPru{24@(U9W>Dm)I!8kbvbu28T6?qL=i z8HtyED4GM_cGSE*6!4S#QqBsgQUWE7+9paXfYHgFDq`1f51d^!8E{6O5!#sf%f{Qq zv)D^Do;r57m~Y?m53%p+cs;k&erDCTM9B?#(Y0GqvmN0Lhhb7_F$Wt4Pcosd1Um3@ zm$@-F)3-fSG!lf-kLaG$O?o#LU8_W!awo<}{)>N+ zliK};O3!Kt%cX99p}Ise@A&3_!mrh(U&_(egb!pOwdor0c^gV!BB+PkE0Pz)Gd4`HB`Yz?FgoEN17q;=B*k z;)s$#wVM&~Z7#jA0w&}KAV*b(ojYz%R&V>#h;n5B_sV7t^JY2y$b+c|?$rUniUZBr zS_Oz2g*RE{5!v+h<7OBRJm`0Q#$gK7isw`p**OjH$vJY+1O&Q!{8b1X1CX~>7!f=U%W-b~Z={wqL6*D-?WZY(6jFEK(|68zV%Uvv4_HlF(*IS*?I z=Tm5~?=Kk(SK2@R_=7f9y=?%P3r`dsTh`AQ<$tjne!L%a;N$JO%RsC18GF~d+ZCRi&!l*VinO3_n5DEhOhlq3YhFQO5F?LZ~x&x z{KG%|LjW@D^OzOL8sJmESj9D;=+1v3vz z(o4>^rq}GHyTZFMMjn9V>l2;_5)8~^Vz*p7vaAj?@mRodsW*2awcwB-SRkb2THGo zRBx{@G0_d=8rSXTaV+Hcb#H#rk(YI|PP$wxI1T|`zrSRM?Of;%97IXP3AF?15Qe|z z;;0faJV|BR*~TJUN#2A#St0ywUR5O7XmTIOVkkIAx7hTHAM<^X&A&_029j@MkLK`Z zcD$=q+^n5s(XT+i2!rm0gEg&5ZccdU8aVi7vTDqTaE9EHOf}N2QGB$UYx#J1>tg6{ zT*Pg&n#1O>NT~^vx;U5Bz+ge-x4rM&dZ6wqo-53dT4aaKZMw81F>6Q3?XpUrjxA&^ zwsz|3PU#VBjbS**_!^KAyurb?D`E`oYE3FNWNn3Z8M*}UaVrU1wF|CRonQU7Ekm=*fI(f?PBSZ+oI$sIvjd)Ht>}Hjqt@&9P3se)CH2Fz3uugHW z*+WYkQRxnIGb8v;3gp4B1tXU#ramGE-ak-9Wk1A>XzL_-+Q(C}5{2tLsh1Sc&+c2a z|NVdW&*mBZ`aS!9^{@WLzxCP9B!de2Szcgx{s=|Nh%;nTBR^in!>U z6HYsMw%7ihgXLL2=Q2Z+pnC4AsUbYNU6~cgg&Ss0$N|Rh1h7IZSn6+`C#4js&ZG1{q_YkQ!hHMojX8ftfB{(aFHV|W zh;i48%5XmAt++^Z3D0Ohe0X`w2dRpXOigh=?s#?HV%UFHDNhCYmQnvMc#_PWCdg9n zy;^vAlzM%U)rT)%pRM6#A~X*i zZc@ZNN4Lki)L{g=P|1^@TI{Y@eL$K>%SOf^?KDmAMtCz6>2Ha}_m_6S5(ZX19Kj=40-pQ*tNW(B}} zose~+CA_<<_T+KiUnLv8{czdRWep&llf7aB^T6s(0FB>BZ{ZjcZL+$C2^yxI$;APl zHpEG9yGY#RbuEUipII@HMo|w0)p-r(PH|P`#11%LD&J*@gNi zya{E9ZWD}*6M?5DIiI6FaZaK|?}qZYRTFdG{qV3{Y4uor)%h^@t>QPH_@AebUIl4zg-XiC%6F}ZXaQH9+S?NN? zHdP6c@S{z(8^wd?X@mdp;s5V@_W$PJ{G0#V|MY)PRKA~|v!-@^+`&S88S0U|z2&zJ zb`#poKypGRYA&oCqgFlueyn$wD;^+1|L4Uy!oPd{Gs4MlP9GI1!wRx_&;Lq&pL8Y6B^hdBIDweDeNHD0T$y`4|a zeE2#siz)ubM_8>JzfT~on#zNpvQ3ZX0I&b~BK z1S93seb?ylX;o<&^z}oFBr4mIfgr;Wl@yP8l5GkkjHtGu|F; zKm75>-<|4uA*tl|FJJPV<{e+Ye93W^AO88=+rUO?^#hdu^!oPA>HO=L-}08ZXMo?H zjhMDe+afX0MF0HhdFMZmavUl$g0msE(U%PRM3ns(we{|F?YIlX~)V;Lxrb(s` z0l)*yWK}glLgpk=CB(n<_YdZuFm79x@rXRDJx@g`vU~=>&@vPP8Myjj2myeQ8=Y$$L!KwY2|wl^8IW0SZ7nP(ivs=_Zg~RW+2R54 z!yx8~P#PG~0<)q5u&-cT1O4C=sZ7dfH#HVkL|o1DcusD9EgIm85{XG4Czgox_A!oQ zlE6DTRaoOwwbb)|9xCsEh7Hzj+x;+44^HY`wl0AWecl1o`;{)izt!dRue$>;xK ziqCE3TAZ$~F`V#^bYoj0MDvUxw*!%{!q%io!3gyFz20P)ceM_F9`O54ipX(yWjhtV z;T(=+zU$?^<|mU6BE~1GgX38{$+}~NfF~HMv=I!ElA*xIqJGsuko>AOTI26HY%Ih+*dc z(DL$sdA68XUW*?%qqwxEL}|CcI$4?eWRW3*O@4VuSBqz;og83tH0Sa8K(obwx#O`~ zt!`MO@F`HZ_YDcfB)?__dn+erw8=q_pg!r@A(;!DE{+GZ075f)2f2}tme*68ezyJQ*m#=^M{V#Al{^c(TLCX~;{#o<-^;t^*P;Gu9 z`Wg?3`}|C9B|SgM>bI}YU+iV1+EG-wTZhHK;CBB;^H51{w`lko>Z%%EtE*7!-jV_4 ze6}EFa4>#!d#pb<3_=o9Pjb^#CJ&E60^K}jv$$}}Apn}BaBgD~s9euRU|}V2_Rc=2 zH-yz-Cpc?GH-9-aMYLk)kM!s6})XnsG zvI!`jA7OM^Sq3g4&}YY`-W16JdO5jevNL)KIRqy?0;dk+VZx&cPbPT|%G@u{6ESbm zeYDnG>A=(SKy78ksw+ei`5jPcVCy*%n3d+|DB7G2l9EA zaPa10bpihS~p#$$t2wduX8BF zwD}l41Vz$FT|&c*vWmLG*=8lMB`wo${pI;H3uzfPP_8UPkBRBfNU1+Dj%L~; zdxY!jPBoN>w8^Z_gXn1TtHEbs1v9FjASmWB(pW4{W1&d|Y`hh4FX@06rL=B|j2r&< z?cMyJtgiie1Z0gRQVlZfVDj}v!Fx|i=%}kZP8&xZ=47@Qw#Ro+d(Bva?yxWQ@n;n6 z9hwuMWf+5PY3ii8!_PHzZAeFneEz{ z7}RTb!U{dJ?#M86fbIE|q1!gPnA66)VtGcT62w+OE9j0f*c2*;c*8r}l;XC)oaEA4 zL@IMgvS_*k&jZ>3L)SVPF&Gk$Nn3A|Oo)#;ZR6S8A5F;Pq=yd@$P~XzU=qy0Z3(lt zj|i_Za+4|JPDM$U@J3|v1n%_0C&?He`uM;9ul}pUvO2FN6VNw`^6uB?r@T9uQ~B4g z>6WOpx;r#aXj1P0x(29Aiyi|TFx8fNa&0YC#gsZrJU!>g5}3)nZpnxTtz?`< zBcqy+VTeSWTSbU%EZy*Num7uzUKOL!)-+LScedwLqY6W<*? zm*`9aI(H_3&elcv%heh9Egv(7x*ql(Gmq>Gg74d#$mg|JC^2B zX&*i&awciG1d^3@p4jnE1x67UZm~UymW)(cn3J%|FX?mnBP%ilp}mvWO2(5_QffjC zbmVte0=fuN=&8oc6-FDXA3xTucCL(Co7D2=*;&S{^ZWH%_AP8<0p|(Ox-l@_%*dy_ z+X0!fT>AmA=Zrc(lQN;!+FZinOLupzE@Ft^Ws>^-{3&Otb!Ry54ZvV>E$tXx+VZAa z-4JgJ#1$G(ev&mt9qHK%DkqCsAC@4(yS;SxF|0h}F|uf+U5xzn@X~;lgH-A`q^o3- zf;7?l9IqkrrWbzW#h~HuE*O47E&s-a5i3bOW_!)`OopEpGodbi4)GWcAqV5e|F@I7 zwlV2C#}7av^K}QRYsPl;AnEm^PobH zIXB6iA@E!fa-}6tdv(W;>L-K;v-sOf+eCuD`Krz&)|&2kiljH{!)tRaSFt0R zAPJvN83;ewHR>UT4K*i=6=Bo?T&PflrGPsy{M{0!u-613mrz0rS_&w2$QM+^Y%gA> zMX@QZn@Aned$(g812)yR1+?U+>J&Ghe0@AcLp`(RJ;Y|358398Ay@nmuC2d3?We-m zL}%0`k}+t25!Q_oNMa-{>1M_;!TC*Wc39MH0jx1Pu9@T5I?QhZofV@5}HMs~DoZ*y&x zRiJu~yqHA4E{Z`kgQK`8negqEd*2F)>nt&T!(Ih2vqeYVLE($dy<3~jy=Rh|Cxj6$ zFyDPWbc#L-uve^vz(EPPxU?GEy+pRdo@tBKna)5?yDPi?j=4uMsQAeLoV!POq~|W$ zLmA2DY-C4^s~!ufPBLdydO1Pj$Vie6)8ua6-dtI4`(Via-ZOLoj-~H|isTvs;Vnn_ z3GtYiHnC}Aa1m9;SLB8>>IA&=kmDbMWRkqpHnWbuw~WVR^qOfl0&-DqZwOCl95c~& z!6e(QdQ367R1g_$xQ}mko%`9bpv;tIYZuH$Scfhd8dm(>8y3o*@=z0!!1^xLidtD+ zL=oQ;EqZnHzvrJLnZq#~#j1xkRou|R4EAenQ>bu78fcLiTaPo%G!A4jZ-^wzL;0C> zHp?F`CHURWnZ-+WtY)}2tG*w*-zi~S)q841%Pn)$ap_LN=eoq4#M`I5i#cKS3Cc=K zxNu{p8myPnqZiz+GhkO$9C6DQ@7q=u-aaGJFh?SP=)@E$Aon(f$ zM0Wtp2*x1CtV)s85OS5-Q``VG3OEV32$N5BM_I&4AWir9JkVabt#!#PC42zymwyad z#dAIl$QOktUx*T(^as#{=iUr-O}$;vvoGDeflM9U+QF#wY%1Z@N5x~j>MUnHe? zzDCN$9+lD70NKVh;f-9EiWAHtcF6Z}L>)5BQBw=u-MEQqC%5S#=HhZAuf_p8TS`ja z%ojbAeU?*jR68~ekW!ZvtTjt+FZrh`9KTKlqJ22En7Lp5haar3XK_|E^UO;bIp@PI z?4#`tvbqyiZtD5zW>QrtaS={+a;yOFJO)&%Lq9RAGD)t^vyDyHq=m2B<*yp&9?AlM z2fn!}ZqP3L2hx}aVO+2j->MX2)TOWAqV7Bl$*{-Mv809 z8_ZMxMo6y_JEI#CWEKPw&MPF7Fn}Gv>g85$lXQ5_<=Y1Yn8I>q5uH~%haa7qp20`; zxZ4V!$M0MytHm|o!0tR*EklreX({Q&Z4^b;Ee}g$<$J#}vnAv~=p=~<=N#cLCUR83 zS+)3SFS|&(N|UFA3)oMnl3)fPxsmvV5PHJ6yhxV-4BaMLRs-nbH>eRvY%p7Pm&v^; zuZt+-=Ngd};SBuQ&iU+xCU0JY-m!AisC+&7a8Jj_;)zM2FaF}4dH?f(8w!h168HnK!%acRJv&IfApG5O4{anmIP+U z^ke(+oZ3e-S;PgZ%Y0#DOuZ&0Du4uP=zUZY7r9l1fY*}E1R#`3ysKn24#60sb{K(XTU97?^fBL3Wu-gwg~iZrP8nhga7Eq# zPqy{+P9*SeZ!faIuflP4r9^)jhNwt$KW!$X0r=^9J(batOdCMYb6z+06y7CdlmGz# z^hrcPR5OtXn!Q(r?_vnw)-ubPuzR+AGO$wNAu*}4qh`|Bo-3L{hIz8#wWK5iSJ@HC zusN^(m{oLn3Ic5O(sW4PL)o09Bykd3$Y9G@^X-P1Zc8b@prWLxzFsf> zUw!bYQm1LO?R3N>8TQ#A;Os9cFMcDc*A6oSI*GO{Cm(|Nyw=jHN0R65>&_L)bzm5# zep6vDldqLCA_SY^JR|vN9Y1U@b*r&*^C#xWt!O-xd=lKl18;Lk2#TMpJJ9$=L66LP z+CgTQQw$f$@bge?z+30*B76=z#{c>z9&Nwr9s))%V}iWaz|9Z2?k=TiskowGoG_Pg zyjM9-7$WGJBr(zmO7#{^OBdo{Elj*!is}ulwN^xhRU+x7kFclaJdL|YPS;7PJS=Brht*0DwKKC`qplYb$v zL_4?0bV4j8bgS?KPrmJ7{C)iDkk17?9tLx@9ajpQwLt=6T=k>_K#NK;?L?@ zCXX1}n;Fr9p~CW3jA>oX^XT5S1FxIw_oAh$UG>=3yl&643M-wNIC;!XOoF+#T$0V> zc+h}C63G70LM0g@@i+YX&)6Na8bW;%ps|wi3=zQnwJ{OA`mqf7;ce@IHjEL;s;)7F z*m=8sdTl=Mi+RH#nH|XjDdPZU5~{+$){^HN<~_<|neMPlg}4f=I|(MguwHpY8Rqd8 zC$j1Ug$YDdj9xI;P=1a3KAa>r>-c`4N^0KIw(fGn=uT3gVV=dN5Tp>EAUMl2;Z>aD zA=dAHVw?n)4<{!v#2pjN+9X#4Khyd-!kTCykT@c554l|#EiLD(F0I z9zKXI*=w4PpUytIVUyztZ*bbnT$ft}`3MW<8VJeF?D9u95^RK@YIqWQ%$&!gsa*1g zlM%cR6O1ZZo%5-0`n8kOPp3gAXOJ_7 znIYbE$wwJm_KU!21FeNf4n5Y+&)57Z*9qatmoo4YBAjYvTEHagkd&9a&9SRs=11E? zFu}ZK$I86wUQW&yKsb4<*i|J&QcYwI6D8iSacO3Cn`amOb^onln9V4DlNz@dMo>&C zen=3*b#5fWyUM0zrHi>~m}%qUVs81(+@$+*{n>Bbn+Yzd5-7f(bn#SNZYeu_6qxt4 zmXUiol%?Loocmlpy=9K)H73GvsuVo^=q;S zEJ$}{15cX4lVGOBG+?|j9ka|QhsWSz=&o!y^&pF;EhU#k9y?5t?e}9IL}&5C^%X8> zg?L7mr+}w2P59flZ+zFi6Tn%tu1scN-DjEQ0BT%0xTkowysSn`klYz`QvkkuT7z!5 znTvCx&AQJ=Uw&xgwn*27aQJNpQEe7Vw-fxN>9i}gPQ<7FA?>Pa?nSiB!_S}JUccwU zF+9oTTX0?H6qz*#>iFz^NlKscQ9voDy8LUz`I9C+PUSYRnh2eQ@|+nOUd?s^`Cs=D ztXn1z!0!XON`yKWL`rD*c?UZBx&liqSJQqyG~_jFwLwD_hWLTB+6lD)3frU^0=dmIGpta}G8nD}Y;wA0|HSTKy`0=K3;0RH8@dq;j4 zZ$ypAm69edZK~0gMlt|ba;eqH|86gGD3s@!U({c7S<#Fxi)CwQW7T?UP z>Vw3O{5zffdt$v5a~;O^WaVD_>C>0zKBilTpOX^YiJr^yxfz{p-{7`kG_F$QVe(EG z8FD9alB#~@SDS1qVcFPc^3|2qWHW1y3<{V$W$$4==Xl|BPvxvY8CYl77{c`f2l8xf z0nBBRw0hXg5ye()Q;Gr)7LP)77Upxu047>ARg6m8h0v@c_}rX#eM*U^9C*Oqp1*{-0Qt~D3uD+%H#>{Q$FdjRisexCwe{^diOjA-8&D7nvd`|=8hgFz+jbP zR$yo*j}*}LSJWW+>O|xUkw}h>*GUGASv$`dZg0t==xRyOc(heANps6zCYNaZY>(}i ztMgRRvD}7ZrRilpQTVQebuop-M0?8_bdiQQMucl~{nm;~H~CpZbytM(k93=$X-Uv+JC!kxAwgjH*-nC)?cPTW z^irX9*`%Ji_TPsol&iD{s79n8^{zHT(#vZlcnPQoAVg)<_=_odZT4 z&@bMaR3wm{xAWIXF+xjY4ktnKPxR}CM=~Z(uEjI(gutfy%a?pUMrkF%MHoPga*a3b z1=7atncQIf%v)xz@;%gFvGU$QpcmEfjInhVCOnn4U+%)%bE2v?{h8EsqreN2HS6T_ z)Ip~kKALw*)QM9cg_3c4sB-?^Q@={OF%p zX`4=+H@Ae)jU=91H+)p7e*nF(^y;YXD3~$jSLy(IK*q@PZ1tDz7#GyNTgLuk=H%UN z=`pKZD)|=--3jw=&keN6!1;d_Mh$g>&JSKY`KZg}Y$m$p7xXy65l*F*Gs(S{@R$Rz z8P0jX?M&on9wIEo@0A|HuRFIGErJ}6nR8uC+_vk!I3$Xwrw9qDHf``V;kK`_h1_7H zEzSI<329-*6Pc#rC%ly-vhv|llyqACECCofX1JCLXB-AhiPyrl82}7<0Shy;q zy<0Rx+FnXY{stggJS~d6UMK10)W^|5FR&LoE9Ry<<3p@GX4(DfB@XMq0j|1Zw3FjE zI1|3(9iAmw4O};QaJ4}g1VH>(Gn$7n^NGKQJreY$>iwUWgh1CNT5Vq1J8qRss}Spk zssT_T57-=Bp4l#+^A!kbPRnGNT_@uU2&|#ToC8xS6-PtrvYk01htwuq#&8M}zv{55 zst~4{&?F%IG|wX(hWs|!4pn_<{BjGX_x0h&41>|$QSeRqNv8D>0L_qK8-mv#`BS^* z%N3iiTMc3Y^G3k6%g^ndR6Y0d@8PxUGS?gC<;D3h-&RBe2X@MM@&s<^(1ep~C!DSZ z8-BWFGF5(^4oL9~@Obt&a^L(F)2{IAxS?3Yr z><%zq@U-~LHqNbK?U>bku0-!AC0VrwJRxE}4_e(6y0>Q%*aW#AS7-xkfol}W`1yJ1 zU*(U))aH})+zAM9PtW-nH79JV0k8$>8S=qX8jYw;!sg=d=0w{ym>@ zNs`vO1z6f>=JPf~3?d&hy1OPH{m9|nZ#w#J9F19*ji?hT${{FM*W@jC)XHK!MIb$|<(7}?6-$uZHY^O&jr~T( zD1Y%UHx)}N1I}sb%!@b%ZK8y{M^rj1A?cRp4Y@oc{rQ^6g+aSNfrPngrM65^^64LM zKr5xD5l*UE?RnEwb}C8qmYt8+JOzBty6E3!-${pEz1BnP(NUvMKl-nLHO|RF%bjae zyU)w^2_%sA*k61G!zeS-OO<`48(?)Auyv&83f9JLCNK~1Vxg$|-~%jYG&f1(s^MU3 zbtlOxs${Bm4@N5sd34;#kkJ2}@9zkcB~Tx^hp*SApZrA+bt?I&b*yeMrn5NhA|7IV zBS&?3cC8xyqSZyi=u#o+ojvd>!fa8zR5CJfR`0@t^%5lf?Q<}mhrH#ByDs^Jy0O%yHQWyZqy7P&Er@Fh^*`|MD#;v#nb21_)At#)Nfn#`um;~WxLcVUa-P5)<^4m>U zJ{#e7o=_I-yN9)7Mv%95d9KbV&+XZl@^h-Tye#iNSx1rvPvK*v#jVW7(E9eqx^ zHN~6m+@N*oQ|b&avz2hA1tAF{OYlmyL^Xz6ChLM>zzA=N_VzP=*^;2a)~BAjhIr;Bx^RS1_Kyc00ZJo9F7UL?9gCH9p( z!mFT{lU7v;@qk=AW^V5xPh!R6#ai;(WY!#*L2ZL=9Ws=K(t+D zITyuYRcvLY9|eEc?>{`|fPuRI=72T`wwdbQ#ya@gr5bl@EO!CX&1|xkm0T7`OUMv| zmH>(2OzRM^=*R+r#H<>(ImzTGUV80!F{I|YZ(vQOz4h+tAVAd7dyCUH~(*QJ5Jmm(0Ty zPe1L!wx~_`jHr-??1eDf66tjHgTE8&Sn>^{s1_ym^q4s1*6#N)Z&X>JpFcf2b^gpB zAdf+8Q63ELX-zenRl3^xl(A`LBbnnil!4e8vjB1``;hwJEvikEmIpSiuxon1c9J2H zU#fG-#|d}Wl3*LvuMv|hSnEa}M=45FaqL7CZ}4%@GgdOsqtZ&WFUiyZQVSR35_`e~ zsA0PPqp0DKak5x&T{g>=0BoaXoOcbzXXZNK4%rj*iBN)xVJSY#YbT${t)0m*Q>`6? zA{We=tZRfEctn+n^xh}G>Dk1#WzL@`#D=*?2HiPbH0e} z=PslOXYkkjjr5FTd_xq_G3X*DdGn8|WlGXbY$m#VrQ4rrQxLTFrpvahyb?&aK|?7* z}DXa$<(;@% z0_{A^d^8xk@r#I6<9jLVV+Kg~(}$=0yZ!4fN;v*1jOW*WNn^Q9Em(NW)%pqI)2A;_ z`KM7A3(as5C5Ga$*-luab4{)t07D)Z*}e7C48ZE<`^1uOYp~8+3o(z^o=7k|bDUYO zLxM==Cz7ia2*;bEYl6GLS0<;V-@pHH3C}Qf#|;TH56V8130>Y>0Gkd(h+q=;swyTD zbN}}C?fc(#i?X`<($5WM&UHYq?h3hGxn#FHYiR{z`~Ca=;KR9pc#8HIz(0~chmEyj z9wL+{dE%955BHx83UPiV8E*iX1%<&RR;#4lT$E9Sn9O|bR7iKDAe{VY^R3$FpZ#|( z@z!a0=eQpqUSG~;1C^Hs@)DyTd4rY*nKS`79$xY8cM;WUqh9`#Xyt(LQw=;KB#HlP zDmT9{vmFg%gk<+v(5&WM9vJg8@W@;Yk08@tSCc@u?X4a2NCbqr51p(t2rqNXNjzL* zBwXgb4`qc<9>1jp#SmJJ9G5?Dj1$)F$)u+JeSfzOPIy-NY)5klZ(e@+($N)h<4WD~ zWbZYW{x3J+@=! z0Y8kzAe6%9d>H&M`mJGbWx;a1>hR66Ju@UJ8hO(l%ia4n@ z%Ld*B0-o=7WbWd+G+x_Mg@lfu=Ab(s;nkrrWtDPGxKyVdo&@it@$#DIpTXkdVy=ie zL;&oHq6(Ov%f8XjKlAb7$*m_J>j8bzeWa7<=F!YM|@dMpN;ujPo!XBfPbd zM;d;@A-60>CRj_(^Fg*H3||sOJ4rIUikxoV7C)m~yAcJ}aB&-u-iWtolX?7bli49* zn_a+Gys?DnWz}oA>6rH^>Y*X7(DT6GjQJEg(OYMlM7_$c%`&^D7;O|(Fl%+SQJrif z(Z#d??{V)IaX7t@y8d6D*n3lGH%!u-+w@k9RPGV-|kE2(^qN>{+B*WegzCI6RbRvT)-gFX;-T zWr%Jq3bftP_zBTGj7gADzrW#?t3{ajc8+YYHHkXy^#;;lB#(LCck$bNM1pQ7V??)> zEvn>EBJb$>Yp%I&Jk_|0SK%z_jXkyx?HvADUg5M_8Tp^N?qaESC6f0VbE*bO-xyCO z-SBti(nlRVhAa1{H+RXZV&1TGkQ`70op(b-$t@L!?=0_k)Ef7UEA?&lw1o9}2+zuS zh3Uq$A%s5Kb3nEp{1_utLR{yYb60ISDkupNB%3VAGHq?xw1p=LYXE=B*h59wt{_}poqN{pXP+rrZ%MV2VJD%8We+aQ zQucBS3hdspQs1snyyavP<|gvY!8I3aXN8B4uKd7%;zQR3zKBx|gKk#{j|lOEQz3>c z^|Vv14rmxOz$7O)?yF;lpc{KTuHz2{#7^Yv<%ZN-R3t%Sijd&w19p%H8Y%t zo#27uYWAhEZ2UL>0LN+FYDp?QbA6Lglux{4*m$2e56cpM% zn8M~oA+`ACa8%m81a`@@nDVb&Su^_Ya&6a7DC26OFj|rU2!~nM>#T_UWdCBA)Z%ck zc}rq>oQUmo%W6>~yfVBQ>THEk=IR;@VQ3@i%eq>xYE|Zz!~}9(X|$^Una!n})EU?0 zA;sxCZpEByOvqX^H&2%RN+lzSm;(9m5_L0lRn6hLR##nZ`%YO3JhZC%tI#Er$eWdVkkOS(7O;*q2H^V3%rudgo-L*!ZG&E&Pe+=-T}Hm=Vw z&qLSRFa6~7`T47%e0FaYCnkC0|M~e#{z`41VPJx;xkQrs{x#fPW=(8NVnzM&?e(Rb zfqlPUnVYIe#9RSXE-zhCm;r`)1Y>jw;=9!DnIK)}_#lp}or?CEfSk`c)i^Tm*A0(h z|3Tj{^>fNdVvPBesjW0I{Q<+L0tjs3;x|>g3$B}^vsF9mXxdqAyl6Q@-Q@}uz69Bo|7p*Mm=U8`<|+*go54hs=|*M4H&DuD z|AAD=b1|P(t-35A6>Io2K_%VV<-6v|toW27x)P>QHiJp;R#gD7wsFH>hv4()bV7u# z>fCvHaha@cBv-Zx(UkHJxHgB5Sq03eT>Rkk)^J9hJcZ8I)Iyq+<;HmnE{RvS08@p1 z?OQy(x6M4mN69lmfHk@9(z(tL#@5PY;DnjJe5XGH+4d4$!gmy@_TECy0J{%nwu%DF z7$ruPVRWO*e7BOj&E*2%es_a3i{GjxxH&qQ_&FfN5P0+ED-xT`+BGP$BKzE*Z=toe+&aKl5;3oAFZ#IpLY5 zD{d&L_ranWqHSNdM0=|UMVyLbZR5jq7HT_lJmeU(g^j7R4vNoD`Rhpx=a3fj+H?Fc z#fF(`^yox8w|K-Be^VCpb(2yNsl()^oPJ7_k?^)cbvQ>zCHc-WBwhq5P+YKH;9Q9&=Ty8? zhO;$%?q2B1%+uA**e%8!kNFs9F$A^IjsE>HV&nG6sD(PxTW)*{r?o4jg zZ097#U6lBQ?)g4#pZI61s~t02%%PTbEctvMiJ7e1$&n~pX^5$)n4-Q^q?p$zsWFskh=>9-hc zvP|_F7~SSt$R_YU(uBTBJCb$m=h$jo*`{20`ZmAcd3 zjJQwNKi-sqbmdrov%)VEZ2_k;{Lf1>8_`;)RDfVMBnA{KK0&!^?}S-g9!6lSdBE3KGDx%>&YPQQY0}2zZrQdyj4- zCA_s`w%(S&NNu$n+Aw&u^dJ$db;&1$yt`Uf-@kvKtrp->n-5ESpBwe&IDoTw4tp4F zmRd&4b5C<6eGg9m>BNmk3X)aOOF&C9z%VyI+MJF)<$Z||$76UHK6U5^p5q%Q#021v z@82Z5G4vM&vg_K8wX|SFnCi25HtA2#=ZQ36o*km-I!?{x8^!#f3AMprnQRDEolRo| zuf4zzt2gZ#RC^IBRV8YkE|RYPayD6mC5ikKy=Tvy5G~I#k=HH3F-OH_!E0MyFnVh* zFS$VGygO|yd6Q$le|ni;sg8ICUR>DdR_zoi&g*Ti&cN$DCBhdxD-rTgk~@N|KIMil z&-%|q$S)o{7LvOrBRAQA8|zF@sa-HWg-J%VOKw10#)fuJF}fLkz;sPpu7i5Wu=00T zxQ%;;3uv(~rKn;WJAkMCvl|)Uhv$BNsLqQHFKwfp6EIh_ZZLfeOMp}4_e~x_@+K%= z8~+z2?@}-Y5U!ne-9rAnuyvP-hyx(}FpDyNA8Y1)!TxK1a}41{H|9Mc)oVh}EiKxp zbrCJeox?CwVN#slHL~1GQ}Hms%(Xns38IQYX;l(EKCU8+nG-ZCH2GX1lD?gMmK;@P zr}El`!nbS9t_x62rrQtOI(xtHxw>KVJm&~z^1FpRTFu*!JWrDBlLWF2Fxor`X3b<- zW`#L zC&6fEIN{{knt`K#r&H@ui=1_aGN^vb?HE|xADp|hv#PBhS6TjIclxl2CyesLj!$+- zrq^U3g1YOtBRuIgN&8fe1BGRy@E;*S+x>(jNdk6f8#*>|I4!F9efc7}O~qG+nA~GR z5Q5JkoW4MVcL#&3e~qyF9c zD6{_SO*{Y1HacC;rOBo@U{;2N;q4}7_xGBZz-XJro2=9z|5Z4E?L#IQwzJwsKg>3u zOk5t23CHvgd4Th^Qn5jlm61nSF@{uH3&cO$!&7kT~DGb~h zP%Hq#$q_sIv0gnySkGr_3JA3%xpebTY=wV5AB%@Re(saMFdq$A!{l7%6hXTs0huRKDse45U*{9DU68?xXCWW zklKS(oRp+PDDjw|j3}Ah{xR@c{N2sy9xk5&&`jo0_l6Bq2T5l827Xhc#bbs?Fqc)v zl+X6^4EEHAp47IUj>!#9#M)rcFaYZ!Dw6RFI-Z}gOCM7=@uNHB?dP__BzaBVpVAAF zAhxU?H?eseLv>3u_6Dt=$uOoWkfH-DI6@4-7%l9q z@UWvM5?c2LYjvDRF!=!eVcDSf`9S=Noqxq6G}}XSigBL*_~X;_r)Ot2yBpb}G8h2X z|BR2l%&xl>7|~Q767pvUnr*`^lk6pc`2ZliEhWz*@Bp{=@`Hy;CVH@S8U$M?VbJxS@>TppGkBE*wxuM7hqpLPJ@?iH|nBEQVFBHb6s zoQ#jE7l3yD$FIw0>Qv0For!ilCsd<#Y43JH$!Xz{F1j&OX(w5Bxr$ABS^t-$o?R|z%0z%=;lWV7Zm`s2G2wOK@Pe)$%b|QVdlsdWvY9| ziw)u9@Tx7$PV;y|Et4IiXHK#-Fi*6#VY~My{GXo|bN5JN0V%O|1o7%}&rW0jE`|z^ ziPlcPOk}2ADM*SRb5@8v`#AmTHD$hQ}a`Ng5%S-s;vlc;-KvZ@-$Y7oS{rBX zT0sS%J^nN3&|tmIo&!pH#jo4=Srr(gk#)`s06j|23Fe+<{Bn!@l1#W2GaFIytfKn- zX}jf+eTwP-%k8@KM)+gZQ492J6-9IQ7LffPTmN4()v(@&H z@V-@!<_$ABKrh=6$;uJf6=kx-61uV0O_d7J-6&QiT{Jlf<{l%$jPUcxpYB}~G{Eg- z=Ig@9id%%A@Xm8EG&laILX!;h2z%$BoTT!qix%;w_oUG?XkM3PUA%vum;uZUZ&syZ zB$FepUh z^AE2$Madz;0Y-XS=U1T(ifWawn?tvR?HGP~oVwy|_AjC$>6p$vtl%tNsp@LKfB)WY zX5shW|FR+MV2xnnw5!hAv0{N&*aVA%fHlum^m>9hl| z1;$LG3!_D3+R4!ZX$_}g&xWI&TasEG;ppv6sq%FuWk|mdApk=n%w}y?cPmK_oA%j- zZ~ur~8goU989A1}e1CNsBZQ@$JdFRZxY{kbhE^-^{8OpM2euG7E#}2y<-oz(ZrlaX zFQ(2)A}=p__vd<386ZjG?}suxOzKB4jjgRP9C>?KO$Ocw+z0;asg-6%#D}$T9uhi9>Tc)dk3YyNbC42s`ML z0J=gLRK|5Z2|6)khY@E>uGr9RSgUl=@+Ye}ayQWg0k}Z9nLgZoCJs8AM%EZ7reTr; zxQ_OCm#-==&?MC3>mKFpz=%(Xgr8#ho2P`huG4p9M}#K~IMWa-!fhJCG_2X@5+6l9 zOj|nqoZtl=X6gyi5?F4HbG6N3n8&W5T+IX8TQOOOcW$LIS_FV+75ug2&^>C5Zse6j z&MGT5H2hjBw4C*MOMU9rO=K&>&-O)EkqoU3~iZ|qlG|p3@P!heYrWy=QKGpI;1KhA%65WHGXT0iZC!{ST%mz?kDj(sp zDd}1nRmM*yro_)SG`1M+ogrp{)@3z@)$nsQd}0*9NqwGLJgP>?;0lLk&V*acy7Nqk zSvv^=7)DFTict5alkVvE-~XC3LEnaFE84c{*sLg|7%|)w_5|K5k}Z|kT3Kq<&oh30 zrM2y|?S;7{vNfEvGKSqitkC{~A2){c*~wpR6I1Gb2$wV;8Fu`aDm*p1uSxzeD@64% z3%{}S=$5%w&?=r>>-QZxasJ z-q|K(35Ekd9XAix*8J(?TaH8`jJfk&z9I;<}V0PCh`79Mm%92l(^T$G0D^m1X$#`f7Ma(+YS5_nP-7 ztnDnSj@<)Ek0tqv5n$3wF>EfHRAX<7=lAyVIg`bf912;*LL|-c{e~@nqi)HRUoJkE;AdBdGOlbN-Q@%}$~fs|%X6J~Oev+# zkI$aLQd>E`ef|A+b%YD7%O*ho=St6qZ@ozK)>Pg+fBx;`hkR-0!{`1p@4;`41@oHU zy33N@VB@E245OWJl1pxKlLUSQIq>+c7HtE??H=1^A|0V8c{FL;%b~yf$oBd9>*uF0 z!um1YR9maJ;f4S_A!bB4)ff_hwImovfB1Qu9E^M0k+LbMADZO6e|5a8iY+AKBCca- za$j9#xy(M~1Vc;AFdJ?+Rp!c(FJbHUcLYGL3*lLUH8J*l?p{hVgk8Wioz^aB!UEEJ z`h5QRp{FO$T4(w;Iz%Ozx;kg$^t=%c&b77lRgV(r9CN1n#ymIkbUandfwV978 zd43p(2%LAvn`GWe+ZCNy33{jDp<_HsSyPMmZ3h|NYP#qdRcTJ*OOboOj<%u4AOL*d zHO-%%9UeOGJ#w5xGs}Tx%Z!)ViscGjO7pYXkJBseWA~Q8-#o&*1apG#np|!tpWK}D z83KC5kAa*Y?QHSu{z*c#xANqQGge&RGp zt@U4V$feu0dv=>lmgzdbN*?eg1r3j8t3|+%TFgE0N8v4DqOFy#>nj&p?*aDkPx~^) zu}V6^P^P6=~qPg!mr zQSA!EP{q6|ZIbU9x4;-?hDys}q$`KzGwq0Kes0o*d4$#Ri8WWVlFYrMjRr0%Mccw1 z-F^^$LlEV)kLiSyFkF&a1DWs!I4pHOPf1C1Q})I@1MeCL)1~On9$h7?@Liu}q8-7k zyi%&gSrr520ksTiM;#Lk3}zYbzRobZkLQg;BbY0#Ntbq*&J2GB_uPMbb$$?NR$A_@ z*9Dx9rs2+4mp2Q|LYP~Uw}Ie5)A9( zur-OW*OWA#o(qua8ApcZMcXSlMbOo*AUE+d1`Vx2)vfIcJX`@Z$pmwUr;Tr_VzYI60kW$V`j20vso?Nt(rEiK8a5Ht!kz_ zAp+_zm3nPDd1FR7GW>d*k;N%ayRn$u)tcd74_!U5o+(~FsH!gD#-}oTNcbUdCffc| z)+DvgHI5oFS`w~EJnG=LT5=87GsDPA^FRWCk^hFgD{n)v>ht|ljzM~Sd@N(Us7x5H6fmS;BIMGGnQ(xboS=&ihOg!%pzS`NH9tQCXz>U?&paT^2pcceZa={<3T-uit|}U@h1bHo zKCDlQcxie2dg^=^bA(@aEx=kn$J-loN3PYm&aae4@4k@itqjd@65L?UkhXtBSWl#H zJ?AykVTc97yH*3g(n|PJpqFGm&aRYao77Ji;B(&X5A0qF;0rP84W=m-KUI8o8mgLA zUfcA>bIC)}(0`bI?KH}Tefgg6H2SgAE#=1q@N+)CcJp^sTA66kgk#WyB3N)0qwOmUF6*!S*{N#AGB8o+#EX~gg@NW*w- zo@F9w{>{9X*wu}*{&Q*1`6B@x5$aM-zM<_B@lgLplQ-T8pPi6C^c`&AA`B%T9pB$C zy`m7txCP0h>2(24t2I~aYHubyk}S#|E4*J(k zux`u1EKsNkY`kbW6aRu~o`);JqphfAk|Z|E3wF`Ew=kvCtv5o~f|9tn@yzexFI<*H z-F9gm4>uA4Szu*?w`}kLXh>~R>}`ECiR8x&JgW$^ngksnfpodAFbuf*MgWswj_6@RXFk9r7vXJyt)%~J4l|-A z)8glLZB%8rk{$p#8geb|#xfH~%t8~QtleJ4dm4;HxV_ZdNDqvw8EWz5+kGb-a@qx2 zcQgqn_-)$SsWujpVeoTEju}4&ju36348sb~aP9n5|6VsV&kH&g8lEob0vHT%(@A2q z_eeIn?BjVo1&zC$czVyy$5)ge-d=y$Ic%Q@M6wos zsyYbWhI1msEtybDGM}mQr;l$x^2cq!>0J&p$+cnm^fu2V!t1isX5M=~S?bH=_Kb?u z{CN^blO#luN#l5aAIrRv-^}BNOIRj{xoro9HLlcphXAG;6A$OQcv-m8ryO#EWu3n+ zHMd#Aob{U(Br`XB6XkJcInQQo6c?RC)is;3+d;V!{K}gLcXw z_x37=v51u!;g-7`*MRy*fhy4>p8qf_NbWM}CrWQft4Y#s%MtuFs8eB&1$J4lEO#Dq z`qJx^8C246_7C#i;VJkEf+~zd&UJSRM@-3S@mgB6v~`L7zae5c#LN$YeXKr^BA@4w zA@TDZ@a3~s=@G(USPoB1s73RLh8J{54yT2md7NK=4{ElFSD}`$Zai6<(+qzwTFhEn z734WLz4Nsznjbl?i<1?1{CK5Fza=FLuD|!m)Xu9LHZ$o|bgn@Z^L_usRqIgtAz$+T z`uv=KHo=gy3i9BGgx>TmHxgbjXdi8jy7&|Q9xu9u0Go&{ut;}3%E#%v2Tec{>BB2y z7L~O6I1}#~Nd5@p+Yj>GixRYE8J6>UP6dgDv{VV11b;15G&#(` z+CQlfxyF!aO_px5y}s2$h~!KjRWr$=HM7?mE1+3j!(pf$Wh8ZyE9##EMQY(*r2AgL@lhwgN0I0ngCyNTNnFaTUVwyE&Q zO0~$Y10{iWOoo7TQt`x4LqYi*EY_@&c2K0dNCLi2neo+~mPExcL6+{sCK+=A7KS+4 zSQ6`Dx0#`KvjBkDYRR>;N|*+Em(&(B^R?B7fbXw6TK#vzTChiN=urZxfcW|BIUy0T zww+wdw$KKG8Is8;_=lYFc}Oy{yoG=0s$^h@l|bm0Z|rl(|6s#|tvkBGXim_LM7K)o zGL83|OtL{C{Ms?%jz@Jf^B>s>4X5HX5AMp#?Z%EAcK0FDVn&kk{jV5b7-ZO?X)FNVTFTrCZGl>ug6RH)u zlNo08*!7a!imxG-FD5rR+5mH{EHE z$Pk09gjF9qKmN=wTv*FLvi0YWK_^9$zJ-!o0?g{LH-qEh+GiRBIaIvlc+^AfM$~YL z!uI?3?-<=Bb8G7=eCpOeWeDavU?)yOWy6dL@k~2E*f`(0zYe`N?6n@!&CmYqj;(PL z)JZ%JburmV^GB%OzzliyN7)H#f?o*q`ud$_n8Z8N6ujJkFeJOs)D;`u8M{cC$K?rM z+j9`a1Me?juC@S@9A)I4=(|P3*oXR!5-y%BPlurSpU>y#yphIau{_~4P+*%@G%$ih zldQc*x~@!OP<{y@n3<}uI%*1n4zcVOnCTY_>wueuf${(ShZ*PhzcOwQKAR7 z1bnx_U3ZgM)q{u57q`GqA2F|nlhv{-A}|-rmiLG$D>JjNmFl^hNT;VKk8t_so)Rpx zq`hzn6*BfY4_)(!>N!Rg*QE3~3ydv9y&M#^~>XXrkzyaOI`=y>1dhDt(RNrbf8 zxal#2h=kF~>s%7EUdwZZ#?#{GS(otcM$(UZ66-z0`(=y5^_`0biP_8d{4*L@!DD5EvB<($$hI^YN?O&Cdkj&T|q(dw1ah7G+&p5?xiBTpP0o zZv!LKjpk&Mg(ey1R$)*fCjpdx@5^GPf9-zgc6i6SiJyg#YrD=R$G;MhOgmKMA%zL`n$D(J@3U}WYV*D3{O(lj1H6cel}Ay0()y7HCV)F9!VuV}e7K*V zX5VNDvzm4M=~JpnxDGJkuF=lnO_wAUO!C=1-`{>f{Lw*hJ~^LhqRF@_jN$E>E9;e< zP^Mis=NJn04SNTqRmS^Z!u|2@N#P)?dpTkKGKGXnaZ+T&~>Rs zcr+)vy9g)0JqV;GTeygjWIP73y4~LGO$_Pw&#Y33Ab0XkoF-@O)Tf{H^kABy2mJ9z zp6Lv8VIG$6+6BUl60BYFk#5a`7RpcOG$f+LU@z^xHEaFT~`CYvAwc0yy6!(D5bfyZ&GoD25nC+DUGhELp0 zO?g7Cvwozl)ml&bFE9B$zPtz43smm;<-A^JOfZCD@{)fXTB=g|p8Ds@yZ2ia)WSKO zr6aBx>p$;;n9_Rfq3+zb5N0*$7|%*>&efo3tAXiV%dspHVVR1*3m^i`?>Rsr;gRqHbq?7YJ9&^hvRCmrdO_hne ze2#8@+9FM@Dn-J_*RQ|XnexeJuU(OZ$>i5R^PJ`)Og-m6Is7wZsmp+r*-}~J1brIWO!<8F_@x#6rjtArJo~e z2d+Cx0H*|x)*nB8F-exE<=q5C$tdJw0rK08x50NnPATv**-SH8ZimXhSEde^%uP#s zhNI2JtjG~&s>}{?{sj_`i{v?E+ABCgIi+PohBSZ(Z^^e%z!VF&5C~>+1hb&j7Mamb zL9QhSmI?kbR`7G!e`hfH$gKk(Ogk%t86GXJcG}#Bv#L)rtd``QEINh|1BzjYCYK}$ zx`%@q&Hp3-GuPJVsqknRay~G#+VI!q>dt?z{uFUtbbFg>bc#Ou>tFuL*UP>=zksD_ z<(5V6(&+VE4DLt176U7cCgD!J5!D71KJW2`xij7(@V`7_*pPYU|AaV1qK$W}t1ro; z#hPka-PD*QXZ$2ywBuXoIX@LBt9)fztO2H77frIXlS9+qaK@YwUAw@D1Ywq9_=y@Q zE9N1wWqc!l8P)r^4*sUaMLckLYX`np$pF)egXS=nO=d01{qo{5vxOg{C7&y_@vd9^ zU~RK#7ONxc>VP+ij`eQqx&Q$h#Z%v6YgV%gy0rX>7k4V{_#T}j2_g$|SHjsbVI19- z`tJ6*a;Ubc_WYI8e2U2#JQY@)UZH0-J~`QU)8|x5Eon|`yvbQ~ zX7bcU^4TArM{(PkU9Hf{rIkQj^?L%SzC)Xtxw`RVNNyg($Xva=d}k^Ohf;`(ZWkTk z0c)K*NpgZMt%l?DCYUy(LC~Pp>neSOG5>mmAnkMDyH3H$PvWpGk*sYW#A-yrJh}k$yoqsK$pKo z7GCt zd&>dunmt9p=dFcLk00P4cO$S0LlZZVu9nuVnv*Iz-G>rwR2Z(->Tap5MU169Rl4=2 zMaN+o;TBPM0NsE}yAO$r$ISWo7!-`sEn&u2nWz0phS9}LH7WPNgtfJa<`Tf<43q;C zbl;1~*M6Q zu&B^r+S|z^Ur2?mH*?@ysC$GV*KPS0Ap6wB!b|(-k zgrB?)!mzy=?TAFq!?V5lo8H$t${*l(eioJ+KaoT|Ol9pbh?E z>5QLeK5xld6MOR;h4yibb#t7Pj2}hu5Q5=^gK?s}_LeUMnh@Px#vphwv?AD8iYe^p z&)4g+r+qyi9YiaN;5yI!Yxihc47oOZz;*5=kU2aKNct*djo_d=p={kyg0{E_0qlYIH2&D*n|pP!r}lE$^t z#;b$wBFgr3b7l=#s~{vJ{5}MjF!g$%Io$g_^NcF*?DzXov)aYW~!NI zdOzl!ISfzr_RIRe`Hc&IJ0bb}DZd^nZmV%TW0u%3H&3pMIrXo05-K_4Ute-fjVjMg zj{m&Fp1*z*nyN>)9dU795e&JdR?jyA?a4qlr0~ zgl9WfkL`rB#Usr42a^oboaCqP5apMj$T{zpVurE3RN=|u2f#3Ep6QS>hio#p{Tx6S zjal2sqh1ar9v<_@w8mN9w*+k6F$;>4M}?EzD#Ax*9*Pa=A`I2&u`3xod^8St&DCkuZA>p`lSoOBDk zuE}f=ydNjn8`<=ZA*<{uW+kBP;Zu{ZI_nxkc>~-+Kk~M@5;=;?kLQE$J#^XdZ1*to zSp^YWEzF!Gfx6P&rh(~TMN%fWyAZb!gTM$kE0c_tlF;G(A9eN+ zYy#9zLPQ+@gDn4h;xUO-D=N&w4YmvmJcGKs^B_75UON*2aqyFq)ctz_@j=5^t!`!$)}q(5PMi*D3xhdvRnfSd^ISRnBw~xa zaHTWq*nZ;koV4ztX<2E(615Y$Kn-z_h$HO{etK5AJraM&c{!KM>K3}a(Z2P4<)x7` zN6tlO{gB+@n&BrmgwOdx1-Cg#$DS&cu~1!jEc3vFYRGE>apV@ZDDkfjpH(huGIyny z*Ka?5zJ7nryXM&>f4qHv`Tl0dZmOvpMfuma?|nWA>8hVJ&~l!9%!FH zcH!f}CQ0`DR^hdkQ4vjBq33S<*C^}Wy>l> z*5PdN!;IkW=u}z~?NsX;TKSVt&ENJ2#5Mq9ki+h&9TN1)wQ5X$J1=cFOAD`?3xGCF zHuFT;wQOp7B@(>8?h~YB3ow2*arsc0MeP3m!NzBe43Aulkrb05bJ1UW)x{rgBIM~P zl$pK!DZ z%)^2P`rwTuUd}YhK7Wj>zYKbus0&pLYu=~p<6QS1+Prbf#o-$Q)$=jAiS3OkAg^0^ zREq!T7GG>=Jn^II5_V1Yq(Oqxt!g=-$?G^Yq3Hw2ykA|aAsG*b#XKTqn^dpb4iHMT z&D}e#TV;Oc7R{A*%!H53O}9hLJ)D5D0j7q~dQWa@<(rgx`jMFbdjzt4x*lTOJ>j@g z&+N8wl=lLzo$4Nx^zvc@Jhzx!Ie9SdL@c)rVOHy6wnC(mqI4mlxVlES1lHajXeVJS zT|amdT~tWNULx0$OuMdm5>=NP)X(Ij<%YSV)Mdk!Fv}CKoodX6fZ1wA*Y^jY7)`GtBs#Xc6=b0Me~_k?CSkoIVWPShO`dR#T0} zYd7SZ-Vw-vZ4VgsCqVi8&7`|cJiAPWj!o3Z@TD{0IN2ccO?m+9;EZS5_$)?r{G8u( zd8kpJ90alw^XM9zzU6p@<$;UhLnK;)gt(G-v0Frmw9uhNvCg>9*0U>r9+m@I;gZwC zFz+aYkNmnf$!n_ky`~?Y<~XXf(y^ps!BaB3`|zt+}RIce5B_vtd( z&bpD|0Ko8CL*W)PNt_0AO5N^zGMfU-z_%+jp|0Ct0`+^t(`x18Y{bGfh51H@bS| z;W_WHc9xS+sKOd$s->M{$`u1Ft$DKo1R)x3^&-2?}G5vmy;-vmB-(Sqn z#zh5;GN{s0-DZV$p1U31R=Ts=);ue7iwB_64g(;Ku7?O)fYz)I#8a!$C6`Vsf9Jd?<7cQHj~L#PVPYSATJpALDrsztNiLLgaH>J^ z5TdI1{PyizH6eMDMe%k%9f~lA=7y1W-}^~rDSGxW?)}W$C=n&Xymdy8nd8%K>X`g( z%6x>AzkwSqZ*uPSlHZGk5GX%+49GZt{On(@Tmm67o?%f1ksyp9anSX!f>ay8_+)am zm&wU_-TA~n%I9-@Uqj_j2XpYfi{&*TvZzMGgvmYalp+JT=B~O$w8+n5j;yq-P>|P* z>srJ2SVozou5-NcD-s^TJWg3AB>x&(B=K9%wzq@K+ZiGb8zNkwQ8&x3^K0ODcSez1 zDxEE@6(f>|7J=dC-~XMHobm6k(gd3~!P=Er!a7Xooj|*;0*B5G{U^wIlrP zc9;oqGsIt>yE#l9z=|wN7ja`Y$sELOHu;2%GSyB1?(nhxkl&JGP&X&~Leyb2^#0?G zDpw~}>##SrmQ_=FAJpx~>^#cxgqV90nUi$ht*)dV{yIY{b^O-D&2Tm6WA3s{lErxm zw@_K(>+d8sKL~#kFu*#dBH7A`xHL@E55g;vROSw(9ZjvB3Juwjo?;Gj0}v0RX-7Bm zrgSGSGINfuaS>b|&ebvDsKC4{PdI#sdm>_VhripK?vaPGu!ip0HZJTXT+mgOoK`Fe zoiOQL1ay_VM3mI3Bb8~{B*BkX)!NT8k0f6(h)+(4rvPk|=4h4MTZ5yhAJ*Q?(I$>$n21W`x++Rj zG2i)(LzFKl$N0zdQ@)u7mJ@MFN6R%>m`~Xb;{4P#MPtF8BdPi{2f}zy)E1$#y#JOQ zTjY6@zPY6A?F%YV{ZG66W4AHpX3+_%#5lfx`!190<~378pdhBOg4m6@N$@i zdRC5F1sW%nQy&kRVvF#H>olgl0C}2USw80}f@2FKCWe?}%F4T+ls%!1Y3DXcJU{0T zb?=MYMp|c~@`{u9o3*CH#ME}_pZbW?3xP#8$9@cwNOLtPMhj_|%t%X94b~cDumdOe zeT-A)$WQ)fqh~HI281Kya)_Wh$rZyxU*mA84$v=Xoajq<@|ZPG?Gn?ji)5%>cRnlL zr%9pVz2Z%PA6~(d!6v3r;So89+Ue`SRG!E6@XfhdS-OdC)#1%^gtd8j`JO*9q#Aku zp??g%OC?LOpXvYsCPe*r*zXt7T9gbfI?k_Q22o)%&8Uve=u+W!VhgH5feaI`EpRD# z4O5dlfk-y9rtDD|^hFCaZ+DdW8I70vJOE6xY7=s<FR2kWg)2MjR%+6E~nX86K+{s@oAFJAYo%O|0v-7|k^o)9M1CRaH0HH~#># zNnW3RaAje}YiQ}k(M9WO=W5+#j@UOk(f!Qu9wjfmb|TRqQ1EdX&1x;pOh!Y18u1f1pqP^~Pq560ndK?lD zTtE@0JdxlDm&2T|%>eJX!5)4&$I$;ZA1U$}-fDC5EGlv1qRx33L#~|)a_u9{5N15U zqU+*sJj|*zJP8aM;D+5a7>eqw+Y9OcE4Ly8!}C7?BGFa$VQylj9cGeQJ<`J#vP!i* zHhY(y&oF1eeRWQ0n<~3P&ZiO*qn?wIcpk9eD3W)L?T0&MiJZ zaoyD$=c#8=K#t!Zu1v^1TgWHTWKEX+k<>o!ziX9$-( zA?|TqcMJSzOAS+0Esu<{3X>l@H_U?C4IiD5J?w=OPmFA=e`E zB`5z)6X9%0&@jk@f%e{T7c_nzssWF`E8s|_^u}+m;&}f)e7I0<8#dYOX!#W)xwQz< z?y^**WK!8FukJYa1s?x-sds!Br{^b!>Wtc0r)df!7w_uxUY@2mc*fUb{CkC|ZT6-8y$lIp0oy}A!F&eIQxcBrF1l@b3 zmPr8_!h#a66_laMKIb<9@+^X8g;*7k(RKLAAn1A?6{u||U(ho8jMSV_q+)ilkLT|b zZF4}i+F;`We!Pg%Za5#me*I$Huvr-S(5P>;cTy$8T6Gv&(7BaZCqmd;`n<7x zmfnXw3U-)lM+UdA(p}rMQINA$hTCwqQ`{3^39NFD`Jh4-9mbi6%EFl-U|0L+8Q86Y1#rHa|ob0n~;Vt@AY;|DQh zwL&cuUF|T-K4zXRdqdaVedn^ZAKGv-^$C+ZTEp@7W|Q~AM@r0#lT1=(n%uH`#;>t{ z`t%(%kusbUu|?MEE^fM>PWPp4sTos;OeJt)w-h93%%4=4Ij5RXw-|wGElwA5Y?GE8 zyWf_&5p>f?r?j1Rt_bgNTJ=P?7GHT15LEjPzUD$d8Em^Or9Q>X1RiB+)%K3KeAYsa z_U7hnmrQd!M6QMBVcju^{~3~?@rVlkrW-u1U6vYtIGHOBBDwKkO=E9nWjGs4Eke~s zJ_+p@!ohC(rQ>$JyHnal+E0_#mI=SEol#gU@D=_P7oRa4lflCQdL3Zx>Qc<14kiu_ z10HOyqHCJ~9i+DV%+cQCBw0l+qr5ysiTTZG<*=^HLHiEuXl}#7mN5UbyNGDJc!S0p^6F=ClVkjo zAGEeXUv72lJm#EFes7VJCq!u%x^vv;=jYt_yMW^p zw6yQNV6<_P*MuVwct`=v4h(0P<4_%al<-#I?Wf|yXTi6-a)9!%;}Nxy*KKa2M)jrN zZ&~)Ve9|ga9Vl|@6-j@Oc2SC5k%Q-zhvv`0_KKvjY%xzy8Lw`^kpN6v{d@P354wyJ zO{L|0jOnBmbSnH*Ez9FsXKqv3@`)e|h1sLdFe%cj9XzA9TH`waC;aHJh?UlxoDC{06J!MDDD_qj5d;nUSizinP&#C&^+Jx@gw{KQQgRyPcpDB z=c7|Q)N5x^Zv1$Z>Awm)Vg0x3wR`W+A9*6psnVe>&X&JJV}jNjpQlQ7<#ja)tf@vG z=|yzpul?KYvOUs=rG?oT2}#~p`-cy&{WT#ZUSc$vn)ZZ7a<2s7D*Uu{6AJ^;-7;GdmUx}L(^R)P z+HfY({<1YS=xF@q`K$z;Nwf%N?Pz}FH~>kFjw|g#OohkHb2I(r68p8IQr$J(hhsp( zQC%Yd!a3?^b8lQ_&u_9Z-@@(E$x8{7Q@S5(EVMy*ZH$1BQ#(E$~ zE!d5Dx4OW(OMawF?)t&qm;rV@+}){AUA_~!xT66OenpA%hdU73pl*50WXOq5DUzC_ zPE*h0I~;T@MO8nab=W~>?~gj`r2W>m*KK|RuGCO119DUh@iBmh-2Q&ZYUq`gD5D|? zG}Kj^H)$e(rYLQjnqeXDeX%m_<>3AC_`+XiIR;p5w*A5o0*)67Hw#(rX|N*+9i2x zcS}Gr)V7k$C$m^(+jmuec)0ENyFP6d_0qfI=CqSffvkt#MDs6BW_0n;LJdii_#Fkw zvcgQ;*YmKKn_>m9lh|*$j;LTnZh*SUN9pr<;c>2>Zp7LB`|LV`H1-~?JARb$D8lRXM@-?$6`gU8rPTUNhU877vsSQmN3$tM6|ggs!41)jL)ur zH2KYsYIFi2-e|Rxzd#o_0`w*J5{C};wwO}*X#cL;@ z@b-hqn_8T#s|6#`F7V`NeA@oNtP6<(MVFJ})ggfR@7_Py&ZdH7*<7EDt)1;L>2`g4 zCMTmbpvi|shNIQB>kiM)ZFuK{TyZPNDwts|(nW;3a;M#43(s>Mgr?GRy3puW{b%WR zK4PvrC+OBj*oy+svmtEJ=Dv|9*$`pPu{ojVPYP@jWnPsFM1bQqx2Ft0)P-QZZi>U1f%JkBzbp6|rm7I#}(pp8Dpf`CA_b^E}WLlTB68ZAgeM&=SEu zKb;Rf5ee6B4>K%rRi7PU09Pv&fw-8TMM2~5#HJmC3OPJE*yp|pI-wRX@wXqZZo_{< zV)z`t?hFUhPH2YygqiksGOGzqgKS460JI2bLYRS%yjDYE0B#{>?dTTHb}gDuj6HIa zc^lzTh5&z!1yQj=oE}V5_5W7VY)S5vvQn?Ei!8`|w>djqk$fTp~mqwt*8lvSpjwP6_+qs$-3lsN*HG*Mw8H@MotlS4Hpoi(%!b6k2gna5=6Tq z$Q&;Uo^Aa3zl6^Wk9$009ITlrhdZcZ`cVZ)aJ9%gr1ew?SGFf&23YEV(js%Q8*xjXT?njQ1e5!^l95k1E%Tn1Qrj*! z+H>8Z207yzzGFYnvE+-A^Xw>>NpJc6#e)d0I(f->ljNQ_;**d5UPOHI46vokB&p=n z7O7{t<>sm5x8L*0m`);HGag+|?{R_`>D)e~7i&|T>zcNJtj}rHV&#}>!%4V#-alFw zdG36e&Wmlox1uH-Yk(sN8AIBRMT>Ns;VC=93`3|T(G_Cg0q%B8DpRYqNw3IBFeGbr zwP@ZD&o}bU2NCLGhM$CX^6?`)z%9YF6k%@RoP=ap4>usbu2B!YdM<`G;A>pV=f@AH z;pB-Yw+yznJMI3LPrCDing9Abq&sh?ABt@98?T*{Z70LeFk4WmwwbT_hlmRY_u>bb zp%&(m2=DrjbeUuf7vQ!N6^wDJ>E1+XrKYZNnCtF(u))}4vp)Ng z-O0a)8pxEm0fE`_5MF4}M&%QzyZ zy(RcDoWJE?P;R##*iM@ydoR1KFykk@W1U%epvfnUWfMbQ<~&D&>w3|ii2GS_u0eGe z`Kd+?Pi{3#sxL3@$#MSrnimqSyO>tBb#MRLF;va&RB6KUksy+p<2O28gkNYY{Lau? zPb%`cj=1%4=N~@7u4-t}_SLD@>K1i!nD(Y49ocI?_x5wpaTw;&=H_9d?$;;-TuA|9 z{XY1)y1T2L!DwT2$$w@102uHQLbgz*c7lVi)_Bm-&)A|0dff9`^@JRXqcJYLMC&odoxqr!b#9A%($+@ z%?%iju4+Um2g6vTeJK_z4Ic1XU@763|Hg}%RUKagmp~6&!p})$`uW;f9@2;{p1kp2 zcs~Hh`8e5LuF!aH_~_rIp_R-j1(n#b?|ovnZV!^&ycEADG+`_oCJtCjmg?i{D`7^r z37iLGO2*fhfLppqiFi(x&JYjX(*zkWDb4}prJM2o(9Ikw<86h8B-cWwNDqh0MC_XB zZSSm~?qDZ@nr9Qah8$O5BMv9rfk^3XF)BrfQOA52{zT6qX;%A8V9r%DVM;raiuL^U zt5mp-S@U6K(0P}s;~g>2A5-tY(gm>J(?A9_E#Kc>as*#ZQuLC1_Jv4;Lh8u_z?N(0 zBf=H^v99zJPZJI~#gQYbVD^L6JC z6WgD!mfO9&`5}~S+o&fTe%fPrB|N}we)FM^A9|aQlN7{b#`On7Rek2k>Pn0)m7ccY zV;HvQ48!HbB<{_QmzQ%!?=lQCC$$hc=229b4r(<0wO-Fdj%E#O62VueSA-rim}k9#odN{o|vLwRW_mOZ(&Vo#+?{Tl#F zH15iuHCJ)%i!V+7*p|+M6m$KV3?OG+?U-xpM-2_dDViM1h+@%;2VTLKT zbcKEtt{M`+jDKwB3XC@)P|g<nI7H`>m-7VeV{|a?ILB2`qqSK&qBEfGbrR1G6a$?i%26 z`+x^Sw=nlm@(VxA7_c#;$q_ljwf14{-341~Qk0Ys)%x8WznO(xT>o#@$ag+j)PW_E zyLoOw`p4VwArU4bFiccSNH(6+Y(D1{eKdI(tN#ZBey)z^n2E|cb!C`I>21|D~ z#?Cm^d_I!3GAB&bO^YWG3j?1RO=hr1`o-6$kIzm!{n#d7kj)PI<5e#LKs&E>YhLmw zmF$codvyLik$fb?LsC!niMKpZqJGS8c;q{w%|IVA;1VVka&s^b`JGqsY;ZJt=O)Np zjhX(AjN~J4`I~3?v-YhEKxVoASK{$nJO(W#-4yYx(Su2wM;nh;u7h(sL{y03oXjoa zAx=tjct=4~4ThOjHB`wbUHiBWfCA^Ow|vOuXJ3V;P1RS6IC=CCpV|?g%J8|p2e>v& ze`47-5jQW_O4=tdcj3auag-Jx+{voPld({DRCyZj2u7=)i zcp2vIUU9mXl?^cOQFNWaaWaQY{GSA(`SkYolHYCp=xpa?5YN&uMRq^yG6#q&k{0Rq z8wKYksynJmH=3rz3Ae25&o8;Kez^9wAg`hI4e3dE*vV;u>Uk-j>%5FYI2e6+>9?p| zHDA7b$sb-f5__yDFGctEPzCZjlz{KhUSsr2mT49UvEN?;# z{hZ~ABEvE2FL0lJ;CX#xZQJwtgI{!za5kaqWMBWS;%% zDg_2Df!Fu1vFhBiBkp<74G zC3$TXY?D1cE8#~r7`X$O0co*5tFj3&%0(d|XO+aSO5Xe>@daZpQ-672*PPOU)Ik%Mbqe%$p`jh1Cf6%OEqe znJ{@ytWCMHPx#4uz6l+LEnXRA@Y%I+Ee1i7>NsuRA4urta>g|k;u&Spv_9I+9f0l% z2&P3rUWRCxJgIaxZ^@ABqA}IK(&y^H_iNIfh&ssH!Ssz890byqT-7KG){S?Fx}Up88vO_y$%d{P}}F6FeASbXNGB1j(%!tJ5~&Y+T7m@^75uIX(Wjn*mHMg^-=P6Di7OEk?E;BcPeU;0a%B5I9V4ZY_;y4+-zP{Sa z3qAzjEkki~tSkjNKRE*SK$%lWv3nyCC&V!ACZZ$J)93T$A1ad-M+e*_`tBGDT?;Kk zyq>}42a|T#l*KrA8;G#ia00!&ux2CIjUGQ z>Mvr}LyEr;!u9R&*QRA}IwlXp_ju2hfxze6IFEH4Wlu8*(36Fsy~*{(SzD zyDeTD)79iUY>|tLUxkNcPBrcDXpDirzJ2%Lrz<0XtwY@oIiv7YP-F@|O&4r_Za)lB zx_NIU{~Y>#(?u(V?j+iDE1ya%%v6Z1*YYXUFdbkGFSldTbn$QKH(>3|$FGc!fsk(Q zT1iQJN`z*+{ovw51!T>wJ~tkfUs=xVPtIyNOrq5_z+yNg2`tICB#VM>Lq>f9eAfau z?F^)A)4F7kpa3KoquGM&l|+6G;ardB$}*5mdQ`oFRw&(!F{8|I?(w2~k>Jfs5ZAc0 z^%Q#GqthJ{5o!6v%=3g>v0K11*FFMPfx8ZC2Ofaanaqmn$lH#n4p*9=1KX5$IJ%JY zHUOgaLpXroS($l?kkVvHuNPBq_yH3n;R4brpAPMqNf1fQYmZrZC-0Dwo!9p%YqFRuD+S+AAXguL#7fh?mHcSn*=ch1jt>TtTi^R)oz5y5_q4JY6 zZtD58H6JMVXJ%Wa{@9yHV$wesgCaDZTo_QRq1Q~mSPe(mQGEFL`j$5iu|WivZC9Hh z?+Gi4k*D)~Ma6^6^Z@;U@_*Om?MT>#-`3xjM;Og2Z;QjHlkh4_cTm_}L{-C5yhvVx3+ zwv^1&1rYzNA3jBdA%xK_;1pa}i^pi|Cj-o98jXujs9>^e#z2zK%BoPW6!)VQmS;lp zMqrx+a;WXq!R4lP=7=zM#hZj%((W?Mz^%=DEC3lux1e5jD@9Tbz6qC)oFuRcDf3=m zCMtg(r5=v$oWoqUJs)?xBz=5pWiFZ(Qe*Q&vg+O1ET?QBAA9M%Pq8$?tp<;VeISR- zUu)rnxmd?Z6I*v}sIR*5xH@!-3D+W~0CgK)J03pj3xE=(0Q^0)M?W_+{#GGAPXaaJ zVZuqM)*^EJkXehf zrFVRyMZwg;FLhhXm4aQnQ-n!6iM~ofG`V#Ip~19d;KJEn0Omq*s>++5pP%v#oE&ND zHrGQ&7k;~%pIDq?#=K1Zy6CyBKnR2p{i$g{W|UXmMm*|DX5ce$_rzYjItkEup|ubh z=+0_1CxmfVel*yGaZwsz>v`SXZibY@?Quo7n~=q-tta8OJe{E4$a|sLWc9u z?!2B_SU)@nVy*RSqPhM!LzzO#OH^8!y&^B)ik<( zQex4?N+Rr*PFp92SZ~T^2w*h#WP@cbCG>}v7t1cTFjS()toJ-p5}SCHF?8ISPcbpP zDY7lXL)DH=Lexn-b|88=2ww}2)zj1S`RARN%qr7_Lkqo4Ef;WMcwyiDr56-w*idpZGq`ao1hH^f?bWXP?^@Y&d&nvfD0CRRB%yH=F zPtQL0mP8Vmpt6&L;=I0c)g+B86N6uFOdc7O%615Gp4&~b%ys?ahvz3R1~!}FXZz?- zJ6g~bHitNOxF7korppSgL>ry%aZac5|iOxE}c}63h%I?Bzg^Wd@9?G_P-Yr@V$qTYxBJt}x8w zs?~PMShJJNLsSjggk4tWldC)oTyZgDsTk=Fz)$Z3MAB5U<@lzpAECU1B6p-94Cld}o zCXWH_&f&&2{y$C60DI|lEYW5l?Q?OQY`mMTNtl>TT&65Lcgk9`5D54kr6%X%-Hd3~ z4O-m3TcAV+(;PBnm9x1fb`1b>(s(ElgrRNtw-6=YS^-S595BEcW--;oYT)rq#)F~x z9|MM=8fG*J)nd(+7R`yiqhTgm9eoDG*wPPk^HP5H|51C_%KSLYIbGCR) z6FCDk(a4hKkYso?e39=kmb1K2QHk%4uo@=zlR zt`~~65OWbaq&R9C^Bh3GJ;qT1XV`PtypLh!39dT{Ra?A)TW}plg#ehPHxDyG^Kkno zDU+Y-%@ezA0qHtUP#JTh7@#_xTOAx*i^Mc@*ufc1KC^So;V+wE4m4uHW(C_JwS{jW zv1#a2^9Ds3j_!5DNqUYbjVM3hfQlF5FiG;08$3--u*eq_~`-z$m3J_dmeWOHKOg{P|atOob6web5+ z*W|jG`MFzT$z?1=e;>)#m@Co|G#M9RR(QkOT6yVIzW#7~XvNMFQw>euF-vBbG;vSF zrGeoYg{NpKv~=w7`C@t>BWFdj%+u|{`2W%Mr%jS&*Lf!D5#jC;kweWRYQ$6k2m&BM zf&>Rhq$pA(WfUd#+}C6#we|fY_rv`I`gGg6Th^v4lPKx3r8Y_Imc&^kK>{EqVjc=8 zRH5dqtg6h62zQV0`#kS^&Ph+OwbFCP+H1dS*lQ1GpW_}Lt)f2a4ml}iBJBa-J~qE_ zLTf#PEO?g;G)u41W+gcXBA4O_@);4OL*rAL9~>-@M2B=D3|Ffg$p0DiXwMm%H8L-I=#Us$IWNT~7&PZ@}k_70|6luZu2`v^-T z5$Y@i4*@8$JS9zd9GX(+#Zs>($ow2k0U?G;2oWKK&?*r|mlwR%5KLQJ)=5-&iLKWl zO^%fvJmnCBVrLh^#$Qqzt%A)OT=-Vur?U9=qA(;={B0^#QehdLja0w@i*fkM@q(~~ zgtFdgikTs>j&ijcSc#^Vy2ZAeu&ds8M)zEy_{@7wcn9VVP_l)k&!w3tm~2T1+w#yH zb2d@3Sit#C645iClS-W2$7)$pK%*$f*MJZqToc9Wua>0`Z2O9q4BC&t;L z@-TLqaY&6GUCh7~Nja#D>Zrg2n97NaWGDYzQveiGNl-gsjCcEZM$uk`8V3!O>65<| zNcw7Ox>TX7^)N9$bR1q|S>vsifUy#*rI#H-GO4uM5?F0gPE81R?NA_xz)VyX)ip3y zJ6Lfv>P{2vwl6G~rufr7(9q`+eWH=6;=t#_Tlo};R(7m&%jaeXA;c^#ST9UWW?!%w zV2wId>VjvcZ_Ww71}UNHY9s=!czIG?Lr%sEul(SxyMt%h@L#jGt2F?6W1wz~#KYiX zh$x@FfXOReWPYpV>;R0**0$4kRWcN>?aBBAd_sL``DU15?y1Awa#;>^+j% z!*lEbU>k~g@L5;7Xnts?Lj=If6$2*m3=c_f2nHv8mGEzzWA0S;YJ}m;Nx!(A zMx8m#zi)FIxnlW{&XW7QrA zG12Apv)>y+E%+t!YwY=KH)~29>fUd_sqaYTT_d6;y=bM6@=$|OB}3H2tyY|~4`@SL z*I@Kc44ga`3y_E~QbL6zHJew{K9CQD2-4k+2D(TReIAwdVkW5jhVyj3H*yBgZ(wAs zli6CDg4AlZOPJ!}TSZJ4VrP)pobFd02Eb;#bdfh&`m_ZwrvQb|G(oHYog=?*ZrpkxxhZ*xt7H6iL}g;G{dnee4n^)x!I1lq+z z1p^qv7+R|WA=FByE+zOTwgiAOig&o91YZEvSc)lHBMq~4if6iTtJ(9-01m8aQY)t- z<3M*LBB2C;9j2vwRPZ%IylDmFqJSanwlb{7i!ifLHz8V^+o%szdCMW|0Yi+haqhsH zhhfzONE1wxjPX`0r!1j`a56#(FIb&nC?PoHJ%Pd0R|yO>3=K<|m6OY82>^H)$|kL3 zTTUHTJOgBZP<3e@6q-?fR*Qbwk1_bhkR?F;14eo75`bWy4cgx2qCis)LxUnD)?x71 z@u4BT!zLWRUQdP@hy@$R+gFWvW3rQky2x}Y9zeg2!q(6x`)Ms;3JDAVn5t0Sr2^Cp zz_f(mYoxltN>n@T@kz7WAyH!%6)uZN#tBA-G#M3ys9>kD)h0Q~4mk`ETD4DE431bb z5LH^M-eAf=gRdkfKd5*aWgJ3$Xx*k^f>~+QRA?h(HYX0Uql?V!iRumz zsbPp>b~LozJLmQSURm!AW}LdPKq5IUvNQ2QNIUa_(t}QP$*7Z<;8`J-+LiCu8qkpo z0WNd!c{x>#n%TmOo({R2LUK(wok-+x;py=BtybiR(arC$H_BYFEac#(1vafNTd{SKBjE%+(B(cdcnzdt(C+<*W7xurZJ0zyb-TQ4Mh0ILVE<5)xxfD zzGYFGE@Iqn7b0kPO=42J$%1Lg5Vy-AhnOxe+6%|%L2^GN~+fSXBEaKri_9B$@Z zF+B^6`wlen!+{1unBEv-MobF83V3R5W`Ec~az;jGV)iuvSmLSYhRATw|jzEbQ zOQgCm7%~KJ-yKBoLnN$%J_fdRSf!auK0$Ho(E`_1jOPLj&4;&K^a7MBCgI)Hg6C9? z9hxldON`T=3kr94k^6)@-n}=XM5Gsg+ci(Vv6zvKuGrNNG_)%U}hame* zChAC}1wum8C`Kcn{x=2^VkFv*p?JeCtqvvBFz^_10b(tZ;gcA`BbodnM?jMbxu2mG z!jE=SqjiuE6LYu>rF58FqN73Vh>VLwYN$n)kkCzX4w6+dsgyyhrZgKWKUHCnKyBJ} zS4o>HsVS)HmB5!lLK7Bh1PMKzErW*P{LOr>^;$wo&tU|&g# zUOJ7{bYE}!h`|paP~lKQOGji>$Ct)4&&Q}d{?Imr>NcKBLo{>;51u1K!ckjE2mp?8 zz@Yk6E?(Rc57ouiir&Ou_+R-&O# zsH-PW*Y+2Ohuv>*P1SoB{iQGb@bu8f?SOi~_0VD35%B^^GP@zt!At^t?Jwp`g1(8a zZpglQ*Bs*^MD*LI5d@aZ_=XO6W(YzeKtg)e^KriF37e8sIUY%^>pbMRIWSJDtcSr7 z>jZ3KOd0~{G~h)QH6%=jxWy&;7?x;Tvu1r@ABpp%+u5`c=ru=&Y%GHi0>fH~#B5R} z1WE%R0X1c!MxIbTf_vW&r2D3aNO-&u$|fIWp^dZl9I~?hqmrS*!TBD9a_x963p;` z2O>QD>)mM+jieEV-XRAw1w$9$(@qa0_ylep74VeQ_=#{bg}i{;fq{@<5I_m})HLyw z=(3v;9ayite$r+zYblIedQL#%L(&cNP)Cf(X5IT42{Q>E-Qjm6&huCZW`3|_(h*Pg zItRu99z)VpA|cv*r)T;FI{Q8)t{W1HlywIKaW5Aep|tRmf*(^VDD7j2Dsre@fRwPk z<9PoD0eBFnlF25W?C4Tw(J(dQTZSi-FQ=-m8QZ4kbX5J3^n9nDOy84+ac< zq!oq|M+HM}bmO>J_yY{BWlHdFgXta#YAZDPqTGE{NeK_p(+Vd!R4;}Rst^K6NYNYS zL#u723Rf*7k0Mn7l|W)L(2PC2KdlUoij2Sjs@^7eTBUqo4>G5AR(Zh?$W~$8<-7>V zLkNea>|9u;>-{aHn6Ux3lSd$49)d*G%fLw3VSzWdgD9J@Kcc4*FEJ7rs;n_`O(Tf9 zKt8D#Q>vtXp)yG5wm02L5yWiigqe)&^2Ao%5)w6iF6P{hVQo%RPPM?{hxp~SS>22L zR`|fvmpn6~%B0H%ZuTIqeW(xxVUDrnG@QLUO_puw+$&XBzp=$ncmzrYP-s$5(_j`; zh4pN0Yo}bhncb!v7cyW|Uy#rgjoVZq1Vgoe+Mn?7m}+aA;JYXaC{YEby9}{6bg;ne zre`F?r^{G}$9M@hR9&N3BNR$!>Nvo%BNJDW)v0XsO^VmZVHoHkJ!UJQ>JiXm-#W15euJq_oMAgP1*z{DMcYI}3PNsAM6J{ZeAN>%75*R(b3 z5hLjplOaa5oR1V?U$Z&u&y5Bxj-K-cbC$cv&1}yDH#zq+a;yj1n9Ga(3*zgcTkn0d z8zXt#$&D%FZGW`yDVk(5EqIyq3=Rp!BQukghF?^HynG)3zZ|rZZpRK4U-Hg4C_9xG-wVR_Orz_I z+4=hXfN8Sb=K_!}*kwI>SlZ{U;gGLDvm(q`QCJx z@p=$tpO^R@An~GK-~P@Ymjz5n2&0wV*(VKV3r(tMS&97;R|HpBM4al2#B+2__u1KL zfQB3Gu6ZNxv7_HX3DvK+QS!r%sU~BXIfUG?4$(@LYcyG;nx?Elm%DRF70>p5**|;U?q-U8GhdC1Q}QD$J#7 zoDlY5ktoar79ZnSMMzaXKE&i&NQHu`DfLP>06bH;K=iG}^oY|J)2e`!UL#?e#&&aT zYATG;eLla(5@hebVd2I1?IwsJn=c6Iwt7uLQy(F!lvS~sk|jn}-B>Oq9ES#DNi|wp zHs&Tgc@`9CZ4PNk43sq0=|lw&l@V49O_a{P#G&!7ufSoND462)XV@~;MZPNpTzN|* z6QE4Jr*~2@{MSBhwx%3-k(AT4pHxtwPDz!fAw1SOw<#|467?Y?u?Dq9iDJi{ zDZpeV4+zmhNRy*8u3wG#)Wtz6fvpi>R8h}G4Ge>BU=VUJbP6cuSZOpHOd?dD1!(Z{ z{6NYJp$=dIqna+NM_IG6aRXyt$4mP&>8t|QWNxZ%?ATAc;i~61O-N2_# zL4`rE%=|`@s#J}UiG$IWqZZf{XR9K1{266d$8HlmCBCRma}voe1E!XtPQp(9%I$5k zN+}bS8ibI*v-@TYB!rW}Rx3wR25OJm)M%$xt%YaPy$Y<9LfBbyvm*!!I)=;x}F z(>$jHj$|we!g9$O6K-&T(Wp1Vco}+PL`hTQz@##<i>QKPwVh zE~MZ^Hao@uueugc$tUu?;RS58g9#7OU;wzscyu-5%Ddt@miiE%lQMpN0rrnRpwD<> z3ZZ^AraJ+t8Yh+m@CjeHBi}Oi5Sp{Sf0=@qxI4<$tAd|j_3JJxXC&!L4m#-u3CA?} zoC)le=UJPWR@(839!8rqdaH7=VH2^>VthR6^BFyyZ`Zz&;)Q^?FMP|xN9P{zInMjR zSH^tr;$Xqxb3el=P#A-Tg*@WN)CR_rDqyLkEU6;tUR$HFkF9m%#ew%y=1CE|xxd$wezj2Az!fIV*bF zbqK(t9bxSqa6i*WYTPw(@;*E~1iZ=bl@b6v%T4nlJveGAW_u`NbSV{HT&(@oTUcht z0lspy@6)J|23Jyp#e}90^gB}scfOC;F8AmgKG#&2xyMKAU0GZ+A=a@8kDngCN8^Nr8Yt0oqp%Jh0qZOkxYGur-O!;kI4~TS_QaF@aD9% zv&~)u=$i%^@xe&6hAIS@c~U%4QKf5CHNwg=LQwf{Mv4nsOO=(`HQVZhoD5Dv__W+^s-)_g%1(IWuL`fbdEBvP^w8@E%@5&}H&AgNS0RoG0Se8vMw?ZDK< zM5MIpC8h*A17A}i2dm9#WV*l!c(+wfL(A>V+3 z)egMNvcimi-Js_(4}Y8DXqc#@>oHO3vY;sArh(`;ip5Y?(jX_Qu$VGPCS<_~%a@_G z>!MmP&3UV|BB`9RF~hM5mJyJx45}kH{ftGc5KQb1_LC(ENtfF$RX(Yd5KdYUJjTGd z7xzo&d?xGZjIGzIscRDAwK+jCrXrBa*M7Bj{W{sII1;Ut)q-b7ZR>=g>EVYTEDzmr zvcGw9i)KIF>$=G*6Y=Y>`$27XbzVLg7#D91R@HPnSvzO zLp-qpsTU2BTxY9tTd|^@Imb}|2z813bCwYjPK;i5eDsYAn9afVeBsAl8ND?O=e@ai zC7XQ?ul^3}`QpGw<=j{u06qw_hx{VX&%toa-XL7;&6aGK=j%Bt`?Dp!www9vVzIYf z9?UqF%j};YTmab2x0|E=?egM$xxF}=T`affSN8W0&(AM!w@2samoB!4=j)^M&6T|w zRhZ-L#ihNy%NG~$SNHagHXttmU)|q7-fUnFH=C=o*(I#4*OxAAx_rL9bg?-;-yE)2 zSFy8RiNx~y>=>Kt)fMn~ytn{Ed1-Tg*Z$toYK874v{q+FoAu?34VXi0#>?f^>aOj@ z@#*Omysy?^?%6-Uphh-e*2k+g7Ou>;_*$Nx0l0FpJ?30>c6Ryvf*10|$;qYjEt2E4 zF)vQf_HNufK40H8+dDd2&2Qbh!p?T{)-iotZ!WDj%Uh>Mr)!u?n~TNC8D{C){N(g# zeSW;U*uHt=7`eWPXLE4#^g#X``Eo@J>-}4s`RN+K{^{!AXvs;|os+5JXDG)-o|VT5 zlJnMizL6%Akd^OTWe0)TY&`sB-m+^rQEAWq04sGGV|KObSL^I?1gF%5=3OZ6_S_(? z*ZuGV2kV?!-91@;*((hL2^W$aY>aT)!nh(+V=su%Igd|{)f}zSf)XKTcNfLnQ!Puf ze{R|Dr^nO5+;5P?*W3^9>~m|?6ByJj22(5- z)@aCsrqGomBc8_0io(ss`67Qv)e}Fyv%U`Ti-iW%W&;sI$im}#8c+M#H?TmSwSYN#t2CYxXOnO?f3VNlC+ zJAx5%ODZ}94K>}77|Y&(<@V4}<>{1;sPM0wrVqKjg;Od8osk>*=dMl#fI)-=umdNb zm>Do`x|u@u&#qBZoO6bTS$gA5b<;%&j{=nB^w0pnSCW)^BFSV?L>u_a9VxdDXk4GHQR7sdYPPGzBTqg-q!7U*qmRX49p{YkxSvzH_+p@wkUH-V% z#AG=HW1Pb@P_eMa4^uBCs%@I;jg_=w4hC7L$JZCTjwj4@pFh12hcZ&`L=wGa*6=$uuG` zY6dpZ5L{?#DC*odCx(3nicqr&N@{iJMjW}x2c{L@+S*d}U=yjb+*+fm;^5IHYWkwS+1d5$T&K?u{9HRn8D^?`ZL-qwc~8|p#ACkNK{zCxzULg}iOHvtoa)ju zk5+Wn4}ajyW5M=(_@?K%zkU(x-q0lXIXP?({G<1d9HHh0kHeF1X!sf81j4GJgPZJA z9Fxvh8!tRQB{$T~X0`N7yFCadegf4P>gG0o#gn59y)Z5FgY{~?IrkgE&o@11c=6T+ zC#U6-i^Ould49cjKyub+XRD**V?T+Rx#6?nEF1dPJQFe| z`ntc)_e-8{``ygAn{fc;IK@F|&-vt7ot&H<9&%@~=_e5Un2(omhD|dr7*+Sr=`SH4 z_y>TPjpQMp1=#1v!>YPxwmx30fB4sb_2$v>DJSoPJ&u^&^w9!`BN$v~g_|rS@bs4m z;W^Tg9IET}%49fcNg;Cx)^UO6+!}7Tt2G_>H&2;1DEhk%K>OjPoSY`JCpXXLH7AxbDp!~`h0zH zakxCHeZPWy&YZb;>+QGiy6XylvClmVixj{a_diQh34l4s{QA8~gHfN|erLm>TR zW7v58#*B-+*RdkAS++}8SALzJ&Rv{)qe2?V0z*v9^w&2=xFuWob_VJukh$$=oYwS< zi(n4b?u?MhIX`oy=iLmjWm3mRTI(0k(qz~LeGhro~nhW8D(X;I|QR}m+zNFbah zT>>C>bH+Cz>yeV6GBWNO3^78eof437&?|WujX*S2(k7fjby`!d2>;Ot*0+gRdbBWr zDzJ4V56mMJ8zHIG;%Kv*XM7q7d?T3v34^BFH}-963p z+60wB7Yo3^K=8;BW=i-OGlaDOrWRnZP+P-1FV0uL-Z(hx(-Nq3s4C<+Qu z<-pO`g(3C%y2%bA3zD!z8q&NsC!_cW7Kt1JM8>Zz@V16qsFk zq8b!QZ(WpHZEIoGs*#CzRyW`bJ@O75O{9lVWNOwv4ZhqfGLql{sJjztU0}IQ^#zm0 z+wxY`jeUf-twln$>Me_zkXjgp^1}TzG4XSpbDxWgmJrQVN7Br+iR3dGnyvzNbAp6w zk!@`g);LA@N$mZD5B=~5Du?bk*}wc}pJp%N+Opnm=+I)xFkf)RX5MZ5Yclp>pOe4= zr?(AduP$o(CvVoADLLA*-{SZz-+;kklsV2kW*4Bhp43;`AtIvZoVqxeXO{1A*~8%B zA=f9)xGQfe4i3)FHl97X3@zqZ=YYs{eZ85@7xR1%v{&qlmCqMp$;;X5Y`$2YtxmZq zIXpbt=Aol|n=$%Fd0=mz-J*#sIO9kVXL6qd&A83rJV9ca8knNX9KPxPn%wnhKHGAZ z^?bvPPd=KKqYj?EHsga-QLgaHc+Tgi8!qGvWm|s-6knW@J!CT;WMGeL2`9_d@ue#S z=Mj0npo<{gd1u?BqoZ>_n|^V4e0Xwt;tX>i<_vm<5m@?idfF41m!coGTs(9OQPH>kU2P9JXbMXmy<%FWVMpS<-RqUU1!IcC z^m6HUX41qdkQr-0`He$b@$RJCyEr~RIypHdMrI3naO5-77<&x+5gpIRCY64X0tUu3 zvN^%%y2rp zx6RGxfp1mQZ>|u|=e>C*@Y&IFelhdwbb9k}cJq|mjLXNzI6d2NQJEcbh(BkPnb?PJ zJRIEpZgp;iE*L-@!JnP2Pfu@Ly37sGA^8SH&U2lCb@rMili);3Vx9T$9Klh?2&2Gk zah`JxW|_>mI+6sI=``o)Ciz+*Z1_$ON`&C>LdM`L!3zlifGH$BqCwSy z;A>>C><7zy$HN_iJ6Li`9uM}`t4>846NPh`;F(`c8y{^DGhH-LfA>E3v6-2;faf-h zjS-*3gG3wI?r}%J02l?PAK8cnZwn167jN+J%KhjYaJ^t*b>^9pP-_q^s=D_svsz2K*vk%xdAKswsee5>bGyRI(TzG&eUQTtIibQpw7UNoH_o2K~1XWl}jg$zCAx79#pj9N)yt%vOY(W!U z)prIpKL@5-bPyw`pje((npze^)2<37)v8Rw36E2#5=w(H7GX}Kos$!iGDz5|Zfn&b z!yPRMAytHJf&foVsKZoV31tCD)YYv?1M8_a69(7y2n-5}f5wRC>U!TBJGie3!e|AZ zTQyS?q7|BQ6?e`DgmpxJeC-T)_=qQ=m4Is>s&JCPd+KHy4?FpgD9EPH zKvuXHcT+v73*i5j3vo9YF7dSHdoqS-9Syt)WodH-R2`+kQOQ;(A;ZnJ62X)NGZSh& z3dE^M;a%=OLOac&*9J0D$Vf18Ah)Ug7OH(TrU`hz}AIUDJurd=N+4bA> zwxmic42gmtFgZiQRBpzGg%7#A@~Wc3$k{MieKiOnK?_}&8manj35=%l6;`oj834oy zPiv`iCA=6L0qmD94dV<=$i@RBK7=*OVkoBoDB)QSyG_W8r)#mH>k$vX|KSh)XHNG2 z>L2~H_0@aM_vV|~0q5Gq!IC=xvdXF=NvB>`53e2{F(bK1GkNPcAImmV9tdU(4>Cu~ zAATb{(ffz!^UWK`ImE9x`4X+aUYT6ytFrBrd10t>AkP4!6S`+WJ9ZJuz1}-;lc=cIOK=cn`=vA=zxmB_YzO@D>mDBAOI(s$0JXTdCWkB zWK0_jE{A@`kvp_(b6alYTns%2;EFCYprn9vojv0ynY6I6ab9vZ0;YNot}|JPmQ^sVWbJeDPad@ zEAE%_*{P$wOFwz@m5;ss>5u<6|IM36%Ufsbd|$9bN&jF7iu_=K;mgeOc!ZECfCPYN z*(|Mmlb1rL)@*isd^}(Ht`x0jXQ#(U3+@RsjgyMa1}KSo`|Y<+PEI)aUAc1Qo_p@; z$2{<|S+jBY0MeD+FUp*8-1j5<4Cu|9x0vte=ciov@4D;m%a`%x?>&=GVDujq!*+`K ztcy`z9{Nkt`J6qcwC#7l`|Usd(?7d@{Y|>??svcYum81Q@Y3gY&3V*|4pGsB-5 z7H^%b4)z&g(&Fta2`qN17e0V=!Y|hp!M~23{k*mFn!^NC?b0@~Z z-r>>V`h>gi^P{{eWLt;@y!^2krL5&UX(ila+cFMakiU;Ov~*T4C> zzxGo<`4c~T>n0P)4;j;80(NK^;M`W_pzO%e#$ky`#?2mKFPDdmU1tP@Yn-FUTKAXL z{Q6GsyC7~~=xE8jKllAY*B}H8kM&Z9P9fxWg@AR?QC>2C z;1w`Wh3jrH#y2G>zW)$W^pecBTbQ59X(s-I~4`Sl7)xLzLRuwvewTWoQ1tFoPLTC`? z-~!+IgE~B|RHw98UVC*~OyzcVoNtsRgiRgPVU7jQ&%}UYtzGOKDF%5|8YeY_jD$*q z6dCWk?rH%VRK|cQ0A}KIv10~nY-}=tg&6+NN ztSMjsm=Z{Sz{?L*YnBp12vM!X5>$|F!UaN@9{`ssFXNS+{2QI7>bLk@`9XR)>-!a| z5LIGMqYD}MP<3KYUQHpO9e1#ZruS0U-x9KGYv#I5CKb+|kdVSF? z&SUKncw*36ZI+BMBikxG5~giO*48$psj#XKts$ySK7bBZ0c8q{4eV)K;1r$s}onsbWDZTW<=@_jqQQyNJEWxE5Q!osk|LO?jC4!?UJ z{?Pl2f$lij|Ih#UUtNFTv77tL&EBEkMLu&&#opGp-rUa#g}uFB?M83Zsmp}rBUomw zQ^*;w#1l3c;xGoT_c=%UG>((A;dr^Tw?@dZDeKw3lOP&=FzK}mBQC0}4Ue8lhC&^= z;O!fJF{pDBJcQ+C)n$`WKhU5pT_K)yb0HkILZ2&(MVxfNS=i0I%g-tuHU+xV(K1r( zv9dgPV+Q~SZQaplj?}(iZU&+lE(ZLSN3%qi{klLb+D#qPFRu1nKbctcix(02J~f%u z2>tb}z_yYIw<|S^&q}4`Oocvj^F0v@$w=aOHxVKWWp-yI9D6=aK_}dE)0oe7pe<$eapD(l~jyv)J?`&)B$C5)v>! z-;#3)H+$=|6St`SC4KbTtO1|CYkPlod~xYxZ+`EWwqN`4|Kjhyak#kUr)5kvM^)BC z*X^`x&~Y5X5H{~4GX6y-t|FGKmGL2{LIfh@x&9H3;nJ`Z#-QQP|t{G zr<{HcUU=dA|JVQZ?_YW8bu3-Ja{Rvcec%(H_?e^QBSzJa0L(mX6BYP8F?F=*`*L}( zI^($LMg9BFzwp2QqyOpAM<09a@yB0({Th?^zxX?U_we{Q?+HNOC9XK5=Y1!7X8_zS zY&k_?jYbBFTsn&6o{?FdtvD&8>1VFC=gZ|{eeNDdiribdm0EMO@^td%+izdFa>R|= z=7PgLH|Gc5e4d`NEw~4JVBIh`=)(GZwpy*ZYxqxp@SlzkFMs@JK2F}jbMwHN`}p$F zfBOAT{)d16Z~odZ{`4n)<`+2pbJKF^@R0b3%zzJ%R=&f)5mvt>l*xWLPFMQqJxQKI zWp+6?xNtC|vs_?&>xOFsJU1$IHRB9_=#OlgJ^G`|B%vhdl)V>1LSKk>;who}qPi=0 zqFkkfTM2STY#?Sf8S<%BE==E95&h>z~K;{%@Ju>>lgW}W?dEK_&#dSxJMR2zdmiqVWtyg0F6?l|$IvZIxJsWW#gPFkvcY^Xtu}YzPUl zPVuuFFsYP>5E29P7V}gK%a9E*Xd(pPjs#%vldv%Ux5=Gzj250i;m&)>ANRoNo6A`T zXb=OwX~HOSe$r+T@zSzXEvPZHiB8ahVOn#znVK9(7zPnM$f^tAAWKaxO<@6{m(#I3 zwE*v>EvbuHHw|VKJrx!YP>n-XDGx)nd>J~9`cy4dg_4oN0hTKVJejIH{3cXMe87|( zIb1v#sK>^@(BuNj;^LBqy(WbK>_))-{Uv=xZL(|_veoi1H9nc5OkhJR zRK-bNrg(_f2?+5Z0N{=v!i;B4;zo{Ra)>fY&W zZ^bcvf4^I z@IF1`wb`cCPnqqpzBy=c&LwS}o#p+Egoj%stPN0HU))K2yMNe}$&9`Bhuc4S&-xuE z1nU7Mhe-g{tZK%9DhcAn0HeSPWfJ86Kyw;^&wy1CVN7^r_0sD~#N0V&BJN>uMs#w7 z4+5xPT$7Oo&;a1EN!J-~bg>pm9QLNgk0wg-#LG0$3e;;HKRF>N98$vRxW7G&$Xi&t z!aco~1sH~L(yw?yooUhK4x2_=acQrqCML)fwB_uluv_r33Z z;)y5kx%b|eUw-*hpZXLx67PEFyHF-usDJC*-}-02@z1~e+;i`J&ojUHi@*5MANlA9 zKlsC(hQIQauVCu2#~#Bnw*h{#I=_3wg5(ehL)^TsT)Fc8_kG}NU;V~wufFu(|M&mx z2j2gI1t+rH<#Np>B!*z)*~qale8wuP+OgVtSpSdz;Xl0a{TKfJ-~R_6{>YDfb@#QZBGusK0D)^j7xdP>C z$`o{m;acUp3S^!WJom8Nke!~LdI)1qFcO?7htG{r5if;g5XqUGIAQ;DDP(PvYMHm;od43TZUHO$X)U`);Dnfy@`| zDA1&vI&rQ)GA@u2WhaTb>+RS4oy*4LUYY7Yqc9L^>%89@uFASa%0OVGlj!gB;s#lg%miiJ=4! zRS3~jgy1I$e1)yD+h`FBafF=KGSz};?Nou8B>W%p$xp=0do7@C&}@C+&87=mLRm?= ztkf=J#17V@lFXqP7r`LWWNd>rtRW2$No%}lQy<5i6o|+niAE96ycDrhJ<(HOo|!? zq}@<-ZGxYgZc94)POl-u9XP7kWC$L8n8V);POpRqOC(6?i`>9f> zKZf(KrxGtM1Cp6EYGKX*YFVI+KdAH!9Vr-WJJso^7g4IQOuGR(eAxmb@w4MXcyZ<9 zw4@jXMlQnggEK9{8ZG`X4uJ7+0rqeVfMXM23U5_>7?va>NsoackhI|$S7lo{(=enB z%xO&kB*6(}*HJ`j|7maPR74Y=6zR_?;_Zds25O59VH`>Py1B$wyY45DXm+l5u>D zPj0+<{h9Z_kLryZHy=ktCPK2tS((eQHw??|!QPyU(c3rPe)HPv zci(jv=jgZIeCwr`US5#V{GP^}Z@&5VTW?*ta`~l~Ui$tE&#yM;N5_{gUpl(jtloP2 z?e9JR+*@zIdC%SVWqh0fY+IZoPj20M>H9A}_uO;e`OdSP60csl%g^vE<~MKNeBt|; zd5IgIv(uCNAH46y7r%e)wQGyz^77@&`}4zFr#G&@{@T?mi{nf8ot~|jtQ^#d_szGi zqw>vfa_95P@$n(~WDwV@_55J(=x}lE+FRfH=CfEhIXV6Em%sAmFMs*P7heK%e003G z@1SolJi29&Gs#>COeUgr8aOBNJ};Sp$>4j{*_{%_AO}N9({vnk2t)8_RgQ4LxDUFX zI_I)mWWyu?7XWh@yf$cKRuGc6bSBhIqf~96^@N>z=Mw9C?y=d>4x2!0d+E+X# zHi1+@HfE1vCPZrRc&|rzsM$!pkH1|0OdH0xerY3mmoI);gkH{r@>i3LXFp%wj2vs) z8M>fN)yKb)CGjQShi=N{|RNd!J}(8g^eFk}r25!}8^8cGd@Dx@p`r1o;V zRe;K)L5O&WoYqMQ56Ls5QtlHJQ)S%$+e`$W>vgCXO2nEDpDam)QOQm`6b^cwDmE#xV*tp5fWd*5)i4^s+U+QyH3BAKfF`pNN^GVddE^)g)Fw->)%c3s z>1O!UNnM&@o#F1=!BdN!%p7)aHifhnKmg~i6^uA(Yd{-uZFud;4%MtByANtRh&07n zQlx`qz`lp6eCjm>kFZFRgC?m!PIW3(b6UEn@aSaqI+`Q6Q9A6}0uQ(yqlKZNKC}!@ z&20#a#IASkP-PrlGB_y@1|#_l0IZ7?uNk``c$mx_eP(QjULWK$JTyDUlo}q9#_|wb zbcYmCW><;FQBsnlBaEQKIGp$+lggN!F~b$=cjTdVyw$0kytlR0@~zSYwF)8WmV%HZ zIE{Pq#N7mLYcJk%P(VF)Hi5?W5a+c8kWw_j8%p&We~PZ!!0n+eT$wW8T}0=-mo zIDxZu<2x&$+erugsNyTPfQ7g_%0StoW1$3i);74 z?>#4dDuAnOMj(9#JYG{FTggJ!i`mFZ=8y+-e!ltapa1z{x%lWue+=i?_Y=~K#qsg+ zOE10ng)e;JJ@0w<F zpB_=Xe$4Yg-SgsNarmiE{rQczuYdgGKY8i$m5sk+2Xg<5fAOVHe)5m$`=5XMvw!~C zKmYV+K7;F-~WS8ed<%o<>Ej7$N%`HuYUD&pa0?u-+%F;2k!sE z7d{X8D_{BQ7ryWpU;XOW9)9G3haSA=^vosk&2N75H~#rQ|KbocGE z>h{N+oR2#HkV`rrH? z|LVT`E(}zP&8qO*H!a#15u@<>Rm9urGxpLoz3bhqHLTn%8TUG&Mn${ReDzl0Z0%K-^ zfr+X_)2_8%#-y?D&g#g~!bq21cZR^cjOAukB1RWM77k^dw%U*&wNtirbnX7{ZsGaE zDZoA|XUO9cMEqt%dY!x2HYl&DTIz)t|mZXmVL5@8uu zB20USa3`Fh55}E{FiuJ4i|Fku4lGC45!`+^2H~KrT}y-wehP!#$%ZtANH~qd9cQ_27E$ z_qGFXgqg_EbYc4It&>-xAR99D2RHEty7*#zXl3SoKF!&>=IoC4(hont5*Ia6O{ytF zYzL}jy60JiCK6AKIkFbRO~?>7gVbCnLgW$WSgcyM$Xf4fbd7o!q1E&`j&vAtiTOH>q#u#>TdcQ&BL>@*qFYYLTNP{u)r&u>53f949G$;Y33@xSp)zvS00wHF%a=7qZmznjnA8k`2w zN4v?n{M@Mg4HK5`!NKxR{^ZYArzb!06F+g+-FN%#Mt+;-(VzX}i;;6S+&cFTbXIH1Ue(7)gGDqIWAA90~2OhX` zR`(sbC(k!0@BiQr?Hw$he3C9a^UZI3mt&e@|$N%=<{@Wk^$d7*H!y5b#|MA~5 zT0itdKTO)VCHm&KzWoP(@CS6~SAX?a{`z14#gBjd<8=0upZwG3pMU;+?|b(>_uT6j zAZ1RGXNP%OH5r*O5|>710wV$j28n9fYF*AFgM5<>9X#i6N_bjPq^uSICO{s+YuPim zzf-}O`c&Z_@kJ$)*pcqqksD@zvvJf)h+mtH8Rwi<`*0buAz^v~W94Nk3am@|!DyDag zPEO>=>okqSiH&kHH8QzLXcn-G8CEf!ID$%qL^JIgynX&5=!_oE)8gsw+dlIe5KAVsrI4d!Ttf8yg+3vch(?)G!7#U0|1694AfxC zOyEkOR*A(ao@&%Io->A$n8oI>Cnrv$s>e|>#wH%duZ$b3kd02QA>d4sgw!x;hMz2y zu>bHw4-6Hm!_N?*(Z$R$rbup~(C;h${fLf9oO_(*B;_y2dZaNDZa6&HnMd&njD9zH zTA#W>aLA1iQ)b9ldNc9(Z3ksB%FG;&^f7_;Xfv4930yJ%4c-MrJ4_Aq)>Rz`Ad%P= zy-;?+N_B1KJgKYOsIh6Z8du~&)3Al)0t3b~I^;^uU~)bt+(#E=bpRnx`#_}LuGYsF3#603L{Qx zJoL~6&z%FaI7^2Tq04gP$8UP4k$l=EzcXjEUUT03`en}0?|=XMIraXXzw@_WeDTHK`JLa%mO+=79I6Qft-ts8{@&mC<-hTx zAN|n>AGjaa?EXZ7*qY|JVQ3fBnG^{_vAeJn?gX z<>x;3v7dPM*>B#u^|oo>+q?h%`+xRlfA-z)e)oId``%}sdFEGs2$(jWcFAHV+t z@B8In{$I|$SY=sP${bd zQKhw#5)yP9zyyXwCRDVTkTAG|@4|BnV1*__2!Y#A;&r`B$haF(Jp<@FRDKzh$2joK z3=9MVpjY>)TJIXdzT1skySu6b;WF282uOstsp^o5>>x=_I|$#VQWas4SF2_5RfHN6 z#H9U!M8QCQn3!2 zZy%SB!f{NgmQbuNLi*Sy%85a1Qm-yF{uG3LemaA_nn|@;cXg2{gxcU4#Wt*sa!dLJ z)r+QLtbj7LHt{9Zov^5MVfo2let-#?Q%bu?Eof1L;Xp>ti(RhV_D)U51U83XuY7>m z2QrfC+m$fvpV}QP8xk7!G#w8t7kZkgT1mFzv?@@mlM0gERx(onB|MTMD=c+%kPIG2 z*D-K=P$&zN?Z%67qUDaa&saY*etAHlT^7V)WJ1{lQb+gq8wrdTR zvNItkFic=ZJ7`muryR9ZsRTtxbTIHV5m+a7#H^hI8sLy4~`Hcr2!aooZZM60mJljo9qc6=wj{PUy-xt`Kk%5vj{*P{*WJ%>W2N_r5_BmqZS~ zIw`f2ldrzwg_u2^t4qC4DbywuwFtoha9E5-q(}Mc#*T+f?P$i0Pf30Wb;t$rBEuB@ zP11&5gvYEZ+0lj_hEXZ0@$En&}HjfBI|(C>-?&+d?2Ywzgr@O|%l-{Ep`wmQSeYPEXcfd^iH z{WS)H?TjNh_89y*k?ZTX}a^XKl@iWoiO)6B7EkV_i^f_U+~N2@^E>$ z$sb4i$VWcR*$Y)dBU=zvc#hp1#{m!JphtM&fO z2jNr~i{)oO|M}NnfBi>)^hbyx8{9e%g*V*EVCUIqpM_^^SL@aJ#fC`Cs^8to-O!p8 zot~Z2 z`g({q9cf zM62NyCUPgM5DHUNlysatV78c+ZH3ZTr`$v|Q6fZT@v*tPzFyn$lZ9%1R~%0*{t}2r*tf z!txM&!4Mv3Ek6QP$4)CPX@x1(U{xjwRvBt;y5a267*$IofLn#8AdyV1^-}q+<)V;N z)(9mk5ImZyBg-|smrv4OJ5Uv&IzxcHG&-G(P)>1DVucdqq*59zkC9BipyH9#5hVs|t#~m*qFj{-A$~@Jy8**safO=9 zf*B*BBr^c;izA1L)*`XMPk1CXNN>`JJUf!dD}#iMH4jIBnT9?Ow7<`KbNS^&)E-ox zXQl8s&@D29LXz{JaYRI5Fg_LbXq9>DD+<_io0a2#jEGe?F;ZYNXEzU$STPL5+4yaB z-twY*v@kt6Rt_;~(1qYM0-^(i=#WZYhL9$IZd6TN_39BYsmxgrF?PzImCCuM zbTkf_P5ELRd!68Wg5f0$vQSrbRJ_L^IMzWXfV?G>*N5^XKi}1Zmfx#r7*76krs1%hi;RGf6gn1Dp!}UC=Z-BXVa+BNk#p00NWaDR= z=ef!z`NDbCG3onG=Uq2&mZte2Rm!zC?_Tr7#ul?J9{eS%9fBgUbr@!&f z{=>ij?azPy3$MQVDrab7BU&)?1((A8gSmfE-M?I&IYjR^zQy79y}HdYnisQMH%`dc zJhg6(^_I{S(ulZ40O)(8?eiz?_dODL%UEUM74p{J{KGKR%?(}PYh9{^jE-O zjMUC_hM-6lCRsqoij#&_=Qpxq$154scNMT)EhtJ-CDF#FOA?uhqHDIev?-A!I>D5oZb@WoJSH&i4HdFmYAr8c#!wGI&Z+BE_pr=0MBVTe_5h$^WYDy@$1&wz(| zv{h@AK%Ffxlun&wwNn+?)Y_;j!~!G?V9usY05^?9NLg6%C3@qRZTTF{klF5t8@t@5 z)l|KdpBPFAGnz_EZKib?DH@qtk!S>hHxk1OKL29Dc&pWJLi9%9XqNl-b{Sahln2F+ zbaP-NWjoqp0eO7inr5lL~T{#4u#AID-+cSRQr@j0OJ#-nwkI; zQLQ4&q`Yntp+7XMgiARwuou=&erUP6%%b)~WQZ7;5&?S6ZAdYTmd1O;C5>bT zs^1tZ5X(ib! z%snO1MeL$Opos8;p)^wt9aNurE{Fi*OK_mW3#y&U)ve|5W+H2rgrLr=lT~j? zBZl*yfQJyk`AWWZ{w|fSyL)>S^_#XeY=M??{$o7mXPonFK!yvZR{l`y!w*05E5Guq zzxWG({S%+~#83UyPyP6h|MT_87MQD7uiSI*J#SvW{?f}YU%hg*w(wvZAY>ib9~HA1}|^!*^#ps(`}3sB>OLT5KbXK_U&C3@# zafB}R*_EBugg-mrmZ19u2)sC_ylgDqdi(8v_wWAQAO7JVe&|CV`t@J`TYvu_{Qdv& zfBb*`%+LM|+2Tq~fRxO>m48Fpujs)ry~>VnB!^3GFgRp%-pua5|9;e7zxJ9#=hvXk9`09AR0(bjm$9L~I&)LY%qx7?q!$uh$?Rkdd4uhRBY`$PiT(AzVPCi`WS!x>~lHZG_S4YL46{=b>vn zS~NxIXK=iCbDc5J9g&IZcj8ryJKfl1YlQx2e{Jz6SEd2)9-g&BhzN1id@4_7=urnz zVM^_fjws6jg8^A#jYAU?55pWNpbS)4sdlOY?RJf_My8V!C4{_^DpDd_uU9OTxx%Smlt?&mPDy8wPY=cGqCC3gp~$UvswheU(PT)@4o*vcnZYD?e;d2w zQMfCMfyBmq+YzB2hL}BxphKRc|)H_=qH%Ge}IEF+K3Z>opFV z6Bw^=$q9RjR~d=9uNTn?1|xbL!^1)6HY9qSY=IM!4&l4=?}j(1CqkG6fw~(@hfm?1 zRFy=2+bPsZGEEg|mnS4JFi2opLSV=Pm$1gu$jeMTU|Ms)NPh-vP6V3j0aKK)ozIcm z&{dFViJ549qp#r7pg7`Nr9=^?VL;`Z6MIe<+CURyngvl?)Np@VLe90&}1 zcz&b>Rl0`^qh=7XQzPh7PDE&#GFa`+vvERRWbd5NL*fSVF-RUQs{vB4o^ExklVCFa z>L1}QSUz^t8YalFLlY*vu;GtGr6(YJe$5xwTjj8euF3bS&ArArCBI#DY62#+FQW=OvH|A$aZACKfsVph+s29Y9X`(uwbY%uSwq}$9Mauz2D zDJ52%Q_#9Ahf_7jPZlABGp&tR%D~ULHQcPv{_0=-#L@Bb@BZ%ZzWCyc94_s29*rCw zd9c25;|9kXs;FZJro4XvYA;`b!Y#zv8RlrU*Lf`MBuga6$4Btkf%gQTKfVaqPo=Pg zGh^XVNyZF}T>$fkhld~f(1+i8>#gUXe|~|TQt z|BS@2-{G^DKNp05#MD2Li`4UnsoWkOni9H+O`Oq0GUxl)KRjF>z4G#_pa1;lx&QgK zU;DMk9(%`?D_7_{OP0}PM3`7axL%)wbU#T-^R9xQJ%GHy@Dw{|7sTv`Km4Ib9)09< zpZnbP>(?(|zU-eEoX_d#@BZHJVENvA?=y`T7yWE~d6R2;^$0_%n5@}CX(ImNo%955 z>VRc_4f}GM+#$`xc!h%iv~?;W2BLDZMOl?nhq46Us&^(CQ+bl;W+EXW97h~U4jlOC ze8U%jDWo3=g8(`is1{7T3^WYL1f?QXC`kqDV1xnI9B!uC)k;km@%ZIx>W&oz;nYhq5q;cF_ayj-2BUh2dE5 zI*QE@oozf2yy_#tBc#>djcG()JWTyUND783DGWu*Qt`Wr@ExP_C3pa(sc8~okfR~h zx}z)=mOqRwwTZG-lnN*zA)eZ#+NQ|};3y4L31w-5wYBjhWQMex6ReoF)bP+lyIL}H zAl1ixo@%cuhuC`NC*|i*5N8O>ZBKKY86U&zG0qgo#!jIUhL8Y7S-;_aXntig8FCPhu}2Fd^8#|abh;AjGOT;MxZ%A-^{C4{79 zV}OB*gmf_uF%(z&qKRtdmEfY1V&K7)M+n(!(!78b77yB~i(-&at(-ve(5G1%@Q^W$ z`GuKQP2~Xe6&Edut!E~5Xhmv6(h|MFK2Q(@O(SFg(W=32CsajxJ1Wss0K$erDJ}+E zq7jrZJi=7YvQ;|Lkb=_LYW!4?`m6wW4PhhIm`5s5K^9xl4jpJ%ihHa=e#lGvgTDLaY08mS zOTP&cORP0o^(p1H5Y1r=KzA^rS^G5JNSFwqx=e#48#UA788bk9s#3D6oq4V`PjbVv zbBr}hP!$+p>s-cB!PkOqq}Er=+Jd0=25X&E$g?U6@I@OXb8(We^9r@aS>(^wLclPZBu7Xdl^Cqy z_}GJ<(uydn0fkgWTml!{r9Th8vBI5~+;D+J@Y$az*Hg7-c1 z%rF1)FF*gi@BNd1@=w0}wo>PKl|Cwa)*G5j&DCCh{ruo z|HQajZ@|BOzr^EBIYhjDESdnlNm$Gm zAN$ykKm72+zxkWLNhBvHr=0aU<^SgY{+q8|d;Q0M@?&SK6%k#&atVXW#iAcwa1v^K z*zqw)EA|PSbwUt}r5|w7BS*UY4lY?G=bJS*%buUEUcLHF>076#r(gQgU;Lwg^p8IE zXP>%t^X&TdH|aXJ)c4(U&;9q``@Qdd_p_h>!nHTAb0={9jkoZ6cD7<9={MoCzRyli zkB$yM@rh47_uO;8@f*K^!E0~4@$$>B{L6pwFR}hBzw$Sp`M~>b+`LILn^?P@y%>gI z$$55NFXV)ZyiM(wJ#`?42?e2xurPWAOSP~85wk5JU{fpRJ19tMLG(_wt;`ngiU^fz z14bRb9RNXM+sZsH1IB8+v|86Nl<=*x8To<)(3+ja6*hojGWn&TR4=tkSwccMldnqJ z(>#WksK)+~ZIM}SP*u?ES~4{L`7ZPDu`5&rgr+{0SX4A=B{IQo!%7;9()M?}uoV_S z@{^l1VdD@NOi8CIFI5GiX_p2sk%MWq{4Ub~C?O;@-n=1!HLX89(m_UluYxvA|vp3B#6x+m4x>bpw z8jQ}UJEWH?Op~K+vGxc&LYU%PYD5hQt<7kmfQH(!falVYtBp3(E(8WS(ajH*+0ucT zc{FOI>hLuJ21iDP9j6;vR~@4`%V;6=^9yCsQcNx0xpU zPTuqzk1^s-GghOKL-y^~GQ9K)EZfo${xxJEgC|so@1M#%cff;ef_M zz?K;poeiMKV`979&fmRx`(2w?9{%u$Pcp$5hX)=hbBM2Lez5-dsm)s8hetq0%d712 zaCzg#%|HI5Kf3R}`#$!ukKvouG^`wZbHT=-l3AUtH=8G)c=En`?|b&yXaDq1|MZ*R z{6@Y{{WG8X)TfS*kALWge(0Wi?r|_e_+jC>f6NcO5%Ml(`>k(&>o`L#BQ~)MINuZh_-n7d{>Oj($K(yfBkR&&<8%ioeq<&V;}o5rtrmPeQUk?*0;ZXu{!Wl^ygWL-|GxXb^cR2exzB&@3t#yBSHAqU= zU;pSwKYH)I_u6-Ecn=oWufOrytFL|Z$A09Vd+uGGUGyOX)KOrbIMU5#8^X}kZ7~>U z14PUSi$Pw+(q`?FbS;kngp^dvbepaR7=MJJwIxXA8&?{tF2d5d4oV5eYu>JfmT5m= zf1nDmN^TG#t}D(o6th=hrlwHDBa+4m!PFXn8m}C_a(UnBWXp03@ z%0Q+i_klIrCcv%ITHReaOv_!ST_|!Y%OIz$gmN-i3hMSaLe$tGsU5R$)n;O*;J=RQ zqD>8HateWIRgIJY3Wmr7|B$v?Dj;|>Sw2-4O9z5TM~nd!20K|w)uzFF`b#=x8#(Gp zB{b&WY3RDhbs@$z!cP*GsnWCc&}Fy|5Db!xW^~5cUV@*%nu_sC+Ei-@Are?Qyvm7l zbT_C3c!!0-b*j@UKv;RJQ_R(^Bis1zFb>uVo4}NluQDy6$q`g!Y0}zN*^Lk)g>xVH zTBXDtWet{xP~*Z?P=&?DCOHXaBrB;l*bH<+&HGLwN)F|a7Fsde*y4dXFx&ms%e{a2 z5C7r7&Sw9wfBZXdJ^b_;hu-`4PAb_U>>&pAMbEtIc($&c7$k5H zYW`)181()b`y72~Ci7HC9Am;&i|Eg%E(1WupvtP#L zsnAPfb}?-0y~C`asxSucPzfVYJ<`xe+SsrXIdJUZBAZh5DQDd7p$qcDKherc_x-*E zKXykWz#aa$#2uaGs&5+O&t{QDK-H2jW)hl7g&ny5UV*LqvrV4Ij{(c)-;^jWs)U!3 z$YhYQrqFN^d)MLkP*pd#Dh_u%V9H-gc1|B}4}bQJZ~x8h*FN~){deC#-{i@%HytZd z!ExTd;>jVy-OQ9iIB{K(>FvRM@BCu6UV$|8pa1OVI4FPQBOh6pz4XcpFFgPHwbxEhPf>jE!3W>@&UfB_|NS`eV=YEEEIBtICceJ{&+Gi! zwKtyo&U3ykd~rr^@4n~Wr=NWC@X`_CU%Phg)mLA7?=$b^MDCyN_f3NRS6+Vg`t{e} z_sn}{d&_)b!uj`Kc#*+)GsCW(>LFE<>{xMTKgwv59y=7vP_TWvlqYr3ZwJz!w+F|zPEp4 zy*W8MIoO;(aNm8L>=~B5z4v-tUD``T--zJ2QkS-R`4yAKx&GJkY*>Bh~QtFx2C`fNqU-oA0;WOaJ=>ea)!VCc*#eSUm&BFawE}p4aq1+w zU_Se$L$o^JZr^?#lXGhPRNJN>_3^ai1CoNXIl9*)VN4GX4;ev_0SI2Ld}n#FnB$!x z?)x5GMAz%}QT|YFPQPw)OtL&;!QMy);%wrc$IqcJOkF(MfQu+PVM+oSWEKrO(#FjJjWY6LGrTzKQHQww4VFTu3S!PslIraY&}MwTN2X{UxeFfDO}90EpJzhTWl69TLq zL0Zd2K)6krXjpZ*W31)a8DI%YgYd4b*qWGVU=ps83;(r<`JjuaIg1 zRm{l;USFzv?igB;2nZR^$U_)t_Zg|WfGUqxjc1l-QPbjDNRPnNL1MuspgUvkGbtna z$cKLjN$HN0{r~%){^9HQJ+Z<)FSI(bu!xOLU*-*m4tN4?(1|U(HIk865qu8H?DFCP z02Pg$Rv30GAla#qMP#`4Eywf&uP!E$@$eW5`hr!-Pn>t>%F54wB8% z)(agcy?(;`V5!`uq&Het=?FG+l{Rty(=|TRZGDMx=W-4Rb|{lSZgq52kT6q|`Qo?5 zI6!)L8ZaY$Na>d)fc46a9WBIoBcafiU2~GcckB|6DH$e@D$2>>`F45fczL$}Q*VC# zZ(V%rhyL6D=6kEt#o;lhk_&Hba>_Z#g;1Xa;}(XGX*ogM?@{{kn}z>2o?uMF>FSKL z8gVt}s8ovsA95n%V8?y|p@P}?8h%TryP=(e{QQ}}%d3}s03Ff7Z*br4Uo7|b-Gk2j zwE6krV$Mn@1Dp`(`g+YFiM(-VVp<5%uM$!HyRx8aCPhE>7n2IX@VD6 zXYcO2(t8cYsFv;AA^4eEZg zBZEiEofyt!OlDVEuJdU2XgObTBIBriaA@)_NG9X7f4Z`FJsLtjyKu$Kxy?AAofGDT z-_Ej`FId6{>vP}JI6PbuEH1Jqbl5NEi(XARVV`r_UgI^t{>#`k;RtC(*llBP=Fzr( zt>^|eon4Ft|q4s27b&`V|ZMvh8d>p*3@KvcC2C7^m8Fv^6SVsy5Lei#6 zU?xSX@RMSB%1M2KQH7~+!b6=QHAoXwdHD$$Om4;eav^Uf>x+7Q6*<|N0HZFKAs-DE zS%B+p5EygwP@1w)IaF&XI{mzZQ;WHOu$hWL@R3Ce(j1vc!l z)onQ;sRk@zBq-x4UqCHuiz;oAw~7A1J^Sp%8`szy0MbxheE{k#BnBFp{WiskyJ)_;)QZzZn-F=(Pf5Nbn>A_n zB%`dEs#q$?&qz!l8t~|Pzofv1k%H7t7ds2ct8a8;AzXM~nu?^xvE-Hn?_~A{DrL(e{jC>JJgst{dHJ19CJS?Zy)lV zE%e6gT&5qr^Lci@Ur0y!mLcpDP2(p;nQTJ_=%aTXJ`UA2_;z3CuMzAt4OaPVL*xk?N%`pz`V8 zkf_QbBtK9#&eCpEEx=DS^$4OPP_@bcK>h^u@ACTT^O3mR|{$tf-e$9O~gC%rmZ%`FMN#@*0upK zHkF?YLK*O3#1TR;UYk&HLmxcWW?LyyoKEw--!6a9H_69%5J%Bp?d{yi@YxE{0w(Di zRM4ebjOrsYiX;}B#-Iz%C;4J+?k;>sCC?g=gRKRs1gw!Uw(=FWBsMsViWw8Wt7U66 zV?aWV1VuP-%?WsNSO6p@*2-5{%TOh|n{eQRcbed_245i(kPygLA)(m-TP*>gY!kZh zEvdG(O%sD~l2bxU|HO;b*s3mNRyQ690VVkEz@^HY2YB!*#(v@)+&OV~a)OnbVv1Gh z;CY&-I)shR81iT&)TuBKUWkxIfq7pLenNv<)NuvVT7|<)#Yj}=2M6n^>a#yE{sB_{ z(ZlDzzx~=bw%`2L?Cam!e(l>AfAQt*x4*N0<8*JcVqPrw_7A8bNltLZ@==@?YF*taq}jbGa62?E&(nkT$9l8 zp22ew>6mRd&wgk2_Kn%`@oeFzkKBoT8U?;NWxbiYtUF(jXCky?)1G)WrGt!XPH1!x zB)#*L;;CsnJNMBO1CfJy)1h5nGK`9E(a*m7-HVrBj-p#BFeb(9@F-i94zP3KH%&XI z9cavWoH8zl=i;2Z5w5^Q&zhKG=M3Ee*9*-L9u^_vKpPr9tO7P|?S*4V!HeRK=k3cmt@w;U; zG!<%fGyFn~M21WZ8R$O-GJ8R~4U>B@bB5f{Kd6)Kg8#(8V#cIhNpA%#XBADb=-@6LQE4IAXl7B9N+N4!{Tu1qD!_9 z=770666dtzN1kW5jCQ=BT)BAS?%LtChFxvX{aI8nWnw}*)zPt8Na$Xp&)0W{(17zF^p%!f&ZcwBu> z+4S9uL2tRO!XTgQR3hw7(*C&aCaMsc)X~LVnG#I}P=Yc3fGKJ1X#Rkl$lFAmNcV|J1AIF1l4k@0PtAzFd*xKs+)k<#+je= z3)LE}t->_a+H5u6h7Mw|a)|0gv_c4DMj~K<cxZwzqV8-R z1E!=U;$d{Am?vU)^!k^fp<5b@&vp?Z=bY+BaW5$+pX7%Vw3|{|RUwuiG(P+cd1lg% zrwq>xF{tyxpcV{oXJiF`a!8;y1cL9(Zv7>Q#_?=NnFK3#ZO@Z@t=Eo$YUY@XvXc81~OjXRp1sxN`Z@gAeZA zfA9SAm4g}QV_we3i_^2&*=qkh5uwB+XTdvn+nDJvxIm8_%$AHw@p?AYshHHkI;zdgZ*BnB)ds?J)~j zhm)e8x#}nnsu5;`h(s-Z(3$#XdB8Ys)#~;UFfT%~I>s4(y;|V`gPHEC=gV!9+T06q z{T1)$3jFIu5b?G{&XO!Fmq6BAn!QS`&(`F`-%-dFsB0AfW%r}*9Z(jPa#Uk%h_0;@ zB_s(&$`Ljt9Xj9Z2bb|>tHH5V0?{}x^MMx~(YW4Ru*-9`P;>YY0#-e24aU!%uxt}X zyYDBF6na#Eh}w6<&etn%>iP_aojvDstM0T1i}@kC>>HfCHs>n>aP>OoZdD-Yt~gB3 zhtImyvvDN1gF7UFLF_sl>sIWi?tpoGM6UtZF{@;e9fw|FA*$My-=3eXP65EbRVrK)Wof0t-D0gQ$9ZA@UE4>$A%QRKk5;?+D;hT4h8bMw=lrH*V+%NjI ziEXWvg+_DZH1648Q>b9%7!<2fk6(z2P>>`)+W?Yy9i-us=U+y zAk8HW!0-YE=hxBA4}3xaHW(dIh2R@zT}(o)+?f_F4K9WN%EMS?X}h^x^z(-_BVuzx zlUG!Sbd^D6>SJ6}&^0^)Af%xcFwB&P;wxuqRze&yF>7o0*bwfJl&J)2{$X(0R*2m* zrIQ~9vtTIs8E@3g4=0&A=YI)=@y~`2;ecVyr{(rKf)bjEE`|k52~lORD4`-zbM zr2Y67NVA*Xff z3w*6XIO^!&h^#8l1-Ees&gHKOxBFv+6N9j>E19YondA_B@zB%+-;yfP!Q+UsMhdG_ zf-HE_RU@q}p#mxwIWo0h0A)?VAjBFxB~;z&`H_t=W-ku8kR`%;tnG%uX2oS@cv2Hf z!`_wFVUkaD$9LoWr?0$t^YCiUIk~GtrJB7Vhza;$y@Zn(g~~I-!V`?mbiPfo0I8DU zn=SSiOtj};+`sSM+2aq-E*)==4;Ob|-9I|Kc>UG+J099>&pG~XUwwW5u}5bQJ-l~x zG+Qk9E*;PAzB)TTj0@i<(hKD5#rte=u(!E>o#Xi4z4z`NA9Ce5*j{X2dv$y5`o+oV z_WGOK*I(Om0`{5F{9?5^|K9gzZ@o?8H#gq$G5OIUQ+3X&c>VQ@7rwXU2>#k@+c)3b zTlx&xJN(nLixrMIZk{2QCcM`wihz3*@*Fk5f7w{C9V zdUJc_(&2J(gD;-A-dcxtY3Qh9Q8Nen!WkP#S1TRe{%W0yS=!s&o^KF z%J%KI&tH9gcKxmGt1n-?_|o?3mHp#mf3Gc%Sd%oTi$lc#F*;dPO(CLznMSQmFv1*V z)X9}2?t}Y-E$0K8I@Up|2b0MiBbtSn+u0J_3^WT5CMs352_ZLodXJd@I8rzUNk5R< zwq@*@*$3N$C(o|Ed;Ri*Kk_3tJ@F6|hhJLUbTph*>aP}MrDY{}5QJw{Z`Le3f7=p3 z-Ol|>vFP7k>QEKSmnty>39PL;%5@Z~kmZmTcaYdb2*fu=FSZxUrN2hWM#oYm1T&Q1 zQ;ZRU@k2!RV7rG&5G4(eK7aP!g!&(^vy$m zy9o2k#hlg4$&vt<99#3JujU3bbcDkA{P0o|;-A;`?`vRIVS4Rv8RrIreQ0;v0z=G5 z-~k||t~`h`9Nl!`!4Aa(E`|B5PJCxi?1^yQ&$UN=wchjt_l}J*XpZhgV{ivUGD*A- z4|1wGIXR&;&%^Z5gE2U{B={;C(YWnW7Jx3*4r?V;DYca<1A*%zk&LD=%hA~@DDqlE zjTZ@l@7b}wY}!d6RoubQiVy~(i7Hg4V2}l0zn3!TJnfNxf+?Bvj>Qj{x!u~F-ft4?&e1#LNRhWsV!xeyG z2claMYP?PxdGS*TAuj_l^v%FT6O6po`-F!d$%$GCC4l-R+`5i1yQ0?tX;K%Ei$jHz zycVbyUm=8~_G`JY?Ce|jfIxVu(~T!y3!bP35vj!a5dZ-H^hrcPR5sgmu6_a9$0)Con)&emW7mBY7MLRiJ}j&=TSU4Dbsx6zdQ>1jN6VGZsi7qp6q(ft7$MoOLh z!42XJ7&oZVM1{}_*4LOf2nnT_G589h`l_&uJVEcQXvqaN&c+}U$Pj0>VA@(OssPGN zO%+1LOn`}RQ(+UHa+(S7yS~~Ab&D>4n-Lah;7Gt%r2zzW+fl8C8k)S0**go^xZXbF0!Q!DYr=bg4&9!W1KmsArm~$L_^JV;G2`@c!1IjCt96Uo3 ztvED3tXUr^7j(wPWV3hT$KPkm<>dz+njbFkMNIi{CRe5f z6FFBClYy4@**o^OYpw3hHhzv18OH{HHILKqi?48>u;+u%`S!UNHs5`IcD9b%mc#V^ zV!pq)#5sqqaDZ98{`&d%oIN)S{y4rr{`RxnepPk*> zyL^TF2Nu%atsAo!U%t5U=Hi}vj~{(x@7BrYo8Q@6tqz}je18A^+m~Ovc;&Tx)#sW; zb8zW+`S@dtC!W0PnP+A<-(0`&J&u`sSFS9de41>`@49sS#5?vMd1U|SXg=FsBCne> zj$d5dxNA9k^_4Aw-E-f;JD*y<`(5*g9;72DuUzxbAdwaBC2pN8pL$~dz3)7D?>o1v z)AJWz+%S6`1SyFp(=73EfLi);gK>V9Pm9E)M1s7@3c>7g8+5VGP-@aN=Ba=%hC6Z< za;@^SO>sDyVq8eHw*)$4QwGL?yg`x;cl|Umr)ffh4k9Y{q3&hffI2#_bhv` zCB<}i;fcjhhDgTkUCpq%2%as&^Jp#)n$IlKn{_rq6ov(ifD$}li1kbrrl#5iVYA@E zV3ashz4&mW(cgmYs}^u!|6QU6sX}}*29)QVwNZ0DGyKe>GuF19AhTP41%+Pb!&TlD zTzE1g;yCN4eeyPNqfMW3s`Du_2Iqvk$*ma+_Tqe>1;K*C865$|hJj0eJ2E-fr3E?1 z-nk#?InUeBP6{_TFzy1mxT+G5n#vX1?ZTRt-5_$NN6XKj`Tm2SyUBh6G>L5*^Lxpp zn46LAwe(@R^iSAQC0)zqA;wHxNOg%+`ZSzahOFk13}(}nTDm=aEfcjiDG3a}Fxm=| zveYgV10hi@)q-1v2kF3M!a^9V3Io+OU^*l~Ll{(g+J>ow5^H7RUu#GJz)yj(0Uiv0 zXw2_pu8|_kAa8#GQysLD2ZRuDRR|BDid0n&Q;+b*MgTf}p7)64g zs9G(H0Z^Nhq)de^A^Q%EXUb~TxMCkWa-|=31MCm#$yj5ehe|>)5U>mlQNbs+t%<5l z2vZY&(%Pj7$+!cq1Ur-yA*`dR+A_>-vyGW1{iSQDBmm4(it%deI1CfU#W)%)35uyQ zCFD#Jm|8A1q=P*l9H0S;s5?EFT-_z;23q-f+j9I2PLm-&mLw2BeDAfaRl1~sVQin86KjfOyS_3>|p3^pNKxjMx)mM1T^ zB~~^~7-|(Nqe#0`wqr5=6~*)Q@OTAYWXL$Fs4?WTwcC!AClbxM>bbVK6XYG;YJ&t{ z-SU$-kV8Uj;r|eN0*NivY-TmE_&w|)D@#r5m6x8I&!yT1PZOB+t} zS1u7RCTF)!IJt4qVQf6^X$mQf+l@i0Z;_uw<}uJPn7K4NW0D~p9UU$nf5-ftPcEK( zZ2pc%w{N_;zd1iRUM{%5na__Nc;M)%C*}`7gb@zM=g+;ce|-7ysVA53czE&HBZp5t z;h*o~H18Ps4QKmz-*x=-(~EaJdT{q$9&|jb?a%JH`{0oW4Ahk*oFU^vq7Nke+{G|L(h&_ujjA*X8-;<0}t8vVZB)>e=rwLpLY4{1T!2 zA2_`G-o4|?v#WRcsif1BqXl*tUkAut2HsCbWJLU*bU7#;mzLnCElaxH)ax1Zi#=Ff zWi}zn_zo|f4Nqu(kVFY!%F8&Pauw7(i)S?6Sr#zsrojjw7meePUEp9bcd*%N{9Pt@ zK#)u=W5^72#q95Q-W$A~uoskNkZ`60?Cdgd2_dw}uc;yI`s`kY9AOp9x2KiV0-KbF zA9N#kiyaSw+SHEQA0@h!ygVNJ7AkRS1X3}lBtO~_%XU<}pGXPBFgTH7fPd@`5yJbJ zS!U;R7XaJ~Ot$V!NcYX$rO5=3aq?)&Lbkg-u_t)>^s9He>2v`$8wmq~r&GA*+Q7Md zIbY=N&6tx0ndQ=N@1Y(cQs1mVMUz1w@>%%KB``24SIr^eIGO;^#FJB&WCQEo4Fdsy zM{5_{*76eu1{al6Z7WSkpgwW$e5ho?pjAb{xQ0PE*(|K;fe+Na*Wg4of=X>xSUYX4 zR^`wHM%dOVV5ss==FGYwo;Fo+GEzbURe~bs0E1!NF%GdHIT*3*0066c{qhsAZOX%V zu_J!OAu}UOv}<_t->NKSyh+(h)}m`KTzB*(vEV`v!_)GQHvalstN* zVfe0%r~>AP-p78GC)COz#VZ`%t8^Z^*ZM^Z%Ax9#6Kqa| zgy{+t02ZiHA`h=3l4#$NgaRNWH3HuYnMm%vm-*tfOpL-x?Ga>tGk*|v0adp|wo!diT3a?JItx`e@lC=6hOjU>N^k7iwAKTVG(OiQXajfxc71$s?4{02I@O!xN)_JBkA@#U*zz~6`Lv*$~fW;bqm zk?~{YdyB)P71m6Y@57Nn%qMLgoxOJ2V&YB9MCR7!FkXr(ZZ-ccB>GRBrq|JNGMM|J zX*hPPzQ@fs6E1T1#bAQ3i`s$Z1s*vs4yM3>D5WVA>>x-anUn4;b>-jV=vy;ezsvlb zgG*+`K<%~rxXk#`h-ukCCL0fS7_p(>6sN)xhAPi*z61Dn&}rI<34Whj=1q_wq@+6M+r zm{y^*YN0uSGuLC13n-Ju+q%dnz5uie@Xfol3W$vYER$ZYp{nf|DWFvEFtO%!IaMY6 zY-{R%+W~O*5VHdfYop|0 zm&k|!-x~LbkDoLqnoN^a!?&sLs)M-0*g!+)P*ShA0Yt{7dO5r2zS*OX&ff9J?BR#@ z-ucx2yWhRN>k3`pvZpMU>yy*m+DQ$Gf#Fp{^hC3k!^xFi+H~$UUXgPs4%vSLBoltl z;p{BuP>#r)t@=r4Ka9J_9q|5~gZRaYQqEp_`4VF*6}YKuca}(?!Qxj9I`#U{-uXre<{<-F{q$ml}lR zuY3|fX{VF90M>)1?$UZ7QBBd{vO(3%*r$)oiR6jE?y+g}1jD2w1Mm+)nz_NgE-6 zH2F9XhFy;}&nxG3WEOxH!Ir^g$vbtI z2ND#DgitRb!D+AYXY2L&L>zr1Z?75^M8}cylcS~!&k$%NwBarOi}WiAZ*R^G-GQ~I zO=i9G!xr0oH=BYxG@5$y(|t~~#gym~!C*u_;lX(4lYuTFsl0rfkZ3sskFbF9tui8% zz#xN(FC^8isR}6>F&2X%=XMbZq4ujtOGu#dT-1wcwG8;W#vrXoh$rn5666qkEDgF4 zFtlJ00;>_K+?gQRRhcYM7KU)QwUXNg$37CP!{p-hgp|!B3r+Q8Cb0E-)tHT+l#C(4 z>>aSXcA#CtVf-i@^HYBO1v_JMCm#SRCK9L;8^&%{-X1|wm0B%wg6%TM%R`eKLYL}9 zNQSnUDqG6vDJgPNOw%xSQIb>$a)N;|gN`XqX%f@a4XtD3w?pdAvXca5BLRcL?uIOQ zl;1W5Kb6r_UOb*F0bU72YdZzsau}&GRD>lafAR1bGw4w_3&c~r@4_RnAS4T z2p*c+5vmY8A$12sI1M-D1b}Z!A)1gtBF9vd)M}NcID1*4dhT-&XIB9T!B1u>S`9yp zDO4fgNsbR*Sj0sAWe0GZ@*o>6SmX>J{&&Mhd*sa|t+~eSu``nng9sL6S3Q0wsyd{* z(b{CQ3^0GwY}|)oCQO-90VTvV!8B%?pk^;}Ur697iHfpK6+-P`g+q$s3)5`^3Bk8& zQ^JF3UrJQ*8+L$k1ZYO7V*w_%ZJMY;T8Dbb=X^WY2xy44*0r2=iAN68Qa+Gz-U*# z`|KA#?Q#FWDV3fc9Gt8u7khMPws-Svwf~Ms*VkU#+&W!gal8N83omYO-r9fYp%odx z5w{$3HXH9Nyw=jY`5{MpufLgaE^sMh#0mLeKJ$wS7=?_ovnff0GP80xNp4L&A;2hc zZFk%Udtw*}m#FIFh&UzWERffDS_I$}Q`20GDUe!VzFJA$ne8yD5`>$S6PhC+r&4Cd z-lfA!Y+n&N(LoV?HwcBSu53?TU>X?-OquwRTI~vNbqHx>5VoWWVUrR(%-Pu)D;5Gw zRdf01cvTQmLTnSMwq{xYbE^j51y7i~y4r#H)`Sz^Uns;^EV0dTO)w;oltjl1Ax$6| za7xSyP2?scZ!S5nNIgXAk}p>l+D2l(;9@p^_{opeQZ)?hcnUY4+Js?WPAnZd`%C<$jx`TSO7-?6;Or} z6)ZGIwE!7il2E`zRNK@MX)D2(hdPu~(jIveADuS7e zAVfV_9TgA3l-E{fCWMO$vCy{^>aJzM3CEEI3{x-gFx*kJwMZm2SRvImK`{Dr#h1|| z98FgJO=}N0jH+8|W)TJtkB%tQK6D?7Hp^c<80=8G@uu&R7x=yjHN+2KVkk@SrCLCu z#ZUnZN4wn476TR2-j#=;`U8^P6$GJPy9sgV4%IS9nsW$nfI|Y20H}rXt%BF?NHo}w z?tD9#o^`11+N2yGWC*K7E1?RZy6c#>N*OcYjeM$>-!-xu9*UFhZdu_(l|xwDZ7Pyj zVD#e~t&RwR+2OdZ3MJG`mPZAex`2eT!ct>K4igOtNj&=4kqVPZw>wP(-yb`Z2d0u@ zCSf%SOV|(#%6-^}V;-1>vn&l@Y!1OwRxw%<63R+wDj{UbA+(aR051?RJJ?C24EO-J`g(@`hRjIE|HmWos zfiGras)g}lAS57R8XgQrDg*(;Uf`q%zQ&=tQ-2gvE!7%KOGb161Pnu!odC7~BohO{ zly{#ShrV=s5kgD@w`XLID<(*&X404^^u9#-Le9&62r`QHzh!CAg~<)3Z(b5b9_elU ztDg?J?<)Bb4pF+<-)=7E_ujL2*VXm6pWA%%+4+r=g(sK0e<7H8OP4fl=H&D$q_hMC)^$DdeVf9tI;ef9k7 z-`Jj<5b#ZcCo`LK&fwmoJoe=5;YZHC@y)Z(eDU;)U)enO!u|sf9zOA;J)Ed*JsWVCC$2sItOgXZ+ zNDdraCr>s3Y5>qil3H>2&9PRAE}Zq94W9z`&ejQauiLfeaT zj;-DufnWy2q446n z-EgXA>R^l)j#*;PM?%v6p6|~vjX@8i#3thJoO4%8zz6#|l6&{d;P}^k{Z{!IQqSU` z9eQwXZQ#+>CWbSOd{c$eD$Yz7hd%$51!jxjb{90>DRJ$-GZGxRB^|^JfI&_0-r^#3 zLgeg)br|rT6!?KP88S8`6U)E`%s5yugL;HL;GUkIQZ^Fg<*Qr1x$TtzIc0~kt&~gv z2qs<}3s;_bmS8$Pf{&@ZDV#>Bicp0utD>zC7|OQBj#R}-o$i!@5SHM%^Q0`EUc*er z+Y!nV!cHF5#u>#7%3eEEU5-93N&H#H4J`waIGVN*L@;+xp z)m=M+!kE=q)^VF)kOZhxBoKVPw^~JY!X$vW*l7&1!ezc1Ysw4~nx>3VEx}K% z695LG8;jRPUJ8|@2`WQb3s75QQmV~ec^S%yxYN(fN2m)Vg&6~!&!XJq%`EOlM~$$? zr?L!$Iy)1+@s4NQsJ%eoB@pxBIb{e2w^L3eL^}abmM0e}*@y z)bg&u@}roeu}Kh z7{J)g+D+fvN?k65N?kHR0cesdgilzs5H&Z_cUDc zgfwl&=OfKPqot&Z(7;9^grp2qo)W5Ysx<{ec#ya}U@|}L=2#X+iS6_-!S?{!41^G3 znZ8f)P$GfT;}p+m697n~Nj#FM!B+)PjT94c@|wRhdU|KLO00}sQQ5Bc;3 z#tC;ZKY#g^z0*^_DV*!{<)gi$OLUi0+uo()y~~%3hfc8-a_GPB-izhZ#|K=W?!J1l zTwq5_>;`O(M0I+yJvrT;t@iGF;L1CnI_G%g`w9E|N5`{Emo5&MevOEs&XgQ333dNy zNg&#}`))eLsR{rW{EI7Bw#P>-vP%y?dpXCVoXK__>|DAQ3M5W-Fd9R-$n0*J3fJ z+em@2h7%R5*&y3l5R?Gu4JnF+WX!Q4s{PG+gPrB_kU>CR7vu#9JnE#2s4(CVx}X&& zb$-eH*fIX+Qm19z5rAUlq;6fmXhlc>v(*_wT`(>&cXE?yP-K^JG<%L-;U~1WUrw~YaVrbvt&xiL4kT=O#KvBPWcLhl=EtPkC;Sm-9 zKk2p?NT^OFlBxrMYIy=f?6{QJL)c!F3XY;hY&e1_R-I~%5SVSLP9ecJu~e&7Dy%fg zi>XJdEgL_~lmW_OYJV4IZpYYKbuLB6G0f$FlN2iTZxbnXV6tj*-H37Z+$7wDoDyny zk2-i~xMB-$dIH8wKsebfLpjCYkf3-UXyO5s;$8a7LQIvXshFt>qm>4qoS4bc0>YL} zb*lxJp`;&^&>M1B(;X-5kyoARI;A2RJ)cI0`d+0dCgkOAtZ>7TAS*c5^J|(7@IoTNrpuKK?evX zM)HD9dcuKw@5-gwoO^@ByqND@x$H-1^5mGq`aY+5n)dhCtY`e*bp^BBJnS7V_b(l9 z4;R~mMFwY&DhZi+K%WyU_hfVKF*t2x9&Gph9+=tj(cay6?Oi_J!&E+gqoe4uhPW|t zSXgL;+Hdk^>=b3B(m~VW({AS@tip~mFqk|=h)TeCta=BXIGKbrVcFax&h4EL-0ri` zM_(!9NL_NHLX3bLmqF|+Q$MY7EX6Fn_q!U|#yFu<<-&&>BHrISSnln;_u{ShUc7Pn z13!GqZLaT1a=`bx)g6KB948E_%zpD1^1%qr;~@{mNOUDY5956{Jj5J9zS;O2iUr_5 z>sghmQ(|FK!Ghb_c%Vd*>}r-K4$5?jz-Wa)LVmc&1e(!kC7D|CO$L$-LyU_#caL~> z;3Cl@%R5zDw6M2btykDbh$+^TUk2YlWd+b|_!;QMeBp`8cT$+V2OPUSG{g99RGiQJ ztquIIecOS>A(DKOJG`H7hF{slBVp7p3@+#kehnpAh1M%ZA^GH*?L_i7#%aR^w=7Nx z60Qo3jud81^v*YpB3#5*t29E+jW7uDf*2;eb0#wP$^sx16=k5|k7DMLDqoh1? z6x)grN##?OR%k*Zhbc`+XlP2TD5BXrb39QZ7Kv0fb;Y|~TSe@fXMRGFooPXOaUNaW zcIbj7Zuf%8sTEhfy%RJZo@jw-wp(qq2w~c?#9`WD#4t@M zOGq0GJjf~e$eUy+Hk2?Ng+&!xLK+XP&aTlT)d3Si(#a2luyYcoWieI}IJiScI-qT; zWGbP?IRrVzKyxL*@=Ai6@`?6W5U~mNGP*B3dp%E z*Jj8wgu7l;VquJr%|42$+e7Sl9=+f+>@S1%+>f~^rXmagTM`Gy<#Ky;ba8m-DK?L& zX%guO@$$@Q>E~;DQ?PVf7Rww|PI$ButD9|;)v zbL9SYB#u|8V0qujnZSGb^v>R#1AvEh7lOxkPFv@GBa9EIl{@ahWHzLWqd!(Wdzm*c zO+BV(-k5%y9ai{MGg!m0xMzsGJ$4<7OoKrZVM&;mYm@J3l6FsaIR`|=0m?e8!Q6h7 ziP_R{Zb-WP5)8ANw5dqOJJ~p8+EX^tD44)tTR7d8P9*hhD{SW)RP&< z4&+p0DLd=<);2<_=u)MGhv2(@12;mNio_Q-tBbH0$}%*;U>*iS5?6Q76a{*P6_3a+ zq!mYLSd&ORQl-iM`OVM`l6xKo)L|IHNSF;fJCzhO?WPIDPcw#Ov0VE3T|F9!UR^b_ zeeN7^p+$yEb1uES2tD)PrH7T?N2Ny^j7D?P{5$hpx@k3hB2G6uUNAj9Yy9Hk5OWTB zEhL`2Yk?VBsDW%M!Z>pv0qIfsA|Vr$;~IReA*p(a5j4R`Y&0~21TaD-3;>umfhpBs zi7Ehta0082gc?j?<>P)B5dg%{R?5axQ_V>+tyWH11{w@Tm$KEy9F%gXQBjrvv}pps zvEE0Pj$c>uLc)nRwA z{LCS!YE2lZS}^StJk*pz$cv{5ns~~>CV9RB!ATXXrbZCx(Hg zAj9xZUDg+VnU9@WUhMq|0fPnBm|>>;v|7GqCka2p7Bd`~t5OV^z)rIStm6`ZMvzZP zgq;Zmvz%gVNS)oCg&Z^$BLKG=m zg=z;~N`&z;2={$zHuR$MG7xfzY8gUJ&Jd7FLSR_tj90KmjtKRMv^CNG+&>Y5ZD&J5 zCx8KyGxaW>267`u2j~@clNTkG41o^PpiPC4KW!mCuirGcuC`T?+R#j1 zTw}aMx(B)344F|KFq(tmZa6!IQJ~ZSk!LJq_@TkRN$kgeRTS@2M%o%#R;~j+|aTNDtuc8LCIB{2N{P5sQD+}KEQ0&E-u&e8*k_bH( zfa_5^%qmxYZP-z_W3#0)TGW|P=68U`rx&gKloF#^O1g5SlcK1> zTKK8Ors0WIUsj;IqbG1umE(86=02lao1=fOcT1jeG-uAZw&4N zx;H#JntqvP^S0eCJQ*iYoM(-dUR7pleQx!s}AcrcnZP>@{7X$!Fc>qOL zUYeSaS5kg5PDvHo)onbY$39X@8M{_#a)*i4rB?^ru|NY1L(h>ljGV&A*?X!D!%4yc zPXPQcGekK?C4okzua13b*cV#7zkL&V8*a1gBiL| zA+40yDbsQ{Ap`Gf^0W|-w_7PE`!EyLV7>2Jo63m^e6X++#%+Tb$>;TuTV<>%W8il8 zZ5WNDMFuJWDxidXnA}mMHFF?uBlE8x0r#sS91$=WDY#VO=s|;YmoSlF3Q-4wrj!~_ z2r)nC5|4Zs$>zvYU|>ku2sVe)cA-_|uBuG7*i4Rp>u*~P_;P@_@>;E>h0 zu$RNlt-7=(H0%R#s^@P_jB!b{QqqcuS1{6m!9Wzl4m7!I6~ZgBcC9hDH7BKps*L~I zA0P3+!`Lv6QA^_XX%oi|{+XeHI)YR1#Y6B_Oc)Y;V=k;tn`DT&2alZ+5)`WozRYkP zN0OsUo8SQfE}Q!v~dg;%bC8w$S#5* z9+?4ZW@tj202nO{69^iKN}xV`o=F9WLdXC-(W>VJqp<;C0GC9S-eJhnCjE`BG4DBB zo92dnC590au(k??aVzQSVGNL?=pi1PAb<^)na1h0x$=!e4rjdR0g+G^=xL0$JE?h) z!iY>hW%Ut{1~zuY_+|P;pVT2whP9uVG(^=ax+Ffc*%q25jnJ!BlK%vzDSe1!WTLOB z;iaC|%B5XT8XE?tBaX;ww1D_+Em9^!7BW+Uke7?2{d}pitEYy1fH0dQ?$^oL8ua{l~APwPZbw1 zy%|FT5R!$n+!@(Byy~XR`W$!%F&30(Z7arjGLW&(b2}LR(-zjujOFbN;1K`F+hybs zfz^BY3R^8EszcI{lOiJsVFv(Om4K;ko61bqD!EM>82VU&*3yf*L`8E^H*0}SP0<*L z1rp%i+`l1g_Yg8~DF^v*lu?@?+m}XL9tv=vSiRk&mJpKN)ImkUAgl^J_!3p9d|JVy zu41z>DN-%0>%~-z?rIjIo4YD4`O)UdCe?0qL+Db9j%QT2gwg(E{ z2GsL&2&PO+U@%2Iv<)~MljCty*JL;5BtCZNu z`O>Ba03RDeH<440*1YnnGUh>B(Z$gK)|x7;GLJ(E+71}+ZPLwc^6%3cL8$1N)H|`zs$jHe}fhS zy;zofy2wc8FJ)vYke9qIFs>-7A~JUP?l3tKa$ZRjM{1`=$T?F^<2!uU8702X{aff- zE*^PdL>rGR(P3wyi@3r|*E~Ur^Gg_p?>wonTEHmLLc+$*c(XyNmoK0q*PHV-=JIyO zCWl`3sV%1nPv*1zbMQ)>Zkvnk*_oeE!UA3xj?>dqdaPfk00Q#sE<(YTH>1`lvZnpZ z3H^OsJJmc;W~^u(_S3}4io>GgkPpIXl>>rr{&1Vb?F57AInVh+($yvHG1%_MtT`;x z=|Oimj?U+cX&Wwo$SNeO;8BmnhQFp_$QCVnbaAvt~)&focA z)Yd6!Wf{_}8jCV-nDE~>ZL)YV=HBf*q@6nV2}`CyJkz`MB0D`(=wMD5?wV9{ZW)s4 zrxg6e;_ZuZyWkFBLMu$E;GvIW4qI(2_z4-QV8)S>YE{5Yx)5N) ziXv4lw7O#x`J`yC?YJB#pGbxtl__ilD`_iKzVfM$$PF)Xvd{`E2AZ@WY(m9PFc=ie zq}7e9Zeu`#M}=0Uqnv7+%0O6XSxkLV(#-tvt%|Xaq|6y5?^DUxo$FHoNQt>eBoP1Ufp!j1q&vYB$VLE&IWgp7>7uWqJ_l&eC44= z2vx3nY^EIWbhuYNXaYl2!PkBj>wn(~D<` z%$w~VhYK$0_H7KiH25g3*Bho-j+>!InMcyCdy0j~Dn=V$9LtoV0+3ci21eKULFcmH z%X*sT1ne1bFq~ncqYRbRbb|rR>J)()QT7T(J~%}E0V*d>I|yryy6^eVIPo}#C*++p zn!zlyikcg;WcK;tX48QwlfZ1!k3FJHNHplx#cx`M(vbj`-jxL9Cvp^rT8S>#7rF=e zZ2+>xbfIb@F=~$d?!md)YXXg!%_*nctjxizod{n?6>^VoxyM0^3E{7(a;j@9$nr1(bK783 zattNCaXq^LNwo%PqC=dVa;|a?VPSe(gI20h-#a=w^k}UKYTSC2*SJi;l=)PK3*IM@ z=|oHkqjTv~cL7nvlppy5&89AIM_>mbH)rtC(1`I8{@&g)UsyB>hYrG!URvi1Kil1% z2mr{ix37HA*gnJzU#cBi+f*03Mi5e+Fb#ETf{-(L>Wk_$nwUaD6(Ow{fkEDLd0kB4 zx&Sc2ph{Y{I+aD1-z6mNDIvi?2y0|&4RA1Cequ^ss=`{1Ndjr*%0*zTzze!TGOZsr&?I6g+a(0z-|?4 zMY)=J$@qkZmI+VB2Jl~^%9~OcRAN92?jdp7j>O9lf7}Qw-&rwL+f>FVnWKpe7;;eX zAV;%9(6m-Q>6Q;hsszGfO~DsH6OssZ4Kp>-FRJ*$I@QQwh6pLKMr)!}1pvVgjPdhx z82VE8BB+=$Q0=s}mLZrD99Cd-l&vhP>LzfhS5JiSZJJtR<91XNpu#efwFsz5ZNlj; zl4|)Tr;-Y5x!}rMt*Mqp!naCmjSOiFO%|ZyC)!mntW`{`cYb*RIsrPuHJ!S(a7j zy>RrAS$!2$LnlD=JwgI3KmtjYgj(Cum2An)(Dkt8;W7Lj-mh@S>p!lW>+3OO%evAP z#sY+p5j~=(fP$i_DheoyuAr)@E;A$IM8y01Jb1W#pvw0c#KJu6{vLOLlv#VvEfRhVdvWh+(bfTmh7_Znfi^cH&%;{i&0Tv_EY%5KB^Igfv zNwqSvAP~a(FE1NMFYIex-A=3qw_4?Qrfas*iccA%7A88ZOL@zJryg=Izy_~DU%>;ehHiVCOZK6@kn5sCICj3M;Bg^Z5R zmNH(&XdzVaR5yn7wDRV8R!abow+Vs)fRLt2AovP+ zfuM=e@O{`!vL#eMuLBlXwcF&D9wXY*c_pnCBrS_#ogv|`q%rb?BRue_4>u@tMC zjVY?*Q51v_VZiML_Fq@yA53iEzds;goHpo2SRCBNXxg(TBZh%xTPN zPRXg-+$s$%tL|(WP-Qn~nZZy-E*>UG-NN9XA}^Y-(^cJtHFH{92n;0vtlk=IlEE{x z{gv75ZUFpnkRxjsiecXP=3%<;M`SbHx=z@bqDOXf=>YYrPDi%;G z4B@0Gjh@n4rjmhZJj)0|07?jHLSo;?pwGT9*~<(mtPE6PY)BQ>GR(S4!%W zNGfdP@GY^^vi&U$;kZ>BRTzZ~WdkV6-37Lw~D1m7t&}fU_D_UD^D-y~dwRr`M zYBAGDXF_uY)3Qtzr%fy|a0}*aUn(saX^0|39aI1>!@(5tVIlBJL76xFe!k!wve=?kff5voC28JJL2%1oNMh0rRW zmeB-tMO03=Gvy_OV4|9)xNfVwD^W^SNqO!;K~;q%8mDLbKqH?X3xih40=-fkY7D%5-l@LBoy-^b;^yk4p0jqw8W|qGy-^xG}o%C zm~btCYbHCSu9$?)t1gts8Wey( ztt>()xJxx2qlKexAb_ILLpVMVb` z*siA>Q*@*$erD9N$Vm|;>wyxgoGR0YYI>RNBf?@@<=9H8O&=m-!6j#IY!#sDawaGb zu`p4=RIKGq)!d6y7KRb{sa}AghuQ=~6TL`j|58dwD1kvlRV0o?<_3=29q{!6q$_2S zxCi-GL#7SQWEn-8mc=AdrInG$M99=%4g^>?6azD*yL&r3es4X)VIGj6j-6P;^1wT8 zAuLd>HQ(hp^;ex7=v=$5zWV9{Kw?T*dPj90(~;K>B@&uB*-87hH7CDq56aMg2WwlgLJ^lV+a`X(vw2d@g@)=FT#N%C`1X=&S|v>6=cra* zz|v$lAtX&>Dbs3TXeu5mgD~BSK3>Mp5vo%(A|OOi=UhBv#!4|$zjCO2%Z8NpGXQzy zwOTu~>TAJpnM>pbi8@SMi==my$SHwUs5z1hi}A%#bs^-FZ)L!{MXT2P zN^0dw^xXf!Z20Hvb?SFSa#lm`hcva^>jZwV>@S1H5acvk3CnLf;@zu&Hz?WdxBP~C zb;Ao+F9iW+oQ3%du{9noULZ5XYE|w-U{trst`Vmf_&)U$;9WD3ltFj#<-GIPIH)W4 z_X2rQGkXB?8wF-eFk`m4vBL|VR&yDP5-p4?LuFt>Q}TZYKAFf0X{z;hdV(Lp;&I|t z5_lZh`G6D28ZjWlEL!GBAx;TiJPd~Tr!czdW>#j(^vl9@D_kcx{dh#hm|^WW3nEa* zW3=)E#`}uxt^93pI~BtQkod&%pQ#JjSpmwgILL1cIH!&`RxE&{<3sPm{7k*j{4%Q1 zc0qRP!<67L)3PvV*{2jTK;4WW=K0p<{=vZkg9aEFWdT{*fQj6pj6o)j)1N@_{{a17lwg$q}|MB-5c+qkvK zR_`SYVT*%^yC~r$@R7G(BjG3QZ0{L{E5@%bC8OJ${`LfE+uGea%Ek(e>k7f4oXL}q zIxKsxzmrG0;F7fVt8{pHh*RB%+LR=8t98iQiYeq!t1!I>gOJow`3kWBCO$1&okIz% z5)$Z$qzOU}Pg%uvtpbp@iL$LwwJNXobvu)&mf+W0S(GdP_B^s-umDP2M1c{diSUX? zc?r_L3@AT?@%l=+7*U=s`|gUIkKzz&=W>cR3d2;E1wy=VGdkY3Lg>^rP?uGa!02#% z5|cAR<9_tgZJpMRj^>uJquOaRjX*PRNZK@8%TU6DNs9)lGAIHPD5WMyNOmUGR>xKn zA*}KDoj%y-(|K-dAl58YpBE5NVWXt<27H%udq<{NfWc|BvibJYrqxh_eY~k6F=}; zbz@VDHNue9@91o?wJiC?IODR8H18$)TZUAz!q9cXOuTV~h@}Etcp;>ZTU$b%X?~kK z5^p;~b)7L9RU(`rKn=1K^Jj{H3*D5@G1y+|g=9r9v}LVI{!|^RO&0&Qe?QdW!@BR;Zf|w?DAigB%k(JM0{^tUbFzcJ zW{?0p)@+>mEB={gS+7Y{O5-F?p(;{NM&Tj>smfxu>HuWykSbIuk(3I95LVuChtXoL z{_td#)~Sn}pqKN55$Dk6@NvQRtL{8B5 zA;Fm^d!;V1@T$6<2WhMF;U!0hIo-h!U4B>vy|6NBMiS$iON!M%&?d4*ngVE3NOq*N zx-2<~3b!A&_=k-mMCqp#B7;q;`Sav0-D697VG10vMM@382C z{yWmfjZ_P;`SU;-9tO?7$~0`M==Z8PEo+$<%K&*9`Ah*`;^PNA)f%~yGCRPnax%_@ zNQ&IB;38=T`?Ecb9hv+DGvsNA7ix<)H9Hexfa(|uI?7a4wSLV5ijb!ngWx}hx>$i~ zJQl2gPgrcR8^@PcoaXki#%}1c#tw%H=Nl)vF-|!*=SV7Hr;C9+I|;KMpvKm!q2xXN zI?bX|3nMwaO0@ui?5sw;__o6A?40eqWlA)a;Aw(b?DcOz? z9`Y!58tVcHd`oIbS`EyrQ4C8QrYSK6)d)<%wkFif8%BTxYI)h45SaZUdk%(yav%X_ zC>$`B{QE{n?LgH^cz*hpeVZx(j3bo%R-d!q0p;+^3m&13iyZ13tcIG7EaBM&l7oDX zDSQTQj@p!Z<>h8N+&0Ob!d{gbJ<9`6~eMwN{~#FEpEQG@VYengJaA5^BppRD>ry$}&HS zyh4kTpX91SCCiGgB81s8P`orYvVlC8zl;>Bw3cQhx#Ew2m2djopmv+jHpN8@NrN#m z?PJ(oUWj$BLH@yPa*I}tG}0I;DZ=~Ok~FpjES0Bhs;k@71wR6&wG(#c2UqZ|)(AX` zf<{NW^F+mu9(Z=(wb*ppSDi{N)JIF?Yp%vH!Au^S_{t{_0A}u)Pz_FG2_a2oDA9uG zdb4j@y zE!PXexsTCWqG??M41yt!YE_%(O)4t7yrN7|MoU9>TuQ0*X^2 z?Tg?&oulCd)RFzmDV(zQ^v-Qsg2g*SUE}R|gYfqg>IvB*?@~!3o7bqtDQr8X_55dI zfy(z*FhAm1Q|dU-gf-MvjQtwaGOwNX`p-J8* zV#PjcL(66_Cd8!^I6J?ycXD{NmFFAmB@9Y!)1!RZ%dksT12r8UA!Sc{S_{FmHBik% zVYE1BlRVFY2>S#vxf%vx(lnUm)TkGz7j+J(tyT+$0>1kym|38e2b4XRDrMJ$1}ceKiT69!5WUu!V#XU_6QqHysA5lJO5)ulI- z0+2FIb63DjL7fcOf|9fAoRs-&*9<#lneu>JEz{}IR&^IDp!N+eRQY5eq4CaWqTVLR zE(g<26{(3({Z@i57>FuzBn<Z|j>s>1WqZM7O(Mok4-_|k^ z4At2RQ(+^4_z4zC@$Lf))i^ZmqeWT8G6l2>Ri!X5IH3X4!#F1`av#NVB|wA^F~)`| zG*}MoajdQmj?j(>?wTRQO3id1R^0N4K!iZG(|F-C~M7y7uQuM8h@}#vZ`pJ#!oC{2@76? zbuCpLyt;`^Hz8ewrkp7S4hA9aDx|fTxlcw(%h1$q+1A3UmN&}PF0IJPs^Z7hDWQp z6B$FAi6s-dc!<+b07BF)q5(kJNjiHxY9bE?Ln;=Zaau~RJvn(3i#`#7P9mc5)2#b`qI)z7+`31Yd$(U zrA#zaT3gUt8%Ec{O{Xo&5c; z7}p@(1qP#w#Nye-H@I{JakJFNSnY^hETamNvSxeQhTtiqI{wrb)F#NF&4X{m(556d zv5d7op)a12s{Bw9iSg7%u80}x$W~q#m17Ax^8~(Nnv5o+3{7DH$SKPptf>)6U=X)P zjBJIJl_w8_h>#K?t>$H^HvbdZR^;$y%HthoYSj_Ks#8sXV(7Ixp-P}>p=HBctvGO) zqW0ScxWoXD1DZe@UY~B%Z}vu-pt>$KSCur#MgmWeFlibeRjRzCqPK+-a;Ur;NBY%h zD{qOUy5dqTgM?{W2}sH^ZPi5lULo)Dgc>=LR-t05Recp2e8EU?v|uRdT{~E7C8~7_ z-%brv%X+K?KqqbGlvSUKU}_vHpmift8gR47=0cl2YS0bnvXIMi^ugo+c`_FWa9QfVzVNA{vV zPUwh~=LgfvN&pjCcZ<{7Btp8v9o?#KyYuI%zh@8sqwOUuhlOaBtSn~Pne$UZlCInL zwn9dozdMdfCd*jVHl;Knf|6%1AFKRzltKMa^K^>DIk0#ii%#3^k?shIdNMX(l)0#m z>9|}RU057ZrEJEu z#sm&8oooF)Mg0W>LaS}p!-KU`1SA0b*tFbOvMG9+%l0k^Z zPz<>)dCk`sR*@N{-QVoQ!O6=wxlUN}MNM1~TB|Hv1QQfs8JE%hneY ziFOV>2;G%{MH+}+vU+2y3L!Lbot7EBk(d}k0z#~R{rX$+}S zLWa1c6ro|CZL*3Brn&k!yKeVer@MRGXp;tifGB2%g0U~PJcF4bb%H>v z)ygmXj9=oUF=OWr1uP?2gUydo!w?{t${~^2F>Blsp(8xSb>csz@U_6&VTCla`rQp$v}BjDyap0G1nrefSg4LAut83D^d+g+S%D-{#spH zTSA4QUfrR!kYQ&9&FXsIs)B@=8+PqnK@-U&lOcOlDowf|{I*0~epV+@?UJdNMgql* zBZ7ny$z&>LOsj%qhFYQtfJ3z`ZAu)aQL44_GLG?}dPELGSz&{3mH*(oog#$t1aSlm zfDmV3WdIXN!T1xB_^E1rWIl%F)vCNkS~|CaZb3Y4R8Fu!#{J#XL3sCl8ckl%e)f zwPgor?`f(WrWQyPyy3^RpKv0i7-kITmkJbjIE@UYtWW|bCSbBKU*>Fz^pqe z-u)-PO<{>oTIfK80K6!8w&Hy6cfAi?6`K#QNmO(0u=i5R#5h(l)%75;Z)_OJ<~EV+ z27V)R@TE3EkCmHJ`cfQjV z?bt+%elsro_Z5G(FXS{QL{q9owH(DwW}k=JzQ`dH3nw|<`VAMg!4HqW$G#X!k+}5C ztvLyuVZ;jw?XWSHaS?Bj8fWh?1Wg)MPSm+A(-|*s{F5vka&gN<&*zeobd!8EqD_s! zTo5V)CF1cB9Lw^U#^@)ra-kRtWYAKOId1AZtyj%P%< zK{u~9pbOra8|VBpJ^qT3PNJdIfHE|8FF&a{Wg}$N{hh=eu37`+NJ71S^Ky024c}%l z=lP3K$VpBUl~tpzVe_AZCQ}OUCdY}fLW5i=ci}*+XaHg)8~x2!Al5w1C%FFicG}&* z99or})2d1!9u9vr90hVwZV-aG9 zB=hCj{B(1*VxweJAV$A5jt0}T{O5oW@R(M}%!+ldR>+ta*YItg^(ouy)!T@FNzAcx%4b7Vw4e$b$;3s>=F2qc zWHHl8sbGCAGdB)EVVg#(V+fr}u3{pKv>l7KDm%M=>SAl-m~gf?<)fG8Bzk#Air2~Z z7MUi}W329M=WA*Gk$HobV!aagyzc^9Cn%d;-bDS^dF>tR!>B@{D_$I+w^v77M+f^G ztL@dLos)yzjn(<>6;&|jHjejCk9JSdJ=)(q+1ZYrOu(x%%w{hv3-4lek+d96ueRL76?bX3P zNjSZ@zjb)^{;m&o$qP%@;e+)*lY-UKsSn?c2C|uX;>vWfQ)MkV>RA;z-1wOpsDD!@Lna+B7|}y1kNz{fi6oh_PpsuXfN`PZM&1;U2-1e zp(U%j%hwM#5B2LVrvMt)5>%-G&i*CAaFW($`iljKa|WkpngAoGUyJ4O-U~<=2>UYt z@MY>^3d;jqcS?z*WM@-Nqpk3$)B>#qwECm+TIgqZ7`u)L@{S{99QM z=W3#vxr$xJ%Zle4U$kMZWl)zfbR5Ed%u9HL(u(lJ&Snx~F?wgZ0XyO_#$&uv)sak7 zlzLgHx)4oe*5xn-(;B~0tBhu0or(~aslr564o!YCMY#oxV0bUz5=!1ioDh6z-D7!F zCe<$ttwEg`TyL!es^6L_gA2;?04NzXssJFW$}_g>iY;riG^$=&hg?Mj4v-T1*LbwJ zP^-0!UuOGq6QQuC8X+EIM4Cd{NoBI-G97_L;zHxp zFv1XHXY7y#s+6ExwNq&$HH(>*pVQXCrRxG#;6pXpGd z;&5YsxXdL^B1xza5;M1kSQsyc%ah?ADGX>pb;$9fnxd3#U_ zrevJ|3qmdZkT95mS{b_3ZQFYioh1oFD<7c6UEayr;yRS}L7V^f-~QXdZfyL2-tqBA z&t12SrF*c#6Q=VuuO~s|7sf}P0nr9Y!;>S!F zNhPuDb6o#5^~1;T95|5EKTCfwYuSZWR4tD6t2qwf*m7YLAnx?T(V5|7M3_&B zmKk6Z2XF2Hl2%4eBcQEm*4q`O6-fj#eipS6y`#4VRv{z#QJ)-NWX=#Y_9=_V>^4 z1H16V1wUlVC>*c$_OZ0Lak4r*I3!4%9~>T@JGT#j#fbU+{XOR9g$ox}rzcnKo!8Xi z!MXGMd%JswhXZFUE0ZLTvXCKXdLl$ZRu2!kAvxLG-(^x9Tsqv@-Q3&TJvh*mPw(7uG2LR#&kjTj82A(4gCZmGwO-QFR{nXJjb%jzZPH!fRW~c)+W3Fwiioo;cIzn zK}gEu4xS0n;e&7XiU~H$Ez1+WaRQ(md5#u-JDn=7^$N?Sn#Bb) zqk^GYIRL1wWsvJ5HmSlCQ^{;CRX$5?dg&W}5z-xTYk{>|Q#tp#EmU5umX$DS>{oApn$MphinsrjnK&M}%EF)q;XG z7>L#~j1a=J>XOD;)maER#{vZYI#V1a77fw_aT`(l_?>eJ5^#L{ikH4<)X`Z#+5h{$ z{^$c7E4TJN+>2&Q&H7nfd*tk~n{3i0AnwQ#lA!E`KNlhjR}N*WEIwjDg`-DT6wZh^ z@gmyV;Z(Z0wdc9vh$*$hFr@=mojXT|4=!Ee?uk+1sDVqa`sere8DmanEGO)c4;*o3 zArm`0Y&XaIxur$Qq0=65IK#{K4k;pjjz8dm?d@p?%d5kD(FY;z?s9E7K3w^nkVIp_ zt1ROIoWf+_ad&Sg9`nbHxO2@7RC$->u?JM#QpFvXjt)8dZgPj6+(>D{f{Eo+OAG+^ zcXv)W75UL7^22r4=}X>rH})*fEy7Mz0LzvPacaU2?5al2F zX&<|w$kxs-*#+NQJ%-8m75baKY=}M{O|R)Y$2#^q^p20X({SOFKrHOCJaR2R@_j(( zC=-sc^WzqYfv%H$7rcRaL&cA+4J5Sq9ke8nQQq3zIpTEbTSl9^dDEGQ9W%4Tf0u-# zmMw?N#>wvf{`SUIr-x6v<)&MH^XHye9iU?$o$>6mewhhf;<(nOOG>H2U>U+1@_x)6 zM&lv6Nsw8q?s3dyrV#DGx)JoRt1>HDq*%i~J&mHH27?d_-ErUvhM{%*{e>9Lto{n` zyaxziZtnU;yTLF*j1*0rZqZ^Ik`m%UMlV4U8j*8NL1^}l$gqkmSghIK%@e;HXJdoA zC3A3m>Te@#Z(X`{$iz5*)jqI>z32UyGkSX`6VlI6oL!lmLfboshkghrUs1nx1au?U z(G4cX(VpK&M91wfDp@-Ai*qM8Cv;@#ntkundbDWG{ErJi|L7zEN<4I&t~uN|qu;?ad^sKwW# zTX`N(7%`JAtJvj85kw_b-oM) zMzw|3-9e-8!LQ4a5Jm%r+FGKuB>_OyrK}44j1X!oWVD$%Do4F`3ZOM&sg{wWJ|!jO zwFy6)kRXStscIDv@X8M6=Bh$qS*IgN0X+*YD$N*7!+>wKd_CeM$Eh)^opG}4X@`EUWRQE+)Bh z6;>k!v~|79+QH^>vRu^dCj^peg;XndOW*Wlm5?N&%Hg|6lQd#;^9+*}M7x&^yJLjJ zg*bi;58V+MqqF>45y;#C&;?z?0dOpQ19lAVl5Cr-jxffKUE%C9B|L;RWy zT)`v?07m4SqGf29<1c;D^DBWaJK6t_|MJ%J`&S)YJlxwow>m!D<8arW}cwY|+T6t}rtiQ3WoPIjcL2NXCG5()bwr=#Yal5iqbE{dabE4-PMpV6UA<;$aS?hiSrh zIoN4(?hqUv5Gn?7rD+=d7@E7L=gX7R18zAuoUy2|!fDknFE2ZuiL-QD**p<0$7v86kl zA-qzXEwwg|4)E?{czT3EQg?K?VuoR#sJVr@aPcDdX_-FWNBME76Bp9C^XKU-!S8Hu z?&54~^N4A%yZ6{R61u&&wL_Ks^wSzJO$$k$2g)RW98=8XR-b|&5|ty8NAi?_IU#Y_ zB_zg=Lo;A_nhqHkKk&+F+rx59;R}2E0!EzlgUpj0h+!eSWVq_ILd@YLb9L#`rQTg6 z7y~0fco>AJGYI4gQv}1Ngcqg^1r|8Xqt4+cdEI*A@rzeqW762$DY4)Km^`!J+1)~& zy1U%w2Dik-e%00IuunHZp7Sk;Q=}jf5^&c=W7wuQ9R0cJIXpafejhUzFCJpt9_3`u z%mu?-y>#hde}9jJJn_VZtFAhqn<9GSH3sm(!I-G5P0S`C%(GmLyr#P6w(kVV>Y)cN z2%p|%`Ebjhr~X)I#t=eC$cyVPJQP*}@5Zw5SQeb)H6<~$X_{((VbFqyz*8cr*$Tl_ z*lJss$h8Il7gKlL5tsrR3;?Q>^@yZ$vI?F%WcubGF=4mNl%N-#Nb7Odd#mseJXE1f z-uq%tKo_A#u$F_nYu~+15}$mX<{-j=LV$r)5h0Rxp*(Ol#KYxLD{?x6IqVmMuu%bS z%rKNTZTQT|i&*R+FixMPajY@O?JWm7M!@JQ=8dy9(=>(#T5ly_j8iQYQ>J7RayJNU zT7%$0maj^yEn`e0Wf0~{A*Z2DerP$9bau*UvC!%1^X>eU>RtTe6oMIv%M5H(x=WJ=B&wQ) z@f>L@Lz5Oi{W6k_HX7|u}xV6*QnX+qK}JOq9MGPRsSZGw;k zAO_CURvA1%9hDquXyPT(;{7VvVZ)JuX1|c<=E=i zJohN8U%-wUGs~kN1Ztv=PWYTB$9$(I#+Xp|k z9aka_Ss0$q501En*k26>N8`q zN~%5Z~miWlS+eIqBF+2t>!9-sKN?yfiAAo7S$(hrZWzUFGcD{e+t z$GdyId58;_*vY}+q3=GK@~&KiXSVnN$=R;ioju=?IyzuOIN9~S(c~}`bj@@eOjkuG!1U_Rv| zC06@PIs{Cez?y#~v?8gy!pb8@7ffdegbF;Z@Y56oKdTJ`49LkBfMsrn=n)KZB#mKe zL4X<9%xBNqm|($xLDC+v;Sfa9Vi+i52XU>{vPL3D(f*|48tEC=U$-zMwqh8j4MIJ} zpf)$Rm^Ek(BaAD{Bp2Po17?NsBS%qrl2ZmD>l1y4F=1d46O5NLW?su}LdUTS#8l|e z6>fueEcJ*waN=?2NE7;uL(E7>AbM8@gJgrq8yHpib_5GM zWmZwCqpFvOz)&_?{DOo>GBH%!nkshAhWmh-u-sHbGfy=3WC{4l9e|C_nZLk@3U!T( zNQ5QjIfqs5wLGw5S~5uy^6E~720F|v{i-i+={OsdhasGHjI>#TM`^LC*`zd=%667M zvPSd;#iQo&*pWnt*;)u7m#)}Z7ZwH+@y%-o>KXE98=j&(AIumj_NoX>IyQj zwfnj`$7n)#_-&BO=){+0Va4N#>&xJQ7nW-T<3nqa+RsxS@pOdEl00KQ4*2gCDnrTn z3zZ1nJ+hyS5usvJq-7|}7;_CK$pj3d&Bd=zr%EWxl;GPn%E|{Aza!_JZ#jU)wfYOv z6gl}lCizKNw7iGRSe|$(=K_ZzVD97fn;z8^vJL_G|K+D~9)9%E9OCmOC)62X(`*yD z_xWogaTsEhS~loBYKo8zRv{x60CLWcIkFmPg&kNfT(APU0BA`eB^E}Y{KI+r%mJD9 zTrT{FHr=w3ag80qphmce(CukJxwA*3dPw1~srKo9w=EBpUi zdc$yb5L*VpflL!?+7<)P52%L{80_Fw?<7BWfp**Fl1_5y$ElxzX}{eLG;Su%iI4X4 z*%BlKH$YGvf=RVYh2-_2tk^88+;?jCLs|3;Z<0oiV<~l97jT}5teb|S{n|*OSF^-t7Ylp z9$GN?!YNJ6VI&pKv;cGRXQa?YPFX^wE@*;>%2PrGfS+CIi_y>; zA;AuqR*NZY%Bu@gIeg^}k_IM3gRHOeZ7spqLZb!N>cr?^F$+^6;C7+iDVVZGikt?Q zk8Y17uSY`A*a8e+Q#4I4#Zawxhz&niXB6q3t!RP7Os3d~5T@fU6RL4ry{h*&%Opba z%4yYbkyHiObgkeS-Dh)E)p`Z%n&4b z`!0D4fx;0KxjfXj09ytbK>U~BFVWa>pqMi`E1~ScZ zsH+NP!-JW-P-CFP0wq17*ArPV1T!U?r6V4?R3EK+*jC}`ecl(Gw!1#SNF-82oVm#mz z+|onvXesfoO#mm!7#ZKjPoLd8d~9Vr+ulon2Sdpr$W|_8J_0t{v>LD0h)or}0CooL zY$Hqzbzw)~n<#r~Hnx=0O?u}vBwb|3@VNe)5KT32sMLb}qDhY!Crb&^XCMh|#h4~e z)6Q^WCtqB}A&tV!`)OA?sAFx}VRntvojl8Ta3F^u$%gfY!doQ!LX>DAB=P{5oz5O( zw}C~j_XUYuW#^;@{h`qRxn{TqI_A2w3vTORD&eNjJY`p@g#XxPm(E$sJmotl%{@)A z2Fq4OP;#vDAn6w~+YoI&-PrZrq)l%Ua^eKQT%Qb6)P5yaOtbaCP=!J6sz~bcB!lCW zT3};=O$tW!M9xaK*W3?q;=%~$32iR+QDLdqKEhb=QksD66a>V$Gc;ACL~CLwJu|V{ z`A)(%hp+gx+}q#hh6KaWGD55Yt|`EnWv3!lb$#TY@!HzkJ39zsL_*w3a2tVyC`$* z!1U@>7){VbLS?3KdMQr{50wWKB`s4nY+74|CxI{pmzhna34mbQN(oiy8y;Q}^4ufW zKL91%Q^iO?n`82`HZy$i#zE_vJGB-95I@7CrhwC)Z3hV$7zl<+unMh)XhJKBgdwl? zn4;s(AqFHQBA1jFQ=SrRKxy2T;Cvs7BgaCSsY%m!_n;wU!oRqp62FnPo=`Z?72&%BoWm6#D#B zIW(JQIjMFUDF;V&^{B!0ZuV6&$r<+=Y4>NZ5lt*x5Z8ROs)frUfo30Dh1yU+gS*^D6e=v)$S(cf^idKJgBzCHca2ZMr$2gq=j9Kamg_-X`sb;_OFy&pi zCofUL7{jV$1xj<2F^)QEGnii1lkMm^G}S1+k$B4SR3Zg8N}R(Q`m%7;OcQ*^YlaF# zS&E>{pz>f*bTmWWZ!GaE_tAqmu1*?{JVTVUgN(YEwDku~i)WiK-byY_I_fAVfFZL3|uj2_3J(G!dVk_ zF7rqzbC~pbqH%2k;I+f~6r^81xyg%LHm<;&VmLmKNKQt(r>DNSHg9a~p|U#OJ_fwO z%ZS}{#;0ML7J?u(ZbtMRyg4E!w+b@Dj36bsx{dsjKz|#MV>#7Kdh&x3ZB2K29f>2P z5T<}^cnGl^*WT>(1EYRjJ@vE$aFKTA>Dd7@OEA5DuJV+faWmMq>IPlBCjiDaFMON5 z%#YlmIJ9ljcxdUDiv(CbQudt|gNJ|^F$D>;Il|nR7=K;&|x3tdGsU$@Wg3; z)OH^E{=IXbxyc@oCrnTy&_RxR@TShU0SBO~gQj*03eQjC%x<{7ec{4|R560C2jAT1 zdx$5K?W|Uo66z=bFt&wh43{n)q(iPukoAkaS`9c&Cx=J=Qo)3QN%kbFbrE%RRi_&8 zz^snEi=?A4C&y%%!zjJqX^i!l_YF3Vk5>Mw^ahJ`m+4w}*vGab!i@A+8dfKq(P=<^ z(+|L)$BOckOe+S_(*R@uiE6RneN>oSkj97@9zv)~pmG?>z5f36vU|es>^hTbFmkdq z`UoNQY5kHS01$Hg_Gk!UpC$mFA$Dr25{PPh)XX=HLHWo4dDmJA36wh&gnFz~Ha;Zf z>v0-4f`y8Q;AsU$LKuWibGcJjo7+4d1~_?QTpegKdMNuF`)goM!oHNSSj-_c~^Q}yj{ckB^Q z8OkOWYY+k)<1yCg(ZIwPKdm-A%3f%^$}IgY;|`STCWOTK1YXWi2j}45D7b3`MH(Gi81ZQ z0wo6V8`m@=9IaPGqMaqqR^h#oFq^1&u`s#IJSmGRCoEntH^GiOBy5XKjNiJm?ZAXQ^P4NGF6xVPKR zWCFxRHo578@tt$M_A5AkDa~8WYS9 zwR6r&wsVUTU(PBHudLF5>DSg1xbl7bb(Q&q#DfFJ5Yh~t3_iOe8Dg@)d=A7TzNT~W?I>cZV=kcpFeEO zP=ye>M3n~{_8mE=yZkB=)@aNZp)$gm-Pi;W1BO9*$)#egAyF73jnp}kxZJCVhE`6E z5i-?$&j=Yj6dO!{(ZN(%)cM3^adCSTRAcj&Lcnq2r5F+ViphWB70h)km8keG4cH zoJkdHj&dyH3xSgZG4A9Od6^P?BY{X7Gy!EGwkyh7Xip=SfY}o)WYen_w61;yV3tLS zxI7^ZL+LUKS8)Z9Yy$Nb6Kd2LQg+ zG95u%mrIXLez<5nA)=J>Ae<&+h!M}5+5`;DJg0FyUO}?TSO57XgI-?<)?LLWPG@5# zNDV-Piv(yBLWvLt|G-8XmsEqa5*4CQlzIqPPeK><6 zgE74Jh8sIQN5ZP*hkV)>o*vn}AK&QHx--8W;Qnys;c4mC^Yebhy=tg+zODaCB%Z?t&Tc z5s201#}U-bkf+_b0pDt29U2%$#LpNV`=Lhv$eWJ?Q1^9uZ0hZHEOaKJqWx@Vl^4$J ztbJfGbIEm)LsM&&6IFF7AzCMc$e1!Hc9xbja=b&A-~-eSi_P1{WCICh&6W^3oOCmb zv#mvP`Du8q@{^KSmMTYDH<3`jVkqjAdAdBbD2r%5Aw$Y9KGsMjlmMvGS*k6eZhy!D z!ypHls0^>_RO<*TvO>Z@1ztlMDSz2f1ANs(7)PLmKGvm)1D|%In3qmbt_2zi+Z{ls zF_B9(%t)8223d-h@xY+y$LqxDHC;RFW7N}{%wUROXo7UZ(&(3UI2=~tyT<`I$~z7d z2~8e`c~u4sS{li0uL@KCfGgyLO^GS0@GwmvJQS;TYQ2PFK$}>wv+By=Rk}AxUQbWX1i@#Bb1f(pFK&&R%qU6) zfGtB4fJjKP(`JUzt0z32*Ln!KX~fPl!;!TKQxF~#ryj8ufWsHLfz>8*h-v|yS`Zer z6#%U;YKCZPs18s&;?F?<0K>EdTp?t0@FUO|r(9Qo1mv^U$W^B==}tltUn7*Y*~C^d z@75+Mos?gw!a+X5wYXdzxm4W0DSfuLySd@_pc?_}(r0lygyBQ=9*Hx9Y0~2KwRmL- z(IH-7Slb(0d4S;~c_zq-f7X^L8KcdU6^Ct4YI$)|*#YlSxP}>t(N#qFO**K0iD4!r zYgA3kDQ8EtJsyrLRZ_#OM8Jy14pRNNLhv@ml7>#+IV(jj&B`~oj+l!JfZo`zSnD|Z zbJI^O7-K>rEu@K{%o2&_#r?Trb7H5mLC{n)TrBB^F4~=Vp$+8dZN^nL_)?RT5XenG zx;L8nsm-x330PX3G$hjglPh>5&-alhY1o83VP^`qECW>?GAl0Hij5)ja=3u6qztrf zVOC=&_v@+U>}_7h9aWAXkl;nj@dIo!_1~D4H(gkvo=o~Wm-l!X9+wTN}T3HWh3TFj5gh;M52RbKA;E>(-Nvy zTVdK40INV$znJx=61;|%VS;K6f(PHG610Ja9*m4pG$v;XRr+Jpp#(}LSLSAiTo3tM!RlnSt;s9-X*;{B>AB z?0a;BUZPkn&3f+Iz`9L>q`^5*~R9}_`gKb!y z21aZQJ9uOCa}1SGEP(+D;iA+FcQF&0NX9KtgkCTd=E{x~hwT3c{uLd&kPFHg*+o0x zEFuir`yPT#XEzBW36;YTOsnyz+43cLghM4CQE@w>nhg^M00Wwpyy*vjcXxEY+|EI@ z)0Gam5-pDYCK4)`3pN3e^Dg}G;~U1^biSF9HVKIkYZUYO9ugAFy00^ z%O{C|q7cCdQ7+N&^CW*;1h#!)@v~03aO5d!&JJrmffp329Kv8qh3HYh*gNOaSYR-e zt2}>#P1UOn?xr15-}wio-&uT#spW!cD-S8p?|otw zIgaen5&%4yrb7Gqv=1Whc1DCFrS(o103&Q)rW_-bG6=PksFv`|bv6#_Q;}*d*G2gT zjLp%S*pNU)PRtdA96TP-4I@=$9Y6Wnp#)!*@-%U*B*^L_f!EeDYN8`-6&QrN)pQ)1 zt%%^c+l*Lpbp7EULK4Pm@hd%C>iD&VBPSsSqznFDA(Le$L28OkoDq~pMhn1q`k^v8YaB!f0NFU2x1cZwtzlmSM z0wpTw_5+I$7<3_cO0{DaFwx_mYP(!v@B;V|Nt5P9%kH`m*rvvVfSdw>u;lp39AlPp zL!I|S*dl!BbHX_eT_ncfZZ(2WhrEX5(<9Dz6glMY?d)qA3wd4uvz^cMBede);miy> z<{qW6EWirE*C|zdB`N|2-=;Dx%RqHOS(_D3FjO8pOBik%%5#W;kVBm+-orv8Iqw z6_Eg{j=@sp5W-n99~gMRBfJ0r(@}+)MWk>|E{?XLp8P|zcLCzrnHhfcu^1X4suPb* z%EF2V(6ZDy0Hd2_SSb<0kQsHB=`_pQgkU-W;Oh$l&?XothMgx64B$3VQUy6nXf`1! zQ?rzXwW)E!tdq_b-I{7(m9&J~G}Wup67qI8Z~85O0WMj0#i!