From 1809c2673c4306367f519e59d920b31575f6466f Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Tue, 5 Mar 2019 07:36:36 -0800 Subject: [PATCH 001/349] start Shell Launcher v2 --- windows/configuration/kiosk-shelllauncher.md | 25 ++++++++++++-------- 1 file changed, 15 insertions(+), 10 deletions(-) diff --git a/windows/configuration/kiosk-shelllauncher.md b/windows/configuration/kiosk-shelllauncher.md index e928698268..cf1c8ccb1a 100644 --- a/windows/configuration/kiosk-shelllauncher.md +++ b/windows/configuration/kiosk-shelllauncher.md @@ -1,6 +1,6 @@ --- title: Use Shell Launcher to create a Windows 10 kiosk (Windows 10) -description: A single-use device such as a digital sign is easy to set up in Windows 10 for desktop editions (Pro, Enterprise, and Education). +description: Shell Launcher lets you change the default shell that launches when a user signs in to a device. ms.assetid: 428680AE-A05F-43ED-BD59-088024D1BFCC keywords: ["assigned access", "kiosk", "lockdown", "digital sign", "digital signage"] ms.prod: w10 @@ -15,14 +15,12 @@ ms.date: 10/01/2018 **Applies to** ->App type: Windows desktop application -> ->OS edition: Windows 10 Ent, Edu -> ->Account type: Local standard user or administrator, Active Directory, Azure AD +>**App type**: Windows desktop application; Universal Windows Platform (UWP) app (requires Shell Launcher v2) +>**OS edition**: Windows 10 Ent, Edu +>**Account type**: Local standard user or administrator, Active Directory, Azure AD -Using Shell Launcher, you can configure a kiosk device that runs a Windows desktop application as the user interface. The application that you specify replaces the default shell (explorer.exe) that usually runs when a user logs on. +Using Shell Launcher, you can configure a kiosk device that runs an application as the user interface, replacing the default shell (explorer.exe). In Shell Launcher v1, available in Windows 10, version 1809 and earlier, you could only specify a Windows desktop application as the replacement shell. In Shell Launcher v2, available in the next feature update to Windows 10, you can also specify a UWP app as the replacement shell. >[!NOTE] >Using the Shell Launcher controls which application the user sees as the shell after sign-in. It does not prevent the user from accessing other desktop applications and system components. @@ -34,9 +32,16 @@ Using Shell Launcher, you can configure a kiosk device that runs a Windows deskt > >You can also configure a kiosk device that runs a Windows desktop application by using the [Provision kiosk devices wizard](#wizard). - +## Requirements and instructions for Shell Launcher v2 -## Requirements +### Requirements + + +### Configure Shell Launcher v2 + +## Requirements and instructions for Shell Launcher v1 + +### Requirements >[!WARNING] >- Windows 10 doesn’t support setting a custom shell prior to OOBE. If you do, you won’t be able to deploy the resulting image. @@ -50,7 +55,7 @@ Using Shell Launcher, you can configure a kiosk device that runs a Windows deskt [See the technical reference for the shell launcher component.](https://go.microsoft.com/fwlink/p/?LinkId=618603) -## Configure Shell Launcher +### Configure Shell Launcher v1 To set a Windows desktop application as the shell, you first turn on the Shell Launcher feature, and then you can set your custom shell as the default using PowerShell. From 34830edd12c4c57b761b9012cdbdb37ea376c980 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Tue, 5 Mar 2019 08:28:18 -0800 Subject: [PATCH 002/349] sync --- windows/configuration/kiosk-shelllauncher.md | 32 +++++++++++++++++--- 1 file changed, 27 insertions(+), 5 deletions(-) diff --git a/windows/configuration/kiosk-shelllauncher.md b/windows/configuration/kiosk-shelllauncher.md index cf1c8ccb1a..eda882b940 100644 --- a/windows/configuration/kiosk-shelllauncher.md +++ b/windows/configuration/kiosk-shelllauncher.md @@ -15,12 +15,9 @@ ms.date: 10/01/2018 **Applies to** ->**App type**: Windows desktop application; Universal Windows Platform (UWP) app (requires Shell Launcher v2) ->**OS edition**: Windows 10 Ent, Edu ->**Account type**: Local standard user or administrator, Active Directory, Azure AD +- Windows 10 Ent, Edu - -Using Shell Launcher, you can configure a kiosk device that runs an application as the user interface, replacing the default shell (explorer.exe). In Shell Launcher v1, available in Windows 10, version 1809 and earlier, you could only specify a Windows desktop application as the replacement shell. In Shell Launcher v2, available in the next feature update to Windows 10, you can also specify a UWP app as the replacement shell. +Using Shell Launcher, you can configure a kiosk device that runs an application as the user interface, replacing the default shell (explorer.exe). In **Shell Launcher v1**, available in Windows 10, version 1809 and earlier, you could only specify a Windows desktop application as the replacement shell. In **Shell Launcher v2**, available in the next feature update to Windows 10, you can also specify a UWP app as the replacement shell. >[!NOTE] >Using the Shell Launcher controls which application the user sees as the shell after sign-in. It does not prevent the user from accessing other desktop applications and system components. @@ -32,8 +29,33 @@ Using Shell Launcher, you can configure a kiosk device that runs an application > >You can also configure a kiosk device that runs a Windows desktop application by using the [Provision kiosk devices wizard](#wizard). +## Differences between Shell Launcher v1 and Shell Launcher v2 + +Shell Launcher v1 replaces `explorer.exe`, the default shell, with `eshell.exe` which can launch a Windows desktop application. + +Shell Launcher v2 replaces `explorer.exe` with `customshellhost.exe`. This new executable file can launch a Windows desktop application or a UWP app. + +If you are experienced using XML to configure Shell Launcher, you will use a different schema reference and app type in `Shell`, as shown in the following v2 example. + +``` + + + + + + + + + + + +``` + ## Requirements and instructions for Shell Launcher v2 + + ### Requirements From 4b31a7537add1dcc44d65c2ee1f0cb4d996d30cc Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Tue, 5 Mar 2019 08:33:29 -0800 Subject: [PATCH 003/349] sync --- windows/configuration/kiosk-shelllauncher.md | 34 +++++++++----------- 1 file changed, 16 insertions(+), 18 deletions(-) diff --git a/windows/configuration/kiosk-shelllauncher.md b/windows/configuration/kiosk-shelllauncher.md index eda882b940..e6bf62b7cf 100644 --- a/windows/configuration/kiosk-shelllauncher.md +++ b/windows/configuration/kiosk-shelllauncher.md @@ -51,19 +51,7 @@ xmlns:v2="http://schemas.microsoft.com/ShellLauncher/2019/Configuration"> ``` - -## Requirements and instructions for Shell Launcher v2 - - - -### Requirements - - -### Configure Shell Launcher v2 - -## Requirements and instructions for Shell Launcher v1 - -### Requirements +## Requirements >[!WARNING] >- Windows 10 doesn’t support setting a custom shell prior to OOBE. If you do, you won’t be able to deploy the resulting image. @@ -74,12 +62,11 @@ xmlns:v2="http://schemas.microsoft.com/ShellLauncher/2019/Configuration"> - A Windows desktop application that is installed for that account. The app can be your own company application or a common app like Internet Explorer. -[See the technical reference for the shell launcher component.](https://go.microsoft.com/fwlink/p/?LinkId=618603) +[See the technical reference for the shell launcher component.](https://docs.microsoft.com/windows-hardware/customize/enterprise/shell-launcher) +## Enable Shell Launcher feature -### Configure Shell Launcher v1 - -To set a Windows desktop application as the shell, you first turn on the Shell Launcher feature, and then you can set your custom shell as the default using PowerShell. +To set a custom shell, you first turn on the Shell Launcher feature, and then you can set your custom shell as the default using PowerShell. **To turn on Shell Launcher in Windows features** @@ -100,7 +87,18 @@ Alternatively, you can turn on Shell Launcher using Windows Configuration Design Dism /online /Enable-Feature /all /FeatureName:Client-EmbeddedShellLauncher ``` -**To set your custom shell** + +## Instructions for Shell Launcher v2 + + + + + + +## Instructions for Shell Launcher v1 + + +**To set your custom shell using PowerShell** Modify the following PowerShell script as appropriate. The comments in the sample script explain the purpose of each section and tell you where you will want to change the script for your purposes. Save your script with the extension .ps1, open Windows PowerShell as administrator, and run the script on the kiosk device. From 2660351023095a69b271fe9f5af6b90cb9148293 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Thu, 7 Mar 2019 06:52:10 -0800 Subject: [PATCH 004/349] add mdm --- windows/configuration/kiosk-shelllauncher.md | 16 +++++++--------- 1 file changed, 7 insertions(+), 9 deletions(-) diff --git a/windows/configuration/kiosk-shelllauncher.md b/windows/configuration/kiosk-shelllauncher.md index 51429814b3..38b69e986f 100644 --- a/windows/configuration/kiosk-shelllauncher.md +++ b/windows/configuration/kiosk-shelllauncher.md @@ -18,7 +18,7 @@ ms.topic: article **Applies to** - Windows 10 Ent, Edu -Using Shell Launcher, you can configure a kiosk device that runs an application as the user interface, replacing the default shell (explorer.exe). In **Shell Launcher v1**, available in Windows 10, version 1809 and earlier, you could only specify a Windows desktop application as the replacement shell. In **Shell Launcher v2**, available in the next feature update to Windows 10, you can also specify a UWP app as the replacement shell. +Using Shell Launcher, you can configure a kiosk device that runs an application as the user interface, replacing the default shell (explorer.exe). In **Shell Launcher v1**, available in Windows 10, version 1809 and earlier, you can only specify a Windows desktop application as the replacement shell. In **Shell Launcher v2**, available in the next feature update to Windows 10, you can also specify a UWP app as the replacement shell. >[!NOTE] >Using the Shell Launcher controls which application the user sees as the shell after sign-in. It does not prevent the user from accessing other desktop applications and system components. @@ -27,8 +27,9 @@ Using Shell Launcher, you can configure a kiosk device that runs an application >- [Group Policy](https://www.microsoft.com/download/details.aspx?id=25250) - example: Prevent access to registry editing tools >- [AppLocker](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview) - Application control policies >- [Mobile Device Management](https://docs.microsoft.com/windows/client-management/mdm) - Enterprise management of device security policies -> ->You can also configure a kiosk device that runs a Windows desktop application by using the [Provision kiosk devices wizard](#wizard). + +You can apply a custom shell through Shell Launcher [by using PowerShell](#configure-a-custom-shell-using-powershell). In Windows 10, version 1803 and later, you can also [use mobile device management (MDM)](#configure-a-custom-shell-in-mdm) to apply a custom shell through Shell Launcher. + ## Differences between Shell Launcher v1 and Shell Launcher v2 @@ -36,7 +37,7 @@ Shell Launcher v1 replaces `explorer.exe`, the default shell, with `eshell.exe` Shell Launcher v2 replaces `explorer.exe` with `customshellhost.exe`. This new executable file can launch a Windows desktop application or a UWP app. -If you are experienced using XML to configure Shell Launcher, you will use a different schema reference and app type in `Shell`, as shown in the following v2 example. +If you use XML to configure Shell Launcher, you will use a different schema reference and a different app type for `Shell`, as shown in the following v2 example. ``` @@ -89,17 +90,14 @@ Alternatively, you can turn on Shell Launcher using Windows Configuration Design ``` -## Instructions for Shell Launcher v2 +## Configure a custom shell in MDM -## Instructions for Shell Launcher v1 - - -**To set your custom shell using PowerShell** +## Configure a custom shell using PowerShell Modify the following PowerShell script as appropriate. The comments in the sample script explain the purpose of each section and tell you where you will want to change the script for your purposes. Save your script with the extension .ps1, open Windows PowerShell as administrator, and run the script on the kiosk device. From a4f8a9be46e1a8102c62ebfc09e66bb659a16339 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Thu, 7 Mar 2019 06:57:32 -0800 Subject: [PATCH 005/349] sync --- windows/configuration/kiosk-shelllauncher.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/configuration/kiosk-shelllauncher.md b/windows/configuration/kiosk-shelllauncher.md index 38b69e986f..aef387e7f2 100644 --- a/windows/configuration/kiosk-shelllauncher.md +++ b/windows/configuration/kiosk-shelllauncher.md @@ -18,10 +18,10 @@ ms.topic: article **Applies to** - Windows 10 Ent, Edu -Using Shell Launcher, you can configure a kiosk device that runs an application as the user interface, replacing the default shell (explorer.exe). In **Shell Launcher v1**, available in Windows 10, version 1809 and earlier, you can only specify a Windows desktop application as the replacement shell. In **Shell Launcher v2**, available in the next feature update to Windows 10, you can also specify a UWP app as the replacement shell. +Using Shell Launcher, you can configure a device that runs an application as the user interface, replacing the default shell (explorer.exe). In **Shell Launcher v1**, available in Windows 10, version 1809 and earlier, you can only specify a Windows desktop application as the replacement shell. In **Shell Launcher v2**, available in the next feature update to Windows 10, you can also specify a UWP app as the replacement shell. >[!NOTE] ->Using the Shell Launcher controls which application the user sees as the shell after sign-in. It does not prevent the user from accessing other desktop applications and system components. +>Shell Launcher controls which application the user sees as the shell after sign-in. It does not prevent the user from accessing other desktop applications and system components. > >Methods of controlling access to other desktop applications and system components can be used in addition to using the Shell Launcher. These methods include, but are not limited to: >- [Group Policy](https://www.microsoft.com/download/details.aspx?id=25250) - example: Prevent access to registry editing tools From 16a564ae3a432246ff6df6a9178a2efaae807bfb Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Thu, 7 Mar 2019 07:13:04 -0800 Subject: [PATCH 006/349] add prerelease language --- windows/configuration/kiosk-shelllauncher.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/configuration/kiosk-shelllauncher.md b/windows/configuration/kiosk-shelllauncher.md index aef387e7f2..1e5d4f8771 100644 --- a/windows/configuration/kiosk-shelllauncher.md +++ b/windows/configuration/kiosk-shelllauncher.md @@ -18,6 +18,9 @@ ms.topic: article **Applies to** - Windows 10 Ent, Edu +>[!WARNING] +>Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + Using Shell Launcher, you can configure a device that runs an application as the user interface, replacing the default shell (explorer.exe). In **Shell Launcher v1**, available in Windows 10, version 1809 and earlier, you can only specify a Windows desktop application as the replacement shell. In **Shell Launcher v2**, available in the next feature update to Windows 10, you can also specify a UWP app as the replacement shell. >[!NOTE] From ff1abfa3c897113aadd4c9b557e08747f2228f56 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Thu, 7 Mar 2019 07:40:47 -0800 Subject: [PATCH 007/349] custom oma-uri --- windows/configuration/kiosk-shelllauncher.md | 36 ++++++++++++-------- 1 file changed, 21 insertions(+), 15 deletions(-) diff --git a/windows/configuration/kiosk-shelllauncher.md b/windows/configuration/kiosk-shelllauncher.md index 1e5d4f8771..e0789e445e 100644 --- a/windows/configuration/kiosk-shelllauncher.md +++ b/windows/configuration/kiosk-shelllauncher.md @@ -40,22 +40,7 @@ Shell Launcher v1 replaces `explorer.exe`, the default shell, with `eshell.exe` Shell Launcher v2 replaces `explorer.exe` with `customshellhost.exe`. This new executable file can launch a Windows desktop application or a UWP app. -If you use XML to configure Shell Launcher, you will use a different schema reference and a different app type for `Shell`, as shown in the following v2 example. -``` - - - - - - - - - - - -``` ## Requirements >[!WARNING] @@ -95,9 +80,30 @@ Alternatively, you can turn on Shell Launcher using Windows Configuration Design ## Configure a custom shell in MDM +You can use XML and a [custom OMA-URI setting](#custom-oma-uri-setting) to configure Shell Launcher in MDM. +### XML for Shell Launcher configuration +For Shell Launcher v2, you will use a different schema reference and a different app type for `Shell`, as shown in the following example. +``` + + + + + + + + + + + +``` + +### Custom OMA-URI setting + +[custom OMA-URI setting](https://docs.microsoft.com/intune/custom-settings-windows-10) ## Configure a custom shell using PowerShell From c4674be64c06f85367317165c4b8408285f6ba5d Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Thu, 7 Mar 2019 08:05:23 -0800 Subject: [PATCH 008/349] sync --- windows/configuration/kiosk-shelllauncher.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/configuration/kiosk-shelllauncher.md b/windows/configuration/kiosk-shelllauncher.md index e0789e445e..86e3db1569 100644 --- a/windows/configuration/kiosk-shelllauncher.md +++ b/windows/configuration/kiosk-shelllauncher.md @@ -56,7 +56,7 @@ Shell Launcher v2 replaces `explorer.exe` with `customshellhost.exe`. This new e ## Enable Shell Launcher feature -To set a custom shell, you first turn on the Shell Launcher feature, and then you can set your custom shell as the default using PowerShell. +To set a custom shell, you first turn on the Shell Launcher feature, and then you can set your custom shell as the default using PowerShell or MDM. **To turn on Shell Launcher in Windows features** @@ -66,7 +66,7 @@ To set a custom shell, you first turn on the Shell Launcher feature, and then yo 2. Select **Shell Launcher** and **OK**. -Alternatively, you can turn on Shell Launcher using Windows Configuration Designer in a provisioning package, using `SMISettings > ShellLauncher`, or the Deployment Image Servicing and Management (DISM.exe) tool. +Alternatively, you can turn on Shell Launcher using Windows Configuration Designer in a provisioning package, using `SMISettings > ShellLauncher`, or you can use the Deployment Image Servicing and Management (DISM.exe) tool. **To turn on Shell Launcher using DISM** From dd4ba615f1b0f08de489c4078e03824f7ef64b25 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Thu, 7 Mar 2019 08:53:19 -0800 Subject: [PATCH 009/349] xml samples --- windows/configuration/kiosk-shelllauncher.md | 25 +++++++++++++++++++- 1 file changed, 24 insertions(+), 1 deletion(-) diff --git a/windows/configuration/kiosk-shelllauncher.md b/windows/configuration/kiosk-shelllauncher.md index 86e3db1569..b74f4a828a 100644 --- a/windows/configuration/kiosk-shelllauncher.md +++ b/windows/configuration/kiosk-shelllauncher.md @@ -84,6 +84,24 @@ You can use XML and a [custom OMA-URI setting](#custom-oma-uri-setting) to confi ### XML for Shell Launcher configuration +The following XML sample works for Shell Launcher v1: + +``` + + + + + + + + + + + + + +``` + For Shell Launcher v2, you will use a different schema reference and a different app type for `Shell`, as shown in the following example. ``` @@ -101,10 +119,15 @@ xmlns:v2="http://schemas.microsoft.com/ShellLauncher/2019/Configuration"> ``` +[Get XML examples for different Shell Launcher v2 configurations.](https://github.com/Microsoft/Windows-iotcore-samples/tree/develop/Samples/ShellLauncherV2) + ### Custom OMA-URI setting -[custom OMA-URI setting](https://docs.microsoft.com/intune/custom-settings-windows-10) +In your MDM service, you can create a [custom OMA-URI setting](https://docs.microsoft.com/intune/custom-settings-windows-10) to configure Shell Launcher v1 or v2. (The XML that you use for your setting will determine whether you apply Shell Launcher v1 or v2.) +The OMA-URI path is `./Device/Vendor/MSFT/AssignedAccess/ShellLauncher`. + +For the value, you can select data type `String` and paste the desired configuration file content into the value box. If you wish to upload the xml instead of pasting the content, choose data type `String (XML file)` instead. ## Configure a custom shell using PowerShell From 24388d8df8fc00b9fb9987b8b280e4d1a117f51d Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Thu, 7 Mar 2019 13:29:51 -0800 Subject: [PATCH 010/349] tweak --- windows/configuration/kiosk-shelllauncher.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/configuration/kiosk-shelllauncher.md b/windows/configuration/kiosk-shelllauncher.md index b74f4a828a..95dc8e3528 100644 --- a/windows/configuration/kiosk-shelllauncher.md +++ b/windows/configuration/kiosk-shelllauncher.md @@ -48,9 +48,9 @@ Shell Launcher v2 replaces `explorer.exe` with `customshellhost.exe`. This new e > >- Shell Launcher doesn't support a custom shell with an application that launches a different process and exits. For example, you cannot specify **write.exe** in Shell Launcher. Shell Launcher launches a custom shell and monitors the process to identify when the custom shell exits. **Write.exe** creates a 32-bit wordpad.exe process and exits. Because Shell Launcher is not aware of the newly created wordpad.exe process, Shell Launcher will take action based on the exit code of **Write.exe**, such as restarting the custom shell. -- A domain or local user account. +- A domain, Azure Active Directory, or local user account. -- A Windows desktop application that is installed for that account. The app can be your own company application or a common app like Internet Explorer. +- A Windows application that is installed for that account. The app can be your own company application or a common app like Internet Explorer. [See the technical reference for the shell launcher component.](https://docs.microsoft.com/windows-hardware/customize/enterprise/shell-launcher) From d6f0696d8a70d559187932a38ccc7ed82faf24d3 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 11 Mar 2019 12:07:23 -0700 Subject: [PATCH 011/349] fixing table --- .../applocker/requirements-to-use-applocker.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-applocker.md b/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-applocker.md index 97d032f8b6..40e43e69f7 100644 --- a/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-applocker.md +++ b/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-applocker.md @@ -12,7 +12,7 @@ manager: dansimp audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual -ms.date: 09/21/2017 +ms.date: 03/11/2019 --- # Requirements to use AppLocker @@ -31,14 +31,15 @@ To use AppLocker, you need: - For Group Policy deployment, at least one device with the Group Policy Management Console (GPMC) or Remote Server Administration Tools (RSAT) installed to host the AppLocker rules. - Devices running a supported operating system to enforce the AppLocker rules that you create. ->**Note:**  You can use Software Restriction Policies with AppLocker, but with some limitations. For more info, see [Use AppLocker and Software Restriction Policies in the same domain](use-applocker-and-software-restriction-policies-in-the-same-domain.md). +>[!NOTE] +>You can use Software Restriction Policies with AppLocker, but with some limitations. For more info, see [Use AppLocker and Software Restriction Policies in the same domain](use-applocker-and-software-restriction-policies-in-the-same-domain.md).   ## Operating system requirements The following table show the on which operating systems AppLocker features are supported. | Version | Can be configured | Can be enforced | Available rules | Notes | -| - | - | - | - | - | +|---|---|---|---|---| | Windows 10| Yes| Yes| Packaged apps
Executable
Windows Installer
Script
DLL| You can use the [AppLocker CSP](https://msdn.microsoft.com/library/windows/hardware/dn920019.aspx) to configure AppLocker policies on any edition of Windows 10 supported by Mobile Device Management (MDM). You can only manage AppLocker with Group Policy on devices running Windows 10 Enterprise, Windows 10 Education, and Windows Server 2016. | | Windows Server 2016
Windows Server 2012 R2
Windows Server 2012| Yes| Yes| Packaged apps
Executable
Windows Installer
Script
DLL| | | Windows 8.1 Pro| Yes| No| N/A|| From 60d592e73539ef26b9ccb8115c243518b404fef3 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 11 Mar 2019 12:35:03 -0700 Subject: [PATCH 012/349] fixing table --- .../applocker/requirements-to-use-applocker.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-applocker.md b/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-applocker.md index 40e43e69f7..b237377624 100644 --- a/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-applocker.md +++ b/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-applocker.md @@ -36,7 +36,12 @@ To use AppLocker, you need:   ## Operating system requirements -The following table show the on which operating systems AppLocker features are supported. +The following table shows AppLocker features supported by different versions of Windows. + +| Version | Can be configured | Can be enforced | Available rules | Notes | +|---|---|---|---|---| +| Windows 10| Yes| Yes| Packaged apps
Executable
Windows Installer
Script
DLL| You can use the [AppLocker CSP](https://msdn.microsoft.com/library/windows/hardware/dn920019.aspx) to configure AppLocker policies on any edition of Windows 10 supported by Mobile Device Management (MDM). You can only manage AppLocker with Group Policy on devices running Windows 10 Enterprise, Windows 10 Education, and Windows Server 2016. | + | Version | Can be configured | Can be enforced | Available rules | Notes | |---|---|---|---|---| From 74eb898c4e50abb216f4c8c2b26e6d486e0d631b Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 11 Mar 2019 15:06:15 -0700 Subject: [PATCH 013/349] fixing table --- .../applocker/requirements-to-use-applocker.md | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-applocker.md b/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-applocker.md index b237377624..9d9daa45dd 100644 --- a/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-applocker.md +++ b/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-applocker.md @@ -38,11 +38,6 @@ To use AppLocker, you need: The following table shows AppLocker features supported by different versions of Windows. -| Version | Can be configured | Can be enforced | Available rules | Notes | -|---|---|---|---|---| -| Windows 10| Yes| Yes| Packaged apps
Executable
Windows Installer
Script
DLL| You can use the [AppLocker CSP](https://msdn.microsoft.com/library/windows/hardware/dn920019.aspx) to configure AppLocker policies on any edition of Windows 10 supported by Mobile Device Management (MDM). You can only manage AppLocker with Group Policy on devices running Windows 10 Enterprise, Windows 10 Education, and Windows Server 2016. | - - | Version | Can be configured | Can be enforced | Available rules | Notes | |---|---|---|---|---| | Windows 10| Yes| Yes| Packaged apps
Executable
Windows Installer
Script
DLL| You can use the [AppLocker CSP](https://msdn.microsoft.com/library/windows/hardware/dn920019.aspx) to configure AppLocker policies on any edition of Windows 10 supported by Mobile Device Management (MDM). You can only manage AppLocker with Group Policy on devices running Windows 10 Enterprise, Windows 10 Education, and Windows Server 2016. | @@ -51,6 +46,12 @@ The following table shows AppLocker features supported by different versions of | Windows 8.1 Enterprise| Yes| Yes| Packaged apps
Executable
Windows Installer
Script
DLL| | | Windows RT 8.1| No| No| N/A|| | Windows 8 Pro| Yes| No| N/A|| + + + + +| Version | Can be configured | Can be enforced | Available rules | Notes | +|---|---|---|---|---| | Windows 8 Enterprise| Yes| Yes| Packaged apps
Executable
Windows Installer
Script
DLL|| | Windows RT| No| No| N/A| | | Windows Server 2008 R2 Standard| Yes| Yes| Executable
Windows Installer
Script
DLL| Packaged app rules will not be enforced.| From 41359995c5549d61a1d3f1356a9f0fa6da294ace Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 11 Mar 2019 15:08:09 -0700 Subject: [PATCH 014/349] fixing table --- .../applocker/requirements-to-use-applocker.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-applocker.md b/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-applocker.md index 9d9daa45dd..16a77a7d05 100644 --- a/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-applocker.md +++ b/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-applocker.md @@ -62,8 +62,7 @@ The following table shows AppLocker features supported by different versions of | Windows 7 Enterprise| Yes| Yes| Executable
Windows Installer
Script
DLL| Packaged app rules will not be enforced.| | Windows 7 Professional| Yes| No| Executable
Windows Installer
Script
DLL| No AppLocker rules are enforced.|   - -AppLocker is not supported on versions of the Windows operating system not listed above. Software Restriction Policies can be used with those versions. However, the SRP Basic User feature is not supported on the above operating systems. +Previous versions of Windows can use Software Restriction Policies. ## See also - [Administer AppLocker](administer-applocker.md) From d138859da00c198106ee027c43cfaffb2930192f Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 11 Mar 2019 15:28:56 -0700 Subject: [PATCH 015/349] new topic --- ...were-not-recommending-fips-mode-anymore.md | 46 +++++++++++++++++++ 1 file changed, 46 insertions(+) create mode 100644 windows/security/threat-protection/why-were-not-recommending-fips-mode-anymore.md diff --git a/windows/security/threat-protection/why-were-not-recommending-fips-mode-anymore.md b/windows/security/threat-protection/why-were-not-recommending-fips-mode-anymore.md new file mode 100644 index 0000000000..3212c63026 --- /dev/null +++ b/windows/security/threat-protection/why-were-not-recommending-fips-mode-anymore.md @@ -0,0 +1,46 @@ +--- +title: Why We’re Not Recommending "FIPS Mode" Anymore +description: This topic explains why Microsoft changed from recommending FIPS mode be enabled to Not Defined. +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +author: aaronmar +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 03/11/2019 +--- + +# Why We’re Not Recommending “FIPS Mode” Anymore + +**Applies to** + - Windows 10 + - Windows Server + +In [the latest review of the official Microsoft security baselines](https://blogs.technet.microsoft.com/b/secguide/archive/2014/04/07/security-baselines-for-windows-8-1-windows-server-2012-r2-and-internet-explorer-11.aspx) for all versions of Windows client and Windows Server, we decided to remove our earlier recommendation to enable “FIPS mode”, or more precisely, the security option called “System Cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing.” +In our previous guidance we had recommended a setting of “Enabled”, primarily to align with US Federal government recommendations. In our updated guidance, the recommendation is “Not Defined”, meaning that we leave the decision to customers. Many people will correctly see this as a significant change, and it deserves explanation. +The United States Federal Information Processing Standard (FIPS) 140 standard defines cryptographic algorithms approved for use by US Federal government computer systems for the protection of sensitive data. An implementation of an approved cryptographic algorithm is considered FIPS 140-compliant only if it has been submitted for and has passed National Institute of Standards and Technology (NIST) validation. A particular implementation of an algorithm that has not been submitted cannot be considered FIPS-compliant even if it produces identical data as a validated implementation of the same algorithm. Note that the requirement to use approved and validated algorithms applies only to the protection of sensitive data. Systems and applications are always free to use weak or non-validated cryptographic implementations for non-security purposes, such as in a hash table for indexing and lookup purposes. +What FIPS mode does +Enabling FIPS mode makes Windows and its subsystems use only FIPS-validated cryptographic algorithms. An example is Schannel, which is the system component that provides SSL and TLS to applications. When FIPS mode is enabled, Schannel disallows SSL 2.0 and 3.0, protocols that fall short of the FIPS standards. Applications such as web browsers that use Schannel then cannot connect to HTTPS web sites that don’t use at least TLS 1.0. (Note that the same results can be achieved without FIPS mode by configuring Schannel according to KB 245030 and this blog post.) +Enabling FIPS mode also causes the .NET Framework to disallow the use of non-validated algorithms. (More on this later, under “Why FIPS mode is particularly onerous.”) +A more complete listing of the effects of enabling FIPS mode can be found in KB 811833. +What FIPS mode does not do +Beyond the effects described above, FIPS mode is merely advisory to applications. Applications that do not check or choose to ignore the registry setting associated with FIPS mode and that are not dependent on the subsystems described earlier will continue to work exactly as they had with FIPS mode disabled. For example, a Win32 application – or third party disk encryption software – written in C++ that uses the very weak and non-FIPS-approved DES encryption algorithm exposed by the CryptoAPI will behave exactly the same whether FIPS mode is enabled. +Further, FIPS mode does not and cannot ensure that applications even use encryption at all when appropriate. There is nothing Windows can do to prevent an application from saving plaintext passwords or other sensitive data in unprotected files or registry values. The bottom line here is that just because a software product works when FIPS mode is enabled does not mean that it adheres to government standards. +Why FIPS mode is particularly onerous +Perhaps the biggest problems incurred by enabling FIPS mode involve applications that use the .NET Framework. If FIPS mode is enabled, the .NET Framework disallows the use of all non-validated cryptographic classes. The problem here is that the Framework offers multiple implementations of most algorithms, and not all of them have been submitted for validation, even though they are similar or identical to implementations that have been approved. +For example, the .NET Framework currently provides three implementations of the SHA256 hashing algorithm: SHA256Cng, SHA256CryptoServiceProvider, and SHA256Managed. The first two use “platform invoke” (a.k.a., “p/invoke”) to use Windows’ underlying implementations, which are FIPS-validated. By contrast, SHA256Managed, like all the other crypto classes ending with “Managed”, is implemented strictly in .NET managed code and doesn’t use the underlying platform implementations. Although it is an acceptably strong hashing algorithm for most uses, the Managed implementations have never been submitted to NIST for validation. And so if an application tries to use this class and FIPS mode is enabled, the Framework will raise an exception and not allow the class to be used; this exception will almost always cause the application to fail, if not terminate immediately. +Compounding the problem is that in most cases the Managed implementations of the various cryptographic algorithms have been available much longer than their Cng and CryptoServiceProvider counterparts, and on top of that, the Managed implementations tend to be significantly faster. +Another significant problem with FIPS mode is that until very recently there was no NIST-approved way to derive an encryption key from a password. That blocked use of the Bitlocker Drive Encryption feature that stored a computer’s 48-character recovery password to Active Directory. Using the relatively new standard for password-based key derivation functions, this is no longer a problem with Windows 8.1 and Windows Server 2012 R2, but it remains a problem for older versions of Windows. +Finally, the .NET Framework’s enforcement of FIPS mode cannot tell whether any particular use of a cryptographic class is not for security purposes and thus not in violation of standards. +Is Microsoft contradicting government regulations? +Government regulations may continue to mandate that FIPS mode be enabled on government computers running Windows. Our updated recommendations do not contradict or conflict with government guidance: we’re not telling customers to turn it off – our recommendation is that it’s each customer’s decision to make. Our updated guidance reflects our belief there is not a compelling reason for our customers that are not subject to government regulations to enable FIPS mode. + +References: +FIPS 140 Evaluation +http://technet.microsoft.com/en-us/library/cc750357.aspx +"System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing" security setting effects in Windows XP and in later versions of Windows +http://support.microsoft.com/kb/811833 \ No newline at end of file From 7fe06cc7650ccbe513cb0b6662a10ffa042ac63d Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 11 Mar 2019 15:56:05 -0700 Subject: [PATCH 016/349] added new file for baslines --- windows/security/threat-protection/TOC.md | 8 +- .../get-support-for-security-baselines.md | 0 .../security-compliance-toolkit-10.md | 0 ...were-not-recommending-fips-mode-anymore.md | 78 +++++++++++++++++++ .../windows-security-baselines.md | 0 5 files changed, 83 insertions(+), 3 deletions(-) rename windows/security/threat-protection/{ => windows-security-baselines}/get-support-for-security-baselines.md (100%) rename windows/security/threat-protection/{ => windows-security-baselines}/security-compliance-toolkit-10.md (100%) create mode 100644 windows/security/threat-protection/windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md rename windows/security/threat-protection/{ => windows-security-baselines}/windows-security-baselines.md (100%) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 177a70d01a..bf4d93e534 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -1010,9 +1010,11 @@ ###### [Take ownership of files or other objects](security-policy-settings/take-ownership-of-files-or-other-objects.md) -### [Windows security baselines](windows-security-baselines.md) -#### [Security Compliance Toolkit](security-compliance-toolkit-10.md) -#### [Get support](get-support-for-security-baselines.md) +### [Windows security baselines](windows-security-baselines/windows-security-baselines.md) +#### [Security Compliance Toolkit](windows-security-baselines/security-compliance-toolkit-10.md) +#### [Get support](windows-security-baselines/get-support-for-security-baselines.md) +####Windows Security Blog Posts +##### [Why We’re Not Recommending "FIPS Mode" Anymore]((windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md) ### [MBSA removal and alternatives](mbsa-removal-and-guidance.md) diff --git a/windows/security/threat-protection/get-support-for-security-baselines.md b/windows/security/threat-protection/windows-security-baselines/get-support-for-security-baselines.md similarity index 100% rename from windows/security/threat-protection/get-support-for-security-baselines.md rename to windows/security/threat-protection/windows-security-baselines/get-support-for-security-baselines.md diff --git a/windows/security/threat-protection/security-compliance-toolkit-10.md b/windows/security/threat-protection/windows-security-baselines/security-compliance-toolkit-10.md similarity index 100% rename from windows/security/threat-protection/security-compliance-toolkit-10.md rename to windows/security/threat-protection/windows-security-baselines/security-compliance-toolkit-10.md diff --git a/windows/security/threat-protection/windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md b/windows/security/threat-protection/windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md new file mode 100644 index 0000000000..0ffa299ff9 --- /dev/null +++ b/windows/security/threat-protection/windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md @@ -0,0 +1,78 @@ +--- +title: Why We’re Not Recommending "FIPS Mode" Anymore +description: This topic explains why Microsoft changed from recommending FIPS mode be enabled to Not Defined. +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +author: aaronmar +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 03/11/2019 +--- + +# Why We’re Not Recommending “FIPS Mode” Anymore + +**Applies to** + - Windows 10 + - Windows Server + +In [the latest review of the official Microsoft security baselines](https://blogs.technet.microsoft.com/b/secguide/archive/2014/04/07/security-baselines-for-windows-8-1-windows-server-2012-r2-and-internet-explorer-11.aspx) for all versions of Windows client and Windows Server, we decided to remove our earlier recommendation to enable “FIPS mode”, or more precisely, the security option called “System Cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing.” +In our previous guidance we had recommended a setting of “Enabled”, primarily to align with US Federal government recommendations. +In our updated guidance, the recommendation is “Not Defined”, meaning that we leave the decision to customers. +Many people will correctly see this as a significant change, and it deserves explanation. + +The United States Federal Information Processing Standard (FIPS) 140 standard defines cryptographic algorithms approved for use by US Federal government computer systems for the protection of sensitive data. +An implementation of an approved cryptographic algorithm is considered FIPS 140-compliant only if it has been submitted for and has passed National Institute of Standards and Technology (NIST) validation. +A particular implementation of an algorithm that has not been submitted cannot be considered FIPS-compliant even if it produces identical data as a validated implementation of the same algorithm. Note that the requirement to use approved and validated algorithms applies only to the protection of sensitive data. +Systems and applications are always free to use weak or non-validated cryptographic implementations for non-security purposes, such as in a hash table for indexing and lookup purposes. + +## What FIPS mode does +Enabling FIPS mode makes Windows and its subsystems use only FIPS-validated cryptographic algorithms. +An example is Schannel, which is the system component that provides SSL and TLS to applications. +When FIPS mode is enabled, Schannel disallows SSL 2.0 and 3.0, protocols that fall short of the FIPS standards. +Applications such as web browsers that use Schannel then cannot connect to HTTPS web sites that don’t use at least TLS 1.0. +(Note that the same results can be achieved without FIPS mode by configuring Schannel according to [KB 245030](http://support.microsoft.com/kb/245030) and [this blog post](https://blogs.technet.microsoft.com/b/askds/archive/2011/05/04/speaking-in-ciphers-and-other-enigmatic-tongues.aspx).) + +Enabling FIPS mode also causes the .NET Framework to disallow the use of non-validated algorithms. +(More on this [later](#why-fips-mode-is-particularly-onerous).) + +A more complete listing of the effects of enabling FIPS mode can be found in [KB 811833](https://blogs.technet.microsoft.com/b/askds/archive/2011/05/04/speaking-in-ciphers-and-other-enigmatic-tongues.aspx). + +## What FIPS mode does not do +Beyond the effects described above, FIPS mode is merely advisory to applications. +Applications that do not check or choose to ignore the registry setting associated with FIPS mode and that are not dependent on the subsystems described earlier will continue to work exactly as they had with FIPS mode disabled. +For example, a Win32 application−or third party disk encryption software−written in C++ that uses the very weak and non-FIPS-approved DES encryption algorithm exposed by the CryptoAPI will behave exactly the same whether FIPS mode is enabled. + +Further, FIPS mode does not and cannot ensure that applications even use encryption at all when appropriate. +There is nothing Windows can do to prevent an application from saving plaintext passwords or other sensitive data in unprotected files or registry values. +The bottom line here is that just because a software product works when FIPS mode is enabled does not mean that it adheres to government standards. + +## Why FIPS mode is particularly onerous +Perhaps the biggest problems incurred by enabling FIPS mode involve applications that use the .NET Framework. +If FIPS mode is enabled, the .NET Framework disallows the use of all non-validated cryptographic classes. +The problem here is that the Framework offers multiple implementations of most algorithms, and not all of them have been submitted for validation, even though they are similar or identical to implementations that have been approved. + +For example, the .NET Framework currently provides three implementations of the SHA256 hashing algorithm: SHA256Cng, SHA256CryptoServiceProvider, and SHA256Managed. +The first two use “platform invoke” (a.k.a., “p/invoke”) to use Windows’ underlying implementations, which are FIPS-validated. +By contrast, SHA256Managed, like all the other crypto classes ending with “Managed”, is implemented strictly in .NET managed code and doesn’t use the underlying platform implementations. +Although it is an acceptably strong hashing algorithm for most uses, the Managed implementations have never been submitted to NIST for validation. +And so if an application tries to use this class and FIPS mode is enabled, the Framework will raise an exception and not allow the class to be used; this exception will almost always cause the application to fail, if not terminate immediately. + +Compounding the problem is that in most cases the Managed implementations of the various cryptographic algorithms have been available much longer than their Cng and CryptoServiceProvider counterparts, and on top of that, the Managed implementations tend to be significantly faster. + +Another significant problem with FIPS mode is that until very recently there was no NIST-approved way to derive an encryption key from a password. That blocked use of the Bitlocker Drive Encryption feature that stored a computer’s 48-character recovery password to Active Directory. Using the relatively new standard for password-based key derivation functions, this is no longer a problem with Windows 8.1 and Windows Server 2012 R2, but it remains a problem for older versions of Windows. + +Finally, the .NET Framework’s enforcement of FIPS mode cannot tell whether any particular use of a cryptographic class is not for security purposes and thus not in violation of standards. + +## Is Microsoft contradicting government regulations? +Government regulations may continue to mandate that FIPS mode be enabled on government computers running Windows. +Our updated recommendations do not contradict or conflict with government guidance: we’re not telling customers to turn it off−our recommendation is that it’s each customer’s decision to make. +Our updated guidance reflects our belief there is not a compelling reason for our customers that are not subject to government regulations to enable FIPS mode. + +References: +- [FIPS 140 Evaluation](https://docs.microsoft.com/windows/security/threat-protection/fips-140-validation) +- ["System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing" security setting effects in Windows XP and in later versions of Windows](https://support.microsoft.com/help/811833/system-cryptography-use-fips-compliant-algorithms-for-encryption-hashi) \ No newline at end of file diff --git a/windows/security/threat-protection/windows-security-baselines.md b/windows/security/threat-protection/windows-security-baselines/windows-security-baselines.md similarity index 100% rename from windows/security/threat-protection/windows-security-baselines.md rename to windows/security/threat-protection/windows-security-baselines/windows-security-baselines.md From d4cfd584b5f9d273d275c622e8b1f859a81bfe00 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 11 Mar 2019 16:01:42 -0700 Subject: [PATCH 017/349] fixed table --- .../applocker/requirements-to-use-applocker.md | 6 ------ 1 file changed, 6 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-applocker.md b/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-applocker.md index 16a77a7d05..69566aa89f 100644 --- a/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-applocker.md +++ b/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-applocker.md @@ -46,12 +46,6 @@ The following table shows AppLocker features supported by different versions of | Windows 8.1 Enterprise| Yes| Yes| Packaged apps
Executable
Windows Installer
Script
DLL| | | Windows RT 8.1| No| No| N/A|| | Windows 8 Pro| Yes| No| N/A|| - - - - -| Version | Can be configured | Can be enforced | Available rules | Notes | -|---|---|---|---|---| | Windows 8 Enterprise| Yes| Yes| Packaged apps
Executable
Windows Installer
Script
DLL|| | Windows RT| No| No| N/A| | | Windows Server 2008 R2 Standard| Yes| Yes| Executable
Windows Installer
Script
DLL| Packaged app rules will not be enforced.| From a8616882b4e3baf00e0396428d78782867620f79 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 11 Mar 2019 17:28:36 -0700 Subject: [PATCH 018/349] added new script --- .../microsoft-recommended-block-rules.md | 47 +++++++++++++++++-- 1 file changed, 42 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md b/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md index 8522325f19..425b3dca9e 100644 --- a/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md +++ b/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md @@ -76,7 +76,13 @@ These modules cannot be blocked by name or version, and therefore must be blocke For October 2017, we are announcing an update to system.management.automation.dll in which we are revoking older versions by hash values, instead of version rules. -Microsoft recommends that you block the following Microsoft-signed applications and PowerShell files by merging the following policy into your existing policy to add these deny rules using the Merge-CIPolicy cmdlet: +Microsoft recommends that you block the following Microsoft-signed applications and PowerShell files by merging the following policy into your existing policy to add these deny rules using the Merge-CIPolicy cmdlet. Beginning with the March 2019 quality update, each Windows release requires blocking diffferent version of the following files: + +- msxml3.dll +- msxml6.dll +- jscript9.dll + +In the comments of the following script, find the Windows release that you plan to use the policy for and remove the other file versions. ```xml @@ -137,7 +143,35 @@ Microsoft recommends that you block the following Microsoft-signed applications - + + + + + + + + --> + + + + --> + + + + --> + + + + --> + + + + --> @@ -842,8 +876,11 @@ Microsoft recommends that you block the following Microsoft-signed applications - - + + + + + @@ -1457,7 +1494,7 @@ Microsoft recommends that you block the following Microsoft-signed applications 0 - + ```
From 6cda37d6231575e7ddacafdb853ff0ce8e90ec8b Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 11 Mar 2019 17:29:23 -0700 Subject: [PATCH 019/349] edit --- .../microsoft-recommended-block-rules.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md b/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md index 425b3dca9e..c8104d4079 100644 --- a/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md +++ b/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md @@ -6,7 +6,7 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.localizationpriority: medium author: jsuther1974 -ms.date: 08/31/2018 +ms.date: 03/11/2019 --- # Microsoft recommended block rules @@ -1494,7 +1494,7 @@ In the comments of the following script, find the Windows release that you plan 0 - + ```
From 606fd49a8e4954684fe79f9bc6d5116227d282a6 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 15 Mar 2019 11:49:12 -0700 Subject: [PATCH 020/349] revised block list --- .../microsoft-recommended-block-rules.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md b/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md index c8104d4079..fcffa122d4 100644 --- a/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md +++ b/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md @@ -6,7 +6,7 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.localizationpriority: medium author: jsuther1974 -ms.date: 03/11/2019 +ms.date: 03/15/2019 --- # Microsoft recommended block rules @@ -76,13 +76,13 @@ These modules cannot be blocked by name or version, and therefore must be blocke For October 2017, we are announcing an update to system.management.automation.dll in which we are revoking older versions by hash values, instead of version rules. -Microsoft recommends that you block the following Microsoft-signed applications and PowerShell files by merging the following policy into your existing policy to add these deny rules using the Merge-CIPolicy cmdlet. Beginning with the March 2019 quality update, each Windows release requires blocking diffferent version of the following files: +Microsoft recommends that you block the following Microsoft-signed applications and PowerShell files by merging the following policy into your existing policy to add these deny rules using the Merge-CIPolicy cmdlet. Beginning with the March 2019 quality update, each version of Windows requires blocking a specific version of the following files: - msxml3.dll - msxml6.dll - jscript9.dll -In the comments of the following script, find the Windows release that you plan to use the policy for and remove the other file versions. +Pick the correct version of each .dll for the Windows release you plan to support, and remove the other versions. ```xml From 6dbe62ed49ffe0572fe662fadb38f4b334eefd7c Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 15 Mar 2019 14:33:50 -0700 Subject: [PATCH 021/349] edits --- ...were-not-recommending-fips-mode-anymore.md | 68 +++++++++++++------ ...were-not-recommending-fips-mode-anymore.md | 4 +- 2 files changed, 50 insertions(+), 22 deletions(-) diff --git a/windows/security/threat-protection/why-were-not-recommending-fips-mode-anymore.md b/windows/security/threat-protection/why-were-not-recommending-fips-mode-anymore.md index 3212c63026..dde671c924 100644 --- a/windows/security/threat-protection/why-were-not-recommending-fips-mode-anymore.md +++ b/windows/security/threat-protection/why-were-not-recommending-fips-mode-anymore.md @@ -11,7 +11,7 @@ manager: dansimp audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual -ms.date: 03/11/2019 +ms.date: 03/15/2019 --- # Why We’re Not Recommending “FIPS Mode” Anymore @@ -22,25 +22,53 @@ ms.date: 03/11/2019 In [the latest review of the official Microsoft security baselines](https://blogs.technet.microsoft.com/b/secguide/archive/2014/04/07/security-baselines-for-windows-8-1-windows-server-2012-r2-and-internet-explorer-11.aspx) for all versions of Windows client and Windows Server, we decided to remove our earlier recommendation to enable “FIPS mode”, or more precisely, the security option called “System Cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing.” In our previous guidance we had recommended a setting of “Enabled”, primarily to align with US Federal government recommendations. In our updated guidance, the recommendation is “Not Defined”, meaning that we leave the decision to customers. Many people will correctly see this as a significant change, and it deserves explanation. -The United States Federal Information Processing Standard (FIPS) 140 standard defines cryptographic algorithms approved for use by US Federal government computer systems for the protection of sensitive data. An implementation of an approved cryptographic algorithm is considered FIPS 140-compliant only if it has been submitted for and has passed National Institute of Standards and Technology (NIST) validation. A particular implementation of an algorithm that has not been submitted cannot be considered FIPS-compliant even if it produces identical data as a validated implementation of the same algorithm. Note that the requirement to use approved and validated algorithms applies only to the protection of sensitive data. Systems and applications are always free to use weak or non-validated cryptographic implementations for non-security purposes, such as in a hash table for indexing and lookup purposes. -What FIPS mode does -Enabling FIPS mode makes Windows and its subsystems use only FIPS-validated cryptographic algorithms. An example is Schannel, which is the system component that provides SSL and TLS to applications. When FIPS mode is enabled, Schannel disallows SSL 2.0 and 3.0, protocols that fall short of the FIPS standards. Applications such as web browsers that use Schannel then cannot connect to HTTPS web sites that don’t use at least TLS 1.0. (Note that the same results can be achieved without FIPS mode by configuring Schannel according to KB 245030 and this blog post.) -Enabling FIPS mode also causes the .NET Framework to disallow the use of non-validated algorithms. (More on this later, under “Why FIPS mode is particularly onerous.”) -A more complete listing of the effects of enabling FIPS mode can be found in KB 811833. -What FIPS mode does not do -Beyond the effects described above, FIPS mode is merely advisory to applications. Applications that do not check or choose to ignore the registry setting associated with FIPS mode and that are not dependent on the subsystems described earlier will continue to work exactly as they had with FIPS mode disabled. For example, a Win32 application – or third party disk encryption software – written in C++ that uses the very weak and non-FIPS-approved DES encryption algorithm exposed by the CryptoAPI will behave exactly the same whether FIPS mode is enabled. -Further, FIPS mode does not and cannot ensure that applications even use encryption at all when appropriate. There is nothing Windows can do to prevent an application from saving plaintext passwords or other sensitive data in unprotected files or registry values. The bottom line here is that just because a software product works when FIPS mode is enabled does not mean that it adheres to government standards. -Why FIPS mode is particularly onerous -Perhaps the biggest problems incurred by enabling FIPS mode involve applications that use the .NET Framework. If FIPS mode is enabled, the .NET Framework disallows the use of all non-validated cryptographic classes. The problem here is that the Framework offers multiple implementations of most algorithms, and not all of them have been submitted for validation, even though they are similar or identical to implementations that have been approved. -For example, the .NET Framework currently provides three implementations of the SHA256 hashing algorithm: SHA256Cng, SHA256CryptoServiceProvider, and SHA256Managed. The first two use “platform invoke” (a.k.a., “p/invoke”) to use Windows’ underlying implementations, which are FIPS-validated. By contrast, SHA256Managed, like all the other crypto classes ending with “Managed”, is implemented strictly in .NET managed code and doesn’t use the underlying platform implementations. Although it is an acceptably strong hashing algorithm for most uses, the Managed implementations have never been submitted to NIST for validation. And so if an application tries to use this class and FIPS mode is enabled, the Framework will raise an exception and not allow the class to be used; this exception will almost always cause the application to fail, if not terminate immediately. + +The United States Federal Information Processing Standard (FIPS) 140 standard defines cryptographic algorithms approved for use by US Federal government computer systems for the protection of sensitive data. +An implementation of an approved cryptographic algorithm is considered FIPS 140-compliant only if it has been submitted for and has passed National Institute of Standards and Technology (NIST) validation. +A particular implementation of an algorithm that has not been submitted cannot be considered FIPS-compliant even if it produces identical data as a validated implementation of the same algorithm. Note that the requirement to use approved and validated algorithms applies only to the protection of sensitive data. +Systems and applications are always free to use weak or non-validated cryptographic implementations for non-security purposes, such as in a hash table for indexing and lookup purposes. + +## What FIPS mode does +Enabling FIPS mode makes Windows and its subsystems use only FIPS-validated cryptographic algorithms. +An example is Schannel, which is the system component that provides SSL and TLS to applications. +When FIPS mode is enabled, Schannel disallows SSL 2.0 and 3.0, protocols that fall short of the FIPS standards. +Applications such as web browsers that use Schannel then cannot connect to HTTPS web sites that don’t use at least TLS 1.0. (Note that the same results can be achieved without FIPS mode by configuring Schannel according to [KB 245030](http://support.microsoft.com/kb/245030) and [this blog post](https://blogs.technet.microsoft.com/b/askds/archive/2011/05/04/speaking-in-ciphers-and-other-enigmatic-tongues.aspx).) +Enabling FIPS mode also causes the .NET Framework to disallow the use of non-validated algorithms. (More on this [later](#why-fips-mode-is-particularly-onerous)). +A more complete listing of the effects of enabling FIPS mode can be found in [KB 811833](http://support.microsoft.com/kb/811833). + +## What FIPS mode does not do +Beyond the effects described above, FIPS mode is merely advisory to applications. +Applications that do not check or choose to ignore the registry setting associated with FIPS mode and that are not dependent on the subsystems described earlier will continue to work exactly as they had with FIPS mode disabled. +For example, a Win32 application – or third party disk encryption software – written in C++ that uses the very weak and non-FIPS-approved DES encryption algorithm exposed by the CryptoAPI will behave exactly the same whether FIPS mode is enabled. + +Further, FIPS mode does not and cannot ensure that applications even use encryption at all when appropriate. +There is nothing Windows can do to prevent an application from saving plaintext passwords or other sensitive data in unprotected files or registry values. +The bottom line here is that just because a software product works when FIPS mode is enabled does not mean that it adheres to government standards. + +## Why FIPS mode is particularly onerous +Perhaps the biggest problems incurred by enabling FIPS mode involve applications that use the .NET Framework. +If FIPS mode is enabled, the .NET Framework disallows the use of all non-validated cryptographic classes. +The problem here is that the Framework offers multiple implementations of most algorithms, and not all of them have been submitted for validation, even though they are similar or identical to implementations that have been approved. + +For example, the .NET Framework currently provides three implementations of the SHA256 hashing algorithm: SHA256Cng, SHA256CryptoServiceProvider, and SHA256Managed. +The first two use “platform invoke” (a.k.a., “p/invoke”) to use Windows’ underlying implementations, which are FIPS-validated. +By contrast, SHA256Managed, like all the other crypto classes ending with “Managed”, is implemented strictly in .NET managed code and doesn’t use the underlying platform implementations. +Although it is an acceptably strong hashing algorithm for most uses, the Managed implementations have never been submitted to NIST for validation. +And so if an application tries to use this class and FIPS mode is enabled, the Framework will raise an exception and not allow the class to be used; this exception will almost always cause the application to fail, if not terminate immediately. + Compounding the problem is that in most cases the Managed implementations of the various cryptographic algorithms have been available much longer than their Cng and CryptoServiceProvider counterparts, and on top of that, the Managed implementations tend to be significantly faster. -Another significant problem with FIPS mode is that until very recently there was no NIST-approved way to derive an encryption key from a password. That blocked use of the Bitlocker Drive Encryption feature that stored a computer’s 48-character recovery password to Active Directory. Using the relatively new standard for password-based key derivation functions, this is no longer a problem with Windows 8.1 and Windows Server 2012 R2, but it remains a problem for older versions of Windows. +Another significant problem with FIPS mode is that until very recently there was no NIST-approved way to derive an encryption key from a password. +That blocked use of the Bitlocker Drive Encryption feature that stored a computer’s 48-character recovery password to Active Directory. +Using the newer standard for password-based key derivation functions, this is no longer a problem beginning with Windows 8.1 and Windows Server 2012 R2, but it remains a problem for older versions of Windows. + Finally, the .NET Framework’s enforcement of FIPS mode cannot tell whether any particular use of a cryptographic class is not for security purposes and thus not in violation of standards. -Is Microsoft contradicting government regulations? -Government regulations may continue to mandate that FIPS mode be enabled on government computers running Windows. Our updated recommendations do not contradict or conflict with government guidance: we’re not telling customers to turn it off – our recommendation is that it’s each customer’s decision to make. Our updated guidance reflects our belief there is not a compelling reason for our customers that are not subject to government regulations to enable FIPS mode. + +## Is Microsoft contradicting government regulations? +Government regulations may continue to mandate that FIPS mode be enabled on government computers running Windows. +Our updated recommendations do not contradict or conflict with government guidance: we’re not telling customers to turn it off – our recommendation is that it’s each customer’s decision to make. +Our updated guidance reflects our belief there is not a compelling reason for our customers that are not subject to government regulations to enable FIPS mode. -References: -FIPS 140 Evaluation -http://technet.microsoft.com/en-us/library/cc750357.aspx -"System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing" security setting effects in Windows XP and in later versions of Windows -http://support.microsoft.com/kb/811833 \ No newline at end of file +## References + +- [FIPS 140 Evaluation](http://technet.microsoft.com/library/cc750357.aspx) +- ["System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing" security setting effects in Windows XP and in later versions of Windows](http://support.microsoft.com/kb/811833) \ No newline at end of file diff --git a/windows/security/threat-protection/windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md b/windows/security/threat-protection/windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md index 0ffa299ff9..ba67ceadae 100644 --- a/windows/security/threat-protection/windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md +++ b/windows/security/threat-protection/windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md @@ -11,7 +11,7 @@ manager: dansimp audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual -ms.date: 03/11/2019 +ms.date: 03/15/2019 --- # Why We’re Not Recommending “FIPS Mode” Anymore @@ -64,7 +64,7 @@ And so if an application tries to use this class and FIPS mode is enabled, the F Compounding the problem is that in most cases the Managed implementations of the various cryptographic algorithms have been available much longer than their Cng and CryptoServiceProvider counterparts, and on top of that, the Managed implementations tend to be significantly faster. -Another significant problem with FIPS mode is that until very recently there was no NIST-approved way to derive an encryption key from a password. That blocked use of the Bitlocker Drive Encryption feature that stored a computer’s 48-character recovery password to Active Directory. Using the relatively new standard for password-based key derivation functions, this is no longer a problem with Windows 8.1 and Windows Server 2012 R2, but it remains a problem for older versions of Windows. +Another significant problem with FIPS mode is that until very recently there was no NIST-approved way to derive an encryption key from a password. That blocked use of the Bitlocker Drive Encryption feature that stored a computer’s 48-character recovery password to Active Directory. Using the newer standard for password-based key derivation functions, this is no longer a problem beginning with Windows 8.1 and Windows Server 2012 R2, but it remains a problem for older versions of Windows. Finally, the .NET Framework’s enforcement of FIPS mode cannot tell whether any particular use of a cryptographic class is not for security purposes and thus not in violation of standards. From 6e95083c74fdbb6265f5a725eca1844271f82220 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 15 Mar 2019 14:53:04 -0700 Subject: [PATCH 022/349] added new topic --- ...were-not-recommending-fips-mode-anymore.md | 74 ------------------ ...ng-with-well-known-and-proven-solutions.md | 77 +++++++++++++++++++ 2 files changed, 77 insertions(+), 74 deletions(-) delete mode 100644 windows/security/threat-protection/why-were-not-recommending-fips-mode-anymore.md create mode 100644 windows/security/threat-protection/windows-security-baselines/sticking-with-well-known-and-proven-solutions.md diff --git a/windows/security/threat-protection/why-were-not-recommending-fips-mode-anymore.md b/windows/security/threat-protection/why-were-not-recommending-fips-mode-anymore.md deleted file mode 100644 index dde671c924..0000000000 --- a/windows/security/threat-protection/why-were-not-recommending-fips-mode-anymore.md +++ /dev/null @@ -1,74 +0,0 @@ ---- -title: Why We’re Not Recommending "FIPS Mode" Anymore -description: This topic explains why Microsoft changed from recommending FIPS mode be enabled to Not Defined. -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: security -ms.localizationpriority: medium -author: aaronmar -manager: dansimp -audience: ITPro -ms.collection: M365-security-compliance -ms.topic: conceptual -ms.date: 03/15/2019 ---- - -# Why We’re Not Recommending “FIPS Mode” Anymore - -**Applies to** - - Windows 10 - - Windows Server - -In [the latest review of the official Microsoft security baselines](https://blogs.technet.microsoft.com/b/secguide/archive/2014/04/07/security-baselines-for-windows-8-1-windows-server-2012-r2-and-internet-explorer-11.aspx) for all versions of Windows client and Windows Server, we decided to remove our earlier recommendation to enable “FIPS mode”, or more precisely, the security option called “System Cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing.” -In our previous guidance we had recommended a setting of “Enabled”, primarily to align with US Federal government recommendations. In our updated guidance, the recommendation is “Not Defined”, meaning that we leave the decision to customers. Many people will correctly see this as a significant change, and it deserves explanation. - -The United States Federal Information Processing Standard (FIPS) 140 standard defines cryptographic algorithms approved for use by US Federal government computer systems for the protection of sensitive data. -An implementation of an approved cryptographic algorithm is considered FIPS 140-compliant only if it has been submitted for and has passed National Institute of Standards and Technology (NIST) validation. -A particular implementation of an algorithm that has not been submitted cannot be considered FIPS-compliant even if it produces identical data as a validated implementation of the same algorithm. Note that the requirement to use approved and validated algorithms applies only to the protection of sensitive data. -Systems and applications are always free to use weak or non-validated cryptographic implementations for non-security purposes, such as in a hash table for indexing and lookup purposes. - -## What FIPS mode does -Enabling FIPS mode makes Windows and its subsystems use only FIPS-validated cryptographic algorithms. -An example is Schannel, which is the system component that provides SSL and TLS to applications. -When FIPS mode is enabled, Schannel disallows SSL 2.0 and 3.0, protocols that fall short of the FIPS standards. -Applications such as web browsers that use Schannel then cannot connect to HTTPS web sites that don’t use at least TLS 1.0. (Note that the same results can be achieved without FIPS mode by configuring Schannel according to [KB 245030](http://support.microsoft.com/kb/245030) and [this blog post](https://blogs.technet.microsoft.com/b/askds/archive/2011/05/04/speaking-in-ciphers-and-other-enigmatic-tongues.aspx).) -Enabling FIPS mode also causes the .NET Framework to disallow the use of non-validated algorithms. (More on this [later](#why-fips-mode-is-particularly-onerous)). -A more complete listing of the effects of enabling FIPS mode can be found in [KB 811833](http://support.microsoft.com/kb/811833). - -## What FIPS mode does not do -Beyond the effects described above, FIPS mode is merely advisory to applications. -Applications that do not check or choose to ignore the registry setting associated with FIPS mode and that are not dependent on the subsystems described earlier will continue to work exactly as they had with FIPS mode disabled. -For example, a Win32 application – or third party disk encryption software – written in C++ that uses the very weak and non-FIPS-approved DES encryption algorithm exposed by the CryptoAPI will behave exactly the same whether FIPS mode is enabled. - -Further, FIPS mode does not and cannot ensure that applications even use encryption at all when appropriate. -There is nothing Windows can do to prevent an application from saving plaintext passwords or other sensitive data in unprotected files or registry values. -The bottom line here is that just because a software product works when FIPS mode is enabled does not mean that it adheres to government standards. - -## Why FIPS mode is particularly onerous -Perhaps the biggest problems incurred by enabling FIPS mode involve applications that use the .NET Framework. -If FIPS mode is enabled, the .NET Framework disallows the use of all non-validated cryptographic classes. -The problem here is that the Framework offers multiple implementations of most algorithms, and not all of them have been submitted for validation, even though they are similar or identical to implementations that have been approved. - -For example, the .NET Framework currently provides three implementations of the SHA256 hashing algorithm: SHA256Cng, SHA256CryptoServiceProvider, and SHA256Managed. -The first two use “platform invoke” (a.k.a., “p/invoke”) to use Windows’ underlying implementations, which are FIPS-validated. -By contrast, SHA256Managed, like all the other crypto classes ending with “Managed”, is implemented strictly in .NET managed code and doesn’t use the underlying platform implementations. -Although it is an acceptably strong hashing algorithm for most uses, the Managed implementations have never been submitted to NIST for validation. -And so if an application tries to use this class and FIPS mode is enabled, the Framework will raise an exception and not allow the class to be used; this exception will almost always cause the application to fail, if not terminate immediately. - -Compounding the problem is that in most cases the Managed implementations of the various cryptographic algorithms have been available much longer than their Cng and CryptoServiceProvider counterparts, and on top of that, the Managed implementations tend to be significantly faster. -Another significant problem with FIPS mode is that until very recently there was no NIST-approved way to derive an encryption key from a password. -That blocked use of the Bitlocker Drive Encryption feature that stored a computer’s 48-character recovery password to Active Directory. -Using the newer standard for password-based key derivation functions, this is no longer a problem beginning with Windows 8.1 and Windows Server 2012 R2, but it remains a problem for older versions of Windows. - -Finally, the .NET Framework’s enforcement of FIPS mode cannot tell whether any particular use of a cryptographic class is not for security purposes and thus not in violation of standards. - -## Is Microsoft contradicting government regulations? -Government regulations may continue to mandate that FIPS mode be enabled on government computers running Windows. -Our updated recommendations do not contradict or conflict with government guidance: we’re not telling customers to turn it off – our recommendation is that it’s each customer’s decision to make. -Our updated guidance reflects our belief there is not a compelling reason for our customers that are not subject to government regulations to enable FIPS mode. - -## References - -- [FIPS 140 Evaluation](http://technet.microsoft.com/library/cc750357.aspx) -- ["System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing" security setting effects in Windows XP and in later versions of Windows](http://support.microsoft.com/kb/811833) \ No newline at end of file diff --git a/windows/security/threat-protection/windows-security-baselines/sticking-with-well-known-and-proven-solutions.md b/windows/security/threat-protection/windows-security-baselines/sticking-with-well-known-and-proven-solutions.md new file mode 100644 index 0000000000..dac5c6d54c --- /dev/null +++ b/windows/security/threat-protection/windows-security-baselines/sticking-with-well-known-and-proven-solutions.md @@ -0,0 +1,77 @@ +--- +title: Sticking with Well-Known and Proven Solutions +description: Using proven enterprise management technologies instead of creating and maintaining your own will increase flexibility and reduce costs. +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +author: aaronmar +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 03/15/2019 +--- + +# Sticking with Well-Known and Proven Solutions + +**Applies to** + - Windows 10 + - Windows Server + +I work with a lot of customers, and there are some problems I see over and over. +One problem that I've seen and been thinking about a lot lately is the way that a number of customers paint themselves into a corner through excessive customization of their environment. +Lately I've been making the case that they would be much better off by sticking with defaults or broadly known and well-tested configurations, and with proven enterprise solutions over home-grown tools. + +First, let me make it clear that these situations generally haven't arisen from anyone's bad decisions. +They were reasonable choices and possibly the best options available when the decisions were first made. +However, desktop and application deployment, enterprise management and security guidance have evolved and matured rapidly over the past several years. +We know a lot today that we didn't ten years ago. +If your organization (like many others) is planning to migrate to Windows 10, this is a perfect opportunity to revisit those decisions. +I liken it to moving to a new house after living in the old one for ten years. +You can pack all your old dusty, broken and ill-fitting possessions into boxes, ship them to the new house, then unpack the boxes and figure out where to fit all the clutter. +Or you can take advantage of the opportunity to get rid of detritus and enjoy the new place. + +What kinds of customizations am I talking about? +They include but are certainly not limited to home-grown software for deploying applications and monitoring desktop configuration, enforcing non-standard file and folder locations or renaming those folders, enabling unnecessary and low-value security options, reverse-engineering and then depending on or even modifying undocumented registry data, and modifying the permissions of operating system files, folders and registry keys. + +These customizations usually turn out to be expensive. +They limit flexibility, increase the cost and complexity of managing the environment, and cause strange unexpected behaviors including patch failures. +Have you had any of these issues in your environment? + +- Every piece of software to be deployed needs custom and time-consuming repackaging that is unique to your environment. +- Your custom management solutions don't work on Windows 10. +- The apps you purchase don't work the way they should without additional customization. +- Ramp-up time for new personnel takes longer than it should because they need to learn all the idiosyncrasies of your configuration. +- Bugs occur that wouldn't occur in a default or industry-standard configuration, and it takes a long time for techs to diagnose because they don't know about the quirks or realize their impact. +- You have home-grown tools or scripts that have an admin password embedded in them. (This is always a bad security risk. **Always.**) +- Your security experts don't think they're doing their job unless they put their own personal stamp on your security configuration, as if they get paid by the tweak. +- If the guy who manages your app deployment gets hit by a truck, you'll probably go out of business. +- The guy who owns the custom code insists that all commercial alternatives suck and won't work in your environment. (Perhaps you've had the sense that his ego and reality mutually agreed to separate a while ago.) + +Sometimes you need to write your own software, particularly for line-of-business (LOB) purposes. +But there is a vanishingly small need for any business to write or maintain its own desktop management or application deployment software. +Unlike proven enterprise solutions, home-grown software tends to take dependencies on platform-specific features such as hardcoded file paths or undocumented system behaviors and to use undocumented and unsupported interfaces and registry data, which makes it hard to move to a new platform or even a standard configuration of your existing platform. +They also tend not to meet the performance and scale characteristics or upgrade paths of proven products from a product group with robust testing and support organizations behind them. + +Consider the US Government Configuration Baseline (USGCB). +It includes a large set of security settings which is supposed to be mandated across the entire US Federal government. +If you apply them, you're applying the same settings that lots of other groups have tested and worked with. +Setting-specific issues will generally be well-known. +Now consider the problem that one of my customers ran into just the other day. +Along with a whole raft of other non-standard security settings, their security organization had applied the IE security option, "Do not save encrypted pages to disk," which prevents content that arrived over a secure HTTPS channel from being written to disk. +On the face of it, doesn't that sound like a good idea? +Sure! +Enable that policy! +After the new policies had been in production for a while, all of a sudden people panicked. +It was payday, and the paystub web site was showing a blank page where it was supposed to display the user's paystub as a PDF document. +Naturally, fixing this high-visibility issue was immediately assigned as the top priority to a group of tech experts who had to set aside other high priority tasks. +Now, there are USGCB settings that are known to interfere with Adobe Acrobat Reader integration with Internet Explorer, and this is where I focused my attention. +That turned out to be a dead end. +A colleague of mine eventually took to disabling bunches of settings at a time to try to narrow down the issue, until he finally traced it to "Do not save encrypted pages to disk." +Because this setting is not mandated or used by the FDCC, USGCB, or any Department of Defense configurations, the symptom and root cause was not one with which we were familiar, nor would it be one that I would expect most other people would think to focus on if they had not run into the problem themselves. +Oh and guess what? +It turns out that years ago this setting was specifically excluded from the earliest revisions of the US Air Force Standard Desktop Configuration (the ancestor of the FDCC) because of problems just like this. + +Bottom line: if you stick with the Windows defaults wherever possible or industry-standard configurations such as the Microsoft Windows security guidance or the USGCB, and use proven enterprise management technologies instead of creating and maintaining your own, you will increase flexibility, reduce costs, and be better able to focus on your organization's real mission. \ No newline at end of file From 9e78649302afe4830cb247aab6aea38fcf51036f Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 15 Mar 2019 14:53:18 -0700 Subject: [PATCH 023/349] addede new topic --- windows/security/threat-protection/TOC.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index bf4d93e534..5d76fbbc35 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -1014,7 +1014,9 @@ #### [Security Compliance Toolkit](windows-security-baselines/security-compliance-toolkit-10.md) #### [Get support](windows-security-baselines/get-support-for-security-baselines.md) ####Windows Security Blog Posts -##### [Why We’re Not Recommending "FIPS Mode" Anymore]((windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md) +##### [Sticking with Well-Known and Proven Solutions](windows-security-baselines/sticking-with-well-known-and-proven-solutions.md) +##### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md) + ### [MBSA removal and alternatives](mbsa-removal-and-guidance.md) From 0c1f50c33497547aa0a579cbb6dbc2a394dbe048 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 15 Mar 2019 15:24:43 -0700 Subject: [PATCH 024/349] new topic --- windows/security/threat-protection/TOC.md | 1 + .../configuring-account-lockout.md | 100 ++++++++++++++++++ 2 files changed, 101 insertions(+) create mode 100644 windows/security/threat-protection/windows-security-baselines/configuring-account-lockout.md diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 5d76fbbc35..df40332709 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -1016,6 +1016,7 @@ ####Windows Security Blog Posts ##### [Sticking with Well-Known and Proven Solutions](windows-security-baselines/sticking-with-well-known-and-proven-solutions.md) ##### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md) +##### [Configuring Account Lockout](windows-security-baselines/configuring-account-lockout.md) ### [MBSA removal and alternatives](mbsa-removal-and-guidance.md) diff --git a/windows/security/threat-protection/windows-security-baselines/configuring-account-lockout.md b/windows/security/threat-protection/windows-security-baselines/configuring-account-lockout.md new file mode 100644 index 0000000000..3c6b559a54 --- /dev/null +++ b/windows/security/threat-protection/windows-security-baselines/configuring-account-lockout.md @@ -0,0 +1,100 @@ +--- +title: Configuring Account Lockout +description: Covers the issues and tradeoffs of enabling account lockout and how tightly to enforce it. +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +author: aaronmar +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 03/15/2019 +--- + +# Configuring Account Lockout + +**Applies to** + - Windows 10 + - Windows Server + + We can recommend an ideal configuration for most of the settings in our security guidance. + For example, the “Debug programs” privilege should be granted to Administrators and to no one else. + For account lockout, however, there is no “one size fits all” setting, but there’s a lot of heated discussion whenever anyone tries to pick one. + Ultimately, each organization must determine what best meets their own needs. + This blog post tries to help by discussing the issues and tradeoffs of enabling account lockout and how tightly to enforce it. + We had to pick _something_ for the baseline, so we discuss the settings we selected and why we changed them from what we had selected for other recent baselines. + Again, though, this is one where you should take a close look at the threats and tradeoffs for your own environment before applying the settings we picked. + +## The Basics of Account Lockout + +The purpose of account lockout is to make it harder for password-guessing attacks to succeed. +If account lockout is not configured, an attacker can automate an attempt to log on with different user accounts, trying common passwords as well as every possible combination of eight or fewer characters in a very short amount of time, until one finally works. +When account lockout is configured, Windows locks the account after a certain number of failed logon attempts, and blocks further logon attempts even if the correct password is supplied. + +Windows account lockout can be configured with these three settings: + +- _Account lockout threshold_: the number of failed logon attempts that trigger account lockout. If set to 0, account lockout is disabled and accounts are never locked out. +- _Account lockout duration_: the number of minutes that an account remains locked out before it’s automatically unlocked. If set to 0, the account remains locked out until an administrator explicitly unlocks it. +- _Reset account lockout counter after_: the number of minutes after a failed logon attempt before the bad-logon counter is reset to 0. The counter is also reset after a successful logon. + +## Account Lockout Tradeoffs + +While account lockout can help prevent intrusion, it can also expose your organization to accidental lockouts as well as to denial of service attacks. + +Not every bad logon attempt reflects an attempt to gain unauthorized access. +Users sometimes forget their passwords. +Also, applications, particularly those that use saved passwords, are often unaware of a password change and continue to use the old password, sometimes automatically retrying the same password many times in a short amount of time. +This becomes increasingly true as users have more devices such as phones and tablets that log on to get email or other corpnet access. +If the account lockout threshold is set too low, you are likely to see a lot of accidental lockouts. +In addition to users not being able to perform their work, lockouts can lead to expensive helpdesk calls, especially when administrator intervention is required to unlock the account. +Finding the root cause of accidental lockouts can be time-consuming as well. +It’s therefore good to set a threshold that avoids accidental lockouts, while not setting the threshold so high that attackers are given too much opportunity to succeed. +Setting the lockout duration to a “reasonable” non-zero value can also reduce helpdesk calls. +The combination of threshold, lockout duration and reset settings determines how many guesses attackers get per day; ideally you slow them down to the point that it becomes impractical or at least not worthwhile for them to pursue this type of attack. + +At the same time, whenever account lockout is configured at all it is easy for an attacker to conduct a denial of service attack and deliberately lock out accounts. +It doesn’t matter whether you set the threshold to 5 or 50 – an automated attack can perform that many deliberately failed logon attempts on a large number of accounts very quickly and lock them out. +If the lockout duration is short, an attacker can still maintain a sustained attack, locking out accounts as soon as they become unlocked. +If the lockout duration is indefinite (0), then this can be a crippling attack. + +## Reducing or Eliminating the Need for Account Lockout + +If you employ other mitigations against password-guessing attacks, you can afford to set a higher lockout threshold or even disable account lockout altogether. +Some of these mitigations are: + +- Proactively monitor for failed logon events and have a robust response mechanism in place when password-guessing is detected. +- Configure “Smart card required for interactive logon” (SCRIL), and do not manually set a password for the account after doing so. When SCRIL is configured, the account’s password hash is replaced with a random value, making a password logon effectively impossible. When SCRIL is configured, therefore, account lockout should be disabled to prevent denial of service. +- Require long passwords. The entire set of eight-character passwords can be tested in a short amount of time. Windows policies allow you to set a minimum length of 14 characters, which is the setting we recommend. You can set a minimum password length greater than 14 characters by using [fine-grained password polices](https://docs.microsoft.com/windows-server/identity/ad-ds/get-started/adac/introduction-to-active-directory-administrative-center-enhancements--level-100-#fine_grained_pswd_policy_mgmt). Passwords can be up to 256 characters + +## Baseline Selections + +As we said at the outset, there is no single account lockout configuration that works for all organizations. +Our recommendation regarding account lockout is to consider the tradeoffs and pick what’s right for your situation. +However, our security guidance includes GPOs and security templates that you can apply directly, and it’s not possible to set the account lockout threshold in them to “do the right thing”. So we have to pick something. + +The settings in our baselines are intended for large audiences. +We recognize that many organizations will apply these settings without reading the fine print or considering the nuances and tradeoffs. +We have to try to find the right balance between security and “break everything” that will work reasonably well for most organizations. + +As of Oct 15, 2015, we have selected a threshold of 10 bad attempts, a 15 minute lockout duration, and counter reset after 15 minutes. +That threshold value is a change from the Windows 8.1/Windows Server 2012 R2 beta guidance as well as from past baselines. + +The threshold we published with the Windows 7/Windows Server 2008 R2 guidance was 50 bad attempts. +With the 15 minute duration and 15 minute counter reset, that gave attackers up to 200 guesses per hour. +For Windows 8/Windows Server 2012, we had changed it to 5, after much discussion with the external security community, including the Center for Internet Security (CIS), the US National Security Agency (NSA), the US Defense Information Systems Agency (DISA) and others. The thinking at that point was that a typical user is unlikely to mistype their password five times unless they really don’t remember it, in which case they’ll probably need to call the helpdesk anyway. +We have increased that threshold to 10 because our support engineers have seen many accidental lockouts, particularly with the increase in devices per user. +Increasing the threshold to 10 should reduce the number of accidental lockouts, while at the same time not giving attackers 200 guesses per hour again. + +## Account Lockout Technical Errata + +The public documentation may not be clear about these points, and they are worth knowing: + +An attempted logon using either of an account’s two most recent previous passwords will not succeed, but will not increment the bad-logon counter either. +In other words, repeated use of a saved password will trigger account lockout only after the third password change. + +Failed attempts to unlock a workstation can cause account lockout even if the “Interactive logon: Require Domain Controller authentication to unlock workstation” security option is disabled. +Windows doesn’t need to contact a DC for an unlock if you enter the same password that you logged on with, but if you enter a different password, Windows has to contact a DC in case you had changed your password from another machine. +It’s actually easy to lock out an account on a locked workstation in seconds just by pressing Ctrl+Alt+Del and then holding down the Enter key. \ No newline at end of file From 0b4c8edbfe02b5b561ebe689e6d277c6a33a02bb Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 15 Mar 2019 15:34:08 -0700 Subject: [PATCH 025/349] new post --- windows/security/threat-protection/TOC.md | 1 + .../blocking-remote-use-of-local-accounts.md | 74 +++++++++++++++++++ 2 files changed, 75 insertions(+) create mode 100644 windows/security/threat-protection/windows-security-baselines/blocking-remote-use-of-local-accounts.md diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index df40332709..f189975947 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -1017,6 +1017,7 @@ ##### [Sticking with Well-Known and Proven Solutions](windows-security-baselines/sticking-with-well-known-and-proven-solutions.md) ##### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md) ##### [Configuring Account Lockout](windows-security-baselines/configuring-account-lockout.md) +##### [Blocking Remote Use of Local Accounts](windows-security-baselines/blocking-remote-use-of-local-accounts.md) ### [MBSA removal and alternatives](mbsa-removal-and-guidance.md) diff --git a/windows/security/threat-protection/windows-security-baselines/blocking-remote-use-of-local-accounts.md b/windows/security/threat-protection/windows-security-baselines/blocking-remote-use-of-local-accounts.md new file mode 100644 index 0000000000..42298233a6 --- /dev/null +++ b/windows/security/threat-protection/windows-security-baselines/blocking-remote-use-of-local-accounts.md @@ -0,0 +1,74 @@ +--- +title: Blocking Remote Use of Local Accounts +description: Covers the issues and tradeoffs of enabling account lockout and how tightly to enforce it. +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +author: aaronmar +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 03/15/2019 +--- + +# Blocking Remote Use of Local Accounts + +**Applies to** + - Windows 10 + - Windows Server + +The use of local accounts for remote access in Active Directory environments is problematic for a number of reasons. +By far, the biggest problem is that when an administrative local account has the same user name and password on multiple machines, an attacker with administrative rights on one machine can easily obtain the account’s password hash from the local Security Accounts Manager (SAM) database and use it to gain administrative rights over the other machines using “pass the hash” techniques. + +Our latest security guidance responds to these problems by taking advantage of new Windows features to block remote logons by local accounts. +Windows 8.1 and Windows Server 2012 R2 introduced two new security identifiers (SIDs), which are also defined on Windows 7, Windows 8, Windows Server 2008 R2 and Windows Server 2012 after installing [KB 2871997](http://support.microsoft.com/kb/2871997): + +- S-1-5-113: NT AUTHORITY\Local account +- S-1-5-114: NT AUTHORITY\Local account and member of Administrators group + +The former SID is added to the user’s access token at the time of logon if the user account being authenticated is a local account. +The latter SID is also added to the token if the local account is a member of the BUILTIN\Administrators group. +These SIDs can grant or deny access to all local accounts or all administrative local accounts – for example, in User Rights Assignments to “Deny access to this computer from the network” and “Deny log on through Remote Desktop Services”, as we recommend in our latest security guidance. +Prior to the definition of these SIDs, you would have had to explicitly name each local account to be restricted to achieve the same effect. + +In the initial release of the Windows 8.1 and Windows Server 2012 R2 guidance, we denied network and remote desktop logon to “Local account” (S-1-5-113) for all Windows client and server configurations, which blocks all remote access for all local accounts. + +We have since discovered that Failover Clustering relies on a non-administrative local account (CLIUSR) for cluster node management and that blocking its network logon access causes cluster services to fail. +Because the CLIUSR account is not a member of the Administrators group, replacing S-1-5-113 with S-1-5-114 in the “Deny access to this computer from the network” setting allows cluster services to work correctly while still providing protection against “pass the hash” types of attacks by denying network logon to administrative local accounts. + +While we could keep the guidance as it is and add a “special case” footnote for failover cluster scenarios, we will instead opt to simplify deployments and change the Windows Server 2012 R2 Member Server baseline as follows: + +Policy Path + + +Computer Configuration\Windows Settings\Local Policies\User Rights Assignment + + +Policy Name + + +Deny access to this computer from the network + + +Original Value + + +Guests, Local account (*) + + +New Value + + +Guests, Local account and member of Administrators group (*) + +The guidance also recommends adding Domain Admins and Enterprise Admins to these restrictions except on domain controllers and dedicated admin workstations. +DA and EA are domain-specific and can’t be specified in generic GPO baselines. + +Note that this change applies only to the Member Server baseline and that the restriction on remote desktop logon is not being changed. +Organizations can still choose to deny network access to “Local account” for non-clustered servers. + +Note also that the restrictions on local accounts are intended for Active Directory domain-joined systems. +Non-joined, workgroup Windows computers cannot authenticate domain accounts, so if you apply restrictions against remote use of local accounts on these systems, you will be able to log on only at the console. \ No newline at end of file From 0b386277dcf5ac922471f275672e9a14e7b9f762 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 15 Mar 2019 16:09:10 -0700 Subject: [PATCH 026/349] new topic --- windows/security/threat-protection/TOC.md | 1 + ...ing-the-untrusted-font-blocking-setting.md | 24 +++++++++++++++++++ 2 files changed, 25 insertions(+) create mode 100644 windows/security/threat-protection/windows-security-baselines/dropping-the-untrusted-font-blocking-setting.md diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index f189975947..9699b0be4c 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -1018,6 +1018,7 @@ ##### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md) ##### [Configuring Account Lockout](windows-security-baselines/configuring-account-lockout.md) ##### [Blocking Remote Use of Local Accounts](windows-security-baselines/blocking-remote-use-of-local-accounts.md) +##### [Dropping the “Untrusted Font Blocking” setting](windows-security-baselines/dropping-the-untrusted-font-blocking-setting.md) ### [MBSA removal and alternatives](mbsa-removal-and-guidance.md) diff --git a/windows/security/threat-protection/windows-security-baselines/dropping-the-untrusted-font-blocking-setting.md b/windows/security/threat-protection/windows-security-baselines/dropping-the-untrusted-font-blocking-setting.md new file mode 100644 index 0000000000..a96127eea1 --- /dev/null +++ b/windows/security/threat-protection/windows-security-baselines/dropping-the-untrusted-font-blocking-setting.md @@ -0,0 +1,24 @@ +--- +title: Dropping the “Untrusted Font Blocking” setting +description: Windows 10 includes additional mitigations that make this setting less important, and it breaks several legitimate scenarios unnecessarily. +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +author: aaronmar +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 03/15/2019 +--- + +# Dropping the “Untrusted Font Blocking” setting + +**Applies to** + - Windows 10 + - Windows Server + + + From 5cb141df8d80e0e409719e262d9e29b1e6724477 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Tue, 19 Mar 2019 02:17:23 +0000 Subject: [PATCH 027/349] Updated index.md --- windows/security/threat-protection/index.md | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/index.md b/windows/security/threat-protection/index.md index 44c4ef2a2f..73d55c394e 100644 --- a/windows/security/threat-protection/index.md +++ b/windows/security/threat-protection/index.md @@ -17,6 +17,7 @@ ms.localizationpriority: medium

Windows Defender ATP

+ @@ -25,15 +26,22 @@ ms.localizationpriority: medium - - +

Threat & Vulnerability Management

Attack surface reduction

Next generation protection

Endpoint detection and response

Microsoft Threat Experts
+
Management and APIs
Microsoft Threat Protection
Microsoft Threat Protection

+ + +**[Threat & Vulnerability Management](windows-defender-atp/overview-threat-and-vulnerability-mgt.md)**
+Short description +- [Hardware based isolation](windows-defender-atp/overview-hardware-based-isolation.md) +- [Application control](windows-defender-application-control/windows-defender-application-control.md) +- [Device control](device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md) From 825c99d40871ecbf2225d945658c9ba86a4af0e8 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Tue, 19 Mar 2019 09:53:13 -0700 Subject: [PATCH 028/349] Chandler feedback --- windows/configuration/kiosk-shelllauncher.md | 16 ++++++++++++---- 1 file changed, 12 insertions(+), 4 deletions(-) diff --git a/windows/configuration/kiosk-shelllauncher.md b/windows/configuration/kiosk-shelllauncher.md index 95dc8e3528..13b934beb1 100644 --- a/windows/configuration/kiosk-shelllauncher.md +++ b/windows/configuration/kiosk-shelllauncher.md @@ -40,6 +40,12 @@ Shell Launcher v1 replaces `explorer.exe`, the default shell, with `eshell.exe` Shell Launcher v2 replaces `explorer.exe` with `customshellhost.exe`. This new executable file can launch a Windows desktop application or a UWP app. +In addition to allowing you to use a UWP app for your replacement shell, Shell Launcher v2 offers additional enhancements: +- You can use a custom Windows desktop application that can then launch UWP apps, such as **Settings** and **Touch Keyboard**. +- From a custom UWP shell, you can launch secondary views and run on multiple monitors. +- The custom shell app runs in full screen, and and can run other apps in full screen on user’s demand. + +For sample XML configurations for the different app combinations, see [Samples for Shell Launcher v2](https://github.com/Microsoft/Windows-iotcore-samples/tree/develop/Samples/ShellLauncherV2). ## Requirements @@ -84,7 +90,7 @@ You can use XML and a [custom OMA-URI setting](#custom-oma-uri-setting) to confi ### XML for Shell Launcher configuration -The following XML sample works for Shell Launcher v1: +The following XML sample works for **Shell Launcher v1**: ``` @@ -102,7 +108,7 @@ The following XML sample works for Shell Launcher v1: ``` -For Shell Launcher v2, you will use a different schema reference and a different app type for `Shell`, as shown in the following example. +For **Shell Launcher v2**, you will use a different schema reference and a different app type for `Shell`, as shown in the following example. ``` @@ -123,7 +129,7 @@ xmlns:v2="http://schemas.microsoft.com/ShellLauncher/2019/Configuration"> ### Custom OMA-URI setting -In your MDM service, you can create a [custom OMA-URI setting](https://docs.microsoft.com/intune/custom-settings-windows-10) to configure Shell Launcher v1 or v2. (The XML that you use for your setting will determine whether you apply Shell Launcher v1 or v2.) +In your MDM service, you can create a [custom OMA-URI setting](https://docs.microsoft.com/intune/custom-settings-windows-10) to configure Shell Launcher v1 or v2. (The [XML](#xml-for-shell-launcher-configuration) that you use for your setting will determine whether you apply Shell Launcher v1 or v2.) The OMA-URI path is `./Device/Vendor/MSFT/AssignedAccess/ShellLauncher`. @@ -131,7 +137,9 @@ For the value, you can select data type `String` and paste the desired configura ## Configure a custom shell using PowerShell -Modify the following PowerShell script as appropriate. The comments in the sample script explain the purpose of each section and tell you where you will want to change the script for your purposes. Save your script with the extension .ps1, open Windows PowerShell as administrator, and run the script on the kiosk device. +For scripts for Shell Launcher v2, see [Shell Launcher v2 Bridge WMI sample scripts](https://github.com/Microsoft/Windows-iotcore-samples/blob/develop/Samples/ShellLauncherV2/SampleBridgeWmiScripts/README.md). + +For Shell Launcher v1, modify the following PowerShell script as appropriate. The comments in the sample script explain the purpose of each section and tell you where you will want to change the script for your purposes. Save your script with the extension .ps1, open Windows PowerShell as administrator, and run the script on the kiosk device. ``` # Check if shell launcher license is enabled From 5f0e55f678678fa182c6c1c6f65fa8e45c6576f8 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Tue, 19 Mar 2019 10:04:31 -0700 Subject: [PATCH 029/349] art plus xml attribute --- windows/configuration/images/slv2-oma-uri.png | Bin 0 -> 19784 bytes windows/configuration/kiosk-shelllauncher.md | 9 ++++++++- 2 files changed, 8 insertions(+), 1 deletion(-) create mode 100644 windows/configuration/images/slv2-oma-uri.png diff --git a/windows/configuration/images/slv2-oma-uri.png b/windows/configuration/images/slv2-oma-uri.png new file mode 100644 index 0000000000000000000000000000000000000000..98ee252b6390251ac559ecb2a71d7a061d9a6ca0 GIT binary patch literal 19784 zcmce;by!sGyEaTo4&5O!bO}gFNvAXnARtIL$e@Iz(nAj2okL3~QqqHzNF&V%s7Oo4 zyLg^we|zuu-M{1eecvDNalio#Yu0_QYhCwwo!5EZYoc|vRSEIw@X^rF2-Ve;^wH2T zG||w|VYnE;E1s6o1;7t82RSZS_`e(YF-90Y_H;Xo!{xb^>-{>ub z254+PBC)y3fL|v0FTkf6cfTmZkd#Bhz`rEB>EGXMiFcfCP)XRt3f)J=nceh(9b$#b zvfDj}2bY`v$eN*Ig$78_n% zdm1zpjt-nY)`S4=zg-wne|TKl!wMOJ?P2Q~XIGI>fBSl{;Ks^BL-a`G*%vuVx{z#a z*X5E%&!u_L`S-yDCIL!bK~i{(X%k^Mecl%un-QM1Fo7BTSP%`y!;?+%uJioc^ZX~R zZ^2`0_&5gCt^T{MTcUM-qqh)w0RjSoQtNvWE;JzGifD!k%d1k?SRwnbnh;b0hZBuQ z;4d?mcjAdZV2iC@TQ?}38x&{oAtzJir@0olZ<)dl8n6BcdU<*tybr#7Pug=A4cxEP zo%`X{`mC7FBFgTkyGy=~73=ej4!0*Bw8I`HD|YI$ovfUBmEA#|c}|DToRK?l^qLXygB-oF== z(Yi8+#_mhng5kL41Bs>oM7QSZ+AU49Bsy)f_YsLsF5z} zYAcuQYwmY*b&kX6E9c`RBsx8lCoblXivNuoN{$kGpGRijr^AG_d-KoTYnGMPYZx7b z8c?*32j3i(Oegn-fXBvzP8t^#)b-W}w722*X*n$DTF&`HzgN0$@3M05dU;Rg_UcGa zYF}I1(r^}2e>wJYuj>}ZTPrvBAsS_L`0-cmWe;`dr{^?DbaXbccx61$kFToKO|?#p ztWCj@d@S0YlT_OS+q1#fvpV^YuSbN(+kZXV18-JYUL%}cEM4enzm#x57cp*b_HG~N zee>wLFJtyYxYeigD7QgBic2O4#mY2cS?~ovyfOhRU{Dli9|Og2Sj9MpBzFJOH;mvBvUad40jeB}^);;?d*cWRqTN2^=R0S&3X z3+Q5)kUZPZgq!UIT)EqgI$m{cfvC)NQD_v9jT{L=?I+E3%C{5%kZ^=X#Fd1_52f*& zMFd=_OwZJqJ+T7DY`u#fis3Bvq0GQygUukYF30j@Vm`eP2;WK%`jP&@W+RP2%Fx+X zF0Ks8Vko{6Agt~FgQPXx;6Ye!@Ewe9ezk@J=sNk74|<2OG0I~!Hku9%e}O08U%;8${};&q2XJ!378}POUk(Oe z4R)C|IE*t&bRDMF?JP9&-fox}uBF7~FT7c4eH?UkW_kO^a+o952sL<)6TFY}Q$c-y z(Q8}=pWN0!u4W~bd2=({gF}a#9st0nW$aL{FXccAC*o76fx|EY50mpjve^BJ>{xhj z@Pvj*By>?zRP=JT>ohtHY}%)PZ~pqpT5QYCPn@o3|8US@AaX)w6H<`_a= z1L61;^LeaB zxtJ~rjHWAv0JrW+RT15thqa6gdLMf<+4e4d#!XNIXl|3aIUY+u8R4k^m-#{!lOr^c zG4@XLuIy$!Sd+R-y8oV1{~Yq~=b@(f`EhpFHq-5ygG%scJ83*VXj!)Ai6k&dS|DXr zY~aH7DnJSg(*c7Ee-4ORBoJsn?mW$H+w0UfUk4y8Tij#0&Bueg>+thLv8vDB@-zGa zKC8R8{pdvIcKn&y5_kPFo(UB0{So2PBC=MuZ!K;MO?Ym}4h!JZ{a)ggmy=o@__6){ z{rXlj;=rKxDXkxplgFkhh}fW)r+X`{UggpTl&#_6_lCZm;LigE!=X~_7tP&-G)|R? zto#p__8#BP*$7yA5jq>UQ+Y}>&Az0b~^9)1TS>)iCUp((!N(lat!VhJEwjW-e-CSR?Lm5OQTMs?zdX;PaPSaWsKl8?v z{drvu)Ccb!6Yk^J#+HGv@E-n3WtqkEknCDbPMmCzBZo(bJI7rThlWz_WQ!IbNPe0w;;d zct&X~fp=E6w~oBy()IE~xfQ3Ht6{io3x0FM0V2>4GyN0axPQ;m`p5XigMw-1jumY85(wXb0J-0TEO>- zQ{z)N;~bgWbz+N)vC-3x6Jej*?dYveBSdHHlrU8uG( zwcw0GPYQuIYk2<_=PBfg{gS$mn{z;5VBp&0E~%6AXkzC5S8iM@pO~O#Qu_OqgJ}b(XrZ~s;nqKnRq;w_ zQw{maCBh2*eii>cge!aOHzkmalVJ^8JvVet#PC~)H3%Zsea@svA_1DRNz-&bVvcJy z%;|b@65p?dq?fgnyyER|V*pliF>qqFj*INaGG)8G(@=PCqV9KO1^%j`iG)x zsn-11LdkhR-H3WK{d!2O4)(@A;}d3SeL!MjRqRunAm82aZ;V%&FdNxYGe7buPD9$5X|0lG;l*ckAfQBYh4>%xp05~!hKv8=UbIu!p znb;qfn-3%d?+5DSKh^vHGt}PoQ~%DJCbe!nY(_@(A8e>UhYK&+zMG8}vL6M?!rvJD zpA-Ek0CgD4nQw733)ZBZ^VL}TIoIa1H*xj0rH#Zsqz1naygVsZO+Z8~ zyDqn%1CY(5P5ioKMIDbv`f9&deCee@9fpmkXMgjD96pnNAO{B>fKh zsc+W>Zq`q}c?f(rw(tWQul;?~&y%QMmbVwGvKJG->bh=PzPS(EWH7%JDjgZn%xN7nMb;M_*J0~wxf16{3JDB zd>W`0^5TI4p-wA09{h;)6XPMpQ>V$QEF7eMqZmkzRJ|&@H4AAqDa|GfhVVMHg#M3! zoXG*;)Y7&bSN97Da}q~sy<|kykCL;)^e$<)`=a(5BgM!<5nT02CXxcPDn6(6q^QMI zV~eLi{g4X0I0jg(M&WGR#m}lIiGQ6*-E<~9QE2yfZP(33LeOz>{#hR(@D|TJNSPs6uE-Cu8sKh$1 z7$-y{>@|{$WD!=2X~LmL)v+|lk2?p$)UV{=F*$Re=P4v&5xwXMyb!a-(5nycIG{o1 ztzw`qZ8j(Ud$g~^xV|Ua?`!Zw9+e6?^Cr?xBh<|34iP**$Z20d4Z`Dax}5EFtLhiI zX(^bj3MP2?BEq_Pn?Hw=CuD&b>V+D6%%d3aryS+P3Je0=>j!MdW7{*QPW=LEn3$UDAKFQf-@m-$$PDU)f=p~%B@UPhk z4-eOOD;r7tg_SFZSt65^2sBo*w(4}4Q5uun3bz^(PBdyZ3OV~>x%4W@g1E(0Qjy^; z-29A=MBM&|&to$s_@Ly^36+SbsHv~*_Mh}8{$i`TS3uY>GzDVAS%Zh* zS*Nfd-sv7_ph+A&d4!(eT+ClLYn)#iUXRX*VOS+N&&C-I3sJQKLGo{hJVr*W;Mr&{ ztk6xehbYO)zM_hIYHDmYNbL2(!4T3=UsMsZg;f$2J6yF=VVr^izeM^c7n@dagF=9a zUOCo_banC^!|<2iJ!h~B*r+6g+W_RF9ks1XR)52+j)C(wL%kt3)8P&Y?eD|Pf4f&> z2f6nL;Mm9Bp=9;AR4d299C^edidIP-F@e(mgb8QVJa{}bH z-Dl5&vj1->AuYF$T;&C~II|xLYXKoqS2|2cAEn0+x5|DM4qQEL=_T0bWX3FirCwgv z;X&6`kMMX33}1=;CA$mF$MBB8OYa=SJtfECG=6*%06;i6{GAg6*x|{A+LXfPD8`_( zwQTo~mBw!xK726Y89BZq-o*gD%z0T``63D*BiT-KVW0|xBnvP3J>RIhj@4J79!bnp z>ttnLg0%CGLh|$RsV#34*sl0(<(4jJ(*8@1T=)RpG(3z!=CvXCeems#?)@A?JGf$U zeQ|V-s0z&7y)y}UUjnLxzy`Fk;KL!#Cxx^AD7dNy05-qtl6@8Zf-j8~`T*rU`1|2ln&OR z=-Xt3^varfAA(5LAUto& zFT{#-5MJA&qVphu|CH<7#)}M$f z7(l5biSBvd#V(b_+rlk4xV% z9g`!r``clgtI;eFZbPR(R`QL%7Yc?B5$joToHK>3O1e^BM&KUX>f;BRVG9acse!6N z8xffFyFpjIrP5pAL9^knTV9;Yv02@9ISZN%RlYS%)%9PGDx#?MK&+BI_R^TjyPtXM z__Ahx&D=C}bNTxkh+Xbm63Er#oU(GWudihbGU#p_pIhD9 z=M`jew4sXJ7$K?TK=0p7@iKACYA#ZFi|)HG9E4p~IPmCu!hx>YcdlQ=G>0e%-6O^d zQO+7FVX8tgBn`bTgx84M@)?dDL05t5O#YR~#8kn&0K}OqG~Rg+!%72#PTC4C=!!5A zA=Eec^psw#l1uEAK0?~LqQ1RO1?aKHsjJot%Wpv8mpzJmkAl}+Jx5!SKXRkqYk44+ zwfV*C=CJyT3^Ba?xjl@b-@}VD&~-(+2+UB}S?sl^uw+Z8Dn}e}9eHd+RC* zq3c-6k|GIgh%NnL4incvs|wtB=ccm3{27#7*WLmWYq~C~6{THh6c%OMlqDr5VQ27U z@AFVqPP?-O+-;R-2s?ILS^GPwk~8`fzjO9F&^%@{cxnbcR0#Eo)uI^V6^>Ae8j{zW zMyNXo_B~NmX0tnNG-JArN*KCchjIBOjfFc8tp|5(9#NU@mPt>vl{Y90{T1pFe7;C* zD1ESqncsP->fX6Gm>+!Ze;5VOu5Jb6S!1RSMUp*UvAz7DC-*vN{U&jxc>~L|0){%T ze1sBf-ly?I`N$;yXN_Jk=iI?r?wrFs=Z~o9f9kCmp0nWEFxk}oVW=usYJsQpdlK8! zMVzZp2#d_jx=nBdc|uZD(7^Grg*FKK6B>muErG$PDJqL7LDCj3T8C=TWLIHO?jFRj zLrv2QvQcEfKi@N><^8l7Kd!J<19LDr7kq(_G}1TLeG=fvKLtyiWntzEqGnN#)fG!2 z;%V9;g#n8qbW{axhPh&m)+?KkgDF& zO=?NUV+}ZFIQdpzG`S*COu>wRuJnslv^tpUNybsw{SF7tyhWqRA~7jD)zsKcubbyl zG*OEsRH5AsX1Q_UQ6-jPakWnRyhP^HCNk5A)SXQMTEQ2o*zugsl%VObG=7Ci))z@^ zlCX6RmwS-1AcVBSe1U{LSW`tvz?dohJnOGIFaK%uXCI};`LTt{(8u2nT&zEU5cYlH) zB7~nyH*cQV2=#v&Wv=+_1}Sl~zzK?sa-DJp(O^ZAx6KPEWq|Bcs0qPVB9SHz&gjKi zuQS_RYn&gw;b`FPDVt>Z_Ktl^Ag9B|ll*XCJe}xPrbzKa#w}qV~Jh zsHk{0(yD=@_1j!mJLiyBzZu1nEo~@zd9RIeB zJlF*X;*COQ3kN(!(XRItg)OR%r|W`JjqNx(TVFOHKsqi_*t0kLVGFK`Y|-KkEgJ3j zFb8`>yu9LA%9!T&hcTySFr53_iAc!NM==D!96Lx%I(5S#q~bm647j@vsTe{;{w-w) zx^I+WkL%VOcn+A>7Xq2X;>C8h`hC9EO6~5y@9@}X|IfjiIpJT8v|sLv)}Kfdn+K3C zbezD)E9L0rj9c90FSvD5ZYtYfs?>RveIybd{qJ2d&?;xV!gyDxT2|`%G3sw3_Yv#8 z`?Vrs{p&JLw&?$B@BAY7?7vd3JEij9mm&Y%-uS->o|@v7*QbVmwddRawC5j(Z0pEv zMzZeoN0B=zk>V~Sf77T)WXFEb6Tq8jz1-#PXV=b?ZuL9bym`Uvy}S67C-!Olza(%P zD8NM;sDec?^b0$TRhVq7c89tdCT@Ov?;-p8*pXW&{?3Cd%Xa?>dCvFXK^ner;9n|( zmnSD@ZWTAfloC;*P+v7gnwOKZyOovvp$arHa4Xj*%~{y)uLGB;CBlC90}kbtO+rV& zsA$Er10xaT2Pv+5%N^HFu5 z2`R=>vgWWC(-31ytzUnL?n}Ph>o`qQsJoNMCT)?glEhU)?p7q$`DNGbr9*yT3q@LJ z{(`>abGSbQbzBc`#M6;>ie=@CeRFr(Ilz`{vEZ&{gRU_k|7BOKSWCVvAG9&F$81(~ z@v8K8{~Q3`_IKznahTR48-j0xt`QVwQ9Poy1mB<8#-4wPe0)6fzO%W~%Xi@y)B zR2fzBLel+_`8qlUqlDr(_6)WtyqFS)LFkMdO7Zo{ob!{B{c-5w#^)^Lx##xVw=IA$$G1b~Em7r2*AdDsR<(SkS-!w47Ok!;`L(j>2+e+X~!=OdyCf!u6FYh7w zu&+^c-XG2`tKQAg>_6N3;Pg-zF~aGRO8EZ_A%HtolTjxt4G*yr$%m+<#=Zfk=VHo! z{q{czYCzyz`U9dFF2XblAqUlDsq2ijvbTivZ2pQ$4{&;c&XJPD{M9t%u3b}%Bw7NT zioe@6Ajs8}N9@of-lYL6R#UV0?y0){9ZN6Z^k+Dk-Tz{-1J$P4x>JdWq@LfbWgiyj z&H^Rlr+5&PBTd@kG|6G1C#9r4_69YWDhfZ^&;X+6zp0H*}L^5TR}+W((K@6OO;p=up!{P1C0Ae7!_ zxM0Z9nPBu1oFw~Ekp8& z!-qTjdW5~q(HK~stQk8^ch?zF^lU@dG`{Cf2;U?#2yX;Tja$CsAj z8oLDj4w9{9fXOBc4`lpNoT!~S6K*9n&q4lPY;BZ%Pe^~VyJTj*Ay*aS@_~#~CvWlN zt6zY1_{5Jg(H7YJ0_d5WyGsB0g!-V#dfNubaL#1a#;U9;1X2Qzit>Zy>KL*&~XwXoR;Yemlo0yJOvM zhWb!eiRNhG5HTcrdVYQA3D0J3X0;d;iG&)wuSlxhPASJbDJ5&w&%N*~Db|=_a4a=`7aSN0;nU8g{c6s)`A@q^G zS<}xmgZpo#cNtfwPSl|iiQQfALm1ROWd{rE6k)5^m#4zlquJuJ*T<6-4Xlc3I7r$M zP|oY0Oqx`%UskH#kH@NlNMjlF0^XfV8BsnTy5d)nXzM+qHy#S?`V#cRy?p%?s7Z$#^5yWq_tEFVt*NUYh6Y^{6ZkGjbvd*ZrnHtuGRz zm~d$i<@pZrK_Fac%?y61F(IYGhUcaqVUD&p8K2b0PmbDY#9HmG?gT);lanY8QmI<}o{AC9LPI!K_3CkX^^sUg zVHK+`M37I}xM%!60l896zFBh;T?i>8%gi1g`^AB+%_&u^4l0nCHz?OWfYop`u_x?^ zi3~==lf$&A^+&%vt9%HF^?P34HU|_smVK^?63Fh4#A$-M~(Ao9TqiucXoH}^_ zs}InBH|Murs_ICeHYa&TOHj7X-VV0KG(XI-)(rDPq~OT^c2CnG;9zbq~6nE~gpr5(G~m(bn}-zGQhv~TO}8K0Tk2uD4w zQEa^IBfrQu3_WpUbC7dS21e+W+f0xC>|Kxl&n@H2yP2F!ZhnF_YI5r31WInM`;Ky& zK1LUsVq*$MhltGX{rPMeGc@Q^U^v05zCIhgzTs*2dvOpu>v*M*9XoHz`gsJh&M<31 zE^4vKiM+1VoV1FxMhmyfGy~6hs?jsYvZjWa9fw&1n8*Hu>l~=Ke1ZEnl%)uvam(zfiAwZ22%C;lcV@nP2T^85PJPAu3|t zeO!aKsBZJ6v!H+=4kAHZj6*G`eXT$G8@zvjQTzd{5>L1f(tS z0U}y<`C_~;m;6)**lGCG0e~{COW^=*u>*++XGE7f#G#nBOEPBiGEMKA&>t&avrD;>nF{Gg4WUnNbyIXRz3V17(pw;yT}N z@(Iqq-`oJH%=soFQz+Ng9DcdCa$#Beoomw&^}u?8;o_k5`3`_uHers04%aa`$5NX; zA;e6N`Pv9InksbJrSDPrSZ5@vd$pAvBnkjip2Cp+_@$=tKx%c}ZgkEd}I5`RiL z4mYBcWnA%UZiXds*?SXJZI~6aZyV#_1uJ2{0dbR^vYYnyYq6>5V4|?gTRGdaqb@|h z3rNZpgn?Vk!dUvXD=#&fJVKSX(&&(!Il);y++g%_3E);T8?YSNWcqI8y>+zvz8X+` zVJYY0jPdnH@9b7nd_&?lZw_RSwI5`K!E;|%R7BW*S&Q#F5u!v7TSLEo!X!bjO?UWN z4Xnv1N*t9CoS$r3+T$3{vXvk~RxId@mpocU#rciqGiz5A`{yCQ{sF~Q=Qq2y2E3&s z+BPE>gJ5y1<$!DJ2JFH{D3Wwu*0O5h#?#_{rPVLFJ%MgAh8a&0-iXyl-I&s)-Cuv} z5B&ag+wnUdO0k#-adN4%0U$P z#y}Yg9i~+6dh1j>7~z@4t1s65`e&5E7hT$(GMBfh{M*EKLyA!My&_6%r7mA2Qvz?c z4N{WA$>!?kGx9#xP$R#xhc6J+%3onE5)yT$>RDU~U^`W}QL%w)uM#umJ{5UXjp}tI zr=ruXw0N)8LcZBWF}5^G^E(L>iCjwV^Jq+Q>qnE6XnoQLedO(*%WAX(OeaXS#{zRG z6b&mz#U!dU>u%PfAIi-sA!2Z2x}z9KF5rW-epxomX4|?YabY9in|-z%zcRm1O*OB- z$tm!gKEjJh#R9Hml7-LNrA5d-SGX1lRM9&Il^Ih;)@giin#SfKRV&`n%+d;1TIS=$ zj($Zon^>oZwaDxDgFv&Wn7Pw5Dt8>K*Ejjk>+((#FaQt4uhS!8b^v$NXI6mn&2BmzNA}g`g#qpJGb*Gof~&-^uj~!zzyNf=lE;3 zD8J8r4&xeDexFG(H*TWIC59Ax+jc*?Ac8SRcCDRDzhIQ9B=<%Vj}Oht3{pyP@vGj! z_q^z>ZZ)JA(jW$=ZWeSem#`YfY_KzNKt9Pzf4$zCi0>M9P#$CZu<` zNgG2m4eUf05yP%tF=VD-pLqi|?T@u4^<@uz$tyr@82XdiZz<=dpQ)x~M@;ii2S+1z zFsUGGmKh3L0kyQ!f+Vzin?KYnoe`m!^dp+VN+i}GM0ymZ6_vl-+DbI^L~=S*=a-J^ zOV#pzvk73}_Z;ix7xs{B&*KQEuZvDXV=UPc)JN@5a_8n!uTT9#)2CS@D1mSxD}9mo zNWw6+U=H!OEChXam0IH*lLFbk>#}jZ_Ok#DKYq?ut4`Z|JHq$YX*sBTlW|(`F!6lv zW_RzfH+5D!41D`GkaCVUF3#vM(O^*Z=(e`F=Jj}Bf3Riw!E+Jg=cp{uc(053 z?@`Z(+{$DHrD#2fzUx2Le&EmnIYlkltkmuYMaV?6BT-u#7V&+;c^>dgenDn4LkW?6C~{;oIECTtl8f!Ln|8; zH^EiIBine>`7^T{rZ`Bkgta-m&3*zbp0YMMvpk&_`cv|!rJCR6Asu~(J<2p`o8$+l zv(|Bjn|CmX`;-!$gc<=0(c)FcfS)5`8c5|7z9R6UhVUB>z5?k(xLgSLAI zbTrDKdm^d?hHJ55a9JNZZ`-K)oMb~#gw>P^yOh+M2s`Dp-2o&kt80`{NCfG#jiD2B zp<3iWU=@5?=pQ4B>rFHJ!u6$_QtaHp+-O{$Pe4m*TwIkkebJz+mtS8Z^aeL%lk#D^ z*g#n%e=`EuhcQUfmztB!l|;I(_Zulnn}nk{sv2*Qi$I*jZ&Opl+EpSP^FoU!Ly87C zj5Nrqw9w{}(f2c1tDTQ|NEzUd?8KGtgLV35AKLUSnT)XOu{aW3zRjM%v$MlSJZd+Hh#(bHg6djM zh~~MDQ~txazW7{w7!%ncj~3@<8swWvy(qoCins3PyG2FN?5y5k@D~zPs{l6@o4i{> zw%PNQ6|YL@U^FSU=5GvgAu({FZ@Q(c6?s}P6Lr&9h3_16{N6b&emNx91MLy0Zf1Rh zGOh$<_muS@1K#ja95RQ+i0{xwwcIbU;@xXfNc?Lu(5I+~Id~=;0`dt^ji>HAHEWPY z3-2t#qoS2GeJMg@<8K_bXCLkhQ}c^5(ppWnoKP8i@${x?CHUnkgRrH>DYBTxgd*l> zj2wwTRF4UwW3tuisIF8QU>Fc$NALf)zP4WE75TcYDOnYOy`QuEGttLYl;zOoLY4y zqH*$JDchWoZk|db!ba6|FKiI(5o@rBm3jh$#9MFdKU6KS0^) zMtor@P5arlJkW_23?0ar{*(%7n-DPo0OB9AbbIpoRA^KyMe~`RbB5-;1+o*5=gwZwmqd+xYR_0g$}U)V1Ut$6mWA0o%@FXIu{G{g zuMWO(!F{y=-B32UdZQl{%&C10C9UA^ofP@g{|FM^CVKT0FX84r7^^f%!Tx_x@bJUPxX%^AR@0ebZ{#0-y^v)w*7^Y}A2 z6OQt>Al|kw4K7@GA`o-$+#V}!zG>&foDJ5mU|pt2Gwyi4x6;K_{Cyy%UPFGS4%ts- z?VUxj(HA;OQNlIXK-3N$6NG0FF#fP6A{XL$n@XN-Tx09+m^Z1NHqBO-i`R(!0Nxr$ zsnjnkJs_t>X-tV7e{x~o%Bx(K~y13?H&AS9+HGr&r%{*Ncv7ZDo#7wR_;m? z7dCu)iHasEj%e7SU;$TQ)x{@o$iYJjP2(~jh?Klx9F>Vs+PgEHY-b~k>Ai*VK=~M` zKZ6yo;;MB-YYY;|Pmg78LJU^*-(4JfjW^-l|&x14?!Mei` zIE58-pek0aLEmGK43-8*=s46e~c$+qwwVI=&4arHJ8dB>QhQi;_XNASWTuBlR zr{Ngy?svcYAxTUY3<6oZips7gDu*6r$lDl5>$11Clr(oIt0v4Enseg~ByuCu44yaQ6nQ`AwGhoPk^FMA zvxRu;;x)p>A>cn}Dk;hqx@>*rS0;C~@GYy6G&))nI1KJQ|I#0<=98-}x0YT4Dj974sKFp8+?ZQn<7 zG(`7qit5`*;cTH3AVdt1Hocpsu;FN9y07i{JBl>T_(a);*ERKF@0900>FM=DmD>>! ze9Qx%a;Bxk8$&)i5}}B^i3qxMXKX8GAWrIu*)&PI&+w} zN3FOqdf&SVUJngx3u-y4LFW7ttyIUD{cX2U%y@>WJ!n#OEZ#wrwE9y6FAb|l@0oSH z5U*?#PjXb5Yt~jK3PI*e5lY444oj$)+6@)sOQ~YCL?G^UlMk^H3mxL#Q{vBaB@QDc z6Wqr)^-y~ci;7d|1{4WklMb3IZi}+(q_fwF52qBzgPXbUTCB6yy!2*T%7ryd)M$NF zOzDe)J2`%(7KhB}pLh2&p9p!;?%lYg4mmev#lCa zZ;$q;*j!KQBb0i!#f|ug1ysnUqyZjPzfh4P;RBCeMTQ!je7X&I&}03!d87ovFVzj_ z+>u7s+u#G+|GnL5Dm1+L3nUI0%&Xk6V;sq_Ni>0tLUN6`4t&OWrgK&xP)zh{w}8W( z9~%vH;LutXfmAeM!};qvXPJc|g$2Kuei-=!*N3I}xGC0++P`)o=XxpA$9Cti4DQmv zLN^dU7|Oz_Z1E??0h`mmsVnOV>ONE7qsII9r(I)Rh3ja{+(5uKa;xYM6;MVbwb|UU z*(K$}$Y~X2`0lZsN?t`cO$qoQOi0k7-R_!?H#XUIbTAcS$W&Tnxt@x@kBpB;O{qE7 zisxGAooT2SSusLv$A0Nd^S@sN)0Z1@e@r$IbDNfq;*o@O`R$Y7H55zK;g=azrQpzd zyOoi2ggwjd)J=6w3ajBpg^{ot^6+O>j4GqfaiS zIaN$Yp;zEl7-fD>(Xw?_$kEVNgdS=LrHMn|I(xBsM;r)Bm*!FeBI;fB1DY$t-$OTL zvDegX!XEc6nt{}xB0BGyMAI>6Jfr03S-~dzxquYA%o|qh8nkPZeSdr|0e@MdE|iB< zBzLv}eJ(J974qoBg?yNMr#M>~;g|OO zuutb@3=Ox-=K1a>On%)b5LTLmTN1lH- z{HO5(LFFb@8@3k_S^>Yy2yxOo$-Mx<@yC(#t$LJ@y*qc$bQVC7?s!Y(IO;H62+p-5 zwvxnR@4vCadiOxxW?Ip+nga(Yt4S%cKV7pC*ev^~idrK0={K55_PY!Li@*K5-QZ9o zXe4+;%LU~k;rSqO?L%`-`Sc>vPxny|ibbD<3Y?CKiUyr+Xv5DM7!&DiMn0AT*F_XK zdq=QhGFm$Sa4+G%Ll#01{kZ4y`8^zpS8WZRoPgO;1x~L@xdL_|jDCA8FQ-;1G%)gC z0@&5{`&+*=p()v|iZgTO51mI#_TlbBGfNqcJWsKzcsQ~Cs6n{w2p7oG+5`tOGK+!W z);>Mn_*`hd=m3o(*GT(=&AN+v`-Ojg17~=Nw&HIdOpAX-)sd8ngyv>2ldq-v+=kHFt)+Xx;>L zqb?vg(*buHv;Dh&CIfi-fO<*{+;tl`eRuZFuwwti0UEDLZb1ANU^@CA&s)>hrS~^a z1)JBLdnBB%)G~ZFluiEDcHIBS@#e{M(F%6^(%|MQyaQlsPD1dh5~^;dS?3<`!2>0D zm;)7o&&Gihwi zTGsw76197W%$Y-A9L#36j1PAi1cW-T7+}iV@s+6S{@DQb$D@>11Y}Q0Pyh3wq7@Cq=!mO{V>>tId_h0U{a-6l*&$cK_;$-!X@&H${zVhpDJjO|HL3IXshB=uo5S9R%i5i15zJzrnt7!okFWeFXk>10?|sape_vy zhCW3DK6k$!fFpNJ9Qjo*`44$Dg0PRcB8ttTUAV6b@##a=nsD@nz!ct-1!6A=q@s4C zT5;hn99VA;W<`M8V5AQC!X_w{{gzwFwKdP}U$?McqF3lxtZe9Qey7RP$~CylcQ%mH zK(M)LYD&`j2QUsB&io_0Es*a!r20rv>nHX00RULYOMnIFE&KD1{n?g3!*tsgkXP24 zhC-+)L4BAKeF^m}f?t!ORG+b_6>7@SKt!0hp`;)h3QrQj8+qBsugAersVvfd$26;wYO$Px-H(x#J&D4jXIJ{#YYJH;Gz3eCVioFrF zN@1cK2Yu*Gz&@%6&ywCtEYe2DPrwiQzC4Lyz>E^c;2dR5T{i~z^e_({kHw_@O0;qw zX`;}Nz{DXEH1#{?m{A!sBkB5}`Oo}D`BN%u&`@xYhZNRO#=;?@*;?PWmYt1E!zuu& zqW!S$SXF#EHANP9V9Jrz&v=;y3t!XLCcuS&`ZDQ(B_ z^o@(b$dt}1wH5)Vx-mik%n zzjq-<>_h|XfClf zUw&)q-nHLoPCE3bIMT+`OD>ftN)UrgC8I!sdJT|TkR%DSAraR;r3bNk2fh?yWP}35 zij^5rhpN*WG7)-GAIrG#H@50{^esSLy^5SKUpajduPfQ+R$UsrmT3_wk{Xr3%rn%AZp1R;zGp#1V zA~)GThZD|*G{6VN$bYL~mqnrA<<2r_qv1w#B6_?Mb}=S|Z|)PYTR-Rh!$@1?rfEJ_ z&q^uQSJFiEP{il^$N_0tgzGcxV(=nhEWPtGiH)@OLSg34*(3gAF&-<$$3*_{YDhhV zzP#SXh~edT-L6|Alf(e?4bB!w-SZOt$@hu2rS>XB8l*@a5YI$FHxQgk;-EUG_!< zW>$!Mf7OK@sFn5JY#BLWFZ2Ie+i#vQX8ymAR+?TEljHP9(?>s= zEg}!)#VswAeEy>_@K%jd%UZ40&J|qB$JQ`({V+W!5gIpPLvhi~vys5@(VE$!CeoKc z=lxWqwtO;4-jKbrBVEF9>!Y<7I1GzcpE$WBL|Y{0^!#qF3kQ3(GJH8!l&&?n$sBk% zYW1F57E>c#7kDtRt=|$fbq;g&@>TT$Dp}4!5jVW_7I`^4U7Tq*uOd6k*6FOUWYevR z3n%KPIj&{1N}c^OaEo@}l-$lov5%PJHv?yBHeHV6T&Eo?7qhyM_wm90gV`3T#j4M( z*#r|UW-=1A#YX=A*~@O$1JtzSno?A9GQ=e%_1r{vX&O6_L@w&&bj^khrw!L7DM^BOaN z^AFP{O?k&!BaM-iCGL)+V`pJF)Dz z!HMRD?^v9bB>X{%HB{NywW~~b`HN`hhc1x$z534wcXw@7dy%wy%j2u(&wrXKZ?>L` zId)^G|nJKGG$BwfP@URPXE0S$`#2qSCkFN5-KENg-d9 z)Z3~;RNS_CN-!_p-T0c}qVhqLOuzWbEi)#}=2(^G*X#8pQNTH+M_~587lPK`y`7F8 zK2T?R;&+odNu3tY;(Ss77YM`QL z*WUr><$$Tl4A@JJs@ap4qR!b zGofyVy}jP97mK>}&LwR;>u>p8{oonkK1pDUTo0s@(xW?o?Gd8(lapc7`Yw<&FZ-J1 c{P@qv5%{>pKk9)F@bohVPgg&ebxsLQ05?Jeh5!Hn literal 0 HcmV?d00001 diff --git a/windows/configuration/kiosk-shelllauncher.md b/windows/configuration/kiosk-shelllauncher.md index 13b934beb1..abe3e1996e 100644 --- a/windows/configuration/kiosk-shelllauncher.md +++ b/windows/configuration/kiosk-shelllauncher.md @@ -116,7 +116,7 @@ For **Shell Launcher v2**, you will use a different schema reference and a diffe xmlns:v2="http://schemas.microsoft.com/ShellLauncher/2019/Configuration"> - + @@ -125,6 +125,9 @@ xmlns:v2="http://schemas.microsoft.com/ShellLauncher/2019/Configuration"> ``` +>[!TIP] +>In the XML for Shell Launcher v2, note the **AllAppsFullScreen** attribute. When set to **True**, Shell Launcher will run every app in full screen, or maximized for desktop apps. When this attribute is set to **False** or not set, only the custom shell app runs in full screen; other apps launched by the user will run in windowed mode. + [Get XML examples for different Shell Launcher v2 configurations.](https://github.com/Microsoft/Windows-iotcore-samples/tree/develop/Samples/ShellLauncherV2) ### Custom OMA-URI setting @@ -135,6 +138,10 @@ The OMA-URI path is `./Device/Vendor/MSFT/AssignedAccess/ShellLauncher`. For the value, you can select data type `String` and paste the desired configuration file content into the value box. If you wish to upload the xml instead of pasting the content, choose data type `String (XML file)` instead. +![Screenshot of custom OMA-URI settings](images/slv2-oma-uri.png) + +After you configure the profile containing the custom Shell Launcher setting, select **All Devices** or selected groups of devices to apply the profile to. Don't assign the profile to users or user groups. + ## Configure a custom shell using PowerShell For scripts for Shell Launcher v2, see [Shell Launcher v2 Bridge WMI sample scripts](https://github.com/Microsoft/Windows-iotcore-samples/blob/develop/Samples/ShellLauncherV2/SampleBridgeWmiScripts/README.md). From ea2a63eaadaff3585664d5785e0069f3ae8c7b4a Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Tue, 19 Mar 2019 21:45:46 +0000 Subject: [PATCH 030/349] Updated index.md with TIMNA topic --- windows/security/threat-protection/index.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/index.md b/windows/security/threat-protection/index.md index 73d55c394e..b9718fc7e2 100644 --- a/windows/security/threat-protection/index.md +++ b/windows/security/threat-protection/index.md @@ -38,10 +38,10 @@ ms.localizationpriority: medium **[Threat & Vulnerability Management](windows-defender-atp/overview-threat-and-vulnerability-mgt.md)**
-Short description -- [Hardware based isolation](windows-defender-atp/overview-hardware-based-isolation.md) -- [Application control](windows-defender-application-control/windows-defender-application-control.md) -- [Device control](device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md) +This built-in capability uses a game-changing risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. +- [Next-generation Threat & Vulnerability Management](windows-defender-atp/________________.md) +- [Configure and manage Threat & Vulnerability Management](windows-defender-atp/________________.md) +- [Scenarios](windows-defender-atp/________________.md) From a872c892d99dffadc7647fb1e056addf9b815e7a Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 22 Mar 2019 17:39:40 +0000 Subject: [PATCH 031/349] Updated overview.md with MTE overview link and short desc --- .../security/threat-protection/windows-defender-atp/overview.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/windows-defender-atp/overview.md b/windows/security/threat-protection/windows-defender-atp/overview.md index f9989d69f7..88dcf10eee 100644 --- a/windows/security/threat-protection/windows-defender-atp/overview.md +++ b/windows/security/threat-protection/windows-defender-atp/overview.md @@ -38,6 +38,7 @@ Topic | Description [Endpoint detection and response](overview-endpoint-detection-response.md) | Understand how Windows Defender ATP continuously monitors your organization for possible attacks against systems, networks, or users in your organization and the features you can use to mitigate and remediate threats. [Automated investigation and remediation](automated-investigations-windows-defender-advanced-threat-protection.md) | In conjunction with being able to quickly respond to advanced attacks, Windows Defender ATP offers automatic investigation and remediation capabilities that help reduce the volume of alerts in minutes at scale. [Secure score](overview-secure-score-windows-defender-advanced-threat-protection.md) | Quickly assess the security posture of your organization, see machines that require attention, as well as recommendations for actions to better protect your organization - all in one place. +[Microsoft Threat Experts](microsoft-threat-experts.md) | Leverage cybersecurity intelligence from managed threat hunting service that provides Security Operation Centers (SOCs) with expert level monitoring and analysis to help them ensure that critical threats in your unique environments don’t get missed. [Advanced hunting](overview-hunting-windows-defender-advanced-threat-protection.md) | Use a powerful search and query language to create custom queries and detection rules. [Management and APIs](management-apis.md) | Windows Defender ATP supports a wide variety of tools to help you manage and interact with the platform so that you can integrate the service into your existing workflows. [Microsoft Threat Protection](threat-protection-integration.md) | Microsoft security products work better together. Learn about other security capabilities in the Microsoft threat protection stack. From f9f2934d9288891ebcd7815a9c6200815181cf35 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 22 Mar 2019 17:43:53 +0000 Subject: [PATCH 032/349] Updated overview.md --- .../security/threat-protection/windows-defender-atp/overview.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/overview.md b/windows/security/threat-protection/windows-defender-atp/overview.md index 88dcf10eee..f9989d69f7 100644 --- a/windows/security/threat-protection/windows-defender-atp/overview.md +++ b/windows/security/threat-protection/windows-defender-atp/overview.md @@ -38,7 +38,6 @@ Topic | Description [Endpoint detection and response](overview-endpoint-detection-response.md) | Understand how Windows Defender ATP continuously monitors your organization for possible attacks against systems, networks, or users in your organization and the features you can use to mitigate and remediate threats. [Automated investigation and remediation](automated-investigations-windows-defender-advanced-threat-protection.md) | In conjunction with being able to quickly respond to advanced attacks, Windows Defender ATP offers automatic investigation and remediation capabilities that help reduce the volume of alerts in minutes at scale. [Secure score](overview-secure-score-windows-defender-advanced-threat-protection.md) | Quickly assess the security posture of your organization, see machines that require attention, as well as recommendations for actions to better protect your organization - all in one place. -[Microsoft Threat Experts](microsoft-threat-experts.md) | Leverage cybersecurity intelligence from managed threat hunting service that provides Security Operation Centers (SOCs) with expert level monitoring and analysis to help them ensure that critical threats in your unique environments don’t get missed. [Advanced hunting](overview-hunting-windows-defender-advanced-threat-protection.md) | Use a powerful search and query language to create custom queries and detection rules. [Management and APIs](management-apis.md) | Windows Defender ATP supports a wide variety of tools to help you manage and interact with the platform so that you can integrate the service into your existing workflows. [Microsoft Threat Protection](threat-protection-integration.md) | Microsoft security products work better together. Learn about other security capabilities in the Microsoft threat protection stack. From 45ce7fc456fdb86a0e3f32fdaa83aa90cd111984 Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Sat, 23 Mar 2019 23:15:20 +0200 Subject: [PATCH 033/349] added update install location https://github.com/MicrosoftDocs/windows-itpro-docs/issues/2182 --- .../hello-for-business/hello-hybrid-cert-whfb-provision.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-provision.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-provision.md index 461d86ca82..5350a7e35a 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-provision.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-provision.md @@ -59,7 +59,7 @@ The remainder of the provisioning includes Windows Hello for Business requesting > Read [Azure AD Connect sync: Scheduler](https://docs.microsoft.com/azure/active-directory/connect/active-directory-aadconnectsync-feature-scheduler) to view and adjust the **synchronization cycle** for your organization. > [!NOTE] -> Windows Server 2016 update [KB4088889 (14393.2155)](https://support.microsoft.com/help/4088889) provides synchronous certificate enrollment during hybrid certificate trust provisioning. With this update, users no longer need to wait for Azure AD Connect to sync their public key on-premises. Users enroll their certificate during provisioning and can use the certificate for sign-in immediately after completeling the provisioning. +> Windows Server 2016 update [KB4088889 (14393.2155)](https://support.microsoft.com/help/4088889) provides synchronous certificate enrollment during hybrid certificate trust provisioning. With this update, users no longer need to wait for Azure AD Connect to sync their public key on-premises. Users enroll their certificate during provisioning and can use the certificate for sign-in immediately after completeling the provisioning. The update needs to be installed on the federation servers. After a successful key registration, Windows creates a certificate request using the same key pair to request a certificate. Windows send the certificate request to the AD FS server for certificate enrollment. From 7e88988f3da604b275e8ef96f76350fa185a98f4 Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Mon, 25 Mar 2019 12:06:27 +0200 Subject: [PATCH 034/349] defined credentials https://github.com/MicrosoftDocs/windows-itpro-docs/issues/1240 --- .../security/identity-protection/remote-credential-guard.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/remote-credential-guard.md b/windows/security/identity-protection/remote-credential-guard.md index d4040d63f5..b57634a153 100644 --- a/windows/security/identity-protection/remote-credential-guard.md +++ b/windows/security/identity-protection/remote-credential-guard.md @@ -89,7 +89,7 @@ To use Windows Defender Remote Credential Guard, the Remote Desktop client and r The Remote Desktop client device: -- Must be running at least Windows 10, version 1703 to be able to supply credentials. +- Must be running at least Windows 10, version 1703 to be able to supply credentials (hash and TGT). - Must be running at least Windows 10, version 1607 or Windows Server 2016 to use the user’s signed-in credentials. This requires the user’s account be able to sign in to both the client device and the remote host. - Must be running the Remote Desktop Classic Windows application. The Remote Desktop Universal Windows Platform application doesn't support Windows Defender Remote Credential Guard. - Must use Kerberos authentication to connect to the remote host. If the client cannot connect to a domain controller, then RDP attempts to fall back to NTLM. Windows Defender Remote Credential Guard does not allow NTLM fallback because this would expose credentials to risk. @@ -176,4 +176,4 @@ mstsc.exe /remoteGuard - No credentials are sent to the target device, but the target device still acquires Kerberos Service Tickets on its own. -- The server and client must authenticate using Kerberos. \ No newline at end of file +- The server and client must authenticate using Kerberos. From 2812080dcf52af5d3176a7fd32811375c5eb16b8 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Wed, 27 Mar 2019 00:50:23 +0000 Subject: [PATCH 035/349] Updated index.md --- windows/security/threat-protection/index.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/index.md b/windows/security/threat-protection/index.md index b9718fc7e2..f2b30f269d 100644 --- a/windows/security/threat-protection/index.md +++ b/windows/security/threat-protection/index.md @@ -40,6 +40,7 @@ ms.localizationpriority: medium **[Threat & Vulnerability Management](windows-defender-atp/overview-threat-and-vulnerability-mgt.md)**
This built-in capability uses a game-changing risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. - [Next-generation Threat & Vulnerability Management](windows-defender-atp/________________.md) +- [What's in the dashboard and what it means](windows-defender-atp/________________.md) - [Configure and manage Threat & Vulnerability Management](windows-defender-atp/________________.md) - [Scenarios](windows-defender-atp/________________.md) From 8a2a3febd156f1455360b0b112dc59502a806534 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Wed, 27 Mar 2019 21:49:30 +0000 Subject: [PATCH 036/349] Updated windows-defender-advanced-threat-protection.md pillar and toc with TVM --- .../windows-defender-advanced-threat-protection.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md index 43bb2202f5..7580f2d8d3 100644 --- a/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md @@ -47,6 +47,7 @@ Windows Defender ATP uses the following combination of technology built into Win

Windows Defender ATP

+ @@ -67,6 +68,11 @@ Windows Defender ATP uses the following combination of technology built into Win
+ + +**[Threat & Vulnerability Management](threat-and-vulnerability-management.md)**
+This built-in capability uses a game-changing risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. + From 93d0b1195fcc5fe01c4b55c46cc2d327a4737eeb Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Wed, 27 Mar 2019 21:51:31 +0000 Subject: [PATCH 037/349] Updated windows-defender-advanced-threat-protection.md --- .../windows-defender-advanced-threat-protection.md | 13 ++++++------- 1 file changed, 6 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md index 7580f2d8d3..466c5ff120 100644 --- a/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md @@ -58,16 +58,20 @@ Windows Defender ATP uses the following combination of technology built into Win - - +

Threat & Vulnerability Management

Attack surface reduction

Microsoft Threat Experts
+
Management and APIs
Microsoft Threat Protection
Microsoft Threat Protection