+Rn^>SdB_~lf1Tsag zV0_$wgc1$FjjEZ}rUP!qY9GRgKYY@l_j(b%j7uY^yd^5MHp9`7W~aDl7DH>xp%|v_ z3a&b#tFM3PHw$f1(HExqkqkZxRTAm;BT{lSj zp>{1pK!c+oS`LD&TZ|i9`v_sY{Q{=5pqqBGr7+hu7(-mPEM_#gs$|*@k5mhQk~9s% zgom-Ic90myvP(pJbQz`?h$M$FbajdB7w{ zr&3!oLW0IG{E_<$z(3a<6O>C#N5|-j>oZixWDtL*<%;%O20E5$Iz-jv(al9IU}qSVfRXsyNGuhbpOxxTRCx2|KM4=kohHP?3|=Rp`VZq&h97 zcX&r58x61gU4^#7l%E{|1MTMhh0#9oc>@c7}>un;hl% zqNnK*Q;mUk$_jngF-F>i*~%d?so9z?#Dzu>+e(ssYC8-DOWsBkWu0^&C?P~K(pH;W zU6()w!_1ySZJjW}Alps&q&CszE*UT_s|B@#<$>9k5W+I08li00ii8=>%k-%IA0+^k z?ZQY-sGY4A!Xjai!+xU(tp*FEE-4G0)fv+~8UC2@2o-0IeTAg4a#E6UiWXb_N8IwW%c;R+J9HL&%AP zW?w$zrABfyBy?FUFju&vsyyj12TL!c*ri${Q&@|*>)y6vzfX)l z!uNTtNbO|tSUs_oiHfzci%C9?F>_uk*!J^HR(b3VwL5y7!MJT=Ah-Iq=&u<1!f`o) z!?GNd$A!b%Ow!imAcR@vuVfShplo50WiF*e0?|a(7?P0Mg!eEWiPsUe)$arp=55c& z2FgePV;Hk2QLg+d?d)&Mu>{Lt9SYB1&PJM4U&5or2qm;Ggg2A~Gbtl57NAwLIH+bT zED-=g7=*P``$fVaf|*qaOsXS7LiX&B+-`cW#tT#Q5i?GGA8n7{e?T{krs^>!2VGf7 znEHSpvm1udRo7`-{d{i2rGnfAlZe}7g=(y<_kkd6SO7@+UIaq`#7Rz(J2t@{r~Qbr zM^jJdX!${l=Cv5yl`yt2W5%!)D5>TXX4)i@1_MkJm#G^)MokVEpae(RY|w-vV^$+| z4Z$QTF;fVk4NN94tk=aH3vghV!Vw?^&_zVZ(E@=LLFTcG8|TDcu}kJ~(1-Pgsp^whJN0BKL{h zMlu<|Ak@N`_M;b7KO!C{&mi?fB)yxUKl0`~gd7zHB(L;{3zjy0i>Vd>NE(o*tQM<^ zT*6YFS*2X(CsDN*=?j1^iZ)S&hhTuM6Co7?O-bW~CSb0_x-J2r1hZaN2(A071e$!z zU#4EkI-tHP{89NVA%yVlGBm*@03A4prh>~4WDEF?oR&fPfv%)9kF$9BwYgwMGQDpP zuDWPf9&;ox25m|g@{MYN5rBGL=EhEfQ+t8^s1KWzP*ofeaCySj?!bVVBMyH?m`QS~ zF2ldIT~s@8X@aIY;M#8$#;K4A0KO{iyv_a|pnWxT##)i42nZj9=rufAHCr|L*r$zS zVdhn=(WpH?Elf(lYI6jyiyB~Fb0TKXc|V24Py)SfT6!c(j5tH zc-Dfz0c&*G_t_uThg}gfQeLQ-D7J@aRT&#B&SgzPsx5t?N)jlk zc5=X^;|Vl0JUoh(ptwTS%ttLZw8KUoj*DUL_(xm8jxn-V#GDO)C4{5;qN!o)E@lzV zepLt(Sbrmnti)1t==?c8UU7R;9(k?B11ughWDsC2;)eq5(H@D#~+Lz#iBn z#G1aiucDg>p?pRbvsgGGG@lqHuEr2fb;MY1Y?qy1$ccfQ zl=vUpu^SNGing9Ixr+pYKBPD?IM8W@V4CU)t`I)$QnipwApnFh$O~@ZFgQZe>V(l- zcuM$5Q_Ea5@)%raC{dij7g-{2l(Yh)34VrGFil`8q&nqARuO`SDx{TCsppvFFzZxX z$#&IY*lEeJt3FlA_K{Fyb;RE$7-r6_nj-JS^S}pL9u~QLTt6{Nv`)Rzow}e(!N|J> zJ9UZ3#>geLoC1cCseMN6V0mBy*0Mz8Fi5nLCQ9&Cp{Zk9Ari{+?efIKl&`Qhr;!S0 zYkA6PWJ=0RssyTEm|CN{9yYXIRUs;cRWh3prhQN`lrt4Dvn-ghy5)gE@yReT?yK%9 zOd47{V<%q9H5(gArj1n53d*58Ji1g42{u6zNOpis3dpVL zhd3+(yi!8okxYDBp)#`y0bo_I>L`b37#<^z%^GQy-m#}qWz(Vw3N~wh$vM`Mz%)U; zyo3cd@XM^AD!!W;i4`?;*+$Vkb~AVX8CtsVGL#P_SJ#zQ9c&upTI6ai)p~@~(ii4E zsjANXgC`_=WHs4c)P?guNpLLUQ%NZ*V}`>+#jrJ1f+D5)3E{6y~q&vkj|-kObz zS!~rNok$F$JEiiL9{vF8j{5fQ4nLTFbO)OV$zfw?FxVOPm+;C{)*#jp8m+%JX)cm{ z)EyyB(Rgetce4y!vNFopKpUFYvWGUOBc)&uQi80)t-;^fHVwvp7%w`kb~eR2)1j z!&H13aLY~(EI_*)xWKXK{P6tQb+lk$Fq9QSl@}HRF4tnpBgbQN=&?A_m;tikys@LU zT~4)ZldUewQlnvjz<3*$@2ns#nLiLe+*=XB1kO&yxsV{?onf`#nH^(NWiYE8J8(T` zFofO0Fv>x-nv_QY6HGe`pNF#AsY+8}SSbM@v^&|_*uy9p7fgvaKubT-=u{1H=HQaQ zp8FOhg{17~Sn2{=cUpeUf-x6K>GKpXR7(akpd3WdTWkxXj1jCUC>VHCiYQf( zbW5vsL^)?snYgC#AO%wl^0sgKCzN7^wK{Xk%-C?;KN`TVp`mTYKu6;!eOs7}rDt&ykuq8!8rzVaNA0%EyUs zr|j6sNt#sejqD3LTv<#n)@NvOGP2_^Gm zx;6taZE6*&ul3e?sSt(*vTmmUc<}I)RG~7B1aMslSl)FhVF66tO)aVj0at6i6~2t7 z7BEIyLdVP~cNw1sb>HwpNZ5%G*ul}E>nA;G7hqa4@a`Y}z2_sRPP)br`b~oeGJhp-ak4L{NU6_xq9JT&dl{a?%h=JFH`RvASD!V*01PtjTH%Lgl zl?9$1v@rSt4+90L9KU0_hT2pN)oGI|7^qDU!d8nZAIPBSNuwSB)xrp-Ofe(R37~PV z^QBsVXlj*KyiW`g2nNZ-q-E$*A}`*w^}d5IH1huIzn^A5z;TcT?`T@P-dF5 zMTtT$aeiFXwc}}q|EK+{e`cv}v>cx}tK}Lj*HmaK!xoLReXLET3~8e)PXx5@5~I$& zx+*lh=4g7+j!kEd5>*KvUsD*pCEKOEtItn=lV?670Jt2!37g?QJUnd7wBiOy!ttwh zr&(y-1rq`WErfLV=oZl)eBm0WuBotDzG7qAv9h>WUzs1D~6VPmo)rbjSQZTr|FGvt{} z-WrZOoYnG}4Vt=wFQ;0dzfcXr46{q$WpXX?mjtLT!gbwNmGCbXIu$_DJpc?g7g-vR z;wbTqkgCY}A(pxzdmg1z!huelGx zA~dpemJ&S3Sl~L49X!*vLX9w;7`c3yr;=#9)zXj5S{!v9(x{eeE0?|EMPB(~k8v?W zs|&u>BB6eCC^jV>8oXU7z7qO^R(ga5j<(~gS7?F(*_f#z0jRCTSKU?8@O0@1Y+&_* z%8ZSs=B+BRb~ePQ!*D4L*g3JT9!F=%X-P^+8hJ$>LGj3;bLY-60brO^oL94l;@2@K zKuP9sRVazdshbbGBciu%ePcOWWwwE*3s5bf0^b#cGoq?Nn9398khfgqHozmnBa)U# z`X&bQg4dBH_!25K8S(i2U2|Lc)Pjd0&U!D8BNzxFRkR?o2VeUz9V{^C&!3-Q2nH|! zsC*hj?d>AOR8_E3#^@76nc37Jp-LvH6A9o7u-)Ye$C6=$+(&Y~2bs^#X#@Z>(Eofbi77Xg}c!yvhgkUO%s#Rv4r>rk{!0?9QY|wbrkC`S3l?|5& zfd-C;VSfxqKqa6VU){f(@Lewx>?~_yvh!Fu+F!JEFkj@(p z^N5%#uoR3}4gGRRWdOZWvNadhdn3RzdHj2(wnOwe$qyz&Kp6T6i zByENCxJ)^W!1M|dl|eS?h3<{1SO7$-P@yjf9qOc)Z4)LETq@K=CFv>r;t|6ViKUgj z3!()T0K_j% z=)q8(@e~X*T*hf)xw5BeJj>dU@-w`>4OOeK@-Xdn474*!3WhQ#3>D@KW?z$j$NEfb z0_Y9H#MDQqI&xp>$>qKvFeKSvvrW_;@>v4FBn(Zn7gcQjXO$*M`4Ug@$*x+n6$uPf zITDzb5D;2AYOd?fMzt}Z0^im$B{0Q9O(|5H1Vc%+ zuG>_e62dY(JtDDG+gf)v;fUNUCx&*d7^)Bqj_S0M0!o#XifNE-r5Pbj3?;S73#&Vu zLWWVkgC#?r4U%f(q=dk=7lh0_M2m`Lg&Cb9S>j0a0p%z6#k22`LPpDv*`})NPe=CFQ=C0z4xexhkW{2W^N(Unm)2 zTbKQ(fc7}o2fN7+Fq3pCB`Pn~_7n`82uzG<95a5kZv3g0P)lIfnKrGL5}P^Ic%-HU zZJ0f5+MZrd%eIB7e5fqKG8lBn3t7$e!UpQ8z}1gl*h(VFBC zArlOUR4-5!yJ;jEI|9`sMlkIQ;0Cu@o4!$;KGH-9G9#)Hc*`t=o|j66O`5KudPIx= zmB8D9>=o>mIMs6qkNHU+yy$dS0agn%)RBszfCr6U4O(=7QdT+Q5hzTXT7@csDIRKd zNt*T%&T>j1!b!!4-*(4QVDC7K4^zOV9fMaHohqj%sgCuvzc$%WN4l4GA~= zy~ikK+H823MDoNFPtb~PO(93v4i=9EW`2x}PlF(@_nz1D=oD*AFxropStCCYQeq{N zlZzKG!k~x+V}QpkzL(WOYn^hVvlYO~yw1e-rM1FPiMA^UGMGLW3DJs>R>lZ4QuxX# z;cKcANJ9aarz`-563YeT!E-LK%T6>S0oE!EW#yEFfqE^^CYbht)=FrF=!L@MZZw3j z4iY2qHBxI3jDS#^Kti#X$BJ2u4Y&A81lLPO4TY*x77na}L8! zi6TLQ)Hj>)hEFaWN5Ad^BefqFp$Nw)U1-bokOI(!JjUgUs%WjJw)y!2cCcaA0o9$SB7y`89KTFY zCw0b`YDh$3b$lJ!T!RIa8k@l+fa=4S${S8P2r-G7{0NZ*BB(zrneyUG2%+-D zOe$Dfnu;k;X-GNYG|1ZRPdk=MWP`v9DZcf~Q!m_HDNyAeqNfHN- zgM>0HG65+e;((MCwv-h@y_6DBXLG4A8DER3TpgjjKYQNyXh1FLKsQ{E?;?tvn;`nY%ERC1VcgD_cAylDi}Nmgk2Ns5TW)tA*|612*B4;zbu`XWRZxWEm(Ez+pXq{(J#-)Yev^R{JQ2)_Q^FQ|FXQ zDCz6|xjnRzH)iCRB5$Fy*l6;W!`*~~IM+kQh``1NT}s_tK=Qwg2Rm}T?M*M!?g&8a z)8b?pdJ++^2a~IrNkU-iloyaZXmS~;(s~}sW8n&z^3BalxkapmJKfBA-cUaH@r@1kmwy{NUF2vh4@ooWGCjdu|x zst`;8Fj$Mqn6wo_Qw3_A6Aw?Oslu1SGn8(h@sr-e0!FDnh9ox! zyaZF`dCi$*p(;)}x)2QgYCM#Mm5M}y`7wS=Fsk&PEm~$KdVxp=ws`l)Sucb^3EW^x zNXk@*onXckf~eAjyml&N2ua?A(F$LQcEF*1i@Pb8v9pc9q2F4B#6%3i%zC2nZ$Y48Xq3|tvOYk7v^`m&j(xrGWqjus46 z@+6GFk_F`Ee#A-kdVHeEYJ6c5z*$JuB4>3v>9UG;8}8D1r(cx2;Ndd|21RKgX+n<@ zoEe8Qz*LcUJV-JXp&{8B4@8+^4uD2%&_X++Kc^qzWFjh*GQJYIqC|5z z)*do;r7Z#-W@1^kSM6*owLlILwI(?0t@ui?LuX+qk(X~PRTUa&2)+O$^tbrgL{+~b zs+3GkCa=MV5cZr3UzMm@1zcuQtGODntDdb@8W#I#4dcj>L?~vs?$OxRQKpH)S&L-7 z%hjbiMs``lr8ZR#-==zTAYz!Q#E;no7^ak7*o2$_{GX!(f)o{T<0Rp2_#8<`nLjWH8Ha+`%Cjnz5X9r)@X(7D{ihXiVFI9PS{)L2+}Yt| zfJ2hA!GkPa9^hTA(+{O2wn?Ws`SNB7hyW5R!eAlM*;(&RY%agahj2;2obk+<9FWYEEn~7 zffv(xo^L~PghEu;N+peMsC)d*Kx+zP44QV}xs}Cx>D)Qr97lndzcmZhZ+c{IGt@|7 zz=w}$A+wh-Ab#RKOnaHl(5cn@xO*2&7!2Ujf=4e*v{Ki~@`OV5#Di9gm|9FSPkO&n=YJ*j?~9dvaDGlOKe2S5!;`(@w9Y98IB2_a>W zV*=2MP;ffX*4l)J%2a|Ht-U%3!<{#SPH7}q3u@p2R5Gj61tm>o>b$!jOKFTFOC|p4 zDJ8PL&@kxCbx`z!E1S4w=MQ*X#`&Y$W091-2k=J6Iin}9{55Tm zj)6ezN1f6TJJ=0gKXykoqOmrJR$RBIq0wsy`7DbpQz}nu`C&YGn=i+&^HlKBDwB>N zVLDgfD{l;CYOrAxz>HwHY$x)#YEmc6ox9oOxX-!mL(EeA>@oOdgNRr<;nW)ba z&Un((fH}w>A&YeLm`o-WY{e`94(lY$2s8QJ(2iGoJ3BriAkX@@WtGqHaQN-#cbdiy z3J^qgVaFwQczB2kfQ*}DzeCQZoY;_{$WLDFWraizUAlCsW~*2*CE*)k`bjglwuq2J zfSr-pOof3rvnqJ0;PL?5QNupnCvq67fw+9gd8?)J4TG{g7AQ-oPe8#C5d&qmOkn|- zLoT0Q&;wJEhKAADh+QK~6{-cw$`^N($_at|6jl{LT&z|{#~$r`^kqo&t|@W|LaucT zG?E!4)xHtO%Xc*W=VW!kHf)WeVg%TX3jCyEz!OZ(>Jbq?{3hajZ(We+BF0BTA~5XR z&5ldV3W0%!ov>vvS6FVM@rdgLkY#kTam=(q@(hG`@`j%V3c)k1U!;Te%q_%)cFZ27g z%*Q;kqm1GJwJ((P)z-L1-quMY7^h?ye^ghPl2DSMW@j6Czcx)hNgn~vax!G2rYb2l z7)T)%t9mac*uh{K3k|Yb2&XzUkwY!5SuAD-Au9#-T91b77qXk94l`KENvz3%2p=ruRFNvK^aF%1dBqL9sa;<~&5ZO`61RkckX;1@DOPs~{ z+4YpVu*4k8fO$DXl+Rh}gV(r5(j5REkh&q{ji)rbhK3m;TP}(=N`Pqt*lPM^Srass z55_8`ZjzkxUCRVRtI~Ep>XbxdM`8!6kaC@$W($M27j9Q0fpmG>%XEk-O0!XFC1c)T zY~$jSzBJ(BNbJ%httD@_Jo!njLb{yf;bWP^Kq0v5&>FjzrD#aBLP$tQOM*R+%X3gb7t-Y-w`nl~RlNY3s6y)=s|Yfx zQd^6JnU?{|QZ6fJDW!4UU?5DnGj|Z8R&fMRNM#VN!)ga2nXOV{DvbtHNdc7QXK5#$ z>$zMc=PgMaA@HI%@!*_Ry6gpB7|j|l^*#95O}j+lrz6;m^x;#JPA>-~C&ik|t|8b6 z;I&PsWFy{q1UU zX~vS;v1~J6%zTH~BxhmH=lW1wpA9QC`D*R&@56xUO&v`b-^(1szJG7@8Fm^M3?q9no4TBq;;U?>sN3Ik0fRG!XGrT|L# zQk0fx8~hS~%XJuzYIaH>6&oaHR~t1>6)>%hEv*}j0NG7~C0Z%lqgmRp@U>H_BT5Fs zixMXDig@%CLZu!-mU@HQCKyb?i;3BKtO|Al@RW*#+$IbH9)H?dL z@PH>#trk?i@;RyK4#IW>4@f{^0{}!*0i_zJ1mB zq;iF%OpJJ!KotP#Ti1ow!fwJ7?K0djm2^NM@WHwoC@KU~UoZfm83V!s+FCqRgCJWi zQ~-huP{C6L^$5@AAuar`{Vehd2|&B$X{rOR8cTcdOH|N0Q@#uYj8Q=Z<36x9m$a~4 zxK++mVVogHsY1ZBL@25oRxG#5{T+#DHM$1obtO?$cUmi~RVCv~?G(avbu`Y2M5}}V zJ@#_2`i(UJb7VtfG9b(+*X&)*!q8NjP9f}+>4?XOBqD?y43bu1rb>WPB@<8yB>^Oo zI8hF|FN!10}Ikrw${H3bH;zBvBs7ZfdMhDu4d{(Pc zzMkqv9Dxvx+~_27TEF+b?|lvW`q#hv?e9GF(8ECb#}1<*oU*p<4F;AwkXq0j1S8MP zbAz!tB^Z8maS&XjRvIU*B=hj#;BWrsZ!TQ8@U*8rjd)1MJzwKrgs4lp1!DE4!|Z&?d;S=7@H$M?M{&}Ggob`a7I|+ zEcwY`nWQXf_#D$Yyn_`0zq@?lU_AIad@zKnHITXP;6EleX-196(jjO>h>QGAV7?N5 z#ld%LcW0kgmS;Zb(KX`xA{-dou}))~(u;;mlXX4X#FoU^`6(7$pra&t@FM6LmwxT$ zeTEot+T?>;j#RIc{3Hfcn6WUi>4no-XLVQwiC4fiNI zTEZ~M_yv!ITO)5`)~?40TNW^dm9*O4vF*Z_DVTViHWAj~I#LS+5IeNCbh$0@0E3^7 zCWaEKoC;0BGk7CWl(e=K6BR~x%z=dnkCGka9v%Qd zqj6>~V|erU25tOtM zG5umC)}6B;HWL0&^lF<~icuTfkzy?86}@-)z_c8c7%!77gxOvwr2q_NAyl9;X-}XT z;?D5qVFKh^CM=kVgpfe%V5p-|8lolCSweMshG_rSNWkM9!f6l+#(4UG)t$mCL6luWLB_suq=nI8O@JmMhA#|&u{l$ylJk8SjE}_9 zfWulrhw(4#A(Q@5v7A!k}2NcvhxbU?+?Kr^8rdk33ysfLeon95CTnGJZvx)Le z^^J|&ZaMo)RhOOYFVc+vSj0(9q&BV)N<4FpHQA(Bj>`Z?zF-tC*5LC~@WT&3{IQRH z?CW3uI^%k9>EPSn`OZD}eD&(9ufE}i8;U7m1TgMuqF&N6EcdN;+Lfo(a1$_^mPsNK z|C(ua#mCOZ#-&S_Zoc{E>#x6_D(8lGzx&-VKlWokMo-BgSOz23Mqd`~%Q{=%Cmv;uz1q|jW>;;(njDFJ9n6j1Z?P1o@A$b63YSIXx7)T4_BT_>Mv(GI@gsmEw z5eV)M72vo##q5xnI*r%FM~o=o(7~vgo=S#=H!}jm`=zwx&i=|Cx@Kcl9U0M z-ZL~Z6I?2fyx>TDgpgg+`2!CJ6^xyZRC~}7pH)bs%W`G{%jaPm3_#@a!2INfHX|QQ zLxlk|neTu9`<%Q#`N>b-e*5ir+;In|-bWvK?1me!XATn}Hi0qnxMOGX6KGlZ-mT^? z)R6qNK$ae(w8;&&azC_jx_SS7_x-c?z!dWTb}%+Cyy)2=!+$t z!@`V;CK#yws)XRnv@CVPAOT!S6`={vPUTlreeQFged}BQ$L+U&`di=r7IgRBci(yE zon-swo1g6Di2?A7A{Kn$Jx#T>Oam(qsS^S`L>W6ugn%35T!U4w=;gySYP=$ntS$EN7zQMHA=EC53%9$P2 zEr7Ds5|YN*>57E1QyQKoC_oy<&yrRaJ7uZ@Ri(aawh|RWGhh1j!Q$B`RPxr9wg5KAz<9GDy%k|>%G zB7x1%5vq3ABCKC|{==qy!m346T_fjzByRP#syt$B3C8c|$rGGh=8%Ks(w3)ki)F;i z?5(Ol%uD1jM!dwP--Rk{36fTL05PR*@lat?Xf@|67+UMS7?=W}fs7&q6aK8JB{VP$ zvL6ukNYGVO6$l(XUso{?I+suZ(=cFeyX9uBg)V<)zdF=3hH||}qJ=Q>3q@ubzgM;r z6m7V1AdT5JifSFNRvhbp@Pi-x)<5{Im%sewKmME_f8O(+_w=Vf{rvg!{cSBUdwYBA zEDt{TATZ7=*Is)qq0Ibr-G1=e0jcoz3v zuxyc=7ao7&YhU{s!+mal-#<*v5#e;}*yMOQeC)BuzW3b+9{j-r*D(q4o7DA)iI=^- z{nhcw;lbgKf6B^z7USESe&@r5OBaz~fi56_?D5Cn{`R*s!MKw|NSY4w4KpMgJKh`E zb-#<|=y-M4-FJWL6Q6wUv!9D6pROKnc;DiF=(7_dA2WeFcC+X~+3t{AcLzqnnFiAQ zds#W9>*Pmo`A9t}+uiYAx5*KVi{oQf9VunK7)s`2lF&8jhKwXmMn{%ibO2#+Z5)udo08Eh(0hq>o_MR#Qfwu3!d#+tqZ1Q7r z^Pz_x`m;a#GY+_10-pM`r?THZ@W2Bc@$bL?n=gCW%RIOx7zQ2fynDvoF*n+bviCSK z4$s2m*3a8l-+ZI@1i!g`e0cnhx4&(5a`=b;>JMM_s-JwtD}LhUn{Q#&1F2d1J~wlS zz#2BxfSD?k@bnP|mA2AfbfNY6Uz!#QM$2e7PT%|9_q_XW{`%!Fd)Y7l@|$1t>eu|_ zPyXafUh;dXr6Q*O=5QoSlzKDU1!MVPuS!DDv9CPN7iGo7xN+6_^ifL5XQ8cC@_ zTH%%{FQu_Fhnl)t@EVVhE~nQvF;tvHv+B1Q8UWrsCbTo-Wo9s?C6j53c>Gw1YK)9( z)f;?m&It@5oaLl-p#g=dF4dZ%L_#@{rFDKi^4XngA)&jy-F00sd16X;fl;D>9I}c> zT64XQJyG>8AUZ?nnNnI5Ef^<+!&bc1PHMx8qm=*QC9U)l36EB)w5D;mOPIq>+6Pf> zH_M-CX$MPN^xbNs8lh$iz_KuXH!3ci8*xf&R=C1+L34Q%07*+wnPx)>Lk!`OQv)z| z6;%gmzeI&rsI8P`XhJw85RzJkhoNc0DCwl72MzVDhaH(*yq77}K4m8Zk~%9UHv7Ag zY;TSxm{_w#MP0LXTQB9$)TC)`{zFu6z4`2O_E&rwXZb!m6cQhJVxtLtA|plFOh;Hy z!=*|IA!#RV%I5-rj`Z`-ZzVta;+}TJ7_uZfT z#3ydN@y2VezS>E;z5Rg?e1OCHGoSS=PII67^ryLU+;`u7cieHuU3cB}rC zcfRwQYp=ce$xpub-h1Ew{`Y_9JKy1WhZats@$_e0ymawT{^UUy4j@PNT||>JREnXT*?^{nmSyU6N=j5YtfA}h zbyg(|HWy}=r&huoS`@S}d~`(B<;Aq7vzBPEpPeE?Vq~kwx@8mASS}q%;p9M@prxJum9+e{`kvZxbvre z>eW|YfBoUnL7w3I?2vVU3p|`~F5mUIz&V$b%=Rw2+b5i`JrnN|4*S3lA9>`zzvV5@ zeCD&C@ng>-y9|UG@gB@)WAu?T2BtW{vrIqo(GP$Ajyrz(^{?Oa6Kdu*cMc|@IiVzT zX4U;tS~ARLmQ7@9hjg%5IS!;loC6RXTJl+&DEgL8dLIJn(D>PI*Ks23 zo9TEEL|}5uP{MS86c9C6B2VElvIJkV46z-)q@e08Y!UyRhKGEsk2u+!r&-6V`-(VHBH1aLYNvc;6zezAX52R zLI4WGT_riELPJg$ps9t~!XWk~n##k}*DRr0h|*cfPr!~>=APuC+*31c$ZcAZId{3> zhHC(nx~8Z8g`H;AIf=Zw3o*w$kYE`(89(S^W)DZHp1TD-}8c&ZuZI1g$qv{9vXCs1tHP>z*s3(@=dUuH_q)}^@TgX z@aKR2|GxG$f9D_lqu<-#KL-FiECDVq&w0*syri;iEmHzH*PxGlw|z; z9pfOMf6S?D3-Dq95D%@~!t2m2FA-_xB!A~999?5{TwNEQ*nVT%P8v4m#BO6WPGj3> zoFxetVFN?p*OkGrIlLvCndl0dAy^#V*H0T(V zS{E8I3@MYag}rQlle@*1oY1lV%~dt=N&rB!bgnsV@g zx9XZWQ5odtG5`%{j&-u_aK_q8Z)WLp@a;T5f@}np0&hmH6NmE;0Q_iVd0bRfxkUhi zA;}bUu+4p$u&g`w zzlkLhD0~&nAk|b)Ribd)&3-eLjYN0&%#WLuX1t z%jf66mZERrd>y;74!-*+hS$Nw_8m}^d;}Xv?+Yp)|MilSko=k63IKo9cum^Q4ECMu zuX#r*!rRoW!z#fOQLhPGlx2~~zrm_DmB-+vYHAc$`Hk71VEQ5nXpvS;vWiYqT0-SZ zvnTXx+;W>Eb^XYI7L!SjE~6N5US!-gp)lqKq%lHHJz0Xf=Fr?_9RClXVHiJ7i1kBg z`4d3}k913Ib9<^N-?>gZkN-giRnW^fbn3`IqXR?=85QJwrAFg0DV>`i>>DqK4!#$L zcxzz_sX0&Y#|D0ri!WTv4NYC(9t_alcL&+GgX@G=r^~a-xHujE(L!;e>zB&kapL64 z^>;;Hao_K`E`G&rd81{%eT@g`vW?gkc845< z^G>ufh}d3X9LW%ldiFc64M4gHNL-1cx{0eQJ$CA`m(RH1%(pVjHm#T<4~7C1BF|d` zG?-e1e@9&ETI5}09W|i!Qj5pQgXyu`B;`}I%Q(g$b474xl6OKlr*s**8s4Xx5@%qi zRczu#LC>-xw`!r?H^kk_Nr^f)kSS-aH!`B>qoYZ@{>S)T&QF_0{=Ij(?Yg8cNM^f6 zEsi%A4gtjU2buP5r#m|bQ|$hyh2-Y_-JqYj?+Xzk_xVDQMT_74EFB>`9PnBi;12l# zufMgjm*68mqvt;S))Mea{0Bk4bJWW^W@^6BRmYu6?%TT=gc;j77Kyn2%JVHn5)6LN z1>ZrC)z0Uq4VSCVCuqn?cXN;{d|P6wCV2wyv4e*3FW-fauWEb`+1S4Q16GL%2Sw)h z$tUSft|pe2SJe)F<2Wk9pmp%NL$;^~==vHF)r2Qj8Jmw)D`DpZ@+aPWw%-g(_8?z! zy6QAKyp^4=Zr%*vUE%95zSV#>^A_SsJfRYz55`)Quue@7B;B}UwXRhP6!m+(Wb9T@ z7t$J33n^dxOZZ}K#xHI*HKPDQN9t-&( z&`LEXHV9^C7!`vS;b{!(gk9y~RB%mfu{)%M4=_7_+qyoah;BhORBL{=6=Sr8qFH70 zpPVb2#R446zpgceGk#bFSbkkW#kH9i)X3x*;OL!HF$>8bcn?*RK;=vF{VTPnA1R~> zFfPhIq{k`zar^QGaiQk~H~8TD+sX9~B(uLX8ofO@Y=I|Lwn2n6)?32D{Js#zXYcj= zcfdoXQK7fUP4IW%8b*9v%U;($6^rLnGtoeYOeDHA})-oeJmV3Ui|4q`R}7;8TP3w|=g+3XhFh;kSu~d1NtedD0Ri z3wE0*)%{_yj}9RPc|A%rmi-l*2n#-+-@24`bDRYAs{)Ys$508ZF8A^m^WB~-? zguuzv^tnfLEl~rk+<&Eyc6nTGfGQ0i#v;i5PauKf9K-(_Mh2P2KfBniwzgI9TfX06 zv{466>$JBYg_Y;Ob=3v_KtRlL0xj`%zs<(`hR%Ot#@aj6yLK)89|zg}k@yI5A@GS?OL_GS z{5}nSpNCu|8nP~pUW<*q_ldWklTtg1Rs%1)!65KC_*EsVJ75>ze|OpcVtMQRh;Kf+ z85G~_`zEwa^}PD^NFstD6GCy16vhibb{v0>uSDhRTz{!(4^f4RF-s+T+=g&cz7X>8 ztv%rB3iQzpehRqb3%L7NZBqY*=wcsF{tvc3KKsn2z}V7-s$Y;Ptv}TsnrHL+FoVA( zB=j$8ht;EE<{QJS0q6-KZ4h&=2t1Dj+Jfi%eib~gw@$?N@eIPGnfiu(MXk6K5* zJhY#FvvA(*`*)2N5$={hDZgxPVOIZS%q44n3i)ekmA!1tLSD~Wvq`srIKeWmD6iu4 zCCwQ-g@y+=BLlSvlp&62&`I%i$$~Ms7TzZ>7(2dgB!*2VeZE0=5}E<< z9jcX920iAQ6Hd5zGk+k5?hcN4bC0f(onxL$c!>e#6H@gjcu6Clqn6(&3qFkrz2;Ve z%vRNcw8DxwT3%kAWi)|?b2VVp zz!@@JR*0D4SF1%msZfne5DTg;qA_CBMUG7kbBVugv|hBO@CPCJa}NR;24wirO)CSrU^(=TyEqY%w=^b85B&m&ws;xTrA6*Tw1+NOvN=nMGbnjo9$ zw|Np_yC;2lo;3m@;&vEIiEtOW^Ely6b4Yw5fQ5fIXAfANhHMKF&}{rBc=D}PbKZ5? z;K}zc^9ejw^S-9x;6v0rN5atI==Id%vTWc1ZU^6izYRGj?Qp$=-%oQv%ivcda=-i8 z?C;$L!=k@E+8}wt?-fEGfOi!GrZ9WKg|i1F!!3qUH-Luo1{GLB{1)!8*#5^9PBD3cQGAS zlfo7FEL}+rP4*?m6Yb_V7m~cQA_a2o2t zNr_)&M;TitBb9|$Y2uxL&A=b&fY=D3?U%%KSKT3xqLjWF~j<6--zK4K~yt8|@5 z^Zf&>!FzYQn3V&xs@+B@Qtl15%gakA+~)@)@PiMe{@Mn=1%M$XS%5#}*7+>!T$=v( z?pV@#i=q;buFPi8*3v$FsOt7s+t_;BHPj8=+cQJ@=|!h&&m4Sa^sx&DA%Ne}9G(eD z{$6GKOxhayTr@5_7ac{u&qI*SzlBft(sus)jUIfE`~EK)LKwoj<*uVf2xh6A&J~^J zJ=vMt-MR!pbdRIo?U%0+;A?X1mAhQ9?s)=O^SSxa|@Z-#r}gjVNdsQj~}m zEQ2q%KiVOp?)iq712yE$zVEp__qBYv3**QCj@#QFf9iBwA>5$N} zJJZOwA5k%r-!k(3Y> z8k|o@S%V1=oVN-Q#|mHiB^T_Lj8Yj|7h@y+IGjdiE=w>&RcppbJ7h7rxl$6zAffW{ zUGS?{C!Jyi)QFfne{V?cCzP4tLn)1Mt~AFt!&kU@bM#!ia%Z4thM4>BUOl#5Xnw9|O+hpKDBElk?Nx7TdC!i0|}SHhi(K5Rn?&3f4kvz9wgo=u%dgQ@A44DU=(8 zTO1(HLib0(U}8yGV-jTk;*qFMO1BYr$$9RvPd7*r3+!wQHG10WqOP5{#86@@wDwZJ zK-CRH9Q7Y&rnNK}vqquxZ8yn=`7BxvtC%VP>y+HQxRC378g5y~Pq_RlHu~^TLhSIm zn)|WJ*L4&7kEXm`ac<6S4Y+_v3KcpZH1wyrzKfMB!2xGlqDY_(Q0rpv51dEP@A##a z5=Ngy!$a!Q&IW3MF$Axhpe&~BZwKZwTOGHv^Ps6q?<)@V5(El#U)Z733y8?F0I6F4 zbJuJ5t7%N?;N#&{us+$OKD87Tns}v?eUR?0Tx#~%Y@}(~uxNuc3zWAtsmC=49nhAh zk=7<#=Ne31OQZ@}WLzlWa8YTs`)d_EYNw$rFxiB}3XGYNk}o~0Orq+oQedE5h-Ts5 zT*OD!l;;(DF^lDCDN)Wq%%Fz;xQWWGL`V*3&T5I{x4}6cIwB5uJa)Y4#qdkW7v&e; z*|~J^1V6`fZ}V?lykds@oL!Q{5P9F;zQwcXyZYF=`uG{}9v=XH^1mVn?+3j1z-;@h zuWyB$lHYInJ$(*%vZ`P;~dRLe#ft4R$rZz5QIzZJ+I@@$UQa zZpiV%V4?0iq3*Z#?zbZP&1apf_wh~_e>gIi6s`Wx(XAdt39*TsLb>-`{K?N11NIRa zk9H))LN9c0(2hWP4FqVYn(XfzZpn=kAKZGZ(a>TDq#YPIDt^ldBAcq)p1b@xgiDs-acOxdy zgiqmW*eif%To=kV#$CDbOdue{(P2>Szhu*Ue{ubUU@0xac^swi?bNR;NKW#6 z*+CG!FIVxq4MOO8>w&>Ae%#qPQ80SFRpQ&c|K~kI6)Vfr3;zT09$aBhFL#3;{&9jN zGolbmD5%?UcTW=Ivy@!6sMCdMM1K46v{7fk*IkX;Xvq}2t!H5Z&{t&v4!6zB#K~+*z_6TaC8pWtj z*OC9q7Jcp69D}*{VR3k~&evW`BM+>!Ktku(*4 zSVju*Z=(@|D73oBdj)67#TmgnNCq2G-AR3LuB0X2pO?Nij7?~FsD|kTO?ZCdwDUaR zFkZsV57wi~ZJV)UA}bMY=n8ffyXrH0r5P{qDm=i%6`7VZEp2l%ut~w*qQEy2AJeSW zq*1&vpJ9UORZKYzvw^wTQa6ER&>l3XjP`@Jspwgw_ia+xEK)s{#9(sI2@C1L@q+q+)AIR$*ew469tyv5d@smywZO+dlWfS|{LI!L ze)*A?BS@pmF})?nzNE5Rdc0Q?zZ-$o_z`Me5&Cy8(`8Pl>lU|3(|w(+3PSTI{&N}V zKbOy?6FYQZ?KXFRTtFzkVWY>nRMF$s>CTIC6#AI)CmlqH! zTI9MDfz7bR6_TBVA5Y9g-*+)qU7nsE|A0HM{8Q0pXM73{#p<(&6%FZr&sy{dHbjy? zZ$0e#e7i-aB*O^)uRC%WxE)o@4!X@_W$hhA=M%QgS2L_8^ zf1fmkg16N?(r3x@9Z!!9M`)#(hs6~g2dd8Q*OC1S6kyAm5e;Xq$%o!071ngC=(?z@ z??)ms`VNiSd+=GtcnJWrE*cPLm`hUgyX#drB4*nE$YuL^h)?7#eVwmadHb5%0Yc2a z+uYs1la-_m7kM1_lY_1$F+Q$S{a+?YUTZoZGl=b5a^!DOM4wP{-~N(5`Q7=Kt}YEh zsGyw6->t7oqF|Ti4c~DHx9ic5whXx+)A@X8`?JGjJ`i=vYhQ`4^SPM4_3_o#z6JDJ zD!PAK6Yy~k*@zCp_dAluQx{hkmpIR48p7Rlifr?0+W~p;2MN-K@V1IZ`nPL$6y1Xh zrmB7;iVZRyjnmF_Pc);mn-d0w5deR#mZ?Esb`h=LE%e0u0)9X7@W)C+IRs0R&7GG_ z^JK3m2525P1XPY$7&JMyw2m-iLQ14m%U%d0Cza5X2pS^VT+IqHN_qR2QBlJy&M0X# z84Hz-uhTDkqIW7dDe{bF#dWcNqq>hTW$A%m2ei`N4^z485 z%cP(Gr8R41Rq$VJ`SEue^j8H`q*C=|#>Yqh?Rqdl;EPpa30>^!us)rFt1WngEsAzw zNCQApligt?>z}z;za&4fZI~c6oFPsr3R`6v8_LnuD4D@!iDyeH?iLGF5U6(Jq4ge9 zs2pd|!E%msyQjdI4Nh||qOWKoscGp#edE|vBvQjlO*!~g^8TtSI*6Qq9-k1dP8-gZ zT#qtyO_V=h*e%JQ^~1;mL2IQBRS8ou3^D^W%BFq072;$nxVF$U5Q zsj1NvN+QH=+s1QObI1FC;pNWw@m)Z0MPyDFNh$?$2!*@Yi*=gPH`Dl$I=!cr5@h!e zTMVIaWIjgDNGZdvE>#vud7Q=H!`hV22h2YZiJNXA=eXFG-hRSGl1(XTN@6&e`7tjloje#r$-K~(8q&F@d$UXTR&@Y}=hh1tjg ze0cq_m)h|xN&Y%R4!$9;H?Lo>lMUf3s;-8(2Q!$cBVeiEBWawe#ml6m>srvBA(-@( z9kSveZ@G``UwA|8Zaisr{(t!`?{nu^5;KA7$yiTpEnz`}HdNg`loaS+KQV=ukD8Xc zs%?it)Jb!&$pGe=W2p(>l=%sGme$(B!apyjA_)Lyh?s*s)~pgm1gmOm?Dws4ei>7| zq8OVpg<@d^&l;m|@B}&7ny?ZZLZ#%TqUMs29)g5&i%bCx6eSZ zIxN+Y>O*Kt+_qRhu!2rt-Fc`9=&x?xxTO!c1$W%lYz?Ztm8*E2_3lz$N|Tejbid6= zVr)a8pyI+i=o0J0f>Xq4x6dW#jf4W?gzYw(bGqqk?!NnOubO_QA0v=ynw#TnNYBA` z0Wmq9U_gvLvuD@;U^j%)hy&j&HG>|Ey3Zkm7u6p~)98LI$sz7#q&`dGB6qs zEAcd}c`7!K967*MdGR$IiGdHk%t(;`PyNe4WO>nNjTuX;S;Y)tb;lolRe=Hq8bh;k z?d>Xij4^cx6c_Q^JkrChSVTC~aSZ^FGCo7boRNRrxjvzB zutXz_$v5>dbHtcPV<7burp(0Y+|3$^&Kgg$$>-f<7(Rs~C5P8m2m!<_^Z8KD)6&%ER&8v6vj`vfUA&#vC5 zt{ic0*};R|@BO0hk|6MSzzci8ZK+|Hxi>~#TpCtcKezEe+YrP8|2!M-7qfN$oo&L| zq(JC?7R9^I2coUJJuEIe!lU124C@h!2%+XOv9}Pw3 zsB0oX@(hBkd(=%+ytFu$pLn{e!4bQ~G$&T_XvRnmG-DzbR~br}F|$7-zR1*VA*)1< z*#!eqgG&CyxF^}rNooNH#XR%J5N8ocwD}99l*V~;?j&EM=Xh)zf_()%^Y4|hs$)Ao z27zW}Bo$a=Qpf7h^71&eev!5p6zpBFxp?);8qdu2QmtQzl_N-UIMfgK)KGo(6s{2| zpPTv?L_G1goUw`+b!0n)J}O$Ic=z)4lCAcU8-+?#?!K z*nP{~eS4eQou%z6;8>3V3JJK@69w&y`cEz{L;9TfM4yIpUG{Hft00D~)cm(T{Lbs8 zb^HE42;{&fe~0W~5GaKYJXW9kVJCI{fBe^n--RhW>a%%n_+;A+I?vj){B=rj={wR=OQRsoU4GhSa8(i}(O=8331Y+wB;`<@(hudZTOV78c7-bpFRTV7wv4#Q zuJyrI(ImLIiT#Pbx)%W(4-V(caAOS|K7`12-%3~Bv%wc0?jBD$kWB}IC{Cf2&k5_p zFw8O8p0K@K%Lb-BMDDIlhcNX=Lg{n-Ae=|^KWV9CpKl1;3t; zq22s$oxei@+9?9$qr1AvhWK}H;^{BHOYX?gR=_>Wg$~i5b zSYF2d0vSPvV^*dyYfJ*$bI8|}zyf!xk$yJeGy2UKp721CY4QLjFdyM~35(2e>VXVCk zu*hcjtwmgUxA|*9GM`B!Y+y66%Vgm3bLL!<$Tck7)r$vZve}Go1_GU+dX(PO<4^il z3QZ>NV5|316EF?c2HmsAsPaXlBI=ySqH2oz+`{R`Xi?LJ_tfCJz6}OZ_c(=@!4{e`pU89(rJyI(1cH}si&V8QYB*>qbbBO@_raf}*=JC@)ALlj;B0dvfq z%5d-3&RWSGLYZ+?%;xCddXd&~!`?4*sa*r*87KokbMC)s-$SzccXWu%hS!r4c?M~{ zaI&8b;vM-1mQvXa1O){lT(JMeQ`ggH(;R9HOdb&9q8lFH`Jay2uIit* ze^qGLX{@Nnu%+k|e!va>_WRKX4`&rVq)G3p>#Zd^?Zsr>3u51R{}&n|iZe|R?%lt# zU>Bkl9jbJwPdI~7)L09>TR9m%qh}nB&`{+|c_?M?&J5If4J+Fv!K;>`;;%+OuPR%M z#vd!$9!oUgv|Y)&{WOm*=FIr%-+-JitWV=Sv0GrsM5rXlLxHft4j{OdS0JI5NV7H> zV??w4Dgvh{?A!$S+kjNf1)$KijjiiDYeH^pJj2meBrF4r0QGK6n@HJp)#kNFz7s;d zY2`I)#6z0_Q!tfoteuDYGl#kli+8P7SHsUSDaOV$3>X%J^_m*#LuXcn(`iLDaf0e-N($FrTOQcNHag?d0vp;>-wS`5j*f-5rJ3Y9bktM^ldY$bOYgnW+ zPQ$)sCh$l*Y>j%XJ8s6!!S-JZ6%Q6CKm-Uoqg4-XS1Nu$8X>EkoejvwfFzWIfujz# z-~0L&%q&lf#=9Pp%=K(?o9H>$e(n_T1_LNLo*DdlDzS9QG!70|k z5Q{*SXtA~lU-O_>OLu;X`V);TkBVB*sC7^uT2Rca#4;Mn*d-s%h}~7$(DuF0Kx>Wk zg|?^F3Y7;MW|lqwe=7wU7N$RaB38M;gCRt=M1oe2KG zFnpbZj6sA*I5!H0?*;fTt?QeeE}83@PaA$u%aDCUL>`c^K^Wo+MST9d2AkHUDF{J;!}ErrE^ z+6Q_;NWkuMgR8c;%l5CW!}K7=9w7+K{AV$F;L`_ZLR3DVx8pCZItFf&5Tr5-30Xn( zpI?4K%>Di+{p9cCknl1q8}J;AFAPqf_Wcz77B?LL654(_BHq5Qf1%c1C(%Vrc)JTh zL4aubvJPE`CHS4s(i=g}FSY5-0Xr~RAR~xajd}2o@DBfgSRo!Dy7SOK$IY9iJ^20j z%JZ>4*Ka?TZ*JCJ@S-HE%GzsfJ_jiA&mJ5A`6&PWpKdv-;(rF|t6Cd3e5_mUyey3p z)>%Xob@JZrI~E1Mu>0l=sqK6^F_Y(Qqr1g70Ua#~oFwCEt3FVG>xWlz&a&H9)YAQ;ewrmF zKpd3@9y+V%D-Eq0HmzQr@Ic+#4;uPk-)Y^kOC7X@{2XfB!HJFD55SrY;s=9TzjdJL zYErfw6|Gtw%@mE?4;p|e)lvF@FiaRx*K5TYDCgK~yIJJVJaL%D+u!=q`e~8*H#A&$ z3LsCTQ;vK4PymHeGE@n-`JR4ba45Z$V;-{Rm?p}PfP&H!Tukzr9qKPuuryrP6*lmc zGj`ddwBh#*XfeQF+9;Td?%P{b3=xSow`ksw={XFia#B4SXqH7xh{VB23XuTM`@j$a z&mkoS$xj?4ub8V7t*^DUw>iSY&sR-Quqq)cF$7+` zKAb}UyvKF`7)IF`(pgo@77(pWF_BiE)$v`%3fdGpf!_Qi+1?w#Imn2S$s;x@1y}AV zHphD%=mmF!7s`dYL(ar}NTInZf@PNeTN^e~ESNlJCWuE102j^=10DFs=A_){ROVi_ zj~vH|MSbrEIurp@KrrH`cA)mPSVI_;ctTl$-H8D?W@FfOh`8q;+yF#IBjnkRU#=6^LejQG)3+WhJqNAG))rB8D zpby!2vX2Rk+{?4G`(da>a|>EhP4+BlsmMU_yf;;B!8Rml*CjzDXhei(RLmPnitA@$ z>H91>n|qzT56l>^Ppj(t!ejc11f5zGDbK^M=;!WY<_Q(Ji8CQRBxpOT5)nzYk=$4` zFfk_z7)tD~&{&Zy|50R^DYVQpcA|gI(llcLmX#=KMDBE?HX*I0OH%twmFbh{+%{VYZfiBiVNc@JfsP=OE5mt7pV+xHiI|8qXe$(+OQZEmj(gq?l{9Cq8ae$$sv-ac<+z9;#= zf3HC@r=Z7FN7JvSb4khU>}n7Dm6@%hc-zVl){E-K*;&p{NyX#8I8IfImHO9rtDD)( z(6tCo|`;xOz*#>P_!iVQm6Eo#?!%95j1kq zE+pH-Sg6ADlN1PL-V(4QPg-ap(;$AE*K(_bqRI}VKl<{$NKqvt`ZNmuKC{_TXc0NT ziXrfsUt;7Ym@OB&<(N$@-ZQLh*3K!U&Xi$Kl}R2~Fd4HFJC9c&>P`*%zp8LY86@Fe zNrxrE4%1Jqfj_z>7in|R{7gaMN4WCsNxUqSnOdSi!(G+hYqoT#lGb(QT-{Imv zV-+)snB)>Ib7y z)fXbud2{H%#?rZ(!Fm5omWnB>0eAvovXadc6sFDifIYhirHZDS)#3+Tula~R|Aoz0 zORWztln0?}hVy6vaVW<^UH=mm`(`#Cd0zx9_x!b1q{|MBoO}0sto|n*AU6~ruFaqg zX#vyCeo@+H*@BFEXpZ5KE45*qN|IwTakYdBy7qqf%Xi%JnlDyrR(1qwRCCg!%&E%V z%nPpOPs`${8r2m4`mUlP^zEzgUh-i>l2%pyl(IcaGN~Q(UVR^zBa}WcP)tTf=J8^k z&tXgWF>`eh%VKusNim;6y1Q3Y@zX^%zS>(WfJE^u=rT!O|iR#w;X9qNS`H9A# zHT$b8upS(A;F||(XmEA&;2nG7rU@4>fYM?J>SJ*A@CfNALE}&3`{m~D{wMod5-ccq zZ?74bh-XJk(lNXE^}H!+=vk_?n+l%Xv8=uR)9li!RSZ?J=)&6EO$a&2`096dz;$~! zpUYMsaiL^3Z<{u;1IONX5cI;@cum*sn2YFJDfm7YeIkQTll=7RT-5nwq+aw{+|O6h zVJRbvfQUrD{V0w;*S9Xfc+JYMs+9Nx2Lit?RRSJyrpD$GN|w*fIzK+kqLYH|Ek*pm zk{AnXLPQTy_(s0|=S?2o-Ut>dxdL3D1ciA9y!Ohc-?4}DLl7SQ?%2Wm)e67-&&pM* zbQ`gUdE35w*9?w~Fp%ck+7+0gJ!JEW^ATFI>r26tObw+;uFbCHcVi23e%cxdIhdWr z!i-~g#3nN}oJXBQfR7}jRM++V#z=@VnAiDi;XQ05VD^hj%aqRr_J}8uMKjIGoBsgA zhf~aP$;K+d4BOehzYqhNnLB!c*6$B7LKRR9w_J0#m)tIlfR7=uASTH%ID!H9Fbgi9 zcg?X%otO$0vzNIMlUDyBBUYmsC|=Jx*x@N@Nl73m>=>Sd9T>N*DLETwujn>y7p~Q! zw_ne0fRk17(Z#HdF;v-N1yxIs2gE<&mqPjlnwQd^p?ohzhRMq4C6U+ru}DD#sL&d1 zv3*V6Mb6H-+2)w+lYu2w6E)U@pZ_+x_#mX@^^7BZGvW-SEKb zFGWZ-OsRnJiZi&@bOtP9d^rJGPXE($%pcrF)(Zg((&}wgQeqgHn>0wR#oLHfxKwp& zrtSiOL`YW<039-8duP(z1vi0-`@B1MN?ehU8LNCF4)>QKt#5#i~Aqq+7`3 znrc_OHcW-%w$fD2r7#p7nZ{5}4*-Dg<)y?mqhUFI9MVJ4?3INWi)m%%A;BW5XvO|~ zhJlL&wMfbH@?$cNSw$aF=&~l_irc;aK26acox`c%kiv+?La0er7#K4*2x8MTHx!2* zR!N*dB`pa15myAOO5h#YYogpxygd-frx)+98$D_SHxE#^4o64VTaZ9fIW#e+lDbCa zBQD)Cz3f(!$jJzHg1;Us|meGcu08DUh*(xQ4(TSFKwdgepLRX%@IH-8| zvEaZ9xJUjvU;e%1fI5{anoC;6$+@+`)X8s_e3GKf$QRog*@UIzoVM!(bd@*Pf@0%jh*WID_LMk#Eb9}!5|bSK~+=Qrd3HPWH23nkl74ju)3BB-zkYxQD9ox zP<9DF(g2|t*HJ`1a&V(O=~Qo!rXaegIzdP&w9NV1Zn7v4ychqDrI~`IUY(atksH@ox4IURXs6jChl2xa$Xh7nGf|+UD=0 zqTfy^9?~yLI&A@{2a-H#I7&Kwf+leAnmfw!rsba!XZdX2Jh9e9CGC@{O^+(L{fpaZuLbH&y0uZUDMVXuk z2X!E`3JY5kSw_FuPclgX_(;;>yF;k3Ny}vL)MD#+XWx{w%x^H2b7Cpf`J{$b%ws^{ zmQIJMW+$D`@Wy5V6G9AJkx(JT8Te%$OYCrRRIK#@*Wmf;JFPv=5+WP!YlbSRDPH7} zyo1R}^!;xWW>oq|m`1c0ElTL5(wS-$N-zR;fTlD}xC90#Dqu5+Oqjw;KnqqWc<0?^ zW}r&Ccm`=*X^fdnau5%G^|s;RmVs;}N6FQN$(oV*P|UXkx8vm-c=u^Fb^Xs01%Q+N zn|cunPmfx9ty8Kd%#Cx+*(7D41al9jx>6zTuV7lSq6!NIxS09A;CxEcBHD2b*MQOA z_V}-6J6$W5;xj)e3RB1^QL*<9^^t3Xf1n-W(rRG>3*f&=1LSec>zNXeOM@*z7yiBR z-}e({#Rx$FRHT})2WRD@?(17@>W)$Euy6Ju8lT>9tbW6nDjM}rr-fJW$^pV*p(33D z-ebt}icH~U<^ziwl6`P<`p}L;gpLVgBmx<=zX?_}ezpKykJ|w73i+y>JaMcI*62l< zR*3a{@Fes2>%CFqq=s}~LM*1Tkm|{T&XdKNoz>wSaqVrdPOi?w=8PQ$*W41UZTDS8 zET{gq-W{`jX>okLKTYbtyS*|tBXRKd=C7L8;}6)KNawbxz$RuYj+~@ZRDY*C*qEUQ9g#b9sa)3#aqEK2nRi>JT=$ zNW(M9-EVm432HcI?h-1ggboA^o~F9nSLN}0fjR~#rcco~#flz*7Q$k@{{io)f8Quo zQc97~-BwuW_mS6+$jdi<%puz)QwdQJ@}DJ3R{a<^@d_24$6VK^ z6dJu9SMM{}J6D}&UAluXoJF)W9Wbj|8jPAlgP7>NZH=E32g@{%Tgt;^eB?kB9JqFZ zfIyQOLqT_g=ag85GnEWydPwn!x0rQiLf$rim|sfaKdetDt08l2KgaFv5v}m5D)tyD zlPQvSD5Rp)XCHl|5CPEtW#J)_i32@%RB&DF<#Fo5C=VnNn6mlfM=`}ILiJb=88k91 z<`1zoRqZeT6XDUZo)kvY6e$g%m_;2rqvOL&X<1*Ws@FxJGr>{om}Q>`gn!i=M01H+ z54GR9SKACFrA)9`-C=l~VFb#L|3HAvo`r{t%%7308pEVsS1i@UNi2jTm%$5Y}5agd#<|!X&SoBrPwVZ)g-Ak5O6; ziRr7djw3VhnWT9X@Wa#!PW`)ZIFpOD>0d^(*}qztu()~@)OrAT(zJz8FSz`eCd^rK zSgPtBo-iEPf>1O}jiKTl0uOg(RvT;NK=s&J)&I(F3$g$*ddWpdWtzR@42-Y&$d+S2 zWR2wZkArtG{SJ0^_)DN}g?#^`xBa~w?eHVCl5^JT!Z>ha(iGQSG6#o%wKjU-l#7`Z2Q8LUXx@<`@&iHVPTN0eG42 zn~{f#1QH0#?0s{tyERE9jq1fUP?EixY;NeM@ zuKlj*WR0tzJPJlIj?>LxlGGd@NT_y%-hn7ZT zF#IP$RYY^nDOHSt0A8Ng9u|pq2__|<2MSe{-+W=shLktprOKOz18e;xU*j+QZzQSa z3JP4Y*|9YCMDEDGe6?r>Zj>7ui&<(w5J~!9zLX7^l-QT(SoLE<1Ot{&M2{7y(4YO} zaY+!lY4g6#xVUQdheS{?#OFi;zEpV*)MT48tyWcyP>B`o6%)M6s>0Uv98RcfK3LkQ zA{3A4k>i>b6Cx8sy)%5@fg#!iivHY_Yt}duaGm1B+>J&AFw@7drz*#Oju?!P^wQ>6^nat zp$wop+{maO1l!P&VvMkvx4ij1#i~^3=;~h)(yZr|(J$I35p%1ngz(=AnSvK7VG?5JUUnKrIKN^^OP&|OVKyZUOi(!iS>z}^Yw_~{ zhWxs1@1@@gJG7~}epVlviCSO{-P@RbEnToXOeL4Lsv-o3|Dtqc8RbNA4xf&hyfn+@ zwIu3t=s8Wq#%?y*2}MxWF`jWgOq=0dqxjKp@asJ1LY~R-ZUk9fRTy(L01dAfw!c`$ z;QgyiA*u@+{ z9qw$hGs*}hmCin7pFO(cY|1VzBeG>j(F(h~{xkDH{vyno5107%Lf5bS@6)d6$N=MGimkGX z2y%pj?qLc=P8`A{&w@#Sm05LjhjVj{wu}N|p-5oM=i&<)?=`adSB9Lfer@>9=TJ@S zf1ko1w4+I;M3wvn7b&RY5jab$k|4!!slzIv0F7Fv=hf@kL`Z&JXmpmUP=r3 zDrG86-rZwItdDPjUpM6|KW|y(=z)Y#V+0az$N%uDXk@HU`d?CR}6OmI#@+d@LycPw%|;;-*Te@Iljnw~sjY zNbp9QEkW4Gh^#mWCV#0~);Nu_j@JXv3FuOrJ=sFSz6AgoIycI&e*vnsbECz&$i71;jEKQQW~qW6d~{v_CeNR#-^K2;YA=kBoQ2cn8nES_>di z|MENtjxgrr^hm6Do2}(2^}GmldFuP5MYo7+zv_pE7&a}XFTn`G{1(MDzKYh>G=WQeM=i`c!} zAX-A$!p#Tw`gOv zx)BQ6yV)3m=Qna=q3C%Chv@xHkC(%9SmgBhu&?@2Dfd67X?(iuh@1 zi@~)mbsX8Sy`M4V@~+Y|vzmc8?80Cv&dNMjGQE3GkSfW(XWBk>teyz4U|Z)kb<<(f zxH~#uzpu1Ks$&<+j8!MBNxNeSgjSN=Ti-z3ddm=p)V$isWH zgKOWP*)mR#KrT#l)4OKynWa?qlktP&z2y$f2wQ_e#Xk+#5WEcdU-060g+K1B>1U_1 z{xg?nJO8$_DdI8xI$MBBA#IJ|uAW$Md2IE!j+}YxqdCg0ah*Z_T4{B!=bDe6Ic(;v zP^%uhXNCPP*Xm$QPnmmyLh2NDuCG_<$5!s22HeWNcgwo}O$NOGs$gVF^!n$+=m{C2+VO=d%!8UQgzT(`MW+%_sdhkW*{58vgO zA)Ls&0kepUZ8~E~mqv1LuZ8Haxp4z+fwa$BSTq1`fIUL zne!B!X5{?RE3^D0+m9|6mx;fYACw^a+RC|n^OfqB5o%oVvbfW-G?>~hEte)Rf+eRtFj^)zjx>Y{Om+Ewmc6HJ^6dK z+Or&PF|;WdH>sE$6HK6=+2lU>)NL#2V4w-&l5QcLl!eQAa}$kzN;e%D+00$pqi^RH zl%@g2x5zSVxVvxH60aNzP-2{AnD>>+OunKE@t9K_#y7r}LtqRv73#{6~kM*pfH+*Wk zDFn5hKcA1-l%+iY2UT{8pX)qFS($%0TRV|scyr8>`Z`=DA0B@Qd_Z7^BPr6Tou!FScHr7&-UEhhIuq^podU z(c@pFocnjbPuJbw%ou6<6rV$PFLV8^*Ys#y$rg89F81Z9oIMuKN8f){+eWosyzL;l zkp7>}PjYdXPK-U9i4lz209Sw}g9`Y#x;!mmo2e~42&#a2`;>xW+iLLBO6Su&jgjc2 zi;s|6v!3gy1&2HIwkw)2OHI<#5uALp?~ACu+{ri`$4ONJzJTLSD?ltZ&n3P zV{z4f-H&~@f-{C3Nv;6can~ERrud}aII9`Tgpr*#TW~RLP{K54Ava%7a zbWask`eP{H5ELB(it+r`O*$Ue;1PCp(K)*;GmPK4wZ-K}W`otan=%3G9O^RnpuXB$T5H}|R`Uij_YcP@dZ~$&!$S2bf`I6Es|^TuitGT)y-6N6 z2qtx|n=IygMBibA2?n!)dggR*D5ni^S~9=Xo4{=3v`H}~u7*SVubFd;-zBHJ9h8bQ zBV7vbJ~lJU+t!FA%r$2YR!T;gnR7I-LIce|rO$jrJf%5D>dC>gWRzExq+7*VO38p_ z(#jA7sa&0D8o5nhhdItMT}=fm^c6=wn^{aX4g%BfC{g&U6iXgmH&4EQX z%ZpFC{dC0?{gl7*m-nQ8G(*HM@!|Xe&ow5{ICvM>Cf0&(f0w?%9LRIt=DyvHu3s{) za}TV3`+(}8*JQyP7?`AqJRtSZh_tE4d!q;{J)x=j?oFW1M?LwPy!mevGfn1JNe0ac zn-4FHb4VRRlT|`LW$0;Y@-ML2hgthy=ju7J(Rgr9=SaMhu4dmzp!c`fy(F`V0H~$BZH@j_6%3vAXxe_b%?R^G%c!f>clfG@G47FW)!127aw0Q^ZWd*-Z@ zv$7#6BV}HN6JjqQ*FW4`*SQVS>HFyX=zxSwT6Nqn)k$KucF)b|b@V5$+&T2E@@tRv zP;Mm+g=`IdK})A8RDp&piX>=n%~6OZKpZP+(hZD<$e6-X2)Y_n23cl)YOPtn3_dcQ z^ZM!IB!SZ@(URC1DSBsFn;`omwN-6{V+)Z6mz{2FlVPv=lj>qK=6kg|l>XmheK4cU zd19?Qej<|>svtVV&bW2elHwk`^f7kzAA>q~%1galIgXm&wq!8!Vfa?HY?1u~kWMMo zuYxk0S&vKgN1kaea@nB>m+PpTm=2m7;EUb|I56CZ#OP0{(wHOTrXP=E8DvyKg}MJn zsRJvmELqbinUgT|p0DYSnlkQ#6?WKS>a7t)RXXk%m|=>z8Zi5gO{kGhH77@iTCy-u zE1G>D9#B2&gY-E zdyn$K0+0cJp5^^g;aPf-AmDD?Kd+sqg!|g96o2d(Z&)Ube%xiQ*zkUlZPog^ivmY~ z_)6rXK@Eq;FP=jGja<+$v+T;4q*jl&?k3fF%lrawR8+uCr`ffl%_u{QB+ zl}y$SkJs9;=i{H}xc-9TvL9|e?q4NESQU7SFNDDovR@hVkCj$SShsC;9%0!ZSZOTIA`ACp@as!N362sx0v;#%h>95i+75$*BdR`35Y9r;% z#f;ojl5!A;)iEm_QCL>Hhvn`?8 zfbkVXqB@zrbs<;593+OLu7DB~HEpSQQZ@E>_UK+c?CZ(dS|Ot?_HCtG2nb$J_4|tN zAQuN#nXI}B!(XUBH^F}eO;G> z^!M;;S3;h6*bqCvQD9y>P<>!Z-Gz&CM|(HL`!@o5cB&nClIYCuc1GqAb(#N>1fYT4 zgMbu$TN7-yP&I3OBmQkNCv(6;GbMd_8)Dx-kf?&0GAnISn}veWOYhysFW@@?+;qbD z*|YziO2z42QkQ8Y&L@PnP^aI$;H#df%b!~}QsI@*m6B^xOrxgM!OdI)Zp}Gto}mV6 zUpacbramfwCJw)UNCFVsoW6xZa(kl(q_qa>r| zY`NH|1$a=1GY{2F(UP?%K)WD}?GglQvo$#?BlqyPLdRrL2zcN?Tl@_fJUu0yeR~_o zW(6bUvp*qWK9013f&$1J`nCsN8>IP`ny~eNM8=h|AGIZBK#4=+xtNlc*zPMwEJK}P z=tQsLn$rw@zct=PgTw0FcKQ9uCmbbiW^@w!-f+Xc%in~Ycpw8G+G)qVnBRi}6)=FO5bA0)5p-;n=!@4&! z2+1xKGI9%B7sVZx&mJ$!D|F$Ls~!-!CK1jrwNXbSP-WqxLHu?e@HbzX2wnem|WTbeYQ<;xwKE{V^W(6zyfZgu}dODu=9MQR9?12C5 zVKWRIZ#MZ$6epoby^YDF;aYQZB3yDoPG;#SUgL2%+lcl}#N^RZq2O&!i5S3hMs1?b zD7yeo58RH65`+yqB-KSI3H;hZI8eUc|3B#qvdn*?>X<&2+Xh1-40&Q+) zx~>$cWxPS39#&rvibS{rjqIG1fo<@+Zg#n4auLOw~Ql^yV_hKfMST{UW0ply02D8I<| z-%pFmA>dWNbf+P}cWE5B6UE~ZFH|!nj0QQF_iTIVZ{R$aDg_?Kq=5#^-1gD$R6qrq z7{vuqfF*cMv>#=#w66e`wmVAT`7r~|N-H@d0Ck!>3SaN+SVrXja1>St zzho85a8&vqx%NenKDa4~`edO1uNt9qGb_J0vQg&heJFI+SvsKej-W%TH0Ao;+%1HK z<$+kdHoc0neA0qE5f|TEg#h0SzXVwrfKB$k4rR z#~NLUQ^{N+H-iU@?Jk8AT`F&z&%(L!&m1qEd6HT{-G1P*<%>v+TC5AYo%PiA=QE`V zZMH@~RYB!3z+Cg3Vv)-elji}6rOS<}Q0mjCNnp0IK_r!X-4%jk;88y1Hn{N_NWSK* zBK#VI-zEKhuXE86tBiNr7FYb~v2)<*-M?Zf0B;i>jivilO7iLw&r?f&D3kWJ&E{$y zdzFCOalDR_6InPbm#9fpiZ?JBLHvMv@cZuF$pFC5KN&Ut5X_XHNh8Tr(W$7fcez~Y z!?sz9(T8d^-03gqAZ+W?LZ!=QtSU{Yak3!uR{pkU?oW@F`$X;ktRQVWJejbT|AcvU zMoNEmwi;4(N#ZR2pi}7+KlExhnFoX@nmSC`m{&3=uUk|0P^d6U`?IJrw@@P%b+(T1 z!4K(&WOuEr{t913S(L711SW--lmEUHgd3+e5Q zLY3{Vw=j*Kuo{E&dY;bi*z@YrOy26KsvOi7hj4cSkwD=>;AWbIrT(6c`i6iV8OU~i zr#gjuj|F286*bI+se5Kjlu;XwHcg;wFRZ7Rwp;cQ|C7;;PLtAv9@I2N;&uVJ26`rF z+$>SmR(;FC)IqD%2_X6Jq`EitMQFU`Ik^^vp(Xb7_om%avg#W_$iU4@laISVA-zLG zi6qzaj@-0upovmtdG1!XUF+_LdZHK!214<3II`L6*qRI3G~mq;ZmNb^b3B4lS5iLT z(etNw&ZBw5>j7&W{07M8`HCARoT(P#dl~hvN3SD{zfSoH`>{Eafs+^FQzQlU7W_@=EepMC|OxzZ1=6S@&nn@?x5lo?5|X_(N=K+BXlymn}4=0OtPZVGXHCvAK9UpwUngfXgd-I)?1C%Nrdwc-Zv z#Wl;j$jBK_+}HeQnqh~wMbFokOtuO3nPzW?nu?ueov|}O$Imj)wm_IZEe8u0woQ}= ze7ovqA%~A&ls%K4-+d&5`DP6h%detoH&&L{ucOOA0h%sFwfmXE@T3f&lU<--8~M{&3h_NVgR%G8?8SdMq<)Fl5$ zo7y>SE<8tkoXylD>_p1A{YN!iCH=_66Q3n5-zO@5Ex65(f!1l^wHNd|u~Xqit&d`T zn8O^qWV^M?2eg2ce30}*Y)1~g_HOIsqdFd*JoXXTz5+AHwGqRx6 z&mq%<;igXW?1Uaan%vmh*N1~l93&N>XT&x`G0zfQWlHADK%TWU5x)xA2?miL_AAC# z(nW4B-p?->p65(Ml3el*YOkbiJ*M{_l4~z~&oV2wk)h0KYFfzMa0&*O zUAMQdp}P5^EQUi-+5^@prp@dvD38@zx~tzZ>MwBl&O5azaotgy&S3#hd4=vW(|m!n zU~uE|*H$~)5KJ_5z2)CI z?J&f3TrFXq3q500P-mE*tqbsDL-Fl>V*ZrEH2ZP#XPw`h?}+Im$R1gnbLlMxU@i>( zK9_a|Um82KUlO3#mqMPQDssdR09wd?M^ZgApG@+nuM?4^UeGlU3fuWdUTeYNlqzipfWp*yb*?$xKq zJkNzP2VX$LmdfzswUZIHB(%`iaXq;;qKKe3shJnQ9Rc?8UA4xl1`Ga~$WTsi0%~;`lWm#<}V1ueo`&^N9?IjO4 zUTSA%COiP3Up&%yJ()Y*)3EL?=K%I(#JGTEw<|T-+yG90{2H|MB#La^BTTV|Ll}`oqQpF8xxky)2Wq8lNlgt+HscY8e4;J6JE;;L3O(vF9`74?obh?rWgZ>4 za2;~Zgq!EQx1|7%6~XOn9SIq%+!fVrwU8tzgm*>bDmGrE7|{4X+qSdFV(_rQ3DKfk zt5~rpnVgWM%s)aSAsu_=0avJ;P0*y4Y+R^%#$!FBQ|>=SB9#|SrkW3RHf+SP`+W_n|zrS`GTrts=e z^IVs3A-++@E26&JnznJ6zq7S0toCJ9nSa8ibR-~)zCyNAj40VIBAAIw zok9{SI^)l;$EJ6ekcrgL2Tny4nf_T=Db(M0(SVgwApd?*r%HU0==CNljD9kneauSB z;076ReImp=AF2R4+VeV2=O zb4?vN>**$&Wco${+IjXP#J<;Y;7)S{9c2#ZBJTuvLKw3|8=2{Z@n3iQ>35;y9nD$? z&f>w*&TPE+HaSRln)C#CjZ#c%TLJ75VI;nv)?s<%-vRPOU+XVUY1pO>Uw35+dT`{t z@*x6~@01X5)8~eoY&lMoZQ!QU&a2{X@_v-jEZ=FeBD3-6Gsewq1S|(dd_d1%(=sj8 zBPN7l4M5YEu=a5}9OVBUF#5?m*T1V?ZmMvi!yUQ7ada{?=B^(W^1?y#wL`;yp*=ER zy_P=kk2#zcsz{G>_t^cLfI9grZtYY=w%2TWaJI1T61XiEkiOpqJSBq8bfY3LveNBK zl-(^Xsbz=PeK6?m!F`Y-xd}gzGZAVnHnDlRtt-nz19n>s)PjLh${i;h&XS&AkD7>@ zt<8|Kr%2@JA1s{ujgjmRQaBykxcnkzvi@N!WUB;tcD?&v5<&ycB0AC9Q#no#SW}L| z%hYj9SOS9K1_LC~qhI?_+)a!`GSoVymH)0u-V zrbwexC@HcW<1GG65=jQmI+>c79iku=)I@4?BkxCZw~869Jx4%D2nYK{ZeIS`Nfd63zKq%u?xcW5FZ( zd3Gsh;vMM#&zTEFyeL}eMGfTnwZzgm(3z%|Pr%!k(lo*Rih&(Z&1Enul0n$Tp_)U{ zJcrIWEk`}>5PnA+8gRW{On$BW@4x58uO1CQg84}>ytlr-QQoOk6$EOb(n>5IA8fKEnCiB9SNOOg9>^H z_PL%x7fSz%`?8@fQ)aX{ONN4h71!>rjh?{94#}RulZ;OMTJQ&~@6g-#fXbjW;o6bM zayS9G%DQSr>U2_ks_q}QMUufOg()1hwn}NVuiM0>|N8*RP(jP|vMS3NS6R>K|6JAb z)hBXg0|u}ss;X^`LICz4g7Vw6vvYQ^QpXj{7~ko93wF~ucV_xIKb{g%hA2Kp8PEl= zTWGT)D%avz5V`Dkdkp7tiSydD#78xQ5ng7>DWwc@80^z|w(#Z+LgFQjVKCyJ$($Bo zwZ2xIdueuJN9M~da*mMPc34H!z#miIRmGV@hpWlwgKLQ*vN3JMK)YH_VC<ftn)%TPHLL{bur$a#YVFduH_sYe2vlf<(Ih!7ua;6-A9vJBCV39#D4#87Yir^mU zgq)UfD_$vL-3x!N5e131MPGKmd?iu{yR3iKZ1d@@%wUBP_EVt1?l~z*G%>h_)iV!s zO~jrkma~wKrY>{kUSZ?FhQ8p9_nsC_V<#8xM!r8fDS#N_HhRuRXQSxC1U!)wf=oL! zlRI~HrcA;Ou|9Qu@B5rJm8PCdGt8bb?%s|tH}87A06;E-g<0&X%%&GhY>#JQwT2M; z!zIqizLHDm-7Eq-O!q(&%g0bmJB+xQ2?L$g1Dt1vp8lZq<_Zb+$eR213cVP1tyt-G zfj~G)sz@njDbFf-hk7=XF-NCZ+H+~DKpRAlFEV%Xo1OhUBMkEu#ZqZ@?&H2{s_O?J zl~cYO96@{=tlOdBMmP&5r>jcYm!1HYN6P3OPmC0Al<6CHYic+R!Td~ulJgp~VMv$X zTx3TB9oTnnLMpjDk771hADH4E;FZZOJCInwFP%UMFvyL+P65TuGsp-0culed2Qzx` zsav0HcAW|#4kFiuEHXP+6=epSd(5|8C5xTe8I>7$KM?bp>K1d2O>1eJUAWUfq&wi)6!Z!iuuOXc}| zt>1MFsH8ic(XV!n?vm_k${_x?D8N$6_ru`#OX5}JJeRJ^52v3#6u?DO_FY6A=X}m4 zu7&=ZJ{!g95aVG1!BEnQGON8={jO^NE;k)vT{!(SaBL2K>?X|=r&1Fo1}aGUWuozQ zJAOn1r-I>c8LtoHCRK`-aKAcrE+)z1Vq_jo+k^KkfyQ^?nG8)HVU(_M5X_FaBHXpb zXdviYE8^;IV~X``%|-r%$4>ppyfU!02;jvPKzKFu;3f>}b_X)syYJ`i;_p^=BX0D9 z>iDT#E;%E_(_1}g{^i6L*MC4S?~CR9ObBia5$jX>6;I{G3l)lQd0^7@mH~nDEo^+h3Nm}L1qXd zLzLDW256hD>$ei5eOEvHTO5V7P2-+Aqc=WJgwvE5j-2O*pBBp?p%ep%MEjZP^V{*3 z>19BKw#kd5nsi|KmswwVB)wFX z1^blZuG$zVr2EY#zBtwVFZlc5+l>fw$SfCC&&|lSnh7WY-a+uI&k`fUzI?gGQDk>E z!@iPAwwg%vc6gmdoha4wW}PoFY;kFT~z+<-Nz6AqzO?btzdE#nu+kP zXoJGzFU@(NPQwiaQS3ThEGJSp(~|gs;espFv0PeYkyzpe+T;q8<`7Vl1stbtB>Q6V z$nDolsrT(63c0OiXY;B-zR&6aF@QAkQ$!;qD_-Q^A|Ue6sd?fLNs1lUZ$p>+Eh~LQ z41dsNF1r+j>#cz>hSlVp<{zshfeU=nfVUOP`pEjX$&SFtANHyeN2;d-I8$5`@qO4| z5CRC^!BAq?cRPc8v4Xt9ABS{|3Uc0pv{|l|H>`z*I;NuIy8Ksa@K)xqQm?!lg*|og z*qk^cB=ykk;ZL$Q5L$m+`=w}Iefpn(<2NvJjhIxQOgo%p<_Cmzuw?yfD>V_Bl~4LA z05Q#j((!{1%GOY1c`E~u1>chnPl59ACooJ~+e^zIQ$wv1x3SfY9FiQ8M&RQ z{(Ft@{?2m3p69yUFmbm&Y`=!nvI}FIkdW9u5U~H9Xz6j=#OSL;I9~QI00lYMdEMazB?!wEaqdb>W~i1o&}hGK zs(>97W~bA~IbGg#c+B{lqA)3dLum#guFlw%tzWrcqia|o_nP*yDSVDmzYSzA;`DSv zCK78HCA}cB4EBMCQZEjbso2ZUkcFly5)`t>HdD_&K<;p35^nVC^Ko1?1lf(VGBt3X65nrf&lMEMjGHlLdkV^zp7Mr zfu8cWY|}V%edMy>Aq+yfRlD4;Bi~y*&*2*9>LRWUTaNiaePM*mU~luYP{sePoeU%L zh3=z_i-d(Z5;A#nGp)3v4(HAspBbA7`CqcU_`!oU-Z}T86Zpv9CO?|ZF~?jbL=Wv) z2e9h?z)a^-Jx2IhZCf`FTOlNH$WK2kXk-c*)5w@J{5Or<1~dZ13;f;0HMU z@hG}HtJTKXmJ;*9m%Vpe$JXf~Vg9)k#71B##yF}SU$f!R>rcOvd1`44^vVCogWmxw zAqPfOYHk1sD~=yd&mY$(<6AW>9>vBao6p2sZ1N{yP-Xx^Sed-8ideLjK_X=nTo$%*e?(yJ0A^Xm!HAPwSt zYPWOfASb1cv2u9#++Ufm^|P5D`BG9MT^TK#(3i#z#8i66#$^Xn8YfcaITyL9~~U2r^N+!Ptda%_6BOG91WjI@K6$Cv+Q zjtbo$LG3FK+kZGtQUK$T+j@0MzcM z63V$8dQtFV&)2wL@+ZZHhanmN*3-_$_&TdP-KnCW zX6+keKm>2zkzJ2tfrBrRf^Qxse+>IXI-Co)xwjTMg;I?bue`m?b3;~oL)$jnY)2Aa zRuwaAQ~smcmwyZl(_05JW|8L+kVqk`Pa1HqUu8a$0^Q?&0TGh<&Gc84U&5_sbaEn% zBjm7N%z(fsumvpOSF}Io$$44R$Y9ANc{I5%Z9B|dN=+}kpCOO{) zjaR2^oRY1NgFE~z9qUaHqh1N`Z}H0M71{)H2sYScZQEIOks-&bm>RlP>RO-Is&GkT z_1I1tsfp;xIodVRFC#+Y@R?BS;L zo{})28;AK8lG3N2G0o8?;tT&x? zp(8=y%X#eD0Z)80N&?CUf9c4^n@kKn${|1A%vu>&z3P2Drg(1UI#U2|7Gptqq*+JW z%>!$Wo*Hu`CegusKKs@ygVuaN$Bc}r6-eCz<+e4G8xF4$wGo+?e}(}*znnw7UFW;h z>aY^awGbWNq`4xe^tGpf)i|YFw0BzSrp{4Oi(QDEqV1(xSa7N`u`<}NRw?L4xwD}3 z1MLldeIi4#fd2AQO(&ybOrvh^wY8~J<_??k?}`tmCD*?TSbZ_<`DN!9XfjO8f5w+b zdk2?$9m@HED#6T<(uW|+YArl3hdJ0^0}%b#s)ZAvL;l{R$r=L+|hjKAgxc zsJ^gZ4U{xemRyX^3R_*MXOw;`#TY{N`66?&evZ$4frbWfDP2l zakS-lU;LMHrm0OacY#l4k2b#;Q+R1zWx)Z{6O2mHFV{&(BPXMUjn@<_@(Fw(fG!q2 zA57(L9B#Avk=7Z?mVYKxp4g+ zKf^gfE5Ep%CYdTLGb$?s>VvPCPRQ>?w=S=reN(e}-+QfITtZ^$Rjj-F^wg!MKAunh z+JB=XeBTvS#Q&H5_W9GP3lfr&fj{%*?VS(6QLZz>du7|cCDH?eO6o!nAp;-9BPCw* z;l&dsQLi3d;rX|3*EJ8mt{&!~xfpR??7=6LbQZsg$+7_MS_DsSNU` z9dd=oJFpGGT+QY;u?W@bW zBs3c0S$GaETQCqmyW=$+o8CTTS|L)80k>Dr3RVUAoRiU6U)vWWM55e zsD8;r=BJ#SFwS@_dX^FjSP8J6fta#AR_-)4scpYlrzR>c{d=cCUhAsxlueH&lYvrB zHDCPvt2J)@R=SB2hOph~Np(Mjd7+Y9LR1qJr-|Wkdtjibox50{`=JzoLj~)xhAwhz zxAD-07OuXG!CGqRxT&{@-X|Zf*KRNbn(Sis9UIEG6+Cr;8pt_uGvE1SRoF>ZBqvoL zU?-#U_PcfxxvSj+t}tS=Vrz9eV2lEfj8)jOQKUCiFv&*L8|drg4}A^I;!ZbjYyz7l z>+qk3=V;RK=LFnZqKE}q-{7)WU4}`3QNZc(Sr5@=qmZ7WR|Gxg*77N z=I1ww(sJ5rBml&?6n>#tHp?-3;O4^+#RB$GO0bmwGA6lX8ZPon8xNF~7D2!JW6 z;2n|7)$8WI0gpDKRl>Bp`7VDFyMR=?_&nf=y+V)O#aG*#F6nX_nCJWF($B_n;O+ZZ ze9pSERX-m-e5mgmziFABAg?fb-x9I7zrV2t&5!Phx~$>Q9#C`iVri-9hxp^d|Lw0x z@OeSlqFTLAu?1RAU48kUS9;y7b}o2#?X{=>7jti~h`F%Ucn@UPLJL^oTCvKibOtfq zL^zaV!D+yL+l&JnJQTC>?W;PsMq;}u`K!RKE1J&UWgWEyL$~}iO{?MDnc%KBpn%y; zyF#kZ@25x3%4bb~dNZ1=*n+gz#G+8SNSlznFPEf;1l=D6H(Q!FZ7XT6IiO?}g^cWy z+S8bc)Uf1E*!ElZ*RGdkm(~Uj@n&V4!PdD?Vr*W4Z-xGxkW6p~c04;Bg?D3CwkLZ~ z2Bm_!kaLaQ6fP8R?{GJf$kxuU_)5lcIC0fmbq!+hIR~az7H-awK8og7mdIX%hQx zpuGe`LR9q(KeM4%s>i$m=OYkIHZ(AN=-1x|v-2B@R}(D2Cyq73;FN7y@8tqj@Rwse zpZSz8i2Zp4#p+UXD!Z8t2ig&pc=<~mK@mKc8!I|5(z9^SvAyu3S%ktu=iT-`!$zTg z@Aq_qeeRQQ!n>b!+GA_x-kFGVYp-5eY|bS=eDEN|w&baW2!v$AB`6CGUc@50am$TS zkNMSf-=i-tKUitSt;MW(Jb0KX6u10b zZsxQm-!SQ)rP|Rt1AH*7_$@H?_v@%o z%~HN}$4`oz<~>GNo!Eg&Tkt)lm;BQ>EDledmy!<2WK=(CN$!|jdvK+<2D`eP@@_Jb zp%AU>z~cPhvmffuU-gnjFj%>|r|l4h)waiLDFme`LFLFClY{{ki*LTAS*j+##I`u&X%Py)DascV$HwYSfJ( zTq?;oA&7pr5gpXH`SO`)rune%A~W$dI2}5yO(>na#lBK-`)B;)h6WD5zor*mT(bF0 zx}G&Z`m-SRI(Tt(_e9(3Ulk31E$sVd`}1dEe;snk$<hK^PDXiPn5L!yEo@$a(=mXpPleh0@#jmN zU%>uFWn9*`veN|Iw`%>MT9Tjk_FW2n!SSPX?7OfQ3%9!;?)5B>>fH*(w2bGc++)4~ zzUq0Y_;mcNMPHhficDto?}8-1Pe!92{NO*0fvUX;emuFCU9j`QzmQrX_z#@M0o-!6vDVZd?{O?xyK zqUrxpbk1RUwqY30w#|iQ+ioo{+gi43EiKntHkVt=c(a#n>&@od_k8{P97nI7=f1D= zyw3aj4bcFzr1}z83!wgLixknG`mPjQiHyz{X<#B5QIL?($zs+QRu0(>K_FyXod zpBSTE}n$#d`d;!W!8wZ8Y_oTuXz9cW3}AyCx4 z`+elXmS(67%d3~b&HDLSB_3@tQr=0;>No{)UsfrwNBp1PGo7oD64Z$8UwRpiDXJ!} zVGGYrr{4*_&GpZB5)*Ff=AYoCUj@A(r?zhhiUWg^1l!1hQ?{{p_xEhZ9l9%*T4i$P#r(m> zprE(WROYJe<~27ZeLKZ9qAD3GC=7T=3?VyCJ(`uw^UKRsaeJi__^N+zKSl>Y#m=Rd z7sUjbh4YwOos`cLuy$CPu0XA8D-iQ>+M;x;-U3e^Fya=w{*Pp#=7;S8rNhZwQE7W_ za5NekF#L|#7{Y%NWzyyM#wA^Wib(-r!QKJx6PG zpS#g=j^W8^x@CU!{hUS+NAeJuURYclix3g10-d2GY5SNCTCJIxt7a`smgI}Abh9^c zIMxYS94mgdh^?RNitoEq-+i1tk>3(~=Nlx^&ES)`5Yp|DKe-EqP)r>1N5~1c3;e;6 zIGeIWNAPU7t$w)eUFIu=*Jej7c`Pby3M+`f+R`?aAUWePg~+&SpP*-(Cpwm`zKi*r5EaK13T6xMZ~qaO zkR>TI;?hl9i->S;>M631C3U0_OM$bWYU2VUIAa$gMab?0P%6sajJ55l$BcFd{k*-E zh!0*kG~2~enp`4gv0HN^BiNUW;Jr`0XsO8+Fh(6i$DB69> zESHl1#U&zP$y}5UE3cIvdK4Sv7Ehrj>q~}2&bPLQH?(xTWR@R2NHvwwGybWHQ&`~M zsME{S(x@JM{kZ@g%%Ive zxm{#@*ill3se62?F-q;f8Thcj&n3>{ban=oTm_J0-uL5A84abI0B>1P>(Pf_l0H|! z)qLz1D{WuVXCYC>eSx!Vn-Zz{3av^3Q7rVDg|IN4&Bp=Kmxr@m2@wvCz>N;y2gkOo zS>)Ff=Aw1__edwSi`C}fm;0RT@20vrl zqu+k*+e+<%yd2#=JC2~&=@Ke?hYRF2JX?0kWr(~o&*wFonA>K`b?**yeZ|wD>B8rs zB+Zzljq`edJ;-&xVikvmDl9xDwiojD((JSxbh{(rP9<=fHjv?4pw9Y6xTI&Z&lJEf0sX*kCY9is64sUD%c zH6Dj44!LT0xxXMiqI}#T>}s*y?%hr@>y%?O7|)E(dw&i0-thH5U(?(0o+=}n@%|}( zzhsg9Gz`ahX_1NiDaZ{|lMJtZ#lX4q=^0!*`+!c$2cTE-dJL~>a5~qk0xzHM(oBM$ zhLfZlY$i+Pfk%qyD2|k0>~f2~CYYr3SB<+3yV%?K10rJWT3djfO?B3qTw=X>Q;lIO zj&-C$27<8vzx}baykN)^EFy+W+W$mxPoCM#BQ01XEn1}yn?Wy*6AOY|=HI06d&5z6 zYV`%DHdU=T8M93M-+4!sG7;e{a)|>Wz}Lzn~W0+ zOu7r6$H&IA82mY%5ayp-@@=6oY`?x|-{@8IuP$mYYcFfa(iBSy*b03C*g(aVo(`+? zm5V{wDU>GdUUpZksO>_CODTXE8Da$hySwH7x}xZe~k>o znVl-+-hmen+4G3@&@6(k_Y{SCJEO8jUY~BZw}&NhMd_pgtlI5CR_!h(Y$&T70rhyb zZoL$u(VyDJK=6X2u=ly?K6Qn@y1}Yz!k(!vKz-!{j(%yeU;uOG3r(O7I3;nVyE*F9 z6Td%V;!O~TLIbrm@z2VNR=qtYm20Ikj|-%qRjsEzG9&@(EAy9dVz*9YAE7xCxsW6r zv<6+&pIJulWl5287HRP=JY$)e32x*t;ZAF0U1BxH86#=>tQM>hD%ddY6q64k66l+e z>nr9u(D>D7whLD`MyO_f0&_djp5YZ|iJgn7HK@m+gA7Yd$dcx8ZTAP+7X{OX<@0{> za3tgE8H-n%b+| zPWg5LRfsRO5}=G#zVKb`)9Sx|%y0|@c2#(r2$ru@Y-R`fB|~3so5wZUO1o%7x%>=I zG@bRjd&a5g#u0I?qGp+77~>+?x&*HrQ1&l6v?Uunq2Lg(5IQTB#6tQa5R$)D6FPEL zL1!JEpU^wCeRlv++PqOxbQOdbh0`9$=;-j%_|&B8s#?10yqWGbqSy}gk}W>OMCLt~2vqb|yMscQ@kyD=`V<56y$jW6rQzeag|6a}leh0RVLM5UTMsmm0PwJd zAFY^J8QUvVUk^mi1AapEPWybs z1U~}>2WA7|2^S_ijyORJ_aFy{dBk=}9!6I5bCQ0UH}6lHcbd`|vu&4iE4QCZj1OU? ziCnu$sa+BjVgDND~Z|6;lK?^h7Q{@$$lD6b8ZVGaey+Xhj&t! zpnl$ANtnjE8`n!wSX;shYmnspTU@H}k%F?Dx&YVNHKc@F#Wc+|RZ2fY=k;jL;MJ8` zUp9^Xyo?_hhePpR%>1{TtwD@H6DL?-^k5jdyT6bP{7OyH9GYSsiyBm@TzY#@|4p*` zq;%cgTjoo52^!N?@e7tDBPv*hA^D#zbo?)bUTG@aI9E|`xE%^8OdlG8O-AXzb^(kq z-`rZQa<;2(HMu^j@CNK~uG{W6&$JVHXfv5@)NZYuPy;@(t1i0fhJIZdeDzInrs zS)J8Q+CLiy_?ITTEc5GqR-bi>R-H{mIr16W&8Ib4S@DFh1t_s^S=6*SK2ru1FFX3 zF#OPDsqTE@K{fmI{6xRSmO^soC6?#y4hCsA=y>L7^R>5D3_@hI;d7V+=671F^ExAU zAann%VK{=gDd-y72;IEuQ6w=?$qrgs-4u6U78DYpXYz|t#-XE(qYVUG*h~F@l63TM&_V6(7;`!sfStIEF0-%aaj9TsYS9l$q zK^F7Cdt9hC*tHoMsIyO?mmxosv3@vT#}v7QI#l7S8i*mZse#`@>#lk#OD(%Qnl4fZ zJm6M!T=5WZ4hNtv?VeB7*?yk!mT?(V_a2W&Nw^nzKG!L#V$VqlRV|JKZJyq2dTn3l zPw-tZK4;PMmEpb&Cly5+2j1a3O&EUS|JrdAFYI(ddDMqfDRgBSqCys&w>kmr7-9fq z5odCLOvfcdBSiM`V%_$V~K&j-~&(Q?&i%xh>D{B&AZj zrVBse2^1hm+O)q4j6BV5{A1XZ9n&^^?+0Vj7C45C`}Kz2P@)?X7M{Yf_Z8 z#+`1HqTb@qNAj21vm(fty&VUi67l*O>5NKIjN^Ep28o2lV-V@;dW!6-ZOrrqp|SdJ zlMCO~4qkoTw~*I7{v1a2-QFrHSkovHcS=O<84f^!4#JH>%cGM9)<2>$V(x!#EOh{v zXxd*>P_v%r9-pvgha}pscB?DHN&;hf{{7sBc5h!R`i^06`2{xhE0lQS&@4rl28Y54 z(^pc*YZOgCd?^F5Z~7ib8I4y;8!MEDKZ5W)B{RR^%nJ}$!{OR2H*&+DKgy?fuYAi4 zp;A8z7Rs0KxOgouKKg=9^Hk7Ah3EcB(LGuRK3Eg$r>K5@jASGRCKf^>mK`q!69R4@ znH5LM@9Zx}Eeb-a;L;+nJdav5jtUi#V%&+`tGqVG49ua_DBviP0X+wO9jH^qD|UA(;=A>VvaSd_#lz)GZz zuaZ-O2?jqlc*k6SclHSC(&La}&99*v&X^C8xLnOVg~uGsl4iPSJROj)yh&j3u#aQE zV;CX~Nz>z@#?7PDA*eYHrK`B>mwUub$uQRhThn*2!oIz=dtbb*g5D;wmuH>y{s2@E zx;f!wSD(LPkR2s<3UNQ5w;a+|oZGtxr`2aRn;hcVvVSHVCPRJ+cvr+E6p$XwAORka zz<-&ZebPmZ@lCLZ_rWjDU2m^9>_826-Q;L+_|J&L|NQHkvjcdo-hFXaHTdEQxEWt^ zShLHUzWUk>#pk54o0vQ6>;g?3pyhH}Xs>uXyC{xNIBwI@R6V<>L;^}L=uGVIq7+vltyzwngI zOw%TPQl65_Peu{nb~#!VX(Ybb>3NMyCrL8ZNR|9Ro4$gV*293eF^j4*(ik%0?Nrm9 zV=;yZMA*jX)eX4pdr1^t|LU%wOzKt0^cY1hv3u5}Prhp1wz>IRii}i7G@2AH6|f}t0qPSJ*H5}ZpIvJSR%u1HpF9LD{^pqBi{LUbDg$$e~eSaL{|GHEMctAK` zkN?nRo0w5hP#nw+heDdW9>XUCp1Co_9=Cu+X44N$DBZ^|z~LI49}_pY^o!Mi@%>5s z{V+lFeyObyY`bIH@0(`SG0C1Zrdaz0C_@jh?vsWn-nPP0$g21q+iJ_24QP8V8;|#a z_keM_(s*+NdVWd}yQ()xW8FP!a@%K8q3G`Z8x$vPK+3SSXzZWkKL+49#{f`VN(=#e zTMDUE@VoFuhp6Lo_x0*8e^eWL+kC*WzNt?L3|Q&@D;LvhyKv$wT(S($-;LLXqbei_y&NI=98a?LbVL3zwwj*-E2N zVTZ<#vDF-5@2{H>Hk$>zS!=STVAFpqyg*G5GY~5#5LxGc-ujRvPa)=cJvT6Rc+uwn zHcspw;5s9y-nv-fjip#f1UA>;=np#HdX*P{uIIKV=VFqx|smwYX?^|zxRB$Vx5l}HV zqV~G*ySPq`c@TGT4i<+nYfngbB1NzsGf~KDaP6$bDtNN?R#y+jQwIBw36u3|R{^sQ zl5aT6M#-E7{^SYz-vcVtu-)q)uBu4HpL)5XhD!hC8LRKN{Vzi!G+&yVJ&gr|&$fC3 z1K*6mi?zErC5x~f!-@VGUQoG~BNrKtdbTwA_}f}6 zenDO}duz)lwa+T}J!D;zQjda&P5@c3eFVAZ1-ww3!|$BCKpXh-Z37Q3tgMN_+2Q4K zco^W9$#|#h{g1w4KFtca=aTDRnRY*2;>37+jL6MB-$+WDPAOAa0Mm~BTDN~#L8!%~ z5ckUdzBk1(K*s-;Nl~v#5LS@xaQSDyIXTg2{WD`=WT3Oj<}$ZUgj@tN3k}-fuuC9d z7k+iYFtzzxe^XyF1K%5^vbMP6vIYFj^McQhj^~vSJ3B>zqRQkCkf{g_&1v`YoYOxX z&yW|lZ>#}S?zFPgx*@sEzw`|BC>0!jSs8^F|BEwXGO{&~_tN9pGESGkw>SQX$OH=E zHkaw%)|&&IN`0NfD`1ls4~~ZwO2d6w_%T2VKpZBs&AsYQ6IG5rsE>HD8Ci0Ta_Y#@ zO4s(3R6PD#MUhzg{bQ&og;T0S;?dcLTPP$-Op==4`Fw7qYd9-J+2;fI>A)00#Yfl! z){34|pT}CAU!FFxJ}o7c*Po4OCBp{^pc2YA;A3rdpduCJ@ne*dvcfGz#>w2awU-b7 z!r;%Wp?vXR+ocXvFcZL+=gus_Qe{3J*Wwj$PAXz0`9RftM?u7gY%TQ|9YmCQ2Q_1X z8;yY1G&qH?bm2Z#a{E4m-Iytt62-=;$c@yW9wYGe7#Pk1fN#h=*1ifZ4%;k&6j{anAXwrO?BR)N>M1Pm+6KH^grqCGH4Cx13-xeWF zJ~lQh@2f=dM_49ikDehm-WU51)w--O0|(kA z=Ug-KD+MBu?5PpPi{K+SnaF*q$`ZS}HUQJ7aDG{9w{1+oB_xD3$u^cB0Rcf^g-yRB z;8{! z`!F2A8yyc`=PNB{uud*Dot!>lsMI-Ab;N^Ui@0Z^F=2C~Dszp}-{18|%SSyBhU61x zd;^150Bck}HHC~C*ugfYi-u}U+U1ychSytMVL$Sy%cdOuC?!YB-fOYLs-N~-=SRPK zA*vu|c;_*OsQvItQBi*bFZlewj)RNgJTdkQsa0+K<0_F{>yGK-qF$E!nyD2?^>k zLx@mMc#riBTp=rWV63}A2GDm|hXVpPf<^hc;{G0nl|Ne#oi3_VWd?A320>ImwrLGE z#9gmP_s10Kkxthd8)|EV-=6P|g~wUauxI@ixkikv24geU*Ntpc@(RYHVq@ch9S;!g zdPqP&u$J#nq4`f{1nnahD>*Y;AFOwOKfh&0b;jzHXOResG#yp^80ab8!~{-qnwIE+ zjsp-bROUu}C9tf}k)4JATtNKr1s9Lm4VhodoHjzz94%_Y_A@h8=nRxH*QxzHUVdsF zuR~%mg4%U1#WgGiN{LJ?)i<{C8DhO^ZK3CWlpMlotWQ6`Br;9Q+syS6{QKA$281$M z(bTm#+EKTWIknPcd2X#gC}DXcP!tl=)v&cx&qRNX!v9VLRW^ZX#9Tqw@Lg#FC83=f zrr;1Oj1oTlhAel9c>Xh*lO1I-8dfM%g-ZlX|0fqLDiLJ;ifMv6Bzlyh7Rt8N7~=0t zthS~il4Kfs(XjDn%1u(3bV-QaoRavWbh0AHKbJYGA2N$_*?LQl1vp0*{<Y?ei&Q=n~sN*+-4F+uF0LbgW^HDj*mC)>yd6D-MpRVbntcmD33Lz;?YixAnybz3{rxEhTI(jW;{BP51j27&$@ML6H?YTwfyYyq(%Ej0>OHAp;;E0NR=dlzwNc&AXRNM4g{i?B}9B7~9m% zQ8inM7If=Hwkgap(V1dOfpCWv!jtV?qM*Ko%=BWJyOhLP>A@>%olSK`a~Q_9>;cW z&ZPKF^Fx3ao%8rwM)_cghD1HprE;zSfXYkQk{e|?bUdtK=iR( zSr{HkWQz*T!4GbVzk=$o+f0slurb~asfKOQT=|ib1*x#tnTYT6t&RAL9tL>jQLt^< zH%DiRD$Fh1(Q~0n?{l-mVvVP_CwHLRP{&o64s%YDdObo zvYFiA2iiCX|D0bhBgOajUiMN{xpFK>pak9TdBzq?l^<~AzVSJ4d;>ZrK;@+}axu|U zy64(!L-Y9Jh|j!N^ucC-pL4I&`Yn}Hi z4&u+#30*fi7XcUkn+8o^mx~etzdt2X+vaSY^8T^8*w~&tXTG#g3N^sWkml{`K{F*M zL-BETzL;lT6#OQBGmhEy#=rSg`TnXCe5dpNBtHo`>W{{)W5(M@jaV05r|fu#gu)_D z`Ce{OpR)pTPAKsCZ#tKRg$2+`rzW2IHT=H#{%itzSiiVf>Vn-=;E3~d5GKTQA~zI- zOh93x5L5BNtdxufYr~jUuHJ3WHly+I`16p|+|ucN0RiqB?D9T&4DMZ9EvAU-QU{49iNRDO63Tq{)*Txk zk1vs4f#P?M%kGEi(G03N&&!j+_qW`W|KA#ZjyK>_5SiN9FJnxTb|-Qj7;A7s@bxa} zeR(qIw#Y_Yz}Icyht|#Eq_;?;C=g+YQ{}IwrdX$zKfGAP8%A9vu3^{02e7~K}l?W(2FU_BE5B8+R?wq+z^jhX3?qkE5P zIr8mW*ewB>EUhBA4?jl@T_Pt@q7+B;c=Y&Q)tKsT@!-iQa)ho!{Q^FCh|wseWB}8z>8pt-JrIR->|x|-UfWV z25Ib(Wk#Dd`w1heF4^E8)6c4QF_Jz}2D@6Xg zcZrD=e6Tqd zFErKEOf))N_}r!bJLRv`sXYgS8HQt73MTU#{5UEY&9R*_gjs0oP(;U_kB(K?>xeRmeZ5BaLJwC&dhgYxc*S z{crx6biCcO-(QGdP6%I!yuaS~yllSR69UW7Z}z5{EKU+KftC<=pBcmbc%P?sWBAwdM#J=XIMJb z(OVU4pkl5&iu9bdQIT&iGQQ**hO+mfdasxAi~g@#Tae5dhBu zm&G8@1hXIU!|{nM%5%^5@dM@te-8xjeoRufi_Jgm2{%}2!M zwLg2k;Yxt1y7LoAWaXH_&U}m?{vW998#fwWxmfG{a9gF@>Lvk>Xj3g0Bm$nUhK9rO zuEX4Rd=r+&<_jP1ml>-u>wnW_Dk=PAh=4^uPSWnMxIw<^eZJA?ez76i?sc)()!&MK zh#iynp|}w2D+zPDR4-jCDt3$2to)6`d*XC=C_WA&p>D3P4`*7b@b>;}qtSoUxYKcW zZ$z`*`+TL|;&3Xi05E#uNY78fXJ@vR=$q+Ftrp;cm@6IO(bHar~QGe2v!sND%P&hh5_94D|&ZE9Jc~b>{2c=>K5%xSy@u(KWM}9WB=E zi;QO6g-J(Ze9jXK?CJ1b+gDSeYE?CEaXENxMO|~dDLy_u)@*3aAJ2$k@-PAg<)l1} zq)-}m1!VNM0N>Ux7Cj*$4WN0k1xOyEH@@H;{s+zog!k#m@5xo00rQ)ieQHcG`YR(6 z@z-ndY`xywy~mn1%R=nA;t6@ptRVDYrgzPmkMuaJn+vQ4%VvwUCPTjp%&c}|6DY+3 zu$FIt?H%MoEV?GAk|*YQwKD)P8#&`CIPZ^0NUu_v5B2z;Ul8&iQO9g&Id8@@8Ww9z zjDo<`u&{4{c-oHO;PD7k`IpV>Fkg}SRm)~FC(wB^*ADh=*5>n2b4|^;`{4w(w9w2s zA;Iuw(zK98o6ptG`8ivMHQ7Y2p!d#WeLW}n0?-2UyXq|gx^}|^ZPL1L=bC}ijHo2c zXya=cf(S0ZEt-;H`_1l8m-X8Nj(VMFaLct7q~MYnKk7jdj>1JIo|dJABdF-%;sUQm z5VCG*YOc4~wR5fZaH1^)pK_w0N6C?Novfyv3`pF+9Utly` zR_z$|rB9>LhTAFz!lC|nXohOS{Z*`53xQ5NsQCU#iyD|$s%;ukG1Bo)NcPZwQ4_vQ z(ONNv@WI#H{er3dvw=y{=I^$3X*tu*FfK-k!9)E2z%uG@1W6CCZvi-o%zil z;`1&VFj&kA%t-WwOaiEC#f-E>5o9}k$Wp=-S_Xvi(AL%|Y!i&uUxf4$*S}D%78cN& z+!V6U{I=QDivP*!lC8j&Ax)`=Fb&y)rPn31#31V@@mM6c5jDS?>#<7aJ((#%&Ef}n zouBG?y&ccq5)0J8XP0}F*!BfDUUZ2XYy|m-nY>#0EMXuzqXmKu-k);)`8NE(ZujAo z?|T>gp!*YPOc9^W&IdMwHcQhLj~c{mZr!ezmlxIS$B^i|43i+Yo>#h4`xpXNO9uhJ z+ok5NJJw&M!8H!#tMjB;oB2A;wZ=x2q!uxOH*x&_&wfiPzgYFIH#XkHUyfDTj5_+U z&H5tZIs-dvJFc&{?!ew_u91-vNkcjbnh0$rWzC0E1x3PMPOZ+f|Hprd#40XOXBit8 z2T2^WN!!{T9ya{h8D1b8=b|t7Wa56OT`w0#9hO%+K5U!msc^+~g3?Hk3|a3V3f9*&9<0A^|Jba^wF+4GjmL&y6t_u)S9 zvM2iGZbDXDwS;rabyCnEXw@+xmog7f5c-sDEQjkg&P0Y_U`LRc9zPGfr4a6ro zqYcLYEL}7fsm*Iw_`Ar+A+O)lR}E3UP@ZYU`V8YxKhTGt9mz*8nJJ2Q&Qzad#^J9n zL#}2D_oMzeUIrAl&gY+zZdb#ig3w`F5)uS7{{|vy)?BN0~Xn^%!=ax8$m!teDv6`}J;hlTvK$S}1P z%eUIL-Aj41rp0`~5eUrM$Eu=XqSFqHK(-2C$%HXZ#rwTTx2XOc#CwXai*mToq$#ar zIT%Lx`?YNZ>=MSV01}8Zr+#UAT98w4!rblk5!q?WPil2JaQ_5f1=dfDpKFlEq|SvJ z6~k=1s>%5xG!JrHRz;yI_Vhs;5PV7x;*VQ_816tN^!2Dxgr_$?6UOs+Clyc|F1Xg! zrlw@>;Te5G^5})~o>c|x|Mo<#yn`RS*Vl7ESEQin_4)7=KrMU=dWU^z2>595$AIZq zHQBT-XAA6_=c3WAH;`UJJz!7gb?}OBqNOdG6uChoH|g*hDN!OsUXLRUv)!Hf6Y%td zjMMH;7yPCa3&ZfzV5921=5v@Wh|2YI6ut9yv3yZ}dod=Qggt(2)gPMfY{I|Kg*JZyCZ0uOEh ztvNa~Dw*P5VN5UTem~U{wi{QUTB(!tiu=sBT_bvN*6MTh`h53)F2k#5?J0(UEt}t& zBFE^j4>mJV7pF$HZ8Q;*SEuMPY(G%nVb~~q3pklOmX3^f$$#D28=1A47|-GMzCX<{ zlo%RfI2_OIH0=pso7Fw!8fy8v@QE~?qTWUaS{4Z`tRsv#`*pJ z?LoZTd<_?Wg5S56dOAA?d%h9`&qJ?9Ph)loU4cf27hWWfE7I^%pB(_MrZ)GS4x(P_w zrC8GWtN;#9kWot?URL+(zM=RB1X%Bbz?s~phx*A{cP5v}?Np2OOE(c)}m%!L%{X zda(i%xb?UU8=#l-_Ll5g-TIUG)x|Zyt_803e{wrN6~uTjdd6}Dx4Iu9Lt-;#ZOJ)Y zTt~AqJ$^6Tj#qswg?j(pq;jAb$%OT`M8lk1QFon}WHDxTk}pHU^Hlc4u4Ol04uw(w zY>I+6w{-If-BO_t`@5DN_-|TPog$Tw;xw0C_RKSCRB!%)`QlzN&c}Gzn%eztl)ULl=+IP?z3foNPu=ecbkl>7QNpfa~Ou$Kqqmmkha-S0tJW6G$w@ zg8e->pB}?fa=4_7_KR_21={~M|CjMgNqK)6RUzAS$V4z-pa*jzLQqli=3lPgg>ZfW zF6~f-xeaNO+yzk_V}+aWAz!FtjyqTr>{Y!VoP&>>gYOoD&VaZL;HzLl-rlb+Ku>v) z$wiaR*eDFFxU2fXCENt@377u`nrC1`YL}n$YLg?8WpzPAk;NUW!G`s+`I&Je5XQL! z^E>*5&}+B?F;2>tC3(Po?+NI7*k~7nTru#k2ebR{#gX;_3kxj9l*#jqGZ1c-*R2aW z175!Cg}?LafK-}4qE1Ra{S^cOgCLiEn1OrK2_kpDRdYl+; zIBjB(3ghNZVZ)<12RKbUNyzY-zI)0=xp1n_`v$J7(l!TuQ;p8uE}&L6n=MZkLc$ft zbL%Rocw~q(xQ&pdmmkz){#cOvwc4|8<$0$+Nk2uW+O1sHd7PZAgHxb<5uIvDxl?s6 zLo=4@Z$&>el+M!o9+pGaA@2<{+Em|X$^wSj5C!P16P41syitghHBggxrofyd>j7-GHEfbq(jaC-|$_vGDy z!K|lYw2Eg1@n-#fM8X#O?W~cklM8FyQ@m*L&zaE&UY(jRgwQmvKI)^rj~w%d3Rfa7 zUiXS+vEL^FxIb3?Qv3ca=!D4hV%xxt(*6BW+BJp|1|w0z@TlnXBw5^`Z7~xU|M&tI z)0kASXfT?eAM?#F==JgH{gM&_n{@<&EWYnjLZ&Gp8y9aIpl6+Td*I*+nQm*dd++&~ zRU5c+?Qk;h{SNT#O@KJu6Jqe?-8;kt@(}zw6b#sb!OM|4=ozr=k@#e_3LY`hrM5pq z)T7i|q(tuKG)>-4bU?Qy?15J?CU8%qI$a%Z`zTJ>SBbljn@Nzw4@l2q@cV4u)2#&% zS?I@A4LEZE4bg2!iob5pSL#^OP43>Q6WrO_+73IrX-bIPS;oh_#jtlhz5-GZP)0x; z#u@`70S)weJq8rsekZ?G56`BHvc-_TbYjHgXyd>yc0a`yu{ulx0p&KQ^=H+fYt6+P z2Z8L8Fb$OBrh0L#ou_CDU`ES1ZwQmc;sSHb5U6KF=38{ zQ5qk%8H_fXoj1MzcOZiv+JoN~gWm?h&Ms#lkEa>n9Sym90nzp#82^YYSPBdbWAWfF zAB#3bbyRHFxz)unx0S`!c8`%{)xhf%GHbz?WR5k9A^JhR2i?&lu}IUeK!wsa?z?}nDhB^@1RD;413!Sd9U4Q7 zumxSGa!`cG2J%nz{8WTYF8|xD!#X-w&;p?~^q`}6VSXTBnlw&rY>k?87;9&oZwLk7 ze~)9xyGg}~HpAPOq4vw~^Z9q0DeAe+FgS5cC`k_C?Sh%SQ ze!q{(kA-Q}k*K76julFcZ@*_S73}^%|2NI{%c)n1U4hBvwtHgja3##Hy12_nHIMUc za0<(e!9OQE?OeAZVhl>e+`$o0oNur2H^dlhZnlForm8{+2&J42YEquty|OG~Hbe~# zHkXL(`x-inj?L?X9lHv3uDf!-XnmHtisaQ@2vNF~?vy^b5xwKo{t!f>{zl7fFn@`= zYOPhciAH?NGS08ZD)}6ci%Q5sjAO{%}b+5=wuN4J{(Z4ERRX@8rF!M>^ zV-KpuL6pHZT)qw3H)%`?011I~`@Qtr6fMpt%URw}6}H;2@jqW~Bh#aKMDt0KWaz7p zO=bG^V9+?x0~8Ekwl_(nqWlCR%^8E1(2DWZ9F}RZjxuWmmuHzE-(b4YzPC!bz)JA# z{2Y!@A^tRvhYq09DMZzcIdyz~OG4n%Ew&4zE9L~zUKcWT$*fS&GYbcX?TKMb@zgP$ zFMGnp+fe#z;PF!ml`ry=q+|-YZ>d~3E5^GcDSeMB-;bD0-WlHac2&iEuV(h0gI`wP zufzjydc)nbznJBLT*TUYg$36VufVMlO6YcDLdAQhY1e8$V3kId2h<2?B zC7DRzJ=%op4>NQ+Dg|!pW$I@j`M>|ztMXZ*R5{PM7VPk{Zg!_sbVPNOZW)F7ydV-t zZes-I6-hDlkQ-!>^Gq+i>B2V+Nl#>btuwYcat%|#=GR@)xBVW|)!qF?=DmL}{e^DU zFeGB0*P4g93sS7Z3&$vj8AC;bwSU+T_ds_mq26$8R$7b#7dp{{JjYyLeZiz;u-r$w+H@`!5*Wf5V zfahCMlTFT7@BkI|1u9{KuH+_a!F+uXhv1EEN4o#@PbI}yMk^&D^e;W8iELQ(sMQc! zdFnxF>T`A(5k*|AJjqNYJUB%MiR!MlmekCUMt0CT2<9{+zg*=v>noh%@w6p~FoVqf z`e;wV+-BINHQ1CSi{?;V#f=za2Hox%W(j7Mo4W?+;CKr-2b{Zu#zVuVLwqN)1q~BM z@|uAo9=lEk)zaRt(XM&8egO*?jqHBMWbKSU)v@8!`W>n8)avk?c@57oZUs)4z+~cF zC$;&!RJ|iFTRm^g+8cxQ(K#DK7t@07*7citbN=TE4If6+#lqQjT(Y7QaGz0dg9#Fk zq-3}e_2SjCIRsqqZ*S}HT>czVU5D8O-GU&s@2l?+(0jZ1dxJRO3w8H|MMBO%Z_S(U zkOyo;7lh`pEhr`E4L96wg0kSKbZPO!CZGfbw!OFM#jg9t;MWA;-h2Y?R?PQH%=bN2 zh-J?=cph~0V}s6Ay;1(Z^#aY5R)I8mR`Atf zFeEMbDeV#As`FtZ?0Uta_V-IXs}rM#sRrNgl-kAjdO4%o*7$@RvA|6COL-u%l>j-W z3_7EHKc@^hdkCWZU$cEAnijq29O~EcURiziYg0r(fXXSShtsbRp`5kK?f}YP!Lk~I z=J>EQ&GI)O&rIeDx(wgk%e|kkgjB zxh7Vk_PqllKT&~XP&>yeFh0*R-V|eh1kv+L0|Gw}NPr*(0g#+~gk6{6CQqp*)JCC` z!4M!4SPA+>LMiGMi)*7}^8n=JfIN8tB4xlMm(v#IScomvy48pQifxUlR!UDYy$7a4>hEHdJS&6&`h zxMbV<5#v7JQX=ZJ<1-3b_@2u|M}c#o1G-$03R8V7PL9mz~w%)>Od#{2L*0D6{F+?LCT3D^uG(pF?8) z=MO zhm|w4TsE=*j@nh`j@#l^KETxUd1s(m9qyK)R(;qlZ{5mC#>G|+DIXvH%`24&G>iW7|?c8~{z~6Nh{Q7V66&*2&0#tWI zvDE~5#KRY!9dzpU3*7E~%6r{o*nB(p&I>v?z5tGtAl_9eu>0QDAg6V{=bS#SkkHlxRn0hwK8Q2L#Uli3ZX3>;|-w}CCXRkg? z^lNrqp`sMqN|;r-6O~j5P_G?aa9x|2^^q;WZsAkG%OE5Dy!@`f(9)Pz&tmfJQn!IQ zU0-3D&?;zOab9`aVAbI)=iVec@_4+fF36@@EN;Stdd!1jDV9GMx_k z7}{cl6+N(SgEczodqU7H zZ6P!{cKy>|nQ_jNeJ8hTAR1CtJW{W&TRxKjUYskIO=`ETsof~E;Dp5vYNb;{Rw*nb zgSa^+9rIA9ZfWkrLD4BshyCn-BNuz@`?h6)%Y+9V-%7}CC`0{5lbcOwCPxtd>l23R za$yJ1j)zQ(Kj#3)MVtekm`$G74#kEFe(di6CG?_hZLZHwG;r1dsNyL6AGad~RWZ?S zfinX|fPthcV)I+jZEv__EbX+c6vyk%`2OZ_TCse485ArYxdK$fHh}-p8Mw}Ps2jHW ze_FKZD{*xs26=zpEs|&zS|6<+82j);uW>E^5&6MXhvi6eS?=?krmE<`^6h#1IsK6m z0XyV64fHAu+{n(agU+uD&Tk8ZphwyGIx<|r8P{wp>VeAo`sahjwfCzkC(Gb&-aYV zsM~;YYTFVg!`%LC{)%&2=&UL#sDsVNl<$?g^IL z)a`WLpV@abXbO5iF8e=L@Mw|1o(_U~=$J@EJ54ZDB#GrM3f6LQbaBD*xE%ESWx^F2 zMK0o#U)Jn>JX5j-r+NSSH5`_!Um6jU$#G>his`|?iHfY}MlK#`({|m?C;^GU;7OzS zC|85s{C6PLpDkJ@uEiJFwt-lS#dxT1E98AnmTTDQw%_}NYFG&zf^@Msioj7q<{N3@ zUYHbr7qP=~Tm^(tljCZK?~O~CB?Dbc42Ch~>s3PVxTlAuWjX}tK)#q#1xO^r8_~Y!;tG-*eZbf{?jOn-Cw*11y3un#|!n1JF z--iDtJ#2a^Hd-eopra=WflC)I_(1@ptf|M!!CFA4=pCG=PMzeA_wvgxVS?->Xg%Fs z+7{c|=)(2EYwx`C4&BGek&#hut=!o-^v}}YrD|vTAad%|X?(*Ix`RTlpxnOZ`(i*u zxndGkrYa1$q;QRnoIZVuId$mJA@nR>yjVHrt}+7&h(|%-Xp3HDW2zOf?0ME}WLPDk zWI;+mA|4UMQ5xk!p?NM;aPwcP@;wqnMmzyR57>;GjL-@q7VT?tG)-hZ)?g?o;8p`a zlu9r-HIz{WAsC?MrHUd|#c4kF4-4sZsOc&`#DrF0J(ejURzT915WxX@O1wgkt01X{ z%}WAy^b{dc&WT4n@~&`5Z1hME@=Ah0J>plYQ42^(xyb>cP{I(Taw*MVDocv0O;RK` z8J1Sc%9aqtt`G;(R53(cP8*{@Rk9}xQ355zFwhi+3a2&N0^raAmM6-X1E&duR-f%e z_fswn0ZlLv4=0}HJhKKlG*k5%qr;EA+4l5M-wZm8GPkkDQ5JnRmk`Nk=(eaIM3^mh zV~jl&hPnjxGI}E2Xw-YUd;CXN^gRGGI`WyLPTw zbNef=yh@Lsc;fM{?wX!K=(^E1f8N}sOP8%%cjx?t3toEhxxAR)7d(i*RJ6qTU zAA92A)|T#xalNx}XlU@YS6_eRkw<>@S3iI6z4zUF-+gy&+_>q!P23RX%$b8z7{Z+= zKKjJu_(We%@5$3=-+t$q^rAo*G|@>b5B0`aYo-^QFz&bGFTn$9bMgB zmo8q}y5;Q^E0*55@$TUveYi(WwXO@7u5RD{?uzBNu32|yy*|oD&PxCK=FJ=L+Hm{r zx9iIv^@)Y{o}S*b=gz&h`PGdZ)~{Z5JG%~}3mtQBy#9K3ciTPpY-(-keeSvE*_Q6QYoq`EmxhMC%RvE$;RC<};CKLl zz!)SrtvCQB^prS8$6=r~+9E>PoP+>tMWzpq@mt%oRO)^Mk=$UfpixO<&BURYrA>*g z-^?v2n8P0{XXfBonBxNojs*!gEej<8lsE|}L3N}nC}|By13LH-QMRB^q7933A20I& zTMS;h(cpebosW^cd2Ok;v@t1VpMIdd>uU*G&DX}oOd(xKrYhPA(c8jg4ObRRl+c-ywE z?DyaweDFceaGaP=oji?)y?s46&yk2JvirT=9FFmvB_F%yN@3`zIE%iQ>RW5rIF!bjyv>)m4x0g(a}Jv5V2&}qD8k5D~?~B zQ#p}v#@e}SC)_M7ix=IZSJYbc7dM}K?q|Dqy~m1ylNqxnEJmfnB?HzwrDEyYY4RZca#N&zwGf{Qc9X zPtTb%mjEi^JQg|`H}nT?5kUzzoaxi2&73iF?%a9o0$aCknLBR|caom&UQz;c#2>FX zQSINif8XA{+qS*?`WtUDzc`=JH?sD|;Ly*0`cn>J_doCe%L{{)`~gV6{{FtL?{4cK z7|`*nt?k`+cU--8nKSO}S@XyQIPnC|bP6OTi5DVqcRbYtkj2Or#U=LP~oD}g3OO&DiSfs&Tzx0y2a0F>4rBu2}WhV;^DExDw;WfZ^z| zquiii*|&H9!Gni53Uj5LH*YRuh>Kj9X}xmw(y?R5_U+q`duZDy*n8&8Swh4zOE;M* zgpSF=-ID;qiMgXkj^>T^BucHOuh1ZMFI~ED?D+8m2lSB`&drp2_HfQVHFL)Ff&M-$ z5^C7aojY^(%&7zW4jwvu^u&qdobo3p8td2INz(TBDZ%g`4`;LZ+y+UCrj2_9(u#y7rEpe-%+alHfvf>|;Mb*xY^1IS$ix~LYa<)T*V zRP!{>hDxwqmIfG5s7lk+GKbd!%#j(|sI=?r{b22S6g1f~PC}#KI%NfbKh8*xPl14w zMig|w6U|~UZhGP<{&+$u2HY#og+*A^N6EN%zC93E*)SVYri+_Go4oZyXN{IJwP8h1 zlH#N|B3POhN9hS=s#0d=@BmoMgjTbM27s-Z6CfH;sD>C^YgwMG8p4S!m?h|kXUv~Y zPNsf9E20Ae52d$|;=w$D6AF=bpUreBWEr3+1ywOSXKXH2vB(mAftwOU)PQ_qZ1h$$Sw9IGl~c*-?^S{`h$ zYjdIR?9_9q(NTSOL3?{`L|=oYSB=|R+RvT8_}p{Pt+`|M9e1qmsOj}@bbj!`ssGAxW;VvzD(c_*tN+B3_s4(y$BP%=f@6R6SKm5#aQFZ8KmV)luGu5QV>mWCI{X)Z z@l6gKU;p~=Pn$NKfHGzr9Y~+fTGy59SO4a(|N6$@jsNlg^{=_{PwN|aXWNc{|L_0Z zKl+`2^zg$E-?%X}(K7LO-}zhClRx>_|3hz2kG|iH^SC}Ssl|)FGlf~djvqhsH-Gb= zIyy$a_WOU-*VC^EO-^)n_y73sfBKW3Jo`Ie{)Z3T|IpRzSEdbgpFDN$-~HQvyLRpE zzxCh!Ry&7vU#HsJYTxC4NU*jKmAkgEWi7Yzt-6` zeROP?i$!PWj2}Jw_dosl(|`QO|7`WjJFZ{7#ynutiYPB?tbOTSo?-#3x)byv)<$wF?|k!CbW6BjCZu_%MRlhlCoW1hO15m zr~4pGBPfMGI;XTShM*|bzMaLya~v@r>GPzpSo)$+nZxNseyBr&9kDrMpfGejU#sRltS&7ct>NgP<;jr>Xxbf8&3Qa~Ab>ukl< zViSS+^rG=b(T4?W-Pn^pV-K=AsRF!+=qy70TJ*aqFp1eR9*L`$y~fvN`7CU%mDATemE} zh1Cfjq!@aVr@O2BOJDjD$IZr=7B`llKl`&k=MKP1cIEPQx;AZkKXCi)cYN{_Pj&Zn z_4IW8{O8aA{O5muXCn+>?4n_S+kaf(E;`uMX$xlNd%!JwrF6b zrTbh?xbxRX#^_lx_~fbMyLav7%E78jwXd(A6VIJ@>Tbg@p@G11J=n1E&JIr>lAI`8sb%20Rvq65M2G zB!|h48#jhO_}~QhwdKoi&0dWmwkZbmF>9 zw_acBGFQV**O>MshI**;?&P5(ho;Y%#R(O=*REc_F?4O#>}dl7Gj+1Z3(sN%0U}1J zJl6GIZqW_w4h`M#+aUEMh;hMf)MiYtT)8$pJUDaa?2cL&3&d!B^wOn^SFT)QS(`C^ zCRg)O?pk`+4}xgq>NU>3aQ*sarUuSIA!6f`jFdi~FnjhKbTS+q{@987`t*+Wn8Qg* zZiDQ|7cZRe)t^D=&ulWN7fxH|UF-F0R|jtl)<;HA#T}Atp=2MVgAIS2eM}qQ=(X!t zinj^rCBZtK^}~eP%vm$Ar8vl}ULhn!{oK8S>rGF09~Vh9Xkqczj~he7gWMndyuXz@ zHKW6=pkCLTwb)ykJ9^9d&^5Gqq0_r=@P%HJp)>ud08}wAhK7dWsn_*U5ZD+94t*@G zObz~lBF?_gL>L;r?swzrfPn+7C3Js2H~jpW`Ifffq2bZd8>1sPXl!ZIOL+`HAA5G+ zG<|=uz66u3X5o^hu|^#SuUx)7G(5~|&v4J0HJe-}+Qij9)aZg<-ne>IFPOBp4ouU{ zlmmLM)66ukZJY=6(S4tDh!0CRrweYjj3#5Fw9x~Li7Qtw*E(yS7v3yN&_FsN<*m-W z8gvo;?p6XqNtK;o+%Gf27KYHJioT3DI()hd5oFCBD^VM``D8yfuE$VihM^89+M0G# z@RV@E7QF#8suc}YPeP#@q?rNPAe15A#L2*@Nq=&J?#i{6c5MrOw1SU1M(gXnbkorU z)aKow5%H)(jqe>=U;zAw83avkg-=hk;F7&i4B%)0@e?|QI253AFAS98fFL>47X7UZ zB|agBS&SvblkkKYVtAa2a-iPOHp(}dalH_c6#?hQ#`NJiap?IyzUdV%d_f^sxt2*K06ad;x3E~y zQOqI2QpHR|o8J#v@2Fv~I4^e9w5Ogud*OwbUf8{R=bSmSSKPLo^V#Xsr}rN`w0zmp zU;mBI&z?P(l%H(jio$B%_RVj8^Q9M`zh%jifBFCTSJS8UVS!b8eTyeu8%$T_~VZkPdnav>+Ns;$3Oqr$38l5?!w{W`U4L}*@7}Zbqfb2kOP_j*mA^4D#ucfftNX3j-~91Ue!#YP*PZvUj&UO2 zzHP^;)2APM;v=8>)F;q4IC!J0t6Sgpb>jV}pMJWvZR}G|J$2iP+ZQfcNJ_D+{ot7& z{_N*Jx$Exrcig@P=JOZM4qhL+aPfR!U-zef>2vGX>-&Egaey(xT}GKva8>IJIDL(6-5lKp6^T(k!7B$d}BJ>RotVRX;Mw? z(4lCyYNykw6R;-$HC=n~QGKB!`u+`^5UUqRt#2p+Vbp>^L8sb`L-!55@B!r)FJ9Wb z`E^2uCbAv%#Fn|dVZ#RYUHEa0@y82x(^LMsdUA;a9Q)|9Wy^fYFP36f4!!Zff8hxI zoVqv_v8}QKR6*mopB=h#HKU9npX&6!8XO}6SFT>7Rn99B^t1`VuFme7mX1lP_DusS z2mBYToKX|?(FO+^bSwApd!pSZBobVokL>C0<)Dmgav+`nu}i#}5E@l~;}Dcuhu(k8 zQC=bUWO3>hi#$l&NMArONSdIJBLQLNhZT%<6beTrI@sOa;}<;TuoT&JR7FEY41#9* zg(o2@sRZK0CSB8?(jYtaVH~BHt?O(GyA?<+O@2ZJklWfXgn3^^F=}M6`0cR*{k=B%$(TYG8@22v=uvoW7kUwyf?h05T2j;~KTR*6 z9y&>^O{2}+bdy5P{A|?a42|6GnKhcDlL`?AV3*4Rx~XFZdCzzuE(YXV;6$jHEb4;Y z0|`(~nO4f?*21eXEoF%wnzcrGNcmyrcsSsKsFQ1W3TCJp7axJ_4~C?ZW1ye<15iv? z#3)%jIleo3@&^S%T9uImsdQ5IAW$-nEa9}$4_w1fc*s3g&L}5Mnfr{KmOaVo%VNnT z*xV`9;W?&Jt98KLWsL-s6$~yxB>9lSPgZACjg41-Vj^*qx9JoWx~!P^q+fKu3^EHT zLM&*BkEV&ATG*IonF9_hqLUmatQ=?~GnfTn*cF?efS}MW$rX*S{VDb-O9@a&KEwo7 z8Z~{*tg3P&_QVkJ_y&X$ab!5?ufJnent+>5_M`Pio8PgZRvq-*HA{1!mYUYOyu4fKjM$#?Dz1G&w;wLHCX(iyEW^H=Mux^bEyi}HM zNLbgWDgPl_nX0nrkrmyo0I{Q#peeFK&6JD^gAqIo;sZQwP^|Y&vK%O7l&DIkayDWv zypY7$W>tdJ668PLY76^#l^Oi9N~JcvXJKv1qQ zOQcLqs+cZq%yZudSo@%|;KGou!2kj?NQmGtz|5?MLgrNrjE?UY8fe_N1+C-iD~@^c zL-K>|QTY94+71rua5K+wgb_$rJQNe{9j%=;F*h1@c2mFb3WFD2|7APhp|zN@ns~QR zD>-cx!p$*MS53{@?$f zfA{IneCC&a>2ta#aOQ96Xql*;zjSuTyYC)8eC*n_>!ilUjT=Au(T`yT-&jM2hew}( z;it!r9qH)kTC{KpM|>^-_&YQ-_~MH%oIH8v#*OQQch>9~8}8h&>Aw4iMuxX<-+uM- zm5)97(aw$<&Yn7R{)HEwd*qRaR;^k+GBV1>^4`u}d-m-4?63Utw7z}@v_W?1-AZg= ztz!*#@s^I(8rvVs_?0VXpL_n5qlXV?5c>zFZ@6pY!w)<_ceFp!fi^DBY)S3!zklrc zmtGjWa^splv(-6&?t+bX-L-c88dlAkKcYmyj~qGjv!DHJWO%Hvzs3#i(Z`-xxpF1L zR_o~5we!8#-*~k?I#h3r>s6Aj+O%mimM&d#_dOf>dZ%l>_L8FU_Enq-#27JfxD7Bs z5Q#H9j5|$oxJ)V#T7jgT2EJV25JW0OsuiRP4-AwDT9a}EX4YX+2)pR_R3>dSsV&7a zlKhli#Nme%1Gos0DvT81Fk9Bst(@jIt1oefucC`oEFer@4qL_64iFnIYaPd1RD*UbhP<`j5Qi^mR(Sr-#7;+#*|fsF+>hMh(`}1K=Xix4uGQ;{R|)TomRc@P9XkN8;6^>{)-@JY4EG%`_h;9!lu3?uk}J9z?gAN&RIXAAU@7=+YM;K7hz` zx29TAswzNh#Dml5hite?Mcs_sZo&ylN1*_Gqn6{527;l1QOFdJIwB@0jx${hLB8M{ zm>vxAyH$7K?ECSV?vtJZ1kf)hA(Ii(E8{kAFnh8{X#f(_!AqWkUrj!+#{|u2!y%;= zD0@99X2>}D?{^yL(|Foy<%3UC*6D)2$Ar|!VQ(>sb`|r42u>hG09?+LA!<@3i2rGm zXDDxFkJARNgc4OQj60Fwqzul2ga4I=<^>^a?uSyEl{`joj#c3xL@?i!kd-4aWU&QJ zIN^bx--yGkdxvM5MvQP+Nbv;J1*nC$5;kN(K#gfMp-mV>U2D);PGL)-LFUPSCc9+x zrXfAxK)1%I8P4 z3IT$9s1-q-`5c1K`L7rRFUx9N0FZ{B5peiyW4f$absIc^4?nY465yq#lf&(9`+th5 zGI~8uMHQq1s?8o$Y~N+5Kq@jMXDs)W+qs&UZ4 z`)2FxFS#&YrN{Hsv z`jQ}!{xJs`{RPnsqFZZJSx%ra^2td1r2<~ed?@&)K`b9dFs9(B4Krl`JQ@&0GYnL_ zy8MCtQZwb~=opE?)=NHc?Cb7^0nOT(%)l}M7gv9XI6vOi%?U%F{)C4^yqWVPjQF(F z>m&HX-Ug9VgO7k*Hhj;~v@0 z2QviR@l&*!3ysDY2VtyuOcfb=$i-uHY^2sv>#lW3Qjpli%38e3XxP_e?2#gx<4olIawp!*z)Ii3+KEoU5&I1bi^hDVra zJzc%z)%Zk%BRnfY!{-9xhLiMqd}4&!gx?HM)ALmBd))n)n9Ruz(y=}^+F8>d(bONG zZ_S?)!^fm3`36E&4rr+Se5ff0^miQ5Of^?Tt+{?+35617h{i+IIs<}ik~!Lv2H*^< zyj6P`$lGyFVn~rhFsM^g8n{4;Q~nu)0b4M{t~J0bW{4bWS%0tuE-?{x($ENbyCY<< z3$Y1J*-1{QVuk|H&Wv$5ruexAn1ezo(WDk$_E*N7Y6Tq zN^*R1S8!Es(*!iTij*w+oF}3NPA?C#F4GDnT?WB`daP}YT%2rE%(?U_5S+ICtV^GH zNF*I1S+@EDDIAavjY2dFFys{j)OMtk5|QEH4cYgp4PVm6(& z<#V*@RS+%pm5D@^5)IG+@bCwLBEcp%h%~ucH2LhrDhO^KZBTe5HU}2#UVY05=zXTr zN7WQ6LJ}n`#soOxnh{MWdnjxJKAr38D{Yd;0j*z*z3U2Uh9KGi5b0Nvp$Z;y%M@Ybn%P1gDitkeq{ocp+-L>b2EUBOUk!sd!$ANUXqYq_7@~rJX`E4Fv>G7g*@X>U9v&$cAwBjnoK!tBFl&=_E6p?|_)^qH9uhZ#=XBDs&Mh*8!g3zr2&znz zA08Q$tK%~4!A%6!MG1ROvJx^dG-(;{)U>kmiUFLNA*N)ODrOzJ_KPAXr3ozxqTJ$! ztcjyAd+$J`y^Rg7F+QP{Q=Il(9nTmRPN^4(NgzZhbOFTu@;;n3N8{vB>xpLpqT3<( zK~fezV7g`U_NJ5lO`o8}eR#DZXfO25!@_z5>LIa9ZgOvfSKvm`VXm5}hBF#q`o&wn z*tYFmeIVk{q2tGoA2@h$WO!ue%$b}gD&~k&Dx6Rp)Al^>RnPSy724t+zt~i^Zr!$L z&z@Uvy_Iuel*k+m96*!=0;=krOGUJFj1pYR%Yg|31gWY~k`jO(W=eg32*2$rssa+s znpcVl0gXO$Lt-GqK*>-D!epu1oLWZ2};? z2S|_J|Nu*r0Oi3kE(KRs<9WmY0F<)l>g#I`+JslI#YRXi}RY{^Ki4sZC0)z+Q z9pOEY@QHNSWzO^be&?Kg0ku}%+;{D@m)~pev(I_WEprcQ6#+QF5gb2oLew=+sGg#d zQX)bvIW$a8u89M+n0CqG&ysKB%lh@WPX&31Px5+nD04QX+{2)aa~G+B-UWq&(CaXO zC&!K*lWX2*V~{zwJ^l1k-~H})Z@c~0FMs9BS6+G5N!Shb>I! zsn&)0g=5D!y&ub0Bchk_23u^;qZA{#e)_+MXJm?uAM zB|dK;#kA}uY(2~z7T_e0xwaw5mXxCbMMbE-_u~Z4a36&fM|?BB!7r_JvKgXoz33fZ z+OmZcFKOg7PfTo9{9Bx#N6Kj;fX$ns@gl_;Gx_gufJ0B^aYnD@;#eY*ly zx~!Z#Bg>s3u{dYBJg7Wti$V&6-kZgHy zZiy?PY$8QfIV(l@-l){EA-W9pN>S5#GC~=O#Jdl;*RDKzXR7EJEX*3}t@jAbHD35X zP{AsM2!d3tWHj31Hbf9d@>#O6+hk<7kIN|-`ICF0CS0G2SW!{vtIDy0X_t9M{9(8i z67*#3vj}aW#8~N=QVOQiGhRnVkQ?2e3?~`>kFRo6JVS%pc4?Aj-~EDn?&c84?bfe(cl0! z`pH0g)k83j*9SzJvk968pyv}hijD>OFQE*R!zIFBoE98Nyv?L5*P)5WW!@6XhcN0} zx@u0Hn4(E}C}Kt;4l_G6EkL)UD51?A?6ArdNe*eD#C~{&p@9bmPtQaYYSO6tb1Yak zwCry%red8AudljcX5~?@OG)kOqom9LfyE8%dV=S|$PNG{%DP_g)_jSW1QGT(6`G_@ zpUKlB#Sk=huEeN{%g#~kavf?04WHk{6ldI-n>IIu`Zw;kw1C3e>d8c-#-iQ0jzEQ%?S+s`s7jDN7DV8jGrWpuEBfHA>sgc7a;eq4(2KQV&XG z68`BQ|M8T)`!3Dj4-1#_Ck!U2U{4PSmJUPTZm+3HSk+>9GWG~_rYMn8{p z_C+fU2#LFbH~q)YIu{NgWu<))iHnm34}9p{^ZKWWNVPhv645v|vt1PwrC7sD9IEIL5f6jt}1u@jzb)gb8nL!tKx z`tEzqwBE}&89>AE2WXrg00u{+Ull>>Il77<3EqW6KP^j=SsQLVWON~bE0A492e1qd zGm)AdD%o$scD||{KsibZxKZx;?1V^s>%H%S{Y?cfyp*PwOB=i!0|5Kx{_HK0$^*Bv9@D0astE_ z51fdzA1Y$cvdL3qaT&s-TbUZEBQOF$2PgmhLcf=j6lAjM#+Y^BV7&ABqiaM~mLcL@ zwF+dLV#J$de<_2*+OMGk_$)M>cq9}ral$9MZDY#|s>8+@ooEhS9`U$Ul2Y*x)E%Rg zELcX#q;3sLT)aU%8MdW63FTtsX3~lUluT}E6zjE{Y}B=MY4jP!v_kD}_Q|K$WMEXN zZvbA_uw&6hJH@~+D6kFmQgeUc=1;m}41O5e!c2yX4BU>H4e)>cWbfxc3`}*{;wRS7 zg5JW^MIpF)M+D+zZ$f}phJ2egt}d_q_|Chpx$5fcZ@A&i)6Y2X>~r>CaKY{!JMX^d z9xU!Z_q=t^D_q`I*Is_*m6u<7>Agem<*$6rFRv`W@z(2y4!yf|`!;R{xYl6dt+(Gi zeCSBtOYI*ArKEQ3+SO-ZtmlIV556Egf8@xKE%{pRjQE`i&pr3tOE0~IZ+Q!c6#&2w z9eC%RcQA_EMA1MhD+R21>0}Tx-Sm>TA!Dp>emg@P>~cXuPm>_UKLC_VJBiBNL+mJ4 z%9+n@SSToDm4FroHgw}kt5KU0>n98#L$L&@2-MPYkq(=tLCffrdDw#7$tp8=GSC$W zK*vd1&fknuXA_++DO$^Wrkgh?gii6Z(ks}kGDN%XJ6Hj5iiA~4R?x;AF(cA(0ok=R z->Jpfms8P<=Hof7vb3^m=Mk4Nxu^K9dhq4tV+)JEl%LlaeU_#Vc`JW3gEKZ zj*$#*S~hR?>$+E{Tkc`F)_6%Ex~P3#Y*`S8ZV+rX;$p+1un_4`BZIF?a^z z4!~$N7h;#+R1OBDXVf2sh61)K=w%{Q?pOAA&HgBe54qdnw(#)0(@f#rX(~W zz)l8rfxQJgH~>S4{Emy8SgnX7p=f<;h#)fLw*Xk9_+GW%MI=fC zLwg<*$~gi$a}UYVX#TaGU%1B){`#@S47m!_S}1uN2%*6| zymLTGr@*O3P-A4#Bwrdp{q!#^ir|K%t(D zp3UNA1}StdKp35dYQ1{!kWvQ$%AcjA9!aLnUmb-kF?KlKGvwPF42P>ZceBovT)nh+ z7sS36XPoqZ9f67N@obxn!=TPC0T@(l7OVt7hg~aujw9%cyhCUO)nYuGt%JBaCSd~U zE*4xAhY6c0Id^!7(S%4^E;_ls7>eDKN+RmV8O@_d0#=xYLLSyN8eoeyq4+FOEy2wI z^U|{%In;Mc2sasrN9Ca)H3bzitRxEDw-16#icYq%S_ZG+glH}RMdd+gD+rWL3RkqU zrHd0Vu|H-v#umQDoL7x1;-9|^0z!9=LAi{y>2idW68M(po6^GoGG{h zLj?^4N}sw>FleA%U0r?f{s%6+@WQ?O_Hh;TEVtpro;|zYdh4y{UwGlFE3P1(7hibs zo8SEAPoDV6+i$(~$YYN_{me7_&)d(j=AOIne&peYue|Ci_GL1`QU3PZZ-4H&=P$kN zlEuY^JMX;nfd?MA^2#f9b>qgTo_gxr-~RS%uf2Bo@Zl$Z^2A$jzjgN6XJZ|o-#!=WZ#eZtgbT>hruuK(f zL)6)-oUQD;@O88qNFQ_%wioeSsD{LL5R;y>qhYe{DC}bCMW0y88+Dk_hooI|GY(M6 zw${%uHI}{?S9O#J9kb!kV!F(9+ZF*BLKTkDaz$(ibSn!3czGZc=Zx;PJZgcyLz?9G zf(nH;+B}7%ix2MFC2tE+2y&omSi_&Ge3U;;`s z%iyngl}GZXh(W~N);Ia~A%vR~*0ZlY_(|V>-i|qv+POmm#5&20cX=XJI_B_Tv};7k zgJpmTq_m5dq!Z~CfC|mud#o-t#vpkve43mW97U!UQQ$%gh%Bd1~XhqcT^idk=$^lZxKsL|$ zg_}g-n_=P$j+tSDt0_kfOxdvVJBHvTpCUcZdc05u3ebp#u6l=!2o4C$PQ%5mLH8gB znE?k^^PXd71bOW0Z6ejJbQzQ#8q(-Zx}?uo*8y{2ZMX2Cz(WSY!zR{>rFwmRAVJB7 z4(RzN4f%ogQ0FL63ag7C>EDb|K)&O)%(cPXOMxxMI7*Jt1 z-d1Bhi7@$anOj>SBoB;-MH2ug5QkjvZtqagLARqtqO~f8;y78nP@aS}Bnl>{DzS73 zT8on|4B${?pp&99w)kF#36Ov-nH`L_ZC0fQCLbmS@CF4W6HcgpM96v=N`$VEeF>rk zhPD}1gHeET!bfC77eH#r(O8*0DNps#mJXDyco6>kcmTci6OPUzGhW*bgc0v^bYsXl zZI%E-8iW>wEf*cA!y!VcvUUe#at8h}0}hp5#P=^{YXzcKPK!|1G)$&YQnVBkN9Jh@yFKEG00W-RJ) zSstV&)3R$Ji>M}jgqKg@$Mb?aA=>g-u}&&AZZ);it7rM6oNSBeXIEJg$ZrH|J+uKP zy!3s0{oB%ofAP#dFa|!r)G0ExK)w8c)e>o&f)YWX99v%IIDWq!(Uz;n7DQz4FSdPCNZHN~eD|?E34kCkHRR^wM{}^PP(>y67uk`N|bn zVD0iV&pdPc_U#SBmf4pbUo_+iFeeG*s!_VLR&ELG{ znrj$>zwgz7*ywN`Ad+r$1q04u&T>q*Yo<7YbSs|46z-(U->j2dHyj*AiVs~^=s*Xd zRh3dgyTHVQE)d`(#p3pxL%7`0mTpBNtM;KX(S;s}(`bPyqY{VBBH-sQ$KvS69P0p3 z1RZcuwcuI39{5T}O%bH4fgU_C_xK1Ah@g+0f&6ht82t|qEeiVxR@fi|=PRmgWKfz> zXC!feuy{BIpeIIffFDg`t22`)+}g`406oxfh;nykIdgF563$(~s$ahYT5UO(6RD5n zIgGobajTj4^SE_V=X3L(;uD9=noE&jTAG>Wf{KapGH+^3BPVZ8W26PwH8FgV3nqr` zrYB%DTMWb8wG6oUnegFmK)MXvJJke~L}PcO8_RD$)*8@Nqhf4rP` z;wEoR2op5U`>?*yzz}%O-wFV_XqYk-$1am9d%|yvS$@D{G-Dp7O*@px6|^3PS`;MJ zN|#2q_(E9=by5m+u3W5?R3?+0HRu^!dNjl4G-;gxK}=94&L##aXc6f&u;NJSA&#g} zy$00~JTFE{Pe7DN7^nn+;+1L8Y)okB=gZLx2|7ham$L#;Uu2G5dh9U9qwmp-mGnSZ zs&O7Xm(NBmt{2s#ScWojcC~U=}8IXm`x@qE=O;e=;>{@dw7to=J$1KC7xCaV9nu z1sSA+O!T(EB-nPM*8wL3<)l6fxeO5US6n>?!9b;fM31|fQpp3Yj$tvS0+k_lFn&Qd zO<4sR3skUvwhIj16Mm;^5}@Xe@B>#2R<}NZ;n)XSd|9=Wq zSXH#ZNUW+vJ~G%%)BPPtYTqROnG$jgxsn#usP6tIA7T^uWv>1s$S>g6B$s zDl?`?jG+Y5R6?bJ1Jk##)SN@P50Pc?Uw#H)0DPh!Iw$)|^{N*U-G~UP5E}vs-7q)! zMu1Io!yVV)b_-R_GwwkLFM!Yfr7FFg02!d%wnN$nEgxz}UQBaR3y9_kjZk7`o`951oJh`ALl%Xa$P-#DKJmm8;5XiQBSaDkWlR2C_LEOO`QCen(0tE5 z_uPB$z1#^L3NUojO*g&$_S=8^w|{&0-FI^m>brDs74afNuym4~5p^c4x!8rR#3a&p z6o4xj21FoM5F~u!Q6^$e0?MY0*wJXAt1cogQ|MmvU5i)*fmr&ip5nf`kw>$D^enCN z#H=f%8uIONgDlKo&?6BiM-u>^K$Iu=XpTM8qaMHz3~M<=mZ5qgI8-M|ChfUc_A-w` zk7a4K2!J5eU5qYVlTl6N0MsE2xEB22?2us?Le#fTP4xpRjaMLCEpP({Zu9as6{UJC z0HVQD3q1LIBFHn*97i{8&bx}|7rfs9p!jwdcMWu^t!klr#82+g@0-X~;splHs*4G~ z@n*B%7RqvAZhaH_SWC#}F}AUj(w5pC7gv^w%esuirAA%yhng7p%F2CY$ogyeizw^kczR-A@a!m`%gOk58C0fpkW zh2fLF)s}PT1Q-!g5aA0$;+9R*KuYFhx=JiW^WZ!@tWa=;M+c@ZY_l%8O{9y+ z!rUBu;5Nx+yKqJ=1Rbaw$O2W;E^PswbZZ6p0D=gu!lUw`n;MpqXs`%>McO(<%JasU z+GXO!$4Y3c@QjA3s5%N>&Jw{3vpfK@2o|59IsuSe4#4oAqH=`{hlDs*;0j>@1?<+n z97y1s9D}J0uw+CX{AZ}e$pyFcadhA>Wp+9MhEhC+3BpD}D`(Sdv1vM2cC!Ex&)Fhr z*^wE=E7m=GgACO?B5(yA{M1l3016$7;XsY&z!3EyZ8f{61nBlE1E9&Djl;tThR^_y z+VTX=(eWKY!{9)1T6o%)IKg11 zpxIGI5BL?~LVD7}C0nNrB5jGq%ZxFI#S^fqNC$gAo0<-hP4_)haO~L8ZQHh^@SS(w zf%D+OgLmC^*By7S4edpa5o`2!7#~$Cm|AML_ zP0bYAp!B`0|&(3^OPG zuYUEb4?g%{WdYqDx812rTL1^3!ype6<9W*iw+pQN{Bt3R!_Xh!ie%lWq1i*c87n?1 zFEVst$Q4mrKtop}4uYw&MGYJ$d{2w-?M4%K#-_NbiY@(# zxEiu^p$8@W_+B6o>Cq1~E=1Zz0}QBz7Oy;BByIGB1iq1omzP(leLSroz^DiJ{1F!P zBMSxQPVr{H*+vQ~qh#Efn#rD7d_}~=5fezbwCT}W(hM^|(xA{rIljpTqLRGzpFDtb zTEzkuk)mZf=5tO3!9>_CGtjP@;4To_+(AHOBSneVR*2HEG+vEz=cAzlcp#7V;{Y+! za?gZ_?^xL2^Z3qMuR2IOJ5kcYh~bh|2m?rd-ZnWS72la(pG>| zfXyv*5cE0|0MCh5qB6s=CfU!bD33!k`b(K&2`y8?T1F(3(jh=L=8yOprtj)-$iuny}(U2e25vv?ZNa2;;3c$hrwuQ!=c95p11cM{RbdeQYS|3P_T>)A=r6xl+qiU-@{!g8v z^=;BgOC(`2ONx@q`4$H z3KWmV<`yzPdY(a%kuiosrv<8Nlp5`g-oge0EwNW*ydsSG$yKLe42tSZ)XLhGJVNo7 zN|mTG)lQ|+BH>W>wkE%-id2L?$uay~E}=osP!l69F#=5&9bTbC4Dj~@wVDCDxVe06`R+UKyzJ6TPdV*Wwr47BacSxBdx!71^N#cOpMT*67rylJ%g;am z!oT^_m#(}IKCg&2Z(=`pKauae#Y8%aIN zLY;1unY;RhLb^)ojG%{MMg!`|p;_XP?b`E$p*jY;Irk0m_-47rf0mWL#Wb-%hk}&p z<=TzqwN*~B#)Y<(mHvI)d2TH->bzkY5zKKsFlGAIbK!}3zsQpNkX4l85;X4z@Y)&d z^_6%rz2>yLKJ|zKzy|VhZ1ByoW4^B*&mQY|QQh zmO3s#39sTr3PRRN4tp|{#wfAtwQq~WRt?d5qeT*eJKct6Ny`A3km2&<0%1sJMv%ev zH=GzS?X%6y4tVnnz?OKm9ywWA zRG9-xd(UG;?j%+~zJu7BLI6?7yIQ&^2z+feyV-!_V z1RX)IUhzC^FzSM{i8Ihhh|Xz|dP{W7uPX!qFhS40GRHZ2m_&m>A_{cpy>N;88XTbp<8Orz+xe;u*T~YGjBdq+w25RJ7qt4a6T17(hw{DGq3B+&QC9 zD8oc|xkV4{G+KUIaeqV#5u$61aEY@eVj5Yc{LXI@3Mz9l1wyW5$m~mSCJBU<&9Sn+ zMN_1Jx;NqN0`P%D>}Ui9@YK;znT!@M&%lYuiM*P3!n?$3!=ucK%41!rVJLuX0pe`? zfl=@dl}Ky60V(cObn&Wt-LOmu3kC^YYH*Uw?p8!eM2Q|{bl3gcrGr8wl(Q$OC@!@N zK2$|kcbMZwgsAY7lrY0n#I_j;;FQ0V!eqAGK=}g-bxN7bXfU&RE+fsONLT=8e6;A$ z`1EA5KH;;D0d&DFc&O^PTTYOPpXt|^o|OqdX30D_F|!>_s{_6v+vDCMWHCAcQX!+; zd0~W94(7UjG9Mk}TB*qte+9b9P(^VPiXD;Ij~zSq-h1!eea}6A_jh04wr$%@AGry` z9Itom+;Q7&x6RMZ?cA|*@1DIm-WfamXPtfadFP$?gCG2m^Zlu(p1O7GRwAqe7+;uQ z*qkT9*Is+=(v~gX`ObIHPxp;C-gx%eXIEBMZoKivS6+GL@y8$MFzQzdZrq5@wS2zt zkw+eR;K2tDA3lsuj(xbwD3B@led=QbLk7xVo20{s8>V|q3m$hk?AeIoCllrghP-79 zfTdSc5Lc9Sp|%1_I&%O%`zz^{m>bY$SZx6?XiyvpUZfOR+q@qTq{Vqvhk2GKqqA#r z@T3R&wjBZxr}_a99b!`qfP^AaPDH>fi)p4KY<9~q3645?OW@;*p7;wKJ@J9Iqb5%i zgR7Ap-oDbK7yy65gwvl1JVuR6I<9W+TQ$)xtQeswN#m8C>!+f^n2MVIpS8%XsKsVHEZb0Rzrg&)l> zM?*7UMe^nf#vp54sL;h0O zdt+nR;vIGN4Gez%JE57`Br9%#a}UN1r|eeL;Ez5eOLoUw9mg_C3j={H`q$iCXyCM6 zgy90rpm!G{P6w@jIxCqp1Rb^v;;sVqx%#0?0-$DhAp#wyYzBq|ML0@Z08o1A0pKhG z+G}rdesCC#=}UJ5$ZJdZWlfekh9A_7X37NPDm7C{P=*kfX!xPqwG$?vDD`MnZRN=i ziGpXCKBG+dg@zA>A@z*@&;P=s~@c+gWK3k$Td z$9YD5cd}i_hr@?rfyRPLMdA+(ShWb~_a_eyfMiS!ASxW8I-_S$2*s%ilu}|D3g8f7 zK#ZTf8YxdA4sWh}=q5lApxHob3ORg38YecOlp^J+EN#^{{}|3FI*CgWi*z_)XQ+d+ zC5sv8>%C@UV6NN4459@AWfH8$2Dw-t*C3R(WdP{Xet=#*wC@#GT^KlJcZPd@SH zTW?*s|AJ3^@{_xF@1}6J@7QtPx#vFl#1nVj<=^~&;DHA?h@ZOelzsd5p`*TWtY@iz z_H&=vxpQada%s!r)6YDOp-V2ggr&88`}T9sJ@=`np1S?^+aG-J!N(qZj5~)j&N$<& zv(94ZzWeUG`R1EZ{?J1Yz4OjH7hG@wqX!Ngxbu!X@44rmzW?X5pZ)BaXP${d63yIB zkxB_9N-55Lx=oRFGfuzsrjE$RG(vY-uH)T+u4N&28p>m!$qg&WJ|R_hFP4Bbc7FkrKDB z8FQnc2sDOV4soNzSsW#tn`xr~nx|55eHao2FY#i|^B*|oBxO}bn{RVRLA3b*n~fBF z6!f^0Z$!ms&7l+jA<~suxnZ?L8})2j*qI^b?r!+%8xRCx>`$-P9RBiT+&nBU`U-&4 zzVSqGRncv_BHPN@h!jVVRUf%^i5mGP|MV>zI?fw@Qs@2%C*rsVC%YcMVP?LVRdayD zI-e7&Hq-{Yv>ctu3Hb0AJ(Nl2Y+bpyYcx8g50Iz1)1};;n2^vRa^i{)0u-7d=c9*K ze##PNx)7rWW*sIyAT<<-trPj%6eGB6TgqldxzUF@07C^yeh^NjYK9&L^B=NSl$qHL z)ecZywk*u|9sHhKb5f6&&`gdJ4n6K41tP!+$n!=9OSfyaWJSw4{RinLaee z_?&NG^Hv6yNR(55Aj1pSPzgTaa}pt>3$P6d9uR< zJ+ZR7-1^5G>zQfHeL6$tP>(R`D4Nslhwm#MKa(+_F{*T&aiEUTPHe!$0K!mxo@Jv2 zlpi(F)qwzAa9Z#pGV?Dyrj=MwWgzl|kvXx8wlN!n4{SkI#XyW^5~X0pTly&I^vW;i z=q)W4k%H)Mqqq!(c1r<|>64+gixjwpkyJx=3Ya`~4ysxJRR&Vo23{W~B5efi)*o=_ znxta$F$snyU=X!&M1Th(Eenr?HIxvC%oogLG6Y;9(0WgR6%q;CdepmpH!G56Qk8oDx-8u0h%!~St4*!+)*i0_Mp)A zT7XC=4m@HYx|;oesNv`kN^v&`vF2Jf?r@BTS6BT#@S_od6awM-oXCsjP|pHLp}6aP z1jWbHDIaxelP(*-7?YuXM+9dk=iLhQWXNY*=$upf5jDEmtwexUBc`B%l%dFkR|%k5 z8;y3xCx98Esfd*LusfX;pZx^w#{cx6{?mYN*s#31Le=_}(yo}3wrAT}1T)jzgG^T2 z)(=|1Cj)VG^~Cyn?;fO-eFn2(!{Yn`M~@v_w^4vd_~MIsQTE+;-#v2V$l{izxw-l6 zTemJQE^0Ecvf>vP=In)(wzyzHM2Zy>gG0I@E-$k|`-w)q9J6!i&>>n5S-8cqel5=| z*~pF^I|ehyLFaD_ilJGYp-F$~;2lCwPG$n#iZD9y)AEbH6PV>eDNSquoZt*`=B^U1 zb{&Fk7_FYFRl)mK3&gU~LZ37Pbn7ipIvTzINFF_AaRTtki=SqONJ7AkH=`J4w?ZvM zq|uf$t_i7TT5ysODUIVYN_ryfb)plrnr~~t3JCOt1s}LAFRyaNSz7SnJ+nrjEN+hb z(cqH|%;o(dz&s4T-Nk2l;)tMxTL5kY$ll!C0&XlXAKkijE2c3*FMoV$^XlpfYK`>7 zi6ci~*oL=;k*~~;pMJX6mxI#MkjRHn$NQ)BKybDK7;Y+pTPsS$a8W<+^NKQ@``C_ zBqk3z$tUYSkF`9r&ar!7k$tr#Mj$6Pt}o2_z9|x`oCm&j4=Jn~DujEvyte}&y#NR% z@PJ#1tTO9_4n$<}JyBR!WSCUr1jOox)0!bPzcPOg3t;R%n>Y50`~?^+YU*dBH!#bq z%ec+1={+Q49+`Y2zMQ$~qW&0V1XYOP2@0659xOPgQXU}=8)$ss$Gbsrh@;Uge1GXE zc|?jn3|Q{xO~uC>%iK)j5fx~i0M!6b+!5$DWCMx`@Mf=cxWTeMRW4BtdE->Xm5mg$ z#^_)IA~A$+H>Tk$Po!dWWB|bFuz~f$&ZK#_n_XA_e*DX&j3c@easDfd&IX<`^G$bn zQS17X$Komx7>_!nhUwnOy{+37MB<|1i0tbV22c$sud4|zvEZP3lNVVWWr316DifYH zCOXezz17bruk-yn*M7UtnO=;~Dlh`&OdiithT7K^~tbP(n_S-62K+eCkel0LoTG{ozbLMcPh? zS&1O}X@N@70x(oV#R0ky>C$F5aLF)7q=lrRwVW*{`SYe^=CBJ*g_&H#aYlU$nHA}c zqefwvwTu2KaJsV$rL>)e+0hA~G!&l@$`-8QxHLvKc2<1Hdi>J!NfiJ-bs3rkC}^wm z?Y4y*tS zr!dySV70kcMu3x6S}Fl%O+*~PmQ1QR!LoAcxZ(Q*5P*~72AWdVyZYP|s0`J*OT?C% zbM>#eQj`vq2-3D)Vgzr-2IhR7l*GJ$wfqcgb1WfG_Q?9?CH;gB)X6F8<9X@_GHX{W zaN;(-N@cW72!n~zf%4Q75TeFsu2E1tC?kb323sD!tetlg;aKJaTB>bO4yYt_z#L+T zV3Y9D)y(W$ydO*;wCpGBaiuB3d57yeL6roXs)zUlv^6O3sjZbuFS$_G!26!rqZy?Y zHuvN1JY~FQKqeeulrBgq<)@t`CTrp(Zrj$a+qZ4ovTZ9zYL0RI$fgPN0Rx=u$Q-R; z*s*>4mZc@SRaj5#COn8j{`fW}$i|%nV$!TJvaqnYxWuV`u`bcV182V~2Vkg40ie@` z2o7`82TogCrPBqb=s*CFLitN6|0LBRI<|Rs(y{6RMXItnKzo^XU8U|J4&pODfRk8@ zI~15{C(}hbRDfX^l{(NlNn%yLXofnOXjbW>wHa7iTq;p{PaA$!OKkzV6BE!$BMg-q zmBh+e7^O`5;b-kaS>R@G02Knk>pU7b9DDd>K_Zv0P8dE;>O*w5d9Lxer*a^-1j@sl z2ZD4|i3X|uE+T-U3O9QuK-KcG6|U&k)$pcs)DHe*h5aE{TN2`NaAjq9M@l|ls};%# zUhW^z1_MWJGK2yU&KdA zO+(i_Tdi}>03k(wrZ=Z0wBwNo)8rI*hGSO6Q!@aTiU4FOzfG*R#jD;3XTuYnc z&%2@U0gO>})x>24Y3g%_YI3YOgz5fssp5j!J<#+_sd0eEej-?2eZraev9|lnnd(AZux9#i&S~ zq|5|CnM@UUA)j(Z@uC@kf+}wp&6xSNja}cq?~!ll(jz)kK}Q}pDWTm&N_5c5FDX#x zHA*2lY98Pi>}5FoUO3&)tx~2VcB3ri>d{*^?u}Pg&1V((5z%-XKfrO4w#zmZ!~ptm z-anKfn-NhG7JTxCedirD2-e%G@)jaNsz_f49@SBYM=K-8S# z9L$Z^9gu=5MtZvw5vbrSrI2YFhWHHymLUZH7in&>@A2rQib`$Vbi9kM_q|y%fZUmd zDXtPb+Ac%onWZ<<63bRPEtHDPQYNTtYr{iNhfoDOEj=XoDd(&>Z8tP!MqsqiBo`*0 zD4e=FobHhJ(3J&eCdk+#q$Pzgk<+#>HxsV_b`k6ru;AyF|R$fgfN-&5?^jbg)$+<;GX09uxn-YRQhA|vo zYub$r=G+MYX!EX5lj967EiLwZK$n7Ilo470CvhkDiM|~lwlc@7;hdK$KAzVNP)Pj{ zQls+OKg?04$o z4p}WDe52 zSE7UdI2EKzP%bkVbO=1%XdS9ZRW^BvAl9@`rOB0k0*Oz4w<3osj66D_jW!U2!J6{f9ys%2yNs9q-Z}t{FmJV)@d0+s;VYvMa5z(AvNhp zzdnU&f%v|Z(iWiL&s}AK(zO zPHL_`kSB$alAy>q#g2t#7#%{+9ui=Kg{_>l@ZeVQ5(fkN?ktN;k%o;y+N?7>{h1~r z!UA}^v|Tb~uP2i~z(j#FJOd6C;XnGpfk-&H$Ne0dwoMH?{wRyTBFPjs`3*CITxU^* z6R1Q&e|)kt_)J=$v|B^U&SVCtH>_uVN;hhlVmdCZudS?h=TTrx3qbs^VWrF^g2&Vl z6u&xKFhHC*8&N3^kAe^xAC(Phgv0GGN?@BrfL0wXuIg=O1j@Yc^7ZU7!QfC~^G3&N z4|QJsa_y&DwLe;dfp(%4DRBZQ1v`v0g_#3q(ODLxxV!j-$=XY>zK$HN@{SSP4^ALy zN%4>xdMZ5$x!geX`?>s30)pD=*q~%M(lt`L#c3x_x&YmZFuO&7(e9vawvA)%dZknw zU2xjYL)BW6c_V}(PNn<+h@p186G`l=@cU%E}5T1S{1C zbI_Wx^*%WEXsd+BM*sv_pq0J0wgRzu=@Hi!YTZ0?BZo_6pk-+DW{*3eXow#zomgwZ z3P44jU;jzdd@*C+iL} z>X-Szi37fChc&2CPoG$U&ejGe`25^vZVgHgMQu35Pqt5=w02A4RE?h6qak)5!sR6n zye57}fozmIF?CFS6qs&DLz(7jt5&4fBb&a&M-Lu|_!z2`GeLD>k}=3c`JYG^5Y4|#MYj{puMKMcVjrBE))4}*%D z0oZ8K7ecdZN0$`I_ZML}OVazis zY*8%KTXVp5E*DYOgXYxB0$yjKz(t?hbnh60W1saTlS?qPo&aI+WvS}KT-Gqd5IL{n z^<1hH1k+*gt1xlaR4ZJXg{3L44mpAP|0J^oDbXbe-Fw%YcLXx~!kH@iq{cJ{K zT(pHjT@1A?lzH+YEbjwG8F4VNv>qrdO}mZ;ab>+Mvij6&p;%J5>TWfZRTKfvg4(!$ zcFzLTkRdSI`g2lqe50V7eV}w0Xv>dRAQ*5MHTkU*`RKkK_&L2OnqYH+0wN`Al=?%x zlrA~4ADFLkG}RKIi!&1g{KJr8(F{T9@Ob@o5a@xhmIGQn!7Te>egBOQg4s71sBD!V z=b|~{%sOM>Iu_4CU|t(f`GDpoD09A)oS|kC3oUD8flUi@J$hxmI_g-W;6&qw7t^$Q zI06(7D(t=0Oi7m>QKyCNS5tx7r5!6U~@*!UrUDcC~aN!W$^2ipL@L7Zw*(yXZh*~NuF+3`b6u&L`OzothbU8;NMMm!YgfkO{hy9Uf(Ak+Lji04wF3B7z4TBEYUwKcRz6-hy)c0043I$4i!Oss(uxd0q@=6*H$*cnqZaYZ34QpIUfQsI?T<@`Cb>C zWi?fyB|A(|Cpwkn55VPKRRH1uY%8m)In&E?^yo20;OjGTwBao5u%SFpr4`mEi*r!Y zOs=d9LwF545y-3Oy-ku+!wITZV9xb`HSY;SZYM--5y^d;yR&17j?5Sr2zfK)jkaha zyOl~C@pzXD<6QMlYU$<%K-K(k;3mMr@I)jD!vwr`W5Af>Gk`P2`{&`%3`Kh}0iAud zUvJ{5s7Y8q?gy8Z50q1SGJH~8Q*M#Nq&e4ec7EZhlDGlV z7dcRpFPr!FBR>qu;BxnkPlK7fhttU;7@Qd{kmyrCwrN#9liQ}HL*M{-8Jbc69B!Hp z(Mk!x)2IhdZ(N)L^w5@h&@d{5h=X*&VWWj!q%FW`6@b(zLme$%aoU19$8If_zjOr5 z`EgIlEKx7k;bjOIHUY(5Wiwg@#Yg2J#cAncsJ1#v9?C-tOmx~wYNCWi#L5|!INLLk z!axAJE2pxUlQ^^V&^b*LP;`C2#*^d%s}a-6fd3bNe2L*655?a0NJv6)^ul~i2@+PU&gfl zf|7MJTu%|9t)Xc`0mLgSe-gzgP&zFmM$a$VddvC$!~h)Bwbe#*P493fC+Ips)$yj`rhf=W$kKSRkXhDZ>!i zf67_wYq`YG7N1PV9~T`slssb`$}$`9ko=k`QiUC&orX{gGQs=5&pw}Pg$X&3p|nTm zI88GN%)b8RPw##sFfGbo;} zvgBnVwq7M>6rIzg0^Mjj3V^o@PfHDeG9e80rKmzD1bUt&xPV|o5OKS2h;HVGT%ee=Me*?wwdanZNCup+7i3cfM!_qFG(u3WYO zAHC)zQgPHEwRv;?ELtw@q5DcV0M1#a50J(EQ#(EpXG!{eGc^g0nlR`y8se1=r)Jz> z!E%OyJ_UsX>}m4ka+ou&f-bHcVbDe(jwXk?mcO`!ymZaYt*-iq>$R&1k75A&2TwSS zjq9HwmUI%8K0bgjzqy4V5S9qr1@zdODrb{ll6b-|f}~3_X))pMlMncN?2qSaPT3$> zA7rjM^$exr$89r}VLaZ?q*f|y;J%um@9y}?PQVjSt^ok7VkmXybqod619}p81@(bp zKoRvr>!?_ME7&OpxEu77z|4gqI6WFqPAh_Pw56f|a|b}pXgued(No&S4VK1?U~y|N z@xob({>_xV^f;{MFlb{an9zq^UhiW;db_lpL9BUdvq-xvwK_*q|;{!+;KWSVxrAp$;z!W8~Z<=ei!(r0~O< z1ji1edepKR1O=32b{Yh~pje-}A;0PdzZ?fhrN2sGeS{VhGt)7Q#tH!{9!echBy8pM zTGzxzEj(WIeI+V^KueW1c@b@f<686#lt6hVPLMJT6r-mz_<)q42>~AYbA%1S>oA*v zh)>X9&}2P9j@Er(RF0vn#K9TE8z~b5(B&`@CxoG?i`2<3|E;Ehxn*Myv&_yDPRCf|hX* z11rY4H{p;IX0{qNXQPv8oJ2`8-Qoz-C5nOB*^Se!u1;5URisN*B>XB3_yrEh6;u}4 zrpynhwTnRp5aS1h zK(}iH2vq;%;q073uPx{k4uGR1%A_;Lc_C;383@6vlKa5G6F?`Ma6FZ*R;K(zY&(FS z#U%uCLsGV?0-6j2COSd{z^^{V2cQEWQ(O@okV$7pXTKZg{hy%C7LPXoP2cJ&9=%!f zUhr5IRitkS-M}a?1dDY>|KpdrOMTkP(NZd8lxtstN?ubFg-75c5 z$95x5i*MyG5oi|xujj>qiU5g8!FB>hMHmMEJE;(&UylcF6JPc=UJ;_nVYwe(UWd+B$XMiDx z(T&GBY2!=Q0;j8mRsZ(cx~KKwsOK3SgbYzZ(^hS{AQob8)R=N=ou z?gEB1q|5tkS2$`maHGIJ=s6OX`hi_E!2pg|iYO(5pZ)qB>NaN-b`$2r@BtWf19SPl zKSmex&6_A;lrAmnofVaph=7kMk|>?`zQuX;%apRQsuCxWj{^JY%LZc7>^Z~~jK^XQC3T@IRXwB4At%bj8K2_lV|Q4mUUM7$ zL^T28n7(C43SALeh=`yC7KF9qD;R!Z=on_`5qGvRKRh*nt`gKVjWTe_C(ofaT7I+6 z>LpV6ky(2mAXtAUfU`vDQ40`-zeeVo1Mf{5BySWFQFRSbhufL$0#EFa>qaLIj)tF8 zuR_5$qZbvu74gx0SEw_fVSYE;X3tMQyD#BXt^&S%?|UGeW{={i<)?9Z!xy{}^%d%R zYf3lvMiIvuGzx8M(kF0|Qe&zccLo^D_Bb5~QaDC!O$`&7|1b||_|mbw(v2{n;iSkq z3`IfvdLqMUH~zy}&)I4iidjK6Zf^BG;4zofWY*F~$%&2L2}9C5f3t)~4a2hPAS<^- z*bsNB^Qiy;2jG!yyr<(o3_g_3{CjyQYXEk(xhQt-{FTunK;ban(sTY9jCO}28QQQ@Ii-x7UNV50+>`F*8*6ON)m?2QYrwh z=e_2bQEVVI0QzXF!O?6@AOIBb(#uvKKnmpnpmQOR&F{r>MDFM)3)0nqllC)MU>9~u-Z=8<-6bRcmNfW3%Kw78^m&0%fV6Zs~ zGS&qAAeDNbiSTt4q}_7P5`p4Vw@?b4r5CAq8GsLTVKR5nQF82x1Jbp!wAG%;(Hm$BM!)fv4-8i~-Leub2n;hEl84b9x#+hZ!7y1cA4apKt zudMi$o!%#$*y!Cz&WH>lI6vPni1d%hq8TCp;+xuiJBQ!LM-)WoBy954s@|P9pLqqq zym&saG#D9bgHbvbi(e>i4&y^_Mdb6bv2$dC(17!h=@L|*_~yB?(L#xY6*6f?1OQoE zU-xB>d~Ik(V4GXdsSs~-Ie_XqkJi2tV)!oYF3Eg87(PblHq9|B-2HIRg&|F366MMl z*N|t3D#~c2j<+a5j6K`USDE3UqxGoSg3vr+(iqJw-Afu&Y0q2WLoapJ2HMw(Mq087bDFC=T za<6BZpbXigjbA7Eu>?*J%_Gulw_kh_5gG6l$K?*7APT8tsBoBnG*H9XZI*ft(3bBC z9daH83M!je3Z*8*Vc2~cVtryDc-f$UbO%sC;CyMZam?Vb3(0U&nR?(p=1j$zoEjp8 zBF2~_m6O%DG0y3*h-4dK#4QI#RiS3`<6yRB{WSGi{<&8aub#{b7Av-vl&lM)kS&mI=fX7$Lh-|l<9IzW07!%rW|J276n55=+>9VV zg@Z9lIk{07TGt&-)zZqF=OF4I9+Vh~N@>-uAUHfVH<>O1lvqy+Q--IZ`b;Yx!AZ0C zGh@68co^h1*w+da$1x}QWU#c977JZ!ePv@IQ03jSlp0;dlfh_{lhFWU9+{W{95@0O^e*>dt7D)=*8Tchp=D>lL7ey5WwI-)^co5-0G=!c!6W<%v{A zq)hYzIPkBZ?0xTnu2&2@Af*7K3U}+&h`$Pq#$Pi>*U1^ZchW%UW+v$7qZ5vXX>=<3 zFh@Jx?bVHPmI72+k{%}m&`0EhF$3*pe6%~lG&;eoQHShFA`bUK3Q{AA=IP^lP zm1(Fr#L@wfNi7K7X-2@IPYlseZ63Bp#avPRszEx03@1=qaMTD2IT3Pwfgu_ghhezv z!Gvx&8R!LRv!A4@MNX*XT+Pe?M2_*CnBj?q&1>uZ!uvT+*trL2B~$cVFP+?C;k^8i;S% zKe2plbzrvfY0 zSl0Wk%=}k_Q^t^?F$M1G817k(tBV`Bf=)-h>|f+Q?per1gE(Uc&8wAb`9PoNNUj)|B0 z;4NtQJrvR+?;BZMwK-gxoV;4ayys6umDx$5HnIuOg`P6E-rAzA%w;Ih1)u|^z}!sf zUKse#kGQj89_VCZ^%$o}8sfMeB``{6e0n$kLEAYle61%Lux=CPgyhQJwW7dXi*V(GOkC|D~Y;^hR! z4O<5${gXBjw9z6`wRVk*p>9n=7|Vc7*91S10@^C#_UKq6MHY)b46-Wnj7i-QXBwgK zJF0Ms0#k{U#2Z^|TSgQ%8h2)kDKHxdGPIb*6;=&BsK%>Zt!tQ^WD|u=nFg+KWG7YW zRzFKdO9NdVb*5Vn%M8r04Ush#5LP+B#s96X86jKku!gH1~R81g5@ zkr)|D{*!QP5)X8OAr?3xc;A8=T=Qa5SN*#;^0^_qC35%T`cJmQAk`e+Yf0%%HrTnc>49uW?{dZEo$ z5~-7diAsi%J|O^j#l>AmvbBpi+Yl#_FscU%P^3h_3qt^UhuTg`iUT5<+fowIu(}Xu zR>8~ZY~~aTy%eB$`H_T$U5^V(wUv3$+=JcB?gpK?fL}!oc2tEwtNCjzFwpHz%4nI( zDO)lCyw3^;Wd_D_fs)=31#A;1h~DN6#49T+5U~gjofaIVN^*=|u1H-@pD2t0Q`1jtqh%9YcQ~BGZ0lSpSJ^YSZQFk6&|x%SJ(@i&qlD8cv2fzwvSsn;@-hd@`8mIJ9#?WVqV?tF z)x(F6VugKiZIxvE-TX0UKFPZ8Q1=hA67MDsA)Dv0q7S&Yw8Zk6TUl9SZiszp5uZ`J zabaO@W%c;_>N;_-HRLg)`6inv!%yNO+gyg{bM8kQ=J1okVzVW+*gd|^wfXqA?ORwz zYvv{I&|pu==L_fN7MRO5zpLl?!ot!j=8m6OoX>Y#aWYsvHb1{`e0Ucxatknc^x&2x zIoX_V+Bwcnv%1O|XyfL2|K`+*RX@nUjZj(3dgKYN2`%ZqzslVg49*C4F!e>;vpVqyrZPQ)fEOyl#Bt0 zLvMjWuOI;8Tg-=IMy)kZ$SroghlI)1UJ%mS81w zhckEIbN9m!J^b#w?;bmLZ0pvo*Is+==RWs2Jk{Y1RM)1LUV8a&|MqX*JM=Eqyt2Bo zd6Qr7bndz5e&GvW*u85n`f=v91F!$>*Z$`9H(uMZeb@5JGPOh*i(61uBQlXa0p3Uih1@{mnb?yyc?H z2fnYk;)>6I;WO-D9&h}s?MEMb^s$?7`5`_-WI8~0?cVjJFMaXii!a9O)Q*{Df8)IV zo$q|-#TQ>(T3kB)^fN#GnNRN7!^PflruUVXU;WcR{gc(T)eH9TKYHv~CTPQ%XP)_q zPkem$&OMfdw{RPuc;=~Fe)OZ)54`^Rfj4&T+Wt$w{N>9oyPR6cWb^gOrE}loH!QnQ+=NsCuYydMNj#+#&RU)DZRSSFDYfbttoKkurlI zTd9Akr^MRw;u1V;YJixTg>wkg^42-JoR3H6nHcK4x!M@bK3!6I&aQ^pbsc$=^DMD!5NAgX zS@(x$VP!@w3wjUbtPZ36mjeoULB5V%vE3zy)_^YRa zN`CcuQv+Vma*GzP2346RJ2I%>42*^*{kRL4cPT@BgG-M4 zaKRKQo8vK~w37yabiq?x3(;TA6LQJL7tj_y_z7C9p==QLR&=N*VT0d;iE%;=;9-1( z5D#d*D0qnVwnomx1B|iIx7HczXgCIOVML%b@007eR0J4_`SAuzI$rmwN$`_UW}x(T zQ&mDKK=F2`cH#jHs#r$p!XaBZJ1}aV#BsY51{*w6?i7zvho*!_szc#Ye;L}+?F74B zls?K%3^fN-7HI0Ery`*Y-GE9)3T>ej)=ZUvS91mhh%6hB>S@X08zX-6ljm}yfLIN* z<*zf4*%P_CgJ)${p;up&xB$!mf)J)aHgOGIUG<^}t{&#zhrwE57*-B~`Qxu#S3GZF zKQ8qgX6m>N0gulcSgk1LaB$B(_uO&E9e3V&=UsQ*`OGuVyz|bx`}Xb4E74e?4t*a> zGGS18q^CI!>qI{?=rfu*Mrd*4rnldI=O6yz?_YlD#SdM22^34mBybnBnP9ljFj7z0 zR1sM{{>USb;J}SH-iR5XR(#Jl=gWNYCBX6`ua7+Z&`U49fHOOG>|~TY;S3fIz4zYB zFTKq9fV-VM?QW`zmRCP@*jF&-AAR)kyYISZ z=dPWn?AzzWS8Y!Bt5;fH*Z-Aj~%ioK@8}*JDGN#1Uv)J&elbs8%8s z{TY>xY3AD;2=F)>93I;u`G=||!c#)D`LK$r=sgJ9a@Oe(vUyV(3T4#1^ubS{Jn%Qt zZkoMuV%7c8AAR+}>j$_Ke(9x`?!M>89P}@{^rEH3MPCo|LD1&gZomDjU;XNlBZqhH z-1**n2U)2vzx>Mn^UvG4a|bE$q~OLl$Ia(IeBuu-Rq`% z#pWYNkNvm5`m397zIop%r(ARGwde2Ozr3>YgCG9z^#cbkyzl}R4#h}7+!g%uKmYS* zKJ)3%f8lc%4RGP*mtW2i856{{xU}@d<4=6&JOBLAkKOd|e)G34y6~bKZoK}=E3drd zl1olI?eygB_|oFm2OoU!_SMn=5yCyfBnIO@7;3CkG5^wa^;nmXFuHd?z``O?Q36S zv48G!pZ&~dK70Lj*PnXosdwCd2eLQZa3hro8>wDgSbXg9NB{GG{?G5c^UjAq{Nc}k z{tMS#d)@YJ+q1_yo2>O`pMCDpM<4mcU;N51{KC(3|8U)P*WGaa^%q`vAvb%OA}5}7 zz4*e52M)Y`&DGb}DJDjlF( z@#+L-iQr5MUA0FEY{luMR0mM9QkFw1Hc-4n<)O>&k-HgOoMv-NU6b}Qx(Zx^vXZ09obn9cJKikQxF?S96e3B4tZ=Y9}PwkO6?g9^w8_!8~qf4MP#hbqJ)KC}?)T z(^ZMs%wtOA5uS#c9B^N>89w4QxuGN|`^#`?iJ=M>Pm3G2K1!F%T?-_G9ulHVF7)n94+$ef1kuR?M=1(0mo+m`NrOr1xz7>t8;v2q-=;2 z&%V98+XX&&vX?ai0LtQtfR_2;@`i(W);Z&!bA}*+w~iy1G#H5z9s$5-0Bw#0CJF!_ z?Q9rD%GNfF(us~Rx!i}I3`Ve{6GA(ig^5R{F){{rJ5 zP+sDMOf76hW=#Xop>#$k<_V@QzsgJt%uYOQiWW=;00ZlJH}g0<0~_sRUAANiRaDh% z-2fc|p&d*FK;TC+L}yv>8C&ZTI-^y>K$W052Qq6H6dfQ@;*k$JJRGAz)^h#^MmMm_ z8s-*%ZE0x%#Y%N)`PTXVbyyckPNmwyCzSN%Z;Y(3uX0#lUpuk7wjyV~9ERoj&;R@_ zF4A~)?z!hKEiJzJ)*H9qe&=(~J$KPX7i^wiICSu6H213GwBpa&8uu*6R8;Uoin?8>dhLk~Ul(T{$VWXYY2 zQ*zAwB4U;{ZC-fg<=4LY)&KpLn{R&Qm6xu(`s#%R-^{?!mMu$9J^A#X{PCac-Mi=9 zbI-xndLHI2a4c4n`Ya6&zkV{1$sk2+G7f;o;Xh2wi~D!Uu2|_|^TAL?|*03T0-^pmbPunJ*pa zl|s-;nZe_vvaxnJou;o zQJ0Y&D ztgs!i&-~LreUrP0pZmF=V+-N{y=TwfM;>|f=&{3}_^F>_XQ2G%=NHJ&M?UKK+SLd~Emb-RzlOmz_zbl&LiMc)y9!%P+g^^2@Jy?X?5XKlj`fS6*`Z z>1S9H*(b`=Nt`B^Vwk!NS)jp(k{~6RJw! z!ZCOXtg>zkQG;pMa=S(38Fzt-0FH(qdRvISBDV{4M=g|IyL2bPsXO7ohzwl-3Ndus zq&QkpwxediX<#nGpUnGcT=tsFe{gb(pXINkjwtMHiS%(o8}-o5vAa$~iTXv00m z2LK*qn>_W?*HQ-oD3I0Pw;sq33u}Y|$b}$PG3aSRP@*2M?wW3lVu4{)ulj^h5xqb8 zU|JsimwhP65=#d!+fF)0C z5|EHk8WaKP&Lt!S1VjPprMtU!zsp~K?6dFk-gD2HnKR?N9f`5Vi(rDB?NY>RU5`8O zI3}W%P~Sj0ixw-pA22oeA(y-yEj}kdUb9r|pT-a6_bGAMGXK4P^`MQ6pCIHwF_@lD z9Ny=nWHO>|p&(MKVoe{0dz3Rme9B6Y+l+wgUXNAC+wy(ffZLum+P+>yW^*ErbCvdY z@EN12g*n}PGNMmYZsW&YMv99yInWRbW2z)a|IT|6<74lMS@T_Uz}#+G5HTC+u~UjBLhO4kpCuL3LSm`F8$^36A>UUTS-}IVg1y zwD&mV8r}4!Z{pz!40vGV^RKRfobE$l_YnB~yMPwwm4u!48a8Y--`0^d`Dmd#k2OBZ zD#`D$SXhbT5~KHCLOKsKt{_9>@rK#)uA!-k}Ti)AaCXVn*Xf47s( z$wMRRHcHOcPgxk|qV7Ax1nhhIp{voPko&x2k3xl)cc^UvTqQ}f z@L)88WEmUYA*-bM-%O+W92ycLC36chKBsFnt5}}&XDJm><1KcR?KxGsJeY`K4tl$95i4*!L3l)r@5%MU_uT6q-%8e7` zwpIU0x`uY3w>ZtU2jAnmabpIXo7-c4Fx|2G5AnH%!}(XxVdm8@5-_!Tv<^Wtfi=YX z&hL_qggO7?u1HtNA!?!#5L0qbsp!4IYu=vD&mzDYD=%}awHNCX;VLzgqpC847uLp&s9+t zzVCZM;Mk}eqhR-TgrX3OlMDN|_g7n8z4Lm1PjS&wj4GeKbKH2}Wq-_8v@O62JDTIsqLyI<6L zGGVHtG&b?y+GR+g5^Hw6K8n6=t1@bVGN7j#xpdzST`%A7tf#mON!*X|WRj4Y=NA+N z9@GuBo`haC6l^}2zmJK-@_e1*>9)22_W3T3L}Fb#E@NrBPwxP}wcUN1vLbw++b}MC z{(icNk9`3U3VW|oM1y{Q$+{VX{WvXAP!qkp;5qKP-kP(``?-YR8HQIw=56PPy6jJ7ih%@i;68PK90~U!2 zn(s(}U-azXI!E_SU(>Ad&$`WpmD_FG`~X~1-{bkV+Q}B?U2bZ~{kRCQ$6NtsdAAQ( z6C7-8N6THGAJWf#@wx-yk$4Al9a#%03N*nF;rB-p;2HA94(^v|mYydqF|Sr9FYhH3 zNZ?ALUBtHW?4(w6%;5yEz81_o#W#v_!`0E#VPadd_N}w6Un;+mqFq13^Qn7|$0bMn zV&t$`MJI#7nYPzh>K|&)b2TH28cnZW1{=eWn)_Sx(P_hpjs=Zli)jq3`E@L%7@FPo zaI$%IwfsF5x0Q8Sf#Y6IHZJ!m`r6eXf}DUpxM&fy85Q@+!4|PSFs|~~gl>@%j+Mwvs%L zse}V2j9b88VZhILW48=?%kcK@$<}ypp1W?F{9)>DWD8)FG#s5fxnMICd#R@DZVOl# zn?62Fgq{{-u?NL}xtU@C^>KWw?G`XY0zxs0=3(BUW1S!NA$Ol4bM4*>3=+4`T&$m^ z+IQb(8Z8Iy;~WV9N7P*!Fw6&EuMC~p8oPCynp~~RpPwg!UQ~br$v)uVbm*w{@d`A& zCq0hnKDF)#^8@~rMuWR$MKh)Wo0~K%o_G~UflwHLf$lA7?*9RJR!M?RrFKZI2NFD# zyl~ul3C8&l*exlI{|0!k+x+)uzL-8vn{I8x$1lc(1&#yRIMo7OtFabNz)g8F8>JqKLKVt&VqX!^)~V*NU~&gz~V=Y*!A- zC;W4r|8xH8XNXJd_42Fs>r4yLa5`&t?xctg{nw}K6dcCHMXv@qD$-t>n(a9>6lN)$~L~El={*~r450}%#RLzvs7Erz!IajY8M2uH~$mc zsKpe5;of!df3aflZr4!{W9Pyra;FRPi~Xuggyk-R3e z3sx%q?B6Wzoh0K;P41f(Vt$P_qGIo1P?J_yPKf5&G@P=MD8+c_X`k%6W05}Ax4iV<8b&!3=?Uf;OomM}j2CJ;;muU#>Uy+vm&#jMdQl4(aEENt8Nj z2^r!q(-lu~yHbcM*D2LXm{_j`^TtYK<;^Mjc!&DgZ3HISvE>kCzgE>^b8*X}Okqpf zZf`=z&9SQa;GZ<}r1{6+(=yeZ>B+cBnDGj1ceqc+yq%z+IHSram-KM0vMruDqZL+Y zPZ~;P`XCk*)?%JI~Vne`oXH!S4EL zmLq&gLwD$MUt4{JgU`5`H-%p&a&)!&1U+u*nZSOhxR_HJKNR7uLcxW3LK=FSwLdf) za?(Y!c)uR_1jIZgP~0aw|HzLm`Fm8$nWKx|}}ptSw#VefEt$n;X9u(`!pv!x42_ztm;f>Hh6*tzMOrXw20NV?dhh%%D{H9Cc8zO8;Q%f*_o2vJcM@wk z%=1lN4A{S(SP7k(o_*KR*?ITxm71G)_il+m$o}V*&TCj8crS|XX@Yj1JZ76Mhsw*2 z`sozj914F_#rLfUs5hc5{)l(Jkn1iG8gc|6-_T>Il;1K4 z5qSbTKz}W||GnX?8HQuj?6f}kRMUmLcJM!ukdQKM#nJ@tfbqaX_YD`X{_5akf5B77v`&7q05Olr8A1~@kQF3^I-%kF(LXun^?{Ky;ug+@^gHJ;~Rg|X>VGsI73sV zNfWY3GsC@JGb+&l;vXJ1qPeWkU5ax#(- z1y!