+>[!TIP] +>- Learn about the latest enhancements in Windows Defender ATP: [What's new in Windows Defender ATP](https://cloudblogs.microsoft.com/microsoftsecure/2018/11/15/whats-new-in-windows-defender-atp/). +>- Windows Defender ATP demonstrated industry-leading optics and detection capabilities in the recent MITRE evaluation. Read: [Insights from the MITRE ATT&CK-based evaluation](https://cloudblogs.microsoft.com/microsoftsecure/2018/12/03/insights-from-the-mitre-attack-based-evaluation-of-windows-defender-atp/). + **[Threat & Vulnerability Management](threat-and-vulnerability-management.md)**
@@ -75,11 +79,6 @@ This built-in capability uses a game-changing risk-based approach to the discove - ->[!TIP] ->- Learn about the latest enhancements in Windows Defender ATP: [What's new in Windows Defender ATP](https://cloudblogs.microsoft.com/microsoftsecure/2018/11/15/whats-new-in-windows-defender-atp/). ->- Windows Defender ATP demonstrated industry-leading optics and detection capabilities in the recent MITRE evaluation. Read: [Insights from the MITRE ATT&CK-based evaluation](https://cloudblogs.microsoft.com/microsoftsecure/2018/12/03/insights-from-the-mitre-attack-based-evaluation-of-windows-defender-atp/). - **[Attack surface reduction](overview-attack-surface-reduction.md)**
The attack surface reduction set of capabilities provide the first line of defense in the stack. By ensuring configuration settings are properly set and exploit mitigation techniques are applied, these set of capabilities resist attacks and exploitations. From 42643fffa5441cf4cb610fca3384fa7d93d028e2 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Wed, 27 Mar 2019 22:00:28 +0000 Subject: [PATCH 038/349] Updated index.md with TIMNA file --- windows/security/threat-protection/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/index.md b/windows/security/threat-protection/index.md index f2b30f269d..0e588a3959 100644 --- a/windows/security/threat-protection/index.md +++ b/windows/security/threat-protection/index.md @@ -37,7 +37,7 @@ ms.localizationpriority: medium -**[Threat & Vulnerability Management](windows-defender-atp/overview-threat-and-vulnerability-mgt.md)**
+**[Threat & Vulnerability Management](windows-defender-atp/threat-and-vulnerability-management.md)**
This built-in capability uses a game-changing risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. - [Next-generation Threat & Vulnerability Management](windows-defender-atp/________________.md) - [What's in the dashboard and what it means](windows-defender-atp/________________.md) From 353a192a25c67746d0c02b3a484d546995bab1d1 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Wed, 27 Mar 2019 22:07:07 +0000 Subject: [PATCH 039/349] Updated index.md with Timna topic file names --- windows/security/threat-protection/index.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/index.md b/windows/security/threat-protection/index.md index 0e588a3959..39b2744999 100644 --- a/windows/security/threat-protection/index.md +++ b/windows/security/threat-protection/index.md @@ -39,10 +39,10 @@ ms.localizationpriority: medium **[Threat & Vulnerability Management](windows-defender-atp/threat-and-vulnerability-management.md)**
This built-in capability uses a game-changing risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. -- [Next-generation Threat & Vulnerability Management](windows-defender-atp/________________.md) -- [What's in the dashboard and what it means](windows-defender-atp/________________.md) -- [Configure and manage Threat & Vulnerability Management](windows-defender-atp/________________.md) -- [Scenarios](windows-defender-atp/________________.md) +- [Next-generation Threat & Vulnerability Management](windows-defender-atp/next-gen-threat-and-vuln-mgt.md) +- [What's in the dashboard and what it means](windows-defender-atp/tvm-dashboard-insights.md) +- [Configure and manage Threat & Vulnerability Management](windows-defender-atp/config-and-manage-tvm.md) +- [Scenarios](windows-defender-atp/threat-and-vuln-mgt-scenarios.md) From 35aec80559b95692b48d4124ed44fd09298ec99d Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Wed, 27 Mar 2019 22:08:13 +0000 Subject: [PATCH 040/349] Updated index.md --- windows/security/threat-protection/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/index.md b/windows/security/threat-protection/index.md index 39b2744999..a4438051ba 100644 --- a/windows/security/threat-protection/index.md +++ b/windows/security/threat-protection/index.md @@ -41,7 +41,7 @@ ms.localizationpriority: medium This built-in capability uses a game-changing risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. - [Next-generation Threat & Vulnerability Management](windows-defender-atp/next-gen-threat-and-vuln-mgt.md) - [What's in the dashboard and what it means](windows-defender-atp/tvm-dashboard-insights.md) -- [Configure and manage Threat & Vulnerability Management](windows-defender-atp/config-and-manage-tvm.md) +- [Configure Threat & Vulnerability Management](windows-defender-atp/config-and-manage-tvm.md) - [Scenarios](windows-defender-atp/threat-and-vuln-mgt-scenarios.md) From 6f6f76113f6087cfb68cf7602f6f7e6fc0bd111f Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 28 Mar 2019 09:13:16 -0700 Subject: [PATCH 041/349] new topic for henry --- .../threat-protection/windows-firewall/TOC.md | 1 + ...create-windows-firewall-rules-in-intune.md | 37 +++++++++++++++++++ 2 files changed, 38 insertions(+) create mode 100644 windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md diff --git a/windows/security/threat-protection/windows-firewall/TOC.md b/windows/security/threat-protection/windows-firewall/TOC.md index 19f2d4873f..e3271818c1 100644 --- a/windows/security/threat-protection/windows-firewall/TOC.md +++ b/windows/security/threat-protection/windows-firewall/TOC.md @@ -95,6 +95,7 @@ #### [Create an Outbound Program or Service Rule](create-an-outbound-program-or-service-rule.md) #### [Create Inbound Rules to Support RPC](create-inbound-rules-to-support-rpc.md) #### [Create WMI Filters for the GPO](create-wmi-filters-for-the-gpo.md) +#### [Create Windows Firewall rules in Intune](create-windows-firewall-rules-in-intune.md) #### [Enable Predefined Inbound Rules](enable-predefined-inbound-rules.md) #### [Enable Predefined Outbound Rules](enable-predefined-outbound-rules.md) #### [Exempt ICMP from Authentication](exempt-icmp-from-authentication.md) diff --git a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md new file mode 100644 index 0000000000..688fe6d8ea --- /dev/null +++ b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md @@ -0,0 +1,37 @@ +--- +title: Create Windows Firewall rules in Intune (Windows 10) +description: Explains how to create Windows Firewall rules in Intune +ms.assetid: 47057d90-b053-48a3-b881-4f2458d3e431 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +author: justinha +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 03/28/2019 +--- + +# Create Windows Firewall rules in Intune + +**Applies to** +- Windows 10 + +Para 1 sentence 1 has an *italic* word. +Para 1 sentence 2 had a **bold** word. + +Para 2 sentence 1. +Para 2 sentence 2. + +List: +- item 1 +- item 2 + +Table header | Table header +- | - +Cell 1 | Cell 2 +Cell 3 | Cell 4 + From 3f09742c979c3e97b48d4b85261d324e12e61b0d Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 28 Mar 2019 16:43:51 +0000 Subject: [PATCH 042/349] Updated create-windows-firewall-rules-in-intune.md --- .../windows-firewall/create-windows-firewall-rules-in-intune.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md index 688fe6d8ea..27fc47f2bf 100644 --- a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md +++ b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md @@ -34,4 +34,5 @@ Table header | Table header - | - Cell 1 | Cell 2 Cell 3 | Cell 4 +Cell 5 | Cell 6 From bd4597b3b8ce6b07b85a88bb8aabb3208c8e25e9 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 29 Mar 2019 21:43:49 +0000 Subject: [PATCH 043/349] Updated index.md --- windows/security/threat-protection/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/index.md b/windows/security/threat-protection/index.md index a4438051ba..04346ca1c3 100644 --- a/windows/security/threat-protection/index.md +++ b/windows/security/threat-protection/index.md @@ -37,7 +37,7 @@ ms.localizationpriority: medium -**[Threat & Vulnerability Management](windows-defender-atp/threat-and-vulnerability-management.md)**
+**[Threat & Vulnerability Management](windows-defender-atp/next-gen-threat-and-vuln-mgt.md)**
This built-in capability uses a game-changing risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. - [Next-generation Threat & Vulnerability Management](windows-defender-atp/next-gen-threat-and-vuln-mgt.md) - [What's in the dashboard and what it means](windows-defender-atp/tvm-dashboard-insights.md) From 89bd7fcadb25eb29581030050b6c2003d98e5a68 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 29 Mar 2019 21:44:56 +0000 Subject: [PATCH 044/349] Updated windows-defender-advanced-threat-protection.md --- .../windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md index 466c5ff120..2a9b67612b 100644 --- a/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md @@ -74,7 +74,7 @@ Windows Defender ATP uses the following combination of technology built into Win -**[Threat & Vulnerability Management](threat-and-vulnerability-management.md)**
+**[Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md)**
This built-in capability uses a game-changing risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. From 10b6dc00533a7ea915821748d52e2358ee9188cc Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 29 Mar 2019 14:44:58 -0700 Subject: [PATCH 045/349] added table --- ...create-windows-firewall-rules-in-intune.md | 107 ++++++++++++++++-- 1 file changed, 95 insertions(+), 12 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md index 27fc47f2bf..0b6e829ef1 100644 --- a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md +++ b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md @@ -20,19 +20,102 @@ ms.date: 03/28/2019 **Applies to** - Windows 10 -Para 1 sentence 1 has an *italic* word. -Para 1 sentence 2 had a **bold** word. +To get started, open Device Configuration in Intune, then create a new profile. Choose Windows 10 as the platform, and Endpoint Protection as the profile type. Select Windows Defender Firewall. Add a firewall rule to this new Endpoint Protection profile using the Add button at the bottom of the blade. -Para 2 sentence 1. -Para 2 sentence 2. +![Windows Defender Firewall in Intune](images/) -List: -- item 1 -- item 2 +>[!IMPORTANT] +>A single Endpoint Protection profile may contain up to a maximum of 150 firewall rules. If a client device requires more than 150 rules, then multiple profiles must be assigned to it. + +## Firewall rule components + +Following table has description for each field. + +Property | Type | Description +DisplayName | String | The display name of the rule. Does not need to be unique. +Description | String | The description of the rule. +PackageFamilyName | String | The package family name of a Microsoft Store application that's affected by the firewall rule. +FilePath | String | The full file path of an app that's affected by the firewall rule. +FullyQualifiedBinaryName | String | The fully qualified binary name. +ServiceName | String | The name used in cases when a service, not an application, is sending or receiving traffic. +Protocol | Nullable Integer - default value is null which maps to All | 0-255 number representing the IP protocol (TCP = 6, UDP = 17). If not specified, the default is All. +LocalPortRanges | String array | List of local port ranges. For example, "100-120", "200", "300-320". If not specified, the default is All. +RemotePortRanges | String array | List of remote port ranges. For example, "100-120", "200", "300-320". If not specified, the default is All. +LocalAddressRanges | String array | List of local addresses covered by the rule. Valid tokens include:
- "*" indicates any local address. If present, this must be the only token included.
- A subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask not a network prefix is specified, the subnet mask defaults to 255.255.255.255.
- A valid IPv6 address.
- An IPv4 address range in the format of "start address - end address" with no spaces included.
- An IPv6 address range in the format of "start address - end address" with no spaces included.
Default is any address. +RemoteAddressRanges | String array | List of tokens specifying the remote addresses covered by the rule.Tokens are case insensitive. Valid tokens include:
- "*" indicates any remote address. If present, this must be the only token included.
- "Defaultgateway"
- "DHCP"
- "DNS"
- "WINS"
- "Intranet"
- "RmtIntranet"
- "Internet"
- "Ply2Renders"
- "LocalSubnet" indicates any local address on the local subnet. This token is not case-sensitive.
- A subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask not a network prefix is specified, the subnet mask defaults to 255.255.255.255.
- A valid IPv6 address.
- An IPv4 address range in the format of "start address - end address" with no spaces included.
- An IPv6 address range in the format of "start address - end address" with no spaces included.
Default is any address. +ProfileTypes | WindowsFirewallNetworkProfileTypes | Specifies the profiles to which the rule belongs. If not specified, the default is All. +Action| StateManagementSetting | The action the rule enforces. If not specified, the default is Allowed. +TrafficDirection | WindowsFirewallRuleTrafficDirectionType | The traffic direction that the rule is enabled for. If not specified, the default is Out. +InterfaceTypes | WindowsFirewallRuleInterfaceTypes | The interface types of the rule. +EdgeTraversal | StateManagementSetting | Indicates whether edge traversal is enabled or disabled for this rule.
The EdgeTraversal setting indicates that specific inbound traffic is allowed to tunnel through NATs and other edge devices using the Teredo tunneling technology. In order for this setting to work correctly, the application or service with the inbound firewall rule needs to support IPv6. The primary application of this setting allows listeners on the host to be globally addressable through a Teredo IPv6 address.
New rules have the EdgeTraversal property disabled by default. +LocalUserAuthorizations | String | Specifies the list of authorized local users for the app container. This is a string in Security Descriptor Definition Language (SDDL) format. + + +## Application +Control connections for an app or program. Apps and programs can be specified either file path, package family name, or Windows service short name. The file path of an app is its location on the client device. For example, C:\Windows\System\Notepad.exe. Learn more Package family names can be retrieved by running the Get-AppxPackage command from PowerShell. Learn more Windows service short names are used in cases when a service, not an application, is sending or receiving traffic. Default ia All. + +[Learn more](https://aka.ms/intunefirewall) + +## Protocol +Select the protocol for this port rule. Transport layer protocols - TCP and UDP – allow you to specify ports or port ranges. For custom protocols, enter a number between 0 and 255 representing the IP protocol. + +Default is Any. + +[Learn more](https://aka.ms/intunefirewall) + +## Local ports +Comma separated list of ranges. For example, *100-120,200,300-320*. Default is All. + +[Learn more](https://aka.ms/intunefirewall) + +## Remote ports +Comma separated list of ranges. For example, *100-120,200,300-320*. Default is All. + +[Learn more](https://aka.ms/intunefirewall) + +## Local addresses +Comma separated list of local addresses covered by the rule. Valid tokens include: +- \* indicates any local address. If present, this must be the only token included. +- A subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask not a network prefix is specified, the subnet mask defaults to 255.255.255.255. +- A valid IPv6 address. +- An IPv4 address range in the format of "start address - end address" with no spaces included. +- An IPv6 address range in the format of "start address - end address" with no spaces included. Default is Any address. + +[Learn more](https://aka.ms/intunefirewall) + +## Remote addresses +List of comma separated tokens specifying the remote addresses covered by the rule. Tokens are case insensitive. Valid tokens include: +- \* indicates any remote address. If present, this must be the only token included. +- Defaultgateway +- DHCP +- DNS +- WINS +- Intranet (supported on Windows versions 1809+) +- RmtIntranet (supported on Windows versions 1809+) +- Internet (supported on Windows versions 1809+) +- Ply2Renders (supported on Windows versions 1809+) +- LocalSubnet indicates any local address on the local subnet. +- A subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask not a network prefix is specified, the subnet mask defaults to 255.255.255.255. +- A valid IPv6 address. +- An IPv4 address range in the format of "start address - end address" with no spaces included. +- An IPv6 address range in the format of "start address - end address" with no spaces included. + +Default is Any address. + +[Learn more](https://aka.ms/intunefirewall) + +## Edge traversal (coming soon) +Indicates whether edge traversal is enabled or disabled for this rule. The EdgeTraversal setting indicates that specific inbound traffic is allowed to tunnel through NATs and other edge devices using the Teredo tunneling technology. In order for this setting to work correctly, the application or service with the inbound firewall rule needs to support IPv6. The primary application of this setting allows listeners on the host to be globally addressable through a Teredo IPv6 address. New rules have the EdgeTraversal property disabled by default. + +[Learn more](https://aka.ms/intunefirewall) + +## Authorized users +Specifies the list of authorized local users for this rule. A list of authorized users cannot be specified if the rule being authored is targeting a Windows service. Default is all users. + +[Learn more](https://aka.ms/intunefirewall) + +## Configuring firewall rules programmatically + +Coming soon. -Table header | Table header -- | - -Cell 1 | Cell 2 -Cell 3 | Cell 4 -Cell 5 | Cell 6 From 7a8f99dead25a0d820f523d3219a267c78982a55 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 29 Mar 2019 14:50:18 -0700 Subject: [PATCH 046/349] fixed learn more links --- ...create-windows-firewall-rules-in-intune.md | 29 +++++++++++++------ 1 file changed, 20 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md index 0b6e829ef1..d8f75edfdf 100644 --- a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md +++ b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md @@ -52,26 +52,37 @@ LocalUserAuthorizations | String | Specifies the list of authorized local users ## Application -Control connections for an app or program. Apps and programs can be specified either file path, package family name, or Windows service short name. The file path of an app is its location on the client device. For example, C:\Windows\System\Notepad.exe. Learn more Package family names can be retrieved by running the Get-AppxPackage command from PowerShell. Learn more Windows service short names are used in cases when a service, not an application, is sending or receiving traffic. Default ia All. +Control connections for an app or program. +Apps and programs can be specified either file path, package family name, or Windows service short name. -[Learn more](https://aka.ms/intunefirewall) +The file path of an app is its location on the client device. +For example, C:\Windows\System\Notepad.exe. +[Learn more](https://aka.ms/intunefirewallfilepathrule) + +Package family names can be retrieved by running the Get-AppxPackage command from PowerShell. +[Learn more](https://aka.ms/intunefirewallPackageNameFromPowerShell) + +Windows service short names are used in cases when a service, not an application, is sending or receiving traffic. +Default ia All. + +[Learn more](https://aka.ms/intunefirewallServiceNameRule) ## Protocol Select the protocol for this port rule. Transport layer protocols - TCP and UDP – allow you to specify ports or port ranges. For custom protocols, enter a number between 0 and 255 representing the IP protocol. Default is Any. -[Learn more](https://aka.ms/intunefirewall) +[Learn more](https://aka.ms/intunefirewallprotocolrule) ## Local ports Comma separated list of ranges. For example, *100-120,200,300-320*. Default is All. -[Learn more](https://aka.ms/intunefirewall) +[Learn more](https://aka.ms/intunefirewalllocalportrule) ## Remote ports Comma separated list of ranges. For example, *100-120,200,300-320*. Default is All. -[Learn more](https://aka.ms/intunefirewall) +[Learn more](https://aka.ms/intunefirewallremoteportrule) ## Local addresses Comma separated list of local addresses covered by the rule. Valid tokens include: @@ -81,7 +92,7 @@ Comma separated list of local addresses covered by the rule. Valid tokens includ - An IPv4 address range in the format of "start address - end address" with no spaces included. - An IPv6 address range in the format of "start address - end address" with no spaces included. Default is Any address. -[Learn more](https://aka.ms/intunefirewall) +[Learn more](https://aka.ms/intunefirewalllocaladdressrule) ## Remote addresses List of comma separated tokens specifying the remote addresses covered by the rule. Tokens are case insensitive. Valid tokens include: @@ -102,17 +113,17 @@ List of comma separated tokens specifying the remote addresses covered by the ru Default is Any address. -[Learn more](https://aka.ms/intunefirewall) +[Learn more](https://aka.ms/intunefirewallremotaddressrule) ## Edge traversal (coming soon) Indicates whether edge traversal is enabled or disabled for this rule. The EdgeTraversal setting indicates that specific inbound traffic is allowed to tunnel through NATs and other edge devices using the Teredo tunneling technology. In order for this setting to work correctly, the application or service with the inbound firewall rule needs to support IPv6. The primary application of this setting allows listeners on the host to be globally addressable through a Teredo IPv6 address. New rules have the EdgeTraversal property disabled by default. -[Learn more](https://aka.ms/intunefirewall) +[Learn more](https://aka.ms/intunefirewalledgetraversal) ## Authorized users Specifies the list of authorized local users for this rule. A list of authorized users cannot be specified if the rule being authored is targeting a Windows service. Default is all users. -[Learn more](https://aka.ms/intunefirewall) +[Learn more](https://aka.ms/intunefirewallauthorizedusers) ## Configuring firewall rules programmatically From a49d8c7b2c957db6eb8287e2af0c5dbe28989609 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 29 Mar 2019 14:54:40 -0700 Subject: [PATCH 047/349] added link to IP pprotocol numbers --- .../windows-firewall/create-windows-firewall-rules-in-intune.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md index d8f75edfdf..28783baa5b 100644 --- a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md +++ b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md @@ -38,7 +38,7 @@ PackageFamilyName | String | The package family name of a Microsoft Store applic FilePath | String | The full file path of an app that's affected by the firewall rule. FullyQualifiedBinaryName | String | The fully qualified binary name. ServiceName | String | The name used in cases when a service, not an application, is sending or receiving traffic. -Protocol | Nullable Integer - default value is null which maps to All | 0-255 number representing the IP protocol (TCP = 6, UDP = 17). If not specified, the default is All. +Protocol | Nullable Integer - default value is null which maps to All | 0-255 number representing the [IP protocol](https://www.wikipedia.org/wiki/List_of_IP_protocol_numbers) (TCP = 6, UDP = 17). If not specified, the default is All. LocalPortRanges | String array | List of local port ranges. For example, "100-120", "200", "300-320". If not specified, the default is All. RemotePortRanges | String array | List of remote port ranges. For example, "100-120", "200", "300-320". If not specified, the default is All. LocalAddressRanges | String array | List of local addresses covered by the rule. Valid tokens include:
- "*" indicates any local address. If present, this must be the only token included.
- A subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask not a network prefix is specified, the subnet mask defaults to 255.255.255.255.
- A valid IPv6 address.
- An IPv4 address range in the format of "start address - end address" with no spaces included.
- An IPv6 address range in the format of "start address - end address" with no spaces included.
Default is any address. From 6219bd243c86447b05b336b1dc0cc34aa65d3acb Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 29 Mar 2019 14:59:25 -0700 Subject: [PATCH 048/349] edits --- .../create-windows-firewall-rules-in-intune.md | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md index 28783baa5b..1d461d4ec1 100644 --- a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md +++ b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md @@ -20,7 +20,10 @@ ms.date: 03/28/2019 **Applies to** - Windows 10 -To get started, open Device Configuration in Intune, then create a new profile. Choose Windows 10 as the platform, and Endpoint Protection as the profile type. Select Windows Defender Firewall. Add a firewall rule to this new Endpoint Protection profile using the Add button at the bottom of the blade. +To get started, open Device Configuration in Intune, then create a new profile. +Choose Windows 10 as the platform, and Endpoint Protection as the profile type. +Select Windows Defender Firewall. +Add a firewall rule to this new Endpoint Protection profile using the Add button at the bottom of the blade. ![Windows Defender Firewall in Intune](images/) @@ -68,7 +71,7 @@ Default ia All. [Learn more](https://aka.ms/intunefirewallServiceNameRule) ## Protocol -Select the protocol for this port rule. Transport layer protocols - TCP and UDP – allow you to specify ports or port ranges. For custom protocols, enter a number between 0 and 255 representing the IP protocol. +Select the protocol for this port rule. Transport layer protocols—TCP and UDP—allow you to specify ports or port ranges. For custom protocols, enter a number between 0 and 255 representing the IP protocol. Default is Any. @@ -87,7 +90,7 @@ Comma separated list of ranges. For example, *100-120,200,300-320*. Default is A ## Local addresses Comma separated list of local addresses covered by the rule. Valid tokens include: - \* indicates any local address. If present, this must be the only token included. -- A subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask not a network prefix is specified, the subnet mask defaults to 255.255.255.255. +- A subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask nor a network prefix is specified, the subnet mask default is 255.255.255.255. - A valid IPv6 address. - An IPv4 address range in the format of "start address - end address" with no spaces included. - An IPv6 address range in the format of "start address - end address" with no spaces included. Default is Any address. From c8f61cb247a0a036c764b34760873d1f5e015c07 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 29 Mar 2019 15:15:27 -0700 Subject: [PATCH 049/349] added image and table --- ...create-windows-firewall-rules-in-intune.md | 38 +++++++++--------- .../images/windows-firewall-intune.png | Bin 0 -> 623018 bytes 2 files changed, 19 insertions(+), 19 deletions(-) create mode 100644 windows/security/threat-protection/windows-firewall/images/windows-firewall-intune.png diff --git a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md index 1d461d4ec1..280b81c0d6 100644 --- a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md +++ b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md @@ -25,7 +25,7 @@ Choose Windows 10 as the platform, and Endpoint Protection as the profile type. Select Windows Defender Firewall. Add a firewall rule to this new Endpoint Protection profile using the Add button at the bottom of the blade. -![Windows Defender Firewall in Intune](images/) +![Windows Defender Firewall in Intune](images/windows-firewall-intune.png) >[!IMPORTANT] >A single Endpoint Protection profile may contain up to a maximum of 150 firewall rules. If a client device requires more than 150 rules, then multiple profiles must be assigned to it. @@ -34,24 +34,24 @@ Add a firewall rule to this new Endpoint Protection profile using the Add button Following table has description for each field. -Property | Type | Description -DisplayName | String | The display name of the rule. Does not need to be unique. -Description | String | The description of the rule. -PackageFamilyName | String | The package family name of a Microsoft Store application that's affected by the firewall rule. -FilePath | String | The full file path of an app that's affected by the firewall rule. -FullyQualifiedBinaryName | String | The fully qualified binary name. -ServiceName | String | The name used in cases when a service, not an application, is sending or receiving traffic. -Protocol | Nullable Integer - default value is null which maps to All | 0-255 number representing the [IP protocol](https://www.wikipedia.org/wiki/List_of_IP_protocol_numbers) (TCP = 6, UDP = 17). If not specified, the default is All. -LocalPortRanges | String array | List of local port ranges. For example, "100-120", "200", "300-320". If not specified, the default is All. -RemotePortRanges | String array | List of remote port ranges. For example, "100-120", "200", "300-320". If not specified, the default is All. -LocalAddressRanges | String array | List of local addresses covered by the rule. Valid tokens include:
- "*" indicates any local address. If present, this must be the only token included.
- A subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask not a network prefix is specified, the subnet mask defaults to 255.255.255.255.
- A valid IPv6 address.
- An IPv4 address range in the format of "start address - end address" with no spaces included.
- An IPv6 address range in the format of "start address - end address" with no spaces included.
Default is any address. -RemoteAddressRanges | String array | List of tokens specifying the remote addresses covered by the rule.Tokens are case insensitive. Valid tokens include:
- "*" indicates any remote address. If present, this must be the only token included.
- "Defaultgateway"
- "DHCP"
- "DNS"
- "WINS"
- "Intranet"
- "RmtIntranet"
- "Internet"
- "Ply2Renders"
- "LocalSubnet" indicates any local address on the local subnet. This token is not case-sensitive.
- A subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask not a network prefix is specified, the subnet mask defaults to 255.255.255.255.
- A valid IPv6 address.
- An IPv4 address range in the format of "start address - end address" with no spaces included.
- An IPv6 address range in the format of "start address - end address" with no spaces included.
Default is any address. -ProfileTypes | WindowsFirewallNetworkProfileTypes | Specifies the profiles to which the rule belongs. If not specified, the default is All. -Action| StateManagementSetting | The action the rule enforces. If not specified, the default is Allowed. -TrafficDirection | WindowsFirewallRuleTrafficDirectionType | The traffic direction that the rule is enabled for. If not specified, the default is Out. -InterfaceTypes | WindowsFirewallRuleInterfaceTypes | The interface types of the rule. -EdgeTraversal | StateManagementSetting | Indicates whether edge traversal is enabled or disabled for this rule.
The EdgeTraversal setting indicates that specific inbound traffic is allowed to tunnel through NATs and other edge devices using the Teredo tunneling technology. In order for this setting to work correctly, the application or service with the inbound firewall rule needs to support IPv6. The primary application of this setting allows listeners on the host to be globally addressable through a Teredo IPv6 address.
New rules have the EdgeTraversal property disabled by default. -LocalUserAuthorizations | String | Specifies the list of authorized local users for the app container. This is a string in Security Descriptor Definition Language (SDDL) format. +| Property | Type | Description | +| DisplayName | String | The display name of the rule. Does not need to be unique. | +| Description | String | The description of the rule. | +| PackageFamilyName | String | The package family name of a Microsoft Store application that's affected by the firewall rule. | +| FilePath | String | The full file path of an app that's affected by the firewall rule. | +| FullyQualifiedBinaryName | String | The fully qualified binary name. | +| ServiceName | String | The name used in cases when a service, not an application, is sending or receiving traffic. | +| Protocol | Nullable Integer - default value is null which maps to All | 0-255 number representing the [IP protocol](https://www.wikipedia.org/wiki/List_of_IP_protocol_numbers) (TCP = 6, UDP = 17). If not specified, the default is All. | +| LocalPortRanges | String array | List of local port ranges. For example, "100-120", "200", "300-320". If not specified, the default is All. | +| RemotePortRanges | String array | List of remote port ranges. For example, "100-120", "200", "300-320". If not specified, the default is All. | +| LocalAddressRanges | String array | List of local addresses covered by the rule. Valid tokens include:
- "*" indicates any local address. If present, this must be the only token included.
- A subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask not a network prefix is specified, the subnet mask defaults to 255.255.255.255.
- A valid IPv6 address.
- An IPv4 address range in the format of "start address - end address" with no spaces included.
- An IPv6 address range in the format of "start address - end address" with no spaces included.
Default is any address. | +| RemoteAddressRanges | String array | List of tokens specifying the remote addresses covered by the rule.Tokens are case insensitive. Valid tokens include:
- "*" indicates any remote address. If present, this must be the only token included.
- "Defaultgateway"
- "DHCP"
- "DNS"
- "WINS"
- "Intranet"
- "RmtIntranet"
- "Internet"
- "Ply2Renders"
- "LocalSubnet" indicates any local address on the local subnet. This token is not case-sensitive.
- A subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask not a network prefix is specified, the subnet mask defaults to 255.255.255.255.
- A valid IPv6 address.
- An IPv4 address range in the format of "start address - end address" with no spaces included.
- An IPv6 address range in the format of "start address - end address" with no spaces included.
Default is any address. | +| ProfileTypes | WindowsFirewallNetworkProfileTypes | Specifies the profiles to which the rule belongs. If not specified, the default is All. | +| Action| StateManagementSetting | The action the rule enforces. If not specified, the default is Allowed. | +| TrafficDirection | WindowsFirewallRuleTrafficDirectionType | The traffic direction that the rule is enabled for. If not specified, the default is Out. | +| InterfaceTypes | WindowsFirewallRuleInterfaceTypes | The interface types of the rule. | +| EdgeTraversal | StateManagementSetting | Indicates whether edge traversal is enabled or disabled for this rule.
The EdgeTraversal setting indicates that specific inbound traffic is allowed to tunnel through NATs and other edge devices using the Teredo tunneling technology. In order for this setting to work correctly, the application or service with the inbound firewall rule needs to support IPv6. The primary application of this setting allows listeners on the host to be globally addressable through a Teredo IPv6 address.
New rules have the EdgeTraversal property disabled by default. | +| LocalUserAuthorizations | String | Specifies the list of authorized local users for the app container. This is a string in Security Descriptor Definition Language (SDDL) format. | ## Application diff --git a/windows/security/threat-protection/windows-firewall/images/windows-firewall-intune.png b/windows/security/threat-protection/windows-firewall/images/windows-firewall-intune.png new file mode 100644 index 0000000000000000000000000000000000000000..796a030a6e5235e08cd53bf4e4726de57da72941 GIT binary patch literal 623018 zcmY&H(Dcw1`yGEygfV4<&q~z%Cfrx-~4j8Z@AT>&28_jR; zKfm|=ey;0Wd(L*QbI$cV&;5z}{wz*QLy3fthVb6KdnC#q<#q1e!&kj`@6pZU2e@zg z_|N%pANPSeO0xHAC+K!@Cl4JysDHS3uOWr#+UgPR{E6pBW8l4e^s)ar?x$=X+ugf& zSE?-kK`+33A4)GcahzpQ^lf1fQf^6|%` zS5PMP-H)+A(((dq_x1r4D}FZ_wr~tJoi-ikd5sOcJq>MLhBqx#x7d&G`_~wcA&kaBWb?VL@Bfe+EZKFGa;WgV^vw@ z0)aFw%!wryBTaNyO=pdW(m-V+mzPU1otH6}HzXuiC|a!NoY0|M?(3?a(oUo^9SIkV zq^z=R38naj7VNCPddw?sZUI=;x}i_$j4|1@R6m`kIUN+A^>ap5^`kSyHY!Nxg{Eo_ zRw94Aa&dI6aC5J4E7H{`!Ne;DE2OnF4%_Y+_x3`<3Od|VAYm4|W?bVcp?&ek+2N%NYtrIfQ|Qjg{n$POQqF$r znx4VG1p$R*vJK8=HC43}6I#3?AodNqm)Y!z3hL_ZWqo=GJu|zpcnbThX*Uv*B)Kp6 zB>%M}j}Nnkycts=Pfbirstu|T?*8I=+*zZBvag<=#}F?Z-qcXnsxZk|Iy(yX_cr7g z_suQNvHz3!-cW{Y9ulS5L(zgxJWFm?%PtvPAc~?RL(|D-Nr^iZq_{cvMfI6udpCY zIQw;NL{FdT?3|ulS{aSFb*0N~a_sb8j5rey7Lj~87_)?*Fg>(ohTh^rk1x~ERMDVv zNrawl6iyi_Ft@$>RNaG|H*(l|uX$+>v#k;|#)wcuqh{u`rdR6QI(kNIOJYE~j|noJ zs+Ag!d<5qJ&U*+Uk_nKa>aaC=qC%9Dq1-Hk9G{Q7qjL+;CMtEyx#G$k!v_mZ3(Xe# zmLo{I*vimSdW!vfcSD-ZG{@_j*Httzy{MHGRCe=>lu0R}QYhkb>FH_g@F(^9^3)%& zsVUKB$GNHh+Brq@R-1~b=&+qIn7Mz`Q`D3@Yxw|k5favWcVyR&(HGK#2{zt(xH>zz z3VLPJfI(o^5XS$^3_Gpb6)lZANfH+ciNVH-<6Ff<62-Em&aIo4E!;k@b8DOzS}JmK zb#!v&&HDV{gQHLzGwlJzkgVr zn_4vWxJ)MarJjUl-da6)59@p{2c6Wa4h$|1bkRMO z*%e6G7b`G^)&z#1h_``r0rMA$_kU*Z*euRwtCse-I6BgaH;Z%pcY~88c?>Pg0Jfgv z_BSU*!ni$9JkPytdE@w8^)Y^wo8O#~m>;a!bHA1kxDOFNfVfvLt{Ry+IJ-LY2?5ku z1eAbjkkXu=SXrC2j#@}Z&#LE3HMd&dNSk3-5uTV>T8b+~b*!uFQ zRT1b60`1zdRZXj`I6Bwz<#4DDh3Nw6xk%VNUF?kBIMzA|3$;$ADxUg_&2H-S-{mM> zNGPS1c1X{y{BaS6iGck@+FV`S;nOSKtL=Xae=ujPtUqtO^i+*%$~nxgCSh?2Z7M~& zx;qMU%29&AE+%SpzB_7^pYi2dK$~5;Yn+P39aaZ7>RjY30b7sjOi-!a}){Y$QIr$z{}R>5~zF`RpU7Gx_V6qGFx(?@-b-v*ghhwu0@ z*^vpxxHFHYch(gZd3~Hl6$<{3k;?8ht`)9iZgMQT3U?t6y*nfsQWo||(k*S<{a|o0 z%$%_pX5Ls70|Q}Uph{=877}~iCfJH~ESZvO6MRW_jZwB~d}Ut{9I{pR$;;jEXU)LM zqP08k#CRq}8e-|ME1#HZqgtt)C0k1i?Kprem`KPTl;sF=8@C4l6FT5CmaTKyTvtgz z)u@$7u3yZ?BwSoVgI14)bbMEjuQT{pcMIcSwoSs|YA$_)QTGi;xQCE&wYvL8;SW2P z(2NiG4NuU-r^3J~q7B|0z%PDpOGa^<#fW^G8-Cl+A%Pm=1Zo9WYpQY-#|t5vj2O2y zr^Rayua`YA8Vd#+Td%uV&qddI-k$|zco$Nl1igwm8VuWF7AAUNpqacix&n% zDvB%@$4#ux%noUIb8ydQ9cTWJGmfM9KU?*~USrWiNb0Z5mWRq7!}#2F3mjc-?^$0u zHPdcBeBplUJ~1$clxq?gRKMk!&|n$!ry zWT5-Y8Dqj_U)9p*?o{8Fy>B1e|97kKJ#=8nc8${wK&L3T;R$R7<;_#XwhS1EbLIj# zCuXc%_?~|xp#bE0wF+k(iho8Tty=-0{dpSFssYZS`dp3T44N@lE&b7~lx#@$;*Xh{yxp6^ZLW_BIDK5X$e(y-WyxwZ&% zfT(smk3vGo7Qb3AZ#N$alLAVomFC=&m({2@9Fu7;sRXZHdoCBkmC|(j?Te8!zduB% zCe#dAw}9O=NE2YuY${Tb^S`%3hwxAa0Ar9__M?qO7r?knOaHv}u_u+Euucq1)F2fE zuj>v=3T_#&YM_aI{Zq8qN?92%u`u;sQyW#+;Xao->4xbH%EFh5#rb$~?7oZYCuGh+ znY}}3Qxwpqsj3m)QjlDnU2))w5glUyeQCwbbS&}u_y6$*f}}Ae4WEi1ZX1f$D@yZ* zTLy7Fk86hTUx`+ZGbGbAfs0$=#>=jCZuNq~%bW(~-;yk2VoedUB26mf88g{K01Sy`$@%OQ0fGFX3j9aB!_84z}McjunXlUU%uG&h=cb2hZ{nVU2jU=jef6{3l>!Sw#$d#K zGL~kO1C6dBH(@~24;|KL~uu5v%rG4BgUo2q}v8rbs^%66OZ93Xy{r}MqEON%S=uz$d; zd$D9PIN;EB)!*P6HGFuiw9kFH+0+qw_`W?=TQ1gT<`B)VXs_CoorTx>?^ou__GS}+ zr7B6*8=4QqglAKashg&#tFbw> z*IYu}X#%?*K7uWxV@YWBILn{f9z+sR(kTUf3W~f`=~fDF<%WN?hM|X)reg$v3^eYc zOxeVO5itax`6Y4bfQW!YiC7lP3*FJ^=>XFE=*EIaud)D7ftkAxBgRCyBjB#dip9;* z_k^-Dr>N?f+M0h^^D#MCHoeXhP#5jj)pK@smZdf-qI&qRDBpqN7L7(feXp6t_G`l{ zj2`DZre18l*HbCgc`2{SKK+5}CjrY&jHurC=hCJ>zXsVVTU4YcJ33z1@oshg&z8TF z`2jkneO-k&|LuW6R;0I->I9y@M*}N9r_-{YaPS`evjiS1%r8_;k9b1c0J(SU^Kpu{ zfkUs38^xes8v>#M-C=bNoaNN2SQN^6zVnmNX+&c$eidSibcqQv_`Y#^al+O`I+Zyn^>rMFV9Q# zBRNF}N$%dEXF!Q>et=&G>i9q7ECru`xx9H+FuU#CAQ95{c{I&a+`7+lelJNFKu-Zk zfX}>q+^~ZAPF3YWJapH=U20hEnWR|UVDwNR!jLrYZRM zR01!5>q`~i7N0`5AJyf0vDp2DY`EZ3d3JpNg_re z5dp}xlp~L3-h_~~c8RBcmysm)Rq(_3a)Idp;#;bzHC}IJYlre#(s0)&+aKS4)^A{L zEabF{rc-OuA)NW$Xcb=aE=}3T=Ajc{Yok8+XP>EPwuh@9yj$BtrA0msV_Gft%#-r8 zN477GSYg&HYc`9x)YX^kL#zmOlCp68#CP%+0B$lmgOSq1u546Hw#NhiCb+AdTz^mK zRs4Xpbb%6(Mu$vpBKu{`%Xz>yS?gY>zt^2yZs z&+5#~8?py>>GD$U_u1Dp2~=$y{<4XVdL;ex5K4;~TzxdFDEI$u<8Is0j3Fdr*&5Bx zYS=htd%&iu@oJZgsbAlQWM1M8i(v_pqQc!zUr3CGGoQlnhbww9S2{&x=d`Jrl!~sq z=hGyaMEge@Len?+$#0Ha{#`oJHw1v74L65IEgXMTOY}wEZS@~e$BMNtF!1G=PH4$8 z11s|%d9&|N#)6_S_L@KTH6B^Bzcd82F6Z^E*T$P9%%Vsn4!AdH^}{SgU;ggcXRCX+ z;W@C+-8;JNe{MS1mB?8S?X!3Jaj1g7G4eu3eZElYX^QPhk2ZCN=6?z03hRY$dj(a0s1w^1 zV1|x|#ZtE(wpX4~xQW5O=@lF~!OdKhOHYZx4N^6>`WCD^XP4C)u>)&=)vyQdS+HI2 znFOsxM$(R(`?3Ac&{sAQ?*(^GFU*A7pu>l*-jCGsKXcUj%{|1<@rf%maX25JL#=ve zw|R-z(Uv4#vk~<5#KKQLM;avtWi8j|5A9_&jvsi`6VM`dwanqggKLQtFI2?(;hu`6 z8B5UKVO#80IzO`A)r(inZnXdYt#B;;Rn~@Al^qgiv&zLYTlW#<0eaKkJ>_{HJPJL zxs`GrM7BR-{PjWY{s%!PcVX$L6iJG&dF{2|$}&G>?T6d)4>MF*H)Ly+s|GGo307=- zcNE4tyh+97-GZ??-+UZ3r0fV!{>i1#=;=_9Li7mfb2Z9!2;+R{qy-^WRmJ8Hr!!e{ z*W&V@YIWF+W`~6p<)<2gG0^I;Pc;toz}hv;l)h0=mGk^^Z|PJ=1wlZf`0mc7yS{I za{Z7e2mO{EJ1bq{x@Z^ME_ytA9u~h+Iee4cX4Tv0z7gg)kioQ zyZoG6m-pCC-yWz?JMv6GK~}$Z>xNrZ4PtNM6>L{BUu_;3`U@|`7is9?cWzpgzDnEL zbv>aa`Yfr!@;&qV2<7kgP^)m!brJ%z`vnqoB+RGC3U7QpJ2}Uxp@N=s#ol2e1DH5o zvZrM3Z+RQYM?vc3x1y|`)CuKj5L4clrvbZm@+h&`pGIudq)L2+e_K_aNCm~P71O1D zRO7ekD@-Nu2{xlJEFQMQ4CyBry45MWL*m@4(T9x+TOPG5S{o354uBE-!N|I*RpxsZ z%M_*k<7}Drq*(fk`j)3&wr~23BxnB)oA5g)=#yl39_DX%wuN`Cb|zVLB9ON18zhR= z8YzhJKfm6@`S5}~ujKOYQG9vy#_P~~SS)jdB0fIDQ&Es`I*sHSsJz?&TXkM_M94el+{GlI2smU)r=DgK3ZZ7~HSM%kj z_TZLcunD)|&qcq3WB#i!vIapq(0knnPT#|DbRGYL^wzg8R{Yx*` zeh&zYNzEU(cgh~NeOo8b9Irje`T3oAVda2zYLXsAFMjJyYETzqk$@mca&gxOB;d9t z7i#>*ZI`sBva&Lh)3`D4bW0s9e6ZBwGMdTtr7%UK`~`pZR6NbEBI2z2$PQl9?ttSw zeQ_Z3ZKkx?-mY%o&b63;RD%@@EBTzgaz*9DfW7$L*4f`uuMH&_hy&^4^m*YPe-FcrV=o--) z4^l{qr;SZ}agQ5p(0cyU+)m&5VfObjl8;?Xw=5>;%OjtOW=95gefNS@5; zYSIh4QfU^J{IL8@{Wz36Yoj5(8RQxoNj~%XeS;c{90!9Sz{!QG?Oxm0M#t$lum2Ep zuv;;cSTP%miGO+Qv0G~QTL<#ezaZ>#x8VBkJBJL7Vs7&A4^31K`tHrUg(kpa`|NkWT>GDrvX=iK~y5lh#cIQg_`N6F`L z18=4S1P9|q3MM^P+W!M)tAUBg%xEb(g_(t?$#2zLja1lzyQM2uT>SM`F_zeE@rfn# za@UK*4k{nk7SGtL6)=85&}P?$K~B{R=kifEm6CmGSkcwz;QWwYWYGg^J2JK=8LKA& zrhH1G+X;WIQ*DJa_29YjLwb_#B?|itz5Uy#zrOdWz5c3y#igzK@zF`;(GGK)^t2sn z1lsaUe@`6{>J`pPtqD;>impSx%cPezc@hmZt{LSw4HeXj;YILbGgc|%6u%A23ulbk z%|wT2lrbLO^!q6c{ivH- z_jY_mWNxO>Da84$-N;nE`Sj&)4X}a8Rv#9p?ior$<8Z$9dzZm9lP%&N~0U2B&P;nECGFO;Iv#rQ?Rh4;GM5ph-!)zHN?3ah0v91$emnlgU zfJRRe2EIi*ey57JuctzDdsGh;U|3;Jf6KR5mTPbRJUN=Yus-khy?Mud5rA2OSNUHE zjF21T*Y{01rx6p2He$Py5wxj?A24p zJUBs-7VCM4^u(@D(DnJTp{duv#dg8n4?HrpTv4z2YU7(rbnxl8NEVL;X*h$V|89%Y z;)A6i7201<-`1TUzm*$gPX8y*NI3T|U73aG0fTscU+@tWyP0KCTUSSEuo6iw$Qw&# zz`H$G>ZqZ~w(Tv}1W$}nqVtk(b4ReKW%CA|?JRrr-e7z0Zn}i{On|bub^Z0wb$4rP99^W(P_}a@s+}vl{Ku7o2`L?lyrHl=VKKhLVQ^jT9~ zXwmkW+c?RiO}$F~Le9Z=$fVbg?UGX9N`ENy;fX&JBeY0wadiSFtKq$v>*1L^eXS9T z$3KzhMr$Fw-xLVFoi@ozAw^v2D+(eb&Fa&8)n3A^8zb~%muc|~2fk$%sJ83cvO4K zOv&u7Y|$$+&Al<{$19Z(NNSxa!hbcC(#&Uir309u!;%)K!k~&`HXfY)nB?m9UG4sK zY5B5NRQXGq#}7(H7&mqNVzre&$t}q81&s79F4qBHdq_6g)i6}Ffe~tr!bf2^6edl%6cG?=t zc~=l}vRBtj`hoYit>L%j?{ROJQWZXY^O_1@K8lJNT(A`VAK^6VE_~w$>^_Ie{k?I1 zqkcl8zYJf5NB!nCO&Wa9t6OwsmRnl*ToX6|YC`R@6PCXilND@sZ6*6t<5^~pjo7Kj zx0|X>*1mkgWxn0VgS5Cu54Y8*SvQ!nmztVq_C8DN6|SB8=9}Ndy>~fm3NEc^y?9_> zDjw2~irJ=+f!iFB@Te`48ziY1r-SN4j>c2a=Ert(H2MW$3J0}lZ%1;j)aBr>??R<1{h-~@-S-6ls!k|oy|ph z8aD^*Ce2Nxl~yRUsZPwrHXZa_JD9CN$kl5WmJ00r z^r$qh`{gL*t+k4qQ!+NUd-v~h7Xm#oRz&2laqa3*BeJbl5uf?%8;MXsNT)aIC)&aw z(A10kH=B|gmyv$2RaUqI6o_t(S3aFjF1Q-#lp=Nb^^u`;R*~g5y&f0?ALKE;>#LrW zG4A%57~I+LmN}hVt5Nr&6V@w=g$C_DvDtt|R-p7W=!dBwGm_ zId5ZK^_+ssK4ml-apFp>E*t{OH4E~2ZnR}Zb^oMB;6FI$ z0kpavu5{plNrgMUJY&M_!{tI>JvC~y9WMM3^|jsaz{JF^2`*do14mp4dLX;Cixr_4 zTi}hsB)O+;AQ0#hy@#!`xIv}sY6R}pwBck%{*Lq&kW6@3ojEjsSHuI!NzIC4-uqP? zFYVWLv*c0-{S!%4Syk0Bdh~!^{?abXEXH6CXNh!TjU631{DnujclvONOOmZxoMG%s zn4RgU7%Gwn<+I8uxSVyh#l^5BSW@jFlX{H&Zi11r+{RJy-;)2)?ry{H&ljyeHm3gw z|LB-8wN&kZ;K0p~sNKlRx`ojZV~Ux7rDG=II|=2Xil?UY z)QKWLAS2(pdJ)-J7Ck)$eK+$1m5SJ4jZmwpdF-~rVVK**B04!Vkf|T$Hn+}kc-UO@ zbK$808G13qw<}JluTW{g(0GFkDst0FdL%6qa7iS!-FzT;yrmQ*dFH*!l{8T%&!C-L z9dv=%6_J|WyCuCj3~E?_@{k0b94NQRoE|SS&x7h4w_qT4U(Kr&?n^+dU+56xI^?d3 zF}%$Un?rO$~bH)uWWh&!-i@2pFl47%UYRuJxg{JRuQKAp=}w}f5t z8jsRF47ZuuD;|`dKi%Lc*uU~z5EBp%h!i7NVXdEJESSa0Z8wp~HG6zmt!RgMlCG zv;|~x>%BMJ0U8j~*9Bh&qNZ2Om2MHc;Ew8%h(eK}gU*v+>nT@ zcw!O$7XAp|m1sHcEV*2`>)}$%UfjF<05r_-4rSOYzV`Wrqcwkyum^Ib)or=p?s~gC zKZuWlIGM+f{3GQVb>2UllXn>_D-|sNtDX)k)EfL>!G( zBe~VG%P)W)9uVfc9h`l$e z`M#*T`YY(#&`}^n4m}tDCJ z9HLYL_sPfbpHAD*e8E3y;)cXLb*P+f(7b}KjmW;r}1vGo4(GY(M zcPs>|jGkV)!D2yzZh)`}2H)XgMyQn4P+9iUO9Qtq&5)fvGo@XYr6HQ8eVDQPcF7uhkLFu zEdOTCz(U2hs`rAEO#d`;piAWti-#MejI|)cHGq9QmkX=L(sSrp+!{}K_bpK!N-_|B zaFm$6pjEAp5-1NUT%FUso4?)tpz9y4?`uku*K{zN z^;%3G*AoZ58l!Uaz1D*ytic4_7H;`ua+y8^n0+xRqUo^^zS`3cYMH$BESS!dUXj=Z zwse|@HvgJ$T|g;y@)+v@T(v5fOD=V5k4~DBxO z3cWNPM$Ux%yYuvS(&w&4Exc{q0*(;}W#xu`bf#V77JZn@XdEwD>u@y~eetvs(1Rl39@i{`?;0Q6Zo)EELFIdz*h0RrHkB^Vz z0`SfpWVSB+X0O3!h$3OYcW++12j?92P^f^FpKG3WcAIW(2>dEB;FkQGRA?|(`ri*c z+|?Gl56+GQR`$>*t}{w=!I!(`JiXT^Y`SIt{!V~J>fDxFMOH&jOO(@|swl;f(g*cD zqD*9z$*)xoA{{BX*>}LhC;rs`T_NG?a;=#}fNaXvyF8!g(8Zq6U|(PKpT4L%Ty4W` z*7>_f_&wu*3Jp!-lh4-EuH8mz?8zaO*~5cP7axVe_V>p|3KV!;3^Ti`4C}&BkaDBt(JJM8J)6Xa z(q(!Y1J?OQ$Skc&w(p(c-52q(vExfQ%V2Fyl01KpN#(BR&i=AyC+A-Xg1O;OwNG7$ za2%BOA8TK7Nk#aRihU66DmN7$3Jb%44^l|nJ)Qscf;|HzB=ga=Hu%tB&cUxB|OzAO}Fbi zYC1oG0mbLhqCdV!*@M|kWvq!ih^u-6m?NJ|>TQ^9mq4D|LRE$S!iey;TN!!%yL3tN z4E;}h=`Cm){hDUaovFk{ZAM=FP>VJlt7+Ww;ae%u+opz<%Sd{U489E7zA0)hHYNx9 zvgw!4&2F?I{$a-AKhX$6*JCuQF1a+1k}E6Im+}mcxX}6GM+pMbcQeLXU@p|WMnczk zy`DmbGNi*7MTR8{^e+n5eeae4kzx}HQs0T$RvN3VhD<*VuzKQGz_#23 zfL1;OQ|jIAmVqsDd0qTpb{r+HhELz%Nt-kxa)nNeBhm@Wo7S>>zbbE?jL>O&q$~yO zlgrfx*-wY&Ne7&liirE}UJWN^pp}Ij47WyxVz4>&rF{8Ss#QfCa+Ffyn-^`A?v-C? zgR8wOkBIM}9v-w^TuoJ$KJ_0U8gd*FuB5LOj6-$&K5)RktT1wTa8pCO1LfiTZ21$r-(4FIH`k3&BfiyUSHWrNtRv((o zgmrMKK=}f(cADX57x`Ny{5><|>@RKNJf&Yu+UpQ#Y{~ByYrm{WAC?Tp>~9x@hatNI z({pA9bu?8E|)l zU4X%!RN=H%M9As5Zkbxd%n?=>PpTT9gyvUix5h_GR?$3-&#g|gTb+BgUHgrr$&x3( zbv4B7a3rE^)Y8UKiVSuI_)ar_%&x)cFY&U)^*SXE`|pQwjwa7*klF)^ra-fXOiE!_ zaEu_X+3dTbo7(~I)sw7GvZyz=Wz|ZG{@0FEB4DhAuSO5NlSS8{|;OLQ*+j3AMO@;43E-@bDd+q)5)-TqecNU1{7=wZ>Ii^W1QK=EL5emOyC z7qW6L2PRj!sDUS)-8pN@GlRsQWZa~ab@H0!yw}8(kfi%Oz5mR^U>S4p!;Z$(w@}#&oYDFBx&}|$|ve8 z>q>UBW;Q#6O7T)@gn4(@Y_rpH6yOF`yWjv7Zp08JprqOSsJZOB-w56s)fa1z^F{*@lr`SJ|}f+iF*nl(3?G7SUR9URk5idQ}6ZscfG8OE#R^` zSl4bpV$>m#MAoU)FJ|ttq_b#Yg~Oa)_k}KFn2Fc1ZUORqDL%PB(~r7qJuYG|KPdd> z;NU7ua$CUvgZ`sAw>*kozE<}-O(DBEf+|-BDe?W*g>7jGTeKYXowSta;D!{XDXjG_ zH&nmH811>ul>%+3;V;G5>vW~XNG+2fJSSb!4CV#9wCs15D1*4KW}IwOQK}s!V&o_! zx62agwKY)9*P{I|7At-Ix3H96alic(=EXy1?qwJYS&+V&uFi`vvqBGkIS`SN@m7wW z?fW;70juLz$S~Xu5nnr{Eta+%oZ!gM$F4Q*8>sgDL_wT=Kr8T=W>A|5df{CRw&1*! zE#E^8LS~516KK7DHd#HFrDILn(MOPi?10ZTroEX7IRM=O#Mth^w+{xC+xR?Sh>Kl^V3*B<{<(IUXA` zmctNq8hu?zBesrbV*hM-!tFx~M-2mm9&p^nh2j7^v$;@q*mc(Ntct^x&kk3X)ai+) zjcq4&j3j0t04LL|`Ds489*@1vJAIsR?7018ejY1yC5tmO_LkOaETGh&+Q@5+Z%7R+ zoYeTYbtDDv>;4QbI|#-Fx_KCExF$!yfg$j3YB^5TO4F1MlzW21=cLyV{ZMIl!0$j< zrM_G&>A_S{Kg`hL2AAhMUYu;QcHrW89etT*0kTXTj4Sq1!mpNBE5iTv z5!AJ>$KznXiMwS)%HMr?{Z0%{9iR(6o4&ci-t82pd=0q0*bc|#2^A09aIK_|o$bf6 z@ADPfpZpyjVhq2=5hJe_o1JEH)Wv+0!=xpzk+E^$VaN7QRO_;P*JdW*YcS3k75C$` zu8v^r;Yq7#zvBO;_3v2UCMiUea7|9Q0&@c%*Heh0E_N#^vpO-&$!v~84<4kg5$t*x2_{%##xLqskA6r z%W~X8ueEz=*MO|MW2dOrf*6q6elQLRrPw!T6y)b;nm<3>gi}G7NLrJEz`ew~Q?sW1ViPV$87mwN!$Yt@C2hm>)eaK25{V79VP$jsH3I;PY+mo^ z4*oJEUCZfOo8hEUUH)!E@5U6$R~TmX7bEiSAg|Y=B{*C;g$>YpkwiRAsUZ{)y<15c zgG3KzbKA_VkC&WXf;8 zypuN4rq%D4MgVPM2U5@oq{m6-Z~-`kv}KegINm&#MG!sN?W=u43kSRRcQLQ& z%5D#v{PTOT>wZkq%iF)|^JkuMZno{nvZSpkTRtf734(kbwdL>dT>I&c=nTaHYfg9g z7q^TIL9yT_496f&N*qbT!#1&3HVss+Ym@!5fXD6KM?F^)xKN7|BRV~SwhntADn9F94MPmexEg{?=Gt?Au>p6(2=dL!O7OtAakPa*PZPX_Ulh3x%h4AD72Ir zAWpZs%P-ZC2g!xD^+wf+6%P25y_@K;E*<9&ZtFZL*duX>vxScSRw9Y1kP1}Vey`=A zEb-r%-q)^7BVZ+xu@$q81ql6ZY;>bXx7G~ zwxE#(ZmK7j6^zVoue*tLVMK`s2D-Jf6t@y2$?NND*EB-{GlrMV8BS!6;_?#-OB3Bp zE5DABHztkT%v`@dfF@A7zskETh5edmod5ivrTe_23;oJsPWepEA#Hx-3TkeI^Dt1 zQ1CVC#GxE2DfxDQu+3CYxJ#qI3EJeo1GZH$Iud6*MUPr}7fM-J8xpv%lq`87p;qcc^ zGJDaD8h)0Rwf{IB>32Qz?cgN!B8NdJ0ZZ$_X_8*4UeQ_KSe8U$@Eg?r^P(*|p@6pY zv`?C2u*O$t6ZUm8vs~I}!F_B3jH~0mo9hqi9Z?5+>`QiB$zsdeD?dWuT`<_BX1LR@ zEbxl6lB^W3{)Z*RtHNh+;W+Wv*47pgPj@}e8~le) z;4{b*_r07gxNXMqnx4C97ZLA2shnYhpu@I0jt{xB_Kt@bdofEcn;vX${3mk7aJ(Z* zU{aE)U~v0nOkk2u#N9M*<;PT!T#6KC@fnli4^K1-=8)$*kIVU$ZfecC{v%ArG6elT z!ZKxbU61_Ui+`niDVwuTG&{xG?Z+tW^uZuQ>tH;F zqu!pIYYwQ8kyy&a3A9nzKnNO6oO{B$)#GB#jeX(J4Td0>%Y2^Zcjg%~{b0r!B{P#xtHM@%T-f@JEt8lGQc3ccw9VIWdE={^aICF?cq zu_)>gaOhSuSu+@?)@L-tV{z>{PCaztP{+9f>dh2Lw@$QmN#!s&#J}fsmzhU1!0W6m zzHn*&o5zCxAbp)W$f&3?{c;8}SW|Cycl~REsn<5KvI*4?AyMZl<8W-AB?l2Hck4NW zV+{^l@#7VPMoS4JWHX(NCI2YM<`XbH?_KT11-rf|f=Q5&s_D;y z{+LnjuKmlsI*UfzxY5m%ASmxceSLjgB+gOWs_i-yzd4%?^efRfGei78!rn5V%C74g zrMr=o?rxOs2I)>|BqXJzyUUG)bcZMECX(%p){29$=g_I9H#iP;#@n-Oz$%r~`ZiJue8{*BSHPb6n}(eFSEM9ds#R7!Rd9d`>D=q)E_eOz>Nisw^-TF9Dk~4 zi0pG#1U~z-v_aI>@%PWX!pCH`UDe7re-@WTlEts{@=my)XVEGAaJ^{feq3sL#Qyvu zIH3Dy65^iEvFNX}+gl&f#(?J8t22Y;%O7T!z5U<3O?Zbzbqvh^s9g$*s-@_fC1`Ksu@TUjTpmwxB)xr4a_sNBqWDYE@As z(C6?5->W96kExnR_w`0|4c6q?@+Kktrfg&6LUu>fT8lr*9tnFdX>8K#JjXuA4VEX> zv*qeu%SjLL{p`a}zejOhZ5*OD7=7>fmuPjf-T2Gut@DZBz5VO;r41$W&u!Pg0>4{7 zbN(q2_EQt*+GCmpeN)sJF{+nH6@onG&g z3o1dMo|QME5_zrOR}fAoZxmyz(R4k*XI~CH4L;-AOWY2={rs2oab!GK)G_^evFR)N zTYXEsa}n+oU?z0dgUw^$!6EaM6-)hZo7oZq9rGY|BcQtenjc@{8J z?&K{f#8=tQ*Ys?9)lF)5X3fogaR2*fERzf0^~&EjNpGR6_-1R={8oGQM7JD*mfPta zXbKa|TZ>1pohlDR4T4|bf+Ys*Kcm4=$7m%=ML83unS zp+>gWOHZ{@8<$L~6*Sgw{JUb!qSUGQ-u%h=wtAAdD(I}ROV!3JBRYPKKg-^RW4hM* zZDIZw_=*S>WxZPd~hSHc88ps1U7 z1mx2f#R;ds7{H8$SdKHktwv2S;kBOTa^>k0GwvK)_nYdS5H-W*+;kg3_|a&rhfgZv zwEHw%(dVal?KPdtzphEOUdz2a6`hsLZnrz9(n!Y5_-5i-H!v4ua1(x=7|49mn}A*#HEAIn z^gUzwZx+I)oT=?LTNbbPD(}mh*qTSh9gkME!?)%TU?~KXHW(3h1kP?SVgsG_FVGXu zfR6g>SCQyGUZ8*lsCv|fFH%O$5b<^MTfo$b`(LzxBmGm$7KZUe4hRhKfEwx<7+n6E zKY_9FU?>i2maPX99`0{7@+HhXTmW7GBHyUT+mkNtYoX+!2Is~4A*#19RM7?Wfh}z| zBLr-_oBJFxAP(hZtpm0TSKE9%V|#P@Hc$Iw2}QjQYOMw^xSSjv{r?{M0nM)@w4bm6 zv;|=NsLI^|HZ-08*EhfPAtl;pwgQTTUQ+LXJn8*fA{l>KQNvj1cJjjgqP7%2FTL zs@PPmzUR_A(RH_0rutSIuvp~ip+G_71oSgvkn8K(M{Vo<9`?CNjaub;7rLTeFV#svl;N5Nt5;*X=H};z7-(RA0^k{ z3&GgI7Dq7JMI(>qEHS=&6>o8!rXU{uJXHMr*jFe=wZzgE%aO?>W{jE+De2|Mne=Cj znG~^dTxqK0et89KOBjAmD+_^xjD0&wRU-Kq=^mR@m{Y$!(lBir7Ttta=H_<5`1!TZ zPPODSau#Xtx60TX=y3|gIMIk!pXXKk&VuS}_>?`%XS2q39k$p*5$*~zICYz*5HL(fco@oWKKbqws!@k9x~Py5ySpPS_Ar zj@yg;S=W>Mwek-}8xP4?8SazS0dhpbod!|t<#AeiSnrcU*lu)bKh_V(#JY%R-?*j6 zG4W$Bwwn>16_R=>Y|&SlLY-ec`y!d;>Ru@zSe2qTA~UCyOFDu-r*&Pz)<4T?&90@+ zxP2Wmv8`;EI3W>>CD_^+SBf#{b6gqAsK<~F0JVlzx_X6_3i1p}Vw??xIXiwY?ZJj7 zhu6GqY*$aLCTv=UCNH@p(V6^y%r-8loZrRyiR%7YrOnzx!h5zXR5L7vk)lFhc{7T$_XGMW5MCvMN<)E^I8p6NsYXaM-ve5)C3%vm%)oi1oEX)M-9!_wXBiwN z#mZiovtP7-qQ0gm?SfBH-z9|VO62P-QdHUX3A@Sx$BVoyJ#D()qOJg$26)9q(rM!~ z76VrD+viFYh0ZHaF$Wt4^VEy^A8S-dNV0*G% zhlV{(*oM^5!|@J@3)xon+LTQ>5Tlv_GuDR7kfWnm<&t1Q?BpBcYHP%NCbGQ0jeyno zR%v)AsrZB&M-@`jPUt&ZQcG+e#Rz3y#;Ho`qLj=;!o-WV?F3nPjBz3l9>r& zAq@sn1R8jnS#0;bLmuiXY@VfE5yqVm6W#Y?w*JE@bhe=faGJ^l+Ea4HT9#-9xET)$ zHp0w|A%0mXkXg^U+W?7$qNb9;(V0+zP!y#XM)25)CkRXl|1GDIjCvL*xw_ywndf6K z*va1t{la_uR=viwcI=Ra#g>qa0_UPwy`JuN#prZ4HJNeY0)A>_|-!!72DscY*!(9 zQtq&Hf*aA2t6U|gTdKp+oZy=5K52V4qNHg{5Y->RMs+q|rC_eSWLH06I7{ir@6U-S#1T23Of@oV`nsFCgo9D<@tn`FK zS{ycUkzQP?Z$_z=Ba5=smXrtwwFjHN5M+E5)w)o)4pt{h>-i`NNhEKr6F39ph}Jb} zF2CB}Z&GxYJ9sACDn{iVKg)BV!aQV8l7|ZSdkVFw@;{emIiy|x+%}@gQY)K%H8~Z- zK`tX(ngb>W_H3_u&4%FwdCH@h(wqo2W!Yn-o%EFHUX*aWaA1GimhzM<(2Lr?GBiYm zhQdKLYp*^zL6r@eC7is5gq%E>L{0erI_0qjeOf*u>k;auOK-c9i$JOpE66pvGZL6) zW38P0dZ4>_C_!>WIA~2)(+M0ya>96x4%bqT+<~R+1L7Y21p_cBn zl|)&QpDaoBXtZw6a9(W*SJVpI&leR>GSEwBjPzm#&U>Upw3oQ8ooTm*nFtqaEoO-8 ziq1$d@age&R8m>eM~M*0h}2m%R0PZPbS8b_lbQxE2R$R*dKThrcD@?7IqzucjxIFI z3EpcoQ9)UnHi$1@<#3V4?KiYqq5LjlBha`F&+?5BB}>PtHk2#Xu1et}AVYauOg52t zxm|0|mCfB-$iSYVInomMR3S=F*?uJW%TJwpMwePsWkDRTzg05*FEhEOpR|&(u$bsy z^LY&@CAxc^@{xCVH0E@ppc zLlRD)v?NQ1NtG9=D6Xe>QY#bqO zAYCXZXG>Kf=2Q5@$!f>n6d|wjS(V9Vizwl<@AX-$?z2?horm-8aLp?=YsQ!i0&Q*e z^4YXkZ1W)j=rtq`2L7o$chsc1BJ~pW5l61tLnVIC zRy>ip!Z3nA-Bd=0*kCeV%Sc@pV9zn1SL(}ro>JFNg5>0n?3qgcO$a}dE(vYX22U=S zZjZA#X@5se(4ee)z+pnD^lEG*8XP9vX<*Z_`R;V&?dWnNIsH}YI=|qVtgQ97r01?S zGb^PT-xB8JB@$B%Y3((bIV070G7@a96pWem#|JT{otKJ=h5#ipJK3r#G;Ht5 zh|sImC{P%G47dp$p=an%Z^|vDswkwzI`cW&SX#N;oBPENIB-zKMa^V+@#ZHpY3JE6 zWe-QrfH6Z-PMl4{p)Oy3LODXud#fIM22H-w%f$oV!G(|MlQ900<7jLUfsJwkHSkpz zw6wyv5iha&rD7nwCh|PXkRvaFL3>13M0LKQ z)#lmBxLr*vggZm2q6JD+XDaeu&BQvZ%5X48g^ZhbPbbogBPB*?M%h3*GHwv(^GktW zN~}I&C&LvlwFdYXeOV3?hr$#-(UY(T3XTnHmel9@&g81^cn+cnx{B;ilwcYXWC!5$ zS$~6!lB7_Ta1V~<7OM4H?=WM=`R!=^(41UoEhFGnBjIMUW=mJ%|J)m^_U!#+G+!&v zD$DN$J`c~VT9p*WjRYg1pZD$78mNSq<%x`T}()&9^dt_GX4N;@dKmR7zdEsI4 zwQ-S+IDP~(q~=nEWj}D#i1Q$^Mza)K)8cKYR(BtxFn5bI{lqKe79xyDmGds5x$X#+ zW01OI>@J~+TB%48Ml)%{$HPr1%ep0p%_cl{%!7dkEUa`J-K(E>yBuPoa^R76+sMh+ z@zr?#?}F$8!C=sSaBEND=vcGEu29Gr+i{E=G+Wd)=rw=6rD_#HEV{{==XS`aM4Z`iOa>9(Fdnhln&C`TM%VQsqC9!-{dG6M8b&&=Q zENhqi{-wf9t}N7Uo#EWmkQ{EFedhqlXs7SCU-0fN{4(-I%-@m-H(vzMhi{q_#@Rg{jbMt^}z*xx>+lXn8(rZW-nLhN$mT zY)%2ZtG>`QePsrsqG`7}2j?~AQoc$XhKvRl>jsnYDSZh;+jjk*dZW6Uf5jZ#()oYR zj?4_@srZ-04=AzWPsnM@-@H0XP2AD<&BO}fTcy~%}(Xypp@eeDq&&C=Ba zcut!+S$!3ZK{{l5Gkdi(84+!pGg8(*XU)il!V>5guHx;%qicJqGznCu4@hZjY0epQ zCEBccB+bi|kNNqX2)lb}9z{g^i03-CQYl;=`79Yc<2HO#;fRNo(b_a49F^s?^+?)? z1*u~mrQe1KZFX95boG2y$c&~5MrCj(9ch1U_q|t_ z>jPW=f$QMaV4zr9{DAg|05(DCJoAhv*;}HPI;H_tTm{M&EJDHSmX&;f5J{7pDy-J+@9KGsxrwL8NG%>$tj+e zz~9*coq>ot%5O?M?hFl)N@5vdDBEKui3>~_F^bl)zCx}6-RyP_PVJ7Qf}Oo~JADPA z#dRH{Edmkb)VCVsrqeSE@RkY>< zB*>UfbUlo!Hd&Op&EEf%C&RHG(=78E&SQ)y5qhcZ&)cBer}a}Uwo@vw^$%|w8DvYIYqgYp$atW%nPlTQZo8tdg{hc5i zRotJ$YIlUgpP8=5mPmf7a?MqNFP)LtRjSOmPvB|YM$%}-fHU3n-EJ^A%3*tVWX7fc zJxYDL?mqW6^VCJ`;>x zDXj1R{(6F|R)2Rw(|fDXxF&&C(~K+g3ph@G*gf(!#tH8@5IyEjFCAG#>GPr%{`o8I z&=H7d>`EQ+V;Owd^iPL5_^7Ou8QGV1-z3$v+qCxMKQT*J_Qi>kX)M&8ZaLvHJnz$F zSn`q>8m4uVJcUxxhjgG3(DIc|(XI8cf4&y%OW*(JTSZgUY<2M)f4Co;V%wwnKhG6D z<$nu4{P$a2b;UV9i|+$rYmqY+Xt4^#hcndQL1gy7f36G)UdX@bJ08t8Bl`Zf%5itW zz^tolt_271NeT_$ojsokm6vh;Sg2e4>Mo}IY^iITef%Ivn=o~N+x%5f>wnt)!DiXc4#r@Y_o`j%>vMB} zG}-y|zyBsl>B5Kn-O5Mr`!mDbJe#HzgTeisL`g%#n@{bKT^2Lq*x8uxouUb!!-5I_ z_dWmhQE+MqCNmzO@Mw&CoOE#c%Pm`-`9Ck?KWhejX!7qed}M$?lfwpd+0wzps1*>z zDa}tzTtU$Gzklu;rlau2ojs3hs_KMR7H5t*7rPmeg*_~YF4kNAvwE($XvRUzV-D+E zvAnNezkj_rCbwUnq6dq}zYeSMI_cUT9Jx? z`W<h%==QJBk$x%0fXt_Whxh+^8reRn|NpP| z-#?hp6IWJ@W(R?6H6~WPef-~AO69XFbXD;KRw%jJPbxOK((zQuuv;1J8y3fnw&Wdv z$C(mGkp^#rz=~8QVVH3^0C^OxG~EFK8<{JVMOOA_BnYo^-_vePs}JE@DN#V8#LD)J z3T8`BlM$neHoPc|QVmyU9iP0GdcZ?ul~v2qPgRn;!D-pSvQJG~vV9GQIUA>P5Sh+X zj-rVd3m5NRMnI0?MWLCZdW`YtCd6?k&$WU!^=e?X-ju7A9eZpeP2~W$k-+v)$%ulb zc{hNDH>7Mur$7A-9wuf5MEMO(|73{1$Na&gK`wG**m>yt3?`)~tbCU$K3HF9_q2uF zVi5oXV=bdVxG6gig6Uf2ym&}U+zOs#_feBiV(BlU%|YH`ID~N=Bm5j&O>IJxhyPg_ zTCk$>I{iD!?kjp0Nn5F}taL0ipLGA-xjXY8@^ylqjjcsnn2p}eoK<6vcK!CqAg3)G zKdEY=x(r91Wb$`}3@{;dAgAYC2KK_-HOP!#olp zmht=Pe|oo-maR}al=vAbOW7_a#=Yo#q4Cd|n;0zGZy&on zfVf2gHG;FhOzbw>I_!^*^C?b?TAyE!6;=4EBnQ9AdQ6&UiXl6y%{?womE6yqhRV`* z<=WRJ)`!gASkAnQ>@AE_u(p4$ocLtaOoYd)fO*D+<`3SiH*lwEh(Y_)4a|kXoQcm< zL@jv(j=BZj5e^#{>5q&BiU_0>%$RHq(Q%?>6?7ABec<42to%bA!an}^g(#yi{n*`t z9XY1mkDwh)GsQrGqk|_sBU&g&OuS)A=S(Sa1^H9xqlvIYmrXudL}lYq279TmQOlZv zYegKyYS79?T^!EZ1M9plf-eR;9QKNo5nj6OpQ#)kEjtE5TXA>+0eHxCqT+6M65JA( zMQ6Ly{HK$y$IkDL^3NURMni2v{A1k_L#6yA0?Fo#^?W*?|H4b!ANzn0=>jv5XL9~Y6xLyFx+=y(4j0;U8hRzq zQC$@@E<7FCkY3v+Qv_c6j2XNp^>R;;VFku%k3eAiAv?Q-UhFI!1^Xv(&1P5x#ga3k z{8QLaKpqFb*MTM-+o*5c**CrogADSZ-<3Pfl-WSq_j?Wo?wX_-dj& zH1Vk_xV<8DJk)vr;+@aXWK?$C9c@Etdf6x)>r6BhhEu%O+Q{%LQR8U~=#`WgaXe)O z5t5-tUlcYh>}NmMr|I>oN@9vuH-`m3T64;k&&9tNSX?#Bni5Rn`-pk&jRUElS{7gA zz{7!SPmBBZU;-IT1hCl`olGu>5v<~Qw|)7?CuUpC6FS+iP91c$Nn#NoO=df)Y7mQh zdbrgI9a93D{Am!OB3C+me{23n^Jr5By%EWw)oLIPIH4YZNny3|6`>%3azTaH1{j_G z0{&_+Z+zx^`m$k>!vvUw@bKITEWM5v+<|MVF%ak;f=PvCY^q``DIvU*5(at z6oH$OBxo&JTuP0`H43+g50-zs<m}gCh5IZH&^Iz?pRan&@(xj)1HI+NX&>&% zRAKn+;S+M<;-~xJ`&bkXT>c(hi_1zRDui`A^TyIl1r3@q8dyt}I^{5T6--tMgcFhG z32@i}a5kuC__A8E9djVPsmL4!Gu9!}p^_VsDTke%J=V&?Z#Nw*y=$P|wk8(?MiB6f zzk#Rw@_5zfWDOge@G1YgQk=5X0KgfUkEIn6dVI>u!zgv*i zsUxMQhB^^?Pw>_ws>K<;l`%Im*%YIM6YB*Np|}+i%p02c^!d#DC@?98>C}S%HsoWI z@yRv*gX8ejaz*|CY05zLDDIcB-82icpmW?iOXf6KX3cTiiG-=F(|3an62qmqvF!jB zep5GDjhwJrdH9u~$y`xpwanAOr>=MmA;5C#d2@02=FJ-!#5%bgAvAZcgMeE7lpc)F zp|d@Do8@kmQ`Ac6iE@ftQ8*VqF)2KV5cHSwHoe!~ArX9zeZ=IJNf3`#EH3z57iVXN zD<+kr@6{xh4CcvG4&5Q}7w*ul0i5XKkBH7=+AOLTnhK7ZdE}uBp&<`D!1waAq8O-K z-klxHYGPE#5o+omEnhfu{tG+qsNp`v$+P!JfiRvSunWA87Dm<)#10{>I&NV=f75dO z_19e~<)Xmj&>iJwiW~w*sgZ57)BJ0&-8|x1R58+!w>Vz=fF*pn9{dQDcd__d_P)jKxZ-!fDXU{^MG8479R`xehTh@H|LJ9T826*^Ucs#hsgk^;>p&SNmMhT9LKiq4dYH>#^-IbFDsBHBv>+h3k{LO9 z!c6(rP`|qpMDZ{P ziePmsOFO3>bBo2v*=?potpjxwI6hY0`mm9-2-Y^{uI?pwAv)$DmT=<3^Ngi0A{IGl zW_t;fSKJ~=f^N^ZhAOYKt9;oH=_yM#Lm$whw%{Xc<`B6^I1HsK;+Dmy5_=UXSZZFP z*=M?ysd);izF>cYZi)f3kpchJOxxpC@}tn*X&<_AlF(L6ags>f>pUPM|0Z^>=HkM6 z(+w}Nr6+A9E2P9-LM6qz4`iy!3{q|yi7X1CQ3Cjfb209<-uz z?Uh|(TJ^xdd*D@3_L3o$#slFP&$JNf`B1$`mqPz)I8VxgRGVa@SS_ z>B7c?^l?kMg*!+Ueo?7}9X8C8*CU`VH-I>d>DoUEBL#SUa%s}GvdYx01Km@UqXb4C z?~gu|FuX#O#W;ZDMb0v})x>3=OsGB>VN7YOP3Nm&*fR(DJ6ZO5%3{&BlVBJ+t1kNc zVpfBBLjtI1rt?*f{I(OHt7i+KTg7tA%lWbKXmyq$HfO5o7IDI}Si|RoM<+mRq4E%;}`=}pIVUc;DNDla0=(J$H zk|*TFk;)k-?lw~(+qIq3loBY^CjDg8u%{7xLzpXm+_J4Mv>5@@8P9h;2x5j{a}r5YgPxBF<(Wqw72DVx5JJ5%abn}+%q(|>$`(O#E8kcQ>FFm1AzEGk51 zQDu(*v%}k3G)tC(a4W7QzS6^ai^m&-Jg>qWVNa%p$clTAb;9!NBdph>l}Mr<1ZgQ- z+TiqIdt75$GYv9kXJdQa@#hElF+Oxx-)*ZAUKq<2|rV!@NK+L_qy` zH8k@J6ybHNIy7F{*pn#QKz#hIu-5(#ZLTr-EMR5ABY4>X_9!h5BQApwX|Tor0pgn? zx#}ysK*?Qlb|Pge#`_IqwAhEy8CeHe1V{hkXuI;@i>KKESo+ocCrWmAu7On@8po~n zfNNMbTPG-F1mW;<+mVq9Zngcg(D!sSZnUqZ?m*Bldile)Kv~oOGLt2fowDO}ukDnO@uD_lKJ_$ZiGL0}h%hCh!ze zzXl9$ILyB4)>nXo20H=jh}FMXuJbAs6=-pmcV0EGlPuhklbL zc};C@h{3}B$JRi#^nin^i6b>{OUD7N6wi(8e1{7ggpxgsSv(NbhIH^>3=>=vn zPn_+!^bypzfFWd?zz7H_rKW%f`f|}eUrVQn-d2bvW>`7oa5M`OMcIqSo55TTDK|Zn z+i+>kwPBG|a>t`uEC)?qeE0yFP7~z?9N{MbOk#8{tj>a(fF6S=a9!Rk9HXrP zO?ofkOZYvwEgN%myndD#1U}+ggwtrwrd{GNIX!qmm>3=G_L!3_0vSmV@fP*~1CJCu zFS|qg|LJml*{|XEeZGJ;!*@YC93|Fdz1@#L=?{>9rv_hb?l<1ezQ`gs4HtS1<;b}X z+)H>XVnfCif&)rYU+$(9)CnAKN1)At(yYjkT`wxyU$C~39&ZJ^i$G$T+%;OB7D8GO zG{aqcQ#Tt*KEO$|=yDC9oeqU=9n-$6c!JqYf#@*^ZemQj0|@NxoR*^apE(^Mb06}w zG#pMr@Wk-tb&n@_79$!Z+;pE^*b*V!jJ6PT*|v^<3QM*styzhDD*hFu?eHQPw)@r{ zU@e0iV~Ut~V?wwJ;4BgQ81NCCg+Y`16CfJl304Rib__Wl4T5;8OxI{lr`ES0Y5!8{ zT|~AS5o2#bf|p_fsWgM8_r*Gj0}#```Tb>nt9U>XY?q`+{sJjaRyaE1>#8f@>xItE zoq#461b>0#9>P>oqzDW-k|Ksw^iLLYm?~lqPan^)NVZBtp3D_7!@T#?$wB=yUxECW z>7BAoU0N{MpuuPF^6wrlyO>326@sGu0B&&m}?+_W^P1v7}1VK#`^V#m<3MeSrHRc`Jp$bTM zmNSL2(cs7_1zR|xRxV$RAm$dTP!n?iYb-* zJPb5#5w8q^PZD*UW65a~QiP|x1J6t4e?U8|4lHRco8Im{XW79V#J7Myad$Z*ss$$Z zoR`U((KHb)?`cq9)PCsOJXmdeetZ={s7})jQ_+K%>28({YTB#p!ksjJDvBC3V~~|c zuEyzujzaoGj3$qgS*d&j&aEc`70GTcW;wk!6fK42_+!Il5s59e%4hV@m`En|oMFar zE?z{fbpUf=E*MKZG?+DyB^L29DevF8#iMr&38L@5fkoh(i-T!`(~Yi9{4>{}mZrr9 z`*qOOf$P?`=34%A+)-W-kcVo%I(dfN-nCO}SV!=t_LLdTGB;inB>z=^%+P9~&>y+U zRmJBlc#ygq<2SAMeP4nFa_3cVzbbHhV0NCiU0B87vm zOGUErifV!F;_tBS(#vgf_zrsxl;hm&J{(bJ5C$}}IXI}W#fDG@ll5BAX(r5 zhMSd`KavSJ;9>CmEdWGVuMNOp1XmvMezMMTJc{~|{7>0W=T+x1pX|B*R=ibkil^{j2qrV^%|3Ui-)Gd0^lMShZfJNJk>C;T>Bw>&^Kof%4 z!&3JV3s0PJsz0s22ShVJ-+sH3s)(WSRUv`B557cEE)MuI*nQyXF~wbIVcD-_icz0) z)FOgFk>SbMEI28GvzCS&onJHP0+LIkl6Ea!a+W4bA}Wdz!)Lb#Z<>+f9DM>SZ5M6GP@I+$DfS9{A}INvqsS2 zCgZ~J!e&)-9z3Wl&+AQ)TjpSxGHoR1wL&695nTzo{XOo7uWMlu3<>}pjIBQN{gx}5 zfp6oG`EH!}2Rcvr=9hVM_A!F1^V#mRsGz!?6mioza5zv}*&#O={5!@PWw|wVXM_t* z9NV7%U@`sS_19M;X^eL%TZc4#KJnH!^;W(W`osKK21 zoxQ(eF$e3mP8ci&Y=-d=(Ba@AIp|_;8Xf+B(iRfBu`WkBuZqL_v0CQAp|tkfJ7eeW zGKx=1H`er~&9V=roxdLhV`hL`4j(+?>*&>FTvm<&h4d79E87=DX>j?`g|$WLIwQ|8kqQ@=PATeXM?8ProJ_2IVO}(b&!38a$ zoTDeJZI@f|+)Q)ywe;g*q^oG~+~5>vgSqvg+e50b@2c z@|2215ekea0=HsFDF@eScLm*-h{EE80IeA_0-gp6Y66#WV+@>ew$gLkgn`;!EE3-4 zc1*Zh=AyBNP0$H4{0xhNGlN7(cF6vKrG9zoZoT))flHlKD4quQ;}DEXhb&gQf_C^u zEl-T>w$BoffJirU^nn2WW8u-#co#%%82;_#y@jQSQ{Qc%UZmm&19PN80%_><=qnC7 z>%F@1Igms0RfhjcQ-^fQ|rr5ysd!s~o8xz%I>E7PHoCQ7+)%kE_rX8SoT*^HbNk&GCCxscHrR z;mOh$RfY3qKGR*6oLK)+*76naWf$EuH(q95%9+D?a7K53T&}kr11M#L5&sU%lwJ%^ z<`k+`a4yP13hTj+<+1TL16-biO!AaBn6!{myjF9@zXv3YRTl7HW}wHWWyT1HldJWD zQZ!~&H8~9 zA12Dg1}tB_V;e?N0OQ4w?M-}`Z*nmaLrZj$v>IEJ;{z=qVQs>c6G=LY`YM`s&v=^o`wxgoT@)=vr=`^;wkG zMKwY<+PGM=;Qiw~#&BHADnt-pIS8$Qf=n9v@-v_WeS`1#u+in++OC`e0{zr1S|gxd z{;t*;+?EkxDyIaJ@whJ=03n=q3yapxIAzZE1Cjm}q37Gll9Q#DO=@-^BctC%m!JjG z#XpLstRDvV8uY*^h3HN6D0B+6-6Gow{5B+5O#a|ZN3Vq|B!!Z(Nq^ zNT!Nt_`|YsL|PX67EQQ;5(09vH>|kS5;?~O+8}i#GZk2r(b80l%#XOynT9hp`XO`R zud`M9L&1D<#)%C)B_>(fhFUU}?*=>@xQ<7lSFsYQzrKHVp%ugc7={aWgK>k5CfY7o z{u31MY(p5*DkMR!sb%DorO8a*?dM(B*p#%Vwy$V!irGHyQ0szfR1dlg8FYIpdH;*s z^~WGk$m)mULQT4YI(EtdpTnHB0eArwIt@01Po^Wf84n0iWdX!eG;Kd)jI^R?t=okN zV_;52q+b;mE@WI(0{{?G+>>2`B&1V;9x@}j!30+NWiUbmEfc0Va<(iMd$0dqg3T5R zE)_?y0wnnU&wMe8j@FSfo!nJyxj67BbANeTVbn;WSzj4}If{?eddC930H~aCVLp z)-}K=g4&7A8}yDwg^hJeF(GQbhe_yO`5n{dfLrz%x5yOUH#|-l{MX%@Kv!i5KmfTe z1MG#epwSv=wKl(71xG{@jSNYqj`BjtQvXnqSb-Ge4EVOu#bdE!eo+NoS)!;ugc5SA z#SGB!;Z?|;gSq?NMY$y7S1H0x8pGO`@Oi0B4%$B)xB6p&=^Pi`_#oa{pl^(@OvW4V zU!P2x)lsrD_d#n@uG5bNDnp?{R9;xW?!OhQ5E_j1_z8<7%q@mMaN2Zk81mr%bQcT^ z>+ObOw$>54# z;AMcA33A#`FuLuGAeaI ziaISaa!WhtxSG-*tgOq`b2X!;96|OLxZbMsvqbkG8HLdAlDjWhB(!#VdPHBz=1|8o z4LSaOy?ZT2A#;(5pwBXLcGgzwbHR#4T^IOtld7XZ6 zaHvtE8)n&GAX_~t?%Gd(Am0nTT#cp~Ox;M{^ZE(mgh{@@Uw}~#7DXnan&~Sp!VN&w zF{TP+^CUBFC&xT0hZeUk%(r zls%^9NqWfGp;EEw2MB_Iys>xFf*I4r6d4QNV(w1+|seJ5at5SxN=N)I)_DP zjtUlCS>G(a(B^vVBFI6$f$gch{;3w%j}fdf{T0&9V7jGrAaBwe1v}hFpT2H^{}Asm z3HzG;BY7U9tfxEmId5gI>lbaETKnIe8Nuan+arVkVFeE)jSq2{T+Ejz^@B}IKU!KG z-JGy5?mW<0&@l02@>quXo&xu{OrJo?B{4jO&~`A$XvCmkhZ6O1rn|joQDutNeGmPj z`man#77m>VCon4hr7Q)PRK>@wS2EWCQTl=b@-8>?(r<6#X|PJhLF%L2^AMp}GCVd9 zWRFWJiXtqM`b{JAL;xTS(pcsA<>Z0p0T4ZO?jryL9>~(*`GTDnbWu!Q_rRRZz}EsG z7i}k)r7)J$^w7bNYN&!3h$zG8HUKqAAtYdk3GS#UEOeUr4Mv=Gd(3XM4>Snj`=Do0 zec}O9Eu~nku}pYx*gv<+q$pN2`u}kZn*(*Ch-%_<*MmQJd;K#=-9~@I@K0t)gb3@T z)iei$q)$QcwYzf5IS8pDWWc{SRA~XS0*CJ%Z+%8uIE@<*l7sK)c`0b;0UQ-`+vo;_ z*P?Ti&8u%(!jr|KeB(2_9#Ovle97=4N^w&mM_7bLaBwKxhaqEXUd7NSwLCuDTD<-J z1w>nvC?-=yH0+WP{gb`-GC2kymW(DtYfztN+@%zg0Hzm_Cjq{B<)h*7|A(r#j>{^I z)`q21I;9(=L+K6?q>&J$kr1Uz8j+IjZX_j@5a|vnK|v8oNhPJ@ThGin^Sx*OoZk%3 z-uJ#&UF%xcnt*_YNH)<#O#S{&*Ws%s=-^^Zl=t*lSoNg_i9?`&uyppu8QbyAE-@;S6Y7=IlcE#L5M%dh&XpzHxjK819KBlW&Cyn^O(8 z%?6~av|;fGR**=xBy_|#aO#~A8aZqlZ)%`Sk9gV+25DNVKzF81)}s=-sO0_S1_%Uz zB9OF7!86!4VjDy6fa%IwbaAS#N4_6i!fcNL%D+Dl>+m4a*Kl{gvt+9%>5BDzNaqH> zDqi1S5C&}%lu(Gej~{P@L-i=7P5NZv}O zbDs1{!QVT*AEp$3N?JTJR%bjJXKHsE@rz6PYnTf@`573Ku@ucN6cj|X3mZUDMV&$s zVsPlyS*Wqfbb5D4?t|rnz-y=}uaaVxsrTIELvcG}8=rkAd!Z0TBd)i9ugAg5WOGl? z>lxN!z5Am-fUd?2e3g$g|YQ3kf20XSn2fSTc-PB;o4_xEokH-9AIK-UiXXV*jN94klu3(6&dD32vN}s3jn4wETv0$@5h1#0&3_8nc4WbhTQ$&D5e+@3#iHA z!XPSGwKO?n79{LiWGe+y1!V-#0}O~7yuScNC5SWu)C%m8hcMG5!xe$<{rS_Adf5m~ zJriy z1%4iAq-yJatFy)l5}=U{1KpS@CX$zI&gKz`ger{Twy{Hns&tvDJ30gX929R1Hd?g8 zQ@rVsbVR#*9TG!u#5z=Pk?B)-KOvT0Jc7G@$CibX=Qfr>S${)Mr!K8d7j%SPg=%(1 z(rZW+i2+0vuUfnC9WL!f*UlsAAs* z#6ErY!Oeq3kkEL!2n4goIy&;gNLFd7F~j6#(65IkUc-bRvay5m&Bd~h=Yy1LaXe*x zAdidkwD31b+OrFah2%JOvu2gCC9!q%<_KiRF;L*`mGh`>j5TiFT z*dL22XQq%HQL2Rhcz5n8F8>F9Ev!Q=Qa%iS2xW!bha_o>2BAT}_Ms5t7aR9v<$G&j zIc}|+K)A?YUCGc5ofqW|fHG0j@P-93oa)x&%q`jF%y(L;O1di z-2WQzr)${HvG960S1L&YPd!Cs5y8A_PLd87)!^hoA7F{2vv(HD!gmhENo8m$AExVf zfSOP&;#1TkBrFk58zpg&Z0A$hw!q$;jR=H2(% zvO^l6P)^K4JIAGyGB$2_fa364mRbEJ7J6qrah#@-5l;l8tva)eQ94Q>vP-;T@f2p8 zM;U^7knfBcsJe9FIOw$4vNvEYFoZ+K)nV$nIdxwS`J%E&U~_8=cps+_m&}2+wSw5`!|D_I@uR{L6p7GbH{{Vjf)Hi71>Xf&QkUxBk)k_ZS}k`dO3eGrB@uzX>_ zm?0@?n>6SLK=uH*O6Ncme;xfA5WEP3IC?t(by1yq`s<7$WmGIUcs3j%143xBf&E5d z#-3=%*>{99>WXoi9|rj}!2{9ce_f@N@f?qgBe4eg*5{a|J;+2Ageu?-pkrkUD$yuM z-cZh@FM-ATf*GabM%@agj|=#arGG~C-Kj4Jc)18os)$8`AI+{d@BHBQL;O&vjBP+9 zot>Pl7D8A;b~rY;JZE_(BGi9oYMBTbewa2nF*v-{+XAIpc^gWR(~l0H!H%e4ENaYGtLJ)dk!=I(W-?O*RLF!O3ZsB;odOM} zBdbSmU!Bp@nryHL?PtnjLK<*~_l) zg?dHx+jBr-VNXU!4Wb`br@0&>{zs;mMKxu>pJx;B@=xq}L>es;;vkpLbW@Qo#RRmr zc@x*56LV5`sK=|J)8f%*>ZRcNFE9V(oPe%pXRR<+N`+Y%5_JDbXZyJ>rto7&JG;gH zi-OlYOKc<d9jF{ zt-MkoymamAdF^e&vCM${iwU@T4c4u${**5V=I-oqhc*rbBp6M0mI_ z=2$7=4=0=Ui&fq|Tkyw3LNgeD`S2Jh8K|jieg`6>ff#}Vcr*+q2UXE4tfS~tqlztSwB2VxMTHSr99I-;GwTVL^| zIsby(zEZ$#Hs8NtU!G_n!>zoCyaaCiy;)o>qy!Qrg}~PPY?_j zm+GP9i4V3(O2VTTdIV@NfFm*esm~-ACy!sV50t<{gxQz5ejqK*;S}LmEDGiscviir z`LURN0%eJ1Kwgl?W+aUvJr$uyiUGk07*QA&v-LuVuMUmh zxt}SvLS81{xc??=F znY#gm1^M$(QXtH`i>XV&LUUGx)skZ*z7AMFuBxV)h$b`EFa;}N80B!{OIOiuci76r zckk6pK3U2)U1-Jls=!gcBuCkicq~dng_2Py0T4t{h>Y^6VwO(1WBrCv_yJluIbCrL(3CAPwII6@?N;RQ zu-O=-=_zfpWT_FAH*K12A^n%o-;LHyX((ZI{vyFm3PA~4^%6P{lz*W+q;eZ6-K-oB zq3lgx49pKV+egs-a6f~_oT8Z@v@9h7!h7H~07Okia@Z#|4b8e37sh!9+Ac&^q?NQ46+m|Mc?i>_rg9sC1vZa z=5!uLw8^lDS(OdYdp_NlmB6v_zYvA4M(PdytHm(7{b7v|Cs?96aPIdLbAmWlKH&O5 z`Z`hbUYE)S>mQA)T5PHPS31UQc{(CGa~N>}VTo@|KvrL@D&1&GM&9fG0Md8p0*}Ge zIT@eFw!tiIjN_7aWh7lYRQ^uY0T;`3b}V?bMk`)If>_@B5zwQM-XCBBTP^S%4iCj7ZALEa zyzXH*!~5DPvyAW}Js9nmza3-6HrXu@b%<(O*JHVK;K}8-Kv#o#%ZU*-tmJxhF`{By zWW!>g@m$c2v6;dAJ_>JAy`J$y)5Iw6iubu-=tXqR2-X7QRv^Cinf?fQh4nKy+c|#F!Q<0*zx>As8RM8CDrk6oSchTGV!^u}@q>BOo64 zDHk0jd?>UnwenV~z+a5S9BRN)DQPzidys*cSkm-ZX zcv_}k9RG=yvZ$>N!g#PLDmaHAxrre-EdbUhyqF@mxtbu_ck4!ugq;9;pgE~*rE61? zA%^6L&*8c=BAQ~D`241OOm0oR?Uxo0Npewr_+Aqnf>_ zp`pTX))CS?lx2n91|hC8yR>Kr!uvTaf$*I%592>xxnoo@JrqlRX(3l-+MaWZ4>VvA zlo9Zt6ntiZxE~NmJNiPH=Xjnh$U;iCCtf7Da68VuHA5#M1NT`t!@|pX1T-4M#G!|1# zsKw|xn2;Y4SHWBgr?WkBlza_mr^alrjv4)s$M+BJoQsSTUGT9u770B0(d4S3)SP4N zjJkNqK156#jtttknHTkZPZ*vjG1J5|v>6rL8hwD`O_yk!*f7u=CDdOI&}7_pGCGF6 zyBU)5Le)R%C*YoS!oiA5fM>YC3LIQYffc9@X-vC7X>ZTd+G%jp1&TBvI`cf;h1O9V zsn{P<;d>$7r!5$KtAQ$`hy_;g84bsljD}S$pD${db6S^GR#Y${BN(J;?AQ9u*A2Mj z>xi@pMb&LI044-rP3VNdh*}3!c&w+DMD$i0pG#tk{P}`Jp~xnhG42#{q_LVkPK zVTS%X^nRRzjQl%c-;-TPn@pr+-C;X7=v$`l;#s(L%qd8x8oOWx-SPzB5cl+}a*fqs z0=#)P51q%1c{`M((Bz3OTcpE9kEoy!U6KG@C+$1X^Zb1d(JpK~Do?6w@nv0Povc0|FQci@g zG0f&j2R#&+WFp)JkROlNFYGn)T#ZpP>E{PmMI8t>h78}*`rs*~MXX8pT(Nvbc}+f^ z9DR4RNg*;4#HywE>tqDrJP!Japbci7Aw?ed4_Ue>)}zI}{8%@-99Sxe@=|>j$Qk$e z9bpz4*maaWh-rvr&2IT1Ea;nlvcflMjK+w9AlC)3G%@UvHAV5@oV)%#k|CI$xS{N7a}QQVLSq$ z43;th0}ocj{!WrvFDNN`>jV=}ORDFtQ_4;aXC{EqtOizLME%#Q$Epfbuq7M5uPZpI zC4MA71z|1xOv_eoqXuPVk74dcKHs^5oR*#^kQAK#*zxb@M!xMF3>i^f_hXaRkOf5H zc0rIDNeFQCnoF}&OcYJ0@FI2>*>|SJZrR1EU>JNome1l8_$wJr<%p~B?W=cVEa`N!WS#6SL)+6JbLtKB^D(ZQ0=q_thZm~88trF4*0Al zJeZ4q<9XvbX#Xl9b@jvA0m5JVgW4m(c=?*)SCeGce6KIQmqjtwegj{v6otlD$lS|p zH*gBrMW@OL6+4SkYN$dwRGAV0V&>l)a`ZpQ{0aQ3o;-FZ$cG1xgcqe@~3HZzK zH`;X!ZUlG+_^%l9e#36Vr%H+YF!A(dW(JeR1?xT*HdY?XeGCklkZ%?Gyj?1x4^6z| z;%@;V#F9CKDV}gK!3H-OG5Yf^IlvZ;Z;d~ZncNDu!gm6NDa-$C1GQ(IAUgn%@$kF^ z6Z(RSkQ*B`9jv9ytJ4+wpP8ZpXVX=+1I##O=D5zkB8JxtFK!6+Baf^^6id%AyP^{c z&`DiixayG{hMVNEq1((COam~j(Y=2#Vr6#5KtqKX1rb=EI#56qxM}eivUgLp?t9)K z^M_%k)fTqE&`OQGX5bY!bJ;XueqMcS=B+wGpm&Blv=eacBg9b2yOoCsE)4Cht5edc z7dfxjSl)G|yA1L=&BhYwCJj%ewuWB3bNP3u2tF4>11fe62nLLn`Q1EY>Cm3zxoXcwmS~ju*?zVkM%zNF5wv#<` z^B-1Bx7AVoNW%RJroqh{J%lMIqj9me|7e*Q>h0Xm|{Xh}qeAowd)0D%H*`b4r z2%Y+bhDTl-3p!^_Pb|=lrOm0XNNzDAWz_5Dm5lQdGyh4bBl&k+|LS+gq6(7Dnv;kD zH#9UZm_U{>s9J`y<`3y!W!EfQT70Lgrv zINK29jO%Kb>uky@$Z&~qvtf{q>m%S9%=~0Bc1uL>w!b&-&_I_J?uM!R^usjTw>{KZ z`RR9`-CD$4MB9sF2WA*TH5Zm)B0$88Xl77Skv>~zO1Xp#Wfm4<4@Y1zgV`mOZUG%f z3dXvsz{$W+l34cWb!_W#VD$&(megs?wTDmpniUeq7w;9>P z3nqPbxDV&$ci5GygF=jnF!>|w(&{3LGUbM^{YKaLj^~*380n33jycbNtcf3hYX6Am zleUAXHR_rueQ3j^NqwkRzn9*+0qWmd(-p_#^7xV88nsCdaZn&f^gkroGgZr;mh@{3!GNOCd;7oO zA?rM?ToJ<)(Xea?WYTp}o3Kv;Wsk~=K4X!%W%}m~08eUu|4Llv9=2rD9L{V!iM3~XzHt4Htvq~XwDVxS{WEYj8r1~eU#_Hx}K*O4NKbmVG$ z`Y>a08`B&2_4GC4flSb7I}wbu3oIhS(s9KT!DruuGBi4&Ge04AZHqy9^ykNG{5$qj zW=?wLx)E0}TqX5#Ez_}WadF5TyFe#j4lN^=hO{I-%D&;7gmL*g>~BQIw~=OL4XssM zyMU>UF4n^MY{`_eS54Nyq!E(f;fe9?TyPxELt=^~xn1lC)9z}Ifot+LAn7h{H=m3+ zL5eBrF}4}Y*N4Nr8F1cfG|IE#lXHbKu)y{;e}wnC@sR zhE22%q$aRG0*Xb~@o|4fdSMVq zp5r4UBR!)C<#+_^Ddf>i)@~m#iOpqXZhRL^?qzW&H(@{-d-Yi5?W6ZIahfTgGQU@> z+a@gCdHTgldKWO*U3F$O4OoLcQjryDs|*=mZHH>&uVqq4^CPPD-R&9u8U}NpH)B7Z zwv2IRhJI#%u@m(3Qlsb1ud*pV!Tg1vfk9dYjWOM=P;-htG~{Z*-yXilfC2AWunZUb zc(D14u`7@7SS4$cu{^)bSL!keKzo)lQ%cYNYL4ixcUWESqI*=vWWc+5)88Sg(dO+1 zpJlao75=!WQYq(4y3u8VcyGSWjFYCOIJ4a4!h%^ezK-b>t$TWEG7`kMvx5kdz)udjs9wz+Df0;PVlsH$~vy{{nC-u-MjeEyx%Ycx63 zwO2UuGZjTr@JHlL*uCl9JjviC*KNn)^IT<-NKAJH{RaA8nA?RuwjqVSkyGfS8hKTu z&a$%pce1*?gLOw41G!yRTd$b&eVe1fSwT$5*x{*`Wrnl2&Wk2ePlIe!7vipRR#PzRC$Ca92 z4EnnyyK-cI7P;kLW2g}xQ?KGGt`q!a>uW9!=gJGbHKweVM?b3h9{uGDibgDHw+3Y~ znk6|Bvv)h+8}Tu$f;fw9Foh<7ade$A@}9>X zC^$*QSQ2_urRpf5{)ILx^*L?&Kj3Bfcu2hVHvSIzs5nZt)_8r6FZE+<8U^*m0s-8+EYd%epQ^cJ-@&1%98EL*%kZc{OJ`Q`R_#)jI!97N8X8k z(VhGszbb|FIpSbH$4pCTE19_;bi1Z(IwYnG zvoR2@It9ZmtMNpG^YG)1diE{nQcSX%2L(^b7jiTN;K(mhEK*d)eIn8Hp0?;ca%^+t zU2JDftU%KB5HcHSXzjKR+yxUs`whixKeFHnt(wQyY}t4W1~ zmOee*n#Zr)dd2JMj(N9O{+@TD9kby3z;wxVq0Zo$gmup7m%FV>ATs(t2*zTHjoN=%V4LTl~J-YxulWzS~pKr&-R zU;1#WG@I;MpPlwQAE%sgoU7lSnfQ&-dDXK$HNuS9Mv3I zRacQQ{L7J3@?v7418H)#zDg$Y_9SLr;$=3*(9o^k!O57&r*+5j&j!9#mAQY@x}SSj zh0+*>#cA5(CfZq0#qDDHjfJzwZ;!t=yV>_37ms5!+B_svlmGmTe{l8o*!wltQDtHz zy2EfZKbGOqn|Y7Rm3!^l&MQ;I6$-IkWSK%ptfF*qkQ-lMr!k^g)g0CDKyGxj0L}EY59LLl--^-n1ZBgy&RwbEJgm&6*j9$hYR{gmB$-ayPwNXl3`74fUzpdGM=vaKPBxT9ZJ{q-p!1SAcoS zmyK3dzi0TRs^J0#2~(}Pk?j8z{0e1E6$^LXJ@ zlP@o>_sLwHhH*w)mAp|lr~5L$a` ziB{@Py_TpAc*Ywd5=!HDm8tNEevk#}mAT&6!ugwv(LCLNJLSJUKvEjsenV`8@l~I_ z{PNi=1%mXP)cVQ-1FZFxTE5|Ou5Rf~Ks!S(*p z(Ac}LLrZ_4C!IwpB*-iP0Cc|$V6H71jhRPencRt{9tUT{2sGj*S`77Qbb3xf{UT_ z`zw^jKfM@_+?x|d|9;GN+W3KlSr>J~N>qPZ=AlaA%3WTj;`J|=!ragQ*4-G{yhN_U zdKcp_qh=)FRus#MY;Qc#*|dq)Kt{sQyH(czW?lhveVHg?Zivq6sB}|f+=pNwxgu%0 zI{{Chv_FaKhEys25Ye2JrjqfRNPkV)oA_SRHNu*WM~kxx*?< z!v=A6c$scrTpRKt8F#96*U4;F@HxPWx{ykCUH2RuE*lysifl@QRUVU12o^11H7``} zaQ~jYUomYvWPWVOjW86xQNkBEsiDUL%^qFW|Ni*A$QqlmK=BwI!9D{sDUj-NgnwdORUGBM+QMLWeVMs) zxsdM!-&SJ~D5`Rh-Rm-$R81J+brTxB4 z-S@pOO?)Pc{B~Dbz_tDEYF_je-EbHG*Pz>_g~9<$S9SlKtPRb4uXTYwpT77aBAVfL zi%4h15?2)@UK`VhOIT$SG*@`IZ(kpBw@=y#6=gkHOZ^SQuvn2zKbgfji;9bz1N4<| zcG8J%NZl!LH(rvz{xaZ>qBzB%U&6%-SPoyNURL6OLVM9^%&O zzjePZpR*bNa|bBaG7f;?{Cl1c)UR$)Qby!u(>=U*@1Bi~P5r4W#zRq2(Y?Jr2UL6- zv7#~8>|fsl*tg8s85xl&hc$t!+fHEbIj^LsxM7s&67fsZ(aWpp#Tbp(rQ2K?S!>aw z-Q3V|HeFesh@x?yff;GvlbXoV^dcYC>oM~bq2j`de-2^|bL{F3mzP@N)Bm0+`oOts z)lpDL$PMIm%F4>bLcYPWEuc|C1yQL%yZY7UM%2_e*5QZoiuyJmJG@8 z+Wz`cjx(>*GL-w*$sVPUti!4eyMt#86U5ushNlG zB&(;F(yw5s%)r4>rj~gZ1CM%OWW-ANekAWX`OELyYCs03A|M!tz5r;rEK-PTU6{7{ zp2E^j9c^tQVq%}ao1_#J>un<^uATIfc|1!IJ$-%9vIj41Fv}6#_tx$ql(qz3Bpf;NN?<<)vOSBv<|9|9O)G;wtK$_VtpTLs?~IWl)9z z;I``1T+#i+d0;EUaJaRV)ymr1Jq3ls?O8zy2?=p=aUr311LxKq@+Nq+5>4I*zW`3j zPft!RCa#4V6crsE7>v1d@G!sUTaChGot>S5Xm|=F&UPqQKPJX0%N}Le+1WYp6B851 zGl+>j%8h&k(@W5XOJ)gkS0|yOY5`;$22jvZQKP7Yc?1O$-74QZ{`7~ZV>j~vkP#%o z)HF2K$OvqapYbDk~ z2-vlZhC>FIY8e_d(>6`YKcN!=likR8qc8G2L)G;l?dU@x6!72ZLso^))q` z?>k`aGhfVFQWxad-fkVQh zy2~Xhn!XiD$~g`|-!~8=ERzHSgBd+wj9HE~!l~-LeMBSTbVF^(V`I`9Fth=9c%%9! zYD!8%U%fK0Qe`idWIsgfy5`IoiLJ}ek zY`4PAxVSj*M4_)kBSJ%>tKcGg2Z;em;z4nY&Zeuj{wfY`_cti;0!b1 zL;s#@u0Ox&^|9CzOiD9N%1`WlsnT4>08rbfz6&)&UneO#Cg#uQ5)E71(nxUEEg5LjwtH5gklcn*fn6|g zFrTy4R8v^+tfZg-9a&FU15eEQV5ZU0)ZCn*rNgB4g>!Esct60nd6}4)fY5*Ywmq=r zpp_%(v>+oR6DXyQ29^vgh484TsXa=4qQAsuznf!YYgY`Mk81Kxtv@V^c6R#50AHJ zKf@tVziAb6g}Vb5RFrB;UQnDsqZ@S;F* zM>H3P4CjA_mJGl^!r{TLZjbw7*DIi27&g1G+&wrrn8yF+xpYI(Nt~NI+URZ>I6Bi7 z4{ia(%5P&o)%f6TTRS;;T|2_eN99`+g&5dwy&%B^Ig2`W#>B(~aPGQt$Hz5a1RlMJ z_HH{+o`p}l9Oy#^HvmGdF~k^fByg!yxeVpnX(YUyfG)|YS1B{!;>nAR5cJ~WnyWFF zhkGL@hdlaOrhNF*Cq)~u=QDe@Z282!&%etF=d}JkOlh?F9P5IwjoD6=|Ae_L;nDs^ z5*%#oxi8$jys=vdOc+39d?07+?wT(3uS|R@@BcXfQB3Iu8>W(DeA*+d4Hh z1%$v#u-p$fF)?i?3VOji3JM5l<_Oy0se|7>+W8p(8DVpC^FF1G+n<+w-_Lc9&lV^m zPNFQ6q9Y>mCm|WrLcNo{&ce!iwDr{yIu_tSAS7%}m3@ZJ|9v{JW(dn*%bKsl!`HvO z&Ggs9eF{FJ2(mC2H8EtTsF{Vhnu=urw!Hnr*k8c|W*A z0~E694Q7;-h@A3p5sU!579ky7Y>c#*I;qG`i|{{Am8}Ek-GlA_b+HnzIqFS^SX|@6 z81iy*pjC7iOa_ecIXq1YujxE|e!$Y5GIMitb8@6$0Jf&4W_x@4)MSQm5U?qhR`AJ#Tq!>Y5DQX|?m(0UuHAaL z{pwIMa2xRP@Sbdy$rppa$=?Mw@rM4)#8*R70kLf<@Whhtn^Pkr4`_S_@B5DP`j(*} zsU314#7LkSxP)R4H{Y<<0<9U+ZCOJ$+q42N1qIZN#l=N%ILms{jnx{K@#>Ey@WvZS zgdOK0yHP>0Yl^9WUVbBty|{1B)LJ48a}LO9)KA&eO9@+-xew(v5uJ4jBS;4-~Kkc$#C94H5B{&mT)H_jYsx_Qy8w z<$A1IVxE8gZItV$YLBko=hX__a|!F;*S#Ad;&5Kx0SIpR~0#HF1(G z5g*X%B*-*^?&gg)b*DbYUMGtPuWir3--Kl-@Z^U!f8_#SM`uJ?{{r~>S zgFeK2<>1d8h$bz4Uq1~J)O>_)70FKMTV|q*6EWIElx%d%@W#)}*!(f2{GHoNdUU^t z%D*mh{t9cntKn`uk;;W1Z~etojl)*V(5Yf6*eGZ__mAnTe>}epTC1yS_tRA4s{ayj z|C4F;CR8J_v5nztsZM8h)svsM$$gKd*B1Kp>qrE&zr_$~ywVsPF4JDgmu|bQarOPx zQ0+9z`9FU#3tj?|!P zgt2DiF3Ue2c5isM)lfD6xbD9@E$sj4=c3rnVo#rKLcd84^`@q2N`jiq!&|!ye#PhS zR2SbK1xP(c6IdPQc{TEZG2#9cH#^!#o(o=I){iHg^euIx!NbU@>(l%BB*uz2UmCB9 zMwH79gx9Hm#{c)zyGihZxVBN+*LVN@CY}F#;wk}QSLRL3zU&`fo_@45^h2ChBu$F4 z#p?KHQiC{3Lp=}IK8vfGX&yZ;l;N;Su8MKXU3q1s-&35#-uo;O%Pfnd3bn4MGc$VlZbnB1S^OF+T?l0yuZ{gE#I3RC#B=wzhanSfRNR%vD9*` zz4Qgr*25axn%cb|SuE;V7o~|iS5sb6SFVqSUWJA#y@-g3QHOjkGE&TIcL93hyEwwKb2lwSuhnI9{(1;P&~U<^toFKWzu8~nVsDkwAM+D7zrM#K#!R{8n4rk z-GIkH#z4v7LEQWDEN%%KyNLa1iiM z`VW8@W`j0l?Avv1Fjxs8;OLRVw;B4gx&VG}X_ECFj2%;d6It`;vRcnOC#c7M);f&+ z+~fL5=VG2y{m-cw8XC^d&i1^Jnd=vD?>SfPZ*u_et-Z3kTB}Fm&B4XBlJfYb50&W= zFZ%Kfs@0d$m6esIrY2x#eL0SQtId2xu^Izv1{oP=Kd&!;Lc=@y`k3}_OUeJ-kuk*< z4!M5IdAbz~aSAFbDmuEI;VWxuUa8I)wSY4gZ;e+|-Is(rrdrO<`N!2A=V4AG4IZJ+ zWrgloLGFXsYmG@yDMGbwaT9XgN}!n^sSg~>BDWtL7&rl{5U{3_USMm(8No|jn8NIj zg++lsUu9{jGL^tTo*H*~#O!BZj!GtHgVEWeINqI9=fjiQf@QY3pA(ij?UrKmle2mN zclbN+;m@~ARQvYSOWwg<)((9i?!K`;QFx`rGMt2HXo;XzQk@Ny>|C*3ES+og1l0HZ zMkq@I^@fFoWuvKF$SRw5tdT@VN5|6AvU%c#zNTiN-RVF1Z>af&@yG8CmS-oDa!;Q8 zYBcekZKvqcIqrWGEj^fXU3)#X);yO^9?Ukz7o~bjG2!g%!K)P3ooWeiZAr55QZ6n6 znUrJ%<41khrCX`p1x1A(Tw5W-o*56x#QMZ;uJVQDTshN;M*g(gA(|~tYDax zu6*?VHa~y7qWseVV62Y)@h1Ed<1KB`dk1pj4+$F4JJefKNtQdkn@9hAbHC&4%9ele z!cga164$czTm-?c@P&B~r@i493yHY0xLq z($J`>czE2cJ4P{~{V$)y-OH*>dexx4eLeaYOMlOK3@i0o!;xie?Fm`#fP{aR(PUzM zT|EwVWXy}Xfw8f%PoH{O(kD`r4><%;=ji{qkB*~W93QJ`Id9PX9y_|8GQ-w=FN40y zxPbD!MMreCoP>RXFG?qWaCBs8D2X8$YF4P)g6o9(vGAM8NJ#i50^O`d4U`V?b8CzE z=mr&|87GBsmn{?$v$1$6(|(NXK`A?yB`PQ`{=GgpD`Z-pcb&*_UeJfIMf-})81T0N zfPFD5wFXWCrNJX}aBzT+0x;URSuyBwN=#$Ne_%a9gSBtmat4x>_I=pjCm!xD>(r%@NgR2g1LD97ioG z%x@%Li+|Gz^0VLjQzgk?ALZ%}(eowma^(keifcCWFHY89*6)gli16|40$%umbjV%o zDh}$)A1CI-<9t^;okdUD9D(u!^)FOnZMwWgFX!9an0aj)@R|^BH2}57>({R>IrkAv z)Bb)Y$8Ybz`9&px1>I9r1W0xLXZaD$bMOC>K*5k_hUqm2OsQL<5{pYaUVF|vP$AeNg{8mW+&!Lqc!;G$!9Hv*a`9W^!)eh`-i^qrbnD zzS}#7k-xzY&J5=!a-PN8eO1Z%-P>s+-1f``0{z{6u56MVKXaRog&gaC= z#TOb)0AtRiSUq{dsN-XAzX>+-=$$P;sHj*&$p!V-6KiX&5aXR#H}9JNO$`5eS6iHc zzgbyMTGgWs>Q|Vl$FV}USFdp-OCHUJy~f#B?@=Hvxoi>Pe!H-H{O7>%q+9AC?UJ^Y zmDP(EAL>@#3RzlM%qY~cDKvMSGZ`1<_R>5{H^V-k3Z@FAUuIr1^7r@8A-`bI9}1+m z>VfOqDX~;e8t7g0b8!+&A8Rf|Zk+2gx9xn8nppQq`%Ro)C`f_yo*f_GnRHzILiF`H zlK#+jh-&Wi8AJvExa#Zb5VaZLKBBI_00?&loT2j3RL;_+Gf#s7fZ1&a-2Z{T9h-Vy?d(Zs9ldrKyMft-MWR|5Q6-`f*VedaB;=%PtD9psuPv_3$$ zs0u-bWc}jNn(+g`H#`Vi0K#NSR1`bF4C1Un(*H$H9Oov}|8zNkJwMQlqOTXH-ef(c zIFP#&{vaUJt}ZUVpRbs?Fkf7s{b@~Vx{PSjo?2IL0+h}mWAgLoS=mo%{4b-2K+{dj z0FYCt+yS77Q3w37B~_RAERyj*IEJ#Tq4EKE>+6!zo$VYaLTfUw>sf`X{nq`7CE{MT z7!o?}+foUpS>8<|g7qR^j(u6D%eg+HZ@vaDy{EdS@u%m-ch|7OsY`^m37{80FaLOc zHFo_31*2>0^}7NIo8c3nX6jYwMZaaf8kVmcU5aUVppsS~*6C8J% z$*Rq)^4(?RA|e8wYz19KxOsl67z$7X!m+uIB&foGTdMfe)quYduL7?G17A5SZ! zPHgX0Xpns=P5#oh);89Hc0@z5_tQMbG)r15D>u<+JA6$CfuTlc-fg~!lukX5by3T> zbMwdX&y!A5kLP$&2-I3B`WEEXwsnuKer}YVeav-Qw1U0^)Z4%UMT8~*&EJ76Ie=FP zY;Gayg0Rg3f-~|j5`9*YuZ%l8PHMSQkKuHd9a)nyw=tpoPH|(keDZ{K&&t5S0IGZ9 zIQFEbuYLka5SYn1Mx3j}K3IHleLcbm?TAn~1bF?#Q6bM#`xG*fi^VF-F+F$-c=`FgEPC27-E_DfE733u>l$9~> z5OuP$vi9}&^BUG!LFx_O`=H5r+W^o5J-si`U1&;Z0a1Bq4oqtMsWXd+ctNug8j^1o zY1>;f^=0U-0SW_z_S5L-o64nUcZ&}*-R9IY3=k(y7jUr$>M{rdYyeCPfxCqd#=`-2 zTCC)EH~L3qv)j8CQdYk&jnb;s3n} zfDa&(3LiSJ(o0LSc+n&MaRkOPcEQK7`oovJG${TR(oyzWO0tJ<&3d{w2vo z`!JG$W^|}?ZAZ9uTc8pzviu9g{Eo+yAgYTz<7ijYN!|`ha~dZ$WAJ~#d52Xtt8nK4 zwRR4ygg)e5s><8j_YGp80|QFaCP}}IBL7X}ZIH%jYapqc{1Z2@25ur>ElXdfj{a)^%cFOV`n>lubQTf|71klkd+55A8uCk^Sj^jT32%e0=L zq-3k&YcjAZe-JbTajr#Bj3%^9RNt*6h@S_kL8`gagEf#oX@G%6gf0$TcSM^MT0o#d z-VW$I#m2YyfJhn@S4!!VyfxvD)}P?xc`VdykkKTttRB!+Ow2;$e%MU{4|^2HAYV{e zh{a_11(OS6kObOCTWpl0`uh3^egI|-&VbO~3=1`874E%P4Ks2}Lasz9Cz*>NmF3kB z*5g`eH=<)7_4T}`@9phv&~3!wE#v_(34zhj_S1l1w8ToE2ICn-Y(VZOl z+U+S!L@=?%kdv)hlU$4Mh5h(`_xMlkQ8#|!2M_UG^Y7C)f1dhZ9xY`tkbTKB3c8`6?j;tT?}#z4hC3+LA2d(UYlXHi@U8O_8}n@sMRur()rAh zk)FxPAuxXD9ng7uvz;gVa%Q67fv~o5ei_2-E5Pgv28$#5Cf&}6dCG$DVxZrTG#>d-LI<%dewLm9_d23WOwAIyBQ5t$B_cMyaYOVH@CpD}WqT9hY5^NjJ@)Aaf~Ped&Fjxl_Vpo@$p*)-L=SUk^K->p$}#pix(@G-!2uYvm~ zuZfG0z?XxKw{$UN*P6P%hdtom8%YA#2LhUpo;LpQTMKezboM;kHf+>yD)fGROxo54 z>dXKp>T|oi3jS0{y$`H5fLmF zGQx(iX84Jf6+IAaj-dkqH*d&=;B}n>#NQfB2Pho?hi715AhFso8^SvRe`8~64``JS^s{CgQ&<-#hYRA~booPwdrTR6DQ9G8*vP^3;FYi`svZb~^`DSxG#ySjz7Z8T$oLNR ztIPcmScB6*aAuaOJwW;&0vlSx%}MOxzhdvHyyAMK(G*@3DG_GuF#EB6(4Dd5#K6N@ z>-ipjzr>occkk&>@{$1kET1M3mV6QJ_afq74<_CgEcf1v@lo%O@v)b1*jjF&(0pqLp@q5Uu+0N=at+s+5Km(o&Qa|IgL^-uLf)|IhIp$MYP=^VH3CeXsL- zo}YD^Yu0KyNqdbqW7XSX>=A&)d>Zc@P3_g~-)bjfL0MG4b@E8h%FVnZ`r<2L*WZaUYu^^5RLN&9@%Em5=(ux4szl6ws$3}HFM zsX#ecOvlv#p$udbal2%GAWW-?UkLr-wDu$Ir6@A}>2uMm_4k>KfWfewpfD3N=&I#H zY6is}-*-&Ab`c@-cP#E+u__SWo%i`O-Y+N-kUCcNzO!I(<2A0atNCi(SO(F(zZ-4v z^IdUQuiEj^Qd6hP`Uxj*KiHe45DZO-Y*9MGOBpj-Tp;wBnR$3=C`TC67=#c~E`ER5%va!G;F;oW?4ayPA&-|xi=COBkGs?f^;p*cJE z;^-6MT7>f-J9z9m?m96C|8RaJrW`KU{Hr8nY){7e|UP|tUCv4vR zZo4RL9setHn#){NR9OC4;G^uKrK0K8$XeB8jaZJLQl&p{L`JLjxBJAXjXw~xDpgo- zF5UaY8x{8~H(M zWathvDPHsY^V1wW`pWaTg6jIAvqF?`DZ0zB>Y?!cveQ2nPg=Cs+FMsAop16h@euNM zw$V{P54w}s(1>Ol39H3f!TcBZ@EpJIW(o-ovAaUGgPQ)YVk7tkg?80fqD#cfZ_Xe6 z3M)1u=X57$W?Vm6Vt7MVtYEkqDDo8yQXo>}_`O7vbK+A{_zw}vfdpO+2Lafak|50i zbE;2PM@IH0>|v2T#ZeY&x0lN%@CwP+zAe<}8s#M~U}0|(tJ-IQO1rxDvv<1tX2cdL zd$htt95nO;(6oWYd;-TmzLUEl6R&W%A=nZ?EA$1Fx+QjZu!z6lQfy>wJfjq4Z_OlO zou-|AJNkQRmghbzpr01huQa?mIXCH(Mv5wxQRVq`F0lUJVsj?{p4^@#nNl8fO(QyvQ|8L2{-#i_zOK%WBmT{dk$(*0ZG9Ig zgF&hPU1;Im(cSS}yld6|bza9d)1XQ;^hhHNLh{=yi|w1`QCq;vW=Pm8V6f5^xBr@$B%*fbP0fMv+ASKn6ksHGAF2Iist-xDCu@NYBze_nAgk!g|Ke{y^$&4O* zH`$R`sGFu-E4;C<-CI?t`)pu*DYOZY0dectmXZePe#S~fB!CuDyC>hec~i$nqLaO4 z{BqCtv1cdg)GK8`@VZB44evH-v%CklGsd5R45*cS?eIB3#C4*4(53s{=;nOIQ*?kD z#RJ(Y-lh2}Wq9tJ->f8H-DT|00FbauZ6>~nI@|hz`K0Xsf5iT$S{Up-Jhn{Bn(%?D zm+wif^uwj4v2jPCHtK=sXz#Um+5sn6#xM`jEI_sz;CJ?i;3>WV>W5 zhbLAZ4SwzMyYDG;-Qgx*M}S=&%IlqgeQ(C0F*)Sg$1N`}FDm-Eq_l#kfbVV4owm}c zRfnr#x| z78hSorN(y|Nu2*Ni4?5bXS@Z%7P?0=c^F)-x5w~va!R@O0Rw73j+BV#X9)GkQ-E3y z>6oN)T~i?;n~qWO7-ZP*vwz!nHfQSg38{5%IPNmlR5mI^YE^$Jxdi3(g zA=!?iikiB*ds0nxo^-Vg@$SP^exZKq>Hi-B_KzR{;2Xc4=A`M)$v;yQ)pSih`y#+eFM5+Igs$g4neuDor%STpEeB!a|{Gae~h?`Z6ZrOG?JGkf} zCO86SLPoT@>q}r;#QVkjT7hJBJ`kfmv&b>1S86WKUipR1$A4_Gq6N5CD?*y(46X3|Z9sZ#b=Xx?^FtG5Fs+~b^33ZUuR;5Jec(SlE)P5uM1%0XW zQ=O@3HtkBnE?6oM9UvARr|yJk%c1!yO5Ln$q$(+iV+BNG0B&NgUE>>XX$Muiik1Q0 zfbVxVXhB7}gu(Tv6kPTEtE*BEGCg~DHxD;gtuPbI|Z*%EbkDaLm-uA|Fxxw7AAJZ!G(|G~t~ zcPT_^{#N)BnN9)g4@YWqc5UdZs=aEn9qUlwIGx!@w*H91Uad`^>6UbX!Uki-=07Vh zOIOvK*SE9?L@ko3bAQ|u5{Nx#ZZP6r)qD<DvwPN(Io;6!9X%jZV0+W8C@Kvh(Vxb_#3eDQN3l>=hJlt{j3x+iz{A2 z&(_ADk4`^llKVrIs^=!Te}CGsu2FowP%>Zmxe-AKb|Cme?@;f21q&)qLIMqvk||@q ziyq38l#0dX);KN&`zF$}63sbE%(YSw{h^{Tq`N(B-b&gh8SZ7Krmjx@3s+jh=@H5E z(djR5Oh-qoqzYcWmdwV)BxTnaLWpn~_2YAMbG6WJvK?}_M$fXiYE7)agLrZM&uT(d z9r_gf7f>I`RxJ0RpMdC;tDiG4P0hQVVS=zyQy@b7!e=pQ?d%R2RAF zTV+aZ%{5Sr#GHs_#Y~s(Ie6m*hD&XoxZZMfUqx5j zV3w!WHJKjj2e8#+oB)~_R<~=%4y~tB-+CM8YKp+P9Bzq+~ACn!FK#%6o*rEAb zOjfrmj}J*SIf9HcWv~1)NN*tllugE(3mP)7kg2PufK*?h-GTNaJ~=r&5e3;HNL_6I ze(0>yzP8O;=%bH)UE}e@rI&LOVb0?l5K#lYQm5`Qn8m9WIGV1SI5;@CZI`s-2=23q zVJtIBC=Tsu7UdvWKT@W5FouSrbr0Hod4?O2|21dDjUWPEEhm(|-EG({b7bs?Mc+$? z_ ziBcAmle4nr-Ja*EL#h4n>TgLj)Um=eBY$2qix8JXe;z;?9gJ3Y8)cp&*2=12isxRKEM(J*gA>PQdtZ>ZsBAnV#~Z%y>Vv=7>5q$Ms3#eCYJ6 z5Au`+&c`n8J4JH9jjSE?to-mSubI@PPzd}ppyieo6~gD-ft5vidId572bkfxRQqaJ zEPCpX($+M!y)e%J+#+J7DZa}H2oU}IgFfBB*xwgje4xp6t*~iezi;xbH?e$|&((;@kNW0}<;M$E*N8<9Mq@x088} zklCbLSZ3e2T&OTMa8H>(^W@F=ctYX|kqywt3Ry>o`ux1SB5rbMS^9U^PqOscFY=oE z2?>H^1!R{~u+3_0yHL^Y3omkVc*^Q}?K`~DsoZCL2x!LXd~knUOIT=+eF=Z~rv)X6 z0ShkQ5H*Hb&u9Uu6w9LH6kqQp2%1;dhljJfRAz_M=nIB^=$W(VIw>E0-Ka7<&b8lg zD7GwLE8=Y41)B5q3?njKV*m4O?`|SK2j~Bu>EF-cFW~*Rz%A?DA00{gX4kn|m|MZ9 zad_Gmum>xboMqr=%HN>LZmo5tt~Q#vKbZdQ_2WmdpzPN_bdFFqR5itfJ__aO?LC;Q zrSeJ;)vivE!TLi){Sd7jF`Z_b;{Pv*c;CsLQu5z!;TLTVM3szOwuzTTM@-kBU@WyP|6W9d#~vG>e# zYpcgMhw2*AlT}o(WTd_kw9|f3>oyOk%I>$O5nJ-DoYG9}@z34jxQjXW$hZPcgW5rb7N3x9>YrQg0_frssD~Ub5>| zOCGJB_8mI~9yv#&zI}F6o%>*!pkbZ3`yQQs{vNyT@N8iFNx0Uv5VCGpr$d=ablG=! z1QVN>gQoXzPh4@5s%xPrQCH-8dVqAt5Q}2G=xV#DbGxORqO5qTNcU4yQ6C*K*H6Z$ zL$+0LyCp%*I(3jlO>ibd;O+7WHde|QEplPkKpu(f{~0y@_w#~cz&pa4b6KOr!JQB_i4}hjB7k&X(aoln4<^8 zw=a5;b4N3gHXYX9y~=f|ZprvPC&`o%by8?hj?$Q4-%qQytipL^_wdkA7J(D(T2v=-J^P zB^NGMM2oOg#$|t1&YJ2>YtgUS?%h&06jHC*%q^)FQtieq+b(#4Ip|cC)3aJdJ6*|; z16TO=yMI9|dE2O1zt7udn%7#Ei19_;{7Zxz8S>nr1S~d=P2ra{M0) z2dm_x`<<#c8Nbktyvw-kA(XOcR>r|#_MR$5j{N6T7Q4&ktKF=hc3hbcrb%IE;Undt zqk{hgEo4QLqFuwlYd`+z>yVF_^;vE{ZD-C0e?vv0L;23K?Jo0=n$n01IDYI;UBi&^ z2e~%c15bWXu`*XReTsiqp0}dES(bl8=oWl-xw=9zOK1P|hEKO0_%;c7Z&{|X$;lHZ z3NAL$_l$e)BZQU{8BJgFb?;rWS7|!+2O0{nrx`-c(xe8eM~Fm!_!@kDrD{Y~^X}SI z1u|F(Y3`$)*nUZ9+iA-i>#}C{79p5JV!0IL#l*UO#{GWWm=e9kS~s|@Tn4U0J2i(+ z-|xE1kkWcTvNb!VFc4{}e*f9e4f+)Jvbe}w)Et`gY);e`SzbrBOm1p%Zrj-ZYZ~tD z(o=FX&#M0Nd)7s6=Z18?CYSS z5-Hz`o+m>G&5>rkUasraPGEgy1Me+IeX8^as5@M);7))R;MP-ziQ#u z@XMieH6ID!6*3NJj>2}6$~PMbYI4&Leu5+*KjiloD}vdhIJW8gdXhC3KAwV3;>pJP z1z&S1-ebl=A5K!(vfhX;0f#Qs$`vr4^= zNc!tiuH9rj-oJU^9T3jye>8F9HC@KXE!Ny- zC&T5KSNJk}90xUuB%(d|M&(#*RgPp2yT$%P`LwEC`W8~c6ma`)!Ur)ALicUWO&?JC zq4vfcARyK2ghLFdJYYURAIM(Hfp-z+gzY2OUD;asNahsNDplbk;M>37xRAx=msbu~ zxL>3gqs|~+HnEz~?~9Q6Z^t#HVz}Fr$%?#R-Pz+9&fuob&En}mj zqd;rbG&DM6y@O?6-Il|EMg8bWWzqVPvjRzUD_J5B-vQH>Y+Lm>owcsoOWZK%QvWj! zv2v4YTOTh|-ISb=ptPVg^o%);N!g-FB{b<7ej~|Bk|gf7Xm1PgduILfEju!5GC044 zOFV=#jCh1Drp`G&6@%YTUDP3rQsta_x<8e5FuD5*w)1p;K?2!6h^2(GsDnl$8ypP` z43dRSvBs*)(cnd|0}eK^MjJi;?6J($%$jXR^Wx{>!Y6p*TO>8?ivRNgx#}Nd|DO*? zhtZyHA8R$;BiyVjchpuY@qZz&JXV?2Ul^>NaXssJkt^0c!}EiFa>}ew(N^v7*6Fn{ zooQ7|b%q%Rj#XzD7h)H33#%=W7UfYtTY%)WX#&Fl`awh^zc}_{1e7(g{S-5xnE;9U zjCNFKXhnq&UgsJ%mEFhJ3tDURW5AQ?qD6L^08SI(Lq)PA1nGQuQO{S;m+c>eJFLS5VCPq!xkf%|=_LSp^*~g! zuvY-eRGdvLNGt*nK!^hnxcU&goqQj_X$e*4>YE{&2 ztlqrhzN&fQ=Z_zg*JB&$_57N`3rf=iOjEaPB+qT!mS_~Q)Q%>$DiNzOq@~R@Oawts z5Nnr-)uSM>rv&VFw3}*sdsoXP8c|%2KJd0g+#uS7+B4Z|O=;xjw>f{m(AY`ql)n}4 z$u1%z;bqOc{zrlTHaWSZuSvX|JDV@g@<@+4I7S@cc+Bm&la0+BG#-)jzh}=Lydhp* z6^j+o?dh`N{WWwETXz;zE8aZ&`PDr3MiDuGKrEo6@SQ#ip{8#$K2N1_)O|t&U+t_j z||h2;!!X9VMfL}3XTZ3IH__hH+>&^pqZiH(#C zim*Q}bT@-qBf|4#e^S%YwRWJSoxzq|*xpbLR<1JeIyg9dr#Ljpmf33DmIlAl@#pETNwQzocp@v7_7oCD3ZeDzuv>$Lad&}{sKHVHZ2{U zxq8%Hh-qaZ`sbuuh(cG(?&|lr?}@bn-*O!M`G1 zuNc)6H$#(j!GqHy$_mg8XM8+cYlo>BU)m@*SK=0Z2QZbGqhn&4`M=~ao*F7bp2Rk= zYDDZk(&z><%F4>n8muE?do^xjDGtp4#Cc4(crGzIPnNM+7>j=Zxo6|0!>HFpq|Xsq z(V4YJ5gramhsbLNCh(%fRD?D~#4I*|2)np7me5bizKZQ~hp{cAXc4Cvzr8d)J9`w# znWvIu#F8CkhL1g7{R+rCzi@|*;Mc^zZN-vvrJ4|9P3nJ;rDQ+LRS~O#=!r0z@62&N z4Ym(;^z<=E(GL}Sn4`T1byDrEUN^c)<33crE7 zLk74!4A*mrZ2pbkdwkQEBg0gz7C6X6)ad1H@|ytP zw)K#1rfjn1D|)^r5CdF(XNZ8|ab^LLiwX)h zb|5Kn`E~@S5sSZO7%==}#YWCJyZFU@o8gRn3;XP!rKB6s{UROr#a$PD{}hR5gQKVx#9~B9 zq!W^o!jxg=>`WG^@tROi8`t(b^w!rH_#AZu)={M&fH3XNIqG`^>WlMmL`X{2_F41! zpgmh@Ad$y?WsWn&!^1N={ef*Wk^Wy5`4QjR49n~L4lUHx8PBZwihldT?t)8W@1@_T zFrMaX(&(mQ-6>ZgYxHyivCN}be~o`AT&`U`J^bPIptpvxz>YYaU_$B%3Ebxq zV-u5m*b@Z39MTDxSXgj}Z~Q^p;cLQx55Gcpm}#Tac3s)5PfajhXWR70kB=7ybZXvT zl#9FmRB4NdNs%W`II-5?zH9S`2YStazjtYo?^nba&oG}`e*HfNboDe>n&xCN#?}1j ziT&2=S!~o>w?d+}nuQ(<%LiJymmnY@%4m{cq^nkoUAX3m50?9XWcNf3e zgzeC|P|>dFGR}O68Kq_xj^R?c_4pOq_^ge!X=nwJNHL~BjZb3cFjlpqx(+^3Si)vK z`zPq^fhX<+LXRqLhOY|EnqeRg7DDlN(zRQi?IFtp*aa)_9|8%*Ms-f)vjRxgEC=m{ z-*^>|@~Q_YYwTzb0;CKDTczLJu^`QI#C8yC?CX#U;IsqGAFmol4;C)2Ua{;E=oWyG zr^!D(ZD;p^_)NfzRuAb~9tT|@Y+BOX($cT%O^nB%|9lBN{ag>Pj94Gp5fg_G=@C}U z`@V+$cJz*|f{cp(z<#M02fF{Z>9(QMz9pjnF}w?ZAMap`S5tUuJ#LK;3+TWwH!cxt zXmMBU`9x2>(EXHfPa#p;9IU4e=FFei`pJIqG+Qhz2*<(Wz>we3)6?^NJtpZ_G(skx zV43B|o=lx_{62k1Nhy1Ii()%Gcf>jgVC+}Kf&RY1*M1PG*4nt{;bNbG#-|>_K!~yo z39I_iLvM%BK>W)7YU|PLVp=G&(>U{?X}P5zP~j!)Sh$Q9%yF~J_e4wA>?9;p;EN!q z+qHz%aA$xkn-r=LQ8^z7nAy*=@YZ>pSi;(*p{_pgv-T`PwV^x9w5~29>n0BR`sz1* zEv*r(=pdK#`=l!VJirKmG?A#gjb|@$yny2E;KXFie z-#_hTY{>q%v6?W!V_nRVK~vRs;LxGeC{OlI#CZg-zIl%)(t1qaLOR>{Hrga2@*h8< z$~y!yfs&R3>rC?PTkgwJvu}|Cw;-Mlm)blA#R9Rnujcef(-+*xXa!nPHb7P$F%ksv zjh+yX@&VFK+&sXwVQ*@jF3XWx9CxI|5Q}zjW2KnAJbv~#z6>lnF54?JE|b3y{R6kU zs)mM%PKxLmYAa30l*DJ{9l&8zjF0dk-E=sW|qnCDNy_shKS;i|g(@sESe6-4GPl4lsY#CWJdradiQp z!W6dt_3RUZT>@Wt3&TpTQNFem=^=y0UQ`+=!9r}Djo;t{AY^k)k2*bUA z%KjMc3;+^^(kF`Zp_e0`H;V7IOjM08IovI8Deip#3D%Uz(ug!Uj(jU{Z&Q<#eJtvY zL~FUR{(j@a%T-gyk707MoujRE#qhX{eR&r#B02WfrMb{twl^r7KmE|MG#y2&LUb%mQei?u^zIq zTKf82kl}1SH2VGK`?ZhQfAJy4%p5fc-Gq>>pG zBmEgPE-26%KFP85=>~D3>mQz1#SumG9Qp&KzllE-N2BYAovz2r#G|G;Jx~J? zPLX-lII+$1{?)5j*VfjE)BoU&JDTXpenh8D;{tI(48)LQ$QGj5<2fVIW;6TE&iF8{z{7_F z;g3R7$B=>(3?dB?Qi>eE4FaK2M6u#MF5obvb4^Q2>+@0QXP}(w#CYM5ky=|TUEO!v z-y750>u!7-$3OOFJ%LDJbkzEh^42kgk02Gq63E+n4uBGQ{TzKaopTo z)5KAM zXsIfhY$dCY8y53 zb91|CP!kP>?@&1UDWXqpJVW)JBBGdvBh$!`ArgSb9*2wqdxN*3N||m6SF0B~lo>aZ zQ3u2XY}=ZfljADQ`40C69%kPmal=;j){X)5glf_FBLBZOpLv?GBUb#c<7dwF+x1ax zTsD*Dk>&m0#ry9kFjbpax7m2&aZ=?8MwfODdsxo0+>~x)wq|kf3}(+KFR>Y(iit+L zkBkcQWc`G|jy;B%Ay8LFh{_tr8a}`{6uk6|i(mIfqgau;cfM$Jh!|E)Ox2bz%VkwsI1H8j0Y?%qd(jEpXmJ2rpz1~2R2)ARp2T1;VPVzLKn zHvDw}>v@$1cLv4~La^G=8uU1^D)1c25WFA1AKe;?uCmJQ#J}IxY}j31&h}-pYAOEKG~b`_lkOL)>;Vlq9CCw&hY?WFQ8nObhF zdVi<=jf&LYM|AD?xe{8U^NgX{nzMz4kChj(1w;-O6s@FH1j34m3xRP|r&1yF!v4jI zJuuUrY@%)q-Go~t3&4<((e)Qw`{<@m-^Ov48>?5HS9rCZHhkd8!pFB_Z~RAychMsj zFqWcjCG;2HRldxuwV6nd1Gog8C6Z?1p&+V-!k^Is0~XKpPDm8KUuLD!4MtoPnLX}! z-1Tc{2rZ-*N`J0rl`K!8m&4tc`b{oEfeZgk!LiNrOMf=hwvdw|;`1IkbMQ0sLm+b@z#L)pfLvuX~RT#1Q^$J;;U&JG2+7CHs$kTFdgBeR4;3G?tEQG?;eqmT9$r>1T4jO>Rqx znVHuz&@g0W-SM?ZQCes?`Pi0(Pw%64F*IlkRRH7ZckXniDL_45Gg4Ao2_kHspc_UF&N?;A(Gi!Tdc zSolLzy|$_(B-mbHzsA+L^>l@97>Arc(bu7AOQ)<4ZGBYX{`kU)XtPTrd7@>PZgO`? zAC(;%O?tWK$HxmFQv6hem?l|h&W+#U)g+y!O4m;K8S2YSLF(3A>k}!m-;!*KO~^zw zYCDIvR~=u*{1ZO2l@gK+=iehF3saFInhfq*Lj%<9KddFmlfQ1Gt`6~Hsx@ucLqeiC zDA7Y5BiMT5N}7}UTQD&eeCIaYq^PIdcCB3RVX}x~Z~fXqq!pPmwNpb9WqEV$W;p^Q zt)A6h?IZ1vv3s7e9;P!R3a^1)b!Q7nO;S_#2}Ysk14Am=Nlc{FY)U)gk6#-Y6P~a> zp7LEkRVaRo5&fR$R()b>wLH8M_x~(vZGL}^)!ljU{h_x3pX4If@~Eq?t~nbQti9Y} zn6q0{zN~>wDMga3F1fels)!_6xY4E^&U`$ScTAs2(@12nozA`;-uQ};F7mktQw#H4 zruF`J23Q)lLq&Y8ee!I3?3ch>o`%OgJv}i3SJZzhNyRP?bO#r(^pF$F(lBsgBhgQk zGEcV^C&tIKcMU^5r4AfmR*JAzq%Bw~Cq*Yi07QRIf%CJ2%!yzx>KSp2HXtr?#n z?NFYQp}NAi`$^O^Cyzyb4y(&&lqhvky5Lu#A^x0?vu`BG=8Bhmzx9g`F0yMgRIIY? zGpk&q5)?|t1I!E+*^D=|XAJhLncV4{{PFhO?W@`erm`pC33EzJ&Ux-DHAS}U<*X*H+|LN(UVbSM= zgoQt$VJEP)SDyf*XTCu<3~?;6rKKK&Q(Mdql}#zre&`inxfN>e_d^4z8ker^c(dS@L}xZl&g>5L^~L( zZ94UJ(5A?1SfDdL|8j)h2v>*Uy{ARCbG7Yskm|H$_)%wa?e&vhMOIXv$n znpArrCYtivnWIMhp?bA!KhwR|f9k!o{+2)=dSWYyNQlO>3%|N)9a>L%#q<9%ebFsx zl<|3+ThrNZ6klbeHrJ8V44f6>TR2WlUGE(Es^0IEr>BIwM6Mry_-84ynmq$N!Djn% zjOzVNH@R6F#lH>S-6u@#w7goZYQVsqsn)@~kiL*ppe(-0%^>PKk>$ zv;x<0~R$d~y$duI;D*Rdxh(0+7A>;Ct$#vS@#ybOXRI zgy`A#MX6WCMMOlz#Ex>cUl-W^J>yk!QF4)P;qjjI61zFgX!@j_35oFzi2k)>1cvE?rFPTI*ld8on^kVC*A8@zN@1JlP=K(VNpdJt)D`$GxE9+IxPPCSqh5n<) z;3R_Fqb)1rlwov}EH{v?{V=$A(C`n`y#SiO6V5$Qe9$twqfrM?4)ztnt$Cgtye`fZ z9#GSC@mHkBb=`-g=Mq0%{*6<*>IJR1*I}e#pr@BW8Xt(6FC%v&mIZ^bL&0%}^KjE) zP(&~K_q&zJWQQB3bnvJ>U(eRfk(y$Y6e@`piEJwUTAXQJQNbPgkLi8r329+Vm@3or zu!AMyDCsU~qR{*pW2(-Ae+0_ZYJ+WdNAr_3heZQ?`6EXQ3JL(crQRA6Q|tRJ9FUzf zFdrfMX+X>j#2kI&Ts4Kq?!PtX@Wh*cJ7)2tL~r!K=ru>Rqg?ObAQj+Y7vKP)iudFe z5QqrTzS)m2VAOZ;=xOu*$%BXogn<<9Mn#}pwl)t=@0fM6`601Z9YIQ_7k6yA=;LOBcLRx{$9(x~ zzWNl?eKPX<>a|H|wBENvnfl6nr@i#P5G56wOZKPV8xg%IvUyGZ*9C%rg!AJixf(!s zO3d!8FejuL9C*fXs)PC!Q*u(6wP4xH#_UmMaIMaSnw zP6NG6;}RAS_QP8OaKN*Huv$PYU(ZD5_6UT>^VGfXak%gz4QEjd@Yj^1i;vfd_%3~p zeqn!uk~T7C5H9rwDcX=@!~Y6CaeFstg4gY5V8L@e2iS48_3r)4haht0CowxpTF^SH zUt7y^UctE|=3~@r5VUapJ}WO^_8;{%7&*LmQuqi$k`ZYR03s}N#fa05gyS>!IqD0? zg#`r#7cNFo(|jF@EWLR}k>Lg7?*>OD9-4Id(LAQ~GGv)=Q~aHjNXe!GEq4 zsFO$Vs+E6-xeAv)hONa2g|*$>+##b79WY@XY#LA?(LoQyERW5iT(Bun(8CySKS~%BQ|h**B@p3^eM7gOZBR{CG>(R{;9)$(TSAV2&E_3Mnxp zCtYS_V0cQM8%}c9L_-@vBaaPPX;@FuERL(->MEr#-Ql*f&RbV>JG;a%`_T6=(E##8 zvVNbWF8n$jaO+^s<(kQWwO_JV==|(=oT^n7?-t;oc;*)sq(fh%R;i-1f63)63h z|9AkTpV240r4ziJ>pxIxklt1z@4SiaHWlH00ITj~(5I+;?7%{xw!a`4 z`MKBkO9Rh=U&2~<1w$c8C4Rl_g2XyatSa7Y$U_kM+_K{2{DK6kiq}57i>C{`7qLHe zK_ERWaOQ&w<_$r;1R(jQMFwMV<2YMIE6iXGcl3$J7$utDjE1@~d=7z`asYc0fZ)#n zBF|Ps$CbC-&a}G>OYt0QAp=b*N*v;<=qr6nMijj4d||7kkoZm z{_38>8_tl^*&@c4(I2U^gjYb;&kfzi39MyDB>XU#bx;&lJqEm;(T`hn8*~Z#e?q8I z6vR|f;grUhB0<3a9QyKSQpoJ12j+K>_<)ZTXTXv;eH0zc5IyXbC zp~KU<===$d6FE8gz%TSRfOaVk5X6#sw>d3wMFX7&kxnGEh+f7Nos;W(C48HCu762^ z%J*xH8P18;?8?JSG5dX)8lIbq$k?T6goN;q9S-Fb@7o>F{NYxy{hFYzi#i>*<_QBL z>SMnmi&OmV{|NUd?EkCwVBwaop`WU1Gv3j0v=8{yL%B$HFJInCdJ&-iR(rODX_N_D z#A9F+DLLVTdQoIJ0m^6z`8b7N#d zLnN7a6iIt+Z?(r$#@ALs;{u!`%>R|fCC^kAA`C`qGX437$JGVM7GfM;`awo(fJzGjM;N{2wmgSw8Mmiz`wm>07Wo$*UtHs*J$!L!Wzksn@e|RV~LU1pX2FPG7lucRJ3`}grHec*{`6$ z6^zrFug^t)#sTX-KN7+Pqyfxd;~`pX_z5+Wy74ial$dB`vDiNg7&bLySY+57*Ea^1t!|6hWGGjkjZv>!~CUWARP6P2Isz~E=brupv zfBf7Q@3@Whq2uNJb~vO>-}AqZ7qIuJ(fq0W1B&r10`D_lh-;tp;!uVRdiLh({U?w&-L6cgX6$^Q-w-)0;d`&{)3|A^18dfrg68aVp; zE`Y;>X79MN(l}R(ax*^f#Q@NZ#Hs+ggkcn__qAS*%0k{=Mgm8Rb|>b1Tio=p8C}!? zNSMC=Kq6FA^~HLc1EKn)2NRLZMNF5GBSrfVo)O{+Mv%A&0X>n`bdAzhYa7>!r(pacS)w-QSa$dNi1!N8IR zgWw#kpnw3yP45s9IuC@hASIS9=?%t2c3EG+7Fcl0mAkz7SD_0K(7lmelyct{41AY6 zk4?(`*}=m7xiHIBqkDw5tlAvwg5+>tDza@n^qXtFp0lw%1Z!p%`tCFt%l+C%26Z{- z0k@>sh9bQ-C($5FJ0ZP_bwf3y8LpKmQ@ZnzAEKdosWB{}nMJ!pk~GLYfvDLe)$C0< z8m#@KmKuj(gtI(;iNoQdY~sg3g|eKPpQILFzhC=0T(6z;dDGi`&iyf2l$Vb_BUh5- z{q<57V#)u6D6|B{aeAnI_-j1J8*J%qVp6hnb%oSc-Vy;q{!yxD!;G3OiJ6EHD}q@? zXdt5~gFJ(_DZBx=oIyD9Iq_8R76IRP;MJkt?1C5xZEfnY_n>~?mYVJT%$UG~thhEQ z3QBe=IjUt}>lS`5f{IW3w@*s0zxuUmBy#B?(G|{%r|vD0{z@i#k%V-L!V^Nj5+#=M{xK&%jzo( zfyAK$LYX6$*C$)TO{e-%dlX2yM-X!r+91`N)O5x9=&#NV-~s}k=7B=k9OXu5Ms=MJ zMt%yB?FhNijRK_NrKTaY()u2RfltGG1Ak~Lj^2>C#H`q+f+C`uK_r35+nqtng=R)i zU*Cn_J5$nG8%1khD4nUXs<8(u9Porbr8u{t-LY#<96PanVNUnf@6xLXo%n|nj`Thf zp|7Tv#B<~LJ=cC9sJI@B*{2hro$YSAiJiSt8a9{?F(+D#c*a$ebYkXZm-gf?eX;wS zhhM)@OnkmbpIf>Ng!)165=;7HQ}M_E@Si>?(+!*%cs!{}o%OoP{BNCP(+8xs8(2PR5ivZs5q?F73vB$Hd&L z$hD<#q#Up8CS_Nk{EscCdJ0(WuN{!%&GH&8t104~o?x0G_K@QnCN_T&G(6fCLS{LC zLp~(ilQNi4S0JL`7lxp~PmocZ8;``WABfVAd`N4Alc5%g5c+@sKq!FiRcc$vQ_Ij| z4wYH_#6Wd!X)J<>K9dhxiP!rOp}R@lQ*G$^J8x8d2n_!~xR@PM34oxsAD1aIdwwIP zC>Z^GE#v^h6IH2%a0^-nGixt3R30ISK+M*5Gv#feVwmO0xC5C8&IB-{%Z|t^>GMz? z>`;v)Y>cn<%hfOWK=?9Tgfii%!wLV!w(_r<`{7kKL zvN_POnh*w#dc#LZD1q-*wcs=&Fi@)INmnrh;`;!RD|;)RY^aI(Xb?RuP1%;EM&*d0 z&tVY}iFBf@gmy;pD?k^aq7;69{_CNVlI5JxrN+(zblUgoV`@kByzM*>iPRWxV4wF zUgIR20*89+*^94gnEpz;B*eA;7Y+zd4)ukr!O-pQ$2z7Qx$z^)N}+sz8n>>`kW!~L za9!fM&9rYC>a?qwSHB|Gwu2`K_2i$$PET=qMkyFoO-z{7+C#B)hD3touoGF4Vl?t) z0GZqk-ni&a^#ur&O};jB(*$~Y;&xEfYN(N=-mcvYw04%m=0?MgIr6lIX6SGyo z1Eo&C`i>ARkCzo3X9|sK_|!e)W<}-qK9la1u&s4tsg%lG52Mjkx)zeKRvlDa(S9zC9wM>OYrM6w85P`dIyT#5%ADtKL9RBWU3lDF(f@0L z$mQm$ulsoyVgfdKVCW+vb5U6^uR%YE#6Eum946%hW` z*5y0^HWw$z7s+b)bBLrj)7I7w3|xbE0*WC;hH_f(ZDv&ks@nD}r_i$E{XfTb!OO$b z?mfdMh#3uHqE{N5xjbV^3j#5c^`IvrQeUCWL%|ife|of*A?+i?P07L#zeV?!9VV=o z5W2bR-#UCAg|19^=J%I3W-fnzMDaBM^jp|MBi9Oe6bU0YAi4L`pqId|Q>2wvlOi_38-`Z{G3-E8hI({|6jW|DWN#f`&f5caabuLa7Yw^X*sl~z7#=AddP05jE7fq*rz$}HoqN|(h4=ro9Zlh-4 zO^Di%sex4tjEv8uIyyVS4)=C+cnQ2#bg;Bc@2TF`bOue%ue8-X$QdMO;fI`KwP(EAz%Z#y5YeN5TGyk>`O2L`CW&_Q&Lw{uu-w|d#ab1qSO;pI* zP(GQXKAba~$~-aD$W;fq#J9?98tPGzPQ#M`J>!Rm4TWm*j8j5qW=OL>#T$Mo;bZmOzGr7E7AaD&D=W-} z&C$k_?QmN7f9ivO#?h!R?DJG|4|JBpXs$kn(AoFRnHq-mVwb>f@$iLSq1P%8>#uH) zw2Q2Xl!&|#xih)Nbj&@isLbBlccwYaqA@wr6DgnWonaQdGy_lh&EAq&d}WdA%7v%( z(5WJ+_p93;xv{$?i2hjrmGXqadD;EZL7{LGX=A$Jqq?^{m=6q(cYaqEn_Ll)4HC_I zPFKSuWPkKI8$|mVpZVUb4ld24dS17p&YAt}xMNSECQAdUt1yG$xZ7E{wm%POjU6L9 zFMh*FHtAQh#6{|u9Z#1wuhORe6*;x$ll(Jo-=@KD_bV*=fe*Z7Cn5Vm{TcD`*2!8* zKThp&+b8xxe_?TKTSTZY^0QsoSa-^9wx{-V4%zt=dovXb6H`hbv~0S=XV zVyRKPsaIjHs+(^O-}gf^+l1(%I$Z=F`bO#4nrXl5VY3r=>s=s__t$(`G zd=%XZ)<#BUWM+O@7EP%cOZwrq+(@DbBi#TGoXwwi&LUxwSj=_1;wAhjw`5MXvt!?ZCGniL zR(r>lD#R$1LE)+O(C7Uht+k+d9p~{uRE@ts@(ujR8!0&-DU)PAHW)umjm@sM-Y2rE zJ$})BLV57WQ zQ>dRxc`-}yu*#O zRZ@QD={i}c@5+;Ylzf5irS%uOLT))G)reB3_|Wf6(u;ut(R{Hy?eGMBy+_mDBq~Cy zsTBFj*Hn|6LFv9U*=-}|&~%@hRuy3TDs05IVJGw&6PsS>(=Gpv1I3Mh#{q|j1+Tst zt*7u@%2Ga%Zeea-WLsfasxu+xMK@OGYW(%#Z=T<~YA=Om%%dC+NTD2O>YwboEA{7x zZTg1L{w5)A1HZ@}6gE3KN6RbHEA`%&jw{s^Hg&%r3~7ohSr*~`a3y%db1t|j&sTB% z|6}XFPJ55j$d;MC_X?rxmF!9)TgGW+3!P?GLSz)#JG)X(m04&Z zl}dbX=j;9X{rCI3OUijZ9{2lg9LM#*(jA3GdWHUDF8zED`SqnT_Ba}v-*}(?8*UPD zWx@HnQ=$ZuAa+F3I=j5Q*{STtqI8F4b`d=8CpubCut3(i7M%Bs*UR}}*(_cT4i&5r zbni~Ta*p6Mi|X(DSz=7ul#_{thhdXZ-;>y;nKCrNDg4;XZ;@QE$NNqS*;Q=E-_!3s znmuBbDSy9}HlY4?8I#yarMBm+BTsr0$xhGZwLM*6-hv<^QaqJ{?n&LX)6>4RXt5fk zY-+GyO9hVIIym;w&6=7U6Zs8FLgXWfpL zs%=?wXjZ%!HM(#*%$8|o6!2@$8`t*}!$Y^qaoKg@KghA+CCM!3vXh|J%M1MzNvfF( z6H|uq{E(We1g>tu4Pz0MAjzMl_{N3{qxnfCG535$5jLsfiZW+x8pymNap9h?ShV;{ zny)f$w)p4u{h4DHEJPnpjOeHo=;pn}=m2FS+%r*Eeuq<8I2)Vph<5&R5}~%|BwvQr z>Y01s9Qu#Ov;GCXK&-HFG5q!cQulpl81{?R? zKRqm8*itI~mB4$F8vT!oys9=0_Od&>GM>QPxT|12gf83gW>d1M?$X`0R$(cPX2hQ1 zI_=ZTb*mStdBat=Q(>7cadxb?m^(PjJh*1b{$RL+)iT&5wNISZeEk>Qjalaihz0K`_$AgAxz=xpLlX&{D1-2I-`p z;1;zF@>8Y$lRhK%_+C6Ta%C+Krx-M)G_k)h~T7|vGKZb&)MhpEI#NuOR8vh?(^4z`smSn zalE&~?YZj4rarSU^Ev3PvY37GvLa`ULx*>%h_ud1mSx47Y&Y^S7>>n(ZrIOVx8oCw zp%&9I(>x!SRw@;{(cxzPE=91Trq+U8he-}^X-FJa6i|z)#NF}8$*U| z9`!#uk~pe(BXzVXmP>R*^oIp;w*MxVhjbg>*az=3@hzlrd!DMa{{)a$&!?z3Ln(t}2#e zhOX{m)Y)4FS4~h_P7!%(j;{}c+DOY*m10O=TDq#KCLrtL0?GWBDM%v|c3bqdqH=FK z*VLnZ9*}yvz235BuxUQC;APVpue+x3d1@ioj^jl?EOsoCS(h-&)#B+FBlNh(V zRX2G5#>X%3$5<~{_%lva@*L-vp%%J(;!L(f`v9Bhndz#G8kupiU%!&tNzPDi)tets<~fgH$fNoBe)V zpBU4n$8OHHN6A5s5U~u{&T@6>C+wYGAa|u6wi}ho48pF9D;58+m5tW5tdMx=NcOQk z!nlUyfO>D+iSA6-l13ao#CP^ulj<6`Bzv`vAWdAr&(A3eL|{M2+L|xXKjPtweY&kYdJ|= zDv1RR9Nl`i(f%Pk)%;1}c~&;3%X0}!}FoF@E2Ef#+=@ebSmjTG1OhH9~m9J^OamAwJR;2 z^f1TBe(X*P{gPpU1g}lOZgvexv%a&oFc^M!qE(5r>ca=X{}7OfbnK z^g!5Ec6+K&yGvHi@tVYfmWdaf#bd3ZO9^cN$*3eCd|Rsn!}WX%4`1ACqd7rvBf4WX z`A4uxnp$saURGf3QF~No0ih-Z-+7{Mq~H|VHpTF!SjK-gUHPW0`?}%ix;OQDI<{2! z^P)N8SMGOi(H!NOH!u6%Ns^1@RXs{Y1x`rDJ*~VL;Le$V^iQEe=o{uav-`2LviFVI zP^mj-P?R?jHvXWhE-ZYPAYt}&<+VHU!-#ixKJyXBp|6nOY_z`pzhe|lSD1`U3BI$M z^ql4iyV8@pERGv#UJYGJ=3NfzUJO|s<@`4Fi2zjdCp<9cUL+yxEA)+paXG6JN|qbO z$Nlk@d0-ENl`28h1(FFM9S_0eJ92MTYmlDkyb&M(0IdJE7Z7@mekd9hwLfjn#%?xKT9D4l)W7u8XxGZj?7 zH2)bH8u|i|W+=h@TJJ}Ctg%#1Qm2r0Y^_ZDGMn^w%JS}f5755df^89DllA$1O++1W z!s`3n6BSK8(W6gwpSrwU=Q>YPn}5fKM7F_l2=p$4;?@{F*!bLq4Qa1dbEjh;i9tnt zJo~>d)KOEDlkTB1E&1A~*(rFD8OdPrPPR}Gwy12djEUAs;308Ka+Q9hp6)%-<#+mj z&3zc6B1J;V|9<_qcb2+MK*U5dB#0+M)Gf{FYORUSXPFDa=A|j7PY8M&KAmKI!haEU zm;D6JP5gKD+{68M=`=v#bK5M`sykjeyKj z`ziZ|r?C%drSlt}ASd;_@z6Z;`znVZhJgO>KUhyVS2hDz0J4e`Uy(a*uRbCbyZRj! z{NIhn6H-5_!yj{OjYxbZzaAC(It%GF!w|Dou{=>OUOmK4c+OMpxB<({B1u^ zd$v$qAe*>f4A4N3fVjIC=MCwN!M_TNc@UmdKs_Vw0V0~9=;SGwiqGk^Zm zRKrVWasRq-aJ7z9zIEuqAjUJ=onK5WO%rvQR1Vbez`dOV5u4Vh6o0ged&YTzyx60( z9tP3jKuUgMuo!b-O*Lz1xT*I3=I-2F^k8r za0Jxo@oEA+@T!cOxeJ={EH(Fz1IuXKGx{Pw0JT2)rz7G7HpR}`Or5=7Z}zL_)uV%P zXa%ZS8S^uLvPyI<}4nWMf0eqMn6dH>+gEmWzfagSf~?{ zQD86g4%P_md2VW;yHW9hi8dJV)?w~1nk4K&QtHuM>`#X1j^uO>(QoUgpsLi@I*dar zICgg3Hr24CQZOa#6W&~Y=(T4P1w+)B-&2>0d~s}OPvZh&Hfq5Jk$S}I7hlVjR+&q- z=Z+z8NZx3PIoe%OAM4eeWj4H+OP5=o4@FBd{t>R%gB^q4+oG z^6ZAMf4f3GYITjQ-b#*cZb=~9zS@$tEi?q@e4|nEPKp{73*g3Y4|-qTG?LExy$cMu zrdr9xj}oTCt8SJlu!~a1W*!@vnR)fW2Ia@{T7mFocZ5RakZ(mZNc_!BTFa@ghK%4Z z7&A9tT?L^Afy19>$+gfGxAB{~nPZR>>>HNJ?p75tYOrX^5$%rZMFmfhy{A~l_F6cSrclRKn; zzPVGC8jU6L>UPf-FCheGfL#=(*mX|3?#%fd7`HbKE-RrK>FKIq!)<$0shfvQ;%&jv zM zSs;YpF4y=b>^{+G9G9?vpvO7@gc&h9t(T9vUja2@5mtt27YW;|{{H?fjgupI5BRQG zBiEkI+|fSNb{)!JjawIVw@jC9iy0?|Z5uC+00|3G`UB9Zb~*uTa}$%QUQ$Nu^W%KK z>TFeF`^x#_^SXr)Yb?cwj6n!ThOP!DY?#UMPlB}Nuwrk{zYJYcPWanA%v^ie=umgk@rQ0|}d8 zuWm|Rw)F^cobxF%m%o{(Mc_Hed)|UBNcRqmcm)K%g3|}a+Fzf3p8*Hn0~kcA(S_HQ z8R&#`n`t4`F6_$KIzNROJ}ibbAU^<9IJ&uL_2?}GnGqkqoh^++w#NxQ3LVqHkDW_2 z00jWV5iLp$ka$^Tn_jgJ!=8|D;owr?iuw2H(#|HRd7D6qB>xEZoIr%FIOFf8J%11U zPP-SoE8^R^##(A6@UvFDTx>DpBec6Oc=IyT3`fNeg;Wi5LSem_oCdjU_#~ zZasV}vzRRg7P-yt_kPzcI-K?#^Kngy{ynR8MWh#gL0kb`Qx*C>$Jf<|zPpzYHr^7J zD-D!+2SLOLDuI~+?=tv=b`?Rvviy(;-hjoFHG38eaiiLfudt4HZ*R(tcUT_*84KnW0L{x>ot1SUgQ znY;L7J=z4i@=tB6B|eIf-AJKfoG=c@PvA7WO{0we-`%z0m~e02op5nEBfDOZ#}(3j z!@d-KH-7R^Y_G|9G;8fsll4&>?M7vMv`KNxZPa)l-`CDN$Dy8S;!eW;-Aa8m;|n`G zk8+9Wt=!@AX$Dr@dJV{V(ckFFxzr-0Wo50ci0zq|`YdHfm^D^8+{#U{h2iU@o`?09 zL6{24&oMCiBPw{ck{;1qm=k)El80W(Gtb!OU9F&EY!-D`kfe%8?~6CJ?tgtqaU0~7 z)^K{mmL@En&I_cFdR-9!q@dwcVn}f4k8pQi2aP}I&;)*on=gDcmYVn1d$U3nNn(Rc z8|WHAQ#r%dix8<50vimKbJ?@J_GLqu@NZxyQ!&!P>2$qmB@Nfqak4I2lc2`} zjrSXX?EJ|;9Z?Qn^nWuJ9o2${2;a`44H=+tw`vTQBgF)EqfKu#9aow>{lr z5pdqZTyrk?WH&ALl1u`xgW74l`S0&Nr))EMJBH#wEnc!&zX$?S&$h0`V~j2@XJY#)N~+d2JN{_=OFnnvYS2mdt4Mm`S5?=QCa0Nw>4pf^kM+SixxtA+gPGTCU`BW1vl3j$hRuArzJ zoMjFikW|1;h<=cG<*$}w(kwA|dXU(dtK}lXCORIw1CcB%uYUbo#Sh~soZ}9(2rOBkp@Fa+H zqRHwp6<}AZS}c9v2LD~Yl*z)=yzD921O3Z#-;_szZ6Z811h5($SWEjE?lc2u-s_=t zFM}4A1MCbC)sRXVVlE81${IZ*u^1G-RXZYTlh z1}HtakbSEq=Fx!+42&6s2roePh;ph$WD_(~BH~yq$YRVuz8~owVWP$Pt}}?IvwHCr zh!RL|fd^#;@>;aHjOX(SK@evHIV_>+C@;2Z30rCosW6;B@?PZ2kS~*=ZR|2nRQ}IX%$r1Vuz_=HbBh<%(ldi8u$$fP4g*_u;D0az+f9x+Y@^!1LaUHb0nI60MHEZL~iqOpUH9%V3Ib(n0^H<(n@d*Zw5bgCqN?!^`3ruj9L~%WPgPT-=btY zdj~<$0ki6izSRAPA8ddM&KsZO|$vNYSR+=)ccwQQ!hD3$q^25E_+6DJ1Rq~CZ^jlOP_17 z?(Vtho^rBttEa#ya%^?i+tthH>sd?YfcVn?AiaFp zkO^^2^K8JsNucPwYOdvBv^lZBcc}4ClYgc~{%zQ-`tlf0E#JF^&KdT=74UL^9M7s~~748tg-#|1pl6{fw; z_38KV%&{z1Sf+dCc%|n{m&xkl_b1wh!bA#vZnO6;Rp?NJ?zsKQ73qWU3dwKP+YD*V z_@UFIF^$UU(8=H$mB>4O+c9VK!wf509Yzt%YjPeDp#7y`mWLr4a-H=?)1X{UDJ*+Vx@?oyW*FVUS>avZ}R&$aH1DHSYvp{HCEhwY;24vSsg%v zi9!uzWFsDQ)+vh@!P)}ysus|JUtb9^0J{ZpVUus4L*^$uRxiQA1+NbyD~P|mU~C{z z>AGQPOAwD96Tw?wWJ(0h@ni1*nyX-?_8U>*Va2)dW3rrVW0Fgg%_0Ft(xCSy|P_Vv*{2EJ8!O62P zfQKlJP_Uf^y*z*%>%PTXp}ti1$|pJ$iuQnkt3ACOUO}=7R+Zu3ONK68`yiTp2V%oR zk|$R}39lA733+`ZfGB5)8c?Q>Z-4+^ooGS75d$A`$T!g0*^5pk;Pr46+*J7oo`BhM>&cNIE2hDaFAx|&!%P5aa?@wOPzxNKuPC+^)!acQos>?$huWP~aw4=39(5OYKl!XVuz99@-k|2L4szJO9x$o~;|-49Ux2cLG$REy#EbNOxV9He)L6MmHwsXOU*N1Id{qy7cE!kvHZokxXVyY& z3eI^p&jWlyL=IV;+K?g!9n5@gG`$QU zvv>=Nljy@y>az^&a02!ku*elw)CqX2a2D6AfFOqZY?cS~2Q(t(4?m!!Z6m1Q|5z1N zU&1UUCN{Z+7;=S6mZkxsS@%!>Jv$u(fy)p*yct?7(Sz9p>eP0a{<-gE=0IqyQL3>m z5RXn7dTNNddPp)vX(J(Ufdte%2K+YV%*i4OUX$q0E&LM{&&eWF#a-fr%fQR(6y@z# zDG6G55tHZVaE@gS#C!f)I>p9&~SSw)Ar zt{4BMvCI#tIS1|-y)k@&W9UgC){HUEO-gAU4y%x;3WtdgZWpfPhfo%mP&Y{uC{)Gl zDqOWzd4o>eDrU7BJ5|4HM1IoZ!S zOtGT>48A}dQ%5GH$+LMsTZ4OZ9>`sb2X*ncM$aZ^a~FpY56X!#^`atb)hxLy2`3^! zA(E#Fpy7bxWhoa@5oeX&N|yd0f4&O>OCtKur>8xqnq8S!Vs75I`}~8FGNm&l02+_s zh~ZAa3i4eCD-)rCg)~-Kgras1SZcs-QtXW2paH4mEl|jl)~qyGB|0U_0EBMIybyKe zj!AGIKr!9#gI4tzo^S$NR5waH;F0S9f}cTKshc*jYIquQS%xD>#ftcY!TH&6;-PBC zAji~=vSM;z++*q<03n#yfPxqnYed1OYtt2{vVv%u((;U}%&| zbW1c+6NqSe2ckDdLhQY?*;G2 zrqJ9_$$7`aHDvhsS7X?Cd&$gwwD(T%dM~V^q~i(EJBJS7%2qkgQ&QCmW{?lRcQ=^P zYgkY^$48Vu-dox>ePaj?$ljAr&rUvp7?=~FaTdj6#t}wLASv6s0!qwr`6$QeLTif}_xzzm1gE%)-^gt^ zVIb>SV<{J*z!^sgb3-A01bsA&{#F+FYd4`X+Is-{<8TGJN>Ju@opm2ZmTy1}{|^2- zbX}PudO>osH~15O5$uK7Wte1_L+0{E!TH7>827k9BiWw$dLW>NUtdWtd!ohzo6aGh zh8p+vNj!ymM5H5oO2A`U&T#t$bc#Q|y}#E7CBoYTLko+sPLR20&1~*ilq%(%sigk} zS(zV7mBR=SXX&Sa`?%$+J!0>L#^!kk#PiY+l*$tJb+ z5FTSWDa!&rcOo}cnQ5ooNS)Q!vXNhHA=li_lXMUy31GU%F~XMj|4^>0 zi6$XvL@Sm3&qHA5J^33&!Eo76#{xZ&@0zem#f2bQ_`&lZGdU9`*aWXlq)*cgR=hSt ztp{Mw(7n?TKbJS2xJS;G@`W;_HJOu{`3EqwfeV_{gT$p4Zch?mrEODZbnZFCN8mJb zq{$!7jTM8p0`(ZRH%B!n$j>HLIW{hIteMN;1#hgZ-Z~URl=rWmAxR8Alz!sWY^#gY zT`^IyVyn0cE=j6wLM8DzI^-KnJNZ?tb%ZU-aUReIT4Az0bpMjt{&6PyM?kwX(R+{v zrT!63G1Wth*z*-<#sQJka34yvdH%p1c^bxG#+Rc|y%wRoU?~?TG0G&#uSUoU2%k%K zjJI1tqElZuwfk0xkS+85(Z0db<)Ef#5xiZkv>)hFre~7Aft4Z~wp@AxCeU zMS>xjA@=6AI@9~-Va&gDih-_3C}Y6~^e{(1E2lJecCI_@BXBL|ua2wPsGkd1;DduDFwk7XgH@e3)YiS^jCl=y9^Lj>E{6zUBR3Gdrtlu5FBd1`yqesXr51a z{qFrG3WSGqB;4vhUhB|$FJ%|s4QHK#P*0jp+vlreb_I0m;Y*k`3EAn(wcJ=WVYZ5k zq{(ULf{@d)qZkuW0IrkVeYd!bFAO9&f8WhEhc@2F+L(%$V;@aKPX<5(*`(1ZwgarI(XjrAhU@Y~E1vkmP|kzHNDu zf_xe}7hi#@GN+5s{Co+L(G%|)5%1O&$9TYbFZDf1PiH8ZT(-12c?gP;raFv0Kep+D zd<&RhR}hl!>vC>84&~I`Z3{goo)rW{_aRRx=A(oGm>l?BzHu3^F$dnheH)14TTf@? zbAC|0lwk5_UCq~j7~(cqCB>w!P%c1%yY2h`Lplh}5rFZ+KTQZb6V9I}QPtX<8GgOsrz|=IVFxj3WPP*#wN5M1Rx7ktK#Vwg-3;x@F|&T zDJi@S75=YGz;Y)FOA`W-6*S^DIpFyf$cNDPb%!!hO806YxZLq&yXS{+dt6EY`a(0R zc?udXZi|$Z>W8_AcssGl$w}?oiU%zz0WXwc1i^bu{o_Q9A>=KLahE1E&+b;q>*lX8 zW^9!A;Yg?|Q*2Y;r8e$#0vM|v+JK1vYD`$yM=MS>Zhj=bWH*1fW*vqY0o|%Y$|B!CD1dSDad={oG6bJYCutLLnUe{J8<%zJB7Vm@H3zu5r>WA4Wz$Fj(}M|d4B9`iDVVI3EF_(^(H={`* z(f<$ZVDAP7DqsUsJv|HBcWL>9aLQqt%BYJ}d`3_!4xX zoVPEij*ZT8JR5ToCBuF&9w4a0jzYy{6YPR#;EhcGutae87xJeTWnRg4e162@BfcVi zZmPJ$h}->*dmX1BL5BvGnq>c`bP#Z~Y|iIhDV9W?2Zxcq6iZ3!JsI}Qf5lg) zJw5e50X+KAG75JgAVtBU{PRLxmAY68#@+gJ>ht0?)1aPyw5&?ro{13?c}_37(cRO= z#={q9yM9?h+~N11KM-E=goTBriCw~!Qo|wO4JZLqt*s(UYLJ8axEw*=%PYb zCO>=jEW)v(qGCJY{1GK#G6h9uNKi1d=;lfmMH>vupiTJu`}Y8`6xn-{m^&AI>qZPl z{7_j*k0ZwCa>q0VZuGkp-sgbHbmsTu+o>(PImN|tb|P8VBab39+uozYY`byzZag;c(|+m~f7xnfByx6TpfKI$=c zB{zlqM6B{o;Brd^R0KDFejc#VHg|5q<9QF6@6rCfr*?z!5;dZ0&3cgYHZAdJCRaMi zdl1;PkH!$DNAq-@xmt(&`xTGDih0!Ag*OxuNKdT3Q;1}JnZ3h6-3%~LO2auVV7lRQyW z+rPyF=s~C|78rUl3W=VUtErjLLk~8hVSAofJN*;tp(=@&%P`oT5m}@Z*bvh(Vm&G~ z)h6}E*SpWHNr)p%WX~W1VF^J9$xgR_NSxz4bv(SLas4Z29xe!mlfkJ;MB*}A1WAdv zuvitU$D&A@SasaP(xLnVPIyN7qIxJDMq2aTn)@)p!qnqBS1dUlmP`@{J}N(H4757K zrHLdS86%tZocg~3n8+dPnW8jZi42Q%I)HKH;FdRU$=RSx=@u_KS59wi=V2z>4&+#) zAhLD1yqyc+2O!Z20oFBIOEu5y%`?DJ;mRbIft{iqYs5GD;efnUZCE#pMwIC;aS6n% zCcJ=q=g;6)?rVe&DP#bd!7zypYuv&oFoW<}+D^G)$hueYK%yD!P8fGKCnqOU_$mm_ z`$zWU0s+ez@3!J(d$N6JV53?50=gjvVqQo$Env=wa7acC9KjkcKv?1wzAu&mplM!& zuLeLj^Hhy(YtkfoWT>Fo4LCZM|xQ>YxcH~JZjm3SX@bo_wj;RsEfq+Q#Xdkt7+ z$Wt=2i+|5m>QUp2nBGh#(~q~%&*-w=wb&w)}Mn;-5Jg&}EPGwN| z^H38Vq|hpo7CarUUcOeu0W5EjvACX>K5W-E)6b@fZcUr#LU_}uYH%bO@mCoJd@DMH zO2g;HqXjQLSE}Nhvb|f^<9Kvy<>i<>+%?~5L*fk;O~l+GS@cWfq_y6&0N5jSxO;2k zj;nD9D)+Pci5&^^41ENG_u@O)!aq(qqW0M9znp+pu(S% z6YWYm)JvmCCpvPC@PY;A$SbdM<_;O7PdhuQou?47wsEscHfj01$(E$vvGufjz@C#b zo#ML_m?5(X+uOf_H6jgch?q2HOLBu7`C> zvAI&l(a$={n&l_}IN+3C;suTf&@RL_Z5;@N>+lvl;?MqmRc*>JY3lum z+(z0Lqm*y{l;BD&8N6psTnvHi`!ItUxFmG1s7SO!URUkr&A)Jpto9GxfPw#oMC$Vl zu5R*!4NH|CK;mjJVs(WXCA>)^UwqhSfxyFfu>1w`fxN;!D`ov;gnO#UY~oY@L9>>@ zqj8Z%4>&UK{(Uj|E@Dw0_42UhhQz4k9Jj(9?)j1D&uP8bEJ<@ea>7%dGJ;_*dUS1$ zj*|Egmk!#Ts9mIGirgv0Tlvqfy4nesM?InPLglx5%cjpWkR(X&Tc$<9adz(Cp^alV zGAmm80xStZbukhp-6r??CvX&sl0sQho-UC2xTUbc#*X9~&0{*MVv{D>pA6opPE$Yf z5Ky!Wo9p9Is+vI1g6nWbk``_$@hA688Lwe5Z9|%=S|y5C#H{#iU6(w6bw&M_)rZ*o z9K%fh*lFl8w=*e6+ugcldhMH?9UIR}-f%3ka&^Y@Nj*x6&axY&8)7iDg*D-sJUO9d zQBabJ@`-(*Owha3?1mLyRtL#t|XcjIf^C4?igJEY_$ov zx$(@g$T)fzJlAMk>a?hTG5uH;4=V@a0635nMKT`C`b9sdhhW%-<5p+i==59k2I%S> z{w+YMo_~v%*HT-6$EMA{g`@QC+qbWqw=(qni36Z`h4F5Xw?ulpQ6}VsP>esu;w2GP zPgeNFax*egUdP)u4Zucf+=Ax$7Cky;-z%1(3Q7?gq1@u=qSq-hsMN0*30Wf9mwh`v9M+ja!0w)cw7iBu@O!_RJ z_*atV4 zkFIdeW3;FE(OpyeZmk7AGEhwP!6H)WXE<%#(Y+%-rBNtw;i6`1&cl$-=H7v&Z!Y8t z$z51u8#KNEUC2cn&E)jo9a}bnk~3SM6Y2poq&w*Go;FNJpgsVpIAmMd{S*aUJ(}Ouj1> zSdVPaVQVkH?NJEidpln$GcuuD2Cc6q3C4ij{!kkO=y|}?=!{DC4rP4U=6C4_a3j%% z#?NIBr3v?IEzpxpw|P!5>i&aiW6OU)iW)f`_84>X?y_PUkoJay@XP1Vo3CYfONrTO z0VhN4YNRAm(#I#X&e!1CqGn@K?j_#mX~}s4ZE{;wCuSe4}?4-G=5f9{>w!^Zn3(!)y%#oj%Ca*XgP8k^A1J z0rIEkOK{6CNVyp5Y}Ug#@b>$YTcZ8G!LDM1&=1#GT8}e0UAWK(^N}`|BG;uhzEZUt z)PNg{*0aDh(3X|flNqhS5J%GH0P@k31 zq#Sg064sdV2fl0`5&1T(7W5tc6afA~m=JeM&VJLJ9rRpvc6OGQc*1iztyti4oJ&e? z(p%G?{IT&DKI`0Qwh>z+ zVtxu;V=UlMapw;h(akUJ_MPXi_KMm%AInk=B4zIivr;A0nvIQ3PTG~kJLhU2?ttzj zl@G6sSj3v~GRU}&9Lr#6B&^>oV3UdvcR>X zC@2(;8RoFPEupPHfik*-%;8mnQ3?w;G@HU-0NV9Lyh^~G_s;Z1>p;LCjJ`{8 z#5kKd-paygktgwx(PRp>O5P-ke^FuVU$~X}wOzJV zeug1+qe|%sCt|9q@U!7y2JxM@%&zJa+Yxj9$5>R`;v}zZ$04%te}@j76=Raw0t{FK z;TaQptwicynwdXBO%1~7zA81sEJKN-x@%D>yDR;Ovg-+hO}fW-h|Q#dj}rPr7-kwkN^GK%2U4bMn38p zEZ!jMjO`v(45iFoD-=)Kk{8eL52T$3aKk-?%jbc{Lzs;m`*8B{@Z5v$p z=PR7u`GcTX1c(9~>o#1+H7t#H5FpXny?Nut8t>Xnh3xYjo;550b7DY+L0QKij8^=)*hg&+J54+3f0aVNJv+Sx*Hdsa15x98`GDoc_a5lr>ktP- zt9GUIMpMQ`*b_4qV(to1b|90(G7Sx@a>ARvzB3q7umB(YOUy@7xC8P#SkfEFIlPIP3Q&P?#qGqPYpJ2#f)R64C`D9{HwG zi)m35E&c!z6hS&!s%e^NGHvVjQ?6{!3WSES)EOhv3MD{}IDkU<{w3oglf!g1rC!Ls zsz`^QRZ?6G^JHU$5PIEC_E)e$v0o92$x6=&B5?$PEZN?4HpQyoOg4k%cp{+{0A-b= zN5&s_iqF46WF~h}6e0Ae4o==_T0bPQDJBW52X7`P)Aso-?qhNX^lo{Zz*x1Ip2j9+ z$K==`lXD;zmx&YhfM1)Y1lWoJ1My_IAB6d@A>bDoDP`EnAKEptn9I69(ozG!=fN-H zY)kaOfVpgR9g@qh15}f>>S3wHB*c%pvI0>toRm47`&7iILNSWydVOR zywOkfF=NCU_MI%OJ*%BI;|OIy#pKC4S+e*EH9+H9Pl$5tYf%$wqAt>r`gTi}vY33% zW@Os)3opI?OBQrNp280(o?FRxATHGEs%bXz0Nxik=Y%^_65qC5fiL&9LtO?ix6Vnc z1n^FirVwhYewj0{JYHs-nu`Ld)pq>)=9Y}m`C%w>K7an~5N`Swx@ zFIrxv_^?@g>$76}AdZIr2~)2eGb;5~u?J&%wdCaj8D?>)BWbM&Lq2cS4TNjg&0m4S z98(mp@dHR%e7af8R`!()$6@lRqqaXqzt5aGQ$z<0Q&QC`f#GQjZz;Cei|~!rTtaK9 zu}E-SfO7;=kYY1U$00`TK0s313f(n-jxq{3GiHvRZ0g;zu$YBh*(N9v+D2shpa4YK zNK;L#yjI5y#Ksam4j=ZAeA3fnjbUR;jc&06eY#+5O2_L)$8HI#g8Sn`w-#Vm0n6r= zl%lJjD@|{jn3y;!9FuC!7Sv$HFDZIbwbB$v1jyokz^(6jhWNJvUqb4#KZgAS$#)(~ ztgdaX3^{SQh`%fgw71hf$&AMRZ+w&?YWI9{{(Gzzj|o}@&C%D zLk8WhTl9xYpmuz!mHDIeLr7N0<9+EJ_Om3jY!B~7I1=n)i3ouaDnXoi!d#1fNU4$g zfsiTH$8=GsSs-v1@;~-{@B{Z<0Fr5*f+J0Wf)vu~3pzR!%K6SPoqGqxg`O=fu0Y8g zoT5;(>)5CXtuVVG&gu@z3>lsC`;(9y59v|^dqBQE%I&(bG^obMr==#|({GZ47SucImnHh04OVY7IVxMCSgQ(x5*-X~VP=e|`TxBzxq2 zV2^FBe)2@M+!N*#A<0~voY~5vqK2h9Xp|4lstO#ug>eZS(QCU^QZvfjPZ;{CGK#Ju zV+~$Cy%Fa5xTU544dd0pkdfD;D80)m*nx~;I$$65k27q1k|kbWUvFs`M(r)2G}Zc{ zR-7w600@*s44iOq5Ud^(LjOQc=_Xn%HZ8hhl7iZRG-TWnY^be)t;l%*r}iV3qC^Hz zdpPxJWyaGmu^r~84(pD{rX-euvnhuONlQK)4o|&ZXVnmmX3&FhB?(mBW`p& za$c+@GHm5rU8x!+&D}gA2chf2@R1L} z^mG(?6DVGg4t}ro@*JLcx>c}NCp5NJ_E(V{^zSaw zhPn7Rl~XQJ`ecfnhlCth8qWU6xhVs}nsh{Z;@~4dp|XS~%KMS-I?0&i zCSJu-*y*_S)C;$mw~CzC#{9-GC7DJ@WUU7%$p#g#75y<;ycZ(<^9mJ z8ID9Y@xpDV(($I!G=pgO8W;=>>8HP6%j<@OlPtGXUYtgn*;b-8qK9hN?dFE*Tl z2@<8q(ZyCaDwPJ)(2RzzrD_EP1SHe*%$!RW0`bu&+)DnsPk#PL;E+^`g!mE6G6&aS z0!R%53@eXT0p_V}qxg`b9#d`kABTr|^C0>dMN1eJU^;N9pLquD4zEPV+dU)YCWV1B?${ta$Ct&6vP~tu)Bo3@jr}8YqP@$g%IIg6v-4}~ zm!&Sef0;2dfy$NRiU^!f;T=oe>tor%)q9@T*Hcbf^t*_-(FQTj?xn=$$EC-^ISj!p zgwEybJ(y`f9pmdzqUk!bp0-h!qLY*!`uo7EmCmkqWp!~ zDVXUQyWSk#V;Tmk$#&B53B!4TSk2lDj2J|S0-0-}RJbT_1ktK{b{pZ=qOq9p7$%|Z z?wUKc-s~$F-W{Z@Bb_X*FI+4d$AsdVQOCAuDvxL>%?zVD+#in2ieE@;)(e@`<5rT( zG#m`b`K`}&UM^!+5s=vHqwo8ej(H;@*n1LN(0h?0#x(en-- z^)gmNliG>}FYtX0?3vPWvHSU}!gd516P${WyKCH2ur)C!fTLlOExLOb$|f3xoH#oR z$whL*F#StT2i5Yd%tz0kgOJW23l5+GIBde7e zWgX;EVL9&V68-E0PuJGg+7=X~`T0dmx2YHBJB05Rk$sv+eb=fLohx82GuHn}Rs5wc zwVy~phj+@%G^2gR|8j=8mvQz&y{U&M%cuFWIsy4SUX90o2sa=PtHX}elwzJr8nL@|Udsw1~^@Lv#Z%kUH z{AY4um4&H7>Uo)&E4v}n(e<;@k4+uQl*7pRQ18Y+o#hot!?y*bdg>Y~@k+alXNsv( zY6?&(2yct#>e>)?Mai|gzPa~Mo+Yg$(n*-@%H98XR|pHEjq-T2)JrP2oDDm8%m@RM zBlX~9Voq<;H?7^>IeKwH#tm~r|0K+$UyV5lIc#B-ag*t&J4$k(7#c2)i6aJYBE7y583+tcbY$m1)k|24y5rMY?9v z&K>KJOJSAXXrpFv30#T{yji}2cu6iR@s|wLHfMxZ_?6A%-C{T0np1Tt)oPUSRF)1= zy0QB7!MtwNj`ROwbaEMl-5DH=Snsg#Abf|DlF8k%r2KaC&x1oYuW?@$6FYqa28N~g{5TaO8P#O~i-LNfk+TT-PXTv@aSmrkkp(}B{kbJcr^wWR< zjqcv@xQ3|D|28fh<8{!aE_Ry(F-l=c-&I0 z6FX-?G;NfASp=UbhPr6;NU54ZX4~b_3rW$L^X=k2ziB(el0UF`c|A?EuDWkfOmx^> zZ=sXY;e;=a4}HBID=aA#T%eXjl;6SlMz$$9K~jJ5f}f_XOs!#MTwhvf?R?>_9Ov=j zRm4F_BEDg7SChzoor};A6Nprp;mk@BFu3Tg56I6*5BOjGB42)JOnQ^hDxYj+yTpHqSF69~ zF2i-vICklsay4ar_&$R{*B-_2Mc>M+x1~!z5Z}Hf!-MVYqUw55!h}>8TK|r$$-7Km zle%e@p~kk)2|+S*hcL4{5$4pm6$RZ30p>ljR*@R8(T@33GpZcj9wymsBR=WYvpw|-T(n-kbqLSIZc(AmS{8jW6h@hE5oxF=_%l(aR&OXJIFP9eU2Nwbv19fyX= zed8oMwk7=r$&?5gw-AdPgZluEb6qElK*Ql%6SSTwlk5D<`%5=2sw z?vgNQq(K2G6{OBsd%y2@edjvo4{SH+OI<=k z^_)0GpcAmE>r>irSVc<7IcVmdfCcV;HmUUsiihNsBM(%qG%)VNqky@e+;Qg} zN0Dndb!romG6261Kc0unj*ua{u6~?@D{Iw;i=;?K3~Rr;gz8YGTkENDCAnU{yuv2Y zD9UU)>8l$)4>du*oKCI+VxRHGGy;pCF{wadk3reoy+4W=QE)S~@Rz1}f3k*;34u<$ zNwf)&+O+D+H&dLZmj8BT{Vj*#(-`M(uv<5a8lulTpZfixITp@%0M4=G!8Vx_V>kf_!x&P*FHuPm)8H%k80{0?cTP<#+NX{>SLw76%v;g zNq-XShMMa@@%76I$3)5V$ji(c=clh>u)PT(*HtUAcc+L@U`39)CZR4Rm88is)lybQ z%W+b8YSNrxHPK)tlIX@}b>mJ9Tw|0wPqV_I&u_G5#3bfY6ugyRtmY*r5QF-ffr2(M z%^$0}Fe={*Ps~40$-6KV`;<#3!k{n2uR7_gQj$$-GoG2Aw$CQ%TKDHmwwPkOPl>Va z@V*gj=tklk3gsYjQK-DlSJ60%_%TFrE(pzh6}TJANPBGQR zjYZ@(;gq_FY!!@ndK@ErR3v3So4y4FVW#r5nsdl)`*EeWmzmY^`dkz!E7Q2E`Ltik z6Dv@~UmfjYRW!4}T^TF;COn{k;WMy$os%>CZalDB7dkp@VGvGH6U+p8G90SiuqB(n zubVNtW4*ci1n-2T0!>884` zDfm7aqN1Q$lQMHX)qfSz{K!Hy$3i25d=@G*?{i8^*;xvqgrn@WJC9C2wt6HdPP9(y z{kEv3NmRNomZGSLXO2%*Hi}f>rO0fOm6R0vg^?wJ3SK`ofjfDJu6x;p=SJc~^A^7&yaI`?%dGq7x*x!*jg}ZE*YK6nz#6xI*G& zSvv)BY;RK2k?xyZ8b+4btHnkRp^OfSkRgTH<^i|!&)C`Sy`6-%+I z3uv9Vb`zWJb;FJ1v^0EJ52!{_-Wf!fq?O%R#q`w_&DxbVc&`fAh1A>fAoAYWHa8+e z3<65Xb=k8J+5-xm&D`3`d-CH)M}8c_ROWi&J5ES?ZUws%hy;i9BlP|kXe8p`i~(jM z79vl0a@HiM%@Zk-H8l7)jm4>1$;`W6rkMvQT^Wbv1h_C5D>#NwBJkCmvG#x)0i=l+ zhcjWBArTmQY$_Pip~Nzs*=7&EhO_BZmW~Av<4h9 ztJYjn4*TY6NHe}}vnolo80kk39Wp%yDlrkv72bTBy4fUEzW!01dIh;$gCkA;MY;S! z##fZ6^mZ&0o$!+EICZAw+N<3W1p;-m<1g{;T<*E?aPZitpi~t$lM{$r`GcXi=A5A%t;#SO$fIP@h?fMH0$$>x z9ivESK)5EHZ!)aOtQA$$lcEXq*eQb<$?%Bm{tpp!A40x>?nAQuSe6>7SKA^PyYo|7 z<-82pda76z2@H?$mR{kLtS<2~9A~lmBbbc)LhN~{KYNPQ))z`jA+X|mBKKbEZoHvf z&H9R?#i<+;5%CF&UV)$w!&!*jvQHP^r=RFm=v6bPLr>OcC*ch$O`}eWc$iw%*mcyQ z=JcTjmy_${$Kp$k#Hc$88%0t^>(b~_ujwiitY&3L6?(lSzxAnr2)T02D0GRE@EhKq z;0Mogl7_ZdLmnU6^oiL!)Y$Uw=I669I#Xix73%uARL~ps>#`5HG{%{qEo(nIT1D;6 zf0&|%H%hCn#79CsE*v_RO?;TOgO$}u(t4KWE!R3ap;69W70*%0qa*ReC*J%B;|>Kv z8fjur`*74C3KvdGSz~ISu2b0!v8UMf_TM;E6y*abu;iK^u-(T*U{YXzC{)Fh=H^z} zKYDS9d&9<$sMaRc+==Ju^H&&38A~{fEO+Sh;EA>&Kt;F;HVh~oxgNH8VFb0jcl zlS-7_xjH3Avxp>~Af*_7-;d^rRtxbi9mfzo-DGA|66Cwan`-^{%N2%9wF<07?z-K4 zqvv=E*nPTDZDO>iw_M6F_bG=8WE$0%$ND60QC6e85&LQ;k0tsw6$k3pHo(wz`GQT(%7&8?wlpG=7j7WUE+|BwVq&$dCCG({bs0w`Exi^S-Xt|*yn&B_ zRA8Oup_>^em($9n7K^8;v^T=|OF7bwq=@g+RNVI_3eSjBAtO;iC4_K`Kd!w}Wau>_ zM`hw(XC$@}LeSr$7(I(MEcrmS(uvSXQ>sFuG~|m+R|-)cuQvCb9=lr;GNU;qwm5|N ztpUzUecrEYm1?gZUh>iSrhY{~SwWbH9-M#ZN)b9K*bn(gRjP`4I$f_JLf zUpy1mMS99t#P$(IioH)FwMM|op_+jDMcV9ZlQ#+{_uP)TQim*$ndwLiMeM`I(SPh| zdApS^dra9wG_|((rpj1-;N=ybZm;d1!4aB`Y$1KD4V2Cb8HI&~0uy$X`&}>`v-^wT z_h+JrL$t(vN&hOC3g#+XX>Q`HS@Clg^$W%<(8#nINfZ!KvpsXMC6uG%QgC^=an!45 z)F7ak)&u4kH{2#euF^w>1~W4=I9+SfQ&CY}xpD;rlEmTtqYoi*y@M5li(Rm;Q29Q5qXiV#$1PlY6W&m?-Wt?R zl#5I2HAhv)@Yg~kW{O?_?Ri`Zl#k{q`|{5w=nuW}%+7t(%M={b^AUXG`psbrZQsn+ zGY2a|t^p1ltghuF;|F%{QhW1OjAUBRaobcMeC^OuWB>Sw%_JZoAZzny+I(fQXax>s zPpBZ4Q@*qufuWgiYb3i1`ty#`a`S2~gP#Tj8^*-OiW{EmxL&jQwVw8m6{{?_+a85%PLg? z=mCKyy0pbcvr6fQRh#sdrOqt-hmO3A^mweK8>J(qjMHd_evq+tPXji$r%K{XrsgxQ zf+#hBs--#C*ol%q&CNXl*AsvYEAG%@1%?{D2{jQWBZ`a3{36*AyV4-+LO7OKsngQ! zuao~Ps%}%yog&U0@st{CiumD1<4p;f_v;NXhtu;Z0%y$hH zb*;OBe0OSpl`A)%i~YkeAQPP=(op)pE?}5nbfGumbcWsH5Vzs>tv+xGEzUfj?u6hU z5OBu(@ULP#tz-T40_$u%?e!i?nYps->sMc(+rSnr#c5ruOwB{@G;Kx(r&7u79c^$@ z!uXxw2IGK~7KtTFwmP^7%X+rq`~m`6w6_LT)56HBJ+Bb5mZ`-~)*Prw1-&kYoQD`5 z<@`_cGEs@Rl-$;X;4dqOF+_xkWRH_G+Z^>;Xx~p<&~4)SC|vsd`3wxJl2V@L5)Q#9 zzG6=9$CzhCttBx2Mm(rgZG;kI9QGkkiQ4c7dM%j{7*}xr&-FgNnB^=c+KYO8x;)i{ zN08S6Vaii5qNNF#Dma2b7Le(2ic3c0U={^pgCKz2UcY`l%U+hEX(bj+Sevw7A5sk| z?uEUuRJ!Id{}?znM}GUlZTmHymQoB8xbqxtV~n#wp)?;tc$DE@M*VXy*>BY_L7OPp z4TFDV08NxR=_qOS)#{a18-(dMgEtqa_oWBcxO1??5D9MV*bH49H2pssSv5g;d&6TMekRD^Xk3-!Nl42!jgLE*-Q`oCo1KLpDD;5a z>M)w>stSZOIn&f5*!Q^I;Zp}UU>6tPMSF}N#~*U(iHLFArDNoO%3o$7yPug{W3{4r z0LK|oAn$HkNQSGlwv?ya>~&q5;31~i7IAQ=xWzbgaj`IkqPxS-56sHLP-Ci4rF}}D zA7P7~TD^eCYFOJrma78CH{WD4jsJdNCHfkxe@^g)OEq0eQ~?wNz@WXJ>D6w}<4I|F zSu9ugMQ?k=dMATvd%hF59IFhaKxIw!oD@Tu0Qj*^H4CDx~ z`@iYGU-;~q4urxQDmaTB{8Vs)qt~m5B~&9cnKL^(i%yolawTYxZrkOl|`9pEVCZ4ZH(R#sNrW$ajp zDU#YXxmdaOY@s|@i3qSujh=JK1%%68H`imyP4OxBvI1%gP=_INhV>?*U=Pl9aO9BO zeV6`Poc(87TFRwK$NgQjjG5uH1CO~C3GGwWb2|Y2sn(ob6t@V*?2xBtFZ%}-L4$N~ zxIMmU8L^`u{`d*DtMw;W7AZx^+oq;6`4U1mQLva`s<+hUEpODd;`x9FtnTn+mz-7sLz)!T@tov+(oBdLcSP~@Kh3* z)O~<$0_ozcl?jHj0Hba^KH3GYU^E@c0oo_fthVp-=Z8SaYAl9k1{^L_ zAWFGIk=0&~bO`}XL>&kyp%~V?ekBzJdMzY7i3Bv%)iHyUDpXEz>0PPTE~nI4@tr%D zejr^Er8u5^W1v`)9;!TnMVf(8s>%lZWHREf_ZHq0^>wsfiklPZYjy{8j) z_2e_q7|;w!;6buVedpxj8Z(;F!5}GW@*I_>JSTttDy}$>aIX(zicDDnwk#`zF28^=N^^LYbymm0%tu)@W^U53m!Rp#VdW(q6CU zu@&&VK*x-Z`~|0nBRg^*gd5ZXpnU^I<6&bn1{wj7dg|wDA@j-fcDnTmxrn51kgjIk66M&*lf4l~z z`U3MY0mak~NshZv4-@D`ZGm$IY`*XC27r7B{(ra@uS@A9Q~1)c{!Zjj1#{v_a5#aJ z3ucU+gM&noX=^|lQu_@2OE^1vSfcAE?;o;%&0l6i`n3w+Ag)KsM0?6N1FJCoZqU@w z5aiU~dLQtM57}`KIt1YlhvQ%f5k91LKcGduL(WaCaDP$_Qh;V~%X4M9_C2XCr;J|Z z<}NNSCgft+dpBioKY`I$Uh_Q>RlihD7kQYFE|d-FS{AKAPrlsp&#LCCImqK~C}7N{ z&`~O?d_YY{r%K3kiM*?~SCha^S(b#70|P(qw3?=pmo01;A3HfCgPzm(;Y0Y7gf7G6 z{vaTB7@p=qlxdg5m)xAVn3$xgzVT$@gG>W<)9C@*?+68et;@su3Hm%W^Z(Z^K57UN zH;qP3u<@33w%+b|2yB%Z4vWIRPQ5x1eL)a9O^`9%cQc?T(bKC5Hh}S`8>oOGgfoUE zDsXLQXC6$Kfcw|zg#`vFhoBJvru)wNdSpohFpgmV6b!k+sIf1DgR$Pt?Qr#hzB?|% z)#!f|gyxm&=6Ar&m$LF!int22#+&OucXxNe8mQK7in4z4lBnZIHYl)|n3?yo+1iAa z`@UKQlDKI=S)iKEONlO|vztsBTm4VR98p+j*~&sTv4 zGU9)qf!Kd4`2)3qP2JP%lgo=s-(oqlofH)mzJIN{eQ$(G$@{?rxYEdylB;(l_tC2Z zu=-L13|nNXy+bk$d)%Aw?03xFdqIRo*%_8`8uB7O|;KHWHDiJoC1FY;t zux0>5n)*lr5Y=Zu=?5io|KX3XI#+H&p?TgXK=N}S8Y*8T^%izvP3R=kxnu{feJSK0 z7sG@Lk0w|^e}Q~bzojmMMPS^gLAPBa-WFs2h=x{xf2_M3dG-{2dQ;v;O3KIpQSom# z-QB`RFu_pHU{$#Ke<$=Xn7?*@dhqf7{rjs;BGurtVI*N#;gA91W`hAB3I9Vl_A_e8 z$zi^eXTxGAgH9UcGAuJdTcp4{6HdG(1y&}&-F;U(_aX4cNkn`+$@3K``OZhcNgopt z5^{&ylzdeug6w@}I0l#(;7MtX-fL-Vvt(<*Hje#}f1NJ@*F>4;69kBXF=jww8b|2VYH zd;Gy0qip&AyVbgQCJ9`>Nb}M8XI@5`X3D7~ty}hc492f?LbJOJ z5~%L>2%4@WEGd)a#w9uS%ddso-rsuooqGLY^C+;Bmkgz)rI&ignbvGEoq4oy{_}=g z)1Yd|)l3~OewxQ1Kx&Z$i!XSf(J7g5rt0eJ9j6d2Hk}dR$sFdOc1u*$3sOBnqwK~E z8Y}x`n@zA8ob2p`OukTsM`XXVLE$9|sBEk!#GNL34~8PQUt7NSbT_UrdHQ_7_TKRX zvljHp!7F_fP7qPRuA_jSTHptV`Ml^Ql()xVF!ElfCTDSZ`3lvOp=V_TKe;SsE&X7)YCy$SVBQyZ9P$H$gelKa zx}t)YFE9Lc0DM6owPioCzJej4(3YLz+%JgyYaW9h zQ~tq4E@=OIW_mVJR5M}Zi|l~TBupSx2PnwfryD#zG8o^wNyW(c7xXObq`iw zcwsi+B_{b4?r-PiuICSZd^+iV9UKH+oc-Cu))N;LBso7qWfp&B8Ku5j4;6iX3s3c) z>fZbUN@HT$Pcz+<a zx)bCHH?RgERklCWz5yyOUo(dLuZ0Jdh<%L4tdq@$X6g zJhzGB`1DOO?p$yUMay4EnPZ}(pI*LfM$!5C za~)JPQc}|0UaT$pSDg{jkz}h-SU{bozU{iVwZ3bUJk~OQ&2RS`oKtTi9cpxh>dc0 ze`eqZFax)!HllFo_CVYDv-yBDi0+=ntVs4daAS@M_B;FgaHRdwqelPi`90UcH49wr1-oIp%S?{Jv|MUyKQrGmV|(poP$H*w*{bdzz_2qh@Iw; z#QVF(#?7rlvZpZzLOs!y4RS`Ig?y!~)_gY`ZCDa}4_~s5_I8Cg_0H7W5+oAYd@1~Z zKyh*;Q~c7pzLiDIn>U#^1Fr|j>(G#Rh#pxsw8COdz@FwU)S%{Irp2Vs!|v!a3atF7(Dyzq?K&8kg6r#DZ~_EmsCx>$IB;Pj7vU1D8g*>ItNa5(%uo7(96p6yDdh>l0QNchpmNqH zAfSM~k=;fP!29+xW;?WH@=wn*7U7RC5V4Pd8oUDvAwvMc;6!a*p5}1e4S#l;PaN*+ z?VTh@p_s1+VCf}d`ViH#)%3gY3q)2H!@+F)?53n9l+@SC0M3i6V25Id%_&UyeI_B{ zJ+A4eLb0N!6&zm%VJ<}brNN+;E9n)Qghnf`60L(P7b>;8%TYNwpO#ci(6q2d`G4Bf zgg~t8(-NuaW!_?jjtLsVx|>L(MJ6s%>KK==qbz-I`s@7* z)XZ)EYdcr?VsCcR4<`9LWk2m{$}A^*Yv7(XFkr;s&-YT-;Z>-BA%=3lD#wUDmqG%9 z>8m8Ox9y1xhs6UrdiqJ22jFK|ya(hsRb^$%mdF0EH8`?sEZ#q+*Dm)9@GA)l3YrD( z^KFn5`uXmE;2Y_c43vBW!=udOBM~miaKF_3F`;*D54(_^G%K@O1igJwkr4?m)K$>~ z6Z^!a=G`60Y}JFMFYL2BC+6mue^QtHfhv52O7VQ)KAP7Kq@0hY)VGdM@G^itHsh!b zqvUV&)m(^`&YUHbOi5-h1E>+M5Lie+QIB?60KYYW#)W0nGR^4(ifHrj&_TOJQ6S~%`2gGT%5w3x29 zL3@6eQS2Q&uS|EK%i^}wCF1u_;+K`p9(I9f1B5o8Oh1@OSquF%>GwgTJY$vtK1%(T zAk@|^Xys%z@RE{~OSCdOTGqF>hXrM{pkoG=eRoF*A;D(OT+iU(4|I6T_4|w(Yy_c; zL>&1@B<=|T)?0aW2((d3=RN3vx3p_*BSFtAoRgis`vN!;@AJxlvM=HL;K3G5C4c}W zVot%ag~7%Wy6*>FNrjh4nXF$Xle2NvwDy}gU58O{CzPN^%dzLW%cqU_8}rsZ`)@~{ z1;OWn5ulCJKFQVmsf3L;0;^B${G&?aIaYX>h!W+$i=<$p-J25z+GPVH2AfTMMRG;2 zI;gWhcZ6=8c3?537vLM)U~-kQrj}(ZF!?tB?vT+W5+_Oxnych532E;W?XIU!aEo}A zH|n=aw?@N**H5p(vr-blViaT;yF?V1BPvmP_u|AstYvfH!}2F;y7P1kT;vpP&xT=| zXa|=#YLI$y;Q9`pR3;yXX3=U{twO3}oTtslNX`yqZ&Ykw(`$gUz?8`eh8}2(BNQQE zxD$S1@Y&a~!ocxM{qp4t3_9tNmEb9m3j-WX&EHbhMevRMp6#|f!>)-#%kBRCJ>oHi z4K!!`*fp-u&sQ#cX1Vv-?SmolpDicukXJqy00!VNFA9v5`MquI8W|Z8=`!xBR946u zWcd}j4k{e*`rC#nG5Tff$0mqj2PF}xwC`t7tLoWPU66NrKkjx`s)o0*4W<9y?;B8M z+82ref_w~|+IP;b#niC4PA(ggv-}HVgBrn}&i3d2@82px z^{QrQloo!Fnz{i;WFnX_JrqO;zhtfde1o0&4}MMdu_(0oGE_+mtHxITNOcg5jMGoN z(5Du`UcF?zUqNKbm~`=$;apl@I@wUY-l`NCad~nevGn7iD#rtM`<*QLpd~ z4H-`r^G}!*Q5x7(@Wp)`)Epchc64odYtUx&`mXQdK>y&d@X+8jJnj9OI32202Wm@P zN}aBWRr`Cy_cIGD3!8BHR9km`r#=rZ*=+qG))L$oCw?;<`S!PYcsaT2tJ4ZN%%eU1W;I-z`o=D&Q2Uajq6uR4GQNh7>*umCkaNxnyqia0{;Z_$?+QRv7d za9mAT1s5biK|wDkiio$8SC>I=G&wbehDE?X5TK2o6Ql`xGuWP>G%&#KP+U#9b&&dwYAk3=o5`I=!G{|K8d%7`zGHINSt4JbDiLEeAUrAL|#+ zqj^usm)U}06xT1-V$-?1#kOBSJM$H!!I11SWYig|W+?lpbS_G!hW2O36>sciT z2?)HryuTe8{TrDjVk*Db?4aG@KHp<93yZ74S?47x>m9{(S z>x#{#dsJ07>Nfb)^pO^u#gedS9neQ+AJu48#e?B@Q`c7T_kw;wt@HkL(E^9KQpOUi zmc7qP(VnGPjvObN+O)4D2L`SwcWUWXKi*cf{0HFrmZwsgO)B-~4ECIx=?DA?wy>K! z9Tu~ws;!lf8XSlv$Uf^+l*^5$32@QBlb1aq@>rtOi4wX=W@bT5fo3s!!lK#nSP>jb z;m-ANdIoDO9|G&KM5U~6&kSk_Nl32MixOxFSBGBtm=<9xeKbla<`qGKC>$rnM- z9CU?5j>cl}Yy)dmZ!fPmb#>hiXsEh3;BP3N9N7&y{-+{i`O6E~(be$Eh9=?D5oJG= zk1otR`fkne8gj*9wF6x^4VLK`%osp+gRF7sx>+#wT1>g_F+U44L4SY$^z=KpQ-F08 z#3Xn=L%Wm0=OcrJFaRuT^hT9rb!j(Y$>aRPsRJ$(D9SojFgu}TdAK#{)fR#YXEJ;d zqHEZm1%PEyA&ehjkwLT06aj_k+Ue?tO_;&1IgO&dN>-+Fpbr@XB|qp=+tGc9yDrda zoPmetMh)d(sE*RZtjW7bHUn=M?$b=I^8t96e-nSZ+|FVH|02?BBSla-SIl*$ej9M2 z2vF9oy#=LeM&1Z431Hglw!&eN2HndXG#lQK?HA`f9T>OfAW+*(%IwQ5R&?CN*_rg` z_wQRlr;@Shzxo7k_f89!x)Fs;snMV^)g#JIXcqqtj{bvb`>D0 zGMK%w?BK0;P!s>tYW1{~U#E3vI@K6;SC{(EXsCs^x*PwXq*{}I&)`w0^V5NT!zrnr zXBC^9mTGSe93uv_^)sD)(;Qz7Ra`tGLXva$WGtkH zK3XiNpK1LRVq7Q_oQ`qFyjMfn4$F2abjyfdNh=SGX^UZXeQQonOY0H6!OI(Mmn-`# z? zJ-k}g22=i=tUEt`3=+cII092L=OoED?sEFx=htKaqJp{!puTDg89p3e!jAw#q3al& z&7{_+QS@7{z?BN0kWhi+H{l~n5aB&&FGAX=sr3PRFMPKJ_9goc0eg>}2e$zP+;D2u5*$x!h#> z7#JD(Xu~iti?uSvV08iL+1Piu2m2*bIHMThV{We%d*_f^g4~>g@eVw(SqjIdEA>aR zDQ1X`rzt3#C;#!0YrJ7?KF)4YIIYZX}<@bNjt z$6!QOmFFG8%otpz@;HzFwen_*^Mq&0ciy@PLk#3k|j6J6X*S_n;P#_Wc^8`u$P8P=PQXxWR;^PKeNv9N% zLW?CQgE7Lse510)Yc(SB8aN^=M&i^B-SOO(`W?=+WK^osl9DE*d)=8Bj2h*(MB z+;qvwabYf0JId^l$h$l#q?!-|NkM`U&pYfyc^ul<_Df9H>;2;{x@G+knx`yB%4;>uC_C7amm zrp3Y!R;h9MfBkrE!5v1Iu@vWnjkV4U5(5Zj-v_^hk{JS}qP=t;sJaQ}=Gh z-EbOS)No`rEW@|95nGE83w>*3150aO)m1MwvITXZQ2cIC9^FgZpHN4 zzl>z*9STXVaDE!KtSVa{14OaLN0D>q?k$03BGt`fzH7!sYp)K63jVy^mt^tsdObGL zdi&bBw|5NpRZ(1m#tirjEc&N{F1jd>zkPb7m()4pdHV`Ve7R^`7mk&aDUVM%CT1U} zx}83!?zxY|nh1cg zu$v?-&fu}0S0@ItdR#kV3G5;HF%&TvP?QNNWDx!HJFK{y{#%0A>JD1vdQ?HPcz6rot53KSK10$-~rDq%#3d9Vo z9F_Khu7l#-+!3F9DPN`;!o(i#9c}+cc2U1sLkx&-g}aF@_LiNh*KszAINZCHBX93W zGf*HxRn72AC8^$xQez&H@-IfP`;9;gvSk|zwyZG4ul&4SoH4(`uJ|kp^HO5CcT;Nf zE`=aZ$=zdPOn2M|k*~~r`?LsBY_-&JYd=>2@y{|+z`U5DJnpVlF_$$TqR*h!VW)p6 z+yugVbG>hNJmg2!DdmNbTi=~J2hCU06n7pQ8AB&4haP+QOwP+!Q#Y|+cF3}JN63jO zKMclGUYd_6_qCsidez4pZ{dp?f**j#u~oRLe2Ko%dc1ad4VxiaP49p9hAr{_?KPmy;B zPLK6=_t0qy-)BiHre%!xe1>R#df0K>_YAXva^m)vo!^Jgn&#fuD*5l$vJ)A`A>JJG zNi7_iu$8<&b<^)F7b%fj6}LNPSRP3B@ML%)DX_?SY31wjqrQ(XPFcO_j{pclW8!;( z)-vp$NxuWL#RSj=U0qblLJi%UXJ;H#zg@`3yjgF(sx3C5pYRG&SEbPcRyo ztXEc+0r3z@%*xV`+G(cUKuuqqVQ?_1+29{UN_HsII4130mt(n}4*uqX_(|@62W3(Q zw}0kG%`wC8`Qg&{J{?@XuJhl%bw8Q@^Lye+6_+r1FmMxI)9be*3{s8%@oi_ApZP+= z{$3$+W$iROe|&G=qp*~!o%d?k+u(P(kJwlb3hsVS{o#BoC^P+ZU-mSmyjA*%V$=N4 zBNFwAsuS;=*31XjILB^tPMv8KmMm25V3xXLX145ow@s0zD$|a5^+MqjftbyA1HZ9f zin@z`+K~+@AO>mxoAURdK%Bi zMY)Hv2xceTkh52zEzR8%LiKt7yRjShg)o4H>bb z-aq)(5}1zv{N^{qWFw!c6lT!|WB&IC9}4QvtCGd&w=O#UV|*o3yF2&}Eaqda|E|-n zIhGG8&?J==SAO`?;Q$(}_hyq7u69iYihsD~hUgyNxI12SlJ$G;M&0+8mrbj$)2_>8 zL6+y4i%r9s@9WCH4;x+^)jyw}uKfP3@tyLYqT$M~*T1)vzS(a15;nKsdsM0y{1XrR z$t^~|5A&=S0bw4VPedekJM+I@j^A^Z_>EW=O?OwnoUrdAGX3L4dXVJMhk4IGfhk{D zzR!C`1unPy2FPnA-(K_A{NLY0XIXFkGV$LQo7T!Zfr5+@fj^3NC*78>*gYn$9X%?c zh=G=f=?KCp>TOiWyg@~V!+=)3*- zZP=MU8!g5wUUyk%y&QO$G^homXTGhi)dMgN(X_*Rm$oP+c=s#}Qr_FCQ6cDSuCOfO z)2Srpq)13fna*1k&wlFjV^1NLqc0Vt=-3|7`?PgMQJVdZ_>(YQ!V7Axj##XMWa=4nodBp%AMNX;xp5E;l7cxN0gix0PK-kSdGFpdne(BP(*8KrY29>_j% zozDGH5^NptzSviE+q34u`w55X908wu&dy5TcQ5vuxz28W2ogTCbN?eGXqszhDD$&? zI-vihAot_x;9S>T;msZr?yLMaitM;)VH=`pzHL){sK) zZ~uM@Kk~MO!lJgBnZU2FE%)^VcZH{7V`RQV!6L5~l6>8#cL~*7*V}#@E(7f5p~34@ zF(ku9%sc4lk)Hm zmq_VvFQpK|{U=?wk?dX`ih94o!eP$dUQU#=66Ok9+JDBjlBqX~MHNlT987}CC(O^m zL8N*}SM>Me$(xpm0+K7Z^LuZ z>$|C8bgu6IRo|zoxa^1j_s3;_c}*)xbp=~m3_b@K(?qiHz0WQm{b8GVC7t-@W8x2w zHUI4KPjptfkuB6T6cyz(y*@t}pSkuS*4dv9)}^<_*Ka4L`5p&Dbp838M-3&xL)-I3 zTmyD%e#d)P(sOI2em`iS5yY!{^i1%ZFTdid<66-=-I{v1W`}tbUzJ>u&nlgLx*yzv zjeo3MWkXOCjY^G^6T6lm0bYh}jYnuzl}8={>;c-_+c7V6aWX@)+y)tAzQZ`y5Xzz9 z_Aksr^suH^Ap(Pq?v$MBwoHtBr_BsbKk@LCyBo@$gjgu3C>vWt26r|o&HM0%gacje2bjK=Bp+Wy8FE!kPmj{e7b33%791 z5scGY|Dz+i%eRwSeXZ%;JBUv72BsQ-ao{sQ1N$^M-s+B^iYQFE-~h?QZ=fMm!qf=M zc;F_fnj+j|LDz6(9J<=ZhoZrRsrjmF_z*O;wsv-_)*OLRN*EflbTq5~=#nG4ff)Cb z>D+(zV*_=apK2MwtYg+WYi%I{iJM3s(DZ@%-?C&CYULesmN?z|rBr>AQrF>yxt==|(kV6&vJ! zKgahIf_DnkqaUNI&$heHMaIkrP0h64fz}w!F1wr9x!y-D?hC{2(R`db-K&lcuPU-b zPqVS~{rK;$qBjHskqa)@||Kc&^Z7rPVbmqx!GQj5s zd;)Ns-)Pixw-Gqbuo0KNc@wmnsv7;bDPIA@ETN_lNJC0bgsIS)6ZkerUG_ zQ9k82|7%!}|9bXjt@j^P3~jqggeO(*O6BQ*+26FfW=D;)0W+MGI(&)ZS+nDmx_u$n zZHMLxq37;T!fWDazSb4Q8qIm6ZC`P5yyEudW}dC@Ld@KgApzm%rWX7jOGZ6n)wPCl z&iuE->Z&&1Iacpov-*;PbNUtBKJso1Sf}*TkroeDH6yD`eaA!g*KQ2@l3kDC!!rMy zZ|5b>DCovul^-{_M{=8E3;&+oG~N!wLt^8YbK-yeJ4D+sKg}9URba@_pqjIHFG?GgWd!7+ z9WOz}&H2W|?kW$~0G-jY^+_2~ERLK)iEF~y_X?v$?1=*K*)13qyHZU)1FIn$m}E>$ zzi~lr@4U z)EcEOxZg&i3I7B2;F|!ko2Fo{>-JO&YYa=znSWRrgFY#;=}Xs5FWl`1oj%Juh1IEH7AIIxw&? zQwdN}VbmP%5*NNIbCcs{6YCA^7QRY3hZ>4r|?*kuA%?mg%8}@J)G@sQG z{!ZtcIyR{OCG0_EFnzskbZ*Z2hqLFd@XXbD>lfD5(WSE-{+ZUTslYjB&k-)70W!#}6A`jUi2E z`AMN$_uiw3)aK))!%de&lkV^9grvs9*>l4d7Q;+)12dMq9zV=`_RM&%zCa{=C3%F2 z_nbWJjvwzywb;lFVxy}hLM42}lKL$R3}G+J+owNU2hM-_lr<;(o%&Z z?93rdoGDb}SB${K)i2-n#ed&0nG>1BOZ7^SFi}aVkLUTxWHR61ntjK~|3|gP@28)$ zJ<_iIsdS>!8{=+@Q`X|WeBrHq?ywa`LVGJh=-yz)3*mdK=JO**_$CbRcM)rwMbhi^ zW*3N;sxDmb`HLzUR-fYyKF6EkdE3H^_x^bU>A=~0jTu~qEd_qbBcq*wyz_5oB`@R2 zn2H&FBQ2tZpMR+nvqIwbSl13*uS~d&xlM;!5UUsbhZ*pXbYj$tXa!$sATj!2T#rfL81jbK~pocN1Nkly&6E=u<-#n9{&NbN#JqXxN(2_5LkI2j}RF= z{OZDmk&>21OHIvb^sPE0H`m?vE{=i8y9cFVVPO!xpvv;ZUW6XUim(`Tg?LsY_Js;l@%>3v`!KS@l{azRcvz7U5gJxR zm)S&yMA2bOYa=<&lR{bCC0Ot4-NEOfaByZXE=FxA0w>m34-T?4^*Vbk|Jb$?b<6 z$Y^7y81_W5OEQ?!anhKO}%{F6AytH-7eKG8q+{<2css671 z>_FEH&lS4v;`tbX{RQ&v^Ly4A*$RaN>Z*0wSOy|0jnZ0@hD8%Q`;T@UEEGr*67k-X zhs_NW)}PaCy-t5~aAR_z(Ky}mRXg{z^@)#ZFTZ2L4$W58sI%1b=Xmeiyw5!71CHs# zR7b|}p8JJ8)KX4=zPdFxl$~I->Hn@qQP=rEMDYYeeCCDg;T@5TOUB+qeia@z3^SAa z+WB~c2N91J((A}1GA=O)aKu539&y^e@~L-UYkxhdb+xY>Y5i2IS^k~evi%rwY_-mJ zc+oKC~!5J@K2m(vBAyi#J1sSN=1;^q|}O zLsjOl4_2=mSip5w6YuKJaqK69Bm|(^6n&s`{egD5`-?q9>q_r-Rf>ymo?H5dRly)W z*G=h7*8IQxu9 z`%1F*H7?W?H?4k%&!f~uy1cCZ_GM`n(FZcR(<3F1pZy=U-U6r!wQu{~7NC@ffV6-} zgVMc}?rxCo?hcibkVPX>BE9Ht5Tv^n-L>ehMSeH?`QCG$Iq#X-GtO*dK-XQ@|GIvc zUe9?yBb=&RpWJi%*X$re7xy8FcfK=^g5S``3EGvIbc>z$^xAmFj)|#GjAW~&czEB&5Tn6_uFCV?OlSzoi7Y<=)}04r-WV z6F&U~0a2#=8dAU}c3>FJ0*5n&G!l$&xQ(8a2G0I&2V_&Qut8VweO9JWuQ`?M=K2~` zt-fX`Qjgzc0cu~4bVHCfYb=@*jz%9-I(ek^C3?t*Z)+59zesQcPztadg12R40(XQn zg#qJHX4hLSG$+j2R<)N8x~_pe*BAJRF)%xq!Cbfh$NQD61l=t#y8{NX$3)cE!wjsf zN?!8M@!rgfKtG`G`j~#ja6X*pcoIdZM#+<>#{3-lz(>*=he}^Hq(<_oy_*{ds^9L5 z)@-Pc(VU*2n_YsdcS?5&Fks&sU%4HGcCZhb&cNhbUbMzhRc(C%Z;7=d;wTI#eJ^`f zA1$+u;c#eHy&aeHr1CI-$xoNBn&%~nCnGxB#-F%f+6EvRZ`F-RUM&J zvShUm&hf=q)ogXG_IU$UFWtQ1mF1PQ1hUG5{Moe*qXo6vQ%lH(&~|B;B4EYw*;sN^x!m4HiL6*VL?|ijgk}6E`qk^z7@$? z;+kP$@Z`T_yLfgl2RXAVoY)I`Fwrz*?hUV90b_5Mj%4_II%)>}2;hs%Sa1 zv_RyW%0bi}Bl1>BjMo>sqIqx~{=VM-!1d zBJfD6ewNnkJU`JTI(@ftg!I$GE0?A{gQS-%ZQa|Fx3* zOBz_f{vQmpJ^$apf*1BUGO7HvAWH-64Kdnzp!-=yPHug*6A6t5=xpF?ZUj9`;B(AD zdL1eky5SA{wdCaFA^YYmPaVA(=bwD21^`-bU>938kR!s!4=OuZURnaK@~0sy;FA3r zjER9TAiJ#aJSQhd`5|@mYiM<~o4)=p5nXWp{ke>#l5uusf8pujAq%pnz&-~A1c={l zL)TkHnjdKZLMe6h0*~_kRtv~kK>fPp^*Sr)@?S2YTtOg!sU`zN85Nk9II%jx^A{lG zQbD?g1eo30BB|fJ0ksA%uqa=xZFHGaVi4|nFb9YO$$Sg6jnI6PozQs1Axc;AIi!oR z%%Vl)IWciqJFwMD3%iHDnr!6WvE1 z%FCTxU4cvQ21G}&$oK)En@+68M8@U1_pn5yrl!BUADo9>%92x3PsDS}36xnD!kg?@ zf|B&Qc$(23o3>m>XZar0@S1f`v!x1l{J>`jWM8-_uqrylMVd$FAN}GGL_QIy#h6NV zay)2aD~C^6J=H7XZCIk&cdvRIm#Y0EGAb$Y`@mZ@S}owDjn&s2OPAmDwBMtKN9@i!)xA@Pg*<5{Go&HTT;m%*ISUf1bdcBjV zf+M{-p}XBjDbQFOzuzjs<I`=L3<8enk|9_zirHUw*T?}UfnYOSAW~2 zqzSxFfB#+^bL%WuF zRXM385W$n+okPS}?+r`5jo*@DQkt|2CY_Pj@%YEuv+R-hSx8T;^S2=Bh%x?U|i!hk1KwW*k+s4omh;zzt`Pf;3WeQ?Q>wxab zbeIQBcp#1r^3p}Xm3tqWfcQ2*p-_CLhc9?3WLY142R3`)IcWkbIW{&H43n>1O1566i-{)UJ|AMa#ffmLLGGO(7MzztddhZ)JYm_nN_8lf5^5 zEHL5?9Q&C->}8)VGYN}{!BuL!z1&s+XCSGebs2~k^6~Ncw;X`Zt0+Q#_mWo&pnT>K zxb+UfU!h?U2m^s6$xC#J5^P*>7k_5R4*XE0u8V4^XdtloT1#6~b66TEnS3r=;A!x* zXA}KPDT2Hq>zgYEvo&E9c)!afaqfad9&qE_2VFj45V50`Q*p|!c5{>RKE@Ue$o~M& z*;<|snrfw$vhs) z@|6*jbCvRxQ?gXkQe(EQm6T`v-I#T;A7MX*N@y)C*~{zklTv4belj4oI+V@^Pc>aW zpylxA;pqnkh%gs~t+&?>qn>|2weXw5U+8M{Fk68N?!LO02)u$vv)%UaadE+6>Q?{z zy|wz(d}|zqs_n|2@dq4Ufr8U)9Yah5`Y9TPW*T^?=ddbqD@->(yX)_rUb?v>D?(X< z1ijb?i~@gVhGr%fNo-5xnQambF8Fh!ZC1-4EvJz@SDda4W3CjdB`$DH@bBBAIJ@uOD1#akhkgBEV-ecpj)fdgr6en@Qn4>C@uhmWHIXz%BacZoHv-1dM05^%kogM9t>4gi-GFvXp zIhI$9a)br^7_MAB+;3y60oLjXc`Ayz`)PU z`12=V3qdHhyVBmpc>#PWRT<-DpK>&0R51l&S7+wLr@gRqq49-~4|8WMYLa|A> z-%(Rjzkh!SvWAiR&u{K~E`ew9-YE<6IvZ#huih(Qc7d$jz1J}|4ZOmE=C7oz{I|9Bc@VQX`VF|RF0ZT*qQ~rX za1Vn}9Y}wTSKH|+KL1nrA0EFyo4@ETsJmkYVPf{vgM-iicmca|(w-U^LDtLlsW)00j!#Vf9B_# zz%8gNEjjsm1q$&6DKB8y6ng_oHZmL6NF_;m$u7{;e~Z-6zW0S`nPkDjyTX(0@Y70n z>MfBUp+55u!p>5N*`0RP^RbcF;DbMXl98~x7&6n`d|*{{$)QYbn%DQxXd?vu(+F#H zoK%lu$otwv3QZ(exr$6xPoE-ksw1bq>=<4&DtU%m)emu}R?2%Eml#XVVvrxc^EEbn zC%kV*htb6(p z_{bcydMUS_S#0ODgo|39|7MRv9{t=w&QDTieiN6IDKcq-U|8k*t(0K|y{jOyX7{^z zp$}~4N~N-1VZ3#2XnbEWVbu&ZAa2`pLo!GB=A1x|KZnSh)ZDy$c*v!>Wyv^CFrnuR zopF?*E>_skVq1@FpY$--AFAm#=r}i^Uc#^4eVLpXXf?&WC(qldT7I2neRaUPD@>ml ztXdwLYlx$m=k%d+AR*uFJlD{pN~U@xXdtIoTi1PTe%k>RN>eBgnYQTt;U5yLta3Fa zjwu_=jy&or=(YUwK-En~#ARC=I)kdVw`XVWGd$E%{`-{L9~tuOj3&P}Id6GGYk151 z$uR>|L!5spT4U<{@8mf!M>`y;>SUPI%ll?sg^+T&D=mO0!XlbDyzVYV7HWPzDpub{ zD30GYq=(hFu)bvK;kganq(5~7v(X=kyHLD-?0CESYq}&+Vk&r%yQZ8}b4%J8-dnzbRuEtg3r@1R#7#W6<*Pc>!by zfN@cv1Yg$^g zWo*Fjs%rN8i zaan18yff{4Wep%EoJ^Nh9>=DA_pZsKiklU)8ZfRzY;1fZy#(A13kx2XEfvNpusz>1 zQ{H`$cvcA^$rBD)>mJ;NP2W;+gdC@PrEjQ#p@+$>zFnKlD; z!1T*g$1+v1FVoxcaEpx&I_(A_8CAxsi?N*(MiK|3ndI5)f@EutrP5V2f~re5(VCiv zm{?6FDJ-w3bWY4kHRmZyE7popj{gxh8?^Lk?cXVa7;YcuwuekylIS=o@5(dH66WCR zD9EA&^N%iF;F7vEZIoOSpI;X$ZZ#V0L0$Mhjkab8A;@7fHyQ)p_33MMTj2Vy^(o)f zw?Sr`!w#F9AMslYw}_YdJIvUtOW&h!=myn)4q4V%q`rZxHcnSoacaW0{V0pi?p?*a zV%^-Zc)=k5lJo8RE8Ms`ayIX}Vwo#)`oudG_>suk9z<=+wa$_&?I-?3TB)<&$Z`&B z4l8!IW~N|U9$ql0QqHTDJ~~csQ{7};Z*<*~i}?|@y<-#yA-_q!+3CQIfFRt11OXk3{3oC#{g!(T7A%0S01g$nr=EZ}Cy2$p1DPxE$Ubp!bGrwB1cUgW z-`)YJpu4{afV@xtlHst6K3E7)B|zrdm% zhpD39#%5+^eFA_lz(}~cPp{fWTX-HTQhrQLO$C-B?HYRnkYITIEj+x92$Uu%f;|Tu z)D(XNGmplio0}nh;69;QsKxOz3fd(7D_9pSeE6@AkDgKhcYrVW62au37}y|zx&8h! zqu=t7ot29V8x4&cbgAF(cCI@c2t?-xp)}h|eSSjYj8*VmjDgnVRIt;qf7t~&Byg<| z)tdyZ7+=@HMMF&Gr@d{54!Gjz)jCpFYkbfc#xVqi(;p4Z0OG(9Y!s1f92^|<^gZL_ zRe%Rz_?Xb=9mx8E>ptKYoPkkYg-LiO$sc?}&j5Y!e$XIGq)YgRa2cehLQC(r8UIr+ z9A;J!`L_pgXJ=<;N5?I@hmS%XKmh@5!i11`_$y#ENpH@|&EO`xMoXZVVCmzCFCjO9 zUB8Lzo&HgEBz10Z3M~WZ_FWWPQ)!7OC~kzLzQ1}61+f=tVoAB)b`A= zIQ}g%>b=;HHPbgHLI3lrn)T+iE#G46;`Eyhs;^F&;c?TWy+gvSAJ8ps>+Jy9rjqY{ z>hoMHuB6x9qci&xnKJmqQtLzl&WyjsYbqH2EV@?~90wi&{o49bUx87N=G%lSncQ)N zy8meS-CiCVUF7iybIb1yLG?xoGQS-1- zbliV$V?$kTZY{2aQ{qL>=M%Oo*ai(nZ><^yEL~>~vwL-C_PwhEVE!SN7Zh+0k4rCQ z-=gv3=$4+wf|a-)fugwTW)0ZY5&_D-RsHI8B$eeKLAayXvXg)gdFk}0zqWcek`qkh znOK6^ByMjSActdA<1_Sbx0{4kP<*||RaaYL3CMJ{{ODb-T-#o!?QlWu%IzL4=HSbs zkg2Qk%lDf7yisF5<9YHOwpQHh3ODc7Q!CvHXB`Gt#!-pn4mZnl^bZW+9+KX{`_aU* z&%CT6?RF_{ztf0tCcZcvc$a3DBBx%>k31`3=r=`j{#-wu{!mTenTE7)ZO4+P+~G9V zD(ESMFjr|+<3hFet@-C>e4SjOq%b5`>3%o{%+{;QIrtM^;dtZwBaNK>WfWU=0d<-R zbV2*!QD_owso*rE6d6(LF@^*&8|*1h3^Mh zwEBh$4`=7*EPO$PlyP*ThefyHqKgU&WV}RvGufv-1%NYhaj*me?ZCzi+JLbh1A@WR zRv=i90lNpl>j1zfB^xC;`_2lh=U*^@g%7(AhJY+303i^D{2U$zLBcK2i23s6V}Z9e zBbkx_cn120L;vi~R9BalQUIDwGB7Ad)aJf6cn$h(p7Xt{n@kga$NC2|736=poi`%K z(S?Jq?Sb4-Ir)qNBtYT|$09xdX5M=eW33 zQ1foOdpQw|%nwgbZvY+zM6c{Y-SpotD3d*Z{y`i>2=(ph9>_$4Zx)Q|d7aUo zeaDH>VQS^DpO53J_p3fv8uAIZU%HeE=)F)gG*D6uU{KF8K~S$}b*`HPnC0752b^3U z?F{R;KNKX*n8r$l_|#vmsjM99x3>hiZF3NGDqbJB0WPI!@Ab_f@SsXaO;h~Up2N6F){g`Ebl6>BmQSFq~q^Q{gl zd29{hayF5aUL~sr_-9qFBJ*z52X!lr;BYhy815OYMT6D|uo&>g!I* zWcv*ZuA-A$`loXy97q}$ZbhD=aPNwhX&NT3MgijqXRgXI@$d6lP5cG;Ua*^P%cbwh z)neqZb@#5J8wq6Ud=^PD!S}#VpAT6hz8yj(@bPZv68=l^e_LC_{7K8CQk$MP z0v%Z%a&rP!DXXksr2_2reHuBxxQW-W4NdM#EIBZif|R~anX#m!BWoZy=;oUJAVMf8 zD2`$$r>B^hm~k7bA(Nm^1H!fikr%W$VEdV#ooxU@9vWRgsL-`w1$0DkHiOizsE7z)==t27 zPJq-`Er2f`{XGT)Eh10~Dd6euuG8ol=Tw-JV+NGL{;0d%>V+Vh>Gb-8HU$kb+$bPk zR+|qSf@pl#>r#3&;|l{U2Hq_YeXo2WBs2AxNSnDC(OQfLR!jBmacI%+Ad0sz!W)LI-i>`G-LVxCq!@ z@ooRKwtj75)@vdG!-zFhOrn5SvC`iZh|M2^N!jnXxH$ffz$ZYfm*7DGHHcyW;qtD2 zY^2hZkd*h2Kj9K9O6{|aiI+?CGOD$(*YYOo%ajO!9rz)1x)!=kK2tzgwz`_YH}}bO zuOzX;cBcKpDzS%4xbWh(4tY>3jqP4qcb1G@_3E9;z)#@`-+?n|zsvD=!h`mP;`KcT z?5^`~iW%x;Y~)-{OHINF!q@&8cDfC&b8NJ}6YVEzkGKZ;;w!IUWn`sRi)}V$0z!Tv zgFReVLACK{3K3yQsR`beN%fOm2=WwV@(DD=IAUhbX z7dQ{+iR8Qs-KuLl_sF5z#}-(y2tquwtL&5I*s9Gwjr?TAl1rWeN8mCyj&>f4b~42A z>A{AO%cBC`eRaEDRf7X8jbk0=Cgt?&DNPAU5zt+BzM|WjMl6TO*TeZsdc=e~FH79}1UMOX!0UK(rNLWZQOBXPvNO zKPemVm&GtHEpCG@n3fS_7vVYVxOpHDb>*vwb&RXG>DhoR$^ToGNg|{8?ffz~L-opA zuV}FL*`wk($1{et=jJ3~AXm}xF)I4X{(q@|g6ufVA3jEs!DJj8WJ1DwnF%sLXj_W~g3as>8|GTBH(>Ko@HFK)+G32>PQ z#~SnC0}priu|jRPUz@^5vr62c4h75xQgmfjI|wcTUm}U!;w$L~K&SzNep+m70Nn;H zJv}I2w*?YGIuwfCrqza83i>~eThUqW*YXVT@(w>Qj~1t6U|;~!`m`g%2ffll;J5~< zYrqc;DdTBwG|VHlH}C?eRv@~a@6M>tN4>M;>IGkI-A~~W5nx|A1REUv!V`2%%-y;A^W#AXi@ed(hmRipCmt)!E0h5Mh5aop zA0t-AMic>hN=7EUu~8s927*u53PL}IbpT^$G`YCA2uNd(wnIW*|4MJ8#KAbcuSz%Z zJlpBE2ko`4pu98u?WG);Zh}DtxDAz-lzebtuM0a?=!E=(4Vcq+%~U#1^616!)?p3T zt=4f#uxGy=;bU3qkkU_lu7#b~`!`J*PFrDcNdKJQnojItxeh~9v#o&Xk}fo@_-(FT zb?TOYMToWnk*%xsm*J^-C)ObtA~}PAmETYCW__Q$$yr=q&Nrw>dO%tq-o6gQ+?U&LbAFV zWbN923}$t5YV54!Vv8 z)ON*p+;e(&0vF6k8}bB+ebOC|3kNkn6%Ab)#to>aIn^n_y(bXI{8)%wI~G{Nj$E9r zdySaa#7G*WSGP%TK-$Rp8~S=`9=ISxYdxmY)TXIi&ujDQA;*z^NAKBo4#~G$K{d^O z2vXuoGYG0aMz&SQsKbQSS3G+;PizS|G`^(*em ztuoJE-~Ow{s=Y8ZZCeZ7Wrx1Ze1VN!Q>6d-xcNMF*D#^t)8#8 z3ub(8(jp@drp(eno310!szG-*kHhlg{>s5W31~Hq2d(HD;tvgg2nhC%SAyO({6cYw ziM7D%2FBWxGc*6D!@2Cpxb0s*23KmbagYx81W*ky+9NP~c=9R-Fu(7)G9VS9#i-YG zue5#p@&sIz0d=4?G42RZL_sUULVv&PLwm4gcmdKm7!KaM?e=DCf$W{i>(Vng$O2{s zKvVQ!v{Dqq*^!nJb_-8qyAIZ0LelJy1~ebphTO+;u8#=ZK7Kr^=`q z7|@r&2&58#`z8Z?O?pDF(V)2%UWR-;t=)SZYo^(b8njL4Rnta9JdXjXPj8Lv>&g351$O-IUti(D! z(e_i^ZF=fkFjqRkXg9Wrr&QP7nvgu=-PY5LF{= zv&I>-iGUOeninb)gyL!Cx@s9S>DXdkh2NE9=BV_X<}c${_B0_`q~QuF9Tx(lmWbfS zGdpy}V`ejUq+_qT8S8m_UJ=`))a|lO)qL4OmsBoWyMqu6xYzFC&y--lQ={wQ$7?n3 zs&tD-i(RKq9PR{W9*vC?!+e{WTy)0mFqL|XbJcg(;jU8$-HXb4?Z^fmpPEhl2EE0JBkpz$xnM>sv-} z)`2yn22Ovl?%p(Z;XF^~b1MRIK5+g<6P$zR^`BkPpBvZ*hr?T2mv7D&iot0P@)>~c z3}$8Mi4~2cV3oz_g8uK3kr5CB0SY=Gj=YY|;sob8H+PLVluTaWbWGc>5o|~d$g9ub zvEaW5R0tp(f~9T_!tgff2nn!hOaLcMKyWa4tuq3Sct6*|^`bxay$=@XYyb)?_S+FS z1VB0K7w>oIzb?2Iyhkf6M!{eJ)j;raBjYLV+hlHshgAmeSX}(z1TbQ@iZp<-K~23jW7izG3nmpo*6aZMe+CAI zvW(xs-3LuIcM7n0K&fzdi-L0G-q3e`d;(ays?hXTPw6!JK3%$68wH~XoTk(tTo`0*{ zg82O%KDZG?e(ES7s=ZbSR|@fEeBu#!zSy{x7s$%+B$YT;CG?Xpt2$$_I(-8(dHs?w zVE+c$vDnQ`?fDi2j&@ooX@n2=$yofm${}_5me+coZH`{4Yk3lREt^Q;`Jm1^X(gM6 z&zPNL?=WApyprBcq;f6%_fJynW>dGz!?Q4y0?Z3RHJ3#9-%ZC`aRg%nNw75nh@e&Z zooHt-)D7FGgL%H7va|dQ@is+m#&9erhDBh0N#VPiZLy}FN8R?iR^vp(B)R81$;NH( zMk(d$bFZKu9NKqFC3Bsu@DtoEq%ASceuT@Q%5L*zlNiE8m5<~`zhD9MF)s;iSP4`& zTQ~Z29G>j2s3aU3$X8Dve}p#Xd&8}ZGlOEdd_8!L{2I16w>!#HxSD2dc4KVJ&a`}& zu0%MjleBkJ7y9_4Di~y3(g=@qI!VFqFk-#fLi*9N7xVOEb77^I_3Wzxe7&Axi1RTz zzVw3YBxFT=?PvOBans~6Uop#h`>B?5i$}V4PF^Qz(=q=^*rlOeTap@Is&(ych-oj; z$@^y|OmdB!J2}tJa_G-6X(#wH!+T|cjs3rjt?d7f0!RPiERD2seUsKpOiTnF6KJHs zlSZV~6+{Mtq~Ia|dhIbaK?RPA${0Y3;$UFSf}jMr+ui`Z5Xf$m)pq2@Xp9b7FQVe( z!Ge2Bp7@Z5hX;(ckC-VUHzbXX-xO?^07cBc-W$ov?kqk7kTXM-0o9R&mtaf)yhF({ zz~N(Vz5yINbl}<{^5Mfj?B?Q9w?M2ne#0N|RYEQYD3rn+VgN&^gYk74+^~g(SPgfV zbF^!y-@X-M=?fF?dhz1LtZbzC$l_~j9^TPm@SMlNmVD09eqx&2cKYriKkyiZ-{3&C zi40Xwra^a7;l@jkUzu?dfqOuNoC9P;K(C<)i--t9QFxLD2%9+Yt_vhGD?6K#lTH=P zCF<;#zG^^q7wHUp3#gp{n+6O7TD!aN%OwC&C-a&7Dje8uF~ep= zKy%72lW2`ZK$!0xP+~d7YE&qW`Pqa`M6+O7gS;^VG*0V>O zX)BjlWW=3ymH9bDDgta~!xA z90Sj!+7dmk#3PpXfM3^ZcH+*J!T(f}4Z5Z9dP}2eVa&wZj+@Wtf2y7aU?x^oro#ch zc2m(5-4XF%;C*`I4TJ- zh&M?<*W0UG9+qEk9J94Z3rqkF*YOgk$-PaMuC}V5gfP}0m?R6GRKNT$?`$v%IIZVj zEU`8^T&UX*Qt3Qw%gU&zs7Su^rDEaWP)&Um{U`MEd}T)JV-Y1KrNv)y<}z=Bj!-{C z*a25;1l_upx|ojk3k7ETitGvPAyvpU8tsH94LMM~i{C5JzK}}CpN)F){U55=7?p|5 zH(!KgSy+FnY;+ZNVK{&@`6TnDWg~h3&l=$Aw&%CmMq7R^s9^??uy)~q_KYvivduCW z-#=H4Bm`}2Y%B}(76?HlMRArul_cOgf!D?fs{z11f{|AySn>0vM!^!4hLOYR z!Uz9|)s#K^KH(=?qk$_k^N=&XB6eqWLxsbwonxj2b({>!OZMY5!)|0X>uOh=Y0{DY zomQTx*KDC!-vU?~QhA^DhEsz3ZVZv7e(DEz8?rid+$Jz7?jHhr{yQ}Ub zGdpL<8otw}($Tu?{KP}}aPL+jb6C?X!G8YOBpl+r39&fb@*yL5G|HwbN2V>Vt5#*r zQY})mdI_>+J=%9#^Yqyb{guDb5{!)Lt~C6G1JZNSTGoEIbkFGfWz{Jw#MvU|Nxcm` zK3_762+Wz;RmzcZOg~Y%zHslP!%4c1OH;ZMQoRvOO1trf|55EGz8<@v;*q7fp49I< zOs|Iv*`2lvp1Rk^LEVz)-2Se8I<#Cp?0UQ4&cASHxOq0g;C#FGB%!a&hCj6eX)yid z)Trs_wX%0o_s367a*kTJ(#IhS)yVZf1;@zkYn5t3x>HoW5g(y@L&h#XBI_V?Qz*^(rmyouQ`bosZR7!~-a#=QLH1rg3`ib)b|+qq>}>6Z!X z|KA1TXuRBT0z7WuD0%*}%SKHNU%c_;Vk4+A9_w)Mq|v;j|AvWoGA<=KcYmX?cEQ#{}~Bz-1)#T{KT-Iu|tt7kcvaff|}@K&>t}6 z0;9KH;D@=7yaU!c@V$oB{)3U80Qh;IEn>|)x#@-T^y0R-_C1-7-u7(p5JPps!|C4nx^G`p284v2V_lm5o!obI zVw!j2+?eoY|E{^&d@Np~;#&QytiWg#JDqy)P$wI-ixj<8ax#G$CSpOxM+Kz(&`m zu!BQm2Rp+ZRM~2%Zzxo^NU--;2GNc_eR8ew`GvkcPr{jBtW{ih*La@dd9neC@M6>W z_aFgHKY6L{h*r39;G|iv;r~e_Pqzi7(+XuKA0^)k${nP(vwZ3aN#hZ;-0@H??_3h^ zE9N)Cvl;KZd4i6ev({`4@HKTX{0spY`+`#Cnp^_jl$AeR#*Je^oas!}m0=8bou*H4 z?nrF#@2ME+&9ri1gd(oM7%`Q9s$)p8ZGuj^vPh*Z7ukEaLcXKf&yUibnDbp)ECY*) zTt09lE}s4F{W0u%eoqH5(=A;p(A zfg0eql#Y@n;oE0;-aC*ZM&6_6EXhHNqn6QMs!ocB@}?a$Cu%3+k-4&5 zW8UhOXVF?din~}UH}M_KLl&bMg=$)TPZwV0uIni%H>)c*srTNDMK&fDpWo)G-6`v( zs#8JpxlqW9Eh^8S_LBE&*_G?z-OZVt?s{+x3j277`5eZ0dUaKXl2$bc>JQeCJ2o}` z8b`t`g5f`Gn)`SYuTM9x&r!V~(`&!e1Kl{1YL2RwvP)|;r{DevlhLe?bUb7I;CHS% zeSymUw~yqS-gV|~DY7vq1CLKq%fK~ViiJ@|^~okkUUnw?h1swDw~Sqn^*<)oA^yLo z&3~P*86JqjtJ8BYIbW*YSt(?m+0eq8ILDO&d+`6-nL7?nwT&QwKa9}vRgRpImMTV5tNyZ`9%UROSQSvEeNmY2l zCVrHXlZtipv(Uaql9&5?#7mpRu553aI2K+-OEV~x<^|$3n+A8Ty)n%j6N*#%MH%zV z+qOgR1p4fPhl98BUB;hW(Vv^g+QWJD8;EcQ-{I7Gil||p(x>#inxb!DT`G8KInl?e zLh;Wq?x3aVUX5AC8G&ngo%N{fZ3LgRAM*lJop*IwZ&L8jqJyKk@HLY< z@%Zv*IonDgJpUtDWrytc$EOoE0Ykkl;!~l!MH;UQh$W#yUX0&b!~}VH!)?QH<-{d& zVvGFZce$QyF9X!|*mt%E5!cj09s#wwl|5s)p-gps1{>ck(?qS7N*NR|@H_n8!ZlA! zaC3VRppM!(UU63&?IDq6+oD?cL}kmfRwzMv@Ko>|#Fj5(3aNPX|FW1m@=*0n-j@8;Gz!2;3qL#e@EIo8F3hQ3)^)x;dTUsLy; zZYn9b=-r(Bribt1d>^o!)!hE5m50me%1`QeW(}TBTwMv6Ivmk$r}g+%9X`o#w0Wy% z!GB>K^Myvtwukq5UV&Msx?SUW_W(`WhUd~>0|(i+#^a=9cW1xS^tNyhDn{36c8dkp zoNti2zAWeH1r}~dMTUL)xdxc?X@P~)=2{b%;49Jzb4Rfh#gO8YE9Cp_eAAQx)g8}E zI`MtCU{TJ*AJ+qsL(`A!8s-NP?WyXijtBV>59*)%ba~pkQysAgg2>td#5;yPJaf7F z4vYQ<^}eATwv3V;S@?RtUWE6S9#o?dG^?+oI~^T=_hUnxkt>WsEuVh=q2;^sA72;Q zbMw2;n3Jxnv;!!jK`QwVVfNeJ> z4HX~aP}m&@tVIRC&^S^bmKdt->KnP+lVJBl>PxwiO8zi!Vn4vdA zn{CVx(c6Tt*98qaaTcCG^WWwEddJNGW|hQgMy!IK4%jRg3HBzYYi5X-kx}9uUB-x) zrlxDu)Mmye2)5o@$K#hCN=HJHZ)vLEF$vIcFflL?%h!FwW#q+jf%Qa@n&h+ys~0&ARU)r~RQ-9YE?E1~JVQ;uo`ut_iVvU7Sfho$a6nSM`_>vM{r!-!HK#x``SGi-cv0L6(I9^oF@9)JY)JL(qC{vX%*V~hC zZ%q1F6m{G8EKQ`b%Zq3hNVe_{#||d0k~!IL28Qg{lbEj%sp{w~FgH}4+%ea?FlKe~ zU0>w;Bw`ajU6>*9KW3}qRPOQRH4n+TslYwnPgdL#lT<*;<&;vs_5@2{t?PpnPi&k` z(P;cM3`>JUq8#bd+%pwGxMS4A^CZ5S`=X`fQ>R}Pnz~StNX;{4V@F1hAv8KFoe5Ec;rXYMf~YA#xIdG%&M?^Wf7HPWh(29#BPf4 z&&V=Tu&+~v!tSwBV9&mt_$9GBqoCpgQFzm02X%OwnfXm9IO0Xi<8C9b9_j8o4odOU zr1e|d8F7} zhp^1pX%bvix^z71%xZ;a)%-)DD*a)ql-QS|DB&1fj^``Etcxn7;?A;B>0FRg)? z&__8(PdTwNB?M($KbIMqMRhH#R+~C$(QzD-P=&=+j$W+4t#_a3h%uuhIEOg!c-5JO zXj^jrZnBQJU=AbR*{vx##;tu`U3$tRk}F=LK8j^~N7h3#Aq-_(8RcrU;s)EVeiS7M zSCn-qA%mf^OS5BBhc0*&CCncstg#q+PUfH{d#1E*CA?cDBGdS5{fe&B=Fo(fnPtvm zMcHRCuJSsspr1#$I!4TAccV4;3CYkfZEXev9e?SEK*7`#tDWA1&SImm%XpI09}7yTb|8fa5!y_C5EdG85Cc5>h*w7n<1)Up8??_t_&3f1A_hcL75@i%?+d-(^&ceX|XEzWq$E-p^G!bm9dIC@aPF^hv5FN_ME9Mn|i3#I+_{)lLC2 zjG|gZk6dH0y4oeVPGF)1a+6NS!=hWqn3k?ff?8Ng*ETPjor@#n#i(0bS@&w@8(6Z; zg@SaPj+XY4yl&m%Z?!d(+~kVZg4nNp#>^Q3wVNHS%dB@c>hWli$q6_yNl8DV(hjY@ z@Z$WKb7_s*vYEIe_cD863XeLunUdvXP709aB>No@so(PHVaptf+r;aqkKMkay17l* zCA6n}#HaZXWZ-VL7})+4>-=i&7;@sph8Wm+&cAu*w2_llR|nIQQ+3);AqXq*E^2F{ z2_?Oh9zLLvzP{E85%8lU#8|{(ir_%C(SbZKDx&-JIa@PRoE{sb{5W*~>p8 zhwz{ilSudPbL&W_$`p#Ys=(NVYwH_-zr0$S%%f(y+q^BTElFW|8>G|eyM(*KPP9c9 zHLc!XcU&TI98kE%v2_Xu%b1>~`E;DAw)d$zQp@IyLuaX1U^T}r>AE@6TR1Jh>>}`| zm2l`ya}LbLFMBUFGSn(6zG^Gyqt1}-)I2#N z!2*)yOt~3$r_kac>L&+51oeJ9dIIgd0>Q{DE}dq=v!HD^EOi^~+4UXZFZb;GGA=F0A==DHQm=%lxUV zXHnc-HY;~0oZY$?*>iOrXDm`oq&SlBn_FdW->)lno=C}5Tf)P5hCpfMmtT#PmrxJ* zqdw>b`QMHU3qU&pLs0Oz=n1L2{N4Fd?d)kYTRRYzcUN(j+G+VsM>qIe9>Ww2cQ9{6NHX4Zl6GtiBfIyU}!;Led*bhZ4&d>Pw?Voj%vOUJjSpX}fN{9e^q zdM$D;xYhjar2OafcBu6ui7~#PLJ7&WU-rj*bwP+3=@lEF;skSy*p>H{-9`4^p~=-5ISXFO z;RI_^DudTSw^EcmKGeHvHHtu*)Hi$VOJ^@RTHeWM8vX6d{g;=IsuNL`R+^{o{}03N z`5lQy){U)Cpg+YLl@LA2)4Z2>N<7ndk?9(OBX>VMl|oIZgn9z5$XUP00<`jilqD~3 zJ4BV|5&;{gz{3hqnZ#AHErt|2zs}tH5=jra8ZGk@qQ5)Ifi2xajx-$nB#?6yYv+L~ z{I8Ta`7>t?AgDDV6ry5pl93mai$1!zyJfu9-l z_yGnGs_#z_YFu`Mrabu7^|YkF1^6mKi>^J05R(#Ro+E;KZw8ij|IXWkA7Hy*X1o`c zu*h@%q149_4A>r8{`ghZssGMuo2K|OLie0wzmY+BQQAis%f!l$$7GGgxF z?tq^IH91(O&EGweVg$jrv-;QW0!#Opv}S9@uU(Jd`S{M#w`uQ1OnUU&%IJ{&EQb8dQ%U&D_Y$&PMu>?B>%$O+Si{e-mA_7~KBh?%dl#V$gzxi4fwJmeGR zE{to_ZdEQ3kT~uOk-P(hG^uwLIH;s=PZFY0QyCpz&uA@0d z^tiV&o8TC`yLQe?OJnreID8T1N9S_V&3bp`JcY||Oe?5HNuO!{W)n9HDxkav8C2zN zKek53tlp{YeA`NUCNMyC*(ohH+V%+bC+%(R1^8~&SeKFX;;H#Z$831mf~re7G(CG) z(o+JH0oP7(f76PIZoT7#2h{{GRFF4g5ZxfNyR^{Yzj~B}2CrVG+H=Oe6g_r?J3;Zn z+{@hCV%pD|HP#my*02N>U+;83B*q>8=Gmy!hE9zgO%)>O}>ig&xY*p4GGOV1F zbsKxf=mk*Xb_FwK5~k8W;m7aumK#>noge%ky1p_h%eIM@ZjkOq8tLu^LAs?&LL?L< zq`M_l8tIZoC8QffN)$wpmJk66r8)C_-*?tJf6iL(57)aCp69-=Yi7^P-g~ws?`#>A zT}4h3kbLyXw&*;1fn!;gUG9+6;3%bCHS;K7V^4^&*hrYPvP4y@giz^jy0bC{a*a{I zSoL`y4^{<}k{+7y%U{wBZsphk!zNpjt@{5eUp~8+!1*`Gf7CaJc-}`bDnFg;IMcNB z-*Kb!?7nsBh1;ol9FY!1*0JG8h^$_Kmiix`5U%#Uk)mI(x!?ai>*apUU4Iz$J>ame zvx8mrpZP?Sf5sna0R6YJHV^NF$lkSQ&kumb*6cJW9QvBmHL2>eg1XEQ( z^tP=<-)D98HzBd@H2EW4*NgENuSee>sy^uiPv9H3MspU_pisi>%jtjb!7~#~W!vfjj&D`$ zXAG50tXs$2wKu&+mgOTqoqZEU(QfXxBW3;Xs%rk=)5>@ZgHNB&(V)@I+S;F+vGyY} zm3*4nUA|A|rl!*Kx)wOzyP*3H2DbxXL&ha1i~3p(UcC=)0kA}#dn*^IZ3VW?Yyg3) zxTwg}Wo$^!Wm;f0O1z(8NAW!7!%8Eh&WMP<{T=)zKCw$Ni)S}$zl1hCljH5v);)46 z6=&Z%c52bgOF!Bcbx|}AHtV!K#7Rnj^(*tOTQlj#_aL**6Pdu#cR?-rl&dmZ>}KD- zaw?jKP|dSFYJIvr>Z4)MIg~+$8K~!Im^LpYTiJ0?Jb!ap@VD{#!#fvme|DwKoH{k` z;2M~`eqDAhy`NsSlWUr9)_m5#ML&Dw_)daz(P^*a?q*qa8^7b1fj`0IgT3tUz1ZKtXJ(GL7jqZ_rVott}RYYYTl3)1@> zCkZPJM-k5+l-7u_n?(_sRpGgOefB55=H^+?8Bs0wEbr1mh~aVkQJCIMdCNgdpje$` zv&EhnDQdD51={1%y&HUrYD#Tc4#sdJ4A?t+KMR+FmvC#x#6C5}a7k9)kc=txmj3{F z*fWSS{6VTvl_^FN+$jpsr`3!a<=5kKUsu8Y1{q~!Ql_3yWy46vHF)+fH~`Eb4d2dW zdS74PatAGVBo_Z&@Ku1_EUX-IzTrX-iy^ig`$B1hn%yxHY=YsrEB<}vru^$dl{G4g z5HF`14i!?6o28xn3oFX#G!m+@s63dloB(&g;kK=A>@;q(#1CD*b>z`s70OlJuYY0u zJQ>$%By?KFF) z@_|=!Vgvm{?WZLl`)gkDi=V$cA6++J*i5%P3YIhYy24|;{L{LuTB_6a-&uu_Y&af4 zRzk-3;(=w`&x?&Jm}*98{_TG6g}0;d;*%MXZWK7E4_%2fq>0 zmFg7z;&g$)M3cKDy7W0n_N?b9@#|mmNZ${l|5J2;&CAW`zYU%;a7yv+(ePTPDpg-; z$G-XQ*>o{C<)%N5))0k9;I*suE?$1Br4qR)4wW|#a}`y2@LQ?<9cE_5Y{j*=r(xYY z8&R4oVc%&z)QJV>h9tgU@&^u6>JjOPkdt>&jnDi3qpSRJ{gcd1KApozSQ~}vi}MW% z2fo0|W}iN?VoHXJ1jzDcBq1Yuu$RCL=2jzST$&I5GMusQ!f}|7MYUg=%1+vochs&P&0K>#WIvw4{ zXaD*suX<$9e_=`wb`A6zSvxLXFn`ZYxmhzt7tDcQ}`#NW`>nhJ5$Z_TJW} zwm$9iy_)|-GwZ(4z8d0gaTHQKeCFspKKcy%RL*chDJthY&i!TsdFt&R9pAaTRp(BZ z8XW7bi;be2@{S2>r~7qRs~>{5&p$mh2^3>|?mMcK;U`-p7POYW8fMj*F){Ex(9Zk$ zFWYAphnBV;;x5a@=Zrdd1ilwxa%}jno0ut$^uNWQ2=>Bkc1U<_uV8yZbyIrgqrHVBDzGdkl*aR?qL4j?Hl;2 z7*?7QdUM@3U0^bOQ2nO+jaB!K-RtS~S9F=IYO4OmKp}S;k$Q7t+q!c8sb0(iuKaVH zSpGi^*I*7i=(`fR-%Ax@82o4T#GpL)SAu3I&1T+Eh{@^?7mKTb5TD2U`EN4lYuTgy zZe6ynSg@UXXy`}Ffw^Q~?bEgmg%O+}jynE>0TOEpJcOZvn=QpZ>YrWvH;O~6W|5|Wor zX5F=hdeTNZR_2uN9XL=@k;~H=+$DZ^evnX0agYi+7e)bYTVA>Yn9qX9g?$m2dRiPC zPmj7+h|qv8RmfY$_tm`K204bmGMVq&60IXSxi88Q8`&HRkA&6NYMDm@%}hv!ihVg5 zoz+U+*|*6$LWsU2>Q&r?XSV{248*P&T3ePsTqo?$`!Bsq=zL@1X>@5~X~K72oA*b~ zg!i1+`q;8jrT_vYar zZIAwOcJ->E8=1LhCl*h5PsRuSg=Hf0>Ulw<_a8Zj+8gV&cfa-`9_3+Lba-8HSzbTi za+hl?pB=x&)v?nR-r?8dyHd2D!7avTu-0|l7H~9Ac5`dY`mbf{?gwR!A6?hZt8oKP zeGn2}(bfd7$;Q&~%7?1WXoSv|+$AZRBxcnB2a>yTV?>k%s>;fEwBnxKp~!NV2dJ_e z;A8~hJXhFd`u5#4VOWz2bPhOIJ=VFBK3vJn@mr7M_rTDIUeG}u7?Rk}Gx)5Nh3?AG zH_3`M04*9;ogx-U!hr;^1;L^m4+ZnZ$^MWz8_Mz3rrgapP*wv~gq%YcoB%O^R{as& z*ixBQK<6b4W~5+=#x;iF-Cs4DlNc4HB3)S1uYKF`*7d9hXH_)aIp{q$#dyE?Z5(Ix6zm=Jg~#nZt+$iLUec=R4#bm5 z$b)Ig(6{g41cR_r0jn6{?I)EAD-2SU3qSoLc+VZ)v=wtIg}|oK+*-+JtTl&lz|eWv zU*%dgR@ts_vWPz$zlAj?_#gsZy0~1r z+y3}$egHD;*@TK~twdP+P2xJznmW6WtdH$$%tL;bj7x@!qY#!cIqtDoAx^Qt*}BuZ zRo>ixd26j(AN)pqfA47Bh+u^tJk_TZ(v~*3LGpThVYGwU`s|!>>XD2<+s*9eEbAxv zWs=DqJVM=0_UAd$q}x6>__LKyI@h`^q=Ghf_{4av|262>o!45Q@MV1L{FQO_&qC7m z^5j}gMy4B%N2`9zL-9O6w|{58EyF3iR_&Pu?(o755z28;u|{SHubi%26XC2XgRCy$ z99}59PJTP+=DCflIZSF7geIhqt}pgCKW5Ycv%Do1G;vp8gcBF()8Vt+9Y(~WYFK5+ z39FQkwO(==H9Cw?MiJ>fh4r?a24!O)o`*NNO-W6ieaBpMbqxG3rzo`IlI}JnzEw>F z5_>b4)tWZgq2rP((_hYmEavb2QWr>X!Got1q3{PIK2vL?_#W89jMP|3imyoTqQLDX}tjC!(X$v@Bs?`stQo$xFN%BteCa z(47v?ZRyY(VAa}aVswXne*QVGSP75f&i#IW08Z|Qxf1STx0H9I0NxeMgMrYeRP+>f zkluhIz(7wi+st!^hi4Cq$IY0|!}Jw{W`amr7yX*3)UPBq!S*YozE?~-8tIZ4?!p_D zZ~v2h$p4}FAyWj3X)m+~9M1b_Kh)lOIO}2MbKNc1vptY={n~G}RdGGwlW*V6sa)FQ zlb>{NVZd zAMVNQB}u^VL7)96eIX-+$A2a~+YRz57uN!44k%QXROE2sD%WFN(WgYVrAWzM|U9u&Yn-#CM_=gV4K5jl=d<|~-S1f)t z4HR{%L<_Uv#N%H26C50!uyXKl1P~(=^pH>eW@ur=3M%AGVVAVCsV#V?A;(i{RDuqm z$vOpX1R^gvjnf8ND1LP#cm*iaci(Dt5NOpmXA>cVL!}e}_*8;u@8N;J1`V>G-zf+V zj@Czx{tPjYa4FS;UXnfEZ}nu>dVjhU*Ajl9afL3^R=Lh=ZEjuX7)Qgz_;_mYV}u>D zC)+jfw{0uHXB7_VZ}5vM>~x+gLi+-msmY=K(Cs(k-+FtQuUi&rcokLjlas+5DfsU< zr@LvlSNbQvu6bsHNjby|cI{ksJ!w>AlAG@X-|A^Z-A=(B9Ri}Z)gpMLcYAhApj;jN z1I{s@h2*WR@Lan$%zEyy{FXJ-^_V3>BTrjF-ar>1Du$&4{vkyk1CM#TpBIp`L4aMN z;mywS5$%V9sp%y~eTu35eZSD=OT@$Y^E?D>rbej<=M>z>k?St%>-jsjzRAAr9s1_< zH~J$Y{&a@+=?Jj%M#$OydmVYrGQ|)sS@RQHIg#yRVFGg~X@uEm>K>-ZtPl3~&D>%g zmODd$`2c&+DdW4fn*}O6{bvk*uV+=yx-qf z4y%1ZOScDF98P_+&cHL+iLy$fsYbf+{t-=&IY@9IZc`Hx{TUOQSRczWNM=Ql(TkMh z;LTylDA|yl=mUf_rx9@_1v9(*pzZ-U;=TVP2%667R-o>6B^Z5mM+%g_3tn433emax z{qQ{A7u1wL8vbG3>`vG4kXFosBG0;pTH24F=5>1X)Q-V34Lx&O98F$xDFz{;2z z0Fsm8CXms9dz;q z)IHOVH`iBij<%M%XY2_cEcdgYLfz0bhmo(k7~ zhp?%>CBf!j!&~)}A_wbraQ+Lqz61nM>Z5~y%%C#g4#r=#hLyzTkHL$8bffk(E>~JN zfAo9X$~itEroexrR|t>iU-YQ&Zt(BCmR9JM=!akSTJ}k`Pl#EFxA6C?jlJOf4Ef#j zD0ZvjW+jF}zwBNd-f1OTOk`zbDvm~+XkKkF;YTt)E80yzNCs7B;9g?&?DspcF(Qdt z-CiY}$QDTm@Si@83V}lexkh~I^+T52&y^@< z_Cn4@Y@$E!;izaDO565EdURdAifx01OmO^az^~;GQxE&!nF2O@_{`?IgdYi*uj<4s z-1Hqm-;~Z}#HFZ)@*p`C#9dN`vQHm^jUsrHs~ys!!`7xp;5!B4aw*@vOL)SbiE#L? zAP|9?407al(}Zje7)C&@^USOd@j2Z}OK2)ZI3nVZAuLo6>#tVssd0R}AmcK02AhVl z1Tt>bV89~YVVmFx4Y0~p`#oquABQsD1(oPZJ0M`uNAtJUQwrcn0{i@D%dc-u?3*ia ze_&5hGZ?uNkP~#ntaj)7BxqNyVEmHG@NiQ36V%Nm;t@rsfUm^WQ}H!06e}U0F`oe` z_sRNj&(zReb8x20WaJ;B-oc}nZh`&8wE1m6xO5A;L1-RNwc=9SO{u6m)w?RD^dT;& z=Hhcj1;^J*sr~l8)pa9nnUDH>T0~&QSq*j=pe13hyMSt=3CrwlfI`A8Mx|7Z3#$Jj zZS?WZ0?(W~U_iGgwO~Jtia;5DG5?ODag9$a#XmqX;lJB36i>>j55-#=t0pX`B#r~u zJGf$)->}9yPgijjH7@1*S#p)MQKWn2!j^cY7df80iS{(UI-l3EB_=&6`=c}c8r@wm=cev z^BVAbgDDY657qNO^TB`)^5|wia5O!ayCbnlc<;ZB4NM@vV-s$Lz($Y`I_}Dss0vi8kH#^R%MK1a z<3ojTux-c9lquqRT4>e4*8O9S*glNvB{m*!jDCTr?}NNvX{#G){m#`0jO{?GTEj+= zLM!oj_eV!gGDmNZojV%9WpIVtfWRSi4x?Fs-@RvLY)COs*=;?{gfw(FPx4*oU-Yka z);Aj&)_}`Jn3++8>`HOSxZ1&r3Qqt$9mm3_#A&878kSN2#1gS=IY+;*Z!zajh^MG{ zD#rP6AB;6Y=K4=jNeLd3La9{`z;uN7DC{|$Q`_mh)z%eBD?`1#p)1c9Kx4&hkY`IdB^jeLC+4?M-oUm6=yVvoU#pPo#ve2 zskbbjE-Al!N4xB5a03QIgvS65-hqvPVKTHs8MAo9#~xl8;U;`Xm&!Jj+Uok@xt*WQ zOG^RmrWpNX%HCeTOhHU9K}B5T1Mt{W+OpKJ)i@0$a7u8e(IyEHN4Vp=vH%f1w%$ zCW=CmEYp$>!zp-Ff`Go!8X>LNp`CsV0C=I5CFlsp8g|v1RGSJA48lDkzni0uH4$a7#y?TyWV$9Oyg)&xPBvMAW;JyC{EUZjG;A0{*P`?U>$0T1(9|o>Gv1@ zeNk#^&i^2s3eu_w4E-ATHn60b!icQELVo};4|~1w!KeEm?}Vj8VgP?26@bS$dTGCuGT8SOwyf*LSxBvCQK%RNm{f}SyT(f{B4pz?##%Qj2qz>V%W`cx zJClKF2nZVB_5g40Ijw}EUT_n$dA-Mytlco6PeNv5?2wD!&25*^w=jgQM5+A3!fzp; zLUs~k;!RO=2axe$vUWz)fnnh4jtb*Bq)abH9tgMr=Z#e6Z=F-20G=k8tC~l%;hb2A%?UDp$-G=&4n% zpnb0OfG!G%UV%m3FAqPJ7ThjA_uYI@1Plt0U=valhjz9ww(T*=e8nUnQEC4}&!@iu zQULIS=z8WfJOu-fnTmZl$cV}o?D@UCx9p9< zRpjFfP6Nom+lr~5A3!q&@FcZtptzKY*xFlS_Rlz!ip9!mYG5Q@1~~CNq9zx+zdXf@ zpgXtT;x(?4Xt))|hIH5p#C=L_>#!2U{Br%t#^^h{0UU8gPpC-2ZZtkweHyUHqNj?A z3IZmpr!vE#E1CtY6c^J3-r&^K@pH7kxo){Gx%b~rHvlvOH>4FnG0WKLka#srP$`lB zKo}YNrjqU|F6X08KqYt^8usv1(%-FE02(QO9UK4!Ownx>UqK{n&ikg951hFh=EkN4 z_pKj^Wt&z^NZIJXPE=#5E3isA#jZ9NWG?2Ts<|g<_t2vSASBNonfOI`?;{xI*0=0? zK4-eMuCY?PLbuwmI5FW#r1j`Wd)6G@`!?dVHv#9zF1MK|6Jld0waBOFM9@3{qN}`z zKv_XQnTK=;UWcBc_qq%;>3x)uNa|g`RDn5Tl49gt3^gh{$@qK6m~@o?^beQAUBxBG zGX;vFLwT-k2ee3NgBy1R2d%C^?oEQdoJe!qo56iVvA-AJK@Xe(8D49I+YR)<$C7EF zF$($SL`Xk001MWT(GU|KBFy6%WND*wrJ;8Ilq>NB!uqr0t*Ne%5KANh9Lu7jA^>@L zfFHp|Vr#6NINygl)d6h+a?=EyEa=`!_*08P zyKn7z2Hg02-~owmKK?qNAPw*VzpWy{T~&oT=#nB`o5ndaXpRFW{sRj&a^Pcv(|rMa zmB_JY^CoORl>0GmN_iN7TS`@FUQ-+CmrVa}497iumslJVIfjg#?*x$ynxiP)v&Kn` zFrqX!!@ln#S33__ex~w~^Jt+bTTYg+Nzj=fY;>NE4bP;_GfHs5-sse}bO-dnRAD7z05s@IQVAloG(o@Kf5+sP{ z1dYl&)}6Tlh%Ob_g8x#*?oOHPfL8|0xKc_e*-dE~x759W#}r%jJR52X`g}a-aNtY; zWb~SM_>}!+VxaZICS#R;DbC~G5O695GtPCS7&%vP^dXl>)p(uS3O65KWkDnvoQg^VE{8*Y2XC?5eP+vEs(W>mT?&~y_@S>$|o^q@&prZAR3H+6ylvkujh{X zzqP%C_1u4`eR722r!Q6rXKe3OOao45zV>{6Yg6g&<0(`xC zHGOADIneX*0=MKtW;O1Jj09?S4~BpU%WL0f@l0s1@&egD#FXqx=b;pqR&x zc4+QL3k5O7CMW+CHthd+Svmn<0$? zAnhgehcy2MFdoZoEok^LN|xcibgp^sE3g3Z(V6u*UgH<=OsYVe!<4`$k@teE2M7YJ zqDUip(d>%(6g7x&6E2WyOpWQDg#|8z>i36V;r$1+$Y914D6+_7$PFSYn)e0iXj_H? zx}_BEO_=cC<5JIA@nTX7piJ^51}!wMg@;pO=xOP;kixnCgDRE$qDF1>Yr;izLh@Kc0W^pYr{CR&ADL<{}4rb^S>V9jx@C;*p<#StF7=+;) zdo0*^p%|Ch{4c;Vd0)1oBW7evI9;bchZ9=lR2~3=n`z9 zLfJ9p5Lfm<9QCcL*iR~>su$2z0*=!5W>sJ}t`vu^?0h8DY0aTTJ}NB~Xf_ zQHBPz#KqM%*zrd$L)t4@cM+sR*1yXsZ*6Cu&R+VG8V$+2&OxZ%1OWsp6_M?x)_?r9>Sh?vPI<4Jc@jKV~(8{>@(aOL8oyle3jq z_A$e6--rFL_Kx9~CENxJRV-?Wo(dp%13QXiS0dzE8d;}6NmZ6(;lVBV50PHIOa*{( zeTcF~h@5Sz*X=%o+8l^mn+4|qp3f@gZ}CS0$z?5FrC1eu`7>_!njWnbXxs;XWvqtU zcoa@(Q#rZkRfs8BK;g1mBezA4YS??{Ah3+Z|2!>BF6iVgw|r_qTS}O!JRUw;X>_Rm zOVW{xnATFZlk+$Muh7r{uGED`IZ59_K7Lz;oif$= z)IDZlA}UT^%P^j%;N{*ZX1K=iLb!o4WwR$P?RHTZph>3zOypcuYeT~q(Xt`GX1At> zIW&JPcvj*Hvla6Ox0$~$8s->u*G^!tgkrA$LKtUJ^wdtQa)dS zql8upy=!`)_Cpa^hWOSCY=A7-1|=bwIf z4#*db&fzGbf3*?VB{$t}*5j{0v^w%_oKhQG)xSC4oCsMc+7LM<7PY=ZJ|I%+=@Rll z9~m{k4l7i{h+~?xr1H_DM|&C;H+(F?X@s&(y5kq%QdF+n+hY?Bq$r$W)&#MY?Ij6FDld#OJ;7 zypGkmkO{^wuXl3saoz>2sIREuQ8$autzzM1*V7+2lBo<_hBac7R=#*zGO6ixm1JK0 zEBPvb4 z-O3$G!ztRjeCcmv!&8=#>;I)topvo=)k9EU3wf{*J9@5%gVioRe4G2!A3fqbEgsf$ zx5R;hpGG)|chNt+$l|+?FR-|1D_!vNiBk34M~7uXXWn>kHHCs~`EFzsMt7?gZ+bM* z8fbd}x6@YY*L&ei;)b7M)qB6%^JJU8B^BZD z-(gCQk1xUyOQ0U+nEtrpO=DxGA$5wH$r$nd=>;JPUaUIG*xgDZCp3(f0r!{~3{xb{ zd@0{#>A@E`vGJ0mA{Y8-C|@)UP`}70W^=@@+No=Fh*N6ZFC=wJx`qL3Oiav2i{LQY z$*64k7JT|{WL(T-6oIr@nv+D}(z{5IKB1!)}!KA9xfUHO~9-lF$R`&`wRvX=U-;Xk9&TjYoQ5~ z5bjHkDNBIONASZt0C$)juH|V2(hwg9EGidnN#@dA%fMsKqRZ zv!58K6c~^#A7s_PRwC#3*6m(@&vLX=eE8#nw0G)1EUHtAC{DQab*%d^FSuF6QO}7opCh-SV%ew= z86yeV$;T7Wm=KdWhQyCnsMaXhDyOB)P>$~^l@GioqFU+ryv-}m#yns_o$YlMu_(wE z5wGg`!QXRdhSPxrGc`5)AtR$8QnS47n!Y$;5+W?AKjf_%*7S4TQl!6*RnAXr;Lk=W zQxa0de=*LeAW!0+vaLBq8Ee2_`{Dv}f*dQGW&?lpKEBUNFLzzy?Z+1hoFZzY6wY z_yF!9J&7|x=mSvZ4iyCK`eQ-E1bgXMct-GzPeYm+DPmuIjuYA;YFU|fdS~M|e}*jA z8i0qRohx2wOxIXK+oFpRwRXLTK^Z&4*K?;r{|JFh(KmtZP!c@_s-q{?{loUrWrLx1 zw1+Lq^pwWo<}}Yb%>T-Z88_yP47Mx$%UHnDqvB95k1dqJ(`t5Y753zDr1BqvHF`*p1VbcMr$rpx^LNN}pRZl%u1$vX9n?oqzZ5q%p@QVGCJb%(9!6ug86n50w|Am_heAOo zGsXjF!Ky;+?jc$>VS&g)VW!&-Tqr~dxBR_yNf_%a>!e>GWy|MxnZUBc#PrCFN<8M5 z5&t1{(o;VCnE9VU_bL-m#;j~}FIzr~8$zQ2F?-cxH3ggjUGBRhdN=i(8VKwaGp6Ad&sY?YNB_3*>Q+6@!wnoQef2eHqI?TZWouVYAu~PLGzSNry8PwsGv6{Ai8M z*q$K`$xJtnNYlr5dN;^G+=ttj+s<>>s#w}kUj6n=d%D_#0*V1atKl0j%5a9!B?n0qw#HLe<)i-0tPs^7ePo?Cb-&znMfc*!` z@Rs4+e21}J*VCvS1Z*0tKHo z@S*|9f1+UbY2@~34{=~inxcp;2MOhg4=!?SjjZTFBhyP(cCBpay;cES%X!vDS&*i( z&A_;v<8^Nc2(B;`O@M|KQ0$VZ4IfaYOoiBeoF}MZST`b}!E-7BL5d?#E2>QDl5;6_ z>F$O(Qwl(T7x)Q1ALU?2U{5$Ykv)vf?KaRY?_EachT@$NQ}T1XgwiSKS4}gl0WGxh zC8$O_>i$kOqwoO+3os2Li^y^Q%BQ?56q`FJ3&_J2dKExbfqw)07=pjpQ#GJ?d8Xrc z5C-W^e*7fSgjgp&A$Jo9gOo8rt$V^JraI3^bR)jPU;^6O`!IB=yR(f)Pg|DpisAhZ zbSWV2t0h5ci*n$EK_pU7p(`NTqTC?A07DiL_(&l8p!sPfpNJGDi6ZDdC6QdQ!;5m# z_9T`j7y0uj$DFZ$B$!j_v1rJrJD^TJEMMXs+teL?$S7d=@UqZKpn%O!lH5mbnPl$x zKwcl4G}XAMDsHCzB@*=%&OJ53DkdEqfl0I}?!mZ{Jy&KWEk*_hXvIbw0PR4Beo;$$5Xeop8M+uLy*whR5b#LAD}wx$9%F}Wi`Vb$39 z>p}0Mzw&=?e+m8{cA*W3NIAE5YrbaS7(81Gu}42;NA$F4DMpvY27mHiKgf*08b8&1 zK8T+YImmn7PiXH0VFxA&FjxWFoEhBM5s!ryqM+F3JS7n83cl80=&Hvn%$5!7r3<9yzs4Qr2l5{^iDAH6384vo zvVboKVdh@dlosK95`!H5NACBwgYb&uzhd5^FTv`dROB(w+LN!jZiqk*|J;0yhCK&M z<3L?e1_NeF_c&BeG}8-Mk!iPM=Aoyj2P`RwX%lcx`#<5fW%}v2Ar@K-1i|PzWmTCi zvk2IMnZ3WC4y7od;3r5zpC%C8wqdwB7+Y0NT+kWdkBo1C(F|YYUp^ zRK-*geHtS2i^xyYkt2FblhFxd*(sBs(gBAE^x1GVB%snyr^l?vz zWsE1q*NZ5Ka}FFr24Uxv`1`02o+*xSI2c!(_LKmbY8krAhUY$5 z7_hb!=ph=fcv@i#VoXek7*(`$(x~ovsW(!H4_;)k1tF9!-7%!*J+3g(x;ZhAzo)fK zhbE$~9)Hzv&*qX3d!L*(>Bi$Ju(<9YRrQE77v!I`+xB6sGj#zW`cQW|GG&!KWD>VD zle)OkZBKNFri@QFNm%hV9!EaP6Q=MOoZ&b(tV9v@k@Rn{+~((%_2xuU#B7SH)RLhwX<>i6@`VeJ<><(Z?hr8jf95P zZ9cZE;NwIZE&A&d5_SW&mMX3woNggImS{GUvn5ttd^(@LD1R;dGAx`f%kUmJZFmjR zU!!aOJCv*FZsxdc~xI| zRS~FhmNP^sXEd>HKY2ro_El;uJoG?`h@wqiRaKz8k1;kE#{`;W8BiHOFV~e^-4P9` zL7y@$?BxniY`IiBW*JK%5tSm(;XMxj&zi!C>OWzL9&Gf@a(`!v3cEO~bqf_2mh^>* z$~y65RAJr*lVt^RT~kXr_k83*x>l}QC4A^;084SN9h~$(q?ovNALx2Cl+_niw{#zy4{7Wk0$>4 zah}OIbkV-m57)7ASx(1bW2wfw@z}55elFmX3ZH?%O%ea^EGZ?O3YBR@BZ40XAO5bt zHLLAO1IZTvVW)fTO31AX#9VY0pBBJ+gNW3C>#25P`oa9-!w zF7;gk{*sv=NDfL6tKo77vBsv_U{v7dSY{N@aq|H!x;MdYkH7M*>c(6FFQUgV>|O7e zok{Rt&3SiEYk#2w!Bd0vMB?FJ;`-^@|B;%b%$+oZeGWYeOYd>0IA&n>Ma8Qz9AikD z@Z=0Oc5VhV26Jzc9g?^eU48r7JIWXc9t{k^3}G4#sp;zCpUGw1cq|S+Z!k~95M{4`Xc7;Bz@;0V2&SaG6b zh*%gV$O)NctvXcB))RyiH`o8V5F54G>r^)KsD1)EBk7)y;Fq7EO z+3|k8QzJ=_j3Ho;e997fK1vM_BO7!=R2;T~fv29@#M*kUTNNwAl>S=}54)>r4Z${R zJEE`+7g{XqryC2C3Yarhi(!VNNRsiWp*2~I(FD~d(IR{jm8mu*>mn?w(gnEQj3?+^ zNv$bMSYz^4B^dt8gVA<*Pv&(|g>wi~Qdb>j^ib@L$|C4`iUx*hXF0|biUB{YSH9rg zbtfm2dhz-B$(Wn#EQY^1ilk&2cu#o>RO9!*eqlKw(FC*eul!U` zsi>y9<1PCN)YYS34!((r3#GC5+5bVOCvnfzkmnj0O;b^9Kj_-?#ob`7#|USMjvX^Q z?n@CJ`W(j0tg1E`Ne7(GG{EVx!)fhr!t3~ZFnYG{+y;jRy8)mf9KxYbgGIeg zz=G(6Ww}2ySi=_;6&2xE&lW0SqKGOsK9@bOfaib)O#XMUluA-{i%dZkoD)D%o z!?H~{Q1_r=h`!H`105fxREmP9Hadr<#N14%9RL9_~bhrfB~#6m;)LX!y}JfKvdKXO+QN`nGm%W-H^a zLn)+$M91jP%xaKxB#}60%%@t zfT0Cg&Vd*97pUtjbI}r7;bjqKeVMxOSxJ$BmL1M1d%BFuqskbQ>)cPQNW?Q1S%eAP*{ty*?L}{?Ij|aiO|Bj$GWb#7)9#X%<251Vgb3%X)y%hA1j+j_mXcoZ?R%$9r ziHz%B1_lePVRU@bU`AK~Uv`YbEj9AdutvmBkmA_dcH@-3WwVc93qOjy7wF#NY?n|u z3!KhOPG&2`VD#?YLA5G)$3Q z`aLr2Oz@RN2B;>qHL+0128AO|$O&+;}FiC4PC z8qru`dH_tqVv2H{a5#k6Otu5jbo@5mfW4>$famK2!rnnoX9bddEQiorHL)wP2jKK7 zSomK-5zrZWSHoah$jM7`Jzeb8$67~sOQ#Tvo_5YKo577*htmXouHQlc?LQz1!Xln=xy-eC;@3CZ zIw8F$hzrar&ggCS%1*ALQr67~nTP{nTSHL1x!$MZNFXq00C4&NV zd2v8GbGfHaK!0=YjwSelLys9s*-4UTgl`Lif$H}I7`lq2Edpr7AW^k}W|wlN-$)78 zbJx1|!%>(#usQ*>qUEP1f8dG;DbN#T;p#it{>%=Mqn|(0pU^&DNA|1)s0wW{itWJ7 zna=Y}-Wz@o{{xyj0L0Q6@xy^$ZPN$g_R&%&oy*E=$bi7xPKhJB0ZAn8IOO=x7DB7A z&gU6T7BL4yb7TP=c(z(!bsmA4VQz0D^w3mGRb8O^Ap_FE_1pKl$ops7} zAVeY-CKi~c2nS>aO%$UxR1!s!YPKicgZ4qpWHd1wh(Hfo-Co2>#Ok+DtMtZXvF?uL z%Sa`l6%#q_{7guSRy8dK*3+@$C}T8PgBQeb*{frN-?7lpl)Je+`VV?*SX}{CNm(`U zC3$GDGC33b_G}v8+M2ngq=wO?59Bt^*p3S~NZFi#20$Mb|Ipt573Qy38x263f~X$? z%<_9OeF71{jI+xVBBCT$YM?W<;h~QlOJPDi`e=Hr$Rf&fDdG;r+P642R+Xvh9gwjL z;hGX-H;@gUftU;WTVv9oQO>^Vl_u8flMobagys}plKvR=LbxJsXw!2<075zn_Zyzj zwhgb($=tF?%dYC7=E0_{irp3!XP5?xy;S@|^hQe4=4ywxWh^40Omk_Oc`lBX2G7xF zB3;!r>nJHwbp^={z%FAN!09dH*zf!;I9am#_|g?)|eu7$9K*!VuaSj6Q=a=tRsKSlzy1AIJ%;$mPM-f z=@pSv|J(;(zRy*xT$(6oHrDlqjK#QAT&$?_4~yTP4qU&c}9Fv2CzeG5AdikxvPGkseTGecpv6S zgD6crr;?}^6^cO#i)ajL0@d}*o49`{M+2UuD{O0wTo_Y>{4K zx1`|zjs{M$=d!#ICraSlT6>!KcM)GC!S_g(u+P3$PLJ8g^j5B(uwH*=ySFZmV0L}U z=aYYUZUevmM+5}!f~hp&{{xZMt@?EJs1*MXX>T45_4>z+4+ew5jD76JzQoMfmo)ZW zNRlM`mWs$$YHVZddm(A8Q7T)d-JT>N94!i|P^Tzbr2O8W&iA>Vzkk=`n)Anz$b9bm zy}p(=qi;Ij{1!wBZtZDu3j*+Lnw^V4TZ4Tm0Ojn_|3XdSeLaHU1ULL3K#l#Pp&^08 z^Kaz(S(MUH9B>=}m7hj-S2L&m0bB2JUeVRBppaoc;a9m1$nouPP%TRZGBI*c;VHT47(a%9~PavB;~sl8!~zknWo@Hgs*gBdztzp$#Cvxm@8g`L*ZWl$lKatk|h(A zM6JXaD(5WH?sBXGo6SPHmW)TQL~x260w%;W?@&(O)6bSR2cRNbBBcBTfUfrCW-AZT|SnX$V}nB=f4JeIQ*^dHqgWk#QY6p z^)iIpTF1rm>K}Ci3cs22Zhx6av%YT^%A*-ODB+=<{dOsj`{Mx>R~D;LR@ZX>iI8qz zNe$|yXBzhdnDXjBrDr0;vqt9)Nn`I= zO6SK;@KxcmD!2z@6!Z%)Jh?!}y@h%Qs1{+cCgZvcy^&XEq@Vw>&7&!~z}3Us%aJsV zht$8J(8EwX|AdJZeqS}F@SBZHlI7+A6|IJJUpZzde`(qz3_;U@p0JBerX~;R72u-z zW3~W$F9!o|fhK5k($?^Jyd@@wr?JFsO;I2es%usuAk?-JFv6k4njdiO02{G$^EIHq zTT`l5a>RwIc~(p3IsMzA025RzR;I|Yr^&#orOD&+a{vX}LoEatclrQ(2G?aTmb6&t zQ^Z|~x{Eyu2L>)UrV-!kee^F<4Re^ zI!eE}MDLK-yhS+Eu|x&$e{mnLNGVAd1rSW=%9P$1B)?H|ivEf9={ZlyYQ$OZ1CNJ&T z!{lK+`}6I_eLLuwzX6%48d{|s#sX%)i~vL|~YH4Gb+fP-Z_ zm?ls=2;-F%yDAgI+B4hsowgT2HNz+)uX1$PF3?e$ zQAHY^H&6sf>{9<>=G^mnbaWK(sm01^!3TU#FT#EwI~H{|8dDeB?{N z#>xiN0g-nRB3U|e%7T`TzksLMb=p2DNI?9X=oAOQV9f5odbf3~teb;ZTy`3o*HC+4 zIXOX)4v;4qN8~~){uF&4#%yj!L=FKYU~h2Wi$N1ud_f|CLQEo|EJjaMbr)C2b>(FJ zg96boN#y=Yls@X;1r_lPsJP}ugn~a5WBInr3tl2U?|Lq3Q zn|;I8^bbAnn`pVwGVel;%;1t=p2K+BSDPfZL4#2wepL+f^7k|lR z!<}WuqhN~ZtmYmpRg)ge((|+)-Z-z0%2$<@uxNU>&74DTv9-b)5+h$uW_>xXA+ePHHZ6s?x;bhWg$=CLkko1h5AZKK&rBc3AK6koCt z)a~XsvOF_eXPbF~JiY)7x6DkVH%LGJ=IroCUVK?veepfcI)f^35+0XW`6FY$+l7DD`%vWB{XSqd0Kg+@2Xgr z-X^dSPXnDdhj~UUpSF-L>LZJlH#lz?t#rjCN_3SCj~~N#e+9ND!+KWf$-WcJoiH4p zJwt;_@aNl$BZ8uZ58{+t9;7P{GZ~YN5}(8+#UAY@JF0D+(<1xMG$>OPh(W_;g`sI; z2aO=MAGDn6;W5erZ52*gXe_qZ~pLP_pvOma?(H zsh+q@u)x`BqfdY~fUZH8hsPXVav`Yq^c8ptkIy72)+Ycs>F}x-n&akrL{KXRN2h*Bnqk$lSIjvTf zSYP~d>K<nb+nyDm>%ew0Q@g}HxT_B9|E`1Zm|E*hq8Ng95-33JHsb4Q%kGjiX{0*A#9(`*M1w6^WXUI%!%0y1x z>fsYybJqLwr>d?EDV$c@yd--o56P4*c5f9F< zHO+R>^|7@nAqt+C&}3>x3_#XteMUI*FHPj^xvQs+9&UM>`7_fbNIe!8{eb9qx;%=` zh`sk~z@*K@Q{vXxzT2_eLIwf!Ok!{EN~0`Qs8SU-!b6?+e9P8*1c9WLE9AM{`(JT6 zJ>mb{Qv76v{qdBiDduzUKy?_ff0}PWH^kJiI%kElgG9j=VmWCvhY8BE>bhMGghvg5 z%Uy_e&G(tOM&_e6SfBicPEtZIqU(8Nm(r~X=HPQc>DMN9dr(?94PU|>G_c|XDk-O|k%S`oyfe%?~ zW{%BMO+!vZT6=^ts#{-SkY(7~+LBe-)ks+64?VEyldSl8hIh}biNE#V?HXu=06T*1 ze}QP2S5*4>k>1~(b8cv!ohC=!P9#n;Ijkf%AcrDce_;*p&Vt1XgQ2DO{97d~=td}t z(i~suZ4}Sz3bf8nU2r&)*K%HInM)1SVSe=RX!%NoVv=9M;-|;f%9}R*rv8l22Gl;Q zp-bl9Z@fNvwlPzwazCrG_ZD3JQV!~21sJ^wz~7YXj!+!-|PQyS>Xii4bEcF zrWiX8E2IR$j}>N6%u>)qCHdi6Rr|M5xw4{ z5y~yYs=Q&(LA_G}crvxIdYHc;BYJgoBAv!@Ny)w>6grv;OD9fWCh+ob4gPjnFg|@; zDF0x2-|JI-p^mGZGACR>Wh;mF2`UA3_eNXK`fa;JP3EA-60X$`Et*O!q7kdJ2cm+1Rfe_9yx`Yy|eu1F!v2g5Q zntw}2qO@n2)NV6apG`{z6Hpb4mrMu^0`0w7V$%QO9IK5PIXRXsdwddtu6)%e z!0PVNoy7+0U##rEV@95|hCD2)ha2dbc@sL@q*+lew&YJhnFx`cDPslzV9Bk{w)!&q zJWSePsvs>dFHqz5P{|2Ow}B9s>k8`CP;^T26bVjFs{%^PdT*AQoS~d75@H4>&piSn z2wC-P;oI(>fHUNqgTp?)WWmW|n;p+OSi%q1tH6Lh6OX;P&aZjk-f)GDQ>;#DjNeY^@Og^O2c~EjG>u#{s>%4D+xA^= zNieK1P$BW8QldPIf*x{b@Dn?C{cET44z+JFLLTcudF}j)>mqA+S!NKEy)feM>n-I$%hg z!J?=%E@cz}tzM>C8IMM$&&q_Z}2C!^6Bf+Gb{;iO6;bNoa-v;e2tmEVV65( z_~eeIr6q~mUp^D#>5S9z>cFrVjF;=KnV;Otf4N*KCx=jO`ZfGbP%B6zu@7Go(pV88RnrKXRVB zv(NnXjaP}6fGdo?)LBJJqfY@&K-sRy@<4j8eSG7sbri-TjaCUgjr>ujXtE8oO@c~} zw(%&IF%7)bI@YYCVECshxkFx(D3taBAQM?4+crS)EP!PZ9O~CW27#zX#?pHXV6|+m z`i`B?@+K@-wt2S9!bBe~szr%a1cze9z10DUm9z$!-q;#LrS2~#1Y`G45P2RlNg+tCq@5rZw7Hb6%P<@( zJa({0xi!Yz1DKpc2>1}D8@-j85R|s- ze3bgwJM><~FV<5Hu(3|iNP|X#nCKg)N*Nx#Gz|QSj>oB>>kaZF7#k zp{G?UK^vz_EoDcAc@vF5c~>Z`5=JOt%di@ePD42vTJ2Rcy5>n*F~d@X_9`>FM;+DM z?Y4U%t7ZJPrMeyn)Q08+A$p}dG=igt#MQF`awioj=w5M+<9sTNYZzUei0`*&{!mc8 z-JebpzXH@}Y#-MEp@)^uZ?YFVNYyH9`88U&ZD23D+_SK4*fV*eh!RX!Nao17n zk~xvo17hR&1RVd*uoU47MD8|Umo)Kr{t%cwB?@CKLQYGf@8B1CPN~()>I}7<#sOva zI@bOJ^w4W~FWOYcIQ|h+ek%BCSdFd}We`>7DMV?u)KFd&UT&aiSg`f4p*<(^I z(*?y#T}2=5F)lLn4Sun63(c=!*wEHk=Ha1xLDOH`m=w5vR3jjK;X>wD-l`bC7|VWx z$N_H+IRoGAUy95E?+5q>n#ld%f@qZrloX*eT&I?Rj?i=WbY~zcPxoXjAg42ran0@m z01PaKVSVaB*1o6oDi(kyn6oeev1mREoyO<;TRvMhPA{!G91p00rUN^R6C>-O5A2Bm zE>os-3ug)y!oP6kUUf#vA69fN20PC5GC2kc=1vLz@m9KN){y-hlmH#x=R7gHB(O@f zwzVAu@Y&j9Sy|=X3Fc=Y>LBq0e$pSP57;vxG{6E(-O^yX*q7s9AXBHCAei6tJ9fy4 zB!jHkF&H+ThpY(u4!IqDmb#GvouCpyM3o|VQWyxpa5|>YOr2X`3_`;k#NJflTW3^U zQ#AW>Va`->rPY%Yv}>r+ZWAD1Y(pl)3rgz*g3?%;TABuM$6O3sf4f6>eXo z=iP&19I*Dvtg`&o;+H*Z0RYfw{lgy5=AQ;b+ay>)-_m4>EC|A!9TP2FdnnsM=htnd z>t6J@oMqbrdS|p6)dfEd^Ic^TGq;2bVdwW45PTI}lkck;zZqO%rIk57UjA0cfLsT| z6=cE<(=}bo#GNLq=!<4-GBFQ|y!33%*LvLZ0Qqh5B_J2ZKR~xn7G`Dna1ol)$XcEX ziqYJ6pk(J8?`W?-=0GQw!piI<#IJ(fraj)md}1PSX|RYu^Fqh5`Bm0+`~{RmZxKM6|>jguVxG*U=zt8GUd zO1pk6LPd=xIu%g({lh=` zmxnZi4Fbg|fs83_p8V95dz_V5Z@NAqTPc3)?tz7*4>W$+=L77Ya`(w}B`0c7k`{%0x<&P;~s)e3X*_ai0k!(>~%Y*XhTiR}!o9EB$NQ4T*0d0ttn35}dM5BmkMJw)q8K z-d(=u5?RmJ;+zRJC3)-j>n$riJ|AFuR`P?WM}yCvFwatU`bNYlsVZmXt=+~wvfC)p zA6rB{Pq+2%-0{0_F7u{kX1DRN<+_6&PL&atfWT13bGrC&r;c%5qomOC{9me!zqNID z(f`<1$v%-r6)}r9d698aD=l?iT1s@@PVLE82wUbZ^FA0@E+fTP%>0He%EOn(4qum)Cq!QOK;X+ENv{k(?|438*AA~IXrgvr*4bN{w`Q)IrEw9cfsp3-f}RO^W?J!)yI672 zvXUn8IIg{V!|Vb_{bjjCr~(F&p|XaTN!489Nhw8|69GDu6*INw?uM=rtkYFk>uBd! z+QMD1&>KMy%*&>i^2tn@=rr5aP5!Buujt9J8{@$zUN8H!E^DFojkP)ExHJCg5*=TT zr*F#~_C#oji-U_o*r9PLRv7`iL25+eXTFcsvFiQt8H&^wLD(bf#VrU^j_15kUnU5vnss?C?lVR zBUJvwM%%Dm5VR2-&AcFv2!t?4Z~Aprn<;WKfG4^rL`+xyGcF(5t7z+eV;0?5_u~Y& zGdklpt*`z@FJp>aOeDf+uSA&DXX zqH-Tflc_3IeYuxqeF@|1Pj7hWiM1C>77$kujZQjhd3i7&KXHZ_7*3S;pB!aZvQ;PJ zN{MR=OX~HF)jZgs=;@)V4x(~t1v|A$NzG|Rbrq|lvNl8w+n{h4__2H8`R#daq{+5T zdoBew@JKzBmCG8$OxVVA)ZaGhvEPqwcdn~Y<0YjS6=j^AW^JG)K1C0N_+g$eWLXgZrx`rOLiyAne z(98Y=uw&mK^ulm4Z6mFXW^g{fDv`K}EI;_$ss~}>%k_iHY^f7^M8JZR``}AmB`sh? zauX)mfRh0MYVuEr*lLC;OEv2Jdwo*vMNhx&%M^ri?oQ|!@#A$sx`Pzf<8#J)4sdP4 zx}DB1GjhdJK1<3drVN$_#o1=eYSG%KNw7_q91Ff1wxI&HBe$WUA8h8=L_khbO)u{r z*LNc$YqB66cd?I~oyJoQT3Pu7ZRjIu%GAzOBfR-uG;ntnz1OIl* zcYwSxGl3#^8yJ4M786e}5eue-nI&y`aJuZe80-oaX3jmYtYImlpGBhIG8Dbzs~}ir zeiX~6pJsLu7#bDz4p|k==m@LV`$x8Jx5N-Spa&)a&698baT!^@=OLq!EkZ&-F9E0x>CP@)P>}n8^*iX)GdQ9*HGqvf8P3|<<%Pk z++jz3FYTy06~$vDz9Vr{YHujj8ggIn^9?p{X_(alpKf{U*rtV%sE;Q-uSQ3?I_v(P zmT&)a3F7@!9gr^tw=y2J(^@l^#Y%0aN6I1uuWGV-MmkqQvy+7@_o`$lU(dF3EE%N} zU(StZtNw(R;C_N#NO&;2l=JSszUzSd_&K>jZL})7ts$%H$7&!(2;?^p^|1Ap=inWW z_B@>sQ|h|JnpEiB%bt>$;zR$cSDr7*lA?LlDQB}oAWO`NrO(o!!Pu;`b>A!%=PP*Y z>6wi#CFeh&Pis@%>_6qoBtLE%x(Y+NYw^LNU-JqDblPN~lu&Ba2 zX$3@+C#a6Cg@X2ru4cMI)yZWw3mI~>u4#Lm#bR(^upRG`RqM_=}G>?M!nC6_qf zg##b>#Ad?c%+#A36@UYp+bOpRsfjIPs&mo2zB(>uWAc!OZ#pAWNr*MPM4z^!bUw9X zygyVFGg+LRPgY_cVY)5os;0!VTGYB<5>=WoPK*0V=ivg(xKrAF7?eY+h<~L8=?JDC z&HG}X!6bK1)_z*r^hDW@;-59PSK;`OhJgQTsL<5?XH8N1-NJrEk_sz@$Fm5A4S5DC z@K^XNdW3;)JzP4&fH3pNh!~Y%f*7OvJ81Rh_Kt$wUdp8F`y+T+X{XB1uw=JFjf4b* zc(Hs(787LpWecgA0ma%-zd1l3=ykWSU+lPNKWC8-B!_caN~pM7Sd zrf@;@g^XWIjt>FQV&WT)r_sCU36@_#m$2rfr)SwBi)2B8CW1=w4e#z_(SW3#dDcujNLw%#1yfqY zhNX6J0wPhnbe|L5a@j_G82gRi9zUp%O;%$BCu* zeRSU8J`RH}Zl#<@xeHf$v6P< zi6Sqit5c1vcYuF-F`v+(rtE5K|#0dBYUNM8GYY9Y#?IE{c;*-Qws`b$1E zxe^NZpCZKfr&H#&Ti*_)-Gz5v266P;>>3`FuD6z48#9mL=y423IQEO`tV`Cj!> zx{>nS=FZmNzu&BvLhED>H*yGxkKq%BcjM7T<=9lU1*WmR-BD_x&qT3uo^Z&-g+>#? zEo~!7OFQZ7ktm^LEFX)-L5(C<-W29sb>hNM+f$LJ_ zQSF8zY|lX>l%zrxHr=g*Xd+}*a7sn3*HplNLz zgpwzs)@=I|M{~-Oacq7Hq#Cz0X^)kl(8TAn6@#!{i{ zmSY$cXV%3G!vOM?th$`W%+b!ZEZ${vB~yKGmvCsFS0sTeJbLv_dU5Vh=0Wj<2LTNlQ$l94Y%#R#IO&VwQP}cB)gbB z%h(>O*I8(&*J3=u!`w3q#Pc4PBR(RH7K*x#HyXxc_|c_q9^Y87eM(>ryMh)}0p(Y9?@m(FpQ}DS z+0~&a$2(if{Ja6GG`Sc$do=zDUwMJ1Z*(tGGCs;Wzj|R&NzjPCj;I zG}tB4ENr8Kxo3Sy-4wl2SeUFbX?d6Nkcm&y#a&{IJ#^^}Y@%ykTw_&I65zhNX0T1Z7%R zhB3w3`!rG2O+d5yF^`%9O7^RoR!h7k2UAErGc7i`GPly*o+J5_TDTBeug4;@V8Q|w z-D^g28$+`cu#f)Z;$|n!IwgELxo6iA4Q_^^8f zP92$#77<5_iH4K_oT|eB$+8M`kC&_E>M^nf!#xn)6zW_nYepoK<@yL!l_Yv8-Q`c` z*I&QsbZn2q$!TfhSjS*aVu5X&-j{+b394>R4%x2B#{Gw^KwwO@u)RgZwD>wpU|l24 zmq@F6SZ`Zgm$GeGHA}d3Kx2XgMWwZzR@lQw9t(5ekXGc@WL6$@nR_E#7DcY@l{5{U zu#clWkJIs^wm)SlIXseFrj1kWLxo-AKqVxFW_zfGt$&YdplezSVB27W0973N4?m|) z1>YB3C}wh3njvA^{<6UzbvYOvonE<{1}^fy`dDHL(*pZkvU6)bI!a$}y~z#?IL1i7(Vye`Y|Jo+qwre?T;y=HB2kH2UZ8{awuF-=}L34@yF%yX3CJ z-4Hs7&XN9@xUnO6b+-}XX1xvQUZj8q?2(_ZzYN+%P37L#>@Vq_DfxWZ_oby5%YIoV zJ(01xo;&Sc zQ*g3|cFB-o#F_TJ1)2?_MIH&>Te;}79TM+G&JX>|8DzB&%J-U5jlK?e;_@bFu?HO8x_@MWR(7Zw0LMF3R zGjKk-S5Yj5YHuAF6X3R&>$vC-S*eo>bg?+$DO({4(nOT}OTbkO2F zL3V}7LtX4$ZDapDMwM7gqZ9+ex*5tyjT6BkTwud(&M%XNv8J0XIV)OWbc{-^v7x@U z+!o8fD>%J7862ZRWn%+ljAdtzs!$=7vR3J4Pf{Bj&CyHcYVxc`w5!hL$OeHCf5lz4 z&e!avgKQ^VOKJDKwia45JNOo!5aNMsG?9$us>jrJCHutK-04cRQ|WpvL{2}QHmBi2 znC|CE>(*FH8K2G|ZrJZ#&Lt>jwvtjgVqLeRiwO0hr3)SQae89{@A-S|ogYR}=wCkz zG)DYg;r(eDW$Aaw0QawSE0@7savnEf_r>`4xRBN$rp+v!N6Y&qZqHl>Rne$3eP4Gb zX5}JpeUr{At&r4WtZA(40`_4>S0AdB%J7FI629-(Q4%u%uYk>yx#@c=!~c1iTznB* z+J|kp{fA8kJ;cvTiee=^+*xl#AyNf=4S0m=8y4Iz-IA|PWT)F%YSq1q9q8y`S+^_I ze^Vsx|IDUz*{UpXe)oF1^%o0Y)@^QynO$P1Jp`$szr<2cV1G7PKuMeT>vg%ybk))l zbC_|$Vg646RCSc6~r#P;hxpi9%$QF8|od1i$=9BvV9#;ash#eI)NtH0`3&Q z(BU3W_n!0OVNR|M+HbNhs8uU#nX(2}u?w`DSlaCGnX@ z(^^fo^_W^cJ&`wev!>e4zED}0skL8L`>42F80D)ieS?}fsa{*0rsP!qbYANshfAP$ z@7|O`*W3tpT&ZTT%V41AL`G(yi{LV2+y0ydjptpNOs-_YnN~~3v7PTDIT{9;MK&|J z6>IgijNdWNHuBpJ?o27naMM{!&&+Y;C8!mqmB{JXGsTqhW38h)c5QDOzLFS~%{yR# z&2SgGHmswJ5r}GRyY{6pR19Hb=XJAF+XT zFlfEa0vA-!0u4p91i&|%;zB050if~SRsvwoKyHAG5(zAuS&=)h(r?T zIaeOp%Sz!h-EY)isJvRk$xeAHsx|h*H~z-0ue{u2FGXfG-hl(vXToaClf?pXr>pk) z=bGAbjh^1dZFU1r@IIr`#EKMDyu*32Ik~^-aE1im z8nfi)yf0~%;qStDaX0n&(f_{S27K$-*K-xRppCiS6$IMTl1Dmw`~E)mxzB&UY5$il z&DJ2C!XQ&}G!k52sD);GTaCUGYV|B#M!20HvzBeLjlJKR@bSMLB z&$hLL>ZJ0C?{jiuq2c?@0TorRMzFDWJR(SO&B4AY8t@Ixil^J=eI9ZQ6L`~bKe|ip zaA(Yo*{Q@?y?vf0p(=MMFG2u?m(~Uf5MK9A7*;goKwHzegfw3n`l^u7ssWb) z&jZNnIvTMw?HZ{6;J24ET@G%tyl2YB>#b@NbPzKy05IaTR4l{%R)5iNKR$d&=a3*N z?vuB_=GXIq?{Z^ryt=<^&fRPChwczQsH4V__vm4^6pKK`*2%RLpa1s@p~S~o(+2G< z$Z}7fFg8#zaQmeC_rbm4y|M4kT~J+ons$5uW9A_xQw%h96FRI3RG*I?_7wV1Zc=Dndfy?%CS`2J)ON6jDcA z4CsmeeE^}qRDw96tUCO%GfL8_QlOIS!nqwMo&EsgBjQBAe;nVT=>C{GAuU5$`Nm09 z8#D4*zl3HSf5)k3cUTj`9Y4aG&B=LOX2n|M5170y?qZJ+Wa?LZWxZqk`M@!`N#_%3 zM>-8AQkL_b!nkAh+PY32`i4pYb0v6F;8*`@!L~;OqJuI0(Fog(XMbNmtGcD$!9BPQ z$A9(z+=Y{&vsrKd9^k*4&a;6o^sj!fbb<-sen5%C4CBT?%H8i`FZ}=eB6w$CByk?e zdXe(~CjdoS0+}Ti9st7aX?){87ZLS@={q|2=063tqmgq1FKffFEt{C(l< z!!0oe1tMkoDrd*RPeZ@Tl86cOIAYO*o6+v=s@I>S%N*ON>vlt}n3$13ZG zW6O8YMGa-&_%qukiUU~?vmKf|`X*$`;e8}V$fn$*0#|Vrg_Tzq#*}!h}IBxcG%&`a4i$%hVz9 z86H=0X8PZQuJNbK)F3`k)8N#@I6xc%g@KQsKfgD?^uvjaLTpp`qS)W(0VWuHv==xY zZzAMhUT;;ma~u)p5h{G8!750F8?|Aj2Wx^{`WSK#@3Qs!vE<=Li2ghGw;>|!w8Nc$ zzMkLee7mo6A4Hb1lh`|RNAE|+|BCn3_Z~+}#f-3;T!1$QaNJ=a%mdl{UB@|~r~zS1 z!83xk^Z)riEGiu1;hQ&YX5PQ>H!dOf1a8>B_j;xN{Fk-wApsr^e&+vf(BGnJMusbE z6)bbPQXKF8%?e0)5VR=}!0 z0dT9VPb<=kQ~ctAu^avC!d9{sFIZg_Pj`Qer-8!Wqawvepfb=R){xy@KrHpDZ%kEO zU)5R5%6;{ChU_aWWXpG__R=H|_?69@S)7;fU00h7=_Ja_@9s6LZg;Ty636~g2o-Iu z&m5e>DEPXV-5%hgc; z!SVyhDewZUw(GWz-M(qe(VQ}0`Bna9=hbPnmCj7m=%q;zEwCs&<97PW$uLu}Y_sVT zejj}<&^^%awQ$!E)tI#)L@8Aqn(90*}5@BNa{hH z%_Tk^y?>2m=DCDEAd5|bl^NYz{|~wR_WGaQqHbb6n|Lr9=DcLOmZt)Xg8tVR0rUqr zD7fSKe=9(7alo=n!hdsX)B(FdNf$R~KR4K+A|KhDtdd1c(x3A^7k$Jnkxe z*==xP#PzDykFo=Q#v>Q6ys&s%I@V95Wm>1%fhLnFkcq+SX3{}{jtb2A#RP8-lm_*ycE4-M{oKCa2lwF zvks`9yYRFD7J2|SBkLRdo)rjfsZ!mrZ_qC5{Vgc90Ce~1#SMP(N()Qk+BT2o>3v7; zPF~n4^OE#?Z4RzPrgqdhxu;qcghUEF_FEFHqkvNk2H`GXt-Wpw%J%Mr!fMpgfS2%T z9Rf3$K*ocV3EVFbZixXG*<~KFB*4D}7Cg4RZrRgU4>CfBAreBvAuTM-Zn5b*qbZk4 zDf5!qdVM?Y>fy&?QShfOMB$fW;#N8~nEa&Kh7UJ+Ms6rQEb|rnrK0BB4E4C#GblG; zZ!4FZ$&$6OOTLx`vKePkTV2RBlY2GmY8RCo1kq1@4P+$e1xw>`7(TyZ*v^JmBfLV z-bJn~Ow5mtKC~{B5^t1xsbU_HCa0AG4JK&AHG%c_#S9-EjEoSmy(QkDn^o_4R_U-$ zz-oKy@D{f9;4q)RXu&`0BC5BoubNPuTwYE=nK!MqOr$e@hi>tS8ZFB9)`E_O<_K>_ zFqDR{gv+vrGmdxxTDib-3v}i0i7sV$I+T9r%EdZ?%$lsMMZWGJ@4E>~eLj4P;XR}Xm zr>xrZIZbDvNC2K`qi%-**xc-2QGox+6nqU72Y`Aaa2#~C)$cPuA@?>E+J zo@4i_9!nRRwe)9euqzIRNrO8P$zXMs>YleA)J!oQTKHe*QfQ06b{8Rv%pe{gu1PV~bZ5NP5xKj_TIfR@cZXz8XX|ocr zA~A8sunRr4A7P8bM|?|{92a-LLtWPQPcL{yo5k?=HGu;O7pXs}0z~P7?LE;M6>tsc zBCti=q27+ZY| zj&$Y~JR-Zha_VjAo<$IPAY){~Cjz(#_b#nS>_;qQ5pc=cY3@os=}wgPQ|l@*yhGFsH|4V8AzoF=?Dzgj0W@y(>^|h^0sK~^u)hq6$bihd#((h zOuM-eZkfJT!`TsT*=KDVssbFN42vcZ47_C~=*#n;V-r8wbGkY9Up^nko$Owm8bPCy>Q8e9R}KZYZcM1QpHiLTv6NG%M8yh>{?m)vs7D zaAf)OsV!q4`JX`7LI`R19b_WAKC5{&m)(oNU}9D~L7?Kqd>>be_53s_#^Kp6f#+Wq zuJ?QcNW&=u%^xOnFtM0YzVPMUW6(ZUj~^)`zX8F+!@v!^`RN&0j{^*yD-#e38DF@fvN(WqRvyGY-kVV8QAMEB81s$@go-{W32rckOt*j=BL5GRtG`H zB+l)FGXf%qM?u0e%+pisuGlI_u7FbMGUQ&lU?YSkJ`C-SH3BgbR&nV%@rOri2M~b) zou4bneB-&KnTAT`|r>dcf|;B0z$~- zBe@XG+i&C9JR)j<9}D)bKHXBBk09>B*AC&$%ItXqZ%xiOgVlf^xN;hlKuorNX>@d9 z5UjB00UZ5tqUkAU1%uHamXN#wQ4)gq;LqCBM=$+a-x@|6>=P@|Rs+WZ;DDGJ*HS`6 zm(l4MU@JMdSRNzy_r+zUlVE@W(d9 ze0%meKt&XtDmnnZf9sjtxWhRk-NFSJnGuOZL~Q{+Jx81Sl?37}5c0&y{+5t4?nA*2 zVJi><6l5{b)#$u$;ENb{-cyQ_wPJOhp4S<_0URTPuoYDZX>h~{WXMlPQ-B{>1%ySY z?a6C^;9P&*5C8P^uaL)PAvT=@^Y7ua`a93xVLAXCyf7SsAEFTjWuAJ26@Gwyfn3Xo z;saik7?`piQcXda2vD*r^eNtl?}MoRfd~c;o~6+DA~QIL_JWcwG6{%VB9Lhfn85&= z$sB*t5vC2*MGp1AgkKC}DW$h*1%(s%z{hhIsQOpoAf*khG#$8a+JGu!4Jq~ASEyG! zB94>c$PIj;?VYLgT?f8xtSpmRSyEvXZVdvW?r-VjV>5%M+oT>JlmYUA`LU%(ba-uL7A zaCR&rI_YAG5}nFUannpveMokvtF;iG>)`jxHA;QsFYy#d_;x1r&Szk*H!K1g>`&$Irxnxnw9Lnu;%h4LWm z>gZ|vG49W1LdpwZIV7!(*&xhQqGF4Jfg_OX&G(K%`SXv@@k4M+)2^uq5D4YK7>A(> zJv}`MIJSM2#mYOCa3H3tD;)_aQ4uX4>^{$K7rch!+FTxtKNO(&MJ!aoDNgbXf2yn+ zJw^Ml56Dqg9sh*rZ!P_Eb*-H5BX}bk-W(Hp2))&MD!*yh?|RYFFLe0cudW~3*O^Pu zeh1B$g_vU^XkkqFF+rqkgY^f>`!UGg3HN2+>9zrAPIV~rD)kni-Gw;i6)RW{QUQ?~(6A-J z3y$F1wb9EWC6YWFQdaf+AW|oB?;9S`VM+a$S{)m{nC5y7Y}8hxBD=L zkuK{}$)Uk;PN4*rRiEJ0JK#hCZ+oEN{?2t9cUf4k{s8u^00?0jMEPGAD@}aXdMLFA zmL{Sqvg&X0e6Mkjyncs*KOU8t=wd)d?B2s{f-?!g%(=#%Lq`*TT`=3q@P&>C`B-Jr zc8UlctzU_aG+LcTN~n|DQV|tl_={=GcM?VrJ1&Ag6#fn9Qy@Bnp0;lx*zN!sVzB82 z0jdBfTG2JOVtBk+r-OPDgrPqmF?q%7+R)rwNX=^pMI)zDHR1it?%ndJ!@%y5U*5`s z{^~sVu+Q&|dGN6A9Yk>eoWcY63EwU1DpYT9A}QGU$o1Fzl0eJ_RB-snE1)I;wK}h1 z{g*XNwX40fZ(v{`q>9E@V zH&6)>D}yb~y;dHf)YbA0csI86*ZN?!YxMlXw*MORY)(Ft za%O>g`fa*H>VsJ5&-)qBDL^{wNj1k>XY5#lw2j$?oRI-;I1Ev7suFWR<9P>)&PO7P(3%!!dE0>x(A}vI`kr;c)IgV?5<>*;zT_RkTR|GiV1yvGHP0InxRY8-&H4`~`;$A&VS` zsT|}3A0VWHEmUuS#9Q1eSYGnpx*NfVP*Db9Z861s9P1RBhGJoh1a*%;DCj*4x~-nP znXAx0TC~o#RMY6Ar@3#X0=*23+Ac5l{Old=#}hqLx@acKx_agb1d#=qJSE@gh>n-Ur=EjRD z4Wb!c{%h{u_2)OuD-SO6=zQ1gXD#HZk`Y+f4i9jx!5fL5cGvG?5eJ7l=#~zgqDWY! z3NQ}*k#FSm|IL6761)bmP+%0(2}Y;}xy6Uj_1x9_0V23py4R*x0I6mGMdGp#M1p;; z@%8oPiNI|-e>u^fPO8ter_5x@tCy8;M1Cmp?}Adv-k2viSnf8Yau;@_FxxG?xI$g`0$5|KMb z<0E8bAkRI81`;H{Q|%tl+`_D2rew1KuBspg*x0^~1p(**Lj-u8UjYqK5N0{kQirO@ zI?OGNoQziVntrNrSj_Tp^iUY#no89}EKy=v%V{Pc( zKBxxYpac6rFAO|NMlt^j`ibi1})(3 zT=cHF-nqiu))rtYYCmi;gF=a)0y}q(_y95*5`vQM2R!#*3FC%w)jIby>;IVb*S7=k zlJnq(VXpZKSowfoj}LrZamY9=WQ1ojhg0vPQf`&(`%M!KXy})kW*e#(8bV7y=M0Mk z6O)cN*Gf^iD#7n{3+#8mp&x(GTc=am4X5Ho0RPR8WWCp}>MVm8uqT&3In4L%LlZQQ zc5xpG85n(7^2PrQRE)!bC)D*Ux;KB^ZM}9YfDbk8{z#xy6$$mIZ|6D@JZ_M)wL&KV z`E@-;CJev8i-9p3mOL(SQpRFs;myJpP^9z@*u9-!yETH_B{e0_-D9vq1EVG;mkpQ= zewIFkf6oK_S#Rn&gTBl&ufGIf_|S!{eXr_A1i^g*4W2uY6dqtIUs1mH7Q$I%z_bGX zgh&s0LUDqP&xg>DA=Q>Hg3=n=tsUsRd?NGck`*-yKw=A5pep>3aau(T;H|bntR^xI ze%z5Iq2&GVa&vP54>=%cp^t-sG1ES{zG1C$wNVK==fD^Ob+Ug~56RZB(Jmx|5;F_b zaJ1F-4{>?H#SoQUzm8GIZmm=F-~lI}6WauvFC3#8aB@a}?BSz5Qj`}mARP#C)kHjo zZ-|3PtL&Y+HLba7e&fA6Njfv&quB2Hvs(@WwO(Sj`L8#$nGO;&@ZZl( zYFm#Zl#wtV+@Y8VfU{8l*gYKCLYlknc>-XVP;Wc+0Id*?>R2~L*DnyM-b+#VOdlnD z{RA9k0E&I;&z<9w3L35Q{xF1JgWq&K>~g?{VS<1iAF1KdTxPA&1+0D$Q|MU6!i)b*Efk78EFkfW)a$15^Z<0|-2-hR&s9(oNUw;snH`JI} zHuK`xoZA3bJ4Z!E(mM}C@tdR|)Of+o*${jIE`RE8{T3|gnO*7fyMnn9fZ{s9Q`a%~ zCfTx|pyz<|TKwouQS37+$oPQ6;ThLPoBtJl6}1pQ0zI^a7+$QB5;1djl6o%kZ(}tG`oexawNRObQdj;cl z*xo#S1E{_Wrqfi#bHrHS1N06oJU}pRRqgWG4F;G{LoxNi&ruMHrmV*S2r~1Z!4v|f z99Zmv4687WUyt4V8pl`&Dt)*Ez;5RCV1gA{y>+7_S`11iI(i(|F^U5Qobna)8rCK` z3jZDCWM1Mn7ga^v$hQxRFbmEv2xtC%tb6Gn2%4x63@i6M?OE!vZG9$S^i^zNSz=^` zK8PE)pd%8qNF;|ky)<52j?2q5kM5@QFMa`2Y%y60(@4rp6XP!`X9)vsn)L#rS*cHQt&q11T$BW%B=BN zZUT4y^(NVEbL%GD`$(6XNg53sLwBxoS%98?4zvObt=stYp`qshrj89??ayT=m>Jeu z4hM&XKp0Kj=WDlhtFD@QOsUvA4~u@1#9IR`2EbN`-kSaVrR8MZH7b7qQoerY;KM6| zRS;0X0fRjZcACVXUhoi1fneNQkI%W&n}hiPsz$g_KY`lYX+la?DQvZ;s5nvbcN~c4 z#c}=udMTrm##_>t59rP)R(K~tSVM;Tmt$ZF3Hx)S0@I<2KNaR7CP5hP3{BvgndE=A zdhKXN@i}p~gW3ZZ!k=Dm^$KxK?uk)Th_GuKZ*vnIO60#`=oRmk>d%j$@5yaL74GzB zCT5bVP#}Vo`dzq3=8%MjY#wDXx2Dn)6KnwDYO9JwKAOIp^Al-NovsEGgVCB~r1}q- z%#pCD(?Tl?mt>?ag>0{kyu2TbL}2y^;fdUb3JzEj9xncx&9(^J&>P#m;cdk?D2=@& z*q@iF_f)zz+Wmq@9DR+GFj`xqxEs7r`vkU&UB)aTq zQ)!|Ducp6{VN#_^;^CQ*$jyb~fmM^t=dTDs-h3p`>S$~`q4S!_)GJcN=gn!D{DLb@ zSZ~t1vG$Yx$IV}y8;@;PJ&K4ZkwIH$_N)bgLqX~M2Q`DdBn#Jk$^xG&QUxia+-CUS zAm(4bORqiYbg_%k1kmqpL5)HlaQ(`uDDW_neB3%ehv$+s>1&MQlL8S=3mq0^Q!i6D zvgdy?YzWrZ{r!9f&t7}k^`lAzWh;7kPcMYa;KgAm9KekgjVU1XDq!A!>>T%&S09B$ zv?rW!P5`@bULiQCq##s+%$qm*BOp+Kq_^>jR#}vp%v!ql-%!d);+EdS%FQ*A{Wycl zB+J4?)HbYxf;!mY;o*9XMGevoRx5Vl2_hM$ktm_ao!~FU(Z9r2($kn+wbqKu#SB=y zN77hN%gz6Zi{!>{ocQ~E79TslQsdchCB|!iH~k@hhreu&z#Ip*+ynajm|XauemSd8 z7ewQz)#gR<@ycC8$DXozlLuVv1Z9y=YT z9jVtuzWR)W=N7 z^^#Al3RV&E@$={QKm*zpG-9_e%ZAbc?o z*AFZsY+o5oe!rv2VbB=V;r!r>F;ed`X^Z*5?VtP5uOUyZ3Q$O7<(t7o45~hogOB{zHO} zF$eA?P`#dBB7!x|JQ71f(6;{S((m#)v{7HHC8i1lDpt!( z!tY(ei;ZFauUAX^?^lcM@p^l7)!FMmKR}E?O~;$(o|>rhU5%$fLGN-VO>NW&hhRVH z1Ea(K#B1B;R#&D0=q9c)Q(6jrdXE41Dzg#eKz1FVEItEwN2I1fxX=ZW$82-nL+_`S z#*Hi>$E7nt&_Q{JK~i$oQPNmpoyN28i_gY>bNB!2al{Cqv~!cG1h_kK+{10C4A+J; z4i2qCR%2J5>Sk}WTFxqoo>kg~5jhc(yKU?Ld?J@?1s2d~Gb zF1z9Dttvbg=vZ4k59o_A_Oy)McgPQVg`PV7Z}0v)p6>F0Ui?e{%&YPRwqhZC=3BS? zsA|X*u#l4J>_hULH8-4|vI5!nI=&i1=vSJKc_|TLE1CRS;1jQK5W~ zx#p%&;W)6X-moj#VwrjrFNUmC7QH%QGUaCYzn;9^%eDXWZ4qIM!;$&_eM8@VE4@A! z@cRGtagpXEDE+T<)9qYU9Qa?)w;vDO%l|9S1-Y*^3mb)s-{8MOs2t$W_+P%J3tE!@ zRizN2ke&Ts-zEQbBQ-RjwEy!Z0fZvD8XHa%#%RBWCn*F?{9l>+ytTxp1Ob`q4ua0EhAZaOM|`EDbL;%|aL@wR zos+YezuC8~eRU`QRAujqD0YS5mjk>-9SYerS zzD}n!14AN_$#fkAQ6iFB;an@n#;rT6^Tvn9?c41yMm&OCSpR5c9G~tTI!%$>z7lL` zVP}o?SdRL>$Ntkj;L2(^UaR+SrTfaWWP4q%zfPx|Z+{iP#c1pFQpmEuET1{j_0dfa z92F>d-#FU2k?MOTiIasRkU7MI!peX7lCbD+=vC|c=vki68m|p5EGBxV8XZJvRyz0N zin(sOnt#oS%@16fCitdNu6YzLcigqE;UOAYOehyy>PJp(A{#H@Lq&4+?dT$m^yNmX z@U zo<2}}2UCGmGS0-Q>!_=J%UfFFVvOw9toV`G7KK$Y%({xcr}zCd>5qS`p+T28lJzv| zG15fxqbGb}MeG7$f)N;Aw2GFQU8ombsM}O80;80_=V(XPS2lIE0n3R=NH7bV>c?}6 zQS*E96C`w&-+O&uuxFzcBoA)AmyGwi#}>;Z%A!1+yuxNCfUU1h7{zXZh4#4bVaUDC z?d;GIw0okdD=)iw-ILf0{1fW+U1JECzlI-6VD5>Sc^uMkO+J+->HHg481B}LRG`SI zjYEexyQe=!%933e9$fKI?ej^JiAZXVcNAtKP2Jeb?7kl5s9Un#ndkY#m>EkMm8)swK~2HIe9)jQG9CiDcQ;r}63c4#lFzv{pFZw;8A1 zIq(lzvtIwLXLAe3w_EB66?;;a^j2(^7(IeGSu4Ui=0Q}XtabhH+b+pw8XK$wn;KHA zvZyXDZW#raU|Ne@6-I1vv+0|c_l!a=lkg7D8(X_%OUfA#MfOqzu?1~c)`nNlducD@ z2Yg&VCb!>XEUyS>)ed}ig4{$lcu4KllH?k&$)>|RwIO2E;zP8pGa+h3^*0M{h&0hmp*9-_3kwS;ryTNo zU*CYvd}T=yWHc-FukIA+9t3^88Wp$feT; zS1Z0Kb{)-&373!QlF}z$xI#8O2-oasU5w~o4`^P#Hy_(!%l-24{;dtws|^A-r_U`o z^mO!7{s$<(Xgr#(T4pi-#)xywum)cYW%JS)K29hOrY+~$a*)fem$dkvFep@NF&C%L%(NwD@3@2Tx-e;JcLJiQ8O!f)EP+U?_w6M8<3CqF(fF)|J=HS++!? z+Lg$e_7%mJAGODr&!^;9iPei^Q3Ba-%-btU7NXroTRkea20PgJxW??_t3L!vl|B>Kf5JaIPM;=)qz2758l>zq85rZnT~oWT^UMH=8m%-s~ET6Wcmb z4ZCI$*x9aTpA*W@*C(F&sN=>n?M}qjWyrfN*{K$MSjG%adCtJv@b)%G@KOHQmONd< zTR%gVlkf^OA@>gvGF}ZKSGQKGRFVy+<9~Hv=E_#OA};YSN~^Y1w;L}aQU5aa#5`9W zU;KI}@t68U65FGAgERGfRtW6Ms?A~tpgepz%wQxi){ATrI zQjy2*jOFtdu~`YVI?P2Lhu&#+cM<-^ji@`y(c&~I{*K}G5KmZOcq6BH>&Ymc-|?NF z3w|F%E*Vt2XmUKvBzVrQHY&*CDAvD&4;kKA{_b~ zD>DCVlZQtnrs5StoV)6n>`0;lnF7n1F8pVL5N!MuT#k=gx z=sy>nHjS}+^_pL5J(0EZt34`B!tAe(4f|BPUfgb&;Sz3_880ZqF0D|=Pub8Z)Vv>J z;Q2@|_X*o;&BC6QvpuhtZS=6Xmo0+-^P$G!4It>XDEq$tr~2S(zVES)PSH`8f2GPf zingt7sWz&pkZf!B^W*xsGs8PTX(1@B6UTWih1(OYQ%Y;7sE8G*aZ5>a^9ngN?lESC4AdGP++&Ox z7)+8I&{=Njt757%9J$B0Bdg)e+n(NwqS+YS663^(LlRej7lAUs_Bc%>ME!K$_>Qea z0Bc(u+GYAL>wvC-D_Jcw?DhnX#@onz&yqh_U6PQT96StV@vecJhc| ze5^3$%Zv4vsVWXxq><4j%5PA8l3!<%Lv!-S34@f8GLc98avqwipNvy2!N+c)vu87= z7+=ofBeWbiM!!8f7C%#+#4`^2jyXXfR>VA1sm~!&ht_MXj7)R^5uRT6)}zwhq86Ow z>4R^d6H5q)1uypv^!)pCpcjV~Ou$V1+gTKkndf%I;gE$=a^umjRf9 zv+5ey$Po(2EK(8S5(Ra2yrtR(i+@it0<|MM^B)R_Ac3SyK?eIzxS&u+WMpK+A{CWd zkU2h8kRU$6jLenIneYO*$yEvkZC{8 zbSFRvOSM1743X6P_^;PS{^bDo2fs=hX1LNv1o8T zjyU$NY5GuhKVnWyPEL;R!~Da>${K)RA@h|HCL)|>5;K)R;&oKSZ8h>dKu(# zyHVBBqQ~|s=E5E0Pt?SWwB7XpV{B}!;GUcMg8cUSmAs#j2@0P|skx<+PDQuW6Njlk zeKd=YM5vRK?+RG`;j~pc?(}Us zWo1xJQ$$TWmZ1^v#k>oy!S`9&X;UK>=IZb}?=+VihC&6}Y3vbHhD$(* z*Qr&ItJTseo!04#I@~Qb*G)IvyCIH`%rCv>n``Tc&;R~- zR?!k;(y1{2T=%9N&M$b%k~ji$9$-uo0--7~QF>>a`S_ITb|s4QAZ_jroFt%KngG)l z2zzr>QfVDXb=<+gSoHs(+{jI@P<;9ghlS>etu5;~lel=-b#S(&rQ~g}RE4qI?NI4^ zEP}t(qY-cx143DqlhM9Zlo%PS_or<=3lp!Q@S|t@mL;|C_?Y`~1OZzb8=3YXpTW&k z0&S*)S>daHkui$1{9&Ymc(M7MWNG@;3 zSIv{@%?=DqqE3_#Wo`@0b@HM+>0H#lL$HdTDg?;oAnr}DN}B~wZz)9Hg72_~Tty@pS=21`(HsOmZ`!;m$$D$-vTLjcldL+Etg2F*^q%qR z#*-92^b$4$Q>=4SLLav&q>I%ZS(Hi`d@FCODhDp8Fp63?NE!IPn0Y-Am7~WH*6#k6 zc(tkPPvKBRoK#Aw*;!gy+7!Z-$j316rE*V_UC$e%o_`MaBpCo8pK%c*0y4aKh7DM% zUGtiNya{|(7_ftRDQ{-|jRAtMU%$>+zIgFKim0dn)w)&uuNpqd%B(~Iz6{bzzGgT> z!7~x43zCn3o&*VIbY(drnkBgWx*8e*aq8;o5`@FiO%@0SGtANsRaxP#=qg+8TwWwB zm9D#(p+Iq}t*IG)|6U5YMwb2;+BT44uRW=gl4S69UIh}|Y4y7j+X?s)(_W z49isMkv~f`mIYxucW8E(XmgW>-qI4uuI>58>0>9pjPUE-Wg@M}(L+9QeJxc~6<0?jlt^06M*W_xrdUKc5p`-X;bA8z zlO`npp&^#1Hl}>*?c=2blSjqTpQ_T`jc3Qd6F;haI#%&?_tW59eUu}wVEtfs4Z5nL z0$)>P<(DM-9WwnPj=uf}ouS4?kJ?W&@Ug5;urLXWNwof+vORh9SMdIu5`(5`tESo( zK9`oKh%|@qY37I|JF`@65A~EzV0gOQ7+6($&OJ~dSz5_g18@_4o?aut=gNjXVRF1@vA?$;Q% ziwd8+>Vuls<#aLk!qFG{Pw3Cr1pBHryT{SZV1yo!X(W*ZqIt}V0h3h$F_t;1^xSzk3Ebkg_($T zGGqUFo&H%2zGkT#5Q?wKxe)Sj3c3v-$1f}|cfckeShO;JZcZeJ>PbmSn_s@f+bZmY z(7UAyi{tnU&Jb!EyQwg9a1GT=1aVO&&54wrb4mX#DDcz{f7hh|PI zW3I1H;Uf2|qT*iUjm;T078Y7-3aM}wzL#G&Mq_uFfsDL5QR*-U91tpk z-Eb!^1!dg$aD$eLL$7;daqsaNxQllQ{4;L&@u4!9jFELj3JD1%Spp*yxZ!7i{{|gF zekA<0PjF|oqSqiH63VV0+P@nJaa;YJG5-v~PWOM8%ADp=xFYq}Et(6O^x%sANU ztCmu^7h>xev5CY#X68z*KjeM1im^l`b&d5uPEi z9AA+A8UMa}i|!C>d6TpO$G3jU8+o|iVILY>8FmOAtlZ`OBr0-cHSa875Je?@a=JMs zsr9!Y1Aj!AehWv)zbvlQ(VU~*GcMgXPkn~xLqF@vN2U$JLdAOwbSiz4rN34-zO@f_ z>`1K|OjtE)*J<8#-K*%?`ks=?e z5OyQ`R%jJZ01?;CiPAed$}@qTQ9yu~kPw+pHN|Il2*`^Z}6{V&9 z4EwIM?SOy)MMcFq{)X~5x8t^IbBtnivB^o(<>;Q4VY`QXUN`XgbN{btEOcSfsdlJj ziALu}_*!56NmODYG$$-bD>?!dO=ZIKxn{Mw-6UtpOrqv@_M#Gc4Yl^c?@dp@dP8cnKOgP@mHjL^;N%FwY_@ z*LQM}4LxN{rCib~#YSN*J32EB`J(c;=!vCWXbsiVyT=WB1Jq@DRSBe|_hp5j-ga7j zw%sr>{3Fd`%6%k9A!5ncH`Psai!VZ}te;1gR_4;fVjG3W+#WxsdY#mIGvUc+BQr!< zO4=5=SK+sptMf-~rCVO3-S?-bM3vWCySocNPE|@Ek~nIWlRq+kTVkeM!upwOfbU`V zY2dd0(EN)>0yWAr&1#i9>Fl-Rae`Kqf`wRXWz}-tF(V%o*XX7{@=#lBdJc69=}!vD zA`<9blu3toV)|KEEv8l|scXGoNP0J2qR)3Gh^-E$EZ8riy%7%15SCB(VpRTa&eViu z#XzmJTrc76r2nTX9leS|uF7_hlXb9aL~gEQE{ud>%R#yrBUDugJ!TO- zM*mL?1v@o7DYX(`Glo5P&?9BLQo{}Z-e{Qp* zlss)89s*bCZTOPEJDPY1*0$2ZUc!)WU;+d;u*K-ZP8$7ETU)E3qNEfV6~#^xpgi|T zQ8B>1*r@jgp(s9ST}ESv9See zx5%^$W86AM3d!L#P7r6}=O-P{Re_uzA0H9B_*9I;q5l4EGbU?dArEylQc$p4SXo(F zSmfvdC$*xoawJw75r8F?15#hpS7(-PZhU8^{{8(jZi$h(oTn204Gnzn(TI)mgx{xX z|9K&nKA|0zgw8W8jVi%bLh`m$#4Ti(rTWMu7h6Vl%|(ClOK=P=4yoc@^$gX*VQ7Bd zPfRd(5lLw7B!$uuFF&=kjERW>Ml)V0($42lHWqYzf*Z@*$b55BXUE5G4KYS@f%};8 zA(8Rg;W*d?m2d9ClIW0iNsJk1{iy0+Q`;uug?z#A5*mSh|T!5^eZv24&tX>c5| zVsx>{Nm~sH%_vKiLeE5xo9nZe#zk)V&?MfJ*Q^XvuC$0Wijz7$B-Sd~WV4iYClZ^z zG*ZyYWopDNHa%#)*&4_iH9A_;7!m7;6+Di1J9zu?z)xRAF96orADu z*?aBYoi@}vTwEVE3$&9~hlHP$p)jSeXgy6PW&5I6T!%=Ae5lx3_~j$#+~YKY3)!!! zvLF3O*qF)QzU-YclhF?BDpwykB&}#jD;@6pRkUG1yzrE$+McL-i756V(eHMm1&avf zynZ1KOydN`D#fceQ%tK<97^UMkJm2p`VU+B>4v9--c1k`_Op$9Ds=S!s_Xv|-T$Rx zHLk>915Sr4;{ytQ`DCSzI>wj?qA(y{O%~#^UD;I$s~`` z<1*A60f=9;S${Kk=`vDU26geK37b_S44e9YW%V-|BNCWhI@w)7+rp&qogUBF96CP6 z7d?A1%2zhKH;7Z!MT@y33_JQoCAZCz3GT?~B&#c{k!Si*W4kT%^D7-YXCAcPJzutt z*Q_+-T_5#8ObUimbFNcxqOoh&C%k{gih^ijlz3^3=hj@fMDO(Ff4LeJx31@)y`n~s z$$KZ>i1}WJ6N3UV1DblSgTmrsNb7Zj#+-?XX?1nAs;UY^C>cP|-k#3)_4Nh*=%(u# z$d`dBu?VK*&_4lxCShIS=S??BjO#@*3;}$BEon16GefitY{-xbe}8}Iu|S8g4t%q0 ze)|+qe1RU~Ix6@cBJ`Re?&#nEH0Tc?Hv#H2EusHg7!a%gYZUlju&BTGQwx7h4aV=j zpePZ)JY|r9SYRHn99p*C;NW0WzYEewxa8d3qoX)0kWeLr&?e-VA;@F&UI3?R&@(?^ zWJFCJ24(W=%*+)aSw<{@9-mny4F(-%mX?hmh>niNJ*FI^!`d|`LNZIv$iTkHxrIeb zn(Zr%>hBG844e7q&!6-2^I+0UzxNpIw}D7By$oWC+&D0@moy8fC(5pcv$SP0oX|TPC7B z(uWzh4@6#u!rb>jG2|f@5f!D|ZE@M)-Z?rvR5&9*`a*+)7(6ILPNeLM5i+T;>eIbC z2>FG0+Ki2MGgayIixgdd_xtw}*d)>bc87kE_m2J93J$8y5Vg3c#z+6pz`sHuAgKz?Gp%n7~q2Zur zp0b(~&Y^gG1?o4HTAflOPdz1OS*M(5%U{#mxv~ZDH#ys za{Ux-Xo}yflpK5+zmol;s#c`BVB!qut;Y6VPQh(uaFMs(2;poW!0fW!CMvw3kTH@X zjm=f?UEuazAc!zb>lc;!yn!D{&`U>1WZfm4FU8bU{5o?IciC8EG5gU?bMb0Ld(nqw zRYS57zgVCCwjT@%oMIh`(~Gcv+t03Q^NB%qQdDkD^!*ebs-ryidym*xMd}2sk_gop zw%w3@`)F^@oOC-!ekhupD9P;6IZ(h0q3UH^`(|FB~? zG*Toujft?gz>Csaixz&)ucbFIpyWW8R;}41TOQB;0sBB!Ry{o-x%{7&bfYy;g*KQw z9kjPr)SSZ{$x5IlxlUu2mzSU2klh{uNsS>OWO8y$c4rXggocKKj${P{HK0ODht@PX znIAIHfm%rqa`>iq@7@&_egUd@cfFKPDuFS90a1XAO@V3GE0%iTb;2pR0Erd+5pv#e zd_ci}4g$zrEQ@QMB-jmHfTRwAK+sCt*|8~I^KDH`Oz`pXL6*9++IzVpz*-}~;Nak3>gdh0PAn%7!2wnN zJEY0P1_*lmq!JBwhj1wTJHib>OTQC<3nh1{-Gi&hSWYgqxOgko^c9wn#^}VvwOt2{ z(h9jy)D*h9>a~>##yynzSftlk!EJjnXsDn3wl_GwZB9GWmuyDC9xsrxlj{6gUsO~R(4)O)lp^;{!;I_rh%A~mX7%h{Q7%g>xvSfr2H8a0^` zYeoNpqtd-L?_XJQdg(zi3ZGNe<{nkP#JSCPajO75s#;~dF4B^N09V5Y$$@n@u~P)up%W`QQ59#>IBvzkAeY zieNhN+iqQ+`i&Xif{NqByujjn^T3N~OD{sJp`T6(ff<=1IAoJOSw<;G(JGtP5<6;5Ei%obZc(0o7utl8~w|_%^ODH%{ zXK&6qqQdr7*^lA-3%ntXMtSNu&xC`tU0>I91h1haGFmsG5CmTy-f5(ze%=Y z>1?=3%?T&;`V%ws?^43{vZY~<>e9EPpqa!HAyA1V0~wqva1}wi9%#L&@92T+0-%ZI zm6h4qSq)cciosE+s=ofdSCl`vTYz(dGYDKa-(%t7!FRr?zCORY>Bi>cfH8j~P7I6) z8L2No`pV6O+nS`s>&OZc=fqAw2f@rN;uosC3PjH=R2pKm-xm?_0fyfc=FF4m>tI&k zQsa~5$B^+U~iE8;~|NlV5McnN*Y^%~|5Xe)8rLftl{woE}q z418s03S#0Q!G1Z^RG4c3Bmjb?KG5!=uEqt*Y54yMC&4@d;ZZfPE|Z>vI16w`9TaGo zLc|gH0PlQrYb)&DXOIP?aXjlhV=m||bjq7qMw$u%sfAP+H8nN(Fd!QipkiQL3orrB zr9C(~IU&yg<(#B)3BIi8t$$Swr4c^6q9ptGa}NEx%Hxh-GjZP&ix?f_rW*K!Ds%eS zn&jT1Hm2`Va+mreez(UsNF2MT6}=}3A#Fiwqst*;{^CCKianx(b@V~@e(drW-;EN} z&BZtIi?Uw|HPP7OaU;e3ybpMS`O}AzMk?-w)!y&1jbYH?FnYQ3Bz@jPdt#1B<-|YP zoUrQQ^TIb<$B6=3aV8;HgjnYZihA;Pti-ED_efub#X#g_D(9#r0;k~PTJ1}xL#~&T zFLdueK3YqE=Do*WF!9D+IN)7&KR166#d*G3WGL0ywkC!voJgU z%ZJ|`QeEj;wY0(d4wgkt3y;1#&HsuNaBgu##52}LR;;HvIb>Ve`0ARcv+#5Usju-W zt_d#=GY?EXC{(hscw=FA+uDxIuup7$m~(zgOlOT#j`r_x2IsW*t%co(f4ZJ{czr~E z!S<%L;+^hRG2Xb*(@~GX9r`tDA`??QP`bEZu#iobF7C&+phB`*3KXQdh zqVRk~ug8I7;=pkkUB-h3{2PPrC6UOMCc*Ff9FgN!JOu@l-Z3@5#fPFye5ANSjG*L7JA4jm20so&sL1EZf zKDD*IPSWTLyZQ3v%RTTVf)=|31o`rMk!CMJ4g@X74-ywR76}OnKnT9}Dbdl<+0Ob{ zgjA|cNkRf16!`#Saz_cInG<1q*$Dc*iHR67hLAP|`PysykG0Ns*P+GuJ8i=0M`W4appQ77J?#Qd9qM77?|0Z2A`eZjeLt z&IOW4Ik#l~aRNQ6|5&mj+Y6cRqc~WkftuWyvfJgMq$TVS~b#8Q~lC}61(aJJiZ^cpi zVAI{fw=8Y6ma6TuYc--rxl2DN-#MinPPv(@X^#_DdbV8TKu==Z+_T zx`=r#LMwjdzj!ZN;Ox~GGAFW6F>Pn*n;t{qzk!CigcQ z1?_TE^~zU0Ru{eF6$y5F#d9^ChJ9aEA1y8MJNB_wJRwCbvnAA-rOzv}43`Ku3?)y; zAUF6!p>Hfui_6`JU1@p8Xy`=lMteD4#pJ@S$5h2amay-Ms@PD>>Qm7z#s@D>sx4_O zzsFf1V2PM!)W`Z^PH13G2rsv`&$vJrXHSPBeoGk^5S#0~xAn&R3U#y(oCAWB$Ny^! zeoX^p6d(L{fU67SFiWnHI6CRwh3dVZKRY2O7_fGhxStpY$7^g_qXwI4@I4AMS+8qp zY01g?90guZpM!3K#N+GswvDCbuW^Ajuy=d{h2Yp?7KR8=6yla(6af2xTr#-t&6Y~F zATaKaEl7+(lO$Q2mq+jCcLj$zQ2ZB&HwoTBmAL>F!thJi!%ampvQ%hEmX?;_@NIc} zdr#eqfQAI;;lqc+ikC?cH}}Bd<36-kva{e4MZs+*0e*hhLTP5#=g+&YF8@Ngn!ekt zPF}>3)(p~WpqICi-6y2e3D2JvSoH+22g;K0UK@N;OWsB3f0&3A!GjHeg>v?>6wUN3 zDDHCU|9k|y8y4(46ySn&4X2d#rs#IkPup8tKa^@=Jd&nMNl5`E@i{oVIXF7rKtY-E z-Iw_$gy0g%qn9fK;SPY8$5vKfA>G-a*~xcf5br(Our(R9onNSg-7sCkmG0M7R5*aH zn1Ekcm{K^bff3h|F8Bo0=yF|TSUh52-7z<(-Os?lFl}#bZ5>Tn8;IVGVJzLg&5%Sz zO^we%7j>N*&hQ)R@HVq;8nr||LqDiXU`_%q0Wy1GdHYcG!0{-@<~OV)!!E_v zye1BM1F+~t1ejXv3a}r%u+(E8<+qmNt?@8p4B23*7MDIXZQJ*6~}LH~nSYJ5a-WHH`T3o%87%uC*WHP8+#77<%QkvhTO08vP7L zboS!Lw*s9ClSv{_KId>IO6o{zY1#_8=`(Z5%V*_;Z4qGOi#IBHt}8pcl422-;NB<* zK#5Y;lfCtH=^UF)AFDtIzcESxo2bT3$hyEP71rUEi>Nwp8yE4;9CtwR%z8 zT9#8g3PX>mA8O`H`FhIL&tE&9yxQzovRZMZ;eY-qWo~$9U*2hJjaz))#je*s`R2P9 zA+ddz{sJi>(K_Tv^Y=Q62iVOM&&-AmZ1wN0x zY1;BLApgA*U85GZyxqK;`)zeb%pM^;@lJous{P6DN4}{8lfSLWMi&vcD>jb(t@^lp zMc1uT^=luAa;9H2=O4~cnY}T)S1Qxtna@}pueD?W8(T{U~PUSv>7`)wf`UNNDCr=mZf1y)f**TbX zJ&vHppf+$&-0S2uK0GRA4$6D|_s;$MYl|*1*%x2+ntynRz9{0vwz$2KK3;^9h}?C1 zac%y2I9bCFx1lN4#bKtA;j^k*`?{PL#Sb4#)SS)?tvJ}&*M?}vU@=KT zL?qRj_TCY;sQ@7ULQ4hH4RTQ`m;!x(^MCvH?c>>ng@v`XD;OJHdvqx%&_2@uhrR}Y zH$pbZ?~pJWlHa_!O-?Qd7R;dWhbq`JG=x!^(+mal63j1lR)qIsqoV9*i^c(%L7%r! zZ3-T>qu1LSXpq2l(WuEGJtATRww65{z#)Sz33MM&kzp|emNKU>6ai(~9RdR9lkfU` zufGm&pl^IwUS9t2fz)7tsm!c|Rt-v5yZg74#6*TA8cRvR51We`sd3zG+7d0l;dd`RRb{^-~kqx_qwC>*|9G&DCu02k&& z3=ah)M2dK`sED@;Lf;2?O8Q4!`kVqaXLy)0ZY1>B zNkTSLw2-_Q5b;_vUEHs;z5QX`)I8i}FwZMJT6XDBrM;Q@_A$%HG*TW8jt6hC9&tPk zd=@2QM7e1$JRE`%{vK7FywxBpQ)b~qJ)u?8z5|JYOkbTjvv0RWtBM9LU47x$L$;xl zh4EPr;}{NNu{kEPbJt$oHlGk`uYenyHXBGBurM1Jo{5SfWK$>9IT)>}qZ)pqUQNOws~cc+rl-Hmj&ba!_*qO>$f zsibt5bcuAgbi;e%bwAH_|Hu3I#UV1-o4w98*No%%O;kuBj810{akGyqQVbpq6$(=| zNbC-g*na9@GPHJIFXa%$&!_I3U?n}umN!_~O}5m1wDk%H?(m(20i7|$RYAN!g5x9E zCnx&tFE65(>-FAjNtvUY94)*YX=1W7t?#l`y=C{WBTE@+8+KbV=OdpRyC5^*VcKW& zTL`2ziwGi;HeZj!;y$MJ89fZkyLqD;-te)mo+>Ne@5s~kUV5Zgv#vdd>D)rL^6RSi z=CL;60c(f*E{Yp#@PpS$M=iufhAyYEfpWQ#|I}gqqM77Go=qK9+(^qH&Tm7Vq`7=j z@v6esW1a)Ixy)}2!J({mZxUm?=PDw8_?&e|n>)Z&vZ7WZH#AUay+8RQy3S(396!N` zXt>`w|AE3Y$NTV*gT+N2eF39O>UYFnYqI><4k*r;R+D%QW z@WC7uY@%0{l+DTk(9&A1WWtwK92P63u6i$>7l)TGQlPz~GcWz~+X6=FGtQFfY^7VQ zb|HrT)02*n>#*N{)rOd0CVll z(E!{>*O)~VPRx^ z>%1igdP~n)1y1Q(JP~Bm!h(X_V8F^nL`D|l9f&D<##9RU-U>}`L|`x=K;mL!qu{Zw z0CrPI37EbW6%~OV4tX6IJpm@mG-$=prx&BNR}>sDlrPQ#h$FNYR)( z4ndj7<8xiDWDvs4_2$iY&>RbfMG3MSkcPf{1~`IUyi8uJhlh(GO$42Of;W%_@`{Sb zpvmsO?Cbt;>uOuJ6VZ(~KQ|Z91vu0o@-~|d;l$8M6B7_1)&Z>=*;I5`F5C_$$i*6g zoCcubTGG?snVVBzH09<(z>HB4f*cPrHv@1olyNqHEi9Nk8ZNCTU90xdwSrjcAX*%T zN@Q(o`{h*!C`rA&yo}NFUf-Gu@bL2Jv%u5H8=)fQc#t%*7iC;DyF~fAj zJb^?Ck(SL+qkj9j;Fgc_hxc_%2#iEd1`GB*=cZh6xerV^EvCQhNvE&XXroTk=+f&e zpY~cLf173(tKzFoZzs1mwPRMpW%>$j#7&uaDFx6YTJAsnHcn;p&`fIQFXm2P&Q9dl zYO1{8!%Z>cu|6r{$it_17F@i6R^HS zO^IhT_J&IGn|HB$9M{2Boon>C`MoF*Y+(m4?-xM@JuO}6WFuTSfw!4d0IEQ&oD)d*5Hf0%~g?NlzLW92-?f!Y^FP4yvz5 z)p`Q+Khtb*Kt?IzR+`G#NX{_Zv3rx9Lx?)!|%U!^qcEzTKtMGLX8m3wdY z_r{xToVmYhCXM~xuUI_&0EKWMguKtQyV3_$9J`25NNa|~l3GXXdO5^4`)ck%xsU8y z+|KQ-FM-gLe< z2zM+-TQb{rp1;#*)_eWhb7ghqq#b9?{FvXt$u!s8su-uk<(I0r zR~K66cPEgXli|~x%Tvw+7enlIR8bcho)^U@e%bpfioZ>^qqNd_1in|G&A6a&xky7M zCP$wmmsQ*ks+nD9bMc=#Xl2@Q-M+qZaCG?R&kvt}Y$ykXv+Z3lLb_g%5d}Hij`=k; zC*bxRd(AwK<3z`tJOI`_Fegd@@^9QwP!Qx?Xv8y_11yCF^9*Zq^P-%bWl+3{ii$?Q z+S@ZtlPPS7iHOjwx6@NnLOYb;v3` zxHt+ScQqj50%R8g64C+~`hXEM!E4KE!1$~l85+6+NbqKtT@lnbJN$xz%QG`|px^>o z5E3e?giZn?zX)?R=%c&*0VO9d*k!bFesy&W(w@LTVUUC`O3f`A0-HcU)RQo-J5Rth>)V+j(^Ga?gYbYS*od@V)h)JTXC zAunH0TpS!38#@A4kdp!^Bo}BQukY_8h2|FTw5F%y5|DG@d=Nqau`D#(+1VMq%~(hf z@`7aSe>VgMw%b5G0e0ZU;Q~Mook+z*M)LUHeoIZoR)h8&vjYksF-XwWkD!Kxf&%=n zxe{fHYH=f}IBHT(mpB|Y=p5fm{IbtDp7TylPR}DT$o|e@LRQ1}=LVe?1~Ku``Z~w^ z8AjdKiy0lj3MzOLK#!$zH7@V&?v9I#i-v|a6}nejTMJD3K>v;wxcK|`*bGQgm9svs zd&CC3&|pm^d=;wA9gV6(G(F{Zm>6N&&6b9E@_q~`SYhAG(R(!%bk62N7Y|00R%Ga& z&|pP}gf|w*XcQRtV9Ujc`=!^s#5dEkus`CoU$8k|X|(W}@i6$cb(l}dal!6S(%0GAsMnC?4R?&R!mig>8&(Vo=Z>FhT(%3(5pg`~fBOyR zk2}}*ZjUqgAM71w3Mao~T6Pm)ODAgbxSK7!L)D8^pfxe^;}h_h&vT9(#Ohs}wkfvP zZX^4O_CTzgk7<@RP~&dM$E;B{_&T5CPiWG$S32Z+2NoW|Dj8ql%4JZ~X$E;#jr?rk zv1Sg}_xOYcYT36FRF&>!H`Un+sYEzW8D-o`F6WeJvv+lHdhaA}v1$|fFqe;73|D^0 z-mT9!L5Sb2@<|@X2)L!AEMU%i9wgpuBe9rsgk!Io3sxoGSAR2lx&Z0bU0U_7Wb)EJ zf8kvL)U3>WL`x~GAT!%xbA8d~G0Jc9_l?vUJfZa&SgmwnwsA&8evP(MX5}ZNulCQi zuIese!%^6_5$9sgK58#&ymHqkw-RjW`^`{%HaAgTk#S~J#Z)s(Kj*}z-@Gu)0%xy_ zn?L9D$(QfG`;%`vkSVzfY_b&&PqlYb_T8)@{H2t!v!wCUP8 zsvAe6be?yLrZvItbCOUv9~F6s=q%1yYMNT&+iV@{O1B$(xKb^mw9d%jK6)N$y{deh zKB_yj_~mZ$mlr=y%v^>;VZaDKgKzo1byrof55H;Gql+79^7kwcr-R6pGniplTZh=X zN$WbTU%zix=mmQUF)t@8&dhOihIQ={y=Avo$^SQCwK#zJTq(wyTg)BSzcEYg1u$yu zx>TJxJj{CF6Eg=8GeRzaGyU8n0;4Ea*6Jqya7fU_ejdK>Zlmt`QWVa$@J=Dz>OHHa1q;0{-2lBYattaC4vy!kH4qe?D(2;@(T9cr z0wy4!ztrBP@QZp65RDr&G71XBf`0eUGj&MIhgk#vEN;g&P@4jcd?-js)T$UcOs~OE z{{Gm4fN804vEYiOt?X;BmzA#P^7A=s^;;23+)H&YE=;IfOsI7 zhC8~FBa`8~Dl`VIDQMBHi~%(6Z2_*B9%!xCf=>5%6$XVwL1E#zcOo4f9c{pjQP4U& zKff=KM_A&v2)Vl8V0VD@&;*S7EeR^x@d?@+o;P1CiG&)0)|&VYNT2dRWCNi+^e14} z1r32IpO-mGQb>5X=*rlb(jQ6u509@!jZI9(3FpE>LUNISoU%)44KorXf?&poM`Ss? zu%JWT8ZVtCF7+VJgbdBosB{hH{)W+kI$&EPEQ}l>5z)IZ+My<}*6I=QjgCKGt}p%j!{o(Q7(W2}>zVtKA^S zxeJij{qcV3cAZY#W_$OO{>${N*2GLk6VY_y9d^r(Z+effd?x%CU#{?aUx7^Q${P-s z_Jdm2pu>cDh1?fM+S3R55%0f=)ENa8$QhVpZ_D}0=e#jqE zP*u`lULi-ys=OhYnJkSOT@zHohKq{J-dOeO+sYmK*uQ)>mtr!1d}T0^dlwUVmn@1k z?EC$R>pXu&TaJ3=nD9f(}pDI(Yw)Ni;XxrNHnr`Pq zY#w1oW=W551hLnm z6YodfCI7UQMJMjDKCJHa+e^$PtUJKGn>zaQE*rP?{Oyk&>sEKN_Z$Zfvi1CJFoRcA z)k~95%lpk29N{A-SJW_r^IJlkR}MG#COr&3ND5{(pYexXWzTONMlNY*y!QqaZ!2$p z-q`RJuXDtkXOEae;Xa(S4&@QVak(-xojQ+G=%uC_WRxKIgNrL}Jhy+Vq zIWeJPE0>}}p9+pYm_*Z%k-Z=qCQiQDPf8BiX>kL0>eg|-94Pr!t7IsweY!~`hoLMwoZMyL!Rs!bCq(bqxz z07cnHP_+TjT4GSr($W&B6T!A4g4?(x@2ewmd<3nxYTn}D%L%|3C4h6{|xqsut$Fk)@|tE@87yASU;iA ziFpHw#~#4e3}5g#_;9;J6b1#8D;hGT)!hMBfkc8KD{u~lL+mhe12$cshR*@2D*Ufp zqkMY8DkQbeMpgZvSY~p`eRH|XozDS>b`RCF0qZ015U*N{Zq$Om3x05S-m9)4M?XNR zDr?Z+OXaGdNJrr}JMfL#-Og;%bnOvH#L z$5*b=<<*CP8Wb8xFK>mGG$pLd03L;fmFxY>!&!EX?C6~DSG{S=>+X6{h!H~_m4VU* zMF|5LwNjDt(1Tc;{)q)=4$>JxZ*>t*%qG~g!iNlQ=>Go>RJ!iq9w`bjbe#x@#sAs9y5yUw{l*2~nhIG}NCF{wA0 zFj{hd$)fMkZ=T6yIrlz$aZqQ4bu+WJb@TC;hQ&TN%#>4Pl4i)OUrRQ86!$x#b#pl_ z?;rX;Z7szTjZPo5lqC*@;R|e9AZg7SbnRXKI!o-@?X9~La9XTp&deG#wGG$B`@!>g z^_J7fe!jV-e)^d6X}@EEGql!uzGC)UKra-R0$+yX9`Qck{;yYpEZ;KyoJQq)#<^#_ z{tP@0sWNkzH!Ip&djB5V$}Q+CtK(p{k2Goitof=hmANguA)}}0Xw;|ps;u6-^0C|e zVWPazAFHPFB{QeiJ1@i!u?5Des`%eKC2f+WfIM%K7z$mmou_eG1RJa7PYfw3vXp?=)Eh-r(ab>85?cpOXsPo)4mEcHgpBr3$2`9J6Z!?`5f#~*Ddve_5X2&(%J{_@2 z$egwAR`=UOmCj6Nba!uyQQ=e;1jN(1w3x8k65naD@K=9DS_MXvwhG>Amo^gazLc+g z>?a*;bh0d1#Cb{d*z_oF(pHK2n!PDzo$(mF({cgVJLM{9ka>HQc<0;`i8e&dYwsz6*yWbH|oPHM3T>8-?Kq z_r7kN!90v8_jdh{^EAXB7Oe5h#sqvsDfjm}Q2UD%sJJ=9Ci;An1gM&C9JF>4896Tt zv`;5-q>J?=G+I$$Y4CZwGv>m-Wf0d;f3%G<$?}uu*!62L&v~%dJhU|YUb&r=JLJT9 zL+CxZ*8l3^a{BP=%^lrRF-a{Q&Ad0xUHH+@A1b}Q#7bOsyqA@mMJ(Zm1}{6~ENXI! z!&@zCEC%O;ki>`G)I})HZ1s8x`3V^s@&z1u4O@9#Enq+Sq_zki)Yfdq@uDsq)=_18 z^xmb%INQ zG3y=atHVf1_W5tBq4w@M26uPT#}@{F0xx=D`O$tXK26O9V+#~k91njzzQ|NBKTJW* z_O1`FW(XZNlK*`13zy6}fzJJgIbFx)|;Ya}uK)a_> zs>bZ6nRP3KnhP*WP7S$&BFf`|K?&Ke6A!X{XeoK)uu=?hFeF@xo)NJ}35sx9Qj#I}lHG)63Gg+g zwDIilWD-V3WKOO>NsXm;r_fc}am;`(XB>zc*Vnj)APSVA8w*Tj z0%h_P#iWq+*u=&{2Sp*IrDQkUyQp|RI7rKj!VXT{e3er87NNa^ag*1cfT*NniK{im zd-2g)nQa1_*(xSML`Ian;RUT69UhCl{c-)0S2=)sbJLK9UYjr~B@&vZ1U?H<5k6dgh z(|sDbIe%RxB1$sdRHwz(CU=I0Yt!4%c9GB5uR_e(ma$}3$C*~^v7$fxfL0~6HBMWO z@?K$gJNe+bP}%b~W-z7KECss9%$z<$(YQB2Il0(oE_G1TrE#VF*B?nKxT}-*Pw>sk z{RcQU_~#24$KHd^8BrbkivEY(qo=c?jxjd^hReK6*H+gbnOd)Y(pbkyrt^#}a5#-b zs0_8IuKX?NF2e9e}{)Rt>tJNU3?i2CVxRN#c$`g-!z?yM7avwAx5 z;FA?XY*-lQpO}h6VwxIwu4*JUVvh+&$@wL3nufiO5?uLx-YNR&+Mv^ z3T<{?h~G&ILupWx{OG$ZsLei8AwYh6JEZm9o#$+>=(fLS8)|#~nCDO%tNmwMwO=&H z{v{vlspSbaw)5Pz(1g)Q_@(y~t;L<{+@~$R1^FL5_X%t5zFXfI>bqjzXKm?cZ8BV0 z*t~n|-8?!$B9X=Gm##O6OI)|ddvhAWzneZZcVaVRwf03Z>qmW0jVjuF{b!RUJcriA z$r@_n@U82wivz>9q6hEvo4tNE@$M;kK80eF@P=GyCAdAkW1S}y!a4+XF4?&|n>{%bK9@&c`J4wpUgjn_Bh2NNZR z>AaCjSldeuQJq6ap{h;t5>w!4_42v}-PLW7o`P{G*kpi4{I&rMU)|i?fUahIrWCde zDL@DCNL*kZ#3UquQxK?MO#*1^WsKrxq0ckZkl}iLR)bZA4SrQLqGzd4+i3M;y;bW( z3T~)WVvE)FNReT}ZIyqjpfsV+v>D3In(Bnx8hX=NMVH2^5fY)|F(?-tEol7G!e(jv zjeF1av<}VzPp!jt;BK33%#Wvb7G}TsrH4<7IcOt;BQM+LzOP%aR8#H$?6HtY`}(C7 zgJR|=tKnkqpevo`xQW&JqVxtXNc2=oiTPFITFNxbEA!*?jOGQ4o%|LP4I*Bg%#S0Q z#xOd5*QXV>G(VS`RB3&>vxr*oxUIMLN{8GObsKDNYrmx5cMY1#g#O4Zjp~V?!Y$Rx z%fyzR?&+MgS5N(OFI9?_?f6m`c1#i>tpTO~Qfn@1j&7nYJ>@9K0?31=_ z_>ML)-K{#2W_&;05kktJda2{_;*p$CWFm^#10OG2`cDq2T8A3G-0USq)1|ze#d`}` zdyR~~m4Z6BT{bg|RSWigueO?PXNy?S%w;?0Pc`da2gM3>H4R6<-|(u--t2&#k%S{M zMiQONhvzhW(oPFEQw8xz?>V$XY{Y0qGQ)1x7VfbD-_^zaV1^>}U4wPSI- zcy7(Gjx75DXQW8aSYZMCJM80Qt9Ncs(S62?VG}{`KAy4M*;ceLy-bHlCPWJ&3yV*v z+}pKn#%6^3%}xCU%Nbl*E!(iQo2wP`tOnA3%dI&cCac)1l6dL5>J^An9!D|rIHNO* z=Erk~_6J@wcA`JmKG{f;>)>>68CWbF*Lpr4+*u*mYa3+vg)+7F`00~Q9zQmh-Z*kB zh%!;b{X{S=@0y!{s3T7qIkC{&E{pa0eLu$F)9qNt6Zi$eq};AHwtjxbgL9pJzph~e zrH>nEZX@+7x&;(S$LrO_x7ACYQ(l=VX9YIb*e|x8MTDRLR}eq-)q-3kURI*s`L+fdQ9o&2d;d+LbaY0#72oC zWeryG&_6NL9AQzIMT}m(N}uUfsxcdddJq%Qs|>LV?ZiY(Z%u*q@AqN(28Y%}tP%?ZK{Qjm*S~-R(hvlh>7wm*TBtwi4-m zl(BW=pU<&mr4uVtwIA-HqC2FQ>M`x8wzqPnd!14lsTl-sm%4`Y5zmSDX{efa;&U5v z=kEMgOZ~`B=3&-0-lcMw<^Az1zRe5UEZ2$*OGU`(@sHwsw4%jcmIc=LKyB4rje#i{ z6bYFxBG!2^sn~38thv`5LnihpKLB$n-=3&+8=b+?hfv+o<3U#OWVJwDlYtPpfqNwmekEFWlUte;np`y zF+MDyTXhxc4tL|rzwUM>Eo^H+84+7VANvS?b7~2*5OVoFKb)UEgSb~`ntqD z(|-4=#oGGipOfnaTU=8=&PRQea#E;hB$O7PPYQ_k{Cq9hstt*u2Kzkj3&Sls3nxX1 zo3X!+fT1|i$eDn zyGK@*qS3u(!Qr?YYbT}c9u!*=N`VAi{`m4+4n<+ziJ)V?&AjsoiYw{KhPWb*@k zD}I(=NDVv<)nhgOFPvrF{~tc!8gXT@u+AZP3~8YJIG$j?)_LVatj~R)DWG^*yg~=#PrbSObjlC8Mubhia=MnlZ(?z#!3qSIH29pN}3_ zI8Dsxg@}OmI&##3-?_x7(3&YV`glzmyOU;GU0lX0lvWDgq>biT?cDN>U*b7GaKhe?td zN{ow2h|y+IhW{P{o6F_Ori#t#`ocsUU9!s|%>QK60U>*n{6IzSb2}uqpkWbxiuv1w zrO}jHBL58^&OiNkXyPtrpXS1M=EHXQ#0eS~*&JmnU`o9n@+=%@x>r*Q zmWfS1o!N6s;+;2I&2fzl^XAq)z?hW#_TqSt*eJ~4tx)W)zPI#T=zpxs`<&A~C}~V= zZbR~Zi&$lH(ZJYI-}sQBfLm<#5;09vKk5AP&6!lCAiL`FW?kN)ywqvp!bKJAosUs{ zz3}$@1)rk#=Y5t zp0@sL;uVuAzW&_$w$=8tFgIMeO#6(co?V{qz3kDlvco>*zfzg>|K~t&K6g}qcU_Qx zBlht1Q4*pc?d?GVLP5nfpHZZYettsw0QRO+qgqkI(1uhG@+57Fb)yKyJA`Z+ zc&gwXbb~?7Qjt^xYJs~#H5@5%$z&xF_1=QevQwYX3bE^afyOPFs3`1Hr%+vOeGN6; z^XdZDclyeVw`BnG_|{4pmEN-8<}``W^TbzNTwlvd*veBnLk5Zni&m>u#k9&C@izfPu-l|^fNh~_8MBUE;oI>oeMM2ouHMKUqZu%on z)laKo5BKl2esk9P)rOZ3Qt0`s+%Hp{j5JtK^=T#xOJf!T!(c->c@#O z{=Dq+w#dVI0#1uP-rLqyEUms(1*Y`Z99PX@KRYlP1S4H-n6A9P|5!UGypPojmeZw> z&s0gIt!Xmaz*HHc=;@~toe~V*zLiWCCIe+k7|Aui<;O1?6J>knm``*DiwpC0X73o97e_0!lBz z@2SRgKHAGQiUZ-K8;w3NPbNmA4jb1X838GaLksEOqZzL1yA zcr=$&lxz}rh5215C%9re88Q^#%CWNFC+9JdzkX0sP3an(oU(Z!3AMlCRcm$+C^fS| zDOMXVRqhF=Qkj;lcTw9c&3qD4C&su%+aR<*$fk9S354i9l9s3(z+B*tR0r9$urX1U z#Vdm@s>V8tGPdsOA294rF_x^?c6#+tsEM(z!YM3O@eK063el%2f%wMC!_nUS|ATg+$C|2-T{70^$>D<||4Z$D~KUBK?|+ zuq_!_YN=rutNn)JY1bJ4A*x?KvF07Fb=^5ktsUn2=95*`=AVP9^x|7riJ`Utjj=b* zu@`uIeRl)6R^d-s#}ejA(D__gcMtZn5Y=b3QQV(fWoK>U&Lmg0#-5 zD>X*R$9#CEGzQJk%vAc2^cTB2x>V>wy-`tWwNB%G6c(pW!UgQ5eQ#NtSQ>>|9 z`eS3BR|_d?bPSpX4R=cZz!K4b;g;3P(Di6SN?}P4>bF(PS4yRy4pre1DUAYHwoNDX zP!SaRcl2g*!D-P-p*35Y^9ZPmNMVepJ7SY(H`#x{I{xI%RUK7%=uuU42L-jgL9b|!vD>`l2}$+9 zluvT%t>M)2c^m!nG3{F|^PNoE8rcNRWi}VNDh^sj<7CDfg^90i?>9274?b2LG`IYwrt!V0_v{q&^c36T7`4{&R$QR(kDB-Si3>!LvN7FMD$7i$ z^6)4;RQr6C1l)_l47~~n)BuiLzHnPNPOX6OMlX3-H_4iOQDCN>`qvyAiZLE<=uCmxbuUR%J2lbQI9T!28^_<|3O4YDZ)v!p_rdHe9?yb7OGgpe) zR}u=2=mYIkV#cou>~plbHuDl?lWO*fLXrZ-TreN41C{z`!;`DFrmWROCpp&pr4x?kZqGc^Tg9FK@0`*XUnfS ze+yA(PNSpMq_uNaTz7jlltOklLU`Gl4VHFrfS)Trf(vi zZJ8+A7&ndUbq^R;bTRx`Idg+XjPX|fzt9)72u!Yex^X2fnbT`*YVzc2l*K}@zW>=R zWxvJ5F$v8dLI_pHG;?w6K%)|{g1Pzn<{)qmNv+$gQbKA}={yP)1k?FS{~(8TD@ zpwBXShph?u;|bo;Wx0`ZD9y!K0#azwgW@8Dp&ig_g?yvwW0Ed}r=%ev4U{6yJ8I-6 z7&3KxADbduo^*a%^`g#WmaF-uPgx5v29`a9sk)RycW+ zd5kwtv$H^j$5SxlGE%mAnOo;wS$gIhd8iku9@Hx8Bp;9bRT#gBxD@jYkH4JqW%w{a z`0X`r&pHjfsc9~@$k6UO(MQ>qds(aoRm|5psd#kabrh5=Ym95WlBV0mG&}XBr0!it zqHJ3CZCy8KL)d#8lytGzMq5etTlZsAbkW(B?A7wGtK+$x5Z^e(u{ug|xXE$2MX@^} zu(=>7f9O6`N)h0kodtNp)PBoS01x!gyT_=T* zRRPyvnSQ{!I;@0jS=u{R`A}_#$(UulnTFY6$5-);{9fh*OU|;Fy1LcJYx%yo8b`eK zKBJ}c;fg=GoveQf9N%~|GyQhn)#_S&w{_fD>rg++5%%>`_e0}V=ecis(P1;Y*|PfB zd5iz>Z)dCV4hCoU?Ci#qoeKFroC97#|KlD5cMrwi4o>43%cTp@r4m*1TvqFe>cy3# zi{5tQdCL}u+}|DAxGXO#lh539^!%=`%)*&}E_r%Ab_f<7Hn2L+ZqDENm>;&XyDv|B z-uV{Wp6OQ~|EeHLx3F*fVHkfL#P9dDPA{YJ;xtGv9oJT{$@sWbyjgK%+0}2CY&rC< zYGldLYW#?y{PL;B>9_}*ZGoO7nX&Ts89*#nO;Ot?$;{c0bq4&8P?}m{RZ#@BFgL3b6Qj zr%VlVPXb<<&jbRz9#zXziM@Msk!Q7E)vF}pSrl)$=^YY8_C4qFB2P=E{c3_Ou8Z3n z06b6YWG5&wbs_FG;=Kv6cw|5B`95$?0V?C&j&3+FFiX{gd=c4 z^pN;|MzC7nVA-ANVgI~E!@^LABEH+}vYyKKVfY|e{_vg(tXt52TxvgxC*W6{-CuvG z(OcoedGY2J`p0gj<-`-t?P*%Gf&9W*QjX$uT{GFP=iJnmv2D2$M|8Ee#tVsus-24_ z-O2lpexs`28GpRj)|=QrHW_1C8s;od)647-TGpOv`=pgw%Cn*y`)DCQteBBojI%0{ z##U6D~D zsyrlQJ>C_%P$2~w(mb>rsFd+<@{^7HclW~W)9zovj|XG*4P8(DWkC$pX1~T^^US=R z)8x;Y<#Xq!ru6N1EpXotI10pb$e8Yst;c82&K{5C@6c}YujX)C{H*5B(&<;zTd2Pu z@b3<+rdS|%>>(w7yvUY27iSq`F%FF6?W9tU)_E`;xe-P+-0Ffd6r537*c; z_)MUr5``f#&B#nd^ov)V?eu$>A$=1aM4Rz6AtrAH%W3CKDHCym;vrwPlhBY{4SqkX zX_Fw@cv4JCvRkiq76X*b^Y1+sRbSHT>Xzny*y_oF6XC_-Tu6jO15%TX0f5IV&Q2mYk(Wibt8p<{Y8~h@cFsg|e3mJ0{ zhZ-S79gB!K2`1OECUWhO5Jx2qEMCkQB`u?EOW1LM$fOHul6o2@UIZ`mrljzpRpF?) zjhMCS%gwOz8JaH2C_SzLG&3X1J1aw|QbWXt#*2~+iJpH)G^6;y_52s{66cRweUmy^ zNF}q{d}?NmlbqyzKk!iieFgCEd}~p!m-u!*`L-W-*ewTTwNf?v$m+*d+ssa%X0>iMSIQVHR38XloGiaO zYX0bctKB<}lo&o5ZqVY&#s5xAn3%a#B+p33={-U=ljFWJTkOgyCXwvZ)e3K&0Y!edM5$oVEJQJWoTj%saGeazz$IcJt=LqYezhJ~=5>W8ol>aw zoaTQ4xHbd+c4@$JixYdOODcS+!n8qCY{XPdNd*{_9(Ij9jFL=* znhvER95D@xCj9xFvl->|{SW;&ke!7N?7veT*{3W>BtCc_UgN73W#Xs7_}_kh-&) zf9wEU76@SXz`tJ9?dQ1R^!IJFp~!sC|6nClC`W~v3`TFCD+~!>62k`G$dyqXa)^Gk z&TERXlF1g;%sQLAq1dmXto9;S3qACwEW4nzdh*mPY;04~dQ+yd;;+y{j@?>Erktwa zIFTslF^LZ-m$GWs8P{tZoQa63a)DpAJUtrvQ~v9H&;){ur2ba-mpkf{z~76v4to8; z>&0bKpBcw32OYT8OJ!aUvKLhf(PA=(&Mtl{U^GIcOCHM5)uNi}$0Eo$$O)h35zK1S zTw$Zc@j!ikX9bejBrJ!5XyvcprD7olrVI*7$6?Kvi>VYb`s;}XmbrwhQmN3V$f=fT zU^5gH(#uJHSCIvh$hW$w?f>4QED- z)3(3r_50?4k$B=6NCd%B+5`#e+eYHXrk$8Fij#t}j<^Aj>%DM-qqvQ8OoTI(<`6)* z6Q`N|OeDI$^k3I79pc}!gtW0*hF*G_tj%5o_RWy4o-h|)!$(U+4E4OUxnX#@#>nKG z+F2}nH`-NP|Cp}igMO^|)X5;Uaa?l1;oGvq@<^aC4L_J?As8Ai^hWN*P!yrOKNV!H z+OMngOuUa*%c?EG@gU`bR3(Jw9k9q5X(m60z!hY$WNnVu6& zLj5Xa1iz-)3~&S{b0}}?ps&)TQh)2DE*gS;7b{D*EN^vLrxJ$#Jp}*1d-jEmUnlOj z$ZzqM;8KvP!6!CH?awMx z;FOD{IP=e%D)`jN`acF#|9Qo$TZYyW+G{iYLM0E(Jy+D6rDlIucx-h?`|-ZUN0E)y zi6ajGg)Z@;|1vJTMF6L~Vr_Mz)%p7BpXC%)2-SC`uOaCiY1LW3XOl<;Ca)V~&rw?zNmZ}`vvo#|j7sK$$y z9=8#n-H+}|MXt`%@OUhJ6BWwxF?-4DyVAarhq_e5Dxz3++$=z%KM{*s?eGrlfFBT3wP zO9s~`3oS?VLIzuoI6(PcCMYQ>$&HYs z{w($yIuTu1Q%y}Q5E`6w!qCZKd5I!*oURptGijZD~9GjXtVn^uh zcU*FkxqP(`5FPE%5TYTp0b(H$6hRWM5BXS-9vZNPJBUhz@)Tk}qNJcPkzu6B)G$Yc zy;FOjXrsHsuw$`w$wLyP#<7dw%P6u;C1$0($39d-y!i4iF)9QQ_{kBeUdz)#7X-X2 ze7D;Ece~R`RPd3mOMI7Y;@^AdQM|;anL?r6FSM)6gp3g8d6yS4+yODXkt|t(9?Yjm zk-Xg4Lf#U&=eBO3933mo@u=*X0|rCZaVc=F6cj)k0kd2oDJ2b(&_n8gsT5fjDNL@e z%Ztbq)D=u3VP^F{;&KM*NZLp-ytD|_E62!$IdTjk=yWNuO!AUYv5;<(338-e2xhwB z(NW2erT|&`0Qg^+mtGjW)FSfA9#}$%Yw+We5Ywf|Z@xekzLOS1oJ$&xfHI8Wt_fxB z7iYsPDk*_aUx{HXAf+7n%<9yUfmzDRoESX>B<^Z?+7O7r2qfK5(cu4Zth%YQw$hE;w+%+P_ym=bfMsl^vF&% zEzAD~(Eb#18kk>R1NL+pYHGRfvB<8_g_@~;1s%TQfgwW_RfBNM!YFx}&8(cbCMAh~ z%Dk#VolHjgW)JZtNr;rBrwk>!PMK`UZ}OXf5(F%YdMpH8U0udBjInPz zLN@X==(&WkOL2r?9He6*@svs;%HCB<`Ov$+C~+G2=jxXQ+Nry=b$yBb&($ZLBv~M_ z4dNDWACx4ocdQc!wfJ7t$rYmWfR52q2mFtlRpC)1xnCKAwni z5abFY)&oO=0>;K(NM9joCj9RgWM3-r8q_T=G=KiHd9n(1M5o6ym&+1bJ2EpB^$XRin`oDE|IzBHLwhw;3%CCEx?E+#H+XGr3Nmt?*!z0~Cd>HY*(;;Bx>b z*ujB~F5vf&LzARP5(>Af#@RS0Spa*(~OGGP6_M?yZuxw zcp~TUHi?iw6L2D-S;sFboq#6f1^9#-Y0>b}$>XrZl%lUyjW7{}$OlP7Yuj-?$GCJ$ zQ|5hxFIbqHn_E~gXmk?qL!=@j{wO5=M~qy=7(Q3IUb=hFUaZdz}^zF z@tawPv3CYBvy)z)UcZut1}6|p178R5$n#TC!R&6R3y1iyr4q5F_LLC9k+=kUK?~^_ ziX;NZgx{YIII!)C87%t5r>xX%blROLoN{E9%vY#~)+NW#;thk=4PtU+rlaHWyKl(J zAu0Uqpr$qj;B)}B!Q*5T2sMCamwF>)vlh=iAVegLp9C%R!|52JOg#fF;B+T9&S+D& zdq6A9!_Dmyz*?Uj!b}s19yh0(VE+;>7M7AIZ6g3iW%0Qiqpl=jDrav{u3+}ScSot9 z?;)x&8^APa|9X$1&iwoVaC7Uw8T*1rW@p+ka#D{4zVxVOYc%ug0J-1H?s2sj&b?AEE{PpO3ldZ(@_kRLM z#P8u^7WixD0mP~#;OI=96_Sj&2cr}{CoNwVLS>+*I78~Kn9HbtqC0~8_07$*p9K6C zps2A>Y=k~F%9At8hG3TFgmBVuV@Z0%=-4?wUiLrV8OI|y^~_V{RhIT+m5hdGc#oD& z3;VbtEeb&zm!y_8QBF&k4lzLnu|Y?-yT#bn@I`u%NBrH;pYgJ+l zHg?S-x~MdYS5FkGil#chNFt1+g&m_R6opWsTZ8To7^1n5eYO5~@0kaca6Ns9 z3*Y*4DH7+8;R45$St}wc3cy(agpdZTdxzeTm*DPmc>4mZH=6^bVc>uUWljekn!s3Dw9qfA-~t_+6Xdk zz=}{7HH=1|2B>cpaZ-`r5Uekro;M62u_d7LlR_s0pz&+qlLCe)z$ON&NJ_Mi0Rv@c zY=GmF|5ja+_t*3y1%y*9hUj^ElSKMT5ragotf}xRU`qhC?*l7}kWqvhV*1BTR8cLjyPAr~`p;M6$Jr2qbyG2z)kou(I?) zq1t{9lpd6**chRRH3J)4qIP!%A&f(=2s8|7-dtm!kZCW7ytsx$MmInNXMMcXQq5~= z(m|xufGdF7Nqo-zoPRKq{ATEQ={@_Lfs_LmM+iVb0%SbE;amCw3hT20oj1+}&rd|T z7vO(3S60w5G1vC@L6}uyU?>OBXW(TG`mL@~`WnD%!I>SK0LEO63QZ#>NN*N3NkU*E z1Hdy*K$XUWZ3t;(cUW*6w5$rH&_Y_$p!I*8y6^A(`Q6|D|9@RS*Y~=w``fL~Iq&m&J;&qu zcs?GZxvbA;u*L=spD@WQ9t-xcr@^(PyJ%32^{s>$oV4$dWIFgIxNHlf)CjIA&g=EB zPY>3=eDQ*Zmp8=&B63)}_a^sS_0qLrK?Jnfue>VW-88{RrU?d15Xs-V_0iPT=pL6- z`iI)DT#3QDEXP`U!8Qr$gLItbZEXTqzmC*cS2SPR^Vmpf+|41INd$Ykm!BO@`T-k^ z06A#dL%B8s|3q3nMSr9uiOpdjc4nbzprNX2#5bvT@Qb3R;`R;!V*@r-F|pI~TWS}d z-4L6#Ez`b;cnmFYZ*T8P@x)u5y6e~Pg(gY=TL_jwzBch)@RK%9+n%{PRStG}EWB*` zxy;?pes^f-jc)uCyFXWY|7Syu^~r5}y7ukY)Ag86b>DbXLL-=V^$1^$xHbQI7HK|S z-WmOzr@xqq*32cueuHX`a*xcdbTz-j=h}u@4(7)sQ{9iw$AxDOkQi$12zyR`@N0U`+y?g$89@m`#3`1vasbr|~tkwzuK6ysP!s05Vudk2tV)%*{L9xEi z=nq#csQjw5i`>-Uj#nEzXs&qV@?o3rns*Ofe<)-~vECf_>&HreWt`kDfBz$5o32Bo z53FUJCJ4D;)#)3Q^h(qMTMm8=vB*^=^EgaHO+6wqQgma`7}>i=QAr63f3Vr&6c)~+ zg4>ajTdVjpR%Jwp>#GZAzPx?hL++JPyo1B>8M{I-{W^8(l)Ab)R{F4U9slaQ=hcT; zse}R+<2>}W^3GzNk%LhLQdTdq$>iskY@){Ws-mI-62nkrC?k1Oy;aGp zvxQJ=9Cph=@n+P=*H6#BrUQn6nH3jsU<9%dDIvpr9*-BlYU~}FT53g-MK zm*3%0v&UF`qHJY1H>1prOC|SXFZHUOxQ3XGBvVD6 z0<|<>oc_>09*NwHF9A6pC3jn{B|shohVI+h0$%xYNhbO}z;b-3h!NA>r~dSfzm?`n z3`9oP=t+6Zuju8 zVegmP*`3T7xiD6&e@HvZsrvQn*F7!Ld#xd_QA9&ayD@O2_sNr3#6Rf4PG>}{Uw@t= z3<42Lx#_oWSx;fdROU2i`^v!D)2+K7<(39eY_?|7#8TPC4u5)O+gfz=D8)Jy(g9^& z)H~Wjy}i7|3ky!3)Cqag77cZKNS4*7@MK#(g=ikS!B1phA{U@PM|%j?1eFF*HIeX!C<>Nt5eg9pMiE8e0hFI2UobG| zY~G8FUWQ-f#x4;qNiKxF?d6dW_JG2Nz+K1~k+uw08IvzDFXt zEdJyp7zB1-J1#lRs1q+)Sb4jVC4xm_aIRx*9!J>n$`0D4prhx!20KGL_J5ST!(VMI zTrESz%e_vIJ}=FI-fE0hF#h3{iQbPlXl=W3wP$pVH?w+WUbnaB)~uO3zGjvpm&bEY zva&B{gwdzwHGxbOKFJc6Q6O;EzS>^-to>jO+RI#jdOlT~dPL=++W`?bs&<0xA8;fE z2wlL{a!)GvhsbhWb_VOop5h`ZKFLr3mMq*D{m$dSxAgW5)n)xDD68Krv$=W<%HkV$ zKU{?Hrrh)A&nepD?853S-EY2m;9;FPf4u~XHfCnGkm{~Oj1+~1ae`M-e*Orq0Uo9y zOTdHS;g66n)r(xKxKtK~IO)a@uTv$p)r5Q02WnRqe>oel+ zXj&ok4sFk57c6gIhmJG!22D&&Gk&x}fSy-6ZGSpCj2g=V**X0%!jL_@ZqVGV5fj^7 zl_bh*pb@5p6A3wVgoxbhYzcfftyn~Vz`VjdM~Ih$gJ8`f@lGE#RReAtyb_tbn6CZ& z@;Hls{li1Q*C@F`@6VKcu1j!AQC`0J(xrE!b?jpd_imq9zjv~A9vL#gnjT^lw5gC$ zHuS8&_wXTKPWPa>i=7=?k+`Vap0WC2tY_z?5B2u?;lZg5SybrIezuNoc=NB5a)wbg zVQxE%u)!Y}A5~os?U0D~?2L>FLv7yAujjh|LS2BZ@i@q{qYyr&877JJ8@*fMh+V!h z{huSWT%yg^sh&7O$09KO?%l6SJ&)=0zSb_XH;E=g9CU?l<{n#%lAgbeSLdE|4o#i7 zxSRi;R(r&r0cI!-C{&G{drF5_R)z6t6Lo?d!=;8}|P%LG4 zwsbQsef+2uF~<>HF=+j*x%|ljB@RukAL>HzikM)D3rL8CYtC{ZNrPEVBR#;9u5*|U6snZ*Pg zMErK|KAE4t4}}mevRx60_$2Sti4(Yeml4ZlWn@gv&7cFqk|9J?XMq(5fm?L7lA zBCl~s^~O6R4%*n-QuhA`Dp&<-P^JGuLYm)3lCG_*g9Fgy-Mg$$%5R}T+ zBMRhmVT?5uj|9?jp34JYoO5ladVe*1H(29w(N8NC>Ok;Vw^(&C)9yVv&`HpC8eedH>C%)v2h-@NykeiP>% z$LbDyFC}r4D%T^LwlivuF@c1(*J)s!wD)yWHg3AO+k z^JHjuYQlG74>an5I7RQ<7lbf?ROdjL?OOb!JW6M4kl-aOD7XS`=xhkTfrMaUSMjM+xtj2mu&2qXOee}lQJLXL#_+}6TU`%O`aTEfW{~{mRCzmp zB;+ki`a`qKQ9Q=Vis=CTZ9z{nPZpZUG^PSK4$cKiuN)fM(OB-zYgA;@mU4{_CS?JM zcVvCuEGz^C1X%nQHW?*ldwHIPqAR);lBjmnBEw@JzSAM ze41T8)fF_W(ULDE9cc@Hc@RPb=)TUra8Tfi(`Vo$C>=(?z^*@BJT1&k z`&S@;G}1SxS7m=pV5d{eq zlwba^Uz;X02cB7cbYARGJ#$skFnwOS=Dy)Wy%LsiY=SAFeKc|k#p~!hG|n%hUwN?* zpS#;P+Y`qMcEaBw`R2eMU)lL=Vgl#%9`T4Pc ze2%iolJiue+9)?qLP0v=mN<2Lc7>ouhzEL{(C5a)dItIQ7q4C!8CmEAkCRp_Y=Hfu zFnPofL2sUZP$ndXvKihoyT)c;!Do_BZ~77aRR%iZEL54$l!$7Eicc_c(D6B=4v1Tw zUt6@^DP@s8^xIZq?I{yUfO49v=QdRL>yHv|wl=@66D#|ip=mlqDIJk}(RF`>_~sp0 zoIGfBCe@Kv`gh?Z4RjiHu6YTElnuhN60@_-vwP!reZN4R<0IAWVD)wVYHMrjx~=D? zZ4#wK^mGU+_NjagmnJvSxrlvc<7`d5##7e^Sv;T55YZbkvz?M4_TJN@>&;0@s$wGV zYA#_D(TsnPW8EYb-_n@$7ou$E%{-P>HnUT|hc;x+2@+hu5sXVM1;k}#Yk@=|n8Q!G zt#{8)SkznzouOhODHInMue?05W8`~8Te2u6wYa*w7aU8!?xo{~f(vaTi!rS{&^c3f9N{$07OzFyQ@Vn??&F)! zOSBe9fEa4?<;(Q$`+QMOMncFL#(Vk3#pqB2G)N?lZLN&H2ccC@QDjEj9DlrAj!?gHg}b>;|4B-6Qj;p&j0?N00G@U*gBt$$O}u?WzhJDO7;6ld(P)c;$8F8CmAXrZHqD#i9FB?&7Q4JLQuAZ0)knekWP+Zd>sx~z8^xDB;DIv|W5aI|geP1|z zt)S5zH52lF6|MOcw!yP(Hg+YCHEF%8I=8W%q_b1BppW3@<@_-Av1^~1i0u$3)wT%r zo`ovaHrSuEUbxT`lDdKSi;7jXO!;%_364q$?Mm^odx6LJ8TRN9ehQ1(qzi9kEhmXO zanPUX=;(mb?B{n=!gcl@l1E#K={L1Bf88K5({J(A=#j5<-|f1kbvCckeOvp+^zMj9 z2f4^CUYjWBQf&H$?zIVxf7V?sSSEwSpQ5cf>W0LJ=5dQFTlG4EPo4%%tpgN0=fdsC zHb62cnaTLg?9D7PEBV64J(D~q{C0QQ2O?_Y>OtO|Wy7XTo5qEwgW<+}h*#I46GxDb zcF!fUH_*F>jn3B_&Z>JgzXNAD1Ax9*T|i>gYOPIE5-zeeY9|OB{-l~1yJuKC6+6wW!2J7_Tzm#J^X!7E3|+!6#{NQdGdo| zN@L6e(b6gWH`pSE9LCGl+Zk1(sdvKA%KVHL>1d>tWOvTb38}wgX(EWx~04r zc+$8p=?*CrV2#)3annD8z^;!$6gRQ9Ezj?L7CPAGWn9iqiuXE?B7KN451O3>IF7>5 zKAlF`2Lc$RYOljHc1JWJ0+R8-m#cV%|JD zUnjOdReDIMj9215?0me~6D-ls0~cE-67OB#Reu205Crt**Piy)>r5`uJE)$`6{>k) zS&pgao^ciiE~!_-U-WbGBwbXAS@IkAUn7Y=kw%B^PG7Dl^QF0Av@c%)&vh5t*x98T zQoDbEQIDX0>^IzxzHC8?!B=--LOnSrbSPzhv}LDth6$CvJ^!69s1F)Da1`Zs5wg1} z#r;Wyqq$vZWh%@BG=@lOgq*HW5mi5iMix6H)1DisyMbUsToR8*8tGmF+@{U z{6%q%GL;JqlDJ(YA4=6K*Q!OWsrEJQth{BG9Jtvgw6$}BAW_mOBihQb5bG*ulSbbp zr6{IIoZL(x8LCVU1{e+pNfr;(u-Uu2?$%@;o?txTv^{#L@>KwHVqSe#xcsE4I|qw9 zD+bv=4#v|`4N3QvJ}Mh;E(|E6a=qZXu~m|Q;o`R=Z>V-N9UuC=ft}yrmz1@&b&*30e56^j0s*Cd;SMqI6KpurzBch0vw1IMqP_jOG332OAx1@{INld#4!CX$g zGBykc_A}{LRaH?+eAnFpw4P@4nAW7%&J*1QlmJZKy2VUAkJ8v+0R93maVDp49Qqzb zT7;e@3LNiUm_uS{au{-LURgP<<>g)wVw5Aip*_?^@=i1HF3di1q)v5?LEX6jNG4Kq zB4>)-(PQZ=p^%z{<%z9y8g+P?Y``fj;-4ox;Awi!JU{&bw{7zavNRX zrq#JB=QA!{ljU(kN>Hi?mgL5y)=&F+)Z-hDv+V-mf%kF6FKIcmA8lHU_I(*GB0F#^BA&TBTJFj zic>FUp!GK(jLQK!2d2xRucalpYZO8rIoa7>PrP)!u64x{3*Z-w$HMT+A~ckom3903 z`x}@VIxxiBSxR$_>j@+k6$$jmzk;QV9ty~!q#>4UJ6CH`K)-HE#>&S&F=LW8W7Wg8 zr(+Yl{qLW;`GJVW&Xnmzf^)Jp@V^gfq8YVtaX2EXlj^}hILW0xdiDKv<|M|_3RXYQ zYX^>vQ)!zL<;WpZ+Cc9@leBa&nc2q!w1vt{pl!IoBOpO=^L|G3o0{JB-Fu8STFONEfy_{WhpUyQ16o0@u>LA{ z&Gssu;}UjL)2EAzE#-S@XM;=aw$ue!2iO7seiDH)H|lrhP-hwDUg+rV(J2i&mV zTwXrDuSS>6Xg-O36@PN{=Z_zADk68{+-~!rdX_VVLTZ@r+1M>-*hsxUmw%s5WB&RR zak5LO!g}?YK#4fJg_9Fcl+lyb;WwB+YXprk9OSeSlJ?o1_}1j6J@a?o5sEt+`q1Q* z6lk&R#j!^HlBOd5VW%Q|*>~b|(Oa{)3uh!#`Nd!^JXpL*C9KoeMrTpr~Imds`GXHg#I&hcx zP0S_TeghMN95)FNHX_>Y-EZ(@HkWB{l$U38p?x=p8BAnEL^ZuKE`V2+IMwc242VgV zFvrBq-;uBbs;EYok=;Se8Myb z^XuZ1o?nUI#m`48d4G1sXaKpGVx)&@L}4Ot^2PYGsoU9mvu}3X%&+h$Z6h}k6hlky zTbL;4hK~n@7Iv#vo5W_hF-*_MBAl?1SaX>P*@vXY4U4S6keq z$?UCH$;(rvKqL~!Lqq*4YrD85*fx#72{kkFPESxO1VQN+YiCpKNlx3nHv5}4KH-4Z z-y;mj?w;Os`km$rHUgQie4R=zTKzqj3e`7o~a3HYHIKHJ0%;lM$W`vzh)5Jpi8_~`)>3LgI?AE zl?7pt){8!WzqUQ^)H#N7QqZtjj)&8*^CQy;f`+K^q>%%sbAW8Q?#s#>c}%LKr4_I8 z7|OHHMa~f;<#TH-_ltHi(RQY_NmNHH&PbmoU%zrBu$$8241X=VjeB)x`Ep>#;S z#qSUOgM+J>-aww2Pf*a(CgP5zuePkTu5#qC`N3Wuzggx__xZl4p zI{b#qg@8+^^O+KBp-^v0kfmA_cI2C2C5-2PXLKpc$;nAcq5Vd^?8*2c%`W!Pp|I50 z=Q$eqx9T=b!zkVX*7L0lSwnwaf6SuLeuV~^9)o#(Yw*Mpa+w^qjm)HJMStol@i6<%w>9EL2_SZ}mHQFnCzIy#SN$W0+NB2@!ZKk4=p?kWN!wKuK zPy_CMS`K>uL8HD3`s#A!W9G!5l#wubzA^nx)_|8IoDu}m%OxH2m_rKLjz+98rW$EL z+B9u7`e_>3Yw0V$V3ZmS`PvV z>l)o}IMj11II_ZO0fd8ZIuochzt4C9=jn#=Op-8D(v^EXw4x4g(mQ(-w#8GJV(1Kk z4fmaBl4$b1Sd zqd41bI@x~ISn$V+`t>7bHlC;S4DyE6c|oe>vrO8nm3-}lR{)&+W)0L!4|_ByxB<(;LdfpS0$azXqLLLX5L=DHJS0~$&R_JsmLdL}8q-3rONzIiqQl|HVJoD`_ zY1(})otz4l2r8>3pZWd%7-VMCL>&631??cDux1 zBuC7TU?zokC&-+4N~ou?uelmk%Q6>h6nizrGyQuvCs5yc*F&zuu3_UZ$-b1X`f&-| zSFc>riZTuDRL{AX{W3L)bzgJb?2~){D#=DY8N*D-yS%lgT_RVP1D`0fva*JKO`9;# zuxbxSLSwt!kB$bmtPO+L8nin<+>B`p*xjw2;+6NICZ>%rPDgep>>DkQoKzNPTaoc#;+M-r99kL;TyW zUc0qdes(#X4gP6rd!Ige`gHr(y=Lv3soQ?O$>w@8kIsI)EzGx+_d-ic=#Ag#wqt>y z$UM0bw___UtZXkgG|1teja zOy3{f{{D83@JZ31q9OdD|yGg$rflfQlyl#dB-)- z2fi7qptkGw+6bBsK*Zk=LK{k{&ILf( zpNGxGVE!b|e5aufAvz^&wI6gSYbW3fXBZ_xXx|BXdcXbzE`~umdi-|t6^ml{w zOUF7SI+)|8vIx#DE@pFoM|T)d6gn0i85tQCX4roAtPXFJYg=E+IVwTv#;bH?zo z^Y3deByDZJ>CNgR;dKqClY+>*ibmKOsDv^wF?Amm*j;L8ulaybpKD7fIL)R|uY-{` z(y@w#~#42W%Y&3)W_3Q!BphrU%zqiZ&QV8(EFFwBup_b&5h-QHe$^1o!3UyBCC7+ zC0N7?FHUqt(M#>Y$Yr^eXVpli%gX<-IPH~ws=UezS2@hx?N#HK{EP@-jaG~Cn0bz? z_seKCcoJUmeKcoqa99V!)^>w;N(6V6qAjH_9!0wF8yW}D21inHbaF%qq}1|qrI(KvB)3t2;wG0Pjf<9p215^x3zQ1T}(avA|fmW?8k+p z4!WKqKMOVQ)TIw!NY7;)G!Ax5w=)tlF&Q$qn)ypI-AJLNMOYs~Lcn}Gy(d55X@?eD zS{~7p%APADq9^rGC<4Ul`K=xvBJVzG&UeLk3cg2+3pYkJy?r>Vs<-<3p3fB>JC?HH zHUExS;)Bj{+Jf|S1|TWAMAh$Ju`D23*n%p@dbi7`e_)_XkjqCr8YI@!u}h4LR{&+A z(!t0l>uI+RnD2g_oEj)rPLMW+63mJz)X(+cNYNMEx8nAw=Nl`p2j36IO)(_#^vv9F^tSUfEx#_ z76u_h8zT~)PLeNPG#w=!8p^Awkr~fFMt7=U?dH@EFXE{+4!q>PByRUvlT^hoXS_<^ z&y>s-){%CqthBUz1v#!t!pV?^l~qucW~n@Bj(N%@c$UKAp(dVKJrNAUBjgnGQ%?6>jG(j)wy-un=r$=`~GdsBq zRw6vrr6R#N zbGlPKa6~%8#AxrQF73c4Z6D#!Vtk9(Zj!=jL;@fUJOWu3YYL6Xdw`ky68N@}mEL=&2gCv+5qFVBO6zph7Z-@FyH#^rR|F~6_T0PjrG9FIr%|xTZn)y9 z@|I<@MD3QbGYqZ?@|s{1BIBv7H>+I*w{)m9Z#NG9fy>MitU_vDMWy1Kd41^%>F73d zx)DG6tNtnt<$U)QH6?Z;R=2o>I&#LHv#+4Kmo4&E??a4caU+VVT~P!Vfn9>Oes@cb z4Ll%w8^2->&yh(9Y(p!E-HH~fh<8tlZzfM|94%&K$Y^i?rEzJMH%8XZz##siM$Mhv zbZosp?>nL39E5>rA(@O_f#;alHn}!SS_@`vM$f0P^;|aFVo*Rc1zaRrQiwH?_sewB zmb5j)FP)&HyTMKJ-}o_xyj1!V=G;a6el7m@^})o}OR|tUySJ-J=z5oLmY2a=53YLW z?zK)gSx+t|(r~d4F`coEJr%l=JeAF?zLH@Wcc?q$7VXs%X7!1^;}1N@1Ipum{J|~w ze`)a-ruOhJ1}XpJ&oQD;Na$jw)$6ukEKWbMJ)RrV-|Z&FF9LG|TJYg9@Z>>fSEeN6 zZa8?}b$uuI&XxzsG#gGj)?;?$*Vq3rj3NM@n+Q(-9Uu*d#J^iwpbAZBe5A}EGjE4A zoQYhxrclV2hZSy_wj>w$??C(RqJUQ7GR1UOC(7@n)lCGz=F=vY`$;Miswc-Aw$v?b zR1N_I^9a9dl)}^;X8H*;^ok8Rm7CEeOh{L0U6$JbqbA(EGs8GdV2_YNEmX5wFKbiu zVZ#43g8v@0n7uE75{v4`wtdR-{J?!;RPLJB?rVVJczoG)_deC#6GnXe9^ z)qqQ@pd070LV|Wv)S|1oxWmR(jNC8ar7_%0_Q%W>wYhm53x(z1YFNRa$(-Fy@yTXJsCe)CpC*bE|XZ%*;O}`naNv z*^=fL(2+yu5oQBz%av2^2@_vT!~sO2jAeFlb$PS~IPlTb3ctj7VAs9|ty;%-Pp-Tf zYcQU|dZb)oy-&*1o$8uZgd@Z7jpPcNUx$Sbns2ahC`A%oVSKpQ)aADd)>Js!R5&SAi$x z*iA)soqLt|pFfAqGJZPjhorI#^D_3&-~499DV|rpWvzJifrE)g-TLauCdchBdUIb; zod%-~J!xCSeEz2#_V1S0LTT)OA!Cv9hHJOJq>7y2(>6C^BbSBK7>_P`9z8-u)2k4z z|IW7{Bh|ivD(Oq9TxV^GvIT3S=G$&FiPbaAt+}D9JXT9MSIe93!*TWC>#}G}MU0L6 z%}X}4=7ta$4;*9hB1Uot`pH#Ls?zznyAzehHH-$Hyo2QB!ov=BN1Sp)Ce^8hYCK}f zhl%@dqAi_p0M7oX-oY0|#-a=e<-M0~08K^?Fx6Cb&dP48xGo@|8`*zRZQ`fy3`|@IzQ9N>OKI*WD7F-M1j_94Ea$ zI*R*JY>SyB06_e4jk2xNIgjGN%J(OTW7sN@oy7b;;2juyLsYk8wP1t&>Cn@T7)<`A zfMwsj;nhWTX^z4?Z%h=zQF>U{ixTyAsn#cq>*i!vH_UI3d3h{ba6`-H)W++(*>0Wc zMnv-NpGjDA;)&{dHQQx--=I$&yMnS7b{--WZG4q{TXvI5aMZJTtk54+&<#3HxD--9#QjF6Lwpam&ko3 zv?1`F(|cGHq2pipF=J}r`MM*cUAunYHwWsI0pH(pGtD;CkDeJH>MEsfFlVYOtX7IF zaNk+D^*j*pi=YpwFMy)3Yt!$aU!Q?TaULBJZqCSxXs|_+*mp1Q0S(fAzM1AQ3iab5Vc;XcKfMz9G zYbKNW|0AJjP_oJYHhy2_=C?0JLWMaw6L>8q%(#ZF_DrPjt8`b;4kH_6<%-lVIuYIGzn&#j$~io3 zrcP+6lDO0Fv|hx4%1Uy_#nu=z!IVkIq(e>hp6wAasE-k#6-9Zfwy=5GyAv8!?>X=v zs3iDEXn7W>F7s>3#Iwi*4NEvo4KUwRIu$R{t1Vh5VUT+6EjSAJIu;*;qO*T-TxE`aZEC3zbw~PMeEb+Y}#Ta>Pk+x`Xka?}l}R%sT$gebk=fm`Zg%ZWt8TBvwh;7$GXA+m}MfGN)2g{5mjbt4COLkn3-L@es z>VaB3J>5t9`k0&pc1qMq&!~%{=4MjHovoSbE5%)? zz$nS^f5%1S#($>D{}mT0DKY26J*9%X6$K7I_)n(UIZ_SCuPu!W{ZGPH)wU88cYd zc;PJXrWDjRuFXEQ>RXH0G7fEg;B5V4aEqyEMV_wvZcS00@_b*uC5t>x6Vr8*l}|FJ zBpP_9w9Ajom1mObD=qQ`*Q~Llvvsn&)tu_Ne7j*mO3}bLT%0FlNj+e&sKefky<(Nn|FrYa4+d3eq$ zu+HSMk@_w<1G8(AGSV_4t*#yAOfNHiu9#{Z3uTrz37!Q?8CD;!FzM{5yz66@)pkK= zhjg1Ybg#)7Mhdr{TDBaiNzT4hZt~d4(ActyfAXrf0sYP~!>PvgF3mrGj|@ts?R%Ry z@W%W+&7i}r3EkZtrOM(Q8!ZA&MIE>eCaL6Y7(K<=lPnkI(#|Afu(v4~s5@vo-Og~-AURK!b(`|Cp&E-~zvHcK#u2e} z(-P|?CT9vHj)~xS>lR5>-%)&>WBuB)Z_(E(-~U#inQrX%&S1N?;H3>ols<#fOZ=a) z;&18q&&RJ$qWtWyC^r|7m*D<5lJ$}8#AeqczGCEo`z%o#4pVRWmQ1-JpZ<>;g3^mX zWb#rIrcCi^{}$e6*AD9$d{B5>OZcTvij6d6PFOdzCP- z7Tr!g&F2-Z8Pz{;0dL}IIY;_fX{es;;;tX58bM$Fy!}`Ix`}^32z3%ahxUjYrVHTN zf4=+>g^`WZA8R)FphN(J*Q;K4+3pq!(oPwGQRx1$Ts)*pG6Ud&QDM~7jY}2W}y5e zr5Q_bG-%Bnuo=JGtF!pO-ZRsIw~4f{U)W9^s*V;YmH8CAZL7L{C5n(mnyRu zI86yizyv05#QlbMH|(zYIXSxujt(t+`6;#>VSFZ!@`S4mH?H-d`_~V9qLKKB=30*< ztl{0fo5?4?{w?&L{i*p`S+?6e0qBhu4@@!mfDdA*=&$Qju&{&+b!n zC=qU`AcethZgZ(-7*GNbFdm8R5pQo1D^L#j7}kTP!LIGk)x>|SVM{TnewF-2#arX~ z-!BLM)TjS?X}LL3<<6zP{ENto6#52=rQ6}Dw(Rl$EPKr1#jWMk7x>( zH|K>VzdwCGyqll$td6k$WH=!ymMEzwGezEisPq5+^B9nSG>6Kc=T?4v_O!5thQ^_<@=P(TpT=>_#)#DMglzs;UzB<_e_?@w8W16xGSJr>*fx41_K(E0ag zdd8l?BH3|Jfg@vrgXEAf95^_~A*=AMc_@#5bH z%$<}feN?(ilR2w3nMr0gwX1v@; z)f@G5HPW%peoq*x+zPG)Gftzg16w$Y{i=^JVQox`i!XFp>)@9r)!F36)c$%2@t%Cn zjD1vYs{LX6`w8-jH^-zhXc@wqh=oThs!tWxi8O~c4$aV$G%u@FU$Vb5Y&#eb>-(A* zWFc-4Gnrz-%bM0s?H5$e#YnV+m!ySgV0u1>xyGd9)ejblHVNA}Dl>D_GzEJl&7JC) zgRJe>?Zjk7;=D zP2A9iJ-Sy9`1>Bw&rAPV%BmYvcDu95s7%~G#oc1@_s#fx$`Ts&^aLOuOqM}5l3$x0 z{Gjmx0-E@6FXqS7)z5R~9EI|2DQ|>s%|`z~|1)dpj-B6jfkIINz}+mj{j*n6vd!x| zRK@qgQhkkEBiX`~w|CSViGK8G3nenz6~1x061$?x;sb5~kFJ`8`ruJB_ZOV~N=)$E z%IBnZYJ8JUW6!_K(u{jtj`Knj@i%am=@Tl9-Sa7zYiUbD516bI*zwwsK{xtcDO+`3 zk_~USBCGt7LqSsEM=O}*SAg!J&Ay}M>1d{4DI}FBrx`h$)ICC@z`)G>X0+};`t9k8 zymJj&^6Z=9#AC1{enS(L3|WGP^;iY(l0~W&)20*#&I}hINH>1@$F`JYR_gSFRBzrxT)*%ukCvPA|*u<05}yk?y>H^`MBZ)s=uS>lL&@p zZ9B_un7Gv$sl6?Yo@+{e3=*Tn@pg;jLjBksl~TnpKh>aYy?9R4&ds-XJ=L8w%D;5n zNmx6s;&!!TMtw9mV(6uu=>uos+3qJD3XVC2Lg4Bu;GlA6WQ*!B(@UAVS_74QKEsBW z6LZgaRY@u|tfwkfJsfPIN4UXpl_^Fb!bRY!cCZ@j(2#>;Jh$`wRi5WARP&E0w(6|` z!#FI4OmJtGe92Y0h4eymYIsO9e*mHlM`uDX@=`FYsXMWL$1N)X`c#0wuPAG>Pdh*o zt>h5(Gkf4{R&Lr*O{_F6awrF|hW5;aEoGswl?qrX)DGmZ-iCpB+p(8{rcRni%iUGA zPZ|%5AFpO=*k7uDi|&#rT1{-dJZajt;dLIHmXnib`9gY)ZZ5}Z)j!qgkA&m)j(n~z zZvTk9XA+9;tZnU*-I-?7%eQx}$KstpCn`(EPmN9u`S6=p_G|~(XL>cFd{4){1O1(r zmL?|2;cDgF98^ZqPg8AzIzyQLLJ43!%K{4lkoNyH3F(X)LSIFgIZdV6_Q)qJPbx!{{bs-so!!mYVS zK7lOtV!cNjhkyVYSmQpb_zFW~(Juff&fxjryQ^|aOg0d0slUxoM;KRIpHQE@4#qN!HOSfQ`{&+--i&#mc(6rR@<+3dPvJP#IeIjQ0MD=jD*H z%ej5w;7xPMSQRR6%g>Ie)hXRZ@c8P5CQfYKQ7TkMfBc&4kAm(Odxy@@^WEuClzSMuDMH`NSmE=Snt%}cr%k%N+d-qO5ExVd03P&+Q59w zydKv#pM_nV9Q^=In?U53%gQGG4_8;&MIS0hxDqd-^1M2E8JJa}A52Rl|# zpY5{wg@hV4su4r3VEllQ7v7j%2?+C5pYUNYjl204d+=yhS|MMu?&~wEsvSTMSO2bP zpDjp1@jhaHah=5?rW%2s?_b3WKYX3=SW#}N+Tq3TpYP*9%{l}!HIVW8=q?ifkYT=^ z8VB~%KjOnfPb9bV!3rCjM|%XL^Nfk!etWY`OtqglLkeW9A0mS+X?Gcdx#iE9!Wm$y z?p@8qtKf7!Hb%Q!iBnacipW$RdP+COvD!i zI?QD2<@hlzC8gp%&K&Y;I@?^vQuC1>uUjFQuWjYd3#fFgv4VyHMS(>+B(gB+SRVCS z-!x|>;?qYB5z9#;gI~dq#c&M0%8UM^)Dl4L#yF%z)J3@NHZ!I~6kHm4d-JZqC$+x!N&Ci6KWwp3|*7&ik{tFtL? z!OP2Sj-JNe;Qj{3nlZlGo=G8{Y|AQe04f|Toa*vsI>}B?F77@-r>$N-a;Ss(6mVXj zN)&UBc0249FJm$t;@u9VT}1gD*6p<%d{J>wxS`)HB>^FqgP6`$w% z3oM{o-$=R4M)IOj9L+Z$GoHxxE!=TA#1q2?u7YutjIXK8@0YOi3 z0?3S53F6LAfQAv1lzA{^Ko&f)4`CEg;X0Hr!UTrG0L$6Mu6W`g?-g%IOYoI4 zJmrRb9q{O!Xyv_Ade-LCf;v&bI20s?hdqs0!b{|iGdK;%Kkgr1@LZ zKE~Q>1O(c!KaiTbbbr(DQirTo{TvgSS5!IO@mEz>fln_}ac$@H@7BM$La7Ts98CIC zYw(5scdfx=#d+@LCr18*2TP>FvE%^p6#v1(K!Dv(-aWnc{eIl9PZU9gH-}Esu?lr8 z4X#6(j6Kao#B~q_wxTY<5JTDh(jq2#m`-BQ9o^zLfKP%@^cyTlRAH6)KXmRGv}r3PVS1aBRJbn!drlqTB!UA+r^Hqo6UQ`~c*NdO*qlUTI#y8Jl9& zxRu*GaOMvHhrsDz6Vv~Zg>9#$+v{;W8$QYI$LdcHPKzXWxd9>^GJ1OF_G<@rHe(TZ zQ#m6S4qXye{Z|OObWs-OagOnQyY5|kZ2gYwh~kgl#VKpxwJ2ZC=>^IQZ)%7k(AcA(mfiLD8n0CW2kkW*9k+x9qx`N$YkgIAa@SXL9R~Ll<#NH5rqP9^ql84kKa^ zc^PpqYAPthUwKEG=T5kkSUA+K5z>y3d;S0n9R$JAEO0T}QM|cwr2zE9dV!QxVq&74 zwCMm=0X3whU*K&w@9^nf6v#Y>wY;Q|Sq1!!ReG`5&bjC9uGwrpc|dBQH^b>~u+C{` z?5CHvzuwb%Kh1)x?foPyI5nS>vfzQQ+rk{#FYDJ_ZIV&@=5STj@5d3jD9STPkKJF# zbB5HOro^fG6@k`Ed6=fnxOOTuas?{BW~qvbirEVSr`m`bp4Mc-ds_3cUlK#(uJG%1K2vjwt!{&4V*(pUZQ>n56HS{zf-gZGGY# zP6lf5zo{F;c568RXDwYD79}Qqq<)GO9@MOD_g6CCdJczX5f;_ZU5W z#@r7F%(6sn9*-@M!4atf)1s?Lg$jdgYC?Q`mtt3z@DCvW4F}yFMK_Jo@eQ-88wfbj zsDUG|6YSq(JnGgSA-{q*DQlTujV?2{5!h$tF@#_gCA^Q-1BRw+PHYc)bgry&0_+xG zJ-BNabxkk5yp8SN#i^^8_5IPyxgZK}$F2zuyL*1ed7Y1;N2hRfj&9uT(w^~3h-djo z$8TTP8mnW#98Y}OMyZ&zqu*s)g?4X%;#c9=(Pw}KRr(+8h|96<%`OG0b+`&)qF!k~ zMTrL2Sc+zop&jaL%HUky?=4o%clPIb<0HGCM35ilu*>5 z)Xfw?q@`RnOlkMlMc2~{Uq;~W>X0(ap5{9=bOj0VJT`QJQ#_D+UWDW9!Eicye?J4{ zT37I%A7oUH%!Fc&r9oV-S_{{ z_1^JZ_iy{Sy&`*NZ?ac*_R3xvC99z%qCzD*D=Sp8M@AGXNs=8ZSxMWBs4GNCsqgXX z`rP;Zy}ys&@AJ<`*X4@$>-Bt|=W!nAaUQ4cb>F~x<;M%y7oQFMhpYDT9lzb>YnHg@%o_mxv>B>t80_!w@HlCq&2a|!O4 zy)fgug?~4NllJST@;z!L>5@_OI%M7)y^rF{xO*)cwuN1>%NQFWQ_6QH;m%#!n)Wrg?=C z{IvR@^SfPc$bb%Qo*;EiLTrd7L7Orr!c@# zTaKJ}4wid}wKTUqL&*xA{EVgB>A@K1~X zOQnL#cnZYJCFJ+MuYi4zp;ap9{?JRnZ`16T>f(-Uk{|ef#P2hJOwdaZ_KxlIxMR$h z<@f2bwZf%LyZ0k14d9Bzkg7OmjpH-w(4U2STh`EZ;y54>HzSL7Jj7{yu-vn4VAB$mjC|~FFNxC6tDmEzPP+0srOjV{*^yAihyJ|kpw z5ETq+rFj=jA~_MItzVpWkN#_9zSM0yQr&yDKI#d0f9C5`kVTRiTG^6z!sx@V$4tKq zx#(<`5ifFqUnh6cgqvc@Z#;*C?==-A<=OSg^QaQeSJ)OCG?nYd@Ij-BnJV{cN2xQ0 z6}!vm(^ph#KLGjtxchLE!7$^+k`<~uk#x<;F~ampaLk0%|0j_#gR32)6)}Ml8El_g zK}kg=zAGmsqvQrJRa;f#-yQ=0Ha9c#Fy6YJT-F=sNb_r_$-dl6u~1+Qn|o~nAo;Fpq%=AoQ^V#&O_T%0%O7)~M%7M?=ZcnwzHRxTM&Z7Cvxj`-+&cL@Xf0Kda zy`b1HvGfPfdQEnoe<>wJ6!f8@bs@akp-a6PBC&chQf?l%1%Jlgp#h&vTm$CEov8;c zTJi%)-9$elD?{i3Yd|8qftskla%{Ac`Sfonc@jSZ$p6A|max1m7!mdK48k5UI}hYb z&#g3CrD88LQWUF7!oB&II8RyTuO&ItoO4s9ET(U=`c4ZgTfn+Vgfnn zJ5Xaes~BOy5CCLgvshOgj5DmDRV$Jg;l-5Im8ofK_*~klI!n^dU@m*UbWl!MIC^i_ zrF{_^V8Kiz@IEjZz@_MI1Zf5_1&cpW?SEFFqoDlPp$ILzmZzt+)t?ilkFZ60E8Lj1 zR-piP`d;@Q^^{h204R~%-t~cx>`%+hGRS_U+pZ()&)bwhRop`p}HTu z={>}05#TCMQ|g7{16aK_=$`l45o%DWNu2Tp2%k{qU7mz$NC5Eq$de}gddwmwA&X-d zI8KP(MduPlS_?V`fOuuXVib$`Wpm+(78=?VagL8x;UOR&Fk5TLM|-q)gJ=7VD?*!H z57v3K(a+(++0hOlr;Vsy_RIY(2Qvm#p-=_ALH@#hnb%G75~kvDs%J?xrDaKXg|#XD zjbkKIx24@@Y*1zZn1pUo9VWQ=sj-+Gt+tXAwC zl5dfND-&v!YwV`#;cACR&GsoRJhm+wI@oJlh1ZN^`2N22W{cL0hXXUMB5}6N|ccq6NU125n>)pLQ zp?f_m@W@5k_pG0O9;Cnd-Nn`>>NZQSLu$C5Nf8tO55~9|u{k^a6BTkwvb$dYDL%Z! zq#h(aj{Jy9E8$*Z0dej4*-^e9_}PpT2-MwB;k49dZ`mX9sr(VqoGsu9PpxZtG^e%4 z6SH|3#R@|Ze0g`|5kkN0-sY?`K*q$FB7${^3smjz!xw8&6sVt92S;dyaE#^+p5RtK zO-Bq6BBkFNPwKyQtSf;To_^nONvf2P34lQAwi+G=7=|1Xsz5_RE&EYseobr=a2;9q z52DEGbJ3#5cp*dQ{j_buWQO+uOys!%h}nRbd0#8Q3xhs6qXKgSUsWY3y4~VjkUnM0@*Cm+02}Sx390J&ew+-5I1#E7NLr5AT z9FsXkt&VjuPP*$8F$86NdSO(`v3l?QM&*55~{}_CpG%LLinZ+SL z!n-m8egMN1hbCZ5NYp(nUq?7jraNEe`wf&&P;3A=k~JcAh+xOBqQ(FhwQxf18$H4= zv##OZ3%YkDi>{$Di}=9YvdiQeg=ZcHrftuii;Oq(O=XJHSc;WIB@i!8rUjvgE=!Lg=b36(c){zyw7!~*=^-Q;Lqye>b z*jQVzH}&?dqd|g4&5uS?jyl}CUsBk%J6|_5jK%KZ_TEqZgtM$wLc~-TO1%liK;REh zq77f3E5_!8e_`$A{CDKQ`GoI+K5L=G9;C8?OY-l5;O=*ZpA}adySeYrnESEkH}-15 zEgt7{=?nlL7&5{T2c+iV(aL4iU#S8+e*?Y7#{Kv@N8~engTfH_6GX0GFlqLEoO7X> zVlQs}3qQ`Y;6*;7QcViX6|Bp{3q#g^S?zQkU>37a#8KbwTqAe@x8ym94ftks;4i&< z2y|t@B9+?|@^>SH#JSRpT#|7ux!Z?H z$W3UZaxh}!)xlHA#=?@R5q#i@nLMmP639>z#2Q(~{elZ&!laL6pF=qwkV;pRa?L8` zelArL*9QlfhSZRd>GK9EmST590gf5?PQ_JkwoQWrNH~4u{UeBTDE9HprWg~tXAjx& zTc0{qj$dY#v)hqUJtB3Di&<|Zh35`eKYsQ86_T|>i+5gll%7H>-yCM?qW}-Kt-!LV z`lr%EYC%eIdEt@|*cAo;j#FCyh72qDNIZn&dd~LUTTQ`Y%_Dc&$^eY2Yu{a(_9GbT zhkt&bUg4}Q9JfJ!1TrHg#=VwVd!mPoc1U=ZYFVfKi~0%l<9Y+P10u{i8qL#%%HIX9 zzv=l%`OIJQv0-XTK{OTPc^TT?abp|ul#GtEZQwDXFKDfsOQRo^fabLFOMimtZP z7(J1cdRn+g=Mj0IAa_^L?ilK*`nEpC_JlRz=qC9DxYkDpeC&p)2<(Z&e_^t@G9 z*J9gC_l5NxWiKHQJ8ZDX&X|hEy0^qWv|ouZ{D)+9X}H4O|1F@r2YM5r0_pj+FMrn2 z`hgNa5q>Qo*brO9&wYNS%JvR%E<@NDwCOPN3W#{50l4dW>+9=(`kK+_bEGYj6caG6 zb)Nb#EykDtu2T4~^`HfBOP&QZ4;uYn6769m6Sy1#H)qZ^qtp{Pv!stO=2waF0$>Q! z4+w^#pX}oT8$s_>4&C;17==v129zakX@zn!-k2(kV(>mOOTg#G4!Q*O3t?6@z;zFl z30sMBOeN!B1jKr{#i+UST8l&v@aHR!$ag2*Ni4rlqoH}+cwG^sfg6lqjzh!(64Jo$5$KJ z4SUvqgVyW3iIW}wY~mt}4YJ50ofWpei_VuSlV4}?Xm26{;I^rr%Q}F_tJV>zXFjDI z%zSh(unyf<@aX>5>(qyqj|1OmpEI z^7MA|!C23KfCXMLR`S+%)b4xQ76z`4oV;4o5{VHciMGz`(=+y?=6<0&s~R@f~s<87CD@#7!fd#5q80Ygm9a>!7nnOLL!9Qfz1L$jHw$&_W%X# zbrx5!4`(QbL(*$U}Lt8sxLwG17A~BZY6;Z!Eb2xE@#0Pi|S6%nq z?-uXNNE4`h^DAUIioT#)Sj3A0dpJa0>#0Xm%PHd$NX#(Gr$miR$7`p%G9~k&F~qQj z=D!PSk|0Od)-xKTNN>trqa}&RDasUeLITu9vD$KXah7oW&8?JI8#?D#+b4bx>zIZXrkvO)s zq+Ckr6hDaje7nSbA=98dZ`nIULAQiU{lNlFCo&HRB0YY}I-$KLr1S}e=^EIq5I-D5 zd($De_bCBV`ikPRvP@Zyd`b@LD4)xVTnKL(rU>KbkG0jF4%7SxcAES1sI&Q>>HX<0 zJ1-}tQz87!;Cy=qW45-R%rAd^tJoRlot9WG|(NwN15Qk3(Fyv;@KPQ^yK+v9CD&SnkVrsRd-k5#4ik3N~B zk-5d7RSEBv{)-)Y#;QV_iVZ#-DK+%^@iPv5s=bx+nF8*H`)LyEM2kiJS#|}7C^xoe zm{Zl8F{QD#SISmb%BK#56iyzH=}8liw6!)Pl*HY2^2$#`Vm+9#?wX=9QbI8wrsq@w~Mqwg8Ar{>+{y$-wB zeJ*JgDKyGwR2aQorVZlZ(iRzyIQjlqzBxl)3$Ihyndh!kkstV;fByNiC^peX)Tph^ zfPpctw?21;^!afphy|nUsp^-*I%ZkjHuF@O)(8`7ct}6e=pM|C5zqb9MFQ%m#^XUV zzona~5NYAJUw0<%<88^-r! z2Pm(9D{T*3-5#oU0qO^0Svk#4Ji875%H$0*-ci;lgSP{M%CUUX-U2kO%zEyr2Sf9;nEse=@QxD^*f$tkt?Yr#nZ(P#u^0hIWccn zw(niXc#d$Abej~lV~AVXK5+7xu_#bH`>yRJK3kAJ8iEikJ{_V$ux z0P`Xwsl_D=D43bdXgRKNx{$M2s~?}~1>+4g#YOeV+05A_Qb33A8Fhm;_Z~ZOC-{TYm8{W z4XtKau3V-}FQ)U)3cfDR%bMtVO{BBdN6)lDRNaZ6f~$-Cq0&0-?rQDZc1mCBSN631=^L?!xpAg@pU%vYQ0JUel8XFLsxI}& zPW7PF!PdYnJMV5y^Gy78msM_D@{&rStudhhSD|xyCH!so&PkR~M=w@xi=Dx(Xn?G} zttSyA=KjzuaH_P`|6|i*U}4cs{c>cWTT5p82Z`tjBSrdW(V*r*B8TymP zSRYjon|&kv=A{kG@DPROh@{&`|2URd6*Lx+Z#13k%Azfj%p_y4xc6~NI;xxPjdL!O zHqx!~wo*#ZQ~wD(lBIsyjc>$uK0EZ!Q9d3qHz)T7s^jUAE_79kA*QC%dL2R^bKDL^ z^S&ZRKEO5El*KXib){5V?5)gf(;F0a%Da@QQq!y7Fy*OUEF9%tuWx+KZSo|f5a|0! zPYahSo`hf~<2Ox4JR+Er!O@Uy8plNquW_gbPGzVnWR1vcMnGZtQ6}ahY=??9#10!Q zH!InelQ2vQ)%AS>0b-dU+znVPHJ3BC7R(qzttFVFtw-%jpPu1uR`m1G_P(+iLMr>G zC~+nR2&pe1ve`acdnG7B$$AGV`h#YYeX?hZb2i8-cxl^Wcx43rvILo~4r<+wz97A% zSE6ZADw z*d{n^w{Ej)leacwlNO+^-d>%T?xs#Pn`L&?gzj#8eP8IJODePbIaLc|d+7}dZEx|L z9DS8t3>jv2eIIW+%(G4@Vm3BC&2{AQmPcRvByYNw8fcGQ`KWM&r^7@ywbVl9myyB4 z>#TAdtT*{;mr7A(6V)9mi>l`)ZIMcp&t_3WYVQ0nTSLXzP?4W}%BANk=^EMmJw_To za0n)*T+An;9N$KTuP=Eu*F5y3;Wf=v*MSa9?^z(TB~VZG0ik5b8? zIN8UmC2kbsc*{**#8f)byr-giCbn8BJe&B0bqRyW!@+JrR5qvV4ayO^06K_e8fa+` zXK)O$(=q*#Vk&m#WB=6ox|8}%F-cmf% z*K~WuiTq9TEW-;7nhDqqcsLv~BVwrn$aTexP>RqHaY|bctAvA4kikz_Y_iFC)nKn) zlTt%tmj1bl7q)y3TAoHE+~+B-YHrv0sI=L=2Owy>YlCP+$qfxF^_8dy=FX2=EZz>J z7X7**)zB}RXNsa#N~2_)?KLDJENr0JMLNuTOZ~v^n|y=JA%jfUDbD7dWWJBk1W$zv zSQ~<`Am8dAZmD0FCRvq%2YcZTv+cLVa3nbcuW@ZYFH3jO=$UcOWS+hCMZuOi z)5jyFN0$4tPbbSnez7;XW7g}}-|GbeLPEbTiO|W zix!^s=t`Cnj_w*3{k&)kQI1lg=LV`(?I~y1G0&wCulp}H{U`(X7HN?6ZZG8)O>?64 zbQ+cQA2m+xr!>DNoH3}ZIhmM;$Q9pu)DAW=H z4);IpAGGBJd~LKizbw5P;1ujr9CQxa${p}gW^drcKU;L-xHJ1@y>taXn0BD#qwzs; zX$w&nw8udq(|dpz&^sB79P4178z#3e>T`aY&K930WL^i0C=yxm<`$;jh1V zX$dqcXs{hIdf&9NqIRDHS?sBZRb z)XgXJ>V|r>I*Rz9}blVNp#a_ikI&5tvd)pgh$OkVNGG{-gm8M@4wqkn1O-35!eyH zOVw^0LM+lmn+F{HT_~nt-Z}Z}yu{$|Leg@r2IU9Wn5JP`cE!4wC9XGw*FJd;m=iz?e4ndW;ptxY*N8SXWv-0#g4=^1O#6SFHEx16%Dt;ZE4De*?u!EP}zScvE2`5Sq{o(uorcD-_FM z#?ThtfR?w?p<)0770dX>b8F9cL*0E);65~&SWH7OZbgK60)WLTU9cTQ`L0^XDA7aV zzJfZSbZ?3om%cgLKj_I9$nDjP4f!;lp%8*=3}|Z&G7nBK?@xcx**tn63roSbyWN%~ zgLC|2T>bC!LnvAKxYCb)gI&bJi<|qP(M3Oq5C`BGmWjkVP`J=NGOx0JIG?e4Y`jir zS#ELw{ZV409q58t_(p(9#ECi(BGe91xXp@Yst}if6Wi;C{adD0LzgB%dJXRZ-)gqq zv9jplq*XE+zV9&IfdfzU%OSc4u?S5QQ+0zO?45Um;#P85hm7H+nes+&h0w-Y#m-GB zgc+`*gk#NEEp8cv&~Nc{<=u}$Ay3G(`)CX-ps2jF$|sytA*?ltgNxlB51@p`stH$+ zIhDIoXkzU3PK~!!m}NxQmokl3J0;7_b7i!?Xe`<}Y{>~tZnEOXi6b{3^eDjVSh-l`m&;M${2F}pmB-hyztNsw~&GZ-i@kf?38e}Z^t zh+?3xm*|Qfyp(D+pYQV-ffdyg?UqZR?(vrJoG+s=!QXn2E8^-DQVE~%J`Z{qk zF}JFw6aL2HC;2sOeUwQSgf*;%CO9%V=tQvyK0Pi~EbiWu=pLg^J3A_Au`+v>^bEb5 zSwA(KqWC<6Lnr2(*+~s}qo(Y>I1;{d$R7u+20ex(YAoQj#od&X$J)Dl_O9B?XjX$m z(di3pox-ouFFp!#d>mZ(nf4N!VU76jn-Lx5cXm;YdP|zwSPH57n%8TLiBHe`n@sC& zei?S|s|8>kmJ-YT>b={=;3= zHPyO*{f7Q;WJlXO@`G~S!cNd4-LkP1Vv=KHHCF~&LMs=wqX!PnQDLyAFEy2K9RU-) z(oXRfaKFf=TNoL4p4|umZ%*hL|AVAHIpS?{v9TFVf}@2|9*8qd1c8r1MdwP=*SPOjp*CyWM44~};}99dEdiV80w@6COWhy%Abx)T z``cZ3$SgciXw2tU@~zx+Zv|QjsAab**M^{RC5~*>bmWB`7ut<(Ao_Dpwi-Dw8Ak4U z=n?T_zYJlIyxHCg_77!qO2EL?9cdn@k=9=ydsu#ov-X(~A$d62j@zKTzn@q-i@3Hn zKSX}VkH(?yJGMaD;BMBFQ$>A6`v8khr0mNgxuvB^*@}#3cKyHw7erA#Lxc$#puad* z!iGKI<%qX?;}{rJKY$K)9^rf7B%oSZz^*x;+i2W_nS-o>mvWwOg;mTV_5-F`dg74@ zYwXMEOd>Bfn|ao7doz4TL*&oOrH9zGSh$p`u7#(RG6V?VRm$;U|K&qBDkyvM_mb9@ zLGOlK0!$8n4zja$bvL9Gu~`cWLAdQ%6l+8(!$!-6-a#P?k+yUQj~ILHWFZsUsC9iK zg+Zg*yYD*IxwvDdkB5-*;SHtv9^jlVkg(xDz;li8dmeB=MZmsA?fa~&`1~o z>&_MQBq1JhtFC~iJ+N6pR81M;3dlPH0BBYuf}Y+r&i|X9z zM{M%zQREWYqXL!(Xj$Lu00n)M0~#*NVU-QCZDp?>C?tT;>3PYu4D~Lt#Nf!_5tE1D zMDYfVexOYj0DDX;mHv+4ZLGT#Wz2gDS>^Q3)t`%|pfy|GZZV@lFWh;a^h8HDPn?U= zI4PB>cvuh5&7N>BI{th^zqx5HhO-l8OuITnXxTdSgqS3xn9KzkjfTgP?R>K@GU1G#km$H5Lz`Z8K|>{c+dL(!&2qOn zi;>4v&}+!HeJ4qkR#K5c<=i3?IsoOF}(sQI{(To?!2bii%Jy7jl_a1(v0pgg zLBkpSCuyYgj}NC=G?&Zr-N<+}T7PGS*6!_JM*#>vAo-YM33tp`kr96vN^0G-dNNVP zL`LfuVFHVZ#Q_OFYnrK8S0WM1Cs_RSjPO+`h^|u4gvRt-6K6d zYASkeb;uNslEN+Vjt#!%RGTOTScn9*L9^{iC223(6pA?VgnmbUx1GlHuI8h!)nXlM z-PUkhC2iawa`orp=hyXYi^O8o5J2;4nma%N<9Ygz%D}Up+ZZWC^M;%qvc4VYUMkGD zNC^v`di=e zv#^wOGRIc#{n!~mXVdlvFZ;qXXpMuR#joLn46nihKYY0d9fanz{blchxBf`u?ZY+I z>~@);O&NvQ*9lWm>r#)7UJiOPg=>C9Fr*{Z_e^HcrDdl9gZ4e0&s-Iy+E?n@W2(v- z2bb(FRmJMv6VuxvI^mbqIlXj|G)s`~fQB-Q8FxPjhI*Bu*d9Bc5|&gesy0KfPpO@K zf)+K~wlZ4T4!yJ*lDlIo*chM}=FGSrrsBDS!$Zl#wYA6%DVZ}=y-kCX*9Bu%oVry$ z`?yrXRMS*kNzzil3}UHtuB+kR@hSD{J(r}PEWYof<<#Tee023ISNYzMioTjpy%_uI>oZrS#}kWI3bh3S;_~kA1u}bh~p=K zvw2g`B|9vo)>bQn|D+5&>%1Q4=rS&-g>JDuG7Sz=^SM6}0aAOgc?1nC$O7Kt;-G(k z%U+4fk2uV@>t1a<#~!S4oGfCecfxmy5*x&pIuu-|&&KTWZ zpx6|Ib_QxX^`~ejA~vi*F+)hd%D}*%L5p4URi`3UANiu@EX}1fjCVfrmGt^ZcAqOX zxzJyr^AqWVLvGJyByLdXrPXFC%UHKq)MEXzvi!I`)gqEpz)%TgHOo<8@mAD4T)fgI zKNt7?al3WEY6JQ;;|nzLQ);+-m(Ao`N%>|y-6@oOapf&8D@-DmRT0v2gqtJ2%&9ym zVGMWdDMyj*A_ayE&ju!_Z39p4I;?YP}AOQ z%RpDmMx!9cWf^L&3qg-~puFp0tiKv=Rf@N-f3C;wousN@m7GX|*pcVe#yckcyh%ko zFGNO?s9>FXyNzw8(AYc)<#+2vu%g+cU%&Fn{i?>?-n!7~w}`Tn-`J)^=?|gm;j&7p z`l_F!AG)OXs|9q%qnc9^L7~-k!sV7%Sau;=*gqO;dnuKH$yg%FLa|bQpLuw@glweYTuz<96hu*C~ zG-&yr8F9ylBC6s1bbBp%thmjq+;YkF%o#_Ntj}%Vd1gJ3x491L$&`ZC(mF;j} z3H#^)Ssuuj0a6s%wq$Y9(@(KJQOZ%Z3e%y!QrEOSjke(NHZ}h?A63@1%MSg~J-I)6 zwjEQr6*|*i#Qtvk^82X34>T9;($p->1Sp&c%D<>QaqLc|E~CUAU9TNqV1GlEM)Rv( z!oT6K*AZ-W=w$yji%nsbi@ZT+k4Cr?T0kg!q0h|JJ@k-z{J|};QlC%1yv$H8Y1ylV zeySNy0@z77>f-AwY7v1#4YX-jO*IWFzHe9#dYC$)4JnIIkw9%_Z)vXgM6KYg%zcZQ zTeN2Ywy~48FMuc{F$?bUFha*_7u&BaRz+40R)Jf^<-)l|Hc4z!crDQs4>~CmTjym` z_&y?k?*q3F(U$#nAY|C8Hjr1mSW39iJa3Duh1dT1{lk4G9{AN!KBDf_`9^3nL=6wx zUCx(2doN-$9Blu~#Rd`MdMH@xoWw_P+`#_RxeM(()~T54-{OZiJb?Z=Y4L|S z)$}63@2JFX#USrleAU+iX#y(sYznnWB23-)Ze+^B0;MEAvPNM>iyWCgmtGqR(av88 zaIiZKL{i56$$lwyFmTzLDq7#j%amFs<<83mVpS;OM7dpMh&BiWL>-i5>3)~si`sPS8!*OI# zB%b6M2+60=!>4+0xUn7suD8I<0tPQX9ep;fKZ%$MoL%^#j;nPD%t?miP?#%FGc*sU zKRn^)DVOu9@S(we4N~o5h&n1`y=ME$xGvD2L~lot57obBRfJmv{sSnI4IdDU0AxY< z5tecr+vO>hYF3_Y%PW?cen!hlbv{b09PA2ESs75wFlQ-B;hWf%i7D#N?c;XSTxfz}tGjye#Z3hRk`pfvD61++9bq! zw^FgmzpP&Q&eDa4o1c$C;>E3Uh-oWh;*Va<6dy}e>0hjJWVoF!PlvGP6RVUBRftuv zSy9{)2b=5v4hSKcJk>U^hW6{SQs6KhEZ~e2hkTDu&cW2Wr!a`zt(^y5&i29}yDWV} z4!K`>&Co#l(stMpefzXr%!fu+*Uz;^>9<7vn5r?GxsqvlSX^qC04vdidZNlf!D0D9 zOWTt5!!$9t*?*0EU-d1ELu-LW?l}Pml0YJhjz6d8XI_u78Tb7cIlmWUb4zDYVwQhE zBC%(n(RGee@+nop)2prWBy0_xqepZlZxIpeGzKWVJE_dSIFmfs5rkoV;`FbN8#(q8v)Lbtg-|6cw^HS6P6wWa*N_W+Me9)m#v7-|> zv_EU9?iluA?7Z69)}|Nj=e<8R{ll}u!o7vT{ea?ignc*?YYH8GW!cTsq8D0H^w_K` z`Y*{p8{ig_)SCok!HUAKIF7@7Yj%hA;sk_HN10rKo*rb|HPoQ=YNOD_NLb}&ZQq9`i66Vd+y(tiHvdcLnM@Z@Eut;V4v#`=KW$$(Hu+)D5u+(>}jf z^Ek-zRJ|619{r=d@z*A!xG5D>SqA5z>+XGab;lQcAfe)Mu=?{N?q|=iw2j~~KoT?^ z>Udt@z&Gn+4os?TU`R%YNv~YR!S$V#}67?7v1tW)I@JN1cZX$mh@@ntgE( zAv+}|(Mv5oYIkE2^4h)bfU-lo%z>-drfkqIsJq%sJ}z?>^FXW7KXw)SdUME_P<=TH z1rmtL%eM474mKlaP$J`5bUUS|bW<_%KQX#!NH(Lsg07BY^WS=vo=~jfhkL06Ag$$# z?cxZxI(Q`pXP{jv%V!4LNfpkz2sG`N>{B?5MnSpI<(Jmf)YQ`w9>pA$21&1>=VO13 z7xNV?Q>bMyel|eZd#0esxw{*?>o9*7haggP2_I!N?7I^=42UjIU#e9W5!cn~@ zXo*?5D+OX8^5hF#Y6u6N(MzCfBiSY-co%B1T8zp;EAq1S@Oj1rnwN^1#307&I>h}> z6Hn>wklBAIP1E(h6!CFb%<>j`pTr!1s?+^COvUAZ|IGD&)3l6juU@z4K7v>J^ajOa zXX_>Rli?(M<0pyP83e^rCf=P9Ef8iAwn4)*jt=B#KWN1UcW`Nl_U<6M;BFyB2i&6I z{&LUQmrK_P$vq4My2PDt?(w>?^VcL}*?gPqaGg-eaZL4hE00MyUOs||Ce+p)^x~VS$`=$+neEo z{5f+)oStKIe}9o7`bSGiARRlOOb8ctKp~+hXO`~mQia!pbpZl86CH6%Dh#LH`()mSpoau#Ec>G%Bus*!CPI~&j}J4((^!lnaZu-Wa8}S>A6>) z@7`B`NGbn{gXRzKkU)d{LNac+L>@G};{9f<%7Oa8HTv05p4vrO*#K9`rFU1x-dlH{ zP(9UKw|U@0L-8yJgH++pa}l`vrWbgOX+?9$=6XLt!3e?bN3`R9piwf>vtBnk4zC$p z|Fxj~#QcbPjHCpwqBn(gWvSwa2#^z(KT5{O``XeUiy|D2A=FUj>?QwI27qS!@ht+K z%kCj*oG3!5Qi{ppwp@~{&WvL@s6KoQ=XSRd=+?4OJvgs|N-CJ?`v>lJilIN73aTz+ z9-vh?EX8U3n=~(Gu+h5d@XqJBnuxBZSU24kyr|^ldIpw`Uw9jTU?;-AWbs2tTFeL+ z*cn_@wSphCm!@_py{h$lPn=;jJ0K!DT3W9cPe0Tm+RZ@njMKb^`O3PNyRImSZL|J% z44hHnk4O4piBG%UaF1UK~Z}a*bw|HnBs8^qN7=xz_XE?IOu$o)UsVy0|66g@uEJ-gI&2Q zQrpZnl4n3R4jpOC=b@y>j+s&T#<#8x@7h=vpYowg?1f28?*MD*+L!l*3-}S|7h|;4 z`f!NLxA=b=qQ2sP=oIeFH9kW`81LukI1ewwU}gS$H3{FruZ2Q}RO5gLYAD8b{$5T) z!A)&$f97`n34_yH;P8>~yFl8OPpu8N(NCzay@zWM!3Se@30}tA)&8J3Jp8^@=VuPVh_oMgH1JO|xPcThJ};(O$MKxej58}U z=8em%2|-;M6H#8MhK{S9)P>oCh>3~$wWkpDdiGx3A%C*-X6073fH%GKp3jrV_I)HH zY)R1%&k;gu45)$qo#MUsXx9LE>;vwEA{d{i5hvBG0F2x~{A@kDM^wdG_>B_)$Kz<< z*WWKq^Ug2x0C0oD;L1hk-68)+%6_gXL}?#}SKTz1v5xc!{l!$JAn7;sT6K3Ws_-UW zA$w?TpH5=reTtKVBc9R6FfU5~%SZ*|06A^nIPbCIyqEAxRiWw#GNXRxH6xqN|1oyU z!;V)dD|EJ|T(3*;{Rqumwm@Z* zIy7U$gDp%wN!BJ#jd4e5blXmm%s*>sTcM|(K7k@0EsY7aC;L^plyP6(;9{@TdvJdF zu(%8hT<0x3B=*?HRCUcO$7OUbWS|aL@iI?KNzq0~AGzqn{L{AA-`iS<$$HgSScLA@ z1b>s_b?ztXR8QOcyb}WXt~R8$$Gphcp^$JcRDl1_?@LTBHMiHNpMg@C((e?x`aDwg z!t?C7OHwto2D16Vid(#Qku)1;!L{SB)ohGu>``6JQv6rl8P1l;qV#}EVo#)=12ez( z9de@+Co2d<;GPX%BeW{&%+X~mj9{W8R*_h7y0?PUTzH#=<6D2w(EPCKv3Gmi z9x*M`LZJdi=qyZyKJBe~JWvN(@zW}s6Q*|3HVHMeo#hw9IB32MK@%q4`e=uT{4%&f zz&Ub@ul={2Pj)ZAH@q+=rOIra?|>>D=ee7ITRlk}%INY3in9FbfqGh&ue@VwJ2|D% z(P1R_-f^<})AN__8~nbj9f;Bi#t4kikd&yyCXgU1`}7Z4(3xMo;Z)4rfqV{wk_LmT>?t+A$9!@?Cu`n2A(BjC6~qy$zO z*dL2kl!P7vs`{9C5=vm<0T(zwh$DW`n1-3HOV>_lqZ7={Pj<+=V(q-TpQ4IN7J~~| z;vi}DAjkLv0JsZedUxTbP(W%Ra~z{)r{@QS9?0EBNb%Rj+zJD=p4gj2odOe5kz}KI z(r&__!w-!DAY$&DfB+vu2}}MIfAhuj&o$v^bCa9x(e8S~yeD7DtIF;X5~UHQw2s$7 zJGrTqz0W-v7(Ik$`Yf=4b+&Z&*Cf`quno8yHQ$CQ*Nk#>=qD)jg%n+FBbPIMl$W{B z=Ez(x;H;^vkxgMc@Te}U?v~izMt|-_`t9`3{Vx58{_3vUvYlTfl`MtKYMP|7f|9Ut ze)1l9CgV}Crxv7E{xrqDm{&k98vY@bTU0mjstp=~E7hS|561Ml3>=fYnO=A&PXCB{ zC<_lmM&GePRqK-Ji5j%eopxC5wg~X*a!gIf zCeyG)z51A;sTJ0kj7{67i5Tau|9o&KRiafs7q*yvdFE}Q#qaw`t!{O{J-C^4uZ_ccn{{=kOkZ(Qi2JrbOlrUWt zjAHqA*Z*ss`rU!kI)~6iXhl>5-`^&){}7E%y=ZQc&}rjGDIWPXB%B%{+-vh&!`LFN zw6ktKkL`+gj-$UYb(~n#fUrZiDAhoX*lwcO+yXPXJCZu=gNDz)ac%B5q1;p$q_8$D zZd{y`DPrU~zDt&C!j$KzqU6Q`-JoWerRgLH$)OQ$i^$)Hj!$(Zj`IvNiDl9&*Crdi zfMaB_V#z5QBbgP_m^d;Q{yJ8u;T$eU|MnJ3Nt29q>1Y`iq)q1{%f7A=#+D1bxGkSK zRk2*-tnb6951EWi-Iu+&AH5$u3YehzxQHWF=$P-|2^T%;AkQ}}8ZIn+6Z$mMv%Iag zl-&~*F>k!N-|(x}v6m=NItdonz3S!(mGbFY(l4R#q?RtBX9!C6wNNPve`e;dlsqEh zPh|O?u`h8%4+FC~C|hBkVT*+$n9W6J1$#y9a|2DRyt7aBEJE8q?6@))o7_5KhqHXs z>3UA{HKBQQWUhKWU`dd?b`nrSfu_;vJ2%@C%8;g)AZXB58!XvfSstn6i6REz%?~}J z(r2=@3YNZL-*P5@7apd35{-0?;*@b`ndU~8+}>Pi9w|Dz%nO=fqFK^T(&*T()87p> zfME+dUWxa&aw!Pni&eL+DTSl8?w343xge(OTAJz4PChB-i^&}Hnu_fL(4D`GZZ03g z^b^bTK*l*z4pehdNxHY=E@eKt6kW6P@k9-m$|V)QVH`%7;W8B_DBoE&u`s*yrhe?B zUFvrwLyY?pb8lQOU+<((ea=m>JnSU;MenZ6*_s}>kY{+p#{A#^g?dZg7W}W;EieDp z);%Qp{MFV2dv*lNktLf=S>X8Rg=C@yLnKYyuHEo7EuyX&WW z?nqGf*TM%1^OC026xDJ}V%tSn?j9zy-POLm-+_{LMv7T#pqSk1`U$~Wijv@peVXQ^ zX34eMD;YKMP2IXPLVl-fKFft2wxgs}$+ahm(9<~Wxx6KdWTAiM)pv^;`x8m@!?zX1 z5zj!Q_un$ zFtxDm!(w+2{vPD`6Dawhu+#{eqR5qp*cM--+$%t_F$zx;qFDuSKfn{<$+R=!7DdqG zl)*DE8f<8lX&C3CPyl=a)+KF|5@I1@;i#6h?url68N+3_-ezwx3PlKU?g9H%LC1y~YVA8~)#GMFvq8vDz%~w!LCPH> z^EiMYtKKZAny5`8MV)uJxi3fyQmKFw>qN^Ktu?|g((mzS@DgR_2r%%Q(su`{AdE+J z3|I@ORg5@sB%kP&en#{e3I@`m-vmv5f`rcV9b8Q!Na|6gponnAR?TN*b}%5dhdeei zG7_aji9`vcf^&Jy+qkp~m*m1)p;U_O((e9>@92NivVZg06|2*1mFzo2FVObRoGq~V z?-d9UvXT_SV!lcedpw9`eZ-2jzdP0bd)3n4eH;H2{Cyoyn>?|NtX>1Rr0tiw=ZMniDtv2chxtB9Hqgt&YX@9vX;Z9wr(Vcn9jUzLJZN{FPC>q(|Bcv3EyV%u*&g? zdf(8U*(a!S12PT7$~kxzRIG}Gk1yqb*R6i2S8X5Qx%9^1dLhw3-jhoirFR&~%aVFU z!TsXIP+RN@t$C@?|G<+8RxEEIRv1RaNbF(!yLRr^)tI+BC?Eb^SAi#_jz9ceUh<1r z7=y-^yv*p9BdiAtGiibX_Nfo5R&0Tn49-^LyC?QHVeIo~#5&5#{}apHDs>z0i9aqD zMX}lGC!7AIKL9@c$^H+~>jLcf3@W!&s;)Tvk3q5ER%}%uSp6%kH%xQBmbCrnSP;t} zZRp+e{(fSdmxu#(SC_Y)yfa7j_dwuTP;zWhJGP_tMKp<)rntH%rPq7*^FMx^ca|7N zL>ho0&ZNX1XNE6BX}XLdk@|IppBQAx?se;07h9Hn2syp@J8g_~eASw_wyj5&p5)?! zla$4o#*&o78h0Z}hvzQN*mZ`zx8OFLfKCK6Ka4aqXjmn;3Wxl*lyEwf`=QI+qrdWm z$|T3(PhV99sVvNjt2t&fgQt5K-X>Wr+^LFc|4R4fIogg}np9ZNOCCmJG*ruBIF}=h z_)xv)E&87rH2sf@b^yYmA5gdv^xR_po{6?;4|R+LI0cF8TP+XZ-(&7UDa1)IAUP9-qRw z_%|RBJ5`7+9e-oRs}V!qdjH7)w}jy4WitJ@`hV~n6LMD-6~|fK_Kj;PV=7}-bNl7clY4`N_4~u zpoEHTqefR5=RWn?bybCKxmbHy~gJ~XQmHmS99dipO z;2XzLf1R-njL40B53R*vq{jCN;SEOMp+8pk2UMNF-Ces#g# z6wP4A_J5fA%BU*0s9ivi5=0sVq>)gv1L@mqFrn&t4lDLu9oM98McpZx!FuyZQeDO2iw) z=?KB4T@Wo^V7>ESkPat~PJu7}nK`F)-Qk^oF`3A`T`aBZ z$MZYHbQRgf68~P~*<*}X#JX27HQ%HW>S}ro45;FO{X4!G{{uYDR6q}CX| zE@S{FWMN^KzeZ9D9z6rN332R$SP9fRa$MkTxRu6v_k%?4zY6K9WWvb{?+0=RMb@yQ zf2>^NYj}1*n+Q2e5Qa1Bf~WP3eQewZ%+_pZz5IiQkY)GZVS$ec%?C&)=5L+R#y<*- zYctZK!PRP5xrUST@cX|f`h6c|TV#~XX3y(a(NNaELJLZ0SJYdUq!Ybu!vW6#wS$;8 zpl;4k+v@v#=IYyfK}~e(`<3?mUs}`u`*41K;zBJ(B7Z})XxZ4-xg~fDPXd!@{|lt* z$KEV&#gNep?b651c1b%Wk0#(nLWA%yO9+pid0(Fkd-ndt65tawxBvT4Ptb~DuOetE zSkS)wbM5s;`tD{+Y3NDHWMyV@^kjX%{r40NmssP!jH8`Q->)*eqYK|Z&i`YpxuSkg zLLn|f@z4?#mSJXng}h*qv0MQ&n}P=a^IrUa-@;@qB1D&3#cG8H1Nn5`ceHW;OH$&b z|55kM!~~@{z1uU#3Te81!yZtc{QUe0QXSNR4#Cc?O-E>0#WgLCqzRAtuU#vbox-*?p5C5D=*$ZRt>e|0k%_e(pm*JvgBt%~0 z?XCzjhRuzz+K^)D8k#^po4!NZHq+rC9*5C4_v4qN+}dxQ-{IUQXlHe=xF0aX^LMho zx1pB8c_Ut**SrB2XE;>%fFSA^k9~R{HApS+<$vD^KkCMNBk=gE$nt5KfzAL3mCOG=(_^x}sIN67P|E+u&JdBYVKYPl261RJ)oLT$~)N@%huh@Tw20!#xZ$ ztd`q_KNh}jOqJ+0S4m=0Cj#O?Tjuz!L+3r{@f=X%Mq-wIO$6RRs zs)9U2fn=$MNddb1Oh}&t6Lp&U_KNoi6-ba=A??#IsuKoSh8Y(ITSnM{Z)qW+T$M8! z9Rv#UmL74 zm~E+LnKx`3O-1h7PtBW2_s|^nU2deZunBZ@TI_Z<7JHR`jXm7|{J4R;|L4+_SC$$T zlTSOYdB)X>U=W=^OnL>DXCSJZfnSw7x6>O z1{o(KJp^x4o&r%2?hDm*RsoE{rQm!KaiVN^qGIpBq%MoGB-#u$P;!Zsa6mO3r=-y6 z=UnB4D{+1u@={b(6QT-XnF5+6sHQ>vBna~$QiTAa1e5O*`5fpIS))R`p0#jDI7E#yTnbu zYjQciA|YudX>}eZB0476xN`QfJh#*Sz_R>tO_21?XjFU}Xf=b;CsD3>JPp4}fS_h3Uo%kT(4lFgLNV(%8({S6#+=` z1jSeph(Etb-ta-0-NpU{5rjKt{<=R7SXvJ-C*dn`0PGEHlbaov!oCLnnsva|k)8kF z$Mo=DEo)|Ia}{M^yzf+6KelxFboWgq3)@i+^}6u3?dUmO*2dn|eB?&m!rR)p)1{=9 zb?1IfpP}2SMJ__xS!theEmYR#1UfClxVf#V7@DKwsXDToD-NzKnlaYADtd1lR7mJZ zueg*DdHJvWSj_9#DllWt)@Fr4%-^1ZFKUMDY%;8~N{J0`Sf8ds{~PgcJ_RU5;k;Gx89 z9#b>lS8K2Of9j{+u5Pd%x!1p?pITonG${3=Liww${tV?*ljMh7mj{3E1hqH))lFk+ zuQkhe5$+*!>m*uJb{{8Nn+tQZy)T~=vO$%`+Hr7|G&<$Mc@$)xa8RAtak0U>iRIQn z_VUJV9Ix&9csJS7v8atFL4&g=#PG2d(6_r@$=w>jLmP&pCQtOrI0Yq&^v*W*{cL{I zQYR%T%#;Q(onoSghkbZ@@n&f2bXsgG-yNL-xGj8OF}^xXxX1 zybmnO;n^rO6{u`_?}X4a2EWbL22mM(33yu$FdA@>!PK*d9vQ21aoe@D1d1FG=wZKR zc4)F@kA}VU|IT1G_J38(Dxx>OoGojXOiey8&4b?P6Qcau?FjydodBkOUEBK%t}?Ww9>rfs4hdqt|=5r1j8 z*()%&cjcN)(r~#E7_I^EKZcwt{dao?%0%-y#lT!Kt}>>4tuf-d()+x7rH;|5wVh97!71Lu(?Ct z@MPuZ4J);7olXmpyp3)XL>4LXPi88-WjpI1jK2Ax8Sio5j`@#=?NU?b_DPLS+3yio zQTKyw|KGMtr!uuPvItABj2mIxT*t)$0c4zwD~Dm^z4{7g6Y{m>76v1q9Ccf_a;7V; zyn~w54$jaDN-@9BAN;$|r2?gFb|C{@aro{mX*Xniqyfebi0kXcXYHla_##H-F1=@d zZke6Xv@iFic!0brFb0@G=deoc0wxK~96pPHPRc$ixeO>rGG;n5Khj&_K2^j^uR5xlgYUoiOz3j?udBzA_;yyHVXFzp1CIeYRj#5cc;QVzO|*51;Wo6Iknh1=y=9zK?XA;U|9CIz*ha#b&W*Py+6?in z!Kq@)$ynp7lR(O8)SBT(IlHlQkCA@yb;GL0+K_dsv;y-qvhy(RH9MYnV~Mp+y^stq*a&tL5wNd&od_BX4Pf&z(9^@nRt=lp_4j$m zydUT{>w(#sAGIrJ5cv!bH4zYbi1t|rPFS5LU%6>3fZGEP8NE2M1EwNo zqQ(B*C@N~FY^6;Wy`-d=AR=FB?hzzv!|VO+h2jUWGVDfN|9+Qx!^44Aj4d<|0!JD0 zEXP?XzGqb4bbTeFDkN&?Lz(~Gu~WXIQ8{bNB_88;1aBNXj*n6%s<+Y}y)zAP=j?IX z4qlml)IWvQKV`4{dQmYdL^$j`Y{yv@-zWJ?d58g*bY0*@*m%}DqPQ&NSEn$6ws(B| zu$O2V-{`_tSXQu8yQxRT{p1IKoci6b<){v;^lKHVy zHZ$b-TE#NOac=oC3e(SQ0G8hkus{W*-^sg24laN?#?>kIbRs6&Pbd#>X(Cu6b|5ta z+`GX1VGah`z9{=OFK#=GqEhuKYb9#c>(5Eh$nOqrn7ro#JtL^CAuLCsF>;?b!zyK6 z*!`d@fqMaV@pohJa%ziFsW8MK|M2?*x)WeDgyw+`HFu^xUPNhznjdQyyMlte?e^lR zqsH?d@O=bu8R+u5wbcuY6)CZ@Qv6I6@feEqig&ZQZvisz03>W%;C_CE*CSyG@y+qg z9fDCf9I~?t4}ZQ)&tp`N2x-EReYDWUcY*&&rUzwN&{rLD{jL?Y!TOH1a@`H}Hdv1R zdJ=^z8!e^*5H+$2-7Y_yYFMbXHJmn{-kWT6+djJY(R#x|Z+mx)Gu1;|`1oqA_Sh%2 zenn^y@l3x}#DImhLj6_WLbgGmHE)BD>R=iB5E0SbThPB|8{`v9cN_1vB#3NLbuLrJ zywnP2d#3PW$W_M2l)u)4eO+s@ME{nms`lT>@ES6wM}M5QQde-SBjT5?a|o=2?M}Xp zbX%M;SG(K3-sb&2^xm{m4FP<;bR7BvkURvtM|W_JMba&iwi5Z-uL}2tX=#b2y0JEt z@z@qIAe)$lugT)lo@8mKd~nq7Ry7F7u0SOt;I{YdP-8b+v)|)IE^|JXDBkz}EkH_3 z!9i^f?c#;}6jDA6|1cchcX2SON%L>53*oCsgn822d;q~8p`nvID$BAak%nm$UR3p; z%N^=OSeF(+N4$Ce8hUU@h%t1=)l#EKcCFb9B@Yz5JFoazthzwcbQyY!A&J+{2xz$J z>FKa_eX}}%st%`L71660)mD5ds=_-3UnK4Hjtq-|*);{spJT8g2ma(upt%rYTWetB z;gtXx7M2^kKFl((#_fX06a{DJ=UYT($TR~-otsAI-Mvm)H(!2}%93JCU!jdMq46m% zh<^JcOXUk8R{^S%fonEVDPQ%Km?mSibH{&$()QcB%Vp%{i=fA;92(ry&0%i@|2V}v z^POqEK6s>jK%#uWqpgnhwGaDhWW5Kc-jSoQ9W36f+qtANkaXYfo>WNw<3^eZqXxC zYT+M&i?SNs!$Xl~88rDIiOC09$7V=@#1Gj;xhL79FzA8YNC2`l*3^LK6AOf1h}I~C z#IlIST^N0U4!Gp0D@*n(3;|vXuws-+S16klcZ4noa9~g}kA(^c z>oibD<0K$uE(d>3zeL<%@5p$vIiB%wIk}B-nVR==q#E~#neF-K=igPk z48aRBOXq?F&xm!jY*a1m@Bd|U3qf(IP@Jt>tM%G48sTiSOx1T0Ml{R`Z_fKWj-U4m zxD<0P{yH+)Z!#c6g8%yp#f>=acckQZc?^zcZBKbK6v<_)7Qr)AFxCi9)Es)zJ1Cgp1=!%43;VEHA zUgxrX1u-u_0sH|)EK~=u9O-~6pM)w6Zzau&|JbP(& z&2xD zM7Y3!i-WYSkV#Rgg0(C*A)|@X6n%b>Cg^VEj{!4|`yL#cj%grCZY ziJ@phqK_!}&0K09!MhGD3%}Gw=a!%~6bj#bWETUT@iw!nSuiX>A0xF4HO(p$jDyb# zI9-#SP}gA+mh?b@krxy&-+_qb^tg{krLRE0(2B(q=r=Io!s)C8MPlFE$0npuLmPog z$EA`3tThgf&BR-oZqNAZZvuAU_dQnZrp31gt<-L3Aj+?>=APneQhdvPUPyTJ+wz5R z%yTAR^jR|RlK+imbrt`%-g$qaYUS^{`f-MBsp*5s$|mNs=804v_l9u`U>OvRY0L1M z38^0ceJcIL-PUmTI4leZMWx4f51;D#6zq!TRR3n&OPI}=MPMKp3>^wZFV5Qkd-D$7 zXjHC@;r0J45-HUm-weOtyfwYiL9*?<(&6Mb<*8*&ti8yPeKY=Ob7(~|E${twz1LyY zN{{e{;BSxAP{CvRztc@LM9$&l{Y1{=PT@>#0{oWjuAM|qg3L)>+d=$u^kG@5{)12{ z;_e%s0mB;hFhH*X_CY_WPtvRI0zIb$vFd4#H$Z$p_?yPy;6(^p4~0YcL+tkNFDn~m%}t>1mRN*sEk0DIFc}fo9oo#6 zmX=?l>Rv#l0HL&Tg&9T=@VKD0u>n>FRtom#xn~mw`6_gOM&rGJ+AEd_6VvbkboNMg zKb!}c8VSC_7jF(i1*EP3TLI@m7?Vsis9~=I8-Uh`1*yP6gQ+b1;p1tbm5j0*TK$6a z26gfVwZH+iKfuk)9fugW&>$RTI1q>Xr&3*i*jA-bkQo!8V*%6+Y3ij20&shv{(;u= zNfG16{eftzJ$B!5%Zcb0>}s$R`3=m? z1o5s~czHp$2wqXNbeN|Kua-Yg4~+b-Xqdv2FNF7wi0)|Nsh!qd;1(oZ!fA9Pci3pK zE!gq3E@~}#6$g957j_*ZWrNH{jsPugI(7a-4ENw z@n$Jb;*AKicw^QdU5nT|;XbVK$2kS7=V`K6f2=hkT-2}ZQx+a9?OiPjRXr+@O>6#e z+DAAiJpEZKV&mhCqhY1cKwbL@lrp-^tZ5jQ zA@=tWsOq0zra*;*ZxMhxd1XvI%D{ZErfrp+0zeZiBg3x>N!eI8n@r|_RRQCgFtk=c zLIvW6)M~MBJsfJ_Vn_5=`=j@S`n>+#FOykj?m(Zz=HKk0O60l`nAAvR+2tv0A zgFb-s;OB49tby;6euY^(h?7k6!3Prt0i^`43?#RA3n>!&`a<&$$ZXNYAC01ZMMu6H zaFK;_b`>Q$WY?^=Hmi-4JZ^>E7w}Y0PT`{_?m?sFL<$ByaKv_fp7U1!=!7o6@T2#Q zE@-)ZVI{D$X!4j_-%ZcDkEg6Rj{O+)8H$NKPng{Mc$VBqH@JKDx&O;MLP}3QV*Hd7 zBSC52d6{Cr7TenC``=zim4MoL;(S*i(Mnx(myGpOl>o?fjMPtDGY5qvDI-UpRhz zxyWv2RpdN9y)_gfA0F$N@hhP69pbfSz9myt+*hw0cKAWQHC>WrUFV*C<2+%+c4c*- zs%xZLFT29oCk2FYzUAfaDx!L2K8!lAnktIVqt#>fFuc==pDlPPNUXp9^cuP$y3}O( z-v(M1gFnijF{t6;4g&eg>+R8F(7nKY2#47R0zIVOwRu~OLJy9V6r2Ue0FA_ej&>9F z@IcV-OWwWG@c`0w$}2X92Ry$!Kfi@&h$Wbv#w}(1EB1gu~Xk$>Q6IXQAr048+33_^pl?N z8$cGyrEz6s&OjO#xi_VRkHje;G|;h86P|qo#bz{gfM7i7uYWY56QK3_s$C3ngG`el z*<>Ib`b9dw7=I~Cq@@_Nh~Z;)f7RwkGTY&8sRlkPT&~bq2IRr(`q~Fbnwv+1`4p4K9QeB1Gpp#I2vG?w)R3_xf$Y83Yx@ z-&HjOriBnu#-49D0^5KK+^53$bj}{KK*|*gaAu_a^=?=2POK0 z)xUj$4I3Z5IjvIrdA4$6O{4Jl&c&ni#iHM$#y`KGzPxc?tpwpRdPY|8n9um#E!_=; zE)Bb|^Bw~P%W+)JRU6e|$6_&WOFz4G<1O9hJ2AE2Lly9(pS|E>la$`{Tg;^x!Ww3FSrCH7nmrLO1cLe_0Prx zhpVSjGJZxzl%y5Cguw1Ezw4?jY{1{B=-Svcfs90$M~DYks31tUKrfLOMsxyoX9;wI{1DST$N3e8pLNg2GHo)PAO+9| zZwNVNg#~i}6reMe@7k?I&5B3#m#-j>eUz|8F_rfi|^JW=e9h=Y^jw7_$T}_nL026t_MU^uA z!US5)e|tNYYyGb+fDw@|{4wzI8;hYuK9gl`-Pb82W`J2O*cg1~dis{=ZlT zi?4|-eM`1K6@$z#QgzJ9Ayl3|6RR~1I{OpWTGPw7x>F*8cWKQ0I*KDHqcA^cb7eQn zp%6b7#=?)YWwUMd>pBnQ^OCqz*XywKp(k4IPP(ng)b1fRGj>5;Zo@w6PJq}pmCrZ) znl>VQDH~cjk>v15Ru}tN0|;1gsxb>V;HNYSa{n&=5$zfJdxSKFxHTIcM%t&#!}I{S%HO(j$4 zExnZ~QmIebt0^c3++CL*b45JmTeA2wR2g4b>3Ms5={1g~xnUN2_0jW@aLYG}`2#QX zg2vPbn>{B6mnIZ;r`_e5<6a5ZXw=jBdBrc;e4!Wrc*`fhaxE^p5u5FmvWls?KhEuo zX2Op?RpatYd*1P7<7n@z*)S%j6!_~O*-^EZ@EpqIJ{gREJZBxp-}pnp zKJ~GDo-|3uz;>$0V*Dy&b7to5K4O}!aeiy4_e$q^dl3mDwPyZIilmycu$;j(XbPKc zQ&A=6Wp%Zgg}luY9ya?cLdp3(K|;-6q$_eds^g@F8nQawMV2jcp;OWMn}6CY#@x^K zuMmv}gLQ1h-Z?F2+C6q|ITw-IJzGi!wq?Bcnqw#0u(C74w44yB%pCne4)c#JUK7S& zmR0v~dKYzta(rbe<6o;K-}3TfUr#+WD1U!WR%2-xbzS&{E(!?=fk_*PO=oK*txmwB z7>pMS|8sx^e+@)5og_@3EmaSIx_mb52l&R-Y`{%mo0jOg7ZYAgd5xb@9!@xP>d?)h2F&ch{fdx z?>e|d+o8POU2z)(PXHKmi3B9u<)F%CSf_+n%-9a3qiQ^(N1A&gEB$$oXF72CG|`qM$zC*-xS9Nm2(05QG-x z$8`M$CQny)aQQ1SqHU6Ub}tb{gSw(U_QP)h@EYTWeM(HH0n9nl5#$+!G)XM#vaFx(v?O652t0Vr3mM;v#=y9b^QqRBoW_u*=T5ImVu1vx;S9 z2RamAMU4vxXMSwql$G3*+$><`3irRqCh~?cJC?ZHPrWKGi&pD;JUWhS8tVuyD}&&` zs^mfE@*a-ZG99Uhkn1bUulG-%$*4wraIB1buZ$)&D2@5P_$kH{6iVipNrJrF(aGKZ zRC%~;s4%@dH}JkWeSk(Sb;ntq0;fCuHtDh!GZP|ONtlg5>Lw680;Q)GZT}#S)>GpgeP6 zw5TlQ7CCif^h{}bFS&7x|ISja{jkU7wqieptF4=aoi53?tI}C~@DsNU$AY&DV@#)5 zLdW4N7o4e1AMGDXH|6&&jSklhsFT_B1t|Rkmd@~ZV@8oUN;{6B41L?J@!&!MkIeSOcw@Y# zfnB%q*s>;bdo7whsh5aotG4wpKg2*U>?_S@@(xIoR`zTe0J?qy7}&ah$Jwz`VFxlp z-UXQaShmxE>;UXGdyPKuz1IT;2+#J6U9C6eTrZ2xptNw*Gvh_BCm&=vS#PJk8mKV5Z&4}}6H-kMPCdOajrVBPiNNZxKrPjA* zE3jB7p5IqjQ*kCo-^bTBFnMGVEvv7m>E|wSC$wT#mB0FfV986_cPVaf(ycE)Uo%O} zeIilWNlsTM877<3w=T6Hu0r(i9m3im1+lw>4QWs&4@YtZUO34=U3s19C?6%$&9KNC zxh?4{%Z)~nBi6BtU4S<`w-zd&UY>;*_7}nvlyS6a&O{fc%Xr*s8GnZN`{M}zK(;iN zMmWrl4wJqT@4hNSX3H}(3RVT89$M))0q(FBd&p9zeL9a?skA+i_-2id!nXV6>|NAn zcim)~X|QEXf9+&!xR{e?Y)h9Y8@^f{YMnMtlF!J@KtVwq$V!Q8G?Q-CI*h|Es`LD| zVZve+@Ak!d1A^=#>h+VhUtg^@GMx)lKfd1>Go5^ArOYTanA$sNL|Ay1MjujVP&xll zT<$7~>6C0EEaGT=c0{fHSNyQxVp~)8>4V1Alelv{w+DmM4jI;-#KQfqLgrO&BE=2s zTi?9O#`ty}Q`E5w;dJg{X=hrxV}vl{2y7_6w2{>?SI;cOB*I9Q*WhPUUDAJhO_>G% zcUsNa<82a0E{C06ZU18SlU4TbA+>}dR7zBy8jgg)RMq$8R|=&|HtaJAw&QBnW7>2In!gT^aVTKY1&9TJXE4nl0!ps_x;OCw%lRT8 z>t29qpl4~&5g>N}FlqyQ)+2HXC_4b6GEf<=Y#D9}7HSu$F~Q5K0=ttGW<^RK_-~NZ zFGDcilsE!;$$oSW`eg_{_1Rp=9iT{4FA$9l6No=x1kd~*pO00uWnutJgK+Zb{I|i7 zu#EWz4H!)pBQ;O(FP;@!CLP;#WGI6%l8W!x8pG~`4Ee?T-l7ixG@I z?5x|c7Yya?s&-ISd*11DA*U)2XsK{Q7c?c1w@m+K6Qo;UzQu8?M%c|vf)ppW1Ikwy zQjA_(b|_89{*#XXf9nR@X<)vBFikoPK*&^EfPp9-doAFPGUxj9?ql65jzRXGS_!y1h8(F8KRvi`iYehHAW;G?bgN63{GP+uJSVeh+ zvg?Kr@y^cO_jqe)dlp8;?}#Lw4Ni3z06$V{?i#4Hy@M_+j!~I2Hmpg4ksQxO^0KEN z`{$#v{Ja=Pk6E9<4t&0wj&)gA^zW8UXf-9Ht)^HS=xIc&nZSN;G?-L&9F zw;O));_lhuVcxk04-54v&0^;1TkkDd`4<{IYrEcUy1yb3DG-jn$EFc=x0(iH`a{Fn z{r8o7`|tPq?>gVNO?jVBZdb4USL)LEpmBIGRrMvq3@86e$>&eTxFQGcTd~vCfiz2D z`)mX1O=yxtT1^RDvozAG?QLW$mdU29vTBn`8n%+vpC;Rf^ zEcqvDI~nm3`1W){ssn@Z*OcuWGZ)zG&dPcPTIDa=1cTa!AO1}&imfOK*MC`0;aYT$>6fpnOZ-~j?wyWMBf4 znIDRC|M8D?L~(jc$W$J1RTkPrYoKUOB>czfHK2-sAQpj3k-hy6EE#_dnM>Z#1ZL;s zqkKgt`^?AO8T5D&+tlX9zAr!s9nJDGiHrJmOOSc5b{rZ%3#(JuXga7~VR!wktS#H# zH9-UnmcAOT2lkNa*;!rJZ5Alo_D{sB#KWtW} zS~>`t6JLSJ?3N&Giz1pXq*XQiFq`?o_*Zoq`m4LU*!BLn37B?J>o!wN9sl!uPE4CI#M*}<(xVkp{(S4(%$Fv=IV~T<05rGXSMM7Uw8HX zlA_dnnLR|rkwNo9t=r1qpMrzldDHCcRmN+V>}Shc3C4fz-HO?RC-hy+ZD;1{Sb~i+ zfglkX*|6nx&as!;JkIHox&7p_#rYGdUFSf2SN*!`0d?Thsh!C^qvK55!7#mMYK*nN zm*JidnZ`&Knlf#j+&mNyEo0oBBlad6woaF(Ij3=dW(lcQH>?@B7`R(jJVpG?h`SugCOWCfiy$CkapX~|Ny zyhf(c$4tdl-#xBK0+%rx+1gLNx%x<+d8xW0I7*xNhZcNCYo6Byf_heyTQ(`Riq<8o>7th{$WEWq( z))R71ZF7X3O?+tq8_oO3NK=XN#=)B%rfr8$a+{9ZB%$vOZeE~2DqULGkYHM2Z$GpY zMjW`7PMKC%ymPBit~v0nf%}YNeMJORZ)c9PS#K58J`kGR-M_gpojI8 zuoXsC$XiKdFraBtdu6{r8wFcJ=q?CO-ebx{+xxk`Wp;fEpu5B!3AD2y^bo~&^l1sF z;K}g{TL~_cZz#`gp)|mjsZ-(EE;c^?ea%ARipB&I5{Cc1qIX2( zJ;kGxzL|fpB)Yu?s(AYiAxT}-1K;aE)a#S@=gy+Uw23uWDrl?J`5mr(T!+(y1a5#M z0-HkU{P~STRG;LsI4jksvRcJ_cp}Qdp}?dRv6nA~bp;Vb4N#E4;AI+{;tskET7FBq z5`^-ClR44@6O3lZ9Z)^Yo&`eH3y3Ceeiy(KSVA}VDot&vWy8S6n|v* zQ}(U${Tw`lH8T};Lak#!9?sDxm({aTE9I;h_Mz*?I(wpshK`eYM-DQr^|wvSZ)=~X z2DQGR5x#6*?PV}53^Era?CLyp>WKSpk*07x?n0q)$jsI~)6Uh*Dip6;Ju>^Q-D%@S z>gt9O&C&FbhuV~u2b>C}_c;rhgpQz?1wbOv~Cwr#G`tvnH< zAsf7{2sifmO~w8;1irG-o4#|B$Ia>%h$8V2q97{gCb5H+u*>$}!_EFmEI2hE@6xuM zH=2%KzP(oaPDW!eHh+kEdpun8cn0CV>!UI;bm8h>m`A7~{L1i|5_3M~3&Rf^l25j) z1CK~Nc~tFJd;Jh6)x6m>AKYgW1O>CD;Bcs|w0@ zsh8uLKRsFwpU;lDpp79|O(rJdjxQ_rGRD!acID!T9=>R_Tk;BF7w@9m*4GecX(%(m z2o}$zo6#m&cQ0zDw4aY-6K$s4+3(eC$&aI5CDv}49j-IN;onyaJybUq7xkFo#Jvh} zrXD3ZZ!GyW-kc~*!|9cC()k(p%R{4vIiJRvp{G1__QPZs>`!LVi`~!mXX`=S&~l^X zS6DGnBnw1KR?&racI?IV)hd}HtVi+(AqvMW+WKdnx~sku@1# zm~14CC9%Lw{5uNabh7x0t!0*Hz_tQXfL@gi zb{yf#ZuX6zV4)dv?+kXBcfJ2)3Q$7`L8wjQCM0x>A<95} zJCrlIUP8dF9=gbfZ+9{CZ8ovxJfh-x;(jv54>KBjoNK;BC@S>c-)t}x^uK%Nkdu+$ ziWaxFK#38DaR!(8ZZ!CyUlt?n@PWHC1EwgKnv}k4vIRL=-m8 z2ZL|Bk>d-nK;#%FS)iAB2$|F?+iNsnCkc$j$xL76&@J(A_q0k45@FPlP_)_J}7gjG|E=iX(i6lU!v#P$G2J_^byMh%HfJ=ZlC}^XHyJIzq!5-mH^=SmbD~7$HWH{4PR^p6B(>&Ri?l`E{<`BP|R5yrNDe zy?uRQIwiqlkb~)7$AwE0oA9zNVrB{vd6_rDel-1PLt^=r zyvac$xm}ddF}<)0gOCfSzI8Us8S~P^^;(Z%rExhuFo%g{3BhSS^%5o6wAr4o6ldG{lu>#^;#he0eF?ixcC|kX`D`YXLz= zc=LWw{cfFp_sg(yR{cSyF-I`l4gcOX;ew291Nr`p+*Ez%Mi$KjfA%%WB--W()zB73 z9h{B~fArR0JT20l>B@WpaRECH+^m7xBT@PJcXD#cG*w0Q6gjIJyg6#C2eeF2K1Zlh zN$_W#ICfN6++gS-4+@JET?;q2YpoYy#z9ydHFJr{p5becC-PDoUqyz<+uO~p?SKei^cu-ykoRLTR#wY$&R>jNkpdkl+sZJm2Ge=Ss_q3u7Q(f zK#+|#%{II%rad$3eQ^8M8Z`g1va);EZ(6S^PdtW)X)}R_h87*%x9G+2Wgs7Q6nzyx zv8FjBDCoQI!;&s(494{LHblNjd{W*8GI4y#%{Y3=uait1t|~(0o0z*yb{U>t2_l|F zQa#M@8JG57?6Q1VC)p>6n_A|BzoH&Mq~5eN7a6>N%f&R?;fn2C$6k(*PajoD-`}G~ z&aX7PoOP=-Gcyw^!wB#l;24`#gD*^23Mw&dYrTP$0Rx%bo4hh|UzaMLG<>Vj6a(le z=;`V0vCgmFQlRPF&lW;g!+#!5*prZu@bKkWgtx^<+ADEeG{g8X4FgJ@rq!Gyy!cc?YavMRwz+h=I2V z)w^xx%-N*n#q^I~ou}A6{Aldr5yaoyIc!DO8!K#pA?s!*Z1AMLmM!@B$ezRk_lkYa zxzOhOl19S)1`(|fng$;}8FQS>a@qV4HVf_J{K3vaAY_&~Bi$a&R9C$d$jn#1V-SSW zy{fTF{RE@HEKe;ezZJ(3(c8+z*C2H>esfylnGsSG+A;zb+36y) zH=Cw<3%AG$qbkb^H;hLw+?7`|jxVvQjsyGWWLAy>tyI>o6P^iH#c{Ulh zv&1o1!akShIbWpg9@7$aXDR)T5q)42-h3JlakI0g5odmbH|_jqv&fS#(!0k|9iah1 z#_H?m@uP?LvbJ=e_BJ*wFRZ)2dGva-aHB?J@US5JwvM>=$)~qwu>`wztk>BhZY^+0 zm=ds~U&_p3MxD(`5Cp}mFjN*BN$F0>%-w!gSFz-5L{G|gJDo?bQDwC=jysf0q{EKj z-d&p=jT4E)j1cmMz)HWe^o${8j9YR^mt{9_S}o%uyw(H_4%pi(g_2D$5NJ2a#Parz zum$y~(6ZMi`Ufz{)`5pOm+J4uXsfRhwP&p#dH~BrfCwT5m0Vr<@KG<<3F5tO;AF+x zNumtp3%acYsEvGogT*a8pNV^V6y`zd7OtkQE=ws!$*+Q9UGcH9LLBWJ(~(A;_)*(s z((Bv_f~53NN(rLHXxRe(O8Ryc)V*$Enc*t*%mFPLe8OlkL4v)%gV8Z}SwqaksOkKa zWO@7~#jFdp*fjiFPkYlf<>V>l4}6+hgYalR3a>9@6O=O0YXp9I+ehubli@^!=de69 zFMaDzrbtpROZW|A1XUkP5RHw)(UYf7hlG=qjOt=gPpPD+eI?N>+0zxi2^(zFZ&1l4T|4>#~vndhT+>8MA>DtUv*EtHVS(YqktOqq@wNy#hVM3Zsopp+n)BadGR_*{9u4(VCFwGpgA-DzFG+JJ(P$%FX2Kf71 z#Va_W{#@&q$WT{czf8%6=5MHIB*7mTi|ebaCLb$k=?GT1B9y7S&D%zPO-!_2kz?Si zq6)W2RR*fyJSsj~N=(Iw#h-)R9WTwSt8>j)^IdJaoo6QHHyxGOzFSzG zTp2>7*Ge81KE*yz%9TWW8ceyGR7l7C)s#K?QDsZP%*n|Kh-Jr04Lv|{Tu#!5p{M#8 zPZXaZ_yK2>1=;7{^)yxE20p#QBt0SMu3wPNTS-!LouLiOP4$Ti2go(SZ;e1qq zv=h6hBy^!lr5uBeOeddk!f{oSb!a`;X;5Qv6hDXSqSAcQ^)^)!VDEd993Mx2@r!^? zw1|&0mZTvDKim=L^Kh8sgTRMcUPjCvXnu4KWi7@z62wENL2hofT%1bSK<@16clMs= zOuhXih+mh3_Y(=(?AjMv=^bwHY$-lTj_k#jP<2oh&p25SUu@`foe?C)jmpY=Nn0Z0 z$)78hOxwoK!TXM6R?YhdUH#h0r$;QVg=-jbk52mge{0;>=Hn2t%}>8$FvX|9eHLSO zpxa*FdYI=PKYpMY5teWLK~J1TjQh+_qO+>wnP__;%Ti?)r9!WE#JhZ+N17R@8X31W z26-e*Pb!n=V%e7ca9(M*lh?14evkW!R+JFL*5O{H-+@hYKc#E0!vUv6CCEq$V>mvu zpZ#;PLxhBALvhRjd-GmyOdLlRd(r}zRK}8V2jAyp>q-eu4O4vlYp^O8%J;H-&|CAU@^Q3{4RiY}Avw@IcAy>R@HfoiYLuB-lUrHSsdtWPg;n$&(SA&(ja7z<8PFH zLj$eGeSyZWm+voSjpf|uDEdj#7%^5hhC3d&Ctt39R({2*$|ixieQi^n?L8k;_H#Lz zcD4ZSp;z+PLn>L>ND2~rWPb7``>?(CH~)QY^Rk?`3BaQ*JJc-{i|k=FZ0lNfzapsu znRz~{KI72WdTewg2)g{>2h{Pn26uOUg<|RpaWK52Z@ViY(LgSveXU|JEij28_peBl zOU-9F&ll8DJ+Ru|9?S~K%gg(GZ|B(+q{Dz47p~siDOhMDrMAs5NdR#gN$<$XaR#xU zRd|x?x9K|PqNXMh1(a~eMl6IMfnAV;gM&D0U4Z>2GguD>X+b#K73{Ku@u};~JMnGq ztD-6|0GACJ7Xwg8dOtWTI5?z%xgJt~63;mUc=KZP%1c0HWM+qM#0~5~-5_wCZ^O0; zF6Wf`3X@ivkQ<>y`W#3{VK9?a3ItT$`o#-Sn#2WDP*T>x)(QGPi4&j!ah1ZgaL=fr z26%%wL1y24Q30hX|N8ao=g*(Z%YAu%=?+n2$-jV->+bFjnnFO~JIJ}!Sy@@T9&&SM zG;aw*2sH0yep9ckH6)80wq1CsqynhV*)<^DPm4OSBXu z0H@hnS=9hl8kP}eZ@6^GSr{47@ql*}ey9ShPe@u2W6r%@WCiOg{Dh4 zC?8_Q{wmSu<)HaNses2|Wo6}g?@HX|*T*J2m!%$(u0Ub#yaabETtV~e!0g1H%SRb_ z19prmB+tLUXlpaQr+TZ;fnyvHLa|pIG4RxIQy!hh87_?qxr&4gMvj1CQZ4^mNJ=LxC`~BRNwjcfgEOp{e9+51X|er;3pn2i*s!PeP^@e^b2^(~@@8dc?aB|`yAX~)car`{| zK#l0jOtva3d!M|#Vo#sfwRU?wkppalij~#V^GNJdj#?FRvOVsxAIY1QlNZK@liFJ% zo4Xur530GCnC=M+Kj17A8&IyKK>I7z($C!9+$iHWwEbxMI0|<#{G>|fc@sgl!QHf< zd+&8`jSZW2{vWo!GN{UMU0b?Cy1N9VyF)^xySqcWyOBmhx>FhiX^=*`OQgF)I?lu1 z-+VJ?=J?BT2Jl_1b;osI@rRl7M1B4WCzDz7YO(m`!syA-W5DR#Q5**9<$KF#xsn!? z1>zawlPs^4n{sR6s$%S7y!Clg?GI07e^;6O|9UwlrOS&nJFcs_=&Q|qQL%(!hz=^3 z_0eCXXvz%qrl$P)o#telgH(OWS#{c3J-Xqc`$7x5{;Z{5`S*d;JC|;3ueZsJ8|AVx zSo&cExVaO^^!5Z=t}+5gihr+~(94*RQA6A=6oa&Vq>CF&#Ol3Vs=W_+=dQJjK%S@Y)w-Z;7Mr z_&Ddl?4@`SS=vu!BJyR@V#)FHXsF?rxD;6_phd_?my~;SZ@4k$?1P~f_&6utK+$#o zgNWche)-c-cBLR<_f{n?Cng-JB@&8RQp!VUV3W07CD=z3&MH7zwZGmGkcNDHe29pN zK|T2reg>*i7Oyib+HzP}7@!7p1#{4ETKyRrK~{JuE-nVEbNBQ!XaeWbs~}~|-`_u? zyVwqV(80Cwc%}6QaEQ)*Vh5gqFb@O`$B?wWfB$}xNDNS@LQ2kSYHGlw>_;1P53I2J z8=iqL7AWQJj*fZ$>mL{_m4WCJkh4YLQo)D#8rT57GBCmI^3@{%uphumJ!SC~I1Fe2 zz9irc8GWC4wf1-oC+G)k3lcrO6+lN4zzBT3k3NEQx4lz+KuN3xDRzKO6$l*-DT&8o z_~s~p23WGbCil?i9)ck@pS(Xdj8ZaM1ha5og4}W$sKB;*J~Uamp8oX(&Y!ilwRrY` z4PK+JD5VJ~Pl^v<@2_iUkbCRT8|Nb}iEJZ6CL*2+iJ~MYE^Y$OuOOpQyTgYUHovN> z1Eh#~5hH8oT>$J4zy;0bwkMH=Gog5$fismXVg9keNXLf&lMoSnJG)~r%8H@3bVUZCCoyT(yg}JN z{qTlE7s!Rci(@EgU|@g@II*35kUd_&ah3}i)k?7rh}je|Y;3_nMw1pu7z3dBkO21; zk~2Cw8l;eRf?qta$$g#WWAfmklvGrLmo&W<5u5;-JoxP|Mj$fM^wT6vCB{Qc#CZEQ zkVD-h;FifqObpVz88i~~*jaB7uC}l^G=v}l{*$%<*8bD%Y!m`?eh7ys<^vcP7Z=?> z{6IA1Ysd;;ud1Y^Bp|8T+@7t+e=!T=1Q>}2M_^dZdvoZhLcq$`)LtkMvA7Bq=NNDb zO#neML5P~4f^6!0k#r-BN&&wG^m}70MW~(u8IiYMfm`5OB{l>&XhxwwZ01qZd!oS| z{QmwPkZ68s_qi1Cw@6R!UpsbD^r;{Oo$cN&ROnqFbNmD)zxy{`uP%0^5Oy9%FgEEKY2O!V2@IJFPUfq%bcXw}<^s9ORJSTJ~#jOBmm&otPQU-A6qbh*fBVY_25 z+~_r);7h9j7aC4mR17~pvIox{`_tq%GvgpLj$hw5m4M^I__5LPPeZ?DMj5*39MV@V zy^48l?hZCJ@-MW+Sfhp*Bm5IH)VrpTU|>)UTDg~;{!;UwUKxk|UB#;ZA&_z*d3zYc z+b8CcIPTPI;P}-*cCS5k8>eH{V^tW(OO!9CeFz(JSfWHCsQGVA(0sH6yIa@0pX(v5 zvp?EGahsyE8KR#>Nva}YJ7#~Jpe^8e98o{??aRe+RyDYs%uQaGas4e1{BpP_o_6@O zu-D^huqU8I`clzddgirLU7jAMQID+3eO+O?raL+zs<-RM+5Qki%kQp3xa?AFz>Bg> zu=8y8qn&{ugq|a4c60-a@7F9%yCQd-@}7`H+;(&jcDjCKZ55)PeMp_8!p!^N*%2tL zdwoQxxQiVK?Dv%Pn*B+f{#7i<%6oSVKLoLtPOQDgl7EoUdl6Mu+pml)cn$uhwGdx0 zQsA;pcE2flMk1+A{#!A>bMzZl0c&&R_ud22$@@*(?e|Z^3O@NP7pedv;zVLHxsc5x zR{XnR);Cm*)qP4Aj8#m&{XS@xR#;`PDVg<3Y0s1X#~+3?7=Kn)8P>m2tiQ`!Bud4W zt16xg=xO}0|7FwnL#xikd^f?-(K`KjhtR1u)1udR=JoV(E-G`eh=^;)QeIAF9x+To zM*G$tjo!0~igv#9S5GKYF2+?t>}tO8JO?7x2eVIs-^*fWWX=9N)bQ9auVO_jIEoCisz{WN#L^Mcgu--a!i`%`~~k758%jmMDs=grU%IKTL9RFfcH1b8~}GTJLgE1lCO&?qZ5}{ZFBZ#N0BgXbJ`;wvw)P%m%Q_1s z*TlID(3DUiga!5^!3JK$NNH*7*ka<^C*DWo7SdIRX3sXpGeW50xHJVWEvDk&>Fd{?U6% ziU4A~Wh@J{S2f)IG*)3zQ6(^10Bs9&(}Ghk!+s-+nchMlAcF!Ot(R_a3DDET$3Wj4 z`YAz>Ps3=)0Ldv03A@nhZtrD(2*!LMog$V=C^kb*G|oEu(~N2L#s&?KC150?adL7p z)n$YLNB{fnM~@0jRXpy`M0520Nb8nC64Ilfb+d>J_F^$>|9I6V0k7XY?m-qwaq%9Y zRR6kSxDL{FUIqNJk7Z<4s5N+3yl!l9p5==`=K~^%z(!V9)(Ib=CIzE70J)L2aiIeK`cyJdl0|Km|CDIeZgB~tTHP*2O3+xJOZ96`V5k3sea5HUT+E9c&YgyL0jz^DOuf(U$%uS_VYi?SjaLGmtPZq8*l!xgd8j~(n_B*%RTX3@|W9sP+ z4u7HC-bckOB`T^t_(?#mx<^0Wgee@a=M$0|>*hEjJuD0Avf-sV%;R=)<^HM8glc#f zNJJ2nyL~F2tR`h$%%;pvU1*$~kkN%2FhvDilY$QZAIfsFi4VQY>E=5&HnxDjF%`0l z%4oQi3u$cY;uu7xM89C25;+r&u@?oZbDwlc5r%Rt#?(GgD`=eCM%W=QZCnjd2VH#n zD+yutj8OXCST~(a_uApfN~k$J3ONv(DQSYR{fFK1HBe3RP#t!qt3qT^w1ePrfu8WN zFknSc03_fby7S##m;gyOKsREHcDJ^WNd#_(nL7*JefG@qD=I1gEMjA6Y4`z14!VN5 z+qpwnl?_0h1|QbL*LW^Awqk`GkY=MtNJ!{{NS&u(Y@FZN$R&7I;ACx0AH57{v%o(l zAB%Sanpe>faFOwbfhZVI^KFfcMDK&+WiE^~Ry$xf+r2PZlq&FW_1PdU%r0hN2d+h@|fVs#x^#+nvask3>&H0&W`-2ITJv}{>iWL+-u1NL4Wxu2WN=1r|4WnjM3aUP- zupbe&VQo_rkFT#USVS&Hjo>eux3;!sDzwx27`oX z(A-c_QB%)B`ne%W0es1-`>JnvE9cafn=UXp0fr5hg{klri0F8D(t15%fJt-*6wLb! z_HWw7#qr?cD4w66p|VQIWSwBGHJ8dEP#ECRir|8f#@=5R^r}pGJg!5 zM8QN4WkUuh*j@7jmW5cc8gyjM{;epg8o2H=|K~dk%MK8lgy#>`C?FI=6C_N?BvdIE zA)+AO$3F!gJv}-=qiNLM*8eo-GWmJ@bLp_Uxnyl?0AEv+(WB`?iCj1s+x%-dk~8CD z?TZ4Y;kyfmZKGc}+jT)M>hVgtR31$mjwF3pC^`-f&mW~mbSrK-nf8Kz<3~#r;gS`9 z5X-)zSU9A>`PQS{$FWf;mZHnp){dRXAl-UGTu^U1?#19O9re!KQ6fkrsehNXB2{qy zNJ`$oS(pm{uI679(e-x`j41g$G*1vpktw!5`+hGf-XI`jsx|n&Nz^0x6Hg9%RO*?! zo@fI4MJVp5lZqxpztiBm`r4fa>!q=6q*5bF@qjwl7rKJ&o6rOeHM>?Bg2q`F zQngu6O}DFK#Ld$gcJ~S^;9PblYL>-sHlVK*-J&SEX|2|-GmBzNZ~a$e+DEl#u=#to zc=P#`LD5I5~r3G6RtuSELj_&IxMyX{G0R)#Hw z6rxDZ8z9855?NIYAvYlW+G6@0}~_D=-!#M#sO$c9xm1J;f%x{5^Xa?SbL+vv;Sp zI>S+A@C=qDNK1kRm`Rx?n4IY;IaS2y)$yCL!w|MISH*3wNd8-^7mkd!r~S~@@S!uN zLPDThOot{4rXL{5izu+20bUnwbF%dU`yulwHxKIB3>yS-f z#Y{@0@Rs=n630_nDRr(Kewnh6YGGzkR2CI+I;@E>Gc#LQSO~;}Ejc?oQ7QfF*B~E( zby7huEVh`K7y#MI*`J6Ij1B<#CqP$Y-je5)mEq&#e;Mi`ZwZ4|?RS0vX|m*qd?523 zl6NCiV`0d6)#~$SA%HB8P${zrhF>P#Y4j{8$Yd_d-0TEH^9#9H_rc4LS-;#mK z(q}g}FQCx4y0{pdn4JD;o(A?bz-C^A^(vNv?oXZBCuG1F4L&(J;b1~SiUM<=k!~rJ zS{xDY6p%`JQT9(x)&dM19NuUYRLsq3`1E$xm_|o*6o&~ijg5@}Y{>*j1?r@gq+~xp zwL3ue{A*W1{Tv8LAplqbbr8~*^Z+Pe@Rk5&Q&vunA1vj-WE3FEU%#REgtGzn#$2YF zPN^P1vlM6S@~DL+BRvP6)`l(Mn;W|9QFC%)_q+f+0|f=8mMxE}5B&?jAoL(jURW+zqYv`!_(FB|aMYrc| z9OvV`B8(|GJMf9{DqU@qQn9^tz43st1wtmzfLpZK9T;B0%Cz$LFNruA+C12WlwQC9 z&myF*1l(mnJ5j<6uUQ7C3pixFfM&^208C#2uIub9wwp*C9xj^_CTn^|TH0$sUin+v zPoV47((H$FE_iRTBlW#=J8Q{)@R3d;&i#~2SU@@PQ%vej( zkd43OARk}4T$Iqc*_?TeAZxgF~xt=IAd zVPr_BBAi*>l;-uP{#c$OpE9d|p^d&0;`X7nooCk*{tq?JJZ+mbw@rE9vn|-OmizgA zKDV3lXPS(M*QzLJz1-=m-4oebc{ueK4cZKiT=;0l)DC=)YnvEZFq%o(Qd%}h%N*kr z%;I&3vBzv@=af1=Xuti%meEG|(bfQcn*VMm96KS|HS2q-fSRQTLx1Z$tB0=dpV7I* zEGgShGki&9u5`XvRk!*KP*^LCvvbXlJ;pamt(2pce`T9fgq`LuQxg3vD}4)6c8))P z3K}^1c+xCTc!=RYGtZm($0ki9G>~5#FMEC&)1xbDMZs9df4EU#ZGLIX^xNVbl*R+c zO!H&%d9`)Vm}}}Gr>#`xWV3Ch$rsA&57En{><%i5dRYu8|32@N44pOz6-8z{-<{ta zYV*AOxZ55K{`lTvadtv@)uJacZ#l@j@`{BwvDlR?FMBMxSkj%J*@eK9Omowv;$-nC z+eTlNa97cM;^}^=>OG@wE0Ysx^Cd#Gi5HDwwJ`s`OccH2yP`>7SEzNfc7OTXmum)z zy)(G>HkA**Rr0quiL8_smE)~_SYEH5#;?=3(q{?Y&T!R_pym^e31ehVE+omoZIEB5 zc-(iLaBy&7c>`&qGR0dgEGz&-eke2C)uLZ8O+jSxB|_b0mgIY%93Pn+ft?_~gt5l^ z1Sag$wz`0J6eco}mOJ0Bn3o9F&L*OJb5jT8R8V#{|M@ry+IA;fV2{jGi+?V}BP*6|_0@p^h z>)H`mHnp_0;KgQV{{^mRXIJ|wPR_aVl9I5|Fn3@^4(s@J z2Bh7uvJPM<1OaqAU`3X;_##{mVr5N1cvUPhf7p6cbF*k5sEyP19dD{`!QE|kYAT2Z zU?JZPI)$!iR}>@h5M_ZHuM+qhWTmFUbGo>=q;uLxGEa61fpQN*5AMK^WqBtrFOPQw zo@u}Ry$EKU4r+hI$lz%=aR7$sMVlCpqgV^vdx8I0~?1V|)S2T8Iq2z?VQ zA|qpf!o!-u(hwL3(QdqRa1aR-Rwjx`WV{<__Qr-Xka`BJMqu|?40to$0-8Dm6s%$Y zE9D2`eyuQfhbK=m8V|zR2!4wV>cXinmkj5VFYsRgzxI6YdH|kmqLk;Hb z-;q<`FC(&|dEX(R{0|S5shQ|-1h`p#)=VJQY3hGHvmipMyNnFI`F;}8#=7e2KBpu# zPjxL2C+M9VGkt4DeyL!FIupfIDrn z8CmfgBPH?92&)Zo}$1J={Un< zMlQUX^bNs#%F787P>;s`O7Yl)l^CK3EvL+`1uK8F8Hbr}on2OBSN?fTdv5S&g;5v3 zP=zq+e_1czcNev9s?N<%SM}?8Er?5qZ<;WNxwPxm({a{P`>HOGjfG z#$|aE8-O2-lR1OGNo)H8gfQ2>hiY{*w@YK|se=((-9ob_*9*zCz}I<)uW>CM?pnvR za^{k1#IDDLDj8P0PVU}yaoxA2qnS9O~A%zJas@bP^vzd1L&CJQFMHmhg;kWO+Yd@wK; zQZpy{%?4F?&TlGsl<8>W)Aew*ZG+(QP14FolZTv|92|jzm-^{D_{Q#R-#pLGku{{s zV!rqF7PJO6LN`@ zAK|>63b!+FHug@*{yVwT`h^3N&b0)V_wP||c)a8bZQw<3ghcNAA+4iQ-3W35!=v;+ zL3o_eM6Jn0()tTT!a+mFCnBwVT$rEN5Ep+n`2;*RMFbO@KTWLJ$NQ~HZ_+@0Ht@Tn zZqEybI|b0P;n@Y{kK|-%i0j zKgK5Fo^XPSOU7p3IN=I6RPOEC469N7IVjK5Nw1M#)!5mh{8_(RU(ks~lmL)L zUlD8i4odk_BkX-_)E z!W>eNl-n1a&LSk=0yr{a@TjarBLv1GoWk+O>Z)B%h?;Ktj`H*-D%Y!al|K*aZWvO- zd~{MLiBg6mF&rC2P;uPfR?vCqsG^ltThr0u{L!(m;c?VV?L+*kX~f2WfiuU@UnTUB zec8|b>Z^)P6dhZOg+ zxp7l%w|N)(b9t-xRtbI~6f#?UZv8xt-})k8(LMFlvjZ%gNgpdxJv*7QTQ?VaXZgqZ zZ-qt;TkV^p4Vs?X2BKKN)fyJRny+oQn9v1Y)~Fm!Q|q~{pP!M5oL#|%38AEU&4Qk( z%S3<%7fJ5lSuD)6RM$TeJ)9l(_2gD$bw=J9Xlw@yLoJ@NSYB$5Sw5{#yZUBOB~FqZ z+sHw`2?Q7{&W>`>HD)g>gby|%LeX^V7L$79k7I5~oJ{7s7gMoG3}RQCHs&K397i5Q zd?}CRTD*O$J51qx7P_!W{&C7juN?U^BoKRcw~TizC|k_eBzNk^m?Sb&akI5)sl3dy znfSdg*{{Oe)?eA%*Pv=d_`#g&`Dx#5w#0AUAPQ_*@dQ@!1oWKBs@cP+>3ZLfszhd# zRNn#e;7X4!den9$yQ`SkdcAp`IwZ%60pn$La|Y(u~^qkr=s6oYFQ=Oyn91q zQZ=Z~W2!{W#V^)BRo>dh5Zl;YH{ImNv%j^?5eUotaI^Ew4_Ga5 z(s1_V)Sq?|FQ^;3(Mut%%8}I`9A0@WfP~U_8az`6U1W|i^TG8$Q#&?a!gf1;W6}cl z<|15eR76e=X?9z=4gxcXuMwbE9^RZ`Bi@>RsfMf@_ z>;3S#bJDd2PGB*+kHCL$okjPNCH~8oFJgJO06YQKd4TB>V{r{>D z2zlR=latHK4}m!bD3M>}Cvnp!zBQVUWv0D*uC_WDJF!($T$KY{pRqOq9RlpXnM*T8sR7jVeu^I_SZ&O=t#-HohYxM0BTbt z5Cjb7zDC14vIom4Mt&p$XfP<;gLz;dDlaMuC6e6(iUTwvo>%pIZ*T7_Xi^SdheS5Z zD9*)PQKX<3>|N@%mWYY1vXfKL$2=CH*)us&u%bkYONl~TYBiZF8fb2PaRwxa#r zw3L(-%^W=VsT!^w8;}RhBD4d~>k<8{S2PhkzZiF>0k|P|Yg3@%`u4wi(AVG{eOX)u zCQ6La?2rXL%2EWrMmY596{TfmA3K#p`r>KQYG`L}Pg+lbd1X)s%PX+nvjAa^&spo? z;_3?Cc1<9bt5hL6TN$66&r1Fmk1#uPjHp33ecUysMMN+1_+N13+0>`Pg#{j+Kx z-p5G^`t;!Ff3mEoZP;xibi1?d6EDVd_;C^P&@hto9UoeQ%~wl*pn6udq(}6q3-fxq zyOg=%=rE>L#cW~yUYqs`RdPkfXnMS!ui%tx?nfo>fzwUs*lzy9!9zvN(8uY5s!p@o z9OnA|0)HEh6ET}lteL11g`2GX)QSoeb14haYn; z-ffr@J#6EYb3eGH{O@5%LU*UsAw~)0=bA_ zq`eL&^}_?+-++PgcC(B`Vbh}p6%8$%2tE@4%p@gpa&mxC5PbzOP*CxpYdxm=KVx8k zVh^~)U!=SQa>Rv5+JJkr!e^w^@jrivp7?lp;?+Htq-Ywm!4P=>rqiT6_n_<3)m6|4 z!0C_79}q+UVEzPL#{t%oo{@pniUv3!Y(pp^;V&R+9e~|a?!bgw8Sqeogi7B~lNSO* zK~QRf8o`9$FHPP%J`OGhewJpYrY->d0S3%hCo35p3TPM@81Z3w@n3cff#V9GZ3509 zcu*CvTjbK)8k?KL)&k*DsvI~wq`ClN`u_gDw0IBT#3lGc3j+EIDjti7o*r?S7>w!H z$~Q5PhH4q>m*SkBw8<{Uo!hipjhlpf$kaQme@!4}d`6ehE+tN5Jiyf@?97 zGd=;naR7jc*e?!+He*QvF#TMq5|j*h-ALIXt@hsbmq{j&!t(e#xJ@ca2QE4Ox_G!qr0r%0t)nW(x;rY?~XL(vT7 zR<@TUoliM$bPJt7kgA{#GnwvJ?7=X|O3F(jbSBfEdxuk`&{|RoLE$EbGyFpt?xSYR zX5F*7$Mq;dim4SRo!#y3S&f@S_?@}_9rAfKvvSE1Kkv)d ztjM~JI)wOc1@Gz25_wdNmJPel{y%JuoN=KIKId_Jq?_f~oW{HU&4_uJAWmg=82*g} zy<3~aprw}{8tTm(l+?-%vGrixJs1o7jx#O|eWBqYGhTa5KPT3x_r~GJ${kZY+ERz| zYQ8rzVW60c|2_;=pFr`Ytt!P;7ZsM}Whx<6pIcLbafKRBC)kZf3v0!y3;kBlaI>QC zKa+>;etFtvJbcoxz`yOx6rD!=TzT`@!>wOq;wNDsx1eitHKtySJN)?L`(b9r{N}qc8A6{6 zoomyELd_bFT%Zs6cFXdIzclXr{nx)@W#?znNy>kd>6+tjHl;PNda=-bS+NfPV4nVM zSx%sHI++;FSXlnr^1G|ul+}%nm8?y=6m z;H+&j%UE{|F;^(L%8s<5Z3^1^9NH`GC^8(=W+xnM3pXcz-(DjwLuVj!SvH%rewlZ_ ztF1?{U0d2!3(v7Ct+$!N*O;epqtA6%Z1~nnyx?^>qEmYmB3#cy)YKE2g=}_AV^GTO zr=Su%9pj=f-m2!qnvJ6Q@T0a&&y3ifbESsKE3& z92YGsuzTAGJNIf z(PUcFL%AC&D$Q7v0)hG? z5A;an{RARw_Vq_2P5jYU;>*ScB#hzt#Drpm7lp$2?)KlvlN3^afs zg%S=9P8^cn!`oZD2UIr@*tgWv6CC!jb1+y0`3%hT6I|rv>j3&$fZpBSp40^AxRsR^ zG*Y40bO3NCj9*2G%qt+KP<-Q*>)_u&d`I>{=g7>=ETz2vRU8{T1_18b zAxVP4o`Hy(nu&MXqL7|~WYD$s_4T0D`R+xYU0eid0U46wuhmsjw=OJ05>^L zHycJwOl&MiSOHelIe=A+5vVZGYz#ZNKL3d@>Ne*2fJq?q!HB1Zwiw~75&lBXl%;%F zkXV_}8JBEwxI z1khP}0NZp%Vem%KA|Z>Z0ts|sd@PVy#WbXFBd}xAgToj?M;#9J{@;{n{an#I(!_-o zu_B$KG}T+qiZ!?xif>}$%Zvlg#B}x5P`azn$PD&i&^qxqs<9F^mDG*iei}ED7uqkL zMzdQu*O4hcoBln5d`*+MjZ<^B$DJ~*QL*eq|NfgqhjBIAVj05;tO}Q22Pr{HuX&X~ zxv&}Dxu?U6DSKXLC#yEzh*_df#<(;S_HX2Uu6U!lcI za4jQEY9@RAfuAZW4Qi?94LBwjSloIFy!UNKDb;l@b%~)e_-MwGQQChW-haz7oHwd^ z>eFl-{o-5XTCms!+F5ybH|j9g z9PeKjGxm*(wsQ#THeHp~{W<$A`$y}vN7oEorb;58vW73K?w?WyqHkb0rupuBMksOf zLzvw-+4&~C(}G=5Gwge221sm$wvA2dP2?C+i9GtR1>aY3I9%Vp=NgNCvK{UC;NBze zXXj#FVzUtgJ?Glrx6=~tE^OqTQ+ION&VVMgIJI@l{Ifvsa#1ql_Rd1=o57bHKb|hz zxcLy*PAj{*W#gM2W2(dUvwIC-V4jg_$-TdE0VkneYkQ_$eJ}ZQ_<)BV`Ei&KE}0!g zvVsMX&H_twj!OFWIbA8h>2WODXUp&)PVv`>oZO|@?jkN}yXi-s_lOQF^oB5Z8`{2y z>-0F8y4}^-tC%fs*JPqTF)@Ap)6)k=VzCo}h+jZIoSL_Jt*3Imh|57Q`Xi z5~%nA$V4Tv6!Bd1*u6W7d8mI9ymgu)PKq+=!@>C{iZXI<=oM+wRSfnvvg9GC$S^6B z(cT5_i$qhvC%DqYBSyyjmCFpK|*l&!CXeCsoXr?-oExrScdr3~ENM!TjTJZ=7 zr|?pkR}mBk8cfu@5eZP0=)-IfTCjYD9lkHMRFS;o^!TrQ$#!{7Osu z%~l_BYGS0G0QIo7U5>T8i=fab;n~eSsrCiw1KL}!p<$d(R?-2)x5`mbAP7rORm#)coI}OpDFIN*_%VXgH!+QJQRVs9>yQD;@frDwsG4XPnqU5q2pSo3Ci}Z z?=j_Lv`T8lPx&gyl#KUHkk0j*@mDtvw>?>TSVrva_ zTu-K&%_QYEaRL)_z1I7q75t8}HucW!Mu#zOciAXr&Q%>{eD|i?wHoDz0^hARR2I9c zBdey}>+RxT>!T)Z&*)1Kedjdr>$VwI#7ARdW0yDlju>+o!gEbX5!7nJ<$C?tGNn*?TMtdbJ zDDQ0ED)%3ybu&sEVKDagOG77N_%CT)Yoy+%aJyHOx*k06T9Ec5<&1w~_)Tw$FCoEW zVx(c0=NGrh$-MAG{L(GOk=CDF3n0}^g9l~R)?qsn!G;+;emP)DE#lX zNSGqJp)MZ~dlzhh?E{Bpjrk~nS9UnG7Zw~3GywqtI9Yx5HSqd4TC1DdxQEu|#}^ZrhvOQxX6e}$MynJ)bZ8$zeW@HLKyni?j&G?=39jTWVl zP&P*rr>J{;fbv$7ORFKq_Pa22)%fCp9P79~QPZ&xc;8jm^W zS6x1R(Dpda=Mg`9#G>^r>=}v zOJx*p^atq-scUoPm(ky?Bjn-DST$B9`POL5Y%Xa}cNVstaD<)j%=aQ|cyUwJ@Rl#) zUF(|k{1=`(E{Wu!>*P=?UcT?eUUnbg->FYuszm=QE8cxh-gn(J3Ea(JM9tYSB0Py( zc(gnSm9A_T`p4nM=pFCL5L)T{o1pDFdy=(t`t6Yi{Nc~uf?v0oDq~WA#*LlFYb7b$ zJJKCGhg}{M4#*PW_HVPk3duc2r(^YCba zz41)`JYbfIveCo##+=LZ=mWBi;PLOD^`})HBcCm5->Hv3yl-vZYdMo|kRu@cvE@@z zR)Pv$N4RhMc%s26Wnfe4T=lfY;LJ?*H_BouL-%2<*|=@m_c?SIlWW1xrp|pZl2Co} z$QXHg`IOHzYjmWX)t!A|h1>Se=W*?OTr6!S#P$ic{>g3Gg5mVuB-XI9f{+FDb%WOI^!I?z=+w{5mbpFw>9FqJ29v(K)|qY+75- zFX3|ul#u=AezLydz~j&Vzu`YT9h#$WLO`|_&@z#1`g>jxIUqY^AKiK_p3O1hH;6Q` zoc%ugDk4*Y<(ClP9T*sh!)GrBo}URD++m7v81Zq+L>sjNyT_~hn1l#V%IO#raA;c| zmQsx6AtjF1s9P3(K(TRW@WxJ)93pv=2*5yBcnT^Mol@e)36#Tdr5^<;NbQPrCv5@( z#Ti?IiL8S-auF>hP!fWFmm;vpijZLT(uKZNj7bXdnGp^0!F=_s;Bi<36nX%6#rbm4 ztGpxgEyX4~MZO}ZBn#8Dln)pA9AO=yL_ba$z&7};ot8&dTAEA&C4j9EEl{}*s=XO@ z+ff>2$Uc;)a2q<_`y1vPY-u?756CdNEcZqGB62Q~c(Yqd@d;(_@Cx3CM7<8^Cb#IJ zG!Y+Za%reV#nX8(KI!GUa|A+4Q^L7QquxVuplj#nN52rjFT(LDz8eYRXkMO(cVR#n zDyf}rrVQ>d9a2QQ7h%JQNI+X5BXU)gA^5sPJs=GwCA2k6pA20|rg#E_08e$t^C7{u zB~GmN3~`3={L`hqVZzYEDT4o}Nm__~+e{rs!3?vt{Uq%0+KoY?6zba?O??RO0%P<) z7Jc@blZ5J}+PcV5Shn1Z6!AQfuy znNJy&y7m-|LXP~n=(_PcTV;NuUQ?ILJ9+rCFlu(Q)62G$DBhsjzyviv)2ODqabMta zxc$Q@FuWg64hS&a!TL2vbZ567Yf~Qg*z)velQ(0mlHYCo`lGTb4w9T1uB|v1skg&8 zEfZa$XUPspi+!iV>10C*Q-y$+@!fN9N#$w(cDtuuQX;kAp`ga2cM_icXGh7Q^_TIp z=j)+i2Ko{6zUIEWX2yDvTO2K)gf-~sK8~W=Ow0c3CaPIB0sX&QfyTxG#>UazJT1{i z??jEz)vW2tnM0hsa;Vg&k*e6PmBu9|rGgep<(dzI?Fg(|Ik_DwSufN}_D={&>yeaX zEfk{jcN_cDHHx#|-`~;j6ZEF6m>iPSQM+r#Eq0*v>pwenHyns7Ft?0y@zn3nFM`=( zcub9rOd*aZ!a*OHdU~ir- z99h=auU}JB=`_Mjzvq1W2A8%~f_aEoqza*kDnejqRrn?)aB-U^pctb*j3b?rh8yJ_ zrTW`@F=Qnc_^Uke!n`+Xl(bQr8W$&dD%P=x=<@dkMgZCxWeluJc;^nSh##EK^aeYR zpe5K;x`({)qAh6#(=hddoP)|)lo5ljn=W2bNE?D`k4TjGD(Z)=AeE`o9s?M*DpZyI z89!M{i0z@fPDF;N5L%S__NA2Z=iSQ zA7EVajFH#Nj71Ej3v8edxRoBABbmM&>073#$aXwL5tW>U1Zcct<;AzEAmcd?l`@5w z3~c-uEwQ^TVQK+aR5ZYPeI%#%Am)SD4&$z3dS)W{*D$RPy8 z9!t(&4OgE_O9{(}W?U#|T|*SL9uj+#U4v{0?&nx94jPzBVvPcpG=HXhJ^zc&P9eO@ z4U1jTNYv}d-q+VVR1Zz~Mwr3tW3{91Ir0>kaoJ&jwQ41L^sP8M^7&f_p8L=358vob z?A7PnZjRgH-J(pinSGR$#((A;)rf6c^=J*r(R9*r|7rZb(_X#XriH!Z1aU z5kgrS(^$@O-_Py5@;{Wl1yq*X*Y*oYcXxxt1JX$6LwAD$5`qE((nxoMJRmJfw<0JK zDj*>xBBjzuD2PgffW(>T|K0n2zwbNe8)py4-b45B2A+GZx#pVln!ii>WV>Oh_$Cug zk2&K>^I{H;4ei9`f}g{l-=2ZfWoQvy)#ZraoRV($%VpSooNK9WoPG6V$Y=EVH<`nc&sS29-ro_r6S4GIva#c?`1o^o zx&E5F50P?Fy|dZ9$91fwT|Q0gJNcnG-^cxmZ>4yWOub7v3LL7bej&V;S1(SQO7uud zzB$d$DHV&ZmAdRqh`Z=yJRbY1duHtERr6n45@Q%_E7Ox5t)E&?ZJwKk3Jc_`FWvpr!gb2MlK?BYg32h80~#m zU(rgy4=l10F}SZB0*NmWrA9W|V3VAZLS=;-Z#4=OF)!;|6|Qk4mWascIOc`4?4_%O_XRG zd9Kuw7~I<}%4tx=C`VDm<7ptda9Gz9MDjD*Fk_o;9du16aR;Zzn_J~HB$ab#70L;JDAwMekx9mN;c6vl<1P1Q&S z0kvJfi=z7o8`6gvXI$!c(hv%~5_?2^cXBh2k9}pgjS~s_C@5`EB)RX$L`k_R@rFc_ z#TqLm#W)C@qbFu$DcQQe+J06|coXvke`kba@!;5gxpx`2wU?^S9E-m`{vyq@QVgZC z3=Ado%Ix&_MmybX?ax z1A$xn2EyNR?TuXNN({uKP+CW98{IB}9aMW!^9f{#@3=*4;2CoP!JuI1B+1htOUdz| zCRfhf>A++-#AsHwFg@a#{ow3Cte_6}JOnDfRoAWpD_yRTLbKjkY~sUG%vEG@28^xeFF(a|v~n!d-As$pip>C|kt z`*He1^V|`o%;yw{yGf649$wY$Me5EQTA$V1=eSJ@ci7OjM$6mi_!&D{nGwo9$=Pgp zYUg@|=}Dp*D!@kg$X&|%$yMXX8ht;5$+9VUEfF2YY|hM zzkT;YYMkW_$B4}c!>(RaXzA%zep5MtPjOAWq0e+Ts9Ik7)!M;IVnmy1kKAwNm4LFX zQ*oj$#NA(p_dh?T{cfguR+TqI@y4kM|Ehj9ZFFVQvnuyZLUeC)C2mr5JZTf+wHKW# z$Ll|WJsy=an3*YPz2i}FJN~(GbM_9YK6C9Zqg?_%b1gAxA8?fJqSk1}ih<(+0T%50*b)|bWsg$O?(6IL4*JR=j0o*n0 zWhL8*7Uv^N=M@ufC$WBxj4&|Z46b3~K)&wREGo3XMPX}F;^TXaYAP9&l1fQFh+z%p zU}pRE6X)4Hc1wxA3yWC#5rVwE%QQpa)iv{s*NNnG+Hvf7Sc3zi&wKh(h`3L#4s~k^ zcho0W=}S>O+3vYk-Hq#_rd;W8pt+dXbInmlj`Axr{xfd;u?naJ>qfrKk&Q`r9Gn@* zk;)eJR^+*T)cmTdrZQ7Mz}O}lpKFdvXZC~6?6}T@@j*s1M2-y9@({Py&3b06?G_%_ zZJJsf@C|lSz7QN>=r$E05V-xdO31@-^)O>B$gp4X*^2;osvU>rY|%ZQTgzrW!%tqF zzTJ)$9Jq3jS?^~>()Ip&j!2W9Ql8u1a7UF z_YAkpC0B^+&c01)o^^k*@k86SE9COeJBbVXH)S47R^eVg3A9V1OMUAy!&~yxpkp&3 zuix8usn12N=tD}R3q2;QiA3PlHE3uZq#jR% z!MDm?`TdQ_r@C9t9wWRls>{!!U+q3B?v~wu5niUjEUwu8TQQGdz=^2S!CbcBnm2)~bqskWH*5?9suuvtK3@ zE~Z(6443XxI=-fnl1b`wbO)tlfmZ%{kX`BM`s48YrrWBZTgKEyrDARy;%nSpGe{jM z#1$DK^I;WVJ~k>c`atG-mHt0O&UYqiud9||V6sg#_2nwTU~WLUo`RdC!H*%>Lj@XWRaD>CdZM#~e@ z?NdHVL;lm}J+F!vBRkJ9t@26nw{thCejKxRT;YnA6<)@*K~P`>Qh4ESdnavs?d*7M z@62V;CvHETuYb)Fm)>ZYqgDtq#=~z((kh~?-@sKX5WnNWbP@vFb?^dK?h!cQ*dr`3vqgUy z(Y7E6gWuAsnTu)Gx~5g#V78f))o^lJtQFc!0Dov7UOLRYRA-mhYZE5b zr6m0Ig?;DkFN0CzT)jMm9B=7mpA@n@DrYgcqJAey_ucE4kwr}h5&}pnY9(c%kXoUD zYePJx`AQxEQSn~bhF<{5PZ!Hxk?d(Jb=~gAm%-z=xe8=fu3Y+kz6 z==*s<1;00@Q8B*Wu`@Iws2S56g@fScjtiwxGpG_V@^nV&YTspwi>CkqSzq99e{wv{ ze89p&FjmNU)g3+1@D44IZF4kqrK$vU@?9MULCDQ-kKt@R9*Pzfujw5f3j7* zAsU8Ej1MMEf2gwOf1UO`*w@3e{#$&1{SVE zvk%(^D6ic@@Kc9s#zk*t|4xjt;Vnzg`2mBkkF32lrg8O(3twr{ zcJ%GXG-XKJ!llaVoxhhy& zKV76g;ii6Y!$@(uDI(E?Xv2+VK~BKTg4069XHs)Xxle#RRFKa6^^jz_1Y=uE#K#y! zp8vo%d9$1YKAos}j`$7JkZRjw9lLESJ96tDp4#Mv8WHS%Tt}kx0eY?siDcf}lvn0f zrIfL{R`Ia~5v%RWJT)}tW(sPAhK_q2WCPz61aEB?6bi*tMzSsPaANwWYgXpPgkgE7 ziu4HJBj0cLyhr4!*4%HebU1xg++q_T`pc`_eKE+c$fexSF{KMcG?cML_$L}Mr{6`e ztMH>RV?rAaZsK&6(o&H!yfUEe;Y%)|;xfb^bBa-Fwtw}+zQNm6?tQsvWc8}tqe{1u z;X1QbS;Vc=hQ$WSn1D#-?^4}aA4sYSH_SCZJxTO4pkh++J?W)NW*o>pz-4Yt&`Z=z zeR~!6Np%(7%PP766QNDPo3sW)q+9o3!oo2{?k(NRY;jMr$f|o8LY^I@q?kAb&f%X0 zOoW5i4#n|nN~tV^lr2i?{j7CwE8M*y=xw2;XQyY^_<0%;Xl#(d7aUiE`(2`dY9&GG z;FI8oqG`TaMo$*#EfN1&zWM%zmq_hhbL(stnFTsX=@wb+qIE>HEG%+N%;?91stToA z->Jlrs@jmHx8FHtkH*FW!#uV zTuc=JHL5O2{xc)|mkV+FHxi%!hOTN72T~SbMW9!8RA7cs zQsOb^vuE8iv6B3LkTNv(@u3ev*u(e5qgQ6*Ei<4T?VW>M6XNN^5!yKARAHkaRUH4i8jo^<@u_vGFS;J@Py%;M{|o8)ItQgzJ2 zr8}c4ysT_8H7%*D6?e0KSR$tAb|M*y_&sIk4k5Ln5v4M9Air{aKSHf=cbYXr87YOk zbcybCnCs$oyPS>d1qX!ti{eRoHw^oK1Rx0X9gA`}guB1ity)p%cMwlgHAys&4s2|V-j6AU_#>vf#bo9mQXW;a7|rs0CZIT5 z>uED3d{s?*U?LiPwTrVf)^nAnC*niONj2ReE307_=PJRyVT799+PR2K)pRuE%9UTf zRIMgFu?;Um#kS{THGErXeP=PnTg|@=Uc+k>Dw&`k8(Y)SuPJ4zru|k*8`z!~QIl7T z#0sg<`l>(9E%(Hhu0kltdXE3fyH!>3uDU#Ibl=^mwKbKGpNJmcS~Z$J@H9o*_)-)M zQ2S+GVm1@rtF-%J{dV|yd4#3!g?2>jscFnaQ+1I)700h?HFwh#t5X?PoQ~G?djEiD zq%o>Fi3`T>pT6+4u#Q@>Sv$DQ5_YpMS>|DVvA)%2CJiO^f_sil_;kr;&;t7clR$_1 zgQ#eqR%48rPf0nmaVDqWiS*(Av5ayKn4F?C=z+I=gR{kqS=G(M%M8a z3jzDgvxA3T-3ssHj$qgi&>|rRn`|!WVjtLYopOHdPg@S7bFu4&&j^yTP-&@G7XiR3 zGcAvojVkQ#{5<>y1}%R?rFFxf@ofc_Wt=6v&P{lu%OXNDV2_Qn9xA+$ZFoyyQ0mBO zt4O__G5FPI)Tj4xR%R^C&lZPMCb>iJ`z>xAUw2PRWxZ2LE-1Tpd84^^hQi(3^zI6i zziN#QaloUQjc4u!8%H5+@#ZX>R)NEgBV-j=>JPp$A%8qwt^2-+T-PQ(;Gbi8b!XmN zSS5o{VS~DpJ<(tFimzXtMC|P2yr2K&dfHZZ7}Q0xo?y`+=(07( zQ~z`4&F?Pijj%=so6YnSbZz250jcF9n}x!c!+UnAc?UcR}DI%WsX4=#nXoY>_S| zN)ASoR0U@q(V5y~l)6jQ&kxwrHAFr&dyAujx=A@rymoo~?! zYpMBAhQ4raL%Qg1k=RQnQKGI&-eb?lh-~2r8%}0T}nwL5go3qigOyW)Z;}$cfw>mx@@mYSm zePDLWI1bO!gb;wT!6mI_nd?~}r4er)`(A!NGB zG{H10cKNKZrS0DS6tQ%?MCg;}hjDn*p~Dk9tvw4Hy)3^&j}!crSL(UXD0=eChn;`) zZ-@~$6?ouo`7fo0N}MkHFX{O+29+;Oc+aQG2}XN@Hrc=YZL_g;&x2Kwb&KpRoR`V- zlUUXzg2Km@EldkI?|xc~HTr#=m~uScAEKY;Ra+Ia`z=F#u(a8>e`t0~`;(_-Q1axQ zlACPh0caV%VNKcu(p%(Z)KsoiG>QbQxnU*!*-`+p`t2KjiyWS4T#F_iA2yz}0dhIaaY_vT<20)pAwV^}5rq2ZtqkStM82 zuDLpUELiT`vc56lcmL<8;|uk;1m>UbLZtO}HyplkWxWVt^Db2nM3{~A=E<0T2Ea62YnKjh$?lGP0OeDAbI|Epa4_{-3$ z_?S&jYvRjoXL#*KoBb;EnHvWcGh6EUp}+d?zts0yKl(bqcj?ti6zVodv=zg=#O1c! z@wGO8>=+#RT-?Yj!Oxgw1ELrigl+DUtsgoJTg*uu-xZ%r*$8NF{1sw%#yRj&aOlW+ z^xbPQoq^2Hk8UZ^-JG?*I~`-SbNA)y(PFiFo-Xdouf6M-b+>8{B_7Ok6rNTPn9q6% z1XNr-n$Zu^B7v)-=5G4&N6bBmMLI}U<(g1_4uw>4W=uLaL#TKil#d#JNIBC(LJ zkFhNn^fZb2$J01e*a+X3Nd3+-?kaF^)>PiG zPmQcrU+1>+7moqbM7O6=5-o?xY4!TP|)9%|vkY7;C zi!&r>Z6~UW%`|5oCyfQt$7=Ph1sSzdhA!1#oyPhT{oDcE)+HM_y{~#6YIzjh#CwuR z4V2j6{{D+lKy?e!|3zJ>&Hl^7^SnR=5?W>`5e>>&k?%g>JsOM9uzKnD7)D6}36`0d zNh%|VW$|p>(3oQ3;>D4ejGg`WWTE^THK`b-X|WotAcX&AZWH3W(24bwaF^zYB8eyM z;lsOPesh4(fzhbRm;Qol8c$7P8C}3CZ{)*=J(w1#P!S>na^&t2E$SVgxN&54h~#C{6@G)ET-P%gFU8|E~!Y8Y2sLSEUre0@q&czBF;yG#Av~)n~B8+I7;rS ztvoo@T;}EBVu_UmQpcV(peDs?BHYsNEK*+(lxic&2<7HFMD*Z}C%Hx_+?}V?4$~qF zQR@1%SjriXzLU~GT#D)t zLe!-;U!FEIDt%~{?U?E#<1Y{#@32>tZ+PPzL)&>T$pXJ~+OtT#dzDOzG{+DsB{44B zLc9i_Jl`n4W_!+VIzsAVJ77YxG1%8jWO463U6MV&Y(eWF&8dS*(WYl)ck%J=*`4NY z|K`LP7R2JI7ESxFaDjw>ONT+j)VNzWmlnvI+|DLf*m{WHcXY6EbHk9uo8DfW3jlpk z#yWZ=L!O&E;VSAdH8BCnJudw~*{~?^L4ZVeC?FsJaK8yjcAHQ^XBdx$v0tgsW68Z7 zm}|RvGmd#gT=7P5@T+II%P1rclM?^Q0~OrpD`~HpDIeS0+Z!kd36Z)LVXxh}bB8r{ z8%Ci4qSw*UF+qkT9xr4rDJeNQIRPTmkFQ^|^79#KXySy^b+*OOtDSG(E`Yf^e3)c= z-q;vRZ?d+s5_fGl-^derKp3+I;7EaxT_Hqao*8(2VI2}6 zJ? z$NFn&6OCshgkv{*FZ0s9T}X9f@5NOWO8UHey*cu=!E$3^IMQJtg1CqZ!`&OvQy`}J zGabJR*XZB@of5rjXEnujspE>Gnfymu_VZP&%ao4K7Jt}x=pPk?Bh8N8L!@*Mz3x~R zmBx6w9DlNNUeK-o9Nn3swOWt*!X9t^);lg*$awKvEUk40W0lZ^f2XA`&ucBP^|(!# z^MrqdA<3|-F+eq@lSQ9@;1Xhx>cN%b>q!`+?4ynvcnH(j^}Xh;1+_non?Kp^0IV~R z@E63zC9y^TPX*QtpmooO=mEwB$VXQfmnjhI140IFd5(^bX)N60;=VBaw4?%N+a-@5 zGXX*JxU#Ym3@pIY2-Nl;ySp90Y6H&fW!cE%SFdDo6#z~Nc$pEb7Ta@^YnZx%krysRv4kCyNl#2o-MDe%p+Z<2aD;{IgM(!!X{Lu^Q2z}0i9*A`M+2!HEZ%6Q z>IV;IVa$Fw7}E0LV6e6|xDB)UK$msG>g?(YJN!a}`ve#T%gFb56kN&7a#L^L5|m9Y zN_;LtsDXgk1*TS=om(Kp!l+LeKy!eOr4Vu?7N}AKb3QPC8rU6ACND4Vl%ACpJMr$F z8@Q>$xa|4pD~!kP?e2oEB?pCK)u+ZLaQhCBT$tVm*2DMj-zA)eKf_!r?EwU4kJaVn zXqV;M$P>W5fWb#ve!i=t;~tRhVJ0+o#&RMIN$G>M0U+)e@OrM>+gEDLMcyNoj<)cD z@zLnRJeYo+ss+}=<3hr(x8T!@h=^FGFEL{rD!{I3HL0W2Rz;jb%EH4|^*dFazK0tr z5;vgXa&jF;cK?+Ak5iRIYW`MT0W@c-CNidgt$FEU=>jh}xIobfqu5~JpVX`!$1Q?1 z>;|*IBwKoJt`uBMfYR>l>tqZY6<4b068fC2&U?n`!*h9z$Az9-NiNP*JHwtEMb2H@fVpAW;!VuFGj zK&(VXA!%r6EZl%92B3oIpO6lMaiXKWJ@omJ7~n`~4kn5)Fbm9Sh!MUp)5;6JS7E!W zWMb+gz#01S^JkGIIFrKn5VE&sn!&}*jog93K7cUb;yXG}q2on6$CQr3 zbl`RL*F!L!Hw)g;cl&^S2RkT=EnnIfe?K~tOD~_6np%y>8S$m5zRn9A$8LZC-qse) z4aUhJro~=SahPoSi!)lz=cmFNF6YG*7DM{` zBe*%1!&<=nH`@?~Y~y(HPO}DOqyJNV2beyD7Xj=lLIQ#kmUTHG>G!gPjf2xJI4ckm z{unKL3j|bUB+@h9h?^T+E2UvU@PY*cST%wPnvBQia30O=XATYy27>TPAaEQ5--rZe zC*jisU?9Bc%RD@|s=zZjx4L2Nou4nbrjAcc%q(R48b+kSe;3#lqd=9lK+Agf?j39u zH{g)CKp@y(pPlaPgeg3Xki)~nqA8$@z`4AN!@VxnbDj zOYk+m_QsOkwdAd{DThar2m6?iQCbajo5YI(6? zU_=2s!EL^c$r%t@xbyYbaT0~_S6!W*HOm!wlc8SV|45XU&bG8q1)~+M(gBtdY;9g- zD#K;hJ5VsA{s@l)KF7PkK>&8x1(1-CSR`Y5NwP5Ue+r{azj}6u)AtNsD{Sg6%6g5sT3}iv3^tcQ{W|&mtI2un#zJQdY>OB0V*wL!WiWRPV8LLbfQ5wx zw8c|!euHz{DII}f>2TwQG9^H3z2NpWS!ag~2|0m1apmgO7cDJCy}P?UHa7FH!(kz~ zox3M|25#cHzfmQxaXBY9H$aJDVU?eQ4z#tCl9PXYsQCo`=|zuIQ}qGpeTkocm<)UI z%a<6Jd))eJc{4@^w8}tYt7GzT)y063$*eT_)dxv($XM7pM!%05W#k@!3DRNO^i%z z$wU6KMeZ37?BOkqwNrT6N4>07Wq+giUlD@>osk6Ki=Z&H&XQVMdyeskUp{Y=7&$5`NrVCmcVnwNbU*cKrL`uPcv0WOR&89FR4U`99 zrvc5GATb{1n3w$_ECXH#yf(&%hgZR23xN%((nf6;bT zGjxM8Gzx72xNLBe+?Vp^3J5@>_gkN#BPu!+Y(K_WfV0E|GZQZC01KT3H$EPH8EZuu zYd9td;dGIZmZr}Yl8lzPJ$DR&p^khq3_>YHFYqoz4gp((TJW0A1)PAzAPX}yGnnx1 zoPn@Qg!K0Fi*-2s6%G;a-1!Np5C(_vHYx#RcVT&qUK-XbET2aA*~DEq(ZK`uIe5-e zf>TH#@bv)M^IZ_*ch^_290PV-q=BauC9(z0GZ8jks;rKL2Ix5G)d zVQ4>g6At~!i3u>Npw>pu6(Yz4kW~>tOzY4_>uy5Aa+gKnu2}dny#9_Mh-{r~YlTuT zdYTK30K@ui>;TOV*jKSz!odURIUwST7zBcgPQK(wXD0>`K-2Z1w6uVX18DZ=VOZy2 zSf;K09n!{ClZX7oEAN$PC_bd+ofm20ot@2d2Ff zWzBKm!~yMd;+0>}fn0pw(}h)7b3966at6mE?9}IQW@ThhdVR65w3Gl!t+qDbrAt2- zy5iuYo`d=I{YZlgdt*?A~`=Gg10|FVE~A> z0FXtIl98bw!X||6!3(B7(O`oK2R14$scrf>xC=oQ;r2vb1m(`|?vLrFCy-|H+*i5* zsgU{Ot5|pwb?n@dk~wn=k@>K>&&lv^-*ovb_Bvw-U~xEos%2_fF1%FDrZ)BAoZ?jr zi3)U)#G(NV@4q&V*V(^Ri zjczjTGm@?ks>E1XZDBv2o8*O^$`XImwuIo#@rl6|=Jl7si3ytM(H0qybz%86*4M*g zdaAs-Hc&mhMb(PwaC!r4~eNff}@qTp6}Zjkksz#7uUSgQyJ2iEnTnCJ0V;Ls=s>#G-+;eZY9;D-z|TE6Z= zB4l=u(=0&d(8%I%{in#b(}a{zar}4ZrT%S>$}^DA^nq>8+qZ8a^Bf$sY72(V_wGE& zg@pzY4$d>Ajm;Sl@!;X53w9a+FMW3Rt{$W_(+$p|aN#E>^`LpX98>={7`1KR=Ih3iS?{)p(oOmGIusvkJx44C1MYZ zy(f%-fsy0GouYkxg_CH*!b9-Jf_!_JF$WH^E*6TSrlvl>a?uL~^|MHM{ZY(4iExh}`0STz^v^Cklyf48 zK6tj}@g>n_iu_o5F|HCa5x96keg{jI<$6sVx+30M9^$$QEpr1t9$tN8V_V=JG!yvt zW0p<408ZlJQ8<9vkFy)I7at!Fk*T+*XFz1+7=q`n9`!ON4vvhJR1q;D4Lv=+jFGqp z#2ZMFM@W9X2I4o{46F_SpInVdP9_9<4OjgUe2laxmtk%JfxC>Rw5O#Tp{SS0f^ysK+xqPuD!OQUw#7PI`YgqG84(ylpCJ2yOCtp{ zvmOz;GYrMVAJJm@s8OtLeE&|MU2NQ-O1Sj8)QO;D7b20_5i1rtdyK7|{Y$~`d1eh-(+nPyMg-;lQ2Dpp$=Vf-ofoMEiS zRua0Ec`PmcuUdgRn3_;XcMO}L{Kx)&{DS*nig6dFTKZQap z7V3hONz3x>6O{f#K^Ns*FB^?Q6Xv8>Au5hiDMnssMNeyMAx{q}DK7SiFK%cMOUDx* z7IY-nKw=z5RT7U!S=1Y>W=rd8XdE1Ue*%ZQ+LH>lXQiYV>0e^Su9;}->Z&T68SM-7 zuM1(sjnj~?@e+w^6J(eJjEgwCs2L}`leU_CkUy&N?% zHg=xYqGBEE>f(SX0A*XS)$Rd$kS}1m*mBn{jH?jh={o7TGIjk?j+`tkar zc}hpHdX$}gh#;>49CK|+iD=mAF~HY$;ou58I|cu-2r-{HJvLJEVbWpCtGm;hYOh@7Tdp)M^jzjCn@Dn{VA(*|DWa5*%>LZp|m;k+9ma4f!5217Cu$lxYEUf%wJ z0T(a_fbz-@I6NSl+uHnaG9=O+Mg_Z2BE5@RohXic+0vk7RFAru7+u1p79nP$s*Z|c z99P09+f}AU80$QC8u!69bkcZi5Z%IclaA9sUIZ%pl=mz<>@nAD4=!S1lzu^)gkwHM ze96Fk0AWLV)o|d;pUibW(x=@d(mkW$UdN^Mf65JW5&zMHeiPmFz-uEN;luRp_q_Mu zK??eEydL{<(sRzbGoWks8|C94lm|YBrqtN6LJR=?l?Q zi??)_g_Mb>7D;pKumjb_$?pa;rfCsH>ilp1V=M*847femr1(r5V_4#5c>N>D-B5z?HPf}HfI8P% z!Oi3EubRIt?f&vPiY~W{mNW>7IFT4{wXN^`8Ry!b3Mv`zJWiP@HzX(L-Nd} zbowFrL}gLNKhFpyfoFvF0>@*4S>T_C{9m5%&lPv4_q-SJ%j1OPkN@m{zUu$i7jMV} z{pMfQPX2rpEWr7#zuJQ4xbOPx3I8Rrgm3z4ks>Z<1h}LX#+=& z^z8~rqln2R6S|e*!weuUdR zo^8DzFI@ge?fg{Xq89ZQcfin@H{{KvHys_neEqsO-uL!xNiaP3kivE){I@IEsEsyP z8{DX3uJtF@jx07RvXuJwz5G}Ay}^^;SK+7y?Rn8FLSkN=rQ(qVgX)0=kGX3&&z?Rl zE-A4A+XFJPv_5#h8=COUMPR5dXhmw{yT6P-FYo+wuYYnL2V3H_m1n3!_kSzXGLGRb zr-&CymFrY7$L*Xk1UeINtNQsh78J}w9}F67!TUcZli)hJ^DrN7RM2eEn0evL2gjv= zNb>^53o>Kktsy(jZW%w`;Z_FN9sdyyWZ?hj{7L@-?>%^*S)lSN++}Y9U(F{gm_-*s znl#rBw66Jd2*KW%c=`Mw3V?LE3HrEAO-&HW^M64e{1s|M&{xyY)GT^TB_QJSKBV`{ zE)FvfWhOpY=>BhCu3OFuW3h45T3#lMl(L*IGYwzG;Ak=>zUy#YQbxuGnga-gmh?H+ z=NG2`H5QfvxO{`~)OH7T|Nd_>IV+!~e?_YQW5a?Nh=ve7L!zXBptIHt6IrPF?(N$y zuKV&>%Dx7>hs3C^!)CC={5<{|4{YVU;hGyCkLxh1d7jQyM={)Taan^Kr2YfxOsI63 z(;BRmFFxo>kMGn%S2n8#5}B~J6ir#( z-D75jxTsRs@5J^tlNzU4e0fGk7Pq6>k*kM?gA)hY^%!@t6a?Xrj-OPY0Hd7^PC%nE zSWUM7ZO;<@r_oZ#bFt8;_MoB}mJvG#$Cg!IS{l?g(XmjPL%iGi3#9n)Q?XLuDdz5` zIcp88+octxr$2=(0x-O`lwMeUD*immdE}_%P)`l%zN;hUmoHr+qC&AcqMiKoz|bv3 zkXI5qLJFCdbqm8Nb`5R3qHUQGmwVQMNLYHXAYT&?SG^t3y- z*OtqaYs}>ZSGyxHr8y(Qt6MqnE5h@U+~R9vxd%bqScpCmJdMI#af+u-WGAsFNulQa1w*N7i?2qyvgg?SowxN$9LEXx;N9 z9UH=2d7g7gF^GZE&{2zn4Jzmp8hHe)D`)}isMP2g8QqIzct0Xl>%Mp?sy^wl0x{>k^P??449DjdGMRyAJqOHNwA;QQp(Djb3>6S)6#D>K z{}Q|fq7-1-UAc1QO;3-Jc#HgN$$GxxdE#MWemObo(DlxJ+|0BwP@sWF3sl@#DT0W_ zity1gwOLQT`y$b0)~ub87%K{qq6Mg|+!w#)2f)c{>|sp$(T8}*^59ApDd@i$5PEsUTQrhH z=qOIHXMI7_C_IXOguR`{wP$c;9roySkz;~*LUbatz_!`-FBdq6vuZDBe0J?@LB75J zF`&Qfu9(OdZye_V?&X~$CKQPWc9GPFqWttSm^3rz4BS?+8OC>hL7Mi^YeVwH&}Q63 z^2vNeDKFA3GoT_fgHM?T(_wK@QL6cck+@?eM%<2P$5WgEg8O=w7#|Fj+QQHoi>Zd_ zXFeNHXke8^yv6WSJ`*9KiHPXJAl1(1ST@kH#OZ;_zc4;q{zm-%#ca4<&m0(jreVM}XRk%g0BPjc%3{6ckVo zgVOPHkN`jv>Q1n-ZeXRhmR9=4qQ>=KtO}0kjH3?;b0;!GK{Nm`?#?KI9%Y%-%1WLL z`yevF>FYxIWZ8{6S5R2k6B6`^Pxy08hLUbdg>0=~A_ScLBV$c44UFdmI9O(t=zhSq zzoDWBzF|LauM&yGN5=N4=ULgVf{0OGYXs|Cvb30A#vGIZp^}uLh9!a}otT=ce$}r` ziEorhwUls@j#bH7EW7CnnsuQF`FOMl-gpt?ICm5p{f4>~3FA}8-_JS17Dt`=C# zVU9LT)J=Ucjl)b_ol&8`84=7rOs^IRXF9@`dv{~UV*#ObpA@46sZ$~P)3lC`buavw zNaQKn#qiQBauXapyFjfw&Ec=EC}WV@UUO2;-PM!MWRD0ooVbZb*`tR0UCYX#vsVAw zCA142R16l>20)ZvgcRN2y?hyIZ_xZ};rZ&H*uv&l_;fHVA~) zCX`%yN_dIud!_x?p@?xz6s7kGNkjM}YsIc?$e!G9WjSgJw z-99g~Kc!r5f5xCFF3YD}_WJefbI^CTO=y~L7Z-{1R0i5q)o@$1B5}*YszE6Jr7Jjv zml{(W95eVzE`3vT=cmIh&0B3+ZpR$;L&(WJxIzDTxrnTf4a*?HK7iE;SIB5w$x=*3 zN3~K7p(O7&4MLV2|8BIm;V%@is*xi7T*}vpS2nP@Y3%tmI8C-ZiZnvy(D|;kvG#d& zlNaHNrzME%7vi!ii5sE|Ke(dtdAv(XFIS`zFZ$j}JIf(!^uyblSF02?8J|#!#i)<;<7^Ol(Hqs_c8mJgFLmTw;*p6b#6L5Hri;mXF)Iz%S zECjpOy>JS+ARUF${C+P>z>If@z#;M0l{>lGLu|uZTAA3(@O~3yt)42rz&Ori7SQ06 z@<=9@lFUxaY7)S_e6>%BH}|ece|V%`nUXJx_5NF_*OQZU*#zGd^C>IQ>no#XiS08w zar@##B#-%D&-9xIG1{xp5{%X{T+%+YVTBZ|_0=m|Ba@N=<@-%|-7Hw?klnx>V*7;` z&)Iq|QAwEn7d~)GG_5Aa3o3Y~(7J+}d1)1gYXV3EJRxM#XF~3il%#E7K-!}wFBnKg zpjw#qj=v0jTUBTY?zo(65mTtN0HPq6>(cObh=+4=>l}~n^STrRuK^| zsOQ>*o$Nt97c?56kEnl#^)yM>j~S#2N~S?UK@&I_TRCykw3LXhqjBD!uA8`t5$6u& zt%a0Q8c0hCi6%%RO4#sJxRzO;EiVZ-s)Jmr^cpav!K;Lg$T{b3u)fomjSUhDjr~di?5T?jIYYz?(WC zt3-ZcsnlY?Hmouttsy8|+*?w}mLVLTnK@o52rE}WQ>LnnU$fl-U78!X!@p#52&L|u z=FT%%9^N+^N;~_x3_3C>+lL$<)W3=;A!5+7vsC)ni-rOD99$VbDK=g1ZmzMX*al2^ zp}J$`(tN6|eG{1gD#Z`JI99;7S#JTEWr6dLH~ZAlPlK^h$|N4KW< zzOb+m>|0Wxn+hdZh0}xU&@rgj*4EUdlMimr%A)>RDa7ge5SxVg$HoQ=C?`V_pb!sv zILHxxcabPSTlE)+qE^2^5B0o#WKg6Gf&;dje+RUj?y`#r?{;Tlxs6yuuVUD*4VN5} zY%Ybo`uZ)AW%!%m`*m)Jb@fFHx2g5}`kgUU_$4 z!uEAI+*Jq}B|RV!2f>$+h)AaZ^>m;KGS!6QWONwLL80J2aJ-0&i0A+fLLEyCx~F8& zzUwMA6_u)SEZ2CJECx_Oi67fNaygG_3(=h=ebB%5pk8t<%iHycjFse*aGeM@&T+AS z$AR9DIqD^^hY$J~+02A&VI|z!OWXabdsVoFczSdh199P)M!Jp$(MNZB)G#tZ`V+O| z2{Iw*yTwdFsdDnEs^3fF5Umo^en!KIAVqpDoZB&IT1XLl78VvzVp#FnN>rC8Pe6ur zVC&n@O;$*i6fA9tzHaOjr;I^`QpCzI5@#)_DBISQvnsuSsmxNjl^xKG>xu@7g-K}4 z$;imO2(rxb8g~EoR=57SCD94d}M(B*w)3V^7IDcY^?L4|t(E)7%ai zoM>)>3izC;|CXk@UD($?7X@g~B^Qag??XMb%CICB>>(U`dU}Q+ph2ezq(^Y=xRb>o zY~Ky4tdC&)0L*ge4y;c-C-{x$%Jubq!P!!(!a3d^I$q#LGTGov;b+))d!!iaY6l}J zsPQ7rpp4zS#24Kq4UMY@lAeq3?9KT2uh7SVM%u{82wXFq=G#t|`|s)JOD=3|2>woX zqKW*;G(}HGr<4m4m~*WZNf)e4DEdapuTtuNnqYMYWd;YkH-t`c_Ziv`g?N-|HEkik z&%ylAiGez3kASg_4GU8d7qgAw4(Rgi<1i*-LHCvA)py}soKqRWM8zL|iQ|zcm~4Ya zCrx`DR0fr~C{%bFF~emYV`Fc~#-O_zdl7cZ-6Pr(9*e0NBxMFBw5pwCZhhnz8~ONA ztsQLrggBNzC(zR?pMgR|QG|l8z(Y>W%}e=2)I~H^gOa^F#-jr?)}S9Qtn=l zslAMexW}tfrlnMiovSz$Aq*}zLQcc1u00;OY$oW=7U7q*CtlmOXJ=($N5yx_Unp#> zs91sB3!TE)dfVw_MvEW7!<<0cpL|AHU5!T~kzZ_h)9D;Frs6mfmi`tn(PyVfm)a73 zb^v3lm_gRwHKeXxDLKRx^fw^+X@$Bz+^U%sLSKRM29`nBKILx(SB~J2kP*zx2M->E z9et~S|5H{`0m?fG=TQe}Wo!!)Z#Ks;sW~_-gC}q*)BUCg)yc^f4f89BigKvc@)C@cc|z?4d~kg z%I-P~_&pd6-P-mTxqjJ=&oh1kM2`Et7Zi5K$Ht~XY)BX{_X`?*V&dZU<_wStz;+g* z9>>WMRCFd@xgA#B%{(O$>gLpb(jN{vXQT0;O?P*9Y(iSPyJJfu zAu6eKw{!_emxQ7y3L+p~f|80#mw+fCprGho`_z4R-1o-2cZ@R}4iD`8$M>x@*IaY1 z&qtNVIpj)TUjv*x-9)MlB?1|vuM8`_ZShoeP*M*5y=+LR*CPS74Dm-j!FFfT-8M|q zxGkr>?AmjU_Llx>*+X62sYjG&--FwHmhhk&>!ZPXrb^O8*Y@1yW9%2qBNY;%1U+Za zWHl34y_>7RzUr?(#jWCVT}gC#w__XyQ>*!$Cy4f2d?Z zE&x62sSKLtoN``$E_iKk;rJz$*b6GTPoGL{U@N3c-&jQ1*@XhM#3NyX-uB>Vo?vt5 zU8Ebq1<;n?PJob99r>f?9IqVbnZr`V&o3#|g4s*IJvA_*p;Mbc<{c0EmdIZRS{{a> z%nDpunwl`9+7*r-(k_$nt%O(_5)y)rri%v0D(7zbHC=_~Vx%%fxt z83SZQQ&bd&P~d$pg@tp_mwKq4$~XZ}nL&wZMTFAKjD3amx)x4@0$a!~h>j{MDqx}Z z_iRtVE(9Ggf;JA~#Hx7SYm#iW>ulzO19-f@;nc)(x;Qg_5x3!fYK-%2W!Kg0)xEup zMiCY%-^;4dkInE&;y``g=bMGU?sfgV4$!OZ_3}Iv2lpH(oMzfED!+iv#n(wCBST|? zK+PvG@c87U)?E+f?sEtcxDqKBpI461k9LnhGVGKikdq4_%qW*QpSasJCx&}y@(tb{ zL>4JHG*Lq0r;EJ5Oc~bw;Nrcx17n6yoY$|(==kcczK&NrJ1Q$k+np3c*aUPLgSo7FSp0t7Cs4`AgIKUs$R*|71Q(a5%Ypw zL24z7q89gxDoPSpp?eLF}QgG77Vg}T;?%~zVTXi^EROKl630D zN$Pz{o9D#AcOj3Bc;WKP2<9t2&xmQQQO(f9#^r9F(x$Y=?zRN`x!FDA_YfQxR-|#B z^pQ-k&H@6RpxupqrR1HoIYG&Jwndom7h-ye+g>%9Mh6>t(<-G!t)^rPVzPi$Q-|M% zE@YDVV_&U%tvMJcG;`70uvJ$WW#BN3$QkDU4d zt25HkO*9c=O_ED`ps?dvE7-+xWE61mpDV*z zPFz8i-YY`jNffOaeQz98SKbTl)Yv_i_uNJY{<|F{>RY@wLcl1 ztwc|DJ{%rzE0wGlS5rEBsN$2&FQCse{wjj_$}+#e-FEEnF@L_Q(5=B(XBX%z!u7rH z<)0g0md4zFgWKBzwzHkR zJr}_+6f$#1xv#f(U5LOthF0Uz2hjK{e1O-=77UW8wq*F|o?Z2yeELcZriDC3h*S}_ zZm~tN#Ryf7TuPA`Oo3cMt0p+9TIduc%T{&9(Hi|BydP#v9_Ev(;EU^bg`HaCt9!%~ zP&?mq?o*LT1{H7Qeh=QR9wm={8z}7x)j!l#FeevOgJ8K|7Qgy|lGmsgH=C2nr2OYx zDLZ)V!gkM$%LZO04Bk}X*Lw(>I)2k?HX1hsJ3{RJj3tcEEa!8 zaxFC|Z&%todAAHA-W~veCc{eg5mOoQLmrU&@2&*Javj+@BD;RkpSWIleLa~~ z8!ay!OlN)p$W4KY*d3lD$T(c9QH7U?bZh%k!LHTM?55d#1AGC0z!impb!c=2Fe>bZ zaT zF>O><2;SIeV|B4-PJI_D)#H|Xr*PgNWDm=tdU$oRafaesa&hL_j<}**)#uU0a7(Ws z7V?15w--OwS00M8ggrPCoGy&vyyP0>BN@4^N70Xlo zolN9tzgqT?5xHX%yzMoi)#TM#a`t5@Qx#UcwfwMhEK)4HN#nX(eL-s;c&_Z3_#1Jz zwF?Nib#u4CL80deGzY!J6|PD)*qUE}vY=Ej7FJLw-nw0vFm6u#p4A%F&*&|6e-yGk z*)u5MM(qd*aHH8W$Xgj>l;6k(9}z1B?PGAi zx4@@*ci%>hT=DVU*#~xa@H4+8{Ycx-E>Gu>#)*6M>wVTlT!l#v+cl893Aw&iV&u8X z8egxk1&08;Mwwrcce7JATD1;w{Q*1Axy*^S5-E>e!E=C~&p(+XT*Nmc-vwG%`xGjE z!1L}uqYgA3A8dCL-4_z>gql|B+6PJK$bu+wI?jE^H0>g-XgE{y%iqTjJKhaD=}Zam zwK!Wonft@ViwY9@p%;Xdi;jWZvl{xyV4Fz$YH|}{MAPy#~0IUJAu=1+3T+tK%9X0DM zoi3%$0so=kwdYsWchkTf**rhpswG3NEr@(mIVg96u;(&pLa4u!hY0n|DN-U zLC#7)QzoWZfV!8JX*$l8&@fZ|j&Jo{sq72~$6}e}^pwcDKIsz&av3ZPx zcbsFSltr41v-7Aq^2bV|wj%`x+3kvtv<_iC7~;4$H9rDwbD=-+LFo#V3$M8eP4bKh zmR(A4qDvr`*rFcHqh)&d^44-3;i>7n1-!1Tp`U=G7pf1UeU$LK+g2R`+@=>8Yy7D9 z(CB^(nPt^z@w-ko7rkPLBo@Dh8j9~1Hq#vtvah&Y?g%2^BiO3|qV{Z=V%*pNz{5tsw1yb6`w3;u5Gn-iz~58;&%UlJ@-gOt^NMvx@rnRggr(2hz+gR3O=K zE+MS4zxqhN$`eeKPkJ_o)3-y(*H096XEXd=GQmS1CAz^^ERT;!t&TC&zH31e^O ze(L+Hkn?~QD!v@woqQgxW4NzOrIJ)rqFdHosRNQlMB^}sCdxI_7|2_|w}E`mkyLJts($~r>(B3>Km@QwCkV}fxQt>( zTqIvWkbI85jl0WPf_=D}`mTExhsM!mb_UZ?o<5%=PqSxAn!X#O)Froa_R|OPQ|2Ci zXuV-nG?y)cmUi3B-JTmaj-nHSCF7yp2uWp&_QJ>zRh<7W^=|VAN+Qk#CkxF$c4c0n z`^ZH%U{g!Juifp|hkSW)&n!QdhSSPY*O)K-0WZq*ZsTJ0jbCw%K<&ZJxqa*p@BP+e z=}o??0JznJGGF1roSk+Rsh)l0XXkJIX+70YCkcl#xTs()GHfN9VV-)&1`Ju&zud_a zbtq+i^V6LF?g+%!uG7uCfY>>S*>^8NZ9DXR|96ni)9cZHcAhBif2=xsC7o0XCglTo zoBYD&bz~(h3PG6$LTpkL&(!4vOe*7e62?UCUfr9ert<{O_uw%de@$I=*ok6`z~y$y zP-I4OQ?UN->~0Fg&nhhG+|c^7fVgL1ZG%P)_s3e~WPbSZ=Z7yhYn1nbt_I!P9fAF9 zflG8ddnAX~-Rct!Y3Tx^D3#r|H~H1?Ta#SY=RP zr4$J{jfnHggkY+msLbN)MZ`NoO8>Hz)fDSuZPgdRibTS?CsK=)#+k}J`TUObVmz$^ z3!UhXo@j@gpN@?L7mvUs+s*hH?0Aq~?+DqTVI4}){v?@#n*$>hd>P>P1-WNhsJLS{ z#tvt`4DsFrC}M*Itl_LR1DVIPqW1lT<*H!J^cAfWx`8m8h~qd9rd;BN9s9!`L=Dw1 zfZN-Ab%&G|&)wGE1oZx zI&WTQ%nlIMtXAKq^*Xa5yPt<1ZvSd**Z0LxIPqi|b1ity_~zDxin|ltH(>bz&JE`a zGm>z~y?bCsi-$gq9V*4a@l~2V;t}9Cdys7j%4*BxV#@7oTx|P1Uk8LhNI!60A!OB^ z!x~91>iZi!xE{l5J)*g5Zge-WKVaH0aH%S+a8#r1!oU_hZL;|dNX89O45oExDx@)9 zyn^i-|F}I%6IYa`NGUv|-n7Qrx8Lu652VT*M;rci%K3EQe4?S2UADX(f1dJ7H&0;l z_A{C5&!N6e^>7DAX*KyAtVn1(WL*d+OI1vi)O%r%A*bqYTXB~|P`VQfmtgDS^J-p3 zeD)>ue4C;N@H4)X%;%3ADf!UQ+^g;mWM9y>=UidLOwc6JgXev+WdnNRXQN;eFwH4X z@4Qnq?7GAz;4-buI;c_W)GsEqzht)t-i)>Jff;59tgTR{jOFrEiuBZ(RGCLhy~_K- z!AB)N@<)Le)y4!!&ka!gfst;$(8$d!K`W6HMK4o_o0>)?&=?_S#Ok8_`6lDi@1&~Z z9z52uyB9Mm;Ti@Y$1x+UQqE+EcC~@!==%*hTx}VBrMyOqKu8NbVQ%Jk+5tfIxN}*4 zh0`Pwq)`sx$JDR$ejg2Umb331DA#lDpBj|0*j-zA)iSy_Y%hoc)?9OEE9z zz{mzh*3WA#QE#d`t?cL#(nd2b%LTpicd<(erFHIzFcVC3%CR+sogT_uY1835`S#`# zuR&4n!pCp6+qZyCf~Zmgr5jCmfGbepBvN8B*gez0sMEhL{Usj2mLq)8uvo^L8je0C zY>2EBUdwTmaE}7d3wtR3FP^ zR|97SJ{u{ELQ+oL%NS7(t&<-IYcgtWR0RnfD4k!WaNDbaP$xW4Po`*-0@quwRL{pB z+xN0}qw6%Go8nyu!0{mSHe&^njvDZfxUi1J z8>z(u5wzn$L}uur>mByzcX$9#*T9~7G>@v7l@J`BXJj<;7fc8iOwwj6B7byeCsUn&q^F!sN;;CoJu#)K zGNbW>(#^KTqoRb^I#tLgUz)J^Bk)8N#?5+}wMZ2b6=r#s)-AIaH?O_rL|jL7wh(7) z5}y$JwfJK(+QK?aenYO>(QmmHe=RN&02yz&^Nj0bcQpQynqZyd!@rKUQUiQU=uTHJ z3Qt(hWCmBAleS|SPOsmfeY3O1jb*r@o@*0vuJx-J)p~c*uO65U6=h0PE5Z6uhjFy&)g8!?U#k^l$BTlLwigx{QmHC&^c zr~7Fe&QVuAEbiXxH)D;Rj$=6pp4-?T0;N0)uOXAP$d{bqPos3c?W6g^jihm=c;P(y z1?86pD%fZD-#QPaUw(4M;8!se*|hwo>XG@=ycX|WMoG=}|qh_b#yBd%qC!1ND&Ya^{7GwTa0;6HO=RSMW5qxQ)+ zroKq}#+Z`y8okm3p!LU38l6@pBY?X<>yjm9@Za`7Z+P<*>JxPBSW-#%noeFie-*ia`ko4_{^J95VqklUfUyHm*1QU( z!7R>Rn%9;-TcW2A$2;7JTQ-BL_~MM|RQ5?qkzd0_nDMSdYz(+1v~T3&6IGpH&H=qN zU${?*rxf%Q+ZEs5IYg$###~H5nwL{qAf6o4`zbtv;&nPj($Q3Z%#l{eTKS#%Ajwgs zX|;)ZkPcgl&o7CAogfY1HT(Zm@l;(Af-k6&f1?ik@tr%diX%fxW7tH!c^{!ov4Yr+ z(=*tjy1GT~sO-EAm%D~5?J*HmF*ykfG5L#csn4d|&D}P)S2Sl*H%5X8CtF;Dv(c5C zRIe(h>eUY|{Ebm|Mn<|P`JD^ziN zAMEe@Nb|MS96^EC@&OnRuz2I){?=2ZPWo=W{h_>W#1@Tq4rD8VFw^qrZ=xVOE!*|( zk5-SZHbDY51kt00&P~M0FYw;w3Rvi_aZ_@?FXwaS1j{JJg8(Md-4OD&cqPa7U9r{A}O%4lf3-s-DCqqd_J?MUKTB# z5$EknlSVP7O=sOyU718NwBL>X92w>C7;vQV6<&q@CQRjdJ9!uC6*NDUV5cp3G=zn2 zW!y?t+wS|5+S=Og&Tpee1 zi8;|vl0HQb469HE!cV?y7~@+%(Ydc&zQc*idZ57j(5$@c(;dBQr}4^yO^1zJxTjuC zCKEVhcY#goP>Vlb%zR#1dR=@Ca8&X>!iG`O1MQXtc>+9O#!IOlk-^K2x#m^3j`4Sf z#TI338T7R&*dz1~;FxsaET2l3rft>cHr-J~bs6yW~7z{S$zqQ&xym#?1%Ncz*I#GnG!|zA8#Gw%1>=Uzq-8pep6)b@-+FMZ#FqFv= zPXAE-srDeUThDH?Dt^_)e z%U7H@NzVaBZg%46pHAd~B@4c;q*CT{tg}~F4@sVHQGLHt1PvzuDni|FwH^vjUf3#_2qrpe~KP0Kuk-d+$nrnf&r#ayodq+YOZ)c1JC1cOXY z=5EHH5Fz*~l~S^jOB>iK7Z_kG48Dl@doP@Y!d@VwrWz!pvSLCu6_UQ|B!$07_NX6v zCVi*i(pJt*dZTV=jFMnAyv*7p<7ymh$uNu_|5TB*?_0XB3mT{o;NUi|H(g=e4oj2M zry8eLR%GIb@vk&7n7!Uuj!gZ))U6CdkHpCKRHewN!?y*eV2n#ucBL|D;ucg~LIl@* z;WV{MSwyb@)&n$At;$n2jJBw9W5M#sl9`a_yA*mNMEKHYr5EHzRS~}i)Go83%Q7Gb zuc%Bi?~qe5Uy49o+Oh`&KNL0T3{tu)HrCd2Fz~}zhqc1_l5EhvBV6i{JW9yjIZ%$H zLFIKcHlA^Uu`c;CT>cTG9HcssGswM?c35`EYpz2y(+F9k-P!;EpHyZowFh2};Y%3Q zi`fc*xSxVSt~Uq2Vb~%J_z%j?H$0D^!4mG6Pfo60akD}-9*9(lo4a#R<5%6)C0KO$ohJNfs9)-{-5npk3E>&SS2HqrdyO5W zQgA!#Z z_#M{M?xob*05<#;K;ux{K_%;YQQm)(=u8c* zH$B~Cd}iEIiI`w^apmp*{bL-`K4+rgq!^SC!_~Q84jLbJdBFgSu6*qhpvuP!#AA8p zv$Y|-K%k?Sc|&e7Y2a{qcj3iF**f)G=09IK{I2Yi+8tEhe@vFHxLq;^NJqjoOxR)= zFr;)pYhSNI60p}29QysY5wQ~k5K=&y6TJ?(dXW%n9cHC48Gju!y^arsf9HTydskGT zmlH4Q;dvZknHmY}eVC()E|LQJ^L!V6`izIQIiuJ4e(wRHXOd-*W1AUHGekX3Q|^@4 zg%Z47%uN&@D0(#WShs|yVrOPnMky~*W4t6YN$Ip0H|oYnI7o2f@pr?@!9TD|LD>ux zEtbEmk@%BLZ_SUYUn^N4V`k6HOvu!kB<~&J>S^G8R)L`Ks5H!?d@r<*OK;npOSL;$ zb?AwndHI(1)Pz%~l3Ci`$iIlP`w?T#m4G8vHEPUjh)g=92L8Pd(2J|bP=5r|JD?-S zHtWjNkHpzodT}emBvg@tY-gDf(QqoXAL?YzGXW7YJD`@Z!FPa%F8W%WTtM|VslFga zN32V>BS| zFluomlO3Bx69OERIC;?5gL>_=OoH4lBgAm@>x3z2F9Nnz9bl|<@LuQl$5+Nj(^YVv zZ9%=X^&${xd(hT7-lh@GG;Tu4>PM>#X0X2b0+fICgX9uRFW^Vzp+W#o#q;fbdKMVL z6uhM!Nm_oJLnB4<+6Ss|ZHyPJADPo_AcrwXd(Q!d3e^HNpK;VRGfOv8b)jocFzNsv z&pie;wTlfE*$HTc6byahhUcLq52OtatA_Aj5NQc%KD=n%Y0gw57u|b zPP;Hs-<43l!;Y+~^4Bd zR>LXYemOUd=jh}E);xy6yBcO$$J!i6lp+&Eyssw_clLFwSeDf9ewjBl_%txjF=QuH zhp9^_AgD{!Kv6j3&U;|XP9N@pJF1dXH>$2krG|VVNsgqJOo6(E{Pbw|ea=9-b&RH} zdU9oYdavi#lCOwoqLN${bs2JtNjN*=_9I!YBh5GX8Ezn=slPF`UFmV8{IUxL;U>7`%j7z|MqW=Oyry$k9o^!tYQ_w*ICU%ViFKxiAdRRl{AdM-e$8WqCP~RB8+ZuGR3Pbt&5t_tj zP%9FP7{mJ}q!s|(>m^tZ#KiSRf)hNNtFXX92+9Ym1a^eoGjCa!K_afkTcsqG#*ZQU zp-~u2XDfm^4{;pN!;a#`8!Z|WenXOufB_Q6pcNjUBbR{*Fc;$Eo2fgE|3F)#PF=~% zk=P&>X0u(q`Zm?G{0r3spVe){KPRrBAS}2Dv<%#XvxJt?W&^wnXskYBuN`!5Q7uZq zet2^ejcGNz)1aS-DZ#@Kc$?W^qJW`^!W zOT?AxhH4PR#>Vhnu1}>M2wSa?sKF}1QF%bLHeOj@m&~xb=VNjT6mdTtflJicJo1~3 z0jhI*oB+$uqqlP6fo;7O(#EWmDW6?dwa}hKhd{gkr*xdDd;%z9+cy}Ff4)8wqbeN!&Vor$e#uk4-XYhV zzt#So>a3)F(@wlsKngNiAd6Lpkd*X06u#d%86 z#K;PAn?=5&6n$F?_EH}Wjd2@fJ9W_?Dh)gQ`3rgawXMSVAZ1*MsnKGN{8ksJK-JuK zmoGCJ$8#XhuCfG@J<#b@P!xmO4^m-UR~i19E!p9A(F2S^<(Qt35&P>Vts$ujoMi7lz!KfS18X&Tt`0DjcU%uR6;ZVqHYaR??`o#m_H*PHM0fcM5jxmzM|-DeEm58oI_gf(A#eIBu2F zMVUG;Te1K6*`C%3BDVuYKmu;S1Ctz` zm%7t0E?ToKO{XavWc(RhBHt4_SBf5UzD89RvqNb_(t8F#2 zhrEA$idA4ztB4KnCEllOrl}y?A39^CQ|4q|EbrYgG^2lNFqczn%p5Qw`-0>rnXXJ_ zqqF^eR88UHJn~~+U!F#_^=-QpYpVM~#!r>2w6)FB+%|+WJ*cDXjt8ilMJ{3-CWl3t za9mav2eUl$}x5+0U9L7+;NLp zYIYB`i4|o>O&Csf=?3q{pPr)7@izQ?EnLq;uQZUEh9-f8D=H1wdZ2w4d5>ziS_y%C zuAB7sCzQiawfM`T9~otL-Q_Li{wjt z);hsy^-Q;e`9@#0Lo%*kJ|tsLjSyfIV6e~}B?#;>AzLOvkpnZ9 zOfVD_v#R2RD38TE{{?Cp0MvrNAEbxkb=CX`#jzh%fzY;Abm}vJ&X2?FYbh0N8dxkB zPE0(v>TX>E$cB2d#9`fJuVlLt7j0#*_~70HB(8{+xkHXzcC8)yMM++1f)^!$%6%MU zL;F<;L$+M92U}u^kiAk>G)|CUDk>rm1Bc?%{L9EPjMQ1GYvGum^;XDwtGu)gZd9;O z2y#3i!>`VsQkJYS66Z6;vYnJV48+ll(Z}MwQ6Txkj^1^M%h4jEu(h7!DOdHm4-1x!O{V}&LRZ^O1ih>Z{ z%A#fpCb_D^%uH#r^-YQ|0u5?z*HtLU4AZT2)k4%+4?S;RZ3yFfmC%kWwcfyvfoRBz zmCWU;2qVRL?9wQjHx(!16aHQ{%P9RF?vAG!Zc2xE$igIT=;QQOSCJI5#tMz_yO}!7 z6!v>8AihUSnWM3AkuW9`cr($i9~@9`g795arUn#|S(cJo^y})(_g!N`tp1;oEaO&j ziH~9{6I6?bVsQ#|=T7_I|3lBl%0XQug+Z58NlEqyxa+G-$?JYPD98Mg)vafm4VO%9 zr5tyy6+u(qEdYTRXOrEc`N;;`{Jmc6 z6mZf`?Mi5jTQK)0h!<6k+j!0;B&3fxQX&4rp8D=1cJ!HPl;HJ>n}{zM>mZ~yl9l9L z`J!#V+1LGN6=TnuK;d+!B;u)A@NDiw!O9ut*$ztXb{+@Tg38>4og$o)?1=|lbyx^4 z49-@R+{D3iawY`qyP3@}ZR!faUrN}5AS%+xBGsn3l?S$p%1djFu*)>JtETNVE8Ol1dmR2a6ZpBA^ zBg3&`T5J2NHYoLNB_+Jgxi84hgsT6zI~p6bWiycvIP!m(scg|vS$WfG;{RIeepm|Q zSAs$OarQAUU10w61fGV9?|{;}?n)CoO@{EGVcXV4KG;abwo0gGQmfs*z`Z`|#MIA& ziRggYNy_^=@#)&DUTQU* z`DC`XRl1=-Ry3gjw?WM~Xop}d`#zfu4bmpCs6agjI$iq%UYFCoktb?*PGqdT_31{>~AU0jisk=MVo3SX`oS`m*uYH}+A1I;LU4kDYnC^@E{%?eAcItTW>+ItnjEx4IM~uJg zC+5y!eTb=chi(LyzWGD^Yx!)iVl)C?b3RuMyt&VL%k2knFAVUG1=Cf2w>jkf^T+bN->jb4K9VS==m)H^ z7L|cth^&5TEfKmTiUw`pUXx7PQ82v_l(SH{3E?=)q3WOS{8QoO;rB-gm_|AhD z^;JIcO-6~&`NjW_m%9W*RV$N6N$UCmc_0k_n3IX&4Nx;CkYjx?#VAX(3s#!HV4t8; zF3AULk~j0ICod}E?{EC;&%YlV`cKDF{HZ1{jJz}S+Jsd_8VxJkw{SO3kmvt>ZQsa; zPG7D;WUI|9w+@D(ofLT~{|b z4}AnNJguanbpLusM14OJ|6a;&XoL@h0)j~%N2O`zMQHCo|I(gC*gtF7hSowr2`Lu6 zR?jx~*W!bf!OBUS)L7y}kN#Ds4kxT3GnGe_B7gm4>LpDPGAsENIB_n_ASLn{30NRh<{ZpOir4;dN?$t^P z?T!vUDe0$%Fe+s=3iEQ>jnFfUn)aF(9`=H*ruvoLW@}J*>IP|Stx4U}nfX{}yk1DM zV$b}BYO5Y6D4~Xjx&yQF(Ui%TO&yFGGtpt*o;)v9o-y-bCl5pXg$)Y~Ba2dbtFycZ zI8!Krs9mB4H9LyZ1d|uFweANHj%+EhE)^SpN-&-Qh{q=H$J}|$*TvqZZ_2D!8 z11d+8pc)fu9%1DXuSl`hu=b25dCgT>E!5-AGmDBgc7e+ICf)Imlc5 z7rlt+v;OfHq2HUPl;<~aO=60sGRto(FWjDPqlgU_XBW$dfror5Om%eGUN|m6*#OrR zZtl`8up1ojExgb|59$U%(oxK{bB&>ftz0CawP>i$dgz5;ooB9^eunF(utMb|+0K@8M!+^()nvY=TLOxR zWy3~!Wh|^&+G~n?wz4KSW=puts@dqbNJiGN1CMs0ynlLQNvY|`&~A4uuZSwEyBdZ4 zfK#O?l_oG?X2r6oQELkId_WfpZ0sS+)OdpV!z~kK4RcF7c1BYNp4Eeq;iJ_;taI)% z9IG7(dx1vb6ph*U*d|knMP7V#p{`RiBNQZ7zA0CRR+g@De`GMy!5+R{${h=s}d9sZLYP ziv;mbVf-^p{uJ;uucW0a*J`q7zA0;7Q%j}R#+%s>BP?c%nRU$KB?Tr45z?8^AknlW zrei(T<|E5iYT#V)nPhg^|Df9IPqn8B2Q!UZ}F z6gO?x7vxm=ktRfWTUiAuY{bN!i<3D_&eG0~Qz`eO>_iK=9%SB4B1}4;2^-F2hh77W z61h95NAh(Wy3uGUB{Uo;=CiB9!1-xB5b7Z)yIxM}JVHuH$mtH`zuRaoboB3%+`>4m zp3I4kqCIBsAtXHTuGeJV9?WY3-HR=F6(A5v_;`gl3H#_}Xiq=*5YoyrQ-SZv#br|= z>X->CYAO*_5ZGw?KdqP3VVm$DnnVfCDi>n@d`|FK8abjOo^~52h=zs_EM^@*vI;wN z%|GGIu1V(d(TMSW_3iM2D#`eEl4PO1KXUu^Ra|>=V+R5LG-Vx(G~CdToBI>Wxta`z z+&zp))oKAxBQ?pD6(rMC3kQ3Ao?3VaS7Ko?0BUFx`Q3iD{;j`iN8bcEK+wZPKl38w zA|okPtdS<}WQuzd=22tEj^G>7R znNN{z!Bk65FtLb2n`acK;n$@VArY2-=rsW)-VRnvzavS{SJcEduYsZd{q@COfz>d3 z4k9&gX8yA?j8+CJu)(fX1e0?oi=Uk?TBL&?(^a>u?h)o&n8O?VO1h5e4Npra*hF4+ zIQGPV56_Y(CCligDTb?2Q}uRHn&Boc#nEtH*mZc>#E8^8;?9N80)6iN{xL`dYm%5| zG5J%KcG7X!2(-0}rc4up6FJU+1_}|k zKj-{I0u_}p2U?BFQE2{0oFBiF^W^ZV6pi;vp-%3?Kf$l*5F@HqXr^>xw0fA70JHaX zu}zq+bBRIQ=OVOdH-Ot+pN=cPGb{{x3n)0y=TN@3!Ph0{Zp(Aq`W&&0Ewo-v(Jay| zDVwA*1CxuO=K4@;!02b3K+sUXh!EmD##gpByob+~wqECj-3pcP>AT4Dcc9qdlc|2* z6tF(4PCvz<1k*Qb_#Wa_F9KzU@S3Wp^@7$L68dZ)oS0199KM6}(sQG5b-tEXf`dg( z*CZcAy5ZGG|%o`9xqj&nP8YKb@pF<*^RtAdRpN;iwN z+9b8vX8{~vFudh`y&3P7__4->>OdH4aiup70Rz|7vl5JyR3}nQjr>_K1+v~)_(hq% zr(9{_=&{Hr=OddG(0UBV>ik z%>#1?T1?>{(s1IaoYxm|QgR>UUNBh@5UZVkEVXosbNMFXaQ$@|b4meF9kAL?UZr=6-bcmb2f zm368a>ei158IUI`x%YKRGV>=ZE4{eH%30!uV84Fbcy%%ChtK*n;rO-&Pj)eQyCYzr zKM2OSm;-wW12oxU1HWU^skSsrcyVuO6lujqD6aY3#^Mt)7*-cgyIj){#pIT42?{@E zYC%ia_zMl{l|#gQeHOB)`iIlp-8>D-TBGd3(dFth!7{Kd;XS}XOYa)1$hUhmN-lWC z`y5&ENZEu#(+PUXH=cRF$7ejA*v=Z2Jn(YnlS%}}9Quil5a`>92?-lvNC}*N1b*(l z?IuTo%ht6PLX0kq8i<(mlx9^|UH%1k*CX`v!Sugz*6zgvSMue7`iA`CyF_&ghcPfTA zH21-F2Og*~&{hoh%vS4^*Q@nzXO)xu9M(PiUfS-&`{T4$rfSER6JD9)2?!&Uk|D+$0t@CN$T|5AaGH?I8!U^h%?S1 z#p^y1DJ`bz5LgZ@eyf0d2@46K!RSDedlrQhrJOGiKn`@L0pdK>VU>LSz9^qYSj{2H0`f zh?KTN{j4a-5iUHB-nC6~Jxp`wcdAHF1IG5ZYnm5nND#YkSUCJmQjp#ARY(K0w3S3G z_|SEbE|9^aVft-oSPRF}3)~}hWTh+Xb@Dob^(uwa0;=QcmkqwNemn-WW7oVIsAq$2 z?s|iBO#xQ7ej4*IuK{I)Cz36HgpFPDU1l`9BUw{wx+O|Qt@g38!9M_2|H|vo|M;GN zSPZsk84i5E8lQLg=716o<8Buu@`->>9oEdsTf#d0W~_~@B_2kgupwscpM&K`3dVWt zpby(MDP&WE>~gJ4DIEODZCAz_!h_UTxc&B((5D)J#sJ_e=sFS|j{!SCgLlGY7&Z;q zd&)o%3SOe)uM43dn;%|!;!Y~fzSzewgLWl=sx&#LK0{QO#L5qfvfmH?oIQkg2Aitp z8vtxqMzU+*y+Xlo`MIClLkw_3lv9)0`Dx5TA{DQMC=QY6j^!L>bV{M(8=4jHo~YXG z~dI)*xflZ@N9OUET2>^i>CO);-R zET;p&D?M;#eZGBEDfj?Jt||ZwMxRaw7G}_xK}fAeoF0L9*;Hr@15P~|;Hxz(fg`ZI z&MMj2h(oh=GOQV2nDBy34&MZq<>Jk9&Kb?bLJ9ZE6VN=+y@PcgaG9*)6+NE?+CXQcj0X7P1={)&wL{Q~u)&ghgmI1(Lul?m6_L>l1@uS{__=)<`$`KwIt`oHeG;G))B~y6b7s7vD6sNoNVVVmG8)GV z(ns0Dtg+eHAD?G`?+%d<8^F(f!(iKWF zRDPUov?|2De;bx9G|BcfqhNKx$z(aQ31mE%NU7F5LY>-?C6W&di0+fKsDL*ICac6h z&&-ele_t-I5lf2()|#`McwrybQpgof=f#leQo&Q}*rxgsOCOjXbSPfZuBM|OmrytU zZDSN8@MvUxrr4E=ZUst71=_USd&Qvry{?1pzYG$G7Pk-DI!Gz@ti5s5O@;iPRP9Y! zKex?tmLf507C}3L*85UCyk=BSx2+^74Km-PxL7_S*or?3=vU@*GlM}?Zm=Zl6P|$y z>*wjGvJv-Q7k$YJ28onYotFx_rJN}v!}^F5kxgDRhO1YzvW?y;+o{w#b)0)N`OP*? z|4Yg((*3vJ(N)1=+-E@Qar!tdfGW7XI8a=N><;f>Rg(pT!@*;av0yfgjPDgt_#{7W z+0f>`JSfqq`lrx2OokFbIQ` zE`tV+X#+}WZAX2N1(2D*Dh5YCAUUEI?!j7iHp=h@&7jFAGN_K4&!+L9By@oO=nYe=f&83o1!Cq-RS#+jF|nN>uZF{Nj=i3=ZP$8_O5|2>K(bA^hFv$mzCg zQ`HDtC%J?Kl>o0N9+Mo`VIIt7kQ&2}e5)42Jq8755vLZ(5eT+yz!tWZ`)tc7cM-;p zO2Qr{d6UIggcrw@pd)j+MwdFJfO;!RR~vXrnT#9o^8hze;UvYup6q_!E&ugl^0;^S zQT6n{p^)hy_4ic8`sM@^KXMPF3aG(LJeI@z2F%UDVY$c@h~5xwH(u;@RhhBibxuEx zFixg_W#-~RSLT^O0!@~CJk*je0B#O>yT1nIST2u(O8?=bN7ODomUD52lb3{qcA@h& z0|o!>prZge0E%F|0W>`QS2D}s~4`7?B zokP!VUm4~XOgC5vmb77hzD(%?OOeXy=BBWeIEjXWZ*2&u@2nkg38=amW_k|gTxViy zgzvGh1nsI`h#9G?5dBgS&Oo$pUWaEyQn90mCD<)ovJ5Ot?OLlroJ z$tE4-p+yp%HUo2HvZ?W3unI^ObZh6qjO_sjT_Uc7SnbUR*O$EwyNn7Rabgm|^WHWL zKc<(I8o+NSRZ33Eu%W}2Gwu%9&wMa-3e>xBe=f7rnX)5cS48TQ0()$gDF=sRU8bBd zh3&n2yHsL^dYB;jNJ>N}zW&-zG?aRuIoIhR`${UL(kf1Kw<<@GW;?F~!y-up@%s|v z`(RBUBcpQs@}!;L&H0;7 z*eKrk-jD8s;ntXxV~G!Q7&^fv3%9Z&^=Cap_S%=bp-8%{31I! zGD~7*3-tBWkCI_f0OdXM406Xc94se+XqpxJXg)d0Gm1e<>Z&>LfTIukQAmBKz5g8W z0J#3zAd5rAz@u7~>qxrNzmArKd#+E*&n88{z{1ge^d!4SMKZq5=Mq}3*Ws)C|)aJ?$ zFz77taA>$Q>z9Kj&kb(5hI9>tbMa0bPhdF&B;w!>n%8Qx2CNo3dnKs(3v8u)K!L_D zg>Us{xJNu*Pp(Tr|9(HwIulrk@6AIH4Pm$4z2F}0*yFHM zKgo*UASNb*gW4#V#l*u(X^UW*g#;{qkce_Aed5p2&gMcx^=kAaBL*;SZb7{0<6JgD z?t|^bR}Z)1Qv{TZj?EEKa;{ ziHS*=AD>=LR1CJB!_+fP)QBVDl$msM!NB-)q@%84u9?clIt~7Z)cPbJ8r336&w`N| zr_qXFu;x6k)PX}_w~l~sU55|M-{|XitQF@rj*b4D5;9ZG$@4M+$}PIFB&mtSO^7~C zAgP5%b&Sb6VOuM#@!W3%#>(Vw%KC$Rux;xJ2yOXP;5A6 zWAcfFagMBJMxDVKq%lZ*{ZaFWIP^T7VmOjchUg^VcK9gopn&FrlJCd^!_NhuP}{dL zor%4Bx!l9+@dGwzfeb6E!e*pufPy%Cbjz&G$B9KSl-#Iz_8fA|I4=TbK#yd10M`@yY*S>pj4^?%VhA ztg^CYl)XpU6(M_NCwr5SL{yX=Ldq73>{W>-rG#u{7A+xVH4qhd@;l$U@8@~$|Nna& z&vD$(5qrJdR^Cfo#%NOzFN?d-m{c#W#}MYeFP>XW#DRJDA%aJT!>HmoXscb zYbB8FI!G&J9>G4Zp_1ElT9yiDt5aO(83xe3Y{Sa2FfulZT610F)aux6t)Hfzth3qg zN9??1p?+6JOFQ@Bf3TdRiS0rB>_n9j_ik=DuF)0!Jeml2ORC#zv9Rq8`-Q8Ap(r&; zHo6lD?TZSArg3E)&4B( zoFJ8b{O5T34w2pVs2a`Q;8xa?yAKtDIbqi9-R}k{b(%(Mi-gyw=tH79cHWo=8%9(C zve5{SCCJ!;jFI1$6`Nsv4tdN1vcxB0EUepYS&}mQ%mR_=jk^nuzUWsF<=*JpC24bW z>Wny&i2X3TiQ}HWs1!(^B??!f=m87fAdg~P-bJKGN(2RjjD}4-f`WD%#hr!$PjS&% zz^2Tdg?lq9c$=BTXDi7gMXB;=aKvtj+#)P~kgSRfwq2TRl+octR>Nw<-i1;l?if`W z2j|lgkr#h`ymYkJ(qZaJG&zGb5tih_{)*qh@*8aExN_7G9d886b)LZ|2jUXHUqAgh z`}cu;6x5q44GUvP-H)Oq=+BH~_%`s%e01+BV3_mqkp}1;oYl5QxoyP{=qPaN+qMLGIjA0MU6wrtB`IeO_ z$Af9Ljnvj%^S-}4giK9cv!B)l7o5BmMb03!+5oZ>&%K7kgqSjkzE9zPUo)Z*Om{sH z8~pu~jZxS~+8nUPSCNoCNnEkyo%+iOrT~Osq3L~QlW6=rVWU}U$RYW74*Z@@@?i|U zP()BuK0d?JHG%f+;)QQh4mA6n)wqSI+^8wKt3i>=tu83ES>yIW>MFFLFdg~<1z=vqa5gO~Q=ACEU45UMp zT1>CqfQa(2L-XgyR`E780D`rD66cY$^9B&>_bUG5TKTTUuAD5+9iV=ZHoJ;)Zw{bW zky*geDpr<=dn*Pv4N3Pr4M317!p*LqA$H;Ea+bGPDBVRhk*1k*2VaLPPtyBpx=4$2 z_IAR=PdDDS+L^>8a=B-_gPV6eCW;F-6K*E4uDm{h$guP?C1Jigz#z0aGNoUjQ!Y|r z--3E&pW4%~i+aRdX#Z6cPN zqX9-;dBHXWi5X;{(FeC~`MFxlD4^4Oo<(VGZp3xe8st93R2ht~A*w6S6Uot=M1EPKm(ujtyg*{Cwd-DrV-}CX z*Ho1lq6fBpgGwyDJmV4e=zhpiy*=8KBVVIIDUd9DioCoABTbGS8Ek$WfVv9 zG0+ZJA&R5cH+Zs7kZ0-LYqQP_=>?qOpq}Wb)?`-;#TAgXCq%3vVRHswQ?>`_ zH9m=;Fw-89edaMTQ*$0SSBYywLUTPb!PE)mk;2M!{2{G-kfLBfbuKhghiD-2Mr9L(sY{z zJPOWp$i=o9{2s1xv)P@akr-7&(?8Ljr*i2_;7=O4L(klqcG%vIlRtOP^08r+)eUZm zc?9`a64EhS=yZxy1CBv#g3e!)Fm1w^n`5aF7F>ZNXbV&_E+1TZo*Hrwoc{W-?C2?3 zFM;cy28V3ZG+j2Q?5crkKx#z>2y|2v9sQXu zFgrPlMULd=$2;v5xe{{IZ%m_KX{`Udg3oX@T$E8mlV6{@kAv|^5H3#rB)gR60wHA! zGJJFMarW&`9-o{I$zJFod3I;c^hUj%=jkccc zpwF3WMv{+vgPs&;D<-Bq9EVavTgZc@d7>bH>uK5VPb_`z8fqu5;g1n-X%*SiBnHgy zCVcw1tM+`R8~f3%IfeE%?cL%3@Q#Aq$eYgcPDw`{roG}9JldtdiTC?J67%$5flrWc zvZJP1hlmAnIOT7~ZKrxvJ%hjwIHAQ`VhwjE7F} zNS(nN+_JD!N0Bc$xA*4$UHiKI3Xf4&Wx#e>vPz%8)}joYuGFG zS8OURVtK$w*z?+%$#lwj=L}GkRw10=tpa-^P*Pm5=4oYWyyp+ZJ3MU9TybZ5Av*&E zfKL%Ah1N$(EzU~*6M$68+k#4%6a_u?8UV|juIw6T^No6GfC-qsn*d0Z=Oqj{KpcQ*a}>Kk+8D~hpxTjX+V6ZUNXvQM z%B1p;I)*;6D3Ispk202dMsUb$aT|*oMvcu%npiTmx9vt``Py4RMjuy^ifsvSZQc}y zei0$0r-dUfG@B+)r+`fZEOx*Q$13|C`XJgeU+eEcrH@2!u%|{wC@TSFp2zo2OXWQu z#S@kwgyK-ej>h!~_XUzOrk&+xH?gVNiN5(Evb}pZS#Ov<*qxQ~MVj+)FuFxRA-}>^ z?(V_6yyRxx)SMTIcan zVUwA|Z)m{gE*r^FYFwLjc}fmR9B%6k2iyBj>Q$W4w~0q|8Vjx&0T^y{ho};wKSo#< zwm$NIuX75QH_!KCjf*=RtW%X74yJyy&q}bqbhf1DxGZ_}w`%D)yX`x{PkS}kC_i+7TYc9^V!CL;KpihmRbjPANWYMPm?Fp-MglfJq&uUTBaU1 zM-C@%iO-CmUr3Mal-I74jkF2ibD}fjFn$%569RtxH_cO;e0YE9tRb#5pBth66RuJlALg zmF;E@SwYFUy+aX<1sh!W<^}ssLr>{h_;ZVwIn}MM-y`Z9w72f`(IdQmoUib}+6|R1 zid63=NDtvO^a#SXsNkrO#Y62Ar*)a848w3Mv2%GR%OR6P8b7OPf_{R2GH)aB-UC`? z{Tvy%&UJ^7ONcN_%aQ~Ds7wyW2E)@czh)kvkv#Je6rFLGT;<@@obo3d#I#vrwO@@k zo}n6~s;{_~ZD?9*0NH%S{0(&RHxn+ZNMZ2S~4s^|!s* zFaYLJyfs&(sA;}hB(eg_wPSRb^z33wrS7G6Y>Q)+cmWt|unQ+8_{7S~qaassrx|qg zWmB%AE3yjta8qD^v^wKw?3$bd&4~u7f>g|{dyW)1<*{TVuJEZqHi(rCcG{>Vc^#-B z!Kz1g>>?wX44|%IZS|`~DQVJa+$hikj9QHqHW?Ibr&4OlLgiiRg5S=Pw$)-Mk3n$g zmUs3Y@PhUf*&Ms)s#7mJiK22Ffx3&DY4F_ZOXyvQ#{DTh#__;6WqGLKHwG)+zyCZr z`>1jSQo5Vg^%N9|6fxLOjws^M6afIah*ebvJZ=YJ7TH#mRm>FS@h$ASC%w{opbmh{vyX9q+@Z!3>YU5A8P*xopybirrTo6dhRi7I9&nQv1*}~9c3fJp z>6t*9);~sB~hYh1Yz}NZ;zA)mO-_;B5N)x?% zNELqcCQH!Aye#kF6~a6G>*b*gO@@(wd zulWjJ8VRVb?kAsD>}FYtrJJc28A!O4%_KWeSQ0G~fSzea<*mIz)MjUKS?|rMvCn?o z?f2iydNhqfo8YuHGI4KhH0-|Y*9c_Dj{%5b_*5@n)UGIge$l2bT)1iZq>bCn%t{0`Tg>Cx`&4ksk9YDLhenze;;c0ok68SIOTVG%&hYzR|S}{r!-t5oo zEB?^A8!}Xu_Ee!RXp=qn)mp<${kDcmi0y3+7egb?Tl;n=$E%}eXwGOS^up-9iQydr z4PfWeAxgzQDVMuXK+h#n} z-1AR*5b

-|&>He2(Y_514*DPhgW8!ON1#6=s#08;a!lI5bb)8Pqd{qfgl7v51&j zJwpdRC=RxFT9UFdoDZ434r?ht1wsTbjSQ;hqR9kHbYx5SpI=1RC4p9I+5{_{8Xm2bv;iK+`ML;doZUvkj>uq5fywxG{{(7tN?hRe>JeAjg&GB23*9 zEY2nEzxBW_>q3_;+jy!YsAhvv(3`1NX^s|@azR8^(%5cz`czvx)Vc>Bfku^9^KH=d z%%lwjdC37bmz-`nWNqLe;lZQ6r;VZfk75X5M?*XsF(Ak}oY>1Km#16Z=l7B@! z%1^K{RWsS*Ci^=3vEhd91-RKsms9|synk~=Pwsd{ybD;>J-6~@doCJ__1_n0Y|`Dt z?T^9-gD6|lRbk3u$4rA!>c$q2g;~Wd9tRQ>j_sBj0mr6N&PG{V^3zAX+;`HVRn{|# z&a)*=TeXLC?9=wFayT>isIT1Syp^Lu5-^`tO?8ArYQcsyFq%{Ai=JBz;%k&Qdz$5h z^R`bBZ)+72Pf~m*cgTL&?eaBRV(xr1+kX@Zjtqa7?&p@7cQoBXR>|1Fcp851<$!K* zsQ5M#z?0u{oCeiFT*mKvRR8ip=#Rbtb1Mnk+nz}0KW+@8r94<}ijE!s1g>@l2Czsk z$6a`wM49lDNL?wljsZEMoFr;`<%%S(Y3qcV_XYee@G=ZMYv|CH$f4<{ryM)US>c&Z zA2*#C>rGyQ4pDoKf`m#c2HYJ5zBR>I6Cnf~C}(eYnC!g6^b`s^!n{Nhc9gt7Ck)Dv z^@q=ml4Piy&2&D7_Fr@-xQAmlbEfb)Ggh{N5gK5PUq9a`!CyhmxOxz0%trZ6%` zASDD{Ppm+bb=#7H~=Es{8Wm~ScHUp9pA?NjZ!@G-FjEln(4GwD=>CGC~T zJa_`Y6=K@%EUg@7S?FnQ%A?WQmm&TfQ_ZU5ck!@O4qVD^{&p~RKrHEuE_Y4iYPFon0tMP|y`Lqm9~|z3FLy55OPT5cFOL4Z=`4 zCrBv{l?z|?A)?uf>|c(@^o&=B&-AN168+Uw%waIhTOnsIdK{P)bCr7@DUQwCz(|gc zM&87!qv3zq;f#Yis9|KO;sL*(l1Fl)c!I?akt>Ou3JLN75oLFg+HrFvxgo95bE|Yq zLlP-%EiQL8coA65Bk()4w4R_Mt&>&behLgFP_Xzz_Xe{whuUhhoN2>hNEFwS_i1Zc z_+R{TitL+cZk@iYbi5J~%y8=oy(dVoa&wf^(O0f<*PC5DZ+?V@pbwn5iweWV`)FNE zObju{OPt+;YlQ=7?p!Sf{2wte0r+ zV!fuCZ;Kcm#ILx>n%drU@4#21gZ7uB<%woM=;&b_MF8r?xH)ajA|2UjOqjFN3&|9+ z@2{AjKsAjvPfV^1oq(&1tIFb}SD_qp;$)K#4j3hK-W@ez@3}zS$3|E6&ach>kl6g* zLEVnS%0nt(_`hs|pYG}@1Wzt2dOgWc*x>(}(trTy-{|#fmm6Ly*_~YN4O|VM$!mFK zZ@6k7SKlaZDqLbE)YNm7_v7;8jN`qinsMfI4fmXQgO{j9?>Rdo$TG(*v^HCNb^CrtHLTotq-Fqg9WMlkF|z zYCnUQ)>}+qQFB=xl(!VRE;WUTK5;KKG`nA4x7*b!`cR=i$Byfae782<$6zW$T`KYIe49g|78N&%>r#9k zO!uqJG3uzJ9LD4YJ)6z0jDh1*hv1r+V-u;?+Qt0j<6@V^A(9tYt&SqmIHkriA16cO z)mkE#j?7o~sNEg!7)Fcp92zGVV>m^7n#OFBdl;(OsYa&{pSrAaI`izaprw>uyI~j^ zOJI;*OLu@C9Sd}A-|p?K>D9H}qz*WyZGDb~q>5y`N*_tbH44en{j4hf&Obp&a~5*t z_mxpNB6Nk{nXZ>&%V?ymiYJ}YN^$qPolWtV)KJ?!HtTV&WaaRt_|n}ctn)SIkX2)ujroiU?_7D;FxjpE=TF_-%q zG1LbtE#hmOH=n=IRwl7g%P?Fq<;=^^(x^)1kS0zH6yS~Bko-j02!* z{-Zkm)$cr!4{0qqw+90u?fs(@{>$&}PeQ}~M~&(WQjyeoLjC-Gj5~=QqGv*}xvpMa z*Q#D#CcL7I-|TDFVPt_k8vi@w%LC7jPtJYCH3cze&z?j<0!|tj!G5R6pD~LuMNfUY zjg1w`@{{cziy4U`C2jl9@Y*k-L3>`yK$_Qao*UVTiiX#Z$(E`=*HJSl4l{%S@YD z8{{L;GLsLTCp6JeF8{M6_=CTnZC&fl{G*@H9K!|cG_fv!8)bwN>g%T=yN^R>PCWDb z`&5J^9G`Uj{TY4*!RzFVf!5a6Ak`nkEQ{7E!@CMq^ki#vsls?6@yPtai)t_CyX4o) zyrYAjTDvDE&6E8rOV0iO)ss?6MDbe9d{!JYcP~)_TQwZcQ5z|KpU;s9J0krZSL=4` zYG=?k(Yj|xl%&=QGx>DUNwhG^;*`t(`Mk#V5EcJN6aC+pPrO*>$v^Vj|F0k!dU3qt zeUHthoooBf7fak!ElDFx|2UBruoGsIn1M2|`kP9na6~;01kM?`^&6 z_k$G+G}9)V{x&f9M`Hi8#D83)^^eg2;nMQ==37_XpZ5Bf6#svIiX98Tfw1+T;@pISf z(lDxD@AXzs?vu?h;Svv^@O?R(p3i61q0Z|?e|+A+k7@IIAi4VDLg>D}KQiv~jDLUs z&)Z?UsJHf*+cX}N_)L}xD)Y-rc?ieHz8n3ceuWXgU#`I!uqNIhGJ5X}O-j3J-ll&? zfZFk)*jeF!oDkM6bpE_OB0e~7UAHXyv-s-iaw0?TT{xBNKct9Uyeg_6G(8ULCRE|0|5!UamQ) ztatE3Cn@^Ke^mFo^m(sQLMQ*`4!i2uiVE>B&ErGg!KW#E%xo6x%F-0NpJK611I z)V7@eim!Hm>;3D90FUWFC%4?og%N=VyAI23`Tw8vKYBZ19WZtu#t@s~Ghp-P#1`50 zZ`#{G`afEHwP7YmnxXsu`xjwgz$|bv;_z+e9Y1oLC)@tH&K#2;`x`;Ezi<6|Sznvq zPuhk4_oM#rUs!o|*^kda`Nl5h>EBw7A6j<<&DbBs=hyNDV}LE6Z5@N!&A&pFp608K z;<_&DiQqG%`LVjqM?3y;8h9NG8UNP_s*AUis1>VrN6e77D8%_!%UZDnVN&wo=n8DI z)W)`wQ3QEoBBey#&nVI zaMjiC6S3ze(R~(t?9KS{DrEgi+T)p5nKUxgm)=oAxNR|x+8I`{2Ud*6LJyngqt1(d zK#X_7C=7q!1p3Py26g|KD(INPMWN+j!YO!z)Wh+ro%!0kM+eGMC=+TAS}-W+mjB+` z_}A^hhZ{tuiPfhGU`;0OHPhD&HbKh6! z+zeZaseZ>2`@P+@l>$Y4`lGsx#ixvIA@yz%?HVVr!e)qRoTbi82=7E*D z44(hY4~3HYYagEf;|`%Ck1zXNrtiVxc5V60{&CdI#PTcVS(PcRv=+Wm_w5L|4Zv4hX^6JYPT>^JjTP>o1;(BGar0*=o=E4>TP|>@g*&Q*hKRTtIIHh$Mx` zQGjL0WMEwz^+RI%XShA)q{^ZH0;FoX?QKQHEy38C)hBxtIFyyr!mxTjt*M5F~ zr(j3zxa^qJ!>uCr3!l?0XXda@5S9EjO7$UsgO6c$iM@$*+0Fjpebo)mTrm zYl$h~B9C*k1sq0La^h80sxfnlhvH?us$`=@N0T=)hJ(T@cU#Jt)RC8$2YJti+%8-| z4+Nc-=2{Dqd%KmDL(u0?{)%is-y{(EWFwL{A)EZl=rlhYGvgoiBLe*Vg9%j?k`x=B z9#j$6Q+Z0BqqT)_-HDxd8hg&cLcH(yN1Bi9!XNRyzne4^dw+C&k74u$-_ySg8S(@1 z()TV;q@fe)46?wAGuv`)1R6?)XfFYq_b2yS0HS}x;-1opdEa*P}ozR?^wival678qr6fV7RQezR&0P-pfHE>7y{RZr; z{mV)l`lnONwsM(Wxq8ZsORF!2e5UjIvv%KikFJv`ESg}a;K>iD^EiS=U^j_4Z`K zfh8bo{k68ps?ECw9CT_rmxONy$uFn`STqxuC`NV#;i*uj1{`3{jlp2BX*_PCnRhP* zD_U$ZviWjcufPoXjCSV4fY@`RbU3l$_2(Hn3gy+WQi(dmh`W6-jHDxW@oX{!tlQ{W3iDN`3L=p=H zG!muCRpuIi1Gmwr1CtuC;tB?=_u3Dqk}U0tNx3|<9K11Gx!s2SVA;`=tHP7Tqfj~*M2u3)S|&~MID=>0_7dX z#}%p?Uf!MZXaudm2Jn>=WB7`G0gA(PmG3=kzj`2@(Y64N9_09V3I^SemDQYyTOn|o z;2eoVbwk332kH;LaxF3#?sbZwYhV`w#R?pK9El^pI^V{F2MWP3FL6W#55VAyS$o5O z12ihgD<${b{U_{c-Z;LOxT9NN$NuXrE#)eXF_qIWJ-|nSaEMW<5|WbF(DVQ;;%%*e zQDrXBL%e=KgP2N_Nmo!_daD2kD0ci+aEYKxBsLK%xHp$EhXPuHtjmakyzb}-tu08c z$>JS>D3kFe`8ybFYoKd8)VRh>;CV6sVi;tmUmq?y;WgE$MSGUad-R|DqIUTVtLdUFcLW~^%ifQ@uX7(v zM#uqM;jV@vkNpsaD5Hbck~k5FE@1H7;`DyOCkd>?z(x>g52Hzk-P4!-Q8bo((WMYL zkh&}E0=k2yr>^{-zA`g(!z3myj&iUI{S#8u!l`JVcb~=!vnc#5afN<84kxKUUZsh0 z%ncG)e@k{z|9VU7XX)ajV?Rls^imB0xhD!HjeaP`(3w1h%b)!*?ich|Y_L~wmi9y8 zRfqTkYI#;CQpynsebL}VBfj`u;VCp+_*x8^C4O6)+q=(+d%rib+t^x|$$Cm0#18$=!r3g_hz1&t6BIP3-I0$@{&N z$3}llLp%aoWNYw3uk|oUF98>27v9;|Ho&g1de^g$GzMG6fbJEV3k$E0HngxbYz%Wa zXV{%3?a~Ch{ghHC`Q@piBdzt?bf^>KatT}anOTum>5tg5?NfL~ zNfkB9ZeNFMieeeKxu3=9?f>kxLH19cxADe8{(63QbgM6sq*8L+3$5QdNHKKsV>He7 zzUObrEfCsHgS`em#v+K&(J?Wbxs`V#Mt}kt^6RI}y%w_G8T8Y!Elr?##%*F6NKhuA zf~j^^hXx9f9|Zd&#TabAQ$31YG)dHVo(rg>JytEW!ymtaNQ01k8lj2s&dNWFppUrE)c3A;aNqvo6e0CNDHZdjYIJqE-WItT&>5adJDj~lI}-@ z=wmE$Hbop5xJOgxdLBnb*dV?TN9X_jNuYf=c&cq^#+C)Ej~K(DA~ywyrcUgAX}&8|2zq z#zjHb@C9|&5Mc|};HywQf+tw&vezpm-RUlgMq`WR@F8@P2aopVH)5aEu(Gn#DD6A4 ze%Jq+tD;S?7jx{D32!Rdd$+IR$xP8Z&nN?_cPYQ^MczdeOz$6|oJLboV-~o|bQZXWJ_czd~tO>P%WI4chGoG|s@$3w~CJ?XDX% znh?6uYSD_a%S3s}WWC@+0m81!azIz!2Eld=jP!9{iwm)ty{75)Fx+Xuq4cBu%iN%b z1`Gnu+TgX~vCZH;JJ)W%QP9UAm@W(BNuUOiWAGjgmeB^M9_rH(Sm7Sog^LtCJC~rn zYro{)+oQGl=SnT^;gI(W0&OU<|z(ZJh?WGL2-;S3=&0R#l4@O3l2lj9LEtREk8?nz>r;K2ZH5u2F;+Vb3}Qj!%j|C% zG?+v7gzUawYGFJ9Wkj_&RTWl%m_ml0qTmd&VP&~M-+|JnI8C^J&b#7}jc}`Zw2_q( z+G-hcUy}XA{CPxa7`_kI@DjEY$d52Z8CAvzU@zdY`;j(oylQ@%uudR2D}IZ(GK{g} zn4%|Wl768#`|JgDlk?HyiZoi|? z8P_ee4tb@QQN??5J@jix6=TqFnz6WNwlAE%l7vcpU<-4HsS?}%iqS15-TU@C9pCU{ z;rWHxB}UV|lWjeW_A zdig8p!Qzwv{I#lAd0vOIOLeOPRMUuYR#z>Jc&=9>SmC{59CxE9qLjpSq6N5X(;!@6 z{(|w3Hid5m)-MftXR*l@ZZDihND)-70~EE#8foFkT*vuRiXi6GfDwTfIn1hCKcbbD zjjj}_*FH9D5s-cn4GWxt9e{e^_4p&jz%?9wS5K4fIwJX~qIIHnp|W2?xg~xAU-S9f z?5eJqVXMwK<0aYNfWy#3YKBwLktHL*+H2tO4gvk`{o|-fN}Y23QW~IOgsSm8f?rh! zk>i&Zo$SvM`dcQIRbeq)>o4$hsmNimoJ`ll4=6o~13b0Z^tBMdGCTruJCF`OY*7ew zK19519r>WijoQXEH=OGjU{){Gpz)B*VRlAQypv68;D#XCGqS3vAG!{6Z#J5o&+mQk z>CCeTa$a?qI9|RTz0XeeIE@*X^oKaldq>I2SqPtA8H%eJSMTjalCK$e8?guboEy?i z370P1Q^?44yEVqIM-5NZ`8~zW8i~xkdZx~Mm$SrZ=54wM{%%2IrygvQI?Occ=pi+) zwBN3(z3omA0137CA_d!*;DG~I3y}7*LsWzHKB+5_86X=XCS^GN!lq`0$PJ0n>@Bl7 zlmIxSvp=zp`H#&cnuPr_Mbu&S+b42j)jA3Dpy?Y>Up3%?zdbi>hg5)E?*>WET*{rc7; z!xj+X*wob2Ud9)XOjYK@tJI@ycI(;ZY4Tt9dE0qLIh#f7k6oQmj`(dwpC7Mm_BMfS z*6O++efr$WLcMNJz)!d3!J+v~!zZliJ*<2zDQW?m4TLGgMbH1T+Fdn7ElvSPS{=j4 zt38!{G;BOuyOPxbs)K%~0pX4B~Y@qb+ z%5b2pSs!-GEMkugHM0v_liA`OvTtOPki{C(UAm^aiyZE836LKX9uY%T*RPyw3L(_r zu!zJDEHP*Wg&FdwU7o$p$fvwPi%*B>E2kkNXWWTwF`4J%=QH?0lYLKrGwF=pbc> zgPo58azPBCWr5sE{s>3k)!aWN2R#{`rYXygV;@)(-55X>=T}zVmRdD-M}vD-nvv>-kM&g%3<$xPoxLRUvqEtAm0C zDoPx;UAR+FSMHx|JlgP>Vi8I{SSO^xNa7|$VZ^&e5PJVOslhcFT)bkOL~z59+6}SE z-Sc@FWm)S_nT;Cz6^49PgFk?GRd;-L%X^2L?o`dXwx}-=El?I)`ZUck1_2g~HeE*1 zCmK;%dlzI1WTPzr4d;Djgqsk8E+QJDl9nDp7PEQVZfTpF?w(E7NR2PVz6pc0+Tw8* z4#XHqfr-|r)f$=Gx^eRRhQ|`JqQ^>t1iqzy*uD*0;nCIjtLXeqVY;b%k2mC`Ba^`-b2AhfLMpY8DgYmoTUyco754+o@CRjo5xSi&KM60nezNfFW0bMa5at1nV#^JU zT~y7Bm6tExu1P4K!U|}GYW#34aoPAnUE{U#Yp>NYkg#Jbb4c))RQ*ObXeWB2Mw=3* zp-HTU{}w6~AE5vjo*5`v&DRc_JF$HpD5LKjpeZHHe3~FGyr624+%%fK?pK{yKBq&6 zq`j1g=)~z11D&6ZLithq28sF{fSj@amCVz(Q}2r ze7n_s%}*Ez^?~c9mX_8OP5j8u<4q;h_8jKCdyXAlqH74eJ5E(_;j(ycz$)iYzdck( zUMM*f#^0}nVpCG6jSeY;9>wR;(NOgT(XcXoyeV5JV5^lC9;(+O3%Ln|?T{&hk_!nLJM)r6`+I zh#3k@qRtUplFq&OBB`8UDc%k`@cz`>d~;KDJD;$?kti=D?8P&{qwy5J8^bKKo@?0` z?fty}{N;O_Sun_EJvBbSGc3q|a^u6ib{CUjH~|5W`~80JZ%ti>SNv*MCFjJ?X=O`A zygGJ}rm*egX!Pt4zt}~_Y7++1jkN3IVm|#tNjN0TV|*E`m`(eW>zekr9-d(Qb`8!@ zi=&NX9^L@90zPzVYdmFqcA)=P`N==X@3>={>Y^(yj-zK_)CZN(DIjEkBP_02&m-R& zacbfI{XK2Yz|?59(1mx8>^$yvuc~ii_IBD$1`-9-D{_1#wAVq%3!DrMH)Yl9vJ=`~ zFYgwazstaN(y!D_o-1(88IlTKcb>*lS^MQ1i`eX8q z^7C28(Ux#RJpo`v!Rt81(Mo0mt=#X9wsz4Io-*Rwr&=DAuze*XPrdQ-OH0R~1s&De z{cp)1KXD@n4Qwe$VoNS^Fm8fL#nflx5x)&%=6Rhnbk{8!X9xePk4m=+4IPP+sbtNz zegEbdM9%}#BfN&%UzZA~y0^;>Tv}G+sv7ApBJI-ka?~HB?e^SNk|7*`PyWPI%lxKN z)>M5-zxEoNHj`lT!6mvYetp`e>~`23>wKS=AiJQ&y+!t!q3R!|*Xk3=JwI{037!qM z0j?N0b}rA}Xh2rmh63y52a+4-#9Hotd9rN!l}G?xv|1htht5%#rk|AH7UZ_Wq(;8a z$ffH)5Hr5WM(gS$EUEhgKfKr@(qHzlaNO%Syr;fe85}uAxJ%9tk0cy!YJHUqahT$pB)>*Z!Q6Jd{zBZ_gkv5TgSMmj%Mvkzu z@ph&hmGE{eBM-sko(#K%41GGU7f~~5@!QC6DrYbEWeOg-!z3o8S|a=OxMvK5EYNO1 zL0m@+(Aa#>U z6jX=(wOt=z*3IZS?ExqQB)KbH?9AcH4GQQ*;sOSLEdLemMkJuQ&<5TvWLssJ zy@{s+)aP7We2C^N6HA}AmKHhL&@hK>@zmon-n+!TPT)Iuc5Db_aag>o_=eGewZ^0R&Qya&)G1L)oCUNRj*a(4)a5H zq+EfnLJH)a4AHkvOxa54Nf^f?VjSkXRSFo%67>Pnm4Ot&YBy1T^w?3N{f3oUU?pGm z=N${<+>$%n1jAlr9*EcOud@({MV zt|}z|ts;Nh$Ge$)S`Pjr>6ST$m|9`Oeu?DSHiE{}8+|Y49^3n{v632E`Ig{b!;>RA zgMvnnY?sXf{u`3lg`d^ngrlrOT`vYfBDQ|;+kMQ(8<(&t@CL+i3X!mZ7@UHv3&<`8 zmJ0OlVB!)y2se0Cq_9fp0a6ZrF}pTOPIOT;jFH3;QWKyq!S95wp*y4g6~9)Y!xqFv zn;qtYZGdh~{sE*x(D-JcvI2m%f79XK6G(2Lse>T+ILatJT6Sq(B&5iPUd(go5coHm zyc}KNy4c`OgbLBUEAt5UK{~eaDq%52P!zFcFe1~h%Q@Z+{D6LZFQUr@s|Xo_yWLr< zw0Q0pE)u@&prz_P0<|8<2yP=YvP?6BzN3Q&nr0!?~DDAi8~5$@8$^xiYKiW0=A{`(PWC(NUIX0+W9g|NuRSE zn=RIV9aBc@wL}v=V9VJ)xO}528@SSJqICn8PUuel`@N0?#dgav^f!`qD%ePBCaM=8Pot*x-z$K)kX${^7TE^Z-aEv6u|pHcE-0e zOfe~ip)y7N_k6OR7{0wB7)49Y;5C~72(MJ>7LBY=sC{UXL(}$(OM01&MQ2n2hjN+41V`k#iJ~q`roN z4t3lWbZ=0i!xKb&e`z<0jNj<|(gVP^#Kn9V5e5GqPE{SGUT8TxGq1L&D9pkK8KA{1s4AH%I$O0v_v z*d2X?Q!rNn!fDQ|vmN@dp=jYOVR5?wo-2Nl#upb^MM_oRVpr=gc^N=es>vOspnOly zi6xsH^sO*a)%%FW4~&RWn@QGBSvdY(aJa%c>x*#j0~TTRat$%Y!zhUm{SBjb2wn~u zx6#ES5MW?)FRCc#kNtEitmP@Pe)>hvIw|RZ9+)iG43)9s0 zCXNBvTOV}wbe$_{f9vAqGkHO8}Ok^@I5AB*xRA3 zS#3h67e%fW;C9E=`Y&c=dg!-Z+HeOA=#d)+jqlK+M=KZpql60x;P$65Vt@q#)tWr{ z^a%tMqAr3f%Rk*#b>(@$xv7Q^^)vg&} zX=p;OwqD@6y3(Jyc~cDzw`HA_$K^JaZz82BkclQZBEeqCs2qY*~+vN$D0cE6fX9pGX$V$oeB^kq=6Z^GK43 zVIw5{SXa2jjKIzgiIcU|$pw9){eq_niJ(+DLqdR95SBs^zEml52ML-7WJ;)pxdApMgfLL{m%bSV?mi-VxLPlAwa2slIT&8L9zmXjDQE>@q*j>9Q z?`7T{r5;xjKZ*N^XrBW6VIo67!?AdQGbS{yy=%$XPCg~ip6a)V@nvh=kmz|50XggP zBf_F-!#f~h*yX5(D{xw{N{yE;GE{M%bE#L&x@xcR;rDCis&d_`!D}GQ0jeadjd0jd zJcQwn5qJG;nvVMvkrfB~Qf?V?6~u4;Xr0~rya0oK5*&0FasPOW9i}kR!jii_^ZBr# zAn@%gq&P>&CQ&|e!h}`zQ!tQUsL&zGYyeu0I4R7C68!|d!W#e|ko&!q_k4}+{q0kb z>Tg14<`wyJdx4ZChg~CJ{+CCP!#bd8jJ(6V0c~~+AOG>C#?~ea59*PdYI5+dsqFN{ z3}a#On&Z;mT(w1t3wK5$qx0LPM<{LUx=mu1>)mZC>r1mApQYz{F;Q&Mm3{o_qK5&| z-^F1)=$h6M)qnNHC1RgKen8_!lR)SLFaZ&=fLelpzCOV2yE>yuT5vbesKSVlx|0SH zjrB?Cth5J+8=F=@{ENc0CL9EETnn<4$4I|M(;Tuo8XjB-=2vsBkoiMQN*@xda>nhF zZW5>Wvn)wGzphD<6NoiI7lI;@zg=(!;^8S+tM@j9uK|ZLK%2<;8{YY;qK^q7zJ%Ws zTHyr7fGig>&ESz9-JVouk>i>e`T>f63v*emUC}cqu_syd;rZX?S?H$!V&K@ zhH$CA0x!e}=s4l*`wS{eOHfX95Ab`tGp#VC5Zk!@E}+}!0i@Mss>aGin!78<7nyga z#m~V^m*H}mUP>Y2J>XIG;J_lbXtZ#%`L!4=kS@6($(85hCalYTZ-APZH?5azt4?TK z;s;zBIGMy4Yd1ks5f7c`h{0|hNICfK;wTb0xhD{Mr8sv=`RH=GOD^@cSzh*c^s>Fe zLz+tLxQw^k*H+^(K*SJyO4nTY1#^EAtaS~&3O_(_>~|X1cP3xJC6zIpSDaLj8@<;` z_iSM~7j-*&Z^+N&lBePxUW8t5JH^4chtTP27aPRD5G@5ELLp~>D;vp)7fzOFp*}KX zam#C9Zu>`9zcs?iMDflI)1`f>)yg364Gv0uFiSY)qx)(5tC!XV7|qQ~ts}e)GDsnv z_N#5fhh#mv+aKw2eqhu%iHXC>9Sj@nsH~jXW$2_Bg}!Y3y+%e=Pv`i65Yk6_8qmDp zq&Wg22OQczD0v1#AcEho>H(34re0|NH+YWEh-#807>q7iWlToVnXT;p6Sr_w`u+)7DD{O|+H z{S^T~?s1dhYIy{}vr;o%FC+*|DEmY1vL{wKvOTx(-S^&w{dN5}$L&YZH;ikUnDDzq z*|{Dypt@9%WIf%?5TS$sb_pKHC~Hu~>70Zfe|!$tREF4oV#XnP4K8y781^Am0|O~Y zzI{IIs>S;#tjjD@>;&+=+Z?fW<%9&>-?(bsfnUsg9*gP*fC!D}bKup1&c5$d4ekp_FRjLi@ zmSRGLor1gi!KXPH(itBC#W|M{Q`o;Cs@h(&meDYs@w?ixk2#b691Yxh5i>Eg>MMd{ zr)ujXGXyJiKE+7S;soFH1}7`Vz(-flP5bcY4X-sYaSDrjt{cfhvC*YW6(h~kFk-gA zKGoBVq@Wn&qJMznRxLLxP@?t3qDb}xZzZn#T}w8jD+ z)+P{+e{cOi_Son1m;J_uSkcA7Bdm~2BOr*S)`JL%T{C~UhdgYXLk80Q%b;M&*NQ=)InYJ?9q~!S;hp{!XQ4XOiT&`DB zW6&4*_>!(EM5o0vqWt9IsC#3kqRM(Pf;s{0gU_o!bdGXr8OOa-XQh1~6I{bw1@1yR zJl9|$YWNX7kOLLwLdYj^@P{@D+WeJ{wsx94)08XfV{GjGVq^X&LSAkjX130|MiIK2 zY!t!TnGq8_KdyZ@AHCJ;=Y%;3M1$83o}hi<3>*QMp;72{sV%2bU~HB5e5_#y^G=#% zR;@BeAH&d7>IJ@X)wadC|e4ag4jEzNDTuL>Q{s!S?Gk&%@B<$CG8*0J^ zECd#OXvX7s(Ca8?Y&M#|XfMv6XtbwFkl0CFk?)24ZXDnttZ-d_M(?AWMG*z^8_|#> zG7~hQK(9t>fUIg~q>#EBA`jpsSnO{Ic|m|_IZV@Bd&4fr)>aeQxC@{Q$n5%XQzGNx z+subru~hatlpMzVAn)P4@(v3;15uZ-U-cIz6W3}=4&VH%cMqcg(cX)vi_XQF5$1om z<)@Pu3PNH7vnFfmVOz8#;a&T-cP#)0St!G#xt6eYiM}h#l}Myo;+ZF5`#i8_P7r6n zR=f6&Wq&9WVvhl=1|IDp`HqBZ3PGv_aEcN(n7^c3<53S&R8LT%^O~tVjnBjxf4ZSY zA0Qp<_|9xbO9{_>BI-3_pvzg5wG6{@YObGS1-=Vs13W)DxGyAJH_PO-#-e2yl_CPsUwk zZ+TO*?RW#4op5+iP!MvnVI{P5{vTOi9Tw%<^-D8!Hv&U{c4TuBI8ImWa>1P zwSr-UpH)EEtiP>&^dOQrh-zyg7$T!Lh(NQ(e}S&O%Di$6poYEZIVji`a`NU*{mwR} zSQ|V*K2IRM|0JE09dspDO5p2^fiTNz08T}(?^gR_iTn4@KLAu|iWw9A4DgmkWF)8Z zO>B!k<7{t<7)jdj0~yD1V|jC_5FK=(Ot~tZlalj&t$|kuBr~=!PNoCW&Xg@jT}NxR zpxxOvJc94$&BF_|oKqI(8jgacf7wXZ$~DD;o5Y7{Jf{R}M1w=;i1*ueKeAj`=+f~^ zXv=5^yrJ8C2^zpi8z6^i1&ovRu=3{HO~JLOw2!px{^wxb3mnYt6Z-2AujLM{Sxf-d zp$h>HaP!3D112;N3j`oyOdgu)!!bZ`C9G=bDH3){K&=fuZ)fNqX){jA&k>Agqv>$Z z7Xd#CqiH*|{4w`XY0#l7gBS@2&8h>q`);kjOCiNVDbtlNfwTc114=Gz3A;Q1ZVi+_ zT)A-0jkf=QIomw4C+9n=2o9+AQ*RczgsKcoHPlCV=Z9BJv5H}U11>|Pa|gR-Zzvxoj2W16m=6ZJA7wuU$na78 z5sWewto|#uSCY&=g~6gcykzZd6HiV16n-cL=Ompp;49qU)G2(qvAf~baBaC5f#GEv zBI~#RRzs0E`jAdMY&MJCK{G3b)SiUa1_PR$_f)pHwf7lNt>agffpKkegA!=NPbv@@ zm62M9xb*$45sC-63BSBs|y0D=HtYtx64ghW6}m<5d4<;&o0ZCsSS z@zMJ7J)&IoCgs04tI!)XtJur~7#QwqkqAp4F0}D!c?7P{BzIYdW#xLVHJg0iq-(+xNi+_;|LQx}x-$W-Szbqc&^6}AY!B^C1*ZiHZCE>0 zZ7cv9=;L!Dsmj(V{Vs}2i~e5HQBBvt1iQ^odz~8yusfl#MjqO>_cc_p8uqS-F-aVO z;~-SWCcHpO3^s9f&6d;3bUX-N1(!a!P+(yH^p`odD@;3TWD|nU!q5JGNf7R&(gP*i z;YA#RwSL2haJ1U13N^fkO%WKAt|4P|l2QG|k83z&a4W_8_-XF+?cA?6=^kipE{c&% zhgtsR&5!273JiJo(8boRRvF9XjTL4wPwl57$54&F5HH>SH5VPC$I|Dei{gI|k!oc) zYXGreleYtW@H<0v8KfHZ$4vpaP;vcd4Vl@?a|45J%dxYaOk1Aq`e3nSF$3In<@ z)*Dc;NF_CLeoH_J$@QaER z>yCgL2<}-aNGQJ%X@$K=Azs=I!f%xc-rtt0HBg1H`Wm>_Md48f0oE9WwLa~id;#&T z8;rMbe|k#~G(cfL-Dtrs?HCSOk%X{d(5|8vt%Hd6Fx!i=rqA>$-T~C$*Du5kz;-5K7Qzu89 zPBA{Lx8T7fgen|U*7VRWsLDZb4|ssz;hn=>BbE1pa-`=Z|R=!})-7!Thhqr(4kw@m3I)5Obi6gKs;Yp^P<7(8T} z(~WLW{T3J_@YgrTZv_v6nfAVo?%3WgQ5srIl!7p(fc?VlN%#&gRG|eyd=VCPg%$?1 z9k?#nH{`H<-H42szT03Lws zJ_4?xkw9>%9VUBh%{ti%e}Azj#O-@HK)(PWf4{h%M9|oke+*q5=)r=Z+s4i({m|mV zZclsl#9?V@9rz}|rZW#;J2b!K&?Q;( zK=`&cj%K!`L)AjP>9rVR(o@On_gJOS%P)}3^gEwt?ob3DJyRpsy#zI%JVelFJRX5 zN>uT&Td^eT_?fLOLaX?3E#sou>-#f=M|2Mj!`Cb{%Pf17f`xX6;-Avf$kY}p^U>w3 zAmUhFI1{X;YiNO&_tM0j_?b(#x;SX87!yRDbm!7B}OB0hB0zaUxfCmj~qMv$^tD*(FTwu(+e#HIee8@uvxhb2>$g4AY+Fq&muQr%t^Hm)c(9cUu2R7c; zEULcT<1c-((RqKb8UJ0X`oc#ubV7@0iUbxWMJlj7!B(@XkWoks}wOiH4KRv)yOKODaw{K*fdL-mzsgzN+y{}H^BT?`sl%z z(`glpOGe2I&;^Lm7MAtcnuhsM07a!Ga~5c{3da^$7oc21#n1=ZGp2=OBgho%$G0@k zZFweq8x5J6%VHEQVM|XJtiLen@}9Z61o`G-H20Ses@5IK3#sk$R%4h^tLwO`a@?|J z7wR^&0Ob8Q*(7=q>fJwiHBD3-2lgoC1>6VB)JcEEi`$ro3ts=5(je(5SLpB>??F-w zbo8_@LWaAR1#xZdHO=hQua4mDQI-OF2%DiE1J0eop=wJ!DX2jhlO8k?TE(Q^aQGy0 zUeoW>U*8YuX+4t^Un#ymtfo@95H>kr6x=8dVrw}l99skhm+IFD94~5`KAAM5Ygo~} z^W4d1FC?&!8XuEVl!s2SsoDKvGELpyQMm<6ZBjvRp!CJ2`sv|yV$yQdp42Z(as=$y?F$uUr2x|-xRpVLsrb^|M@cK3up84J-kgJVJjc{AK<+in$2rgfAHNWv&AiI z6OQ||1?}UJZCPIVfSvyGJQ?Pngp(0U%#MfOo0+(xhY;eB1|dPfzUX(y>d7&-y=$}m z<2RwDd!dc{-G9RrKJ((<5=SUr&Gvsn*HH3LGRm*TL|1lfCJ#1P#JPiGwlLpg!x%dg z!@Uo^okOpYHvJ!vDm=o~7p&T&Wprg7vLovvy%VK2N+`N`Mt8_b37^^;{O-ZQZN@`Z z1y9(6Z3s0PwDd0gf7uZ5*x;M^Cz|D7it2y=)#mXI4+y&|N4hGC;WDFs0q8&u_cxKT zw*~a)txZ45?js90mbvt%nr#gfFSYX^C}c^aLUz6;US=a#62!(1&BoDPVfLYilho$5 z)?aVO3H&rRIuUdXNeWlxu#p(-(pUQ!KK;*2aDmqM2c%#?P}Jf_^>LE->qCK@(z7X45VNe3e-Hj51Rz1~6KM8*_-+&)OJ6DNa4Et_s$sK;%9 z^+N4EeQ@?Gd{%i@p+muP!JUC12a{Up`+r{u^gkcGI=th5y$=5ht_mKPzD)76|NU>C z3TDU9`8>oz2+<|unBJk6;-cBYnpduW7|Myb7|G`>mLS%RFBh$)kCr4SO(V%M;0d^Z zb0edAJ7*7|1P2*xo>qh65Zp0Nikf~CCL_Z;~}_} zwD3j^Bic1^KQ)(%?6gl^*7*pZ;O&bBa;#2<*R-ehfz$xcB%Me739f$(DFh5+o*yl@*t*M}G_!ZQjRq57@25e|CShVmW|j#!z2ZP3QB> zE`Q^t%Rx93?Y9V5H*VZ53QRWU+1GvKwZL*fRg%gEj|$vA9E}^-Ln|eo_g~vL3_F zdZxDUvo2cl%k@&!&t=?3E4gH>X z^sCj~=D~JYTLWf?lGgV@^up7eJY9%1*)-l7y3&Tn7@vH+YLv;4y!i9$HxYrWv7UE1 zp4HINlWPiHx^-qZ=?~S^J!HBpAuLQE*R)M5s`ggJw;a5}JI^Xe0%gtT;>KFJnR!M? zEdPW{HFC1nh)J41zBV~WtmL@IJaSiVdwOYX=6!u$$$36mjT)hLZDM+STI$VGlvNSN zlXApT1gxv#I)AwsXhDr^?<0sZnxanwtCMv;;B6gf`q(kwO)@L>}?yl8)1CGnZ0a;UPLS3Je7hUIb79}^TBx1u8oanWVVLHhOj$0Y)J&g*tafO+V$ao9>G#>6Vl!3RzF)&tg2!@BD6H!mpZ%{@|%Jl`fY3kUuh#NjsBYciN{S;}7ZZK5_7vlbytd zWzS4A zqX)ebzc9}OSfW39{wQnvW_bcrODXL$TCGAo{-z3^TB30s_Zy>^7Jhe>kW7@@d>>4I zRp`1>j;kA{tRmraICi__F1Nl|=td7a$e9^Dt3F4Uv$)x?oI_112cW7cN)s`Lv^ z;VOPE)X=TpJ}mi^u~LLQS_b2I%>o}z0g14r7;&?oaZ_xrXU&|<{wi-eMYAc7QqkUF zr%9sjKDo@im4NTn{c5k_p5%PIesEUIbG?jbw$-By(It)k5P|^@B{(&Em*94gO2~gw zV7}h#e=daW40z1!{R+18K1b4tZ_Vh^kd34bCtSf9kU^avBVI%O`a8&JXZkdqPH4jF z0gVu)TSUgb<7(Sos&*%O^B%Tlrh?#T9X<&UN>pgZpXOxY0C&{bl%U(_7ww>OeyVI) zrMFYj63^8VDuC#_L&TjC4nuf*?w(?d_XfU6f zE*lGXbTimu{+af}%5>%2udUlF~twR~fKEpej zjL8V0ST!mO{@9Gvsj#X@AVzD=F-BMIIrOqc(I&%;vOe$Fw$E`x@M|Alh-QMGeInyN{&i<&MJ<1jSQ0R~IRiCrc%0`5&z6z~% zX&c4j!xs62ouK|&L&)TRddi{maRC;g$7dUzfj4u9+kby)sr_>|?v_oDmZfdwi=BogI^+pSJ ziRmolwVf2>=O5y?R55R| zp_mi;QzXsFS9Pd|4?eF{5&#wZWuzxqS7M8aM5H47LC*_;(;((Dps~)IcCS=duAseW z{fRoJ)6Fk?Rx5V;a#T2;K;i(10tSP*if|1K-_gRk_f7E6ubxPJ@Q)$L$jVP& zho829oDC@Qr{Ae@YJ#0V;c4H&k2QgvmlKXChtx`@Dg|NTtAH#4J}@aRV)>FcCx&T>e7 z(5F`(yl$Y7|2KpKqU8?NU3MXXayF|8Z+(W(v%R{6&9q$OyemT@f-KEIO91u-fwouS6$3|H5iAF>w=XU}h$zD2HD6MA zE{;Uvevk?U-13Om@KkTim0YhU#@w*o7nms^CS)P$1u%qhFG!gOt_zglJ_W<8 zB~+$_6xVs4-vAD(U;vI2I6U)%P}V}UM=zXwSX^9Ooa{iZ3lLHDw_Cltntb0q0Re+y zq-PfB0~d*2H0{gK6EIAIRP`7_Ep(2TOOo(~N4q4{s>+=K=LZcj2M34o7Br*PGGxpR zNGeID6HJ1Uz$q9dOJlp6M#5>lWEP`c#?7RN{ zJn!w?-c$=>0x)OCCnolVZiMxOSmt$96cqw>bp})>G{E2;qZ?l}Z|&E+mZd5T(Idc$ z^mSgF;BtMiZuV+phZfRD}7Fr~o; zg`d##j=ApM$7$Nn*Qpt9)wqja$VG5Z(N9Y(jm$H)=5)*g%q%ycp`Im@d*51;knOD5 z6lLua5)+}&eA-F8Qt71kXP*83`HH$xjmd1Ou)@o?`oAqKY>)SL@wQzb?(JPviag*p zOhp&xIYxAw&&(N{l8plcAPbI0;7Q!Z^LHQ&gSWaC_VN|D0S?rZi0n4Py?5$II*NmD zunO-bdaM-^FOu7R7x9GnWP8@OQOGdCDdPHV$+&s&^Uc6k5peI_%xE+JIolLH1POFu zz_3L<1-l;0Psw$AcT^ z8e)Lj6IX>@mhlEwFQbJZe{v>1+iihA@D@H4sN9c$hjJDo?PrWD{{ioF{>4uYYGw-> zI&z7N;izBn{We&QbJ;z~m+44txB@pnebkOvnDRY@3+)c<+9EaLj|FALvosbN-6b5G zk3d_4wk?tW2q}5KMS{S$`V$&J=|OHtE>;i&_#7)C2{L;`mX8}*a-OyRrh|Fo1i*}$ zvt%SBk@)(hzxJ`0_3k3P$7);y7Us-d@E!uI@#pN%hXA||l$)VR&-Wg@ zgw)jBE3@AK8#RaT5+>Y%!9n;iRB`KM5|NRj)-K7j7zRucC8xRSsW^49BnVMmVH`VV z+Aqhiuc*I$a6K6~qvQ3?A@X)Mak!MOP#*9t9I(T`{UDxC6%16li+iI@u`sEKa>o*0Ubs&$i0i$( zz#j^P*zD}=_O|bMTkuX9WfYtxrP#=t7z_rhIEIV(;f-$Y-peKeC)(*@S7rw|rhrru z$b$%!?s-2QU*ByupN^d|k;hnloK24#xxjA`voZo3ETU1$OM^Gr|L!w|D$Wv`@CdNr zCAVV@2eItngz2k?))A)emt9_2-rXI=rl-IT0ohWWE>;Ex5F1sQsGne$U5-=AYhgwY zYL(sdQSskb0F(gI9#GGx7m`oD;>P9AZ^fu7Mp*%~3{v7))AO2M#Qjnh#*`!^qrkvI zA%)_27fKiaQ?wtfuUs*7GhuDky2Rm6|M_Ks%ntx`%&-<`v>qIz%&aWVKF0}BT%K2= zRRD$br01-!n>1m42oTZt4R}(NhS&Q-4u(4t1o7fFHFp+4odn`n`m85zk{3G((#lSH zO=Dihk+Vy?=>u@R@6M@4W3q3~p?tFnUJD=>r~K3LCJ6|p7r9ucJ#y`U>4(^#;jh0) z7zaT}Z>bkx(+Rpfh)9B^%t`IG1TJsy{*G(PChv``v8xC{^K1+t%b zB@9mmjR~@^JU#^Kbne$}Hx}FV4aP_NWH6qO6uCg`$h@j$*)MHT$GAsC{Hk2^L*(pN`$T!th)Co9<)i;Gn4iylQb3ZnoCP%wlFqF_@_;25;f5zd ze1M9s>12T@DMA=lE^Rl>y$8@E#}Y@_t!Qjoj(y6FwXxIxTjKPkob6urc=uR(%p?Bf zH=E#Cfgq|jmqF6X$0guQf|3RBsU18jF4JaKM#ck3xzb9eSBc&%#&|tS^<+PCU*Wb}C#;{seV4h$jjNqyRSgDgE=Sd=w(6%0Nd`3h1kWYJm zrH()Hp^gQ)B=xzKN{5fkl$@fOab8oL<(fF0`CN!NoT>GqYLJ3tJX^oi0}(_!5MxH? zS}4RtvB}fk#JCVapYN%ofsebn!t()Fj2e10MG#U$#h6K}!&SjLHlZ~u6HYOe_S;pD zAnDN=r|09q2yE^qB)ij3d%dsVqPc9AfzJ~A7UAO0AkQrBGy4)H8%LxGPYI)|beX1) zr-A=&{x!@8r|5dODPsw41Ovwu@#;o>un!0W)aJ8;H3%3KwKWJoNixd$mUzD(?;{9k zq`99NO9>yuxf66~_w?vpD<=iDgL&1UxWTdu9q+{qU81W6{iKG+5*Mv2%=C%j2-HCN zD@9xhGr008>S^0d4TV(Y69;}le?;(zDVz3o>AUlDZ7S74?1R?rt;!X=iKV)npPn-nRls)MX6(0s7NPJvt;zPd?0VNH_+yh)yO+I0?Sitz+?LobAs z#i(ze#u&b^G^5cX4zAW)yc6h$pf`2|*_dNltBlS3v0OAYSL&*f^Ky|NL9e|nZm`Qa z<9@MxiPEY8U&G>P?R<-Tr+whVryrTTuF3H7)n*jOQ}a0cl?E40vh$hSg;7Vtb`%lk zpz!e%Drhr|#a7a4vUk<*mJFC@Yf25!RIX*>`QsgZrQ?s+eLlsR?1IQ9m5(EiV1e~i zl$^9pidnG>H`>_$^K)FvL(Qkh|H??Bhl1&chw*D(e4NTrf+JY$1wuLissybjn?7iz zR8Tpe z>K}XnqmL+TKsThldt#O&3D-E-Jz(iwEnIlel5ur|=j0TS$VoRi)gVJqfpr`|%%q9O zfNg@ruoQGMJ9eKnT067Er->70Ql|}7M%75WJ&lx=Dtv9lj~nZ8Q- zUjvT96>cyf>#8p0==nk!0m>~0z67`{095!4#QaBJMT0G{?Oc)$+ACHIQ&!@5cMs&l zupAevC%9l08z?C#2Cwo;7s*N|Kq-c-fd{bIeTaS4m60A3v1t8!5WLSIu?7JL#L4X` zdQmEqgNm2 ztnlrk2<|5;N2OD*fyo|Z@Ck0r!k77aJ&fV8VP8Sn;b**y<3?~7=HFm$md_Kj!zd-< zsu<`RhDsAIw}Z#PJvZTcM>e=FU?6-ra!}b@bpl<#42{YfrWS^TLZR8K$~Ykqs&XAB zF|>l(fI5f_E6(}Q$;a~_FC?RaNHKJ?bz`?a-~ItY)DsApfVE4S2_ z_uPrcwqeNr9R?{$(By+wmRcB5V_r#0K4tUF$M!EMv0WTZGbJMgvUFCYx6rury1Kf} z4^7kDU)4>CYe(dgGaSS~o7T%nhhXD33Xe(@nM_Y`ilq${NMz(?S9^|^sBe0xG76c;JV{ow?gSa-_l)NrjD~sQ z6J5Ac0eU!+HY#P;K}u2G!aaMNJ`Q%hf+AUHPxR^_Z4feb!MUl$AI1uletANQMh~|O z+nz?=c!kK2CniI{37Qx7l}TX^A(9BKK`gc)s&9c3DqqcF7b( zwN))+YUZMMehjskXX=+Ky8Z!mGU8vzo?kJ3U=TzEc5-^T8PBE6na?_$?LAV5g{U;& zsh!A(cH3iguQocGl3%7#s(N30NkVip1MCvL&s!gm3tZX!H#acNwQ}o z{2=i-8HPdW1neY`#MeLFbCx{FUZRIlRKW>8&(%6+?Q%$`@J~|=!#ecCmXkE`nLKnq zDw!5AWQSKQmbaHx+zg8=yatHqOKzmi$Y!!;QD3XLjCpYRl@=fvjn<993 zf&B^iDR7Ou3Aq&p@s?G-g~L4X=Ep?DTn7mhFTUF+2pm>>&OOay{4@)xP2@T93}76i zzF$9IY@Pn?K0CiEqMVMCj?5a>m%^l5oqpv!)1X+ZNPQ5xOH#m5O>aOrK7|!9FI)05 zFH0VAN3?35^@ykUEa0NB>I+^mV0YY3u^U;Y)gTx7JN7OJp|mElXC=-w&h zf$HF5vZ%E%Z!4TZ%dM$xt|=>!5JejWmr-VSh6jv8L~lmg$>;^QInQ=DLB~2ZS2&Xw z`UJ*5UKO}`h7+MwWv+o=@ZJVxTsmzzvoatB@pWl+j&qb8e?g<8-ziyO22JZw=(L$I zZ}Beev5?$LH1#S=gQ;+AXFDa%2;YPSWx|V*Z`c$_lJRq^EbSoZ*?<;q+yM#=$Zt^` z@!?$j!~AsG2F)%X`vj*Ql*9xD5!ai};{21KTW{+=+4LC@uE`8s55jTs2n`K2H>Xwmvy>z;!bZY@ zNB%8=dUh!VT3UdjwCRNyzB~^Qz%?n(dP6JF zDk;(K0;V4pFLi%EA+yL87&GV^n2nfQ>hg~u7%{!}4169lBvjK*DreAh9e|9+Mw^kb zG!$lUUkMquZ-1$9u}j96sA(c9HQ8yEU{t<>phNM>M2m8UNEI-Q;R&csbwf*x9ZbN~ zV2slu0p@K81IV&Vs&z{bPYqH?`TSm zI>aDiv%BdJ*xTO|JUwjjMN|M1(9~d~C|d9!{Ip;Zy#vp_K=U)b_j^U+Cv&z5bc&MH zc#P+Z$T|9bHXLMMJy3rz!A@B9RXo|HpqxmiN|Ld!zki3w_#tolWTMa=*vgr}E{J=F z)!gyUrkr&t(a|=e)8iquOOdHtZUO%VDWl|137*3TAT*Y;5X3aaa4#m->Vc>^H)`E_ zV}MQDSBSguJzlBWTXqhDiBzUK!Vtgm&wW2JFMI#}K{DJV_!qbwY+GEKMBg=z)&2}h zb|v2|TGMAtoDq6+y0M=@)R9rUvI5(F1Cx&d(=!lWz$f-6nSKs8qTmN4KGKMnuZNmL zsX1#qtJ9RY_>(~y7$%|=R}3zX4vf@J3CqhL076ueT2bwWP|U7Ky%}$bD<@kli*Hjw z2ZqP5PKG~mBTvNKnhD1twJXY8T0ibOghn z{GZVy*7{A8)PtsJ9}_-eWSMJM`RM)*tDkC)rLg)cLYS12IcUsY-B&e|ovE=(s!OZ=6YG;4U|9Tpb)Ua>+AE`73l2G3TwH+fm^eoaw;%(T#> zJ+B$i)zY5MTtQT<^XjDIDrp8(u!-liFLFosxs{Qv#$+91ldA|aCZ=OY5%VoqsMtr^ zwi#X_b7Dz^xP@+k&T^nQ^J6A?C;*=-eWbr#96$*#88@@D6@GRH8t%YSe28~HgmF!z zpjgUP7bJBfB>M&An%FJPC-N$ouUGuB#?&S8Pz0`VkJ<7z7-B$eC2QaXfLgppyJ>U> zjr1q(sXlt>zLVIQwbMsbGVRu)&)wu%=l2>oC@JAuL#LmlQ~SByM?K_bym916q-wC$ zWEnmZw9tbqJqyu{IZf@4S3z_Nh0MTyD&}_Yo%ToIs91oMRETMp7?64%BYO>{sbALM z(`Nd?!?Z>wr|s3ly?I;>c!UWl(9(O(LCRy1_2yJL@h`l9W>4vGf1e8q7IT1|z~kr9 zKPFMiyb^Yiqy${fhiQPFSpPD^Ae_15#nB!YARpHuAO-a>dE0fUKsu-j^0@jR9L6!b zk}xd0sO2`7`JL0&($+2ryFltNKy+lpUTmX?_5-O$&2-;*^VNK5Oiw8Y0rR!#du@)u zUh^CF3%E0tVXq?$v_A#P*W@9~8U86vorLv!l5)_NexoVremVj7U9aXC&SB33#x?Y$ zolhqy;O##7M*$cEP|GD~uKShOHY_)cMOoSa1=xacWF4us0hO02Z^uxAthl9BMTQ^y zlD`TD$pkhTHSz_m%^0lTTjjUBITslsO-E5(BJ(m)(j$sXI|Yi(0x1G(*aOJy7+{S)8(v^W z?$q1yR}ijY5u>}jMAjDYI)_+zw(k&)EpT5K+ICK9l#QB*?%j&NE@l$J(7JuYMXt#Qf35Ya?^1z{MvUMb=`62}S|Q>1;{JeR z zB4rJ9V+tM+Ue44{|C$l$i4ZDQBV2>&1u{hSIrQxfctQLn5UaGKJxZNfo7DB?2X`zF zF4v0^<9UsrdC(bC{+==DL-NR!8Xe;bu^2EJNMD)6Mk5hq&X=Zn>c1at76cR?m3s&? z7*ILq>PG}kK@D+Qp$rODt``82v6A4At_eH{ZH8n2ua& zZl;UN51=%hJlc98+!H!#HYQJ#Vv_H&w=r27ec=X@M{JmYDAO@>K7%?_{9TO|*|V=7 zz=4}t;Vh~anc0y+n!s)&UR-d#S+9?X7#xFl;Y}b218M_Q{k7_YA?x+eUTtS!rOjzu(qv(r|^bALkNizO@xjL9Y8%S9wWp(tTk2jMmaS`)siMzUILQE#{Q zj%dn8cRFBO!^6EdCVr5P|5ZOaIw~rkY(kMlzAFkR?-c;G(6mIcaYTp_^<~Y)5arRT z0CUD0oc;ki!jX{?=;~ngDXH}F>tifhPb<;;6y9w#gdU25Cdk^;4-gc8!p)GTdy5zUe^INB2p86;$+w=`AIb)G!zMC_aTpHMtP_5GTYV zQE^6TQjH?Q=iloQ{18DB6SQJvg0wrWk1Pr(#w$NV#$D z^0#kGlHt1UZ(6~hYnmKfLaFL!jEx(BKFZxrJK!m6E^i8&_&kZGag`*QAi4^Opu9zI z7i!O66>h>ic3_8DQ3eE)v_uzXmbu|z%Q~%yO;B-bg*((uieHL=kx=?;yvL>yA8tt4 zOM`nQ)8|NEChEH;+*7$tJ1h?q0^fL-9=SFZ=P@S0m+Q!gAgiHi!w4mD&G3O-BrH1T zzmx}nm~}_}b0-s5XIkDu`gb%zqmDS*gB+x;LM@}>y*y4PRRH^#Lko7A)F}wljb|U~ z7_9c9g4u4*uKd*z`5r$wXg#iJ6{-eCGTAG&*q{e6Yt52?D{#V5vjpNz+O3$tW`wQ%S54<~k@`{z^CU4;nWsHPVz@tIk?&L*JV#_#wERMOD$d*MsEQUv?#S zg6@tPg7u+SJs-G6pjzf9(p00g%u9TR}u+{;{tr3@J#6VRCK zeEO)3?8wRVpN!)6`DknY^ig_YOZ_uv7Oq-eI*SlkQLMF#`|3#2GBG|IaI%agVf^=3 zSlfH2)URa`Ju=EO_CjvXz(*djZsk6~-e(4Q2HyH{g7BR=LI!hl8*o*E)%es|T#M%Z zy#Ak{)dq$v&$1B;Wpl<%{Ko_#4bnN*>U%`6ADld7mu`)BS`u)@4z&e5Gcz-IwRprT z1Wmt>WZ<*qnBz6edEbTxc`>1;A~Zfa;UgvPjbS!m5$(G|mD1cs;1A_1;x5+?r)`9( z5YWVkV~QMDeSy{**+{Q?lX|D=7Bp%4GzzmWTpqNAv&NKjtzH(ikLa!L;?o+WVXg6r zsVSDGX~zdpnE80INK9+ykhTGNIzi@7?hHLzWB;d+8y+7+!FrS5pggvql1awk+-S@c zK?#lp1`q4^HdZsZ8}Bf)@6N8I3!SU)xwL!@@16o1o}xi>mo)1>^ok#%(>x*491~Gd zk>@qI$-4~b<79nqyWnW#Xrcj1E(Zb~uzM)?_Tv!w*#N|4Rf#}wG>hCTUL5eYCVd%DdtZEDVJdS02C9-YQ*BVE(8wB=Cy%OI^M^F=xp5gBD8{-{9Vy@E!&C@g!+JK+pJ<`?DOmTRqH+`PPHK>XHC6lKiU|=JdSjR|_bWdr8&5 zipx`X48I!ZPuTS@lqa_CJea>G%03SKWoV-0<-H>|LQka1ws0**?{)%3N~c!%!ONP` zOL-CgW+20m&B0q7_Ry**rS*$74Z{B}2>57KT%fmv;1JO?tPAZxdD1it2slS8)@FV; z5+l77M~uTn7*m`;MM7J=`u{Xo=hQYSm{^AU7ZbktW(4})*S#cMygzym7(h+64xcY- zDD4sg4UL~bQb8YJv}SCsNfu=8Z@mR}MJ!l$ZzNU!fxcw6qNYZ>ajsSk`l@ECp@&ZM zGf0n;re=l;y?gTe%ljWja1QD^rtr_YddY!^lt$8bKwmX0w}XbwcDje;+ARrMDh=lO1cP$v1fo~CAeFycPk5p1F$b1thFs^M#p>BBU6P($muc$t_h; z0($lB$ie29M7)8F?^0xkEHBhf4_*1Q6SNswX$1&~JOD#mnQOssxME@D9!wk%bzQrkn;d z8!jIJ+~cWf=b{n5HS{r~)%BcaRCxSt{{>(~3<*er07?euV%4J~j1iX#ibQ`42u|a9 z6E*aWG-=T|Koh41QIa-jilS(7i})*L#+>sbj_g`SkXw@fhCZlEedEa&Ut}eae&`49 zn4D_deh=Vl3{d;IX|%4SZe1LHZ^5l{%-9)mJtEcA*ymmWC3?2E+QC(3NK3aLGZf-uYU{lQS zgk-c0h%|QrrbYiseHc_Hpyz3{5A{Wa^MCacb0(iVpGy&0`3ZXVi&A$e#}-KOJYdN6 zKc_w045ewD!yiILR7`kX$#8WgXCMRzI@=NVIobo5^j#iGMve%eSSSk^nL6wA@Nj;W z4m$)#oS0tnAxGM0j9eTl>n9yw&RFzEbgm2)a&zrVd1FatF6L86`nsnWGZb|>B@#dG|j)hqfY zT7#l2suI@@k6aF6*&0ROzleDSQwJt_RfC$1rlnuY;~B4HqnTML5=Bq25!WGwbbZ2Y z*+pn+X=2v57@0oYk^aDsr;G3ACyKo2e}A-vR}iStjD%m)WWN1`rt~Q}7jSn4r_;bf zkQMpnRe|G0zmEd@++x+XPlOG!yEM#R85~uZIGAP9zDLPzHzufvbJZtpW*rW`9aMOhO;u-vxrfEB^Kq~>19kbZmbZs7aU!lM2Wz26;V<}|Lq+;;X@P@8`r6W1$YhWXT&HKNncDml7 z-*PVP?G$!UXhLGY>HW|m-Ar=_C8X9Z>@XS;4zo#tP^OfveoD4(6r_@**Jjz5s-zVn zVpC`Xj~`l+mK+1A3*~H5?*U4Rooa7mj!vED9-~+6sb#*9M~YXb;;xCgoJa8=D;2Oc z-y_Lsg9Bdb=IbkITu#UpWy7z>=YvWCgyt(jWzslnCzigj(BR5gV1Px}a@3lSKQ`Fl zyCr~PqhEbiaQ|kD1{0$uJ1Z-xNTx|^AO0j)#^MM!v4=c^2LNI(A-@gMMOXyo?m|qc z%Ik_r?u6`F@pb)|1=qe~w=lJ*@aYKD!(xb{(|O7X66Txzj7r#iOi3V(&zp_$Oc$Js z{bt;KxsXZfPmVAu^Wc>B^iXt`8oue9zeQVCCPi6wlHZvsF zDhmE7&YA`45Nu49be$+06|}(^oVW$qs7YNy4F%~?dThj{Me++%yPuuGJKWcbFTg9^ zI_*bupXJA2sbJZeb8mo!^?UdGynS68T+v8E*V`yQ@@mMd0q{Zo`aHoI44>sVW9#BX zHUz@gN?}rwq#`4WW-voB*%5d^hytVgY&_!bodgo6N<|6lMlNI|J%?05;DG<6s&s=s zglmGon*N6qaPqMCP3~Icq)S(R6iC;cSn8fzHNuKPR1*4r5&AYeyF*2KyNE~_+lxPMP(|*TA*NdXFoL|S$)bb96 z@DI^(=p0+tn}a;x@8*db`X6G;UA;jOgK{~Nzn?Ay)AG=hc-#T>rX&pZ6u>I)r-dI! zPeh78rTJ)Ah9bF+7au|5_{3SX(Z4`5NX+32&%L%mwhf&4e&j6FU{3FfOY3C%>{xg2 zF8~*ZlG1fKoPiJj;uG5a`}OW48vgOSfZaBF0ui=7Ol@oZX`{d!CD<<*FSM2$%8dHBzNq_3;Awx}nGcffpY^9_VC5 zpoP(%r7AEzz&%b@8s|^JwgzR^l;l^265QDS#N&^jCw=3>bO;1C;w7YrX=t5>L2l$4g1ddk5DiDtECl=KzMI$IV{1vbMdTgB`jz{f!6 zW*EjYSQ-wO|BNP-dj0%;&~V)G4>o6|y_?C|OcOGC<@D%%cjEm}+9@}hiZ4}~^6_=* zXMbKV{|YW1NJeXfR|>w+_XlYPN*7m^g^cnZ2tFY899fdrL6~4IrfR^fPcu4w`Sv#k z(P@SAYusX`SRDGr-Ou`S=kJ$h$mS>uxX$oT^;yf7euK{srBTSCy%o*l&OOMN$D=vl zKuX7YvqH^bx6@g=&Bn(n5|DbtrGv%?Eh(-4;8?_{o7tUIJHNE@@peVxA{JEcFjx}uNQT-a*p z*>bB}ADT36%(=?xoXq~`J6lb4!62Dk*5eG5^`4c?*QjQ>LO&`n75_)@Dez4X?U=5| z@Uci6u9Xq|SXb95(Yfr^`yhcoZukr}0}&AhyVyv=@7aqBATn}0@Z%5szRr1eNK7K* zkISJ=@tw&kja^CWBN*5dSp>S>kt^La`Je+aBDz0*&PI9K??uN2iI>}7PB*_GoSxnX z8Qm1(1pcJtr%((aQc_w9Q*+dUGT#GM5)_?bAbYVr#S!BDLtXM3t{fX|1d*%gU9S0p z$1su7otiqf`QmQTu<2hR^22*`UBVtGYZvIlX4#s5Wi8)t0j{jlM>jD=;oc|$%A{88 z`0;PnXZYrm_tt~sgmu=6o=JFU)$ff|lEv0n7nxbYyWsQ7ME`O>?2@%X&Tl}J@MUwM!ruwCXjjQF@_Wk(QnRz8 zshde>b!-M>SS~I&YGseO#l_%fpb0OvsIR;Nd9OH{B6NT=Pg(-OmubVVNbx|@eS7$9 zvV>PEn!e;OYfvd*k1pr8@_u!F`E=!hGvAnu_td!b(#?Gg-eH`<#=Cm9tU(Rt-S*x! zP$$q9AY4QyzmH>vvH{_YPRX0({v7;OvVNv?fJD*oCGj1bd2h}6E}VuTd;+Q)z2a}B z*iYxz3d+>r;glsQYO2 zH0y|PlTs8gF^bX+plR?Whh@eUX$DCrvIMAJvae=$um>tNoHMaqEQpBc!DYS`TynuA zE1vD2KB_+eFNn8?V~~h&gXDtgix1iC?5B-Re?FXOejrRKCW+j%`sx}P#AcXq$N5H^ z(@5#ZpEYNi7y1lN$pV~GUCu>iNN z_m4S;Q5=f~+?s1fM19EnjK;r`xjD;|ZpP10sxgnyWI0Zcz-YlJaxs~p98jn2KUi=o zPM;`W=G7iAvcd`$8Pa$O&xx*52vIAMC@sQW4GM9c)D*EXbXj@%=!=DD3~$3S$#S}H z8z@TUF7^l-79Rr<)NB7Nuxc2U`73=WtE7z9qHMA>!z~$gua)IN`o%?RX@y({V__(6Yr$Rr;CN2 zzC!2&q*{lXMySy7c_Ckota}PsR#A`2(PW>GIMVQwIo4K zXcur2AkLsxanl;kP{#r7vN(y56Fj=%&pB869Dv)(4OCj^I%O#NDkNjBGx&bX> z`XF9E(o-j?>rq5Kn#(9gED;&YI8su|JI6ni&q`})S*UVbI?E+Ilvu;$yU7Agfv<+_ zwMZvd|J6#AYyhgS?m1UCpNmy(U%*hlb*#7++0sd!UY0&V!ZVX9?8V5CUb>CrW%(2;cH_Vb^Ab3#H2+Njiz zu^W0~1jS--k7V8}<|^ZA-&-AWfNYsQaoI18&e7BU5!%*5)RR%t<6PI+3xVTv#;cK@ zf{TRbJBbo&lS3i3*!i&Tmeflu`YU+v=q<*HqK3EKKn4J6!uT7e(n0{O4YWhx`2rnl z#!KBPh$s#FIp9sZJUa~@1vqC??xxseuA?Mm+Sz6 z)gLJM+MYTK4tFp6IP4w%osnd;IAq)m`sAQT0JAP$7tJ(7t7hptc{)&w9hO2_Z2#-w zgS_ZWY29+h%;=;_}8=$^NW%3Ib7BlANp2LxwlF(4W|& zWV%M7^XCBsuH>Vg8g)H;#lv32yk-!FV(Sqo$#}_hI+d+}KYtSFyYXFb2)I`pcBQ9` z%bfj6LyZrEk4B<+32tG_D76{5g)y5O0?f=m{=N*6m-;yP@D>cNe^_kLd=_a+Doa68 z1jCTXZHtlQ;l@V`ZfT-10if!z){Kvq*#}+8hX=o05w#3fI|2t#0q_%M``nt|`JNNG zw|!sQo%9-eK)$_Jw!#P;CXnQiVkT36=PSl1h{$VmENVEER>oqGxJY;QRwR`S=3>Cf#vSNJhY^Ns8rhrEvyWeETJWO+Qh`vR3}&p zP~p!i13)zVQ|Pq6w3KIi@h8JWA7bfz1&+IYKXggksKjc_nlDLUNBC>p97LDEuVnq` zejQxziJVU}?MH=#NK7iatkVp;DNPri&O9>5-mWHVfm+0vJ0Zh5lU@F#074Zh5qOCV zrmJC12Kr`W>Q&QRmd@{Hy1Cmxsb)m`vO-!C!8JmXpunx1B4_}f1ANsBXL4tC^yRE& zJG=76^}O#`=oeEy#y+?e&gQWx)nqSU%QwQ@>OumCM%I#$$51uSfE_u0YpnqZ|8UO_6 zT#u#j424C;tn-Rkl-T665T1vM0JB>Sd%93~I9K#@y^%y85}NAo3EssN^V^W1Iup)B zM4lm^l{saYftE4{356Hbv{QPghn*N>bsseY^mmczW=BS7x8G$6q+hMLYVuV40N9mJ z8Lys{Lhc%|KKTHn$KzGeDk~h(u9^YwQM4#3ss>*JEarF-S_I7E=|qMSM(_n`0m@w4_@gVM zq%_Qu?mzHkU(N+x+b_pTGP$;$n-kr?*q|*JH-0FNrCKm6v*tpJ{R@uhu6q|exLb#lF>ds$%NF z)V*>Gt9D+#kQ&$V&mDn>RaJ{=9Jf!Od_XsKgwNz&f(BK$vCrrnh&Hv4i_y3aeX0mh zNK=0h@Zh*~Cw+$W*wNvaTwDBjJw>8QaU{C9_yICMk4Y=Fuo3sb=)U&IJ0&*%Zq~FB zXjwu-dFs7cU=p2c;?tvU?$<4o6DcI#m?^BCMN%}7M75I2Ps}}OiM6^pA{~IRDsDYL zH<~XM9oR*r8$*|Q>cUmSR;hqyp9GyE+Ub|Q2Cb{z7`&*$1bP1GBQHt$N`vvVa9 z&O^pqINm~v8=+AZBNAr{5rrj5=^K$+1J`xSJ@F0lox``*CIkhRtYj(+lg3PVDyAFr zy$oo$MBNoLb6Yrj?vu|_soO>2Mb zX|{BHnPCwq2e;lmfD7gl=>*M)>ua+j9?^4tA{PlY2=J;u!R0a$ z$A@=WCN7S_w1_VW9=GSqVX=uOdnk&CTo#MZej-j>e&XpK@*rx>Z&KdC+*n9n$x#zJ zP@Hwb#x>#EdPRuzO6$()vrH8JH%i&ME;neW#a>hCRg4fojF0xkm%my=y-L0=kq_ch zPz9|(*=1eSzYmt9U+zBBtOD=5c4wlZ459$>a?dwC;ab&7H3$n;Z}oBa^Ep}mv~5VO z9Aeo|8<^o@8@Au-tPdouw5vmA8<7RDXLsc~HC;RRT??c~{hY=#UDDG@0e28c`I6N( z7v`n0$ti6=7fmkPZSWa)ByK1FOJHyUF~-*Nl{AOg+R>;KHqCjy0?+ge%en5_M(h`1 zo!PF70pL{%E!gVgwLE4~N7G~r8be!*LmVGwIK*d&C1l<}6TfnsKXOOgRM4}*W{`LV zbq1en@37!nS9o>8t}xNal24FgT)>`&pDg<>2iBI-SPo}0L9wdDQp9E^!()9*zgrG% z7>N&7d?C7RVoPaDI(y#7oPC26FQk_Gb?A7 zUJMap<4dVxymT>hg4|fl)s~s&RHfcIt;1bz+Mmi;JPRnR%XMVp#43ox#Mp^4M4N1w z^87iR-AxXsu{4$wksB*^uVs@JG%CFARU_HP8a!}lPkMM~NFg@Ek?$ILu~3^VRzb&; z6?I-&S`#OUHr7CNTSO7-*d!F#ln9)%KoK!bk{A`5;#oO*#|qg>7h!yaF40(h7|h0i ze!>CpiC6P0JM-!*b&8_u?MxbZ?log=^hg%LL}#{?Q~Dz&Em~7uy%{zE+#zE*4zXyL z$M#HjwY{-Cz8s_hfgMtl#Ip5TdM#we>T69yM4B6o`?&kqU47DFdm)nvX7orRqIYj&%W)o(R z`Kd0Di2708o8749jUiI^nJ#+gf#l3Io@!8PL#Q|*f<|pMP9bJJpJi7nD9-MZm%Fm9 zJ-FW7ilVt)B7Iyw!@$c`Pfu#!<#eKBw}lu<5bdWan1;Rrr6aVj8i0MUKnBDc;hqT@ zb-4_o&Y58E6rvC#DTZTu`W2(pks^uNv_w`2X2r(0h$lo+R2-eBS1}F=x+nNZ-@9v* zMzBfeBUXNzb-HMc16vhuJf{BuGmPXIMh_)WRj-;ZQ>Ch3E)n4R$8@UrcGw*zvN14s zd<#H-8k?LulxWbSxMNWeeZ@CvAR6IHOFYLXLKHMrSoT=Q*`km$!{egJ8t9Y3XZcoJ zX=lA8)#kz`aO}W<{wWA!0nkZTG-e4(Vu_4;#X)*TsZuwu_9&^Tx;26(jS3N^GGaaK zCTS`>RsaaR% z7_eYAfhOS%>ZV4Wc&27A1Ei$84OI>XQ&aH+rnnS57Twjkl?4a?l-Kwxq+fiL!8Enc zlp(ooHDBVIALejo#e@*Y0O_NBT)k{#IuV)ndl{PsuRi`jhl?m(uH8H4h`TY^c_VI3 z+;~C#BW;PHlgy;Vrc6)9k`3;Gf?EoBF3{No1?vkstX#U^H5|~Qz_sBnn5$Q7@~{ty zibrdZF^;pG7`kDwl|aW(LWY05Gpgx`p<|@kdW_zib9+69J&kw~<8CMq~ie zMF&c*w+lP%VI+HjDDbP=0}h`UvA~vE%>Rx8B;YnjWgq_t0O(yJ!hUhbh)bFL6r;LC z!?o?Ej6UM?#=jXwh{zHz?BOYWv65!*uZs!`bZ0vq@>&Zvk4LFj5P4khTFR|y9$rc< z%rsc3v(iUmIY_q^k{5!Zq6QHeUnY!IJ_&u9zBJBDufIR<-`2vR`uP2#TtYK(Sd0TQ z$dNCm%*V2&-Eyli^|T3|^ovZ2Z!#i># zIE@IkbqFJE;ryD9CGFI(y;nDKpUwTe0lBe8((vFXtrCHLldBW$D zV6) z%6S0K=oVN(17``^XV;D$YeOY)GR)~GIe)vUZ%iZ}#WIwg?1*rTi;ZmrCv8>Lsgu$j zX9vNS;ye5UD9*P_xLssg9{wfv&OPpSH`YmSs`3tFXUy5EVYHe-2a8&Ql{y9Le)@=q z*svB!iBdxHsgLbK1?~B&cg{_Cmq{;=kG{UzfQe-Wm$W93UHYxqQg5}{_uOP) zw{z8W4c3h^#spC-^O_)XodRRho$c!4Fxqou-@V|MG66G=; zL&xls$$=P*vZ#%@m_Y8&_gsr<&gxfZ1)MNk7TV|PCU`YM{A$)CCtX^CrNpGyBlawc z@U1VXy>3ge-TSRr_l~MbxboE%(ydj7i;oVhjLtY8SkD*f9A*IV>$h?cc%=|GR_v9w zMN#7qDPs_S{4| zMH|MT-FKi;^Us<{6)08U&+ye91_)GhV{<}MQx)PlvOdPau3zl#SFsLu7w>V zB}tRw7Q6NyCH&WMn)!W8SwH-uaw)S^<#H_1i3Jak9CzYZvMA_Bs$Q~6aJZQX&eA8c z(Kp;meouRQUf-LOeHgoS_jci$w=)g8J)m41^5NlP)NYu$(T?4+S>#H1hB%g@af zRT@!KR%S6C*H?_@o3$LAHC3Z(@~=fe5#oKHRlq-o%Z$`6*wA=mZ+%*LvrJby+(O^1 zPG?qRbiULGn_K@GQSw!z?!{Sq-NPvMX!)q*TtrgTT}M2VN`E==xE(cDajIg@$6~TN z1#Q8t>~>O;&$1cyvSqP6@r7mGmlNZ&ntkykj;nqYY>VsWk@ze{+NaEDm%Cke*EX7=mt<&Rfv#n9QU7*Co0T)i1&!<+{^rzKzKC58 z_VY6&4vg|VG3z_UC%2)yjtd_?vQ58ADrI^OxFTYL$-z7*Y)#!%PpV)po3g(3uiFWxC$e<#JGGgof7&J24gP|6 zyxRxtvY7(mr;a>qU*HgW$HU7Je){dtyU+8o>!*^ptJLtYriKt+t~a%eR`4zH^INCc zzHogaekVfbr_>fJ+G&)ixyLEpU~Roa<0w;k*UG{)sMtDz$DRmrL<$!co9eRKpqLlK zZ^1osDwHVSK`i(O8>jq3y^Dqw23VH(a}*=|)5afs(uOOiEt`(BKHVR~`g$YV{H(dB z4i2;3=|;Y1JGDjxcRJz@zOmV|{`(M-$DK45l$LNLr}aw{?_+gOuum-2=UUDyUs}Y; z;za5S-Py+&&?`ZHbr!A?8;SYQ9tOGS$9CW2CRCXxF$~j9W}dH96JneN(c3chhsY0d zze~M5aJUp!{NiN5D0qZz_{UJtQNR;k{)Ta`=D@Rvw+6y^UEmDNbGGlPI1#mJoQ*&} z|7kJeXWU)y^M>ZdI^pU4exUHAelO2OgPU$sCG4l|Z@Lj6i_8D7Yv&!${;k{f^=7~9 zN|GuHQqHOYB4LZ|HH{IaxPKEy7C9vA5 z+XnIU@8A;zI31BD>?8P5wmG+cD|zYRr?T(WUX%A85W8sIGAHmsmy7wj zpV`(P7mx6VHqUnRf)alGi??49WFkNIl23_;*v8T6?7m!ipTe?ULbuZC&`c>Cds|;@ zwzeSdC@*cz)O;-u@z?$zJK5`(ZQszm*%9X$x{h}M@gC~rT35qIxL)6n?roxui=FE0)YI%Ea#2ywYe;(6xRM#-!JQ9x1Q8~itBCIK4F;A-h zdsG5(W6K$g)9~aQym`o5Pdqvx<_Dr___Nb7l#dRQqKm|(9$n7G9lfQ0!p4?5eW}ZS zF`@BwYpBBL_sgMvjEoI^LNf<8I<+++^AQJk4uyMJQqhErpIm)R{_rd=zOgGUSV?<% zorLFnG?h+oq3o8i6F=UW*?5RB&mr&es9id`NC=}73xq;{aQFJz9#)Xa(LhU^@v@q2 zIk12ZFoi)Yrl{*7+K7_GWm41&nWIrS_OCsNHME3W6q|3OAgx{FJ5R^zeFVpjD2)l5F&2IvRV5!r)C3mG;BS!ob0+tGJLLQdkKbWc zubs|yGe<#`E8QuHk$X0$DeL<=Du$y?o!j62^3BMSM2pW8;FSUXEA>!M0Z|#ei6+2R zZma$5QhVx11fzdN(d`RPgC3QP_=woD73C67zO7VS5ixuDiR+Yye(vYH_bX;+&1q&G z1kDOvoakXB7Sj?xg-FY=Dq%~yECy;*;V1h)F&ApbHi$hd1z!w{Y&G4|ufPq8vY+D#PcIkZFrHOdj0|za z3%Qh-q@zhoW@{ykEUEvcF9Chs-_P6fag;TC|K@`DTsK)Hi6d8uB;ss>H^l7j9=jqQ^n4ItTylRUuUY0S`@iuc# zqli}XsgNbHaAQ&&@1bfE`1V1B#*N|zlU)m!peb6}bvEt8il+_V+)z&3Lhb!3MS3`M< zE%CT^Tux@oT$s)F?iUimz0nNI@Z^61OCHtoC#?N9jzI##`)ieUD!LLQArSsqsc=qL zsx7bbb-K(@H$sX6>z(~;C;T~ea7_`S>yaR~&0jCaXzP8o>I`Yc_bs<>cum4P|2}5@ z#mCEZ%zVs$X zk#_jZJ{$IG-=gx6ulI4}bUeG@F#??S0)xvJJ!-uXF3}H96)H$a^&Z6c+o8qX)f}oV zcrHUf#~)shsc;6NVhgQ4uv1WjffXknrMK@QRqQ+alF^NA+bYRp8oTSncVFbQG?}2p z?%1(}AV@t~E#j8Jl#q&=`b3>8Qb850bii5W>N;5MbSM;#bF*(D`8mkRsqdWA<15I` zZnqNZW$QtU7pJXyEHpP!8&4)qX_E4Vfhi=gvahD3T+4cOr13tmk%~czr=_Lk$hTCj zmm~jKr8q3mFJx59kUaKR8itp)qp^Tvm%Ss=V-WZ3s5zPttN!nE^C#AQ|4(p(6l4eD zA>sU~r*1=Z?ESOc_mTTo&rw*0{r_3Jm>JIFWmb?Cq#9a}tuNRP=Mzv-Mc~iGP z)37!S=Ey)}U*|Giv?kPUL!i|KIAt_B8;Fr_;PL|3OqQ$BgLGovtylKc&p2F7l#`PK z0zKcgtxdy+s)CFn3FAsPo_aGfGS0=PfxzVm$h}{C=?ZkI_)Kkp@URi)rRx3!PN_fj zR@7VQ{yVh~jZ;@x0YF$ZRrM)TUO^w)Ax&f(sq&a+5F9#JI;!(u zySqZ0%b8#y@uAU!s5{Zn%q*T^`DcuUv$kbHY`kH|H6tUVZ>N#{bWPDtv_D}tEkmae zAtLAezWbj1PHrG`ncel$~uAm;P(c5HWOPKJ^C5K!k_#3*RH@`wfcQ)syHPc1`-Rw!c^r#jbeJ% zcq2^3gSnIEwY48R^D19>`x-b|fVJ!b#~(E6GxyH1;=F(_NSI${1_K7c)d_g#V)k{e zz$t+7gFGxOlK}BTd}o$+3IS2)=;-LcqoW}}#(EEIDTwwk(@|~vc%_Xutno%!PK-!* zZR=-aU|ys!OH9HtfRh{!se|Lz>+9)tJ_N9HDFX)F zz$<=wd6%3BRjiAJ<@+#ro%;Gn0B{xwb~(_6GKv~#KIICS+Fh`r0}B_B?r(j3L3au$ z*s4FXCXQFxodkYy06`ltQ%RD?suQigd8NpEm#1|M?EJpVD*i7B( zo0j_^J~r$`v)5F#0-Ozm5pkPx3z#7a9k@BG+ z!*pZc_16y-!nVBZ0^!gC=fS+iPTFEbla#;^SF(pO;w3eX4!E({^T~HkgZJS0%d@hK z_pGHz?n`sI$QQ4E{XZ_3p1(@SUF_`P7o<^tw}N46YO17Fu^~J!4|jJjBU4k*1dS4O z`Cvm3#>l{sEpyTZbVNWcgjuqFFiNU9&uXw4SQ;vCLt+Ty4PgGt9mu^1afq&TtJX?N|={z`eFfb9geh@&$p&gbH`smB>VT!_>#)lAMH3;MlQBhF= z0U{Hy%9{e53pOC0cnqAY2wf1{D!Vy}2xYxEhB7H2AOl6H%DQYgmXh(+{R;;KB_9@U zr1@2DbWMUy@Eq_scdpYwg3s91dBCbX%evAB`zMG z+n{y{GkT$BdabvJEn!Y0^fTC4NB}7$iCNr+;1of}tC^RVmwE^i3y`z;q?TMglRF3$ zfq9mGFM^p^nmtVw7+wJXd^Q6%0Vz4T2cM&x61(ba2*2rv23QOqLuAw-cmUE&{X_Id z4B{m@2bT*t0|3VcUVRt**u3O}SM5oR5+FW*{2tHO%Ri_XuEE9ii8>fz+%gExHRi=f zphUX2L|p;1Nb2Xok0yuUd}7&{I1ShG8fIS2*6;+!5dj@7FFLoN!~Dg z=WqgaMkkrO?uQ@f$uP6rd&F1j%zuovB#gPSTls>i6k|mA8lC$;*pZp__>UKR+Eo+z z=U@L%C(@-re5N64#4`CE$1?k&rn2BJVLOm@z;@mNO_mYqIfx2iy#W?6Tc6$>78g%` z3wr~`d&c$V=H}uWKOgKIfc26KcsK%uD#I4s%+^54cILsAhCO&>fo-sPKsvin-T&|+ zoF*V}f1Iip>{}ce8G+Mx?R-}7SdWpqygZl-XU{}@zokhv4VJG!5|5|lu6(XQ{t5hN zuZvm|iS!r735s&SLAK4gm{$;F+831S41Pj+7e$_cP4{hy)#>OzPusCFz+u^+rvp=Bs{uX9?nulEocm*F> zAy#@-fb#|SOPH-TaD(8t2mu5JRf}4lco=4ANWlPFGd*tlV#W}LgYV1F4}qp_Ym63O zyG)!!GT#7M3DcWJIb%BsGq#i)$$8Kq1!(*sbdZ|oR>02>Ec{f!q{?dq53LONFI)}q zlz|%UAo%dZr{PSbO?9_U+;;G z++tD%<75a41D6M`yqvVZ)R-6_;SH4Ltp=NcyWXzRj}GYxH)-LtBihT+eubQ# zHDy7o8!x{eNLmw{@zc}O1Cv5|NLk=%f(76jnI~7NVAp=@ZK@)Uoq@T?PuL zc))_AqXS1vNgjX!Zli~0HNoQ6oAcBLo89a*xK|~srwP49Q%{vAZ@IDfnExXOjSG@pxOj?#R^|xqBZDkXvYvd#Ppq6NU$PC#b%^`1 z+n}j&hvdQDps}x~hyDp{I!VGHJED(U1pDoNSRkWyuLBb!s_J8yIIlyizbEecSiCASY*vyUT=e)oDCNez#0qna2@kM%Y*UlJ{QNOX7VllvU-Dl zK9u$>=m3rISJ2rJys4ogh{6+cfD=vQrx?$=DwVy2Pu2MabQk3}AwYxY5!?KM?#ux- zfs+Gr&uIO4F7-e|Z&}ATn|qZAqS3Lwroon#7q654n zbl%RT-Thho46@e#Lf8;hyxTy1wueEefkldt8)W%4T#SzbKT{Y=zsEVv%JCRmg7wNK zGl7j4fZAQSW zgFpNV8w1AMfFJTlV5{L>{OhNK1cI8XabX{Tvd0V;Q7^vx1|G>KY{`Vll)|g7mm%>-3!l63)e7P%fqhh+2zd}e3Dugt}w$_WXRbK(S;VLaD6oPuMPx{X^sBq=PetNM@7$3UnGR%M|a z@=*OqKU__;=O*LYPB3saNiB{5j}J&}U75X@i*_N?wzmW4?ofg^vlAQz_BfI1*C39q zpW~yRhS_Ba?y_p(+p=pAcgELQkftzmg7Yw$31|B9g=^Q9QV_;oubTrx%rJguy@{nn z@w_x4-``vc`am5rYVo;p5W+T00uQMdPxbcHE2eUG|3~`OUomkPFKONYk+y-@)pK0x zYV}9%aY}na#hLE;88ZBHQ*{OVrF2{%aRVnY!d?Q)iscEqfdGneOI0a>GU8q99bfE#YJ4-w=e|EOLRF!%sr zYa;{{>L_-3n5DW4J1Y^~F4P}Nczm5p``2jK33vdYOTXLBie?lSM67;bb zlSdc8@D+AuR`SV~U>YJk7D30S7nBPH$x)!@666jOXLWf^1)qz2=##FN041P*h?gw+ zZJ{qV;V+zep8yAl2~@wri|Tuy=%Ntw5QOBlAWC%wfp&%s%trJxU7zI2#rW_-0aFD@ zEx4VP(KA}GNm!ANd8A4tu@)I5kxvCw)w6GCtB*~7)$;Di6$6@ zUV=P2GIl5fq_fvit$uTlS7k>K%IHZC$OG($H5$Y~pB4zo`U~wkcae>J5aRIio7txkh6MT2>J%0Wr^Y~FS=3+-ip3w- zkGt?o*j;@Ca68bbb4i%*Z1jS4KZxTgI^pxwe*_cHrIFHOoNpxfGyP{fu(G;ez)i|# z5kof(&}dd#Q3q^_txM6VKf#=GlQVq*MXnK$l+=K7;j=ijOj{-Hi9DnG|iA;-aTXfEdxq*P$I;;WS@suf9W?BuKVn9 zagODcv9&vwTYBb=YvQ6eylY7tKMvO=t>agBENQs)vRVukknR z|L8ys0mGBKN}GX3G|6#-B!0wX!2kIR`;54Rgd*Y-H}vZVAeh8CpMvn}69H_r(@L3Z z2Y?fzWy7KSBzYemPQ#~0!Fq<55A4qY6j0*KTSc{fh@ZcckTjB$sL6${-)|3nF;CPQ zzeT4Jy9d=O<$Hk6HeVH{=n2W&shf1%7qy;uz?;eVsW`!?h+n@VnfyekDY#2iYmPuC zKMD^5E5GuInQ^}jy##14a7cgzj+NCw+l0Z;*y!6fSe4^o)Db+Tp9%t2&o8v^Wea7j zeu4{*D?95b|k|`a;n6D~WDM;gW}} z8lAy;vN4^y$0WR+C|7W!$49F8siiT ze;)>ailtk!ZbUcAt~}s2830dlE;t*oCkIN@`Uui4Km-I&L2@DW4czC*1#&s3+iVjn^En4SiGiKzZ}W5ImmaU0LR6H~XpPApd(#ki|P(N(qP{x4F8?|8HnlFda+aY0=qpqWUd^>r_Y@-zPoWK)WSu*vhdn>{*PUoz^mna%(dqJ_ zij%spz$d6u0Os6}w9t_@(7&|MPtP6t?%g{OXfbkewE{Ry5M>puM5Ww@3QBDK$2ShgzL@vZefT;|}C{;cr*UTr~ z_|*HUUS&Rj5?n3dJ^Y)r%DXtl$N&7v_n!1jKf=CVk>~x6@8*KNDW=yT`evv1_fN~%a{uf8nJcJ zP>LS$o5ff;@#yL7-UUj2zbrt|L|{Q%87urTMH+nN9)rWyUBz<26t6?RM`73kM6!kf zuacCk`bP9yKw6;*VdLb))p86xsh~d97bJlz0^kJ%@|jCF%PT0wU$|VRxwsUs3D@#4 zbWH#O*dadG3XlTRu&3yigV^Fz4U^w))vUKNu zZQ~T9eN1yJi`Vg-jTWdli01j?tF3<#4+)MAFo&xH%8o$X{DaHyC7~ z#o?bBcQUOiotekqd6`t`W8P@WlgK|sf+q|s&F;T&b&s^-|F@qS&6SReA zQ52$XDMbCzYDx9BG1AMmM{7vx#=d5g3e+7h3rDo+R@KaPC=;Oo;*L#!+95Uj49)JI zuwhu_PkfI;R8rGw>Sr?57F!{UJ}HT_pU5GH22Ud}cLdMz=TJJsZI)G-F?TH%umv(( z{vr}!J%|aw!s3}LXZd@1!n;WAFTsG17m*>AuBRn0Q_n>}Y6)!wKzr8UQiEx2OK)0K zkaUq0b~R3fN)o0c(62StA?-lf2Fc&IvPirebBELY(-7iNU`*l)u>$;$V5r_lh_g#) zS|Po90h<8oZU8Q$g=IbaGe9^C1xef*4o=y3NTig&(PD#FJy6tC9N=cC6NF$;0byuG zvxrXi!c{i8LU>o0DOC&L6GUNFNqaOS<6VGx2$tKB?*Ud`tt6>e1sP6fB{(}Ox^rvX zn{dr+HPEYiLfFT*IZUTQ@pWZ|L3@!0>jx7#ul6luP9Q&ytB8^|BIcd^X8vcoxNG^p z)vfrwy4r;mKjv=Jz3((&v?%;uescxWUv$4`d>12lLlz^-UhVz00xPj(d-WDopm$=2 z2ge)thu(b5wD+e%J`8h5ULf%_q+YY>pK5a)rPir6kwenE_|_32BZwlGv#De$DTZPt zZ<-z!74-sXJiv8?k$LdQiXsj?xHELcVZ8(bfNz#3QAv3l5GbuDl^TGc0$2sD%?Ulz zN+Ku~42Dg8x(wPy`?Ag~XQJ-D@&3_;Y=R34#-qgVuTxjWv_+8lWI-)WNlB>|`q|UQ zW*m-;yNAbl2x%=Dq#y?YJ27t#<+sqYv>T3GwMLHUKK4KKpe-QUy#Z)w~V{i-p(EWWy!;0au;3kdQ{@76&>{$MM z{@`LZMi4*BK%9S7-{=HApWsVD>tn(;L0AK`iG{-8YTxjXVrqv9-y+Eo5^`;C-pt2> zY2y?9_7m5Yr>T7I7&8>8w@rH5J8(qe**rP4x#c4h>?OQD@TEE1vCByEMq-}Xs|oSp z-S87qVq!_?`EE1THB3#Nqc@I~Z9zewjfz=CWV zqe(*P9ue2jCXVDa8k}*Ownd#VI>WS9Nj>Mp6>MnhMm}QVlD}47^viiH9bfL0V191vISFT620h=L-C#I4d945ib*$y0RX^H=V~=r6IC7|3Y}2U(WsrPUP*ELQB$X}NhC z2`81(c0&$JKaMPl@+m-3ko{yUD;DsxE7G+uK!|BPwkC05QzuWD!7pMKEEqHnK3{r( zH)l39dNd^VO3$>qp~0pg7SIC+sidSN=*?DJ6g&n^DI^s-TMS(sr`mb$MSkhWaDL-^ z`@P-V0&B(WIzfz9AeowZr6a8C%E8Q3ClP0f;Bb&K3v$Fox{(h^XF5dTdV)=)@+qyHiXV@R+MW5iF^B#+InLFLAS(=Z>bv<6~Qh+s!gx4pu*2i9%dwlemUuicj*f zIl?#oadsn+aQxhJvlj6|Zd%l9?>p%pX^BN4&>y1zHfgqtqTuW;iS}GfyGA&BkzJ(b ziyoC#(eeuk-{dBq(zaoOZl&6mMe~27$GkrPzmk>Nf0Cz46Qd(MnT%I()hq|idg4HO zJW7Oe!>{a?03_; zUnXozPD5J%zc8ef0jv&DZZPK>mytdUSy>1Q@y)^Scp&?;){_tYH5 zAC?#2Cuo_2n!EcVTM+v!L=KN z_*rBtH3?}$E}tw$KP`}Yrjrs_v#8C-1R^^(*Zzj9TAlVw(GEi69>yI&Etzt_{rz2Z zHjl8+%V3u%PHCpL@6)xMcokvUh~G6SE$uTRAPfDRVE(LrD=u(*u9^Y;NDB$HHnfVF z)-QBxr!9mvd@g^fVd5992>b!A$@T5N| zcYpoTp!SP;?rm@stwa5x30GCR({U-85&_KL-|8>g&PiQ?QpM}%Wi>Ryp_2(W`Af*0 z!245_&`pJU8JOq^adF(ubhMfxY{BLzd)7bX*I#rm!lSw^W~y4s9?W#^+MB3j7((d= z{tta@=Q)~wX$C&WJ)9dOyXkKdxuYBn!0`s)-jE~I6#lkPjOkJ!@MNH+;n*Cw3||mB z+zyci0Usx&W`e8{+q6oA2RL%{!tc?dAEf&Lf}sZh#km7?vLWd& zPl%0$v3mZa5t!y3d)GhoT7tA7ri+&oq8sY78r&G@LvLU^1$t;k=* zHd@+9pYFYQdtPu7dWjCK>M89^(wk{L#~B)!$h=4$&~?f@B&=Ht5+UeHrU(9N-$Dad zKQS?pFeU>MB>*jl9lZAx&o7;-Q!V=}XW8x*JEZ%mnpBR<9l#}BO~Bk(JU0D~vt49qlNdemOR`Q%#} zSq888@w6ZiXgqgB9d#Hwfgcd39l}^jH7}Hfw;lyEvLxK-|mht&nlyoKH=r zANMXPBj@{wx;`a!vVrITzBC+jf?g%p7haBv@v1l3VT5eVp6fG1BB?^fXXz-mN>B3; zIo}6Xtqc^U)Bmo1Mb{+_Y6O8w?2$(9-gEKKn;qJ4mLQEHXlVRGRtPh`+WP-y2O20V z-@8PeKuUXW{|;+^(J9~;j`fVPaR?Zx-0&oCtHbsS{EKeUQ3h~r{-Khq8$bLtGxY=c z=@$4I;b3b7c~Sp={dKPKrJ%nr^gRZQ-Yfo(=GGh?`QI1+Ps^(lKK6es;x#-7-|)|y z|9m^^4{!RPS7z_}-=9C@d=dvi#c_17(zo{jG!kY)N`Hnua)=JbuejmX!xrY2d+FDJgElHm_!?gTHwNt}_V z`dduqAf?9Rr}+iKm?{H$64z4?kLcUqR`!9tSe5)Muyl24txL)TGR(#;{RMHLvqG5R zA@hTVweIXx@)0pjOPUCSV*!)8EZU2{y4IFEdw%dXX(hPZsgDO%A|#{AbUWBB>R*K+ zk!OnqLJ$!gNOI(Jcozv1Qk_kUD1I)#27Bc5&Hkvn;iMzVv$raKzxjIH`YARk_ezSil<%I`XSy`Xnv?PQQm;n(xO)HQb1zHbXJ4{=erxpFWKD)XT=;!O(Z#<#>9Um8mGb28ha!pncNjpdiqn1_xu!Uf zUx3g?d)k`ZOEhtI6lre#rPDZ5_xTEO+Jm%DutGJs~ zoU0~B%mb2l!u-_e`s2OcG3iT|np}}X$QMZQj;$lK9Z%KMDmt&F&;Qy_({qNX_P-QkZ8Pphp(}*0=ak1y0!dlWXhK7 z!K~HJD2q>!Tv?w%LR)!*I)1u6Pi7qPe(oaiGgtYu8qGIUoxYfeq(@<~ zvl*X3Sg0;ubgMCu_PVa|Ul0b3{?}KN;jQ1Bw#&y~2-B&qxv6=ke~%~f-5$^95Bf-c z%R+B<<`ZcfT$0!+jUCma-~PEt=o5*ERK_)P5YNNo`9^o>!kgwe58Hz_L*ZzHR^(P9 zc2Ym6V*hfdeLVw@>x=cc(_~VE1X!Bj2v0Hl|gzw~RvT zQizD&BhL3|nes$G+v5}N$?yX{`ShcRmYTNT;h%>iEHbnpfOMVv|Ks^Bzoh~@X+Z%2 zchGmkmxR7mF3hn9loEhvt-}d=Gv2bKr>EYL3Bb(ZTfitB0TQ8zkWl&F$uRv$z5Xry zE}#%#&RF=ZFA?nJV0xg4sOS=~$249YZE4}vMRRi>0ge?sjGo?J&F)=!!Tq9;*z;Ca zV*qskOJ67MA%62y*M2|i6Xxe3Z!cZG@tN^7XrAOTS}!B>v7Q!+^C(=OVU2jj@d>#G}?zryx4y!xbY$0X}q+@3%vp~kJ&ZD zRmCezOp8|l7TsOH-reVT>0K|4?ZT0Y&J3WZKY)hFD&WtL_L&lU?G!H&ktLS}vhdQ| z*Zv&R6D|z`C=a?t8N^6`DeNt~Uw1MqYirq7<$T)g!6bfoN4qw)k7)C|w!jEhg}#>U z@Amj>Tk8+UtK||MHJlP9!XRQWdA9fW{|reJ5Ro4N&kMdjfQ82*>%GXfYh)oYs*ttI z;ouUEI3mU>p}3Mu?OH|US%@>2Qn61`<>$vj` zAMFcth&EwU0#V3Bm`5rN5otS1nTA7FTzx}fORX^)37ulXr*|oCdQE+1!B`l<7$(K5 zuXS2xJOt;ZVY&!!N@$`1Rp$mm%0H)-{KR%Ssl4+vQeO)rBfy7u*E5meOW`Xr)BU>o zG649*x|xoMHng?o^z5ZyBt6v)>5=`~r+Eh70{ACVQVlqsb_o*uBKhgR(JcPG+J23v z;$CnW=9K2v2a@0!=)M8HR?$Xq5kdh_Jixh@lbwCQ14dIC=)ZAaGB#o5Dl9H!kat~g zat-;qVjGd!{gCksaKAW;3JVEPNl6IRH<36-1;# zL>!cw^}ak1hK)}>5X(%}k*B{K zGwd%W{9N(OFc*a)mB{C$Ak8lNKEc9zoODEF!hj!Q13rl>fdCD(&6FZEDER)#q1XsI$IUDqmXAujh^Jm`=z# zpZ9`FhDhmi|3BK!EE=U}Lzxo)VGUdUVm8+n^B>19nZQSMYc| z;Mu^JB@BsboPU6i%7C1UhTIFZU<7XU|HIgOhxPooZ@}$c+DoOO zsV%hBr#-bqLnRd|Q7DqMRML(pq#Z>lLQxzVGkz9KSyv$9?>c z$=kprZ>$=YKyv|D^-YB){GQj-7V5WvuLVxDbm^*>_;(VLlnEwIJkI_{T^oZAl zZ~=NjD@wDYb%@6>=OBC^K!3wLm|;0*FN!a)VFP->o(ImS13`9YS;-HX8nITb;dZsN zx93$U)Om8SRmf3A;0=Ux*=#i#mqjqm0u&LP)XQql9fRBp@*wCBC#4QdHz57^gBU|J2OD8n69yrZs;JUE>=YRu znA8M1cOr14O(Y0>Xsh`{-@XupMEyEgCHW^s-)4)X0A*I-;p5@4QKcnLeldoxi}Z2* zv#h|p=fqn)@SOTyK$RHTIVu+ua)l@6<0<5~!`f~q|0_ZMZ`$;J{oQko#}}A+#3k#% zmcBuu(GpLtYQ~x2f(I) zShO$q6KNtwcSCY==`P|op~F{I4TM(>j^Becr--|b_*_tEi{PsQ)*!}BO1C&b?2Hnc zudp@IibkBTuJ$B6vaxvjKXGYscDphA>-}?&yo1nnerwILe1}7KMOJlWOh!e;cGe1t zy(f5l!9xPDPojq=kC>*0>DxdgiE%tCwUL-IZ=R{CrmlXq?LCOdXumEk*kaRkM6tki zT??J67_x)I>o@bmLF%aVATCio$q#H~b227^Sk7&VA_`n+OYpakY-aGk@rLSk=Juz! zyARM9`i= z;!dmi~$WPaje&!E)3$NqmNk$C0k@yRh6YymfDDu=nPYL~9A zE>dhD9{L)MdL<`+xm5g|5AivKPlO>4Juvf?h~J?74CA-(wselS!he4RVxy|>iz$h? z-nd^Mvy5*>Z5|2evpj<|!3(`UD!ml}FamLb`fG=&DUcK!OuF-T$P)pVB?uxDWN_hk zJw-x<=-Dj2I|+A}&F!J2vooQ)k|yKS{zo-4F5^NWn0M%e-EQOM;HcMk|An(T zee)D6gt)qhA=Ikqj>85YR{_>^99>6jY;5UFd@TE1AxQ48J-hGp>)Fm9KuHic8?*FT zw9cK?673Y{6ebPC|3=5k{_LO4H3RkMFzJM0TYBCS(b)W%+jWqJiP!I23*Q)koqB_E zwln^R;l|COzv~<4ZF;*P>$BWnlrtJ}sEzdo_W?TVVF{(6w8Y6%l9e@|Hw0;XH%wAp zm~Qx^nz)bOvE06-pKJJ8C2RkkCJEnru|2KR2R!UI(2YoSd=-^N?9%~T(Ox{Io*@#)}_rEMtrj{JqU7r7!{e|e{JtI$LA6ZN?C z?He9;NBDCJsU6$6J8uTYM3_*>qURhkdXMGw^q9eW{B@{{KhQGqmiW9^rWt#Do2tw6 zLz%QzQhdCADHIauMDxX@g*mD-R_os#?yclg(23W+X0XvI_|%QaVrqrs9RVRDJF{(`}5Y zrq2oED>nXdM=o75FFfpME?>fHp^KC0ZF{7{nDc1lRuy+W13{ z%wJ8pDg%-aI-49!@0!6wH@%Bx{Bf{0St#N4Jc-uC;L;8K{{3VdqFG4 zYxoM69&gU&^z@hnCSaDoL9I0GNYlZ_zD?6X4m|=T9QF~h-Lrj~S^k@*I%sS>BQR39 z7>@AH%)%0Fxbhw+9nwEIZ<7Sw_9%-(kt9@1bs_m#B$&^>`x; z%7*s5kCEuIE=Mp><*;i(N`cn|VSklq~63UG_V|?lV{R`oE=hBYUn`jeiK4fh&7KCN-o_*H9;&t&gL2d0P1+ zkhb*VAB(bKTF1;!wb49#NyehTG^GC}d;IUTSC==w<^I|cQCN@ls(!BbeBex zv!^}i3K*|jr#B))aHR;IYVDewoK(c%YbYpr^yxRL4M6v+X>mn4su!X#pI;b;n%^>qd^(y(hCeqq8*i7lFUiLKXKW$vH=*!C`U?D@6mJ>!l7(L-CQngx zB;vx5atjn)F%(kueqD^r%;Rl2XL*l>T>6%gGp*qOl~xl2e><}g@(7_v3le79UGVp2 zEbC5lpd0V2UPWUXT2h4HAYoXX8hzl^DUq5rvY27I z*Pwk1vi}}-4n>_%QA!=;4ZAxbYGVNztu=uFE~u9`fw(nBdrW8IOF2ZaMTi1?Wjc&j`sf{<)1)8K#cg&>dJp z?rT1add`2?KzLsl8k_e~Ls!C<;D!!&v=a!iAcMFuzMn>kJZX(4L}r$`ZDhk0sz#_RWF`RHr$S# zMidM}^+d!{R5rNTcrhO!O_Sx}OYEr#*hKU|*(1lo*Dw11Yen_>*o>r%%ou`hh62(b zjlc<4=McOJ3Q|%rgad#uT4(bS%UNqYkSU}1yMl)Ry2jD5&YP|1H^9~nP#*U@GPmL` z5lCFv=!GXz7A+I`b*vVp5V3`=)9vP3zg`2SA%4gA%dr=FvCqWh*lnt~y?D%lMConv z;e$;8R)v^^K%s)h^z-x`m8b&v?_{3~H8*D(10WEHqZ`Qd5ZX3Hux4luMX@-t82vJJvU-E`uV_-3WYxb|iVz%w-vw0z9er`+7LlG0F%HO~90d?^UbJVq@R+1} z-rbas6~inRal#vnhp{zxD}*Z^VuaO zCCGI24GjnPCe|%PfgrMaw>>f4st<@vZyrklC#5YCE)~3ZQ^Rc3QtJd%OVGl0faM`> zG%?v07vjw)H)_?CJh|Q3^kFs1`ox>7oIJ45bkO#GpMdj|V?+eSex6TAa7J@D@-W4H zNRj5K;*tv%C8G1R)m<6$-ehi%D@IW_NHvFvjKjcSF9hN^;#ofefoIlGGUC9?bLheQ z!X}BKR{Ei5>6LD<1&Mq%-$w|>~I2A9A!yvVpg7!lx549DqvLCvCc%kS~KHOG%y z*EAJmYclU8EL)!lOqkZaFJ;a2mt-gYaqWMRnHRl~G7*@$prxEY%*l4j-n7UI0_ga> zHf3ktlCH+pdL6Deo|fm#wp;LIU_DGd=_wKymZ3+j)rIjX zN^o*O9iPwdw%w3AN}M7{sz{MLNXFCnUaN_8sK1wy$?;3^_a7&3T!$?X+UnDTixybs zsI>b?itOkO`LR^D0;6eD4%aK2S)-u@jLI;frp=YSI;3Joxt*oGf&5UEc(wu8j$E!L zQnq@6Coiig@ecY0vg}(G9|DT>VJ1mXV+P&gY0^6n;J%KzojdsW-60FPIz3E#nAaT*Wi5MW2@{Df=jdn0IxaC!A=U1;m)<>77gdqX z-P~W#D&w7|-(5h@O3oECKAu$Wl`WUk@C0B>clWv}I-9hS<#{u5x_)UE_6D|3y*AcO z-by)%2Fe_M_GzVM=zM>Q%x*?Z+O^vAL7EmB3tfSzpsi7E{!USzqa_A=rbYR6ezVtm z-6RU(Y(NovsHL`OD2CIlXxbd4Q(3vCEb!)cv~ZKDR6+d1{&x1xIJFgS3={iEaa32A zV(`lzN0q%RlmilZOVlR&WKzjRl-IE9Vb&kRKmcZz3wccS_4SeKnWai$IDpSgaKPyF zaMHQnFI(Ce&y!%3EA{PvS;JbASTL+Guva<)w3oB_$dTuDt4ll^HiRxO1hCvw$(8%r z_K>e_49=`-Fubi>}COm zLNPE_5jx;{xb-Ps*|(e@t|{}zZYHTXYdU`AvtS(Gy=l~UcoVEHi9QixfY+bxlwOf) zxdx#?Ute^vUSZl}_<}XmuE&~`l|Fx4l0KW+B6j?$0n;u)%aB(M z`${IxG(h%)nmHl0jZB5ymX&K7WO4X$Q5i4-a{??mPBW@o=u%W z%+WkMl19hI@V;jxZyamWkYL~5{ju}n8$55?sgv=>vJ1!PZRIi?O<|92VszW)}Na60m5tZAEPU;3BsA~uUi?+v>MiwL6yR7Z+D#f zIJ+lPoJ#@M&_|6EW|TH z5jC5aq~-mgY!pBSWv^dBkU3+p!WFW%+kXe@tbOoL>p;*xE8FJu%)NJW7-3@hSIq(6 zHeUD!!S?5`ujPNN57(G)1ua$H&wrM!wfi&jt8H%HZA3x=Lz_{I&_YuZ^J4Y?mOStg zkqN9jS-<}ufe7Iw`q%J}u*>|%q>pe~?D)4g+?qsWK%Cl$XZcL7(60r*U%lH|)HE|O zTop}%kT_jMIc+3GK4_~Db1rc2oQpC!S!j^-|9U_5NNa;+U#x=qh7^+NpWjNj*8R0P zTZSWD{+c;w^mb(?4MNmJRJ5<+G^&>^pQ0rW`Wt~uKNnVLFQ6}yu)eU$(FGtp+~dA_ zlkI;yIKc##{j1sO`sw@u4MUnRV*UQQ781^BmW0JB@w*q#*T$Iq=f4o{t!syQupb0~ z0E9fgCxB?5M9qmIYhPNkLXqCBw$4`5GbV3u$75TN43np|aDo5xPkHqp1{(m&e_Wd2 zUitsymqvu$SwyXO>-){GYBH!FZlkgXuJaYmv|WSWSAPMZSQE(*!5nfPMueDE2vVL6 z?OpTN{I_`~VZ8X)T8!AswYx%mc{rY~E$Z42;1Tc{Mcm!Jj9ec2jL+4fp`h>>xMg|S z*>&B)Q6l|P)rM$$@?YALOgU(Hg1vmpRq3vN@Lio}YqLBs67Si1FYM2zgoT?QaOrQg zuiWgn-`9FCHO%nGE}mlB9FG`50|TG#f~*NL?BA`PP|?dxVfvCAH}=SrZNRkY4Cp#n z?!W3|^(f+*&d(ufP=@<#yR*99-$8tT(HLnVn@q)a4WCnegNu%q&=nC_D=-g0OH)ej%68ezQxb)&6v7P-Bt|OP4;!G|Pcodp> z(KZa8FfK81CMEqi^}Y3r2ji1iT=tRYq}@1k7CF?~0%M77aYbxq*%gMjIc4l1$mfb9 zBrAgUm@%Xu@wv60wL74+uKle`z<@Aaf6YLLqrTWrjyudr(jQwm{Vd~-wW+v@59QHxC>61MJy^BeV zD$4Wtf-ObmN(`$p$`CHY=~a9xnVfE;S=w&ESYYM{2$1fgxNV?jz?f}ta4-;Fxwd90 znU=(0i)HX^m?{d4pP91#9Ji{N@yjrDmJ{v#-rZwBK{Pw!>W)#1^P6sKTxcfLSpotb zR8_C0?!p-gPFDv2`VkqfhBXx#g{h0m!pW;m6y?;BF2Ou(RcTps;G%2 z`Zb*#qS-d85Ir-oL+oXCrhEx63wiyhsfC5%HfMJovJo!N9A^R9m7V{LFK9j*#K6n%`Q-}!S9Oj8-br7fZ}EWuM6j>xTRL9o;6RX z`SA1aHC3qnewK&!R}q-?UaiXX!1f9DFI?_@VM&70zrK;$_9R_6Dew5N7)V^u3t}9@ z;)wEXfj^Iw4-O5DE2*fcl%X?`nBagWYtW{>=$}5bDe{egJvJWrFI?PmKolQ<3;~@} zXm6Yv`E?(U0GO{O(V_?O^d0n$T#c0Qx2P`(r;65AB{2} zr${i4B-8TDHT2Jmw7*LU2`;O>`*OJ1s2hV{Oa?ax$HmmtuKWAVG6dMzbQr1py=04v zSr(44umG%eUSiG$S!f$!i9 zg4FOsA69(znZ>RAHuAt+u?$!;F~j)gYukPS^>5Iro}?1LY0uOZ&`NM8m@$j6gNsf> zO}+1a(%XIj{}_AX^5mE}6~qsqu&$s!zbs`f3LFPGPnfM#nV^k08^cp7V^!yVO61pF<&`tuI*oc#DY19j%#8rCd zZLeqO*aqnj&|Veym+;o$r8xds-g=P1)PA54t!_CVfh&VbW!co&VKIcm^5g5(#19ij zx%^j7w$zf$dmsVhPoWU6AP5^X@iKJE0mQ49s^DA?9}pne16Y5MoFHP&8E+`bsH>~v zG$F5SGM8XE11D3pPCa48n=PCy`W3diyS`EHu!`q{<HMD#vpKui8AF<$p;71~w3jC8AqN#XK8LI2^$N)h;NVkLau=t$Li*0a;`B}Tf9@BS)E2hzLK1( z>fG&n&mz{Jb1fsrIVn^xMeGJrN6bN%LVpwapVL}BJ2gy!ybzv}r-DhVXo+NHEvr`q z=t=l~36%%WAA?3haqmf+ixN9z9LuCaUV(kY5mOpR{ERIDmDOK}hxGeuR>VP&f9nL* z^|wn%Kzv6<`zs%VF=HwhOA~Q*g*avxWwdXbj@=E9g>g$U- zbFZ<pea8 z8GFFq5N;^IslbU5ur^Ks-^$A3FW?-(h?NzO;TJY7nH8)Ih%R!l6#?=YHXjKC<|(^- zdV0dPqZjWEzzcW+(7RdmSb+u=(wS0@LqYud%I4usI2nIhwVN6mTo-|NdhTl;s6Y3Q zLhDRAjUU~E8$s|I1xy;tDb0@daj?gL9{0nu2=65zUI3}HtCPx_#|e>y_Uh7cM?dKn ze7|rt$StJo?g|Vppe?{XCGiRlvfB?_wNg6Y9?LHfBevZ^%t5&KkToYhHB<*9@=R$V zz{gAKoTVNizXhO)9$GF)FmQ`YDgb=qlwdF8qTBS^@=Z9(9KlI-ZVO!rmcos=R~=K< zIsBhj>008p;zZiYS5xdcgWs3-()G;w89%wsKvndwX0E^T$=~bcSMwz0FngWom&U0& zjbEXmRro#g*9I@OH#6Vg5tpsPXHb9BGJwyWF~J^aDsP7C37*CAlr-hu*;OGLT3YB| z7QhWGj7nu_;2*&FA)bGWsRt5R3mAsMD{|Tx(wh%SS__`o|BAEjoX5#lQGw-r1WC@w zDU}S(2Qb~Z%tlO*TMy5lG}jG2o^Akal`f+~mYGZK zRGz|}I|84S*U2J!_V(!#Y!P4)UHMn^3-Bcn(w;&hStfQ8+m#L#&Vk~y>ks4#eUh-q zXtvjA|3~pnb8jU~@v|jUr35(qMRD;7fS}l|}@V2ADR9>-6~0JByPppehM+<|y0Mkw$Ou7RVxz)bZZE$b#F~ zk}BPa@0yM0UwXK{)V)b%U(7Xdlel~lO(Jk*6#T}-s~9HFObb`2mxyOL8v)^4;2cmE zCGx>7hSN};;gwW|@Mi1ZP@XKX`oMe_2?7Buz!iVws@idhtAr__`c+rhEp~T_!_nFU zryh~Au7`MFkx2+VOL>S}fhTaAcNg8Bwh|ck!T7BkES5EigODv^6QJbEK~9LC_<6W@ z60!3gnx>NRlz*M;3y~Ch0(~!Pe($zy@>>z$WQgKQUY^B4dwGiEE>saG@E8FS{)Dmv zd3`lfcr0vn;ACzBxuIMLtnt1%*t=+5?h zg1&<)z9-)o4^cDaPeK`lYIgDzXClff{}OLkllRmDmsoXs40E& z7J_dE2PmJ3bG)?Jw<^TR8TtEusx@)rzb|s#0kKS|_i{i#fH0Rt_5hJfZ>jsaBb`>f zLC!+qu=+|6)ZjikvKK-XoU}7Iak$^wU?&>TBt=|4-~{dA(v2M`*_2|NfQaCk7e~Sa zr!UX0LN;-hNP2a>uzI$HfrSTc2#X$XGWebs?yU?gg`&(@|0CW;Sow}~Z1`fC(Lxf4 z;jrTR?k7Bs*b1b1!TtyCFRa;Ol9G&au7VyZYe8|J@VTF7JuXd>4p zb7;0%zeHoTX#B~a>-1(jYSS^hhQN`qlYcL35?9c3D+1c8c=}{`c9KP|@Mg75*SkFe z+~ZGYfV<#E@+*57hf`3O&_;OlC8ZKb!6D((b_gpeAgpcgIBq$!Foow&8EW*yf zmlcv|Y2lApW9VbIHN(|60gYFhzRtuOzCi=6K)Pk%||d%&IROi!p7Qn z_OIq!ZwsUA7C@aNh2Ovg>DMr%Xz=ds1DgZ47&dNPbv$sOtzV)a(jDs9NtmdQZ2QI* zdy5!5ZVIQ7Ux@d(FZJ}eT^$Boi7)XeK)z&6b6R9^BrgdH8COezMs6il^ifo_oXw`;+F_@LP!Sr~?p$3VIPCYid_1b8(MD;n)ckPeEemz!RjamRj>3 zuz3(Aji6wFR8t*hMM8uX5X3;Z9?&D-N+W!+;6pZziy83zs!@q^B-yv>Cw`Ps~e zLkLctL>Wsva^o&kz@1xgtibE{1vtEP;5#k_QN$vQ!-TIJN+Au-zE?VR(SvYTV}(@f z4iau8yt?A%^^HhHIi+o=ZhyTDCqy@E+={{pV@<+<5np0q`yA+bT-79bnp`Gls0bI% z%THlYx8MV45;M`!f}Bam0pT5`E>rtq!J{)Uaz!?`UL2-q$V3KErnbG(Sw;9j?y2qV z`S#1Ed8+Mqj;|p#0zyo^!f2^n1B0g+^1AkX{EQB>W;t~>^6f$U3itZ)ik-2FQ);E0 z)>2=?tp8@GfyHf`qW@6=F#eifIj3I~UWBBcuoQ$2V0u4yGGnmViiVcfGZaX83f}FN z?wt&eJrV;s$5FgOC=FpDCgeWwq6ZQ148j2dV6-caDQ37Ig5=|wH3ce2e?c5O2sW6! z5Q4D*D4i~4WXQfL3Bpx+>OTseGs-``a}nPeT5;NMIQHn7Ar!jfAeoT8y4B%d^Cdne zEUVj)?SN=r#Gx;9{fvU)1F8WOl*&91NDd0bf73hytsPV;c!$rf&uqV*sxk__2(r=p zuC)|hH8x#_-I&?U6g{Q57+_aAbHpJg1DiWCJdU9? zQA7cpcLtn9q(!E(fYX6jm&dQ4>{Y`U`BeK%C}{v89e#g5%FGWr1Wp{O1Zv|!KXl+2 z!VcIwNZagS6oQrp2+j*#YG|At{Uh}9-h`1bdySnR^e(oHkcWD< z^~WhZ!&}sjfRIg3M>m4-2zwoDEwZL-_|KSJKHk09GYDAXrm0fS6)HcFflKb1o}D!! zW{m*%-VPwPQRk%83I)S%0N&>cXtfv5Ke!hGO@+XgE4@5kPLh_8xg*Gm_y=N+zgC@CXHz`J=$X`3ymU zi{KW1Cz7A@(d3z?hb^`kBW zwdweLBeE|XJht~)Hk|U5+CK&a8Nd6+X6fT4kmaoB=QlM_*v^dQBdqWkd5++=;@(a- zUcPW1EHzwgVKcUj>*IW{?dI;ir&z?xF^cSm2lZZ+A00{$XcNo2{HuEP z8G;Q&=dv&zM{N&?Lr3F=H^thGv#%_(Ixxt5r(M=#Ch~hxfAr8KJr6nOr`_1Ld&(0O zv{xianYY>{8-D+=3alEqH5u{h08+qx`zD=o#G@~8B?pgg(HuB-*=_?Jo@Zue=5_0m zVq--qvkj(R(tE~3O$jA!JMZ|n2}Y~)iHR&YKMV{NA{z+JFLm)amvqKO5XECh$whB32Z=$ zk+LhrFv`ZPe00nA(jFaM!yxe;X}Q*d)@76?G&jt!=`*^i6Ef7{Ld~vOin0`Gtk*JL6mpc?(ua>x9Q%^ODejR& zZJIq3>HIf*D9Du^ICb`Gyvy4ycY+jtL^2wGK&C)6W&x8zj59J@|RCw5o(d zUd7PR5G^x@Flt=dCcha-0_@nQE?&32EbE{zOY79+JH{R--Mbw^{NZe1f zu4er$v7SZ}y9XpprJtm}i;TE1)wOyPmT^5Qr*I{Zq;sF#3ujY zYmDPaM~yYRONG9khACShK7+eRO($L!!R@Mzf+q0K?y26_|_nVF-=C2-!G(5({Q{`kcrYzEB9Fol`qNwNxU#_f> z1ut-~goU*B@~GvnXNyOWzP;XXoT^9cPlK7sb?)hx8@tJ?oG4`IzaM$55JMAV?$pTR z%S#b#J|e-zcYt3c@2-nZd|2$qsjOtyAZmGLC-kJ_Ph1-N&tqSy-);$#eyIPf`DA${ zP+S1BLHM>PT!^X^feeZIo_ymJU?LrHyS{}{240?N3SBR$tZd`!gJIcL12(DtAT{QZ zm)So#R#1r_oVRIkQb93NL;D@ct;olSBvA#pr6Mvq%H;=L>QI^0$%W5$7j0>~a4r`C za&1ucBRM3;b8fGSEz$cvs+&4ilW{o5ATK*8^^ZJPn)+)Kx_G-G$XkF!0AX|XI3`_M z;sj8pVMn4BJ9&9Nb&xc>a6fygzs~tu1Sq9n*V`jfVhvF)XrsPG@gZU~mRuw+1Dty6 zO=B8ky@x*8+j3l;^Nd)Q->gziyP5)< zTX=K2s6<3u4^qUion~U@mbt}1LAqBFsh{?DrvPyO?bM0K7dQ}*3G4BV1m?H+u6kt)8Yd9Rd1<}R%|RUUO|SqHvfk_E zIr=|hXJ@~U1QcK%_=p5`iz~%6$@L={j3wDaziur+vCQO=36dF14_Bf1*njXr^1^vEZe znDX-lUD>}P&=a*H&?scZGAvdUGU? z7*V?W++L~pI1-OgJG7UR1?^KwBrCUyeVD5wQDrM!<72=@s`sQ2Pyn?EJf`zBHnTxj=r`ER9yh7TWXrr|S3cu(KafJ3pb#5UlLV z^XU+A7yok^;Xo!ApADZVI-c>9VSHhW@L zazbyb_NsspySTA_`X{b%gvd(d^MINr3XrBl!TOx0I3ijVX51$*stJ9}$qxWkbgOk? z3rBRV0gT4f0H`7cot^ga`2oZfR?0Cqe^vgmK>ZCHsqf%&QXYvA9=**ssR_JvD>#*} ztt9?hLdG%w?HWF+jYXy=pLa?*gBJ->yIChHvJqvqv{$t^$?Ox!q%RMnls; zXq4Cw-L@_2z+8+!or_Rzd&nyCCZLH(GV|(bU`W0l`SkKj^R1zGv8G^=>Ar!k;C;Hf zaBmd^|4#6PXqE>h$j6k&^HIf8Wh$PnA<)!Va>v!kMgJ?Ci%}GEw4(NSgap2g=o|zY z2KxD+o{j>I;&BX)iY+Q!!8EYfDOZlr(q%4YJYFlTxpKaST@b%UJ-B7*^5F4Wj@>&d znEWmZ-+w#SSKOuR5ndG2u|79PSK7_lG;W)*e#oe1Og{PMLe+>3N}}hb*ev4Wk6sHV zr)2-eZ2Kk6lGiIYH8@~CQb48O#;L@NC0jR5p81LwTeyrRnF_o7{E^#H#GmJ8^q1wb zT<7!BxOSNRVbmDV6%#k5W#&(n*(Gy*13eaJ2{Sstl5G$Y3PA#aQ-zj6BF#rhB@ass zoGz@+BaAnada(ig4KZ&8+Y*8aR)oX=z&9`{22QC71bHyS_aH@Q9TD85!q5d4N)4zh zP#7_W%k1K&1d6iwtNL9L^CdvRtOa;&Zaj9ajlkJPbH_N&=Sa7;1t6_3l z6bs%cNiGVuI2d{XyS*%S6U9BzHX!{o7<0`4Xj3cGYh>aiY(`rtj&Xe&IM@f4Sz0SA zE9e2^Q**=nUY6Oek@Hw1NCUQa6KxG#d2%&SOxZk$epYLA^;iz@J78W|Y@etLgT}zF%-M+*#~25DMIaLH{1k-CUKk1ZnxgW!G z@)M=j!jraYnSj-Ol@iht3Wx~@zk913W$wpyS%qIlPO&^bEghk+LQhZii@Ww<9(k1z zqmW)hw81^^ofocnU9qbmZ9O$S+4r?wJMxx1ubOQag=Y#+m{~=?ss4nSpR_=YDE+FK ztIFk#)aPT`2iwPM4&VP+RBZtflVe!xic*zZ7@SlS6>CM2wgMp2@_Jqa-)I zqWl%B3oo3{c;4}R>F8b8WLp)-|vRwLk%8)j)N^@&2;V?}L!drHU+j4x{V zL1RY06VQlRjPb|hyAFcx^i6(F37hXTHf!IMW(lY0J5dXD(j$vLaQ> zHp3EN9cA?){WavaaVg<>5!Lb6kFfsdT;AA;bLri4vfPDF@qm_2;hDPq57y34N#OYb z`C*qf8;gpW2+MM+`%ginU@eazl!G>#`15DIR&XGg0%QwEu|jy8zCzoA$iHxN%b7## zG}c33f@1)!BV<}w%Sw=rgj^2mB$m;+DHxdhVdSLfYpE~rdHc#iJuioek+E~OJ@>ly z3=cm)A%eiRjK6eh58a{$ppHD00`*w-Ft>_XK++8q@#&OUdPJH3M1VH zK2(Qlr6=KpzcL|;|1nCTARaIV|jSql2LGSX; zZtRPoGCF9;hj6&qqQt-@KyX8q!&(cj{i3*;p^5YGmbq79xg!v>NyHh3z{}uC*ZYe< zax65IkLF;})l1pwYyqbMHNSbW9DP>E8uuZYE{{%fOS{&Rfo;NvUBx~t)3_?myt{3e zM7Q|{{({~d9tMcGqIvFLRCTvOG~6OJ;ik5gL&>KxB(hC+DxFXwyI1mB6%*J!v{>Ip zCNngVfX|}S1~=eW(GbgJ;hox+H@wJ{5)hl~c#1KscO6yG!yV^5$!yB%QYY{r|?L@%}valUnYp!b+ssIR#ggg#c1t;TM4W00h2U219Pz z)Y|ca;Qdkq4TeE|g1+JKHwB*f?Zw4|sCan61Ww`GwWcfSRgsC=728kZ#a;yx0oIT0 z&FvBOM`S2yZVi1ys)et+73+hUb|CR>LH}XiG*wkIn22G#jlvw0$Z|)=!4w0@PBVz( zzO(E0O~DrGOM=f*~3^vt><0>G2Nn1{RwVIS>*#_2CIl$idI@P}A} zOPfw2;^XwO3IuPw&^DB9QB(u_h@<;(XDb@0b8%V;Dg=Dz;{1Gj589`rN3mu%?6lbZ zj*D)^0}9?B9F+%3iG|72JqU`ac=0x3b*vS#K@ii4@i|fRDL@2f2VH4sXlU^zDVh;H zVt1UMK2i?#FWu0#xL-ZNEwjHF&rqSeq*$Cv0-8KG`>r_huWpGT$K& zH?BuY57RYqUG{Z(w%ZS}9MuzyKQFO#JY#jO-nz$4pjo6Ij=OgB@$Yxm{`;G0e0VK=!Xuv- z6@>6GU2)mMoAoL35~wpRu5FbYm}DLY2H#ft98~G1UAH19a0kt^v;=360u!Hfp}i2< z3OJX;*pse(JZF%15R#qQpUxh+Rd|@tzj>1C^s`x`d9bx;d(X_cq%P~$rPGUBi%j?f zTw^Zu)YOokYog~b956H;9bL8-de>3LefOs~e2HU03?0NCs{GQcjggNBkvIg+1^siR z(^~UiIO3o94MccONI{8=TstOssq+_;d=N-AOy6}7EkWXj9mX@_*ms;NNSs0LEDiI^ z47JS;8l7Y>jB6Czkk$Wa5Q?c@p4n3@s#+E&NJUG#i4KHnT?taHyjR$PveHO{fN51V;SchSgzrBYb1J5mt|6X+nqg}E;&krF~r{ zdr?4Otnx8r>(dcP5vveWnKlGe#herMxPQJ)gr^prlp94vg;m@(Ke!8lk#bTM!;rYq z5BfABX*JMAsa+=NbdQ(!!Oj1`*83*e>zyA}k#Y?czA|bJP{7pz$-qx=GT;lRI2=`8 z3c>ZR3cHCr1YKeJ#^heC^!1(o&@E$R7AWP0Oza;1HZdBc%*fEN&O$66Tp?8F@)o1d z1uiO$m3bmCLz;*oY*R#D3L&SEP%nrn3_%J6;W=&{(!SlD6+ zaXYMHiz=F!qp^Co;4p)nt2#j4&;y;rd+-~u2E?I_jO@DWyogEG=PXkEMBp%m>i}{P z_lepm(U?cwzV;hl4~!@?zo(N!u^zP4HE14CYbEz}Ak3uB_MT3PcW|;#Bqs8PfOZD@ zk(1ItaykX4W)T9}eFwXMoM2h|3a!Qd=)T1h{q?CuR2Ly5YJP@Ei4oB|@ir4LEs_Qi z#U}G+Ot^UvGUgIH5%(JjzpMZ(o7U)o>exu2Vx+ZOkl(B~KK8$+hWn?{r})CqWUYaFkK zdcA?k2Hj=ollsNPGUfJcO@)PywP`6%-1&HG@O&uD5^9i1x>vGnr{BVHel*`qKqsnn zx3Rz18aLGxewoaao9->k>ALBcVM>4KAAei}!0HCMBA;fQ)+yo~{easadumDWF=Wa& zO)q(a#IB&CZ`}cXUpl745o4twf+dDBBR53~jJ;O_I25FG8dhgSp`^Uu)W@gTUhzUD z;S%D9gqrQ7rmmpy6?W4u$URH&f&(SchROp4;0iXIxD!B%&yrn4Rd_oqCN?%!S6BtP zJ-F-&mJ5V?_vpT){jgwEF1bz($% zSu83l8gm@i0fm1UGvH*mu)mOu$^m}%2{Q!`whZ7zBl}fyZEx8Yp?Sz%PIk`BBpKt! z!qm%Ub{Ee_QFUWj$0iI^KVQyA_=s;X&#i&n|Zs(*IKz%i8pA8z#?!X zA%<*bJtU-jVkYtxaUw)T%BVcUjRWhx&esjxi`YI8q~qEWTsQt##ZVGRO;iPQRTkx} z@ajUlk|q*3Ol*>KuCP7mQs!>x;gRp3GX2o!{cp6mgbZIlIWo^=X z7=UzPyqkS;7>^=C-V>w~7_a*R=>#%i6B=n|qSkdKF`8}SkoEDX9m zPL6+w+JzJpBR`w)C?~%VR|XwV3>YPvf`jZvukVeJ?$R=elGY^XnIGOY%r|CBU2qHbiTMKJ2bsi4*(BbJA#Vqj+ zGe~WTQh!8r!)}GtISY3LI`6l|MUOj>8hj|(rzg5QSD(HG5llm;r_Af3J()EoQQ07f zLaebvpy>i2LqY8jf$nr@afguD?DInj@#o8nop+toestxqQ^A{W4nt~T!;|P8Vd9$b z5Y#?~&Q_<2a-Rh(&0>aJc(XTtAg*KsHBBkrW&N;HU`71#RNjba4VvgSi~oRv+uDe* z|2R8|yt;M;#k?}Z6oARAg&0ZXdJq-c^sqFagri>;+dP6crsKkv*WxrVWk@ab%!yH@ zS~DZK;gQ$1&p$YOai zxMkbVr)OmmqCNk?vkDjZ;6KUBTaFhHg(Ug}^qXwRt^`ff!-I)1fWwy)!thPLZ`gQ( zgF%~21;B)@Fvv3RC}pXI@^tHm936x5KN>rl0a|b-Kt+m5mDvp<6h(ld%l2Hx>3J^Y zemPi952DXx_s)(OVl*hm*dXbB=mrS<4izD8R9Np45K(h22%FDF2Kzj zjOYlOg)1^FEDV8efFGtdTb^Y{1>TCJ?uJf5G!yme-V#^x#%6`*!w_?h0iuS88}Y@c zraj7js^cNXx;sf!cAeiW9%i?7!}g%m^x5%`ClOq6H3-6!&*}y@c@|uYs1SPJ<8&R} ztAgBN;}1Zv2N&8C4WlXF872x4&~!h)qaxD-uY*&>VI_n(1*~EW^zoy(13g=W%?431hQv1=%8k`vS_U{nv{?$X?&?tzZjTIo_NQ+xec*~%dqyrl zw;PI#yR_%THSyQQpZ>DZ+}sL6Z>*z-W%Z1NepCgR}i5D>D@G+0I%vcBhc};wGwicS+$-$Glqb^?b6Xo|`deN2H|Q+ArI>_4%3!0+=!#K&>!cd`ooTiSQ}JaO=6GA$afN8=2z2&jJc zem~ckop07I;a2#E=`7{CY9gD6dhRYoo!jL$>7C)X?{?`Pxf%y~IoZE|LTJlJo83#i z-qB<_J(tw~#{BprqfJg8mGUE=c{u}}BW`3hWX{hjYQzL;b;cr7P2n_)6etezY&3#k zTHyz;E;XJN8M>N*mFc6bagz6w_VKS;)f_#N3{$!>s`tSfTuykZ5bux)cWro|AN87A z#3uFAK0jf#ziUWS%p&v9yqZGN>C1*&uJRQmPtU@YsHVR!b=}}e@{iMq0b_?8@}<1Z z%S0^c*aGXvXCiE*J09``*G*UUU;Rprg&m0fgOy>7v~E)}MWdPst}dk20myE%8 zY~D0yNo`lf^Xcco=uK}JkIeeg*d_3MI-*ei*+ux<51yD)_VzshtZ^;hBBukfiFD-| zURVIrKROEHR@}sn_ckBZcU-&WOQL1=R?n0ro#^-S*cteBpkrkP2~+B)U$K<`D51p!1j4*B;|}07>v}k~^=SRna_I?f2i! z%%r-*lUgiDZ%NRKZ3?g5kDxokOicKU|DONu_qtD2r{DePsTU}`ZkAVN$3=_M=ieq*a0!po$Guhu*QH%y?WYQ#BYxV#Aj1eQ)(oe*XWfwcU?0|aYowPFE&lc8912B*H!Scvcg;| z2ABr%7I^)0dt^f-^AW*;Fq;6CM5egBwB(ji%?xnFw0Drh!e)q)*nHEJyUX&DPQA+A z7yQe8T>PG9@!eG=PF{ALl8x=_SNgVHx;z0gP94-$k_?s{w2w7j_`Sctl=k}neNL@v zsFyo}{r$^&gEzkMrd8>96?x8O@}$P!4->4jiCUbISl|LpO1TQ~-G?EBffmyKpR5;m zN!OVc)W}^#K3p<(E^#@n9F@lPYadZ$0^#b(V5UR%rsw#zzrvA00_*Y-&Q#yNugkwV zcSw%pj*B%ev`4UTIW*F2oSM@lO=M@B{N4~%i@C6m%PPVpOytivLQNENvg5+r)Wiz5 z_pa@|@qca$1%<;O`&A^2FT~J);XwD_L&>w0wfcv!H{jsp)OTcuhxXg+`cXe#?r^%m zbWAzRN@jWx@2p+;va3HC6(Eemv-MGUzuos z3jOt$6MzbpFMFw>=Cxy{kbE_dmCik+cP@VQU#JuQAGY2DD5`X87bY~&M9DccbT>(2 zgGdq^Xfl#fKypS=0Rai3geK>pfC!QWMTev!CbA$wKvY0RNskebPo9 znZ@ESKL-A1^JmAPiE!uOslQ(>?##|4$Nfc`qo(je$X@Yinc0P(_4l9MyjxmDCXCR( z|EGuX*o;oyD((5)zaI-qIU^l?a>k>nFD{I)@3f1Qn;-NAEAg_RY)#m_ir#(y!2qHjlR0v-cTi<>b49wiUe z(Iu8C@&76zj>t$?mD6x)?^4VEY^-5t&BJn3D13q3b#0agX0ppO34L%LyT3AP2>!hb zUQjt`NV>e`kV`$qY4&lJ`uz99jPIF|KiuE{n3JFQhqadk{Kpaoo-m(rjN}@9em7%$ z?v4YEn-#5rHBPZZoFX8y#zst>So?wMBj_mN-)S0RLgjBD_znAI%JaJM> ze*!$szmO69``x)^oJpf40naJ}Mr}j_p14G`EQs^TefWPrPYfyD8Gh>je8-z677V1q zCGwY3o$z3MRQ>K8YWY|GnB&DLBs!c_p1PX1{O?Lq!c;{>5NdpU zZuJlNvy65gISN(4*}mm`So{A>B4J`vUY(4_RsYxLl-HJG^(yC(`>v5_eh8lFP3}m-1tHx@oSgz|L?c9jT*rr_}{O^9v+$l0LbK}G;eD^hv%{rF!(JNd7%Bf|L+5J zU9Nop|9t}o?0Mi5vmoJUhd&iafDSi3+Qj%KP(RDdi58+!JHans8jwgeIcQdlb;wij zyx^{&EKg%?He`$5qaR61Pv_$4NWV;U+Jfk%Fjc&)z7&@ldY(}sh2%{ZFh-}jeT*J3 z%+kn#vf$~+!S1Z%A@{kZ!JvoZaF>1NU+P$Z?qqm5wS>`hH1?8B$v+#5 zH2&CnaZY(A-<@QMaV*vMj>1DJYZn_t=zH1NjZIX~c>iAdsQ5KZxQ<&-1 z9klTY+6Q;b<=#@#4(rwaWNhnpWKZ`aw~c#vQe70Oz5mL(y&iiq1RhTVSW`dz>Cl#n%O8 z70~UP{P;l>>)!r8vxwGZSXEjC8Qqc4?|Nk;#6FTrIY!B)t1E>OY;%_}xS?j5Qw$IT zL70$~j;C^O5G2_2`b#%zKf}ye3(Ue!9_-Bdc(U{v?}!p_v_-drC5tL*7*?4L2b_Jdumo&Ut4OH6ir}zVqR*q zoQq>jMvY!mNDr6B2s+Q_o_i(CLDya>_L?UpjgqhUbYvm%=H@ZCdF}H4PgFG<@CxV_ z)~B|LZ@?R%HlXXe&eKKpZL|Y7W9BAj>7!mq<{*m8Iq4YrIoOB|zxlq$&O4*^t6V3! zoV=66GAW>GtkmP`38~*I9@fRE0 z{8D;4IY%IUvF*!&tRD9&&;Sq=0Z>$gUUwDt902Y7*xxV2Dj3_^F@gMsk`J|jda0^Y zS%V(yreS7f9>Jk28QoZF-slC0(t1;t-e<5dtH_HT22%V*`0B}QeOZ>qTQE`q>ljLjRcLes6s=A+2=xIc=H#DE6t%+yI_qL}BIuVlGjdkKD2&HQ$ z@DSY}I&D&UHk-DV!&n%o5@Er_Px+L!)P~L{i|ttRTy_Md&UCD4yQLjdrA^8b z6)<&HK0f;i5PmjRPEjX8*=CQ79r#-p4$&cX;kw^Ftc;xe-su#FCChY58E2WsGmAN& zt@`;w-WflT5HjSR=P%#LFln{99c$NG;~K|AVbi5!ly4kI){gFRJoBqcj!UP!--YTa z?oc_Y*uOJ}yxROH1%oD85xCAsZ)NE79Wwo_CYIeUuKmM_h>MCb^C(GQth7U- z#Q)H>*tYuGN%*RV-$Jfm-hE-P5{U%y-Y*`Udxn5gtEkAstd)ug-s*DE5|F z^ZdbWmoq*qH|%k_HrmzM^4t#f?S|Kt-(IB|Sj*%-$B@R?T=eAHsNw`2>0p(}=@7t| z>v_$_`gWcz;q90gS4iBVZ)SYA2w&?p$;Trthh1J@YM~HzABV3n;gHA`c-%0(0633i zJvZV$?7~tbunc%w$<`FVPl=<@yG^I7mzp$#00!A9IWI z^~}-zQfpn#Nw1F<9~r7DM{PnIZG(_9V9UY9fzgkxZoAWE#$QX!L>WgD$yoc}`~sQ| z95RbAmLu5!z{w~TRpsZIloGwz64f^I7g^lvYT>JzZw1K%jK5+NAV^Stln{8746~UiXZWK{ugW; z>-o{P-n~FdeL-Wf!eRa}anpU3gw?$CbLN^S(J7bQYNQQ`ua!C~{j7J3xktXRbK3@= zU2+Mf+`aoRE5(HuxWtr&Lns?bKQeo-S+fUi8oN%a!PM1vw-}OJT0{n))5}U$<*Ao) z-(qdQNa?Wgo{3C8%gK599A$G;^!PBZrc0!Z%*73)YY&jm2^{`U3ipQ78D&N8#L!SMCv{#q)Eh>+eKm>sG0!Dm|fa%!xw7KFr_ z%>|hf#?K4TlEZla+j|a=hf@#+Q6>$nO8q|vx&@g zEFIN~zE;RVRi%*JV`}A|JDrj|%F3*FoibR(gd8Z3B~i*WTKj~Lm08M%^c*XT8{;}m zxla<911ZowpJ$X(GKilu;QE2AcRkrXQI53O6#X7wzzh-Ez?Fj*Zu-(D3D>c{OK-h! zTOoy6IdV2A6l%#<_2RnsQ{sc#qOWRVeERX6YW&)XU0BB^L&vPzv#^H;GBT9UJIhoB z%r(RX4za&PmA#6;FHU!AP8FGJMeliMy!uJg>ALduOQo=7tc_pg%O1A5_tco0sf8r< z<+(k0D_W%RO3K)b6-iRbyp$P68?aRImzhf{u=VFsdg(YvGjx=1!H{MI2RkaP3^^HUtU6}KJbaAYfb-BhG`6briy=F`g%_=t=rwXv}z z)X1qZiL2HHiDa8uZn4Ih{ zAfSl-`}P=sY807b$xo9Tp&3II4!fJy+xGPi96Xj@V(UA;;>u;i?~ z<~DRl^IT{>fIYC|3`kbz1<}D2tP+7L;}4b)p^86#{zSa@kSp=~*Y}L1XgT{DCJ(@x zp)!z!LP~Og{0flFClJ^HWQ4?_Tt`;k8P3h%%|rPCrh;|Jq>lgaeyStF?i0FNysXR;C_;r&Z~5v*v3))pTsQM;(G z+^nRWhVi~w=xYUgH?~Jm<|@#!z}4k@f%4bq7r$rUln^iyI{|eJGY!jq2XM?<1<0q% zr8vn=K#6R^eW6@C9Cq~E&Lv`TV#MKbznbE4!am;(a4bMP1;nd<10+s+NVrZ>k1*m< zS)U$5o%Y<^@CGu1b&D{s6Q*hIMaW#O6RI=*dvi8LkH(QpyK9tQ;*IF8&XkPD*Lm#jwnU|0MUa^o6x_{nf z4yt z&zGLsQ5J8e+}{z?UQ`_m>G-TTrdAkFL6{$wnKs}x9oGI}#0{CU9M-Hp-WfaS*n+Zl=d@LIw< zA;8PqTam?`whCEhAKgE~VineOz%MNTJUbBRtg!w=9F5=#-f#z;4BnW>P#s8+Y2yp% zJOJZB7$kfH#tFg@09p!2Q-R%cgl`enVgQrd1856cNpKhX1VW!Z0RLwaL7ETDMo9x$ z1_85l@>`dL`$AwQAFpeMx1n=`{il3KShfQV0zxAm0Tc2%Yt9|GF~#Tzb;UqAgxwYf z_7JN;EBQwI4pxpJ?&-j3<=5+N84@{k@rOP(V_L{j zH9mBT>;) z1%MDXE4W@*K0ClpW1SdhR8Q;)W7F@@09C$eY1YG(Oe zB0cj~1L_%x`gRig?i^=asx3UbwhHJBI!#JCp^%Hmp>~jPg%jKA5#qZcCoXjTIMdxsX8tOE;4t{gqhB2T2Qj zF${c&DKdKrbjnMkg1QH-nB$Z{?7>Lb)ZnK`U%RQ_YH9mRaiovrCaylFc=iHyYnP%` zIk#3<*Xh!$iw!OvF^^qX84E_|Kf+2ZR{v<-I)8MiRWQ5j*6F1qiI%dWtOeWous?13 zWvRo+K4~iTHg61kqCHz{EE-?9R%n;s{Sc$?8=M%FtS^JB0;1X~+lmAu8s$zklo?xP7*Pk}>%C8wIFH9pXVqLxnZo{sxJbw9Ww z@D!pJj!4_en^AlOt8RpQ`nnz9X(-GYK0{;*cq+XD$REU~pxnNF0IxLc3#k>C zk=&&);l5O8*np{%dnB6f?yXz5oYTa<%w_{odK|dC8Vu|JYoLh zSDyan#IPGq4rg%7QI^pG%h%BEN$9@skI^{JGBf9(fKgTvelZa4yHblQh2k_MO%t1Wkh5%Fl= z@lOdJ-!0Of>_(<$5J4whs5UrFs>~-vH?gA3ZN9zU*tt zk@V7iW?K3z(4Hm_G{7-d{5d1vvOzS{9J>nrYGYPX>2!+8rG}bfB zK!egPw!N3vO#r18L-~K5lV)^dfUnO_n7xPbesxcAyl`pzl;Nn|Z1EKeMW)w-&{rNf z%YMFtC7YZafTX>w^CKONW_|qN4mJnO2#}T(Pw7)yD%WI1_1Uz0meh4mZZxf~gnR|9 z02q*hbYc25SP3H%!w&$52Xg>K>k1;Up z1@jyOT7*Bk{_UzT#RJgwgKPm7H}COB8Mm3K>dN&JEpUtetnj7+`BM7O>Dc{M)p@FC z&Acy4*?z(v*C-mk=RWTklZZmS*29l+ToRNE3!gK@@zpeK_ftHzWCz->&rh>NlEE7f z3a&x6qJdw8@;(_|!iZ*ZF5255&$QbDj|6tckWmn0a=rn?5m^!v<|cZCY|7W~g&9+i z%LE^`464{fM=+bWY#1AeYPKNrK5Tb4E*HWo%9jr4ZDov9B?-V0TqwMITkRT5UOH_} z^c!71gKdlv5KL$gar>67j<>7pGz@29l{vBC$#4`D^)U$t^xQhN;C6EFG*DJFwrP%* z^zte|L4GES-=@fiBAdvlr9<4LYXm# zn~T?o5?0k|)iY2boBm@CpwsQIS@4Y$DP_cEBV^WjbW$C`kw|mt5ZK}S~-Rr(% zJu`A5eo-m&l5qs3Y((YVehJM3b86TZS=~OtY3wpi&vRCNg~G%RP9?OS;G3qqI|^%C zAIi7hT>Qps5@lV69O}`Z9k!aC1q|z8aEg*YD<=cjp8N894XK^R-zRGe zCsDCXjGnkT!by|FPN~o?@%0rDqoKkcdE}?vD9EOvz@Da2@4}T@i22M6VCRGRCim}j;<&EPB>S~FT#A*)()ml|qq#V4P5W1iO_1aWaTuKb2KObywu<>r9-Cy^gIJ5T!x#cD}WsO}&(hrjB5K}V<% z8j#P07BC+Ex~LWX-c)6sKHvE^vBEqCwxR2XPh}LD zI75oc6);a*W$QALa%$8rSJ2Jx*&|&#p<`GKOjxl34a>~B_Zwu!PdmQT$#B}6VFNq& z5eApOn+oiYzVW(u^DDSUe;lsPRyO&{usKYJz!%3Nnm-PU-s&{(ZE=MD5njta`rb!j zC86t6_6FX-dRzYZOrwyG@lXVCyGOtV3vQ*xR>(HIZh99k!MNg2PZN2!(fo+lATRKZ zpgTPxEu#Q^7v|C2#GSWd3JUemM*YYTetpvB4{%@YQmyLXcDw+U%q|Mg9ci}~Kn{GX zbc12E)E>G(YzIE`RLMOVOLeDM#3?#p(+2NXolPIJ3-e9xkozC#jx9(J5sxb(vP_10 z!fIvQcUv=bmDfobz|8DEFsf3rB9iOd-k5EawQFBje=6S5m4${X!q<6laDa*9aS1r# zh6oJcBsKM9*R!e*}&qQPY?!B#~lpE(891x*> zj8`iVcjgr;%~yx*i1yEs-0zIae}$AM@6q$N&DPWh_=R5kA)(w+^GQ8A!ByN*Fk9b9 zBbV2>z#K5rwD}Z$U0MI3Y)EAsmCT|9m z^?Py_BpTeY&b}Odb|b}fs5}^^ZZI+8)w#p#u-vn3cddtp z8d`Bu?RjZh^jI~8E3FQzVK*7A*E@DlmTL7I!qYy30z%Yin^mnX>ar*ctM7Cr%l3ev zb&{uabdIyJo^D2)UOacwGF6TTnPT39%W0tzSQGG3-{emxsmR*6whJfX6w%l%BQJ2e zegx#abt;vh#rP&!`OPNGjeCf*izB3VDEvx?P#lz-9qzI6ox@(^gU6~QavHe#2i2WA zeC?WvuJ<1Q94q&`3^{1U{YBQ66+#<9~E%C+Vf*w$eP4tiJ#GFy(ZKjg#n?SHG4nK5Lf?p0+E#cs6w&AXsY7Y(FwbyXl zt;58Y1>R3pz_G2vM@VOHL!+xa=lW(c%km_Wy+$!$LnJV_If@)FVrO#)d%4B^&g zw`VKa%6m`EsR5p9pMZS>Q2dvXOhMt|I?n*phXs7YU52CJH^>eL#eWdO8L79zT&dc;+^c);DL9SeRFoi zn4O8Tv_oq!>T;xZ-d`F^m6eQ00eKXRXR3t6&+zdoM za$&dXm3-|IiJstvVJ|;Goz14kn>=hZko{+#ov1u7fe00jMXH2|wXxSd6Y)$#<3qL% zZ!!1Lq1^`YK9V*ytY1{^>9nEww*hM@Lqkk-jwzF2yz%91~OcESRlB=9KBJQRps~XQOHzTCz zPJ#}!&$1ysw8XNdls-+;rZZN3!nG&fB*9b(#l)|Scr%)6u8c>^@98 z7ZrC(ObcBj#M!~fzL4A#mj?XFX6lmj znooDqAny>dDX^nxArVr=9GlPH1j(c|C}el6Uj73Jlbn4cs!($xSxu*ABfuxBBN|E% z96(c-e2?G}M&=B}034WTc@xpxD6;|uZFA2w?FGo)*|-F7yzdPC6+p^>2M$#IY+qNV zo-g*MUeG5)moRqRr;O(N2$HHUyxFq6xcDAE2Eb#K*jlV7kpC@SMXf;BGXD8s=`Hk3 zfXq>A&`WZ&)15T#!##AMuW>!}aO5s`6DMV*VvG8W*lP0}l`J{7xdq0BANmq$=n>Xw z4Mwg}Lv#8JcSFyfOp#0;fFDRKU8Y6QHeLDtFN_Gqx~ihxUgc$$)G}-Jz0x|OM<3+r zK$JPHm9l#y5X$w*CZ4158hL4T=3(>y?XRy)TMqD7sy}H#AUeM{`jOs~_L#6C-Og9N z6(7TcekR~>LUKhso=o@^3*(-xj*m0$-#o8^Y>4Hg;=S{}FPWMe96`_mJG)*g;NuNY z8P@^Tumk_jJ=xAqcliv!=wN#SU`Y)%O`C)1WTy_&2ZDm}4h))OZlVy@R8F%`d-m94 z)+b$XfE(g}&!);dXbj&ymh(EG4s;Cw{6X_KZ58Q?%Z;ftEoAS3`R%Cha5M^HQ=34~ z27QJsy(yyCw}X)l%2SiFu6Yji9Q-Y#nPEhZ_HGBz9yXucSJG9auOM~+p@Vo1w^!!I zI*4UGt4Yc1AV=vC5)?H?X@Aj5o&aEgHC28*?iY-O^P=+txGcbA;IMDKce#4vMp=Wn z8#ogE1b+LWCk_G3Z}U85=C9AIk@;hgV$fG6)Cj_*tUC4;_yp#Kgeo|0l^K<~lPibM z>JTVlN1#}SsVZ}Z$3_*4ilFpkznEtF9F{@zT#@l0qNqq{0_vWq(c zF0snx`1EAZM<0L&H0Mvf6vm*#MocMq$wJ5$leh(kWd1GAFW9!mVg~%Ey(Y6T+D#y5 zgU(Aa6o|^P`J1*1Mk|IRd`HN0;@ieEZ*Sfv3;l#sqybY@vj>x|OS7+KHQgF2hF6E4 zZ=2x;d^=z;&u$Qqt48FB(@`$-SS^U~tT8ux)UFmSr~j)gnZ z!@!@ul7(barn<+k+sA(;OI?CJMr2bR_n)|%7&S0BpOhYGAD85Tj z-&^LPTc_0Gg;XWC9c%|v1bpiSw@hVeT-p`@Gg8Xub>FqnJlgxmXn8ZAuRp!VG&-Tk zEcYC|!(p$|4<5bv#Z1jf^lb^}yR@#F*5xfUG#gv3$R5_wX87^G0HtvWy|0`1=>4mY zeNHN&#xrXHAM>_Yx<Y)6q*vp5MRAUa;Qh(KciC8zGWyeKK`JR?Te5Ysns z(y)RUpsW-wOyDb!*5m+0sWYmpV3bC=kD1*G4lBC#h~!|@9q__T&)*c1GoG4LgDBas z5-rU$iaGiOl`2AT_Qk9Vn@i-JE;PTe9fdJ&gSg0s2texxmY5hf$g?8@4BG1594U+P z=K8_`!RI_n(_>0dRc!L+4+PM8p3pBAqCrrY|OfdV6Mx^Gzr$Mu&r4u-eG^tanS zZ$+>>xyQ@?Q+d+S@mZJZk385lbw{l;yv+AJ}05%wox;r04r;pgkk3AbfGx-t1N zKg`Yw>@%Fn-~U*}ZSpR1YCil<$c^ZF-dqXMbP26H_L%G*v6w-_FP{&N8M~tupUEhB za=i+%8}B{dEARIQ{1W@p!D`>wtZfQ&Yi=U_7k@0Q!#fP^YDCn7lgM#zsR;8~E21KV zw3n{#&jA=q$GE<`(-rvc__Jhj1u+tnz7EOM?kBx`9;qb8b<qH#|7 z>ptq~U-;6uA69(R%ikc!5Za7JjeJGyLX*K=3gxM-_Qr`?4kwJaWdE)FD`m9pG zAP0u>lL0xX&=|BhSI!WC{qLV{rQK*}?@ zBF~7jcD6K7bkTXw$vm-dO$q=AT!Ee2{hGXsmdd_rc`nT$Wh4KnW~CdiqkkrHa4+Lr z%6T*yZA{-=*3X!c0;`@pX@0`-DMQC zAR&0U{W4Y++)vlQ(tyucpUxw%UpqP;c4FS|vMaMMf{uR?neV*3F8A$#N+_4&TCU45s#koy@dc)rRq1uIf=ZUNJ8dRfvM{DA<^*aV_l82>bH$p(%qO@|MXzFE3S@Yq4%#+{I$o<3zk&hLAzl}g!>3c}5-#>TR?1W-jQ4Qp2P>R1{q zHGgq4RybWCN)WL0>?dc>4Btv?rnw_Q z`5JI@Vh^yf?Y)i@;#`q}PhBMoJ2lTWOL^BpM|IbNdO_2g^Lt?ks17BqD$&-(p*Big zduB|EO!S7GF4bgVZ8)ap3G1A)H>Nazx0rt&b-AJu9yMUJ+rC)KX{qE71g4^JD|x5Z zJi6vq$?%hnuGTR;uRt>ha`!lcdBCxEY(9@bV1+};s%DvCQPw~%`lVaqG&neDezL!B zXXd)tH)L(gNWa_x>cnqmgf?M+58Dc}*m$CjgeYkEr|l>1o|2!3MutDqF4Axn152iE zVKQ7PMLCJ$e4^$=;pc#wj~tJ)XiUP33Lc^i+tY ztnq^H%&hPyd3IoQz4ooBJIxnKI%ZShAO?%B0om%63}h0SOM)El4yD(gGB*Xcr*sHK zuNyJMIQ|@nSH%}lx2ib%RNb!_ruqgL@o-)DX)!uL0v>k>^=*S(QQbsR<=B z>+k;&aq^8RKqw1tq78T%Ql@WdaS_8l6NfgD)3FQ1gJ}yJ+b4Vcx8ncGR5E`DMN8Wl z*6_vkL$%1^X~p|8u?$r|_jY3w_x+|D!?j!OjPpdF0!+2$HQ^4foS;z6U4^+M^> zSY{t&z~auK9`48)Y=pFfL0H!eGvbS`vQzKAl_{;;f~nu@xY5Zrd}KG|dDlyMJ-P2` zW1`l7_=)weCb9h?un#Om`nabN}YJ zqPxJ)d8BPj$E#5XW$8a`Qz<#|d`Qbs$%2G^>e$%W6n`HI`0}mYPG52=;(kBQluI+x z(F$}9H%FD@U46sT*dn(gikd9Q_E7FLuv^3jy#0t z6OZ&(SsRy<2Y_mI)F`)wls`4b>E3xu#-0#llKU$sgFsiG+YrZ|RZYO7WvGiGx*FCM zu4;2bvbtc`_f7s;AC0_sQ^+4M4=_wDuuM8ptbU|VxLiSi+x;722M4~!y{ycmW3WJC z^*Qkn)_Lt9JNN5Oq>Rl+=Qi|v%b;$=K+gmC8eUC8j^kK0tC1hr2JoW2G1l2qUA-%9 zH2?7N9Dx6~bfKo3KP)aYa&xf^){s+^Bg&EIDm}U<^KKt&4Y17vZ3U5M)>92m5 z-w0V??FAJT74OLfwM(oXiSN740Z_K$t~G~VK71#c_x?!IZ73dXXZ24k?wS4uK{8^O z>dz8V(I*`f%)d6@$s~BcL4LYtL@0)c4#+zF1T38h$x$i((FMbbI|KMhzNm#4ENK)e zXnw9)qqf51rV>IN)PkP7cWH9MC+2sPKHuM8JpQNl>b`5n zh|c6|{&qp{(Je!8Jzy}W6=H6B48w?q+wGycg?(b%k&uQ&A%^=6|H6iuTDMPfIKzlU zJJXZ8xaa?Bkw16Ol{hL(M^Y^K znK(*rrqUfV53RI3h0RnuNjiAjWYH! z{8Bd^q4VV#>d$-4lxORxk`$BPj?HXF0dL68Gl$?LJ#H>-N>eqAA#s(A@g^7X%7~1_ zOQNK0%V{u)-wG(oQ(OGxEE{iTq02K&lxMNeeILgQT~grnBY+q0LuGf~a=W|3COpc` z)`TTboZVgY8??MfdTqV656bdf>#!j`Bc*2^J!6wo++m`O0Y+DTVMf(4+N82QUhXpK z2(Zd5|LgSR!!X;1?|<~>CXo(l-E?{vv{)B3V;0g z3m~7tlyeb)K;V0M(G8VPb?twU_oQj*dBuno#naVT-)7O+2Y$>fV}u*&E0}j}6r*Ke zQ-+vIdqYXW%LQ+k4h-CO1JS4SzjN5bz@x$k!UF>eQcsL9wN?`Vj!SdnOup zj~k`(VJovOF}L=n(UGosqb%4}_*vqo+OhuD9i8~D05{D$*@!p&>;%MyZgJ<_gmVL9 zXo}RC1*XVlC?KxF_99Lw!8MfeGPAT*wdrHv2_(6d(Ws>edrO#HXWAd@YxKQ!^n&n* zpI>htXL}AV%4r~_G=aVq)a-h=R8FZa7!D3!6}JEs)$I?EFnm{Vh9GJ|Qj> zZ44__MAZFIx%pyI62&LzDUIVj1uR#?Yp7*z3j#^v{=JL8!!7~Zz&izMRtt%fDf)0z zY>rKB0YUE9Kj7eqSi%=5JxEeYPm}pZ7Dxe7e6?Y=&QV5>?_kivRt2mecZncn+X6q+ z3$z_G8<*#7x!4zgL$dO@3)&B`22AOP_80DE5ldK2Ee^RGE1hXZ%p#HGvzcoMwg9FR zDMm@hQ0X=7%90cJHd*7Wqyr4Nh#O$`R19MhVK^+E!M%g*dA`>Rr({KnYj+QZ$b$>Q zRGJwD-lS_$l-fkLzEI#3v_vHxMtx zI_^y>QJkKNt-QTFb^>*IWvsSkphml`7dFK)fs1|^Ib%{36kgNF6~u<1ppZD8O=JX? z3<(Hf1(D;9cTdXpnEYWi>uRZRD=W5V#_F^L!UmFTx-bvs;E7m;=bJqO1+RX`T41hE zQ;4Un=5d2y%q8|bhw*v7^EZ*L<+O07$=e3hsc`Q;p9lTnwgcNkqTefpH1}+H8o1Ru zYg&D6R?3W^sMuPse-Q}{3%&bqQoNnH+zKhPIg=bMArunLaO};p9t&)LUMftOrk*s2 z##5wknRSWp`J&F`@zBa#;ng=1GMU%HN;&c-OK4Vj?Qe=1!z|&Nm0eR=pT7zV`_@2 z$W9qCW0bKOz@)_MTb@BlmA#Zcq9Y^E6eDd_shSke@b1QN`)7`w{{X$`!}p7Po^W%v zy*dIrT8Iw;@YH*fT=cCQ_5kfOkqjW<%M#;e32vyX-$gcnk6*v4>i!P48LMFvSxpls zBicU7fZQK0$|s+n{%9w>{LymdSA_3)Vbcr*$(#cNhw-`2KQkT8G z45=G?M=may4tQuV^F;Z1fmF3$8%nsn; zhy@&&r)XV~=k0`sH8XLL|0K zBU^(z^k^CiNb5Jiq?FI-C)A!mi`xn{`uPh=>#+FdjbP@J4Hk8S373pO_hhyr;7`74 zIozA3`e^k0qQoUYEc=wlmkv(g#MPdXa;8~z9l+zLlL>ln+;74~UVP~APN+NaRz5!fY_H5XCs{?s$PYe(*#OKQ!(lG*f*6U99)NPmDeo*uAEBY`kfbEbUVa*pg20UT30fdG&jdtt zjpVwmO*LKp`QcN6bQ+6pUyE)6b6V|r$>{j7LBLm;ARPo&0j5J>mZ9(kBAYcX&u@0; z-T`RX^ukgyg>g71Bw)XIw*6ju7}7@U>WSF<#hg9hqLkM68qX5+viRbazDoyto9O)T zfdfEf6w~>F(>%pF)SH_I-S(=@ij5Tl{{UaMO=UJ&vF2S~^uJ)HO+S6zvQM`2*KaU; zF8fhS#FQ{V8xh8|PX^7oeZL{=(RbgV&6YY**$u9Pi0B*aA*OF!^K4ni^WDFJ>$IJt z*`lrHX|jG9-s~$I2)gh0b+_rBPKgqC4IM^j_?!^EXzD4th{-Q~uRR>kQht#t;@+)6 zu6vEj{3oK`i`e@p|f#3!YP?PKJ6eIN+cZ0!EQ=X!W zp+kWA_CY)yGUAxP+t~o`rvJYang|$2Q|$BwcDMD%fmjSpH5jogbg;-1z(Q6)=-{Y2JwJD#N3|-(;0QW&IATgQ7miEKB zh>D6e77KuePW)sQP5p6$#-U^+!o>B03;5Oedu$=LG5O10oQ5vY$W1dh_ZULTVepBalmTEM2}W$OeM2IXsdyWx?zw3=~sPx$35Yo2m};glcN* zF_z&WnO5*@;dnh2hu(qkAx7=tcCroY#VB)T4Olg8Lw3~CpjPo@Db-yNSan9TC&E7C zDp)6*O1CPn1-^iqp$aYqtg}yR^sxBtr!YGI7ihEt>Va>>Xg%um4fum1j({X*zEv=v z;fsZpN?E+5AHRY!ls5PiC@JTdK1ql>y?~hWKffFf3><|LSnsb)v8B<-OtG~92lRNX zZvJBa04*Y)2{IL!u(X=W1fve>)@#IsYc;l(BfN!0hX#5Nmt0C8A zyp(vfH_IeAhe;p2aXqhB$X^u=;pDUsC*@act(tzolNLEprFSUJn#hv}PI+uL^Ljcol1* z@DG~txvKWod=j~L?e}1oLPQPql!SwK2}9$=U*Vx`Ovx_s(ADpL>zc10d%h_Flp6@b zO@&8K?<`W?)A*=x=YdcZFw5Dy6SD3-u#ca3WL}^k3g=t>=N{-XenY1j`sLkV=XA7F z1aLOS|3z4#>G(*shp+rK9z@Z!#K{AFOA6dx0rlpg4kosxWH!Sh9To!14>Ewf-}LX> zP=~VN_3Smtq5}X}&N3QnREwcBL_HWML6HfKLU!3G%`Vu_LD5(Fu!?(7$V5+H3j;oY z%eD0%5LzajkDYsBWQ;K_hPkiV!d*=k{-0Mlct#DkmDN+AZ2&tw!(#W|L2$5}-h=r) zHZCr($)ZdLZYU)-*ThWj-9NzM%6(7HXVx@pn5*&v0w`z&rM5;Sxnrc>L%$7WV(E#) z4g@D@K&TebObsGkU0snE3^K~Y6wP_1ddh)`_7!+_aHYVCGi?Bvt1A!q(e>$mH{r5W z`RM3gGBx)2Pzw5qnFz(nZ_w|;c>)Z~mQi6r5rz0Xc|`7a|bXMpZuP8v{v^bzQL z`aqqI`11B{KCDxt&N3+o0^0<6{x3$wzCq2&%mWPts4OshCW zsnv@sQTn78ns``%N`UnilFj7+E8*9_`fqlHrOTjNs^#-XM$7e5VFBnSP)6jJmF(Dr zwb&Oy4&I~5`#>}U@8c$r)($dr5bGdoatflx8i2>7S?&c>5aNk{_vO_lDg_fTo8JMu zD~}?F0PggNdW8%)cISXij^{|@KA!@~hDRW36$WAkmeMcaqcm?udf+XSg8m9szUDg= zMwqdFaLaP!)S@-E_-Ov68Si@v?LP;Qni)jLiE7|pRQ)b!Q9eYcM^(BvEOAi%@foSCwUk0Yh^SxO{ zG5NJT$-!ccM||(#6(f8Cj%ca;uDh&Kc>MOFP?(HsW`=5aMrL#5_)R*g)|w6U+Y6m% zbLP;w*URS3Jf8;Fn=J*j&uk-Y)_Cd5f1%|nn1OTrCMw;uS`OQ7$EvJMxCMT9;Xii# zX!G{xOTIY$E$&XJ%i zVX7C@j^B`*ye-%A4>6lH;`i_BfFt0g@d12=PK>tYg-l#gYPrF#I^;>au9q`o-0;`7 zU$2e5Q(9)J588mC3(vvR^*Pi^b(t{dfP7|o!y`Re3a%f(SD$J=#DAWai5J4otU}Wu zkj-cD50wAQ;A;iP*uAM0HXnfY{o`*9*XHHTS-l8)6Zl4eW-$0MXHZt-HNXLYfWGPP zxi+X!9*k|im zZ%q}9kc|knP)(iympUKhBk^H^aYf55tac znx!aUNl{n{{()G**vxive0mf_4Gnzy*!~6HI&GqSKK~8)sT`+q;6kj7G`WzSpmFJb zb-Lh~wm#6vEGoBUA{t^W;Ek__PZ>rg#wKh6tGqOoZ2%A&*fFE|cgVhQtPH(PUawOO zgU{U?ouSvG))Hv)Gx${S=(`Pn9Vvrw)+f+UfsX>{1EJ1AD7-Jg+Dq;oN^j~DYgm9M zmV62BO<DymuU88D4c{@_d{0?t{pXUy^J6SY47t{lWmz7x zG(`R|2YUX7TmVm*n$+UcGEk#9#7!|WU0E7l;8U!5j5qiuUKNJK<1idxlPITLrer{> z`s2;5-_79aHhzS!;G+f5*fUM9bjJkd*-m|%8Z%vn?vfUT!X)wyk>4N9r;M`$@8@;# zo(z*;EcruSe1TIhFZCdS?55NSMvoLy>d6d`=&7Lde*?gqAr`NAy9%TyT`RDHuUW`B zt&i;<{0a7s%jrtzPYcTc#T^2pk9m+vK@J*oR(+&XAW7iP7p*0A&S}U6n(@H=+-YR(U#4ZwLkL!i=7|g zf3N&2`~^O(^gMSfzBLO_z{(6>yvD-tR1a@p`;hB{?IHCLYMhX8V>uu6en=rZR znW0)GL)4W38QZ<@Pc?X#@-@q){mt0xny+}ScEnq$TnE*jG}xjd6MW@0Ny}NlAbdPb zODWvYtKY}JAzdG!2Be%{Dn^FUivr5XC z9}^Rk=dHBxys-9lwh!a+Vkc3nvWP`zz%O1_-9GN`Fr~_Xl_G7^&$W>XI=E-Ilmqqj z^gtt!H;5!%^u4oyVYC&_D;MM^!yyDv4u^(0L{ub!F(ULUGzz89z)lt#i?~2wm_b#9 z=xywW$fpSn(EE28+*a_N03F%s&oC!spPJ*89VZ$&eWE~e-Qnv8=;94nFN12PNkT$= zuiwyZUwH9R3dM&YG(z9~bza>g#%(VZ4}a=zir7pmm2q`Zoz%`n%DANPzchmUBlLh3 zzCvHwo$v`W&Vy_qmUfWiCY=LNk~M5%fAESOl!siv1&o;)o}zNIO4LJA0vD0=2LG)Q zGf&=l&=bKyHU9_0rudK@numGrehAkcsb5iOgdK(@uQSl=r4>L3 zPMlhw=V6OdiVW}$cj_o>ccIdoXLGJJWUHo|y8_PvG+zruD7(pPpwlTGo8d>61~G%s zUv(6+4_uXr$)4!gP*f{42{SGo2rEm~pS=aHV3OaMk4(LkE`Mn%3Fg@zF~tKS-aJj+ zd$Ves!Hu5)m+TxOLas3zfAu;%zZ?nkk3jpS<%w{Ad++qo^QJn?Q8n9NT4AE<@Crln z5jB{ODj8PStMtw^6PW)M@!Y;y(Q)jfAkOK@ zFN~gtJDy!ppS*nMC3ddEbp(mZaqrEIVVjt_Or7r|e(C6UjZNGh;6Gh#cG2Yq@zd|2 zse@kvku1%wO!&_Cu$mPzy7&Tc_(Xy9_RsIC8Rc8NB)P(W%@$nwl=9>`ybe=Ts6;t5 zul-H;7R7|*m$)vR_%-h#=%5;M>A;`X7HR4(Jl{`9J|Qp6CF@}G!qY&~d+28JujYWS zN)pKu4;B3sOByOXhnKy&M&cj9cn1KrS`MEt8LS^rm9I-$uC4!~RhuYKJXSbbGR+NjKtIjB|uk zA9L@xGpK%ygzz6a5D$C6B3Ik5!008tI+0g3tN|O3s|Rx;{t1ZrCnABs8i4F?DJb?+ zqPQb#u2-WiVkY|Je3YB%E*)%<;sv<0rDnmK-&kU0()aj!If29Q6v6x&=@B)wc1 zc%;V_8|RoW{Z>(&)A7Vm>`1#)oSpbmo_9>a(;st5c|=x$-sBwRCK>+CvG-#7s; z(I=?HS(*R`!covQ$~SsV2IvPyN5r9caw86Y>qt2oM!4OKZP|yty@vMPIHYBN23Jo3 zNO+&P@WVx?w{Q%k${j(_`PjACEWyAq!SoZq7m?R@8G;0pUIVSBFcL1$cnCSRRUZ}m z^{yYInrgtC7EYod_TWW9A(}`*r^xOD7P^hlLFcWEnLB3ayw2C=DEmJ@drfgmj+fIOvk+ICTOz{M3_O z39gGUoEqjY6=n@^iw*n>u@x#duK$a!zksTGkG6nOkPhkYE~OFa?vM}_5oswAK|(q= z-G~y>ji87iB7$@yji7{tG}4`KZ9Vti?|tLFJZ}ZZ#(d92rN}Rbxfq9?KOo9zsNz3YVXG2^m{yP@B`om z%;81PnB}zJYSP=wZlzLq%hbqj6EO=xM~Z-!R2{3A78-Rx2H=8Nj4hh*={T{W#AG&t z9Dg%Gri<9l%;AT7i z{Es0|vI+&KtP|5HdORMepmV@!0DpwYwWG?G(It$%p(uM-yRb8sU$aA*+HTe7*5$NB zL~?i&l?`VL{OjXCDhG>izIji&yoV~+9;=tUUiIUSegm-16o`I8sYr~*UEWTRh+vod zaDWvuB2bk0-CggNbJ(0I-WuP)2ydNz0 zP(^|8sznLw?Tz@u$P5avoCHIZyjw1<1Y64FgK{W%kHU9tj!<%mqEM?Wd4%lPTyyUs za)7~rkwzt5WjUkxOJ#zJa}K?oLA=AQWNaCWI~_cT6ip^Cr7l&r@WJI9MrI>}%x=*- zTuQN2uMZW zzuBn=uh%j*r@7Z~)qqSS&{>{7{&e7dQxh8(^9%PF?xBIG5~3cn1ie5Kci)UuLwQhF zHRLn>ice{6Mr(yDxh*KfF3+48C!((!o})@1FU^5Hf|_d(iP!mDIg{_BC4(Qe32I>)a#1XVSL>31rG~Y5p4LsBEI`j~r0FsKz*&M8{wq8b zliC67ib?a4czkwCUK*+x$t?{IUYfgQ7WRYT8HweISc88`OajKN0{GkgQ0fg~w8KXMDnd7j5BnY; z@wWZK>uc%20v^(VM-1T{#zts93jaS2oo&z+9^=}P25BlhCfa|ziczv8Kvgb|GIBox z3}QS~A|M>DU>;oD^^{+&3$*vr({^mMKY}^xaof}wcJhpz0lxB&gAYMk0+J@EsFZ5% z$m!EiPTjYBT-@gJ+pf)dsG6v*1q8e_EN{EGU6u|<84kxv61#OInDh>*2g*bStH3n0~idT4X z%TS~XumxBLw@R+yeMJ$p$c*5PZVekqO+m4;U^d2$Vh)X_@CK zk;%Kb5wD(9^bn=**DuD@5%Vw=H_HY)y%N4V`B5+}qPDxcdkWDt)IOp>MYwivV3;{c z0NDCrTrI}QFPe}^)mn`*Pf{^%%zUdmQ z`|OwV<~S+eVMzke%t9uyh~XBY(l2vo}URNQ({IOb%}wV zb&QB{w^aC!zc7h%CXeXHyeJL@u>YBWfrmi{ARg{=xUPJ>KJaGts=;v2n^uCDg-wix zmJpTCSYn`$@K+BaopjgfbvTRK;*-wN8mffyIh+Sb^h znJ@TGvVH(j3=L|+mV=2^!5ywCR17Z}CkH264p_QzMYTIfs z%*9%wDK=P$cUn@~>S0){s7UE%`2MO{eggg%HlTw&LO2p>Od$c8lyNvdF8m}?lNg!w zh4%<4<-|y2_6-iDG=1c)bTGKd%UN3H`E%Uw1lWldamld>4!MgtGYZK29RF2KM;Nil$Q22AS9O zoCB96P92=aH|qi-ft3OVP_n^%LI66#B_&Tlj1&mL17}||r5;)(pdX;Q7{OFt&+PT| z?;F4&1phQwHxt@|2OU0SFK@M;iEp!}WQ-QroI#4Z1nR{AJF)OmBO~{9`Nqk{yW%v; z2K>7Jc*fO3f&SIl`R~0%GCY3+(%fpc;K8Ij_y}*Wr*W*yi&GDOWzltwF!|j<4f-}qa zt$(AHpy50@2-V!flZ)*n!9}0`lgU}S`;pHAu2j9gQ`z6S-GCbm_`jTB8h z(8wM5x9MXN;!LA=`qcey7~g;bERt7Okd@*J=B?y%KI3vA$(I#2cJ8OUS<0qE^hLl z)Ery1hiS)~tB`}KU8xB+SUvEBdD z2x+^-ze`$q^4=Y^i;F?53A%i;9$VQo_g$-)KJ1;5C?QR{$v}6f0!Iuqg?q@CFy4MP zYJI40!+iJY(CjlWBxgF0F)kJ&h@t@Xe;ZT(6{b$V&Ad^E^GQi??;H}-C5%rKs4v)7 zx9>4cIr10ZT=^e2waVoK7>bJf`g%tQ!le1x7pIXxzb=dKwu2{0+QO(nf)FmS7l3KNi_UWN;k+4#GKmF>qMtAHZ#={zpfhantM~JgtHu5}PJR`I zpIs0+H3pM-wnZ3My2!Bc@OmMl0Gb2!q-CLM>RpsSm<&Dt_?i=**_PPhL1t4K3)tr^KcZ`ke37-L0n z{e0wM=n^_oh+yNNEW!UQr*+NTKmK>*8-M>v3x9*Gu%I(VbYx1#l;}SE0wi#=#oQ^!z?jc?S0&qdNKI`;ILcrVr3@ zc7^wW%>Yn(e{~3gU#fH|CGR!wTw|g||Jdn=t|3W2JV!d0h(IL0Q47yj!PtWG473zB z#w+sXCPBXj+FDSu9ATyEj=D+gGzc-LZ#6*|>kmGsrYBwPq`EZW^ ze@9*iCs`cFi5h;Mw|pgrm?X|2aghpxSFMPEWZX@Pm^gql-^`%F zAZ=|f>3iY|2!ftu{!5U6NtGqbWsI9i4cUfj_ieyG!PEG{8gVW4e@z=5q|Gc!a7oI; zW|5y6;>?x;F%&SM0{Eq5sX)RC`Den-JT+AXwqcNk0SP%y5t4AH@B)G>_ly%!CD}>v zM~Z8$uJG79r%0g(IiRfGAfnE8L|~H?v_n$}Nw)hr}HAQg1i%H6Ms&TwY<) z4aG^}wD;tT@6G?K3h{sSb>yCdS$YL#Up+LHIRfb+Qbg5+`)~3X+w)a;j#yu%^}rlb zYs>K>*wXUFioMzYjUI@S$Xqvd6NQ|^zJ~tN7rE@#0Hs$}D6KgHNEGlF&@TA~z3LrA z;u8t%31ANbs6-?MZyF#`kcBoF2Vv&&s`X?L{VGQ(C*y{ZAhL#&N)ZXDq%WZVcm^GX z_XAhPp!N|($$#s>!GwK2!V}yvPhzMcN}{O=X0Bru1%-+$$@T^qotQ#s z@$o7T3#YIt^Mi1$k_L2}sp#m=U^ozZ_P^nVRSBRwF!z#Np%yYH8-oHHQez1|7sN@n zT!DE%q+eU6E%c^VLPZppQjV-Xwriu*B%b}lHze4gdCnhk!60?56I$ONF;itbdb^v0 zUOJfv^>Ql3BRz>6YyEY5qbZY6(szhP9tRixOw4zmk->~W?qHQzhD^2z#7Pa*QsR*> z{7~*K;020s{C{uPnf~O+-%{uASCg5c0l3ev{`lCkN5@q0PoCrdQ3Czv*O7J%G#f50 zYu@(boM1&GUMdY3yYXjY`Pp57*b*CktuL24iN{U@RB=2WRe^R7NIlg;$AJ2Vy#bVl z05qdm?imvmHWq-2274m`ny9eg&}=|bE8!B|B4)}W;twEEu41~4Q=udG126$#&9k8L zSDTpvcIafy^islZh>hxVD;tG1Pf`^X6SW$Dt&f7pbhhTtt2Oz0oEm%yXnbxo>@*4L z-1Tp0h1TPqZCM=~r?s>~zZVdX3w;^haGk1{B2{?8gHkkqxAd^HS8_r78L7vruTBu} zt_LiP%)m(no#1-s`A~Nn5tbMUf$0)rwV;1~{zVgR?j7}Hd3kw>=^>+*x!g!Q^KUyi zgMWv*s}L3Gb`QO&fjBKufFMBg(?M@M<+Lt;B+0v#?n0ktq(TbZ1z6nYaC6vG2Mdtk zlh;jvI{V)@!T7njrLUMN!S@64ESYQ@VYt(hE_k zuYY8u)dr$Ot!p4@G@2DpLD9hKilvt*l)zt~39?t5^vI#>AQ*?126QPD9)Qe8r&*(% ztIPPGa^)SGFK%mhfpY^&T0}H2L_Uh36(?8cqJRrP8UPU6BR!IC9LRV6}etu!n_0E41^i}hFK%f z_Q2h6VhnE^_?q1XOTX zIB3w#fuRUMyy8%D6&XJRLk|;`U*TjRLb|LR6gf6}GbEG6%m|wS2Ijf;o%dXe-|hs+ z3ZTCf`((V%tm(?`Zhf>GbWvcy$Q8^q%*I0p1g{jECRmLhlc*FX8lh`U+GP|&^#PDC zq)PyXF~dA~owarI;J@&jx-3qniDj7-d|dFIUe5e0Xofw8E~eGb|5tp%?>T5dusvci zMH0pY_~enC9^qj?r%(-wwScw(&2nuDwWsjol$6l-V5SF@55vW0b6YWR0x_9Iz!O!2 zXf)Ka-@$N0Ytn$C+!$OW=-3$oU7JA?(5L~L5{kXBNGhOL4Hp6iNRjHQqtJAPfeCna zB%1_G!%TzLHxlm*9u4rb9d+IP0oIwZe02c-_BzQ`LN@@gGxwll1??(m*>xxLXO&@`sM-mu zfO0htV5VT;6<`%1=77|J)(Dpf`~n#KUx2+(P*ilYQt^5S9CR?B1`UiwK;8koICRDfIEDE_C|p+;gz zk%f!g%cK_0{O13+7)LdyadE8nR+s?-iZ@6}dtj{4{qo5Zxof)Fjc|2}*F-o$s^gc< zi1--%7LaGZ56c1|Hbh9sL*R96C{-SVj?LGT)l!(XHTnFET}WsL+FKA>T!2a+bU78R zuAreIF;8$=fh74wCMFivZ79>80dAT>$O`*96s_@baiPh42Qa_DUK`j5w9GL2ft(eF zPEHLVCLmq8`Q+zbx&QeZfDPqnf>kvEa|wl^z#s2PJ+D6n_@Crv-EfVwWj?ftN8yt| zY0offfe6W1#loV1*~72(h=l107z+qi!|-Rp2y_8n9hwy9^vI$-w2*%fdp*GAh0dNe zU|kXd%#mXz2XX+3dkapkVgLIBfMF;}CKYSK5dh4oTiSOJrvq5ZG6FBynbcn=LqfS2 z6rJ9a1_55toM9c#jm8U(Z$RJhTeAHSgaQH34%-uuu?1N<^lsBmOqQU@4CD_t!LmeK zbqW*$Fa%JThPAHT^|^mBK<|$jn}UuEz_lSYplrKfzy8+U;Ex7$kbo)wgG2c>0dI98 z1QXD-7t48ZUqN2EK8yS`OE&3N0elcRpfVm?Ovwn9KZ1gSZ^A-D=gh!9z&On_&^a)Q zFCQj#h1KPUGmY4Rpd~*Ofcc;W4L#u=U~pn)?S?7g&UEoz_(5!>?XVQAV4&<4*3$7YFTHsYRIi|eF z#zX~Q2|FKoc+^zAwq$B29tEsNySA*XtQW*bhcJBzgxZvqdV&BpgDZ}oO2jG(quC@_ zg7e^&PiVuTqq_%9bKF1hX$Iv+-abeUNSF1`lt>Z^pgNs0F4kHmrsluGh>|?6@mT7<*fe`=`peuoL7x*J+>sbR#2>by- z-aqdu9K_bd`CpD@gvt$aLVw?fKXj0yd4mY?*^^NZ>V^VrtAG!RP5=*wgXOk7fcn^Z zdN1*YetUa6%$0wFwfufK)2hr`VB(64hnENU#Re`GtZOBBI=!Iq@NlH=H?WXri5)?; z7edHgz~mu88emBVOLdTD1NH=-sF?Lt4QUM^iM*lxFW;y0*n9{u8ZZo@qp79U3!O%Y zx=lfk)ew}?u=$@MuU9V;l4v#G9s_565sau-)ZHt}Ieaf zPx^&py9mt=X(73%4tnB{aseRf=clJnr|*#{;cLTbkv;zX0#5cbbsn5ACUHZkF>=p9 z7QGp)4e0l7K@(({SN8u#1rWMO7-1Q+Vkm0RuUd?_VbjMOniMIN#~v zub?n90n6aT$p-D)RG}2r-UysQkiaDqN*!KDC5Z+4NqDvO;Jh-((&YeL)W0&y_3M5( zpy5TD;q>{JxQ|zzE2ptuA0?VPma{&V+zeQvMS8xE*c`0uaEPGTu=iHZV-y=&{9Kk6 z7DzpHc+t~q`@$^)TLezL+1N72xX92tlCFbPt`76;#wP!#e)FX_9 z06|>Fk7*(7HyBG7K8R-tdkDOiL~Cae>SaL;OcbWmUTbgRJVP#mgEjkPAX^@C=r~4M z0(MkTK6U~8AEb-YpwJ5*Qa)6*(+)UVk>FiG8$g(eiGeW~egJ`F_ael%@S*T5Q)mr? zdSPGJiZ%f8iIiI3Um0G4C+Q$Qp>0sYIF`>Pe}@n*@Jf@1ksGc}`<2y3X5h|z5ET(|1=JHTbuq`l zg0xwmw@S)kZ_GaghK3s|Gk{xv0}`vt5S&;ak-dNq{irLk0K5m7KGG(*L&OshUV(oA zkFF>Ki1kX?ItU{q!Lx`c*}=6Gr$?9YC)tMc2uQQH_sSXCoqj-E2-Fzj063LdfjXINv$R2>& zkfSHCI6);w}*J1!_-NKqT)apkKxz z9)AsJTfjg@)7)5v<$@~&49WKZ7#pvW&1?%x0y!KI$$P*^_s}q8ws2h_dM^O_Qb?0? z34XvX02o~ufJG@ODX_pRJ!1Z?ldKhxO2?(i3cb$wCNw<$A1CR>Q5DFPpJ9r*#&4S~AYR6K; z#aaWVY3&UJ-E1Yq<8UtMt6w*yJKs`&4JKzJ%w zfdU8c?eh6{B^)UlLxyu*o>-VF`F6fq1^5kcqb%q))ER(SlS_Bv`Ue;>QHV!7LVSPx z{}Kv3{+a32r8p_vVF>DR;M9@PUMN1bg^9%#-POMmClFm}=HTMH=gPe(sPGJy?E?g_hYj@WnqByzr2t@v} zvP=P8?y}GwGG>5`hq1xf7k{b+8xhk0;Ub7&@brOhFP26j&BNtCFj27z1)md8M+g5D z<6+SVu~+mv$mo(`-ympL`T{cz;Ln*CArwXi=XLmzUtNCyPxiS!RTE@*99|Jpg8>*P zUa1Bt_f$tDpPb1ka{zz`-3>M(1lTEq9sVI-#nCJ-UXNtl=# z(sdoYioDXikC?%ny_!rs;^L4weQ;D;p=YmX{NIFu@l=SiA_C!r0pf z&p~@;a_ zhD~7$^9P%>EkcIiDw48{%t~4+k?2$*OQUcep?3Ptu)+eaFEVAC&Knh{XLSr0ditV- zSQEPsvJ61<##Jh*%V_);ENH^lW$BVMD_H;Eiu)*V6R~p-uX#2rvlQbp&{(>DV0EIV zrG4Dju;=|i&PEU=4m;jiUiH=+r0(Q96A$7?2-;LkiJ06eH53{&mm>>57J9ouf?`_! z8UzVBTsx>#RheqL*{<@TE8_HK|6H*k<_fvEgIqIJB9a>H5hS} z;0B26M?^+OhKFZs)-y>-8LJvpEninrw##Sfomf=s+(;w>)jYI5DEN|5pw)VN#R1%dPT&{ovkRn zx~v83O`=MJQO}KY!`+!^9xCMFKBJPXjc4`J%T;)0`!DtNuxqkkAiZw2r~g5&a{T`h zYAAtfYKdYfa>&0t+MRR3MczAUSM(K-=qv$CK{|WR_ItQp3OZA?7Kl(Gc>I@2CaRJF zLVDhCOxtyH#;AhPyU@8X;MTyF=H}nyftpQ(Fe*TpogpuWbPs7X!Ak+#zX;fOC^#iF zLEJN^QB3286F2Q@hVFVRzc#QhqL>Pe>l-(DfZR(&j;0}&N0>?~xWhJ&wqt-oHX_@8QAp7f6k??vEMv8M6Fe4ynxYzjd{Sf^d5?ed*OB zoL=_STyZQ^uVb~P8%GMtzZytE5m~v+g*t<7kmOGtNkQH1hqfbnc*%tdIFJNI8CsI; zRB(!k8LEoH!;xrysTCMv-b-I$(nubl<&Up}CyOM2FeVusI1HTjrrpq_Q7(U;hC*VN z#I>&ws=p5rrMe`;U^wc|y$uld%udz}JZjX`a@AGlx6nhNW9Z6pJTu^A9eZFIaDYfq zrO`DkHbW_hMjbEv)DmAN=WMq;cuSHZx3jq2FT1v#D@Wpg4szLJnI;_eexd6csyoGw=*k1Eh%Krf*--U;Gp zzzZKAAM1UF!nxHOycX9?cCU>60j@xpzR`aYV1=O?Sxh^Ik{gaGuu*!5j1}+ykw_O3 zv6WA21xjezqTe#S0u~XqwqenREBaSRF%c#hcN0tIvj?wGHY(7J23dKr|JNO1$LdMf zv1PW@8~)(<*B+UW%`vofNJsl`3CP4on=)1t#bpUOZ^zB4HD$yNpL7nNW{F%rbUC>^ z-DP8A(LPegy-+vxKjZOU1XD6j>)GPi7TJ0ljF+7edqNT!ty~pI+}}#9240T(AW;D z;zaVp0vz#gr)&`eskz)@`7bZfZ+`f$t}#)SA20o{wem>tAiJEA_tDbwF|hJ+@bEFV z^^wZzJn~q|O8${H9p_I(&qzz|&(9+hw8Q**thfVxkdWbn_r8PS{G4U3#qlLtErU#? z+3UIWXDgB3MEZx%8(%eA zepAFA$cal>wDqE*y=3CJNVr|JSDeRJur+;X8xiM5V;3lW(bR%fLAasXCYw7ke8Ls$ z7_plaH^snPc=q5mTyb}N56cSir#lqKD|S-f6|+XmY&r4Qbu2SHiA}fN34tM17$v6cg-nb z#dMC|O2nV}+7ADIwiH(g*dhiS>GEhKMtv+8Jgr50eNvcx!ZFaO+wr&ecF34ICoiM%Tn2L# zi-mdVb<`ehc*`)n_HA_OKMkq{yRkK#>2yBV6?=`Z%c;$?iTtqFsqOrV(mdUM&62UB zY9ccZ0DW%O%@D->t0`#WJpa6NMU%Gv`q}}a2l|-G%`SYTjMTJ@)YOc$G>nuajQyO( zSk!}ub9t=uo2u=y;X8C&0f9oI5@RGkH#4>t#QmgSSe z4$Z5U(ywha^gq`+o`Jvb&C2$>x<1<$Bj|HhzE11AG<3Xt$zZ=^tSp^*If!7p!5q=V zLV)9SG{eKFl_R~8W7D{zp_Wa`$9Fssg}dVIA-j>VB(Ou=(&`hA8@EL_+S;ZX657!r z<@9no%6D0u`O%2fm3T68`a-9b`G~W5uFt4Tq?DT3;k)NzH~UVAY7z2&WZwLIq4y)v z`yXk!9w|aF=N;jxFgr4zZmGI7Z|+)^r-sg85%VQ)+0RuBvu52{Fw=`}Sc*rKXWhgq zd^R!`ch`WSZRpn2FoC8q{tI3qu`|8B`R#D?Olh+%Y0i6&ds0gV1~tzvSie_f4oiHv zva}cDB)x+l-WMWOOaI%DIc0@3#>ul?5PQ#^u=xUSnVzNuhiXTJ2O8<6}3;Lon*GXW@K}vYzR7}(` z8oE%wAWNi$MfR?%tjz3AF*9>y2SY!;yYTBv1SuY)E@i{@U{=a6{fuHW(2|A`n zpZ7%(X@xAoT^{CqILA=&=aA0D z^A@gD7+&V5H{^uvR66On9WnZ%@1H5;79qyAe5aBYC-VmU(jVm05|JJVNL=URm~>fg=j1pePS(p&i;arespAP{PpZ)KnUn5tIh@;6 z_L9*v*zoLD<72g84JKaL#=FO$!hCsAAHUqmq|>7)L&Z3MG?x@-F+jpdJ3B~48z@02 zsj;alx3w&v&vVi`>pfY2I+)YxPe#k!C3q;cr~4+v%fSFUwm5b=tRf*(G2O7gE7?VD z_It)XL`@wfDLn%zz5JKmXSaJ>QoMbn9H-;jx3LBjDh`|T@|vaV24uq{eTf#tnW8LP zb1f{x@8Exxjf@VDi-tx*5?hB$^ZN)A5#~xOGRmJRGOC2i zMjy2P6269gnzwA&?>pN|w1{?7PpNo`BZ!G7h$1wYwnLcFf`v+K5nu6=h*I}>%j9?c zz?OH@AS^xQTZVS8Lb`c8%0q&kJXYzBAi`WmCrN?t&YAbgc9{~12NFHZ$H&^J>WEA;RYHn%KDYJtV|ohsp_&ScAkb6hi{bZz;)-we}n4gRt+-*;)o zSPPBPmws5>s`1brCwIs|vp4_2wf?K2Xw>w) zq*NPO{`fyvNF?vLwN1L_vT+wfq`!y4L6dQ-ac*~pn0DDahgtAYVSYY%e*Ur?4Aoxe zZeR3LMcb`WmvQoafzWR}6XRjeSrmfDpULjj&CRd)&Lk*h+3=qpDaWPM9BpwKi1Qb` zU-5;rbCH)aj^&)mFQ1kdbQG?7cpQHCbyp$ks}W|5OdsZnUdrx^7M2%2{m<8OEyvZo zrJQ6Ab2q|5R9Uhl(DmZxHm9DuUt0K(G18F--^nbWm*!(-l!=V?rDE`9RE}@rD##>~ z-mCkhxRT>}w9Ig2ex8-FO|{kY77B6r@A%H;_+`WTLk`{%XAQSu5?B78x8<+Uz!%8K zg%2}Xq-C?}=Q&cv?W&|(!gkZo_r+oIhZec?7OBL~F7?DL=)Jn*$4?XV z44C8QNy*8n8K@V1Lhe4#x~9Qc);yAZbVRFmpyo}sc8tkRNVe3zxZz?lvqQCMeuy60 zzbgSmT4U>Ry#x@&xvft9%_H60yC=xTWJ-1sb}qke3D4vpFGcL`7xjXY)ImATkK zBgD%>SyIHyx;$@G#QEZ%u8P4s^0cGlmor-w=GQ*;CPnD(&`EtnscKL71&`V2- zODsOhBr2Z;`LmBg{-d*rPHeY_+OT$QixPE()<-Iq z-pu#ycW^{7xUb&Z_yYRm9!U~)J8MRh{(D0^4T9<-tpgQUdQ=?sJ_4D9`L25J^^nQtwGZ4?-6>BS$LbzSoJDf)AZI-7k~;!YYV(QPI`<@LcPt~1`z!+7zo z)uXlsac}2QB~9D43L0X&1PNj%bqqaSeW3@-1+hf77dK;NGpBQlrsi){o;Y(`^f!tp zP486?)T``n>rFiBavah37~_N(YizBu zbyU3&j}H{^zf2+m;;PP`F11__%H&%_X?Y@}g@O@Z8+QIxl`_V@VRf?3hGk=TP5kz5 zdQqEaY(vI8Z+}98ce65s;ytA^)_%zVN9)}zrz{;4h(C}s#UG@Rkk!8@Obqfk_!|-$ z|1tz-4v?r{cts_XY&=`QDA4~GCWo;0?dHi=WR?@Rd49DZ-~2j0e=Oxe<|4c3=ioHy z>)y6B&-nH#KHbN|nf2i@mCLisgZn4DjUktr)hoZd>&ISg)JQ!!-)0!T8Exd^G&{Sd zsWY8kwP4lYIT6PDQ*i!r{;=gz;->X!Nnq*0f#KdIzESyNnqX}}}N zj;E40HUlo#rIS_PNlG~lUao%n?XP`i>UaC_++X#H?4a-LWmf$mO8IKd!Pi~s{`$>t zr_+g(Y`5If#j5AWW53K#d-FGmQoYv}1a==l6;TdK=CbO_s|65YDhZlJzK@UB6<03G zs%-eR{_&&l0I?EP{KQ$-w#Na~NgjW%x)J4DElPx0{!3EkI7;sUp?mtL&-3ds^%R^j zKdbzWn{xuM4N3G*kGOlC)#USYXm5`K- z%f?1|;ilM+r+ON@&ZV{O1+n92Z6hO-=CpBD85Q+EeqTMm>my@%c&y%Kx_`go(^PM( zNzZ|<1ZSnw$Ra8I5}R9ks)%jdSMG`aTN+YRk7qYty%2TH$`WPX-dmRraayMPRCzkL z=Nw^Uy?Kr9wMXGZ;$G3};}Mp{!N=I%T3`(ZP(_G{ZFnnFhX<3H^- zVw=`Jv~#4>d|ps`ojM`er$bNXZ|k%3LvZ5OzES26=V^jx?VOL|e)xGcrUlb`q<_l0 zObfRBl*N$cTB~VnQRMl+n_pA;#XM;P6;;+CH($=T^cYr>5AAI9^dDAs3GhCBOslLo zjT|AKAk>*WUU+{s>v=}jfcf`!^EDxxKi!!rK6R(L`Jwa4`*FX7t$G5@aqjz$*|-|k z)t~1+slRCzttl?*d%Dex=kA(TQ++u3Z{`}V~8t<8JuN9h^qUb&Z%8N3{C*FQ53*$mLnv)#fZzv6P00a z#m6m8jEa6l*g7=Fu5;UYp5ODIw)av9`>ft_lm7KbN&oSaJg3K!H_SWJ&?<-V3X6P3 zZDunI=f4Y`z!y9!%h{w!{{BSoXX7YVD)VjkblUgUvTp}i^2A+qE;_Y4zV!ZT8o&C$ z-$TXg;&)PIee%W=N!FbH4_ZSmLXj#@WH7^Sxx7$ykP_vbze0ENw$nk}?oYsiUFC4) zlFgzJCw2G+UUl5h#2c3`d+y=X6As<0COx+~^E0U$=8qbWdaH-4T~l8Qd5kvUMEnq9 zOhKWiSf_jGl-MY;EO4{nyevQP+JVmavq-xx2PHN(>dJk#JDBgjS=_45$UwBWvp*8% z{KEfh!rt9tsqIUsqqvM9@AIvnip8~UzrShS@)ERDy>;03g*G~BvySOWXK0>Qvpj8F zb?WO$hm-FN*Mv9=(=$_d7UJ6?9u}6-)G(PFHP8O&>QF749(~jl{&X*!bSy8{+ zcl$9S=&c==E4kcy3(zBG=#~u9Eq#*{r zt5;**gq_g(2bwi9Zl8{fy+{hv^!rrk2QkrUuyPI&WkZJJVSLiaa~17((oc@B)fY|O z{EH~;w;~4z5x+m)(l&J?ULxW#MNb^0 zTy{?tDWxW@m}Xm;@zVOnC#_c7InxMz3m3MYdw;VP^7M^bc`Zvrb!gl}On7s7%&FV! z%?Qosy#+o}ySe(Wm3Fy5Mq)mO@&!#)zEv5ase3==u+ZgIv^Jtji|_MscP~!$t(}bY z=Y!7C{_4yl+hO9%^)JPv>GUxi>{7q{hUgjhy>i=Zhv+FbF3cK-zQ}Iu8V1jfp7Pqu zO1@p#YfYZeuK#kEf9`Ij{?A@@@6xf!2LGYWCd}Z+1g29Ge1GzYA2T>gtzVo3o34qH z5`44asQ=~PW%*4-X3SbYCa0(C*j4N7f%KyEsQr2mebE?A#hcmIw{Go@9(BhlHb1rf z{AY&xIXFk?KW*=4?q=EvC#2tXaTiT{W%#5qvExCk_lJd=L(J=TLcGM{S++7~C9hh3 zZQRJ)PP)o#!#+Y)z5MyWlEF@5`Gw#$nb)-!^Ul{yR|Su^t65FfgwKc79~<>fnD}l5 zB}+zofBjZW6FiruGhy(2{ms}HZO^jf_`{R_k{i~ZQ|gapsVbI397(fQq&B9QcWJ+k zkGM|$Je1V&Eu76Bn}~TVX6^Pm6^D_~bVp%gP)C$@$FD)0x6sjE!hGt>!$PSkvl(xC z4*5xI$2mz~oAdMGjpt)4+ZWl#PnOtyh3t>>VlXF9)t~=-luiB1zTQUqXZEGAc9`G5 zQ@_`ql51MyTlRHowy_%B(9ZQ@-!1ggU*&L6Sez(*Zs|j-Gu?gk^_M^K-leSoLa%V|MZ$KuTblbNXT8ZEfv-*D zquNCdW(Pu+S&oA1!GXII-*nyyJCeUR*rrgtPr1+0A?$M_l-INNcsco}*1PGa>UrA_ zR%3r`aqQ+y{a%vLK6RaJmzckKhw;N)0l{!eAmdfT?;dBbtY1`1PgtA@zvW;={{FCB|TvzFx_`O?TV|WJM9Z-)3$l?RD%1W{vBzS-Q;CP-~8+7hocr2 zXJNjJQe!@1Xx%gpHziAEkKFjHs1J4PFUp^1{`45Ct#v+?AC~ z<$k49T>FxW2?{M@R6^|=Cuc1c!iA3($|Tk%w(dCHxjR_M`p(x=Mde+EOsUmqVDk-C zx(5xon>A(*G7F})n`dd~A>2O_lB9xr$-|=N4>BK|hY0@(swnML6C*XQyZQXb((&uB zdxcB1+~V!4!OA_tJKwFyJN#!g`fgS)f#5P3QDPspWFM`SV-LYwapMmMy6QteI{Tzp zXAR7zh?h<*HxTPYdm^aYb<(EHE!CB?t$@8)zQ@RO>!N$yw<-I3JL|inme?Dr>970H zNnN7dOuZ;=D0=(FC@({>2t=x8ld?nvgRP zT>N*g1U+-8-%3;S4O0)2-ROKNw7#B7y3$yQPZ>7`T3!v$ww>bLwH7CNhW|_ySa=!T z2U)~jgtY}g48&V90E@Nyw65{J!$&7}pWf9D+I z8iDb+7e`8ZsX_fgvG9e`N}A=n{41=-K^13e+r4|kc$K)KODgWKsN&yB&xPM(33>4> zdcQ+cZ?RA~uAivr3`9TR)B$b}VD7ELd-hjqfP0tomYXV?~ixws3!L zZ|ARHc3((H)aLXpS$fF;mZPk<*Jkhe0yk=P`qd|53zkmiUn=EF9xXH}h%{{AQSxqZ zi_Em_1u$DC#M2kDt~D6Yn^tW$7ryWl(OHZK0$;vOdoDuJ5hyclbuP zeHTtRBF+4$syUXmH^?H=8+Ip5W2RxjifJJ|;nhPFa@727Z{m)bgCxDxOv)=Er-_Eh>s_lOK(Cd_YLCxhzD?XDb592R-)1n zTJv}+XX=|DTG~n*_8iPo`p~O0adJMfd-p$;Ay+HFvtfN4SDWIdHTBIj#4e=T*10J# z=wp$OfsPF2eea{@55D5Gu`k*D$#3-%2qiDK)ml0(qM?PU(dvYJ&)6!LUVM03P&Bqf z|7Wpm+VqXzrOb-(>2f ziF~T}W8FR!%?Edq^@j+9_(Vx>>iTe6$%%L zp(?(wrnRDaUlIxsKN**|if0mWiY0I-S07KR;*+;mpV3R=pik0Yp={9(U>0xIu+8rg zEx6_&n4=a%!y$~`n?i?;Ffr`PQ>G(TGLj5GV`;pRQ)HLWV0_)DyG=ApBlOvmAMzR@ zIi1{rsv3GpLwBgJ9(O8UH)1heWZO+Ob9uoe#g47Bs)99ZhV=y(=ScGxduPoHrrU-k zc0_uQjd^$DUvfnoW?4%zio_<<+;*q46Yv{kP-TmI*t{Nc=7z1bz$PkfoWMmm7B_z{ z(mJmDb#&suf3Kqrrk}>B7G1`e6c6#u6u1|S$h~XKLhNj$lTxD-DLP&?E<7Wrq@4J} z!doDd)z1+caWa6p_@RHv{fjgMVFekg*Y6wV-f7vNh6l52r*Q3lhQv8xjy#jdXx-w} zGYr=||CmlyOg2by$Lxx~Q5CzAwZ@;SDck_eq#pDIh8rS&@iRZWjCe(wJ#);y${MWS zl$umsnCtn;b5(`zYy7X88Noh}Xp_o0Q`-^qmJ76FbJ+!ZH)SRQYID}PdyJET5A4|1 zaWSOJxHG>IZ5`JaFsPRj1*N&!CQ(QR_37`!iv7NdpeqQSP?fkWts5e_iGDYmY_ZD1 zB=&89L-!+#S3lG35>fmW1RO>`1{)X@T&RuPAbc0*!yD#^2#Wc)OXIdr4dmz%YK_>p z+0Y|{iFb^cU%62GtA}X|sV9HTy-0twaOG{-2v!VsPBD{j9Ioid{3C9D(txuj4UUlG zrR$@4ZI#y%!Rd5DAG&Y0XbJ4o6}aHwzoL=1*7^~=N6(I6ONk`EGZ9Fq_so^(o2l@L zX6(JTChI#TL;_dj_dhZJX+&@e$X=r(z)TjW*efOyQXD6ZC^mbi?m~e0)_5Ja+ozPP z(;*lrZjctGyHk*qZs`usVt;$@v(I_|gUd^O zpJ%O^S+nN;-ETLJXOtfCDh-d=otL#WYYzSe=Zv0ShduAovzB%(5Y~LUFZLQWblWNW zYDg2+8W_5rzB>0mO9ll36HW^?#W7OLl?6=|p`kR2U#~GeEe)&*Yt6-v1Sm8jNNJ-K z2IRJa@q=&Wot)|yd`)GA+??FBCvj`deaSKH)nc&I2fuzLl}=)^rzc*c#;>mP*!=#5 z9qKD1#O?tY=93abgmK~_BH&?{M`2m{nqwH)7*lv{`&C4mo!#HaNWU#csQ{gi2qhOa zJUV!{U2XSTRo_7W#qqPZWaXUYJD8Xa7p~6P*2jTK)a{6$RgO)eS`-jF8?3=3@sqlG zhnwCE4rxjlSFi|^dr8h|?{KzrFO!p{;Oh3cv%@1Ey%x_N2->_}HZj)2NEKh8XWy#t zE+d2^8%~|Us1X-r>+QDq!udyu$cW4+Rdmi`n^078O_ATpPl~wyiIRuAOJSq1y+>h; z+Q~I!q!c1L!-tq$Ad%`gnE3`LhtjP=*XNw7g`RbgAWdoQ*4z2z4Q4o%lp-C1RbU|P zSJ5!`>F=~SkY}30UTn##WPjqz(AY(wcG5qG&dKsPHs7IT8H_54$-^X%b$v!vFp!8s zL5q+lvS~bolW{2NgjrpJXrfa$B-Nwy)?wmO!B8#UymzD^+23#{Qsr1L7F_64kW#`QR65OKCJd+hXZwJmPaWs?DO@uqD_?Pzk=9aA=$U`+9mA|8 zDDvq|Wf3x_(yI5o6$7uBV>i5!61(w(1d}}b%5%RsBZ=H+QE=js)coRN*}3{Arn=Jc?@cCFwwbl z6b@wV?Q8U9+|s2!Vynn7l1JQOcKCS52cO;xVGv2mbqx?2jPsH6S=Xl0x=!~DmWJnJ!tqd4F#{6C` zJ&{|eHaEZ45a4VxX?f(2=VvUVeCRYPBVw%2CRQ^{-0iV>$c%apf(*!K#{KcJ}iFrOXw0;azb>s;aog+V9RHa!hP$DfN-nB-g9 zsvpvEh$}baqb$j`3>RPFc`U?3)dd)5$BQ?KNknYD)yHs0zNH5z{76;#%>C71k>wd> zM1EH_j_ukc?w~|Dwj3AVGh9?)2Ls`ev0vU!+2SMa4NXAM85gAS?Nd%@i6-8in}=SPcj2Nt8QH`4Izz zg#mbMT03p}0+jizkZc+zKAfpER66%EDI+{b9P8T`UsD~2MvD-_eje&qL}tD%@xaBVo`JuK35imV`rFBN7qjJkdF{T9R7H30!o# z8$&(4u*V|xMMSipvE`y;XiTl|KxESa5o%`Bo=9sQSi)*dKILh@%t*^<@=FjK27O8X z;(N7ru++3iAkrkx|NX-75&r+TDqXEZ#=>8hp zB{FR3tTY3+E*7)zTZnW~rlm;etGVE;Yg=3(<&&^2O1bSx2s%7VR3RKcr#bx|1w-1M zifuZ~s46SE6#-2d5Xsy4y*;yo%niCp@9m1C-%41HeeVa>RNId$rpFg2hPydjg6*od zW$}zDcXJfKO#RdLve$>;@$M}WRT;a`uQv!8zhC&}VeaLWGPagebheR(+tp7FF~O&J zB9~5b8;&&@Ut8aSd@gHcxAOCeKKka}L}%5pP@K*5%QA#~iZQkVRX=S0`u$7a z97CA;lw6vhei8l+#*^r&Nq&IK%&t1HFT$ubug7fyM8H!h}0qSDNC;FxvKi8~G!mLC8LbJ)zC89bSGIiKD8 zPPOYX#@}N~Et;4uA)ia3r&7W95tH0AlQU!|KBel~Td#Ng^ehh*B7R{#>Skuvo1L9a zN=o7as!E`$1+w@AG8@>r6sKg#ZjOZpaLPwVXMFJQJwo<*hA>p(ahgj@7I`7YF}U`Z zq~1pjizRLG7B)Q}5M3Q)l;%tHS^KeqF*mr+e>gHCpLhTsL#qhf~DTU&S~yhkKwV)ph1~<><1gRwZMrB6q4t&ZWIcLFfF`9Iy=yy zrrlfM@f9*{&@#GIO4s>OW3>KUzM2mDULWLJdw@{DaGpqms+k-SN6h~%LyDAh@nk9c zL{4{Z1ZpW3g;bP1$dmdQO`lx2B6&*`Z9Rh91n!G98%_`diq)H@^cMl%yk@lpIb=H4 z*-0tt(tv_@#oFv8I5VcsNm|*Tp=QviU(8qFMpp6KIIp(JVq6RK5{#peqm1z;NBYW= zp+$&|VL9>=k?qZe@hOZkE6WW^sCmWWla&xMJ}?Rrd4{glKo-}fl!OiZZEqTohcqsZ z8tX3()>gB{y%#PdE_%|wC)sLTNN+q4NIYWDIlFLK1+ zi(qW0!~!xUiv3u~X?N|rL=5fzi8o&;XOBx>dokcM(DH^w%7kP$>VHyZx)MS!?Tur1 zR7uj8FE8iu0qnMmN)Ma2k6;4(9tcH%|I+G(t~iJ|i9hsruDzwt_Rl@*;6LnowA;2M zzq!xzKBTGG+u0EoDlL;@r~oi*+zaZyD;!AH9dxD8Zkl8jkZm@vnCl2d^IY2naH2oum7%9OD;6q>A2ahdhgCjS1+|#{c1jlxt~SMUI}}BE?H`%O`A!h2?9ENpD3 zw}+O2hg|YfcxMsM0%T?W!dOb{>?+-sp6YNu*6S0B>$+X6+jB2yUaf2>@NuKBEu73MYY3Qq-5$?(Al_!ib6SXOBu1xJ1eVb zvyr^JDqF|G3_i5XQoDkF%6${zS~hpeyLWM$h4oK4tsZah$1!f1a#NpLP`zjCSeI8E zc#@w+W$i^j;v>?KYM2Bt@#zgAaGCWpLXdl^>HqI}BQ=mjoup3XD>Bw-W*a;GcigT} z6Dg!J$JOpbJ`ocR2bk0D=Gk`zlbg0htM}`!P3AH31D8 zF|7#jhxiU8Q9%7@5A=jL#mgrHN^&wXnLxl1@H7~(;=XJLu6YRn5k^A;8>#*XxJ&Q? z;SUgo0n-ylAaMe~zAw%D{?gL$NC1zz40LkSu@Rk2;uS6m z6o)|MO3TPtl8Rf*wd$%0paIfwbgU=1o_vH=8fGP%09o*A)RX{}wa`_bLY;qYo$SPFg8mQ zMkMaIwgZ>ff5j*YC7egL>5)NXwO4YYOtiS0$X&Fy1dmS22;W`D_D+Qa!wK`)!6FSh z{(DbEifFN3>ky(UcCw@HWx1Gdl915(O`AXJLrAh`xfcmtGMFBc}ZC9kSq z*Qlkx(}CgO$aKEIgk1o~4|=WBO)U}(tPw1~4?S21RNI_C;%Y-CjqgT9(4MnM{-}(k zp*e>2j^K^piX%Bt>)|7Hr%Kj7NO|3D#^+c55!Z*BPPtIlA^OJEWCOb_T&kvDqLuV= zmen+plzZ)H= z79j(jm|Q@v^TD~*td?ArMrd0j7Q$m+EY=sngCTsgscM5VruBxa9)Z&P0&hcRB?N8m z?Q5?bF9nZEV;2M4IftV}#QR;@G#f$V=zNmvpVhVN8xQDStqEUn5#c{4@(KtLzK3(! zR{h^H6dp*Boq!UVMe4iz39Z936eL92sCt3rHf!KFkw_Zo77+R2zcn=c19AV=`)-rx zB8$mvdI!MN|1P)G*43Q>lFaiCQ^0Q^F#{qs20-y=VmbvHF0(b~QHK2@z_s*P_qzo% z5kQ77R=dy+RG9!!vFdv{-m>QX37`T19w}s6s`FQk{^OJ=D*sv6+q!39QGDM5eC7Lb z3_}I&lw|^@*)nQ79&E-lSNxBFzn+rXYK=ZGzBeEWl;2&=DvHj2Gnb9%4Qh+TWmf~r zDJSa!ArqrcVu^SlUk)!j?fmBtuqr?+o|cl5l8`V35I#B(KnrMCZxXhc2gmds3)#x* ziQC98J;#UgF~JKyRa1O1x%KH0QW$l#ki4p+hQnLixq3ph<-^AsJ?$uoc?~9o@)iYO zh|UMAAFp-0${%-LO$ObUv(;PVli7cB!^Q5_?rp_5UAkqYc zdIwd|pIP}wvOss^Ql%k_xL_%fem45YN}2wlb0|QVc~IU9)kKu1 zX;GK}Z*w{lW%Hs=v`t0C3sSXN7CQ0%D;l(uqZHi3TdZ)a)uoS}zIDosojqOM$|UsI zEYzCMhEU1*PbNEVxF3$|6U3Mul|de{V$yYuG(d5WL`(a*sm{nPqt$^!5f#lSC1Nw( z7lwEr^TE1vvhc|@F@HgQ)Aij*j5AO4lYi~t7E0*TA%9z>_YS>T=ueXMwi%@byexrZ zHm37N!xutmRaGYx&vDAR5|ZwxydRbWy;wr>@7XM3I*14vS!fcp#@a#5TX7ov@b5nF z-#zC4yKw)#oc?3{3`DgKAY3le;tGN(d=seXpXP-trtH)eXeKh<)rb6g2DP_9I|w)* z$G~#d`{r01EN>N+8K9a5_P%~VPMmxp^`P1Lpbj+J4Gj&^QBnEUb7j-2iu|vZr@)C= zqz)`=RKce+#ej!dVDs)Punt%=ub3yQTu)LmGBUwDpZXvOZ@}JArK6#tVPbLsdw&izfr@zDxizNEAicojDRIWQ>Et$@i3WZ`0Raxx*m_tYTZ3(Yb@ z?M?jq1w-`a&A%&YF=4fw!qmIAz;Q{@Ey*`-4eHSn&llrQ2bl*ODjBgyiQZS` z4!*%shpSxjfJtp-sf*&MK}&rwF+vUy&rj}M)xK$oZ}|2t9F=Hd14ig0enN_4{*?{0<}y<{!~@L7ixI9N`I=T_}piwDU+Iy8P(QvJ(TsI zcKo?VHB5aPNBkwMEi?#cI84aR6z>Q^qSMlMgi))iese-DvsUs2d{{uG{DY(O|HNs3Ft|m zGc0oxJ!>5MZ6_P{GmY6hQZY=Gig+`Vkl# z2Lu4Ybe~d5BS1_gn-E>@J93vn%Y*-of$zEaxo&p=fUW?kdV^u-SB5Jk@MpnP8LGMz z3QIHh=BqdN3;-nojDJA6ZcEKLCgfF!0LefwV8(%O!U2#-RHvCFGe9KUYV?X-;rj*1 z0su-CnV6aiQ*SdL>UxNOs10sokT{93O!)P>10UowyvxP>a1Fd#cPT&o6|mdc6{Xra zL2}7a`?GOTsTma`|DIFuKAuVv2_FX8;{fzoQ)!PBYJ7m~jb5u6&S#iOt1i&b6gaOO z<4z^90WQhw{-B}x+;|*Yb+pf*c@mCqj+WEcL;Et(i@^mZVB%pkT1<_wH1Rc>qPl)F zR4Tq8od>;zT?46s_iw8ypf>V-BiAmf;=rK)zS%>XdIol%f#0<{$~utsK0^8jpKPeC zpQtzl(V{MBt_@u!A2&C6n0-u+7)581d27oc@tap~WR523SaNFv!-zGC$?(6fpui=R zZiL?O8yF&qlppSWrfo;5e^^r~#IYa+k}+PJgF3I2{D*_mfXl4)9{?2fy5j%^3V<1a zb>>?LiL>qySVQjv3OQX{K_?PqB7rCHV#(IGje{N!!MXbvKt;`HIR)I08VcO~d3%pz zbk_+irNQncTTjhP*Jz!}<#sXw&R?i}XI((ri$#VB2h$DO(|^HV1CL1wUhxcu$I&n3 zpu|^NY0Ikn`vr?*w*$mtwRg)o;B4Q`z6$c!-+9++5IoX*UJZ$4Kmquk-Rca)84l|i zGr;O_%&!rm*R@s#4ILDVc7%Gunz{$GFApD4J*E)-$(T&!bUI7#>$J1Jb;R5_mQQ-p zz>svVzgJ`OyPsPqM>h3)3YYxrW2Te`F;(XRGW{t)bHCEaQWg=+RIj~%ZYo(!R|9tx zVA__)ZjBL7Ohy)xvj?_*q8$`u>Ndx3hk&xW@A^A+nVmLT$0kNthFn_XeOo$_)QKEY$wIdBxV19l3s#9bbQ`6cr@k@w=Eis_lFMp+7GH zm`0K?{qvoAs`>F`yNIJg^cE9UGj0;M&UTWjSChied^@Al{swB?!3o-r-h@q$33Y)> z0t*yBSj&kFsMFHXO{GAN`T9Ape&dp$^~5{fs=>wRRDu>guA0)RvYq?NbQmP`IR@L4 zN*VOx;+{n?e~u0hdjZOUq3?PBj~{$2_W+FGyrA#lWGIdS#Yj&tW)byz0tSubQKpw% z&&|)8242uE=(FeG-6`^4tAQQ8?U7TK7`5UF5|s}~6Q=4D>3}t*>i`Hk9QW)e=bmDL zV`F22;A{={bWxPnwlm#d5cLY<1-!w*;Q09X)no4h1;@=UT5S$43E&gRd;tyb^@VrC z5&_FwWR#U`faG2RbR1xt(g?ByIX064{l8>nTLI=o0_0dC_Vg3lKJQj7sO@21y)cNa zs&!oEfZ1h+2U|YRuU$`pUOcEcK4wz-uA)%ixa=06?n2^G54hm)|7+6$W2zjGg@?wq zyG+uMA;_ty1TV+fxT{z0?Z!g0`cmxU$($&FuO2n4eW$NHpphBqwj0u32X!$4q9uD?oW9H5&@OMp5F`wSWhnlbX zi6?B{lTiU}!Z_!SPHY`Ry;#abWvPZV5R(o2BRIBna@1)MQo0JPy#X#^NVO#|=yUBPEBKqdOpYZB^K zzOaQ1V~d)`RV5&)=sV%SPSmnHUc<%}a4;F~J*)c6BmSwf&47^c5+`CEO8p!qO-uF- z@>h>-i#J36d#cwUHek4?;<^`#3H-V!yYPSWciLhrt{c$8+BS!{oOxc~-X z@|u_1K^kKp=YRc=t_bG&UJQdu>`OcyL~GQ+L84Vcb!ZJMg+-*YjJ-18`c;0 zy+;Dyl@FrxWMc%m%#h|6UYmtv%>xQfdnhHJyz-@#n} z&2I8t^L8QgB5m-ZtY+Jwm694sUvlt!Y)f_TRv~F=X&IRj09|?kWBKNmmeJ&!8>F%5 zKLE=UtjBDXF~MQ6K=6J$o-RgF1@4SMzy>^}LL39njru{tEIu!1V`CB|l2W|kXuQX-ak+*R!PP)f` zD0_MNCH^YA{y~MX#!;*IDKXGD;?vfHydvLK-&v3-O$tL;{~b7K^8i>yqirtv_Q0Tx zev=IrA|E5;#MDggX z>JNbE1xTt>ke@+0O1-%jO$ZK=vw#@%Y6R{H2wVVaCN9hF3h++=X2ht|2xr{}Kl`zY zy2pkJ0+4k?MFBOcPo-A95)_JCX!HUC9e}(8>iY`d;SBcPLB3-W?H_y_El{1K{>>n< zkA8~Js)1t6p_P0l5kGRE!H$R_?M+YeESv44NV@=i`F90HbHX==DW3>^{?z;PKM0XM z!fOt_ickRK%B=lQqMKxPPR=X&5JOLu$ZH$@eiUQci2obbkObI4PC3L5GT&A}xB>nJ zPRn*JtB$?MU|}OYybZOw3!yDT9c$nX4bBZ*$59TDoqvzwzY`m?{3H$rbY~H(I*YCR ztOd3;bz=|4Xn74s`Sfi5mA}DOM=FX;=MUl+^J!)O?@tYG`bVrD+8TEH21=M71Q+CG z^yumlKD}n~tWP4`vL#QpK~U!)HeOy_NIj07?k;M|v$DYDD3to@6HcM)^3e}~v)hp3 zdno&s_amy5eecy#T(e0ZP;}LdcQQL;0@cCx`B?w&T-$MfiiAZbs0`gS<@?S4_VzYC z@W%!h1t84Z1MnBH7hVJSB2cddfEpjbfV;kjg$pcQ$#gDV%-x}Hd?92^p?^ftH0~OL z#}~z>__1!U)OPA94*AQY^~c%_@p3x4`~3=i!5znuf&cDK%?Yn4nY~kUTx)A9==IjY z^s}vjZ4E$~sCcZQO_RkB;E0GP=>LOeegQmlz9ul_S~wDj_j*YN)@RvmGo-KxJ0uBK zA1}qJ<8a!pY{&~3quJA57T9lL-f)F0?0%U62ixK@e!c&xWz>;I2|z9NIz?+jT%tDb z)5;h>%D#R3XosW4K2%Vq_hN2e%8q^#8wDed`+M5I#;U6>yK*#DqXKPNp)oi(7_e6W z-4O+sIdItxT&fJjeHb;>(aD4h?`lRmtJk)+dV)Ixee>?X2+8{y-}r;dyywPMa2{k5 z^AiOQ7-c?{-VvgH76N9W9|)G*MMobtSJthI)X8|fZogmDCtqF(i%Bv7EdQ#Y0f;!{ev zIs=Te7g>!rY8tzYEfu+{j5XqW&5IM2E)Fay{4FIJaO;GK`MU<|hbcBE zWb}#{{cx7!1iP%b{4}|C*^-Np%f+uZ!WtN~Ug!>mRg)HR^j`FTx0=7}|9KRfnIzaA zaw%S|bta=uTZv;<@u={%_bt`Z(Vq2?zHEu1mh@IEnZ~Y}q>XAdJcMB>D_^C>T;i%l z;)Do`Rd2|Wr~B~n1zq)i^%iIAK@jGIKcFmB*}*QyeQpN_?bBQAcG*@m*w_R?G!-0e zqT&KaB?jtL+|i`*KI<1APG>Fe3cp!X13kSl*5n+t5$Dmml|pdG=oVIbjM`l0HaG$R zXwu<=1S$cx9EZGmpsPdYVD^-1I$lCPl(ws1Wxr^Jsu>1)M*kf}I$B;sek4s;n?^rq z5E?^3F79TVk$!$o#jblFHg-dFKOWyM>Tuaj5A!88k55W`(~4CHeSSERl(0~CSnLg) zZMjt010{dLp^Dk)+t?w3aTy`3WizVO##Kq~MP&E@=}%zsD}j4pW1(k;e(hxx_w2em z)=rhHa8EdlG;TeC_`IcVmCixC6LR{GzcQCk7-?wGZ?WOMFjapQN*B*m4LXl1)yg2p z9wB3s86|$h-H}tPyukRctvyeq8~ZTh8#kGr@u1$$Q~n5aKRafHa6-CRgp5aA5t=BV zYX6^sxbXjcQ3?+}`exb}6dWY^!Q=<0gcS3h4o659uknGD#(V-N`u(`O&Z<4?zGmpq z>T4qzb3u*8R5Q|)lS5iq9gjA>>Egw|W;&?m3{ew>%N2Dz;3!DlYH6_4tA0~_4;len zwlM~6TeG>Qqkh(FXS#-&5$Z#(&M7c_3Yz60w~*Q1&EHb|5x zA1O150#%aaapL%zP-M7o1RWYYth}J+6|bHp|3=U#+hL4elC#2d&2Q7xi@J*fE5x~{4HzDCqf1#LKd%LGx}DMn&O0W9lLSEL`ut&$)ieWZ${htLUdgo-whdmegR>Lw0hdmb|wMb5@b2mUKyh2ro8haRe=N z2n8Q9u`yHbv3pNtIPozf@5Y@RdBeq1u3-Cs1H81B^Zou>_sqJ#h>~#!8yCF-CZWC; zGgMFWxytT+nbn3*!Rg4+VjIA#Scezs7j4x>f0)N{FnT%8A%SF)Fp!hG+W=JX3oPC1pi= zaqN9Jk|=o_zUe_|4#A;8cF!0MjqB4AoI{ZnqxVXl-O1|Z_9S#))1t*CY!$!5hu;Vs zg-gXpzm8=jJ7$B-t!o%^e23>BkFJ*Cc!p2dxj_b1{RjE|kg1ar$+0pNeC>dD-PMPvg*xKEg&KSp%A5A=DAmd%-hl!UETYCjcQ#jQNf)67Z z+PM1m%i^dv$b=(DXTnvK;lgEXQ4wx&8Q&?;DI=vU9lT?|aTF2~?G00iT%BMCNHB{D}AAN!l_{Xd`U%Z8N7O z_aGNwAf+U)v#N*3bLRh-D7Hr^^GsU}hXZ zPP(rD3UrM^3(t)ct*y8d-6wg2>BU8h3ty&5EAQaOjG+<05zG!h?;(zc#@{vg{sJl) zTvq!^Oqt%vA`99`3J!&L!70{JP|2T?=RmF?cZcZncg7a>r_08i;&hxA*R=gsd#(e1GOP zy8Q1K=yMY(2B)vWqWV^zG zUk&|*)x`{>XPq_K!d~Rbijj8jRG;|I$7U#G{V+|IJwZX7eG^ zhwfONq^Eyz5_)mx7AGPlf^LC1wd8{hzmH0-UOe_}1N(syj-5+91I0d7{F@XBPkMyPbuKJi3IDzdDFzYi zK1V2|G^S0&_b&;`G7PoO;!{eW3m~zWpn5_{oyXRdKlWCT*q}?bwmBy$mf)397m!;) zvnFbLU5&|^%&Z)I=#cts$V0VHz`Ahh*XV<*!jCPhr{;W= zvP@Yf9m~;7M4wFycDxfIhs1>2hh~R5tdI_lO5j1$@JC+~&!~vPnj$f4ZY~Vjo{GM- z657m9+>>NDtaOBWm=JSjLzdIT4*I-J&4KW9AS|B)8|R5uNKb6AfN56!vmx{x9BgEU zh5Hby_>^ylU|(xl0S%^Hczoa?u97qen+O!eSD8Y=lC09q?9jPyOohbXMFe=g}4BC^?#21UT<02wmdA?~nP^e%l6eC>T!$K@q_fiTQmcX3B38f0}R3~^l|DOr8 zTi9PWAKp&T$ovLSkE6^k6;;q%oSnKm5BeQ|hpNfFsYzHPRMf{j;Tc<84!abe*=gY* zyjg#?^poP~hNmR}U1pN=CWnjj!&TLie(QBzz^$gl0FNl#uYkWx59Z|MQ;TXwReX3_ zjzjeqp#i!<^@UT5nWlXwA3I$Q&wr^7{Dm~#(;WC7QapP5u4Zj-(Q8eLi5X)Omrl^5 zYKVHto4%21a?zuEv9Z&2{O?zW$CZrV13|Sh+f`j9SDVN_GH6DVUSub9rduSZnSOEA zhERzlY?D&YGg^5EMKUuu8-6?kHL3%t&$%gh;^&fnSEa);3F)<8!Yn`K3M)JvoNZ1vC|QSkJ0hoL z%Gbu{vdyA;6GajN6@^NHzaK4ahg3vn(7k_htp{FStm43td#>bI<~NEzM*Z^LkR9fl ziHeCWC5^tpnH(Kjze@paJ1KhhRHDm)>2g&PHDqM(#Z2XI#+t@UI2&*GV)RR6#~<~F z>dph{?vv~3CZz;ERq^V5zYrP@H|@x=jD0SRoqP6o&8k~(IEo3vg&*vdWkb+Bru*$K zGhDY0iYz+!T{|AFOs8Lq9urc}q>U_v zo-QS1_tAgW2*{A-2`{Qis76PP3d-hG2coVZ)pA_wmkqGSiH!zx`3aBjk8uzmO_txQn+H?Q41}Z94jQ#(a6wf!CxckIg-gjq?Kn!@Bx6 z`%b2l#`AkGvg^=#|5{78?_}qZ^|w`tH^ueVc@F9yG3kS0+;{P>>`(l0*c_M7nOEh; zHB7s!*6P+{30Wuch6hRIs0dX%)G%h`OZZvYPRy|uk4W!ByP@(`-*pFt31R($cJeI= z=^EQW$N%1DyXRFAN%$o`e4#YeR?h91&x}C8!B>F^1!}*4#IKmfGFE>twn!C5Ml0Lf z_(++IY;b6Zjnfxh`=ZU~;AN)z_rL@q%=t`6Zd*HI8WA%2Hr_H5?q~;`+xl_+|hg$Ipok1GY2n~;~ZhN+;a&a9aZ^sbcy zZ3+k^;R8Z=x=N&NSsLq)OhhILr2Egx0Xc(5*GoW=e18HXgi>$zU5_zx2R#=hLR47| z>YSP0DQwOh5b5DC!yfMeG+V?X-cx@!G|bf%(oL`)ES&o6ylnwi!)>xbzz;WPBgL5|2Ii*TP3+f znTr2^ax{kXq}ox}h2wqyFc!Qw>0znyAxCUaq*KvQgVFNeX0p8|!uE|>0Xo8Jp8ayg zh=s%YqWN^Y>OuQ}%K59um)}Pxzu1=I6c1S$a(rbBt(cp=^NM3F|CaGMT_W=DuC3c% zHRM>%5q6e$Hx}s>{#w_yJlm2V1gdlG=yICa0eipd=P@e$81IsUI}1!qT?OfTv!Nv% z9Xaoc>GVT>oR-Y=Ij?~l%}hDp=D$N8y5m-CCZ9^3hKW23?wnVrCj(f&o=3_vP?7&4 z`u;a1RW;X+c{ij6F*9~;$=^g~)xXlfmicBlKEi*+#d^W|pnA~Or*!8Ew&K>OW3>@A zqSl(5KjUsXb?fvK_tW(nV&<4kH80IZe@(-w9rJOyyQ)A=UGc$j&MAuCjnK2P;{1E~ zh>0W>-B<2^$T@N9!l-w>2K^oxg2l zvd)*k%dKly?tLviMDpwCF3aS{Zq7&VXJ*hhSMbl-`@!5iR)XQ95Q=9 zN>*D4s=5qijh8gyHZ{#&UE%ws@n0PzL>wVeOgrh|`vv?QE-JM_s#r6zc-+wCRZ#Hj zTz(onLhZpi?_C~KKd;P{S&L+X!_1@#OI|snz+1f!?_i7``EeeW*nlNr6Vt0 z&S6AxdGgtt%;s8u?bFL1!+^a{`zrmw?e(r|Lg~?!zS~2U=S7mSlzRJ~ikUsP=W3-q zRpO=nvi7)y?O%QmqWky-LX%oVxC*!Q$F4`eKY=q^IC)nF3N!@7`^?s`8T&!BV|K10 zgYS`b{^?aG*7|?^JIgrwT|v%)jq*N+(s9rwm(MM?G3 za3tQ3a=))lj_~3+@&1WCYP${C+Hvw%1K3SGN1m(4&kZ6J-P_-dAMzAdUi9{OZaMJf zpN2#2?Doum{cYRq|7e=`V5N0Z1OBnKRU5TU-D(SdEx#$B9PBxwj<){oxp)mU%llyMAjnBCH~;AFqP%0|~WWt~PfDFtto#1pF)s4(1*|>~Rpacl@5Ckf$17 z^ebo_Qabg5uD2)Mh%;`W=Ho7=5-JOf9hFEoJ#-@<7{z$Nx zpR$88#7tL(3%{_gR6Do_i-|!>?jWBKMsccDjvCcwer2FwF42$N!HdZHJ>P0j1P zz4JC)kEjp|JI1U$E5!-xKg#F|qZ_rE?EoN6!NOC`%GzeOEV?=j@?>SN`Ub{&9e6+CXxohB7Z8F%%F2UAtvr}c`z-6#3Ta?TeY|C}%@!b-@}Av2cPOWU z!No~pExC{FgQe{eCzttCDyECa&g8m_@t=#aUrC%8m#t=d z_gkuyH~K$oPqI&brk-Sc12#y1pPY0RT>;$3$M~UdoGR7q-Q;Q_ubH()UR!xcnz@1k z53h?u_gyj@f9mleL5t~KI9Y>7PU&Ze(VLs}B*@>vjZfx2vXlcvCtOrbw<~kQ%ZigL zZvG}S8HCX@yyFT4-*&qiKNyZn3&tn-ZO(ijm&t708O4HKxty6m)o-qy9Xoled7790 zg&&Z$d}pjP_t^!_?@9`tURz1i&A${0HjEpkM`oXCk zA)J1F!F<3yH1yxh+nVXDj(nU|fI`YU+sTeWRCV{|pnnm{8h#H`y~yjp1r-Oc8}E^Y z7%}IR)tR2-ZtpE~^Cu2Ate&kBrWcY^P;~iP2Uei%xUA)h!j+niVcOekR5StGQj%Rh$xGQ49@FnRDfB<;93OBUt31XZ>b7gv4nN)gL)hhFB6MI=q| zn{VR0m)HRYd?vFS6PHQejM7=jp3X08kc%kVO|`3Y@}in%jEgy)7lAGpsarpHDQ|V_ zTxL?YE@v-GDe^uvni%eBe~vk*%4tLT+ZUQ7N2SK^K3fm%6KzqtgKTi`6@Opu>h65l zrtK3=S>!wa>Gv8V;*119S6MEEwet7BP4ipx=>CgN*MNQeqt47@c>9_PW^8%>)5OGQ z-3(Odq%WO^P2`2MRomT_C<^iu89&(qMs6DXHr?H_QdpfXht2ca_lk0fewZ0PmM@3* zS;{Xtx$oxshG*RmM8>aNg&pqZ1{ZunW$lQJ3LR~bDJ9Pqkt#CrPGaNVseF-TOWzaK zILWIgv)nPRm3#bq>7F1Y>*^x*RDd#zxlhTj<31(NMH1K>T5ZTUMxWc#ZgjUqziZY> z;gfIp)MhF%^Si@k_HkVLJy8I#95(fTfd2m5&EBRHD{r>&w@-9rJA+iIVc`N%R+fLz zRDiTaeCriSWrNaau-xE2gW-+dkJ3+iON*hZZ0A;O#2D{^RH~jGaMo(F2QVvd0Q$`k_=Pb@8YU}PP13~ky zQQB|mD@c-z8#qO#2gbGW8Bq&LczmN{iE2Ss!L5~*u`L((0ROR4|A#{sq*^K~f8CBJ zUcJqY@8MvQec*1wtMzHOcA$@RY-lJlI$9U_!n|6yDdqu5hC7lN2_}9)8bMI+M!qJv z+2eNIPv8y=MT(3z1MZAqL=N2KYJo8y;By8vMy_BOSVrEZ401@8OYL1wmmmj63Z;@x zW1e{AN#AwI!V&O{?c>Ju^7688$&#)ELk!>uysT;}s|yWcWV!{oBh3arT%yB;NO{}` zo_xM{XTX{YhshwuUi?x8sz{YEKH@!Ok^nDnR^z*2v;21^4T*Gb-1?bdh;T2YHnV;r zYLLi5VD$oP9aKU-&)#t48Kz2Z7?Il78?AG{peDb;K-JGGaa0qOC^#n@-(~*aCTX%) z>)j+6+hZD+9II7w!BHn-X6>v^e$O743Kf@%|2zCVY@HiVc|)t~kGt!lX*L|5q#tbp z@jp)`tV99xGRGbV0;l(-kT44k1ijpc>J1rJh^lleTa$B(S9jial@MEywq*dIFMmmvJv7%qJDq`gb zE7Z!69rE;YBPw<}^?dR@P$ifMjXAEnmJ;A84WZpVZZlQEdQfecWxiy0_eh^4X8T(YW6El1gN^_}f zk|_~X@&v*!!w$KpG(={gh$#6)NGPXDKy?v5^4g^B}yXWtpSI-rRV^> z>!yb2uv*X?h;(>uG%-2kEPa82{6~iS&a<-b34X#fEX5W|6>#Mp1gPa2aAOn)aWPeg zYFf}bB-B{YDKf>8l91pMWQssMrd0~MxTv52E_nYwP>uQqu_e>9Y{zVo`wuh9cXjby z&Ze?p+bVSSLUy^%^fJaRwQ_vF^y~{fLssj9U{M-^rUo;VR9wl7e^!fysc%9m@xLPO z2i+STW*Zb5vj>LH=d+#TdQ6LU>B;P}r@oLf7mCVtTt(KC5!~QKq{9nef8Z}Qz9S2t ze9szy_(6lHtwo@xxTDu?oL}#k14=EyIv5-DyL^0ht!-`f1nzfW$TjPA^xf-n0NBid zxlS;tySK|ag>YdL(@GvVbnM;^ECJ_%nb51giQsrSibUMRnda|kqB9yzM=+T}Y@!h;z+lNzL16;iWk1}W z#;1Pex1TY@=&HEMftalV)7fB4(NP;^=v}?M8yXt}Mv6PYISo(G@V5h2u~Y?b4zPam zV1)vvMRkUKqW1~iuyEQtBo0yCL5cDT3fLZ{a@7dN>g^bCy`iB{l*?dZKw1|XOZZyy zzd$yRZ$CZ8K}fp&uXu5(Ty1ac(DV zTM|$dhlBf!JSzIQyUCPP?pP(`p;5BWmjaqKgTeywP?C$MD6mfwxQGTKQ;~O&{w<}+ zKN;UKhfJO_T|@C1Ahg2vR!qS;vuuUa7c9c*!RbClhZuN%?Dda$pmQRTyX=Xq?Sn%s zesJYtm&hMF>xK1(%T5#uT5#)_6J|I_VS4B4Ewd^BlztfTaVj45qtYVeMU6uT%3>W13BS3U9WnYf&j@Rwm$+n=X_wMFQiaO2{ z5t8w;R;of$8Vv`}APrskMTAVqEqxnWHadpbk3_!5I2A+cEdA7jj6@Q~0}4>x0l!3u zy5|jk@$NEf$&<#JxJbW18r%LkK1rT83zHfKJp)o}wnX5s)hNq9!5a+90VSw;~l;5FSArmfUdSF%Cnbx5|)Egk);l9@DcJy{KHJ==5-Hmrp3|3sBy% zg!>(QACUr-7x$Qh?XQcuI7H2~C>lb85Fc^5mne1OU#G_JMqX*VIE+Ck%=gv*fDs5P)YEh9(X~vhFHOK zU~!hc-haoM8H2(~jEcFOI}Zo$iRt6XFMcRsi?9m|=g*ZG*DL9BPkoHvZjd8RQfVlq zXCY#j+J}Qhd|ulmo*mOfJDV~5_=PAi>%kO~vB6NS=uvzmsBee;`1)Zy-oaGV5t?H? z^TE4cTps@NCoO#Am(yFcbp6z?xJ+c!0V;t?R$?6&ypymikr9hhLsx~RLo}<&awcBn zb%NPQbn65@(D9A-MysJ2z6NAHhoJZ#3EGj5F#_4^c)e2)pi6o;(t&E=_U|fsX6~{X zB#fayADoJc3ebaPW@Ny_4x^i+Cm8^DIWQG$`|fzE zAOBzD*s?d_*dm+E>}=V)a6(A-DB1Jad+$9$lu;^MS;?lPB4k!ZQjz;Q^}WB}y^s62 zkH@{A|N7|Dr*q!#*M1I5d_&jZfUrVfPcq7QS4uZCNHWsLk)M~H0b~w1-(_403FKns zQ@W-l;tKwJ#Ul2Y^q~G(Oliu|rE0%<5ZvB+!M$v1dirkE>nc0AGBOBqx7t@$SGT)N z^N5NX9$OEJQlS2qd!yU;Om8U{@_EVds%j9Yt1jECh+2DZbd~|;#-m5$Sr$3@AZ=%JirT7*?Q2Qbw$^Va<+??%1a|cKjN;a zxq3)H-t%9$k(4=?40gz6h7OO3DLEC~p!Gur#H=)9l%6llRsCNvCV(Kox7V zm6pq%=cJyCh$O>_Ga%Hf-D*|wsp?X>T3fmEnz?hS7-t%9nJg+^p)0}wVQ*7;+RJg^ zDE(c#a6YtmSB8zWg1ck!UN60uc23p2@5?pe%CG4}J`ujDS8$6}*6u5NP^M6-sL;lq zR`;nkrFJ7+)WvNOn_c^F`$wX@&eR31Or*vxL}q!J`x00~1?Ol?sxAmtp}nFWCGx}>b+YkYx#L9h zNj*elN8$`s7W)!)(|zdMT^0SD?geK5pOl;%hp{&H{oCZyk;pGGUzEa@Z%7BFl`bwz zKe*0J{InKFG}GOKGF**)gE)Fpi{Dh&JcV3Rw&*9{yPKJT=bBzdM_1h)d>>@e*vaDm zD}tLflu{W%_a@bBfHSoet<)uNG!h?{uJJuUIxlq{2bt=muYx7&;;MByTtYql)AurK zf+Cf1&w zSlZJZzzww$mEmh296#8wjNo1I#*f#*8LZ_dY~hzdQKzQ1BJh(fR&Q3Sg>+MnNuJT% zNEU``SB{w1<4_;3mqT$;fP~u;KX53JOKBr9WrbtS4KaJ+QxOH5m3GiX1H*6#iYUjaQ`aQS#bDAS)$zfZ~OR%1PC24Xl9%F}PoG84 zgt#0u2^sZj^PQ|!l&rbbysct+)dzrP=Lv?oGtle$czg5FD(1|j`^RnKwRlqVY-Gf! z~rO0{f_uT9mW$119l?N_!Eb5WroTmz&fmu-kTA7YB-Tp72o zw9on&a4U}4mZ40H8a~21=kam7r=sM(==}0NlFHzy@e;$g z=$UQ1GEHd;;$L@3YePNgq9V-0e4-yoRv>!PeJ!3hK`(rNE+6eiVx|Frz z%4iqIN7!CVlgAFN`=CM5i`L3uKki4aa;1KxWC(9|omp4fMpUMojYz&STsbgjIYC<) z^1WVuh-8S5nxVa-<%AQAKa7rg9>R87E?k^Ss~s8g;KL2RmpJ7dKE4%09yP*bwV7m7 zj`&v5B9TL-LmL*Tg}3N+M&^yS`5%51+-iC$2@wi8gxW3Wi)9UlMCJZ{^I|qED1x4I^r=2M|^#U@YNTV&|F0;*OM2f9r$WmGYt`p%_Rg+d7YHC$u?-`%w z^cokD-KE;!Ja%SwD$S2`$+s?ruMe0RbFdta&VTPyUVpMx`pP(B$&wKzzOcP_i#wBK zGMJx4!lv@Ni%FA>-`WeS-p;Zbn%avz4Q9syLFIn%{30-eXQd&AVAOhQ(*!(v0AIpVt1Q1vH8vS6 zC;^r`F~P45uA#F)-~043WqNO5U;ung!GZJ2aZOE)u`CAj4L@L2_yrD;4kPdO1D_N6 zZ%mYdH6|Qxfjv-HSBJ)q1!QeFF1ehfcEFZ7{fuI?Gz=IC(3j?ffYWw(Q=7{)J`seOGnqn#+3l8APlr1z?3Yn0|nkxalBmR;~L4F;EOv<3mAnpNc!K(8AH0Ejt} zGE-9;zEtqqHW+zK$}E+LjT#zwl983A&X$%c@u|3=faKDaN(z~al?1M+3?OVrM@Mgn z4n>vKRKj0%v~=S9u{byM=dW|${*k-m1|9BGbO1Mx)Tu-ZYqm|?aBmJ-FqtZ&c z^A4y9OV&K1RgnkI`Cocc;}G1ciAAyPK7b4s4tEtceAC!}G zM0{`w)W@FmrA;a2dVl9Y&!6 z_to3jNVPefughguSK-8V=jq>9-p8$ekbcFW`N>1VR;@V67S*}?DF}iLwYdkc-jSvA z>*bKBV7>GfRo1Rp@ziW9zdlUOM(2}qR+p8qRIXr?75VzJk8IKP2OTgEzI*HiU7xy$ z7xSxPg{Lr&xwyD2G{8`{z4Wx>*?`(+@_D(p9Uk4FO>sfx8>m(IetoYXD(VGqjqgKX z905?DcIAoBXaCJ9ykd(&2#hZiWvT%4{s{^lz=>efgAO(n8rKB6iyYk`k|Ac;xwsoc zn-u?7LKP7a7dOVIjew00>KN?@akdXpH=ZXR`vrQ;@e;)|kUdZrU%AGl5agsB7?oL+!mYTW{)1i~(AMgEYr(%sFN#IuvmrU-S%e&Q#suq3;UVKyr#_ zgqzth(9;vBs-dI}c&3Ww?^2D=L;x$GI4_p;)?9>@HfhS^(h;5}RG}k#o*E z$cK#Xs0?8!{YI)>K~3(V7t2{BTm89odN~6%oHt@-oP~l3+?jXd^dX| z@ThroQ_T;0;%NmiM8=Oj*nH|b<(E_L^sT77uj4G9)CwgB+dPRJSvF##eP`cK+sXHmthhNa2d@|*O;Jg^6R;MY(0n!j zRn~KlNv zcd@Xf${wV8JSxzU{*&0mSMacdrzf><7{|n_Y(}FtYC3>F5mmc3aq?`=Ubpo0G zA1rYY)**y$E?J?EcG7}e%r7!d4-V^=aw66*rs%I@iHFPBRnKx7_c`b{dMm$8zfuvY z2T;|Qv_}bhRmhx8gmF)+{hzv?t+v8zu-CxLy&N0}AtnymOyc5cZ6I-zFs2xcz5{GU zRuQ`%s4^4L^V>^Ld~O1%#(*FN6cB(Olai2-aVcv8qg4Z$zofYMi~m#b6@L%1Ay7n( z5gAb8Zn*b(_C*ni(Bx1k@vbQD7kt3u4KJ@Hc?BW=aro1_CqB?-(y+04%!y3c0~0>y zqV*Npm`Y%B2$(muNG2!_{f%Kp5rx8&1e5 zA?ljJ50;NQkFgG^8UqXzbf+E81XA}S(an6hz(c-3NPq#*N+h$$aOgH4510M+B^U=a z5)GXO3*dDmBjfHows&D}8l4e3$v`@F065As)2d8mi8EIJfkD zmZ)PYdpdq?M)vPi#|G?$=9kynI$~z5RCC^VU$3 z6++o1taaou*CMW?3XCL5W5#IuO?j{!I4 z0XgC|EQaPAEPZwsL}f9D7PYD+z~m(Qtw86P$fo!Q0$LuL$~L$+zj^ZpI_6baC;7m8 zy6;WB@X(PYUzxYkg^Y)5f~pNF6NiV?q|mjn+co+{aIT5z%w>emJiB8yO0inT0mA3& zyC={+7r@mUG807ult>U&0eX?fI%s^z7B$$;Qh0fL?>AUJ!Y5-HBILj&R-Ucx0BMzP z4l}DsQsAEW{9Xk|rYZ-x#)XI)?O&LKZiMW-Y^&?+1-0_Xm3mbvE_>|MYB^H6Ygl{~ ze@1hJHS97vunG7;tOOo}3c+$}cJ>PgCHa|ghlM9TytALj@>IW)vC3=GUh#x48+Kb| zwow02U-r;;5`p`xTKMOK;}vf~39cFB~t$JTSrQ?huUieX`(D`_n+xzEcqqL@aZ{Lwnd>Yki z&nPG^a=okhrN@P&_VP8+#Voa-VW=V}PloF_M8k2(yI7aL&f78>hil-xifeKns>{8j z_e#Xy^_Xz=Y?NW$z5i1kU*>gLe|0=eVD>W8o;Z;`q`g0G)%zu%uh7o*YdIz|jje8( zY3d5+cC=)!p*DpxJ^4hnbx5zaEF=B1wcNXiokIQft0>=p(dXh&^g3j;zsj{?78)>l z@+CwXRK1>TwS%_dL%Z+lgPf+Cf%T8icb z-7NIe1;xe5cCCIe8bj68E0i{rB}uJ>Kvaz(G0_0VsVQ`AVpNjSfoAQKfBvrz{AZQt*=*dSwT|rI|v&$)7E->(I1GogfBGDfm+{}cTa|dg%rJ3K?Qf3)3xmCFVOuOoOoc}K_(WZ z;qAnEzD%>eCtRAJpXiUSIer2W7J*kE2Wte3>kpun)>ULA6En=Q31=X*w)@X)sY^dD z{gapO$U){S*6-WVsZ)Q;A4=N=Q~W?QbMd)j;NyV~b&)0Ok$%T6xfR|h&izk~N)snN zkMHjBET79>%PpDj;xiM@jC%6T`#|z+gW3F}UETg@)ZN4S)&b=QzkY`)3*Ylml5y0= zjYs~tOZz*MdGPk1_|aRPh9*zn?Jj%J^}gK}pQh5;R{rkgCqPz^p833w)<7sM?Bz*9 zlubwQ70pvi1=g%==^^2?b{!ik0GcLe44e!0r;%wL@CcQnohv9(jYT{An+r7U_D zkdbw0_`Ooqok#Oa2HRiYA!t(@`=Fiw^?erpE2a5}YT*|SgajSte%Tr&b!?l*>Me;4 zMg8b|oUA_Y?APLx^=7kDHWLOURwd<7{u3jyJo%CQ_3`{-zXd{AP_x31QZ_U;pS`n* zFJ4?jq0w~c+LKH@Us+j!4GS5Q#L!XXgnjpiui|I> zAEStu6Rbyki&MTij!OJ7;adDEeW*QUz?n|A!3oZT2o&$q}-!~>z zyPivWynhB^29>6)uKnVGt<%3~unqeXWhW z@LQkVH?i37jIsFaye}lliJ0jO1pOj* zYuTH`99~zP|8}~w%0Jt2K&Y9+KC)EaX8miqAUS?qtMJl!U)v=58xAS?Ou~{5t;Td*vDt`umwkxO>MTcnKX;OAAsOK1mSZH4U%*}CYO$&36n&_F`m>Z2cy052<6bN`^8m`R7iKtd+X3 zZmy%HDs5M;#OH>diSL+t{4`WpA;0o0JoQrPvnkSI)b_co?29)A{#fa(`Es`quSa#7 zgbF9;$@ezzN8XQL<@@n?^K<<~f0dKi*;BFHN2ef#)2D*R)l3M&>hg9yVQ^^Zyl|Z% zezh$JR>lEaGn+6brDkPj3R*OmLh|3w*`%VPVv=wcfuS(v=ir;ZzCLIc12!g`g(?OiiU;0^VQ^ zhe+IXSkT^w+>rU@&7&Gnoq&mw{t{z)>X-M=e~TWZFgIDWl!NArMW>0^6B}PpGAM(- z^QA<`c@C^)MnWq#aVOHk>8U9`4gyh(MhQ&O39oNKBLK_bDDeik`&1TC%-0#;gt(PZ zaGl|kNG&cVQ;mmhk&b}o0yM*e3G@|L^TQghmRw%y^oztz;lq|J=L-~t^)_5tw))r_ zVMmsuK}od&HG0Z6e|w>YGdMF3m;2oWZ4tLdh^n@}yStDn ztCKN`4g7h_1Z~bLp}f}XJaLVnyGM$@Uk(leOe8Xo=Mgs)>D#3exjG4l9k5>aRm)#j zQJ-GnRbT&e`r9~XI8F?E$>E`>_2bo2;`O*^0|Wx-w2UvKZj%@$^|8~(FgrQ!7RS-- zjt?OPkJ71)rIsx;v;G!uZwXJTVID~P&}f?ytVxIpw`AW-Sgh}?@VUud%Q8A_>YwKH zbS2wP*0ACJmLtx9lfnDku+Bd*14vcVHN#`s z!hsjHGj;E8ti1GA)~?FFHvh%Mty!^@dsge7s{Mmb%TY0t`%`q+p9GJpwALfT#%zd8 zh+=R@%mwrxqkrL2Mun9dhw!h>aHS8jo_AA!^D6kfL03LGZPZ5B0&)Pyd|Yz6-%%fH zjg05RzUP~^$JG}X}Z5u+& zj!+pR$2F<+1MqhcxWGu~Fq8^ScO1z&?0{j2ERpsq z4~l2CXJ>_i&;YTo9th2H>e|{`Zy9vQadC0+b@qj_ey-4of`UvXTEpvADjyL3&6$`O z#GQ1Z`*lhF0~e$((^nOvc@Y)|o)FwcqicPov2FusO1|5m)(1L8{eLH>x4z-{$hR{5#UTRtT$ z!PAim5UdKLz^D^+hr=+{&mjesJ{IiN^P&bOCaaR6x9+YEQF1A3?$J?lhQiW-u^N^H zh*C2sy@rpU{f?Q+busA6>s85cwwS}gJ=}ZAmO+H=TKN_7Al#OSd{T^L(+djZZp{hu zENAi?Z*cm-zJM8%JFY)r$z)t@#lQr%ImV;Q@e{Qa; z-&VrxM!7|Aju(Prx#qj#z?^@D z-Q6y(+~ksY9F_~DTTW)!3wz~dLAE?2=4UU;3h(%fkleVTMqE&ooUHtFYhJ##{Qm|F0XnkApPRh~hYoIjtih9!{i>1Gz~X`{Uz&SW!hjgzenjo@6vnpEgC zp*YRF`TK#2M67l+pADBQ=}jU!7j>n%1uP-dtyqTf9P+h6A(Hh#Bi0V@!?pF#mtxXC zB)$=7&I!rwHpV7h@F^%JYt z8AUQa)h5GZV^QMi3tw}3&wVnjym;Zl+voQ>63@y1*j?oPO01knI>giMuF934T0&iq zTiWp37oj~2!37vP@&<~;rt{FAq4KLa8aeUn!>GayaeN}^HVLy^58rP3s-zYcCNl6v z#iKsJu=#bN1$QJfljax6BI-cyu=wEz@u?!f$n8BPq98J~=diNsa4$NHXhI@`Yt%PG zKvFHR0lz~l^!*e& z#b>ivXX|IF1@|oSup{01?RdjJd^FyoTer4~S7pw`8O)|%!>9dl-H99=6X zY_qVeW_?UFL}FlO_9nIy>wJr(l2ty|P-46t-c>ncEX&p?cmp3jH!l||khxgSh_1ND zq|hZb1S^8}K_^{Ulqi6_T|V&>4CtS zOldUb+r3hz++JA7vPX`S|L7&&f+|bnRV?gtl+$zSX)gkq#adUqf8Y}#$Q~b*mXr-DcEOtl^Vl^oE=t# z%^=)Gc&-*Fb`GTDODTNI?Uuy#zs5cm{Rn;j92!|Vw62=Wg%z|Dv}yRn9cMDJlE1Bh zy}OW_04?HAO|j_5kJBE%gSf5L_3BNN`?L}}(J*D>+ms$wGOEc2rB+g%qZ6-WLGE!#r7VT;{BqPgk^nGH|^F(tn2f8IwfJ6AKPUw3=#EyyvUhqw2?K#`LFa zmjbZW+fCR5JwaQ?Z`c2?@=gMc;ICigtnS~a7&Ilj|MS28y;oMh z>t%d1uYW)K_mnX9*ya#mO-um7u^2Qzmv9Z98|E=AvFlM_uu*SVn>-S~7RHWtolUC_ ze9KE^!7i%#oJthFs`QEfcb8yZ<&t}c0;`ewROYYI5HfrMIX&8`)rB^!fp+sl@Xa0hX6D+?P`O|e6_6_7my2^_s}8H(K~04PJylQ3Lu5{1AwL?r zBCj@_Wa4O%+^H;|SQHC$&eA5U>Z7hbicog0L<t9^vxjlJH{bpYiJW(B$K!;oXU+Vt)v|Pe^D*9CR9{*E;-!kmVe?WBX zec*N@$QIf|_b>mJd0!Iy-ks>wi$x4|3tJf3F^ukU+mgwDz3u;b&Hryv0I3Y~BaEOQ zgakYXcwqkj5p#w3`HuqNHoi*)Lk7{kO^mVtUbDyV6-tVLuvIMMMPd~YC!{vgu3mVs zn$dhPNDY=%J4Va=h)iPaFjZelw2&!lo!IB-+e#V&Pwg96N#WmN2+dratN(tII$K1!woHR@EYnu1m7!Y)*rC`F^mTYckcTb_}LG3ep6a%UyBS9ECkK3i`! zopdd?BMZMg4J#TP^s;J%Mz{p8gp>dkprfP-JG@K%sGuso&bGoW&KdjW?- zG3o7P!DUXDdx+bYRqzRhI||s7odg;+(-i!TxSARJcstSYRK`nAgyBO(x_(yg>{R?H zhqFKUyQOiyW6zEPt*4JIg;@W|>@rJO_ax=S3+mlIQpvF-LyLPljd03fVVg&^nj#&{ zb1I_N{~`hYU*6^a|1Y@zWa^m$E9>-q4wvxT{8x0)7jI=4ZVCPN36Wyw(WoCPvA|hL zEWKEF3*c;ITo>0LzM>#A;-WILYC^IOrsGp&@ZhI=$VsD=>t4n4IE1Z<=JQ6EUnYrR-pZ=DeOccgpp2tPO-8V()2+^RA z!tc1UHTbD6gK5nmr!LpDyNVUkwjOucu0#KAw%*?^ryyK>@G{SW-R^1OIkTe$%oqG6 zpc^zwtqx0wy0n{1%n4o2i!Lm`Ir~4}K5C+O0n0MVPD^e~@;g{Gj z`u5!cBl;Ul#TO#H#R`gQvHCI)5;Ihx6OJ3gc*iD$kM=yUvn?Pi{i{vl(l}s+$D1kt z5Z7k_ePi^~9{Mv$Z@;0Wc9pw2fWkPpS=bA7tv{X&z|&E40OA*qnnunvr`N-UvQ!!34lSgB1|$!{EB9$s+5E ze!2{`Y8ZAX$7vrmX)OLoVL%Q$p3+QjKw}HyR7j1EO)p&J-mDa1UxJx-iGn=bAP5oyL zf{&%_B-#G!<40CRiR0am$Q}E|dCBr%N`l>9k{b8Eeic$fv6ObqCO3m8`w!KkZ8<_}Z?>PR<1bCe zSxwn2_POXo!=1$r*vj7p(vnRpxGLb0XbN9{CM_i74kz673RnqO^nulrO%-SnH1OUK zyEP->W&u_{tMJhude~uU_Q|^6V6V!GH9$2s(G(|V3i4wj;t+r1yzys zE+b9&7TArn1!G-6MsVko#T}|qms?Us*p+5$*q46R2;No80F*BVu`ZM|+9i{L4$0ew zAhU+F1-pmxo+-P8<^aX^k;KGA8K3oL}El3(5Yi1a@ftFP>om$3&wJT zR|HUW>gs@#ycca*fy#BmM7{;nENhcaA1XjWS%5T>RGvNQedTux3%`GX|0lcW9Zt)1 z7|W($6$h7$)I`|1O?AOq6~DwA8(OOT=PW_2G=2Rk;%}n-TmR-63wZ`u1Q_hS2Rv_D zL(GG15*UgtRaSCkXrF31?ggo{`TTqQ3oi><@=Z6Fal9!GGrus!MU(8c~i9c@e zhFf|~W)HT@bb=PZ$BTCEC&I)zs4S;m7?9AW{$(DY6E*my6MU0Wmvb2ZM(e*Jcklx~ zL+~caHER2zWlGIUYX%^?ioLnvh}96mpcFGa+7M~M>Jn|CEkLd__m%X2eca7!-udvz zx77gU=yzrxl zu#gZP8K6jDZIsq}n-?qNBG`pS2$`c(Y(0PMcO$PnlHM@LU)%GU-KhCu;0yBlk@d{+7#sFMOz{idK1PsU0BD!5%JXHBAFHdpo|e z!>hF`r0M+$H_(p?S|@B@C11p3I+uk0-ZltUGQ(n9SSU(eG+r~U++sFD1kv}#y{`%7gKHFJ$a?B*{Ps-Zc4X&- zT8F!U-j=ptvmf4&V&LHhO#E-a|I4KblCekk=@CG8Dm4ZYBbM-5)dVCoY)niJ!F<7Q zV*yW-d*%H^bFW%btDuEq%x$;6U)i#1UaVi793W+S^D$(P4w@!SYYKHE#G3sZ6|WDrb%y3 zx!1`~BvVw!XDUJj+VRng@Hc}^wbPSdq>Z@}N}W7<8N#>@9eCkf2AKwLWl-Vll@$F3 zf<53di0FUMUbaEXDJ*=Is+D8*wm|f{nw7m!V+LoH|Gb*~Q)eGWS~5_+L1@hXuH?#gR>1hQ{7Ks} zVYX2goBOWa1jpt4csda`Ef|lC&tJcnw8_;auauw?c5cLO2`pW5mryBhi>S;7+C{_= zfAcd_Ryd1ub?L3pPe{?KIt| zL_HxY0{(S`6ndp)d$_pM1*SdqtB6eQ7yB*d6eO=M50tg0$gtCLvo%}nd{oq^*8yfT9f?CH638^HiMfW_4DC$_WWM#DdEqh2bs zRADS>2s0I7W3yvIpE?}P1coU+R5AgT3GavNrZupN3viA9mdTkRa(1Rzb zbd#(x*m5R z%6Io|)@gWB(^DcT#Ku}a)?>1v`WlzFcnvnvxZavR0b#lfIF_SFUA^R7IV3Upi^Py%Oe|i<~t#}C%H9ncc zU0rXiQMEY|c4JU#qdU~L(%1w*$q77y>-Tosa;^t%)+nC304rnYCc{7{ikby*>em96 zOyMFQdh&@4{8Fjo+1X}A3d`A%H^%N{rqP{CSG_Fb7OG-LkDXsl_)1eBZsXt?`3I2H z+WdC89$>`|D4>yw=dW?{taWKn^#^=6gw$wGRI9kORlc*)L zDrl3*Q^p`pseZ7%P>B5gI`j|qZz|e2m0C@=A0$Hyz|;8q`gk!8_4e}f@Y2W9ya==O z4pvT}RY{gYaVfWh4TcwsBAAV^yhNpH^2B<#{G3))dkcSeSUAI!3nqIZ;Eq5UW<<5J z{1z~`bho=hPSI=M`5MUn0*xJ4z}LhLI(j0rZ%JPVl1_mM&mOW7Bb#-!3EYP0c;&zx{W|J@iNI4xD4IcJg*p1 zxV;$57Q*Mj>Uo+*ce}Zt(C3KyUaUj(+k`{FDci6;7HUy6DAJ+OOR!s28sn(q=$ME9 ze;N_C%z)EvJd0t@fk_39M*0UY$Y}++EpI(6)kMF>R_pfSP-jU~8N1+=HQZ@u*>c4p z4@)cK=k2?XyF|MZJ}l#G%Bp)d6F`yKNNAM0d^rS!Y9L4*Yb#BzTvAXtZ;TmE6HA^oAeytAS4ApA z{v4G2*qFrF>pf1u4bH;4ghRo0H$@0xR+Nt0X8PssGBcAbh$R6 zLj9MHaPz?`oBk`NdcVNu-fP-pa&LZ77ROt3_>M^Fy8M7DlpD8z-mgi+3~4`>0!9_* z*%?H~V$U(p0fi`kq3u>qAqS0U+Lz94A$>`*Mld>q#lq`cQQQL7HPtYzAyRCoOB!{p z(Ohsts=%-gCyl4luhQmy`B!nzs0zEi=LmP0$G_uim`105N@ozq?X4f{=dSq-Aob?! zk8gVKzl{;}rzC2MupsfsyR$b)kG%JN*1W}^y(hO9XJBIsFaluCXadUcu4NmF4tgO&=_hO6Wi^{(OKF&`4rZ_jALN=EO2LLynG& zY)w^>q|2Y39ME8VZ|mS@Yh%OW$Jh%B1&YTXBjJ4M499U8U4ihDY|{EC!S)2F|0`s4 zOc2q{07|%dfX+?7Gn*acgb|Ccggm@Sgx}2Q2-;W=%;K zaI1jj!6@xnY9XhzBPuCHtL%(P#HoI~%rqpcwt-sm$~ihN4n>RuCm{RxwzoydWup7-9(x8gtZzO9SaHsHt*I4V5!woISY z!A-?ImxmR|?ji5&F{o0 z>98=jS9^PVaN)iKt$ItV$oN7&aCL@XzkY4|?2afMYs@@nihM-ei{vM_7o}qE!VMAA zrF{)O`(1Lf%8T)16?pJ0qHGSj&PDg9yC2R@KVY1bz<_gU=Oax0&3&~@Qf>?=HpLK@ z^@)yK^JD^B;Inl66?|jCL`#;Fv;Tdss1K|^!1hVlIPm59fF2(JWm-6yET`K2sj8~7 z|E6%Xa0BDP20hA47z}9bb2Is3x4vONtO0Kq#Ay0D#Yd0O-`0?WfZV7DIq%@?TdblT zXZjV~8SX!;8CNH;eyPbY+{IY&z_mc*+C;4(=g*gPJuVs{P@dG57xD?iG%F3i0?9)0 z&+(04$(`=qr~ZfS;6$324?8)vMDR|=kZ>0gEK0D{F=S#RlR#L79HzWV!XL7)OwBkT zI<;HE_-Qc|4GEq_j0p1nGf6tmNqtK9ai{s5AXQETg^hxszbJ(~Q7sTQE%U{!Vcg4tt0HzMYs1DF+#(QCKF{4G5G?; z6n0K_-S*0UI}4Q7I6k)ktPR8w3rPlE`S`t<7ByAP#{km8pw5cG*cM4Q9=by(zaVp%iA*(A!cFfXWR$-nVn(oUw`zbl0{+t+7;m@7+0z<`{+TqZ zf%T6jSn&`kDXDQ6rKAK*AKt`% zcz&Z<%Bb)q7TRSO67s{5*<A7ihd2_O9tk4CAH|fSnh#rz+Ww5Y?fWXUwHi^c+90z$DAE` zobj9?;!_vyo_#$#RjgFuiq|~ZGVktlOE>?uIRi{3ckn{K^!^U+AB!8hOb$JWptUUX zRa<$$2p)k?Vg=*^QcoKj8`xv1S-maq)-}sBI&1_tMvp*lUCtfG&Oy z)>AZ-B!=`AiIhJfe!NfYV)_a@eeGfQ#_$mQz&#+=1cVx)!~bxyeyQ;4%vzc;u`!i; z+W62AgQP1^A9fAsvpK4Hi`K%@%zG?&F-ab%x=VG&ybCJ21i%yAvprd%2lQt8*224? zyC=t9t2fmry8wt?_(w;JZE=2u{q>qUe zCc2br^(gXr@c3d4KAZ$UU)wQ!Z?5&sGw4G_6s4!rl2`l;>f zxOM^dj`jyb>huQDb7=(k@z((w^9*cdTOJQ^gM2=jn z5Dew{xu#(Akk}y)$b)lE&^o+Ax8eXGpzSivj2TUzTvEH(?ALNmUCm=hmqyPqD5?Me3$^tFJ1QjO%YIelF0 zIlPkg#d8>P1wVZ%Ch9ra%)=iYny?p5O&l*PXJ7dE?9+_Cwl+#j%5?_)TQaX9FcBMR zmqq!A4g`lRA|E{4C%&KV*hiejkgH<`0|Ea+qTAJHkGUAbFeL$cx{GEB3L#j_af5Rh zd%m?IK_taIX+OV&TiwF-1&Pe^%XdaZrnkX-O|*68S!O3(0tUSE7qU1XXp*U;I{ik=SpIk217#V>9*~fn-cRr(%<&Y{N84!!WEccDj)6V z78Lx3_g<{*&D^pLfWc-^-5!dLBQ$rWgr|H7?A3I_cuLh2fxNmd3cxT@Z8O5#_Bcjq z!+Mm#GJvrGqbkZ54XzXPWDGnUE`oQa7^+oBtp`4Gsg~rXG?(Aru;U5$Hquv3RaZ1k3?Q`R6#K_NLF^JFX`>@r}kqrT);10I_ zb$z293bCp$QYH!X z=x$@j`?pm(^n@@3M1Dt|T~udE7q~y%({tzd?1PXtAmd+o>F;fC+I_r|upq@SmwOI6 zC{ANH)=HH`NMRWHfQjk3vy<0no?cZ$Ga0`~)qw)xOm>!Fv$4}k`zXhW z6dw|;`oF&W78Ld{d93gju&&cN%sB3wzB@1YKiGQfuq@Xld{nx-OS%z|Mv!i$QBaT) zDG@0t>F&m$yQNe_K)R6>1O=o80g(?uKm^XbuD#YdzjMxY?LXGO1itTmpLu5Px#yl4 zx&-49*C*+IjHxjK)IV1zVbCtoV+JMcPehtFwzg+qCEKjJQkatJ(3G%itA*2%WyPT4 zYrYbZ7RNkQ=j7(*Hsct0*t`IP07lP514%`VoWf~!w@bGpoJyRULG18#G~k!$d!{rD zx@ZJ#LEqYnM$je8iBR>@8-ipj9vv3ZD>kvTb@iEq zk*Hm4D!4Q95?MUD{0e;|xVUpW-x=PPGdu|3hobSlxC{RsavjDI$ z1<3#sLBXU~VJ>vtWKWo~n^ttV{G6P`_$vp)?X$*4sa{TTaVmC9>2E#q!=s~jzrb`A zR@s!Yx^i4$*e@%$93yL1f6c{f(G`k^;M{WlSVwGKZn(;yEOtL$JLqH*IBz1(!$C+w zAbT7boB*SdIqgoG!uijdhXE z9GCqK{g@fg)jMcWOBZsXO{dn#A!HcGnp#MP@VncwH3f^Jq=T`LNjx*gv&|~v5t*Be zkxxH-gM#%&4LDVZ!snGWttt0#>BQ#hA#pnxvN%iO{{yc37FU&7jLp0L6f{6u@E8jh zfW)p}|8wE0*{=rvs~qvd&_9gOLoyy4EWhYZX+#=iCkU;e$M|x@s-4Gb6fgUrwMVp- z>chGKT3gRmP@h`%CXebNM6uTwA8u@F+hL?E0V}vkw4D}O?=WgI11=B>K*gqhW!_Q@ z0@*vbh0{Ol@_n^;jj32+*br7KT!asE03l$*Hq*!j3Hz8CnukXs*@JbMZ5(C&DO;sE7<>D*p{|TGsiHki0XggtW4w_T)R{Fw3z*gYvU( zpHIK(26kdn9x`Thq*4B)e13AU)kpVpw~M4uFbr90+;cKyrX-!E02S$#F>*XQ0wW-; zuTJ(~VBJMPDJ0P2WWSI0Kj^YwD(+7lsgp{^*GkaEZSCwQ7#Q$mOmu$2 z+d=?HFINP%FY)Q)owqoZp@q!-3kKb1!3I|ZKay!5f;UCd7i?t`Yh?`Q7qFOB>TndW z&b-^uB@-1JwwyHUpi@W|f6TrSvc9|eXWLHRwAD}gc;YqE%zJ6hbN0aupX@}F$@gbA z(9@R-yJV47&k#89Bx90P-YYFb%YpT*%c+_ufPr++@${B=JqNVzxT$W?&c2___S>0A zmyic|ce&11N3xe!&emki#!_t+;iu!%N4_eIfY1Wr3V@FI4x;Wc7i9!;doh#Gi9n1P zAWsdf#3t=u&IU@A$!o5I?S`Lrt!VAO?P$*MjaO>%^iJAUx1{vCRfA6GX)r%YJH!&i z&V`buyt~#iF+nEyQcrHLpIyLC>sDKp*OA`f-M3hk(?DdAymu_QLXkt&hkvgJZRa!e z{w_88fmrWdfR^%yaxD!#G8baZrx z6ESUYa%c;(d-!xrL4i!Bq(zM*#x}_&tJ{iW23qqW5vDVGUk}*ZP~eiD$0YOQRtQyW@e!P3 z)EitP3d1l|-yemdfYaZ|4a${#nDggX5~KAI!299tJ)jhYS?${JZXbjF`mSetsdo(a0vgV_Z05nr?2nB zWK2u^LY(7@9zbp1SZ=bohpLYVA1|@?F??l_5PTP#n5b^_TZ2M?oHFXO^vsUL0wu*1 z9%-l{j`Kzg# zwI|tjL6libB!RSI_DNk!?E#H|^`RYx$Cg#$4BA1# z2&^7PMaNME69tXO1#@`mSE1_!(o^|bU(qSmQ-VFh=PUAOccFo7#(32dVP7{E&b}|e zPzh-9z{18J9$?sF5fx44dv+Bdd$=aFg#vkGVHIAe>_BksF7&$qKdEPCmPP9p6}iTu z^#!mBFem2*98BC?%t^fstB&#GN*}Z{#Fms=q1~jYN3B5Bc_=FQMTlm!1Lb@yzG8Vq z?;+W*IWAj=Ki5c}ws`pfZxQEn>jiMgHp<>m>8?FrWB&10c?u{Tc$~c zpU-NSMLH5tXD2^iT7LSNx4zu2RC1>w0ZPNww_d94Sa_sfOgF9dJ$3xk-p=vV=c3FT z>C2EV4z6Xd4e;G9hgS7nDDO0aleIzBhuDC8%jVro6^C}oFPA%)Y?y5*iXu~#<)H_+ zOT!ZC5z6OlxhqMA0&l@c7T~0TIE;BFlS0~;^zL2C^UTaxrl04hf#=Lmh(3~YjbM<- z2C1s@CQgJAH9V3S1EhmRr*g@~1O`hXkm@)te7BFbldb!TO70@KZ-3Y%FMTP=&=DE$ zk{Wc}@#HFq#xtFpqIZ&nOy#L(U>dS88h8+lx&a$I9G7R1*$18<1}f{8_SfkWSnGtJ zp9G#i^!2?GpAz~_^TXksyRNl$L4^}74C?p|HMf2vgr3^qeW(1!WpQzdkTib050*d> zU#c=cE*8YW`zmBdRT-jw-A1ey)T-#3!~|bqY53a~@!tBkz)dc7 zH40xBQ#qs{Cr?58G;EYa;R|IMG_Q-&{`f%%t5q@p$g``&g;okkU%FIv12)T$)q+YM=4r(<7RINX8Z(` za}Nx2$cu(*kLVS%`EQdDl_Rvn2c}<`N}jAg!L=mT!6HS6O_)rp%i6Bq~j)3N_!U)LzM$tzlJIHNa2OjM~7PaizE*{*pn|w8x$O;Hc z0Z&2gS8Oz8(B)lQ*Dnk%GJ7-gleoII~^1rIbU$QDQ?*&s8^K~MW%cmcg6&23wa+7jV8_+xY__<$S$46oZ zC_Y)^ZmcZ##I6E~Is!ij4JlD~WlJ586Dp zRSHxi!1Nwg8`mI>_T8*K*hEB+uMUH5E#dnSxY+c~3qIg0{y?w?3M)_g2a4%m+5lIzw|AocHS!CfTF!GP>{>}4atso7w0kM-^c`F( z0nXE6O~B*(b_~<~WZJq9>M{*Z>kAzDPwb_j5kr(oUmtgR5!RuP-HUUG3&`mGoS$em zUu@VfM8zLAV5+=wf^$oyUa`*D>`Pa;xQ+m^z>d~lrV5&0?abeO_G$PG=tD6>xCHA^ z{(Bk7kFm&WE6=|p*>#id5)KJAyZq%D>&GXxb6^^yc57d<7P5G0*tQyYwX7R^us%#e66=xJ+E&P2!B ziA1ho6!84!l5Z*H*y{8PYxj+H2vPxJ`Yi! zh1>BJL`xQ}et=c)c?#WW@;LkBlVD`DtOw)XF7%y3yObfE`YhXjjUI z7T;1w*PXwbd^{|<04xf24brJ?fAFU5l&EeGD_Bhed5;q7OkdjF2 zV|Wi_;f2xVbfAQ8=y7fFI~EZQiH+kTq-OGd=Z#|PJ%>bS_x^D|%Eo-}>oC9ZtT17h zu(|8eV5CZQ+8k|bqN`_@s)e69nTCZ*j^FDyKy(^YMFx*0`}vVqkX>DV={(m+W}#ZK zEW(RV1vWLsvEW{Jm_RH2qkmvB`kd?R!$$iMGa2X*Gv#}eZoM&-}13&6ykcWkOLq(=3U zFpnVdykBdkJSFOTlw#cdlZfwm8jA-nwxX^Jto= z6e--!mjW{jQ;4|K0-P-5S@C$a_Ty~my}%W?f6c4V$){!b_^SpL85Tb5Xg7>u%Fw_1 zvoz7$#)ji@%)I2?UPANoa*|5=6g|@%g@hus=R#W%Lnql?-0SJhOA|JYUB-AVWsv9V zW=SP0$N!`}D9YzsnOm%a2}WrvqsKQWFK0U@yn`9H@hd?2yoTb&ayLs%At|eVaND~< zGFf25VRR8SpHY-SN$%a`1R&n}T(4(?Px6BVKkFrsjVae#c!RS}YN){Y zxy`k~sC6yazM)zQqS#XUGq&EMw1D!ly1VLPMeO%Pl7Io%C%W4S`6#NVPMTiHBQU~> zHUd@A`9_Mv&1iLC5xe^n5sgKlmp&&G<0e*(<_?^&9;4H!;$aqC*y(Qm(aKNL`7N|i0B^BLIfFb%C}B1fvwYK|@c!pLju+M6 zbP8x+Z_$@w@FZdmB>RcLoQ~+yVE1t6BRB77KeAajshyI^WuS_GAyHDlA!lwBFQa_tX0bAJTWSW;_Vl@ z{fdXx07Ne^4p#X{;ZIMAaz?{CfWuj!z{(9cLvWX|3h=%=FH@q^onpgE-FL7Dtr@|Z zu-Qb|3OyJ?Vi%ur^&GU@0SN$;U@h#3yKGc0OH_TgSRui_cDwd77C-Y0@6NBF{k03* z;tlB|Xp8qNiBy$NutJKH9VE?0@xS18xkuKJGd|7A|Gg6aK2_$k_a=S>>juu};Hel?Z&wjvh1iECr7v^#biHyc|>^;%sy>nLCd^S5r{hR-tG z@;4~cg_#@_l<%}Bs|64y#@~!Xe`659J=Jf=;(?TmH&+IVwbCoVrA*))fOSVo`tj^a z{_shc^#WuFtrSXqswK<}9t z298>M!(jd%q=dB>uCUPcWe)~1PKdDZZ-O%25uCj2;N5pSrc{_rDBR*jM#?vecxlg~lw+sa(pC-cIn)Ww2*BQyzM8hoc z_QrVDZoF{8Fe>U8)YnI+m2v2t#Ka?q8ED1}{uwOl3tnq_M9k5Q(==LF!d=TX^MtP& zs59aDxK>1mDVU29qFvS0V=lthQ+E(h#%d{no^xklE&*zFuS+>pM9^3C8j33y3`U?n zcT{{WR~^Cj`9t(n>0*M=oVO?S@lL+rD cIMoK#bK%(3MWPruyG1B zmOC&`1>_3J0nsmBbzsS)T}o6~7LW1VnbYLTPKmxrBWRY#o=tA!#+9V`N;NOc* zkx|iG$x@XmB4Up))$w1mi8b3Y^L`tACl8Y$_&dh-EyumV9ZU8t#tY)p0s8c5Tpyep zbEujU7;F?ROVBbSx+}kT@&8&P>WY*V#yPF;Ptyb4%p;fx!+zQ~1#P8es*@z+#XkOD ziqmnO#aQ29unV_#hSB+bR!AZ!2eXUmOm}ZI>ck zNepes|0ppEZte`KnJ_@gK<=@YYKxXP>${T$4c{4o)E9-5gk z7S8fvN&II%S3rwxgcat}0|sXEI+6zu_>%O*CAc!ZKoA7;aoT)-+V08`Y2dqd9Z+hZ z>ted~&k#*hgnn0W&?fZ6TszU%mWN+^NSmKWbIQnq4R`(&Moqqfd2j$rfkTym;S`D? zm@o#T%^Ov~_juVlzVv1lp7Vi#XHo-vv|P(_yGo^D11Yn#(DYv;3yB=KiEo*!`(^UB-FR{8@(M`lWAn==;r9bnz(3ubiK^j zPhOqfd9Gb*Jnuq=%@_HO^o|e@*>y`@@5osSMgAPnIGh3T<+1RB5x@o0+{dqCE;4C} z2at=xT#}!lagmYARoQ(ri=s3&)#f05x=7;P)iYzxV=k%4blGIrJcmx#m&Y0BteqOq zuNkuJuMm_WCV^Ym1v7wRf8~wJk_Fo7AGqGj=Co+>1*k8%ABl4)k=I*uWQFwz-@F>J zg_fHe?qAh&CFaEMEQ4=<%DwX()qT7h<6p+pE14}uZMp4BbcSSQ;@ zg4SFz0;R4fuhWxXR2pz?{Is4m(`YCMv-orAwzcBO3TpE>$>nzj%=`qImu4kR&8M!2 zP2&B{KEz}t2v_JV`5g|w<>qPpjEjkxc*wgcgq!@WHExnHfJzrNZ$yzZ(E+wjTLZR$ z5?zV@>H1^o{2NBr9xSq0k79-rKOC>Opjo3{n;5a*U2m<=vC96(sF=I))9)jVw~>$N z5{{F{{IWiblR#fAYmv+#STpnYUw$o7o#>Gf+tiY1-hOl2n8OKa1)GWpx^13+(oec6b ztyFo(6e??bvk4zXY?aqB2*L|SUgDS?#^FwH*Et3c_92F)&v8gjBTdAWgB7Yi`kLn? z$TxCAE@L1rVrq=yT0Un34;yLa@O-4SEQux@_m**a4j6a4!I-eZSwANh9f+DivWgM4Ja#=^?*~dtQ@gBqaGzHGxlaw`rs?>f zGdaA~R8?KIU^cN{pq0YxrQdP24AsWWPW0sezMc-dPy_!D%p7t*3 z-Z)5Yn7#`xM-s&Wo~P8NFV(V0P1>m^^9F0 z7)&ExJ3__y!)rmlNCp3;i47JKAwE8>b6fQH;aay8Qm7wuu>O)2l99zn4&jK^d?$5C z5-}KKv>&2hLlXsx8}A41F$nf1JX9vbWBG|vx~S^0kiQ#~OQ)L!rzU(xT3bZrWiPrn z2cZPKjC4knT$CXK`swI=fK))5wcff%zA_Is&ZFmHdJJpv*x2kfO0!}(qJnl7+L#5H zTR!V1On(uMV`=%m1Wvrec5=t|gZyBTnSnQtZ$FRsypf%V=G zm$M7lcUZZ95;N!GGk*lnf};_O(w^p58>=LEfyzl=QNIlr=%3eSvLgO-iHZTN?z?&e zD_&ZY2@e&e6jg;5?uDVfd;@vM`?PApUm8$w2`%NZxur-Ur+9&}w4NIXg_!f<@eaxC z56aBy^W5D>dU8EphH#}wmpr=;J_l(kcdA5m-?v5XOD{j6+%1ixZo@&GQ}I)}>h*9* zS@3FBw63_Oi4+5;?vIU(Cc*K*Ap6>{Sjt(9VBK)K&tQ-ej0F8Tn9eUHn#Iu6;hnJH z8oeBC(!AuG-Cm>{HvJxP{Bg##e)UNkhR%{^Uv~Yxdm^m5S+lM&sxQ9738>$LT2zEKCR5Ink#_qYUswl%%v`hi^5+cT%qbcaXP7G5L_Y} zMecj=wGh!k&jKr2UCi}}xyc=t)xNxOdGq;q4-5}YJa zSCn#yvTOruDTT{*)xIhr^6$P7?vRha!n13m(fmPKXT%-N!MC?@$=7i^f2Ab2;u+bAmsINK?Pz;b$yd6DHJ8sA-r1?A_jDP_K6VTNEbL9h#8$5X_j4X&W+RSQ8s%j0lP#`4`m{C z6Xsp$kdL&Im7t{NW7DeF;{5kq;0I<8SV!t0 zu+hE6l(ooY5R^Pxx5q+UlW?3}$0;7(=^yl*QJ^_AF{>?J)L43g*^++F=`v4={3f8CGZH3Nm zn#L+Rs{5YrRp-VFkHB3@;bbxsaplE^K11Uc6pecRi$oJDag(v^-@1fxD9e;B4@}=U8@w2Z9&KWK`mL^%zCI*MH9nD3BGE|rL{_mHL zJ}kXuhxmv%dMimYxN44#q>0LSXfNi@B^ zj}RRW*!0G}_l{0%5h~8LYwdJoDfKS$H;~t%tJ(g6Ao%Z#aP0inov#wI4%i)+3yMyM z2m_8^yU1F!4!)x_Sebv*wXhJ9R-)-Tw@FKxIKEyc2nF zZ}BBPbn>ur%xah*h>Xq!Eld=j)u}S24SfWPTah~`7lMYnidl=dJ`V0h0&}8`gHOo> z-H>+u^Qz57#@`s`d*6~YV?DohW4tN{SwkDXLvIw%{hW}JCg@BU>P@{(K<|P};$S(jYQiIoCEEp7_9|OD80_-fb`SNlu zq_YKso&m6(zVGSpM;wN}aKHQe`(de7Ez_jda|LBqXdRW5I#zW?3;J=(M&rdzSg zbQCvg26Fel?e6h5&WFD^&b&ZMK*C2QhpJrg3Nqd)x)PbtJeu$>U zz(V(Pg>)GemG?4RWqr&>f*9Vv6DN`H>3Q%2F?9*&pnE2r z#Gv6dwEY{E|J*{JM31yTRhT64lHfV<(-tWuLqFLjuEjKwRf{GMP5ljsl~cT%nq8I) zqu-R1hq!~wlH@lqIlNU9iu5bk9^tG~kn?MEr3X7YDiO1oJz#372%!(TQV?~0Ep^4b z{CauQP4TIxe&lF$<0@)uV35fy9}X%b294TmlwOgeWno?q_Q7%pGmQ7knRInii8Jo< zj;^inaeP}}^r-6*YFYK8u(Wd~W{syOex@;1|0EM);OU_}o@fV;CP|I!7Zo!@3L{GM zE|rPhcDB4POO_JE)1)k?G1|V9_~k6G6~SRBVAxeCM?r+@$m`)C04NMqmAZ_o7zE;t?=`(r77zWdOssX~DxJVoOTEIh4Z4G- z%dr-W0QZL7b@0Nc`3s59!nG?jL&yh>5>xQ{yMvB?Hx(6X9Cy|TcYBM+J&n34K#B}P-ucSEZ zv(dGT8>e*N8kBxT+?o@O#I2_(I_odQ>=c zb6S8+^Y%B2iiuHDo@77sTRcIlJ_*h(L!U_7t6+H&0q>;e(Q10eB+iW$O>rtLqo@YL zZ(woj{mF$u6(2n}(o0qdX?kMAF-P#{SE@~lZaK?~)`Ck^K@FQv#jNpK=*XneI?VTV zc!>ruH!noP((ASN&)s1e5@m4jwR=q^=nnBi1M9r3XdUBSFzlU{cpu7cFov27^fpk! zhCD0PXY1o7UaqS*EdF^{)Gfbo2}~u;;Bh9{jCpJ0(n%{woKlgl4=Gorn$KL2tmK07 z2FmzFEBD|@oy0sbi~FsnYq6Ae(AVV295qUvd@LXD#rTHov{yRP_EL0mS$t()j1vPgw|ECPf;_P;1(hzdZSnDxL2J-{W7~&_~4i;!mY<4S6}jk^+?& z#~=_3OKu_mWZvu<&$v7bj`VTxLVux5JelMkoF-vAVDsG_+*8L2BD{heM+3IN(`IkM9EQiEg7sX;xYN=(<6BCyj$sE4`k z{8(tq9eW2lafpYoSPB-;6@v=>8vT!R7{mVxov$*V{cqTL_2E{T>?f_nb2`Brw(7M) z8nr2)ckSvBfrUNa#UH47dVy|~fQqjhr4#_9ds$b+4foG#5A!dKXKvCpU^rewzw?1? zofaqDt-aEQwpTRo#pcAe>%YL|=q2gymJ*9GzE?agc}Y9Ht2sy=Na$c$PiqFPEtMiEabbwbYmFv0jq~NoN}P$l)Oy2 zEzTKI350{6EF&9#1WSH4l-e$;lD()fDxU!O0dNYs&1@mV0NK38GvTE^=0LMrOGOSL zliEc9m-}B}=7;&UG#=FVHw%Kd>Q!hS5GuOudv#wR*asi(wl)YYE{=1JC|EB)M#=!o zu4>>}+0_$lVo;S+_y?0(m)}lApeFEqx_Z>2$S@qoE9!rBPF;XK3@|wH4K%QJC@PkG zJO-xt(|ttY>iyPr1$#ChD$Y)fMQBQ|gu)Di9uzQsmpT=DLVUeg@y*YQ0sRs`@~C?+ zfo^_ctTWvlywHNpXK$ZE*K(kN(?$#m;r#cdoRPvmOT(Tjf2b1lzeDl2a(KYZ^fAlOOyP^9@2G)IQdSsEaxY7%C<3|tCC2Z^y+W4%)nz5Qc!Iy78)NjGpoi;2H;L z#YK8Oh{0!;Horszp<#Fg+?2vYm^h&yKe$mdhR(@)JI1PozL9_{M_{sV!37N`YL>vr z_QxxjlLJPzt>wn?9hf6zF7e|ghUy=!Ckev|q?k>@rf z*zXT$Ip6ilm6mkIIwK*{nj#Yq^|IK%`D)ny583#~3peGOqy2}?k!{79`pkxJ_R8}v ztw*b^0Ucy->WtQ`k0@n-hfnpK!>E?**?8-)G1PKT z<(*~;{JUL{p8(jT;WOfa&0u1X_}d1fV~ssP%5qaPNu*v-x51;}>h4hOgnxsnP((^7 z=!w^qw1E)`FqUY)-^y_;aI#DvPGSejv8&~x>V$gfXeT^qJlCBPMPNC#Jv`g<;##eEY>WjLeg&z*b{=3vpk4}y#qlISYtX@~(vD~c&@ixFd!aAIZ$1M5>GU8W91zS1Y-5T?1}Q*^1e*Or?}lYW!T9d4@DsrB z>;BNNedf%i9_f%#l5=WZ2kFF7l0B*9AvB@GHkYfzC}Mf={U9z_Cfa0vj6+0E345mw&qA9HHK(8k2=K#o zk~Hi?*xmSd(Me!2Zp-<8yHN@bT}PoEG}_a{w^#j`k1y7#V-wQm$yW`SFE)Q|jmWy- zXL|gHO32)d`S5YDyuv^L+5_t10Y9KDbmRX8aI&00-E`;|rr9wrxC{is40hwUZfjBd zu+Pp7Fd-NkAWRQflY>taO(G8+xKQGtAZoB5N5^>s3?j&gV6*Mzj4F$^Gf=_O!+3ge zJTv_q%RMj{=$lD$4)^@=1!?7iWw`(xQe55uQ3z!bcIF?+Nhz$LUWhP(w^3mGy4 zLgxcmoWP17nX2#`{zDt8m*DA<*xMH1&$a~71-64=4oAmdetNb;HPM^Md=83l^42dT zf2NLK2Dc^GEbt?J#jwoQ?dy9@##qyu$7SH07CR`yM9V-t@g8;<9{Pit-AJKPK=i?9 zF<;;rMfV02_mC!71t_=TwdgB*nQr9GUOiP6#tsj(0Kpjovq8c0`tiYLPZ=r~BF`5P zLMq+Y(zKN9)u0$I&k^jDjC-2kT;-uqC&C=qRea~db}aZ_kRm(5-*i&bq4E^WjAaX} zJ(xjf#M+6dgks6ImsYYemL>z#4?$2XIZ_OpO6#)mGCzrD8U6Mdg`nr^T+7UhD7_K5 zw}{Z3s^AjrX1PGZ7C+j$lHLuSkT4cdmCZ-TcyoQ|Y2tSuNSuj59e$hP&M8RH>1zvIQd=QoqjvNfA6;R{6lk{ z3H&d}+y?u=Gn+-n!Y93|MfCdx;6CWrM;ZEXj{K=P|6Kz`XL7WQa(>UEP>UU*Dzz~G z3(nLWP7Saemrm9O+Y+>DBr9_WT#aUhYP1^ZHIrF@WdQCeb~ev67IQ%5vAljruFcG zhd%~!wHod9*6QL5GNQY{T7Q@atO(Id%=SI4B#kWi@hmn~{EXDzgJRa>nMef?qBgvO z2#BQ`M@e#v#RyNTgpUaddk{!qYMtpX5%greYBOoCj(Bv?HwxUSm;@Xkl{b^=bXme%Vf8%g>fC4oTnoaiCFk;^sx9k`dx5ZWvvm@L?yAs{d4P9Q&SDjC z-4lUZDTzWgI|MyXthO8ugC}fSs~7}ZCv_wL4|jktxzv4lx&;I|90wv+4}%e)9W+gj5V7IsnnJ%aw78QZn5p zhz_`=H3;5=W+G@)S4og{viSuI3IRw!dR%-4Q&#Iixm2h|G;a$2O%Or@#LPmurni~p zVD;G%9R1@zw349Nkv3x&M4I*cvM!4XaMZBrsLN&d4vZbr2WeZ2&%Bzx6$ExL8e|g0 za|k5<(ENit^ymcEpsGI8whh6=n|n=@*DwKhcqE0BK(RicfP;2Z;8s26794oeM)or+ zP)I%tVYLi~nPFowyE#YaP`|`G^Ky%=jyERqI_XL+{00aCZK~S*9hk|Kn8O4z=IYKE z0uHPJUPDW!0v4!+S^)jPO*eb%_IW(7brC9?Uu|X@UD+9^k6pmI!tV}4b_LgkQ!8x) zI?twfrmRGu`8t7Mq!REG+e=8-oUSCG@3Z3gZ=`u&)RTc-4v^ykn7eq{8dG~FbCo^j zJF_e`6yG~b7AyM@OJ037^*&eH>mL2wrqFg6q%YY#Cby8Ki}BAZ(SPh(#U z-b8<(TRiaUKN6qde0BjA18~|dlD%L8Z&4VNWoG;{$B*8o*a5BmV3{hzX z7rz@G5{N(fR>052Vln9YVD;05l=Zb;rIYuEzH;C(Jg|G7qM{ zAxLf!?y=>w-!D&*e)N~%$1!KY-XW5w3QpR%rx|q$o0H{iL|mIP>18B?w1vaSHWS#I zh^ze5#23;@y*GfV@a%glF&dHy+qr ztp?}!3#$yw1uUC)O(Q=|;T_zl4R`L{KtsLfAMQeQ+_un(2K-f5IAHZ-mgp%eQa#u9 zqqM~Xe~%gK&-WlRUzr`|76Q=|+`iS+zQcDg&(+TdL;GEJ0;U9kwmpGO$b`**W#3#Z zsCxIOciv&&@4Op3#2^UUc&`D90W@{3w1phA0FRZK)gGWD&?-7ApTYOT+k!Cn5@w*6 z>JR7~21PZ%oRU*N>N~KL>?)u`aPzL8UU{4wYK)kln#I{hd@XV-pj! zVg27R2nXJQ%Z50r`ry?i7*`A_&sx0!nttPUSZntek6_~Nc6f+FX{rrLSXcyD_N7gV za@Dm9yHE!WgtYkjbO%@`64x+D-el5 zGZ|kl`0@C>HeD}>)*PfdPx)@dTu62Novg;Oi;UyK83ClTuQd$L-|cL}PIKmF)nr02Kf{ zy)b`AuTM_wp-y8T`v#WRmBCDzyKtc)rWJAt3gJ`qK~X{T@+Js}GRg9H!KHwqKL%#Q z0oS_$T>q4UM^`bM+XlGd;y37lw)de=#d`wIzw44*z@J7!TtQaaArSDvTpBe-^Kye? z;0lHz8B+v=bWQ%62-LIrNH?347$`4z3qd(HFMJrzlhBaQEdR^aGwIO>->^(H+2$5`=N20{pb^tv$tPqYh~=wInr#K zKaKuRnDOUUJ2yeJ8Lv;Iw-cy74|p8xmz~YCy!apP>A&l1T+SC6oee%WO*%4sqbimt zNYI!NAnk}wsUJKjsJ=^|#a_sI%NoA>@3p5E)wqAYc}*wd2B=EaY%<}IlVi|KZT0E0 zh=>?qvx*jBWif_T%4{R@OYjp!7iAkEIYRO;I84akpjThmsuMHBMNGZqe$vyu^Qqmpd8r!!226ye$h|7a0IPbU~#@C zCNq$;J>K6?tmL~U`%A?YBIHrYPxUgsVJPl;5VIT!ivUjHU&PlJRDo= zH{6*FyVH?r^1UIeV&nN=u`GUbg`)>6+UxDGy@q z70xLBPm~@i?l?hJD~}@Kl^#ZO=WC;F<4UA8 zU_ZayI?cfo5)|~*uj^p)KkCykM3khJR5Z{bwRvYa+of|FqCCvX;fyG-lTXvIe%2oU&b*_zO8O)vua%hD;W1RK z-e?}I|I|S0!zwDZ{JcuD5L7BeYMi;Xf@x*OB}!21tlqixfv>|~pM*$;%yP-{Vv%dH zcYx0LAGOdZI>`T4wFYFm{{odOkH%S+atq{G@1>O(PK>OjR_IV19##Z7cGToCu>Ig1 zdlDhmS6RfB@8D9Z5We`kJ9l-XQ$so}rBG~xThSXRialtxp$`}1cyVPh@W#Cfk6;%` z#!}t>Op!6dz*%iJgSL#1YIlp2LZ>V@DZMdB}+$O)6hU#W~E<8 zrAX+!z1zn0BTPYUC5O$Q9yE@Q*V=S&fAdsvvd(*}5|sv};#E_T@5ixPcry8(Ty&wCyP?cZ!^g_s`TKcJxA1#yB={DV$G0-MJ)CTWfx zsUOduXvjUE^lFaAEcR6u$V~HBSN9ksQz6E?jYbueF`=!yZ1@I8THePXm8-%9YUt%L z*B{uW8I?=0;F+fre~BYqnG!y0x0giAB-5}zP4zTQWPHP`QF~wEIY*Kuh;S6{WJ|H? z^RA%2Fkg{e+}G!;mC zbcp6*c<-u(82FPWtwNcDvcONuh%``&DW^xOW4aj1$d5#b{wfZcIv(Lgw_wd(1VJj> z|L5D`cfBq04*T#8?iQk50?G8rwEvSgD1-tU7-A4_nt>|W}wV;Vfz+=bkhT^mkEPWfD_!`3ahfB zd10>!>MT3uX-X;KWtbp|D23ZF&I!Vtuk{l$l8@r}PEyom$=56_EGhl4T&mBzW>~?T z$(BFMDKcMk@J_E5gInelJyNb$wQiC5Et|T$S%kHq=&w2dBWAw~Zu_XHmqRjt1(fEP zQhcl(*?DQD^DbA(a-=~J>Y6a^Uxmt`>*dEA*WOj){PPKT3}E;^g4hC-QvZ~;LhYY$ zA4BTJ4Km_f%!Zb`rlcT1e^g%7RyKBUOsCk{pXtt?cPvg%MJej{o>r@9SPQ#7d@`P9v(4qwa{AMEo+>Rhzra@luPCZR5vn+c;sdvqO$dyShWkXvI-rU6}G zpizs%Um-aEbr%75IBLMxzSuSJZ;}0W`K_W5r4Z%Lla*SkT`3ASgZ*~Rbj}cq}nM8sO zD7TSx{KrBK+t(vNA&^-VE7{l-o#0h*hm2pQo_}iP9>y%?qM-V>$k9@=SP<6j+;}$Q z{oyO9n?bxC&LJq~jt38-9xPA6j(m?)?iA?+kS@NR14M&_a}^K(In$p!`T| z%pK4+kStb4kmhepmVW>O@zE!akPkw*^Yy&%pq2^M4;Z#gF|>OHY8}84LA6w&xI_G| z?rx$pjIS*Nkl)|8a8Uo3LG>m|ez*dfx&Ql1F%WYuK0_yGG{ls`yw7-R&`A8@Ex0G# z3VrB}?h40Oi1yzUF;1ckM&p_mqp$l05;-?QpFoZBhXI81g1j_^OZzu8N85lH5OyO2 z`LYe~2C{)ddTBQssANJBN>SSjtw>(t$IjcNh|h5rp4^czU#deJHlf=j zmNde-Lx|yn3!9LTBmol`gj$cR0UtZ|Z(}bs&I2z#V`q8zT4x*vd>8aZ&WP{;29m(=FC1dVMo1~=SHdDAp+!9= zOwhN##dRfOCjwTZ^Xn%2MK(JrHJ+@glgrNYqL7#x}@u&T-EU|cbJ(ZaasQU?F`y&rRLyLj}vPVf1ON~OXlamNMY-W#@GCXN%Ec{-zxQ>ST&|CG+{-K=7GX?Le0frxiAdiL**a*Eqlfl= z=Uk%Om*`HFYm1;0JOv7Rh`38l%~2LydwfhxCsvEskDRUFpk0xL&sT1B3;Mm&S3ei1 z!o%8hVS?XnU&|en@5K<80?RQ;NWgj4^_*7)mx>Xt5=!}Cpa;q}P{g?YMBo$n*&Df6 zOmew)>}uvNQDO2cCs%(r`oQbAzX3-WdlRT?5Y@DZun8=NZ4|^`&wwm>HlBb~@CI3| zm=R}ReCOXAE)_xIs)IW zoO2YAoIyoUR8T}f!X{?~1j$iQ5F-Y16crG`gn}ZHOb7}n(sNgxs_t{U@92m7aK|_g zr%DU{z5nl9Va~bcdbhSd5%ewl2lCS(a0p;eT%=c9H-WJ5zt7)SWM4b84S7%M~` z%d5DZAoJG0)!<9t3B(xSCF<)}P@Z7cqE8L-8$3@_?3EOp=5sivm?QmyMN@KuDIYN) z-J8q>ATHQ>yFjrhDFrRigHb#%Hw2FAf#0F%EXNQsW{*<0D6_IqUzcnG}3wbehy{z2nhZ&S-$XC=A!H%ys8 zSo2|g45-uctE7@cGGrs&7{*8ax&P#%{e~CU>3RKUZ5zw^e1bXHac_uH1$=9pM9UDs z*r*6$?Nx9SY8aw82Yeewn89b46V1kyg9U+yvq{>tov+wQ{{g}30UWA#A9-nEKzmcyns>yS|xfPB2(4=`1Pe#s1$%7?lFFsypotnUOI;N@sIPO zsZ6Dfzq&hNs$3QXJQKfflW5TkuoMqX#OHyXtlawEB>N0ggjpca(eCl@XaZtgLjUJV zMBgD`!jK6WWr@-EuP9C1wfI+H zBzOi3s z>l*>KMo0`#7Qh_9X08=Z5mmt1u|?hyNeT5gxZ@%y0ihaL1a*(k0@C?6+&%S@IomY` zF31#Pu!1;b(0Z;o0?+~P-%^!1hBLA8@lcrG0`dpfgxfgF02(j~t^j@sRf9ksps5f= z-^V=5M4ME+sDs!2f>-8kr{Or{vd5_^zKA5G$eQ66~t_cf+a7l0_}-`R-&nzcxcFt)s<)iSldGVV$|e*)TZ zaFfSdhWPQv>ncPItcXE+2}D52>4Ntg066Edo>_?jL}M2$B9E?o09=$WAcB2xSoP_P#!YQ=}(w8u9BM zp!0@wreqdt7XbTKas&tlK?y4 za9yJV@t~4+=|A%tF6`mi+JXlXW$ymNfW_!wV8E$rd@jzIq;dm1elET-p!fJ_O*qo< zR3dWSkRXaDCMLr8-x#?6HxiT#+u7N3Q4Anb>LslfZ$c>6L*&YZ4bs6aA>LmA1PoaY z+HF&C4FIEnoj=x~W|yvM{dxo00YCBz@IRs;r#G$j!~%Pdq*X;9P(r54*0K}Og`nc2 zhu<5b0s_am?~nFuqvZ?&27{O51FRJ9YBusQF*)Q&KEs)vsAPTu!osi*FpvZ`xhwlS zPw}c86UNu0*m`^${a8UK0(*&Hw=fISO{!ZnJv|$>wRLaeV2p>nZ!l{a~@xE=W5p!GR4_ z-O~;4T~5!DT(M(d+o@b?+C)D1FZI_DUB-|l0m?prCIS!TJBe%T(Ff}sy%b0XhWx=2 za#}*01vsdo*h%{t=o|0Hh52^4{bKPh78KQ7YYcpU~T zu98u|zy@>@OUVQRQDd(3SL~a#0t3OKK!S7&R}3e zFD8hpLgfiU3Hk#y&;nSDlehZ_cbrwm=ShRV2GE#(PEy4{1m_y?4|748@K^ubXQ zhz=vXd6-<=EjSrSxaby966V3D-_XMNv z6^9B4*8}D}4=;-&1tVCjoYRSmj|WXuhZxdAvhbq$BXM6IvCpofc>(8$Te$NsG#1KY~n9I)T zr;BT4p%6k@v4l?uLq(4BD6@#OxqR&GdQ6h&4YH^a9t#;KISqUIK&9TbwCM)OO~{33XP`7vNn?U)%!4!z(m@xGTh@4V7^-CK9uu zy4#0fk4QVZF$|(DTR@vaRm%}Wji2WX)G2@St|LnS2DVaOJ3i~>X+DZEB>=7{ZQQMuzWiOYx8lnzhCetLa}NR<-#ad=N(gw0Sc z9u2Vry0hEcSI@D@86jA}0=NhvZ^|f>6gNKtrbEr%53AHSQt559qmURNm#ndG@*o~N zhvpeLBU(ajGpZcE`jrT_KtY4(^7I7CTdN8KIq1-Tl3H`Ks=mE*+!r|n-yzSw)7O)$ z-bVk1Wm&8p7#U&?0Y!$4a1l?Wlfb+aRf|=95lSbhUcpqEX`?=T3oSv8qQ8|qQEQ4) z0-nq~usN5PKL&!AvjR+1GNph`o^o&*#Y2sXgqXh&H++*+^a=kYSv9^p8pILZD{o29 znG9^CGiAcZQx!E1f;n*D^iBhkE6&TVb7e&BKV13}Y5Eq>NJXqp#iMMq_=xHy;PH2~ z6L_XT#uCuPkSkQ}U*qn8_#6qj*`u3!;tzk;@QJw*Z*X!yNo!mSVq#+jsu8U4311<6 zrm6o?MzgTq%`c>voTuoYspl}w)-)@4e z0aYD1C}OA46!%A!Q&}m!7N#FKUg#~`1=>YQFzEf?hmE8)cvZ1$_^8Ai{7{$4t9A)^ zB7Gg5+3H)9V6Dd|7|Y+W$qcbse#fZ}jSq+*MzBgrvUj3LhV9SDoDH@LjT99`>`Lx} z42iKUSRf{~21OZf0A^(_sj_}EVhR8@R2=S{Uc0|1m_(#2r>qSSP*24l@v?*;DYZMH2^{)zLUP+w%bStQfFSY0yF_l&31r+V zNqg|mD__O%B+G@l6D?E6ep<9{i>NR@pwKcFg&^~8Go!@SnYo|WMu{!zZd+mogSbq; z*E}_CW5$A@ynLqEi6NbznhYfB^6cWj-|mpJuAY9_WpMm}WAw~D>iaD>qwTn**`m9b zh!fl9N;dR0@(r_=LYZ}S^_TZJAFeIEJ3TVw_o2s+cndGH;>{&<{*48EY?(Uk5E{_^x4nn{~ zdF90a-h6lEzvEcqm`ncM`6g%|wfSq9ot$wGB^orGmCY!*EOj+tOHL0TAXnli2`2pH z`tjGiF7cnzh-0o!qQHu|)q-Vc|ME%^`YPE?ay5!*QbBww<*r|}|M3y{@8fle8~@qk zzkg3?cT>+HB6ddnD?;?&_ILh2#;xP;Pc0GsBw&Bx1bp?r?7cvbzl>J?GB45Nd3QGM zY+uf`e?&$40vrV2uMQI4Iv? z;IVS;>u92qivnCVU85NFf>CHpRz{QvQ1$^qH` zes|@#9tu7GJvsS*d#3-FPW0c|;Y*oqD>jt>b_&Ev{(q(FGWq}8pRGB*2@+txfByn@ z5kb8fS{qOL{paOUk_54L2!PcpPbOVZ#C?RD5BUYg`3q#9Ymdotn9mU>;x6@tIFs$E zevI-pCsklKg<`dkm`;cPl2$2At^W8fx^`;~RL7QC>15++a-~nm6EaO|sr@dGz~ZJY z{7!rH(-%}}1j6K;(wPi5)f1-?HCOs_MW>cDsj_Xdp1&9Ni;h07Rc1%DI(X?iId2el zW2syuIBF;3V9`h7wb+e+a9yzWQ9>;PQa78Oy2D zl#XGwZK1XfBOYl5LN6*Obkvy?HO=#jzV3CjXv+(95-$A18Gk_4s?$w)=jUJ=J)_KW zPluXphC&xhmxkXp(L1gxkHOa~wEIai(UoWMyx^%Wm4g{UuLhV3-;dqP)l4SmNj@D0 zW23D{p51NHlOkAtWYghZ&#=9bAp39Y+okbW5cyp>J{f1+^6t&I$ddF zeN;AK!U1Ju)I%AkX~kDas6zNs^my6WDi65v+iPS+%Lhselx7bg#o8(b{Zx8Ft|Q>8 zsoYb_A)il!NH;V7sK|~)g?k0;iZ_|2O!jF6kB~0whuWtCMzGzdoc*F*QNVr)MSXtb z4EF)2Wpc@seanA1(-%#ChT7WprX@y8l?ape(g(8l1z%pU^c&x@ZjpbWXiFyJ8NUt< z3x0lSN9lmC^K8FL==WI(*lXuUhdW#n^V@wwIbB1(X1{^sqPwHBwlJxkR=trY1KqIx z&5_5t@`+6nHe|yKGgC#BSLa1qzQh}h8b_TdV{s`7welc6parkDLQq?Fj}l*(<6o0Q9I zlJDj|YLEHoaAwKTf0rxL#xo1@zAbg2Z zX;_2t^0}UK$%Pt6`5w=SX@(n$z38l>%aB_R z1^JKc76ZM#O*$c8Q&phGM7iyjXn%X=0969g-Enn-mBbOt z9JpRw4fr57Bu;kSqt9T7TWDL9!SRz@PHb(@mkW|&7vN4kb5_tVTGU|6PTCLf`Vjw6 z%NKP**Rf$skvF@d@0E$V@+xKxN0tqp+usDUc&o>IXV=6ln3?@9&!~|`m$PY~6Fz@( zPd+!lZkRCZdSxizDkT*@6a%z|CC-$8n_f(@sViJk-T~v2 zoR*YMBTq9!zui%S^}WA6cub~!^2Jyh4sgi|yX<*F8luf#6p-R?W*B+k{cz{GxzP1B zjW8o``$3p8A(7#K#8Sfg^ZLT_!9?+$2iTr{t7hw3622|?qw}uFrO^%Y&?9`RsqOm% zr7e%YHfkXxCyz?)JKbGcBHDLn+cC=g&^m!K3(`5&*Q{?}3w?&33=a^tljcE3AI@>n?*TAHw7j^wcO80E2h?|k*#(?q)` znA9Tpw6&zNb>vLw0#_@F$jP#dO|QP7IiET^zM;n!a9hkrzp2eJ$;EMya?PdLzPysM zB7;IWG{;^&N>3o2QJvLL?kBbR9vKrUI?a)6(RRkXvy*IeVOCEM&1kQjUkMv5;Um>& zq|4B7<@Zl(YL%p+6};FtIW61GO|xbs{z!G&P(m!(?zY&ju_3Z3+WgeQ>E6Ys`kGQP zjnfr52X{vgXOIeOycaBuqfa<3QL??DoH^k3i*cz+R!hzNma8_G)%k{>vQSI6)i^xc zx;^wv%6f$y2b)3q`QXBpwubNq@k(vx+21OY2{e=yr*_9Gj*HuDv-!x@_4LWMU$It~ z@-9^V*P9_0dHtY>m1KU$(Hylk<1@SYdLi=RdTZ-z;hJ*gl(NX`pPRSuna8*AN12EO z6_APul*qfB0O~BcKyTI%s(Qp(R^l};V*@7%g)@3%fF1p%GIY5&=LLl`O}ur`hWUVH zQ4HR5RwgxaY`A@=^Id*f&X6{4o&DU`#s|0Qt}aBeZytw=85q{Lb=Hg@U@4{U5-e`t6u6O8efvd4&K174R(i{eCbldAAL0cA ztcuCDy+l)$XMOTIeB26O+*nNGQIQ9DgeE7fd%sOF*~+uMvJEZP{H01&38D&d-F}~i z)tCq;I-=mX2!lPkBNOUd+;$bIp#jK)X!VtYLbTVjQO-HztEqmPGE`hY0DB(h+C7X8 zNI51fpq*%pX%eSh^f6TYezdHFz_6-t`)j$2!ewI8qYY!Yo1R z74u5;Sl`X#ak0$gvEcnDDEg9^n>-r&r+N^gK&AIieoE#(#U7{I!^f7OXtU3epqv4& z&;r&2Uo`?iAf{EivTSno7i_5+KdtW*xIOdObeqZrVI=OlDl$v)2SiXen@YY9y`kL| zr-X)3+cu3E0Arw7!U4?-&J$NA)!8nf@1s#%y7GzjX&r}p;!w>=c$Z_`h&VMj7izNc zF?L-f`1_3M7-KMhvn<+fpC~SspvlOCR9*L}gSE?4)iS^>#A1Z_QL(!E{IL3=?-l&m zgb_uU!20E@e$o3!ekTl>8$&2`7U%&a>GU)-7XfAhO@_%@)F6NkV0t%T+xq!t_n{vh z>BEt=y)(c$-t|izY(Wc8gx+0j+9$5>XHs+*pyQISz_S54p3M1B7qmy1SW-7JRJiY9 z?t6XRpM}C}>-Tx3BqhaRnF~!nt4%NVESf-542GMBlE?h;u0)NGyi_p9i+xuI?(z*_ zQv6X?iF0LB{0wIyc|8?3CIB&`g%xz4iJ4SkcK-a*jRlE!2{T5rdbzJb(BvJmn{55F zBD2$2vc`5X*t+(qt!g@Y2(pGSU-uszXH=l^h7HeUFlWeBmlvzyCQsjp&_+z{?2pm=CZA}^?UsvQ&gXY1&UWBF3uhnYXUF{ zm!?nq8A7D*Kw;j!E6Go9a~rz0qtbETP4DUaftCX}UY9*5Q!bZrMCu?~C~m{GLXhn(Tdv#A3$`R9c5}O7&y%>9l={zNb8;PU|!QkT}L# z?{fbo3eU6IA4JGk4pWfkQJwr|DqU_rFwnrM2IPE-*8en*n9d z`hHU!W%ru5S4JcN_pur=*TdCm#agq}x+7S9Yvm=<%&K#z?to(fwlmbb{o+4($?xF5 z0F%E_iOe&JcTM!gO$(F*01AT$+GXG92E92(kP2jd(4GapJL$`cF4w9HhP z%n)Q|->Fj%n@ja|>P3MOI`?PoBT`E5ua7wTeF)Ql z75(GpMMFBlB>Y@LYSfY?l1Cm(s$?cf3~d$58qV9sn#@ z1lTk1JVbyWj0y7~%Td{f0NO{KzFit$j4e$aeUDd)HO|f+#v{aW?Hoxq?J5JBI*0QliT z{33=&&9jZ`jd>*v2&!}mi6Kd*hX=n|0nGJrqVr_fJ${3J#^aMf7J+pINg||lfz&O* z4m24M?V3_;lS2t&SDz;i%jw-@+kONDGtmuT{A`Tp-iXYaEVb zj&9;iKAcf-Yov$(CN9&l>U0H}tZog1^jf~yy8Ep5$AG_sn|_m@Rq&A zu@u-}lu-8lELd~15WoTc3vu~982T>UFET>;9oWw%qPzQ*r#%}%H4i*WWLT-j(u``8 z-3^Cysy~;19X;(+v7Nfv0V6t{ReAf*s;Y1o9hhtC9e&vT^hrGJ!`re#p8p~af5TTX ze+kG84}|qEd3^gyB+Mc0!%W81!EFJ$+oCGi4n`Lq9kr-`r=}hoBuuzbcz#zjZ!meT zjZ3o+9d8Qn-rb>2HBm;xDeNA-vcLkPK zEsUoa%<3ydQeU^#_M#U2gh{;Rg>m!ar6w~q$dBiKy?P5$D@5$;h4GB5cY^q-y|Yz- z(&JE|6k)n(T^!z@Q6%DUKa1a$yTw?8jzv+Ez5%Sz>Qs`<12;W`r$rvJDI}irwgc(u zO4$^3cfw;XNFCS(eFs>Y^gxJDK0ceWdzIv@#L!_XWB%Pd( zj(k{V+8_cFY*2y#k9(nPlS8(Pa6&dE9wr5h7oCOz*0I&e#0OBr1=Ga%|@28B*q?6=U*(&aVFL@9?kD~DD^Y6u08 z6wNVDi7nG&E}qiNZcgozQ9fk0OavqF6{#FDZ}3Gc@z{vCzM`9*kf16geas)d&TNk< zPx>ez_w#H;6C;B9`9_EIG@2JFYVMq5k-Q<1BX6ahFZcM!9*q!d$FgNI(<`Z_{#x|& zwXV53K;SVtEZXEnl4!^(r4B*~3L~LUWYqP%_YMzPbcl?pbKvC!pBxJEI>J1!XtC7V zIlPtrT7^P(NoljJ>FaFrhc@&^6q{tZE$nr*q(co~-9(zGq=ezufN9;6KI89#S0=LW z@JY~J5?Ub%(7NIFekf^ag0V)1ce!hEG}tkUtnR@QSGo21sjo_FFg8CSBQrZJVdA|f zXTa-2U!K{s+woVl%ho&+xg?DK_pTjMzVx)C@duMz)Pjo=K0@QO3@5`rrL?W7GMazD zR)K!li)X>uJzVKy!^2-g$IHlrk@pISR-tzgWSQb5d4vFDnl}N?8s#z{M(+9N&Jpz- zkl|nud-L53ym~0l+>}+uzyM)Ks;Twl0O%m zK0g;S5y^O%;N8d&C$f!GlrDBN&iDk(0yZFRWRduKp&(^B^@pTRI;W20;tM=lQ?6GS$ycCz24$Rm|f z=JNPMM0aa%g7x9FHrOLt6l=^niZ8p4$Z81)QgH1FA`p*I>0L3IA>rjT)-YK< z4FXKiy1#;-dX186@5#eZ%jrtHjeZ`fq|q)fjmV%*k6hst&3ZV55j9=G=I>-CDI3G_ zv0cCA$x$YF>_ALR+SxWcOHTzl&NG#hJQ%8d5W(j+%Xp&pl$Y;>Yfsjk#l1w^{8)V3 zbeyu0-6b2kO!C^yj6c*t5Xo3oP&$5s-v;sy?beIUl(mt64)5AMgBxrwDeWdoenjb^ znh4nqhfjV7!5fZU{B_@r)_{p7j(l(n(bx%jEcq#xq|@F8ndYE(vP!?|0d$%;hftAB zL!U#={Y^^p!@e*U8;xOqe+={)o51&n&t-!2<+2SZXoj)VUJZrLZy;6>z(@ zX9uI@L9lx#K&o~JPX43mn3F*R)342+|vc2rI zXQ(%tb{f-1z4Wlx%k836^Y0M87NSC!jkT@w%uf~X7OjW(=ErL*%Hb9a-pjoc&reM& z$e4zj6?h9nh!H~P5q zzJj&5A^lD7U7Vt2@NQf!$q~P^w@1^CWK-LVOhmDjfJMx5X=G1QsCv(_RFEyAnaXm1fx5aJVLAP*cy$Nf% zKKo9(%`cl9tss{Tpi1*4PV#cee2x|+@mE!E;=368l$7p;(CEii>JZK&#~&X_wH{-0 zo@IDdde3OBXPC^OT>Wg5--|<5c}+o%*BqBiE9A2t2j!VA_EdZ)KlSt8=a$5&X1n1i zp;+4utY33C5w77-96z;nuN&FPnB0^>N>zIo_Q9hDAtvsOdhPT7azp=Xok6aztQ@BN zAZ9Dn5~E6tkDGow7M@VGRU~X0-PUy)#znptR>sTCtYrfk7L*m!EL6}_X|;Ao{t10E z9ggLQgpK*jSE2g78#tk=GxZHh32N6nnC2sNobahozM$iW4qA9xR9;wBP*R(YHc>Gs zRlbz<8D+nLXYjovYDeF7qE}lGyV%$J%N!v9C8_24zN|OuHR9Jp0Cly_#tPcW0JKqRFkMb+`?!yKK7WiPm1l;MORVOrtExK+`St$!p=5iL% za2T>m+EA7=Juf#$lW(u_JgY_s`UtG`_yJ3_ zVVD*qm{LwN>V_DZ>OCTHyTMp4KaXbZ=>b&5T>Ar9D&`6(gcQPQN6-#JO^h{n+0yXX6LIFDU4i3t=>lNg%Empjc!xaL%=5v`Q)vYzo0?KazU zt5e%1_+=ZQ=jCS>O)*sP>eD!Um3;0;xr^LO?1>!0lB0EAc`wRWHz7xjiN>ty2s>#m zBg;U9K)kL2;j&w1zW2&C+2=Yj1JElB=I-47D~XatJL9|uqLfH6mwRI#K{SM}o`p)R zl*h5@Hz)6z7|ZWQZG&z3XKg+6b0n;1pb#wAC-I+2Ixv$>D4?d*_w?;CESJ2SX`5Il z?fFS`+B&M#JxJOP(tzt8i-$#W$w(_$P3@xqwfUwD7iw=gWK(A|2ho!Edb)OYYAvdW z{T^MEEtuAqH0H1zEMiwv=vMXW;ZioOi4?EWdzHTPD@v;4qb0(;O!;C4>5;L$1kR%< z%(;%)+jAZRywWp9+-2VE)gLYA!0brsN8n=WHt^2@?0_JXX~+cauMBQ5AR*Bc0JS>x zd`>EhxZ%J`TQaMXJ$EQnU+%Lb&Wxal<5arLO7oN~mIxem!z*jxYgBAhpe*JHR6UBC zDUq}u&JLx!%Two4f294mlP2!OLpyJ0`KkKRCv~?sMWk_SZg7x$~a!U`vR^tCY28_xsTqI1J)$ssM#_pFHf& z>Lyk;54gnMKbwRl=B5dqaq0sL(v_M*RP~ThU3-fu-FB;KTEjwRxqKi277Be`=mvIe$(N%DwDsbon%6q-#9-$x`@@ z$w{#TF-y1Nb>?n`7e{Q=Z%_s3>y_D(!iQXi?F6AMLtYh@Y zml~BAyHCHT^`f)h_JIRs%PwbCcCmvca3`CMBN=498#z#5v6F$K<3MJ?VD0`SlYJ}$ zigNZw4xZAos@`h?DgE9fFER(|jXb#KpC+#KOI=P)`3-N1rZ_p}j{>@&#=NBmIhy14 z`6m_Se?z@}+{r@oQBJ4?ncZp1>rc7(7s#ytq0av&JA^tj=6Gy^J0&UQJvQE{9}=$P zyP`uyQHiNR7hW5FFHDOvn(nucp!skA@Uy=s@wBCCYhAK2FK+)@9qRHyAJY5n{@)7j z&}Xe}o=Sp(;elnTz_*!}ruMwg2H3}Ul#k9*n|e#&9^KVh=$kq(>T_$7xO-vdNsih5 zIh=YLncD@JMBUj;84cPr{3@QGZ=9Anw?;EXZKr1#BBTZB-NgvLn8_5kD*RkroE}j` zpYDsBuipOYv7b$PAwtnq_S%(1{UCBy7S z1thMkFj-^X!qUf7J8~hSWCroMJ#J9+ggx8xDts%>0=WD9zz1q2`y4lyOsX6%COw~D z8Jx;N{7VkoA;AiV*9phCVSkgBVpVwMAvOlE=!|v zK=N=QzO-v;;vSmU-ZrTO&!MNVjI2y@=<`a&|E*Rv(4c!cVySWRIwqv|u&Z5+9+tpJ z$H(H~!l-7)>lej!Ujd21)cN^=c#83*gbzWOUcav z!lGuAT*fZ%#)#*8rDX?G3-J~gen3U|fir7;)`Z*#66i6=uTNqeXo&snyWTXk?7`A$ zT0KX&qj;>wc5a$#y1+B|>qPCl4LozMYw1*99^hoiU z3(jrFDqYtdAy#L1b7pF9akcWCS4vp!{^70-9Daw8f;Vl<`!XP`v{}^Be1qLmr>~95 z(QI6+$XD`7H`SLx>8rcdxw~wq7;`l>i6zDPW|kMcHP`WwXpNe7IE+Xu+@x3;&bKm& zvNw8hXVD|3glhK_7!2JM+;Q0>KpKO^UXD$MD*j9zQok~&p(5=s+PlZMB%&=bEAfSU z>TK+mOJ`9T{8fn$I@& z$#MV6$V&g7QrS%=M}2y{#3G?~n&10iQ<<`u%A-ckZ6wYLL=FtYctVkkv5ptxdQmt=Nuphh;z^2-q7(yM~;aLnY zN-YR$<)o!~N@UGnyl$bXpD$t%e}(IyK9$OpVQ)2ng!B!=UOq50q$D z$D4l>tKf$dt+N#$M#_-vEn<)(TKs;`PO#6-BO#R!TDqYW5+cjaEX{1v)l)(Lu_BfG zRCCYw$~G&81e?t6p?}@|J@`2YV!K%WWI`Gh@a|n4&5mpr1IBsAEkMG3ttQi~-tUmo zv*i^DvW3#x@ZLU1&BJbKQ2y)}D`uQ#be_C`;U`{(OKw&Nj6;7UmiQ%knl5Ti>T@et zZdF&7mNvPx=ZymWSv0G`iU`PtF>&vA>GKr7S?i_U(GAi^`>@8Wafuc|D^#0Sy9mXP zh+(D|W`joIjzl}mp=H2g#(1A`&fTy@lwRPg8|&7L;UOHbX{)%f&kE83e!-~NGN z#La+b)VKIrcYG<9leaQekz`_#_bTv=fv6OgJ0wLgTcJ!y;H1(eA~+^SL($}Ujz&~E z{#tqZ`+KG(w1*`;bRphyTP%>N*Z-;=qpeM1$?7v2b9;4`GhH^}+r0kekfVe!Cc-bX zWK&_o$Q18J1#3Hu7~#z`#fB^f1AP>Qs|t!w{FZaMU-+aKRFc0r0ikq9M0PSk21IO6eL6 z$5P^T2Z}-C@W*u};zO$Iz2f!?Xzn~4rFR3*%=7DTWUawVz(A1wt7WKUbvJnQalGd; z)&W&`>oInCJS7p*D(^*P^Azbgkxlg9gaOFJp0DR5RUqBJ43zng4gbwkzLdtXDRyZ8N2J+C zaGX55>sXa{$|@@x|i#dXvaC7B%W)hje{bOcdkD@d1CXEgv-i zPRJ3iSbFVZXS+x&6E2XdpCM!tEd*aw_f=m2=cBM|jPGU(tWM(~?G`xG0Ix2az?au0 z_L9F(r_hlrHIbVGoGVM6O2P&=-%AC^q&_E~|G^O7*x4O!J1*V3b`0c;Ce~C&q4^q* zr77vjmauL-A3;XdJsbN>i`&2OHx$)ChIWpn=NJU7HeLiD6x#t!`V?uC`q%285|Hf+ z>0%x?{Zixy%X(N$nWXFrFmyAg-=P-*J~vh3%&BaCGN zL3~RM5TBB)6?(4s%eypD_0n|6-IZ+QTebQ=;a=G!*{3O|CuV;Dw!Qn`?p+G&p5a+a zraVOEsNZ>V?8E-D^tJ&3>$^*p{Es&J9;w>^{5#1+*^c}H;@Pt7$iKLyyR_l_LBWJ zs1oQD-sLd~T@}I1U+wOJJ%Z*h9KVkTbomQiOF)0EA zNsk8FouC(oT0bU&K)V5}?n6BzAbL@$u%8D5D+1UvCahl3W2YjhuxncKic|f!DPKwm z{t(jWek@Ju5o+VH$T<(!ZDDzRWfs^We#ya5B|^NKr4aIa1=SPEI1F*AVFWc<<9L5{ zLVfS;(D`lK2nU*W`;6|~^4`0^o)dpTIK?)je-y*-k#+`mgQiHhMa?f2l3QQ4+i3%D zPCj>ma&5}3J1?gW=v-9v>c{+8#vP3%H2RIL5yh#x9bTn;mszQ%S3Qjl%f^_N94U1Q&eKBmuSfIT(jF*HKGs58#YfPJf?=XH1AOqKXkOeR`a9a}T*MQ=CUyy3eC~7-wmb z_9+sYf?K+;1MvZBLH*Eo{)QDMk!VkQ;{$Q}5C=ss5g;Emyqv4e3zt0jGdTndgNP+u@2iFgx%C z^`GCvDvQ=Z%Dc%TDZ!YQeKc$-xkZeVCWj^Y^YW|qI)*`x@^Wj@0?UQ@EZ(l+hPOW} z^g|{IGr}qWIN4-H^{EeDe8Q-ZWFom>mhRlvj#*7Z8}Ie`@vCX}kAw`AA2qdA7e^Si z-a8if)j7Q=Bh5QRzHv*V?2$0~9s3K{yuW>ySi?O}443B;DwE~yrFm-xXiVN=yG%_MPVI-Y!E~ zS38j)`bu}2-{d?LX-yuR&rKWs=tg&`ur z-lD!{m@({1)Z6;;c|WPBj#!-yRtPcaLecRpIKhiDozezZ(nLeoCh}^skQu=^<|&3$ zfJicRGxel#%0-)flc1`!B9G7~wWJLI00f6VswpRcK!4<1l+C@EC8fs7sJ3pQirO?? zB`zdE!xRodM&jKXlMo}OC^>fuy{=n6@?YPFiTI=onfXn< zYb&$nLyWpLQBjB$@&|Qy>cQ=2HwT8ED18)v(dJr$90>KC{POgv8b(P`-U+vf77ERJ zP@^4dCF+^hWLa3b=#{;Yq^Nj z;gWW}TK~pwNV@n$4^eUVnQ(9-+{*l08=eQ&@0<4H7)l&+-a}q5V%9+1I&f3e{{ohyU+R(H}2+lA!vTbrVg%PWotvzhI1f;^&oqAVYjHm9kKS|LLSY&rdCnn z<8p2_4ZRl3sie?ng5ohL3^U#WTCc^k(|@CUY#tA}*0l5@Iq?U1R#Kfb!w8S-phO(e zlRq@{cJ5Y+QtMnUiWe{mxmtmIH0V@9b<@LJUc&2|((EB%8R&2Y9@WSRJw>-+YsNrE zp}Jh(?$BPVHNNg(GnxD$Crl?Sm(e+BpqA3!(>{-`Y{#DWJZ@j=58g_>K1Sht3_ytG z`2&x*$2@hCqX(X6oli2kb@Rnp5R~scd#v2aXZo|^NmHhV3XiOO>)mlY@{sj{;SGfT z19dhDy4^kFH_EGy0^b}wjAAvc+isC0+xLTYm*pBV?za>-4$mx1aem`%oE1bg07@%UpD_7RrKA1x;23`UN>4KUwTZ zPao}u@So@ByChdw84L=92}Y2idgMoHPP-BFvzQ_>B!g#^2u2J01tm&A;O zckAuAuFIcKqV4WJ6P=e;!+c!sEI3Q}5A2`Xb<9s!e>o2>9>C4uB$H)FxrT3?@<|@O zqWjqhbjM`hS&yJ=v7K(6DziQ7c1x__R#AY|v^b?~=ih-(g7n7MaT?X%h6QA;aa!Av6>{H_ae$~zJ?!RMh; z(kE!-8g*JX|D2g9B_=3o0jP#W^3}jK?qUu5!8U3C!v|5nP7hw%_Y1rX}Sr)CgU&U zFa93&{pC*Q>&GrQAz@9cxl06uu~0N$vA<%%o^ykBxETyOkCA;I&tjWp{~!gK&RcS# zZ#D;^&BLv4R%0FPn8`NdhbO9kk@P&&u-E0exaj0kn>O5dXIB!}8H}}~4%2dsr)p3( zQ0e5_+c~Yax%|}p#=hF~*U`O}6W12Z@s?Fb^mLy zMP~XwU(GwAay4u`K5}@NMn2<7gs){2`E{Q>R}+2xLdm**`VU>@B=LOJry=;U&wZ&+ z8&B6Ks>`aP=x%|E*^Q~}V#KOhGed#UNpOl1FG32WP3hpoOE70JHp|>fGlZ(Ea&=47 zOh)ehv!@@B(8k<+Uc3gOyQnY84)P+-!doqYXf z4evUF00XxoL2+$4`kSFA7p=kBpKNY<&*_BxlBa{_t@0IepFQ@;-p@}ZLp~!S?5JK( zmNM~w3T13O#(gZ6GEVM-CgI*{p6?7_A4(+bhWIY=yjkBe;Fq~m%YFKtz#raCzPo+5 zn3exFxzR;M|LCLlJ$vcz9Ta2{-uzy?DZI;;KYqJuP270uFEjC2Uqe<+vRIy%?@U;X zn8@ci%(bF_w{CnoO5_Tf$fDu}dCK;OpCxGppf10QTv+)X+4dNA`^-6kWBeG5KYA(r z^rA*}O!<3~)>7hTEkU}1r__&dDV?yNh>STvo|ks*?w1EbalX;REJMZANIb)?N`i$# zw?%&J;#<8tY||DcS|OGvw!2e4nK10m?p&(@;Cop?zJiTvDDfk@(H?tnWL-M4s?ql$ zg2f!P$eGDjwY_Ysm)Axyq^zVZR6mk7Eh`ig)a7WObHG`1{y;vVl56jj;&4)+A)y?S zT!OE80na;eEqU(w4iekpd(hH%?G)FLd7hG<#?&NBI8LYp4SLm;QqV}auHA^*h^b>) zuAu^2=uSa_vZtAz)S&?tU5BY(VGz1d(pGY#KGDZCgH2$Mb27J5B3Eyq3Q6nBFo~}$ zC&djP!{~UW*^`^x+N35KgaljZ{-ktjoel#x)@epZ&*z__-m(i@_#SCg9;Pco!K=-( zvG@!QIz(MX)@1rV!~Jq9i2{jM8n)fg9-hQ*`-3CPN!O9P8grh@KTjM)cD~lb_}K0p z+o48->pu2u(gN(X7qv1SY@`|V^qDr8nX~$rE@N>+bK5`#A)T{xghRJPqH`6XqlXUl zc>ib)*)t-+FYO>-;I;`ZBupJr$@Q4(MkE#z3C`-)5|+^u7(KTh6VsJ8mNut%v2 zC?P8))gqbfP^741BK5;sjkYJ#*J{JOpA8G0kS);q2{C;c)vJ7~rT*!9{%VNGIcI$fER2c1n3?5E@SD99R$?x`ss4J36cJ3u%T^ zbRls{$QNE*ASViVR*k=hJo4zfxaVqCzl%@p@yCrELs?2aC9*OKS3bes-oz)r=(6{D zrt4f=FJBvFdfcBT-qYu>F|5A>Fm$wl?0H}YSQ8{dS}IQ=*8UaDv9=wnipd^T1+vpN z^v;dPhSFm-zkslHcfdr+fxBlQLnFq?CId$5zoqM=5-fK6A6-k5Lirt|86b_C>g< z%(&6g{BA9zg$d3| z$)J%q5Hiw_e%(up4x%55PQ9@_E*fk2(W%VUj)U&RK$FAu#-@vlk%}gDv5pOnN;>X> zm+UVNAmz@y?+6K+JpL~D+PByaomo=F>YdsY(*{k-+WXcuxs14q*qNJm`0jC19g2M8 z&?J04#-Pt>KzN(TuxVZ5|j?bhUBmJgTHU>)&V}7qh_1s3nop zzpXzzXLPLnaxA+$o9@ETBL9lB>{6P^Y*8O)a#e0 zVFA<2R<-lJV0L$K?_BTE9$jc7IKHWWR@Nd=^jGh_m(^CSLPjP==GMiTxcOlZqtld2 zFQnKp_3DO z?7nN7&0i1om)2qw-5mT}2gr(bn(di$#4}rUy^$VR#>$wLh<+&;*Lak#u?60Prhef zB~~3|S@%2yMK5e+-g4+vx?vVTQpQsm<|JA2D~Hus^^_lN{IbH@9;}uSW=NatCe06um^`cc~Rl?k3synC5qp#B@FF?{*>9wm@kr8xJMHr~&&p z{{XbFYllsIqC`#n&{I%7Y)UvxPOUkY;a&S`YqdbGS4Oi;%c(D^4vc-ACu*q|$IzNG zy_kXx!)h{t~1-S?t6n#f#~c+w7RdME)wy;|nao~*;GJr(e%PeLQ?K`$mylZ&tZV!l;aLrhJ>+i2lxSgjTA9_)sk1#5N&XZ>pWVk(V~=Q4KoD(4OFG?V=5 z#U*Pc%Aum_tK0=u4}sU>F3!MVbLK(=)Zbn&EZhN?@SH6)qbU#u7iRM&?cDo9C=)<{`RV?dTxG%BJBndz;HUA z>1Ji3qg{};eNU?3s83kq>bbQK93!K>b&Hx~Un94Ya$cip=92OE63p+$yxv|>?tLmj zd4Xm&|AVW)fU2^6zQl1;wBRL`6aY zgZ~_TKHuNF-nCfk(IwA``<{EQnLT^<){$w32%0or{nN}iS2zetEG9M3V?V#Q;Dozd ze~);)BXD7c#$%JnnQH-3w&nAwi31b?prbY!14XC$T_HDC>9d`l?0W4onQuB%p@=ug zaZ}{9546(8vQwTczu+z9tKhD1y*AJEFqQ7Zov-qHH?kk%!GZ^X8jkInwfLzi*Ngrv zbVtk)AFCVP3L5kUU&VRpYqd)(5g9g$n0$*en$T zb}*}OeLt)GT_$LU>~1_4^3m($5--6M(5TBv7SF$=o6Z#kQiss^7^fw_0v9(iC6b#> z;%1}vr@xL~dVSf>HSRh_*@9qO-7#Bbb+18Hjczi=iA^JABl#myjSk|@bPsVrqO$&L zibYQ>o9GpoU%8bpHQ6RA0L5i|1f$V=^K$=k4LlX+KNtk-LY2+uqWIL59PCz4K4QA_ zj@}j&_22<1q9EBPTtX7L!=_aTdYd{D{QJ-2bz}^!Fb^vj7Xr$a^s!W|i1szV%CkDA zXfE>3H4{;3EG?BU3W&}&=VJ3optW@ia!+5jLf_=bCveO5=!eyx`(ec#`V_pkbDguc z6O`PEm0L=g(VIH>N_4t4Dfub(HT$AU(o%DCoIxXNvsUY|D|m7kkWBVCEIeYkr-v(^ zi_zh7?r%{?=_^a&*1aP2?u=hw;J0l`&X{J7*J2_=Z8FK~IoC6~=+P*DeFCprDTy!6 zYtc{m%4LkKYsXRA9xlm!OmZh)5%PXrr&t)tt0FA#$gh)4P(EFq2an zX|L9cG{~VTlw%o(JeU3fN^ToK9PadcSDzt}j(E`=AwrZG0)+_{MF?%jI_67O{6r|* zDj$SJ15M@_90Xevp})LC(Xyw?oDJ-Hm{cSd>N|#qF9me%5^^Qygy!`RePq#xi2!%Y zy;_{LF9>Wrj^tnX$YUL<#QHhncz^^`EMT4)OhPF}8bFoLHpJEjy38lSXK~J0MCZw( z$D2?U>C`{@U_3O)uK!D0E&5$j7u6Bow!Qb|OGC8PQL-Zw3tz$S>3qinw-8&OrCBBb zHpnZO_RWXe_j5-orLzbsqHTZ0%dVfU@DufRg#vf zA?vq64jh-jw~2numQ%(?>9w!ZSYL;Jn=QhREJ{{V3bq?Tz&aJ)e<)Yjek9xD}Omnr@1YM%^^7XKM^)BH%lGWECwq34WW*i$85FIs% zx|Sz%!^0yHvkXZ0$13_H8o_b##u?w*3(Q$)IVeYxXd?g>l}WSS9Mo_clku)3wPj#v z*AIyYU~4x1=Q9ctUJtS}xAw8ZAZ~+)n4T&3^$2v+o8nvwQ$m%cs8-2_)p|`R^Oi9L zWh6;jJX3yK%UR`>1z@#}1-(uam&98}F zU4*$sk%d>44=E7a`k61IHc zW)f$sj(NRmA%QO?GIJPTEImplU(f>%g+k* zCJz#7^+lT5T1rA7{x(koSI}#}<|vwW{|FfOwv?sHzbty4zO+q=wkfr zF)7YelJDh{Q70+(toGayEV zZCubecc|UXC>hopyJU~mGx%MCHaAwYwZ9q=kF5_;A1hN*@QTn7Pe9AcWy*mqM-<9H z#V2d7FqFmpF`=(EmhApQmW4OA879RJYumV6>OwAN%^a=tV|)(Q2k-MZ+ER5*s{@QD zDP{D4xfeyyJ4qE(*=eRhg`YW_SuLT29eRD!RA0ChN8m)9SA0oyLRq>ZQ!1H^SpVEe zncw(9omvc4Y5HMwFxOXN8MA?H1Fr5&apDKXgO4TUW^>{MS>2FHFVO+_{HWn*-xYwv0^3G%s;Hfu2mJPQlyeOTja zUeV5EU6wvuPGj6vWs0kiG}6Ry*WRn8304zW)V!Kob_|iqH_GN4Y2ReKzZx>kU*p3alA)&#vn~kaxqnk}%HkSWDjRk3x{JyT*Byfl3(S#+* z({Xydf~;uEZR4iOJcEcL8|sizmy%$uin5@a)Z=VvE~V#YrG&(qInA?TVS%+TDUCfp z}7s^c*unX_akmD_Ju`dmd<5^TubZpR6(B=y3Xvf5D@!=3AJ-^kG*G2}~i zAiyicijN&@1}SBzetH2>Z?W^1x6lMRSk zdO(_%TVp}unsJvwc!1SLUC=-fCA1&;=jZ_-OR}K8s#hsn>F&1R`dMt$GsXPmL3hdR z(`URz?rHJV>}@uIBv=S{K{hvx7Q9NIX%WM{%VpvVXsi}#BAfTh30n>$R2PZ49a zT z2so@K4=M?9Qd~il_x8Q$BzDJ(ku3$o@vLuH3}%cOwpXu|M^N`V4(*w4n^hObp097{H)OI>8rL^=;u#C*V7{I`+Z#&GQ!N$Gyct`C zNXL-md8Una$YrsSx3tyGt*mgug*zp^gloLnz#Sa2?pYpnRF0)?AisIEnI~%?w#J}%C7NU-?pT)y(J;fM zD$_RH%(S4X-3!xno9s#RJMb6N>dTLw*C{e%)m+SN`DTJ7E5KjK3Jula;s=)<(P{!g z%q=wh0u6z=g&LBUpy)7b+GxMuJ@-;{7HVjSM|K67a=)vJm`va=%;b)#>9{H-V~c0` z9~VhocYsoTcxcE7-z*xdsg`5QUiHyjNF9eO!CbS<;XQ=gq#vhvvI?TETJM<1!7@lE zivhb!d~rd|Uiux@(^7^>r%T0Hx~1IbJrdjWlbuv$vGX$$3-qdu3$B8LHr_}Bc%!$#m&u49@9`uZkfj3pb_uWDTgKTZJ?PjhlX15wV*r<%A zXoD-ROg9lQXQv`PP3^`nv_nHH;rek=U%ZPn(J9D=e^8agz~?*mQ&GM_guOmuB5QEh zvI?&TzeTQY!YNjQd`C4NguFQoO1hvYb?`$gp1)U|>F=F`qa)E|7Ugu0$*rD*K#Ov& z-p~e%e+=6pQlV1DkUK_s^ffU}`CH`BeV{$?!nzj>VnLXECt{MJNxa6&@cUAgsAvF; za!`afVlGV!u0h_8eF<^Nd$05khB&6@$`uxK4Qco>4ky$E=JqAdRQR*4x>=|1XWt&| zqSn39olm9-i6EQDu$d*>T`(yx+k`{IeXth>0r(QU?l+rp{|H5g1vbn7;?c|1)aL9m z#%wY3*nh(WmUI`e2=w!Kmt%`-r0jhbog8~$tw#8vyDBSgj3tKro**_wdlZR-5-a6q zI-!y+7XQ2c$jEJbMRB2Nuc6YNTymM%%$brsb4s=JvGv5QfRnYzd9@|8o8E-fDDhhj z!M{hpK%W8}{RKJOeFdAD+w-*<<$WzmBrQ7?U!N)rya>)`(ZFU!pKZr*^y~X!me0uf z$u?bpwO?n*iz`~m)@_c7IkqF)O3_S}rMQ8uR^)ylRg|UdoIrMHRT(=a-+-w-hkp4E zeSh3}APb!chIZ5uLOEE=s2+)~EIatd^v5?jifS!@O8!@$dyrsom95A&IO;;iyUREQv}^ z-e>qcj_Nyx+=g+wENmCqvUAalBM5d1Ill5MdpX)SlGp19lx``hnsYp(Hcn%&;-agJ znu~co$i1nXG@s8iEn$V6QJXBqndEgW&dfO6oIx`3fR;3EoVU0diI;adrhbe$*8^?@ zUkm5BX1jQRL)T%biKe>BJ@!j$Ive}mm7A>dpZTP&*sM@xDV6fi=X)35-qdBqR5t%k zLj3wx{Y1Bk1Ya`abZIdfK61zMT~-BFD!_AN~dQ01TJYmw8Qx3lkZ;4SybycaE7+F8ue zZKR5WvB_FejAuOTsT{qiRXvxTf%Qf<9zTjlzjy)sCV=t`E(pv;?WsECTg9f82GQGO zuBp7Se!1DzB3@hmh)@&CHayKFojfH4Nj7C$uG%_V->SS)dXBNh*B|R5#*w$IUbc1i>=A6X^Di;U|j#YKZf(;vd)I2UjRz*i0;Or7>D7 zMKtQ^W4~k0)-c>BdxsDe7Dq3}+d`?U|Ca*j`fj&8yUw?lg6G+YzH`)~H+Q}hqwq1T ze=)8@VK^r2$Gz&9z8~Yck)>g!T3-zO!_U>}CCst*rl`LW;Zu87;c0sDH?Yl!INrX^ znaC47Ue>M?-4Qg5pQ##UA!nRA*)g~5)!=OqT0(Tru8b`a?b#wk_DR-VTxm12wAz6y z%|b4#g7JRu`ei<$`8pxPkwYxE^|z%>4t0%vwF$iDH;o9~4mZu4YPr3}af>-}c*d_~ zli@EMU{B_7L{G8}I=vH6_cqXH{d|a-ketwGWmBKvZ>g!S(?IA@xB3cmGDqYtT258x zLYdZ?*=jOxaZW7BtT|?}Ky+tmhj)Rvw?>;8s})g?dVGw5w{7uiEQn~P(g8{{^@5Z5qw zS}>tzD%rx;FGJgCTcLMj&;Qgf!YiJ8|9C^rI;DT5D~3hhDUQcXp4o? zTcTLOJhg@-RRaRSM&{~6UR#HBOe=|&)~YTNe0a`2nwA7g_g0(Mau)FQ@*UZ9yYfbt~CnW%f0>MqdNdfXf! zjOJlW2}%%E$iS-OZdAp1#U&tY4w_4Vda>r%tJ*q%K-+r|+<|)X00L?D=wX!w9+d*#46o4SmKw^;zj5DE9MSuP!pV%wmAxwz?JX?UNC8(N%O4y&z zk3WcBL3s6fOw$vcz+Ya~oBO~811iha6K{PJaI8*io8gdLU>O;?)<=J;s13w01~9$> zVGH^Rn5hmgz}I&%f>q2{B9J9xaUoNqIPD3^?lUN9{v9Q9i+iwV1b}PMrLxPlroXW+ zO?iN1R6pz_17omg1o#^UktS*HC$7WgT^zWe68Cu}7;aLRZ~zX`6iuM82lM2Iuz_P7 z3iuZ+3n*RN)>6F!R7$X@eco$XXA-}A_sXs2KX(|NE}eh>3^tioE~$`rP0Ijfd7h*Y zCdKl{8yhF}eegfkHaVg5n+KamiIIn3y|pGU9W6XaON%C)6u2pg{y?v<=ls}2v$++4 zxiuRh+CImW!!}LjGrcmbGIRY(Q+XPv^)IhRD!dg=hPjuKRV6TxR4$b~LMlx=>gve!R>@LkM zp3G&ef-~yM8xvyAku)la-0CEr-#SV6`PnJ8cr_(y{3Ju+X)Tl{PSbOs>pPy!VXPNp zbRg$S*-duY)RI?1s8piOsL|`hAnoGnEH>vQWDqo78f^Mz#N$~*dxR%sc;3AFo(34$ z;@;jadUM`d?%ws(GA4J!N{jb#jtR%h*n&OT^>@f8HfQqF&GfS?nizM;-L0G!luOOn z9p$s}n~TTdG3ucWCPretjMDmAt?|@TxjtrZ$}aF(Jf~-2surf2;Z3rqIp9FHPw2(& zwTC?&8xIPyZtJ;6I+WLVZw-&ivFFECY8yJ8>dbSftI+@yI&(3d$VlyFIv+eB$~-Gc z{A&nLJ!aCNEB}(${dTsw0U-wBIFsPP23@r&;$I!~C!u+I{zsomsiMC;cI9N05jRsg z3FS&tGFO$-w#d58sgHeC_^>Y3oQptQx!Ah2+D7csVi_S~5gXyvAl|u-pX;5fmqy_y z{bqJysk`cltcxW6=MG<9a{=6GF%o1Q$D2bn>9aWtB%8iEj2#kXZ&zV-8^3n17YP*Q zJJ0m5Ky!F>P}!frVVk8ypC43p-eY-N-L~7P1|h*DCR?0YjhY@}U7W{Sd?C~oI1yg+ zlV>&3$wm_|sQ0t0d>4j(&7D_!Ra@eIM^zaTtK!B}v|;6HAA|5bgg9sBE^;R;fK4Ac zp~Lz!Cxek<;bSu6bAjLXx5hcI0$UMgZYtIE2m=1DwgwS3W78J1nFD)1Edgr{VsrGM z*3428R?S**l7sW3XhiO0lqWMFkV!*ovePJ^QCRu~KG{PAASo!ToSq9A+!^FAAQ@F_ zWtD?^1mwl*(13yQb>HcF3TQ4obY_FKKv=4suhiOxk@W}IYk;xS%q&al&^b9i0?A&ics3esO$0a$Tx!cq*3xl!zzroQvN2FL}6;9T0M zT1vm?^(bfT6lNWjDX?!bqYErG+HIhl@Tot5;quPKh96LgA*q5FOM>3-tM?jZ1;4|x z^u0d#*992B!k6B?h+DjnMF7p@7_}lz>jcx6p`jt^;crulr>n8RZq%k!gDI;Jd~Voc z1@)o`_%MJjKj74+(6|M%jnCD;!d{15_<2X})pHzDW<3#*$*Ym681sX79;QkaQ;xwZ z#Fz&C2^$!>BWVfoJ-p#S052>>|5Y@cnm39UXD?w;0=X@xjYCs$`zFelMeqfTNFKpz zJt%|-L+1zywg@jsiEG$VvO_|+TS4{60vz3{3-f-m{ zY}j0l6mWF(Gs*&`3e7GWs z7vH*nMAzrKpj&gmAT;V_TyG<^^T6%$gGiM&gF7@yp(JG_E!S8M<33LC`-3<=&#;3= z10~u6`f!!tRp;jn0g%I~jkx|^?zaHbH8{&bzgCB0C-oPI_T2{wD`U8~a4?1d37w9k znLZmFY{I*T4XX~}-$8T{)nXj)E$ZgK2ErE{WZ(qU0qcjTQlKxK;b$pl9tb2jfT9bu zISIIbaGApvfRZN(tG?&tO<(|m(mR6r4zuisu7Fqz;9-V*YI+QsLH%G_UJAHXSI9MBsgm3Bsdv1}kt`r5E3d%0c)MHpp54zw^EVd#5-t3a4*_ zZh@~V$Uz!KuNh5lf>7jYn$-Ip*oDvDEqD&92jI$92S9rF%=M+_cc{Pxu`vhYUq3{E zS}X`=L%&YH!D4C%Ox>QJ07oScWOfwy`9yAk6&+ma#Yi1p1K1VV7)=49eH}dWs1;1a z0c94{F}ASkIkyu(Q4hQdlxGpk6PGsc#ri7!yI`QarB|}u4MGo4TA`K(8nRp~p^VxQ z4camK{c?8a6)eZVto_#RoO-d_%lk|Xd)GhCV-IQo1pw-tst2r?SDioWxYI*hGDcY@ zf@i3}8&(EBuEKnKSmm;g*5R!aSj6}=YhQ*PDNR*Qw2gA~o?9Dp;miK z@qX9UG0Km_0ufu^Ak?Y*MgK3SLdhb=!o!zyIi!0!v2_kGLy0`494FFP}P-Oui4b$(*f_Q@30N9oV zx!r1rJt+m4HBM);4FeS1!XW&H8-OoRFzt4G5_Z-u{wxjrULqlVdulQ1p#05%KLOHf z_KIsEU~sSpaaRFc99r~;skCAks0wxdRvP1dGmXb6ry?QSOVLmaf++u22x`=QyY(Ub z7H9^+sni6?6={p;of{G6aq%b1Al?-uIyudl`i(70goikQ0BY-@i_?svt~Ow_u7nQSnPrYpW{En{ofu#Fu+C= zDB{IAv|fWp540Z`$jPJKPI^Ge6bqjMMBNxjOG+?cd6nM`gtk>pNUspV!r7V;@k97< zPvIC{*6GJWW}nA8LM{0>f{#sYP(EtZ;m$em z_N)&qe+TggqZs`njtaj+=r5g~e`={SEH*$dO7#H`vs!f8xXw4*HaO|DEfA#%-*}HF zRwr=dU+(xE-Re3ez;M(Q5kULk6#hngzJfx<0Rvy*XmX7jzspB%Ld~o-ySHA!P-0Lc z10#Guf=BsAf$Gq1vW~-DOPpM+uUzBN2k+CC7_ZBM_NO2!3;r)tLy{Dx%58U-rc=73 zS@be~;AU9#&sjSq!x5OxC}~Y zTXM@GclZ7L(gT{~=K3M9mJJkmu=GoGBQk+Eg^>hG*@V4OExn%YD92DC^y||fwE$?` zybp&wupxhFvV?cQpFoul)^ypiM$H_}!1xySFHy>vu1oidQ={DM?24tl7qk?MD?j8f zO3XkED*(gv$7A~F^S{#NyvFRmmvUgM7nOy_*@O(K@gXxcft)SIHyLnx%7tSC7Ib$b zkS2CFh*sdlc4!+0eJWA!1>U)Ow63=Rtx)Ip-~4O?;y2*W3=L$u_%xxZDD*zvO6Zl& zp<}k-sd)9~Z{#pkXeb$8*spUv14dhP=ou^uK!e%9ChqqZbU9DE8!#H9lM7k(KLM8> z8YF4h{LGuHpn$xuJPxAEbq|0J1NsU(hq@1kX^ZH)ome*yg8n>g{G9a78#S`MP`vXI zokjhT#6gu5x%vYn(n<*(U7gQFhzfgGLf$Nk-Ab8?nke zPAYA7G5Knx?6W^tu9iG@yt#%QH}m2`s((u8a)KDc9?Vx_XHJ7rMyqq}N(W$$Fa_PqAg_o!`Kgjk#FjT)`*GrW=L(y#HE0iR{E z3oh>I-o=*v#cKNX*xq)+;(o$n$+bp5OJW~dsYZ{#Kidrn5_+9&-A|k) zdj9@=lzw#pzfc&NTJ?gs;q~92GYtQSD_Uub)5KoCKU(dzr!9VFajpCL%xdp#Yw^3k zKP`6zZ@`}}#PVgO8n=C2gKrFbzmT+e{C_WVR_{!lvtc#d!}bMvO4~&#b0(zTTYY+Z z3VO&>YyNU43#JtHwa~@`!yZnxBS77!KA11V$q)QQh0|5c%{H=+xTO3tGEbn`LqQYx z_=B_MNdxw`-aWduB54C0l{4s$a|X4q1gxt$IjzF>H#E%~Ad(F$4z8n zHpEw|ZKpFr2F8kSu04Jy2{Gt-^q8qlXDAF7tY*W1yyH=%<0coz$9es=LjHWG0xp9J z1CJl*Q#2ZaMtxlkHDO&HJS-j+Hy{hbYAH$=wat{#-Xg;ob{xTeRI@sRu7o~cJtka< z_z?PdKuKjxrGxj(Acfd;`c7Eq&?V~uLtZCeaQEZK#NY5>tm%q89kD|(z64y)&d>At z&Ap*!BTCdZy9qTp+ze%9C_SYpw*qe)VicwQM5QM z|EaaZV!lpv`Tpy5oY(f_Xr_7P#FvnjO3Yi?S2gxu&CN1lY3&N%;55_(;+$r>Ua>g- za3uv-q0W7a4C!EdeA*!ni-!yrHz0oPB^sUoUog_Y68*o3hoJwJ5wNuFuz~DwkZ*MU z^EX8Qi+(~U{GzUh zDn#HGYJu7XdNdT4BA`?gBN8RG444gUf+Z#-xKKyTLaPXyLb3OumaMn|jq-XFC|~b@ zNJ<2xPuT4i{BZXZ2%^Gmf=vb5xn+-_kd*cc36F?~0Q1*} z{mR-6r}l6|VRC)={d+!k?sZKh%XruF(P}Iy^mrC~T(YW~EG#UkZ{e_4A9y$#5|j-l zkJ9ZLN>EB zrTI3ESKzFJQe&LKw!IY|qVRWS#9aYo>?Qg9Cw~53+GFPX zh-RtX!th2vh{JzB5a{{vEAW@cM6Wvj<=}2ez&(Dg&nF=RLxN9*2v%=X({JSem-GK6 zWmHDqfS~@Hlv!q_i9QBO4vkuMnLvYu@_B*cUS4jr3@ZY#K+pOXc-EPjWV15R2|~yI0#tUxTwGkhqa6xK zc=r)VTpV9N3tH|3O`TQX5KiE5K~vQd6vCD&J)~qbP!ZLAf*ls7p1Np3Vee zTvgyOR9{-kTBJY;AhIEpPIai_MPUt4nD7tbKeCVyi!(C^Lc{jzYCwc>GI#e8urBro zMIH?sE}O!ewe+1MwVUjF^7;A!_4!VN1CEW~t^=l$YA*N{4hf$PvBj1OT*1hvr+i?OggK*2ujc8&N(M{jSuoG_eq z)dN_G7ZE`2#A;C(D&hCmsxRvtsL!a@Yet83Wzb`6{~m6P!~K*TNHvnLfJ6=zluWU z|NbtcnMrd3Lzt7G z;tv?{fE&0#Gy)b6N!JqGWymvE@eIg2*Xp-kK2U_Z0EH#oNKQ#fK_assIHCG@NYF8{ zvB2F)ySTY>?J?|UCOm=Py?~;w;^)%@5xdt()PCj>PM1T0R|#4 zGFs+NXLMk!P}9(Gxq!-^7KA&HKqCeqOBK~wt;G}DaEi;AqQOVWj*4j z3P1NBK4ZQ^q)2HB)%i#zAfB;<3JMCa??9W(i2)0;_Hf#h$f(Xw?y6?L0{xZ^q76~h z@MJ3a;RNq;GFnX_6fQ(4@tv~h8)`H**4`G>4;9Zg0cFhBS`}esjpE8vES^{=VvtOo zPb6+UgSE3K6wH2(R8XfJ$k;yV)GiV{acj35u>5}80)pPp z#chh!UDf$KCDsPb z7aXq^)l5`W3oulIB5$pjQQCj?(UQY3-(Y{1<=a`-`&gfbc!RzrdBvMrA>DRjvQSH> zKV>`Drc2T3OeR9qx_ewDt}-;-h1?oXF1C-`jKkOMs(k?k1gd;SC17u>;jaIc)$p4u z@e}Oa>VF>)RDnDtX(9D59sm6cbB~=`hRisZQ}EB8if~1nN3S*h-#efx9Cvtyf7Qs1 zbXVf9sH&!IVGFADNCyAcKStxp9(}QzmPwcBWq4j}!7Y4W+aN-hJaV@T%8ji&%T4zx z@SZdI_Dlj*qp%93QWgP$T28rAg?A#snh%_2ab9! zOyj{g1b$PKhe@n3TH)f?5hN0npE6YAaLmF|kTc}efVuUJjjPWKjlqHgP`Nq#F?~I~ zMwo6v9Sb^mR+(L0U74Agu(iVe9q_d!0LbBS0uV+0vfmmM>#%+{AP8`vDNx=3pGGYP zNh1$$&w^|9(LT7G{5lv;r6nT+!>3Jn3KR~%kp9#v#0+=h+M0KT@gHJFbje524;U4#=O8@||?1CIv}C#RE)j?H7g z=^=zji5C)>dLxAHMsA`T@LKRhWNfv6fG?ax&QVC>b26tZ0)|hUu>Y=E3LpM(<6B7! zB<78HXjEdM-hv|9XQmW=-dRF4N+5AwS@Q+n5XG8{229|b!wZdp+6Y%z*8&00Eu5!0 zD`}>$+TC^YlP}j`|0`ZpC8@s8Ft84B^Y!~zV}mV&bGX|mi?$E0MI^rbbRjljIpAl?=#<@1V2G2u~ZwsB#~ z{v-A%3X`9aBIF$EYzQ|`>ISWEdm};>NxdPG(pa1Bv!C^Z5DW76KY&07Nagtslo{=J{XfEj#Ob1?BQYRepjI;~Es2cuOHn+`1;0%Br!`ELeAr9{upANHbP zuPf@+bkx-Gp^k;EM$f+#UA?~x7&2v+X@(dCMg__r4A#$3DpmQd($7`$W2iHi>S&qb z-JnVa9pr&?_*Oh}awQJ|^|njZWW!jV7#&NsvVDQ~ejh3&V|E^Umjc@7rdR@~1y92w zgnAz}o9TdPaa5{V;MnYdpcO$tjWIi=86?x(DUI*SCg1757eK(c55M9qT3)v56_)%8 z8DX*6{wFMjx_!tirH1vMe#jN40$mpS>n`|Lct@G#Z!fesI{pzbDai=f7=tMgv1OFK zMW>ra86lxKEan2PQ}z*H?$6LRAW%v^FqfL;W4KIt^~%)^MNqmT!775=-ClawQ>H{C z$Ac5T7Ej}!?0f4Ygm}>Yd`-rK2Opphg#*;&xoglbt=UFYWK9ZT2q$WeL=Vbm8tEEn zbREQVUQ)eZW@>6GhFM8HOg0eAmZzhkSy=vAKU%HJli~x8rM^Q^O+p`qTUL3)yyq2N z)_&!|Fdp_|EYh%L%_QRVwO62#xC#|!@$g|H(mVU1^8s7=j zup`bCURcg%Wk%4+snW%BA#6)NVCE5Z&Te`?bjz%C$c!$psF=u64uK{QVE8l0TcTsH zCe~L{&|Fd*vLwykJQdAe%#nMAM87G(WBdox3Q6Sr>G4Ze(Qw}iYV95o?`zX0+F5L5 z9ELhonn!SFsJMQDn#5%DGwxtawXP8ts`k7$5wT{>fKb4EGIAqLs#W=>UFR}1d{Dbw zv^`@6a)AQ`Z_(W@a_M-0H9mpD;C}nzg$G2{o%LiMkC*qaeSOAS(F^6Addj8G3w85% zulJz@!DnWS6czhXt?D0Mq{!6{Rz4YRq2T%?j!=edPIe=P^`4Tx@LWsbZfa98c`COj8nMxsf#5C~G7HRPU z>*I(-e%9!qs~x^om+R6UDzdw?V+-R(t{Fb0Y!V&W6A0l^x1&YThF|@y8;GDv8ucCx z4crw2JA|dH)rDXMp;TO&5itn7O!nooi9>+o0q0~GH0QEK zk&9h0ECPA&nklF_K&IvtmheZ%#@gklQhtC!sXG*1&<7+*9_Ju3_s>1Y;Q)r0+p6+o zOoD4!ru;{f+?f-y$Q?MpkN`PhGJ^=u+0+a)*RmWvn^K7r*NbeJIVC6ncz7jk@?xtOqL&l1?QnrG=!4pi~}W8)R@c>fxnR ze#`lb%Q6GoxtEE*DrveonqhO424m^A8C&vJWx46ztVh4(=!m*Tab?OTHrBy!v^#1P zGf^tG*$(9;-2Bn>nHI>7a!sTpukw5TLKmVzrDk$2tQig$@hALkCo4zoS=!MJauIc( z)G}P507^jw&en2#RT6x^^_^}l8wrhs`cc?$tBc^z1Sr1(*H?7f4b13Rd zVzmoXVV`%kh{t;?@qf>`sa8crjT`OC%F-d-jNDVSDYbG?hm4(MdsF7*n73w^@ZFNr z{PG4#Nv%6M@B1S!Obz8v-uSdQ$NF~b2}(*@^zqO#G0DS;@+%5Z08of{gff(I?EeFW zd4i}*`$+_d>!2#oI^VYa^&K{@4=~Y$P@go+H<5$sH|+a?iO3~7x@6+@25cN0R7nD3 z$T4+VQ70w9SpYX?WMNT+lN|taW7QwP!np?J0F+129^QwZ3x@X4K!1aD$1E3OuRN}wGxbIF(5l%CZsaGEo;%5^G-B- z+osu3ljH7y*JTq-PRl;UYpoYNYF^V&D6fwt>~<7iD)O+?GRj3#2zLySPS61*h6(J! z(NTka&v$_CGe~zof0hU4PuO*vwoAh0XY3yHvrqFT-t^UWyfH1^xlJ6RmM<`6o#Wm? zuD~;HTVzzymu%C^K0#)JxVFhUwFh!J1c2ufhpf?;f!fN zewkp%1uYcuoJQN0p(#5cUT0}-XUkacZ|6__T0r}?=W@MY6pS(xJYLgBzYBt42OPry zE8pTnu(Kw}>t%%7_*#MRIkZx!ZC*%DKtt&Q(HaV4my5A|5a5!7NQR4Fp^>lg{rd4S z*!Mt(EJ&taiegu^KsyT{M^yqF)X4S#djY8Fv;rn>R=`}#&#rz6?IOUBsDyP%*iIS_ z5;#_xprSm6V!or@2yn;u@85&42JDKT0Zd3sHRAN|OknaCm1B26CrKFL2oxO3TRpsW z-RSP<&mrX)L1sero)lJcGRu*#9Rvj!lA`Pm4?dNCIlsoK=1y(bD)27tao`1ub!bl> zk)){biM2&kuMc@F-y~gtqf#c_6Z&0Y%%rt>k0QROoEYlwPiT6gZVMhu>zmnoo_9*> zWz*mC9HMAAkXq<6P;TWJN-Du)<&bFZWV@NQ_TQnap*p!eq;bPlt*bpM@VhGlDz-Yf zC@8tYKUEs7x2B<;0pL>MU;q<3ez|~ktZe9=5Y_D)bI3us!w|jMSWVg4*)xJ)Fp2<~ zkUx5U`S3Ok0h}5Dibg?;vvLtU*0`Jg91aTJ2=E}>gl1dq4?Lg1?HfdCZL0eEHVWe1 z_LYiRBVm>s-+{{rD5!Mq!pi;V|LW^gH)ise=+DqdaWjMx`>XJX_}55tUG?%avD5>e zwiA7J=x`O^tfHPqTv19MQShZ1m!MiF2&bdERvwot++07fn4uD7(Kc_+c1Tr4-C`J~ zGS04wlr&Ci)q6G8IoSM6)RI`T89}?@%~sJ>pT~YUp4rAVvFaP!$ceLIr9&yPp!=R$ z3}+|BrtKBZ)-i>T7j~T{?bh+5rg9uk((?KHJ!UZt6m1{;f`xP(_M&^=>HZB{(j}n; z{k?=#fBgME08gP6)ByU0J5PE>#xqlV5|XhCLVSD~c%&f`fxEfVXnpyNLA>zij4CN; zrR~&CKz9UZpL@Rz_V>P&TZ?cbApCAYCqeakAJvS)yeAUm^NPHztd`-=j^%3jRQFN% zxUe6bsZgLx$GQwdsowkaDa31Xpq)vF^B#;?j-OcX2FZG#mZ?{(|n%B|g48>uF4DF;G4O z7Fh+eS6U@<8k8*-^vm_OkH1`gDK`(_8a@F`Tik(*+JRUD7-ilDej9pJi&~?>m6e~6 zD;2;=aPPxKPvQ3;7ltm1;n4TI+|wckwM`LG(E}J8DqjwVO%+FQnT1pAJBU1Wls`cs zwpZ*#0gQ)Yt_^rIsK~5`Vg!JW0hr_hj{X>CULchU$R>ZdZHH&u?Gx`!l-nCzVVDMa zB>PX`o1&hCt?CiFrw4HwU4HtgZ@Cov|NAX>r^(g`2niXW7zHfF>FPx6&9x( z5gRpI<#~1B&%1`gLfX1yK>mI_+zb}lzJ9TfA$oXqJdRk|!o6#KgoZ@is(E zV&xi?ZjqxQI}Q0HZu*3U$<>W?(#AxWOmE*}aCLR%ii#&jbgQ)-Xx^jncp5k0W~W_O z#&N!z5@Pp>= zBQ!BJ&B@6L_)`gC=jdplt(_H>8~1>7WB7ya`I(ul+|eULwTaNzBh4oH$mNZVjm2L_ z5ETh(pyoTsz{`UUU&&wp{zf1^6s+rf&j1j)zn{-8Qz)CNV0SFtADuEOBja(TukN~$ z8A7UVkS`a%rn>qKw{t6=QF1F2-VJOzS#BPlsh0x}4I3t!KV;r3r0H#i+ZX{$#=_vPlZ$Fl5=f8M==%Gr#&Yb! zWPHLo8eJuSC-o?_{NKe#e}0gQJHj=CR{+-lHRd9tNjgr*@GtuEmU`gtq!Wfh|9jbM z7k-{`e^WNq)_M}5T0OZiq3%2LVfwNE;y2fpc1p+}Q!~vX&Hrzlm)qe5L~A`%>k?*2 z^Z!lycQX60!i{fxiy{{KV9RnL*0pTUMX3RkV(vS9k2hrnF_pFG1riL z_{W2}+5df1cb9}3xzc}+vvF<;hcH>4M%N$Q>Yfnn*8fJbs1H85IPm0UtLBZ8i;F}v z*_AD$KRn-UeqRg+U%UKg#UH)#^9SPp`>>4gVI}^3rpFX?McY|^Zuc)EOo=u`hPA{= z5s~inUPWV1h&bly3MYb?$BVNlM>)D=w^gz{Xg^wAQB6NS($Gn`AwL~IUAq3&X$jlK zC|^OU`2ilyq?oG4go4FK-&n<>{QUgU=*on$x?ZAqYqEy7ZN=2;6F6avujv#DI7yoy zSek5ZOV~mvsIT2n%4BEo(;;|K!&bKtqGt0jBZzJB-}is3(|Y+zg@s4l)WB0M@l-4s zMB0enRlDuCp_hl$k3Nt$2g%DZzc4DJTWKG%y-4$KONexrF36477e~ye9`~;ZuRbjL zQi3~@H+hCv&>)E@j3#D1d95jK$NxMR*VV)pQ`J@VQhY(#2d^9+)RWL2{T5LfCJefN zVq$`Vg2KY-HLv30un>@u%*MvXs;jHH`H+EA13XHQidZn-{z2ub1)~hiBfuq!S=bC} z+4Ana<6zGZuO#FniTxLtTNZ=pF-mMo9C2P(0Id}z^tKDxSF+%HJD&%+T zM)SBar_RsK6(UF{sI0LPE-5ZkAf6EYt~O?FMO|&l!!@M@adGh==uTkP1^kFJfFYq= z7RigF?H;vA+}635S2nD@Je+h%4n0=K#uqjsnYmw-W*jAUBJP>rJf5)| zqq-b5zV_=&jkq1&>=sEneN&|j;~GZCL>EFlG+E4^B3~Fa6`*C8k&%&*FdrG8dR($U zTjelr@|EcmU!2>HF#Vws$UE^F^EWc0%tV?&b0^%p2 z((VJiAM$Srfr1o(Jt9Z3o5;^obMd(u+)H>%?iK$XjPIR~o;7Jb>eJ@Y>^{ru7MFPr z7kAvf@BP-V^W@8!InB?oN!~J^wO{opKI`$=rC3J<^s!$Zd(vnwe?5Vu>GE2_aR4r4 z02BPnTL)kL*T$1;JQXKxhTRxuH_{jPlNT1um$sE`BGTBVvNnX)81yBx0KlL-H(+H8D$UNH0mqQe@Sg|~0C zU^cS+ErHu>tJkm3a+l$L!8Ck*ef`u5joj%5jq|O_>)*44E3Mh>Ufm)QVfycb6DuYB zx~KLDTlnK0&Fw7V4_4wI-e)gcAVVvyKQzq`&pUTJdA)Fa6NvNVIrWV{uSfbL1E*52 z7wLuzk7{X4Qka$~PN~P^mek9!HJiQA>?-+EL%1&D5{u$_L5AE7R<+rZs^=p0qB*ri z(#%G(=~c)%!TFzkZU0XGvjOO|QSfBr^KVCoQv+?X7ViN+$z?6ZAY5NDo#gjZy zVHQS3xw#Nr)c`r7b|k|5mi1YCTCV^X2fojLkA-a_5%Akzd}S;CdPzHE>UKj)Ed6D_ zoG*~Dw2J^#uq8yg#`iDR0YDlRY-f8^23eNj!nJE5VIOM{9<<1IhL3qwd47nA^*3i|y6A>){_YlhW?kiaBroB>12Ks z^M_Vgt_SGmF}8X1dt05^E3bN=P^&-TTFt*I@X?h`LSpf~!B!fG zS%i%2-@@0TF$u8w@3?x5A(zH^wfb3A)hPYgljG+{UUV-kyVvLEwscdxsuIUv$G)ZAy(z0ddEd)E2Rx_i0y(xpti@Be-B z7dcl%nsbeYntQWDJ@z&&3OlLjqTJ5}M?@IO$vrE?tmseVh2-bwGx-Xhv8`BB1d99P zZ`m9^PA}X8oS$&aZt--tCz|lzs4>v=xc2he@qmbMsA!crh7(&#TceD~_ueXUo#2;g zJ8`YTSu4fp`OMq9kFRvZN$oToSuA~3kC5#;g-OoOldsq*uJJr6yH|!+ z0)RW1g~^bJux1VeBWN|%lf|yx+PuuhHnr8z(7?*V zqQM++E1aPMV6%X;g$CpsvJ>C6DDqmP_bXNuGiNjHEjgSQVjRb9Q?R`&t=rCha_NkK zgbE1*gL)&;%VTPqFGQrQMwm0TE(Ru1w**P0hk|5*l$37$e9$@5azSeU2l-+7CfDN2 zrE{baUj`o^OW+DWq5a6r+~}PE#mh6AQKsIcx35^g&*xlVuawt@l0B}W6SvN5C9fC8 zZxD7{!>6!Ya|8|B911g-3wVi^jpupd4KmO<9jojlpZ!tW!CE?gTa#Jz64mlG82l*M z=y`;v2dJNVQ26~$M1=hfk{pP+mmbP9Dn9;QX4#yC1Ipi67PMjE^Db3=j}t}JzIVvW zEYygvB7(e3Q+?<~i*1u=W>D*%eul7nMnY!%b039|*`N(Kx9DV;7pP8Y?$u9ptQ72& ztgel>V!=MSu24!Dftx@9^V1fVmd}-?4W7pcPI8c~+zYUQ%{;W#4Ri0`vkR<9bwn)8__xU&gOo#ORr~EyaRtY>nQ3 zU5y#!y2aO$UaNP#W*xU@gy~mL#tq!#26_{~+J5%zSqAwHp%A_?>vJYn=j3AFywSZj zGdx$vJp1t|jf7|U?EbgEc-Enl2YzOxlxWcWB%53d?50s;t;VZ>4gpSp_x8{G(RS6B zj=QIDw%(PqVYM-{xx4;T_-Dg9R&>gNlS^Xc?dejGg!Ix$RCCb}zX>%U_r z*=(?5XY;{^?r?%*g8dovZDWDZ!|KdX{nEvyHSB`4_wBAVNsrKp5w8Q@u_lJ^^Zdw7 zgPnXtdDyvL)CT`@iJm@#kJr!fRAV1%3CoVxvZPa?o6(yyGu2a{@CPRJ@2CoDMuoW& znN=)mo==Osg5X+=D3R7Br*GYevP_>Ajr%DObJVUIYs7MbgbT}Km2R8sMZ~zc$ z0M_9EqLeQvLZmO8sXKycEVCzYZM&a~hE4?Sv{xW$#p|ZmUXWfk_kx@9cpxV%033BM z`SMi>Y_S92g+k$)r_C*TYHD{N4Zy;7&DE;<=}C4NtP>J<88OxoDmNm(0%PJMj3wX> z)uR=U*S)`>K88d_7}0aM1NtUqjL;b7Z-j_*X7Z!%;%ZmvS)C$Qi|MKm%@HL(QN#|hx6W_m~`X9 z{uIJ{fo75QGokNUn8l^GMn4D{PaeJBldi7X@ZVXnK5$!WBwaR_n%!>f4XKhSG@riT znchA6hL@LjcvTj%r;TmtL5|`^Nag0N*SXV`gNGYohGtl&Q=dCC-?37mQw+J$T35TM zs1{hzw?j`5p>2Eg38rpG247DwhOA0bodd%Z!1hY;aKwm(%)mOC4;}@Vakos!>)_}H z8S$(dP*89e5HQ#&Rl{9KB-}rQbukT-bz?xpfE#A9K=w=wHT-;zr1mGgTpP*|g z{UahG`ZiV%U_XzuFYfDgfwlX(GkNNjqmMHt)Mf%&>4h+Chb09c9gGBFw8ltFN{V`5*aPYq`LRvw6nd^t z39rBMOGpJ~B@UaY1s_}wTwDNWc#GHU8>ZCu=&kss!3fM4VahETy0*17i%Gkm*C*}1 z38p~`@HYIeuv@*bTPXY&b#ppn+ey2Vxu+Fc@F=)H==zODQiR*JsGWwIR%*|o4b*oj zc19i5q0@jI#He03YBS0)ng{28O7D9kBW@@NPgZZlJ(Eodt>~=NE=(LH@m4o9&-6Ji z-fFRC7nN!Dy1ep8C9Gzd!>IU_K!K&@?_eIysmg{7jv(`pk!Te2kz(D*Fyz8^xaOeS z>&_{Tp$q42(y*hG<*(mQe0x(R8N9oEWvVoqT z)JiIwe*aGyL#=EQYf26-2h-pUbuMK;6}{=!b}=)Sw-4R@RCGD)dDaGDaL<~$45=~A z{RfBJ_l#XY_2LN2u=j@xL5=Lz*v*uBG({Xdl>6^!%73Rfm6T&9)^sdd4B*y#;MZ` zFn$Di?+;1s&;FO`&a!pZ#tu3jHzrl(-ktcxDi zg%R*%00b*eQL^w@_J~)7dgx$>yAhw#%2l^1mdn3?{|@7^!tSBO`E^V80*d3Jwi+5Q zPoys_x~D~I!pl%AmS(Te>Ph@5>lag;n3;!^kgDP6Ge^zh)1s)|oixQUVju5Uy}=`% z-kmGu%q6xjQ9D7Xm3Y)jDT=p!lHmvb;0pfeEdF5n2am)N+paM>=VVtSMiLAkHh=fkYKPE8?`7U9{c^yLOTY>TM>vGMprbIGlP_LT{Qqu-k{m+tYsdvE{q?T+MPu_wylzniC6}E zQj5*D(~y=LKIQp)HkZR^>bIyH8gbEX!_5^kh7n4G%pz-a(u5NeKim@ zXAm_Oh^v0gmwLJ7!#nNmts2406#WzBNY0+yz+6R43%v1wscR2ThIQ`25a$hvXMv?H) z%dgo0&iMdxO-s1FYKp{XK<~nKh04wCEneVfpyA=reCCe<|8f_EL*PMesIULpdVPgC zTnhN+xqy!Jf(H`XRFE8DfW7EA9OOWMe=l$i0(?O|5dL1u%LoWuU-&3q&OZm&aNGB9fb$AF;Gzynxs(8BF{TpEB6*oj*{TxO z%uhvbMzf`|i+ud83dM3d6d{Q!?y#!6Ff(=PH6RjF7L`yAtWeSP0=X6>+l(xq?Gr*9}_&-eIANjk1ULwy-+N|~pNgy)Xf zfseftzP*#!+^S4sR&PQ@in@fSw|&u2?1&lSb&c1_lL(N&Q3D#N4q|BkNeL9|x$|!o~zb=I&;(G)$aeY<#L|hMCDbNuNMY zX_QizR9b3+^Kpez->0eGdke6Bi$Y*vjGen9~7B)11tjPGBU{y zg7-MI;b@61!|j(?M^mvzqi7s1N`!^QPx-^z#)bzJP;NcQ;9x+!lhCbAi=PDm33w9j z*7=`(E6IU8f&vuM`RpGDvh~AONX%_*y6tg+8}MAFh&w8J_t1NKdO}Uh)ODujgj?`= z>umbg1g@-^#l`(EEdY^)M-c*I%Y!X|vO$i|z7E_JASlaIxUsxqrcOqWlg^0+JIt14 z;K$*&G4q#P1=Pwe<>VBa0PT!xFXSWjM$2^3FsU-1Go9(Z`ex8!K!YPr+D+kB4wr+O zecTZ5WBV>>v3%)1LEOi|%UvX5tkOpV3LF8uzXB*e4~QJI9X2y%xwA4cI^-(*V<>~@nKc2k>|JcPnm zCh@$lojlwo-yVsYu(hSH)~7vUMEa&9eM!rXr#tMYJt68l(xA^h#CUDbT9%A-TUm~a z>~DDZlWiVy=laAme~)Kg%}c+Y$IQoGt_(O zqlYyvwny7dj-U5>yMZ;1?5yn+i%v?>S{D1UDjr*YSY`A{>&{Opmk|cVT{mWqUZpNR zW?ib51gg$z{ux4BarnbRLMOwWDwg_~x`)#wB;njmOuC^VmM(xr1lSdf7=Rq|J!UEi zsP(akUT78@>psGTo^b4v#xY$4d6w}7b*t%8c}K3HNuH_AA`ljh@%y_H&&fYa81V#OJ3$X?{WHi6Qn z57%7*u8c5nAIb6KMy=F9gQAN~fa ztp?BblZyd}0*X_d%Q_&}!$55y?LIwm9>Rpu9g@~1a!Mbw5JzjjFK5)9<#H_5B%Tfbm(|U-uo^XP*~!?u1)V$PwuA#$xqS-3?rzI3Kpp7e( zM4{H#M&Ej|i>C!y2IXt9t%3e@@73koSIL!9TUCPX9&wnSUXTlx`!gfwK9+>N8)i4V zeJEVLlY6oPIk$1dT~fGmCQx77W@2J}m%elH$)&WeBfP5pv%4o}&*Hbt`qX0r;(WA^ zh|D%H0Tip!_cN|*cOwyJPX~~#pXK|RuljbUL9Bid^QA!&O5IXa zx2`p@*zhUzwrotBY-jf}F=9Wj?&0+ir=jQpkACZ_Yc4LKSH6mLcMJ58P$p)M%0qPSD@ z4{EO+dkS=*bydz7hM%>e-_c z0T(80HF!SC&Nq%*CmmTYVUWn$chKm-C6HC>wDRFwtgJu&{azpT>fpY={70j^*2zO0hRykxnoB7c9XVt7lDT2+S zn`}j+?1jR^lc2w({LGg4w7H9b);?)jWw^K}(cIcTtB*n6?RSqfp8Dn;9IHmJhjlEGE}FY! zn`fe2s*1(c7au89Zcj{zzk9F#c)2*gOp>;%e?fytzI5GnsTz)w@C# zeTF#0 za&cwDa}C6WgQ*Z+B)xQSF)*^g5|#)4#dp*Uecf zO4%4Bu9k&gA%A@eZ8%Q}&U$%3s0#io(H>#J4JuWTC-3Fz(b3X|J}-w*iDS~l%bsg2 zz3Q?a|8y2t`da2zHXawjyHMr<{2u7-s61T)il=YGG>P}ldkr|T&~6w1{)9rd;|I{F z7_0FmMLjcwI`jzIedi=D@a{14zW5Zkf8qwR3{xM7LLmozZ%UbID#{;6BQIk>v=3?u zIZ#pYx)}B(UfM%M7}OmWpbg#v{1kej&YS)fufoQR$6v=3%BY*wSQs>PQMx0Z)XCtZ z+9vqQi$q!54Jg=vW3`&7l8)O0Es9lGb?tza$w+b%-CaQ8t$$$(kCNgBp@L{J-Z83^ zRQs(Z-ME64tkW7*@w#*X)}1rOG3P9ygM=84Be4#i8#)a=L3<^aPrN@*0SZqiay0YT zxvRKGlGCR6Xa7+N)!kiYU0OHK6ok!0dMDC{fox+>vN|iiZU1GuR~~BLz@{EAoP6Q@ zy;1BSREOj?J7=E@IO(mtJUF^c;3A=up(1B9!HyW2*l0c12Q}&1SZYx#TAwaPy2hEG~Ttr?8>Zdi5|HCEC~RU4mM< zf++R$X`B9x?R4f`!q-|?BbhYf(j9@r2PEoO@N8e0om?ma)kxR(+xrNhH{wW!Aik9j z&>+)bgf?^$AfK?iw?{ATaKZ!hNxl|a>zDx3b{H0KFneFuZZqavKX&XGZ{=nWbQM$~ zLyW3>5P2YxOsl`4_4xwB#NA$YPw4*LVa5&!U`SRWO$HZFpmE}9S-6zjhMUboKfb`Z zRsaQ~;Wmzf52CJ$n`>*eb3lL_bvn2^=YKd=Am|QLC3^2&Lzqa>ch4Sj2>@V_Q@=`T zQI%gpg8FPAA(aE1^D2;B%npEw64hok?9r1+oS2FqwO!2jyU{&dYCjFCYco(D0>8iv zAHx|1AXx(9C9cF|j*CypTv-h8H?wui)?pTA_Q|ywSTofJYg@oI6*LDl-2HqQaocNZ zv%9VSWj~t&`NnNZDvWQ zVg3;lSAC(~R)L@P?{F6*S8Uwkh$`T0sZS`w75Lro?D0 zjeS(B7eS|*(jVlFuJqtRuCw3b%JlmugV%VleCW7yUP$o@q*w(pdizWZ8f$qA`_jm| zgu=G$gT}@d=79~@6vdr`tzH+W@Yaci@QSBC5*17vuKpBj*vj|Vh!HR6nE9gg_9R9Z z7ov`SiFssBChaF;$pgq%<6d z21vLd%cREo?g&;KK%|g{Z3G?bxL+iMn>Ukyu()t&SOCH`uXrVXqZfVo@c{xB*<%lr zUpPi!JT1VyJW-v-lYL5s+NAdawy1<3lNqh=>zk*O zGoL<3UC*wX*8lRek-5Mnucy=x5>%kva}Az{_86qA5+FTa=R1W{O*wc%FPL$5-H0*a z?6s^ny5~yqZp`A%Nkroh_*cDUHyc^zMTBqgejDmzr4+mKD1Sh4e7dBwC;LgD?$ zund`$`lAvngHpZ1p^GeRhLydzQKi&pKama|WwWRa9%_t;!M#0i@$bR;$OE#>YT z>^D?Zb@L2rp^XNzr>;r8NFt6R3iXHW*q0cotpYJh=0uovhlo6;q&O!)!tYCnmvNqf zf!C45a^aaxnKLw<&H*fcOu0+AMC?&kXX4_I&j(icRZ!hPRgV9~s)uecc$ z#L-HQ$a$P2t;sVMf++Rn^nqC?blwLbAu#(cN-~bHs~y18u%r2lfep94!N>o8b8>EK zZv~inF`@o)epE=+KXtmMozK&|yEOYWL8I}bHb6asemuSxyNtbXa*m#`+8+!QxGFxrVfa0cOVC#7?YQNSlNs4nFu*}9~5-clzM_tC?} zPfLds@4`kN?cP+YkX$uGL_KmlzCAW1S%)c(+v%>*3nVBSve#+z(ek!LfB)R*jG`>+ zW$)$|)5`i>rej^fxw=~UG>~qKLh5iEDHCEWO4As(ABs32B6HuejZcDB^k1nms z#`iaKx@nW-Of6}Rd6MvqYG|Hfjmf;9%Ex*fs9%v3nfLTw)D1%!na#>TMa9wB)X;E4 zO6kWWjL)}y4uU(R)|5w;uPm)5cb$RtU z8R_u^0zy;?k_ITK$03#ogE9~_1~=pRj%i7k3!d_cG!6Dj01*LyM4?hff~ZbfZkiP3Ud&IVKk>qdTqrHdpe# z;z|?z?N9Y#jpuk=^6wOU$hU4eXTIXQeX9N(Cj)*>2anNJ{eQoy;j)pjZk^3ahEYe0 z75R%UW`0=)N#t(FiDw9;u8`!&>0LWnNi@4HJ{hX|@Ub7~>idmV+2j#kmNZ)>nKYD} zC-Ti@{ml7_hemYXlQSVsyWBn_WB!S`oMZM61MN?XUZ(UoXY7`IYppWuWaUN42VB*K z`>&rptt}f_DJxNFekhYfAe?w>Ve9Sj*aj;xvrQe#na2{?PTw?Tr!jZ^@0~`UyuWl= zwoIqYRhI0|IHTe(SdC(Se0&z>Okv|wY7qFaOmfNY1a0%jbPC{WrwHtg5TTTe zvJ1i%JuGeq#nT!JV|M9u15Vy5_{+e1%s!)1P+q=+Lp5~W>|Mf1&iA;9X!XtUL; z^=sG8N$$e90@#``K0w@BcDh}O2GHImYNZB||3bN8?;`E!o}4&hBgv8SK7H$MjU)^7 z#5eDbS4-l(p%?sGRcXZAKuDds;E<&o3-Tow3{^{ z^<(2v8iTW~s>r(&RK!Jk_J}NL|4O2{^@;EEdAFE#<4#Yz*W-Y~n2(d8rw*~J-x`)G z?r3}lIsz=3FJHQ3004}2IjY6>pimWW$k<0mN3g_+(@yGN`dAy(9?{b3$w4q@;QkEdF8F1$;^uZW{1ya4F7udPO0^Tc%;2yH=Gy+v>mbR!OISO ztym-Hye0+4>wgxdHr`P3c>8g-Q_ZYPCQo3j5gWWL?%2d87>aF`ryGX~*3CNp93McE zKQ8{U%;u;=JpP&a+u(lOnwQ4tHzDJLqxSM)WckR-enm$n+G2gW@|f)1rG1s@*Whz`v!qp8S$>=)63qg0a=>o`XZE2*61|*`B2#BQwDk#QW;sq^73+ z0?+*5;2_z?3jG5RW_$0@^w=5o=NDYDI^nv8urkQ+FkP@a9icA#`bL!%`^1BFd}W?9 zSxIl$2adscJC(%t$tv1}rCEVB=_mAF02%eb#4^Pgc*p)hen+?YcT5P^#W;0d_v5T~ zS(Od5JLxy;tk_CKwl%C@bja&J!qADPn_DI7n&57kq)2UA8GK0R(=uStX}mN?v^%-U zkBTp5tv74Vs9b2QAXS`ZS>ir6}y~EbQd##sWU$+Fbkhi4{%k-9~zA#pML6<526?oQzp)`HW8~J8Qj==SB&fJm77QL%Whi#sioTrn~SuvL=#{`btqZ1}# zq47T6bZ7fV)erd}0hH6}3f1Fd^HBtJW}m6t?A%K8nftX@v-s_&F;wN6JJ?4Dk15k^ zRm(DG=i^RerIzySoB8fxZ9FlKJtZ_u-vZLk3Wna04D}ICaC9lx58e%wkXW*-sA?jy zd*WlE$E^G8mjn+eq~(%8&f5;JogOOqd1J1ty>NY9XW)`-zHP!{K(j9Bqrtx+XU%NB zFgXmHP?$D>i6f($rY$0nWHsms=F2q~m|v4-kM!fDeB64ej+O0{rMKigf%Ux&sNe(s z+ac+1G=dL7QnjVu;uTMoHBm$j2cqT$Tp`;H39!Siboo4{lTAkuE-{?ueBvOY+>zz_ zjQ5kF%8qKE=|$#!I ztldM9io zyHMxhNi@-o2~F>nK?KqvYiK0vSaYIXgI%qF82#n^FJ8sJs=)oyf^#-dG5GL-CF=1} zkCeg*S6#HzOHl=$b5spj>kkbG$~R4@yDX;jnI{bw`J zL++%VCRdmwod#SyaL~TcP2yR687ARblnjhR{y_t|2X@GsG3jDFi72eGZDZCh6TPN8 zbW22J>k^68s5GM7UN?!I)hC%L4&B&m2T4-J-MfbwWwR3t7wdU_s8r-S zOR(nM&v^-VJuO;O#f*0=GBS0%JobBSqb>JZN@TI#>|>OLBKgTH1L*^AmsLa+xz#x* z4%!fU^ZK8cnwaNo&+N6u7q_{-!UUHOAG&*F%F@E7>X--ZF~<906_J68rCk4LF`dks z#M73;@ld`-CnqOIM@L6SGKDYSnF>luNp{oh^cQ+~>KAN%%z*2fuFrYHg<0gLW;88I zxK6fpa?GJ)RNkrznd`f>+%t5V*<(*7hw1pL-?|prWfmf18Ba>k@_xf;Oqz!1 zd-^nmUu(R9!dDZ$NzPvxdDhso$Oa38J*5va*}b-K)-p7=D9WaPXmXMrp&# z-&0*&;&5($GmE+AV0q@Q#DVuT`@GL9r7Q&~R!TWWsV0?;+`=3c-LHhZBrKeIyGb~$ zYuYHz%sr;muvK^1Dubg$Ow#Ffk>sc}{1T1(MGnG=#HHrx;DD0}x;;Xqg$;YbOgD4M z#v*P31qIaNqz!Kz_+*RVcuy@HEOn1EFHAo8;$)$r@s*x5l>lhU3Sai?f-)o}d42oU zZbdKtwOH(A3`-DLJYP3}|7rRG6b6S41Z9~JBvM3HE?YY8&Y#J`!Eu4G4XOon=nNS% zcPn49Jf-l2u9HX7NreL!^f~;N{z;`}U;PaX1NXe+N2T(?XG_zxRn?LQ>aJo3by5sR z@LO+}-PB*pDAHK;%5)C>EhHNNmrfpX+G%yqg;Z8al&@#!Z>vu~XE>S{p0q=E?VKbU z5qDi4>M#piDW-f&O-QrpWJr#%vLK*GG>hsPeBZ zG-h-(X07nJ&h!&oR>~ZeAAT6=4I|MB-S^U(vniTe?#v8!e$hPBg>p@oib{TSZ1Su^=l zZXL~Ae{&dxo9o{;s|rR&g*rwAs`&^W z%fJ;O5ff_tW&YN^F5dC)StDr-w?8)YA*Yc!AtK-8sl8Dyd*{XuR!9|B#f@7SjeEY7 zvYrmpK<#$$1>_1TizF;b3OLQKG{&Boo``517$L11Pbk{vHBK`OJtsoHSjA(zL0*Ev zMoysfP$N;Z6!}=q-oMQJIQ46u;(bC(ji3Xckf5@wJ+cBax>aT*S0%Rt83fv3m83 zcj&8+BWuRWjys#(*l-?9DxcQdiDpAwTF^rT9wM)bZ_k|>Tv*lf(Lr-79Nd#gyvd1O z-cxs>B=r_Pco#6XB3)^K;w9*#d7_?Wt4Ck4l%*d!bUD;zE->y~@}Tj9)w-xg_3p-2 z!N%}v>L_QnPE5b6i=JGI$b{^Wea^)0apMw`Y&D^aM>g$Jrk?qix5`Ns!yD|O5RWa{ zntE16v$4mQe!T2>GTWnxBNY`%TBqHVW*FE#y%&GB)R_-$lh)DZNI!#SYmUQ6Skl2~_w99H*#pIq}zmH@4{bDFS zGT2cUW#*-__z$p4pi|d(WI3G*gV;mcU~v-U?x^annc`G1G}aju7nUa{nx>xRd+juI%{3t@NeY z2|bs%m8o*CIN7h5iJg;N)uIM1g@?{Ul=PZQhiVOp>RjY}Swruoxto4k%RDwad@38a zxc(4zEoqTx(8sK;tRYc#Un^wg%8qXL`Uaq4ZQt*-3fjI5P=4WOfTfka)&2_Q4_qS zueu@*#;a#{2pnZ$FS+bJvn7$*beXGUgAYrT-o+8vwL)9gQY3q?X2twi+H-|NBC?H% zS@VL{we>nluM%;+vG|gXaigb*;N27AiB=93U#bksKb5#ybB>xCkH5=WULT4^_cxqO z;x0=cyMj1mP<9@^{~pumsU|{hTRxprtg~WKvatM37VT}Xml`)m;p(OvSzSSM6BNAAVIFhYmE3eip$Q?8EKOTfCM)KW z^{E6y&px$b`P3Qe+oP=<--)AH3U|cFa|NB1%a!SelW#irCW3d5^uCHRRj&+5dGljD zvF&K`)W6T(xN}6=2rKz!@Rd;~RH3x@gZ*;BI`XK9L{l;S>DFddm9Cev8Ri*gsV?6r zZfzKah#+h%QY`6j=|$0?tTMdqrbn~ zF-bG$8Kr{UZepKXlLUxUeACKz>xVv-OP`rBc*N)x>WHjq2BO@F^UY(EJGyi?#Vfp@ zxH35J(pD{P^_CsxF=p5ed>yU2MwBa!6e(YJo!+USyG}P=OO$JXXsbL~aeaA(9+S(H zX}cqvntM2TFpfC8mtrt4bu4q;g{X_%t|!4oa6OoAJafG$gtJHHqf*qlyXDx5?IIEj z%5EyOW+=->*e4TomQDiILg%!nqUjYVRCCm`XQ2nYM>dO{UOP1zr3~~)T8y1tU^u?! ziB+?no*t!KtGwnX_|`UcyRmVKwq=@TeaBv`WF_~)lEdy%tmtY6YSAvW#@PQ$s+}u# z%DfOYSuX3+q)*rJoYwm?owp%T+63*>Oj_?ISl&tE`LvBq4lY&J(Q&(o9}tnxJM?uw zHaj9htUF1~td38wo^9=4up940&~ZCMrOH0eJ=#4L2iJ)16Y<=ZjHYjuci@IIVaLF1 zJW3M(cA+iy?K{jt-FivLm2b;CM!7j&%UfyRQk<($thj`lYr~o>sM$pY#59JK=612P z1bYivLE?b4@<>>sRuL8w!j-xW@6zXYVog zVtUaZI25P!6+Pt@M_&*cA5x`17?@=pv8}2+jHsx(O#AdT5*Y}fOj^2U>$?msixi2O zsN6D1`cBhC-c=~hk7ICa@trd*D~@7mUAc3Hm76o6ZWub}cz!m-)gV;bfowS1$N7lKERpUZcyTY*nZ{=zVng0SD-%a)6=xaPP6L9G!1-^tzOALsCtb<^SKb5 zMsE?flCG+x`o5B)BhnuQz}y_MSZwZW_Zzk6^j2GrF*W{@M|?NmQmrYPeq4*A8dsJw z%Sd)P`dYEz@+j{hp_4b*9q&x||4o1Yl@RYLi3(g0AT5wuBPoK%5b*@DCn=p}!)vFPJK1Xml6uK| zH7eUnkv4r& zp(^Az{n;p6HM-hV|Jm#^Hd<^}_C?e;EM_Sn=qCf|K+5E9qZHdGX+ew`5`SaYxTnj< zvvB*T-xDA2&pdN&Tl~`^^`2#u*|)96KD1b>mt|yL{v<8!HnzfpD5agqAxE!QMy{)|Hq;T(pK4V?3Wm;CPsxRaQhw}ZPZsQaN8>}eU>24U-@fa& znb8*=T4XZq`CtxHv}r|ef$kyg>1r}dR#)m$QkBIHU^ZINzz!1+FX{{JD+;ade8iU8 z6{;?3)EgF0$Si_V66nM}%FsrbCeq$vGfh=#S3)Z_vvjC7x3j1zi?TS$w?;(TWSE#3 zupu7Ll@*0<7KOHNEHq*^I<+!;dV$0}?Rn*P^J8=j)MI7^$XljGoGpCGQEF;xDr%kW zN^N}AY487esQ&E^6wlrlGrZ4-(-hlKILQ8G!AMZM&- zAQ}*^Xr9StvABhU-lu4RP$z-T)tdo}xFOKAr%Am2sAGV4JMZQrYM)0E)#GM#eep5q zSqRnwDbgt)90?XolY{Pjq+$~6;L}W&<&BN_anO;qN%&$)+)VlG#b1w1!b10gMYp26 zXCo#W;Iwa9(q!WjBRU7guEtLZ5gF%i7F56e=WG0tAo-OMFV<0+OW2B~^Pz8tZAKHK z?K>CFWtd4!JZ+V7kzwBQe7E7@{4SI#cHLEM`i@PYBO1}`cEpH^Sa8os>StR>`1X`D z(jwXM9Ts~vhW0`s#&#wkd2y{I{u%|5*QEfK3n_E^G3WODKSn326Uvs-Xa#~5CDZy)no16W}FZ; zxVOCI`LoMaC_6ue7x6bgn6aI&`L`$xPH-AjsBwzdp#H)J67D$1jekUB8vg4o-{_tf zw3<4GvyZ`mQ_OFv>wmSHdHO#^8@77FB-a|;65|LgW`4`Y|FVzyZFBJdsL}k=wBZS& z5?S;8C5jE5#2;bqUwYa9v!cwX->)mv@q6Bj6WWF!*Wb~e`||qlgZl4xnDDvovA<11 z{?k8)Q8_V_`i{|`5l4(@@X>t9)e`WDt zhcJFPDd)A6|IYCga=Mp#xc+St{l9pD|Msr44^aMx_x=C;v6@@y0EYW56ZGfv{sWbJ z!yfm7Ds|oWpX7!7C$NK>PGkHe2XPSR+rRJSSw^1o7P0toTPY|N#NRLZA79|VD*$gr zTZaCJ_x=C;vG4D@|4dzOMgRG{|LmJUrMaF^-RZmjWy8#Bk!IxeE=6GTEG90V5WQ^r zIp&(CX25yYAGd#*urwIvn%F+^?}&33u=;RSk)`kw-KRP=0>{lDRox0QU829gzR5MX z7P@Q)Z+^!3CegSenaHi;M zISq161Y@l4IP0}!Bn(ROM&|IGz{_b!x-d6Sk|4&(tbzkS;Z)0_xj>TYN<r<{ouwQJ*wa-5_op)6QGNa z>v%#j8Tpd*-cauSvS)^UAp`hIOyPV~A71wp8QfY}7EnH+mRISh^ZM79x^GZkB&uB8 z9UmVLl7a|DMK(4zW!6C&p8bNw9OcR}r`t@VPKb+7|DM#d(?j$I!LzwgyQfQ3mswd` zx-1Nd-9D(QsWrU4c(zw{W{KN9pQq?ue6IV@y3h+d*hJR_G5Vfbkdv-_FZ$@0yjKeW z4QpOP!9!4n0z*jw7M2-6vH|-vA1g_4tR;`6{KzbF^D}`cv%oc%`kk8IzoS7g0))UC z9yx^l(S2*ek2^?P1>`u;CjfQ15)KY^;K2yiu1SJsM4duvuy>#lG$mBP+R`BwFkgeT>wZ2j<0%(M1#XjXUhJI%c%fEF8ksUeBj(*564p?j}lX*?x|%_c0c!ARk|ofxdKK|696$WKwWKqGN=-37vX z2q2olC@)`}n|leEgdnHe49*H6r^^6J0F3-fa25eJ>bsaTQ;sV`g_(dM1*yzkfVp;y zfSnHj!n=d@bACS%WnyBdfEUBuaPr2@n?T1h+A(P}J$qACH994liCzItzSV3Ae&>Aj zofcjdzA1&D{0+Q8 z*1oEw(%BW}QSQGUy`1YNnQV`yt6*)n+o2j>2BOM1LMG7Yy8vtX0q4j@=Q6qm#4DgM z8i5EX+!b>G9fPKab`Z$4f~EnOtiA!zEhy{&NBRnAe)toRgR_DvV(tPRU05+(3!HSi zr28g&11L4M(t@7iT2{`aC+=*|?jfXz*W_SE4n9YNH(2vnV`_*xd6Hkg^v&oS925{` zQ0-uzdXPs3VqTF^OiBhSaMX_5?9=iA+UZ2Sa^)Af# zo5R?bbVj8C-VOZ$XWZrAg_g&nNO)deJBCH*g}#Y=Q`D**Z*rPl`q_mqjybI7*-%dYPs-D<^083^V=l+p0}a1>)zK;qJRR*9H2_7F_M6e0{iJxqkbej za{)IpfTX~x9Bn5?3v5JPxS1;z8=XKm1mjcs1n}kA&M9C12u$ya@rDPX46^i30kop1 zs0fZ~uR-U5{K_4CA|fOb**I+|!A1Iz01TplKLZ!xE;xDvp+)GlQx#3PBo9#W;8N?_ zhd;_l@VT`H$Nc5sX*>{VuzF`zYBkXpWoCJ5=-G#gUtf91&2ORiN=VIxSrb1_VPRnz z89hAhY$>YmCj7x(OwDaBgdMfg1|i)M%c}A}SeZXGH>>iJyLqTEnTx&A?|e55ZVD@516aZpg^!-Ud@>M>n$ah!EeywshgAlBUkFL>(b3H}Wa8J7xj0&HFh0N07nL92a{ZYa(+fHAaPz`Sw*9(1 z!8kwp^a5Rafg%Lg8TFuJ#a9w2-f2d?oo?9r{XJ2?zGp{(H>qOj)uR$ScxP})D1$g( z4GyJ1Lyxc+`yx!LXaFiN0DI-S^ZqN`UG{?WAWY^gMhk>{u^|Yu9Jk)c1EL$82vG7f z)$9=!K(hnmnCIvv+UXUnNQG3%FL7)e5<9W%(TVT=d1{4W!6kMe6aG6TVz)RFp|$35B#EruqR5X+qZ$#*WLN(m#t&th=>{uILRB#~w>fNy~2)DQk}6DLK#0OuC0 zpy2ZYJe>{_9B|Cn!L|>+ebkftz#{~@BF>BrAfzC1fU{=+z3p9-J50}c{TBs+j|*tU zVVg9%?LYZtgw^1A@rKFZ^&!Vc12OS_ z0gTCS;_wr3Kz6W%`yTlgL{kj~9PNmevJfosG11X}H^jUlKmULvnjxUl6teg$?y&|& zd`gH8qluel3$<$r*=#>g@dG@J9K>jWxK?ToR101Z5&>L2NN2c%3Kt}^3J~uo!ixc& z{^kCxxC56d;7rV(u6WPF4c_7aw?wxmI0Bbrt}U+X=j5f{T>WZ5oea^({3?`|2d^FT zJf2M4a&{_2DfLi@jSUv@f;i8dW^pM9^zX6xav{fyQKhEic(AX;*qbX zr=}<=Y(GK-fol&x&9AUluzEPt!1;pU2CExJUy-me6}T5#dTy+Ie0%}|k;-nfAK~}{ zqxK?|=Bdc)er7t>uIL-A1Z*0ppnH>8=1D>O#*B0>|BPJ^&6atA6N7f4B& z?e8X6`W!Cm!#82Im2_1azNJN`Tp4ddQ5$PW=0+SL729mWfAz#qS#=h(d+XZlZRTmp z{4wt9p?I3a&3x>Gb-0w`V9BJz$U(!ZgI1%Qyb#ameLU6AmAuBvTGm&plORY3^&n_P zPTEbtm9f1|kIO>>|K-%P?`O*H1=Ih^2?b|HvJlyGI;Sj$ZGw`X>M+^AOb)dJ3yphZT+5Sz0cq9u62HL!C_|a`@ZrMpcLc@G#;?^=6B(mY3?EvY|;V#=NO>t z?1~BsuuXtm0^V5LpYC(#L$`E6KuPdsba_n0zEH<;4{ zFs#O2={Tl|dtU&(4QPAJI`$nJpsbAQmDG2eINl$b&k?GOi2|vJrW+*)SOk%E%_JVFv1Gc>j_znmy89 zre)q?XkUR#hE}*rZRf$5U=kD^Q|Hfu7qiE?i2EC>{dGH7w&LG}4m+Qoq4ul%ZsB{; zU#=@g+^-B4XTXKG0znWE{juEn5VE-s{OaD`!DF)V7C^BB9e9yQSV(A$G72$12f7lM zdMK+ULjDKtg9i9jA*QmBibKJb5DutqwZ+P?OgkKz6=)eCj(!835`F~*t1fp2@vc0~ zI^s(Gt!WAouK*TJvGTRpV6}RY^#lQ#SbOqdf>tiOj}@q4Q=`+Q0?${ zho*7Ldzu&+#9O&CoS=FJtZMR`=za(@KS3X1477`M_WQy+FbIPN9tIYg6v$-_U6L}M zZmiCT;(QqJ)J*cBWiiU7i3MbS3VFlxY3E`O`zx*Ykq7)tvVmhrF9>e8cdno`OLF9) z3>#x#afej7=vDlk99)(H{)y!Xsvi|2rY)4q)d5E`=lmN2v)L-wV*+OsR8$@WrvZmN#$S1f7i<>l$VT z2L7t5iV6r~_rR$Hmj&S!*axlOp3ZoovOYP<=+@Bh?x(kigln2M3%>F~^o&AiYCAR|V;L zcvQ~;I1e&%AzvzUIBE2uk_8X5*lH-szXI`3Q&SUSHljuc740V^zA4uEo(HQ|GZ1uw zNEV;4gbpOBCTj$J^CZgTD>X4S{GU(g98nYnAYr3fD{U?{^UmG2@nm1elT&Wd z##I-XOuo}Rnk6ow9Cl$c5iRR+l1aqL@jm)n_8u}$pF8Dx;-j41M4*lu+c;;kuU5l; z9BL3T-*D-U-L~9-xAKp#6E3!Rs0}(-q2EX3U$4(LTV5)GasUb>#I5%vba(X-6aYQH z&A?2>rSb&iTOdd|fxf_d%}6ESKSNVyVr)!FMHLFxT8Ig$d)j$0#f7Xu2Umlz7hce3 zuq6SiIXrzGjcp)$yTEzq#hW#MOQAtMj1-s<|3Mcn{s0hvH$y@YY8Vt^rIfeOQRco5 zXNuJJ-=6caesmV{QZrOT0BVCasupycU>Lyq{-w*vsMSC9qqe*Ct5f2o& zy(QC?#yLQfsdZ}0e*;QG^YET!N%G(y!SS9n<9oJPgXBnlOk!eU7iBv%%tFkurd2?z ziUfddD|9x1I)=Cl#p1gcw_2ai#p2g~_>pyL>2D&4;^*KO3)yH{3K|{vn2^%5)>=ihH_-uJzug{cfJHe(od?J&!dKcB7kCMe(E*G zPXg7*Nv<^a0LxUBWsd~4&*8z^R$-)IuID(cZyZ6Q@FIqVj#yk1+6gU z7wF{2Q&-$?dN8^3*KC0C9i8DjAxF^l%IY4TKlqc)KTo?rHyt#H_sSAD4a@@e^oPo+ zzO1rMIGobV#5S36!t)yczj^pb#JhyMKHrD!;l)-yCyH0(MN~z4$-20nZ!SF$pKReF zg8>A{H1(XH1%(S};mV*Lr0TcOjQWYJ>JwXiTyK}rm`EV=5g3Vu#t zlWg|T4!wR4Y?khUT2ALKk|kp(S-?e#j*ZG$$sJVbBJn{$5sYKBfNVbV zbMP8~eh-yDXcJTc0R@Cc5Q_E*@D0iowS$xl0cHXIJ?#txCL^N*KoA#)ZV$o?%KREk z>>wP0&9=o0{{ajnW-W=^_YQTnFMWDdcn+LOq0vZx0bv6s8$FP|zG+}`3kpC{Z35^D zkV;?x1hIq}bOgENy$ zV!_Pt?L&L$nOva$5`pIx2>Av?mLEQq+=Ipf?FLszlHjP6%U1gc!cPcXeX#6_UXvIC zE*Kb+rhuI-l}pDq7?Fa&;Cnb|!8Z!&gEVcj!5HL~dr8Bt(=W6%cT23xs+7_QqtXZb?YA8s96yIDV$JTe-jSrPT(&~E;V>|QZ3N!G9xv7B2 zW`Zz03V$CCQ7CAujRb%`0|+eL7A{aayTZ~$BnWRpP{S%kJCQ04gvzT0Pn(+R(e6C5 zd6XY2h5BuuEfG@ocbccCAE;+>(&)d0qrH0#>+4d!2tm0#eKV zCQn&cE^Y@En6@;?l{?EtoaqRYbD^+LwvpurlZdAK9I!xSHdwKZqv7q?L2H)EvZ}JKgY(x z5+~GZ!V2erQ2{)jui1gVAu~6(y5Ay(>Q$Bm3jxDSx+X`t+ZpKl;cwnOak(#^H4K_q z2vsoLhB;gI7ZCSw0c5|s(s@wzfqr@qN+r8C$aRrS;3>HSq0w#-Y9Xp_=N`L6p^6LN=h6Yw`ccluxF@h0^Vlt>o;?XRX7Lgi8%y2%io7^uC@wFO_- z%go90h8y~G(((+yNmAMzYn*`?4fyiUq=KX zJvV5Lwjcd?3<9IWpp`l}2zom0An$~@SzGN)3HnMvfIJT;y`!UJ$|>aZ2bSM32!h9M z4qvnz>8oO5_{4nFe!%B}2^$OC;U`ETFu{PA*bt_uU+A|%jSi1kpg z!V>~d#$TWgGQ9cm%-xfB7N8Es^n>UM(DD!7T_~1ncy^wODvxs(r5CmGP_d&rW=_h#JIdgc* z*f&J$f{H4ST`CAs2&$=Z4#G~(29KKT*Vi{m=5;|(hdpsk__x96<$6c)f455hcREFO z$iRC7x_j^jbVGz%PlG^aS!e_e2k(g!S;AjMOmf3nUwwdZiu7FYv|v_@j9=sYL0kYz zyG2qYJ;4bEe~f&Eiww7bD)Iwv#RfF5Xf%BxJbIAv-kiAi8qA9Gcn`j4e}wz-1Zq|| zY8>jJdr<1@T3c9*PuII4F$79QSBCeX(y0vb5o%u~k-=&K+QeWu)~eUPVjySyPTz;_ zH&sjOBx1Xc^n@_iq09LADo2!qdHe=w2v5q-!gIdJu5nvU#oppzNY&x#xmGBq;C0fn z%Hr)nd^Glh2Yz!ro(rVcbXQ@+0ZNNi{tc-)IgLt}N6eWYgdHEjfQXu$ytL?xWkL~1 z)g@waAh!wHzz_f`fr0-J%*Yz=lYaUiCBskusWz<8|Gz6~a`ilYu#Aw9l9B?23UTqF zpDPVY*QcYbvALO*0Z_$B5CW0Zr;UGGZyc$#P0fL~mi*g$?As=>^vjJmL)Yx#;H+Hm`%J-B4S z$fSnv@5qFs_P?E1EgRx22i63TUBZmVlG%{ami+f!iZWh{QW-cFC6WP8bO$3T9y?_yn_csWeS4$-WkIk*+4n z%8idsrDJX+KKsqNz)spsfTYBp)1zA7u8JH^dwMC!N*R%%>TQu*U-;>z@m*%{2F={o z`bos(=r1;%5j9$WS5Ibdx|?-s^Y6#+hL2zEJ^P>TMCN4@cn63WoN7)Zy|fh+Zw6Mq z$?vC~vxqL^)zqEVmJf6gMx)c%f1eOih>nYE)e9RiMkP2wb*F0=i6L-=v3N#$x`U%`M5x#EE`NyjVTI`1aw?(UUp8UEa{ zf{85{JppGYe_agLuR~w)*bsN8 z7D1z%m$8GF?I3Pfl%JpPtsPrt72J~_%VE>V;VMN?`zfJ(m457#Y2v=+0oio0sKv#= z7LtK=lj135mU;^J7s&fA!*$t6i`^AI_nDe*LGIc0d%s1i{#sU*ITSm@KIZ36R$VkQ z93V{jmJhD5Oy)5w7lqx|jZ*9;e1Q~9Xq_D`wnRmfXHcV>eV;>8rfon;VN#z@< zewWgYg2WRn6DB_*kZPfq5KPG$d>SG?;L%Gz44A4?ZTmZZnW7^S+j9PSZsHx5l#Kej0@#XP&#F)~i5~v& zsZuoP^QV6s8UH&5^6l@1uadJ3CO!5yj3>EaW+3t9I>SOk{$uw4*?l35zJLGyeG0ST z12(3K!^?m7M#0g;0UDAI#sBx%DQc6y<;CX^SUeYeScL3~0j^b-fBNBrB-e!Cu5{l{ zx5|HCgrmVD19@#$5iRV0|E~@j^9Az;hI@l=TGQXI>%jLbep`^@>nNs{FIeSdFZt$} z(pUumV1K_$b8?#0-T&Z<*FXe>_0n%PJK%z%xVX5gk=7#7{~I_CcI+s_9L37Y3cw=r zqOM2Y%{L|A>8rF{D~A^p?Xi*7J^s7Bu42yDCo6vqzdlZ4f#TrJ-`|$!<52uU&A7mj z6a%`AdWb0`2)Et%-|H6mxiKg4!NAMQ3pNxuiJP{I_3k_>!5D|?HIXh4>I{I50i69) z?3?wzn6s7YzX7*~GD3f@k3F8jyWl%~Xq;yA=FJ9HFMEdL6_m>@i~a*V3?W##-Pik&Hg^}!609AgO%fj9yj_;qwRP4&)IKanEr>$2ja{>-#4IM zHw=#Xh_$Hrn);aj`&4InYX>xL+{D~f{eLiNA5#BAxU4bCj|L2;2?I|T@k#uBfA)ve zX=FLpd!!{j0{{I~GXjYFF#X>jzl-<(1N>O9Jb0arkGrc=i3rG5!kLnT2yIH<9iN<> z4V`eJyO+`F(?Wp$z+Ad(R5?kx@v01$>s~R)+(-5G8^6TmUs+mE5E#%4WNDe}UW!s< z_cs1_4Rt$6zsKJshMJB+g92(yR>y5^6BDev_q~|OpSZftK%brps4y%N;|&?PwA6&e z{qFb{W2~8{3_4P@KLjp#uX@dpi_%+qC|TGJSBjp-@^?qz(iV%Ff&a@Ni#K$IZN}j2 z%WAu8X-4O$F1%g}AgYf8Lwjr&)@<0lw=%QTu+ik>b&On~6LXJsuCRi0f|P*S6BaGs zrk?7tXd~f)iUzU?_tz*E+lN{E?~{Z*M+>cpyuD7?Zm6-<46P@d=CK>OdtEGxC$Xg@ zp4w2unh}lhW=+SMh6I=}2)T;uo*NhV`H)^Gn#ga}{K$(*=PmF#+;DS|79eZs#f*sQb{tFu?{Zlpz z=F!@JR+`xaq#XeLm^U9N_n~R;_UKPx{R8vcJz1>uiJO@8wBruO9)X6P-E=i>8r_7* z=3xE#v)F_L7qT&4#@CTGrZXpPM?IyZuP-uYO75p9z_HS(rm&LLl8>z@roXi0E?0^^eJ6~rMH#L< zX?YsCn{L%Ja;c_|Y5fTcDLS#Xt5#%yi^ze=mBbCd&EU~lMYOFQe)hoC>r6U?kDhX8 zT4t)5$y~daBqcD+AN2K$_E-8edUxKS@lw&Gi;9C3srWTJ#GjB1aEiCsydpGoDe_`icfEmB z6^-qe`~(e(yqb?;2lKYZ)(08`hBpnzwwCc&EQXuMbe5MxP*)1K;f^GYvf15v?VA`i z>Y&KpGXsNUIb1DW#c5dTzWKiST3P<53ufjCK}zzhCPHipQKJ}Y(=iyf$a16aDP|X7 z@#g&&gcHhj*}1r++QO+^sra1ObW03`4!{Tp``L&w%Jnm}HQ@EW{$ynGOrn1#ZvtK$ z-XA;u-~nDueZRII5|yD#cdL}!i&dp1hl> zzT;%V+2dSIsxVr}9*eh47S2lb$-97=UyS>Nk$XU*LH;GGA_>;BEoK;2w+eE1RP+}K zX|&3q8`BSL((SZ+AKn@|J;9et$B)iC!IoAbdSalYU^wbCLFNS4v*O-+6KSs&EZA!7v-`nz{YFcG6H{?psYv8I{y%TJTkL$d~0OWr;6xF|jX3 zBKf->(x%H%qp;QHY35FQEoz}YyGPVo zFW~S~z0+N=`{d{|pN{~5KseE`ERxv^0xc#_`2lN zjQ`T04c?hm@xv~q$vgk!<^Pc>kGQWU1 z;b2Cm)u2v5z%J}y%%JIopfG^xnd28Q5;by&QaiJG-~Ss88SZO84~I&C7mOT11oh4` zbh$7Jebad145#_U%Jj+-7PiTuhEYeo`mEvja1A|~RQ}tAyA3NIdah5MRqw!cDGvMD)MP3fD`@e6*!5NPpmbLQEZOX11mImu78eIJqDAasZs z6cE_vo#-T~E@h&u&Xlg0w0yGiMIxhekoj7SaL6rpUS2|e6B%yl4%7{4vedMCHGbFo z#4VN;3^C(L*oUQ8u)AfV22ghnU5^jdOWR)PBQ4}YFi#%Q#_ATmJS5B2x=FZf#3 zIt0O7)FJ^58*LC^r>3IHbhHsZ)Ay6lojG*XIPFxF)4=zHGeSHE7CznF^Iu;KG`z}_ zzvum~;h|X2{v!%DVp|<%jGAm6X@eGF*9PIg8iX;5aGu`J-@s4zI~`(MgHNEwd02qR zkid=wZrEj*p2I8;M5ths@CNqBoGJli_@5j7jS`>Vj)|F!KNo{e@AQn`SssKH9mx}P zj^u5cwoy%?)0*bO60c{%(WtGV`&vcpDD}hd-7pm`WksQ^>Ro#ga0DPDT%YfMwS*Q@ zWsn!k=EWODLX~Rm%DY{bis~^e&)F4{F_Sqt8lxuGH975wA;Bj}*NU(atPXfoYH&%1 z-pxIYz9jy!sFTnSS8>8Lt%S>X${zq-H9(RThN=ULvP4yK zT4&Qp<({HZu$&(Dl{+n2KgF3^VYqDAdy`jy;J%RVAgIW}rsEF`k`QwpfF5Mppwf-> zc?HVdQ=YnALd?s6~?2oD)b=SMpec$e3hu$ z79t4E-v}bOzt@695YZ8g-1;JzNP+Hj=Mp&;m0IYYY*y$l=;4`Fe1Q}Lv*XaJB()jZ z-#pdcwA;sV4SJ#%?yU2{j7xYkte(x_MvJU;Yx3a`UKcp4-1?Mv!KT*1Q083}8w>v7 z7)&`6CFynLU|u^pZxYX1l2}@4{kH}_NA!8AT%?Dvvvq!uQG^e6@ZmK&EiguafjBb2 z1Q!`t8gi=haGSzB(YGG9Hxa+%v3s|}@t?|*q-ws+ zg8?aXR(Id}?~jRQNV`?F?G#GBSKljo-yWtBWK#|p3)rluktN|S{M6(%hBb4~yNu^l zE;G)mab9@&Jyg|1*YXP2OeBIG?s{7~{+P)+8Q_l6dve#|WqHv?#on8ZA-4SMbzHjQ z-(IX%TGJ^DJ+zgmQ*s4~(w!cv#@>sxgoZWxUb;m)xgKm0S}-Zq&3dRI zaBy(oe`VU1c!C~Z!Qjp}T}n9xOFcZ7U*>phzp{veBdlff)PnqB><=F_1{6-?Azij_ z4@qoK2%)~^y|;NM^SD{N<`ln9y!CFDb=HfMlQWkhlF6p!PT(YZShN;# zMT}i^9a|4>$zZ7&Ft{;j{FS~3ho^J`u-tZF+6Mw}5N6xJj4X?+mz-T%Q+!$bG%PS9XMLpDObOHTAN7Q)g5E>t|5cgr6BCo&S1ceelvC;t`TDFO2x`0t+idyf4p z+i!Q|AZ0s_bQ@a;zB57Nu+j4cfEx_<9jkj7EU=w79s*wDD$@(PrEM$hFs6t~FE%#z zz0bpLSRz=$Xc}JKg0vn6!<*nH`~dG*M`_t!4ZS28=-+dtfY2lAtjA8+3Ed6D2FdHma0e2lTrmDpV?T&U|d zbF_IKevN@Wx{46DXs4Z)Fw-gbbu9MznjF7y_9*f2?;mUZOvBehzz_%hVV}hIWxfNs z*HS>Ea0AMJ{0rq|$=jokUV>x7BJ^l`(Xxpl&#kn56E+a8F&&9xN*!bWL#-yTD960^+-FR%OhEBT4Md;k|e_yi{&}=S`7E z9O6Jf{MTbJhl1;`2X_LNi+_Iq8YUKCmnC^QU+^?R0dkW=+`t7?b!g}ubi)yYvW$au zY>4-%{KyJ$6l@Bo^_h19ip z56BIO`5m~mq_h!H1Dx>0IaO8W58T=Fa)DpQR{;L_0YE3`xT4;-mi!%%JR|e|!%go) zbmMdxm0I*?lW1crDZ9FPSdoM9HefPTPbeu{xhA*+`aCY_$J~vNTa%}NO8}c}L>Sd) z8%nMIXL+(N1VyD7MnJyWR9jTS3T(m;eE)E#0zNkv-V2xntCV?o`SvXV)oKxxyRKDg z*MEViHiYV%UI=1Goq@tW8c+#xyMWuIFyZ19`>0LU9d2o7kv$zO4yq1a>14o7IUji^z;#eT;{`N3u%F?qxd1; z9X&8MOpV|bw+}gXQD-rUUq--{>GE&@ydFJ9fa_#>6aY$08gUXdk0A{GKCdMRa-#^u zfLG=cgj@te2fkqAHE=aqHTBJheNB)Eq0|kFr!}|8I!vTps79c}%eQ~WO5id&s<%=Uj7T*IjL!N`u z{Kwth*?kNsajSTnZSRw3PW_k!WcObvA*|KE`wWyb-dF&%jatAe-7wfCTrA*zh2IU{ zVRcs;iwBSW-W|7sh!A|hN8vkLV~mS&^RMRx=MBE|7Ru90`_%vr#21!cuZlHz^d;V` z{0cV!V3-<|nrabCGEGqs^$;%juPF4W7dmztH=tN7CVxv1M55O+@S+I)q#2x0S=bnn-4#+gMY5+b5H zUMeXKYps5ejQtE0i0=K+wMWl?f^DxF_1rp?r#I6?Z7?i zH7tw)kHzaG zL+s+3E>6VCZ-WP#>vEp_1)S1LayE!4K}&ZOeG`-~7uc+Wk1AKt^YfqfVD;Q62P@G^ z$~Aic%t*&hoewMAg(r6v5Zb=JvLLm(`2nJt|82H-`7XBQL%BsTKuPR$huH4-N!@*b z?qRy$N`B{Ye^Zq)0Aa`a79RtSsS5FRx#Ca|;IfscKH=V6!P2<&ypC)n#|Z+T=LX<2 zOzwPiP8>)1vZmVOcnCeYAMvC9HwW*3bYanlmdqC+D!WLp^4Wo zBs-`@5h%9ZK@ZtC;GD_!=y5$5%Lwpa2(&?iKYjc5GONSHUizv@z1CH`Y%6s=r6>q!y6HPfN8pX;M*BI^a^l6UkWA-301Yi~ zq`u}~n;>p)!w+BTY-z6T$J=wYS92x5fRDg%rdT&;ntPxDWD&+^ci0vb zn^{zeJN9tz$Qgw(u;&hjR9E$}J?t0|EC5!r0wj!ixn2Q#sH3UAmzStm_R^65 zP#q(+Bw3aE&WJn$3ZJWnOGR@4$R-2&!h%r%f1o7oQY)RS_Fk{LgH6ni_Kn%ebRlE^ zgVk0*mjZ~xFVPPxHdNyz87Z0Oz)*0x>h1HOYi|=R&rloLK`~4z@cLljz1%7wh<^at zv@txO=iR614}ds9Djzv`N!^|!^A;{+^8jfY24^-f6{!PgrMFZ2?Ncm8&z>pPHep;w z!_RJ45Ry=Je1c%eXLyR)KL|LVAuvtIjow0p2q6Ljg!36#tumLwsVA#*HHp6L3FvAV zBnj#=$pK>R58V8LYZv{-8ZhyG`9s-K!;xmMhpq)FfXULYq8hRot4P+q?g6NlWbSd8 zb@|S+6!^IVys*o$docrw52XtkB9v4}6F>I)gvqJ3?r}I=$!poYF1?7=iL@-UhPXI| z3#x1x5H-5Fq@1Q~Q_AIT_gDpz2qjrQ$5@UmB|N_s%TQznz9x(t^snF_p@$Kb5g}mD zB}k>OaDuz2f>AFw*k4_m*zQaA9c0$l^Xv_+D+QzEP~T#?uqzRBsNxd%E;qG9s~R0a zr`sQZ)70z=&i8u!pK9)(F9Ba3H2}Ld2ocsoQ*_q1Zn`)*za4#M3tEsp%{{uCOx_&W zJ;*TijtjWDw8s8zpz9I6y|(Y0@&n|~KF%>o$5?xOc#)#|`DSw{Nj z>En{WnNy13T)Tcxcc)|bOy`+_dNLLPx!nuJw`|}j0{qb|!1`7Bi4%6)Q08tMVB32b zw*fIE!=0;(SL_Sf0C6aS!t8q{R7G3UZYg7lccY`MAW=VWAlgw(2iRg90!RWFAcJCk z+Hp9hNQ_7ArmT|EUY4!X*7mlm-sMch%bF)@Gy=4xEIax3U5 zU|B+d*4U3_i)x<&{2fdR7TQZce*9SMG~mYF=MCgmz)gcbZh2C8(5m1LBnsebUWane zLZ*%vQcW#by}^>fktHs{_JLJ`7WxHTF^IbNF+9-_OI0~(5;S3oN+;t79I2njPr;ad z8;Z{&v>VAjL~lSiUIQo#f^r<;HI*)O4p6kRY0$j1vd^|$zs$SgZrr1MuM>Rfa(FZZjS1dwcW5>-12?LyfUqFN%wwC&?(8)-Va{yqpw~x=KxY+eR5@ZPj zRwe+Sf%|gHK8S=})>#vxBf@9_d!br8adf(FwhddR+G&^#TnH#K`VhP(B{xgyP%|s( zz+@74Im=@~D`Cy3R%ln2g;&4~*5m%S_>s-X#@3e`$Y#V5*yrYAAWxE>O_I^%Bd^UJ0msk-YqV=dKXNSt*}W~xRG{Uji%j& zBw%|q9bfBuy!XAEc7@(!%ompRFIX?(WTW56KEcPE4J^ygg3nj z=-b8aNDFP1Oa=-~*SVWZcR-N6gZgB})M>@JC-7Pgcg9i-j9nAa*e7>aSWJDm+C5%r{J3>PWtZsm@&4;Da2h%W zH@1?C2nAuF7x*ho-94fJC_LO-N*NZN``h2b;s^bfk%=nFTZ5DX>hb--T#1%~rwO*8j5nNthj`xd? zl|%P@?d{nx*PWet53q(h8i31;7t<}j&(H7&`u~{IL9(Ya8!Nim*XJ#?@b^^}NPhHd z9MKc@&qb(J$32BO(tQ5US6cvYr*7od@*K{S(yo3y6MeNma&hqxUNH6LRr0f)-~ARA z(!1$oMR3t@Z{vnHp@M1w^uD&X_Qs3fSFvQr^vn1*%(FK6`JL&=fFupw&2*>KD* z=4_|nJVmER%F%o>;SF@^e%w^Vrk@>GsjWKT+nXzoJgPo>Ro z;{9fPDzScn?t+qTE3`0@sDw~s^GWh2l=-nuQ0t0H^`sHs1>oMaTiu&MX)?s-;N^)a zu>Pa*^R`tgGd~qar%lFJNbu)qjI>P8x95sD>J?l|e1#UMExkl$$(K+!e$&bOmrD~P zmHlkoYw%C(B6;?5aR_~41hR7bPT{8ahv#f}O-~0u85I+^5X*dypO}u{vXawsYD6 z|0dcsM&d`|{!2{AFT;#>e@ zg@A<j;4XVID|3#0QMszcK6AzZrHMq7eOs;Q|pI8$z#1qC9huQmJLQdkn#hbpW}3FQDL- zn^_efaz+8#w`&%JT3m&}er_A$u$!Yo(t(eH))qetV~i!1V1fySB8q}G_#T-X6-Cvk zO7iH4wY7C_4S2vBam#frAMW1M=+y)P8igby7%7Av|Na;TEIYGt2VScJC^Vrd&tfHKpID&y*>*yNeTAe460>VFS+Yho{5h&2_}p+o7>mDlEJcpa4Mf*QGu%d}c*uYwAS^Xri^K z;7+Rky_0cL>bKj4xup}Ft){=$1Xg&svP)PYc)64;9bjjq}OzVoMkRaZI@q;rJ8At#L5S4!?u1D)9*= zR9eq{YuDTWU!flQ1%xXKD;Q;E<>|TpI~=4DCwxAr1>oJiW5E3GR;43c$>;!vl2f7l z78I@|1cZs-EP`=8ml-)ZL+7qfEtt+YPHGA8t)zqKob{fcrRk=fh8TeX?)(^!N3Zm6CGbRj`b#?DzA>2P{t{tlq&9_yeH+Kc66@16^wLn%~QkI!^Qs zEO9)CE+OZY%ibz5qQ51_lP%GL1i9&g8QB zRpCiu+})SqC^9aZ9X?Dc~RRb#J{w&!B})e_z5{xV|? zkIGT$20Av?KyPT2N1i?MxNxCd87rZ4Os$Vkc`$tbNbbZ5ruRqC6NEu^BIKw?x-6&T zvw}L+FGtNP>kNSirZjEPllxYe$hL?)x?4h9MQ<_%ZDR_h#fLMrK%?}PkF0vRxnop} zf0gHI%aLy;Y@WtE@t{Mu(z)*hzIFD!|7E(R-u`Fr>=i>zz5qLxNl z(i@DUgW%p{!A7New=f*24`gL0;h*B*kIdzdP7Q=1>q7iDykh67 zIOE@4E;U{(+|oM}oOkhwq7Ti@W5r#G?=t>0_D=nj@zV^C&JZb4fHu4f8Gi0CQT-_e zmHuKKNnWJuw0>Y3hH#<-PU2lN3aqLVndq+{4(7Yyxzb;HHT3H z{}9^B0APaA@TemuqT7wi)z#HF4n&qDjmA1k&g&PF!XD~8H^Ug&_@GE9D1PlAtTnMHDsI}>00WQB(9f!=NuqewfdG(6(9}FW z`qfTLLGixcjg+YF&83*h!)~6V@AowRh(QMa6QP9B-BK*|NzH^Kv$2wMUiy{XYWG@g zt0{YLK}iS9IbqgRmkoY9U#3CL<(+3q? zfT6~e!!>GQ4Iv@omoDn&;{hTrHt2B}po>XKQ4{tzDY$e+4@HWO`RL%zU9To;IAM>9(fK|rW!$!x;Ii%2%aXjw5z(#0M_*5|O@gx0{BPRN`) zhb^&`7Ppjo9E+R8KZ-j19;Xos6a4Szb!_PFu~MGZI>)Mh6~C_PKImClIAq`qJ9U%Z z?ZGS4fU4AlM%rhxcP{#&Og1-T%-YA$DOr^SRrD^M7|a4%Ax705jFUD8zZCeo=t-o= z3!`1!Rwr?6wI*YR@aZl=-pjy=!AYdq4wR~42Lkx`J81Z#pPX5ir_c}mxybm?Ed)1` z;=J>kcMsQ3Bd%KGEgL`37w+0{TpBK#OZDf+_xt?!rpa8Wo44a+)~yYQrW1WLE$!$8 zrbo<-XD`GX=zQX_uB$fAk(IAYD5QF1V4D`d!IvCA!fLWWHo}$vx0oa{ASjOa4DSd( z89v{f`Pvu1ISI(<&*6YwZTn#}8xa>9i+EzTAFjx3!t;k^HXn=P{`KqEaTi{EeNeNE zW*ZRU^s_~#gs>AVpTSl4-T4FPB#c<8W^nKU(k)s+v6xg5-;+)t8y_%RQ$B(uyw39_ZO8WQZGZPtIG#eXk?Q5mke{ZI2Gb2}uaR;axoNP4 z?7@%t0MqdUpd1~IrQEi1aF9I0f$1=)nm9q{I5<44vzB`)08d_KM~vbM9C{eM@tB+f zrdb^}9_L+B1nb^lh|n6fQDQByg&hkDpn3zO;Y#FwE*hrczbZO4<65t&B5(wX${&5Z zsexpaWnPY`SOCR!8)j;QBc#N{NT<6^@f}8_0E0_1rk^_pgDkkfar!*BP;Sp5Ji)x_ z`GwcqyK2(XG>yAaJcoD*z`ruPo69y*v5Oy72t!gxoB9C^Yw>4uMMtC*#3#K215bMX zhMt#Ep%GVxN8!w5hS*7tk0P_MCrRX}*IXUjr8`PpWcfE?;x%S%Pa~<|smaZ+V~D0a zg;>J#(%;ftV+a)~Kyzl~+?T`?G$|ZQf?FcILcimj;yPMWn7&BE@HC z*uv)ZFu0M(`annTa}qkjn7tk74vp#~nj zT$T2Q98isu@XK~^H0X@@_4iGbUs%~a&m=1m=jG)ge)VTNk6jPr9P6C%t7`7w_X3Wk zolFH4k2pfhdGQP3LUpf;(jns>+^w$GC=H5s!W zX^{ENOeG=yOzIk=$*gXtS0CjSZ%9yNUpV7~w@A_noB3IJFG}adQC`t{|7L0`DS2pU z2t1m;B+0ypzk3MH6_CkB5|Wc^CyMSjQlq#uVtZxqs|;Wo@&yhvuJF~s z!2LHoWm@e5;ghWITvf}LX|K$Nld&h9&q~zrM`><@EX39rj!`K?e ztCoH7d6*$UXZ1ux%E72IqH}iE;o)Pe&QwsUfW_m<9{lVOD4%izO}Y?+-LRuj$>>8D zrnjTW9{d|5>kz&@Cmhe>f*zoPeN3a zU{jg7_IO2`2TCNE-!@#F5Z-zm5gAGFkV_?DMN~}8zTQ>W&Tbmv??WT&`d-)3*s$hE z0zbZkEc-U>t#L9PVh45ZgXs{(N87Hk?XQeiciTo6=T0XkQhX9YYKw?6I z)@$=|PBCa%$lN)4>5HBB*8cM<4`rUK*j|3=lo$92svO`q^Q zFbt$#sOCCLdwa2!2-ZwXP5x7-PKr>eVtelnb^b6mrGjS85tTTjNnNc=oawP+`aE%O0%A8DSpQY9Y8LI`z{zM zAl^kYR8IaYK~6PX=-Qc_QhYo4c26?rkL&Huo~7BiS~HRarCv-PBiWJ{!99bx(RNzRju1bFD7Qq)0e?N@FS$x@~g%06G*77_W z%W-}RV+ze#HC=r9qG5IRqpJU&5?eaMR+LLQ>e(+ znEZV9YnXKY68VjZ)jPlNPLD{kqV-8fPtB`e$LsF-qWrLQr%IxKy&@#2=TsGqnCM03 z*jv{=wfWtkCHK_5F{18v_IXH>_=doBQl_y}zxb9u4Ln~?6>7#4(B;&hK(WhB(VV{d zED3dEcy&fuFR@Eqi}@gP{0X6#0l%id zU%9lSF2y1)DcjP_+FIyp5=`!=3qVIg<7g}8{Lyv}EUPe0N9>Y2Vp3KpTS{z6V$T>e z1+T8&J?d=}%-MeWX9pX#64RL|J55C*RK|9^z|@>!1P;qW+=DZFtf3Gcz$;cK=EPdT zD;-!N67N>A`rslybt(44de{%y2dy`ln#@L&#%k~ym93(0Wv0Cg_i#7FQ1EgUW*!+N z2AsjpizdkOTT0!N6%7ox*V9ZoOS}6uvcQP>eflS}v0G*Y7S3$t8MpI^Q!Q+5<50@F zDi(Mn{K+pmg~g4eP19n8>C#YnP6;Iy6>E+=4l>Rs6N4b+WOd1|qF>AT$`kjRaeL5d zl|2#7_QU8Hklv5Mp){HK>m-@Xof7l7d`Z7>|54D&rk|kyjYpqH%IWbm%@sBN*hG*& z5`zhUtMQE6sQy~`8vZlyJsEo&n^;w)#u07$FTS}CYH~(IxSwnIe(u$OG7*=;apT!^I@*zj!H7C_UY3v z|A*WKu_|FzRgQ!@T57T8J1X%{uJU@lFMn3IbaiO%Zg{|EDIf8p;exw2?=p?(qF=S8 zniFO!wByB#Gi;HpycFMXyrR5unQ!{V;Rw6lH?#^PcFdb=e$s7{``+RiEh4Fw3(fsw z2k-J#IXs~h%X9k0gbIDH5EnZ! z&Otv2a&ZrFasN$S&L)HP{yTjlz<&EknP!oC8P^=++SCp6bPJPUiTNkBwWe3oYpz#(hmm;T#;lmkzO;mdyrZ({x)awxVLQ%|E(fzkZ@`(b zu|b6~WBr36(znyY_-=}rR({5t(@Fedjc>5KN}`!KjYi7__)<`gmlY&F*Sp|MEhZP@ ziV-II!rgp7$TNW zxh(x}F9Q-{XErfVvM5c&4s!)ex3N+fwq&w*lIWF*<8x2qFRsc~kr_~|&s=lOsGsf1dny%&9v2FcOyUSO2MWlm z%2W?Yy+fwO?k}GqC`9pfd}YYWavQyYWrL8+at6c0U^AeXiZ=Z>zHzrh1#Eo$=sL@A^Ysq*C*LetYx&+Ek#&NMfyPE zL!0nJ1`WR-tXlZw?1U~1Z43`XM2*}o%g2b=akP6QiX@~nnt2>LooXXmlfT(pVdZW& zzp0ZDTzciOi$z)d?F9>czvLCUBpy;Fg(>m1_&FIYl!bJ8c}a01G9s{5cfHG`MZw=EE&3O;|9||SUWQO3d5M{c^B_zJrxz5W8=9- zo{*x9%}kHFhmIg&%=*r@N%nCu#dA*tiy_)$!J~L7+%}696sa=jKoW*Ulzj4CXRcA zzkw#=;o_i2OjMyJ#om0$DUUn%lJ2zQ!c|RaY9ql5ab!*kNoG_sr&M~l@p}{egvM{Z zm9o@9AxU$uVJBhh&F*6-u`llINJZUZ(N=9w#E#aPL%&~YiiH_$jOk9q8QZw(3Qm5+ zi_^hMMWrNZB6mMaSLADt)EZm(E)mAOe<{Mzmver^!Q4D|#n)4@{arG45{q%^=ZS!^ z63MC|RTXO~B{cVMx-0DhTH z2Exq5lN`5{lMT+CHlO}3T}-w@^Wjp#+(IA1i`mipsYIbz@NLfOmoY#3$`rA;(FOv~ z9_okpwNdE3$qf8RO_5}<#IL~QmtSeZsp+Y`jFzlJ{|v$Yu$RluBk051NeiBp(?vAQ zeMD3Tqldy?j9?+fR??=Se~KvCU?*74IaIwV%lr!RdW&w~r4hQ76z(B1!_uXmN*>k+D5&rwj6Tqz!QtonuL^Eyri|))o1+N(#1b zgeU*!uO_K~V5l~@@m|tw|6T3kD^x`uq-|EdAgveUK4~NW>XsZ4CG(1n_0RL4dj~n- z?8f@1Ezb48GKl7*~#tAEm zjC}HaY;kYdn<$h2xrmjn^fTm1hu^~{#V#)`<>(_Ak|oNdZMQr7s@3qs~n%gy}4WCFJ``@(Jf{a6|5g`nHbWFmIh0I{aoJ zGYy&&c4ETfqO3rC7K6Z=I%^dr!pNvC4j zxAky3KjW2|=q|)Xs^uL-%Fs<1`1trB)8ZDmhigL%>`K`=IXM{_n8rG~x@hUB6O*{V ziaPH5OT${h7Y5r%aKdaOx7~0AqdqKLZHA5j?d|Og3nuc1Z(j(jsHlJp0bPMg{^fif zc@yg1lK!<1+>GPLE9NSXdbq?Wxe>~$2QPRZ8P6m&!eYW{>|GqP^yFzC&u?i& zCto-ZU)U66sBS2DB7S&y&UGiTQpQ=2;T?^6$E!a{z=CR?PqE^S^3lpFpAlLCzcK6c zlFP@%_57C{$kh&K74D{G?dVq~r+a@icqjG={Ve-T@B<+iz$*_vP@i=ZF>edG`KBno2FK1=J#JW1v`TxEizUwZFJ z^mTbdt<0F=Rq&cYg+C!eFk?s$lNY=45B+4xHdCHXg3=64k zk~HI$!!ua*|61mwg;BnbI35)I#wDW6U5X;ac+joZAUM77OEn~OYXK}BUFQ{>DByR) z%8r-6SoC;U%sRLpTO02dC&M1xjl}cJ|BXC3#jAsgALIEg{H^p{gmf^JqGA%Zj@Ih^ z+M3507E1}!vq!gI>r_=%rYZxA-?eLenCXxrL~eKzq1w%xHw_FZ8gZrRn1rOHq&PV_ zf$HY&#a;Zb0ouGQ=Kh6vVW83f+9leeC*q9$@ls|tJIq-imI+sLWY`ec8+DKy?P-V1 zmEPL6pWm~|1PKxT+p@!d-*jUhI zl{3djbyC$+{9R~GWu#i|{8i$lC^{%!g4j(-NeR`VKuB=SP31a_xA@8-`uh5+jOq%j zs?>+)yoiNhioP?*HN*aKe3~2C+jBk#D|2f{T5=L)Vw=S&qkn*)(v`8CJNNF@aN8WN zoKfH7u%a9m*M@n3t+l`s4pJ3cy?#s*9YwX%k7t)l342RKl)0UY_#Am+k_urnqSE&F zeOd+SK$uc5KJM@51NJOvJP$G}A<@n-k)*r%g;)>?+ye?Sef{+Jto8F(S`fB% zdQObnImOHy7m2yQeEIB#LzU})8Hnz#K;8_rqw=BV!BY6@?JW}`zwL(P;siwFmoHy* z)DsFVIwvaguwZ1zx@dvQd~8p;cp6LuyLo>r3JYx59>8}#fBtMw_9{QFGiBDfX^Cs_ zJe`n&4LVbZu`K#jIBUI@#gcTrdS4Zj`$KM4mZlXwmMdn&%k|P%GCXz4Dl5rKGL-MnXQWdQ=CX=~- zk-0h3$hXg5YruEz!Dg|c4(~6WuNHqg*cDjYjtLq$%4Hm$HymwyddA@?<#rNFNa85q3xV6LxV~QJ;%ZU? z>(Zdtft#zSjZ8Lzljm4%UBeW)b6H+BS|ZG5V}ya<{Ztfd(W6JNoSRh5gN!}CaWmQM z_V(oDDpEIXJ+AEj7#3qj-#x;3x~-mmOHsM!9uAtJTl+ zg~L<&_e2S$oXXNS9O)^*pvJRFX;VND%Un}g20faTq_4_&@*yWmZm@f_T8&#@u}X}U zCXFDT+UYe++`DIOLu}^f=K++{+R;;96=K&GIu`YqAh!>C{Y~gIol8y-_BBRpjFl$~ z)o3_d7HcD{*f(K)1Dh+~YL zPX^9c==YW4BMVhL8pQEA8hOIBuIA1n*uU*@-APYR&&Z%)WW1N19kcWP{rmBIS?o-u zZt^PXlq@=wBpnH2WJw`KLGtDHA!JhzS!B(4@oG_sNxCAKFpBwngdL&oV0?S27U)aH zAR}VNvoI!E6K1QR5boLS|4DUodV0F`f-A9%S8+c7f-J5HWtWPp>j%i+WC&Oi@>v)e zl~Fze*-f>y%e;u9M-o~qa4njRbrP1ftm*#p5ws+-sq5jQ{l(Vlz|-Z{6dPDkRRtMIZdO)SsMuv^w}_8lPD!vRMQY zVfZD&8ugAFnY2&CyS2M>nK9B=$OrR-=FY#<-OS3*a?&W(UUJlC@leSj;6_G!aQ!6~ z8=n09E{o3Sd92txDe{N>Q41o>4%dB;ntw#v)^-`7=Rl-;2`U31(=(bU^#cO>gQKJ5 zT|wsFn)ACK$4^DGKJ4t2gjqn+xShxJ2w|-nfNg5ifvAp z+A&SC<16KGXNAGNNFHV7!X{Mw6WPjBmxp`8-JIagZ%VyqE zwNBu5fcix1SAZ=~h1Oq21ET{jH4o20x&kVLmLJ(e${nhI768g|#VGF0rG5zfA66j( zHU>nj44Xp00ythn&G1jrYiei!{S$wMEuoNfdDKOg3Wt2;wD$egr>mgwx;pU3K9^iKgwpn8CAJv1D?(Y5OW{S4` z@Hc2=;NpM91Z~t~fBPnL$mNFS9k(W$W4&#H18Rq9I_bSc^N1(IpSI zQ;&LqE6i$vNhU|Ff>p*caQ5t3N&$;b0L~3HnLH@7kq`@VbaAhzQgQ9Z=2?F@o}(eg zG9fwK?&#xS@)%ie0saBsgUy*><=Lyb<&KJ481#291zyY`Cs3)ek`X9e^%V<6(JZ+~ z^#xM$0LZW!!>sS4#jxA7Idw%t!#7;X{B7y-z|CMX}KJ;kB{jh?WKTQ$Kr2r8~XZtOZ>tYI^ThlXT= z0S64Vj!2x!B*i)fC1nj%h(Y)m{-4ePtaGpYKaT>?z0fJh^^N0x1zQMV(NEyvt*-~v zEy*1hLv3wl5~c^reRPyG7-FKFSb(|&f;=+(o=(S?G7fHiw}9t2jjvh!$_8PWuPs|4VLIqTI?yn!0Bsg z!IgZ&mI*liA?=4p!7JvoQ>=%cr4F~0j2KI~Y-zI`neoQ8I7zM06ciHACb*DvcGA5E z&{Y(Zwlv?AHQ+3Q8LEvN6zN#Lw4YaP$GT9aud5sC#mmn>z`gq!kbN*$4dp=3QV=)X z4mC$3#g4UW*470bsqB1w*S>Df1KFsOgO+xL)fi5DSZT83exg-h>SJB4nmHYS9Xn zoj!a*F3RUy#JCDs_sZZLJBj-)mZBCZh8_24IEtet%V0V-CbpKg&N$Yb$UA~k09h6R z+z;z)sP3IpX=%YoI#x(DLvmL+ExFJ}U3~SEx}gH+m$>Tx+w_NURu7hy0M57OhdAHUXwmz$<>+dLC&aOjP^+bUAopNImCdirQ5I0UEdw zi3k7Pu!P$zmHPlT>fO_OmiN2Ha8g;L!4qu7JcOjl$RCRi&v^amBQe$pcAeXtNu1*Lv zqcPw`egh}0TVMGt9V=ocmJv`6P~A|Ac@5f2oN5ez)l1mk0{L;HIcRJK6;(nOf>1<& z=AJu8Q53Wfbil+O)(urv_@TX@v`KyesQvQz7Eo@DkWP}2 zI1sdl&C7Y|^~e{HkC1cV>W`aQSTKxatiLYp`{aK2R0CIZNsn?JvG8J+lwR7!B4#S2 z5|_Zy{V*mFG-g{|%YDE)?DdTWNmY)k|LFh~FP_~32x`O{lETOG1sD2x3lxkHWl+W+ zbw}xxh{Hmr^%7aG%xS=yFvKis;;#xl&En@}*^gj{3NWmtENUvHmb1dbf}C0Yyr(87 zDk04|f|HGqg8N9U+e2#};>U9>Yx$LvTqb>NMF+J(d#BdKJ=_@@S|0@n*p>G!UKA6-z< z^#KM209#~keVVV>30wrwa<8E*0a;22*=vC2LZKhJgrviA=-p(#R z9g4>~fnEZ79YSf%4`4cg9C_bH@Es*&t1hTe5v;#DFH8k|K6?P{sBdUU#^_sRP9Sf@ zSO&Rtba~b3VVxC{ke~^-^xJBJ3LU5mr40??rb=c;$f~O1 zn)H-S&_zV_I-2L00Za+X{`>&_AtX(9+Tq@<7whZmFt%{*cdM&I4SHOHkc1x$z{d*h zm$!bC#YKfAFcuUcL*xr0D;T6r!TN__c%r1n*+9Fq7qIK&4xYl0zvW&N)D&WQammi! zKDq@v^9;)xEd`SD8ek#{OVCQ-;Md1Ma3C1Y<7XME3virj!53ECwtG(*Vz2=~U&R&@ znRc_!!i7-U-OZGJPIsKbfbmQePR~oMSsLB=-*#87uu#sfWT2}By;m@-tf&C<1xpMm zs`r91i`aLKn0B#JLtRi(C4p;W`*IKVTWSrf6nB;G1a*>93@>Y3_6h54H*0e!RQdv? z#zpw+ODVUZ??~M~6c6{r75E|R6M%&2H|6tPflIwKr6i&KUjVnq*iGZxbp7>3GQ@B% zcD>s*+s?JSm&biTh^`~mzWV+DRQr#skoC!A)MVbi>ja5vJxNUWhh{Wh6&lg_@1zl7>Q&WbBc2**!pe7hUHq(RA^S?myKsdk|sU??5noPNCyyTf8Y+)O zV#Hj}{syoq)MAom2&sXwqat}r7oHs3tVJ&uieYqym$z@zIvPs9qMzg55Ch5TCsk5X zQp2TCx+`dpjY(?BZ>Vp@&@euG`4qp9D-Yq*M3gi_^*wW1EX9JLm2a?B9Z;1CT6L zb@e{&yv2&jO1UpU>74fdV_k@bJhVh<_5Ns4Ib&jGCh7V@%+ZBPh9Ye}4Ck~#l~FKu zMbQdUAAzqkGBN_O79f5Ye3FMg(j{gSG#yUA_7)D=2yjvZK?JzKln@uKm*$$Cn-hb6 zTkf(m)6@BeTsRs;Kj5g#9#|g~|JIP$C172E&MS&+`_%agS)}K6feaha%M%ov2(kUd zUBK{I*MeW;h@Ej?N|3_`V>BgY1bBCo@!Z9Yjz^@uyhU0CZ(2I=e=y3Evs7gvK!tsi`e4M(0zF9F3MO z0_W#?=XS&h+m)-(mOxCENQfNHQ-9;&w~w3qm21ff*qWy#g4U5G4uG{`(d3`AgerCe zJ_!jE4&&kFE(FM*;PW*>lStzc!7GYp+O6k%NGfaH7G>iIAIjDNPhvIY z%n<9<9Zv?111P9PD6``!nUxsTfQ~JMt-)VvB}*n87coHp1*KUjy;*j8=kcm69@11M zWn@H%QJ`irx^@fRK^D}1nK7(OYrWHZ%lap%yMdH~tnXu5R1IN66ID4q%V`i>$NBEr zd!J(b;*{y?;*Qug932JxrO$VcqeADsO62Kf>%2^e4B@PmqNWDfzzn0+V>JS6 z#7h0@VZ{Yk{38 z^kTl34=3e9crpN|3UTY9sv;#PhgTy%6$;liE?-u%o>quyOVFA_vZ5oGDrr82tNM%? z4p$pchajsz!S!(8W*j0hH-XMSF{^Li7Lpg|kI-K447MIN8czil^ru-uwqV|B%?u4W zEy%ZRu%>%*idC4d&%G#kNQQh{v7jFc=8Ez*5cJm?k;?`dTg{k`Xou4or8SZawgyme#2F8O(0g8axQ(^aL}`g=9}r z7v@(`7n>9!YGtdv3F=cY$Pl z{V<>ByIr?aWvZV*WorW9NmHBhW?wJt5O`KbQ08ZB9Nh;^V3BV5Bt>dQcD4kdnZf^v zip01Nj2N$*ubG0w0TpyBF7dyYBL)G!=nJ9>xt8^(oonW`8v-#3Gr!4!ZKB_yrxsArI&wO)n(0(e6S zV(r#VCR0;WNWOl6ZeO3PJw*YWRX?G36NI@6IkPC#36qdTw$N2e2cje5I`~-L++61X zFgMaESrk?(WFaqzv%S3yLfGDV8@QKadu+(4^1r8yU*j$8G_X`87(YX2js7GUdlJIv za6)|cD&E6ozSh|h`+XMfop;dJ7%V5;hq@AQ9C=BqKJowC-hD*)~xCx{!+b+MBJMlxtE|jhIb00 z!C2U0thx)v1%&@*IrrjBK}!~T-)g$^8s}BO@zRh~VK^6{3HuqTw*4G$#~<$dn~so{ zU;1w3dWOib^2C2l2m67{G#y?$+amFrAPl_+O@-!n@3+L^=Yj!H2Wo}cDgzgo<(=Pr z{ZLxYbmsi|ZxDTf%e;e^m#Fg)ZD|I-xrvSri&rxL>zmL^?iLtrLB!k7@=HHzH(nPb z8=}Dt!%be*-25e!%|dOef(Wymw93RoF(BLj3cesy+^Ot52zD&U(zW&0+dqNIG<}~c z(2eWBE0-7_pROpRD8ji#K}I(6%yKz=-9{2((hx9#3zi~X|2XdYus1`$9NXzw>Y&zp zg4Q9D{$a0>P4B)uvrL2*xlTx*1q<%@c~C;g`{or|DKH23adS}84(M1~CcY{(($pj* zb?33%N?V6|y2p)B@1VjUN(#`r{XIYdMmLyQ!TeT;u(}pid7j2s|AxDjxK}E^gP1j3v zwGa(?)1jbgYyB#iI@n)dxB?|bv;l*vW&?~4JL&3nr_^aSi_X@! zaxg%$Yf>{QQ8y^6?>K$-UjEp7kmG6w|DoRG0Vp!Ktz-$?s{(oBhXW}7A?Ajfgk8wO z7_NV`R9XZ|XCRK_H*LmuAEDLz0{WuBTcK38rVt6|wq}DaKX9=EU9`Hoio}IOoe2a_ zDxP-YSomV&i7DIxomqGfdE*574E#sX(v*075Y>p=m{)lT=x$@)Vf=zy(ik$Fr|j&! z4oq4=4MWe!*ah4o05&D3q(lghK=W7f)d`7xh=fFvof-gXq40!mx?Z4Nli#Y{1Yts&(zhJt3Fs zF+!4l`3zj$gt>udk>zhp^WqgGzwE%12X|Ch=Z3G)B@osOLfgV-*OxKTvJO|z-5o(& z=#4?}##p0H+;Cr1`2zPw`BEV$S2@!G0X30EwF3oZvLKRaWT&KRTu&-nEGoPV%o{9H zkL$pv*&6nHoTOuF8tc<7S!3QoL5X>_5XVe>$v{qpm;blgu(Y5!P&RFJ=`n@MUUF|6 z{+W+Pm0l$aZNE{h^a!4$3K&pYdq$Un?ac#+X06V$qxX9q2TQDNl87duipWu9o9pDmpAPr z8pPBfktdhef(lv{6tB!8@Gx0(XfrI4&p=Et-li6lKK4By7uOuLu5oqcA68bdn(F!$ zIV-dWS5Gc{T`Vsx!$(1H2~`VUf@|8|E;0QQgh;b4K|w(QLQ?lYZeRnMIws`QLuQ;6 zrhwf>_VPIUE@P8badWdl-WAzk2)w}IgU}w~48-G7va@-rS;(XfJUturWbVCOJwGzg z-(Nr>fh2R$lYcr92{Zt^bheh&p(=>h;!d$P!G~aROaTtx9xpC)ChId4(&tSFT9Ota zc&#~vaNv#>5)M@7#u|-hT$c8Lf1oohW2Znm=ZX-;fXJm5eg5^< zZYyi31<9hI>R}s{9Yn`%9dNr4>bXbCE`3SJ){*{~4Ecy+^zU8949wVAUHsGcYZJ$; zCfz6_6Nc=8tv|w~^;J@MPvO&A)~?B@owZL;d5`S#$xBRu`V9XquCcwneZ6xQWHRN` z`cQ-(G92_=7(eiqRlbjUPxI(XaxeJrF@F{v)oErj)B9iGS|q7gVnob{b*0oI@IgoM z^RZ4bx`AZ=N0{5}Dle)Jt}?QSO4P=+E0aA&$7jJ)(vv}Na+7bD#0}dK8%`BP(Lki> z$(ZdkJ-~*1jaUqck1Uq5*IcGjFmd^m%nK0^_A|NikG1IUN2%dT#PyZ|P?4-#c~piu zgf;0~Zqaoc;|it_p2=&}B+@F}_(|bp4HVLW#fA8%tw`Avq}z9?yF;qd{I_+b<=*ZT z2)a_gfas&0r(lTdT1n%g8hUC3$sG;lZ$aWiGcz;7c5^a?WYV$1pHa|Gd6X33Z+2(L zy)+|H$>bo;eAQbeu25!UffnMVOFCLq1%+_fcF{scbk>#`7Pz)F)&_C;C>4WYZ@5U< zh9&dy+u0QVb*}uKPsy_-JQX=UQWALMb{9#w*^$xqRKM0v5#^%pqh^8zFQZu* z7|n>3#ajY~z6=by3S~d;r;HF6h;!x}FuEdu#L`tXQ5BgY;S&Rnukcu(wbpFTm%;P!=3o#e>)PC}WmlN||W_*oLggY9arkNc6Y-6V{y z(tLu1NS?ff<41>oJ+sFn2L8mU3?}_PrjryUGFO1q2b++fq^2i%O!29eG0E(}T4Xsq zIiQE?tx25rR*J32$MEDWfc^nOfi>td-+aZ&X?&8C`IEr>gSF(U%jA4pJB8{6s1P}? z1+$UB4!(1aXA0aUwRP$SyhZDVxaC{563=&yoC6s$6^<7UmsaUS9Ejo*yB-lwE zh3`q1F&iQwMX#vlkx&!lYI?-IeJFVNc0e6;^sHr2DmEW~2TUVL_x+5`k2^RK*vB)= z#fH~JrIC8g-H|dYzLs41gqHO=yyup+o#oN1;BBUH+VPNE7yd4i`pf*{Jh7A9Ka%pu zsJ?HjvY&J{|Mj@5T}R6@B$WNFcMvA#Dx@e1B`||;rqsWB@7c+P9pBnC(P35B7A4LL zuj4%ydUMqCMsKm`A2<9M!GeWq+PV3$ zUGT)4OhraR0b&y)aV%w9bjPm&jL3tC6QBZeP5$)MU$Z|+d;j4r1KxyB8UJpJ{;#1N zJvSNLO(F23gJ1n*E$qPU`O{husLSxqUu}l^ZO_LE^c`bk?<_Hnh2eobWiUV@*w+C> zhy-Xf-uTxVN@|*h==G4yTHQc4|MmXR=l;WZZd?B^=m=y*4>jb`tDN3h#b*98r{u^S zL}0|PSm2EY{N8&9^a3e0biPHu%$CGYRx@2XV-J0p2z>J+e@*!U*3ojec|zTOHw_rd z*Fcol4*t)cX5smWqK(bJz9~YmhR1d3KR059)TgzNmuJBXZZtoDY!fK>CccjqP!430 zKP5bwEBbNB;3&wHbd#|8*8FQPYmaD2GgNiabLR@%fDVlj8uJ0^mE$wcACGWPHYB?A zQ~)#58vN&6+4b|&XlQ7NRn*i%EugAo=qlfd+>vsfy>~S7BtrCmeanV|06xZ|V`O9m z^u;D7zB{~38!!HCipYG~KNiO+K5_%K&g21jp#A;*5WJ6&+W^kFL+Dy@`WnkP*3oB+ z(SrFbzIvNyH4Y$F-F+XOyf?#&4X z2S0vKZs^gc{_Q>f(#P`lVB4*Ua4Kr_$_408RF|+=BN2FfAe`9${J2j}GjRjO@%OIb*dbLC z5;Um%pXc8A?dd;>TQQt__6OmA9sK|D*uM@weB=LTUH;ct{_DZd_~XHkbUGP9v;0)h zqhqAqzw1B>o7uu+DdG#}{d~L)f35DZEPDzwJ@H5V)804MMOGF!ok)P{e|zlYfuSJY zBM8esL+$0T=;f7%R$q4>*5Dw4Eg6xRN@pK#6 zlkER#GESCK6B9P`za5tJMv4=if!xbKJ@zkQhHoI02JamCdWR|Xv7RI2yfBB*pEUXVUjFg1 z;|Jc`!8eeJ4{#a(`5Jrwcc1>H@&CtI{^9TZoACZaV8F6edSxk|3{eefWB*fbAOg>P zh3{Cn7fAo}n4K);;bv;x9whfV20br`A8B|MTEA9R6TH9g<)0q=mmz>}ApO)oye94= zUEZaWv--cr@_z~MKLqB;mYjIX*ZyFpka7dSyuK=hV?||(3d;W<%k}ro{G+GiWJ_eI z;_{dEhQ0jbVf|6ZpNH|n zjvLNWw?u($DJu(i3f_q*BDL@zPs>7VBwo~6HDI>l<>3)NP13_nx=Qx<5B%9wu@Yro zIF_34c>i6xR9{#$mjvK#KVj1TX?&%6n_l6zS~3!-T|D!jr!MvD>LQN>LgkUuA(p%E z@}C}ATAXAUmsnop0V=M19zH(N8^|FO9Go~I4>12zv4KsRkx*y-0M&X~ckh~(rrx<@ ztfK>=g1dQn;5S<6>3J^o;gF$lMT?P^P{f=lDb@e$_<9o=T3Eb-NGF78A(NQ&3Lxju z(h&lNT3T9`mX-jWK5YCLZ&MbMg35D}js4S>!C@vI8XYwUP&`CxneG86ii?YZr-0wM9vye3 z_;*K4czAdjd(E9=CpxSVsZ{=p@?p9IOpt)g9~ZHUkR0+tlFnY-vxB+f;NXB?4j~o@ z@*uGoTwK!WrzQRmH3eppf6u26@RW30H~q}aUI58HP*-#S*s@3|5wcaoH%!FnOQPyaZ{socbadCvPVw=Rl)%~rIPJlK#fHG!p z1FsDGeN+}9@3tFrNYUt(=a2>ire>ZqXGZ0jRNoZZHkrVp0N7C5%naGv%iW7vr~2Tw zO;f^e**zV$kdzcsZnVb7EuOqk#4C1LMJ4!Ch;y*Hr=j9u&6DidDYC`+pwjy1TS+cr z!sqM7tu>)q^Z;>Y}nw*Zt2 zsaqr;IB)~_wPT~?8@7vOIiE@?H#_jKiT-Uzk+2Zkq?scPCHRA~?Nm5M;0NJ!`R9NI!7suJ$7mvY4 z(wccHI}%S6<_JXtB^@5}XOYXxTud%qBA%;B2UBvxb;^Pk#&_?YX``o9mam-QvAo>9 z2G?68Ne7qOQI#`2@!oTCmboSN1lF7WpMek-t&E0_8KrnOoRvVO6XMHNRU`fp8!LAN zcrw;63Is(J=b&ww#*{%O<4$I#L&Lm$O+Eo~Cd88x`K5G(SjEhJF)S$Z8G94nc;LcK%Qhf}|^3$Nbeu+~-$mX=%R!^Z_zJKuobR{2>v$9tMCG zN*b)OciZ~*?b|Xk!D0S|bRC_(G(mBq&-7`%lX0Te1`^>yby z=6fse`Is2^hsYZR&gAtdOZZFzBr5cCRaMo`pZ=9IxOFxS^KN}sN1qaR%b_nThekYr zBZc$8)v&pF)rU3gGE&@p*dCOZbLl2{(HgJ?0vCV@cG}ocQ!0<586uFx_G4M+1R9%{3&lwN&(Dt{G z4rG5AfuRDq6VMh=R|E$V6o#N4fRAqrAMS+5x%^yzRPKnPC_#B#TwLL^XK&oN@kO1H z>g|HmcqZWPi1Ue)h~ufLfn#nHcv@OvaBtR^EP1Bu9eUq~V0{)$ZiEeTas`pD;*S90|7!a*9Kym0Tw zJAk<`w?MiX^MU=z`vy~uUrCPyLCqp;Gg)YFvS;}W;lwKuqCJcuj6L?(w;P{t4cvWn zw6F8QZadL(2R%J+-@c8Az})+?0py~9jVwRZF_U$~;mgxPDGQ7g9WQUgxrEdrAfc3X z{66p>-a3ECOy`|nTI|(+HDY37vj61=p8|4EJbCcbmk(a+Ulq-U%Wg3nj9)9BqOa)H|Q+eJmlBS5$R@$1P?hEB@=(vd$o zw&!hqfBACwSm~616?L}R{oB7ETUIlhpC1-O?55-z)I^!N_;O@YZ;bll$~G92ZT%4F z?nLlqU9+glU!He-j?rKk^+b}@@x8Ltl*0&)fy`xO1=--96-=O&je%c;`P7frtE(nO zm=4W8d_P<4{BS-zbW!<4H(`ibLjkSp0umbqM1KJg^>9}XmMn=Vzj{UL7~FqZuufM| zXql|bTU$z)M&p9N~5ADdLmZ-uwXtG zxwhY5A}}5Bn*SLWkrZxKutHGS|FJa-s%40LKpFjB&%pIh0#Pn<%B(8a< z&(n+UGuFpl8fr6Z;@2-FHWRIw=O*Oz#&Mqr<-h1T?|`Wh;4dy+p4H<&T*=(F{6xF+$7WuJNv82HUS)-<8$ zIQ&6pfw2?O(DIAfs_cAfv*AT&S7+DS`3(`GCz%Sew3rV*GfZxrK^PY&bWnH@G4%8M z5=U=1_WHZTPF#K9JxAkt-X`^}&vd5VjhpXn@MZ1>S`OMA7I+rEfi)|VdB&cNDpxh( ze7&k%x0%Df>5NN5eS4LGzP&E_IYT~qRP;NeROb4Q2B9@kh?op_c5DszYjHZ6c(}v&I#&s*oM<(Xh8l8!L#6~_TrO7^?UN~}k zi`{wamx(ferV~~uezupz?ipr2FP5tt&fX``P zb2=%+BlTK$PubuEd?VI=hy8BcurQ=ERH-hO*6N^9hm%fGPQRjj!T7rFSKptNo}8H< z7JGXgKk#84MjQs&dp|PpYxK{hKd3G*sKaqCEz~ZdtSIzNH-C^YQ*KMZgQ!Sg7OAlP zVxp=Ts(O9*nNX3o{d2tpQ?cqu$;#ntBC-~tB)IEMwgp>~vU%pT6Ky}-xD&G`S5hmg zjDOs44Q;6JF)7PQUqHC*pEVng(-@v84k!;kjOjt8HB3=nb#DT}emPgpL|ofg(o7?M z7-Qb6w{-GM&U-JOsp=FO{i~s>j#}ljHRJf1JJ@w;tTAfOOe}rmtu-u-MVX%!E{mIX zaXluhjH%RqoGn5^YpHXy_e%I|y)&M*ce_t(<7>1d)!wG}{WYSb3uAZz*oi!++ovgq z?mrfg+#h?~_K{z}$Hjhv)@ACoQRer7_OSD_rJZd&ALG+Yu2+@$UQ>8U`()#%yT6zH z%##hxuGU8*_yR5kyXjsf0yR?Q;a==DRieEvE{)5T8>*%Z7M3^mMFYPc_$Pkk6$rRK zF;TYZyJlYLT-B1nW%%IhHw#|XhSHYoCdSNZNwWpKjw7KSJB`p@41Xj$(3Ef2>S&XPZ>6<*znFRu}J4rKkN-VPMjZ@;`Y z^mOcUj1CliI!n!&`S#UO1b+L%??58MB95+2Lj7eeg?Q(Mg|K@B2cPyY1-N}?jlF)$ zbK6VK!TiEcgiB;s;LCC9X9O1hFIhKg0vvyc5`EawZQWUXii!WL@#CkhD{JTdD;b)1 z8QYC}g9>Q7=#uJvx|8_$#0lv-w<;npes7tVTV+E==s1IGr*z zyVH2&`9z~zTc5%W@l8BN5vEe|NF`7b9D0#f&`t>t(JgbK+V|EE(WEGg#f3=k@3{BO zmkp)9ewsbQXnyX~BK3KKySEW&H3x2kXHpFr`CWC$3AY>~$8NR0$T=QGCi*46R;Gv9 zBJb^IERD3@=u9=g3pnq#_$74KT=dqnRk=$a8C#ny#})a|KdfEal|JZk55QvoLZ7yI zfBc5BM@#-Rf6oDdd1&evx5m2^q{Qu5xi~%BVmArW+@_c3Sj9?|+)^Ib8EUE4^xWRO zB-_=)%|~QN@cZZN4-VefhFY6iqT`RMojV@lIvf39t@&NFNNj!Z#Z89&2#cCS6j9WR z*X7q*Ywz;ZO}x=Nw|)Jt`K;nEg8S^F&KhZ7z7{mN(l>r@m!ajSZ4BuCB;ZSMan4(- zFtX4QG4A5#k+@j?5>?j^z2qDISW=J}DrrZevRsmG@i*L|&C@9pzb0B=B@TS0CVS@X z=HJDPgZ(R#gGKqpS^SIZhEmZ(bb^xm+2d%>u(n#A=63EfW(j)Px)zxK(72~~-}&Y_ zarz{E0x=2tb7rWm_;L1MdyTY^zM&cZ&yS1F%@@o@2`cu|bmmnxzBjI9+}P%XYxF{>wmD55TC+}2#KUMk^KkFmL|F#OGY$2{~=Ara-RO`5EEQNf4dN>K~6 z3|Z}tfpx!y_3rD>oEM$px!)35Is3^?=8Ucj(#_=?IF>%b%&(ut$9yv@o9AcpeOk>b z2CEGe%NYqxeV6mE8RB1@c5u_F>COqVCN{i1ZTQYF%&0zYFoX>cdkhC#>J^_zi;I!# zv!vxHZ=B%|q$#1E;w%{NlPshV319F>*GN)c@o_b6M5Wc>mix**GVP*zy!nB32Q%!g zIdz)n%W?D9x2%4z#HV9uxH9lNgnm7vnjj%hr&%fYS$6-X2Q?l5l*5u@gS({6G?i}H zraD*YHj|bJr~7)pE8hq`|CQRe)_ZW<)ta+ie#Mw2k<}CD(ga^?yQy*;yW~q@;RRvg zS%Jrcx72RwWR9otTdSNZASESf59jbCiv37JQ5oqNmS?T)8})%cZ|)3Bo%bz}R0l_! z#M)blta0e_{`!pkpQxy9qa`PMZC}@3?%Mt|eVH(a$J42+XgZ%}OXJIU-_oM2eBceG z+@thPvHqd8`>^QIzWb5$oMV^CR)t6FI!(Hoq}dt5%8vx5-oM@iWD=-s2o;x^x;S7V(#@5KdPYNbBE2=*`d;tQ<1WpsY%oQ3!aTrWP?g#`%- zWoRdzkK`kXYz!J4qxNY`iq55=uXe-!`}6MEJ|}x$*=8L1{yCMN3YM`HmRG4 zR=7U-!qkY;A%4nu+3lQ2N7a!A%0vnDYt1$vZPL_#p1-b^KCHFAl}r9C;_8ODNVDG> zj+#*$dwrkqP8d76j@pJ*sM3|FcmfKy1U z+0RWx_URigDZ1V|Z)N|FNqrO%4A$G`ioT-0?ufFvjL26c9n}FVq2X9OJ7xeu5ly|Wnjx3?aIV0{?vcRIkYQKPZ*JVm{QCF*?s0-c?e1ahMP%4E<+bpk z-sXZpV=c!Na8o5 zv5$-?&jq-M+&^QV!nB{cAXxeBQ_cq&@r)!oHOFRlHZ{DcFvb@7w_d>!af4sz;gU4C z7{)%bz&<%~wraDUB--#&r|(Y+mtfsg-En<>!y-we`(v#wbk$dE?>rPVNJZXcDA5l5 zTCdJjv<;N6pGg~bFaLH^&z!Nb=vmVD4>I8yNu+AG^4OQM*jW&yw|SYq%S(S!QFBXX zFYdlxz{Rwy*OIj3D&}0!XzHlq&6l&rkn>tftj6!tHbc+6uUKj1=BtA6hjOuBK=*6BRVU|Y{Y36#()UV6W5JJF2=|g|awt=UHik})ErgQLt1 zW|Md``>aB`xV~{iMY-X+e5%RqzOM%%6y~SDJKcLzlrirAWKH79ptG7|9SG%I5h21k+a+Y2A`2{1EdVh?q>v0V6 z&DLwQWH-LB;=N^PeoF=R`7T{jujP&#_hJ4nY1T%Jr}I-sB;H-IkcRhhksEpq6;*~B zoY^xwYZV8Sl0Pc)y&lRE8Tab&*=m|7<~4@B^@$2Qho3RdtEOBr+ww_7!&gC;AO`co z=}V{E<3^@Yiw%u#x740~iHP-+PkS>b+Bis>b{%JAi`4ARnH4Xbu`iChESPGJ!R(zQ z!tIhw!VQ-PKLjU^-M;SPo~L`mMbrfqufD?MM`7XDeZI`8lI$j|4u4CY0q4Uzpv{}> z;IE3F-mcnSFTvh3!(KhZ-m}`?^ASZ7>FsG!ir4HS6a_BI{?C%;stY39 z!xX%5)EdJ|j97MwGv?Vv9-1nvwv5Z~cDl&xJR59vO%?)O#m9QK@tbfM1T)0eyPjvw zfC+lTYDlzi_sZI@S|>gG^pjVcwLJHoo1=MWrOX!2NG4%NSMeR9Jxmgis`EA6_U0F= zw>)KRxE<0xa^b0FoBJj-x<00ZFDezQK2m#(lV;md=Q>1>G=rb!6W7?Sa{0n+*UySQf|sGte9mNUyf&jK7G6Uwr=Kv zna0ig2xt9@=@O1>QURm2Xy%dkjaf+flDCsCJPZ}yN9X*8uM$C3AI8`a=ETf2Eue&5 z71UkyOR+>o+*pyWUjB*~b-*O4Z@r7-@0q~S4?BbR4HM=9<&>``UfTNkD$CZ8XwUym zQtnH}?}g8ziUJO@op3I%ljj8LYxQ(T7G1}U?sC_gUF}ig^%iL5xA{S^SeMbYIZJ0< zz%3khV|P)9!7p;a;`d<6eB`z8?1g$4fhf0W8TENO+$R&oo5S;E*;h>n$?m9KxPO>+ zIohlm2L3cxgM=$TV-@MLXLU3?)I>#i4C{106B+*Q8Yj;r_|@oO<)1jXoKcIvCF2#i zetI;X+`rJp?Y6X01-s5|H$e**5#FbyI^%qjHA+URuambk6Js`nJZn}TnLlKZ@_aeC z`$UoM17+)S%s9OvW}t-C_@gt7V;w&7Gx5P~=OYFz8S8%R4@wzEvVCEsdB*u^DwyP+ z1<9iuR^MMe=_UMzmq0+3=SZD_+7NJHQhMQT{RF{#6+^_!(ze3RA3hTa3wEU@idVqP z?z-yOJ43{KuePm9`e2a((j(c=Nj8=yUt<&ms3ot*AOo@@-=87E3FvA4Qj6vn;r4jn zljvDGBEggTw)#QIU4)eE)0G099Tj+)GL*O$SC4GV)d%d zSB|T%9E*(uKT9_tN;cDRBwz^}g?QW4I0*2XD)U*N{nYp2o4?0%-3yBR*S>G~ ziaI82mEPCwAdCi=cZRjTTbN7bvzybp_CboRk)pJbqBjDu3I~&>v6-}~hAV-q-Ct|H z>03>1?R(FH-=#jh;U8{HCysGs)=Q)#%8xk6zSASGXD!b?i83|5xoNyIa9{m|xb}7t zckH7?+2+ppeqI4a2FV>M7FFLcaxVh)kCYzYV`}aHUr}cs4|Vs({a?3aNrs9R8kLHy zB|~9|u_Rf-nCxZW$<7#L8KNqx1Uhli4Zt3kYSaoy!DjS=Lm__*Z!`-6SUm!%8D#oVQSEnG&(G zdSl{(N5S4^7CFGK86|#0bD}`LK<^wi*Y(tD%_1e!l6xp%R;S-%;GLf)1Aojj@EBQE z4%hwBLW2YAjZ8T1$MtA#Ru|}csDqS910!%(a6Q|p6vBV<>-!M zL19DiyDc+*4`jIY4s%r1^@D!CLywtcr@0I4rQaSA3paK@hN~%E2$WGMkW$P^2wwzQ z#+q{mO#Y!spVEG;>6zQz{yE4ukQSRdEP2yNMHn)dy+5ABBnlg(`Wu~0w5@jLI!^iy z-cY{$0c6I&QF}QP%EAeXS}9XS!yf|qE}JkRjBf~PQgoQ|q=XGR#(yW1+7osHR(nyV z#KtRACVOBB?VP5e8`1sXpaDPT1z#-Go$}5xX3DQ!pf?2ttd=DF5;Dy>5)rQ6pzJmN zyyc41sZMxfLb-VHkKvG_EG_&NmARD}C=;ozdRH16Gf}C)L1gA@^kzVwd7h=2&;BDBXCtEJgd) z!k?~^@iNxq;v%r=Z>0PJbSoO1|NZs_*Mw(E8X_74;clP8lDs{K=JQ#m#nq3AX1sa4zAm+lqnde_&;9xJ{ktX^6)@G{neb&m80Qgm zwrC5B!~}WluATrD)VZ|OU@!rk#<)c5Y}wRk9=GPGEP-Zg=?C5yGJ^;Tw(aVr^5%@u z(1T7U?gCXVX$KFobX@V(4#m36KImoCn| zC^5)NoUy#h)Q?gAEN6tXS$-L?R={)WBz^&E)z1~z%b;fSEaIkNM5Yg)sq!%e_C)3r zT3E9Cto|S*ee7%;FGpa7wv}hycjC~=!2Ny!pZo{-on(W!55H?=J+~o26M<9jGKSbR zY9PD)YAMEUUmjk`)}bB=?B%AS4q~Y>O&H0W2!xFgmo?&ueuEZMC|VARsa=Q*lUHP7 zP~|%|(-!3ZI%a==*mzSC=)Uo|RQZ-;=QXhIS&o3dKl2+WD3uH$>|^)+o9oI31JVYV zib&FINp4Mzj(9$9YG_Nk@Y?v@_4?P{t}P?xS&0I;RCHbqtu<5lY|Mq*34K=GFLMt4 z7JHBK_Ejevmeic+L$fk5YoAXjZLK0w3G3sZPm z76C{;?|xxLsmfI zbQBH|Tl>*}O5EVU(Miz>&%mHwhWT0EGYVxu5ut5w zwdN?Sq65jAajl7Q8;NnRvFWGfx$dOPJa5T)MG^1^?JXxZOVw1?Z4~N$0Hsvf&l8M8 zLFQgTKSe{^Tml65$_n9Y%Xu*_20ZQqKH!hC^9o6rA2!p1$k+18Dyg;y>%HZ8u;gYj zrz2C;@Pw?JIr-h!6B(NXvMyW4f9~Ziz%0vLThaum1Ygk5{KfY9Z1A-OB16eOPy@@E zaDGZ`5dowNNveUJHT7;YO(Efz!1c7|FXKa}Ru9Pn)HM;kr4s!g!_%$@_6tWm*!>T^ za0Gi-)$dnVUKBXDI_e_Z2R;Wuck{{4Y)1$SgG?FyXZ{tcR~&RSrbu6cY)w$jbe>gN z?|wbI-w)NOZV+K~T4`NWQTksy`DNqqE#f+$rWryYuor1@w=%yJVT*{;5CYJhb>>w% zy*?Zf2Cnhz_$h#xS$UbwnA53nv2vX!c9r;hf-o9^7+-(h*V%}P9<`13&IQ%!C|oX{ zuALinZj*;+5A2L>b#K10cuWdAvqz3GvDs@M6ISw>_*1?WT(4Hem}yGaue8?DO+r?j zV%N&}H(u-oJS9MgXJ(j4360^`!M(RpsZW-n65pD8#u1Dw^xi4t;B@Zi%*8$J$F4O# zzk@ly{=Xa+}U0mifTDW7V{CudE7vIZbA02P1nzuQ)Lf*=3V%DKl z1OZ*&!8`Je`|d$$E*Indn~167m&@G7>ap55(k8C0PBx%*E!C{_I#E(H2jsnmM3TC? zJxFnvxgHeE0})a!SGf2yOBc_J>W~o0(RdVdQxe_%Z@1$gUrYQdVi=?TmM*1H2kEqP zH2-M%9;ok-b-ire1Akh7`yX$Eocx;(KXwVYHFNS>N+&sRxh3?2ZrNvjq~n0F?10a8 zkO`8Cos_n)5K5947Tn$L=Ti;%SXiX9B8Je`D%dsX>7r9;|6I>F-brOZKcyB_1UB8Q z?G(NWx?(}?{S%S};XqEl{C6WimBl1?o^)8-9e8LlLU>k6A?#mG+uN}nG?R5&@M;{S zujh2eipSDSax@`}wLTz|&B?q`KI59J`4WaXL82pv?Y$q!rh4z+C|=PEx`^rDPJ=)r zR>A+vhlsRFNaioK{Bz93TJ$Z*nV9l>h^De0*wO?i{hZ^fCW5Qnyyl-K!{quS$@d_ZM-~N#nFDZ;YNY7_{)!E#GoZMpM;k zBc-$|iE3p)I7#q1b9;p|enP>D_I*-CAqo~2kASUl z^ecdk$aI&VXK2vnB>4K4(UtIQ;xbOe?fYCi7T_YafEgH`$#k;WGxk33o!KwePx1h{ z>SlVw*}h@OuIEu9VIowX@4nrf7tGuIP>f@8Zp1F=rwlEpwF-)z)L$VI@eA{NT*1aTGde zWGe3FA-Vv3$AV`40$oaVJEKmJ!~T~hjcpX5PbU&48@vnrD%yY=y7U#TD*91z)SIHH zH%phXy--1%nvOrUN8GPMGHx1e`S6)PW-=Qb_Y}$(yDD?5^{nA@mV)B2;eSGwn4(0M zppwL+FY)bs>eYYZ@{E->>#lry`Rg6*Q0W6Qrh~wyV8PN(U=yYde#j-G3>o-3sw|$h zYGyoUVpq8DwvKlVx8AB!82K}YLZ!&Pir6YUaF-+Z2;A6dLnn49^msO8UXCBnaY)8H zpxvc}FmQ;pBB$)KQL*L+3vZGWTx$Lf%rWSaCG@X``8%RW)1MLq!kpu&`c{HXC`*u) z%(sTKTDVM5u&(I*%Xd6&V>vgV*JF(dL*J8>lspaz%f1GX-zen-e0{hnEQTqJuT)vp zSXI@Ltj*RvIMK?bZ*j@J#&&q)RqV_Ti~I=Eu7OL@5E0$7;6jhHmiEvw$H}APC*LXI?;*wvU?W5J;Ya0k?MZiH~ zu^c9s8-x*gvr6epHkl*V{LL=xZ_;<%Ah(S(9q>=Z1oRQF^)$!Ld|;EatFRrwwvrC? z5RhBz=wDtKxhsj&cx3Rye+;kC|D5ZQEtHk3Ixs_6z&-te~O9|0fzVfguC1KN^r@I!pfydfc+{^ewo=V@y2lUa0c8?!E!X~nhb0rT!cYR|g zErA8!|5O&0y>0%AXI^)t<)NCDDffFXYvrAUj1s08xj}JB9Bus|_?jOIroF||y>u=v zGrTapmYLE_Q?=S*e=s6@12Cp_sb8jDUgex<>=$X&6K(8I^Ck?A|InshU9sEgJ$8IAJlyJDtA#=JSs5i2kL z6@naeyI5!PLb!2dIVL!4F_A7CmxPa&8xUT$!>o&FDA(>>h2My&9APlwG#m+CO>6Gv z51UR!%wIMdfP5X6-HN(D!>^pOd?_&9XZN+)3l(N4>@=r;*!inhdx3|7eW`ua#p$Ng zK(xbdm)&7wi#n|5*Fdb4!3E(N@o<_dOyvV^*hW;BJ!y8d*d8pFclLZS>=#x)<5vCO z5$cm*QwzU<`Q8}rJT^lRRwFv#;ho!J=n}=8DJh6}oA-F+9xZ8m%y}9$Xn6+o1$l~F^*u)H0lL}6p2)3@y zckN{Ud1IwF2Ny%S`PrDC?5>8sO>`;{aW=4Khi6?*g2PLMyeys)q}?ucyH)<@0U3q< zC$QtnUP)J*M7J5@cp+_R$O@AYo@)kK*?e+k^pQB^eoPc7vSWG2*Z%uQT}=sl1^MBI z;0DGN*6Fc&jj)T?m}S~*gRNxvQ?0 zsABGdWhXxu0XwfK*ADmy#%0%AOKs z_cK-F_KKG4?F;^s(O(^-zQLXtr-lk^i4TsPIzb6%Hf>-XgAGMqU*q5~9QLw$WezKE z*TX?_*F|M|NAzB`KB)uB|dSQZ?4 zWI%K$*@4=Zz*v$8~`-`64mKk&*v6V9%KP8Ya@&tkT0YIDd zpa>241AWbC2YHH4Gj?G5a{`&Ca(1?5{1DAIf9d0}rLRpno2obOCV2&un_5ck)$^wa&zU%{3hQ z^f#VT1QeLmL=Dn>U4jW{V{m=|%x`pQW`FPtAnM(YwtfAxd zmSKyesLklUI(btmio^fAEpuelp#C{Yt}XcdwWo$gtiR=96~@f6yX48ENsAs~Sh=y!dizjq^}~5$)LaoTQT^4sGko5|7GtX!()Q?7ZuC{nnMwF=G>tv|1>Q&8ym>crgz_Yi4;s`SlAkp_nrli@!F#XbP@( zWMVT?c;53f@rtyWyw&Cmtjrfpk9FDNlG^gKb52DYP?2_~Wc1KhkT0rEZIIp93U;J6 z^m#iQGEH?eY>ydIC|<`Gf(BPQgvxV_vWjzVp>ti`ABK_~fq-QCSi4Md|8<;}|6kJ) zFC%(Ce}w0hL#en>m4m5P^?1%7+`!^trUEGWAcIok!t*S;WY|G$71#=4rhEn2~`)-&Sx6b z*ppw*K7KI%0v9M@QLoK+MZpoJsu(TgdPmNL-8NK@Buk*CjwF?m_g+m)aE~zjzkmcT zg|O!dK;>u9JwKEfb|!IY1Ek0 z!N@xgiF~`V(y1v5a&<1-XIpbBrLnm>7i%>6lu7c}RFhua@lMjaK2h(K4Gm*S5+bJ% zrSrc}e9=$nG@L7x!kuFBEZosk@NR4*<(aUr%>De__5XbffCN;RGil2uw$?nQDJA0u zXB?c|?Zt1l4zbTWfTF%`c@7B5Y5)x)Ao*-a85jpX4;MQHi}; zIZ>Z6oXN80R7NbSS{#RD2{_;1rp%^G&#gwc;fKtaC^}LYAk-YaA*@%ey$b(`rc z_kRTKcR-UzXO#Uibo7!Ocz|`}9YJrW4^w zhdl1Qa~I@t&9^3d$0}igAB0LBwR=dzaMP0ZMFPyJl0Y^uzK!@W`zu6M^}B;?S}`y4 z&#J#x*;mHM)P^LD8Q>IW{on-kt6#-pQv8l|zI!Gs7G4IwQsSUsnV%z)sebE+F<5T8 z8F324*f(3BfxI9+{jj-;pfj&8ki2+)D<1}jtx1h;HJ2{?_khP82DcJ-sLEBvf1xpr z;J?t=jNL;wNolDE%Y!y*L>TEl0n?4B*3axyO3;NoCZ+T`=-8|X45S9F7rMO+RWlZ4 zA!+7*Qzt=g;}{&;Ph44+Fssc(0_-jI?mx$`Y41Ayw(G$PB}6FLq2U`IGVL@FSlJC< z(%F_Gv1!7;>A%+Ck|o{7$mBbUg8bGK>P-U!tk<(g!69lOahLCGmIilQxvJvBWAgPn z&xlo%tepoZs%|QJxGr?J9V3q>*Tr6;+wq4^sXJyKN&PSS<5L=4JdBbE&1EZ{Bb%e! z>?=hsof|WK16V!16LVZWzqn7GAGC_dZ#wb&%U!f%-SN z@h?nq7Jw-(I6a6jX=N4@yn~}ZL4~$6UNM;Jt1+6{XV}i#ax;P;92+_&hSM{~b1Pfe z#I-a+#A|_kOJ;bk+PG;4qenxd#@zcYIG6e1IpuS!Rj1Ul3kP7VbW7?8aIDN=4+pxnUV+W&5Ixr^>2B}~oiroL!Wg7x? z;OzED7m!PD>isl+x@~?GXI_c-tP)Dtk?^;=Hf-cS0H)>I+q;pL@ZiIOR8iLXd)W12 z4}374kopCh>zXSj60%XQtm)qR!NgnCj;^-h*6Q%@bWn*rYTyC%Y-}lcxj$JDYhqvK zC?4Jeo^tp;JCTQ7&b_3@{69@L;6e!{%*p#C$TN+YcTdc9&(oQ~tczpy87@goe!otI y3IE3SYZ$Bamt@`+Jz1_GsB8K6+v%z~M<8g&j-ORWV)XxjkGhJMGG6I<$o~O|S%P2y literal 0 HcmV?d00001 From 3064c6f2fb7d18cbc9f2c2b30c8669150f5d64e5 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 29 Mar 2019 15:24:52 -0700 Subject: [PATCH 050/349] edits --- .../windows-firewall/create-windows-firewall-rules-in-intune.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md index 280b81c0d6..c0de197611 100644 --- a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md +++ b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md @@ -7,7 +7,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.localizationpriority: medium -author: justinha +author: tewchen manager: dansimp audience: ITPro ms.collection: M365-security-compliance From b890a995d7d8c962d767137f37bf974df79286ed Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 29 Mar 2019 15:27:03 -0700 Subject: [PATCH 051/349] revised star --- .../create-windows-firewall-rules-in-intune.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md index c0de197611..5335ff9997 100644 --- a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md +++ b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md @@ -44,8 +44,8 @@ Following table has description for each field. | Protocol | Nullable Integer - default value is null which maps to All | 0-255 number representing the [IP protocol](https://www.wikipedia.org/wiki/List_of_IP_protocol_numbers) (TCP = 6, UDP = 17). If not specified, the default is All. | | LocalPortRanges | String array | List of local port ranges. For example, "100-120", "200", "300-320". If not specified, the default is All. | | RemotePortRanges | String array | List of remote port ranges. For example, "100-120", "200", "300-320". If not specified, the default is All. | -| LocalAddressRanges | String array | List of local addresses covered by the rule. Valid tokens include:
- "*" indicates any local address. If present, this must be the only token included.
- A subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask not a network prefix is specified, the subnet mask defaults to 255.255.255.255.
- A valid IPv6 address.
- An IPv4 address range in the format of "start address - end address" with no spaces included.
- An IPv6 address range in the format of "start address - end address" with no spaces included.
Default is any address. | -| RemoteAddressRanges | String array | List of tokens specifying the remote addresses covered by the rule.Tokens are case insensitive. Valid tokens include:
- "*" indicates any remote address. If present, this must be the only token included.
- "Defaultgateway"
- "DHCP"
- "DNS"
- "WINS"
- "Intranet"
- "RmtIntranet"
- "Internet"
- "Ply2Renders"
- "LocalSubnet" indicates any local address on the local subnet. This token is not case-sensitive.
- A subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask not a network prefix is specified, the subnet mask defaults to 255.255.255.255.
- A valid IPv6 address.
- An IPv4 address range in the format of "start address - end address" with no spaces included.
- An IPv6 address range in the format of "start address - end address" with no spaces included.
Default is any address. | +| LocalAddressRanges | String array | List of local addresses covered by the rule. Valid tokens include:
- "\*" indicates any local address. If present, this must be the only token included.
- A subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask not a network prefix is specified, the subnet mask defaults to 255.255.255.255.
- A valid IPv6 address.
- An IPv4 address range in the format of "start address - end address" with no spaces included.
- An IPv6 address range in the format of "start address - end address" with no spaces included.
Default is any address. | +| RemoteAddressRanges | String array | List of tokens specifying the remote addresses covered by the rule.Tokens are case insensitive. Valid tokens include:
- "\*" indicates any remote address. If present, this must be the only token included.
- "Defaultgateway"
- "DHCP"
- "DNS"
- "WINS"
- "Intranet"
- "RmtIntranet"
- "Internet"
- "Ply2Renders"
- "LocalSubnet" indicates any local address on the local subnet. This token is not case-sensitive.
- A subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask not a network prefix is specified, the subnet mask defaults to 255.255.255.255.
- A valid IPv6 address.
- An IPv4 address range in the format of "start address - end address" with no spaces included.
- An IPv6 address range in the format of "start address - end address" with no spaces included.
Default is any address. | | ProfileTypes | WindowsFirewallNetworkProfileTypes | Specifies the profiles to which the rule belongs. If not specified, the default is All. | | Action| StateManagementSetting | The action the rule enforces. If not specified, the default is Allowed. | | TrafficDirection | WindowsFirewallRuleTrafficDirectionType | The traffic direction that the rule is enabled for. If not specified, the default is Out. | From 3ff7c454f26529b61c4a62c3c7e6486c79b384f3 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 29 Mar 2019 22:28:39 +0000 Subject: [PATCH 052/349] Updated create-windows-firewall-rules-in-intune.md --- .../windows-firewall/create-windows-firewall-rules-in-intune.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md index 5335ff9997..4bee1ffa3f 100644 --- a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md +++ b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md @@ -20,7 +20,7 @@ ms.date: 03/28/2019 **Applies to** - Windows 10 -To get started, open Device Configuration in Intune, then create a new profile. +To get started, save Device Configuration in Intune, then create a new profile. Choose Windows 10 as the platform, and Endpoint Protection as the profile type. Select Windows Defender Firewall. Add a firewall rule to this new Endpoint Protection profile using the Add button at the bottom of the blade. From 4b5d595eb13cf757b65cb0cca49d9915141fe1d1 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 29 Mar 2019 22:28:54 +0000 Subject: [PATCH 053/349] Updated create-windows-firewall-rules-in-intune.md --- .../windows-firewall/create-windows-firewall-rules-in-intune.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md index 4bee1ffa3f..5335ff9997 100644 --- a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md +++ b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md @@ -20,7 +20,7 @@ ms.date: 03/28/2019 **Applies to** - Windows 10 -To get started, save Device Configuration in Intune, then create a new profile. +To get started, open Device Configuration in Intune, then create a new profile. Choose Windows 10 as the platform, and Endpoint Protection as the profile type. Select Windows Defender Firewall. Add a firewall rule to this new Endpoint Protection profile using the Add button at the bottom of the blade. From 6918b8b688b2934537f4520b18445535b5cb7b86 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 29 Mar 2019 15:37:05 -0700 Subject: [PATCH 054/349] fixed table --- .../windows-firewall/create-windows-firewall-rules-in-intune.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md index 5335ff9997..c8b51339d7 100644 --- a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md +++ b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md @@ -34,7 +34,9 @@ Add a firewall rule to this new Endpoint Protection profile using the Add button Following table has description for each field. + | Property | Type | Description | +|----------|------|-------------| | DisplayName | String | The display name of the rule. Does not need to be unique. | | Description | String | The description of the rule. | | PackageFamilyName | String | The package family name of a Microsoft Store application that's affected by the firewall rule. | From 99792a2672d0ee0223275e465b514e4d805e1f16 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 29 Mar 2019 22:45:26 +0000 Subject: [PATCH 055/349] Added config-and-manage-tvm.md --- .../windows-defender-atp/config-and-manage-tvm.md | 1 + 1 file changed, 1 insertion(+) create mode 100644 windows/security/threat-protection/windows-defender-atp/config-and-manage-tvm.md diff --git a/windows/security/threat-protection/windows-defender-atp/config-and-manage-tvm.md b/windows/security/threat-protection/windows-defender-atp/config-and-manage-tvm.md new file mode 100644 index 0000000000..0525cbc629 --- /dev/null +++ b/windows/security/threat-protection/windows-defender-atp/config-and-manage-tvm.md @@ -0,0 +1 @@ + From b83b26b491ac35aac15865c05ed7645a3acd0284 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 29 Mar 2019 22:45:50 +0000 Subject: [PATCH 056/349] Added 2 files to windows-defender-atp --- .../windows-defender-atp/next-gen-threat-and-vuln-mgt.md | 1 + .../windows-defender-atp/tvm-dashboard-insights.md | 1 + 2 files changed, 2 insertions(+) create mode 100644 windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md create mode 100644 windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md diff --git a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md new file mode 100644 index 0000000000..0525cbc629 --- /dev/null +++ b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md @@ -0,0 +1 @@ + diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md new file mode 100644 index 0000000000..0525cbc629 --- /dev/null +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -0,0 +1 @@ + From bba5b3b223e1ab49d12f8a6275e21c6f4000aeb6 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 29 Mar 2019 22:46:03 +0000 Subject: [PATCH 057/349] Added threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 1 + 1 file changed, 1 insertion(+) create mode 100644 windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md new file mode 100644 index 0000000000..0525cbc629 --- /dev/null +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -0,0 +1 @@ + From 3313082646e5cc36780e32be169ef880489d7b66 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 29 Mar 2019 22:48:43 +0000 Subject: [PATCH 058/349] Renamed config-and-manage-tvm.md to configure-and-manage-tvm.md --- .../{config-and-manage-tvm.md => configure-and-manage-tvm.md} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename windows/security/threat-protection/windows-defender-atp/{config-and-manage-tvm.md => configure-and-manage-tvm.md} (100%) diff --git a/windows/security/threat-protection/windows-defender-atp/config-and-manage-tvm.md b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md similarity index 100% rename from windows/security/threat-protection/windows-defender-atp/config-and-manage-tvm.md rename to windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md From ff89a7e54394209e77b5b505ea42a2ec62b0a052 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 29 Mar 2019 23:10:50 +0000 Subject: [PATCH 059/349] Updated overview.md with TIMNA entry --- .../security/threat-protection/windows-defender-atp/overview.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/windows-defender-atp/overview.md b/windows/security/threat-protection/windows-defender-atp/overview.md index f9989d69f7..baa29a9aa4 100644 --- a/windows/security/threat-protection/windows-defender-atp/overview.md +++ b/windows/security/threat-protection/windows-defender-atp/overview.md @@ -33,6 +33,7 @@ Understand the concepts behind the capabilities in Windows Defender ATP so you t Topic | Description :---|:--- +[Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) | Reduce organizational threat and vulnerability exposure and increase organizational resilience while seamlessly connecting workflows across security stakeholders—security administrators, security operations, and IT administrators in remediating threats. [Attack surface reduction](overview-attack-surface-reduction.md) | Leverage the attack surface reduction capabilities to protect the perimeter of your organization. [Next generation protection](../windows-defender-antivirus/windows-defender-antivirus-in-windows-10.md) | Learn about the antivirus capabilities in Windows Defender ATP so you can protect desktops, portable computers, and servers. [Endpoint detection and response](overview-endpoint-detection-response.md) | Understand how Windows Defender ATP continuously monitors your organization for possible attacks against systems, networks, or users in your organization and the features you can use to mitigate and remediate threats. From 47431a5298f25d988c230a3399fb0cd878ac6ae6 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 29 Mar 2019 23:11:48 +0000 Subject: [PATCH 060/349] Updated overview.md --- .../security/threat-protection/windows-defender-atp/overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/overview.md b/windows/security/threat-protection/windows-defender-atp/overview.md index baa29a9aa4..ee0fc9fd26 100644 --- a/windows/security/threat-protection/windows-defender-atp/overview.md +++ b/windows/security/threat-protection/windows-defender-atp/overview.md @@ -33,7 +33,7 @@ Understand the concepts behind the capabilities in Windows Defender ATP so you t Topic | Description :---|:--- -[Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) | Reduce organizational threat and vulnerability exposure and increase organizational resilience while seamlessly connecting workflows across security stakeholders—security administrators, security operations, and IT administrators in remediating threats. +[Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) | Reduce organizational vulnerability exposure and increase organizational resilience while seamlessly connecting workflows across security stakeholders—security administrators, security operations, and IT administrators in remediating threats. [Attack surface reduction](overview-attack-surface-reduction.md) | Leverage the attack surface reduction capabilities to protect the perimeter of your organization. [Next generation protection](../windows-defender-antivirus/windows-defender-antivirus-in-windows-10.md) | Learn about the antivirus capabilities in Windows Defender ATP so you can protect desktops, portable computers, and servers. [Endpoint detection and response](overview-endpoint-detection-response.md) | Understand how Windows Defender ATP continuously monitors your organization for possible attacks against systems, networks, or users in your organization and the features you can use to mitigate and remediate threats. From 670134472c6876dcdd807b4861e3d6851f4ffd07 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 29 Mar 2019 23:15:54 +0000 Subject: [PATCH 061/349] Updated TOC.md with TVM --- windows/security/threat-protection/windows-defender-atp/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/windows-defender-atp/TOC.md b/windows/security/threat-protection/windows-defender-atp/TOC.md index fec81066d3..54c5220116 100644 --- a/windows/security/threat-protection/windows-defender-atp/TOC.md +++ b/windows/security/threat-protection/windows-defender-atp/TOC.md @@ -1,6 +1,7 @@ # [Windows Defender Advanced Threat Protection](windows-defender-advanced-threat-protection.md) ## [Overview](overview.md) +### [Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) ### [Attack surface reduction](overview-attack-surface-reduction.md) #### [Hardware-based isolation](overview-hardware-based-isolation.md) ##### [Application isolation](../windows-defender-application-guard/wd-app-guard-overview.md) From 833c797166e3fd3cd2b11fa4a713b414714f1b97 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 29 Mar 2019 23:20:44 +0000 Subject: [PATCH 062/349] Updated TOC.md --- windows/security/threat-protection/windows-defender-atp/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/windows-defender-atp/TOC.md b/windows/security/threat-protection/windows-defender-atp/TOC.md index 54c5220116..6073bb0c28 100644 --- a/windows/security/threat-protection/windows-defender-atp/TOC.md +++ b/windows/security/threat-protection/windows-defender-atp/TOC.md @@ -124,6 +124,7 @@ ### [Access the Windows Defender Security Center Community Center](community-windows-defender-advanced-threat-protection.md) ## [Configure and manage capabilities](onboard.md) +### [Configure Threat & Vulnerability Management](configure-and-manage-tvm.md) ### [Configure attack surface reduction](configure-attack-surface-reduction.md) ###Hardware-based isolation #### [System integrity](../windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md) From b03c67e8289a6e53cd8d8452d6969fc7c8f299ee Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 29 Mar 2019 23:30:26 +0000 Subject: [PATCH 063/349] Updated overview.md --- .../security/threat-protection/windows-defender-atp/overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/overview.md b/windows/security/threat-protection/windows-defender-atp/overview.md index ee0fc9fd26..727a7c0179 100644 --- a/windows/security/threat-protection/windows-defender-atp/overview.md +++ b/windows/security/threat-protection/windows-defender-atp/overview.md @@ -33,7 +33,7 @@ Understand the concepts behind the capabilities in Windows Defender ATP so you t Topic | Description :---|:--- -[Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) | Reduce organizational vulnerability exposure and increase organizational resilience while seamlessly connecting workflows across security stakeholders—security administrators, security operations, and IT administrators in remediating threats. +[Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) | Reduce organizational vulnerability exposure and increase threat resilience while seamlessly connecting workflows across security stakeholders—security administrators, security operations, and IT administrators in remediating threats. [Attack surface reduction](overview-attack-surface-reduction.md) | Leverage the attack surface reduction capabilities to protect the perimeter of your organization. [Next generation protection](../windows-defender-antivirus/windows-defender-antivirus-in-windows-10.md) | Learn about the antivirus capabilities in Windows Defender ATP so you can protect desktops, portable computers, and servers. [Endpoint detection and response](overview-endpoint-detection-response.md) | Understand how Windows Defender ATP continuously monitors your organization for possible attacks against systems, networks, or users in your organization and the features you can use to mitigate and remediate threats. From c79dbbe74f51941c30384ff752096a657981791b Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 29 Mar 2019 23:54:49 +0000 Subject: [PATCH 064/349] Updated get-started.md --- .../threat-protection/windows-defender-atp/get-started.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/get-started.md b/windows/security/threat-protection/windows-defender-atp/get-started.md index 6086863cb6..5890418713 100644 --- a/windows/security/threat-protection/windows-defender-atp/get-started.md +++ b/windows/security/threat-protection/windows-defender-atp/get-started.md @@ -31,6 +31,9 @@ Learn about the minimum requirements and initial steps you need to take to get s The following capabilities are available across multiple products that make up the Windows Defender ATP platform. +**Threat & Vulnerability Management**
+Effectively identifying, assessing, and remediating endpoint weaknesses is pivotal in running a healthy security program and reducing organizational risk. This infrastructure helps reduce organizational vulnerability exposure, increase threat resilience, and correlates endpoint detection and response (EDR) insights with endpoint vulnerabilities real-time. + **Attack surface reduction**
The attack surface reduction set of capabilities provide the first line of defense in the stack. By ensuring configuration settings are properly set and exploit mitigation techniques are applied, these set of capabilities resist attacks and exploitations. From ffa414d874e6fea36b5d1a6d10d7275db578887e Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 29 Mar 2019 23:56:58 +0000 Subject: [PATCH 065/349] Updated get-started.md --- .../threat-protection/windows-defender-atp/get-started.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/get-started.md b/windows/security/threat-protection/windows-defender-atp/get-started.md index 5890418713..10a74aa6a5 100644 --- a/windows/security/threat-protection/windows-defender-atp/get-started.md +++ b/windows/security/threat-protection/windows-defender-atp/get-started.md @@ -32,7 +32,7 @@ Learn about the minimum requirements and initial steps you need to take to get s The following capabilities are available across multiple products that make up the Windows Defender ATP platform. **Threat & Vulnerability Management**
-Effectively identifying, assessing, and remediating endpoint weaknesses is pivotal in running a healthy security program and reducing organizational risk. This infrastructure helps reduce organizational vulnerability exposure, increase threat resilience, and correlates endpoint detection and response (EDR) insights with endpoint vulnerabilities real-time. +Effectively identifying, assessing, and remediating endpoint weaknesses is pivotal in running a healthy security program and reducing organizational risk. This infrastructure correlates endpoint detection and response (EDR) insights with endpoint vulnerabilities real-time, thus reducing organizational vulnerability exposure, and increasing threat resilience. **Attack surface reduction**
The attack surface reduction set of capabilities provide the first line of defense in the stack. By ensuring configuration settings are properly set and exploit mitigation techniques are applied, these set of capabilities resist attacks and exploitations. From 590aff02294d8a82fbab413b6aa8478fe616412b Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 29 Mar 2019 23:58:14 +0000 Subject: [PATCH 066/349] Updated get-started.md --- .../threat-protection/windows-defender-atp/get-started.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/get-started.md b/windows/security/threat-protection/windows-defender-atp/get-started.md index 10a74aa6a5..96a02d2c87 100644 --- a/windows/security/threat-protection/windows-defender-atp/get-started.md +++ b/windows/security/threat-protection/windows-defender-atp/get-started.md @@ -32,7 +32,7 @@ Learn about the minimum requirements and initial steps you need to take to get s The following capabilities are available across multiple products that make up the Windows Defender ATP platform. **Threat & Vulnerability Management**
-Effectively identifying, assessing, and remediating endpoint weaknesses is pivotal in running a healthy security program and reducing organizational risk. This infrastructure correlates endpoint detection and response (EDR) insights with endpoint vulnerabilities real-time, thus reducing organizational vulnerability exposure, and increasing threat resilience. +Effectively identifying, assessing, and remediating endpoint weaknesses is pivotal in running a healthy security program and reducing organizational risk. This infrastructure correlates endpoint detection and response (EDR) insights with endpoint vulnerabilities real-time, thus reducing organizational vulnerability exposure and increasing threat resilience. **Attack surface reduction**
The attack surface reduction set of capabilities provide the first line of defense in the stack. By ensuring configuration settings are properly set and exploit mitigation techniques are applied, these set of capabilities resist attacks and exploitations. From 8391b063e34de8ffb8d52458bafc0e617c1619c2 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Sat, 30 Mar 2019 00:30:20 +0000 Subject: [PATCH 067/349] Updated configure-and-manage-tvm.md --- .../configure-and-manage-tvm.md | 19 ++++++++++++++++++- 1 file changed, 18 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md index 0525cbc629..a2c8b8ad22 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md @@ -1 +1,18 @@ - +--- +title: Configure Threat & Vulnerability Management in Windows Defender ATP +description: +keywords: +search.product: Windows 10 +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: dolmont +author: Dolcita Montemayor +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: article +--- From ddbb1e24a9b34fbfcb830b28da1ae97bcf41216d Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Sat, 30 Mar 2019 00:31:09 +0000 Subject: [PATCH 068/349] Updated next-gen-threat-and-vuln-mgt.md --- .../next-gen-threat-and-vuln-mgt.md | 20 ++++++++++++++++++- 1 file changed, 19 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md index 0525cbc629..bb6eac2afd 100644 --- a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md +++ b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md @@ -1 +1,19 @@ - +--- +title: Next-generation Threat & Vulnerability Management +description: +keywords: +search.product: Windows 10 +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: dolmont +author: Dolcita Montemayor +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +--- + From 625c53d75fc77a885e7908e3ea44d9a7b5b77afe Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Sat, 30 Mar 2019 00:31:55 +0000 Subject: [PATCH 069/349] Updated threat-and-vuln-mgt-scenarios.md --- .../threat-and-vuln-mgt-scenarios.md | 19 ++++++++++++++++++- 1 file changed, 18 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 0525cbc629..1c680de8bf 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -1 +1,18 @@ - +--- +title: Threat & Vulnerability Management scenarios +description: +keywords: +search.product: Windows 10 +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: dolmont +author: Dolcita Montemayor +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: article +--- From f57cafc4a734827ea369bca585286a5b26566aa0 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Sat, 30 Mar 2019 00:33:13 +0000 Subject: [PATCH 070/349] Updated tvm-dashboard-insights.md --- .../tvm-dashboard-insights.md | 19 ++++++++++++++++++- 1 file changed, 18 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index 0525cbc629..af44572e8a 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -1 +1,18 @@ - +--- +title: What's in the dashboard and what it means for my organization's security posture +description: +keywords: +search.product: Windows 10 +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: dolmont +author: Dolcita Montemayor +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +--- From fcdabff1708268bad4e33084261fa3e5ddc5d68e Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Sun, 31 Mar 2019 11:40:59 +0300 Subject: [PATCH 071/349] updated supplied credentials as recommended by @SteveSyfuhs --- windows/security/identity-protection/remote-credential-guard.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/remote-credential-guard.md b/windows/security/identity-protection/remote-credential-guard.md index b57634a153..ccafee06af 100644 --- a/windows/security/identity-protection/remote-credential-guard.md +++ b/windows/security/identity-protection/remote-credential-guard.md @@ -89,7 +89,7 @@ To use Windows Defender Remote Credential Guard, the Remote Desktop client and r The Remote Desktop client device: -- Must be running at least Windows 10, version 1703 to be able to supply credentials (hash and TGT). +- Must be running at least Windows 10, version 1703 to be able to supply credentials, which is sent to the remote device. This allows users to run as different users without having to send credentials to the remote machine. - Must be running at least Windows 10, version 1607 or Windows Server 2016 to use the user’s signed-in credentials. This requires the user’s account be able to sign in to both the client device and the remote host. - Must be running the Remote Desktop Classic Windows application. The Remote Desktop Universal Windows Platform application doesn't support Windows Defender Remote Credential Guard. - Must use Kerberos authentication to connect to the remote host. If the client cannot connect to a domain controller, then RDP attempts to fall back to NTLM. Windows Defender Remote Credential Guard does not allow NTLM fallback because this would expose credentials to risk. From a3b70875568e8f0ff27b931202212fe9b7732972 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Mon, 1 Apr 2019 10:19:36 -0700 Subject: [PATCH 072/349] remove ms.date --- .../change-history-for-configure-windows-10.md | 7 ++++++- windows/configuration/kiosk-shelllauncher.md | 1 - 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/windows/configuration/change-history-for-configure-windows-10.md b/windows/configuration/change-history-for-configure-windows-10.md index 52fa2a92d0..954454df28 100644 --- a/windows/configuration/change-history-for-configure-windows-10.md +++ b/windows/configuration/change-history-for-configure-windows-10.md @@ -10,13 +10,18 @@ ms.localizationpriority: medium author: jdeckerms ms.author: jdecker ms.topic: article -ms.date: 11/07/2018 --- # Change history for Configure Windows 10 This topic lists new and updated topics in the [Configure Windows 10](index.md) documentation for Windows 10 and Windows 10 Mobile. +## April 2019 + +New or changed topic | Description +--- | --- +[Use Shell Launcher to create a Windows 10 kiosk](kiosk-shelllauncher.md) | Added information for Shell Launcher v2, coming in the next feature update to Windows 10. + ## February 2019 New or changed topic | Description diff --git a/windows/configuration/kiosk-shelllauncher.md b/windows/configuration/kiosk-shelllauncher.md index abe3e1996e..308da89102 100644 --- a/windows/configuration/kiosk-shelllauncher.md +++ b/windows/configuration/kiosk-shelllauncher.md @@ -8,7 +8,6 @@ ms.mktglfcycl: manage ms.sitesec: library author: jdeckerms ms.localizationpriority: medium -ms.date: 10/01/2018 ms.topic: article --- From 4722f7345538d02695932fc8487c04bf6abbf75c Mon Sep 17 00:00:00 2001 From: Nicole Turner <39884432+nenonix@users.noreply.github.com> Date: Mon, 1 Apr 2019 21:27:51 +0200 Subject: [PATCH 073/349] Update hello-cert-trust-policy-settings.md lines 38-42 edited for clarity and brevity - closes https://github.com/MicrosoftDocs/windows-itpro-docs/issues/2064 --- .../hello-for-business/hello-cert-trust-policy-settings.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-cert-trust-policy-settings.md b/windows/security/identity-protection/hello-for-business/hello-cert-trust-policy-settings.md index 1528aad8e3..1b65e636ae 100644 --- a/windows/security/identity-protection/hello-for-business/hello-cert-trust-policy-settings.md +++ b/windows/security/identity-protection/hello-for-business/hello-cert-trust-policy-settings.md @@ -35,9 +35,9 @@ On-premises certificate-based deployments of Windows Hello for Business needs th ## Enable Windows Hello for Business Group Policy -The Enable Windows Hello for Business Group Policy setting is the configuration needed for Windows to determine if a user should be attempt to enroll for Windows Hello for Business. A user will only attempt enrollment if this policy setting is configured to enabled. +The Group Policy setting gives specified users the option of auto-enrollment in Windows Hello for Business. To configure user or computer-targeted Group Policy settings, the Windows Hello for Business Group Policy must be enabled. -You can configure the Enable Windows Hello for Business Group Policy setting for computer or users. Deploying this policy setting to computers results in ALL users that sign-in that computer to attempt a Windows Hello for Business enrollment. Deploying this policy setting to a user results in only that user attempting a Windows Hello for Business enrollment. Additionally, you can deploy the policy setting to a group of users so only those users attempt a Windows Hello for Business enrollment. If both user and computer policy settings are deployed, the user policy setting has precedence. +Deploying the Group Policy settimg to a computer allows ALL signed-in users to start the Windows Hello for Business enrollment process. Deployment to a user, or a group of users, allows only those users to proceed with the enrollment process. If both user and computer policy settings are deployed, the user policy setting takes precedence. ## Use certificate for on-premises authentication From 41ced48b7509232f0a1a7010ff963bfc62a3e3f3 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Tue, 2 Apr 2019 07:56:58 -0700 Subject: [PATCH 074/349] add shell launcher in kiosk methods --- windows/configuration/kiosk-methods.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/configuration/kiosk-methods.md b/windows/configuration/kiosk-methods.md index 888cbc3049..8e1d43a044 100644 --- a/windows/configuration/kiosk-methods.md +++ b/windows/configuration/kiosk-methods.md @@ -43,6 +43,7 @@ You can use this method | For this edition | For this kiosk account type [Assigned access cmdlets](kiosk-single-app.md#powershell) | Pro, Ent, Edu | Local standard user [The kiosk wizard in Windows Configuration Designer](kiosk-single-app.md#wizard) | Pro (version 1709), Ent, Edu | Local standard user, Active Directory, Azure AD [Microsoft Intune or other mobile device management (MDM)](kiosk-single-app.md#mdm) | Pro (version 1709), Ent, Edu | Local standard user, Azure AD +[Shell Launcher](kiosk-shelllauncher.md) v2 | Ent, Edu | Local standard user, Active Directory, Azure AD ## Methods for a single-app kiosk running a Windows desktop application @@ -50,8 +51,8 @@ You can use this method | For this edition | For this kiosk account type You can use this method | For this edition | For this kiosk account type --- | --- | --- [The kiosk wizard in Windows Configuration Designer](kiosk-single-app.md#wizard) | Ent, Edu | Local standard user, Active Directory, Azure AD -[Shell Launcher](kiosk-shelllauncher.md) | Ent, Edu | Local standard user, Active Directory, Azure AD [Microsoft Intune or other mobile device management (MDM)](kiosk-single-app.md#mdm) | Pro (version 1709), Ent, Edu | Local standard user, Azure AD +[Shell Launcher](kiosk-shelllauncher.md) v1 and v2 | Ent, Edu | Local standard user, Active Directory, Azure AD ## Methods for a multi-app kiosk From bfedcc723526c304476be8a163674277a2ad0841 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Tue, 2 Apr 2019 08:02:02 -0700 Subject: [PATCH 075/349] add prerelease to kiosk-methods --- windows/configuration/kiosk-methods.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/configuration/kiosk-methods.md b/windows/configuration/kiosk-methods.md index 8e1d43a044..82aa4dc94f 100644 --- a/windows/configuration/kiosk-methods.md +++ b/windows/configuration/kiosk-methods.md @@ -12,6 +12,9 @@ ms.topic: article # Configure kiosks and digital signs on Windows desktop editions +>[!WARNING] +>Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + Some desktop devices in an enterprise serve a special purpose, such as a PC in the lobby that customers can use to view your product catalog or a PC displaying visual content as a digital sign. Windows 10 offers two different locked-down experiences for public or specialized use: | | | From 8502293acac41d65fb1fd23cb5a172a08948a07d Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Tue, 2 Apr 2019 08:03:33 -0700 Subject: [PATCH 076/349] -desktop --- windows/configuration/kiosk-additional-reference.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/configuration/kiosk-additional-reference.md b/windows/configuration/kiosk-additional-reference.md index 72377d11f6..81a9ba0ecf 100644 --- a/windows/configuration/kiosk-additional-reference.md +++ b/windows/configuration/kiosk-additional-reference.md @@ -8,7 +8,6 @@ ms.mktglfcycl: manage ms.sitesec: library author: jdeckerms ms.localizationpriority: medium -ms.date: 09/13/2018 ms.topic: reference --- @@ -30,7 +29,7 @@ Topic | Description [Policies enforced on kiosk devices](kiosk-policies.md) | Learn about the policies enforced on a device when you configure it as a kiosk. [Assigned access XML reference](kiosk-xml.md) | The XML and XSD for kiosk device configuration. [Use AppLocker to create a Windows 10 kiosk](lock-down-windows-10-applocker.md) | Learn how to use AppLocker to configure a kiosk device running Windows 10 Enterprise or Windows 10 Education, version 1703 and earlier, so that users can only run a few specific apps. -[Use Shell Launcher to create a Windows 10 kiosk](kiosk-shelllauncher.md) | Using Shell Launcher, you can configure a kiosk device that runs a Windows desktop application as the user interface. +[Use Shell Launcher to create a Windows 10 kiosk](kiosk-shelllauncher.md) | Using Shell Launcher, you can configure a kiosk device that runs a Windows application as the user interface. [Use MDM Bridge WMI Provider to create a Windows 10 kiosk](kiosk-mdm-bridge.md) | Environments that use Windows Management Instrumentation (WMI) can use the MDM Bridge WMI Provider to configure the MDM_AssignedAccess class. [Troubleshoot kiosk mode issues](kiosk-troubleshoot.md) | Tips for troubleshooting multi-app kiosk configuration. From c67ef6f002364c25a371c8ca7428e4411f2e7b44 Mon Sep 17 00:00:00 2001 From: Malin De Silva Date: Wed, 3 Apr 2019 15:12:53 +0530 Subject: [PATCH 077/349] windows server 2016 or later change Changed the all domain controllers to sipport windows server --- .../hello-for-business/hello-identity-verification.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-identity-verification.md b/windows/security/identity-protection/hello-for-business/hello-identity-verification.md index 672ad0f33f..ae8da9280d 100644 --- a/windows/security/identity-protection/hello-for-business/hello-identity-verification.md +++ b/windows/security/identity-protection/hello-for-business/hello-identity-verification.md @@ -50,7 +50,7 @@ The table shows the minimum requirements for each deployment. For key trust in a | Windows 10, version 1511 or later| **Hybrid Azure AD Joined:**
*Minimum:* Windows 10, version 1703
*Best experience:* Windows 10, version 1709 or later (supports synchronous certificate enrollment).
**Azure AD Joined:**
Windows 10, version 1511 or later| Windows 10, version 1511 or later | Windows 10, version 1511 or later | | Windows Server 2016 Schema | Windows Server 2016 Schema | Windows Server 2016 Schema | Windows Server 2016 Schema | | Windows Server 2008 R2 Domain/Forest functional level | Windows Server 2008 R2 Domain/Forest functional level| Windows Server 2008 R2 Domain/Forest functional level |Windows Server 2008 R2 Domain/Forest functional level | -| Windows Server 2016 Domain Controllers | Windows Server 2008 R2 or later Domain Controllers | Windows Server 2016 Domain Controllers | Windows Server 2008 R2 or later Domain Controllers | +| Windows Server 2016 or later Domain Controllers | Windows Server 2008 R2 or later Domain Controllers | Windows Server 2016 or later Domain Controllers | Windows Server 2008 R2 or later Domain Controllers | | Windows Server 2012 or later Certificate Authority | Windows Server 2012 or later Certificate Authority | Windows Server 2012 or later Certificate Authority | Windows Server 2012 or later Certificate Authority | | N/A | Windows Server 2016 AD FS with [KB4088889 update](https://support.microsoft.com/help/4088889) (hybrid Azure AD joined clients),
and
Windows Server 2012 or later Network Device Enrollment Service (Azure AD joined) | N/A | Windows Server 2012 or later Network Device Enrollment Service | | Azure MFA tenant, or
AD FS w/Azure MFA adapter, or
AD FS w/Azure MFA Server adapter, or
AD FS w/3rd Party MFA Adapter| Azure MFA tenant, or
AD FS w/Azure MFA adapter, or
AD FS w/Azure MFA Server adapter, or
AD FS w/3rd Party MFA Adapter | Azure MFA tenant, or
AD FS w/Azure MFA adapter, or
AD FS w/Azure MFA Server adapter, or
AD FS w/3rd Party MFA Adapter | Azure MFA tenant, or
AD FS w/Azure MFA adapter, or
AD FS w/Azure MFA Server adapter, or
AD FS w/3rd Party MFA Adapter | @@ -67,7 +67,7 @@ The table shows the minimum requirements for each deployment. | Windows 10, version 1703 or later | Windows 10, version 1703 or later | | Windows Server 2016 Schema | Windows Server 2016 Schema| | Windows Server 2008 R2 Domain/Forest functional level | Windows Server 2008 R2 Domain/Forest functional level | -| Windows Server 2016 Domain Controllers | Windows Server 2008 R2 or later Domain Controllers | +| Windows Server 2016 or later Domain Controllers | Windows Server 2008 R2 or later Domain Controllers | | Windows Server 2012 or later Certificate Authority | Windows Server 2012 or later Certificate Authority | | Windows Server 2016 AD FS with [KB4088889 update](https://support.microsoft.com/help/4088889) | Windows Server 2016 AD FS with [KB4088889 update](https://support.microsoft.com/help/4088889) | | AD FS with Azure MFA Server, or
AD FS with 3rd Party MFA Adapter | AD FS with Azure MFA Server, or