&-Z{gGFU834S(;5+xXbNNq8hFMG3&ej1q&+^nGATB_&$6FdL9a9++u)$nu} z7hgp_3+MiBi;6r@ROyKQ9c1IMR50M4tdvTA609th^zD%+yTpF;7BSX0-?9Li;*)&T++5%k$bGD!Y@IH4wZ-HE@wJcwiz;9^a_XV)sg6@O*QBZO} zgHq`M2K1Ga)qMfi<+B@0wH05um~DaQ76g6`Id7W?Ia*U@UsD49w#UOxml%feb`_Sci)`WTk-41dCK7Nh21VtqKpe&izc(GiCu2&gOr`0Y9UjO zmB(o`;}NQ*4e|XO&PPcCcpwSrdR+7|VXzAN4^0-_63_ zadF@|A$4*RI0S(|(i|>yZ0bl%oJq|tY z=dTIjXl{oAM{}}cnG$l`vC^?N!V-D}tZAEOms>6GO^_tc-)nJnZLGag(9I9t z8bGJ#3~;5TK82NI$8Mp-67z4m1Vs+u&x8>teobcyz@y~-yq{rv=% zn!BC<1X8bDANnOEg*G#^o;dwLfcX0R--0$dy5Mn+V;R`*zbb2c3;eF$QEW` zX6?^cUy;*9VrA2oMLBEi5IGvwp+;_&W6wl}^}e?|=Fb;|a`s;@TqfxlLYG zf8JqNF9Q+l(oV-A+c}P-psLrJE&D(0UCjqG_|K5zgM0~6K8LbMh z_e9i5<%|?rB$1>{)z9aO?;`CD_5QO8b`8#5J;6LeW^hr&V6Dc*RR3b2E7h$CbZLhl zVsUun>G{9K{mf6G@m*>0KYkvchP%Lu_Rhx;_3^);8ccT$TBlgKUA_)EoDDgQajY3& zDRiYSv6JxnjcR%~HR1mGS47w99iAum6VMlEb6deub3w!rat6BrR-g9+9IyjhiTfPK znzkztoX~Mnj0I*`o8+6P)P(8Hz}&QR9+2P?176czFed>M@kf-m`g z)HgO>0IoXdvNCkI>sRPQ3Y>HXHY9#^3K+~ZiukgEkQmf8(bBEl$%p^m1BYW6{3a4^ z>F$1d9Rl~gKDu0RA~QBN2z)qYID){t*_4$b*MX4x)RZ9N*a_kD?{QN~%5u-NBrfZK`5;j)48Y%kKnG(Qe5nJ@6X<6o{)@@VZ2o%GD3`}cfNm0; zwD1wn*kk#2`_Q+@YG6}%Ey`yQ>kljGFsF0c{98f}+m6dlP3-?}P&T7>J|>%Hla=8a z$m*Xae0}4nI`jv1^mIgIi^Rv=1MORdrd^^Wiam=KNYBHKkY*$n4NR6=Rc4gVxfhfy z{hU_JD~vY4rI(GZF>flwh3bf(e-n0~jjJGp{JZ#obvQ@EZN8l18m%)IL8(&YMM7|V zIGuN(PrWqRdtF<89m~|J7}1e-aS;Pl!QN3JEFx4X>ymd2!49HPqAHFVjW`V0%i29N ziVSEVYA}3Ah)&MV(kv#t*`Kyb1Gi>qey&K`_>(tbP^04d<*-(eYQ7VjS=4bZp;WG# z_cucs13~v8vZSekx-q*5$zC`s2ZKa7_I-tuIYL4s6)y@j_fh;_>T4Lw>56@6htTmB zcFH~#dJ%BDsO}ZF{UY)eA&Z~LdYOuu>+PDf)u->cKV)J=`==fBtMClp3zM1dV=ra< z(PT{3I$9I{o#f>m#M69?<|bw`DIJq@6ChU)6(dgRlO~HbV^9xt(jk%9B{{tiCf-qs zOHNlG`Kz1RJpVQ~x~Yk8-%tL(i4*MbhJ%NnXl2Nj;?{}jT6)JetPu#-$UW|1%}Y$) zLh^quRcQJOZHE^ya9{uI_T|B%i8;$ye!0aVTeE_&k3RQWlP=Z& z5yWaWPIDvyG8~EKAdCbQ2};&ZbFvlspjA0i*!c0oc+KOyYi=kEW}6>!75ZojhlHM> zn+ER`#m0rY{8=11n@Nx@WiEkH>++pcMk6pI_OGTJUFqqz#PlRh^P`t3XZKt428VIs%GU zG`ICa@?d|9mS>fMUlpV=9kEcW+yW%#{*T0YH0a3g@kCE(S2=1nsP@LRlPy$c_v#B? z6_1)nzuf;JQv9*=-m-sWQ%D z)u!ce(r4ep#o&J6QtiH#1AM4V4d>4W3Le)$&;dwha)sPqi9~_g;0q8bBT~}eNRru=ORrRPOpr%jIraN@R*oCCItqgTMr;|LhW3!4&EZrTWuweV8v59_ zop8)#7I-{j6RyZ$iwh&bRz4jsTRGv;ampy^zh7 zyPTx~xy6wYzN?9#tv|$9vEp7D2@Wo!nQY(!RjcF82U&al3d#6*!T@_)1G0*9U~am) z)<@DvNPPVOJl=6^H*E6*du=Pq>E0Q?GhA%)#T&BY4LZ{*xI2lJ2-;rq6+0c%`Ywrk z?Yj~zzy-b$oDiF``&o__%=KZ=we#U@H21Gj7sB24w&0A!wQcBCnNbVdV=VmSo^@u6 zhy{THYk93lXgfF3fUv%{wHAbJfrQmVK$D7sLE$s?^8ip>^W3*~-`CT9!$kp5SS~2B zK+(JsaJ>{s+^N$eS}OOFn!Dwok_k5wsWuVHYEmd-_N?=q?_x+JPD>#5nHL2XbUt4L zb*Un;$iPfdICquF_Se*!W3$*cVzgak8~&?^@2|8e87-!5P@lg}#=~VsLCq%SR`o63 z7sp|VGqpF@!s80q(<&XiOMO#P5g%;@f!83h1zi2Aq zyzqSI7eNtr%F!}vJ{8OYNc(>LIV^Mvr79UjhdEW32opW{s+5i`7jK$N5Hg;{+_FI9 z1GM5WFy@*Oru2(j>!zuHNe=O(2;D{oA=4k+VbRbnLesKd@(mC2=&$939(vkvFsAiN zg{ImQYj^1iRb@$vN+XvP;oTPJ<(0;pSRuva#>8cL7DxIoDRuR!&(Wbs8}ZMtMJx5A zB;&TYFd*l&_k6$9Oi;O?Yfu;PcrWs7@{+Wdd?+CGTbdhA&yH2~`Bd{5FpYbIJ}-^F z`ojOBk12(J}90I*`MabOwE)bs8_UmV2B0@-McYx%`aqXcAWGvqU}y z;eumXqz{@h|6*;IHeHHEm2O;eS4CpTP2Roh1i6!;n|dLa@GA*e3gqz^{@C4B2J3~x z&{M?Eb{@9;afbj900p5dp|I^x7(?h8L+B}KD69Z}19|9Q3AXgMzC0=F|Bk{wrmUQp z8#%XeGQ3W^Z4JR&KHg&=zx{BI*!+ZpKJ`DLu&hu(iS0px_l;HzO;)`;qR2eA*Nm~o zenRjDF`a(MXA@dI=U^T8{FGz*&aBsLf4lo)pvtJ_aWnMMRUw&DjRW8ocR=X7FGx}IJ8h^-zg@)qFJpqU*=6-d7Y=acr(5P1^ z`SszWKu}TD?mROxJNJ6JvU>M!i?ZPQt4`!vBI`zazy0ub<*^07E&5PAsE< zOj!fDW%f-5T^_D?z3)o*6N{15vh3Cy@Z&6HVq(HI;QTP_^auzhWawqK^L=rL*7mC* znf?Ywrvo(q;@oD(^H{mwy%ov}OGkOwG=*)hz#l=KEeqWO<&M~-4K+0=1cQAy=Q{D7 zcZ_CXUV*7uqM*;gKLWTgpC0cO%>=&Hvt}C#Pn3X*e3TcE;y;E^@cN&SBL&JqSEPr+t0JV^sfIY|c z@hITt?CWAxMm8wp^?xPDh=@UsK+e~RSIGN-}TwWDSTfSJwM(Kd9*n}@< z?u*_<+Xp<8XsQd@->5qh{(LKy+;UG_2=vEU@?I&D>Tmss*dR-*hsBtgVBbQ?eRFQ{GQuN_R%XoCLM_^sg!O1-W`fOK9V1kYxOZ1H~J{E?HRtz*2-+%KvB_v^>r zD3U~CZf=x*o3}wwj6NPIM(I$s+dOBiy@UZD@=x+F2cu-{dJb(0iSWjEeyFr47S&sS z(`HF6P>T9p!4~bZd+9S}8fKE`k?qr;#q+rp11Y4LBOpynt`G0Ll;|5PTMwgpQ&Oez zjg;Au`mNL(CPVqh84Q24Im1<9#N-z2k4TfK2_+oDol_l>@&aaM&UgYmhnXCrg6b?@ z>&Y#MI`Xkt{;F8{F9jVUUq!rWuYI|iy>fSu6RE4GO-%kJNUg8p7%is*%xCbCng>k1 zC-eao z#K?n{&-b%Iv|`Zq$a%vzwr`t9Rbm|!#xGCdz$q?m-rM6;#KV0Lbh(rc|9aa>eZz~x z+a#$VLiC&riC7^`-^!L*FV5`nBLt9D-*#)JchSE1XYo)$cVP1pzx251Y@Nu6q-Dmy zkCe2tSL)^>Z*7#cK+mWrfr$r?X{-Y)jhw*#ZjuOlK5 zg8}<&{V%c#iNkQD=+_l{#6wN_SjZxm7@GMX_%Zs5(yGt#ox6{|%wootTuOL&@U+pZ zB4S#x4#7><7@;NxuZ)*&^B$RPSSYFS3LVyyhzxy7Kjk%IJd&pdS=59l&3QQ1*FR!z zz0hJWdg1m}^w5E8sA)G%#!&$F#~Dk4&7sA01-D4nj}XcDbQv}f46*GJ?=jevb2|sM z>v32?{HzaaLgIX^VeyP>>3{*;Ah6Sv!Zrk{C?+H`Om-8oJ)&Sd-^JNFL&!p_&iP zfZK+`NT1Z@HGowsA@Tm8L?hnt2g=hzF429xtY_-~Tsrq+x>0@m$o=6HH&-MROE_=i0Q*^%4?BIl1`=iX*(f{TRT5Z!SbG9md21AJ$UH_fzW~S= ztrv85k7uJCw&EC95uniz+873^_UQ38RM+RYojy>oQ1Yf2c=o@x=QU0dJsSq_O##~& z$HTz{>|knbs&3QLFWRQhJi`op%wM&jHKG*ps~s>mjRJl>8u=LL_a2W!@n~wBe2=@Q zr!TWi19pKF$#LaoP(u9vpaF=BaS;hwTUMS(W_mDrj07{~JEW2yir{zN{w38JMm|l;yAW{z?9o?)m$M zzi+H0AgbtOULMPKr0k-O&C67=bc(HSrqVA4GN zUKdhZHm_cw&3!ixXFtcVu0`63WE2Jon$6<-J67qusEg z2C*W4+z6N9!B@gK=-;{R#nB8Y)yXR4DT}yYw(R^~p#95J6YtX;NLPV2U!x!n4jC_!t4{0^}D}p@& z+rTZH`PqaSR_CncKY912CZiEJ6ZHTxZlAiPxpBC*Ip6kf6PCzUkly<&t(@Omh|vY? z_wUB_3orsyWSMnERW*4*TTi?jdUT<%dTi5+c!Xf)7M znwX!T2dht=j{}g$PZclVjFUYRWNi>XUUSN?8z`AP{Uf&b$%ssy%KudE!NRi zUr$dZ9JGT6xl;(dI)D|x%HXH<${Z4pjep8xW2poDR`SL4OaqtZ=SNy(60|OIrH)xM_ zmho8lv(3sO{$;R*a<4iU@T*CWMr?%Me;xFg#~tu)pv&J%FSz^BT-AX`Dd;zw2Ydle z=dz4_gv!Fduo(fOsTaAX`zrObc)j<+%=9!4C}mxj%`|zQ z=DO1Vil2}108K5lOyYdEEAX0j{0Ha#xc3$Jn__EZe4#`2PcOf=#_UC)dHR2Iri;cC z{*jtwXu+(;`OEQ^|E@X>-x!1Uc^L)Pr*AfxT1}IdWYg+$$<0MnqS;=}7T*!9I(XCdb*Q43r*ZJh0$K z{(TYvv!{S}H5xyKz#Jg~M{W0dv)c86+b#*)$wsa#O`hACRYv-6Oz#(J++!bHLofBN zP2I$ahO54r_Ij=T@P*uWUE@+Oc3U!_!oi0=2|_LbgnqYK6Eu)#>tgQje+dfX{>sCa zgmJ(wJ%9vy9c!pS#U3&ZJe=Mx2oCYL_CBr_Q`tG6kihGAZdo4D6!y3{VF3*7I?c*` z3j8JotoPkd1I0#H;FUW2=#cK}>J_wZhz5{%T~F!UfXBPvJ`S;6Xs&`>B$}RfROl|v zbW@x>3QdUiJNG!ZEWxT=LlW^rzznzfH@NKkt};pxdeQs(@ftMf z$M6qEd8RjKkhZOP$Fu4$IF#k^la%hei$7|=COE`zH?#y+f=0oN000ADPl>SSXIoS^ zgGmP}L&p{fPG zqaXojob9%@yFOBJ2vA9y5Asid@6r!Q=1_mIh9&lJ(vQ9(as%YwVmDA3wTF#(kS(4l z>RXKXhJaD??VH(VMe?s6%v}h1&7zGcNO9Zu$^GJXESztZ3kv2OqK1$DNgagM?%%hi z5}Q=@^8xR@w=}U)_QZ_ib{*tHI_>qG7%~nfG4Ho911;8bvv{nR*g1bF{j7# zzv(%DVU~g_O-771^i$K0evnI6WPbnEqkB>GD^b5>r_}HYEL~9JDYo zQ}bC1dQ5EjC20;MDCWo&1m^X0bw@UI8#oy_Zg!%Newc~k*gL+ zWwv#w4P$1OISb&T^m9f<+Q^y}8abn0#v-C1m=njnrP;QsFRL{4pnB^+vdCU2-+QOH zqkd!l@LJ{Jq^Jl-m5NJ<0Q9?^s!)MdQ5G1;3hY(0h1vf`$gvg5Cs@>1{ zU%2TOd@h(kpYQC2-u=3r6cgjHG;r#+vrU^EbVj%)^g}!L+@~6tCcLsfZm25^2AJ`R6Kq%W{@O9q()lt`41&hFh=W(6Ky>knVP|(eq z@@J)j`I0{Z~xmNbw5z}myyOl!$piz|n1V#iUpt$7Fxh*X{`Fn>Lp)4PDj%USAx zlWMSi5V%raMlIx%(cfeGFktG&e+N3-PTy;La3frS&Bls7&6?gEOB( z?e_?F5*KTo@A=tJDp?%C^$7x*#Lnwk*d;u?Zc`O#Uha90i-Bftybukq%NOh}g(KI5 zY?6k!fHgU4ArGLK(K_n7&IiJTp5W2yypEht;E^|16{zR`vz^T!3ITaiAkxXR;C?Y* ztOKL!%f}|@I~hcGA6sg(EPY`?VmJJ-Thwp7RxHyRaS!q<+DVOHRmt|+J`Nu1ijht8 z?Hx-GyS*XAAk?%Lrqfi6J8#2@NltoJpt>r&AFzzumAS)w6L)v!{$-e8Ca-?R%K2#qoD>Msad_V!Msc zy9>bG$i6IZuZu7(eWd0fUfSt z%;@2QkH@Sqgfnz!vKLH{yFgU27Uu(YcHvWc-JPNEkQGlwW`38>3y^GTy@dL&7bEK9 z)0Xw_chB*yH=RF$`fy(d{Cfs>ZO5GRjdHKW0zpqOM;dyRsAuerDs+K&Yn{p<5MXz=ljg9vUHyMskq_5qtM5e$Y| zX|>-jgU(ZafSfn=*d3s?Yu)Y;WSuN#;-4h_yK;Ntzim z)VG&E)_V=Vp%G8vF0odwX<^ZRl4?pK$%_kfGER2;IDS$~x}ikZZ{pi1H@&H@%uz?T z9Ib_{Z9L2%s!;yg@wJPm{@?lRM!P?r?m6y8e;$>-BlpN>*;kk$_G*rhi+XwxQQ6%K%?d>3AUhQ`Q{%}SVX}Nh;glX2)!>yVhCT_k`=uA zGpMyfm!lw!Q12LWeNoyb{FbCv>5}e#T*S!cyMD!w~QsR00mxZ^;4~um6dktWjpP^=s1Z+B7*E}`-LyjI8mskurpdQrT>1c5q*(0B=*2LVJ=8_k9{A^ zi(@3!IrrXU^)Xxp6PIIZ`ZER#wL1(ahIbinOOtosTkRWtxeP z4|v$yhx06q)bECMTaV6wBO{&W(RHoHvv!|rTG~%;fvVbARYU*nKa#A|54P29SIo(OhGt3mo!2HQ9(l1WrvP#l*dHI7<&nkgpWeR|y|(GyQ8zwlA`86?+duN>^KalG?=^meQa zP~58BCfNQV%rr0BvKc>A@K_=NgByqJ(!)DLU)LSSm)Ke!PVhi;=IgWo z3xvQ$W>?&(1Oy!S7r;=x3|2}c0ygS~nh*aCQvb+-9s-JId#ME$3txo?EDMoJ-2FQb zy#f1>=LPq}klWiQVY*|kbnDMHpc@F;ZV7dS!?3otvX+C+tKbvxJ9zhMJ4@(pR>h%3lDAdvPe!oNk?|8254<0AGNF-Q`mVj%~bRGTMyQ{d?_5`BY zDW!19hm#UfV@_UkEYD0dt}r!K2d71OGne6RwenG+mzKyD({zGdq^_l2qX?=-l(cpF zF*KZ#mwtAZ-8A9((hfzW4pT{s!tUD**6_r#^8752n-uaE`4#@E4Cd>I zZr%PUvkV#0KR*O1`T!s@kheEAHI*-R|E=;riWvcCD?Bi-JEIV9k znV4M?)Z8$iLxW#<_h0vm>PrA*yV|(Jz*^lawcx)aR)5lmwZ6T1W|^&UOL6*)AeXtd_}iUT89)A( z+8r4~i}5nS_v1))vhD~1xHSGL=ag8s*4EDb^84wHtH?R$Vd-s=sGsz zJ=`l~AHgpkN|ok~(!OagqApX=t|K?AomC$`#v@AXj3Y&3^-e8nokCj79Q%NIYhJFbt}u?Y)Qqp@K-P~~CKykUd%NURKKcyVf@DA2r+BJ9wvMv# zKdMe3))ied!h=yJ(#LSQ$uZCz~?(VbXZtsKY3GwJ?Rz=|hV8ZhjfFo&EBp z{6Kz*@gt)SQg4`N<&WS=;#<*H^)}{QZ96(608QBoh5eO8ulGk1UDcxq|D9FX18D$7d{Kj8jHjL`HEslcji0KuAM z1i5QmMcqOlEvmWVt8j@?OgtpFhqs1a75jOPE|b%j4096n5j9e);>cIiq8X64VdZ^q z=*AGnpeOgq)14_km?Tjead8(f3|7oyFlZG?OEo;{4|#63D1rdnUHks){$R}X^v5bA zQuF;Rc@B1Ve8A8sbnfv?eCCG$4rQU)d7&{UIw?>b8rz*Kk>2k8dF7q|PFIOGS6S%8 z>=atp+S?(+JX21#+yeuM-C(d49#ueAk@JENbaj5-V~0UkkDry@-?qNJT?GSdRBV0y z@4Um;)AsxD*QEDs>^0QIS8d((&sf=0>;8MklW#RlgGBFV2a@?lAyZLTr!L{x! z@PKJ*ZH-EcJnrU!)LMh#crl4m&<(ni`l{plV7|@K)-+ay+@tJA7yGp_mg9b|!E9Da zH~RUN^MbDKtiZ2=e;a|yg8r=FfnFZnWs+<^rroUPW~w~g%?BQLANpE*%FZ>|PV_DI z{Vs{U%B#2iGdKXGB$VP8%gN53B0h)0UK@-JJ;pOs zk99hz+Kjdj(kzee$rz5|We>GjvMW_o9y{cf^(!75FbY6y#=u!%s+!JhdBcB%!7rah z^7`Kn(t!OwLcU5s*crmqQZ;&w;QChGQLS99d4q{MiHz0rtbchy!bG0^TQbU|EF~_7 zX^3yyWzc{CGzJF4Zk1?z7k=Ka8t+DM2y=aU73Lo6mg-$b0yx9(}eqd zz7E2X)GFnIC0 zLm&wE4hP-7voGqUU(?&-Jc8|viyqXrilCd18t(?bsS294?=U>eY$<_F8|`D_Q8NeO$h2Y2bVif}*@*2YW6UVob+zQ&#%?hco)_Y_zLZ&W zrWj=mJh##uQ@R;+^Os_j@qbHJciNhf)a{gzGLVd|6&Ph=-<)#)z4a+dTvzShEH=)$ z-3%L-oQ#x}Et|)F-Jx}Zb}~*2ef@juKQFo*U>=9aM1@e$KK%xnPt1-`k?Puyh{4nG z_rOB9#d6Rv6&^W7v3l#Ota%O=m9qgI-#*!^2lhyt!N$@JecB^JZ=GK`+%Bi*%YHl! zTO!oYH5jZ*BDl5EAE^7@$N!Mm&`?j7v>K++k3JbNj(7px3esS^J>S0c^x*J-&gHez zkK_1fyQ3NDVtjQ&mhywe<~5aRX%$_6J7b0LfXt~}O4+5SD1M(7%~u)H zg0Mv>lb#PFXHCrx!{Cl4s76d>5|Nhq7}_dBh9X0G!!YtUnkJXz)FGP;^Gjru*t3ty zJ3GAEr4>D8E@)I$Rdjnfbx4zJb?Ui3X-IGA1m|k^>on(H3O)RzY5d7KxMNr7)!xwk zQCj4%YLY>Mfii#~J26s!e_dvXkOc|XeNDmhBM%BygUPh-5nmK5_b= zr<2q{8O4V+e2D7`)9D7VWU*?uw&Vhep0m+xZsv946Q0kbIrgu+0z-R(W9oBS#Jm1JknM3eWCkZ5qg>$6WiKIICnsg2kS^BeCF zln6zE-+wMbE~liukt7d_CI&78TLhZ~0#gL4)N|42D9BP2vEFgFQa@|mCS%Z0dQWl- z4t|f74^XO_>f4U16GBinr}n)3SfxVUYt#8p>IxOvBa1kbE0N)?&ocBkkU6n1Ps(st6c;anThDC^W~-J0dk$47uDP*(NSNe z-{2cIV~zVPch-t81x@bdo*C`8Z=Y3FHrmNl&fe_AGrxChbyrSCb|V+DCkTIk-tV=8 zEW0+@Vk451#S?*$9?6?I_k7Aa#Urs2xmo_DFCEfi_{Xv5wURVU@xrgE0?pN#-xl|- z;9mU;|BuED=Tq$aB)sAG?BZVMf9aOg(LRXu*dbEJ#5od={LrGq_@Sf}AFWwobAXG8 zmh}yh=$8}ui_C*-wJnuqVFnW(F>Sj3_cFg}ewxQuGQa=#%uI<8i!?P5 z?eT%I+~m3~?#DNay@X<~#|`?Du84JNVrI&%Jtr)dxI3PBK9n$laN2Z=Jv?zHM8pqg zZ`yRjdSlHA!UeMrKS^bmG!T@3gg08+mrLiFBh*I=M-ij{NuJ8nc+T=kYm8 z0HA`R_nV_`rP(Oa(kSk9-@(!!a+EVA719r35jxV-HEgEc#a;R4)}Ql*LLQNXm)QHN z(ax3VqAy2!@cidmwoUyDf=6hdXLd#Uy(~?bjL^J*cHKt%b0dTe7eHnl3tx!|FR7|G zf{d@~jR%YVDSxys^D_qmU{GM3x9_nnsQ=i|oIqOc;U@TeSd~6aEY;=sc-7r)QIJ{D zw-^BvHGxOgNOd2{BCYKGr8!*~w^fWP`_`0wWzq28OzxNIc<;ww$bD|+ervS$oj(7!RjA#3!V&yg`(uuae}W7vvTWFe53#UfPGAg+?ShAH5$TdUT9E)sTsmR0SN0wo zVg^#lyPJE;4Cct#M0V_(zAtm8?n(sgcP2AAJ4D^I-3db2MGmb^19S}M>)oeIdLEo{ zue3)V7U_0?)1asTiuixB@k5Tfh+7r}`=6(~xmNuKt}nzTB({CUT^6(T5J0$(4%cxu zy^0`qd+%nq1-r<+r8N%bzF@T>q;Z)pQbPh4_2iorkLEq%#V>wz|e`Qi&N9ipQ2f7quyjfmljx8C;o@Ny{%Z^_L-| zkQfv|CP8?h&_aw3OnY~MXx9Wd0^Hs}!i>T-7lEW9MS-f(ZEXbek4A-=9#e@qTDrZo zmkWSWo-QSZ%3L~7DWLo=fn2R~3>{{NLD(1#qmfhtEilDf2#ZW${veG%Mqy^WaJmf8 z-~wda@=KQRFeX$ELfb$vtzgo{C_fD1)Y_VF0#xzfjAiM=RPPuiQZ8BH3{)+*^m@e@ zYX+MxAbpX882sv4JFY3lbUsCeQ?VHC@!PMFsh$)gYu2w>bYT%V0!Dzt{PHce!4rG_ z8y}Y~FE?IU)!R8TSR0R#OemO9A?tf!u%;-T=7*(ds)jiwXb=)*qH|_~M`woQ2l%J9AaSu|MI%rXQO&&2QSg z&e1t@LX@66z;M_K%B!nmdT~G}$3t7HR{)Qu_XViH`}15*w{@$llSLR3GveJcj;EAe zS6`tD(y^HgzVHA@4 zg|frcW1X!6EDI!d+8RveftCw>Zl>+BL2wRXJ>qk^8bpny5?LtZpOW!X>%Vx^&=_S2 zxN-v!bCq%KO3_;Z8BZW?X@XfrmH{ng;XoyHe{}-PaB`7pY8yocP7GZhr|kV#{!$eJ zWA+E2TR@5V9xs8w6aa37Q_sSw9smTklRCReW)Ptq=+z@X{}Z;mp>1I`1E%iD)n&V#l@ZrO&tA1hzSvVOg!qIgK zWq9FR9<_z&Dn&W;zT%eemmDra$%doh)X-X1Eh=0saeHK*DJ|(PZ>~CYlIlU67BcBW z5N6c`)_ny)D{FrFV`?L6xXgHhx3eLiw96wX(wM148P=O=CJhhjNp*tJqKavO*)QH+ zSc0g2N;EGwFkcIci;?oFJOmaWL@)UpPxwvNnN~c2T7{irW(1vusKm#lOZNKajAJ{Y z;Hfsa3xX(zJpS|!tps0X8Ou+RahZ@F{S$l@s5~I{153UOYq%ba+UkQ{7(n1JGt)#D z1Rh!#04TFS70`CHlp;`q6Fvpwn^Pn0P-fpDW~A*@W5M6I^)YRotd4>J@Bk%>g_&-C z4{iXn6hf#EC3X~mKINx$vH_5l zFIGG49ve3PAHqs1X7q-!7)N&Q<8o|n76z370Y=&S+ly0XRwb1y*IORx- z5?S3sY16^|lVBs%H_Tz)R8K=w9(kO-MzG(?aj%i!M;Mj1G$^I0GWZCtGyOPfIL-m7UsF zVzgN1O3i>)8D@T*_e`6+npYq~&mTvsIg2F$X4WK{Jp8eZIjf}FNB0NQ8O=caQ8~bv zn-ZB|*Tpv%Dji*nlS~5kV5JK;jS}60qQ^D|S@eS&`TXX2ud~BEMh^|CwuRo(hB>Ny zmdf_iDW-*{@hdeo}7AlDt_lwb!K~GGt zHPJynz@P5P(ge_4h9Zo@1>Tw)iNhTiY{j8ZLr(PQUXh7`G6(N6k2@|f03!7a9ck7P z%ONG=6L*xsfLfQx96RvlJnS&N3w|&Arsd`3JbEVocPweEbwJ9PSp8T`$=&bn$Sv|r1NSRDDkX1~B zaHkQ|CVy>hb#8uv4pOM%utId)mP9R?WFdQ%IpLu*x_m&0Kjhgydis&L47uG99I}`u zU0t1_dzGb%oviFJAjqII*97@;^Wu(2k5Sx3JM_M2=!Sy$_^w>IWR}6Fw2o)*%Uj#M zjZt%c)Ex)NKdHtIJcNJI6$x@Woo?cLi&X z(YDP-`J?A#8jC<@M4Yub`al!9#^ZoZC|=ci*Ima7NtaubYdnnLjc9Ud7UY0O-x(Ts z2ml}SFl!T_CS~)Ud?F!h2<^ZdZCqbmAXu#OnYMp8PZI!=sR4>V$45BwQW$|}Yf4$< zXVOsL5LBL0Og@_t88V6WZVD4h=VHn>0E7Ia+R|r<4Qk?VcfyO*=)Ytur8vZ?ouH$- zI#_Xmm#35oZx=%_Ct~RpY*3}pmb2YDR$Ry_t*2+$Xpx1C9@=F8B(o;N)3&NSMtRj1 zC`MT2#-iJwhMlZjRRO0bdpn>Bel@Pq9Y8&4i-cF0rPGx)qZ7SLA>)G}h>{~uV36dp z29D?82GTG`X4)Z9(ZiT{wUsGqrecSApp0$B+fwke48Y`1i3Nx?QM|~%&^%0WCn%GJ z3D^fK(IGGjfWSOKyB)1&P;@FV3`JMoa}ix?ce|EJb)4prwcxx~MwJtqA-4#a^b--+ zVrDvq2LFAwHM7yltOx+5Ymo7t=(HC>SXiM-=u!7K3N_cS0_34?5sYGe%k~R2Ggfnc zbUh+m3B#;Hy0q>Cx!Pha46z#~l+YH?sYOF@kTOESDKp=C>8wuxD*{2F`Dd6CaIuUIdUTJ%U2J1&9D_lPaG<&Omgi#7w>4 z+qMO8*r-v9!k2PVW&HT6o;3FG$jOE(5Tt7Qed6ONV7|l|9T>_JgF?7yacr2XNI0Tp zPd`HvqDR1DWoKBtCQ>9}0$+196lLg?AEW)&QKeToac3gIQVWxpSb6Hn&d74)!_- z89^T^=P$;A<5=^_F3@jNK{08Vn{(Q^&6xL{E!IWb*ZU?wJmIN&@G7r8L zptS7}E&LS$_jR5?DP-51!=b!|;y@k@i-aA1nX}dfkTA=i1zkpWgRtuZcsLbPavUlT z6OSaW5B>$p5JwCXD3UZ7W_5zV20~ZXEaVEp)*_+nT$pFclUn3D8dY*J%Jh{1ogl^A z1xOkq7JL9ohmb-^^a%WR8T1mYYa;N61wXy{gvJl*8xA^Y8I9tB!YCHPqx12WF29Lu zxGsziim#^jV$;u~aqn5>Qu2%_;SW_3ZBwK!r7UE%hvFdrL8k&J9T8f()c{1Z`JB3J z3nSuvFbG%$wHORx!T>SngXjRnf<*PBpIDw7JyhLY*R5aT0q9C40 zg=x^nyqMUNSN=(Z$Vr9WW9X>_!D@g+4xN{!jwfZHJNZTzL`9iR z=#8QlA=(-8Lmo(=%4;Gcu%S@QdP_K_+zb#DR@9?Nm_Ps!^vCCLM{070)=VTQRzHi~ zD~EFE8P2ScajA2w9r~aIHoT^bY_mv#G0R0WbkYz$6bzHNJSzC4+;{U0pK_@)0}vp9 zJj}yXjX}}UH3I?MfB|};JOD%S6VmbFXsIs(4woTkPEgY4MYfefALWxdV2%8Fi5yDk zWbp;w_srf>iLbPZ>g%w$3ms}(2$xWVb{I(RXnh;8FQLF%%TAELBau6GM9dX=m^CKr zxVq?0UPV@z#iLq1g%5DjMOAfHRp}Gr(8vyMx5PM4_TcpFCEb(Vq`b`aa1gQZhVB#& zczL?~3azWg6;X`@7m7@pL6}$gI|L4;qh-*+(I1cr;GwPN@>e#Da@KAT8H#6B3_7_E z(hWX1Qw`SKSjxRxS3`pWkOCNj4$@KRoZ7)b=!UK#5Z?j6;6;Uk<%GJl2r`1Lgw^Klo2vYt_@1fI=vK4Q;%9F8w6&Y=YpjSeMf zgTYq=vZ_0Yb%T>P*En`9ENev{sEZ-(y0qy8XZ~m#vV;R1=y4SWi1Ya%EHTn$og%Wj z+Ar2+Q0P$c9Q5&OqHqRsyJ1F94rh{2H!cd^pD^YRg}x?zLlUD31adG0E4adU^hv(9ia>$2v77F^%PhHXi)8fOwj=#6TQyU zBr@p*h)gI*L$1gNx|4}0v3kMVR&yDMMNFzMg&P5QKE;j{-S7{aEzk)~m%PDc#8AL< z;ji6-VB!$|}+ zqViz6JWwMdloI9o&u#}Voc)Pef3?i$5lOYVlOU*v-YKaBe{y$({?@HdL`9FRLLMR>s~o0 zs1oV~8Dhhd!U0CJIaKYiST=293vJn@@N zr~KZVi9X@g1`jRWHP127eKgJ?zlU1f>BIZ_OBaO0DDJ?s*(W<#!CNnr;9NeTCjz`; z6aihzQ(OJVqeF*|EG^AvZE+l-3~^v?WyKHjW1U%oNGKd`(R|Erfy5L2WP9>tuS?4a zqit=SMeRRg%mD^L?66AL&=5EDlL_fnIOX)@Kl1^VXsd^R!5JioPzD$Hfl?apoX zqy3N)pkC>G*zhF=(dUf>gz^xJp{70?W(8SBIjb2$^!srFeQ}nUeI|?<88YC~z-C3WHw>$ z966`)3Lf_*A2j80z(CE~H&Vay(z~*_(LZWqftCSyze`h+EA zqZO&)lG>8`4#^*h{PGsMS)x~mK-YJ@>BC^U2l z2yK)fX!c|;-qUEA%U_*<>SA%Wi|PVY$_P4%rfWG&;TIV_fL9ao4Gmm56=#J11dl`x z9)e#9;Mv~#>1iZI20uDGDeZ>4(P?qQX&QmUf#OZF)<%#iL#2;h_P1{GaXx1u=vD5V zT4Q2i-mt#r{v1kNmFR9giO5FLMq8Ik^lOnQ-~p;?@{Mi*oYBT!PBH*n5!y0@F@~^| z+{)@`bqMJe!d5Knx~nGL62VP+vt7YaO+ADR0a?Z4wi?=Xm;gfXEK>5V>`Kt zeaCTp^Vm`(S+Yf2jiN<~ofJtBjRZgty@MbCqT}>)Fu(VG_qWfV)c7tO?6daTtM9e< zx4-XSjsQW)PA5$yBRD*rQd0_mhYoHx6H!` zRv5_w93{K`$eCffs00}p7|_M0aS{;}<}ErbX~LN?I7o{WgAs&77QDwHB>@+$u2mkj z^0EVB1y$BB#G8+dyqC24*BLwO7^z;yrnb_Hg zs01FbAjiqz5OI$m5#^Z6(#y>_c9ll_q`2gm&s)rZ&M3~6BjRRkVp4yK3mPd(-oO*M z5<5N?>q-a+PT2<$)peLq5VWj>aS39)#eZ6Wgd-JxRLO>{I9^E=AIJc|phTfnX*|9O zbd^%_0Vbd5>;NgX-`1I}-7G>-B6#{$)`*t1NtYV&OWTFP zqjF3E`*RoQqh&-4u&5DEFRRO#{-9o(CNkSKu(957ikC0$LHGK2~S=*UH~ zk>x+_gG|t7mw=Yp2}o&E0P(zv0M!H{a@YQtw@fG$JfQ_=MPvxPBCr9-nTJN4jC%(b zhBz&i#h%0lNnI%A0x<(P8ztckUdCDgA`*3=@Svp$$7F%@ut#YhP&UX4tl_8C3<2du zJa(L^E`KzFF}>6(MfyRf3vU`?1*q-?cbl##0C=VVJK$-dLjj5AXfuMCZt24hwU`0y zu%vtdP{n!-HikeE*CO??9=dq!iV^t(l`dIRyuS8HTjLB6L`sV@UbZIEm8`YVCeqNw zjga>Cte&EzTCb_7bjxX30hx!4XZL_Bf<`4pm*KR?dK3@kn~CgHx-x?B!=TydD{wz{ z(Nkj^)n0~#orO)C3C!$s9*Vd;OkMB`E2=YZ^4NlIhfDah_{@xG$PWei(SGEcf9Zq+ z*|O)$r8Jrm{gc-C5R+2vSx)9f*8xVSWk8-st&^ZDi@ecQkEurux)@9d;k1;}B?l`c z!%^D6d%yM4f~8&o&!)o8Xu5#Af*=a7fpnWOMail~L|M@b9OS^MRd(eKH%6WS`1NeF z7`Ak@RlHgWk?UU_64LB?^3q?2;(WJ2Nr(t&T+(NJ-_F?$DyrJ&S<{KvW?TNicO1$r0F$%`=%{aGq1%dmodmn!vO}X zC!P9~V<#I3{^*&Mp5H5Vem@C%Hw%wMlB)`VUD2PP=@V8+qg`Cc4uR=@pg`MsxfP4_ag;l zpJj-b3V~A8gbP$q0eb?4Nkw_KUAlzEg4Kf)&m)%nVytfDEus8VcYcPaeb!FmST2Vo zDy1k@b}Zj>Du=KJ1+Hf5^~1s5=~8+*jrH{OR!@q1L}ajOB?Lp@f#6OWL-6Y-bksUy zDx_BNbOGaX6`x@a(XNtwDS=L~RAZ!oXsb#d{a}u53 zQe|MobtP6jwMem;T&4?Ke9&=*Wu*(7%GFice1zI%?D%{R;J38uvXm}|EZY16GxODo-snoCeA6)~sKRyrOU!Bu)dDME-D zY8X6^jj9mS4OBN!lUyJG5l-2#_R=;C2s8saTL@F9SjmVmoGD$EQHIo&wUU+?3eeSn zGge3@8jz35GQ~C3@YHn&NO!}~C>JY^h8c*7Fw-R-j>PE(ATs+kco|Ng@{hwG*MY_S~Fx2DEPq4a?>J4 z{zodiZo1NrtB$y!8sf)V8n?+3QA)zrF+tvKNTcGm4L$YYmq9rfvwrZ6HEAa^j#frx zPY=4#9C6QDO+wXk0Q&Q1#vN?LgI9H3DK zzyL9_X`zsJ06fI%QrZfPLcxj@*#xp6@LN<@7xA?SK}-u|0Fn6;>@+1)Zx+pRU50_EiY;&$OqQW&W5{kxgcb$`WLLwC6kR3) zfC4>wVl*v~SR`Fc2q-10Bb0Dfh9CfRMuK93j)_?^*$u=IPP3_&(&jwwkA4b5l;I}u zAha3H>Ikuwo;FAV#5$va=n2K?QgS?k9{u1NIN}YlcnfEw;Ez-QN*H7^;mKR(k!4h0 z`jAe*zR@U+c{dInR*#j4%>?my$B;H%TRl_oKw#acYaeh%j=`q-N54PH31>VMCMNVu zfuJaQ^hyYPo**>ETYlITIF_TI>?R=ip-PnjoaHMQ%j8NyZ~z2~TQL|BhqoP(YKsp5 zWyVlSkS;^C_!oqh5xQ6hz-#`2%pCw7qEjajX4k_8ga;%;w2X$Qku8)ThgK=@P-x>J z2!i%gU2y9W0(*2@mKDeEd}Wz%M#EdBfT|D(LUIa`q+!t-W!gx1KyV4YbTFBufqT5L z1qqN1IpN~T_M%}tF;9nn7lYm;MD;tojw|J&+DT}MsJt5fu%SA^30-d&oUy^17I{e{*0ur9k5eXtcS^|kI z5Y3@XLvv3adNd=B9&VyRq0<$k?FOe6S=MCNT`AyqcTZ0|fdOSYMiL;{6szfy9xXK< zf=SNr!0~0zwtNN0n5}gA_-jzQRHNE5jLW|F4eAd;4iY+=+uH=o6!R+!T;~Oc#@R~8 zD=&OnmN~NO8)VvTEe~)sgG)zKWtrr8){TN#G?G0$L_6l^VF+RrC7ek{Muzka z8M;KZd%gQBU$j$r!e~FC; z+Q!Sbf{Ga)W{v5O2z?N}dB)QPLAAne+f<{-PHr+EArDd5DwwdCqDcp#=g<@mcw&b~ z`B&lL2|YnH1h;t6A8(VxR3-osaOLLZmoUgNT8UW@6VXX4)&@aCE+^2!X(@h`0Vo-Q z9^5mfRh1B84g}rilm@&^CR?PmG-zd)knzX#@K{1PP&63I#ChuDKX~*gS^SE^79<)1 zb}#-*Cqo&nnge2OoFN+wVS+l0NazACHgaBpbFHNm7^!+-i%6~`bOVxbxoJpIN~&=_ zY%#&LOnTVWRHB-@_!rkdG^j)X`yd9&tZ5yV zouoC74L8|KH>1WuRF;YsqRRyZ>IXb){0_09%8C?~kOdW~^P8^8McM>#c>=~9Nmmni z5a@6QsYB5j9LNyF;6P=dt=$Y^mTs(Dx|9>$D1i(wgeW7(hEtxjs;v-hX&E35l(sn0 zroE+Th&V+rT>%|rHHSr!*udpCK6ZPkaMI-R#ofIC?+mD$v=%+pHpK>p^H`#BDMz63`IlJ1;p0k zXYgve0+bAevogq7Q=DeNRWV{}8L6pEjP_&L$%nX@MBOjP<>a^(7 zs7?Y6&XH2HUnoigL_IF1E};2GubVMwL(yE21SQ=66EZeofS#c+6A|93cp&=SGLbDy zJIU9Sfk#wUT9PJnTwG|YQFMkvhpLDwAk|_-y6jca2E-P0m%3_zVZB&k{{ORYy>yfK zG2o5?F)MXNnkkg5rIM3oLALV58;(JA4Gb`d^0M8~v5>-WFHAB7Shkc==xL!>r20TN zz=#I@`YeDR6Xg%gbc4HMlmT#t<0^>xi#CX~RwD**G=viO0A?t%v_T~45a_}ge)Fm} zXw!wBHawLMV18y62CZB(oOOe?zAVc z7V)Mo#qCjs(!$UTP1i2;K=2S_Fs7?o00so}+!SDlDGmY;4G2)I1srf|Pkm8o?oQ>yqS0 zZ8R{SFhHE}qhAZ^ej|D;OJ8^ciX7%>pc77Sf>M&gnbcop(#&E+?l#((1v1GPln|lN zgD*ps6IJ1<&vDJk)W6F&Rh?gQotV(;DiDY+%xUF;#>*;jmqgJhOQ=T*V94ScimXc7 zhQ{<61If}x5G5J11|d)y%?cz$JOS|tj5$~3q9RU6X`>k+qbQ(6oCnE(hj|*TF6B+D zQI&+q8f=!2xkQm(JCn9j5^?}PlQd8(u+p`@V*p^t33Y=+3KDS;nK2y%E3~Z)l@jCpstgQ@W(uIElYPZ4A^03K~ME-7sB zHvGW@;Nby6FC9yzIF0)oZ`cXT`z^&A9!p6uS~JQJt^6}+pm|E2)}yr242~hK6$AXW zsOYM-S~BBPycZ9$&7lsU?78&ABYtNXY3P!&l7ODj86XDe2T8_MSCX41q87pE0W>B^ zuWT~(qaPek;zn(8+c;CFB^EjWGcB@N-BoAFqk%4K3_q~olJQ>A!T`McefAbfFj$A% ziI9s{E=j$*(X2!$HV=~YWvZkiF1jmOS{+F(X_`h+ZV}Mplg(j0v59E5_iFQ~kl?iT z8MNrZjJ8Otik?;xfG#5BlUCg@nT<}d)PRVp-O`0WZ4lre^Uz*R^H-kApvtpsWve23 zwxoZaH2y770zZNHd<~p+1*6(t{C{a2SJNhK|0z zUXHkv6H^`CI*U-zc#`+r*6I$fLO!_J!tRk z)tQV5gohJ5Ek1F%C+{1u?cNDg@;!6 zZ&5A{dfPOi>B0|>Cs&$f*MQLk4vvUN%b`%>-cQjC#Zt;`hPVrZ=phV6R@tC|SoOnc zU+hdvHd=@X3in}DGfS9ekZ=6Pd8AdL@JW7%`uWk_(Ffs$mml%OYGuOjk*dv(_Nc z=RXv!27AR~>dJ$8zm~$x5WGw)@#ZfI6(G?i8xSBRMuq@(0j3Nc2 zXvifHDE5T^2oNpW7}ZymG+X^tpXdMCx(P5@rkSH-%IV6EVt42*Jg`Lu~au9*#1SU#D#^|ORGg@6@ z%vB*CcG+q|4xvpL1nGzsaPyQryKIaB=8xKlNxCH>T4aM4>xLLD5j7qLTD3(sI4wgp zKY=PMx{ZrMMX{)K#6XwcZ6ZM*z@!9KzSe;FN2d|YM32uabR4WT(96<`I4PwK6opN& z_z;Jss7W})+NG`h4IAAOYz2a_cP0FUEFMB~i~vfa5X3^V-r9|o@JB<4jW(pqgQOxN zHe=k^HL@~T^p$V`-Fr+sK&q5HBrRgQ6rdRZm5%{F+L{gZt7F_W>Z|#5DW~hA)le9v z5FZ*naU%}UjnSs%o>QI#!c$`hELiBiV{y-}u$f6dLuKAO{?TXl_y$`_fvj0$v`Zcr zof=tc+DujAFW%HqnY5#{P@>8sFhnzCm4Yn@Ds$;KNK9>jVj08GCIaM-0G9dQdoI@}0>{vLn_PbAfN9*BFD5(W?{G#!Qv z0Z`ILDo`d8L@`MO4Rqmzt%WhRG7&PzRZ5p9M(9zpy7)<;*tUi^KpR9?Gy9VZ8whOR zv@p;@lw|Yl4F*f-T1por2L*cwu{=0ohy!c*X=95XNXBfudXAWuoJ<602+E zrM8ig5quvR9hud7dCiHim z04$;hwH(gK0a7L^cI(vH1qAOXp}52l{-T{xDBN8*G#FKN4OF9g2$wbk(CGpaFl5wf z1%&LWEcZo>B9fd-*#1NW9D0aah0ZXbb#I8O@Sri17?1=EE`dn-00gC5$0iO%obY_5 zVW!Xn8zSJ!5qA!n@5YQvu}go)*AF?ee45KlVu2yVK(xWhP`W{AgAgC%Xy%7BxQfM( z6tPQ%rJy)JYNIf!qCcD&Vv1>7fuXd~5F&_inp|O3HvBN;glpzY8$m9ax(BpREqBW=7tB`nUGpCFqB1MK!fN%z|NsD6ZF6*VLa@kMU zArnPP;KZHG8bsIt*l4L>ek_nF(4C|sOInCXbmD?pOr`kso-T0vQ*vT)O*gR?mGWH9 z2M6S_Lx2cdD0=x$Z)L)+x@d@0yv3aKx^AUa`@fXP)sB+1u+hR1XF%hsiL4ZTb&oVS ziu^X4stE0jfpe+I3kA8-E4O9_R|fq4Rj~oi5%G1&U$0`%0wj3QrnTlfVLLBKIHl8U zp@B$ApBZA2Ha>>}UYY5J5TSyQMP(*iO8zf>`9g(Go+)|USuDB8@v9+j&=u;O1afM!L|-T|53W3V7d?_Z2b<6U>ZTiNs*z2h4~>ttt*Mu4QQjWg%rW zVWb5b2Lxu*@!e_l0~l)yL{*R~MK_3iW2(@Ax4u0fXT;6bS*dK6oEDFvDv3@IY0wkj zzW)Axwq^#yK-nP_hgB4gB@mG)iH3?#x9o|j7$*R6_&{JzO5nkTP-=4ct*O`S>)RN} zaHlS2om>l1MNiS8TS5X<=%H_nmMIX9qC)fq5*&yXkT@Tp8wPNkq#zlm++|J%1&qE2 zfuV}S=7-jfvH3^}EWXYqX;L*fIEXrMB8JmE@GFxzAaU(V;)K1owHr6cMYmVh)1F#~KIq`Wc(a$~~4jSBei z@Gv-|W-eD6hCpmZuVz4z-;LV|EjX=gWvGb6F#*KM@p4B59spO@E&DV6L-Ztk}k&rL9RJ6zFQU!J^UVQwaZ%8R+B6-pYS*et!rQ4OGM#j)YkDz$q&&hxXgtaN(Nv94;{cb zKL{~^Kl%pMNu1P6h>SuZ0`B6+iP}@R4o@Z5H7ano=5^lFO zP4Y7PvQP750d{`IwFFwG0}YNbU0U_*Ou9j^E45$+mk2}V_oO#oWfX)K9AF55Clv4q zMstt=c-0I-EFspER)!#GqqSY(VW17&5;38WB31nfTjLex-c_050pcN))B{}v%~GNc zPblDw(gp`GfqQf%w!sS9+Js);i$%J)t#_Zbz`Oram5#X6 z)m*5F#A^>5bm5^3WHd;4(uNMO?$SjzSsWSC*=2N8=NO>3x0l_%sm7uNc#j_NB(Boy zXqYo+J#31<6lFv@Ne3}$^*f0o(m^E41ERainoZz6HQOke_9q+e-o1NYdg-NO z$BuDT>*?ub@W8%(9Mopbn#E|CD;Zkblo->1 zm7#~O{MTPE>%d{+flkg}fBkjJarW%l;IST^(yte<1#}@--|P=vEdweQIshBBj*@Jt z@Pugh%f8HX+Zk{vi6Ds0vD*D@i9TaRkWuqb=6uhg0zoqrDH=O=iR2O&?93ROA*D_< zwg?+^v-21Dz15bSbeRG>9jEE~+DMSdyTx2*j?3)@W`b zMI)#u$~z;PT~?ke(UciYf$z=S#aT=VA#f|fjgoT)Kxo5EdRy@@7}pDba3*7VW4F>Z zfeM(NTmQ{YPdb2O!iB+6N$rPe60Xz@VFrZ4ciWFUxkzR-ywPR93H%_9t zQ4S76o}CvDl}Nh*fFyfq%_g06*%mYmX!Ywt!lsWBk`Is8RBpJ?=^wgiXSN~)XLN#t zprIyVbad2HqlJcILSwmEr~qv7Ia8(9DU9b11VpOPmypwj;+kTi>B);j3{g>pUjzl4 zJ38H3Tb7^f4=O@@gN`BRT%)K>*Kx@lBQmABRl!3cZKwt32OMp3+#=01$&^DVPZk_U z3IOF0C=69TCXj*%1uo`1_Tb38lojNAdxYgWL}krh(wY0(3iOSKdtIQ$JAg7ObJ6fkufB0gB06i{+2U%Sc%`0N^4u5>}FSywpy>*@Ploh zU&yl8A%*5@PRxzZ(&$l{Yl)~rcUFTGTRws-ps6#e!bkYR6nL7-$8g#id9Lsc+HAVdB=&BnN8V~d4Ti~>Pu z?Y#JtWGFyz=tzeGv`Tq&8bU9YO{w`5-O5F2I89XG3_(eNAY6ko3LcQoCPip~4Pdy6 zkZR@Jwq&9Oqz6_q3HQ6x1)fwRLRU%!LiL>%B9st1yO2^BJRHs3>UVTP6~cdY^|y-2 z^t_gLia-n!Xzf};U6{|FJ-ct;-nsMUbd^hHVW=(Opx~@8i$%<;%-;qQ&Q` zIYhdl&}D*2l({q-2IdTEL6}W*!mruIUBBZQ?;8G&&6_umjg8HpH&4pM*m+^-;$x3} zm;0ziix%N0)l7>AM5Ck^QvzEqj=|&lEdF4EYd;tJI2;Bd%~MjsY?gxnO1_v99@=af z0GkqnAP}P&gcjUFib)eRHGv^7rSj=aG+-UCq4?q4cu%js!ew&8neh@}T#DmP6n-oa(}Y+mV@lqRVnQIlBlX+Q&vl71YDW<3vNUQ`j(l2#2$ zIy#gP(t>tRipq(uH7Bd(bx9NT%n5O8(4I)t&XdX`sSXY^3^t`vdoRm!O7ExFsN5@0 z3*t=HyNuBwshz-&KN)f{Yx)?nl@eoHyJpHlicv4^&j z$n7Fd!Vrq%EmBn^0EM;^!;r*=PA^;)haP5^EA$kP2#i8gek>CNF&Zxf^;+oD)&q2F z3ot~rs06J6DMg`mEN>GnnCra+2%;Urd9oDx#TXI5MHp{&P=n%=cPdSW9g70;0Syrwe!n#axjv1aE~(2j~WY2!tU}iCjMs zq8rT|jWvwV+K7z$e>(9Sf3>o7_4R`UgU6>62$F;Yu>%sev`|3USH;nE^Kcpj{j@-a zvev?5_QJ1Ae1qeU9zE)JobppYv$`um{3ovB7^6s%(x__DOj`p9L_>x^6n+apsr;2K zKsQLkfUUAc0}RrIA4)h`MwtizD-0h&A` zh>&4X8u8F&k*!8D^4h`sUki{pvBG65Vn&JHWT*?4I1rQK;w?~3)5>}C!z?`}P7gJn zFh$a%4F~bU(0~V|wq!LKBO-O|yT&o$sqsRC);@RcY_kjAd$N}%b7x|*tHvtY?0;Nw zMF}jY*)3%Xa7lm%S(Kp0;v|Yg%*4}AJvDR2%$sgnJ!{sig$oy+JbB{v*I!?-V8P6p zGolLtT7WEYafw2@X;EcuLf~XO&J8ZiT)z(=KK#N9FD_ZU1mzJCfEkZwkZ2%R6O-dC zB#tTO%a+QyO)u7Rg^=rtO^>uWTxKbv1@R`untq~u>Zzv&2M0g-$xmLn{EC^gX6CCQ z7A;sm@U!t6MdDT@E4{68e-k#noE?<7d@+-Q#^!{m%16>r05AKt`Frx)YOrRu^YAdUYAY|a?MEsbH+fFE9?s9@i*pMNOAw$Tl|j)lJ>)t%jQEZ=}H&g5b+S(v}{=nwkml!<~> z>6yAP`2?K@?ClwvB+~KPAD4=QnG?AI17&&J>L76f`>|bvrMjXIt5!%1qGLM4WOIiM zfwZ}pTKGt??O<3nWZ$&Ee3QhXzv%sSfPe^RXL4!^N%8baR_rRpADO?QgQm_jdZ2aD zKhOosnex@U)*1e~U<%(yD`1ovp{8|_Kf5C8Kxui}<*TCo6mJp0A;nirEMCubBTJ)+ zb8I%gt9WKFFW<1T%)X;}{(U^-In9F`((3bD!_HjTI%S|#Wl6!$@VRWd7lZS6zE+7) z38)2tK}Ascg>Tb92N>KgOh2>Urbu6gep_B{&a~uq#|lbaR~hypC+0K$D%BICN?lKh zF7Sb*EVM)0L@USQjfxxrr2pwtQz(P)Ohh>5fkK7|X!TIKSNAJDN`>C&7fYP|nlDGF zU)6g4S`Q+QHxu8^(19iEeHUKF!4HZWs6-z!pH#wrylc4)Sxb5EV8jrAS7~9-Vy|(^ zGNyMSYdE4M5>I!C&{8!+_!E>}z<{~^qP<{ThV%grU1MdghQN<3sTvo$1LC zE=QW}j z{CAmno#MM5U1Urol5MiJh6c6bAAo@RX%0PwRaZl`+rT2(xQyHwqQJf<1h-y^Qa&t^ zV5-9at2@!E z#KY;4;u=ZyE6bnP@=aw`R66OYDcFcPgR-A}G?1G5P2!gA-?a_e{W(c;{lsYXpMUvJ zdL4t%7+pfhAhO8qfsHJS1s<>}I|(^ehdW6qkH_)N%^oT;*~yF)aS9!2HQTfnTozFi z9HyhcF!6d{ASY?9q~9H9m_$AeBkiZF$@Ss;%eeXK86^Rd&Zcg?t=Wv%j(oGyo-|-t|0d zwb?bB&%3FfjwQiS8 zX&fQ)$RRDSh<76IFW3Jtdy8Dx(gbX?){SSpZw@920|Fjch0Bp?Ki&hWY(B3~l+w`~ zM0OV&oo#Jxetyt&w8~i-0z42Ag<-e;=+A+{j5)2&H%t`0H<#P}_HK6>i>H+hE1A+jwK)U&#mP$JGmxpD2iGSht(?KjXR;UB*7lZFZexniq>GfbMDY1@ zrymf-L@MBNa&tIcZ9eL->X?N`yEm3C5>x-6z_{WX2ZDpfD5SS7IWW673VV3U$u))U z?ijJ$4An`Xu@PdQH-qc*da&wumfV$bo|+oX!Q){3KTm0U&W^9zaOTE^IG{~G`oOSglV#i+z_=#1rXRo548@)s^`-a*Pex4uyl#G8GXMzS>06N zlQKFwf)Tq3q)nBR#!dbEWPRl$c%z0pWuu3M8yC@jj~|!wunmWtsN7p{gjn5+n+VI++oVT>RzB#S5C^TtT|2BiLy-CuCGjjwCx+ zx(Z__+GU5n;XPmcVPd1mk`NInEjTf!$Pk)XyLu4WYiTpsoXDy@_r zi&EQx1$m;{V60W6<+#|?Gz=7DIEP!#XJ2A%iGt7eIrwRN6!BCEOJ099=yAOpzOi+p zr8sB?#w8K44wUxjk-1V5ki{p|Fb~M>Q{Q!mnj>VI%@w~Y3}NL>qqxK zd*B~PO6DMGxstxn42HWc4$1xWo7(T?>JCPB>Lck4U%r)5Qj-gYQ)rn|RN2mff*{?9 zKAl#yBySY|Xy6nz4+^xCk?$B+ZecT`^y{F{cS=5!nZYT9h~-ux{S9rwCAi$Sqnt`6 z_}^I}kw}O}Qu=pCSES6k2V+qkK~%Z9F3Y@viXUh@RKlS%zWOYAKvCqWP!J%|TJr`> z6mMvfe5Q)WqkOT&g`>ctP*TxD`lv8S$H0WtA!8jtcC0#S*EZ!x4-egf`D?CVc=yIi zZpi9xHnvH7V0E;2@EGV2c6*JEcjm{}(& zYFkm(M0!a}mHII-hjwBrYJ5-c(m^Rx{=}|v0zU@dQMd!X5aY*>0>jw;MEkLpA0;|G zd0lFuwqp`=7V(XlBc?WL)52NXt)RuMYBF#^iOQlD>0m8yYs$-nWFM@*(ESm?8#RRf zSb9#NqBBf9-b6anM7+@8a8r%y(gM+$KE$S)>$ghtJ0BOQgd-3+9{!(?*L1FP`Jr)< zOQvB|%>F&-H7f3661MZu#@$b-$a~|4O-?^4yZ}}w8ZqxbkJ}@7WW0_Kc6I;dY4e@M zL`FJ1_yB3|ECwxZkGm;(#Bs>@%z^-$2;j311tIU>pNn*0CMUoz@sa>A1?%m;C{~VX zzK@{stO#B30xI2NJLDZ(SioqK({Aaf*e)n1kP%Qy&6~E`x2oQAZ{50~Dcth0dc9vnX-Dn$OWdkSL7N135 z8%UNX1`Uq>cj#=lCgQQ#C>@VNeaZ$XnE+)(-*J?S z_-4`g2dVdsDkq1Wd`m@JQ?x)hu+BP4SGo;ijV+ohWqV(RhzNSzAWi#r0iX+`$14Ur z#?*@CcyMzg+rjnvrika>Nc7vKg&tuYms0aUP?rWVdw9&rFj_IEH}*F!1;wMW${hxVV7?~ zaq^jfZJpMLuwfmC7Af7LgmBRUzlvT|7 zc#(S`UsyBO-cAv*9raE+j5_;HCk0xR{#OYZ#>d`B@Xqj3C0^gZq9nV+_&G2(Wqr}2 zo2r<}dLoY<-;cTtl-<_bn-QAYyJBJ^SXE@KFB$AQKy(ItzTYGs@*rQv=0wZ4WC*Xg zi2bDa%xhNgjDzM6McI{XcNBEGP6<|&KKiHPvxF(K zNeJU^SmNY|h6){K2xX->N%g#B<@~B@-}5{UarpyKFcJSIcKj~v6~bZfnT(qp9GtXi zt%IsSBjx2EL^+ITlu|*rH8x31Ud4PpTw;9Ai8rYp%F)&z-(W_#%rC)bef|CG?2cz` zgWmDrB8Sh>?AXz8<^E^zA3q{zJgzERoAt*$(lXEMQ6BTrthj#jxjtL-b(=4)W3;fH zl3ar$IX^@s+!wl_wyfxw%y5LPt8kD=tZNQ~%P3qtpC;7FonR_|Lcd^LTEaUF-q%1? zss5Qe<{YUp!sya))A&5l*Nul{&R{cfBEZqBC(C0&{x2@D70Yi(HvO?`f^%jvL&Eb$ zQAIM48A@tcNoHAwphY^)9;5Kj;p2sw*-fZ`|4+(aoL~79QQ#|Xmf%zE8!$L+LY#9L zw`^)fe(u*hgp!S7Aa}B4i~sZr4YQk)fNd~u*WULUkIt!w-^u!j7jd9Q|7Hv(#K5B^ zQYr~5w~V^Ri15vHWY}`*3>9AeEg>`pc9n#PHp4*v& zKGfs!3_i!BnIeE))OOiN1dzsY_UD_=nj% zu*LnF_bFS*GntZ6`d!)kNWDaB-D?_9aqAs6vHmBNwt><(j>Yf&bOSIwn%yRIvtN70%fZ!meMGkUmB#R2dC%Ifu7-&#AXkMxM{|1f zrQl`+S^(-Cv~5&?L2kOL5U1=v#n%`twi*|od{tD=F8 z7xMN}W;u7@HecSJ_qK99KAtTCnJw1L_ZXgI$~Y8x=tTF~iIbiy2MajPDcm?NfSd2; zJkQ$p_w;O9&jI|K^|hG|NqMUa?)`^(u&YqP`FqD}_RG%rn#c9%D{Mfk_iM&Uw)zW|VL*st-a;;-Ot?*?SfX@1HtH`tJJ`X11vHp+4J(R>?K9YL5a8HuXVUCt} zU>=&bGq;uHc}AYi+*$ROX04^EL;GTf=`R)X{N-cHdrARs+>OeoP}UET_J%o6alRxz z>Lh9SW6Z1=0$xw-a#7X6I^6t19ov?Lkyjk->}cTU&-D=|dBiZIUO%0jGIq&mV2kM( zh9>=&Ag=_<(sm=!C@~5O(f2q1e3qo8fx=u`DNC@3r~IHts`CJ9aK)aTitas5cNOdR zbc%U@9$3M=YDdE8($KvFI&|Wp!i|si=LdzODAArXAsL<(H0gWT3k>RhLHAhoE!ACtOrZcMdB=W zUv8d5A9BQEI2cjc$d&M=FhtKj=`Z_F5GirJ^p9$g(TDk~+F>m6{P0QtOiWehzl=(r z1NBe!BImix*da+ZC6H{DbpciAZ-T>xME1;BiShwXhm}rt#t4WGpG2_gzo^bIkjSn9F5`P{Z zD~weQihSHIB+k3PSvaXCzkd+q4RsUDDZrsX4JJtYMKF8fFn7(VDZ~LicL^tLCVnfV5BqAp8dP*y7 ze?7IWFl^tf9j$16y{iO%iCH(O_4mA8^jYCAIx?M#h-YN>R%ziepp#iKywJ0RFc7 zoHtTN<4+J@C>@Cc$&XrsSHGIviSZ;THnP8R@+2+DJ*Re1^fDAv^d@j{1}a{n`tt{P z&64e%D6HG=l?>Us#05cUR2ds#IQjo=sTR3)yV`jS&S!4ml63B>BpA_7eB(|idyf$4 zULi@8F=3b(>%YWgM z>iuRGRX0-V+M5f9q*`zqlTeW~CZ5;J;`ST%4A_v|j#N5@<~teUxvR>~t5fbi>cVb` z1&GRl)#CE?YN@C$pxg!vHidZA!qPx|(s}<0zZV?YQYXz z2@UsXclF!(o*k}&p|SN3>#djj+*1HFiHg+;XnCiR^4r0IbSVMxt+JQTH#RUCyX+?w0s0LS6BzbJai_Qu zC#XHh10t@Z@~Mh>q_O%YZ~U71dn$QT0TRk#qR@EGAWEY zawLJvq+js=4zu_p=gK?=eGodDa@v+fTZdxcY4qC<&U`^DEYfL2Epw& zr9b@R#<&KrNHO6ar~g60v8;KeY!3V&Q;ox9ZkOX5T%l4vF@$!R@O{md^jZ0R8S<3y z{?eY!=ZO$h?ERJ#+rn1;&wgQEOVR!}Bbud&q-8bTz&}sjrZ)0PO84O37?TeR4Tnoe z7=k=b_Q!QRf2GjF2gs)V?g9Q=(@v7(I8WPUl*mi>`*{2N{rlVcYy10a`(yiC#d|&E z8uAX*@9&S&kQ-^pgES2~4?4jW zJ^~f^@qQ`YQ6UvvtvS4X?{9yte?NP_JqM7}vgO|h)Ts5h#_pQeU(XD^FDu3jc}oPo z*dobLgzDCB^RpKrT#e>b5n;>9=$5idi_PrS?BK^`d!9AYX1R5-peFT~FbXlKX5}0# z$b}Q5=5#^%GYry-;=M*-euSl#V?+w}DoB@A^V zmmcJ1$NBVFhWivH-F`X6z;b_c$37IpJPT9X(|dH+MH@1efy4F@1~U{3@lVJBC1v+G zfO-O`d(-Rd{VqApVy&U%F_b|@SYu~K3|E0=VXDCgcTNtN^YY41TZNbQL+A+N)1?F( zImmQ&`=|&93tgHR`3s2TuC6YX*5!KjXB~d95_n?-M@J`%Ro{oBKMNqm`ywD9q#6>i zztV*u<~LUtHdo_cBeAF3lkg+G?BV{H$u1Ft<;!N{bsYW0)qZ*0?gNy<-ND=~(Zf|0 zT3s}YPiyyW_pfW`?{5Ie7aN?pY9&C&Mn~bkWktaLnYV)Pk7OKX5G6D;9~HZO!A%AM zpSsvP2xIctl>q8BYS`^72!A5AntIMB8E7GYQX8j^2 zBpL$(>6{KGwA!C$@d2k!*8~P(DlpU{{dXoQOO4L?35Jkcj~(XyVBv51^3nore}f_+ ziCE7N+{n2oMC6lHpVR<033l7s+9>pQi>t1nYra-8p*@yAmmjda1B=x0DI{{NcKG~A zq6$k!SJT_@f|dG`)g*oyG)8=F$|%PGVQ)K#(l_h;BT&QYElNn^rm@DO=TWXj$ay9- zXzX*0NGTpm4n$HIW%{b6%%kO0=Cxvq^o!Bi6~OcjrWhIk8`OQ9_sc<@wcd@tvofvh z`DBPkt#J{SH%VSaNV0sx*GhDCwUwOnki+9yBy-L*X4g+m-JSH5^h(S*9@7!SfmG2^ zuN#A;0E#XFBhAvcTLe@!!#${LhW4epGmS&|t}^CjXy4~G1p?6S?p=NM>z2=iJ@;nD zUv`we&K%pXIo+Kh|p!|U!{&D@H%Uv{vjt|)NDrer9Ry$MOP^l#YipL(0L|*YS@QYB3~&|``got zn-&mSps%So7S!=OD${7j`N*mVtM-YTi4e^_3y1jYrykIxuNqi4eRA(=y0I`PFWIBy zIn@kpHujsJf8acXn;SsKV0N+m@D1isK8nwvCAKcDrI?@pRcu^1OorxS#fze$gw|0 zD(Gbj*iURfdq(66xgBf(C%6!1{hguJ)kVd)^VQ~aKzi^rS>}doOtkClm}h>+#fg1I zL@Qly*aS+Z)mBSGJv~g(C#C|g90@0c0TrocF!}9+BA7T-xX$gJn5}J z%>nX@hiCHw<(Of^#ZfS7={ca0oGsU%SN4-U-?_FA|I9+ohJBrX-zx!{j;r;Md7wwQ zzr6m6mLlSm`>(y?y~7W*{tT?*54|itkHdy#enqt z%lP~8Jix+XX}uW&FpRH&E-v`~;UIn2it%3Vj27{q3CqZZQ(?V+a!BH60-HPXIYKvSULZkQ&v!&6RE>|EUqGbno5>PW+Y!SLSP=6JZV>e3TJ*vaQUU^WtE8G=h|$i zW^A@a6dZ5O3Ak6kWU^0!&Abz)cGwmnpnL9!Tn~sC*ux>>_4QHRD%$2M#2m$N{|2_a zuZI2-=0g}E^)5>~qXPAnL}(XL4$9bABF8+u%wJE(u$0J`iGKSZv^aErCTb9dCI%Zk zyelJ24Q|j&Br)66LpP_cTdal~ap=X`6&hLlj{b(1d0mWLsySE%W-eUuw5l zTV9sT*R=8|_A(OBRW%DFP6!{q*RZL-WL(aa1J%h^(S)D@R!E{yy6APvor-<=osQ$| zl6W7#@#jq3dz|p?2f{|8?D3{YiB9;Ohvg7?!rlRmH5H#1If!3Plx6xN}*6oz{wEqm%WtcSPP=S{J2QQlBM+KL4I z%ZwWX_KrS&f%)DDP@!@*2>}5y3-0e+iDdFv?MV59Xvwi-;!i662xMqjiyIq}0CA~O zwF`r~+4XGCz!=aDQ~QJzB_7!o1M}lyR}TJWeW_vr^$S{8Pc6N|fn7IoFq%b7?%U42 z@7Fxn0dVo#p)%wNmej3%k;)%oz2pEc0L>yE)9ahImg?%1-9f+R5g4z5#``*bUE(@K z_~s%+Z1YDognM) zdaO-!Uvdp{E^guIU@Ajp+4RG^qlub$H#!=N_8UQ7+$yiIE=qpVZB6b(UQu+fBe)DOmp!k+KpF3G3MyXnf|$YHw#yqArAg>S_x=87P2sM@#a#rR&jqNCuKtn z6()A}M$^qk2p%RvM7)m6>H#5uU&L)%7DHA)7&{1nfBWnvX>r>wdEFeSdQAffFQ&PC z+cv9BQO8dLwCk6v{-6u4ldawe{RbZFrJFfDTTDUMI$pc8l|@)YG-8p_1aqQvyi69!BU7(zzxmJ=|L?QAsz#+96s#@K44>* z(`F60!OpL@H!X`2=`xGgo|vQ*WpTedBnAyke2G^fu1SL8W_NO0?|QlVDVZ+Bx4`)hRIktZMhy3V9jW^dz;7!7|GPa_)|i~k>0cQ4PNCpWu~-n zxCo)$>=8^l!LJAy(9`bXByR88o7?io$#1<&RNz?p7#xe;id9j%Qg!F>)MU}*5AV5l z;A#8~REM&b54828pMba^?Jt;XP=WR1GnfPi>4%InzPFK#Xi! z4I3OS!DIf9+A|2cuL0;zpgn9exas}k|c-`%W2-tJG zvTupFUtR(3_nP-}3^Cu;I)J>b@IF0W_k6kJFdyIQY;@djze=hAq^GSg+P2$K+qYiB z7x)ZNcXxP6>+8znHRKw2n=)I-vouR<&xf~jlGkS1Y_E9n@2ZLlks?nAd4{h?T0FLE zBQ%dM*W;7}9@4S3P*+-zN3D~-Qv12jZy1>V)}Pfq@6NW){4Gc0C~d8m?+_55TA%MQ zyTY(-Nd?_}pQCbekQ)>kaqRBi>(_EhMpm5IYzQXJGc2J&<}!RHUn*aQY7RmP-155jrrS8e`)Gg;BVr{+Xn> z6wHfCWbQfqrEaw_pdwz>(<5GA=TgWTQLCy(w?+!}DKwPlSCUk<31Mx6rTV;)Bad)t{R3t zz>@U{XZcY#hvRffBUbrb0qhCi{==PXAODm`2-blJ_ zTVqALq4dk+a=G#V|E*`Vde-3ed!(-3BBc{sY8j3Ao0?V4|h_uUXf#mVU@C=j~?SbG}W7b+d+ zHv>Yn^qq0x?Oq-(@v|U4gYka=zCH99T|x1Qxhms@Inw$Py<-~af(ESB9P6MOxKmgb&-t|`eprWgl9zC*6*lzd~^Q^w%*>Y zJF&6$Z?*H>j*-nCyC0d+d&($%JfAs~MZE7^4#H-&^H?X~8n=SQn<-^RkHJ}08>zo99nwtl^pgKvnC{H3mg2R%*UD(pPyw^cP$ zh9=*~P?+hZX0Pu|u#Yfum_oEdZ}(M<7{Ps4Zf3~2)<5#N+eLj<2)sh-^Q^btcDR=g zXe1o0yxW7Mf{hllT!8Q9I_1-0+8MxvYmzAyBS-v{}6JP`15qc|_K9I8FKMf`$zU*sJxn?@wCu?cOH~fH0tq1l)oXlbH8z zzt?A$41s%~IOgNDyV7plI%;e4VIqFrrLl$^F-ykV1f88`*1nE*3)HneO?0E*p`+OO zxNsd&=bvR|!6M$hkFLLr9#^#AEm>Bmdjk3zpNXB_V->Z@c0z_f;2OGqg}7ya28nE~ z03qdeX5@04_HP2<4`R}3Ds7WXp5YrDddpgUb~$mouFihE*@zSya@ZY8!Wrp#AgJ#g zZ@+jM7?^lobMPxxBHP7rHjD}&08V~ zMdgICdiJU2r%d{cX0QUZHAZ3}IXD=IpD7av)d<1V40|y~y@(jqO5p;RUi2_;Mrb8V zRR(d>A$hXOqjUA@c|tqdf9dG~G6o0;!i#xhO1^I0nkmk}%J3(J^st9DG8nX&4!)8$ zK-O9wtx{Lowl+(S4PTpW-(HI~=hqyD%e26?@yjCI)N>Ec^M;;JH-ux0RyqKuJVfW; zJYXXL{A8&&k||6lr^kj>I}UYDHY|`!fX@EQvO=%Yf!ei~5&Lm+&gHaN({jGNb^EUQ zYiYw#80nj@X1C4y>hkmb`qLf<@TjSaysF0tUJan~thtRATe6t&6yOLfWqTccsXId? z^@>H_bv}uiHyo!=?OiCGdcz%9)bocP-xI(~TXQAU;zwO)JzO9~T|IsW@brL2QqRrjK zf3;>ox=q(Okxj#9QDGKEGtj60?AQcZH#!p%zAegrJdhTV(zR)Stz#(H9`hcc1w6i< z=dJZCkYuou@|DZ!hR?$TaNr5k`ju$*$-Bo`YC*^&hFG}P`8YY<7F_!hK3uDuytrSO zm|Z(7q!3CpAGMYKtDJDvZ^2A^S$o65j9O zzw;V|-#W#_l2oCcV&ZRhbfATU7hu8O8LoJ*}3he$4Fcp)xtl&ZG36d%*bo9V*3yE zd_9i*d>%J+{Sl|OEuEN%qw>j2={)Alg%_{Sch(F4-lBNcc)c#jEY92CeOf7&r+b4; zzkRzXW~eajmq0f-U9K1x0c@A4C1Ycm&AgTNGwCxab%_i2XRGzvh9`}w({T9zK#1rL z#DPA0CylGk_jd7FT$X#luC}P$m=zThW4+Q4<^~kajc$_^Gk~k5pTlX;Bq7I#V!iUu2xw6t z<1wf5K!p46%k=6>bsQNAA1lKK0hg10+soB{w&&Y!iox2;lUe*l2Q2!E$MGl5nCNJG zLF(}zCOlN0g-V(H?pM6?OlJl9E_{%Z6)AFltHj5&Rm zTLCX`puNPmWx?T<UvVXtlj00Zkh3tAy;P*E@l);1XrukqoZ9Lg{QO z_uZtFcA%2Bhi*G>yLZe4t~ocN_t~XQ%VFP}U+4D}7IR$244!w$1F5hlZb(WJLu0xo zck9d|^1|~VNun$yG}gvb`aRhi5$$C8%I{f()npIldqXvdWxSHIzFzg>WYu-ey&qUR z!OpvKA5G??PwUq_ytQ24F9sG&)}KQZ)49Da-k#^nbpp81s2{j3zrIV0JYf=3O3LDs ztH)*;wz|4J-(`BboVOho5Y4UCB~L$uVbfMLJ}m*3R~t%ab??0$uxt6@d3rCN_rb&@ z>B~k~^I41cSVkibhn}MHeMjEg#}rjcR@fiY9yQI-21%Q_H=0(0nzN`K$->I zVi%o|FRbddN1+3nTs``-bDD$z5P2bx*d`OSANQC$8QF?jf zo^G^pBuuD!Y&mM{apWAYq^gSrJ2bNF58gqALfemt7Qv3ZcHSRzqiRin$#$sK4YJ5S z>yBBv%s15BW_?}`I0ylOSeo~=F03DRj088R;6ugX@hdmQQO~!4r85Csq~coJ=_sra zog6zkYsVO9a*2A~Nn?i}ku*rVT^JPpVTsInYA19ux^TNj38)89=^uy~^=^{O^mr8@ zcN`-9S=E5gj`yB)e`e#WYtEo?u&>U!^TTYWp3$dc^{GF@GFFC$ zq-u;H7b^DO*g<>Z3F(23&_ecCaGt{W@GwTxxB3l--yAfVLeMgnnoe(zZ5k{VtEl-G zk7MIV5B+dgmTJCy$13ytGGc|T*#$B-;uUPBeR-nX2W3_{d~K-c~_69 zFl3wT34F;ZMt|REs|1I$M-=w5F(f*4G^Apn!g9twoZCeC3rQ;|juOX+O>Y_lr`oOk!Mh`o*5WqfF-v0CU*RqY? zFnO?LaND7p@>byh!ZHud+*;e+k!5+?^;k1LxK6v*u_&sf*Sfyq^ziI*drz(QdXKr` zxxAT|rM&gDPR|DHJv_=o$qspg85Q&F2X?=gAK{=GYyG^faX?WYBhge0mQv7LnkGH(2?@5n-X=!34Bw z?eDE~;|~gl!^F26f!D@kr6^d)RjaG5FI#58ntP2yS5kcZ;E>#6$((TzznK{2H7Xc$ zQ#)j>lLn4@!oFK>hY86F8#_`dPNC}W`QC{YDJkhL0h{YsO9+WiY%IYiqR$5RN5epK z)7Fp$(J3PhunVWyotuz86a3+IJ!{z=PO<0zof;A%Mf$!ba&zYlIiZDw?>K@a*UZM# zKoYj3B5$`95bwFjG(gK~uW=jP;&a>sSH8%#n%!OvlX`8uxjXLP-rb+C)LNdE>SRAG z#&8&hZvU&t2^tjX{kf0*OC))|-MT;SwV7wtb6p4-Z^XQ^<8+~RuW~Fbt>j^=S3VgS z6+1W>2u5XDciNsEu4r&s_XEWUKi$_?wBDxpTxO4D@I{#109G`swHl+@;-na_9V5Ba zgPO931gg?nrEIRW&ev!3)5U7f+fg1cq}v&&B)pCW3mXbscfYoB-dxF7Wbi$Yy`Hxh zR@m-6xGi697xKBSI*x+@gD=r%qP^&vLd!i9K--`Cj{LQvZFlOAjm>PM-^=Ox+lzI5 znNF44<*!;-!P^;i;OzPoWcc8Yww}UbD9p9kr+6zZaz&nN+-BgmDOr5%3OT>mF3wof zp3&&5Z@*?rp6wdO1Ab}(kf%ZjzxiFp`eWw0PLtJ_hzQ5!N5_5MGsr~%dSq0LV-;}c z-pj_{`+z3&ShU!i_YbnTTftL91iPWeoQdMU2NqH_+aShll|UrcFB+|Bnk5f}W_IiW zbZ%CS!oz#8zHWmu;W>R@gC9C|?I}^XKL#MA{#JRJ`-&%1N!O`AX&qwk1q(vQ2i-BB zfphkINJ*=vPCq#8%93DoFI7l$Y1fxT;3iktNifQ7+SL2vBj{xo{j7lQ0 z1t`0{ICZXGuVE%0<;WO4_vN`VTi}W$%o{>rYduaDDg#2$!Ng5=I~QViBY+Fg+!xjH zYO3${7$_*07bhFPy|s*$M^9E_cAXy`2t$k>YDb9{m4q++&@%))vtqSnn*KedCB7jH z0E^4h&=YWy^Ij%e{=MSTd?ty{tZ%n7U=)ssZJJswP?A23IHsZt3<>3D0A6^YdX5a? zFdsFI>bQQnW&u8l2{2e=OA4`Ep0fs8O5W#dLV$O?yuJ`wDk=r!~M^ z`1F7svGs3+AwzUq1Yd^@Y=V?4h*zG1W8wk<8<0T}EdHAdZ1Lf`nk+|F7S zE$7yj<~b%-`5foV!OwT+4Q}=aCuxqrB#zffWxw5F0O<=^egBL+)^MV%o_R_e_-MzT z`FEqis4#uy=&3U>%Vg%e?b1w*YkvGuFa)m%X3Xo$v`I=j#5y3h0S^f9~1 zK2PBFtLg`nb90qK!@60MONm@;i}}G#1#!qw)AV5kNSj;ge_!bMOIHw-@P}!ShOW#> znXo}mO#^43_mF28*Zz=x8@^|z0TZqRPL!w9Yyd4_K-1DFLhLJ%d^`fJ6Z)6jK;`*$ z-Sjf3aQ%3zkwtg;3(~Nv=_y1f#Xx${sgKOxI99zz#^vICO6nkDTt+nQG=I5a5A;dt z;Jz@c8TF5#&>x>qsLWKwXO~2~4St)^FoD&>`Km)nR)!VfOQju+zt*H)H%M&A;?vSP zMGV6=@DpwoA{;D2KT5X~AtEvOeyx+lfZ$aqm`klr;Vh?>`R-LiH?cxBB;gGKWsi4s z+Bo^oPJehSS)tX{U$ly}a@f}Wr8?DncB@$&=HEouqhbf^?tw~ZRfY{txq`Wu*l+ya+I&##ZhAh>zY=mFm=mb{k>JlfxzZOY z?HnIjT3%cfXue@qh%}a;&ep#k2fPN2wia4EPb&Y-t?gV)P8W_73*5~CKHG7?2mH7@ z%m>xW;KthDb93v!% z3;uQWttKM|UrvCNS073V`5jE&u=5EsGBUCQo%NuL$yP%Y_E2%rPJ(rxE+pX6>qCCq zktB^iYrb3zN29v0V)oxjTA15DZ{m%>kF0Va6qzW;j+E}J>w`E-&-=6Ev%{s9pV;%~ zT61N`$L9i$Pd5co>9HVKSMThHp8n4FlkvC6Yqn_~e*Ph1_rK@+!q1NTEcy@V@0&5e zR&$R=BItJM|MrR6ofl~RR@Sc_ogMB@y`2Cq=-ZiTACbW#U<_q{ER)hYLqIw>M3xYf zkD=J!i6VMDT!x{^6n6u^gt+1|tjPYyCz$LBo`U0QYGN_F^F{OQ=ehc}AXO_=bVJci z(f5rN_iLqWKG(}Gca50HXc8e0ochKc$0N{(X`w?Ns3POaquYU|4V)m{IkHzSODCeo z8xH03)z*sk@%m8f&-n{lQgczlmn+k&%Pv3TajpA3t~fvO6kVT{8#Dn@f~f)Pd|`t6 z`xdqQ>zq3wa8#8W+IeZbj(pmV&s?#t8j~H{nc2Cxz;InMJpp7g(~KL3f0R2w<8o+p zDnVJe(dX5}CWBeO!EWzFhq!}2eIz`IAr0gs!$R^{I3t4e3)&7p{;smLEKz@9W`5@Y z#!O;X-lU0ai)>>0(>LsjMJ{!xTt)iQfcN0Mec=1qwjw}n?Gk1U_k)ZFys&BQuS> zpQRb@@d2G)Mw?8C4mJ8tln`)Oy7`{C0>z@=5ZikPbQOT1b$GsB3_;$1R)+1SP71Is_Bd^ltKxRq@APaah#B_70IT;I88K_O zsCfNUcRoz9Z2n2@kD#dM=;v7CtA_CF)uAh$*#v#D3}GWbh}`-{0<;8`mxvDX?Lh&e zdGUN@vN+U57hnj>n1;6F?`O6^M=GM(Mr?mCp{yxw2xCPbC_lE=0tu|~zjY4@pmHn& z9AwLU7{Erb>~Ow;BK!fcBc(guF>tDN{|aP!@qCto!Qk#@h3WB0!nj~HIC1D)Cf+23 ztlxGWf_K?8Y@ERaF#dsKy^VxdM2dOQ0CdhB9{SWl{9 zsZNn~`RXb8aZ7x0MT+gkQyLsBMOZM-gCjN#|D6X%~ z>^T@l&RrDyhnL%Y0ezF9ZX}6fdE*YO;2Uv7#$Q!E?!3^@`&E^epYRQ|jZQg=i<5=r z7|6e=V~?Qy2;lxX`8^<3>cS(ETb%RCVIwh_5KNiiDwlI@vmsR;>?upM!v%bDp*+io zjTfRT|3H4nq;+Om?LV_f+BjK04)S&F%xjM+hp7@!>!O?7hC(@7Ca+ccTM&|(ue36i zYy{zm{Cg3q9x6?}<(~a?nEiJ6eK^^Aq2Utfr+U9NngiJ_?zdbF=gsHdE0Qvz9>Ws6 zsES7i9$J%yce~Azo_Q%;T*b0p)bgw<;W)8a44;2&=8i>)xsrbV{CLecx9+nMuTJCK z<034Rj+btxpOUM~X0hZrF>gP*&SU(%Hu$Fp(l34F^}`ntF36xs->`WSRkP*A;`rcj z%YPXb(Tacb5ZT;=@NhN+xE$$mG*ZdqiSzL!~g;kr6 zx$m)*>DC^tzZ^rZ<6;CIj%EbjZ&}_lt~&w$MSk7s)M)+6OZ!VF>B@bZr|ZeW+dkyY z{JkIYED}x3CtluY=7{d_bW`MfJO^|E?T3?@h>?L|h{~g;V;X|E5|f1OCK3)q{>8t> ziH_FD#neNywhzrcm7>{C=F&!$$Ir)JdA2?(2((DyGHjQm@7s|7wCX1JY0K>d>Vd;Q+>e1YOwyBUIbo{{Xi^NWPkD;K&Z+Z^-5y=uoU=`iibG zBL?k7bhE1X<=J6bu%h_!I$#}Y_td^{iA9kb*B>PCK~2kt{Yd*n>~hG&R;bAYv}z|sZR>^oP8z^Rvs^z<%y z&_}e{ANu-wKJt-|eC~6f`}JS{wO{|W|M6FU`B(qtzxbEG@teOsXO2FG!47iMO*ee% zQ=j_f&;9C0KlZU#*RA{dSHFrFuIc4%wmah2HBw0!=8&$9Lj&?bHDm~zxR9GQgTbNYu7H1cd$pXdw=@V zpZ@3n{GZ=)%Prsh<~Lc(6zAaJ;EWkFKY0IxzxKJ`_~l>zyy2O2VTQ_CJ4#Zl}BPhR*j(sk7n%tnmb@AdbM#2BtKl^8&`OK#udhp>jx2~Nx zZyuB7eT#V>-@9+ePyXaj{{HX(?x#Neso(y>=l|(1{=(|jtCL<|5mX*%L>qc^pl@sA z?wlydw(3_oW`o4vl3c7ms;A;(`vLix+G)Z0GJmB76B7P0YXG7OJI7ajGIAQr63zgh=B+soIooBt3Wf@6087q z%znd@(K2FiSJhG>#Iz_3GdK>@QaKr|ZctR<@FW|Ki{FUDS}-OV^^(4jOIwwmb4C?Et%nA4P$}2ty)@T%d#Q@YO_x4XxFnEpC9X*^Ej&sqOwrRQ2M3|cmK`=c)gusd;H!RH)xw1fKl|Cwe)z*5 zzVog--~ayivpYZX$RiNRMy3RS%^f^O1IPrek8^rLt_seN9f$~kMK%s7h^IP(H>2&N z<0I{zY+&4>QK~3R{`CWcFF*3L@&^IpPvUKM@^Tdq8(nG9Lyqt~gTF;Xl#h2j>#>ni1XG2Px$mugohbJQUj1rN_XjoWu*AYgj0>UK`qvf;WgR zax%6%;ZfFyu7N7P+F-xf_QX%GA z3<3~<)Olu7EhUExfbqog@HvsmWMo6lC+-#^&d(bd;GfP=^0e*40O3;hFqOP4Oa{`%_{ELix~TW=E@ zL;8Co9qs4OonxnBiH(eoj*M`B*mm@-qqAnsTE6^>S+nL~ZqJ_GdE-seb?DHc-Me>> zjg0p9_7MT*Si-}@!vw;O`WtV&apJ@Ya0CeTM78XiI|iQ%k1bJmP?>-4Gd=bwA-l~-PQ{q@%|jWYu3NS~Z;KX>lj zv17-G=;XpKdjm3bh zG>04jBy{0EEm%kg*9zG{Xv2&oEu2EV#BK8+G+{0nC^1Yn?xHd~Q%x->fv zH97E91c+d|2*wjVpz*j8;w+EfEp4_&AjtXnA421{P( z^u{58*Igl873Kk2mFe}a885$)eAt0EOtSq4uf`|+Sgv(V+x~Kng5CI7@ocvRB z=;4|K1E8B@Z@$q}tmuKau5bYaX{Atnj?w%C$O`vRUN!+$G9v44 zIpf?S34iV!+WdFdC&uxOlYKX*3ywHXKlRkf605bY+AkgrUeV;_v??*baA0Qd*<}a*|Rxcv8=Xj-Fo5t`G+5Vh(Ng3a$0qC z>?V3nPwU7z-cOd>^^WfC+js4LQ=cQ8J!iHSlg1S&$Dk*leCqDI@4_@$L+y(%zR29Q+_Mn+$F@rARePkrT3?{-}l2GJjKyr>C#1a+_`3;Z}#~3)ZpOEr=R)3f(3JLzU3xn zhMcTl|JuthKfh|#%Ij~qiK*cfvSY{gkACz+GiK_0c*x}UzyJM3ix#fA^%l+g)TL9W z&ureb@xce)KR9zHSBB@FeU3mLc<_U>XU|3a+}U$K{Na;B7l%Im=}-6flg?oMw+QM(h6cJdDJu;b@)o1gOv|#cL~#4#g{h9 zTVn}`Sqh{XAct@6@(V9pG2$*xTE;zp-xJ zI?kO}U%m3wsng&3*0(miy8f-VkL}-o;E5-m*tc*0haP@##fp_ws81lBFTeaEXW4!G z4sO}DWzl7exOu?amtJ~l-~Rnajvih2@+(`nZn=2zBIX8X%vg5$vVD8^KK}UQ+qP}n zyMNzHKl;(e^&39&kw>_1qz1SFz{I9an|AEj@$$< zFK^kh_0@Ij^IFraS+kd2zLaJ1$}8A;1w$nJh8u4G!o3X>$I^S_ zjqL=rZR@tZd-hTLr_Y=qy8Zk2En0LLcT!XiQ{$N|MFqGJRTV4?hSX78=N3eB>sb}a zf&%)f5DlngRXNZtrFwu4VqQ_qCVm4wZOhSM(~!ylt@NYBlFgbbiZqm~cGC^iq2TET z5m6@uROyN)-!v+tm_bp|<->>Y@{*cb$f^0-t!hE)rIR7AooNSx1gA|DRYOK;0~rEB zY~>78aquK948a2o(N;G?Y}FG4N+kvf1pp6(*)-V=RDQr$vEq-}gg_6@Z@Tidy|dI* z;{!mZyvJ!S;)r)kaYPT`UezD9@D~Q!B*ftPQy%o2$qIuw`ej#uPCQ0oL@}2 zgT@bv!*qM31tvUoSq*_}s`Ls2K1?SXRnkW`q(N~(3>_i=1|-k0F4|_LBNa)UWf|2k zQ{=Wt0^P?ufF>4vpqTW6Gt}@Td_9S`iV$T(T772o%Rdg2n0*}~d zB?X`0AuTKt35Z~xW_C;zph3!WyAVAV^x!l<0H+fp8vj$->`+!9LAOGL!;hBoEtWW? zgS<}yegll2xOZ{tkb8dDFB63n{2byr{p&evuRhYsraC+_($~j{L3ah%^6t<+K1TiP zyo<=#m`?T_D)4Y(f_0*d!D$cSg-5r@Nfbn<1tJs3DjN4D+s?uLyN`W)^^G^(amSrw zJHg4SXgCG3h=Q#h>`8pIWwTIftZ`S6%tmTgQI%;)^>uyX@G>rJ76j z(9i|0`lDmx{e68GE?n5OVdJUOr?^7z+qZAovSpeSrA^bJ_0KM#%w|%kjh>ym_w3uT z?Y{TlJ9E}-hR80-gqN%Jp+g5T#2pC71&#(>vxhF89~kIearLU+zJZHF7hihuMZFVj z_dad|4jedu&)o5GA?J!o8nw6TIWT3w6nE+m0C#q7+rE9@-aU8Tx%Tqq%O}Zgd)vtH z=#r(2*R6Y%;|Q6#_r7}u`e!jQvu4laPUe}XpFDf+?8y`FJpaOT>t5M#;K1&yR$g`E zjW^)l)@^U>+WF=qANlayS#z<&+`O!Gj0S`Tg{qPM&@4nPbP^`sH8xr7N$xa(rTJV4(lHYgfJT#vAKic}3sQfAApq zi!Zz|GBU#9X>@Filg-HR$j2V}2&a5fNPvKHDNsvFvlx}ZvM99Zz$rzSlSVC7XG9tx zgGK{xLj=H8`aV*JEjv31blNa5L<>CtJq*EVsl8~EQc=Z*Dx9>pl(mXj&%9L?Oqov@ z9);JtfxHz>AhlGxFq_aGX@JqAB4REpC7y?fr#Xwnb6S9|HHp#mB%~xN%(Ur(N1>M; z>v3vqbkr5D90J_G_4M}4oH6U|y*>m#bNsjePmn~O~JJ7#u`SSk0o;>+pymZNx zD^_sVeZ}(2SzlPBHWn{hxOVN@`|rPh-a^bRoilgtWeXSj-D`d4&tF))XwhAF-g)o) z?wv7nCi4sZ^2;xuJ9jSI)Z969@4ox)d+)v19~aR(>F3OuyAnsQx^j`eb!XNMH{5W~ zJ@;^iW`dlm_C<>p-*W3}Za#0g;YRL4xt&%*rlu~t?6N!WyyNPXS6_eq4ctP^naw4+ zeeT>jYu2o};fCv1t-9{+yYIotTW(nm1@XSV!S8|vx=+Uizc z1=U%DYdNu%YjM1_BH`$<@t8wZ1dF&KLqP%=l`hk1A%=mr0^Q0}kBJG;&v`NnVv9nM z;EAYpMQ4a^@U*oHf`~W_5TOJrLvY&gq>HWKh_m^L3A!h^RS6IeVbbz|p3>l@q1Rrl<~$0AZsWM{0CdWI!8zm_;(N87i(Kork#)%8(5MQIxnCP*ThkdNxwU zlCN8^OdUl{8MT!lfOPm3QAWcVUS?1u5L7}MsEwllw#-Y|o0C4Ca@X&$>36DkfK|n~sE78o8)NMrI zK_p#<9IKueiP8MToQqj*q5KjxrBKYN!X)E6X`Pr=C2+V-q#=Gur81+T2-2celUf)} z)K9a!)QF&XZMy>HElw!3Qdg9wdU4BbB8`pJfT|}tn0&|QWCG=q2=I?hS3py&Ai^0J=M+;jeK==_pmLDj*j*Z^fEL) zIyE^p(b=tc6Hkm2dpFUuQ|ZjpHs$w@`X0AKQQ*S(II-gxIn=w`^HLqwF-kaz8aj?Z zpO_%Jv7VkjLK(U^a`4dJ1@q=Dyljy^gz9Ivqx$6SIQJDC)3$AWbJ_CC=gpltJT!LT z;K5U;PL7XH%$_xO{`|RI&Doe><{o3`?l;b!J$Lcq@L>PIl~-JG#Z_00k89R@dOLyMv0&Y@w&3eE>tF$*(i%^=v( zk+CklU0QE;nj#xM@sCZmA3SvG%z@q4-*SB~M})Rc|DoJV99Gb9>eQ*%Ufblqo3PO(1*z=`Vcd#+&atuMZ~b zL#y23P>;+GX2-@S4j(;sUue;{5MT;hsL;cCNo}TXQI`JP^xNy#`Yp$O$IDcY7 zQ#?F!Vasc;9eeBO_(c2Md9&88y=U*fH|Nftech^SspW%*j_ldH>+U=6oH;PFqg!{d zFTS{L=8S<=*I(P+*)yiUqIG`9o7?ZW?dIP8nXIXuJ9ZyFbm-#6^Ft%U%wWzgoaRSH zM_AW7bY5yZf9}ldufKj;$-l_W!-9G9ues(L&P>ea?%lg5Cnj&Zb&Zz0tC!+TNo&=r zGAU6JQzWV_uT5%TY;2TBvp~$i6-c!W5kNy-2ozV&;$a3cQL7ab=^_XPfD%EFj3NaC zM7q(;6^^*z5ht3^#*jBPz_NKAk3Fqu^Mmycz1GY!)UKud2M&f901zS?Tfv`l%K>1K zHcEn1-WbX0KXk-lq!)fEmEKI5;se=49%Pb})>N4v&tF4i3)Lt4aF%%_N4p zWn1W(n$X|U?&|DefCA7(lr4zsYnwhkKG>)CzfmL;lT%&(V}h6bO|LjW6d>_U=QEdnw<3IXOSp2pB@s}4bUZ9sW{l^f$|NZa({ojA%7k}xOKK!8% zpE+~RB1$hIdt)S7dO-|B0M5v)UQ**y#Wjh^;>U0Mv{%%-9BwYSrcee#kq(b51rK46 zDy=W_%9Tq81(>lV1{rE9FkPc$gkj|q&Gcg{zA;3S^(#F|F@%Wf&7~w&kS(e=F+f+e zO}PS5m2MM=S49J1Fs~ejK~kP6;r?@_=r0E^_z4hxjOO(;mxNR7V-HtAUE`(Jw#vE= z5;{^6aVxV)XiIWv>Bi?!fOJCv53z}88mcU{hkgKJ6%2FQur(QW23zvaDD<#}K`I(0 zA%dh00ueS46H93Dp&EL1)ignC_|*ZAaO?!pPk7-eW9U^x)LfL1Tg{O7fx^N}@S7R* z!KutbG+0CsbGVeQBne6qW`oh2n210=XQ*Ab1g>tQ5G9?LynQjkHmKRxNR)?%woU{{ zt6k}rCMsK+Ly3DCm_}G#gr+gyi8kR>{s0r2?HzpO3Vo$v;Jqh%Kf3cV*!vo|>$YTy z)|ZR|P|PE%cpoA*pwt2)?`9~eNsw-#Xs@(x7&PlO1tK9;-m>n+tL>ve8I3>bxEoz` zLu*C^;PF+bL>bYAlVs>Z=~;nS8ML3VC(xuzZ5*=&t7?`+MW9zC&@g}yri!LvkScW8 zfYKF&iDVR{%9_ou_}HRwzpI(trc0~+*)t>&-45uxN_0`tUv(WP5-l1zQMNe>V04U= ztB!Hh9M=8vwZ7p21|5AoYvAO=)>TzpZ#ZsCkq%Wolr=m^!Oxit9!@`qjE{-l-P0v6 z?4h?CWtEE-S0e-`C#Vh1tdwl~#i8>9{e4}X-RQ>K-acKh6=R$4?o_MN)6=6z?BipE ziE`?S(-Nml^s}$_aHQr!k8-YLTz2zvyz5*!kwSl>e_+6WnsJ0O^HHp$mpav}1RdN| z=<%CF(ES4$N@)HD%<)TY6Zw!ZrGpPWy39|FjE^xo!dbiRQg4s`)a%IbC|Tt+a&Bmd zh{?J>$UoWM+nZC!ShwD$rPm)u#^B}Pu8*v8Cg8jRLwLB15eT!%X@;C*73U$cnDA&~ zl9;<^ceagAPFx(*w{xI;a(og&e4Q~csOoLI#C$NsOtXI4FHLs!&icD=e)G{sAN}3m z`NI3|zJv2RQ-$55E5sAOE?xPaK~yI7_~b4tI2^YREhjhYx*yJtM_Xd!>Gn`h4XAN>tFtl* z?(7-o3`F&6jxKd~=}Vb7#*F#B^_cGM?m_1$w|7(>r~lDW*XGptq|WFV)RR%yHu2IW zUyNNC(HXI;lazFGUhL^sJX9AUpwn(@w?u>7_Ns))D4Iwz6EWu80?^=O+&oH%4e1LK zV2dCcXu+cm22EJ=dJ#CpFhhhAX6PYC3LHAwk-0Vr0?rIHrj&6Q^z0DToIbKeP3q&w z5@aLgWN#H-vwCm67!VKt+?JvZXGQF)z&K4|u58${X@v$JqYQcn)6$bIeM5urWFt}_646^S zO7XzvRMfO%BJ@b+HUK4EplXmV<5e&qPFyQK;)lvr1*0pk zx>^@4dI0dMBzTZe-lM+)js<~170?`x=>qA7AyD}N>lTnJ=!i#_p&$^WL`y~wH7x5o zv79&|zQ+V~7`PF{CoU~T%5>Vus_*9o^jPa81Fi_x7O4IJp#b1aWu?H}NXcRI$|yu5 zDA7uxN;o56#B!}J>AV43Hoa)b7U5#UR`J=)r7)BPWdf_x2m{68aFivHaWU`d)y^41 zYPG+G)8Ew&v$SdD>yP>ekY!7OAIQ{zI2uoZs=Cx+wMYxl#XWgwRZ`tJ1AxFFEnYrF zTU*=JEA@hB;9c*=fsJ^LF%7z)$O|uEskh$v1#bR=$ADQxuS7G5$4f~{>@6lTALekn zX`=ybTGqd#ZK}B`v^J|Vo>A-6MI!V-T!G}Rq12WQVN#BYN$y3Daeo^+dJ>y2P8xCk z{l5Y5C=^2rJ-$I{yoyvSkH}$*c&N6gh5@3*74a1H0`o`~9lh=t^69|p_316pZzw9O z!pgZ`ayZj55gx9ia!?lZ8l1k8rK3~diz0$DhQ3Li?Ql{LA>@@(-N|hOQi+WF5JEvY z3>>~WkHuT8BoM8dW@=LOoEkxla;odr30@BJU%z}QRqWm{ghL!3B}}X!(lIv1eFFzd zeZlC+$S_Il?a?Ry5YFYF2)KWcQOS~!j-KA0iSbEXg^1>{Q9W_w^n(Aoh4#k>p>X!K zlX_x`IiIVv8iMn;`qB_WfZbSI5JaY`D!#xw6W8-6l&7GH?NMf#|eQbgh zjjdn5o&)+dSL<6KhlYm_960dpZ+#ozKK8LkX3w6-l;yxd^02D|u1@xoSoOtNkW()_ zOc@BVkB^Vx05@0oPrC73-$?35)bIWTiN8s}j(S3Gi4^N_9vTKi!G|L11u-(59P4WIFf-NWQn2bAbxj6wjs&nT-g zgxm7ps~$FnM8O#9^x#Hj6EVNx_hiYErIm0nG_%ma(cmy)kgM6!wBPz1X%J6T0r-VK zO1`!!4PlBwqLL2MCjvjX$C#!7DYQg78MgCs(F%nm9M&l$2zF8_TD)k{HP>7{Jbdw_ z;ex-l_U^mye&`{6swbOIm=!zqBTtnlhJVTBS%vu+K@9ft(kw@aD2bvXmF_G} zGef9sp@$N@LhXX+kpWq1${2_&Ef6*!L(+zbCMen0eqKidB70q6n>NJoFjTv(6xzlX zDIyP|(GXp(I1ISe#eh+S%xOWAM(Yb!Q~@?2AH?9jofcvMZCn#*YZs$1Xg@&=?~zq# zj?K1edd#f0B{u@Z6B}rXLh`QI_(MzIECRZ%n}0)`#-lTU|4`UiG^!%g5N&j#2Lwu_ z7|c-XyK&z030g04t59H(VK4S?=(qqHS2SoZLuoN1hzBOxZ!0i>G8hdFt)b{wlMay^ zeSSxlMo}0;0lC^34V^A*Ak2N}B4U756hUbfUt_3*6JV~*Zco5`w5CNlROg_@dNtYt zbfY;qgJvi^?(#Ejv7rkQ*|l6WG#qO3%ST3j)4!hX9%Y>4R5`my6;arf%Cx&j&(f7u-4N)D zrNnKdyQc@;!y_X-J^DfkE(BAT^iY-|j%zsJ%dKvjG0l&si~PtLDX}|FODC5%AA%w2 zd}dDsqke-g8pcK^y8QCO-027sS*DdxnM_Mf+PACi71ltxYSa8)L6(irW)*5XGUl0f5A=c34QHg`yfAaa(b>&CjSd`~z`Mbzc~(Yj002=6NklFFiYX~iM#1@yQ#j+UnEWJIX^LIIUZ;i&QK6Slm1qGU+(E#QKoEou4>)qNVLuVKT_u3Kuo}MH z&Haf7s0An5QHo2|VpRew(evz7OX8A{vnMfSUWaU}EvXjX)-iAXoLkr2ddn@htX;eI zcK;zlmbNWQHqJO)t8U1m3035)*%wUE>1gyMh zjuI8D3x=5?s~}8pn8bh*J5wUJNL4Fw!?ZTHfzVs=bisijX>m0Onkzj>l?s4|8Kkm7 z0dJUno6=|tkv0^M2r7jI528n2%_F=dA=xu;UZ8_fDMeWn%2HErKzv9yqu~6;1*rfR zS&=$>{G`B2!5|tzu7X-wdiBgb^H@X*tMb}byY{UBln{kGOzpS)mPgurv>Q7Rc%)jW zK=(yjaJhY#9_`vi&fS*OB~kbWUOj{{3ktuaoTG~s#=R;FL@>D((x{S@5V}mq^yu6< z`gV%Ik3F;ZE(}t&*p?txX@i(;+7eSvTSr@mLaf^2R%mV^6o8%~TDnRd9`Vy+8VFvZ zZ}bDnD6%pGkgU2SLJ4@G@|%6WNE$@3UA3Mqh;qY2qPHliL$t(Ri>4A~#@m_vDI%cd z5{teN!yg2CGLo*x^<@_jGvZKWh+koVKnt!+*<2GV5%`mK?&yGKXvB4bDKEEbch2z zh%*|s@GwRABh5Yz`m_gg4)NVMY~{E|qI94~kUT5%zP`drKWo`GN_WXc6^*X+PzZ#7y=OE zBs}pA4NRUo)@FXqVC=%ok9mtNYnGqH>*FRw;XoLeYOFA!bnT}s1D+@;@?_467SDTuc!V!G;?q9kB3selqZ z<_tmPyvsy5qlpm(aehe7S+CT8t9fbfMdV)VgImS2h5;VTjK#03Ok-gG;~e z`SnjHfRYgM`7XCXsyQG^pfItaLxD%gM82Frqa>Qei*wTq5V5TAM8pRg?OlqsKvhnQ z^*9+y{PC6|s9xcQTg|MV4yw}}4B|XU)S}bx8;sg$2qB1ahcxoGnC$LLudbNl}vOcMp z9VIf9j)_GHA^=_ZL&+%o$wo%QDbIvzXO~y9mbk=8#Xw|8@!1*9LkvNr<`OkTLKeSM zFDE?(kbPOwBWFLqM2X77>`4fEG)MN2TLm<;wsZFC)PYY|ajUm}h2wh%rA4n|Pxum; z957eX13w2cPNkgH>IR@s=(_2x^)*2 zy;}y!ay(MC=r)zR2!KOCZ*T9688bPp>Wbb?7^K&K!AU9~OP_7n= zlL9M~LmmlK&qMi-NkJ$2C-tqSP^85CVuuMLj-sD>rCX1)I17tx>9B&0tmBYvQUHT8 zDNnMppfIMl1Ia^4%Y@3X+dc#8x&`0_R|dSeGK7eIU?M0a2&yOmo=mGv3t)#6#6(qK zG^AQAR7%d|%v2ZzA~iU4Q~}9qqgFhw92Ckl8ax8M!*5#?Lzu;*wJ4B)x?HVvE{C0Z z7e&^jM8ArhOhbWB8GfRqCwJBcG9YU0(jYwv&%NH7q()HYW3f)2pr^y1D@JnBT3_-*q zo;RFoQ-SKZgqopZ-H2M81@VvQScC|(?Sd;VQ-ZQXzzG3ysWQMR1~Ahzk23F3B@KGg z7(Dake&HR!9ZI99$JPn z8UPnLtCbAsm;5(ZG6_LEv?|t89)gNj3LtKSdzNb%1>%OZ$yJR}%Aq5rF&OkKQ9v%+ z3toW`lp=NbK(x7~(WD8;f}emufk!T7G5V6>+E*2}EDFsLILt7F2qKM+F{&ytIzxdO zA^;u$heknxOR!}KW~JC`l;xs?+7nb+N&p)Y{3Z(ZnhBjZZ~9~}!xbc?r;Vgfj~Mec z4N0Vjqv2itC4)c$2FPxl2pxc@3@J|NY0ZFth;eNnA$h zIR0V_ZfBZnqbNj05Ot8_k>YfnlU^v!mx5=XfnAR=aY{LC^vhRG?7PEx*S;+722d%P z>8HqLK2X!}q6#Hc5{pFrC?rNjH(ibzvIyBOCcrZUkU_-JUJU3D#b-#`upS2(_I9Kx zlN8p-3^I)>bZDM5lCMwlDN?#1|gfh-D32Vq2R)p2fiEgf~KMOI~lZiAy3f zAtgP1eVTHe{ypSvpDM;7UFUTRq&jqNFq|4g57%kE(O*PAzNKjCSvhLOW=^eeyzuUm z${|Ft0a(P{baB*=z{R8Y%S(zz_YxvNnbg~3=<*w1r~xv|5dk0d-JagyA)-OsF`?+W zxwio4NQu_R?V)j;6$MNga~ab%KeQdpCrdGbRyaMX zFAuRo*p);70GGJ)flrUV^)Y~Mmmdt|PB-)7X#5eICJo?>E}~{wX`5hva>*e%o!mv} zQx5cWodaN{gX7%r^z`&{tfz}w@{x$83Z?dy7yulQ(>Y8_6NbdhEW_-bSdK}n69S7K z@!C@;-T9+b2~h>C!;l~6XVL|U3uf!lt0f?g9g5gOw|+Q<1JH3VqtO#$Z~&Y^3IiOT zu#qDFPDbOqfUv4@*xVZN*Ebc5|kxHs-?kC!z_MH2_@o>RXFpSi_j4doyhD9AjgOZ2J_n) ztv;#c3W69!MyWC~=Y(03C62eK_b?^(iDB^Rz0-o9tRffG)3G`QXpM zkjY8uEiLybgkv{Z-T|z(`YMB%S zZAgE+1D~`((udgWUG7ndo^?kJ3mtxIyJ(1^6P@FfEXkHvR>sD|h8MQ*$1b>>C=j+FfMoR*K}9?pOK^sqsLU+CwH7GSR7EpX9JVIBDn57$z*U4~fm$;e z_QFq>a)u3}Tjg9?*Y~1m)Ou*hzhpHg0emQnls1KJeG!oxmXe41WrWd01Ozv~pyKk( z7g<`m5GxOmEQ}4!a+i335Obcddca)A6H%R5b9efMY&hB83P)IqgZDAzy47(^5n* z7z+_LAq}250eLXpme_DFYB4FRHfKF$%2PmWz?Mp-3MA=PL0TtW^UHthbC%$-ep(pF ziENZ>Hu~_{rIsIfWKcr<*tm4kCY5p?F(JYMjW(VDut}SNZd(5q!jL(!F8$4@!~?-; zCE(G}lM31lRk|ZJ!haD{7+SYIJ^D@+P#aYXJq~yo#I!V^7k(s#H+jPr05dIQND}cP z!3tNtTy^Y-3&yuD0C}XRcYp{|3|P=sVB8k{^_tmDP$0T2YX~B(FufTDCGy8Tup;eK zg(8kcMJ<;&p-L8QAUGR5Y_wP!9UWzIWYmk8QTCH8ep9t^5Qurz51>be{cxhYM_)HY z%`(Rf`GK@h=b2 z{eB^VROwy@O&T>|j?BoY*Gm%%arqpq>x8=c@2HE1>Y7_wn#_j+bzfyjx?qkJ03wF6 z&)^i9zcevE;rH;6DN&nIJ+a>r5sUof!Ii~l9L=rhU(lQtE{#F zL=S1c5Rq*|MnS>=Aeb(kt~Ei10K37@C4G}sHeL;9VMavv+>wq1bPP~|;RVdxsBY=v z4h`-ZCnCw)cL7~A;BB&!OfU|Q^Hu^$Of|+3%OZhDFXNLFWDjg&LKBKTl#0xu+&m16 z-vFl_E3QZ(8a;$diq{v4gq&E|I?Su+dVBknGp{BFv(yM2@>%^s@&bG%NWviG7J5}Y{Jm;fO1lSQrj>Oge^q_HaqJzx`p;EVZd?q3sL-r z*bM?xTA=Dj3NT%dgtGZK<>jhsZxMutgN;_4ebgxj`RaT?{P5WALb8dlNrR6!%@hgb zTmxl2SHOru(ZasOX~zd1@?N5Lq>?u-Kpn`)ju zQgwm^M+0Ku(!h@&q@`O%8#Ym(@vHH{qot0~8crtN_gGTF0OZQ=stB%FlR3p4)V)Lqvt21U2t0=Z4Q)fi?sfYIHQT zcK1j}b5z22I>~+Xq{T#Mceg&|=Pzr7Kq5Fi%B4)YLqM~bZM{d|X;T&+O5(iVw4)fq zlObBzq{NHXIO;=CI1o$64DiE{wL>d~9n;TUl0y{xH4WCFRjKt|dUBT9W?AOLJGxPDFJ5eSP52Q5%JHL1=vk&xn=`bQoyhRT`XC^ZTS=S?G8UHO!5a z(v?)u1!4sX01h2(RxVC}*g*IMHUSpkpj21X@HK?APlADS41j>wu!E+Vu)2?@Pru7%0svE zKo1^bx)#)Ck~Tx;5gi;NkSn2m2Q-vXgiHbGatUaCw^*?YA*moG)kE57s0b~rAUIDO zNf2Z!ClERSUWe#bBtwn2Dg)nRQd_|Xwdqt{<7(f6R;syXiD70Y+y)x(_b9vQw8ldYE55Mo(^uljfr!LbF ziV`g?FzXORVM0g?zzH6pOHcqhGo)5#&qQz_O47ELF}R2r zq^B)a9?OGrs1QUUEfm^NzyU5v;fXD@!Rb~zY9koAQh^cF$ueFLgsmbjChRJDv4sMX zmM(3OT$03Ze;@{b54`t%_L?{AWLskG;0D5g(kNdstqBgl6npw&6$~gtb|`5D4?PSL z(zY*tTG0!MuBKJO0(z=!*yyAcTN7&Vbc2{j7NCSDLk%Op6^1w(J>c{__O3Pv!dy#0 zU{Y&^Ok~uC2*g&pDVIR#j9Xb%uAhJz^cz|5XlSGa-~dRaz!MyLbpV&*6$6X{!ZT}5 zH9RJl>lP!{mvvoG*q9EBy7KwY#Nrak z(~XsOs7baZl;8{Au}854SR0blCvq~;a*w0N)Pz3ZD>KNO&be-EYz#p=(>^{is^!4B zBuX^ndh#%lLoqQ5i(!~ot5#&Z0#H}Sp+CkhRcJt&@7jzS)87Xk0 zLvu7VCIG2{u__GE1tjmuhL=$QPx|^eF;7m6>q~nuM-1ePSyQPKg$o&3lq4Zh6H18I z;3Vq2rN8QBYjOYx4-gS3cx%z(L+B9Usq{+3cfYfO{HNZE2H!7993g(7!2ks%j5>u{ z4p2}PV(_Tdu+4dj(GcHgihdB7Gmk(tM363{L4v1c6eM&n7U^dsEE#QCHKp<*o_YWo zAJ?0XqK!IA@`U>qjuEJe)OkP~&VpD%lyu;x8&8rJBLa|g;ei3J2!&b34A`e>!pHRV zJr7VhA=XKO-x<~aIFO(KMrkaqH`HlD8L}QUV4vU^qKlwZDNME|mbS7%HKOW0I^lz& zE9aE%QcR;hg)l(gN*PW`?LIXmFtP#D>5+z|06uQ|!s$JSpz@6BHTYw?xF(Iw0>iDKn$TZQx zsDA|EX(&R`0JGkA#7OSt^zj3wx>~1YQlKO=q0rU^2qz3F9*7x*697*)ZR0@f7SQ=f z#;dFD85qsFhY%^LYk{zVpc(h#p`;8!DqFg(qeulR4rNz3DRy`gU zKvW-1P54Aq!ZTE!@C)&V0Jp?6DXNOhPIv&P3vPFs%+S_J2~^D(WsaFev)hVWpoEs~ z$xEOyM603Vb~c%YAD7YvDm_HB;0p4g$B-2kizzqdq~&wH#f^rIE<^CrwLcmKsxx5= zSf+ebm&~9oOySXJOOji&9cZOjfFeErC-1YDWF8bXM<~2R05N;u84`nl1@azGbY`VzxzalZzp`QQ|RUzM#TTdWH_2HoH0e zcuy`{IRHhA)!HHjQd>aGu2lKq5@CooJV2x>z@HMS)`QSSmeFtq!h=+0Ztc>72f)*% zjZUEQ&_>o|5QvNlf!NRu6al{$X@|ST zb(~j8=l}sgr-dF0l71J56=?{J!JIY(<`gg*Hd?xwaMMe%g-1H=PXYl)L*C>7k`$2( z*kVOpwGsiRMSUKF=`Hfa==wL5bpfxAS(8&NJWnpxOCd3;MB~h)cqHlXNytzDKBEkQ0O4`BGOOFX3q`MF20=rm1IXGRsjUFB+0ek* zk;{f3lXKOC;GGCLGdMg0*>ifKl*!5}<4PX{PBQ>v0JkYQ35jSJ1lOw7r!VxE!om*{ z_26DB3WP2#VTsu2!AaJ6D5XKOzZu49swvX*A;QrjVR=bfJ2^%OTpZ+wdB<9(zB@vz zTsO%M**H~6S>uC)mD{987N(}S=d=%6l}RH&NI*hhBLegWCvVg;?F@vWvW0>|S`>y& z?zs#?hX-bA1rF#E$EB%D%$E3b&*?;PBZ3I|U;qqN6a*9yMuAwYUGIL=MI|eShOHpg zTZY1EX)Pjf0D6!*8vY1sk{Y8BC25B6_|8`l?=o5esjy|JwzX``C5Zk2xCCSt7i7R; z!7v>=0A9OQl^A`{f`SDY@-D$v2pb4K&@x{VYTk7X5~3oslXP44hd-RqD?kZR;2vzy z)iab4=8Zkm6iXC{=J3QHtkY(QHaKln6*k(6yoW6ioJ?jYlt|T(&FFNM<(4TZvd~*$ z!Vi<-j2<|+UO-94B z(qfjjLc}u!SdUW!6mnp>hgA7N`XWQW>z1F6ody1HaU_LM~c5*y*({`c*2N%qTu3f@qJz?y;+94i!{F4Re0xiF(aVf#5bz$)Tw!|AOuGZcjp(GoH% zD@ALQ4ESYGstaOx#DbM_@2fZBlO8J(LErSEtCTcw{gXxiNu#b#eW?q|ySnw&Gs4^2 zdb*W2jEh;RCbx`C!q2wA*3j9dH@%4DgNSk~<4R{wPcI18-N$M9%?$tuMxmpG5d1J$ z-#??v!sKLkj}IdHU|jx;F5-Br^Nlqys4JXrY@{~Vcqg1z|6P;BD^Bxp4aVtmq!=61 z%k=mOUAXd-nSe4U*FG zgu-c6)7iMCT{mjvm9@rQ2qn)IxOYx2LWc>r!9lFTa`IYObOsU;E%|R;@>SeYrju&- zn!^+PzD7o`@*p}Z#fjw?xdCT9-&+rV))XT3tMp748dkj_4sWeweXr=+-RVzO|wBax0R^huCM*Y4-(wM zkRbs`4L>3PE`hf)giaTnp$cJ08%n~d-QYlYf(X~^!&C(d;j!~&yaCwUlnFh~p`ke50_KHAc2QX9 zc1%X?ODj01=bNcEPK7=` zNnwmj{!-ic*qFb&@Y007dB%UO23bG6WaeSwlFxCSBa5CSc)d}#_{K>4evM|d3N_0^W%`=*#onbVtDRTL0#jRU$DloG{lKw^i%D-&GDrk z3A3}adumb>4;>APQ6DwYn{XKJ?#7DV!{e&cp$u&}W?8KTR3$p~sbfFCw4jdNB#_N0 z6f}e6>I=e+1i$Om7k~~kf|#)XWvwyfr($p_B1|v}1$r3lvq1E`9>QsCqP!slHgbcc zk|r)WnX`U0OiWEMYYL4xIRP;ddRa#AO$q}tGJ}UHmFT3pP}eYoIh={n5+zJfz zsM>;=99AC$?oaK8DjuoMd~V(s2_(RU@XuW!NG@-2X;SZ|Lp_&9y=FytNHMB8^;Aww z>Mxlo7VK%Ry;!s%=nn`a#zg6b5Kr}6_2YG?DC9OHIYXHH~*@^K9F%?ycI@a-% z7GOfybUahIP1u-VPmrHjLmNY4%SFmW{@WR6zxUscr_AM>1mO}SB2)qK(>euVr~oA!3rPb{u+Y%_xBAZ9$tv zOT zQCQxilhJ?lWN!!Z9JEpzOsl<=3msZ?$&ZXR^cb)qR;p$?=Bt#r1zefjSB;tMkzfr~ zSTqOTV}&k3f>SY(Weg6maMGI2f90Z86?C8~3=sfFHNWh=+~5b?aTIf~MKf)>5eyQL zo|dQs)f{>%?vbJ}8}xKI?}kcz_b6Urs8F04TGf-1><3&;DaeZHcrFuMl$fCGN_Gjl z1X1E^w%?D)FCB5T3oxqhfs%}HXdt|4~)K)ZaenB zIlq)|u>`^(|NJ7FbD}&?PD~9A59J}5b}hjq2VHq9>-@w+nDs9I$w@tNPkzvY1`=t7 z>@rFqbgbkp?9FKjwX&EAttTOd5!Bvfu*3T879}*9P`vMu7}L^t>pg{CF;MZ&p$l6Xc&E zoKaks1&>`CDA+ZFE;Bd?4zY0zTr(AOxNV}8B)3)~DJ9QcLWyj{ke+PCujC;J6_t61 zNh(V03JPW+#N5J<3aJx=N&fpv%D=LQZ>f{ip2WRh$&2X6C6GiH3V36*90v)Gi45JR zO~ory25P zn!n_ME=rVxmLEVC?LR(5gWL|i@gGK~LT}DN5u~g{jiS66O->+s=Jj$ACMaDLWD?+s zZ><3RJwzz9jZV6zwt#d^8=Zy-;x@9 z&xWcj{9d8)1fuxu6nH4gw&yFGj2O`o<#EQNN z7JvZ=!iaA7xVO|JAMH`%_YMZY6Dzc$3)6FxN&x|^r*y%qEvYa>NdN{YAQ=jOC|O*= z@th$?E%E4wf-oxwVd*l|A&aU21U_}ronQ%=7dCBQHcJCbc0r#3OimPD{&5LJg2{$Q z)m29YfmXy~mLWhm3)z2rp0yA**=Sm?M_cs}KBNnhq{S{#2Z1hGebP)DH4L^=q+|qD zVi6@oI_jGlDJ;@W;YC{&2X~S+o9RX>I6OW=$f60NgGVYnrfM{vAfBOWsI~}3xnv9` zm-+-4`v3KHuWNGTNOC~Cd7b&8Z?$^=$6QTMlSQ_UnITZg)=JJK(&27?fddhN$XmVs z4cZm?o!B+R$*g%lXKTJ1rX$JNY7y9F#t+QbYnRUfPEES5TX?V8SN{)bvBMCE4I-zIJpS{?c8i88Dj@#{u0^Urhq|WqMAyS7x*oHljjzk&&#u zDr6;T|0Y})-ENlxKNI6q0p4<=Ii9!Yz)Re|EiXwD6nVlHpFw3>O86%N`ta@ho2_7k zc24~arAr^hN=m-Vrx9(K19Zup;*hLGHl1I;e6fs$$?GTif_);=KPf~=LaUSWNUoYm zDR2AaQ>-q2AOG=>f8Jp#iAVpQ?q>NU)=_lsh)R=7I3JP!nH@7#O#;EZ_4h+C+kQ!4 zhDI6EMZ-371+WyQ4$3J>wlR!K}QW1{%@+Et8d%v4G z+KteNiFSDM<)d5W8Ky4hh;}2@PUY-8c?#50D5aw7oFdBhulxmB+8veJc_7L3bk>e- zT}gv>ww}y+Y@f>D(fHvJ?eyrjF0k0ZN1}4-UvstSNSI1ke z;5UzFP!k$A#xm?)x&5|)%e;nX73q+h>tgWLKim4*j-;_n7M)7>{TO-936rDn&1XDH z^j?6==Vz~6KN&XAzDPiBPCO?MhE#mV;7MS2JC#Q}^H=IHlZIAzwo4dONJ@Q#=e0L$ zmEc2u3c3S~O+JuwPF!=_<0AN5fiA975c$NWueas-DJ41NXgSxSKhK&xb0W%O>{Zs5 z!N7j}mEYL%09Tfck*ix|qz?OR{ccW%3D?fE zgUF=uaPhBHKfmoqi~=l0@Emk;SRQzFBXNMNTOVgF4TIvVME)uq{#p%l31B%h8vxdS zDlOHL!K@|UpwP_Y<-K&VFKq2eMneu9^#Sm9S+uGLxry}61J6uFw6F~ z^D~;O;nz++Tav5NoqYU7nuYlsGO+9vg4ErX-J;K5$=R2YVER@}T?d0UWvtfa5X}kH ztu312oa^3plFJl(hP>|On`d)-WZjqhDULm!e5;$h0JUY4KDT_MFp~$?1D}40dU@qh+HV&BIl-J($7F z!sXL_DzdhAtwrNTs5?KM%as_wtj>z6`RI`w8pABLoB7(fEogiUYkbO&dlsdZ?Ni*) z!MCeL!;F88vX)T0E`FI@WNaR~PA-OLE#8bc$$&prNsKDPe9tG1DVHtD^NqKJp4?$` zKJuP@MMlT2(+ctNo2^?8*S?g8`nqh77htaP_D&Akg^KOZe01YO{{E=$s+5^Xw#gsc zpJd4$LbJ_h?pZ9ftFCRP-L><@J|b_pGWql=A4-u>AIhFUZVKR4!0zpHKA@j@=e}pc zoHvC=JWoX;OI}$8B*PrcuKffNlSoYZgpJOdWu?^x-nin>hzbxl<2P4}sIXtZ z-oFbw4|N_2aN})mA8hy)M1X(&>wgpSKsW$O?VckUqpgz^lM>SqiLTw903maXS>Sf} zFnxC-pU9UwB&{uiNX)+5(LN^>^r3GoK!Sb#lv$YDMZx!dnEi+CswUwF#=~4yoydW07(}%+z+gy*M0oAGQqs;9dE+k13LLW5BqFA0 zN0Qb0U_9j){q6rU`*S-#Xii?+E5taNbYGqxp$g!p;tWF|@pyKk;2?nCzxR6%l^;K; zo9XIBL=A*;Yb8Tnn1Xx4+PoZ#^Bz&zz?az=U#y-Pd;rmA)7$bruM4DYfHXkC<@hAW{$g8xgy$R+ zyajb?b?S^k7zcajB<7R9GV`!5!{Ca%c!VDqGkn_C7Bg)R_DE)E%-TuP^er`qnQJk< zNA(+Bx_m=QU|WUwDIhNB$^qNcQ=RBl>AD&lenw4IE322|>Py|GA%L`MlArO7?WvW7 z=daDcwCS{q*U338=4s1><^k<653+^;V+dEJD@2(0(mhp$M3@PUMi&!7Qh)MEt)iXz zY_A^-8uF^N1Ec@%r*ZP>ceHMv=1~rnlN>L~o@zJhV6k}_HX3s=7%)o}U#6~VGM;?Q zg6g7RUi{3EIuYCAX`P|$3qN$>0o3#vb0e!HAAOJqM>_z?+MGA>TU%LJjq!3(uXr9# z2;I%u0J^WLF(ch88FWx_gmgA`Sag@Fw8w+cC@+DyT(WrY!1JF z&ntBTC8I2!{#nP)mllBdTW-5^=y3bNQ-4wd`rEgB8t3EhpKN05TJKd{ zR&Arz32z)3QAf$G1O$|1%aYw&^UkaOz3I`Y@0T7iJwL(uSwR6 zmeuZuD%@~5PY&CWlqO_5p#;X?Bu5>+|2t~lkBEUG|He=W)T+imiFUCrKL&oZu~(i2 z)~#Vyf(IdODJJtT+gWL6xNfy!s><;~PKYooBURH27!}#8*E8>!39q)i#Bx9O2xBn} zw>ldGo{CUbTc1dG$aTr_qZsC3c`k%8jIBUgRJ&6*0I(LdZ_4M^?o1`0&D>W0EvkC* zA9mxMImQw6`HOq?g!|GTixj_sPKMUgmwdyd`K(VRbbkZ19unG}tHN`f*AWeVH{RI; z)Z;_^9Je)X+8cHJ1H85w-8047*^)0k1DtlSVQ#w$j9)OAER6IgIN%A3%W1jKk@HZK zcS(@VZML*Rk0A*^#fH^WQ)*J5_$haMdRWeBpNJz6Lu|4}v}JH2F4k)T8#tN@;i(25 zUyD1w(7+by6&9dbc@w*a$g@%}Tprg%vA$6 z^@qo-JIQS?Mk|5WE*^u(wYtf$G~~1xMm=kd*W)Bl=scCVnX|GugM8@m6Z+5peE-$U zUv~ClC?TL>fBclinKb*C9XlO*K{a9$U4}R5IT@pUJ%lEFM%DatJV%vxbo!-4sJxnz z_|N8}hGR&WXU-l!SEak*Mz{TvB;`M%|+{N0(JxCK?5 zz6sD{jOVxh68t{rokLe_yZj!9!lfkrHXiMlFS*a4%C!kiUIVD_-@ffb)imdOz4{+2&k%1Hu!`wdw09uMf!i$)P6TA<;lz`(*_b66C)6JACabS6Qf+jJ)tBeRnlKKGz3-N| zyOMfFQ2;GI$Pd4N&YfH8!pYi&OAd=$=UVvfbkXO}`PHLmMq+L_+#)bSOwD6EKjiLM zb{T&4Kl6;Uq1h&}NVERU{1bgx)SnW1KCaf!M9n;t60^ud+-jR|h+AEWZOS_DgxDBz zNLxs#7N->BM;+br%!<+i5F+8wRGz0Y1%}6mLz8AlHgM`g0{)yW;cIvpwCHmPgKt#> z#w=p*Y7$3ni%b;JJ(wEKXUikm_R(I+NZ#Co(cVw8}+=M^dn!$0p6>Q zN$#m0KBhPR=Imcwv&$LH(CW4+fSNPSBW6?8^&MXZ+neB{| z;hckdw4yz&CCWKi>ZBl$W@>ot)^NS$K3TwwB8N}Di8MbU7@brmQA3af05OhtZ31=V zv1np7Y9Z?&&kr4w3?hmQdzthMFow~h^br73fo3#snE2m`uA$-LM#lNhZ82|IvnYwQAq2<_-Q#)3i-8`2_iRSbE3&=?;v!WbO*s zS~^Q*R#d=G&?CHbh1YYCT_H?05q7f3^MWI1(RMBzCa#%T%mx$5MIJw;burp8H`Zu8 z;ksj9VLbdzI|czP5XnqNlN-DCR&_}2s8*WLBweNpXGE5FF4NWLCxfUK&r z!Thh6oqaOCG&S1PrW^mr9M5eCkbjlIZ_Giym@n@u!D9&HXlFW`wZ67$7Urbx2?Cza z_2E0bco=huHvawVT14-{hwvAi`No*(iAtou|NPAs2|xd5#7_drt@+S8``{-Z;YTc} zYWF_sIUN7m#{W}_+mg)rw1lH;HD;8YN}_o%;sf)%r11;E6LOt(JSUp`R##5_LNB_E z(!fr?g4=L^`kbRA8;Gp3Ci^qj*zCWPEzIVy)zOc_A5hw>_n1m$!=Rf~xOsw`v*=cko17Kvb#Z(o-wwn`oN9mI9 zHh|IeNmjc~%Jl2ICH$z{7;;QN?Fxj~PClWQq-8y6V=kb0TLhl%d-7EQ&f#q|YZbua zqN(5obZ64J&ZIB&Yd!&;k0hSBxsUnz^N&CN*oaU}I?V4Kj_z$QfRoXcDE?djBG|Mu z!ORdN2RwqGtHEAM5n6ZJxa*e(NMG(k{g9jPje;UB!JsQ?Yb;6I!|++50nn*EZTBnFLZ%(KKd}mu>Owye3l3~w z4N(jUE7u!APg4zB$Ip=!ZztZVEhlqDqFZ_E+X_$Ve|LK+1^JxJu&NYoL*AwkMoWSu zFco@yW>CXCtuz#b-1y!Ez{R%L9qQo&-k`?!yfH@Gq#j*KcO$y0A(KgNNRr#KA}_ag!=e?E&O>Qg%; zhPRakRUaCE9gZfc{uE(6;Y~?bTW2Ajry7!EJZA0uAaY>BRSaD}_8wM%CFgqNsB2~Z;J)A4*&NB%fRc-rxEI{=}s>Rlc) z7)k~u{N#!8LX(^4X(7|CEAz=QmaOMnlX&LwhFiB55f>90U{bN0(3$s~J)FREq-3zd zq?kY5TIAxsRDU@_pUguU$|>oX3dTfuk-C>3qaDozO(@plI`A)e`I{8i%uM%#Cm-P_ zeC>|!**?hYO*@rXwAp7h=p+D_{{A_8?Z)LvfOJCUt^8*NjVSDQ#xrrpp?cpLvjk3%$J1bZrAQ+RE0y49bq=SVCLp^w7`bsDWi?+iWt z&^(kqv?7m30|>2s%@(g6W;Dr#UCD%F&?X5ppSqWa-xzBc47&2ytOzrPU4uIs6vLEY zLx_2skc?)sK&X@W*QfW_NPgtS+SvZkSW&FLfB$CpZT1G12c+{?ej+m$)Zf3q+w)TXO|%0ZQ7&n%W7 zFkrbenOfY~KXVOJIYCHn+S!uFK@Da7NZv_zX_U#J4AxnqZey4lwPg4OMfH}69+~^N z>I;_WyrcyDl&F}%Zf*dhs7jEVruqNT?`+gnrf+ALTvML6cl#=M2r7Wb=faVX8MT|x z5-^;l0nBPJ?Oe?R9$^6LAb@GtO{4%L#s-OWLtJLTGHQd}6b!#OW7w9K^&J2@N{dYgY%k(Uyv)O1cMD$mgB`AqcWcLY!O zq=83xk_x4YXPEAzjSy47VT7pizo8l4l3uI7@vp-{7eDz@!o2#?UOCuBA`|^;xb)Z( z4zI0>;YT&9(Q$>@bf(io8{>$GoR+v}-70@c?A3Et+VC#}M6be`WO+O^4`X1^HJN09 zMSs=K)y-kZOCy@C(r0F#@oH zue`d$tbOXBcg}&=WXMUz^jwEB)>h{C|M-vpK|6Y12M;k7xU&&on)g*zcX^R)UGbE5 z07STu2y?P&#U~sfw*6*RqOU7t^t})iH(RPZ<*)6AF;{Sy6RYKjNxx)$oebctsw;>( zP?C@0D=1mD!?*{W=a7}?JS3%* zBr`=Gu7EP0(OC&v&zD~z1>G1s{2=62rIy$MW}C%%iUjl6h8WfG6#vfAQ_OcEKCYj# zkKd$dZ5s9p-`B5Sbzv^-da#?E+jU3H{A?~qOvuXyX1F>tv7zE_V1BIPfVGC&m#%Ad zg6hs{?c5rLmNrNACuh{WKJw-3m+sH<%l*vdsWl>PkWa$e*p=pF%;X&%e6E*Bcb^8C zx8aw=Bqnu2=HxXBk&r(O?OyqaOei;C8)cnD-YMeq3-A-P0!>J4};2?85(up#ki%v7)Zx`O=cIqB|Cz8k%NlV~FvX z1&UQRd??AcXj`IjK)DmbXjUWq^)mvv3{@>cw@?Ukt+XUsM2N&HGV;Zp{2HQbHJ^jc z1Lo4-zd`HNk$FsidjF0fOVxFy#@#smznKZBa9Dk?=p1Ccu?E8pDs{o0z zOft-buks1U!(0i><&$R*yxSu3@iRojuXPECWgsUmx_)3vcl4nxi($0z#?E(w<*GZ> z)3GDuJ-hbcUGw@vb$k=AnAxVc4w<-kOEJkUQIhep1Ma0iCTGAcw;(i0zr)OrO-GO2 zcz^r;_UG3x`Q4cB-?P=nNap*u@8%0Ha+mcT&(Gu&JB)eW)Js5!dPDJvVAfWc96F!6 z`v&m&QZE`tXojjcJSf6kKs^K?AIwx}$V`4;QcbyDUIwPY%g78WZGaWd14cU@o@Xu6 z#nURqV1(MdJf8x`vlV8!(Ar2%tDSQsF{+spPKDOhj%+KntzKq?5eJq^PwQuB*A-@C z|I#1wUxxEG@Z;HYsB(sxK|+8BdCF1`Qp>=pHj0It`7NW?Ft_l?;g`>X(B|mK)W`5q zg)nHIX|*@Rc$o3C4gY*w!%@Pn4ptV?kCi)@nHmcD{39Z*H838toYw^#O_CMUUl3Y1 z8x=!naen*Z)NMPSPrIjdOya;mdNOe=cMPV9H~1Aw){Ft_sRm8mc}35l7Hd=o8BWI6 zasfFDiJ#Z!`bCs}Y&S)bj8k~79?w|HY+dzl+IQt=LFQZ0`F#JbM0lzd0f~r5a;wz&GEG19^6B#@wHBLUkCsefPlOqXaeVpm znV~?u)n|yG&*VLQ5IPt6FRldK_RE|}PVM~xN45fq58Rh*laKLsd&38-1CWB9H20N% zeEa_P`AaTBZ*MtxDikF}>vwrS+RYPgFV0Xr1(ZfzWwM-S>sjU>{`~XLGRb+j90e!; z%>{7v;kPBK6U``c-irV2k3aqpj-PMe{;Xj}`mcZe;b6qhd2H&0Hxh)&mtq?iE#dEP z{j(qs5~I5-$70ERTEuDqj5f2?#YUx`Z>HB8=w;ijScNGL6Rj@)^SOM`glNeOU^w&N zp|Q<2BCG2|KK-=><^-e5N*7a?@yWxO0ebq2TasnM?P3{OOP&?pf@P$%R2*nQ{C{he z(1Sdi3EnoXxxG27=p=@T>z^qm1oAHxV^ilSqd0})BvH*yl9G6`$z4E>_wzfgk>+pL zrsiVm)hKyH_1wfJp~ss9oKlwX!ysg3%s78>v( zTdqi)OFhR`ryX6-<8OO~f76cQ?HLr}+C!WP+fCsLO!pCLmp=h|cUUJ=X}=$==h%p%)-spYx_zh=w|iGT-6wK`2hr)aNSON&ZraKG|)^& z(`qN&VzBnea#=lcm|b>HK8Q4iFCTm*900$mUptBR)f|tOp6*3PdY%p#22GYQ&loY} zmtT9WCb`U1Xbe+A%#(=ofJ}6V_fp6)2WZRgOtFW!5(bM@4n0_2X$gUuoz;O=A0njKUVJBQ&l%!?q07CC$|sL!4vsYPxz7K2X(H$1O0LPj7Y{k= zibO^{buZ7BNRoD-#`Qx(Ch0Sxi6d`)LXYZ<`jry!LIQhE8Tp~p5EoW zS6LO7e@3w-w8WGD&-`3EH_9lhM9+Rdmuse__>8?8<-sMXt~uq zg%_OppMQS412mkuMKwI3`*Hs)s)e9!S%P6T+pk~0D)<1Cj2R4(EJ;!D>NYumO`%xx zkEC^eDk-=9`P+(7I%xpsNIGwu@HTT2-IhK4++uF%t%T*Q9kQWPQfW#Jb_vYtHS>YT z*C?0@bE#fQCty*d9V046<@sGw$BCl78EPL7q49&scE8KiLx5Gl!z7#9YG-m=^yFw$ zn@O1%gKnWXkFZCA9f1mqM>4Jdgrgt5$$?@rt97-*l`}ZH`F0sJe*M)C_6)m@>*ZI=rWcYUZ-V_`vKBRPVQGb#N?-Yzl!u8GElACH{ z9Nv?TymQFq4;z2kf~WoQ^ZR|b6M%4XG-h?6nxsfR!^B||xRneha)MJaT!gLU0X#g4 zO@(IGVfd}LsYrnMjDwcxvC5IATL9bkLeqi~ql;e`O{GP{>#m(#uMT23H-#OO3e&!N z(w%%X57QNSwEUpep*|OM+Jr#2fZDp^p@=6LLNq66D)h<+_u^zigrEN#g(T4biyz^a zuogeST0(%Op*tEsTQq+19HBV~UNL$0|LNW%byn5CgtNw$hL%tlUt}9{`8Yl+BTX;uL9fG{MJuZ{O= zwb#noNylh)XO5W(qk-pn!U3v1^Fof^{|4=Ezx^Maw3c?z-J6I20000 Date: Tue, 29 Jan 2019 22:56:44 +0000 Subject: [PATCH 27/98] Merged PR 14041: Fix typo Small typo --- .../deployment/windows-10-enterprise-subscription-activation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-10-enterprise-subscription-activation.md b/windows/deployment/windows-10-enterprise-subscription-activation.md index d10034c4f5..73593356e4 100644 --- a/windows/deployment/windows-10-enterprise-subscription-activation.md +++ b/windows/deployment/windows-10-enterprise-subscription-activation.md @@ -64,7 +64,7 @@ For Microsoft customers with Enterprise Agreements (EA) or Microsoft Products & - Devices must be Azure AD-joined or Active Directory joined with Azure AD Connect. Workgroup-joined devices are not supported. >[!NOTE] - >In issue has been identified with Hybrid Azure AD joined devices that have enabled [multi-factor authentication](https://docs.microsoft.com/azure/active-directory/authentication/howto-mfa-getstarted) (MFA). If a user signs into a device using their Active Directory account and MFA is enabled, the device will not successfully upgrade to their Windows Enterprise subscription. To resolve this issue, the user must either sign in with an Azure Active Directory account, or you must disable MFA for this user during the 30-day polling period and renewal. + >An issue has been identified with Hybrid Azure AD joined devices that have enabled [multi-factor authentication](https://docs.microsoft.com/azure/active-directory/authentication/howto-mfa-getstarted) (MFA). If a user signs into a device using their Active Directory account and MFA is enabled, the device will not successfully upgrade to their Windows Enterprise subscription. To resolve this issue, the user must either sign in with an Azure Active Directory account, or you must disable MFA for this user during the 30-day polling period and renewal. For Microsoft customers that do not have EA or MPSA, you can obtain Windows 10 Enterprise E3 or E5 through a cloud solution provider (CSP). Identity management and device requirements are the same when you use CSP to manage licenses, with the exception that Windows 10 Enterprise E3 is also available through CSP to devices running Windows 10, version 1607. For more information about obtaining Windows 10 Enterprise E3 through your CSP, see [Windows 10 Enterprise E3 in CSP](windows-10-enterprise-e3-overview.md). From 9f543b20ba00e81ccb2ad9d6650c881971586633 Mon Sep 17 00:00:00 2001 From: Brent Kendall Date: Tue, 29 Jan 2019 16:34:41 -0800 Subject: [PATCH 28/98] Added more detail about removing Delegated Admin Permissions Added more detail about removing Delegated Admin Permissions --- windows/deployment/windows-autopilot/registration-auth.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/deployment/windows-autopilot/registration-auth.md b/windows/deployment/windows-autopilot/registration-auth.md index e795ff5f77..e47d792388 100644 --- a/windows/deployment/windows-autopilot/registration-auth.md +++ b/windows/deployment/windows-autopilot/registration-auth.md @@ -39,6 +39,7 @@ For a CSP to register Windows Autopilot devices on behalf of a customer, the cus ![Request a reseller relationship](images/csp1.png) - Select the checkbox indicating whether or not you want delegated admin rights: ![Delegated rights](images/csp2.png) + - NOTE: Depending on your partner, they might request Delegated Admin Permissions (DAP) when requesting this consent. You should ask them to use the newer DAP-free process (shown in tihs document) if possible. If not, you can easily remove their DAP status either from Microsoft Store for Business or the Office 365 admin portal: https://docs.microsoft.com/en-us/partner-center/customers_revoke_admin_privileges - Send the template above to the customer via email. 2. Customer with global administrator privileges in Microsoft Store for Business (MSfB) clicks the link in the body of the email once they receive it from the CSP, which takes them directly to the following MSfB page: From f1c4d576fe4e979fe2ffdb35e2d7a12cdc04e4c2 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 30 Jan 2019 14:01:53 -0800 Subject: [PATCH 29/98] add link to blog --- .../information-protection-in-windows-config.md | 3 +++ .../information-protection-in-windows-overview.md | 3 +++ 2 files changed, 6 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-config.md b/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-config.md index b0644db04c..2cf93b08b3 100644 --- a/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-config.md +++ b/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-config.md @@ -21,6 +21,9 @@ ms.date: 12/05/2018 Learn how you can use Windows Defender ATP to expand the coverage of Windows Information Protection (WIP) to protect files based on their label, regardless of their origin. +>[!TIP] +> Read our blog post about how [Windows Defender ATP integrates with Microsoft Information Protection to discover, protect, and monidtor sensitive data on Windows devices](https://cloudblogs.microsoft.com/microsoftsecure/2019/01/17/windows-defender-atp-integrates-with-microsoft-information-protection-to-discover-protect-and-monitor-sensitive-data-on-windows-devices/). + ## Prerequisites - Endpoints need to be on Windows 10, version 1809 or later - You'll need the appropriate license to leverage the Windows Defender ATP and Azure Information Protection integration diff --git a/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-overview.md b/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-overview.md index b71095b5fc..2142a70464 100644 --- a/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-overview.md +++ b/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-overview.md @@ -24,6 +24,9 @@ Information protection is an integral part of Microsoft 365 Enterprise suite, pr Windows Defender ATP is seamlessly integrated in Microsoft Threat Protection to provide a complete and comprehensive data loss prevention (DLP) solution for Windows devices. This solution is delivered and managed as part of the unified Microsoft 365 information protection suite. +>[!TIP] +> Read our blog post about how [Windows Defender ATP integrates with Microsoft Information Protection to discover, protect, and monidtor sensitive data on Windows devices](https://cloudblogs.microsoft.com/microsoftsecure/2019/01/17/windows-defender-atp-integrates-with-microsoft-information-protection-to-discover-protect-and-monitor-sensitive-data-on-windows-devices/). + Windows Defender ATP applies two methods to discover and protect data: - **Data discovery** - Identify sensitive data on Windows devices at risk From 1880c062d32d72fd0aa0ccdbd8ebd56be6e4d9f8 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Wed, 30 Jan 2019 14:51:57 -0800 Subject: [PATCH 30/98] Update windows-autopilot-and-surface-devices.md --- devices/surface/windows-autopilot-and-surface-devices.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface/windows-autopilot-and-surface-devices.md b/devices/surface/windows-autopilot-and-surface-devices.md index 53f8aa80d0..08390d3c46 100644 --- a/devices/surface/windows-autopilot-and-surface-devices.md +++ b/devices/surface/windows-autopilot-and-surface-devices.md @@ -52,6 +52,6 @@ Enrolling Surface devices in Windows Autopilot at the time of purchase is a capa When you purchase Surface devices from a Surface partner enabled for Windows Autopilot, your new devices can be enrolled in your Windows Autopilot deployment for you by the partner. Surface partners enabled for Windows Autopilot include: -- [SHI](https://www.shi.com/?reseller=shi) +- [SHI](https://www.shi.com/Surface) - [Insight](https://www.insight.com/en_US/buy/partner/microsoft/surface/windows-autopilot.html) - [Atea](https://www.atea.com/) From bf8e3bbc2df1c42c906a51112675d41b21fec28a Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Wed, 30 Jan 2019 23:56:18 +0000 Subject: [PATCH 31/98] Merged PR 14065: Updated manage-windows-1809-endpoints.md Updated manage-windows-1809-endpoints.md --- windows/privacy/manage-windows-1809-endpoints.md | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/windows/privacy/manage-windows-1809-endpoints.md b/windows/privacy/manage-windows-1809-endpoints.md index 54dc118d49..7c645311a6 100644 --- a/windows/privacy/manage-windows-1809-endpoints.md +++ b/windows/privacy/manage-windows-1809-endpoints.md @@ -1,5 +1,5 @@ --- -title: Connection endpoints for Windows 10, version 1803 +title: Connection endpoints for Windows 10, version 1809 description: Explains what Windows 10 endpoints are used for, how to turn off traffic to them, and the impact. keywords: privacy, manage connections to Microsoft, Windows 10, Windows Server 2016 ms.prod: w10 @@ -511,13 +511,15 @@ If you disable this endpoint, Windows Defender won't be able to update its malwa ## Other Windows 10 editions -To view endpoints for other versions of Windows 10 enterprise, see: -- [Manage connection endpoints for Windows 10, version 1709](manage-windows-1709-endpoints.md) +To view endpoints for other versions of Windows 10 Enterprise, see: - [Manage connection endpoints for Windows 10, version 1803](manage-windows-1803-endpoints.md) +- [Manage connection endpoints for Windows 10, version 1709](manage-windows-1709-endpoints.md) To view endpoints for non-Enterprise Windows 10 editions, see: -- [Windows 10, version 1709, connection endpoints for non-Enterprise editions](windows-endpoints-1709-non-enterprise-editions.md) +- [Windows 10, version 1809, connection endpoints for non-Enterprise editions](windows-endpoints-1809-non-enterprise-editions.md) - [Windows 10, version 1803, connection endpoints for non-Enterprise editions](windows-endpoints-1803-non-enterprise-editions.md) +- [Windows 10, version 1709, connection endpoints for non-Enterprise editions](windows-endpoints-1709-non-enterprise-editions.md) + ## Related links From 90031ad7ab94969ce45d66fb9a2c0008f0c71b07 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 31 Jan 2019 00:39:32 +0000 Subject: [PATCH 32/98] Updated information-protection-in-windows-config.md --- .../information-protection-in-windows-config.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-config.md b/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-config.md index 2cf93b08b3..9fe262cf64 100644 --- a/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-config.md +++ b/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-config.md @@ -22,7 +22,7 @@ ms.date: 12/05/2018 Learn how you can use Windows Defender ATP to expand the coverage of Windows Information Protection (WIP) to protect files based on their label, regardless of their origin. >[!TIP] -> Read our blog post about how [Windows Defender ATP integrates with Microsoft Information Protection to discover, protect, and monidtor sensitive data on Windows devices](https://cloudblogs.microsoft.com/microsoftsecure/2019/01/17/windows-defender-atp-integrates-with-microsoft-information-protection-to-discover-protect-and-monitor-sensitive-data-on-windows-devices/). +> Read our blog post about how [Windows Defender ATP integrates with Microsoft Information Protection to discover, protect, and monitor sensitive data on Windows devices](https://cloudblogs.microsoft.com/microsoftsecure/2019/01/17/windows-defender-atp-integrates-with-microsoft-information-protection-to-discover-protect-and-monitor-sensitive-data-on-windows-devices/). ## Prerequisites - Endpoints need to be on Windows 10, version 1809 or later From 187fb061645d28af2eacdbc9f8a5986a9d024408 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 31 Jan 2019 00:40:01 +0000 Subject: [PATCH 33/98] Updated information-protection-in-windows-overview.md --- .../information-protection-in-windows-overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-overview.md b/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-overview.md index 2142a70464..0d959c516c 100644 --- a/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-overview.md +++ b/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-overview.md @@ -25,7 +25,7 @@ Information protection is an integral part of Microsoft 365 Enterprise suite, pr Windows Defender ATP is seamlessly integrated in Microsoft Threat Protection to provide a complete and comprehensive data loss prevention (DLP) solution for Windows devices. This solution is delivered and managed as part of the unified Microsoft 365 information protection suite. >[!TIP] -> Read our blog post about how [Windows Defender ATP integrates with Microsoft Information Protection to discover, protect, and monidtor sensitive data on Windows devices](https://cloudblogs.microsoft.com/microsoftsecure/2019/01/17/windows-defender-atp-integrates-with-microsoft-information-protection-to-discover-protect-and-monitor-sensitive-data-on-windows-devices/). +> Read our blog post about how [Windows Defender ATP integrates with Microsoft Information Protection to discover, protect, and monitor sensitive data on Windows devices](https://cloudblogs.microsoft.com/microsoftsecure/2019/01/17/windows-defender-atp-integrates-with-microsoft-information-protection-to-discover-protect-and-monitor-sensitive-data-on-windows-devices/). Windows Defender ATP applies two methods to discover and protect data: From 44938228d2c22cdd81ef74fec8a5ed6d2c4d7f90 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Thu, 31 Jan 2019 00:55:05 +0000 Subject: [PATCH 34/98] Merged PR 14066: Public repo merges Adding public repo merges --- .../client-management/mdm/policy-csp-controlpolicyconflict.md | 2 +- windows/deployment/windows-autopilot/registration-auth.md | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-controlpolicyconflict.md b/windows/client-management/mdm/policy-csp-controlpolicyconflict.md index 5369a3d16d..f6626284ef 100644 --- a/windows/client-management/mdm/policy-csp-controlpolicyconflict.md +++ b/windows/client-management/mdm/policy-csp-controlpolicyconflict.md @@ -68,7 +68,7 @@ Added in Windows 10, version 1803. This policy allows the IT admin to control wh > MDMWinsOverGP only applies to policies in Policy CSP. It does not apply to other MDM settings with equivalent GP settings that are defined on other configuration service providers. This policy is used to ensure that MDM policy wins over GP when same setting is set by both GP and MDM channel. The default value is 0. The MDM policies in Policy CSP will behave as described if this policy value is set 1. -Note: This policy doesn’t support Delete command. This policy doesn’t support setting the value to be 0 again after it was previously set 1. In Windows 10, version 1809, Delete command and setting the value to be 0 again if it was previously set to 1 will be supported. +Note: This policy doesn’t support the Delete command and doesn’t support setting the value to 0 again after it was previously set to 1. Windows 10 version 1809 will support using the Delete command to set the value to 0 again, if it was previously set to 1. The following list shows the supported values: diff --git a/windows/deployment/windows-autopilot/registration-auth.md b/windows/deployment/windows-autopilot/registration-auth.md index e795ff5f77..e47d792388 100644 --- a/windows/deployment/windows-autopilot/registration-auth.md +++ b/windows/deployment/windows-autopilot/registration-auth.md @@ -39,6 +39,7 @@ For a CSP to register Windows Autopilot devices on behalf of a customer, the cus ![Request a reseller relationship](images/csp1.png) - Select the checkbox indicating whether or not you want delegated admin rights: ![Delegated rights](images/csp2.png) + - NOTE: Depending on your partner, they might request Delegated Admin Permissions (DAP) when requesting this consent. You should ask them to use the newer DAP-free process (shown in tihs document) if possible. If not, you can easily remove their DAP status either from Microsoft Store for Business or the Office 365 admin portal: https://docs.microsoft.com/en-us/partner-center/customers_revoke_admin_privileges - Send the template above to the customer via email. 2. Customer with global administrator privileges in Microsoft Store for Business (MSfB) clicks the link in the body of the email once they receive it from the CSP, which takes them directly to the following MSfB page: From 194c8b06429e95802e28a8201f7e56123c005937 Mon Sep 17 00:00:00 2001 From: Andrea Bichsel <35236577+andreabichsel@users.noreply.github.com> Date: Wed, 30 Jan 2019 17:08:41 -0800 Subject: [PATCH 35/98] Changed signature and definition to Security intelligence where it made sense. --- ...anage-settings-with-mdm-for-surface-hub.md | 2 +- .../deploy-windows-10-in-a-school-district.md | 4 +-- .../windows/deploy-windows-10-in-a-school.md | 4 +-- .../intelligence/criteria.md | 2 +- .../intelligence/developer-info.md | 2 +- .../intelligence/developer-resources.md | 6 ++-- .../intelligence/submission-guide.md | 2 +- .../intelligence/virus-initiative-criteria.md | 2 +- ...ne-arguments-windows-defender-antivirus.md | 12 ++++---- ...-connections-windows-defender-antivirus.md | 8 ++--- ...r-exclusions-windows-defender-antivirus.md | 2 +- ...anage-report-windows-defender-antivirus.md | 2 +- ...ployment-vdi-windows-defender-antivirus.md | 10 +++---- ...d-protection-windows-defender-antivirus.md | 2 +- ...ed-endpoints-windows-defender-antivirus.md | 4 +-- ...tion-updates-windows-defender-antivirus.md | 4 +-- ...es-baselines-windows-defender-antivirus.md | 2 +- ...-devices-vms-windows-defender-antivirus.md | 6 ++-- .../windows-defender-antivirus/oldTOC.md | 2 +- ...tch-up-scans-windows-defender-antivirus.md | 2 +- ...ection-level-windows-defender-antivirus.md | 2 +- ...group-policy-windows-defender-antivirus.md | 30 +++++++++---------- ...hell-cmdlets-windows-defender-antivirus.md | 2 +- ...d-protection-windows-defender-antivirus.md | 4 +-- ...indows-defender-antivirus-compatibility.md | 2 +- ...fender-antivirus-on-windows-server-2016.md | 20 ++++++------- .../windows-defender-offline.md | 2 +- ...dows-defender-security-center-antivirus.md | 4 +-- .../windows-defender-atp/TOC.md | 2 +- ...ows-defender-advanced-threat-protection.md | 2 +- ...ows-defender-advanced-threat-protection.md | 2 +- ...ows-defender-advanced-threat-protection.md | 4 +-- ...ows-defender-advanced-threat-protection.md | 2 +- .../attack-surface-reduction-exploit-guard.md | 2 +- 34 files changed, 80 insertions(+), 80 deletions(-) diff --git a/devices/surface-hub/manage-settings-with-mdm-for-surface-hub.md b/devices/surface-hub/manage-settings-with-mdm-for-surface-hub.md index 0771aab258..65c471f4a1 100644 --- a/devices/surface-hub/manage-settings-with-mdm-for-surface-hub.md +++ b/devices/surface-hub/manage-settings-with-mdm-for-surface-hub.md @@ -132,7 +132,7 @@ The following tables include info on Windows 10 settings that have been validate | Setting | Details | CSP reference | Supported with
Intune? | Supported with
Configuration Manager? | Supported with
SyncML\*? | | --- | --- | --- |---- | --- | --- | | Defender policies | Use to configure various Defender settings, including a scheduled scan time. | Defender/*``*
See [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx) | Yes
[Use a custom policy.](#example-intune) | Yes.
[Use a custom setting.](#example-sccm) | Yes | -| Defender status | Use to initiate a Defender scan, force a signature update, query any threats detected. | [Defender CSP](https://msdn.microsoft.com/library/windows/hardware/mt187856.aspx) | No. | No. | Yes | +| Defender status | Use to initiate a Defender scan, force a Security intelligence update, query any threats detected. | [Defender CSP](https://msdn.microsoft.com/library/windows/hardware/mt187856.aspx) | No. | No. | Yes | \*Settings supported with SyncML can also be configured in a Windows Configuration Designer provisioning package. #### Remote reboot diff --git a/education/windows/deploy-windows-10-in-a-school-district.md b/education/windows/deploy-windows-10-in-a-school-district.md index b8897a3042..67bf3f18d4 100644 --- a/education/windows/deploy-windows-10-in-a-school-district.md +++ b/education/windows/deploy-windows-10-in-a-school-district.md @@ -1615,7 +1615,7 @@ As a final quality control step, verify the device configuration to ensure that * The device can connect to the Internet and view the appropriate web content in Microsoft Edge. * Windows Update is active and current with software updates. -* Windows Defender is active and current with malware signatures. +* Windows Defender is active and current with malware Security intelligence. * The SmartScreen Filter is active. * All Microsoft Store apps are properly installed and updated. * All Windows desktop apps are properly installed and updated. @@ -1669,7 +1669,7 @@ For more information about completing this task when you have: -Verify that Windows Defender is active and current with malware signatures.