AD FS with 3rd Party MFA Adapter | From c771708c6de3cd1e47936cf565d389b7443dca34 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Wed, 3 Apr 2019 06:00:11 -0700 Subject: [PATCH 078/349] fix link --- windows/whats-new/ltsc/whats-new-windows-10-2019.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/ltsc/whats-new-windows-10-2019.md b/windows/whats-new/ltsc/whats-new-windows-10-2019.md index 4a15ed3e75..dd8a314962 100644 --- a/windows/whats-new/ltsc/whats-new-windows-10-2019.md +++ b/windows/whats-new/ltsc/whats-new-windows-10-2019.md @@ -305,7 +305,7 @@ IT Pros can use Autopilot Reset to quickly remove personal files, apps, and sett ### Faster sign-in to a Windows 10 shared pc -If you have shared devices deployed in your work place, **Fast sign-in** enables users to sign in to a [shared Windows 10 PC](/windows/configuration/set-up-shared-or-guest-pc.md) in a flash! +If you have shared devices deployed in your work place, **Fast sign-in** enables users to sign in to a [shared Windows 10 PC](https://docs.microsoft.com/windows/configuration/set-up-shared-or-guest-pc) in a flash! **To enable fast sign-in:** 1. Set up a shared or guest device with Windows 10, version 1809 or Windows 10 Enterprise 2019 LTSC. From 36c19af9f157e7f844f85779590daebecf02d1b1 Mon Sep 17 00:00:00 2001 From: Nicole Turner <39884432+nenonix@users.noreply.github.com> Date: Thu, 4 Apr 2019 13:36:03 +0200 Subject: [PATCH 079/349] Update hello-cert-trust-policy-settings.md Changes made as directed (added that the Group Policy must be enabled first, as that was the original thrust of this section). --- .../hello-for-business/hello-cert-trust-policy-settings.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-cert-trust-policy-settings.md b/windows/security/identity-protection/hello-for-business/hello-cert-trust-policy-settings.md index 1b65e636ae..49e7d658b3 100644 --- a/windows/security/identity-protection/hello-for-business/hello-cert-trust-policy-settings.md +++ b/windows/security/identity-protection/hello-for-business/hello-cert-trust-policy-settings.md @@ -35,9 +35,9 @@ On-premises certificate-based deployments of Windows Hello for Business needs th ## Enable Windows Hello for Business Group Policy -The Group Policy setting gives specified users the option of auto-enrollment in Windows Hello for Business. To configure user or computer-targeted Group Policy settings, the Windows Hello for Business Group Policy must be enabled. +The Group Policy setting determines whether users are allowed, and prompted, to enroll for Windows Hello for Business. You must first enable the Windows Hello for Business Group Policy, then you can configure it for computers or users. -Deploying the Group Policy settimg to a computer allows ALL signed-in users to start the Windows Hello for Business enrollment process. Deployment to a user, or a group of users, allows only those users to proceed with the enrollment process. If both user and computer policy settings are deployed, the user policy setting takes precedence. +If you configure the Group Policy for computers, all users that sign-in to those computers will be allowed and prompted to enroll for Windows Hello for Business. If you configure the Group Policy for users, only those users will be allowed and prompted to enroll for Windows Hello for Business. ## Use certificate for on-premises authentication From ed643a4b2f4f39b815f13b946d9f16521c52dd68 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Thu, 4 Apr 2019 05:41:37 -0700 Subject: [PATCH 080/349] remove broken link --- windows/configuration/kiosk-single-app.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/windows/configuration/kiosk-single-app.md b/windows/configuration/kiosk-single-app.md index 439acaa52b..6fb60b7a45 100644 --- a/windows/configuration/kiosk-single-app.md +++ b/windows/configuration/kiosk-single-app.md @@ -169,8 +169,6 @@ Set-AssignedAccess -AppName -UserSID [Learn how to get the AppName](https://msdn.microsoft.com/library/windows/hardware/mt620046%28v=vs.85%29.aspx) (see **Parameters**). -[Learn how to get the SID](https://go.microsoft.com/fwlink/p/?LinkId=615517). - To remove assigned access, using PowerShell, run the following cmdlet. ``` From 5737648219ae986c45576685038660520d814242 Mon Sep 17 00:00:00 2001 From: Max Velitchko Date: Thu, 4 Apr 2019 12:37:53 -0700 Subject: [PATCH 081/349] Removing leftover references to telemetry consent --- .../microsoft-defender-atp-mac.md | 14 +++++--------- 1 file changed, 5 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac.md b/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac.md index 15865ca9fa..e4d8180854 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac.md +++ b/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac.md @@ -56,14 +56,11 @@ SIP is a built-in macOS security feature that prevents low-level tampering with ## Installation and configuration overview There are various methods and deployment tools that you can use to install and configure Microsoft Defender ATP for Mac. In general you'll need to take the following steps: - - [Register macOS devices](#register-macos-devices) with Windows Defender ATP - - Deploy Microsoft Defender ATP for Mac using any of the following deployment methods and tools: - - [Microsoft Intune based deployment](#microsoft-intune-based-deployment) - - [JAMF based deployment](#jamf-based-deployment) - - [Manual deployment](#manual-deployment) - -## Deploy Microsoft Defender ATP for Mac -Use any of the supported methods to deploy Microsoft Defender ATP for Mac + - Ensure you have a Windows Defender ATP subscription and have access to the ATP Portal + - Deploy Microsoft Defender ATP for Mac using one of the following deployment methods: + * [Microsoft Intune based deployment](#microsoft-intune-based-deployment) + * [JAMF based deployment](#jamf-based-deployment) + * [Manual deployment](#manual-deployment) ## Microsoft Intune based deployment @@ -293,7 +290,6 @@ After some time, the machine's User Approved MDM status will change to Yes. You can enroll additional machines now. Optionally, can do it after system configuration and application packages are provisioned. - ### Deployment Enrolled client machines periodically poll the JAMF Server and install new configuration profiles and policies as soon as they are detected. From 643288ae4162d239c42c5179408b07287d64dd1d Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 4 Apr 2019 23:36:46 +0000 Subject: [PATCH 082/349] Updated next-gen-threat-and-vuln-mgt.md --- .../windows-defender-atp/next-gen-threat-and-vuln-mgt.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md index bb6eac2afd..ec98570add 100644 --- a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md +++ b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md @@ -1,7 +1,7 @@ --- title: Next-generation Threat & Vulnerability Management -description: -keywords: +description: This new capability uses a game-changing risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. +keywords: threat and vulnerability management, vulnerability management, threat and vulnerability scanning search.product: Windows 10 search.appverid: met150 ms.prod: w10 From 929d391ad65307c5e0bb63264ada1ce360747969 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 4 Apr 2019 23:55:20 +0000 Subject: [PATCH 083/349] Updated next-gen-threat-and-vuln-mgt.md --- .../next-gen-threat-and-vuln-mgt.md | 20 +++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md index ec98570add..3018ea4c05 100644 --- a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md +++ b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md @@ -17,3 +17,23 @@ ms.collection: M365-security-compliance ms.topic: conceptual --- +# Threat & Vulnerability Management +**Applies to:** +- [Windows Defender Advanced Threat Protection (Windows Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) + +[!include[Prerelease�information](prerelease.md)] + +Effectively identifying, assessing, and remediating endpoint weaknesses is pivotal in running a healthy security program an dreducing organizational risk. + +Threat and Vulnerability Management serves as an infrustructure for reducing organizational exposure, hardening endpoint surface area, and increasing organizational resilience. It provides the following solutions to frequently-cited gaps across security operations, security administration, and IT administration workflows and communication. +- Continuous threat and vulnerability exposure discovery with runtime information +- Real-time endpoint detection and response (EDR) insights correlated with endpoint vulnerabilities +- Linked vulnerability and security configuration assessment data in the context of exposure discovery +- Threat and business context +- Built-in remediation processes through Microsoft Intune and Microsoft System Center Configuration Manager + + +## Related topics +- [What's in the dashboard and what it means](tvm-dashboard-insights.md) +- [Configure Threat & Vulnerability Management](configure-and-manage-tvm.md) +- [Scenarios](threat-and-vuln-mgt-scenarios.md) \ No newline at end of file From fd7c6486d7c35df1e39c244678967dcec26461e5 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 4 Apr 2019 23:56:15 +0000 Subject: [PATCH 084/349] Updated next-gen-threat-and-vuln-mgt.md --- .../windows-defender-atp/next-gen-threat-and-vuln-mgt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md index 3018ea4c05..35afd62e1b 100644 --- a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md +++ b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md @@ -25,7 +25,7 @@ ms.topic: conceptual Effectively identifying, assessing, and remediating endpoint weaknesses is pivotal in running a healthy security program an dreducing organizational risk. -Threat and Vulnerability Management serves as an infrustructure for reducing organizational exposure, hardening endpoint surface area, and increasing organizational resilience. It provides the following solutions to frequently-cited gaps across security operations, security administration, and IT administration workflows and communication. +Threat & Vulnerability Management serves as an infrustructure for reducing organizational exposure, hardening endpoint surface area, and increasing organizational resilience. It provides the following solutions to frequently-cited gaps across security operations, security administration, and IT administration workflows and communication. - Continuous threat and vulnerability exposure discovery with runtime information - Real-time endpoint detection and response (EDR) insights correlated with endpoint vulnerabilities - Linked vulnerability and security configuration assessment data in the context of exposure discovery From 96e16c56b6962faf528bc4025599c79d77e6dfb5 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 5 Apr 2019 00:04:25 +0000 Subject: [PATCH 085/349] Updated next-gen-threat-and-vuln-mgt.md --- .../windows-defender-atp/next-gen-threat-and-vuln-mgt.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md index 35afd62e1b..159ede8711 100644 --- a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md +++ b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md @@ -23,9 +23,7 @@ ms.topic: conceptual [!include[Prerelease�information](prerelease.md)] -Effectively identifying, assessing, and remediating endpoint weaknesses is pivotal in running a healthy security program an dreducing organizational risk. - -Threat & Vulnerability Management serves as an infrustructure for reducing organizational exposure, hardening endpoint surface area, and increasing organizational resilience. It provides the following solutions to frequently-cited gaps across security operations, security administration, and IT administration workflows and communication. +Effectively identifying, assessing, and remediating endpoint weaknesses is pivotal in running a healthy security program an dreducing organizational risk. Threat & Vulnerability Management serves as an infrustructure for reducing organizational exposure, hardening endpoint surface area, and increasing organizational resilience. It provides the following solutions to frequently-cited gaps across security operations, security administration, and IT administration workflows and communication. - Continuous threat and vulnerability exposure discovery with runtime information - Real-time endpoint detection and response (EDR) insights correlated with endpoint vulnerabilities - Linked vulnerability and security configuration assessment data in the context of exposure discovery From b314663ab0393c440c6a8c4d8ca0cda16ec0cea2 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 5 Apr 2019 00:05:09 +0000 Subject: [PATCH 086/349] Updated next-gen-threat-and-vuln-mgt.md --- .../windows-defender-atp/next-gen-threat-and-vuln-mgt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md index 159ede8711..b0005107d5 100644 --- a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md +++ b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md @@ -23,7 +23,7 @@ ms.topic: conceptual [!include[Prerelease�information](prerelease.md)] -Effectively identifying, assessing, and remediating endpoint weaknesses is pivotal in running a healthy security program an dreducing organizational risk. Threat & Vulnerability Management serves as an infrustructure for reducing organizational exposure, hardening endpoint surface area, and increasing organizational resilience. It provides the following solutions to frequently-cited gaps across security operations, security administration, and IT administration workflows and communication. +Effectively identifying, assessing, and remediating endpoint weaknesses is pivotal in running a healthy security program and reducing organizational risk. Threat & Vulnerability Management serves as an infrustructure for reducing organizational exposure, hardening endpoint surface area, and increasing organizational resilience. It provides the following solutions to frequently-cited gaps across security operations, security administration, and IT administration workflows and communication. - Continuous threat and vulnerability exposure discovery with runtime information - Real-time endpoint detection and response (EDR) insights correlated with endpoint vulnerabilities - Linked vulnerability and security configuration assessment data in the context of exposure discovery From c449911aee2a184c14430e1b9797b7ba12383b57 Mon Sep 17 00:00:00 2001 From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com> Date: Thu, 4 Apr 2019 23:05:31 -0500 Subject: [PATCH 087/349] Changed the word Certificate for Key #2259 Following the recommendation on issue #2259 I have changed the word **Certificate** for **Key** --- .../hello-for-business/hello-how-it-works-technology.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-how-it-works-technology.md b/windows/security/identity-protection/hello-for-business/hello-how-it-works-technology.md index 936c4a59e4..e795b09887 100644 --- a/windows/security/identity-protection/hello-for-business/hello-how-it-works-technology.md +++ b/windows/security/identity-protection/hello-for-business/hello-how-it-works-technology.md @@ -187,7 +187,7 @@ Joining a device is an extension to registering a device. This means, it provide [Return to Top](hello-how-it-works-technology.md) ## Key Trust -The key trust model uses the user's Windows Hello for Business identity to authenticate to on-premises Active Directory. The certificate trust model is supported in hybrid and on-premises deployments and requires Windows Server 2016 domain controllers. +The key trust model uses the user's Windows Hello for Business identity to authenticate to on-premises Active Directory. The key trust model is supported in hybrid and on-premises deployments and requires Windows Server 2016 domain controllers. ### Related topics [Certificate Trust](#certificate-trust), [Deployment Type](#deployment-type), [Hybrid Azure AD Joined](#hybrid-azure-ad-joined), [Hybrid Deployment](#hybrid-deployment), [On-premises Deployment](#on-premises-deployment), [Trust Type](#trust-type) From 5f6f8128f353fb5a545b17e724f663153bada26c Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Fri, 5 Apr 2019 17:20:57 +0500 Subject: [PATCH 088/349] Update use-windows-event-forwarding-to-assist-in-intrusion-detection.md, issue 1071 --- ...indows-event-forwarding-to-assist-in-intrusion-detection.md | 3 --- 1 file changed, 3 deletions(-) diff --git a/windows/security/threat-protection/use-windows-event-forwarding-to-assist-in-intrusion-detection.md b/windows/security/threat-protection/use-windows-event-forwarding-to-assist-in-intrusion-detection.md index ea2b3fa6af..12b4fe0205 100644 --- a/windows/security/threat-protection/use-windows-event-forwarding-to-assist-in-intrusion-detection.md +++ b/windows/security/threat-protection/use-windows-event-forwarding-to-assist-in-intrusion-detection.md @@ -13,9 +13,6 @@ ms.localizationpriority: medium # Use Windows Event Forwarding to help with intrusion detection -**Applies to** -- Windows 10 - Learn about an approach to collect events from devices in your organization. This article talks about events in both normal operations and when an intrusion is suspected. Windows Event Forwarding (WEF) reads any operational or administrative event log on a device in your organization and forwards the events you choose to a Windows Event Collector (WEC) server. From efd0509c6f874b2e33e625bdf728981f61115e99 Mon Sep 17 00:00:00 2001 From: Nicole Turner <39884432+nenonix@users.noreply.github.com> Date: Fri, 5 Apr 2019 15:09:43 +0200 Subject: [PATCH 089/349] Update hello-cert-trust-policy-settings.md further changes as requested --- .../hello-for-business/hello-cert-trust-policy-settings.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-cert-trust-policy-settings.md b/windows/security/identity-protection/hello-for-business/hello-cert-trust-policy-settings.md index 49e7d658b3..aade96adc6 100644 --- a/windows/security/identity-protection/hello-for-business/hello-cert-trust-policy-settings.md +++ b/windows/security/identity-protection/hello-for-business/hello-cert-trust-policy-settings.md @@ -35,7 +35,7 @@ On-premises certificate-based deployments of Windows Hello for Business needs th ## Enable Windows Hello for Business Group Policy -The Group Policy setting determines whether users are allowed, and prompted, to enroll for Windows Hello for Business. You must first enable the Windows Hello for Business Group Policy, then you can configure it for computers or users. +The Group Policy setting determines whether users are allowed, and prompted, to enroll for Windows Hello for Business. It can be configured for computers or users. If you configure the Group Policy for computers, all users that sign-in to those computers will be allowed and prompted to enroll for Windows Hello for Business. If you configure the Group Policy for users, only those users will be allowed and prompted to enroll for Windows Hello for Business. From b628952b70e43c2e7e65c29f855cedd9dcccb88a Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 5 Apr 2019 15:03:33 -0700 Subject: [PATCH 090/349] added files --- windows/security/threat-protection/TOC.md | 17 +++++++----- .../images/seccon-framework.png | Bin 0 -> 125416 bytes .../security-control-classification.png | Bin 0 -> 12204 bytes ...urity-control-deployment-methodologies.png | Bin 0 -> 21811 bytes .../windows-security-baselines/TOC.md | 15 ++++++++++ .../seccon-3-enterprise-VIP-security.md | 24 ++++++++++++++++ .../seccon-4-enterprise-high-security.md | 24 ++++++++++++++++ .../seccon-5-enterprise-security.md | 24 ++++++++++++++++ .../windows-security-baselines.md | 9 +++--- .../windows-security-compliance.md | 23 ++++++++++++++++ ...indows-security-configuration-framework.md | 26 ++++++++++++++++++ 11 files changed, 150 insertions(+), 12 deletions(-) create mode 100644 windows/security/threat-protection/images/seccon-framework.png create mode 100644 windows/security/threat-protection/images/security-control-classification.png create mode 100644 windows/security/threat-protection/images/security-control-deployment-methodologies.png create mode 100644 windows/security/threat-protection/windows-security-baselines/TOC.md create mode 100644 windows/security/threat-protection/windows-security-baselines/seccon-3-enterprise-VIP-security.md create mode 100644 windows/security/threat-protection/windows-security-baselines/seccon-4-enterprise-high-security.md create mode 100644 windows/security/threat-protection/windows-security-baselines/seccon-5-enterprise-security.md create mode 100644 windows/security/threat-protection/windows-security-baselines/windows-security-compliance.md create mode 100644 windows/security/threat-protection/windows-security-baselines/windows-security-configuration-framework.md diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 09f8f4921f..d60b30950a 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -1022,13 +1022,16 @@ ### [Windows security baselines](windows-security-baselines/windows-security-baselines.md) #### [Security Compliance Toolkit](windows-security-baselines/security-compliance-toolkit-10.md) #### [Get support](windows-security-baselines/get-support-for-security-baselines.md) -####Windows Security Blog Posts -##### [Sticking with Well-Known and Proven Solutions](windows-security-baselines/sticking-with-well-known-and-proven-solutions.md) -##### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md) -##### [Configuring Account Lockout](windows-security-baselines/configuring-account-lockout.md) -##### [Blocking Remote Use of Local Accounts](windows-security-baselines/blocking-remote-use-of-local-accounts.md) -##### [Dropping the “Untrusted Font Blocking” setting](windows-security-baselines/dropping-the-untrusted-font-blocking-setting.md) - +### [Windows SECCON framework](windows-security-baselines/windows-security-configuration-framework.md) +#### [SECCON 5 enterprise security](windows-security-baselines/seccon-5-enterprise-security.md) +#### [SECCON 4 enterprise high security](windows-security-baselines/seccon-4-high-enterprise-security.md) +#### [SECCON 3 enterprise VIP security](windows-security-baselines/seccon-3-vip-enterprise-security.md) +###Windows Security Blog Posts +#### [Sticking with Well-Known and Proven Solutions](windows-security-baselines/sticking-with-well-known-and-proven-solutions.md) +#### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md) +#### [Configuring Account Lockout](windows-security-baselines/configuring-account-lockout.md) +#### [Blocking Remote Use of Local Accounts](windows-security-baselines/blocking-remote-use-of-local-accounts.md) +#### [Dropping the “Untrusted Font Blocking” setting](windows-security-baselines/dropping-the-untrusted-font-blocking-setting.md) ### [MBSA removal and alternatives](mbsa-removal-and-guidance.md) diff --git a/windows/security/threat-protection/images/seccon-framework.png b/windows/security/threat-protection/images/seccon-framework.png new file mode 100644 index 0000000000000000000000000000000000000000..5a1c8ce2ad996437920b2a7384fa5a1f31326c70 GIT binary patch literal 125416 zcmeFac~p~E*Efu{Y88dn36-g89S{MP3WhMW&Vqo7f{alS(VIyLB#ene6-RJDB0@k# zpvn*i2|^%2QKBG;Kp{*?M1%+l2@oIzNb;U50i?+Ne9!l;Z+(BkT3uDVu4|vY&mMkz zpL6!PcED!Of_W?EDJdx}*td7*AtfbMxRTP3Za>WizZps^iUR+efjqQlyHX}iqXYcq zN6$a4|5Q@Sj#3^uJ`4PP?%BPLNF}AEYoPyT>^t;Zw~~@9dEd@I4+pvNBo>jaWka*Q z=@^>Ii`jG78y3U5jd*XIF3s>%VeP$e;nnb!EBNJ`Hl1HM$Gzn2>5|Qq6H#Rrg`JNJ z>rY(61~5M^(a3jtz7}Sp8i!P6ODHmdtZ4=y3V!JOV)nf-fc|tWgLUmH^z&kWz^Wgh z-zX`W&T(8@MTY)#KCiG&b*KEN@i&uSM&C}jwDI0)1oZDEPOjWJtK>gE3-MQ>Ux6R` zpWnWo*+26a=;w}+j?H%RkW5MG<&Mn=iG|EUNr``(?%*m?Q92Kg7T(`@C(NRc;Y*Sk zbgfoWV*M6RsGg~GKL1*~uHyYu;QfoQRg{$auZuUV=P4;2Fi0d6KFXS@^hdEj`RUjO$Z3V9<$n)d`D>!NTim}8KPG0*m{Fs7LzYj6Ch~{u92aLaFr|`a9 zmG)Ws;a)LN8(~7ac5bqbh7wy1y8ExnSlejLPFxvx+KV^ENrzd*aqNgo- z+I6p5HSN0pFJp9;afBa+8)+e}#bYI@q!BT_pAh{;+?Q98C=p@=k!(q`=0!#$XL*!3+1HRQn zOFArtlTahtNvN&vWW;6&eopTa4h?bQhgy9ubp7-pNfC`#hSN5{b3<{0nh!l557&|R zBHzkB2PZMG84L@-NZ^0_nqL6T8o^COc1GpTBCg&Pb(U%&9&iV!V!i1g^0~o zh{3)*D_M~pLsPZKtBV=!6KF$+Cv&uy*4ukQ{8gVjOd`8e$e#kwTVI_7*LbguDS@d7 zs%6%qUJinJ?$F$R4!@7n9~$>t#=00wG6WD^^v`GLWN+V`?mH6JEMZ_m#~%wnZRy-pRcvs7MK~>SOh_advbMC8-!_)}i)s=dwjA65-Kd^0>mLMrz6PH-+3{L$FAOFwn6AZz6$w0OZfF70Rdho=j_qRMFz0%@ndUY!Z@ z462K38YT)gY0o6U-1X0d3uDeBER5*vU2J1*56^+;aue}xbh%uAeC_=|^6gOOBfWO$ zGud^qR=Ge&T5#Ico6+Hw%aQxIarr-v3}pvP*9?)x>*2W$3N&2*qF`S3jzw0FoOR#` zn!t^}QKOjZdP=`CGaN4&I%Uy*R~q>b5_cW}H;P(N(P;(|9aH==@EHT-k`obYWB$lL zgd&GYI%uz}LYqC>t9kP28F1I{5bQNW&mGKj7uIK`v+Pi(2(QH(%#IniZ+N3(`0U5R z$2r2y#r8MyXs!=khfShVeY~j;-E(Ek{|puz9z>l=os5f}0|$EuMid0oxj~%#GbX%X zX>1y=Xdsa0zmCJ`wM8d%>Ho8YdaCtvc8+1_5jpZFc6PU<8VPGzn;hgZ2t zOgszk3BB4k{z?h)HqzJ91(KYoY0Q^l4X0^fbOpOshMmsL5jHYlHTZahq2~;7t$Xgd zo}&%1#q%I7a^1Gex_o&~evZ&;<;ak~-WG>_=q_%2n+=VyrdaBYew?|@$XPAwKEC1E zq_m`Dsit#`4f-&c?E1p^xGg&xg8R86?II$jg1&|Bn!t^$tcXJ1PqTs;lBXc`Puwf2 zJ0gK*sb*9Z=om)h9Vj%Bg(-?`=~Ybm*#+(GX8z$wroPTMy?Bzf6NbB%T)!2EAKo6+ z_b|6Ge`kC;29Mi)Iq4T9v#p@L-t?)DcDO(z8sCsMnh5qSPvU*h|7%To!TybJGYfdl zYOj+R@wLTkKA!|5l)ggxI&n2Fe|qRHyiE-6D@Gm|(+8nbjEx8|WcI1^vj#Lf!n1|s zcbB$UT`20UH?2I9sRDG(ZnDi}1Q#zGwna;OMEt=@`s(EJK6VWQ#2Tr8D(kc87->B` zHIeZA=LC!tQG*)f=i_`9lIxWGzCluU!OaGZs#)5e0FLw+Hx zA>2p*MjGR!wwK4jd;)+PxfvsB-vSw(Go1 zGb0OBs;ElDwgtLUF3i${m9@PQkScUj@OAH8i$S8A4Xn~zy4{mr}%n61QDpT(- z(c4D5#-$RYYi_9qLu7Bl3+qz2fo-!}0TAb1R&G#6$;x7mPO+%6|CT25&T`9FdDQkZ z-j(P>U=~L6>1xlLIfii#b~nvZIPnx)`U0}7ZEH1yhDeoRWvd>**8YD%OYQ+`-1N#) z2#GeX=w-U+Qe-S_*Mo#b_fyaZ0S0)!;jdIqd<|+_N@B2gXuqtOl6DTeuIuX>!G?C< zV|eP{+3H{JCZIz+!X-oWJObKJXIn9%GNmgq;3^qAyDI8A?}N(ZoY<(XP7^hp(}DIQ zS@|IDn#qFon6!f^a+*>Y;rd;!X47-5gsc=M9?|lXIx;A1%pr`hhd_O zW$9dmr)#$K7W%lB7Sg>SZJFugtL(qer}I9zDar!J?DUPLKZGNU%;vD|9vl2Eb-s;1 zdVPU%vfsu!T3fArYz!P~*k4fL#q7xijydn`knw$V1hx4=Uw`QJSGBuF;B08(LXRlQ z3%AYPfl(3#ejf_JAi1AHH}uV_#VY3jS9bhy->tWe1w~H&#qQ4iL)E?ret2*O98(9P zH1Vh`rI+9RK>Z#WW4rlf;Z-bW_$F||3YVSh%RHWM5T~{0dJ3V#DhJ11@(ET>%WaMo zWo)p_6nUpf`-gw%=7@rX^uh~)_Di_zL7{3?L3ZlUr1APSO@*wl{J`RJW|21@T0?Q zgSRno*HV26bbwp?%&H2_xq{!BY%|jl)?BxF4X?N|ZlwFOLSDQE>!r3IB)ETBmC@KY zDf6Yn3%qpU6jbV$(DKp(@_y4mFt(w<6v4H+en-Hjl;6@KvgtnbPQ^`zKx$)?iC^^Y)lkw(^h+P*O#UR zDLKN*A9}7^rU3Y#0l&IV@A|9!>+h+?ODRbV9>d&(Gn;Tu6`EzJ#%XjWJ*@C_u>aEo zg@+r&_7-UCH8sFd0zjH0b6Y0MW z6IXq8u|JF=pIi6Y%8CA;dC(ZV-nNPb=SSXWh{COY2_C689T}weV^7A4Umh8koBhot zC)xHt;w!F~(~S8$!}f6`W6J)C^K2S5h$t`1< z?mKecPbRq9XuMzZwU-p-9za?BsOOE(=WaO*hGSOs)@KL9X2~Q&d0zurmXHHelrQ%t zZZ4;J*B$+HAY<3Zg7g$#SgXw&iR)DdyG_gz6X(TIUdu088M24Pf*_@BrhD z`ht69^Kv8t^CujOH(=QL{GCPh_>`Fnjtg$k5}ERM{WRiI?-)M}9R?ujyV&isO!p!U zYutFI?hs1q(}(_K#q=-%_Q~4dPRH!wG{-k_>at-{bELF&#<$peC41G^5p)v%l%5C2 zk17LE*Q>x|Cb#HFS%M^zRshSVXSgFr!rMovGa*=_C>MLbJ^D)kpHyX&7n38bcl{7k zSkd)9h(2>MrPhYkBj zx^{ngHq5CrL7@FJWDN=%G`bmWsAgc3nZz?iF}Qh4tUw%F5}nPKZQ6ne=h+A@aiT)n z>NWHN=_1viCgcFuyA3i3kG2(Dfy6^#*l%RMHrZpfEUGaTWMeBsWM87mOEL7Tan$x( zheR&2^XDgrn)I{Mqko?BU*N&XCbdJf^JTC%YkeTSUqQAd z?7mi(+3L0rZ*Sbw)qzL3y0|!JL*C}#514<<&7S)FvR3nS#3yl*8_Z~r6|;k)M(E#N zI@@hFGv@5w^}f^wgvMv-|Vq!xfhwnh^h=`dB#J7RU`s`HU$6U z-Bw>_ltn9zi25(jj=H1_@ZrtwFyb@tVgKt4M(7v$XBS1KF(NAqSl@@+jUJp|3}f8m z8cR$J5M^AhS+C0Hq~z{v)LJiUyNduyLlwZk3rwqg$a?9*#fW_gc}gy;N37=RfDvDJ zN5+T>R)&O66($#y)7;DEr2+q|l1Pc}Cm>HEQsOB$64)P4Zw|BUC~U9SAl>UXofQD( zXo|$}QjYLJ_Uq2JQim2HE=L*|$*YJK8dM3@SLj`_)p2EL#JQt$5>n4+egh-A(Rg?F z%eAFC80jHm7VRuzEfqO3a>{pcX=-$)S7c>2e5CT=9}bfZC7Gw8uA8n!z6pk=mu}dM zd*8zy6jwH{AEg7#WWIc4a^Fkb(-3?(>~RLy=8R7j7}*dsGINQ5^;&S|SS@oEKEIEiH>vq5P;5b@lt7csejLbOq*q<+H>n?W}0z{5@x22SxF+m!m1gdg` z`;+V2fk3ji>K~@zlQi4{y%R2R`c4fNfDG+l`Om3a3L;NDII))5l|IMu?p`i`$HVu) ziaP5@OoD9ut|U5-E5mZ#Cn>U^s|m98TQ65%Ii>T~ykuz|j98XjUVz4x>PA(zzEiL4 zK~CjDGmdib7jSxTZOjN~=!&eek>6Q#IWW`rmiwA7o$hJUdhdQut8vWgoK1tzG;l_l zhYbdWmPpaWU2O&s#evKRXIXCJ|O6Nhq>CvaXD;`wP!1r67it0uswcV*I?k8(Qe zw%Kn_IO|=j6_+9PhO)(pxo@Qt7mQ~k98pboD?;ZGNhW^B@oCPjN9P8=&OQ=4M&PpW zNJztripyGBc52Oe+|J zP45J5UVHZ#-pi%+YrMLt@fI*LJW?U)~q>&gCV`Xe2Cb?)Wr zhFe9VCrzt!!0es7)v;{eJ*mcDbh@>Cc(g=|q19F zyG~pw=n({|xw(f?+Zx@&8?#|3Pi`pj!Z#l{)l1TdAhJ`?tsYIBS5*HQz#%?E&@dZ{ zx})WglRSgxqL>ZI`i>}-{5?+e#`33W2u~A~impp*z5FdmF5_>FE;SB8$wQ4Vtw8zy zA)po!P41UHs%r^`n(&r*Quhif|D{W4Iy47-?{K=&cr75VY+h`*f|yo=R+{cT0AnLw z#H_a>Y%VHs1#g&+zHzmVFqK$NzPKG+*+yk+xjc2r;+guVax0=NsB}d6(z=4`t&y67 zK<>j3??_XNwv47fznRAtr*}o|y)8|1)O6G~!lRlyhI(7l2E|qlz(@+qvRjLNUG1VO z?{HF!0^t*4=iRF9?X@ezB~`o1-qYL@@e-4f$dmqQ^y0+H$xRElSQBMtyd>N%R z5q&kDUMcLnO_qLL)pi0*A>38e^lO;h>)y{i#|t93GX8Nl48!!+bv*)hDK{J7Teetm z`mWyX`FIfoTexdt^}{C|0}o}c3wH%IQuI8~+RSKA0-GZzhrd3lD(r0?mf!TJbR-Rq z5&nI*(;s|d6;DhW<&soJvaI*p2BdqInQUQKB}6<1bQP&p#x(&7E-&|rqBcC!cR*?B zzD~eilY4t)o>x)YUy>{CNS+GAb;xjunQX}fB{pxr{aQ!buu_U4%;WLA)Otn8ct%#4dsb%S>u%?$%It8Xej5g)d=q_;@qgygi%ZoyWPa)~_P7o3D9MOl z!Aw6Z!0*w9;00duInCvhUf+gDp5u-1XepqJ|H*m*GQ?mW$6^lMwR(5ma<}=er7LRA zElz&EX{63wSeBR}Mc)P>_bM?h#}NMWq`fconTe#!l;TwavX6g8L$?-$(mA0p>iq z_vI;l8NirrrYN<>Khmm&M>qHR5~2^4id>I>qoP%u6tKlZPDPH`RU>*xA9tTQ6hb~Y zzu4H=>e*@msc=;X1XolO^LX($nFm8Uji##F$B8Qan8Djyf>?5e3AN0M0&|yHaJ%?G z0}OUkvg3#QZ1%TWLVK}{2)A9YL3a*ud(I29ojY&`3c_kRY8&9|BC@f2AN3B0e)BL! zg5FGcWb~2MNL&J#UAEoD@TY+D%FDc6<+S%6Jne;lk4O_H=PZeWnvI(d+28u$I*Ev& z0pq6+Ux%AO2hs*!dCM}K33ZE?Tm#M4)bD8oSijkA5XHX*n8;(ZZ|H9U7V}-2 zQoJop#Q2My530%75uYp7$vHxwa+=67lV>`_>Y&q}^=d1B%j4WMFyb?>!}_z~*g@2P ze|Xe$sNsZzu7#_pc0&oD0#m>`jE^$+Fe>u003W|WmaR0|T{zu3dt6v13K&kY`& zCSsP22dDmPyt6oJ7Nk(}skWjHK0g$1#lWwPHrk^DXA>_6Zh%vFvq;#g9epEz^zAv+ z5Ucs!nqvi>*+ZS1%(0L?*Y_<0B?&tenGVp&7f@hlM<@F?LEl%bAtK0~k=kpc6J*k7 zg)f(b=d2sV=2kKIdk9P+#xADZ2YBVN`luf*b*{(l9pUGYH-XrkkEZ4buOho8#pR;O zX$T1|^?w~dOd0yzzHE%OUl4QH?6ffKSa=xVehf_QF1L@j3gNE|!8?Ka1wd-$w4^fW zj0=rEi^7LHBM&~%pIoH0wLnu5vS(5Ww~d;3iShSiURcwW3K|otgGpEGxu9%bzxKDR zOk57hTd{Io!7e>pDp|xsyUKPJa*o~~%3Zw_HDs`X*7Q|0t z=1TZLC66D6Jrf&3l9_153A+(5(i4!Bn}{TkzytYk>dj5((8FJZ64^`-&TktxuG@+| z1$h@a@}%rw;McvlZQCIRHMrdkV&Vd@!lV1NMW}tIB?oCxbRhna&~xpO+f*s2Uw<;E z;?2UZ>x7FfQ|(X*^w||O5YJqw?eA6;V%>^$3&&mkKnA%lEcWORl9LJBI|9mS!iHlF z1)YNrx%C>3J48LTq$d!B9$kbaHC79cpP1X13!9hhmwkERIX`7?vr9ukFZBF;#_b}M zgFLI95cY%t|FNP+TwC*z-o8GX{C3nHjU7;#rsQ@LBTzwd;9rOGS~+eKZVRYQ<~&>T zQO$6P<+`Tr*Iwpd4)o39xdet)26{)PKgRX|y}t1E2f`E{JZK&}Y=apkrsFavxt!*u z|5e4u9pA&efiMsni7Evxf-_wHPV-iI!s$orwLJH2p}@99l3FeFiggPDj;yHtBLAaN z-EwyEVE-0BqyT%BllB~bhaTiD?XBsL%Pl(O@-5@(fF7$Px8IB#B|Ec;eqnFr^0_{c&F+40?$ zWvT}7b$$)Izj^V%HM&Vl-wJxGze} z=_;$ymErpWR|XX12%VG*3#`+HaqLodg!u^z)a!tvY+V=s`XL%Z+7+c`1fEdvEGqg71@l#<$+Y+hRz3^sGr4PKQ5RUADSmhKWCH(amLgmWi6n`C1z3vV`W6}|my`&R&h^Ogo6 zPgaZAVUI#_?^ z+o+#2&%8!?o%6mzh~0^fgR~J^^F5!I-Fpgqd1DCX_^TY@(Ld2X9@W_->Qpz3uZ^$S9yjmFjHBvtUwqf(acuYjB{`6 zf3ytp{iCL1lu_j91WEx;A0_p8)*g8&AXsqjW63)_l`FW){93P}OPKTaECdl03xITA z%V5KtqYbd-y87|@J)lH+Igk~q@xk{Ct<{cymH7pFV_ooOm&qm*dx&*&qdm%IH-{={ zl_%y!qHPbDfKY1lFQoU`Fnc%K-V-m!^dZbByU6jVd}!9nCOf~4tR7EI8ylI(p;gG) zZE32I%asXS>P(FLWYhfgu}Ua*xY=hC9^5uA?CQrC`Ka+%ky@)2mpAETN9*50FH zZ0xj%S5`F1rKs)t5zn!yzZF$^eLE^>&S{8(!aQvKDm*wR(*uUyZT$yw@BEaJuNV0) z=-0j>-u8=gO5uN41UYY4o>0nJ?hih{&ONziPv&D#)_|dm+xDmha0(ZpYTR?5+}32x z7<$#T(CH_zGfHXpgi!-YW!nrSDHpnP9|Wx9l~GSwuY?!Qd@-dh!~qT#TM~i?HLv;A zzX4I_a`c&9t?&;hHQoRy_?SzIGRBka?mi<|l$K7ko3II9qP>8w#JmPY7S_J#f;1%n1B=6|nl%==W-esg?`Q}E{fewxjR6U=F z!QS~4@idlN60|UTKC44Y=Dsr4>32--a=}IB5C|!$iTU@(9Kn2Vuy0`J8!mmuc zT_Y}snqSqI)4v*gpJ1oCsrm?h}o>h3$^4B(VuEV+1d{(il8#22@KtukTB;X0vV z>edF%7N6@ioCQ>VpIbw$WVA?LqYhq-amIno8j<2*Rrza>i8EorJ9R?6)r*t8C0BuG zC{C?_1Eoou0NZ!?K6P<&_H`}fHIrZ#v*ivC21@#0eo5v5lUU%v-2)0;NWKUtrUR6A zZ`x$9pRpl7^AT@EznF2lnhsVX7eZR0oE-iTm*eN1^j`jsJJ;GTY%c<2gx|qYx^H^3 zlY_VG4&cs<)z2m_S(0F!O><7>*{)#?4)gD`j7?&Oik|&C@(7GMF+~LJ+)zj;S6w&1 zZizGF0C4Dn+0CB2E^`1DvDX>4yJjpUhbD_|MJAj3ZTQIoM3AP`j&Ml3M*RgT+uzG4 zI}j|1I-_UuGg7*X?tr!Jw7xa0uc7T{Z$>7w)RkYWg5vkUnGpF_&WS=g1qSR44Om>q zJRh2-W9oMjZ_H^Hv=^Hf%Mm%jlYPD=;nj>M0>{?? z%%nw!>-Ah=qX~WFs_cI_*0WmXfT%G10t=|3HcU=)7l2*EWYguCE*18Od2eW57^Nz*-ZyQv|caY9@W(CgYK-j z*TUd;OC#=xpA&;fcXN>b+{iZu7Ph%}`M(1%U3my~>9ufJeHX`=!fpixQS7EqQODpQ zCd?d73a{HC62MLwSADQSo5VAChNxZY=K!{c`7-akMEf4C#-CWk4NHzT3vGcFvrbpR zg1N(Ho%I@$IWwQgK=4-?J=-R)bQy8~!L7R_!{7v9MY>8jGi^P5T|R$rGu(J%hfVgi zK=PsTgyQaaH@_EO_1~Cd#@WblWPV7-mU|0Cg8L#1ZCk)82RP!a8PFE~wRv&jgMHJak}cIb5IdQ^lj= zxtBlYMdL%0Ea*qNn9sdjtGSxCJq%xvS(K6%s%lg-IP1Fxywr79_46B+MwuGc9-?~zcQ0~&FYfi%>M}NUAcGN1cM$UdCow< zKms!(`uf30C5>Q33GIDjk5*hQ*iU*d$Iw|#z9kAd5>R~>hGzEs9467*UH&Nix$8j3ku=W>tYt7R;(ThhU-w|+mtQGJRinzbM} zwl@*i+u3ppT_3JPiCpTN+Pn{K?ZI)|)zQa)JqT63D1{ZA#9?bls=>qh|LCC8dj>WS z>fp2m!(#0aZ&s1|z^~)6w*E@desNE7QAkj$CJIqbNV?plgRXY9YbbCyXi`ktBn7En zw;ftMf~0hKGRsW-*q2S(BDb>4XIr%OwvZELkE!jIq~offo~!ajezfqIZZG8|3+G_q zSJc{NCGOwdf-1)cfINp^JcR412@&YsOspYVgh>n7gSo!P!M3o=LkU~SsQCj!+XMTG z^Rz;|Qxa2y2z%x7beOn}F#QCrt0Lw5@0wVo^s}6oS)}@42f;vlJi(?B1WCEy%qy&G z8L$6x=hsj#v%dQM7PdWZcV4XZ@FeO(+pdV~4D8&@?^~-@A$9xO7*+aSL)-hg<~awP zlAZ*FppTn|3v`Oh6tdi1CvJTECA2O`xU8r>fJ2u7)y%6N06Q(eudw>OJQ4|=JQ)f_ z4`muyMBU$kwLuJbQQ8=H_LJ`Mz0f)dtL@4e`-Wg#409lu)Zer=2%mc4JLXl;479Q{z4#mGzV3Kv-i$Q0rYOkjRY0HzCv8tU_btAy0qpF#8+oI9t9q={OKl-k z463zAJ!1`a+__F%m&(=J!XZCCR#=!LtX*B#|C!dy1ErvS)LnxQZ|&D>jtUNFC=hif z+Cff9Zab;OWucyH)%Ne1mz=w{_|?h~f%DivPvTSe=;hdk5ahhQBlyN7#fE^c=axy+1B6#woowzOt9ln3S!e>O1P%u6Q0Y#`A`rX z710ZQIF?8AE4;^ds-P7U3R_oO7NT*UAVifKSOjqDhKB@+g{^S|fhVu!Aa_COvF1C) z26p=w`WH0VLF<@#G5AmkK0S#MS34h)R4zqVnB7mdAz(4B8Jk%@{$9J&1R2}KO4-v*zvG} z<{+SS(Xja&7SRLMKA&8~<=tqosI)*NCx#Nc1_>VJG=el1EdI+JHl|d5HQ|P^ISvwmF&_epop@$#<{@Y=nO8yL2PVv%*Q}(i( za-PB&u2=JOXygZG!|`z#egmX9qmDPi1!H(2=v)@)R5bo7kdXsJXp9C$VEIQZFb}?c#KN5R zva4O6p$=Qp z5;MrW5l2c_HN7asN3HRl$uQhZo8K&wh>V*e--FT}Mmv&Ekw>V^2_QVz2b6~e3D3Mk z23J)s6GdMo*dtKVbT+EP)2)W6>~j(?!6&Gq`NPuTI3McCXE{iU>K^$Zeum&kT&>y( z&W5-IThaZih@wNh_%$61_->xnek9@k8{rKoBo0Y{#QTsMpur-2z>Us$ZPOzt4 z=1ZqSA+8qa(KD7TJhtmbs_bU8?XWE2DJLGYpYCU`&%FI&fw@mUmssHY%rueMf#?XP zpi>1Ht0s6*MhqZD9*k#++Ba`I>OK^#aVg73u@FZhcd7vWjMT<_rD6Nt)}Y z{LKmmZHHtDeRNnd$57}Fh4raPcax4Mz{)={8hsO`>ltDEVbM$Ar*04JM~MiB5MCoo*Qmn#NA|9sIxSJ2>4Nc)B<6 zbQ9?5CeYK}zNfo=caH8C0L|>D)2r$9YC64|POqlZtLgM=I=zygf}6g2WqLh&dOdo2 zJ$iaQdU`#2dOiC8hxO=gd-)9`(l0?pCPiG8nF7|4Wf*#YpiQbRp^37mkELX#GkOL? zhJC`D|2tA_UYUZx`j33RS1Oy`D@MKP4s~{l69>J*o<#atzN#Oxhj~?h%`OLD~+SS9b9GL&C)p z{3F{ll~wc~K5id7^C0`t!}C~91>;PNOIE#08iL(X@q+cqQ|W;fva3KHF)mcZJO25pVwC-~yzuyrPl-OG#|u zWztJNK zQGTtWIjGS+&ZddN4p(&ZJA54bImIv!Za!0Q{LCTfL3!*jb`B?xT`bNR`kV{?5h*|1 zTwhcp4p}R{0?B=H1Es7zpuNo197CR+d=k$W!=&dl&pPdCSe|f5aTF*>MWPumayzSq zG%aW{+>|(WoGzHan?J%32?}e}dct1r36E`JCR_;p3v}94@@72d($La-HB*U|SLMgl zl(CXNEcWoMPgO{GxVNkIl$D2Pkfq`v<}oTbfmxHial2{Sj>e_97uK(RW*vAowo{&_ z3%ZKxvnkw2c<~M7{l45pa%BF35QcYyLwDsO)C%1LKwOH_2=gjMCVEL(*Z z4Sar#4&*2C=G*Eh_Q-oD-W6)90NKJ=nM!xYrZP4YJn?m8*CzHaCKz!h>Bpv@KjlIv ze9!lD1?|mW6G7L&DR~^`4mIs}+%kb+%d1HQad(AbDtpkuvpdH*^9P)*!VxN8`SnuJ z%=fMd7k-gXU0U5|Us~yuTDqg0mNr34&4LD9@xwr}c8cTSN=--@P=|>0mnD)Rk}2Y| zk4m@W*xYG=x%2D}e|Slz_Tk)q|G_Qw#F83i=+ytwRH-jb&zZ*f-_Y!G{**}r$E{m* z6#GrjcfrWI%E})&LD%!)e-Or$6Qc_+r4_^pKS*)JGg$zEEB3-6A7jYrsDfa zlWIWSbpI_#qVFA&2{;x$u9%>IaY1ouk1KjE(d>^g*1%D+E1K|vIHVy*(CVXNnkb*N z+HD#n{>a}k!mU%>~Y%*jmB$#dDJ~Wddy>UKzj*Z zm5ARy^3%G@p1(pD5-A;JJ?7ddyBm11BcDQ?(Uog2FwmJd9WHzq5I(L*_K%*$!r z(TXESB?If>7Pns;-X04`i48!D3~_`dco^PFFxLoHc6-v!0ja+)0s2J8bb)38kVEJ0A0UV7601MG+!>U zT^fER?^QRD+!`2 zEy2)X5GB*PdQ&PIYdxF*Lfx2mAfE2|PRD}(lpxN|ADG*1I!474Q1NaMU8i{=Er)+=b|~?c zQ~Dikie_H-Z68UT(s+z1de}YY!PmY;mM+IvlWaB@^u}+wtx*#al8R=EN3Qq9<2Y*# z*l{}vBowtTcjxe|AeHfHb8J{{#Cwta1nINB!8iMv{$Tgt0^90bRlHPKWU~P z_p!M}oSB6g8&EDZAn!a6j@PpS1AWA)qMCCuCxcyI^VA;I4C%ibx)2WaHdA`QTndhZ z{cmQ&s7<2EEwBesb=+Coa&wRfUvqrpk~l9{aOT%ZAdRmJoLe`ahZyq!-oOJaa0ZuH zbnkMaGkQ#%J1Xd@Qa=4vNDOLli<@DVg3 z*x7%i)ubqWDX9}6G_>Ad;sL~wM}U|XVR5mIP2 z^jX-*9}IJPPn^*xm&41ZrB?q%4m6;ZYrkowk-POI6Q+a9v!p7Z3*NSf>JU10kmLCJ zj8~KDOXo2m?3WASDKDNStU{kn_!5%OIolN#L#$onv^q;yE&xAb+g%|z#XSWAGGt2v zCD!fDV(2Kh13IO#19T9nPf{Qg=j`W`Y=pzg5%%<=BB_S@nKY`ElxVkXk^%O=f4>T}-6Z)-S@t%ibeg-v)8yi~Y;?1(uyp_z4D zubdYCUR+cI{{=z5iEZC=7VTM2kURY9$J|IxX45&Um_6l07=VeONSBheOLBGO{YA2T zL8CzK)%?PVoP$^*es&`tcX=M2&!2BQem&z-fB~*lf}XjAz#$V%qU%13)>TLX7@xv* zj-&yMDPF#UHnkEMP!R;myLfmxP03(X?hP%aRPOow*As~w+M~=hmiQtz9u7jGJ->NM ztt(Cl+uxPmM0u0a0ft za)P7Dpeup&}ex$YJs|+P?xi)9H$LWH*A0Aq$;X!lelETS7 z)$8y0Vf^}rtFVPN#;=BFm_Akz_k!YEwa%pn%_N9TmXezExd2lF&?m(|>|5jL$iCnKDklZamQH< zInE>xj=^F)yEC5X`qG*c!&(=DJr=6aXy?!d@!dLy=E~r`4a<+_Pp;0ud%+bb>=QIi z56|=TQSbE%@?IN_-KB%iyoMa+O=SOlkE=cH^p~JWwst*vjQa*i!Is{~t6IJg1^>gu zGlSJptD&e-pA9s@07SkrFDbZG>lkx#$%eN#Ek~G0K}SFl^nfCQwuLu6iXO>^7yI=T z0*Cue-|h)F>w5m~zwNC+)q5OI@s0pdC-;(asryTOQK-8o^|ZDAFG#+cp<4?_XuB zPWDMl+Q-8-Xn|axbzH}xDtNbQAqm`5YC9+`Ns&VbIPrOoa7_m1X96;MO6%GItZTGl zbz=yihM$c+F`bbH1b`?%jNZ21?Hws7zgWft6#%PlR>{D>>C!zscX7mKCkFD^$FxWJ zwQ3ND-DHS1OeyU>xj8}tc%rQ<`lq@h)>A3k@VSxxA*&As z09tnw6lQG&1NY2memeDmZ4nTGWdnIUKqzWhpBh|j9AQa!kpE)Z6%zJ6_{@A^plKSd z6MLpClBHfBJxYE9a4f@Gsyz?ag6XXL&U<2BfCn%murQ1Bo}-!cF9Pi8vl%1q=n#uA z5L}O86veFbsYqJ+@>@Xl%*W*oNS}WPYG*r)Qi*3LP}OopC1iXViJfwSKg+LE#yv0u zx#uU@V&M_6gEgp#09}OK;zL{91~A_Qn!)>9TBBL(!m!6`#w5NnH!#G-Ti8v-sT)8@rrQx&VjSZ_mt5eO^ftyYvwlUhkRk2V_v ziKdR3aRD&nO`k`0nG$FngMlNg5|l!Z>xy{I&;J{bPsStSXyL#;Pv=*Jd02mzXvp|m zKB7eb8n9k@1=0?6C48&~n+UE}Ra&i&C=+(Z13ep7Xs{Q!TJVKF3|!ebKizq9^`Lk# z!?6cMrEzIK1vf-L_MwePcA$S^Sv4#_y;4y(>%K{&PRU<8H^>cN(^By%{DSqUYvuzp zEoSWiY2TDy!T`e6;6gPBSH~;N#`J@Mg{vnq7%5#7L{OXHCFsD%294kJBo}D=Ft{Hr z?g$6)(I0+%gz6bjEhzAN;cGWN^`njN9&$=Cf8 z)W}HK7%zSXpDpOef&eLQllKl&N&ua)yY0tvX(R}-pJoGuv{eyPi$O;=_FHk#RfM2r z%BZ^NTb^`Sp_uI~*~gOuq_Dva7z*}ZiV2b+`m5m|n#LQ}pzq^n_->OJBsh8k=Mkq6 z;!)7HC+8w*8+dw(D82|v5f`*K15dC_aUJW&I(aJew~?n*`WXI~!1(C|FMAVwB>!J( zX$)+LpwJIqUXD=wPhdn|^II4w!+o!m_|r#FQlW_dbFp^Gy-{k_PzZfwLA3i;W0D!gfQI#j={y)KpPOvgB3#E<-w^{i;tL+Kh+3rS%GvmvK`{Q%?CD3v{Xlfl?9=Zq!whjS{kf4EA2bhhV$xf6Y2x#S!LyD%EO){BO)~Ufo7^ zgHzW4Vw=3mUm3`E_C`tpK zWn7yBXdW!KiL8vT z0Jn;W;AFT3)m+OMA>S7y?~A_JQ%L*(4X)M;?XC zQ%@P{6Sxe1Ln;SlM6F${{-%y#aEmti&sen+_{dgQ@k2Q8M$0< zDNgQq<+*`U9e@i{+vD#J^L96`WJ z0D8O>rSu;k>7a01kTqK>8Zi>YFRJ~gi+S-B&lD1Z@ zm7zsJX4>Mo6_HjdvV&DbK?oQKGYQrztrTgcg0fNvP%E+_0YZYJMvEj2B|r#a2qBOG zBoH9$Iafj~TJV2=o;S~nM_)-G*SXGbkMH@NI)@XAJMH+#V{jh`R*`iFCC{S{uI#^e~k9Hrlr14%Fp-_uO7^Lf?Le4op&akr+63>Y_5j`0ZX>EaDR%{niJ)J_v-N z@tEvR*D=B35hz$#TWhe z9k~2gY1didjp?Q)h3fZEW>>n@2*;ajEab6NCY-@-rgl25Ppam0T&Yke8K3@37YIvei=+4b z6aJZ@>&PKJdDjhX92z*}#@J4_W*AVi-4djrH|rxjivlU24RqGJ7#xqJG1yFqp;HiA_LRkJi=UIxT`qo`=h zN^0zoUUP`fYj(7md8%XDo0tp)f<7zdQxoau2}f0JAvaj3?#&VO%<$Y@T!AAgqzCfn z8p(r5*R0HszL?!I7#Yv1iv@wh0+RQ4tqdbiZ@5*)U;ZxWE5>ht6i%VtaT|k{zSoz6Ge`MsTKhOYd2PF7vH!Rj|xG^yYojBEdmpi z=qNEJ^R1NC{s%N~V?Q&Io=5N%;q^nyZ02m-CPbAI$!-EFP%}p)JQd)EyR5=i zF3enZCE=nfEGAtcPHw8vC)6~urluEN@dB<=*AB*_UhLnO3g~_}#4iz8z*wjr1wK!T ziXNI|ZMLwHn%e4|(QXq3ZL<@oB*UsW4$g5b#=VB@(ptXHBuOr(TO)J?pb`ak-&MuI z+a1^t(y21(8hqw~S(*nG7r-xyze}ulBC>ziH8}iRsPx^gjS1Q%qo5_*dLy?mDo5So zWpyC{t`@P#!yNFX6qNEI+HSwS1XB=^%CxG46!lo^TJc9p`7cMTW)G8%Yi5>acnH=uxDLBMV@CFENtM8cT`pPTRYMi z>(n?v@D6bkc`OAs%OOMJOs&sB`kE7bJqsmVL^IF54t3MSIPA8e8 z5;rzxo-?&pZDtd&)%a$`(j6c{&$uDqaZ`F4P?Bv!)*I~H9e>-hivj`@!-N4~qD?_5 z4D!4O%Pyq;3Jj1(86za!C6rvxM6ugiEVmp~OHkd~83nQb$L73xII53TYdc3@%$qH? zsDf3DFU0-U+fk|#QtlwQV4LAI+7A0fyLSY%_jKvWi;aVw?p8%-S<6BXEUY|N1Gsxj zCCh&Svy6c&3k$?4as`1;@hZr2WuN;;eCx37j=wwWMxn$_g7{4Esy4`z7sva5?PdZI zh#JTcD;!DKp2>wB|Aksbi=5*mx>cWVk(P7DP-E=7Qq>x|rTHeJhF#PwpwBVFJ&qn2 zWiy7$$~q&~8vI%|fR|WfiuzU)&j}b~SXe03WL&^7TnXTASnG%tS~ZJT{5q>HDFP&I z(e-Z=5#2u$?co2AHbLg!F%8eWvp%rr3oRv6AWELAABm=i^c||M?Qw(=H-X%KiGLN4 z!3NNXfTDn>1%01>3XF~WlTvg&B}x_r@8_;11#5I9st;IUw9^fxGMBZJXt#OpdSRjl zdWthWajI(3suvz+0;md0inbrAERBPAE$cbHus^#1`Ln~$6~m*vBvi~&+$;x|0S=CF zTR_-0gb4)Ug4XVb!G)0>9o9BFZeZlD#!XW|?XOaib)0poE##!wmZV?j0swjon1T<> z`0=@vC_B#ha^qRvRjYY-rRh(Fs99isX0EW1ZU=B(V##sN^e>IH<&#PkS9P%YP>Nn68#2q62vHoRO zKucULmP(UiuvngyNf?OYS=GxHca<-!g%%BTOUZ;Y@$HLC!VntQ5y~7)L8Lf+rRLmQ z#2RDp0z9aS3IZW%uX}p7*$y41`>euKR|0vk=5?awliVpBjA*g&t{O_k`>~3)5Y9u| zTO_PTNUVpM$TfHaMIceOoy6V+;#F-ZN75&j^H1GfeFc<X7so z_7#3CR~o+j>2j6jMi? z!{2H52Z#0-Ap88vS?_(ssQ(C;g&`JpjCgIH6+VI`GNf`3XkjG8By}@}AJJ?!lZWoTM+U=Enz>#SCF&AUOE*g>#4jFH~LY zDh{%u`qfWzdnmA|g^fzvFnZwnW2ta-0wHtdD8;?bM67grStb$g+$&((R^{Zgrbih9 zM0b9Ftq-149Wpg_#@kI}%GUuyFkNtZs^2A^l{CkJg#m7={!~5Wo<+qkrE94!#enyU zZ7d%mgW$)o2ZGEj5J!7qg_soQ24uA_Gra*u?}Z`GSE#(}5{PqZE(h8lGV$6r~^qFA#0JJ1-=SiLG>ry})=&Q?j* zK!Mo8YnfSzC=s$E5Lq9r=>oOv^HMlzg+{1HDyRDy{hVO|2)j6wuda95)IrDMMKVMJ z>m8azEGZk>ev{?!mUJ0}C!gPkco0(9gKVO(xE&R*>=tzImKu?kXja@j35gnm6{+Uu z?K$~4#LtxSn4wAFN!}6ybe_g9*FZ!qiTm&gf%$7F6NF=*F1&16Ba5M{sN|y9RwQcO zjK)|LJT0PbQx(K08pv~vAGpvl#;PW98|@)uQy4*;S>}X*yqF?ANqI8Zc)Mh1IeFnt zlHPXqiB(E$C`EOD&93xq|N3qkh?sjrihiE!MT+_Hi-5n$($Z2^0e;)8hhUI~I#lvd^@TEfQ>?+BQ~udA>~MJWkly3|?tXg%@6y8O7~8vo)pl-Hf!RBG@;tt z9ge7-Qf4YTRCg>GzI8snXTMj^-DF#|Ev?%EG*N$SHpWd zh<5cMpjrxL50xO6rDhpnfJumEjm(Ml>b%zKHB46q>N3I*TEX!HwVx}Epj5J(oN@T1 zm7dVBZq>p|v9AXAPLBZF&4&9Qn%!Ekm`0#cuNYxkb!+DCtNZJ;95efR>CUauUrF1Q(xFOJ^4tZ3tXqlpD9o5*QK*wvO7K8R1hx2~ zN|5=C2DJ!8t&0DM;B`wDUQ{-zsp^U@+s03=>eBZ&n`Ps3wS=aJ)$8HOZ->eZ=4eD% zgI>)ko9Fv5iBn402x#4F@>#zI`j>8r1bDTJmDraxm>+@oLAG=Y1Q?p%OZN!Xx!z^` zkXnND{Xd*t`lyUKCgP;ApZ!ocXT#Q_EsXE~cC5Cjg9iJk>v~vbsb$j>AgtXrd4iEC z%A)=27gYNmRiwK7wKzUmW9VUN&{0KT=vPA(OL-0P2$atLz@qrhky?<~IT5j+rSJCY zxEgmA#!T^8tYgYyCMX) zPr8nTf|)IB-;LE7V9#a=4;>Frc(7S*6|QtZR`v-ArHTt*a05_OI=$Bwb7)* z>R4|}x;pJdR+!a{ob#DWRZw03{N!U`AYHT#7ug-4reBDPWcYVCmQHVKOm4>NkbYQD za1-2^G7J|SPXwzu&#nd)45-JvC#4qb4J3i=$UhlOU9Bzu?-VG$E>oC5(rT@XECOykD?sJ8rN+1Qb_BeeCSB2!u`oqX6IkYB_7hOLi-LQU zY7&{vGEi|s7MiKOWY;8nP7c~rxE5+BRED)YGH1I-!-18ajihA-K#8-Y`s~R=_C()? z!N@Qw?D)dF{iYLVt2`UlN{M9kRGtaYNGs_&5`R)T9mWBX(3pU;b}l>FIB)ZuZOy8b zb)bgT_M$Le2DCU_fQe|hp49MrzewZu&U#Qn~Oe34ro+#&y6=mfSnxN!CI-Dugs=M8SMsJkIL zNweHsk(?e%m{F%e%Gx;zVnU*@c(dWRUhTquu)7xppc1eIxO;%J-ro3I6Hvy1{(VFD<96P;I($xA2(Qmf{L?h5&Z+o1HDsj}m3E^2FZbo|y9$ znwaZ~S3hcH8y1k(V4bFon6OfI`bfa(Oo%O3#qVgv1P>I#zO(k7!J^F_km@~HSoO|> zZp1!~WVn^_3zmY_UTk9zEAe!AK#;5lb0+ddOm!Pjm9mQ)QIpuCgca;vFo>%w7UcIM zmRpa+5#x+FR>k`lTBOFMlH5`!d>8ypymkX9uz{#hyVmPs&@jZq+90&n{E3YJm4LvH zX1&1n271u10f8RBXqxUYTsbGr+0=~%ly_;`i#!SRfqVUGUCRzx1^YG#xzH}Yd(AG? z)_-;AW$@fgjUB$_iE%$`YFGdLb4{sn^hSN5&#|kW8`!%+gLPc%vumG~T6W#2GRQ_c zM93moz1YPbw-$D4M}YqOXo_P`P3>-fm6m;E>$s*N{fJ){kY+HWx^@gazVD^SXI?eP zwnjJrh#lC4&%(Rd0)oRrO}rJ9mi_Fb272+T*^bvSJ$?4zHJ?*ge+N6fqty(e7v_B2 z7l8ii;#b#C|F2&Bv+c+n;G}N9D66?Q(8Kl=QikLjWz(&@v#{M<1;qT3CMVtBSX#E` z*c_=pC|;7$2w=#eh92N#ghrR4H@1UHDeh*uEW5X)Iz4R*2W87afBCsaf%A@cc&-2@ zKj}A3OYX~)#K&nq;M3La;HGpd1n94%n)3b>37Tb{pv7uqHp8M@qoi zSo~+J0WRbv!(x3Rlkv?Ra_rC~h#P40diT6=V z(GRQtT9QPEr7Uc8my)42Tc$qT@gZ@Asrv$wQlT`s3&Cpqr(a_2BT#5@auFV?zSA?g zNC*wwm_LiIONioJRDIqBTE@kW|Lf~-?#}nzl$o6|noNfw7FN!mLLB1}%G+TzlcGLg zTW4!_|28cG!&8-z`#3b$eURR(IXoucwjIz20S-XV-#38$6oOc*`j+Gg#e`Fp3yRQH zY}Im0VEBvu=K2ono>AMJ?7T`mXx7&`EG$Pq#Z&Gbd#AU;}v#XWlxeXHKJtYCi( zU`#J@qD`o9B0fHzXMiyPh>nF*&odAoKItlUB>+EUa7V3X39M()V_l2C=u(e60avxD zebrVqzNz3vLBZS1uKsV3hoM`4uSC#@D-wY3O$NIDYFqPSk;r`DxkhZm2k%GdlHa^$?ct$(O4QgQW%?lcfk2DapvtjjyVBRLdS=N%CJqvRL0cANy!x|_!o)rkm z8#M7lonUU{ui_I2PCt1Hsw|cNL_abR{dnAJ;|!C5W%Y&O77k6rhS97gIY$9#{48r} z+aI$`pGzv$$=Xw`5T3079GKO#1CW5NTWVb_qgueXA`Jc>p$ieMhC=$nT~Rb-!G=r`7YA7Al>X(!c8>gVK{_ z^Y5S?)v)C1tq{yuh|b7MYgi#@;+F3qT*F)b-z;pQnlDqHRY65Q?7W+p&4WI*tnjVQ z9-Tb%?1dEpNv+3KfE@A5_}h`>0z1EO%q}UMxI_0P;tfF>WiXE{k?2HQ#3_?%r!ZDs zwbn0V+e$499?L3KiN^spq%L}4Ndo=u_$i#+u%`_RutWkt26cJhB~j`T`trQ9t!qGL z`)qDn?(v(#b&S02GFvuB4w!3|5&}>(_P8w~fQVmK(PMnZf#JYb~H3=y$t+pV_!K zb!HRA1?IOfBf9c6MMP{-GZPe=$ng0Wah9Fhns=?y94u0yT?7XfY3speB$s-ggaD)= zi@#a8f=Ai|ab&diAm!QWQ0T}J0HzTE`dEu5_K(4^K*lGxZ9O@Y{KIO_@N(jd!V3{3 z4omck`eROhULysN;?dFt0>&cD zaHrmZ&{8>CqYKKR=Ra%*ZMOYx00HYU5{%4QWYZI!tJHDJ~UA#$z@TJl}6hKJtBmTSUr($vERR? zEn#3&+Lxg3_Gw}55Ffmil{T@0%G#!E**189xaB79ozRsDK?~}Cu>m0^X+5V#k;q_g zkgq;}3ei|Rly&hL{j_aYmO5L6g+c)9S$JXH_;PH2HY&!EQ(>4bTQcDkhDexrf%GW? zMy;A~_Ug&6H3IS)+)dxfj_G!QM-#GXJ>02gwXM$bt*T!}TNe85d;)VmEgL?a#tm;l zSJX~kM}NO{ZRlaGg2e#^ySLVlhHm{1iZXOx!$glH00h2O#Hki|J6BvI@@z6sHdl?b zg#RpDSsXhbjbkt!(P*7_Yr)DL{_Ye0Ap#Nc6UMT@wAGbndW)Tf*@3WW|{{7X3>n%W^s zB=Qs`D~p&pWmA1Vq*^hATSR}gt04`oObB9%1lb_2< zVNbS7`_B?epgwi9D#3dmSL2c6Z19y8%g#5}(LSPPHMMd2TNMKLi_j>{O>2o9L5nes zkIirscbxnlK#|QC4#k4Ep6;0D0Jxk!0TsPSdX%Uby)#YKWlq$x*kWQ(eYU2F(u0}P zoib&7z=>sAH~^&A1SbO8D z@FKEFcZwipuQOd$4m`PQPuqMZB=7pvR^K+)yb`HWqH0U!Umh z`N=ZBga3B*9yxo{vt2_>s@XVp5+l(m7T41MA2?@!CC?^VxH&9S%LE)?f&m}oC^ty! zia-k6vS0vH=e56zFF&g269ZibC>`NqvTrwWhpH)`F{W4=ssW?E;vF)~>A;%3(I(y&_NRLpF-PSv}Rti=7)@oIq zi`MGNN`ch_03Xfoax31E8&!ztSO3oV6fHH zw%&L41j)m4Y#OTHOa+|kyMxgr!b_&Gb9SHNa1vmM+XMs9uenjUX-Ygg9zC_ zEgO`r8Wt|j25;q*io*aPndwJe?#m?*kR1onzwZhpdCzA9J^wBhqh}sGrv(g!)aG-_ z-Y!HPYB~DzMWZn26r%dfhZ2&9Q_|0`+#*^0AKXYI@#FJ7!7FR}2rosN9y!}h?KroS z!JEWs8Jz+#8dS5uzT#h_YH8Vqzd>J{Zv!QK^8QTUcyfa5MXBTD|3oIBY(hPPqj$to z+?6{fT=j8|mza|hz#Zri_8(o+1!kve>Uf8Nby!ly{{@J}YcScm4RkbSYIN(44RsFl zaUDE3pkr-c|65&P=7Q$I;H<*=C6=7;f%#iF7;d{)Dz*o3Ow^73MP0Y&^WYv!J%4I+ zA`*v|AJcM=0^mLdPvVpQ&sRPy0=@R&=GBkpGhehX9?7ksxX##U?kRx(?VY#Vfz01n z2L=-UT2R~6VpBa#8a@(t3i|sOH@#3eBBXF)GazQuuTgqaJ7jJV2Y|>&3+AW7)kG9} zY0!&|sS5;6SEddAPbp(f*0S(ZT_N|lCOwFGg>CuifXu|usGm}nd0N^^MarK|`DMy~d%3JS`p9PLM<)RlQSO;3{z@BKv4GF{!4vZktnr$&F*J1~ql__h0K+(z z6OJaN&m$l1J)=z_)*Yp=z>ZU9Hah9rOfruAzZlTVF|sNab_OSB?n~zNWM-Xtd%h*^ zTRRXMA@uo+hu8j34=n6VfT-cA~1o!P9dPH>j| zFS`kS$^u7d@D9rQ!DP%1+}W}vfjwTD91M&N*A&RZGG|a$-68Pm#yjSSeA<9f))^bE z#)+0T&|xq`b&VF*WB>BG)E>uE-8h^Nt{d+wwnpU3loCNBs-O0D)9mpl*wY40t5R6s zKQ0cf<;c4%LZl6il-ku-wBS@_AqY=lVQTCx3`Sr1@<|HeGaBCD4-S?$Nti(;__erBwY0wY|P}PJD56r^xM~d-7lZwTXdz3{p;UzZgd~hCzQnlJ6W7a$? z6acgV>shRJQLwCyFCQQKX4vprYLw#o*qG5Z*@J#R>W}fmQ;5!6BQ%aIBDg2D!!Fh zCm0nEQjcuY5g2UCftSx8!4hUOE13EQDS#;ipUir9RYyp9Id~RGyKOz&7Qy_pUOx2- zgH605Qs9$WO;DDxPMieKvh9tJEG^K1)$Mp$h5++4whp}NY(o{M#eRWf5X~)MYJcRt z>EUCZ;345JpT5>y1gd$}**+t<=|TfZnPG(9$c04XNAa`A&|QiBVD9Ri^K5`dntCjF z)p1P+6nvtoU`hz=-OdmP001F106gU3&o3X7)=a>kD|z4(jg=Wf)Fh`t8~_Q=#s*s$ z?3Y(W`VE5tQ)a6mZy5YWgEc5DU~JxK@Ea5T#zd>I&UgjP;Ki?CF@P85}N4vrd0W+7X79c zJv&Gh#LRD+4R5+h|G)1hP4E2=O#LqmvCXx)1p046u5BUwztBL!%GJO{-lSKhgZQ4%=kEi?$g0A#Iq1`v{t57;@pjPR(xOO0HHC5Yej z?KA+EH$~w$Md3G{clF)#Z#wS~p7RZ~;tjOo|C?~uBNH4^0>=bYK7Wk>+5izOD(w#(K1rE@W+!||(I3iGL}+pC|^mULZz1$h*#Iih`Z>Le1(9jnm54eK(cO`>kkOr&z!@q6&n*X_kc0B!}TZA#KopONrp%0=?eY)K})DXKOG>G^!9=F2O zj(Tc{B)v1;&Kd4s9P0iu)~pi%;8Mkn^er`NROKIF)Xx?h4u5%>1}=Ce4ZvjY$Cp_? zd4bG5o0eT=w+4cg(;!)h!l7$lVI^AbfgT7&z~_?MosORDZA{q(RHmOfZzvf zkmukX?b`;Ksz{(+d_BCvLM|Fjkpyn8J&YaWO?yh$31TZa_J|mBsXHujbl}|Gdg4LJk^>Mvx%hhvzHJfa ztM*cKu1l=n0ZL~aezWdf>rs*wZ=w^iw1_2+R(kyQvNDz*?Wp=Y{O)ujIMO*gZlDQh z)aSG%TsS!MTSzcBJC8hcwYt4>9E;>{E@QJxS@utXGgEosjG9185!?)Ky19o^o3HG+j&1%+;v1o zOoC6nwAf8$IsXa!Kk3={3wW!i7WErsTXjqJfP-`s;U!M7emA(XrEo^?%jxdCRx*gB{#%|VJqwV%ol!$NfV(2~K(F6gaET-9UU? z1CDXEt$!h8ayOhQ4R z+k&R!QCS(TtSGisr-A)Vf_~xA$EFUYyZwmiWAc)NFJnVb&`QxO)T^k^Ktb|#9*9ij zV>PN6G80q)vHs^Yvd9$@={9hHF30x2Pu z;!}2t(`ekE67*=6NyXG|ZkH8_y(ihvxlVlmpxDa7blV=?vkD6XW|@DQiRZc^Rs&F} zTmM!m^_DfGnSc$@$cJVo(3j4@&VfTW{=Qn+ximi@Q220rdUhPc%$_Kp?De*mm5#|0 z!SGI8pLb2KqguJYV1=z4J*UbUR+$Y;V$+_qtP6e~8Mk^KtueJ@0(f?@xjF;=(k?AK z7z}dqNY^;H6OT*94Qd&ANjpfBrDzLsV-70Hv7t9|)W<|{mVgQf`%U4c%dEQ&Ikw_2 zEX?1^Q$;<^NLy;QAoByW8|axtLJd0~#qJ%E_ODeIDVdXSN(75ICUT(JH_+iVA+g3X zNwnUBt;6_`8Jg!&v5+8>I4Q95(XI07=I+T984Hmji=I$TPWi--U__3X%ps}OQ+fE| zVG*q3sVEYtrgB-zHL7m( zlQO+A`>1WK4k7Cy%OwvnIxKn}O zO?AiX@ESsW2JRRfVN9rN?M#2CwKe{fo40YxoZj8jFw@0va1@aF4}P zoZy+6kf-AT(FnRQj%XJ+CKhl{-EC+1SaZ)I-~0WAW27$p zV6gZe_ryi!y8Y0#xB&U?9~GwqsrlHe;#C`To}A zdLCCc&^9{r`FCb$Y6NwupXIZpzCe4SOEoyk8*4a53ce|8ve;qBJiJapNlMEJjCQ#9 zf!3&)9O<}Pv$dfV-NN@y;N)NR_vb}4g@0^CrufWM4cUVE8w3YtT}xQBk(2I2-qywv z54#ATU;<%Ox~J%8%ZuU-zKmmxz10fbU7PA`LzftY|6R3D{4MO~7^JeR>0pHT0SUMF zi%yUDLdli!ffna-v;V07AA2-eV@`8X4 z8#V)-?oflMQHT)T-M_}9XLBN0W$=E)TIK)zv=^4b6XO`yVcFqs?nkfX8=F767$zJS zB_&lUF2yK0=zIkJ`f;ALg{vsY9X}?d`S$lQk4}phnp9v(?MEt_=Jx#yuu$vjL{KUxI1@6NBj^KpJ9aPq7#71v>n53%ow;~VI1_79ILh@OeWt^AG$T}0%t zQUK_{!Cjl23O01FX~G3jXue0UGw*vg(8Uy!Bk#=mH{jh&NGUh|@{Z0yb;MktMHi^7 zMnbOnTKGO0WvV=V8 z=Y^p}TvI%*oXjL!rjqF`k$}A>YKQxNFL67fY{=0314pqqeU&1FuH#^qPAPwD>Jm3C zI*~F_T^+$4XW7MlJarRokmK#>>ZB{avF~t`D$X5OV^JjucR9^*b4Fqcv1a;?Q7au> z^Pd^#gI6=M@1_`N_~YaDDo8CmU2J)1=5jVVT>Q`1vW*0H@Yg@93`RW|PA4Y9nK&C1#cNvT*~ zwC4(R9lEYv6TKxpJ2A~%1!Y8S0#{={A9{QY?{rQ8R~4yVL55>=h0=UyipeeJF&PiSa z-N`v!L3|kMdTJ?7_|(}s9c^ZZLXt#^qjuN=3x&LW36pDpzMbxuf*`~RtCtyOi)oop zjX5Q{477uA%~?j{w__PYxya21<*h}@;FfvW#DCnhhxy`ufa10*4?1tHFe|+1yOT{R zPN?3i!e)k!AT7)aDCNJ{jtU;6#%GSp{15EA$34~)$o0#sJ+@k26~Mi_iz}bnpxCO9 zpS<7B>~KzMdoWUvj=QsCwqu{tB}Oms;b)Wxq%5xXE(S?|J%- zLXo5tUy(VG?q?RR8%~tDm#m1HA?urkPI6{qV`~-Y(NjDs>VSz;azw?hRC`w^=W9Ge zS9oiGzpXO=ZVO{4QIRF_zVOh#a7ao>gJ;rcTO~ekF{wWVaNkR+Im_^U5V@1_%(=E) zZU;O_tezjaL!#3g+&@Ji1h=S;E^#yVF5L7=mTnr?5tFHkRhgAA%-*G9ao>tZdymRx z7r`YQa?<^n56nB4>Q*84NmUO5xZJcL8R~{|>dB=cnnZpR)Mj|(bd!-=cOP^?lYj_E zdDEN$5F5>?@(FhFtEwcK$S75GE4Y{RgUpK}VJkYRqMx!WI*qnge(G9uXwD3G`+Le9 zxG~a55gh#V`q&qcy_^jU11#)NVx)+=ezIywACiE4YA+w#pv3OU)#6G~=|_eTd*f~p4%F4dG#>DslEJSo9E+~izRC69TX;4s0*I>d(Fszi2U zL-&^Bapx)6sa#rYP}o*$wo;#(CL95;#M?T_U^NL2A)`uNm}C5dr>gJxMqoESj87Uh zO|hHm_tpZFbt!PQOR3`9KWG_6bIMs3Wsbz}s$GeeJ64jz z;P+VB{y$Ir8cHN}e=2u>p61LnTot=~yEHhg!zQ|b6@g_qazw4+7Yao?8;LH6HPMA} z70#_GMMPz!<=v6D+MugM&TVfu$$wsuZot1DP^~n)L2ziOQ^fLr6>@ZwqBA9&VCsi4 zPY!aL-WTaJ_RL%rSTc}!PEJj*g4((>saqxq&g54sFNcb%b}>qllFl|~B1Hs(eUwmg{G+ zcjmY2%Bn~3K>RP`G~!;BO37WSGR{-^b#awSN*E!QVIq#mY!=0wZsdx-mF#ehKQvUhMn%M2>)*i5qEMD(HqI-d}%*8wjss&A&uj;t&ilR2tUjwUOU%6(;pKgu2eD_ z56%(fB^GvpzGSkjofOc%(a@~W@#ttcwfrd-+&;Bb>3CaloOg{TZO|`Dc8VoWIG3s3 zF0xZC?c17S9pm$bqq6P#d$fV!l$v463NvFSoZ*&<98qTm1wmO%&-WxfLEZ z0_r{7wg~toF6HOwp~_%N?UYUP*eb90O{(>eQcI#w8=4+T1Tme>bnmKU8_MI4*@U}S z$>SAP<=^4yV~##kYtB?aC!LQhxwnK~-=G`YD{`JtJ$zRo|BPY!uDh9j&Z=rczHjw? znNx+-!r|eynl{8k`SGCi*ky3k%)}5kapz%6p7{4QWq;aBiVG)6=lxQ7hBUGXL86=6 zT%=zmiQai{q)RcigF#8=Pp`o`I5DDzv!quH7)XoiZdyxrkyipD{PCrzLSD&0#;duD zZCW-BznMR3{Zz==g;0^feOAC4-=O>~Juy`Mxu`!$_pzaU+i10`9d~RpXL_$p5na$5Nx;zi1rA~X z&Co1{7~i#>X&q*oiMJg80g@)Ia|AUSZv19`)4dY{>;9Y|P=GA|AVVk}8tA+>@)tS9 z!u(U@s7L*XW8`a|rJbK)sJ0)~{H#-AmM~W)>9gig;8StrLFwT6!jUTOkshg!1Q zGu}oL?*Mz|Ifr%cq-E#(opIz;zIu%XkKCw&|=6HV_Mady7THBE6X`81YydI+5|(sgd? z+CWRNec@=OMZC+!aNgKY%k8sMeC7D^j})Fm)V(|8sC7R|w<^AulrgT#r{j)qs+v@w zzo|wZS?7mxNik!7@Jf~VJay4@-)>VKeG5Be>2sUWcDl#+4sqd;|4l-P){^KDbwYX4 zEYv;6XXDlI?)Zx;m%{N?fH;TA$B%oy@7MlM3BXdm;*p{C_p76$JEkwKXPlv79=<=) zk#yV1D?UzC7ugn{I)Qeka^qJ{-b!OCM)9g7?(M&iLR=rqxEioG`Uu4G**3(s^5@Yd z84u_;z=RSD&++AO@0p4c=Yl|sLcP^fgRCS6jwgSl1lz*?Z^!v&p-K*Dm#`geP;p(4yK!={5K-oHG85u*#EEf;#&mjCIb-x z&6D-4xoCFiRf~5o9c=fr1APH)V@Wr-=7oA!hj9b+TEduOukV!LVQm_dom4~(-K!i< ziM!T79}{ok{KJ5<(EzTq!G+Z5tC8})p(;T6ylP|>S`-+MKWK=n2`?Iml=h7jd0(Q= z^!p8!qUHALbp3^f_+d=K*Zy`bpsnPkwVkBg7L>KHf-LNAnqZnf)@sI6FagSmQSSq> zZMGiT4X!UlTep$;UBgDn^&{Bcs{f=1GGdfV4e|+b`+L!cOTLL;k!oS*Dj}UOR8^r) zf+0#==+c8DkCz(k*<&{1QXHS5n=Waw*p0AjYg#P4LbHDmDfjQO;nzHmAxGF)+v=4$ zy6#D*IMT5`(sDleCQ4Z=VQ~rj74mZo-`M0|eD9e=^u~?MN8D0CT%|!fh?1ERol~f! z9Lz~erBz=NWta4`c$3WrQHg1|e3GkKk*s+MXP?#_m93O}t|})(>aQNYaU!szfo_P` z<%_6mi+JT@90LbI%W-+geM4-L@Y^YScT=IBnc_e=!OKs2Lzi+HlE}gBD=Eh}PL*vr z5i>`~%by2ulc-Cq6w0Ak8qQnt)H$>H(!E`r>v11ArhJ%GiO15Nobz7I8e zJ`NhocJGH3So8@M>aAvm{%WtFwQ&w9l{8LPB<~vthS=DO-d1Vn?3XI*efMU{W>8_+}s&`ynlD z&8q?4;|6+v`X$}oPxwz7=quUz-;h3&jay3|I#XNKTTF@eBo0o2AdX2szBG-PiLDVY zhSJg5L}a~%T?%ra`HxA(mOy$U2w(SJ=QnVgj4Tuf&=8>!eF5x@eze+ytoG;*1-Fvv zf&%x83I+6i-+kuGP4CgG`S#7&cUGAGO_8jqb#kU^Nc^eK%%3|Pf%o`OdU9x@Ie1(^ z*CATJRGa`qpt_Qunc3-^-gcBWlAqD1Fax&?j@+;r%cVttMog+P=f)_-L7D-NZkz!3 z;w)E}itgUiKL?4kENhd&PlRpA&(=;=KHVw>Mo3=ivE1)@srV-r{C!Gy;V1~6xalS` zFO9`;GrqAmm$qvAB;(=l3{HgsC(#eRUAN)(j>@M$z0wkQ_QT}(Z#wNC9>FI*KTyT* z;+IU)eSDJBarsq{G{bd@ddsNI)xG_Nv5ofP!13T}RI1s}s-r*8ak7`vvp0HNF!nHB zD>JKdGqw(SC!me>f4nq;4Z9x zzS0@u){FY9Kd8T!JPP0jrhQ+JLLS)QY3qRgZKjXA#p_C;$8wX}&v3ikfE-L;p?kg$ zk1dpOh=j2Bj6&77W;kyz{xZ64oKv?r-1ck=Ub))L;AeEYxkDu>CEa|(o%-)@j^aryTsOYZOdi9(*;33vG$)dM;-|OgbB7`B3lv9r1L+w-+fw5YtW)9X4jw=<@XVJ5T)8(e_IaQD13d4F!zxSNjrR#&y zD+<0q>$DS(Rgzs@;G*U#VmJ_WS;pJc_ok_!5cEYy3%a%6vYCL`u}6z>Fn4!14>+*i zhqPZhk{j^MaD}Niy^3$_$NT`|Nq*jt>Yn$40+rw5*p4;^-NC)(0vCiUL-S+0K?Kek$!A(9LPRrixci1IG)a*&z zI=Z6U)rx0p=1{Mm*zfV@Eo!7Snettu^{+V>3?zCrQ-O>~UdvI5hed5lZ>jiP($CI5 zn4CTjdL=(=IrfIgO%}nSD=a0KfWi5+ntn?~-etwZp;`sx@+P@Y1x@xCD8{oK;+Z9~ z44DJ7B;fQbMu+Lq)3m5T2d6``rw(T_nY7dbxV!T`7tpQJ$ z`B^)47bSUPLQjP^&;uQ#oahQLP7xvei@CSD2#DWdHvK-J;tFj;N?+ZOitLE-ubQf2 z!Dj|JX`r0x7`1n%xlVM))59dz+;3*X@ZeGtx5mX$Q&%?N9CB*1{3be`@j0dr_3Ar_ zJ+7ZwQk`VbTS?pecui!sq3L9DIIrbK0M{1WtdZyk3IHMJ5Cl-m+(ku*#xisEn9oq3 zx5(E1Tv+z(>r>P&W5u*1v9n)stduL-CvtP8g9@~L<+fLm1fVB+CG<#C&va-PC?Bt^ zT?!0tDj3LVC??U!?&>+Fj45&HlYd+!Xk#by3^2=bL=Uq;vAsF?51{*3BRXQXro=r7 z9$bSG0YdQog)&lOd*_TT=q+%Nt`?l#_)UQ_bxxhQd=~?wo2xhtUb?>!I59 zzew1_I!*Atuy)3(KP@ONje#|(f57^ii$5`48T7b1*Ye^>DzN|3hh$|X50fX~9psS- zl?V+^3}uGXaJp#onUBJsoW2vlEsz8^Gule|#x;`g6}1QITl9q+VikVzR2{QIOY4bC zVmC;!!r<8{Pk8%4Y53-dD%JF^UXy^PSU(A7fG0G~A%+VvmC8a2KtJRF6cJo^5$4<`t z?G5*t9vI4VrDC&#wC2pn>Mvy0q4k&5z=3V7{+;oSpBsoxR&;?Yy|`dqARF18H#ycp z*Q^!%$tO(l?^4;`q>=ddeWSWRRy3K{Zm8s0SvxVDXHehHic61jzru0i(|D6s5D3Ht zmC_ozUJ3jmv`MR3p`JYlNsR)xU1xOECJP(z?qw3YkI2avn2cc)DJz8+JCdHG5BKwm z_5(e1ZR-_)L>@*Y-PU19Ie3hWiVHq24URx6%QA8~i+V%8BjenqBs?~?kci_=kJ6lV z8BptA8yP_eo6OVU+v6#%MIo&d6{X->#(~E{X}D!S62Bdr@nrWOplv00FUpi~KPTtB z;--&6ZBiEKLs@@J1vfD%T&R^U)S}CsC@+(mKaH^UqwT1Gi}a6UZx}>vH0aL%d%X}e zP-v!C3HyqYuMO}Xb#ba!Fx7H-??>l~!=GiN6Q$f`hrJ-#Y$`=(#{oECi^cFo&saz9 zc6J|*NTT~i@Cn0)S<4JF*BP3KHl{kXMR0B;T0amQ{49)WB;0VPrQLqjCj$`2ej=&* z7p@(#I+p`qZpQEKDHT%zG$M*q?Ia9o7~H)hdVzR9lpdf+!dQwu)9zkRdaWA_hccMiN$n3#l@q ztjGvd5Ks{UVT2GM6$%joiGUKqiVz?o8DJm*Ldbg<_G#_&zF+?z{tsWnx$kpd_cedl zIB(l;q@Df#IO+Ebm;ShZ{mk~un}2$=uGy@4C}&XZgAU@s^D6{$uCjEU_(@!c&jawA z(YmH$9od#q1@cj6g!y!`csTA|m}0h$nJ^^g_O2F@4r^ai$S=Y}ZGeAT(ncrUd`BX) z1D)vl543{0_o$uz8SeI5h^GlGkK0E5zgLb%-6g(X$v0SDH6ex;(sTZK<;Y6og;T!j1k_ZgYXPPtxlo=oG& zp7r@(K#UXe=F@&#{`;jO!Tk1@v8tC(vq&d9My}L6*T#pDCiP_EbYT-yR%;PHr_JZ2 z6mTsL2p`u`Wm~W8?7-h_+)|m(gXH;y7(<-Wn6(45>F6k$WOx!isBRXWE1quc65&&j z_CuVduZ=fxojuO?-bhcyF^XLwo3R%rs`SG;3fMzksJT8UQaGl;XLL?l911%y1{Pq> zH-)1$+%K7InE;n-WSyiYfNm@KfjC)A(3Th<8I1Yt=ug6M8sW&35Q z^r4D(r+@j7UU~*ODtclr;rSk+voX}a^0~HD{OX>hSjn5V|NllNGH~c-Yl<;c=uElI z6%`6EFTQAoBAYnxgNwMF?gYc>x~Kv5M|V0GwKaLiL2Y!6D@xA&^*v*NmrybvNs&97 zQ8MfDr#C3a3~t60H{o(HwnlA#iUi9naz|9G4?JbvM(4iKEv=3&vG%B&aTm=t{8^9# zM;;bYLFI{lMG@VG1%&J zF9mLOy^RhN)bkd#otOAV+z9vQl7e)S&j38;v6n#V)WO`f#c$!_Oz(xR1xwcj&%RKL zqKwOEjeX01UAp;-dw=rU&}WCxx2vjI=nzuZXZtJ&$R)tx`ej4luP`1z4&=bRqpe}w zTkX{k2ZliZq~J3pXSOUD@`qocu%W*Xp#GrZp!Za-Wh3A9NDI*sVgB-Jd@H}cX_-gq z_}bsgzR=SG>1rP(g_;hW;Sj1+3QqdfsO-<)TW5(uILtVU77p}_K? zH(1wU`oxJSU63;+Dy$`wIdn0`>$}cHtCP!rk6llx|NK$ju7nuF4~&o|9lOV9^x3w` z=?}EF*8m48o0K+s`(23=1_Ru4N>mISoe%K(6E{f5z};}cu{YP|3GjNufVxG3;cPQh zvOcMJ$|bXJmB7P`&o(N6UL_Mm5f|c%GeBDz9z~henjofj_jo$gzOZ3#vb2(?HC� zi7443IsL@TjFPNpxF>FADGw;ps=34>QM&o>NJ;l-g&Bs^&BBXjd;1E5dJKBE6bp2- z$@!sOBT3DV?v~>m-gl(o{L@%j*r#8RZps4{7GC{gLa~zf-i7#;j&6BmeW~`kuXSXJ z^=+?=W3Z2eavyF$zL@^a5$fY}wWp3Tn#3XrzX9Y_AgdIkw>OAqe$JzA38>0-@HkA_ zwsrZ>FTFGF{zn?PLprXCwDHJ{cr4n%vq5?&deLlpF1-}EHXN5d5g8->;q}2x==wDk zI5={}C(Ajao(8F#$@=g?#2w~v?^21^27>?$S`H+E`T?o_8_BBTi-(WkXCkpR;S)zA ze(_cVqf0MGTQg-;x|$E)>AZ>$o5gXIS**6CUIgYrdq)a!F~@1C^0c?g~U`CO+20{^DnNW1{E8 znMSI?gNUTAu)uOk+1>vtn&g^HopnKBM+X6VDQc0WA5!P^TgLjQNAS{Z)HgRl#=?Mq zGMNXYW5;!3ZI%F#$hg!&RD>09st^3|X(s9}=gJFQrli{9=gm#?7nHXne%F9;MOT!a z;p^X)2nwU7yM%VFgV>@`!9_@|s=-pNj$TyP$1VOclzPjC(mEAabg#zRs*Na? zgAd)(h~2(Fx*5p3UX_l6q;VU<<87l2yrbJhQNNI?CdS%&m#6U-Y`x zeMyZreRW?Z^zMqiJWP9c;upZ2AyRSHw_&f0C$UgaBvp?=d?axSPHc8&45* zw9#V_w$Sw$R8_@4jOISwTcxg)vwN#feHMNfpfR*!+%&X5xTOZN7#8G&SgMLzFc0Sy zwC^dR1&Mdb+>lx1E;#DOijKp^x2q>dKNissuy%6 z8f(VBbO_yn&gl15+D`DLnIUPPALISBBBnP0F?G^1I3TL@rA3mq4L{4fT6lXt(^TU) zjBD6N531UUsp_v-sD7Eykq5I`9KK~<0QegVVp?5~Ih+~rV+GH2lKcj36ZYSf+rEZd zQyHI6sIayLr!i&TZc7HumTv$mYBAW0JJIaQaEP>Br62gX7sZVLHoq%*BPtjJFB9o9 zdI!K*sxa=hY1P||?Y}Tyre80v6EM0z$S*(~2cPq@KP(DFQ_{j_PMhwBhv<68;NJcs&$ zhR8tZ%cSnFmeofNv{gwZ=|m*d4oF*6YJwyh+_JCh| zVLo{yQ};4g;JNsIuS~M5pL?+7#RsUKUa&1tMpZ!TptoA56A7u=yHo17iyox~qtlkk zs~}#%r&>dw4&bgbl*Ie3ZtGd4pvHBbS)}%oG@QEAQpokPKP|iynuNKBavoH9o7qpx z_PY_gQVhO0RjL##?_K-~l#jp&uvY3xvFxs1JuNU-{4_6l z7A*!W!(oa7U`mn*@CQhXJrq%ZC)(5QY{$^Kqk!W|jkSCqS6Ql_?v8dI0xB0#J^@r= z_rp`ttGOA{b~PG3&U+Yh7-4P2AfcW;xm2I~4?C{>3r1Z(Uvj?(6dir{E_p(XmqmC@ z%xaWOPKM$i@dmQ0RJ#!o31ZezJ8FCcPyUq^=j}By2fSM{voinhN?3VW3HJaYz*5Gd zu^v}mkXyi2pyRJ>PlhAk^JgvJ$F6_Vy-nC>`2I3Fw`bDt{5YRR?Ua;;lpc(B!Ne8} zS0E>Cdg=-*CUe@|(0z)8$*cxXg1TB;+eCT1_~`)p7-#1#{~gP!`bc$6Fr?|;hPzW!wGkQ9TcLG_e$*bJf%9 z1(-9mrTHLO|63`8Or41iVuny*Tnn^n00VpC#Zk|e4W0gG9gCm*>Fy-YRH_$zhnb)#2i%%5V@#Acg$)F-OcVLR z9_n38`i?94%O?R8(Zvi~i1h4|>+2E5t*YTI zd03sZ5?X5s%^_0olyFFg2+N7#~7KEB;+O8=MDD26@hdoVW3~X!BGO z@^%3Cgb84mLi0iE$#2n64Gq|2=EAn%N;UXx4lAgrlGn+^-0^k~jhi-|JXWPDn?6(g)!AHtw!YuLJ`!ln{<|b9@4L+^vdwz-UH~?l(h$!fQD|Pu}Z#4h3 zDfP{LQ9CXejqZgyB}tyP&bpP!Ja^PP7r*mxoHvMrYfc(=DVg$=nk7C(6@8}0q z)4qXmFI|!LXl}^uW_!#*<`Gr*ytDN{MRKR&Ixv#V)J>E$^WK@hRf=84KQ@mEG@~XO z-F=MjwcRU-<-$$%Hr-J+^S$~V;E^C55T5r7sBd|k;r4L6D(87+!ketgFget8sOU-% z#i44b*rsAU-0w&=#O=RG3*!*}H#bj&030ofJpE2#o-c7_)War_7f8tQ$vw4$1X1pw zs2y}nF@Oa4xB2rIR=q;*L+6uv0Fw?Dx0dD?STp*FR=r1u7 zCDBi~FUOpJd3dCOfqhr}SR_euk6&QMF`WRi>ECw)8ach)Y$_M+SDyL{BKZl3R6C#X z7U$$$jENQvt^?{Ru`m1kfRrMuN%IS-C3c1Sv)MiQed36;Y6pI!*pWpdJ`1l4h7_kg z?+(oyYbsG#j`w%p)91}jFg`np34#SoEO@~}LS1%3+&_0j=;!nH{HW*Ms*1DiaKjjJ z>JbSC3dVE?FUiyo%+(C(P@|rVi+7*#&LUgSK7R}|E7=oQ=uOl3FWe}CjA^`z0782_ z8WQF_h-IUNYTbs7Fx%d`8R>;xMXpjW=(tSyUgiyav}oxePjaK6$V^H$wRo+q6jb>S z3TqqOpzDCtqvi9@fEvHW=@XKN>09-q8pjKO+DwyfM^%6x*AFz7{)68>z%p zcPv)LvN5hS>Rzd%&8UW+{E%ikU^=t`B&&)b>f7fp-_tCWs*o(cKiHNr?Fnk}?HKd{ zY+16fZ93_7AKKJ^>G+8f+2i@%P_0kh?y{p62u1c{7g&Bozo6kU9vmaFmede}`wZk0 z78Lb#<>{6s-&bfZhH1}{zT)BDRZ$~F6=nQ_Sj`RnKw+ZDvfQ6J5K`A#g`hsPYMhw#A8x)OuV>h zDZWF}Tsg4h@-El+;gY|t41StTj7asomV%@L* z0xaLUX@S0QUq!vwR?UWn0dDZx4{P9#Y}0wfSG~Xq2a=Y9w$Ij;o&D6P1ec`ZZs@Jb z$J)cIIOW<8TxWvi9nO99SDK(Nt^y|vJiQ!tuUqG`{}c4#vl^#1`X5Rk8DV+VRg``0 zhmVYH@kJ``vm?L>i9al}C@|^jyAJ#ctavgLHnaCfP2SqYuUN0OhgZ?(wI4Y1X;&W% zn>^0_tc|{I_j$yf{uKrFKX$t6_5V3LtvgOy72b8{16N;W-MX>0tAB?dJXHXE7^n@9 zw3Owq3jtHg{^=mDTbH_fC6fa@w07mdI%@*9)ED5m{4u7pCX{1Z%O7L1{gjvgw>dDm z^nYakAH#+GPt^XWWd5gKw{HE2Jp9kF0Ot1pZzi?!gSTWR*8)T7c^zgTpD&2|T73f~ zWwrWYcP`Ra2z=qw@r;G@kh~c935ileFU{1Nk7N2HP-W^wsd;1A?p0TKoj({XrhFlP zabkgO@WT78Q^KlO{0d4=v;zGR5WYmo9p9y1fVafNI@=zQcC7y2b=#FdVBiUt6Ia}A zX3>I)y%kr9soR50PvsW9J@m)ZPm`V3mC(E#G$_Xe+!3U}2eB$q#l5nTMFIo9{#wojbzKfsZ5?EBn8Qk&sRjv^Sg0K_IOiF)O<8I06fGADp*Txc7d`_Dmw$)29(lR3HOlWOV~lWKWCzqgaKBW0YN z+%(6Gy?ldC^EXjv<$8;1HK88^0EsFPBYCya+dnXWjWLZ}`Sp7MSBd!}(H`NGM7hLd5J0V{Y0%wz=;V@^(jkHTP|~1h{BZ&n0LX zWe<4evEO;oP&G`&doRyg!QRN|^>(&|R#h)JUa#c%+#INo*S^QLGXRH)i2RMR0SKV~ zk$QVOj+$i)Ors>@vGa@=4)>|XpbGER zK)oiwR*?f02s{>&ioNb~&W1!N!nnUc(L-Z6473YDPmo-ksJg>gj~`%VfDV65QnKw3 z4PIWI#(rUOJ@IM9-5(k)Y##p!0%|#Qf!*U*vKG73$Y=ax^fe|Kel4s5yaTsS+*&Qfoai9H2>C)&;%|uxs-QyY}LX^+0lI&@>|rkSaD% zp$24&`r2*NaHf;h?9(-YACJQ#mwFQZ%+xxOL!O-Uq|xyUWU#PcW&i_sNp+n}mVV>x z->PnO-T%nPvj~B+z(^w(;|Y`Nt&>S)My-gq{Fbrs*Qbz|QUw#2ETZQb3wfd@XE|6` z)NKBBmdZ-tBn_*Fafi5r-BR0vw^#|$;d~vIAmX&nUBD2GEZ;X^%z&$F`ryfnd470} zQzbxAq4{Y{(D%+JXsbyj@Y0(h8hryu^V$(qqRb%sE5ORzCz%^#vqX*l38v7C74U^%PTnjQ+h@McREF5w$KL?C7;!kHm&9_@) z*t3W36+*ho-!ASK|J2*Q#sZW2Aa-e#CMXU+eGbiEfdl7c+zckJA!n(dLykddV$~>< z-l^wEsopQ<&;5sJ{aBqQb8{*NukBo|ulWtsl10MyOxQP1KjPuYwlm1z(Kej>{eh_R z8B_koxX_6yY1+yftR<@PUzImO0Oe||cie(AM9+LkeK=p*U>IxOWvPCGiB`mKEj_-h zuxl=0wZG!#aE*;=Z!lEYmJxbId6Yhgk{)9V_s7fBJb!@P_|%L9(w!-z!01A8lw_s@ zGcCb&vh5`EMDJn8&eV;Oi;TEI!8zWovWyi|SO#sQORtGwT%kNIH+KmDu4e?IIVt^} z@R@Xx8q%+o6}op=njyoatw!X*8*(;K4llj`+_Dj(LVSD~C}x1vBs6@v7^?djCjHQ1 zc>S}NJ6fasP&rEJEGbj=ut8q72j-yvqnQ&whWGj-?uI%6sF5*2&EowApgie8j7>W} z=~-H_e3t?Ag%N@Q<3@$^1p}LQEX`*P@~1!F%|wVOiskwaI6g__|l z0unD;5iiT3DkFaU1e3bazw83^PmeMWQe?@bc+pwZ#5~B-LH{&MMGRY2X@Gc`49<41`hKX>BSp+E-c9Zx(El~Fc-R9S@rxY1 z(BKr>U+p$sYXFAM8HZ3(aisl!8K})Lt~*v|pL5-Jp{3_h&zwldBoItYqI!%l6&EC} z0*tx&s%}fy*~eV{r%bo8_XF@*u5uog4Fc+b>=0k=`t6hQh_{8&BI$HH^ZTlM^kty1 z7yGxX?1pgxOALMWeM_!R0q^V@fLf#I_28fusp-Q-5=c>5X{W>qVg7F8A5CMp%N}ZS zO(ap^X6ajV5awIj`u8i^a!G#OcB)sSv2pBtLFlZ*a=yn6Kh^`VuGrrhaR;@6zY=-V zCSifqn@p~oZsBx4EWPJJ8`&ERYV{aZS=MNx) zQp1&+H?cJ^wk;6oGfG0WiO6%)Wyt^B1n7Yd^@#3w4QA^Z*i@zGNLPel%xd6F_lLQ= zQ(+!c^N)`F>ja~1FRKK1%(NYfxbX@-#X!G*jrD8^prrZCQee+j27{C)48-ims99K_ zFGO$I{qTi^e(f&Vk)0W(-!#Dm1hBxaa1d<+1j8&;sy zIGH_SsHk5L6tnEQMT3JroRI7^R}m6f_q1lgRD=$+USs!zZ`%&1QB@7e@c|+oWET~S30~r$mPx0`}WCqxdzc@ZS!RXSS`42`X_T;yGl~?(e`~V#aR$Kko-H{aL9vFX)ON z-GtTx2~!A05Ji};+iEdxlWN5L^QgJ2QyWL?ztUip)jVt`#m@ld58L1%)`Iy4CIU@e zmp=N`4Uc%y2i$hV=G((5?Njqk>BUW-hs8FE^&I}eOM>I!F9HJWOtg*Fu_|Epv(T`@ z;~x2CD4Kw@DeC{Ks6v3=A$2kpFkU$^(q*^1hOXWn!)FLgWfCerPZ%&v6%1!pn#<>> z2J9B_ltr#YFp)I_bkY$g$~^A$KV~bjWjoCql>VU&A{5#3lBh`e3CV}kj%Gj|UxXYl zm>A>^OG=G_wzR5J88fH5)*Q|D@!*nr2qNwvhXLfrq#<(7%Kmx*oEf${1=B!`T~3|( zp@w3@1)4G@w9C9xm@jes(c&t0_{apYnZXyw{D-V4lH*UrQz}Ryj2p}XIt7MA4sMdl z9L3gPnG_E$lrKf!;7i_*nSyO$wU+ zAitTb(t2Vca%OIy{4Co7GVVV=hrfka*VA`C&3IGn%Hvu00V%*j=G1*HCkZs>EGEKp z;h0n8nf@v$r85%N62gG>E>)QogndH{3+?Rza$*HkJ*`UULY0NY+hHp5iU8#7j%c{) zT_Q=&0TD3*FIg{UId>AWAt$dexUKud;@mbxTWW0fXjSy$PLE-CyV9hbV%v_3+!Jm+ z4sJqhWsX;Qtvqr;XzS;Z-jGzK)(w|ThGZ_uxh;ow-KkIYk}^L;4-Dnc^dF0`!AuCZ ztD)qk$|$~{sv@3SGnAiQmlL;xI`Aroifl99<6n;k!=;zyRV7T!;J?hkvI0tMYeX&a za`c_H=L{Filj19Ykz{cmSG8YnS<5d;!#ZHxBkP+QUN4*o->jbt zC3An8h~U?z0W-?A7i35DLMKag1IoKaaL9pRqJ9Gen$u-aOpYLO#uVgKHo%% zUsvS0^m3rbpp4DjiEV$#Fj2dgR8+Z?(!XC64NrPARRhUR36KinILx8Kz@I=%C%(|L ze*4^L%>aM+aCm8K-1E&g4t#MBW@2)fV1f?o=}i-o=rw9Njbh zIiq+6l>+0&-mPwRHAQAzBerPKzRiYpg-elV`qJs*U6 z9@~E?u{oH8+G?Te#eGcG2D6E)jOLaaoB#Rjftwam^+o5^JZkFUj6+qP6)EYn-@4BA0rfA=2sv6jFBA80|PSevg z7^50s$>ajwg9vz;jBdEDfoGs=@FwE9wgxNgWOY#P5}o}fDc@Lwn_@=UxVpMfVd?l! zyf-F;Hp3o-4Xpu8I8EQU zYD)pl-Mu%_>Zx(Mbibdg;tP1)gO=K!2Kdte$$no??-JDbYtN*r3K+MNXB^AJ2xA7a z{uLfrjc=)zYI%$c%46H6`cmNA=o)c}7jMTL@ADT%h>bYmokUgHw&qN*dOS z(wN6qO~1Iv`vy*RznmE%_q1L1K*#5fp{cX6h(Y((3yRH}-RiKH`C zoEUHiKMm)*z1xU!l=gWq%At9y%f#4rGu;`r2Dg(RQWV88MtgxdTTHVf_WMRO-#2 zIVU39IdW97+-;`U!Mexq8N?0JU}lcK92PQrwv+Vus# zs&U|ovw&&-LcU9uHi+9&MUjdJ!rbB1h*F0Y_wzdvu%p)Mj!oPsQ-}SVN87676)>2% z3lD7~kH>6aac@+xv4l&wuDsKxsn))!25{JG9^n@Cl#?}4S0}38`ssTo46m+Z3{(Et4+^di`>bd5jmc zVB8?I%66JX_+3vs)Ohh|o#L7g=EBF@~_ z+sNZOhGG!(&(~Z$v3?>vd{>ggG4m}*s*UvZgdwy;8$^*Ze|KE^X)bR4O^f?ePRDZC zSNq!$&!*6Ogw~V7V>a$+rjJ-nQf+OmB@z$y%~odUO?E;RMOiN zn?JmpT?X;Nvu3^3!w4&=dz9{|xWHN#@`V_-76n{8s|{jjxFLT@Qg~oDe=xFvq|prN zgd_ZpWoSPWYqW50!pw_iGqmya`U?MQ$T8jcqS+`bXq1tY9||Zr3+=ylA;ee@B#pai zCCNBDT<=_q+tN=~C$_`IcsVe!)Ya-7G+r(0{ebzm{1d3XVqQac5aTi~sZfD{jZUm; zqeq$bgaXBg5vQP8ZWJSL(&OJc!Zt1!OiD(kO}f>7bl!*i5WP6mozNDS!Oe2F-xQxS z;jj3@`@on&B6X&KRzW*U3%}>Nct$N>nDwn*sR4EiZA7*J-cmhyVnGhz?S`<|1B86) z7VxDOyzPW}icYWOi$l?Rk2qohRZo%)IA2XaUnx!P!#>HUqEpk2Ns5nWRrH9^agxw_ zfv-~1y?26?FN_FlWj<6hY~vB&l{g#1oAPuWkRk;gDBDjpgq_)%Rs1hr*Hf@AELw%* z6_AyBsd~!lJwGhvJZK+;`(p1@(9X;UxZKy9el)Xq%>l-R4(Sq~FM^K{dD#yBrX*SL zpz1@;p(ml#%e_z6zz_*AFIJPNX7y*MI{AH7TuxrSl8&UV5lJT4$T5Nb*%p|g~eJHQPO229YYo|9#p`s}MAX1-uU zsa=qhU-(5+YoawYQV{<~XAJ1285anei)ea!F^Xg9s^B9J*h9stok@JF6c)OrAgZ6IBGb$+1k6-|@Ni*dRu#BDc z!5(O6Ax;_@<$tfZIG%ncaJQb;GfMknjxiq9))&$mkiwGw+BIU_FR(X9hMzw9GRyVUOms!tn~bhYB{#);C%(CNk9eSGyK`LL z?E8&Ri)hemzJotP5Uqr~L*|9y{agk7M0|yqnBUN=iURvi`{x>lpEI`pLuN{tirQZp zo@kt|qQ|*EGeR`$u@c+|7d^>F;f$E^#mb*5!hp=$ln+I9?OMAH(sYy!Ncn+*uFcI% z`8dNtPj^O%R80^C#h~5T>kCGlqjW%ccFgA;ElT3Gw1u-v7a73$rb^4yE2ff)SYxUH zC(zSzzRFsnW&z&{^Bqi-QrE7VV~`9iZmJYY(^jjXjB$(nR63G6{B=O`>B*v59Lg-( zKK}{CTV+GB1b4h5q@ZfGq;TNrSFk}yYp`Eu#VI>di{U=6>BFw>Payk<`b7)m@goLc z-+K-5)yP0sBQfLZQw=@uFc$bg#Sj^&A%~$MY!%wBJ_ld|LxWLQFob0Dms4ubnjcyW zTO1n5x^R5acTr6}O&U7ZXlnUKFxrs#DkEaBUZc6+nYC>^VRqxj6hD$Wae9CmdC@P# zSX$e~jHlIS$VTmv^(A(FiF>Ng*@ya$ocAH?x)PP}A+v_a=;t^ckOAu`e6s3s9esAC z=o2Le#!BTV;d`N>Aq zv)QFDcdyosNiXDIt2>#<^>9Aez9WE{w(fv+n~_3%3eEMHImu9*xo_+WES76-AjA%I z)|`}~_Nq|`+fWFeyE>NXgg|$+@mDVxKf= zmLB5HSeLV3J@C@=Z<0r@q~*a4j1c|`c=%x*fPgHpCFUN;~R{%lPr*@SI3b#l?1{fM+{(a=)`NU8}_s#8V}h*6VyNjz&2IwICXzO4FlTtx0Lgp=VD5Wp?eS}LW`rcXv7Pt6~KB0L?;J4*UL?1QQ1 zA~6nQg4J!hJ*o^YrOyK?=#?#?za{`};?d|Vo8lFp6k{knNAvWp;}gkQAoyA&f*w7y&`n|3$U3X`XOUqNpT>`P$17{27Dm2`9U%>r}lk4u&3V6U9($hWS zVLcH5zEvd+tl_Cl_7s-`BkLzs^mJSoj^zhXuCT}7{{<(UgKE#P^wGHnu zoL#z!od@dmN=vkS{BGj-uYs#`U$?$`d9)Ci2bG)|#LyYrJq z|AAQiQa@OEXpCfA(go*}-!-_|qdNxQ%3ATo@5)Il$>a|IWz~fKXbZz%4mv-EIOuQ2npQ09<9aNYQA_=O zYOeEUK+nlt-L12Go?M6wJhW7=vA!2_SH5p-`85qp)b6Awbe~UzWh-nHTBl=Gy2qO% z{walzAj9}4JgnMx4b;;ZutF}r>}!|&lMi*Kdg_{{GH0{3cjEP|=~|^e%pY9s&pRP< z?wcl!r}w+pwHVXd`6qyAp8(@3_3M&eH_*i^l85_dW6X*J7S{+ewxD8AJHSx8t!4Ii z57yncpNout4q=>)sjzZ2bVHPeXS!qHoUD9aHc_0!#k(!9n$Uo>rMi{!1}xx&C@P$;Ne6m=ka7>Z@I>nZwTBf2c{cGaO<~I5c+U*DJ9w@G^g>$4wlyd)EX*oy>qz--@rVHc+`@r%= z;*MBmIP{5~{uXL*s5*O&-tP>2Z0nGXR0qUOlFv(js>yZ}!Vj+ng;FIY%@mSl!#jM-yGd9c%Xu=D49)E3~O$`myanjWof)yAd!vr24EE3&>Uj;HzGfmbC*r&(-^)w0kXkP1XhZ zw!JKl|5Lrh0NDbgDl~VGFg%whr3m$A9B%P0HYcBq(Er+gR;^QZ1jjViQr=_-*Bw zug1Esc1DaH8?8P=vG3&g>qPLgTK9Yhm(YN#nJ~l;ySO`~=4>ln2ov4Y&f1>Xnp$9_R7hU{prsHSf%Zpod=r1Q3qu+P@Twc~ z9F9=E*n3qKU&vd0FRIjw(aX)H>wa}~P9GP<62b(8Wa?f_Kh4QdC3NCq5!IzjZ^t+T5Y1=-bwL z;T}_Cyi~ZUqz#Z1Er>WFZ1Rmu%d5Tsz`HPF->NzH(U0_YWX;=*DO7W=9-#!^;P4y`4XcFfA1@{dmU}X*`Y^Pr#2%K^eZpr`VVW= z)3KGf-0p_ChdJ`S#B<61`XFdidCyhV?wzM|eV-}Uvr1OL>$pbGi_6n?FnKq}tz91l zow;GSkdyqg_-WZdxF8IeCWTK=J*k{%`3T+*c0RAC$~>bO*L*wT41*jw@0%UP$9}k9 z-Q*oPR8%Q6FG`DS4MYasZyzIK^ zGqbVJSnzmvDYHG#OHfsk+%r63CFJ!5VUoMx(9xs@3w!Tug5lWk050r5Zx&0-DG#jQ zMce5{wm3O?t(<(j!vF7=<_WVZO&P0em!xiAk4@dw1e8PV^K}`>c73Q{bq(cS%DEI` zoah^vrM8Y1_?4y}zeV`Av?Dsws zpo5GmIV!W zkX^v{Y@ zH|Xprw6;{fVs$Uonu0$WKCM~5G$7_5?LASJZJZaja~zngb=b300t~<6cY0&r(>glM zs}EO*g^vMmys}-#w8t$C2NxE>sVT)fK8c>!eF2pbqmmRV517Vm=s)`nF=Qm~{ld>v zSAdwOv@$^Kf$%IJ0J4APb3dk4t3Yn8;V14pbp6eQgqy<)Be1(wV?a{OsKFNh!!Bw{ zHYGm52YNX>+#Tve$-Wi<<689>wh-J)*dt>N(&4$cDUN->M}<}`%e&b14{q+em1YabMwLSCS_@dZjS#+yea8|^0 zXt#OwJ88|vkCMRw)LBx8-lkKq7E@TmJE{5-bg@?hc{2$DsO7F><2_o=*8(rlf!Ri! zLy4&FJmgd_=?XR*ss+Nf@|kV)s~Ri7{!`c37iTld<$F}k(V8NeZN|+>9_XjjrH`+x zcqWuoCJi66++AS15IG%Af1na~aN>sTW@uCi-;F%Fm`UoVe586R&hOKzqtEsMgDlwR z2FKcK%mhpThcc!J2*<|Xw@&kFZTI3%N53EjND}#Dv*svn1Rw%p;h-Nww z3lHIz9x(3FRGbBDoRC!lb#xN|Ri^pWoZou5$1u~<)hg2sktF-6OJ|H6c)GPeT)PpB zQ!}@=@ExI^zM{+N0W9~ffc)>c_iEed2U2m$24vQPWx?2}X(aFNWmMn@UEp|Vtz_|- z4IsHLrRVny0cgO1x29tp)Ah{-u$D(18y~ik0xByZZu^Kf58_Vsk6oZp#;kfCQ~_Rl ze;EA;c=o=y8NFMApClPrZ@>U!)KYfef>SdIMkOnCO`si0_qv&CH>r1!pQF_*0^720 zj&vDvc7rs3O~0D|PI{%pyT&G?vQHnMGyeSSt{Pz7{r$##2S%sOh5HSc0M-92#slSg z%nBG-8$FZ&7=cbh{HTiqqVU0|S*@2*U(B!ivz>0Vetf+TM>9KHs>i<#D*%W?il=&=RMegP!JR6F8z zWDsZJuQ(8hm!s0P4xUE3m)dVz^e;>JQQP^ng+nOvMvlF|sYbfeLHF%W(6Jt^qBqs^ znu)XB?O|?iI|Ir+tgC&YSI~NgDUX?1pi_Y*yy(sUpz%Y8JhC2B^BeO!&K|dbdJ~g} zR zB+IlS##R>;xky7=+`+`U8-L79O=yAe)zynncxJXW^;P z!cpOM@~xZGr`zZbz{tZrm~*8s)dPgPIA1f@su@>#TLiNz@TXzg=x|tzv4*@4asJ@a zFRTbFnqf%dGJ(P&p&Cn<-I+U2RIgSzZtxsyEA_H7a(HisB)&FH#TgjrzTWS^sf~Cs zcN?hR0b_A+PO{GQ>HgZ5ouQz=tm89+2uIst5{LXH@m{ob8&$)ytt(9X5ic7mc8riD zYjiY(4`O5UXHATWQ;;a~DeCc{iE1E2t`DK!{0|*fH*U;k+@e}qHq4+VDrWnsJ2bWI zl}a4$>SzIKBBh`(9eiP^{^aod_h4ISU5-l{Cc{0vwAQ0r5_?9c;j%j{otb-Jqk3-V zMYijTDg19rSz)i3tP z0H$^L$$$}^22(&`N^wNiQ*vKmmHhM(s4}3`Gf2GjNo+rQ_|Wde;Zsth$<3=%MKOl4 zf4oa7Bwd_&t$Ljc6axMMFRM=m9u@fQ4r3v2kvnz9~vGnaoh$b z@>&~3t)cqEdrO#qzTdONIWdJYH75GEh8SAAVKm`bCP32K_IFY-;=eNG_OEHRTHnQX z#|f9r%-{XEd&h~Uu-2h^;%Cbqo(IeHZrkFE5BW097$m&LBY$}ui5I0>+ofm4?-t`t z^|v#$EVMxe-=>E-?5~a@^Ua_&`Yg~K&>z02WwcDDEqVK5$`&uH*WUG(+N=@S!RwKs zO8Ucm==B`!KlSbMYic9rXZtR-)jAY(m(4YF9%(rFO$;zQ5>N*Epg7B=U*|i`9YsmA z1Ah&9nSRDQYjzq;iVt-87UK3~(RZA?bmnfAkKaMvU-w(z>*HqkCz<{q_TD_4&Gh>p zH;d^^wbkiV(@|yGnJ(5$YwX)}U$nGUrM9$HR3o+^wj|xuOjUG2YM(A>t+gd0k+hVw zf(%MZLXZ+f5(E+1eh*zf?@qlxpYPwlYg{fD51#vZ&VBB4pZj&rc^$*$g{6m6vzYs9 z4V%&z=ty~?zj_m2vq}cayOPfvQ=hj0$s{%#p+I)(n#H7!(|L~&(V*VPKUG&AlT3sG ztf1{vI$kXSb?OPUXe&RoYgx@c#`f%q0|2A1pRy!{^f-HM* z(N|iGRwx^}ntp39r)0&nMQEiCJUk~+RTDk^`TZpHfY9D1*$DsVzsksZxvdXXbD5ib zxT>iE;)%e&HN~^K$FX_tRmv z6ETZ)nx$Fi?Y}QdE*E{X4zM3pc58LJ(e6zF6ivEL%Btby%L~L`dzrzm*OCqof%Iu` zlaE%Uu-w=$A+yc%BqMq5!4T3wFK=j-(mg2T?9K|(*p?R>L!AreIhWR|;T!`OfK zD>_%YyM^y23gj#U`mz3}QO-&*YK}Ef@fAGiL1*h2)D-hc*Par zm-bzhyk-$4R_raCJE7qP#Fv(}!AadN4`IkB@?{aeAB_lcvK-Dk;U62{m;B>`7p)4= z4rge@f*v2c1KA>yf$h-RcI18t#|jA-@s<+PHTsOJpuGL5VitMZS>AK~qtV8D8Vqv;+i-M6! z3&Yv0TpH=Rck!&0b|4LTUJw~t^_ld4A8viw;nO?fP_6r}peIPT!U#m{n4Y)#^?){6 zDysf#moGp=C>c4D7DXyHtFgBjfA$_Qd-@2$0{}%yc@qyKD2Z;qIe5QZ^kv!_Y1nBq zV=s{TH;tjv)?C4FwTe~Ew>5{9sXl|6v_Jw%Crj5j2`}1@*q)#Memd5suDZ)0W?ZNI zM8P%x_$^~kH=(#W>oz?xD9nsijDuGjy#j886eOt{Oy0pMFQge`nIES2p|Q{K1*@RY z_|S-tSQ)^IVjPwKdh5`$BZL~TzC+(k)P0XX5l7F)TxiKc14(598(*BWa4?SBj5^`= zQ!l*R0`KS*-fht>Ez27}qW=!RJld;Uwa?;LpmyuXK*Z4}zqt?cbHLHEHEG=KhEdlu z9-i10)>YoYsE2iKlgG!8#Av$3njjsM8>BvgIY)Gnuu`{is|0M6>XOFhS=8C? z--cM8=>SKln#qmlw4tUh%0lkD{rTmuk-ns@K3tc!^|cts3AU*&zuxve#9VOP((6H^ z$OycCSnXAzJteJ@J~c>(mhQC25wsF_W1Y;FC&D9>~EXvN#NVM$HZxq>8UzA zZl`MmZASWwW)7q5I|XxV9P*;(yQ<8e)9QEws~)E*XWg!q0BFKg9X}xpiRF%Gk-CRg+5IM)GH z2Pa`fU)-y9`8GUd`u!Y0Qwib)7wIztRJ~Ej&sK=o^Qz4w7<~NNwc(7|pm0g(#Fi!o zp?s#D+nS1(vH*qL)otFB7eD#kEN7IMUJrX8A=OBo4kV9TAJ_Ao>DhK83+bB-aNdo} z@B&>}{Fu~55ZJqAU#|(<-4mr#^J4uFCLx!eWz#y}Y_9E=`X|&tdP4ZHZPxnc(WmN; z?6yqkd;f9s0Qk8bvdgpJ)*H1PsITN{d0Z(0q8h2vdtIB-H*{9( z2Sj8$-M_isC}#iV&>&z%znTM>SC`Y%X14b#>loyxZ!|HJbvv4R<<%~^}_G61j% zBp+R)U9Mloq7LWeCMl)f?VwX2FP$qxdDi=ey14xSS>f96rPEx~I-zdL>DkOL0q;G+ z=j=@99RTBKjDMu+RWPAdLcJ*mNAnYI6sPU*`fYz2QfUGg1MuMFivszMisJe4fhA8& zfz+~QDO1?nVODkH9>Ho&{@T=2^$#xQ==pT&bWEXjjU2dYbqfT&4Q!_tGm1_Q^qy*i zaJ(EtC@Y6s2d->1(BtOMY_wCV&Vt^Qy$5NqdZQ}=7&ClJgC!zU{tFsEl9X1)ayPQl z$yO%m)Z`rAMn=P}omsQM+hBp0 zf%O(v)-EvA=I1Z3a|BO{Pu^|(CAzO~d{F$NeARMl9tcCfDa<(mMEQ0U+Ik(|VOI>D zmbHjAO1eJe`Bejr0IoiEok#biBt2{&*mLqrPuJ}mn|ecV_&idUeo3pYg#ZYK(bgtH zH27cX+UU0*6rjPB@lcl0pB~I zaSuq?&*{Kh*9$VsCtfR(af}Cd<`ybIkk75> zgYvg3zI}F6F6`iCzr4vgD+HEV8L^=^;OTWQrd?+7w=z4?bjf>vpl0J$^IU|sWBH;57T^KL$s0D)EfI+IJG;;H(7g| zydt2_qr$*dgsG9w`(e%C8~EkpEPLkpi#J)35_@6S4(Y~vCpXz5eeCpWs7%u;K$Kf3Y?3-fMm3;8y2a~#FHgtE#$-lI|Ow+nYNK$`L0xXS!iC<1055CuYpuuA6n(BJ<%=5O^5;+ONl2}OM`uH za#OG53m&tqlFP3OH$-_-o{Q;*U5>DPl->54g~9zZ$R+mgW#OPfNury{vY+0{)&?2< zyjok$n2bK0;*-zF(%&?Mi=t$KdXW}};OK0pVu33i_MvKbQTtv$x@mF$k%uS8s2%VP zUB!r0Bi&(JCFRc{gY6Ci9AKW3{nh9B8c2Fu#yS7!0E#d>$_v`<2vXxJj zTgC&08p6!(Ag^|G%#kDuc{cf`N3NE;$VA(@TPGjq0_047@a(Q$eU)&OI?es^fiMeJ zuv(H{xqCot6jpKuxqbK>ws^mrF#pe$RgcVnGz?S+%D+zz5ZFMdfMjWyI*Z^N84`SR zj14*CbD1wO;ukg3-WzPFugUO0%AZX&0AX*74f!Il0NRFgfK77dzwBITYl3nOYBK^| zV>jl4eUyDR>Lh@hH#Hk5S9f6%z{-YR1nv8o)t zvsNjSM8s^Q;DClPv*vD3DbEw%*Q>uz*n+vAus#Z@li!cAojH)VIy!bGl)<+J8cLK; zV`>Jf6W5HZzp@X^F+U&JZK2y^)&b?yUewRLDzfi3$FiQpl2#5*MWGS==BdCZh*`^>yRW@%DGIh?f>F9(+SR&2xD*V#?kEAKiDA7i+#9nS!9u~JMc==HY2PZ zugCrqUMMRZZ{CJZWV0PR4Rmr0U0n1wkwXAl`U0@GZQhJkCmLV|J}^oFciR$;thSxq zHQo7Q{ZS;O5*Z)Ye}4-?-xi;gWviq{oyfZu6M;VJfJM|an_-wmrz~*8&~ay`4kB^^ zjyb%LquzgJ%7Kh*M<Vla<7>Omt2c_X+MuWC5Y;0#Z|+H*qPI?hvT_`TK0BU z(_gRmp@8v7dO$xglEX)eU;ZZ7)^4Af9}U2WZQOd(LRUDV8OSi`m7<#ZUtG~* zTC05HJ*-9+BvEk0V~ZLsKQ4~jzLw3$Hv!bszX`AiJ0Gru3G?rcnqS4TrzwK%-)~!S zsq{JGgIGK*q$m@hhSJj}~v0PxcE;4NU6x&g!yo|Js4~bbd?j z7g3(4k`*4zktq7(dCj}&QcmB(JvBeeuZu`#nM9sNNo!*~fR3BdbHg*OM2$OLQ2+Zg zS1VieG@d2^mAKAvT!1$oh|J!7vS!MhMr)N!o-R95z3Edk@2qxfp-$8`#*7*3)kpCZ zSMefm-$J4P)&q~zz+Vh-ya#DU%r&Cr1Su}Ih63pnbSRR!&hYjgAAqNLeIh!O%XB#`3n5$V7d$Ci($54}k*Eo)FzV?RR9 z%XIdEzJWN^#%Ah%t39>T^QDJjZ7M4Z;kU(*j{FVB&sHApCa}r+ zV&ZAuZEY(8I~RtZ_L)Katf(GuCbM&(8*Kb81NWa-R6ksLkytE5U*}64?#~U`QBLYx zP$oN*3I$WL(CrWgvHl&&Z^9rA-zJ0oiYk!;i=v4(1-_wJdCtOkENT{CL8 zfH0vQ-GDH=uM5GkdQ#$v2WriAkN_)-zW~?z2%OH)1BOBN=$uNv30XD7i$-)KU5~$n zkQ0Z4u1>;x9lHrGUda%rBdq})Y9s{QqJFUz%9(c294HG?Wdv-oIk$1j4yUZ$lY4p` zst&gXJ@UEkeQab?qI1hk^dVaG5!%gcUZx52g242TY@SzBYpumTiHUH}fN5=tcv<>K zXRW@em9)b-J>a-4Dt$YK-1h}O7dxGvn(87Yt`xI%3=tTpu9bLrUAB}8&O$JH$hBBX z>%DCn*4(!d-|pSg+cWgWt+cFDQ62vuljmc9ca%3O3Y)V@u+dt#fol;N`<1$WQz7z; z%0|;CUPd;@!@H6GGu1b@KWraqx&tldGp!Jy$t2xwI+t8B{pR=~Gr4lRoPaY+%DCSJ z4XCmc{FfseGbw(v5FkSe1IUnSfvRl!+sNI+N9RkojqY${=Tcn^*5rs5-1?4?-UqR+ zT%c@gT2q_iU+V=pcO&@D>4<27J+-rIi;bV1?Z6unc~+^{O};(LLuJmxB3LI%Ep9qe zN{jSHsXpA(2;ub&?~1spP1S{p@ahbK{ju$_5)MNk;XawV;ITJWLhzcL!NsDsPub?d z=4Fcb`q@NW3}ls!3_pD@Kc|DEzwS@EYkcu^tV6R_?erQmdb-};B<14H98MbF&pvi&{f{X62uTw?8>|+FBX940)SuY~a+MPG9ZOuM-jp&jiQB-h?WjClQ?a9x4K1Oa zjm4B2$C9Vn8Zf(2aa#RsQvh%*3pyE*9nK9Dd_456KNWHPA=zMl4&6a-KC-Do8LebH z3R~^(SGHs;Aw4Mn4S@utx;LwI&os+lK5Q$d4yl$tQT8~^3r%iR!e65j4b8i%O%_0~ zue56flTWOYT_F$l4^Q&wqdU|`%LaD797`y1r0d|$Rz`u#kxAZKi9yP$d<9UbLbEvC zcj302(auAXrpYIyCb(da15{13&!YO5%*gXw%*~WB;`KJ`1b;7Liv8sAw}MyCVDk#d zbJldcU`Mop3-moP7b^=J5|Ss@vRU`dN2L2{xv|Q#<%`d`1go!#gN=eam*JWZ5HHnJ z>ufX^DScQePycv4zT)-doMJ97G+m5V)1l40$G}v?!;%n>FogloYrtT|$3U~UkDtmV zjfEKHQZ&RWu~Y1RLFNL|01%c*e_M>sR_hB<<_eN|BC+I4lf4KGK-o2K8*RV{`0zFv zRQfmjxNk?dp#I+nB1O*$=$z8CS#R->n)v>*;CCfvUx|Mq@y2wNW5BWd%jU@mQ7P3d zvqd+>W-7% zn|6N4ibze#`ao&eg#L7rQ-2z!AB#MR!5Hu`eR_kH12(goq6tbZ>9h*;Q8 z4kCd3!zQ)xU0&=m6+xq@dW02&(N_EMLr#nL>Fys@&crRG&@DyMtOBIVBb1V$3D@eN zcf$}T>9!h!VenU1`4ZqhT02q=d(&F~$$#aAlg%{7H0za-$D{62u4*7{ao zsT3`8o-DT3dE}K|WBTGAL)ucG%k87;*e_dmjq%*+0 zrPcKSvo;a=dv_XdrfggWGz$R>m7O;0dUa<+>RY&W7`Emxu$*OHmv&0*^7`dNT_04% zeRfIKj7@WNveM$HQ;8Z;H#cS)?{ZQbRf zcA$B|K=1u8Z10Is(+kb!c2*mHkoh_-AUh@{>R?i0>K9u+N*wpUOPmQbhCCH^U9{-< ze-$&m5KAW_Ye^)fI}n2hJxgvcuXrGmf6!X|UzOuUBh79f)&|G@e_b2T_*U)_KoYfJ zv~VuwGXC8l(wQjnoJhTwHpxeyM#+zbMwt1XxnHr+_h%%VL}jJC3*)E+s{vJDIsomU z*Pt-Y;^PYu{*M+bcXo6Y;F<{)oi??~`!T@Q{dSIX z_EtUGJ}C-lLe%?kYSXb@=zNKyb_g~vzQ2Ia3Wj5ot}iAnsys7{j8YWEM6O?(c^9DL zUjUT8vi~@pi2r>$RfgWZIzWQ`{^bBN?RSvbeM-cJln51-?LV}ZIy70Ts5E~@xeo9~ zFUBhuh*IB^Uj9yaUv)SS#UJ-yrgCZLfNbnh(N`+Ztp5pg0^Fki4*sv$|5Z5Zzf0|3 zBlE9$1=@Lh=;iV6#`5o$`t&QnDf!o#_}7j4*Ma>1iR(PK>1&n6k7}LrqYug!zP(gy z*`@xjk5kVt^FMw0?)R)^-CNsS7ruYywUM{%9n&~$4RZAt?|v`18gTc5!NT`vN-;BE zy=xa~`lsz5?|!W!-i15#+q#7xp1M%yFE6&cKA17L`rVD*e+{(@K?dvWSoPszIoBM$ zW$_14%fz0SO0H6>{Oa8e17A@cvVHEdSyNDYWdOYoP~}6jcN;jid&uavGe;t z{H>9z%NMSys044g&RFJ?v0~9vOav`l3fN@%{&Cw4>eV;3Ez?-Is-n_wx}sFQ$rNbf zjOLqaf)_5m*&U`hyeQ;Hr?2bmexRgf+CR^L1mw_X(6Jo zCHbf;+U3$-CFZNna3LGXM1F4@SXzRV51i1_S5aZ*e`1Q8L)hGz%=o;m(jT7jC$d{( zOYVQ6vxF5d;(R$}BC!_>#nc^^EmA1qQVgG`jvaLULZu(I@;`0sU&*5A);&&l<=^#3 zL^}FuGycBhxP+nW3i(2EBUauKa;Y&&96m8uOPHOBw+|@-%sTZGvwrMllnwX(lP1O2 z!B(Vv;{@o1XMcWfjxTH@JvIMX$X1rdCKVAnfgAaUsMx6K?)&51)xjNBo>wqQb@`-41wC*K5?r%AVJK&8?=-x2&Y7D=piiwS}oB&*|}XgidH+ecu^%r-NgA7!WhhVg5!c! zFMAz(*$=6uxAcF~IWaRw^UU`TUN*Yn3})iFjfXI-R_n3h=dMAIzk=qA>|;=lwOAYd zWEMs`Bi)LFZN%}fvA}JWt;!lSnvVh8vuBo{I3-=d3JKX<{pe8!!OlmpSF*LQqWS>P zTOx-TaY8f)=XP5NqA|hh3@gtLRm~fp`8k&&>eLeAKxZj)Q{Y|@1Z_nQ)@X?9Ju2B! z5fQ)yK6TR|Z_+A|^WurO!g%o{km%_Ahe+Wb=Lh%~gin?))La=0$)rEbgR*kA3b)7H zK|rW%b-V#0_GE3}t=g;8P(4636rHVoJEf+ z6#TH$4iuRV0* zrAAWx9Xs=5Q1Y!9BXsjm5p?)9pc%#RrQhv8ca#2hh#c^5**64Mw(U!h-O8z<9ANK( ze|!di=Lp5ygi<;-Tiy<+#nTs`F3?Og8QjV}-qFc-JbT-?7958_7e^vaS8Eb-24+yG zc;SZnle#W`C2jW-&i~(Xh`DVh#uA*?a&QA*dRyUORycn0tPfW`l=4)hNl9J?;QnTx ztd5o39ASbe>U9`Q>J*7()Jr`*Cc@031;-;j@?T3N08_LOwH!lP9`{y_l{??X`oCtP zAb69hEEi*IbP-mk+W1~AuzFVL2{9r~JZ+1L0-oWX|9|?F&ozOS0pf}tkJilQkM4%g zxv{=Tjal0_YMt9yw$VT;$Fr|fhsQ$0hr{Q7{w7LneV{s?5xDBx%C(=n*Zgas?1Ht7 zLCE+7Z38p-a@j^EZX+|I$p^@T3bw|CFn$5_0JF3n6!zrQ4RT&dkLRr)CFzN`iA2OY z)=$y&NO5=uRCjXbjxt=S*om?h+blf5LNkj>(0_RXS^4SV!7{bljQ@FpAt3KcJd>y0|B`xB9;3BJ zaQseL)v))MDY zzyUf~DTbKpOSYu_2&y5wMo$La>!GX-o7-}eQ;vOmUdzRE#R~LyXIfReGWYwmR5AJY z%85n>M_Ur`qchq%Q(IFooIaL!lt9rH$i%TtC&9U0=C-ZfCF7aWeXJqoOg&hm=n#6@ zJrNx#ryjn&UwE18c~MJrih_L|8w8kx_D>CR9i5zFi*Au?DaOXRlNx}1AHB zIYDzH9t7Tz`KeA`G;21(Eh=#Ayt0&%<#rFAZ7O=x#eHOI1-WPLLa;U#C-5xI(k<3K zuv>HN7q7m2d7fYTvIhMW3+?n{BfzEy(r*#>r<`yL3k)X}c?mL-J)lQ~;VH9O z9Z^lm_Tno% zK&lkVu3zgp(&Tvrg4ILEQQn>lIfU^hjGgP(NXg=|4L9cu?0aSdA+6Mb_}q*ZQT+w; zcoq(ZZ)x&|rp!|v39K0I9lqNnvRVlp8i2=!@~KT0hU~BMJtMS$P6ZSQ8PL3YOKKjA zK97$mImZ`Ms%9kD9SgGHPeRD3^L9*s7lw(E&+yFMT%o%?3_<>z(A25BsB(orBRnsh z-UXiLYzm?pp~zb}?o#!XlPrj1Ik1@DN(FJ;gZH0=Z+APz!cXf_5BDl&FXwHnKBL8?h&NX~T@GzK{OuNagOGx$sxpdrHg<}#Cqfn|c zI(w7n5IQ zN+sb#)TZPv;pM0eH#xrtqGOLvSCAm_Z5O3OYATl!e*8}u=jr~rH2!tE9bHj`_U7t! zp_JPe^l-cJ{-B+lSfm}!jF7cc%FJkf;~<}XjL+)%juCQk!!XY2Dx<1bvYV@ye?sap zl$%qUo^Gdn;Ik6qI2Wr{67Gu`@Ug?wg{ASFU)I;3Vibsk#0|~2ujip!9}SHUL=xUs zy}h&JJ8>2VO&emN;IA0f(K(U}XsTQFMs=xkphw4iix*yk{(ImeIxkqXq%vOFmy)2a zbd_O?D?laJK@R{S%cVRD$+HhTs?4X>DkH{rGo~9Tip?!-x))1fFBS*ogTHN+G$c9h zWb$tT^U}^sXQ3d9hf*=IF5zY_=&Sk!sv7ExGrt(GQZqW?00B&+BE{n^$||pZa$(D( zf`oS_b`MG?!LZsH{##p9*%`3j+%fFvf|-JSiX%Hqxz4z@Em{|BIJaGG!?;B%PPDn8j#crqd3*t@*BxA zt?DuOLmC>RzK{AkvN?5Q>7GeN?c4Ox*NXHm=tF2{cMd0``L@HOoF4`h?fGFjglChX zub{6cZC_KU*;4W&c6Rqhzjh^< zE-h(P?f^z5tmHu>0mG-8k(#m)2fL?Y<+u5jUjdY6&v7&oy4VVWJXbG@YjxJvQEa94 z(djvbBnAB80R3h+PbcLJ2jI#!gF4*l9#$JRnS=@}_*G+b+_?z&BXzyCS!T9gsgzmW zAV`O7ffC!tE(zc^)1LiVJBeBVbm`F7IPCTqr;u%sIHe_7c-=jN9K~95|J`lflpG&Jdx|Gj4n2^dt z-QVotn^QOBOQFyU!rh~8`<)PA%@2c9hq_=b4LD;^(_wIR90=c4%vhGj@Zjw3Z$d_5 zQI?Zif4RNSi=ow5Y43QO8grN(SUS>*Aav;~WTVNBc&bfDu z^7sUY`-6%~@uxnh_o&~n?qpPU^5RoCCWI3oilTXB^fvB>Rb!?0;25L)B>wdAEdFcP zytOBzi*->tZfGxkBL5T_pYldPK!hIgnD-bm%-m3Xta1faPb}9@VtRyx_L&T`6qX2! z+f|GLxbP^|BNmg)K2^c+;c$HTGQCtBoj4;boxF!_{-W<9K*ehaXH$FLdiaf&rA8&` z_4wi^jN>xaEqToNa~-5eX7A>usB5l)OwHYL2IX{l^y}U}jcS9CJVmv4w;FwoB@22} zv*4gLT*xI)Zx>LIv9zt6v$c=Bg;r2?v>=dKz}(u0081Ig3~f8;P@j9N7CH^G)vb!3 zD!bBtR7-yYd70q67D(Q{NkxVD3AlYGaiT(4oQ-x^hwh@>7DX45(O_<3vNWwI>-}Vozy9nHFM7gxK)ICe>V0VH~uJ;RZpw3!>RP>G_GC6Mz>l<3)`hc>DoPI z6Ab2zV1c+y3FDt$WVBhdf`FG*C}5ckcaeOuIv}L)ac|9ZS9U2rt4U0axR{yYiL%l4 zqb*phVcf1P&Zf{&E_4fOV;tirkVoNnIi(}jh4AJ^DbKdVSv)vnPngisC2FgQCySG? z1mQMNRezGzUO+|wL$LV1TnjpBo7R3VLt~tWpE8bPYAmTW*2|6RVkd_d&nydQmR%g^ zS>L0kxIWYlC`$LiAUNTuYs7K#WQ~u}iFIH!)`#0H4h(LCwZwI0n$SF=zlT4bw={UO zwF(a_R;wBaJ%y3PLNPg-sajVjV>}Zfk!sYp&Gc-Z?I~QWI;+jxR}re{u{xrn@^{}q zB}6s@5+bjTalb1WC-qGU*&R_2ZE^tN6d0lt4|5;Y!Lore-mcVzozuE{n$YBK0eIA1 z35~z@e8V07dLTl-dYIsAV|P(Tj#^8>Cwnpyxtqf=PueYZ3u-4PvdgD?rW+Tv$$b)K zfnWk=sfwEtW7##<`h|l5GKrW1nDL^e%s8U0+|5_<;567PKV_)L-t({1p=Cr#O|ikg z>!tofky=HrrFxW;$EakZzOBx)`6HWyCHELTTRZVEU&?6;Y}n}G^%UyNMK#pr;_jG3 zYXo9HRGJ_?DFyJJ#lKD3Vhm8@KBtRET&*eW20CI^ zS|>j{Ozx5)MHd=&{79j6TI3xb{#Nop)D-?^F7mXsUCkes3>$#Dx`9S|PqbU@pbB&i z07O%;lxWBoPHz*k<=(U4^qIkMH^inb{Hh_KhfN#YC9e~2_&NCyVFeiE!WgHu&_!HJPT^raYeXXIhXlkHZ#@=tZ zNVoizsI4k0$9zAc`=KhPy}am^d>F4ogm_6nl9JHV;J= z;$V$EJ|#@s$?9f;8nB(UpJSHvA|8aNSHQ+jqhzmd6E4|J_Gw`Jip4c?AYtjuqVYj+ z?#Wdjt4ApX?v!gl)xe%l;ofiU4wSU4qT5m2=1(g-t8y6b^KwJ#d4c459xwE~Rm$m_ zEVmm;Z9@$E!J!tbz!>*za9GLIi(I;MUlXCNnRky;Oq(T2qybsH9oR^=?2Kd{=RtiX zp8hSnO^-p)Mph0?hK}a=K^BoE2wLwqDl@|JE*0_@K#f_`oGP7krzKTQARjkc8j-xB zgZ1s4st+v*pqBah_W>ag{2;d3tCOPQ%-tOJB#MVlTNKq#r0qDM+j=NSm+oE#Gd=}| zx5PD1#Bk;3PAm#)_;8I6h>vCK{zaydOB2t}mObIBQ!7GRF}xIQ{Q~mUbuwkIx=|IxRmdp!b;AW!Tk>n`GrueP|pDj|kEBlfa zr7B{I$E<)^@A=zBMf+}f!r2(|<8W2V+O=Ni`^v{-yC<#l6$&@+G@y*I0J7Qw*x=m) zn0(u@w);NI>*N@<|Y@ z=zG+x;Vb7XwBo$HymZo|VVg5O{5OYK^1x26XF&c=!=%oAJL5m(q6ZDZ~Nf zkdNl2&|IJEKCj`F*zaLXiMJ;-qw)=ISpx1T$rgs{e((ZE-DPfiS9;hNxgq~TY>B|N zJ9Hdjjd=xPE0QG*kGG?~`%2}E{illZt(~-wCE+?27)Wo>dCoSBHuFizby_BZ(8;eX z!;2YFk?3L3k4geIt+nWhdTEysHxoF-yKI>ZUVX_8l&)M3wA*Y6ln z1L05Ico`6+M^~8w`@!Jip~85Z{o;bb;q& zU_(kvEP!H@KHI;71TxXK@Kj_iccvhl2ap5D2qdw!{IG+$-r?jq6a3Lp33p>Qm^DS% z;K$(Vl}cC_A`N$6Sd3F^%|TNeJi}iv`Z`oW&Xr z!#V&txK{yGvD-S?5S}4i5c)u^(0;a|xC@P$*gU0*J8A>4@C|^!$US0<@I@{}Xc@|x zx&4RP`6awX>&xcMHDX1Ai%P83MQ)(_(yWClF+Y8VSww>BA1P}w9rZ_h! zpV{2-N=*w~g@;Baitds7W#Z}d2f~C-T`KMkB6ZP_1g|KJ-Ctmw9aP=dxa#wG`0rNs z;AfR5mFM1MgFn%V8?+VZT|bE#j~?>fqPc(IFBYQ#)i_=ap?8~_U@n{BtX9>997-b} zBbRa_-WFg|4Dmy))E(2`61k8O}Q3C&D-cXsP zOSKX9U>mPDlwHl>dX2RM+Q4I7@aWf4SSQ?wrIj#}Nz`P3|C1&t9f0cJLs!MJv)mRK zMMDucU9$7O-uJnLi!i~$Lrm3Gf3tp^eml0IDyRX0sZ)Pgv0b^T`Ne{5ILljUfTuix?T;0wh`{>ri>iqfOo3=a*}A@aE)*e zmI={UWK_{AMiE??!*?B*btuwk&@YZdnuu61EcMA;zaAzt?8iKHh@2W7^bf$?%SGu^i zS!enlvDSUu${zcp@PO2^t4A&?kdnhOJebGfC5)w${EDlpq0#kDr9SmXHKT7EDc_!$ zEbSc@SRSi6s_*$$D*=qtC}!j~Ry@l#>bqVyxxwr2m5t{bq`w1tGUYX~zfye_{^-ex z+Gg;@qr}*53smW0-CmbEPQ(Fpw=^Bl7QpGZ#pLc}2J2AGRG#rS`~%+Y7O$h*={S4N zYGgACV@kX;L@NiNZ)lQv07dMDFdlCeFZ*dj=ANe7;XB^Z2(B7FHjt}FubCFLtR^o* zTYodi36YT3frZ}3cd#7vac#Mnl;)U2uS6%as4J2Ur9fz=9%*Wc)7Jve;GkEbSM_JH zPJqfRI{f@oO|8qU6aW|B=UI(Fv_D}levak~ns2x_2a0X=c|=bn&x zrC0=Jc%8`^y0Iu1gdJumU3tPtMdkG8hGS5|eON;ylSR>0^zeXC@>x2U2g@(#pLFug zC?(t8`CfaEt{dbO#jAxpW^)N=19K4}8t=?nA^-n4; zz^XHgN^&NTH_w#r!F3;CXfMdb2TszH)hF&MFEsiDS~@y5odqYDYA(xHb^qEHgzKd@TB%(%4}dG#7;v^_g%2 zWj~e=S>*T7$T(3njeGcqSWQ$(Nu1KDEAzlEMS>37tcYW1#HTTp6J`> zK0jkAHV(NRY&FfmaFEbm9m|&+^{uK;Ay39=!!P!gE8A+-@Xk5*B>ajZYp*dFqX$4p zY)>nCysCgb1`JnH-R_DjuELsHiSo3%mj9wR8Eb`l&UI3oh+aES zBbSJxp=3K*Uos61(1A#znf|@DwvJ)4+~1JuG;6=-GxrSXAWN6i&jA}Om}Om%^|eE2 ziH*^6lRg%``$-Ok#uvNIEQ6vjImYO2g1Fw6M?IICLbb2uYX$)fkn|UHCPAnQtSS>4 zOIo(B1d<}zM@sq)9fYV&Y+TB5o!H#gq9{MDcrY@rW|-y!3Z#vLuM}w}JV|(_YmD;` zl&1#b$9a4wl9wU1!Xv?Z84!AG+o0_iifTCxK|wUeQXuZhYN(D zBL+){^GT37>Z+X}B2Qs56J7$~o)b0`%NxrM&RH7C>`$nuATEA-rp8)Qj1LsUU2d&jTiI;xAUAP#VI|%m<8iDSz?}&xVY&QDes{92uuC&o5w=BcID4;x@5%AJLp+F8B zD$1B)fqrhd@{rpp$-Na2j&g8nuxKV@E;si_DeeBjC>bumx7cN9(t2(oCWjtVct-Eq zIqy@SY=S^sfUo%4`(C4feH9F}d)`+y6Z8}Y-_MgN@+Y$rU6OVkO+%s^Em4y`kU$6F zS%0*hdob!~Vvf2K<=&lC$~1Tq9gRL6Gbsah#+B@^5WiyLb25-XQ*iLvw_Ru#ss*q^ zYW{PF#5YRfGlb{@p;8El)~|ITqor+ zttmSq#5e|BI;ROKX6uM!isCq~KA5ti@mMART&OMyT-+YnOewm}nA$z|JT0M1s16Ff zB8=hGgI&*KD=uuvCPe0R@z{PwHOTpf1jkYE=B_t+-3j@~`S6UIxfBI+q|Sdn`*>O< zeY`At`#G`ho4{q%@L12>!G!8=xi0$lbb?_nP7QCC z`H#sr+pmnHj63ZxL7koLoF?CE6f^4}*T$2WZ84J)NPqW^|>ZUb_30 zXrG{0AoO4%R|Vw=mqhAc#osd`5vgSyT+ls$^g4GXnqQsCgkl0RY>5X^^@Cd4fS< zidIs}iLm=<@@N^dWzJ^k*DivXv`6n|XVu09xH8ZJGXTD-wMHpxRTNndpP&>iSGiO! z^7>GN0R-;}lR)s^%zZW`v+(iEeErbP(95Fz`?wxgW?mNW=@iW{a9LO2PM{tK(NJrx z*VF2|y?Jro6$6qw!<-nJ_aJaA3R18}PL|EwN)tNyW%eT6nmrGr8^7jskGX}@#J!rd zR-st;2k**wj!(2s2BKCZi|J(!)mlk7-v@=h@ufAD-3FMcTwrL{K-oIMUFSYOz2q$R z+x-A^IrCqvMuHm7_#`nn++hIh(R?@&<^rvCFe>q!J=af=2_ttEp97eqqOAQqUu4Ny z8&b09YtLgnsxc=$l}$jV-D~inap8k;)uvW?%u6f`A|AmAolkJEnE<^~T5Bewy3^c2 zajv78R63=trUJBd{Lca#==;>A+8joqWF7(Ud)#G#UB~79z@W9>yB1`DN>1LhB#Wq-Tr;@;k#K%)*p)YU1I;N2LE}%cXycx=FnA{mtlwX3# z<9N?tMDyfRrQ;rAlT&>G>3K72xAYfOFFlg)NIoHGH)f#tUY27As&oqb3K? zy~H5p@gO3SFtvH;%nC7l$HeplpJCASsl@Q&No#al(1pHz&w!?EPCP*<=t6$7F?13gsnZGA{<&o|600L~3P z)C9n}^@KK7*_(Wn#N6mx)IlC}ZxtqGW^s{r{eSIUYfw{16wb6Wb*dv7ZG|#o@j=yU zYN{w0rNla-21ZeIghC)pD~hEM4Fw?~2`xH|A`L_(MG#s*Q7Z%o2@Q_~jmRUAv;m0{ z2`G;cLkJ-Wfn3S$-sp6~qd(g}P3Hc{?0&m@_Ut+5?!D)ny~K%5!IE}QGo`K#e0dV; zxmd_o)3rKx&I%nAz#Mv#l4&wG0q4?-#5?1zr=BG#ML;>j{#iN2Q(re?Ul^I!c?UL+ zVS9Ro*QXY_>R@?2L`_+8yRor>4^Ep_Yi#a&aM3U^Y+>M8I*9EfQ)i3_a!K`Q|p=;Ujc<)Qr_osKg;9x;TP+MhP+gCMG^WqdDkQdc@&KzXJy zm2uTweIbjcavwU)_2HsW?ewYGF_+)KDc~SbxFL4N(=w{_DC~3*NlKe1zzY?v)x99Q zTGxOtKY-}_8SZ`5hJ|on5jfEWwQHXDf~e??HN~w+(7fvxAkQ#$+YGHkEu&9&=))(s zf)oiBFj=V6^X#@zsX2nl31$-sYq8)^D-h}}vG;hs^Gkt{1-~pZWC8MAkjBj;oi!aCQZYLC?dT+bHa<7^hfLGXE&`*bw6Jq&G!A&e@6?8o%QN!*n6nR zJmT)|qSXYp2SFwn<+3;mv@>IH{Ckq`Mx@O0WZbv;Qog9BhnGxXEAO!6*6@?MEKtMl z{8kqX238C#l{qg%uxy@bi~`+z$gL;h?@RrW5(d8xy=9H6BCa|%f?ZOr9#xwr){V&{ zxGbhw8UPS78n>PVvi-ih9I!v^C}`n9=sp6MN#rWlU?tK+N%eYNT3a*jt|B&%V;qh;8y`12x&$^%38MAqCkYr7aMyi8oLLi+_*K)FWxAxom^qf|>`y2gEBDEI! zEZ&L4+CXu2e6lsEej{vSN6;K8u;dD$D3w@j`jZ@#jmSZ7sB%GWc6>;+!V62F3VTR+ zpL!y;8t=`NXgF9LE$s?|axb4PPL|v*awMNPzDUX~v?|3W{R47*4g$SkHzoElvmA{M zlsBocx=ao^z1Htd$p7Pz1 GKmG*^8>4*y literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/images/security-control-classification.png b/windows/security/threat-protection/images/security-control-classification.png new file mode 100644 index 0000000000000000000000000000000000000000..75467f2098ea339c96748ad81e931bcc0f54c4c9 GIT binary patch literal 12204 zcmdVAWl&r}*Di_$LSS$w!GZ;M53a!p0|a+>4<2L)1Pd|*cbmasa33ULaCd?`2_7t* z$@`tEQ>Sjdzi!p7x<6)mckkY7_j-D*XRY1cFRki)CvcZ_EyNujWH<*i&n|Z(aFmKqpDc>Ru$F ze}$zoh`mK{MHQ3XJMZq6JFKi|i$-!>sy?`Gyw1BF;|{qAl<2sL4jou#?+$RtB?GUg7(m9n^FZHK>*$(gAN|Ln?FgJJO1p4x=r^|H+BP&*zkryly2ACfX6G zy5p<`Ox3ysD(ER9~)zGS+@G~{;cx}ZE@1nwm z!$z>hR^CY1C(|R!9@?jCPHQn}Tf^D5Kj zb^STX8;I*;>3%43?8yjNN(aEBcv$w`%l>%9gKdvhB_ncc#jAw2BNcC_oZR$w6sC6? zKtY?ox70tZeLdS(k^K*Ld3T41x{en_tn1~WI|F&pZGjziN*YTc+;~x$Xz_uD__Dzu z7i=16_n*~YMT-geu$7Ci%SuxBCQ?f~9t^hW8tLPi+3Cg|@#owaEeWful24;~cdcAy z6(4tDJGeAlDM&HxgMj#|7zz4yf6eY?@SIfN|bu-+hUpPPXpaA}0&?f5^KunFp}nsD9GTTA|WI8bFKF_qtWk z<;p;5zr}~qfAHA;8iqaC#U4nO%%mr+C+eK@@{uf57+6o>ps215VThI|jzN;~uC<(s(uwex2Y(VXiT;ar*nu zHXWlTB)5~5g*^yT@v2bo?Oe_JR1$kp^-==X|B6?kQFH1pH; zjl8hh0e=Bv4@b4@F1~HM9W^;F@*iw9xoFsSgZYV%Y#)Dtcj0vZOg1vF*VKm#Z5;C! zP;Hm`3bPoI7b!D!L=&fn+;|a8jl1T>WmRzdJx5fP* zYG~J7L=ke02h_Lx7&N4Yz$kUK2B$o-hg>HbQm)fLtr}mlyEO5=qaSV+UFVzQTeMQn z>CuVH8<q6NmF~JFxMqEG)vSS+q0sglum zvu2@x^NP=xuh8=he{=oPd^)5p20nY+eGYBjRbQ+f&d!IMNSl78=!kH;8~kUNBTYf4 zhr)XEr&g|67wMej-r?c2HjOUdZ;YYq3`tD4+STL-R|9TOao*10fUfJJ#0|^V4ea4% z@wJ}S?Zg_8SJa6;g2gn1G~kc@Wq#*1zs17B!7b8vcB5#Yzz^loOe$fZX4}c&pe*9iB+)+t9_E(BNrl>;m+8S@wU|ZbK)o-SD5$Xg=}|0Wsk(OeCEo z$dAm_Z#iY}FVn2j)HdTT?KV?CI)N{ecWDZ*@@UV=J&?1i?*S)H%@#OnVWks_uxKG` z78h>RyV?uAAZ~8Ib-WO13!3{~sS-P5r}Z9k;<_Gi{fo{0vnQ*e?eee@f1a^u;`Xo8-hR7hnf+(S7Rb!-k9fy zJCB6a_SVR_oBHSXILwvWfBboLFL=6tfyF7AwHsml#F=>4ddj1Vl#{N4BO#pM@x$xH z{ZsAg&R)_#8qK1J>0cdpYhBn}7(PefHyT;ZG7*9yeFFTRmiLNU5HM>M4QAwqx)73B}Q^YhmX6 zBRA#+>Ua0B6iqFu=MGPqSPa8Rr;Yz3NGv|PQ8O+|6!SsXk|~u z`yY>xb%jV1PW;hhf2ziEi2R%^5WC2ho!QuDaDOXY4T2(l#-DXz^C7z_IN1XwPw6Ar zJ^)VxfASdokAKPa9wFVRe=g@u3&2N6Bb~d^3sFYA-i1Z8nx}+@Y|PHDyJoHO^whDi zj=x}}|8qT-7ljqNq?opOo#W9Wy^?b{!A+_x3!e-^WgPMLh} zEpyEd+euk7fuVo&*A5yUQQg|Ly6XR!+3lp5{r&oDtVJY7KgF%ZAmOb{@a2ks&O?}Z z_S=qb7P*C?reDe-h!FE;Z|KUox5rxru(P&X8?n21N&XIr9}QM8Zm`V_H}Q_xMxuxmGLQ`ZxcPeVdY$`Mz_OI<+g-H2bw%ap4;8-jqwrh{lztE;4o z2d8u}(*N;4({2aUZJqV>@E+^^5R~eFOyV-5c^P>N;3UV|IRBI!WSMfF0^oXjRX8(e zwh^+0)m<_4J3Bw3lE!lz7(z@E6ex`3pD_RMu8Y&|?N7akcvp=HWH2r{uc+x7$>L}z z-cbq`SA16$VvbO`MP^B-fdZam@%Sb8bS$odG+aqm_^n8T$Ld!f&q+Ej>%M+5jx9m0 z`}iBxq{~_FLXOFf#X;TG2 z61JY-?@kOp9pDbRw`-sbQBIFW=EjI!WCn^Suv07hpQ^>e{}0MnPrFhNH|r1Uep#Lr zG*VB0j-GDF*Y9Z6MUAP?RWUAEW^+)*q&Ssc1W_&<6O_LowQ|(na z_O8MlY$*_#@-$fI>9ji`vhJ6~WDaoj)kTApkq@<{d%R4JBGk{Yo7gZ|s5LY-xmP^l zDYN;Roo}bI+WTEVPjr**0yjX@`&P|C6McJbLs$=K&q}=oK1bO6Ec*mYc)l*KBiR4b z;Z`YN2cyLCX7W3hep7Bh_*@gkvHE)GI!0A=oo2JCVDRFM?pQ@owQ+m>57g>RYHNLU zYOk1k(=`)&HGVH2hxdUsEcTx5*CG-Mhg=vw15V7=2io=f`CWpVmh$Vkg%t<7#A&Kb z3*__#0@KxpH@FAq8B=7*&xAM)wzjd%OIrfMlUZl+g;qSGOzY;7KOU-crwLJxCBj)) zVLwpmgc*|g87&~JEGiJq+z1sJ8F6}$KlZAKP5 z928;0ooc5XX&&o0>15w%GL5;|wvuxw-|? zWH89=365pcq0m8OX$i4O<#iebS2$PR8|!h&`*(k~rq=mun4@tp^QgHX=`@cKO;RLzV|tFDpr(PD-rTus*~e2pVP#O$ zrC`qGPtx%pKQhf#%4|SG&Wq%C-~~HXq#exes153>kzD?uSe~ndSUVY20ZJ>u@LLb_ zZu80XqudoI0Q78BQ!Af7rg`LI!@&cXYYaQl3Y^7$S5T@aks>6tkxTMUY?e7$!ua~x zOtQb~W9#G&zl~3XmCtBj4tqnUvYOrP!nIaSl5XKnq+ul-9{P;R*%dswHG0Gl^5>n_-&37lZe8 zv5O6sW+@;23umm$jR4RUvU#69)Ax7+MJ_%Ht+7q-cBQ9c0$0}|3wMywgH)Q=x%4KI z?;XJc%Nc@Km9=N?s>^4ix7kwM2Fff zb-7E=snt-a^n;-C$#3~Z?(GJs-fYxvY<;d{5}=An5h0yMe}Lh`4y^(QpTu)*1VXv+ zkzexg+Nl4}O76c$G9N>4q`Ypsm)+f9!t%{--S=2+~KW6JZ$<<)8Q)oe$6M zAiH&oaizH)&9D{+8=1j&9vWExF_32N6C*{)Ijz-OOyx^lDpL)0ulDUUU+j-f!&QvyiuJv#ccwvTDb7QlM^N8c?4{IYm2evfE%v__-TKu% z=IhV<=dQB_)xs)Z-R}r=^feCmuTesEBXQ6@&ueWq%l8TjLWH%s8uo^?OclfM=yfL(v+P)Ivq17A7}p~L*%h>ouIkfDMbH$fk^voiym zRG3Kvw2lcb7VZ_Q^}x&oV=)Kc25V2q!RS$_3T3)^Yop5$?H)wDa31;LNGQ>yioAS9 zXCWL@@f(P0{$nE1Cga!%VkwEzTDDF%hB$ziN01Fx9IHn{^z92FzaW`?^0y)t3IY8Y zd|R?9Sg?nZnxXC`Hih&Fp8gyA6t)p(WhHD(Kma0kC0(v4U7!FW^r^o=j5U6;|5(FA zmJdHQMuutAQzRCv6bgF9)UT4goDQR(_8I)ad_W$IW;B~ji`gl~OyIV(5vxo)S-B;hf&QJoZ-FEGtO#@pD}wQv!3I1^^Ql7L z4fB&e9R91>ma#C{H;b1g6xP-9HZFbBEIaarL~aLdv*BA+=#v!utFmp+GfHMLB~u3HO49OiAyCF%zvM`|6)_f z+SU<>X*qAIw@N*@g+hoOQ^%+buYM1x*fC`pZdxho*J&lv;TICi2)4SmhK=R=C>btOXcL?Gz;$G zkm51n+G4bPp=g%2c7&os9avCF8Nf`)AM)VHby>PcDEQrxcX^p%JmWAXnaxsapYKdk6eR_va;{}KHFxg8?bd(o5WgzARz^LaS zG+9qf#fwU>dGiw0;cGqJln_Ji))0yDRb>kLN4<#300dQ0ozwk0&WWbjDzd#8(G8}s zo#WZ+idj>Ea^!3`lgulD$xh@q^MP5F5R^5|1Go5#FP^1i+Gn9J6p1Uv)v4mi#-$YTbh6z z<2UQ&)^`_?ks!7Q1EAgO!3>xGF-2WT9ut}|9HMFm&<0rs2DNL{NlgD@#tkLX$)n3O z*KoXc)Yo}d$WqMVRqnbBvt@fj=O`~sXpreV$O7m8QA(1A)?A%)uWznFG+wWhZY`Sm zuD*;I!Jnn;oLP@q74&w*4FQ}gbvS?(@OB@9%k8Ab_vCV0cl7hE*Q0Jg$Hhm4@EYeC zB^cEz<3MW*!y?Qy~v zr&&@PD#ZwOQ*#6;mSU*Y+&zEY{_+^5Xc9zGeJIQT5JX`Rw(-cVHu;{Q6$Rd=yV(%gQ%B3D*;YFnTEu*R`<3FG4Hx;C#+xAy{tVe^RgheF zSe|zk>bn69Gdq;P(@8Cq=vwD;yVHdkn?54Iv(p$e79yr<`_CEEX?6Y5QmB&|y~&^@ zb2VV!))YnF!t22kooUP{_D8Szp9a4x<%%5fstUQ=mx&slU1oZ05OXvewl^G&;HN_) z_5{2|Ky#aASJVUzBMuAB`PWmJQ5U!pz_4V=Ml97)R4;^v?Anye9SM#kRDI9{G;NnUsOZ|b+R|EP7tlh$fL5zG zWnci|@zsx2Jy>h;>n!oW>$F{Ib|^+CP{3>~ON8}B3+&6~tN@JDbyAx70poXRsJjLP zKEuc02z+q|wX8n-$;1CzwL#3__{~HPtkI_fp;81H?Jy^c$AifiR~nsS=4nS>IuToa zp@eztMCQAFlF6Lrfw5kdvdiE1>BQ6ND10)Eo3+RGhx?0CCnG6vb?#@CY~|ZENt3lI z`QZ|FdJdAsSI?lR?`I+^D&L1;ZiywPp5^D+>)`m11msWr z2hcSCj!Luu`5F2d5Gyve^QHo)AE5syXE|>i9ANYt`pC@oU`Ik_p2)YA2E9{AtT#jp zNE1vZo2{FWp!w`h+k47j+xPv>@#UmmKe0LpjE0w!WRJ0@A0tF4=!+WDfQbw4HSL&w z*(~TUlfgV_}AF^+?B7l&g3=?7rOG(}0#B(~i{$}FpU_*T<1-w?hXh9nuyYLkC?o%NCZm8@d zOPV`fqYwL`vuS76$)BGV5FyW~9Czf-b1A?!Wx86#12S z@7s^bCkT9Jr(c0d92q$w#66s^2y2%suh1JrrbIU;O$5<%=6RdgaPY|NtG!MgzMC*Tn;6j`#=aA&Q@QMNB&mXN z7PsP6#O{tAoO5ON14fEGh_l})yC^10b6RgwfHa&3IuqD3y;Gxx1}Wosg&ds~K7p#a zI?F#TD2==;wrHrx+{x#Qg!Y7S)fVIrw#v5RmbS?{pNVA8f)dc0H9|yI+`<$0K8vM7 z??^8X(Dr5PsA_~H$RxI++s`oCpr~3xe=y>hv6Gqv8B=E!dF&BiMR|b)MJg99>IInD zJN9zY&YkFkT3OR%0I*Bi_unsuUE!TWSuBM-2=f#GX-!7(v0LQff6WC5T>F z5Z})bf9FyOnQnpbdI~0&YoI?lbQ$l@Otn9{#w=Dyk8o6Y(`@ns97>qK$QtEXUrXQP z(xQ(TauYmdKqIN91chcc<<&D$0#bFg2Q5IQ%;5c5-NIsvyLS{TTN&Y)GgLyb)T&K9 z12JkgABI%uzB@J5zy|VD=|DmCLX(WtB(3{VpbP>ht2rv$ z?*@YgdiN#y%&130s5<3d${%6tj#gC!t*%Z;3$$AFd#~ffEp?RXPeLh+_8RxT#9WS( zQ-n;PI2uZL7_HiHS*UE5Z`0O;kC_UEgK^C%27A&o_VF+iWE{ zPFo)lJPh2a`j8e}+~5Fgd!7j|K+BwAX}gf`h+$ILpkc>iktG9eLTaC9oWlSt?pEmF z+y$Nlel5kK*KkPVUmlW2){z}FDJg3pNmlnJ8Y|kTg8Gi|ky@%W= zOC)BFUI`pA+CW~$O5C}_AQmmj|8)^S>dB~*D_fa#JHhgvDy__Jp!Qq^inZwm;Zth8s;AhuL> zaF6Zq8wF$Yk*=xt2xcvLYXlAm(Ef7>ed8nq0)9W zssX5N^wEl~d~Am12&)m|)tQC9mXyDq-24YVu3-x6xYRne zk%PWZ_C+97?b;!bvLmT$?{A{S;MuQwllC%S*#Ys6l%N7ju)R;Rg{^lYc*MxmRYO_N zx0PT)x5Sne$~-;rc96B#bM$4KZy}hU5ziZ~b(V1L>|m-|L{(xR07K{qd!Vul|2PphSdOSN6lq`^ zlre7U^}9?XGKiK=&w^~#W@^2x`GM$uYrA9DRdsm3mnC>uURgn8^?%V zd&*{K%trN0p=o^q6cXc%X_kIz&*g0hTc%KjAhFmaFiaw`j4Kr@n`6tQX4`>E6g9gr zj3`3^el8RHdg}RU+9g7GsQ8iERy~z5XAa~feA^V(?;sRL z)l|YZSZ<&SHLn*il}lb%Dr1LVC8fSBx+Rs--rGByOf)aJ;vqGVhbiD ziY=rRAuO0ksdO^CJLq+U@sXZwpQGord%CEW6~v})>%sL=xGxPO%_a0W;kDqktzscRr!Rk=)AyCC^dva7 z63k*|qo%xzSI_1G=-9vy-}BTSLNX#nBFPwUY+vrPLusky3JWYahF~)WitEV}C=g6Y zJk4(~4_fAIy8D$1DMJ)hOv5Tefl79zqE9F?)d}MxN{h43h?1>}7!L>=Z8eHA9rtKA z?y%qgT>s7>huKgxafXUQ=%6z>4a)xM8!}U(o8|^8DiA{%1E8A)MB@T#iHL=za$dcN zZyUu&k)P~>r;0~ayeJ-vqQdyKkqosZYD=*o&X{}{DH|ZX%h62L{&`Q)C#nRSAlk>i zqQsm6@#moVI{XvE4Vhwi9H5x{2P+MW{PLXG89&1ytc}0{x%#2OAtIH*b*dq_Z#?dZ zfeytRVH6TWD*dcanLCYYf#(QSNU7#+Ku-UO=UJf&JJ&FF zes~?GKqA%)?ZGgFVK%#tIR`=K*>r53lNHdXFu0A5QBaVjhZ&Sg`My#Kvbt?zIDeQr za|fPryxf?#$N1rpsI6c-PpzY93aQsOSqKqhl*t~g@fiw63X?Ls+&eLPDo5OM$IR5} zSe$X}d?M=184Vy`>|yb&PPruMo1c42>F(JR#`vj%UHWYjFUK7%0h*sv^lM$kZs3f| zZ@r#WB_x=TH}J(X-Eu%I!#~(XSoRl@8%^$?|64p{ej2z4b-why1)RcSOH+&6V9=!oR@cj6-)=W#|FtFb6h*D*+NNvq3@%uovjEmvNMYh2f7`Y$U zu~jK*`Nnxk7kO@TLFJUl8Lj@P`R!dXcEG7X9ZvYQyZA zoj;Ru^6@fXm&h2wibTPxb1V;}nq;TGGX7mRVp6{~7O( zH%mNatrwe&4XyL!m^NmOU0{eJzWrqnLNRORPFA+~r>eq}n49k76p-#`$6@(7=@*df zm9(;+LSq_UtG<+X^q@UcH5hUI$31X2;_iK+h$kl&+JNk+sILbVQ90f)c4?BA;)Q{~K7d%^VGlo!mB9$;`KV&Q1 z_%QZmqN}{mt9t1fo`=(-ee16i-*m!3i|`LZjogAHahz+cD1;65v%3WgSdYh__&oTywko}3DXGg|O@1x)bZ7o z(azfMoFZVQrirrYrcW`8mh1g~6XKU{o75Xi@3Fpo!sXmDRM1-~)K~*S9l6~4JRy!> zm3}=wI?pE}@bIh3Fa0Zp0odHEx!o{{icz*qp(NA7pU?Xv)F$?wPJwGiI?DA-ungYPgb~tS+%l$kgSwK6uy{_`|3g`=0T$@IfZcs0HWjqNDwQZ>3s8G#>b{u zS;q=bA!D=`J-RK@8Q>WPNFCYRT%TOMx(Z%_^7>iFZhB(sd)D+pdU*dJiv8w0!3lI* zF*BEP%wxPxe$Z#isF98ObVh0*ry<7~uCHz{QT6%aF;qs@F&F?R&PRy*M{NT!tbM0e z(+Pl+NsnD9{=kV?XqUu{JJ5|n>-*8fX^Wm2*Z~UAH-47dH2Q@g?^@QmY10t^oJz8< zDkQMMZ7Giu(a!)K;IN8FEt&t+EuTaen)57){j%gukCE3p1^U8AWi(KKTl{`hc9-6S z!V#AyGSa0-T1I`-+fbL!QDDIUCDR~nyH`ZxrMb?G;j&{`$t%%3@Upeu#KL6#x_R1b z&s(~NoCQO;h?=sr3{%wH7N77GPw;`v)`AGBbhVQSb5YSJ!Fb?xAJ6AXp|NrjO-udGMJ18RW%gy=myQ@SxePNhAIFJ(0Lr3uc zbQ1T6kC6>xGQti)S()RM$4;Xs?saPQ0Qhg+gLD3c;DzEAJ1L?j#_~e9i&ol&naWr` zAqPogzJKGEP-%NOHe1>CT;F)SHx0SgRBm8@Q%`GQm2q;=Qwk!YZc-i=8KDu*T8gqd zcUS)>^m6}vm7jXi-R<8i+>uA7xi;#;q9g9;mw8qQ|AU3-e+BWsf%|{8Zy5ePj(Wn! YYY#-nK8zwpp0GzzQP7aDmNgImUvgZOxc~qF literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/images/security-control-deployment-methodologies.png b/windows/security/threat-protection/images/security-control-deployment-methodologies.png new file mode 100644 index 0000000000000000000000000000000000000000..4f869474e2d300b35c10865af53d35096dcba75f GIT binary patch literal 21811 zcmdSAbx>T<_a_(#8XST{fZ*;<@ZiB4Y22OQ?(Q1A@nGFF-e>~B-Q9va1PDQcOy@hl znwhHEsoJgD{bReT>(+aH&%5WH{@i2toLF^Ld8{{NZ(hB6g{7zwZ$rz7j$na})7X^LySFf;p|9ue#KUZ45 zdZj(2C@ZDyV|p~~ZLnFnAuka@iNrqYlr4%KaORCDnHCfICcZO{sNK>*xjL>a_!=4R1(*t!GES( zI&+l&IBeVxZrt^L{&pZ!=-?cdzca45kRxqyuJHyd?}ZD~W@q@}g0X8rx4r9+sL6i( zV%PIe3Eu@a_>+j>Pa*~Vpn5(m{E+!M@Y?@nOX5kztyQ2peL6glveehl zD#%#`Giwt^Y2)GeHus6--+T5I|2>=RT(1F)7(ylsYH)553gtgoP(AN10_T+;#YT$v zUX=#zYMBU{vIh(s=3(~My$e=X)AwQf(@b-#;{qfWj@ISr({9%q~@%W_dq*tq#@ni7h;jQ?~nGT^4 z5VZ6tqRIYGRBP3Dl?ysQVz1K*{5?oGXe5~S7IuH_iY)}k$>lg)drn_(Rb4JR3k#qI zi^pA-eh!>1{dj+J{zOoq=d;k575t>Rx)A)jet@K7ftSg0%=AZ8>B z?iVIs-tDj~f(O0C(|$4=Q5Af#pi&I}E%6*GpH&-4^%%`<*mNDv{OQp&w@&urpqkYL zsh3N8;W2*30^|*Kv%W4&{^|{fG-G6`+ePp8dEoP^_NDKiZvQVbzxeOr039Bdz5Bf? zVJp6=W_f9MV@C4M@}!ID!@z@sCwxUw_=;~;N9Dz@udV+WbOcNVT*z2Hv%M~q)d+rg z`s^#4B{5Ai2O2XIN=6M<_d^-10VpM0rTz&zdbs%N0&K<3o2Dvy9w_d*kLL9fZ~Q&R zN&j?d5-34s`~*P$waAAaL9l0)xrRqwzJh_h`rD|2TK8x(0+1~Bgs%kCdR+7uQNqXD?cRJi{1x?|4QJ1P zadc7do#>ovOe{r9+{4zYo|ByW3me_e1v(@+j8>w}ghJtnfEY*Y5x46074}?|U4(bh zaEpETC*nO$o{Or~o!v=s*5_iBv$gV}pXH-y&)4gFx6$h(!X@7qF{M?4x(H?3d%Sr1{2=O3k?m77A zEL0;ByhXhiw|E>t7ij&DxRpAuALH}=t(w9* zHS_lh508ic{!A;5mtsa@x`X4*LHPsZZqW+KW=g!P;fD9nyVlV8>OVN0?*2URJXRZkA__YRR%UvUz_jTAgcj-?s8M3|dMcujj0uqTSCYg04x&u~->n1~47+2Q}*=u*cGf~)ARbMLN^qo=Zsdmfv4 z(X<}M35%DJNOJAydj*mIl`67=EjUBB74hC@B}lE9sAkLJ#gnZ2Y2X}H{FxYPPZBkn z1NoByM>qC`+Jox>>*#;YKxoPD`tYZh>gj6l z#WM2m(qySv?X!s#R$Iv zhij$17eix!2bRMJ7n@zG9|14X62>pLq`L>fSCdzw-wU5-ybu1i_g>un*Q8(<+I{%6 zgY%%ioB%i&76VuU{yf61VP>$=2&LFdga=7MT$_>!vJus<44i;R&epfzDVf)*3h#P0 z+{Cy3sZa6WRkgH_KM%U{lZ(Invy|Ku(bHzF6skFcPOK(NPY6yCL@quWaHcI<-v)2B zbPi$pZBu1v20e1VJRETb-og#{yv0j9TmwN}h=1WM>BEgGvFc*9P0!@>N+Cy=%6>_| z5S2{y)-mX*O564)A~t8-e>{lZy4e3;jpzHTF9-7DzwaJbYXVNyI_FP&ji#=*#5WK9 z+}MOA&Yvbo`C$I{S@XQZjM~V7Hyd=ofIKw8v(`X3qZ#Me z#r9ph@qf&GL!dfNUIi=Qnx+4ppjs-=&ComcSJ+AC9g)7CTc;t`#{oVqJP>ZAnf> ziyv?fX5n%)4R%jqyVjP`4sZh_EL&))b@YX$Xz^jzA|xq(PkB#E(V?^&3(53rz0egJ zifxqZeOmsR(K@Z{DN? z41pALIdPV_z9|TyUEjI9aZ6R7$Ck#{7ImF>yYLeoie2%T8=B7ab0mP0$s`3NN`l*T zUOU|q`!FlFnDN5*P`KaHN^0u`3n2fB_Zx~3-cKTCVR2CEs!`clAOFfQRM0XeZ zf1inaTpW180fk7n0(U z-h23V##u3wnb04xvlDMqLij7XF}6ae>N!Ct?(fj%5WV$r23uhhslQVK^Ye4R@+n1G zVE-?98sWfemXA|X{4U$7R2(JCQ)vY296b~U3W(eNpJQ>F(10Eg0DtIg%X3|34Gw3j z-*dECEA!b3xiMS;8NUae-D8SiCciRieh8e~`sYF3_d@k0!h`kLI4NB{hRZC93vGLC_6GZvjS7!JuuVEwegMXD4BxtV#K1;`BSu+0Ah*ZVoO@lliRnFV3mWKTXqt5R zx|<;+wcCVOOz73wXr!KyQfsfN&&HL6JHa+7NJUvFNlnxs0i4+=(z$cDk>hw=$NNQV z!Sg2Z&?c=E*K)Htr9@MgDQVX`SZQB$Uz7K6le$B}ik+|=m{#5x?-G(B&WGmuS46L^Z?u^`@PhHVP}wBO?nK|@*PGVzfemLqfA$_VhW~W&`p0 zHfPfD&aezQKpatkZT!P}*GurqxH`6KKB-6xA)B8FpV*nSz7(o9yAKC1ak~Kb8y>*C zS&m-RekK1(T-s5Zkmwt$IA>V}B`6JoRz|GI!f4?1HD!&}0{T3+sjIz@wKfTF;}{~f z<&v14bA}cHM$?(5s3-RqI|pJhr#x!sw@6P;s({RH?VSz3FGw_`Kkd)Rl*Qmf+`JDxsg_oBF=KiRwWLQQ%X-kEgyBW{$ujKggLir9lFgq1VW z2E_EPwzeSX)aMy3`nQNgyjxWtE&R-EN%OJ)G3`5mNSZaLibsJxwZP%CA|S<6_^=8B zkEK-&bX_x{O9zNb^Kad;_RZGmAQ(9$htG8*x&fCp&JZ!2C}W%}+pTPut{Ju8?^vAS zzn?Ds@54RJ7eYhtNFXW{!L_iTPSin}R52f(YT7Iu#>-`F3F%ko(~hAp zvTnz8E6Ms>a)K1-u{ z9XS=lb@*exva6}@*~tXjdpn_MVrWy6YxgW*h4wQ*OGA{>?TZ!Ps}lx4xUtwHS-xMb zC3-+S18)D&QpO^8Sv?O~=N3)nO(`x=)qTG@LeW(D9=DI~wGVjun8`Rb7T~o}k z9zKFg&AJt}S6?IcIA(eUQ2~;$K;_i-X5FNeOm-%dvGR9Qu{f+l;B^%;__zqICn1Lh*Nc>k zC>msGDZDi_TnF67-EnTaS>?e4MoD)0S*JNz7HC%uY*)X(7(4trpjM$*Co0Ll$+KK_ znA{)0R^>DvTKBM2Hy+!g*`KIB=+`FN{_MLY4KVnt~{Nu1@IC zSKX7wp=)IMeMDUFr=_5D6zWDgMY)(L8wD58PEjNBJ^Cm zQ0f@n2d$cc9#dCE$1C$e8N9*~aW8IXX(-eZE5d~B9$CLb*wzw229qT$Uif&()u>(Fk8p;p@6nz2v|iW-+{mie2Nz=8kSpU zAZCYVf3hBchKMH8QSUKD6~7K6Rp3kTtT|?ivD4E6|J%Z!Tp&c<3KS826~%4z;%b3t zY1J1M?BL-LEbf64ZXR5v(Ol5c9Ef0RqKcY-jz?366!A)3%t-~ac`aH~PjfZ5;UmtZusFE7 z*Q=*zS1p8A2=JyyEy4KohX(&tHVj&jrezq-4JD;kKz;1H2iGX#!vMwqLEd69eQW7L z8j^if_dY4J_;9zn=erqC?JE`R{{XL(oXeuF)#t|=AYR!@%Bpf?P6RK9T8sb*b@3JM zpX#p;>ody0d0$uYgp8tm9~Ch9x`FZV3ogot`|Tx9hh3GT`en+7FB@R$8>Q6ldj z=CikKX;=YoSiUo9oixo|GN57iX~+##M|nUE{1hP(iKky_Xur}rI5}`C%Fxog)3?sA zfxP|)$EpRh2~5};1Sx%dD^sDiib~kCCCG)C-NyD^ia3I2gFHxn-Mq|YoGSv#0f*en z_VSrz5?*XeP=4(w9j(MJX1lrfIcj;V6*SWOU(3HLL7%M=;qv5cf7avT9Op5NZx${7 zwQi<22{-+e1VZZGPu5iLa%wi-bsb(f3~UjN0YnTZK(ix;WxcOG0{+|>?rImS> zM3KmN?6MGdG-t?Pi3-*hzi{KVS9vICFU_puXv?73Z}?>R7v%;q0l#|}p^S&w!2_ae zpqj3{zY-;kdTr4StIa>dnt%lZpQLo8v65i+7y5|cshF`#C`goyregeci^n(o;JZEkBe z9Wy&S2aR$)@|HSKIvE1MAC?_5K0L@0aH=ZWP=#+oH5d~DRy#q9_K>a6`@+m`14``W zeRfqZJFH4Dpp5K>$gnY5ho|XyWrd95O;ZR`_y8kSTuzTpYN#QW&QS>(@ue2FOGZj@ zP@ao1@-VN*9hu7Jg%u6onXfgR1R2aq8BS*t_o()%^^E&&Z^u>BMN-1CX2DQSCjg$h z;*b3S*&z~U0YS0?;E!D_1*dk&sqQ`>d?K|((-jfgmQcnd=oe<~t@J3AYV0Fv!h=3B z0b|KJmRUj@)JPe*2$h}$ra&y5sq6LM9d;q;o2nY?yxnfR$y2NVs zz5_I7{m42DovevC=(caQMWOo3xc(plr3)I<-x{BohAPR+6D7Upu~DQpbEHVAY#@g{ zLrYbWRul>h?ft4Ln0>;E#HP+3`MXtMaj=fCQOpp)9CY zCOSvq{b0RgrnfG28AO^TfcD-n`)8o$D1pEAyBG^^QZ}Oeo$%M6>MCac7AHkEjn^e% zUsRPsX2}U{CuBpV45bQ1HWk??h3KlkvTw=}vJ423Ohs9ik@s|KAO+$cOJV~2>B0cg z8AdyjNQq57F?r!U4fltV&{R)J`s(iv!{6x5kfn2Cr|lWa^TDz*A8Xo*budyB70KSj zCgeTMjF_3%XU*>LV^4t?k_3t7GD9XsKwEE(HlXqh`NJQ*sx-5m&mOoIbG!?jF(3^B zI@1xz;eka)-Fn2BFYP{+cdV;KG@`FuxRUhe!KcN$S}jRXwCr_jzlGnj6C~t(+LcF& zVUm>m(&OVa7F)40CzaT504=~g4qVybcm!U1d%HBV?IOxC_EAguBJjs8J$bV0`YaFa zSo+vyjLE=iqv>&9$V3WDu5Gai1zH-C3QC#;N#Z_VAC*1fr9<<`9SLvF8jUAg0%FcV z&^zx)#VL4x#9JsQWsE(H*E*v&`X8?fP7E6`EfmmfDnKAP`3gs$tfL4(w&2)L)5L;A zAiy2(Y;GB`N22(HUVz7W7?p?DwT`o6VwbMGfU%t3Ny!;1(eSXHm@fV zg@XHS+<1Wl2I(FvRi2qmOrmm>)np4Z*Mg{u%k-ZyNITq&*b7GY=3)#Mm__B9;zv#9 zWk>xON!_@xau4-sPjqN)6{Ap8o=ICjaV@AIivJ3VcajMU!Q*K^&S~qRDNU)wW^s0{ zq;*46N5z({6t9%!LU3EaUK-B~*iH$e5vDp(DCGe(eF7=5DUKQYEX-%YF_vIj06Zi{ z4FeS<5@>xQbb>T~x8(~0|H5*km9fH?+gr9a?r>Y6Cy<5$l5{O}zJ8*$B?dR(svm%L zrs>wrBKp3@LRXl+Alsx@1JD>iQCPIJY=a7js$r?F%HpQrfyKlMd&tK+0k8V_N*@NN z{BATcE&Bf{75}qEV8QUXEh*=OVuHpj%*?`dU`Cg+zb>xke1ST?57hqiTky%Q4wbbD z6+1^7fX_Q}tzjirYhynJO=mvI_E6{5HaR;HnZ06#UD8KEq;N)?f`{yPZeod1jMMgA z{Pd?nvQ98rt{5Iy70fhpukfor=_V1HQK=)MXg<_~h!ue{JB+(2Wbvc9yOb|uTB4av zpX9YEPZc_Npb42eG(`CBH#6}^`mD+aBz9pM@mNP6o=2Az*ws$&b}RtpOz9zIQ6nz@ zV<&Q1q#mbN&4!&`gzj^^S4&tq;Zu6AH!m_W2V-fM@qDJqpCP88_$b+r5NZSFv$o12 zAw`%JkmHr=SH+!6;6|utBtS|`@#Up=@GU4Hf>66AydrI#8;*5Phy_L638}Cpg$*$d z!;+q&WoIn?gL+C=!~%CVZY5%%0X*# zikA;?h~4+AkQalN5Sl7lf_BQ00m=ckVW9QQyOi%`pf9Hy`nG`RDw#8p(gB4^Z;>DZ zg!t6hBBOXW6vCE}kA=G+DGiqaRRh3muL5fxW8!X92sokQNjewz#Z#du|0Z@$E)z_9yT7QjRxV8Y5ZV{1I%g9F2+i;JWJVHjz-nH*g#COa0s z%e#bFQ{pdVNb^A8R+UEdAMBhN*&l7H7zK)=6R{ztGI0P|^(1#|Oer-bu(oT`OZ_Ec z7$66v=aQ640XB^01(lqfR2o=fRY#Lw;=gk@S~ebcLvfm0o=uiaI#Ci5^R@a0%x*fh zx2EO%axj_>nr++)aa?J-9hjZ?Nk6B10x%A&O|7Z5n8mwxD7?Z(hyJ_=+v&bLnBULx z%({h9T(29Kbu0&dKZw4K;oU@R+k59;?~H2U3v%}p_}1<1{-V0 zj;E`re*X41`jN9x%>}Cai((P4o8f>m@tUn=Ef+8v^rP`?>!jg#-+UtD31a|#4Ln>I zu3RJ&a(xH7;1#m4Te(ks3TO`kEJa%SX2|BSsjb^BfD#Q-vUY0}XIkPj0>b9L+oXTM{%yF@Zqkq5dc1Ry~SwIdwSERkdKjGA;pLv1UxMd?T# z0HNxn(jNw77Y;o>e%jyuBFErc;FoJ(UUpOY8qf?VE3!s=U^JT*LIafBAU?GG>>k?* z$(5Sl9PZj{t_BRX8ozRKo$N(7v)0ZD-q+9Z_420`^4BkFYS?`XVi+x!xF;8m$B%BO zY7)|0;D*%Zm$1YZ+2oSfi8O&4Wlou}(hb%_D?J5gbmrGqn0z!HaJkE&9uq}$s|Dr- zioH5-M2d2G5d-m9yz=yrS2PH>Q&@H+qtpOyv(g$)QwzY}-zvBV2o!8;=FRuDb|R=v_dFpU}EEO>Tkpn zlX0HWaKgHrLh0+<9A2yVWtw2*n=2;6jYM3~wY*W%d$TO)7gnU$6;{HB`u(?v16em?@2J$hA-v;44o zPPl3HIj%iH1jS4#uT1irrAyh(oc;Z(gw&x+9F&%fd%AiQai?#337O56NyyzbS<~C$ zGMfAhM39iqi?2=rbxlYYi*A@7V$&JkpvZFtjo0mmG?t}p8aI|`05V$vX|3G0# ztn8HqSVl*x#U?rV-S%KzmRGiCYA~gxUl60eUdX5UQ$AHHu2CtGj)I9-?9WW zI^|n?pkpYC7Y*n|*KTsiDj+Hrusl}LcM|29a{CrIy+w6Z!aJ@sIIl;GugvAvQOU@5 zl8%VtlUFF8a)f(sZKD8Mpl!!b>BXam*uaF0;iAXIvs1<)#djH!gF$&LyajY5fK&S^^; z;ro?tjiXIX7+6GW;rG~_L0;V*g(wZyBSDTQOxWq9M2D)QNC!jMQo#1tibd5;3N@+$ zx;S_g%~`Zy-}1D?xwM3k_dezJwXE^vh1z)57YphunH&0 z$L=yk@ygM&gYB?P3kNLp_zF?>0k~u;+c(l)(M3nlmlIWBgfce3VDT!Z_WheMfHe9g zR@jFfPqxZto>uYwC{xw|9v8(&I-KSb#VBi+03LEZcw%8oGDB)c;6oSyC0Px=y(Hx; zO}mivRdqr93laTj^KKzE8zFQ`nZrS>DzYfOLhQ1=m4*k{0R3YX;bJk~>jja(f!LSu zO*>ZJZfRm5(-6s#@_fw^)8(v~3~%BtQ4Cd!6|3T+$K3w%dU!Ae{>V{DpMHY%#LYWc z=m&K2#JVKzS#w0!BK42NdfKs$1ndtLCUF2|TibKl(Mp1mUq1F*c6^Os3(QKADmQkv zJ5ELf;T=B&%NY_oYqt-4-a3)X?ruB>`c-;|WllJdhI~~E+_+_ims2ENsty2&(HdX( z?7X8xBE6*qU9f_QKrsndk^N$NHXstMk1zUkV3#u~ER1pKn%$f-aw)Um~sDT;i?9 z$=}KyZY(D-R()n`SHF2*CO?s^`*sa;O7rQ%T54&1%V5jB9~O#wN?2CAxKwB8=E*cya$QHcVUCc#&la+(Oza+(Ch*`M zR+Nh~nW<+akNCS!PgDtHY3?l3J6tRj?d)UP4o^g!q!HTrzXph6bJ!AL@H<$_!&vaB z9h8z$RLr}h-hN<3H@L09b7A17921++Hgh!`@_;?i@!J3E-R))7F$oe z^J;iK-CqHERzVtgGQ*oIGV*An90DzySQx_I9#ZCTcmw zM`Al|JcXVbvGvW7Y|Hh|k?FLV>u7InqSNpo(v=}0iKUZZH$`GLdX3N40bOQ?W)&-8 z>i&K50E}lj)$?*_qm&C5n^)v9?Jz=2H94Xg{~K`_&7~(b{cKUJYZ?wfZj=chDV}s8 zz%dedpku2_5TR{XHJcH7(bVxrl!A^mL%-k6u}r;D&@etF2UU8Ri$rXk)v1^u=N*=2 zi#&Z!G#y*43X;p)rk=10>3~D;Hnr+ci2U`>a)3-I@+FyuQ_UB54Rb zVwGEAAnkU_dKP8Oxm&JP^lxheI9YL5KTG0D(`1v}L_}t~ljHpsKdf0=uvPge<}~4c z-on~S?>J!YOor^wW|wAcK8X~DK}@)OXJ_ujBU|U)FoW=?>fTlgN-9DWr(DQ~7K5xt ztDHB+fJ5_loKWYzPAG2{*`V@dY!f~vDvkrxj-E2852Qm&DU>Z&_c8VST}*(4%5`t-Ih&yVNl^oW!{HsX zDyQo#4m+gr&ypDv3=1HG2`AZ4k+Sa6d@Ex2(GlZ%wrPDx{%ozwbl>|5(2;DYSsE^9 z`&KMtOwaja#QCY%E9*ButE^D~-{az96v$-?Fkgo*ob_L`7qAEqRt~Xq=JHI-bW)Y8IkD( zAhg$;{ZT-HJ0`Kd^?BkSoP#a1>QbB$3piL<&nPp&Kyv=SGB6mu4@G5v60oH;kNJ|7 zn}H2ClX@g2ycp-Vn|Hgb0r4jd2f2=XgTnUermg6cWXk32;A`W!Vo`t5sLt~duc=+s4Bw?v-+8go=&+jJBS&S85r3?2V>SeO_mss*&%VOUh zCMS;`G?WV$wabmN4Cf9c*;j1ki!1FHJ1gua#Dp2{P%mLfRe!8BAhz(bpv0au`WDDt zWKk?cLju5SLPA`@K)9~zos*U_n!o|0-yx+}WTT|cQeKYx3aKm>zFvM~_Qb=v`V-x8 z!)%hDr!3d3-S=_lj=#(J$^clsTw*9j@bXo7_MYJXv$2b1Bj_ra z&giaX1xxx;;`MI{9O=7}yccmh#b@%;@F}hr-ziTT$7h?e*_48p^l87CN0pa@bb_2k zmWA7@=js<cOsEXogOjd2W8md3rtb0y`5_Ii8@}uR~nN44*QCaA)*yX=9&J4@OXM{dL z@{S&ymiUmB8|s%RhI~)zH3CvE0}kT1jHIl>zMLfWMYr`H3VY+bPASCZvD~aY@?oYh zh`G0?g?HrGG#1T7j>EJLDS3>B_@lqi=GB(pj%-ViPsRYBTlK9F_f@#bCYE3%TIvtd(8WMwEXKm~ zz&9m%v_f0_FF+CPV;~C`PUD>%!tXT%OZkVO) z%znDfnX52vcSV^LF|Zoe5y69nbg-=RK-VI~DGEE*=s@H(Wg?8>Q>&O7Q_t0vd5;v(hT{Y~)h$J~*DqF?l7)3>zImb`)KAWW2d)B&`Y zydSOo74t&_uWLxa*b8|5(&GM$Ml@(27(%VsiRu(VVH*K#{Ph%M#3cbR0Q<@n&YP$Ar%DUx-~{sGn8Hr5(eh6O1PcdMZ0tJv z*DHjX&=NST`f9y)E&FlJvqbd52WPDH4#TLIvS3N7IV|w{wy!5vgoyS?XQ=)-tvM*A z5LX{Es$y(0?sOWMA24It0hdPV2eUmd+ioKtK83%M=66(*=U7tXDY$#yR zV)w*v5|Tg@_M&UnpvX1=9BMx>>>6u~6Y7?x#r8qZWdR0nmSL zFIJ~~5~8FZZnD2hut^(SPTD>_WoI-Kh7eC*pQJ`&e*Kl;Sfp;-;jr<&GACh*0!p^SL6EmK%LN5pXFW zEhW;1Th9zI9owd<37TgVf`8+hu;qy!Vz`LVYn(J@e(C)B5FE>lGqe@~yLK8=dA%GQ z1gRXIRAg8bkKmj@z`A4nE0|6xA{M1Wg56RP@n3!+M5pTndMDBb@^}2u>Nj@Cn6jv- zX?Bb)dL9EaN%#OS4T!x9q#;STQG-@g&i0B~Q4LLRrzj0w8ZMhYd#8pGL-b<&wJOON z_}LU2qg02uZqdnNINPug@_ekbvqR;{o3Tiua!w3WPJOonh(I4BTv9tJ{R%60O+jj= z1b&QY#dTALw8(^_l`Aj;%{(nf2d4o|nzGjAh%}wF8eR!an^%8|ZRvPE*iRQ@OUz0a zcleNX&6k8>@zM;7UDZ`fPay)o7z89v&8XAIQCAMZIY?tBwysTv;*1R2X(i zA&A2yY_PnsVe!v=y>Xig1DB1fwc~0(UAoRWy$s^p%n>0q z(Q>`ttt59Ee#hXdxO~VQr5PC+; z-jz=?2xhk>C|v$M`a?HD^|N55S)~t4-ldz6C~7d+$;2UvFm`WIwALTx!)`NGDG&qZQr@cxxp4L@!}nb`a)Z1%e2>$tWy^1?h;AX)Q}8>-j@;6a;9 z0?yuKF1#;6^(5E(@T_JgWpU_J+cluQAftB8!qAHP>-RMhHO0mAG%w@@NK-+2lu4ud z#n$FohWAS^4?BvPnRcVJt1Ypn*xAZ#4RWZhFmQ-2b{ZO<5JHYHOE*zf)+bF|$^YHz zS??9qqlT}hgUrZYhZo7a2+G3&i>`U6>P-eq9L|>SERnq>{Z1-<}>7A(}&yb$_b-kHwW2lX2e@ZnjXdpz* z9!4kgS~?I%D2^^6x9^Xjf%d8hQABRISI;pmF*Z_l2{j{Y91Ka37^!xhhLJVVD-oFn zqqx83vX~J3{5FuIPT<;GpZB!5^6^Cs*k0NT z46biy7GPuM7P>#O8T2q?`d98OT!;APDx$zgG@>+mr%ex-y->4?`VHKr!Z)XYFFmgO-&g-W)pJ+{m8O9C=n6d&k^NOOmn;ayT+y8u zNy&^1G3+lagewMxO38SQwC39vgq3kqNZ8fMKTfwU|f=;WqiW$d8G>ct%|oAai0(Ljh|9|9#|(DlkEutFVb{DNAa; zgL(O!tw(#yuQ-f0LoUfWGa^w43Fn=Vz0JQl;}hi0oLEZHictDv;b*yKMV}BUVJL zSWKWwNYpvz`6rr~iLeT5A232o<22wi8Q0j}qk15#y zA-Qf1VhZqL*py+nzp^9Gv$cEAuYir_5_9P4dvT_q{OI7UDMPcP&Rb=-JD%71eu*p0 z*)su)0>p|6Xq?gf+fM+{PrwoAqam8Ebo_Cg{s+G~iD~#k1-sZY!tX{BxYAn2o~`Mr zu!6$pW8LvEx8=~Sh4D;!>UsD;*}HkNZ*5;^Iex5(F#CnM5g^8z69{&xlq=vjrFJw3 zXTzbRMkJZ-uYvKS0T?n@zLF`gBUFKp=BLeCz}WUA&TmA=&)VVq6Rz?YtY9TH%F_bG zU{3=i?j{}|H*8~`1qT@z1^QP_lViKGM-nDVq{vWkAOdMO)cF*-G( ze@RqN@3V~{p{1MGoB2o?InF$%BbqAJ4Ls|05nT#(UJUo2XAz(y5_DP}s9Zh+GWF4* zNrUNF5IJS@wIE8xP@+KGnYw)j?QVFwO#UtEWY%XJ7xlZ%lxDs6{`lYzm^-#@1|(eGP0?amJw3U z7i;k7iRBYfD>^Vo!7Ic6mC8qbd*+Dnra$kt{+9C45R~e|Zsag?9O)5VH|Uls@$O&P z*^0H;uJj}}ok0BieeKMH-8l;{j+(m$G=$LO>-E*2o$2fUGy@C#UyfNHgM4l>)=k)B zp2Wl({~|x%h*lm*;RZ+CclURZ22zlq8Fk&Rzc5_^;Rm#i660!u$u9fa|IUcFtX$Ux zuL(crGj=J#n}PmSvT=#gcbF6gR9s+x+{@_uP#l@X?`Etyx`DW7MW)6<=n%W3Ea2L7 z)rXn^49?5i&hO)$XfD$NoVK;k#DzJI@$tP>UZ*J+%;D$g49zdA(!lr|0u>W{{4&VC zO{8JVDnRT7>&pzHRP=T|>@C+o-&JZSzPw!CY%rpUdv2=tmau4PyQ(t4{U0Y~%e_{s zn)e}Cv<6l^Z=*wu5Moe9(mL@oF&*5eLd{o&rZfVY|058LA%_V;GQ@M{$Zsp^fiG_g znxubZHxF#(?5_Y|7u&qnBG>#-UU6fTqs7G!h~h`nKu}_ey4`#ok;_ngtCyK`Rlf-a z_&#D+CgN+vOScBA%qPdAD4;(#(6T`2Yiu#ku3nKq1QC&-R?i@Mg@6;Gy|bR`WCl^U zt&2^9%?xj1E*DG=d$+W|c|K=fuW4|(BD{=cV)Z}05c(Hn+ZnQ#R@x?tBfgO^-3ln1 zF9z*SGN_K|{e|?O{^&e$Q{uUOc17sG!>@7yFDV9~x&5X7x^w~_S{~nzU-nSq@b9)N z8OsZyhm-CSn?}P$MGVazJEUqq8WSN&bK3CoN1$IVQI%O0l+~7CcEQ|WEMo$4NE#M+bhXvsj*ll#AqrQPniZaXkO$-EUQ{fA08;fGTvoKw!_jfgOw!}w9@n#m6{c%6~Q_xUq_4}z@Dp}_4-tfz`Uwk(d zh1bd4U1wm?S%`a5KP+aWc879gI+GB*Ih^M3$ywAA%&XJUF<72ljThJh1I7tTH&f`M`5OxUFYYG7Zt)_szHpX4D8&Vw0;~+; zYK03(u2w#->z@CN6}sELGKzf_wFgy#7Wf*ifLM@BIy#NnALtlJ>`k8b>B-ZADbdV4 zjTdIByfIzV(y~zsJgF}Qo#Fuvf*CC@#=$$yx?Wwlmc(z{1+Yf@r@Xk8&A06ijqoobciTWFj z$>>j=`;af40l_prXY7o9p2Lf=tc+&&)^u)}cZv&sLO5M1->=iy1;^^%l_&B0{T4mV zug(8_m2(gU&x*`>Z}`sbcUH3x>FN0ZCc*tI#ckrl5iM9?_XXu$~I?Si77U*Gn+Dc`nkVWp(bos64psicz> zpGZy0&r5D;X?jFvJG=zT7`)|(d_9ND1p1rZHYBQWTHJ-SvC;*kupFk@NO9G8xvFu} z+8nwvftL}uliyNyB3RVrvElAupr6ke@yoZ-gHz#HHb8%^F+gTDV(k8!x}TpQT?8N6VzeO zfFzYI%8jMGwEcV|@ z`O;Lxm=J)EnI@fuwbDnd5p8L7)=b<@&4Y;brm^)a?e6Tt+>K7sO6W9K>W#=fk} zOWKaSFkOd6luH*Opjjg8SIM9a`l}1{m!COn=W3NVOAJ!`Sxm~6%_n`io%#ImO@E%M zhckBSIsGB}j{$*QMFpW`^_C!8YIp6)f>VVZAH1LVg$CcMd7&laDtE47iRl9lS^*E% zoM$i^Y zyA9!6g%4vgJ=rzsxAr=D@?38GQJ+UCJ9ZuZn+&v4TZN*{Pt=0aJ$PfS{~g-(B^DNE zu^w%zwVw?YxWxmcd+4i8k+rOLLK171tZ^?VuSt1g`3qh5F7O;pO@~f2KfQhyU3;2rNiw0u3cyU zaETR3!B|4Xk^OP~e-TuIvEoIWfeghxPHEm>cC*HJWD zSd?;so}6A88<%?jkZK)B-~QWx&$7gnG8|w_W>I&W+cvOk>8OzxSd`~OUWebfy|?*B zUP}Das&)O1Dgo)^YVTQFqx^8omncZkZsF&JuQIvKU=GH- zK7%G4n0!i7gv;}#-hrvUp4B$!PJ4)Nh$n2b$(9ZB7*o=06*IOJA3s_(E<)9S>8BKU z%++tJzKPyXV|LR zy!hhtmpC9mkxKOPH%D076Fv8wmMK%8YLfqpazaS2{c97I_&0Y;W1y;`%;&=|*vib0 z>&IVD6^>fYhJ(M%YV++}-(&mQxqlDmmQCP~p&^GyIB<1er8ogX$+T+r?OY~1M5VH%BF79*%u-5Q zO>lg9$R$D~*&ovSSHkuw57gr0Z-(@8vni#)ntrfBl_}b@I5SK)?&+6d7S23>2Wnr- zh^)GYMP7~K(e%`<8{+@b807ShB;Vks0=+C`}8A0hfIihlVvyACa^&ZR(;*6 z492>y(xnMGA3>6<{@sDybo9*J+!4I+=*|jhLAl!9ZUFEzlUvb?Cw%Z=vht%*_}De$ z7CC)14;b(&rnnjo0s{M4f2eEdi%FmOzYP;9pb2}LtK=SoUUX3Iog9zOOcvNhvI^xY z0JzNPF?5`)uO4y4uH@8qYx!AguF`56#9kY0U`y>_&z=zRz3jG3RSMquf3ZjsY*31; z!3}|K(DVbi-tgep45hYHNpEb&0;=28@$SnD1>@JbX5(f#Ka}vAdWN(PTXV{d?W0B% zK&#a`=D@hJaMu=gMfC-qG#~gz%$~uLxU^$9u4mPhULE z(PX?$QIc^B2V&tmokG`zw-b%STYi-FMXlyR)l=L=^Lf>VvS6nZQ{Cag$qc2l6LKWR z-)1;}oX#9n6)HC7{G(B7V?&SP%w7f%8{kS(5IR+?Nk$+$mh^yA zc&ruvLyM_060|plU}f?}x`zPbJ03BSvDD|zD_^R-6$bJfnNRkWv96KqitlMi>#8sO zmrp@&kNJj~0?Ar13`%VMFFr3r49Y`N=koBh{$YJk>K*26NBmhgG#VxsV0NmdK)v%D zPYY0}n;hb}+uQA)!*i`|^m;d9>1&$UAe)2lO&pW_hojL%E^4&x)q}}YbNhX=y8S4w z{vp5cR|Z|F+qawi8GUs@upc9DD7k@NlImyrvYd!iv{`(UJ*zjzxtM*JUWT_F2$|s`A)<4twC^GSJN#_Dn-(*}|MB*2cAE!ZUl z>9Xk%tKdG<=j!h(d~*~Hk$#BOe{y%l!2RB@a+});*H5s7wvjeC0XlDs z#(~e^y$GbMMuD4V-zF45=gjG9mM;oGMfW%yf7H16r4bzB|Go#rGm$bQEGVjhfPUdb z^h?~JVhOZ86>_?d{roP)k-Hm7F70Svl@`mVEj3nysg6-UzVYPVTcMJ+ z@7_K+oa`42SRi)&)jQ+)IGp}JY{TvETiZ=tYiwh$C_J>O3JCcpnCQ@iR zO|LZ^kwKfHP;_oqx9LhpXB2oF<+G(VIfQ4O^sYSb=b*QH3tKM8)>^C_1mWBp?rU6l zAJ$HTNcKrk{``4`GMR1xH z8X@`*5ko9#g0>D#sw>vwX~7yS{S7qDbp$>@54*HDp^9{JINMft-uBo9mGzh#Db8P2 zg|TK)bz3Xt6G~#7s~!Xmvu7EfcD7zu9tn=$6nl2V&8+eFPi!k#Vbv-=hSt#^l0R*7 zzr(F~FjLFis)+9~`)3f~WG3>&8Bn=7gtIiTE>H-qcMjojCOzQ>h!wGEDxe6;sfLF~ zqtDeJH;JjXe)9UAiC4)=KX@p&MOF2*IhHsUagpLkP6)PDn)ztTu>54eC3dU{$Mi#Y zCF_j4?!jF3^SS>Rbfl=;1X`Z+1&IL-jY&;kb*Jbxg`}KQv-Ec?%hVe{1BbR58%2>( z+7NCQB&q7+8=aS+Uzoc_<#Nt^e6DlP_q#jii98dMOZI;6rn`Y3l&e%&lWO4CTq4-q8d!MRR$iu+{0_b|3_N+?lKk8&EM*+`84Y=`}0{kZLKc}jk}VMC_=2l?ZT(S6#j%g(D|)vZ>1 zX=7TzXSuv|62(la7@Skaw2Y*vhJ&5S#ce*`teR=ZyO}i{I$bUjMD#4V$;97bDjP(b z%b48hXm;AT|2Yp@i&}$2oE#SG;jpW&`aYKJl0oy5q^Ti&&h*H#0GlQ!^ujdE zOwqUpv@OzPKbdgBle>>JWB#8%J#8sd!|$L2xV``)6Z&T>(fOzF6Hl`4Bd%0Ls3}VHQR7VSH->LDtrPoq#7fQO@KlP%g_c9OC9bL2k)L;0z zYBh?cGhK)b*L2)1yd$x0*<6`6;{gO2yi}`h@E)dlYObSC#jR9+r5uami!(Vez}0r|MMfKcki=|lP9E;({Vkfo-g}IE~RMe{SldAl#26}(;vVHW7LMTV&m z%okL`sVRkfjiBwb!6p&!rq=I4d&0%jGx>0GTV!2Z;#(O*Vsc;=7utdeI3>R0@;4@qoGkTv;d#&B{|rf;%n&%rX6>=*@MHVk2!z8|e$eLbzJqARK$VuTztN z5CFVl*?Gt}Mb z#lhH%R+hQcNn9Lx!0Xgs_jn0=%(P2Qc7S?(W1 z-j7D6D(W=en_=FrWY!Q=OLispD|T*%k=7XmYXrL z)`uSikWj{ARQ_?=XS%nbjB0J>wV7)aj^juobDS+`wR&|!*m*hjvHbvGC+sPnGrX11 z5qtRhX&!z|i5XOYqN5 zBE5Kw9%C4w)oqxCqVma8B~18=VC?%;KSkz|bh7ynZ;9i>&9*jeoLNXiybV3irf+iM9hBVpX>tr;(B9 zY=Rc8RM)QB`iada+sxN%Aoe=DaM zd={d}<#{P0s%f#gYd7a#n>c_>)&O{P#HPfznWPx=J-tz$K^e76l>dnQHN^gp*N}+4 ciN8X@Qltu=Q6MvU(J7U_4&;87mObKs0QCbtivR!s literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-security-baselines/TOC.md b/windows/security/threat-protection/windows-security-baselines/TOC.md new file mode 100644 index 0000000000..f5a4fbd73a --- /dev/null +++ b/windows/security/threat-protection/windows-security-baselines/TOC.md @@ -0,0 +1,15 @@ +# [Windows security compliance](windows-security-baselines/windows-security-compliance.md) + +## [Windows security baselines](windows-security-baselines/windows-security-baselines.md) +### [Security Compliance Toolkit](windows-security-baselines/security-compliance-toolkit-10.md) +### [Get support](windows-security-baselines/get-support-for-security-baselines.md) +## [Windows SECCON framework](windows-security-baselines/windows-security-configuration-framework.md) +### [SECCON 5 enterprise security](windows-security-baselines/seccon-5-enterprise-security.md) +### [SECCON 4 enterprise high security](windows-security-baselines/seccon-4-high-enterprise-security.md) +### [SECCON 3 enterprise VIP security](windows-security-baselines/seccon-3-vip-enterprise-security.md) +##Windows Security Blog Posts +### [Sticking with Well-Known and Proven Solutions](windows-security-baselines/sticking-with-well-known-and-proven-solutions.md) +### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md) +### [Configuring Account Lockout](windows-security-baselines/configuring-account-lockout.md) +### [Blocking Remote Use of Local Accounts](windows-security-baselines/blocking-remote-use-of-local-accounts.md) +### [Dropping the “Untrusted Font Blocking” setting](windows-security-baselines/dropping-the-untrusted-font-blocking-setting.md) \ No newline at end of file diff --git a/windows/security/threat-protection/windows-security-baselines/seccon-3-enterprise-VIP-security.md b/windows/security/threat-protection/windows-security-baselines/seccon-3-enterprise-VIP-security.md new file mode 100644 index 0000000000..0ee6bba877 --- /dev/null +++ b/windows/security/threat-protection/windows-security-baselines/seccon-3-enterprise-VIP-security.md @@ -0,0 +1,24 @@ +--- +title: SECCON 3 Enterprise VIP Security +description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# SECCON 3 Enterprise VIP Security + +**Applies to** + +- Windows 10 +- Windows Server 2016 +- Office 2016 + diff --git a/windows/security/threat-protection/windows-security-baselines/seccon-4-enterprise-high-security.md b/windows/security/threat-protection/windows-security-baselines/seccon-4-enterprise-high-security.md new file mode 100644 index 0000000000..18545b8fa1 --- /dev/null +++ b/windows/security/threat-protection/windows-security-baselines/seccon-4-enterprise-high-security.md @@ -0,0 +1,24 @@ +--- +title: SECCON 4 Enterprise High Security +description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# SECCON 4 Enterprise High Security + +**Applies to** + +- Windows 10 +- Windows Server 2016 +- Office 2016 + diff --git a/windows/security/threat-protection/windows-security-baselines/seccon-5-enterprise-security.md b/windows/security/threat-protection/windows-security-baselines/seccon-5-enterprise-security.md new file mode 100644 index 0000000000..d7f4409b58 --- /dev/null +++ b/windows/security/threat-protection/windows-security-baselines/seccon-5-enterprise-security.md @@ -0,0 +1,24 @@ +--- +title: SECCON 5 Enterprise Security +description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# SECCON 5 Enterprise Security + +**Applies to** + +- Windows 10 +- Windows Server 2016 +- Office 2016 + diff --git a/windows/security/threat-protection/windows-security-baselines/windows-security-baselines.md b/windows/security/threat-protection/windows-security-baselines/windows-security-baselines.md index 2766b15d05..af866029c2 100644 --- a/windows/security/threat-protection/windows-security-baselines/windows-security-baselines.md +++ b/windows/security/threat-protection/windows-security-baselines/windows-security-baselines.md @@ -58,12 +58,12 @@ You can download the security baselines from the [Microsoft Download Center](htt The security baselines are included in the [Security Compliance Toolkit (SCT)](security-compliance-toolkit-10.md), which can be downloaded from the Microsoft Download Center. The SCT also includes tools to help admins manage the security baselines. -[![Security Compliance Toolkit](images/security-compliance-toolkit-1.png)](security-compliance-toolkit-10.md) -[![Get Support](images/get-support.png)](get-support-for-security-baselines.md) +[![Security Compliance Toolkit](./../images/security-compliance-toolkit-1.png)](security-compliance-toolkit-10.md) +[![Get Support](./../images/get-support.png)](get-support-for-security-baselines.md) ## Community -[![Microsoft Security Guidance Blog](images/community.png)](https://blogs.technet.microsoft.com/secguide/) +[![Microsoft Security Guidance Blog](./../images/community.png)](https://blogs.technet.microsoft.com/secguide/) ## Related Videos @@ -73,8 +73,7 @@ You may also be interested in this msdn channel 9 video: ## See Also - [System Center Configuration Manager (SCCM)](https://www.microsoft.com/cloud-platform/system-center-configuration-manager) -- [Operations Management Suite](https://www.microsoft.com/cloud-platform/operations-management-suite) -- [Configuration Management for Nano Server](https://blogs.technet.microsoft.com/grouppolicy/2016/05/09/configuration-management-on-servers/) +- [Azure Monitor](https://docs.microsoft.com/azure/azure-monitor/) - [Microsoft Security Guidance Blog](https://blogs.technet.microsoft.com/secguide/) - [Microsoft Security Compliance Toolkit Download](https://www.microsoft.com/download/details.aspx?id=55319) - [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=55319) diff --git a/windows/security/threat-protection/windows-security-baselines/windows-security-compliance.md b/windows/security/threat-protection/windows-security-baselines/windows-security-compliance.md new file mode 100644 index 0000000000..6a59458bba --- /dev/null +++ b/windows/security/threat-protection/windows-security-baselines/windows-security-compliance.md @@ -0,0 +1,23 @@ +--- +title: Windows security compliance +description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# Windows security compliance + +**Applies to** + +- Windows 10 +- Windows Server 2016 +- Office 2016 diff --git a/windows/security/threat-protection/windows-security-baselines/windows-security-configuration-framework.md b/windows/security/threat-protection/windows-security-baselines/windows-security-configuration-framework.md new file mode 100644 index 0000000000..fbd3d594b6 --- /dev/null +++ b/windows/security/threat-protection/windows-security-baselines/windows-security-configuration-framework.md @@ -0,0 +1,26 @@ +--- +title: Windows Security Configuration Framework +description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# Windows Security Configuration Framework + +**Applies to** + +- Windows 10 +- Windows Server 2016 +- Office 2016 + + + From 78f02bf1994cc179e4c30220619d9fac31f5855d Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 5 Apr 2019 22:27:33 +0000 Subject: [PATCH 091/349] Updated windows-defender-advanced-threat-protection.md --- .../windows-defender-advanced-threat-protection.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md index 2a9b67612b..893d6a6ef2 100644 --- a/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md @@ -48,9 +48,7 @@ Windows Defender ATP uses the following combination of technology built into Win - + From a594b26c60587c0a86bcfa8345d4b283c9b6e478 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 5 Apr 2019 15:27:47 -0700 Subject: [PATCH 092/349] added intro topic --- ...indows-security-configuration-framework.md | 35 ++++++++++++++++++- 1 file changed, 34 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-security-baselines/windows-security-configuration-framework.md b/windows/security/threat-protection/windows-security-baselines/windows-security-configuration-framework.md index fbd3d594b6..06fc71b69e 100644 --- a/windows/security/threat-protection/windows-security-baselines/windows-security-configuration-framework.md +++ b/windows/security/threat-protection/windows-security-baselines/windows-security-configuration-framework.md @@ -14,7 +14,7 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# Windows Security Configuration Framework +# Introducing the SECCON Framework **Applies to** @@ -22,5 +22,38 @@ ms.date: 04/05/2018 - Windows Server 2016 - Office 2016 +Security configuration is complex. With thousands of group policies available in Windows, choosing the “best” setting is difficult. +It’s not always obvious which permutations of policies are required to implement a complete scenario, and there are often unintended consequences of some security lockdowns. + +Because of this, with each release of Windows, Microsoft publishes [Windows Security Baselines](https://docs.microsoft.com/windows/security/threat-protection/windows-security-baselines), an industry-standard configuration that is broadly known and well-tested. +However, many organizations have discovered that this baseline sets a very high bar. +While appropriate for organizations with very high security needs such as those persistently targeted by Advanced Persistent Threats, some organizations have found that the cost of navigating the potential compatibility impact of this configuration is prohibitively expensive given their risk appetite. +They can’t justify the investment in that very high level of security with an ROI. +Assuch, Microsoft is introducing a new taxonomy for Security Configurations for Windows 10: The SECCON Baselines. + +The SECCON Baselines organize devices into one of 5 distinct security configurations: + +![SECON Framework](./../images/seccon-framework.png) + +The SECCON Baselines divide configuration into Productivity Devices and Privileged Access Workstations. This document will focus on Productivity Devices +(SECCON 5, 4, and 3). +Microsoft’s current guidance on [Privileged Access Workstations](http://aka.ms/privsec) are part of the [Securing Privileged Access roadmap](http://aka.ms/privsec). + +Microsoft recommends reviewing and categorizing your devices, and then configuring them using the prescriptive guidance for that SECCON level. +SECCON 5 should be considered the minimum baseline for an enterprise device, and Microsoft recommends increasing the protection based on both threat environment and risk appetite. + +## Security Control Classification + +The recommendations are grouped into three categories: + +![Security Control Classifications](./../images/security-control-classification.png) + + +## Security Control Deployment Methodologies + +The way Microsoft recommends implementing these controls depends on the +auditability of the control–there are two primary methodologies: + +![Security Control Deployment methodologies](./../images/security-control-deployment-methodologies.png) From 63fb5e129fdc716c788214eccc95cebfe02fdaee Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 5 Apr 2019 22:28:59 +0000 Subject: [PATCH 093/349] Updated overview.md --- .../security/threat-protection/windows-defender-atp/overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/overview.md b/windows/security/threat-protection/windows-defender-atp/overview.md index 727a7c0179..b105b4987a 100644 --- a/windows/security/threat-protection/windows-defender-atp/overview.md +++ b/windows/security/threat-protection/windows-defender-atp/overview.md @@ -33,7 +33,7 @@ Understand the concepts behind the capabilities in Windows Defender ATP so you t Topic | Description :---|:--- -[Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) | Reduce organizational vulnerability exposure and increase threat resilience while seamlessly connecting workflows across security stakeholders—security administrators, security operations, and IT administrators in remediating threats. +[Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) | Reduce organizational vulnerability exposure and increase threat resilience while seamlessly connecting workflows across security stakeholders—security administrators, security operations, and IT administrators in remediating threats. [Attack surface reduction](overview-attack-surface-reduction.md) | Leverage the attack surface reduction capabilities to protect the perimeter of your organization. [Next generation protection](../windows-defender-antivirus/windows-defender-antivirus-in-windows-10.md) | Learn about the antivirus capabilities in Windows Defender ATP so you can protect desktops, portable computers, and servers. [Endpoint detection and response](overview-endpoint-detection-response.md) | Understand how Windows Defender ATP continuously monitors your organization for possible attacks against systems, networks, or users in your organization and the features you can use to mitigate and remediate threats. From 20fc6ff779b9aafba9822b5ab3f44a64254aa16b Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 5 Apr 2019 22:41:14 +0000 Subject: [PATCH 094/349] Updated TOC.md to add TVM ---sequence based on how it appears in the pillars --- .../windows-defender-atp/TOC.md | 20 +++++-------------- 1 file changed, 5 insertions(+), 15 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/TOC.md b/windows/security/threat-protection/windows-defender-atp/TOC.md index 4bb3ffc3db..5dd07a5c83 100644 --- a/windows/security/threat-protection/windows-defender-atp/TOC.md +++ b/windows/security/threat-protection/windows-defender-atp/TOC.md @@ -71,10 +71,11 @@ ### [Secure score](overview-secure-score-windows-defender-advanced-threat-protection.md) + +### [Microsoft Threat Experts](microsoft-threat-experts.md) + ### [Threat analytics](threat-analytics.md) - - ### [Advanced hunting](overview-hunting-windows-defender-advanced-threat-protection.md) #### [Query data using Advanced hunting](advanced-hunting-windows-defender-advanced-threat-protection.md) ##### [Advanced hunting reference](advanced-hunting-reference-windows-defender-advanced-threat-protection.md) @@ -82,23 +83,16 @@ #### [Custom detections](overview-custom-detections.md) #####[Create custom detections rules](custom-detection-rules.md) - ### [Management and APIs](management-apis.md) #### [Understand threat intelligence concepts](threat-indicator-concepts-windows-defender-advanced-threat-protection.md) #### [Windows Defender ATP APIs](apis-intro.md) #### [Managed security service provider support](mssp-support-windows-defender-advanced-threat-protection.md) - ### [Microsoft Threat Protection](threat-protection-integration.md) #### [Protect users, data, and devices with conditional access](conditional-access-windows-defender-advanced-threat-protection.md) #### [Microsoft Cloud App Security in Windows overview](microsoft-cloud-app-security-integration.md) #### [Information protection in Windows overview](information-protection-in-windows-overview.md) - - -### [Microsoft Threat Experts](microsoft-threat-experts.md) - - ### [Portal overview](portal-overview-windows-defender-advanced-threat-protection.md) @@ -214,6 +208,8 @@ ### [Configure Secure score dashboard security controls](secure-score-dashboard-windows-defender-advanced-threat-protection.md) +### [Configure and manage Microsoft Threat Experts capabilities](configure-microsoft-threat-experts.md) + ### Management and API support #### [Onboard machines](onboard-configure-windows-defender-advanced-threat-protection.md) ##### [Onboard previous versions of Windows](onboard-downlevel-windows-defender-advanced-threat-protection.md) @@ -345,11 +341,6 @@ #### [Configure managed security service provider (MSSP) support](configure-mssp-support-windows-defender-advanced-threat-protection.md) - - - -### [Configure and manage Microsoft Threat Experts capabilities](configure-microsoft-threat-experts.md) - ### Configure Microsoft Threat Protection integration #### [Configure conditional access](configure-conditional-access-windows-defender-advanced-threat-protection.md) #### [Configure Microsoft Cloud App Security in Windows](microsoft-cloud-app-security-config.md) @@ -387,7 +378,6 @@ ##### [Offboarding machines](offboard-machines-windows-defender-advanced-threat-protection.md) #### [Configure Windows Security app time zone settings](time-settings-windows-defender-advanced-threat-protection.md) - From 7978bbf2b85007f01b9af4e2917890532a5d37a5 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 5 Apr 2019 22:53:32 +0000 Subject: [PATCH 095/349] Updated whats-new-in-windows-defender-atp.md to add TVM --- .../whats-new-in-windows-defender-atp.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/whats-new-in-windows-defender-atp.md b/windows/security/threat-protection/windows-defender-atp/whats-new-in-windows-defender-atp.md index b73e7bc8b1..d8731d80f8 100644 --- a/windows/security/threat-protection/windows-defender-atp/whats-new-in-windows-defender-atp.md +++ b/windows/security/threat-protection/windows-defender-atp/whats-new-in-windows-defender-atp.md @@ -23,9 +23,15 @@ ms.topic: conceptual Here are the new features in the latest release of Windows Defender ATP as well as security features in Windows 10 and Windows Server. +## April 2019 +### In preview +The following capability is included in the April 2019 preview release. + +- [Threat & Vulnerability Management](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt)
A new built-in capability that uses a risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations.. + ## March 2019 ### In preview -The following capability are included in the February 2019 preview release. +The following capability are included in the March 2019 preview release. - [Machine health and compliance report](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/machine-reports-windows-defender-advanced-threat-protection)
The machine health and compliance report provides high-level information about the devices in your organization. From 13c24ade6b3526e2c6f135bf217d0070efe76b86 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 5 Apr 2019 22:54:03 +0000 Subject: [PATCH 096/349] Updated whats-new-in-windows-defender-atp.md --- .../windows-defender-atp/whats-new-in-windows-defender-atp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/whats-new-in-windows-defender-atp.md b/windows/security/threat-protection/windows-defender-atp/whats-new-in-windows-defender-atp.md index d8731d80f8..6d2c512257 100644 --- a/windows/security/threat-protection/windows-defender-atp/whats-new-in-windows-defender-atp.md +++ b/windows/security/threat-protection/windows-defender-atp/whats-new-in-windows-defender-atp.md @@ -27,7 +27,7 @@ Here are the new features in the latest release of Windows Defender ATP as well ### In preview The following capability is included in the April 2019 preview release. -- [Threat & Vulnerability Management](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt)
A new built-in capability that uses a risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations.. +- [Threat & Vulnerability Management](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt)
A new built-in capability that uses a risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. ## March 2019 ### In preview From 76e4bf73102a1f239a63bf9263ebe604e2190d73 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 5 Apr 2019 23:45:31 +0000 Subject: [PATCH 097/349] Updated next-gen-threat-and-vuln-mgt.md --- .../next-gen-threat-and-vuln-mgt.md | 36 ++++++++++++++++--- 1 file changed, 32 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md index b0005107d5..1bb00c91b1 100644 --- a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md +++ b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md @@ -23,13 +23,41 @@ ms.topic: conceptual [!include[Prerelease�information](prerelease.md)] -Effectively identifying, assessing, and remediating endpoint weaknesses is pivotal in running a healthy security program and reducing organizational risk. Threat & Vulnerability Management serves as an infrustructure for reducing organizational exposure, hardening endpoint surface area, and increasing organizational resilience. It provides the following solutions to frequently-cited gaps across security operations, security administration, and IT administration workflows and communication. -- Continuous threat and vulnerability exposure discovery with runtime information +Effectively identifying, assessing, and remediating endpoint weaknesses is pivotal in running a healthy security program and reducing organizational risk. Threat & Vulnerability Management serves as an infrustructure for reducing organizational exposure, hardening endpoint surface area, and increasing organizational resilience. + +It helps organizations discover vulnerabilities and misconfigurations in real-time, based on sensors, without the need of agents or periodic scans. It prioritizes vulnerabilities based on the threat landscape, detections in your organization, sensitive information on vulnerable devices, and business context. + +## Next-generation capabilities +Threat & Vulnerability Management is built-in, real-time, cloud-powered, fully integrated with Microsoft endpoint security stack, the Microsoft Intelligent Security Graph, and the application analytics knowledgebase. + +It is the first solution in the industry to automate the remediation process through integration with Microsoft Intune and Microsoft System Center Configuration Manager for patching, configuration changes, or upgrades. + +It provides the following solutions to frequently-cited gaps across security operations, security administration, and IT administration workflows and communication. - Real-time endpoint detection and response (EDR) insights correlated with endpoint vulnerabilities -- Linked vulnerability and security configuration assessment data in the context of exposure discovery -- Threat and business context +- Linked machine vulnerability and security configuration assessment data in the context of exposure discovery - Built-in remediation processes through Microsoft Intune and Microsoft System Center Configuration Manager +### Real-time discovery + +To discover endpoint vulnerabilities and misconfiguration, Threat & Vulnerability Management uses the same agentless built-in Microsoft Defender ATP sensors to reduce cumbersome network scans and IT overhead, and provides: +- Real-time device inventory. Devices onboarded to Microsoft Defender ATP automatically report and push vulnerability and security configuration data to the dashboard. +- Visibility into software and vulnerabilities. Optics into the organization’s software inventory, as well as software changes like installations, uninstallations, and patches. Newly discovered vulnerabilities are reported with actionable mitigation recommendations for 1st and 3rd party applications. +- Application runtime context. Constant visibility into application usage patterns for better prioritization and decision-making. Critical dependencies, such as vulnerable runtime libraries being loaded by other applications, are made visible. +- Configuration posture. Visibility into organizational security configuration, surfacing issues like disabled antivirus, enabled SMBv1, or misconfigurations that could allow escalation of privileges. Issues are reported in the dashboard with actionable security recommendations. + +### Intelligence-driven prioritization + +Threat & Vulnerability Management helps customers prioritize and focus on those weaknesses that pose the most urgent and the highest risk to the organization. Rather than using static prioritization by severity scores, Threat & Vulnerability Management in Microsoft Defender ATP highlights the most critical weaknesses that need attention by fusing its security recommendations with dynamic threat and business context: +- Exposing emerging attacks in the wild. Through its advanced cyber data and threat analytics platform, Threat & Vulnerability Management dynamically aligns the prioritization of its security recommendations to focus on vulnerabilities that are currently being exploited in the wild and emerging threats that pose the highest risk. +- Pinpointing active breaches. Microsoft Defender ATP correlates Threat & Vulnerability Management and EDR insights to provide the unique ability to prioritize vulnerabilities that are currently being exploited in an active breach within the organization. +- Protecting high-value assets. Microsoft Defender ATP’s integration with Azure Information Protection allows Threat & Vulnerability Management to call attention to exposed machines with business-critical applications, confidential data, or high-value users. + +### Seamless remediation + +Microsoft Defender ATP’s Threat & Vulnerability Management allows security administrators and IT administrators to collaborate seamlessly to remediate issues. +- One-click remediation requests to IT. Through Microsoft Defender ATP’s integration with Microsoft Intune and System Center Configuration Manager (SCCM), security administrators can create a remediation task in Microsoft Intune with one click. We plan to expand this capability to other IT security management platforms. +- Alternate mitigations. Threat & Vulnerability Management provides insights on additional mitigations, such as configuration changes that can reduce risk associated with software vulnerabilities. +- Real-time remediation status. Microsoft Defender ATP provides real-time monitoring of the status and progress of remediation activities across the organization. ## Related topics - [What's in the dashboard and what it means](tvm-dashboard-insights.md) From 8a137115203827c1640ede0ae8f77254b398c7a8 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 5 Apr 2019 23:51:49 +0000 Subject: [PATCH 098/349] Updated configure-and-manage-tvm.md --- .../windows-defender-atp/configure-and-manage-tvm.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md index a2c8b8ad22..c20b12b838 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md @@ -1,7 +1,7 @@ --- -title: Configure Threat & Vulnerability Management in Windows Defender ATP -description: -keywords: +title: Configure Threat & Vulnerability Management in Microsoft Defender ATP +description: Configure your Threat & Vulnerability Management to allow security administrators and IT administrators to collaborate seamlessly to remediate issues via Microsoft intune and Microsoft System Center Configuration Manager (SCCM) integrations. +keywords: RBAC, Threat & Vulnerability Management configuration, Threat & Vulnerability Management integrations, Microsft Intune integration with TVM, SCCM integration with TVM search.product: Windows 10 search.appverid: met150 ms.prod: w10 From 1802978260306e4c80e9bf400ef1441cffdb4fb6 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Sat, 6 Apr 2019 00:07:36 +0000 Subject: [PATCH 099/349] Updated configure-and-manage-tvm.md --- .../configure-and-manage-tvm.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md index c20b12b838..566da9c4a8 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md @@ -16,3 +16,20 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: article --- +# Configure xxxxx +**Applies to:** +- [Windows Defender Advanced Threat Protection (Windows Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) + +This section guides you through the steps you need to take to configure Threat & Vulnerability Management's integration with Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). Thereby allowing security administrators and IT administrators to collaborate seamlessly to remediate issues. + +### Before you begin +>[!WARNING] +>Ensure that you have the right RBAC permissions to configure your Threat & Vulnerability Management integration with Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). +>Threat & Vulnerability Management data currently supports Windows 10 machines. Upgrade to Windows 10 to account for the rest of your devices’ threat and vulnerability exposure data.
+>Your machines should be enrolled to either Microsoft Intune or Microsoft System Center Configuration Manager (SCCM) to experience the remediation workflow handoff scenario between Security Administrator to IT Administrator. +You can use any of the following options to enroll devices in Intune: +- IT Admin: For more information on how to enabling auto-enrollment, see [Windows Enrollment](https://docs.microsoft.com/intune/windows-enroll#enable-windows-10-automatic-enrollment) +- End-user: For more information on how to enroll your Windows 10 device in Intune, see [Enroll your Windows 10 device in Intune](https://docs.microsoft.com/intune-user-help/enroll-your-w10-device-access-work-or-school) +- End-user alternative: For more information on joining an Azure AD domain, see [Set up Azure Active Directory joined devices](https://docs.microsoft.com/azure/active-directory/device-management-azuread-joined-devices-setup). + + From 4a9d8e5f3551bc371d968da5613e0f31a44b9716 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Sat, 6 Apr 2019 00:08:40 +0000 Subject: [PATCH 100/349] Updated configure-and-manage-tvm.md --- .../windows-defender-atp/configure-and-manage-tvm.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md index 566da9c4a8..adc13dea7e 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md @@ -23,10 +23,10 @@ ms.topic: article This section guides you through the steps you need to take to configure Threat & Vulnerability Management's integration with Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). Thereby allowing security administrators and IT administrators to collaborate seamlessly to remediate issues. ### Before you begin ->[!WARNING] ->Ensure that you have the right RBAC permissions to configure your Threat & Vulnerability Management integration with Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). ->Threat & Vulnerability Management data currently supports Windows 10 machines. Upgrade to Windows 10 to account for the rest of your devices’ threat and vulnerability exposure data.
->Your machines should be enrolled to either Microsoft Intune or Microsoft System Center Configuration Manager (SCCM) to experience the remediation workflow handoff scenario between Security Administrator to IT Administrator. +>[!IMPORTANT] +>- Ensure that you have the right RBAC permissions to configure your Threat & Vulnerability Management integration with Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). +>- Threat & Vulnerability Management data currently supports Windows 10 machines. Upgrade to Windows 10 to account for the rest of your devices’ threat and vulnerability exposure data.
+>- Your machines should be enrolled to either Microsoft Intune or Microsoft System Center Configuration Manager (SCCM) to experience the remediation workflow handoff scenario between Security Administrator to IT Administrator. You can use any of the following options to enroll devices in Intune: - IT Admin: For more information on how to enabling auto-enrollment, see [Windows Enrollment](https://docs.microsoft.com/intune/windows-enroll#enable-windows-10-automatic-enrollment) - End-user: For more information on how to enroll your Windows 10 device in Intune, see [Enroll your Windows 10 device in Intune](https://docs.microsoft.com/intune-user-help/enroll-your-w10-device-access-work-or-school) From 027122edeb8f2d7c67b1e95547038e47124d05da Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Sat, 6 Apr 2019 00:09:56 +0000 Subject: [PATCH 101/349] Updated configure-and-manage-tvm.md --- .../windows-defender-atp/configure-and-manage-tvm.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md index adc13dea7e..06ec11d3ca 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md @@ -20,16 +20,16 @@ ms.topic: article **Applies to:** - [Windows Defender Advanced Threat Protection (Windows Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -This section guides you through the steps you need to take to configure Threat & Vulnerability Management's integration with Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). Thereby allowing security administrators and IT administrators to collaborate seamlessly to remediate issues. +This section guides you through the steps you need to take to configure Threat & Vulnerability Management's integration with Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). It allows security administrators and IT administrators to collaborate seamlessly to remediate issues. ### Before you begin >[!IMPORTANT] >- Ensure that you have the right RBAC permissions to configure your Threat & Vulnerability Management integration with Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). >- Threat & Vulnerability Management data currently supports Windows 10 machines. Upgrade to Windows 10 to account for the rest of your devices’ threat and vulnerability exposure data.
>- Your machines should be enrolled to either Microsoft Intune or Microsoft System Center Configuration Manager (SCCM) to experience the remediation workflow handoff scenario between Security Administrator to IT Administrator. -You can use any of the following options to enroll devices in Intune: -- IT Admin: For more information on how to enabling auto-enrollment, see [Windows Enrollment](https://docs.microsoft.com/intune/windows-enroll#enable-windows-10-automatic-enrollment) -- End-user: For more information on how to enroll your Windows 10 device in Intune, see [Enroll your Windows 10 device in Intune](https://docs.microsoft.com/intune-user-help/enroll-your-w10-device-access-work-or-school) -- End-user alternative: For more information on joining an Azure AD domain, see [Set up Azure Active Directory joined devices](https://docs.microsoft.com/azure/active-directory/device-management-azuread-joined-devices-setup). + You can use any of the following options to enroll devices in Intune: + - IT Admin: For more information on how to enabling auto-enrollment, see [Windows Enrollment](https://docs.microsoft.com/intune/windows-enroll#enable-windows-10-automatic-enrollment) + - End-user: For more information on how to enroll your Windows 10 device in Intune, see [Enroll your Windows 10 device in Intune](https://docs.microsoft.com/intune-user-help/enroll-your-w10-device-access-work-or-school) + - End-user alternative: For more information on joining an Azure AD domain, see [Set up Azure Active Directory joined devices](https://docs.microsoft.com/azure/active-directory/device-management-azuread-joined-devices-setup). From 7d8a258e5e954c451d5e0e81fd2ea07bf1615c17 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Sat, 6 Apr 2019 00:12:37 +0000 Subject: [PATCH 102/349] Updated configure-and-manage-tvm.md --- .../windows-defender-atp/configure-and-manage-tvm.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md index 06ec11d3ca..67b953ee02 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md @@ -27,9 +27,9 @@ This section guides you through the steps you need to take to configure Threat & >- Ensure that you have the right RBAC permissions to configure your Threat & Vulnerability Management integration with Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). >- Threat & Vulnerability Management data currently supports Windows 10 machines. Upgrade to Windows 10 to account for the rest of your devices’ threat and vulnerability exposure data.
>- Your machines should be enrolled to either Microsoft Intune or Microsoft System Center Configuration Manager (SCCM) to experience the remediation workflow handoff scenario between Security Administrator to IT Administrator. - You can use any of the following options to enroll devices in Intune: - - IT Admin: For more information on how to enabling auto-enrollment, see [Windows Enrollment](https://docs.microsoft.com/intune/windows-enroll#enable-windows-10-automatic-enrollment) - - End-user: For more information on how to enroll your Windows 10 device in Intune, see [Enroll your Windows 10 device in Intune](https://docs.microsoft.com/intune-user-help/enroll-your-w10-device-access-work-or-school) - - End-user alternative: For more information on joining an Azure AD domain, see [Set up Azure Active Directory joined devices](https://docs.microsoft.com/azure/active-directory/device-management-azuread-joined-devices-setup). +>--You can use any of the following options to enroll devices in Intune: +>---IT Admin: For more information on how to enabling auto-enrollment, see [Windows Enrollment](https://docs.microsoft.com/intune/windows-enroll#enable-windows-10-automatic-enrollment) +>---End-user: For more information on how to enroll your Windows 10 device in Intune, see [Enroll your Windows 10 device in Intune](https://docs.microsoft.com/intune-user-help/enroll-your-w10-device-access-work-or-school) +>---End-user alternative: For more information on joining an Azure AD domain, see [Set up Azure Active Directory joined devices](https://docs.microsoft.com/azure/active-directory/device-management-azuread-joined-devices-setup). From 4251c075243e5c223dcd3ad5cfefe5b3a25b39ee Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Sat, 6 Apr 2019 00:13:39 +0000 Subject: [PATCH 103/349] Updated configure-and-manage-tvm.md --- .../windows-defender-atp/configure-and-manage-tvm.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md index 67b953ee02..232ff229b9 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md @@ -26,8 +26,7 @@ This section guides you through the steps you need to take to configure Threat & >[!IMPORTANT] >- Ensure that you have the right RBAC permissions to configure your Threat & Vulnerability Management integration with Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). >- Threat & Vulnerability Management data currently supports Windows 10 machines. Upgrade to Windows 10 to account for the rest of your devices’ threat and vulnerability exposure data.
->- Your machines should be enrolled to either Microsoft Intune or Microsoft System Center Configuration Manager (SCCM) to experience the remediation workflow handoff scenario between Security Administrator to IT Administrator. ->--You can use any of the following options to enroll devices in Intune: +>- Your machines should be enrolled to either Microsoft Intune or Microsoft System Center Configuration Manager (SCCM) to experience the remediation workflow handoff scenario between Security Administrator to IT Administrator. You can use any of the following options to enroll devices in Intune: >---IT Admin: For more information on how to enabling auto-enrollment, see [Windows Enrollment](https://docs.microsoft.com/intune/windows-enroll#enable-windows-10-automatic-enrollment) >---End-user: For more information on how to enroll your Windows 10 device in Intune, see [Enroll your Windows 10 device in Intune](https://docs.microsoft.com/intune-user-help/enroll-your-w10-device-access-work-or-school) >---End-user alternative: For more information on joining an Azure AD domain, see [Set up Azure Active Directory joined devices](https://docs.microsoft.com/azure/active-directory/device-management-azuread-joined-devices-setup). From 5135773b4bb60b2e116bae3c6403d242bf4479f3 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Sat, 6 Apr 2019 00:19:00 +0000 Subject: [PATCH 104/349] Updated configure-and-manage-tvm.md --- .../configure-and-manage-tvm.md | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md index 232ff229b9..9e5fa41b21 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md @@ -24,11 +24,15 @@ This section guides you through the steps you need to take to configure Threat & ### Before you begin >[!IMPORTANT] ->- Ensure that you have the right RBAC permissions to configure your Threat & Vulnerability Management integration with Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). ->- Threat & Vulnerability Management data currently supports Windows 10 machines. Upgrade to Windows 10 to account for the rest of your devices’ threat and vulnerability exposure data.
->- Your machines should be enrolled to either Microsoft Intune or Microsoft System Center Configuration Manager (SCCM) to experience the remediation workflow handoff scenario between Security Administrator to IT Administrator. You can use any of the following options to enroll devices in Intune: ->---IT Admin: For more information on how to enabling auto-enrollment, see [Windows Enrollment](https://docs.microsoft.com/intune/windows-enroll#enable-windows-10-automatic-enrollment) ->---End-user: For more information on how to enroll your Windows 10 device in Intune, see [Enroll your Windows 10 device in Intune](https://docs.microsoft.com/intune-user-help/enroll-your-w10-device-access-work-or-school) ->---End-user alternative: For more information on joining an Azure AD domain, see [Set up Azure Active Directory joined devices](https://docs.microsoft.com/azure/active-directory/device-management-azuread-joined-devices-setup). +Threat & Vulnerability Management data currently supports Windows 10 machines. Upgrade to Windows 10 to account for the rest of your devices’ threat and vulnerability exposure data.
+ +Ensure that you have the right RBAC permissions to configure your Threat & Vulnerability Management integration with Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). + +Your machines should be enrolled to either Microsoft Intune or Microsoft System Center Configuration Manager (SCCM) to experience the remediation workflow handoff scenario between Security Administrator to IT Administrator. + +Use any of the following options to enroll devices in Intune: +>- IT Admin: For more information on how to enabling auto-enrollment, see [Windows Enrollment](https://docs.microsoft.com/intune/windows-enroll#enable-windows-10-automatic-enrollment) +>- End-user: For more information on how to enroll your Windows 10 device in Intune, see [Enroll your Windows 10 device in Intune](https://docs.microsoft.com/intune-user-help/enroll-your-w10-device-access-work-or-school) +>- End-user alternative: For more information on joining an Azure AD domain, see [Set up Azure Active Directory joined devices](https://docs.microsoft.com/azure/active-directory/device-management-azuread-joined-devices-setup). From 8af4732885e920853822e2d6cc23c7266656c74b Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Sat, 6 Apr 2019 00:24:56 +0000 Subject: [PATCH 105/349] Updated configure-and-manage-tvm.md --- .../windows-defender-atp/configure-and-manage-tvm.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md index 9e5fa41b21..36512149d3 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md @@ -16,7 +16,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: article --- -# Configure xxxxx +# Configure Threat & Vulnerability Management **Applies to:** - [Windows Defender Advanced Threat Protection (Windows Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) @@ -28,9 +28,9 @@ Threat & Vulnerability Management data currently supports Windows 10 machines. U Ensure that you have the right RBAC permissions to configure your Threat & Vulnerability Management integration with Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). -Your machines should be enrolled to either Microsoft Intune or Microsoft System Center Configuration Manager (SCCM) to experience the remediation workflow handoff scenario between Security Administrator to IT Administrator. - -Use any of the following options to enroll devices in Intune: +>[!WARNING] +>Only Intune and SCCM enrolled devices are supported in this scenario.
+>Use any of the following options to enroll devices in Intune: >- IT Admin: For more information on how to enabling auto-enrollment, see [Windows Enrollment](https://docs.microsoft.com/intune/windows-enroll#enable-windows-10-automatic-enrollment) >- End-user: For more information on how to enroll your Windows 10 device in Intune, see [Enroll your Windows 10 device in Intune](https://docs.microsoft.com/intune-user-help/enroll-your-w10-device-access-work-or-school) >- End-user alternative: For more information on joining an Azure AD domain, see [Set up Azure Active Directory joined devices](https://docs.microsoft.com/azure/active-directory/device-management-azuread-joined-devices-setup). From 9e341da423376ba6a0031f7f779eaff3e8cd2cdd Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Sat, 6 Apr 2019 00:27:28 +0000 Subject: [PATCH 106/349] Updated configure-and-manage-tvm.md with pre-release statement --- .../windows-defender-atp/configure-and-manage-tvm.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md index 36512149d3..dd19f7cd3f 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md @@ -20,6 +20,8 @@ ms.topic: article **Applies to:** - [Windows Defender Advanced Threat Protection (Windows Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) +[!include[Prerelease�information](prerelease.md)] + This section guides you through the steps you need to take to configure Threat & Vulnerability Management's integration with Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). It allows security administrators and IT administrators to collaborate seamlessly to remediate issues. ### Before you begin From b1fc291c99c834fc10f35804f7ac8d29054de0ef Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Sat, 6 Apr 2019 00:29:07 +0000 Subject: [PATCH 107/349] Updated threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 1c680de8bf..784680a051 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -16,3 +16,9 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: article --- + +# Threat & Vulnerability Management scenarios +**Applies to:** +- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) + +[!include[Prerelease�information](prerelease.md)] From 1783a069db51f31c056882f3edf44004b6aa876b Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Sat, 6 Apr 2019 00:40:16 +0000 Subject: [PATCH 108/349] Updated next-gen-threat-and-vuln-mgt.md --- .../windows-defender-atp/next-gen-threat-and-vuln-mgt.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md index 1bb00c91b1..ca9812ba71 100644 --- a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md +++ b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md @@ -1,7 +1,7 @@ --- title: Next-generation Threat & Vulnerability Management description: This new capability uses a game-changing risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. -keywords: threat and vulnerability management, vulnerability management, threat and vulnerability scanning +keywords: threat and vulnerability management, MDATP-TVM, vulnerability management, threat and vulnerability scanning search.product: Windows 10 search.appverid: met150 ms.prod: w10 @@ -19,7 +19,7 @@ ms.topic: conceptual # Threat & Vulnerability Management **Applies to:** -- [Windows Defender Advanced Threat Protection (Windows Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) +- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) [!include[Prerelease�information](prerelease.md)] From e5707af9f737f59feda9fb663fb3158d3ffd1793 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Sat, 6 Apr 2019 00:44:17 +0000 Subject: [PATCH 109/349] Updated configure-and-manage-tvm.md --- .../windows-defender-atp/configure-and-manage-tvm.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md index dd19f7cd3f..94488f23a5 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md @@ -22,7 +22,7 @@ ms.topic: article [!include[Prerelease�information](prerelease.md)] -This section guides you through the steps you need to take to configure Threat & Vulnerability Management's integration with Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). It allows security administrators and IT administrators to collaborate seamlessly to remediate issues. +This section guides you through the steps you need to take to configure Threat & Vulnerability Management's integration with Microsoft Intune or Microsoft System Center Configuration Manager (SCCM) for a seamless collaboration of issue remediation. ### Before you begin >[!IMPORTANT] From 2ad58645bcdc83a32437fec9f39beac70816bb0b Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Sat, 6 Apr 2019 00:44:48 +0000 Subject: [PATCH 110/349] Updated configure-and-manage-tvm.md --- .../windows-defender-atp/configure-and-manage-tvm.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md index 94488f23a5..6d6f575517 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md @@ -18,7 +18,7 @@ ms.topic: article --- # Configure Threat & Vulnerability Management **Applies to:** -- [Windows Defender Advanced Threat Protection (Windows Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) +- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) [!include[Prerelease�information](prerelease.md)] From 2823e9b764344ea1986f2fd5d606684984532f98 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Sat, 6 Apr 2019 02:17:45 +0000 Subject: [PATCH 111/349] Updated tvm-dashboard-insights.md --- .../tvm-dashboard-insights.md | 47 +++++++++++++++++++ 1 file changed, 47 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index af44572e8a..56b40bb2f4 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -16,3 +16,50 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual --- +# Windows Defender Advanced Threat Protection portal overview + +**Applies to:** +- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) + + + +>Want to experience Windows Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-portaloverview-abovefoldlink) + +Enterprise security teams can use Windows Defender Security Center to monitor and assist in responding to alerts of potential advanced persistent threat (APT) activity or data breaches. + +You can use [Windows Defender Security Center](https://securitycenter.windows.com/) to: +- View, sort, and triage alerts from your endpoints +- Search for more information on observed indicators such as files and IP Addresses +- Change Windows Defender ATP settings, including time zone and review licensing information. + +## Windows Defender Security Center +When you open the portal, you’ll see the main areas of the application: + + ![Microsoft Defender Advanced Threat Protection portal](images/dashboard.png) + +- (1) Menu in the navigation pane +- (2) Threat & Vulnerability Management icon +- (3) Threat & Vulnerability Management dashboard + +> [!NOTE] +> Malware related detections will only appear if your machines are using Windows Defender Antivirus as the default real-time protection antimalware product. + +You can navigate through the portal using the menu options available in all sections. Refer to the following table for a description of each section. + +Area | Description +:---|:--- +(1) Menu | Select menu to expand the navigation pane and see the names of the Threat and Vulnerability Management capabilities. +(2) Threat & Vulnerability Management navigation pane** | Use the navigation pane to move across the Threat and Vulnerability Management Dashboard, Security recommendations, Remediation tasks, and Software inventory. +**Dashboards** | Get a high-level view of the organization exposure score, MDATP configuration score, top remediation activities, top security recommendations, top vulnerable software, and top exposed machines data. +**Security recommendations** | See the list of security recommendations, their related components, insights, number or exposed devices, impact, and request for remediation. +**Remediation** | Vvvv +**Software inventory** | Dddddd. +(3) Threat & Vulnerability Management dashboard | Access the Exposure score, Configuration score, Exposure distrubition, Top security recommendations, Top vulnerable software, Top remediation activities, Top exposed machines, and Threat campaigns. + +See [Microsoft Defender ATP icons](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection#windows-defender-atp-icons) to provide the information on the icons used throughout the portal. + +## Related topics +- [Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) +- [Configuration score](configuration-score.md) +- [Configure Threat & Vulnerability Management](configure-and-manage-tvm.md) +- [Scenarios](threat-and-vuln-mgt-scenarios.md) \ No newline at end of file From 7fc53e3a03678132f2e962270a22374650f33912 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Sat, 6 Apr 2019 02:18:33 +0000 Subject: [PATCH 112/349] Updated tvm-dashboard-insights.md --- .../windows-defender-atp/tvm-dashboard-insights.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index 56b40bb2f4..10403f1c98 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -21,6 +21,8 @@ ms.topic: conceptual **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) +[!include[Prerelease�information](prerelease.md)] + >Want to experience Windows Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-portaloverview-abovefoldlink) From 646d20dcac63cf0b11daa6c1dd39b99c524bcd92 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Sat, 6 Apr 2019 22:54:52 +0500 Subject: [PATCH 113/349] NT SERVICE\WdiServiceHost was missing in Doc The default value for this policy is Administrators and NT SERVICE\WdiServiceHost where as NT SERVICE\WdiServiceHost was missing in the doc. I have updated the doc accordingly. --- .../security-policy-settings/profile-system-performance.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/security-policy-settings/profile-system-performance.md b/windows/security/threat-protection/security-policy-settings/profile-system-performance.md index a7425d8dc2..f8330aeb84 100644 --- a/windows/security/threat-protection/security-policy-settings/profile-system-performance.md +++ b/windows/security/threat-protection/security-policy-settings/profile-system-performance.md @@ -44,7 +44,7 @@ Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Use ### Default values -By default this setting is Administrators on domain controllers and on stand-alone servers. +By default this setting is Administrators and NT SERVICE\WdiServiceHost on domain controllers and on stand-alone servers. The following table lists the actual and effective default policy values for the most recent supported versions of Windows. Default values are also listed on the policy’s property page. From 0793ec9a83c5af3601078a39555c954bbd44bf69 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Mon, 8 Apr 2019 15:11:47 +0500 Subject: [PATCH 114/349] Comma was missing The comma was missing as suggested by copy editor team. --- .../security-policy-settings/profile-system-performance.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/security-policy-settings/profile-system-performance.md b/windows/security/threat-protection/security-policy-settings/profile-system-performance.md index f8330aeb84..06d22fc8d2 100644 --- a/windows/security/threat-protection/security-policy-settings/profile-system-performance.md +++ b/windows/security/threat-protection/security-policy-settings/profile-system-performance.md @@ -44,7 +44,7 @@ Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Use ### Default values -By default this setting is Administrators and NT SERVICE\WdiServiceHost on domain controllers and on stand-alone servers. +By default, this setting is Administrators and NT SERVICE\WdiServiceHost on domain controllers and on stand-alone servers. The following table lists the actual and effective default policy values for the most recent supported versions of Windows. Default values are also listed on the policy’s property page. From 82c19bb76e2fa856981bf1ce6dbebaa16864546f Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 8 Apr 2019 09:51:24 -0700 Subject: [PATCH 115/349] renamed files --- windows/security/threat-protection/TOC.md | 29 ++++++++++--------- .../windows-seccon-framework/TOC.md | 17 +++++++++++ .../get-support-for-security-baselines.md | 0 ...on-1-enterprise-administrator-security.md} | 0 .../seccon-2-enterprise-devops-security.md | 24 +++++++++++++++ .../seccon-3-enterprise-VIP-security.md | 24 +++++++++++++++ .../seccon-4-enterprise-high-security.md | 0 .../seccon-5-enterprise-security.md | 0 .../security-compliance-toolkit-10.md | 0 .../windows-security-baselines.md | 0 .../blocking-remote-use-of-local-accounts.md | 0 .../configuring-account-lockout.md | 0 ...ing-the-untrusted-font-blocking-setting.md | 0 ...ng-with-well-known-and-proven-solutions.md | 0 ...were-not-recommending-fips-mode-anymore.md | 0 .../windows-security-compliance.md | 0 ...indows-security-configuration-framework.md | 0 .../windows-security-baselines/TOC.md | 15 ---------- 18 files changed, 81 insertions(+), 28 deletions(-) create mode 100644 windows/security/threat-protection/windows-seccon-framework/TOC.md rename windows/security/threat-protection/{windows-security-baselines => windows-seccon-framework}/get-support-for-security-baselines.md (100%) rename windows/security/threat-protection/{windows-security-baselines/seccon-3-enterprise-VIP-security.md => windows-seccon-framework/seccon-1-enterprise-administrator-security.md} (100%) create mode 100644 windows/security/threat-protection/windows-seccon-framework/seccon-2-enterprise-devops-security.md create mode 100644 windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md rename windows/security/threat-protection/{windows-security-baselines => windows-seccon-framework}/seccon-4-enterprise-high-security.md (100%) rename windows/security/threat-protection/{windows-security-baselines => windows-seccon-framework}/seccon-5-enterprise-security.md (100%) rename windows/security/threat-protection/{windows-security-baselines => windows-seccon-framework}/security-compliance-toolkit-10.md (100%) rename windows/security/threat-protection/{windows-security-baselines => windows-seccon-framework}/windows-security-baselines.md (100%) rename windows/security/threat-protection/{windows-security-baselines => windows-seccon-framework/windows-security-blog}/blocking-remote-use-of-local-accounts.md (100%) rename windows/security/threat-protection/{windows-security-baselines => windows-seccon-framework/windows-security-blog}/configuring-account-lockout.md (100%) rename windows/security/threat-protection/{windows-security-baselines => windows-seccon-framework/windows-security-blog}/dropping-the-untrusted-font-blocking-setting.md (100%) rename windows/security/threat-protection/{windows-security-baselines => windows-seccon-framework/windows-security-blog}/sticking-with-well-known-and-proven-solutions.md (100%) rename windows/security/threat-protection/{windows-security-baselines => windows-seccon-framework/windows-security-blog}/why-were-not-recommending-fips-mode-anymore.md (100%) rename windows/security/threat-protection/{windows-security-baselines => windows-seccon-framework}/windows-security-compliance.md (100%) rename windows/security/threat-protection/{windows-security-baselines => windows-seccon-framework}/windows-security-configuration-framework.md (100%) delete mode 100644 windows/security/threat-protection/windows-security-baselines/TOC.md diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index d60b30950a..1cf0d92355 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -1019,19 +1019,22 @@ ###### [Take ownership of files or other objects](security-policy-settings/take-ownership-of-files-or-other-objects.md) -### [Windows security baselines](windows-security-baselines/windows-security-baselines.md) -#### [Security Compliance Toolkit](windows-security-baselines/security-compliance-toolkit-10.md) -#### [Get support](windows-security-baselines/get-support-for-security-baselines.md) -### [Windows SECCON framework](windows-security-baselines/windows-security-configuration-framework.md) -#### [SECCON 5 enterprise security](windows-security-baselines/seccon-5-enterprise-security.md) -#### [SECCON 4 enterprise high security](windows-security-baselines/seccon-4-high-enterprise-security.md) -#### [SECCON 3 enterprise VIP security](windows-security-baselines/seccon-3-vip-enterprise-security.md) -###Windows Security Blog Posts -#### [Sticking with Well-Known and Proven Solutions](windows-security-baselines/sticking-with-well-known-and-proven-solutions.md) -#### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md) -#### [Configuring Account Lockout](windows-security-baselines/configuring-account-lockout.md) -#### [Blocking Remote Use of Local Accounts](windows-security-baselines/blocking-remote-use-of-local-accounts.md) -#### [Dropping the “Untrusted Font Blocking” setting](windows-security-baselines/dropping-the-untrusted-font-blocking-setting.md) +### [Windows security compliance](windows-seccon-framework/windows-security-compliance.md) +#### [Windows security baselines](windows-seccon-framework/windows-security-baselines.md) +##### [Security Compliance Toolkit](windows-seccon-framework/security-compliance-toolkit-10.md) +##### [Get support](windows-seccon-framework/get-support-for-security-baselines.md) +#### [Windows SECCON framework](windows-seccon-framework/windows-security-configuration-framework.md) +##### [SECCON 1 enterprise administrator security](windows-seccon-framework/seccon-5-enterprise-administrator-security.md) +##### [SECCON 2 enterprise dev/ops security](windows-seccon-framework/seccon-5-enterprise-devops-security.md) +##### [SECCON 3 enterprise VIP security](windows-seccon-framework/seccon-3-vip-enterprise-security.md) +##### [SECCON 4 enterprise high security](windows-seccon-framework/seccon-4-high-enterprise-security.md) +##### [SECCON 5 enterprise security](windows-seccon-framework/seccon-5-enterprise-security.md) +####Windows Security Blog Posts +##### [Sticking with Well-Known and Proven Solutions](windows-seccon-framework/windows-security-blog/sticking-with-well-known-and-proven-solutions.md) +##### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-seccon-framework/windows-security-blog/why-were-not-recommending-fips-mode-anymore.md) +##### [Configuring Account Lockout](windows-seccon-framework/windows-security-blog/configuring-account-lockout.md) +##### [Blocking Remote Use of Local Accounts](windows-seccon-framework/windows-security-blog/blocking-remote-use-of-local-accounts.md) +##### [Dropping the “Untrusted Font Blocking” setting](windows-seccon-framework/windows-security-blog/dropping-the-untrusted-font-blocking-setting.md) ### [MBSA removal and alternatives](mbsa-removal-and-guidance.md) diff --git a/windows/security/threat-protection/windows-seccon-framework/TOC.md b/windows/security/threat-protection/windows-seccon-framework/TOC.md new file mode 100644 index 0000000000..847450193e --- /dev/null +++ b/windows/security/threat-protection/windows-seccon-framework/TOC.md @@ -0,0 +1,17 @@ +# [Windows security compliance](windows-seccon-framework/windows-security-compliance.md) + +## [Windows security baselines](windows-seccon-framework/windows-security-baselines.md) +### [Security Compliance Toolkit](windows-seccon-framework/security-compliance-toolkit-10.md) +### [Get support](windows-seccon-framework/get-support-for-security-baselines.md) +## [Windows SECCON framework](windows-seccon-framework/windows-security-configuration-framework.md) +### [SECCON 1 enterprise administrator security](windows-seccon-framework/seccon-5-enterprise-administrator-security.md) +### [SECCON 2 enterprise dev/ops security](windows-seccon-framework/seccon-5-enterprise-devops-security.md) +### [SECCON 3 enterprise VIP security](windows-seccon-framework/seccon-3-vip-enterprise-security.md) +### [SECCON 4 enterprise high security](windows-seccon-framework/seccon-4-high-enterprise-security.md) +### [SECCON 5 enterprise security](windows-seccon-framework/seccon-5-enterprise-security.md) +##Windows Security Blog Posts +### [Sticking with Well-Known and Proven Solutions](windows-seccon-framework/windows-security-blog/sticking-with-well-known-and-proven-solutions.md) +### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-seccon-framework/windows-security-blog/why-were-not-recommending-fips-mode-anymore.md) +### [Configuring Account Lockout](windows-seccon-framework/windows-security-blog/configuring-account-lockout.md) +### [Blocking Remote Use of Local Accounts](windows-seccon-framework/windows-security-blog/blocking-remote-use-of-local-accounts.md) +### [Dropping the “Untrusted Font Blocking” setting](windows-seccon-framework/windows-security-blog/dropping-the-untrusted-font-blocking-setting.md) \ No newline at end of file diff --git a/windows/security/threat-protection/windows-security-baselines/get-support-for-security-baselines.md b/windows/security/threat-protection/windows-seccon-framework/get-support-for-security-baselines.md similarity index 100% rename from windows/security/threat-protection/windows-security-baselines/get-support-for-security-baselines.md rename to windows/security/threat-protection/windows-seccon-framework/get-support-for-security-baselines.md diff --git a/windows/security/threat-protection/windows-security-baselines/seccon-3-enterprise-VIP-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-1-enterprise-administrator-security.md similarity index 100% rename from windows/security/threat-protection/windows-security-baselines/seccon-3-enterprise-VIP-security.md rename to windows/security/threat-protection/windows-seccon-framework/seccon-1-enterprise-administrator-security.md diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-2-enterprise-devops-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-2-enterprise-devops-security.md new file mode 100644 index 0000000000..0ee6bba877 --- /dev/null +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-2-enterprise-devops-security.md @@ -0,0 +1,24 @@ +--- +title: SECCON 3 Enterprise VIP Security +description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# SECCON 3 Enterprise VIP Security + +**Applies to** + +- Windows 10 +- Windows Server 2016 +- Office 2016 + diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md new file mode 100644 index 0000000000..0ee6bba877 --- /dev/null +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md @@ -0,0 +1,24 @@ +--- +title: SECCON 3 Enterprise VIP Security +description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# SECCON 3 Enterprise VIP Security + +**Applies to** + +- Windows 10 +- Windows Server 2016 +- Office 2016 + diff --git a/windows/security/threat-protection/windows-security-baselines/seccon-4-enterprise-high-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md similarity index 100% rename from windows/security/threat-protection/windows-security-baselines/seccon-4-enterprise-high-security.md rename to windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md diff --git a/windows/security/threat-protection/windows-security-baselines/seccon-5-enterprise-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md similarity index 100% rename from windows/security/threat-protection/windows-security-baselines/seccon-5-enterprise-security.md rename to windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md diff --git a/windows/security/threat-protection/windows-security-baselines/security-compliance-toolkit-10.md b/windows/security/threat-protection/windows-seccon-framework/security-compliance-toolkit-10.md similarity index 100% rename from windows/security/threat-protection/windows-security-baselines/security-compliance-toolkit-10.md rename to windows/security/threat-protection/windows-seccon-framework/security-compliance-toolkit-10.md diff --git a/windows/security/threat-protection/windows-security-baselines/windows-security-baselines.md b/windows/security/threat-protection/windows-seccon-framework/windows-security-baselines.md similarity index 100% rename from windows/security/threat-protection/windows-security-baselines/windows-security-baselines.md rename to windows/security/threat-protection/windows-seccon-framework/windows-security-baselines.md diff --git a/windows/security/threat-protection/windows-security-baselines/blocking-remote-use-of-local-accounts.md b/windows/security/threat-protection/windows-seccon-framework/windows-security-blog/blocking-remote-use-of-local-accounts.md similarity index 100% rename from windows/security/threat-protection/windows-security-baselines/blocking-remote-use-of-local-accounts.md rename to windows/security/threat-protection/windows-seccon-framework/windows-security-blog/blocking-remote-use-of-local-accounts.md diff --git a/windows/security/threat-protection/windows-security-baselines/configuring-account-lockout.md b/windows/security/threat-protection/windows-seccon-framework/windows-security-blog/configuring-account-lockout.md similarity index 100% rename from windows/security/threat-protection/windows-security-baselines/configuring-account-lockout.md rename to windows/security/threat-protection/windows-seccon-framework/windows-security-blog/configuring-account-lockout.md diff --git a/windows/security/threat-protection/windows-security-baselines/dropping-the-untrusted-font-blocking-setting.md b/windows/security/threat-protection/windows-seccon-framework/windows-security-blog/dropping-the-untrusted-font-blocking-setting.md similarity index 100% rename from windows/security/threat-protection/windows-security-baselines/dropping-the-untrusted-font-blocking-setting.md rename to windows/security/threat-protection/windows-seccon-framework/windows-security-blog/dropping-the-untrusted-font-blocking-setting.md diff --git a/windows/security/threat-protection/windows-security-baselines/sticking-with-well-known-and-proven-solutions.md b/windows/security/threat-protection/windows-seccon-framework/windows-security-blog/sticking-with-well-known-and-proven-solutions.md similarity index 100% rename from windows/security/threat-protection/windows-security-baselines/sticking-with-well-known-and-proven-solutions.md rename to windows/security/threat-protection/windows-seccon-framework/windows-security-blog/sticking-with-well-known-and-proven-solutions.md diff --git a/windows/security/threat-protection/windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md b/windows/security/threat-protection/windows-seccon-framework/windows-security-blog/why-were-not-recommending-fips-mode-anymore.md similarity index 100% rename from windows/security/threat-protection/windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md rename to windows/security/threat-protection/windows-seccon-framework/windows-security-blog/why-were-not-recommending-fips-mode-anymore.md diff --git a/windows/security/threat-protection/windows-security-baselines/windows-security-compliance.md b/windows/security/threat-protection/windows-seccon-framework/windows-security-compliance.md similarity index 100% rename from windows/security/threat-protection/windows-security-baselines/windows-security-compliance.md rename to windows/security/threat-protection/windows-seccon-framework/windows-security-compliance.md diff --git a/windows/security/threat-protection/windows-security-baselines/windows-security-configuration-framework.md b/windows/security/threat-protection/windows-seccon-framework/windows-security-configuration-framework.md similarity index 100% rename from windows/security/threat-protection/windows-security-baselines/windows-security-configuration-framework.md rename to windows/security/threat-protection/windows-seccon-framework/windows-security-configuration-framework.md diff --git a/windows/security/threat-protection/windows-security-baselines/TOC.md b/windows/security/threat-protection/windows-security-baselines/TOC.md deleted file mode 100644 index f5a4fbd73a..0000000000 --- a/windows/security/threat-protection/windows-security-baselines/TOC.md +++ /dev/null @@ -1,15 +0,0 @@ -# [Windows security compliance](windows-security-baselines/windows-security-compliance.md) - -## [Windows security baselines](windows-security-baselines/windows-security-baselines.md) -### [Security Compliance Toolkit](windows-security-baselines/security-compliance-toolkit-10.md) -### [Get support](windows-security-baselines/get-support-for-security-baselines.md) -## [Windows SECCON framework](windows-security-baselines/windows-security-configuration-framework.md) -### [SECCON 5 enterprise security](windows-security-baselines/seccon-5-enterprise-security.md) -### [SECCON 4 enterprise high security](windows-security-baselines/seccon-4-high-enterprise-security.md) -### [SECCON 3 enterprise VIP security](windows-security-baselines/seccon-3-vip-enterprise-security.md) -##Windows Security Blog Posts -### [Sticking with Well-Known and Proven Solutions](windows-security-baselines/sticking-with-well-known-and-proven-solutions.md) -### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md) -### [Configuring Account Lockout](windows-security-baselines/configuring-account-lockout.md) -### [Blocking Remote Use of Local Accounts](windows-security-baselines/blocking-remote-use-of-local-accounts.md) -### [Dropping the “Untrusted Font Blocking” setting](windows-security-baselines/dropping-the-untrusted-font-blocking-setting.md) \ No newline at end of file From fce180e11836e9c91ef1d371e952da4ed14b5db2 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 8 Apr 2019 11:16:04 -0700 Subject: [PATCH 116/349] adde text for levels 1-3 --- ...con-1-enterprise-administrator-security.md | 11 +- .../seccon-2-enterprise-devops-security.md | 9 +- .../seccon-3-enterprise-VIP-security.md | 121 +++++++++++++++++- 3 files changed, 134 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-1-enterprise-administrator-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-1-enterprise-administrator-security.md index 0ee6bba877..115f7495b7 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-1-enterprise-administrator-security.md +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-1-enterprise-administrator-security.md @@ -1,6 +1,6 @@ --- -title: SECCON 3 Enterprise VIP Security -description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +title: SECCON 1 enterprise administrator security +description: This article, and the articles it links to, describe how to use the Windows SECCON framework in your organization keywords: virtualization, security, malware ms.prod: w10 ms.mktglfcycl: deploy @@ -14,7 +14,7 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# SECCON 3 Enterprise VIP Security +# SECCON 1 security configuration for enterprise administrators **Applies to** @@ -22,3 +22,8 @@ ms.date: 04/05/2018 - Windows Server 2016 - Office 2016 + +Administrators (particularly of identity or security systems) present the highest risk to the organization−through data theft, data alteration, or service disruption. +SECCON 1 guidance to help protect devices used by administrators is coming soon! + + diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-2-enterprise-devops-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-2-enterprise-devops-security.md index 0ee6bba877..3bd6d70cc8 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-2-enterprise-devops-security.md +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-2-enterprise-devops-security.md @@ -1,6 +1,6 @@ --- -title: SECCON 3 Enterprise VIP Security -description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +title: SECCON 2 enterprise devops security +description: This article, and the articles it links to, describe how to use the Windows SECCON framework in your organization keywords: virtualization, security, malware ms.prod: w10 ms.mktglfcycl: deploy @@ -14,7 +14,7 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# SECCON 3 Enterprise VIP Security +# SECCON 2 enterprise devops security **Applies to** @@ -22,3 +22,6 @@ ms.date: 04/05/2018 - Windows Server 2016 - Office 2016 +We recommend this configuration for developers and testers, who are an attractive target both for supply chain attacks and access to servers and systems containing high value data or where critical business functions could be disrupted. SecCon 2 guidance is coming soon! + + diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md index 0ee6bba877..45d186bd76 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md @@ -1,6 +1,6 @@ --- title: SECCON 3 Enterprise VIP Security -description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +description: This article, and the articles it links to, describe how to use the Windows SECCON framework in your organization keywords: virtualization, security, malware ms.prod: w10 ms.mktglfcycl: deploy @@ -22,3 +22,122 @@ ms.date: 04/05/2018 - Windows Server 2016 - Office 2016 +SECCON 3 is the security configuration recommended as a standard for organizations with large and sophisticated security organizations, or for specific users and groups who will be uniquely targeted by adversaries. Such organizations are typically targeted by well-funded and sophisticated adversaries, and as such merit the additional constraints and controls described here. +A SECCON 3 configuration should include all the configurations from SECCON 5 and SECCON 4 and add the following security controls. + +## Behaviors + +The behaviors recommended in SECCON 3 represent the most sophisticated security +configuration. Removing admin rights can be difficult, but it is essential to +achieve a level of security commensurate with the risks facing the most targeted +organizations. + +| Feature Set | Feature | Description | +|--------------|----------|--------------| +| Remove Admin Rights | Remove as many users as possible from the local Administrators group, targeting 0. Microsoft recommends removing admin rights role by role. Some roles are more challenging, including:
- Developers, who often install rapidly iterating software which is difficult to package using current software distribution systems
- Scientists/ Doctors, who often must install and operate specialized hardware devices
- Remote locations with slow web links, where administration is delegated
It is typically easier to address these roles later in the process.
Microsoft recommends identifying the dependencies on admin rights and systematically addressing them:
- Legitimate use of admin rights: crowdsourced admin, where a new process is needed to complete that workflow
- Illegitimate use of admin rights: app compat dependency, where app remediation is the best path. The [Desktop App Assure](https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/What-is-Desktop-App-Assure/ba-p/270232) program can assist with these app issues | Running as non-admin limits your exposure. When you are an admin, every program you run has unlimited access to your computer. If malicious code finds its way to one of those programs, it also gains unlimited access. When an exploit runs with admin privileges, its ability to compromise your system is much greater, its ability to do so without detection is much greater, and its ability to attack others on your network is greater than it would be with only User privileges. If you’re running as admin, an exploit can:
- install kernel-mode rootkits and/or keyloggers
- install and start services
- install ActiveX controls, including IE and shell add-ins
- access data belonging to other users
- cause code to run whenever anybody else logs on (including capturing passwords entered into the Ctrl-Alt-Del logon dialog)
- replace OS and other program files with trojan horses
- disable/uninstall anti-virus
- cover its tracks in the event log
- render your machine unbootable | + +## Controls + +The controls enforced in SECCON 3 implement complex security configuration and controls. +They are likely to have a higher impact to users or to applications, +enforcing a level of security commensurate with the risks facing the most targeted organizations. +Microsoft recommends using the Audit/Enforce methodology for controls with audit mode, and the rings methodology for those that do +not. + +| Feature Set | Feature | Description | +|--------------|----------|--------------| +| Exploit protection | Enable exploit protection | Exploit protection helps protect devices from malware that use exploits to spread and infect to other devices. It consists of several mitigations that can be applied at the individual app level. | +| Windows Defender Application Control (WDAC) *or* AppLocker | Configure devices to use application whitelisting using one of the following approaches:
- AaronLocker (admin writeable areas) when software distribution is not always centralized
*or*
- Managed installer when all software is pushed through software distribution
*or*
- Explicit control when the software on a device is static and tightly controlled | Application control is a crucial line of defense for protecting enterprises given today’s threat landscape, and it has an inherent advantage over traditional antivirus solutions. Specifically, application control moves away from the traditional application trust model where all applications are assumed trustworthy by default to one where applications must earn trust in order to run. Application Control can help mitigate these types of security threats by restricting the applications that users can run and the code that runs in the System Core (kernel). WDAC policies also block unsigned scripts and MSIs, and Windows PowerShell runs in [Constrained Language Mode](https://devblogs.microsoft.com/powershell/powershell-constrained-language-mode/). | + + +## Policies + +The policies enforced in SECCON 3 implement strict security configuration and controls. They can have a potentially significant impact to users or to applications, enforcing a level of security commensurate with the risks facing targeted organizations. Microsoft recommends disciplined testing and deployment using the rings methodology. + +### Security Template Policies + +| Feature | Policy Setting | Policy Value | Description | +|----------|-----------------|---------------|--------------| +| [Account Lockout](https://blogs.technet.microsoft.com/secguide/2014/08/13/configuring-account-lockout/) | Account lockout duration | 15 | The number of minutes a locked-out account remains locked out before automatically becoming unlocked. | +| [Account Lockout](https://blogs.technet.microsoft.com/secguide/2014/08/13/configuring-account-lockout/) | Account lockout threshold | 10 | The number of failed logon attempts that causes a user account to be locked out. | +| [Account Lockout](https://blogs.technet.microsoft.com/secguide/2014/08/13/configuring-account-lockout/) | Reset account lockout counter after | 15 | The number of minutes that must elapse after a failed logon attempt before the failed logon attempt counter is reset to 0 bad logon attempts. | +| Password Policy | Maximum password age | 60 | The number of days that a password can be used before the system requires the user to change it. | +| Password Policy | Minimum password age | 1 | The number of days that a password must be used before a user can change it. | +| Security Options | Accounts: Administrator account status | Disabled | This security setting determines whether the local Administrator account is enabled or disabled. | +| Security Options | Accounts: Limit local account use of blank passwords to console logon only | Enabled | This security setting determines whether local accounts that are not password protected can be used to log on from locations other than the physical computer console. If enabled, local accounts that are not password protected will only be able to log on at the computer's keyboard. | +| Security Options | Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings | Enabled | Windows Vista and later versions of Windows allow audit policy to be managed in a more precise way using audit policy subcategories. Setting audit policy at the category level will override the new subcategory audit policy feature. Group Policy only allows audit policy to be set at the category level, and existing Group Policy may override the subcategory settings of new machines as they are joined to the domain or upgraded. To allow audit policy to be managed using subcategories without requiring a change to Group Policy, there is a new registry value in Windows Vista and later versions, SCENoApplyLegacyAuditPolicy, which prevents the application of category-level audit policy from Group Policy and from the Local Security Policy administrative tool. | +| Security Options | Domain member: Digitally encrypt or sign secure channel data (always) | Enabled | This security setting determines whether all secure channel traffic initiated by the domain member must be signed or encrypted. This setting determines whether all secure channel traffic initiated by the domain member meets minimum security requirements. Specifically, it determines whether all secure channel traffic initiated by the domain member must be signed or encrypted. If this policy is enabled, then the secure channel will not be established unless either signing or encryption of all secure channel traffic is negotiated. If this policy is disabled, then encryption and signing of all secure channel traffic is negotiated with the Domain Controller in which case the level of signing and encryption depends on the version of the Domain Controller and the settings of the following two policies:
- Domain member: Digitally encrypt secure channel data (when possible)
- Domain member: Digitally sign secure channel data (when possible) | +| Security Options | Domain member: Digitally encrypt secure channel data (when possible) | Enabled | This security setting determines whether a domain member attempts to negotiate encryption for all secure channel traffic that it initiates. If enabled, the domain member will request encryption of all secure channel traffic. If the domain controller supports encryption of all secure channel traffic, then all secure channel traffic will be encrypted. Otherwise, only logon information transmitted over the secure channel will be encrypted. If this setting is disabled, then the domain member will not attempt to negotiate secure channel encryption. | +| Security Options | Domain member: Digitally sign secure channel data (when possible) | Enabled | This security setting determines whether a domain member attempts to negotiate signing for all secure channel traffic that it initiates. If enabled, the domain member will request signing of all secure channel traffic. If the Domain Controller supports signing of all secure channel traffic, then all secure channel traffic will be signed, which ensures that it cannot be tampered with in transit. | +| Security Options | Interactive logon: Smart card removal behavior | Lock Workstation | This security setting determines what happens when the smart card for a logged-on user is removed from the smart card reader. If you click **Lock Workstation** in the **Properties** for this policy, the workstation is locked when the smart card is removed, allowing users to leave the area, take their smart cards with them, and still maintain protected sessions. For this setting to work beginning with Windows Vista, the Smart Card Removal Policy service must be started. | +| Security Options | Microsoft network client: Digitally sign communications (always) | Enabled | This security setting determines whether packet signing is required by the SMB client component. | +| Security Options | Microsoft network server: Digitally sign communications (always) | Enabled | This security setting determines whether packet signing is required by the SMB server component. | +| Security Options | Network access: Do not allow anonymous enumeration of SAM accounts | Enabled | This security setting determines what additional permissions will be granted for anonymous connections to the computer. Windows allows anonymous users to perform certain activities, such as enumerating the names of domain accounts and network shares. This is convenient, for example, when an administrator wants to grant access to users in a trusted domain that does not maintain a reciprocal trust. This security option allows additional restrictions to be placed on anonymous connections as follows: Enabled: Do not allow enumeration of SAM accounts. This option replaces Everyone with Authenticated Users in the security permissions for resources. | +| Security Options | Network access: Do not allow anonymous enumeration of SAM accounts and shares | Enabled | This security setting determines whether anonymous enumeration of SAM accounts and shares is allowed. Windows allows anonymous users to perform certain activities, such as enumerating the names of domain accounts and network shares. This is convenient, for example, when an administrator wants to grant access to users in a trusted domain that does not maintain a reciprocal trust. If you do not want to allow anonymous enumeration of SAM accounts and shares, then enable this policy. | +| Security Options | Network access: Restrict anonymous access to Named Pipes and Shares | Enabled | When enabled, this security setting restricts anonymous access to shares and pipes to the settings for:
- Network access: Named pipes that can be accessed anonymously
- Network access: Shares that can be accessed anonymously | +| Security Options | Network security: Allow PKU2U authentication requests to this computer to use online identities. | Disabled | This policy will be turned off by default on domain joined machines. This would prevent online identities from authenticating to the domain joined machine. | +| Security Options | Network security: LDAP client signing requirements | Negotiate signing | This security setting determines the level of data signing that is requested on behalf of clients issuing LDAP BIND requests, as follows: Negotiate signing: If Transport Layer Security/Secure Sockets Layer (TLS\\SSL) has not been started, the LDAP BIND request is initiated with the LDAP data signing option set in addition to the options specified by the caller. If TLS\\SSL has been started, the LDAP BIND request is initiated with the options that are specified by the caller. | +| Security Options | System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links) | Enabled | This security setting determines the strength of the default discretionary access control list (DACL) for objects. Active Directory maintains a global list of shared system resources, such as DOS device names, mutexes, and semaphores. In this way, objects can be located and shared among processes. Each type of object is created with a default DACL that specifies who can access the objects and what permissions are granted. If this policy is enabled, the default DACL is stronger, allowing users who are not administrators to read shared objects but not allowing these users to modify shared objects that they did not create. | +| Security Options | User Account Control: Behavior of the elevation prompt for standard users | Automatically deny elevation requests | This policy setting controls the behavior of the elevation prompt for standard users. Automatically deny elevation requests: When an operation requires elevation of privilege, an access denied error message is displayed. An enterprise that is running desktops as standard user may choose this setting to reduce help desk calls. | + +### Computer Policies + +| Feature | Policy Setting | Policy Value | Description | +|----------|-----------------|---------------|--------------| +| Control Panel / Personalization | Prevent enabling lock screen camera | Enabled | Disables the lock screen camera toggle switch in PC Settings and prevents a camera from being invoked on the lock screen. By default, users can enable invocation of an available camera on the lock screen. If you enable this setting, users will no longer be able to enable or disable lock screen camera access in PC Settings and the camera cannot be invoked on the lock screen. | +| Control Panel / Personalization | Prevent enabling lock screen slide show | Enabled | Disables the lock screen slide show settings in PC Settings and prevents a slide show from playing on the lock screen. By default, users can enable a slide show that will run after they lock the machine. if you enable this setting, users will no longer be able to modify slide show settings in PC Settings and no slide show will ever start. | +| Windows Defender SmartScreen / Explorer | Configure App Install Control | Allow apps from Store only | App Install Control is a feature of Windows Defender SmartScreen that helps protect PCs by allowing users to install apps only from the Store. SmartScreen must be enabled for this feature to work properly. | +| System / Device Installation / Device Installation Restrictions | Prevent installation of devices that match any of these device IDs | Enabled | This policy setting allows you to specify a list of Plug and Play hardware IDs and compatible IDs for devices that Windows is prevented from installing. This policy setting takes precedence over any other policy setting that allows Windows to install a device. if you enable this policy setting, Windows is prevented from installing a device whose hardware ID or compatible ID appears in a list that you create. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server. If you disable or do not configure this policy setting, devices can be installed and updated as allowed or prevented by other policy settings. | +| System / Device Installation / Device Installation Restrictions | Prevent installation of devices using drivers that match these device setup classes | Enabled | This policy setting allows you to specify a list of device setup class globally unique identifiers (GUIDs) for device drivers that Windows is prevented from installing. This policy setting takes precedence over any other policy setting that allows Windows to install a device. if you enable this policy setting, Windows is prevented from installing or updating device drivers whose device setup class GUIDs appear in the list you create. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server. If you disable or do not configure this policy setting, Windows can install and update devices as allowed or prevented by other policy settings. | +| System / Internet Communication Management / Internet Communication settings | Turn off downloading of print drivers over HTTP | Enabled | This policy setting specifies whether to allow this client to download print driver packages over HTTP. To set up HTTP printing non-inbox drivers need to be downloaded over HTTP. Note: This policy setting does not prevent the client from printing to printers on the Intranet or the Internet over HTTP. It only prohibits downloading drivers that are not already installed locally. if you enable this policy setting, print drivers cannot be downloaded over HTTP. If you disable or do not configure this policy setting, users can download print drivers over HTTP. | +| System / Internet Communication Management / Internet Communication settings | Turn off printing over HTTP | Enabled | This policy setting specifies whether to allow printing over HTTP from this client. Printing over HTTP allows a client to print to printers on the intranet as well as the Internet. Note: This policy setting affects the client side of Internet printing only. It does not prevent this computer from acting as an Internet Printing server and making its shared printers available via HTTP. if you enable this policy setting, it prevents this client from printing to Internet printers over HTTP. If you disable or do not configure this policy setting, users can choose to print to Internet printers over HTTP. Also see the "Web-based printing" policy setting in Computer Configuration/Administrative Templates/Printers. | +| System / Logon | Enumerate local users on domain-joined computers | Disabled | This policy setting allows local users to be enumerated on domain-joined computers. if you enable this policy setting, Logon UI will enumerate all local users on domain-joined computers. If you disable or do not configure this policy setting, the Logon UI will not enumerate local users on domain-joined computers. | +| System / Power Management / Sleep Settings | Allow standby states (S1-S3) when sleeping (on battery) | Disabled | This policy setting manages whether Windows can use standby states when putting the computer in a sleep state. If you enable or do not configure this policy setting Windows uses standby states to put the computer in a sleep state. If you disable this policy setting standby states (S1-S3) are not allowed. | +| System / Power Management / Sleep Settings | Allow standby states (S1-S3) when sleeping (plugged in) | Disabled | This policy setting manages whether Windows can use standby states when putting the computer in a sleep state. If you enable or do not configure this policy setting Windows uses standby states to put the computer in a sleep state. If you disable this policy setting standby states (S1-S3) are not allowed. | +| Windows Components / BitLocker Drive Encryption / Operating System Drives | Configure minimum PIN length for startup | Enabled: 7 | This policy setting allows you to configure a minimum length for a Trusted Platform Module (TPM) startup PIN. This policy setting is applied when you turn on BitLocker. The startup PIN must have a minimum length of 4 digits and can have a maximum length of 20 digits. if you enable this policy setting, you can require a minimum number of digits to be used when setting the startup PIN. If you disable or do not configure this policy setting, users can configure a startup PIN of any length between 4 and 20 digits. By default, the value is 6 digits. NOTE: If minimum PIN length is set below 6 digits Windows will attempt to update the TPM 2.0 lockout period to be greater than the default when a PIN is changed. If successful, Windows will only reset the TPM lockout period back to default if the TPM is reset. | +| Windows Components / BitLocker Drive Encryption / Removable Data Drives | Deny write access to removable drives not protected by BitLocker | Enabled | This policy setting configures whether BitLocker protection is required for a computer to be able to write data to a removable data drive. If you enable this policy setting, all removable data drives that are not BitLocker-protected will be mounted as read-only. If the drive is protected by BitLocker, it will be mounted with read and write access. If the "Deny write access to devices configured in another organization" option is selected, only drives with identification fields matching the computer's identification fields will be given write access. When a removable data drive is accessed, it will be checked for valid identification field and allowed identification fields. These fields are defined by the "Provide the unique identifiers for your organization" policy setting. If you disable or do not configure this policy setting, all removable data drives on the computer will be mounted with read and write access. Note: This policy setting can be overridden by the policy settings under User Configuration\\Administrative Templates\\System\\Removable Storage Access. If the "Removable Disks: Deny write access" policy setting is enabled, this policy setting will be ignored. | +| Windows Components / Cloud Content | Turn off Microsoft consumer experiences | Enabled | This policy setting turns off experiences that help consumers make the most of their devices and Microsoft account. if you enable this policy setting, users will no longer see personalized recommendations from Microsoft and notifications about their Microsoft account. If you disable or do not configure this policy setting, users may see suggestions from Microsoft and notifications about their Microsoft account. Note: This setting only applies to Enterprise and Education SKUs. | +| Windows Components / Credential User Interface | Enumerate administrator accounts on elevation | Disabled | This policy setting controls whether administrator accounts are displayed when a user attempts to elevate a running application. By default, administrator accounts are not displayed when the user attempts to elevate a running application. if you enable this policy setting, all local administrator accounts on the PC will be displayed so the user can choose one and enter the correct password. If you disable this policy setting users will always be required to type a user name and password to elevate. | +| Windows Components / Microsoft Edge | Configure Password Manager | Disabled | This policy setting lets you decide whether employees can save their passwords locally using Password Manager. By default, Password Manager is turned on. if you enable this setting, employees can use Password Manager to save their passwords locally. If you disable this setting employees can't use Password Manager to save their passwords locally. If you don't configure this setting employees can choose whether to use Password Manager to save their passwords locally. | +| Windows Components / Remote Desktop Services / Remote Desktop | Do not allow drive redirection | Enabled | This policy setting specifies whether to prevent the mapping of client drives in a Remote Desktop Services session (drive redirection). By default, an RD Session Host server maps client drives automatically upon connection. Mapped drives appear in the session folder tree in File Explorer or Computer in the format \ on \. You can use this policy setting to override this behavior. if you enable this policy setting, client drive redirection is not allowed in Remote Desktop Services sessions and Clipboard file copy redirection is not allowed on computers running Windows Server 2003 Windows 8 and Windows XP. If you disable this policy setting client drive redirection is always allowed. In addition, Clipboard file copy redirection is always allowed if Clipboard redirection is allowed. If you do not configure this policy setting client drive redirection and Clipboard file copy redirection are not specified at the Group Policy level. | +| Windows Components / RSS Feeds | Prevent downloading of enclosures | Enabled | This policy setting prevents the user from having enclosures (file attachments) downloaded from a feed to the user's computer. if you enable this policy setting, the user cannot set the Feed Sync Engine to download an enclosure through the Feed property page. A developer cannot change the download setting through the Feed APIs. If you disable or do not configure this policy setting, the user can set the Feed Sync Engine to download an enclosure through the Feed property page. A developer can change the download setting through the Feed APIs. | +| Windows Components / Search | Allow indexing of encrypted files | Disabled | This policy setting allows encrypted items to be indexed. if you enable this policy setting, indexing will attempt to decrypt and index the content (access restrictions will still apply). If you disable this policy setting the search service components (including non-Microsoft components) are expected not to index encrypted items or encrypted stores. This policy setting is not configured by default. If you do not configure this policy setting the local setting configured through Control Panel will be used. By default, the Control Panel setting is set to not index encrypted content. When this setting is enabled or disabled the index is rebuilt completely. Full volume encryption (such as BitLocker Drive Encryption or a non-Microsoft solution) must be used for the location of the index to maintain security for encrypted files. | +| Windows Components / Windows Ink Workspace | Allow Windows Ink Workspace | On, but disallow access above lock | Allow Windows Ink Workspace | + +### IE Computer Policies + +| Feature | Policy Setting | Policy Value | Description | +|-------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------|------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Windows Components / Internet Explorer | Prevent per-user installation of ActiveX controls | Enabled | This policy setting allows you to prevent the installation of ActiveX controls on a per-user basis. If you enable this policy setting, ActiveX controls cannot be installed on a per-user basis. | +| Windows Components / Internet Explorer | Security Zones: Do not allow users to add/delete sites | Enabled | Prevents users from adding or removing sites from security zones. A security zone is a group of Web sites with the same security level. If you enable this policy, the site management settings for security zones are disabled. | +| Windows Components / Internet Explorer | Security Zones: Do not allow users to change policies | Enabled | Prevents users from changing security zone settings. A security zone is a group of Web sites with the same security level. If you enable this policy, the Custom Level button and security-level slider on the Security tab in the Internet Options dialog box are disabled. | +| Windows Components / Internet Explorer | Security Zones: Use only machine settings | Enabled | Applies security zone information to all users of the same computer. A security zone is a group of Web sites with the same security level. If you enable this policy, changes that the user makes to a security zone will apply to all users of that computer. | +| Windows Components / Internet Explorer | Turn off Crash Detection | Enabled | This policy setting allows you to manage the crash detection feature of add-on Management. If you enable this policy setting, a crash in Internet Explorer will exhibit behavior found in Windows XP Professional Service Pack 1 and earlier, namely, to invoke Windows Error Reporting. All policy settings for Windows Error Reporting continue to apply. | +| Windows Components / Internet Explorer | Turn off the Security Settings Check feature | Disabled | This policy setting turns off the Security Settings Check feature, which checks Internet Explorer security settings to determine when the settings put Internet Explorer at risk. | +| Windows Components / Internet Explorer / Internet Control Panel / Advanced Page | Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled | Enabled | This policy setting prevents ActiveX controls from running in Protected Mode when Enhanced Protected Mode is enabled. When a user has an ActiveX control installed that is not compatible with Enhanced Protected Mode and a website attempts to load the control, Internet Explorer notifies the user and gives the option to run the website in regular Protected Mode. This policy setting disables this notification and forces all websites to run in Enhanced Protected Mode. | +| Windows Components / Internet Explorer / Internet Control Panel / Advanced Page | Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows | Enabled | This policy setting determines whether Internet Explorer 11 uses 64-bit processes (for greater security) or 32-bit processes (for greater compatibility) when running in Enhanced Protected Mode on 64-bit versions of Windows. | +| Windows Components / Internet Explorer / Internet Control Panel / Advanced Page | Turn on Enhanced Protected Mode | Enabled | Enhanced Protected Mode provides additional protection against malicious websites by using 64-bit processes on 64-bit versions of Windows. For computers running at least Windows 8, Enhanced Protected Mode also limits the locations Internet Explorer can read from in the registry and the file system. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page | Intranet Sites: Include all network paths (UNCs) | Disabled | This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Allow drag and drop or copy and paste files | Enabled: Disable | This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Allow loading of XAML files | Enabled: Disable | This policy setting allows you to manage the loading of Extensible Application Markup Language (XAML) files. XAML is an XML-based declarative markup language commonly used for creating rich user interfaces and graphics that take advantage of the Windows Presentation Foundation. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Allow only approved domains to use ActiveX controls without prompt | Enabled: Enable | This policy setting controls whether the user is prompted to allow ActiveX controls to run on websites other than the website that installed the ActiveX control. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Allow only approved domains to use the TDC ActiveX control | Enabled: Enable | This policy setting controls whether the user can run the TDC ActiveX control on websites. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Allow scripting of Internet Explorer WebBrowser controls | Enabled: Disable | This policy setting determines whether a page can control embedded WebBrowser controls via script. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Allow script-initiated windows without size or position constraints | Enabled: Disable | This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows that include the title and status bars. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Allow scriptlets | Enabled: Disable | This policy setting allows you to manage whether the user can run scriptlets. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Allow updates to status bar via script | Enabled: Disable | This policy setting allows you to manage whether script can update the status bar within the zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Allow VBScript to run in Internet Explorer | Enabled: Disable | This policy setting allows you to manage whether VBScript can be run on pages from the specified zone in Internet Explorer. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Download signed ActiveX controls | Enabled: Disable | This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Include local path when user is uploading files to a server | Enabled: Disable | This policy setting controls whether local path information is sent when the user is uploading a file via an HTML form. If the local path information is sent, some information may be unintentionally revealed to the server. For instance, files sent from the user's desktop may contain the user name as a part of the path. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Navigate windows and frames across different domains | Enabled: Disable | This policy setting allows you to manage the opening of windows and frames and access of applications across different domains. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Web sites in less privileged Web content zones can navigate into this zone | Enabled: Disable | This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into this zone. | + +### IE User Policies + +| Feature | Policy Setting | Policy Value | Description | +|----------|-----------------|--------------|--------------| +| Windows Components / Internet Explorer | Turn on the auto-complete feature for user names and passwords on forms | Disabled | This AutoComplete feature can remember and suggest User names and passwords on Forms. If you disable this setting the user cannot change "User name and passwords on forms" or "prompt me to save passwords". The Auto Complete feature for User names and passwords on Forms is turned off. The user also cannot opt to be prompted to save passwords. | + + + + From b81534b16aa281dc14b161f73d4b539f02edc888 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 8 Apr 2019 11:25:45 -0700 Subject: [PATCH 117/349] updated descriptions --- .../seccon-2-enterprise-devops-security.md | 4 ++-- .../seccon-3-enterprise-VIP-security.md | 2 +- .../seccon-4-enterprise-high-security.md | 4 ++-- .../windows-seccon-framework/seccon-5-enterprise-security.md | 2 +- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-2-enterprise-devops-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-2-enterprise-devops-security.md index 3bd6d70cc8..276b177186 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-2-enterprise-devops-security.md +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-2-enterprise-devops-security.md @@ -14,8 +14,8 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# SECCON 2 enterprise devops security - +# SECCON 2 security configuration for enterprise dev/ops + **Applies to** - Windows 10 diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md index 45d186bd76..9264d4914a 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md @@ -14,7 +14,7 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# SECCON 3 Enterprise VIP Security +# SECCON 3 security configuration for enterprise VIPs **Applies to** diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md index 18545b8fa1..45774709d6 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md @@ -1,6 +1,6 @@ --- title: SECCON 4 Enterprise High Security -description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +description: This article, and the articles it links to, describe how to use the Windows SECCON framework in your organization keywords: virtualization, security, malware ms.prod: w10 ms.mktglfcycl: deploy @@ -14,7 +14,7 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# SECCON 4 Enterprise High Security +# SECCON 4 security configuration for enterprise high security **Applies to** diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md index d7f4409b58..5097d6f911 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md @@ -14,7 +14,7 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# SECCON 5 Enterprise Security +# SECCON 5 security configuration for enterprise security **Applies to** From cc6223daecf17e9d48bd47196bacaa99dbce873d Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 8 Apr 2019 11:46:32 -0700 Subject: [PATCH 118/349] added seccon 4 --- .../seccon-4-enterprise-high-security.md | 186 ++++++++++++++++++ 1 file changed, 186 insertions(+) diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md index 45774709d6..17d3cef98a 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md @@ -22,3 +22,189 @@ ms.date: 04/05/2018 - Windows Server 2016 - Office 2016 +SECCON 4 is the security configuration recommended as a standard for devices where users access more sensitive information. These devices are a natural target in enterprises today. While targeting high levels of security, these recommendations do not assume a large staff of highly skilled security practitioners, and therefore should be accessible to most Enterprise organizations. +A SECCON 4 configuration should include all the configurations from SECCON 5 and add the following security controls. + +## Behaviors + +The behaviors recommended in SECCON 4 implement a more sophisticated security +process. While they may require a more sophisticated organization, they enforce +a level of security more commensurate with the risks facing users with access to +sensitive information. + +| Feature Set| Feature | Description | +|------------|----------|--------------| +| Antivirus | Configure Protection Updates to failover to retrieval from Microsoft | Sources for Windows Defender Antivirus Protection Updates can be provided in an ordered list. If you are using internal distribution, such as SCCM or WSUS, configure Microsoft Update lower in the list as a failover. | +| OS Security Updates | Deploy Windows Quality Updates within 4 days | As the time between release of a patch and an exploit based on the reverse engineering of that patch continues to shrink, engineering a process that provides the ability to validate and deploy quality updates addressing known security vulnerabilities is a critical aspect of security hygiene.| +| Helpdesk| 1:1 Administration| A simple and common model for helpdesk support is to add the Helpdesk group as a permanent member of the Local Administrators group of every device. If any device is compromised and helpdesk can connect to it, then these credentials can be used to obtain privilege on any / all other devices. Design and implement a strategy to provide helpdesk support without providing 1:all admin access – constraining the value of these Helpdesk credentials | + +## Controls + +The controls enforced in SECCON 4 implement more controls and a more sophisticated security +configuration than SECCON 5. While they may have a slightly higher impact to +users or to applications, they enforce a level of security more commensurate +with the risks facing users with access to sensitive information. Microsoft +recommends using the Audit/Enforce methodology for controls with an Audit mode, +and the rings methodology for those that do not, with a moderate timeline that +is anticipated to be slightly longer than the process in SECCON 5. + +| Feature Set | Feature | Description | +|-------------------------------------------------------------|-------------------------------------------------------|----------------| +| [Exploit protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/exploit-protection-exploit-guard) | Enforce memory protection for OS-level controls:
- Control flow guard (CFG)
- Data Execution Protection (DEP)
- Mandatory ASLR
- Bottom-Up ASLR
- High-entropy ASLR
- Validate Exception Chains (SEHOP)
- Validate heap integrity | Exploit protection helps protect devices from malware that use exploits to spread and infect to other devices. It consists of several mitigations that can be applied at either the operating system level, or at the individual app level. There is a risk to application compatibility, as some applications may rely on blocked behavior (e.g. dynamically generating code without marking memory as executable). Microsoft recommends gradually deploying this configuration using the Rings methodology. | +| [Attack Surface Reduction (ASR)](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard)| Configure and Enforce Attack Surface Reduction Rules:
- Block executable content from email client and webmail
- Block all Office applications from creating child processes
- Block Office applications from creating executable content
- Block Office applications from injecting code into other processes
- Block JavaScript or VBScript from launching downloaded executable content
- Block execution of potentially obfuscated scripts
- Block Win32 API calls from Office macro
- Block executable files from running unless they meet a prevalence, age, or trusted list criterion
- Use advanced protection against ransomware
- Block credential stealing from the Windows local security authority subsystem (lsass.exe)
- Block process creations originating from PSExec and WMI commands
- Block untrusted and unsigned processes that run from USB
- Block Office communication applications from creating child processes
- Block Adobe Reader from creating child processes
| Attack surface reduction controls help prevent actions and apps that are typically used by exploit-seeking malware to infect machines. There is a risk to application compatibility, as some applications may rely on blocked behavior (e.g. an Office application spawning a child process). Each control has an Audit mode, and as such, Microsoft recommends the Audit / Enforce Methodology (repeated here):
1) Audit – enable the controls in audit mode, and gather audit data in a centralized location
2) Review – review the audit data to assess potential impact (both positive and negative) and configure any exemptions from the security control you need to configure
3) Enforce – Deploy the configuration of any exemptions and convert the control to enforce mode | +| [Network protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/network-protection-exploit-guard) | Configure and enforce Network Protection | Network protection helps to prevent employees from using any application to access dangerous domains that may host phishing scams, exploits, and other malicious content on the Internet. It expands the scope of Windows Defender SmartScreen to block all outbound HTTP(s) traffic that attempts to connect to low-reputation sources (based on the domain or hostname). There is a risk to application compatibility, as a result of false positives in flagged sites. Microsoft recommends deploying using the Audit / Enforce Methodology. | + +## Policies + +The policies enforced in SECCON 4 implement more controls and a more sophisticated security +configuration than SECCON 5. While they may have a slightly higher impact to +users or to applications, they enforce a level of security more commensurate +with the risks facing users with access to sensitive information. Microsoft +recommends using the rings methodology for these security configurations and +controls, with a moderate timeline that is anticipated to be slightly longer +than the process in SECCON 5. + +### Security Template Policies + +| Feature | Policy Setting | Policy Value | Description | +|------------------------|-------------------------------------------------------------------------------------------------|----------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Security Options | Microsoft network client: Send unencrypted password to third party | Disabled | If this security setting is enabled, the Server Message Block (SMB) redirector can send plaintext passwords to non-Microsoft SMB servers that do not support password encryption during authentication. Sending unencrypted passwords is a security risk. | +| Security Options | Network access: Allow anonymous SID/Name translation | Disabled | This security setting determines if an anonymous user can request security identifier (SID) attributes for another user. If this policy is enabled, a user with knowledge of an administrator's SID could contact a computer that has this policy enabled and use the SID to get the administrator's name. | +| Security Options | Network access: Restrict clients allowed to make remote calls to SAM | Enabled: Administrators (allowed) | This policy setting allows you to restrict remote RPC connections to SAM. If not selected, the default security descriptor will be used. | +| Security Options | Network security: Allow LocalSystem NULL session fallback | Disabled | Allow NTLM to fall back to NULL session when used with LocalSystem | +| Security Options | Network security: Do not store LAN Manager hash value on next password change | Enabled | This security setting determines if, at the next password change, the LAN Manager (LM) hash value for the new password is stored. The LM hash is relatively weak and prone to attack, as compared with the cryptographically stronger Windows NT hash. Since the LM hash is stored on the local computer in the security database the passwords can be compromised if the security database is attacked. | +| Security Options | Network security: LAN Manager authentication level | Send NTLMv2 response only. Refuse LM & NTLM | This security setting determines which challenge/response authentication protocol is used for network logons. This choice affects the level of authentication protocol used by clients, the level of session security negotiated, and the level of authentication accepted by servers as follows: Send NTLMv2 response only\\refuse LM & NTLM: Clients use NTLMv2 authentication only and use NTLMv2 session security if the server supports it; domain controllers refuse LM and NTLM (accept only NTLMv2 authentication). | +| Security Options | Network security: Minimum session security for NTLM SSP based (including secure RPC) clients | Require NTLMv2 session security and Require 128-bit encryption | This security setting allows a client to require the negotiation of 128-bit encryption and/or NTLMv2 session security. These values are dependent on the LAN Manager Authentication Level security setting value. | +| Security Options | Network security: Minimum session security for NTLM SSP based (including secure RPC) servers | Require NTLMv2 session security and Require 128-bit encryption | This security setting allows a server to require the negotiation of 128-bit encryption and/or NTLMv2 session security. These values are dependent on the LAN Manager Authentication Level security setting value. | +| Security Options | User Account Control: Only elevate UIAccess applications that are installed in secure locations | Enabled | This policy setting controls whether applications that request to run with a User Interface Accessibility (UIAccess) integrity level must reside in a secure location in the file system. Secure locations are limited to the following: - …\\Program Files\\, including subfolders - …\\Windows\\system32\\ - …\\Program Files (x86)\\, including subfolders for 64-bit versions of Windows | +| User Rights Assignment | Access this computer from the network | Administrators; Remote Desktop Users | This user right determines which users and groups can connect to the computer over the network. Remote Desktop Services are not affected by this user right. | +| User Rights Assignment | Enable computer and user accounts to be trusted for delegation | No One (blank) | This security setting determines which users can set the Trusted for Delegation setting on a user or computer object. | +| User Rights Assignment | Impersonate a client after authentication | Administrators, SERVICE, Local Service, Network Service | Assigning this privilege to a user allows programs running on behalf of that user to impersonate a client. Requiring this user right for this kind of impersonation prevents an unauthorized user from convincing a client to connect (for example, by remote procedure call (RPC) or named pipes) to a service that they have created and then impersonating that client, which can elevate the unauthorized user's permissions to administrative or system levels. | +| User Rights Assignment | Lock pages in memory | No One (blank) | This security setting determines which accounts can use a process to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk. Exercising this privilege could significantly affect system performance by decreasing the amount of available random-access memory (RAM). | +| User Rights Assignment | Perform volume maintenance tasks | Administrators | This security setting determines which users and groups can run maintenance tasks on a volume, such as remote defragmentation. | +| User Rights Assignment | Profile single process | Administrators | This security setting determines which users can use performance monitoring tools to monitor the performance of non-system processes. | + +### Computer Policies + +| Feature | Policy Setting | Policy Value | Description | +|---------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Network / Network Connections | Prohibit use of Internet Connection Sharing on your DNS domain network | Enabled | Determines whether administrators can enable and configure the Internet Connection Sharing (ICS) feature of an Internet connection and if the ICS service can run on the computer. | +| Network / Network Provider | Hardened UNC Paths | Enabled: \\\\\*\\SYSVOL and \\\\\*\\NETLOGON RequireMutualAuthentication = 1, RequireIntegrity = 1 | This policy setting configures secure access to UNC paths. If you enable this policy, Windows only allows access to the specified UNC paths after fulfilling additional security requirements. | +| Network / Windows Connection Manager | Prohibit connection to non-domain networks when connected to domain authenticated network | Enabled | This policy setting prevents computers from connecting to both a domain-based network and a non-domain-based network at the same time. | +| Network / WLAN Service / WLAN Settings | Allow Windows to automatically connect to suggested open hotspots to networks shared by contacts and to hotspots offering paid services | Disabled | This policy setting determines whether users can enable the following WLAN settings: "Connect to suggested open hotspots," "Connect to networks shared by my contacts," and "Enable paid services". | +| System / Credentials Delegation | Remote host allows delegation of non-exportable credentials | Enabled | When using credential delegation, devices provide an exportable version of credentials to the remote host. This exposes users to the risk of credential theft from attackers on the remote host. If you enable this policy setting, the host supports Restricted Admin or Remote Credential Guard mode. | +| System / Device Guard | Turn on Virtualization Based Security | Enabled: Virtualization-Based Protection of Code Integrity – Enabled with UEFI Lock | This setting enables virtualization-based protection of Kernel Mode Code Integrity. When this is enabled, kernel mode memory protections are enforced, and the Code Integrity validation path is protected by the Virtualization Based Security feature. | +| System / Internet Communication Management / Internet Communication | Turn off Internet download for Web publishing and online ordering wizards | Enabled | This policy setting specifies whether Windows should download a list of providers for the web publishing and online ordering wizards. These wizards allow users to select from a list of companies that provide services such as online storage and photographic printing. By default, Windows displays providers downloaded from a Windows website in addition to providers specified in the registry. | +| System / Logon | Turn on convenience PIN sign-in | Disabled | This policy setting allows you to control whether a domain user can sign in using a convenience PIN. | +| System / Remote Assistance | Configure Solicited Remote Assistance | Disabled | This policy setting allows you to turn on or turn off Solicited (Ask for) Remote Assistance on this computer. | +| Windows Components / File Explorer | Turn off Data Execution Prevention for Explorer | Disabled | Disabling data execution prevention can allow certain legacy plug-in applications to function without terminating Explorer. | +| Windows Components / File Explorer | Turn off heap termination on corruption | Disabled | Disabling heap termination on corruption can allow certain legacy plug-in applications to function without terminating Explorer immediately, although Explorer may still terminate unexpectedly later. | +| Windows Components / Remote Desktop Services / Remote Desktop Connection Client | Do not allow passwords to be saved | Enabled | Controls whether passwords can be saved on this computer from Remote Desktop Connection. | +| Windows Components / Remote Desktop Services / Remote Desktop Session Host / Security | Always prompt for password upon connection | Enabled | This policy setting specifies whether Remote Desktop Services always prompts the client for a password upon connection. You can use this setting to enforce a password prompt for users logging on to Remote Desktop Services, even if they already provided the password in the Remote Desktop Connection client. | +| Windows Components / Remote Desktop Services / Remote Desktop Session Host / Security | Require secure RPC communication | Enabled | Specifies whether a Remote Desktop Session Host server requires secure RPC communication with all clients or allows unsecured communication. | +| Windows Components / Remote Desktop Services / Remote Desktop Session Host / Security | Set client connection encryption level | Enabled: High Level | Specifies whether to require the use of a specific encryption level to secure communications between client computers and RD Session Host servers during Remote Desktop Protocol (RDP) connections. This policy only applies when you are using native RDP encryption. However, native RDP encryption (as opposed to SSL encryption) is not recommended. This policy does not apply to SSL encryption. | +| Windows Components / Windows Security / App and browser protection | Prevent users from modifying settings | Enabled | Prevent users from making changes to the Exploit protection settings area in Windows Security. | +| Windows Components / Windows Game Recording and Broadcasting | Enables or disables Windows Game Recording and Broadcasting | Disabled | This setting enables or disables the Windows Game Recording and Broadcasting features. If you disable this setting, Windows Game Recording will not be allowed. | +| Windows Components / Windows PowerShell | Turn on PowerShell Script Block Logging | Enabled | This policy setting enables logging of all PowerShell script input to the Microsoft-Windows-PowerShell/Operational event log. | +| Windows Components / Windows Remote Management (WinRM) / WinRM Client | Allow Basic authentication | Disabled | This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Basic authentication. | +| Windows Components / Windows Remote Management (WinRM) / WinRM Client | Disallow Digest authentication | Enabled | This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Digest authentication. | +| Windows Components / Windows Remote Management (WinRM) / WinRM Service | Allow Basic authentication | Disabled | This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts Basic authentication from a remote client. | +| Windows Components / Windows Remote Management (WinRM) / WinRM Service | Disallow WinRM from storing RunAs credentials | Enabled | This policy setting allows you to manage whether the Windows Remote Management (WinRM) service will not allow RunAs credentials to be stored for any plug-ins. | + +### Windows Defender Antivirus Policies + +| Feature | Policy Setting | Policy Value | Description | +|-------------------------------------------------|-----------------------------------------------------------|----------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Windows Components / Windows Defender Antivirus | Configure Detection for Potentially Unwanted Applications | Enabled: Block | Enable or disable detection for potentially unwanted applications. You can choose to block, audit, or allow when potentially unwanted software is being downloaded or attempts to install itself on your computer. | + +### IE Computer Policies + +| Feature | Policy Setting | Policy Value | Description | +|---------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------|--------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Windows Components / Internet Explorer | Prevent bypassing SmartScreen Filter warnings | Enabled | This policy setting determines whether the user can bypass warnings from SmartScreen Filter. SmartScreen Filter prevents the user from browsing to or downloading from sites that are known to host malicious content. SmartScreen Filter also prevents the execution of files that are known to be malicious. | +| Windows Components / Internet Explorer | Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet | Enabled | This policy setting determines whether the user can bypass warnings from SmartScreen Filter. SmartScreen Filter warns the user about executable files that Internet Explorer users do not commonly download from the Internet. | +| Windows Components / Internet Explorer | Specify use of ActiveX Installer Service for installation of ActiveX controls | Enabled | This policy setting allows you to specify how ActiveX controls are installed. If you enable this policy setting, ActiveX controls are installed only if the ActiveX Installer Service is present and has been configured to allow the installation of ActiveX controls. | +| Windows Components / Internet Explorer / Internet Control Panel | Prevent ignoring certificate errors | Enabled | This policy setting prevents the user from ignoring Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificate errors that interrupt browsing (such as "expired", "revoked", or "name mismatch" errors) in Internet Explorer. | +| Windows Components / Internet Explorer / Internet Control Panel / Advanced Page | Allow software to run or install even if the signature is invalid | Disabled | This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by the user even though the signature is invalid. An invalid signature might indicate that someone has tampered with the file. | +| Windows Components / Internet Explorer / Internet Control Panel / Advanced Page | Check for signatures on downloaded programs | Enabled | This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher of signed software and verifies it hasn't been modified or tampered with) on user computers before downloading executable programs. | +| Windows Components / Internet Explorer / Internet Control Panel / Advanced Page | Turn off encryption support | Enabled: Use | This policy setting allows you to turn off support for Transport Layer Security (TLS) 1.0, TLS 1.1, TLS 1.2, Secure Sockets Layer (SSL) 2.0, or SSL 3.0 in the browser. TLS and SSL are protocols that help protect communication between the browser and the target server. When the browser attempts to set up a protected communication with the target server, the browser and server negotiate which protocol and version to use. The browser and server attempt to match each other’s list of supported protocols and versions, and they select the most preferred match. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page | Turn on certificate address mismatch warning | Enabled | This policy setting allows you to turn on the certificate address mismatch security warning. When this policy setting is turned on, the user is warned when visiting Secure HTTP (HTTPS) websites that present certificates issued for a different website address. This warning helps prevent spoofing attacks. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Access data sources across domains | Enabled: Disable | This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO). | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Allow cut copy or paste operations from the clipboard via script | Enabled: Disable | This policy setting allows you to manage whether scripts can perform a clipboard operation (for example, cut, copy, and paste) in a specified region. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Automatic prompting for file downloads | Enabled: Disable | This policy setting determines whether users will be prompted for non-user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Download unsigned ActiveX controls | Enabled: Disable | This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is potentially harmful, especially when coming from an untrusted zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Enable dragging of content from different domains across windows | Enabled: Disable | This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in different windows. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Enable dragging of content from different domains within a window | Enabled: Disable | This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in the same window. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Initialize and script ActiveX controls not marked as safe | Enabled: Disable | This policy setting allows you to manage ActiveX controls not marked as safe. If you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Java permissions | Enabled: Disable Java | This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually. Disable Java to prevent any applets from running. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Launching applications and files in an IFRAME | Enabled: Disable | This policy setting allows you to manage whether applications may be run, and files may be downloaded from an IFRAME reference in the HTML of the pages in this zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Logon options | Enabled: Prompt for user name and password | This policy setting allows you to manage settings for logon options. Prompt for user name and password to query users for user IDs and passwords. After a user is queried, these values can be used silently for the remainder of the session. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Run .NET Framework-reliant components not signed with Authenticode | Enabled: Disable | This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Run .NET Framework-reliant components signed with Authenticode | Enabled: Disable | This policy setting allows you to manage whether .NET Framework components that are signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Show security warning for potentially unsafe files | Enabled: Prompt | This policy setting controls whether the "Open File - Security Warning" message appears when the user tries to open executable files or other potentially unsafe files (from an intranet file share by using File Explorer, for example). | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Userdata persistence | Enabled: Disable | This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Intranet Zone | Initialize and script ActiveX controls not marked as safe | Enabled: Disable | This policy setting allows you to manage ActiveX controls not marked as safe. If you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Local Machine Zone | Java permissions | Enabled: Disable Java | This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually. Disable Java to prevent any applets from running. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-Down Intranet Zone | Java permissions | Enabled: Disable Java | This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually. Disable Java to prevent any applets from running. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-Down Local Machine Zone | Java permissions | Enabled: Disable Java | This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually. Disable Java to prevent any applets from running. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-Down Restricted Sites Zone | Java permissions | Enabled: Disable Java | This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually. Disable Java to prevent any applets from running. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Access data sources across domains | Enabled: Disable | This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO). | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow active scripting | Enabled: Disable | This policy setting allows you to manage whether script code on pages in the zone is run. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow binary and script behaviors | Enabled: Disable | This policy setting allows you to manage dynamic binary and script behaviors: components that encapsulate specific functionality for HTML elements to which they were attached. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow cut copy or paste operations from the clipboard via script | Enabled: Disable | This policy setting allows you to manage whether scripts can perform a clipboard operation (for example, cut, copy, and paste) in a specified region. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow drag and drop or copy and paste files | Enabled: Disable | This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow file downloads | Enabled: Disable | This policy setting allows you to manage whether file downloads are permitted from the zone. This option is determined by the zone of the page with the link causing the download, not the zone from which the file is delivered. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow loading of XAML files | Enabled: Disable | This policy setting allows you to manage the loading of Extensible Application Markup Language (XAML) files. XAML is an XML-based declarative markup language commonly used for creating rich user interfaces and graphics that take advantage of the Windows Presentation Foundation. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow META REFRESH | Enabled: Disable | This policy setting allows you to manage whether a user's browser can be redirected to another Web page if the author of the Web page uses the Meta Refresh setting (tag) to redirect browsers to another Web page. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Download signed ActiveX controls | Enabled: Disable | This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow only approved domains to use ActiveX controls without prompt | Enabled: Enable | This policy setting controls whether the user is prompted to allow ActiveX controls to run on websites other than the website that installed the ActiveX control. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow only approved domains to use the TDC ActiveX control | Enabled: Enable | This policy setting controls whether the user can run the TDC ActiveX control on websites. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow scripting of Internet Explorer WebBrowser controls | Enabled: Disable | This policy setting determines whether a page can control embedded WebBrowser controls via script. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow script-initiated windows without size or position constraints | Enabled: Disable | This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows that include the title and status bars. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow scriptlets | Enabled: Disable | This policy setting allows you to manage whether the user can run scriptlets. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow updates to status bar via script | Enabled: Disable | This policy setting allows you to manage whether script can update the status bar within the zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow VBScript to run in Internet Explorer | Enabled: Disable | This policy setting allows you to manage whether VBScript can be run on pages from the specified zone in Internet Explorer. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Automatic prompting for file downloads | Enabled: Disable | This policy setting determines whether users will be prompted for non-user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Download unsigned ActiveX controls | Enabled: Disable | This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is potentially harmful, especially when coming from an untrusted zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Enable dragging of content from different domains across windows | Enabled: Disable | This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in different windows. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Enable dragging of content from different domains within a window | Enabled: Disable | This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in the same window. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Include local path when user is uploading files to a server | Enabled: Disable | This policy setting controls whether local path information is sent when the user is uploading a file via an HTML form. If the local path information is sent, some information may be unintentionally revealed to the server. For instance, files sent from the user's desktop may contain the user name as a part of the path. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Initialize and script ActiveX controls not marked as safe | Enabled: Disable | This policy setting allows you to manage ActiveX controls not marked as safe. If you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Java permissions | Enabled: Disable Java | This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually. Disable Java to prevent any applets from running. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Launching applications and files in an IFRAME | Enabled: Disable | This policy setting allows you to manage whether applications may be run, and files may be downloaded from an IFRAME reference in the HTML of the pages in this zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Logon options | Enabled: Anonymous logon | This policy setting allows you to manage settings for logon options. Anonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Navigate windows and frames across different domains | Enabled: Disable | This policy setting allows you to manage the opening of windows and frames and access of applications across different domains. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Run .NET Framework-reliant components not signed with Authenticode | Enabled: Disable | This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Run .NET Framework-reliant components signed with Authenticode | Enabled: Disable | This policy setting allows you to manage whether .NET Framework components that are signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Run ActiveX controls and plugins | Enabled: Disable | This policy setting allows you to manage whether ActiveX controls and plug-ins can be run on pages from the specified zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Script ActiveX controls marked safe for scripting | Enabled: Disable | This policy setting allows you to manage whether an ActiveX control marked safe for scripting can interact with a script. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Scripting of Java applets | Enabled: Disable | This policy setting allows you to manage whether applets are exposed to scripts within the zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Show security warning for potentially unsafe files | Enabled: Disable | This policy setting controls whether the "Open File - Security Warning" message appears when the user tries to open executable files or other potentially unsafe files (from an intranet file share by using File Explorer, for example). If you disable this policy setting, these files do not open. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Userdata persistence | Enabled: Disable | This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Web sites in less privileged Web content zones can navigate into this zone | Enabled: Disable | This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Trusted Sites Zone | Initialize and script ActiveX controls not marked as safe | Enabled: Disable | This policy setting allows you to manage ActiveX controls not marked as safe. If you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Trusted Sites Zone | Java permissions | Enabled: High Safety | This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually. High Safety enables applets to run in their sandbox. | +| Windows Components / Internet Explorer / Security Features / Add-on Management | Remove "Run this time" button for outdated ActiveX controls in Internet Explorer | Enabled | This policy setting allows you to stop users from seeing the "Run this time" button and from running specific outdated ActiveX controls in Internet Explorer. | +| Windows Components / Internet Explorer / Security Features / Add-on Management | Turn off blocking of outdated ActiveX controls for Internet Explorer | Disabled | This policy setting determines whether Internet Explorer blocks specific outdated ActiveX controls. Outdated ActiveX controls are never blocked in the Intranet Zone. | +| Windows Components / Internet Explorer / Security Features / Consistent Mime Handling | Internet Explorer Processes | Enabled | Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received through a Web server. This policy setting determines whether Internet Explorer requires that all file-type information provided by Web servers be consistent. For example, if the MIME type of a file is text/plain but the MIME sniff indicates that the file is really an executable file, Internet Explorer renames the file by saving it in the Internet Explorer cache and changing its extension. If you enable this policy setting, Internet Explorer requires consistent MIME data for all received files. | +| Windows Components / Internet Explorer / Security Features / Mime Sniffing Safety Feature | Internet Explorer Processes | Enabled | This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangerous file type. If you enable this policy setting, MIME sniffing will never promote a file of one type to a more dangerous file type. | +| Windows Components / Internet Explorer / Security Features / MK Protocol Security Restriction | Internet Explorer Processes | Enabled | The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted on the MK protocol will fail. If you enable this policy setting, the MK Protocol is prevented for File Explorer and Internet Explorer, and resources hosted on the MK protocol will fail. | +| Windows Components / Internet Explorer / Security Features / Notification Bar | Internet Explorer Processes | Enabled | This policy setting allows you to manage whether the Notification bar is displayed for Internet Explorer processes when file or code installs are restricted. By default, the Notification bar is displayed for Internet Explorer processes. If you enable this policy setting, the Notification bar will be displayed for Internet Explorer Processes. | +| Windows Components / Internet Explorer / Security Features / Protection from Zone Elevation | Internet Explorer Processes | Enabled | Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web page (Internet, Intranet, Local Machine zone, etc.). Web pages on the local computer have the fewest security restrictions and reside in the Local Machine zone, making the Local Machine security zone a prime target for malicious users. Zone Elevation also disables JavaScript navigation if there is no security context. If you enable this policy setting, any zone can be protected from zone elevation by Internet Explorer processes. | +| Windows Components / Internet Explorer / Security Features / Restrict ActiveX Install | Internet Explorer Processes | Enabled | This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes. If you enable this policy setting, prompting for ActiveX control installations will be blocked for Internet Explorer processes. | +| Windows Components / Internet Explorer / Security Features / Restrict File Download | Internet Explorer Processes | Enabled | This policy setting enables blocking of file download prompts that are not user initiated. If you enable this policy setting, file download prompts that are not user initiated will be blocked for Internet Explorer processes. | +| Windows Components / Internet Explorer / Security Features / Scripted Window Security Restrictions | Internet Explorer Processes | Enabled | Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restrictions security feature restricts popup windows and prohibits scripts from displaying windows in which the title and status bars are not visible to the user or obfuscate other Windows' title and status bars. If you enable this policy setting, popup windows and other restrictions apply for File Explorer and Internet Explorer processes. | + +### Custom Policies + +| Feature | Policy Setting | Policy Value | Description | +|-------------------|---------------------------------|-------------------------|------------------------| +| MS Security Guide | Configure SMB v1 server | Disabled | Disable or enable server-side processing of the SMBv1 protocol | +| MS Security Guide | Configure SMB v1 client driver | Enabled: Disable driver | Configure the startup mode for the kernel mode driver that implements client-side SMBv1 processing (MrxSmb10). This setting includes a dropdown that is activated when the Enabled radio button is selected and that controls the “Start” registry value in HKLM\\SYSTEM\\CurrentControlSet\\Services\\MrxSmb10. | +| MS Security Guide | Enabled Structured Exception Handling Overwrite Protection (SEHOP)| Enabled | This feature is designed to block exploits that use the Structured Exception Handler (SEH) overwrite technique. This protection mechanism is provided at run-time. Therefore, it helps protect applications regardless of whether they have been compiled with the latest improvements, such as the /SAFESEH option. We recommend that Windows users who are running any of the above operating systems enable this feature to improve the security profile of their systems. | +| MS Security Guide | WDigest Authentication | Disabled | When the WDigest Authentication protocol is enabled, plain text passwords are stored in the Local Security Authority Subsystem Service (LSASS) exposing them to theft. WDigest is disabled by default in Windows 10. This setting ensures this is enforced. | +| MS Security Guide | Block Flash activation in Office documents | Enabled | Prevents the Adobe Flash ActiveX control from being loaded by Office applications. | +| MSS (Legacy) | MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (Protects against packet spoofing) | Highest Protection, source routing is completely disabled | Allowing source routed network traffic allows attackers to obscure their identity and location. | +| MSS (Legacy) | MSS: (DisableIPSourceRouting) IP source routing protection level (Protects against packet spoofing) | Highest Protection, source routing is completely disabled | Allowing source routed network traffic allows attackers to obscure their identity and location. | +| MSS (Legacy) | MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes | Disabled | Allowing ICMP redirect of routes can lead to traffic not being routed properly. When disabled, this forces ICMP to be routed via shortest path first. | +| MSS (Legacy) | MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers | Enabled | Prevents a denial-of-service (DoS) attack against a WINS server. The DoS consists of sending a NetBIOS Name Release Request to the server for each entry in the server's cache, causing a response delay in the normal operation of the server's WINS resolution capability. | From 42da439d2e0f204036e005baabfa1623b4306027 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 8 Apr 2019 11:53:05 -0700 Subject: [PATCH 119/349] added controls --- .../seccon-5-enterprise-security.md | 20 +++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md index 5097d6f911..4f8a1253d2 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md @@ -22,3 +22,23 @@ ms.date: 04/05/2018 - Windows Server 2016 - Office 2016 +## Behaviors + +The behaviors recommended in SECCON 5 enforce a reasonable security level while minimizing the impact to users or to applications. + +| Feature | Config | Description | +|---------|-------------------|-------------| +| OS security updates | Deploy Windows Quality Updates within 7 days of release | As the time between the release of a patch and an exploit based on the reverse engineering of that patch continues to shrink, a critical aspect of security hygiene is having an engineering process that quickly validates and deploys Quality Updates that address security vulnerabilities. | + +## Controls + +The controls enabled in SECCON 5 enforce a reasonable security level while minimizing the impact to users and applications. + +| Feature | Config | Description | +|-----------------------------------|-------------------------------------|--------------------| +| [Windows Defender ATP EDR](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/overview-endpoint-detection-response) | Deployed to all devices | The Windows Defender ATP endpoint detection and response (EDR) provides actionable and near real-time detection of advanced attacks. EDR helps security analysts , and aggregates alerts with the same attack techniques or attributed to the same attacker into an an entity called an *incident*. An incident helps analysts prioritize alerts, collectively investigate the full scope of a breach, and respond to threats. Windows Defender ATP EDR is not expected to impact users or applications, and it can be deployed to all devices in a single step. | +| [Windows Defender Credential Guard](https://docs.microsoft.com/windows/security/identity-protection/credential-guard/credential-guard) | Enabled for all compatible hardware | Windows Defender Credential Guard uses virtualization-based security to isolate secrets so that only privileged system software can access them. Unauthorized access to these secrets can lead to credential theft attacks, such as Pass-the-Hash or Pass-The-Ticket. Windows Defender Credential Guard prevents these attacks by protecting NTLM password hashes, Kerberos Ticket Granting Tickets (TGTs), and credentials stored by applications as domain credentials. There is a small risk to application compatibility, as [applications will break](https://docs.microsoft.com/windows/security/identity-protection/credential-guard/credential-guard-requirements#application-requirements) if they require NTLMv1, Kerberos DES encryption, Kerberos unconstrained delegation, or extracting the Keberos TGT. As such, Microsoft recommends deploying Credential Guard using the ring methodology. | +| [Microsoft Edge](https://docs.microsoft.com/microsoft-edge/deploy/) | Default browser | Microsoft Edge in Windows 10 provides better security than Internet Explorer 11 (IE11). While you may still need to leverage IE11 for compatibility with some sites, Microsoft recommends configuring Microsoft Edge as the default browser, and building an Enterprise Mode Site List to redirect to IE11 only for those sites that require it. Microsoft recommends leveraging either Windows Analytics or Enterprise Site Discovery to build the initial Enterprise Mode Site List, and then gradually deploying this configuration using the rings methodology. | +| [Windows Defender Application Guard](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-guard/wd-app-guard-overview) | Enabled on compatible hardware | Windows Defender Application Guard uses a hardware isolation approach. If an employee goes to an untrusted site through either Microsoft Edge or Internet Explorer, Microsoft Edge opens the site in an isolated container, which is separate from the host operating system and enabled by Hyper-V. If the untrusted site turns out to be malicious, the isolated container protects the host PC, and the attacker can't get to your enterprise data. There is a small risk to application compatibility, as some applications may require interaction with the host PC but may not yet be on the list of trusted web sites for Application Guard. Microsoft recommends leveraging either Windows Analytics or Enterprise Site Discovery to build the initial Network Isolation Settings, and then gradually deploying this configuration using the rings methodology. | + +## Policies \ No newline at end of file From 5ab744e07698b2f7e1a4981cb999889a12d77c86 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 8 Apr 2019 11:55:29 -0700 Subject: [PATCH 120/349] added secon 5 policies --- .../seccon-5-enterprise-security.md | 200 +++++++++++++++++- 1 file changed, 199 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md index 4f8a1253d2..17e575950c 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md @@ -41,4 +41,202 @@ The controls enabled in SECCON 5 enforce a reasonable security level while minim | [Microsoft Edge](https://docs.microsoft.com/microsoft-edge/deploy/) | Default browser | Microsoft Edge in Windows 10 provides better security than Internet Explorer 11 (IE11). While you may still need to leverage IE11 for compatibility with some sites, Microsoft recommends configuring Microsoft Edge as the default browser, and building an Enterprise Mode Site List to redirect to IE11 only for those sites that require it. Microsoft recommends leveraging either Windows Analytics or Enterprise Site Discovery to build the initial Enterprise Mode Site List, and then gradually deploying this configuration using the rings methodology. | | [Windows Defender Application Guard](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-guard/wd-app-guard-overview) | Enabled on compatible hardware | Windows Defender Application Guard uses a hardware isolation approach. If an employee goes to an untrusted site through either Microsoft Edge or Internet Explorer, Microsoft Edge opens the site in an isolated container, which is separate from the host operating system and enabled by Hyper-V. If the untrusted site turns out to be malicious, the isolated container protects the host PC, and the attacker can't get to your enterprise data. There is a small risk to application compatibility, as some applications may require interaction with the host PC but may not yet be on the list of trusted web sites for Application Guard. Microsoft recommends leveraging either Windows Analytics or Enterprise Site Discovery to build the initial Network Isolation Settings, and then gradually deploying this configuration using the rings methodology. | -## Policies \ No newline at end of file +## Policies + +The policies in SECCON 5 enforce a reasonable security level while minimizing the impact to users or to applications. +Microsoft recommends using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates) for these security configurations and controls, noting that the timeline can generally be short given the limited potential impact of the security controls. + +### Security Template Policies + +| Feature | Policy Setting | Policy Value | Description | +|-------------------------|--------------------------------------------------------------------------------------------------|---------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Password Policy | Enforce password history | 24 | The number of unique new passwords that must be associated with a user account before an old password can be reused. | +| Password Policy | Minimum password length | 14 | The least number of characters that a password for a user account may contain. | +| Password Policy | Password must meet complexity requirements | Enabled | Determines whether passwords must meet complexity requirements:
1) Not contain the user's samAccountName (Account Name) value or entire displayName (Full Name value). Neither check is case sensitive.
The samAccountName is checked in its entirety only to determine whether it is part of the password. If the samAccountName is less than three characters long, this check is skipped. The displayName is parsed for delimiters: commas, periods, dashes or hyphens, underscores, spaces, pound signs, and tabs. If any of these delimiters are found, the displayName is split and all parsed sections (tokens) are confirmed to not be included in the password. Tokens that are less than three characters are ignored, and substrings of the tokens are not checked. For example, the name "Erin M. Hagens" is split into three tokens: "Erin", "M", and "Hagens". Because the second token is only one character long, it is ignored. Therefore, this user could not have a password that included either "erin" or "hagens" as a substring anywhere in the password.
2) Contain characters from three of the following categories:
- Uppercase letters of European languages (A through Z, with diacritic marks, Greek and Cyrillic characters)
- Lowercase letters of European languages (a through z, sharp-s, with diacritic marks, Greek and Cyrillic characters)
- Base 10 digits (0 through 9)
-Non-alphanumeric characters (special characters): (~!@#$%^&*_-+=`\|\\(){}[]:;"'<>,.?/)
Currency symbols such as the Euro or British Pound are not counted as special characters for this policy setting.
- Any Unicode character that is categorized as an alphabetic character but is not uppercase or lowercase. This includes Unicode characters from Asian languages. | +| Password Policy | Store passwords using reversible encryption | Disabled | Determines whether the operating system stores passwords using reversible encryption. | +| Security Options | Accounts: Guest account status | Disabled | Determines if the Guest account is enabled or disabled. | +| Security Options | Domain member: Disable machine account password changes | Disabled | Determines whether a domain member periodically changes its computer account password. | +| Security Options | Domain member: Maximum machine account password age | 30 | Determines how often a domain member will attempt to change its computer account password | +| Security Options | Domain member: require strong (Windows 2000 or later) session key | Enabled | Determines whether 128-bit key strength is required for encrypted secure channel data | +| Security Options | Interactive logon: Machine inactivity limit | 900 | The number of seconds of inactivity before the session is locked | +| Security Options | User Account Control: Admin approval mode for the built-in administrator | Enabled | The built-in Administrator account uses Admin Approval Mode - any operation that requires elevation of privilege will prompt to user to approve that operation | +| Security Options | User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode | Prompt for consent on the secure desktop | When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a privileged user name and password. If the user enters valid credentials, the operation continues with the user's highest available privilege. | +| Security Options | User Account Control: Detect application installations and prompt for elevation | Enabled | When an application installation package is detected that requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. | +| Security Options | User Account Control: Run all Administrators in admin approval mode | Enabled | This policy must be enabled, and related UAC policy settings must also be set appropriately to allow the built-in Administrator account and all other users who are members of the Administrators group to run in Admin Approval Mode. | +| Security Options | User Account Control: Virtualize file and registry write failures to per-user locations | Enabled | This policy setting controls whether application write failures are redirected to defined registry and file system locations. This policy setting mitigates applications that run as administrator and write run-time application data to %ProgramFiles%, %Windir%, %Windir%\\system32, or HKLM\\Software. | +| User Rights Assignments | Access Credential Manager as a trusted caller | No One (blank) | This setting is used by Credential Manager during Backup/Restore. No accounts should have this privilege, as it is only assigned to Winlogon. Users saved credentials might be compromised if this privilege is given to other entities. | +| User Rights Assignments | Act as part of the operating system | No One (blank) | This user right allows a process to impersonate any user without authentication. The process can therefore gain access to the same local resources as that user. | +| User Rights Assignments | Allow log on locally | Administrators; Users | Determines which users can log on to the computer | +| User Rights Assignments | Back up files and directories | Administrators | Determines which users can bypass file and directory, registry, and other persistent object permissions for the purposes of backing up the system | +| User Rights Assignments | Create a pagefile | Administrators | Determines which users and groups can call an internal application programming interface (API) to create and change the size of a page file | +| User Rights Assignments | Create a token object | No One (blank) | Determines which accounts can be used by processes to create a token that can then be used to get access to any local resources when the process uses an internal application programming interface (API) to create an access token. | +| User Rights Assignments | Create global objects | Administrators; LOCAL SERVICE; NETWORK SERVICE; SERVICE | This security setting determines whether users can create global objects that are available to all sessions. | +| User Rights Assignments | Create permanent shared objects | No One (blank) | Determines which accounts can be used by processes to create a directory object using the object manager | +| User Rights Assignments | Create symbolic links | Administrators | Determines if the user can create a symbolic link from the computer he is logged on to | +| User Rights Assignments | Debug programs | Administrators | Determines which users can attach a debugger to any process or to the kernel. Developers who are debugging their own applications do not need to be assigned this user right. Developers who are debugging new system components will need this user right to be able to do so. This user right provides complete access to sensitive and critical operating system components. | +| User Rights Assignments | Deny access to this computer from the network | Guests; NT AUTHORITY\\Local Account | Determines which users are prevented from accessing a computer over the network. This policy setting supersedes the Access this computer from the network policy setting if a user account is subject to both policies. | +| User Rights Assignments | Deny log on locally | Guests | Determines which users are prevented from logging on at the computer. This policy setting supersedes the Allow log on locally policy setting if an account is subject to both policies. | +| User Rights Assignments | Deny log on through Remote Desktop Services | Guests; NT AUTHORITY\\Local Account | Determines which users and groups are prohibited from logging on as a Remote Desktop Services client | +| User Rights Assignments | Force shutdown from a remote system | Administrators | Determines which users can shut down a computer from a remote location on the network. Misuse of this user right can result in a denial of service. | +| User Rights Assignments | Increase scheduling priority | Administrators | Determines which accounts can use a process with Write Property access to another process to increase the execution priority assigned to the other process. A user with this privilege can change the scheduling priority of a process through the Task Manager user interface. | +| User Rights Assignments | Load and unload device drivers | Administrators | Determines which users can dynamically load and unload device drivers or other code in to kernel mode. This user right does not apply to Plug and Play device drivers. | +| User Rights Assignments | Manage auditing and security log | Administrators | Determines which users can specify object access auditing options for individual resources, such as files, Active Directory objects, and registry keys. | +| User Rights Assignments | Modify firmware environment variables | Administrators | Determines who can modify firmware environment values. Firmware environment variables are settings stored in the nonvolatile RAM of non-x86-based computers. The effect of the setting depends on the processor. | +| User Rights Assignments | Restore files and directories | Administrators | Determines which users can bypass file, directory, registry, and other persistent objects permissions when restoring backed up files and directories, and determines which users can set any valid security principal as the owner of an object | +| User Rights Assignments | Take ownership of files or other objects | Administrators | Determines which users can take ownership of any securable object in the system, including Active Directory objects, files and folders, printers, registry keys, processes, and threads | + +### Advanced Audit Policies + +| Feature | Policy Setting | Policy Value | Description | +|--------------------|---------------------------------------|---------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Account Logon | Audit Credential Validation | Success and Failure | Audit events generated by validation tests on user account logon credentials. Occurs only on the computer that is authoritative for those credentials. | +| Account Management | Audit Security Group Management | Success | Audit events generated by changes to security groups, such as creating, changing or deleting security groups, adding or removing members, or changing group type. | +| Account Management | Audit User Account Management | Success and Failure | Audit changes to user accounts. Events include creating, changing, deleting user accounts; renaming, disabling, enabling, locking out, or unlocking accounts; setting or changing a user account’s password; adding a security identifier (SID) to the SID History of a user account; configuring the Directory Services Restore Mode password; changing permissions on administrative user accounts; backing up or restoring Credential Manager credentials | +| Detailed Tracking | Audit PNP Activity | Success | Audit when plug and play detects an external device | +| Detailed Tracking | Audit Process Creation | Success | Audit events generated when a process is created or starts; the name of the application or user that created the process is also audited | +| Logon/ Logoff | Audit Account Lockout | Failure | Audit events generated by a failed attempt to log on to an account that is locked out | +| Logon/ Logoff | Audit Group Membership | Success | Audit the group membership information in the user's logon token. Events in this subcategory are generated on the computer on which a logon session is created. For an interactive logon, the security audit event is generated on the computer that the user logged on to. For a network logon, such as accessing a shared folder on the network, the security audit event is generated on the computer hosting the resource. | +| Logon/ Logoff | Audit Logon | Success and Failure | Audit events generated by user account logon attempts on the computer | +| Logon/ Logoff | Audit Other Logon / Logoff Events | Success and Failure | Audit other logon/logoff-related events that are not covered in the “Logon/Logoff” policy setting, such as Terminal Services session disconnections, new Terminal Services sessions locking and unlocking a workstation, invoking or dismissing a screen saver, detection of a Kerberos replay attack, or access to a wireless network granted to a user or computer account | +| Logon/ Logoff | Audit Special Logon | Success | Audit events generated by special logons such as the use of a special logon, which is a logon that has administrator-equivalent privileges and can be used to elevate a process to a higher level, or a logon by a member of a Special Group (Special Groups enable you to audit events generated when a member of a certain group has logged on to your network) | +| Object Access | Audit Detailed File Share | Failure | Audit attempts to access files and folders on a shared folder; the Detailed File Share setting logs an event every time a file or folder is accessed | +| Object Access | Audit File Share | Success and Failure | Audit attempts to access a shared folder; an audit event is generated when an attempt is made to access a shared folder | +| Object Access | Audit Other Object Access Events | Success and Failure | Audit events generated by the management of task scheduler jobs or COM+ objects | +| Object Access | Audit Removable Storage | Success and Failure | Audit user attempts to access file system objects on a removable storage device. A security audit event is generated only for all objects for all types of access requested. | +| Policy Change | Audit Audit Policy Change | Success | Audit changes in the security audit policy settings | +| Policy Change | Audit Authentication Policy Change | Success | Audit events generated by changes to the authentication policy | +| Policy Change | Audit MPSSVC Rule-Level Policy Change | Success and Failure | Audit events generated by changes in policy rules used by the Microsoft Protection Service (MPSSVC). This service is used by Windows Firewall. | +| Policy Change | Audit Other Policy Change Events | Failure | Audit events generated by other security policy changes that are not audited in the policy change category, such as Trusted Platform Module (TPM) configuration changes, kernel-mode cryptographic self tests, cryptographic provider operations, cryptographic context operations or modifications, applied Central Access Policies (CAPs) changes, or boot Configuration Data (BCD) modifications | +| Privilege Use | Audit Sensitive Privilege Use | Success and Failure | Audit events generated when sensitive privileges (user rights) are used | +| System | Audit Other System Events | Success and Failure | Audit any of the following events: Startup and shutdown of the Windows Firewall service and driver, security policy processing by the Windows Firewall Service, cryptography key file and migration operations. | +| System | Audit Security State Change | Success | Audit events generated by changes in the security state of the computer such as startup and shutdown of the computer, change of system time, recovering the system from CrashOnAuditFail, which is logged after a system restarts when the security event log is full and the CrashOnAuditFail registry entry is configured. | +| System | Audit Security System Extension | Success | Audit events related to security system extensions or services | +| System | Audit System Integrity | Success and Failure | Audit events that violate the integrity of the security subsystem | + +### Windows Defender Firewall Policies + +| Feature | Policy Setting | Policy Value | Description | +|----------------------------|---------------------------------------|--------------|-------------------------------------------------------------------------------------------------------------------------------------------| +| Domain Profile / Logging | Log dropped packets | Yes | Enables logging of dropped packets for a domain connection | +| Domain Profile / Logging | Log successful connections | Yes | Enables logging of successful connections for a domain connection | +| Domain Profile / Logging | Size Limit | 16384 | Sets the firewall log file size for a domain connection | +| Domain Profile / Settings | Display a notification | No | The display of notifications to the user is enabled when a program is blocked from receiving an inbound connection in the domain profile | +| Domain Profile / State | Firewall State | On | Enables the firewall when connected to the domain profile | +| Domain Profile / State | Inbound Connections | Block | Unsolicited inbound connections for which there is no rule allowing the connection will be blocked in the domain profile | +| Private Profile / Logging | Log dropped packets | Yes | Enables logging of dropped packets for a private connection | +| Private Profile / Logging | Log successful connections | Yes | Enables logging of successful connections for a private connection | +| Private Profile / Logging | Size limit | 16384 | Sets the firewall log file size for a private connection | +| Private Profile / Settings | Display a notification | No | The display of notifications to the user is enabled when a program is blocked from receiving an inbound connection in the private profile | +| Private Profile / State | Firewall state | On | Enables the firewall when connected to the private profile | +| Private Profile / State | Inbound connections | Block | Unsolicited inbound connections for which there is no rule allowing the connection will be blocked in the private profile | +| Public Profile / Logging | Log dropped packets | Yes | Enables logging of dropped packets for a public connection | +| Public Profile / Logging | Log successful connections | Yes | Enables logging of successful connections for a public connection | +| Public Profile / Logging | Size Limit | 16384 | Sets the firewall log file size for a public connection | +| Public Profile / Settings | Apply local connection security rules | No | Ensures local connection rules will not be merged with Group Policy settings in the domain | +| Public Profile / Settings | Apply local firewall rules | No | Users cannot create new firewall rules | +| Public Profile / Settings | Display a notification | No | The display of notifications to the user is enabled when a program is blocked from receiving an inbound connection in the public profile | +| Public Profile / State | Firewall state | On | Enables the firewall when connected to the public profile | +| Public Profile / State | Inbound connections | Block | Unsolicited inbound connections for which there is no rule allowing the connection will be blocked in the public profile | + +### Computer Policies + +| Feature | Policy Setting | Policy Value | Description | +|---------------------------------------------------------------------------|------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Network / Lanman Workstation | Enable insecure guest logons | Disabled | Determines if the SMB client will allow insecure guest logons to an SMB server | +| System / Device Guard | Turn on Virtualization Based Security | Enabled: SecureBoot and DMA Protection | Specifies whether Virtualization Based Security is enabled. Virtualization Based Security uses the Windows Hypervisor to provide support for security services. Virtualization Based Security requires Secure Boot and can optionally be enabled with the use of DMA Protections. DMA protections require hardware support and will only be enabled on correctly configured devices. | +| System / Early Launch Antimalware | Boot-Start Driver Initialization Policy | Enabled: Good, Unknown and bad but critical | Allows you to specify which boot-start drivers are initialized based on a classification determined by an Early Launch Antimalware boot-start driver. | +| System / Power Management / Sleep Settings | Require a password when a computer wakes (on battery) | Enabled | Specifies whether the user is prompted for a password when the system resumes from sleep | +| System / Power Management / Sleep Settings | Require a password when a computer wakes (plugged in) | Enabled | Specifies whether the user is prompted for a password when the system resumes from sleep | +| System / Remote Procedure Call | Restrict Unauthenticated RPC clients | Enabled: Authenticated | Controls how the RPC server runtime handles unauthenticated RPC clients connecting to RPC servers. | +| Windows Components / App runtime | Allow Microsoft accounts to be optional | Enabled | Lets you control whether Microsoft accounts are optional for Windows Store apps that require an account to sign in. This policy only affects Windows Store apps that support it. | +| Windows Components / AutoPlay Policies | Disallow Autoplay for non-volume devices | Enabled | Disallows AutoPlay for MTP devices like cameras or phones. | +| Windows Components / AutoPlay Policies | Set the default behavior for AutoRun | Enabled: Do not execute any autorun commands | Sets the default behavior for Autorun commands. | +| Windows Components / AutoPlay Policies | Turn off Autoplay | Enabled: All Drives | Allows you to turn off the Autoplay feature. | +| Windows Components / Biometrics / Facial Features | Configure enhanced anti-spoofing | Enabled | Determines whether enhanced anti-spoofing is required for Windows Hello face authentication | +| Windows Components / BitLocker Drive Encryption | Choose drive encryption method and cipher strength (Windows 10) | Enabled: XTA-AES-256 for operating system drives and fixed drives and AES-CBC-256 for removable drives | Allows you to configure the algorithm and cipher strength used by BitLocker Drive Encryption. This policy setting is applied when you turn on BitLocker. | +| Windows Components / BitLocker Drive Encryption | Disable new DMA devices when this computer is locked | Enabled | Allows you to block direct memory access (DMA) for all Thunderbolt hot pluggable PCI downstream ports until a user logs into Windows | +| Windows Components / BitLocker Drive Encryption / Operating System Drives | Allow enhanced PINs for startup | Enabled | Allows you to configure whether enhanced startup PINs are used with BitLocker | +| Windows Components / BitLocker Drive Encryption / Operating System Drives | Allow Secure Boot for integrity validation | Enabled | Allows you to configure whether Secure Boot will be allowed as the platform integrity provider for BitLocker operating system drives. | +| Windows Components / Event Log Service / Application | Specify the maximum log file size (KB) | Enabled: 32768 | Specifies the maximum size of the log file in kilobytes. | +| Windows Components / Event Log Service / Security | Specify the maximum log file size (KB) | Enabled: 196608 | Specifies the maximum size of the log file in kilobytes. | +| Windows Components / Event Log Service / System | Specify the maximum log file size (KB) | Enabled: 32768 | Specifies the maximum size of the log file in kilobytes. | +| Windows Components / Microsoft Edge | Configure Windows Defender SmartScreen | Enabled | Configure whether to turn on Windows Defender SmartScreen to provide warning messages to help protect your employees from potential phishing scams and malicious software | +| Windows Components / Windows Defender SmartScreen / Explorer | Configure Windows Defender SmartScreen | Warn and prevent bypass | Allows you to turn Windows Defender SmartScreen on or off | +| Windows Components / Microsoft Edge | Prevent bypassing Windows Defender SmartScreen prompts for files | Enabled | This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about downloading unverified files. | +| Windows Components / Windows Defender SmartScreen / Microsoft Edge | Prevent bypassing Windows Defender SmartScreen prompts for sites | Enabled | Lets you decide whether employees can override the Windows Defender SmartScreen warnings about potentially malicious websites | +| Windows Components / Windows Installer | Allow user control over installs | Disabled | Permits users to change installation options that typically are available only to system administrators | +| Windows Components / Windows Installer | Always install with elevated privileges | Disabled | Directs Windows Installer to use elevated permissions when it installs any program on the system | +| Windows Components / Windows Logon Options | Sign-in last interactive user automatically after a system-initiated restart | Disabled | Controls whether a device will automatically sign-in the last interactive user after Windows Update restarts the system | +| Windows Components / Windows Remote Management (WinRM) / WinRM Client | Allow unencrypted traffic | Disabled | Manage whether the Windows Remote Management (WinRM) client sends and receives unencrypted messages over the network | +| Windows Components / Windows Remote Management (WinRM) / WinRM Service | Allow unencrypted traffic | Disabled | Manage whether the Windows Remote Management (WinRM) service sends and receives unencrypted messages over the network. | + +### Windows Defender Antivirus Policies + +| Feature | Policy Setting | Policy Value | Description | +|------------------------------------------------------------------------|-----------------------------------------------------------|----------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Windows Components / Windows Defender Antivirus | Turn off Windows Defender Antivirus | Disabled | Turns off Windows Defender Antivirus | +| Windows Components / Windows Defender Antivirus | Configure detection for potentially unwanted applications | Enabled: Audit | Enable or disable detection for potentially unwanted applications. You can choose to block, audit, or allow when potentially unwanted software is being downloaded or attempts to install itself on your computer. | +| Windows Components / Windows Defender Antivirus / MAPS | Join Microsoft MAPS | Enabled: Advanced MAPS | Allows you to join Microsoft MAPS. Microsoft MAPS is the online community that helps you choose how to respond to potential threats. The community also helps stop the spread of new malicious software infections. | +| Windows Components / Windows Defender Antivirus / MAPS | Send file samples when further analysis is required | Enabled: Send safe samples | Configures behavior of samples submission when opt-in for MAPS telemetry is set | +| Windows Components / Windows Defender Antivirus / Real-time Protection | Turn off real-time protection | Disabled | Turns off real-time protection prompts for known malware detection | +| Windows Components / Windows Defender Antivirus / Real-time Protection | Turn on behavior monitoring | Enabled | Allows you to configure behavior monitoring. | +| Windows Components / Windows Defender Antivirus / Scan | Scan removable drives | Enabled | Allows you to manage whether to scan for malicious software and unwanted software in the contents of removable drives, such as USB flash drives, when running a full scan. | +| Windows Components / Windows Defender Antivirus / Scan | Specify the interval to run quick scans per day | 24 | Allows you to specify an interval at which to perform a quick scan. The time value is represented as the number of hours between quick scans. Valid values range from 1 (every hour) to 24 (once per day). | +| Windows Components / Windows Defender Antivirus / Scan | Turn on e-mail scanning | Enabled | Allows you to configure e-mail scanning. When e-mail scanning is enabled, the engine will parse the mailbox and mail files, according to their specific format, in order to analyze the mail bodies and attachments | + +### User Policies + +| Feature | Policy Setting | Policy Value | Description | +|----------------------------------------|-------------------------------------------------------------|--------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Start Menu and Taskbar / Notifications | Turn off toast notifications on the lock screen | Enabled | Turns off toast notifications on the lock screen. | +| Windows Components / Cloud Content | Do not suggest third-party content in the Windows spotlight | Enabled | Windows spotlight features like lock screen spotlight, suggested apps in Start menu or Windows tips will no longer suggest apps and content from third-party software publishers | + +### IE Computer Policies + +| Feature | Policy Setting | Policy Value | Description | +|---------------------------------------------------------------------------------------------------------------------|---------------------------------------------------------|----------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Windows Components / Internet Explorer | Prevent managing SmartScreen Filter | Enabled: On | Prevents the user from managing SmartScreen Filter, which warns the user if the website being visited is known for fraudulent attempts to gather personal information through "phishing," or is known to host malware. | +| Windows Components / Internet Explorer / Internet Control Panel / Advanced Page | Check for server certificate revocation | Enabled | Allows you to manage whether Internet Explorer will check revocation status of servers' certificates | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Turn on Cross-Site Scripting Filter | Enabled: Enable | Controls whether the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injections into websites in this zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Turn on Protected Mode | Enabled: Enable | Allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Turn on SmartScreen Filter scan | Enabled: Enable | Controls whether SmartScreen Filter scans pages in this zone for malicious content. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Use Pop-up Blocker | Enabled: Enable | Allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not blocked. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Intranet Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Intranet Zone | Java permissions | Enabled: High Safety | Allows you to manage permissions for Java applets. High Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Local Machine Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-down Internet Zone | Turn on SmartScreen Filter scan | Enabled: Enable | Controls whether SmartScreen Filter scans pages in this zone for malicious content. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-Down Restricted Sites Zone | Turn on SmartScreen Filter scan | Enabled: Enable | Controls whether SmartScreen Filter scans pages in this zone for malicious content. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Turn on Cross-Site Scripting Filter | Enabled: Enable | Controls whether the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injections into websites in this zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Turn on Protected Mode | Enabled: Enable | Allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Turn on SmartScreen Filter scan | Enabled: Enable | Controls whether SmartScreen Filter scans pages in this zone for malicious content. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-Down Trusted Sites Zone | Java permissions | Enabled: Enable | | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Use Pop-up Blocker | Enabled: Enable | Allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not blocked. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Trusted Sites Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | +| Windows Components / Internet Explorer / Security Features | Allow fallback to SSL 3.0 (Internet Explorer) | Enabled: No sites | Allows you to block an insecure fallback to SSL 3.0. When this policy is enabled, Internet Explorer will attempt to connect to sites using SSL 3.0 or below when TLS 1.0 or greater fails. | + +### LAPS + +Download and install the [Microsoft Local Admin Password Solution](https://www.microsoft.com/download/details.aspx?id=46899). + +| Feature | Policy Setting | Policy Value | Description | +|---------|----------------------------------------|--------------|-------------------------------| +| LAPS | Enable local admin password management | Enabled | Activates LAPS for the device | + +### Custom Policies + +| Feature | Policy Setting | Policy Value | Description | +|-----------------------------------------------------------------------|-----------------------------------------------------------|--------------|---------------------------------------------------------------------------------------| +| Computer Configuration / Administrative Templates / MS Security Guide | Apply UAC restrictions to local accounts on network logon | Enabled | Filters the user account token for built-in administrator accounts for network logons | + +### Services + +| Feature | Policy Setting | Policy Value | Description | +|----------------|-----------------------------------|--------------|-----------------------------------------------------------------------------------| +| Scheduled Task | XblGameSaveTask | Disabled | Syncs save data for Xbox Live save-enabled games | +| Services | Xbox Accessory Management Service | Disabled | Manages connected Xbox accessories | +| Services | Xbox Game Monitoring | Disabled | Monitors Xbox games currently being played | +| Services | Xbox Live Auth Manager | Disabled | Provides authentication and authorization services for interactive with Xbox Live | +| Services | Xbox Live Game Save | Disabled | Syncs save data for Xbox live save enabled games | +| Services | Xbox Live Networking Service | Disabled | Supports the Windows.Networking.XboxLive API \ No newline at end of file From fb3ed08be97a3e52d8166552e872c2a16d80313a Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 8 Apr 2019 12:02:43 -0700 Subject: [PATCH 121/349] added link to rings method --- .../seccon-3-enterprise-VIP-security.md | 4 ++-- .../seccon-4-enterprise-high-security.md | 6 +++--- .../seccon-5-enterprise-security.md | 7 +++++-- 3 files changed, 10 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md index 9264d4914a..17990975e7 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md @@ -41,7 +41,7 @@ organizations. The controls enforced in SECCON 3 implement complex security configuration and controls. They are likely to have a higher impact to users or to applications, enforcing a level of security commensurate with the risks facing the most targeted organizations. -Microsoft recommends using the Audit/Enforce methodology for controls with audit mode, and the rings methodology for those that do +Microsoft recommends using the Audit/Enforce methodology for controls with audit mode, and [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates) for those that do not. | Feature Set | Feature | Description | @@ -52,7 +52,7 @@ not. ## Policies -The policies enforced in SECCON 3 implement strict security configuration and controls. They can have a potentially significant impact to users or to applications, enforcing a level of security commensurate with the risks facing targeted organizations. Microsoft recommends disciplined testing and deployment using the rings methodology. +The policies enforced in SECCON 3 implement strict security configuration and controls. They can have a potentially significant impact to users or to applications, enforcing a level of security commensurate with the risks facing targeted organizations. Microsoft recommends disciplined testing and deployment using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). ### Security Template Policies diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md index 17d3cef98a..7fe9cc64a6 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md @@ -45,12 +45,12 @@ configuration than SECCON 5. While they may have a slightly higher impact to users or to applications, they enforce a level of security more commensurate with the risks facing users with access to sensitive information. Microsoft recommends using the Audit/Enforce methodology for controls with an Audit mode, -and the rings methodology for those that do not, with a moderate timeline that +and t[the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates) for those that do not, with a moderate timeline that is anticipated to be slightly longer than the process in SECCON 5. | Feature Set | Feature | Description | |-------------------------------------------------------------|-------------------------------------------------------|----------------| -| [Exploit protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/exploit-protection-exploit-guard) | Enforce memory protection for OS-level controls:
- Control flow guard (CFG)
- Data Execution Protection (DEP)
- Mandatory ASLR
- Bottom-Up ASLR
- High-entropy ASLR
- Validate Exception Chains (SEHOP)
- Validate heap integrity | Exploit protection helps protect devices from malware that use exploits to spread and infect to other devices. It consists of several mitigations that can be applied at either the operating system level, or at the individual app level. There is a risk to application compatibility, as some applications may rely on blocked behavior (e.g. dynamically generating code without marking memory as executable). Microsoft recommends gradually deploying this configuration using the Rings methodology. | +| [Exploit protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/exploit-protection-exploit-guard) | Enforce memory protection for OS-level controls:
- Control flow guard (CFG)
- Data Execution Protection (DEP)
- Mandatory ASLR
- Bottom-Up ASLR
- High-entropy ASLR
- Validate Exception Chains (SEHOP)
- Validate heap integrity | Exploit protection helps protect devices from malware that use exploits to spread and infect to other devices. It consists of several mitigations that can be applied at either the operating system level, or at the individual app level. There is a risk to application compatibility, as some applications may rely on blocked behavior (e.g. dynamically generating code without marking memory as executable). Microsoft recommends gradually deploying this configuration using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | | [Attack Surface Reduction (ASR)](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard)| Configure and Enforce Attack Surface Reduction Rules:
- Block executable content from email client and webmail
- Block all Office applications from creating child processes
- Block Office applications from creating executable content
- Block Office applications from injecting code into other processes
- Block JavaScript or VBScript from launching downloaded executable content
- Block execution of potentially obfuscated scripts
- Block Win32 API calls from Office macro
- Block executable files from running unless they meet a prevalence, age, or trusted list criterion
- Use advanced protection against ransomware
- Block credential stealing from the Windows local security authority subsystem (lsass.exe)
- Block process creations originating from PSExec and WMI commands
- Block untrusted and unsigned processes that run from USB
- Block Office communication applications from creating child processes
- Block Adobe Reader from creating child processes
| Attack surface reduction controls help prevent actions and apps that are typically used by exploit-seeking malware to infect machines. There is a risk to application compatibility, as some applications may rely on blocked behavior (e.g. an Office application spawning a child process). Each control has an Audit mode, and as such, Microsoft recommends the Audit / Enforce Methodology (repeated here):
1) Audit – enable the controls in audit mode, and gather audit data in a centralized location
2) Review – review the audit data to assess potential impact (both positive and negative) and configure any exemptions from the security control you need to configure
3) Enforce – Deploy the configuration of any exemptions and convert the control to enforce mode | | [Network protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/network-protection-exploit-guard) | Configure and enforce Network Protection | Network protection helps to prevent employees from using any application to access dangerous domains that may host phishing scams, exploits, and other malicious content on the Internet. It expands the scope of Windows Defender SmartScreen to block all outbound HTTP(s) traffic that attempts to connect to low-reputation sources (based on the domain or hostname). There is a risk to application compatibility, as a result of false positives in flagged sites. Microsoft recommends deploying using the Audit / Enforce Methodology. | @@ -60,7 +60,7 @@ The policies enforced in SECCON 4 implement more controls and a more sophisticat configuration than SECCON 5. While they may have a slightly higher impact to users or to applications, they enforce a level of security more commensurate with the risks facing users with access to sensitive information. Microsoft -recommends using the rings methodology for these security configurations and +recommends using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates) for these security configurations and controls, with a moderate timeline that is anticipated to be slightly longer than the process in SECCON 5. diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md index 17e575950c..ed958a060d 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md @@ -22,6 +22,9 @@ ms.date: 04/05/2018 - Windows Server 2016 - Office 2016 +SECCON 5 is the minimum security configuration for an enterprise device. +Microsoft recommends the following configuration for SECCON 5 devices. + ## Behaviors The behaviors recommended in SECCON 5 enforce a reasonable security level while minimizing the impact to users or to applications. @@ -38,8 +41,8 @@ The controls enabled in SECCON 5 enforce a reasonable security level while minim |-----------------------------------|-------------------------------------|--------------------| | [Windows Defender ATP EDR](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/overview-endpoint-detection-response) | Deployed to all devices | The Windows Defender ATP endpoint detection and response (EDR) provides actionable and near real-time detection of advanced attacks. EDR helps security analysts , and aggregates alerts with the same attack techniques or attributed to the same attacker into an an entity called an *incident*. An incident helps analysts prioritize alerts, collectively investigate the full scope of a breach, and respond to threats. Windows Defender ATP EDR is not expected to impact users or applications, and it can be deployed to all devices in a single step. | | [Windows Defender Credential Guard](https://docs.microsoft.com/windows/security/identity-protection/credential-guard/credential-guard) | Enabled for all compatible hardware | Windows Defender Credential Guard uses virtualization-based security to isolate secrets so that only privileged system software can access them. Unauthorized access to these secrets can lead to credential theft attacks, such as Pass-the-Hash or Pass-The-Ticket. Windows Defender Credential Guard prevents these attacks by protecting NTLM password hashes, Kerberos Ticket Granting Tickets (TGTs), and credentials stored by applications as domain credentials. There is a small risk to application compatibility, as [applications will break](https://docs.microsoft.com/windows/security/identity-protection/credential-guard/credential-guard-requirements#application-requirements) if they require NTLMv1, Kerberos DES encryption, Kerberos unconstrained delegation, or extracting the Keberos TGT. As such, Microsoft recommends deploying Credential Guard using the ring methodology. | -| [Microsoft Edge](https://docs.microsoft.com/microsoft-edge/deploy/) | Default browser | Microsoft Edge in Windows 10 provides better security than Internet Explorer 11 (IE11). While you may still need to leverage IE11 for compatibility with some sites, Microsoft recommends configuring Microsoft Edge as the default browser, and building an Enterprise Mode Site List to redirect to IE11 only for those sites that require it. Microsoft recommends leveraging either Windows Analytics or Enterprise Site Discovery to build the initial Enterprise Mode Site List, and then gradually deploying this configuration using the rings methodology. | -| [Windows Defender Application Guard](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-guard/wd-app-guard-overview) | Enabled on compatible hardware | Windows Defender Application Guard uses a hardware isolation approach. If an employee goes to an untrusted site through either Microsoft Edge or Internet Explorer, Microsoft Edge opens the site in an isolated container, which is separate from the host operating system and enabled by Hyper-V. If the untrusted site turns out to be malicious, the isolated container protects the host PC, and the attacker can't get to your enterprise data. There is a small risk to application compatibility, as some applications may require interaction with the host PC but may not yet be on the list of trusted web sites for Application Guard. Microsoft recommends leveraging either Windows Analytics or Enterprise Site Discovery to build the initial Network Isolation Settings, and then gradually deploying this configuration using the rings methodology. | +| [Microsoft Edge](https://docs.microsoft.com/microsoft-edge/deploy/) | Default browser | Microsoft Edge in Windows 10 provides better security than Internet Explorer 11 (IE11). While you may still need to leverage IE11 for compatibility with some sites, Microsoft recommends configuring Microsoft Edge as the default browser, and building an Enterprise Mode Site List to redirect to IE11 only for those sites that require it. Microsoft recommends leveraging either Windows Analytics or Enterprise Site Discovery to build the initial Enterprise Mode Site List, and then gradually deploying this configuration using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | +| [Windows Defender Application Guard](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-guard/wd-app-guard-overview) | Enabled on compatible hardware | Windows Defender Application Guard uses a hardware isolation approach. If an employee goes to an untrusted site through either Microsoft Edge or Internet Explorer, Microsoft Edge opens the site in an isolated container, which is separate from the host operating system and enabled by Hyper-V. If the untrusted site turns out to be malicious, the isolated container protects the host PC, and the attacker can't get to your enterprise data. There is a small risk to application compatibility, as some applications may require interaction with the host PC but may not yet be on the list of trusted web sites for Application Guard. Microsoft recommends leveraging either Windows Analytics or Enterprise Site Discovery to build the initial Network Isolation Settings, and then gradually deploying this configuration using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | ## Policies From 23eeaab301c202e004256444d9ff9e0c08626e4f Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 8 Apr 2019 12:07:42 -0700 Subject: [PATCH 122/349] fixed links --- .../windows-seccon-framework/TOC.md | 30 +++++++++---------- 1 file changed, 15 insertions(+), 15 deletions(-) diff --git a/windows/security/threat-protection/windows-seccon-framework/TOC.md b/windows/security/threat-protection/windows-seccon-framework/TOC.md index 847450193e..2972d04f05 100644 --- a/windows/security/threat-protection/windows-seccon-framework/TOC.md +++ b/windows/security/threat-protection/windows-seccon-framework/TOC.md @@ -1,17 +1,17 @@ -# [Windows security compliance](windows-seccon-framework/windows-security-compliance.md) +# [Windows security compliance](windows-security-compliance.md) -## [Windows security baselines](windows-seccon-framework/windows-security-baselines.md) -### [Security Compliance Toolkit](windows-seccon-framework/security-compliance-toolkit-10.md) -### [Get support](windows-seccon-framework/get-support-for-security-baselines.md) -## [Windows SECCON framework](windows-seccon-framework/windows-security-configuration-framework.md) -### [SECCON 1 enterprise administrator security](windows-seccon-framework/seccon-5-enterprise-administrator-security.md) -### [SECCON 2 enterprise dev/ops security](windows-seccon-framework/seccon-5-enterprise-devops-security.md) -### [SECCON 3 enterprise VIP security](windows-seccon-framework/seccon-3-vip-enterprise-security.md) -### [SECCON 4 enterprise high security](windows-seccon-framework/seccon-4-high-enterprise-security.md) -### [SECCON 5 enterprise security](windows-seccon-framework/seccon-5-enterprise-security.md) +## [Windows security baselines](windows-security-baselines.md) +### [Security Compliance Toolkit](security-compliance-toolkit-10.md) +### [Get support](get-support-for-security-baselines.md) +## [Windows SECCON framework](windows-security-configuration-framework.md) +### [SECCON 1 enterprise administrator security](seccon-5-enterprise-administrator-security.md) +### [SECCON 2 enterprise dev/ops security](seccon-5-enterprise-devops-security.md) +### [SECCON 3 enterprise VIP security](seccon-3-vip-enterprise-security.md) +### [SECCON 4 enterprise high security](seccon-4-high-enterprise-security.md) +### [SECCON 5 enterprise security](seccon-5-enterprise-security.md) ##Windows Security Blog Posts -### [Sticking with Well-Known and Proven Solutions](windows-seccon-framework/windows-security-blog/sticking-with-well-known-and-proven-solutions.md) -### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-seccon-framework/windows-security-blog/why-were-not-recommending-fips-mode-anymore.md) -### [Configuring Account Lockout](windows-seccon-framework/windows-security-blog/configuring-account-lockout.md) -### [Blocking Remote Use of Local Accounts](windows-seccon-framework/windows-security-blog/blocking-remote-use-of-local-accounts.md) -### [Dropping the “Untrusted Font Blocking” setting](windows-seccon-framework/windows-security-blog/dropping-the-untrusted-font-blocking-setting.md) \ No newline at end of file +### [Sticking with Well-Known and Proven Solutions](windows-security-blog/sticking-with-well-known-and-proven-solutions.md) +### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-security-blog/why-were-not-recommending-fips-mode-anymore.md) +### [Configuring Account Lockout](windows-security-blog/configuring-account-lockout.md) +### [Blocking Remote Use of Local Accounts](windows-security-blog/blocking-remote-use-of-local-accounts.md) +### [Dropping the “Untrusted Font Blocking” setting](windows-security-blog/dropping-the-untrusted-font-blocking-setting.md) \ No newline at end of file From 19f040fc02122a96f108ac7e58cb1402f756dd93 Mon Sep 17 00:00:00 2001 From: TokyoScarab Date: Mon, 8 Apr 2019 15:51:45 -0400 Subject: [PATCH 123/349] Adding CSP Reference Link These changes will clear up confusion about the support of this CSP in Windows 10 as it wasn't added for all versions of Windows. --- windows/client-management/mdm/windowssecurityauditing-csp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/windowssecurityauditing-csp.md b/windows/client-management/mdm/windowssecurityauditing-csp.md index c7ebdf2171..74aa8f8b40 100644 --- a/windows/client-management/mdm/windowssecurityauditing-csp.md +++ b/windows/client-management/mdm/windowssecurityauditing-csp.md @@ -13,7 +13,7 @@ ms.date: 06/26/2017 # WindowsSecurityAuditing CSP -The WindowsSecurityAuditing configuration service provider (CSP) is used to enable logging of security audit events. This CSP was added in Windows 10, version 1511. +The WindowsSecurityAuditing configuration service provider (CSP) is used to enable logging of security audit events. This CSP was added in Windows 10, version 1511 for Mobile and Mobile Enterprise. Make sure to consult the [Configuration service provider reference](https://docs.microsoft.com/windows/client-management/mdm/configuration-service-provider-reference) to see if this CSP and others are supported on your Windows installation. The following diagram shows the WindowsSecurityAuditing configuration service provider in tree format. From cbe8d9a03b6e03ade6aed84010f6010c189c3f78 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 8 Apr 2019 13:24:24 -0700 Subject: [PATCH 124/349] fixed links --- .../threat-protection/windows-seccon-framework/TOC.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-seccon-framework/TOC.md b/windows/security/threat-protection/windows-seccon-framework/TOC.md index 2972d04f05..6038ad503b 100644 --- a/windows/security/threat-protection/windows-seccon-framework/TOC.md +++ b/windows/security/threat-protection/windows-seccon-framework/TOC.md @@ -4,10 +4,10 @@ ### [Security Compliance Toolkit](security-compliance-toolkit-10.md) ### [Get support](get-support-for-security-baselines.md) ## [Windows SECCON framework](windows-security-configuration-framework.md) -### [SECCON 1 enterprise administrator security](seccon-5-enterprise-administrator-security.md) -### [SECCON 2 enterprise dev/ops security](seccon-5-enterprise-devops-security.md) -### [SECCON 3 enterprise VIP security](seccon-3-vip-enterprise-security.md) -### [SECCON 4 enterprise high security](seccon-4-high-enterprise-security.md) +### [SECCON 1 enterprise administrator security](seccon-1-enterprise-administrator-security.md) +### [SECCON 2 enterprise dev/ops security](seccon-2-enterprise-devops-security.md) +### [SECCON 3 enterprise VIP security](seccon-3-enterprise-vip-security.md) +### [SECCON 4 enterprise high security](seccon-4-enterprise-high-security.md) ### [SECCON 5 enterprise security](seccon-5-enterprise-security.md) ##Windows Security Blog Posts ### [Sticking with Well-Known and Proven Solutions](windows-security-blog/sticking-with-well-known-and-proven-solutions.md) From 010f1d7bd8b1d81ddabbf4801da394712ad40501 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 8 Apr 2019 13:42:48 -0700 Subject: [PATCH 125/349] added categories to intro --- .../windows-seccon-framework/TOC.md | 10 ++--- .../seccon-5-enterprise-security.md | 41 ++++++++++--------- ...indows-security-configuration-framework.md | 13 ++++-- 3 files changed, 36 insertions(+), 28 deletions(-) diff --git a/windows/security/threat-protection/windows-seccon-framework/TOC.md b/windows/security/threat-protection/windows-seccon-framework/TOC.md index 6038ad503b..8a4ce81dac 100644 --- a/windows/security/threat-protection/windows-seccon-framework/TOC.md +++ b/windows/security/threat-protection/windows-seccon-framework/TOC.md @@ -4,11 +4,11 @@ ### [Security Compliance Toolkit](security-compliance-toolkit-10.md) ### [Get support](get-support-for-security-baselines.md) ## [Windows SECCON framework](windows-security-configuration-framework.md) -### [SECCON 1 enterprise administrator security](seccon-1-enterprise-administrator-security.md) -### [SECCON 2 enterprise dev/ops security](seccon-2-enterprise-devops-security.md) -### [SECCON 3 enterprise VIP security](seccon-3-enterprise-vip-security.md) -### [SECCON 4 enterprise high security](seccon-4-enterprise-high-security.md) -### [SECCON 5 enterprise security](seccon-5-enterprise-security.md) +### [SECCON 5 Enterprise Security](seccon-5-enterprise-security.md) +### [SECCON 4 Enterprise High Security](seccon-4-enterprise-high-security.md) +### [SECCON 3 Enterprise VIP Security](seccon-3-enterprise-vip-security.md) +### [SECCON 2 Enterprise Dev/Ops Workstation](seccon-2-enterprise-devops-security.md) +### [SECCON 1 Enterprise Administrator Workstation](seccon-1-enterprise-administrator-security.md) ##Windows Security Blog Posts ### [Sticking with Well-Known and Proven Solutions](windows-security-blog/sticking-with-well-known-and-proven-solutions.md) ### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-security-blog/why-were-not-recommending-fips-mode-anymore.md) diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md index ed958a060d..dbb8dd85f1 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md @@ -25,25 +25,6 @@ ms.date: 04/05/2018 SECCON 5 is the minimum security configuration for an enterprise device. Microsoft recommends the following configuration for SECCON 5 devices. -## Behaviors - -The behaviors recommended in SECCON 5 enforce a reasonable security level while minimizing the impact to users or to applications. - -| Feature | Config | Description | -|---------|-------------------|-------------| -| OS security updates | Deploy Windows Quality Updates within 7 days of release | As the time between the release of a patch and an exploit based on the reverse engineering of that patch continues to shrink, a critical aspect of security hygiene is having an engineering process that quickly validates and deploys Quality Updates that address security vulnerabilities. | - -## Controls - -The controls enabled in SECCON 5 enforce a reasonable security level while minimizing the impact to users and applications. - -| Feature | Config | Description | -|-----------------------------------|-------------------------------------|--------------------| -| [Windows Defender ATP EDR](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/overview-endpoint-detection-response) | Deployed to all devices | The Windows Defender ATP endpoint detection and response (EDR) provides actionable and near real-time detection of advanced attacks. EDR helps security analysts , and aggregates alerts with the same attack techniques or attributed to the same attacker into an an entity called an *incident*. An incident helps analysts prioritize alerts, collectively investigate the full scope of a breach, and respond to threats. Windows Defender ATP EDR is not expected to impact users or applications, and it can be deployed to all devices in a single step. | -| [Windows Defender Credential Guard](https://docs.microsoft.com/windows/security/identity-protection/credential-guard/credential-guard) | Enabled for all compatible hardware | Windows Defender Credential Guard uses virtualization-based security to isolate secrets so that only privileged system software can access them. Unauthorized access to these secrets can lead to credential theft attacks, such as Pass-the-Hash or Pass-The-Ticket. Windows Defender Credential Guard prevents these attacks by protecting NTLM password hashes, Kerberos Ticket Granting Tickets (TGTs), and credentials stored by applications as domain credentials. There is a small risk to application compatibility, as [applications will break](https://docs.microsoft.com/windows/security/identity-protection/credential-guard/credential-guard-requirements#application-requirements) if they require NTLMv1, Kerberos DES encryption, Kerberos unconstrained delegation, or extracting the Keberos TGT. As such, Microsoft recommends deploying Credential Guard using the ring methodology. | -| [Microsoft Edge](https://docs.microsoft.com/microsoft-edge/deploy/) | Default browser | Microsoft Edge in Windows 10 provides better security than Internet Explorer 11 (IE11). While you may still need to leverage IE11 for compatibility with some sites, Microsoft recommends configuring Microsoft Edge as the default browser, and building an Enterprise Mode Site List to redirect to IE11 only for those sites that require it. Microsoft recommends leveraging either Windows Analytics or Enterprise Site Discovery to build the initial Enterprise Mode Site List, and then gradually deploying this configuration using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | -| [Windows Defender Application Guard](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-guard/wd-app-guard-overview) | Enabled on compatible hardware | Windows Defender Application Guard uses a hardware isolation approach. If an employee goes to an untrusted site through either Microsoft Edge or Internet Explorer, Microsoft Edge opens the site in an isolated container, which is separate from the host operating system and enabled by Hyper-V. If the untrusted site turns out to be malicious, the isolated container protects the host PC, and the attacker can't get to your enterprise data. There is a small risk to application compatibility, as some applications may require interaction with the host PC but may not yet be on the list of trusted web sites for Application Guard. Microsoft recommends leveraging either Windows Analytics or Enterprise Site Discovery to build the initial Network Isolation Settings, and then gradually deploying this configuration using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | - ## Policies The policies in SECCON 5 enforce a reasonable security level while minimizing the impact to users or to applications. @@ -242,4 +223,24 @@ Download and install the [Microsoft Local Admin Password Solution](https://www.m | Services | Xbox Game Monitoring | Disabled | Monitors Xbox games currently being played | | Services | Xbox Live Auth Manager | Disabled | Provides authentication and authorization services for interactive with Xbox Live | | Services | Xbox Live Game Save | Disabled | Syncs save data for Xbox live save enabled games | -| Services | Xbox Live Networking Service | Disabled | Supports the Windows.Networking.XboxLive API \ No newline at end of file +| Services | Xbox Live Networking Service | Disabled | Supports the Windows.Networking.XboxLive API | + +## Controls + +The controls enabled in SECCON 5 enforce a reasonable security level while minimizing the impact to users and applications. + +| Feature | Config | Description | +|-----------------------------------|-------------------------------------|--------------------| +| [Windows Defender ATP EDR](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/overview-endpoint-detection-response) | Deployed to all devices | The Windows Defender ATP endpoint detection and response (EDR) provides actionable and near real-time detection of advanced attacks. EDR helps security analysts , and aggregates alerts with the same attack techniques or attributed to the same attacker into an an entity called an *incident*. An incident helps analysts prioritize alerts, collectively investigate the full scope of a breach, and respond to threats. Windows Defender ATP EDR is not expected to impact users or applications, and it can be deployed to all devices in a single step. | +| [Windows Defender Credential Guard](https://docs.microsoft.com/windows/security/identity-protection/credential-guard/credential-guard) | Enabled for all compatible hardware | Windows Defender Credential Guard uses virtualization-based security to isolate secrets so that only privileged system software can access them. Unauthorized access to these secrets can lead to credential theft attacks, such as Pass-the-Hash or Pass-The-Ticket. Windows Defender Credential Guard prevents these attacks by protecting NTLM password hashes, Kerberos Ticket Granting Tickets (TGTs), and credentials stored by applications as domain credentials. There is a small risk to application compatibility, as [applications will break](https://docs.microsoft.com/windows/security/identity-protection/credential-guard/credential-guard-requirements#application-requirements) if they require NTLMv1, Kerberos DES encryption, Kerberos unconstrained delegation, or extracting the Keberos TGT. As such, Microsoft recommends deploying Credential Guard using the ring methodology. | +| [Microsoft Edge](https://docs.microsoft.com/microsoft-edge/deploy/) | Default browser | Microsoft Edge in Windows 10 provides better security than Internet Explorer 11 (IE11). While you may still need to leverage IE11 for compatibility with some sites, Microsoft recommends configuring Microsoft Edge as the default browser, and building an Enterprise Mode Site List to redirect to IE11 only for those sites that require it. Microsoft recommends leveraging either Windows Analytics or Enterprise Site Discovery to build the initial Enterprise Mode Site List, and then gradually deploying this configuration using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | +| [Windows Defender Application Guard](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-guard/wd-app-guard-overview) | Enabled on compatible hardware | Windows Defender Application Guard uses a hardware isolation approach. If an employee goes to an untrusted site through either Microsoft Edge or Internet Explorer, Microsoft Edge opens the site in an isolated container, which is separate from the host operating system and enabled by Hyper-V. If the untrusted site turns out to be malicious, the isolated container protects the host PC, and the attacker can't get to your enterprise data. There is a small risk to application compatibility, as some applications may require interaction with the host PC but may not yet be on the list of trusted web sites for Application Guard. Microsoft recommends leveraging either Windows Analytics or Enterprise Site Discovery to build the initial Network Isolation Settings, and then gradually deploying this configuration using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | + +## Behaviors + +The behaviors recommended in SECCON 5 enforce a reasonable security level while minimizing the impact to users or to applications. + +| Feature | Config | Description | +|---------|-------------------|-------------| +| OS security updates | Deploy Windows Quality Updates within 7 days of release | As the time between the release of a patch and an exploit based on the reverse engineering of that patch continues to shrink, a critical aspect of security hygiene is having an engineering process that quickly validates and deploys Quality Updates that address security vulnerabilities. | + diff --git a/windows/security/threat-protection/windows-seccon-framework/windows-security-configuration-framework.md b/windows/security/threat-protection/windows-seccon-framework/windows-security-configuration-framework.md index 06fc71b69e..c245933403 100644 --- a/windows/security/threat-protection/windows-seccon-framework/windows-security-configuration-framework.md +++ b/windows/security/threat-protection/windows-seccon-framework/windows-security-configuration-framework.md @@ -31,10 +31,17 @@ While appropriate for organizations with very high security needs such as those They can’t justify the investment in that very high level of security with an ROI. Assuch, Microsoft is introducing a new taxonomy for Security Configurations for Windows 10: The SECCON Baselines. -The SECCON Baselines organize devices into one of 5 distinct security configurations: +The SECCON Baselines organize devices into one of 5 distinct security configurations. ![SECON Framework](./../images/seccon-framework.png) +- [SECCON 5 Enterprise Security](seccon-5-enterprise-security.md) – We recommend this configuration as the minimum security configuration for an enterprise device. Recommendations for this SecCon level are generally straightforward and are designed to be deployable within 30 days. +- [SECCON 4 Enterprise High Security](seccon-4-enterprise-high-security.md) – We recommend this configuration for devices where users access sensitive or confidential information. Some of the controls may have an impact to app compat, and therefore will often go through an audit-configure-enforce workflow. Recommendations for this SecCon level are generally accessible to most organizations and are designed to be deployable within 90 days. +- [SECCON 3 Enterprise VIP Security](seccon-3-enterprise-vip-security.md) – We recommend this configuration for devices run by an organization with a larger or more sophisticated security team, or for specific users or groups who are at uniquely high risk (as one example, one organization identified users who handle data whose theft would directly and seriously impact their stock price). An organization likely to be targeted by well-funded and sophisticated adversaries should aspire to this configuration. Recommendations for this SecCon level can be complex (for example, removing local admin rights for some organizations can be a long project in and of itself) and can often go beyond 90 days. +- [SECCON 2 DevOps Workstation](seccon-2-enterprise-devops-security.md) – We recommend this configuration for developers and testers, who are an attractive target both for supply chain attacks and access to servers and systems containing high value data or where critical business functions could be disrupted. SecCon 2 guidance is coming soon! +- [SECCON 1 Administrator Workstation](seccon-1-enterprise-administrator-security.md) – Administrators (particularly of identity or security systems) present the highest risk to the organization, through data theft, data alteration, or service disruption. SecCon 1 guidance is coming soon! + + The SECCON Baselines divide configuration into Productivity Devices and Privileged Access Workstations. This document will focus on Productivity Devices (SECCON 5, 4, and 3). Microsoft’s current guidance on [Privileged Access Workstations](http://aka.ms/privsec) are part of the [Securing Privileged Access roadmap](http://aka.ms/privsec). @@ -44,7 +51,7 @@ SECCON 5 should be considered the minimum baseline for an enterprise device, and ## Security Control Classification -The recommendations are grouped into three categories: +The recommendations are grouped into three categories. ![Security Control Classifications](./../images/security-control-classification.png) @@ -52,7 +59,7 @@ The recommendations are grouped into three categories: ## Security Control Deployment Methodologies The way Microsoft recommends implementing these controls depends on the -auditability of the control–there are two primary methodologies: +auditability of the control–there are two primary methodologies. ![Security Control Deployment methodologies](./../images/security-control-deployment-methodologies.png) From 77b6f11b0b8cf3896b7331bf5f06fa7846a414f0 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 8 Apr 2019 13:46:24 -0700 Subject: [PATCH 126/349] moved policies --- .../seccon-3-enterprise-VIP-security.md | 50 ++++++++-------- .../seccon-4-enterprise-high-security.md | 60 ++++++++++--------- 2 files changed, 56 insertions(+), 54 deletions(-) diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md index 17990975e7..e3a3824c6a 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md @@ -25,31 +25,6 @@ ms.date: 04/05/2018 SECCON 3 is the security configuration recommended as a standard for organizations with large and sophisticated security organizations, or for specific users and groups who will be uniquely targeted by adversaries. Such organizations are typically targeted by well-funded and sophisticated adversaries, and as such merit the additional constraints and controls described here. A SECCON 3 configuration should include all the configurations from SECCON 5 and SECCON 4 and add the following security controls. -## Behaviors - -The behaviors recommended in SECCON 3 represent the most sophisticated security -configuration. Removing admin rights can be difficult, but it is essential to -achieve a level of security commensurate with the risks facing the most targeted -organizations. - -| Feature Set | Feature | Description | -|--------------|----------|--------------| -| Remove Admin Rights | Remove as many users as possible from the local Administrators group, targeting 0. Microsoft recommends removing admin rights role by role. Some roles are more challenging, including:
- Developers, who often install rapidly iterating software which is difficult to package using current software distribution systems
- Scientists/ Doctors, who often must install and operate specialized hardware devices
- Remote locations with slow web links, where administration is delegated
It is typically easier to address these roles later in the process.
Microsoft recommends identifying the dependencies on admin rights and systematically addressing them:
- Legitimate use of admin rights: crowdsourced admin, where a new process is needed to complete that workflow
- Illegitimate use of admin rights: app compat dependency, where app remediation is the best path. The [Desktop App Assure](https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/What-is-Desktop-App-Assure/ba-p/270232) program can assist with these app issues | Running as non-admin limits your exposure. When you are an admin, every program you run has unlimited access to your computer. If malicious code finds its way to one of those programs, it also gains unlimited access. When an exploit runs with admin privileges, its ability to compromise your system is much greater, its ability to do so without detection is much greater, and its ability to attack others on your network is greater than it would be with only User privileges. If you’re running as admin, an exploit can:
- install kernel-mode rootkits and/or keyloggers
- install and start services
- install ActiveX controls, including IE and shell add-ins
- access data belonging to other users
- cause code to run whenever anybody else logs on (including capturing passwords entered into the Ctrl-Alt-Del logon dialog)
- replace OS and other program files with trojan horses
- disable/uninstall anti-virus
- cover its tracks in the event log
- render your machine unbootable | - -## Controls - -The controls enforced in SECCON 3 implement complex security configuration and controls. -They are likely to have a higher impact to users or to applications, -enforcing a level of security commensurate with the risks facing the most targeted organizations. -Microsoft recommends using the Audit/Enforce methodology for controls with audit mode, and [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates) for those that do -not. - -| Feature Set | Feature | Description | -|--------------|----------|--------------| -| Exploit protection | Enable exploit protection | Exploit protection helps protect devices from malware that use exploits to spread and infect to other devices. It consists of several mitigations that can be applied at the individual app level. | -| Windows Defender Application Control (WDAC) *or* AppLocker | Configure devices to use application whitelisting using one of the following approaches:
- AaronLocker (admin writeable areas) when software distribution is not always centralized
*or*
- Managed installer when all software is pushed through software distribution
*or*
- Explicit control when the software on a device is static and tightly controlled | Application control is a crucial line of defense for protecting enterprises given today’s threat landscape, and it has an inherent advantage over traditional antivirus solutions. Specifically, application control moves away from the traditional application trust model where all applications are assumed trustworthy by default to one where applications must earn trust in order to run. Application Control can help mitigate these types of security threats by restricting the applications that users can run and the code that runs in the System Core (kernel). WDAC policies also block unsigned scripts and MSIs, and Windows PowerShell runs in [Constrained Language Mode](https://devblogs.microsoft.com/powershell/powershell-constrained-language-mode/). | - - ## Policies The policies enforced in SECCON 3 implement strict security configuration and controls. They can have a potentially significant impact to users or to applications, enforcing a level of security commensurate with the risks facing targeted organizations. Microsoft recommends disciplined testing and deployment using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). @@ -138,6 +113,31 @@ The policies enforced in SECCON 3 implement strict security configuration and co |----------|-----------------|--------------|--------------| | Windows Components / Internet Explorer | Turn on the auto-complete feature for user names and passwords on forms | Disabled | This AutoComplete feature can remember and suggest User names and passwords on Forms. If you disable this setting the user cannot change "User name and passwords on forms" or "prompt me to save passwords". The Auto Complete feature for User names and passwords on Forms is turned off. The user also cannot opt to be prompted to save passwords. | +## Controls + +The controls enforced in SECCON 3 implement complex security configuration and controls. +They are likely to have a higher impact to users or to applications, +enforcing a level of security commensurate with the risks facing the most targeted organizations. +Microsoft recommends using the Audit/Enforce methodology for controls with audit mode, and [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates) for those that do +not. + +| Feature Set | Feature | Description | +|--------------|----------|--------------| +| Exploit protection | Enable exploit protection | Exploit protection helps protect devices from malware that use exploits to spread and infect to other devices. It consists of several mitigations that can be applied at the individual app level. | +| Windows Defender Application Control (WDAC) *or* AppLocker | Configure devices to use application whitelisting using one of the following approaches:
- AaronLocker (admin writeable areas) when software distribution is not always centralized
*or*
- Managed installer when all software is pushed through software distribution
*or*
- Explicit control when the software on a device is static and tightly controlled | Application control is a crucial line of defense for protecting enterprises given today’s threat landscape, and it has an inherent advantage over traditional antivirus solutions. Specifically, application control moves away from the traditional application trust model where all applications are assumed trustworthy by default to one where applications must earn trust in order to run. Application Control can help mitigate these types of security threats by restricting the applications that users can run and the code that runs in the System Core (kernel). WDAC policies also block unsigned scripts and MSIs, and Windows PowerShell runs in [Constrained Language Mode](https://devblogs.microsoft.com/powershell/powershell-constrained-language-mode/). | + +## Behaviors + +The behaviors recommended in SECCON 3 represent the most sophisticated security +configuration. Removing admin rights can be difficult, but it is essential to +achieve a level of security commensurate with the risks facing the most targeted +organizations. + +| Feature Set | Feature | Description | +|--------------|----------|--------------| +| Remove Admin Rights | Remove as many users as possible from the local Administrators group, targeting 0. Microsoft recommends removing admin rights role by role. Some roles are more challenging, including:
- Developers, who often install rapidly iterating software which is difficult to package using current software distribution systems
- Scientists/ Doctors, who often must install and operate specialized hardware devices
- Remote locations with slow web links, where administration is delegated
It is typically easier to address these roles later in the process.
Microsoft recommends identifying the dependencies on admin rights and systematically addressing them:
- Legitimate use of admin rights: crowdsourced admin, where a new process is needed to complete that workflow
- Illegitimate use of admin rights: app compat dependency, where app remediation is the best path. The [Desktop App Assure](https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/What-is-Desktop-App-Assure/ba-p/270232) program can assist with these app issues | Running as non-admin limits your exposure. When you are an admin, every program you run has unlimited access to your computer. If malicious code finds its way to one of those programs, it also gains unlimited access. When an exploit runs with admin privileges, its ability to compromise your system is much greater, its ability to do so without detection is much greater, and its ability to attack others on your network is greater than it would be with only User privileges. If you’re running as admin, an exploit can:
- install kernel-mode rootkits and/or keyloggers
- install and start services
- install ActiveX controls, including IE and shell add-ins
- access data belonging to other users
- cause code to run whenever anybody else logs on (including capturing passwords entered into the Ctrl-Alt-Del logon dialog)
- replace OS and other program files with trojan horses
- disable/uninstall anti-virus
- cover its tracks in the event log
- render your machine unbootable | + + diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md index 7fe9cc64a6..deddf9b612 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md @@ -25,35 +25,6 @@ ms.date: 04/05/2018 SECCON 4 is the security configuration recommended as a standard for devices where users access more sensitive information. These devices are a natural target in enterprises today. While targeting high levels of security, these recommendations do not assume a large staff of highly skilled security practitioners, and therefore should be accessible to most Enterprise organizations. A SECCON 4 configuration should include all the configurations from SECCON 5 and add the following security controls. -## Behaviors - -The behaviors recommended in SECCON 4 implement a more sophisticated security -process. While they may require a more sophisticated organization, they enforce -a level of security more commensurate with the risks facing users with access to -sensitive information. - -| Feature Set| Feature | Description | -|------------|----------|--------------| -| Antivirus | Configure Protection Updates to failover to retrieval from Microsoft | Sources for Windows Defender Antivirus Protection Updates can be provided in an ordered list. If you are using internal distribution, such as SCCM or WSUS, configure Microsoft Update lower in the list as a failover. | -| OS Security Updates | Deploy Windows Quality Updates within 4 days | As the time between release of a patch and an exploit based on the reverse engineering of that patch continues to shrink, engineering a process that provides the ability to validate and deploy quality updates addressing known security vulnerabilities is a critical aspect of security hygiene.| -| Helpdesk| 1:1 Administration| A simple and common model for helpdesk support is to add the Helpdesk group as a permanent member of the Local Administrators group of every device. If any device is compromised and helpdesk can connect to it, then these credentials can be used to obtain privilege on any / all other devices. Design and implement a strategy to provide helpdesk support without providing 1:all admin access – constraining the value of these Helpdesk credentials | - -## Controls - -The controls enforced in SECCON 4 implement more controls and a more sophisticated security -configuration than SECCON 5. While they may have a slightly higher impact to -users or to applications, they enforce a level of security more commensurate -with the risks facing users with access to sensitive information. Microsoft -recommends using the Audit/Enforce methodology for controls with an Audit mode, -and t[the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates) for those that do not, with a moderate timeline that -is anticipated to be slightly longer than the process in SECCON 5. - -| Feature Set | Feature | Description | -|-------------------------------------------------------------|-------------------------------------------------------|----------------| -| [Exploit protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/exploit-protection-exploit-guard) | Enforce memory protection for OS-level controls:
- Control flow guard (CFG)
- Data Execution Protection (DEP)
- Mandatory ASLR
- Bottom-Up ASLR
- High-entropy ASLR
- Validate Exception Chains (SEHOP)
- Validate heap integrity | Exploit protection helps protect devices from malware that use exploits to spread and infect to other devices. It consists of several mitigations that can be applied at either the operating system level, or at the individual app level. There is a risk to application compatibility, as some applications may rely on blocked behavior (e.g. dynamically generating code without marking memory as executable). Microsoft recommends gradually deploying this configuration using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | -| [Attack Surface Reduction (ASR)](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard)| Configure and Enforce Attack Surface Reduction Rules:
- Block executable content from email client and webmail
- Block all Office applications from creating child processes
- Block Office applications from creating executable content
- Block Office applications from injecting code into other processes
- Block JavaScript or VBScript from launching downloaded executable content
- Block execution of potentially obfuscated scripts
- Block Win32 API calls from Office macro
- Block executable files from running unless they meet a prevalence, age, or trusted list criterion
- Use advanced protection against ransomware
- Block credential stealing from the Windows local security authority subsystem (lsass.exe)
- Block process creations originating from PSExec and WMI commands
- Block untrusted and unsigned processes that run from USB
- Block Office communication applications from creating child processes
- Block Adobe Reader from creating child processes
| Attack surface reduction controls help prevent actions and apps that are typically used by exploit-seeking malware to infect machines. There is a risk to application compatibility, as some applications may rely on blocked behavior (e.g. an Office application spawning a child process). Each control has an Audit mode, and as such, Microsoft recommends the Audit / Enforce Methodology (repeated here):
1) Audit – enable the controls in audit mode, and gather audit data in a centralized location
2) Review – review the audit data to assess potential impact (both positive and negative) and configure any exemptions from the security control you need to configure
3) Enforce – Deploy the configuration of any exemptions and convert the control to enforce mode | -| [Network protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/network-protection-exploit-guard) | Configure and enforce Network Protection | Network protection helps to prevent employees from using any application to access dangerous domains that may host phishing scams, exploits, and other malicious content on the Internet. It expands the scope of Windows Defender SmartScreen to block all outbound HTTP(s) traffic that attempts to connect to low-reputation sources (based on the domain or hostname). There is a risk to application compatibility, as a result of false positives in flagged sites. Microsoft recommends deploying using the Audit / Enforce Methodology. | - ## Policies The policies enforced in SECCON 4 implement more controls and a more sophisticated security @@ -208,3 +179,34 @@ than the process in SECCON 5. | MSS (Legacy) | MSS: (DisableIPSourceRouting) IP source routing protection level (Protects against packet spoofing) | Highest Protection, source routing is completely disabled | Allowing source routed network traffic allows attackers to obscure their identity and location. | | MSS (Legacy) | MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes | Disabled | Allowing ICMP redirect of routes can lead to traffic not being routed properly. When disabled, this forces ICMP to be routed via shortest path first. | | MSS (Legacy) | MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers | Enabled | Prevents a denial-of-service (DoS) attack against a WINS server. The DoS consists of sending a NetBIOS Name Release Request to the server for each entry in the server's cache, causing a response delay in the normal operation of the server's WINS resolution capability. | + +## Controls + +The controls enforced in SECCON 4 implement more controls and a more sophisticated security +configuration than SECCON 5. While they may have a slightly higher impact to +users or to applications, they enforce a level of security more commensurate +with the risks facing users with access to sensitive information. Microsoft +recommends using the Audit/Enforce methodology for controls with an Audit mode, +and [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates) for those that do not, with a moderate timeline that +is anticipated to be slightly longer than the process in SECCON 5. + +| Feature Set | Feature | Description | +|-------------------------------------------------------------|-------------------------------------------------------|----------------| +| [Exploit protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/exploit-protection-exploit-guard) | Enforce memory protection for OS-level controls:
- Control flow guard (CFG)
- Data Execution Protection (DEP)
- Mandatory ASLR
- Bottom-Up ASLR
- High-entropy ASLR
- Validate Exception Chains (SEHOP)
- Validate heap integrity | Exploit protection helps protect devices from malware that use exploits to spread and infect to other devices. It consists of several mitigations that can be applied at either the operating system level, or at the individual app level. There is a risk to application compatibility, as some applications may rely on blocked behavior (e.g. dynamically generating code without marking memory as executable). Microsoft recommends gradually deploying this configuration using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | +| [Attack Surface Reduction (ASR)](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard)| Configure and Enforce Attack Surface Reduction Rules:
- Block executable content from email client and webmail
- Block all Office applications from creating child processes
- Block Office applications from creating executable content
- Block Office applications from injecting code into other processes
- Block JavaScript or VBScript from launching downloaded executable content
- Block execution of potentially obfuscated scripts
- Block Win32 API calls from Office macro
- Block executable files from running unless they meet a prevalence, age, or trusted list criterion
- Use advanced protection against ransomware
- Block credential stealing from the Windows local security authority subsystem (lsass.exe)
- Block process creations originating from PSExec and WMI commands
- Block untrusted and unsigned processes that run from USB
- Block Office communication applications from creating child processes
- Block Adobe Reader from creating child processes
| Attack surface reduction controls help prevent actions and apps that are typically used by exploit-seeking malware to infect machines. There is a risk to application compatibility, as some applications may rely on blocked behavior (e.g. an Office application spawning a child process). Each control has an Audit mode, and as such, Microsoft recommends the Audit / Enforce Methodology (repeated here):
1) Audit – enable the controls in audit mode, and gather audit data in a centralized location
2) Review – review the audit data to assess potential impact (both positive and negative) and configure any exemptions from the security control you need to configure
3) Enforce – Deploy the configuration of any exemptions and convert the control to enforce mode | +| [Network protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/network-protection-exploit-guard) | Configure and enforce Network Protection | Network protection helps to prevent employees from using any application to access dangerous domains that may host phishing scams, exploits, and other malicious content on the Internet. It expands the scope of Windows Defender SmartScreen to block all outbound HTTP(s) traffic that attempts to connect to low-reputation sources (based on the domain or hostname). There is a risk to application compatibility, as a result of false positives in flagged sites. Microsoft recommends deploying using the Audit / Enforce Methodology. | + +## Behaviors + +The behaviors recommended in SECCON 4 implement a more sophisticated security +process. While they may require a more sophisticated organization, they enforce +a level of security more commensurate with the risks facing users with access to +sensitive information. + +| Feature Set| Feature | Description | +|------------|----------|--------------| +| Antivirus | Configure Protection Updates to failover to retrieval from Microsoft | Sources for Windows Defender Antivirus Protection Updates can be provided in an ordered list. If you are using internal distribution, such as SCCM or WSUS, configure Microsoft Update lower in the list as a failover. | +| OS Security Updates | Deploy Windows Quality Updates within 4 days | As the time between release of a patch and an exploit based on the reverse engineering of that patch continues to shrink, engineering a process that provides the ability to validate and deploy quality updates addressing known security vulnerabilities is a critical aspect of security hygiene.| +| Helpdesk| 1:1 Administration| A simple and common model for helpdesk support is to add the Helpdesk group as a permanent member of the Local Administrators group of every device. If any device is compromised and helpdesk can connect to it, then these credentials can be used to obtain privilege on any / all other devices. Design and implement a strategy to provide helpdesk support without providing 1:all admin access – constraining the value of these Helpdesk credentials | + + From 61fa2978a2bc4b3476e6528c3dbca74bb88495aa Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 8 Apr 2019 14:44:00 -0700 Subject: [PATCH 127/349] edits --- .../windows-seccon-framework/seccon-5-enterprise-security.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md index dbb8dd85f1..08dc258e1f 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md @@ -36,7 +36,7 @@ Microsoft recommends using [the rings methodology](https://docs.microsoft.com/wi |-------------------------|--------------------------------------------------------------------------------------------------|---------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Password Policy | Enforce password history | 24 | The number of unique new passwords that must be associated with a user account before an old password can be reused. | | Password Policy | Minimum password length | 14 | The least number of characters that a password for a user account may contain. | -| Password Policy | Password must meet complexity requirements | Enabled | Determines whether passwords must meet complexity requirements:
1) Not contain the user's samAccountName (Account Name) value or entire displayName (Full Name value). Neither check is case sensitive.
The samAccountName is checked in its entirety only to determine whether it is part of the password. If the samAccountName is less than three characters long, this check is skipped. The displayName is parsed for delimiters: commas, periods, dashes or hyphens, underscores, spaces, pound signs, and tabs. If any of these delimiters are found, the displayName is split and all parsed sections (tokens) are confirmed to not be included in the password. Tokens that are less than three characters are ignored, and substrings of the tokens are not checked. For example, the name "Erin M. Hagens" is split into three tokens: "Erin", "M", and "Hagens". Because the second token is only one character long, it is ignored. Therefore, this user could not have a password that included either "erin" or "hagens" as a substring anywhere in the password.
2) Contain characters from three of the following categories:
- Uppercase letters of European languages (A through Z, with diacritic marks, Greek and Cyrillic characters)
- Lowercase letters of European languages (a through z, sharp-s, with diacritic marks, Greek and Cyrillic characters)
- Base 10 digits (0 through 9)
-Non-alphanumeric characters (special characters): (~!@#$%^&*_-+=`\|\\(){}[]:;"'<>,.?/)
Currency symbols such as the Euro or British Pound are not counted as special characters for this policy setting.
- Any Unicode character that is categorized as an alphabetic character but is not uppercase or lowercase. This includes Unicode characters from Asian languages. | +| Password Policy | Password must meet complexity requirements | Enabled | Determines whether passwords must meet complexity requirements:
1) Not contain the user's samAccountName (Account Name) value or entire displayName (Full Name value). Neither check is case sensitive.
The samAccountName is checked in its entirety only to determine whether it is part of the password. If the samAccountName is less than three characters long, this check is skipped. The displayName is parsed for delimiters: commas, periods, dashes or hyphens, underscores, spaces, pound signs, and tabs. If any of these delimiters are found, the displayName is split and all parsed sections (tokens) are confirmed to not be included in the password. Tokens that are less than three characters are ignored, and substrings of the tokens are not checked. For example, the name "Erin M. Hagens" is split into three tokens: "Erin", "M", and "Hagens". Because the second token is only one character long, it is ignored. Therefore, this user could not have a password that included either "erin" or "hagens" as a substring anywhere in the password.
2) Contain characters from three of the following categories:
- Uppercase letters of European languages (A through Z, with diacritic marks, Greek and Cyrillic characters)
- Lowercase letters of European languages (a through z, sharp-s, with diacritic marks, Greek and Cyrillic characters)
- Base 10 digits (0 through 9)
-Non-alphanumeric characters (special characters):
(~!@#$%^&*_-+=`\|\\(){}[]:;"'<>,.?/)
Currency symbols such as the Euro or British Pound are not counted as special characters for this policy setting.
- Any Unicode character that is categorized as an alphabetic character but is not uppercase or lowercase. This includes Unicode characters from Asian languages. | | Password Policy | Store passwords using reversible encryption | Disabled | Determines whether the operating system stores passwords using reversible encryption. | | Security Options | Accounts: Guest account status | Disabled | Determines if the Guest account is enabled or disabled. | | Security Options | Domain member: Disable machine account password changes | Disabled | Determines whether a domain member periodically changes its computer account password. | From 023352a0281372e0c3f7d2d0fcf336180f81578b Mon Sep 17 00:00:00 2001 From: Adolfo Jayme-Barrientos Date: Mon, 8 Apr 2019 18:18:18 -0500 Subject: [PATCH 128/349] =?UTF-8?q?Fix=20typo:=20SkreenSketch=20=E2=86=92?= =?UTF-8?q?=20ScreenSketch?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Snip & Sketch’s package name is correctly spelled with a C. --- windows/application-management/apps-in-windows-10.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/application-management/apps-in-windows-10.md b/windows/application-management/apps-in-windows-10.md index 8eed696dd9..637e02d729 100644 --- a/windows/application-management/apps-in-windows-10.md +++ b/windows/application-management/apps-in-windows-10.md @@ -61,7 +61,7 @@ Here are the provisioned Windows apps in Windows 10 versions 1703, 1709, 1803 an | Microsoft.OneConnect | [Paid Wi-Fi & Cellular](ms-windows-store://pdp/?PFN=Microsoft.OneConnect_8wekyb3d8bbwe) | x | x | x | x | No | | Microsoft.People | [Microsoft People](ms-windows-store://pdp/?PFN=Microsoft.People_8wekyb3d8bbwe) | x | x | x | x | No | | Microsoft.Print3D | [Print 3D](ms-windows-store://pdp/?PFN=Microsoft.Print3D_8wekyb3d8bbwe) | | x | x | x | No | -| Microsoft.SkreenSketch | [Snip & Sketch](ms-windows-store://pdp/?PFN=Microsoft.ScreenSketch_8wekyb3d8bbwe) | | | | x | No | +| Microsoft.ScreenSketch | [Snip & Sketch](ms-windows-store://pdp/?PFN=Microsoft.ScreenSketch_8wekyb3d8bbwe) | | | | x | No | | Microsoft.SkypeApp | [Skype](ms-windows-store://pdp/?PFN=Microsoft.SkypeApp_kzf8qxf38zg5c) | x | x | x | x | No | | Microsoft.StorePurchaseApp | [Store Purchase App](ms-windows-store://pdp/?PFN=Microsoft.StorePurchaseApp_8wekyb3d8bbwe) | x | x | x | x | No | | Microsoft.VP9VideoExtensions | | | | | x | No | @@ -181,4 +181,4 @@ Here are the typical installed Windows apps in Windows 10 versions 1709, 1803, a | | Microsoft.VCLibs.140.00 | x | x | x | Yes | | | Microsoft.VCLibs.120.00.Universal | x | | | Yes | | | Microsoft.VCLibs.140.00.UWPDesktop | | x | | Yes | ---- \ No newline at end of file +--- From 2ca45f7a91e0a6b40f157d02265af68c99db6746 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 8 Apr 2019 16:28:09 -0700 Subject: [PATCH 129/349] renamed files --- windows/security/threat-protection/TOC.md | 30 +-- ...con-1-enterprise-administrator-security.md | 4 +- .../seccon-5-enterprise-security.md | 4 +- ...indows-security-configuration-framework.md | 4 +- .../TOC.md | 0 .../get-support-for-security-baselines.md | 0 ...vel-1-enterprise-administrator-security.md | 27 ++ .../level-2-enterprise-devops-security.md} | 4 +- .../level-3-enterprise-VIP-security.md} | 0 .../level-4-enterprise-high-security.md} | 2 - .../level-5-enterprise-security.md | 244 ++++++++++++++++++ .../security-compliance-toolkit-10.md | 0 .../windows-security-baselines.md | 0 .../blocking-remote-use-of-local-accounts.md | 0 .../configuring-account-lockout.md | 0 ...ing-the-untrusted-font-blocking-setting.md | 0 ...ng-with-well-known-and-proven-solutions.md | 0 ...were-not-recommending-fips-mode-anymore.md | 0 .../windows-security-compliance.md | 0 ...indows-security-configuration-framework.md | 66 +++++ 20 files changed, 356 insertions(+), 29 deletions(-) rename windows/security/threat-protection/{windows-seccon-framework => windows-security-configuration-framework}/TOC.md (100%) rename windows/security/threat-protection/{windows-seccon-framework => windows-security-configuration-framework}/get-support-for-security-baselines.md (100%) create mode 100644 windows/security/threat-protection/windows-security-configuration-framework/level-1-enterprise-administrator-security.md rename windows/security/threat-protection/{windows-seccon-framework/seccon-2-enterprise-devops-security.md => windows-security-configuration-framework/level-2-enterprise-devops-security.md} (88%) rename windows/security/threat-protection/{windows-seccon-framework/seccon-3-enterprise-VIP-security.md => windows-security-configuration-framework/level-3-enterprise-VIP-security.md} (100%) rename windows/security/threat-protection/{windows-seccon-framework/seccon-4-enterprise-high-security.md => windows-security-configuration-framework/level-4-enterprise-high-security.md} (99%) create mode 100644 windows/security/threat-protection/windows-security-configuration-framework/level-5-enterprise-security.md rename windows/security/threat-protection/{windows-seccon-framework => windows-security-configuration-framework}/security-compliance-toolkit-10.md (100%) rename windows/security/threat-protection/{windows-seccon-framework => windows-security-configuration-framework}/windows-security-baselines.md (100%) rename windows/security/threat-protection/{windows-seccon-framework => windows-security-configuration-framework}/windows-security-blog/blocking-remote-use-of-local-accounts.md (100%) rename windows/security/threat-protection/{windows-seccon-framework => windows-security-configuration-framework}/windows-security-blog/configuring-account-lockout.md (100%) rename windows/security/threat-protection/{windows-seccon-framework => windows-security-configuration-framework}/windows-security-blog/dropping-the-untrusted-font-blocking-setting.md (100%) rename windows/security/threat-protection/{windows-seccon-framework => windows-security-configuration-framework}/windows-security-blog/sticking-with-well-known-and-proven-solutions.md (100%) rename windows/security/threat-protection/{windows-seccon-framework => windows-security-configuration-framework}/windows-security-blog/why-were-not-recommending-fips-mode-anymore.md (100%) rename windows/security/threat-protection/{windows-seccon-framework => windows-security-configuration-framework}/windows-security-compliance.md (100%) create mode 100644 windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 1cf0d92355..2fe57b0501 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -1019,22 +1019,22 @@ ###### [Take ownership of files or other objects](security-policy-settings/take-ownership-of-files-or-other-objects.md) -### [Windows security compliance](windows-seccon-framework/windows-security-compliance.md) -#### [Windows security baselines](windows-seccon-framework/windows-security-baselines.md) -##### [Security Compliance Toolkit](windows-seccon-framework/security-compliance-toolkit-10.md) -##### [Get support](windows-seccon-framework/get-support-for-security-baselines.md) -#### [Windows SECCON framework](windows-seccon-framework/windows-security-configuration-framework.md) -##### [SECCON 1 enterprise administrator security](windows-seccon-framework/seccon-5-enterprise-administrator-security.md) -##### [SECCON 2 enterprise dev/ops security](windows-seccon-framework/seccon-5-enterprise-devops-security.md) -##### [SECCON 3 enterprise VIP security](windows-seccon-framework/seccon-3-vip-enterprise-security.md) -##### [SECCON 4 enterprise high security](windows-seccon-framework/seccon-4-high-enterprise-security.md) -##### [SECCON 5 enterprise security](windows-seccon-framework/seccon-5-enterprise-security.md) +### [Windows security compliance](windows-security-congiguration-framework/windows-security-compliance.md) +#### [Windows security baselines](windows-security-congiguration-framework/windows-security-baselines.md) +##### [Security Compliance Toolkit](windows-security-congiguration-framework/security-compliance-toolkit-10.md) +##### [Get support](windows-security-congiguration-framework/get-support-for-security-baselines.md) +#### [Windows SECCON framework](windows-security-congiguration-framework/windows-security-configuration-framework.md) +##### [SECCON 1 enterprise administrator security](windows-security-congiguration-framework/level-1-enterprise-administrator-security.md) +##### [SECCON 2 enterprise dev/ops security](windows-security-congiguration-framework/level-2-enterprise-devops-security.md) +##### [SECCON 3 enterprise VIP security](windows-security-congiguration-framework/level-3-vip-enterprise-security.md) +##### [SECCON 4 enterprise high security](windows-security-congiguration-framework/level-4-high-enterprise-security.md) +##### [SECCON 5 enterprise security](windows-security-congiguration-framework/level-5-enterprise-security.md) ####Windows Security Blog Posts -##### [Sticking with Well-Known and Proven Solutions](windows-seccon-framework/windows-security-blog/sticking-with-well-known-and-proven-solutions.md) -##### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-seccon-framework/windows-security-blog/why-were-not-recommending-fips-mode-anymore.md) -##### [Configuring Account Lockout](windows-seccon-framework/windows-security-blog/configuring-account-lockout.md) -##### [Blocking Remote Use of Local Accounts](windows-seccon-framework/windows-security-blog/blocking-remote-use-of-local-accounts.md) -##### [Dropping the “Untrusted Font Blocking” setting](windows-seccon-framework/windows-security-blog/dropping-the-untrusted-font-blocking-setting.md) +##### [Sticking with Well-Known and Proven Solutions](windows-security-congiguration-framework/windows-security-blog/sticking-with-well-known-and-proven-solutions.md) +##### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-security-congiguration-framework/windows-security-blog/why-were-not-recommending-fips-mode-anymore.md) +##### [Configuring Account Lockout](windows-security-congiguration-framework/windows-security-blog/configuring-account-lockout.md) +##### [Blocking Remote Use of Local Accounts](windows-security-congiguration-framework/windows-security-blog/blocking-remote-use-of-local-accounts.md) +##### [Dropping the “Untrusted Font Blocking” setting](windows-security-congiguration-framework/windows-security-blog/dropping-the-untrusted-font-blocking-setting.md) ### [MBSA removal and alternatives](mbsa-removal-and-guidance.md) diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-1-enterprise-administrator-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-1-enterprise-administrator-security.md index 115f7495b7..bf1890abdf 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-1-enterprise-administrator-security.md +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-1-enterprise-administrator-security.md @@ -14,13 +14,11 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# SECCON 1 security configuration for enterprise administrators +# Level 1 security configuration for enterprise administrators **Applies to** - Windows 10 -- Windows Server 2016 -- Office 2016 Administrators (particularly of identity or security systems) present the highest risk to the organization−through data theft, data alteration, or service disruption. diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md index 08dc258e1f..a29c50f1fc 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md +++ b/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md @@ -14,13 +14,11 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# SECCON 5 security configuration for enterprise security +# Level 5 security configuration for enterprise security **Applies to** - Windows 10 -- Windows Server 2016 -- Office 2016 SECCON 5 is the minimum security configuration for an enterprise device. Microsoft recommends the following configuration for SECCON 5 devices. diff --git a/windows/security/threat-protection/windows-seccon-framework/windows-security-configuration-framework.md b/windows/security/threat-protection/windows-seccon-framework/windows-security-configuration-framework.md index c245933403..5ec7880a83 100644 --- a/windows/security/threat-protection/windows-seccon-framework/windows-security-configuration-framework.md +++ b/windows/security/threat-protection/windows-seccon-framework/windows-security-configuration-framework.md @@ -14,13 +14,11 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# Introducing the SECCON Framework +# Introducing the Security Configuration Framework **Applies to** - Windows 10 -- Windows Server 2016 -- Office 2016 Security configuration is complex. With thousands of group policies available in Windows, choosing the “best” setting is difficult. It’s not always obvious which permutations of policies are required to implement a complete scenario, and there are often unintended consequences of some security lockdowns. diff --git a/windows/security/threat-protection/windows-seccon-framework/TOC.md b/windows/security/threat-protection/windows-security-configuration-framework/TOC.md similarity index 100% rename from windows/security/threat-protection/windows-seccon-framework/TOC.md rename to windows/security/threat-protection/windows-security-configuration-framework/TOC.md diff --git a/windows/security/threat-protection/windows-seccon-framework/get-support-for-security-baselines.md b/windows/security/threat-protection/windows-security-configuration-framework/get-support-for-security-baselines.md similarity index 100% rename from windows/security/threat-protection/windows-seccon-framework/get-support-for-security-baselines.md rename to windows/security/threat-protection/windows-security-configuration-framework/get-support-for-security-baselines.md diff --git a/windows/security/threat-protection/windows-security-configuration-framework/level-1-enterprise-administrator-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-1-enterprise-administrator-security.md new file mode 100644 index 0000000000..a5b9862f6b --- /dev/null +++ b/windows/security/threat-protection/windows-security-configuration-framework/level-1-enterprise-administrator-security.md @@ -0,0 +1,27 @@ +--- +title: SECCON 1 enterprise administrator security +description: This article, and the articles it links to, describe how to use the Windows SECCON framework in your organization +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# SECCON 1 security configuration for enterprise administrators + +**Applies to** + +- Windows 10 + + +Administrators (particularly of identity or security systems) present the highest risk to the organization−through data theft, data alteration, or service disruption. +SECCON 1 guidance to help protect devices used by administrators is coming soon! + + diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-2-enterprise-devops-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-2-enterprise-devops-security.md similarity index 88% rename from windows/security/threat-protection/windows-seccon-framework/seccon-2-enterprise-devops-security.md rename to windows/security/threat-protection/windows-security-configuration-framework/level-2-enterprise-devops-security.md index 276b177186..ee6a1d66b4 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-2-enterprise-devops-security.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/level-2-enterprise-devops-security.md @@ -14,13 +14,11 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# SECCON 2 security configuration for enterprise dev/ops +# Level 2 security configuration for enterprise dev/ops **Applies to** - Windows 10 -- Windows Server 2016 -- Office 2016 We recommend this configuration for developers and testers, who are an attractive target both for supply chain attacks and access to servers and systems containing high value data or where critical business functions could be disrupted. SecCon 2 guidance is coming soon! diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-3-enterprise-VIP-security.md similarity index 100% rename from windows/security/threat-protection/windows-seccon-framework/seccon-3-enterprise-VIP-security.md rename to windows/security/threat-protection/windows-security-configuration-framework/level-3-enterprise-VIP-security.md diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-4-enterprise-high-security.md similarity index 99% rename from windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md rename to windows/security/threat-protection/windows-security-configuration-framework/level-4-enterprise-high-security.md index deddf9b612..51aac3468c 100644 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-4-enterprise-high-security.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/level-4-enterprise-high-security.md @@ -19,8 +19,6 @@ ms.date: 04/05/2018 **Applies to** - Windows 10 -- Windows Server 2016 -- Office 2016 SECCON 4 is the security configuration recommended as a standard for devices where users access more sensitive information. These devices are a natural target in enterprises today. While targeting high levels of security, these recommendations do not assume a large staff of highly skilled security practitioners, and therefore should be accessible to most Enterprise organizations. A SECCON 4 configuration should include all the configurations from SECCON 5 and add the following security controls. diff --git a/windows/security/threat-protection/windows-security-configuration-framework/level-5-enterprise-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-5-enterprise-security.md new file mode 100644 index 0000000000..7e92159bd8 --- /dev/null +++ b/windows/security/threat-protection/windows-security-configuration-framework/level-5-enterprise-security.md @@ -0,0 +1,244 @@ +--- +title: SECCON 5 Enterprise Security +description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# SECCON 5 security configuration for enterprise security + +**Applies to** + +- Windows 10 + +SECCON 5 is the minimum security configuration for an enterprise device. +Microsoft recommends the following configuration for SECCON 5 devices. + +## Policies + +The policies in SECCON 5 enforce a reasonable security level while minimizing the impact to users or to applications. +Microsoft recommends using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates) for these security configurations and controls, noting that the timeline can generally be short given the limited potential impact of the security controls. + +### Security Template Policies + +| Feature | Policy Setting | Policy Value | Description | +|-------------------------|--------------------------------------------------------------------------------------------------|---------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Password Policy | Enforce password history | 24 | The number of unique new passwords that must be associated with a user account before an old password can be reused. | +| Password Policy | Minimum password length | 14 | The least number of characters that a password for a user account may contain. | +| Password Policy | Password must meet complexity requirements | Enabled | Determines whether passwords must meet complexity requirements:
1) Not contain the user's samAccountName (Account Name) value or entire displayName (Full Name value). Neither check is case sensitive.
The samAccountName is checked in its entirety only to determine whether it is part of the password. If the samAccountName is less than three characters long, this check is skipped. The displayName is parsed for delimiters: commas, periods, dashes or hyphens, underscores, spaces, pound signs, and tabs. If any of these delimiters are found, the displayName is split and all parsed sections (tokens) are confirmed to not be included in the password. Tokens that are less than three characters are ignored, and substrings of the tokens are not checked. For example, the name "Erin M. Hagens" is split into three tokens: "Erin", "M", and "Hagens". Because the second token is only one character long, it is ignored. Therefore, this user could not have a password that included either "erin" or "hagens" as a substring anywhere in the password.
2) Contain characters from three of the following categories:
- Uppercase letters of European languages (A through Z, with diacritic marks, Greek and Cyrillic characters)
- Lowercase letters of European languages (a through z, sharp-s, with diacritic marks, Greek and Cyrillic characters)
- Base 10 digits (0 through 9)
-Non-alphanumeric characters (special characters):
(~!@#$%^&*_-+=`\|\\(){}[]:;"'<>,.?/)
Currency symbols such as the Euro or British Pound are not counted as special characters for this policy setting.
- Any Unicode character that is categorized as an alphabetic character but is not uppercase or lowercase. This includes Unicode characters from Asian languages. | +| Password Policy | Store passwords using reversible encryption | Disabled | Determines whether the operating system stores passwords using reversible encryption. | +| Security Options | Accounts: Guest account status | Disabled | Determines if the Guest account is enabled or disabled. | +| Security Options | Domain member: Disable machine account password changes | Disabled | Determines whether a domain member periodically changes its computer account password. | +| Security Options | Domain member: Maximum machine account password age | 30 | Determines how often a domain member will attempt to change its computer account password | +| Security Options | Domain member: require strong (Windows 2000 or later) session key | Enabled | Determines whether 128-bit key strength is required for encrypted secure channel data | +| Security Options | Interactive logon: Machine inactivity limit | 900 | The number of seconds of inactivity before the session is locked | +| Security Options | User Account Control: Admin approval mode for the built-in administrator | Enabled | The built-in Administrator account uses Admin Approval Mode - any operation that requires elevation of privilege will prompt to user to approve that operation | +| Security Options | User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode | Prompt for consent on the secure desktop | When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a privileged user name and password. If the user enters valid credentials, the operation continues with the user's highest available privilege. | +| Security Options | User Account Control: Detect application installations and prompt for elevation | Enabled | When an application installation package is detected that requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. | +| Security Options | User Account Control: Run all Administrators in admin approval mode | Enabled | This policy must be enabled, and related UAC policy settings must also be set appropriately to allow the built-in Administrator account and all other users who are members of the Administrators group to run in Admin Approval Mode. | +| Security Options | User Account Control: Virtualize file and registry write failures to per-user locations | Enabled | This policy setting controls whether application write failures are redirected to defined registry and file system locations. This policy setting mitigates applications that run as administrator and write run-time application data to %ProgramFiles%, %Windir%, %Windir%\\system32, or HKLM\\Software. | +| User Rights Assignments | Access Credential Manager as a trusted caller | No One (blank) | This setting is used by Credential Manager during Backup/Restore. No accounts should have this privilege, as it is only assigned to Winlogon. Users saved credentials might be compromised if this privilege is given to other entities. | +| User Rights Assignments | Act as part of the operating system | No One (blank) | This user right allows a process to impersonate any user without authentication. The process can therefore gain access to the same local resources as that user. | +| User Rights Assignments | Allow log on locally | Administrators; Users | Determines which users can log on to the computer | +| User Rights Assignments | Back up files and directories | Administrators | Determines which users can bypass file and directory, registry, and other persistent object permissions for the purposes of backing up the system | +| User Rights Assignments | Create a pagefile | Administrators | Determines which users and groups can call an internal application programming interface (API) to create and change the size of a page file | +| User Rights Assignments | Create a token object | No One (blank) | Determines which accounts can be used by processes to create a token that can then be used to get access to any local resources when the process uses an internal application programming interface (API) to create an access token. | +| User Rights Assignments | Create global objects | Administrators; LOCAL SERVICE; NETWORK SERVICE; SERVICE | This security setting determines whether users can create global objects that are available to all sessions. | +| User Rights Assignments | Create permanent shared objects | No One (blank) | Determines which accounts can be used by processes to create a directory object using the object manager | +| User Rights Assignments | Create symbolic links | Administrators | Determines if the user can create a symbolic link from the computer he is logged on to | +| User Rights Assignments | Debug programs | Administrators | Determines which users can attach a debugger to any process or to the kernel. Developers who are debugging their own applications do not need to be assigned this user right. Developers who are debugging new system components will need this user right to be able to do so. This user right provides complete access to sensitive and critical operating system components. | +| User Rights Assignments | Deny access to this computer from the network | Guests; NT AUTHORITY\\Local Account | Determines which users are prevented from accessing a computer over the network. This policy setting supersedes the Access this computer from the network policy setting if a user account is subject to both policies. | +| User Rights Assignments | Deny log on locally | Guests | Determines which users are prevented from logging on at the computer. This policy setting supersedes the Allow log on locally policy setting if an account is subject to both policies. | +| User Rights Assignments | Deny log on through Remote Desktop Services | Guests; NT AUTHORITY\\Local Account | Determines which users and groups are prohibited from logging on as a Remote Desktop Services client | +| User Rights Assignments | Force shutdown from a remote system | Administrators | Determines which users can shut down a computer from a remote location on the network. Misuse of this user right can result in a denial of service. | +| User Rights Assignments | Increase scheduling priority | Administrators | Determines which accounts can use a process with Write Property access to another process to increase the execution priority assigned to the other process. A user with this privilege can change the scheduling priority of a process through the Task Manager user interface. | +| User Rights Assignments | Load and unload device drivers | Administrators | Determines which users can dynamically load and unload device drivers or other code in to kernel mode. This user right does not apply to Plug and Play device drivers. | +| User Rights Assignments | Manage auditing and security log | Administrators | Determines which users can specify object access auditing options for individual resources, such as files, Active Directory objects, and registry keys. | +| User Rights Assignments | Modify firmware environment variables | Administrators | Determines who can modify firmware environment values. Firmware environment variables are settings stored in the nonvolatile RAM of non-x86-based computers. The effect of the setting depends on the processor. | +| User Rights Assignments | Restore files and directories | Administrators | Determines which users can bypass file, directory, registry, and other persistent objects permissions when restoring backed up files and directories, and determines which users can set any valid security principal as the owner of an object | +| User Rights Assignments | Take ownership of files or other objects | Administrators | Determines which users can take ownership of any securable object in the system, including Active Directory objects, files and folders, printers, registry keys, processes, and threads | + +### Advanced Audit Policies + +| Feature | Policy Setting | Policy Value | Description | +|--------------------|---------------------------------------|---------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Account Logon | Audit Credential Validation | Success and Failure | Audit events generated by validation tests on user account logon credentials. Occurs only on the computer that is authoritative for those credentials. | +| Account Management | Audit Security Group Management | Success | Audit events generated by changes to security groups, such as creating, changing or deleting security groups, adding or removing members, or changing group type. | +| Account Management | Audit User Account Management | Success and Failure | Audit changes to user accounts. Events include creating, changing, deleting user accounts; renaming, disabling, enabling, locking out, or unlocking accounts; setting or changing a user account’s password; adding a security identifier (SID) to the SID History of a user account; configuring the Directory Services Restore Mode password; changing permissions on administrative user accounts; backing up or restoring Credential Manager credentials | +| Detailed Tracking | Audit PNP Activity | Success | Audit when plug and play detects an external device | +| Detailed Tracking | Audit Process Creation | Success | Audit events generated when a process is created or starts; the name of the application or user that created the process is also audited | +| Logon/ Logoff | Audit Account Lockout | Failure | Audit events generated by a failed attempt to log on to an account that is locked out | +| Logon/ Logoff | Audit Group Membership | Success | Audit the group membership information in the user's logon token. Events in this subcategory are generated on the computer on which a logon session is created. For an interactive logon, the security audit event is generated on the computer that the user logged on to. For a network logon, such as accessing a shared folder on the network, the security audit event is generated on the computer hosting the resource. | +| Logon/ Logoff | Audit Logon | Success and Failure | Audit events generated by user account logon attempts on the computer | +| Logon/ Logoff | Audit Other Logon / Logoff Events | Success and Failure | Audit other logon/logoff-related events that are not covered in the “Logon/Logoff” policy setting, such as Terminal Services session disconnections, new Terminal Services sessions locking and unlocking a workstation, invoking or dismissing a screen saver, detection of a Kerberos replay attack, or access to a wireless network granted to a user or computer account | +| Logon/ Logoff | Audit Special Logon | Success | Audit events generated by special logons such as the use of a special logon, which is a logon that has administrator-equivalent privileges and can be used to elevate a process to a higher level, or a logon by a member of a Special Group (Special Groups enable you to audit events generated when a member of a certain group has logged on to your network) | +| Object Access | Audit Detailed File Share | Failure | Audit attempts to access files and folders on a shared folder; the Detailed File Share setting logs an event every time a file or folder is accessed | +| Object Access | Audit File Share | Success and Failure | Audit attempts to access a shared folder; an audit event is generated when an attempt is made to access a shared folder | +| Object Access | Audit Other Object Access Events | Success and Failure | Audit events generated by the management of task scheduler jobs or COM+ objects | +| Object Access | Audit Removable Storage | Success and Failure | Audit user attempts to access file system objects on a removable storage device. A security audit event is generated only for all objects for all types of access requested. | +| Policy Change | Audit Audit Policy Change | Success | Audit changes in the security audit policy settings | +| Policy Change | Audit Authentication Policy Change | Success | Audit events generated by changes to the authentication policy | +| Policy Change | Audit MPSSVC Rule-Level Policy Change | Success and Failure | Audit events generated by changes in policy rules used by the Microsoft Protection Service (MPSSVC). This service is used by Windows Firewall. | +| Policy Change | Audit Other Policy Change Events | Failure | Audit events generated by other security policy changes that are not audited in the policy change category, such as Trusted Platform Module (TPM) configuration changes, kernel-mode cryptographic self tests, cryptographic provider operations, cryptographic context operations or modifications, applied Central Access Policies (CAPs) changes, or boot Configuration Data (BCD) modifications | +| Privilege Use | Audit Sensitive Privilege Use | Success and Failure | Audit events generated when sensitive privileges (user rights) are used | +| System | Audit Other System Events | Success and Failure | Audit any of the following events: Startup and shutdown of the Windows Firewall service and driver, security policy processing by the Windows Firewall Service, cryptography key file and migration operations. | +| System | Audit Security State Change | Success | Audit events generated by changes in the security state of the computer such as startup and shutdown of the computer, change of system time, recovering the system from CrashOnAuditFail, which is logged after a system restarts when the security event log is full and the CrashOnAuditFail registry entry is configured. | +| System | Audit Security System Extension | Success | Audit events related to security system extensions or services | +| System | Audit System Integrity | Success and Failure | Audit events that violate the integrity of the security subsystem | + +### Windows Defender Firewall Policies + +| Feature | Policy Setting | Policy Value | Description | +|----------------------------|---------------------------------------|--------------|-------------------------------------------------------------------------------------------------------------------------------------------| +| Domain Profile / Logging | Log dropped packets | Yes | Enables logging of dropped packets for a domain connection | +| Domain Profile / Logging | Log successful connections | Yes | Enables logging of successful connections for a domain connection | +| Domain Profile / Logging | Size Limit | 16384 | Sets the firewall log file size for a domain connection | +| Domain Profile / Settings | Display a notification | No | The display of notifications to the user is enabled when a program is blocked from receiving an inbound connection in the domain profile | +| Domain Profile / State | Firewall State | On | Enables the firewall when connected to the domain profile | +| Domain Profile / State | Inbound Connections | Block | Unsolicited inbound connections for which there is no rule allowing the connection will be blocked in the domain profile | +| Private Profile / Logging | Log dropped packets | Yes | Enables logging of dropped packets for a private connection | +| Private Profile / Logging | Log successful connections | Yes | Enables logging of successful connections for a private connection | +| Private Profile / Logging | Size limit | 16384 | Sets the firewall log file size for a private connection | +| Private Profile / Settings | Display a notification | No | The display of notifications to the user is enabled when a program is blocked from receiving an inbound connection in the private profile | +| Private Profile / State | Firewall state | On | Enables the firewall when connected to the private profile | +| Private Profile / State | Inbound connections | Block | Unsolicited inbound connections for which there is no rule allowing the connection will be blocked in the private profile | +| Public Profile / Logging | Log dropped packets | Yes | Enables logging of dropped packets for a public connection | +| Public Profile / Logging | Log successful connections | Yes | Enables logging of successful connections for a public connection | +| Public Profile / Logging | Size Limit | 16384 | Sets the firewall log file size for a public connection | +| Public Profile / Settings | Apply local connection security rules | No | Ensures local connection rules will not be merged with Group Policy settings in the domain | +| Public Profile / Settings | Apply local firewall rules | No | Users cannot create new firewall rules | +| Public Profile / Settings | Display a notification | No | The display of notifications to the user is enabled when a program is blocked from receiving an inbound connection in the public profile | +| Public Profile / State | Firewall state | On | Enables the firewall when connected to the public profile | +| Public Profile / State | Inbound connections | Block | Unsolicited inbound connections for which there is no rule allowing the connection will be blocked in the public profile | + +### Computer Policies + +| Feature | Policy Setting | Policy Value | Description | +|---------------------------------------------------------------------------|------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Network / Lanman Workstation | Enable insecure guest logons | Disabled | Determines if the SMB client will allow insecure guest logons to an SMB server | +| System / Device Guard | Turn on Virtualization Based Security | Enabled: SecureBoot and DMA Protection | Specifies whether Virtualization Based Security is enabled. Virtualization Based Security uses the Windows Hypervisor to provide support for security services. Virtualization Based Security requires Secure Boot and can optionally be enabled with the use of DMA Protections. DMA protections require hardware support and will only be enabled on correctly configured devices. | +| System / Early Launch Antimalware | Boot-Start Driver Initialization Policy | Enabled: Good, Unknown and bad but critical | Allows you to specify which boot-start drivers are initialized based on a classification determined by an Early Launch Antimalware boot-start driver. | +| System / Power Management / Sleep Settings | Require a password when a computer wakes (on battery) | Enabled | Specifies whether the user is prompted for a password when the system resumes from sleep | +| System / Power Management / Sleep Settings | Require a password when a computer wakes (plugged in) | Enabled | Specifies whether the user is prompted for a password when the system resumes from sleep | +| System / Remote Procedure Call | Restrict Unauthenticated RPC clients | Enabled: Authenticated | Controls how the RPC server runtime handles unauthenticated RPC clients connecting to RPC servers. | +| Windows Components / App runtime | Allow Microsoft accounts to be optional | Enabled | Lets you control whether Microsoft accounts are optional for Windows Store apps that require an account to sign in. This policy only affects Windows Store apps that support it. | +| Windows Components / AutoPlay Policies | Disallow Autoplay for non-volume devices | Enabled | Disallows AutoPlay for MTP devices like cameras or phones. | +| Windows Components / AutoPlay Policies | Set the default behavior for AutoRun | Enabled: Do not execute any autorun commands | Sets the default behavior for Autorun commands. | +| Windows Components / AutoPlay Policies | Turn off Autoplay | Enabled: All Drives | Allows you to turn off the Autoplay feature. | +| Windows Components / Biometrics / Facial Features | Configure enhanced anti-spoofing | Enabled | Determines whether enhanced anti-spoofing is required for Windows Hello face authentication | +| Windows Components / BitLocker Drive Encryption | Choose drive encryption method and cipher strength (Windows 10) | Enabled: XTA-AES-256 for operating system drives and fixed drives and AES-CBC-256 for removable drives | Allows you to configure the algorithm and cipher strength used by BitLocker Drive Encryption. This policy setting is applied when you turn on BitLocker. | +| Windows Components / BitLocker Drive Encryption | Disable new DMA devices when this computer is locked | Enabled | Allows you to block direct memory access (DMA) for all Thunderbolt hot pluggable PCI downstream ports until a user logs into Windows | +| Windows Components / BitLocker Drive Encryption / Operating System Drives | Allow enhanced PINs for startup | Enabled | Allows you to configure whether enhanced startup PINs are used with BitLocker | +| Windows Components / BitLocker Drive Encryption / Operating System Drives | Allow Secure Boot for integrity validation | Enabled | Allows you to configure whether Secure Boot will be allowed as the platform integrity provider for BitLocker operating system drives. | +| Windows Components / Event Log Service / Application | Specify the maximum log file size (KB) | Enabled: 32768 | Specifies the maximum size of the log file in kilobytes. | +| Windows Components / Event Log Service / Security | Specify the maximum log file size (KB) | Enabled: 196608 | Specifies the maximum size of the log file in kilobytes. | +| Windows Components / Event Log Service / System | Specify the maximum log file size (KB) | Enabled: 32768 | Specifies the maximum size of the log file in kilobytes. | +| Windows Components / Microsoft Edge | Configure Windows Defender SmartScreen | Enabled | Configure whether to turn on Windows Defender SmartScreen to provide warning messages to help protect your employees from potential phishing scams and malicious software | +| Windows Components / Windows Defender SmartScreen / Explorer | Configure Windows Defender SmartScreen | Warn and prevent bypass | Allows you to turn Windows Defender SmartScreen on or off | +| Windows Components / Microsoft Edge | Prevent bypassing Windows Defender SmartScreen prompts for files | Enabled | This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about downloading unverified files. | +| Windows Components / Windows Defender SmartScreen / Microsoft Edge | Prevent bypassing Windows Defender SmartScreen prompts for sites | Enabled | Lets you decide whether employees can override the Windows Defender SmartScreen warnings about potentially malicious websites | +| Windows Components / Windows Installer | Allow user control over installs | Disabled | Permits users to change installation options that typically are available only to system administrators | +| Windows Components / Windows Installer | Always install with elevated privileges | Disabled | Directs Windows Installer to use elevated permissions when it installs any program on the system | +| Windows Components / Windows Logon Options | Sign-in last interactive user automatically after a system-initiated restart | Disabled | Controls whether a device will automatically sign-in the last interactive user after Windows Update restarts the system | +| Windows Components / Windows Remote Management (WinRM) / WinRM Client | Allow unencrypted traffic | Disabled | Manage whether the Windows Remote Management (WinRM) client sends and receives unencrypted messages over the network | +| Windows Components / Windows Remote Management (WinRM) / WinRM Service | Allow unencrypted traffic | Disabled | Manage whether the Windows Remote Management (WinRM) service sends and receives unencrypted messages over the network. | + +### Windows Defender Antivirus Policies + +| Feature | Policy Setting | Policy Value | Description | +|------------------------------------------------------------------------|-----------------------------------------------------------|----------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Windows Components / Windows Defender Antivirus | Turn off Windows Defender Antivirus | Disabled | Turns off Windows Defender Antivirus | +| Windows Components / Windows Defender Antivirus | Configure detection for potentially unwanted applications | Enabled: Audit | Enable or disable detection for potentially unwanted applications. You can choose to block, audit, or allow when potentially unwanted software is being downloaded or attempts to install itself on your computer. | +| Windows Components / Windows Defender Antivirus / MAPS | Join Microsoft MAPS | Enabled: Advanced MAPS | Allows you to join Microsoft MAPS. Microsoft MAPS is the online community that helps you choose how to respond to potential threats. The community also helps stop the spread of new malicious software infections. | +| Windows Components / Windows Defender Antivirus / MAPS | Send file samples when further analysis is required | Enabled: Send safe samples | Configures behavior of samples submission when opt-in for MAPS telemetry is set | +| Windows Components / Windows Defender Antivirus / Real-time Protection | Turn off real-time protection | Disabled | Turns off real-time protection prompts for known malware detection | +| Windows Components / Windows Defender Antivirus / Real-time Protection | Turn on behavior monitoring | Enabled | Allows you to configure behavior monitoring. | +| Windows Components / Windows Defender Antivirus / Scan | Scan removable drives | Enabled | Allows you to manage whether to scan for malicious software and unwanted software in the contents of removable drives, such as USB flash drives, when running a full scan. | +| Windows Components / Windows Defender Antivirus / Scan | Specify the interval to run quick scans per day | 24 | Allows you to specify an interval at which to perform a quick scan. The time value is represented as the number of hours between quick scans. Valid values range from 1 (every hour) to 24 (once per day). | +| Windows Components / Windows Defender Antivirus / Scan | Turn on e-mail scanning | Enabled | Allows you to configure e-mail scanning. When e-mail scanning is enabled, the engine will parse the mailbox and mail files, according to their specific format, in order to analyze the mail bodies and attachments | + +### User Policies + +| Feature | Policy Setting | Policy Value | Description | +|----------------------------------------|-------------------------------------------------------------|--------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Start Menu and Taskbar / Notifications | Turn off toast notifications on the lock screen | Enabled | Turns off toast notifications on the lock screen. | +| Windows Components / Cloud Content | Do not suggest third-party content in the Windows spotlight | Enabled | Windows spotlight features like lock screen spotlight, suggested apps in Start menu or Windows tips will no longer suggest apps and content from third-party software publishers | + +### IE Computer Policies + +| Feature | Policy Setting | Policy Value | Description | +|---------------------------------------------------------------------------------------------------------------------|---------------------------------------------------------|----------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Windows Components / Internet Explorer | Prevent managing SmartScreen Filter | Enabled: On | Prevents the user from managing SmartScreen Filter, which warns the user if the website being visited is known for fraudulent attempts to gather personal information through "phishing," or is known to host malware. | +| Windows Components / Internet Explorer / Internet Control Panel / Advanced Page | Check for server certificate revocation | Enabled | Allows you to manage whether Internet Explorer will check revocation status of servers' certificates | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Turn on Cross-Site Scripting Filter | Enabled: Enable | Controls whether the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injections into websites in this zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Turn on Protected Mode | Enabled: Enable | Allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Turn on SmartScreen Filter scan | Enabled: Enable | Controls whether SmartScreen Filter scans pages in this zone for malicious content. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Use Pop-up Blocker | Enabled: Enable | Allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not blocked. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Intranet Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Intranet Zone | Java permissions | Enabled: High Safety | Allows you to manage permissions for Java applets. High Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Local Machine Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-down Internet Zone | Turn on SmartScreen Filter scan | Enabled: Enable | Controls whether SmartScreen Filter scans pages in this zone for malicious content. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-Down Restricted Sites Zone | Turn on SmartScreen Filter scan | Enabled: Enable | Controls whether SmartScreen Filter scans pages in this zone for malicious content. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Turn on Cross-Site Scripting Filter | Enabled: Enable | Controls whether the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injections into websites in this zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Turn on Protected Mode | Enabled: Enable | Allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Turn on SmartScreen Filter scan | Enabled: Enable | Controls whether SmartScreen Filter scans pages in this zone for malicious content. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-Down Trusted Sites Zone | Java permissions | Enabled: Enable | | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Use Pop-up Blocker | Enabled: Enable | Allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not blocked. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Trusted Sites Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | +| Windows Components / Internet Explorer / Security Features | Allow fallback to SSL 3.0 (Internet Explorer) | Enabled: No sites | Allows you to block an insecure fallback to SSL 3.0. When this policy is enabled, Internet Explorer will attempt to connect to sites using SSL 3.0 or below when TLS 1.0 or greater fails. | + +### LAPS + +Download and install the [Microsoft Local Admin Password Solution](https://www.microsoft.com/download/details.aspx?id=46899). + +| Feature | Policy Setting | Policy Value | Description | +|---------|----------------------------------------|--------------|-------------------------------| +| LAPS | Enable local admin password management | Enabled | Activates LAPS for the device | + +### Custom Policies + +| Feature | Policy Setting | Policy Value | Description | +|-----------------------------------------------------------------------|-----------------------------------------------------------|--------------|---------------------------------------------------------------------------------------| +| Computer Configuration / Administrative Templates / MS Security Guide | Apply UAC restrictions to local accounts on network logon | Enabled | Filters the user account token for built-in administrator accounts for network logons | + +### Services + +| Feature | Policy Setting | Policy Value | Description | +|----------------|-----------------------------------|--------------|-----------------------------------------------------------------------------------| +| Scheduled Task | XblGameSaveTask | Disabled | Syncs save data for Xbox Live save-enabled games | +| Services | Xbox Accessory Management Service | Disabled | Manages connected Xbox accessories | +| Services | Xbox Game Monitoring | Disabled | Monitors Xbox games currently being played | +| Services | Xbox Live Auth Manager | Disabled | Provides authentication and authorization services for interactive with Xbox Live | +| Services | Xbox Live Game Save | Disabled | Syncs save data for Xbox live save enabled games | +| Services | Xbox Live Networking Service | Disabled | Supports the Windows.Networking.XboxLive API | + +## Controls + +The controls enabled in SECCON 5 enforce a reasonable security level while minimizing the impact to users and applications. + +| Feature | Config | Description | +|-----------------------------------|-------------------------------------|--------------------| +| [Windows Defender ATP EDR](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/overview-endpoint-detection-response) | Deployed to all devices | The Windows Defender ATP endpoint detection and response (EDR) provides actionable and near real-time detection of advanced attacks. EDR helps security analysts , and aggregates alerts with the same attack techniques or attributed to the same attacker into an an entity called an *incident*. An incident helps analysts prioritize alerts, collectively investigate the full scope of a breach, and respond to threats. Windows Defender ATP EDR is not expected to impact users or applications, and it can be deployed to all devices in a single step. | +| [Windows Defender Credential Guard](https://docs.microsoft.com/windows/security/identity-protection/credential-guard/credential-guard) | Enabled for all compatible hardware | Windows Defender Credential Guard uses virtualization-based security to isolate secrets so that only privileged system software can access them. Unauthorized access to these secrets can lead to credential theft attacks, such as Pass-the-Hash or Pass-The-Ticket. Windows Defender Credential Guard prevents these attacks by protecting NTLM password hashes, Kerberos Ticket Granting Tickets (TGTs), and credentials stored by applications as domain credentials. There is a small risk to application compatibility, as [applications will break](https://docs.microsoft.com/windows/security/identity-protection/credential-guard/credential-guard-requirements#application-requirements) if they require NTLMv1, Kerberos DES encryption, Kerberos unconstrained delegation, or extracting the Keberos TGT. As such, Microsoft recommends deploying Credential Guard using the ring methodology. | +| [Microsoft Edge](https://docs.microsoft.com/microsoft-edge/deploy/) | Default browser | Microsoft Edge in Windows 10 provides better security than Internet Explorer 11 (IE11). While you may still need to leverage IE11 for compatibility with some sites, Microsoft recommends configuring Microsoft Edge as the default browser, and building an Enterprise Mode Site List to redirect to IE11 only for those sites that require it. Microsoft recommends leveraging either Windows Analytics or Enterprise Site Discovery to build the initial Enterprise Mode Site List, and then gradually deploying this configuration using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | +| [Windows Defender Application Guard](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-guard/wd-app-guard-overview) | Enabled on compatible hardware | Windows Defender Application Guard uses a hardware isolation approach. If an employee goes to an untrusted site through either Microsoft Edge or Internet Explorer, Microsoft Edge opens the site in an isolated container, which is separate from the host operating system and enabled by Hyper-V. If the untrusted site turns out to be malicious, the isolated container protects the host PC, and the attacker can't get to your enterprise data. There is a small risk to application compatibility, as some applications may require interaction with the host PC but may not yet be on the list of trusted web sites for Application Guard. Microsoft recommends leveraging either Windows Analytics or Enterprise Site Discovery to build the initial Network Isolation Settings, and then gradually deploying this configuration using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | + +## Behaviors + +The behaviors recommended in SECCON 5 enforce a reasonable security level while minimizing the impact to users or to applications. + +| Feature | Config | Description | +|---------|-------------------|-------------| +| OS security updates | Deploy Windows Quality Updates within 7 days of release | As the time between the release of a patch and an exploit based on the reverse engineering of that patch continues to shrink, a critical aspect of security hygiene is having an engineering process that quickly validates and deploys Quality Updates that address security vulnerabilities. | + diff --git a/windows/security/threat-protection/windows-seccon-framework/security-compliance-toolkit-10.md b/windows/security/threat-protection/windows-security-configuration-framework/security-compliance-toolkit-10.md similarity index 100% rename from windows/security/threat-protection/windows-seccon-framework/security-compliance-toolkit-10.md rename to windows/security/threat-protection/windows-security-configuration-framework/security-compliance-toolkit-10.md diff --git a/windows/security/threat-protection/windows-seccon-framework/windows-security-baselines.md b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-baselines.md similarity index 100% rename from windows/security/threat-protection/windows-seccon-framework/windows-security-baselines.md rename to windows/security/threat-protection/windows-security-configuration-framework/windows-security-baselines.md diff --git a/windows/security/threat-protection/windows-seccon-framework/windows-security-blog/blocking-remote-use-of-local-accounts.md b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-blog/blocking-remote-use-of-local-accounts.md similarity index 100% rename from windows/security/threat-protection/windows-seccon-framework/windows-security-blog/blocking-remote-use-of-local-accounts.md rename to windows/security/threat-protection/windows-security-configuration-framework/windows-security-blog/blocking-remote-use-of-local-accounts.md diff --git a/windows/security/threat-protection/windows-seccon-framework/windows-security-blog/configuring-account-lockout.md b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-blog/configuring-account-lockout.md similarity index 100% rename from windows/security/threat-protection/windows-seccon-framework/windows-security-blog/configuring-account-lockout.md rename to windows/security/threat-protection/windows-security-configuration-framework/windows-security-blog/configuring-account-lockout.md diff --git a/windows/security/threat-protection/windows-seccon-framework/windows-security-blog/dropping-the-untrusted-font-blocking-setting.md b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-blog/dropping-the-untrusted-font-blocking-setting.md similarity index 100% rename from windows/security/threat-protection/windows-seccon-framework/windows-security-blog/dropping-the-untrusted-font-blocking-setting.md rename to windows/security/threat-protection/windows-security-configuration-framework/windows-security-blog/dropping-the-untrusted-font-blocking-setting.md diff --git a/windows/security/threat-protection/windows-seccon-framework/windows-security-blog/sticking-with-well-known-and-proven-solutions.md b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-blog/sticking-with-well-known-and-proven-solutions.md similarity index 100% rename from windows/security/threat-protection/windows-seccon-framework/windows-security-blog/sticking-with-well-known-and-proven-solutions.md rename to windows/security/threat-protection/windows-security-configuration-framework/windows-security-blog/sticking-with-well-known-and-proven-solutions.md diff --git a/windows/security/threat-protection/windows-seccon-framework/windows-security-blog/why-were-not-recommending-fips-mode-anymore.md b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-blog/why-were-not-recommending-fips-mode-anymore.md similarity index 100% rename from windows/security/threat-protection/windows-seccon-framework/windows-security-blog/why-were-not-recommending-fips-mode-anymore.md rename to windows/security/threat-protection/windows-security-configuration-framework/windows-security-blog/why-were-not-recommending-fips-mode-anymore.md diff --git a/windows/security/threat-protection/windows-seccon-framework/windows-security-compliance.md b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-compliance.md similarity index 100% rename from windows/security/threat-protection/windows-seccon-framework/windows-security-compliance.md rename to windows/security/threat-protection/windows-security-configuration-framework/windows-security-compliance.md diff --git a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md new file mode 100644 index 0000000000..c245933403 --- /dev/null +++ b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md @@ -0,0 +1,66 @@ +--- +title: Windows Security Configuration Framework +description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# Introducing the SECCON Framework + +**Applies to** + +- Windows 10 +- Windows Server 2016 +- Office 2016 + +Security configuration is complex. With thousands of group policies available in Windows, choosing the “best” setting is difficult. +It’s not always obvious which permutations of policies are required to implement a complete scenario, and there are often unintended consequences of some security lockdowns. + +Because of this, with each release of Windows, Microsoft publishes [Windows Security Baselines](https://docs.microsoft.com/windows/security/threat-protection/windows-security-baselines), an industry-standard configuration that is broadly known and well-tested. +However, many organizations have discovered that this baseline sets a very high bar. +While appropriate for organizations with very high security needs such as those persistently targeted by Advanced Persistent Threats, some organizations have found that the cost of navigating the potential compatibility impact of this configuration is prohibitively expensive given their risk appetite. +They can’t justify the investment in that very high level of security with an ROI. +Assuch, Microsoft is introducing a new taxonomy for Security Configurations for Windows 10: The SECCON Baselines. + +The SECCON Baselines organize devices into one of 5 distinct security configurations. + +![SECON Framework](./../images/seccon-framework.png) + +- [SECCON 5 Enterprise Security](seccon-5-enterprise-security.md) – We recommend this configuration as the minimum security configuration for an enterprise device. Recommendations for this SecCon level are generally straightforward and are designed to be deployable within 30 days. +- [SECCON 4 Enterprise High Security](seccon-4-enterprise-high-security.md) – We recommend this configuration for devices where users access sensitive or confidential information. Some of the controls may have an impact to app compat, and therefore will often go through an audit-configure-enforce workflow. Recommendations for this SecCon level are generally accessible to most organizations and are designed to be deployable within 90 days. +- [SECCON 3 Enterprise VIP Security](seccon-3-enterprise-vip-security.md) – We recommend this configuration for devices run by an organization with a larger or more sophisticated security team, or for specific users or groups who are at uniquely high risk (as one example, one organization identified users who handle data whose theft would directly and seriously impact their stock price). An organization likely to be targeted by well-funded and sophisticated adversaries should aspire to this configuration. Recommendations for this SecCon level can be complex (for example, removing local admin rights for some organizations can be a long project in and of itself) and can often go beyond 90 days. +- [SECCON 2 DevOps Workstation](seccon-2-enterprise-devops-security.md) – We recommend this configuration for developers and testers, who are an attractive target both for supply chain attacks and access to servers and systems containing high value data or where critical business functions could be disrupted. SecCon 2 guidance is coming soon! +- [SECCON 1 Administrator Workstation](seccon-1-enterprise-administrator-security.md) – Administrators (particularly of identity or security systems) present the highest risk to the organization, through data theft, data alteration, or service disruption. SecCon 1 guidance is coming soon! + + +The SECCON Baselines divide configuration into Productivity Devices and Privileged Access Workstations. This document will focus on Productivity Devices +(SECCON 5, 4, and 3). +Microsoft’s current guidance on [Privileged Access Workstations](http://aka.ms/privsec) are part of the [Securing Privileged Access roadmap](http://aka.ms/privsec). + +Microsoft recommends reviewing and categorizing your devices, and then configuring them using the prescriptive guidance for that SECCON level. +SECCON 5 should be considered the minimum baseline for an enterprise device, and Microsoft recommends increasing the protection based on both threat environment and risk appetite. + +## Security Control Classification + +The recommendations are grouped into three categories. + +![Security Control Classifications](./../images/security-control-classification.png) + + +## Security Control Deployment Methodologies + +The way Microsoft recommends implementing these controls depends on the +auditability of the control–there are two primary methodologies. + +![Security Control Deployment methodologies](./../images/security-control-deployment-methodologies.png) + + From 9ad987584e8841d92c07814e9305c23686a2b0f4 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 8 Apr 2019 16:33:11 -0700 Subject: [PATCH 130/349] changed to levels --- ...indows-security-configuration-framework.md | 20 +++++++++---------- 1 file changed, 9 insertions(+), 11 deletions(-) diff --git a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md index c245933403..b7d3fe624b 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md @@ -14,13 +14,11 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# Introducing the SECCON Framework +# Introducing the Security Configuration Framework **Applies to** - Windows 10 -- Windows Server 2016 -- Office 2016 Security configuration is complex. With thousands of group policies available in Windows, choosing the “best” setting is difficult. It’s not always obvious which permutations of policies are required to implement a complete scenario, and there are often unintended consequences of some security lockdowns. @@ -29,17 +27,17 @@ Because of this, with each release of Windows, Microsoft publishes [Windows Secu However, many organizations have discovered that this baseline sets a very high bar. While appropriate for organizations with very high security needs such as those persistently targeted by Advanced Persistent Threats, some organizations have found that the cost of navigating the potential compatibility impact of this configuration is prohibitively expensive given their risk appetite. They can’t justify the investment in that very high level of security with an ROI. -Assuch, Microsoft is introducing a new taxonomy for Security Configurations for Windows 10: The SECCON Baselines. +Assuch, Microsoft is introducing a new taxonomy for Security Configurations for Windows 10: Security Configuration Framework. -The SECCON Baselines organize devices into one of 5 distinct security configurations. +The Security Configuration Framework organizes devices into one of 5 distinct security configurations. -![SECON Framework](./../images/seccon-framework.png) +![SECCON Framework](./../images/seccon-framework.png) -- [SECCON 5 Enterprise Security](seccon-5-enterprise-security.md) – We recommend this configuration as the minimum security configuration for an enterprise device. Recommendations for this SecCon level are generally straightforward and are designed to be deployable within 30 days. -- [SECCON 4 Enterprise High Security](seccon-4-enterprise-high-security.md) – We recommend this configuration for devices where users access sensitive or confidential information. Some of the controls may have an impact to app compat, and therefore will often go through an audit-configure-enforce workflow. Recommendations for this SecCon level are generally accessible to most organizations and are designed to be deployable within 90 days. -- [SECCON 3 Enterprise VIP Security](seccon-3-enterprise-vip-security.md) – We recommend this configuration for devices run by an organization with a larger or more sophisticated security team, or for specific users or groups who are at uniquely high risk (as one example, one organization identified users who handle data whose theft would directly and seriously impact their stock price). An organization likely to be targeted by well-funded and sophisticated adversaries should aspire to this configuration. Recommendations for this SecCon level can be complex (for example, removing local admin rights for some organizations can be a long project in and of itself) and can often go beyond 90 days. -- [SECCON 2 DevOps Workstation](seccon-2-enterprise-devops-security.md) – We recommend this configuration for developers and testers, who are an attractive target both for supply chain attacks and access to servers and systems containing high value data or where critical business functions could be disrupted. SecCon 2 guidance is coming soon! -- [SECCON 1 Administrator Workstation](seccon-1-enterprise-administrator-security.md) – Administrators (particularly of identity or security systems) present the highest risk to the organization, through data theft, data alteration, or service disruption. SecCon 1 guidance is coming soon! +- [Level 5 Enterprise Security](level-5-enterprise-security.md) – We recommend this configuration as the minimum security configuration for an enterprise device. Recommendations for this SecCon level are generally straightforward and are designed to be deployable within 30 days. +- [Level 4 Enterprise High Security](level-4-enterprise-high-security.md) – We recommend this configuration for devices where users access sensitive or confidential information. Some of the controls may have an impact to app compat, and therefore will often go through an audit-configure-enforce workflow. Recommendations for this SecCon level are generally accessible to most organizations and are designed to be deployable within 90 days. +- [Level 3 Enterprise VIP Security](level-3-enterprise-vip-security.md) – We recommend this configuration for devices run by an organization with a larger or more sophisticated security team, or for specific users or groups who are at uniquely high risk (as one example, one organization identified users who handle data whose theft would directly and seriously impact their stock price). An organization likely to be targeted by well-funded and sophisticated adversaries should aspire to this configuration. Recommendations for this SecCon level can be complex (for example, removing local admin rights for some organizations can be a long project in and of itself) and can often go beyond 90 days. +- [Level 2 DevOps Workstation](level-2-enterprise-devops-security.md) – We recommend this configuration for developers and testers, who are an attractive target both for supply chain attacks and access to servers and systems containing high value data or where critical business functions could be disrupted. Level 2 guidance is coming soon! +- [Level 1 Administrator Workstation](level-1-enterprise-administrator-security.md) – Administrators (particularly of identity or security systems) present the highest risk to the organization, through data theft, data alteration, or service disruption. Level 1 guidance is coming soon! The SECCON Baselines divide configuration into Productivity Devices and Privileged Access Workstations. This document will focus on Productivity Devices From 49d7db20739ef95f6b1ccb2d14839fd484576a0f Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 8 Apr 2019 17:05:53 -0700 Subject: [PATCH 131/349] edits --- ...indows-security-configuration-framework.md | 26 +++++++++---------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md index b7d3fe624b..cc6da3108b 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md @@ -14,7 +14,7 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# Introducing the Security Configuration Framework +# Introducing the security configuration framework **Applies to** @@ -23,38 +23,38 @@ ms.date: 04/05/2018 Security configuration is complex. With thousands of group policies available in Windows, choosing the “best” setting is difficult. It’s not always obvious which permutations of policies are required to implement a complete scenario, and there are often unintended consequences of some security lockdowns. -Because of this, with each release of Windows, Microsoft publishes [Windows Security Baselines](https://docs.microsoft.com/windows/security/threat-protection/windows-security-baselines), an industry-standard configuration that is broadly known and well-tested. +Because of this, with each release of Windows, Microsoft publishes [Windows security baselines](https://docs.microsoft.com/windows/security/threat-protection/windows-security-baselines), an industry-standard configuration that is broadly known and well-tested. However, many organizations have discovered that this baseline sets a very high bar. While appropriate for organizations with very high security needs such as those persistently targeted by Advanced Persistent Threats, some organizations have found that the cost of navigating the potential compatibility impact of this configuration is prohibitively expensive given their risk appetite. They can’t justify the investment in that very high level of security with an ROI. -Assuch, Microsoft is introducing a new taxonomy for Security Configurations for Windows 10: Security Configuration Framework. +Assuch, Microsoft is introducing a new taxonomy for security configurations for Windows 10: Security Configuration Framework. -The Security Configuration Framework organizes devices into one of 5 distinct security configurations. +The security configuration framework organizes devices into one of 5 distinct security configurations. ![SECCON Framework](./../images/seccon-framework.png) -- [Level 5 Enterprise Security](level-5-enterprise-security.md) – We recommend this configuration as the minimum security configuration for an enterprise device. Recommendations for this SecCon level are generally straightforward and are designed to be deployable within 30 days. -- [Level 4 Enterprise High Security](level-4-enterprise-high-security.md) – We recommend this configuration for devices where users access sensitive or confidential information. Some of the controls may have an impact to app compat, and therefore will often go through an audit-configure-enforce workflow. Recommendations for this SecCon level are generally accessible to most organizations and are designed to be deployable within 90 days. -- [Level 3 Enterprise VIP Security](level-3-enterprise-vip-security.md) – We recommend this configuration for devices run by an organization with a larger or more sophisticated security team, or for specific users or groups who are at uniquely high risk (as one example, one organization identified users who handle data whose theft would directly and seriously impact their stock price). An organization likely to be targeted by well-funded and sophisticated adversaries should aspire to this configuration. Recommendations for this SecCon level can be complex (for example, removing local admin rights for some organizations can be a long project in and of itself) and can often go beyond 90 days. +- [Level 5 Enterprise Security](level-5-enterprise-security.md) – We recommend this configuration as the minimum security configuration for an enterprise device. Recommendations for this level are generally straightforward and are designed to be deployable within 30 days. +- [Level 4 Enterprise High Security](level-4-enterprise-high-security.md) – We recommend this configuration for devices where users access sensitive or confidential information. Some of the controls may have an impact to app compat, and therefore will often go through an audit-configure-enforce workflow. Recommendations for this level are generally accessible to most organizations and are designed to be deployable within 90 days. +- [Level 3 Enterprise VIP Security](level-3-enterprise-vip-security.md) – We recommend this configuration for devices run by an organization with a larger or more sophisticated security team, or for specific users or groups who are at uniquely high risk (as one example, one organization identified users who handle data whose theft would directly and seriously impact their stock price). An organization likely to be targeted by well-funded and sophisticated adversaries should aspire to this configuration. Recommendations for this level can be complex (for example, removing local admin rights for some organizations can be a long project in and of itself) and can often go beyond 90 days. - [Level 2 DevOps Workstation](level-2-enterprise-devops-security.md) – We recommend this configuration for developers and testers, who are an attractive target both for supply chain attacks and access to servers and systems containing high value data or where critical business functions could be disrupted. Level 2 guidance is coming soon! - [Level 1 Administrator Workstation](level-1-enterprise-administrator-security.md) – Administrators (particularly of identity or security systems) present the highest risk to the organization, through data theft, data alteration, or service disruption. Level 1 guidance is coming soon! -The SECCON Baselines divide configuration into Productivity Devices and Privileged Access Workstations. This document will focus on Productivity Devices -(SECCON 5, 4, and 3). +The security configuration framework divides configuration into Productivity Devices and Privileged Access Workstations. This document will focus on Productivity Devices +(Levels 5, 4, and 3). Microsoft’s current guidance on [Privileged Access Workstations](http://aka.ms/privsec) are part of the [Securing Privileged Access roadmap](http://aka.ms/privsec). -Microsoft recommends reviewing and categorizing your devices, and then configuring them using the prescriptive guidance for that SECCON level. -SECCON 5 should be considered the minimum baseline for an enterprise device, and Microsoft recommends increasing the protection based on both threat environment and risk appetite. +Microsoft recommends reviewing and categorizing your devices, and then configuring them using the prescriptive guidance for that level. +Level 5 should be considered the minimum baseline for an enterprise device, and Microsoft recommends increasing the protection based on both threat environment and risk appetite. -## Security Control Classification +## Security control classification The recommendations are grouped into three categories. ![Security Control Classifications](./../images/security-control-classification.png) -## Security Control Deployment Methodologies +## Security control deployment methodologies The way Microsoft recommends implementing these controls depends on the auditability of the control–there are two primary methodologies. From a7ae2930d64abc694691dfd07369d247ce79f985 Mon Sep 17 00:00:00 2001 From: Malin De Silva Date: Tue, 9 Apr 2019 08:51:27 +0530 Subject: [PATCH 132/349] text added mentioning detailed explanation urls --- windows/deployment/usmt/usmt-migrate-user-accounts.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/usmt/usmt-migrate-user-accounts.md b/windows/deployment/usmt/usmt-migrate-user-accounts.md index 9fb4c1f48f..b5da93fe54 100644 --- a/windows/deployment/usmt/usmt-migrate-user-accounts.md +++ b/windows/deployment/usmt/usmt-migrate-user-accounts.md @@ -25,7 +25,7 @@ By default, all users are migrated. The only way to specify which users to inclu - [To migrate two domain accounts (User1 and User2) and move User1 from the Contoso domain to the Fabrikam domain](#bkmk-migratemoveuserone) ## To migrate all user accounts and user settings - +Links to detailed explanations on commands are available in Related Topics section. 1. Log on to the source computer as an administrator, and specify the following in a **Command-Prompt** window: @@ -49,7 +49,7 @@ By default, all users are migrated. The only way to specify which users to inclu   ## To migrate two domain accounts (User1 and User2) - +Links to detailed explanations on commands are available in Related Topics section. 1. Log on to the source computer as an administrator, and specify: @@ -62,7 +62,7 @@ By default, all users are migrated. The only way to specify which users to inclu `loadstate \\server\share\migration\mystore /i:migdocs.xml /i:migapp.xml` ## To migrate two domain accounts (User1 and User2) and move User1 from the Contoso domain to the Fabrikam domain - +Links to detailed explanations on commands are available in Related Topics section. 1. Log on to the source computer as an administrator, and type the following at the command-line prompt: From 4038fd10d5f29897737631aac1ecf86b8db69d2e Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Tue, 9 Apr 2019 10:28:04 +0500 Subject: [PATCH 133/349] Grammar Issue There was a grammar issue that has been fixed. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/774 Previous PR:https://github.com/MicrosoftDocs/windows-itpro-docs/pull/3147/files --- windows/deployment/upgrade/log-files.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/upgrade/log-files.md b/windows/deployment/upgrade/log-files.md index 289b0b5793..a966f7ad8e 100644 --- a/windows/deployment/upgrade/log-files.md +++ b/windows/deployment/upgrade/log-files.md @@ -55,7 +55,7 @@ Event logs: Generic rollbacks (0xC1900101) or unexpected reboots. ## Log entry structure -A setupact.log or setuperr.log (files are located at C:\Windows) entry includes the following elements: +A setupact.log or setuperr.log entry (files are located at C:\Windows) includes the following elements:
  1. The date and time - 2016-09-08 09:20:05. From aa18a20dde43965cf96c7acd24b685cc315d1c89 Mon Sep 17 00:00:00 2001 From: Andrea Bichsel Date: Tue, 9 Apr 2019 09:10:44 -0700 Subject: [PATCH 134/349] Update evaluate-controlled-folder-access.md --- .../evaluate-controlled-folder-access.md | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-exploit-guard/evaluate-controlled-folder-access.md b/windows/security/threat-protection/windows-defender-exploit-guard/evaluate-controlled-folder-access.md index 667c554a43..958cc3e6d8 100644 --- a/windows/security/threat-protection/windows-defender-exploit-guard/evaluate-controlled-folder-access.md +++ b/windows/security/threat-protection/windows-defender-exploit-guard/evaluate-controlled-folder-access.md @@ -49,10 +49,11 @@ You can also use Group Policy, Intune, MDM, or System Center Configuration Manag The following controlled folder access events appear in Windows Event Viewer. -Event ID | Description -5007 | Event when settings are changed -1124 | Audited controlled folder access event -1123 | Blocked controlled folder access event +| Event ID | Description | +| --- | --- | +| 5007 | Event when settings are changed | +| 1124 | Audited controlled folder access event | +| 1123 | Blocked controlled folder access event | ## Customize protected folders and apps @@ -63,4 +64,4 @@ See [Protect important folders with controlled folder access](controlled-folders ## Related topics - [Protect important folders with controlled folder access](controlled-folders-exploit-guard.md) - [Evaluate Windows Defender ATP](evaluate-windows-defender-exploit-guard.md) -- [Use audit mode](audit-windows-defender-exploit-guard.md) \ No newline at end of file +- [Use audit mode](audit-windows-defender-exploit-guard.md) From 8085a1c0144c256a18c922820747dda2a0f123c8 Mon Sep 17 00:00:00 2001 From: JC <47532346+Jcoetsee@users.noreply.github.com> Date: Tue, 9 Apr 2019 19:27:54 +0200 Subject: [PATCH 135/349] changes made to line 135 please see https://github.com/MicrosoftDocs/windows-itpro-docs/issues/3059 --- windows/security/threat-protection/auditing/event-4716.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/auditing/event-4716.md b/windows/security/threat-protection/auditing/event-4716.md index 1bd7c641e8..6187a558da 100644 --- a/windows/security/threat-protection/auditing/event-4716.md +++ b/windows/security/threat-protection/auditing/event-4716.md @@ -132,7 +132,7 @@ This event is generated only on domain controllers. | 0x8 | TRUST\_ATTRIBUTE\_FOREST\_TRANSITIVE | If this bit is set, the trust link is a [cross-forest trust](https://msdn.microsoft.com/library/cc223126.aspx#gt_86f3dbf2-338f-462e-8c5b-3c8e05798dbc) [\[MS-KILE\]](https://msdn.microsoft.com/library/cc233855.aspx) between the root domains of two [forests](https://msdn.microsoft.com/library/cc223126.aspx#gt_fd104241-4fb3-457c-b2c4-e0c18bb20b62), both of which are running in a [forest functional level](https://msdn.microsoft.com/library/cc223126.aspx#gt_b3240417-ca43-4901-90ec-fde55b32b3b8) of DS\_BEHAVIOR\_WIN2003 or greater.
    Only evaluated on Windows Server 2003 operating system, Windows Server 2008 operating system, Windows Server 2008 R2 operating system, Windows Server 2012 operating system, Windows Server 2012 R2 operating system, and Windows Server 2016 operating system.
    Can only be set if forest and trusted forest are running in a forest functional level of DS\_BEHAVIOR\_WIN2003 or greater. | | 0x10 | TRUST\_ATTRIBUTE\_CROSS\_ORGANIZATION | If this bit is set, then the trust is to a domain or forest that is not part of the [organization](https://msdn.microsoft.com/library/cc223126.aspx#gt_6fae7775-5232-4206-b452-f298546ab54f). The behavior controlled by this bit is explained in [\[MS-KILE\]](https://msdn.microsoft.com/library/cc233855.aspx) section [3.3.5.7.5](https://msdn.microsoft.com/library/cc233949.aspx) and [\[MS-APDS\]](https://msdn.microsoft.com/library/cc223948.aspx) section [3.1.5](https://msdn.microsoft.com/library/cc223991.aspx).
    Only evaluated on Windows Server 2003, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016.
    Can only be set if forest and trusted forest are running in a forest functional level of DS\_BEHAVIOR\_WIN2003 or greater. | | 0x20 | TRUST\_ATTRIBUTE\_WITHIN\_FOREST | If this bit is set, then the trusted domain is within the same forest.
    Only evaluated on Windows Server 2003, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016. | -| 0x40 | TRUST\_ATTRIBUTE\_TREAT\_AS\_EXTERNAL | If this bit is set, then a cross-forest trust to a domain is to be treated as an external trust for the purposes of SID Filtering. Cross-forest trusts are [more stringently filtered](https://docs.microsoft.com/openspecs/windows_protocols/ms-adts/e9a2d23c-c31e-4a6f-88a0-6646fdb51a3c) than external trusts. This attribute relaxes those cross-forest trusts to be equivalent to external trusts. For more information on how each trust type is filtered, see [\[MS-PAC\]](https://msdn.microsoft.com/library/cc237917.aspx) section 4.1.2.2.
    Only evaluated on Windows Server 2003, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016.
    Only evaluated if SID Filtering is used.
    Only evaluated on cross-forest trusts having TRUST\_ATTRIBUTE\_FOREST\_TRANSITIVE.
    Can only be set if forest and trusted forest are running in a forest functional level of DS\_BEHAVIOR\_WIN2003 or greater. | +| 0x40 | TRUST\_ATTRIBUTE\_TREAT\_AS\_EXTERNAL | If this bit is set, then a cross-forest trust to a domain is to be treated as an external trust for the purposes of SID Filtering. Cross-forest trusts are [more stringently filtered](https://docs.microsoft.com/openspecs/windows_protocols/ms-adts/e9a2d23c-c31e-4a6f-88a0-6646fdb51a3c) than external trusts. This attribute relaxes those cross-forest trusts to be equivalent to external trusts.
    Only evaluated on Windows Server 2003, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016.
    Only evaluated if SID Filtering is used.
    Only evaluated on cross-forest trusts having TRUST\_ATTRIBUTE\_FOREST\_TRANSITIVE.
    Can only be set if forest and trusted forest are running in a forest functional level of DS\_BEHAVIOR\_WIN2003 or greater. | | 0x80 | TRUST\_ATTRIBUTE\_USES\_RC4\_ENCRYPTION | This bit is set on trusts with the [trustType](https://msdn.microsoft.com/library/cc220955.aspx) set to TRUST\_TYPE\_MIT, which are capable of using RC4 keys. Historically, MIT Kerberos distributions supported only DES and 3DES keys ([\[RFC4120\]](https://go.microsoft.com/fwlink/?LinkId=90458), [\[RFC3961\]](https://go.microsoft.com/fwlink/?LinkId=90450)). MIT 1.4.1 adopted the RC4HMAC encryption type common to Windows 2000 [\[MS-KILE\]](https://msdn.microsoft.com/library/cc233855.aspx), so trusted domains deploying later versions of the MIT distribution required this bit. For more information, see "Keys and Trusts", section [6.1.6.9.1](https://msdn.microsoft.com/library/cc223782.aspx).
    Only evaluated on TRUST\_TYPE\_MIT | | 0x200 | TRUST\_ATTRIBUTE\_CROSS\_ORGANIZATION\_NO\_TGT\_DELEGATION | If this bit is set, tickets granted under this trust MUST NOT be trusted for delegation. The behavior controlled by this bit is as specified in [\[MS-KILE\]](https://msdn.microsoft.com/library/cc233855.aspx) section 3.3.5.7.5.
    Only supported on Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016. | | 0x400 | TRUST\_ATTRIBUTE\_PIM\_TRUST | If this bit and the TATE bit are set, then a cross-forest trust to a domain is to be treated as Privileged Identity Management trust for the purposes of SID Filtering. For more information on how each trust type is filtered, see [\[MS-PAC\]](https://msdn.microsoft.com/library/cc237917.aspx) section 4.1.2.2.
    Evaluated only on Windows Server 2016
    Evaluated only if SID Filtering is used.
    Evaluated only on cross-forest trusts having TRUST\_ATTRIBUTE\_FOREST\_TRANSITIVE.
    Can be set only if the forest and the trusted forest are running in a forest functional level of DS\_BEHAVIOR\_WINTHRESHOLD or greater. | From aa79a917f858379bde1651784693c208a0d5a79a Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 9 Apr 2019 11:21:31 -0700 Subject: [PATCH 136/349] edits --- .../TOC.md | 10 ++++---- ...vel-1-enterprise-administrator-security.md | 10 ++++---- .../level-2-enterprise-devops-security.md | 10 ++++---- .../level-3-enterprise-VIP-security.md | 18 +++++++------- .../level-4-enterprise-high-security.md | 24 +++++++++---------- .../level-5-enterprise-security.md | 20 ++++++++-------- 6 files changed, 45 insertions(+), 47 deletions(-) diff --git a/windows/security/threat-protection/windows-security-configuration-framework/TOC.md b/windows/security/threat-protection/windows-security-configuration-framework/TOC.md index 8a4ce81dac..e994f2c0ff 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/TOC.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/TOC.md @@ -4,11 +4,11 @@ ### [Security Compliance Toolkit](security-compliance-toolkit-10.md) ### [Get support](get-support-for-security-baselines.md) ## [Windows SECCON framework](windows-security-configuration-framework.md) -### [SECCON 5 Enterprise Security](seccon-5-enterprise-security.md) -### [SECCON 4 Enterprise High Security](seccon-4-enterprise-high-security.md) -### [SECCON 3 Enterprise VIP Security](seccon-3-enterprise-vip-security.md) -### [SECCON 2 Enterprise Dev/Ops Workstation](seccon-2-enterprise-devops-security.md) -### [SECCON 1 Enterprise Administrator Workstation](seccon-1-enterprise-administrator-security.md) +### [Level 5 Enterprise Security](level-5-enterprise-security.md) +### [Level 4 Enterprise High Security](level-4-enterprise-high-security.md) +### [Level 3 Enterprise VIP Security](level-3-enterprise-vip-security.md) +### [Level 2 Enterprise Dev/Ops Workstation](level-2-enterprise-devops-security.md) +### [Level 1 Enterprise Administrator Workstation](level-1-enterprise-administrator-security.md) ##Windows Security Blog Posts ### [Sticking with Well-Known and Proven Solutions](windows-security-blog/sticking-with-well-known-and-proven-solutions.md) ### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-security-blog/why-were-not-recommending-fips-mode-anymore.md) diff --git a/windows/security/threat-protection/windows-security-configuration-framework/level-1-enterprise-administrator-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-1-enterprise-administrator-security.md index a5b9862f6b..9c4bd61995 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/level-1-enterprise-administrator-security.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/level-1-enterprise-administrator-security.md @@ -1,6 +1,6 @@ --- -title: SECCON 1 enterprise administrator security -description: This article, and the articles it links to, describe how to use the Windows SECCON framework in your organization +title: Level 1 enterprise administrator security +description: Describes the policies, controls, and organizational behaviors for Windows security configuration framework level 1 enterprise administrator security configuration. keywords: virtualization, security, malware ms.prod: w10 ms.mktglfcycl: deploy @@ -14,7 +14,7 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# SECCON 1 security configuration for enterprise administrators +# Level 1 enterprise administrator security configuration **Applies to** @@ -22,6 +22,4 @@ ms.date: 04/05/2018 Administrators (particularly of identity or security systems) present the highest risk to the organization−through data theft, data alteration, or service disruption. -SECCON 1 guidance to help protect devices used by administrators is coming soon! - - +A level 1 configuration should include all the configurations from levels 5, 4, 3, and 2 and additional controls. We are planning recommendations for the additional controls now, so check back soon for level 1 enterprise administrator security configuration guidance! diff --git a/windows/security/threat-protection/windows-security-configuration-framework/level-2-enterprise-devops-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-2-enterprise-devops-security.md index ee6a1d66b4..78f183b8b3 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/level-2-enterprise-devops-security.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/level-2-enterprise-devops-security.md @@ -1,6 +1,6 @@ --- -title: SECCON 2 enterprise devops security -description: This article, and the articles it links to, describe how to use the Windows SECCON framework in your organization +title: Level 2 enterprise dev/ops security configuration +description: Describes the policies, controls, and organizational behaviors for Windows security configuration framework level 2 enterprise dev/ops security configuration. keywords: virtualization, security, malware ms.prod: w10 ms.mktglfcycl: deploy @@ -14,12 +14,14 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# Level 2 security configuration for enterprise dev/ops +# Level 2 enterprise dev/ops security configuration **Applies to** - Windows 10 -We recommend this configuration for developers and testers, who are an attractive target both for supply chain attacks and access to servers and systems containing high value data or where critical business functions could be disrupted. SecCon 2 guidance is coming soon! +We recommend this configuration for developers and testers, who are an attractive target both for supply chain attacks and access to servers and systems containing high value data or where critical business functions could be disrupted. A level 2 configuration should include all the configurations from levels 5, 4, and 3 and additional controls. We are planning recommendations for the additional controls now, so check back soon for level 2 enterprise dev/ops security configuration guidance! + + diff --git a/windows/security/threat-protection/windows-security-configuration-framework/level-3-enterprise-VIP-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-3-enterprise-VIP-security.md index e3a3824c6a..ae8b0b6cc3 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/level-3-enterprise-VIP-security.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/level-3-enterprise-VIP-security.md @@ -1,6 +1,6 @@ --- -title: SECCON 3 Enterprise VIP Security -description: This article, and the articles it links to, describe how to use the Windows SECCON framework in your organization +title: Level 3 enterprise VIP security configuration +description: Describes the policies, controls, and organizational behaviors for Windows security configuration framework level 3 enterprise VIP security configuration. keywords: virtualization, security, malware ms.prod: w10 ms.mktglfcycl: deploy @@ -14,20 +14,18 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# SECCON 3 security configuration for enterprise VIPs +# Level 3 enterprise VIP security configuration **Applies to** - Windows 10 -- Windows Server 2016 -- Office 2016 -SECCON 3 is the security configuration recommended as a standard for organizations with large and sophisticated security organizations, or for specific users and groups who will be uniquely targeted by adversaries. Such organizations are typically targeted by well-funded and sophisticated adversaries, and as such merit the additional constraints and controls described here. -A SECCON 3 configuration should include all the configurations from SECCON 5 and SECCON 4 and add the following security controls. +Level 3 is the security configuration recommended as a standard for organizations with large and sophisticated security organizations, or for specific users and groups who will be uniquely targeted by adversaries. Such organizations are typically targeted by well-funded and sophisticated adversaries, and as such merit the additional constraints and controls described here. +A level 3 configuration should include all the configurations from level 5 and level 4 and add the following security policies, controls, and organizational behaviors. ## Policies -The policies enforced in SECCON 3 implement strict security configuration and controls. They can have a potentially significant impact to users or to applications, enforcing a level of security commensurate with the risks facing targeted organizations. Microsoft recommends disciplined testing and deployment using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). +The policies enforced in level 3 implement strict security configuration and controls. They can have a potentially significant impact to users or to applications, enforcing a level of security commensurate with the risks facing targeted organizations. Microsoft recommends disciplined testing and deployment using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). ### Security Template Policies @@ -115,7 +113,7 @@ The policies enforced in SECCON 3 implement strict security configuration and co ## Controls -The controls enforced in SECCON 3 implement complex security configuration and controls. +The controls enforced in level 3 implement complex security configuration and controls. They are likely to have a higher impact to users or to applications, enforcing a level of security commensurate with the risks facing the most targeted organizations. Microsoft recommends using the Audit/Enforce methodology for controls with audit mode, and [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates) for those that do @@ -128,7 +126,7 @@ not. ## Behaviors -The behaviors recommended in SECCON 3 represent the most sophisticated security +The behaviors recommended in level 3 represent the most sophisticated security configuration. Removing admin rights can be difficult, but it is essential to achieve a level of security commensurate with the risks facing the most targeted organizations. diff --git a/windows/security/threat-protection/windows-security-configuration-framework/level-4-enterprise-high-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-4-enterprise-high-security.md index 51aac3468c..a09ad7377a 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/level-4-enterprise-high-security.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/level-4-enterprise-high-security.md @@ -1,6 +1,6 @@ --- -title: SECCON 4 Enterprise High Security -description: This article, and the articles it links to, describe how to use the Windows SECCON framework in your organization +title: Level 4 enterprise high security configuration +description: Describes the policies, controls, and organizational behaviors for Windows security configuration framework level 4 enterprise security configuration. keywords: virtualization, security, malware ms.prod: w10 ms.mktglfcycl: deploy @@ -14,24 +14,24 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# SECCON 4 security configuration for enterprise high security +# Level 4 enterprise high security configuration **Applies to** - Windows 10 -SECCON 4 is the security configuration recommended as a standard for devices where users access more sensitive information. These devices are a natural target in enterprises today. While targeting high levels of security, these recommendations do not assume a large staff of highly skilled security practitioners, and therefore should be accessible to most Enterprise organizations. -A SECCON 4 configuration should include all the configurations from SECCON 5 and add the following security controls. +Level 4 is the security configuration recommended as a standard for devices where users access more sensitive information. These devices are a natural target in enterprises today. While targeting high levels of security, these recommendations do not assume a large staff of highly skilled security practitioners, and therefore should be accessible to most enterprise organizations. +A level 4 configuration should include all the configurations from level 5 and add the following security policies, controls, and organizational behaviors. ## Policies -The policies enforced in SECCON 4 implement more controls and a more sophisticated security -configuration than SECCON 5. While they may have a slightly higher impact to +The policies enforced in level 4 implement more controls and a more sophisticated security +configuration than level 5. While they may have a slightly higher impact to users or to applications, they enforce a level of security more commensurate with the risks facing users with access to sensitive information. Microsoft recommends using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates) for these security configurations and controls, with a moderate timeline that is anticipated to be slightly longer -than the process in SECCON 5. +than the process in level 5. ### Security Template Policies @@ -180,13 +180,13 @@ than the process in SECCON 5. ## Controls -The controls enforced in SECCON 4 implement more controls and a more sophisticated security -configuration than SECCON 5. While they may have a slightly higher impact to +The controls enforced in level 4 implement more controls and a more sophisticated security +configuration than level 5. While they may have a slightly higher impact to users or to applications, they enforce a level of security more commensurate with the risks facing users with access to sensitive information. Microsoft recommends using the Audit/Enforce methodology for controls with an Audit mode, and [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates) for those that do not, with a moderate timeline that -is anticipated to be slightly longer than the process in SECCON 5. +is anticipated to be slightly longer than the process in level 5. | Feature Set | Feature | Description | |-------------------------------------------------------------|-------------------------------------------------------|----------------| @@ -196,7 +196,7 @@ is anticipated to be slightly longer than the process in SECCON 5. ## Behaviors -The behaviors recommended in SECCON 4 implement a more sophisticated security +The behaviors recommended in level 4 implement a more sophisticated security process. While they may require a more sophisticated organization, they enforce a level of security more commensurate with the risks facing users with access to sensitive information. diff --git a/windows/security/threat-protection/windows-security-configuration-framework/level-5-enterprise-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-5-enterprise-security.md index 7e92159bd8..e3e8a6598b 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/level-5-enterprise-security.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/level-5-enterprise-security.md @@ -1,6 +1,6 @@ --- -title: SECCON 5 Enterprise Security -description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +title: Level 5 enterprise security configuration +description: Describes the policies, controls, and organizational behaviors for Windows security configuration framework level 5 enterprise security configuration. keywords: virtualization, security, malware ms.prod: w10 ms.mktglfcycl: deploy @@ -14,18 +14,18 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# SECCON 5 security configuration for enterprise security +# Level 5 enterprise security configuration **Applies to** - Windows 10 -SECCON 5 is the minimum security configuration for an enterprise device. -Microsoft recommends the following configuration for SECCON 5 devices. +Level 5 is the minimum security configuration for an enterprise device. +Microsoft recommends the following configuration for level 5 devices. ## Policies -The policies in SECCON 5 enforce a reasonable security level while minimizing the impact to users or to applications. +The policies in level 5 enforce a reasonable security level while minimizing the impact to users or to applications. Microsoft recommends using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates) for these security configurations and controls, noting that the timeline can generally be short given the limited potential impact of the security controls. ### Security Template Policies @@ -200,7 +200,7 @@ Microsoft recommends using [the rings methodology](https://docs.microsoft.com/wi ### LAPS -Download and install the [Microsoft Local Admin Password Solution](https://www.microsoft.com/download/details.aspx?id=46899). +Download and install the [Microsoft Local Admin Password Solution (LAPS)](https://www.microsoft.com/download/details.aspx?id=46899). | Feature | Policy Setting | Policy Value | Description | |---------|----------------------------------------|--------------|-------------------------------| @@ -225,18 +225,18 @@ Download and install the [Microsoft Local Admin Password Solution](https://www.m ## Controls -The controls enabled in SECCON 5 enforce a reasonable security level while minimizing the impact to users and applications. +The controls enabled in level 5 enforce a reasonable security level while minimizing the impact to users and applications. | Feature | Config | Description | |-----------------------------------|-------------------------------------|--------------------| | [Windows Defender ATP EDR](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/overview-endpoint-detection-response) | Deployed to all devices | The Windows Defender ATP endpoint detection and response (EDR) provides actionable and near real-time detection of advanced attacks. EDR helps security analysts , and aggregates alerts with the same attack techniques or attributed to the same attacker into an an entity called an *incident*. An incident helps analysts prioritize alerts, collectively investigate the full scope of a breach, and respond to threats. Windows Defender ATP EDR is not expected to impact users or applications, and it can be deployed to all devices in a single step. | -| [Windows Defender Credential Guard](https://docs.microsoft.com/windows/security/identity-protection/credential-guard/credential-guard) | Enabled for all compatible hardware | Windows Defender Credential Guard uses virtualization-based security to isolate secrets so that only privileged system software can access them. Unauthorized access to these secrets can lead to credential theft attacks, such as Pass-the-Hash or Pass-The-Ticket. Windows Defender Credential Guard prevents these attacks by protecting NTLM password hashes, Kerberos Ticket Granting Tickets (TGTs), and credentials stored by applications as domain credentials. There is a small risk to application compatibility, as [applications will break](https://docs.microsoft.com/windows/security/identity-protection/credential-guard/credential-guard-requirements#application-requirements) if they require NTLMv1, Kerberos DES encryption, Kerberos unconstrained delegation, or extracting the Keberos TGT. As such, Microsoft recommends deploying Credential Guard using the ring methodology. | +| [Windows Defender Credential Guard](https://docs.microsoft.com/windows/security/identity-protection/credential-guard/credential-guard) | Enabled for all compatible hardware | Windows Defender Credential Guard uses virtualization-based security to isolate secrets so that only privileged system software can access them. Unauthorized access to these secrets can lead to credential theft attacks, such as Pass-the-Hash or Pass-The-Ticket. Windows Defender Credential Guard prevents these attacks by protecting NTLM password hashes, Kerberos Ticket Granting Tickets (TGTs), and credentials stored by applications as domain credentials. There is a small risk to application compatibility, as [applications will break](https://docs.microsoft.com/windows/security/identity-protection/credential-guard/credential-guard-requirements#application-requirements) if they require NTLMv1, Kerberos DES encryption, Kerberos unconstrained delegation, or extracting the Keberos TGT. As such, Microsoft recommends deploying Credential Guard using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | | [Microsoft Edge](https://docs.microsoft.com/microsoft-edge/deploy/) | Default browser | Microsoft Edge in Windows 10 provides better security than Internet Explorer 11 (IE11). While you may still need to leverage IE11 for compatibility with some sites, Microsoft recommends configuring Microsoft Edge as the default browser, and building an Enterprise Mode Site List to redirect to IE11 only for those sites that require it. Microsoft recommends leveraging either Windows Analytics or Enterprise Site Discovery to build the initial Enterprise Mode Site List, and then gradually deploying this configuration using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | | [Windows Defender Application Guard](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-guard/wd-app-guard-overview) | Enabled on compatible hardware | Windows Defender Application Guard uses a hardware isolation approach. If an employee goes to an untrusted site through either Microsoft Edge or Internet Explorer, Microsoft Edge opens the site in an isolated container, which is separate from the host operating system and enabled by Hyper-V. If the untrusted site turns out to be malicious, the isolated container protects the host PC, and the attacker can't get to your enterprise data. There is a small risk to application compatibility, as some applications may require interaction with the host PC but may not yet be on the list of trusted web sites for Application Guard. Microsoft recommends leveraging either Windows Analytics or Enterprise Site Discovery to build the initial Network Isolation Settings, and then gradually deploying this configuration using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | ## Behaviors -The behaviors recommended in SECCON 5 enforce a reasonable security level while minimizing the impact to users or to applications. +The behaviors recommended in level 5 enforce a reasonable security level while minimizing the impact to users or to applications. | Feature | Config | Description | |---------|-------------------|-------------| From 3e7801984ae45b11467b403c39e4863e5ed3d5c0 Mon Sep 17 00:00:00 2001 From: Russ Rimmerman Date: Tue, 9 Apr 2019 13:50:08 -0500 Subject: [PATCH 137/349] Update windows-analytics-FAQ-troubleshooting.md Pointing to original source as blog consolidation has caused the link to no longer work. These instructions could also ultimately be included in the docs since the screenshots above already show the option to report on devices prior to them showing up. --- .../deployment/update/windows-analytics-FAQ-troubleshooting.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 48fcd8eb4c..c1f447026d 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -53,7 +53,7 @@ If you've followed the steps in the [Enrolling devices in Windows Analytics](win In Log Analytics, go to **Settings > Connected sources > Windows telemetry** and verify that you are subscribed to the Windows Analytics solutions you intend to use. -Even though devices can take 2-3 days after enrollment to show up due to latency in the system, you can now verify the status of your devices with a few hours of running the deployment script as described in [You can now check on the status of your computers within hours of running the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/) on the Windows Analytics blog. +Even though devices can take 2-3 days after enrollment to show up due to latency in the system, you can now verify the status of your devices within a few hours of running the deployment script as described in [You can now check on the status of your computers within hours of running the deployment script](https://techcommunity.microsoft.com/t5/Windows-Analytics-Blog/You-can-now-check-on-the-status-of-your-computers-within-hours/ba-p/187213) on the Tech Community Blog. >[!NOTE] > If you generate the status report and get an error message saying "Sorry! We’re not recognizing your Commercial Id," go to **Settings > Connected sources > Windows telemetry** remove the Upgrade Readiness solution, and then re-add it. From 19f8349262f0b67b802fe0f0175310f5b481eee2 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 9 Apr 2019 11:53:10 -0700 Subject: [PATCH 138/349] eits --- .../level-2-enterprise-devops-security.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-security-configuration-framework/level-2-enterprise-devops-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-2-enterprise-devops-security.md index 78f183b8b3..3de02c1510 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/level-2-enterprise-devops-security.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/level-2-enterprise-devops-security.md @@ -1,5 +1,5 @@ --- -title: Level 2 enterprise dev/ops security configuration +title: Level 2 enterprise dev/ops security workstation configuration description: Describes the policies, controls, and organizational behaviors for Windows security configuration framework level 2 enterprise dev/ops security configuration. keywords: virtualization, security, malware ms.prod: w10 @@ -14,7 +14,7 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# Level 2 enterprise dev/ops security configuration +# Level 2 enterprise dev/ops workstation security configuration **Applies to** From 1734ca518b0a2cffbb7a029080d1ed7f6e91a2ef Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 9 Apr 2019 11:53:17 -0700 Subject: [PATCH 139/349] edits --- .../level-1-enterprise-administrator-security.md | 4 ++-- .../windows-security-configuration-framework.md | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-security-configuration-framework/level-1-enterprise-administrator-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-1-enterprise-administrator-security.md index 9c4bd61995..bc0e695034 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/level-1-enterprise-administrator-security.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/level-1-enterprise-administrator-security.md @@ -1,5 +1,5 @@ --- -title: Level 1 enterprise administrator security +title: Level 1 enterprise administrator workstation security description: Describes the policies, controls, and organizational behaviors for Windows security configuration framework level 1 enterprise administrator security configuration. keywords: virtualization, security, malware ms.prod: w10 @@ -14,7 +14,7 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# Level 1 enterprise administrator security configuration +# Level 1 enterprise administrator workstation security configuration **Applies to** diff --git a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md index cc6da3108b..397806aeb4 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md @@ -1,6 +1,6 @@ --- -title: Windows Security Configuration Framework -description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +title: Windows security configuration framework +description: Describes the policies, controls, and organizational behaviors for Windows security configuration framework . keywords: virtualization, security, malware ms.prod: w10 ms.mktglfcycl: deploy @@ -27,8 +27,8 @@ Because of this, with each release of Windows, Microsoft publishes [Windows secu However, many organizations have discovered that this baseline sets a very high bar. While appropriate for organizations with very high security needs such as those persistently targeted by Advanced Persistent Threats, some organizations have found that the cost of navigating the potential compatibility impact of this configuration is prohibitively expensive given their risk appetite. They can’t justify the investment in that very high level of security with an ROI. -Assuch, Microsoft is introducing a new taxonomy for security configurations for Windows 10: Security Configuration Framework. +As such, Microsoft is introducing a new taxonomy for security configurations for Windows 10. The security configuration framework organizes devices into one of 5 distinct security configurations. ![SECCON Framework](./../images/seccon-framework.png) From a4dd9b7de94c29e4d35eb4680e07d8be166f474f Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 9 Apr 2019 11:58:45 -0700 Subject: [PATCH 140/349] edits --- .../windows-security-compliance.md | 4 ++-- .../windows-security-configuration-framework.md | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-compliance.md b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-compliance.md index 6a59458bba..3c0522fd4b 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-compliance.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-compliance.md @@ -1,5 +1,5 @@ --- -title: Windows security compliance +title: Windows security guidance for enterprises description: This article, and the articles it links to, describe how to use Windows security baselines in your organization keywords: virtualization, security, malware ms.prod: w10 @@ -14,7 +14,7 @@ ms.topic: conceptual ms.date: 04/05/2018 --- -# Windows security compliance +# Windows security guidance for enterprises **Applies to** diff --git a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md index 397806aeb4..0b921824e1 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md @@ -1,6 +1,6 @@ --- title: Windows security configuration framework -description: Describes the policies, controls, and organizational behaviors for Windows security configuration framework . +description: Describes the policies, controls, and organizational behaviors for Windows security configuration framework. keywords: virtualization, security, malware ms.prod: w10 ms.mktglfcycl: deploy From f24b38f38b8c590379bd013300e753b595369685 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 9 Apr 2019 12:01:27 -0700 Subject: [PATCH 141/349] date --- .../microsoft-recommended-block-rules.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md b/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md index fcffa122d4..8b6d1d2ef7 100644 --- a/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md +++ b/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md @@ -6,7 +6,7 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.localizationpriority: medium author: jsuther1974 -ms.date: 03/15/2019 +ms.date: 04/09/2019 --- # Microsoft recommended block rules From 73286ba6c14ca42ac8e52af8912c44043baa8acf Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 9 Apr 2019 12:39:35 -0700 Subject: [PATCH 142/349] filled in topic node --- ...con-1-enterprise-administrator-security.md | 27 -- .../seccon-5-enterprise-security.md | 244 ------------------ ...indows-security-configuration-framework.md | 64 ----- .../TOC.md | 24 +- .../windows-security-compliance.md | 11 +- 5 files changed, 20 insertions(+), 350 deletions(-) delete mode 100644 windows/security/threat-protection/windows-seccon-framework/seccon-1-enterprise-administrator-security.md delete mode 100644 windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md delete mode 100644 windows/security/threat-protection/windows-seccon-framework/windows-security-configuration-framework.md diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-1-enterprise-administrator-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-1-enterprise-administrator-security.md deleted file mode 100644 index bf1890abdf..0000000000 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-1-enterprise-administrator-security.md +++ /dev/null @@ -1,27 +0,0 @@ ---- -title: SECCON 1 enterprise administrator security -description: This article, and the articles it links to, describe how to use the Windows SECCON framework in your organization -keywords: virtualization, security, malware -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.author: appcompatguy -author: appcompatguy -manager: dansimp -audience: ITPro -ms.collection: M365-security-compliance -ms.topic: conceptual -ms.date: 04/05/2018 ---- - -# Level 1 security configuration for enterprise administrators - -**Applies to** - -- Windows 10 - - -Administrators (particularly of identity or security systems) present the highest risk to the organization−through data theft, data alteration, or service disruption. -SECCON 1 guidance to help protect devices used by administrators is coming soon! - - diff --git a/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md b/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md deleted file mode 100644 index a29c50f1fc..0000000000 --- a/windows/security/threat-protection/windows-seccon-framework/seccon-5-enterprise-security.md +++ /dev/null @@ -1,244 +0,0 @@ ---- -title: SECCON 5 Enterprise Security -description: This article, and the articles it links to, describe how to use Windows security baselines in your organization -keywords: virtualization, security, malware -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.author: appcompatguy -author: appcompatguy -manager: dansimp -audience: ITPro -ms.collection: M365-security-compliance -ms.topic: conceptual -ms.date: 04/05/2018 ---- - -# Level 5 security configuration for enterprise security - -**Applies to** - -- Windows 10 - -SECCON 5 is the minimum security configuration for an enterprise device. -Microsoft recommends the following configuration for SECCON 5 devices. - -## Policies - -The policies in SECCON 5 enforce a reasonable security level while minimizing the impact to users or to applications. -Microsoft recommends using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates) for these security configurations and controls, noting that the timeline can generally be short given the limited potential impact of the security controls. - -### Security Template Policies - -| Feature | Policy Setting | Policy Value | Description | -|-------------------------|--------------------------------------------------------------------------------------------------|---------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| Password Policy | Enforce password history | 24 | The number of unique new passwords that must be associated with a user account before an old password can be reused. | -| Password Policy | Minimum password length | 14 | The least number of characters that a password for a user account may contain. | -| Password Policy | Password must meet complexity requirements | Enabled | Determines whether passwords must meet complexity requirements:
    1) Not contain the user's samAccountName (Account Name) value or entire displayName (Full Name value). Neither check is case sensitive.
    The samAccountName is checked in its entirety only to determine whether it is part of the password. If the samAccountName is less than three characters long, this check is skipped. The displayName is parsed for delimiters: commas, periods, dashes or hyphens, underscores, spaces, pound signs, and tabs. If any of these delimiters are found, the displayName is split and all parsed sections (tokens) are confirmed to not be included in the password. Tokens that are less than three characters are ignored, and substrings of the tokens are not checked. For example, the name "Erin M. Hagens" is split into three tokens: "Erin", "M", and "Hagens". Because the second token is only one character long, it is ignored. Therefore, this user could not have a password that included either "erin" or "hagens" as a substring anywhere in the password.
    2) Contain characters from three of the following categories:
    - Uppercase letters of European languages (A through Z, with diacritic marks, Greek and Cyrillic characters)
    - Lowercase letters of European languages (a through z, sharp-s, with diacritic marks, Greek and Cyrillic characters)
    - Base 10 digits (0 through 9)
    -Non-alphanumeric characters (special characters):
    (~!@#$%^&*_-+=`\|\\(){}[]:;"'<>,.?/)
    Currency symbols such as the Euro or British Pound are not counted as special characters for this policy setting.
    - Any Unicode character that is categorized as an alphabetic character but is not uppercase or lowercase. This includes Unicode characters from Asian languages. | -| Password Policy | Store passwords using reversible encryption | Disabled | Determines whether the operating system stores passwords using reversible encryption. | -| Security Options | Accounts: Guest account status | Disabled | Determines if the Guest account is enabled or disabled. | -| Security Options | Domain member: Disable machine account password changes | Disabled | Determines whether a domain member periodically changes its computer account password. | -| Security Options | Domain member: Maximum machine account password age | 30 | Determines how often a domain member will attempt to change its computer account password | -| Security Options | Domain member: require strong (Windows 2000 or later) session key | Enabled | Determines whether 128-bit key strength is required for encrypted secure channel data | -| Security Options | Interactive logon: Machine inactivity limit | 900 | The number of seconds of inactivity before the session is locked | -| Security Options | User Account Control: Admin approval mode for the built-in administrator | Enabled | The built-in Administrator account uses Admin Approval Mode - any operation that requires elevation of privilege will prompt to user to approve that operation | -| Security Options | User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode | Prompt for consent on the secure desktop | When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a privileged user name and password. If the user enters valid credentials, the operation continues with the user's highest available privilege. | -| Security Options | User Account Control: Detect application installations and prompt for elevation | Enabled | When an application installation package is detected that requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. | -| Security Options | User Account Control: Run all Administrators in admin approval mode | Enabled | This policy must be enabled, and related UAC policy settings must also be set appropriately to allow the built-in Administrator account and all other users who are members of the Administrators group to run in Admin Approval Mode. | -| Security Options | User Account Control: Virtualize file and registry write failures to per-user locations | Enabled | This policy setting controls whether application write failures are redirected to defined registry and file system locations. This policy setting mitigates applications that run as administrator and write run-time application data to %ProgramFiles%, %Windir%, %Windir%\\system32, or HKLM\\Software. | -| User Rights Assignments | Access Credential Manager as a trusted caller | No One (blank) | This setting is used by Credential Manager during Backup/Restore. No accounts should have this privilege, as it is only assigned to Winlogon. Users saved credentials might be compromised if this privilege is given to other entities. | -| User Rights Assignments | Act as part of the operating system | No One (blank) | This user right allows a process to impersonate any user without authentication. The process can therefore gain access to the same local resources as that user. | -| User Rights Assignments | Allow log on locally | Administrators; Users | Determines which users can log on to the computer | -| User Rights Assignments | Back up files and directories | Administrators | Determines which users can bypass file and directory, registry, and other persistent object permissions for the purposes of backing up the system | -| User Rights Assignments | Create a pagefile | Administrators | Determines which users and groups can call an internal application programming interface (API) to create and change the size of a page file | -| User Rights Assignments | Create a token object | No One (blank) | Determines which accounts can be used by processes to create a token that can then be used to get access to any local resources when the process uses an internal application programming interface (API) to create an access token. | -| User Rights Assignments | Create global objects | Administrators; LOCAL SERVICE; NETWORK SERVICE; SERVICE | This security setting determines whether users can create global objects that are available to all sessions. | -| User Rights Assignments | Create permanent shared objects | No One (blank) | Determines which accounts can be used by processes to create a directory object using the object manager | -| User Rights Assignments | Create symbolic links | Administrators | Determines if the user can create a symbolic link from the computer he is logged on to | -| User Rights Assignments | Debug programs | Administrators | Determines which users can attach a debugger to any process or to the kernel. Developers who are debugging their own applications do not need to be assigned this user right. Developers who are debugging new system components will need this user right to be able to do so. This user right provides complete access to sensitive and critical operating system components. | -| User Rights Assignments | Deny access to this computer from the network | Guests; NT AUTHORITY\\Local Account | Determines which users are prevented from accessing a computer over the network. This policy setting supersedes the Access this computer from the network policy setting if a user account is subject to both policies. | -| User Rights Assignments | Deny log on locally | Guests | Determines which users are prevented from logging on at the computer. This policy setting supersedes the Allow log on locally policy setting if an account is subject to both policies. | -| User Rights Assignments | Deny log on through Remote Desktop Services | Guests; NT AUTHORITY\\Local Account | Determines which users and groups are prohibited from logging on as a Remote Desktop Services client | -| User Rights Assignments | Force shutdown from a remote system | Administrators | Determines which users can shut down a computer from a remote location on the network. Misuse of this user right can result in a denial of service. | -| User Rights Assignments | Increase scheduling priority | Administrators | Determines which accounts can use a process with Write Property access to another process to increase the execution priority assigned to the other process. A user with this privilege can change the scheduling priority of a process through the Task Manager user interface. | -| User Rights Assignments | Load and unload device drivers | Administrators | Determines which users can dynamically load and unload device drivers or other code in to kernel mode. This user right does not apply to Plug and Play device drivers. | -| User Rights Assignments | Manage auditing and security log | Administrators | Determines which users can specify object access auditing options for individual resources, such as files, Active Directory objects, and registry keys. | -| User Rights Assignments | Modify firmware environment variables | Administrators | Determines who can modify firmware environment values. Firmware environment variables are settings stored in the nonvolatile RAM of non-x86-based computers. The effect of the setting depends on the processor. | -| User Rights Assignments | Restore files and directories | Administrators | Determines which users can bypass file, directory, registry, and other persistent objects permissions when restoring backed up files and directories, and determines which users can set any valid security principal as the owner of an object | -| User Rights Assignments | Take ownership of files or other objects | Administrators | Determines which users can take ownership of any securable object in the system, including Active Directory objects, files and folders, printers, registry keys, processes, and threads | - -### Advanced Audit Policies - -| Feature | Policy Setting | Policy Value | Description | -|--------------------|---------------------------------------|---------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| Account Logon | Audit Credential Validation | Success and Failure | Audit events generated by validation tests on user account logon credentials. Occurs only on the computer that is authoritative for those credentials. | -| Account Management | Audit Security Group Management | Success | Audit events generated by changes to security groups, such as creating, changing or deleting security groups, adding or removing members, or changing group type. | -| Account Management | Audit User Account Management | Success and Failure | Audit changes to user accounts. Events include creating, changing, deleting user accounts; renaming, disabling, enabling, locking out, or unlocking accounts; setting or changing a user account’s password; adding a security identifier (SID) to the SID History of a user account; configuring the Directory Services Restore Mode password; changing permissions on administrative user accounts; backing up or restoring Credential Manager credentials | -| Detailed Tracking | Audit PNP Activity | Success | Audit when plug and play detects an external device | -| Detailed Tracking | Audit Process Creation | Success | Audit events generated when a process is created or starts; the name of the application or user that created the process is also audited | -| Logon/ Logoff | Audit Account Lockout | Failure | Audit events generated by a failed attempt to log on to an account that is locked out | -| Logon/ Logoff | Audit Group Membership | Success | Audit the group membership information in the user's logon token. Events in this subcategory are generated on the computer on which a logon session is created. For an interactive logon, the security audit event is generated on the computer that the user logged on to. For a network logon, such as accessing a shared folder on the network, the security audit event is generated on the computer hosting the resource. | -| Logon/ Logoff | Audit Logon | Success and Failure | Audit events generated by user account logon attempts on the computer | -| Logon/ Logoff | Audit Other Logon / Logoff Events | Success and Failure | Audit other logon/logoff-related events that are not covered in the “Logon/Logoff” policy setting, such as Terminal Services session disconnections, new Terminal Services sessions locking and unlocking a workstation, invoking or dismissing a screen saver, detection of a Kerberos replay attack, or access to a wireless network granted to a user or computer account | -| Logon/ Logoff | Audit Special Logon | Success | Audit events generated by special logons such as the use of a special logon, which is a logon that has administrator-equivalent privileges and can be used to elevate a process to a higher level, or a logon by a member of a Special Group (Special Groups enable you to audit events generated when a member of a certain group has logged on to your network) | -| Object Access | Audit Detailed File Share | Failure | Audit attempts to access files and folders on a shared folder; the Detailed File Share setting logs an event every time a file or folder is accessed | -| Object Access | Audit File Share | Success and Failure | Audit attempts to access a shared folder; an audit event is generated when an attempt is made to access a shared folder | -| Object Access | Audit Other Object Access Events | Success and Failure | Audit events generated by the management of task scheduler jobs or COM+ objects | -| Object Access | Audit Removable Storage | Success and Failure | Audit user attempts to access file system objects on a removable storage device. A security audit event is generated only for all objects for all types of access requested. | -| Policy Change | Audit Audit Policy Change | Success | Audit changes in the security audit policy settings | -| Policy Change | Audit Authentication Policy Change | Success | Audit events generated by changes to the authentication policy | -| Policy Change | Audit MPSSVC Rule-Level Policy Change | Success and Failure | Audit events generated by changes in policy rules used by the Microsoft Protection Service (MPSSVC). This service is used by Windows Firewall. | -| Policy Change | Audit Other Policy Change Events | Failure | Audit events generated by other security policy changes that are not audited in the policy change category, such as Trusted Platform Module (TPM) configuration changes, kernel-mode cryptographic self tests, cryptographic provider operations, cryptographic context operations or modifications, applied Central Access Policies (CAPs) changes, or boot Configuration Data (BCD) modifications | -| Privilege Use | Audit Sensitive Privilege Use | Success and Failure | Audit events generated when sensitive privileges (user rights) are used | -| System | Audit Other System Events | Success and Failure | Audit any of the following events: Startup and shutdown of the Windows Firewall service and driver, security policy processing by the Windows Firewall Service, cryptography key file and migration operations. | -| System | Audit Security State Change | Success | Audit events generated by changes in the security state of the computer such as startup and shutdown of the computer, change of system time, recovering the system from CrashOnAuditFail, which is logged after a system restarts when the security event log is full and the CrashOnAuditFail registry entry is configured. | -| System | Audit Security System Extension | Success | Audit events related to security system extensions or services | -| System | Audit System Integrity | Success and Failure | Audit events that violate the integrity of the security subsystem | - -### Windows Defender Firewall Policies - -| Feature | Policy Setting | Policy Value | Description | -|----------------------------|---------------------------------------|--------------|-------------------------------------------------------------------------------------------------------------------------------------------| -| Domain Profile / Logging | Log dropped packets | Yes | Enables logging of dropped packets for a domain connection | -| Domain Profile / Logging | Log successful connections | Yes | Enables logging of successful connections for a domain connection | -| Domain Profile / Logging | Size Limit | 16384 | Sets the firewall log file size for a domain connection | -| Domain Profile / Settings | Display a notification | No | The display of notifications to the user is enabled when a program is blocked from receiving an inbound connection in the domain profile | -| Domain Profile / State | Firewall State | On | Enables the firewall when connected to the domain profile | -| Domain Profile / State | Inbound Connections | Block | Unsolicited inbound connections for which there is no rule allowing the connection will be blocked in the domain profile | -| Private Profile / Logging | Log dropped packets | Yes | Enables logging of dropped packets for a private connection | -| Private Profile / Logging | Log successful connections | Yes | Enables logging of successful connections for a private connection | -| Private Profile / Logging | Size limit | 16384 | Sets the firewall log file size for a private connection | -| Private Profile / Settings | Display a notification | No | The display of notifications to the user is enabled when a program is blocked from receiving an inbound connection in the private profile | -| Private Profile / State | Firewall state | On | Enables the firewall when connected to the private profile | -| Private Profile / State | Inbound connections | Block | Unsolicited inbound connections for which there is no rule allowing the connection will be blocked in the private profile | -| Public Profile / Logging | Log dropped packets | Yes | Enables logging of dropped packets for a public connection | -| Public Profile / Logging | Log successful connections | Yes | Enables logging of successful connections for a public connection | -| Public Profile / Logging | Size Limit | 16384 | Sets the firewall log file size for a public connection | -| Public Profile / Settings | Apply local connection security rules | No | Ensures local connection rules will not be merged with Group Policy settings in the domain | -| Public Profile / Settings | Apply local firewall rules | No | Users cannot create new firewall rules | -| Public Profile / Settings | Display a notification | No | The display of notifications to the user is enabled when a program is blocked from receiving an inbound connection in the public profile | -| Public Profile / State | Firewall state | On | Enables the firewall when connected to the public profile | -| Public Profile / State | Inbound connections | Block | Unsolicited inbound connections for which there is no rule allowing the connection will be blocked in the public profile | - -### Computer Policies - -| Feature | Policy Setting | Policy Value | Description | -|---------------------------------------------------------------------------|------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| Network / Lanman Workstation | Enable insecure guest logons | Disabled | Determines if the SMB client will allow insecure guest logons to an SMB server | -| System / Device Guard | Turn on Virtualization Based Security | Enabled: SecureBoot and DMA Protection | Specifies whether Virtualization Based Security is enabled. Virtualization Based Security uses the Windows Hypervisor to provide support for security services. Virtualization Based Security requires Secure Boot and can optionally be enabled with the use of DMA Protections. DMA protections require hardware support and will only be enabled on correctly configured devices. | -| System / Early Launch Antimalware | Boot-Start Driver Initialization Policy | Enabled: Good, Unknown and bad but critical | Allows you to specify which boot-start drivers are initialized based on a classification determined by an Early Launch Antimalware boot-start driver. | -| System / Power Management / Sleep Settings | Require a password when a computer wakes (on battery) | Enabled | Specifies whether the user is prompted for a password when the system resumes from sleep | -| System / Power Management / Sleep Settings | Require a password when a computer wakes (plugged in) | Enabled | Specifies whether the user is prompted for a password when the system resumes from sleep | -| System / Remote Procedure Call | Restrict Unauthenticated RPC clients | Enabled: Authenticated | Controls how the RPC server runtime handles unauthenticated RPC clients connecting to RPC servers. | -| Windows Components / App runtime | Allow Microsoft accounts to be optional | Enabled | Lets you control whether Microsoft accounts are optional for Windows Store apps that require an account to sign in. This policy only affects Windows Store apps that support it. | -| Windows Components / AutoPlay Policies | Disallow Autoplay for non-volume devices | Enabled | Disallows AutoPlay for MTP devices like cameras or phones. | -| Windows Components / AutoPlay Policies | Set the default behavior for AutoRun | Enabled: Do not execute any autorun commands | Sets the default behavior for Autorun commands. | -| Windows Components / AutoPlay Policies | Turn off Autoplay | Enabled: All Drives | Allows you to turn off the Autoplay feature. | -| Windows Components / Biometrics / Facial Features | Configure enhanced anti-spoofing | Enabled | Determines whether enhanced anti-spoofing is required for Windows Hello face authentication | -| Windows Components / BitLocker Drive Encryption | Choose drive encryption method and cipher strength (Windows 10) | Enabled: XTA-AES-256 for operating system drives and fixed drives and AES-CBC-256 for removable drives | Allows you to configure the algorithm and cipher strength used by BitLocker Drive Encryption. This policy setting is applied when you turn on BitLocker. | -| Windows Components / BitLocker Drive Encryption | Disable new DMA devices when this computer is locked | Enabled | Allows you to block direct memory access (DMA) for all Thunderbolt hot pluggable PCI downstream ports until a user logs into Windows | -| Windows Components / BitLocker Drive Encryption / Operating System Drives | Allow enhanced PINs for startup | Enabled | Allows you to configure whether enhanced startup PINs are used with BitLocker | -| Windows Components / BitLocker Drive Encryption / Operating System Drives | Allow Secure Boot for integrity validation | Enabled | Allows you to configure whether Secure Boot will be allowed as the platform integrity provider for BitLocker operating system drives. | -| Windows Components / Event Log Service / Application | Specify the maximum log file size (KB) | Enabled: 32768 | Specifies the maximum size of the log file in kilobytes. | -| Windows Components / Event Log Service / Security | Specify the maximum log file size (KB) | Enabled: 196608 | Specifies the maximum size of the log file in kilobytes. | -| Windows Components / Event Log Service / System | Specify the maximum log file size (KB) | Enabled: 32768 | Specifies the maximum size of the log file in kilobytes. | -| Windows Components / Microsoft Edge | Configure Windows Defender SmartScreen | Enabled | Configure whether to turn on Windows Defender SmartScreen to provide warning messages to help protect your employees from potential phishing scams and malicious software | -| Windows Components / Windows Defender SmartScreen / Explorer | Configure Windows Defender SmartScreen | Warn and prevent bypass | Allows you to turn Windows Defender SmartScreen on or off | -| Windows Components / Microsoft Edge | Prevent bypassing Windows Defender SmartScreen prompts for files | Enabled | This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about downloading unverified files. | -| Windows Components / Windows Defender SmartScreen / Microsoft Edge | Prevent bypassing Windows Defender SmartScreen prompts for sites | Enabled | Lets you decide whether employees can override the Windows Defender SmartScreen warnings about potentially malicious websites | -| Windows Components / Windows Installer | Allow user control over installs | Disabled | Permits users to change installation options that typically are available only to system administrators | -| Windows Components / Windows Installer | Always install with elevated privileges | Disabled | Directs Windows Installer to use elevated permissions when it installs any program on the system | -| Windows Components / Windows Logon Options | Sign-in last interactive user automatically after a system-initiated restart | Disabled | Controls whether a device will automatically sign-in the last interactive user after Windows Update restarts the system | -| Windows Components / Windows Remote Management (WinRM) / WinRM Client | Allow unencrypted traffic | Disabled | Manage whether the Windows Remote Management (WinRM) client sends and receives unencrypted messages over the network | -| Windows Components / Windows Remote Management (WinRM) / WinRM Service | Allow unencrypted traffic | Disabled | Manage whether the Windows Remote Management (WinRM) service sends and receives unencrypted messages over the network. | - -### Windows Defender Antivirus Policies - -| Feature | Policy Setting | Policy Value | Description | -|------------------------------------------------------------------------|-----------------------------------------------------------|----------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| Windows Components / Windows Defender Antivirus | Turn off Windows Defender Antivirus | Disabled | Turns off Windows Defender Antivirus | -| Windows Components / Windows Defender Antivirus | Configure detection for potentially unwanted applications | Enabled: Audit | Enable or disable detection for potentially unwanted applications. You can choose to block, audit, or allow when potentially unwanted software is being downloaded or attempts to install itself on your computer. | -| Windows Components / Windows Defender Antivirus / MAPS | Join Microsoft MAPS | Enabled: Advanced MAPS | Allows you to join Microsoft MAPS. Microsoft MAPS is the online community that helps you choose how to respond to potential threats. The community also helps stop the spread of new malicious software infections. | -| Windows Components / Windows Defender Antivirus / MAPS | Send file samples when further analysis is required | Enabled: Send safe samples | Configures behavior of samples submission when opt-in for MAPS telemetry is set | -| Windows Components / Windows Defender Antivirus / Real-time Protection | Turn off real-time protection | Disabled | Turns off real-time protection prompts for known malware detection | -| Windows Components / Windows Defender Antivirus / Real-time Protection | Turn on behavior monitoring | Enabled | Allows you to configure behavior monitoring. | -| Windows Components / Windows Defender Antivirus / Scan | Scan removable drives | Enabled | Allows you to manage whether to scan for malicious software and unwanted software in the contents of removable drives, such as USB flash drives, when running a full scan. | -| Windows Components / Windows Defender Antivirus / Scan | Specify the interval to run quick scans per day | 24 | Allows you to specify an interval at which to perform a quick scan. The time value is represented as the number of hours between quick scans. Valid values range from 1 (every hour) to 24 (once per day). | -| Windows Components / Windows Defender Antivirus / Scan | Turn on e-mail scanning | Enabled | Allows you to configure e-mail scanning. When e-mail scanning is enabled, the engine will parse the mailbox and mail files, according to their specific format, in order to analyze the mail bodies and attachments | - -### User Policies - -| Feature | Policy Setting | Policy Value | Description | -|----------------------------------------|-------------------------------------------------------------|--------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| Start Menu and Taskbar / Notifications | Turn off toast notifications on the lock screen | Enabled | Turns off toast notifications on the lock screen. | -| Windows Components / Cloud Content | Do not suggest third-party content in the Windows spotlight | Enabled | Windows spotlight features like lock screen spotlight, suggested apps in Start menu or Windows tips will no longer suggest apps and content from third-party software publishers | - -### IE Computer Policies - -| Feature | Policy Setting | Policy Value | Description | -|---------------------------------------------------------------------------------------------------------------------|---------------------------------------------------------|----------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| Windows Components / Internet Explorer | Prevent managing SmartScreen Filter | Enabled: On | Prevents the user from managing SmartScreen Filter, which warns the user if the website being visited is known for fraudulent attempts to gather personal information through "phishing," or is known to host malware. | -| Windows Components / Internet Explorer / Internet Control Panel / Advanced Page | Check for server certificate revocation | Enabled | Allows you to manage whether Internet Explorer will check revocation status of servers' certificates | -| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | -| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Turn on Cross-Site Scripting Filter | Enabled: Enable | Controls whether the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injections into websites in this zone. | -| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Turn on Protected Mode | Enabled: Enable | Allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system. | -| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Turn on SmartScreen Filter scan | Enabled: Enable | Controls whether SmartScreen Filter scans pages in this zone for malicious content. | -| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Use Pop-up Blocker | Enabled: Enable | Allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not blocked. | -| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Intranet Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | -| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Intranet Zone | Java permissions | Enabled: High Safety | Allows you to manage permissions for Java applets. High Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running. | -| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Local Machine Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | -| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-down Internet Zone | Turn on SmartScreen Filter scan | Enabled: Enable | Controls whether SmartScreen Filter scans pages in this zone for malicious content. | -| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-Down Restricted Sites Zone | Turn on SmartScreen Filter scan | Enabled: Enable | Controls whether SmartScreen Filter scans pages in this zone for malicious content. | -| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | -| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Turn on Cross-Site Scripting Filter | Enabled: Enable | Controls whether the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injections into websites in this zone. | -| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Turn on Protected Mode | Enabled: Enable | Allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system. | -| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Turn on SmartScreen Filter scan | Enabled: Enable | Controls whether SmartScreen Filter scans pages in this zone for malicious content. | -| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-Down Trusted Sites Zone | Java permissions | Enabled: Enable | | -| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Use Pop-up Blocker | Enabled: Enable | Allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not blocked. | -| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Trusted Sites Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | -| Windows Components / Internet Explorer / Security Features | Allow fallback to SSL 3.0 (Internet Explorer) | Enabled: No sites | Allows you to block an insecure fallback to SSL 3.0. When this policy is enabled, Internet Explorer will attempt to connect to sites using SSL 3.0 or below when TLS 1.0 or greater fails. | - -### LAPS - -Download and install the [Microsoft Local Admin Password Solution](https://www.microsoft.com/download/details.aspx?id=46899). - -| Feature | Policy Setting | Policy Value | Description | -|---------|----------------------------------------|--------------|-------------------------------| -| LAPS | Enable local admin password management | Enabled | Activates LAPS for the device | - -### Custom Policies - -| Feature | Policy Setting | Policy Value | Description | -|-----------------------------------------------------------------------|-----------------------------------------------------------|--------------|---------------------------------------------------------------------------------------| -| Computer Configuration / Administrative Templates / MS Security Guide | Apply UAC restrictions to local accounts on network logon | Enabled | Filters the user account token for built-in administrator accounts for network logons | - -### Services - -| Feature | Policy Setting | Policy Value | Description | -|----------------|-----------------------------------|--------------|-----------------------------------------------------------------------------------| -| Scheduled Task | XblGameSaveTask | Disabled | Syncs save data for Xbox Live save-enabled games | -| Services | Xbox Accessory Management Service | Disabled | Manages connected Xbox accessories | -| Services | Xbox Game Monitoring | Disabled | Monitors Xbox games currently being played | -| Services | Xbox Live Auth Manager | Disabled | Provides authentication and authorization services for interactive with Xbox Live | -| Services | Xbox Live Game Save | Disabled | Syncs save data for Xbox live save enabled games | -| Services | Xbox Live Networking Service | Disabled | Supports the Windows.Networking.XboxLive API | - -## Controls - -The controls enabled in SECCON 5 enforce a reasonable security level while minimizing the impact to users and applications. - -| Feature | Config | Description | -|-----------------------------------|-------------------------------------|--------------------| -| [Windows Defender ATP EDR](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/overview-endpoint-detection-response) | Deployed to all devices | The Windows Defender ATP endpoint detection and response (EDR) provides actionable and near real-time detection of advanced attacks. EDR helps security analysts , and aggregates alerts with the same attack techniques or attributed to the same attacker into an an entity called an *incident*. An incident helps analysts prioritize alerts, collectively investigate the full scope of a breach, and respond to threats. Windows Defender ATP EDR is not expected to impact users or applications, and it can be deployed to all devices in a single step. | -| [Windows Defender Credential Guard](https://docs.microsoft.com/windows/security/identity-protection/credential-guard/credential-guard) | Enabled for all compatible hardware | Windows Defender Credential Guard uses virtualization-based security to isolate secrets so that only privileged system software can access them. Unauthorized access to these secrets can lead to credential theft attacks, such as Pass-the-Hash or Pass-The-Ticket. Windows Defender Credential Guard prevents these attacks by protecting NTLM password hashes, Kerberos Ticket Granting Tickets (TGTs), and credentials stored by applications as domain credentials. There is a small risk to application compatibility, as [applications will break](https://docs.microsoft.com/windows/security/identity-protection/credential-guard/credential-guard-requirements#application-requirements) if they require NTLMv1, Kerberos DES encryption, Kerberos unconstrained delegation, or extracting the Keberos TGT. As such, Microsoft recommends deploying Credential Guard using the ring methodology. | -| [Microsoft Edge](https://docs.microsoft.com/microsoft-edge/deploy/) | Default browser | Microsoft Edge in Windows 10 provides better security than Internet Explorer 11 (IE11). While you may still need to leverage IE11 for compatibility with some sites, Microsoft recommends configuring Microsoft Edge as the default browser, and building an Enterprise Mode Site List to redirect to IE11 only for those sites that require it. Microsoft recommends leveraging either Windows Analytics or Enterprise Site Discovery to build the initial Enterprise Mode Site List, and then gradually deploying this configuration using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | -| [Windows Defender Application Guard](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-guard/wd-app-guard-overview) | Enabled on compatible hardware | Windows Defender Application Guard uses a hardware isolation approach. If an employee goes to an untrusted site through either Microsoft Edge or Internet Explorer, Microsoft Edge opens the site in an isolated container, which is separate from the host operating system and enabled by Hyper-V. If the untrusted site turns out to be malicious, the isolated container protects the host PC, and the attacker can't get to your enterprise data. There is a small risk to application compatibility, as some applications may require interaction with the host PC but may not yet be on the list of trusted web sites for Application Guard. Microsoft recommends leveraging either Windows Analytics or Enterprise Site Discovery to build the initial Network Isolation Settings, and then gradually deploying this configuration using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | - -## Behaviors - -The behaviors recommended in SECCON 5 enforce a reasonable security level while minimizing the impact to users or to applications. - -| Feature | Config | Description | -|---------|-------------------|-------------| -| OS security updates | Deploy Windows Quality Updates within 7 days of release | As the time between the release of a patch and an exploit based on the reverse engineering of that patch continues to shrink, a critical aspect of security hygiene is having an engineering process that quickly validates and deploys Quality Updates that address security vulnerabilities. | - diff --git a/windows/security/threat-protection/windows-seccon-framework/windows-security-configuration-framework.md b/windows/security/threat-protection/windows-seccon-framework/windows-security-configuration-framework.md deleted file mode 100644 index 5ec7880a83..0000000000 --- a/windows/security/threat-protection/windows-seccon-framework/windows-security-configuration-framework.md +++ /dev/null @@ -1,64 +0,0 @@ ---- -title: Windows Security Configuration Framework -description: This article, and the articles it links to, describe how to use Windows security baselines in your organization -keywords: virtualization, security, malware -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.author: appcompatguy -author: appcompatguy -manager: dansimp -audience: ITPro -ms.collection: M365-security-compliance -ms.topic: conceptual -ms.date: 04/05/2018 ---- - -# Introducing the Security Configuration Framework - -**Applies to** - -- Windows 10 - -Security configuration is complex. With thousands of group policies available in Windows, choosing the “best” setting is difficult. -It’s not always obvious which permutations of policies are required to implement a complete scenario, and there are often unintended consequences of some security lockdowns. - -Because of this, with each release of Windows, Microsoft publishes [Windows Security Baselines](https://docs.microsoft.com/windows/security/threat-protection/windows-security-baselines), an industry-standard configuration that is broadly known and well-tested. -However, many organizations have discovered that this baseline sets a very high bar. -While appropriate for organizations with very high security needs such as those persistently targeted by Advanced Persistent Threats, some organizations have found that the cost of navigating the potential compatibility impact of this configuration is prohibitively expensive given their risk appetite. -They can’t justify the investment in that very high level of security with an ROI. -Assuch, Microsoft is introducing a new taxonomy for Security Configurations for Windows 10: The SECCON Baselines. - -The SECCON Baselines organize devices into one of 5 distinct security configurations. - -![SECON Framework](./../images/seccon-framework.png) - -- [SECCON 5 Enterprise Security](seccon-5-enterprise-security.md) – We recommend this configuration as the minimum security configuration for an enterprise device. Recommendations for this SecCon level are generally straightforward and are designed to be deployable within 30 days. -- [SECCON 4 Enterprise High Security](seccon-4-enterprise-high-security.md) – We recommend this configuration for devices where users access sensitive or confidential information. Some of the controls may have an impact to app compat, and therefore will often go through an audit-configure-enforce workflow. Recommendations for this SecCon level are generally accessible to most organizations and are designed to be deployable within 90 days. -- [SECCON 3 Enterprise VIP Security](seccon-3-enterprise-vip-security.md) – We recommend this configuration for devices run by an organization with a larger or more sophisticated security team, or for specific users or groups who are at uniquely high risk (as one example, one organization identified users who handle data whose theft would directly and seriously impact their stock price). An organization likely to be targeted by well-funded and sophisticated adversaries should aspire to this configuration. Recommendations for this SecCon level can be complex (for example, removing local admin rights for some organizations can be a long project in and of itself) and can often go beyond 90 days. -- [SECCON 2 DevOps Workstation](seccon-2-enterprise-devops-security.md) – We recommend this configuration for developers and testers, who are an attractive target both for supply chain attacks and access to servers and systems containing high value data or where critical business functions could be disrupted. SecCon 2 guidance is coming soon! -- [SECCON 1 Administrator Workstation](seccon-1-enterprise-administrator-security.md) – Administrators (particularly of identity or security systems) present the highest risk to the organization, through data theft, data alteration, or service disruption. SecCon 1 guidance is coming soon! - - -The SECCON Baselines divide configuration into Productivity Devices and Privileged Access Workstations. This document will focus on Productivity Devices -(SECCON 5, 4, and 3). -Microsoft’s current guidance on [Privileged Access Workstations](http://aka.ms/privsec) are part of the [Securing Privileged Access roadmap](http://aka.ms/privsec). - -Microsoft recommends reviewing and categorizing your devices, and then configuring them using the prescriptive guidance for that SECCON level. -SECCON 5 should be considered the minimum baseline for an enterprise device, and Microsoft recommends increasing the protection based on both threat environment and risk appetite. - -## Security Control Classification - -The recommendations are grouped into three categories. - -![Security Control Classifications](./../images/security-control-classification.png) - - -## Security Control Deployment Methodologies - -The way Microsoft recommends implementing these controls depends on the -auditability of the control–there are two primary methodologies. - -![Security Control Deployment methodologies](./../images/security-control-deployment-methodologies.png) - - diff --git a/windows/security/threat-protection/windows-security-configuration-framework/TOC.md b/windows/security/threat-protection/windows-security-configuration-framework/TOC.md index e994f2c0ff..d305b00ebe 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/TOC.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/TOC.md @@ -1,17 +1,17 @@ -# [Windows security compliance](windows-security-compliance.md) +# [Windows security guidance for enterprises](windows-security-compliance.md) ## [Windows security baselines](windows-security-baselines.md) ### [Security Compliance Toolkit](security-compliance-toolkit-10.md) ### [Get support](get-support-for-security-baselines.md) -## [Windows SECCON framework](windows-security-configuration-framework.md) -### [Level 5 Enterprise Security](level-5-enterprise-security.md) -### [Level 4 Enterprise High Security](level-4-enterprise-high-security.md) -### [Level 3 Enterprise VIP Security](level-3-enterprise-vip-security.md) -### [Level 2 Enterprise Dev/Ops Workstation](level-2-enterprise-devops-security.md) -### [Level 1 Enterprise Administrator Workstation](level-1-enterprise-administrator-security.md) -##Windows Security Blog Posts -### [Sticking with Well-Known and Proven Solutions](windows-security-blog/sticking-with-well-known-and-proven-solutions.md) -### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-security-blog/why-were-not-recommending-fips-mode-anymore.md) -### [Configuring Account Lockout](windows-security-blog/configuring-account-lockout.md) -### [Blocking Remote Use of Local Accounts](windows-security-blog/blocking-remote-use-of-local-accounts.md) +## [Windows security configuration framework](windows-security-configuration-framework.md) +### [Level 5 enterprise security](level-5-enterprise-security.md) +### [Level 4 enterprise high security](level-4-enterprise-high-security.md) +### [Level 3 enterprise VIP security](level-3-enterprise-vip-security.md) +### [Level 2 enterprise dev/ops workstation](level-2-enterprise-devops-security.md) +### [Level 1 enterprise administrator aorkstation](level-1-enterprise-administrator-security.md) +##Windows security articles +### [Sticking with well-known and proven solutions](windows-security-blog/sticking-with-well-known-and-proven-solutions.md) +### [Why we’re not recommending "FIPS Mode" anymore](windows-security-blog/why-were-not-recommending-fips-mode-anymore.md) +### [Configuring account lockout](windows-security-blog/configuring-account-lockout.md) +### [Blocking remote use of local accounts](windows-security-blog/blocking-remote-use-of-local-accounts.md) ### [Dropping the “Untrusted Font Blocking” setting](windows-security-blog/dropping-the-untrusted-font-blocking-setting.md) \ No newline at end of file diff --git a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-compliance.md b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-compliance.md index 3c0522fd4b..aaf62986eb 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-compliance.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-compliance.md @@ -1,6 +1,6 @@ --- title: Windows security guidance for enterprises -description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +description: This article describes how to use Windows security baselines in your organization keywords: virtualization, security, malware ms.prod: w10 ms.mktglfcycl: deploy @@ -19,5 +19,10 @@ ms.date: 04/05/2018 **Applies to** - Windows 10 -- Windows Server 2016 -- Office 2016 + +The topics in this section provide security configuration guidelines for enterprises. You can use these guidelines to deploy security configuration settings and to ensure that user and device settings comply with enterprise policies. + +| Capability | Description | +|------------|-------------| +| [Windows security baselines](windows-security-baselines.md) | Microsoft-recommended configuration settings and their security impact. These settings are based on feedback from Microsoft security engineering teams, product groups, partners, and customers. | +| [Windows security configuration framework](windows-security-configuration-framework.md) | Five distinct security configurations for more granular control over productivity devices and privileged access workstations. | From 2c70332753ed7eba48f553fae64f2a69b956fa51 Mon Sep 17 00:00:00 2001 From: illfated Date: Tue, 9 Apr 2019 21:45:05 +0200 Subject: [PATCH 143/349] Minor typo correction in enable-attack-surface-reduction.md - `conjuction` => conjunction Ref. #3170 (previous attempt) --- .../enable-attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-exploit-guard/enable-attack-surface-reduction.md b/windows/security/threat-protection/windows-defender-exploit-guard/enable-attack-surface-reduction.md index c5d238cf59..73bc1915d3 100644 --- a/windows/security/threat-protection/windows-defender-exploit-guard/enable-attack-surface-reduction.md +++ b/windows/security/threat-protection/windows-defender-exploit-guard/enable-attack-surface-reduction.md @@ -17,7 +17,7 @@ ms.author: v-anbic [Attack surface reduction rules](attack-surface-reduction-exploit-guard.md) help prevent actions and apps that malware often uses to infect computers. You can set attack surface reduction rules for computers running Windows 10 or Windows Server 2019. -To use ASR rules, you need either a Windows 10 Enterprise E3 or E5 license. We recommend an E5 license so you can take advantage of the advanced monitoring and reporting capabilities available in Windows Defender Advanced Threat Protection (Windows Defender ATP). These advanced capabilities aren't available with an E3 license, but you can develop your own monitoring and reporting tools to use in conjuction with ASR rules. +To use ASR rules, you need either a Windows 10 Enterprise E3 or E5 license. We recommend an E5 license so you can take advantage of the advanced monitoring and reporting capabilities available in Windows Defender Advanced Threat Protection (Windows Defender ATP). These advanced capabilities aren't available with an E3 license, but you can develop your own monitoring and reporting tools to use in conjunction with ASR rules. ## Exclude files and folders from ASR rules From e82cd401fb6b48a805c677677e9069c84b87263e Mon Sep 17 00:00:00 2001 From: Malin De Silva Date: Wed, 10 Apr 2019 01:57:58 +0530 Subject: [PATCH 144/349] Removed Windows 10 Roadmap link Removed as suggested in issue 1030 --- windows/whats-new/index.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/whats-new/index.md b/windows/whats-new/index.md index a48b1bcd0e..1798631ea3 100644 --- a/windows/whats-new/index.md +++ b/windows/whats-new/index.md @@ -29,7 +29,6 @@ Windows 10 provides IT professionals with advanced protection against modern sec ## Learn more -- [Windows 10 roadmap](https://www.microsoft.com/en-us/WindowsForBusiness/windows-roadmap) - [Windows 10 release information](https://technet.microsoft.com/windows/release-info) - [Windows 10 update history](https://support.microsoft.com/help/12387/windows-10-update-history) - [Windows 10 content from Microsoft Ignite](https://go.microsoft.com/fwlink/p/?LinkId=613210) From 526ab0a6b08ffb941cddde9ab852c80dbed6bb19 Mon Sep 17 00:00:00 2001 From: Malin De Silva Date: Wed, 10 Apr 2019 02:03:19 +0530 Subject: [PATCH 145/349] Fixed grammar issues Links to detailed explanations of commands are available in the Related Topics section. --- windows/deployment/usmt/usmt-migrate-user-accounts.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/usmt/usmt-migrate-user-accounts.md b/windows/deployment/usmt/usmt-migrate-user-accounts.md index b5da93fe54..94224b2a0c 100644 --- a/windows/deployment/usmt/usmt-migrate-user-accounts.md +++ b/windows/deployment/usmt/usmt-migrate-user-accounts.md @@ -25,7 +25,7 @@ By default, all users are migrated. The only way to specify which users to inclu - [To migrate two domain accounts (User1 and User2) and move User1 from the Contoso domain to the Fabrikam domain](#bkmk-migratemoveuserone) ## To migrate all user accounts and user settings -Links to detailed explanations on commands are available in Related Topics section. +Links to detailed explanations of commands are available in the Related Topics section. 1. Log on to the source computer as an administrator, and specify the following in a **Command-Prompt** window: @@ -49,7 +49,7 @@ Links to detailed explanations on commands are available in Related Topics secti   ## To migrate two domain accounts (User1 and User2) -Links to detailed explanations on commands are available in Related Topics section. +Links to detailed explanations of commands are available in the Related Topics section. 1. Log on to the source computer as an administrator, and specify: @@ -62,7 +62,7 @@ Links to detailed explanations on commands are available in Related Topics secti `loadstate \\server\share\migration\mystore /i:migdocs.xml /i:migapp.xml` ## To migrate two domain accounts (User1 and User2) and move User1 from the Contoso domain to the Fabrikam domain -Links to detailed explanations on commands are available in Related Topics section. +Links to detailed explanations of commands are available in the Related Topics section. 1. Log on to the source computer as an administrator, and type the following at the command-line prompt: From d7e0bbe7e4f0766628ae6278323d8ea4f9aebef7 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 9 Apr 2019 13:42:14 -0700 Subject: [PATCH 146/349] fixed path --- windows/security/threat-protection/TOC.md | 30 +++++++++++------------ 1 file changed, 15 insertions(+), 15 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 2fe57b0501..fefb79462d 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -1019,22 +1019,22 @@ ###### [Take ownership of files or other objects](security-policy-settings/take-ownership-of-files-or-other-objects.md) -### [Windows security compliance](windows-security-congiguration-framework/windows-security-compliance.md) -#### [Windows security baselines](windows-security-congiguration-framework/windows-security-baselines.md) -##### [Security Compliance Toolkit](windows-security-congiguration-framework/security-compliance-toolkit-10.md) -##### [Get support](windows-security-congiguration-framework/get-support-for-security-baselines.md) -#### [Windows SECCON framework](windows-security-congiguration-framework/windows-security-configuration-framework.md) -##### [SECCON 1 enterprise administrator security](windows-security-congiguration-framework/level-1-enterprise-administrator-security.md) -##### [SECCON 2 enterprise dev/ops security](windows-security-congiguration-framework/level-2-enterprise-devops-security.md) -##### [SECCON 3 enterprise VIP security](windows-security-congiguration-framework/level-3-vip-enterprise-security.md) -##### [SECCON 4 enterprise high security](windows-security-congiguration-framework/level-4-high-enterprise-security.md) -##### [SECCON 5 enterprise security](windows-security-congiguration-framework/level-5-enterprise-security.md) +### [Windows security compliance](windows-security-configuration-framework/windows-security-compliance.md) +#### [Windows security baselines](windows-security-configuration-framework/windows-security-baselines.md) +##### [Security Compliance Toolkit](windows-security-configuration-framework/security-compliance-toolkit-10.md) +##### [Get support](windows-security-configuration-framework/get-support-for-security-baselines.md) +#### [Windows SECCON framework](windows-security-configuration-framework/windows-security-configuration-framework.md) +##### [SECCON 1 enterprise administrator security](windows-security-configuration-framework/level-1-enterprise-administrator-security.md) +##### [SECCON 2 enterprise dev/ops security](windows-security-configuration-framework/level-2-enterprise-devops-security.md) +##### [SECCON 3 enterprise VIP security](windows-security-configuration-framework/level-3-vip-enterprise-security.md) +##### [SECCON 4 enterprise high security](windows-security-configuration-framework/level-4-high-enterprise-security.md) +##### [SECCON 5 enterprise security](windows-security-configuration-framework/level-5-enterprise-security.md) ####Windows Security Blog Posts -##### [Sticking with Well-Known and Proven Solutions](windows-security-congiguration-framework/windows-security-blog/sticking-with-well-known-and-proven-solutions.md) -##### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-security-congiguration-framework/windows-security-blog/why-were-not-recommending-fips-mode-anymore.md) -##### [Configuring Account Lockout](windows-security-congiguration-framework/windows-security-blog/configuring-account-lockout.md) -##### [Blocking Remote Use of Local Accounts](windows-security-congiguration-framework/windows-security-blog/blocking-remote-use-of-local-accounts.md) -##### [Dropping the “Untrusted Font Blocking” setting](windows-security-congiguration-framework/windows-security-blog/dropping-the-untrusted-font-blocking-setting.md) +##### [Sticking with Well-Known and Proven Solutions](windows-security-configuration-framework/windows-security-blog/sticking-with-well-known-and-proven-solutions.md) +##### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-security-configuration-framework/windows-security-blog/why-were-not-recommending-fips-mode-anymore.md) +##### [Configuring Account Lockout](windows-security-configuration-framework/windows-security-blog/configuring-account-lockout.md) +##### [Blocking Remote Use of Local Accounts](windows-security-configuration-framework/windows-security-blog/blocking-remote-use-of-local-accounts.md) +##### [Dropping the “Untrusted Font Blocking” setting](windows-security-configuration-framework/windows-security-blog/dropping-the-untrusted-font-blocking-setting.md) ### [MBSA removal and alternatives](mbsa-removal-and-guidance.md) From c2a3849eac922e9187fbbbab44d0fc858c0a5e06 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 9 Apr 2019 14:35:20 -0700 Subject: [PATCH 147/349] edit --- .../level-5-enterprise-security.md | 2 +- .../windows-security-configuration-framework.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-security-configuration-framework/level-5-enterprise-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-5-enterprise-security.md index e3e8a6598b..5b7819551f 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/level-5-enterprise-security.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/level-5-enterprise-security.md @@ -193,7 +193,7 @@ Microsoft recommends using [the rings methodology](https://docs.microsoft.com/wi | Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Turn on Cross-Site Scripting Filter | Enabled: Enable | Controls whether the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injections into websites in this zone. | | Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Turn on Protected Mode | Enabled: Enable | Allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system. | | Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Turn on SmartScreen Filter scan | Enabled: Enable | Controls whether SmartScreen Filter scans pages in this zone for malicious content. | -| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-Down Trusted Sites Zone | Java permissions | Enabled: Enable | | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-Down Trusted Sites Zone | Java permissions | Enabled: Enable | Allows you to configure policy settings according to the default for the selected security level, such Low, Medium, or High. | | Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Use Pop-up Blocker | Enabled: Enable | Allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not blocked. | | Windows Components / Internet Explorer / Internet Control Panel / Security Page / Trusted Sites Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | | Windows Components / Internet Explorer / Security Features | Allow fallback to SSL 3.0 (Internet Explorer) | Enabled: No sites | Allows you to block an insecure fallback to SSL 3.0. When this policy is enabled, Internet Explorer will attempt to connect to sites using SSL 3.0 or below when TLS 1.0 or greater fails. | diff --git a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md index 0b921824e1..2160e044a3 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md @@ -29,7 +29,7 @@ While appropriate for organizations with very high security needs such as those They can’t justify the investment in that very high level of security with an ROI. As such, Microsoft is introducing a new taxonomy for security configurations for Windows 10. -The security configuration framework organizes devices into one of 5 distinct security configurations. +This new security configuration framework, which we call the SECCON framework (remember "WarGames"?), organizes devices into one of 5 distinct security configurations. ![SECCON Framework](./../images/seccon-framework.png) From 3016575b39529c825b3d05cd8d53224dfc17b1e8 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 9 Apr 2019 14:44:41 -0700 Subject: [PATCH 148/349] replaced rule list with link --- .../level-4-enterprise-high-security.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-security-configuration-framework/level-4-enterprise-high-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-4-enterprise-high-security.md index a09ad7377a..4f337c5d9b 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/level-4-enterprise-high-security.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/level-4-enterprise-high-security.md @@ -191,7 +191,7 @@ is anticipated to be slightly longer than the process in level 5. | Feature Set | Feature | Description | |-------------------------------------------------------------|-------------------------------------------------------|----------------| | [Exploit protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/exploit-protection-exploit-guard) | Enforce memory protection for OS-level controls:
    - Control flow guard (CFG)
    - Data Execution Protection (DEP)
    - Mandatory ASLR
    - Bottom-Up ASLR
    - High-entropy ASLR
    - Validate Exception Chains (SEHOP)
    - Validate heap integrity | Exploit protection helps protect devices from malware that use exploits to spread and infect to other devices. It consists of several mitigations that can be applied at either the operating system level, or at the individual app level. There is a risk to application compatibility, as some applications may rely on blocked behavior (e.g. dynamically generating code without marking memory as executable). Microsoft recommends gradually deploying this configuration using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | -| [Attack Surface Reduction (ASR)](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard)| Configure and Enforce Attack Surface Reduction Rules:
    - Block executable content from email client and webmail
    - Block all Office applications from creating child processes
    - Block Office applications from creating executable content
    - Block Office applications from injecting code into other processes
    - Block JavaScript or VBScript from launching downloaded executable content
    - Block execution of potentially obfuscated scripts
    - Block Win32 API calls from Office macro
    - Block executable files from running unless they meet a prevalence, age, or trusted list criterion
    - Use advanced protection against ransomware
    - Block credential stealing from the Windows local security authority subsystem (lsass.exe)
    - Block process creations originating from PSExec and WMI commands
    - Block untrusted and unsigned processes that run from USB
    - Block Office communication applications from creating child processes
    - Block Adobe Reader from creating child processes
    | Attack surface reduction controls help prevent actions and apps that are typically used by exploit-seeking malware to infect machines. There is a risk to application compatibility, as some applications may rely on blocked behavior (e.g. an Office application spawning a child process). Each control has an Audit mode, and as such, Microsoft recommends the Audit / Enforce Methodology (repeated here):
    1) Audit – enable the controls in audit mode, and gather audit data in a centralized location
    2) Review – review the audit data to assess potential impact (both positive and negative) and configure any exemptions from the security control you need to configure
    3) Enforce – Deploy the configuration of any exemptions and convert the control to enforce mode | +| [Attack Surface Reduction (ASR)](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard)| Configure and enforce [Attack Surface Reduction rules](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard#attack-surface-reduction-rules)| Attack surface reduction controls help prevent actions and apps that are typically used by exploit-seeking malware to infect machines. There is a risk to application compatibility, as some applications may rely on blocked behavior (e.g. an Office application spawning a child process). Each control has an Audit mode, and as such, Microsoft recommends the Audit / Enforce Methodology (repeated here):
    1) Audit – enable the controls in audit mode, and gather audit data in a centralized location
    2) Review – review the audit data to assess potential impact (both positive and negative) and configure any exemptions from the security control you need to configure
    3) Enforce – Deploy the configuration of any exemptions and convert the control to enforce mode | | [Network protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/network-protection-exploit-guard) | Configure and enforce Network Protection | Network protection helps to prevent employees from using any application to access dangerous domains that may host phishing scams, exploits, and other malicious content on the Internet. It expands the scope of Windows Defender SmartScreen to block all outbound HTTP(s) traffic that attempts to connect to low-reputation sources (based on the domain or hostname). There is a risk to application compatibility, as a result of false positives in flagged sites. Microsoft recommends deploying using the Audit / Enforce Methodology. | ## Behaviors From 9d75953d444361e382d80b03866868042bbaedc6 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 9 Apr 2019 14:54:36 -0700 Subject: [PATCH 149/349] edits --- .../level-4-enterprise-high-security.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-security-configuration-framework/level-4-enterprise-high-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-4-enterprise-high-security.md index 4f337c5d9b..2986d0f69e 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/level-4-enterprise-high-security.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/level-4-enterprise-high-security.md @@ -196,8 +196,7 @@ is anticipated to be slightly longer than the process in level 5. ## Behaviors -The behaviors recommended in level 4 implement a more sophisticated security -process. While they may require a more sophisticated organization, they enforce +The behaviors recommended in level 4 implement a more sophisticated security process. While they may require a more sophisticated organization, they enforce a level of security more commensurate with the risks facing users with access to sensitive information. From 6cc239581aab6ba3ee0c05d46762a90c7368ccb9 Mon Sep 17 00:00:00 2001 From: Jake Lynch Date: Tue, 9 Apr 2019 17:27:12 -0700 Subject: [PATCH 150/349] Update hololens-recovery.md --- devices/hololens/hololens-recovery.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/devices/hololens/hololens-recovery.md b/devices/hololens/hololens-recovery.md index b619fc1428..d9f4871c84 100644 --- a/devices/hololens/hololens-recovery.md +++ b/devices/hololens/hololens-recovery.md @@ -49,7 +49,7 @@ To reset your HoloLens 2, go to **Settings > Update > Reset** and select **Reset If the device is still having a problem after reset, you can use Advanced Recovery Companion to flash the device with a new image. -1. On your computer, get [Advanced Recovery Companion](need store link) from Microsoft Store. +1. On your computer, get [Advanced Recovery Companion](https://www.microsoft.com/en-us/p/advanced-recovery-companion/9p74z35sfrs8?activetab=pivot:overviewtab) from Microsoft Store. 2. Connect HoloLens 2 to your computer. 3. Start Advanced Recovery Companion. 4. On the **Welcome** page, select your device. @@ -57,4 +57,4 @@ If the device is still having a problem after reset, you can use Advanced Recove 6. Software installation will begin. Do not use the device or disconnect the cable during installation. When you see the **Installation finished** page, you can disconnect and use your device. >[!NOTE] ->[Learn about FFU image file formats.](https://docs.microsoft.com/windows-hardware/manufacture/desktop/wim-vs-ffu-image-file-formats) \ No newline at end of file +>[Learn about FFU image file formats.](https://docs.microsoft.com/windows-hardware/manufacture/desktop/wim-vs-ffu-image-file-formats) From 3f27ada80848d5cc182d3c61468875dc076b2589 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Tue, 9 Apr 2019 17:32:34 -0700 Subject: [PATCH 151/349] removed en-us from url --- devices/hololens/hololens-recovery.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/hololens-recovery.md b/devices/hololens/hololens-recovery.md index d9f4871c84..e5d185bf40 100644 --- a/devices/hololens/hololens-recovery.md +++ b/devices/hololens/hololens-recovery.md @@ -49,7 +49,7 @@ To reset your HoloLens 2, go to **Settings > Update > Reset** and select **Reset If the device is still having a problem after reset, you can use Advanced Recovery Companion to flash the device with a new image. -1. On your computer, get [Advanced Recovery Companion](https://www.microsoft.com/en-us/p/advanced-recovery-companion/9p74z35sfrs8?activetab=pivot:overviewtab) from Microsoft Store. +1. On your computer, get [Advanced Recovery Companion](https://www.microsoft.com/p/advanced-recovery-companion/9p74z35sfrs8?activetab=pivot:overviewtab) from Microsoft Store. 2. Connect HoloLens 2 to your computer. 3. Start Advanced Recovery Companion. 4. On the **Welcome** page, select your device. From e7d9c98343b5727f109cd1ec3341c28c5e3904db Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Wed, 10 Apr 2019 00:33:39 +0000 Subject: [PATCH 152/349] Updated threat-and-vuln-mgt-scenarios.md --- .../threat-and-vuln-mgt-scenarios.md | 56 +++++++++++++++++++ 1 file changed, 56 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 784680a051..b89f51dc16 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -22,3 +22,59 @@ ms.topic: article - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) [!include[Prerelease�information](prerelease.md)] + +## Before you begin +Ensure that your machines: +- Are onboarded to Microsoft Defender Advanced Threat Protection +- Running with Windows 10 1709 (Fall Creators Update) or later +- Have at least one security recommendation that can be viewed in the machine page +- Are onboarded to Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). If you are using SCCM, update your console to April version 1904 +- Are tagged or marked as co-managed + +## Lower down your threat and vulnerability exposure +Threat & Vulnerability Management introduces a new exposure score metric which visually represents how exposed your machines are to imminent threats. + +The exposure score is continuously calculated on each device in the organization and influenced by the following factors: +- Weaknesses, such as vulnerabilities and misconfigurations discovered on the device +- External and internal threats such as public exploit code and security alerts +- Likelihood of the device getting breached given its current security posture +- Value of the device to the organization given its role and content + +The exposure score is broken down into the following levels: +- 0 to 29: low exposure score +- 30 to 69: medium exposure score +- 70 to 100: high exposure score + +You can reduce the exposure score by remediating issues based on prioritized security recommendations. Each software has weaknesses that are transformed into recommendations and prioritized based on risk to the organization. They can be remediated through Microsoft Intune and SCCM + +1. From the Threat & Vulnerability Management dashboard, go through the **Top security recommendations** list and select the first item on the list. + +2. In the **Security recommendations** page, you will see the description of what needs to be done and why. It will also show you the vulnerability details, such as the associated exploits affecting what machines and its business impact. Select **Request remediation**.. + +3. Select **Open a ticket in Intune** and indicate the remediation due date. + +4. Add a note for the IT administrator who will pick up the remediation task for more context. + +5. Click **Submit request**. This will take you to the Intune portal. + +6. + + +## Improve your security configuration +1. Step + +2. Step + + +## Request for remediation and monitor its progress + +1. Step + +2. Step + + +## File for and manage exception + +1. Step + +2. Step From b9d6c10a19a805e36743bda67c1cfbad442b482c Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Wed, 10 Apr 2019 00:36:46 +0000 Subject: [PATCH 153/349] Updated threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index b89f51dc16..2299331aa8 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -45,9 +45,11 @@ The exposure score is broken down into the following levels: - 30 to 69: medium exposure score - 70 to 100: high exposure score -You can reduce the exposure score by remediating issues based on prioritized security recommendations. Each software has weaknesses that are transformed into recommendations and prioritized based on risk to the organization. They can be remediated through Microsoft Intune and SCCM +You can reduce the exposure score by remediating issues based on prioritized security recommendations. Each software has weaknesses that are transformed into recommendations and prioritized based on risk to the organization. -1. From the Threat & Vulnerability Management dashboard, go through the **Top security recommendations** list and select the first item on the list. +To lower down your threat and vulnerability exposure through remediation via Microsoft Intune: + +1. Go through the **Top security recommendations** list from your Threat & Vulnerability Management dashboard, and select the first item on the list. 2. In the **Security recommendations** page, you will see the description of what needs to be done and why. It will also show you the vulnerability details, such as the associated exploits affecting what machines and its business impact. Select **Request remediation**.. From 62b2bea48110d68483ca1df7283df5a020459eff Mon Sep 17 00:00:00 2001 From: Jose Ortega Date: Wed, 10 Apr 2019 00:32:15 -0500 Subject: [PATCH 154/349] WorkAround #2179 --- .../customize-exploit-protection.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-exploit-guard/customize-exploit-protection.md b/windows/security/threat-protection/windows-defender-exploit-guard/customize-exploit-protection.md index c49eae7912..7401f885ed 100644 --- a/windows/security/threat-protection/windows-defender-exploit-guard/customize-exploit-protection.md +++ b/windows/security/threat-protection/windows-defender-exploit-guard/customize-exploit-protection.md @@ -100,6 +100,8 @@ Validate stack integrity (StackPivot) | Ensures that the stack has not been redi >The result will be that DEP will be enabled for *test.exe*. DEP will not be enabled for any other app, including *miles.exe*. >CFG will be enabled for *miles.exe*. +>[!NOTE] If you found any issues on this article you can report it directly to a Windows Server/Windows Client partner or use our technical support numbers on your country. + ### Configure system-level mitigations with the Windows Security app 1. Open the Windows Security app by clicking the shield icon in the task bar or searching the start menu for **Defender**. @@ -252,6 +254,8 @@ Set-ProcessMitigation -Name processName.exe -Enable EnableExportAddressFilterPlu See the [Windows Security](../windows-defender-security-center/windows-defender-security-center.md#customize-notifications-from-the-windows-defender-security-center) topic for more information about customizing the notification when a rule is triggered and blocks an app or file. + + ## Related topics - [Protect devices from exploits](exploit-protection-exploit-guard.md) From 4eceea80ea8949047f6561cc37665dbfe9903e85 Mon Sep 17 00:00:00 2001 From: Oddvar Moe Date: Wed, 10 Apr 2019 10:39:01 +0200 Subject: [PATCH 155/349] Missing sysWOW64 --- .../understanding-the-path-rule-condition-in-applocker.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/applocker/understanding-the-path-rule-condition-in-applocker.md b/windows/security/threat-protection/windows-defender-application-control/applocker/understanding-the-path-rule-condition-in-applocker.md index 154d463930..b1e10dc63f 100644 --- a/windows/security/threat-protection/windows-defender-application-control/applocker/understanding-the-path-rule-condition-in-applocker.md +++ b/windows/security/threat-protection/windows-defender-application-control/applocker/understanding-the-path-rule-condition-in-applocker.md @@ -61,7 +61,7 @@ AppLocker uses path variables for well-known directories in Windows. Path variab | Windows directory or drive | AppLocker path variable | Windows environment variable | | - | - | - | | Windows | %WINDIR% | %SystemRoot% | -| System32 | %SYSTEM32%| %SystemDirectory%| +| System32 and sysWOW64 | %SYSTEM32%| %SystemDirectory%| | Windows installation directory | %OSDRIVE%|%SystemDrive%| | Program Files | %PROGRAMFILES%| %ProgramFiles% and %ProgramFiles(x86)%| | Removable media (for example, CD or DVD) | %REMOVABLE%| | From 8dbf1357594e6c89e7653279f618ca41c8cd8415 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Wed, 10 Apr 2019 15:13:47 +0000 Subject: [PATCH 156/349] Merged PR 15167: update kiosk; retitle new hololens topic --- devices/hololens/TOC.md | 2 +- devices/hololens/change-history-hololens.md | 2 +- devices/hololens/hololens-recovery.md | 4 ++-- .../change-history-for-configure-windows-10.md | 7 ++++++- windows/configuration/kiosk-prepare.md | 11 ++++++----- windows/configuration/kiosk-single-app.md | 2 ++ .../lock-down-windows-10-to-specific-apps.md | 3 ++- windows/configuration/setup-digital-signage.md | 2 ++ 8 files changed, 22 insertions(+), 11 deletions(-) diff --git a/devices/hololens/TOC.md b/devices/hololens/TOC.md index 6b1c835350..01c64d22e8 100644 --- a/devices/hololens/TOC.md +++ b/devices/hololens/TOC.md @@ -12,6 +12,6 @@ ## [Configure HoloLens using a provisioning package](hololens-provisioning.md) ## [Install apps on HoloLens](hololens-install-apps.md) ## [Enable Bitlocker device encryption for HoloLens](hololens-encryption.md) -## [Restore HoloLens 2 using Advanced Recovery Companion](hololens-recovery.md) +## [Restart, reset, or recover HoloLens 2](hololens-recovery.md) ## [How HoloLens stores data for spaces](hololens-spaces.md) ## [Change history for Microsoft HoloLens documentation](change-history-hololens.md) \ No newline at end of file diff --git a/devices/hololens/change-history-hololens.md b/devices/hololens/change-history-hololens.md index 315e2f8cc1..92bb653843 100644 --- a/devices/hololens/change-history-hololens.md +++ b/devices/hololens/change-history-hololens.md @@ -19,7 +19,7 @@ This topic lists new and updated topics in the [Microsoft HoloLens documentation New or changed topic | Description --- | --- -[Restore HoloLens 2 using Advanced Recovery Companion](hololens-recovery.md) | New +[Restart, reset, or recover HoloLens 2](hololens-recovery.md) | New ## November 2018 diff --git a/devices/hololens/hololens-recovery.md b/devices/hololens/hololens-recovery.md index b619fc1428..e4f20a30d6 100644 --- a/devices/hololens/hololens-recovery.md +++ b/devices/hololens/hololens-recovery.md @@ -1,5 +1,5 @@ --- -title: Restore HoloLens 2 using Advanced Recovery Companion +title: Restart, reset, or recover HoloLens 2 description: How to use Advanced Recovery Companion to flash an image to HoloLens 2. ms.prod: hololens ms.sitesec: library @@ -9,7 +9,7 @@ ms.topic: article ms.localizationpriority: medium --- -# Restore HoloLens 2 using Advanced Recovery Companion +# Restart, reset, or recover HoloLens 2 >[!TIP] >If you're having issues with HoloLens (the first device released), see [Restart, reset, or recover HoloLens](https://support.microsoft.com/help/13452/hololens-restart-reset-or-recover-hololens). Advanced Recovery Companion is only supported for HoloLens 2. diff --git a/windows/configuration/change-history-for-configure-windows-10.md b/windows/configuration/change-history-for-configure-windows-10.md index 52fa2a92d0..6004911395 100644 --- a/windows/configuration/change-history-for-configure-windows-10.md +++ b/windows/configuration/change-history-for-configure-windows-10.md @@ -10,13 +10,18 @@ ms.localizationpriority: medium author: jdeckerms ms.author: jdecker ms.topic: article -ms.date: 11/07/2018 --- # Change history for Configure Windows 10 This topic lists new and updated topics in the [Configure Windows 10](index.md) documentation for Windows 10 and Windows 10 Mobile. +## April 2019 + +New or changed topic | Description +--- | --- +[Prepare a device for kiosk configuration](kiosk-prepare.md) | Added new recommendations for policies to manage updates. + ## February 2019 New or changed topic | Description diff --git a/windows/configuration/kiosk-prepare.md b/windows/configuration/kiosk-prepare.md index f484267983..436a96f0a8 100644 --- a/windows/configuration/kiosk-prepare.md +++ b/windows/configuration/kiosk-prepare.md @@ -8,7 +8,6 @@ ms.mktglfcycl: manage ms.sitesec: library author: jdeckerms ms.localizationpriority: medium -ms.date: 01/09/2019 ms.topic: article --- @@ -31,12 +30,14 @@ ms.topic: article ## Configuration recommendations -For a more secure kiosk experience, we recommend that you make the following configuration changes to the device before you configure it as a kiosk: +For a more secure kiosk experience, we recommend that you make the following configuration changes to the device before you configure it as a kiosk: Recommendation | How to --- | --- -Hide update notifications
    (New in Windows 10, version 1809) | Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\Windows Components\\Windows Update\\Display options for update notifications**
    -or-
    Use the MDM setting **Update/UpdateNotificationLevel** from the [**Policy/Update** configuration service provider](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update#update-updatenotificationlevel)
    -or-
    Add the following registry keys as DWORD (32-bit) type:
    `HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\SetUpdateNotificationLevel` with a value of `1`, and `HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\UpdateNotificationLevel` with a value of `1` to hide all notifications except restart warnings, or value of `2` to hide all notifications, including restart warnings. -Replace "blue screen" with blank screen for OS errors | Add the following registry key as DWORD (32-bit) type with a value of `1`:

    `HKLM\SYSTEM\CurrentControlSet\Control\CrashControl\DisplayDisabled` +Hide update notifications
    (New in Windows 10, version 1809) | Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\Windows Components\\Windows Update\\Display options for update notifications**
    -or-
    Use the MDM setting **Update/UpdateNotificationLevel** from the [**Policy/Update** configuration service provider](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update#update-updatenotificationlevel)
    -or-
    Add the following registry keys as type DWORD (32-bit) in the path of **HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate**:
    **\SetUpdateNotificationLevel** with a value of `1`, and **\UpdateNotificationLevel** with a value of `1` to hide all notifications except restart warnings, or value of `2` to hide all notifications, including restart warnings. +Enable and schedule automatic updates | Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\Windows Components\\Windows Update\\Configure Automatic Updates**, and select `option 4 (Auto download and schedule the install)`
    -or-
    Use the MDM setting **Update/AllowAutoUpdate** from the [**Policy/Update** configuration service provider](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update#update-allowautoupdate), and select `option 3 (Auto install and restart at a specified time)`

    **Note:** Installations can take from between 30 minutes and 2 hours, depending on the device, so you should schedule updates to occur when a block of 3-4 hours is available.

    To schedule the automatic update, configure **Schedule Install Day**, **Schedule Install Time**, and **Schedule Install Week**. +Enable automatic restart at the scheduled time | Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\Windows Components\\Windows Update\\Always automatically restart at the scheduled time** +Replace "blue screen" with blank screen for OS errors | Add the following registry key as DWORD (32-bit) type with a value of `1`:

    **HKLM\SYSTEM\CurrentControlSet\Control\CrashControl\DisplayDisabled** Put device in **Tablet mode**. | If you want users to be able to use the touch (on screen) keyboard, go to **Settings** > **System** > **Tablet mode** and choose **On.** Do not turn on this setting if users will not interact with the kiosk, such as for a digital sign. Hide **Ease of access** feature on the sign-in screen. | See [how to disable the Ease of Access button in the registry.](https://docs.microsoft.com/windows-hardware/customize/enterprise/complementary-features-to-custom-logon#welcome-screen) Disable the hardware power button. | Go to **Power Options** > **Choose what the power button does**, change the setting to **Do nothing**, and then **Save changes**. @@ -67,7 +68,7 @@ In addition to the settings in the table, you may want to set up **automatic log >[!NOTE]   >If you are not familiar with Registry Editor, [learn how to modify the Windows registry](https://go.microsoft.com/fwlink/p/?LinkId=615002).   - + 2. Go to **HKEY\_LOCAL\_MACHINE\SOFTWARE\\Microsoft\WindowsNT\CurrentVersion\Winlogon** diff --git a/windows/configuration/kiosk-single-app.md b/windows/configuration/kiosk-single-app.md index 439acaa52b..fa82263c0a 100644 --- a/windows/configuration/kiosk-single-app.md +++ b/windows/configuration/kiosk-single-app.md @@ -42,6 +42,8 @@ Method | Description >[!TIP] >You can also configure a kiosk account and app for single-app kiosk within [XML in a provisioning package](lock-down-windows-10-to-specific-apps.md) by using a [kiosk profile](lock-down-windows-10-to-specific-apps.md#profile). +> +>Be sure to check the [configuration recommendations](kiosk-prepare.md) before you set up your kiosk. diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index f704538ec1..29a60bc3f3 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -39,7 +39,8 @@ New features and improvements | In update You can configure multi-app kiosks using [Microsoft Intune](#intune) or a [provisioning package](#provision). - +>[!TIP] +>Be sure to check the [configuration recommendations](kiosk-prepare.md) before you set up your kiosk. diff --git a/windows/configuration/setup-digital-signage.md b/windows/configuration/setup-digital-signage.md index 3e25afe52b..61d63683e0 100644 --- a/windows/configuration/setup-digital-signage.md +++ b/windows/configuration/setup-digital-signage.md @@ -25,6 +25,8 @@ For digital signage, simply select a digital sign player as your kiosk app. You >[!TIP] >Kiosk Browser can also be used in [single-app kiosks](kiosk-single-app.md) and [multi-app kiosk](lock-down-windows-10-to-specific-apps.md) as a web browser. For more information, see [Guidelines for web browsers](guidelines-for-assigned-access-app.md#guidelines-for-web-browsers). +> +>Be sure to check the [configuration recommendations](kiosk-prepare.md) before you set up your kiosk. Kiosk Browser must be downloaded for offline licensing using Microsoft Store for Business. You can deploy Kiosk Browser to devices running Windows 10, version 1803. From b2cfbfb1c46206390340bf4ac70cec555d92e173 Mon Sep 17 00:00:00 2001 From: Sergii Cherkashyn Date: Wed, 10 Apr 2019 11:32:19 -0400 Subject: [PATCH 157/349] Update hello-hybrid-cert-trust-prereqs.md To avoid customers and support engineers confusion I would recommend following change in the mentioned part of the documentation (replace first two sentences): To avoid customers and support engineers confusion I would recommend following change in the mentioned part of the documentation (replace first two sentences): --- .../hello-for-business/hello-hybrid-cert-trust-prereqs.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-prereqs.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-prereqs.md index 6f443cff4f..5c60844b4e 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-prereqs.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-prereqs.md @@ -82,7 +82,7 @@ Organizations using older directory synchronization technology, such as DirSync
    ## Federation ## -Federating your on-premises Active Directory with Azure Active Directory ensures all identities have access to all resources regardless if they reside in cloud or on-premises. Windows Hello for Business hybrid certificate trust needs Windows Server 2016 Active Directory Federation Services. All nodes in the AD FS farm must run the same version of AD FS. Additionally, you need to configure your AD FS farm to support Azure registered devices. +Windows Hello for Business hybrid certificate trust requires Active Directory being federated with Azure Active Directory and needs Windows Server 2016 Active Directory Federation Services or newer. Windows Hello for Business hybrid certificate trust doesn’t support Managed Azure Active Directory using Pass-through authentication or password hash sync. All nodes in the AD FS farm must run the same version of AD FS. Additionally, you need to configure your AD FS farm to support Azure registered devices. The AD FS farm used with Windows Hello for Business must be Windows Server 2016 with minimum update of [KB4088889 (14393.2155)](https://support.microsoft.com/help/4088889). If your AD FS farm is not running the AD FS role with updates from Windows Server 2016, then read [Upgrading to AD FS in Windows Server 2016](https://docs.microsoft.com/windows-server/identity/ad-fs/deployment/upgrading-to-ad-fs-in-windows-server-2016) From 95b4b07c24eaf5d9cde959d78b73d6654b5ae40f Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 10 Apr 2019 09:31:21 -0700 Subject: [PATCH 158/349] fixed typo --- .../windows-security-configuration-framework/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-security-configuration-framework/TOC.md b/windows/security/threat-protection/windows-security-configuration-framework/TOC.md index d305b00ebe..0655e11899 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/TOC.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/TOC.md @@ -8,7 +8,7 @@ ### [Level 4 enterprise high security](level-4-enterprise-high-security.md) ### [Level 3 enterprise VIP security](level-3-enterprise-vip-security.md) ### [Level 2 enterprise dev/ops workstation](level-2-enterprise-devops-security.md) -### [Level 1 enterprise administrator aorkstation](level-1-enterprise-administrator-security.md) +### [Level 1 enterprise administrator workstation](level-1-enterprise-administrator-security.md) ##Windows security articles ### [Sticking with well-known and proven solutions](windows-security-blog/sticking-with-well-known-and-proven-solutions.md) ### [Why we’re not recommending "FIPS Mode" anymore](windows-security-blog/why-were-not-recommending-fips-mode-anymore.md) From 1d703645c303b3a60d80a8dfae73c23b2b9a1e8c Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 10 Apr 2019 09:32:06 -0700 Subject: [PATCH 159/349] removed blog posts from toc --- .../windows-security-configuration-framework/TOC.md | 6 ------ 1 file changed, 6 deletions(-) diff --git a/windows/security/threat-protection/windows-security-configuration-framework/TOC.md b/windows/security/threat-protection/windows-security-configuration-framework/TOC.md index 0655e11899..8ea1c320ba 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/TOC.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/TOC.md @@ -9,9 +9,3 @@ ### [Level 3 enterprise VIP security](level-3-enterprise-vip-security.md) ### [Level 2 enterprise dev/ops workstation](level-2-enterprise-devops-security.md) ### [Level 1 enterprise administrator workstation](level-1-enterprise-administrator-security.md) -##Windows security articles -### [Sticking with well-known and proven solutions](windows-security-blog/sticking-with-well-known-and-proven-solutions.md) -### [Why we’re not recommending "FIPS Mode" anymore](windows-security-blog/why-were-not-recommending-fips-mode-anymore.md) -### [Configuring account lockout](windows-security-blog/configuring-account-lockout.md) -### [Blocking remote use of local accounts](windows-security-blog/blocking-remote-use-of-local-accounts.md) -### [Dropping the “Untrusted Font Blocking” setting](windows-security-blog/dropping-the-untrusted-font-blocking-setting.md) \ No newline at end of file From f7b48d061ef4b1bf4f42fa9e1f62aab684f2f727 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 10 Apr 2019 09:38:49 -0700 Subject: [PATCH 160/349] added sec baseline redirects --- .openpublishing.redirection.json | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index ab677cc666..53b257dff3 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -6,6 +6,21 @@ "redirect_document_id": true }, { +"source_path": "windows/security/threat-protection/windows-security-baselines.md", +"redirect_url": "/windows/security/threat-protection/windows-security-configuration-framework/windows-security-baselines", +"redirect_document_id": true +}, +{ +"source_path": "windows/security/threat-protection/security-compliance-toolkit-10.md", +"redirect_url": "/windows/security/threat-protection/windows-security-configuration-framework/security-compliance-toolkit-10", +"redirect_document_id": true +}, +{ +"source_path": "windows/security/threat-protection/get-support-for-security-baselines.md", +"redirect_url": "/windows/security/threat-protection/windows-security-configuration-framework/get-support-for-security-baselines", +"redirect_document_id": true +}, +{ "source_path": "windows/security/threat-protection/windows-defender-exploit-guard/collect-cab-files-exploit-guard-submission.md", "redirect_url": "/windows/security/threat-protection/windows-defender-exploit-guard/troubleshoot-np", "redirect_document_id": true From 5fe1f843c441302251644112f66791a7a9907c41 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Wed, 10 Apr 2019 10:00:29 -0700 Subject: [PATCH 161/349] new qos topic --- devices/surface-hub/TOC.md | 1 + .../surface-hub/change-history-surface-hub.md | 1 + devices/surface-hub/images/qos-create.png | Bin 0 -> 9873 bytes devices/surface-hub/images/qos-setting.png | Bin 0 -> 34695 bytes devices/surface-hub/surface-hub-qos.md | 46 ++++++++++++++++++ 5 files changed, 48 insertions(+) create mode 100644 devices/surface-hub/images/qos-create.png create mode 100644 devices/surface-hub/images/qos-setting.png create mode 100644 devices/surface-hub/surface-hub-qos.md diff --git a/devices/surface-hub/TOC.md b/devices/surface-hub/TOC.md index a264981b50..058ddefab4 100644 --- a/devices/surface-hub/TOC.md +++ b/devices/surface-hub/TOC.md @@ -41,6 +41,7 @@ ### [Miracast on existing wireless network or LAN](miracast-over-infrastructure.md) ### [Enable 802.1x wired authentication](enable-8021x-wired-authentication.md) ### [Using a room control system](use-room-control-system-with-surface-hub.md) +### [Implement Quality of Service on Surface Hub](surface-hub-qos.md) ### [Using the Surface Hub Recovery Tool](surface-hub-recovery-tool.md) ### [Surface Hub SSD replacement](surface-hub-ssd-replacement.md) ## [PowerShell for Surface Hub](appendix-a-powershell-scripts-for-surface-hub.md) diff --git a/devices/surface-hub/change-history-surface-hub.md b/devices/surface-hub/change-history-surface-hub.md index 10ae4ecd42..d105eef44f 100644 --- a/devices/surface-hub/change-history-surface-hub.md +++ b/devices/surface-hub/change-history-surface-hub.md @@ -22,6 +22,7 @@ New or changed topic | Description [Technical information for 55” Microsoft Surface Hub](surface-hub-technical-55.md) | New; previously available for download and on [Surface Hub Tech Spec](https://support.microsoft.com/help/4483539/surface-hub-tech-spec) [Technical information for 84” Microsoft Surface Hub ](surface-hub-technical-84.md) | New; previously available for download and on [Surface Hub Tech Spec](https://support.microsoft.com/help/4483539/surface-hub-tech-spec) [Surface Hub SSD replacement](surface-hub-ssd-replacement.md) | New; previously available for download only +[Implement Quality of Service on Surface Hub](surface-hub-qos.md) | New ## July 2018 diff --git a/devices/surface-hub/images/qos-create.png b/devices/surface-hub/images/qos-create.png new file mode 100644 index 0000000000000000000000000000000000000000..d99a0c2b3b2fff63517d5bf7857f18c0c8beebeb GIT binary patch literal 9873 zcmdUVcT`hZyLSLl$L=Ut7{rlLlqw1;AYcPTq$ni81VT}P1Oie521r00EJR?yp@k;W z6G8wu0ewbGBuD7Q=u^5hel zU58=2ci*_Z>(09^6gsCb(%8I|&fj>zWFzptsYy*O4{F}IE-)N+HS4e|+M@d}d9|ng z64+)6x&jjJ0R7yk0{Znh6|^smA$eu{fBnRZlZ^tCc7?>61+x`muY{uxER2CK7xZ5= z5F>Hs0#MOUyS1tQ4U-~LjC!iR_wdIY^W^&a`h}_f*Uw~IT3adbvO?WGAZ^Va28m>% z&RqKnWm2SZtP5(WW4+Oc{JTvM@}8pou@5kW z5thfm`W{99Oa-Al``QsQ-6`zz8#D1^V5iiiq&v6cdP<)#B=f2>_~MbW!QyR_3YRrk z`O7M_f|ycDY6?48jx5c!8D*V%rS|Q7oC}5d?ZZx@7o3)mKC2|B_c)gV>L39B<>}3W z;bL&}>|mKubHjxJ&ty)?cFuhXvoshoIf8-u*^8K-zPR^*){IKN_w*$L1J702*G412 zm8KKsARHa>Htr<`_`Wd!r_yFN&E<{4GRKa4FNza6icJ+>|R7 zcgA^qR*MUnv7GXW~dJkfWCN@qJ_DW1}yf4o8< zj84+h`_=M$Z)`relDxHi{#(pnH!v<8&E?SC*EcEdXGdiYGoSIr9U0fjP%6Z)#qkI0)vgUSYiny{ z?S%jAK&p#sM--Bq1Xzw7A2i7BHtqf~)CuW~U|k(EW|;}5jVtx=YfH~$)%sop>g(&H zo2BI;XV_cdw2}anH{dv#WN$2(9XxgJA$j^S+(@&EY_ZTeRk)bMi-8{RF^rnV@#BKJ zK83lAv1Wea4uCkjCqNhDTy0v(@$7f6e5K))a2uMcNhSW)R_tt~+3gU^MD?fl7XflH>F5Rp9LXLN2|rUZVKhPRBw;x2v{B_T>!k zpjF~l7c9n4P_O(Zzl{xt=cZR&+O2k+n*I&l)ncc9U#I!Y0Xd!f4+x`3?QJ$sS-D#_ zPUww+;o7<7*Ur?7l(Eun&+u!OX1UzemG$0Uy)@m$uXD9XKMCymjhQ#$EeSTdGOZ^B zQm~>l7km!vUUgdV5!lS{P(7q~c>U~KWV}}@n=bj44OpvsBwrLUPI4ZJXV;4Ky7RgV z7|Qzgx{0+t7Z9mJWqSV6TO+>r+>%!jLe5y?#;|sOlqKTH6W;p#a&JfK^Hbec0=)l9 zQXI>hdJjvRx6RnWOp`4c5GmUSvL9NvIl#Q;MBkTQwbn0XpVcSL4HoX$Re(tdER6G; z6)bXxdaK#o7qT8%qt{YaoOqjLtqeEMoH_dQID9i%#OM2eB0Ch85c-+8 zpn(L2q^qLgecA^D(I+0gK#pq>{V>}bOY@VxW8Hc1c)A4vsa`OqN+r1)pf6OIP3ew- z{chKQx1E9bo*-laJC@HN+4oq(=}99aBg$H|SwVq?ssCiB{ zzjS(j(<(H+`>SL+|JouW!Vngf-|58?Etl2MMxaq zf|U;4H!1_V_8Szm{eR{J02ed;?_3M6Jw=MF{stqSL$A}uWg%oDfp4bbj9$nDZkT2nf{1AFHw?FWeW%i|?7yOP| zURPV#QakI(Nn^VSmzK(z${lnTFkZ^G7Zn2~xG+t7uC@I()~KO zPpU?u^n|asB~OSd@#`xm@(p5iT?`7Ac-e^#)w?LDu+}m`La-(%zL+yc`7DuS7F-e|MTB3mB%Q$0TP34(cA>slha0@x{ zB-N_)?%F85T3x-w3_DxKsQP|@uIs)Iw5N{6jk3Y6BgnW!;IoaE0cXb)~24mGBG z@=#ANs6DqdS!iggnvaD}CkDB)M?|?X!_L79oX8_Zk99wrh(kwR;%7k=d{NBwk!WG^qf7 z8pn_Xob-D)vP}i_5g-kJ&3#?~kYBioO+2K5V4#+6#lUPvsnd6M zFplZ^xrrxPDzXLkRsQ%dAuo7UXf8c_9iEeu)3p`k<^li^>(Sy24_VE-8PE`|Fxc@{ zTJ8=tH#Zl3Sl)k-{qB&o*{8hJdLp{Y zlzb4=2v&m4)V-^ncEydHDCG9{=X@5s$KlrljuCHPr>yo*xI!Qe)h=VS23IPi<(NpB zZmJtD_x>x2m!0N*k_TYVg>uZS_yS<4d=vyhNk)g5ePX|(RzY9S2BT%(`^2Uf!<^Ew zW1jHdNOW#PNml_QVx@24PJT@>8s0@OD^04$O72v>&n#N#Qlof!bo2d>CP2+xy>s(p z3oosEq3_-Hb(+Rsppxn~WcyC7?guqn-sxL=^X7H^7%ML;cSBV$5y1tUp*VEsaB40P zsKYD*XrTDl05DM~dV2~jucvBjQNcRpb&+bI$I-K!fnu+HrA7#eH->);xS)M+ov`|| zjMpmAw9ox3t1>3hX^gS>-}Zxm=gg)WV(03V+I7Zl_JOafsjh4Xm1?O{-zJ-9fBWof z$vQiTS0Da)A=w5llA0Jmbb;`xXr7Lg~kQ(QE--c^#0TCWN z#)2)Uqgdl$MSI<#?=X;j;hscfAc@53eb+*ct@PwoR#a4!?g0@{kFhvG2=xv)+Aesx zlNt=)xk7rV#-L3SwK6{lE3qPeDPEWr?|UGqo!qMGc?WY^-Y)khpm*|~B|v$3$GDGI zV+fEl`3qeo#+8?UrSMrwK;X%H=VTZJzU_;s`jurPQijp?3wOL}dq!kO58@k+Z4dtT zaVmM7+EZfOMfYF%L^ii*cWbEk(bd-3O>@I|dIHPCAbG8&QaPQ)nhG;Nx#2>aCH&gDJ+gGgA1zM+C&FF~RHrR=UH@8+n2XI;y5_4)Bf4x@-W1+)B%} zV%XMzXrcR0bJl9&(3fxu^SqA5UnuFGC={yp*=`{ITMFL4AedQC3j@D)WU$E4L+NN- zqBy2d)=B{*S6cmD%3PSw--Bhr6H`(OT+C*@jR*s8_*tDdM`a?r?i06KRWV?uguO+$ zAp*1SHjYEPJc(sVpMFzUB|CVo^@xSjAr&g|3{pCee5_k5RM+6Aym|{>sotf{q_Ql3 z(iI1i>rceB-mJ#>fgz%{yN~61jm5PXXix9`Xnp^o_fJZ@;&PBaunE$lmY5ucr428^ z@8E7J!PXkU2V@1Fop!0L!(--uA`Z4yQVQRlHj0?Tc9}N?AcpzVM15bbH7%@k?5IjFEz) zyW1Uw8dI%8FHeIooSUfEnPu>8Ly^M6)p>-qvY|Cid*Up!6u(|NT7XC+K5S0?s=9p1 z+2otVkMa$M>fijjF88Y|rdL0H%CYzQ*^+)>%$mz2I;7}!JFP#U@ZEcT=FkV>7x34- zk8rZeE&y7Sd_{@3lj{Y~rfP|^bFgBWZlw-`*Keg)uW+7QcU!a;7OX@U+g_c@^lUcL zi-^W)I}sht=h%)TuV24DaNq!)s{Y;q#Y{tdP1J#RE$9-;`oj&0@uG{}qh*<6!L4-D zDb>3C^EF->OTEaPz7iV^L~dhlZ_DtxPzzld|4{lZ2jrxgxoFZbV#Aswz3Or3&S`^6 z{GrzYsy{lejemZAraQ(rL->cbgA+}q*m@jiv=f_vI5epr*E zO>hynNvn_o%x110m9v;;(cd)z%?LbF7eMRV;de)E$`KvM?CMD%@>#=gqf>A_A|=Sq z-tgh>ylA&*tXN^9pwV3HJG1zS{YE;uUzeMo9z&ZXXZ-k`1y~ z3M?!vR@$?0S=zS07OZZAm!cZ->9tWwzW2w~l#>G3C9UacX=#axMaUJB06X+#n=s|t zVoBm;%J8izM&0VUI&N8#KA)u_CvUQug}O{hR}WE{Qr!qFCHPOxlRFmVl4V{$Id;$K zVG;dS4RX>RCql{h1W=YzxUS`=uXQF&x`N3%nnu#3Z9NYZB+XA(zS%F<+LVXvYz4$g zJvwZUcQ#4Zw|Z5w=W^%L1P^i@1z z--~oBk013?`B~!d}0?E<&wI|E&HCa@oJSaXB$eup0O2ds< zr}wf;4g7q4eFeP~IXSsxK!9FX6NyB?Ca*gV+U4>W%q9P6k}!9BPODTg9niuJ5Si}a z+rk}=`*&+lz1C;7Ns}=I4a1c*E9eLUfyoT?7@0Ovhh=AR%$ko*2=~#6>~}SPs0t@zpdftQg1 z#;Z|eCTe+omF~9OSIy|JA$>dS|&|53N+;kGiB7txh`>7rj{8b)(5+;RtBjZb(IlKl>T7! z>Y#RrMm~l45YO7HoY-y`s+oE4k3PB{KC*ntXh`=dKK{}*U>H%EBXuvjguer zoZ=l`@iEn;QX8&l9P zBUDjW$wvzcSCVvXlvgH%-i*n(B^8ZZ6h*%#GBfAA4v>p6YF4HiHNJ|@SpuFC-h~Tf zEUJI(B*|BNMHVYBT$pCCC?MmWl27E>`#C>s%vi!Hfh=%M5HQa9HG#nynws(`Hf>Oy zF{TylPqwyG3+<#82$f+h%WfS4MBTwu&0S*}ZcmfqH^DkGgmW0p=*z;J+|^GO?EL*a z$#KJ99H)wwWmy(P=(N?w4zX;H8+_~8Yw>VIU2NcF(nB-N3?M~Sr%O&#X+FQs;=~f=XrI$z?zkhG2jIlzD&77$G%rsuXrtxI=3THqzO0 zE2;fJqe{oVQOw-f^BQzID;E0ZpVuW`d>Ip)g7U~c-;+@ij`v2jDWEI*AOFs^{^9Qb zD}t8ai`D<00NyPJxddZ5a(01S(V<%6JSLV$M<)l8sL1uvCLoWLpP&D(i5zA8M&j}J zK(E~@nBi4HsR-QHj-TQ7s=)I?M(Z#1J(1ehbqh+&X+ma`zXP5w9~_YH&Mp)$QV8Kd zHd#PpBf2e10Z!C(WGDFtU?At@ZcJ|waRuDKnCt~(!4J9vjc7H>Ih8uv+7HPWzVy^` zWaX_ceyEhU5U4=~wC``Oj=@e&SKy!cN3$w^cc1d**8eV;ZT1VgZAfChw?bLe&&;EA?nf?b(b|<7= z9owp9GB|hHdZ$4`9qDK4`@F_*`SL%P1(+n_TK`EnD-n_&;c~QP#7G@ydfvRvw^7B) z7xEo*aoPDA+O1^iQn&PYB_$=_rTN`7J-g%raC2S`dXTx^vnTF2B#30c_QFM$JSvl? z6OI}B588vWsqL+aH~7+>bB^;StlVqR0CN`5hIG?4b)An!*U>o#DLnwqSM~b;33Lu4 z5Z#+IvY<&N4C)RLv=7e#QYZ8OWoq^YMWkzJXb9Bh=#GFQ1waeQ?eFyVE7cEL06fLk z1K>cM+^iMJ4gSTNiIY^>hc)*xzcM6WK)M-em%N?3fg0dNFAKr?*ONf5zYDuv=k9wJx)yBIZ*}8XI$%Zk8iZg?;kNlZF+3`03M*e;(HTrnu|z2XPlT0m0qnzar#tl(z0w!%P{x{!P` zr?H8^L*n|B3>YFIdKn#S%5 zJPe5DtK~t`p>+-Kpdj1ewI&JRyVi>gJo@I(v87-@M~`{r0|g1OmPz!n^$E+6z=`aH zsK`ipgW$(NLWe~HR|U*kBul*d{iFx^)fI$g%B8u{*Oquu@}P})J~eiydifAP*$clq zUDo}|NVu^&JLuD_29yTzOJAOsp}7l_WNIwb(N7Hx&z`~JfQ$DQ+{>Kp+I=@M%T&CayBAjm!xgi-Rgt+YL9@8WciOjBCHDgKLg` zCQD|{qy`LB0CG2hP67OC(sk1-ctp-&Lzu9++#ZsX;W#Su{shSj;p*zDQTg?4s$M{j zxXtf=RmkRsSit7i_Nx?@4>MP1x@(wS{N7DHcK}6!66SXs)M?-|kcaFZJ>gUX5i0o+ z05_}djr{;#MJX6E(cBAat3%&!ZUy>wCSRM0Vv(LJ;FsP%k>Wtlqr>EtsYK_q0d|MJ z0oR%HO<(=|rS>_xJ4Vq2xWTk`{K7lpn|ELBbTiSCXJIHJdvk5v&~UlQ(vvY)AF?iR zK;}ucey+rjeex~V=b}SwqP%L>7j|keItCYDh>K{>{8NRsD{yVsz(Cj!Rg)w#0y`#S z{&5d^Vn424`Wjz1nHZgA&4;2GsFN9i)pLTaxZE-a? ze+9Am?YW^{$hsKTamu`-T-`PSCuTtf@?#f$W~&z`Z+V!26ti-$tm<*|i@f<-g^h26 zn;QW~Cmm-8sw?Hxj?S}dHpC^(>Z|?jc$cT~(1&xKCJL?Xk60R!m*+dK)0LNV&Qa1Y z-y6lOE=*TuENm+tLbZXg>%C>n?|O*8Irn7dZpeJ5!o)EGWhS^A`t#+E2Z>fcyaXLlV4S zpQ=2u2~>*cN73M%ZHmpSl zWNj`p+JK~-Ut|*XlWC^fj$x_2mmN1-pVX|4X^`%64RyYe9o9b`qpROSVDeUHs%E>) zG+0N_1n= zIslc4nM}38%2+C1Ox`ivtWje(3a*1XO?&xIkmL6ryZpG`m1^v@&qB0{;hx{|LzP$ZP*Q)#SgIHvX3?D*tfWN5aufsrzAN Wg-z1x2;em`kg1Wyjlye=VgCk-HiNkU literal 0 HcmV?d00001 diff --git a/devices/surface-hub/images/qos-setting.png b/devices/surface-hub/images/qos-setting.png new file mode 100644 index 0000000000000000000000000000000000000000..d775d9a46fd8db125549fb874523b8b4c4beebe7 GIT binary patch literal 34695 zcmb4q^;=Zk_qHNPx4=+Cm*mhfbW02=NW+M9Idn?b5K1cD@JI?GAk8pCH;8nnG)Tic ze*S{*`@^};b!x}iYwva6_g*VjM_ZK;j|T6_lP84gYD#)fo;;mJAE7wU(RX@{^GngE zr!YNLg(uY`bi3#aOgnik`6o~6lJM`WvC!AJ?rLvfPo9u@{yUy7y<_lw@+6v0T}j@+ z*Ww_@F4@#(rAWv?JRay|lL(&KZxdLjHXFRnqZb`_oJ> zO~az1c;dOA(ND85s}X9}t`Bk>*+K$CUY|Fg-?ebS5=jYK% z!04~-1=xNIa~A*#2N|VWVEhcY%&m3Wu9i~>GB@7=`|zRL@D9u|jDB7LUYwg!jFs`? zrmYx=4WnvV>u+wU2E;K-`z?ZErBTT_`aguCs$F^E!^N#HP&$^DR3qNGgu}zb)=PI- zZCKvDaa290+pk%5T^t?p>_)QHQ5P2%x|Y+CAS6Iv;#0Zu=2zlz+&?l>49uU8r^}!N z$WP|mpK85@JtONu>t<6Tr~VP&erl7RS)RrT7JDNl>0|7JbooTdX+|i5+!u_ON#^Dt z(I6-)isA0zs8{fFC!b|I^WE0(&4T)RAzYrqSE6-^^=n7~R8zS;9xwXXi;c;Elape| z-!uNy-dGb%jzt!#JbX;g_3Wi39qe_Cn}>yOjh#)~NHAt&LA6Y_^e^hDBs%Kg9|l&I zfvcOxcW3;pqh3?xy4Kwhxa!8EIa0q^zWpnnP5nz;6FVV~X9WoYBO(>1N1`wyvC_o- zP$uMGkOMj-?Qqq*UL$efebAU@=JJ|;W8~Xa%<|vGA_lF9*rJMyvol`KxPI_?KWg`~ zwX?l;t%S8!AmpLdeZT5QV{;-k%i8Z z@Le*Q-r~z*FNTaAp|H=5S)-TwIF&o#08u!dw50QF6O(49c!82tQB(VIx5lb7kLSVn zUr{KA5Mj-1aV}5qTn%DLTjc~0GBfVOF(Xd!X$gpgGf>S0T^MEx`;l#qer2EUS%}_bDs!qae*p|S z|0rPHjoA4<6K&lSWo}^QRYS>&jHvnPmX)Df8PKkoz}KN35RSDzmgy@@3*d(S(*IS- z;-RRhI3)E8R=|8JL2AFf(0t~AkTAhcD+^iyq+&1XYDz5=Ura~IaO>o>GeR!n-_zyQ zz#i%)Enja-@?qEpj2fX3m6;5(D-M?JwvSz1YPu(_zAtuz3gm5$ZO^AAQk|O0 z6@M#a#`)8wXz%<1(?aKtLU^8Off8*r$uJd&wgKKV)qUIp<#cBQ`{yz$G4X$u>jHb{ zKFo+SV7qHtE#gX!o}D-UXJ)Zw^TIa%)bBRVL5u-gk?n;S&NeDv&~7yMfJ;>hBobK| z%v4FHHo>XiB3hzT3Q*B)2ZSfa`)wbjERX5He*(fmrIcz*Z|{68MlZFC5*)xjqEmUh zI9j@Ivm~Vyps3xkz`vUIGCu6WWUBKZo^+>}&HW;P7-9@?rgvS=t#wjpR`6N$r(#NC zQJZ62flSmn!rfp&GCRs%jO4)HSV1vJGvRr8K^Ig?AyE3HKwu>jf@CYpr1I} z(m*u1V`txU9`dQ-47LIdg7(d!fAFb)DhT6Qcc0liI%>MOKmGs_r9%hQ7^g<9dVEQr zBN4`aYhUUk!o>IS`Ft9i);;L?$qTIzCc;Td%s{CT-X8}`i za$WXJZs!%I-wlCW5b0NNfoz|?pMpo1;nZq&u!ALRm02y1!M4wiP<%$*K56s|xILLL zaAXQQN}u6TN1`lAA!awFPUz4k=q5~5gy_b})fLah<$x;zc2jzI-3~AcvUfXD^Sd^o zhW?kfqb@oV-AIn=F1Qa+uu}~X|20n8GLlWCm7u#(m>*Stvh3f$(&v7cK|eArrfld8 z7iF9Klu7g0g?glF{DxXms{e!_qm6v)k^9P%+y!!0yJ~&6QDHq4aZ*<`tJ0wB@KZ9* z)5+8nAmnN`+u)~v!kca1>Az?BU*}d-x**-NZN~>2uYMLjaBQK>YG96nZ~S}Z96dz| zWBcm83|NFdY^+HqIG%>L-k&iz3lLa+on0Vqd(p>#4z-QU?! z+cbc9-GqC`y$|Gz9NVkck%dRc<8aErf<)W+tK+`)-ccKUv?v~bEk7PSuI&K{Z%t3% z5)MJi?GSG%-j+d7Uw?5fC7dwOLW}tPXkapw!??n)p_&(AmvaU_e9jhU%Elcx@ncK= z%>L;o3X=ZC!{fzF70%D{_T#+c>syc{Ro39d#+m{yVU_JNZvR@dn4c++b>H7l|*WKd=*o&gEy)#_Q|WNtp7CC=~{_}z(Nm*zc7|- zTF(Z=yM*XKR7kU;JCnU{JOdn`vBZ|KCs9JVM&fuytdsRzFjm@gO5~%QQ_* ztv8xO61w95Os6l91176y-tQ!;k|({(+CtI4OzPW*d2z z7Pvw3roDm9wf36pRtu-8p@9=S(a?e9(b>~$v|*70-#I$F;peqp_=|t@G0Kz-b_R$! z`T}16`V9Wv!s(rGvJ7i*)io>P6KRYPGH=CXo=ZZOUL7$=4UE_{bj{rGTSAx+S{Mc1Qd-%}BN+#kzjM{ae#>Pe|k> z2P7gLh1Wl^$g=4LyS&iD9!qaSw_Q8xA2==&(Z?ARqnW(?Q2eERk{1~;0RfrwVr8HWRs z3uhJ*q#kYGvl-)joHnwIMB$rdL?{Qyy`ED4IZE;IoZWip?V z;BsOXa97P|SXOIq``+aR{e5$_Q;U_I+0KAah;#q4AiY*z-bCYqicijZ;rdL8I+C=b;#)9MSB|JUYfIYP*uS` z{ZdVJc~k$F@nUe0YLnei=0_#KjU)Mu_f_mx#KZ+%oF#;|R)pwmc)@+$d&Fotr zZuVD8GAv#({B89+)5|gmXcbVpK^sv5@UguieF6W8QpDe-fTOmCrPh-8(Wucze*2_4 zT}t^v85asFJoA%!X}Tr9?HpgGTB#uRhO+_gnh1!@HS08Ygr5@`3~aoju$LgVq)A0| zwl$n^kN~+b)|gXGHmWkA7_5R^G&5QOE9v>A$G2YxQf|x2u4LDdUA69{jKYD8rQqgFCFXf1)mHgRVvC|Bc_GUJzj1ma+oGREV9ix%{#ezyw+Ab484~l3Z+g#b~ zQonu3UZE;j&;l-&6CXAZv{+BSySvdc>uuD)UAFh7yDo7=Kw_@7ZXFdR^rw?B{yoEi zylHDP>TqQPZpG0U(2DyIxME$;z{{6%g0s&C~JqD0gB>}J=r;7?t z)@4=^NTQcYKP4rPc-oUtOZohV&~(PEJ6x9)5~XuMdQJgsqyi0Lg4y@RU-NuIevl*W zL-o~DaCunKPucuoNz%(vAU+5e;cqRR850yUqg%){0C zhTonA4>a9gNVc_|zvE62_q^lA=<(&<;n9OY)H2~A#p=j7l+{Jd_Z0%Nqbi$5ql$WjMY0UOW z4sCAmO~r9Q$7PTEFLR%=i>{(g4C|A%-d$enA4~pDE#mpyxho07#eR&H&UHdZMZ>?kYRb%TQ} zLhio_1l=?k9~zio-)rr;C62z@R~Tv;=Wx>S!wA~5=?4g@DFuYiDi=}B6$Lp+c?d@A zL^dKqddLeYHQ|5l4H~$6=Cq?%PnslNEgt*IOM8ufsy(g_=sBjw?=BEZSoJ(B7jPJ# z5V*ae?Lk!N_v~;^;ru;@x#(7!>H{bhVcQjBv%e|Z)+P%;dp$8bbwu%ts`x`+2AwFuTuEk}1G%CJY}R86MrYaMXT# z=<3!nE7IB1b6o!%iiB&OEq}Ashzs>T21;x{63?TQXPZ0}&3@4D9)>)a!x;!Q>Jj_)r{CI5jSyA1c-7HmtXj6V0-*!IZsb1I^tQS>5#&{*R1 zrnlaX@+uJWtF}|rK&b36OEgL)A&D(N>0!Z-!>e2w}HUis}H zw52(p7vrwd5vL+ad#k&tbD82KJ^r{CP`80+Su>?mf%|veS7zsQAjHD50)UhNKG_|K zKaupD@jbwBV1@oY92G^{L!yVh9>albfXN zMpGp_n3`N6vRrMa8PzAsb++}uHQ%2qedI?){7Ax?^zk_&KAvPI2A>9#_-VGF?fcVH zW0nCHx)=%!1kERHG^qbk;*pZ{!RB0Dm62rFWxkQ4OFo&@VuCb&?cuF%sqc}eTi>&r zcXxQjlkJJ$p9iW`65F7?`k^pT$^5L0=jk{HaZK|EYgz!Q(#A~Xo0PfL`VyDMfoA@M zm~U8$K{J`R?dOqYnm^Bb79^hEU=E}p?I3=KN4YUZ?Sa(`BUk5>kja}`+QRtUHRe65 z8!)NyMOQCgh{j#eiCCv30Q&sn)u^P&f_v$irZ|1?h39<5mD^8|Y#A?b_Lg;-Z(wN= zZ$nPvqfC*J|M^v2?cey(?uVd&?$l;j&+w%zAbl~&%^oPq{KvRM;?GhYcXpz8W0AB! zf@8jWm%L0NfWR&>505^=bBSiIh~2vA;+RV*`n&j^j9QHi+#|Nr;w50A+nzZFhiE?1 z7keREiKh|y^%(*G<=nBHfb(FwITg@Mu_C7=o`>k2{|c zN6@YtKDQu_0$6`?xB5lWcYjM9C3aJT`tnjw{l&C zo~RfD7@{&xtpAWQ4cO$LydpI^{D_9GJT5RnKCpHpKPlGSJ59K*f&%c!D^~)hV*Kr` zN6QN5p%WDY!Nraxs*=Ut!fy0*8i=`mr)a4hY~)Dpfk?5T&6Z$pj1g3b9JA+%c|j!_ zLy*^hb+WD}i7||Y8$yUfnA-uCnIQxf@<))D_xSEo^|7qnPd?v`5iLYD@*EsD*Re@C zPW1^Vt{vq!>EufX@!bvAwvGH1*dN83`FYen4+}+1QPZxWmMNVE!OfgDm1dq}#Cg9j zep%+p6!pf}Xi@pszZ)hHTd3uUTMWm+>cvDRmmzR31A9Gn& zJ9B$hbqJz;7>HE88SqqXZt7T2iUFztQxmfxcRtH5GX6GdJ`fgL{7M3ckf(~hf4P7! zfYecxihV&tnK_NGKw+sY4C}H%H*i)UiwYdB;_HZp(WwGg0B-_z6=GehuP^voDxc*P)ic`iUxHw4VBZEM4UtLvP0SDtDj%<|IXzt=}#k*EYxtJ4g zYATeo8*@xUnMWOB_RS5(R^I|C1)l7=8A;XuMX&J~7$2}NM{`kLBqv*W5Qc@{P4BZnTK&`2!Nd)$j#+(m zJD2w$1GwCqcKQ@OBuSMAIgvJgcxt_L?=QpdtJ-2A#SQ82zfjex3VH=TfcIoU@V_q=7Wx?-9O~ z_mLV#z*S$tj@ln0R1r=R137&MsAs+7u73Q1K7MV1axaTk5!QMoOPC8StY2D$loITeBrH|2$F?r*4}~w9lBF&jKjU75t$zjC38KG^XBb$Eejp3%nZL zIxKqozuaP?{Jl;q1=f5SaGn(E0*v-3kzZh^;;0zwOnmDJA9<+uW%ooGTyTY{o{gsl z52{UbJyoQYR^~!bIagGr&?L^URM+IwuPE@VEZXC+2?VQGE;NzWu*Slwodf_BKhy{Ug!Ci+_sMZ3w26>6(J zRYJHqDdPmUi%I@Q|7t$)9S5Yb)Nfs$@69(>GuW_5KkZxW4>E7WFcWWjuV^N=wQggY zk(wQFG^xj0O*eJbrjml=%WuHS2y82`P59|k5}SrILDCCo;cyiV4b)-VxK6nyuCBoJ zh(zbH6gyi# z`AV?(%#w58f5A2yz5IX(bc(N^s z?8e#UTR1h?cVADDpr`OJK|B?LcU-iQfcEoYg(wki?pkT7weH4Vcb|Q98RQFz3Xu~5 zsxaer8v7_(#I23`b;pIuZ1c_F7>SqdTHmVm&~f=w-4I`q{aW7zFnDgBbexO!HysTw z%NGSBXajkxV;u<3S=eru$`=4>px6z`rc^J1kW%qK?c6CYiz)ipTN@Tp&i{#ngpir| znYAY+&x*|4#M_;dZ?k)8K7$g#LLco7N z5R*tNChA8G#!dM6ZZP$>1fbsvg11GeKxzkK^zu5}gyE7=FOt6c+S`YaVV{ypP<{k? z)TBJvCwb&bPNyScJv<;UK3W0EIkeSaw&s8uIH-GYmUNtyMWy8W8&N~FF}aZ4){_|E zeqSJozD;A#Zjy_^oN6Bz>gJpD=ocXfa!?|V!$RUfC+fguPtZsyYcyWe7#a~SF}S`V zWMv-vnK%#YteD5LZ50ELX|s!UMM!~!G-M`>*I}#IZUjuqh13q|C11FxbIHZn{y9rK zc_Vn}GVfhn<+c@viu8nhRwoC%Ik#!Tj>= zyq~Tq-)8BKa7@;zds~fqqq34i$tK zc-=O-JD(xl9glLyrfCjT&ULbE$S-u2o-xxvB(wGu>|jAVF@OJanaU(dFvNaLC|*q*CPUq7T;GH+*m!;_Bq2?YLPh z%?d?JXO2B4rqkW{C&m3)-B*Hq5!g%x^vIZ)THaVjE4AG$Pq^^KZbl#h=yLPwhWNm$ zwplF3o#hq4Zf`=S4mmP6!Pgxv7Ml-U;TnC-MZDymILbpt8}+tdf@t7Ak!Ye9p&KZ@}w zk)b;*duB>nIg-5JdjaK1SIl~3u5CaQBJey1$V>;I;3qJC&d22_4jF z;{eZ6aXvwS!~!S31%NZDb(0K_P4-Fgz^!h(o||vaPZ4hvXRsj|*JqalUp{G@c$|1K z1~oR|nputgkbyvlIzM6lbq<(q^Y*guRrw`SeAGhZ1h=qzF>@2ORi3Oh-s22kljQMK z2|bAMpQ1VNcWR(FFVl`DU2v3|1n!}=&m2|1wzd9qeNSC|=ydrPU7b-8)m!mOrfe4n z96J*l#akRqZ-a6MF(%C%DSmjYcWBLFt=14^I>$+t_Dd0=B+Y>|#{9nRBY*3$0v><} zj$}y!ewV-um?heOew_^F8msXeIyJUQx%-?S>iu#Wy*xcW9IWB zH7xEz2zn=be4)MZHxjOJs4E28vop!ya#l+YvoV|ENNBDV(e}ewL)?^Wfz1=2dRS-W z+!pzcRLa){_xe-uXLBA(3y$cYB*n^*yf`II3Dov4q&&(2a6+;go()Apk?O$pUonqOI?@C0W7+7y4m z3EYWoLo~*LZ&oqFJ(WJn*!E4Ap&gav_0)8vipNJic+THg!;IieseAosFNF`r9GKB3 z4nYRMQ;F>Z(n+e_7I8g^syCofjOikVFoc$^#Jj_D`2fGi)C@Vjng+te_-`hcXV7A4 ztPv5S9DP|?4uMj$h~^JW3Cq#8;3;duHyt)XahBXR3wP#Z^&@7&wOU%#jcr^#K30Ac zUupstgKu5xTu(^S&}*i{pSaw$&y%Z@RJr)HvKG`>Ke&ZeP4z?mY64~qsZ0t9yA+Ni z-0Xx2o!4_$6Eqedm9h#G^{_oQEnFJ}KuYs~o@Ul+9H)j$U8_-*TVK)Ky!ew{lD0`0 zul2-&QxCnaRoPH3Z5z~C)f1!W+EI3#5}8O%(de>7hg1&b4Tv{>UdjKdZvSO&-w+lS zR7IKq;9`@>IVfR!{F1dgwHH9;wK;xVIpeqfAIK_(i@)#L#h^r#Au>%kpU74&s)K(j zPf0}{YSq#(Y=*CBaR&#gq({3w8U0jOU(&B%dYbN_?-GvqAUqrkj^I4f-&eOHLYO%1 z)i=sL_DYUp7aGOzu9xr*IMRy{&An9GY`v`ZOxw&nb#K>RC4I$6{p>zjTX$fme&SA; zA(o3uu|eL7?hf;9iz)EkYvOak zKU2UxjIECxzBg*D`_10ITS}X9`GpXz1&tv>++uc5ilTeQXHp7yAAY*UJ9zQ3DBkaY zRyEIR-COFo8kFa!fc&54vkJ+{ABTNbu9W0AP`{+0;^c$Hos{pPupN8H#EUOQWv}dU z%d(<+Ta^7(*K6HN9em3fKzpJ}Oz{BDHLieyBt`+#Wxe zwJ@i2>8cH|Qt3Z_JQfP+8v9XBZpB#A;e_Ty+bOjo{#Yef*4?DjSK$j!_RUn%PXYdk zxQ=;pQi$Ts+!O*guGDALPH9ph77fvyn^5MQmSPssjaA+K?l9QRrZJTH!<YEE?0`v`}yj1Zd_WbFTvO)jozMO9Lm20)PAs!^RBcl-P z0vnNb2HLN+*Ydq>5*rM%_G>s-_d`1h@<);A(w6#yi{pn{pY25VKgX+M-gj^96T4?; zDGr`4yCpnE`RT;|5U<O zHwoCz{1Na#!gYQvkd3HplMy#o3rR|HXh(vIR3odhL@oPy*Jk~k>7bEJh_O{^3M3he zA;7t{Vq;b5M;n)gNS^@S$Y$F>lSfTDTjvg`zRL5=&LE*yve>5wpofK7T_QY|0cnvv z&|&HVcH|S!32nL#C3&dfvhw3DGzOmmi!m|ddYs;?kAFsip2DWatB_CD3&ElO=7yCW zf_hcvmdKW#Eu?z0nkkI=>=+Su!GH5~F=S(jlRnp)ug-FlYW?L+noix;_N~;>uwE4S zCWA@~2y@$cxLfPf_y6zyA0-=`{C^@GeBFoPOjXzj@T7&+=$_<4O$2fI_ahAiKF2D zS7^cF_Kq6=8m~gAm_7krd<&p{CSB6g%~)E!?kAaeu~*dP2)}o? zXi%i>RjM!nG`S`Trg0I_Y+f1qr-ym#`D9N9nx%FhQ?7;T2#X?>6TISXes{J&s{_Ti zZnYf#fU1OO-VShpI>Qt0UzEGvxxqQ}5UhHsoP0DR%Ikxz#u>tH)BDva$kFUIY_;?) zm5@~RZu&>mLO(PJ??hf4FH~ba&gDh-3w}MD7T^Nc-m%2qgF85B*C7}*BOYfxF52Jg zOZ{_8dnFT$M`Z(hpnRgBXu4a-TzVoqlXAh=689MEaNfK8d=ns60grt>Y4%9~`3aQw z07!|T)HC79MpE&!1F-k=FA8`ub+#SoK(ZG=RIhQlB5?ODW3?Hh4*UH*I#MhbzpBt} zhM>lnN@%w}(V^nt5LAZL8-8!Y`GW_PYMKrh;ME}5OlOOFKS-w7Y#Up!@C~8k`sV-g z7!i^&4$MAS3zM;!&66fagQx#`wv_6VD{&u@(3r>npq;@athFaL62g%q)xI9uyY?w0 zJH^JJM6I$G<$G5(xX4LZ3T~YC+-G~L5oKDBYQDMOu#52`v?nhs>`VlZin`4LkdV)E zwA-euVk&td57%!$u+}<9S}!nBuLLs^7o`%s6IAJyKyq!BigJY)*gUk%LAE_sDhY@6 z`KS@Ti6rIboO3TR*`~Ytz9}ub=xpD4#y!}is@Z-Ew(Y##y2FwKv5(+`6!Y;;5~0P9 zndRSbaG%rHykO!;fQ8M4*#!4q>8*sEr`+%&sp=oYVf%1zQvFe zgxsB++h9jrbbp1Rqh66X-akI%wQKTM^<$;;+F+(DIFrhrAjs9NNR1lj(a!;sVtrgh zT+1oj*CiIN72xU9#xQiiA|NHaZ@}$U3W22^6K8nRUy(c&$hO<1Ol&)J)P0rpQ155OD11(G&MCH^#*NU&(!^|W&<;;6Jto8 zOiu9Ahm4Lp+na*9nVFef%d@&p8g#6%@(sl-H?Ol_03G?<{CrPWICf8?%Y66Ons%Dt zyLE2TtaNb_oETU+*EoE&`QBf_G%^k_~G^_8XXi=+PaQP zicaG;Ds?~K8BbM_#+sH6ymFsy^@CmQeXZ$k@!Ib`T>P1$_DPj`V4|$M4vNwXNi7&g z%P0}gu!$n{%e2{a+1${Zo)sadXDuaA#^loEvh52Tcw|#U?x{o+n3w-6bVB6v0llBG zojNU9PK>sta1<7hCv4!aGdhTLbad*Yce6tL$5BN-cHhb@QI}WDx4l%B5%f~t=jS!w z$jC6a#tIZy(VJy>gBkq9qcXS7SJO4Y6ifd5Rkd!*?X2l!8D?)uR(~u9Oa1v>&r#ws zTg%jXy_IGCtJ=IGXySvPo(x0YsmOB-d%o=L3q!G*vTr44{gY?k{Am5&e6NsP`0*}2 zr@<`HP~`$`I|O`$vT>da(FwF->@~G@bs)_wQQm*MrEqE?cIv%B(l^uC-xcj09B_+N z5?i0~SQ*V^S0;+4kDA1OFc>ajiHi!ocTLS1x#uiK{l?KZ~t#N|5Su?YUfCbB#>IaYehRI zzkfU3r@%5u-cr3bocQRfc{^9*05&AP1G~FA*|ou_d;C*Bswa!Hjff@JzuwLZk%{GS z5uzNJU{Dwapd*!X_E!8tPWw3==*veJejf&-#Uht|R3#F04M>q;T)4W=`Y^Q3!KX8loJKJI_D1<0!*}$*fC;p1N zVs`I%xTu+Yrsw;$At}G@aw$OFJrkcfQZ>dX+CF68boo^w9ETUJ--FS!$@=#878s<5rkFacF@@=xxCaC5od@-#=xj!PNwbkk_-&q>@M^%R6&aB7N3g z3KEMjSKNj1$`^J1!+yNb0I1u3|94*hXP}jD6@S~g-WM^yDa8*bfn4F`Wc4$ZyrEt~ z=ymSuTu+NYSRo>L^+HWpU?KxrKCKeWpA18gfv&5TZ>k#D!05~Y_s9Fo=;iC2W!$sv z(IZk^T$uxbYNzUE_O$CCkAIg-Z(^oKLmtjHD8BW^i8IyWP%89;NmyHTTFo)hve1J) zJ|weQW9Vtkc@(WHj?a>x9U1JVj2H8CE6Yv$UHl7Tf z%$~qclt?v!GZQys!1?u|*qh2OmmiDi6K|fi>bE+eF-hp>l;4uRz-pBFEtv*bS!AMgj%KE77E>_?Ybiwm zR=X7MR*6G0F<*?5Kiyb5x$JnnKc)&fp<0DJoSK%fap02Iv4{vQxU_67v%N! z6jL4)sqNQT+;118W&~VcRfvS%u+S3&j>tnFdt~o=SeMS_fiCVtc8ukN=unok61x5O zM{So;A(uxF=2xSS*Ro~a$Elm4u*c7JIvM#M)KECJnLjR%O0J74m^DJN@Fg^;Ld}x| zKhaD3HbT#uBS{d4PkxuI>ATaf(tz}it6u(z@K?SOI3nGV+tFpQMuTl5hF@Q^t+M5{ zfYmjF8hsp+cwZk%v9!ljY*omdka3{^4q2j2*n{_ahgI*1Dsv(L)+Jz6@i-q$RjwH_ zlrD4$Ayph;Osou_d$OfPKSAn*K}B3iK0gf>84h}PNQ#a(`n!C$CFU>^7}d~|-H`at zU1s0|-*?-y)H=t%CnifGV<80GX@vS?A~Xsspe5V3I5=jxqoBfGiS91S{b+{ZOvEQ} zWBP9kWlT~Q1o6k-!M9)2T#O>3v6D!+8ZCY+loDM0CS%XJK@4RHH=2?fW73RfLV<;a zZiuv7RI!uk>#%;1=~yL;L(HF{&q9-Q#&(BWoT zr;r@PH4yoQ2&@6#5#ZJ5EEMW+&iZNzEt8>+FJvFD+Jn6Wu?*a-=eWWKQ+D93n7 zIbgCjjjdeWUg#cYDLoo#WrmhPh$#i8aIle<8&U0KYIJ}sCAC5(UDE7rhwG*a4kl)` zD|=NGnE-C~z?$wF{eOgEjF#oC$V%uO`2bp{+fqVrY`wbO&Xjv&F1(=wxi1fz9z{8# zU61=t$rmyzYESw>xj}bg_VXNkI0jnl$aXGEk0bLUWu5+rlU8{1pHbZ2WNu@ogsS_A z%yji0w~oa+M>%g|tb?k1wRd@u@bokw7HfA;u^cQy$dGQZuxsGIP=!RExz z&rqpFiTUukrx($k3KlZ}X!Y~j=vf`c84r>1eIU=#^5$(0>xt(datQe2VOJPINQspu z4`*T5?nLa&=m=QiF|NbU)5jY&(C?~Z0^d!9eLPg!B~5TNr#4%6`ikbRtSihbRPpV z3~O*xKcGP`wTacO-#&u^dqQ7M>?=pbVVug=*B7IMSAL@cmok3W7?<+g&B_0M3B%H6 zbxr!7DD8W8ltuyBR5rH8O6DcWnN)de%re@H$0B|q)~rtA%xvU1@+VAt?}N3<=8_-I ztcc_Lx*bThE_$}NS5{U8NS>1DC2mG=Rne4FhqArAq8fM;g|oYjK^#|SWMCJ!!3oL?(XhQpF$Uh7GTps zMk5q2wccP1=5t3<5|X^8B;-f`@}V&-`tq47Yu)tD*Eg^7O{hlEh}*XBM>MRMYC4}< zq)s`zC+u78zXtH_d{AmMu>ac2^wmFfx_i@zmC_jff9BMzzJC7V--mnCV)Bm;G$dc* ziCa#W6N>y$CiwRTC|MRKUeqAP$W$NWEBA|kq=CTYW&$I}C|(841JYWpD+6kHjM-4u zXbRxp_ai3KLRgnKRpgUnGmQYcV#mlYt=MRKfHaW$UvVN3k;8_W%1+nicIn=0p8{X6 z*8u?m{;F)U1f8INhppPSV&5QFPD5j3qx;@eg{RqE)D08lx_IB%Wjr`n^}eNO2?(} zv^tItz!(Ki@hzXXX{Fy5Fn8fSE2$okeEITaqItqFH*@)i zA<#==#t(=IeM`{L&wovx!mexJH}@pxYwiS>Db17^%CV>+rxiXx4b>E33^3H1QfB!L zWwQ)C>8%aCKJ{$%Jy|FJ4 zSvRg?!Op>uf(cyJZ$UCM4WgKZpQjn+Atc!$UThmJz8@wUHRkmsxBciR&{gLrOYh6VA~ zh6*)G!#F%WMV4y|U-i&rG_xSOLH?)nL=3n}Zz{F(<%~xO(gt0}ao@%+M)A|s{)>E? z26+rqAxOEq@~41me>v2@iJ_F3q4fGjuKc;9g4LNaD`PeIg_0RBz5^VzHNZUnhnv%K zB%|+p;lva|QJX*)AJ?SSc?WH-)q;Gb5+z>@{=-fi;~qbfp8bcT315T;p@DPHzvyy{ z-M25Xpe#EMpj_bBsDEgt`P z(My+CSWt&?-!6C6#Cb*jDH*!^0GPu$nem~|&8``Go^74(veh>Iawe_6cvZ=3BW?dL z3p4X{hpo0%JU7pIog%`&4s0;r-uRCtAD}-BK1%VqJ7o@1q70o*fX1UICO}`N4KuxJ z^zp>&(CwTsiEkNUdta--W<){XPqgL?-z-A6 zn`%VR(-mfmt}o{0+5qIy{gL7sLE5<$wc^7JyN!z_w_JtqhVAbg_SYuBsrEgtb~^j; z#V0q03^bD^g>`9-sOGI1hW|9OYp}ieU!&Kdp^`}rE4Jb^vPnHw#%8(GV~S8H*1!kg zh@K>;Wmuu$hn=y;2%Y8ow(M*D4DadX%|?#%X0^B9ftVLwAWp><=D2J9+!iAnXY{D> z6=!t5rUir`o+Qy&r&2wq!$&YvWtwruRzRetKFam?7~H0Af{)hq^7(>JX(OF~ge%>> zpTk1-Nq#^MT;W=Bqz+x4?@mgeP0qa!Y+e^cca+JHw^pH$(^`iyhq1P2 z)n1Uiu)%y*CvSW_K!P`72;?klA)8*9)R)YqM>S~4jHS=rmX67|jEjask=&r78V%(G z0Z|)dwTDHe`6(yL__Ud8<_p?eHNQ7#>wHDRnizwp5Z-j^#oYe7A>{GF{m*QjMK{wp zBeG}nwoNsWPTip)QXoa;O@#Y$d(c19zPiz$qMpoW=*jwSVV_k1iN?o~|KM{lAH|$4 z(Anph=ti&R793RNrs{InTsLGekOPXqwtRx8jgg7{0cXQv zlYti(+!GCK7O$3`r{*eJI-o~27|xn1BZv+ zq#AR%+}~WRR{dDQ!zQ9ri?Uz_qqC(2Jk}5!1*;!{GJ)bHDUW~W-8e{HU0sR(W$6@N zq6M1L8aA!Zf^2Xak^i>ad2Hg3_44F`q|G7(RzZ_LTHl=lGL)k0K1F8=5k=(O=7}u_ z!W`pUFy|%~073^7478$*|3r!x76#k z@+Ved_T&62^d#kI$%eL{^vWaEoL|Z+7r}hKr$2w z+d`Qcnh8LbbNv>HK_(w*#^Zni0r*^tUz}>PK|LLbKuo#wDmug z3$it^{LJZJ{!Pin7qq{tX{Ln^>8N6urtj0Bop9Le+B_&6o`!mRyA{10GDB#tzS{H?k$o?9sG}c?8)g-~f05arWC=yG*00tg+v4;7YJYFR|W+I*v!vXwcB+ulGDS3>O z_ZB@+^wvwQe*fYV)m?ZjTE%fiUB)>u#L(ku@b|M_u6o!=kTwQ}FS@~zWqHApJmxLJ zvBb2`7rCvtoFl8eCUu9n%6;%}OD=-L14WJA;q=e*12sm_y zf`Ec_h_tja^pJyqfPf&4(v1Rw(p?JDq9UE5bjRDryY9Vj-SysD@9`hZ%;C&A`|SOF zzuGKr88ZGpb^B9}3Ei^K{`}C-Y735b1vLL!GOH#&G`AbwpwX#%#u**~*0T|QXe2BPU z_glXGYqkC_&b5!`aT<-Kyd7K(78@W@!2gDGHdi(nJ#{M2R{OXp;t;OZowk(8GuMtf zO3c&lipb_LYCieYoYujxrCJHsTH1V{b;j?k9TJ-2Mk7LmzSq@bc)e6kW_1@YI>slx zzkNAHD(;tTUU~3L%C-}p2*u|#DWmrd4Pg1)(XVO2?_#oSiQ^z6Cj6dT(Xg%I4GbN_ zwb${xp7LgLS%qC<%S30lKjl>j5oUk+BP&-1Uqd=H+5;^zl{}+Xw_^Mz%x+lF_!F#Y zDcDZ;Rc+9=cVBfk-M0Xn5?Yj%lL?*9D>tfLIa+NoN5159I=)Kh&u3qkGkpb}e-6vq zrJK0gmBOa1@0bM~Es6>?ST^X^cGV;Ly>ay1i}fF(4Tr_GA9{3pz-^D~q=w$lFqnSdNd(e~li@g>d zL|YcV$pVHjM0_q1$sMfd4|^>|%*Wm)HG|Q8C4=E1!P@Y>E;F2ZyQmBSSNl>vTDFlny=+W{%o^HPLk>#N;%O4;3w!>eZG7c;LTS=$tltJ_^*4Xtt3 zl!9xXs!crQ#@F;EhV3mB*=H83`g%W4oW+N^B={!&Xl{VuR02wLoRaEZk*cis_tCF) zL4JMq{l?#i5(|Weiz+<(mNu?T<)YuHnog-6QrW}ePu}7rS7Dzsq!>tD%TZJ-ieB5> z3vLvNITWi*df-%x@tkP%hXrS^&bI7QPbQoB@Jb7Zdb2SR^P9o-9V+Rbwxrl9GV7%9 zDX0cA%@cBPcF0~F4JP2&`XEjJ$K+J=P_@I$j2*E+@wNEb`;~z4t3MeIpWWTWyHZN9 zO-^M_W_hBdf;TGZ97*_%gKSF75Eqf+~4PT-Gni#9d2N*gwrKd2{UAg9&I>bu5-Ab4CQ2#qZX_Z`dCQ9>>w(_ZvuaRx;RK zzs!fta|!P|KpmOgs8ARc-$+6x%W&3|5T$MYP9nlI`{$91uiZ9Blx0ajv>q6P-HvR? z3Yr*O6YvOisO#HU4(8rfFchTy5kxd;Ui02fUn>Vjo;^Lu(qH(94`V1ng2aKWNF9!R(8;2E7GjWi>=E6l%xFawsH+1%m#*X z^@)DBn&G)a)SZZEZ%wv7Ww9~~XaO}5&j}apQF9IrR$x*W+1z}`R-G+`Eu-zDp47NP z@9&5wsbaXtSojYoNZstWq&Do?%QmXc;m4MZmk@yJCEuv1-WNg_v;_Vyq+&iG6=~LU z_+|#|5=Fqn8In5rd^}rGW2g`wo5xlt7v1p-yapf*k)z|Kjlq9pZ^NQRs8z6 zM3+lGCif7(1Z#jVa1$@b7WEL_==A2LHH7C2FNil+#N7@UD<-_(tUSO@?b*p*k@V|= z!!GAP4pSafmb@WEZihwRPYToBD&xE_RGAmmB^l+jH1PVWq1`a_&zQ`{uAr&3>vEc-^+N`3gHICg|y!?s`m3O|_*kcXwRQHu0 zL_Gsw2vmYYyrXA&^Y3q9WQ<`&3uJ%N%Le$RNc%noc_V8WE}|jQHGTKAy2r3rv-Y^% zK{uHf8qvK_x0291La0XSN%@Mkk+t#V6f3suI3nGUQy}w2jdzlX9Jr$dnorg>L#pL| zaoxk@84!R=_V4am{U0gg7KrxkBD>TGtKE&alPF1zLNFpl5fA?Lq&uHM zOX(Mg`+IfOrkC~scztQO<>J@{Q;EBxrh2h=Syn?LOXs^9aQ1I&%xIq!EIhmeRgz zT2SemWopY=Y}A8Ggi2Ns!j4H#prOw!rHw2r-t`$;)gUSTvw8y;l{b5bMq_0AU9hOL z{c@ohQe$LiXL$caV{ra_*ehKxwcL7&hxr3oQm2;jDQV*c&cuS7VDo9LZoK3;Dgu3 zh`H~k69d;f`Niqr1=IOR;IZ~BqWMsn+N8FKid9J!yIn2jG+D`6h>@~V!E8@XKR_;$ zP~TG$bcuSp+i1Sc%bml?4A&gyoC_BHl9raHHy}AgG0%bm6WAEbDr_oG;Dx%a=}Ih= zGF47-`E!V}4reMgI`pa=Fxjd~0EYVpfjP)SGJOB|PG2&PEuFe#e}DffoO`jqWYNTo zf00Urq!N9H>(>pi zhUD+li(-=wS#RJFbG0Bj0fNjn`_0d9My>(gye*uZ@n7=^6;Dv80@5-+6Lu9907$y_ zok3X^Gf>KH9ZN47*7OfS zS2S`+cWYzG=5;~`UCvT^?KQRjFf;ZFzp1Yu?FPVicgPB7QT`YU1svN59nf(V z2rmC9Iopa2WRf}C9f6p4(I)_`G;8<_L7PB_aCL-h7O=Raz&vT0BH?C5C+48LVp{w*J1E~&zXOPa2W=iKH zG`L~5f*V>C;VtZ`Ra6TAO{Aq&hQNkuL%NBSzA8D9G zVtpJ4uu8B3t=H5@ptJFOQFo8_tHKbx8)5E;lFs87dRbaFC3EUA7)9cw0`_B6V&|LUZZ{PmgAcE=fPRaF< zrTwb7Y0t7%VBT;DK^#OZe!{2Uvd$hpw@0`sw@|GEUwQ%N(jwGRN}QeqUi?i^=9U3v&M?P1I4Vqz-VA6!&zpQ4v{@_6Bm*383&Zpk-AirT9qv72eOvoE^Qd}L8 z%~tL7>)p@(GrccV2LLYTcGJJ;kjomC_1U%CR{Az>qnYZPk2VZr<#^eF<3$P|V7>|F zX8@oj7d2B)y+V|uJit5n>gM+@r-zOK{~l#|nn@ELtOq6xXNe>TR>O>4kJD~3=FISY z9e8mNnDxhHj!Ncu<*oYRX22FJmEa#2_EPV6PVyWta8qDZ#W$!o-1+l$Zp*zi;^Qc{ zJx~@|Z!2KvFVFF7r^#%!*fR<-fKG2sJ77Cu^UtTh`R9}8%DY=W^#&&+S?8jrWUd#< zQs^IHb?m!G$6(Paa$b9L?{C!_@fajD&FS9p`AnT;b#sWhO5nF$4`Wjiy}^ zSB{=^gG{Xr6_-^XM;A^IZ&so5FqQ0RRNi6>$s57_9RBWlw9dBhwZ&fR69itDwN1n5 z^?c?AD_HzfI)Yz~dDGGdKN4Wfv4^&@Cl7Dz3@K7x&*|37W9gt7d**E-ZDx1ke&zOne z=y}p(Fg(QR^|6FXVL?GXjD$6OY<+|(-}8yzu4&MX-4(p+jay(V1qRFQyhXJFXJ#6X zawZx(#vHDpXJ#sA^SmYeIn^?F@FzM9@-}uvbmrzew;&Z={n@LH#S|U;%cd3;SBc+- zQd$CpS46ZG)ygZMHAESLbRPMQeW^ICh219&6fWUNyGy@5 z4z-u8U~41!%1FiDgDUhUl9n91=qT>D81^^sr3ygQMXG1;bf*2zCJA4TE`{M|l2V|tOIBPF z&@fUP(%0xN_Ox1D1a0eC4Pe|JTl8$W7Tx(n89+$R9d&ElUQ+^LhRaNptpUU#2pY$-lK&%w-M zPab+f8h$^3g%Q;ma(#)Ax})Zg+}J7Y*2KnFM(~;${QlVhkL>lnik#W6FCVP$H|7Hd zby)+DJX#yrUW?#n=kHsP9s=vX zy2-_H#f8)p&=3gXBvwmq8?@i1 z0GDQ?lfhccIXL15cFdRD+xxyyX5pT#lY{Rrl?)m5z(#c3pAlYV?x6l@l)nTMH+Oxp z=O6&RK*;{QkhXGQH4tR7I$Vb)(g#S}}eGYl9R(n7$G;ssvi zERO%nOMH9cCr{Q-NS*ll*T-Hwu5l7DsA+N7B4&DT2NNjmtE?QmDk?(+ej+L;-z`4Z zj6JzBOkj^+`(dguih%DiH3pz+ZD3*>wn*lGNS*1o-7D-e-H>R&t9>sj-x4SyZ$VN+ ze>M#0Vx(994R)vsfR-&oP?N-VYt9(v=$4w)-_%MKEjlKoO*S`Ui+Tq7ok{?^dZHah zd1Rrht{4ZDd!dmu++1aIAFS~*6!?gl-qL^p52K}vtu>EjlB9n6dy?t}luzW@2@!=W zK^s}OpFQ#64MQg4uPR@!$pM{F6@2qiBs~$fvt)EE65Q^-HcGr~!eeEzRRVpDicr|U zz_{v4`;q)gxA`tlttC(c0s-Wr2Du@A$t9?bp`Ti@wb6!$;-s(*a><4cv0?iEEKCxl%r5kl{m#`%YU!5@wK6=a4VRru7?GdJsemacW| z*>fLBWZlT_&q)n@C>K8fQ~DyDRgwY6dd?pABS^1r#|DuP>Q>7#FCtr|H_p1Z9Cpu zZwExsh~B^rf*S^@mye#-)_%ZN|DZ8=J?weUXBy$3)H{OP+1h<(CRL7>m5o4aFLdW^ zB-Q>zoGlg!)Wj!D@RntOKcz9&jq7G$!DBEU>VD+r(b z5wtk#p527DBICt->kV|73pIZxt2iJrGRO(!Nk?ODI!!l7`t6MwtkMx^NMpuE`(se6 z>DIZJ?bqDdVrJWq(t8sm;u>Y~X~GY&=2Nh>8{>7OT#Jw}dP;`{BwbcACz*nNKD2k=?1J%NlRVBa^!B_{fNltDU)1bYPhK zXb4t!2}@<%PYhJ>sBNQ9=Vx#bmEt#N>!?D|YB}58{tF`<=EFdcH zUe^90!&O&)dEdn(gO^0IfD)`;ipGj>|K%8|uu^EEtyaeJ zqHiL_UfUTif^3zz|6*_ph>h=TY#p>8-$Zs5i_J}(tHv-SEfs zzv}XFHJ`H(k^vw7YbZ}Q+o4rP7-&{SW#~O$P+i{Uz3slxBMh;2KOhu(VK$|s^aiOran^&MUUKlL9 zn=BXefn zJg|7jxw4@ckl`h*lIdl2cQ?Wtm|8bx2LZ0qKB6s~(ZPbP+Z#95!z`Tv*-q}Ifvg~& zhOI6}^+dP<+HlH>GzkR5iO4L)B6?~ijdO`9S&)uE<2>X7+TEC{yu9ms5yWoyf{t=n*+3c zo|rY+!u+@Q=hbh263mD!ya`2Ze?t*<$=%*nmRzf95(bo=C#pS#r~UM>6zED)G;S8+ zN3{-opg|o{n|6ToxoM5IgAkTe)<}+UM3uZ9s<>E_dCIB;{?-SoKp-tMy=fo22A#CEQuaWJeebf-O_|gbiTv8<;&s21iBNi%rUlI6;|da965n z2jb_m&UXvc`RiG&OibWa;?+B#yyFsL##$o>WiR}w)dkae2A4a3QD>3*S0X{+Ucg#f z0B<)THGBWZcQkU0(IGX9bK%FOKr;G^!f^n7$V4xTFfk#6TrWwv=2+!TVI6Nq16_;7 z82m1s?gckla%}7ST=VS}#=kT?+C!+zM#hbat&{AJ=#0pIgIJ)KD>2Ns#ed4$yaNs! zT^WT|KPr1AJghdA_$lHPV3W8_Xx10Id?!s3jdvJ?x z#MVt(w4_peRlGK`Ek@^GjR`TY!-TL*hAaYW#gxf+UB-%{km&^U)Cue5p9E`KAKcz) z2BR=xWk$dwr(jTTE=0DR`gv+*09ZNp-!yaFL$VzzVL z)*uKoQ$L@xgK@q4JvvsraPSZ+&pfv}j9#kx!|q#K4g6+jO)bSkD8Twe%*V0rIMG0& z-OjKpfyqqo#Z4MkT>9y(Z(w2j_?n?^Z5CAKyo%S~MigGUe9ijBq^a*lO|LM-vG>kQ zKmG1J8+*PI`*OAbX`O>ac@fjyC*yzf{6k0~d<2OUS`KpSK6%63AkC%qYqXP8R#;ukNg)Qc;SJ!s`m+jyNdZFqwM%q?D!`^pDYC9{}H^Dj@J?6lPJPk7dH^OjuyQ z6q|}-w=$6vrtK4^=wQY!v4=i2)Si+br5ExDguD=`y0NHu%4n?E#1D1bpLLaQn9TUs z2mRpcGdoIt^eon@7WT>Fh3!)!v`el2exVP~AjzLAmPqqb^o?nnHxc(ZOem=aWCPr9ZpOJP83!<~or(&vQL-qW#1L%@Tn^9+SvSV*W1`Shq!EZ#PyBIAWpCo$1 zHb5{DDHN1eHyh6Q@~dhoob~vv^V(by`{k)=&hz~b%^6ee1PPUENX~BW7Gi=OHkMiW z6)F}%(G`{o`YQIAD)#-|uorvJ38GDdNoI zi(g&DfDhXM)6O?=Sf3FYo0Qwu%dnkn&>xpwHm2O>p2PI^y z3ergk+Zn|=b4T3*)siIs07ouN@nWRqEpEnUuBIvjR}gY(tCA`>>JlrzQ$Kqsohg~L zf(9eq{NI3sPqUDt=1o`}`xRo&y&x}E))rh2GSMnVc;6}Mos4%Qh?ytN$#n@$K(U*6 z_e9eRMQuliJ*6@hw5t=Ab2ao>!cDqnB?V>M8K=I(3E+n=_cct?+LCYnsmr$bp6=;< zhX#HJc4d|TtuKhb>GPUq-tvbNuZYmG{K9K)59_i*MaiySRIrL{^j^lZX>|{-jJf7AJ{RSJ4PBfhS}f>OS;u)(Ig8!J3FRz(Az zpoy;ZtDDGgMtO}9NFScD0?MVZXWa2`0y|Q-)CTDJ6nYz0vW|qgy2=HfG~7Q{+J$SE zT}RO1kQ>_(L5OGrttL=tzU)p#87QUhbrC!+qkoG$v@#ipe_CgkZ7OKDS@)1;YAzk) zA+P8^rC>oX;@Hwj=8p;x#2Lzt2R%Jvf_rpDKl@BbieN28OpCHd551!WWfAX#a+BA; zAAkm?=nlTRlkE1)6_wJLiO=~gqDkodu-NWOD~sOw6u+gmdL8LJ;A)rm+7ukSd^yVl zfBxP>;Dc);^0rIl$l5A4p>WoT^@N3zGKRj22-<8Zdb?#0^c9Ma;5S1fMUSohS|pD~ z*%mMiAzfN5*|n0kCPprOMJ`jEc6SG~&n|iCgA{#zq#TMs{Km6u488+ItmrDRL%kwa3~TMCvzih1yZJH+|82j7@VlGY9esK-UE=i% zTj^CIh!#H7BhfM};6X(+Kbk}W}T(YWf6UJOli(#YKJmx+YZB@pBtv&q2 zcDY6!sY5%M=%yoEQBV&TLFj1RX5g-raaw<$1j4*OwRqbp0!?FzLw2%Qn?w@BjcBHv zmll3Dm0tYTgOiV1@a9Xm^eA`~O@}4F5T>xYv75@PWcp2Uv8*J>$;fX|>xHLyqP0jU zj$p@ZIx5x#wNL7^diQx3M~ODR-dd#p0DJy1Rgc2H<%gFRMh9cHcQ5sB>HaF?RzVp$ z%M+;fBMgrQjOWxP#}lM-?M+3AYT8pq5j#q9_6CbR)@i2NH}zuCdnHXg0303zU2Lc8 zETPq;MAr&lSCkGfT@=}^F8#Skd1W{!ZM4CgOQUR;_IkP}6SUKAcBSjR_;{rhZ_%a) zyA2!O8?BnkmRVji-zaSA%JrBUI!r;J{EI2^y?}<&UUN_VE&1Bl0$BL==)6hRb^G)Y zahv-u#H+c|N1A0kYI0;&^xhEPsA%df@K?IG0q0SrA5Ky^$&K$$A7$ASrDcs7eD2xj zcK1>r&roxpMo$b%k>I@1I(heRlW4gp0=>}j-81L|d@GLTzyf8J?JfLut~c(+E1jMm zh`%+;Cirn>gis1`qHwH3a_rYrBnwc^QeA~E_(O?c+Gy)8Yrvrbt^dCHN4X(E+dK$` zc<}w@T3X4qCWf{HVR|V8!6YLk(5olmeIGP9^Xw;auPVzG9F1;yXAyJ~JGsrQ)^vay zQV{n8?@@#~$x=#h|MZhIvJ0&)rvAqgd*In@c`L#zXcl}wLI4X_L-u9MMe-;02)<%@ z3qB8`L&l&MjYl;W^^ksz-e)C)d_|$0W=v^}v=nVCfUK&G0bM_t^bp=tQLkn(gkdMd zz8k9>+-{b#lqVUh4gyELjPMsSKhBOw&7~Q8LuEtabe%}^*P1NC7&&=%hjPNPmEQ5hmbDvU zXV3l}#4`w-rcM%9Y%N0}5H5X%bx*Sc{Y(xiLyQ09Dbfj?vchL)s`r)ulnEbuJOsR& zT9ChQ<$AUjZ~YTY%(Q5mua!sv-&k{Coe(56ph#`P7)96Z-Zuo_L93i5)WNN-PnX{} z8vI&J5?Vb~rD+Esz5K$YEM7=A5naSveJwr8378d(AcOSiRa{YUp-SxdKdW>8%<8Nz zWi3OI5B76~j%VlG-&RO!L1?+Lov=A6f?X~E~8lubDDER+A=SN*DZcNpJ3aa!9% zAk!IK)KxxwT1^A4)93jA^dFCa0&~^3;;m|I)65yMd)tjNV;uz1SCQusyTxzbgk}~3 zdO4OpYR(ur^DP__L?8|ViZ z^6zF$?a*@X1_9Vl;k^a006@Om8n#N<-e*^_R~j+@!~r3VgPg^PhTklBued6mOW%Qu z#`aGjAV=DH?xU)zI(VB0TnLj4)>rP8$5-0J$u<9SerX*0;ahgOcsgV;Tr5ic7eg`a zJ0se!Kx~l2olrm;cUBO+i?uji?W(0bb9m1u$-5-z~Mk)1D9>YEID-#+)CVyem0les75OHy|79n6X>qrxb}-(MQ5=_p@{o-+}smz1hT8w5Qfurt?QJL zRC*aShk3Ao;2!XAi^PiO*tlzhV_9U8`y1a8M#jbo%f(r_?;-OG@W$7*xc}M%GVR%# z2{Y1*oxtA!DC^Jg>(!7)LHxvYY?h&)$#Xf^%>mVtY5^{A4^3a!2mphW*9X$}WCip_7x9y3|LFoWXR&+gG$UEg| z!_~|in~#LM!LvgF?Kd#(q^YU-Pv6?Y=C?r3D9$gf&L2PTJ&=M@Ul^}2XMu>|sd+le zSG7IHKo$*2cJu}wK$h_3e`LURN>{9h@mz_wB5yrM zT=6ag5$aEeaWase zZ(7`LxS3kN+@H!18j&O@YT{S{|F)fR$B)6p${RCY)2{90vqZ9o^3G`a88 z&Pu7yHpq`{{Wjm}?&Ved%jHjxj^BqK^e7Y%&#o>*zrm< zZ{G5ys#I{)VevF@LnSOfm&4EGGXC(xMOhd#oZ?%V*nPi1@QfoDt<$Nf1=1R{k-~E? z;P0hl454;^c3JiUgJA_qQp@GDR@vo>`knWi#xlg)|;aOxB@+*?0lBIIbupXe9g?(6H7Tv#;3iI^3zV zBsQX0CN@Vd+$%2axHYJFbrCfmreQ*Lr?14ckB3EqTSo~ zN59w-tEzg z>?K;B!Nya|Ot7%NTSLnAORX^G$^tJmXROAiQX58cR=v2MN_;(zB7OcVb&zLd5$v@! zrV*DvHShtOq!P`ua}}k14X}?W#C&i>dL~E(;*=ZPjiWhx-2PkAATv&tZ#F4egC3UP zv9>VBtHzxry4I(eRL5T2;oXaYtk+3+#{AAa(&d~!J*)WG>#Tyr{1s#iCA>*YrQxbt z7Eaz7K6qev!jv4Mj~$;VIZJ))u1S>VLd0-i!YKRpnf^4(fN=^OqHYu^Gh^kmybti~ zY^jGxpR({NH{+kQkqYe+|JKu%zVC(|t1U0r@|K6q^(B!CwQjyDgKD_L*Sf!DWvAYJ z4|eY$ma2e>?MNHaszr6YaT7|sB_N;o0S`PR`j?S+Z4e?8xb%T%rF0BiAOm4WVG==#xDl}AN!$sUuu{8W5{Phq>~I5txtdxFyN0ac=@Lpe2u=~_hA&5 zQ1V9i1&)UbTKaBZ1=ik>$a1A>Lx%1N0kc)KM)$7?%%5vf!}I4~c098Mf_Vfc%zrj* z=QQsQqmq}FyMf+KEQk4v31xBbl4+&#fPqEbU~jgUmyWtScJX=GNjdDrPQ!4^q*vJ6 zo#E4AkEFpJjo6dhgCiu>NwHPcCV^fjea(hGt0|g0K!Ofv%985~Uz7xk7w(fbUcG85 z?Y^MqV;uhksd&ADxH=`csz+qhI2BsY1>8;NQgn(DN%_ew8g&bMay8@<5pEFWHl`*N z#sIWq|D;)9C#8xHR{AA9H&wt(`3&_fA)TMc{iS<;ZaOF;E`edFRRa`@7|r3?_K1iXvILSFC=7$=fXk8)|-M851__(vhM# zOU!^q(w!Qd!(C8Wmg%q820;(;2>v?a4pf;uDAj?Ul1n<^F9kTTSnKm4h@DmwK8{5< zX>=GyVzxp9n$#$j7rPhM4K`1T6DF=_u+XrA^hmB4v;uJFYQJt^sVNcNzORDy=u%)z z%wt;E8&jE1-j4Jt-S6e*$@0nd0Mx7jO^w9_NOmAlv9Q_P$ucfkAW+V;ws2zLV=qbB zS`&-Ck;RhG-OuYC;g*>%g)x1xlhw(Qku4fLrJFgmAmPF%J4mpHDT?SKz+lGM@|hNs zv`ej%a+qTx&^4`~Ml-pyAeGHp+_|(zZP>tKmcUbSB}J|#n{Xqx!g#bvCiHx5H>p50 z%w$EQcjUPLZ-w9j2Ej*kmh{Px8C(UMV)eA+x5+K<8H6w4&-FcUtN9sXgZ{y|e`X2Zx*{j$C@+L1?9e>0kPLT7h0Q~3?!XY&1b&#q zJpMmf?Z6^1O4j4Y9cTzUc{O6GJM4rIie;6ZX-%e=U(ZEh+ zNl22`IRFN#*gevZqhPEmv;SpV@`@zO^sRtZLTxMxIu*AH3=Y@g7SL`8T9as$xi&ce z(ECCsLX8K&J^LS))MKf;t1(uXceIdmH6Ok9CT^c+HA<+7?jN`GGoIjg?@p1mqTO-_rnlo#IomGu?a*cKnxZ37ub`)h9(*fUwO?%Ux1Rk zy~+Qi4e~@6=@s~FgU7_g)Z*Y|B%N0;KlHVTZ8%V*=4Tlx7aTt4UBtvHUSHL-fb!xv zD*@+E`4qHeynn4|nAPaa#5>H80t*;0D$0?-P5kcc=)EHB1>Y>$(k^c$--A+Oh$dl} zgf>Nm!Vzk5C6+DV&01n1>2DGM>ZDDTkQ0=Bg9q9h7v;|(#E^5xD$TbNV(_N8@>>8k z2yLcH`}lKe(v^1wW#)Xs(5GF7G}4D5<0sHY>^CY$#|eV^3k~FL()f;+|H`lkmzm9$ zF+lkVT{Ubn=rHi|WxDQHhDeM+Enie2N+Rs!=}pq1Ir`O-`}!2A;QbAA09II z3B(E!A0$niyPhB@pEO_0)HHazo+y$o1y+eQ8BXiGY4$3NGWteOAbTl!` zxHj`8=5plNsDIh{U!{EQWp(GHBFp-SS2-UU3kqF&zTGcuKipCM#^AD)PDJ*+`<#2< z0+f%*8t$UUzb!sPU~te3e=NhKN^{K6^<`{~{n#kiP*=5{~|H zdAtbPcIDX^zSU{*}-l~K)Bbm?ikU=<6KZEIJ(r3JFi;4v)lPAWb%h%fW z_Q-#(>t_-CLDWZk;AuW+29I*|E2|6P8_O= z8a#qNoa=(sm%R?GHc@SAEVO8XKG!PwfZ7+yt{n zgC#()m~yUP6o|F?($c6tjtv;QrB*G*z4{rNXzEE}jbx)TSnF{LJI(cPEEv;_Teog; zO9Mlija%OUn~muu8v%ep(6r`T;>&`VGfpJXH*Bakn_!iNg;%IGqS4{0DM3R(1-?Id zKNRN~L$akDY9I10S3UIR`?DAw^X&b@pMP)vspEKVzB6& zwVneYmx!3S-0X>xFAQu#!rSemvy`TA8?e za&dNZ8QX~hJ1?_uYES!WGwd{9wY)~mY$m?(Rs1ip3}*Y0HVcAgl282`et!^TyeaPz zhO^?fr{T&l0yj4Dx3M#>(JdB-R4iTW^RYwhUlQZh$VUxnzWF4E_hYw25K9!qEWxT4 ze_D=L-h}$C2_I-)d${H{%g$zS0qaQH(Y#)+mgSfmXH5w(l5*jjn;pa)Z?HkGFWgve zKXroCW3f1k6e`A0!m1p!LX;fqm1;JP81I^Pv}nL*miYO+!v?syqnwsSKJU4RFUzeGo-%Za0+my#AY;X~ZmKOw+ou*vLX5???x5k2 zMSSPe=uKUib+-_#ZuP5?E+M_Lq|g##o0)ohr$HA%UELm=B?O|)&O(_GsANTxc+zoh zO38h2xfL(buMg8nJP0~}(NFYNP)NNSw*tjtKst**K>L3cQbYGfwU-zJ5!@AGUbA&* z>lq+G$p{eF4^P|GJK2L$oH@JTQ;@n=~;jjK{-`t_d#B%pHv*XXiH0Lu5%&+zE-8ot6X$e7((~CR~ zJ^AxVXaH=dMjwD42TL)EWCQ5G5;k3B0!|P0q262rg)eW6rVBez{fTA!BKA2$Y{iU} zxxj;Pc>AWtU&gM1)B2VfUXyVPpoq7RN;!hKM=1HvIZecX^)Y!-|Br`!pvx8PNY`w^ zN-?d^sW@s&3O>TA>z&I%c(_U9!W^r7&-_)12dovhH`w27d0Di0vD`C$L%beJLIcTD zMht=vKa!f0Dwuq0Q&NLRL1=|b)I8)h2g?&jjXEPvQBc@`_H%}WaTezrqpUx>`ma1Y z&q9Q60-2xKjKVC?^Akf0807s0YAK;%6PHgLwYy0<5Oq$dM0c+N@U6PXK>WcB@#4q| z7S#3Fib2S|OhPGp>T0Cfaa`4nTvwmZI8L1SNJaUBVZRH&!1U}rg-dQlIiCkLclwB` zlyok!rHDHlZI6S<0yw~W5ERT(iJ{>L;~veoKSqo6M#g!AcfdZGpq6t$do%Y_2y>PfzTaM4B~*qz?akC{LF>7~wD zUzbhs*KX#Ftbu7BXoR%!n?Oj!!lHYQJ8*61?mZ@7rTMC?vl>OpGLEU_F}BD%23rnM z7#P#>04a5nFngg>jMX8PR#RGJ3p+)kq9J_lRECZ6LWc!A%a((^iW~O2SH}cY0sGRyzi~(MD=^OALui*{L2^ro9+qBf-b zr1K!E$yF?zk31OXTInAtr}hX=`;$h=2^0LP0f@8PN@gpaEIPq``OW`W}4DLA6zL6=cZNc#dcXNHfh`o|nd=I|zKPEOhBbf3u!fFdjsCb6laX-7*Hb2)qJo|NV zmUuC4>=FhZElxbVjuo%~_0D&`Z+Cnv9Z9BOqUpNTLWu7%*R&04;Sohmpoa{kKL-*T z;Uoy&8)1k$hXVdqd#%R9|8~#$Q**p1#d95?6lG0~l|A=9q`a7w<-E6OCWzp{9kQH# zWeE#B61uRN(ojjEx(|E!eIo>GzV8xU@3V@TyPtDwQdEnz?Ep&EV1p-fJgRT(m{)+? zQG$W`yr8%ugEiI3m>Q0U<`0EYv9eTt?@-2P z?`7(kh#{m*tm@x^Spo96XQGqXOm(8u*gE`fxz|m{ryu2{BWV=08LT=ECAb=8HM)zAb2Z~ewe2mwER;~- zrEnN8?rMJrtZ`hpn(ixW{KYX!n@uJ4`4rKP)WNuS)W&;+(IH|s{_;n8SQ$BMyr-;o zAIb&49GM&)w1U+?g^hGB$Wlc@xIBHGZvIYmP9p<8kW>(QJStD8;gHGQBii$F)A@Lp zI%oLYLCo&15%)J6Sbn)K&Y~Pggsm5mohApxB9o?tMh^daYlubZwF6H1Or+P= zAMhre#a+KYM%;g{?TE1=-5s1PGCqrtk(w_&`kE+j*_4)Y6B!1=eE~K;rQHq|zxtmv(Kv z*OvTYL85+JOY{YrU_>UXaVct_>ca<**-oj>sDv-)-+8Z1nk7F*2b&m7(3Q}}a;U1u zh}9MIDj>`p5K)YZ+lHU4eJi?BieZf5{x35=4n57`^I~HdJhsw|6Zy^Twf2^|w8904 zG7kGG-@OP`^z)!G02RGYpVi2glH02{F|pmB?|eorIV$1oeyu0Gu>SVt{nry`ySwaq z=7S^M%Ep~iUI#l~);uv#>+qikAd}vSaeVn@9{mkpd;RJ}_TQ+;Cd)k^Isf@iHKXcs z&ce>QEqR`+gzC$bA8rGd)ggcMu~)YQ_491*M&@YjDNWbbY)Ec8umSQC%%&U(XWxyPa}fW8=Y=_Q5SdCJ33XL8Bx6p@ZD3dKW&JuGcXF9h>*Cv z6guPZL|sRZe#t!4J?89ke%@h60^=A#u3 ZFKpUjbn>Y>%a_29y7FD6as`Xv{{>_hGkE|2 literal 0 HcmV?d00001 diff --git a/devices/surface-hub/surface-hub-qos.md b/devices/surface-hub/surface-hub-qos.md new file mode 100644 index 0000000000..8b7aba1a62 --- /dev/null +++ b/devices/surface-hub/surface-hub-qos.md @@ -0,0 +1,46 @@ +--- +title: Implement Quality of Service on Surface Hub +description: Learn how to configure QoS on Surface Hub. +ms.prod: surface-hub +ms.sitesec: library +author: jdeckerms +ms.author: jdecker +ms.topic: article +ms.localizationpriority: medium +--- + +# Implement Quality of Service (QoS) on Surface Hub + +Quality of Service (QoS) is a combination of network technologies that allows the administrators to optimize the experience of real time audio/video and application sharing communications. + +Configuring [QoS for Skype for Business](https://docs.microsoft.com/windows/client-management/mdm/networkqospolicy-csp) on the Surface Hub can be done using your [mobile device management (MDM) provider](manage-settings-with-mdm-for-surface-hub.md) or through a [provisioning package](provisioning-packages-for-surface-hub.md). + + +This procedure explains how to configure QoS for Surface Hub using Microsoft Intune. + +1. In Intune, [create a custom policy](https://docs.microsoft.com/intune/custom-settings-configure). + + ![Screenshot of custom policy creation dialog in Intune](images/qos-create.png) + +2. In **Custom OMA-URI Settings**, select **Add**. For each setting that you add, you will enter a name, description (optional), OMA-URI, data type, and value. + + ![Screenshot of a blank OMA-URI setting dialog box](images/qos-setting.png) + +3. Add the following custom OMA-URI settings: + + Name | OMA-URI | Data type | Value + --- | --- | --- | --- + Audio Source Port | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/SourcePortMatchCondition | String | 50240-50279 + Audio DSCP | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/DSCPAction | Integer | 46 + Video Source Port | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/SourcePortMatchCondition | String | 58300-58339 + Video DSCP | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/DSCPAction | Integer | 10 + Audio Process Name | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/AppPathNameMatchCondition | String | Microsoft.PPISkype.Windows.exe + Video Process Name | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/AppPathNameMatchCondition | String | Microsoft.PPISkype.Windows.exe + + +4. When the policy has been created, [deploy it to the Surface Hub.](manage-settings-with-mdm-for-surface-hub.md#manage-surface-hub-settings-with-mdm) + + +>[!WARNING] +>Currently, you cannot configure the setting **IPProtocolMatchCondition**. If this setting is configured, the policy will fail to apply. + From 92643b8ff6db355c96de24559e6d4b53c2fdd106 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 10 Apr 2019 10:16:14 -0700 Subject: [PATCH 162/349] added links --- .../level-3-enterprise-VIP-security.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-security-configuration-framework/level-3-enterprise-VIP-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-3-enterprise-VIP-security.md index ae8b0b6cc3..9c8c264402 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/level-3-enterprise-VIP-security.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/level-3-enterprise-VIP-security.md @@ -122,7 +122,7 @@ not. | Feature Set | Feature | Description | |--------------|----------|--------------| | Exploit protection | Enable exploit protection | Exploit protection helps protect devices from malware that use exploits to spread and infect to other devices. It consists of several mitigations that can be applied at the individual app level. | -| Windows Defender Application Control (WDAC) *or* AppLocker | Configure devices to use application whitelisting using one of the following approaches:
    - AaronLocker (admin writeable areas) when software distribution is not always centralized
    *or*
    - Managed installer when all software is pushed through software distribution
    *or*
    - Explicit control when the software on a device is static and tightly controlled | Application control is a crucial line of defense for protecting enterprises given today’s threat landscape, and it has an inherent advantage over traditional antivirus solutions. Specifically, application control moves away from the traditional application trust model where all applications are assumed trustworthy by default to one where applications must earn trust in order to run. Application Control can help mitigate these types of security threats by restricting the applications that users can run and the code that runs in the System Core (kernel). WDAC policies also block unsigned scripts and MSIs, and Windows PowerShell runs in [Constrained Language Mode](https://devblogs.microsoft.com/powershell/powershell-constrained-language-mode/). | +| Windows Defender Application Control (WDAC) *or* AppLocker | Configure devices to use application whitelisting using one of the following approaches:
    [AaronLocker](https://blogs.msdn.microsoft.com/aaron_margosis/2018/10/11/aaronlocker-update-v0-91-and-see-aaronlocker-in-action-on-channel-9/) (admin writeable areas) when software distribution is not always centralized
    *or*
    [Managed installer](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-managed-installer) when all software is pushed through software distribution
    *or*
    [Explicit control](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/create-initial-default-policy) when the software on a device is static and tightly controlled | Application control is a crucial line of defense for protecting enterprises given today’s threat landscape, and it has an inherent advantage over traditional antivirus solutions. Specifically, application control moves away from the traditional application trust model where all applications are assumed trustworthy by default to one where applications must earn trust in order to run. Application Control can help mitigate these types of security threats by restricting the applications that users can run and the code that runs in the System Core (kernel). WDAC policies also block unsigned scripts and MSIs, and Windows PowerShell runs in [Constrained Language Mode](https://devblogs.microsoft.com/powershell/powershell-constrained-language-mode/). | ## Behaviors From 19f954dddc6e28de632756e9eb15a5481cd226df Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Wed, 10 Apr 2019 10:17:23 -0700 Subject: [PATCH 163/349] fix spellcheck on screenshot --- devices/surface-hub/images/qos-create.png | Bin 9873 -> 14390 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/devices/surface-hub/images/qos-create.png b/devices/surface-hub/images/qos-create.png index d99a0c2b3b2fff63517d5bf7857f18c0c8beebeb..7cd4726ddb7f42d1092347ab6c4ad5f5fa9923a7 100644 GIT binary patch literal 14390 zcmeI3cQl-DyYC+oDI}3XL{C9v1kpv85Yg)pWQZuy`{*qaBm{}xjS*!=4+f(p5k#Uh zQAUXfiP57Q<=pdo_ulW??LGUPwbwfPkMoCzd8}ogd7k^euJ85ve!bMuQaMe_LJL9A zY1R8mdJshQ1%jwKPaFehRw6RS!8a-oJ(W99X*b&(cyaWJqNXAQRm9TmSK|Y$uPWp%aGh`o*dX>s3|JaUUseDCHrQP4aW6roX4@>{N}y8>yi`3WWcp^tv7zZ2)-%k zP($Ap|62~{Mo@cR%PKs-+FKU*A&5!M>e-)q{emveLx-Y98tD6-mk)I=!WFTI55^gl zPkPdrMQl>CWc|}JrM-`p(6Gz+^q%67sr}qe1-V{jN-!TAY|p6Ov{~C|mU%LSEJ9WX zi!ELu8tQ4wZX|Scbe#MKLA;HhX=Yk2RW8M+J2Z9pwUiQx4an-DosDa_60XwvB`N=U z&pADRI!M7-Nr2a(E6tfC5D0tlwE$UdJ~$hpsJ==XDs%DMT5=M1nQ*K(p@Mj$KGRq) zVFqTuO1F)Wk;ykjZ&W*sAghxNV>x6siVRCS(aKQ^!+F|1jsyHA^ztrUX=1p=7JB(A z%M54fXk?qb{6Sp|D<{9RG^8L3-t=%~&|_A6Bto;RGdpeh$(X%BM?GP8`IpQ&M_qRe z24nN{^BbGVroh>aA#-|@3*_(5=r!77*t>Q&<`>@u?6`X@3=6Gwiu4>c{Yh*JtPgZt z{n6@G|LWB#ktf}39$Vwy=|TIuzS%_z?D9bk9i5$3#1gZ{QCv^P?fCMeAul2y>U?99 z{urYIyFBy5?V6JXxal_*w5rv~ z@S#$KW~LNU!_d&MSFdVk?N>WqnMvTGEnf?`+@rB9#6)7DZtf#~d4}rc_4RcWcf~c8 zn3Pr zOO2R5nS`HVx0l;rA9%zEDGVA!p%{?f*fe!d=RCX>L9D3a8 z6bbYW6!c^||7bf|<2Z7@>XNj&p~yqNNVB^a0vP(Imdt71*>nicGeT&L2~A#=^SG23 zfkWkr*WvyaG3r8X#a+y2AvN7CEZ)07GyS4Jd!}ChJL|8*H%%ags<%I9Pc9vSLL>>L z=%Wxy^n@A&$^2IjSG`Zx*Ewa=FHu1{!#`zfj&F6-!zh2?seFufm3EG9~ z<-{i@THh_yFVIqSX!2if9O_IH`)XxlGa6Z0wYfCzFcG+g5DD7z(a*gXjUuF6jgGEL?5B=uy6xDaC9frDpqwinW&N^iRq5P!D zi^;Qf?Bkugf$}0n@|T#a%zRYOCDeN@zN?|lMi-u6=+9HnfpsH`!rSSm>y@e}FI?A3 zk(dk+vBj{hPN%Xs@Rw2x*uUzpj@T-2TAx@C+GuJS+k{+m8dl8YS(A3q9!SF56JNk) z9I>y^&Aq3n{&;R~PJHDdW5HScB95rh5`NlpI)YY@f9jSSA`jf5lJb{|v|9-Y2@evn zkp7UX&rSU@jL=YjObIFQ^rc(xW4_`8?V80LzKJ60y{gAQtHiLK#C02u$Wue_Rp38! zGA2jKr|l7zyVXJ66S1Lh(>nD{Na670;z?=)I*_i^)4NjeMVHY~2A)qFubD1R!@t8I z&MM*jiY6b6`+>hVQ`sX|d1VH#fSCEs!;Zl_j#k-yjI1rBE$1E8B3}11k1M1z>DdA6 zNaOHee^ClDV9@OL4OnATj=4=*-5>{X6f=W2GfKycrO`O_y=G7xDK@S=AExS~7lSuv z^s>%*|FGVxdMh{o&Blss#$dOBAe6#Tq|cLvM3 zE+$dKd+Dw28wSO>rfsn#qruu7El%CSx~0~^K?CW!>rMXf$oZyIMK1>Kd9o?fl*W{C zT}WhOkK#GG6D0a#A{}o&={L`BYB%ZrmH)#vNXLz35dUr6al@xPi7CdH(dr=O=k%<1 zc3FiJQa?Q{$VlbMAFYPB%(;W7bZNBEZg;zQ2|t+;741l0tY1IPQ3ll1fFeVce!fP< zhxxX%NE79~IVQi;(PCJvL6`}LAA92jDDSjv^=A6*Ou;!vI4M^$w;vvBOonfjdCVjl zjS_>|1WhxZV3Y zpe^rIqbhp)S6;H&yTnAIVNT8pUC$*(8f~BKB|Tq8q%vD$mNfgP#&DPwySa}{B^N^j ztulhAXHor1v8l?3!YxeCTdqVAC_yFQffQC8j=X2ARw_V$;fe=Q&V^^WPWC~Oq!hR1 z_R7>|6VK46>_}a9%#XqCpLgkH8Hye-=BK$Hg%TAn_=y_c7%G_5N15UzzZ}QBdbOgO z7WqyR`z|sKX~K?)GG^q9_kl9B)5<-Zau1&f!gSJJH@pU&27TF^n}cT+lAQD;WS(Q6 zr2U4DMHSl&j+5Ht#k{_9aX?IW60R?Qy2e|?tSP6rRe4}1aOXS}siK31c>X{NibuI2 zh~wWJ-ZTi)Ly+>+7a0gry8n|>`q9rL&qEM>=>LdAEKp|MnbMj)S+W-d{BGKx;gGRC zM$hpur`?d5d=yI1TJ4ZdLw7M{V}7XpVo6V`Nc$@e+0mare;ze83|#xwQ$q(` zPQz*pIjqfgb^U0K(tLL8bf;yktW9^8EUS#W#ayjn=|ejy&);XO63nd^E$NX`}gcRih*VL!BvP8Sc%B zoWnXu^oipMYw~+5ccp_0l`UVcPQP^KG}&U0=P)ugG)zKxP9pi3#O}>W%c=CRi`geM z!jnsh0wefhs_y|9cSYmed#8!}X_=YqRX=0b8aGEBYKZhDU+lkJE&r#D14S--)CKVSH8bPo`@w2SDQ#_v8&-~;D2fPA_n z&4Vn$%3izHB7i>xS}>)mN|fv)6E@qMb60bDqS2DS8LZOGBSVhGZX3)rVCV!u0Dixw@HD*;?#wF0vNS9G|Xrn||DGz#=6VmYKylQ4k|2 zA~Mhv9C*fJ^joxBzx8Rz+GysP9-_R&q*}PdwC0S-A2GZBPZ?6kFX3@Tcf=gT<#d#$ za?YMSZg-XRhadYRD%sY2$`W>(JsUeB?lgLo{}=Dg>3X!7gJh7Y_n2ohwZa_bGnAbn z(9{Q#y-bC|+L!V*(``7J;0E+^+o+OD1a3@wi>1GSOeCFRSjnBOfPqy^8V!^Y3>V-< zC>N@!^$!emA%_r8>UqY8GfjWApCgoDy(G+jw{0@K#(wOM=r_pg-jR_5n+*=*WsD=q z5uRUU5+`-vTpUhk6_g3ut7ShNXwuWuqwRXjAIoowJG#}aYif+un_Qg}(e-vlI~zj^ zJMdJLfe{9;DW-Z|CP&#ao+US6dn$tNRr3vn37_fH{^pB<4J)CIg0$^GaSj`olak

    !xg_W{zQ!tnj(LEcIdf;!Iz4C9$+rN3K%9L>Y4BM@7JW>SQ`&ay+5D4GCefz^j z>l%9kmYPfucA04St_vv$t6@GoI& zG5f(2Cee0%=rGC#D?bMD##T-S*<}&?x{4>aL@IZmy-}PGOJ-2Stmxm@0y;I^=pTts zItYbs{8y?F2)GdE5nFJ!{7u^CiVFoAD@K`n0{eDeVUN|^U(33@CI6H_WDpUZY%dHhG#7y32#B* zE)vqX&d=Y~3B+QIs=Z@Bv!pAE{m`J-{_)wTC!yAXpBe2E=DI&qayiVKmw$l~Q@+lt z8e^JkTz>I1L7bP-9m@tJG)q-R?iT|_64=wBNdefK63%0n=sKy6980isr(A^dm@a(U z^f<=}lQj&2iUjLUPe1%9s$M@b5gP|IvrSjp2<^(}H`jn>o>IL{3W5(OhEaPgj#i6n zFx`A`b{dt<4!%<wXZe$QB+4MHprVbD&yeA^bK!srgZ(~vt7aa|`CjhY0b5w!?J6g<^N3G|I5iYB zB+g>7TW!WrJQI<}np_p{?MN^lDpk?#f2C`0hz%9&17dHh_Z1xIugoWyNFAoLIw9fO z$8~$Pz$08zlLQIw6GarxUp$wc*$1qmp&cRQyy+ z#Bm3jXl9Z8_os|>Z($M1`5vB(oL%lnFc6LUs3!~Xdoo^z6#7JSR4fzS19xR<@YYee z0k8j9DH(GibS`qUp}^E8-XlkLEXE&&GUSWoKWBdu+1%ZGDZ{O-a}34@Hg{i+{v9=G z0pFa^ccWP0<>5rKvL>DPtfJd3) z9EB*2|F2>LI11uz=)3Ot*p#UDm|Hv&Ljmy{;ZBt`zVr5FYx63OrpBi@<;Fn0XK`tEGz&_5%NRXSy=l&z;s49 zrRj7Nqx#Nl`N>o4QiB1za|JeFUfgu6#z=dweE-11$M@B7vS}O$#IpBm551jynpfjr zd_>?!3y3wp4b^?nug$c}Sesq8*dPU(j_8y!n?u;v0~0!bzTgKdto1>=2geuv+`0i? zlMdWnAG@CAbJey3RMUvUl^{)eUB&dGzbpmJ5Ae3H{xPG^m)npt@D;o z9yxyI=NT4J-l?GFx?fp$$ltt1BZw1??b6E)0|KMjwfo_K-RQ`@DdKgAVYg_%CfKou zK{We}-PadcZZZ|5gL}owZl>7vqMmlpWuU5Wb?Ge*Lr}-X6~Er5tyYSU0>bN=KaE`g{KMk!AW)Ju<9RegFG32| zFCOX`CTtJf<!9%?e{{mDMIZGPc`WS)c2VE;%0no#j_$O~}g==miQoHC5zE z60d>!M|dCI#CCi!* z@Ur9Aitk0Uc)E!$(Nr!y#nY#e@YyxgMY@dY;s>QmA=#$dlS8Qh%tlEm}p z{@$g$bT<+Y9i#UI+NPW|T1NVYBvTk`<_1gFNjm67K11fU^JB*$$n7sl^Y75we}voq z`P_>^?geqj;j?2$pvx6Y-UhkZzZN51yuvDkfJII%lnxM{5uz)0CDso zmk=xW>^O%H>htBkUxato>h-@X`!}K23)lc1ar?o~RW6eg4f~tKu%_=|q;q&zS=j~f zYG+6M^=ID#MmH%>-Q!m`4?jP@ZAsJm-CUzGv)Q7uCR!6(z5ArK(MJE8k>=p$)LRyz z%wqNi)hE;&z4;+*0gN*NsHa;9yl2JJ!bhjb6vo0tev%z%1LO{4)vUDp&lkRca%)!F zbS?NrUF7d|V_58PzS0AVeuW4W3(9chiUaHMCu)sKN zu*n*c3u)u7@|HFHQS;~$8ybG(`EbY{_y!B-55r2G;OFWD50xwvO22l=&bIwJA05%= zl3URSR;ZLu)n%jBI_{tb?J{QhxlfDo2h}a(p`&I!bj$U%Cj~&w5RH}FwJp|rRS<|Z zt+!|i55x7*Cn$}NTD*+8anLw-iI5L7w`_Bk-fH@Rk!_HN*IVZeomuAFt8oo3D98>P z6~J@KPp}{Ep%3Jo&6T5*kH9sj+oHP`Mk>3&RG`k5B*69e4cB(2I_4}O@ z5z61)muv$Hk8zDN!qGH(Yi`Fm`!5jr(T_d`_Go{XHnx>SXCx0*HIC+MXFE^E6U)qU zftK?k{&7bPS|lU9QV{_Z=qpd>ts!Lwuh5p;u_{+?GBOV&jCu6PZmxN?XC)@WFZ--> zFcwZ#=q)ZwH19+s1o;DlNOrE|ezbt~em}vI6mCRJ5wcuBlLec$A3JK827d+mY}m5b zQp%>WY`fgx_53pPVE_utdh3zG%NAidu8lG5)f=IDKU$Q>!*1NTG25>$SgqdZx3R!f zRlBMxTOf%wU{ny$Ay(O0*254RSV5OSV=PfvrU|2_X|m|>CiN8MeE}eC@LF&c}Dyh__stI`{#lb!(QTI8V>Xz&ZQ$$lX7%QZ#K;w$9JoX@Y;R zzwWJXr3hls4L)AaJz6`OX1o~Vgo)_4LYRj6=5BxNGWE?^rFOHpt);dVB}A-AWSZ#D z+^r(c>x>=IWWb(k6t?VCvHF1=Bmu+NXLQE=pwrRgBn!9@dkXMm-kb4PxVVAmV6NnR zF&{6nQ6%?p?swDZdJ4{sO5cpTq>!sm(p-0J6~@K*YRQKYMSCi+<2u%gkXR@fAd!Ss zE0tMKo1&G{ke4y&z@XKY+6#rG*`s2LWX9YK7#f+PW#=Q5joVId)Oc2gjnhLlzeRIh zhop26pCYVW+fy)^EZ))|bOWoc+Wl?};Zv4g z?L~`(MN*6r6*j~GAmv(gg(BSfC3R`l$MKIb{=qNtcLL7`3UKGS_D>4R99-WO(oO1+ zdHH+!LEMe`re8 z9;SR$XVlnZbQ+Y!EVf)PP z8&wjFadjMty()IhXM-V3<8HRNa;>j@es*)qs2-g|SzGhnE4P9V_U>3F2%xGnrRnvu zU$#9b%x0A-fAHPk7$Pn{C23Hlp1N}5Mja{Q)d{$Ef1|%QaFjzla)hs9DA*Oo@}GC- ze{SF^T!NAiq@Y{-9V7zIoySlHio*Z70|hJcI6a3bQ1#-n{+ptp1D-VL0hYTEFlx27 zFF}__uQDdkwxIzsm|y*oA?yFGGexK++|Wl?=SDd!?T-7Ggd0472^O0-PpmHzhmJkA zZsdTz??oEu1c_~2S!>k{?0o6qB5r>8)dQzlV`4-$8sK>6#Qo;Y8;fUO`GLtOMggOz zagkNt%VxmpVjpPmT|?!$*O5Gdx2OmJiLf$^cV1@aMV-&W2}^g6E(v3oVR8TTn$k_F z=Aciw#8%+$I-zb1!_u)|o@Dv9z0J#`;Rm`Arl;tuo6ebLQkkEQSI?$3`D2Gz^lK<) zFu}qqD=UFr2t_ghR$K>WE5YSUPnL%e?|R=3mRb)H%-(!Nq)@2zbP66hHa+Fmy<)|- zwf!-St_yTndtgShuqNM}yJYQi{`JM^68l%xyi#(FF=j55`Qx_zfPZh$c_iPwTa7t; z@)D=4U)6hmKGFl=rQcKE-an#%JXeR>YtipXmAB>;7ZVA#Z_0Kns^eNVoNvxvQz};; z;XSdrFk(s3(@6p9NjHTg#$2DVw`WMYp`G+scwd7Q13T;V!}3Q@fv<0TQv;rZ^#_i* z+bq!f5?_-A1>xRBW|m++s8CfXGAhF@0v2{t_$D#{xHefhkM`o#KBe(5wB23l5|l_m zDlnLc`L8piy-R(6zEOExMnowd@t6$UVg%ByXUNRItI2G8|3VUkO$Tm$SH-mjpSRR{ z0vrD5?A^d0ZpR+lE`wXzF@X;O z5Y^F9deL&Y+#<~E2o#6-87iEoz#)d4VLX^SW#238eoyLj zNfV2h{V?Y_=RLz^ZDO_a_-LuLW}0Y48HmpmYJtcKBlp4j*`X2^ZSw;QS}HgqQMD}R zmcfvN&#B&M`J}Lq+EX~|uNUi===Of_-l}n#bPj&>JXU)e4e5+?Iq4)NV#`LW)r}gH zlFaT>mAEy#rqpwf&6w(86Br#?BH(9>V2JW2%-XcSXJY|!|D zD`VRk(uuh@$I&ls<)vC%GU+kOjE}x1@zcSdT9if+G!5MgiX>Um;g`(ZS{cP9r!neq zk>K&|+%{##(y5nPcmjTOqgGmu<_QSLEQ&)qh`-Vk*G?9a(#0H-Ql*ggIgxsd@9@@) z-A%WSK^b?IQ>_euC3~J8LfIa*KCdgr9L&uD82#A#qSOJ-P)!_lrS7XSpf#5G23E!HyPidw_pE=&}BAF&74|ZLG>JUR7IL0+3P=zPQ2F z{)*WWpx5)P^AGW!m_QBqJed3b;_qN8>jWe7BEHCm5to{pienv?H6l2J0E**@@Ef*F z{3cdFH9FJ`IFRagV>=pgZ4W?UcN!9glv+cmj;OIEtzNu*|f~Om+ZR3jl1PyO@&TvRvF?`p7|-c7S_zjDMy8<_tn#IQ1Iv z@G2@=ey~Y-@&ZeRpn@*f2!EaM_JkTTHcQg&syL=yWjcknIZns>H^n}0KPkp>J79a| zPJGA@-ILUXr9b|r1F!OmT}%P3R{PuyI|;jhnSv!9WYophXrYTnLa^u4^+xQPQjyE{ zG$B^!&-|s&(uCByVDS5M^yhd6$KWxYxLE& z`=p|>7@CBlGlWEJyG#9|xQP4D`~Fy!;cKxn=ZO(*H^kON0|?omY!B1wlIgRrV~U`< z0mZR3F(TXu{XO&qggruI1$6b>pCq;yFF>7q*0?y)SPycC@9T7!--t4TO`iDle@}0( z#WAr#5Q_JqD+Gm{cxeC_jKbi5bz}d1i~nE#^d>I-dTsCrr{VG|6w~bSc)d6MQYPnL z#YqVZ0Q6=1|8v^(Uqw^*@qd*FAo3`(514E~{{bC%3RlQB+HCgZZ_4X3GZ$P3_LdU8 zYl~rb_*Q1lY3jHBo04V}aGicuR_FyOxT~e1Wc)XajT`-{J3fED#V+LutebJ)UzzzJ zNA|&FruV?8^r7+ZYAOhB+JAHgkiAY2gseR7l3OY4UnTnxlJeVpfx~jaxrl6IzYM;-Ub*o^d=xuqe5RORHn02!xWB<+H4{( zRgS-ppy!NfGz7qc0zBy8wM#po0^#NXy3X9`iw&|mSd%}jd{2HU@9ZSuG%6aOmc~*A zgndG&uyKZrudp|$s&xS0envFJQiW+!b`GPL~(*DW=rm39u;hDcS{u?iAIVcr??7p`zcYhN*DY zQ2!kUcO+@BV!Xor=jU^kE|YTP-PIrMrq!jTliMrDA%m>9r_@xQQW6WS0!yA};MM># zOYHA%@VS=ewe1KTW$Faxp>85(YZ^NPa=gQl43Lg*oD{EeVlGdE3E}O%;ckRLCd#sxVxL>1a#)0R7ndlZwjK$q_*ayKhBps^hCKMnB3O?yUhVV~pp%{e%HRTLIf3Kltzf z&T})K6ndoNUZp8v{|gNb#B~jUngKCH9FqkzfKa_GvILt~@33x`2_PDCor{Vq536T< zKH=O-+2L+k1>IRmXGbK6D}h0XD;s+@$+PjE!rq2ym_selq3E&G>LAX2^$ONPb%+nT zd>%dew-eVQ|8~NilI@fuFNjpSP2U>;`v|r15d}(%Qe+#9F^;9Eq4&xSV834$MoZ>I zfP$$+U1JU;c4B!qY9g_JZr7YJ0Sl}dC?KsjeAivue+X>>vU4Yz&^7Bm&nFl)s z?R+&K4ZgJdOa8D9km7`$N_lc6aP|v>uxj_!^vqnpPshrOQ#kzyfJ=3|q@u3V5@U}J zeh40Xl=IqNv51e4_b@yBFbzs)`nhZOQX)9~K3iE?9W8-$WZ`+BUDBzA{d|7%f(E4= z2nMavu_l0r{~?zt9B;VMW6h7i4|ZW2*l6d&9BD$9&ESEk48})E>0el1U|eFlofp7yVj?|IkG?J8{;4CnjZgK zs4>Z3lYO279P!@E&exf4Q$hmGyM(e%^TQ2uq7#x$ih~`bG9^?mBn0mcWOo7s%CZzs zf(?L>FSv5QiAY91$8F$vjO`7`@5lQBC(TJm;6eF&t-T#k$exw-=x$((#tx_GgKtq( zrTqS!c2`p%*>Td}%L_L?D|q-v(2295O&Q#>mis$tZw=0QvMV=&h9bT21f{%gw((5yLM(8GY~`aUd)s-TAj=PiV}}e_S#mXw z`F=>0e*EdhnB74B%q(0^(P0&s1&Kt^LdF_sVOvC(=F=u?PLoZt5@pygnPLux3l;I# zwP(RSy|on~zh~iWmX|~Z;f)cmky^K0Cv&`~U2mKV5Yu%=X1;lir~N^An6A1EQ7Gs140_*KYZTM3Svc;)wYs{=fHlpf zSIi>r6nAe7NMe|6S9N=Z`^=Xyhq6ZTEdX!nOsG(P_py%sG|OP|Xdpm)FShPNxM-Rb`s_BzuzeQV@c33q|L zFz9|`KGV_pz;L123+++ zTS~#aAqY`i1-vy;7uYY9xUQqM;dyS%9ab@Wt0NmAwsg|u&kZF$zk4My%JC6tqIT!2 z3^)P}SJ!uGEfI?MEio^XI1jhmKY&P^ETE^~3Uyn&{7F}jOfhH3O_C?J9KYLbk`DJL z4{1thD7rperIzpAyBjHjN0IaPas7-&4=n`yU)$;;PeKG$J!IpA-+T#9c&{dyTyq|t zNSZK^_!Yq!WUEbnQ4r|?27-KGvv_Hgy_*votj4;%S1NeCx8&ViSqX1xI^16-+M7(H zS1FFsTJs^f`Gd(S!|PG=Z3ZT&a0!ssbO{${?K~gQ#5<4B%jnor$Nb)F1?zHsYM39a{bfGU+En?TlJl#aUat8wzuz^X%ET^dDD z5L{L5$bGpg#8PvFnOb(Le;`8nZuT6&H%yMFA;Mj7fwrBxS1P;~P5jfI;rW91=gou^jk#v)4`&OJ$3h9#{(n2d!iV&Wl^=U|T6aU&5&0LtMoH!54zcWRBQlg)L zfe28#nE#dMXr6vht=o^)W33PyD$CkELqCGfCM0Mb(M68ec|57K>NroncBh8)?HkPn z(Tk@jOW^lwOy(uRU zW#@nk$+E_IxXPIiT;$C`M#R(;z%Vw=Azf}vFyZbZ6teaV_39ErPuu8y-yFx%*!`|h z;Ln%s)HjpspC^wVfebkQ%ICI$PWtcv9pk_E-2INO3uDdS|6`*WPD$N~{bTC!pW=}J i|BJt|B8HBXL;8+>Dql;pnX7>8L#oPJN~L!mh5j#6L%VAL literal 9873 zcmdUVcT`hZyLSLl$L=Ut7{rlLlqw1;AYcPTq$ni81VT}P1Oie521r00EJR?yp@k;W z6G8wu0ewbGBuD7Q=u^5hel zU58=2ci*_Z>(09^6gsCb(%8I|&fj>zWFzptsYy*O4{F}IE-)N+HS4e|+M@d}d9|ng z64+)6x&jjJ0R7yk0{Znh6|^smA$eu{fBnRZlZ^tCc7?>61+x`muY{uxER2CK7xZ5= z5F>Hs0#MOUyS1tQ4U-~LjC!iR_wdIY^W^&a`h}_f*Uw~IT3adbvO?WGAZ^Va28m>% z&RqKnWm2SZtP5(WW4+Oc{JTvM@}8pou@5kW z5thfm`W{99Oa-Al``QsQ-6`zz8#D1^V5iiiq&v6cdP<)#B=f2>_~MbW!QyR_3YRrk z`O7M_f|ycDY6?48jx5c!8D*V%rS|Q7oC}5d?ZZx@7o3)mKC2|B_c)gV>L39B<>}3W z;bL&}>|mKubHjxJ&ty)?cFuhXvoshoIf8-u*^8K-zPR^*){IKN_w*$L1J702*G412 zm8KKsARHa>Htr<`_`Wd!r_yFN&E<{4GRKa4FNza6icJ+>|R7 zcgA^qR*MUnv7GXW~dJkfWCN@qJ_DW1}yf4o8< zj84+h`_=M$Z)`relDxHi{#(pnH!v<8&E?SC*EcEdXGdiYGoSIr9U0fjP%6Z)#qkI0)vgUSYiny{ z?S%jAK&p#sM--Bq1Xzw7A2i7BHtqf~)CuW~U|k(EW|;}5jVtx=YfH~$)%sop>g(&H zo2BI;XV_cdw2}anH{dv#WN$2(9XxgJA$j^S+(@&EY_ZTeRk)bMi-8{RF^rnV@#BKJ zK83lAv1Wea4uCkjCqNhDTy0v(@$7f6e5K))a2uMcNhSW)R_tt~+3gU^MD?fl7XflH>F5Rp9LXLN2|rUZVKhPRBw;x2v{B_T>!k zpjF~l7c9n4P_O(Zzl{xt=cZR&+O2k+n*I&l)ncc9U#I!Y0Xd!f4+x`3?QJ$sS-D#_ zPUww+;o7<7*Ur?7l(Eun&+u!OX1UzemG$0Uy)@m$uXD9XKMCymjhQ#$EeSTdGOZ^B zQm~>l7km!vUUgdV5!lS{P(7q~c>U~KWV}}@n=bj44OpvsBwrLUPI4ZJXV;4Ky7RgV z7|Qzgx{0+t7Z9mJWqSV6TO+>r+>%!jLe5y?#;|sOlqKTH6W;p#a&JfK^Hbec0=)l9 zQXI>hdJjvRx6RnWOp`4c5GmUSvL9NvIl#Q;MBkTQwbn0XpVcSL4HoX$Re(tdER6G; z6)bXxdaK#o7qT8%qt{YaoOqjLtqeEMoH_dQID9i%#OM2eB0Ch85c-+8 zpn(L2q^qLgecA^D(I+0gK#pq>{V>}bOY@VxW8Hc1c)A4vsa`OqN+r1)pf6OIP3ew- z{chKQx1E9bo*-laJC@HN+4oq(=}99aBg$H|SwVq?ssCiB{ zzjS(j(<(H+`>SL+|JouW!Vngf-|58?Etl2MMxaq zf|U;4H!1_V_8Szm{eR{J02ed;?_3M6Jw=MF{stqSL$A}uWg%oDfp4bbj9$nDZkT2nf{1AFHw?FWeW%i|?7yOP| zURPV#QakI(Nn^VSmzK(z${lnTFkZ^G7Zn2~xG+t7uC@I()~KO zPpU?u^n|asB~OSd@#`xm@(p5iT?`7Ac-e^#)w?LDu+}m`La-(%zL+yc`7DuS7F-e|MTB3mB%Q$0TP34(cA>slha0@x{ zB-N_)?%F85T3x-w3_DxKsQP|@uIs)Iw5N{6jk3Y6BgnW!;IoaE0cXb)~24mGBG z@=#ANs6DqdS!iggnvaD}CkDB)M?|?X!_L79oX8_Zk99wrh(kwR;%7k=d{NBwk!WG^qf7 z8pn_Xob-D)vP}i_5g-kJ&3#?~kYBioO+2K5V4#+6#lUPvsnd6M zFplZ^xrrxPDzXLkRsQ%dAuo7UXf8c_9iEeu)3p`k<^li^>(Sy24_VE-8PE`|Fxc@{ zTJ8=tH#Zl3Sl)k-{qB&o*{8hJdLp{Y zlzb4=2v&m4)V-^ncEydHDCG9{=X@5s$KlrljuCHPr>yo*xI!Qe)h=VS23IPi<(NpB zZmJtD_x>x2m!0N*k_TYVg>uZS_yS<4d=vyhNk)g5ePX|(RzY9S2BT%(`^2Uf!<^Ew zW1jHdNOW#PNml_QVx@24PJT@>8s0@OD^04$O72v>&n#N#Qlof!bo2d>CP2+xy>s(p z3oosEq3_-Hb(+Rsppxn~WcyC7?guqn-sxL=^X7H^7%ML;cSBV$5y1tUp*VEsaB40P zsKYD*XrTDl05DM~dV2~jucvBjQNcRpb&+bI$I-K!fnu+HrA7#eH->);xS)M+ov`|| zjMpmAw9ox3t1>3hX^gS>-}Zxm=gg)WV(03V+I7Zl_JOafsjh4Xm1?O{-zJ-9fBWof z$vQiTS0Da)A=w5llA0Jmbb;`xXr7Lg~kQ(QE--c^#0TCWN z#)2)Uqgdl$MSI<#?=X;j;hscfAc@53eb+*ct@PwoR#a4!?g0@{kFhvG2=xv)+Aesx zlNt=)xk7rV#-L3SwK6{lE3qPeDPEWr?|UGqo!qMGc?WY^-Y)khpm*|~B|v$3$GDGI zV+fEl`3qeo#+8?UrSMrwK;X%H=VTZJzU_;s`jurPQijp?3wOL}dq!kO58@k+Z4dtT zaVmM7+EZfOMfYF%L^ii*cWbEk(bd-3O>@I|dIHPCAbG8&QaPQ)nhG;Nx#2>aCH&gDJ+gGgA1zM+C&FF~RHrR=UH@8+n2XI;y5_4)Bf4x@-W1+)B%} zV%XMzXrcR0bJl9&(3fxu^SqA5UnuFGC={yp*=`{ITMFL4AedQC3j@D)WU$E4L+NN- zqBy2d)=B{*S6cmD%3PSw--Bhr6H`(OT+C*@jR*s8_*tDdM`a?r?i06KRWV?uguO+$ zAp*1SHjYEPJc(sVpMFzUB|CVo^@xSjAr&g|3{pCee5_k5RM+6Aym|{>sotf{q_Ql3 z(iI1i>rceB-mJ#>fgz%{yN~61jm5PXXix9`Xnp^o_fJZ@;&PBaunE$lmY5ucr428^ z@8E7J!PXkU2V@1Fop!0L!(--uA`Z4yQVQRlHj0?Tc9}N?AcpzVM15bbH7%@k?5IjFEz) zyW1Uw8dI%8FHeIooSUfEnPu>8Ly^M6)p>-qvY|Cid*Up!6u(|NT7XC+K5S0?s=9p1 z+2otVkMa$M>fijjF88Y|rdL0H%CYzQ*^+)>%$mz2I;7}!JFP#U@ZEcT=FkV>7x34- zk8rZeE&y7Sd_{@3lj{Y~rfP|^bFgBWZlw-`*Keg)uW+7QcU!a;7OX@U+g_c@^lUcL zi-^W)I}sht=h%)TuV24DaNq!)s{Y;q#Y{tdP1J#RE$9-;`oj&0@uG{}qh*<6!L4-D zDb>3C^EF->OTEaPz7iV^L~dhlZ_DtxPzzld|4{lZ2jrxgxoFZbV#Aswz3Or3&S`^6 z{GrzYsy{lejemZAraQ(rL->cbgA+}q*m@jiv=f_vI5epr*E zO>hynNvn_o%x110m9v;;(cd)z%?LbF7eMRV;de)E$`KvM?CMD%@>#=gqf>A_A|=Sq z-tgh>ylA&*tXN^9pwV3HJG1zS{YE;uUzeMo9z&ZXXZ-k`1y~ z3M?!vR@$?0S=zS07OZZAm!cZ->9tWwzW2w~l#>G3C9UacX=#axMaUJB06X+#n=s|t zVoBm;%J8izM&0VUI&N8#KA)u_CvUQug}O{hR}WE{Qr!qFCHPOxlRFmVl4V{$Id;$K zVG;dS4RX>RCql{h1W=YzxUS`=uXQF&x`N3%nnu#3Z9NYZB+XA(zS%F<+LVXvYz4$g zJvwZUcQ#4Zw|Z5w=W^%L1P^i@1z z--~oBk013?`B~!d}0?E<&wI|E&HCa@oJSaXB$eup0O2ds< zr}wf;4g7q4eFeP~IXSsxK!9FX6NyB?Ca*gV+U4>W%q9P6k}!9BPODTg9niuJ5Si}a z+rk}=`*&+lz1C;7Ns}=I4a1c*E9eLUfyoT?7@0Ovhh=AR%$ko*2=~#6>~}SPs0t@zpdftQg1 z#;Z|eCTe+omF~9OSIy|JA$>dS|&|53N+;kGiB7txh`>7rj{8b)(5+;RtBjZb(IlKl>T7! z>Y#RrMm~l45YO7HoY-y`s+oE4k3PB{KC*ntXh`=dKK{}*U>H%EBXuvjguer zoZ=l`@iEn;QX8&l9P zBUDjW$wvzcSCVvXlvgH%-i*n(B^8ZZ6h*%#GBfAA4v>p6YF4HiHNJ|@SpuFC-h~Tf zEUJI(B*|BNMHVYBT$pCCC?MmWl27E>`#C>s%vi!Hfh=%M5HQa9HG#nynws(`Hf>Oy zF{TylPqwyG3+<#82$f+h%WfS4MBTwu&0S*}ZcmfqH^DkGgmW0p=*z;J+|^GO?EL*a z$#KJ99H)wwWmy(P=(N?w4zX;H8+_~8Yw>VIU2NcF(nB-N3?M~Sr%O&#X+FQs;=~f=XrI$z?zkhG2jIlzD&77$G%rsuXrtxI=3THqzO0 zE2;fJqe{oVQOw-f^BQzID;E0ZpVuW`d>Ip)g7U~c-;+@ij`v2jDWEI*AOFs^{^9Qb zD}t8ai`D<00NyPJxddZ5a(01S(V<%6JSLV$M<)l8sL1uvCLoWLpP&D(i5zA8M&j}J zK(E~@nBi4HsR-QHj-TQ7s=)I?M(Z#1J(1ehbqh+&X+ma`zXP5w9~_YH&Mp)$QV8Kd zHd#PpBf2e10Z!C(WGDFtU?At@ZcJ|waRuDKnCt~(!4J9vjc7H>Ih8uv+7HPWzVy^` zWaX_ceyEhU5U4=~wC``Oj=@e&SKy!cN3$w^cc1d**8eV;ZT1VgZAfChw?bLe&&;EA?nf?b(b|<7= z9owp9GB|hHdZ$4`9qDK4`@F_*`SL%P1(+n_TK`EnD-n_&;c~QP#7G@ydfvRvw^7B) z7xEo*aoPDA+O1^iQn&PYB_$=_rTN`7J-g%raC2S`dXTx^vnTF2B#30c_QFM$JSvl? z6OI}B588vWsqL+aH~7+>bB^;StlVqR0CN`5hIG?4b)An!*U>o#DLnwqSM~b;33Lu4 z5Z#+IvY<&N4C)RLv=7e#QYZ8OWoq^YMWkzJXb9Bh=#GFQ1waeQ?eFyVE7cEL06fLk z1K>cM+^iMJ4gSTNiIY^>hc)*xzcM6WK)M-em%N?3fg0dNFAKr?*ONf5zYDuv=k9wJx)yBIZ*}8XI$%Zk8iZg?;kNlZF+3`03M*e;(HTrnu|z2XPlT0m0qnzar#tl(z0w!%P{x{!P` zr?H8^L*n|B3>YFIdKn#S%5 zJPe5DtK~t`p>+-Kpdj1ewI&JRyVi>gJo@I(v87-@M~`{r0|g1OmPz!n^$E+6z=`aH zsK`ipgW$(NLWe~HR|U*kBul*d{iFx^)fI$g%B8u{*Oquu@}P})J~eiydifAP*$clq zUDo}|NVu^&JLuD_29yTzOJAOsp}7l_WNIwb(N7Hx&z`~JfQ$DQ+{>Kp+I=@M%T&CayBAjm!xgi-Rgt+YL9@8WciOjBCHDgKLg` zCQD|{qy`LB0CG2hP67OC(sk1-ctp-&Lzu9++#ZsX;W#Su{shSj;p*zDQTg?4s$M{j zxXtf=RmkRsSit7i_Nx?@4>MP1x@(wS{N7DHcK}6!66SXs)M?-|kcaFZJ>gUX5i0o+ z05_}djr{;#MJX6E(cBAat3%&!ZUy>wCSRM0Vv(LJ;FsP%k>Wtlqr>EtsYK_q0d|MJ z0oR%HO<(=|rS>_xJ4Vq2xWTk`{K7lpn|ELBbTiSCXJIHJdvk5v&~UlQ(vvY)AF?iR zK;}ucey+rjeex~V=b}SwqP%L>7j|keItCYDh>K{>{8NRsD{yVsz(Cj!Rg)w#0y`#S z{&5d^Vn424`Wjz1nHZgA&4;2GsFN9i)pLTaxZE-a? ze+9Am?YW^{$hsKTamu`-T-`PSCuTtf@?#f$W~&z`Z+V!26ti-$tm<*|i@f<-g^h26 zn;QW~Cmm-8sw?Hxj?S}dHpC^(>Z|?jc$cT~(1&xKCJL?Xk60R!m*+dK)0LNV&Qa1Y z-y6lOE=*TuENm+tLbZXg>%C>n?|O*8Irn7dZpeJ5!o)EGWhS^A`t#+E2Z>fcyaXLlV4S zpQ=2u2~>*cN73M%ZHmpSl zWNj`p+JK~-Ut|*XlWC^fj$x_2mmN1-pVX|4X^`%64RyYe9o9b`qpROSVDeUHs%E>) zG+0N_1n= zIslc4nM}38%2+C1Ox`ivtWje(3a*1XO?&xIkmL6ryZpG`m1^v@&qB0{;hx{|LzP$ZP*Q)#SgIHvX3?D*tfWN5aufsrzAN Wg-z1x2;em`kg1Wyjlye=VgCk-HiNkU From ed5f60a59541a6194b0004ace33b04cfda527d9f Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Wed, 10 Apr 2019 10:18:53 -0700 Subject: [PATCH 164/349] make order consistent --- devices/surface-hub/surface-hub-qos.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/devices/surface-hub/surface-hub-qos.md b/devices/surface-hub/surface-hub-qos.md index 8b7aba1a62..49fc61e612 100644 --- a/devices/surface-hub/surface-hub-qos.md +++ b/devices/surface-hub/surface-hub-qos.md @@ -22,20 +22,20 @@ This procedure explains how to configure QoS for Surface Hub using Microsoft Int ![Screenshot of custom policy creation dialog in Intune](images/qos-create.png) -2. In **Custom OMA-URI Settings**, select **Add**. For each setting that you add, you will enter a name, description (optional), OMA-URI, data type, and value. +2. In **Custom OMA-URI Settings**, select **Add**. For each setting that you add, you will enter a name, description (optional), data type, OMA-URI, and value. ![Screenshot of a blank OMA-URI setting dialog box](images/qos-setting.png) 3. Add the following custom OMA-URI settings: - Name | OMA-URI | Data type | Value + Name | Data type | OMA-URI | Value --- | --- | --- | --- - Audio Source Port | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/SourcePortMatchCondition | String | 50240-50279 - Audio DSCP | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/DSCPAction | Integer | 46 - Video Source Port | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/SourcePortMatchCondition | String | 58300-58339 - Video DSCP | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/DSCPAction | Integer | 10 - Audio Process Name | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/AppPathNameMatchCondition | String | Microsoft.PPISkype.Windows.exe - Video Process Name | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/AppPathNameMatchCondition | String | Microsoft.PPISkype.Windows.exe + Audio Source Port | String | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/SourcePortMatchCondition | 50240-50279 + Audio DSCP | Integer | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/DSCPAction | 46 + Video Source Port | String | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/SourcePortMatchCondition | 58300-58339 + Video DSCP | Integer | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/DSCPAction | 10 + Audio Process Name | String | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/AppPathNameMatchCondition | Microsoft.PPISkype.Windows.exe + Video Process Name | String | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/AppPathNameMatchCondition | Microsoft.PPISkype.Windows.exe 4. When the policy has been created, [deploy it to the Surface Hub.](manage-settings-with-mdm-for-surface-hub.md#manage-surface-hub-settings-with-mdm) From 59f7508324a36615ec7a411ef676fd1870c6700f Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 10 Apr 2019 11:11:09 -0700 Subject: [PATCH 165/349] Added text per Task 3267358 --- windows/client-management/mdm/policy-csp-userrights.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/windows/client-management/mdm/policy-csp-userrights.md b/windows/client-management/mdm/policy-csp-userrights.md index 09b30b65c0..443ccb4b18 100644 --- a/windows/client-management/mdm/policy-csp-userrights.md +++ b/windows/client-management/mdm/policy-csp-userrights.md @@ -66,6 +66,15 @@ Here are examples of data fields. The encoded 0xF000 is the standard delimiter/s ``` ``` +If you use Intune custom profiles to assign UserRights policies, you must use the CDATA tag () to wrap the data fields. You can specify one or more user groups within the CDATA tag by using 0xF000 as the delimiter/separator. + +[!Note] +The entity encoding of 0xF000 is . + +For example, the following syntax grants user rights to Authenticated Users and Replicator user groups. + ``` + + ```