+Verify that Windows Defender is active and current with malware Security intelligence.

For more information about completing this task, see [Turn Windows Defender on or off](https://support.microsoft.com/instantanswers/742778f2-6aad-4a8d-8f5d-db59cebc4f24/how-to-protect-your-windows-10-pc#v1h=tab02) and [Updating Windows Defender](https://support.microsoft.com/instantanswers/742778f2-6aad-4a8d-8f5d-db59cebc4f24/how-to-protect-your-windows-10-pc#v1h=tab03). x diff --git a/education/windows/deploy-windows-10-in-a-school.md b/education/windows/deploy-windows-10-in-a-school.md index d226f570db..319f6b217d 100644 --- a/education/windows/deploy-windows-10-in-a-school.md +++ b/education/windows/deploy-windows-10-in-a-school.md @@ -1077,7 +1077,7 @@ As a final quality control step, verify the device configuration to ensure that - The device can connect to the Internet and view the appropriate web content in Microsoft Edge. - Windows Update is active and current with software updates. -- Windows Defender is active and current with malware signatures. +- Windows Defender is active and current with malware Security intelligence. - The SmartScreen Filter is active. - All Microsoft Store apps are properly installed and updated. - All Windows desktop apps are properly installed and updated. @@ -1135,7 +1135,7 @@ For more information about completing this task when you have: -Verify that Windows Defender is active and current with malware signatures.

+Verify that Windows Defender is active and current with malware Security intelligence.

For more information about completing this task, see [Turn Windows Defender on or off](https://windows.microsoft.com/en-us/windows-10/how-to-protect-your-windows-10-pc#v1h=tab01) and [Updating Windows Defender](https://windows.microsoft.com/en-us/windows-10/how-to-protect-your-windows-10-pc#v1h=tab03). X X diff --git a/windows/security/threat-protection/intelligence/criteria.md b/windows/security/threat-protection/intelligence/criteria.md index 338810c3c0..10391a6db9 100644 --- a/windows/security/threat-protection/intelligence/criteria.md +++ b/windows/security/threat-protection/intelligence/criteria.md @@ -145,7 +145,7 @@ Advertisements shown to you must: #### Consumer opinion -Microsoft maintains a worldwide network of analysts and intelligence systems where you can [submit software for analysis](https://www.microsoft.com/wdsi/filesubmission). Your participation helps us identify new malware quickly. After analysis, Microsoft creates definitions for software that meets the described criteria. These definitions identify the software as malware and are available to all users through Windows Defender Antivirus and other Microsoft antimalware solutions. +Microsoft maintains a worldwide network of analysts and intelligence systems where you can [submit software for analysis](https://www.microsoft.com/wdsi/filesubmission). Your participation helps us identify new malware quickly. After analysis, Microsoft creates Security intelligence for software that meets the described criteria. This Security intelligence identifies the software as malware and are available to all users through Windows Defender Antivirus and other Microsoft antimalware solutions. ## Potentially unwanted application (PUA) diff --git a/windows/security/threat-protection/intelligence/developer-info.md b/windows/security/threat-protection/intelligence/developer-info.md index 43c679345e..4e1e50a9d6 100644 --- a/windows/security/threat-protection/intelligence/developer-info.md +++ b/windows/security/threat-protection/intelligence/developer-info.md @@ -20,6 +20,6 @@ Learn about the common questions we receive from software developers and get oth Topic | Description :---|:--- [Software developer FAQ](developer-faq.md) | Provides answers to common questions we receive from software developers. -[Developer resources](developer-resources.md) | Provides information about how to submit files, detection criteria, and how to check your software against the latest definitions and cloud protection from Microsoft. +[Developer resources](developer-resources.md) | Provides information about how to submit files, detection criteria, and how to check your software against the latest Security intelligence and cloud protection from Microsoft. diff --git a/windows/security/threat-protection/intelligence/developer-resources.md b/windows/security/threat-protection/intelligence/developer-resources.md index def783966f..78e8f2f4e8 100644 --- a/windows/security/threat-protection/intelligence/developer-resources.md +++ b/windows/security/threat-protection/intelligence/developer-resources.md @@ -1,7 +1,7 @@ --- title: Software developer resources -description: This page provides information for developers such as detection criteria, developer questions, and how to check your software against definitions. -keywords: wdsi, software, developer, resources, detection, criteria, questions, scan, software, definitions, cloud, protection +description: This page provides information for developers such as detection criteria, developer questions, and how to check your software against Security intelligence. +keywords: wdsi, software, developer, resources, detection, criteria, questions, scan, software, definitions, cloud, protection, security intelligence search.product: eADQiWindows 10XVcnh ms.prod: w10 ms.mktglfcycl: deploy @@ -34,4 +34,4 @@ Find more guidance about the file submission and detection dispute process in ou ### Scan your software -Use [Windows Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10?ocid=cx-docs-avreports) to check your software against the latest definitions and cloud protection from Microsoft. +Use [Windows Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10?ocid=cx-docs-avreports) to check your software against the latest Security intelligence and cloud protection from Microsoft. diff --git a/windows/security/threat-protection/intelligence/submission-guide.md b/windows/security/threat-protection/intelligence/submission-guide.md index 49259aa858..8713b5332e 100644 --- a/windows/security/threat-protection/intelligence/submission-guide.md +++ b/windows/security/threat-protection/intelligence/submission-guide.md @@ -1,7 +1,7 @@ --- title: How Microsoft identifies malware and potentially unwanted applications description: Learn how to submit files to Microsoft for malware analysis, how to track your submissions, and dispute detections. -keywords: security, sample submission help, malware file, virus file, trojan file, submit, send to Microsoft, submit a sample, virus, trojan, worm, undetected, doesn’t detect, email microsoft, email malware, I think this is malware, I think it's a virus, where can I send a virus, is this a virus, MSE, doesn’t detect, no signature, no detection, suspect file, MMPC, Microsoft Malware Protection Center, researchers, analyst, WDSI +keywords: security, sample submission help, malware file, virus file, trojan file, submit, send to Microsoft, submit a sample, virus, trojan, worm, undetected, doesn’t detect, email microsoft, email malware, I think this is malware, I think it's a virus, where can I send a virus, is this a virus, MSE, doesn’t detect, no signature, no detection, suspect file, MMPC, Microsoft Malware Protection Center, researchers, analyst, WDSI, security intelligence ms.prod: w10 ms.mktglfcycl: secure ms.sitesec: library diff --git a/windows/security/threat-protection/intelligence/virus-initiative-criteria.md b/windows/security/threat-protection/intelligence/virus-initiative-criteria.md index eeea702caa..7536a99f1e 100644 --- a/windows/security/threat-protection/intelligence/virus-initiative-criteria.md +++ b/windows/security/threat-protection/intelligence/virus-initiative-criteria.md @@ -34,7 +34,7 @@ Your organization must meet the following eligibility requirements to participat 1. Offer an antimalware or antivirus product that is one of the following: * Your organization's own creation. - * Licensed from another organization, but your organization adds value such as additional definitions to its signatures. + * Licensed from another organization, but your organization adds value such as additional Security intelligence. * Developed by using an SDK (engine and other components) from another MVI Partner AM company and your organization adds a custom UI and/or other functionality (white box versions). 2. Have your own malware research team unless you distribute a Whitebox product. diff --git a/windows/security/threat-protection/windows-defender-antivirus/command-line-arguments-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/command-line-arguments-windows-defender-antivirus.md index 542f1a4c1e..52f53a81bb 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/command-line-arguments-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/command-line-arguments-windows-defender-antivirus.md @@ -42,14 +42,14 @@ Command | Description \-Trace [-Grouping #] [-Level #] | Starts diagnostic tracing​ \-GetFiles | Collects support information​ \-GetFilesDiagTrack | Same as Getfiles but outputs to​ temporary DiagTrack folder​ -\-RemoveDefinitions [-All] | Restores the installed​ signature definitions​ to a previous backup copy or to​ the original default set of​ signatures​ -\-RemoveDefinitions [-DynamicSignatures] | Removes only the dynamically​ downloaded signatures​ +\-RemoveDefinitions [-All] | Restores the installed​ Security intelligence to a previous backup copy or to​ the original default set +\-RemoveDefinitions [-DynamicSignatures] | Removes only the dynamically​ downloaded Security intelligence ​ \-RemoveDefinitions [-Engine] | Restores the previous installed engine -\-SignatureUpdate [-UNC \| -MMPC] | Checks for new definition updates​ +\-SignatureUpdate [-UNC \| -MMPC] | Checks for new Security intelligence updates​ \-Restore [-ListAll \| [[-Name ] [-All] \| [-FilePath ]] [-Path ]] | Restores or list​s quarantined item(s)​ -\-AddDynamicSignature [-Path] | Loads a dynamic signature​ -\-ListAllDynamicSignatures | Lists the loaded dynamic signatures​ -\-RemoveDynamicSignature [-SignatureSetID] | Removes a dynamic signature​ +\-AddDynamicSignature [-Path] | Loads dynamic Security intelligence ​ +\-ListAllDynamicSignatures | Lists the loaded dynamic Security intelligence ​ +\-RemoveDynamicSignature [-SignatureSetID] | Removes dynamic Security intelligence ​ \-CheckExclusion -path | Checks whether a path is excluded diff --git a/windows/security/threat-protection/windows-defender-antivirus/configure-network-connections-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/configure-network-connections-windows-defender-antivirus.md index 922fb0f10d..0cb2288b2e 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/configure-network-connections-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/configure-network-connections-windows-defender-antivirus.md @@ -38,7 +38,7 @@ See the Enterprise Mobility and Security blog post [Important changes to Microso The Windows Defender Antivirus cloud service provides fast, strong protection for your endpoints. Enabling the cloud-delivered protection service is optional, however it is highly recommended because it provides very important protection against malware on your endpoints and across your network. >[!NOTE] ->The Windows Defender Antivirus cloud service is a mechanism for delivering updated protection to your network and endpoints. Although it is called a cloud service, it is not simply protection for files stored in the cloud, rather it uses distributed resources and machine learning to deliver protection to your endpoints at a rate that is far faster than traditional signature updates. +>The Windows Defender Antivirus cloud service is a mechanism for delivering updated protection to your network and endpoints. Although it is called a cloud service, it is not simply protection for files stored in the cloud, rather it uses distributed resources and machine learning to deliver protection to your endpoints at a rate that is far faster than traditional Security intelligence updates. See [Enable cloud-delivered protection](enable-cloud-protection-windows-defender-antivirus.md) for details on enabling the service with Intune, System Center Configuration Manager, Group Policy, PowerShell cmdlets, or on individual clients in the Windows Security app. @@ -70,7 +70,7 @@ The following table lists the services and their associated URLs that your netwo Microsoft Update Service (MU) -Signature and product updates +Security intelligence and product updates *.update.microsoft.com @@ -78,10 +78,10 @@ Signature and product updates - Definition updates alternate download location (ADL) + Security intelligence updates alternate download location (ADL) - Alternate location for Windows Defender Antivirus definition updates if the installed definitions fall out of date (7 or more days behind) + Alternate location for Windows Defender Antivirus Security intelligence updates if the installed Security intelligence falls out of date (7 or more days behind) *.download.microsoft.com diff --git a/windows/security/threat-protection/windows-defender-antivirus/configure-server-exclusions-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/configure-server-exclusions-windows-defender-antivirus.md index d7c05e739f..c075da4014 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/configure-server-exclusions-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/configure-server-exclusions-windows-defender-antivirus.md @@ -38,7 +38,7 @@ Windows Defender Antivirus uses the Deployment Image Servicing and Management (D ## Opt out of automatic exclusions -In Windows Server 2016, the predefined exclusions delivered by definition updates only exclude the default paths for a role or feature. If you installed a role or feature in a custom path, or you want to manually control the set of exclusions, you need to opt out of the automatic exclusions delivered in definition updates. +In Windows Server 2016, the predefined exclusions delivered by Security intelligence updates only exclude the default paths for a role or feature. If you installed a role or feature in a custom path, or you want to manually control the set of exclusions, you need to opt out of the automatic exclusions delivered in Security intelligence updates. > [!WARNING] > Opting out of automatic exclusions may adversely impact performance, or result in data corruption. The exclusions that are delivered automatically are optimized for Windows Server 2016 roles. diff --git a/windows/security/threat-protection/windows-defender-antivirus/deploy-manage-report-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/deploy-manage-report-windows-defender-antivirus.md index 38147632bc..d142dad965 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/deploy-manage-report-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/deploy-manage-report-windows-defender-antivirus.md @@ -78,5 +78,5 @@ Microsoft Azure|Deploy Microsoft Antimalware for Azure in the [Azure portal, by Topic | Description ---|--- [Deploy and enable Windows Defender Antivirus protection](deploy-windows-defender-antivirus.md) | While the client is installed as a core part of Windows 10, and traditional deployment does not apply, you will still need to enable the client on your endpoints with System Center Configuration Manager, Microsoft Intune, or Group Policy Objects. -[Manage Windows Defender Antivirus updates and apply baselines](manage-updates-baselines-windows-defender-antivirus.md) | There are two parts to updating Windows Defender Antivirus: updating the client on endpoints (product updates), and updating definitions (protection updates). You can update definitions in a number of ways, using System Center Configuration Manager, Group Policy, PowerShell, and WMI. +[Manage Windows Defender Antivirus updates and apply baselines](manage-updates-baselines-windows-defender-antivirus.md) | There are two parts to updating Windows Defender Antivirus: updating the client on endpoints (product updates), and updating Security intelligence (protection updates). You can update Security intelligence in a number of ways, using System Center Configuration Manager, Group Policy, PowerShell, and WMI. [Monitor and report on Windows Defender Antivirus protection](report-monitor-windows-defender-antivirus.md) | You can use Microsoft Intune, System Center Configuration Manager, the Update Compliance add-in for Microsoft Operations Management Suite, or a third-party SIEM product (by consuming Windows event logs) to monitor protection status and create reports about endpoint protection. diff --git a/windows/security/threat-protection/windows-defender-antivirus/deployment-vdi-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/deployment-vdi-windows-defender-antivirus.md index 97f4d15615..d4182f5a74 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/deployment-vdi-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/deployment-vdi-windows-defender-antivirus.md @@ -116,7 +116,7 @@ How you manage your VDI will affect the performance impact of Windows Defender A Because Windows Defender Antivirus downloads protection updates every day, or [based on your protection update settings](manage-protection-updates-windows-defender-antivirus.md), network bandwidth can be a problem if multiple VMs attempt to download updates at the same time. -Following the guidelines in this means the VMs will only need to download “delta” updates, which are the differences between an existing definition set and the next one. Delta updates are typically much smaller (a few kilobytes) than a full definition download (which can average around 150 mb). +Following the guidelines in this means the VMs will only need to download “delta” updates, which are the differences between an existing Security intelligence set and the next one. Delta updates are typically much smaller (a few kilobytes) than a full Security intelligence download (which can average around 150 mb). ### Manage updates for persistent VDIs @@ -160,7 +160,7 @@ These settings can be configured as part of creating your base image, or as a da ### Randomize scheduled scans -Windows Defender Antivirus supports the randomization of scheduled scans and signature updates. This can be extremely helpful in reducing boot storms (especially when used in conjunction with [Disable scans from occurring after every update](#disable-scans-after-an-update) and [Scan out-of-date machines or machines that have been offline for a while](#scan-vms-that-have-been-offline). +Windows Defender Antivirus supports the randomization of scheduled scans and Security intelligence updates. This can be extremely helpful in reducing boot storms (especially when used in conjunction with [Disable scans from occurring after every update](#disable-scans-after-an-update) and [Scan out-of-date machines or machines that have been offline for a while](#scan-vms-that-have-been-offline). Scheduled scans run in addition to [real-time protection and scanning](configure-real-time-protection-windows-defender-antivirus.md). @@ -178,7 +178,7 @@ The start time of the scan itself is still based on the scheduled scan policy 4. Expand the tree to **Windows components > Windows Defender** and configure the following setting: - - Double-click **Randomize scheduled task times** and set the option to **Enabled**. Click **OK**. This adds a true randomization (it is still random if the disk image is replicated) of plus or minus 30 minutes (using all of the intervals) to the start of the scheduled scan and the signature update. For example, if the schedule start time was set at 2.30pm, then enabling this setting could cause one machine to scan and update at 2.33pm and another machine to scan and update at 2.14pm. + - Double-click **Randomize scheduled task times** and set the option to **Enabled**. Click **OK**. This adds a true randomization (it is still random if the disk image is replicated) of plus or minus 30 minutes (using all of the intervals) to the start of the scheduled scan and the Security intelligence update. For example, if the schedule start time was set at 2.30pm, then enabling this setting could cause one machine to scan and update at 2.33pm and another machine to scan and update at 2.14pm. **Use Configuration Manager to randomize scheduled scans:** @@ -245,7 +245,7 @@ Sometimes, Windows Defender Antivirus notifications may be sent to or persist ac This setting will prevent a scan from occurring after receiving an update. You can apply this when creating the base image if you have also run a quick scan. This prevents the newly updated VM from performing a scan again (as you've already scanned it when you created the base image). >[!IMPORTANT] ->Running scans after an update will help ensure your VMs are protected with the latest definition updates. Disabling this option will reduce the protection level of your VMs and should only be used when first creating or deploying the base image. +>Running scans after an update will help ensure your VMs are protected with the latest Security intelligence updates. Disabling this option will reduce the protection level of your VMs and should only be used when first creating or deploying the base image. **Use Group Policy to disable scans after an update:** @@ -265,7 +265,7 @@ This setting will prevent a scan from occurring after receiving an update. You c 2. Go to the **Scheduled scans** section and configure the following setting: -3. Set **Check for the latest definition updates before running a scan** to **No**. This prevents a scan after an update. +3. Set **Check for the latest Security intelligence updates before running a scan** to **No**. This prevents a scan after an update. 4. Click **OK**. diff --git a/windows/security/threat-protection/windows-defender-antivirus/enable-cloud-protection-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/enable-cloud-protection-windows-defender-antivirus.md index bc76dcf3d8..5d2d921020 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/enable-cloud-protection-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/enable-cloud-protection-windows-defender-antivirus.md @@ -21,7 +21,7 @@ ms.date: 09/03/2018 - [Windows Defender Advanced Threat Protection (Windows Defender ATP)](https://wincom.blob.core.windows.net/documents/Windows10_Commercial_Comparison.pdf) >[!NOTE] ->The Windows Defender Antivirus cloud service is a mechanism for delivering updated protection to your network and endpoints. Although it is called a cloud service, it is not simply protection for files stored in the cloud; rather, it uses distributed resources and machine learning to deliver protection to your endpoints at a rate that is far faster than traditional signature updates. +>The Windows Defender Antivirus cloud service is a mechanism for delivering updated protection to your network and endpoints. Although it is called a cloud service, it is not simply protection for files stored in the cloud; rather, it uses distributed resources and machine learning to deliver protection to your endpoints at a rate that is far faster than traditional Security intelligence updates. You can enable or disable Windows Defender Antivirus cloud-delivered protection with Microsoft Intune, System Center Configuration Manager, Group Policy, PowerShell cmdlets, or on individual clients in the Windows Security app. diff --git a/windows/security/threat-protection/windows-defender-antivirus/manage-outdated-endpoints-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/manage-outdated-endpoints-windows-defender-antivirus.md index 7639c8e05b..b79024274c 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/manage-outdated-endpoints-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/manage-outdated-endpoints-windows-defender-antivirus.md @@ -95,11 +95,11 @@ You can also specify the number of days after which Windows Defender Antivirus p 5. Expand the tree to **Windows components > Windows Defender Antivirus > Signature Updates** and configure the following settings: - 1. Double-click the **Define the number of days before spyware definitions are considered out of date** setting and set the option to **Enabled**. Enter the number of days after which you want Windows Defender AV to consider spyware definitions as out-of-date. + 1. Double-click **Define the number of days before spyware definitions are considered out of date** and set the option to **Enabled**. Enter the number of days after which you want Windows Defender AV to consider spyware Security intelligence to be out-of-date. 2. Click **OK**. - 3. Double-click the **Define the number of days before virus definitions are considered out of date** setting and set the option to **Enabled**. Enter the number of days after which you want Windows Defender AV to consider virus and other threat definitions as out-of-date. + 3. Double-click **Define the number of days before virus definitions are considered out of date** and set the option to **Enabled**. Enter the number of days after which you want Windows Defender AV to consider virus Security intelligence to be out-of-date. 4. Click **OK**. diff --git a/windows/security/threat-protection/windows-defender-antivirus/manage-protection-updates-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/manage-protection-updates-windows-defender-antivirus.md index 24e05dd41a..9f27cec145 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/manage-protection-updates-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/manage-protection-updates-windows-defender-antivirus.md @@ -42,7 +42,7 @@ You can use the following sources: - [Windows Server Update Service (WSUS)](https://technet.microsoft.com/windowsserver/bb332157.aspx) - System Center Configuration Manager - A network file share -- The [Microsoft Malware Protection Center definitions page (MMPC)](https://www.microsoft.com/security/portal/definitions/adl.aspx) +- The [Microsoft Malware Protection Center Security intelligence page (MMPC)](https://www.microsoft.com/security/portal/definitions/adl.aspx) When updates are published, some logic will be applied to minimize the size of the update. In most cases, only the "delta" (or the differences between the latest update and the update that is currently installed on the endpoint) will be downloaded and applied. However, the size of the delta depends on: @@ -108,7 +108,7 @@ The procedures in this article first describe how to set the order, and then how **Use Configuration Manager to manage the update location:** -See [Configure Definition Updates for Endpoint Protection](https://docs.microsoft.com/sccm/protect/deploy-use/endpoint-definition-updates) for details on configuring System Center Configuration Manager (current branch). +See [Configure Security intelligence Updates for Endpoint Protection](https://docs.microsoft.com/sccm/protect/deploy-use/endpoint-definition-updates) for details on configuring System Center Configuration Manager (current branch). **Use PowerShell cmdlets to manage the update location:** diff --git a/windows/security/threat-protection/windows-defender-antivirus/manage-updates-baselines-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/manage-updates-baselines-windows-defender-antivirus.md index c1d9aad15b..c43a3b2399 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/manage-updates-baselines-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/manage-updates-baselines-windows-defender-antivirus.md @@ -28,7 +28,7 @@ You can also apply [Windows security baselines](https://technet.microsoft.com/it ## Protection updates -Windows Defender Antivirus uses both [cloud-delivered protection](utilize-microsoft-cloud-protection-windows-defender-antivirus.md) (also called the Microsoft Advanced Protection Service or MAPS) and periodically downloaded protection updates to provide protection. These protection updates are also known as "definitions" or "signature updates". +Windows Defender Antivirus uses both [cloud-delivered protection](utilize-microsoft-cloud-protection-windows-defender-antivirus.md) (also called the Microsoft Advanced Protection Service or MAPS) and periodically downloaded protection updates to provide protection. These protection updates are also known as Security intelligence updates. The cloud-delivered protection is always on and requires an active connection to the Internet to function, while the protection updates generally occur once a day (although this can be configured). See the [Utilize Microsoft cloud-provided protection in Windows Defender Antivirus](utilize-microsoft-cloud-protection-windows-defender-antivirus.md) topic for more details about enabling and configuring cloud-provided protection. diff --git a/windows/security/threat-protection/windows-defender-antivirus/manage-updates-mobile-devices-vms-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/manage-updates-mobile-devices-vms-windows-defender-antivirus.md index 4ea81cd37f..b62b1c4182 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/manage-updates-mobile-devices-vms-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/manage-updates-mobile-devices-vms-windows-defender-antivirus.md @@ -25,7 +25,7 @@ Mobile devices and VMs may require additional configuration to ensure performanc There are two settings that are particularly useful for these devices: - Opt-in to Microsoft Update on mobile computers without a WSUS connection -- Prevent definition updates when running on battery power +- Prevent Security intelligence updates when running on battery power The following topics may also be useful in these situations: - [Configuring scheduled and catch-up scans](scheduled-catch-up-scans-windows-defender-antivirus.md) @@ -34,7 +34,7 @@ The following topics may also be useful in these situations: ## Opt-in to Microsoft Update on mobile computers without a WSUS connection -You can use Microsoft Update to keep definitions on mobile devices running Windows Defender Antivirus up to date when they are not connected to the corporate network or don't otherwise have a WSUS connection. +You can use Microsoft Update to keep Security intelligence on mobile devices running Windows Defender Antivirus up to date when they are not connected to the corporate network or don't otherwise have a WSUS connection. This means that protection updates can be delivered to devices (via Microsoft Update) even if you have set WSUS to override Microsoft Update. @@ -69,7 +69,7 @@ You can opt-in to Microsoft Update on the mobile device in one of the following 2. Click **Advanced** options. 3. Select the checkbox for **Give me updates for other Microsoft products when I update Windows**. -## Prevent definition updates when running on battery power +## Prevent Security intelligence updates when running on battery power You can configure Windows Defender Antivirus to only download protection updates when the PC is connected to a wired power source. diff --git a/windows/security/threat-protection/windows-defender-antivirus/oldTOC.md b/windows/security/threat-protection/windows-defender-antivirus/oldTOC.md index d86f08369c..8c12b9ff9d 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/oldTOC.md +++ b/windows/security/threat-protection/windows-defender-antivirus/oldTOC.md @@ -18,7 +18,7 @@ ### [Report on Windows Defender Antivirus protection](report-monitor-windows-defender-antivirus.md) #### [Troubleshoot Windows Defender Antivirus reporting in Update Compliance](troubleshoot-reporting.md) ### [Manage updates and apply baselines](manage-updates-baselines-windows-defender-antivirus.md) -#### [Manage protection and definition updates](manage-protection-updates-windows-defender-antivirus.md) +#### [Manage protection and Security intelligence updates](manage-protection-updates-windows-defender-antivirus.md) #### [Manage when protection updates should be downloaded and applied](manage-protection-update-schedule-windows-defender-antivirus.md) #### [Manage updates for endpoints that are out of date](manage-outdated-endpoints-windows-defender-antivirus.md) #### [Manage event-based forced updates](manage-event-based-updates-windows-defender-antivirus.md) diff --git a/windows/security/threat-protection/windows-defender-antivirus/scheduled-catch-up-scans-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/scheduled-catch-up-scans-windows-defender-antivirus.md index d40f911f2e..74b72c9ab1 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/scheduled-catch-up-scans-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/scheduled-catch-up-scans-windows-defender-antivirus.md @@ -220,7 +220,7 @@ You can force a scan to occur after every [protection update](manage-protection- Location | Setting | Description | Default setting (if not configured) ---|---|---|--- -Signature updates | Turn on scan after signature update | A scan will occur immediately after a new protection update is downloaded | Enabled +Signature updates | Turn on scan after Security intelligence update | A scan will occur immediately after a new protection update is downloaded | Enabled diff --git a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md index fe11787198..924c523815 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md @@ -23,7 +23,7 @@ ms.date: 09/03/2018 You can specify the level of cloud-protection offered by Windows Defender Antivirus with Group Policy and System Center Configuration Manager. >[!NOTE] ->The Windows Defender Antivirus cloud service is a mechanism for delivering updated protection to your network and endpoints. Although it is called a cloud service, it is not simply protection for files stored in the cloud, rather it uses distributed resources and machine learning to deliver protection to your endpoints at a rate that is far faster than traditional signature updates. +>The Windows Defender Antivirus cloud service is a mechanism for delivering updated protection to your network and endpoints. Although it is called a cloud service, it is not simply protection for files stored in the cloud, rather it uses distributed resources and machine learning to deliver protection to your endpoints at a rate that is far faster than traditional Security intelligence updates. diff --git a/windows/security/threat-protection/windows-defender-antivirus/use-group-policy-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/use-group-policy-windows-defender-antivirus.md index 6581b10ed3..f1a344b3d2 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/use-group-policy-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/use-group-policy-windows-defender-antivirus.md @@ -122,21 +122,21 @@ Scan | Specify the scan type to use for a scheduled scan | [Configure scheduled Scan | Specify the time for a daily quick scan | [Configure scheduled scans for Windows Defender Antivirus](scheduled-catch-up-scans-windows-defender-antivirus.md) Scan | Specify the time of day to run a scheduled scan | [Configure scheduled scans for Windows Defender Antivirus](scheduled-catch-up-scans-windows-defender-antivirus.md) Scan | Start the scheduled scan only when computer is on but not in use | [Configure scheduled scans for Windows Defender Antivirus](scheduled-catch-up-scans-windows-defender-antivirus.md) -Signature updates | Allow definition updates from Microsoft Update | [Manage updates for mobile devices and virtual machines (VMs)](manage-updates-mobile-devices-vms-windows-defender-antivirus.md) -Signature updates | Allow definition updates when running on battery power | [Manage updates for mobile devices and virtual machines (VMs)](manage-updates-mobile-devices-vms-windows-defender-antivirus.md) -Signature updates | Allow notifications to disable definitions based repots to Microsoft MAPS | [Manage event-based forced updates](manage-event-based-updates-windows-defender-antivirus.md) -Signature updates | Allow real-time definition updates based on reports to Microsoft MAPS | [Manage event-based forced updates](manage-event-based-updates-windows-defender-antivirus.md) -Signature updates | Check for the latest virus and spyware definitions on startup | [Manage event-based forced updates](manage-event-based-updates-windows-defender-antivirus.md) -Signature updates | Define file shares for downloading definition updates | [Manage Windows Defender Antivirus protection and definition updates](manage-protection-updates-windows-defender-antivirus.md) -Signature updates | Define the number of days after which a catch up definition update is required | [Manage updates for endpoints that are out of date](manage-outdated-endpoints-windows-defender-antivirus.md) -Signature updates | Define the number of days before spyware definitions are considered out of date | [Manage updates for endpoints that are out of date](manage-outdated-endpoints-windows-defender-antivirus.md) -Signature updates | Define the number of days before virus definitions are considered out of date | [Manage updates for endpoints that are out of date](manage-outdated-endpoints-windows-defender-antivirus.md) -Signature updates | Define the order of sources for downloading definition updates | [Manage Windows Defender Antivirus protection and definition updates](manage-protection-updates-windows-defender-antivirus.md) -Signature updates | Initiate definition update on startup | [Manage event-based forced updates](manage-event-based-updates-windows-defender-antivirus.md) -Signature updates | Specify the day of the week to check for definition updates | [Manage when protection updates should be downloaded and applied](manage-protection-update-schedule-windows-defender-antivirus.md) -Signature updates | Specify the interval to check for definition updates | [Manage when protection updates should be downloaded and applied](manage-protection-update-schedule-windows-defender-antivirus.md) -Signature updates | Specify the time to check for definition updates | [Manage when protection updates should be downloaded and applied](manage-protection-update-schedule-windows-defender-antivirus.md) -Signature updates | Turn on scan after signature update | [Configure scheduled scans for Windows Defender Antivirus](scheduled-catch-up-scans-windows-defender-antivirus.md) +Security intelligence updates | Allow definition updates from Microsoft Update | [Manage updates for mobile devices and virtual machines (VMs)](manage-updates-mobile-devices-vms-windows-defender-antivirus.md) +Security intelligence updates | Allow definition updates when running on battery power | [Manage updates for mobile devices and virtual machines (VMs)](manage-updates-mobile-devices-vms-windows-defender-antivirus.md) +Security intelligence updates | Allow notifications to disable definitions based repots to Microsoft MAPS | [Manage event-based forced updates](manage-event-based-updates-windows-defender-antivirus.md) +Security intelligence updates | Allow real-time definition updates based on reports to Microsoft MAPS | [Manage event-based forced updates](manage-event-based-updates-windows-defender-antivirus.md) +Security intelligence updates | Check for the latest virus and spyware definitions on startup | [Manage event-based forced updates](manage-event-based-updates-windows-defender-antivirus.md) +Security intelligence updates | Define file shares for downloading definition updates | [Manage Windows Defender Antivirus protection and definition updates](manage-protection-updates-windows-defender-antivirus.md) +Security intelligence updates | Define the number of days after which a catch up definition update is required | [Manage updates for endpoints that are out of date](manage-outdated-endpoints-windows-defender-antivirus.md) +Security intelligence updates | Define the number of days before spyware definitions are considered out of date | [Manage updates for endpoints that are out of date](manage-outdated-endpoints-windows-defender-antivirus.md) +Security intelligence updates | Define the number of days before virus definitions are considered out of date | [Manage updates for endpoints that are out of date](manage-outdated-endpoints-windows-defender-antivirus.md) +Security intelligence updates | Define the order of sources for downloading definition updates | [Manage Windows Defender Antivirus protection and definition updates](manage-protection-updates-windows-defender-antivirus.md) +Security intelligence updates | Initiate definition update on startup | [Manage event-based forced updates](manage-event-based-updates-windows-defender-antivirus.md) +Security intelligence updates | Specify the day of the week to check for definition updates | [Manage when protection updates should be downloaded and applied](manage-protection-update-schedule-windows-defender-antivirus.md) +Security intelligence updates | Specify the interval to check for definition updates | [Manage when protection updates should be downloaded and applied](manage-protection-update-schedule-windows-defender-antivirus.md) +Security intelligence updates | Specify the time to check for definition updates | [Manage when protection updates should be downloaded and applied](manage-protection-update-schedule-windows-defender-antivirus.md) +Security intelligence updates | Turn on scan after Security intelligence update | [Configure scheduled scans for Windows Defender Antivirus](scheduled-catch-up-scans-windows-defender-antivirus.md) Threats | Specify threat alert levels at which default action should not be taken when detected | [Configure remediation for Windows Defender Antivirus scans](configure-remediation-windows-defender-antivirus.md) Threats | Specify threats upon which default action should not be taken when detected | [Configure remediation for Windows Defender Antivirus scans](configure-remediation-windows-defender-antivirus.md) diff --git a/windows/security/threat-protection/windows-defender-antivirus/use-powershell-cmdlets-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/use-powershell-cmdlets-windows-defender-antivirus.md index 25ca31aa0a..73fca55e16 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/use-powershell-cmdlets-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/use-powershell-cmdlets-windows-defender-antivirus.md @@ -1,6 +1,6 @@ --- title: Use PowerShell cmdlets to configure and run Windows Defender AV -description: In Windows 10, you can use PowerShell cmdlets to run scans, update definitions, and change settings in Windows Defender Antivirus. +description: In Windows 10, you can use PowerShell cmdlets to run scans, update Security intelligence, and change settings in Windows Defender Antivirus. keywords: scan, command line, mpcmdrun, defender search.product: eADQiWindows 10XVcnh ms.pagetype: security diff --git a/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md index aebdd79b52..0d0f8bbae9 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md @@ -26,7 +26,7 @@ To take advantage of the power and speed of these next-gen technologies, Windows >[!NOTE] ->The Windows Defender Antivirus cloud service is a mechanism for delivering updated protection to your network and endpoints. Although it is called a cloud service, it is not simply protection for files stored in the cloud, rather it uses distributed resources and machine learning to deliver protection to your endpoints at a rate that is far faster than traditional signature updates. +>The Windows Defender Antivirus cloud service is a mechanism for delivering updated protection to your network and endpoints. Although it is called a cloud service, it is not simply protection for files stored in the cloud, rather it uses distributed resources and machine learning to deliver protection to your endpoints at a rate that is far faster than traditional Security intelligence updates. With cloud-delivered protection, next-gen technologies provide rapid identification of new threats, sometimes even before a single machine is infected. Watch the following video about Microsoft AI and Windows Defender Antivirus in action: @@ -75,5 +75,5 @@ You can also [configure Windows Defender AV to automatically receive new protect [Enable cloud-delivered protection](enable-cloud-protection-windows-defender-antivirus.md) | You can enable cloud-delivered protection with System Center Configuration Manager, Group Policy, Microsoft Intune, and PowerShell cmdlets. [Specify the cloud-delivered protection level](specify-cloud-protection-level-windows-defender-antivirus.md) | You can specify the level of protection offered by the cloud with Group Policy and System Center Configuration Manager. The protection level will affect the amount of information shared with the cloud and how aggressively new files are blocked. [Configure and validate network connections for Windows Defender Antivirus](configure-network-connections-windows-defender-antivirus.md) | There are certain Microsoft URLs that your network and endpoints must be able to connect to for cloud-delivered protection to work effectively. This topic lists the URLs that should be allowed via firewall or network filtering rules, and instructions for confirming your network is properly enrolled in cloud-delivered protection. -[Configure the block at first sight feature](configure-block-at-first-sight-windows-defender-antivirus.md) | The Block at First Sight feature can block new malware within seconds, without having to wait hours for a traditional signature. You can enable and configure it with System Center Configuration Manager and Group Policy. +[Configure the block at first sight feature](configure-block-at-first-sight-windows-defender-antivirus.md) | The Block at First Sight feature can block new malware within seconds, without having to wait hours for traditional Security intelligence . You can enable and configure it with System Center Configuration Manager and Group Policy. [Configure the cloud block timeout period](configure-cloud-block-timeout-period-windows-defender-antivirus.md) | Windows Defender Antivirus can block suspicious files from running while it queries our cloud-delivered protection service. You can configure the amount of time the file will be prevented from running with System Center Configuration Manager and Group Policy. diff --git a/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md b/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md index 97655419cf..c58bf2bb8a 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md @@ -57,7 +57,7 @@ See the [Windows Defender Antivirus on Windows Server 2016](windows-defender-ant This table indicates the functionality and features that are available in each state: -State | Description | [Real-time protection](configure-real-time-protection-windows-defender-antivirus.md) and [cloud-delivered protection](enable-cloud-protection-windows-defender-antivirus.md) | [Limited periodic scanning availability](limited-periodic-scanning-windows-defender-antivirus.md) | [File scanning and detection information](customize-run-review-remediate-scans-windows-defender-antivirus.md) | [Threat remediation](configure-remediation-windows-defender-antivirus.md) | [Threat definition updates](manage-updates-baselines-windows-defender-antivirus.md) +State | Description | [Real-time protection](configure-real-time-protection-windows-defender-antivirus.md) and [cloud-delivered protection](enable-cloud-protection-windows-defender-antivirus.md) | [Limited periodic scanning availability](limited-periodic-scanning-windows-defender-antivirus.md) | [File scanning and detection information](customize-run-review-remediate-scans-windows-defender-antivirus.md) | [Threat remediation](configure-remediation-windows-defender-antivirus.md) | [Security intelligence updates](manage-updates-baselines-windows-defender-antivirus.md) :-|:-|:-:|:-:|:-:|:-:|:-: Passive mode | Windows Defender AV will not be used as the antivirus app, and threats will not be remediated by Windows Defender AV. Files will be scanned and reports will be provided for threat detections which are shared with the Windows Defender ATP service. | [!include[Check mark no](images/svg/check-no.svg)] | [!include[Check mark no](images/svg/check-no.svg)] | [!include[Check mark yes](images/svg/check-yes.svg)] | [!include[Check mark no](images/svg/check-no.svg)] | [!include[Check mark yes](images/svg/check-yes.svg)] Automatic disabled mode | Windows Defender AV will not be used as the antivirus app. Files will not be scanned and threats will not be remediated. | [!include[Check mark no](images/svg/check-no.svg)] | [!include[Check mark yes](images/svg/check-yes.svg)] | [!include[Check mark no](images/svg/check-no.svg)] | [!include[Check mark no](images/svg/check-no.svg)] | [!include[Check mark no](images/svg/check-no.svg)] diff --git a/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-on-windows-server-2016.md b/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-on-windows-server-2016.md index e0ce8b36b5..2434b61627 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-on-windows-server-2016.md +++ b/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-on-windows-server-2016.md @@ -33,7 +33,7 @@ This topic includes the following instructions for setting up and running Window - [Verify Windows Defender AV is running](#BKMK_DefRun) -- [Update antimalware definitions](#BKMK_UpdateDef) +- [Update antimalware Security intelligence](#BKMK_UpdateDef) - [Submit Samples](#BKMK_DefSamples) @@ -112,24 +112,24 @@ sc query Windefend The `sc query` command returns information about the Windows Defender service. If Windows Defender is running, the `STATE` value displays `RUNNING`. -## Update antimalware definitions -In order to get updated antimalware definitions, you must have the Windows Update service running. If you use an update management service, like Windows Server Update Services (WSUS), make sure that updates for Windows Defender AV definitions are approved for the computers you manage. +## Update antimalware Security intelligence +In order to get updated antimalware Security intelligence , you must have the Windows Update service running. If you use an update management service, like Windows Server Update Services (WSUS), make sure that updates for Windows Defender Antivirus Security intelligence are approved for the computers you manage. By default, Windows Update does not download and install updates automatically on Windows Server 2016. You can change this configuration by using one of the following methods: - **Windows Update** in Control Panel. - - **Install updates automatically** results in all updates being automatically installed, including Windows Defender definition updates. + - **Install updates automatically** results in all updates being automatically installed, including Windows Defender Security intelligence updates. - - **Download updates but let me choose whether to install them** allows Windows Defender to download and install definition updates automatically, but other updates are not automatically installed. + - **Download updates but let me choose whether to install them** allows Windows Defender to download and install Security intelligence updates automatically, but other updates are not automatically installed. - **Group Policy**. You can set up and manage Windows Update by using the settings available in Group Policy, in the following path: **Administrative Templates\Windows Components\Windows Update\Configure Automatic Updates** -- The **AUOptions** registry key. The following two values allow Windows Update to automatically download and install definition updates. +- The **AUOptions** registry key. The following two values allow Windows Update to automatically download and install Security intelligence updates. - - **4** Install updates automatically. This value results in all updates being automatically installed, including Windows Defender definition updates. + - **4** Install updates automatically. This value results in all updates being automatically installed, including Windows Defender Security intelligence updates. - - **3** Download updates but let me choose whether to install them. This value allows Windows Defender to download and install definition updates automatically, but other updates are not automatically installed. + - **3** Download updates but let me choose whether to install them. This value allows Windows Defender to download and install Security intelligence updates automatically, but other updates are not automatically installed. To ensure that protection from malware is maintained, we recommend that you enable the following services: @@ -144,13 +144,13 @@ The following table lists the services for Windows Defender and the dependent se |Windows Defender Service (Windefend)|C:\Program Files\Windows Defender\MsMpEng.exe|This is the main Windows Defender Antivirus service that needs to be running at all times.| |Windows Error Reporting Service (Wersvc)|C:\WINDOWS\System32\svchost.exe -k WerSvcGroup|This service sends error reports back to Microsoft.| |Windows Defender Firewall (MpsSvc)|C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork|We recommend leaving the Windows Defender Firewall service enabled.| -|Windows Update (Wuauserv)|C:\WINDOWS\system32\svchost.exe -k netsvcs|Windows Update is needed to get definition updates and antimalware engine updates| +|Windows Update (Wuauserv)|C:\WINDOWS\system32\svchost.exe -k netsvcs|Windows Update is needed to get Security intelligence updates and antimalware engine updates| ## Submit Samples -Sample submission allows Microsoft to collect samples of potentially malicious software. To help provide continued and up-to-date protection, Microsoft researchers use these samples to analyze suspicious activities and produce updated antimalware definitions. +Sample submission allows Microsoft to collect samples of potentially malicious software. To help provide continued and up-to-date protection, Microsoft researchers use these samples to analyze suspicious activities and produce updated antimalware Security intelligence. We collect program executable files, such as .exe files and .dll files. We do not collect files that contain personal data, like Microsoft Word documents and PDF files. diff --git a/windows/security/threat-protection/windows-defender-antivirus/windows-defender-offline.md b/windows/security/threat-protection/windows-defender-antivirus/windows-defender-offline.md index b705e33977..9c669d0de5 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/windows-defender-offline.md +++ b/windows/security/threat-protection/windows-defender-antivirus/windows-defender-offline.md @@ -48,7 +48,7 @@ Windows Defender Offline uses the most recent protection updates available on th > [!NOTE] > Before running an offline scan, you should attempt to update Windows Defender AV protection. You can either force an update with Group Policy or however you normally deploy updates to endpoints, or you can manually download and install the latest protection updates from the [Microsoft Malware Protection Center](https://www.microsoft.com/security/portal/definitions/adl.aspx). -See the [Manage Windows Defender Antivirus protection and definition updates](manage-protection-updates-windows-defender-antivirus.md) topic for more information. +See the [Manage Windows Defender Antivirus Security intelligence updates](manage-protection-updates-windows-defender-antivirus.md) topic for more information. ## Usage scenarios diff --git a/windows/security/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus.md index ca5529dfa1..6a03421f8d 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus.md @@ -58,7 +58,7 @@ The following diagrams compare the location of settings and functions between th Item | Windows 10, before version 1703 | Windows 10, version 1703 and later | Description ---|---|---|--- -1 | **Update** tab | **Protection updates** | Update the protection ("definition updates") +1 | **Update** tab | **Protection updates** | Update the protection (Security intelligence) 2 | **History** tab | **Scan history** | Review threats that were quarantined, removed, or allowed 3 | **Settings** (links to **Windows Settings**) | **Virus & threat protection settings** | Enable various features, including Real-time protection, Cloud-delivered protection, Advanced notifications, and Automatic ample submission 4 | **Scan options** | **Advanced scan** | Run a full scan, custom scan, or a Windows Defender Offline scan @@ -90,7 +90,7 @@ This section describes how to perform some of the most common tasks when reviewi 3. Click **Virus & threat protection updates**. The currently installed version is displayed along with some information about when it was downloaded. You can check this against the latest version available for manual download, or review the change log for that version. -![Definition version number information](images/defender/wdav-wdsc-defs.png) +![Security intelligence version number information](images/defender/wdav-wdsc-defs.png) 4. Click **Check for updates** to download new protection updates (if there are any). diff --git a/windows/security/threat-protection/windows-defender-atp/TOC.md b/windows/security/threat-protection/windows-defender-atp/TOC.md index 6939cb2a2a..b31f4ecc52 100644 --- a/windows/security/threat-protection/windows-defender-atp/TOC.md +++ b/windows/security/threat-protection/windows-defender-atp/TOC.md @@ -161,7 +161,7 @@ ##### [Report on antivirus protection](../windows-defender-antivirus/report-monitor-windows-defender-antivirus.md) ###### [Troubleshoot antivirus reporting in Update Compliance](../windows-defender-antivirus/troubleshoot-reporting.md) ##### [Manage updates and apply baselines](../windows-defender-antivirus/manage-updates-baselines-windows-defender-antivirus.md) -###### [Manage protection and definition updates](../windows-defender-antivirus/manage-protection-updates-windows-defender-antivirus.md) +###### [Manage protection and Security intelligence updates](../windows-defender-antivirus/manage-protection-updates-windows-defender-antivirus.md) ###### [Manage when protection updates should be downloaded and applied](../windows-defender-antivirus/manage-protection-update-schedule-windows-defender-antivirus.md) ###### [Manage updates for endpoints that are out of date](../windows-defender-antivirus/manage-outdated-endpoints-windows-defender-antivirus.md) ###### [Manage event-based forced updates](../windows-defender-antivirus/manage-event-based-updates-windows-defender-antivirus.md) diff --git a/windows/security/threat-protection/windows-defender-atp/defender-compatibility-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/defender-compatibility-windows-defender-advanced-threat-protection.md index 420fba6b8f..db4ca0c636 100644 --- a/windows/security/threat-protection/windows-defender-atp/defender-compatibility-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/defender-compatibility-windows-defender-advanced-threat-protection.md @@ -31,7 +31,7 @@ The Windows Defender Advanced Threat Protection agent depends on Windows Defende >[!IMPORTANT] >Windows Defender ATP does not adhere to the Windows Defender Antivirus Exclusions settings. -You must configure the signature updates on the Windows Defender ATP machines whether Windows Defender Antivirus is the active antimalware or not. For more information, see [Manage Windows Defender Antivirus updates and apply baselines](../windows-defender-antivirus/manage-updates-baselines-windows-defender-antivirus.md). +You must configure Security intelligence updates on the Windows Defender ATP machines whether Windows Defender Antivirus is the active antimalware or not. For more information, see [Manage Windows Defender Antivirus updates and apply baselines](../windows-defender-antivirus/manage-updates-baselines-windows-defender-antivirus.md). If an onboarded machine is protected by a third-party antimalware client, Windows Defender Antivirus on that endpoint will enter into passive mode. diff --git a/windows/security/threat-protection/windows-defender-atp/onboard-configure-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/onboard-configure-windows-defender-advanced-threat-protection.md index 3dd7d4940d..42186f486f 100644 --- a/windows/security/threat-protection/windows-defender-atp/onboard-configure-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/onboard-configure-windows-defender-advanced-threat-protection.md @@ -138,7 +138,7 @@ Before you onboard machines, the diagnostic data service must be enabled. The se ## Windows Defender Antivirus configuration requirement The Windows Defender ATP agent depends on the ability of Windows Defender Antivirus to scan files and provide information about them. -You must configure the signature updates on the Windows Defender ATP machines whether Windows Defender Antivirus is the active antimalware or not. For more information, see [Manage Windows Defender Antivirus updates and apply baselines](../windows-defender-antivirus/manage-updates-baselines-windows-defender-antivirus.md). +You must configure Security intelligence updates on the Windows Defender ATP machines whether Windows Defender Antivirus is the active antimalware or not. For more information, see [Manage Windows Defender Antivirus updates and apply baselines](../windows-defender-antivirus/manage-updates-baselines-windows-defender-antivirus.md). When Windows Defender Antivirus is not the active antimalware in your organization and you use the Windows Defender ATP service, Windows Defender Antivirus goes on passive mode. If your organization has disabled Windows Defender Antivirus through group policy or other methods, machines that are onboarded to Windows Defender ATP must be excluded from this group policy. diff --git a/windows/security/threat-protection/windows-defender-atp/secure-score-dashboard-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/secure-score-dashboard-windows-defender-advanced-threat-protection.md index 724678dc82..4b05fceac9 100644 --- a/windows/security/threat-protection/windows-defender-atp/secure-score-dashboard-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/secure-score-dashboard-windows-defender-advanced-threat-protection.md @@ -49,7 +49,7 @@ Machines are considered "well configured" for Windows Defender AV if the followi - Windows Defender AV is reporting correctly - Windows Defender AV is turned on -- Signature definitions are up to date +- Security intelligence is up to date - Real-time protection is on - Potentially Unwanted Application (PUA) protection is enabled @@ -62,7 +62,7 @@ You can take the following actions to increase the overall security score of you - Fix antivirus reporting - This recommendation is displayed when the Windows Defender Antivirus is not properly configured to report its health state. For more information on fixing the reporting, see [Configure and validate network connections](../windows-defender-antivirus/configure-network-connections-windows-defender-antivirus.md). - Turn on antivirus -- Update antivirus definitions +- Update antivirus Security intelligence - Turn on real-time protection - Turn on PUA protection diff --git a/windows/security/threat-protection/windows-defender-atp/threat-analytics-dashboard-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/threat-analytics-dashboard-windows-defender-advanced-threat-protection.md index 4aab3cf41a..3169f76ae1 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-analytics-dashboard-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-analytics-dashboard-windows-defender-advanced-threat-protection.md @@ -29,7 +29,7 @@ Note the following requirements and limitations of the charts and what you might - Only active machines running Windows 10 are checked for OS mitigations. - When checking for microcode mitgations, Windows Defender ATP currently checks for updates applicable to Intel CPU processors only. -- To determine microcode mitigation status, machines must enable Windows Defender Antivirus and update to definition version 1.259.1545.0 or above. +- To determine microcode mitigation status, machines must enable Windows Defender Antivirus and update to Security intelligence version 1.259.1545.0 or above. - To be covered under the overall mitigation status, machines must have both OS and microcode mitigation information. ## Assess organizational risk with Threat analytics diff --git a/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard.md b/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard.md index 125ff2e581..5d0bab6314 100644 --- a/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard.md +++ b/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard.md @@ -188,7 +188,7 @@ You can review the Windows event log to see events that are created when an atta - **ID**: matches with the Rule-ID that triggered the block/audit. - **Detection time**: Time of detection - **Process Name**: The process that performed the "operation" that was blocked/audited -- **Description**: Additional details about the event or audit, including the signature, engine, and product version of Windows Defender Antivirus +- **Description**: Additional details about the event or audit, including Security intelligence, engine, and product version of Windows Defender Antivirus ## Attack surface reduction rules in Windows 10 Enterprise E3 From a9ffd321cab120b96ece3bb2fb433c9cdd9cee01 Mon Sep 17 00:00:00 2001 From: skycommand Date: Thu, 31 Jan 2019 09:48:13 +0330 Subject: [PATCH 36/98] Fixed obvious technical errors The article had some errors, including incorrect use of "\" (backslash) instead of "/" (slash), incorrect use of the word "environment", but most importantly, its incorrect use of the "feature and quality updates" phrase defeated the purpose of an entire paragraph. You see, the paragraph was trying to reassure the reader that WSUS and SCCM continue to work as intended, but these two distribute much more than just quality and feature updates. They distribute device drivers, definition updates, security updates, feature packs (e.g. .NET Framework) and service packs. The "feature and quality updates" phrase unnecessarily restricted the scope of reassurance. Wordiness is bad. --- windows/deployment/update/fod-and-lang-packs.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/deployment/update/fod-and-lang-packs.md b/windows/deployment/update/fod-and-lang-packs.md index e360ba20b9..04ea53111b 100644 --- a/windows/deployment/update/fod-and-lang-packs.md +++ b/windows/deployment/update/fod-and-lang-packs.md @@ -1,6 +1,6 @@ --- -title: Windows 10 - How to make FoDs and language packs available when you're using WSUS/SCCM -description: Learn how to make FoDs and language packs available for updates when you're using WSUS/SCCM. +title: Windows 10 - How to make FoD and language packs available when you're using WSUS/SCCM +description: Learn how to make FoD and language packs available when you're using WSUS/SCCM ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library @@ -14,10 +14,10 @@ ms.date: 10/18/2018 > Applies to: Windows 10 -As of Windows 10, version 1709, you can't use Windows Server Update Services (WSUS) to host [Features on Demand](https://docs.microsoft.com/windows-hardware/manufacture/desktop/features-on-demand-v2--capabilities) and language packs for Windows 10 clients. Instead, you can pull them directly from Windows Update - you just need to change a Group Policy setting that lets clients download these directly from Windows Update. You can also host Features on Demand and language packs on a network share, but starting with Windows 10, version 1809, language packs can only be installed from Windows Update. +As of Windows 10 version 1709, you cannot use Windows Server Update Services (WSUS) to host [Features on Demand](https://docs.microsoft.com/windows-hardware/manufacture/desktop/features-on-demand-v2--capabilities) (FOD) and language packs for Windows 10 clients locally. Instead, you can enforce a Group Policy setting that tells the clients to pull them directly from Windows Update. You can also host FOD and language packs on a network share, but starting with Windows 10 version 1809, language packs can only be installed from Windows Update. -For Active Directory and Group Policy environments running in a WSUS\SCCM environment change the **Specify settings for optional component installation and component repair** policy to enable downloading Features on Demand directly from Windows Update or a local share. This setting is located in Computer Configuration\Administrative Templates\System in the Group Policy Editor. - -Changing this policy only enables Features on Demand and language pack downloads from Windows Update - it doesn't affect how clients get feature and quality updates. Feature and quality updates will continue to come directly from WSUS\SCCM. It also doesn't affect the schedule for your clients to receive updates. +For Windows domain environments running WSUS or SCCM, change the "**Specify settings for optional component installation and component repair**" policy to enable downloading language and FOD packs from Windows Update. This setting is located in `Computer Configuration\Administrative Templates\System` in the Group Policy Editor. -Learn about other client management options, including using Group Policy and ADMX, in [Manage clients in Windows 10](https://docs.microsoft.com/windows/client-management/). +Changing this policy does not affect how other updates are distributed. They continue to come from WSUS or SCCM as you have scheduled them. + +Learn about other client management options, including using Group Policy and administrative templates, in [Manage clients in Windows 10](https://docs.microsoft.com/windows/client-management/). From a8aee5019f2acc9e1d2748e58772c163fe4ccece Mon Sep 17 00:00:00 2001 From: andreiztm Date: Thu, 31 Jan 2019 20:33:36 +0200 Subject: [PATCH 37/98] Update information on the DCAT service Since 1709, the DCAT service offers Windows Update as well: PS C:\WINDOWS\system32> $SM = New-Object -ComObject Microsoft.Update.ServiceManager PS C:\WINDOWS\system32> $SM.Services Name : DCat Flighting Prod ContentValidationCert : {} ExpirationDate : IsManaged : False IsRegisteredWithAU : False IssueDate : 01/01/1601 12:00:00 AM OffersWindowsUpdates : True RedirectUrls : System.__ComObject ServiceID : 8b24b027-1dee-babb-9a95-3517dfb9c552 IsScanPackageService : False CanRegisterWithAU : False ServiceUrl : https://fe3.delivery.mp.microsoft.com/ SetupPrefix : wu IsDefaultAUService : False --- windows/deployment/update/windows-update-troubleshooting.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/windows-update-troubleshooting.md b/windows/deployment/update/windows-update-troubleshooting.md index 24f32e8455..0d7c9b3b72 100644 --- a/windows/deployment/update/windows-update-troubleshooting.md +++ b/windows/deployment/update/windows-update-troubleshooting.md @@ -115,7 +115,7 @@ Check the output for the Name and OffersWindowsUPdates parameters, which you can |Output|Interpretation| |-|-| |- Name: Microsoft Update
-OffersWindowsUpdates: True| - The update source is Microsoft Update, which means that updates for other Microsoft products besides the operating system could also be delivered.
- Indicates that the client is configured to receive updates for all Microsoft Products (Office, etc.) | -|- Name: DCat Flighting Prod
- OffersWindowsUpdates: False|- The update source is the Windows Insider Program.
- Indicates that the client will not receive or is not configured to receive these updates. | +|- Name: DCat Flighting Prod
- OffersWindowsUpdates: True |- Starting with Windows 10 1709, feature updates are always delivered through the DCAT service.
- Indicates that the client is configured to receive feature updates from Windows Update. | |- Name: Windows Store (DCat Prod)
- OffersWindowsUpdates: False |-The update source is Insider Updates for Store Apps.
- Indicates that the client will not receive or is not configured to receive these updates.| |- Name: Windows Server Update Service
- OffersWindowsUpdates: True |- The source is a Windows Server Updates Services server.
- The client is configured to receive updates from WSUS. | |- Name: Windows Update
- OffersWindowsUpdates: True|- The source is Windows Update.
- The client is configured to receive updates from Windows Update Online.| From 75a46dea00eae461857bd7a887dc71e12a100044 Mon Sep 17 00:00:00 2001 From: andreiztm Date: Thu, 31 Jan 2019 21:48:51 +0200 Subject: [PATCH 38/98] Added known issue for feature updates This new section will be linked to from other docs pages that document the MSA service, for example: https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-accounts#accounts-allowmicrosoftaccountsigninassistant or https://docs.microsoft.com/en-us/windows/deployment/upgrade/upgrade-readiness-deployment-script (entry 54) or https://docs.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services#bkmk-microsoft-account --- .../update/windows-update-troubleshooting.md | 41 ++++++++++++++++++- 1 file changed, 39 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/windows-update-troubleshooting.md b/windows/deployment/update/windows-update-troubleshooting.md index 0d7c9b3b72..638a2ff2e1 100644 --- a/windows/deployment/update/windows-update-troubleshooting.md +++ b/windows/deployment/update/windows-update-troubleshooting.md @@ -49,7 +49,44 @@ The Settings UI is talking to the Update Orchestrator service which in turn is t 2. Launch Services.msc and check if the following services are running: - Update State Orchestrator - Windows Update - + +## Feature updates are not being offered while other updates are +On computers running [Windows 10 1709 or higher](#BKMK_DCAT) configured to update from Windows Update (usually WUfB scenario) servicing and definition updates are being installed successfully, but feature updates are never offered. + +Checking the WindowsUpdate.log reveals the following error: +``` +YYYY/MM/DD HH:mm:ss:SSS PID TID Agent * START * Finding updates CallerId = Update;taskhostw Id = 25 +YYYY/MM/DD HH:mm:ss:SSS PID TID Agent Online = Yes; Interactive = No; AllowCachedResults = No; Ignore download priority = No +YYYY/MM/DD HH:mm:ss:SSS PID TID Agent ServiceID = {855E8A7C-ECB4-4CA3-B045-1DFA50104289} Third party service +YYYY/MM/DD HH:mm:ss:SSS PID TID Agent Search Scope = {Current User} +YYYY/MM/DD HH:mm:ss:SSS PID TID Agent Caller SID for Applicability: S-1-12-1-2933642503-1247987907-1399130510-4207851353 +YYYY/MM/DD HH:mm:ss:SSS PID TID Misc Got 855E8A7C-ECB4-4CA3-B045-1DFA50104289 redir Client/Server URL: https://fe3.delivery.mp.microsoft.com/ClientWebService/client.asmx"" +YYYY/MM/DD HH:mm:ss:SSS PID TID Misc Token Requested with 0 category IDs. +YYYY/MM/DD HH:mm:ss:SSS PID TID Misc GetUserTickets: No user tickets found. Returning WU_E_NO_USERTOKEN. +YYYY/MM/DD HH:mm:ss:SSS PID TID Misc *FAILED* [80070426] Method failed [AuthTicketHelper::GetDeviceTickets:570] +YYYY/MM/DD HH:mm:ss:SSS PID TID Misc *FAILED* [80070426] Method failed [AuthTicketHelper::GetDeviceTickets:570] +YYYY/MM/DD HH:mm:ss:SSS PID TID Misc *FAILED* [80070426] GetDeviceTickets +YYYY/MM/DD HH:mm:ss:SSS PID TID Misc *FAILED* [80070426] Method failed [AuthTicketHelper::AddTickets:1092] +YYYY/MM/DD HH:mm:ss:SSS PID TID Misc *FAILED* [80070426] Method failed [CUpdateEndpointProvider::GenerateSecurityTokenWithAuthTickets:1587] +YYYY/MM/DD HH:mm:ss:SSS PID TID Misc *FAILED* [80070426] GetAgentTokenFromServer +YYYY/MM/DD HH:mm:ss:SSS PID TID Misc *FAILED* [80070426] GetAgentToken +YYYY/MM/DD HH:mm:ss:SSS PID TID Misc *FAILED* [80070426] EP:Call to GetEndpointToken +YYYY/MM/DD HH:mm:ss:SSS PID TID Misc *FAILED* [80070426] Failed to obtain service 855E8A7C-ECB4-4CA3-B045-1DFA50104289 plugin Client/Server auth token of type 0x00000001 +YYYY/MM/DD HH:mm:ss:SSS PID TID ProtocolTalker *FAILED* [80070426] Method failed [CAgentProtocolTalkerContext::DetermineServiceEndpoint:377] +YYYY/MM/DD HH:mm:ss:SSS PID TID ProtocolTalker *FAILED* [80070426] Initialization failed for Protocol Talker Context +YYYY/MM/DD HH:mm:ss:SSS PID TID Agent Exit code = 0x80070426 +YYYY/MM/DD HH:mm:ss:SSS PID TID Agent * END * Finding updates CallerId = Update;taskhostw Id = 25 +``` + +The 0x80070426 error code translates to: +``` +ERROR_SERVICE_NOT_ACTIVE - # The service has not been started. +``` + +Microsoft Account Sign In Assistant (MSA or wlidsvc) is the service in question. The DCAT Flighting service (ServiceId: 855E8A7C-ECB4-4CA3-B045-1DFA50104289) relies on the Microsoft Account Sign In Assistant (MSA) to get the Global Device ID for the device. Without the MSA service running, the global device ID will not be generated and sent by the client and the search for feature updates never completes successfully. + +In order to solve this issue, we need to reset the MSA service to the default StartType of manual. + ## Issues related to HTTP/Proxy Windows Update uses WinHttp with Partial Range requests (RFC 7233) to download updates and applications from Windows Update servers or on-premises WSUS servers. Because of this proxy servers configured on the network must support HTTP RANGE requests. If a proxy was configured in Internet Explorer (User level) but not in WinHTTP (System level), connections to Windows Update will fail. @@ -115,7 +152,7 @@ Check the output for the Name and OffersWindowsUPdates parameters, which you can |Output|Interpretation| |-|-| |- Name: Microsoft Update
-OffersWindowsUpdates: True| - The update source is Microsoft Update, which means that updates for other Microsoft products besides the operating system could also be delivered.
- Indicates that the client is configured to receive updates for all Microsoft Products (Office, etc.) | -|- Name: DCat Flighting Prod
- OffersWindowsUpdates: True |- Starting with Windows 10 1709, feature updates are always delivered through the DCAT service.
- Indicates that the client is configured to receive feature updates from Windows Update. | +|- Name: DCat Flighting Prod
- OffersWindowsUpdates: True |- Starting with Windows 10 1709, feature updates are always delivered through the DCAT service.
- Indicates that the client is configured to receive feature updates from Windows Update. | |- Name: Windows Store (DCat Prod)
- OffersWindowsUpdates: False |-The update source is Insider Updates for Store Apps.
- Indicates that the client will not receive or is not configured to receive these updates.| |- Name: Windows Server Update Service
- OffersWindowsUpdates: True |- The source is a Windows Server Updates Services server.
- The client is configured to receive updates from WSUS. | |- Name: Windows Update
- OffersWindowsUpdates: True|- The source is Windows Update.
- The client is configured to receive updates from Windows Update Online.| From 572c3675b81d331c81382a1ff64f2fac0f259a4b Mon Sep 17 00:00:00 2001 From: andreiztm Date: Thu, 31 Jan 2019 22:35:46 +0200 Subject: [PATCH 39/98] Document known issue for disabling the MSA service More details: https://github.com/MicrosoftDocs/windows-itpro-docs/pull/2592 --- windows/client-management/mdm/policy-csp-accounts.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/client-management/mdm/policy-csp-accounts.md b/windows/client-management/mdm/policy-csp-accounts.md index 7b0ad06974..dc3c75da62 100644 --- a/windows/client-management/mdm/policy-csp-accounts.md +++ b/windows/client-management/mdm/policy-csp-accounts.md @@ -181,6 +181,9 @@ The following list shows the supported values: Added in Windows 10, version 1703. Allows IT Admins the ability to disable the "Microsoft Account Sign-In Assistant" (wlidsvc) NT service. +> [!NOTE] +> If the MSA service is disabled, Windows Update will no longer offer feature updates to devices running Windows 10 1709 or higher. See [Feature updates are not being offered while other updates are](https://docs.microsoft.com/windows/deployment/update/windows-update-troubleshooting#feature-updates-are-not-being-offered-while-other-updates-are). + The following list shows the supported values: From 24faf7a9c1168c059509fa5f2d1d66ef7602edab Mon Sep 17 00:00:00 2001 From: andreiztm Date: Thu, 31 Jan 2019 22:40:02 +0200 Subject: [PATCH 40/98] Document known issue for disabling the MSA service More details: https://github.com/MicrosoftDocs/windows-itpro-docs/pull/2592 --- .../deployment/upgrade/upgrade-readiness-deployment-script.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/upgrade/upgrade-readiness-deployment-script.md b/windows/deployment/upgrade/upgrade-readiness-deployment-script.md index a5337198d6..baaefe3cdb 100644 --- a/windows/deployment/upgrade/upgrade-readiness-deployment-script.md +++ b/windows/deployment/upgrade/upgrade-readiness-deployment-script.md @@ -135,7 +135,7 @@ Error creating or updating registry key: **CommercialId** at **HKLM:\SOFTWARE\Mi | 51 - RunCensus failed with an unexpected exception. | RunCensus explitly runs the process used to collect device information. The method failed with an unexpected exception. Check the ExceptionHResult and ExceptionMessage for more details. | | 52 - DeviceCensus.exe not found on a Windows 10 machine. | On computers running Windows 10, the process devicecensus.exe should be present in the \system32 directory. Error code 52 is returned if the process was not found. Ensure that it exists at the specified location. | | 53 - There is a different CommercialID present at the GPO path: **HKLM:\SOFTWARE\Policies\Microsoft \Windows\DataCollection**. This will take precedence over the CommercialID provided in the script. | Provide the correct CommercialID at the GPO location. | -| 54 - Microsoft Account Sign In Assistant Service is Disabled. | This service is required for devices running Windows 10. The diagnostic data client relies on the Microsoft Account Sign In Assistant (MSA) to get the Global Device ID for the device. Without the MSA service running, the global device ID will not be generated and sent by the client. | +| 54 - Microsoft Account Sign In Assistant Service is Disabled. | This service is required for devices running Windows 10. The diagnostic data client relies on the Microsoft Account Sign In Assistant (MSA) to get the Global Device ID for the device. Without the MSA service running, the global device ID will not be generated and sent by the client and Windows Update will no longer offer feature updates to devices running Windows 10 1709 or higher. See [Feature updates are not being offered while other updates are](https://docs.microsoft.com/windows/deployment/update/windows-update-troubleshooting#feature-updates-are-not-being-offered-while-other-updates-are). | | 55 - SetDeviceNameOptIn function failed to create registry key path: **HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection** | The function SetDeviceNameOptIn sets the registry key value which determines whether to send the device name in diagnostic data. The function tries to create the registry key path if it does not already exist. Verify that the account has the correct permissions to change or add registry keys. | | 56 - SetDeviceNameOptIn function failed to create property AllowDeviceNameInTelemetry at registry key path: **HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection** | Verify that the account has the correct permissions to change or add registry keys.| | 57 - SetDeviceNameOptIn function failed to update AllowDeviceNameInTelemetry property to value 1 at registry key path: **HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection** | Verify that the account has the correct permissions to change or add registry keys. | From c72713f6408b04d94a45f13799dc5f09800ac649 Mon Sep 17 00:00:00 2001 From: andreiztm Date: Thu, 31 Jan 2019 22:44:21 +0200 Subject: [PATCH 41/98] Document known issue for disabling the MSA service More details: https://github.com/MicrosoftDocs/windows-itpro-docs/pull/2592 --- ...windows-operating-system-components-to-microsoft-services.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index 560c1faeba..a24b537d44 100644 --- a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -590,7 +590,7 @@ To turn off the Windows Mail app: ### 11. Microsoft Account -To prevent communication to the Microsoft Account cloud authentication service. Many apps and system components that depend on Microsoft Account authentication may lose functionality. Some of them could be in unexpected ways. +To prevent communication to the Microsoft Account cloud authentication service. Many apps and system components that depend on Microsoft Account authentication may lose functionality. Some of them could be in unexpected ways. For example, Windows Update will no longer offer feature updates to devices running Windows 10 1709 or higher. See [Feature updates are not being offered while other updates are](https://docs.microsoft.com/windows/deployment/update/windows-update-troubleshooting#feature-updates-are-not-being-offered-while-other-updates-are). - Apply the Group Policy: **Computer Configuration** > **Windows Settings** > **Security Settings** > **Local Policies** > **Security Options** > **Accounts: Block Microsoft Accounts** and set it to **Users can't add Microsoft accounts**. From 4fadad998115c0adedc2718a81b0a73b3802bb97 Mon Sep 17 00:00:00 2001 From: andreiztm Date: Thu, 31 Jan 2019 22:47:12 +0200 Subject: [PATCH 42/98] Document known issue for disabling the MSA service More details: https://github.com/MicrosoftDocs/windows-itpro-docs/pull/2592 --- windows/client-management/mdm/policy-csp-update.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/client-management/mdm/policy-csp-update.md b/windows/client-management/mdm/policy-csp-update.md index d1447a5e6c..2e24ad1c47 100644 --- a/windows/client-management/mdm/policy-csp-update.md +++ b/windows/client-management/mdm/policy-csp-update.md @@ -188,6 +188,9 @@ ms.date: 08/29/2018 +

+> [!NOTE] +> If the MSA service is disabled, Windows Update will no longer offer feature updates to devices running Windows 10 1709 or higher. See [Feature updates are not being offered while other updates are](https://docs.microsoft.com/windows/deployment/update/windows-update-troubleshooting#feature-updates-are-not-being-offered-while-other-updates-are).
From f0594a8fbd72c4beef14e9dc5efee018a1a7978d Mon Sep 17 00:00:00 2001 From: Liza Poggemeyer Date: Thu, 31 Jan 2019 13:34:45 -0800 Subject: [PATCH 43/98] Removed "" around policy name. --- windows/deployment/update/fod-and-lang-packs.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/fod-and-lang-packs.md b/windows/deployment/update/fod-and-lang-packs.md index 04ea53111b..4a2aa72c67 100644 --- a/windows/deployment/update/fod-and-lang-packs.md +++ b/windows/deployment/update/fod-and-lang-packs.md @@ -16,7 +16,7 @@ ms.date: 10/18/2018 As of Windows 10 version 1709, you cannot use Windows Server Update Services (WSUS) to host [Features on Demand](https://docs.microsoft.com/windows-hardware/manufacture/desktop/features-on-demand-v2--capabilities) (FOD) and language packs for Windows 10 clients locally. Instead, you can enforce a Group Policy setting that tells the clients to pull them directly from Windows Update. You can also host FOD and language packs on a network share, but starting with Windows 10 version 1809, language packs can only be installed from Windows Update. -For Windows domain environments running WSUS or SCCM, change the "**Specify settings for optional component installation and component repair**" policy to enable downloading language and FOD packs from Windows Update. This setting is located in `Computer Configuration\Administrative Templates\System` in the Group Policy Editor. +For Windows domain environments running WSUS or SCCM, change the **Specify settings for optional component installation and component repair** policy to enable downloading language and FOD packs from Windows Update. This setting is located in `Computer Configuration\Administrative Templates\System` in the Group Policy Editor. Changing this policy does not affect how other updates are distributed. They continue to come from WSUS or SCCM as you have scheduled them. From 4ed6d3f177f843293e1f2698bf3b918b18161bfe Mon Sep 17 00:00:00 2001 From: Trudy Hakala Date: Thu, 31 Jan 2019 21:39:25 +0000 Subject: [PATCH 44/98] Merged PR 14081: mcee licenses add content for O365 A3 / A5 access to mcee licenses --- education/windows/get-minecraft-for-education.md | 2 +- education/windows/school-get-minecraft.md | 15 ++++++++++++++- 2 files changed, 15 insertions(+), 2 deletions(-) diff --git a/education/windows/get-minecraft-for-education.md b/education/windows/get-minecraft-for-education.md index aadf84aabc..b4d1febe79 100644 --- a/education/windows/get-minecraft-for-education.md +++ b/education/windows/get-minecraft-for-education.md @@ -10,7 +10,7 @@ author: trudyha searchScope: - Store ms.author: trudyha -ms.date: 07/27/2017 +ms.date: 01/29/2019 ms.topic: conceptual --- diff --git a/education/windows/school-get-minecraft.md b/education/windows/school-get-minecraft.md index 2def962415..1437894aa9 100644 --- a/education/windows/school-get-minecraft.md +++ b/education/windows/school-get-minecraft.md @@ -10,7 +10,7 @@ author: trudyha searchScope: - Store ms.author: trudyha -ms.date: 01/05/2018 +ms.date: 01/30/2019 ms.topic: conceptual --- @@ -25,6 +25,19 @@ When you sign up for a [Minecraft: Education Edition](https://education.minecraf >[!Note] >If you don't have an Azure AD or Office 365 tenant, you can set up a free Office 365 Education subscription when you request Minecraft: Education Edition. For more information see [Office 365 Education plans and pricing](https://products.office.com/academic/compare-office-365-education-plans). +## Settings for Office 365 A3 or Office 365 A5 customers + +Schools that purchased these products have an extra option for making Minecraft: Education Edition available to their students: +- Office 365 A3 or Office 365 A5 +- Enterprise Mobility + Security E3 or Enterprise Mobility + Security E5 +- Minecraft: Education Edition + +If your school has these products in your tenant, admins can choose to enable Minecraft: Education Edition for students using Office 365 A3 or Office 365 A5. On your Office 365 A3 or Office 365 A5 details page in **Microsoft Store for Education**, under **Settings & actions**, you can select **Allow access to Minecraft: Education Edition for users of Office 365 A3 or Office 365 A5**. + +When this setting is selected, students in your tenant can use Minecraft: Education Edition even if they do not have a trial or a direct license assigned to them. + +If you turn off this setting after students have been using Minecraft: Education Edition, they will have 25 more days to use Minecraft: Education Edition before they do not have access. + ## Add Minecraft to your Microsoft Store for Education You can start with the Minecraft: Education Edition trial to get individual copies of the app. For more information, see [Minecraft: Education Edition - direct purchase](#individual-copies). From ac3909bf7f14479306c9a9dd8f769069d5e8f818 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Thu, 31 Jan 2019 21:40:40 +0000 Subject: [PATCH 45/98] Merged PR 14082: Removed descriptive text from version number specification This isn't appropriate text for "Applies to" --- windows/whats-new/whats-new-windows-10-version-1809.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/whats-new-windows-10-version-1809.md b/windows/whats-new/whats-new-windows-10-version-1809.md index 5a6afec71f..de8365b010 100644 --- a/windows/whats-new/whats-new-windows-10-version-1809.md +++ b/windows/whats-new/whats-new-windows-10-version-1809.md @@ -11,7 +11,7 @@ ms.localizationpriority: high # What's new in Windows 10, version 1809 for IT Pros ->Applies To: Windows 10, version 1809, also known as Windows 10 October 2018 Update +>Applies To: Windows 10, version 1809 In this article we describe new and updated features of interest to IT Pros for Windows 10, version 1809. This update also contains all features and fixes included in previous cumulative updates to Windows 10, version 1803. From 12c5a87ad6962b8d00d3b651376fcd256b101fab Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 1 Feb 2019 09:34:52 -0800 Subject: [PATCH 46/98] incorp of feedback from review --- windows/deployment/windows-10-pro-in-s-mode.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/deployment/windows-10-pro-in-s-mode.md b/windows/deployment/windows-10-pro-in-s-mode.md index b1efad37db..d266a613ca 100644 --- a/windows/deployment/windows-10-pro-in-s-mode.md +++ b/windows/deployment/windows-10-pro-in-s-mode.md @@ -12,7 +12,7 @@ author: jaimeo # Switch to Windows 10 Pro or Enterprise from S mode -We recommend staying in S mode. However, in some limited scenarios, you might need to switch to Windows 10 Pro. You can switch devices running Windows 10, version 1709 or later. +We recommend staying in S mode. However, in some limited scenarios, you might need to switch to Windows 10 Pro, Home, or Enterprise (not in S mode). You can switch devices running Windows 10, version 1709 or later. A number of other transformations are possible depending on which version and edition of Windows 10 you are starting with. Depending on the details, you might *switch* between S mode and the ordinary version or *convert* between different editions while staying in or out of S mode. The following quick reference table summarizes all of the switches or conversions that are supported by various means: @@ -23,7 +23,7 @@ A number of other transformations are possible depending on which version and ed | If a device is running this version | and this edition | then you can switch or convert it to this edition by these methods: | | | |-------------|---------------------|-----------------------------------|-------------------------------|--------------------------------------------| | | | **Store for Education** (switch/convert all devices in your tenant) | **Microsoft Store** (switch/convert one device at a time) | **Intune** (switch/convert any number of devices selected by Admin) | -| **Windows 10, version 1709** | Cloudbook (Pro S)\* | Pro EDU | Pro | No | +| **Windows 10, version 1709** | Pro in S mode | Pro EDU | Pro | No | | | Pro | Pro EDU | Not applicable | Not applicable | | | Home | Not Applicable | Not Applicable | Not Applicable | | | | | | | @@ -40,16 +40,16 @@ A number of other transformations are possible depending on which version and ed Use the following information to switch to Windows 10 Pro through the Microsoft Store. > [!IMPORTANT] -> While it’s free to switch to Windows 10 Pro, it’s not reversible. The only way to rollback this kind of switch is through a [bare metal recovery (BMR)](https://docs.microsoft.com/windows-hardware/manufacture/desktop/create-media-to-run-push-button-reset-features-s14) reset. This restores a Windows device to the factory state, even if the user needs to replace the hard drive or completely wipe the drive clean. If a device is switched out of S mode via the Microsoft Store, it will remain out of S mode even after the device is reset. +> While it’s free to switch to Windows 10 Pro, it’s not reversible. The only way to rollback this kind of switch is through a [bare-metal recovery (BMR)](https://docs.microsoft.com/windows-hardware/manufacture/desktop/create-media-to-run-push-button-reset-features-s14) reset. This restores a Windows device to the factory state, even if the user needs to replace the hard drive or completely wipe the drive clean. If a device is switched out of S mode via the Microsoft Store, it will remain out of S mode even after the device is reset. ## Switch one device through the Microsoft Store -Use the following information to switch to Windows 10 Pro through the Microsoft Store. +Use the following information to switch to Windows 10 Pro through the Microsoft Store or by navigating to **Settings** and then **Activation** on the device. Note these differences affecting switching modes in various releases of Windows 10: -- In Windows 10, version 1709, you can switch devices one at a time from Windows 10 Pro in S mode to Windows 10 Pro by using the Microsoft Store. No other switches are possible. -- In Windows 10, version 1803, you can switch devices running any S mode edition to the equivalent non-S mode edition one at a time by using the Microsoft Store. -- Windows 10, version 1809, you can switch devices running any S mode edition to the equivalent non-S mode edition one at a time by using the Microsoft Store or you can switch multiple devices in bulk by using Intune. You can also block users from switching devices themselves. +- In Windows 10, version 1709, you can switch devices one at a time from Windows 10 Pro in S mode to Windows 10 Pro by using the Microsoft Store or **Settings**. No other switches are possible. +- In Windows 10, version 1803, you can switch devices running any S mode edition to the equivalent non-S mode edition one at a time by using the Microsoft Store or **Settings**. +- Windows 10, version 1809, you can switch devices running any S mode edition to the equivalent non-S mode edition one at a time by using the Microsoft Store, **Settings**, or you can switch multiple devices in bulk by using Intune. You can also block users from switching devices themselves. 1. Sign into the Microsoft Store using your Microsoft account. From 2c73c18baadfae78fd42a7c6e96fbcda526ca870 Mon Sep 17 00:00:00 2001 From: Michael Niehaus Date: Fri, 1 Feb 2019 09:40:58 -0800 Subject: [PATCH 47/98] Update windows-autopilot-requirements-licensing.md Add Intune for Education to the list of licenses --- .../windows-autopilot-requirements-licensing.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/deployment/windows-autopilot/windows-autopilot-requirements-licensing.md b/windows/deployment/windows-autopilot/windows-autopilot-requirements-licensing.md index ce596226f3..686969c4ac 100644 --- a/windows/deployment/windows-autopilot/windows-autopilot-requirements-licensing.md +++ b/windows/deployment/windows-autopilot/windows-autopilot-requirements-licensing.md @@ -29,6 +29,7 @@ Windows Autopilot depends on specific capabilities available in Windows 10 and A - [Microsoft 365 Academic A1, A3, or A5 subscriptions](https://www.microsoft.com/en-us/education/buy-license/microsoft365/default.aspx) - [Microsoft 365 Enterprise E3 or E5 subscriptions](https://www.microsoft.com/en-us/microsoft-365/enterprise), which include all Windows 10, Office 365, and EM+S features (Azure AD and Intune) - [Enterprise Mobility + Security E3 or E5 subscriptions](https://www.microsoft.com/en-us/cloud-platform/enterprise-mobility-security), which include all needed Azure AD and Intune features + - [Intune for Education subscriptions](https://docs.microsoft.com/en-us/intune-education/what-is-intune-for-education), which include all needed Azure AD and Intune features - [Azure Active Directory Premium P1 or P2](https://azure.microsoft.com/en-us/services/active-directory/) and [Microsoft Intune subscriptions](https://www.microsoft.com/en-us/cloud-platform/microsoft-intune) (or an alternative MDM service) Additionally, the following are also recommended but not required: From 74701833b55995a52407c9a1f04acc4ecee7e855 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 1 Feb 2019 10:35:44 -0800 Subject: [PATCH 48/98] cleaning up remaining references to OMS --- .../deployment/update/device-health-monitor.md | 9 ++++----- windows/deployment/update/device-health-using.md | 11 +++++------ .../update-compliance-delivery-optimization.md | 1 - .../update-compliance-feature-update-status.md | 1 - .../update/update-compliance-get-started.md | 3 +-- .../update/update-compliance-monitor.md | 3 +-- .../update/update-compliance-need-attention.md | 1 - .../update/update-compliance-perspectives.md | 5 ++--- .../update-compliance-security-update-status.md | 1 - .../deployment/update/update-compliance-using.md | 3 +-- .../update/update-compliance-wd-av-status.md | 1 - .../windows-analytics-FAQ-troubleshooting.md | 2 +- .../update/windows-analytics-azure-portal.md | 2 +- .../update/windows-analytics-overview.md | 7 +++---- .../update/windows-analytics-privacy.md | 1 - .../upgrade-readiness-additional-insights.md | 1 - .../upgrade/upgrade-readiness-architecture.md | 5 ++--- .../upgrade/upgrade-readiness-data-sharing.md | 3 +-- .../upgrade/upgrade-readiness-deploy-windows.md | 3 +-- .../upgrade-readiness-deployment-script.md | 1 - .../upgrade/upgrade-readiness-get-started.md | 3 +-- .../upgrade/upgrade-readiness-identify-apps.md | 3 +-- .../upgrade-readiness-monitor-deployment.md | 1 - .../upgrade/upgrade-readiness-requirements.md | 15 +++++++-------- .../upgrade/upgrade-readiness-resolve-issues.md | 1 - .../upgrade/upgrade-readiness-target-new-OS.md | 1 - .../upgrade/upgrade-readiness-upgrade-overview.md | 3 +-- 27 files changed, 33 insertions(+), 58 deletions(-) diff --git a/windows/deployment/update/device-health-monitor.md b/windows/deployment/update/device-health-monitor.md index 25bcd0d27e..822409ea0f 100644 --- a/windows/deployment/update/device-health-monitor.md +++ b/windows/deployment/update/device-health-monitor.md @@ -1,12 +1,11 @@ --- title: Monitor the health of devices with Device Health -description: You can use Device Health in OMS to monitor the frequency and causes of crashes and misbehaving apps on devices in your network. +description: You can use Device Health in Azure Portal to monitor the frequency and causes of crashes and misbehaving apps on devices in your network. keywords: oms, operations management suite, wdav, health, log analytics ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library ms.localizationpriority: medium -ms.date: 11/14/2017 ms.pagetype: deploy author: jaimeo ms.author: jaimeo @@ -18,9 +17,9 @@ ms.author: jaimeo Device Health is the newest Windows Analytics solution that complements the existing Upgrade Readiness and Update Compliance solutions by providing IT with reports on some common problems the end users might experience so they can be proactively remediated, thus saving support calls and improving end-user productivity. -Like Upgrade Readiness and Update Compliance, Device Health is a solution built within Operations Management Suite (OMS), a cloud-based monitoring and automation service that has a flexible servicing subscription based on data usage and retention. This release is free for customers to try and will not incur charges on your OMS workspace for its use. For more information about OMS, see [Operations Management Suite overview](https://azure.microsoft.com/documentation/articles/operations-management-suite-overview/). +Like Upgrade Readiness and Update Compliance, Device Health is a solution built in Azure Portal, a cloud-based monitoring and automation service that has a flexible servicing subscription based on data usage and retention. This release is free for customers to try and will not incur charges on your Azure Portal workspace for its use. For more information about Azure Portal, see [Windows Analytics in the Azure Portal](windows-analytics-azure-portal.md) . -Device Health uses Windows diagnostic data that is part of all Windows 10 devices. If you have already employed Upgrade Readiness or Update Compliance solutions, all you need to do is select Device Health from the OMS solution gallery and add it to your OMS workspace. Device Health requires enhanced diagnostic data, so you might need to implement this policy if you've not already done so. +Device Health uses Windows diagnostic data that is part of all Windows 10 devices. If you have already employed Upgrade Readiness or Update Compliance solutions, all you need to do is select Device Health from the Azure Portal solution gallery and add it to your Azure Portal workspace. Device Health requires enhanced diagnostic data, so you might need to implement this policy if you've not already done so. Device Health provides the following: @@ -58,7 +57,7 @@ The Device Health architecture and data flow is summarized by the following five **(1)** User computers send diagnostic data to a secure Microsoft data center using the Microsoft Data Management Service.
**(2)** Diagnostic data is analyzed by the Microsoft Telemetry Service.
-**(3)** Diagnostic data is pushed from the Microsoft Telemetry Service to your OMS workspace.
+**(3)** Diagnostic data is pushed from the Microsoft Telemetry Service to your Azure Portal workspace.
**(4)** Diagnostic data is available in the Device Health solution.
**(5)** You are now able to proactively monitor Device Health issues in your environment.
diff --git a/windows/deployment/update/device-health-using.md b/windows/deployment/update/device-health-using.md index 890e0c33bb..26da341d39 100644 --- a/windows/deployment/update/device-health-using.md +++ b/windows/deployment/update/device-health-using.md @@ -5,7 +5,6 @@ ms.prod: w10 ms.mktglfcycl: deploy keywords: oms, operations management suite, wdav, health, log analytics ms.sitesec: library -ms.date: 03/30/2018 ms.pagetype: deploy author: jaimeo ms.author: jaimeo @@ -29,7 +28,7 @@ Device Health provides the following benefits: >[!NOTE] >Information is refreshed daily so that health status can be monitored. Changes will be displayed about 24-48 hours after their occurrence, so you always have a recent snapshot of your devices. -In OMS, the aspects of a solution's dashboard are usually divided into blades. Blades are a slice of information, typically with a summarization tile and an enumeration of the items that makes up that data. All data is presented through queries. Perspectives are also possible, wherein a given query has a unique view designed to display custom data. The terminology of blades, tiles, and perspectives will be used in the sections that follow. +In Azure Portal, the aspects of a solution's dashboard are usually divided into blades. Blades are a slice of information, typically with a summarization tile and an enumeration of the items that makes up that data. All data is presented through queries. Perspectives are also possible, wherein a given query has a unique view designed to display custom data. The terminology of blades, tiles, and perspectives will be used in the sections that follow. ## Device Reliability @@ -260,16 +259,16 @@ In this chart view, you can click a particular app listing, which will open addi Here you can copy the WipAppid and use that for adjusting the WIP policy. -## Data model and OMS built-in extensibility +## Data model and built-in extensibility All of the views and blades display slices of the most useful data by using pre-formed queries. You have access to the full set of data collected by Device Health, which means you can construct your own queries to expose any data that is of interest to you. For documentation on working with log searches, see [Find data using log searches](https://docs.microsoft.com/azure/log-analytics/log-analytics-log-searches). This topic section provides information about the data types being populated specifically by Device Health. ### Example queries -You can run these queries from the OMS **Log Search** interface (available at several points in the Device Health interface) by just typing them in. There are few details to be aware of: +You can run these queries from the Azure Portal **Log Search** interface (available at several points in the Device Health interface) by just typing them in. There are few details to be aware of: - After running a query, make sure to set the date range (which appears upper left after running initial query) to "7 days" to ensure you get data back. -- If you see the search tutorial dialog appearing frequently, it's likely because you are have read-only access to the OMS workspace. Ask a workspace administrator to grant you "contributor" permissions (which is required for the "completed tutorial" state to persist). +- If you see the search tutorial dialog appearing frequently, it's likely because you are have read-only access to the Azure Portal workspace. Ask a workspace administrator to grant you "contributor" permissions (which is required for the "completed tutorial" state to persist). - If you use the search filters in the left pane, you might notice there is no control to undo a filter selection. To undo a selection, delete the (FilterName="FilterValue") element that is appended to the search query and then click the search button again. For example, after you run a base query of *Type = DHOSReliability KernelModeCrashCount > 0*, a number of filter options appear on the left. If you then filter on **Manufacturer** (for example, by setting *Manufacturer="Microsoft Corporation"* and then clicking **Apply**), the query will change to *Type = DHOSReliability KernelModeCrashCount > 0 (Manufacturer="Microsoft Corporation")*. Delete *(Manufacturer="Microsoft Corporation")* and then click the **search** button again to re-run the query without that filter. ### Device reliability query examples @@ -300,7 +299,7 @@ You can run these queries from the OMS **Log Search** interface (available at se ### Exporting data and configuring alerts -OMS enables you to export data to other tools. To do this, in any view that shows **Log Search** just click the **Export** button. Similarly, clicking the **Alert** button will enable you to run a query automaticlaly on a schedule and receive email alerts for particular query results that you set. If you have a PowerBI account, then you will also see a **PowerBI** button that enables you to run a query on a schedule and have the results automatically saved as a PowerBI data set. +Azure Portal enables you to export data to other tools. To do this, in any view that shows **Log Search** just click the **Export** button. Similarly, clicking the **Alert** button will enable you to run a query automaticlaly on a schedule and receive email alerts for particular query results that you set. If you have a PowerBI account, then you will also see a **PowerBI** button that enables you to run a query on a schedule and have the results automatically saved as a PowerBI data set. diff --git a/windows/deployment/update/update-compliance-delivery-optimization.md b/windows/deployment/update/update-compliance-delivery-optimization.md index c29062acb5..0f4e2d8cdc 100644 --- a/windows/deployment/update/update-compliance-delivery-optimization.md +++ b/windows/deployment/update/update-compliance-delivery-optimization.md @@ -7,7 +7,6 @@ ms.sitesec: library ms.pagetype: deploy author: jaimeo ms.author: jaimeo -ms.date: 10/04/2018 keywords: oms, operations management suite, optimization, downloads, updates, log analytics ms.localizationpriority: medium --- diff --git a/windows/deployment/update/update-compliance-feature-update-status.md b/windows/deployment/update/update-compliance-feature-update-status.md index 658f351965..d3eae3a9f1 100644 --- a/windows/deployment/update/update-compliance-feature-update-status.md +++ b/windows/deployment/update/update-compliance-feature-update-status.md @@ -7,7 +7,6 @@ ms.sitesec: library ms.pagetype: deploy author: Jaimeo ms.author: jaimeo -ms.date: 10/04/2018 --- # Feature Update Status diff --git a/windows/deployment/update/update-compliance-get-started.md b/windows/deployment/update/update-compliance-get-started.md index 0d73747fed..cd036990aa 100644 --- a/windows/deployment/update/update-compliance-get-started.md +++ b/windows/deployment/update/update-compliance-get-started.md @@ -1,6 +1,6 @@ --- title: Get started with Update Compliance (Windows 10) -description: Configure Update Compliance in OMS to see the status of updates and antimalware protection on devices in your network. +description: Configure Update Compliance in Azure Portal to see the status of updates and antimalware protection on devices in your network. keywords: update compliance, oms, operations management suite, prerequisites, requirements, updates, upgrades, antivirus, antimalware, signature, log analytics, wdav ms.prod: w10 ms.mktglfcycl: deploy @@ -8,7 +8,6 @@ ms.sitesec: library ms.pagetype: deploy author: Jaimeo ms.author: jaimeo -ms.date: 10/04/2018 ms.localizationpriority: medium --- diff --git a/windows/deployment/update/update-compliance-monitor.md b/windows/deployment/update/update-compliance-monitor.md index b6828c6943..97a514dde4 100644 --- a/windows/deployment/update/update-compliance-monitor.md +++ b/windows/deployment/update/update-compliance-monitor.md @@ -1,6 +1,6 @@ --- title: Monitor Windows Updates and Windows Defender AV with Update Compliance (Windows 10) -description: You can use Update Compliance in OMS to monitor the progress of updates and key antimalware protection features on devices in your network. +description: You can use Update Compliance in Azure Portal to monitor the progress of updates and key antimalware protection features on devices in your network. keywords: oms, operations management suite, wdav, updates, upgrades, antivirus, antimalware, signature, log analytics ms.prod: w10 ms.mktglfcycl: deploy @@ -8,7 +8,6 @@ ms.sitesec: library ms.pagetype: deploy author: Jaimeo ms.author: jaimeo -ms.date: 10/04/2018 ms.localizationpriority: medium --- diff --git a/windows/deployment/update/update-compliance-need-attention.md b/windows/deployment/update/update-compliance-need-attention.md index 8f21da95f6..0b76b9c8ac 100644 --- a/windows/deployment/update/update-compliance-need-attention.md +++ b/windows/deployment/update/update-compliance-need-attention.md @@ -7,7 +7,6 @@ ms.sitesec: library ms.pagetype: deploy author: Jaimeo ms.author: jaimeo -ms.date: 10/04/2018 --- # Needs attention! diff --git a/windows/deployment/update/update-compliance-perspectives.md b/windows/deployment/update/update-compliance-perspectives.md index e3fe9c0bb9..38ad846be7 100644 --- a/windows/deployment/update/update-compliance-perspectives.md +++ b/windows/deployment/update/update-compliance-perspectives.md @@ -5,9 +5,8 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: deploy -author: DaniHalfin -ms.author: daniha -ms.date: 10/13/2017 +author: jaimeo +ms.author: jaimeo --- # Perspectives diff --git a/windows/deployment/update/update-compliance-security-update-status.md b/windows/deployment/update/update-compliance-security-update-status.md index bf7d1d6795..45556de62c 100644 --- a/windows/deployment/update/update-compliance-security-update-status.md +++ b/windows/deployment/update/update-compliance-security-update-status.md @@ -7,7 +7,6 @@ ms.sitesec: library ms.pagetype: deploy author: Jaimeo ms.author: jaimeo -ms.date: 10/04/2018 --- # Security Update Status diff --git a/windows/deployment/update/update-compliance-using.md b/windows/deployment/update/update-compliance-using.md index d9b61d93cf..a30c60418b 100644 --- a/windows/deployment/update/update-compliance-using.md +++ b/windows/deployment/update/update-compliance-using.md @@ -8,7 +8,6 @@ ms.sitesec: library ms.pagetype: deploy author: jaimeo ms.author: jaimeo -ms.date: 10/04/2018 ms.localizationpriority: medium --- @@ -78,7 +77,7 @@ This means you should generally expect to see new data every 24-36 hours, except ## Using Log Analytics -Update Compliance is built on the Log Analytics platform that is integrated into Operations Management Suite. All data in the workspace is the direct result of a query. Understanding the tools and features at your disposal, all integrated within OMS, can deeply enhance your experience and complement Update Compliance. +Update Compliance is built on the Log Analytics platform that is integrated into Operations Management Suite. All data in the workspace is the direct result of a query. Understanding the tools and features at your disposal, all integrated within Azure Portal, can deeply enhance your experience and complement Update Compliance. See below for a few topics related to Log Analytics: * Learn how to effectively execute custom Log Searches by referring to Microsoft Azure’s excellent documentation on [querying data in Log Analytics](https://docs.microsoft.com/azure/log-analytics/log-analytics-log-searches). diff --git a/windows/deployment/update/update-compliance-wd-av-status.md b/windows/deployment/update/update-compliance-wd-av-status.md index aaf6b63c0c..bc12b6797b 100644 --- a/windows/deployment/update/update-compliance-wd-av-status.md +++ b/windows/deployment/update/update-compliance-wd-av-status.md @@ -7,7 +7,6 @@ ms.sitesec: library ms.pagetype: deploy author: jaimeo ms.author: jaimeo -ms.date: 10/04/2018 --- # Windows Defender AV Status diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index b39d7fc130..31b15c1429 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -201,7 +201,7 @@ Starting with Windows 10, version 1803, the device name is no longer collected b If you want to stop using Upgrade Readiness and stop sending diagnostic data to Microsoft, follow these steps: -1. Unsubscribe from the Upgrade Readiness solution in the OMS portal. In the OMS portal, go to **Settings** > **Connected Sources** > **Windows Telemetry** and choose the **Unsubscribe** option. +1. Unsubscribe from the Upgrade Readiness solution in Azure Portal. In Azure Portal, go to **Settings** > **Connected Sources** > **Windows Telemetry** and choose the **Unsubscribe** option. ![Upgrade Readiness unsubscribe](images/upgrade-analytics-unsubscribe.png) diff --git a/windows/deployment/update/windows-analytics-azure-portal.md b/windows/deployment/update/windows-analytics-azure-portal.md index 2a37f7db2f..4384100c31 100644 --- a/windows/deployment/update/windows-analytics-azure-portal.md +++ b/windows/deployment/update/windows-analytics-azure-portal.md @@ -12,7 +12,7 @@ ms.author: jaimeo ms.localizationpriority: medium --- -# Windows Analytics in the Azure portal +# Windows Analytics in the Azure Portal Windows Analytics uses Azure Log Analytics (formerly known as Operations Management Suite or OMS), a collection of cloud-based servicing for monitoring and automating your on-premises and cloud environments. diff --git a/windows/deployment/update/windows-analytics-overview.md b/windows/deployment/update/windows-analytics-overview.md index 3b7e53eaeb..d150f9e110 100644 --- a/windows/deployment/update/windows-analytics-overview.md +++ b/windows/deployment/update/windows-analytics-overview.md @@ -5,7 +5,6 @@ keywords: Device Health, Upgrade Readiness, Update Compliance, oms, operations m ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library -ms.date: 03/09/2018 ms.pagetype: deploy author: jaimeo ms.author: jaimeo @@ -14,7 +13,7 @@ ms.localizationpriority: medium # Windows Analytics overview -Windows Analytics is a set of solutions for Microsoft Operations Management Suite (OMS) that provide you with extensive data about the state of devices in your deployment. There are currently three solutions which you can use singly or in any combination: +Windows Analytics is a set of solutions for Azure Portal that provide you with extensive data about the state of devices in your deployment. There are currently three solutions which you can use singly or in any combination: ## Device Health @@ -38,7 +37,7 @@ Windows Analytics is a set of solutions for Microsoft Operations Management Suit ## Upgrade Readiness -[Upgrade Readiness](../upgrade/upgrade-readiness-get-started.md) offers a set of tools to plan and manage the upgrade process end to end, allowing you to adopt new Windows releases more quickly. With new Windows versions being released multiple times a year, ensuring application and driver compatibility on an ongoing basis is key to adopting new Windows versions as they are released. Upgrade Readiness not only supports upgrade management from Windows 7 and Windows 8.1 to Windows 10, but also Windows 10 upgrades in the Windows as a Service model. +[Upgrade Readiness](../upgrade/upgrade-readiness-get-started.md) offers a set of tools to plan and manage the upgrade process end to end, allowing you to adopt new Windows releases more quickly. With new Windows versions being released multiple times a year, ensuring application and driver compatibility on an ongoing basis is key to adopting new Windows versions as they are released. Upgrade Readiness not only supports upgrade management from Windows 7 and Windows 8.1 to Windows 10, but also Windows 10 upgrades in the Windows as a service model. Use Upgrade Readiness to get: @@ -50,4 +49,4 @@ Use Upgrade Readiness to get: - Application usage information, allowing targeted validation; workflow to track validation progress and decisions - Data export to commonly used software deployment tools, including System Center Configuration Manager -To get started with any of these solutions, visit the links for instructions to add it to OMS. \ No newline at end of file +To get started with any of these solutions, visit the links for instructions to add it to Azure Portal. \ No newline at end of file diff --git a/windows/deployment/update/windows-analytics-privacy.md b/windows/deployment/update/windows-analytics-privacy.md index 1c5817f29c..1ce1363b10 100644 --- a/windows/deployment/update/windows-analytics-privacy.md +++ b/windows/deployment/update/windows-analytics-privacy.md @@ -8,7 +8,6 @@ ms.sitesec: library ms.pagetype: deploy author: jaimeo ms.author: jaimeo -ms.date: 12/11/2018 ms.localizationpriority: high --- diff --git a/windows/deployment/upgrade/upgrade-readiness-additional-insights.md b/windows/deployment/upgrade/upgrade-readiness-additional-insights.md index 80369e62f5..74c4a1b565 100644 --- a/windows/deployment/upgrade/upgrade-readiness-additional-insights.md +++ b/windows/deployment/upgrade/upgrade-readiness-additional-insights.md @@ -3,7 +3,6 @@ title: Upgrade Readiness - Additional insights description: Explains additional features of Upgrade Readiness. ms.prod: w10 author: jaimeo -ms.date: 07/02/2018 --- # Upgrade Readiness - Additional insights diff --git a/windows/deployment/upgrade/upgrade-readiness-architecture.md b/windows/deployment/upgrade/upgrade-readiness-architecture.md index fd7e2605ab..d0bf1ba221 100644 --- a/windows/deployment/upgrade/upgrade-readiness-architecture.md +++ b/windows/deployment/upgrade/upgrade-readiness-architecture.md @@ -2,8 +2,7 @@ title: Upgrade Readiness architecture (Windows 10) description: Describes Upgrade Readiness architecture. ms.prod: w10 -author: greg-lindsay -ms.date: 04/25/2017 +author: jaimeo --- # Upgrade Readiness architecture @@ -16,7 +15,7 @@ Microsoft analyzes system, application, and driver diagnostic data to help you ![Upgrade Readiness architecture](../images/ur-arch-diagram.png) -After you enable Windows diagnostic data on user computers and install the compatibility update KB (1), user computers send computer, application and driver diagnostic data to a secure Microsoft data center through the Microsoft Data Management Service (2). After you configure Upgrade Readiness, diagnostic data is analyzed by the Upgrade Readiness Service (3) and pushed to your OMS workspace (4). You can then use the Upgrade Readiness solution (5) to plan and manage Windows upgrades. +After you enable Windows diagnostic data on user computers and install the compatibility update KB (1), user computers send computer, application and driver diagnostic data to a secure Microsoft data center through the Microsoft Data Management Service (2). After you configure Upgrade Readiness, diagnostic data is analyzed by the Upgrade Readiness Service (3) and pushed to your workspace (4). You can then use the Upgrade Readiness solution (5) to plan and manage Windows upgrades. For more information about what diagnostic data Microsoft collects and how that data is used and protected by Microsoft, see: diff --git a/windows/deployment/upgrade/upgrade-readiness-data-sharing.md b/windows/deployment/upgrade/upgrade-readiness-data-sharing.md index 529808e5c4..5be4b56f53 100644 --- a/windows/deployment/upgrade/upgrade-readiness-data-sharing.md +++ b/windows/deployment/upgrade/upgrade-readiness-data-sharing.md @@ -5,8 +5,7 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: deploy -author: greg-lindsay -ms.date: 04/19/2017 +author: jaimeo --- # Upgrade Readiness data sharing diff --git a/windows/deployment/upgrade/upgrade-readiness-deploy-windows.md b/windows/deployment/upgrade/upgrade-readiness-deploy-windows.md index 3aabb7b13b..96332bb317 100644 --- a/windows/deployment/upgrade/upgrade-readiness-deploy-windows.md +++ b/windows/deployment/upgrade/upgrade-readiness-deploy-windows.md @@ -3,7 +3,6 @@ title: Upgrade Readiness - Get a list of computers that are upgrade ready (Windo description: Describes how to get a list of computers that are ready to be upgraded in Upgrade Readiness. ms.prod: w10 author: jaimeo -ms.date: 04/19/2017 --- # Upgrade Readiness - Step 3: Deploy Windows @@ -35,7 +34,7 @@ Select **Export computers** for more details, including computer name, manufactu ## Computer groups -Computer groups allow you to segment your environment by creating device groups based on OMS log search results, or by importing groups from Active Directory, WSUS or System Center Configuration Manager. Computer groups are an OMS feature. For more information, see [Computer groups in OMS](https://blogs.technet.microsoft.com/msoms/2016/04/04/computer-groups-in-oms/). +Computer groups allow you to segment your environment by creating device groups based on log search results, or by importing groups from Active Directory, WSUS or System Center Configuration Manager. Computer groups are an OMS feature. For more information, see [Computer groups in OMS](https://blogs.technet.microsoft.com/msoms/2016/04/04/computer-groups-in-oms/). Query based computer groups are recommended in the initial release of this feature. A feature known as **Configuration Manager Upgrade Readiness Connector** is anticipated in a future release that will enable synchronization of **ConfigMgr Collections** with computer groups in OMS. diff --git a/windows/deployment/upgrade/upgrade-readiness-deployment-script.md b/windows/deployment/upgrade/upgrade-readiness-deployment-script.md index baaefe3cdb..1d04244d96 100644 --- a/windows/deployment/upgrade/upgrade-readiness-deployment-script.md +++ b/windows/deployment/upgrade/upgrade-readiness-deployment-script.md @@ -6,7 +6,6 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: deploy author: jaimeo -ms.date: 12/12/2018 --- # Upgrade Readiness deployment script diff --git a/windows/deployment/upgrade/upgrade-readiness-get-started.md b/windows/deployment/upgrade/upgrade-readiness-get-started.md index 35d32c83e9..af94500571 100644 --- a/windows/deployment/upgrade/upgrade-readiness-get-started.md +++ b/windows/deployment/upgrade/upgrade-readiness-get-started.md @@ -8,7 +8,6 @@ ms.sitesec: library ms.pagetype: deploy author: jaimeo ms.author: jaimeo -ms.date: 10/10/2018 ms.localizationpriority: medium --- @@ -30,7 +29,7 @@ Before you begin, consider reviewing the following helpful information:
When you are ready to begin using Upgrade Readiness, perform the following steps: 1. Review [data collection and privacy](#data-collection-and-privacy) information. -2. [Add Upgrade Readiness to OMS](#add-upgrade-readiness-to-operations-management-suite). +2. [Add the Upgrade Readiness solution to your Azure subsctiption](#add-the-upgrade-readiness-solution-to-your-Azure-subscription). 3. [Enroll devices in Windows Analytics](#enroll-devices-in-windows-analytics). 4. [Use Upgrade Readiness to manage Windows Upgrades](#use-upgrade-readiness-to-manage-windows-upgrades) once your devices are enrolled. diff --git a/windows/deployment/upgrade/upgrade-readiness-identify-apps.md b/windows/deployment/upgrade/upgrade-readiness-identify-apps.md index 92dbe3590b..b089d65f7b 100644 --- a/windows/deployment/upgrade/upgrade-readiness-identify-apps.md +++ b/windows/deployment/upgrade/upgrade-readiness-identify-apps.md @@ -2,8 +2,7 @@ title: Upgrade Readiness - Identify important apps (Windows 10) description: Describes how to prepare your environment so that you can use Upgrade Readiness to manage Windows upgrades. ms.prod: w10 -author: greg-lindsay -ms.date: 04/19/2017 +author: jaimeo --- # Upgrade Readiness - Step 1: Identify important apps diff --git a/windows/deployment/upgrade/upgrade-readiness-monitor-deployment.md b/windows/deployment/upgrade/upgrade-readiness-monitor-deployment.md index be3d2aee32..e1e0bb0a7d 100644 --- a/windows/deployment/upgrade/upgrade-readiness-monitor-deployment.md +++ b/windows/deployment/upgrade/upgrade-readiness-monitor-deployment.md @@ -6,7 +6,6 @@ ms.localizationpriority: medium ms.prod: w10 author: jaimeo ms.author: jaimeo -ms.date: 11/07/2018 --- # Upgrade Readiness - Step 4: Monitor diff --git a/windows/deployment/upgrade/upgrade-readiness-requirements.md b/windows/deployment/upgrade/upgrade-readiness-requirements.md index 03b001c31f..b6fbae1ea8 100644 --- a/windows/deployment/upgrade/upgrade-readiness-requirements.md +++ b/windows/deployment/upgrade/upgrade-readiness-requirements.md @@ -4,8 +4,7 @@ description: Provides requirements for Upgrade Readiness. keywords: windows analytics, oms, operations management suite, prerequisites, requirements, upgrades, log analytics, ms.prod: w10 author: jaimeo -ms.author: -ms.date: 06/12/2018 +ms.author: jaimeo ms.localizationpriority: medium --- @@ -38,14 +37,14 @@ While Upgrade Readiness can be used to assist with updating devices from Windows ## Operations Management Suite or Azure Log Analytics -Upgrade Readiness is offered as a solution in Microsoft Operations Management Suite (OMS) and Azure Log Analytics, a collection of cloud based services for managing on premises and cloud computing environments. For more information about OMS, see [Operations Management Suite overview](https://azure.microsoft.com/documentation/articles/operations-management-suite-overview/) or the Azure [Log Analytics overview](https://azure.microsoft.com/services/log-analytics/). +Upgrade Readiness is offered as a solution in Azure Portal and Azure Log Analytics, a collection of cloud-based services for managing on premises and cloud computing environments. For more information about Azure Portal, see [Windows Analytics in Azure Portal](../windows-analytics-azure-portal.md) or the Azure [Log Analytics overview](https://azure.microsoft.com/services/log-analytics/). -If you’re already using OMS or Azure Log Analytics, you’ll find Upgrade Readiness in the Solutions Gallery. Click the **Upgrade Readiness** tile in the gallery and then click **Add** on the solution’s details page. Upgrade Readiness is now visible in your workspace. +If you’re already using Azure Portal or Azure Log Analytics, you’ll find Upgrade Readiness in the Solutions Gallery. Click the **Upgrade Readiness** tile in the gallery and then click **Add** on the solution’s details page. Upgrade Readiness is now visible in your workspace. -If you are not using OMS or Azure Log Analytics, go to [Log Analytics](https://azure.microsoft.com/services/log-analytics/) on Microsoft.com and select **Start free** to start the setup process. During the process, you’ll create a workspace and add the Upgrade Readiness solution to it. +If you are not using Azure Portal or Azure Log Analytics, go to [Log Analytics](https://azure.microsoft.com/services/log-analytics/) on Microsoft.com and select **Start free** to start the setup process. During the process, you’ll create a workspace and add the Upgrade Readiness solution to it. >[!IMPORTANT] ->You can use either a Microsoft Account or a Work or School account to create a workspace. If your company is already using Azure Active Directory, use a Work or School account when you sign in to OMS. Using a Work or School account allows you to use identities from your Azure AD to manage permissions in OMS. You also need an Azure subscription to link to your OMS workspace. The account you used to create the workspace must have administrator permissions on the Azure subscription in order to link the workspace to the Azure account. Once the link has been established, you can revoke the administrator permissions. +>You can use either a Microsoft Account or a Work or School account to create a workspace. If your company is already using Azure Active Directory, use a Work or School account when you sign in to Azure Portal. Using a Work or School account allows you to use identities from your Azure AD to manage permissions in Azure Portal. You also need an Azure subscription to link to your Azure Portal workspace. The account you used to create the workspace must have administrator permissions on the Azure subscription in order to link the workspace to the Azure account. Once the link has been established, you can revoke the administrator permissions. ## System Center Configuration Manager integration @@ -59,13 +58,13 @@ Before you get started configuring Upgrade Anatlyics, review the following tips **Upgrade Readiness does not support on-premises Windows deployments.** Upgrade Readiness is built as a cloud service, which allows Upgrade Readiness to provide you with insights based on the data from user computers and other Microsoft compatibility services. Cloud services are easy to get up and running and are cost-effective because there is no requirement to physically implement and maintain services on-premises. -**In-region data storage requirements.** Windows diagnostic data from user computers is encrypted, sent to, and processed at Microsoft-managed secure data centers located in the US. Our analysis of the upgrade readiness-related data is then provided to you through the Upgrade Readiness solution in the Microsoft Operations Management Suite (OMS) portal. Upgrade Readiness is supported in all OMS regions; however, selecting an international OMS region does not prevent diagnostic data from being sent to and processed in Microsoft's secure data centers in the US. +**In-region data storage requirements.** Windows diagnostic data from user computers is encrypted, sent to, and processed at Microsoft-managed secure data centers located in the US. Our analysis of the upgrade readiness-related data is then provided to you through the Upgrade Readiness solution in Azure Portal. Upgrade Readiness is supported in all Azure regions; however, selecting an international Azure region does not prevent diagnostic data from being sent to and processed in Microsoft's secure data centers in the US. ### Tips - When viewing inventory items in table view, the maximum number of rows that can be viewed and exported is limited to 5,000. If you need to view or export more than 5,000 items, reduce the scope of the query so you can export a list with fewer items. -- Sorting data by clicking a column heading may not sort your complete list of items. For information about how to sort data in OMS, see [Sorting DocumentDB data using Order By](https://azure.microsoft.com/documentation/articles/documentdb-orderby). +- Sorting data by clicking a column heading may not sort your complete list of items. For information about how to sort data in Azure Portal, see [Sorting DocumentDB data using Order By](https://azure.microsoft.com/documentation/articles/documentdb-orderby). ## Get started diff --git a/windows/deployment/upgrade/upgrade-readiness-resolve-issues.md b/windows/deployment/upgrade/upgrade-readiness-resolve-issues.md index 3f049881af..3c73b1ceb3 100644 --- a/windows/deployment/upgrade/upgrade-readiness-resolve-issues.md +++ b/windows/deployment/upgrade/upgrade-readiness-resolve-issues.md @@ -5,7 +5,6 @@ keywords: windows analytics, oms, operations management suite, prerequisites, re ms.prod: w10 author: jaimeo ms.author: jaimeo -ms.date: 08/31/2017 ms.localizationpriority: medium --- diff --git a/windows/deployment/upgrade/upgrade-readiness-target-new-OS.md b/windows/deployment/upgrade/upgrade-readiness-target-new-OS.md index a44c405280..591cc06de3 100644 --- a/windows/deployment/upgrade/upgrade-readiness-target-new-OS.md +++ b/windows/deployment/upgrade/upgrade-readiness-target-new-OS.md @@ -3,7 +3,6 @@ title: Upgrade Readiness - Targeting a new operating system version description: Explains how to run Upgrade Readiness again to target a different operating system version or bulk-approve all apps from a given vendor ms.prod: w10 author: jaimeo -ms.date: 05/31/2018 --- # Targeting a new operating system version diff --git a/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md b/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md index d33af45a70..d3560f85ac 100644 --- a/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md +++ b/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md @@ -2,8 +2,7 @@ title: Upgrade Readiness - Upgrade Overview (Windows 10) description: Displays the total count of computers sharing data and upgraded. ms.prod: w10 -author: greg-lindsay -ms.date: 08/15/2017 +author: jaimeo --- # Upgrade Readiness - Upgrade overview From b2125b250b33a54502f5dc634935adaf390d338c Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 1 Feb 2019 11:07:55 -0800 Subject: [PATCH 49/98] fixed link and typo --- windows/deployment/update/windows-analytics-get-started.md | 2 +- windows/deployment/upgrade/upgrade-readiness-requirements.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index 80b30844b0..bf83af4375 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -85,7 +85,7 @@ The compatibility update scans your devices and enables application usage tracki | **Operating System** | **Updates** | |----------------------|-----------------------------------------------------------------------------| -| Windows 10 | Windows 10 includes the compatibility update, so you will automatically have the latest compatibility update so long as you continue to keep your Windows 10 devices up-to-date with cumulative updates. | +| Windows 10 | Windows 10 includes the compatibility update, so you will automatically have the latest compatibility update so long as you continue to keep your Windows 10 devices up to date with cumulative updates. | | Windows 8.1 | [KB 2976978](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2976978)
Performs diagnostics on the Windows 8.1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see | | Windows 7 SP1 | [KB2952664](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2952664)
Performs diagnostics on the Windows 7 SP1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see | diff --git a/windows/deployment/upgrade/upgrade-readiness-requirements.md b/windows/deployment/upgrade/upgrade-readiness-requirements.md index b6fbae1ea8..e7f6a76085 100644 --- a/windows/deployment/upgrade/upgrade-readiness-requirements.md +++ b/windows/deployment/upgrade/upgrade-readiness-requirements.md @@ -37,7 +37,7 @@ While Upgrade Readiness can be used to assist with updating devices from Windows ## Operations Management Suite or Azure Log Analytics -Upgrade Readiness is offered as a solution in Azure Portal and Azure Log Analytics, a collection of cloud-based services for managing on premises and cloud computing environments. For more information about Azure Portal, see [Windows Analytics in Azure Portal](../windows-analytics-azure-portal.md) or the Azure [Log Analytics overview](https://azure.microsoft.com/services/log-analytics/). +Upgrade Readiness is offered as a solution in Azure Portal and Azure Log Analytics, a collection of cloud-based services for managing on premises and cloud computing environments. For more information about Azure Portal, see [Windows Analytics in the Azure Portal](../update/windows-analytics-azure-portal.md) or the Azure [Log Analytics overview](https://azure.microsoft.com/services/log-analytics/). If you’re already using Azure Portal or Azure Log Analytics, you’ll find Upgrade Readiness in the Solutions Gallery. Click the **Upgrade Readiness** tile in the gallery and then click **Add** on the solution’s details page. Upgrade Readiness is now visible in your workspace. From 77154750caeddc0f9cdab457dcdcab0b82c0c3b6 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 1 Feb 2019 13:29:13 -0800 Subject: [PATCH 50/98] a couple more corrections --- windows/deployment/update/windows-analytics-get-started.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index bf83af4375..1b97925aa0 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -103,7 +103,10 @@ If you are planning to enable IE Site Discovery in Upgrade Readiness, you will n | **Site discovery** | **Update** | |----------------------|-----------------------------------------------------------------------------| -| [Review site discovery](../upgrade/upgrade-readiness-additional-insights.md#site-discovery) | [KB3080149](https://www.catalog.update.microsoft.com/Search.aspx?q=3080149)
Updates the Diagnostic and Telemetry tracking service to existing devices. This update is only necessary on Windows 7 and Windows 8.1 devices.
For more information about this update, see

Install the latest [Windows Monthly Rollup](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=security%20monthly%20quality%20rollup). This functionality has been included in Internet Explorer 11 starting with the July 2016 Cumulative Update. | +| [Review site discovery](../upgrade/upgrade-readiness-additional-insights.md#site-discovery) | [KB3080149](https://www.catalog.update.microsoft.com/Search.aspx?q=3080149)
Updates the Diagnostic and Telemetry tracking service to existing devices. This update is only necessary on Windows 7 and Windows 8.1 devices.
For more information about this update, see

Install the latest [Windows Monthly Rollup](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=security%20monthly%20quality%20rollup). This functionality has been included in Internet Explorer 11 starting with the July 2016 Cumulative Update. | + +>[!NOTE] +> IE site discovery is disabled on devices running Windows 7 and Windows 8.1 that are in Switzerland and EU countries. ## Set diagnostic data levels From bde2c56cbf41a3fa487b93837bf62a974f8de3af Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dani=20Halfin=20=F0=9F=93=AC=F0=9F=94=A8?= Date: Fri, 1 Feb 2019 21:42:49 +0000 Subject: [PATCH 51/98] Initialize open publishing repository: https://cpubwin.visualstudio.com/DefaultCollection/it-client/_git/it-client of branch master --- .openpublishing.publish.config.json | 16 +++++++++ windows/known-issues/TOC.yml | 2 ++ windows/known-issues/breadcrumb/toc.yml | 3 ++ windows/known-issues/docfx.json | 47 +++++++++++++++++++++++++ windows/known-issues/index.md | 1 + 5 files changed, 69 insertions(+) create mode 100644 windows/known-issues/TOC.yml create mode 100644 windows/known-issues/breadcrumb/toc.yml create mode 100644 windows/known-issues/docfx.json create mode 100644 windows/known-issues/index.md diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json index 82a24ff791..5d581c9574 100644 --- a/.openpublishing.publish.config.json +++ b/.openpublishing.publish.config.json @@ -117,6 +117,22 @@ "moniker_groups": [], "version": 0 }, + { + "docset_name": "known-issues", + "build_source_folder": "windows/known-issues", + "build_output_subfolder": "known-issues", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, { "docset_name": "mdop-VSTS", "build_source_folder": "mdop", diff --git a/windows/known-issues/TOC.yml b/windows/known-issues/TOC.yml new file mode 100644 index 0000000000..b5ef71ac32 --- /dev/null +++ b/windows/known-issues/TOC.yml @@ -0,0 +1,2 @@ +- name: Index + href: index.md \ No newline at end of file diff --git a/windows/known-issues/breadcrumb/toc.yml b/windows/known-issues/breadcrumb/toc.yml new file mode 100644 index 0000000000..61d8fca61e --- /dev/null +++ b/windows/known-issues/breadcrumb/toc.yml @@ -0,0 +1,3 @@ +- name: Docs + tocHref: / + topicHref: / \ No newline at end of file diff --git a/windows/known-issues/docfx.json b/windows/known-issues/docfx.json new file mode 100644 index 0000000000..a11af85d90 --- /dev/null +++ b/windows/known-issues/docfx.json @@ -0,0 +1,47 @@ +{ + "build": { + "content": [ + { + "files": [ + "**/*.md", + "**/*.yml" + ], + "exclude": [ + "**/obj/**", + "**/includes/**", + "_themes/**", + "_themes.pdf/**", + "README.md", + "LICENSE", + "LICENSE-CODE", + "ThirdPartyNotices" + ] + } + ], + "resource": [ + { + "files": [ + "**/*.png", + "**/*.jpg" + ], + "exclude": [ + "**/obj/**", + "**/includes/**", + "_themes/**", + "_themes.pdf/**" + ] + } + ], + "overwrite": [], + "externalReference": [], + "globalMetadata": { + "breadcrumb_path": "/windows/known-issues/breadcrumb/toc.json", + "extendBreadcrumb": true, + "feedback_system": "None" + }, + "fileMetadata": {}, + "template": [], + "dest": "known-issues", + "markdownEngineName": "markdig" + } +} \ No newline at end of file diff --git a/windows/known-issues/index.md b/windows/known-issues/index.md new file mode 100644 index 0000000000..929011c38d --- /dev/null +++ b/windows/known-issues/index.md @@ -0,0 +1 @@ +# Welcome to known-issues! \ No newline at end of file From e68f16628e93999e4bdbda9327a5b0b7c62ac8f6 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Fri, 1 Feb 2019 21:45:54 +0000 Subject: [PATCH 52/98] Merged PR 14120: add aumid methods --- ...ation-user-model-id-of-an-installed-app.md | 40 ++++++++++++------ .../images/aumid-file-explorer.png | Bin 0 -> 28824 bytes 2 files changed, 26 insertions(+), 14 deletions(-) create mode 100644 windows/configuration/images/aumid-file-explorer.png diff --git a/windows/configuration/find-the-application-user-model-id-of-an-installed-app.md b/windows/configuration/find-the-application-user-model-id-of-an-installed-app.md index e047635740..071c89831a 100644 --- a/windows/configuration/find-the-application-user-model-id-of-an-installed-app.md +++ b/windows/configuration/find-the-application-user-model-id-of-an-installed-app.md @@ -1,24 +1,24 @@ --- title: Find the Application User Model ID of an installed app -description: In order to use assigned access with Mobile Device Management (MDM), you must know the Application User Model ID (AUMID) of Microsoft Store apps installed on a device. You can find the AUMID by either using Windows PowerShell or querying the registry. -MSHAttr: -- 'PreferredSiteName:MSDN' -- 'PreferredLib:/library/windows/hardware' -ms.assetid: BD8BD003-887D-4EFD-9C7A-A68AB895D8CD -author: alhopper-msft -ms.author: alhopper -ms.date: 05/02/2017 +description: To configure assigned access (kiosk mode), you need the Application User Model ID (AUMID) of apps installed on a device. +author: jdeckerms +ms.author: jdecker ms.topic: article -ms.prod: windows-hardware -ms.technology: windows-oem +ms.localizationpriority: medium --- # Find the Application User Model ID of an installed app -In order to use assigned access with Mobile Device Management (MDM), you must know the Application User Model ID (AUMID) of Microsoft Store apps installed on a device. You can find the AUMID by either using Windows PowerShell or querying the registry. +To configure assigned access (kiosk mode), you need the Application User Model ID (AUMID) of apps installed on a device. You can find the AUMID by using Windows PowerShell, File Explorer, or the registry. -## To identify the AUMID of an installed app by using Windows PowerShell +## To find the AUMID by using Windows PowerShell -At a Windows PowerShell command prompt, type the following commands to list the AUMIDs for all Microsoft Store apps installed for the current user on your device: +To get the names and AUMIDs for all apps installed for the current user, open a Windows PowerShell command prompt and enter the following command: + +```powershell +get-StartApps +``` + +To get the names and AUMIDs for Windows Store apps installed for another user, open a Windows PowerShell command prompt and enter the following commands: ```powershell $installedapps = get-AppxPackage @@ -37,7 +37,19 @@ $aumidList You can add the –user <username> or the –allusers parameters to the get-AppxPackage cmdlet to list AUMIDs for other users. You must use an elevated Windows PowerShell prompt to use the –user or –allusers parameters. -## To identify the AUMID of an installed app for the current user by using the registry +## To find the AUMID by using File Explorer + +To get the names and AUMIDs for all apps installed for the current user, perform the following steps: + +1. Open **Run**, enter **shell:Appsfolder**, and select **OK**. + +2. A File Explorer window opens. Press **Alt** > **View** > **Choose details**. + +3. In the **Choose Details** window, select **AppUserModelId**, and then select **OK**. (You might need to change the **View** setting from **Tiles** to **Details**.) + +![Image of the Choose Details options](images/aumid-file-explorer.png) + +## To find the AUMID of an installed app for the current user by using the registry Querying the registry can only return information about Microsoft Store apps that are installed for the current user, while the Windows PowerShell query can find information for any account on the device. diff --git a/windows/configuration/images/aumid-file-explorer.png b/windows/configuration/images/aumid-file-explorer.png new file mode 100644 index 0000000000000000000000000000000000000000..87bc7166a3836416ac8f81f785b67ed0de951885 GIT binary patch literal 28824 zcmcG$2{_d28$axvPRA*gQ<4ffMN}Bcmc3F*wn~v0k}Y9m3}dWqQVChdJ|Uzm+06{5 zl*HKg!I&(AvCJ@*F=ouXU)!m3e&_#Q*ZaQLdtIHYE56_7dq4N{+@Je%f1dj}&#xHi z?%aNGI}Z=fPQ6R#ukr9~A@cD2di{@Ifu981wRr-6{o-*=_Z&}NlL!U)$8U~j4bSrM z6om7!ZMFjc-gf_zxd#u=uFtFg{Zi}p){ckgzO3H)v)8??risoUz+}XC=5R+jCh}d~ zd~kMxktb%_ILdE4&*G>7-QjE5295A_cjnKOGLcYXWy;S-+2FeHy?-EH+ag=Xx4W91|mxk820isYPg zSGb)f!6n_UG>?knc}HJ;16jrP=K@k;hcta=zJJ=nyK9Ps<1)ukfmHO^;&dNls;HSt z#KN0XG@B(-eg~#>(HUN^RSZ7y@I?HHf)ky~)qHZ7z8uo>TUweOmNHK9Tj(?!8yidP zCGR0~rxJ)eKA&9u)82xZtr2ofz_IE0$Wg;-`eR=HdKCrF1M9#3tmr0T&zSCmfB*PU zTsJJ~wEIwunU&K$BpzqgLS7%kKu7nQ7hngALDPnfw-ngc8l`9uIzWMgK|h06P>*@MMzg&x5m;hQqa2=Gzz3WrF#|Agcyiz^3U;Db7lEt(=AueDM7# zb&#JuYpX*kc!q9Ei%>-`Xlhq*hpG>6xI*DkM09duqVGg@R==)!LNB>lW6q!(ggj<_ znzIlzY;AG63Od+hCKN`jx<6GKlx}TxdO0IV-1_Ee=;U)*8c3vi&7+@BitpDWO!t*( zGe@F)8PpOnd%$0-wh^&@MwklQXgLuk`*|Zwb=}1ZPa~p}VfKepPzif6 z->HIRb$D-h9ByeS1aN0oiqAV=B(419pJcvZZ8*DijxTtx12Zou2+YeTJv{ooHwcw? zv%vRW&GSmH)N-9N3hT_;vc;Lcl(4o5P5hW?^Kzci9JuUrxKY~dYxtX~SXqk{@1f^J zY-8Y(2bZ$~d_@Z7SLlqy6|Ouw1I)0B*(3f5ggm9Cj9a`J=$_<-aQF9KR)4X+8-m2^ z%x(@#esH>E@^&&9qR&`N=7*JzSPw~cS(%(le2zRSs-Pju-mW=X%Ya`I z<#cuN3~~8m1vp;IX_mddNg74<5~>fXJT%l1wHOHrhsM`U(2-)k#(&k5{G3L|Gv_!+ zT<_J>m!8Pg`t{*hdbn;$z zwu^y_r)dwuTfjT-YSoUwar*WG@WA1Epr6489uZd4plTWrQT->tR-$A+-h6cor9x%VTGpCR_o#S=#cg~~zRes5emnv%y>hn+jwtg{!Fj9whwaU*6I2N z@Z2(buPCmxUFA)YCAGNlRc}UfLAj&6uAtW z_Td!hMk1Cf(i0m*n5|gA#Jta^gh`%vhiP@)St{({>Z_kp@#{+w_e+DF=SJ9n?(o>e zucrsNn^?L-fwTGWeh0P=QeoYehNWPT{ z9lQ(p>!sNL?O$OH3cy2$44?c(6g<29d3zc@;(5hg9-cG9^RrmLk;C&kW-wJB)AGBc zs3k_$A>2$ye^7q?RQXKIv``$u>k~e_Qg?Kui&3#W96p}M!}EGzoGzb+Z!N06AP(#R z_9R~|uJpbixw;@9B!cxH>~ZDO#Z}y&*XPr%`fz`wOTc0v7yB#E1D|w!?K4oYn#X8^ zbADwe|DzXREh+GTe7#VZALok$Mug{q!|T;YXrGJ&mrcM2AEl;LNI$1rK+xn6Yxaj?w69P1i*Qa+rrZi;_%@K*p)zy85>))7bd} zk)vRelAISajBg8I?~+HYn5H#c^cCfa)_4t&cLU~B0_UE8!7T}K&s9x4z3VUb2hSPt z==PRwhJAvHx1&16L4+A47hflAFZsj>6 z5Yv9YJ=1WqJ0CY)+NZTbG1iwFztud1wVW_N*gIM-Ln9Q`=2^dt10i!GHPf7{7`j%U zLsbU63HC_;6NmZeEdhx!<8&?o-vdzD8^Aa(Cc@S)k{=d-aPxw=+a0vr3ajNGsStDb_O<6>HpOU~JqM zT=X4- zr?HnO^N|bM%dO!fWiIASfMi`x$67wmsrv|_A6#ATb0YfJ0*3@pGui}tqgz0GKvzuw z{k-XA1PL*g?8RH>^V}Evcs_-Af|Q`Chpw>as#D8#QZ9UZv{LpcPj|tt=7pdc*fU02 z#QaroVVjmr2wTtSF0$_!e>>Rs4KKXQIiXJkNdFJ~N*)e$W*R1rm?1-Ljt5Ggvkp z#{v`XY2O^eSl+s_&(5R}&x5fne;0c_D!4Q}BhKEuYsr5~x$e<>gs-=a3gI5=l z9BvuLCp=!*rhU2VTbWZgLw66`1hpJZBGX@in&&&ni^R#3#1dVf`;PPujI(0mXv9^B zCVS>H^D4+|<3TurAhA1#UxO}O=2D0U!dm~xk^pMyNk;PQ-Q zSVvpr<2V@5Leq6bFWDw2WOT%oLZ1Kv-<#NKI96G}y~hN&*%zEOD1+rp(Y-9gdRi=f zn^0TD1z#GWUoQL0?(8AS=G)~;&}e`C0qq-ETeg59@K+$DkPNFQ7=Za8SeCPU+4nJ* zK{(UGt@6emOEGV|jMd3ZL2U%k{RBv;uWz5*IGw{W4J1S=0Wp}7>xZvOrP7WYOOR|y zV9<@Z&isHI=PV@xr=qkO=5+0qPb5YM`Hr1a)wg5T5+>voPi8C}{(>I#xcd;0&v|(E^HI)OjHLZZP6PIrCZk^*tH-7cKUon8aVg{%B9Q^AKWlQc&C)97NujT{ z#ihslw5+Z{?gj=1zQ?(siwMD>Pb*_FE97J5!@K0 zw=5dM`syFXl)hVe;N|ui4=L@iUj+cKK;d+akR11Bd$W2o)|l3GEtoyW!b6QbCgzF$ zgx`2Rdh3ZM!14N5LE8Zo(e#;5aLz+hF_S4i6UVU^_l>0Hh%BL4#Wah)=BPiitr%DL znLD+c#~!^uO>(*U%$6%r`hnP0opR1-T(@Es6sQ1_z%g^*B;nqOPlqhN>mm#WPs0#0 ziKE&qLi7CWnL4LhVR9N5M3Px!aB}{mA1L&Z$(ALhsq1;a@$ke(XSDF9Ko4qhmWHV` zy}gBh0ds^LI*;tuJzZ`)FG_v{WYbq^{Rb!NY$ePGjFE}lhJZDOmGD_O10R*Iql4VS zbMjb>llN3lfiF;Sc0G~V%jr6e>6b$HTSxO@L^P$nnCW9;z7p}l&FYxCh6u6B$!|I| zHJPGWaIi8b#ZQwy!-CNczsCQJC-Bek(XEMQNy8kcVgd^AkAJyOlhC z00+>AyV4lHm*dd+m)2%HJjH@wt&0HrkQCa7Se&m&cIQe$*gmsfRzlLjz^!rohm=>HeLjOrpgBaQ82^Lnr!;5BU{ zC;%)!c%vQ7t4zBy+obAKFxYd_j&l|!CbSA|-z5&ic%=)O#hIdKXOmKv72L`$ysUZ@ z*{>2mPOeq?h*Ab!jYD&|2hk0D?bQ1T9;CpnnJ1# zY}eFY-mX?3SVRbKVnI%rV$%1qiU6VEZt%7#y1|}Dpg-|^4z2o4-khSIUPb4rYi+5? zsDj7mq{l{+ak*mh`FA05RT;hZD&5q=ndbH_!~^dxTA$VBgfv$*j<8@PFuC6DEGN4U zn2_WxVGR4@!!4}EY2h9gc_0ycQM>b|&puVh(zN-Pso{Qx~VzB#MC-=OTBGo+V#~U#GWI>5YIR40tg8xwHBO zsQrxS6#KVe$md()eR;Fkikasg7K7GCA?y|NZ1{fvt)d9Is&J68gnLzwm>RGw>8)f) zDDFyswr)&w8Zln+F7p6Z!zMK*WUh&%>=x{Zx-hF<8_5mXYj5Ys6_CNj_*K=A4zD_n zZtb_|>Z3Z~WKXq-l?4X?amkZ=5s6hAkYsUkGcFJWOwz(q6v1Z89;kt@P0cs%l853L zH7m_&-eS@W?fN^~=2V)c#)mueg0PX5{_~6JeEA09mjh*1R$l+Y!*k2F4O5Z5Jy)Z? z6^Iy~2Q~>gpl-N>CdTIVe8(Z;hd+W$n=-H2plU*^9_{f5g+qXc&d|JZ6$gHLCk>yN z+ESk`;=d}1?U%&-~E&d9zqHA@)Qu{g|#bU?I=b>@OO9Rr}FQu%_Q zzt*bU{SJQtkDmuUtwr^q9ce{?IWdY^8+F%HMVRWjkvmIWWw@2^{3@3d#I)V%^YN&? z8!yMzC5gEp=tJ>t?5~B+0pw({sEAem%7?At2Z#NM-VZ@9nCi^|LnG$L<=5?#yhm-2 zc1iA0g|TC_mqyG2m=$;uX6ij|K9wuKKsuDT>}C<@#N;1Xu7$Jd2xOfkA@%;HhL>e{ z$E>VV?M0YUVbyze4M|%2pKz?co_`fGxGW4Q_vln9b0fKre7ib#V6IK+%c|O8V4-`< zlB++($5%2H;g6vSR*r6LN398Acm}F`g6Yrz{5OgNEFZ zN|m}@{%@E)*oyG#Ll==*Qb~#CZ4;+RfI@dc2n zx*)Bg#4Jl>V81P+m3JG~;fu*PYCYm^yExT(aK>tkUyCXDoSu#AaY$$9cZ>Snr&Tn- zQ@oj|0KdKtlv~R3HwS>j<=(&Dor(_%tbT~9@X9M6da<;zA`X#R$7x8eh9{|a0TaE{ z!wBc#7^3L;0r9|q=0Sdv$C3_7wc;Cy`zcl`5b)~?yq+v2epQRnX53JnVzP&P%8l8g zgJb96eO7W1xtRV6^W1PxeR{aLx$7IOk8Zs9^<_{QK}}QkeUuLPKS^3o>cQ7N4(c4_y!`) z^*;_rNQ~va4DP z)?&0QP2uA@aUfpY|r8aq8bycXd#j?}kRTPY+_N9~$tntTB!0k=}OW%frjvXG-m12 z`IT3n(X+LE%PC-x^P8vBW~`G$aXx!^G~u4v4c8KUkkm|>+Q4Ox6gxt$hx5B|*Zp;~ zOUH!Pl~M!xr4ZJ33zl%==;IgA_%q1Badp6M{x|r>v752nkKy#}aF>Al&Dr@{J~@Aq zaf-x><^sDZv6+V24|;*hXgJT&lEFz7Hf&F?QTgwsDJMjF&bvmU1eMB^(K_}!elP^_tUN00Yg zZob&HDaWr2aJs1% zATfoFXhl4o4`AMw>L&-8165NTH?PIljZQjVrY$B!Ho>c`M3Ha>?p$zc9-z>quOXsC zr0%VLvz}W~5gk;g?ZFJSWzt|E&2TlS$l>`FWSqvas{>!SyR;|5Ht_fOOGSp5A6o0AQ9pZ@&H0Z%0DqE3(VgTE8QOn~aS4J9qE zb=3y+{yZQ_xnZXlL-|+k(u!ES4ypN#jLUE2iSO%qA`yadYD`eVdQGc&PIL&nRTO-< z>vQ~kk!~etdD82byTQOg$i$upnS~m2MW>oJdB$UQQYb>v9?(YqNX0)q zJjn2Tjb2&^xs-6KbuFQNd^N*TYq4Z6Uyv}2zYAoZap>(!Oa7vFK>;gAA~OvX*CuyT zf?c&sQ3w~XThB!DAUNz*geP-;z8DnKlYRut&N+=yIjQy26LKvY!_#yECA(ohCl4&5 zIu;qP>VNX2hl2i7_ugJ%LnMCdJ<70#?{z=qcj(5_ruYlHRHXDz10+(d$1aS z5O;p@KF04_=xh7}-GFi{T=QNrm^0#-m0v!iZ#*Hc)8z+gwDISWu?i-2>w08lG((p@ z>HB)C1qkxI0O$E&*Hy6J1j>~)n|<~z0yc5 zuyc^~JwT~%Llm`}PDSV54?fDmKNkQuTUn%2p#E2U?h?{3lE}`b+TN6`LmJ=nQ!kx7 z4O49a;s{tHiR}?4-gi64=E$Yj?L%dH@)uLz+Y}Y~zM{iF{OZhBh_h#j=*eJ33#XYy z<%SN7w#?$9qEH9>MZ=z><}E7+ZGQvj>1Wdq`gZKcuxF}A<-qO~Mi|riNlwLmwF4`! z^$YcmXqht!(|o*D3{|X-PtHp51I>xNM$Go8ykJmso*08WD1r5-?-r<(VGGO*

nMN4SiP(iRwx1YRk8{XzCY4^=}ervW(4G&Wz)cjzNDFUoMizR zl84H%Z=aaHpRrX7aig+Ry(`dBEzr9r%9MTL(xj^IKD_pgr5!i0XnWwRM(bZSEd!OA zCw_I!!gz*ALh+85x~@-|oKDoz-BS+P2_Q)0 z78&+l8`FRC?5nExWtuBfIp$6bN|%7cr$DJaC+}c2&;gM$i+#nzF%FC=riVfv{Gj-Fx_!mTZxp5-wYQgp5=keLSD{$ zIh_D8yR|&{Y64Jo3Y0XJi6en=tRm}EZYcaXPSDQyI_JjiIPH3KcZ6Bhb-?w6b=O}+ zO406M%St0uUV@NwU!t79S`pHxp|{7MvRD|so*KW2&vL^zGqh*774HLlcT2(j4MMUM zuO4uFYn7xIVh2%pKPr_|1sT9JX&DX#4`3}hhPSUa|Dm{T^J#CK$l=gQ=Zy$+ zWTd-lU@On%+oOk7cmnbg;Ia)dg z5orwryeZPtf2v3uO?3)s6q+@iOy5tTp}6x4=Mv2FWcXLT@3Qjsy*UyqDEVaiT560^ zSkx6S^}S6)*ONdo$@R|j)gI)qSCwiS`iUiIykRRSr&8Ltyjmu_5Kk018d^1ZJAhXu zLhd=pu~#{0d-zKzKs?SE_AH00EP|RPIuqwh5hpdl0XWMyy09e=l&Ds18onOyjwfXm zTdG0Qip%hg>SXh1M}=5W88`AIPNQ!EIGr<~mhTG>|1s78$ok2YA!Nr@XKaNnuau`R z5+Mz?6O+>$uqB_raqL#Og2ajll z4c#KR)CWH6@3Z^riD15}PVwrmZ#y@ubkd+G7{uFRxjNGOwb0c$BJ|l%g;?y+m;lCl zB?GKz^&E)Lb$4<3@HZvf@PiZ<`QRrCG+>O3jeI~YFI)zDrJEEcMu6bWWclC`h9bB0 zHX#P`o_kMdmRIjUrjc#BWfdl<$IQ4mtzGx6OL3tvfgG0ykL14|MACZ4K&Vb(*&C@%{iJdRpW#8Xfd4Q1dA zn?)vfe>}NU1UNkAx%IKjO#^@;SsD;Iy#Nb&knmwaIDDO}ZUi~t+%=N8i5}JKuY^$O zos7J`4^Bl|Gk4uh;x&Y8%0o5OaTq1!3*dzF|9Lu97Mjo=%)6mAA^wk(W0<78< zf%SnY`S_#tZWc-MxrxXrO#<8kw=6XOK6$HLv~GCxv~Ha=V#(jqX%tfofa6z|lRGaO>`4LjU<}Akx@)?6YN; zp>ge26|fczD*q)g?1D>AF~O4wn2S+14p9%YR9HN=ijm(oF=d!Wk5@GrqBxq5Iv8a5 zeoFRxdo+R?m1hosB6W0;p|6R9nubRfm78F|CY-?xsV38MWaN}w{*j17<^eT3C51ls zk$f*0(~#ITJ>md<71@EcsZfKVnYvw7m}=8Jq57isy2zZ?PlhF=P?#F=elEp?4`lBDJo*!Or=6=s^^3n+-0_+@u-l_ z$QT|RZ84YCJbvx@KDY?lVd^TdNiMD7H1?Vz+Fx&Gz`a(qjf|U9$9Vu}zoF@PS4cBv zbl0MLR|R#3zA?B7vmyeVauSOi2z5(a0)=PQi0bAY@ZAgE_1B)&%`%_2*AQY2oTm$A z9L~UNb7sSF)2?p9`ben|LSF-<(mb&<&!($qz_7P_+CiwouW6U3#TL9NRfFj|3iBDA z(mUrERk_{K?FfLM!)u9>cDZ$AabY|?oU@$I1pswm>EjmuOTyvVc*9x@16jEs`N#zH zRNzJ+RiSTUB?H7Mg54_JZV`hVHl1Pc zq(E(O*uTuJVUfq5{rufEs`23K+Rht@S+Dqhj1;;W>_2^Nm95at;0;Osiw(Q{Km6g3 za+H_5eMPRS)Mxp37RM>4m3y;i{vdewdvk3r$I3NJ%!uhC&UV`L*DAK*@EL+GrUr&L zRCN3du2U(di=sy#Zoxt(SbDmz=_L!xk9?PvS!}0E-izLGzG*2b1-SI;J4S-u1JqzR zXK>!5^x;p|I{71gZxlFS=+iArac}$EbEniV|H|v7=}0nG`!yy%w_B*cowKr{IP%tt zbPR6X!BALqzfRgWcaQwaNIQv6xVYpGIQrf>U@-yXWHRw)BrN1}X5;e5^z{wY(SoVC zE-0x~q0$02*xMyc;Rd;JjM*<5(YBdcWDNz%FUvVGyyk>Vn63L*zpWd??!88-bGt6* zYqWWC0GA?+BIMP@&hL1Nlj;9FrC4aUuVH&kO3_lKBi1{sA-~~JMt_NaaBh_xVE7@?R^G^DMfxO{s|+H(knc4mV9tw-Z~*>_6&g zY|(Qyeq~|I#P2}8dLH}U^kA~lq1n&!>W-7`pZT)%7iCuV3k9uWDzK3*BE{d(K-vLx zvW0108MWuMWQ{Kh`-{ALn{=W7H^_Ihjw#|_;aY-Kz zohYj>qGG)u>hATs`bxr)7&*ho()D1XHr5XE**Pj&U!zxO`jmXSxf4{fE~WL)E$oIdEG zoHZBjzI!w1ZKt8_jZR_BjSce$Mw783Azda&{V=!WzT?BX=!Oa3Zpxu;8yWR!ANgXW z9r^ry`KxFvF^Lm%)w%O!z2y3p+;7Rm%jTE1D3k?K-%emIS51$EXv{EF#u~V1ppFW5 zL8@Ij9TzvIdIa8uQi=8N6sZbjv%rlB6Cu*YS_)Uod#tR*Q$ zDT+vR@~#N7QSdYRRdOO&I+4$Rp-moeHq$7Zh zW3Lq#crkCEO8|)hz>U)O|LW$hzGr;TBu4l0dUkw!*b`lalUCei;5X8i-tLpj?|(bm zbU!2`MG9>0Z=|bC85sR7*(*;CO?B&jW1UqLN(l&4{TOs_QO2P}hN9i36qHVGaGX3~ ze>Ls`O>h2BH^b6S7wG_!ASTbV^&CQ#W)Gl*hMZAF3fCyZ;11%2q+Xx28Pi^<#j8GRvp(5 zx8A$Tv&X^5dv9X7v$ zSXqJ8#biFLdla4H(R$@3%Gy@FdarKwG|ZkJ zJOR`Bo)o6pp#9;VBjY87O5rRXpMT!}btp=r|Gl1FbDHaj=}6VqqmD*qWFe2>rRMLl zeZ>BK(iY}EN8{(W(Z}G%7N;#G9510TOY|w#6|>PfGsm%pgW>`>;>h#4;zwX@_)X;+7jzs*<}?s*96!sk z?r#C2C{2WG(40}2)_@!wVAv{;M#k@ul5(;RVJk|sgP)(@WG%W#$7IVJUpdgO_CmWd z43WK(OTU^8NKyH=NT~*D27F5DtRK+Cgv^Ja={hp!Hd&j<8Hpe3?B^x9)4IJ`6VdkZ+5)p*`_hV&PXZu zoZ<-em;wvs-L5k6DPe&)OC-P>VsXY!XjuRG=QO(a-*l7b$Yuij+DCq?{xdxRG8&M1 z|7H;Y_&@pomiwVRp=*^6K=jt-;=3Xn(+BijK%V%)jQ&4;+O-0#rLI|G=U^nZe+{@# zn*L`+@xy08g$&<|llndTzmnU}d=lV0E1u}{OxO1gu1I9N<^L|^Eh2D|E|0ofkm+b| zf6u3j8r(XbjXzpj)-)YGn{Mf_P&o+;fAYUnwHV`tW-B1SlQreH&w{mp)g=viNwgg8 z@(hpu&!-V|FLYTbNGv>MK#ugU8sf*IPV@p@0OqkH{vH@V4W9{Ufla$ZH`!v$Yob?U z1LG$K$m$MFTD}g!T0AF>HZk=U9Q{hs_)t4}xV4r=1~m$|k{$cB%U;DwdCv=Xm?<}{U#*EV==4WxP$16%YW+RqaoBX(!^##Y<;9uGFqzscKH;q28; zKI6Jc>Q=WMb_oQ(3TZ@XrRyKve7q7L!_$D17mfZ%4@P_H`^SAm4kD94>RnYmA0_V)AtwouB5)Tez$_1z6+rVXPf?N%i%q_YqM$qRynGZjIM6-khcF+$(^R5)L*FaetrIf1=&Sn`oF*; z+aRB8p%qJC(dK63bWw$Nv;$oI=p@g}-!@7HfB;`&Vf!lzToDT{chq9?N@)-A;@I1< zSy?MbjMe&G4Z_p$4LPr_m!>Wrw=ub&;8O02H^twR@I%q08R@S zi~?%I_j)NmnVF2~x6oEkmJwVmu2)R~ebc7Qo_!UP8V+1`!MS$kOw*wW&YQx-D^_%QBI-p%|Z%V=%F)nSu zw^AXf8;=ntCW2~Dw~%c%LofhSF|QiiywB_Y+6FKpJNH$Bsryb1q!3Ka>&Lt~PxO-J zs+eitYW^gUff9I07NYwr_zswH$!Xm-rFu|zMibkA`+`PA>)4iYI%G3=R$%BA50pMH zdrZropj2$$wA?$h2n)%?PDfghr(^Gv!#KdGfSy6EWMM9%|5ih~|1}DNy}qoOI1^?- zDb3SDFLyG}L6ul)=Ys*%Ai{G5*6-@bopH(>Sy`pn;asECZRx@CU%ua0%7WlV69nO|9l9%# z?aNZfHKv4sAUzAzyFidWv)mB@hODY_*F@mXWCM2pW5VMm(9=^|Cl3 z7~b^o7Z8{UH62KBb^zLY?3M0+nnmnG6W3{gT+{Gzly@)#9Y@AxrE@TtC%Z zOIg%k>-I5lK)1h>G6~L7DkH^cy)x{+S=UDyP4%@VPQ~RF(~00e+*vJtF@d}-TPhgi zwyQ$G`StqrTTM&*7~Xbs*VTiNoY?JUPF7*i)@*#qJFrFKpT>e+LW|wWImNAW>B0{O zVa$tt1ar+krG%!!YEXteHMUT&^Kc%21qjYeNv`4rw(9S#fc^j=CR85i(8HS{N6E*8 zM1hm}srp`CuyxWi~K@l zj|2~@?and` z69!VGv@wGFt&r*%N!IJDsuYC;`@O$fq@~;n29YXYJ#)r2$&A0&bmE&>@g5*JJSG>1;|t*cj7*R z!c%?Q$@_zUfisWkAsL)Q=~Gpu`Oy8@6uq>K_CaAI>+}L=W}VqM3Vk-QVHH2dp)bu0kjAHerfL;!;}}0$<5-f1 z$0AB(`=pbj;sG$wLbajd*&wmO13q(u`<#7BC*+?#0Wm6pn|8q6OwRJcB%ZZH`kCuJ z-QNL4Q+}L&ax>Y9WBU7Syn1Eow)^-=jNI|23Hp06fojyXr`TM~dy~xj0yLWYO;?NF z>zp5o!7rRufib_l#(&;KHp6lHRO9TEy@iAL#e+baf0Yx)4`(!g&2+7gdJ5K@GsR%Y@Q zxQPcy>g}3)Ht1DoAwC0_QSF+5Ot*wlpxW0AJ4QnYAY^xseXF};dre;2obJ(#3T3c( zVkEb22T@nJSD$j8iJp3NC`p8x&k$l0U-mzjzy8zocY{;7$MEwmdnWd|A^DM(J51aH zX{229BIjv)TAWXcnV66XkKI-9%piDfj(`s4N>+db6gG{e#V38?fH%CZM zL1;Ok<>w!{>)t#{ZXN1?25wmCiuCloSoV`n@|!o)@9uneNNgA^ybJH~or7|D7}W9) zx^J-P1t0IiB#m!}j=MR6L1NUdy+Va<0^<7!WLDp*2)Yr1Unc1#-Bs!O$dH|h%2?2< zx4TC-6Yv0VuzaPJT*vi~x^%fy!j)rl5KAbm>y7Tamyy_jDvLI>;=LyjEo zukC9Bg^AY{y=rnjiwxc*PiqKrze&}tj23Lv{1iA85+>6-Wz7PfUHFj+0Bn*ww@8Ht ziv3P0z_UUEI|P2jGf=D@0i^aoTKm81PJp=ZPK1N_e!4*A9)va#{3*w_kYf&#$jO|rni*1M&m<`>EY%!_ zl&W(v>B-aUp43u~EJ<@!?_1E?>GWB<|58|vT9#(#Whbb)xOBf+U~_-=i+?zP6e3sU z&0&t^TjQ!eYqjNSavbIOGWv9vB%3MR#*xwd3pAfdBV)VnK97S;+-yZSGI$W^g2Z0w zQVKfNH5v;v?#MKU$w~t^M^<7Alafq0XqODlRM5n&Kx6Lpqd(0ZhPF*-i;FS80oM#o zE5qx$`U97$u;(a?yQ_kvl=v@{MZtWIlvP24jdX2Bes3X%<;lCf#_sRVutN||H9}dE zzL=wO@LOdTovJEUB?bX260G{PlOdczw8;&iPFzdsovHXShuCqfhl#$!DD3FHhoCa{ zF=TKItLI)L$C)u&u(!yncQkoyLdlAf$xlXMqKLP=lcv0in9V^T>qMD+Lt|S`dWuRG ze_?uCS!Iz@s=}lX_En$MP_p;SFMnb*%v-qem5a*KeEcRH1bcz=^o7UeoGkV73xr0| z5jnF>auJHfM@gbmI(6yyzsl;yCsWa6)@eJap#u`|v(*X9Tm5;*&!gW?(2MQBafwNW z3SEBX5>DgvgE-iq5WRdMuLbXTY2oCAbndYpjx#)bAF_i-g0ckao&-wV^{1^lN;B?C$QsS;3>$2JdVDev??E-SkzaCpti6}rP=MSS- zyEd0VWmiGgL?}7<<`32D`xhAV@$^qlUM(PI!PK<=1a1F|$jckV0FZ2?3i0G_H`c23 z@t;M^|JZRvXbX5($IgFD;eUQ6ywN0k=6|U21gH#9T2>kN7Egsz5Xrmy#cI*WI}Dr- ztwr%#E?oUY<2c6h9Q&aCqa+aT11mtPU)3;c;Oo*w>y?`h76)sIh+98=KfJ;yv9Go956>pCyqt-wDsnFn1~xh_F7%iX9^Kse|o*BV#(;p=alA}e-p zws`Q0`~xXeG{M{N%}HV|lk`;xnwrz5Qcy8pJ&d0zzkw0Z6=+;0RFj3a+~E)VFCF;) zkKNzvjkUb{)OTA7C{eaFbHy*;z@_MMo|kT&8to1GWi6XsBV_GI$v{p#ZW_7sj0UZn z&Gk^X2lAo0KTVA&zHxE`bRYnC8#ikV*C}wyrJ?>e9u!yV$V1W)r!dNbB5H4}qz=}) zQ%D3FAjg3JiAa55*jP<9)k%}C{ zK^Mk{S6MDh^`yj4t^ibiSR2`nc?W2s357BzVx_ge9QlD9!9Qqe31;;+!_p3X8t`Zc z)EPiV@QDq{@dfDT@P2 zDqQI1E?(_;0G|D^Db^1<-X8w3`m|)sP6LR8SXT#twpr5v@iFFg@TPg46UE$d~JM$r%Z6fVQ`^x9ew4nbIDEC<6g@ zShAgsDIBEajd12rR!mC4ehE_GfI9W8fZ@UttWhJ_x2Z!_dT}D7tMlK=0gz0xE&_E^ zNm`%Xg~Dx|`5amlE8DJ=*MRcTOv*C%d}fu(T>xzeh8%z&2QmnuGf^6r zt}#c=opF+hy>eRh7pm}%a(Y^|h47kd{!%XYF6U#P{GS@!e%}7d10dsHRVT;lt7FNq za7&{s=|(U3b)UF0%}$&5GKt}Z*eqw&wcA56;FMcfzk6s9NTva$HC$FMx()W+lPI3? zci+^{sMP?5#N9S^62+g8i#EJCR>lYKm@l@Tt3&NGG#z`d@u4#*yBHoaO(@bu9{CN^ zf1P;?Tl^5|dw_uv;;@t;7z&<~l|Trj_T zE-Fn2X=aA@$Mt6bt&ThN?2u(KKb*6!w=7(_H;s@EFs+|i zowEtjb|w-OzD)DS94i|&Mzv<_*?jKbj7%fNYJ2Nyf7(wuYW=Ru6`dcrw%#<=@#jAn z%&A8p>o`x+&xKLv?3 z?@cq!&t8_Um}(oZu?hm|3bg(>0xIxABZ}BV{7h$9fuX+<*C-);zRdHrncpPUfp3A48=JgEfFP zOrR~-@cd6TB$2%QkX|iu+(jj~{B)>OQQM>ovN|IM`fOj3C=%~rV#>tm@pC(@lQeHM zIG5qdB;hVLTv+PTuLl)^UUfRZGv7`+=QLk!4EXxUkHs||X5dR6x0BgTVm{Vw?V@I; zI6P#jMkcW^P<{sW&32Jt9lm0=6`u#Q@NoRbwfEgKkhHqg2UPGIeWi*zvX$JlXg277cwZ4Sj#N^jJT|17`>FtkJ@vv$)yx&rq z`=EpJ2PCM`Nw(<;{dE00YK9Q3;W>{9;#u6j%ZYVpqR3w|o1OK}NxRmhOrMLkO9H7FQl7@dg6miEC8cI@q zKWDmod^Hmfk-@OL!@QHV1DSx@Fn4VNxATx)kx4&owHASO8;z++p?xr!_3Q|UYu=7O zvk+EeHkX=GKis6qE;enmtC?Q#u6ya)feC2Sd8UDmb^z{jo~x40q9=tai7pw$uu1tFi*FWIyXl zUs_bH{`D5_jaf|v?(__+^!7^~@|0TTgU~P&9vL$5D*+fWe+OFqV>JZovC|TSGV`{I z2ej@SqoADu;{|@C!jvY(KI)0r2YalFAjnKfR^DWL0O)o$%BWM;Dm7%l&)O0IP{^`t21 zupx0a;R1$hT0DyJZTNm(|GGEz_IAxnA^u4KNHI5#XoVAk&;}NR!a!U5G3DoU)=9w+ ze)9<07`WJ;UcD{peDr!G=^PQ^U0m~YpuL3Xen$?xkg!$ge>e>R#LnCODnug;u%ZFS z>J#7{^m9Qj7T^gE?C?X8w4UWrfC(_~kOYC!js2Ow;x!dC%n1h0vwdHg6jZevT3(^#LTWhNcv15BKvRnO>L;YuyTwdN zvE@vKz9)6n`vu2(=0RM_TaYmd|GgmxfaL4U+cf|f?121yhmr>PbGHU5+lUEe_B zkke=?=8$WCkV=w}Y91qTKYyY32Bqsl3-AHohBNjvRffg!+p}i>;-p$XI>B?KhHMVm zcsj3bfcH|dYP?f^w3WaruRP`&pcd9HQ@p<2IG}pnFvlM2T+R)H-NO?g!MC>YLKbmj%s1l~_=7djgxO$Vzmxh@t%rM~=!IvF*2W(0o0yvi z0Xo_rc)V9&GZ{%mVeGmH^ICwTr~Yz@njfe)q|zwPw%gbGr;{O^jJhh0|E6;ZJX(6Y z_+@E62UpX_DBt2p#d`WuSTmmeB`}}kV`D(@DcDO;LGAGT&bWMwY*3Y{GsBF7-SoNQ zjZdXM&>h?Q`+c`EnwehYsXc(?;2@U&waS*R+;YeHx^7(ny zgcLkw`J$S`h4BrbGB~%SkPMMobQOSL&b^m)o3v2#O~9Nc-cFK3&7H}r06lE4ASzhU z!k8>mq56;9$dnAg#LQ5t6aS5*_o1SQ<(gAEoUi10nA`L*A{^+pFoAAhDbW1NkxJtv zB$Vb+~{SJjjuVIW{>Cm~u6AE2_m)O74M4_%#gd$a~3Xly%R`^{RXZTucXY zgD-%LX6$A3lmJ0$mHUDuY)cx3gvMMI5;a8akd@6p)foP8GNkWgMv_F>?M>yUiL+D= zLMeYbM2nBuUIG;Tc^Q<+W?xywZ0i8NWZWj|nDMz>sccZtpiVefY7k&noIE?e;9vf< zK9P&DYXCCUeQ@tvuXp*WP{|!va79R;Q!XvvX{iTAC1i8-sjRji%XLcyooh52;fa>M zt;+lZ4;^|^admP(rMep}SWc`m`wfsY^R$}{wPxsgCYv~xsD zx1Oa23ZC@dW$PA<4%8d`F))PA7o|0zSgiLX~js`WA&A^mjmYldhp!nM{Zh_Z6&wk3TyZ8bxi@e-({L@?Hd`3R3E-@{{ zlxyw^Gx8hSkw>Wy#xhlY{khQq^UDGVU{9*b!UH~qCK#?Nlv@T~TF=|_ib?4u%Fiz# zO0XG6%dD^H*$(A@${eUWrBu;GKso2>8d;>L`y@W8?5c)7xRljm3sAIk$}x+*1%!g` z(@8NyZi&ex!-j3!*%Q9}&-uTP$qgB(a1U05tCvyM83jn1mO8^vIaW(JU#FudOE$6!>Tlnx0SAxAp{2^R_^y<++ zlt|=blM^M&v_P-D@Jn73Eep?ak1a#>e`Ce=g#)?WOwp?bjR{7{8q({B$@?FevW5?)uK2i;D1& zPg!KJxO9@pk@PDf4gL7t)RDnpB4q8`LF;gcUeb>|C4EeH$#n=%g-cUxi@9gr_$cWH zrswYN@;28-=aoCyH+pvxM*P-ZfqrcB)M%6P4KsAcIChQnY6{5S&C52o5KK_vH&` zm(c3v2+}!`@C&ua(gg92{`?umdNik{$Qwx3`|I0Xnf3Bh@+HEj=`Ntmt#Dc%o=7B0R9Gzr+RSRg4>f=Aw+E*whtjjfK9iVth#|7xX5 zwe!=HLIN4oU?@-m1MLKS8*61plo-+mwhU=0M3%P{$YU*!5G2wRRe$!G7-B95LJ2iS zym#RE9s6h{H3B^Hu$lqNqor_AYI>eCO)8>~>5RUv5poHLN5eMc$!K7GUR{%y3@J){ zBqAPwe}oJ+7cd0vJnG1O4i-c>;!Z6X=9Ro&g+gAtR#1+85u2DJl(0)BGJ(pw@eZw% zCH?>^AT2V*A_ajeOa8EnQH|RkryX}7?s(kUHfnImvwpA;w>l3pUi*SCRY9?mC!>)^j+3jx7C~|oa-=Q@&IZ~hwj-rahvenO;B=?mP7dkMD)@nkGEBx zY)Msm9Fw7xc`Cau=Txq46%u?T;uZJ`gaIn+C0t>8pVllLAJh77iM$yuW!p@l;dcN# z*aPy->GG;OSamCA*0$YMh?)7!I;`C=JJFy$)ClGk)Q_jD9?zD~&NS!&>3{*go!P3h z!2th1vw)B})W8}+hDje4Ypn>TX5`TPl3G7V(9joa%{_RJw zCr+=M7fvAWn_d`~D*=6Nda->I3y3z;t4T(4&Hv5-`w%uOBaD~s2S~K(A@?DaY6JHu ztcAC)n;9Z<_#v$vFj=NYF9-6w9iV_QZP7_*B1;Vs7-Ds@4X#Gr?3Ai(9rLo_w@pVlaG~37bo#&ZmZ14&F{$ z$J^WK&iTb;zrwc$m$@|^oCLB5X1kz;h~jxfU?nJ+k*T7h@VLWWSFPUMd~`^glj1Q% zHdWd7yvqA4amHD8*{*w34Yb$63DJFx5c)RJb((J|PL)L7HNDot;~_PZo_6A7M@XB^ z;{$_7=>Fm>EqynvoMrHo)>B>@p^2)Swb?4}$mT^o^QUa*+@q}b*30xE)X@qB z0<&VB@r}A>kK{T6-0|koh`B z5}!XwhMw$GgdjMF^UyyGZPNLGjuGyhnt`9q;2BO)}r} zL|vhU)=b-L8GfLLnY~p9vX4M^a_v3Ed9}+Qll0ZS9+FzA!FXySp6p2ox%X!Iy`+m? z#pGYlDu-DVD#!_(>aOhO{6_b;BPuF+SzPKaYkYCo76r}7ZAV(2-Oh2tt!cWEW6-Ux zT+%9jF?y1D;H050zlmhV|5bya0I*qxL}3VK91*B6>oFz{IP>%b*l@<`Zdh%h`Hj8s zrNa?iBCkBt&i>Il zc3JCy{V+-&-mdo5shn`#+;@gU-1;272G>t8mK*O`zfcD;oEnqAt?u{ToQ`S)KVzjW zOJPS=4e_bv1L7~bchNbMkkd@VrdOR=+`UbV?8cuS^|vXI{#Kt%{E@pq<_sKt_xd=0 zr6ew%V-otn>jOjIz;n_l9rjI0lDfOHsCy&X7nk^Pyi?XF2<=eS`s9f($#B`MLFZqS zwH4|L)gO-{Wld8)i?{~?nQ3;{>#w?l;c07J0?oi0v$HIJ{saJLP4ABDp(L!s*O>(r z3>COBWOh$|dlRCeGP~V&9GTr*z_~gc^M|@p@G^fX^5Dw>{%_e+|7V*v@KofA2l}1# z0&$)E*LUz&uW#GB1BZK{ZJTBtTBg=`_DTQGPLEiRzPvV1HIYII-#Vxl{ptIeQ^L4X zc27&%2TtzBUb@H=99;3+r$V13CtXJ!R`V5z3NRl?+JK-&3jYMuq1t8B7x)9j!IC|o zUH1=v!l;#CJI=V?4`?tAuGJ!`z5rY(5JK^{ZbabB?N6j?|0rs8C_df@wRh84`ROR2 zSebr&Km}aUC4nYiZm9bRqIZ%ImwL=*q=MxVGV&rKi}s$!d^1ty{0*R7&bja&1h=XN zohom^3y41n0eHm*z6TW+=V38U+8JzPw1+p~iOSbB&@^z0hHai}$}cz@r&On&yf_z; z?W;)NeGege`_!;k4f$!Fe*Gbn(A{A_42G-_q~s$9@gd;!&;;#45aMe!JuY#`8-4OQ zvG*H25`-u;eOHvQ)1(j%QSIS)e+s>9I}imp6?;!k1%}3z*XmfkEoBMVDEumU>Id@C zANsi5q8;yecXQr_(i_}On919Ty}fc9>u#OMv|5pvE9fw!iTW@NSDesSyZ^TGdR+Q=%C=nnGS zs83(p((Wd3=#reaJaoK%1CRPDBduNuwe>cN(C*NgFVO$Es5i}N; zJOfZ+={vGbc5cxIoR%L%&DLM2E&n;*3!?tnn2sCt)2qF)`qE_Q8lZjvb@kzSKQ7vz coscYjnSSwPcb9@x>3qqtBPUF94*hoJU&qZ>m;e9( literal 0 HcmV?d00001 From 9928a04db6aaf189c4b7e037368397a078b8d842 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dani=20Halfin=20=F0=9F=93=AC=F0=9F=94=A8?= Date: Fri, 1 Feb 2019 21:59:02 +0000 Subject: [PATCH 53/98] Initialize open publishing repository: https://cpubwin.visualstudio.com/DefaultCollection/it-client/_git/it-client of branch master --- .openpublishing.publish.config.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json index 5d581c9574..5517804a6a 100644 --- a/.openpublishing.publish.config.json +++ b/.openpublishing.publish.config.json @@ -118,9 +118,9 @@ "version": 0 }, { - "docset_name": "known-issues", + "docset_name": "know", "build_source_folder": "windows/known-issues", - "build_output_subfolder": "known-issues", + "build_output_subfolder": "know", "locale": "en-us", "monikers": [], "moniker_ranges": [], From 78db9a69b41e13c78e156a89dd3bb643d0c28361 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dani=20Halfin=20=F0=9F=93=AC=F0=9F=94=A8?= Date: Fri, 1 Feb 2019 22:27:58 +0000 Subject: [PATCH 54/98] Merged PR 14125: adjusting publishing json --- .openpublishing.publish.config.json | 2 +- .../identity-protection/hello-for-business/hello-overview.md | 3 +-- 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json index 5517804a6a..c85d04cd8b 100644 --- a/.openpublishing.publish.config.json +++ b/.openpublishing.publish.config.json @@ -118,7 +118,7 @@ "version": 0 }, { - "docset_name": "know", + "docset_name": "known-issues", "build_source_folder": "windows/known-issues", "build_output_subfolder": "know", "locale": "en-us", diff --git a/windows/security/identity-protection/hello-for-business/hello-overview.md b/windows/security/identity-protection/hello-for-business/hello-overview.md index 0d044aa31e..09dfdad4dc 100644 --- a/windows/security/identity-protection/hello-for-business/hello-overview.md +++ b/windows/security/identity-protection/hello-for-business/hello-overview.md @@ -9,12 +9,11 @@ ms.pagetype: security, mobile author: mikestephens-MS ms.author: mstephen ms.localizationpriority: high -ms.date: 05/05/2018 --- # Windows Hello for Business Overview **Applies to** -- Windows 10 +- Windows 10 In Windows 10, Windows Hello for Business replaces passwords with strong two-factor authentication on PCs and mobile devices. This authentication consists of a new type of user credential that is tied to a device and uses a biometric or PIN. From 2a91f1b6674531710d71132491aadae6cc89d286 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dani=20Halfin=20=F0=9F=93=AC=F0=9F=94=A8?= Date: Fri, 1 Feb 2019 23:11:23 +0000 Subject: [PATCH 55/98] Merged PR 14127: fixing another part of the config --- .openpublishing.publish.config.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json index c85d04cd8b..5d581c9574 100644 --- a/.openpublishing.publish.config.json +++ b/.openpublishing.publish.config.json @@ -120,7 +120,7 @@ { "docset_name": "known-issues", "build_source_folder": "windows/known-issues", - "build_output_subfolder": "know", + "build_output_subfolder": "known-issues", "locale": "en-us", "monikers": [], "moniker_ranges": [], From 1e36a65a9a12613943b01a1b590661c41bd135b1 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Fri, 1 Feb 2019 17:03:30 -0800 Subject: [PATCH 56/98] Update enroll-and-configure-surface-devices-with-semm.md Updated to point to latest screenshots --- ...enroll-and-configure-surface-devices-with-semm.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/devices/surface/enroll-and-configure-surface-devices-with-semm.md b/devices/surface/enroll-and-configure-surface-devices-with-semm.md index 086d18eead..0c64b39169 100644 --- a/devices/surface/enroll-and-configure-surface-devices-with-semm.md +++ b/devices/surface/enroll-and-configure-surface-devices-with-semm.md @@ -35,13 +35,13 @@ To create a Surface UEFI configuration package, follow these steps: 2. Click **Start**. 3. Click **Configuration Package**, as shown in Figure 1. - ![Create a package for SEMM enrollment](images\surface-semm-enroll-fig1.png "Create a package for SEMM enrollment") + ![Create a package for SEMM enrollment](images\surface-ent-mgmt-fig1-uefi-configurator.png "Create a package for SEMM enrollment") *Figure 1. Select Configuration Package to create a package for SEMM enrollment and configuration* 4. Click **Certificate Protection** to add your exported certificate file with private key (.pfx), as shown in Figure 2. Browse to the location of your certificate file, select the file, and then click **OK**. - ![Add the SEM certificate and Surface UEFI password to configuration package](images\surface-semm-enrollment-fig2.png "Add the SEM certificate and Surface UEFI password to configuration package") + ![Add the SEM certificate and Surface UEFI password to configuration package](images\surface-ent-mgmt-fig2-securepackage.png "Add the SEM certificate and Surface UEFI password to configuration package") *Figure 2. Add the SEMM certificate and Surface UEFI password to a Surface UEFI configuration package* @@ -57,14 +57,14 @@ To create a Surface UEFI configuration package, follow these steps: 9. Click **Next**. 10. If you want to deactivate a component on managed Surface devices, on the **Choose which components you want to activate or deactivate** page, click the slider next to any device or group of devices you want to deactivate so that the slider is in the **Off** position. (Shown in Figure 4.) The default configuration for each device is **On**. Click the **Reset** button if you want to return all sliders to the default position. - ![Disable or enable Surface components](images\surface-semm-enroll-fig4.png "Disable or enable Surface components") + ![Disable or enable Surface components](images\surface-ent-mgmt-fig3-enabledisable.png "Disable or enable Surface components") *Figure 4. Disable or enable individual Surface components* 11. Click **Next**. 12. To enable or disable advanced options in Surface UEFI or the display of Surface UEFI pages, on the **Choose the advanced settings for your devices** page, click the slider beside the desired setting to configure that option to **On** or **Off** (shown in Figure 5). In the **UEFI Front Page** section, you can use the sliders for **Security**, **Devices**, and **Boot** to control what pages are available to users who boot into Surface UEFI. (For more information about Surface UEFI settings, see [Manage Surface UEFI settings](https://technet.microsoft.com/itpro/surface/manage-surface-uefi-settings).) Click **Build** when you have finished selecting options to generate and save the package. - ![Control advanced Surface UEFI settings and Surface UEFI pages](images\surface-semm-enroll-fig5.png "Control advanced Surface UEFI settings and Surface UEFI pages") + ![Control advanced Surface UEFI settings and Surface UEFI pages](images\surface-ent-mgmt-fig4-advancedsettings.png "Control advanced Surface UEFI settings and Surface UEFI pages") *Figure 5. Control advanced Surface UEFI settings and Surface UEFI pages with SEMM* @@ -74,7 +74,7 @@ To create a Surface UEFI configuration package, follow these steps: >[!NOTE] >Record the certificate thumbprint characters that are displayed on this page, as shown in Figure 6. You will need these characters to confirm enrollment of new Surface devices in SEMM. Click **End** to complete package creation and close Microsoft Surface UEFI Configurator. -![Display of certificate thumbprint characters](images\surface-semm-enroll-fig6.png "Display of certificate thumbprint characters") +![Display of certificate thumbprint characters](images\surface-ent-mgmt-fig5-success.png "Display of certificate thumbprint characters") *Figure 6. The last two characters of the certificate thumbprint are displayed on the Successful page* @@ -138,4 +138,4 @@ If you have not secured Surface UEFI with a password or a user enters the passwo ![Settings managed by SEMM disabled in Surface UEFI](images\surface-semm-enroll-fig12.png "Settings managed by SEMM disabled in Surface UEFI") -*Figure 12. Settings managed by SEMM will be disabled in Surface UEFI* \ No newline at end of file +*Figure 12. Settings managed by SEMM will be disabled in Surface UEFI* From 7eb0d3103d59b196497acbdff937b132f575ed61 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Fri, 1 Feb 2019 17:46:02 -0800 Subject: [PATCH 57/98] Update assettag.md --- devices/surface/assettag.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md index 0b14098d0c..7fc3321a4b 100644 --- a/devices/surface/assettag.md +++ b/devices/surface/assettag.md @@ -7,7 +7,7 @@ ms.sitesec: library author: coveminer ms.author: v-jokai ms.topic: article -ms.date: 01/29/2019 +ms.date: 02/01/2019 --- # Surface Asset Tag Tool From 310d06b3e982b1e2475c468b98f59e74176b1fd0 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Fri, 1 Feb 2019 17:46:47 -0800 Subject: [PATCH 58/98] Update change-history-for-surface.md Added Surface Asset Tag tool --- devices/surface/change-history-for-surface.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/devices/surface/change-history-for-surface.md b/devices/surface/change-history-for-surface.md index ec72319593..9c34783c79 100644 --- a/devices/surface/change-history-for-surface.md +++ b/devices/surface/change-history-for-surface.md @@ -13,6 +13,13 @@ ms.topic: article This topic lists new and updated topics in the Surface documentation library. +## February 2019 + +New or changed topic | Description +--- | --- +[Surface Asset Tag](assettag.md) | New + + ## January 2019 New or changed topic | Description From 16993cd8b2c6b3f81e77c949f1ab2a5be0be8d0d Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Fri, 1 Feb 2019 17:59:58 -0800 Subject: [PATCH 59/98] Update TOC.md Adding Asset tag tool --- devices/surface/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/devices/surface/TOC.md b/devices/surface/TOC.md index b60f1c9480..df57cb2c6d 100644 --- a/devices/surface/TOC.md +++ b/devices/surface/TOC.md @@ -13,6 +13,7 @@ ### [Maintain optimal power settings on Surface devices](maintain-optimal-power-settings-on-Surface-devices.md) ### [Battery Limit setting](battery-limit.md) ### [Surface Brightness Control](microsoft-surface-brightness-control.md) +### [Surface Asset Tag](assettag.md) ## [Surface firmware and driver updates](update.md) ### [Download the latest firmware and drivers for Surface devices](deploy-the-latest-firmware-and-drivers-for-surface-devices.md) ### [Manage Surface driver and firmware updates](manage-surface-pro-3-firmware-updates.md) From 6f7d947ad21c5064aa8fb238d5b5ac44e700fcd2 Mon Sep 17 00:00:00 2001 From: Ronald-den-Os <41728016+Ronald-den-Os@users.noreply.github.com> Date: Mon, 4 Feb 2019 14:49:30 +0100 Subject: [PATCH 60/98] Update hello-key-trust-validate-pki.md In bullet 6 of the Configure Domain Controller Certificates section is should say Subject Name tab instead of just Subject tab --- .../hello-for-business/hello-key-trust-validate-pki.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-key-trust-validate-pki.md b/windows/security/identity-protection/hello-for-business/hello-key-trust-validate-pki.md index 764dacd461..7a7999914a 100644 --- a/windows/security/identity-protection/hello-for-business/hello-key-trust-validate-pki.md +++ b/windows/security/identity-protection/hello-for-business/hello-key-trust-validate-pki.md @@ -64,7 +64,7 @@ Sign-in to a certificate authority or management workstations with _Domain Admin 4. On the **Compatibility** tab, clear the **Show resulting changes** check box. Select **Windows Server 2008 R2** from the **Certification Authority** list. Select **Windows 7.Server 2008 R2** from the **Certification Recipient** list. 5. On the **General** tab, type **Domain Controller Authentication (Kerberos)** in Template display name. Adjust the validity and renewal period to meet your enterprise’s needs. **Note**If you use different template names, you’ll need to remember and substitute these names in different portions of the lab. -6. On the **Subject** tab, select the **Build from this Active Directory information** button if it is not already selected. Select **None** from the **Subject name format** list. Select **DNS name** from the **Include this information in alternate subject** list. Clear all other items. +6. On the **Subject Name** tab, select the **Build from this Active Directory information** button if it is not already selected. Select **None** from the **Subject name format** list. Select **DNS name** from the **Include this information in alternate subject** list. Clear all other items. 7. On the **Cryptography** tab, select **Key Storage Provider** from the **Provider Category** list. Select **RSA** from the **Algorithm name** list. Type **2048** in the **Minimum key size** text box. Select **SHA256** from the **Request hash** list. Click **OK**. 8. Close the console. From 7e368af8b9999c1b608ef5f53c97f24ac2914496 Mon Sep 17 00:00:00 2001 From: Ronald-den-Os <41728016+Ronald-den-Os@users.noreply.github.com> Date: Mon, 4 Feb 2019 15:15:55 +0100 Subject: [PATCH 61/98] Type In the last sentence in the blue box the word installation is misspelled. --- .../hello-for-business/hello-key-trust-validate-deploy-mfa.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-key-trust-validate-deploy-mfa.md b/windows/security/identity-protection/hello-for-business/hello-key-trust-validate-deploy-mfa.md index cd419ac1a4..5c80c9502b 100644 --- a/windows/security/identity-protection/hello-for-business/hello-key-trust-validate-deploy-mfa.md +++ b/windows/security/identity-protection/hello-for-business/hello-key-trust-validate-deploy-mfa.md @@ -38,7 +38,7 @@ A lab or proof-of-concept environment does not need high-availability or scalabi Please follow [Download the Azure Multi-Factor Authentication Server](https://docs.microsoft.com/azure/multi-factor-authentication/multi-factor-authentication-get-started-server#download-the-azure-multi-factor-authentication-server) to download Azure MFA server. >[!IMPORTANT] ->Make sure to validate the requirements for Azure MFA server, as outlined in [Install and Configure the Azure Multi-Factor Authentication Server](https://docs.microsoft.com/azure/multi-factor-authentication/multi-factor-authentication-get-started-server#install-and-configure-the-azure-multi-factor-authentication-server) before proceeding. Do not use instllation instructions provided in the article. +>Make sure to validate the requirements for Azure MFA server, as outlined in [Install and Configure the Azure Multi-Factor Authentication Server](https://docs.microsoft.com/azure/multi-factor-authentication/multi-factor-authentication-get-started-server#install-and-configure-the-azure-multi-factor-authentication-server) before proceeding. Do not use installation instructions provided in the article. Once you have validated all the requirements, please proceed to [Configure or Deploy Multifactor Authentication Services](hello-key-trust-deploy-mfa.md). @@ -47,4 +47,4 @@ Once you have validated all the requirements, please proceed to [Configure or De 2. [Validate and Configure Public Key Infrastructure](hello-key-trust-validate-pki.md) 3. [Prepare and Deploy Windows Server 2016 Active Directory Federation Services](hello-key-trust-adfs.md) 4. Validate and Deploy Multifactor Authentication Services (MFA) (*You are here*) -5. [Configure Windows Hello for Business Policy settings](hello-key-trust-policy-settings.md) \ No newline at end of file +5. [Configure Windows Hello for Business Policy settings](hello-key-trust-policy-settings.md) From 111ccc840a0b64e430f04a31054c5aad8abc2232 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 4 Feb 2019 09:14:53 -0800 Subject: [PATCH 62/98] Update policy-csp-deviceinstallation.md --- windows/client-management/mdm/policy-csp-deviceinstallation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-deviceinstallation.md b/windows/client-management/mdm/policy-csp-deviceinstallation.md index 97176bf5d7..44fa5ef6ae 100644 --- a/windows/client-management/mdm/policy-csp-deviceinstallation.md +++ b/windows/client-management/mdm/policy-csp-deviceinstallation.md @@ -427,7 +427,7 @@ To enable this policy, use the following SyncML. This example prevents Windows f string - + From 285bb3a4833828ff1d0b975cf7af18a39956755a Mon Sep 17 00:00:00 2001 From: Cosmos Darwin Date: Mon, 4 Feb 2019 10:46:42 -0800 Subject: [PATCH 63/98] Minor fixes and updates to BitLocker installation topic - There was a weird mix-up of Windows 10 and Windows Server 2012+ naming, so I aligned that - Fixed the formatting of the "applies to" in markdown, and added Windows Server 2016 and 2019 (the latest, just released) - The opening paragraphs contradicted themselves about whether PowerShell is an option (answer: yes it is) --- ...tlocker-how-to-deploy-on-windows-server.md | 20 ++++++------------- 1 file changed, 6 insertions(+), 14 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-deploy-on-windows-server.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-deploy-on-windows-server.md index b77aa70779..491f941bf8 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-how-to-deploy-on-windows-server.md +++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-deploy-on-windows-server.md @@ -1,31 +1,23 @@ --- -title: BitLocker How to deploy on Windows Server 2012 and later (Windows 10) -description: This topic for the IT professional explains how to deploy BitLocker and Windows Server 2012 and later. +title: BitLocker How to deploy on Windows Server 2012 and later +description: This topic for the IT professional explains how to deploy BitLocker and Windows Server 2012 and later ms.assetid: 91c18e9e-6ab4-4607-8c75-d983bbe2542f -ms.prod: w10 +ms.prod: windows-server-threshold ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security author: brianlic-msft -ms.date: 04/19/2017 +ms.date: 02/04/2019 --- # BitLocker: How to deploy on Windows Server 2012 and later -**Applies to** -- Windows 10 +> Applies to: Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, Windows Server 2019 -This topic for the IT professional explains how to deploy BitLocker on Windows Server 2012 and later. - -For all Windows Server editions, BitLocker must be installed using Server Manager. However, you can still provision BitLocker before the server operating system is installed as part of your deployment. +This topic for the IT professional explains how to deploy BitLocker on Windows Server 2012 and later. For all Windows Server editions, BitLocker can be installed using Server Manager or Windows PowerShell cmdlets. BitLocker requires administrator privileges on the server to install. ## Installing BitLocker -BitLocker requires administrator privileges on the server to install. You can install BitLocker either by using Server Manager or Windows PowerShell cmdlets. - -- To install BitLocker using Server Manager -- To install BitLocker using Windows PowerShell - ### To install BitLocker using Server Manager 1. Open Server Manager by selecting the Server Manager icon or running servermanager.exe. From 797edec3d0f20f2ce38c9abade841d67373a7e72 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Mon, 4 Feb 2019 13:03:28 -0800 Subject: [PATCH 64/98] adjusted table --- .../deployment/windows-10-pro-in-s-mode.md | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/windows/deployment/windows-10-pro-in-s-mode.md b/windows/deployment/windows-10-pro-in-s-mode.md index d266a613ca..c65de69ee2 100644 --- a/windows/deployment/windows-10-pro-in-s-mode.md +++ b/windows/deployment/windows-10-pro-in-s-mode.md @@ -23,19 +23,19 @@ A number of other transformations are possible depending on which version and ed | If a device is running this version | and this edition | then you can switch or convert it to this edition by these methods: | | | |-------------|---------------------|-----------------------------------|-------------------------------|--------------------------------------------| | | | **Store for Education** (switch/convert all devices in your tenant) | **Microsoft Store** (switch/convert one device at a time) | **Intune** (switch/convert any number of devices selected by Admin) | -| **Windows 10, version 1709** | Pro in S mode | Pro EDU | Pro | No | -| | Pro | Pro EDU | Not applicable | Not applicable | -| | Home | Not Applicable | Not Applicable | Not Applicable | +| **Windows 10, version 1709** | Pro in S mode | Pro EDU | Pro | Not by this method | +| | Pro | Pro EDU | Not by any method | Not by any method | +| | Home | Not by any method | Not by any method | Not by any method | | | | | | | -| **Windows 10, version 1803** | Pro in S mode | Pro EDU in S mode | Pro | No | -| | Pro | Pro EDU | Not applicable | Not applicable | -| | Home in S mode | Not Applicable | Home | No | -| | Home | Not Applicable | Not applicable | Not applicable | +| **Windows 10, version 1803** | Pro in S mode | Pro EDU in S mode | Pro | Not by this method | +| | Pro | Pro EDU | Not by any method | Not by any method | +| | Home in S mode | Not by any method | Home | Not by this method | +| | Home | Not by any method | Not by any method | Not by any method | | | | | | | | **Windows 10, version 1809** | Pro in S mode | Pro EDU in S mode | Pro | Pro | -| | Pro | Pro EDU | Not applicable | Not applicable | -| | Home in S mode | Not Applicable | Home | Home | -| | Home | Not Applicable | Not applicable | Not applicable | +| | Pro | Pro EDU | Not by any method | Not by any method | +| | Home in S mode | Not by any method | Home | Home | +| | Home | Not by any method | Not by any method | Not by any method | Use the following information to switch to Windows 10 Pro through the Microsoft Store. From 08937a2def878fe2cbac65b78f0d36895288ec0b Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 5 Feb 2019 17:54:58 +0000 Subject: [PATCH 65/98] Updated index.md --- windows/client-management/mdm/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/index.md b/windows/client-management/mdm/index.md index c4cf3cf9b6..2fbd4d1bce 100644 --- a/windows/client-management/mdm/index.md +++ b/windows/client-management/mdm/index.md @@ -42,7 +42,7 @@ The MDM security baseline includes policies that cover the following areas: - And much more For more details about the MDM policies defined in the MDM security baseline and what Microsoft’s recommended baseline policy values are, see [MDM Security baseline (Preview) for Windows 10, version 1809](http://download.microsoft.com/download/2/C/4/2C418EC7-31E0-4A74-8928-6DCD512F9A46/1809-MDM-SecurityBaseLine-Document-[Preview].zip). - +For information about the MDM policies defined in the Intune security baseline public preview, see [Windows security baseline settings for Intune](https://docs.microsoft.com/en-us/intune/security-baseline-settings-windows) From 9d3307753082ad8ee0a73fdb61e561f7898ae01b Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 5 Feb 2019 10:49:26 -0800 Subject: [PATCH 66/98] Update control-usb-devices-using-intune.md --- .../device-control/control-usb-devices-using-intune.md | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md index 1f94b66e1c..d61268d81f 100644 --- a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md +++ b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md @@ -8,7 +8,7 @@ ms.pagetype: security ms.localizationpriority: medium ms.author: justinha author: justinha -ms.date: 12/20/2018 +ms.date: 02/06/2019 --- # How to control USB devices and other removable media using Windows Defender ATP @@ -167,10 +167,9 @@ Allowing installation of specific devices requires also enabling [DeviceInstalla ### Prevent installation of specifically prohibited peripherals -Windows Defender ATP also blocks installation and usage of prohibited peripherals with a custom profile in Intune. -For example, this custom profile blocks installation and usage of USB devices with hardware IDs "USBSTOR\DiskVendorCo" and "USBSTOR\DiskSanDisk_Cruzer_Glide_3.0", and applies to USB devices with matching hardware IDs that are already installed. +Windows Defender ATP also blocks installation and usage of prohibited peripherals either by using **Administrative Templates** or [Device Installation CSP settings](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-deviceinstallation) with a custom profile in Intune. -![Custom profile](images/custom-profile-prevent-device-ids.png) +For more information about using **Administrative Templates**, see [Windows 10 templates to configure Group Policy settings in Microsoft Intune](https://docs.microsoft.com/intune/administrative-templates-windows). For a SyncML example that prevents installation of specific device IDs, see [DeviceInstallation/PreventInstallationOfMatchingDeviceIDs CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-deviceinstallation#deviceinstallation-preventinstallationofmatchingdeviceids). To prevent specific device classes, see [DeviceInstallation/PreventInstallationOfMatchingDeviceSetupClasses CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-deviceinstallation#deviceinstallation-preventinstallationofmatchingdevicesetupclasses). From 084d9590992b0277dbadf15a9cdfddf3ba6e42f3 Mon Sep 17 00:00:00 2001 From: rikot Date: Tue, 5 Feb 2019 14:05:18 -0500 Subject: [PATCH 67/98] Update prepare-your-environment-for-surface-hub.md Removed description of an error and link to an article that explained the message. This issue was resolved a year ago and the link was no longer valid. --- devices/surface-hub/prepare-your-environment-for-surface-hub.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface-hub/prepare-your-environment-for-surface-hub.md b/devices/surface-hub/prepare-your-environment-for-surface-hub.md index b9239014a4..82b5be7390 100644 --- a/devices/surface-hub/prepare-your-environment-for-surface-hub.md +++ b/devices/surface-hub/prepare-your-environment-for-surface-hub.md @@ -25,7 +25,7 @@ Review these dependencies to make sure Surface Hub features will work in your IT |-------------|------------------| | Active Directory or Azure Active Directory (Azure AD) |

The Surface Hub's uses an Active Directory or Azure AD account (called a **device account**) to access Exchange and Skype for Business services. The Surface Hub must be able to connect to your Active Directory domain controller or to your Azure AD tenant in order to validate the device account’s credentials, as well as to access information like the device account’s display name, alias, Exchange server, and Session Initiation Protocol (SIP) address.

You can also domain join or Azure AD join your Surface Hub to allow a group of authorized users to configure settings on the Surface Hub. | | Exchange (Exchange 2013 or later, or Exchange Online) and Exchange ActiveSync |

Exchange is used for enabling mail and calendar features, and also lets people who use the device send meeting requests to the Surface Hub, enabling one-touch meeting join.

ActiveSync is used to sync the device account’s calendar and mail to the Surface Hub. If the device cannot use ActiveSync, it will not show meetings on the welcome screen, and joining meetings and emailing whiteboards will not be enabled. | -| Skype for Business (Lync Server 2013 or later, or Skype for Business Online) | Skype for Business is used for various conferencing features, like video calls, instant messaging, and screen sharing.

If screen sharing on a Surface Hub fails and the error message **An error occurred during the screen presentation** is displayed, see [Video Based Screen Sharing not working on Surface Hub](https://support.microsoft.com/help/3179272/video-based-screen-sharing-not-working-on-surface-hub) for help. | +| Skype for Business (Lync Server 2013 or later, or Skype for Business Online) | Skype for Business is used for various conferencing features, like video calls, instant messaging, and screen sharing.

| | Mobile device management (MDM) solution (Microsoft Intune, System Center Configuration Manager, or supported third-party MDM provider) | If you want to apply settings and install apps remotely, and to multiple devices at a time, you must set up a MDM solution and enroll the device to that solution. See [Manage settings with an MDM provider](manage-settings-with-mdm-for-surface-hub.md) for details. | | Microsoft Operations Managmement Suite (OMS) | OMS is used to monitor the health of Surface Hub devices. See [Monitor your Surface Hub](monitor-surface-hub.md) for details. | | Network and Internet access | In order to function properly, the Surface Hub should have access to a wired or wireless network. Overall, a wired connection is preferred. 802.1X Authentication is supported for both wired and wireless connections.


**802.1X authentication:** In Windows 10, version 1703, 802.1X authentication for wired and wireless connections is enabled by default in Surface Hub. If your organization doesn't use 802.1X authentication, there is no configuration required and Surface Hub will continue to function as normal. If you use 802.1X authentication, you must ensure that the authentication certification is installed on Surface Hub. You can deliver the certificate to Surface Hub using the [ClientCertificateInstall CSP](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/clientcertificateinstall-csp) in MDM, or you can [create a provisioning package](provisioning-packages-for-surface-hub.md) and install it during first run or through the Settings app. After the certificate is applied to Surface Hub, 802.1X authentication will start working automatically.
**Note:** For more information on enabling 802.1X wired authentication on Surface Hub, see [Enable 802.1x wired authentication](enable-8021x-wired-authentication.md).

**Dynamic IP:** The Surface Hub cannot be configured to use a static IP. It must use DHCP to assign an IP address.

**Proxy servers:** If your topology requires a connection to a proxy server to reach Internet services, then you can configure it during first run, or in Settings. Proxy credentials are stored across Surface Hub sessions and only need to be set once. | From 8df5b4859409ae1b647745f9affb031832bdb82f Mon Sep 17 00:00:00 2001 From: Aabha Thipsay Date: Tue, 5 Feb 2019 19:27:41 +0000 Subject: [PATCH 68/98] Merged PR 14155: Reset security key Adding a page for reset instructions --- .../hello-for-business/reset-security-key.md | 35 +++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 windows/security/identity-protection/hello-for-business/reset-security-key.md diff --git a/windows/security/identity-protection/hello-for-business/reset-security-key.md b/windows/security/identity-protection/hello-for-business/reset-security-key.md new file mode 100644 index 0000000000..43aca85f75 --- /dev/null +++ b/windows/security/identity-protection/hello-for-business/reset-security-key.md @@ -0,0 +1,35 @@ +--- +title: Reset-security-key +description: Windows10 enables users to sign in to their device using a security key. How to reset a security key +keywords: FIDO2, security key, CTAP, Microsoft-compatible security key +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security, mobile +author: aabhathipsay +ms.author: aathipsa +ms.localizationpriority: medium +ms.date: 11/14/2018 +--- +# How to reset a Microsoft-compatible security key? +> [!Warning] +> Some information relates to pre-released product that may change before it is commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + +>[!IMPORTANT] +>This operation will wipe everything from your security key and reset it to factory defaults.
**All data and credentials will be cleared.** + + +A [Microsoft-compatible security key](https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/microsoft-compatible-security-key) can be reset via Settings app ( Settings > Accounts > Sign-in options > Security key ). +
+Follow the instructions in the Settings app and look for specific instructions based on your security key manufacturer below: + + +|Security key manufacturer
| Reset instructions
| +| --- | --- | +|Yubico | **USB:** Remove and re-insert the security key. When the LED on the security key begins flashing, touch the metal contact
**NFC:** Tap the security key on the reader
| +|Feitian | Touch the blinking fingerprint sensor twice to reset the key| +|HID | Tap the card on the reader twice to reset it | + +>[!NOTE] +>The steps to reset your security key may vary based on the security key manufacturer.
+>If your security key is not listed here, please reach out to your security key manufacturer for reset instructions. \ No newline at end of file From 0fb93168e1242ac2a24142cf764d15796209b85d Mon Sep 17 00:00:00 2001 From: jaimeo Date: Tue, 5 Feb 2019 13:31:56 -0800 Subject: [PATCH 69/98] updated/new exit code --- .../upgrade/upgrade-readiness-deployment-script.md | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/windows/deployment/upgrade/upgrade-readiness-deployment-script.md b/windows/deployment/upgrade/upgrade-readiness-deployment-script.md index 1d04244d96..ec7d59b862 100644 --- a/windows/deployment/upgrade/upgrade-readiness-deployment-script.md +++ b/windows/deployment/upgrade/upgrade-readiness-deployment-script.md @@ -45,7 +45,7 @@ To run the Upgrade Readiness deployment script: 1. Provide a storage location for log information. You can store log information on a remote file share or a local directory. If the script is blocked from creating the log file for the given path, it creates the log files in the drive with the Windows directory. Example: %SystemDrive%\\UADiagnostics - 2. Input your commercial ID key. This can be found in your OMS workspace under Settings -> Connected Sources -> Windows Telemetry. + 2. Input your commercial ID key. To find your commercial ID, first navigate to the **Solutions** tab for your workspace, and then select the solution. From there, select the **Settings** page, where you can find and copy your commercial ID: 3. By default, the script sends log information to both the console and the log file. To change the default behavior, use one of the following options: @@ -129,9 +129,9 @@ Error creating or updating registry key: **CommercialId** at **HKLM:\SOFTWARE\Mi | 43 - Function **EndImpersonatingLoggedOnUser** failed with an unexpected exception. | Check the logs for the exception message and HResult. | | 44 - Diagtrack.dll version is old, so Auth Proxy will not work. | Update the device using Windows Update or Windows Server Update Services. | | 45 - Diagtrack.dll was not found. | Update the device using Windows Update or Windows Server Update Services. | -| 48 - **CommercialID** mentioned in RunConfig.bat should be a GUID. | Copy the commercialID from your workspace. To find the commercialID, in the OMS portal click **Upgrade Readiness > Settings**. | +| 48 - **CommercialID** mentioned in RunConfig.bat should be a GUID. | Copy the commercial ID from your workspace. To find your commercial ID, first navigate to the Solutions tab for your workspace in Azure Portal, and then select the solution. From there, select the **Settings** page, where you can find and copy your commercial ID.| | 50 - Diagtrack Service is not running. | The Diagtrack service is required to send data to Microsoft. Enable and run the "Connected User Experiences and Telemetry" service. | -| 51 - RunCensus failed with an unexpected exception. | RunCensus explitly runs the process used to collect device information. The method failed with an unexpected exception. Check the ExceptionHResult and ExceptionMessage for more details. | +| 51 - RunCensus failed with an unexpected exception. | RunCensus explitly runs the process used to collect device information. The method failed with an unexpected exception. The most common cause is incorrect setup of diagnostic data. Check the ExceptionHResult and ExceptionMessage for more details. | | 52 - DeviceCensus.exe not found on a Windows 10 machine. | On computers running Windows 10, the process devicecensus.exe should be present in the \system32 directory. Error code 52 is returned if the process was not found. Ensure that it exists at the specified location. | | 53 - There is a different CommercialID present at the GPO path: **HKLM:\SOFTWARE\Policies\Microsoft \Windows\DataCollection**. This will take precedence over the CommercialID provided in the script. | Provide the correct CommercialID at the GPO location. | | 54 - Microsoft Account Sign In Assistant Service is Disabled. | This service is required for devices running Windows 10. The diagnostic data client relies on the Microsoft Account Sign In Assistant (MSA) to get the Global Device ID for the device. Without the MSA service running, the global device ID will not be generated and sent by the client and Windows Update will no longer offer feature updates to devices running Windows 10 1709 or higher. See [Feature updates are not being offered while other updates are](https://docs.microsoft.com/windows/deployment/update/windows-update-troubleshooting#feature-updates-are-not-being-offered-while-other-updates-are). | @@ -142,6 +142,9 @@ Error creating or updating registry key: **CommercialId** at **HKLM:\SOFTWARE\Mi | 59 - CleanupOneSettings failed to delete LastPersistedEventTimeOrFirstBoot property at registry key path: **HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\Diagtrack** |The CleanupOneSettings function clears some of the cached values needed by the Appraiser which is the data collector on the monitored device. This helps in the download of the most recent for accurate running of the data collector. Verify that the account has the correct permissions to change or add registry keys. | | 60 - CleanupOneSettings failed to delete registry key: **HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\ Diagnostics\Diagtrack\SettingsRequests** | Verify that the account has the correct permissions to change or add registry keys. | | 61 - CleanupOneSettings failed with an exception | CleanupOneSettings failed with an unexpected exception. | +| 63 - Diagnostic data is disabled for the device | If AllowTelemetry == 0, devices cannot send diagnostic data. To resolve this, set the **AllowTelemetry** value at **HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection**. | + + From df5fafb380ff7b9db8e3ea00dbc409636ede86d0 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Tue, 5 Feb 2019 14:47:20 -0800 Subject: [PATCH 70/98] removed report --- .../intelligence/top-scoring-industry-antivirus-tests.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/intelligence/top-scoring-industry-antivirus-tests.md b/windows/security/threat-protection/intelligence/top-scoring-industry-antivirus-tests.md index 1a97feb0ef..c6df9bc8cc 100644 --- a/windows/security/threat-protection/intelligence/top-scoring-industry-antivirus-tests.md +++ b/windows/security/threat-protection/intelligence/top-scoring-industry-antivirus-tests.md @@ -40,9 +40,9 @@ The AV-TEST Product Review and Certification Report tests on three categories: p Windows Defender Antivirus achieved an overall Protection score of 6.0/6.0, detecting 100% of 19,956 malware samples. -- September - October 2018 AV-TEST Business User test: [Protection score 6.0/6.0](https://www.av-test.org/en/antivirus/business-windows-client/windows-10/october-2018/microsoft-windows-defender-antivirus-4.18-184174/) | [Analysis](https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RWqOqD) +- September - October 2018 AV-TEST Business User test: [Protection score 6.0/6.0](https://www.av-test.org/en/antivirus/business-windows-client/windows-10/october-2018/microsoft-windows-defender-antivirus-4.18-184174/) - Windows Defender Antivirus achieved an overall Protection score of 6.0/6.0, protecting against 21,566 of 21,568 tested malware samples. + Windows Defender Antivirus achieved an overall Protection score of 6.0/6.0 with 21,568 tested malware samples. - July - August 2018 AV-TEST Business User test: [Protection score 6.0/6.0](https://www.av-test.org/en/antivirus/business-windows-client/windows-10/august-2018/microsoft-windows-defender-antivirus-4.12--4.18-183212/) | [Analysis](https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE2IL3Y) From 76d537eec4b59a3f958b5c4da33c462d8a9d70f3 Mon Sep 17 00:00:00 2001 From: "H. Poulsen" Date: Tue, 5 Feb 2019 16:48:10 -0800 Subject: [PATCH 71/98] Update Champs Corner w/latest content Added 2/5 Champs Corner blog post to the top of the list. --- windows/deployment/update/windows-as-a-service.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/deployment/update/windows-as-a-service.md b/windows/deployment/update/windows-as-a-service.md index a1192986c2..49eb52c7ba 100644 --- a/windows/deployment/update/windows-as-a-service.md +++ b/windows/deployment/update/windows-as-a-service.md @@ -56,6 +56,7 @@ Written by IT pros for IT pros, sharing real world examples and scenarios for Wi +**NEW** Classifying Windows updates in common deployment tools **NEW** Understanding the differences between servicing Windows 10-era and legacy Windows operating systems From f6b2b1513a4d32138a4205932ccf8a4a7f516f58 Mon Sep 17 00:00:00 2001 From: Mike Edgar Date: Wed, 6 Feb 2019 02:39:06 +0000 Subject: [PATCH 72/98] Merged PR 14166: Various fixes for TASK 19626196 and TASK 20202008 Various fixes for TASK 19626196 and TASK 20202008 --- ...system-components-to-microsoft-services.md | 80 ++++++++++++++++--- 1 file changed, 71 insertions(+), 9 deletions(-) diff --git a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index a24b537d44..92614a0052 100644 --- a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -156,6 +156,7 @@ The following table lists management options for each setting, beginning with Wi |     [26.1 Apps for websites](#bkmk-apps-for-websites) | | ![Check mark](images/checkmark.png) | | | | [27. Windows Update Delivery Optimization](#bkmk-updates) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | | [28. Windows Update](#bkmk-wu) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | | +| [29. License Manager](#bkmk-licmgr) | | | | ![Check mark](images/checkmark.png) | | ### Settings for Windows Server 2016 with Desktop Experience @@ -518,13 +519,14 @@ Alternatively, you could use the registry to set the Group Policies. | Turn off browser geolocation | HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Geolocation
REG_DWORD: PolicyDisableGeolocation
Value: 1 | | Prevent managing SmartScreen filter | HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\PhishingFilter
REG_DWORD: EnabledV9
Value: 0 | -There are three more Group Policy objects that are used by Internet Explorer: +There are more Group Policy objects that are used by Internet Explorer: | Path | Policy | Description | | - | - | - | | **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Internet Explorer** > **Compatibility View** > **Turn off Compatibility View** | Choose whether employees can configure Compatibility View. | Choose whether an employee can swipe across a screen or click forward to go to the next pre-loaded page of a website.
Default: Disabled | | **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Internet Explorer** > **Internet Control Panel** > **Advanced Page** | Turn off the flip ahead with page prediction feature | Choose whether an employee can swipe across a screen or click forward to go to the next pre-loaded page of a website.
Default: Enabled | | **Computer Configuration** > **Administrative Templates** > **Windows Components** > **RSS Feeds** | Turn off background synchronization for feeds and Web Slices | Choose whether to have background synchronization for feeds and Web Slices.
Default: Enabled | +| **Computer Configuration** > **Administrative Templates** > **Control Panel** > **Allow Online Tips** | Allow Online Tips | Enables or disables the retrieval of online tips and help for the Settings app.
Set to : Disabled | You can also use registry entries to set these Group Policies. @@ -533,6 +535,10 @@ You can also use registry entries to set these Group Policies. | Choose whether employees can configure Compatibility View. | HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\MicrosoftEdge\\BrowserEmulation
REG_DWORD: MSCompatibilityMode
Value: 0| | Turn off the flip ahead with page prediction feature | HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\FlipAhead
REG_DWORD: Enabled
Value: 0| | Turn off background synchronization for feeds and Web Slices | HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Feeds
REG_DWORD: BackgroundSyncStatus
Value: 0| +| Turn off Online Tips | HKEY\_LOCAL\_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer
REG_DWORD: AllowOnlineTips
Value: 0| + +1. HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!AllowOnlineTips, 0, Null, Fail + To turn off the home page, enable the Group Policy: **User Configuration** > **Administrative Templates** > **Windows Components** > **Internet Explorer** > **Disable changing home page settings**, and set it to **about:blank**. @@ -597,6 +603,8 @@ To prevent communication to the Microsoft Account cloud authentication service. -or- - Create a REG\_DWORD registry setting named **NoConnectedUser** in **HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System** with a value of 3. + + To disable the Microsoft Account Sign-In Assistant: - Apply the Accounts/AllowMicrosoftAccountSignInAssistant MDM policy from the [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx) where 0 is turned off and 1 is turned on. @@ -623,8 +631,7 @@ Find the Microsoft Edge Group Policy objects under **Computer Configuration** &g | Configure Windows Defender SmartScreen (Windows 10, version 1703) | Choose whether Windows Defender SmartScreen is turned on or off.
Default: Enabled | | Allow web content on New Tab page | Choose whether a new tab page appears.
Default: Enabled | | Configure Start pages | Choose the Start page for domain-joined devices.
Set this to **\** | -| Prevent the First Run webpage from opening on Microsoft Edge | Choose whether employees see the First Run webpage.
Default: Disabled | - +| Prevent the First Run webpage from opening on Microsoft Edge | Choose whether employees see the First Run webpage.
Set to: Enable | The Windows 10, version 1511 Microsoft Edge Group Policy names are: @@ -652,6 +659,7 @@ Alternatively, you can configure the Microsoft Group Policies using the followin | Configure Windows Defender SmartScreen Filter (Windows 10, version 1703) | HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\MicrosoftEdge\\PhishingFilter
REG_DWORD name: EnabledV9
Value: 0 | | Allow web content on New Tab page | HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\MicrosoftEdge\\SearchScopes
REG_DWORD name: AllowWebContentOnNewTabPage
Value: 0 | | Configure corporate Home pages | HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\MicrosoftEdge\\ServiceUI
REG_DWORD name: ProvisionedHomePages
Value: 0| +| Prevent the First Run webpage from opening on Microsoft Edge | HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\MicrosoftEdge\\Main
REG_DWORD name: PreventFirstRunPage
Value: 1| ### 12.2 Microsoft Edge MDM policies @@ -720,6 +728,10 @@ To turn off OneDrive in your organization: -and- +- Apply the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **OneDrive** > **Prevent OneDrive from generating network traffic until the user signs in to OneDrive (Enable)** + + -or- + - Create a REG\_DWORD registry setting named **PreventNetworkTrafficPreUserSignIn** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\OneDrive** with a value of 1 (one). ### 16. Preinstalled apps @@ -1388,6 +1400,16 @@ To turn off **Choose apps that can read or send messages**: - Turn off the feature in the UI for each app. +**To turn off Message Sync** + +- Create a REG\_DWORD registry setting named **AllowMessageSync** in **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\Windows\Messaging and set the value to 0. + + -or- + +- Apply the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Messaging** + + - Set the **Allow Message Service Cloud** to **Disable**. + ### 17.13 Phone calls In the **Phone calls** area, you can choose which apps can make phone calls. @@ -1707,8 +1729,11 @@ The Windows activation status will be valid for a rolling period of 180 days wit Enterprise customers can manage updates to the Disk Failure Prediction Model. For Windows 10: +- Disable this Group Policy: **Computer Configuration** > **Administrative Templates** > **System** > **Storage Health** > **Allow downloading updates to the Disk Failure Prediction Model** -- Apply the Group Policy: **Computer Configuration** > **Administrative Templates** > **System** > **Storage Health** > **Allow downloading updates to the Disk Failure Prediction Model** + -or- + +- Create a REG\_DWORD registry setting named **AllowDiskHealthModelUpdates** in **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\Windows\\StorageHealth** with a value of 0. ### 20. Sync your settings @@ -1738,7 +1763,8 @@ You can control if your settings are synchronized: To turn off Messaging cloud sync: -- Create a REG\_DWORD registry setting named **CloudServiceSyncEnabled** in **HKEY\_CURRENT\_USER\\SOFTWARE\\Microsoft\\Messaging** with a value of 0 (zero). +- Set the Group Policy Allow Message Service Cloud to Disable. The Group Policy path is Computer Configuration\Administrative templates\Windows Components\Messaging\Allow Message Service Cloud +- Create a REG\_DWORD registry setting named **CloudServiceSyncEnabled** in **HKEY\_CURRENT\_USER\\SOFTWARE\\Microsoft\\Messaging** with a value of 0 (zero). ### 21. Teredo @@ -1909,6 +1935,16 @@ If you're running Windows 10, version 1607 or later, you only need to enable the - Create a new REG\_DWORD registry setting named **DisableWindowsSpotlightFeatures** in **HKEY\_CURRENT\_USER\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent** with a value of 1 (one). + +-and- + + +- **Computer Configuration** > **Administrative Templates** > **Control Panel** > **Personalization** > **Do not display the Lock Screen** + + -or- + +- Create a new REG\_DWORD registry setting named **NoLockScreen** in **HKEY\Local\Machine\\SOFTWARE\\Policies\\Microsoft\\Windows\\Personalization** with a value of 1 (one). + If you're not running Windows 10, version 1607 or later, you can use the other options in this section. - Configure the following in **Settings**: @@ -1932,7 +1968,7 @@ If you're not running Windows 10, version 1607 or later, you can use the other o - Set the **Turn off fun facts, tips, tricks, and more on lock screen** check box. > [!NOTE] - > This will only take effect if the policy is applied before the first logon. If you cannot apply the **Force a specific default lock screen image** policy before the first logon to the device, you can apply this policy: **Computer Configuration** > **Administrative Templates** > **Control Panel** > **Personalization** > **Do not display the lock screen**. Alternatively, you can create a new REG\_SZ registry setting nameed **LockScreenImage** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\Personalization** with a value of **C:\\windows\\web\\screen\\lockscreen.jpg** and create a new REG\_DWORD registry setting named **LockScreenOverlaysDisabled** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\Personalization** with a value of 1 (one). + > This will only take effect if the policy is applied before the first logon. If you cannot apply the **Force a specific default lock screen image** policy before the first logon to the device, you can apply this policy: **Computer Configuration** > **Administrative Templates** > **Control Panel** > **Personalization** > **Do not display the lock screen**. Alternatively, you can create a new REG\_SZ registry setting named **LockScreenImage** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\Personalization** with a value of **C:\\windows\\web\\screen\\lockscreen.jpg** and create a new REG\_DWORD registry setting named **LockScreenOverlaysDisabled** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\Personalization** with a value of 1 (one). - **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Cloud Content** > **Do not show Windows tips**. @@ -1947,6 +1983,13 @@ If you're not running Windows 10, version 1607 or later, you can use the other o - Create a new REG\_DWORD registry setting named **DisableWindowsConsumerFeatures** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent** with a value of 1 (one). + - This policy setting controls whether the lock screen appears for users. The Do not display the lock screen Group Policy should be set to Enable to prevent the lock screen from being displayed. The Group Computer Configuration\Administrative templates\Control Panel\Personalization!Do not display the lock screen. + + - If you enable this policy setting, users that are not required to press CTRL + ALT + DEL before signing in will see their selected tile after locking their PC. + + - If you disable or do not configure this policy setting, users that are not required to press CTRL + ALT + DEL before signing in will see a lock screen after locking their PC. They must dismiss the lock screen using touch, the keyboard, or by dragging it with the mouse. + + For more info, see [Windows Spotlight on the lock screen](/windows/configuration/windows-spotlight). ### 26. Microsoft Store @@ -1996,13 +2039,13 @@ You can find the Delivery Optimization Group Policy objects under **Computer Con | Policy | Description | |---------------------------|-----------------------------------------------------------------------------------------------------| -| Download Mode | Lets you choose where Delivery Optimization gets or sends updates and apps, including

  • None. Turns off Delivery Optimization.

  • Group. Gets or sends updates and apps to PCs on the same local network domain.

  • Internet. Gets or sends updates and apps to PCs on the Internet.

  • LAN. Gets or sends updates and apps to PCs on the same NAT only.

  • Simple. Simple download mode with no peering.

  • Bypass. Use BITS instead of Windows Update Delivery Optimization.

| +| Download Mode | Lets you choose where Delivery Optimization gets or sends updates and apps, including

  • None. Turns off Delivery Optimization.

  • Group. Gets or sends updates and apps to PCs on the same local network domain.

  • Internet. Gets or sends updates and apps to PCs on the Internet.

  • LAN. Gets or sends updates and apps to PCs on the same NAT only.

  • Simple. Simple download mode with no peering.

  • Bypass. Use BITS instead of Windows Update Delivery Optimization.Set to Bypass to restrict traffic.

| | Group ID | Lets you provide a Group ID that limits which PCs can share apps and updates.
**Note:** This ID must be a GUID.| | Max Cache Age | Lets you specify the maximum time (in seconds) that a file is held in the Delivery Optimization cache.
The default value is 259200 seconds (3 days).| | Max Cache Size | Lets you specify the maximum cache size as a percentage of disk size.
The default value is 20, which represents 20% of the disk.| | Max Upload Bandwidth | Lets you specify the maximum upload bandwidth (in KB/second) that a device uses across all concurrent upload activity.
The default value is 0, which means unlimited possible bandwidth.| -You can also set the **Download Mode** policy by creating a new REG\_DWORD registry setting named **DODownloadMode** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\DeliveryOptimization** with a value of 100 (one hundred). +Set the Delivery Optimization Group Policy to "Bypass" to prevent traffic. Alternatively, you can set the **Download Mode** policy by creating a new REG\_DWORD registry setting named **DODownloadMode** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\DeliveryOptimization** to a value of 100 (one hundred). ### 27.3 Delivery Optimization MDM policies @@ -2010,7 +2053,7 @@ The following Delivery Optimization MDM policies are available in the [Policy CS | Policy | Description | |---------------------------|-----------------------------------------------------------------------------------------------------| -| DeliveryOptimization/DODownloadMode | Lets you choose where Delivery Optimization gets or sends updates and apps, including

  • 0. Turns off Delivery Optimization.

  • 1. Gets or sends updates and apps to PCs on the same NAT only.

  • 2. Gets or sends updates and apps to PCs on the same local network domain.

  • 3. Gets or sends updates and apps to PCs on the Internet.

  • 99. Simple download mode with no peering.

  • 100. Use BITS instead of Windows Update Delivery Optimization.

| +| DeliveryOptimization/DODownloadMode | Lets you choose where Delivery Optimization gets or sends updates and apps, including

  • 0. Turns off Delivery Optimization.

  • 1. Gets or sends updates and apps to PCs on the same NAT only.

  • 2. Gets or sends updates and apps to PCs on the same local network domain.

  • 3. Gets or sends updates and apps to PCs on the Internet.

  • 99. Simple download mode with no peering.

  • 100. Use BITS instead of Windows Update Delivery Optimization.

| | DeliveryOptimization/DOGroupID | Lets you provide a Group ID that limits which PCs can share apps and updates.
**Note** This ID must be a GUID.| | DeliveryOptimization/DOMaxCacheAge | Lets you specify the maximum time (in seconds) that a file is held in the Delivery Optimization cache.
The default value is 259200 seconds (3 days).| | DeliveryOptimization/DOMaxCacheSize | Lets you specify the maximum cache size as a percentage of disk size.
The default value is 20, which represents 20% of the disk.| @@ -2080,4 +2123,23 @@ You can turn off automatic updates by doing one of the following. This is not re - **5**. Turn off automatic updates. + +### 29. License Manager + +You can turn off License Manager related traffic by setting the following registry entry: + +- Add a REG\_DWORD value named **Start** to **HKEY\_LOCAL\_MACHINE\\System\\CurrentControlSet\\Services\\LicenseManager** and set the value to 4 + +- The value 4 is to disable the service. Here are the available options to set the registry: + + - **0x00000000** = Boot + + - **0x00000001** = System + + - **0x00000002** = Automatic + + - **0x00000003** = Manual + + - **0x00000004** = Disabled + To learn more, see [Device update management](https://msdn.microsoft.com/library/windows/hardware/dn957432.aspx) and [Configure Automatic Updates by using Group Policy](https://technet.microsoft.com/library/cc720539.aspx). From b48d9ddaf0a3b4be3884ef3962734207fa8d470c Mon Sep 17 00:00:00 2001 From: Ronald-den-Os <41728016+Ronald-den-Os@users.noreply.github.com> Date: Wed, 6 Feb 2019 15:20:47 +0100 Subject: [PATCH 73/98] Typo "Create a Domain Controller Automatic Certifiacte Enrollment Group Policy object", should say certificate --- .../hello-hybrid-key-whfb-settings-policy.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-policy.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-policy.md index 1a0b808710..ef10959add 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-policy.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-policy.md @@ -37,7 +37,7 @@ Domain controllers automatically request a certificate from the *Domain Controll To continue automatic enrollment and renewal of domain controller certificates that understand newer certificate template and superseded certificate template configurations, create and configure a Group Policy object for automatic certificate enrollment and link the Group Policy object to the Domain Controllers OU. -#### Create a Domain Controller Automatic Certifiacte Enrollment Group Policy object +#### Create a Domain Controller Automatic Certificate Enrollment Group Policy object Sign-in a domain controller or management workstations with _Domain Admin_ equivalent credentials. @@ -169,4 +169,4 @@ Users must receive the Windows Hello for Business group policy settings and have 4. [Configure Directory Synchronization](hello-hybrid-key-trust-dirsync.md) 5. [Configure Azure Device Registration](hello-hybrid-key-trust-devreg.md) 6. Configure Windows Hello for Business policy settings (*You are here*) -7. [Sign-in and Provision](hello-hybrid-key-whfb-provision.md) \ No newline at end of file +7. [Sign-in and Provision](hello-hybrid-key-whfb-provision.md) From bf132c6b37b71950d4339a90c657d82a6c884e3a Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 6 Feb 2019 08:57:29 -0800 Subject: [PATCH 74/98] removed references to UC AV in description of certain endpoints per Albert Serrano --- .../update/windows-analytics-get-started.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index 1b97925aa0..0782a82019 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -47,20 +47,20 @@ To enable data sharing, configure your proxy server to whitelist the following e | **Endpoint** | **Function** | |---------------------------------------------------------|-----------| -|`https://ceuswatcab01.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness. | -| `https://ceuswatcab02.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness. | -| `https://eaus2watcab01.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness. | -| `https://eaus2watcab02.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness. | -| `https://weus2watcab01.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness. | -| `https://weus2watcab02.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness. | +|`https://ceuswatcab01.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness or Update Compliance. | +| `https://ceuswatcab02.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness or Update Compliance. | +| `https://eaus2watcab01.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness or Update Compliance. | +| `https://eaus2watcab02.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness or Update Compliance. | +| `https://weus2watcab01.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness or Update Compliance. | +| `https://weus2watcab02.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness or Update Compliance. | | `https://v10c.events.data.microsoft.com` | Connected User Experience and Diagnostic component endpoint for use with devices running Windows 10, version 1803 or later **that also have the 2018-09 Cumulative Update (KB4458469, KB4457136, KB4457141) or later installed** | | `https://v10.events.data.microsoft.com` | Connected User Experience and Diagnostic component endpoint for use with Windows 10, version 1803 *without* the 2018-09 Cumulative Update installed | | `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Diagnostic component endpoint for Windows 10, version 1709 or earlier | | `https://vortex-win.data.microsoft.com` | Connected User Experience and Diagnostic component endpoint for operating systems older than Windows 10 | | `https://settings-win.data.microsoft.com` | Enables the compatibility update to send data to Microsoft. | | `http://adl.windows.com` | Allows the compatibility update to receive the latest compatibility data from Microsoft. | -| `https://watson.telemetry.microsoft.com` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | -| `https://oca.telemetry.microsoft.com` | Online Crash Analysis; required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | +| `https://watson.telemetry.microsoft.com` | Windows Error Reporting (WER); required for Device Health reports. Not used by Upgrade Readiness or Update Compliance. | +| `https://oca.telemetry.microsoft.com` | Online Crash Analysis; required for Device Health reports. Not used by Upgrade Readiness or Update Compliance. | | `https://login.live.com` | This endpoint is required by Device Health to ensure data integrity and provides a more reliable device identity for all of the Windows Analytics solutions on Windows 10. If you want to disable end-user managed service account (MSA) access, you should apply the appropriate [policy](https://docs.microsoft.com/windows/security/identity-protection/access-control/microsoft-accounts#block-all-consumer-microsoft-account-user-authentication) instead of blocking this endpoint. | | `https://www.msftncsi.com` | Windows Error Reporting (WER); required for Device Health to check connectivity | | `https://www.msftconnecttest.com` | Windows Error Reporting (WER); required for Device Health to check connectivity | From 2276b9af0561a197892763e46802c50aa0555180 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 6 Feb 2019 09:20:06 -0800 Subject: [PATCH 75/98] added AV reports to UC mentions in edit --- .../update/windows-analytics-get-started.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index 0782a82019..11b2b08514 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -47,20 +47,20 @@ To enable data sharing, configure your proxy server to whitelist the following e | **Endpoint** | **Function** | |---------------------------------------------------------|-----------| -|`https://ceuswatcab01.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness or Update Compliance. | -| `https://ceuswatcab02.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness or Update Compliance. | -| `https://eaus2watcab01.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness or Update Compliance. | -| `https://eaus2watcab02.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness or Update Compliance. | -| `https://weus2watcab01.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness or Update Compliance. | -| `https://weus2watcab02.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness or Update Compliance. | +|`https://ceuswatcab01.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness or Update Compliance AV reports. | +| `https://ceuswatcab02.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness or Update Compliance AV reports. | +| `https://eaus2watcab01.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness or Update Compliance AV reports. | +| `https://eaus2watcab02.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness or Update Compliance AV reports. | +| `https://weus2watcab01.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness or Update Compliance AV reports. | +| `https://weus2watcab02.blob.core.windows.net` | Windows Error Reporting (WER); required for Device Health reports in Windows 10, version 1809 or later. Not used by Upgrade Readiness or Update Compliance AV reports. | | `https://v10c.events.data.microsoft.com` | Connected User Experience and Diagnostic component endpoint for use with devices running Windows 10, version 1803 or later **that also have the 2018-09 Cumulative Update (KB4458469, KB4457136, KB4457141) or later installed** | | `https://v10.events.data.microsoft.com` | Connected User Experience and Diagnostic component endpoint for use with Windows 10, version 1803 *without* the 2018-09 Cumulative Update installed | | `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Diagnostic component endpoint for Windows 10, version 1709 or earlier | | `https://vortex-win.data.microsoft.com` | Connected User Experience and Diagnostic component endpoint for operating systems older than Windows 10 | | `https://settings-win.data.microsoft.com` | Enables the compatibility update to send data to Microsoft. | | `http://adl.windows.com` | Allows the compatibility update to receive the latest compatibility data from Microsoft. | -| `https://watson.telemetry.microsoft.com` | Windows Error Reporting (WER); required for Device Health reports. Not used by Upgrade Readiness or Update Compliance. | -| `https://oca.telemetry.microsoft.com` | Online Crash Analysis; required for Device Health reports. Not used by Upgrade Readiness or Update Compliance. | +| `https://watson.telemetry.microsoft.com` | Windows Error Reporting (WER); required for Device Health reports. Not used by Upgrade Readiness or Update Compliance AV reports. | +| `https://oca.telemetry.microsoft.com` | Online Crash Analysis; required for Device Health reports. Not used by Upgrade Readiness or Update Compliance AV reports. | | `https://login.live.com` | This endpoint is required by Device Health to ensure data integrity and provides a more reliable device identity for all of the Windows Analytics solutions on Windows 10. If you want to disable end-user managed service account (MSA) access, you should apply the appropriate [policy](https://docs.microsoft.com/windows/security/identity-protection/access-control/microsoft-accounts#block-all-consumer-microsoft-account-user-authentication) instead of blocking this endpoint. | | `https://www.msftncsi.com` | Windows Error Reporting (WER); required for Device Health to check connectivity | | `https://www.msftconnecttest.com` | Windows Error Reporting (WER); required for Device Health to check connectivity | From cf48fbf79d9be28888b1f39735cc6a9745ec0d84 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 6 Feb 2019 13:41:04 -0800 Subject: [PATCH 76/98] incorp of suggestions from Sara --- windows/deployment/windows-10-pro-in-s-mode.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/windows-10-pro-in-s-mode.md b/windows/deployment/windows-10-pro-in-s-mode.md index c65de69ee2..2c2a9c2a25 100644 --- a/windows/deployment/windows-10-pro-in-s-mode.md +++ b/windows/deployment/windows-10-pro-in-s-mode.md @@ -20,9 +20,9 @@ A number of other transformations are possible depending on which version and ed -| If a device is running this version | and this edition | then you can switch or convert it to this edition by these methods: | | | +| If a device is running this version of Windows 10 | and this edition of Windows 10 | then you can switch or convert it to this edition of Windows 10 by these methods: | | | |-------------|---------------------|-----------------------------------|-------------------------------|--------------------------------------------| -| | | **Store for Education** (switch/convert all devices in your tenant) | **Microsoft Store** (switch/convert one device at a time) | **Intune** (switch/convert any number of devices selected by Admin) | +| | | **Store for Education** (switch/convert all devices in your tenant) | **Microsoft Store** (switch/convert one device at a time) | **Intune** (switch/convert any number of devices selected by admin) | | **Windows 10, version 1709** | Pro in S mode | Pro EDU | Pro | Not by this method | | | Pro | Pro EDU | Not by any method | Not by any method | | | Home | Not by any method | Not by any method | Not by any method | From 3146478939a009825563a74ae2bad2b3ce6a44d3 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 6 Feb 2019 13:41:31 -0800 Subject: [PATCH 77/98] remove win7 from preview list --- ...review-windows-defender-advanced-threat-protection.md | 9 --------- 1 file changed, 9 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/preview-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/preview-windows-defender-advanced-threat-protection.md index f0d5d23e2f..b0967e54aa 100644 --- a/windows/security/threat-protection/windows-defender-atp/preview-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/preview-windows-defender-advanced-threat-protection.md @@ -11,7 +11,6 @@ ms.pagetype: security ms.author: macapara author: mjcaparas ms.localizationpriority: medium -ms.date: 12/03/2018 --- # Windows Defender ATP preview features @@ -53,14 +52,6 @@ Microsoft Cloud App Security leverages Windows Defender ATP endpoint signals to - [Onboard Windows Server 2019](configure-server-endpoints-windows-defender-advanced-threat-protection.md#windows-server-version-1803-and-windows-server-2019)
Windows Defender ATP now adds support for Windows Server 2019. You'll be able to onboard Windows Server 2019 in the same method available for Windows 10 client machines. - -- [Onboard previous versions of Windows](onboard-downlevel-windows-defender-advanced-threat-protection.md)
-Onboard supported versions of Windows machines so that they can send sensor data to the Windows Defender ATP sensor - - Windows 7 SP1 Enterprise - - Windows 7 SP1 Pro - - Windows 8.1 Enterprise - - Windows 8.1 Pro - - [Create and build Power BI reports using Windows Defender ATP data](powerbi-reports-windows-defender-advanced-threat-protection.md)
Windows Defender ATP makes it easy to create a Power BI dashboard by providing an option straight from the portal. From 578a912548b495b9ca5309cd2aa34445ae196bb0 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 6 Feb 2019 13:43:26 -0800 Subject: [PATCH 78/98] fix white spaces in whats new --- .../whats-new-in-windows-defender-atp.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/whats-new-in-windows-defender-atp.md b/windows/security/threat-protection/windows-defender-atp/whats-new-in-windows-defender-atp.md index 7557ed0cfe..99f207db33 100644 --- a/windows/security/threat-protection/windows-defender-atp/whats-new-in-windows-defender-atp.md +++ b/windows/security/threat-protection/windows-defender-atp/whats-new-in-windows-defender-atp.md @@ -42,17 +42,23 @@ For Windows 10, version 1809 there are two new attack surface reduction rules: Threat Analytics is a set of interactive reports published by the Windows Defender ATP research team as soon as emerging threats and outbreaks are identified. The reports help security operations teams assess impact on their environment and provides recommended actions to contain, increase organizational resilience, and prevent specific threats. - [Custom detection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/overview-custom-detections)
-With custom detections, you can create custom queries to monitor events for any kind of behavior such as suspicious or emerging threats. This can be done by leveraging the power of Advanced hunting through the creation of custom detection rules. +With custom detections, you can create custom queries to monitor events for any kind of behavior such as suspicious or emerging threats. This can be done by leveraging the power of Advanced hunting through the creation of custom detection rules. + - [Managed security service provider (MSSP) support](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/mssp-support-windows-defender-advanced-threat-protection)
Windows Defender ATP adds support for this scenario by providing MSSP integration. The integration will allow MSSPs to take the following actions: Get access to MSSP customer's Windows Defender Security Center portal, fetch email notifications, and fetch alerts through security information and event management (SIEM) tools. + - [Integration with Azure Security Center](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection#integration-with-azure-security-center)
Windows Defender ATP integrates with Azure Security Center to provide a comprehensive server protection solution. With this integration Azure Security Center can leverage the power of Windows Defender ATP to provide improved threat detection for Windows Servers. + - [Integration with Microsoft Cloud App Security](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/microsoft-cloud-app-security-integration)
Microsoft Cloud App Security leverages Windows Defender ATP endpoint signals to allow direct visibility into cloud application usage including the use of unsupported cloud services (shadow IT) from all Windows Defender ATP monitored machines. + - [Onboard Windows Server 2019](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection#windows-server-version-1803-and-windows-server-2019)
Windows Defender ATP now adds support for Windows Server 2019. You'll be able to onboard Windows Server 2019 in the same method available for Windows 10 client machines. + - [Onboard previous versions of Windows](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/onboard-downlevel-windows-defender-advanced-threat-protection)
Onboard supported versions of Windows machines so that they can send sensor data to the Windows Defender ATP sensor. + - [Removable device control](https://cloudblogs.microsoft.com/microsoftsecure/2018/12/19/windows-defender-atp-has-protections-for-usb-and-removable-devices/)
Windows Defender ATP provides multiple monitoring and control features to help prevent threats from removable devices, including new settings to allow or block specific hardware IDs. From de6a9cd6d96ad67b518d381defe44016712959ff Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 6 Feb 2019 13:44:15 -0800 Subject: [PATCH 79/98] remove pre-release from win7 --- ...oard-downlevel-windows-defender-advanced-threat-protection.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/onboard-downlevel-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/onboard-downlevel-windows-defender-advanced-threat-protection.md index 90881e2ef8..f6c12531df 100644 --- a/windows/security/threat-protection/windows-defender-atp/onboard-downlevel-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/onboard-downlevel-windows-defender-advanced-threat-protection.md @@ -23,7 +23,6 @@ ms.localizationpriority: medium - Windows 8.1 Enterprise - [Windows Defender Advanced Threat Protection (Windows Defender ATP)](https://wincom.blob.core.windows.net/documents/Windows10_Commercial_Comparison.pdf) -[!include[Prerelease information](prerelease.md)] >Want to experience Windows Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-downlevel-abovefoldlink) From 8736653b7b86c8f4c826da76110e3d8ce1139bc7 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 6 Feb 2019 13:48:54 -0800 Subject: [PATCH 80/98] white space whats new --- .../whats-new-in-windows-defender-atp.md | 21 +++++++++++-------- 1 file changed, 12 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/whats-new-in-windows-defender-atp.md b/windows/security/threat-protection/windows-defender-atp/whats-new-in-windows-defender-atp.md index 99f207db33..85e17348fe 100644 --- a/windows/security/threat-protection/windows-defender-atp/whats-new-in-windows-defender-atp.md +++ b/windows/security/threat-protection/windows-defender-atp/whats-new-in-windows-defender-atp.md @@ -70,13 +70,16 @@ New attack surface reduction rules: - Block process creations originating from PSExec and WMI commands - Block untrusted and unsigned processes that run from USB - Block executable content from email client and webmail -- [Controlled folder access](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/enable-controlled-folders-exploit-guard) -You can now block untrusted processes from writing to disk sectors using Controlled Folder Access. -- [Windows Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) -Windows Defender Antivirus now shares detection status between M365 services and interoperates with Windows Defender ATP. For more information, see [Use next-gen technologies in Windows Defender Antivirus through cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus). Block at first sight can now block non-portable executable files (such as JS, VBS, or macros) as well as executable files. For more information, see [Enable block at first sight](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus). -- [Advanced Hunting](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/advanced-hunting-windows-defender-advanced-threat-protection)
-Query data using Advanced hunting in Windows Defender ATP -- [Automated investigation](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/automated-investigations-windows-defender-advanced-threat-protection)
Use Automated investigations to investigate and remediate threats -- [Conditional access](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/conditional-access-windows-defender-advanced-threat-protection)
-Enable conditional access to better protect users, devices, and data + + +- [Controlled folder access](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/enable-controlled-folders-exploit-guard)
+You can now block untrusted processes from writing to disk sectors using Controlled Folder Access. +- [Windows Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10)
+Windows Defender Antivirus now shares detection status between M365 services and interoperates with Windows Defender ATP. For more information, see [Use next-gen technologies in Windows Defender Antivirus through cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus). Block at first sight can now block non-portable executable files (such as JS, VBS, or macros) as well as executable files. For more information, see [Enable block at first sight](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus). + +- [Advanced Hunting](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/advanced-hunting-windows-defender-advanced-threat-protection)
Query data using Advanced hunting in Windows Defender ATP + +- [Automated investigation](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/automated-investigations-windows-defender-advanced-threat-protection)
Use Automated investigations to investigate and remediate threats + +- [Conditional access](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/conditional-access-windows-defender-advanced-threat-protection)
Enable conditional access to better protect users, devices, and data From 78d3c5c41204616cfe56b7d43cff2380125326e8 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Wed, 6 Feb 2019 14:55:41 -0800 Subject: [PATCH 81/98] adding report back in --- .../intelligence/top-scoring-industry-antivirus-tests.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/intelligence/top-scoring-industry-antivirus-tests.md b/windows/security/threat-protection/intelligence/top-scoring-industry-antivirus-tests.md index c6df9bc8cc..d8cd347aee 100644 --- a/windows/security/threat-protection/intelligence/top-scoring-industry-antivirus-tests.md +++ b/windows/security/threat-protection/intelligence/top-scoring-industry-antivirus-tests.md @@ -40,9 +40,9 @@ The AV-TEST Product Review and Certification Report tests on three categories: p Windows Defender Antivirus achieved an overall Protection score of 6.0/6.0, detecting 100% of 19,956 malware samples. -- September - October 2018 AV-TEST Business User test: [Protection score 6.0/6.0](https://www.av-test.org/en/antivirus/business-windows-client/windows-10/october-2018/microsoft-windows-defender-antivirus-4.18-184174/) +- September - October 2018 AV-TEST Business User test: [Protection score 6.0/6.0](https://www.av-test.org/en/antivirus/business-windows-client/windows-10/october-2018/microsoft-windows-defender-antivirus-4.18-184174/) | [Analysis](https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RWqOqD) - Windows Defender Antivirus achieved an overall Protection score of 6.0/6.0 with 21,568 tested malware samples. + Windows Defender Antivirus achieved an overall Protection score of 6.0/6.0, protecting against 21,566 of 21,568 tested malware samples. - July - August 2018 AV-TEST Business User test: [Protection score 6.0/6.0](https://www.av-test.org/en/antivirus/business-windows-client/windows-10/august-2018/microsoft-windows-defender-antivirus-4.12--4.18-183212/) | [Analysis](https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE2IL3Y) From 8252dccd4855571455127c807e76cf7a457c55d5 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 7 Feb 2019 12:43:41 -0800 Subject: [PATCH 82/98] changed adjust to access in the last note on the page --- windows/deployment/update/windows-analytics-azure-portal.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/deployment/update/windows-analytics-azure-portal.md b/windows/deployment/update/windows-analytics-azure-portal.md index 4384100c31..384738b8fa 100644 --- a/windows/deployment/update/windows-analytics-azure-portal.md +++ b/windows/deployment/update/windows-analytics-azure-portal.md @@ -5,7 +5,6 @@ keywords: Device Health, oms, Azure, portal, operations management suite, add, m ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library -ms.date: 10/05/2018 ms.pagetype: deploy author: jaimeo ms.author: jaimeo @@ -65,4 +64,4 @@ From there, select the settings page to adjust specific settings: [![Settings page for Upgrade Readiness in Azure portsl](images/azure-portal-UR-settings.png)](images/azure-portal-UR-settings.png) >[!NOTE] ->To adjust these settings, both the subscription and workspace require "contributor" permissions. You can view your current role and make changes in other roles by using the **Access control (IAM)** tab in Azure. +>To access these settings, both the subscription and workspace require "contributor" permissions. You can view your current role and make changes in other roles by using the **Access control (IAM)** tab in Azure. From 5a818e7a817907ede3bc353ffbb893e9ccbff894 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 7 Feb 2019 14:39:44 -0800 Subject: [PATCH 83/98] added o365 --- .../windows-information-protection/using-owa-with-wip.md | 4 ++-- .../install-wd-app-guard.md | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/using-owa-with-wip.md b/windows/security/information-protection/windows-information-protection/using-owa-with-wip.md index 0d85fb8053..49ceafd5b2 100644 --- a/windows/security/information-protection/windows-information-protection/using-owa-with-wip.md +++ b/windows/security/information-protection/windows-information-protection/using-owa-with-wip.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security ms.author: justinha -ms.date: 05/30/2018 +ms.date: 02/07/2019 ms.localizationpriority: medium --- @@ -25,7 +25,7 @@ Because Outlook on the web can be used both personally and as part of your organ |-------|-------------| |Disable Outlook on the web. Employees can only use Microsoft Outlook 2016 or the Mail for Windows 10 app. | Disabled. | |Don't configure outlook.office.com in any of your networking settings. |All mailboxes are automatically marked as personal. This means employees attempting to copy work content into Outlook on the web receive prompts and that files downloaded from Outlook on the web aren't automatically protected as corporate data. | -|Add outlook.office.com to the Cloud resources network element in your WIP policy. |All mailboxes are automatically marked as corporate. This means any personal inboxes hosted on Office 365 are also automatically marked as corporate data. | +|Add outlook.office.com and outlook.office365.com to the Cloud resources network element in your WIP policy. |All mailboxes are automatically marked as corporate. This means any personal inboxes hosted on Office 365 are also automatically marked as corporate data. | >[!NOTE] >These limitations don’t apply to Outlook 2016, the Mail for Windows 10 app, or the Calendar for Windows 10 app. These apps will work properly, marking an employee’s mailbox as corporate data, regardless of how you’ve configured outlook.office.com in your network settings. diff --git a/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard.md b/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard.md index bcc683e524..1ec89ed28f 100644 --- a/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard.md +++ b/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard.md @@ -8,7 +8,7 @@ ms.pagetype: security ms.localizationpriority: medium author: justinha ms.author: justinha -ms.date: 10/19/2017 +ms.date: 02/07/2019 --- # Prepare to install Windows Defender Application Guard @@ -26,7 +26,7 @@ Your environment needs the following hardware to run Windows Defender Applicatio |Hardware|Description| |--------|-----------| -|64-bit CPU|A 64-bit computer with minimum 4 cores is required for hypervisor and virtualization-based security (VBS). For more info about Hyper-V, see [Hyper-V on Windows Server 2016](https://docs.microsoft.com/windows-server/virtualization/hyper-v/hyper-v-on-windows-server) or [Introduction to Hyper-V on Windows 10](https://docs.microsoft.com/virtualization/hyper-v-on-windows/about/). For more info about hypervisor, see [Hypervisor Specifications](https://docs.microsoft.com/virtualization/hyper-v-on-windows/reference/tlfs).| +|64-bit CPU|A 64-bit computer with minimum 4 cores is required for the hypervisor. For more info about Hyper-V, see [Hyper-V on Windows Server 2016](https://docs.microsoft.com/windows-server/virtualization/hyper-v/hyper-v-on-windows-server) or [Introduction to Hyper-V on Windows 10](https://docs.microsoft.com/virtualization/hyper-v-on-windows/about/). For more info about hypervisor, see [Hypervisor Specifications](https://docs.microsoft.com/virtualization/hyper-v-on-windows/reference/tlfs).| |CPU virtualization extensions|Extended page tables, also called _Second Level Address Translation (SLAT)_

**-AND-**

One of the following virtualization extensions for VBS:

VT-x (Intel)

**-OR-**

AMD-V| |Hardware memory|Microsoft requires a minimum of 8GB RAM| |Hard disk|5 GB free space, solid state disk (SSD) recommended| From 43b5413ebe3841711182a3b6aa92507f7d45e059 Mon Sep 17 00:00:00 2001 From: Peter Smith Date: Thu, 7 Feb 2019 15:48:24 -0800 Subject: [PATCH 84/98] Update vpnv2-csp.md Fix for https://microsoft.visualstudio.com/OS/_workitems/edit/19976215 -- this is old functionality that needs additional documentation. --- windows/client-management/mdm/vpnv2-csp.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/vpnv2-csp.md b/windows/client-management/mdm/vpnv2-csp.md index 4bef8b6e80..fe6bdbb4ad 100644 --- a/windows/client-management/mdm/vpnv2-csp.md +++ b/windows/client-management/mdm/vpnv2-csp.md @@ -422,7 +422,11 @@ Reserved for future use. Nodes under NativeProfile are required when using a Windows Inbox VPN Protocol (IKEv2, PPTP, L2TP). **VPNv2/***ProfileName***/NativeProfile/Servers** -Required for native profiles. Public or routable IP address or DNS name for the VPN gateway. It can point to the external IP of a gateway or a virtual IP for a server farm. Examples, 208.147.66.130 or vpn.contoso.com. +Required for native profiles. Public or routable IP address or DNS name for the VPN gateway. It can point to the external IP of a gateway or a virtual IP for a server farm. Examples, 208.147.66.130 or vpn.contoso.com. + +The name can be a server name plus a friendly name separated with a semi-colon. For example, server2.example.com;server2FriendlyName. When you get the value, the return will include both the server name and the friendly name; if no friendly name had been supplied it will default to the server name. + +You can make a list of server by making a list of server names (with optional friendly names) seperated by commas. For example, server1.example.com,server2.example.com. Value type is chr. Supported operations include Get, Add, Replace, and Delete. From f365dea0fba7a8203fd354eb70b6dc8582661ae6 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Fri, 8 Feb 2019 05:21:27 -0800 Subject: [PATCH 85/98] copy edit --- devices/surface/assettag.md | 36 +++++++++++++++++++----------------- 1 file changed, 19 insertions(+), 17 deletions(-) diff --git a/devices/surface/assettag.md b/devices/surface/assettag.md index 7fc3321a4b..9771aacb0d 100644 --- a/devices/surface/assettag.md +++ b/devices/surface/assettag.md @@ -26,9 +26,9 @@ for Surface devices. It works on Surface Pro 3 and all newer Surface devices. To run Surface Asset Tag: -1. Download **Surface Pro 3 AssetTag.zip** from the [Microsoft Download - Center](http://www.microsoft.com/en-us/download/details.aspx?id=44076), - extract the zip file, and save AsseTag.exe in desired folder (in +1. On the Surface device, download **Surface Pro 3 AssetTag.zip** from the [Microsoft Download + Center](http://www.microsoft.com/download/details.aspx?id=44076), + extract the zip file, and save AssetTag.exe in desired folder (in this example, C:\\assets). 2. Open a command console as an Administrator and run AssetTag.exe, @@ -39,38 +39,37 @@ To run Surface Asset Tag: ### Asset Tag tool commands In the following examples, AssetTag.exe is saved in a directory on a local machine (C:\assets). -To get the proposed asset tag: +To get the proposed asset tag, run AssetTag -g. + +**Example** - - Run AssetTag -g ``` - **Example:** C:\assets\AssetTag.exe -g ``` - To clear the proposed asset tag: - - - Run AssetTag -s + To clear the proposed asset tag, run AssetTag -s. + + **Example** + ``` - **Example:** C:\assets\AssetTag.exe -s ``` -To set the proposed asset tag: +To set the proposed asset tag, run AssetTag -s testassettag12. + +**Example** - - Run AssetTag -s testassettag12 ``` -**Example** C:\assets\AssetTag.exe -s testassettag12 ``` >[!NOTE] ->The asset tag value must contain between 1 and 36 characters. -Valid characters include A-Z, a-z, 0-9, period (.) and hyphen (-). +>The asset tag value must contain between 1 and 36 characters. Valid characters include A-Z, a-z, 0-9, period (.) and hyphen (-). ## Managing asset tags You can view the existing asset tag in the UEFI settings under Device -Information (**Control Panel \> Recovery \> Advanced Startup \> Restart +Information (**Control Panel > Recovery > Advanced Startup > Restart now**.) The figure below shows the results of running the Asset Tag Tool on @@ -84,10 +83,13 @@ Surface Go. Alternately, you can use WMI to query the existing asset tag on a device: (Get-WmiObject -query “Select * from Win32_SystemEnclosure”) + +**Example** + ``` - **Example:** C:\Windows\System32> (Get-WmiObject -query “Select * from Win32_SystemEnclosure”) ``` + ### Using PowerShell You can use the script below as a way of getting the proposed value and From e96b47a2ea2eef677bc7b8ef333ff6e1f7995ea2 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Fri, 8 Feb 2019 05:25:10 -0800 Subject: [PATCH 86/98] removed superfluous break tags --- devices/surface-hub/prepare-your-environment-for-surface-hub.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface-hub/prepare-your-environment-for-surface-hub.md b/devices/surface-hub/prepare-your-environment-for-surface-hub.md index 82b5be7390..0ae8b338d8 100644 --- a/devices/surface-hub/prepare-your-environment-for-surface-hub.md +++ b/devices/surface-hub/prepare-your-environment-for-surface-hub.md @@ -25,7 +25,7 @@ Review these dependencies to make sure Surface Hub features will work in your IT |-------------|------------------| | Active Directory or Azure Active Directory (Azure AD) |

The Surface Hub's uses an Active Directory or Azure AD account (called a **device account**) to access Exchange and Skype for Business services. The Surface Hub must be able to connect to your Active Directory domain controller or to your Azure AD tenant in order to validate the device account’s credentials, as well as to access information like the device account’s display name, alias, Exchange server, and Session Initiation Protocol (SIP) address.

You can also domain join or Azure AD join your Surface Hub to allow a group of authorized users to configure settings on the Surface Hub. | | Exchange (Exchange 2013 or later, or Exchange Online) and Exchange ActiveSync |

Exchange is used for enabling mail and calendar features, and also lets people who use the device send meeting requests to the Surface Hub, enabling one-touch meeting join.

ActiveSync is used to sync the device account’s calendar and mail to the Surface Hub. If the device cannot use ActiveSync, it will not show meetings on the welcome screen, and joining meetings and emailing whiteboards will not be enabled. | -| Skype for Business (Lync Server 2013 or later, or Skype for Business Online) | Skype for Business is used for various conferencing features, like video calls, instant messaging, and screen sharing.

| +| Skype for Business (Lync Server 2013 or later, or Skype for Business Online) | Skype for Business is used for various conferencing features, like video calls, instant messaging, and screen sharing.| | Mobile device management (MDM) solution (Microsoft Intune, System Center Configuration Manager, or supported third-party MDM provider) | If you want to apply settings and install apps remotely, and to multiple devices at a time, you must set up a MDM solution and enroll the device to that solution. See [Manage settings with an MDM provider](manage-settings-with-mdm-for-surface-hub.md) for details. | | Microsoft Operations Managmement Suite (OMS) | OMS is used to monitor the health of Surface Hub devices. See [Monitor your Surface Hub](monitor-surface-hub.md) for details. | | Network and Internet access | In order to function properly, the Surface Hub should have access to a wired or wireless network. Overall, a wired connection is preferred. 802.1X Authentication is supported for both wired and wireless connections.


**802.1X authentication:** In Windows 10, version 1703, 802.1X authentication for wired and wireless connections is enabled by default in Surface Hub. If your organization doesn't use 802.1X authentication, there is no configuration required and Surface Hub will continue to function as normal. If you use 802.1X authentication, you must ensure that the authentication certification is installed on Surface Hub. You can deliver the certificate to Surface Hub using the [ClientCertificateInstall CSP](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/clientcertificateinstall-csp) in MDM, or you can [create a provisioning package](provisioning-packages-for-surface-hub.md) and install it during first run or through the Settings app. After the certificate is applied to Surface Hub, 802.1X authentication will start working automatically.
**Note:** For more information on enabling 802.1X wired authentication on Surface Hub, see [Enable 802.1x wired authentication](enable-8021x-wired-authentication.md).

**Dynamic IP:** The Surface Hub cannot be configured to use a static IP. It must use DHCP to assign an IP address.

**Proxy servers:** If your topology requires a connection to a proxy server to reach Internet services, then you can configure it during first run, or in Settings. Proxy credentials are stored across Surface Hub sessions and only need to be set once. | From c74c873f5efe781afe971b43952972c9b0916ecf Mon Sep 17 00:00:00 2001 From: Ronald-den-Os <41728016+Ronald-den-Os@users.noreply.github.com> Date: Fri, 8 Feb 2019 17:37:52 +0100 Subject: [PATCH 87/98] Duplicate line removed Line 8 from the "Add the AD FS Service account to the KeyAdmins group section removed" --- .../hello-for-business/hello-key-trust-adfs.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-key-trust-adfs.md b/windows/security/identity-protection/hello-for-business/hello-key-trust-adfs.md index 2bc92aac17..0d2f3c602d 100644 --- a/windows/security/identity-protection/hello-for-business/hello-key-trust-adfs.md +++ b/windows/security/identity-protection/hello-for-business/hello-key-trust-adfs.md @@ -197,8 +197,7 @@ Sign-in a domain controller or management workstation with _Domain Admin_ equiva 4. Click the **Members** tab and click **Add…** 5. In the **Enter the object names to select** text box, type **adfssvc**. Click **OK**. 6. Click **OK** to return to **Active Directory Users and Computers**. -7. Click **OK** to return to **Active Directory Users and Computers**. -8. Change to server hosting the AD FS role and restart it. +7. Change to server hosting the AD FS role and restart it. ## Configure the Device Registration Service From 96767f5229cd399e9a554e9649bb831594ba51d2 Mon Sep 17 00:00:00 2001 From: Matt Cooley Date: Fri, 8 Feb 2019 21:31:00 +0000 Subject: [PATCH 88/98] Merged PR 14202: Add documentation describing how to turn off offline maps via MDM It is possible to fully manage offline maps connections to Microsoft services via MDM. - The Maps/EnableOfflineMapsAutoUpdate MDM policy provides equivalent functionality to the AutoDownloadAndUpdateMapData group policy. - The Settings/PageVisibilityList MDM policy can be used to hide the offline maps settings page, which is the same thing the AllowUntriggeredNetworkTrafficOnSettingsPage policy does. --- ...perating-system-components-to-microsoft-services.md | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index 92614a0052..5c89da41a0 100644 --- a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -119,7 +119,7 @@ The following table lists management options for each setting, beginning with Wi | [11. Microsoft Account](#bkmk-microsoft-account) | | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | | [12. Microsoft Edge](#bkmk-edge) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | | [13. Network Connection Status Indicator](#bkmk-ncsi) | | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | -| [14. Offline maps](#bkmk-offlinemaps) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | ![Check mark](images/checkmark.png) | | +| [14. Offline maps](#bkmk-offlinemaps) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | | [15. OneDrive](#bkmk-onedrive) | | ![Check mark](images/checkmark.png) | | ![Check mark](images/checkmark.png) | | | [16. Preinstalled apps](#bkmk-preinstalledapps) | ![Check mark](images/checkmark.png) | | | | ![Check mark](images/checkmark.png) | | [17. Settings > Privacy](#bkmk-settingssection) | | | | | | @@ -708,6 +708,10 @@ You can turn off the ability to download and update offline maps. - Create a REG\_DWORD registry setting named **AutoDownloadAndUpdateMapData** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\Maps** with a value of 0 (zero). + -or- + +- In Windows 10, version 1607 and later, apply the Maps/EnableOfflineMapsAutoUpdate MDM policy from the [Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-maps#maps-enableofflinemapsautoupdate) with a value of 0. + -and- - In Windows 10, version 1607 and later, apply the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Maps** > **Turn off unsolicited network traffic on the Offline Maps settings page** @@ -716,6 +720,10 @@ You can turn off the ability to download and update offline maps. - Create a REG\_DWORD registry setting named **AllowUntriggeredNetworkTrafficOnSettingsPage** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\Maps** with a value of 0 (zero). + -or- + +- In Windows 10, version 1703 and later, apply the Settings/PageVisibilityList MDM policy from the [Policy CSP](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-settings#settings-pagevisibilitylist) with a value of "hide:maps;maps-downloadmaps". + ### 15. OneDrive To turn off OneDrive in your organization: From 9bc3323fe7e8c309f47c6064da52924b86d3be86 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 8 Feb 2019 14:09:56 -0800 Subject: [PATCH 89/98] moved images --- .../images/custom-profile-prevent-device-ids.png | Bin .../mdm/policy-csp-deviceinstallation.md | 6 ++++++ 2 files changed, 6 insertions(+) rename windows/{security/threat-protection/device-control => client-management/mdm}/images/custom-profile-prevent-device-ids.png (100%) diff --git a/windows/security/threat-protection/device-control/images/custom-profile-prevent-device-ids.png b/windows/client-management/mdm/images/custom-profile-prevent-device-ids.png similarity index 100% rename from windows/security/threat-protection/device-control/images/custom-profile-prevent-device-ids.png rename to windows/client-management/mdm/images/custom-profile-prevent-device-ids.png diff --git a/windows/client-management/mdm/policy-csp-deviceinstallation.md b/windows/client-management/mdm/policy-csp-deviceinstallation.md index 44fa5ef6ae..7380b5d410 100644 --- a/windows/client-management/mdm/policy-csp-deviceinstallation.md +++ b/windows/client-management/mdm/policy-csp-deviceinstallation.md @@ -443,6 +443,12 @@ To verify the policy is applied, check C:\windows\INF\setupapi.dev.log and see i <<< [Exit status: SUCCESS] ``` +Windows Defender ATP also blocks installation and usage of prohibited peripherals by using a custom profile in Intune. + +For example, this custom profile blocks installation and usage of USB devices with hardware IDs "USBSTOR\DiskVendorCo" and "USBSTOR\DiskSanDisk_Cruzer_Glide_3.0", and applies to USB devices with matching hardware IDs that are already installed. + +![Custom profile](images/custom-profile-prevent-device-ids.png) +
From 4a44b05d9cae93bcbad4af50df927dcd85f75874 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 11 Feb 2019 09:11:48 -0800 Subject: [PATCH 90/98] fixed headings --- windows/security/information-protection/TOC.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/information-protection/TOC.md b/windows/security/information-protection/TOC.md index d1af453ff6..6750ea0cc6 100644 --- a/windows/security/information-protection/TOC.md +++ b/windows/security/information-protection/TOC.md @@ -40,8 +40,8 @@ #### [Create a WIP policy with MAM using the Azure portal for Microsoft Intune](windows-information-protection\create-wip-policy-using-mam-intune-azure.md) ### [Create a WIP policy using System Center Configuration Manager](windows-information-protection\overview-create-wip-policy-sccm.md) #### [Create and deploy a WIP policy using System Center Configuration Manager](windows-information-protection\create-wip-policy-using-sccm.md) -### [Create and verify an EFS Data Recovery Agent (DRA) certificate](windows-information-protection\create-and-verify-an-efs-dra-certificate.md) -### [Determine the Enterprise Context of an app running in WIP](windows-information-protection\wip-app-enterprise-context.md) +#### [Create and verify an EFS Data Recovery Agent (DRA) certificate](windows-information-protection\create-and-verify-an-efs-dra-certificate.md) +#### [Determine the Enterprise Context of an app running in WIP](windows-information-protection\wip-app-enterprise-context.md) ### [Mandatory tasks and settings required to turn on WIP](windows-information-protection\mandatory-settings-for-wip.md) ### [Testing scenarios for WIP](windows-information-protection\testing-scenarios-for-wip.md) ### [Limitations while using WIP](windows-information-protection\limitations-with-wip.md) From a14f59d8c7218afb67f9088e58325c16d4e89fed Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 11 Feb 2019 10:06:54 -0800 Subject: [PATCH 91/98] added note about adding apps like Box --- .../recommended-network-definitions-for-wip.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/recommended-network-definitions-for-wip.md b/windows/security/information-protection/windows-information-protection/recommended-network-definitions-for-wip.md index e352e66a52..3a12fc252f 100644 --- a/windows/security/information-protection/windows-information-protection/recommended-network-definitions-for-wip.md +++ b/windows/security/information-protection/windows-information-protection/recommended-network-definitions-for-wip.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security ms.author: justinha -ms.date: 10/18/2018 +ms.date: 02/1/2019 ms.localizationpriority: medium --- @@ -33,6 +33,9 @@ This table includes the recommended URLs to add to your Enterprise Cloud Resourc |Visual Studio Online |contoso.visualstudio.com | |Power BI |contoso.powerbi.com | +>[!NOTE] +>You can add other work-only apps to the Cloud Resource list, or you can create a packaged app rule for the .exe file to protect every file the app creates or modifies. Depending on how the app is accessed, you might want to add both. + ## Recommended Neutral Resources We recommended adding these URLs if you use the Neutral Resources network setting with Windows Information Protection (WIP).
    From cc86ae091219622984b2914e83b4b26b465cf7c3 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 11 Feb 2019 10:39:29 -0800 Subject: [PATCH 92/98] added note --- .../protect-enterprise-data-using-wip.md | 21 +++++++++++-------- 1 file changed, 12 insertions(+), 9 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md b/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md index 33ec5598fe..ba1c0f19d7 100644 --- a/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md +++ b/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md @@ -8,7 +8,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security ms.author: justinha -ms.date: 11/08/2018 +ms.date: 02/11/2019 ms.localizationpriority: medium --- @@ -24,6 +24,9 @@ With the increase of employee-owned devices in the enterprise, there’s also an Windows Information Protection (WIP), previously known as enterprise data protection (EDP), helps to protect against this potential data leakage without otherwise interfering with the employee experience. WIP also helps to protect enterprise apps and data against accidental data leak on enterprise-owned devices and personal devices that employees bring to work without requiring changes to your environment or other apps. Finally, another data protection technology, Azure Rights Management also works alongside WIP to extend data protection for data that leaves the device, such as when email attachments are sent from an enterprise aware version of a rights management mail client. +[!IMPORTANT] +While WIP can stop accidental data leaks from honest employees, it is not intended to stop malicious insiders from exfiltrating enterprise data. It is possible for enterprise users to remove protection. + ## Video: Protect enterprise data from being accidentally copied to the wrong place > [!Video https://www.microsoft.com/en-us/videoplayer/embed/RE2IGhh] @@ -75,26 +78,26 @@ WIP provides: ## Why use WIP? WIP gives you a new way to manage data policy enforcement for apps and documents, along with the ability to remove access to enterprise data from both enterprise and personal devices (after enrollment in an enterprise management solution, like Intune). -- **Change the way you think about data policy enforcement.** As an enterprise admin, you need to maintain compliance in your data policy and data access. WIP helps make sure that your enterprise data is protected on both corporate and employee-owned devices, even when the employee isn’t using the device. When employees create content on an enterprise-protected device, they can choose to save it as a work document. If it's a work document, it becomes locally-maintained as enterprise data. +- **Change the way you think about data policy enforcement.** As an enterprise admin, you need to maintain compliance in your data policy and data access. WIP helps protect enterprise on both corporate and employee-owned devices, even when the employee isn’t using the device. When employees create content on an enterprise-protected device, they can choose to save it as a work document. If it's a work document, it becomes locally-maintained as enterprise data. - **Manage your enterprise documents, apps, and encryption modes.** - **Copying or downloading enterprise data.** When an employee or an app downloads content from a location like SharePoint, a network share, or an enterprise web location, while using a WIP-protected device, WIP encrypts the data on the device. - - **Using allowed apps.** Managed apps (apps that you've included on the **Protected apps** list in your WIP policy) are allowed to access your enterprise data and will interact differently when used with unallowed, non-enterprise aware, or personal-only apps. For example, if WIP management is set to **Block**, your employees can copy and paste from one protected app to another allowed app, but not to personal apps. Imagine an HR person wants to copy a job description from an allowed app to the internal career website, an enterprise-protected location, but goofs and tries to paste into a personal app instead. The paste action fails and a notification pops up, saying that the app couldn’t paste because of a policy restriction. The HR person then correctly pastes to the career website without a problem. + - **Using protected apps.** Managed apps (apps that you've included on the **Protected apps** list in your WIP policy) are allowed to access your enterprise data and will interact differently when used with unallowed, non-enterprise aware, or personal-only apps. For example, if WIP management is set to **Block**, your employees can copy and paste from one protected app to another protected app, but not to personal apps. Imagine an HR person wants to copy a job description from a protected app to the internal career website, an enterprise-protected location, but goofs and tries to paste into a personal app instead. The paste action fails and a notification pops up, saying that the app couldn’t paste because of a policy restriction. The HR person then correctly pastes to the career website without a problem. - - **Managed apps and restrictions.** With WIP you can control which apps can access and use your enterprise data. After adding an app to your allowed apps list, the app is trusted with enterprise data. All apps not on this list are stopped from accessing your enterprise data, depending on your WIP management-mode. + - **Managed apps and restrictions.** With WIP you can control which apps can access and use your enterprise data. After adding an app to your protected apps list, the app is trusted with enterprise data. All apps not on this list are stopped from accessing your enterprise data, depending on your WIP management-mode. - You don’t have to modify line-of-business apps that never touch personal data to list them as allowed apps; just include them in the allowed apps list. + You don’t have to modify line-of-business apps that never touch personal data to list them as protected apps; just include them in the protected apps list. - - **Deciding your level of data access.** WIP lets you block, allow overrides, or audit employees' data sharing actions. Hiding overrides stops the action immediately. Allowing overrides lets the employee know there's a risk, but lets him or her continue to share the data while recording and auditing the action. Silent just logs the action without stopping anything that the employee could've overridden while using that setting; collecting info that can help you to see patterns of inappropriate sharing so you can take educative action or find apps that should be added to your allowed apps list. For info about how to collect your audit log files, see [How to collect Windows Information Protection (WIP) audit event logs](collect-wip-audit-event-logs.md). + - **Deciding your level of data access.** WIP lets you block, allow overrides, or audit employees' data sharing actions. Hiding overrides stops the action immediately. Allowing overrides lets the employee know there's a risk, but lets him or her continue to share the data while recording and auditing the action. Silent just logs the action without stopping anything that the employee could've overridden while using that setting; collecting info that can help you to see patterns of inappropriate sharing so you can take educative action or find apps that should be added to your protected apps list. For info about how to collect your audit log files, see [How to collect Windows Information Protection (WIP) audit event logs](collect-wip-audit-event-logs.md). - **Data encryption at rest.** WIP helps protect enterprise data on local files and on removable media. Apps such as Microsoft Word work with WIP to help continue your data protection across local files and removable media. These apps are being referred to as, enterprise aware. For example, if an employee opens WIP-encrypted content from Word, edits the content, and then tries to save the edited version with a different name, Word automatically applies WIP to the new document. - - **Helping prevent accidental data disclosure to public spaces.** WIP helps protect your enterprise data from being accidentally shared to public spaces, such as public cloud storage. For example, if Dropbox™ isn’t on your allowed apps list, employees won’t be able to sync encrypted files to their personal cloud storage. Instead, if the employee stores the content to an app on your allowed apps list, like Microsoft OneDrive for Business, the encrypted files can sync freely to the business cloud, while maintaining the encryption locally. + - **Helping prevent accidental data disclosure to public spaces.** WIP helps protect your enterprise data from being accidentally shared to public spaces, such as public cloud storage. For example, if Dropbox™ isn’t on your protected apps list, employees won’t be able to sync encrypted files to their personal cloud storage. Instead, if the employee stores the content to an app on your protected apps list, like Microsoft OneDrive for Business, the encrypted files can sync freely to the business cloud, while maintaining the encryption locally. - **Helping prevent accidental data disclosure to removable media.** WIP helps prevent enterprise data from leaking when it's copied or transferred to removable media. For example, if an employee puts enterprise data on a Universal Serial Bus (USB) drive that also has personal data, the enterprise data remains encrypted while the personal data doesn’t. @@ -120,14 +123,14 @@ WIP currently addresses these enterprise scenarios: - You can remotely wipe enterprise data off managed computers, including employee-owned computers, without affecting the personal data. -- You can select specific apps that can access enterprise data, called "allowed apps" that are clearly recognizable to employees. You can also stop non-protected apps from accessing enterprise data. +- You can protect specific apps that can access enterprise data that are clearly recognizable to employees. You can also stop non-protected apps from accessing enterprise data. - Your employees won't have their work otherwise interrupted while switching between personal and enterprise apps while the enterprise policies are in place. Switching environments or signing in multiple times isn’t required. ### WIP-protection modes Enterprise data is automatically encrypted after it’s loaded on a device from an enterprise source or if an employee marks the data as corporate. Then, when the enterprise data is written to disk, WIP uses the Windows-provided Encrypting File System (EFS) to protect it and associate it with your enterprise identity. -Your WIP policy includes a list of trusted apps that are allowed to access and process corporate data. This list of apps is implemented through the [AppLocker](/windows/device-security/applocker/applocker-overview) functionality, controlling what apps are allowed to run and letting the Windows operating system know that the apps can edit corporate data. Apps included on this list don’t have to be modified to open corporate data because their presence on the list allows Windows to determine whether to grant them access. However, new for Windows 10, app developers can use a new set of application programming interfaces (APIs) to create *enlightened* apps that can use and edit both enterprise and personal data. A huge benefit to working with enlightened apps is that dual-use apps, like Microsoft Word, can be used with less concern about encrypting personal data by mistake because the APIs allow the app to determine whether data is owned by the enterprise or if it’s personally owned. +Your WIP policy includes a list of trusted apps that are protected to access and process corporate data. This list of apps is implemented through the [AppLocker](/windows/device-security/applocker/applocker-overview) functionality, controlling what apps are allowed to run and letting the Windows operating system know that the apps can edit corporate data. Apps included on this list don’t have to be modified to open corporate data because their presence on the list allows Windows to determine whether to grant them access. However, new for Windows 10, app developers can use a new set of application programming interfaces (APIs) to create *enlightened* apps that can use and edit both enterprise and personal data. A huge benefit to working with enlightened apps is that dual-use apps, like Microsoft Word, can be used with less concern about encrypting personal data by mistake because the APIs allow the app to determine whether data is owned by the enterprise or if it’s personally owned. >[!NOTE] >For info about how to collect your audit log files, see [How to collect Windows Information Protection (WIP) audit event logs](collect-wip-audit-event-logs.md). From da64d7895100d92e43a605527e6b64e978234593 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 11 Feb 2019 10:58:10 -0800 Subject: [PATCH 93/98] fixed note --- .../protect-enterprise-data-using-wip.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md b/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md index ba1c0f19d7..a487937693 100644 --- a/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md +++ b/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md @@ -24,8 +24,8 @@ With the increase of employee-owned devices in the enterprise, there’s also an Windows Information Protection (WIP), previously known as enterprise data protection (EDP), helps to protect against this potential data leakage without otherwise interfering with the employee experience. WIP also helps to protect enterprise apps and data against accidental data leak on enterprise-owned devices and personal devices that employees bring to work without requiring changes to your environment or other apps. Finally, another data protection technology, Azure Rights Management also works alongside WIP to extend data protection for data that leaves the device, such as when email attachments are sent from an enterprise aware version of a rights management mail client. -[!IMPORTANT] -While WIP can stop accidental data leaks from honest employees, it is not intended to stop malicious insiders from exfiltrating enterprise data. It is possible for enterprise users to remove protection. +>[!IMPORTANT] +>While WIP can stop accidental data leaks from honest employees, it is not intended to stop malicious insiders from exfiltrating enterprise data. It is possible for enterprise users to remove protection. ## Video: Protect enterprise data from being accidentally copied to the wrong place From f9fef8ecbd2b706b69f8c2b39be0bcda36ba63e6 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 11 Feb 2019 11:21:09 -0800 Subject: [PATCH 94/98] edits --- .../protect-enterprise-data-using-wip.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md b/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md index a487937693..06beb8e587 100644 --- a/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md +++ b/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md @@ -25,7 +25,7 @@ With the increase of employee-owned devices in the enterprise, there’s also an Windows Information Protection (WIP), previously known as enterprise data protection (EDP), helps to protect against this potential data leakage without otherwise interfering with the employee experience. WIP also helps to protect enterprise apps and data against accidental data leak on enterprise-owned devices and personal devices that employees bring to work without requiring changes to your environment or other apps. Finally, another data protection technology, Azure Rights Management also works alongside WIP to extend data protection for data that leaves the device, such as when email attachments are sent from an enterprise aware version of a rights management mail client. >[!IMPORTANT] ->While WIP can stop accidental data leaks from honest employees, it is not intended to stop malicious insiders from exfiltrating enterprise data. It is possible for enterprise users to remove protection. +>While WIP can stop accidental data leaks from honest employees, it is not intended to stop malicious insiders from removing enterprise data. ## Video: Protect enterprise data from being accidentally copied to the wrong place From f05ec33512906b376f4a71a6f108a67a6cf5a596 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 11 Feb 2019 12:29:04 -0800 Subject: [PATCH 95/98] added link to benefits --- .../protect-enterprise-data-using-wip.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md b/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md index 06beb8e587..5027581f9c 100644 --- a/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md +++ b/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md @@ -25,7 +25,7 @@ With the increase of employee-owned devices in the enterprise, there’s also an Windows Information Protection (WIP), previously known as enterprise data protection (EDP), helps to protect against this potential data leakage without otherwise interfering with the employee experience. WIP also helps to protect enterprise apps and data against accidental data leak on enterprise-owned devices and personal devices that employees bring to work without requiring changes to your environment or other apps. Finally, another data protection technology, Azure Rights Management also works alongside WIP to extend data protection for data that leaves the device, such as when email attachments are sent from an enterprise aware version of a rights management mail client. >[!IMPORTANT] ->While WIP can stop accidental data leaks from honest employees, it is not intended to stop malicious insiders from removing enterprise data. +>While WIP can stop accidental data leaks from honest employees, it is not intended to stop malicious insiders from removing enterprise data. For more details about the benefits WIP provides, see [Why use WIP?](#why-use-wip) later in this topic. ## Video: Protect enterprise data from being accidentally copied to the wrong place From a22ec2921b6e9b99c1dc38a30637b9726db16c93 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Mon, 11 Feb 2019 21:27:22 +0000 Subject: [PATCH 96/98] Merged PR 14227: add note about GP setting --- .../provisioning-packages/provisioning-install-icd.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/configuration/provisioning-packages/provisioning-install-icd.md b/windows/configuration/provisioning-packages/provisioning-install-icd.md index db1036262f..7729761c95 100644 --- a/windows/configuration/provisioning-packages/provisioning-install-icd.md +++ b/windows/configuration/provisioning-packages/provisioning-install-icd.md @@ -68,6 +68,7 @@ On devices running Windows 10, you can install [the Windows Configuration Design ## Current Windows Configuration Designer limitations +- Windows Configuration Designer will not work properly if the Group Policy setting **Policies > Administrative Templates > Windows Components > Internet Explorer > Security Zones: Use only machine settings** is enabled. We recommend that you run Windows Configuration Designer on a different device, rather than change the security setting. - You can only run one instance of Windows Configuration Designer on your computer at a time. From ed3dfe1f59876df198f1ae58b2470c84ab8630b0 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 11 Feb 2019 14:19:22 -0800 Subject: [PATCH 97/98] revised intro --- .../protect-enterprise-data-using-wip.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md b/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md index 5027581f9c..49ed1d9865 100644 --- a/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md +++ b/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md @@ -76,7 +76,7 @@ WIP provides: - Integration with your existing management system (Microsoft Intune, System Center Configuration Manager, or your current mobile device management (MDM) system) to configure, deploy, and manage WIP for your company. ## Why use WIP? -WIP gives you a new way to manage data policy enforcement for apps and documents, along with the ability to remove access to enterprise data from both enterprise and personal devices (after enrollment in an enterprise management solution, like Intune). +WIP is the mobile application management (MAM) mechanism on Windows 10. WIP gives you a new way to manage data policy enforcement for apps and documents on Windows 10 desktop operating systems, along with the ability to remove access to enterprise data from both enterprise and personal devices (after enrollment in an enterprise management solution, like Intune). - **Change the way you think about data policy enforcement.** As an enterprise admin, you need to maintain compliance in your data policy and data access. WIP helps protect enterprise on both corporate and employee-owned devices, even when the employee isn’t using the device. When employees create content on an enterprise-protected device, they can choose to save it as a work document. If it's a work document, it becomes locally-maintained as enterprise data. From f80fa1cd5204e75f378f8188521e9dcc0839cc19 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 11 Feb 2019 14:24:56 -0800 Subject: [PATCH 98/98] date --- .../recommended-network-definitions-for-wip.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/recommended-network-definitions-for-wip.md b/windows/security/information-protection/windows-information-protection/recommended-network-definitions-for-wip.md index 3a12fc252f..ea566d653b 100644 --- a/windows/security/information-protection/windows-information-protection/recommended-network-definitions-for-wip.md +++ b/windows/security/information-protection/windows-information-protection/recommended-network-definitions-for-wip.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security ms.author: justinha -ms.date: 02/1/2019 +ms.date: 02/11/2019 ms.localizationpriority: medium ---