    From caf9ad5b8c120ac5a69c9cbaa85cbff70c05003a Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Wed, 10 Apr 2019 11:12:37 -0700 Subject: [PATCH 166/349] add csp to warning --- devices/surface-hub/surface-hub-qos.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface-hub/surface-hub-qos.md b/devices/surface-hub/surface-hub-qos.md index 49fc61e612..d8b5262549 100644 --- a/devices/surface-hub/surface-hub-qos.md +++ b/devices/surface-hub/surface-hub-qos.md @@ -42,5 +42,5 @@ This procedure explains how to configure QoS for Surface Hub using Microsoft Int >[!WARNING] ->Currently, you cannot configure the setting **IPProtocolMatchCondition**. If this setting is configured, the policy will fail to apply. +>Currently, you cannot configure the setting **IPProtocolMatchCondition** in the [NetworkQoSPolicy CSP](https://docs.microsoft.com/windows/client-management/mdm/networkqospolicy-csp). If this setting is configured, the policy will fail to apply. From d75cf6ed022f570a838a62a65586f30bfa637ee2 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 10 Apr 2019 11:30:14 -0700 Subject: [PATCH 167/349] Added text per Task 3267358 --- .../client-management/mdm/policy-csp-userrights.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-userrights.md b/windows/client-management/mdm/policy-csp-userrights.md index 443ccb4b18..470618e2b6 100644 --- a/windows/client-management/mdm/policy-csp-userrights.md +++ b/windows/client-management/mdm/policy-csp-userrights.md @@ -66,15 +66,15 @@ Here are examples of data fields. The encoded 0xF000 is the standard delimiter/s ``` ``` -If you use Intune custom profiles to assign UserRights policies, you must use the CDATA tag () to wrap the data fields. You can specify one or more user groups within the CDATA tag by using 0xF000 as the delimiter/separator. +If you use Intune custom profiles to assign UserRights policies, you must use the CDATA tag (``) to wrap the data fields. You can specify one or more user groups within the CDATA tag by using 0xF000 as the delimiter/separator. -[!Note] -The entity encoding of 0xF000 is . +> [!Note] +> `` is the entity encoding of 0xF000. For example, the following syntax grants user rights to Authenticated Users and Replicator user groups. - ``` - - ``` +``` + +```
    From 81595a96cb2d4f1beb4daf0739751b8e5540c19f Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 10 Apr 2019 11:30:40 -0700 Subject: [PATCH 168/349] fixed links --- windows/security/threat-protection/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index fefb79462d..f225ae046e 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -1027,7 +1027,7 @@ ##### [SECCON 1 enterprise administrator security](windows-security-configuration-framework/level-1-enterprise-administrator-security.md) ##### [SECCON 2 enterprise dev/ops security](windows-security-configuration-framework/level-2-enterprise-devops-security.md) ##### [SECCON 3 enterprise VIP security](windows-security-configuration-framework/level-3-vip-enterprise-security.md) -##### [SECCON 4 enterprise high security](windows-security-configuration-framework/level-4-high-enterprise-security.md) +##### [SECCON 4 enterprise high security](windows-security-configuration-framework/level-4-enterprise-high-security.md) ##### [SECCON 5 enterprise security](windows-security-configuration-framework/level-5-enterprise-security.md) ####Windows Security Blog Posts ##### [Sticking with Well-Known and Proven Solutions](windows-security-configuration-framework/windows-security-blog/sticking-with-well-known-and-proven-solutions.md) From d49fabe38f4e94e96fb961d45fddced180b56537 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 10 Apr 2019 11:32:30 -0700 Subject: [PATCH 169/349] Added text per Task 3267358 --- windows/client-management/mdm/policy-csp-userrights.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-userrights.md b/windows/client-management/mdm/policy-csp-userrights.md index 470618e2b6..75e19260d4 100644 --- a/windows/client-management/mdm/policy-csp-userrights.md +++ b/windows/client-management/mdm/policy-csp-userrights.md @@ -71,7 +71,7 @@ If you use Intune custom profiles to assign UserRights policies, you must use th > [!Note] > `` is the entity encoding of 0xF000. -For example, the following syntax grants user rights to Authenticated Users and Replicator user groups. +For example, the following syntax grants user rights to Authenticated Users and Replicator user groups: ``` ``` From ce3762eef2e1e0cdb9260cb3296ab3f9d73c465a Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 10 Apr 2019 11:49:03 -0700 Subject: [PATCH 170/349] fixed link --- windows/security/threat-protection/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index f225ae046e..caec919411 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -1026,7 +1026,7 @@ #### [Windows SECCON framework](windows-security-configuration-framework/windows-security-configuration-framework.md) ##### [SECCON 1 enterprise administrator security](windows-security-configuration-framework/level-1-enterprise-administrator-security.md) ##### [SECCON 2 enterprise dev/ops security](windows-security-configuration-framework/level-2-enterprise-devops-security.md) -##### [SECCON 3 enterprise VIP security](windows-security-configuration-framework/level-3-vip-enterprise-security.md) +##### [SECCON 3 enterprise VIP security](windows-security-configuration-framework/level-3-enterprise-vip-security.md) ##### [SECCON 4 enterprise high security](windows-security-configuration-framework/level-4-enterprise-high-security.md) ##### [SECCON 5 enterprise security](windows-security-configuration-framework/level-5-enterprise-security.md) ####Windows Security Blog Posts From d988308e51f7bf9fdde2b6bf1b853007ec4e3eab Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 10 Apr 2019 12:42:38 -0700 Subject: [PATCH 171/349] fixed typo --- .../windows-information-protection/limitations-with-wip.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/limitations-with-wip.md b/windows/security/information-protection/windows-information-protection/limitations-with-wip.md index f3d8fb9489..6cea68fc1c 100644 --- a/windows/security/information-protection/windows-information-protection/limitations-with-wip.md +++ b/windows/security/information-protection/windows-information-protection/limitations-with-wip.md @@ -12,7 +12,7 @@ manager: dansimp audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual -ms.date: 04/05/2019 +ms.date: 04/10/2019 ms.localizationpriority: medium --- @@ -125,7 +125,7 @@ This table provides info about the most common problems you might encounter whil
- From 0ed9b9163852602f6a973ceefa56458880ec1771 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 10 Apr 2019 12:46:57 -0700 Subject: [PATCH 172/349] fixed typos --- .../windows-information-protection/limitations-with-wip.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/limitations-with-wip.md b/windows/security/information-protection/windows-information-protection/limitations-with-wip.md index 6cea68fc1c..34fbd59f55 100644 --- a/windows/security/information-protection/windows-information-protection/limitations-with-wip.md +++ b/windows/security/information-protection/windows-information-protection/limitations-with-wip.md @@ -127,7 +127,7 @@ This table provides info about the most common problems you might encounter whil - From 24925a4c729f8954d63bf2b624dd0253aa124e59 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Wed, 10 Apr 2019 20:20:45 +0000 Subject: [PATCH 173/349] Updated tvm-dashboard-insights.md --- .../tvm-dashboard-insights.md | 22 ++++++++++++------- 1 file changed, 14 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index 10403f1c98..d7f49649e1 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -16,15 +16,13 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual --- -# Windows Defender Advanced Threat Protection portal overview +# Threat & Vulnerability Management dashboard overview **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) [!include[Prerelease�information](prerelease.md)] - - >Want to experience Windows Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-portaloverview-abovefoldlink) Enterprise security teams can use Windows Defender Security Center to monitor and assist in responding to alerts of potential advanced persistent threat (APT) activity or data breaches. @@ -51,12 +49,20 @@ You can navigate through the portal using the menu options available in all sect Area | Description :---|:--- (1) Menu | Select menu to expand the navigation pane and see the names of the Threat and Vulnerability Management capabilities. -(2) Threat & Vulnerability Management navigation pane** | Use the navigation pane to move across the Threat and Vulnerability Management Dashboard, Security recommendations, Remediation tasks, and Software inventory. +(2) Threat & Vulnerability Management navigation pane | Use the navigation pane to move across the **Threat and Vulnerability Management Dashboard**, **Security recommendations**, **Remediation tasks**, and **Software inventory**. **Dashboards** | Get a high-level view of the organization exposure score, MDATP configuration score, top remediation activities, top security recommendations, top vulnerable software, and top exposed machines data. -**Security recommendations** | See the list of security recommendations, their related components, insights, number or exposed devices, impact, and request for remediation. -**Remediation** | Vvvv -**Software inventory** | Dddddd. -(3) Threat & Vulnerability Management dashboard | Access the Exposure score, Configuration score, Exposure distrubition, Top security recommendations, Top vulnerable software, Top remediation activities, Top exposed machines, and Threat campaigns. +**Security recommendations** | See the list of security recommendations, their related components, insights, number or exposed devices, impact, and request for remediation. You can click each item on the list and it will take you to the **Security recommendations page**. +**Remediation** | See the remediation activity, related component, remediation type, status, due date, option to export the remediation progress data to CSV, exceptions, and its corresponding details. +**Software inventory** | See the list of applications, versions, weaknesses, whether there’s an exploit found on the application, prevalence in the organization, how many were installed, how many exposed devices are there, and the numerical value of the impact. You can select each item in the list and opt to open the software page which shows the vulnerabilities and misconfigurations associated and its machine and version distribution details. +(3) Threat & Vulnerability Management dashboard | Access the **Exposure score**, **Configuration score**, **Exposure distribution**, **Top security recommendations**, **Top vulnerable software**, **Top remediation activities**, **Top exposed machines**, and **Threat campaigns**. +**Organization Exposure score** | Shows the current state of your organization’s device exposure to threats and vulnerabilities. Several factors affect your organization’s exposure score: weaknesses discovered in your devices, likelihood of your devices to be breached, value of the devices to your organization, and relevant alerts discovered with your devices. The goal is to lower down your organization’s exposure score to be more secure. +**MDATP Configuration score** | Shows the security posture of your organization’s operating system, applications, network, accounts and security controls. The goal is to increase your configuration score by remediating the related security configuration issues. You can click the bars and it will take you to the **Security reccommendation** page for details. +**Machine exposure distribution** | Shows how many machines are exposed based on their exposure level. You can click the sections in the doughnut chart and it will take you to the **Machines list page** where you'll see the affected machine names, exposure level side by side with risk level, among other details such as domain, OS platform, its health state, when it was last seen, and its tags. +**Top security recommendations** | See the collated security recommendations which are sorted and prioritized based on your organization’s risk exposure. You can drill down on the security recommendation to see the potential risks, list of exposed machines, and read the insights. Thus, providing you with an informed decision to either proceed with a remediation request or create an exception. The actionable remediation recommendations that it contains can then be pushed into the IT task queue through the integrations with Microsoft Intune and Microsoft System Center Configuration Manager (SCCM). +**Top vulnerable software** | Provides real-time visibility into the organizational Software Inventory, with stack-ranked list of vulnerable software installed on your network’s devices and how they impact on your organizational exposure score. +**Top remediation activities** | Track the remediation activities generated from the security recommendations. You can click each item on the list and it will take you to the **Remediation** page where you'll see remediation and exception activity details. +**Top exposed machines** | Shows the exposed machine names and their exposure level. You can click the machine name and it will take you to the machine page where you can view the alerts, risks, incidents, security recommendations, installed software, discovered vulnerabilities associated with the exposed machines. You can also do other EDR-related tasks in it, such as: manage tags, initiate automated investigations, initiate a live response session, collect an investigation package, run antivirus scan, restrict app execution, and isolate machine. +**Threat campaigns** | xxx. See [Microsoft Defender ATP icons](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection#windows-defender-atp-icons) to provide the information on the icons used throughout the portal. From 1d8538dc13fe6c0a89e30c4932a148e9c03e00ba Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Wed, 10 Apr 2019 21:41:08 +0000 Subject: [PATCH 174/349] Updated tvm-dashboard-insights.md --- .../windows-defender-atp/tvm-dashboard-insights.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index d7f49649e1..4e5bdeb5c1 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -35,7 +35,7 @@ You can use [Windows Defender Security Center](https://securitycenter.windows.co ## Windows Defender Security Center When you open the portal, you’ll see the main areas of the application: - ![Microsoft Defender Advanced Threat Protection portal](images/dashboard.png) + ![Microsoft Defender Advanced Threat Protection portal](images/tvm_dashboard.png) - (1) Menu in the navigation pane - (2) Threat & Vulnerability Management icon @@ -55,14 +55,14 @@ Area | Description **Remediation** | See the remediation activity, related component, remediation type, status, due date, option to export the remediation progress data to CSV, exceptions, and its corresponding details. **Software inventory** | See the list of applications, versions, weaknesses, whether there’s an exploit found on the application, prevalence in the organization, how many were installed, how many exposed devices are there, and the numerical value of the impact. You can select each item in the list and opt to open the software page which shows the vulnerabilities and misconfigurations associated and its machine and version distribution details. (3) Threat & Vulnerability Management dashboard | Access the **Exposure score**, **Configuration score**, **Exposure distribution**, **Top security recommendations**, **Top vulnerable software**, **Top remediation activities**, **Top exposed machines**, and **Threat campaigns**. -**Organization Exposure score** | Shows the current state of your organization’s device exposure to threats and vulnerabilities. Several factors affect your organization’s exposure score: weaknesses discovered in your devices, likelihood of your devices to be breached, value of the devices to your organization, and relevant alerts discovered with your devices. The goal is to lower down your organization’s exposure score to be more secure. -**MDATP Configuration score** | Shows the security posture of your organization’s operating system, applications, network, accounts and security controls. The goal is to increase your configuration score by remediating the related security configuration issues. You can click the bars and it will take you to the **Security reccommendation** page for details. -**Machine exposure distribution** | Shows how many machines are exposed based on their exposure level. You can click the sections in the doughnut chart and it will take you to the **Machines list page** where you'll see the affected machine names, exposure level side by side with risk level, among other details such as domain, OS platform, its health state, when it was last seen, and its tags. +**Organization Exposure score** | See the current state of your organization’s device exposure to threats and vulnerabilities. Several factors affect your organization’s exposure score: weaknesses discovered in your devices, likelihood of your devices to be breached, value of the devices to your organization, and relevant alerts discovered with your devices. The goal is to lower down your organization’s exposure score to be more secure. +**MDATP Configuration score** | See the security posture of your organization’s operating system, applications, network, accounts and security controls. The goal is to increase your configuration score by remediating the related security configuration issues. You can click the bars and it will take you to the **Security reccommendation** page for details. +**Machine exposure distribution** | See how many machines are exposed based on their exposure level. You can click the sections in the doughnut chart and it will take you to the **Machines list** page where you'll see the affected machine names, exposure level side by side with risk level, among other details such as domain, OS platform, its health state, when it was last seen, and its tags. **Top security recommendations** | See the collated security recommendations which are sorted and prioritized based on your organization’s risk exposure. You can drill down on the security recommendation to see the potential risks, list of exposed machines, and read the insights. Thus, providing you with an informed decision to either proceed with a remediation request or create an exception. The actionable remediation recommendations that it contains can then be pushed into the IT task queue through the integrations with Microsoft Intune and Microsoft System Center Configuration Manager (SCCM). -**Top vulnerable software** | Provides real-time visibility into the organizational Software Inventory, with stack-ranked list of vulnerable software installed on your network’s devices and how they impact on your organizational exposure score. +**Top vulnerable software** | Get real-time visibility into the organizational software inventory, with stack-ranked list of vulnerable software installed on your network’s devices and how they impact on your organizational exposure score. **Top remediation activities** | Track the remediation activities generated from the security recommendations. You can click each item on the list and it will take you to the **Remediation** page where you'll see remediation and exception activity details. -**Top exposed machines** | Shows the exposed machine names and their exposure level. You can click the machine name and it will take you to the machine page where you can view the alerts, risks, incidents, security recommendations, installed software, discovered vulnerabilities associated with the exposed machines. You can also do other EDR-related tasks in it, such as: manage tags, initiate automated investigations, initiate a live response session, collect an investigation package, run antivirus scan, restrict app execution, and isolate machine. -**Threat campaigns** | xxx. +**Top exposed machines** | See the exposed machine names and their exposure level. You can click the machine name and it will take you to the machine page where you can view the alerts, risks, incidents, security recommendations, installed software, discovered vulnerabilities associated with the exposed machines. You can also do other EDR-related tasks in it, such as: manage tags, initiate automated investigations, initiate a live response session, collect an investigation package, run antivirus scan, restrict app execution, and isolate machine. +**Threat campaigns** | [to be filled out when the widget gets updated, right now it's blank]. See [Microsoft Defender ATP icons](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection#windows-defender-atp-icons) to provide the information on the icons used throughout the portal. From 36e87b1e4782cc3f6feab1cc6be14921e7d062c5 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Wed, 10 Apr 2019 21:41:33 +0000 Subject: [PATCH 175/349] Added tvm_dashboard.png --- .../images/tvm_dashboard.png | Bin 0 -> 141968 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_dashboard.png diff --git a/windows/security/threat-protection/windows-defender-atp/images/tvm_dashboard.png b/windows/security/threat-protection/windows-defender-atp/images/tvm_dashboard.png new file mode 100644 index 0000000000000000000000000000000000000000..8ced6104f111f5d087015eee16a89995c027a882 GIT binary patch literal 141968 zcmY&=V_==#(stC?Nt>imW7}?Q+l_5IY24VhZQHhO+fKfnKIb{-{eIj#d(WEXnYm}y zH7mg~Qo?Z1-=TqkfZ#+$1mu8#z=VK+Knozj0Te0-{#L*rC~FZ_J0KwV-p>a(jshMN zK!mUtl@x^70fYWZiV1V-d-sQR+d00 zP*2Kuz9;g&ylpR2Y|4X$s(D`KjVQ*q#0L1iw00k(4`Ye&RGPHNn zu{8kFwEp;HhxyyMiJhLg4uI7bsG+kq0ziiRBrEIKTAElI0d->T2Lfmi|I~M|)iVIP z`|v&amyO@b!otAP9_W5Fz5_r5|724zu{SpWDm#i8Hg!4bSw&zgv{@ox1Hv3wgt8Wc58Sn&yI|UK!h#!g}Wy1g@fm= zruBt`n|4^rw^0e{8b^1hg`bdkeu#XZA8+2$PRjrLncX7tOW=Qn@nAy#;p2mxvU+lG z`tskOc+1--CnJkhdKf&OoK;m-u(;f*nVCO;OifJ-%gXiu1*m9f@@i_wj!odA?d1Q~ z3rZi}*vLp?FtVNCdZ0C5q-}^Vs;DqpskboSXiv+}&sRE#>kRs5Y=8l}=3ea#+U8cXv|e zhnyN=VquZj)}8<~($Yc>m;;IXL(7K2`D&9Enb}A@mHAS&-~+?o;dv}dvaAUh8yA8J zF4LOM7M_>?M$AUIyt^YJB=ieLA=%y`(5~@E%qB1#OWv!?gzRi}xp};b@G5;t(x?K^ zBbv7YFwtp${rv10?-`qihX<+=8czU%kcf!RYMrwp!EME&;V7Qs@2GPCBc5JUMC1$d zJV`byKRPFe#1p7sbiFl}lanj8O1Y|cx!I3OOf+VZ1R(&7TX^Ua129?c_xJZT%`bp& z4zF)-Pkl6=ygz^bEGQ=-BI-M5KU4jsKM6z}0jYl-^fMd6g|)1JF1e5~g>3lHm=^=p zB`-ByY>B&ONg{7(@#y5JV>IFTa>mfkub1Q)5f#|}02#q~4Y}bq zILI}li*ejv)1}iBU<24T6|VJGwd zb~=zDPy4@{tQ6PR2P7wdH#KwPQ-_+eX>V^|b=vSaALF=YKJR!D`aS-&>a1+R`K)fi z*-Rbj;J4-O`HPiaE@oHMQjL+i*LfemiG)6O>F-J#*7b9PQ7NGAq}2V(U>htQ1smEC zFk%8EaL}0Pmg08JLh^(ra8U4*j;7rJDhDJ=(=k;1o~&mP8n_^DWWp8pBwstGGdh-p zw-Ix2(-_+Izgq~6DZL<}6)?MrAj~QomJ|ydDrmj!>Lcc&m!x! z_kM}U$IlNLtSQmQzd|+`bauTAlw8j~#4yth1qDUK$QTUlYJ-o5 zhi5s;7OGARe;{^5?dY!1wP$Exdb0=3y<8PCP0^F&JW|Ol4h08iu-zN%UEmYtrDQ#V zEB*Ogwt2a-mZ2n8!^?f;#&~%Y2CqTMEH3_YIb`C5738kG-RHb3$AC@ z2+xm~T<&+$h}D?RI?pxD5=UCgtjDu~p!924e>Y`@>8qQllBJe6o+h$qx^?RH=`R}? zVdiYL>5C2d$oC09gwozY5zLE$O&4!FaaplBLaB7*T__y60_*LsSQeu?_Bt%z6G;r; zS^D6PYm=Q^D6fdhb6a~6n(LVt>*iuJuI`h-$Bf`oU0#eNj>_w+XD7=CY?01fJq;OU zm->5FL-7%C?!QYa)T^SY9|PIt-D`!T^U4}vJ~(0svgbgpuCV~v>RrO}#R>wmG0x{VBL z(-2M`cXPa62tj< zm)U_eM6}~hP(^I9Y<0@`g^&zy^L4h$^*eDC8zM!|V?l(`qUt9i5h=|m|-n_vCD*hUea-3cov+jG`uZC1X6%EWg z+miBn2WO3V3LP7G1An9fc`pR$+H<=puHVF5ovk(wr^8PS6|K+YOJ1J-X9eAfcV_~t zF6B!(tDMnY!Zo5P9|-M@p7>DV86*R!@P1#nXfHfvv`E?hAStQ6r=9veNuVk%C$ zn}2O6l{?6*1EWjoOK}$-)o};kb4D}dO9qgOcrJ@;BTEY5FBggn$&!CHy|}KM8`3Y{ zaAEjUPye*3ad0+7+HIab2H%479P(r4+GD9V>eyP+$YPIs)-tyzR;0Tm;&PMlVft%r zi{>;*(Ve<@m4gEB%YB&V)w*N@t>dZ6gCQ)=U?+vP&G_8GLHqV_r;p{^Sy*^DxU0wY zoV_C|f1_cLH=PCjRv(9m^ad{-)Mz~p$2lyF=r0puN;!nfrY1!~%DL4=15_QY??UGq zD~NG_X7k{^6zECmt%#aj%hqTED)Zt|1dHst&BxAk0T!exBc6@}xH#e$zHfHfkV3^A zY>3GPDYDXe!uAx{2a&|ITf=u$kIG^mlA&K zPW7`!)cIv*hR-!$dM$&9l=z8Fasq$f9tav}{T89Y5%@F%$edx>(`;isU6}Hz=mDbyKL( zvD7#D)4G70deiW9Z)>YBmVSZRjZDwvFA})6?`A8r%h6}M+UO%^D9sgyXGkiJ>H8e% z2d_^gL2U}+GaeImo90w?b#j6eo9eA{o=Gq*8I$hsU@bHn`LA(Sygezej~8K@D@vKGhbNw!*$e*nSvhwc zg;BLbbNa&i@~N~dM_b8xp-aj1_sa@vPWe-S4 zCAK=Y--U95XDcbXszBWv))=35X`wW1{pnNNHcYAyKxo@$Ck_$Q*;7uVO*MsX{JG6yr)S~4SclOhUjDP9sekG=i zD+1N=h0Wt@lOnr|+bN7?4i(iGqZ9Bd0hUJRAbyF-+d~n;KQpQGqtUDv39r`)!#wI2 z(E$6dns4TsATVKf3&k8cGC{<07|K71tV89Gba0Mp(GBpA{%mo;~Q-cWAMP8r;RwX-1t6 zZH3|*oARfx9;_A8&^nWuTbxSFpfM)Y88nb2goLSIGA8=;lX;i)dN3GC{X{DQZ(h=* z9kjBidLb~hGsgTTW%&5zm!A6Y-Z>Ni+Vu9Y5%{QURD6BoXMQ}uvv}TtvW_&!pT8$? z@qyiOGCW7jJ^1+C_Il3PNfz$@Ocoe!oWY*DJ(wl^q>$$L?Bv$cUN%iahCqky%4~#c zpoSZSv9A=V7MsPHJHu^U=f1^~PuJuMagYSI@ zim3zv{~#JOzSyn@N6K~=eg$+(0Yzws^`)aBpJ2ErkSt0DTQpzql30&fr>R7Q#5a2u zdJp(!)wdH#B5{x%J%5(N1EMe9ttE8H4|^291mv!zHp)ha{UL8_NZ`DZOGBd0+}pAx zmtklbrq?zjx^sGogAt*E;m-G)5K7$q6Rf_lAvsqc(+gpDBdlJphHc3o)fE(6!+1rT ztz<~zrpF$1PO{%-)C#iuLbCh;u)wYk*NSoVMnQC8LtCb{il?B6=UkE%{SJZAWCEtc zj%>=ghK=C?(FlUr%XXQ3cD_9RgO|FF63e_*2Fagwj)!#VqcyRluIKODRr_r)XK}-J zAo;1388mc@u}qvnU=_q&n$HpZ$(WjVsu{$3v4vd z{YYx&ELYR=AO5g2mfU$KV-`m^u7K-r zDj2J;jXgE#%9j6{-aI&HycgmzJ4#CZEq=wTea|J`>mBf%pqO1m_qrg^??$q}JyD^8 z(8dPyOI^L*Ox(69i*bdmm5;E#sy*o0hw{%+EJ7gNJJRaF+9^ zkF8^~!^9;+$@LQ?7_!h{qus+@38Qd^|3_$Kr;xdg|4;n>2JB175SW6g>6%>fOl&UZ zZb&GL%&InQau5RaiuK39+4>sck-hKKU;%~NT0KFKg?sur`*v;22snbj4L?-e{QThk zcU~47F2LZBT)A}kFotacaj2>9>jHoC2Toh_sb~BW3WLfNqk5?6M^yhMZr9pr@Es~s zo?{CdP0jcU`)B03Ft5)ev%`L(4NVJO(6f`*#Ka#=@9)fQx4_z19)TIVEI@F(AG_G$ zo>#y$7RA8dN#B<)TpGB8FgZ%N7a&j;WlF$z_#qorhJ?d!+!coUfE+rfkJP?{_%^lI z9M9y-d~3Cf{RmqeEp^d+^&2QJle%fSSRKaZsT0o}kiKY)yLgrIsGX9u$aCKqC!TiQ zi0(QC8++@Y*YED>uOhafKjd6x%$Lkpd&@REvC$DoTBC2czFg^kj-0jkGd=MYK~aUc zOUGAO8m2SI;s_CP2GLh{Ew7n%{gCnK)rWITq&#s{dj|SS3Wy_WdRP+;x?>$=TrhqE zBv)bcHcaK_$6Tz#q*}gb%ORQJ8KDJ-|4F-BS0Zzg^_a)}w4XJ80V!`n-kHSGrjmOs~5vh7T+^A(R7Usr8ajwI9Z2QkR!RpP8F!ue(2;r|`Yr&nv58_`#)#p`O?>xcAO3Bl{&L?&mM{GNsn~82pYi zE@r_8GRj?hHT+;$0@GbVXeZv<{hh)j6HZo}!s`)#=^*?+k$5C*iiawbU%1H>h|`PP zg3dc%VghG%m<}49d7->vG3jGvQM`s|E-FXmVQQUD!@gr-d>ew>;(krBLfj6^3=+JP zy;oGfmc=S)B=+v?gzT3NkufsPq(?7=A+TIFK2ZlYHT4-8Mi@>={RIMIR>*bS_#2#@ zB986&JLZqfGH51%N9U2*_0-Rn=>3z(TemDvZm7P2#h!5{KdipIU@a%`JNZ-TBcX$i zjRXvo@9}-C!oW~5B(l&KyCmyEs{Z#MGbVN*n|ygU@$(8r7LG~%;BBCF0pxYEG%U=d zW>AiG6nYm{J#=Vokx35YfeYYfVDyOWTkFcLeP#__3^BspTynBhxa> zTEhHjsm{L_KQv=)t>2)Q@2>kNZ)`BwI6uz3(wUG&?D9|JUKl-YDYhD=;idRLIO=+g z&rczucZ+N?)-l2dZyI8?_pD-dMfR)h9Yo=QG0)o6qm;}hFOGuD3!57b=h~}{Tu+gm zE)T=4Eh`;K(C5a;>gSW{QMo=~3ds|}q{Yj-nvf8t(9z6Eo$bD`%petK%qvOF_zK*} zZ~=TB2T18fRswy+&QmgP(W4_N=6F0Bj?hf^hzUXlD$s69gs=#iHV0-5d2inm+O6@j zfD%X13z>ApwU<(R&?8fv?$OmIf!j++(KTU?#T_>Ur_~3|{<#I)Ca6~ke?-Pj3aQg4 zh-MenyWt{v!_&1PWkm?`*oFIKLz2aZd0K$ICQlub=CN3a$$isk16gdRb{*o5TSbf? z%(U&n#9`}WZ-V3qN1xf5^*>=I}+kxyPu{FztQ@`88by6FB2T!;0R0679DNEMG^yL5Yv`% zS36dZ$~8;oi2WPN1Z8uQ`Xy3eRswmb<{rH%b6nfa231z;IK%CH`-{|h)h)M6`auJ$ zpa!S@5gYRMT4s=t=GYfVbTEf7M&oOv)0F}+vhHoZ!n#|nNe@;TVLg6QR|31%itv7L z3+iZ(^MmQieRPwY1Yu1AxGcPSGiPg3{;7L&Sw&?z4D@rM->PWE6iu}DuzDcWGDnDX zlNL84VVh-JBmf&tJ#ZJ`kGMQp*e`R;s@fXi@nQ-kiY`c-U}9dl)!TkPp-rGsVue1~ z_=00NKBkAxY>wX3zdFjb!9ai7+j4p|_i`esWYN~Wx>h&4uu$!G{YoSX8F?yP}Qrskr-kd3{JHoS$MANPzD*n$}Fo{&Xc~NgfzxZ4ZY; zzd6xTL615&eax91|L37yTxD$DGU)wJe|AZR&@SWb!W`k4DS^CX#QAR+3U-y0brVff zt{~WTT-XC82B>8CTNN3N<*^vh!(iVr0wpR-Un zZk;_E6G_K5V!yMfp%RQxbp8{yh+120_>}tt7*(G}EQ}=B3e&o!VZ23GN@s>oSdrz^m z38~GsZ=uc!mq1p+HYMfn|9}cHTS#&EE!=km#vHqwnNxPg5DPOPeQcj!xU+i&1B-37 zv@Wwk50wK+9NMTvp(s4|C9|r($b5~tf@A0khQI8kK+h^|YGa}KY^!qJBxlR-`&lKn za8A}Sp~I}rwKKui%rg5oaHLE$bL6zq2uwrw2otJ{n}LtD;jMfT%XIFv6oN6VjXU!E z?&b6HUxA?-Z3zuA+&VV;ki5Kj0@Uw*xeX81%SYJlX??wRPl_7L4+P~1a9c)h<2RxK z9^p};(&IG;MtFW&9|ZTB#rPjh=VEf-CTKHg*iOqrCvX_9G(3S2T3-=;+;9)BoUAtY z^dOuq?jjl=)^V$z>p-#Gp1{{VUTyBdxqC+t!0bKL*;>17$jp*r%Xg7V=V7sp%?!S)BE`F79Swt;4`^WJ6DR}*st0xf@Oo2!lRX+QiP!PydIOM$-D6THk{qaA!rSc4TEeRCf$Yzj$_c zwh-URk~vEK?4ZgJsy;r4+aVo zOz5rFx8{?=>Dh&pv%}i6<+I5O^^}!Btp&P)w>{3;UYnFUgT=BO0FJN}WjlL z#k7cK?DeX;Lfz%^c5MF;*uiQQF+-QBn$X-=?~$*}GKOhXYEhuRF~2NV06SG=+1^y6 zUAySC>V7lkej7D&c#lKktN?-()`xwri1-Z+LO8;eRe>N;)+TEfYYxWMnO6nN2J1|a zi#hKv3ZaJm7=|D>vd5En&iQ=K}GBF=U;52}K9h)_S zj!biIp>r^v0ka9u2s%dUHEOtaEi|dPy_&@u<7HxXU}fPwaxxn<*S$RwNi%JwhdeH9 zW#BTdazJn$;uWyf^FEl1{hS zJ(&P$-R-ND6FQ3}7672D*?*hd;n=4RMcG1`u?%mB7U*@_#dd#D@&at6peV%+*T?IP z`|Xsl2N5m40B$~}IdZlIGP;en6;vo`6C+>Y+JT7-|E*T_L`%BUZ~Vy^P=Xj|a{y$e z{t)jm{wE5dT7MpD-h%YFx!4Z?xFBfZAHCv839O5)MPIGfKz)1NVVM8o^|SAgqmlUo z%F;t0B`v+VvY@735uV4>n#?Mr%3cRbzt?I0dVYj#TIo$`12PmyUtb^b>mE6V7iq&f zkMHKhhT*|hyhq28?N2k zpnBxB9zVKlt6Svfg^u?a-tc4xh( zdLDFi&aQHMTaTQrcYnS%QmR@5c=0FR1ZMd>YPWZaI>B(b_>8c8L4ua@iF$r^bv#=( zcw4IhEK3lzZm&X7>qVQZ#X>8N>Md71WFr71Du1|J@M!1=M&z@P2khbaMHMe{R zz^gPKcXP`B0IPBEIGlr%S^TPv);a~TAM0)xSMM(uE0Qrde{ooB9#4&Q6#%ZwVr*%- z-y4jwrU?gtW9tBXT!5*a+}SpmFLjqxup=bi?$zUdBrGh<%YL{vwV3_zL-gowvOC~D z-k16}7XY2pnHB))qQg$Z48_IAe{*T3@H?yoe4*BC77!JMqN1W&)5Hd}Kga#Fi}D>4 z6N63{%*V$EoBU+EFQoNpKV^4+|Jd_<>BP0=PiwjIzsUXJLw`8-$b{Fs9RL(use9cU zNl@+Zd{2KLCF%DGd zzilFBE2DF{GR_o8lQ1*K1EBts5)ZR~!2a1Hc>vgdvt*PpwYYewlyt519Uu;W^9%TH zp-H4tFI|6|xln}t7uJ8K`oHaNME@Ve|Cx#(pg$4f?P^+D>z@eu-~MmqnV6Vx#&B_P z)&Ai0DDm#-w9L6KVw>YtwvbO~F3gh=(V>6$zk(!GU7H z|E%wnI>4gLEG`b_|9uAFrxq@WZ+D;$Mshg z1Zhnmeb#MDk$zhk1H*hh{f!UA%kzxHYhvO!^Xl#n$^0n$;lQA*re;j{(8%%z{i*69 zfNt!bt_`RGsTo@jD;sLQ`0WeY5nlGSYptMC>Ae>X9edj!Z@2()%5Q3F!ZfAyLrlkH zw=dL0)b9_)fW>C7#WW)XtYU}RWzWRG{cJx8W9(+etDnzIzKy{K_rVu;_on=%i06uw z%ZG;n;eff%4Stgn7l#Q83!C-4$MCW02)mdo0RsDYJ%B~$NsnJvbLZnLe448;md$8= z)@thZZrI3YCWp>|LV<*Zjn!e|3&OFQ&K0$kMB%&D@?3aCs7$dQL-72m#|x~?^PUL2 z@tS|m2Ow`23`pIm>gfgEgrQ0W-5I}!+?-!bK7R_xl#L`6)hr_u-Qa0N#b_RC7GXkJal<5@{?`U;n=q%Cn49#kW^b6yBBBp=lF2s` zGsOj1tk@sWHJ}@to8+su3x6(VcFI$o6K~DZ>KShop8ERH{M~2v#oJUIg>vKTUP7fO zS8N=c$2kkY;y7(c&TREOYPeAywpv(D`dQKcy3#FgI%fxm$6EY4_l*y-;cTg9Am_G+NQ2NirIK- z*T8^q`{-X`jI5}j0R{#}&(3*rGA7+9ECP;gn4aal0`sxk-$X$b*h%MNJYC+aeeK}q zrxOrHK}7Vfs3@T6L;W20C3QzvJGcA2BG(QC1lt#3EDwXrtzN2zO4A`^p>QlwV`EZK za9Cr9q#UpI;6SZw!#F^81msj2rB763BqI06d;_HG0XBH?lTh;Th>7dgmxK|mtGm4$ zE02)DNW_24Yqs!Zi{&QJI3r{AL3an#9fJOKBwjNEPOEd&hJu3ib`GCAi)HV^f^xvr zKNITu^=q@!$Is8t+GdqiY$BZ~zc9#~8M%o0`B5f5^5~O zR%-j3BR4vGY$7NGWJSe7S_e64P&Ju6y6cSOe^SX_U)3&({w9u1eSHP-@ObR+1ctr6 z>zbH|nD~zQRGS4{vjj^j?GFnM>gnl8=>9-<9szers=6F(Q8Gw&Iw}cRFFXO|o2x6l zA3wa!<{Cy|u~;K>kdR_=c*dC&6=9p4k-S6r1FXq7v2GIS1OxdvAfHPXRpe3%SM<6LF3H12#0+1y@;ujDo z1bpwrgtY6Q&+W?=p2A+Gc;f%GQ(M%yxVYf3=-wS2JOF-~bh=T*GX$lq2Ts&)xua*ID@^iY!XdEd7Bk$}7Ta0yx}_14_; zv-T$&zz5rw{gq2=^fg*o@h{=?!^2;n2j!n~z!W?7WFw+T)?Z@>b~x3$rg%1b`DtA0 zL;usj=iXeB(q1oUQ~i>zG@>Zv*jsx2x2_+eW?xRH$k{=L%!(?&p8VUxp>DKZZ`>=B zLzQfxjYi-%-;h>L(%e1{Mh z_cZg=RZmyjPOZCqvTJx5UPsT#EpwXPr(_}m#TpbuCMGTpcc4~}G`GZaiDE2~1rwH! zpPc^*;vUYyA@JaP|DI2?G5^eIm!9{_bU|UDWq2vJK5|rUC3aB|b4U&GtUo(NL_JZI zjC7@ga%gLZ@ta{hNEPLBqCbb=z2P42snYUqIjIa_`}&167j^{*vlNPbPId1dOPj<3 zuT#vwtGZ52%oNzIFk)q(UodLqamx;^JbpNCdPnb4Dy0E(0v%tjb$TspDwx>#es^o%6PJ`0FCf(kCc^%PUF0_G8dlw2Dy4es(CCp z_?xB}+&-Q3Ye^G{23TQ`dMagZw=I9hwd&FnM-GxcW?RNDyCoc~->gIX7OfJb(ji)! zTiDyzNQKEp&sn8cVk*lT4MTIYfZ^YwQc zW980Gugy_rEoANfsEkxj&}Ew+Alv$^5*}Mbn2-CoWoA zQiYeiDRy*@P|BihRH`YPzg^ePIAAMMV^(QF+0fEui}S74qG>#=Sg$36?F^OB+k$cd zCj4}~a%2m5MdduMH|f6JCdObejCoW41P;}0q0Hj8yD21A&=hL^O&7|243Eg5bOw3e zBfrj~=^XC$9Cl&AX=QJ>rhki-W=!L}_F_<54~&k4y+S$h zrj)+7pPsod+I%J)*^iWz^oJQQZOfWLf6wonNC z6KgdrYgM^_S-Q-OIhT}rW4_qX@+MOR0?kY<=Zm~ztx;QRUn>7pe|E2N`b&0589 z3+<(Q-!iNaTjo6#czg%VFY#~XHQJ5hY(|V0CTq&cCIjQ~Zh5B`FE?{L{Vv97=Y{Me zh{U!0m*yjCs)1^3@N4ob3*UQZYSYfyEZGpuPe>h_f#SL~#~ozH(IhcV%7y3O6q1Kh zo`6ItYf384R_(bj%=z!3-dKv7B4Y3)NmWRnk4E3l9E7XJQ4igoWD8mc%-%d=W zBj~F$RHa3$`L7oN)Ord;Sr7*0$#Ov>&e82hcz#1kKp8zhq{lF9Bbl>D`;)pPefk!YJ@zlOFdx1@?J;% zO-{q96gOC7rk~Ztqx0zlEzISu*1x4LS;5IUGf?Z62s1XUe-$?@D#JE!L#?lJZ|-3@ z*E1p$p4sUm!zjIpF;mt>9#3Q(9=JJC4%gJ5+q3vZ)Kirpo$@?|i~C?=%2@Mg&|Cf_OA(2L^bNAfGvOqyH!VRZ-2Vz{p$ zr#?r~@>)N@9}wtJuFudUx*FBULcva?OVhVqs_O`yMISkU?}Ag*SK!=D&jy(cW9SY2 zk&HY)p*I}M9&2K62O{HXzRiJDU@zb!>MfmT{W&Y0PnI062_?iCp>hXM*+}{4C z2VWA0)81;$No=iL0r=((-f9rZ2(sB#;&q(yIU!6{qZNHj!`xfHs*04f z#i(TGn3MsZPv>h@+2&6)wdxeC(l<*(8+U4P`|A*eRC1r_yHTe>?C3_qg{<-`0YTRi zDQpS~!()l?s)hi_m#`nyp zHRq8d{}@aO-AU3txv~kP=C$x-y7Mwl{la|KceyKHxG1pT(yQOoM=Y_-AZfEMZBrAY zYV*=Kl^#Ka8>>pV*dJ>(+B3e7TSg&PGm&`FLSELwncrEH<=C(|m0H?+78Z94t4v>A zSkFu_uYGP|T(HED}RHUJIO`_fjjVZA=|Hv%H zG{WRBWOjoZ?UF{MVYW3^9?QiuZ`$hNcLDrq(iJ6bj)#0E`+QhJ=ZnVk25qV{IY-;t z#crS#ZAi8_D(2vqov>cn|c{3eXR5lTw|#I@WhQfpNF>dTnuQ>%qm>fD-=-X*h3 zXPp5f)n|dkwM#3#>M!|mw&pLzbzZKjYX@W17Qm7tF1b$W0yH8z zQu)&iqDup1c5D$PI%3B*Sqwjid+rtkM4Q@ibgGeDo*54LH!)R3Wln0JQZCjult(+#r4nQq5UhQKv*%V|K&FxiZWhqUS?&?>XrB>{FGi_Gf<*B8igx@ia>pVYo5|3#(J6BE zep&j&bF}j}o>ei+uxfLq6$6{GoF8c0RC=nELlOsOT16+dsVB{9`&F=3s@WI?^6_u5 zCmf7gq|t@WgH)3)XW_|#20Q(>qRr&1xu>WJf#xm+6vYI7 z3o0?{j*SHZ2>C8>WtIpee*+L4%ZYR@oG~7=`BM1Ove47mr_u;V=MorFpU9_^v+FRz z3W{2{mr(i%YC}t{!J;SeN`ns(!!#+rx%y!zR}}bR3b#5FLHiL$a*Fi66gzX^)Ydu2 zCedv)E5k1ng%u!5Bh{AT;ryEef|w>F_RbVis*cb%3kj?Z35N^qtsj;r6ANuMGtV`E zsQQrHgZ@|KL^4z5=<*2f3-LFnKyIkdLEchoVxk}YNa*r=FQeq}e`;ACj=+D$RQ5p{ zqQe(3vKu8rY6-e+N2RikA|Y{Ry`o+>&lCWOSr#in~2LMx|-_ zf3CdQXH=ht?M9EXAMp{a5(4gNv8#VZLGcbwRP3V2Bhb)?CF&%9TXIDZ*FtKzE`iL# z`@GKeH=;c()0G<{lQ=t9yM+Y!47X7AT% z;!}}F0h)V%cjvbL;nLORzDIC{{%=J-d!7miAU)9e{02lrt@TDI zDm068fD+)X-j#GzzIEyhOQr7L9?hhZa*V>*o&TDRqnK|Buvi>u@N`G<=>a{9$FaF1 zuY!ZaE^7E^TAy#?Ko=}@sKzVNb;{?+gmY{W&;GYndRGvqRXU$36hpbzm&&!)1Dq70 z^^6j_lh_@j`IP@&2ZWq*;DiYcRRvrMe8ltd^76hgSctB5hro^d8kwU0b7^Z$;3@4i zRqemacqSV!DW;2Ga?{*`pIvbM;{n?jPpQ7$pL>Ovri2?3^8YqaRiD`J^bT~7x716P0>{hYcK$+@DvmZt)5>?8ukb>-f zjTEOpsm*{0BRYB?@;jnN97u~e^yeyOdz9kVhK)FJ;6=LpL2LU`icXFDNVefj53}(w zQ_36VjoC3GeU34}y5qYV`H}IubH@wY;<{9yIW*`-{8C-~_C^--KQTNs&;ZACP32Ug z8Txd76S&l`p>6S8Gy~n*6>uqcRXkXs9!>(~UD+Ez31)->WLpZN)Z3Q^qm;Q73b@6_ zF{Q27T!LM!q*q;%U|gTFgb*@m2+~RN1*`m&6XZfm(<-hy&lwa(8UjiAL6}H zqL@K;;GP*Z(44=fA!?DhaRHp;+-H!mf6X0@iPjWSb^K$vKDX<`WK-n%^t_UlHsQ%J zOYgAK?SMT}EiWQ5ls{_Y=78B}lOjJ@Ze4L!yGM4X#YY|4()(_gmu6qzXTyOkZ*5L3 zUEg9I*nK6Oq*=V1{bL3iW29VzFz@aV|Pn`+TwCaHiN(<_U7V`y|Bb3t8qH$a2}W zqJnV-c6BS}CJ;Z=*IKkqk>g@-iI z=h;C-1r8E5$lL3Gc1W8@>KYyk38qnF;k0Do4EFDnw3$d>UcdRj@Tlmdg6*F&AEb!Z=lL;*b>wD(_~kUbBL1 zb6?$MaeEgV*V%)Fw%%ousc51$IDL&Q-?*f$-eXPCYQDg72AeF^gt}8Fb-8KpBZO%c z75vA#-_ijBfn{kM2YyV9uLwj1g+Qb$p8-?)c{9sT-tv$My?lCkl13db6nKC)=WtRm zaRtr+a6^8$f|Z3&%UF%4ttTR52yzlF_L15LxG&a08Jun?Zr5VhU*9eww5UeI#Aet) z>eiOk;gK=qbAbDw%QK!VizEVK@ z&)4lS)P3W?3g=omgR%6|MM(ywZ`Ew%{!ik_Ltm_q-*(hg?}dntibrOZQRrDA zi`%omVMSNt>>bh(9huTZgg7Ik1BX}a`FubUKS-~Tx&ESj7^aps-3b+Kn9}_pQzLLW1=|Wxgf!+1N5_A{E!`Zr z5)Riym8m#ADI|B=4MxS>z3cK=Di3LJZMOw50(q#m9)l5FNZyplwLHCh38DVN44(>A z@EP7T{QNkh`bI|(l<%kcq6zmb^Bc^y>E|*|z>GhBP7n!No2jc5wrBPbo33oV7aEZT zbpz{;6+5+XP`#2rO z$@PUhW}JPi4%eWSc8s3GDY{i>c}_i{0qdPux2L0k9ubLu|6KuR0U`C6f#@Ip?(x>S zWOo#?-_y}|H)q-z>hWX8r}RGpX1|66PiSsm{#oEuDzPfQ`VnDtAR80DPi^B~W`R?( z5~ZQn-y^2G^t5a+Qte{c#;+nUrjrdvxmTv7HFiRqa{?5z_D8vzy2%gFY(owuhu~3C zb@$p2KL^oj<&_IBqE2MN6f*5==s^oAmQc%S#gLrVi%5gJ!)JPllD%)(o;_ zH%S?d>&$GPbSZYVHD$ThcBo`G2YM+~fY+*g9IhU~@x;n%eP&ixA2oz-qx0+)FKuGn zC(&I|Ge`^>0QjX#p@8(->i?tUTl+N1`fiY zmhaTe)%ALpEusrsDJEiG@e>a;)?Vei_fw#l-CHbN27}7lm(_Pw^jrTg?yk?IqcErxg zs@s-Z=Y>G@`dt#sS0N!Ga(|+ktSfjbI8#%WGN_R^>+V$Wj)v!x7-%{U@+xbo)*@E& z3O?&E{eDClq>*SA&+bpa(Vn1F0C>23ZY>u!xSLQoo_s1C47)8n_(wcpf8`D3%FaxI zEcD@_;doza!iUnkQZ|`+3k-hN_#pdn_qei?mWQVa*M>IefH?{B>MI3A@Key;ZhJ@8 zZ)iW6V#^BZO>0+}02@y3oi)6^gM+BG%O`LS`RI7u``o*l$EVxfeRzgiYr>cEp=y8M z+@=yfB7MxuzT{W6GERTHN$+~|as43pU~grWOdly%^x8fvt2gO>57P18H~Gl&L|sFzFsTkZyDC&#v|x+09mArE+x{=kizb*7N^)`HpG#+bI1 zTd+IR$tb9QeFV#3qu1bU1YFd)F0Mx~Z@QNIbB@d>Li$t-I{N8ZADCsXV?^gn%>shRW3*?Blv`Z7^pp`1-TLMg6mXGC!^72bRV83u{IK)WKtE zpApAMAQ(q9OkWa-%8nstv)o0_z!SjsymGk6@svYdvFkUa{P9H^IYh_5r!s00+i?{o zW>&19U)W^E4UrI|TTZVwBNP)QYYY|oqg`>*T&!w_NyzgtuPx_RVAy{qV5_0tRADn6YEqG@jG?G{lA1%m8?i#_(uIz&nR(*6S31^Vmq+#uVTa(j-G-&5{IY zhMW}ZNiW(PE<+75LJ$W0UNBwxN9OQqMNXX^-jGk`Rg&k#(F*Bu;q(T9dFEct?OpA< zAwF(q65Eh1bhL!+ zfmB|XEe9WAluc+(=A7@#XZ1Be)G2Dr)T;#GZ`3;lqm0f-_D4F_W7O)5RWGSicTnH+ znlR48(id8}rdWzWTVvV41{kEQ}WVZwYSq5!)!FC#zPDr0jduMJU88m=;ZlXh+f&FOU@fHkoK=yTM6qg1`chA~wd@%D`b?!V zd!$D3uOhG>92XdHd}f+zmJ-XiyG8eM^;RPDI8q+h%t3R)0vYknR>gadORdT!Rl6wQ zxamqUG_je{z2;=%_zi3EY_e9!P2CG0m3QINoa(+`OQ4>$X};A92znZ@_c%y;svA07 z{jOH+_QLPxqYd1b)+`_0JFRCHhrUO6nJ^fD8X|`TR0BcmUld>-&Cxp=K0>Im{s|hf z2bia7&+5@w4Uh8PiB!>!x6!C?-aru{a{+rzndfViX=TU2Z%nIO5MM_Bo$F_HZ+A?~ zLGIU4d$9BfyY{oW2gYPNFa)ilk}l1ADbZ+I3so~O>#F-Z6KruyyZEVn9HP6?WDgIG zopYl_)g200$QoUyuqk9m5p!Wr%wHy&^@L`>PjyNg@E06N*;y92JY6Jw8B{E>;Tbi^ zQ>^RrRE&_ zEnITQ6CD@d3ZJj>Ub5TyV0a<;khhr7CLUmuB_*CkaCYzbG2g2qadE2qi@XuO0%s*)DK_ zG~f9_+$SWP`^p8C@^CBB?OeU*n!t~+KyQSj$oO%6|YKZ^EA{^qB zoP)|!KZh)kaN743nxD{g+ zY+{UVOEGij8zGsjR`|{?{?e6Wx)%Rvg?4DoAVYQSw(_Vwq^Rr)K3X>~EAB2Q%4toBogW?jhq#vqj z+M52N3(5m5U4*E}b?RF=9tANY{h*jb@aDi6%*k{dO)f_HJNZ0%7$tDY?!f`=D*`@% zTz*|~a0s?kjqoO9I~2M+w-)Ml{57D>Dqr+nPIL~|qpA&mt1A%*Pm*unq}L?fJ!6Zn zx@ioLj_z)TQ9pv-a#$_rCf3{vK4Z@(xoKPtjS38fQTuPawU}juL7zGsWkK5pp(xTP`YH+eSBOc4!gHD<0bH);s^3o+=?VUwKMQEYT9a=nvx_ri23wfB6HDA`_&^(rYM?hCw%0nO zwiB|?`(Z3swgobCHh_$3WJnEg@g+5AF4XT}`J zf1@Px+#I=}PR#~DIEIaXfNzoTy0s0(6At&-c298Sfr_LEuQ*u?OUuBzuu4;s10umn zhjR2d)x$-lnUD0y5MqU+;rNGyY+!ej`-E!gLeQP?b#70yuh_un``ySpulr>g)xV1| zTPCQ^9{0=`lGD2nRravlvgW!2x$H-^NMS7rd?m1%F^_uOB*}o`{__z875HsF;O%f~Q=sE!uOaF> zcV=a#UW=7Fo%^DYX1SyNvT+L-uun2Nw)%{2$1wb9PIwGL@LL~QB=F|&Pyu9=s^zBHPzXH~ zvkfjhnUaRh?gJ$RIubmuufS^=Zq%k^hU)?Vp(885+2wdQAX^}r{&qh~W~vKj4P^Z% z)vA_f4#4GQJv2G1T;kN;XBGNqyaYdGO8|QU7H@Rqj*{aS`3WkMq|ijt8`E|m~q9;J7dRIZ`Hr5vF^wyM)09_ z$lJ}y!Z5Ux*X_zVyhDCX&YTF86%f?@8KzRIT$*=KXMxFPMy4p;{2GUd$Wq-&cZ57N zBJuZ0k=0u4HcvQCd_ez;CYZy9XJ>h?=)p1MEQ8q*gyh(5P~MzG8S8gH}d z@r%DFGr8Wv)kvEGk2_oDQfwsJmNtt2hZN8FCbXy2n{5^KHgF-+l$~DX=UGiRh7~pX zPx(KvMVJc7W*SVVUk?4_yb6u+8O#delJue(ZVN|K{5m8n4%wK$&=&cX$xOe0(pOvP zJPwI}kx+5P*W^BI4^fTRyn2U0^P-_k_fRe)g8M|Sw%8e&9xqJtoxRzGB&*aoYHXrE zSYjohM1|GxtzbmIy+J~=dRE(aC;pd4AjL89-M$*ZpBR4f=$++8DC&a7$pm8(J3@PU zYq+Lo^clo02b-5POh3xG$A0}|X>v309)U8NO3T7*Jk0%kzBJz=V;croe=9U(v9aae zaXj^oAX#GNC22&^{)n8{BPVSb(|2+grNVd=^ZuikMm@t)y1a@iy=`Yj+->qQb*n}y z@DU?)-+dc;-Ox5=ODhaEz0mM}_H|*aBj%j!WmN@gQQzI;$}b-Z4qy+oY(lh71b?5I z(?LcC;_4_|(kavZ_vYq7T7O@XvTg_t?LzHkc6H%nAErZZ=5J(P1re=A&6qbw)0 zmgi5Xl$)5vA92TL$SqEiSeYj_-%GN3j{9csZgl0!u%g^;tYu|FZn!73K5Nc5;Pb3s zu?H~K0xEbq4hU2*%-j0zv)=ru+_G{y~wv`Gv9Koa2Ih(?^6SGlHp&&~SZsVh54usBdgG6j_dDFiqIJjfVz1ug7|GcP&;|FI*XW;e zVqzl>9E;&%|IrC`_m&DPFv0z*wdjB^0sm?g3@kOwUYE%7^UTQT83a9#l$U*BCc`j!=Ccqwx~aKA@TKp9qPoG?S5ULc{iamEEJIL1l)h&BFl@x;c_JVR(QsJ$kG~fuRJ(3H0^=qSSV?e zY;00fx-T=BlU)ntaA1G-37efO6yZ>Md9SDMyOARv_we2%shVW5vL7wH!t@v_{&+F_!k5qmeW>19f#P~BRf817BmyeRmdNqB2(VXpY)x^QtOQ2A#cvXV?OIq@%V}WvlWMn`E!&@ z>_U@LXiEh?C2dlBGCTZs>Gbu(qT&KBiP{}BS?{ECpe3rss<=kKI%op1x~;ja>(h$= zP;Z+c$RqjaTI8vhDj#c;T7D{w7m!L^5T_IkB)Y3jJx4#8s|HL=2cMc!1? z8dCTi%W+HSt7yulPq(wtT~h0C7RJ~@|1NHsFog(p{~#VwBdsx?58vUfGMRXh;4J29 zm21Y^=vo9!?Adst{LT>K0o)wKY(u@${1iAJRRa4YPoAtDweatJaXkSNn|NQL^wQ7L zGeQZJ4~u6s!~(91rS|D7H<+Ki#&?#vWf&yNw%AiBa2j{Axls-7TISsD%qDIEA6cx( z9MXho4(t80Uzjb$uUGBqGxaUHYmvPag)4id)S&}7N=3w&68d@f2qZhrHF0rIRLwqs z-~J18SY3P}O}PulXQO=;$#3jUV(&&=%wYsWg}&WOoT?V4`;j!);&XZ zt%N?pDcmxz_pCcdEWpQ`ee&Cds5Q|3e&E8fm$z?2iuowW=*Zr8UP^YY5-3t?eanNn z7Co6JxT3ro8F5%-)e?Ay*Y>!~@yKtFlf{_}B5<+vFyyhX*FERgEf^A-7&&v1(md)t z3shK2E)5w?k5hHzez^zJ6&|8Ues6muntbGsk@bBK8Tr!`7}LN$};iZ$`NeKFd7$Y&Ba8KtT4@XH)&raV-O=&})@|WZAvV z02TNisWjT_X$GztG?W=ta&b}h!y7;l_NDeP{n@livZEsv=}+qvQiKVyJR7JGZsN90Yy8j=#&XQM(CBRw$zk zFva#tzO3(#@>uTa;+sz~ycLu_uD0U?c?0bM-tg+e9IFI{A;y}oRU z_N%-t8J21|B_4g+3oB#ng42Ywpm88s`A_Xmu=#5t}tLM)!k*aRewUl_s_6*O7P+YC{BDG)6sRpjje!1e<%i zVz7G+M+d7KCG1Jvg5M6|MWH#2(ZsQyiNlqrD+Y^CqPWs6#fXhx3%M~S?@FJ8cg1q) zj{Jh}&}sPYkt~^i?;Z!9@v{h#cf4-2N(2RX@6|Oy-sqE(ec$7Wot#vk>8f+ zrY2^lz2DB!Y1Y~N2)tr?NOEtrzj5NqSEQa(Y^1==tA`!qj{PweF4ZQmWTxFZHd-P9 z3IOYm5gZ|6K8@Sk>cUr!=Any(_DG7hWnh`73%T|9P%I<1iS*h!o z=SzpN%IujD5mvjICan-Rp*>00w_q3~+v82XEV03`oxHfz#g7zR|--xxlhyy|ho zRSbcF?~jEEXYRql*>e*xVC+5L-LCKR2-wR9!^+@uRhw5@n_xD$Jy$2rZ~fu$L-GwE zS}S{lN3WA2#O-(%tdni!9dD=2C-K~($utlz?Dr&OBb+v9&07I4C9I#6%+!?aMb~@v zD6iNxeBL%0O~*XhnesH@Z?Cu?3_EU6K5$|Xnm`&Hn{kc50mpWG>fsTmU(g>nr2A*F zG1n5l<@Ye_s}t&;|I$30jX6SQ4$Oh<+xY+ zZ$!A*v4^)NH*j3{CcB(+q<9RJWRQrb}MNxy9RDewI z?aaAZ10SL2qZD~Q?UZD1KZ3C6QK=WY;iRi-PIw3*5aDgOJT7)XwzM{&%kCE=L;Uf) zv93@z##=Ui$$s~Kuj>(Betxi4eAU1elT~pLIPIqUWxS%!x8ze%BT#y1%xvt*uS$?(VKytQ6?HH=X{s#b%s$bo{82MUZ-}X zI7qfDoc0WS#m)_ynVC_d$5W+u4H$Vm19d9Gi)v|U&HbfWPcC!zCL+@(l}KOuQ91Bo z+sXBKfr&xAOzQq}uiTHesy|lv+4B1XT(ls;8$*##UJSu+_-EZtkbngFViP$R{MhD5 z^3sDJL&L|7`?2$OVLjwUXWe-BN&Lk`GjCP5^%1ob0t@NF?wqlfpx=4{L>{^SO7}}^ z3hspt!s^jd*n$89mAkzwTs)oIuUq_;TllX`El18X35fI;j07gyp1)w%Lq#bga^5CP4&~wD*kSGr#@!7Iz4S5KjKi?T9NHJi@q`=D+?MwFb}Y z%B0WZQ}Nz82ZEY^8*x(|vl?ak5?$GF-_piIz~&b{wOE%7QvZ3RXjtgzQAC`9O2zjp zFM^n&LU4LkjSVfxwBF1x4flS$968u)EgZc~A2Y1x~g9ckWnOyR3q6*<<$; z*IJ7c{WD%jtAN=i!BI{iD# zdf$sK6~nEUM*kL`(=Q+lf4{B#+sELIQH4r@j2T(a&uOvutYn1}DBJ1_)o&rvTZXd3h#Up&x_j z1MBMQa9EBvHv>d-==&{$-p7jS>ytM+fS4~XZ;s{}|8*)-r_mli`@m`cgOuqm)mj$q zj{vTlaEx28AQJrTVWZV!@7j)jhi$gB$t={JhuUk?*MC!0BdE*0W1UJkQns9as^xW3 z7tHnki>nT2&C=;%P$FVmBEZK4T!6n=l>xrif1d~IWO()D7@Zb|Ao}Uk8>JGZ64f9= z3&O$@*W=kD4WgNW_uB+A#@BtoV?0s9Wpy?rQ#+s7MvcIil@~+dT8?iTq+287vts@y zSErHXt?SFUG~3W^O0e6Przt`l{T`R=ahsg&X( zulJ35WtP~L3;N;J3PK6qzX`!%Duw0Lh+&jMD~S*G?{RTrLp%DzD%~sKv!&dfg5Ie2 z4fM*9*gxwu3)`ndtO{@=|1&ORZ{;NM)7}I?Y`KI23XO3581NC!&d!>=5rn$OVl;Bn zqu^J%g-#C>c0*wM?xWIb;??37&SzjL-XXx?XGN=|C&a?kh9so!#EBgY!eDjM6 zPc$JIZg;cpD(pQLsR*hK|WO56EJo(+7C z?R#Hj*Ao9lX8u>FZ%f}9>RJ8A6$q%>2gVIK{uLDvm@)njWGd*rzmCfP5K`%6Dk1#e zTUJ z>wSSv#a3i7s50O)s3Bmdkt&GA^uW0A874h69XGwTLhl{*Vz(kYvWitJr)^HW6?PNc zzQP@&I6Q(idaPP3YK$>kIS3RnP{jYc=*{N-ghp=1?U271^bC(Ena?4zxg2^ofIO^Uz$tRr}6O;c1plNlRmFX`n^kyIU_)Y&1&p z>WtCH2BtK%Rlm)HVLbb_X$5t9GOM|KWZ#e|)33)zvE2E%*ccSVBh|K7ys)LJO^X@C z8bur;pM+_$tc^$MTBZz4a6KKhn*nEM2H98KM)r3y0@Iw>h){gJ0}dUsu~{DtK`TyM zbWi{{iIkbaHA@EBRFGs6reymJq?KcfZC{#xNY z1GQWx9F!|OJT!Ryj`II83p`4&*sHva#yN((vVvb}witi6TG6$5YnWvC*IzY?_n{=n zn_~4UqNB30X~X>QxXn4pfGKsuq0+Ge43vF4J>3>K=|Gt*biC9-yiPYDt=%>v_ed&nsT!3K;G={W7kC+;|6Z{@wC zqfOUwQ|nw`7U@i7hFH4^G7K-4uW3}5^Io~u?0dWnHl^616V@jN_Va1C(SJNg9~B)w zRlyOT&LE7PN#Tx3=5X|6yc?>DIz(yoEQ}U06YaSt6ai7k$QkZp+9w z&P_l|D%qrRV-TdoGM>??Y)^EMEt{jlr2WzN?>PCZt8oq@MH*VMV7A9)>g&$oqVJ;N zg4wblFJZRkJp1EhtZJuWcJ%@BY4>l%y10!W1m6$}W}H>*`>6l&yH~rvt^dGGHh6yD z6f?&`j{n5~{!VE{15ox0)KE@kyN>l(*qn1ppld0|7F0}Yyf*&o z0rZ&gIj1^f@^rK1&P6L{Y=gQ22@awuu5hA*cSoe zd{}z5Q*IVoqrlOIoW5n(P{wp;5$NL}PQY9V1)z5b58d;>O<-{~geFXSl?LB_8u0)f ziYcmERVss)i+^TbMMs+Ir>4L7ss6FuABBT5a(g^ZqdQZGlh`_+=LtiV9vh$9KCgVRVk?8y)#{=M-(u6V{)?85M9oXE7ekboRzP%y)=jWvPE&J zPJ+5lD|aPT-lrt2nqx=^rW_EU7#F_n?G+#pACWWmSwi~c554l(kA7ZiLy{Opd?bkoz27Q6g) z8#tIfnFeP`IJ{3~kaS&F8$N+Xc&j&lHS&AM7)_iYa>hmQR5*~uLh5+x3OaB=%jswf zA0Bq8$H3Vl%9ge7JtTY^e^AQb;x}avENb^!aP;sv(q^8Fa9Pdon9xQwD4CnmVz-|8 zs8@mpAti^Fik(#Qf=@(zxfFI+1P|&7=~#yw3-%e`NRq2;&Av$11q*SlYfn)ba`rL_ zOll^$#OOutSD$o-VorX0DxApmp&TC1mW+ZUgWo;yXoJJ#l9BFDJ+1As#viBj;27?rValk7P%A%bxbqP% zA^fcN?)oip?=5thbOdE44-ItrK`7AP(T|D|6I8WEbR!+mA372lmzUDAN%%lf3|Zsp z2`LH8XlohUMb~-rDCjEFhfys$VmFmqyKAtQ~wBB(p!pMZhnkw&Y z{Z=xD_Ns`D@^~=Ttl{4Ac=<4c7fO}J*b)(U+*xJ$XsMoZ7dd4PeH(_xWK>Gpx zW-Tu#Dmr4G45nMxYIRQtYR=g*+*N%yXajXVw2WAizgXfOkLAZA5pH-6n?zE|*LeK$tYA5_e7e`RszxHF_aN8k!yvw)X~ABAS!3C2Jwv9@L#sI5!8fKYK0 zenYl0MxA?GX}rODxw*S1g`j@ASl=ZPFwsT*a&V;Q`N86Vj{@OuIg%iNzHh!rhKDuXlpqV>H;a+BR2y}P?K*6=}UEQbrsXYG7$ZydmW?XD`JB9j~Z87t-W#_}*Zx2)ctW5f9 zT%3KO=CogFXfu_L71Ba7D^W(d@BR*TAt>i1V%~9xa1=}G#BkWSb_5-vhPQ$G_j;on z1(&iM)A=8VhQ3sKTHrl$BceTo)_It%mqlB!(9XP5TVC`8rKj+Eu%NC5;bgfB$p*!Jk~+!a@+S|4kFx`3hd{3)wvB zsl5cdgWZ9L#U9%zWIh7nY3ipV9TS*YEY^a&yD!~jZSO)6Fif0Kjx7Bfhe{X=9n}<`$rvOVF4u# z@ma|KVZU&HldT1RuR6x>|GX7e1cx#%^b$4Fr{|D~qz?a<)^@lt%V8(dQRE9-`2ybW2)HhK(b42+SyS zMDwes=&Y@~W#S&uGbpWllHp#pesBM0jjIF59I{s3@)q;;c<7g1e>7_x<79RjodXwI zXYzjh(9ZG35a4jKvO% z|8gs@Cp~IFP&xJhZG6N&hSs0*10@J(><8rvs`lxp)g?EyCghqrTk64#%N=UX}0w8GXlBbGsjo#C{vztG^cNnu ze&Y+B_#PG||FvAagLc1B; zqI|VZKSGc1@;UHXhYvo3=3>{xK5SO^pNjr~TNzB_fZ@Gc4D~X!@Rduld$nETg`e|5 z*{B1KF{%Z`jS4rb%cCA%SjLR~>qGQH>ig zI;?tciu8Rc0P%Nsc_c!UFW2GvB;DJP1uKJO`EMaWzNj8Qo=NrRpPx(Jz|QqnLuHC}&mKny3qdev-PLNp zH{@nlPgyu@1q=P^%HkS;4Juh#baXB>B}F*Ns}(<#3AzXPj+=X8Wly4#*=Z(=z+2R; z_+(9>so+MIc%t#1BXs!QFNpbcCFmkE-C&=*3toFZlOtM;I{K+6-z zsDE-h&AcGoR|NEa>!rlOMFaq}Ki|x%Eb%N5KmsXh3`dQaO_O?_kGM$tQYg#okiV|* z@0=inhlgU+&Mx}O`Sh~b3&};!PEI>sI2$p#^^U_gmLVD3J{J6iMPR#CWpys;wQSYx>#^83&h5EdSgLDCMx0=pH~ObGL!P&AWLh$*K8pH0wA; z7*aP=vAVHLgo?vp?psM1Z)$#02 zG{DmZigZh~0?ppLTt;2CU(Q1J@QD9elBMXMU4fDQLB!U$vP!jdZt_A_QYH{ z^S%0EHGD%Zk!!9G55OWDrtM8YjFGr2-2oeS&_)X)>51M|vPeeznAX=k-X9m&v77PA zWTMli%c=MUA%NYR_DZxIgoUzgdgM+8h<+i}6V4<`gbl=FuR`*9dpA10> z>|KbdZ`j!xAw-Pp3I>~UTjKm=j4RFJ#3c3&C7MW-v4EM@!lpC<9~!fm4f!!i`f&9` zpDL91890bLv#JNfuqf(-?=N7+BQn&@#W7ov#z0pa zgT6`IGiJ^a0L<%1$iVeW#m%_iUA0SLPNdi0+cpxMuR9|Tlgs(pyi&VSTi1ttQA4-| z*CgVy1mqIQSGSOm_l6i*C)XULQ5oImLV83WyhLF%JNgyXpNnKU*2=sToUFoXmk%9F zA=)R#OnUhyPoQsRe~CMFei8a>uGaUWEUagnC#V%$Lk&X{G1Y7}HXkYnUEIh=LOc(} zuclvdioLrtu{}^f?TSjY+1}liXeHOPs;F!Fje1)=Dc-(8!8$!Vt!d;0Mv-g?VW<2< z;%h!&sbjs?8hbI_L=#1L{P-43E|#E`YVc=N`z8j1Uh{yX zN(c67fW~={#y@BBs-NJ&yj<|avB8m2N6lV{Rrb!^iqW%Oqulr#t#T!RLhib6+LOu| zKA{w)do@))DQ7G*M^#8e0dWK17G5o{%U^lRfU|^*x@RMAG4K)^VxGN z*G2^&^H)25rKG~oP}moJ*F+>!Xp+Haol#ziCPe$(FYWp>*&&CyQ32?RwIOttNtjgI` z;4}!5582AJ)yD4k$I71Whz{f@)nZLdWCF0SaXuXi^SF_$Mfm8;HuuZ}2T3>y;-e_C zKF6MlxBU(@I5ibTwX%5L{XSij_oLWSFL8CtvB!iD`^3aI6u#5bB)jtF!=j=0z0Tf@ zd_{ukDw>W~$?;spd0NjvYP*|5h_qqHok9$LGwWKb1&qZm_EC3<%c$!Su6DIHxnExz zKGPW&X{!Q|hwDJAjd@SI2IgfvV*(?ddfeiEwEniWt*P*oxGb-66bzYvjqaPoq^npI zjQo};`+#%!9^E%)kLCKa(vd-%#Pe)+@9Ul5s2a=Z49N z_cvL+^NbAwu}jmYT|jORdDEBu`m&grP8!sj?*O)&(PZWEBjrCcRn%T`7b;CoR4;h4 z;8rPsz2W=@c!LVn)_X&y**TGP?XrED;e{$r)jOeZ+pqb9XhOv{gZLjYJuCYfe>s;l z0Lz2J*mF7!2JEw=4~vmY9;R=j57hh6k85myYTN9D;e;UKgse>4J8YEq>;CI)g5a7F zB_zJ-xdQTY0cKj^67qN1lW9~fh0Cb~VVHV7@4n5VVQJT~Yjw7Bl>5Z)r@Qel^R%Oe z)KeEZV-{;KUxP0!8%|o~-tp#BXo)O^xXQre+0u&%Oa>etFem#1?Mw3w9{I<#&tFz; z#?wxm?AOz$L1iZ3fx~N76vZR1uI3!4^VXAf;FH#?3vk^a4c!yz1vdIpKBDfrr5#3C zAk?;hGTf(&*@^%oR?iTMf;1{h6u!=EI~)aLp4Gv#vFDIC}P?EVTxs)cw1F z#L4-|8pw1l`dCcy8oX1b8DlW*5jwOxaM*kDCcP_Yo|ydL8HktV);0A;&=-9)dBCRf zC1aFSn=_K;!yxAv$k}{wpZ+&{;265CLBraT?FLGbA{mD}=1^O2cJl*aPZe$HbRXGf zqp{B`fp_4ZcLlA0z}ci47x3E<5{}Qz`mIQli-Ys$vhM6#9OlGVF=Hg8AffN+!a@+^ zncw@YTUU#YVvATGuSCD($hs5ijCs{{wdlnGORv|=9hP)^4O>UZJ3J33Y;JSI8hJl8jUzQwu~+4w7^f?s0Qg3ToJbdt(l#-k0n zsM-~*pibx@R>PuStBGi;M{ZK;${obSa0~oiUvmMBm%2{!)tv~;xTY$5vl^i0aee++1FjkqF0KXHZK=BGEnQ!vH~a#_f?=RNoM&~pm?y`Rr^&i zxsb<6>dr=t{dnLx-mQgNrU0kL&Y#ff>ayVUx7g|G`iP6S5mw&yGERi-&IiZ`6EIHZ1322 z)a8C?6gLwycKo@8B~Lqs>o{Qj>iW__>iX^JSE{7TccA6??h2;N2Y_iN^ZE_) z72&>}lj8aD>ih^ZN5h^DFWth`VSp8( z?(}dEUeLzLVsVO?uJ4Wf2siBLOb$;cJQDUdWH@^zE{>xqC4k9yzkPFKwCy@+sf_zz zcpo=JQA!aW^nM$S1|G(!dBl=>2aUe$9k1X*M)e^ghgLc~{MbWFvcBZs+%wy<3C!gc z$%Ya=;IGz`4_t?nMF4+_?WyObQshHcGsX|gbL0r;5*O7NR8QN98l+ylxln<^#Km^v z(=E79Oc-|+mgIfZIw<@c^M3#oQJ?u1woS7)WDbHvTz&O|W#-8tMv)kmNiOG4VS(j{ zqz7D1e7hl>w}gTt*NnD^N+ja% z&CtHD(r1&BC9i!Y@3rBJZ+8p|x7s>6H+{(RVh{T}sNX}}*(pOqwau{|Y4Hpp;<#i? zm+_mg$L|EKG>6(m8^4Euw>P233TEjknMCZD&@#t(THu!q`pX# zn=qD60Ll;NI=#AGBlcg(UlvsrRUcLQOfN40*!ZuFw@HN~{HTvcuP4!u-_ZuWSHyzH zSmk-qz5u+ws(AViwYC)Dh3fYb8dv z1MmIPYV(EzDwo>4`4CUnimf~gE9B%G-CxORb+3pc4j5eh<<7U`2V_K{DZ`UydxBAi zrGWIP)J=)5wb!q_Is;U4^bC+8A3uy?<|~J{CRv;4)jLP@Yr?nj)ha*kisNX?eZ{#unLBneCC-dKG-!{O zNeo{f2(762J)T3*3tw0*=6%p2J$P)krv&m(ker&8f4vvwM>3bd{*dybyTV1(rID_| zA^6dsJf8_vSY>?r2`MVLV}8%P1ho2~sZnkkQ2_54lmEroTSmpzG=0Aif_osi1c%`6 z5L|-0ySol93BfJ6TX1*R;6Av!ySvSqTzT&6e$H8Ez3crjvxc?z9`#ii=yJOTDFnkl^k5D}qx@gRrDor_S7SGAk?1J;ey0$Y5MlpW$-4^b@wK8=| z$D}6Io}{%vK|iK4J|>F+t6iagz^i4ZCwc6|QuA(;kA0EFOQy}KDKZR`8>Qg5d^Ci6 zt3G27sMLPN>Xzpmj4=TK9N@YgGewF$d&xwp$!IDVxvs?0jY9=!@@aK-Y$qotMG86Z zc83#ctx{H2bk5e=zs{DZ*2`9jk$gx#ClpoT@&Dd&?Q7&Tz=9$LR|i$F+TnvAC@cg` zyYA@-dh>B|b{-lY{-su~g~~0g-HY}sH6&*yOZTE2APjfB(&8E(_K{Yp!`q`Y3*P2( zJ6dolz5|?_qOSnF%W!+G-OI$()X@Ci?J$~Jba7;OxO;6a(>&87=(s}{dD_~3)%Kw? z(l}y4F{dq-ayvKlt?D5DE=qbh>nFY*c**g8zR`{a#k=GImQnENo8e#jhMJ5+C8CMR z^4LbD(bwelTew>ji;B)D}O-mWLg1ER%?5>ccEG zK=!e|6w?W0fJ4~9l~LN*ZQA+HHzo+2XBLGt@lkB5uW^}g9XB?L>Yx9n@9SL;15;D9 zuyyA4BS8x~12LJSiXP?qo8I3QO9Mv0N%MQxMQ`sQM=gmJ<_zI3Id?^>v?Al5{seBf z`+}Ior?|Y>PB+E=ts4V(8Ir(w4DlaA0*+)j>|fxa*O)#kg^0-AeUyBhi9S?SWVCRx zse`0c^79xIy{%;dED=$G-;+E2X&joV$bZ2I4J=L!R8&;6B^|Gv@`vP_aw^uX?a=wx zu>;G*GDoPRw7mN&9}!_bCj9@$n?~ibJFx@YG5KIK6G?vg|qTc z$ggqq1=#YNqX{mSetF7d-AXx0un#1+fx`2eo~xhmPdQ``v<06|>Zz7_ebP*G|xnndp@NM42 zcs>dI53W_iZqm`^y}h}}@Ov6)`XVrX9Y^JYXeYG$t!tPIGFd~Cq|q-!{)>n3QQ&zs z_I>Os<>!Z#%m0~oT%cr-Nu#^lm)*BCM_H&uhdNSnu2pLr25#FEAEXCWV)^UK|gv9eagg;z}4+L(~ktSq2^IkViMNxfB6eV*d#6ky{>*-y34 zR`!7&k%Vye1*X*dPd(ukEvk$({!|gwE#;xiJJsch{eM^qQ&7h)HM^89eAfJ`k$gQ2QVmB ze-61d<$wjSnJ+M-5t}WGlumM@Ol|A1qst|wn2=4*0c6_ym%r0;HOgstdczADENI32 z%`^1b)WTL;$E%wx00cZz!?L>ha9ytiHB)xZydzCfH{nC+&5343n3I$vr1ZDs!GJSi zpG7W0e?fUigJl$y44GNgFo+d0UiyT%U_i}RAKY4sKbC#zuk)&oCQwsdffybP$exYa zEMu~7aCBl0xY0H89G@6>yWPiFT_6eI*Z2W(ihU&FK;25(c_)#it}5VRYLJoMtWLmSgILW05jbig?jnf`!(P?1^A zQ&JI`D3hWXp4XC|+9c+a&Ds1!fK3&KsAp=6nJK z8T7=K?Y1@3SMd(|Z<{2hQm%t41V0`(^e)#1HYmOSqWH0}f6TF1(S7FQ$?;T~p6vDy zr`?FazFDNH8&IS3R{kBM0(eJzrtNTPMLkmZPTuN<(`MRV^l+=1gdW`J-O?$XQE_P1 zsr*myXM~p8qPZdIH_imhL_<8UTqMJGb+-9gr6k;w3&8~mt*wrq)LZx1JfLqftd%PY z45sMBj<;wS4q&ip^jigj^w`q(jz0QuCYf8#%zV3kZgkvI;^DrphstZ=xX%{z5hGDF zzcwG%jLK}cN>(Zd_*fkau5`*9W>|b)PQj$Xb!$SNp(ii@bAQq)^CnyQ#9?R@r2mYI znBdF;zBw%wOyURwXEK>*!P?)Tjs9UZy`6T|kh1s@h(%ueDU{^!&F4KTGNrbT7Svhc zH@8f)Lx*0x(s{gu=0EpFc_Od6Zu>zLH%iUV>ny16Rpv6Mw*l6xbO2hPI|t79D$F^T zX4pCOrCv>G9Sd1Tzca{F3{cit+p=g#?uIQur9g1gyj)&;9JNnD^ktbpJl-U{lMwma z;{#y83;ZdPU>7ufaR8`IS{!;E1fr#93KYTaqkgZ z_G$mc6}tz~oJF}Q+0yV4Y)3qv@z_TV1qFeNS|5wmIw8*@@wW|@bc?=`)z9p6`C)Ge z92RabI`MS;;QhON5M7L8{?m`*^BD7&w-WZ#t{UW2PGRzXRNPS?vygN2vr>AKJ1gfA z!pyHwO`Nu)!*yoa-woY|>G`MY#Hqt2Nh}u8^TTwEEx)!*7UW2=#%psny9AT2P;480 z5FD^E^y-*D7my#JbS>8Sab{kc{anV*NXH6$;|~t7S>keNCJ*1-(GdUGwA9brQP%l4YCm$+;XH) zwrlC6%d{@)?8G}dpvS4-9L*FNDRC>N?d#8?M1^f>>Urlx4YkqLOhtxsHyrjY+jovF z+oR^W$;)eTDjXq%c;!*N_S;+b*Qx3sNhaMzI;t#LPOB8joMJCe{U$*bSr{(i1J};` z(_4Qy9xz=>yGV09G3rJ4wi+>wLXjFRVAS0~$xy!j;&*q(FA#R6v+=;F4(GP>OH%m# zV&tV7tu-@4CPJE#bCor%5p#`fo|ZMZzFD~qk6SzUVyj@Z^0~YNi*}c`xG~ZleX(N))i0Z7PqNt zw+w2aQO0QRP={ut-_1A1>Fpa>@4D4%3DU#j4x;!(U9TclR{js;vbP<-=B;NGyzRGa zbMhz8SsRznqj8Lc-%!ycrizC04uShN=XH$5AU=l*^nKm&6A#X-*EIXRy|jt}hdxQb z{1eeas>__{I+XU`wfez8o-vrl?RNK>&ER{xcYD~WddiNP9(b6s+nsInzK+1#JWg?V z+Z7_Jv)k%nj4I9`DCBxEK7=^;Q`sLmz~RVrrhLa$ z{1lvVZ;f)1@H85is2sddZ_B9fi75MN?cDJ*tbo&n?-+?(Jw%oIb=z9-QY zPlObWvT#H3-#&hg-}Z8M|H z{KmYrC~hX8JT?cu4XDf(9~61$d57E>dyh2}=Lh2>Z&YkUPZp905_;DUS>DZA(_gl~ z5iaO0p|i=;naf`CrR62`lX*Sfl()YJ?y~O?P-g5u*WUK-pFBj}Y2+4D9DUFt@!-h8N}A=T7-u_;aeJ%>QzaSAF5p>a--E+fo!9|z?)Qrsg~n2> z-9yr98JUhxC-|m8y4l-XLn1wy8^JP9cu$qVe#El=P0SW7EL@$kR?^8e1G-;=^uAue z5&v~{o@j^uJfKV!EgsyBezz=@Jb;TwX47=3ts>_p$$P>*dKQ-RDX9myaG8u}<+C+? zVa?rVF4R)gceorVr}?$bcR`OUY!V_$3WQ7eZ^8RioxQBUip@yEEax)#pvY;b-528P zIBgK(IsP|oK=r`A1G>^OpHA;O9K%DUM|!<6{`uKs`qQ>-9opCK3uYM}(6Nr=r09qC zYq{<2ug8{a&$trN><%p-KPCRi$;EL#Gnry&3W=Zm)=rumtDJIWikvl1Tv!YpB5QC^ zX<6>jC&fFU=IxZKm=GK@fs)BdBD9_RpMuLLQ5)Pf3yM5IJ zK|JT@x%yh`hb-FK+Ll&U-KPLnv(e-;Xv!ZUCAkvOu|I!)(a|AbW@gUN0@sI3>F*a8 zkH8T!+UjaI5q!*vR2Ss>Ld#^cG^-=1++PyH8nAp?(9x0E+bg=Y#go)Bv$P})uF;8% zj4YGPloJgG=0$sA$Ru!BOyH`kt25r@CO)Qd+Mi9mIPZ_2IuJE3%Yy4hg3l%=cj4Gp zftytR^O=GIotPL%vR%J+h%pZudG-PZO(DH9-|OKISaZr54#(5Tq{IqUAHU~)^Ym-v z{o{nb=N%nzl`e#fprE+v`RkR!R89|Yd7ropT*FTy^B>_n_McKxn6@aFr6l!pn2IV#EArV`W?F|hNYpuI`K!KO3# z{T+Jcdg?4hd{?U$=QV6tkFn7yFmuBQ_2s(J8`KEe`BFJgDJq}I{L3tS!6{Qz3MD0C zmx}e_q%y_kr2OEo?W1iWH9q$}d$@ZcO5nSY2xRn3xsD_gUKWvBZ@C7l=*(Yw3%f`( z@{02o;`e)c!UI<#m`o3*(ZBOqYkLA|I9^ivwwMSOBr*I3 zj9EKOqXQQ19Ig6+?l1G}l)D$&Wi9uLHWF#z5=)GU6)kCtDpv=aj?=8N3JC+Ye=(IOTG!?@vwP{ey<41#^!=5a+$(9<&mtFqrME zc+A_M;Q72^IR&n?BM_&VSG`c<1lIb0`<;`u3e%V#b-TSwY?bkXSE-M*crroWFnSnd z>j3=bl9V(Xt^;y=Z?F+}Y7Ukp-8=o-MbqzF?NTQ`H(j1pzt)&wone^N6Mx5KWD}yA z$rd@|*p<|SySO49KGNqku(o?k%xJ(4v2L}K<&(kcujdM2|Ei|=g6v|^1$M!O#m#JUnB95#>3cKl|O88Ez@p{ zlGp++cqA$D&$%WtHs0jqzUlm5-2-He zhbdrqflqq9u9V?SsB*U<5Tw=_@xs;GAh#EE!}s&shX|ct8_7+5-@l7_akkoM^y18S zX^e#VVn^vU4@!M5BX%q?MOt*z58M0I`fyh{Hribx@OkawBTZyO{;d`a>LWP4?oZ*9d8a4KYaKQ5*|)QNm-yg0)5%*i%fAX@v_DL`3YU*5=w)X~uqJT=wVCxFxa;^E;XGZ_jKOHls^2_ln- zVlo*-Gcq>jea*b~TcP|J{@YQ&HgtwiQLY zW^b-IM%g&I{|xzP!bldne*J^Xf)vKX^3R_z|1N02Q%T6+(Hbk*?c%?2J#e8clf%b~OBgH*VkOcJ;T0@8UV5ho+yv75+~kr zDk%z0x`-YZbUosEoF0j{6G>OT#W zW;_rj#{0w98XR(%L=h??H_nqds!DaSN(}T&8#hz*bMq9O4s3!tu1lS1o$z&gc&Sn5 z+l5}Kzgs)4Gi27RO6Hrk(Qw&3RyvE`$2kqk7oIR;(*?S=iCwnEHVlZArL(-1enE;0r-V%O7jmtBFd`eCL5qN2 z`@$!c9X^ciUSJeR&!RQsW%y!!-Udqs3z0IzULQfg{QZm>yJ5A4_ijVVI>;SqJP6K5 z?~-tthmHe3@r1NwclFxHaPzbx`RF=ncO_9Ph()K%i{|uQA~7ocE6vLVz3AeE4(r z%r_D1o?qJG^aG6HU7BKn1!xjdMZ6JmC7;hY;g|=QAYj8YT8a;xG6B_+|MF-tFfMqsO9MU zaz-QijG$OGYODucxn620rH7n7SZLBUWQC6R^C=4Re&Thuri_1X$0MJsjdp!aHFDi^i7t7`ruEHxz-z;zwezXIlpfrJ@Q!+L&BWSQISQ*({McJ4 zrdg!`k8unRI?8qK9<%`*75=VB&VIUyG7l61 z$-SHTf%8{eiQ_#{DJ+&Mrpn}c4knyg;pf?B(-a7sP zp5Jv?_%KKdRdL~(QtT!>ieN}uEQ&cV)stt;E*{A{pIjKqu??VMZx=MP zCvKX{8r=L$KC4uslI)k1$8nxTyv0rZtjbjcvs(# z+VMce^JgcU34F)dV(h-d6cY=`^qJ;(8Pp89V1~|7PWdlop10qN89a3d9Qd+XvFxXsDwGH1=L3m*ZnYzX*IW43h!?3biUR;A=ZDwE0 z7=5}ZHy^Z}pWOPTymVISyR@uFGLC3_Z%pONK-QuA+kfq#+wGuqAKsj>;)t|n)|mY7 z{bqjW;qGJ%YIt_O5LiltbhblYG-S~b7M;JtDJ@s5Wpg=jS;S13MRPxxR|+_PxUEP7 zaSvq=-~jwkee4e1SH0_SQ<_dV>T|yqbG~@=VklquPOfsG#1q|s#6v8G23-srzfEf) z=~8Ql_-=-~Z3LL-T-^qgX8^&MO&m`i-yW!|zyMF4WnL8%Z?ihS zZ{+uWn)OZ($nyK0M5PrfFHLF*MqZ8v$AxyRY>F$p&UV0y~&vF-6yMa z3?nBn|7A-v6UZ~wT^$f?iN_HmwVyuLTMOJ=aTcHQ-uX0;>SawK5*HOCkT*v2d($Di zF}UN)XGboFgVSMXQR&YrD$w3B^OV-qwa@uqmPaPYVf~=zV#}ncDrdg+7Jf`ahz*Dh=`wY z0mtDzh1X5bB%1)L=W_dVRV$T*CGFU<;9>3)d;aUGEfcQ;7lJ`EmDswQqPDg&A&S3$cKU6XUm{HQO8U!>_kzLuf?y%>%V9zl3;Nus ze`I41Z*-4@Uy!_BppW*(1_aN3=a3EPI@ zSOPDQGXl^9YmtK`2$P&TWtwFYpspbQ;sjdhWF?ycyT)rYRI~+7mNZkqE^BLhGVk=B zp;jJz`Wsq&+2P9l5yN6lEO?iFO-)Uc_3GK3nTe?ymL_fEjW3dq;m9z`Tw#_|*2cu9 zc#u3_uwzg5WiNcH9MQJQiKKX6*51K4GB%e9A2iO6m^twK6Q7Z|kJ!kiVy_Ib7=ddY zN4l7f1T)*L^Jf70cJSjYMqFlkfFTFu4CGBx057oc# z`)S;zVu3 zzU|A@9_CNWVR1_qSAMKLMKJrU?di#55@Zhxa#E7zae2&~wOoeZCQh>FhuTM+tr)Vd zEgo|HY3!h6KHMK$hGZ`7_AytPRt89$FN$c{k8m{(CKPE0!U zb6KuM{7EP6beC$zLkQnUkOSKYbty?$$IN)V{voR8hEIC=^yO&jg#?HZ)a9eX4Z||% zVwyXROXG4-eSAf8ok*-xL=?$@uPa8BPmvStO;Osv!!N+MkKKtoNHf@*cLvJ5h2x^i z-&e$Q!pSv%MB7h9nYT4Gz-`W^mCI)vzyQGR$0$6DnJ;rusataH`cv`mK%O&R5Txa@ zXG=&pnjQN4a5drNp|rtPBpKR6dsh=`rT)SgkV?9`PVxNF8~tNay}PNIX%eny2PDU= zV4+dBH2!P&Bi-75%AV1B#i7g`wcpryvc!-8cD7}!`!3I2YGO6DMUC}3LxDUBvtRUy z*=mD{T0#X2VnLar+W9_jH2 z0yZ@kht-NJoln@=7=y}a8^`tTy*OaP>!-yFRv~d)=+n06hx6v-AJuW8j~h})ATO@V z&h{h}SWb?{4@q2Yr#Ct9O~?4(NLF=Pqx$|hO3!6Cc3>s$UUClDIsW{7kTmDkGCDU0 zPEefc(7GCd%UU3D2|q~&bvj1yIyjjtAtfpKiGd+1Ie9#i)yB@Qpt?E+olN{^GPUto zUy7thB04mo$;Vq|u!HmTi;>iQo-RhmnSm z6n5>n-Kq0dqUi>(dmq`(hvE}2clasA;75%9@oJ4&BO$lb4-%0eG<^K!!}IsL)gIS- z3}b?BXDcZCj;*WU#4HmN6JLadg$qXnR6A1%2lTSXB)>0cC$l&*@55lLHh=GX#;Wp+ zfuRWBF>JDD4`)+o7M351H@ao@V*raR13R-L$)_nbX3Wj<=j5m33fFFW2aQwU&e4tj z4a|Z&*jZ>lV@NDhtAJ(?SHJ9yI9;hXVQ2WlN(D7fxjUBPY_E+}ENxy7wJU8aEmlZe4(}*`XY+TtBCGK6~Az%lN1PqSYD8oGo?CF}y6H z(qOVhq^=~yN8naDUJuLJ z209+zjT3#n#vZ_Ny2H^zCERg8cIZd3-MpEo?wupfbM1cLE#aLyt^Fq4g8>`rx0ysv z@lcTUw0g>x<%}<4pCZ=U>N}!{;*C4-1D@{6=)s@x^QlHag zC_qZi5sUk=(ZV&a1rN??Q79MrqsP(R;sfPN8~B@5)vxzxwf!~e=ot&a ze?J#?4Bf5PYP47}J7ZV=@;;;kRC-0Uq{RbAX7#Y*n+?}5x2-Kj^;syt6 z#V40$L|KPrg8@Eo2*~z?frt$E$C!|kpALr)9d>N-^d8$@S+>MkS?=D$z7kVUd8do$ z_c1xytgmgv=dcNjrv9coJOTUDOv$s2AK=lUXRS8`fz-hFxO5#$kQLAISwoH8JH*|| zQ9+IHlgf@r__gtskRa}s@6**I$)4j%N*{QW#DdMxOHacu%mPR4c*Cua^$JFjh(vQ4 z1e{SUy;=#qc?+sHLY=Tq^agZk8!viqpEr+ik0w$rN1O1v?`cN2!is4hZ8(_@Jr^1> zR^yHgrryPy#}?rdj_&%J(l>ebvl(zc-`kkD&WYEjH_K>AcR6G>bJ8okWpacT`^T>S zGW(HjczOFR##@auffnn%+%#QBrY1yOLH8R2r;G}cY{=$9==*-kdZ&vCn*Inp_(BxN zI`&X_cq*)J;Rg_sHvfiCV5q08;Of_Ay`8xjCCZl3vf$89JifyVk zkDF;^%#Vrqt4>UY12i^)`oZ%u0j0|13myBLrR(ckJWmU~zu< zC(iCEOY;ePv52XTwZ@6hazuD}+NV!3z4bwTnT=CBXMJ^aqW04EDd1n@bythOaJ>g$ z4>0CjUjHF=%GbTUvcuo@ph1|<8;Lt~G0f3qgk_`oNIFzH6A|;1%zw|RGZj)vuOnVl zDC=yo@~+=zv0of+5UyEpC!{#i2LF9wOK)}0W@!&wRPtaiy2DW~JRa`v-cT|NzL$?k z#LI82!Ub!CRq(AA+@4{H+0j~ZM7jB%1U*4imr$@=4jYJ3>;tTH?{YUO z{sgbU%FE44FtFz?!QmjlLgIs_L?g8zJMCthcXB-8X-IGO$APLzb(XT+MKea@`t__- zvC?W-ssIbD>ZP;S0I|}fzz04T7^(9M;E_V+Ewe4&%ga%#Mr{2OFFiGSfMuM)P%Pci z8Ke1OMCqn%GBa|4kJ>ytWMR>mneRhp4ZGZ z@vuP-evfnor)$7W3QZHpwFqonPh&Hoymdg=oxeh1zOG~-bl-0{L zOaCT~kgo(i$(ynSyi<+#xtBkKD-lRwkUSnr(9DTE9*!U`e%DF|4{k>P!WPjN@UAcI z*MZ(&g~F&jch{S=HJ|EHhi#ca)j!PwRJMkzQ}PQr=u7Dz%A@MvI!;fy$6_Flp$W!s z_5`8L4~dNG-V#t5RZzTbgYpk;LvVdRa3;k(TwhzRp#d+5$MTfLd|ZFN>Nkgm+vZaM z-pBPv9}FS59&MJ!{!cok7CQ;%wpZQIaN3$M&cQMa$Q#Y;s*cD9^Hgx-^}bgTPzonq-wCL z?gcrsAJ$AZMnbCT{im`F9%L0i`677|mk z9EgXU5I9Wtrny=S zC9dz+jD5}4P5%cTfegQfZ~EF#XCZSQ%fETY7=6?Fe#{A8qx_+okT6bClzAkHIfOWWc+jrx8%lh7~i&e>V8Zw!dzRw|jVY7LO z7&Sf#x3vw6fXv&w^>y!&$AKIb%f5JhaaY9#o@hTTMFZToQ@a|i_JJ<{wg6%yKZMT6 zrH0zESXo6^+(#Y^wZiGf@^0H6e;de7jyv8Cx(0=P^8ZoaW?zRpE0~yh%aiHm8U{2c zo}TSRKpx$Rhl2JO&EzXjU}269i|*|h<49-oqh}VPjXh}gVjc7@`fRLnF^5KFk9J51ae?kp;oySdYsXdJv?aS@x>kuC zBZ&mQ0zNmz5lbN6=aO^-Cgs$msOpJtJvI<&efEz!R&yo#DoN@;i~Ci69{p+=3nR}3 z3pbYm=&c{*2~Er%pwV@Rzqq2ad%~hf(0EjAq3KuUEG0;P>k+avgI*lT>GC6t56bJ! z=~XW(&K{mFR!EmF=4tPp#xebS=5xw=R`LbNQFq+dWhg20(bRgGZJD~Vka(Y za}h3X&R}hhNIj!V)v5QhcFv?^PRlvoXy)xuk7*-~DK?%I zkoNX$oe1)hOM0kGbW( z9I7Bu&p3M){4~lvSoz9(4f=&+fEV2zWb-gkK5=1Mmy64XXJzoL^Kf%N8TDs|ELkQb zGu~V2Ngei6e#y{E)c0W@vF;SP>@3x|-yncl9dT%P`+Y@IT9JdrlmnvrZ`w)GmrImZj90eN_wbseQGb2?d}~ z^UQD{F|G(RGKiMujm|8g_NYbMW3mnkp>Xi>jWt4*B5bGWj_?0E? zJ`CixFewbJu~Nz>+%8a!l?^?@5HG;P-A~cs zqcOSq>8|9ZP16z{yRl?>Zds64-414+5&^?BkTI96wMZ*;7A%vt(!T^CIHO!ygQ7tC zm{7x;Ru7%lB3jv(3!zn`)a(KUy^ zkDIqrpBFjW{pTCoy91nIzTSr*hkM=wH>rCMGAh+I`}Z;#Qn97+Jq@?29Su0+oF$^KnbCS5uC*v*9 zoi{DrWozQ}J=I*j6-R3B%rZLGN)&%=Y>63?$CB*n!Hr4m;i+xVSMG%DnFw@y1&iU6 zQ-DpNJt*o;{{%d8pety@GwMOXf-p`cVLE}*2FIM)yP|buU?hrF3!A8eC*@=y)AW#C z!~-;>Q{fGOMHZooaouOJOK1IfXR{UfQT}@Hmn@&-q-~k!m21Q635D<7>u%fZgd6R| zy^^FWSTKUji_5GKijJL)(Jzo0p`}-3V5kj`ABQt0L7_Kb=&hK}>EXKqs-Al zx_*OX?^@hcGiy3EEj51txocNIs~tS95z=ErIsZ%9`1?(plC)FZ&W_cD=`r=YsmT5b z>^c~JaJWVT&Vp6a^`l}gXJZO|RYzt+j`^&PNvRMxxp?km?uz0lTTD4yPz?j_DdrRd z)Sk|+T#FV?J_Yv-jD0B)^FNAH@zW4eJepf!J$JK(%h6k$U2l=y!OzoWlG{a0|B6wJPNEwA-NLvt_?2w+qw>MrI`TzE zBG4;tL?Ftj*1;#+0uW-o{ho^*zN?PQfo+H(iAUejV}Iu<)DHnF8cp=Y0~c`wLPVe1 z;N?mlkC@c6&*Ft6_w=REbvYw0TCygk+uy<8l;6X?p)-|otIUE*C$ujI>WHa&*6~8} zocI`b$PN46RzD(;YgBrFyt~clRztdwHP~*Tjy$e>ZdcuGqJbHU=iu&8ElotIWT>?~ z{#NR@)v#Ky6?iQ}mV>8I<3(F0N*_k1R5vOwYV zz4pEnto6swe0h%}{adinVeQ=Y#ld*~J6QHw|5cjhmvMhT$yk2wl2Tq?&c@EZ324P- zHLEhI4Hrz z#BVL=&7KtRAYBdoybw3kS|t51CT)wSUIq*tjE#-4v9U23cK;BFazI;rgWVltg_>-9 zgG*Ygc6l7SN zJ;Hds${y`R5ax0vJ?50dIWfo)K}``SG-UJ>fJGX?dG^f~{M=Ia`q_O)1i=k8O7MOl z`N5UzQf}P4Js`Lj27DXkEmo$5`r1qbo7>aW~C>-Wnf33>h<>)@p1j` zI8BAiLHu^K)PLg02N=t5umrI&6X&N*gdG~#r_?{tj3$nkSjCMnaG5bJ76u8!>)P7v z@Ku}B9tVP94ZG1gsQLS5#*tOJz2y z*WbgGGPp#v{dU$)ym;uOO}XEZ*StE3TXA^AGh4Y5sYnxeH~z$UHs}@By4I4o4%(G^ z^BSd_ifZo#l6(B47X0#ixXHSRPPdSl^k8;$xZ52D_TqM|TkhYMVS}1a>!yP@ckH+n zk@c50s*v&SZ#BV!XgmI97^lI^d@f<=0g3#8q_Hs>n4kfRv7)@>BrxR*3mRa0<_{`U zB~pV(NQT^2|KeFeo!S#Hx4!^b#%`;l15d;c{L7FYgNTe3<^yk(sgmT(j!4*JosqnIK$F$9w-BX7uL+07)DsotQEhlNuM_Eifved9$4OSk%%hS44jWiu$(Pz1LPzSrG zQ-p8JVj%)ov*yx;lEyxDWbn2sC6%luS7n1U+*ilLKo7To=ej8=rvvr{ZOoLX)}sa9 zVO9wSUxB5V5TdJPXfZZt!i#hxADVMYu^`8|&ghI^;G3 z&SaWAoKg%)slc!jIpX8-5(G9+R!>=UYg^x04H=DcEO0cPCqs$`KfkBTsNQJmaN^KK z!^T#+*Q&zUW7@g%p5i_;oRHT z2WFQU1+T~ieQq$YvG@7cc!qHf4egAec=g(Xk1LxZ76rW%36c3}%h#VzROe>K_bbYz z+$BcZ9&tL|FEP&P;Ia2EN;T8m-|BrmCB)$-EmL;@XY1C^)HMFP8AnVGN~$?R_7DMU zk}0cxZ&qPeH-G%{{BIcuV3&8pVZ#Aa*!Ka^yKpwotdh%tYsLmSK=ZXVo-c_IA8cC) z%mw?3M{vUjRbb>sA!A*LFNw8er#L^9XKL?ZD@_Vy>|E*s+dxhI$21 z{g0byiyFL`?IMX;s8k|HJ2cs_ZnsH||1mfhO&08#FZTtlCKS$LkOFK`C^DbeKB{=& zeVPFvgvg_s682KURNkxorm7U@4g0e1gTDvDuv>vsuKh(Qn@zIcb+i7NkUTZmaIkqY zih5#P|Fei+uRqq2T*J#?^vlhdy!jwmOl$UA#^e>`QcA)CK5TpM-sj9twr*m&Z;;$o?D_3yD)l|Xk{&+`{%09>Qv2^TH9G=yzd_;3* z&PSLVaqP|R;_`2!5!rGC_GUsHVzZk`&<=CWOh-OR8!+vYjc11*)SH%4b3Yh+vN#I; zXSTYc2+T9WkAB&(dy!?H5zlV+# z8^al5ELG!){j>u>hyePpE%;g({p8vDKCBP6%`D4n10m>9#^CEcao*I66+1AbqkJA{ ze->~B}WNJ|CJT z6J&7MeT~E6hi7IGM}SOHMtxpv4tw_eOx4^pqcGUlGnIT_ulk8B5V~pw(^E3qp1;Qi z+mxu)Hnj@UBoys^bAS$Zs!DfNNcxUwHi7~sL zW=XNDs&=z;zUzLjC*Fczr3mr+Ia2{0O)oC^;aB9f89U zwwE|f2-NTk+m;f+S-U5JCwYos>HX%t&PrZm?UZ2n5$yp9RhPLKdN{CS>;vBp*wS~C z4*gSc!3vax{D5j%Vw|p!**E=Qp*|=3An3r&;2##w2!myVcV2fvi6&u#bKtQtarQs@NPx;GK(nO@}B3mlt$`Uu^V(%KlA)QI2DMQVR z;(0`=mj&M(P7B6J)VD1`MmmHpGSGI|`r?uRF-pXM1`+9!5qxz=321z**!`__(2mcg=`Lv|gMTnOoEbgHof@g+wI_ zg#X#sa<`phC=6E#HSaU>{M>sBx_V>4CDYBxkeK_uPyIN^XuVTH!T0q4aP^i^bv4nl zD1-!eLU0JK!QDe}4esvlZh_$LESL(sNU(o^65 z41w6*D_E~qsX-)e*knZ>kN;q`O!mTe;-=vfr!A+u=59|yNc1<0stCrRT>aeQUK|yp zbb*I0BP$ONXzgYLMzQunPlAfjSbY-Mj| z5-I<35G;^_0kRh9n7j=_!QbJbfw-`yu5Qz*+0@c9+=*QPUJWQm0vgxiAv6O5uT#;< zD95wReooIYIz-&RSV06F(bXbif&UUR*(OioCMA*5D*=i&3o_aA&fYc)YdLcqb~Ze? zk5FN6PTNOcG$(-~B?*a8hahMa@c)$IV4GW8!QlvRBq*+c&X6Q*^LQXOncKDMKg~8# zQwmO8M6?Ngn}?Beh>OOpbJG3F{`8BfuEQaE`YsmlR^v}J0YPDVd;7qyxqo$oK%_$N zVob{Hf%V`9x`8)o!+3CeDjs@;M9Ue+*KR}9erCD6389USKp`Y5&&$i}GJX{OFQwGY zKeq_KL=fuHs;s&`Ng&j=`g&TGm@~yuB~m2}`N4I+2swHtIS_B?pXgg~loBIV%fkm_ z?o7v99*u-7hJBZ4cg+dv%2-+ek`#7AYDu|s00MC4t|E<+MPA^9iW$-hIGO9*2#+ql zN`l~h<73}@iY}J_zrt}8l)rqMkvknyk|0k?>bbnA?T7Wa(96EFEvF|-?#EEout=jQ z0eI2Vem-?UcVf(pFpG2uSvQmxN35ER5RLSwj96e&e)~jN?}in+?4@K5oavYPl{Z2N zDpF)6qgJ$5)%TlIH-FM-fpA}SUoJGwE0FJH*Rss5Aquxu`!BT1+O^{tJM~?>parQP zCU;%AAKDYK@>ejrg7@3EnFPt~+^^Bj7FqMve!VMWBRC4PK^b;35WI z>a$*dCk4=sc>jceGS_=1t!Yz1oacgrd&eOjA#^}o+gZfp_7K}_Z%t^HWKAcTjo|4M zo!90AwGW)VS5Jx5*p*t`Dl=90FZ2WBP>n07AOdV)>8b|!{Os+C)c4wEqDy6f6=Q#w z+6Vot8333zLQX(^%dLw2iU;epfJ0V{X7Oc5dyFx|6%eL>f&1dfn<_MLU7-pvuC&D3 zf4k)LdbXA80R1?6`Z652<>4Bh ziQjy#fG2HT(eMX4CSRzm&2#MgkaBeK|2O(5_#`~H>`{Hh8(@rh59?@3)< zEP5{7cZuad2pYL#nOR8H41CBlqlTk&!8=roTEHRnKbk%-S1r%V9)zi@RmcsXSW?8W zyAS=R7N%bL!$!sMA$PA3k47zq<;4FlEkTXeVwhwBObe4G{hnMb9$9L)`Nu9{mMJ?< zk97Q-zY(#_1}=R}u!NtZk1-o}k&qJsTL;M0i#G)MGhor5B#4z0fr<^Af5XF@Fp3gG zs5KFr&2?uYX;~noEc_`uldu10aVmJdq-$n|6UaZ66n2_9M<=5!f79bHrzGO)o=3N= z3SexuZW_@FAZt`dA~3Di0s<;gDO0r2`YVcKl@$AjMK;8%)!7I);ls)$nb?fgRvUlz ztz#`D1a0B`G6^r}J#TVGM+74PCYzWU92Tv?lJgz7@B-w`zi|-)>BSankAZx$xiD}L zJj@$g2api%FZsIkhD99UzukBl|B#^UkS*|zD0Z-jS#Qp!VMF>69)2qRR>dNl+AU>< zv~R!OoSt+FX!unhOFFG?={rl^OjbWaPk44ESw-D%!L-^}Uf`;V>rv(x`TQtcrgllO zmU{T~6m?>&h54Ylo3W(T0^F6NMxnzh*o{q)&6IrM8k$f;ME}-L=O5o_0);ZX1M6*F z>-Flmx+VguX`3>vtE-!wp7vWh0ZLaHctT{LQSd|}@kt2@eSipGPfrgZ{eUXe@bK_3 zOa|ZXZlCxMR@M6zM@#NbeeHJrb-tM`%o*BWmIoz4^;7Mpx7M_qrz~3yZ-uzDlF;gY z>=2DBR)?1w6taNL%?k``Txr4a`p!*$6ad9jv6U2+Fm@?=IrxLEd56IIuD=? zp3+!w98w?KGAP*XwxNFnz!S2v)=jO!H0fRKj%cQMpDs7zjcx&Vo2hA5R+f+7$A>ZL zAW_r*KZ*FNy}GuQgOUUk_&BkbCRK$NuzuOZ1SmJKErg*8Y05p@t8i}KZF3Dq4jA^H zHYBHxVGXaRX^qj?vtR*-(K2PCDasEq-zJyz0x499GgThj%IK)GF6=Swq}S#EzZD1- zHZI{_`n?W5UBI_<9&p^QqmtLx*Ei+9L^0f5a{U{RYP5!;6DH~$N?Y_up*#uQMW28Gb>w6|V zsp;lI7_J+uJnfnPe^s`Ee}13+n7U{yHx2YL>X zO5=3_W1e^JbhEuVx=`e*wSU?^UpxhNp#IL2C;VxB`n0WF1YYY<$TE?($k>=3NoP;% za9YgK-I)sH^0#rm$&{QvGHjtu=&#J|HTN!sET{gLDG5)mR+@0ifmZd+w7}!}6Q__f z$=~TRS2hLc&ZW8+5I8!kKju%67$On4$CdHyc*aK}q6M+*XbF!7B}8Rp_F^PxH)13v z#biK!)YSKN!vX*VJC0~c+yhTXz=>04zSsV|~i%E`w ztO)g_{Uu(+$`ABZtMDlj|HXNG`f)Np3f|;PX|Gj%wT08Xz!Qgzh|C+4doo_LCrhYX z^_W<7kkDb>4O^_rG_(pZ~395d_M8jN_^XCU4={5yw+4ID7t=qNYYDEv@?;F);Ez}90?U** zV#V~<66njt%siYH+dIYOoUK89rjJ4IIf^^q7_0fDu`ZXNHdU0uLJr$A5l~Z|)?B+@w#0tNn)OO!$=(cHI-}<9l zttDmP==n%~HWb|rfBuh0+2^x0t=A*D0oWG^i}RXhZTGslLe%*O6w!gtmxje8GGY+Z zFWCg7P>xLc+nDO!91vSEEbP+v`587Py1}-Ppk=ob=WMipYv|J!#NXTRfF+EE0;8`x ztmvsN(`pcwCg#K#sMn15^yBIm0(V6=YJouy1Wp_x(wVWB5nY!R67HAEGPwcf^I^_2 zLicu|$CmdE*t47riGy$Qv(0lI*2|f^x6_Q?Fiizlxa`k)ZB!RBOa$qn<7-AG&eUTO$y${@5H#0o50e;HdDL1 zfef61*k4MO^yD~Ek4v<2J8F#>1}RXR*#Z!dYVZa6rezf1+SjB%`K_CP309q-Wp^9uPG$mctyedEc)7)E9{ znlg34&7=6nTEhzbBwPF3K*uHXs?waGY>jZn!JfD%?}WO`SBM)Wg^9-#h@D z$c;sFkB?uJulx}a0tRKS3>9C=O{k$@$~3l`z~I1MM}DG4yJfVXbyN`yj8)f#k%HOe;Ns_Z2i91afggiym_R86Q#a> z{d#L1;R|cA>bHPT%9=gCf6W=VRR`?t+eS-5&0O{SvQ{I2-~mYV2yQ+Qp@9&)AV;Oj zl9G~sWs2atk}MKBO63Mjr7fZ*y9p9pa94L}uQPEr$#^!0lT#D2r;?D6Qg_B0qCP&L zn+}0ETf||x+9SN_sF#VwDTL~Hbng7*`I+7!pzeqHW2lv5 zn8xF{Krg5%C^fT8&-(|&(-6US6M^+!C-=%*wey~?Y{C&lAE=A|7`lpbkcfi9N>$I0 zHZMW!OP#2QRK)HC&YJDHsvqNJ4lrvTdbL)BUJ z^Q%jsqLVRrBi|fLBGcK^=+*KMj(?nLpSfc&54Phn@M^;)d;%1|lCcai@T$qX zuU-#$-!vZXQ5B)li2DnO_g1${ONH z6)#CL^I2muDW@cWPdL;{++4*avM0|c>#|6=sZG-*#NQ;4vwRLH)XCYk?RqmpC}ufi zAjM!USLvAGoU3^~(qux0D^5h5DUB*j7FNZt?wWq7X?*=UBKEMKvv`KmWgXnxR)tk71s98NO+19jX}Y$jVe(pE5(6TQ3tfyUdbc=pF% zw%y$0nIrl3gQE>EQ+AKYln_|L>P>c_*Myy}#&%E+g4;7&Ok{`py>)5tf z%0U|~2snKyTK0p$cIY0SA1HCLW0HwjTwXVy@U?|=^}005SbiqSp=S{;b?4j#f3((; z{rhkzo*{$N6YKbzD&^HyD4aiNmog&G8hW@a7F*sNje>1n)MSHuye$95QsTCbS*<*r z|G1R<*i^UB5jz7x@w=j^@_VOIO52^}1)F1fc;N>Kh;U2K$!?@ultfz`v@gcf_$`;; zZlBfrJaY(k#)Tl`Vu@jcvHVL1QwRE9Msva5>6#HqRM1E8z|i!ELs{@%Rka$t6oF z1$TLQY2)C~Jvv%87fJ)d@ zad~M6w05nmuO}ye>`mG7()Luh2Wd)}*3rJkRi*N6lpegYgJ*ORtjDrtpWE+upnKAB zTK#*cCX(!^OB8RLJ1^~3`kNe&?g48Tm*dJl3q0|q286n2T)FqiQOazsj2Wxk)_zz# zsVyVZ>n$D6I&5!0djsB^GEp`2Y&XXpa>HQvzy8ooEg{@P5ob)8$LYXMOXdNf9ZR^f z_x%P`m@qK_P-qasO^#O-)70eW2x|sczn5u- zeHe9YR)o#YX9+12^s!w0pt0%E&k-Gz&r zyaYULXhKc~vHyC_IzXZ;nY1hpPz!@iPECPx%GL%2r-vH$vBmwCwO-%=rW_m7{f~na zG}Z|ZLFpS+WMDL%%yo;DmzPiG_2e8%_*N||i1Gcz?13ZK49JCJ8@}QLQ9SUxI-g5q z88)XIsf2qY2_nT6L8b>l@6dE$c7X*a&KIOwTXF;i+SOf6o@`<9d2w$U zgF4F69>>JjnuDd>r?MC$^`AgHp(9TNMb1LBQ1u?2%1_0ShXaz!odF0q^A);iOWp&5 zun%;;ED7HWrh#<|`$D7gvzl1yrc|CxsGU>W-7|S-4+zwxMN!{biChDva`B(1WS07o z3ztY}Drrfgn<=V(^#`thIpP(ZlX^(V$f}H#mV{A0T=oxO_AxD?9eE<1Je z9p8t!W|-geySLm@KI*5jpNQ&!z#@)ceB@ox<8Y25)!eq7rN2x+OcA{y2g*(R$)pTg zMz?(?{cD3eVKu9=s~4VbEx1KBrsjp{UI=u14(b(sZ}giI(-LSYhTLj_H9=BYO2#Co z`GO)*a)5T%Pr4K@Kck3SS(z`hrQcZbC&%grI;y3~DXpK>0;-O#@P%2skv4gz(v}2F z?1CxoL2|74wT92t(c;8ja*G+Kcz<)*_O`$~*IDNyI*03L1;wmBpNv&rmOb%U>F5QX zU*N0sI>VpIJ~qyHSG}@B#X8(W%^t+AuOcY-!48IA?;{A?*mc8(exlU`MlWaOzr&er zi>@RZRN6<9jnY4t-iVwmrhx_jMytw1{shL@~hn+;#daLwgV&>Svl7#X` zOe%zV4mBr4;9bcjVIW$}9Si$r5QkI9{m7_juT%l|#|-H$qbee`9$lCFiUC|^%wR@W zUBpakOGT@-uF;Ne>|?}c=~M6ET;7y~(O4Y`eXDDj1kfwZc_mEXn!;=fO)QO5)05Bl zNMu%ZH6~`&fi8O6LGD-3db^u_c?651^KcM3jHsBk7oLor8!WO9qa-`HE&^>3G#N59 zd<5VbJ0Wx(vT@Qah>CW1{_rEC z3v)E*g5#SLVHW&wHDGWwdQsZ`)VeWy9MR*zFJsYLZBdMMovZtI#vJ z-k-n>7mgs{8-+mP{xxA@0GvMIT1#1I1S1TGS&U0n_VW_8LHpZ9umj&p%pN!i7r&zt zXG^s_Kac+uT0PjxMS{tKY7bt!pFJv<#4Q3ZFAhq%<_a#=s&Hz<6kK zaLPAiMzNnuq2h=$3-@bEMv?E#@sj&s7E6+!@l_XG>JAkK=_|Zw(MZv>YNvh?rs;W{ z+uSTXnv(IV!KA!elCp!Pq5t&L(qs>e@gRkDMXYh&DA+!S6A?r`@9+JEeH~R2yrEp~ zC#1ILZ8Rr*>g@e_Y2JrZ=zRo)lu~R4%;6`wrq3eOGf&;2%7r(xmp0|J#cYXT9Czok#m`Brien)-5ho&O^6seZ8RI zVBLRb4L^-R z4N}+d%n51KoE&Y65&1T<#1jCB$j@)ZLYrF(aIY8(>v!Q7`!fs+CCL%$*B}~KS2{tX z&JCVYf|cC9S!*wrj3Q#-d+^w8szCtwT905R#SqUhbfXL~qW+!1Gh#5`%csvdZ81+t zRdz59KC?AnCjYF&IsVOo*>-GMoQ_$L$Atg{av|S(EB&$O%3?dV79?Vd8obc{SLpk_WP_`bmCVi=Zb2m-=lW+ zpN-Y5ESTKRJD^-&ANG=2r5*^f#Pd2$m}3$Wgn$10IdXC6O)ixpXjbI7Mqd|vje+t_ z^u+>&4u3pW8-JmH;bK@D6lJRvIoR}UrPW)PYKiCHpdh9vSR=LOK5y6(SY)s6;&5)D zruFPr2?ig*xnuB|*O$tn0c7ra}f zZ~M`3COyYB%b5c0dUbUEr`y^4Cg{-Q3ijyk9w|HtBNqN{jak;pYRT&=!NYoR7~|O# zK_f-JBKyp9)e^BZ#j}TLo;67g$4m@fa|DDyQ+B#=E#js$hBt#gnYWhpim@QomX^v_ zHqld{r3KLc&sUKdqD=qs7hK>e$EK0ltCivtz0I%zWD2PXI0dMA&`zzbtabF|gD^w^ zr<1I$nHkkP;u+b30zkcQw+QgP=hJPilgWvGIG$zZq?@_4DI&q|V-? ztj9?DHmTRZK*m&~^?v#D*^z!+xK_J6T(9kB*Hh4%Q%1{`n=qYAR1s;MD)OU>enM?KGX3_8@(S?M>i3Ie^A*=eSA&COeZk9xj zMaz7z+$XGpH&c94j6}?$%Wz}Z+Uua!yP#d>2v}Djp|k^I)dAFJ9zz7C*fV(Zx9Y(BpXDy#vrTM8u=RyB@vbZYz<)eJ+rs#5;4L z3+FA3hi#v1b?u&tVS##K?g@+c)dM_Q+k2?(Lr}{TU&*Tr4-DOE|EttmZ1Mx?(Au>9 zSRhQv+C8>&N}J+TYq??1W28&&8OAZ^ypFFuJo_^HG}sDs zwtY=U@K{-|g`U6#%yKQGI(D1O4Q}@q6dI89Zb2a3(|E8g7jdqH%4kIH_OC{u`e-iq zdj0zl578xX)1~;Oha95_P(+m2@dHb8UO8y&7j-YAJ zpdb06!|(B=gCio&Kah%;j#4U;dR=m8gnslG#@hW7rVmY_wx?gOF|8IjXeYVOT7H1M zUXlQK4aWC+PYgDvVUM8S8@3Th;HC3?e^H=7^(#V~!*2DN2b*?%vI7LUNyMxn&J=ID zf#$+`K&bSVc4 zBwhPkzgLy_s7^1dVO*3c)De%h%02SDy{_PkTOc@PL(|<}75M5On6DJfq09D)xDU2i z*4C0af|)-mADu!Xb1S`vF}1A6LGGgW^vu81^&fQJe)_ihT$ME(!SBn<-PfLDv^Dbu z#Di%JZQ~q)60o|sv9Uy<{Yiucajtb21MDTux5MTd@}6ZIYCO9R2RFu>qwcXktLip? zNW>p^hgW|+GX=}e&h8%@BPS;QU2QzJxv}B%_b)ji1vN zL!Pv8L!9KM8&fh5&nU(3FBdl%ecosCF`s|-jOL78-n{>|;}-uUU3)*PV0~yf9d^>? z%A4)Ut2f#UFEX;=8v)uwr3bEl+Tug@({+C4%Z|qDsa*CUiHh)y>o=wV%|lI*Vp&_ z;-XT^0tmwd?VoAupK;T5C`U;1&c7<8RX%gmR>kd3*8bjM0G%TuGoE}8@T~Unsx(iU z(j3uFEZv%m-r%Qv;%x|g!{ZL@3Xi-pOM*O8mAM$wcSd{Bc0cAJKcALRj=r6l;;ww8 zH*}LR;%1Gj_jYpjN1oqyWFkyINzWqeBuA5doUtsJ*a#SNC{(xwCBY z+UySgrlrq}4Y(=AB_`HqQ7zy)RXI%K3!k=KJC~tkGXNjK&c&r~Z7n11U^zw!DsL-o zq(dj}Y?AhZ0D+(eGM8urcw@)Q&{v0=u`?&u6aP|4i7eM>+J2DcftgLJ{ zL}5PaFqpUwaUQOb^y} zGGfnxCo0GRA?C1@Qy$8!Y|JMSdq|sW9RPa!`TH|C?Ek#Hx>EN@k^W0e zO&yw>OEQ|yW$gb>t^|>(=yOO73J;ADwyPMXzY^gqt9v0%_=M|cDTG2#&;S&~5H&Xp zPL9r<9))VFyRk z{i*7|ymD}CTxG2L)MH0SQ&xYJ5rPxsA>Y*Ne#**zS5Wv2 z+>P(c?3x6eAnyQ9Of2}*zid;=hVceIF&Jk2c2GshvbB0!FYbSA1ZgmeE(fT)>ke++ zBD<7W)&=Rq8FY=>H(FX+mKUK#YBsh+K(5cKnD$P0V2of(n1V$N*kOkj4gQ|8R`tS{ za<)mtdnZviEXBjP%cQn{C*aV+fj4LR;$2yQ9P(+WSX`7Q+k2N_C7Et zr(2=GcZ#$oWNqiygY!m1d!^J*n@(WDil!Gj6`fTYNUFks4(D5?N{{GTo98!{n*Dt* zH*7Dj)md2$3X+iDP)IQ;DdNDSInyILJ3B-1>q<(((8#52UY}i=J_1W6P}4q&-)U7n zssWXtZk$opTTm}u3;ipxX8E%~P=X2x!{psX`TX^XvI#-rwrFDY8R`AQCv_29LJ=A0 zlwV54pW-atMjAi%{)dIFtjZR8|2>`0PR)+H52S7Sir!jOldHbs)QYK(Lh8ov98dRf z2Ij%jz4EiQI7)dh&F1k*s)~1gqcJkxYzJFhZjh|?ktprwY?}0iDnmG+S|?YzTnl4H zJC^|+9X*Z1zV~xV`}n!w`B5AUQ}F?IhvvUsGrF)c{F zgbB!lJJ_8_hp}r`$BkHPjyhM?Uo2&ADBp2^Z*Vu^($#n!rog53`? zV(Yr^?jJZ89?q7gmi|B{I}!iyBj2$42F4=ohW=`=zt(0HFd)PbWt&s*LV#Le7C;M} zG5MduJ{fBR`}X_y@9)xy8s?$0#L=OlA9->pU%nVkxB}b3K^O3gTLi!UGQZG0Lr~_5 z9k8nGKKv8hDPk9xEyo4pXZ)H`4J(Ka&m_lPRDcyL8wp0a`IBeyx^$BkhBLIrnz&W- z2I0heKqMAjX7)xMWwBHBmCGHv1yO+fcliNEo4HJd^M`O8_9y-gvHk~$Q3CLCX#N8_ zM$bnFu;OcQ4)0g)g@uLpBh`Zzc+8qni?W5-995$&TM;T?bKE&JbKv6`)YkjeXgb^F zyXnQ$l=EK@0Tdxz2JtK&5`J{A-yi|f$+I-hA!|jZb{PDg>E2EPrHEoi)1h|i zEtvxW9M7rAn}??Cz>x2s@8BLB$UVWS?|{WpHelMP^n(!UIyu54j@ z&x+Wqpw)z|G#?r8^nNqAJN2Kzpf~okz9JWL`bK`}Ukc_o;+o2)FOb?4wIfSc;kZdu zb0w0>0Sz}_o93D`zf0!p!7?^?G9m6f2%*8|$o+PQph>6({mf z#U~RQOqhX$%GtImG96OZ?b`z*WQt(pSU`Rtx*A^On2P-{6$fzB8Cr+Z`b$b^T{buzcpfO$_pm1f0%wMp%Ys(2GtB9omX6E zL&{~O!z3#KvB`{;Qy`^;+3Z=Gm=r$A4)H8~O#H5wEEu`hHoqBsmZKd};nCj3xHu^b z8tb0rDz4WrS2_z)|I#!}zL+>Xcby%j$+KjLfQ{iu7{j?sirdI>MsEkIqeKFo`_C>f zS@Gh&eF}zE<`3Mr5bBL+CvlRy$)hqFxp`J7;)jo}7JBgHN@XPe^t&xDWDHsPA?TzO zt6o!?Qb?r+)YJ$OBa{eDnsI{#|{M>m}gleXj)8{5xwCFA0J( z>k}p^PhO5SeLv;=P@E6j%o!6DvL{uXpfXwSFtMtioxRv@0aRi1_EmMUYY(TAW zje*~oZqXyDGPRPU0r>EhimGV9e0gOBi`fLZF9NSxRDU)m2G!2aE*GWvJ$=rI9bf7Y zI2PDSSLflmZ-Dv0e2pv117=_yplxNk)S{Y6C1Lh~z{0*?b1>TVr_qi~e4g5N%+@hO zs88?Ja{?$Xh1S&x4(1|#MnLZ4*Ra)>#~;5ACKR`HJvo1-W5Rqb@aA(%#gD+@NM^yJ zWZ9Fy&1c{>%IDCI5TjtQ<{f-=l@(+NtX~TwjMKDuw1u}eUn7ZAm>pZ{E=zi7X{1Qs z88&`35k09+gXr3$9td%T5)Jnm{uTVuAYb4Rd=er64GnuRbrG`w|MvtxEcu63VH~u< zvYnwu`C>!n!V>MajOhu6=@E5{7nIdmGZ-n&u@GV5AohL`XPrRn!b-_uxJDMu(ST#<;`&qY!jmJ|$XvFJrhMc|mZJ%5^~a zvss{A^~C)(@AMoZN;i6JA$1oO5&W*!BYodsy1`|1kMU;=G4SvXI5PR69E&sXkUyH= z=F>CLgvGUTeccb{H1678v1W32qBU4%pKml~dJ#@>3ytbrt@&D3C8+fg_-i#ixj825 z2in!N7#RJ4)R@m%@B|Q0DZ|teMuPozqq!em<#pb`2Oh6}>RvF!HuEFwhE#AqhM-&t|gaqDy26k{gOgIJ~8_S&D`Lccq8#MLs@J zwR6~BaI&uW4@G%Uv@Kj_Ah`&G*)&DQ_53%4(+)hyO0Pnn#fsTv$wX3vcN)#aK) zOU}0#E_<=~BsT{tQ}8pXrAe8ecTrye6_?UAZQ1Uh!uB*OG(2qVK^l^hDy#=&X5yeX z_N*_qKHw7)%G+M>1n`2w0@T&_CEzB=UAIuDo}p%7-IwtYKBsf_HQF0fPA_cfE$E?4 zl?c=*O_++lOt$DZ-BZFu4}GhCtz#K7!QMJMiv&Vfrl}Un)#GD}EO$cke2>d7xq;>DG^(<59zj!SaA$)v{c1r*O~-CR>sZVgr$vyJb-thE%Kf>v zYFFjA0KCAp8IpD*g zA)B8JW8j>d9xfcS;{phQT68jImRK|-p{$lvdc`mbALRJ=3qa^Nk}~_`8GO(2!I( z2Sr9^EHtEi=<&sK{?Yj=!u5n2`60=*uVky-`-OVV>&dbi6<1MFF^$(V<=EoNan;$z z<|{WhuJW94)3?wsJ9~S;q4KU!u`($BUor*(3W_>6)gRf&@c*G>95bV^|Cf!?w1(Mo ze)Bulj^`x;*Ef&MTmuhAqv5*y1AOr$r03*tF=9-vR*fwGnDu>gSQ@s30I(H1C#RmV zv2pb7?V9(SXKGm{d*y_juNxr#aBIx~lq$?4PJdczfWUl_(@#l4lP^;0)mpDq)2G?7 z+TzE=EkkxWMP9B3)U9+w6MMGRPGpkp7*t$=RrhOuv%)Dvyg8+Cz{a_WwnOTPZR;JC z8jFH0YjTh9v=ijDlhyr`#xm5<|3mUzhqLs(v_01Cwkd=K%|4y*?c$BSndL1MeKM_8 zvuex>N7#`BV0K4G2QVNxS=|gtLtwcd9v))en?vYgw5*^J^Ix2Zw~9D%+3g2yK-%0~v5#2URDAlimKF9Z4>832>Ul1Z7}VVc!8_2idYI-V|bR7a50 zm~u%F5eJvF^^}n{o-U9&jtbH0Hjiw6&Mrl~9F1E%TbrL5xRLo=y0zM`f{jn+Nteoc zLYgjq8F8|=M8{gaHtke&-ydnQSmA?!!&>2b#}F4GPJYj!3z6w{36p6xFQ8}CrP$Yb z3lWdfdXVT3fISBC$z8aF;Nml)va-<&y=VzB!-w^^+Laq1Qa^h8-r+l${|S@(lNHge&Yj2N2p3kdXMb`L#?x(T+}fEShyD zbkMQYd!*+Xc){<1euG={M{-$U1d`%uf9T7svxGa&Yejsh6d;Bq?bXBP_;35BRXVD?IG!?Z4#|4oyu> zS>Sa`h>H&^c@ohObN`tLKl6e1m2z!`35_>|o`FFf2oI9ZQHHk$BrHh{fnx-h1|v{v z5wTsjY+9seug1YJX7_#$5$UrixU=OKmbaHk7gxFvC~PYomi6I(od>{gUu9wW$57aq zJRj4Sr|0@Jo6*GT&n3_t{Xp;$cwe#NZ@(NjN-kjit(NeXQRR$n9+{2)wRSRYo=}KpJLfc)`I@hi0A&csa-{7OMO^enU-xyuGW#4|aEj?@m`n7?oUI8x_JG9MFVO zq);!8imLGjO0?p^Q0ABzTQ>40l#pbCLgkc1brsY5XrAT4n zcj6n#{UI;CVoq{&&gPtq-GdI3v)#F}wV5UhIPI8X@QJexU5%b0$nGJp!e{(|9S&gB zx5qiqFmGLCWaNTVJg|Q{x^kjFy=MPTYTxWOM8^>UEF`j2(nyi#H_ty%KHIodaJbrHF>_BV(`ueu0;;-x zcoSs8fQRyFJ-hC}G9)z>$EhgXepgv=D6Ap^79_CxPnBq%q z{FTNYTd7DDzfi=TB2yM;zq@zW zSiI)4%2$S4DE=DP4CVYI@341Wq{e_kMC|q23es6V>yR}`qz20l6cUd8!}H6+aVo_*casEl*@dZ*Dl$=XcjD9$4Tz#yqsO#^yc%}q@yhJa*t z?s_0yBI!QUn!~YW(&6jxG5mD@*SuIvYBbmTc1!NkZ+>B8E)EG9iPG4Gk{(GA^*rHq zjeh}NlYj2oDaU7J0V63=F;rqrX-JW~2m1c&)wa}Pwp^oVgm7|U zD!5^`T6JsSm3(KnczHAA|4K8soa=n~rsh{)UoW)FIG51s1{7&&MXIgr?$4^!BI-Q8s-=pafCUgO zuq~P{Jls(S>Gq4j5aPD?Yz*I4?{DG#wH+t|CHlu2V_p-6_+SYA8a@lQ9y=U^Cqepe*Th8S4qUSkz0)-A z>)nd|vW+Gp-^&>{TMMcH8>liY<%+M({S>ln=ppzm9ps}dK+8!3UXa1AcZ6(lIA@xE zAFDXAq3N_>Scmu>{sGg$Kk6mElo(~?;EDMokKPgB%atuJU#Rd+i#Rx%R-~)pZ%r5; zPH-0ly~(Y+MN4%uD#V&D{bh1!<}C63W}k_mmX=oR(kec;%Q%sJ(Tthf4WrCWXsf5W z_s1tj^Bu-E+!Z)QUA8jKmf&z=mUbE?+NYR_Rs|qol+csP$~ehQ?Fodi8i%w`xQNT+ zm30^BwZ6LoYsSC}Qt@lHMGQ?KDN;Po>|#$E*m%)%>3{gbmAI4Ai3*cgP6^X{X@2_B9FzXl2F;UAr=ix39$sxa)Ffh{JvtURPI_ z`{}q^!|P$E4iPvE{r2ytX>EFp?s>j2@>Mx9YpUNlVU1Co^eTzpt)~$UPc&>1;>( z({}=-T2-Q%b>9H63Xj8=r`SMV5%KSfXu>9vLR*o-idYP#X|7MdBvZ)6*WL$g{>n}NT_U`M1 zyqfwEs(=#84X~G}aD)a926ft(uXa$lFHmVQrTQag>&?hEneUJYT6eN81Z51lcf}Dy zUcgL(I-ShBeU|hG$Mbc(AJYF}>m8u$+S+j8G;FNKwrv+Nn>4nQ##p>i^Zj@HaZb~ROtE$m)ZR_N zUzLU4JiDXbe7?!3iA+8?OL>(bioV;>xszrogvs0b5S!cdf11%odNzg|MU;DGs`6BsoS z!1kN%t;mqq`1Y#C=z-Te0MY;JY}l=$HS_7MG18kacK%wCWH9p5aUtazF@G5xmszhT zd+TvWZ2scw)Lvkw-;vJ|K?x^34|-SC_^)cXX}+v}RK{J8k5*N0c`EG34G}y-p42fRoHe(0{sa=g|$C~nSbQakjfzKka zGO;tS0yul{fB>oA!0gyj(Vc+L2JC44Ox9ArXp3ccF~1~JL8GGckZ{0ZT<3tqq2 zIAGa(@?qH-d@{_t6!`+Z@$Kn5N4i|Jv!B2u%%2%9!)YZs8~$_>pLlj%vT+dxEw3Qfj@8&n}Yj<>)H+bnb z(4UqI+$j;=69kX6Uh5*}KmtOqzl;YUlr4|G`|UH!Q={G9ju!B%zO9-cxrgDkM%hCl zRC-L*hP^Bq4srEto#7g;|44OqZlQ1|n5#Cu>Gsq)dnc!!@vm%=DLQ z`Vk>p{=ZJ#p|fqVAzRfNNS~S)pI$9HX1u-l{9e!?5sLU6*^8nna5!D*$K(Ed-`bc8 zby*RWH^EhJ{fNmJwt6}WVV$v=LK_H!*xq)}z2x1*o!3%DRp*4fG1Ae%cLEM@k zgo^9&SuN92>71L7)35xA2&76l5-bkSAWV%3Q5TmFiBfEw8OWy?-u&u>aO4)_a0)j@3S2Eb=}>{ zoZOENB9T!|M4wA@OM3vjfgS9T59&6Y%?V@kE1kOyogZVx?DI%+1^ib<}S$^MU2146$+0nS-F5ZHYF!rbyCf%dxXbZ9_hNTeMxx#5LFowC(H{ zsT_Z}NfQwbh_n6-D~5IdQhQ!&bczlu`+{AqYyi9F`}BS^a9tbbppuXxUj2|ssU|Yb zj%{gRlswGdasPFP%`Wt}y*zM=jtqo_5=LH4n%`wVT*J30stAQb?XildGRsuN3SAe7UMIhMh4^HkU_RAEqLth00k zoB1n-?udY)%Q7vTW0uJNblP@(e;$+~5!bH1*G!zjCW~kI=KLp(0B< zw#27SsI3sHR-b`KW+uI82+L9xXmNW(;CKeB#D`dL%8V!RqgZ_TP@Ux&c}G#|j^=qS zvNqBcuDDezM$E$87TKk)xiKg>6b!o?e_U?xgQt~py|$1fDhiv%0~JH&UP zpVrV$sVHB_dgBxo1Uj+$Q|18d{51%@5mCY7!yR=bjcwLFQXGC@_4MOgU42sz)yK4_ z>Gnop%0VQSa(WElWPSjGxs;_htmmKfPxSha4lTEu_rT6GVcdDWU^pA099C7A^aS}3 zA!iIRFRRB=rHicYZuf|rLMd^VtsQ(eZ9w=SjAUYtW}qyaL8UY33X3ph8yhzuK0B&w z$Zw-l4klNpP3hnJO)NFWuoT#upi&`}JBfD=kZA*)?UpEEia~H_GDuWQ$~@MEADx8$ zg`Z(YBWVn0LiGHy&=xA$b!FtAaq?3fY2v^Isk-}QjB(&Abi%EgHtChebqqnk`J7%R8{)7AV5` zG&{lbp|Ac{@2gSJJjC4WtM!lMWC`ygzwTenS~nqyp}W|)qB3*&m%h|#?oX5B6%Nci z?fl>_T$Az)ims8LyL=d$5`^psktZeuNqegFT}dcnl~8f8#Psz^qoXC}5zMrheeX#L zi6RE(XG&F2#Pp9%V!XF!ssx4ms<|5<+b+`{w*+TL^3?UXEwFPO4(DCwV63Z(Z{0dB zvyJm_%vY=@Bdwc=qoO=auBi$Jt>AU$KO;_i`36F<@nr42c3G-uf0QU1;gAF-?UC*w&1>{0Ba2OJ-fHP=$|F( zMlJMBjiMU(;PAMj#^V;8rqlU;fq1tOr}yB9`c{QTz62;x&s_nGgdMO-BCbxa}ph23# zK=fr#L`Xoc`LUSvdq5ju@Q;Fx>mt%1{9ZqoEz)WS3vg&_@ylFQAOHqsZY0|f;@hK1 zMyL!i5bUQSM>3ML&ZFtP!CAAb87X2Kk+U}+JjDrlO9C=LPu=%DzIPmleZV|EmFTM+ae3f6G%!^K*SA2 z`5pQmkfJKT4ZhQ?par+bL}XMc`}^Q14i)5_5ZOjDUfVOdAjq9VS6yITpRpE5ebynr zk@xg}11QZ|Q&1v7*PY6jaHYX!Pc)`4dnzlN)>*8(~#eY{pnOmm7<@XCe95*q9#=*M}%|&9PtA z%pMFZwHAB|>@jW@SYM7yT>NqM~(zfl3DZ_94+;sxv1Q z8aEuJ6jiPbHx~m+z9{oZcNI;2<{Zq2B>S+D1!wnbztL7KIMS#u2IPvv2~9)h(om61 zKRS*vc)&=q-%!xzFuF09)xk}L7|~v)py5s%GHG`B{^q)qti(sIL&_5TSe7T(>ROqo z_jtD^wmBY_MPQ>O+ZqV%Dqz$41*~Es!5VteFaV=}#lsD{x-)8UeJNujPkrV4F5go< zA}L2hL&inyw~tLuYp7xeYRxu7gsR*^o8s577=mn2pJXMhN$|zZjh97N=OjfXzh6w; zUsRhLSqz#~Xk@3zYKqfzFNQhil+!c`X2wMrkogXO&+bv&#GSh;>-fxzKGZEIeH z+a0tDpMlcfR1$W)#T^|TDYeW%?7p##4F1VNti`SPnBYn?hXXzR{^S%>!i<@y_%G@H zBNY|W?Y&e!E}-n-m$ZUQ>3-b+{y3sM@`4$=`Rg;-$;Y=1J;e94m#D*&lKPLrqvwvqt zqeCO>z)feBYv9CwVMOY&i4Fx7OBz0lWMN5`BTBDYul1DJ=QQv?Wbb}Z zbdBoY+8Br?5fl{EW>4i={jjy>Rxl+76u<u?cMKRcb-_g+gdv!NHAKJg}=xKRQy)6oq=T^vV z7wo0?TZQ^p7E+EmUy2FSst;5)pXweT&Ls77AQm$&>u$VXu^kkoxD^!?6g03f$ZNpO zaVIAS^vsQVpnjop;j-wQ!S;I!T1#nY|1fpliGWxpf>ukXmPXi&thi!i-@+4ap31x# zd$qXhW=KnBaMsffPeECZ>p}AxI}W=Vx_RLI<;$q$mDG*9usNU8=t}qH?UH4U)y7w# zi0J*pU~Jg=D;xQ;NuJJ@a76npHi&Qglg4{bG459O)|>^MINKZ6K|Rp$r3D4S$z#bI zk^eR>Q~7PZVJZ@Xs`TUBvC}xgx)o`MKTMmu1rrC~z*Cr4F}KQSq^V9F;H|GhmH8_&+|&?~AGWIMo2byXjnL&#IWn_%rsh-P#dHk$w@wzm zoF)5Cmf{YH>QwRJT$*oh>oZjub6xq+7ZD4@cBOFcV$c~a&eAf&vJ4We39KQ80<&6# zD#B?uDQ4G$^cIqjD3E*5jrg+0b9DHz{k%&NDu^R>(DXh=mLB#SZQFsg%*yk?Mu9W< zKSMe|K#Mm3{({OQGx!X1&?z&9S2d>B=)OvoesjHbiZ$yz%+)Jl5*S@NpAqv_T?LEn zgK5|kQh(S_#SU>@n7H`(?%+a#4VpvEVdf1Akj3g0VDa_O~)nYJ``kZyuzaT}$ zSW(FPJ}gwubn=>pg6XEYKu(ov8$eq7v&AVWMx{@`F_VzjFG=|>`S-7Qi0l0c!@~94 ziH|zsJ!QmRrdKy9`nRv{Xb-~8UlkSiXVK1FwuaSIkZd$;n}vkh!g0?647k|M+A@N( zPL?e4vTl6s2FyX#I6-yK>FzSJh}VoS24IZGEB!g0)vW7{seYE!b~~ECZb8=KLG&K- z2wRywpmpxCsQz#pPC+EFJA0vVGpD4h;J9wBW43He-}#BUN5{f8k~Lt_-^K|+NkY*MT1Y5R0JpgdRSFvw z7rtTv6o~%8Du7@DqoVLZY{9`THJ`Q)=LF*e9kqii^3_%rZNW*^H)=&Rxo@~vQ;S6? zmB1{vJ~)9;9b7FMXBK&53C*9Z&I6I9WUz}NOLKCY&0{HDBeR3ixvV4s)#6(zpfpst zdHM$EUC+B$bD#Lp8PP>-%@#2CfYpAtT4%x53G6&+l`HnpAHa7hR2%jAIvfjK1%nNV zH?gmZU-xik1;DG}-Is9YqJ=JFxg$n|XnZh7`EUg4cumgh7AEdJTLi5YDy|Yir~P)~x7uRBBXm`iLc<+a z#Sj)BG1*U9`aupIXY0G)2*~~7SHi)iz6r(BvMr0%Iqp&86Gm!0(7Re@b75S6wmvqj zCoJ>Nz-PkPs6vRDv5tTW*{|e;h!wp8b@t(K1mzZtLgyW@D z#{<{I*I&v9>Z5B~4YFa}%2?Q5Nq<40fg1EiNSoN=LnF<1uS9TxT{RDs|?^!X19oFX-h?Rkud(QU#$5sYDmhQNda~t zgJEiqEu!zTZPvzAd4 zFK%aDSAEr6>Mf(8QN677zlXGkFPt={IL+;e^K$128s!ehvi|-*A&8Vky7M^W1 zGq{5)p!KeA&g7G_?39gL0%@39n|B$)+RJHHUNNG|h#^a~Au4@jsyjRdCJ!YH$khG> zYugoquVqVBFG3)JJCK&g)6z_zhjH3WQ5O(cK+6RJ_vs3PXqmxOl|h%jKbyb|Uf)RO z(%zQWU#>sH>!Z8O_4ZDvd&LMYK64JW9Bpo@l7A|_niQiNVNx}cL)RO>?UPON9mNnG z()}v+Th3Bno!e~by#5c;pX_((0QJpM3-u3rOf{$7j`&eS4OL2e`iPhN)-FaZlYMDL zdS9V7V8@B6u3~^xlkVV)NR^Q-3`I1Nx@^UWm_+|l?RG(L#zl9QcadQ~g_O5yE$h}R zOeDYpLK@x5>CgODn^!q+5q5R`dd$kayA{sF&DmlsklRhFoq$w$`g5aOb4#Pxk z-o(u$YYDwnr5D)G@)me(ZoFO-Ku(Y2fzZv(B|VTxkAaBC)Ax($TTngl(19TksT9HmWK>eTY6Nf1vH);Qt&O4O(R1kDs_Aiuagbh{(KnYO2 z=sGHVXee~u6rn998^%qXO4eIpR*w`Nt5d~)cEbh7^Sw3~%jTnVV zO%Af-BUb?Br9Im=|1T^9IE4x4QiW}7pa&#LJ-_xqx7js*#jEgV(4hD5+ys9jCg$8r zvu)T2z`^8qbBa_4kj&pEDpLuP)ZK+?SjEWB>?1YCXcB?HQ(j2f#%26{Af4aLc-`4j zPTxwOv^xNv1W3AwW7!fN$^RHsYdUv1NRfGc=>OlH?BXFhJ^`H=?BPO2hKmSV&srGi zrjTab>4DyqBqw)O(|6!ZpKe$&g974tF>(JYwuUvye6F|Wp<2&AfDQJl2UVuhVujn| zu6b?aQ1B-BpIfH|PKY zqJ^tjFeCj;iw?{b034lo@j<#;j@*~Pr6*jE=b1b%Lba^U*E?6+Lp(|nHe19|Y*~W% zPW0kq6Dxz*K0o`Q#p(a%*LBte4V?wamHQqqVY6O+4^c{a5W&eE#LVEGos@MybR}B3 zR5&DcYHWEqd6fJEWpoIfhy9E#t$I;+a*sYQrNedh!X2(w>TIo_cfh>OW9@F6OuJqI z`BCxlRBQjmtF?JEkF|jD4Sro4LG7o4af6?1QL2A}@0#AOc-d>;1rN}o zHUF4kV`)`)>oe=Hrvl4~4u!;fFzRz4A^|?8SoC;(N3g?eM4F#K!e?J&c&FENmCX>hLBev`=ORLHgp-rj$gPWdqjUiOuksjG-B!fC+D}V(J$gr7VzGl|hXGJW^KjzD%wd?5N^%*|!+r>7ByoFa z$Tis^)N7ZEn^SF(V~bL_YtE&kH#)Ixqm}a!MiSy4Hi(stX4*OQO`^y5e^Q3>I*xix-o z?P&8!d5x|FWDuD(`Sb|_zZEl9r_Ar>qe^TZE4kZfz*Vz$ElY&rHs910*5u}PX&9j5f>m@r)x7#8ft0MnwlAJ__OE* zu~AWChnifmgKC{hK!{C zIr0&Ir(!}I0H>F_(}w^1D~v!OLpDeFJroj%*?qVG^4adEa6afqp2upwW3?RPbTZzhs_wbODc7~gcwt~_oc#xio!TCy?mZ^^}G=Uaml zhHgrsZ>E>PvRRlrT~{yTkAlU*Zp(}E=JC5jim8i>nTym^@V~o%7mA0UwY$VMt&~-$ z^?`^G;vMRiS3uL&&=MQ&zfcXCLKPKt`m~FAf{(Y_zvzNHvb_O(T9LLxR-Y8t<&D2w zCz`=KVcj$uCafm>NwGDKI~AFy>@={`Nk;czagTa^n#f^M!x07w%^EF0@V%^}nI(}8#Uaxw;th%IYU@xy>q7F8Gstoe;1K%wV zoKAw~bNAL9oUi;L&E)_HTNZ~O^@dcos3@YM%01X3e6=5Dph%ZQPqwk-%m*>=$X3;g z7`-tMjgzZ`$Z~Q+ii-m`ChSO{XOf?cZ&sh?1r1dXa-Nb7WwHR@X;~yUy~QTW3)rMs zxE^8DO}Ssau9JgL$fWE&(x|#$Gyk3T_9Giz@T``WG=Y}`nV$asD_?@=tllPq=XEGJ z0{%3kO!tH`wR#7MD5H3`+ud2DX5aTDS(vy&k#haux~O{Ed3a`YP{v6}Tj%IH({hcg z#-5^MH~gG?6RgbGVi{i7csPgXi1WQw|?xx=w@kBoB7Ho|xd_>i?0+;`z zY(Cf{-2FJDdPar&T8I623Zq}kXVy#7Zw?AFFPCk{KlFvMf_OeoWnyyKkebewpJeQh zK}O__NGZcO8NE{g)# ze4=mz z)kROg+TiimkKQ$v_Z0%{H7`%1%#9EZmSGpP%CcWeR7@VbSv+l??#k%A^}Ih*@GJf5 z0W!w>+%3Z@%YrfnCLh>}DTgr8NO?Ah5EFw5y|71k{BA$F(PPlRHy9PWSlr~LMzwuG zOMg9ctmg<#V~TRN8$1}nyhC$qfS0bT^ zB>Y3S#?i*1#o|u`4*$~Bt;?`e(w|#bB4T2960^Or^o&k{2gf&`hv*ZTqL{e2p8B>M zI)~Hcg^f;zrhQ^+YHA?+fw5zAS6>d@Si5d-2zx!B%`p7y9EqlLYd5CbvIPfFr_PBt zV+!YPyOoji&)6d;Vo%!R##4IzD@0wHrRxh?W>>Az6vSN^>YFXBi05m&c{#_+A$;HS z`6o}B!)v<%qqhGMK?qztij>j?v3-5Q0SI{Fz+r_bLP@+b`aj&nm^zxi*bkH_vEv33 zs%yXJhR4+rs3Z#XTy3g8xpCwlca~v&!fgA&pTWT#+CgRXCder@@} z<$NH-c%@^L>PvPuaTBF7`OqV3`TBIL!{}yii$f~N!f zTE`J|Zbd0Q&Vymj)k&tbYwXHR+U~tO6YIFVvb3hpU27p7d4(nD zrvn~}NSkxxR5Bytg1q4}Rsay}o^N!6xShGKZN#Viy76}7Ed7*>)n>msEhi#Nk zu@wqkg$}dz^{0}oR0IJ#zgu6ICt5Lvv1r{MTLoL4{)+EDhZC>^6JKBgKbMcsG%v?hKOZ8 zQ8LjK7cQoYxERo3Rkf-Q$*$tI%U;My2f*W(m6G|o=*sC8R@{&Wq1?E3bWDDB-+|pu z6s$gPbpGIbtQ2MWM5flp9wMqenFgBCU|>@rv_m;cY^%h5dz@>*X92J^LxMcsfh%`& zTFj19c8Z^tKVx{>q96RBiezHePJcUTi^y{9Rd;r%g}gzQIJOHYkyI2Ee1xEZ1?@X2 zq#Mg&wyI?!RJejOzgQiDl^eW1{e-&aIuT>$+hWs!klff4V??{A(Vvnhp|VAwX^v3K z8kvU%01eOm6Y-k}G=gw85AwcKChax&>r;VMx<1fQDSh(zY4WAY-IILupbW6vA=T_7 zLRIJJ4+i}bh!^wh7=bt_UrWVxJNWaqd{Z|E7J@tO8!@}(* zLre9s^|GI^z#2Iy7)(O(O79e0j>~hnIc)%u_SwvwFM_|V_z&pj-B?6oC%7(dTP8ZwCT)f* zlxoEqw{K1SwPKg~#u!3owbid)BPWUXkkhTz037XseRZ83L7}y;U~g?qW9`{XpuH*` zRcU41@=Qi|@9a$X;E{pz+CQ}9^o{P00=~fF1eKP0Ib>Lu>}0S26AZWb8Qziq4ujvG zEcWT?3G+@BJ@SHZxWJsu^a7#HS`*%~{Z3{R{W(Kxh11*jjCRYLVwh_{yRBxOWBG0r zQB8BWUFtZQLu3r5AP)0A^i{3iVka+A)5JElrKRNu!u#8jql#{C%IH+}7Z6?lo8EHzubUw5H*f0E^wqBFR06tO+8&15%DU_f zejBBl30`pImASy{fEtfg{2kr;LuZhM{*+duThcPo z1LC{DBlc^h3BKopGj-}(bL8(1)MH->&lk|U6OWAFd+b$PeXve17ktalPctKRrDRWI ziOyU3=5*ykxqJo7;60Rggs_+;ZxTi9k$?eYV_R0N?aK_xD<{}pQL%}F)Wl&ED65tPb7PzH zkzVSVkW9!ZC6UuW<$MgaPqV%*i}<;JLYmqPtX}g#GFe0XuHtSF`Bms)Gu7+D$Fu6t z;8s@LN@kBCBYAwA^?PmH#1VF8yPRZLw}GMP3Faj@BdgUKJx8 zS2O+1PL7Xu83@=-=bQ5q&`<#ZE~U5}$w?C(7~e2=?Y3+<@7MRAT5bq_(n76c%axlt z)7diMA#Z*r4)`G+W@iYai5y+?)fpc;bk^xDCUIhTW%r9os90umM)C(eu%PRJ%NB6- zGH7KaYZjTd*wNZm%cJ_XA@=h1zTtq%7tfOWr?zO)eD%SHen(k_2Y#MgynX|G$!m_- zWPW>N0`*Q6`djjB&6Z*S`!qiagxOr8pzE~k2$KolJu?`ws=uQD<|^u0XYoXOB7)Y2 zzlht{!&-B#8t}5e+)7k#e0q9be@;|+ae%qgfR&$JXarK1Px(QC3rq%4NV?t82&ineIl8x}j z>JEV{Ru0+Fb;&c4jg1#&Z@Vduo>GTrUi-m4=Eb@{zM)J(rEdy(y7T^^O|)L{++pD% z?9_#ANN7yVILWCTIQX+(LQHI4oYye$#H!qyF|-Kh;_Bmr?l30{KXTlSq_1uAO7kQ} z?fIgSf#Y5xK;>h~!{aEzOhlCu2|T_GR6}guReLQqB(4Kh3o-o8U{Cq;#FH5}{u}YJ zv(Qk^R3WX-a|=9r61$n+100yOmi(p2#R@@bFEP|dZWt^pw=!17pJS1Y*A)ybWUYRs zvW6btD`OB*^t`v8Pdrbz$InhkHk+WFCb7r%!vdY(+IU1?d?AJh^zl91u$whK{h&hM zI-%!8cUSMEN-Ss!*(tg3edvirt;K;ii`BOAP<>X`A zcZ=%qIG$d^y$-fNVF3Kw>d}`^?D*!^uV^%izZ*}Y)lve9@h^ss()j~{Dt|>q(2@P! zfL&0A?mP0q4*p3Nu%(^oa>u>C-X+%Encc=VPC(`vk|AMX(g` zr#DKJxWg6>DOlHDSAtbsU8SCow%%gC9hQmmzk2SpypCTr5Iqn>g1J4TGguIOorI@D zB`iNlz5gNgNvVL;?!eI)=rK@N5a1^|%-9`G2!IO4QwO;~sURl3KD!MwVw-$UyL}`e z_jQtFzVw^)A2b{ei{r`L8pF{;E1bxF-{GBX;NtW1Rot6wA2&6!;M*F{UF_)Z|1T(N zei+&zC^!aQ8-G+pj;3bATqj?s*)++6^_9!nHc>8J^|OKknu0f2*gFHN}RN{ zxzQMZY+#9EB_V$CoRS<)>KCyu)WRyRXpMtArRu6u0KwJw5cers^L*oQt>z@)(`)Zq zzI#;U5h4>k`KoBh?@s&mvzD6;kFi#5leyPQ%6ISp8wVJQpo;)PV5S2bo$S6(N!hm* zx3H}LLr*_=oP?vUirMeltAcuAR0&%1vrUQFk@sRx*JB21g3{ftX7si;MLnKdXny>RvQUhU{8OofNf>lVRZtMJ6woY{T$hxY zbuSQwjTtC7IIw9d^DQ{;14zS8oK(zP!75SkV5^$LCl-OVutw#!#UHmvR%z@`R*O~T z&cj)nwz9g^rPUZALVrhRRpq{iAK>xwSl1871>`42lwsa^TyXma@SDiU2L-J6#X+JU zcW4sjqerdjtxL}RF^GFaP%Ah#xD5d>KuYv>@moJ#j(BQ)(z z22op1R?8Fc@Ih9sW!zBxbJ4Fa!nkZ^pSE)x7iFcyuYK8j^#E3>du1t&XlD!3Tt`raopM?y-UND&%PD!w*%UMS6+g-UjSQ+tNnwC~xhF_i@P+(;<^lW?6H}_wCS>f@A8?MInj-B_eYOew}czyZIl&4eJS#e!L)?Vsp90Z=uGB#r4+gRHZhj6<&qemAxj>>@=9NX>FGb zPhCb}hpW%qHyjSjl|KjS+g6nxE1tj*^b})&nzW768WA?PD1l!pZ<-ls=t9`w_HOQy z-=JCFS5yi<@-Ci`Uk4v4B)d5stvZ~$vN8E4CA*_D@SvoF|LIsXONQ?xElyopbyjbl z{(>1e13PK7dA(l!Qq@vu5<%kEM_$w6ozP#Tg4sLQ$J#T^K>p?Cgm)faa&fzkW96Bi z_jf`qY=v%rG1+x!T6cs3?E!|jU1t8be(il@;`YV5&RtfP=awqG zx^6fiXLZ|s*rOgJCv`|+Atj`3*yDJcS0@R#MXz-elL#EN^|}@BScX)XaoE2-^*HQ_ z-f^?LhETOfNopJKsZwzpeFMyrR|!kWO3^a28D1x)SIQQdB0?VMu0D~-g}P|XlQqd0 zzvrurcz*P$$(#{?U1$t8=b22xjY3_hI>bNKv>??fRT*~L4KZK78n)+D?jOSn=46-e zy0o8OONKb5QBGn{9+fb>I*m6~ahgF;q+94iAk_HBiy*#)xbE@KAxe-K1sA`hv2aphWdO6w!){^?j4B?^10 zr?shr>7D8v!G?^!TElW*sQZ`T70k^H!H(|a2pH|#a>*oLOEhBN>emM+6_QT$okS6p zgi)4D@gFtZV!|ioDLUbk8P%W6XvE0K7(I4X)S1>a+nte`YE>W|PHH<)V3(2JN)9w+ z0*23fb)}wQFiLE?po+fAjKFTL2gNgw!xy^W%A?)Sewb6CeYwq=ae+@_y4P%WtGPC| z?;1`zSaP$xt3mKmezrV1YwqJZS8i}pePHHd&tioJ+Zs=YD7DyAho@9!rGj2lo#0%e zoRR;^uJ@v9nb2F+l0gGpu7Ym1=n$Zo;3vd*oVL-BnqmcN;rO%_`o}J)JKUmD&?T1m z6^w~?67*CUfxyJ%4RaS6js;K8bKQ%0jDhQ10kd0JC~ecBjF_>xswFLW^lkv zFAVYrd+eCjfZs>kyY#NAcny}xk0YLdMHFyYxFU?y89ob^6(*0p9Z{WKg_U7gfaAIC zx~54w)^O~#n_n`N-k>f|lOH$Ysq1XO`Q?Gb!(S3;9eWWe#$1hKPXC`Tz>-?8jyn8Q zMH1Yx_Su;I^JKk;245xwp7X5vPhq&&ekN!yywawAOxT^oBUO=0l^4=-V4*Ra&W5W) zNaAx89o6SW!oeWs94K>=WG}lpuY+%N2OxWFf@n46U?O{j`bIoYu~{l*i%SUc}5tn*T-CUAQ6Gf6EMgeSEWZ{ z%vnhg5SF)+5858|rH}mP%ns~%_%3vcc zgAV;7qn1W^Y+WD}Hp%sZs{xy6@)^RD;el$+^%@Tw(mgQn?H*^6fj{yKx)u9#YW zV4tVOx)mbCd*-!w&MFCucXJ8uG~yeV_~6j8P!nG&DX!TH$krZ21w$^R*C+I)Zxm9} z8XXOIn0oG#8E|*f?Saik40j9?u#2XboDEN>3)2F>6a1AV1Es8b^^=}e_>K-M^ocs+ zW0TzP%vwY?ekF(yo~#<5CiA6gVN+bxx8Iw)q%8D#5%K=Mr6xa{A0BHqV!;8SQQ>$5 z({cEFtRS6@-Im`)GTA`F;B+O z!sGHD>K|KK7I!+w`NE@Tk4Uk8E#PlAL`@mFU;s=r1XDt zZU#A8%QSplY2V6$#I)N;e?E1*LshHs@pRLpx2~1AAC!SvaF|!FFFn_!cc9%oBuJR} zcAWy&^7$P4i;ztGo***b$;k~fj*dEoiVgWb?!o$OdVX@=~l6;D8v)cbdL`*`$ zlq{M4nw~|&Zm~R{cVaY}GPA*s9|;BcDghpW8yhR^oTBZHKu(V~gkMt*rA>iK{e0i7 z%5w|g2v%#rLNc%s%lo!)O|5(kkiJ2R=$>vzChZM_;p%hxrXXDGh`pl;Qa!L1mn4ep_Za=l_9k@Tv zyhtB^4ITEl=kbim*~nRAV))4*Q{fsnyrv>L*=j&H`(iaq`1<@hK7g+!Y|;FUF!UcN zB)SIEjmzb?k$&I;y=pt(mFg5INr&0i=CDlGTRG^k|L(UHw zZDT}^0m2$*eO7wLc(jV7Km}(D_10%OZw0IRUw9^Zw{J%?Iy|h^<1$Rb zd(nFIP@ja2UrD!nD1d&x8EW-(BIIWCg`A-+X|!G#f9uds;Of-Fi}TfBQ$Sf|`p3pU zV-xk95$K;l`dM^UGx@x>cK%GA$i+l(HSfr*;*O~}?o%*_cD_jieVk!Mr?;vyfMzMZ zSMR9NiG~`!Vv<0&y-*(3Lj8AJ0=k3*_lh`J=J~ypK(1XyJOSOCSjRnasFTr%Bj(i@ z;GC+~w^0oxs@4$kg1hzhdKCD4z98d5?eNdTK#rc8dBF^LK@AkyWP}9`$)Hyw) zBf^Lu4bqm+?#R`4$2}H2y#meNJS~|FoPz?2E90X|6j4!DYyut!r~uv1M|6Ib(Sb+i zT{AROb2Fo~pz4{Xp|I2PI2qb|B1e!}e14;kweI%12VZuc zcMCjsu81q_KO>a+g3YTqJ|A;mF2vN7 zN?L}Hs5MD7tB!M}8Q0U_za6FbY3}iQQ+4QSxB54>a!rumwXXOjXt4rl9c&2Y{xZnw z)l!&t|aUx;tkkS~5|b+okjuJ?@0xrS%k5vgVS z12e|+xwK(8EL1iohlOCrErs*hO}v}OReSWYmRs6kQ)^gA#*lFzitB~GaFTc7M_NB* zLr~0-AY|mvsDbUg-aOPH8z6dmjZT*z!$#?l(DSu;0nweiHgN{H-u)uolZy(8&iW`y zJB?mYV+^RCit@4wQQ|j~BCTS6LZ!i49e)k&;sZe^_n$6c0Y8p-3GFZ9Hm5M?Jzzx; z^6~mn{6-%xN;@?X0Ny@Do>>i-_qs70T!I=xK|#Ju`SWv%5FHBE%&cT_F^p($>a*CG zfxopbjB1Z1ZVst$!XA}qp3A|q;t9*U>U$EIw^J+TSsCjhf+{jcXV~Y6az7R(=~46W z`Rb6wvbxxg_2-;tjq^fhWRU=CMACid=&(A}{gWC&_1iLR68CKL@m9UlMXwU&8#sBd zN4i&;HQqgsrF%oBEkn|f@;kbH#2^EvbulVUO-Ml@Uf@fN5<>G)vA0RWm=vMT1a?+R z(@Jwu31sPn9WlYCQTS=kY*p|`7)K1o&MjM%39LA~A9sB{9tD2@G)UD%8MgkW9ythV zQ1IFMbDJJ`rqNfpUk*}rd0%hjcF9?lhDAMf`}Dmh<^)Ex){1mT`ADc9GHdUJQMsy% zd^pUDMl$AGL|$%JIQ2>;nOrg4YSTvzEM*0*Z45Pd;(xWl7ibQj)US=vtziuctSt<^ z;oX_HC0ExUV!1rfmZx)nLXP&P2mBBLHyy0+fa7|gfTK8|7TXanBpiD35s~AcD~8Eq zX*CY6g8Sz16Cxu?Tpz&AZ3rmRVkH+<8b-?&F;g@^=A_#y%~j!K)!{>>OZKd1@$0jb z?DIAs6_RHpL4Qdl+rz%gBSb5n`%yF^Dq#B|k+je1e1K@3ltQCp{fpoSD?ce58qp?0 z?pJ#3IR}SRtf4uE>u?yGsJjya8=Ik=VK#ndTNK9 z*Sjy&AYo3fSCgL*V4)9*=AGP8^g(xktdPJ%z>vEr;n6sMiS3f z8k{MnTe2){wr{&vuI;S{WUrgO-(nC8xE1HrMKwZcx1*BS%kK^exz+o|mJrr_>`ce zS3;wbUpHrd4eXxSZ6c{(UiakNjGyCimjqnNfBZlNfDphDW+=K5PjVm-@Jj-|ONKR# zQwD|qKlAwfx4#7ZCsWIjD3VRbsJqwd%y|_e?;T8l^^jW z#=l1H0`YB`-v7_Y-CDMEa_dP&L_BHhHi#TMxc%nY+lKSn+wO6EWcjF70w|fe1XoJh z_tgA?E~Ccu?XP`p2ww%aOSfDS;iwjHX6_is>I2J1GG?{7?qu11una#_P7|`qB6QsG9=_05Se0Uwcj*Xt;9M;ZSxZKf4As%6GJMPg7zBB-M|-e@tr#8(PyqzW6I7H{wuMgHP`#E)+*sYZIzf=+x}-*w58h?&hrj~=fNa&dHbsi;5*=H_mkj1$guh+uV(;2 z*9*;#4E4)45(RZY2!ax)%k@4L1dzPuZ=0NIio*m*I7<4&(8tF|X>(5iO9vnlc!+!d z>slFf%^Lpipn)DJ7NC+OYB*q#k&&f&zCN^Ejq$Wx4$pCfxp{f-35qmnCwATMu zcu(&{y3QkFX5^@0cY+r3@A-gHLz4FFog<4KN-~p3!rzpd82$H5h)!|6%Q| zqvC9uw?PsD1cC*3g1fuBdvFi#7F;K|yL)hVcXtc!?rwuKu#@+Fe$V&qp51eH&)Gj` z&P?Ckbys&)*Hu*)O))K`BoWg{6KzyzCT?dfI9|CrOy!?2;Bw}|4h^{wHS9;w||T-f;~WxVRWXbGgN7tjHC_lY9lTUjsqM^CTRU5rgk0&P>T8eEsG zm;7kHXq8*p&R(f%KqTycQc?b7Ls&XYOf_9BztlNo{%CK#E{G7bGa-#N537llN!zKG z(0vQj^iu!YDW)w|M9o(ok^NCoJnFsu!{Vk_&Y<@f+YyUX&vb-zI&dKr@@3#9DP7~a z@t1gpSTv4UbHH~qxZMih#ajH`dz?g~<wj&Gt3l2A`?Q=-^hZx5_T-msl^ zpKNE_Cm%Lg0Xo9<*N+!cYDo`Wd~*x)QtMe*nhlodGRgEN`=g0(i(ry`p-OXrp({^xIws`EJEzel>a2lUV0ND|pncy^uurV=6%e+(zzi zM;+{OR=y7-52?V?RACQ_&D*TG^U&D9FPO~W6UyhYkMLQ)sG#60{(AU?(SP>`q~cnH z#UNy%T}Je|r@h;%s8+?7y^5d1z$E@hYCbKSgYzcJG1&5iD^>bW%qtef%iU@cd~GY` zYGAO}VPfd47mKiS^i$qaUXbn`{<(q4#!n;bue;Cw1T#F|JHJo9oU)qMCt|~PK6Ki2 z&@op;pX1W>OG+9yW#=4|+NH~`!52DnzaY0qCt8SaRb19Fz&4g`0PG?hWWCP0#L>eh z($5TDvJUbUakE1=7Aitx$z+o1TWrBQYHrc>QR?q~{ul#n$iQYUM3N)a)UXW3&aRfo zmbmDF!rYD~pbCz(IgON5AKmxTiYq6mf^o&da;afd5-~r38nZ_mv|ZME)lggS>62GM zUWa^u>0YMOO8Q%v_=>1w>WNxxCq*C4O~GH=%um~jd&_DpmANyxl(}81x>j1c$@cdk z2S!+QmDb?KQ`ql~1+b*=JD<6kP%yw(k~q=HA4NB}r!OswQ=P-9rz$={ca97{U2xq5 zHaoi(l9i6LL)nT^ddAFkKS)?e-9Ce{bEtAFu0O>LJX1ow51f)OyQrG#r66~#r7%8I zi2uy%uY2@OzALgX?GMFV1V&fNfSr7BeOu3|SKY-UwWP4c^moxVBk#w}x+kPYY1XGW zS+E-Ul`?ZX>}o$A(F>7<{4Xm=Kz~^(7c~8 z$;UI`RAg4bg$pJ<+IDFJCn9!(lLD{Zp1DcC9)F4-2^cZv-X{$nG49>}x&5;RoKeMx zRuJMuu{qUxdHAk!&z3#`HbOftZFhE^!}rI67RD_+)esE#@Ij#APB5FFu|r z8D)*s%<)5o`O!mF3y±QkEbf$TBMgh4)M923`}9$y$`S?qQ>3)}vp`xg3&%*_&x z#R73Qgp7(ReSpej?{T4kc97twOX@W)v z67FslDOsGbref{nX#2ic47g~t`;gtl;YdM7A1i_Xy|6;EHfPG)T{{Qqf ztv9})-HjVBxaQ^E>hEc@3HFI!^>z1OT=m}%!ZUQ`58uE1gysPUlPSQMBX4^ZNo?Jp zUosKkYYv$N*wjoy_#*Lx-%xzXZD8epBC=4wR?jbDA4T&Ypvc8!$!8&?qgWO7pFTd3 z#nO7&5~#i3z}?t%8ILWBe}$DzQ|?A>lD%js23JTMUq}ySWzJO$RSY*NrJ7S*RlmGF z%N*FIO@{g5Vy#w~p<)Y$#&+iq|H%<~;l}$r+x$FClYh{w?up- zk?_}J8-4G)#P@d?NFuJ<-GX2@>-6wG1X!Yl$sgOL)~y_D)9(=-Ilt~WfX-+?8*vmv zzi#SBffuwlzU{=#ls=)mBJq9^p0Tb&zxb;ZE7faN`Srf`do97K`IvwC#2Z0+;d|_B zIQvz6+e6&j=s<%03-p>xNc8A~{Z3f+O}a#-S#OW4#(j5u0-?(etNui<$wRCtl){@6 z)g^0M>NBWlSb=NuBx4}qf)jDqj_h6CG1a5qkK$6VcePSUmcSXWbA#D0%nR4f9yhpD zZ+G_A?y%C%r#pLdX)?6z;;`v~qUQF&wZ;jAiTB()p!)Eh^b#MW+;k6%fo?lsQWJN- zryTJCQS~i|C;R0~c5B=S2;?2%Nf$ok7PCLw7}wwiv&mT%)U^3R;qb+0s>(K_yT>)@ zx;uU!&zNyj^9uLkkr+QOjhv9IlAvkhRPd*vG~F$1yzwgR(#q%G9g?Y!*yk~=|^ z*@a29&uw{Jk1JED54~!Jlisltn;tQ$4?0qu)vk9PFZDL zuRc^(oje&xS??b%39Rv_|G#Gwj!zH1p$meJtRDMH-Cy?)ORRk^`DZ>VR3p)Y?!K%w zy|~Y0t@cOZGHl%qJ=ot~s##v#tER2_E>u5` zn<5Jcb78hNbXf}+BRHt!h+_UXy{{O&w1jK5?w%L}2OVZ-)&L0>hnqvZHP^Uk4)kj4 zJNl>=#H++7)6Qo%%uD&~$=N(@g5Ce7_eH@ujO>!5vfw-#e(uY#)j@dLxP4 zhtLrjb*8H_xhSx#NNBWZ)%(x!5?j|l60L8ze{p&1&%{vod`_}aknQk;!~O=+@||F) z|EP-PDYxVGa!9;os3&vY%V8P}PzAafrJI+APU)JUlyuzece|{vQ)(k6py&>}YE8*DEB*87ZmMBR1mK;4WKy-v z$B*tvOLWC?6rF^m>XCmLX`F)Uq-wlnTZzAA%Ro=x9iM_4&YkxisuBNUlJUQH!+bV< z8U)$2TO)eV>6ok(1CdoiDj{0=o`1i_7AN2(o9F4)^ChJD;zL$_5DWLN!A935;`jF- zJlt)WTS)+sNobtzu|4 z#=a>g8|tVEhQY0HLD_ViWSl732z4P%e44t7BIvf;>yd!@+^ zV1kbNx2sAx4L$wfzyOq|r)N5}7At>jVS76s2S*b|aSn2BL8btJfP$jP6!(|&%l)~W z7C$Fv^R!8Xzi@JLa-K@#UNL5B|I_|fy7#R>i}+_N@VyqyX$~ee@ZI?%Aveoo_cjQ8 z4r3Odv|Sro?v|mIm*4G2>dg0U3A+**iO`A}?6E~+xz1s?Ztwja^0&#$-+o0zqB0iW ze~?;h;>54u@1JZASMZb9S?dJ=cm3b-KCPI`)g5~ znZZ)4YNNl04}r7bPRjqxK?^&bMZ8r^Aav-0^S9sA;{W6Vyv1ht@)LiYL>j0$&Kt6D zJfQ@vEkHiV=rhr=rqNYJ8GeBPci?48JF+E2am>{``A;Lb|4hzdz8&6D4F zanPN25B^W&5mX;1*P+lW;g@};cbHVipIBdV+dgc){^4c6c#iR8#a(i%NwwTWVK&QE zq&#`M)$i#!)nfpt)k~5wrtGO^U9o+=9UtX!|pSnX{(6uq& zanUq)*GP8spafW^H<(%(AU({qGQ_4B)@e_%i&AA30aYrF5G>Hk7jElXG;ff3F4S^z zMHe;(ft#M;W>5IWZUXe=11@*1Z3N=FpdcP+#j9(VJIo2H>_8RU1GH5wWL?!h z8@y_ltx-e)`f+ZSTas$nkZMD9nyi=3IBV$P9`A8LG)Rfc+`50*t$*U{|8I=-tbhmPH7xQ{^L1?~1?G7Nir%08Pq`nUuc8EN#{%o=+6W~#1N ztZNeW?u(D|vgQp9!bO-^$JE)gUwd64$`OY%1zA_8EJ?-RMUaCRk+1E>dD1b(WWV>Z zlL3ZPXsx}%$@><@#j7K<%JsE7UAKvuL0%w5^6B9V7S|QmeQ6);<$`R39Tatxw+Jw1 zl9L9FGJ}VO^cfe3ofbq-KD(>Q^G2Wo2Q}#$Sl8Ii>H?xC7-dhGZ5M2vP`1R zE_L)01{#tN5}G4wwR3Pae*^^j9bcDWEiYpS3J2QhL{XswbvEDzH}iyZ6o0px@s7Lz zHThFn&?%u64ijTD9q#peg!&kSsRKU-3J>t@E`Bd-9S}e^TT)N7!{b`;p)BPb7G!e#lKx)W?QTkr4pFptlP}y8Z>0cvwOT5Orck-h+7$zw6ZBq3n{*;DT!ZPW z@o*uZekg`t_oL>#mtz&-=1ETiRbE7aw|#SBivI53-=Wx?B;|C8D^P4KozFhe_by^6 zK8)sEjxxJF(?o!og^mh6qT11e?$D?&u(QWIf66XCq*7VPwvB1(n_7N=Dic3B{e82a znJo>!zo0B$aheLZ*$fXycVc)({US4?41abOA)M3Qa*Mq4b23%eKXP$xJk7%dC%xeM zQn*Z<{S~zBv~bG1qWi8ZmeU%1UD!Cgs4p;;Iw`_`kUXAB`B4C(@8RP+I?O~XR<`MR zJX{7vp@DU(x6E_iQCEPs>D^>TiJ*Qz=>@Y>;%J7&hHg{VeL3Zi^T)JHl<115b2tTZ zutHUYf_Jz7tuj?RN0@r=`(&`y!tK4i*=ScZ`C})M=w#N=*)Y)>Cf>xu{v zosKpLCx34%*mIqm-9wV`G*x#g5YG54NkEaEO^o;3H6!VoM^ByNa%q%`sNW;(K1>)) z4sKeWG|0(xH`amwEIpv$@Cd4i;PRB2wuru&Y7^LsJ*vQXp#ksl1tsAHJORH&_^s?T zlu_v$sb(vLp1z5y)6=I7`m_udGBi@YevT>ri5u?)nHP&D3Ojr{v!VWt42>6#HwF{N z)5)Vhi6FrQaz8VHN=+u`BEJ@Q390N-GO~67 zbf89(g48nXTM7SYqsM)9$JD7cuSS@>`XI;d1C!aLxDU%;71ars@L9RhJ=$!k*LRA^ z6$ynOt82c;X?BY+b$G*e;->4OJMKBDp&9-Fy5n?1$dUo<=!_`6xw{gX1$9Q-u7>}3 z)T=f!w5yA2MP`1ot0qr8L;2-xtsAQ_e8%{kO2-ED#(yT}-&S8ov_zj4^n7bHg_|;c zOO@+7{c}9}#Jv;cp`{G&SsvMcKXjJ_kercM|0r^?XMgYRg-OOl@N1K+-IJpY2^Sg# zR)0cx^VXQKGd@O8-G$s+(j9VO;X)fZxjGK@|V~74yj>j@XD`Q zgi|qIHTf5^1=i>NC4iVxr6-z=g_=0;^r9M^3Z=RZ9kbCx z-ajsfgu;8xat8OoM6!^6{s}r?KEE&k@;AhUC^>l5yzEW9;DfuA+A^^VRAPQ}_V`=^ z0TS36nI6c81o|XKp7tF(KYz*k9J;;L6ik`65_IOOZ~W9Yp|rm+nAk{<5s!CX!_j{B zr_uCRVwg1DmPS*EkHI*iyYGG~6!6W2OV81DyDVU~(pFumir9yPA7Pj-iEyfY5)wm3 z!)0XoE{d>6zhgWrGkfd2)ju_?+e4Fs1d zrW1Fm3;8#s4c$qLx@6-rasRRw)=w9W+|E8WEp9_Z`ob zJWihV2fe=~f7Ml}?tQ0M<4`$3&2~5mH*1dKD+a&kdge-JhUcY49UznLAT@Q#VX0lB z_E~g>`}&Tw_aCj%b9|@D!(QWx2!EP`Wwol=64|>nMFj{f_qF%xt&aRwMGks&D(4GTjYyg*%=PgTyU)^z)2w>@ov?%U*<2PLlfT z7rPELEVv5N7&L14ID*8X?Sl$m8)3sjq{Ce52LpyB&p zTsS#Y?(7{PkZO-l$vycI$|rp4b;UXOz7?X~?;RlPOk%Ne>g8RYaPu8OpH{QiPJ{%uxvzTI zm#qBxnRFk$U=Q$&k{#q({czl>j%&_0&gv(xSrA60reEICR^M zlH`?>QxD{Q2Lb8$8`Sy<54jv#ATKWPs~IK^X>P-fGp#D!>sa4(iybik0HBWj9OtFj z?TVkEe{TNyoDo-eJ%jna>t#We#xS!4^`{2co3ik#y&(gEjK7Z}Pdds>Pnur2FWBIG zA=t$n|fH}{MePjcMB^uR9!mSdIG zlbof{UzPDi4sICBus^Q{Mec_(EY{H5Qxgr&L*_~ns88(VfT?d@2#Q`dR)O62>7z-& z~#dpK$?zhsou`X|MwU z;&y&v8_h1E5n0Aq26K`tQ{7ZPLFd9f#pqi3EulLT;;Yy`((wnO3T`Tz3V6h&2+@D4 ze6ElWmEKe=tc!B?G-F!X^x&7+{IksK!5kz+@2i2Kr0@B5zbx7J?fM)WbRO@8K{y=% z5%X6)q_>ZcOWHOPtMjMLPcmJJtOJgn+vXMJe;P5y=lsx=)PnCR*0!DQ)qij+9IonWr1(NXEYu@6V9)Zh0#=x=Lm7Rakkmn7=m zL}{DgR#*-{fA&sJP8N23k!t{tN=`?Jhqrdb%$*qpW|#;6QHk0v6H#L(vCyZYjwUjy zbS$}9Ll1V8y}40I(W4PF1!W|M^=@(aL)}m3; zt(TKmyAsuizh-{uw4Z$oCcMHQ~SY3izZc`XXx|CwF$wuJ^u4^mf)HZ6IT zfnPRZQv6*IN@k{o)@5up6MuYsa(CJ z-X?IM@GGty7yt3|@8ENBnO9L+H88V_hSZ{Va*0Gzspt?)&7{d(NwJaG79P64Ptb4n znr~Z*A?HgJXBD#}zxcy+?V&F6H-I!z`OuGlw3o{eU=D2pKAB{sn4NtXo4yoD9Kt%W zt=p7_YNX1Ef?vS61eBUYH8YRjcrz>l5=KT#R$lD1sD|u9#$#ezYe|(YMLE|iz5pSP z7(-pkaL(Nni+2J4=e(@y2(pLw@mssXJfh4#-%j(!{q9kxD1{7&`3Dw96$Y1f!rn9m8vuS=;PzlK42xPf7=u9!DKlSekJsoXsSvg+q1?$ za+A+`m{@bLZ_~zDqDqN26;<{sgEgrgudf!iM^+mZJM;JRtC<`N0K+#0B7odH+#yW+Y+yp6LO zH;%X5^7!!YO^utNe$J{Mj~Tf6FeGt$ScIKRo0d3)oscwG3wyOb#UXAg_;$cU;wfCsm>zEmRUV5daEyr>SS-hSV`xMA$G`HT^IWOV9_cvGyVL!8mfJGxO`a8Xzi5k^ zM#zQ3S-P+_eG-yrY-VJgo+?5S?JvO~YZMoNRm%zV?CX1Y_=u?F#+k_xc{>~JIFq}#HJt}^ zKHBfegupWd-9FbSZpcc74zRieSX|R zTTI=)>|5H~_cknWmcZ#`;{ASR?#fOY}}Vi}705SPS`8lD0j966nW z&m$GAg-zsG&hJH;naMHST#ewMM*T-mWoEJu-PJ)tzxcMT+%SvEhDUa6c*cu4VHuD&k zo~>8Hu)4eXbv!G=$xjiP`XB(m*#qkMy*RR)Pe|A=`%B0bg_-Y@2-SFr?#Dd6v&mZ` zqV|%_kdl}15m!RwTtdbGE{iuHx61JLF;M^n_zaL#7W>S_A6%d6xP)z(Vuxe2H@NHO zsmMSFPtU+u40(d=}m_e)u6 z_FsFYCI7$KT-LXEC1+>0#KgpeWo z_q2gUf6Y1^StWi3C44!G!P-fm{*}vT zhq1Ws|AhwGYW};?!SNqDnUDXoU%(Mt6RCfnAAtP-@?mtMIf^>q={v~O?6dqYm&5!6 zT%a&`?0QBpY2ew}8P4k&SN)H_JcfT4u#;pAAI8ba`Fq~7q_|kHXf|i|xYBh#pqXlU zd3hVmCiuO?n)Msizw7%u+D9;?mXVR6NSz2?KrS{FTA0={aU9eCEP65ZT6_ZQ+gD*$ z0qxf6|FsaUkO&rH(NhxtD!Bg<{xIX7{bn4fXHk|Oxozhor(M5SXcXGDfLs3)eDdk6al@gIAoTdQ zzJDaZAIV=5ZL}DzbY;_)Ux3DVSMkGWcKQ}-)0S>T0%fh);hUEXaZXjse!ge#XnhbA zGY~W&ppaJ5oC%<1Off}@O)|NxgmLzukoK6|NrP<$VQccN+G?T}=^AM{AUV-Fqo1WY_yg`hfy1h8qfo> zRf@njUSBGX-6mV2N?bNj2g_34hq*ws?Z}4`Z{x3mf(BnNK)pch4;a}!;6dYVA$UJ$ zq06L{wA1e7HEy%h;Ki|Yzn~o-2R?Tp8CcSoSV%_dihAU1+evB=T`P_3X{J`azaT5# zx(<<~Xx121P}|p0@P~=Ho4%m5Ar1R?e=0;)Q29wv$gXUbdav5WU~5b(O%d&s8`djz z)HGH73ejtq|I42|amn~|G=l$}2J@QXaT7xlF^B8S?8L*6^?QYE+2!M6h6n*X7DV&> zO7rn^Y%&aFui18^&DZ0=y9ReGOWMY1q#sDvO5wvS1ZBN$hT(p|#XR^c{zO}~!l#Bm z)r6+btn`kvGg*dxGY!1_#>}89SKYMqTEbXD8tRQZuS z?n;|}ig3O{-I6ny2tefUYFib?`NR^|oKxfKEHlJKpHS_+nCzxh2p|I+c#(6LkDa(@ z-v<|kL#(DAHLSG>V(EOp;sy)^#pB?Lp$#&`YZ~u)vd|DMTn#Y$moHI`Q-_%;yi)~~ z5Yg}x6k>Ir4PFSLLW|i#+SAPZGDQ-z1u2!y_mc-0yb7lW!o zn}kRTt{_oK&C5|Ta+!V-?@g+hurT-qVjBmR^wiQKQQl;U372mxXC{8wh9$+ygV4lA zgF4x?`o1eQU-jd$ZFUr`@bnZXLE8F;fYrcO(G9Li6E>iPEr0N|?qY86Lgoab5X*&? zhChifO`~v}n%F0rDWpC6Dj)!t_}fov@2^V7DSims8#TtpEka7)lzYEf=@T7``I3^# zGC8YW|InVOVVC`4zq&Yljnqv?qMw~uya2-*_N=)e4gg7hmL_viVz#YAk)&kJC~{um zg}*0FZ_LTAiSBg*x#J|@l)YQ0!06xH^eCFDh+{m@a>sn~CJR-V-|{7LtewxySI@bG z{~l*!&x!Isxd4MZPzm^BrmEv(<>QMdhxlA#)6Nwc$UEYBv&Y4imF%GStq|l1i5$fr zW@hTA`rf3BhNx@?HLw8|-$Ns(h}nxjx4+=p%3Jz4-&eQVLV(tGspif;G<{oYf{`=$ z+Fa6eqb}0-4*Ceeik3M_!bcru+~>q$?#&@8yf*ytd7D5#1lsfMX%a-X2yP6Ot!$i=Ad` zaahloOsThgbFk$;76M85sl#jrt<%-U*K4B;w$DN*y6IfP4E$hvgo6C{w}U*tqG7bm zPPx@$O$znm@Vw!4FBMuodwOc*Z-`9X^&z+_zqIx6gPzhXrwBw9$mxG|Nn zU+gG`V&JJZZ{iE~_fz&ld;VsnO=8*{0*3SDd>Qes;5fbz^+!Dvs4|_%BdQ>dD!BSH91yQd^DnlrBSP)yQEG2#g5-`^zKH=Ad4t; z{=F@2fJb1rFB)NtyYy&ZAaRL>nS?B~M(^3??SA&~)vQmgbHz0# zSNYjN61a*#RBq9;mQ!Eb1#xC}j76A)^B_Q8Y@6Pn^6o$>QfGrd@~)+@z)%F-wVRu5 zR1`Ga!%D(IRNlmv(c9qOai1WQ=wu+p6-XF7iPZfYm|W$W?t?d--*B?GuUwQ>l5cQO-U z_6m$2NM>j&PXL*AJhEr$#3YTCU#~qZvJEjuAaT8g=bK-sk^%fZBhL%`q1TMMCncvR zEa<`|uk9II4`e?+k*zfUY4DpQxD1pE%W#ZgSvZ8I2)uR5%SB66*s%f!v~tJq#p-BG!;g%fCc#(amYrSwuAt|8Nd3* z9Wk7YNH$ySD0^BQ1fluDxnJ0YVDb29CAqFP zTTxeC{3n+t65+0N_Q3S6`8(tZv|z6x>gTaA3Vxd3&QMpCT2N#!P1Ps*rmppn9hUDu zlrnl=LzbJ#_awqd=9{!Gjd4ejlT2 z9dzZ@!rP}5z}2)2xcev?1SViF^E&*gz3?knz0Fr;r>2_Y%&!ZJOv@9P;I3sn3BL>W zR0z^B<@SR`!ZmRD0$c_)2YB4Ey+`9d9}iQ`1v;-m)OREnC$yDOm4DQx3Zpwz~OZCfU^C) z`bcqYFBX=?QL+_Le}k%~W~jfv|0nTEH7}I}qB4z?#%G@wL(BncYt8O?bE9Bj1_@snNIPGBqh*hIET-J)Gt+F*Zvbl=bt&7y zXU&6M`+yv^;8TG6VwIqqFtXUet`MtPosRMcS=c#&321nu7~liBd#uAIJT{3Xhemx! zajt!@)I#*`&e!qsYUnUqC|O;Lt8b5*b~oW4Lo-nX)x6NIH9r9R{FPVXUrxY3(qOaf zUB*=P)Y=^az!~_mEy5!qA+4P{6_jMJNT}Y-jnu-IujDXTy!;hEVs?55C&LSUmAHg$C*%n2 z$s8S)@$fw++|T1n=+A8sk;+^nr1u(VyJgq(cCxxY%#L3UDEwf5#^;B>0N*`Q6?gwy|aXCiiL6!dUm8pYmGS>zzHh5yOlx^1t$~HF4nU{vLOd&3U{7$o0kZdAjNKbJ+Q=Eo|ny8Ns{MU?c+~RuR6Xg{h&|5r|D?3X}USG&%B6vPdGOjTIVH@`@OLV3XVI1{1F4E%rw{ z+HvnT+R~5Mo8oq)_8MMM^{0y+VhPQI(WaoxT4{u?1^A{cI>zLpZS|iV(0OOeS@RPB zb5CIP*TTi~?;NW-rr>ahR>j|Z7I4&~s?_K2ot3V3$A}89bp(dU#&mvuK7+><5fc;h z?EKtDnyad^vaq%`4vZ13t)<0i87an?FF@rWN~k;p+}vbferCGNj=LrBWr63YfHb>) z8k$P;BX8r!8QDvufNAU308q=r4_r3DrFR2wr4;OJ(-GKP^Hn)yKMp zh!Pp`X>4bU=aBvIxvpERL)XHxjFM|2b%yw!V&M7&8Z^Fb9?30J&Af^c4JRZip(t&Q^&#UNX2;niu&A_rFDKftQ_7+;UT&1U81nO zjGFNRVqHz@=-(+9_?2cfniUP3eg$rAX3`ei-u*g~0}ph{$u$+HqK4PyOa~NL4A1ULGi%`Id zJO0Uh&lp&Av)jKvKJ-RcXLN9jf}0e@x9nCk194^EI2Y18xW;#_V z#=BoPd~y=}1{C&8K@hs1)lX)EHK3NjFI6)8~9)NhT3ldn+O9su! zQX8y?cb3;RZu{+`eGD``f2EjvKKrPupXGMPRofM6^L;_m;VqezB0ps?r?_od z_;<;%{?h{XmM~qO4TFQ4Acj!XDWMr)UzTNp+)*V6<%CWeQ2#BECm`nU5CB;S*cP zrRuk~Ew++CZE2m0P|B&Vx&yOic~4ZBEF$VwuCx1Y@bOt~Ha9xwI(Ui?maCYxP2y zLYgr%$t!D<)$e56X&pBk|=Ka{HMjwi@|MNIFy^RxX5!-j58f426C6bzs zGlUvcRP$H!0XMiB&JRNO$i};-Sro*@~9VZz^o$D_`h*P zR_T%MD{Nj9uYk~diKHq?4iK@AnXB_e)j^xut)3x!SE35Ua}CFRA>G0GR0UG0yEE^x z#Yv7*Z?en=kE9D~4q{Fzb02Xr#`axZV#HtP-B z4{7abuKOlk${!LeI*pHulGeS;tFl{+qI0qkn(H{&MzGs7KpSRz*eeZZOYBMHUb?rW z1YK|N)h%!AoR2h5g?eNrI?s71Afs4;om~VnXN)RmL_Ez2TnCFYJ}XWXvxhhgbw@nQ z)t;z|K$Rtx5?|iO;%lsn!y;#%$K|WaLwf-9LX#FG9J6cnkkhw|{I->P%rh+zLFjT< zj@=EMwEQKR&GqUWe_~?sGc+^%J?h(ScA_kMX0%omW@e`!4lI%ASo}X|uXa6d@7`fh zEf+f~o#M^BrxzY)$`R4IA~bLBY$ki`cX-9|r~-!Sz8wR0Z?gbak%D$C9PX3=kU%a} zeK5b-M)MS160FHK?z1{1D0tSfz~Gmn4L^;(TU_Gc03N=>CmfGL>B!0EP2cSg)DjvG zGud)R>73jP>Z9jQC(uVjIVSHzsBVu&I%lLC#bi>Njw|%5mt=*eHUd7WYl#H-jQU^82p9Ue(Ct?QEM8UD zM>wNBpZHZ>+oCpjrchfnfag5%~iQ_US13E*wo zgQGSPxhGT=m2xq*>ePSQQzK9gmDT&zi^m@&z zVOI@ak{CT|31BpnPg?V1GWJ^IoAYz@dyFdupCpn9*(&g}@%`+FyQ&{6T?~(lAFW<6 zN7fRpo+xYeS>U->qKFuVP#=I0K)LxKuuG!xDo=XXkWi~nn(fsY))I@fGe51N4B}!m zRQvppmI!i_<#iNa^M6xu5Or1{RqC_hk{EBB#VUj+w0tVh3%Vnm3ci%z=}ChW+Bz#j zIFzDz)t4sU@4$}0+LE6rDev_b{1%VV|ARMi{Q}llkfYATTtuP@#@%Cq`MUstjDS0B zB=Qb)&J_?ir+X=_F=NhpH`#{F-V1EiJuyumE3d2+FPqPuJvQI$1gXv|{KXFF^1ulq zj)#-mJ3D?I9ei+sy@k%yG&EEU3_}wW6;PH`0p=F}dILP^Z}hD5_vfqW^C^*8;kfAOdEc&CDYAk_aevNBz2@}G1NeZ15{3!DYn>Wqc{8}jm; z7HEV&<*C2)JDjt+)5z_X7C;?oHX+)H{|md(NX8D%&L(t_i|)j-COU2vrM$>Zj|ll@ zP5Li1f~;n8VBK=Uj7SS8gR0}06D=Pn=iy1qp=*$G=!@@B|EC6LM;tuV<{BOFcs3Xk z1`&%K@esl2S2tr`hhKtfW@hoALHi$H9Cw+0Wp@s2r(t+yZ^z*y!P89#mjS3LoI}DS)$yYSiJKYe zI6dMnH~10vZ4Q(3c(N(KbSJeSM7&JX`7Hv!%%4Z)Y4!!QXajqYjXD~~2N>v4|5P7T z?Bo65v@zB(_*!nRCA>xgVcy$WPn#yHe z!#1 z(Ds!yE_DT2=4GM$@k6FyqcPt zdR6cKplPY@d(YkH?6ue4XYF$u?x9gwp$sDRov&kXT_sdOCDd#q8(ldlN@}GY7wh4f zqRpT*2FFBv7@X;_N)I!2utzbmt@I(~|mIB+IFp zFJT}j3?)nKKo2_-Z$E~vbe3f*XHIX2-UI^gOC0cvUd#y*!m^)vbVH?7DF<&mSGy?w z0n5Pk^c9e){sc}db(L<0yQ_6In4S2z!y+OeHo0Jf4-?swq z8N;OMe1(JUKpxVVmHw?1V=bKBGA~A-t}sO3&mmoxej(F&KL@>-Rh;4Imbt=~7v_v{ z_lkyDX4|xz8H9*$l8gtF=CWHojL^0?r|Dm@rE#i?lVnG{l6j+`ps;ve5D&|PLRG;vC3BnW{1SD(_)QNr32oQ^Honj?w@UbvOO$;im7-^s z=WJpm0XYcZPFH6E!wB=e;A+iv2+H4ol=xlP6{3_sJm2Ke=_5UMTATLBkbB)-8}~rm zN1IYw^<+skD%yo*Y8}O*Fl1HKlH_Bi?EFd&y@TuzGKNLiLa3lTAmM?p*yZI#icV9r zbY3I8%?MqY8I4VAv%@;;`U`3yChfJ9s8mlOmm-s zfAOf*)451!uZp)>IRn+s4MV%gZuez>c(7A(hZ=Yw#1uza! zP<{)fqYbEmfhRYy+?E;M(}CcNh=Hhv=EpnB@$Zg#v85Tu#O*`Fs%&a>={MaBFc0|` z?Tf1Yh-Or5zGl4-6$x&lj_dx`L0FGWi-8%atme{I0PnhGf#G#Qi*Sl@XI~)G*iZ22 z!`Xdv!%~$#+p(|wa4kdAH}-wAH0LQt-aTUWvpl=hm7#>rxkLIVKJmV22oE{9L^@{k`f9cmC6LQZLc#&!$9nv&hkN@&V*mR`6MK_07Xnh)nhXBU)L^xB zi6ZF9v+o{>Gs6n?O!h}D!V|kvhuE!_vA5#|vzF9s0ophv?H>Z z1OhM7B}FoBl1N?X@-^}Vrdh3`H9OXSEbILc9nZ>C6;e9iypqc=WcGAy`OT_~a z@+7Zsrgdov*9D&Bt!u){c3E^^28vxdBD-RlBX<4#LO-l`sjJ+dUlbJqQY)XK-s}XN z$O5PsA~rTaxA9WT_yAP3V!sY}2^^}AkV3F8etI33{WY*>08m(5?D;(8a|gf(%$da_ z@ThSYdj9QEfZp_n8!+osb*J{P+r^i)rw_qKzc`<=@FA-5T{vZ}GxioT(${l*G^^u<5`9%^>80`XgRks$q=2luFle1| z!Zj20T1V0*ojMe|shut2_!t6sNwWig!=AxNP(!c2&$>M{{;Op6TrIcb-I<2+BHzwQ z_mMU=O?zuC0<^ky7JY-u)!b+u@lm6O;8k|TdJ|9icNvFoM%*?JgUZ)f6_5FgcD8^j zsrVnra1Qu@Di)_q&^@ade*+G_k|XN|J4dKCu9r#(zAP#T4WlgbC;FmI>FQY-dfNEh zxauU9=K;4o0k7QT!Qys~Rgs@!g($#3oJ}p#8fu4zzpq?M6>lb{bD*`t1nyq^lqh`_jsvjW4D+#ySdgoQ99B;m_shh zY#w)*NM~nTS#FltSee&3#}Y+>hx3jL4^}PBllEhTC+_XJ5)BlTQO-)~;Nq>O-M#pN z{}#Nw?>RCM_xV+Ha?hg_QwshER8Vd0`X(cJ1&|1IaO}1Ifp3ip;&3i6X8JLv-GGxC z*D>Rf)d(L7;XonD05#{r(pSO?3xkmEX4csg$iW|Y!2*!3uoQ)67&&ud8HQ!u;_k_c zRMhv{wtp&I?BVx6EKNb92zkdIIE-TfDevJ1$y;65uPOEZ@-pD<8YlSlO@T0_Qq!H^ z5vJvn>LG>Bd?3XPF~d50P6Ri$-xGBa*I@NJU-a_G(}9HZg390aXk^85obk%Bqhpfd z0Xr`mNg$H#JdjZMFQ5#N%w@TGl>vUj=^zHVIE&}F55PIDHGBV84 zz)vFP1kdjcFLv;3RaiUsCLJkx;?fu;Dttuw*l3BAhS!?+tLS0j3_9>75M8%24}K<5%3SDC<;@m)4US?Snvmm;DU<55N}t1J5*{8BicSAmuCO-1^1h)frh+-H ziB++uvInDV&IEVX%p^zMDUyS*Nb^9+a~Ug3_a=G8ZE}&g|Kj_KltPppB6Sb9zovIU z8qBYmw-Y|Xc@o|D^OdG9a$gM5ebzTAK~r>}uM0i#ekM5pI~2=#a3yh1O+T-w4}s~r zGCL8_ulZ`gcJ}6aZ80s86i4=z04FN@(Iy^IJPKh?y@j>d2qzi~*g@^UOdp}CR$yDIC zhUd-UA03S%P|m3_P(5V1&*xE6)iY++=H=KO)xxYd{>|bF`7>F!RY85zLswBCU}t+< z*aQ;jyQcH#j}2b9dA*dMVH~QyAD5fwdd$&N2iZ$>O&A%nbye6xCkQ;~Zk2pDjtTSL z@n-v_k@34vp;T>Re1Syz2u2YaJm$>??T3Nr7jsauo(15!R{Y{hxtGBO_f#b{_U<=; z4lKVF=rnXikxejf&Ab(%3U{BB(k95$LG7t6lJygv<6MY6z}0TF%8&oaHDLj@7`W5OWHTh{HJaJ4VQ zyJQ)V$amE1v$0K?2!k)Kt66L!)m$g?>}?(7lJP4qonzmjzwGJZFphA$U^8-MnweZRnW~oKQgskAj|;MA#ed zTaS;O2BIBcRFt>mXr`~EG|Qc>5+bT(?4)#*7UZO3DCFPWjfqTItl6N^(JoSm%fyrv zlvK`|(7^3-GRSF4Ar`;YC`6y)$+NG14FTa`uDv6DtI%Waj|K#!N;O~ z>8y9T)$}s*bj48zo8G*9NrIHaaSxBo8tCdC?5q_UbwvIy&a8c33!D>dx~Wx27GIoB zu5p*4pvKdjQ8iq+_;tVq(~)`1aDl9|ra^;329GZ5v`*c%>qsM)_)I0jNi{j{s^>kK zO(A9>tX`+2rOJmb%U>0d<=AC7oVEm)_17H3#pCw$Ik~A?8S}#BwBk28(A|^A)r^M% zRJGI#7S&mk*tD4UfbijPgYIPM$J#fnKZQ-1!vsCQk7gyijt7f z()RI>2v=-5)YkF2+_c_$mr67~sFrqHnVV;3Wk&aSj_9 z`QY#G|LWDY`(<`Q0#-^&%D2)|Kz=%lIE!GN_Oz@SOG?-^{?%A1?dd@dk?c_u&pMA9 zpt30``RdcBPmMR8nWaxrMgD`7lobDkJVP?cu^&`Tj;vy)i#|Sg`yj zt*d~^G6cA!zED@An34RqrHE<sxWewwnLgZb+O~^SdVTN+Kp1ZxR`9uE&$3uDzDLo`IXk6H@o#EdJy(DT z;WGL75+3Oyu2xC-4t%fOatB{azbPDQ&$0cn8>nnkNVnDrZ+Qhi#WCzk3)Y$w|4`M} zHP0tnd@3i9{5#rfEBxrRzWUP9V3YOkE*TE_Zk4xa-Xm;IX>h=6bBiyQIp#CPaJf-C zW6I~joQ5kfso&fQAPTDBJ4`hgYIMI!L)nzvYLO7*dCAD4s%n3G<$ZVDxYogV2hTJR zp0&Ane)p?W(E_K7AHlaxN$+mC>hk0=wsa_!j1%s!X72i!#u#-E-Zn``jH(~2_1Ek# zpUNWHX?!>HWmh0+TkgNhoWg$kh^$0BZfj{MOR*?X+G6eS}*=rOp*59XTo ziYXUHvAf6?*@v=+C$`N;9mDtQB>Am?d1^O8L88I1`E9^gyf5$Xymj{7Y;I0{&-hHw z_|V(>h~m8DV>%+a;m9h`Pw?sB4C#vY8MF*0-bj7hyb>u0y{Pc%>uncWyH$SBqmL!C zeYZK3y?@_B4agyWXf5EirJ(fUIdxq6RgK$Pd0D52L1~UA=y3%3^L2 zzttdqp?p^xJ$kSnIms~Kc`fLE&C42@*VEf^X!kSwfyL$~K}r_sfv)MCm24<0>&U>; zm5FrmW9MI;*BG)9 z#L7c|S76><7j#SduqXW*4K2DFT_o_>3#K1@{DLr;E#ih{!rPXbrVgHXCW_*bsV_ z#Wic3jTcw?S4!Au7KJ*mA8hcZ+ zcBvyO%9#9D`PuIy=tsb6m~)P1IZbYyl_$rnOJP1tc8pg&@Z(n}Dx`5H;NhVzn@YpV zEhUX)+lIsMyE$z0oI#hY?#4}xB3ko%#!Au@*B4d|!CJ9I;+`&5%je}XnQW;O&X^cX zpjD>93*vge?^| z-{i+emRHBz&==Y9*l#AyYAzj%I25#ZwnfSVAJqsIG8PynlD&+?KVXhQ&7CbEkahK# z<3DyPz_F4~gEzl=Lxfg7Q^Op!PC)k1A%V5(5a;pP&#Ae|I>=t}i%BLMZ?u_0+R)kO z233m=i{WsS>~S+D$#Nlc4w;_gjvew~ief3GVYeXybwg*IQqG&s(Nuxl*>y3`3{Rey zdZ$pW*1FFez=_~v*Y%uI@+JsHQDNbC79ZJYelm?97|`l3Acqu1B818e?Ob`)H|7`r zXk#6!o2G`R?XNZ*I`#xqxgB)=%7o|8*_Vf2dJO?`G$x+St?%!wxZGyu8Hf<{L)mV1 z(J>e2S``dcd0r~re`iJ}K2v5;FVj@gQ1klIuB><<-8JRS(V@U}qq&-V;D8fPP;Nc zjk0R}H}%9_cL5pdi*)?%Hi?KmP13<7eY@+!){xF_HL0I~IevEXGWGCO*n#eFd=%|= zC$gSkX;u6Aut}l^8cgxzYw>gc zKuJeX6mrH-9XG)YVgdEh?mbOOnU@ki+**TGM6@61MN`(i;u)HxU#-2XNcIPZvMKFj zn-yf^IIhPRru-013Dv48JHN(oQrsDv!*wicPfVkBcB2!Q?sb{*!X)d}Nk4KOY+8&B ztbn1C&qtEDrI7{(dk}$W``MEia>>ht3e173d_x^muZ*-c@_v}b1R|#_w)wsoLq9Go z8~SGmMIlw-O2%VkD_QT}zE*=uLw3AgdlN{4O;?JAF(E28cJS}T3JS-BTRRi&_pm!ipEfSZ=W_Vko?m_|zKihX% zbLG~dfJk6%LUwo3()Q&(iM|Cod`G;M&`!g}cl&OpSf&}dwdXt7w4h|%ls@4so<+;u zJ?p#*DBqVzJ^u();eJBS;!o_K+$bAISvvCM-#xGP;5U(xK>!*P0dkz;(L~-F$Dx2Q z{-c?>`N~9rQb14;8U}`_kdRR6khz6L7J#6Db1`R^&7(W?GXe5-qDtTW3Y#-2N>SjSS~=eDDzVR9O1p6 zU%>6F$!2u161;51&Tn@g6oEUG6OTsLs9(KxdvB5ptaoM7UJ0fSHoz#DY6uH^abHY) z&bh2{@N%W?t!@@KYR!$ZuiXkqq|7zaO2qNRa_b-9_w9-dGqc^f@_XSvXrI9=>?{YH z_X83^Komx^4bzQGyrtdpicz;gQfLG<2+s9ZV+AVox znbZ;(g|$NOXd8`v>SNh?ev$T~P#1Ci74PMli>`ZX;Pp=T^)9vT8hjL2^~vVZCF>3` z_UXCSEt3)M0$O?6)i4%-qEVckonZ;v*e%z4Ah3k~Zf3`my3Dtw+PWG;Q*SiYD7)3~ z1_;cb%izH$0~E3{9qI zubgV)wUgqk2*{j|YT|vaqcexf>W@>gaiqLzpow}mZjd62{;I*8{CT8=xjCMUWb@*{ zMuFGC%k>7wr1Gu$L#6veUF2@LHRwm5$f#-e^G1sysCm;a=&5g!W0KX$i%X6Q*|A}%qX%NZ z#>p}6wu!L?8wBz>aciqf-?cUjxM##8l3v}HaAiIV*E8D2-asu%-zpDYPdKbB|9X_H!z_p5RDC6K-`JgS|Y?;PRPt?~Omk z1LN`7xFf9yEom|U9ACA)vc+lOMu^!JRGHn&zunQ!yqCOZ!i!{wVme& z!_^ze@0)3C$U~-gCDCSRVD`pmQ#b{2Z6Q)?Fkk5? z$iB_3D>9>H5M6vk`4-pNTdG7GhCFhZ#ZnlA0z-{pojG(SCR}68p!wEltdY12&6@mn4uD$t;GB}e->E}u)5OoP z-7l1p^DM35ASJlI(1zFjn0)h^IvaBD=LmczHO30Qu0#+L1KUm`*~VoZWl(VMbsjqd z?|~A9>Z(*0bg`Z@njg(ySnEp+8}2vRjt=jWXvUA;IeZm)`xYYHCT0+XG=DN^t%ZP~ zp9>q@-r84yPi>L7PE9x0)##2)5XA?b(er~S(PW#=H?DINaGgN)eTAuB$M;t{A~|jj z7!0Lx)6;(6Eg`dfdXkc^#^YZI-bx`l+``)s=u2>g^Q#*26nBT*uasi3T(Y#Xv{vDGJ zIWoHpzCQPHGjVokJ`Ho6!6MQqj%drE&XG2{9U#^o5(C+Fo%KACKdg$}tt|zd0;Yk9 zPYG;yU#*WdqldUJtD@NGq2yFz+y_O)wz;^ZlKR61q<(2?4Zhg#S?t>A+`->Tr?k;OX>%i0Zt1&m zy)#v?Tcr;O3Vb`UAPOYd(k$N?u3yOn5t;(mQJ(FguG2Rei1ScNw@*8u#uZ;vl8Cvl@BsH z+;Zo=3v8#f@XOJ(4;9#X-nfHVfMxbOuQ)LdwTIp*+?JBndU^0avaGZqUsUunC}T2M zXo)GRbYyK+{n)7GruTT43SX<$qr)7`URq5_=~9yX`J*f_tSO}5zlW)>CgO7 zM=Txu&@|m|woa_%MUZi97+erXTvr{QJbQq{ct~bIU^Ln9(^!7lKzqmIJ25;h*@zU> z)*b^992O%SGBQf$zKQp1ou_9t%94`I4A{dXO{urqu+Q@f>rFGO_6{fj%ME)YdC5Q- z6EfHkU^wP^o=F3;BttkTP%nlCtrMha0Al^SvsiJA;TH@5OIDVrsqvDW>hjFf3c(y6 zKeB)m`G_NjbS#J>62?@szDx9HntVmJF}5r?nQaqpGB_G%{yYjXb7!9>ionK5(v5u0 zqX@z$A~L84=DB@Sd8=zETV(I=xy)4a;WiqMz0R!b{fJ64gsvk-{8PD()|$=IZNGY+ zcXPcI8^@TVl^QF{+qbpC0a4OxE|)YHK26^%zp*gK(!4caSXg^>EmZ;K6nT$HQh#Z^ zsif)n5i7@QQr2X|08;)~VTR7DgjMdM!EUKOu$uhAxgYOBR!>%XKz@pTPDJGmL8L6{ zi5aHyK_-s_4-E)Z#31$j2xkCJn;=A6K}s5tce-dLGX~AX1D%Fd>36Bx>`z!=#-J(z zHXz3<1x%Gr3JUrz$shX#n*FQixIavJ!j%la(Q1mGi%`V5`IePCa+WMu5Yf^Y=#G-= z&MApW%W`6Zroa2Wi>NUtXUHJVH>ZZH24bjJNR?hbW$^wYIHM*M_s_%w;2a-T#RN*N z_3z|F>WIk9Fvwt{Pc?L?*Tg*(G389T+&TQ-uGMiLz4>66Q;k+`$1~5#Z9X3-nXok; zM^XHB@g*G?VdR3imB;5<`4`n+%VRuwZ$-MJEv;{FGnTK}#Y7n;gl4$1+BD7hv?La1 z5#Ry?935*45-CE+aPX{G+amH`FI>S~-O12~Y?nPJ{12*K+CqrQMnQKX&0N6?^bN?r2FPgyjymP$)}r8URpNbP+X2OEezRZWm~`fc8g+oMqV~>N?;-v{ro$Zhdx5BW0hN%l;Nu3 z9JzQ5(FwVZ~mlG5@f7uFbx!){0u$6WmG^g={aZuLuip3 z9sFMFYJVMGJeuG+w)}~^4E5VQ$B7q7b+e%;b|U&8NEp&pLACFglUk4~Ne-8tar0I)&o)asK*V6GlrxbT!sG!x4<_6l4vuGK3hNNd z7fHioo~)A9*3S&xNtqJqpxDP@$vttf5(O~G`!gac(ug4CGSgtH;bZfy{6zwHzeHVs z4TU^reg~9Pm-dLxAC7~iq1t-yr6N9p#y+C;OJj{s4lKe-6#C)J)TS~F=6?|S8tZi4BkgZeN z)VZZ8;QN~eaWrpR*w~McUxbkSrxT`4O2ushyxj4P*${mbPmgN3Yv;$PHbS>Zh*N z4Ht)P!@*x_Go^~Mw~@p#Xm9_us$mi3jcfo8eYIC>v}PzmlG%DbF~NQ<7g&&;Cy+Gq z^#$YmVZmmh4mHxr^u3jviyuUv2c$fT0zjQ`RM%H^z!a`5|9gE zV`KZ}Qjg2;ac0~J(Ep_O*}1uaO8N3{fgte12h``!`5)VhfS2;}D0lbvfY@_8m|85S zd2(tB4GrzRzP^6xgYI_W!F=^)fv=*XVzl>y4d>wC;KcMam_?^L{PP*0owX5RwwK7JfFM5g#|t3mpkQW34G4^<$umt^w>xu+ z*z?wUzK+++!2vVq&tW6<9p{gb{#!`l>YTQONDjkOH2ml2`I`HWF@=O6YCd(x3kh)p zvJ_>S2kUA#ct5m?jS?@6;}m}aK~TgUK^i$*A7IiQPhs+I`VWTM?UmFEFS%yAFSu*V1|T+T$x2aoejjtHR&^E z%f3LGVoId56v!Tdb5*vyf=?39mgD$jzk1<`x`#2l88 zMg`)hb8#|~4^7X$*ZhQTn)(26sSc7avTw-fAV8oh6UM)_MXpqKs4=%G&Zk1MDM@b~ z!*Jnp&lANk=8J51_AKHRp|KY)Uj#%#UJ*eEiCATt1;i6&0E?3e@WE{HPgmQ~j%NNs zd(l<8YBa^>+pk{+A$;o3$W(`%AiK>WLP{I{EimAs5D4 z5k@ka<{VQL{2jDorCsO(&joC3;AHJC2%HlnDPfe4w(OMHTosV;e&L9T@+kf#(bWKE zPWeaW0(JX0`ekYO-kCcDChbXOnD|LXlBjL!kgzCNZDstIno4xJ$YJKiaOS0}zYK&AloaE`Fd2@*;;No_V}eKbj%EH^oTcU7M*bkBDVES-IUvtL^tsHn||?YWuBq zsNW_OOieoW`mdR~X^g3t+0hm3DVBLibH+HnF^kRqrY`Y)OMjs)GDqW?3{US~0uCmz zy?wEgIe>_j7V^+K9G_{iU|=(~N+S;yVbU+8%*`>`yu(Kro5M&@AA2(sl0HG9+WZDX zA--?ruxrW*Z$~g;BA4&t{s>}quNJg)%{86iQOo)1W^8?1O#+(8K*#$+};Ia3jb*iUJN3*kTRHuhg4Tj*U|INCT%*f96b|?Gh z#^XH@{URf88l8AIUD(?;u6Y)R{hjQ!7H!RE?3+kVsH7}r=alZ>|4ekrQa3Dq!fj^J z^*T&cR3ZJZ3GNs>3QK)I57Ef~nsZ2qw($~*iLkJ+_L$YrrCNh~3c1M1qk!jaYy#RPi`(Yo!}}mpsa`Apdrb zyl=S`9=z3~5ECsSvSsPeV#q3BOQZp2HUp6m3-=JcNAx^0_tCQ z)oJ4YzMGln45nM2joIKXX(|0sKw^-F(?A5TR){(;$PsP>_Q;0Z|WUZEm;|iF7-)z zTHD9?DS)(j%pITP5o!O&WZQ0w$|@h@M7%8{PXW7lAd|vGv3z(iJ}8(cmXo0zb7c3H zbHqTK2~WWxha=?pV{DDNBhDd|A5q255H)afx!i(|Vh!jbbjCH_9a74ko8~j>-APIGd z@cXLUII4I6lBwIws~|SQ{M`}m_dwH4k7PM;*<)P8kxw#2=i=Kh1=Fr%2p_6rk z9MoUEYZqr>bRcbqO|5aeAc(wo;#AXGJG`9XwZhX=<&FXTW)HhuC}in7y(wM!@o;#Y ziD!PtOmFEKdkl8td&{s8?Ni!b-wTqRzA$a*|Hb+g?qxhg%!$8ZL9*pEHlc2p6CP3T zH_fl-x~y|ZalP~zh}*eDVw)@f zQYQdppav+jo!_l*2C5DP8RJcuGHYPMiuWP_w`xTnVmnSX>5;APo za}}SEg+*=jpI|U2Cmqlo8Rai}eFpdPB|6T`d9y0O5i5jhY$uM9I)Gnwuz9hqwBPz{ zj@WbJBa|YCQ#LG?jo4sQ13shH$31@-_?AocDJD`id7$4j-~$%r^~Ousp4I{YShqZK z&XA4?rlh8NYLEX%)q+o!n3~v)nk^Qu>VGyvX84<21zf_v8R{o2`r`l7%N^N3)_T%{ zs(EbMZ_$FHzJe(`F2=gj@DgckC%&ipaw32HS(#R`y0_kJ+|BAmmwPBUT>Et-vEtbP ztXHSS1|7;BzAdqZXN|`+CC9<{pdihQBcI@9o29|BPoc`99aL^#VNro0!u3LS`~j1+ z7_02%GIs`X?}>lsG!em30lPU{)`b&O;S*1C6%fH7Md z{?z_XltT1mv_y`e7FD#-^D7zF+rRY*l1#YqII8uHl@{%4(yQDiK=Pb1v*w=L`bI6r zmh(orNaj59W6I)ODYz2IUbuInR)4`fh$Zdng@!?fy0LbMBfZX6JZGAC!po9s?n~TA z1?~c(`6Y${hI%_m(gq=T-ei!>{^a-bNLA5}zuoyDP2ZSf51m#Aq=HuYPUtdO9yO*^ zI?C*_(YLw+JFa=OBMQ#iQ79(cno5;z-K81PPVvjkFNEa3=^zNr zmHXMbRHD~iCU!IYJc`KgZDw|aZE!H?q({o)`L~tqT}?{yZjjY8vId`8>VY2y<=4K& zSp(Bh;Y>@CHd^xbKm2}m;*oVTzUVCN8o#Cr#|Xq}opzwc1dK2FPduVdI>`T@7?;b+ zh#{onS%Rdd1ZWDsOtV-$5##oz+B8kCwQi#1M(piDf0bJd19z`?123e|nr{XDYeDVk z)x|#dE=ck zJu2*P`qS!tP& zQ%$e5KxW$~J?D?=l*O+%s~BD<1J|Ryxg4VLRo>~Uwg%b!Smg;4G66MyST+>SIZ6|{fSQzi2F!Vo>G`nm}ByD{AVr20S+n6tXfsFh9?K0WyO(|mIsliXZ zw9uV9J+3PaxY0{9w88kTEM~HFq}$D(V{a8|t+`V}H$oe ztlIF&*aT;gFagDPd|Mq|X!W)kTkR#FrNw#{$z}bD{rN9Z*7NA=41tq7_%ocY6j4_W z;DK5?{@18S>IXN*;vR-k6dW$Zw-=o!q8E);{U<~U%(SRu_f59gM+@=DbL;92_l@?R zNBQHY+6N^^-f-^g9xS-Vg;rOBM9b$q+Ek$$w^cu2{RZi)txXQ4UmkC8B-mawpj7a7 z!9QNwqTWbPe$_N>E`cFw-DAF8hLuUG+n*vk8~pCQ*SY(cigw&EF83j4oVo-mTrU zDvOO#rD`1NfOFbO-@Z250 z#g&#a2S&Fp*5P6H8$3`HNBq=JY4w;Z#EY;UvJ!^9ZjgcSDhPllK)=YEtd3ZajgldsHrP& z@!LPXs3he#lXs*$EMW&yw)eS2Jxb!{HNCeX{tkXZY}B!EW&aMrfzNI8W5}|4S!^g= zNSZAD58FqGE`5r{=AkEe_J^&Yg!Tv3CfuZO?G(&U9LCUVhSbFQyYKW7GjqDj_?H66D)svFO&nzu9m9cxsgYZ2I;JdK+= zdd6eQ`oy=$Dz36b6dkOIgI0$QUtCnkZliylz;Ec7cHK50e~b(#vp&o}*X6Z4I9aIM zS{iV5wB3K92QTe9Tt1(x+_3iZlhgbQz0)R<1xP&8zfG3~Fn_WWr`Ek^)UZHc~Ik-Ys@HmydRE>ucfm$8ne-q^WE8ZcY$1540Cqw&gB&Rg9$ic)ZP{H6GPR8;5nF% zjI^dKkPl!DGe{_&YfD^QdbpkD6!1IMqGJlZmE=*fZZPLFXfQuJ)M3Skr)|2mFSFFb4v%zOhCNcI*2@j%oG8gKtro;? zvPaOYj$@=_(@iY4U}Y#e;OI6k+U;h50#WLpqju>UYluyNk1EG)Dn)(C2Y(h$k#8?7 zXWpu4X)4&#ZR+i8^}EJ!l%k~$m@|*>vQ!{I38T8ic4hX>lu0>mJVTknm+A06*yR-J z)I|KPxv^QhZ`K)u{nj&H2vc}UaRaB0-g{v)Rvg0~WQzyPV3Q_q#-(#T9?Gmbq?lZt zMOWUgTXW@snVa8v6h?TKUvVyDhpI|Sg*N-9Zhz$3wl`Z=1GhaR9FB#ME_p9<(WJeq zfl1Kmp6oxXr=8Q$dG3GRH%({j`W8-ut12o+Mn-^EwhQ)M`s$H*z{sZW*LN7p%^bprn_LVIEqmMa+p_SjvGU9}!` zb&Lxm3Pg0v8g>O{>yF;cZx7@`QcL>{Jtb!kqtW1nRN2 zCNiLX^ZdDtAc_7?cbxmYE6->pC|y7AmLmIZ%lWqdk-O1k)XV>~l1^=WCugfiN%)HHK{`l)t#T*i>l zZOcDM_vnMT>8_WtKIPj~DL0n8Kk1DD%cR0)P)`-(6$Lt9qzu7neei`26zeM&H8{L@ z`KT2z=M)yz1jCM8HLNSk6_L1BE@nsh_dR zk_}YY?=Ed_>h9&a+lYxwCS_;#E&bT zB)%7blDL;w3QE_D)7IepPY7Pj97VCxag;96$$p;B=!V`#GgNQI($0o zjHMxn4Bf7g)ND2j79S;jZ?Zp=c$-7s`L>b}_f&)oq201>;))h1z$nu4F4PcNkA zBcBhQ5Vfl)jvVnc+wuCu>*6gr!oI_l@dXc0>iSFKwKWv{+IFlLCF5RqhupvS=4q48 z<|Pc23*Gc?Db#9OUIxV273SX-XG`WoM4-0b(}GJO*;!rX9MbH|-^~ul{<%@o5oe>+ zXah^@qFXjdD4V(W#o<2_4oXeMuc*n~?N10EKZOQpQGMa7f;`Tk^d_=ZQpEB8R*il} zoI#0#9y{-fZ`+17t=YJ$>s>e{^=HX|>?xBuvpcgPJK;FAkK&O%*~g>qV70)h7e02> z?cT^nTAZhi@%+=UYr?us5!Jqo$ms($so;0v{hBJUJ9|_# z=%@90@xq)ykrq|#Rn zO1PwxSKPyblCr*mo3!L)_oyxsoALJ)RHM_u~A=FQGDvtwoXC3xbEzy0S0o z{l0ypz7%>n3hm$6J(<~gd34!Gbbh1NNK_7lu0X4CAd&=HS2q=10l%N)TTxMAw>v@e z#5cZqLkfi1YFljV>>q*T1@N|@C=Ka-@&BqwZvy;SwOde1+&7ZR-f(^PS=sBp*?p6) zSmN(KiZ9%#8!Pw80CNa;et!N`9Y{bh(7S%?b+ESN(S50j`On>)uE<0rd=u%cLLeaU zS>5rn(Ndbl-L0G6r*c=m%G>t2#6jt4;8^pDHBr{ZXT>P(q@hdS6Okq?mG=5Q-j9@O&cSG`8Ef??}*`610cS$9^owqS`*TP(K@A7V~|+yZk8n z$ez#TU9+13(MR^9pARpY6g6Sn4>fuepeenk_!*R^oD#3z$gS)7TQ?uA(t?=NurZn~WQu$_S%vwPM>ceBUS$^{!mMBqnR54qwI?`qgZ!J1~66ajZ+D z9PAsf=6mfeKr=vcdT@C?r{lXms}MuuwYC>9-OxLJ>f2kgU3S-;u4iICN@|kimu>so z=p&-SJ#BEkfLn5$S~ZI+G<+*sP}<;l8u$94-^14*|j6=OVVY3^721;m?ruRZQ_;gY&Jn8W^Uux-^ zNFn!1?-$&{`O)1;L3=~miIR)*;M!ERPY2|sPbEQ!RHlKHs zek}sJK9nt9!P3IMcFAt-Q-)5V%kFvg^j?|ee);lkhyj6-BrbE-0bo)G2gGg*`H`zpts?ED)@s(N-@)b1 zX@a+Ji4UNi^tOr}dk9#EEW%g6LFwB1q@d9iAshp;6f<*|6_4g9!NA z&ePu~QdS;T$jcsO5$%aLzc+&Zb$>mTMVmO?H$O3D)+Fw3D%<&P24DG{0!_CLfaVA5 z245kUbdS+9y^sYoM=FU+A5kQs!RNH{i@n9571@l8cKqf+61V&L25j!+nUGrgc{6g| zFsSdBxFgwGk?xvvL12XIL5F>|ub9 zPRH`O27P3A<2t^-IF$}Cj3VA`r*b!3`0!!gB=QZwrFGwblA0zGNN#b`jni$U+53qeHtK>M&)_(t-h(8=7&!i6OA@bbiTun}qN z1KW|nJx*`!y9iv4RNF1z(B>Te;i=QXfQ|vvYX)yZr56YX(od_=H2u?KI<8m!n0C|i z#aeNrXXhqrc>i8EP^l;L?|uy%J0Ln&rY9Za{vT7YPk7_M$;|$Fnf;qfZY`c?S~&2T zNpw`yuaCY@|EjQWqmlhhTaS;8!2qC-=-0QWg`3~@Jvj-9UyBfC4NyeeGs$X(Mz-Xu z4i5)scd@SlaCty^FF^i@yT_6ODd;3w%H_xQC*V|4AsmkbEcGxX)YOts?hdjiq_6)K z$d-_f(fuhN_J2ku5k&yxSFA?J#lNz1|DiQ|Du+`MKRy*qi=d0?$G%7aJ%3Ho{u70H?7C{k&yAT* z?8)+?>Ho0y)?smV&6g;I06_u?5L^=6-8I1p7Tn!}yEpDGjcXDJ1lQ2GyLEsdjXNQ@ zJIo<@-|sgw&&+*h?!Egj=stb4&fcq5t*TnN*?%GNP?w;DmP76R1%;5vvbi`R`M47; zJ~`P#tpa#%9C#rF+cq=Etf|QW0mSb@M@iv>aN|EibKIY8FhW1)#C_w+Hansr+zib4 zDMT6>P2=y(ZZlLB#gAGTjJDv2bh)q~ITJWkj>t5ZqVzCm zlw$~`$$o9+h=dV*sSB_4r)af0wWRMd^R*)S;;>seEZq>CN~|!74(TkMWVSXj$*+)N zTJ2hY-PEIOJ`*8p6=N?yw=r_u_0A<|5N2oY?nHx6{j(_jK$__ShpRk|N9`E)G_(2U zt7m(Xf9ES{gKS<&lgrCG+XLGT7RMzDh7I#e?H90zjbO{e4Zlm~CF#=jd1Qg~gmYGi z)IP=B3FgT+*aI1X3^k!xjc3P7nKa)>Y+_v1OaXhw9PLdW*l!@CuePmy9QlhU14G3~ z)r1AfQ^Aa$t|JHjUxl~jxnv>Xx)j4FO%(;S3}FqG^X3TrMYFUFtMNkMD-AAbU}_Y< z_B)vEsVh2Ke-i(85E~IE`Q3Vgty~O`wv6;jL?HQ~^e;`62{eIe#!uIuvEDP&$$sd` z`K?vT(tw2$73)^6g%E|u!9gAJ-MXR^F<-onCJV-=Oo_U6yMorK2Kl)Wr5t!8g3p!1PubO9q)d9pc9CJ+*6ey^3S}?Mwg3 z^#oVc%yXNSH}B1N%}1SkUyTs#cqXQL*hQh$5x+LM6H{$-N%FK-2`>VU6R4{zDK%9g zAMi!O#uyjb$=T6!c9zoWc2q{YE=PL#;~4qodgE(L0;(trFM5OMUC?+n7Vgsgk*|vJ z$2|)La+I{HsS_K}T59Db61@Zp@jt0E0z7`%eQmXw8;a&tUT0R-)Au<+M;Fe8Cw#ug zCGxjhgf#ApWJ_zTe%E_#Du*Qx>kT3bE7s~u%aow+5lgoqhS6;MYD*}}>p+w+$Z>9L z4N2@mmf_k-ZpErb+ciPOp0GF9fwnl(+h5-}?a0`W-A{5Y4}BZ9Sn0^iOq2ntl3R!G z2~YzW^Eqh3(64dsFo`u-`lFibPkOw5^zdw%QY?UUBFF+x^UR<4fD zXKI3>bOU0d@;2chgr+(4-_FrBj{j-_nha(J3P@@+4U|O(zzM_-o+ih!Z8`l55~^n# z&+B`O{!E7XP`P=h2X1*a2Ze zgneeP0IVmn}U2PhjP*LK5Cv#6ZHtkXnVBk=jc7!<=2Y zDEr`A%o#5~HXi}1+e(Ig@9u05H+9WV@89KOa;-O5)MLR^4i;%!UJK=HPljVIDD{Ws zGEk*%91y0-!wZ0IwGhWh2CKk_UT9AK#Wq3%(4g0zJ~2^a5l8zZ4KQQP-BzXcvNtoIC)3%5CEB(0y z<`f_PiW~W`0ofx$!ioPr7O|}@tOeY|VIc}g0zHT@RZa2@h3_6TI&DCELJlvV&T9Fi+2w@nr*i z+OxeICQ+RkYx#LOXHSHk&0FqSO_}*Dud@}z=QOpJtp$@NI@mlaczSZh7I$DtW91V| zb7z4VN}~nksotKKTLNx_NK;JugUGG6Q#jnEM8N5x+w`L>QEVh5cK5)mGpJKPp=fYl zWyAI0HqPd+k|933DJsElaGhbp?Pel3>x#biAj|Img6NoonqDM3Amg7mr}I3#2Vk&9 z1?uc$5_)a-n)1#4-UdR`0iNR7~RkX~p79h5Tw^7mfp_pX* z`}?m6Yvy!v9Nav;d`7I6NbKDtcmcrYMB><>%bTr0jDehxkgz}!8?K8$MMVX~m`ykd z+3?Y`h3^FpnkUN70okQ(P0ZY0L0uhgSl7D`AHc6vzG5e(q_{x?E-I+@gKq4;iNDLn zm>1K=kla6+TIb}=dIQgKDXDq=Qb?_B&sFkj2N>1ynCdv z@b9fdSd+h!G+{bmZumh+q1je;N#Dh_$9J$Om{Vm3{$NypKhf@woW`8L&AkAiDi$qg zsHY%0w^uHUt(gVxTHVLULp#gp4);^eSIiZDypr(nr{8L8ae_Jk$gI8r{2T7lsGp2q zR93dP&kEqy{A?hhmRf~@;Tm89f1FI!#qUT}$V9*G;(CmBHdh9Uo#gKK6-qj*vX0+OZzPr2~e){y^gPwZW z(MLg@8+xO^D&nUYaugItWi@F=yeZB2ZG}+q>9t%aZe!{zC2`6GT%L`sp=UdIqOcIB z;h@f)ix9}mKpzIhR<7_KXqlNqyv0OM^Ogs*Ky)E?o9G9NoN{TraaF=Ur=37L>RA-d zJ^^P(fb;HyE!9RcS5h*6)hT9=o?|SUnL;!Zl>}U1biH+PhfSv`=W4N|5oZQ#`sc>p z7&iaX-WxuH!}fVPSDBao0c=rMquV@u4wDwN<34}0(}5htvGNbfuGk3IQ_7(7GV}KG2GIW*CcZ6JfnY{|sR(wqM(O zhu-u(gJn;{*_V7lHX@;JovGK5mGdtBkUZDj-9~TUSwG9ruro@}bJLTNyVhk`S@?dz zuX4lC5wG_T(=^@#^j#T#lU9+mg5Hqs8;bg#Im!6fG^VVy2vV4aW7W*q?-%>UsKr*g zPtQo?OvPz=7F@7Dzf3^iCkieph>WCnCwg~kl(r%(%s=LFBO!cK&7!_Dne|EfLfJT< zX-&gnbC_T>i_UO_XC>1bRj{q?Ud(Q1f5xi?yk4O-3ifXOwf`2dGjZ|8B)VEM1iRwT zv)fNn(KJfRO6VF?L(n)nR-W&?M_=hkb5wFI3jWOP?KetAs@f34C@ zG?0y-g!d-c#7%cOQ6MS&15YY5FKgIE$F_qpx}7a^G*L8lG^fF<)!y&{X*BOU^k}0a zk))H^gBCLii^bJR4!En7!=NX0k z@;Hx&?p&VbY6Dl@GmeDK_Z4#FPT=a^Ph@-??DE_NezG;$>kmg$<0}%A2P+4)V&0J`h z=kYA?pAnqGm4E`KvzCDa5a6z~q_o{z-@!AlCurmK9USUPK3H;}O*h@A`A+9wzGm@y zAVq&^u$I7-yZrIU>+gg>>GO+BSN_Nh8^Mm?ZDmc?u@g-Pf}N57Hha%x$LYa@_Jbi3 zI_p}g+gh=0ZOK$f(`K{<`+c--%(xHZ zcX_Itowgo*ZJF)QE|O-7X0yGDzvpcHFin2LkEY@#p6x->uP%tL^2b=Y{Io;%$QZP) zQ`zSy4UXq3THBWj_CFtIMh)CwQKbl75%!7Pb3HU42{d1KilHB#5BZ%u1w(uXzN#Qg zb1_kE9udE%Gh0$7QmJVhwcq=ynnFtMqspyPXuFQx`r3O@?)cu0CUxF!K2{{r!+WTY zg=u812-z=C$dRXzo~6p(i1p#3aEiGfLztCuZ8^0m-Jm5I=037EIFYMzI_)}t))seS zGs*{dEg>>Ml$*NZrg3~ukz47qO$2)P+)vxg#OmB(>Y*rYoW*ZQ1DaJq#P=|Q)_ow{ z)39(-w3sm*#l+-&7xv`3>vsu3On!Xt}{!(x%xD{!Q61N-HPzGOI%%(le%bc=WI`=F8 z^b0~wkF=}Wr-a~_+^-{%&7tOQa;nHs$$SgTlZUw4)jS?8_thKI`&9vSOyo|#_Ae57 z4L8Xbmmno{xCFHOh^N-PFBCc{YK)HAM&V8FLirAV*JSZ3_59S)|F-l|K;q>~x$7R; z+cgbyj-xlo7v`j!pW)BsTiXs_wz^tBJ7mJzobe!E!;t`WXYME*-VGZZk|=(-H5?7!^f&@AgW!LZwQLX4S9JI;JxPtw*)hV3>M zih~P-9`?4@ZJ({sW6TlVe{OuAzgatzrmh0eE4;{s5alzYvZz-MHEEJkE?E?B;ACEm~4#`}8;o zoPLnx_`D*&pFYPe#>=y`>**o8X367YXV>>u%;O`BpVZ3lDY;Ne!MJXW_i7qhdJi<` zmV#!GI0!?u6-h zLNRa+1K%Er6U4F$R8;8n;jzicHIlpz);YL`e`vm1y3*?3+P&H-N{JJ3d%_WDu(ITL z*OtZ1u+~k+Q(Zh+#0g)o+*wo%k4`EGrviJkIM{!ohiHry1njo$@VbyHDH-M|v<21h zWUZJx*t%JZ^f<@Mu2uAh;yxY0Ud_zKkShnPJ(Q0-Z!`OtU1dHTI**IUDY0; z$25cUMWjwR=G63S1jsgvXody-azg^v9?*uwTHz_eZzgjGV(&Pd4+!3h=f^zozU)6% z48R|{)oZ%Kn?~J_sz>SiWPiM#3Sq4c*?9wiZD6#78C@Q(*e)g)mB9ASaWC|8^bKk! z-TN}(DT<=&do33w^~50LWz5Akn?wwWkR{>A2+3pTH4FZ*z|C@W8qI={Av4! zlaj9P{DKhx`U$}U;%aKIxVX6Lb(!bw+}*<{oy6D)W1b=+z9c4|Hy5qep#GC$1VFLG z3hi#2bI?;XR8-|xP5oT!HzF47>9bi1dH-k>dBoO5Qc5KRS#7U?lAN!y4!8@c9Pr`Y*O$f-S3nwDx_UyhZ|5b?s z#$!Ev(J{R3;^t0E-V!;n-M!)TeOB^MNgd!zW+3lw?$)20JbMWET#N0?AD0L?^V?`5 zp8brNvJef4#uOH|al-#ZJN~!c(Esuo|37Rk4R>yvF*Hcx_VChno(o;HdwICa}wpZnw9u2{>?}JRbCM zWm&QMk3kCYav&w+2`9H3vA6RD+XDZ9{f;pA$U^5k|2H{2RlAxpc4LMZq=L^3az{)O zytQg>(8UUbdk44GXCM&`Iv7vH(yr66m;lEUS3p4BE&#@mK8m5fDOv5bOH;}iX?nQ7 zK>V~-SRmUIEclAV+ASCUoA&|?V#%x{7$cpFoXOqM>1kh@mm8W+n!MMw4HDTkzJQw>2y4J(dpo~Sv49qW zJSi0gR9SI!Fe8V;u{n=}mJJ4*jaTpOh_MzO?){pqjBgeD6Wkkid|>wZLv_#h9a! z`9>Ur`HA<-=%%5$zCpb;r>hy^2u~9pHuwES?qZy_*sZTa3S+RK-5h~brp3JkPM_>* zyzGtT{f6O%)jblvxEV*C{sm;v6O*j~AE`C&7oM(vWJT*4K+?D#HJkl0wfer$(DH!c zQdQ51?F=O}&`BZyolX3t7syP=-W8Zp=8Sa=)_h#ZAeuk;)KT;qV}aQ>rj zrckHKcxz4U1s_S}D1}dAHc6(NAw;qhMy{y5sNW4US9xV%;dU)Jn{herk}+cH#ACaP z-OG+y$unWTM5E#O9GE1kn$@^d_N?rnoH?V4R0SmnzrQsD(W<>Ck{lu?91+u(VhKV5 zA$&w}tb5xa<+*z47@#G~6@ksZq5qkQ-cVbvpgJsN>@ZhCs=Oq7H;KguTjnwT$ zh+6A(yiaa>JuJV%<}x|n_4++wE2F%zejZ-7%*lABYLMIoS>Noib>`A#YZ1S^u?@Q$ zhwX2DJiuly2G-h{4QDwE_GWv^TMkSVYrPCKcAMKSp0PHzHr)9T+Bb6VW?iEj60Yr3 zj)a*>v8jNB4Y|`@Y42hyDZD%yG(d0#TUZXF$?d-2t=5n&f4I>98CJd+9 z+b{><zX$fM;Wz8MpI*6 zVsqb_9`b=|#z+Lf!c8_+*a6yTZJzYb8ork$_Ioc58cc`Do;Rh88QZP*OK#5C%xvzO zIY|m%wIT{NPj_?FZQZ&t=}71=d{670aAia6&)JjFyec?Y-vSe2i&@=Icu;$K_S#ez zNH5ZF+6b;@>#y?_QV?x%%Gn?u9vo@^iz(JaH$~*Ttxs*y5%AqIw}Or=3JJ^PS27os zm!`o#{Gke0--)?!7!1#n^c>cQz$3&R&N`@!pPF|)5H+%Y+T`CdFB~F*oDsBej zW}GM383to(HKi6XkEfDQzb_#nGG&x@=cP=md|i5sX!-BEthK>WbCgz!YQYt#n>8vk zKGUYBAj06ivQnezYNS`R&&wOy#!d$M{W2_xjn=ZR-=i&gF*l`fHR?CS(94!yaPYMc zhu__`5W^QxQPo)&#~vJ59N#UXG+Zc}bH?14)m|MO&Hj6N;^hS1Zn!zbZzY2wg7bqZ^fV1&5jq>wc7-W-*I9ga z2QryfEIh)^x+Gcj))!tpAruk`NNYq?5ei+{Bq;g1jhC0m?Ttk@q99WRZW%mKU~Y|! zQ4*_SM~D8%L6on`{n8>^l5;!mynljiOn7z?(~^K>Go zy1$OcU4GZpVr$Z1S`S&!C`RxbX-jt#{QM_V>qQ4ZJJ*q;V0 z(C;=L*%`V^X+IlXB|sBFl2GW!MqC*lc62h~`GtjdoaPWn)=`7t-RH(WANOX0!!+j9 zsNcV>09E7N^;uK#A626@0FEQ0qN@J&j^6qJWIsk&P=9|vbGWj2qqd9;3ZRO?kLmT# z!J91s+E(iAg`pFSn-f9iVO}@A8!29TAjhHici)cc8eq`ED3#tE8 zfA)WJbIkVl;mVQA%lYfc!|Jk+r2Y>(H ze>}WE(tb9$;_v}z89cFVQ@LQu4)`{5nwpwC5D;-NWAS5Chv*DWq%-;P z=gGqehX^S2L3jy<3|>@-NPtTQf=>1JT3T8(lH-w`a*1Ci`p@n&GI8ZyTsSQoMrudo zt$n@Q`;MYXNV3Jvjgb3*XE6nXboiICUi!_J6VeS+7By_G&vSkOv!mP=@uzay-*gUB zCZ1BV07N?dHTz1@($TE7)^Hps0dme`%kFvP2GkQDJ>M$esNSL2B@7}pKFgUD4JzOxAX)r9a0kno&cQ0w}UG&p#PtPZb9`f;rq`ez3aOP9$m+vnEVoUQ&^Ts2)yJr$E$!cF~ z^UO*!Vc~GUBaM`eEXqFQZSxci4PWCEgqTtsOlMS4m#!?42P7ig_QgGbMSPWHcOz3h zZTiWiJ#lkpKq3c)f+J&95C_wxTs|JJH!LC#LZJqrxaVz}V*3)$?#@N;*Q!u(Z14Dr zDsnnaBQ_pv)B7Oh0|xQB2LOzN3+ozl=(^vCZoZiV-OPh1XIhm5R ze%qlB2Mv~s#nB(X+|j>7!91i+BXN zk7li4T2Cw8tfj&l?zrx4Lm`_R>u>MP*W9Wft`zi_9=0Trc`+{-jfO_KC_z);3fV!HN_3%_U`g-zR*7rAu{J7 z$?HMXF|nxrkz*ioN3}HCnO>EX_=~Et@sodG;FCJ$+L~?_jw)wNMi$ynpA5OC&V20y zg@US$cSL);D}cyn)H-)HuF`-Ojz?TgM)bA#;L4e4<$R6(j_9szhQdU|C?sKW3jQ(b z+dN6WhCFTGC_?A|T{4uzH!>S!;OjHzXfx3D+a1sR_~#Md;?`|hbpHjVfYU@uyA^cj zZNPK4I+~wdZjy{FpA2_!&WF8FQ@jl_&xt?woss}9s^0THXF&T6=yzxAahFG&IhQlv zpUj^o_$RmJ67<;fkZvBBcmJ54GuQno^b~&Ta~`ix)zhXsiqQGHS4dCLn}gU8?mM>x z`{&z4dTNe1v>MMSnEkHl$Z+;n)3s121#6JAUfsef41NeHMO!nk1MuRBkkR`s zWw;R}W_`EkVV;^s_s>iqDWeQHyr{|EE{vAcc7tR?)?a{;WG*; z^rxNA(A-yxzneUKOA2aBmlExagV}^-93R~}z&ofy3~XJ_mT;J1o@r~X z7SU{ITKlqI;xQJ3_yRO7@ZIHyEditUTl22KO#=gD8+w}k`8|Q=q_pZWaese)B`X-+ zhBNJh=W0D9gEiyVFRjug&n#>lr*YD_k!jW`$tHdEUJrdpIAQ4IMcPXAa{Zz|P&hIL z+s|-sM_s+8Ioux8riqU$_js@ld-z_7vZA#vZfJ3&kR=Pw>hjy+i#&Ux-aU%8-t>o? zq$oJNILG=+>v=w>*B8{~o8PBZSnWNcL@=9T#u6qp8^8NL2cw8dIsTlh*zD>ew%OX= z_1n|ZU6S3J-gZuhYiG41x?@H>;Gg{k%a|kJ9~_?cs~*7KI^VkmGljoYAzjiKl;;P-t>5qHF@s<(E+0t6kyy-meCz#S`t3U37E zJq#6T`N1v6rkAuNzd1WEmtS7?d*VL4ZgFwTQxW@~oZ+iT0a=;(oK#NH!7D$n2(pKJ zXja?yJKw6__dnWAQ^-KkQmcMZu=%)|jkfiBmZkLp8uqLF>J;A^(lzEC4Xx8`8ZEXv zqrk2%g3Lq82mU=H-|JputThOml`iFv*2xc2J|^@#54QX@?uy2zuknME$%OB*Q@-B& zU%L8S4h~NW@_cH+qYF>V&pla$lD+YDX1xIq_t*w;p-6NI{=BI==LB^t8rs?#iVTY%Fjhn%h$Fcp_H4H8MvMD09|) zCzVKDRZ2^1C{c5x;BZ^{N(bld8{~81P`*XIunUJztm)rqU%M0Sq<2pB!s6yZZn2h| z&ualN6YWD3?1RVr%F`E<01c-D(f{)gcOeiKvWbo_N*tjG;`wsf;^9)l@bOC-aVeIg zThg|Sz*kk>qq@?)r60e*udZbl;YXNlcA}e0NFkWub08Jyo<#tVsohw4AkNa(UHG}X zV#STmzTX`loTq)qw}W!Z@9(+-K;9igySmG5dvESths2&s5~bZf5dagBI!~eT4Wqu+ zw_Y{pp13>$H=k$sW|NwqS!3SZ?YocquGyYrm@nw^&_}q&k(qASArnPg4b6|vr>x=} zJ%UqeaFK6zLIzqh*gM+Egnt{6$%R%#61J~0FXBquy6q=vVqKFWIAJ+OmMa!;AaA3} zK7>c@xfHxwc3O|*o@RM!&LiwAcUR7)9xL)n{?y3dLmkh9ULIIZ)4tzVLX_^@08op* z_Q~%hF^iS2`vcj#A5_bmp>uhOS}PZXiE8cw>6+@MS3E;sK8$x!SA>DI6j!&<5%>Y3Yl3)RVRT~=#0RZ3T zdpG+^5oja{KwLP`Z6~^$y!2MYuT5OIW4e_ejeP??%RGW!sTQ&yKYlEM?2O1qQ7@^t zM_MP`{EF8dPgG!6fvmiGnP9i>)IiJ3+-qEA$eylU(SEwK=ECpDODrxa>Gm#(e0=i# z`}fZ(C_K#*|QQc?T_c411h2eNE_JnDI!;mS8=#5HbxjiR8JtxW>Xa8 zBQf?*fF%JgI3(n;=Out0yJ&7nMzai#RCRce46z)$gyQ6=Rfc2|0Gyh-dz!>?k(U1_ z%m6ST2cNp7{Q=xA>*&aKmj~7)U1)6uJPxLVXgwhHQ<0I!PSXqEsvn0F1rSI;FlA2% zr1rM%ZIzX*!{!^gkAyfdyvTiw?Zbf2L`6mG|9SmA8-a?va`Od$jdNi$@9& zC?ahRa3>s0$Ld$-h4Ho*u0zy4n+vVQ4f@%X_Q@AB+!;dAOZQ2Q%i7^u`QX2DKj4=Y8zwAlPO?%&vudd=I zv|1`P-PEnUX4J0D9woS=ox>|L^DB&YU7Pr~smio~HF?BTiu>Hs($Ke~Orf@JN>-5} zFo^dMW{On`r;Y`dOgL`M7Pn?Va1Fl0$&De5wD^hNt2nfpL~=;ddoS!Q6=PB3?$>$C zShv+tsWQ?-EGCC6I@9I`Ph+tj&+(ap#vut)QNdJ9;R%Jnc+2yf>GF`CsB~8L0N0)J z4)}ce|47R|B&YJ6Opi115*@IPZq~h{n0Z8+WXQ8-hw9``HX@D`a0^Soh}51+#)7r4(%62jsO!E)3_!5tMZ!{Cb}N z`m&6U$Ri2Q!yH25Mn+-Qg|5)*5PDE1Yq&nP$EaON&{X(_Xo{-+T%x%{Jl1wGdZDT8 z-Iv}9=+Cc2_()l>*6{ifx3tEjtR8IMMxU2x+}?wM1qMQ)8;ITssFitm_bjP|VX*o-lj|ko z(m~f)Ec`aEiae5sQk&zTc3Z074S;8=D7QF7ocTPHDGDkXXZ#Uw%XS~%%^GYg1!;RC z>)byu@Wz6!c{P)~=0?whGc4L1KZy|N5A=0Q*e8V{vZ3$q!ztl+T8aodJ2!P(qM9E9J*v`H8Y$eKNxVdzE#LA zFxk!Tg42ZIG5zaMK`+7xA5xWi(Lx3~!2tEH-^?XcJ&Rhg4tf|k!M?sY-P`gJ~hwP!CPrPIDl0 zznqoJUXf9r=P%uOIO3uU)Dt^<(2_tt*=M4S@cOP&^W#RH<&3Mw<#Zc>K7%DDI2*Aq{#P|o4LBXRed!zxmYYR zS0jA^9-Q#FfLlNm&-R`HUxZ6}(6nY#4V~hQss2m1n zvdpejnZxr( zu94oWk;v*O77%-gyV;#+D=e$JX$QXXY{87Nw@QVT^?FX|6sc@Rh^0DXX--lLw` zpv_m~PXPs&=cz*yz=Db!g$N!9?l64zEe;5a0}2TO0vMuFq_hSD9o-vVUi`c<{2wQx z-mmcRASHM4Z^UN*dojgN(;n6Br(eH*U2tB$vyQk~ZY82u`mpuO4Yvg@j$8lN_eWju zG-v*~6ECqQBkr&{2i_`K>74Md5y%c{$v?{*klJ^9K-i_4;PjIzaVZuG=7LW<~}4CT*m#`_FO@lm<)|{tgk7kU#{; zEcoxhQN9BFpRmvMH!ooE<=-FPS&j_*%vApIk<2`8{?4?1{dw*Tsei)>F$?F&ePb}$ zyyOuS%&H?<=m&CmHwiq}*GeD))_?d$(3KP9w1q#!l=^GJoV*ksP`K7*-}Tv$e>jMD zQZliH6HKZlMblsWok5_y7aM6q}owB5rO+Ei*PIE+vJXy{WOL zG&6h-Fo)yp19Hc9ii7$00-d_!pgnM%fM|KjnV^^iP2sCm}UOgtAmpR zY}xUwvAGY@UowLMZBMq@Uf)^9dl1s%Uq-?H8~jq> zqTLC4J~?$}b7BXT*9r7lQAb5ZrPUOEa%0rib$M+{g)PCz(7c9glif*r02h+3Shd(V zThr2xB;b>cHXx_{q{PPu*VsT=M1Je=dTr+SD)jB-JUO{WmkyJ0OM~ykw{wk{^@1xQ zd%V(6D$8}O9@dg0kL*=P&?nl>;9%wC@BWQ$Jzt1)4t42ZaqCo6x=u@m|3iP}nqeki zV6<%mPAu;roxs^fdLR9?9nizW)Ro+FPPQ^1=t`d1 zM01AFMj(uWmKMX|D~n>A-WJ2+ zY{RpxDWE0QjBiJBpM3{0Lefny7YzY5$rj%Q|5L?)NaK2CbRLNg`Nh6hK^@0oxYLAH z6}gj!LJ2dkN{k|aR26hd8@-jX{iq)Eg^28xw>WE3Gq3?x`8?od?#N1wq~&OX9D&&*22zNXmEuwu<*C5WlF(#4OVmNWlW?r4H;B@lYy z+`1glpn|_U?PfS^-0FNSuNFPzDz9Ss1n|~=AG}v_4sdshQ?iqzY55d_vC&66=M#BT zh|zPAWyD#R5=0nucBvvRK+?dj>$LiQ;E`p}DJSl%{W>M2PGa3k@Xjm`?>j!^{ z8acqoM%+~XLU>l;(S2fw2b82N41Gs1*J2N9j_%sLZ51di~dw)tXc` z$y1tPT`|iL@b7W$=r;%ig6*Q#o-akOv9uinCTJF(N}Tp!8TVR#+dLkaPz{!JaF&K+ z3tsH~)*1srX4{>zT7)1>mGDX=*qH(gpNBP~#zLnZ1X6!+d>Zzf^kU)2yxpWxm$|s4 z1epF$ccv@!j#O1ue=gWvtl^ngT8r{4ieK1&l|l)d5>nVlXj>U;64ZID3WA1aUFT}2 zjYVT&KBiS;%CE?5Id(OJs!sdpwk>r2k=jM~7$BTL+v3zybrCK0`(QB-oX^M!q%JRZmqP?K}#P zj>^0SlA+qXe~C|mbRDLqq-y@g$#4kv++B^XC$)STl|YJU_4pqDq$l_~TEy}9%k|!U%2{!uUGq+3`xkVzORTtAgE;i!%QtTn;ChhWS zS#8EhsZmq=0VtD6y2YI#>C1 zU;7gZ``A)Q^+9R&i=oo_H?(Y6fPVNHz#{x2%kDn@b$<376VsjxOwvTYL!Y-J2+-M_ zMcqKI6tIBqV`D`hRU>S*I}BT}IBXZ(iwE;JxO4~&znVA_8WYM~I^>0aB>cQbB1OKHsf^qu-oUc=E7s2>~t=sm%j*h7f$UjLbb`&Y|HuHpLPV5wKM zm=xd{eDAKu3KetzL>7UYYiGLYn-DyW>%0%5XH7JuK>UeMp)jx9hdJ- zP*9ML?nkx1Pw@_26KOuMXCwbhbJqL9gioyrr(DRFdJrmnF+}udWt*$%HHPfVc0%$A^nDSD;THz(xT~7@)c3k)n1oIljx~NS6cBTNsj) zlU3E!R$TaZa)!~75P)jqKo3AhTv;BeKh>$pg(41uGCB-D#=lT<63=(OqIq`NYrq3=RS<7s**OT_gTTX1m39qQg%GwL#xW=ouIqJdTWO zWDz91*{MeN1FW6Y!CPDq>~x0-W&E)%l$lDey0^ zY&BwV%o7V}tR7!nw}~hC@ZY|D`^f8K{@^6Z+;8Tfd9pVI?X6zH+*KUD{s)h!H*EeV|x^~_i;?2F4IF%om2ZSD}0IZgywdf{) z!{s+zJ1mz7QloCLboJq{`3<}l{J$R09?pWN9aa^f7Q?yn(756)PfN)`7c<{@=NkuR zA7k);Gz0F(dGmEtSzQmH4X$UQ=Zgw7g|5xlQnI6&$WVg|GgJe*tG|5me+8gYO4}hS zPYK2WtrET*m&A0f0r6MniAgUt&-zD&D!+g7r*)Ev3Y|nm?7rR;aRkxqOdpsEy}h+U zRqw821xjzbFx!9c7vkwcIVe!#ScdME5Dv)eJSjn=4G(FglqNnbkf1?{Pg@*7ZsD(qTA!^qY>s`0M_~^9B~gi5ixtUM^FSj z0RRe}QNFHYCSF@0m2gsrN36TOKHi$=G$+YjlUFaLZiO9XY;PI7Ul2`qc|41hE)^!Z zuMyw5{5XNh!e-Ix<<3ZsL6DSarTg?Zg1ve%d7Q3Nfq{x4@K$2m#9$@u>#0yzDEG0{ zOn3|-6z3S`26{U9XyMZKKw(FC;MG2RMaG5aL34q>(d#mfrv2-KZ*=uSVZGn)4}rJ6 z9~V(#$?A-wp3tth=TI0jFTlY)i<1$5r`pBZXYam?imEO)J|K!(#bMqp2R#RZA?$(a zOo)5a6&*Ol73S6=UlIpqQDx>7-Ub=}7G>vfGtRF0(x4BZ_w>;gj1HAgUuI5jB8fqr^q{4v7>WwZCe?LMEyF;=>t%hW|cA572u^Iu!e@{)HJJ5n^b9~#&^iQjy$5+ zEfuj7gB}C#`8W|B5b_5Ps6s~j`-psdy(h+DI16pbq*TP(7raDB51~>A$2M$)I`pIe z6<`UEyHJk?UP?}Dp)mMx3)gozO2Zw5dp;9HWJ{nPX^y+u6j|+4EVn1EJfk`9Q?yDi z(7V$@bOy#BX=^>h{}I!T?R-#W*J?#9`OPUGJ-w%;)K;#l>V(U*asBw{?OYxs6p*@0 z2}tGK9@Bo)|3;}~tsw}6CjhAp!UyGepnG}ivrp4|-FGTjt+z5CKmOus)_d$?7c=nR z<16I=Smpm2Ex|8@^l}@tMOJLk?fZ{pNg577b3jZ2KwaY^{1F>tdpq`jK@NAv<9zaH zCt;RHlW@RQxYXNwcwBM~m_Aw$F#0C}H~THH004C--Dr4$oLpdTx8-@PF!VUdF&7qb z?!Capm6Vo#22czDCj34-^^p_n<;&0iiCSP5bpKBa^S&L|{o}&?{YUXXM{#}o@0yzO z-v-(A0jjUpHC=rox|p)&P{X~}b4as>`uR^WOsSO0{m@j%kH z4Yp+*o(j`j?#_L`T#A2v`n*%`SKt4AWXHb@8j|WI-$rU4s ziD03XsRl|QsYyYn6I{Tmmrgs_0haR8Z59MeO(E5wCpL?G<<3nzaR!LoL}oqzH1+g4 zpGhjUL7~r{&nm9#oSF1DM{)nTnv$JUfo?g!`0*z0AD>qn?XNhqzgRJOdTf`9=dU%3 zmU1o4cYZYS^g5usYBkGxY67M$ct0Wh=;nWAQ{HIV#;j6H=l*%kFL>F-&`Y;6R~gw~ zueyNo6Y7q=}R1&@^gc47AcErswOh6kv+h#Sh#Nb!$)Pch9Nx_F8YPQ zn|xYzHXrs8eD~GirMbeYpjWRKY>8s!)A(9C|6*rQ^3wDMi}Lo9y}ETN3+mSHW9B;R zkovLVXnul@pFe8t86{k_WPpHJMDZk3B{?u?9dL!Om^zD@jBZ~{a?mgfQD_h0FzbisByd$ii z(|vd1Vy}=p?b|l$%J#MfPg}5FInqV-As73U7fCu9Jp7w{iq51xPA>X?zprxdw#zpX zZzWZ&HFcY$viGou!yN8P&!xIDFCQGusIB9zlJ-|}cVEM^HMgLr)NN*=D@3epV@| zX7@_+nV!?EyUGqBsf~W`=E{|=o_uj(*mtiv+%^8dboyMx=7rax&duz=;LhFucH^wt zd0%6d8IG}8M^xInf8 zQR2Ruug$B@oX<7jDxE1nx`Dl?vbDm3$^EQ6c-yAQ89t~gKSx?FwNhPBDD z;>&%%x?d}1ZSwgW@bqC#XC_15hB@3Ee$z$oJbwDBDu~;8?~(rVuL6K6C7|B?dcwwQ zKT4XP-if}=m&;aR6<2?pgW+#{;J@_bd9p9lDpqnWc9@_Vb7zssk3vUR1G@uH?ugC2 zsmn00r`@JD`%?SH-#`6;rAzd4^Yi Date: Wed, 10 Apr 2019 21:45:43 +0000 Subject: [PATCH 176/349] Deleted tvm_dashboard.png --- .../images/tvm_dashboard.png | Bin 141968 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_dashboard.png diff --git a/windows/security/threat-protection/windows-defender-atp/images/tvm_dashboard.png b/windows/security/threat-protection/windows-defender-atp/images/tvm_dashboard.png deleted file mode 100644 index 8ced6104f111f5d087015eee16a89995c027a882..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 141968 zcmY&=V_==#(stC?Nt>imW7}?Q+l_5IY24VhZQHhO+fKfnKIb{-{eIj#d(WEXnYm}y zH7mg~Qo?Z1-=TqkfZ#+$1mu8#z=VK+Knozj0Te0-{#L*rC~FZ_J0KwV-p>a(jshMN zK!mUtl@x^70fYWZiV1V-d-sQR+d00 zP*2Kuz9;g&ylpR2Y|4X$s(D`KjVQ*q#0L1iw00k(4`Ye&RGPHNn zu{8kFwEp;HhxyyMiJhLg4uI7bsG+kq0ziiRBrEIKTAElI0d->T2Lfmi|I~M|)iVIP z`|v&amyO@b!otAP9_W5Fz5_r5|724zu{SpWDm#i8Hg!4bSw&zgv{@ox1Hv3wgt8Wc58Sn&yI|UK!h#!g}Wy1g@fm= zruBt`n|4^rw^0e{8b^1hg`bdkeu#XZA8+2$PRjrLncX7tOW=Qn@nAy#;p2mxvU+lG z`tskOc+1--CnJkhdKf&OoK;m-u(;f*nVCO;OifJ-%gXiu1*m9f@@i_wj!odA?d1Q~ z3rZi}*vLp?FtVNCdZ0C5q-}^Vs;DqpskboSXiv+}&sRE#>kRs5Y=8l}=3ea#+U8cXv|e zhnyN=VquZj)}8<~($Yc>m;;IXL(7K2`D&9Enb}A@mHAS&-~+?o;dv}dvaAUh8yA8J zF4LOM7M_>?M$AUIyt^YJB=ieLA=%y`(5~@E%qB1#OWv!?gzRi}xp};b@G5;t(x?K^ zBbv7YFwtp${rv10?-`qihX<+=8czU%kcf!RYMrwp!EME&;V7Qs@2GPCBc5JUMC1$d zJV`byKRPFe#1p7sbiFl}lanj8O1Y|cx!I3OOf+VZ1R(&7TX^Ua129?c_xJZT%`bp& z4zF)-Pkl6=ygz^bEGQ=-BI-M5KU4jsKM6z}0jYl-^fMd6g|)1JF1e5~g>3lHm=^=p zB`-ByY>B&ONg{7(@#y5JV>IFTa>mfkub1Q)5f#|}02#q~4Y}bq zILI}li*ejv)1}iBU<24T6|VJGwd zb~=zDPy4@{tQ6PR2P7wdH#KwPQ-_+eX>V^|b=vSaALF=YKJR!D`aS-&>a1+R`K)fi z*-Rbj;J4-O`HPiaE@oHMQjL+i*LfemiG)6O>F-J#*7b9PQ7NGAq}2V(U>htQ1smEC zFk%8EaL}0Pmg08JLh^(ra8U4*j;7rJDhDJ=(=k;1o~&mP8n_^DWWp8pBwstGGdh-p zw-Ix2(-_+Izgq~6DZL<}6)?MrAj~QomJ|ydDrmj!>Lcc&m!x! z_kM}U$IlNLtSQmQzd|+`bauTAlw8j~#4yth1qDUK$QTUlYJ-o5 zhi5s;7OGARe;{^5?dY!1wP$Exdb0=3y<8PCP0^F&JW|Ol4h08iu-zN%UEmYtrDQ#V zEB*Ogwt2a-mZ2n8!^?f;#&~%Y2CqTMEH3_YIb`C5738kG-RHb3$AC@ z2+xm~T<&+$h}D?RI?pxD5=UCgtjDu~p!924e>Y`@>8qQllBJe6o+h$qx^?RH=`R}? zVdiYL>5C2d$oC09gwozY5zLE$O&4!FaaplBLaB7*T__y60_*LsSQeu?_Bt%z6G;r; zS^D6PYm=Q^D6fdhb6a~6n(LVt>*iuJuI`h-$Bf`oU0#eNj>_w+XD7=CY?01fJq;OU zm->5FL-7%C?!QYa)T^SY9|PIt-D`!T^U4}vJ~(0svgbgpuCV~v>RrO}#R>wmG0x{VBL z(-2M`cXPa62tj< zm)U_eM6}~hP(^I9Y<0@`g^&zy^L4h$^*eDC8zM!|V?l(`qUt9i5h=|m|-n_vCD*hUea-3cov+jG`uZC1X6%EWg z+miBn2WO3V3LP7G1An9fc`pR$+H<=puHVF5ovk(wr^8PS6|K+YOJ1J-X9eAfcV_~t zF6B!(tDMnY!Zo5P9|-M@p7>DV86*R!@P1#nXfHfvv`E?hAStQ6r=9veNuVk%C$ zn}2O6l{?6*1EWjoOK}$-)o};kb4D}dO9qgOcrJ@;BTEY5FBggn$&!CHy|}KM8`3Y{ zaAEjUPye*3ad0+7+HIab2H%479P(r4+GD9V>eyP+$YPIs)-tyzR;0Tm;&PMlVft%r zi{>;*(Ve<@m4gEB%YB&V)w*N@t>dZ6gCQ)=U?+vP&G_8GLHqV_r;p{^Sy*^DxU0wY zoV_C|f1_cLH=PCjRv(9m^ad{-)Mz~p$2lyF=r0puN;!nfrY1!~%DL4=15_QY??UGq zD~NG_X7k{^6zECmt%#aj%hqTED)Zt|1dHst&BxAk0T!exBc6@}xH#e$zHfHfkV3^A zY>3GPDYDXe!uAx{2a&|ITf=u$kIG^mlA&K zPW7`!)cIv*hR-!$dM$&9l=z8Fasq$f9tav}{T89Y5%@F%$edx>(`;isU6}Hz=mDbyKL( zvD7#D)4G70deiW9Z)>YBmVSZRjZDwvFA})6?`A8r%h6}M+UO%^D9sgyXGkiJ>H8e% z2d_^gL2U}+GaeImo90w?b#j6eo9eA{o=Gq*8I$hsU@bHn`LA(Sygezej~8K@D@vKGhbNw!*$e*nSvhwc zg;BLbbNa&i@~N~dM_b8xp-aj1_sa@vPWe-S4 zCAK=Y--U95XDcbXszBWv))=35X`wW1{pnNNHcYAyKxo@$Ck_$Q*;7uVO*MsX{JG6yr)S~4SclOhUjDP9sekG=i zD+1N=h0Wt@lOnr|+bN7?4i(iGqZ9Bd0hUJRAbyF-+d~n;KQpQGqtUDv39r`)!#wI2 z(E$6dns4TsATVKf3&k8cGC{<07|K71tV89Gba0Mp(GBpA{%mo;~Q-cWAMP8r;RwX-1t6 zZH3|*oARfx9;_A8&^nWuTbxSFpfM)Y88nb2goLSIGA8=;lX;i)dN3GC{X{DQZ(h=* z9kjBidLb~hGsgTTW%&5zm!A6Y-Z>Ni+Vu9Y5%{QURD6BoXMQ}uvv}TtvW_&!pT8$? z@qyiOGCW7jJ^1+C_Il3PNfz$@Ocoe!oWY*DJ(wl^q>$$L?Bv$cUN%iahCqky%4~#c zpoSZSv9A=V7MsPHJHu^U=f1^~PuJuMagYSI@ zim3zv{~#JOzSyn@N6K~=eg$+(0Yzws^`)aBpJ2ErkSt0DTQpzql30&fr>R7Q#5a2u zdJp(!)wdH#B5{x%J%5(N1EMe9ttE8H4|^291mv!zHp)ha{UL8_NZ`DZOGBd0+}pAx zmtklbrq?zjx^sGogAt*E;m-G)5K7$q6Rf_lAvsqc(+gpDBdlJphHc3o)fE(6!+1rT ztz<~zrpF$1PO{%-)C#iuLbCh;u)wYk*NSoVMnQC8LtCb{il?B6=UkE%{SJZAWCEtc zj%>=ghK=C?(FlUr%XXQ3cD_9RgO|FF63e_*2Fagwj)!#VqcyRluIKODRr_r)XK}-J zAo;1388mc@u}qvnU=_q&n$HpZ$(WjVsu{$3v4vd z{YYx&ELYR=AO5g2mfU$KV-`m^u7K-r zDj2J;jXgE#%9j6{-aI&HycgmzJ4#CZEq=wTea|J`>mBf%pqO1m_qrg^??$q}JyD^8 z(8dPyOI^L*Ox(69i*bdmm5;E#sy*o0hw{%+EJ7gNJJRaF+9^ zkF8^~!^9;+$@LQ?7_!h{qus+@38Qd^|3_$Kr;xdg|4;n>2JB175SW6g>6%>fOl&UZ zZb&GL%&InQau5RaiuK39+4>sck-hKKU;%~NT0KFKg?sur`*v;22snbj4L?-e{QThk zcU~47F2LZBT)A}kFotacaj2>9>jHoC2Toh_sb~BW3WLfNqk5?6M^yhMZr9pr@Es~s zo?{CdP0jcU`)B03Ft5)ev%`L(4NVJO(6f`*#Ka#=@9)fQx4_z19)TIVEI@F(AG_G$ zo>#y$7RA8dN#B<)TpGB8FgZ%N7a&j;WlF$z_#qorhJ?d!+!coUfE+rfkJP?{_%^lI z9M9y-d~3Cf{RmqeEp^d+^&2QJle%fSSRKaZsT0o}kiKY)yLgrIsGX9u$aCKqC!TiQ zi0(QC8++@Y*YED>uOhafKjd6x%$Lkpd&@REvC$DoTBC2czFg^kj-0jkGd=MYK~aUc zOUGAO8m2SI;s_CP2GLh{Ew7n%{gCnK)rWITq&#s{dj|SS3Wy_WdRP+;x?>$=TrhqE zBv)bcHcaK_$6Tz#q*}gb%ORQJ8KDJ-|4F-BS0Zzg^_a)}w4XJ80V!`n-kHSGrjmOs~5vh7T+^A(R7Usr8ajwI9Z2QkR!RpP8F!ue(2;r|`Yr&nv58_`#)#p`O?>xcAO3Bl{&L?&mM{GNsn~82pYi zE@r_8GRj?hHT+;$0@GbVXeZv<{hh)j6HZo}!s`)#=^*?+k$5C*iiawbU%1H>h|`PP zg3dc%VghG%m<}49d7->vG3jGvQM`s|E-FXmVQQUD!@gr-d>ew>;(krBLfj6^3=+JP zy;oGfmc=S)B=+v?gzT3NkufsPq(?7=A+TIFK2ZlYHT4-8Mi@>={RIMIR>*bS_#2#@ zB986&JLZqfGH51%N9U2*_0-Rn=>3z(TemDvZm7P2#h!5{KdipIU@a%`JNZ-TBcX$i zjRXvo@9}-C!oW~5B(l&KyCmyEs{Z#MGbVN*n|ygU@$(8r7LG~%;BBCF0pxYEG%U=d zW>AiG6nYm{J#=Vokx35YfeYYfVDyOWTkFcLeP#__3^BspTynBhxa> zTEhHjsm{L_KQv=)t>2)Q@2>kNZ)`BwI6uz3(wUG&?D9|JUKl-YDYhD=;idRLIO=+g z&rczucZ+N?)-l2dZyI8?_pD-dMfR)h9Yo=QG0)o6qm;}hFOGuD3!57b=h~}{Tu+gm zE)T=4Eh`;K(C5a;>gSW{QMo=~3ds|}q{Yj-nvf8t(9z6Eo$bD`%petK%qvOF_zK*} zZ~=TB2T18fRswy+&QmgP(W4_N=6F0Bj?hf^hzUXlD$s69gs=#iHV0-5d2inm+O6@j zfD%X13z>ApwU<(R&?8fv?$OmIf!j++(KTU?#T_>Ur_~3|{<#I)Ca6~ke?-Pj3aQg4 zh-MenyWt{v!_&1PWkm?`*oFIKLz2aZd0K$ICQlub=CN3a$$isk16gdRb{*o5TSbf? z%(U&n#9`}WZ-V3qN1xf5^*>=I}+kxyPu{FztQ@`88by6FB2T!;0R0679DNEMG^yL5Yv`% zS36dZ$~8;oi2WPN1Z8uQ`Xy3eRswmb<{rH%b6nfa231z;IK%CH`-{|h)h)M6`auJ$ zpa!S@5gYRMT4s=t=GYfVbTEf7M&oOv)0F}+vhHoZ!n#|nNe@;TVLg6QR|31%itv7L z3+iZ(^MmQieRPwY1Yu1AxGcPSGiPg3{;7L&Sw&?z4D@rM->PWE6iu}DuzDcWGDnDX zlNL84VVh-JBmf&tJ#ZJ`kGMQp*e`R;s@fXi@nQ-kiY`c-U}9dl)!TkPp-rGsVue1~ z_=00NKBkAxY>wX3zdFjb!9ai7+j4p|_i`esWYN~Wx>h&4uu$!G{YoSX8F?yP}Qrskr-kd3{JHoS$MANPzD*n$}Fo{&Xc~NgfzxZ4ZY; zzd6xTL615&eax91|L37yTxD$DGU)wJe|AZR&@SWb!W`k4DS^CX#QAR+3U-y0brVff zt{~WTT-XC82B>8CTNN3N<*^vh!(iVr0wpR-Un zZk;_E6G_K5V!yMfp%RQxbp8{yh+120_>}tt7*(G}EQ}=B3e&o!VZ23GN@s>oSdrz^m z38~GsZ=uc!mq1p+HYMfn|9}cHTS#&EE!=km#vHqwnNxPg5DPOPeQcj!xU+i&1B-37 zv@Wwk50wK+9NMTvp(s4|C9|r($b5~tf@A0khQI8kK+h^|YGa}KY^!qJBxlR-`&lKn za8A}Sp~I}rwKKui%rg5oaHLE$bL6zq2uwrw2otJ{n}LtD;jMfT%XIFv6oN6VjXU!E z?&b6HUxA?-Z3zuA+&VV;ki5Kj0@Uw*xeX81%SYJlX??wRPl_7L4+P~1a9c)h<2RxK z9^p};(&IG;MtFW&9|ZTB#rPjh=VEf-CTKHg*iOqrCvX_9G(3S2T3-=;+;9)BoUAtY z^dOuq?jjl=)^V$z>p-#Gp1{{VUTyBdxqC+t!0bKL*;>17$jp*r%Xg7V=V7sp%?!S)BE`F79Swt;4`^WJ6DR}*st0xf@Oo2!lRX+QiP!PydIOM$-D6THk{qaA!rSc4TEeRCf$Yzj$_c zwh-URk~vEK?4ZgJsy;r4+aVo zOz5rFx8{?=>Dh&pv%}i6<+I5O^^}!Btp&P)w>{3;UYnFUgT=BO0FJN}WjlL z#k7cK?DeX;Lfz%^c5MF;*uiQQF+-QBn$X-=?~$*}GKOhXYEhuRF~2NV06SG=+1^y6 zUAySC>V7lkej7D&c#lKktN?-()`xwri1-Z+LO8;eRe>N;)+TEfYYxWMnO6nN2J1|a zi#hKv3ZaJm7=|D>vd5En&iQ=K}GBF=U;52}K9h)_S zj!biIp>r^v0ka9u2s%dUHEOtaEi|dPy_&@u<7HxXU}fPwaxxn<*S$RwNi%JwhdeH9 zW#BTdazJn$;uWyf^FEl1{hS zJ(&P$-R-ND6FQ3}7672D*?*hd;n=4RMcG1`u?%mB7U*@_#dd#D@&at6peV%+*T?IP z`|Xsl2N5m40B$~}IdZlIGP;en6;vo`6C+>Y+JT7-|E*T_L`%BUZ~Vy^P=Xj|a{y$e z{t)jm{wE5dT7MpD-h%YFx!4Z?xFBfZAHCv839O5)MPIGfKz)1NVVM8o^|SAgqmlUo z%F;t0B`v+VvY@735uV4>n#?Mr%3cRbzt?I0dVYj#TIo$`12PmyUtb^b>mE6V7iq&f zkMHKhhT*|hyhq28?N2k zpnBxB9zVKlt6Svfg^u?a-tc4xh( zdLDFi&aQHMTaTQrcYnS%QmR@5c=0FR1ZMd>YPWZaI>B(b_>8c8L4ua@iF$r^bv#=( zcw4IhEK3lzZm&X7>qVQZ#X>8N>Md71WFr71Du1|J@M!1=M&z@P2khbaMHMe{R zz^gPKcXP`B0IPBEIGlr%S^TPv);a~TAM0)xSMM(uE0Qrde{ooB9#4&Q6#%ZwVr*%- z-y4jwrU?gtW9tBXT!5*a+}SpmFLjqxup=bi?$zUdBrGh<%YL{vwV3_zL-gowvOC~D z-k16}7XY2pnHB))qQg$Z48_IAe{*T3@H?yoe4*BC77!JMqN1W&)5Hd}Kga#Fi}D>4 z6N63{%*V$EoBU+EFQoNpKV^4+|Jd_<>BP0=PiwjIzsUXJLw`8-$b{Fs9RL(use9cU zNl@+Zd{2KLCF%DGd zzilFBE2DF{GR_o8lQ1*K1EBts5)ZR~!2a1Hc>vgdvt*PpwYYewlyt519Uu;W^9%TH zp-H4tFI|6|xln}t7uJ8K`oHaNME@Ve|Cx#(pg$4f?P^+D>z@eu-~MmqnV6Vx#&B_P z)&Ai0DDm#-w9L6KVw>YtwvbO~F3gh=(V>6$zk(!GU7H z|E%wnI>4gLEG`b_|9uAFrxq@WZ+D;$Mshg z1Zhnmeb#MDk$zhk1H*hh{f!UA%kzxHYhvO!^Xl#n$^0n$;lQA*re;j{(8%%z{i*69 zfNt!bt_`RGsTo@jD;sLQ`0WeY5nlGSYptMC>Ae>X9edj!Z@2()%5Q3F!ZfAyLrlkH zw=dL0)b9_)fW>C7#WW)XtYU}RWzWRG{cJx8W9(+etDnzIzKy{K_rVu;_on=%i06uw z%ZG;n;eff%4Stgn7l#Q83!C-4$MCW02)mdo0RsDYJ%B~$NsnJvbLZnLe448;md$8= z)@thZZrI3YCWp>|LV<*Zjn!e|3&OFQ&K0$kMB%&D@?3aCs7$dQL-72m#|x~?^PUL2 z@tS|m2Ow`23`pIm>gfgEgrQ0W-5I}!+?-!bK7R_xl#L`6)hr_u-Qa0N#b_RC7GXkJal<5@{?`U;n=q%Cn49#kW^b6yBBBp=lF2s` zGsOj1tk@sWHJ}@to8+su3x6(VcFI$o6K~DZ>KShop8ERH{M~2v#oJUIg>vKTUP7fO zS8N=c$2kkY;y7(c&TREOYPeAywpv(D`dQKcy3#FgI%fxm$6EY4_l*y-;cTg9Am_G+NQ2NirIK- z*T8^q`{-X`jI5}j0R{#}&(3*rGA7+9ECP;gn4aal0`sxk-$X$b*h%MNJYC+aeeK}q zrxOrHK}7Vfs3@T6L;W20C3QzvJGcA2BG(QC1lt#3EDwXrtzN2zO4A`^p>QlwV`EZK za9Cr9q#UpI;6SZw!#F^81msj2rB763BqI06d;_HG0XBH?lTh;Th>7dgmxK|mtGm4$ zE02)DNW_24Yqs!Zi{&QJI3r{AL3an#9fJOKBwjNEPOEd&hJu3ib`GCAi)HV^f^xvr zKNITu^=q@!$Is8t+GdqiY$BZ~zc9#~8M%o0`B5f5^5~O zR%-j3BR4vGY$7NGWJSe7S_e64P&Ju6y6cSOe^SX_U)3&({w9u1eSHP-@ObR+1ctr6 z>zbH|nD~zQRGS4{vjj^j?GFnM>gnl8=>9-<9szers=6F(Q8Gw&Iw}cRFFXO|o2x6l zA3wa!<{Cy|u~;K>kdR_=c*dC&6=9p4k-S6r1FXq7v2GIS1OxdvAfHPXRpe3%SM<6LF3H12#0+1y@;ujDo z1bpwrgtY6Q&+W?=p2A+Gc;f%GQ(M%yxVYf3=-wS2JOF-~bh=T*GX$lq2Ts&)xua*ID@^iY!XdEd7Bk$}7Ta0yx}_14_; zv-T$&zz5rw{gq2=^fg*o@h{=?!^2;n2j!n~z!W?7WFw+T)?Z@>b~x3$rg%1b`DtA0 zL;usj=iXeB(q1oUQ~i>zG@>Zv*jsx2x2_+eW?xRH$k{=L%!(?&p8VUxp>DKZZ`>=B zLzQfxjYi-%-;h>L(%e1{Mh z_cZg=RZmyjPOZCqvTJx5UPsT#EpwXPr(_}m#TpbuCMGTpcc4~}G`GZaiDE2~1rwH! zpPc^*;vUYyA@JaP|DI2?G5^eIm!9{_bU|UDWq2vJK5|rUC3aB|b4U&GtUo(NL_JZI zjC7@ga%gLZ@ta{hNEPLBqCbb=z2P42snYUqIjIa_`}&167j^{*vlNPbPId1dOPj<3 zuT#vwtGZ52%oNzIFk)q(UodLqamx;^JbpNCdPnb4Dy0E(0v%tjb$TspDwx>#es^o%6PJ`0FCf(kCc^%PUF0_G8dlw2Dy4es(CCp z_?xB}+&-Q3Ye^G{23TQ`dMagZw=I9hwd&FnM-GxcW?RNDyCoc~->gIX7OfJb(ji)! zTiDyzNQKEp&sn8cVk*lT4MTIYfZ^YwQc zW980Gugy_rEoANfsEkxj&}Ew+Alv$^5*}Mbn2-CoWoA zQiYeiDRy*@P|BihRH`YPzg^ePIAAMMV^(QF+0fEui}S74qG>#=Sg$36?F^OB+k$cd zCj4}~a%2m5MdduMH|f6JCdObejCoW41P;}0q0Hj8yD21A&=hL^O&7|243Eg5bOw3e zBfrj~=^XC$9Cl&AX=QJ>rhki-W=!L}_F_<54~&k4y+S$h zrj)+7pPsod+I%J)*^iWz^oJQQZOfWLf6wonNC z6KgdrYgM^_S-Q-OIhT}rW4_qX@+MOR0?kY<=Zm~ztx;QRUn>7pe|E2N`b&0589 z3+<(Q-!iNaTjo6#czg%VFY#~XHQJ5hY(|V0CTq&cCIjQ~Zh5B`FE?{L{Vv97=Y{Me zh{U!0m*yjCs)1^3@N4ob3*UQZYSYfyEZGpuPe>h_f#SL~#~ozH(IhcV%7y3O6q1Kh zo`6ItYf384R_(bj%=z!3-dKv7B4Y3)NmWRnk4E3l9E7XJQ4igoWD8mc%-%d=W zBj~F$RHa3$`L7oN)Ord;Sr7*0$#Ov>&e82hcz#1kKp8zhq{lF9Bbl>D`;)pPefk!YJ@zlOFdx1@?J;% zO-{q96gOC7rk~Ztqx0zlEzISu*1x4LS;5IUGf?Z62s1XUe-$?@D#JE!L#?lJZ|-3@ z*E1p$p4sUm!zjIpF;mt>9#3Q(9=JJC4%gJ5+q3vZ)Kirpo$@?|i~C?=%2@Mg&|Cf_OA(2L^bNAfGvOqyH!VRZ-2Vz{p$ zr#?r~@>)N@9}wtJuFudUx*FBULcva?OVhVqs_O`yMISkU?}Ag*SK!=D&jy(cW9SY2 zk&HY)p*I}M9&2K62O{HXzRiJDU@zb!>MfmT{W&Y0PnI062_?iCp>hXM*+}{4C z2VWA0)81;$No=iL0r=((-f9rZ2(sB#;&q(yIU!6{qZNHj!`xfHs*04f z#i(TGn3MsZPv>h@+2&6)wdxeC(l<*(8+U4P`|A*eRC1r_yHTe>?C3_qg{<-`0YTRi zDQpS~!()l?s)hi_m#`nyp zHRq8d{}@aO-AU3txv~kP=C$x-y7Mwl{la|KceyKHxG1pT(yQOoM=Y_-AZfEMZBrAY zYV*=Kl^#Ka8>>pV*dJ>(+B3e7TSg&PGm&`FLSELwncrEH<=C(|m0H?+78Z94t4v>A zSkFu_uYGP|T(HED}RHUJIO`_fjjVZA=|Hv%H zG{WRBWOjoZ?UF{MVYW3^9?QiuZ`$hNcLDrq(iJ6bj)#0E`+QhJ=ZnVk25qV{IY-;t z#crS#ZAi8_D(2vqov>cn|c{3eXR5lTw|#I@WhQfpNF>dTnuQ>%qm>fD-=-X*h3 zXPp5f)n|dkwM#3#>M!|mw&pLzbzZKjYX@W17Qm7tF1b$W0yH8z zQu)&iqDup1c5D$PI%3B*Sqwjid+rtkM4Q@ibgGeDo*54LH!)R3Wln0JQZCjult(+#r4nQq5UhQKv*%V|K&FxiZWhqUS?&?>XrB>{FGi_Gf<*B8igx@ia>pVYo5|3#(J6BE zep&j&bF}j}o>ei+uxfLq6$6{GoF8c0RC=nELlOsOT16+dsVB{9`&F=3s@WI?^6_u5 zCmf7gq|t@WgH)3)XW_|#20Q(>qRr&1xu>WJf#xm+6vYI7 z3o0?{j*SHZ2>C8>WtIpee*+L4%ZYR@oG~7=`BM1Ove47mr_u;V=MorFpU9_^v+FRz z3W{2{mr(i%YC}t{!J;SeN`ns(!!#+rx%y!zR}}bR3b#5FLHiL$a*Fi66gzX^)Ydu2 zCedv)E5k1ng%u!5Bh{AT;ryEef|w>F_RbVis*cb%3kj?Z35N^qtsj;r6ANuMGtV`E zsQQrHgZ@|KL^4z5=<*2f3-LFnKyIkdLEchoVxk}YNa*r=FQeq}e`;ACj=+D$RQ5p{ zqQe(3vKu8rY6-e+N2RikA|Y{Ry`o+>&lCWOSr#in~2LMx|-_ zf3CdQXH=ht?M9EXAMp{a5(4gNv8#VZLGcbwRP3V2Bhb)?CF&%9TXIDZ*FtKzE`iL# z`@GKeH=;c()0G<{lQ=t9yM+Y!47X7AT% z;!}}F0h)V%cjvbL;nLORzDIC{{%=J-d!7miAU)9e{02lrt@TDI zDm068fD+)X-j#GzzIEyhOQr7L9?hhZa*V>*o&TDRqnK|Buvi>u@N`G<=>a{9$FaF1 zuY!ZaE^7E^TAy#?Ko=}@sKzVNb;{?+gmY{W&;GYndRGvqRXU$36hpbzm&&!)1Dq70 z^^6j_lh_@j`IP@&2ZWq*;DiYcRRvrMe8ltd^76hgSctB5hro^d8kwU0b7^Z$;3@4i zRqemacqSV!DW;2Ga?{*`pIvbM;{n?jPpQ7$pL>Ovri2?3^8YqaRiD`J^bT~7x716P0>{hYcK$+@DvmZt)5>?8ukb>-f zjTEOpsm*{0BRYB?@;jnN97u~e^yeyOdz9kVhK)FJ;6=LpL2LU`icXFDNVefj53}(w zQ_36VjoC3GeU34}y5qYV`H}IubH@wY;<{9yIW*`-{8C-~_C^--KQTNs&;ZACP32Ug z8Txd76S&l`p>6S8Gy~n*6>uqcRXkXs9!>(~UD+Ez31)->WLpZN)Z3Q^qm;Q73b@6_ zF{Q27T!LM!q*q;%U|gTFgb*@m2+~RN1*`m&6XZfm(<-hy&lwa(8UjiAL6}H zqL@K;;GP*Z(44=fA!?DhaRHp;+-H!mf6X0@iPjWSb^K$vKDX<`WK-n%^t_UlHsQ%J zOYgAK?SMT}EiWQ5ls{_Y=78B}lOjJ@Ze4L!yGM4X#YY|4()(_gmu6qzXTyOkZ*5L3 zUEg9I*nK6Oq*=V1{bL3iW29VzFz@aV|Pn`+TwCaHiN(<_U7V`y|Bb3t8qH$a2}W zqJnV-c6BS}CJ;Z=*IKkqk>g@-iI z=h;C-1r8E5$lL3Gc1W8@>KYyk38qnF;k0Do4EFDnw3$d>UcdRj@Tlmdg6*F&AEb!Z=lL;*b>wD(_~kUbBL1 zb6?$MaeEgV*V%)Fw%%ousc51$IDL&Q-?*f$-eXPCYQDg72AeF^gt}8Fb-8KpBZO%c z75vA#-_ijBfn{kM2YyV9uLwj1g+Qb$p8-?)c{9sT-tv$My?lCkl13db6nKC)=WtRm zaRtr+a6^8$f|Z3&%UF%4ttTR52yzlF_L15LxG&a08Jun?Zr5VhU*9eww5UeI#Aet) z>eiOk;gK=qbAbDw%QK!VizEVK@ z&)4lS)P3W?3g=omgR%6|MM(ywZ`Ew%{!ik_Ltm_q-*(hg?}dntibrOZQRrDA zi`%omVMSNt>>bh(9huTZgg7Ik1BX}a`FubUKS-~Tx&ESj7^aps-3b+Kn9}_pQzLLW1=|Wxgf!+1N5_A{E!`Zr z5)Riym8m#ADI|B=4MxS>z3cK=Di3LJZMOw50(q#m9)l5FNZyplwLHCh38DVN44(>A z@EP7T{QNkh`bI|(l<%kcq6zmb^Bc^y>E|*|z>GhBP7n!No2jc5wrBPbo33oV7aEZT zbpz{;6+5+XP`#2rO z$@PUhW}JPi4%eWSc8s3GDY{i>c}_i{0qdPux2L0k9ubLu|6KuR0U`C6f#@Ip?(x>S zWOo#?-_y}|H)q-z>hWX8r}RGpX1|66PiSsm{#oEuDzPfQ`VnDtAR80DPi^B~W`R?( z5~ZQn-y^2G^t5a+Qte{c#;+nUrjrdvxmTv7HFiRqa{?5z_D8vzy2%gFY(owuhu~3C zb@$p2KL^oj<&_IBqE2MN6f*5==s^oAmQc%S#gLrVi%5gJ!)JPllD%)(o;_ zH%S?d>&$GPbSZYVHD$ThcBo`G2YM+~fY+*g9IhU~@x;n%eP&ixA2oz-qx0+)FKuGn zC(&I|Ge`^>0QjX#p@8(->i?tUTl+N1`fiY zmhaTe)%ALpEusrsDJEiG@e>a;)?Vei_fw#l-CHbN27}7lm(_Pw^jrTg?yk?IqcErxg zs@s-Z=Y>G@`dt#sS0N!Ga(|+ktSfjbI8#%WGN_R^>+V$Wj)v!x7-%{U@+xbo)*@E& z3O?&E{eDClq>*SA&+bpa(Vn1F0C>23ZY>u!xSLQoo_s1C47)8n_(wcpf8`D3%FaxI zEcD@_;doza!iUnkQZ|`+3k-hN_#pdn_qei?mWQVa*M>IefH?{B>MI3A@Key;ZhJ@8 zZ)iW6V#^BZO>0+}02@y3oi)6^gM+BG%O`LS`RI7u``o*l$EVxfeRzgiYr>cEp=y8M z+@=yfB7MxuzT{W6GERTHN$+~|as43pU~grWOdly%^x8fvt2gO>57P18H~Gl&L|sFzFsTkZyDC&#v|x+09mArE+x{=kizb*7N^)`HpG#+bI1 zTd+IR$tb9QeFV#3qu1bU1YFd)F0Mx~Z@QNIbB@d>Li$t-I{N8ZADCsXV?^gn%>shRW3*?Blv`Z7^pp`1-TLMg6mXGC!^72bRV83u{IK)WKtE zpApAMAQ(q9OkWa-%8nstv)o0_z!SjsymGk6@svYdvFkUa{P9H^IYh_5r!s00+i?{o zW>&19U)W^E4UrI|TTZVwBNP)QYYY|oqg`>*T&!w_NyzgtuPx_RVAy{qV5_0tRADn6YEqG@jG?G{lA1%m8?i#_(uIz&nR(*6S31^Vmq+#uVTa(j-G-&5{IY zhMW}ZNiW(PE<+75LJ$W0UNBwxN9OQqMNXX^-jGk`Rg&k#(F*Bu;q(T9dFEct?OpA< zAwF(q65Eh1bhL!+ zfmB|XEe9WAluc+(=A7@#XZ1Be)G2Dr)T;#GZ`3;lqm0f-_D4F_W7O)5RWGSicTnH+ znlR48(id8}rdWzWTVvV41{kEQ}WVZwYSq5!)!FC#zPDr0jduMJU88m=;ZlXh+f&FOU@fHkoK=yTM6qg1`chA~wd@%D`b?!V zd!$D3uOhG>92XdHd}f+zmJ-XiyG8eM^;RPDI8q+h%t3R)0vYknR>gadORdT!Rl6wQ zxamqUG_je{z2;=%_zi3EY_e9!P2CG0m3QINoa(+`OQ4>$X};A92znZ@_c%y;svA07 z{jOH+_QLPxqYd1b)+`_0JFRCHhrUO6nJ^fD8X|`TR0BcmUld>-&Cxp=K0>Im{s|hf z2bia7&+5@w4Uh8PiB!>!x6!C?-aru{a{+rzndfViX=TU2Z%nIO5MM_Bo$F_HZ+A?~ zLGIU4d$9BfyY{oW2gYPNFa)ilk}l1ADbZ+I3so~O>#F-Z6KruyyZEVn9HP6?WDgIG zopYl_)g200$QoUyuqk9m5p!Wr%wHy&^@L`>PjyNg@E06N*;y92JY6Jw8B{E>;Tbi^ zQ>^RrRE&_ zEnITQ6CD@d3ZJj>Ub5TyV0a<;khhr7CLUmuB_*CkaCYzbG2g2qadE2qi@XuO0%s*)DK_ zG~f9_+$SWP`^p8C@^CBB?OeU*n!t~+KyQSj$oO%6|YKZ^EA{^qB zoP)|!KZh)kaN743nxD{g+ zY+{UVOEGij8zGsjR`|{?{?e6Wx)%Rvg?4DoAVYQSw(_Vwq^Rr)K3X>~EAB2Q%4toBogW?jhq#vqj z+M52N3(5m5U4*E}b?RF=9tANY{h*jb@aDi6%*k{dO)f_HJNZ0%7$tDY?!f`=D*`@% zTz*|~a0s?kjqoO9I~2M+w-)Ml{57D>Dqr+nPIL~|qpA&mt1A%*Pm*unq}L?fJ!6Zn zx@ioLj_z)TQ9pv-a#$_rCf3{vK4Z@(xoKPtjS38fQTuPawU}juL7zGsWkK5pp(xTP`YH+eSBOc4!gHD<0bH);s^3o+=?VUwKMQEYT9a=nvx_ri23wfB6HDA`_&^(rYM?hCw%0nO zwiB|?`(Z3swgobCHh_$3WJnEg@g+5AF4XT}`J zf1@Px+#I=}PR#~DIEIaXfNzoTy0s0(6At&-c298Sfr_LEuQ*u?OUuBzuu4;s10umn zhjR2d)x$-lnUD0y5MqU+;rNGyY+!ej`-E!gLeQP?b#70yuh_un``ySpulr>g)xV1| zTPCQ^9{0=`lGD2nRravlvgW!2x$H-^NMS7rd?m1%F^_uOB*}o`{__z875HsF;O%f~Q=sE!uOaF> zcV=a#UW=7Fo%^DYX1SyNvT+L-uun2Nw)%{2$1wb9PIwGL@LL~QB=F|&Pyu9=s^zBHPzXH~ zvkfjhnUaRh?gJ$RIubmuufS^=Zq%k^hU)?Vp(885+2wdQAX^}r{&qh~W~vKj4P^Z% z)vA_f4#4GQJv2G1T;kN;XBGNqyaYdGO8|QU7H@Rqj*{aS`3WkMq|ijt8`E|m~q9;J7dRIZ`Hr5vF^wyM)09_ z$lJ}y!Z5Ux*X_zVyhDCX&YTF86%f?@8KzRIT$*=KXMxFPMy4p;{2GUd$Wq-&cZ57N zBJuZ0k=0u4HcvQCd_ez;CYZy9XJ>h?=)p1MEQ8q*gyh(5P~MzG8S8gH}d z@r%DFGr8Wv)kvEGk2_oDQfwsJmNtt2hZN8FCbXy2n{5^KHgF-+l$~DX=UGiRh7~pX zPx(KvMVJc7W*SVVUk?4_yb6u+8O#delJue(ZVN|K{5m8n4%wK$&=&cX$xOe0(pOvP zJPwI}kx+5P*W^BI4^fTRyn2U0^P-_k_fRe)g8M|Sw%8e&9xqJtoxRzGB&*aoYHXrE zSYjohM1|GxtzbmIy+J~=dRE(aC;pd4AjL89-M$*ZpBR4f=$++8DC&a7$pm8(J3@PU zYq+Lo^clo02b-5POh3xG$A0}|X>v309)U8NO3T7*Jk0%kzBJz=V;croe=9U(v9aae zaXj^oAX#GNC22&^{)n8{BPVSb(|2+grNVd=^ZuikMm@t)y1a@iy=`Yj+->qQb*n}y z@DU?)-+dc;-Ox5=ODhaEz0mM}_H|*aBj%j!WmN@gQQzI;$}b-Z4qy+oY(lh71b?5I z(?LcC;_4_|(kavZ_vYq7T7O@XvTg_t?LzHkc6H%nAErZZ=5J(P1re=A&6qbw)0 zmgi5Xl$)5vA92TL$SqEiSeYj_-%GN3j{9csZgl0!u%g^;tYu|FZn!73K5Nc5;Pb3s zu?H~K0xEbq4hU2*%-j0zv)=ru+_G{y~wv`Gv9Koa2Ih(?^6SGlHp&&~SZsVh54usBdgG6j_dDFiqIJjfVz1ug7|GcP&;|FI*XW;e zVqzl>9E;&%|IrC`_m&DPFv0z*wdjB^0sm?g3@kOwUYE%7^UTQT83a9#l$U*BCc`j!=Ccqwx~aKA@TKp9qPoG?S5ULc{iamEEJIL1l)h&BFl@x;c_JVR(QsJ$kG~fuRJ(3H0^=qSSV?e zY;00fx-T=BlU)ntaA1G-37efO6yZ>Md9SDMyOARv_we2%shVW5vL7wH!t@v_{&+F_!k5qmeW>19f#P~BRf817BmyeRmdNqB2(VXpY)x^QtOQ2A#cvXV?OIq@%V}WvlWMn`E!&@ z>_U@LXiEh?C2dlBGCTZs>Gbu(qT&KBiP{}BS?{ECpe3rss<=kKI%op1x~;ja>(h$= zP;Z+c$RqjaTI8vhDj#c;T7D{w7m!L^5T_IkB)Y3jJx4#8s|HL=2cMc!1? z8dCTi%W+HSt7yulPq(wtT~h0C7RJ~@|1NHsFog(p{~#VwBdsx?58vUfGMRXh;4J29 zm21Y^=vo9!?Adst{LT>K0o)wKY(u@${1iAJRRa4YPoAtDweatJaXkSNn|NQL^wQ7L zGeQZJ4~u6s!~(91rS|D7H<+Ki#&?#vWf&yNw%AiBa2j{Axls-7TISsD%qDIEA6cx( z9MXho4(t80Uzjb$uUGBqGxaUHYmvPag)4id)S&}7N=3w&68d@f2qZhrHF0rIRLwqs z-~J18SY3P}O}PulXQO=;$#3jUV(&&=%wYsWg}&WOoT?V4`;j!);&XZ zt%N?pDcmxz_pCcdEWpQ`ee&Cds5Q|3e&E8fm$z?2iuowW=*Zr8UP^YY5-3t?eanNn z7Co6JxT3ro8F5%-)e?Ay*Y>!~@yKtFlf{_}B5<+vFyyhX*FERgEf^A-7&&v1(md)t z3shK2E)5w?k5hHzez^zJ6&|8Ues6muntbGsk@bBK8Tr!`7}LN$};iZ$`NeKFd7$Y&Ba8KtT4@XH)&raV-O=&})@|WZAvV z02TNisWjT_X$GztG?W=ta&b}h!y7;l_NDeP{n@livZEsv=}+qvQiKVyJR7JGZsN90Yy8j=#&XQM(CBRw$zk zFva#tzO3(#@>uTa;+sz~ycLu_uD0U?c?0bM-tg+e9IFI{A;y}oRU z_N%-t8J21|B_4g+3oB#ng42Ywpm88s`A_Xmu=#5t}tLM)!k*aRewUl_s_6*O7P+YC{BDG)6sRpjje!1e<%i zVz7G+M+d7KCG1Jvg5M6|MWH#2(ZsQyiNlqrD+Y^CqPWs6#fXhx3%M~S?@FJ8cg1q) zj{Jh}&}sPYkt~^i?;Z!9@v{h#cf4-2N(2RX@6|Oy-sqE(ec$7Wot#vk>8f+ zrY2^lz2DB!Y1Y~N2)tr?NOEtrzj5NqSEQa(Y^1==tA`!qj{PweF4ZQmWTxFZHd-P9 z3IOYm5gZ|6K8@Sk>cUr!=Any(_DG7hWnh`73%T|9P%I<1iS*h!o z=SzpN%IujD5mvjICan-Rp*>00w_q3~+v82XEV03`oxHfz#g7zR|--xxlhyy|ho zRSbcF?~jEEXYRql*>e*xVC+5L-LCKR2-wR9!^+@uRhw5@n_xD$Jy$2rZ~fu$L-GwE zS}S{lN3WA2#O-(%tdni!9dD=2C-K~($utlz?Dr&OBb+v9&07I4C9I#6%+!?aMb~@v zD6iNxeBL%0O~*XhnesH@Z?Cu?3_EU6K5$|Xnm`&Hn{kc50mpWG>fsTmU(g>nr2A*F zG1n5l<@Ye_s}t&;|I$30jX6SQ4$Oh<+xY+ zZ$!A*v4^)NH*j3{CcB(+q<9RJWRQrb}MNxy9RDewI z?aaAZ10SL2qZD~Q?UZD1KZ3C6QK=WY;iRi-PIw3*5aDgOJT7)XwzM{&%kCE=L;Uf) zv93@z##=Ui$$s~Kuj>(Betxi4eAU1elT~pLIPIqUWxS%!x8ze%BT#y1%xvt*uS$?(VKytQ6?HH=X{s#b%s$bo{82MUZ-}X zI7qfDoc0WS#m)_ynVC_d$5W+u4H$Vm19d9Gi)v|U&HbfWPcC!zCL+@(l}KOuQ91Bo z+sXBKfr&xAOzQq}uiTHesy|lv+4B1XT(ls;8$*##UJSu+_-EZtkbngFViP$R{MhD5 z^3sDJL&L|7`?2$OVLjwUXWe-BN&Lk`GjCP5^%1ob0t@NF?wqlfpx=4{L>{^SO7}}^ z3hspt!s^jd*n$89mAkzwTs)oIuUq_;TllX`El18X35fI;j07gyp1)w%Lq#bga^5CP4&~wD*kSGr#@!7Iz4S5KjKi?T9NHJi@q`=D+?MwFb}Y z%B0WZQ}Nz82ZEY^8*x(|vl?ak5?$GF-_piIz~&b{wOE%7QvZ3RXjtgzQAC`9O2zjp zFM^n&LU4LkjSVfxwBF1x4flS$968u)EgZc~A2Y1x~g9ckWnOyR3q6*<<$; z*IJ7c{WD%jtAN=i!BI{iD# zdf$sK6~nEUM*kL`(=Q+lf4{B#+sELIQH4r@j2T(a&uOvutYn1}DBJ1_)o&rvTZXd3h#Up&x_j z1MBMQa9EBvHv>d-==&{$-p7jS>ytM+fS4~XZ;s{}|8*)-r_mli`@m`cgOuqm)mj$q zj{vTlaEx28AQJrTVWZV!@7j)jhi$gB$t={JhuUk?*MC!0BdE*0W1UJkQns9as^xW3 z7tHnki>nT2&C=;%P$FVmBEZK4T!6n=l>xrif1d~IWO()D7@Zb|Ao}Uk8>JGZ64f9= z3&O$@*W=kD4WgNW_uB+A#@BtoV?0s9Wpy?rQ#+s7MvcIil@~+dT8?iTq+287vts@y zSErHXt?SFUG~3W^O0e6Przt`l{T`R=ahsg&X( zulJ35WtP~L3;N;J3PK6qzX`!%Duw0Lh+&jMD~S*G?{RTrLp%DzD%~sKv!&dfg5Ie2 z4fM*9*gxwu3)`ndtO{@=|1&ORZ{;NM)7}I?Y`KI23XO3581NC!&d!>=5rn$OVl;Bn zqu^J%g-#C>c0*wM?xWIb;??37&SzjL-XXx?XGN=|C&a?kh9so!#EBgY!eDjM6 zPc$JIZg;cpD(pQLsR*hK|WO56EJo(+7C z?R#Hj*Ao9lX8u>FZ%f}9>RJ8A6$q%>2gVIK{uLDvm@)njWGd*rzmCfP5K`%6Dk1#e zTUJ z>wSSv#a3i7s50O)s3Bmdkt&GA^uW0A874h69XGwTLhl{*Vz(kYvWitJr)^HW6?PNc zzQP@&I6Q(idaPP3YK$>kIS3RnP{jYc=*{N-ghp=1?U271^bC(Ena?4zxg2^ofIO^Uz$tRr}6O;c1plNlRmFX`n^kyIU_)Y&1&p z>WtCH2BtK%Rlm)HVLbb_X$5t9GOM|KWZ#e|)33)zvE2E%*ccSVBh|K7ys)LJO^X@C z8bur;pM+_$tc^$MTBZz4a6KKhn*nEM2H98KM)r3y0@Iw>h){gJ0}dUsu~{DtK`TyM zbWi{{iIkbaHA@EBRFGs6reymJq?KcfZC{#xNY z1GQWx9F!|OJT!Ryj`II83p`4&*sHva#yN((vVvb}witi6TG6$5YnWvC*IzY?_n{=n zn_~4UqNB30X~X>QxXn4pfGKsuq0+Ge43vF4J>3>K=|Gt*biC9-yiPYDt=%>v_ed&nsT!3K;G={W7kC+;|6Z{@wC zqfOUwQ|nw`7U@i7hFH4^G7K-4uW3}5^Io~u?0dWnHl^616V@jN_Va1C(SJNg9~B)w zRlyOT&LE7PN#Tx3=5X|6yc?>DIz(yoEQ}U06YaSt6ai7k$QkZp+9w z&P_l|D%qrRV-TdoGM>??Y)^EMEt{jlr2WzN?>PCZt8oq@MH*VMV7A9)>g&$oqVJ;N zg4wblFJZRkJp1EhtZJuWcJ%@BY4>l%y10!W1m6$}W}H>*`>6l&yH~rvt^dGGHh6yD z6f?&`j{n5~{!VE{15ox0)KE@kyN>l(*qn1ppld0|7F0}Yyf*&o z0rZ&gIj1^f@^rK1&P6L{Y=gQ22@awuu5hA*cSoe zd{}z5Q*IVoqrlOIoW5n(P{wp;5$NL}PQY9V1)z5b58d;>O<-{~geFXSl?LB_8u0)f ziYcmERVss)i+^TbMMs+Ir>4L7ss6FuABBT5a(g^ZqdQZGlh`_+=LtiV9vh$9KCgVRVk?8y)#{=M-(u6V{)?85M9oXE7ekboRzP%y)=jWvPE&J zPJ+5lD|aPT-lrt2nqx=^rW_EU7#F_n?G+#pACWWmSwi~c554l(kA7ZiLy{Opd?bkoz27Q6g) z8#tIfnFeP`IJ{3~kaS&F8$N+Xc&j&lHS&AM7)_iYa>hmQR5*~uLh5+x3OaB=%jswf zA0Bq8$H3Vl%9ge7JtTY^e^AQb;x}avENb^!aP;sv(q^8Fa9Pdon9xQwD4CnmVz-|8 zs8@mpAti^Fik(#Qf=@(zxfFI+1P|&7=~#yw3-%e`NRq2;&Av$11q*SlYfn)ba`rL_ zOll^$#OOutSD$o-VorX0DxApmp&TC1mW+ZUgWo;yXoJJ#l9BFDJ+1As#viBj;27?rValk7P%A%bxbqP% zA^fcN?)oip?=5thbOdE44-ItrK`7AP(T|D|6I8WEbR!+mA372lmzUDAN%%lf3|Zsp z2`LH8XlohUMb~-rDCjEFhfys$VmFmqyKAtQ~wBB(p!pMZhnkw&Y z{Z=xD_Ns`D@^~=Ttl{4Ac=<4c7fO}J*b)(U+*xJ$XsMoZ7dd4PeH(_xWK>Gpx zW-Tu#Dmr4G45nMxYIRQtYR=g*+*N%yXajXVw2WAizgXfOkLAZA5pH-6n?zE|*LeK$tYA5_e7e`RszxHF_aN8k!yvw)X~ABAS!3C2Jwv9@L#sI5!8fKYK0 zenYl0MxA?GX}rODxw*S1g`j@ASl=ZPFwsT*a&V;Q`N86Vj{@OuIg%iNzHh!rhKDuXlpqV>H;a+BR2y}P?K*6=}UEQbrsXYG7$ZydmW?XD`JB9j~Z87t-W#_}*Zx2)ctW5f9 zT%3KO=CogFXfu_L71Ba7D^W(d@BR*TAt>i1V%~9xa1=}G#BkWSb_5-vhPQ$G_j;on z1(&iM)A=8VhQ3sKTHrl$BceTo)_It%mqlB!(9XP5TVC`8rKj+Eu%NC5;bgfB$p*!Jk~+!a@+S|4kFx`3hd{3)wvB zsl5cdgWZ9L#U9%zWIh7nY3ipV9TS*YEY^a&yD!~jZSO)6Fif0Kjx7Bfhe{X=9n}<`$rvOVF4u# z@ma|KVZU&HldT1RuR6x>|GX7e1cx#%^b$4Fr{|D~qz?a<)^@lt%V8(dQRE9-`2ybW2)HhK(b42+SyS zMDwes=&Y@~W#S&uGbpWllHp#pesBM0jjIF59I{s3@)q;;c<7g1e>7_x<79RjodXwI zXYzjh(9ZG35a4jKvO% z|8gs@Cp~IFP&xJhZG6N&hSs0*10@J(><8rvs`lxp)g?EyCghqrTk64#%N=UX}0w8GXlBbGsjo#C{vztG^cNnu ze&Y+B_#PG||FvAagLc1B; zqI|VZKSGc1@;UHXhYvo3=3>{xK5SO^pNjr~TNzB_fZ@Gc4D~X!@Rduld$nETg`e|5 z*{B1KF{%Z`jS4rb%cCA%SjLR~>qGQH>ig zI;?tciu8Rc0P%Nsc_c!UFW2GvB;DJP1uKJO`EMaWzNj8Qo=NrRpPx(Jz|QqnLuHC}&mKny3qdev-PLNp zH{@nlPgyu@1q=P^%HkS;4Juh#baXB>B}F*Ns}(<#3AzXPj+=X8Wly4#*=Z(=z+2R; z_+(9>so+MIc%t#1BXs!QFNpbcCFmkE-C&=*3toFZlOtM;I{K+6-z zsDE-h&AcGoR|NEa>!rlOMFaq}Ki|x%Eb%N5KmsXh3`dQaO_O?_kGM$tQYg#okiV|* z@0=inhlgU+&Mx}O`Sh~b3&};!PEI>sI2$p#^^U_gmLVD3J{J6iMPR#CWpys;wQSYx>#^83&h5EdSgLDCMx0=pH~ObGL!P&AWLh$*K8pH0wA; z7*aP=vAVHLgo?vp?psM1Z)$#02 zG{DmZigZh~0?ppLTt;2CU(Q1J@QD9elBMXMU4fDQLB!U$vP!jdZt_A_QYH{ z^S%0EHGD%Zk!!9G55OWDrtM8YjFGr2-2oeS&_)X)>51M|vPeeznAX=k-X9m&v77PA zWTMli%c=MUA%NYR_DZxIgoUzgdgM+8h<+i}6V4<`gbl=FuR`*9dpA10> z>|KbdZ`j!xAw-Pp3I>~UTjKm=j4RFJ#3c3&C7MW-v4EM@!lpC<9~!fm4f!!i`f&9` zpDL91890bLv#JNfuqf(-?=N7+BQn&@#W7ov#z0pa zgT6`IGiJ^a0L<%1$iVeW#m%_iUA0SLPNdi0+cpxMuR9|Tlgs(pyi&VSTi1ttQA4-| z*CgVy1mqIQSGSOm_l6i*C)XULQ5oImLV83WyhLF%JNgyXpNnKU*2=sToUFoXmk%9F zA=)R#OnUhyPoQsRe~CMFei8a>uGaUWEUagnC#V%$Lk&X{G1Y7}HXkYnUEIh=LOc(} zuclvdioLrtu{}^f?TSjY+1}liXeHOPs;F!Fje1)=Dc-(8!8$!Vt!d;0Mv-g?VW<2< z;%h!&sbjs?8hbI_L=#1L{P-43E|#E`YVc=N`z8j1Uh{yX zN(c67fW~={#y@BBs-NJ&yj<|avB8m2N6lV{Rrb!^iqW%Oqulr#t#T!RLhib6+LOu| zKA{w)do@))DQ7G*M^#8e0dWK17G5o{%U^lRfU|^*x@RMAG4K)^VxGN z*G2^&^H)25rKG~oP}moJ*F+>!Xp+Haol#ziCPe$(FYWp>*&&CyQ32?RwIOttNtjgI` z;4}!5582AJ)yD4k$I71Whz{f@)nZLdWCF0SaXuXi^SF_$Mfm8;HuuZ}2T3>y;-e_C zKF6MlxBU(@I5ibTwX%5L{XSij_oLWSFL8CtvB!iD`^3aI6u#5bB)jtF!=j=0z0Tf@ zd_{ukDw>W~$?;spd0NjvYP*|5h_qqHok9$LGwWKb1&qZm_EC3<%c$!Su6DIHxnExz zKGPW&X{!Q|hwDJAjd@SI2IgfvV*(?ddfeiEwEniWt*P*oxGb-66bzYvjqaPoq^npI zjQo};`+#%!9^E%)kLCKa(vd-%#Pe)+@9Ul5s2a=Z49N z_cvL+^NbAwu}jmYT|jORdDEBu`m&grP8!sj?*O)&(PZWEBjrCcRn%T`7b;CoR4;h4 z;8rPsz2W=@c!LVn)_X&y**TGP?XrED;e{$r)jOeZ+pqb9XhOv{gZLjYJuCYfe>s;l z0Lz2J*mF7!2JEw=4~vmY9;R=j57hh6k85myYTN9D;e;UKgse>4J8YEq>;CI)g5a7F zB_zJ-xdQTY0cKj^67qN1lW9~fh0Cb~VVHV7@4n5VVQJT~Yjw7Bl>5Z)r@Qel^R%Oe z)KeEZV-{;KUxP0!8%|o~-tp#BXo)O^xXQre+0u&%Oa>etFem#1?Mw3w9{I<#&tFz; z#?wxm?AOz$L1iZ3fx~N76vZR1uI3!4^VXAf;FH#?3vk^a4c!yz1vdIpKBDfrr5#3C zAk?;hGTf(&*@^%oR?iTMf;1{h6u!=EI~)aLp4Gv#vFDIC}P?EVTxs)cw1F z#L4-|8pw1l`dCcy8oX1b8DlW*5jwOxaM*kDCcP_Yo|ydL8HktV);0A;&=-9)dBCRf zC1aFSn=_K;!yxAv$k}{wpZ+&{;265CLBraT?FLGbA{mD}=1^O2cJl*aPZe$HbRXGf zqp{B`fp_4ZcLlA0z}ci47x3E<5{}Qz`mIQli-Ys$vhM6#9OlGVF=Hg8AffN+!a@+^ zncw@YTUU#YVvATGuSCD($hs5ijCs{{wdlnGORv|=9hP)^4O>UZJ3J33Y;JSI8hJl8jUzQwu~+4w7^f?s0Qg3ToJbdt(l#-k0n zsM-~*pibx@R>PuStBGi;M{ZK;${obSa0~oiUvmMBm%2{!)tv~;xTY$5vl^i0aee++1FjkqF0KXHZK=BGEnQ!vH~a#_f?=RNoM&~pm?y`Rr^&i zxsb<6>dr=t{dnLx-mQgNrU0kL&Y#ff>ayVUx7g|G`iP6S5mw&yGERi-&IiZ`6EIHZ1322 z)a8C?6gLwycKo@8B~Lqs>o{Qj>iW__>iX^JSE{7TccA6??h2;N2Y_iN^ZE_) z72&>}lj8aD>ih^ZN5h^DFWth`VSp8( z?(}dEUeLzLVsVO?uJ4Wf2siBLOb$;cJQDUdWH@^zE{>xqC4k9yzkPFKwCy@+sf_zz zcpo=JQA!aW^nM$S1|G(!dBl=>2aUe$9k1X*M)e^ghgLc~{MbWFvcBZs+%wy<3C!gc z$%Ya=;IGz`4_t?nMF4+_?WyObQshHcGsX|gbL0r;5*O7NR8QN98l+ylxln<^#Km^v z(=E79Oc-|+mgIfZIw<@c^M3#oQJ?u1woS7)WDbHvTz&O|W#-8tMv)kmNiOG4VS(j{ zqz7D1e7hl>w}gTt*NnD^N+ja% z&CtHD(r1&BC9i!Y@3rBJZ+8p|x7s>6H+{(RVh{T}sNX}}*(pOqwau{|Y4Hpp;<#i? zm+_mg$L|EKG>6(m8^4Euw>P233TEjknMCZD&@#t(THu!q`pX# zn=qD60Ll;NI=#AGBlcg(UlvsrRUcLQOfN40*!ZuFw@HN~{HTvcuP4!u-_ZuWSHyzH zSmk-qz5u+ws(AViwYC)Dh3fYb8dv z1MmIPYV(EzDwo>4`4CUnimf~gE9B%G-CxORb+3pc4j5eh<<7U`2V_K{DZ`UydxBAi zrGWIP)J=)5wb!q_Is;U4^bC+8A3uy?<|~J{CRv;4)jLP@Yr?nj)ha*kisNX?eZ{#unLBneCC-dKG-!{O zNeo{f2(762J)T3*3tw0*=6%p2J$P)krv&m(ker&8f4vvwM>3bd{*dybyTV1(rID_| zA^6dsJf8_vSY>?r2`MVLV}8%P1ho2~sZnkkQ2_54lmEroTSmpzG=0Aif_osi1c%`6 z5L|-0ySol93BfJ6TX1*R;6Av!ySvSqTzT&6e$H8Ez3crjvxc?z9`#ii=yJOTDFnkl^k5D}qx@gRrDor_S7SGAk?1J;ey0$Y5MlpW$-4^b@wK8=| z$D}6Io}{%vK|iK4J|>F+t6iagz^i4ZCwc6|QuA(;kA0EFOQy}KDKZR`8>Qg5d^Ci6 zt3G27sMLPN>Xzpmj4=TK9N@YgGewF$d&xwp$!IDVxvs?0jY9=!@@aK-Y$qotMG86Z zc83#ctx{H2bk5e=zs{DZ*2`9jk$gx#ClpoT@&Dd&?Q7&Tz=9$LR|i$F+TnvAC@cg` zyYA@-dh>B|b{-lY{-su~g~~0g-HY}sH6&*yOZTE2APjfB(&8E(_K{Yp!`q`Y3*P2( zJ6dolz5|?_qOSnF%W!+G-OI$()X@Ci?J$~Jba7;OxO;6a(>&87=(s}{dD_~3)%Kw? z(l}y4F{dq-ayvKlt?D5DE=qbh>nFY*c**g8zR`{a#k=GImQnENo8e#jhMJ5+C8CMR z^4LbD(bwelTew>ji;B)D}O-mWLg1ER%?5>ccEG zK=!e|6w?W0fJ4~9l~LN*ZQA+HHzo+2XBLGt@lkB5uW^}g9XB?L>Yx9n@9SL;15;D9 zuyyA4BS8x~12LJSiXP?qo8I3QO9Mv0N%MQxMQ`sQM=gmJ<_zI3Id?^>v?Al5{seBf z`+}Ior?|Y>PB+E=ts4V(8Ir(w4DlaA0*+)j>|fxa*O)#kg^0-AeUyBhi9S?SWVCRx zse`0c^79xIy{%;dED=$G-;+E2X&joV$bZ2I4J=L!R8&;6B^|Gv@`vP_aw^uX?a=wx zu>;G*GDoPRw7mN&9}!_bCj9@$n?~ibJFx@YG5KIK6G?vg|qTc z$ggqq1=#YNqX{mSetF7d-AXx0un#1+fx`2eo~xhmPdQ``v<06|>Zz7_ebP*G|xnndp@NM42 zcs>dI53W_iZqm`^y}h}}@Ov6)`XVrX9Y^JYXeYG$t!tPIGFd~Cq|q-!{)>n3QQ&zs z_I>Os<>!Z#%m0~oT%cr-Nu#^lm)*BCM_H&uhdNSnu2pLr25#FEAEXCWV)^UK|gv9eagg;z}4+L(~ktSq2^IkViMNxfB6eV*d#6ky{>*-y34 zR`!7&k%Vye1*X*dPd(ukEvk$({!|gwE#;xiJJsch{eM^qQ&7h)HM^89eAfJ`k$gQ2QVmB ze-61d<$wjSnJ+M-5t}WGlumM@Ol|A1qst|wn2=4*0c6_ym%r0;HOgstdczADENI32 z%`^1b)WTL;$E%wx00cZz!?L>ha9ytiHB)xZydzCfH{nC+&5343n3I$vr1ZDs!GJSi zpG7W0e?fUigJl$y44GNgFo+d0UiyT%U_i}RAKY4sKbC#zuk)&oCQwsdffybP$exYa zEMu~7aCBl0xY0H89G@6>yWPiFT_6eI*Z2W(ihU&FK;25(c_)#it}5VRYLJoMtWLmSgILW05jbig?jnf`!(P?1^A zQ&JI`D3hWXp4XC|+9c+a&Ds1!fK3&KsAp=6nJK z8T7=K?Y1@3SMd(|Z<{2hQm%t41V0`(^e)#1HYmOSqWH0}f6TF1(S7FQ$?;T~p6vDy zr`?FazFDNH8&IS3R{kBM0(eJzrtNTPMLkmZPTuN<(`MRV^l+=1gdW`J-O?$XQE_P1 zsr*myXM~p8qPZdIH_imhL_<8UTqMJGb+-9gr6k;w3&8~mt*wrq)LZx1JfLqftd%PY z45sMBj<;wS4q&ip^jigj^w`q(jz0QuCYf8#%zV3kZgkvI;^DrphstZ=xX%{z5hGDF zzcwG%jLK}cN>(Zd_*fkau5`*9W>|b)PQj$Xb!$SNp(ii@bAQq)^CnyQ#9?R@r2mYI znBdF;zBw%wOyURwXEK>*!P?)Tjs9UZy`6T|kh1s@h(%ueDU{^!&F4KTGNrbT7Svhc zH@8f)Lx*0x(s{gu=0EpFc_Od6Zu>zLH%iUV>ny16Rpv6Mw*l6xbO2hPI|t79D$F^T zX4pCOrCv>G9Sd1Tzca{F3{cit+p=g#?uIQur9g1gyj)&;9JNnD^ktbpJl-U{lMwma z;{#y83;ZdPU>7ufaR8`IS{!;E1fr#93KYTaqkgZ z_G$mc6}tz~oJF}Q+0yV4Y)3qv@z_TV1qFeNS|5wmIw8*@@wW|@bc?=`)z9p6`C)Ge z92RabI`MS;;QhON5M7L8{?m`*^BD7&w-WZ#t{UW2PGRzXRNPS?vygN2vr>AKJ1gfA z!pyHwO`Nu)!*yoa-woY|>G`MY#Hqt2Nh}u8^TTwEEx)!*7UW2=#%psny9AT2P;480 z5FD^E^y-*D7my#JbS>8Sab{kc{anV*NXH6$;|~t7S>keNCJ*1-(GdUGwA9brQP%l4YCm$+;XH) zwrlC6%d{@)?8G}dpvS4-9L*FNDRC>N?d#8?M1^f>>Urlx4YkqLOhtxsHyrjY+jovF z+oR^W$;)eTDjXq%c;!*N_S;+b*Qx3sNhaMzI;t#LPOB8joMJCe{U$*bSr{(i1J};` z(_4Qy9xz=>yGV09G3rJ4wi+>wLXjFRVAS0~$xy!j;&*q(FA#R6v+=;F4(GP>OH%m# zV&tV7tu-@4CPJE#bCor%5p#`fo|ZMZzFD~qk6SzUVyj@Z^0~YNi*}c`xG~ZleX(N))i0Z7PqNt zw+w2aQO0QRP={ut-_1A1>Fpa>@4D4%3DU#j4x;!(U9TclR{js;vbP<-=B;NGyzRGa zbMhz8SsRznqj8Lc-%!ycrizC04uShN=XH$5AU=l*^nKm&6A#X-*EIXRy|jt}hdxQb z{1eeas>__{I+XU`wfez8o-vrl?RNK>&ER{xcYD~WddiNP9(b6s+nsInzK+1#JWg?V z+Z7_Jv)k%nj4I9`DCBxEK7=^;Q`sLmz~RVrrhLa$ z{1lvVZ;f)1@H85is2sddZ_B9fi75MN?cDJ*tbo&n?-+?(Jw%oIb=z9-QY zPlObWvT#H3-#&hg-}Z8M|H z{KmYrC~hX8JT?cu4XDf(9~61$d57E>dyh2}=Lh2>Z&YkUPZp905_;DUS>DZA(_gl~ z5iaO0p|i=;naf`CrR62`lX*Sfl()YJ?y~O?P-g5u*WUK-pFBj}Y2+4D9DUFt@!-h8N}A=T7-u_;aeJ%>QzaSAF5p>a--E+fo!9|z?)Qrsg~n2> z-9yr98JUhxC-|m8y4l-XLn1wy8^JP9cu$qVe#El=P0SW7EL@$kR?^8e1G-;=^uAue z5&v~{o@j^uJfKV!EgsyBezz=@Jb;TwX47=3ts>_p$$P>*dKQ-RDX9myaG8u}<+C+? zVa?rVF4R)gceorVr}?$bcR`OUY!V_$3WQ7eZ^8RioxQBUip@yEEax)#pvY;b-528P zIBgK(IsP|oK=r`A1G>^OpHA;O9K%DUM|!<6{`uKs`qQ>-9opCK3uYM}(6Nr=r09qC zYq{<2ug8{a&$trN><%p-KPCRi$;EL#Gnry&3W=Zm)=rumtDJIWikvl1Tv!YpB5QC^ zX<6>jC&fFU=IxZKm=GK@fs)BdBD9_RpMuLLQ5)Pf3yM5IJ zK|JT@x%yh`hb-FK+Ll&U-KPLnv(e-;Xv!ZUCAkvOu|I!)(a|AbW@gUN0@sI3>F*a8 zkH8T!+UjaI5q!*vR2Ss>Ld#^cG^-=1++PyH8nAp?(9x0E+bg=Y#go)Bv$P})uF;8% zj4YGPloJgG=0$sA$Ru!BOyH`kt25r@CO)Qd+Mi9mIPZ_2IuJE3%Yy4hg3l%=cj4Gp zftytR^O=GIotPL%vR%J+h%pZudG-PZO(DH9-|OKISaZr54#(5Tq{IqUAHU~)^Ym-v z{o{nb=N%nzl`e#fprE+v`RkR!R89|Yd7ropT*FTy^B>_n_McKxn6@aFr6l!pn2IV#EArV`W?F|hNYpuI`K!KO3# z{T+Jcdg?4hd{?U$=QV6tkFn7yFmuBQ_2s(J8`KEe`BFJgDJq}I{L3tS!6{Qz3MD0C zmx}e_q%y_kr2OEo?W1iWH9q$}d$@ZcO5nSY2xRn3xsD_gUKWvBZ@C7l=*(Yw3%f`( z@{02o;`e)c!UI<#m`o3*(ZBOqYkLA|I9^ivwwMSOBr*I3 zj9EKOqXQQ19Ig6+?l1G}l)D$&Wi9uLHWF#z5=)GU6)kCtDpv=aj?=8N3JC+Ye=(IOTG!?@vwP{ey<41#^!=5a+$(9<&mtFqrME zc+A_M;Q72^IR&n?BM_&VSG`c<1lIb0`<;`u3e%V#b-TSwY?bkXSE-M*crroWFnSnd z>j3=bl9V(Xt^;y=Z?F+}Y7Ukp-8=o-MbqzF?NTQ`H(j1pzt)&wone^N6Mx5KWD}yA z$rd@|*p<|SySO49KGNqku(o?k%xJ(4v2L}K<&(kcujdM2|Ei|=g6v|^1$M!O#m#JUnB95#>3cKl|O88Ez@p{ zlGp++cqA$D&$%WtHs0jqzUlm5-2-He zhbdrqflqq9u9V?SsB*U<5Tw=_@xs;GAh#EE!}s&shX|ct8_7+5-@l7_akkoM^y18S zX^e#VVn^vU4@!M5BX%q?MOt*z58M0I`fyh{Hribx@OkawBTZyO{;d`a>LWP4?oZ*9d8a4KYaKQ5*|)QNm-yg0)5%*i%fAX@v_DL`3YU*5=w)X~uqJT=wVCxFxa;^E;XGZ_jKOHls^2_ln- zVlo*-Gcq>jea*b~TcP|J{@YQ&HgtwiQLY zW^b-IM%g&I{|xzP!bldne*J^Xf)vKX^3R_z|1N02Q%T6+(Hbk*?c%?2J#e8clf%b~OBgH*VkOcJ;T0@8UV5ho+yv75+~kr zDk%z0x`-YZbUosEoF0j{6G>OT#W zW;_rj#{0w98XR(%L=h??H_nqds!DaSN(}T&8#hz*bMq9O4s3!tu1lS1o$z&gc&Sn5 z+l5}Kzgs)4Gi27RO6Hrk(Qw&3RyvE`$2kqk7oIR;(*?S=iCwnEHVlZArL(-1enE;0r-V%O7jmtBFd`eCL5qN2 z`@$!c9X^ciUSJeR&!RQsW%y!!-Udqs3z0IzULQfg{QZm>yJ5A4_ijVVI>;SqJP6K5 z?~-tthmHe3@r1NwclFxHaPzbx`RF=ncO_9Ph()K%i{|uQA~7ocE6vLVz3AeE4(r z%r_D1o?qJG^aG6HU7BKn1!xjdMZ6JmC7;hY;g|=QAYj8YT8a;xG6B_+|MF-tFfMqsO9MU zaz-QijG$OGYODucxn620rH7n7SZLBUWQC6R^C=4Re&Thuri_1X$0MJsjdp!aHFDi^i7t7`ruEHxz-z;zwezXIlpfrJ@Q!+L&BWSQISQ*({McJ4 zrdg!`k8unRI?8qK9<%`*75=VB&VIUyG7l61 z$-SHTf%8{eiQ_#{DJ+&Mrpn}c4knyg;pf?B(-a7sP zp5Jv?_%KKdRdL~(QtT!>ieN}uEQ&cV)stt;E*{A{pIjKqu??VMZx=MP zCvKX{8r=L$KC4uslI)k1$8nxTyv0rZtjbjcvs(# z+VMce^JgcU34F)dV(h-d6cY=`^qJ;(8Pp89V1~|7PWdlop10qN89a3d9Qd+XvFxXsDwGH1=L3m*ZnYzX*IW43h!?3biUR;A=ZDwE0 z7=5}ZHy^Z}pWOPTymVISyR@uFGLC3_Z%pONK-QuA+kfq#+wGuqAKsj>;)t|n)|mY7 z{bqjW;qGJ%YIt_O5LiltbhblYG-S~b7M;JtDJ@s5Wpg=jS;S13MRPxxR|+_PxUEP7 zaSvq=-~jwkee4e1SH0_SQ<_dV>T|yqbG~@=VklquPOfsG#1q|s#6v8G23-srzfEf) z=~8Ql_-=-~Z3LL-T-^qgX8^&MO&m`i-yW!|zyMF4WnL8%Z?ihS zZ{+uWn)OZ($nyK0M5PrfFHLF*MqZ8v$AxyRY>F$p&UV0y~&vF-6yMa z3?nBn|7A-v6UZ~wT^$f?iN_HmwVyuLTMOJ=aTcHQ-uX0;>SawK5*HOCkT*v2d($Di zF}UN)XGboFgVSMXQR&YrD$w3B^OV-qwa@uqmPaPYVf~=zV#}ncDrdg+7Jf`ahz*Dh=`wY z0mtDzh1X5bB%1)L=W_dVRV$T*CGFU<;9>3)d;aUGEfcQ;7lJ`EmDswQqPDg&A&S3$cKU6XUm{HQO8U!>_kzLuf?y%>%V9zl3;Nus ze`I41Z*-4@Uy!_BppW*(1_aN3=a3EPI@ zSOPDQGXl^9YmtK`2$P&TWtwFYpspbQ;sjdhWF?ycyT)rYRI~+7mNZkqE^BLhGVk=B zp;jJz`Wsq&+2P9l5yN6lEO?iFO-)Uc_3GK3nTe?ymL_fEjW3dq;m9z`Tw#_|*2cu9 zc#u3_uwzg5WiNcH9MQJQiKKX6*51K4GB%e9A2iO6m^twK6Q7Z|kJ!kiVy_Ib7=ddY zN4l7f1T)*L^Jf70cJSjYMqFlkfFTFu4CGBx057oc# z`)S;zVu3 zzU|A@9_CNWVR1_qSAMKLMKJrU?di#55@Zhxa#E7zae2&~wOoeZCQh>FhuTM+tr)Vd zEgo|HY3!h6KHMK$hGZ`7_AytPRt89$FN$c{k8m{(CKPE0!U zb6KuM{7EP6beC$zLkQnUkOSKYbty?$$IN)V{voR8hEIC=^yO&jg#?HZ)a9eX4Z||% zVwyXROXG4-eSAf8ok*-xL=?$@uPa8BPmvStO;Osv!!N+MkKKtoNHf@*cLvJ5h2x^i z-&e$Q!pSv%MB7h9nYT4Gz-`W^mCI)vzyQGR$0$6DnJ;rusataH`cv`mK%O&R5Txa@ zXG=&pnjQN4a5drNp|rtPBpKR6dsh=`rT)SgkV?9`PVxNF8~tNay}PNIX%eny2PDU= zV4+dBH2!P&Bi-75%AV1B#i7g`wcpryvc!-8cD7}!`!3I2YGO6DMUC}3LxDUBvtRUy z*=mD{T0#X2VnLar+W9_jH2 z0yZ@kht-NJoln@=7=y}a8^`tTy*OaP>!-yFRv~d)=+n06hx6v-AJuW8j~h})ATO@V z&h{h}SWb?{4@q2Yr#Ct9O~?4(NLF=Pqx$|hO3!6Cc3>s$UUClDIsW{7kTmDkGCDU0 zPEefc(7GCd%UU3D2|q~&bvj1yIyjjtAtfpKiGd+1Ie9#i)yB@Qpt?E+olN{^GPUto zUy7thB04mo$;Vq|u!HmTi;>iQo-RhmnSm z6n5>n-Kq0dqUi>(dmq`(hvE}2clasA;75%9@oJ4&BO$lb4-%0eG<^K!!}IsL)gIS- z3}b?BXDcZCj;*WU#4HmN6JLadg$qXnR6A1%2lTSXB)>0cC$l&*@55lLHh=GX#;Wp+ zfuRWBF>JDD4`)+o7M351H@ao@V*raR13R-L$)_nbX3Wj<=j5m33fFFW2aQwU&e4tj z4a|Z&*jZ>lV@NDhtAJ(?SHJ9yI9;hXVQ2WlN(D7fxjUBPY_E+}ENxy7wJU8aEmlZe4(}*`XY+TtBCGK6~Az%lN1PqSYD8oGo?CF}y6H z(qOVhq^=~yN8naDUJuLJ z209+zjT3#n#vZ_Ny2H^zCERg8cIZd3-MpEo?wupfbM1cLE#aLyt^Fq4g8>`rx0ysv z@lcTUw0g>x<%}<4pCZ=U>N}!{;*C4-1D@{6=)s@x^QlHag zC_qZi5sUk=(ZV&a1rN??Q79MrqsP(R;sfPN8~B@5)vxzxwf!~e=ot&a ze?J#?4Bf5PYP47}J7ZV=@;;;kRC-0Uq{RbAX7#Y*n+?}5x2-Kj^;syt6 z#V40$L|KPrg8@Eo2*~z?frt$E$C!|kpALr)9d>N-^d8$@S+>MkS?=D$z7kVUd8do$ z_c1xytgmgv=dcNjrv9coJOTUDOv$s2AK=lUXRS8`fz-hFxO5#$kQLAISwoH8JH*|| zQ9+IHlgf@r__gtskRa}s@6**I$)4j%N*{QW#DdMxOHacu%mPR4c*Cua^$JFjh(vQ4 z1e{SUy;=#qc?+sHLY=Tq^agZk8!viqpEr+ik0w$rN1O1v?`cN2!is4hZ8(_@Jr^1> zR^yHgrryPy#}?rdj_&%J(l>ebvl(zc-`kkD&WYEjH_K>AcR6G>bJ8okWpacT`^T>S zGW(HjczOFR##@auffnn%+%#QBrY1yOLH8R2r;G}cY{=$9==*-kdZ&vCn*Inp_(BxN zI`&X_cq*)J;Rg_sHvfiCV5q08;Of_Ay`8xjCCZl3vf$89JifyVk zkDF;^%#Vrqt4>UY12i^)`oZ%u0j0|13myBLrR(ckJWmU~zu< zC(iCEOY;ePv52XTwZ@6hazuD}+NV!3z4bwTnT=CBXMJ^aqW04EDd1n@bythOaJ>g$ z4>0CjUjHF=%GbTUvcuo@ph1|<8;Lt~G0f3qgk_`oNIFzH6A|;1%zw|RGZj)vuOnVl zDC=yo@~+=zv0of+5UyEpC!{#i2LF9wOK)}0W@!&wRPtaiy2DW~JRa`v-cT|NzL$?k z#LI82!Ub!CRq(AA+@4{H+0j~ZM7jB%1U*4imr$@=4jYJ3>;tTH?{YUO z{sgbU%FE44FtFz?!QmjlLgIs_L?g8zJMCthcXB-8X-IGO$APLzb(XT+MKea@`t__- zvC?W-ssIbD>ZP;S0I|}fzz04T7^(9M;E_V+Ewe4&%ga%#Mr{2OFFiGSfMuM)P%Pci z8Ke1OMCqn%GBa|4kJ>ytWMR>mneRhp4ZGZ z@vuP-evfnor)$7W3QZHpwFqonPh&Hoymdg=oxeh1zOG~-bl-0{L zOaCT~kgo(i$(ynSyi<+#xtBkKD-lRwkUSnr(9DTE9*!U`e%DF|4{k>P!WPjN@UAcI z*MZ(&g~F&jch{S=HJ|EHhi#ca)j!PwRJMkzQ}PQr=u7Dz%A@MvI!;fy$6_Flp$W!s z_5`8L4~dNG-V#t5RZzTbgYpk;LvVdRa3;k(TwhzRp#d+5$MTfLd|ZFN>Nkgm+vZaM z-pBPv9}FS59&MJ!{!cok7CQ;%wpZQIaN3$M&cQMa$Q#Y;s*cD9^Hgx-^}bgTPzonq-wCL z?gcrsAJ$AZMnbCT{im`F9%L0i`677|mk z9EgXU5I9Wtrny=S zC9dz+jD5}4P5%cTfegQfZ~EF#XCZSQ%fETY7=6?Fe#{A8qx_+okT6bClzAkHIfOWWc+jrx8%lh7~i&e>V8Zw!dzRw|jVY7LO z7&Sf#x3vw6fXv&w^>y!&$AKIb%f5JhaaY9#o@hTTMFZToQ@a|i_JJ<{wg6%yKZMT6 zrH0zESXo6^+(#Y^wZiGf@^0H6e;de7jyv8Cx(0=P^8ZoaW?zRpE0~yh%aiHm8U{2c zo}TSRKpx$Rhl2JO&EzXjU}269i|*|h<49-oqh}VPjXh}gVjc7@`fRLnF^5KFk9J51ae?kp;oySdYsXdJv?aS@x>kuC zBZ&mQ0zNmz5lbN6=aO^-Cgs$msOpJtJvI<&efEz!R&yo#DoN@;i~Ci69{p+=3nR}3 z3pbYm=&c{*2~Er%pwV@Rzqq2ad%~hf(0EjAq3KuUEG0;P>k+avgI*lT>GC6t56bJ! z=~XW(&K{mFR!EmF=4tPp#xebS=5xw=R`LbNQFq+dWhg20(bRgGZJD~Vka(Y za}h3X&R}hhNIj!V)v5QhcFv?^PRlvoXy)xuk7*-~DK?%I zkoNX$oe1)hOM0kGbW( z9I7Bu&p3M){4~lvSoz9(4f=&+fEV2zWb-gkK5=1Mmy64XXJzoL^Kf%N8TDs|ELkQb zGu~V2Ngei6e#y{E)c0W@vF;SP>@3x|-yncl9dT%P`+Y@IT9JdrlmnvrZ`w)GmrImZj90eN_wbseQGb2?d}~ z^UQD{F|G(RGKiMujm|8g_NYbMW3mnkp>Xi>jWt4*B5bGWj_?0E? zJ`CixFewbJu~Nz>+%8a!l?^?@5HG;P-A~cs zqcOSq>8|9ZP16z{yRl?>Zds64-414+5&^?BkTI96wMZ*;7A%vt(!T^CIHO!ygQ7tC zm{7x;Ru7%lB3jv(3!zn`)a(KUy^ zkDIqrpBFjW{pTCoy91nIzTSr*hkM=wH>rCMGAh+I`}Z;#Qn97+Jq@?29Su0+oF$^KnbCS5uC*v*9 zoi{DrWozQ}J=I*j6-R3B%rZLGN)&%=Y>63?$CB*n!Hr4m;i+xVSMG%DnFw@y1&iU6 zQ-DpNJt*o;{{%d8pety@GwMOXf-p`cVLE}*2FIM)yP|buU?hrF3!A8eC*@=y)AW#C z!~-;>Q{fGOMHZooaouOJOK1IfXR{UfQT}@Hmn@&-q-~k!m21Q635D<7>u%fZgd6R| zy^^FWSTKUji_5GKijJL)(Jzo0p`}-3V5kj`ABQt0L7_Kb=&hK}>EXKqs-Al zx_*OX?^@hcGiy3EEj51txocNIs~tS95z=ErIsZ%9`1?(plC)FZ&W_cD=`r=YsmT5b z>^c~JaJWVT&Vp6a^`l}gXJZO|RYzt+j`^&PNvRMxxp?km?uz0lTTD4yPz?j_DdrRd z)Sk|+T#FV?J_Yv-jD0B)^FNAH@zW4eJepf!J$JK(%h6k$U2l=y!OzoWlG{a0|B6wJPNEwA-NLvt_?2w+qw>MrI`TzE zBG4;tL?Ftj*1;#+0uW-o{ho^*zN?PQfo+H(iAUejV}Iu<)DHnF8cp=Y0~c`wLPVe1 z;N?mlkC@c6&*Ft6_w=REbvYw0TCygk+uy<8l;6X?p)-|otIUE*C$ujI>WHa&*6~8} zocI`b$PN46RzD(;YgBrFyt~clRztdwHP~*Tjy$e>ZdcuGqJbHU=iu&8ElotIWT>?~ z{#NR@)v#Ky6?iQ}mV>8I<3(F0N*_k1R5vOwYV zz4pEnto6swe0h%}{adinVeQ=Y#ld*~J6QHw|5cjhmvMhT$yk2wl2Tq?&c@EZ324P- zHLEhI4Hrz z#BVL=&7KtRAYBdoybw3kS|t51CT)wSUIq*tjE#-4v9U23cK;BFazI;rgWVltg_>-9 zgG*Ygc6l7SN zJ;Hds${y`R5ax0vJ?50dIWfo)K}``SG-UJ>fJGX?dG^f~{M=Ia`q_O)1i=k8O7MOl z`N5UzQf}P4Js`Lj27DXkEmo$5`r1qbo7>aW~C>-Wnf33>h<>)@p1j` zI8BAiLHu^K)PLg02N=t5umrI&6X&N*gdG~#r_?{tj3$nkSjCMnaG5bJ76u8!>)P7v z@Ku}B9tVP94ZG1gsQLS5#*tOJz2y z*WbgGGPp#v{dU$)ym;uOO}XEZ*StE3TXA^AGh4Y5sYnxeH~z$UHs}@By4I4o4%(G^ z^BSd_ifZo#l6(B47X0#ixXHSRPPdSl^k8;$xZ52D_TqM|TkhYMVS}1a>!yP@ckH+n zk@c50s*v&SZ#BV!XgmI97^lI^d@f<=0g3#8q_Hs>n4kfRv7)@>BrxR*3mRa0<_{`U zB~pV(NQT^2|KeFeo!S#Hx4!^b#%`;l15d;c{L7FYgNTe3<^yk(sgmT(j!4*JosqnIK$F$9w-BX7uL+07)DsotQEhlNuM_Eifved9$4OSk%%hS44jWiu$(Pz1LPzSrG zQ-p8JVj%)ov*yx;lEyxDWbn2sC6%luS7n1U+*ilLKo7To=ej8=rvvr{ZOoLX)}sa9 zVO9wSUxB5V5TdJPXfZZt!i#hxADVMYu^`8|&ghI^;G3 z&SaWAoKg%)slc!jIpX8-5(G9+R!>=UYg^x04H=DcEO0cPCqs$`KfkBTsNQJmaN^KK z!^T#+*Q&zUW7@g%p5i_;oRHT z2WFQU1+T~ieQq$YvG@7cc!qHf4egAec=g(Xk1LxZ76rW%36c3}%h#VzROe>K_bbYz z+$BcZ9&tL|FEP&P;Ia2EN;T8m-|BrmCB)$-EmL;@XY1C^)HMFP8AnVGN~$?R_7DMU zk}0cxZ&qPeH-G%{{BIcuV3&8pVZ#Aa*!Ka^yKpwotdh%tYsLmSK=ZXVo-c_IA8cC) z%mw?3M{vUjRbb>sA!A*LFNw8er#L^9XKL?ZD@_Vy>|E*s+dxhI$21 z{g0byiyFL`?IMX;s8k|HJ2cs_ZnsH||1mfhO&08#FZTtlCKS$LkOFK`C^DbeKB{=& zeVPFvgvg_s682KURNkxorm7U@4g0e1gTDvDuv>vsuKh(Qn@zIcb+i7NkUTZmaIkqY zih5#P|Fei+uRqq2T*J#?^vlhdy!jwmOl$UA#^e>`QcA)CK5TpM-sj9twr*m&Z;;$o?D_3yD)l|Xk{&+`{%09>Qv2^TH9G=yzd_;3* z&PSLVaqP|R;_`2!5!rGC_GUsHVzZk`&<=CWOh-OR8!+vYjc11*)SH%4b3Yh+vN#I; zXSTYc2+T9WkAB&(dy!?H5zlV+# z8^al5ELG!){j>u>hyePpE%;g({p8vDKCBP6%`D4n10m>9#^CEcao*I66+1AbqkJA{ ze->~B}WNJ|CJT z6J&7MeT~E6hi7IGM}SOHMtxpv4tw_eOx4^pqcGUlGnIT_ulk8B5V~pw(^E3qp1;Qi z+mxu)Hnj@UBoys^bAS$Zs!DfNNcxUwHi7~sL zW=XNDs&=z;zUzLjC*Fczr3mr+Ia2{0O)oC^;aB9f89U zwwE|f2-NTk+m;f+S-U5JCwYos>HX%t&PrZm?UZ2n5$yp9RhPLKdN{CS>;vBp*wS~C z4*gSc!3vax{D5j%Vw|p!**E=Qp*|=3An3r&;2##w2!myVcV2fvi6&u#bKtQtarQs@NPx;GK(nO@}B3mlt$`Uu^V(%KlA)QI2DMQVR z;(0`=mj&M(P7B6J)VD1`MmmHpGSGI|`r?uRF-pXM1`+9!5qxz=321z**!`__(2mcg=`Lv|gMTnOoEbgHof@g+wI_ zg#X#sa<`phC=6E#HSaU>{M>sBx_V>4CDYBxkeK_uPyIN^XuVTH!T0q4aP^i^bv4nl zD1-!eLU0JK!QDe}4esvlZh_$LESL(sNU(o^65 z41w6*D_E~qsX-)e*knZ>kN;q`O!mTe;-=vfr!A+u=59|yNc1<0stCrRT>aeQUK|yp zbb*I0BP$ONXzgYLMzQunPlAfjSbY-Mj| z5-I<35G;^_0kRh9n7j=_!QbJbfw-`yu5Qz*+0@c9+=*QPUJWQm0vgxiAv6O5uT#;< zD95wReooIYIz-&RSV06F(bXbif&UUR*(OioCMA*5D*=i&3o_aA&fYc)YdLcqb~Ze? zk5FN6PTNOcG$(-~B?*a8hahMa@c)$IV4GW8!QlvRBq*+c&X6Q*^LQXOncKDMKg~8# zQwmO8M6?Ngn}?Beh>OOpbJG3F{`8BfuEQaE`YsmlR^v}J0YPDVd;7qyxqo$oK%_$N zVob{Hf%V`9x`8)o!+3CeDjs@;M9Ue+*KR}9erCD6389USKp`Y5&&$i}GJX{OFQwGY zKeq_KL=fuHs;s&`Ng&j=`g&TGm@~yuB~m2}`N4I+2swHtIS_B?pXgg~loBIV%fkm_ z?o7v99*u-7hJBZ4cg+dv%2-+ek`#7AYDu|s00MC4t|E<+MPA^9iW$-hIGO9*2#+ql zN`l~h<73}@iY}J_zrt}8l)rqMkvknyk|0k?>bbnA?T7Wa(96EFEvF|-?#EEout=jQ z0eI2Vem-?UcVf(pFpG2uSvQmxN35ER5RLSwj96e&e)~jN?}in+?4@K5oavYPl{Z2N zDpF)6qgJ$5)%TlIH-FM-fpA}SUoJGwE0FJH*Rss5Aquxu`!BT1+O^{tJM~?>parQP zCU;%AAKDYK@>ejrg7@3EnFPt~+^^Bj7FqMve!VMWBRC4PK^b;35WI z>a$*dCk4=sc>jceGS_=1t!Yz1oacgrd&eOjA#^}o+gZfp_7K}_Z%t^HWKAcTjo|4M zo!90AwGW)VS5Jx5*p*t`Dl=90FZ2WBP>n07AOdV)>8b|!{Os+C)c4wEqDy6f6=Q#w z+6Vot8333zLQX(^%dLw2iU;epfJ0V{X7Oc5dyFx|6%eL>f&1dfn<_MLU7-pvuC&D3 zf4k)LdbXA80R1?6`Z652<>4Bh ziQjy#fG2HT(eMX4CSRzm&2#MgkaBeK|2O(5_#`~H>`{Hh8(@rh59?@3)< zEP5{7cZuad2pYL#nOR8H41CBlqlTk&!8=roTEHRnKbk%-S1r%V9)zi@RmcsXSW?8W zyAS=R7N%bL!$!sMA$PA3k47zq<;4FlEkTXeVwhwBObe4G{hnMb9$9L)`Nu9{mMJ?< zk97Q-zY(#_1}=R}u!NtZk1-o}k&qJsTL;M0i#G)MGhor5B#4z0fr<^Af5XF@Fp3gG zs5KFr&2?uYX;~noEc_`uldu10aVmJdq-$n|6UaZ66n2_9M<=5!f79bHrzGO)o=3N= z3SexuZW_@FAZt`dA~3Di0s<;gDO0r2`YVcKl@$AjMK;8%)!7I);ls)$nb?fgRvUlz ztz#`D1a0B`G6^r}J#TVGM+74PCYzWU92Tv?lJgz7@B-w`zi|-)>BSankAZx$xiD}L zJj@$g2api%FZsIkhD99UzukBl|B#^UkS*|zD0Z-jS#Qp!VMF>69)2qRR>dNl+AU>< zv~R!OoSt+FX!unhOFFG?={rl^OjbWaPk44ESw-D%!L-^}Uf`;V>rv(x`TQtcrgllO zmU{T~6m?>&h54Ylo3W(T0^F6NMxnzh*o{q)&6IrM8k$f;ME}-L=O5o_0);ZX1M6*F z>-Flmx+VguX`3>vtE-!wp7vWh0ZLaHctT{LQSd|}@kt2@eSipGPfrgZ{eUXe@bK_3 zOa|ZXZlCxMR@M6zM@#NbeeHJrb-tM`%o*BWmIoz4^;7Mpx7M_qrz~3yZ-uzDlF;gY z>=2DBR)?1w6taNL%?k``Txr4a`p!*$6ad9jv6U2+Fm@?=IrxLEd56IIuD=? zp3+!w98w?KGAP*XwxNFnz!S2v)=jO!H0fRKj%cQMpDs7zjcx&Vo2hA5R+f+7$A>ZL zAW_r*KZ*FNy}GuQgOUUk_&BkbCRK$NuzuOZ1SmJKErg*8Y05p@t8i}KZF3Dq4jA^H zHYBHxVGXaRX^qj?vtR*-(K2PCDasEq-zJyz0x499GgThj%IK)GF6=Swq}S#EzZD1- zHZI{_`n?W5UBI_<9&p^QqmtLx*Ei+9L^0f5a{U{RYP5!;6DH~$N?Y_up*#uQMW28Gb>w6|V zsp;lI7_J+uJnfnPe^s`Ee}13+n7U{yHx2YL>X zO5=3_W1e^JbhEuVx=`e*wSU?^UpxhNp#IL2C;VxB`n0WF1YYY<$TE?($k>=3NoP;% za9YgK-I)sH^0#rm$&{QvGHjtu=&#J|HTN!sET{gLDG5)mR+@0ifmZd+w7}!}6Q__f z$=~TRS2hLc&ZW8+5I8!kKju%67$On4$CdHyc*aK}q6M+*XbF!7B}8Rp_F^PxH)13v z#biK!)YSKN!vX*VJC0~c+yhTXz=>04zSsV|~i%E`w ztO)g_{Uu(+$`ABZtMDlj|HXNG`f)Np3f|;PX|Gj%wT08Xz!Qgzh|C+4doo_LCrhYX z^_W<7kkDb>4O^_rG_(pZ~395d_M8jN_^XCU4={5yw+4ID7t=qNYYDEv@?;F);Ez}90?U** zV#V~<66njt%siYH+dIYOoUK89rjJ4IIf^^q7_0fDu`ZXNHdU0uLJr$A5l~Z|)?B+@w#0tNn)OO!$=(cHI-}<9l zttDmP==n%~HWb|rfBuh0+2^x0t=A*D0oWG^i}RXhZTGslLe%*O6w!gtmxje8GGY+Z zFWCg7P>xLc+nDO!91vSEEbP+v`587Py1}-Ppk=ob=WMipYv|J!#NXTRfF+EE0;8`x ztmvsN(`pcwCg#K#sMn15^yBIm0(V6=YJouy1Wp_x(wVWB5nY!R67HAEGPwcf^I^_2 zLicu|$CmdE*t47riGy$Qv(0lI*2|f^x6_Q?Fiizlxa`k)ZB!RBOa$qn<7-AG&eUTO$y${@5H#0o50e;HdDL1 zfef61*k4MO^yD~Ek4v<2J8F#>1}RXR*#Z!dYVZa6rezf1+SjB%`K_CP309q-Wp^9uPG$mctyedEc)7)E9{ znlg34&7=6nTEhzbBwPF3K*uHXs?waGY>jZn!JfD%?}WO`SBM)Wg^9-#h@D z$c;sFkB?uJulx}a0tRKS3>9C=O{k$@$~3l`z~I1MM}DG4yJfVXbyN`yj8)f#k%HOe;Ns_Z2i91afggiym_R86Q#a> z{d#L1;R|cA>bHPT%9=gCf6W=VRR`?t+eS-5&0O{SvQ{I2-~mYV2yQ+Qp@9&)AV;Oj zl9G~sWs2atk}MKBO63Mjr7fZ*y9p9pa94L}uQPEr$#^!0lT#D2r;?D6Qg_B0qCP&L zn+}0ETf||x+9SN_sF#VwDTL~Hbng7*`I+7!pzeqHW2lv5 zn8xF{Krg5%C^fT8&-(|&(-6US6M^+!C-=%*wey~?Y{C&lAE=A|7`lpbkcfi9N>$I0 zHZMW!OP#2QRK)HC&YJDHsvqNJ4lrvTdbL)BUJ z^Q%jsqLVRrBi|fLBGcK^=+*KMj(?nLpSfc&54Phn@M^;)d;%1|lCcai@T$qX zuU-#$-!vZXQ5B)li2DnO_g1${ONH z6)#CL^I2muDW@cWPdL;{++4*avM0|c>#|6=sZG-*#NQ;4vwRLH)XCYk?RqmpC}ufi zAjM!USLvAGoU3^~(qux0D^5h5DUB*j7FNZt?wWq7X?*=UBKEMKvv`KmWgXnxR)tk71s98NO+19jX}Y$jVe(pE5(6TQ3tfyUdbc=pF% zw%y$0nIrl3gQE>EQ+AKYln_|L>P>c_*Myy}#&%E+g4;7&Ok{`py>)5tf z%0U|~2snKyTK0p$cIY0SA1HCLW0HwjTwXVy@U?|=^}005SbiqSp=S{;b?4j#f3((; z{rhkzo*{$N6YKbzD&^HyD4aiNmog&G8hW@a7F*sNje>1n)MSHuye$95QsTCbS*<*r z|G1R<*i^UB5jz7x@w=j^@_VOIO52^}1)F1fc;N>Kh;U2K$!?@ultfz`v@gcf_$`;; zZlBfrJaY(k#)Tl`Vu@jcvHVL1QwRE9Msva5>6#HqRM1E8z|i!ELs{@%Rka$t6oF z1$TLQY2)C~Jvv%87fJ)d@ zad~M6w05nmuO}ye>`mG7()Luh2Wd)}*3rJkRi*N6lpegYgJ*ORtjDrtpWE+upnKAB zTK#*cCX(!^OB8RLJ1^~3`kNe&?g48Tm*dJl3q0|q286n2T)FqiQOazsj2Wxk)_zz# zsVyVZ>n$D6I&5!0djsB^GEp`2Y&XXpa>HQvzy8ooEg{@P5ob)8$LYXMOXdNf9ZR^f z_x%P`m@qK_P-qasO^#O-)70eW2x|sczn5u- zeHe9YR)o#YX9+12^s!w0pt0%E&k-Gz&r zyaYULXhKc~vHyC_IzXZ;nY1hpPz!@iPECPx%GL%2r-vH$vBmwCwO-%=rW_m7{f~na zG}Z|ZLFpS+WMDL%%yo;DmzPiG_2e8%_*N||i1Gcz?13ZK49JCJ8@}QLQ9SUxI-g5q z88)XIsf2qY2_nT6L8b>l@6dE$c7X*a&KIOwTXF;i+SOf6o@`<9d2w$U zgF4F69>>JjnuDd>r?MC$^`AgHp(9TNMb1LBQ1u?2%1_0ShXaz!odF0q^A);iOWp&5 zun%;;ED7HWrh#<|`$D7gvzl1yrc|CxsGU>W-7|S-4+zwxMN!{biChDva`B(1WS07o z3ztY}Drrfgn<=V(^#`thIpP(ZlX^(V$f}H#mV{A0T=oxO_AxD?9eE<1Je z9p8t!W|-geySLm@KI*5jpNQ&!z#@)ceB@ox<8Y25)!eq7rN2x+OcA{y2g*(R$)pTg zMz?(?{cD3eVKu9=s~4VbEx1KBrsjp{UI=u14(b(sZ}giI(-LSYhTLj_H9=BYO2#Co z`GO)*a)5T%Pr4K@Kck3SS(z`hrQcZbC&%grI;y3~DXpK>0;-O#@P%2skv4gz(v}2F z?1CxoL2|74wT92t(c;8ja*G+Kcz<)*_O`$~*IDNyI*03L1;wmBpNv&rmOb%U>F5QX zU*N0sI>VpIJ~qyHSG}@B#X8(W%^t+AuOcY-!48IA?;{A?*mc8(exlU`MlWaOzr&er zi>@RZRN6<9jnY4t-iVwmrhx_jMytw1{shL@~hn+;#daLwgV&>Svl7#X` zOe%zV4mBr4;9bcjVIW$}9Si$r5QkI9{m7_juT%l|#|-H$qbee`9$lCFiUC|^%wR@W zUBpakOGT@-uF;Ne>|?}c=~M6ET;7y~(O4Y`eXDDj1kfwZc_mEXn!;=fO)QO5)05Bl zNMu%ZH6~`&fi8O6LGD-3db^u_c?651^KcM3jHsBk7oLor8!WO9qa-`HE&^>3G#N59 zd<5VbJ0Wx(vT@Qah>CW1{_rEC z3v)E*g5#SLVHW&wHDGWwdQsZ`)VeWy9MR*zFJsYLZBdMMovZtI#vJ z-k-n>7mgs{8-+mP{xxA@0GvMIT1#1I1S1TGS&U0n_VW_8LHpZ9umj&p%pN!i7r&zt zXG^s_Kac+uT0PjxMS{tKY7bt!pFJv<#4Q3ZFAhq%<_a#=s&Hz<6kK zaLPAiMzNnuq2h=$3-@bEMv?E#@sj&s7E6+!@l_XG>JAkK=_|Zw(MZv>YNvh?rs;W{ z+uSTXnv(IV!KA!elCp!Pq5t&L(qs>e@gRkDMXYh&DA+!S6A?r`@9+JEeH~R2yrEp~ zC#1ILZ8Rr*>g@e_Y2JrZ=zRo)lu~R4%;6`wrq3eOGf&;2%7r(xmp0|J#cYXT9Czok#m`Brien)-5ho&O^6seZ8RI zVBLRb4L^-R z4N}+d%n51KoE&Y65&1T<#1jCB$j@)ZLYrF(aIY8(>v!Q7`!fs+CCL%$*B}~KS2{tX z&JCVYf|cC9S!*wrj3Q#-d+^w8szCtwT905R#SqUhbfXL~qW+!1Gh#5`%csvdZ81+t zRdz59KC?AnCjYF&IsVOo*>-GMoQ_$L$Atg{av|S(EB&$O%3?dV79?Vd8obc{SLpk_WP_`bmCVi=Zb2m-=lW+ zpN-Y5ESTKRJD^-&ANG=2r5*^f#Pd2$m}3$Wgn$10IdXC6O)ixpXjbI7Mqd|vje+t_ z^u+>&4u3pW8-JmH;bK@D6lJRvIoR}UrPW)PYKiCHpdh9vSR=LOK5y6(SY)s6;&5)D zruFPr2?ig*xnuB|*O$tn0c7ra}f zZ~M`3COyYB%b5c0dUbUEr`y^4Cg{-Q3ijyk9w|HtBNqN{jak;pYRT&=!NYoR7~|O# zK_f-JBKyp9)e^BZ#j}TLo;67g$4m@fa|DDyQ+B#=E#js$hBt#gnYWhpim@QomX^v_ zHqld{r3KLc&sUKdqD=qs7hK>e$EK0ltCivtz0I%zWD2PXI0dMA&`zzbtabF|gD^w^ zr<1I$nHkkP;u+b30zkcQw+QgP=hJPilgWvGIG$zZq?@_4DI&q|V-? ztj9?DHmTRZK*m&~^?v#D*^z!+xK_J6T(9kB*Hh4%Q%1{`n=qYAR1s;MD)OU>enM?KGX3_8@(S?M>i3Ie^A*=eSA&COeZk9xj zMaz7z+$XGpH&c94j6}?$%Wz}Z+Uua!yP#d>2v}Djp|k^I)dAFJ9zz7C*fV(Zx9Y(BpXDy#vrTM8u=RyB@vbZYz<)eJ+rs#5;4L z3+FA3hi#v1b?u&tVS##K?g@+c)dM_Q+k2?(Lr}{TU&*Tr4-DOE|EttmZ1Mx?(Au>9 zSRhQv+C8>&N}J+TYq??1W28&&8OAZ^ypFFuJo_^HG}sDs zwtY=U@K{-|g`U6#%yKQGI(D1O4Q}@q6dI89Zb2a3(|E8g7jdqH%4kIH_OC{u`e-iq zdj0zl578xX)1~;Oha95_P(+m2@dHb8UO8y&7j-YAJ zpdb06!|(B=gCio&Kah%;j#4U;dR=m8gnslG#@hW7rVmY_wx?gOF|8IjXeYVOT7H1M zUXlQK4aWC+PYgDvVUM8S8@3Th;HC3?e^H=7^(#V~!*2DN2b*?%vI7LUNyMxn&J=ID zf#$+`K&bSVc4 zBwhPkzgLy_s7^1dVO*3c)De%h%02SDy{_PkTOc@PL(|<}75M5On6DJfq09D)xDU2i z*4C0af|)-mADu!Xb1S`vF}1A6LGGgW^vu81^&fQJe)_ihT$ME(!SBn<-PfLDv^Dbu z#Di%JZQ~q)60o|sv9Uy<{Yiucajtb21MDTux5MTd@}6ZIYCO9R2RFu>qwcXktLip? zNW>p^hgW|+GX=}e&h8%@BPS;QU2QzJxv}B%_b)ji1vN zL!Pv8L!9KM8&fh5&nU(3FBdl%ecosCF`s|-jOL78-n{>|;}-uUU3)*PV0~yf9d^>? z%A4)Ut2f#UFEX;=8v)uwr3bEl+Tug@({+C4%Z|qDsa*CUiHh)y>o=wV%|lI*Vp&_ z;-XT^0tmwd?VoAupK;T5C`U;1&c7<8RX%gmR>kd3*8bjM0G%TuGoE}8@T~Unsx(iU z(j3uFEZv%m-r%Qv;%x|g!{ZL@3Xi-pOM*O8mAM$wcSd{Bc0cAJKcALRj=r6l;;ww8 zH*}LR;%1Gj_jYpjN1oqyWFkyINzWqeBuA5doUtsJ*a#SNC{(xwCBY z+UySgrlrq}4Y(=AB_`HqQ7zy)RXI%K3!k=KJC~tkGXNjK&c&r~Z7n11U^zw!DsL-o zq(dj}Y?AhZ0D+(eGM8urcw@)Q&{v0=u`?&u6aP|4i7eM>+J2DcftgLJ{ zL}5PaFqpUwaUQOb^y} zGGfnxCo0GRA?C1@Qy$8!Y|JMSdq|sW9RPa!`TH|C?Ek#Hx>EN@k^W0e zO&yw>OEQ|yW$gb>t^|>(=yOO73J;ADwyPMXzY^gqt9v0%_=M|cDTG2#&;S&~5H&Xp zPL9r<9))VFyRk z{i*7|ymD}CTxG2L)MH0SQ&xYJ5rPxsA>Y*Ne#**zS5Wv2 z+>P(c?3x6eAnyQ9Of2}*zid;=hVceIF&Jk2c2GshvbB0!FYbSA1ZgmeE(fT)>ke++ zBD<7W)&=Rq8FY=>H(FX+mKUK#YBsh+K(5cKnD$P0V2of(n1V$N*kOkj4gQ|8R`tS{ za<)mtdnZviEXBjP%cQn{C*aV+fj4LR;$2yQ9P(+WSX`7Q+k2N_C7Et zr(2=GcZ#$oWNqiygY!m1d!^J*n@(WDil!Gj6`fTYNUFks4(D5?N{{GTo98!{n*Dt* zH*7Dj)md2$3X+iDP)IQ;DdNDSInyILJ3B-1>q<(((8#52UY}i=J_1W6P}4q&-)U7n zssWXtZk$opTTm}u3;ipxX8E%~P=X2x!{psX`TX^XvI#-rwrFDY8R`AQCv_29LJ=A0 zlwV54pW-atMjAi%{)dIFtjZR8|2>`0PR)+H52S7Sir!jOldHbs)QYK(Lh8ov98dRf z2Ij%jz4EiQI7)dh&F1k*s)~1gqcJkxYzJFhZjh|?ktprwY?}0iDnmG+S|?YzTnl4H zJC^|+9X*Z1zV~xV`}n!w`B5AUQ}F?IhvvUsGrF)c{F zgbB!lJJ_8_hp}r`$BkHPjyhM?Uo2&ADBp2^Z*Vu^($#n!rog53`? zV(Yr^?jJZ89?q7gmi|B{I}!iyBj2$42F4=ohW=`=zt(0HFd)PbWt&s*LV#Le7C;M} zG5MduJ{fBR`}X_y@9)xy8s?$0#L=OlA9->pU%nVkxB}b3K^O3gTLi!UGQZG0Lr~_5 z9k8nGKKv8hDPk9xEyo4pXZ)H`4J(Ka&m_lPRDcyL8wp0a`IBeyx^$BkhBLIrnz&W- z2I0heKqMAjX7)xMWwBHBmCGHv1yO+fcliNEo4HJd^M`O8_9y-gvHk~$Q3CLCX#N8_ zM$bnFu;OcQ4)0g)g@uLpBh`Zzc+8qni?W5-995$&TM;T?bKE&JbKv6`)YkjeXgb^F zyXnQ$l=EK@0Tdxz2JtK&5`J{A-yi|f$+I-hA!|jZb{PDg>E2EPrHEoi)1h|i zEtvxW9M7rAn}??Cz>x2s@8BLB$UVWS?|{WpHelMP^n(!UIyu54j@ z&x+Wqpw)z|G#?r8^nNqAJN2Kzpf~okz9JWL`bK`}Ukc_o;+o2)FOb?4wIfSc;kZdu zb0w0>0Sz}_o93D`zf0!p!7?^?G9m6f2%*8|$o+PQph>6({mf z#U~RQOqhX$%GtImG96OZ?b`z*WQt(pSU`Rtx*A^On2P-{6$fzB8Cr+Z`b$b^T{buzcpfO$_pm1f0%wMp%Ys(2GtB9omX6E zL&{~O!z3#KvB`{;Qy`^;+3Z=Gm=r$A4)H8~O#H5wEEu`hHoqBsmZKd};nCj3xHu^b z8tb0rDz4WrS2_z)|I#!}zL+>Xcby%j$+KjLfQ{iu7{j?sirdI>MsEkIqeKFo`_C>f zS@Gh&eF}zE<`3Mr5bBL+CvlRy$)hqFxp`J7;)jo}7JBgHN@XPe^t&xDWDHsPA?TzO zt6o!?Qb?r+)YJ$OBa{eDnsI{#|{M>m}gleXj)8{5xwCFA0J( z>k}p^PhO5SeLv;=P@E6j%o!6DvL{uXpfXwSFtMtioxRv@0aRi1_EmMUYY(TAW zje*~oZqXyDGPRPU0r>EhimGV9e0gOBi`fLZF9NSxRDU)m2G!2aE*GWvJ$=rI9bf7Y zI2PDSSLflmZ-Dv0e2pv117=_yplxNk)S{Y6C1Lh~z{0*?b1>TVr_qi~e4g5N%+@hO zs88?Ja{?$Xh1S&x4(1|#MnLZ4*Ra)>#~;5ACKR`HJvo1-W5Rqb@aA(%#gD+@NM^yJ zWZ9Fy&1c{>%IDCI5TjtQ<{f-=l@(+NtX~TwjMKDuw1u}eUn7ZAm>pZ{E=zi7X{1Qs z88&`35k09+gXr3$9td%T5)Jnm{uTVuAYb4Rd=er64GnuRbrG`w|MvtxEcu63VH~u< zvYnwu`C>!n!V>MajOhu6=@E5{7nIdmGZ-n&u@GV5AohL`XPrRn!b-_uxJDMu(ST#<;`&qY!jmJ|$XvFJrhMc|mZJ%5^~a zvss{A^~C)(@AMoZN;i6JA$1oO5&W*!BYodsy1`|1kMU;=G4SvXI5PR69E&sXkUyH= z=F>CLgvGUTeccb{H1678v1W32qBU4%pKml~dJ#@>3ytbrt@&D3C8+fg_-i#ixj825 z2in!N7#RJ4)R@m%@B|Q0DZ|teMuPozqq!em<#pb`2Oh6}>RvF!HuEFwhE#AqhM-&t|gaqDy26k{gOgIJ~8_S&D`Lccq8#MLs@J zwR6~BaI&uW4@G%Uv@Kj_Ah`&G*)&DQ_53%4(+)hyO0Pnn#fsTv$wX3vcN)#aK) zOU}0#E_<=~BsT{tQ}8pXrAe8ecTrye6_?UAZQ1Uh!uB*OG(2qVK^l^hDy#=&X5yeX z_N*_qKHw7)%G+M>1n`2w0@T&_CEzB=UAIuDo}p%7-IwtYKBsf_HQF0fPA_cfE$E?4 zl?c=*O_++lOt$DZ-BZFu4}GhCtz#K7!QMJMiv&Vfrl}Un)#GD}EO$cke2>d7xq;>DG^(<59zj!SaA$)v{c1r*O~-CR>sZVgr$vyJb-thE%Kf>v zYFFjA0KCAp8IpD*g zA)B8JW8j>d9xfcS;{phQT68jImRK|-p{$lvdc`mbALRJ=3qa^Nk}~_`8GO(2!I( z2Sr9^EHtEi=<&sK{?Yj=!u5n2`60=*uVky-`-OVV>&dbi6<1MFF^$(V<=EoNan;$z z<|{WhuJW94)3?wsJ9~S;q4KU!u`($BUor*(3W_>6)gRf&@c*G>95bV^|Cf!?w1(Mo ze)Bulj^`x;*Ef&MTmuhAqv5*y1AOr$r03*tF=9-vR*fwGnDu>gSQ@s30I(H1C#RmV zv2pb7?V9(SXKGm{d*y_juNxr#aBIx~lq$?4PJdczfWUl_(@#l4lP^;0)mpDq)2G?7 z+TzE=EkkxWMP9B3)U9+w6MMGRPGpkp7*t$=RrhOuv%)Dvyg8+Cz{a_WwnOTPZR;JC z8jFH0YjTh9v=ijDlhyr`#xm5<|3mUzhqLs(v_01Cwkd=K%|4y*?c$BSndL1MeKM_8 zvuex>N7#`BV0K4G2QVNxS=|gtLtwcd9v))en?vYgw5*^J^Ix2Zw~9D%+3g2yK-%0~v5#2URDAlimKF9Z4>832>Ul1Z7}VVc!8_2idYI-V|bR7a50 zm~u%F5eJvF^^}n{o-U9&jtbH0Hjiw6&Mrl~9F1E%TbrL5xRLo=y0zM`f{jn+Nteoc zLYgjq8F8|=M8{gaHtke&-ydnQSmA?!!&>2b#}F4GPJYj!3z6w{36p6xFQ8}CrP$Yb z3lWdfdXVT3fISBC$z8aF;Nml)va-<&y=VzB!-w^^+Laq1Qa^h8-r+l${|S@(lNHge&Yj2N2p3kdXMb`L#?x(T+}fEShyD zbkMQYd!*+Xc){<1euG={M{-$U1d`%uf9T7svxGa&Yejsh6d;Bq?bXBP_;35BRXVD?IG!?Z4#|4oyu> zS>Sa`h>H&^c@ohObN`tLKl6e1m2z!`35_>|o`FFf2oI9ZQHHk$BrHh{fnx-h1|v{v z5wTsjY+9seug1YJX7_#$5$UrixU=OKmbaHk7gxFvC~PYomi6I(od>{gUu9wW$57aq zJRj4Sr|0@Jo6*GT&n3_t{Xp;$cwe#NZ@(NjN-kjit(NeXQRR$n9+{2)wRSRYo=}KpJLfc)`I@hi0A&csa-{7OMO^enU-xyuGW#4|aEj?@m`n7?oUI8x_JG9MFVO zq);!8imLGjO0?p^Q0ABzTQ>40l#pbCLgkc1brsY5XrAT4n zcj6n#{UI;CVoq{&&gPtq-GdI3v)#F}wV5UhIPI8X@QJexU5%b0$nGJp!e{(|9S&gB zx5qiqFmGLCWaNTVJg|Q{x^kjFy=MPTYTxWOM8^>UEF`j2(nyi#H_ty%KHIodaJbrHF>_BV(`ueu0;;-x zcoSs8fQRyFJ-hC}G9)z>$EhgXepgv=D6Ap^79_CxPnBq%q z{FTNYTd7DDzfi=TB2yM;zq@zW zSiI)4%2$S4DE=DP4CVYI@341Wq{e_kMC|q23es6V>yR}`qz20l6cUd8!}H6+aVo_*casEl*@dZ*Dl$=XcjD9$4Tz#yqsO#^yc%}q@yhJa*t z?s_0yBI!QUn!~YW(&6jxG5mD@*SuIvYBbmTc1!NkZ+>B8E)EG9iPG4Gk{(GA^*rHq zjeh}NlYj2oDaU7J0V63=F;rqrX-JW~2m1c&)wa}Pwp^oVgm7|U zD!5^`T6JsSm3(KnczHAA|4K8soa=n~rsh{)UoW)FIG51s1{7&&MXIgr?$4^!BI-Q8s-=pafCUgO zuq~P{Jls(S>Gq4j5aPD?Yz*I4?{DG#wH+t|CHlu2V_p-6_+SYA8a@lQ9y=U^Cqepe*Th8S4qUSkz0)-A z>)nd|vW+Gp-^&>{TMMcH8>liY<%+M({S>ln=ppzm9ps}dK+8!3UXa1AcZ6(lIA@xE zAFDXAq3N_>Scmu>{sGg$Kk6mElo(~?;EDMokKPgB%atuJU#Rd+i#Rx%R-~)pZ%r5; zPH-0ly~(Y+MN4%uD#V&D{bh1!<}C63W}k_mmX=oR(kec;%Q%sJ(Tthf4WrCWXsf5W z_s1tj^Bu-E+!Z)QUA8jKmf&z=mUbE?+NYR_Rs|qol+csP$~ehQ?Fodi8i%w`xQNT+ zm30^BwZ6LoYsSC}Qt@lHMGQ?KDN;Po>|#$E*m%)%>3{gbmAI4Ai3*cgP6^X{X@2_B9FzXl2F;UAr=ix39$sxa)Ffh{JvtURPI_ z`{}q^!|P$E4iPvE{r2ytX>EFp?s>j2@>Mx9YpUNlVU1Co^eTzpt)~$UPc&>1;>( z({}=-T2-Q%b>9H63Xj8=r`SMV5%KSfXu>9vLR*o-idYP#X|7MdBvZ)6*WL$g{>n}NT_U`M1 zyqfwEs(=#84X~G}aD)a926ft(uXa$lFHmVQrTQag>&?hEneUJYT6eN81Z51lcf}Dy zUcgL(I-ShBeU|hG$Mbc(AJYF}>m8u$+S+j8G;FNKwrv+Nn>4nQ##p>i^Zj@HaZb~ROtE$m)ZR_N zUzLU4JiDXbe7?!3iA+8?OL>(bioV;>xszrogvs0b5S!cdf11%odNzg|MU;DGs`6BsoS z!1kN%t;mqq`1Y#C=z-Te0MY;JY}l=$HS_7MG18kacK%wCWH9p5aUtazF@G5xmszhT zd+TvWZ2scw)Lvkw-;vJ|K?x^34|-SC_^)cXX}+v}RK{J8k5*N0c`EG34G}y-p42fRoHe(0{sa=g|$C~nSbQakjfzKka zGO;tS0yul{fB>oA!0gyj(Vc+L2JC44Ox9ArXp3ccF~1~JL8GGckZ{0ZT<3tqq2 zIAGa(@?qH-d@{_t6!`+Z@$Kn5N4i|Jv!B2u%%2%9!)YZs8~$_>pLlj%vT+dxEw3Qfj@8&n}Yj<>)H+bnb z(4UqI+$j;=69kX6Uh5*}KmtOqzl;YUlr4|G`|UH!Q={G9ju!B%zO9-cxrgDkM%hCl zRC-L*hP^Bq4srEto#7g;|44OqZlQ1|n5#Cu>Gsq)dnc!!@vm%=DLQ z`Vk>p{=ZJ#p|fqVAzRfNNS~S)pI$9HX1u-l{9e!?5sLU6*^8nna5!D*$K(Ed-`bc8 zby*RWH^EhJ{fNmJwt6}WVV$v=LK_H!*xq)}z2x1*o!3%DRp*4fG1Ae%cLEM@k zgo^9&SuN92>71L7)35xA2&76l5-bkSAWV%3Q5TmFiBfEw8OWy?-u&u>aO4)_a0)j@3S2Eb=}>{ zoZOENB9T!|M4wA@OM3vjfgS9T59&6Y%?V@kE1kOyogZVx?DI%+1^ib<}S$^MU2146$+0nS-F5ZHYF!rbyCf%dxXbZ9_hNTeMxx#5LFowC(H{ zsT_Z}NfQwbh_n6-D~5IdQhQ!&bczlu`+{AqYyi9F`}BS^a9tbbppuXxUj2|ssU|Yb zj%{gRlswGdasPFP%`Wt}y*zM=jtqo_5=LH4n%`wVT*J30stAQb?XildGRsuN3SAe7UMIhMh4^HkU_RAEqLth00k zoB1n-?udY)%Q7vTW0uJNblP@(e;$+~5!bH1*G!zjCW~kI=KLp(0B< zw#27SsI3sHR-b`KW+uI82+L9xXmNW(;CKeB#D`dL%8V!RqgZ_TP@Ux&c}G#|j^=qS zvNqBcuDDezM$E$87TKk)xiKg>6b!o?e_U?xgQt~py|$1fDhiv%0~JH&UP zpVrV$sVHB_dgBxo1Uj+$Q|18d{51%@5mCY7!yR=bjcwLFQXGC@_4MOgU42sz)yK4_ z>Gnop%0VQSa(WElWPSjGxs;_htmmKfPxSha4lTEu_rT6GVcdDWU^pA099C7A^aS}3 zA!iIRFRRB=rHicYZuf|rLMd^VtsQ(eZ9w=SjAUYtW}qyaL8UY33X3ph8yhzuK0B&w z$Zw-l4klNpP3hnJO)NFWuoT#upi&`}JBfD=kZA*)?UpEEia~H_GDuWQ$~@MEADx8$ zg`Z(YBWVn0LiGHy&=xA$b!FtAaq?3fY2v^Isk-}QjB(&Abi%EgHtChebqqnk`J7%R8{)7AV5` zG&{lbp|Ac{@2gSJJjC4WtM!lMWC`ygzwTenS~nqyp}W|)qB3*&m%h|#?oX5B6%Nci z?fl>_T$Az)ims8LyL=d$5`^psktZeuNqegFT}dcnl~8f8#Psz^qoXC}5zMrheeX#L zi6RE(XG&F2#Pp9%V!XF!ssx4ms<|5<+b+`{w*+TL^3?UXEwFPO4(DCwV63Z(Z{0dB zvyJm_%vY=@Bdwc=qoO=auBi$Jt>AU$KO;_i`36F<@nr42c3G-uf0QU1;gAF-?UC*w&1>{0Ba2OJ-fHP=$|F( zMlJMBjiMU(;PAMj#^V;8rqlU;fq1tOr}yB9`c{QTz62;x&s_nGgdMO-BCbxa}ph23# zK=fr#L`Xoc`LUSvdq5ju@Q;Fx>mt%1{9ZqoEz)WS3vg&_@ylFQAOHqsZY0|f;@hK1 zMyL!i5bUQSM>3ML&ZFtP!CAAb87X2Kk+U}+JjDrlO9C=LPu=%DzIPmleZV|EmFTM+ae3f6G%!^K*SA2 z`5pQmkfJKT4ZhQ?par+bL}XMc`}^Q14i)5_5ZOjDUfVOdAjq9VS6yITpRpE5ebynr zk@xg}11QZ|Q&1v7*PY6jaHYX!Pc)`4dnzlN)>*8(~#eY{pnOmm7<@XCe95*q9#=*M}%|&9PtA z%pMFZwHAB|>@jW@SYM7yT>NqM~(zfl3DZ_94+;sxv1Q z8aEuJ6jiPbHx~m+z9{oZcNI;2<{Zq2B>S+D1!wnbztL7KIMS#u2IPvv2~9)h(om61 zKRS*vc)&=q-%!xzFuF09)xk}L7|~v)py5s%GHG`B{^q)qti(sIL&_5TSe7T(>ROqo z_jtD^wmBY_MPQ>O+ZqV%Dqz$41*~Es!5VteFaV=}#lsD{x-)8UeJNujPkrV4F5go< zA}L2hL&inyw~tLuYp7xeYRxu7gsR*^o8s577=mn2pJXMhN$|zZjh97N=OjfXzh6w; zUsRhLSqz#~Xk@3zYKqfzFNQhil+!c`X2wMrkogXO&+bv&#GSh;>-fxzKGZEIeH z+a0tDpMlcfR1$W)#T^|TDYeW%?7p##4F1VNti`SPnBYn?hXXzR{^S%>!i<@y_%G@H zBNY|W?Y&e!E}-n-m$ZUQ>3-b+{y3sM@`4$=`Rg;-$;Y=1J;e94m#D*&lKPLrqvwvqt zqeCO>z)feBYv9CwVMOY&i4Fx7OBz0lWMN5`BTBDYul1DJ=QQv?Wbb}Z zbdBoY+8Br?5fl{EW>4i={jjy>Rxl+76u<u?cMKRcb-_g+gdv!NHAKJg}=xKRQy)6oq=T^vV z7wo0?TZQ^p7E+EmUy2FSst;5)pXweT&Ls77AQm$&>u$VXu^kkoxD^!?6g03f$ZNpO zaVIAS^vsQVpnjop;j-wQ!S;I!T1#nY|1fpliGWxpf>ukXmPXi&thi!i-@+4ap31x# zd$qXhW=KnBaMsffPeECZ>p}AxI}W=Vx_RLI<;$q$mDG*9usNU8=t}qH?UH4U)y7w# zi0J*pU~Jg=D;xQ;NuJJ@a76npHi&Qglg4{bG459O)|>^MINKZ6K|Rp$r3D4S$z#bI zk^eR>Q~7PZVJZ@Xs`TUBvC}xgx)o`MKTMmu1rrC~z*Cr4F}KQSq^V9F;H|GhmH8_&+|&?~AGWIMo2byXjnL&#IWn_%rsh-P#dHk$w@wzm zoF)5Cmf{YH>QwRJT$*oh>oZjub6xq+7ZD4@cBOFcV$c~a&eAf&vJ4We39KQ80<&6# zD#B?uDQ4G$^cIqjD3E*5jrg+0b9DHz{k%&NDu^R>(DXh=mLB#SZQFsg%*yk?Mu9W< zKSMe|K#Mm3{({OQGx!X1&?z&9S2d>B=)OvoesjHbiZ$yz%+)Jl5*S@NpAqv_T?LEn zgK5|kQh(S_#SU>@n7H`(?%+a#4VpvEVdf1Akj3g0VDa_O~)nYJ``kZyuzaT}$ zSW(FPJ}gwubn=>pg6XEYKu(ov8$eq7v&AVWMx{@`F_VzjFG=|>`S-7Qi0l0c!@~94 ziH|zsJ!QmRrdKy9`nRv{Xb-~8UlkSiXVK1FwuaSIkZd$;n}vkh!g0?647k|M+A@N( zPL?e4vTl6s2FyX#I6-yK>FzSJh}VoS24IZGEB!g0)vW7{seYE!b~~ECZb8=KLG&K- z2wRywpmpxCsQz#pPC+EFJA0vVGpD4h;J9wBW43He-}#BUN5{f8k~Lt_-^K|+NkY*MT1Y5R0JpgdRSFvw z7rtTv6o~%8Du7@DqoVLZY{9`THJ`Q)=LF*e9kqii^3_%rZNW*^H)=&Rxo@~vQ;S6? zmB1{vJ~)9;9b7FMXBK&53C*9Z&I6I9WUz}NOLKCY&0{HDBeR3ixvV4s)#6(zpfpst zdHM$EUC+B$bD#Lp8PP>-%@#2CfYpAtT4%x53G6&+l`HnpAHa7hR2%jAIvfjK1%nNV zH?gmZU-xik1;DG}-Is9YqJ=JFxg$n|XnZh7`EUg4cumgh7AEdJTLi5YDy|Yir~P)~x7uRBBXm`iLc<+a z#Sj)BG1*U9`aupIXY0G)2*~~7SHi)iz6r(BvMr0%Iqp&86Gm!0(7Re@b75S6wmvqj zCoJ>Nz-PkPs6vRDv5tTW*{|e;h!wp8b@t(K1mzZtLgyW@D z#{<{I*I&v9>Z5B~4YFa}%2?Q5Nq<40fg1EiNSoN=LnF<1uS9TxT{RDs|?^!X19oFX-h?Rkud(QU#$5sYDmhQNda~t zgJEiqEu!zTZPvzAd4 zFK%aDSAEr6>Mf(8QN677zlXGkFPt={IL+;e^K$128s!ehvi|-*A&8Vky7M^W1 zGq{5)p!KeA&g7G_?39gL0%@39n|B$)+RJHHUNNG|h#^a~Au4@jsyjRdCJ!YH$khG> zYugoquVqVBFG3)JJCK&g)6z_zhjH3WQ5O(cK+6RJ_vs3PXqmxOl|h%jKbyb|Uf)RO z(%zQWU#>sH>!Z8O_4ZDvd&LMYK64JW9Bpo@l7A|_niQiNVNx}cL)RO>?UPON9mNnG z()}v+Th3Bno!e~by#5c;pX_((0QJpM3-u3rOf{$7j`&eS4OL2e`iPhN)-FaZlYMDL zdS9V7V8@B6u3~^xlkVV)NR^Q-3`I1Nx@^UWm_+|l?RG(L#zl9QcadQ~g_O5yE$h}R zOeDYpLK@x5>CgODn^!q+5q5R`dd$kayA{sF&DmlsklRhFoq$w$`g5aOb4#Pxk z-o(u$YYDwnr5D)G@)me(ZoFO-Ku(Y2fzZv(B|VTxkAaBC)Ax($TTngl(19TksT9HmWK>eTY6Nf1vH);Qt&O4O(R1kDs_Aiuagbh{(KnYO2 z=sGHVXee~u6rn998^%qXO4eIpR*w`Nt5d~)cEbh7^Sw3~%jTnVV zO%Af-BUb?Br9Im=|1T^9IE4x4QiW}7pa&#LJ-_xqx7js*#jEgV(4hD5+ys9jCg$8r zvu)T2z`^8qbBa_4kj&pEDpLuP)ZK+?SjEWB>?1YCXcB?HQ(j2f#%26{Af4aLc-`4j zPTxwOv^xNv1W3AwW7!fN$^RHsYdUv1NRfGc=>OlH?BXFhJ^`H=?BPO2hKmSV&srGi zrjTab>4DyqBqw)O(|6!ZpKe$&g974tF>(JYwuUvye6F|Wp<2&AfDQJl2UVuhVujn| zu6b?aQ1B-BpIfH|PKY zqJ^tjFeCj;iw?{b034lo@j<#;j@*~Pr6*jE=b1b%Lba^U*E?6+Lp(|nHe19|Y*~W% zPW0kq6Dxz*K0o`Q#p(a%*LBte4V?wamHQqqVY6O+4^c{a5W&eE#LVEGos@MybR}B3 zR5&DcYHWEqd6fJEWpoIfhy9E#t$I;+a*sYQrNedh!X2(w>TIo_cfh>OW9@F6OuJqI z`BCxlRBQjmtF?JEkF|jD4Sro4LG7o4af6?1QL2A}@0#AOc-d>;1rN}o zHUF4kV`)`)>oe=Hrvl4~4u!;fFzRz4A^|?8SoC;(N3g?eM4F#K!e?J&c&FENmCX>hLBev`=ORLHgp-rj$gPWdqjUiOuksjG-B!fC+D}V(J$gr7VzGl|hXGJW^KjzD%wd?5N^%*|!+r>7ByoFa z$Tis^)N7ZEn^SF(V~bL_YtE&kH#)Ixqm}a!MiSy4Hi(stX4*OQO`^y5e^Q3>I*xix-o z?P&8!d5x|FWDuD(`Sb|_zZEl9r_Ar>qe^TZE4kZfz*Vz$ElY&rHs910*5u}PX&9j5f>m@r)x7#8ft0MnwlAJ__OE* zu~AWChnifmgKC{hK!{C zIr0&Ir(!}I0H>F_(}w^1D~v!OLpDeFJroj%*?qVG^4adEa6afqp2upwW3?RPbTZzhs_wbODc7~gcwt~_oc#xio!TCy?mZ^^}G=Uaml zhHgrsZ>E>PvRRlrT~{yTkAlU*Zp(}E=JC5jim8i>nTym^@V~o%7mA0UwY$VMt&~-$ z^?`^G;vMRiS3uL&&=MQ&zfcXCLKPKt`m~FAf{(Y_zvzNHvb_O(T9LLxR-Y8t<&D2w zCz`=KVcj$uCafm>NwGDKI~AFy>@={`Nk;czagTa^n#f^M!x07w%^EF0@V%^}nI(}8#Uaxw;th%IYU@xy>q7F8Gstoe;1K%wV zoKAw~bNAL9oUi;L&E)_HTNZ~O^@dcos3@YM%01X3e6=5Dph%ZQPqwk-%m*>=$X3;g z7`-tMjgzZ`$Z~Q+ii-m`ChSO{XOf?cZ&sh?1r1dXa-Nb7WwHR@X;~yUy~QTW3)rMs zxE^8DO}Ssau9JgL$fWE&(x|#$Gyk3T_9Giz@T``WG=Y}`nV$asD_?@=tllPq=XEGJ z0{%3kO!tH`wR#7MD5H3`+ud2DX5aTDS(vy&k#haux~O{Ed3a`YP{v6}Tj%IH({hcg z#-5^MH~gG?6RgbGVi{i7csPgXi1WQw|?xx=w@kBoB7Ho|xd_>i?0+;`z zY(Cf{-2FJDdPar&T8I623Zq}kXVy#7Zw?AFFPCk{KlFvMf_OeoWnyyKkebewpJeQh zK}O__NGZcO8NE{g)# ze4=mz z)kROg+TiimkKQ$v_Z0%{H7`%1%#9EZmSGpP%CcWeR7@VbSv+l??#k%A^}Ih*@GJf5 z0W!w>+%3Z@%YrfnCLh>}DTgr8NO?Ah5EFw5y|71k{BA$F(PPlRHy9PWSlr~LMzwuG zOMg9ctmg<#V~TRN8$1}nyhC$qfS0bT^ zB>Y3S#?i*1#o|u`4*$~Bt;?`e(w|#bB4T2960^Or^o&k{2gf&`hv*ZTqL{e2p8B>M zI)~Hcg^f;zrhQ^+YHA?+fw5zAS6>d@Si5d-2zx!B%`p7y9EqlLYd5CbvIPfFr_PBt zV+!YPyOoji&)6d;Vo%!R##4IzD@0wHrRxh?W>>Az6vSN^>YFXBi05m&c{#_+A$;HS z`6o}B!)v<%qqhGMK?qztij>j?v3-5Q0SI{Fz+r_bLP@+b`aj&nm^zxi*bkH_vEv33 zs%yXJhR4+rs3Z#XTy3g8xpCwlca~v&!fgA&pTWT#+CgRXCder@@} z<$NH-c%@^L>PvPuaTBF7`OqV3`TBIL!{}yii$f~N!f zTE`J|Zbd0Q&Vymj)k&tbYwXHR+U~tO6YIFVvb3hpU27p7d4(nD zrvn~}NSkxxR5Bytg1q4}Rsay}o^N!6xShGKZN#Viy76}7Ed7*>)n>msEhi#Nk zu@wqkg$}dz^{0}oR0IJ#zgu6ICt5Lvv1r{MTLoL4{)+EDhZC>^6JKBgKbMcsG%v?hKOZ8 zQ8LjK7cQoYxERo3Rkf-Q$*$tI%U;My2f*W(m6G|o=*sC8R@{&Wq1?E3bWDDB-+|pu z6s$gPbpGIbtQ2MWM5flp9wMqenFgBCU|>@rv_m;cY^%h5dz@>*X92J^LxMcsfh%`& zTFj19c8Z^tKVx{>q96RBiezHePJcUTi^y{9Rd;r%g}gzQIJOHYkyI2Ee1xEZ1?@X2 zq#Mg&wyI?!RJejOzgQiDl^eW1{e-&aIuT>$+hWs!klff4V??{A(Vvnhp|VAwX^v3K z8kvU%01eOm6Y-k}G=gw85AwcKChax&>r;VMx<1fQDSh(zY4WAY-IILupbW6vA=T_7 zLRIJJ4+i}bh!^wh7=bt_UrWVxJNWaqd{Z|E7J@tO8!@}(* zLre9s^|GI^z#2Iy7)(O(O79e0j>~hnIc)%u_SwvwFM_|V_z&pj-B?6oC%7(dTP8ZwCT)f* zlxoEqw{K1SwPKg~#u!3owbid)BPWUXkkhTz037XseRZ83L7}y;U~g?qW9`{XpuH*` zRcU41@=Qi|@9a$X;E{pz+CQ}9^o{P00=~fF1eKP0Ib>Lu>}0S26AZWb8Qziq4ujvG zEcWT?3G+@BJ@SHZxWJsu^a7#HS`*%~{Z3{R{W(Kxh11*jjCRYLVwh_{yRBxOWBG0r zQB8BWUFtZQLu3r5AP)0A^i{3iVka+A)5JElrKRNu!u#8jql#{C%IH+}7Z6?lo8EHzubUw5H*f0E^wqBFR06tO+8&15%DU_f zejBBl30`pImASy{fEtfg{2kr;LuZhM{*+duThcPo z1LC{DBlc^h3BKopGj-}(bL8(1)MH->&lk|U6OWAFd+b$PeXve17ktalPctKRrDRWI ziOyU3=5*ykxqJo7;60Rggs_+;ZxTi9k$?eYV_R0N?aK_xD<{}pQL%}F)Wl&ED65tPb7PzH zkzVSVkW9!ZC6UuW<$MgaPqV%*i}<;JLYmqPtX}g#GFe0XuHtSF`Bms)Gu7+D$Fu6t z;8s@LN@kBCBYAwA^?PmH#1VF8yPRZLw}GMP3Faj@BdgUKJx8 zS2O+1PL7Xu83@=-=bQ5q&`<#ZE~U5}$w?C(7~e2=?Y3+<@7MRAT5bq_(n76c%axlt z)7diMA#Z*r4)`G+W@iYai5y+?)fpc;bk^xDCUIhTW%r9os90umM)C(eu%PRJ%NB6- zGH7KaYZjTd*wNZm%cJ_XA@=h1zTtq%7tfOWr?zO)eD%SHen(k_2Y#MgynX|G$!m_- zWPW>N0`*Q6`djjB&6Z*S`!qiagxOr8pzE~k2$KolJu?`ws=uQD<|^u0XYoXOB7)Y2 zzlht{!&-B#8t}5e+)7k#e0q9be@;|+ae%qgfR&$JXarK1Px(QC3rq%4NV?t82&ineIl8x}j z>JEV{Ru0+Fb;&c4jg1#&Z@Vduo>GTrUi-m4=Eb@{zM)J(rEdy(y7T^^O|)L{++pD% z?9_#ANN7yVILWCTIQX+(LQHI4oYye$#H!qyF|-Kh;_Bmr?l30{KXTlSq_1uAO7kQ} z?fIgSf#Y5xK;>h~!{aEzOhlCu2|T_GR6}guReLQqB(4Kh3o-o8U{Cq;#FH5}{u}YJ zv(Qk^R3WX-a|=9r61$n+100yOmi(p2#R@@bFEP|dZWt^pw=!17pJS1Y*A)ybWUYRs zvW6btD`OB*^t`v8Pdrbz$InhkHk+WFCb7r%!vdY(+IU1?d?AJh^zl91u$whK{h&hM zI-%!8cUSMEN-Ss!*(tg3edvirt;K;ii`BOAP<>X`A zcZ=%qIG$d^y$-fNVF3Kw>d}`^?D*!^uV^%izZ*}Y)lve9@h^ss()j~{Dt|>q(2@P! zfL&0A?mP0q4*p3Nu%(^oa>u>C-X+%Encc=VPC(`vk|AMX(g` zr#DKJxWg6>DOlHDSAtbsU8SCow%%gC9hQmmzk2SpypCTr5Iqn>g1J4TGguIOorI@D zB`iNlz5gNgNvVL;?!eI)=rK@N5a1^|%-9`G2!IO4QwO;~sURl3KD!MwVw-$UyL}`e z_jQtFzVw^)A2b{ei{r`L8pF{;E1bxF-{GBX;NtW1Rot6wA2&6!;M*F{UF_)Z|1T(N zei+&zC^!aQ8-G+pj;3bATqj?s*)++6^_9!nHc>8J^|OKknu0f2*gFHN}RN{ zxzQMZY+#9EB_V$CoRS<)>KCyu)WRyRXpMtArRu6u0KwJw5cers^L*oQt>z@)(`)Zq zzI#;U5h4>k`KoBh?@s&mvzD6;kFi#5leyPQ%6ISp8wVJQpo;)PV5S2bo$S6(N!hm* zx3H}LLr*_=oP?vUirMeltAcuAR0&%1vrUQFk@sRx*JB21g3{ftX7si;MLnKdXny>RvQUhU{8OofNf>lVRZtMJ6woY{T$hxY zbuSQwjTtC7IIw9d^DQ{;14zS8oK(zP!75SkV5^$LCl-OVutw#!#UHmvR%z@`R*O~T z&cj)nwz9g^rPUZALVrhRRpq{iAK>xwSl1871>`42lwsa^TyXma@SDiU2L-J6#X+JU zcW4sjqerdjtxL}RF^GFaP%Ah#xD5d>KuYv>@moJ#j(BQ)(z z22op1R?8Fc@Ih9sW!zBxbJ4Fa!nkZ^pSE)x7iFcyuYK8j^#E3>du1t&XlD!3Tt`raopM?y-UND&%PD!w*%UMS6+g-UjSQ+tNnwC~xhF_i@P+(;<^lW?6H}_wCS>f@A8?MInj-B_eYOew}czyZIl&4eJS#e!L)?Vsp90Z=uGB#r4+gRHZhj6<&qemAxj>>@=9NX>FGb zPhCb}hpW%qHyjSjl|KjS+g6nxE1tj*^b})&nzW768WA?PD1l!pZ<-ls=t9`w_HOQy z-=JCFS5yi<@-Ci`Uk4v4B)d5stvZ~$vN8E4CA*_D@SvoF|LIsXONQ?xElyopbyjbl z{(>1e13PK7dA(l!Qq@vu5<%kEM_$w6ozP#Tg4sLQ$J#T^K>p?Cgm)faa&fzkW96Bi z_jf`qY=v%rG1+x!T6cs3?E!|jU1t8be(il@;`YV5&RtfP=awqG zx^6fiXLZ|s*rOgJCv`|+Atj`3*yDJcS0@R#MXz-elL#EN^|}@BScX)XaoE2-^*HQ_ z-f^?LhETOfNopJKsZwzpeFMyrR|!kWO3^a28D1x)SIQQdB0?VMu0D~-g}P|XlQqd0 zzvrurcz*P$$(#{?U1$t8=b22xjY3_hI>bNKv>??fRT*~L4KZK78n)+D?jOSn=46-e zy0o8OONKb5QBGn{9+fb>I*m6~ahgF;q+94iAk_HBiy*#)xbE@KAxe-K1sA`hv2aphWdO6w!){^?j4B?^10 zr?shr>7D8v!G?^!TElW*sQZ`T70k^H!H(|a2pH|#a>*oLOEhBN>emM+6_QT$okS6p zgi)4D@gFtZV!|ioDLUbk8P%W6XvE0K7(I4X)S1>a+nte`YE>W|PHH<)V3(2JN)9w+ z0*23fb)}wQFiLE?po+fAjKFTL2gNgw!xy^W%A?)Sewb6CeYwq=ae+@_y4P%WtGPC| z?;1`zSaP$xt3mKmezrV1YwqJZS8i}pePHHd&tioJ+Zs=YD7DyAho@9!rGj2lo#0%e zoRR;^uJ@v9nb2F+l0gGpu7Ym1=n$Zo;3vd*oVL-BnqmcN;rO%_`o}J)JKUmD&?T1m z6^w~?67*CUfxyJ%4RaS6js;K8bKQ%0jDhQ10kd0JC~ecBjF_>xswFLW^lkv zFAVYrd+eCjfZs>kyY#NAcny}xk0YLdMHFyYxFU?y89ob^6(*0p9Z{WKg_U7gfaAIC zx~54w)^O~#n_n`N-k>f|lOH$Ysq1XO`Q?Gb!(S3;9eWWe#$1hKPXC`Tz>-?8jyn8Q zMH1Yx_Su;I^JKk;245xwp7X5vPhq&&ekN!yywawAOxT^oBUO=0l^4=-V4*Ra&W5W) zNaAx89o6SW!oeWs94K>=WG}lpuY+%N2OxWFf@n46U?O{j`bIoYu~{l*i%SUc}5tn*T-CUAQ6Gf6EMgeSEWZ{ z%vnhg5SF)+5858|rH}mP%ns~%_%3vcc zgAV;7qn1W^Y+WD}Hp%sZs{xy6@)^RD;el$+^%@Tw(mgQn?H*^6fj{yKx)u9#YW zV4tVOx)mbCd*-!w&MFCucXJ8uG~yeV_~6j8P!nG&DX!TH$krZ21w$^R*C+I)Zxm9} z8XXOIn0oG#8E|*f?Saik40j9?u#2XboDEN>3)2F>6a1AV1Es8b^^=}e_>K-M^ocs+ zW0TzP%vwY?ekF(yo~#<5CiA6gVN+bxx8Iw)q%8D#5%K=Mr6xa{A0BHqV!;8SQQ>$5 z({cEFtRS6@-Im`)GTA`F;B+O z!sGHD>K|KK7I!+w`NE@Tk4Uk8E#PlAL`@mFU;s=r1XDt zZU#A8%QSplY2V6$#I)N;e?E1*LshHs@pRLpx2~1AAC!SvaF|!FFFn_!cc9%oBuJR} zcAWy&^7$P4i;ztGo***b$;k~fj*dEoiVgWb?!o$OdVX@=~l6;D8v)cbdL`*`$ zlq{M4nw~|&Zm~R{cVaY}GPA*s9|;BcDghpW8yhR^oTBZHKu(V~gkMt*rA>iK{e0i7 z%5w|g2v%#rLNc%s%lo!)O|5(kkiJ2R=$>vzChZM_;p%hxrXXDGh`pl;Qa!L1mn4ep_Za=l_9k@Tv zyhtB^4ITEl=kbim*~nRAV))4*Q{fsnyrv>L*=j&H`(iaq`1<@hK7g+!Y|;FUF!UcN zB)SIEjmzb?k$&I;y=pt(mFg5INr&0i=CDlGTRG^k|L(UHw zZDT}^0m2$*eO7wLc(jV7Km}(D_10%OZw0IRUw9^Zw{J%?Iy|h^<1$Rb zd(nFIP@ja2UrD!nD1d&x8EW-(BIIWCg`A-+X|!G#f9uds;Of-Fi}TfBQ$Sf|`p3pU zV-xk95$K;l`dM^UGx@x>cK%GA$i+l(HSfr*;*O~}?o%*_cD_jieVk!Mr?;vyfMzMZ zSMR9NiG~`!Vv<0&y-*(3Lj8AJ0=k3*_lh`J=J~ypK(1XyJOSOCSjRnasFTr%Bj(i@ z;GC+~w^0oxs@4$kg1hzhdKCD4z98d5?eNdTK#rc8dBF^LK@AkyWP}9`$)Hyw) zBf^Lu4bqm+?#R`4$2}H2y#meNJS~|FoPz?2E90X|6j4!DYyut!r~uv1M|6Ib(Sb+i zT{AROb2Fo~pz4{Xp|I2PI2qb|B1e!}e14;kweI%12VZuc zcMCjsu81q_KO>a+g3YTqJ|A;mF2vN7 zN?L}Hs5MD7tB!M}8Q0U_za6FbY3}iQQ+4QSxB54>a!rumwXXOjXt4rl9c&2Y{xZnw z)l!&t|aUx;tkkS~5|b+okjuJ?@0xrS%k5vgVS z12e|+xwK(8EL1iohlOCrErs*hO}v}OReSWYmRs6kQ)^gA#*lFzitB~GaFTc7M_NB* zLr~0-AY|mvsDbUg-aOPH8z6dmjZT*z!$#?l(DSu;0nweiHgN{H-u)uolZy(8&iW`y zJB?mYV+^RCit@4wQQ|j~BCTS6LZ!i49e)k&;sZe^_n$6c0Y8p-3GFZ9Hm5M?Jzzx; z^6~mn{6-%xN;@?X0Ny@Do>>i-_qs70T!I=xK|#Ju`SWv%5FHBE%&cT_F^p($>a*CG zfxopbjB1Z1ZVst$!XA}qp3A|q;t9*U>U$EIw^J+TSsCjhf+{jcXV~Y6az7R(=~46W z`Rb6wvbxxg_2-;tjq^fhWRU=CMACid=&(A}{gWC&_1iLR68CKL@m9UlMXwU&8#sBd zN4i&;HQqgsrF%oBEkn|f@;kbH#2^EvbulVUO-Ml@Uf@fN5<>G)vA0RWm=vMT1a?+R z(@Jwu31sPn9WlYCQTS=kY*p|`7)K1o&MjM%39LA~A9sB{9tD2@G)UD%8MgkW9ythV zQ1IFMbDJJ`rqNfpUk*}rd0%hjcF9?lhDAMf`}Dmh<^)Ex){1mT`ADc9GHdUJQMsy% zd^pUDMl$AGL|$%JIQ2>;nOrg4YSTvzEM*0*Z45Pd;(xWl7ibQj)US=vtziuctSt<^ z;oX_HC0ExUV!1rfmZx)nLXP&P2mBBLHyy0+fa7|gfTK8|7TXanBpiD35s~AcD~8Eq zX*CY6g8Sz16Cxu?Tpz&AZ3rmRVkH+<8b-?&F;g@^=A_#y%~j!K)!{>>OZKd1@$0jb z?DIAs6_RHpL4Qdl+rz%gBSb5n`%yF^Dq#B|k+je1e1K@3ltQCp{fpoSD?ce58qp?0 z?pJ#3IR}SRtf4uE>u?yGsJjya8=Ik=VK#ndTNK9 z*Sjy&AYo3fSCgL*V4)9*=AGP8^g(xktdPJ%z>vEr;n6sMiS3f z8k{MnTe2){wr{&vuI;S{WUrgO-(nC8xE1HrMKwZcx1*BS%kK^exz+o|mJrr_>`ce zS3;wbUpHrd4eXxSZ6c{(UiakNjGyCimjqnNfBZlNfDphDW+=K5PjVm-@Jj-|ONKR# zQwD|qKlAwfx4#7ZCsWIjD3VRbsJqwd%y|_e?;T8l^^jW z#=l1H0`YB`-v7_Y-CDMEa_dP&L_BHhHi#TMxc%nY+lKSn+wO6EWcjF70w|fe1XoJh z_tgA?E~Ccu?XP`p2ww%aOSfDS;iwjHX6_is>I2J1GG?{7?qu11una#_P7|`qB6QsG9=_05Se0Uwcj*Xt;9M;ZSxZKf4As%6GJMPg7zBB-M|-e@tr#8(PyqzW6I7H{wuMgHP`#E)+*sYZIzf=+x}-*w58h?&hrj~=fNa&dHbsi;5*=H_mkj1$guh+uV(;2 z*9*;#4E4)45(RZY2!ax)%k@4L1dzPuZ=0NIio*m*I7<4&(8tF|X>(5iO9vnlc!+!d z>slFf%^Lpipn)DJ7NC+OYB*q#k&&f&zCN^Ejq$Wx4$pCfxp{f-35qmnCwATMu zcu(&{y3QkFX5^@0cY+r3@A-gHLz4FFog<4KN-~p3!rzpd82$H5h)!|6%Q| zqvC9uw?PsD1cC*3g1fuBdvFi#7F;K|yL)hVcXtc!?rwuKu#@+Fe$V&qp51eH&)Gj` z&P?Ckbys&)*Hu*)O))K`BoWg{6KzyzCT?dfI9|CrOy!?2;Bw}|4h^{wHS9;w||T-f;~WxVRWXbGgN7tjHC_lY9lTUjsqM^CTRU5rgk0&P>T8eEsG zm;7kHXq8*p&R(f%KqTycQc?b7Ls&XYOf_9BztlNo{%CK#E{G7bGa-#N537llN!zKG z(0vQj^iu!YDW)w|M9o(ok^NCoJnFsu!{Vk_&Y<@f+YyUX&vb-zI&dKr@@3#9DP7~a z@t1gpSTv4UbHH~qxZMih#ajH`dz?g~<wj&Gt3l2A`?Q=-^hZx5_T-msl^ zpKNE_Cm%Lg0Xo9<*N+!cYDo`Wd~*x)QtMe*nhlodGRgEN`=g0(i(ry`p-OXrp({^xIws`EJEzel>a2lUV0ND|pncy^uurV=6%e+(zzi zM;+{OR=y7-52?V?RACQ_&D*TG^U&D9FPO~W6UyhYkMLQ)sG#60{(AU?(SP>`q~cnH z#UNy%T}Je|r@h;%s8+?7y^5d1z$E@hYCbKSgYzcJG1&5iD^>bW%qtef%iU@cd~GY` zYGAO}VPfd47mKiS^i$qaUXbn`{<(q4#!n;bue;Cw1T#F|JHJo9oU)qMCt|~PK6Ki2 z&@op;pX1W>OG+9yW#=4|+NH~`!52DnzaY0qCt8SaRb19Fz&4g`0PG?hWWCP0#L>eh z($5TDvJUbUakE1=7Aitx$z+o1TWrBQYHrc>QR?q~{ul#n$iQYUM3N)a)UXW3&aRfo zmbmDF!rYD~pbCz(IgON5AKmxTiYq6mf^o&da;afd5-~r38nZ_mv|ZME)lggS>62GM zUWa^u>0YMOO8Q%v_=>1w>WNxxCq*C4O~GH=%um~jd&_DpmANyxl(}81x>j1c$@cdk z2S!+QmDb?KQ`ql~1+b*=JD<6kP%yw(k~q=HA4NB}r!OswQ=P-9rz$={ca97{U2xq5 zHaoi(l9i6LL)nT^ddAFkKS)?e-9Ce{bEtAFu0O>LJX1ow51f)OyQrG#r66~#r7%8I zi2uy%uY2@OzALgX?GMFV1V&fNfSr7BeOu3|SKY-UwWP4c^moxVBk#w}x+kPYY1XGW zS+E-Ul`?ZX>}o$A(F>7<{4Xm=Kz~^(7c~8 z$;UI`RAg4bg$pJ<+IDFJCn9!(lLD{Zp1DcC9)F4-2^cZv-X{$nG49>}x&5;RoKeMx zRuJMuu{qUxdHAk!&z3#`HbOftZFhE^!}rI67RD_+)esE#@Ij#APB5FFu|r z8D)*s%<)5o`O!mF3y±QkEbf$TBMgh4)M923`}9$y$`S?qQ>3)}vp`xg3&%*_&x z#R73Qgp7(ReSpej?{T4kc97twOX@W)v z67FslDOsGbref{nX#2ic47g~t`;gtl;YdM7A1i_Xy|6;EHfPG)T{{Qqf ztv9})-HjVBxaQ^E>hEc@3HFI!^>z1OT=m}%!ZUQ`58uE1gysPUlPSQMBX4^ZNo?Jp zUosKkYYv$N*wjoy_#*Lx-%xzXZD8epBC=4wR?jbDA4T&Ypvc8!$!8&?qgWO7pFTd3 z#nO7&5~#i3z}?t%8ILWBe}$DzQ|?A>lD%js23JTMUq}ySWzJO$RSY*NrJ7S*RlmGF z%N*FIO@{g5Vy#w~p<)Y$#&+iq|H%<~;l}$r+x$FClYh{w?up- zk?_}J8-4G)#P@d?NFuJ<-GX2@>-6wG1X!Yl$sgOL)~y_D)9(=-Ilt~WfX-+?8*vmv zzi#SBffuwlzU{=#ls=)mBJq9^p0Tb&zxb;ZE7faN`Srf`do97K`IvwC#2Z0+;d|_B zIQvz6+e6&j=s<%03-p>xNc8A~{Z3f+O}a#-S#OW4#(j5u0-?(etNui<$wRCtl){@6 z)g^0M>NBWlSb=NuBx4}qf)jDqj_h6CG1a5qkK$6VcePSUmcSXWbA#D0%nR4f9yhpD zZ+G_A?y%C%r#pLdX)?6z;;`v~qUQF&wZ;jAiTB()p!)Eh^b#MW+;k6%fo?lsQWJN- zryTJCQS~i|C;R0~c5B=S2;?2%Nf$ok7PCLw7}wwiv&mT%)U^3R;qb+0s>(K_yT>)@ zx;uU!&zNyj^9uLkkr+QOjhv9IlAvkhRPd*vG~F$1yzwgR(#q%G9g?Y!*yk~=|^ z*@a29&uw{Jk1JED54~!Jlisltn;tQ$4?0qu)vk9PFZDL zuRc^(oje&xS??b%39Rv_|G#Gwj!zH1p$meJtRDMH-Cy?)ORRk^`DZ>VR3p)Y?!K%w zy|~Y0t@cOZGHl%qJ=ot~s##v#tER2_E>u5` zn<5Jcb78hNbXf}+BRHt!h+_UXy{{O&w1jK5?w%L}2OVZ-)&L0>hnqvZHP^Uk4)kj4 zJNl>=#H++7)6Qo%%uD&~$=N(@g5Ce7_eH@ujO>!5vfw-#e(uY#)j@dLxP4 zhtLrjb*8H_xhSx#NNBWZ)%(x!5?j|l60L8ze{p&1&%{vod`_}aknQk;!~O=+@||F) z|EP-PDYxVGa!9;os3&vY%V8P}PzAafrJI+APU)JUlyuzece|{vQ)(k6py&>}YE8*DEB*87ZmMBR1mK;4WKy-v z$B*tvOLWC?6rF^m>XCmLX`F)Uq-wlnTZzAA%Ro=x9iM_4&YkxisuBNUlJUQH!+bV< z8U)$2TO)eV>6ok(1CdoiDj{0=o`1i_7AN2(o9F4)^ChJD;zL$_5DWLN!A935;`jF- zJlt)WTS)+sNobtzu|4 z#=a>g8|tVEhQY0HLD_ViWSl732z4P%e44t7BIvf;>yd!@+^ zV1kbNx2sAx4L$wfzyOq|r)N5}7At>jVS76s2S*b|aSn2BL8btJfP$jP6!(|&%l)~W z7C$Fv^R!8Xzi@JLa-K@#UNL5B|I_|fy7#R>i}+_N@VyqyX$~ee@ZI?%Aveoo_cjQ8 z4r3Odv|Sro?v|mIm*4G2>dg0U3A+**iO`A}?6E~+xz1s?Ztwja^0&#$-+o0zqB0iW ze~?;h;>54u@1JZASMZb9S?dJ=cm3b-KCPI`)g5~ znZZ)4YNNl04}r7bPRjqxK?^&bMZ8r^Aav-0^S9sA;{W6Vyv1ht@)LiYL>j0$&Kt6D zJfQ@vEkHiV=rhr=rqNYJ8GeBPci?48JF+E2am>{``A;Lb|4hzdz8&6D4F zanPN25B^W&5mX;1*P+lW;g@};cbHVipIBdV+dgc){^4c6c#iR8#a(i%NwwTWVK&QE zq&#`M)$i#!)nfpt)k~5wrtGO^U9o+=9UtX!|pSnX{(6uq& zanUq)*GP8spafW^H<(%(AU({qGQ_4B)@e_%i&AA30aYrF5G>Hk7jElXG;ff3F4S^z zMHe;(ft#M;W>5IWZUXe=11@*1Z3N=FpdcP+#j9(VJIo2H>_8RU1GH5wWL?!h z8@y_ltx-e)`f+ZSTas$nkZMD9nyi=3IBV$P9`A8LG)Rfc+`50*t$*U{|8I=-tbhmPH7xQ{^L1?~1?G7Nir%08Pq`nUuc8EN#{%o=+6W~#1N ztZNeW?u(D|vgQp9!bO-^$JE)gUwd64$`OY%1zA_8EJ?-RMUaCRk+1E>dD1b(WWV>Z zlL3ZPXsx}%$@><@#j7K<%JsE7UAKvuL0%w5^6B9V7S|QmeQ6);<$`R39Tatxw+Jw1 zl9L9FGJ}VO^cfe3ofbq-KD(>Q^G2Wo2Q}#$Sl8Ii>H?xC7-dhGZ5M2vP`1R zE_L)01{#tN5}G4wwR3Pae*^^j9bcDWEiYpS3J2QhL{XswbvEDzH}iyZ6o0px@s7Lz zHThFn&?%u64ijTD9q#peg!&kSsRKU-3J>t@E`Bd-9S}e^TT)N7!{b`;p)BPb7G!e#lKx)W?QTkr4pFptlP}y8Z>0cvwOT5Orck-h+7$zw6ZBq3n{*;DT!ZPW z@o*uZekg`t_oL>#mtz&-=1ETiRbE7aw|#SBivI53-=Wx?B;|C8D^P4KozFhe_by^6 zK8)sEjxxJF(?o!og^mh6qT11e?$D?&u(QWIf66XCq*7VPwvB1(n_7N=Dic3B{e82a znJo>!zo0B$aheLZ*$fXycVc)({US4?41abOA)M3Qa*Mq4b23%eKXP$xJk7%dC%xeM zQn*Z<{S~zBv~bG1qWi8ZmeU%1UD!Cgs4p;;Iw`_`kUXAB`B4C(@8RP+I?O~XR<`MR zJX{7vp@DU(x6E_iQCEPs>D^>TiJ*Qz=>@Y>;%J7&hHg{VeL3Zi^T)JHl<115b2tTZ zutHUYf_Jz7tuj?RN0@r=`(&`y!tK4i*=ScZ`C})M=w#N=*)Y)>Cf>xu{v zosKpLCx34%*mIqm-9wV`G*x#g5YG54NkEaEO^o;3H6!VoM^ByNa%q%`sNW;(K1>)) z4sKeWG|0(xH`amwEIpv$@Cd4i;PRB2wuru&Y7^LsJ*vQXp#ksl1tsAHJORH&_^s?T zlu_v$sb(vLp1z5y)6=I7`m_udGBi@YevT>ri5u?)nHP&D3Ojr{v!VWt42>6#HwF{N z)5)Vhi6FrQaz8VHN=+u`BEJ@Q390N-GO~67 zbf89(g48nXTM7SYqsM)9$JD7cuSS@>`XI;d1C!aLxDU%;71ars@L9RhJ=$!k*LRA^ z6$ynOt82c;X?BY+b$G*e;->4OJMKBDp&9-Fy5n?1$dUo<=!_`6xw{gX1$9Q-u7>}3 z)T=f!w5yA2MP`1ot0qr8L;2-xtsAQ_e8%{kO2-ED#(yT}-&S8ov_zj4^n7bHg_|;c zOO@+7{c}9}#Jv;cp`{G&SsvMcKXjJ_kercM|0r^?XMgYRg-OOl@N1K+-IJpY2^Sg# zR)0cx^VXQKGd@O8-G$s+(j9VO;X)fZxjGK@|V~74yj>j@XD`Q zgi|qIHTf5^1=i>NC4iVxr6-z=g_=0;^r9M^3Z=RZ9kbCx z-ajsfgu;8xat8OoM6!^6{s}r?KEE&k@;AhUC^>l5yzEW9;DfuA+A^^VRAPQ}_V`=^ z0TS36nI6c81o|XKp7tF(KYz*k9J;;L6ik`65_IOOZ~W9Yp|rm+nAk{<5s!CX!_j{B zr_uCRVwg1DmPS*EkHI*iyYGG~6!6W2OV81DyDVU~(pFumir9yPA7Pj-iEyfY5)wm3 z!)0XoE{d>6zhgWrGkfd2)ju_?+e4Fs1d zrW1Fm3;8#s4c$qLx@6-rasRRw)=w9W+|E8WEp9_Z`ob zJWihV2fe=~f7Ml}?tQ0M<4`$3&2~5mH*1dKD+a&kdge-JhUcY49UznLAT@Q#VX0lB z_E~g>`}&Tw_aCj%b9|@D!(QWx2!EP`Wwol=64|>nMFj{f_qF%xt&aRwMGks&D(4GTjYyg*%=PgTyU)^z)2w>@ov?%U*<2PLlfT z7rPELEVv5N7&L14ID*8X?Sl$m8)3sjq{Ce52LpyB&p zTsS#Y?(7{PkZO-l$vycI$|rp4b;UXOz7?X~?;RlPOk%Ne>g8RYaPu8OpH{QiPJ{%uxvzTI zm#qBxnRFk$U=Q$&k{#q({czl>j%&_0&gv(xSrA60reEICR^M zlH`?>QxD{Q2Lb8$8`Sy<54jv#ATKWPs~IK^X>P-fGp#D!>sa4(iybik0HBWj9OtFj z?TVkEe{TNyoDo-eJ%jna>t#We#xS!4^`{2co3ik#y&(gEjK7Z}Pdds>Pnur2FWBIG zA=t$n|fH}{MePjcMB^uR9!mSdIG zlbof{UzPDi4sICBus^Q{Mec_(EY{H5Qxgr&L*_~ns88(VfT?d@2#Q`dR)O62>7z-& z~#dpK$?zhsou`X|MwU z;&y&v8_h1E5n0Aq26K`tQ{7ZPLFd9f#pqi3EulLT;;Yy`((wnO3T`Tz3V6h&2+@D4 ze6ElWmEKe=tc!B?G-F!X^x&7+{IksK!5kz+@2i2Kr0@B5zbx7J?fM)WbRO@8K{y=% z5%X6)q_>ZcOWHOPtMjMLPcmJJtOJgn+vXMJe;P5y=lsx=)PnCR*0!DQ)qij+9IonWr1(NXEYu@6V9)Zh0#=x=Lm7Rakkmn7=m zL}{DgR#*-{fA&sJP8N23k!t{tN=`?Jhqrdb%$*qpW|#;6QHk0v6H#L(vCyZYjwUjy zbS$}9Ll1V8y}40I(W4PF1!W|M^=@(aL)}m3; zt(TKmyAsuizh-{uw4Z$oCcMHQ~SY3izZc`XXx|CwF$wuJ^u4^mf)HZ6IT zfnPRZQv6*IN@k{o)@5up6MuYsa(CJ z-X?IM@GGty7yt3|@8ENBnO9L+H88V_hSZ{Va*0Gzspt?)&7{d(NwJaG79P64Ptb4n znr~Z*A?HgJXBD#}zxcy+?V&F6H-I!z`OuGlw3o{eU=D2pKAB{sn4NtXo4yoD9Kt%W zt=p7_YNX1Ef?vS61eBUYH8YRjcrz>l5=KT#R$lD1sD|u9#$#ezYe|(YMLE|iz5pSP z7(-pkaL(Nni+2J4=e(@y2(pLw@mssXJfh4#-%j(!{q9kxD1{7&`3Dw96$Y1f!rn9m8vuS=;PzlK42xPf7=u9!DKlSekJsoXsSvg+q1?$ za+A+`m{@bLZ_~zDqDqN26;<{sgEgrgudf!iM^+mZJM;JRtC<`N0K+#0B7odH+#yW+Y+yp6LO zH;%X5^7!!YO^utNe$J{Mj~Tf6FeGt$ScIKRo0d3)oscwG3wyOb#UXAg_;$cU;wfCsm>zEmRUV5daEyr>SS-hSV`xMA$G`HT^IWOV9_cvGyVL!8mfJGxO`a8Xzi5k^ zM#zQ3S-P+_eG-yrY-VJgo+?5S?JvO~YZMoNRm%zV?CX1Y_=u?F#+k_xc{>~JIFq}#HJt}^ zKHBfegupWd-9FbSZpcc74zRieSX|R zTTI=)>|5H~_cknWmcZ#`;{ASR?#fOY}}Vi}705SPS`8lD0j966nW z&m$GAg-zsG&hJH;naMHST#ewMM*T-mWoEJu-PJ)tzxcMT+%SvEhDUa6c*cu4VHuD&k zo~>8Hu)4eXbv!G=$xjiP`XB(m*#qkMy*RR)Pe|A=`%B0bg_-Y@2-SFr?#Dd6v&mZ` zqV|%_kdl}15m!RwTtdbGE{iuHx61JLF;M^n_zaL#7W>S_A6%d6xP)z(Vuxe2H@NHO zsmMSFPtU+u40(d=}m_e)u6 z_FsFYCI7$KT-LXEC1+>0#KgpeWo z_q2gUf6Y1^StWi3C44!G!P-fm{*}vT zhq1Ws|AhwGYW};?!SNqDnUDXoU%(Mt6RCfnAAtP-@?mtMIf^>q={v~O?6dqYm&5!6 zT%a&`?0QBpY2ew}8P4k&SN)H_JcfT4u#;pAAI8ba`Fq~7q_|kHXf|i|xYBh#pqXlU zd3hVmCiuO?n)Msizw7%u+D9;?mXVR6NSz2?KrS{FTA0={aU9eCEP65ZT6_ZQ+gD*$ z0qxf6|FsaUkO&rH(NhxtD!Bg<{xIX7{bn4fXHk|Oxozhor(M5SXcXGDfLs3)eDdk6al@gIAoTdQ zzJDaZAIV=5ZL}DzbY;_)Ux3DVSMkGWcKQ}-)0S>T0%fh);hUEXaZXjse!ge#XnhbA zGY~W&ppaJ5oC%<1Off}@O)|NxgmLzukoK6|NrP<$VQccN+G?T}=^AM{AUV-Fqo1WY_yg`hfy1h8qfo> zRf@njUSBGX-6mV2N?bNj2g_34hq*ws?Z}4`Z{x3mf(BnNK)pch4;a}!;6dYVA$UJ$ zq06L{wA1e7HEy%h;Ki|Yzn~o-2R?Tp8CcSoSV%_dihAU1+evB=T`P_3X{J`azaT5# zx(<<~Xx121P}|p0@P~=Ho4%m5Ar1R?e=0;)Q29wv$gXUbdav5WU~5b(O%d&s8`djz z)HGH73ejtq|I42|amn~|G=l$}2J@QXaT7xlF^B8S?8L*6^?QYE+2!M6h6n*X7DV&> zO7rn^Y%&aFui18^&DZ0=y9ReGOWMY1q#sDvO5wvS1ZBN$hT(p|#XR^c{zO}~!l#Bm z)r6+btn`kvGg*dxGY!1_#>}89SKYMqTEbXD8tRQZuS z?n;|}ig3O{-I6ny2tefUYFib?`NR^|oKxfKEHlJKpHS_+nCzxh2p|I+c#(6LkDa(@ z-v<|kL#(DAHLSG>V(EOp;sy)^#pB?Lp$#&`YZ~u)vd|DMTn#Y$moHI`Q-_%;yi)~~ z5Yg}x6k>Ir4PFSLLW|i#+SAPZGDQ-z1u2!y_mc-0yb7lW!o zn}kRTt{_oK&C5|Ta+!V-?@g+hurT-qVjBmR^wiQKQQl;U372mxXC{8wh9$+ygV4lA zgF4x?`o1eQU-jd$ZFUr`@bnZXLE8F;fYrcO(G9Li6E>iPEr0N|?qY86Lgoab5X*&? zhChifO`~v}n%F0rDWpC6Dj)!t_}fov@2^V7DSims8#TtpEka7)lzYEf=@T7``I3^# zGC8YW|InVOVVC`4zq&Yljnqv?qMw~uya2-*_N=)e4gg7hmL_viVz#YAk)&kJC~{um zg}*0FZ_LTAiSBg*x#J|@l)YQ0!06xH^eCFDh+{m@a>sn~CJR-V-|{7LtewxySI@bG z{~l*!&x!Isxd4MZPzm^BrmEv(<>QMdhxlA#)6Nwc$UEYBv&Y4imF%GStq|l1i5$fr zW@hTA`rf3BhNx@?HLw8|-$Ns(h}nxjx4+=p%3Jz4-&eQVLV(tGspif;G<{oYf{`=$ z+Fa6eqb}0-4*Ceeik3M_!bcru+~>q$?#&@8yf*ytd7D5#1lsfMX%a-X2yP6Ot!$i=Ad` zaahloOsThgbFk$;76M85sl#jrt<%-U*K4B;w$DN*y6IfP4E$hvgo6C{w}U*tqG7bm zPPx@$O$znm@Vw!4FBMuodwOc*Z-`9X^&z+_zqIx6gPzhXrwBw9$mxG|Nn zU+gG`V&JJZZ{iE~_fz&ld;VsnO=8*{0*3SDd>Qes;5fbz^+!Dvs4|_%BdQ>dD!BSH91yQd^DnlrBSP)yQEG2#g5-`^zKH=Ad4t; z{=F@2fJb1rFB)NtyYy&ZAaRL>nS?B~M(^3??SA&~)vQmgbHz0# zSNYjN61a*#RBq9;mQ!Eb1#xC}j76A)^B_Q8Y@6Pn^6o$>QfGrd@~)+@z)%F-wVRu5 zR1`Ga!%D(IRNlmv(c9qOai1WQ=wu+p6-XF7iPZfYm|W$W?t?d--*B?GuUwQ>l5cQO-U z_6m$2NM>j&PXL*AJhEr$#3YTCU#~qZvJEjuAaT8g=bK-sk^%fZBhL%`q1TMMCncvR zEa<`|uk9II4`e?+k*zfUY4DpQxD1pE%W#ZgSvZ8I2)uR5%SB66*s%f!v~tJq#p-BG!;g%fCc#(amYrSwuAt|8Nd3* z9Wk7YNH$ySD0^BQ1fluDxnJ0YVDb29CAqFP zTTxeC{3n+t65+0N_Q3S6`8(tZv|z6x>gTaA3Vxd3&QMpCT2N#!P1Ps*rmppn9hUDu zlrnl=LzbJ#_awqd=9{!Gjd4ejlT2 z9dzZ@!rP}5z}2)2xcev?1SViF^E&*gz3?knz0Fr;r>2_Y%&!ZJOv@9P;I3sn3BL>W zR0z^B<@SR`!ZmRD0$c_)2YB4Ey+`9d9}iQ`1v;-m)OREnC$yDOm4DQx3Zpwz~OZCfU^C) z`bcqYFBX=?QL+_Le}k%~W~jfv|0nTEH7}I}qB4z?#%G@wL(BncYt8O?bE9Bj1_@snNIPGBqh*hIET-J)Gt+F*Zvbl=bt&7y zXU&6M`+yv^;8TG6VwIqqFtXUet`MtPosRMcS=c#&321nu7~liBd#uAIJT{3Xhemx! zajt!@)I#*`&e!qsYUnUqC|O;Lt8b5*b~oW4Lo-nX)x6NIH9r9R{FPVXUrxY3(qOaf zUB*=P)Y=^az!~_mEy5!qA+4P{6_jMJNT}Y-jnu-IujDXTy!;hEVs?55C&LSUmAHg$C*%n2 z$s8S)@$fw++|T1n=+A8sk;+^nr1u(VyJgq(cCxxY%#L3UDEwf5#^;B>0N*`Q6?gwy|aXCiiL6!dUm8pYmGS>zzHh5yOlx^1t$~HF4nU{vLOd&3U{7$o0kZdAjNKbJ+Q=Eo|ny8Ns{MU?c+~RuR6Xg{h&|5r|D?3X}USG&%B6vPdGOjTIVH@`@OLV3XVI1{1F4E%rw{ z+HvnT+R~5Mo8oq)_8MMM^{0y+VhPQI(WaoxT4{u?1^A{cI>zLpZS|iV(0OOeS@RPB zb5CIP*TTi~?;NW-rr>ahR>j|Z7I4&~s?_K2ot3V3$A}89bp(dU#&mvuK7+><5fc;h z?EKtDnyad^vaq%`4vZ13t)<0i87an?FF@rWN~k;p+}vbferCGNj=LrBWr63YfHb>) z8k$P;BX8r!8QDvufNAU308q=r4_r3DrFR2wr4;OJ(-GKP^Hn)yKMp zh!Pp`X>4bU=aBvIxvpERL)XHxjFM|2b%yw!V&M7&8Z^Fb9?30J&Af^c4JRZip(t&Q^&#UNX2;niu&A_rFDKftQ_7+;UT&1U81nO zjGFNRVqHz@=-(+9_?2cfniUP3eg$rAX3`ei-u*g~0}ph{$u$+HqK4PyOa~NL4A1ULGi%`Id zJO0Uh&lp&Av)jKvKJ-RcXLN9jf}0e@x9nCk194^EI2Y18xW;#_V z#=BoPd~y=}1{C&8K@hs1)lX)EHK3NjFI6)8~9)NhT3ldn+O9su! zQX8y?cb3;RZu{+`eGD``f2EjvKKrPupXGMPRofM6^L;_m;VqezB0ps?r?_od z_;<;%{?h{XmM~qO4TFQ4Acj!XDWMr)UzTNp+)*V6<%CWeQ2#BECm`nU5CB;S*cP zrRuk~Ew++CZE2m0P|B&Vx&yOic~4ZBEF$VwuCx1Y@bOt~Ha9xwI(Ui?maCYxP2y zLYgr%$t!D<)$e56X&pBk|=Ka{HMjwi@|MNIFy^RxX5!-j58f426C6bzs zGlUvcRP$H!0XMiB&JRNO$i};-Sro*@~9VZz^o$D_`h*P zR_T%MD{Nj9uYk~diKHq?4iK@AnXB_e)j^xut)3x!SE35Ua}CFRA>G0GR0UG0yEE^x z#Yv7*Z?en=kE9D~4q{Fzb02Xr#`axZV#HtP-B z4{7abuKOlk${!LeI*pHulGeS;tFl{+qI0qkn(H{&MzGs7KpSRz*eeZZOYBMHUb?rW z1YK|N)h%!AoR2h5g?eNrI?s71Afs4;om~VnXN)RmL_Ez2TnCFYJ}XWXvxhhgbw@nQ z)t;z|K$Rtx5?|iO;%lsn!y;#%$K|WaLwf-9LX#FG9J6cnkkhw|{I->P%rh+zLFjT< zj@=EMwEQKR&GqUWe_~?sGc+^%J?h(ScA_kMX0%omW@e`!4lI%ASo}X|uXa6d@7`fh zEf+f~o#M^BrxzY)$`R4IA~bLBY$ki`cX-9|r~-!Sz8wR0Z?gbak%D$C9PX3=kU%a} zeK5b-M)MS160FHK?z1{1D0tSfz~Gmn4L^;(TU_Gc03N=>CmfGL>B!0EP2cSg)DjvG zGud)R>73jP>Z9jQC(uVjIVSHzsBVu&I%lLC#bi>Njw|%5mt=*eHUd7WYl#H-jQU^82p9Ue(Ct?QEM8UD zM>wNBpZHZ>+oCpjrchfnfag5%~iQ_US13E*wo zgQGSPxhGT=m2xq*>ePSQQzK9gmDT&zi^m@&z zVOI@ak{CT|31BpnPg?V1GWJ^IoAYz@dyFdupCpn9*(&g}@%`+FyQ&{6T?~(lAFW<6 zN7fRpo+xYeS>U->qKFuVP#=I0K)LxKuuG!xDo=XXkWi~nn(fsY))I@fGe51N4B}!m zRQvppmI!i_<#iNa^M6xu5Or1{RqC_hk{EBB#VUj+w0tVh3%Vnm3ci%z=}ChW+Bz#j zIFzDz)t4sU@4$}0+LE6rDev_b{1%VV|ARMi{Q}llkfYATTtuP@#@%Cq`MUstjDS0B zB=Qb)&J_?ir+X=_F=NhpH`#{F-V1EiJuyumE3d2+FPqPuJvQI$1gXv|{KXFF^1ulq zj)#-mJ3D?I9ei+sy@k%yG&EEU3_}wW6;PH`0p=F}dILP^Z}hD5_vfqW^C^*8;kfAOdEc&CDYAk_aevNBz2@}G1NeZ15{3!DYn>Wqc{8}jm; z7HEV&<*C2)JDjt+)5z_X7C;?oHX+)H{|md(NX8D%&L(t_i|)j-COU2vrM$>Zj|ll@ zP5Li1f~;n8VBK=Uj7SS8gR0}06D=Pn=iy1qp=*$G=!@@B|EC6LM;tuV<{BOFcs3Xk z1`&%K@esl2S2tr`hhKtfW@hoALHi$H9Cw+0Wp@s2r(t+yZ^z*y!P89#mjS3LoI}DS)$yYSiJKYe zI6dMnH~10vZ4Q(3c(N(KbSJeSM7&JX`7Hv!%%4Z)Y4!!QXajqYjXD~~2N>v4|5P7T z?Bo65v@zB(_*!nRCA>xgVcy$WPn#yHe z!#1 z(Ds!yE_DT2=4GM$@k6FyqcPt zdR6cKplPY@d(YkH?6ue4XYF$u?x9gwp$sDRov&kXT_sdOCDd#q8(ldlN@}GY7wh4f zqRpT*2FFBv7@X;_N)I!2utzbmt@I(~|mIB+IFp zFJT}j3?)nKKo2_-Z$E~vbe3f*XHIX2-UI^gOC0cvUd#y*!m^)vbVH?7DF<&mSGy?w z0n5Pk^c9e){sc}db(L<0yQ_6In4S2z!y+OeHo0Jf4-?swq z8N;OMe1(JUKpxVVmHw?1V=bKBGA~A-t}sO3&mmoxej(F&KL@>-Rh;4Imbt=~7v_v{ z_lkyDX4|xz8H9*$l8gtF=CWHojL^0?r|Dm@rE#i?lVnG{l6j+`ps;ve5D&|PLRG;vC3BnW{1SD(_)QNr32oQ^Honj?w@UbvOO$;im7-^s z=WJpm0XYcZPFH6E!wB=e;A+iv2+H4ol=xlP6{3_sJm2Ke=_5UMTATLBkbB)-8}~rm zN1IYw^<+skD%yo*Y8}O*Fl1HKlH_Bi?EFd&y@TuzGKNLiLa3lTAmM?p*yZI#icV9r zbY3I8%?MqY8I4VAv%@;;`U`3yChfJ9s8mlOmm-s zfAOf*)451!uZp)>IRn+s4MV%gZuez>c(7A(hZ=Yw#1uza! zP<{)fqYbEmfhRYy+?E;M(}CcNh=Hhv=EpnB@$Zg#v85Tu#O*`Fs%&a>={MaBFc0|` z?Tf1Yh-Or5zGl4-6$x&lj_dx`L0FGWi-8%atme{I0PnhGf#G#Qi*Sl@XI~)G*iZ22 z!`Xdv!%~$#+p(|wa4kdAH}-wAH0LQt-aTUWvpl=hm7#>rxkLIVKJmV22oE{9L^@{k`f9cmC6LQZLc#&!$9nv&hkN@&V*mR`6MK_07Xnh)nhXBU)L^xB zi6ZF9v+o{>Gs6n?O!h}D!V|kvhuE!_vA5#|vzF9s0ophv?H>Z z1OhM7B}FoBl1N?X@-^}Vrdh3`H9OXSEbILc9nZ>C6;e9iypqc=WcGAy`OT_~a z@+7Zsrgdov*9D&Bt!u){c3E^^28vxdBD-RlBX<4#LO-l`sjJ+dUlbJqQY)XK-s}XN z$O5PsA~rTaxA9WT_yAP3V!sY}2^^}AkV3F8etI33{WY*>08m(5?D;(8a|gf(%$da_ z@ThSYdj9QEfZp_n8!+osb*J{P+r^i)rw_qKzc`<=@FA-5T{vZ}GxioT(${l*G^^u<5`9%^>80`XgRks$q=2luFle1| z!Zj20T1V0*ojMe|shut2_!t6sNwWig!=AxNP(!c2&$>M{{;Op6TrIcb-I<2+BHzwQ z_mMU=O?zuC0<^ky7JY-u)!b+u@lm6O;8k|TdJ|9icNvFoM%*?JgUZ)f6_5FgcD8^j zsrVnra1Qu@Di)_q&^@ade*+G_k|XN|J4dKCu9r#(zAP#T4WlgbC;FmI>FQY-dfNEh zxauU9=K;4o0k7QT!Qys~Rgs@!g($#3oJ}p#8fu4zzpq?M6>lb{bD*`t1nyq^lqh`_jsvjW4D+#ySdgoQ99B;m_shh zY#w)*NM~nTS#FltSee&3#}Y+>hx3jL4^}PBllEhTC+_XJ5)BlTQO-)~;Nq>O-M#pN z{}#Nw?>RCM_xV+Ha?hg_QwshER8Vd0`X(cJ1&|1IaO}1Ifp3ip;&3i6X8JLv-GGxC z*D>Rf)d(L7;XonD05#{r(pSO?3xkmEX4csg$iW|Y!2*!3uoQ)67&&ud8HQ!u;_k_c zRMhv{wtp&I?BVx6EKNb92zkdIIE-TfDevJ1$y;65uPOEZ@-pD<8YlSlO@T0_Qq!H^ z5vJvn>LG>Bd?3XPF~d50P6Ri$-xGBa*I@NJU-a_G(}9HZg390aXk^85obk%Bqhpfd z0Xr`mNg$H#JdjZMFQ5#N%w@TGl>vUj=^zHVIE&}F55PIDHGBV84 zz)vFP1kdjcFLv;3RaiUsCLJkx;?fu;Dttuw*l3BAhS!?+tLS0j3_9>75M8%24}K<5%3SDC<;@m)4US?Snvmm;DU<55N}t1J5*{8BicSAmuCO-1^1h)frh+-H ziB++uvInDV&IEVX%p^zMDUyS*Nb^9+a~Ug3_a=G8ZE}&g|Kj_KltPppB6Sb9zovIU z8qBYmw-Y|Xc@o|D^OdG9a$gM5ebzTAK~r>}uM0i#ekM5pI~2=#a3yh1O+T-w4}s~r zGCL8_ulZ`gcJ}6aZ80s86i4=z04FN@(Iy^IJPKh?y@j>d2qzi~*g@^UOdp}CR$yDIC zhUd-UA03S%P|m3_P(5V1&*xE6)iY++=H=KO)xxYd{>|bF`7>F!RY85zLswBCU}t+< z*aQ;jyQcH#j}2b9dA*dMVH~QyAD5fwdd$&N2iZ$>O&A%nbye6xCkQ;~Zk2pDjtTSL z@n-v_k@34vp;T>Re1Syz2u2YaJm$>??T3Nr7jsauo(15!R{Y{hxtGBO_f#b{_U<=; z4lKVF=rnXikxejf&Ab(%3U{BB(k95$LG7t6lJygv<6MY6z}0TF%8&oaHDLj@7`W5OWHTh{HJaJ4VQ zyJQ)V$amE1v$0K?2!k)Kt66L!)m$g?>}?(7lJP4qonzmjzwGJZFphA$U^8-MnweZRnW~oKQgskAj|;MA#ed zTaS;O2BIBcRFt>mXr`~EG|Qc>5+bT(?4)#*7UZO3DCFPWjfqTItl6N^(JoSm%fyrv zlvK`|(7^3-GRSF4Ar`;YC`6y)$+NG14FTa`uDv6DtI%Waj|K#!N;O~ z>8y9T)$}s*bj48zo8G*9NrIHaaSxBo8tCdC?5q_UbwvIy&a8c33!D>dx~Wx27GIoB zu5p*4pvKdjQ8iq+_;tVq(~)`1aDl9|ra^;329GZ5v`*c%>qsM)_)I0jNi{j{s^>kK zO(A9>tX`+2rOJmb%U>0d<=AC7oVEm)_17H3#pCw$Ik~A?8S}#BwBk28(A|^A)r^M% zRJGI#7S&mk*tD4UfbijPgYIPM$J#fnKZQ-1!vsCQk7gyijt7f z()RI>2v=-5)YkF2+_c_$mr67~sFrqHnVV;3Wk&aSj_9 z`QY#G|LWDY`(<`Q0#-^&%D2)|Kz=%lIE!GN_Oz@SOG?-^{?%A1?dd@dk?c_u&pMA9 zpt30``RdcBPmMR8nWaxrMgD`7lobDkJVP?cu^&`Tj;vy)i#|Sg`yj zt*d~^G6cA!zED@An34RqrHE<sxWewwnLgZb+O~^SdVTN+Kp1ZxR`9uE&$3uDzDLo`IXk6H@o#EdJy(DT z;WGL75+3Oyu2xC-4t%fOatB{azbPDQ&$0cn8>nnkNVnDrZ+Qhi#WCzk3)Y$w|4`M} zHP0tnd@3i9{5#rfEBxrRzWUP9V3YOkE*TE_Zk4xa-Xm;IX>h=6bBiyQIp#CPaJf-C zW6I~joQ5kfso&fQAPTDBJ4`hgYIMI!L)nzvYLO7*dCAD4s%n3G<$ZVDxYogV2hTJR zp0&Ane)p?W(E_K7AHlaxN$+mC>hk0=wsa_!j1%s!X72i!#u#-E-Zn``jH(~2_1Ek# zpUNWHX?!>HWmh0+TkgNhoWg$kh^$0BZfj{MOR*?X+G6eS}*=rOp*59XTo ziYXUHvAf6?*@v=+C$`N;9mDtQB>Am?d1^O8L88I1`E9^gyf5$Xymj{7Y;I0{&-hHw z_|V(>h~m8DV>%+a;m9h`Pw?sB4C#vY8MF*0-bj7hyb>u0y{Pc%>uncWyH$SBqmL!C zeYZK3y?@_B4agyWXf5EirJ(fUIdxq6RgK$Pd0D52L1~UA=y3%3^L2 zzttdqp?p^xJ$kSnIms~Kc`fLE&C42@*VEf^X!kSwfyL$~K}r_sfv)MCm24<0>&U>; zm5FrmW9MI;*BG)9 z#L7c|S76><7j#SduqXW*4K2DFT_o_>3#K1@{DLr;E#ih{!rPXbrVgHXCW_*bsV_ z#Wic3jTcw?S4!Au7KJ*mA8hcZ+ zcBvyO%9#9D`PuIy=tsb6m~)P1IZbYyl_$rnOJP1tc8pg&@Z(n}Dx`5H;NhVzn@YpV zEhUX)+lIsMyE$z0oI#hY?#4}xB3ko%#!Au@*B4d|!CJ9I;+`&5%je}XnQW;O&X^cX zpjD>93*vge?^| z-{i+emRHBz&==Y9*l#AyYAzj%I25#ZwnfSVAJqsIG8PynlD&+?KVXhQ&7CbEkahK# z<3DyPz_F4~gEzl=Lxfg7Q^Op!PC)k1A%V5(5a;pP&#Ae|I>=t}i%BLMZ?u_0+R)kO z233m=i{WsS>~S+D$#Nlc4w;_gjvew~ief3GVYeXybwg*IQqG&s(Nuxl*>y3`3{Rey zdZ$pW*1FFez=_~v*Y%uI@+JsHQDNbC79ZJYelm?97|`l3Acqu1B818e?Ob`)H|7`r zXk#6!o2G`R?XNZ*I`#xqxgB)=%7o|8*_Vf2dJO?`G$x+St?%!wxZGyu8Hf<{L)mV1 z(J>e2S``dcd0r~re`iJ}K2v5;FVj@gQ1klIuB><<-8JRS(V@U}qq&-V;D8fPP;Nc zjk0R}H}%9_cL5pdi*)?%Hi?KmP13<7eY@+!){xF_HL0I~IevEXGWGCO*n#eFd=%|= zC$gSkX;u6Aut}l^8cgxzYw>gc zKuJeX6mrH-9XG)YVgdEh?mbOOnU@ki+**TGM6@61MN`(i;u)HxU#-2XNcIPZvMKFj zn-yf^IIhPRru-013Dv48JHN(oQrsDv!*wicPfVkBcB2!Q?sb{*!X)d}Nk4KOY+8&B ztbn1C&qtEDrI7{(dk}$W``MEia>>ht3e173d_x^muZ*-c@_v}b1R|#_w)wsoLq9Go z8~SGmMIlw-O2%VkD_QT}zE*=uLw3AgdlN{4O;?JAF(E28cJS}T3JS-BTRRi&_pm!ipEfSZ=W_Vko?m_|zKihX% zbLG~dfJk6%LUwo3()Q&(iM|Cod`G;M&`!g}cl&OpSf&}dwdXt7w4h|%ls@4so<+;u zJ?p#*DBqVzJ^u();eJBS;!o_K+$bAISvvCM-#xGP;5U(xK>!*P0dkz;(L~-F$Dx2Q z{-c?>`N~9rQb14;8U}`_kdRR6khz6L7J#6Db1`R^&7(W?GXe5-qDtTW3Y#-2N>SjSS~=eDDzVR9O1p6 zU%>6F$!2u161;51&Tn@g6oEUG6OTsLs9(KxdvB5ptaoM7UJ0fSHoz#DY6uH^abHY) z&bh2{@N%W?t!@@KYR!$ZuiXkqq|7zaO2qNRa_b-9_w9-dGqc^f@_XSvXrI9=>?{YH z_X83^Komx^4bzQGyrtdpicz;gQfLG<2+s9ZV+AVox znbZ;(g|$NOXd8`v>SNh?ev$T~P#1Ci74PMli>`ZX;Pp=T^)9vT8hjL2^~vVZCF>3` z_UXCSEt3)M0$O?6)i4%-qEVckonZ;v*e%z4Ah3k~Zf3`my3Dtw+PWG;Q*SiYD7)3~ z1_;cb%izH$0~E3{9qI zubgV)wUgqk2*{j|YT|vaqcexf>W@>gaiqLzpow}mZjd62{;I*8{CT8=xjCMUWb@*{ zMuFGC%k>7wr1Gu$L#6veUF2@LHRwm5$f#-e^G1sysCm;a=&5g!W0KX$i%X6Q*|A}%qX%NZ z#>p}6wu!L?8wBz>aciqf-?cUjxM##8l3v}HaAiIV*E8D2-asu%-zpDYPdKbB|9X_H!z_p5RDC6K-`JgS|Y?;PRPt?~Omk z1LN`7xFf9yEom|U9ACA)vc+lOMu^!JRGHn&zunQ!yqCOZ!i!{wVme& z!_^ze@0)3C$U~-gCDCSRVD`pmQ#b{2Z6Q)?Fkk5? z$iB_3D>9>H5M6vk`4-pNTdG7GhCFhZ#ZnlA0z-{pojG(SCR}68p!wEltdY12&6@mn4uD$t;GB}e->E}u)5OoP z-7l1p^DM35ASJlI(1zFjn0)h^IvaBD=LmczHO30Qu0#+L1KUm`*~VoZWl(VMbsjqd z?|~A9>Z(*0bg`Z@njg(ySnEp+8}2vRjt=jWXvUA;IeZm)`xYYHCT0+XG=DN^t%ZP~ zp9>q@-r84yPi>L7PE9x0)##2)5XA?b(er~S(PW#=H?DINaGgN)eTAuB$M;t{A~|jj z7!0Lx)6;(6Eg`dfdXkc^#^YZI-bx`l+``)s=u2>g^Q#*26nBT*uasi3T(Y#Xv{vDGJ zIWoHpzCQPHGjVokJ`Ho6!6MQqj%drE&XG2{9U#^o5(C+Fo%KACKdg$}tt|zd0;Yk9 zPYG;yU#*WdqldUJtD@NGq2yFz+y_O)wz;^ZlKR61q<(2?4Zhg#S?t>A+`->Tr?k;OX>%i0Zt1&m zy)#v?Tcr;O3Vb`UAPOYd(k$N?u3yOn5t;(mQJ(FguG2Rei1ScNw@*8u#uZ;vl8Cvl@BsH z+;Zo=3v8#f@XOJ(4;9#X-nfHVfMxbOuQ)LdwTIp*+?JBndU^0avaGZqUsUunC}T2M zXo)GRbYyK+{n)7GruTT43SX<$qr)7`URq5_=~9yX`J*f_tSO}5zlW)>CgO7 zM=Txu&@|m|woa_%MUZi97+erXTvr{QJbQq{ct~bIU^Ln9(^!7lKzqmIJ25;h*@zU> z)*b^992O%SGBQf$zKQp1ou_9t%94`I4A{dXO{urqu+Q@f>rFGO_6{fj%ME)YdC5Q- z6EfHkU^wP^o=F3;BttkTP%nlCtrMha0Al^SvsiJA;TH@5OIDVrsqvDW>hjFf3c(y6 zKeB)m`G_NjbS#J>62?@szDx9HntVmJF}5r?nQaqpGB_G%{yYjXb7!9>ionK5(v5u0 zqX@z$A~L84=DB@Sd8=zETV(I=xy)4a;WiqMz0R!b{fJ64gsvk-{8PD()|$=IZNGY+ zcXPcI8^@TVl^QF{+qbpC0a4OxE|)YHK26^%zp*gK(!4caSXg^>EmZ;K6nT$HQh#Z^ zsif)n5i7@QQr2X|08;)~VTR7DgjMdM!EUKOu$uhAxgYOBR!>%XKz@pTPDJGmL8L6{ zi5aHyK_-s_4-E)Z#31$j2xkCJn;=A6K}s5tce-dLGX~AX1D%Fd>36Bx>`z!=#-J(z zHXz3<1x%Gr3JUrz$shX#n*FQixIavJ!j%la(Q1mGi%`V5`IePCa+WMu5Yf^Y=#G-= z&MApW%W`6Zroa2Wi>NUtXUHJVH>ZZH24bjJNR?hbW$^wYIHM*M_s_%w;2a-T#RN*N z_3z|F>WIk9Fvwt{Pc?L?*Tg*(G389T+&TQ-uGMiLz4>66Q;k+`$1~5#Z9X3-nXok; zM^XHB@g*G?VdR3imB;5<`4`n+%VRuwZ$-MJEv;{FGnTK}#Y7n;gl4$1+BD7hv?La1 z5#Ry?935*45-CE+aPX{G+amH`FI>S~-O12~Y?nPJ{12*K+CqrQMnQKX&0N6?^bN?r2FPgyjymP$)}r8URpNbP+X2OEezRZWm~`fc8g+oMqV~>N?;-v{ro$Zhdx5BW0hN%l;Nu3 z9JzQ5(FwVZ~mlG5@f7uFbx!){0u$6WmG^g={aZuLuip3 z9sFMFYJVMGJeuG+w)}~^4E5VQ$B7q7b+e%;b|U&8NEp&pLACFglUk4~Ne-8tar0I)&o)asK*V6GlrxbT!sG!x4<_6l4vuGK3hNNd z7fHioo~)A9*3S&xNtqJqpxDP@$vttf5(O~G`!gac(ug4CGSgtH;bZfy{6zwHzeHVs z4TU^reg~9Pm-dLxAC7~iq1t-yr6N9p#y+C;OJj{s4lKe-6#C)J)TS~F=6?|S8tZi4BkgZeN z)VZZ8;QN~eaWrpR*w~McUxbkSrxT`4O2ushyxj4P*${mbPmgN3Yv;$PHbS>Zh*N z4Ht)P!@*x_Go^~Mw~@p#Xm9_us$mi3jcfo8eYIC>v}PzmlG%DbF~NQ<7g&&;Cy+Gq z^#$YmVZmmh4mHxr^u3jviyuUv2c$fT0zjQ`RM%H^z!a`5|9gE zV`KZ}Qjg2;ac0~J(Ep_O*}1uaO8N3{fgte12h``!`5)VhfS2;}D0lbvfY@_8m|85S zd2(tB4GrzRzP^6xgYI_W!F=^)fv=*XVzl>y4d>wC;KcMam_?^L{PP*0owX5RwwK7JfFM5g#|t3mpkQW34G4^<$umt^w>xu+ z*z?wUzK+++!2vVq&tW6<9p{gb{#!`l>YTQONDjkOH2ml2`I`HWF@=O6YCd(x3kh)p zvJ_>S2kUA#ct5m?jS?@6;}m}aK~TgUK^i$*A7IiQPhs+I`VWTM?UmFEFS%yAFSu*V1|T+T$x2aoejjtHR&^E z%f3LGVoId56v!Tdb5*vyf=?39mgD$jzk1<`x`#2l88 zMg`)hb8#|~4^7X$*ZhQTn)(26sSc7avTw-fAV8oh6UM)_MXpqKs4=%G&Zk1MDM@b~ z!*Jnp&lANk=8J51_AKHRp|KY)Uj#%#UJ*eEiCATt1;i6&0E?3e@WE{HPgmQ~j%NNs zd(l<8YBa^>+pk{+A$;o3$W(`%AiK>WLP{I{EimAs5D4 z5k@ka<{VQL{2jDorCsO(&joC3;AHJC2%HlnDPfe4w(OMHTosV;e&L9T@+kf#(bWKE zPWeaW0(JX0`ekYO-kCcDChbXOnD|LXlBjL!kgzCNZDstIno4xJ$YJKiaOS0}zYK&AloaE`Fd2@*;;No_V}eKbj%EH^oTcU7M*bkBDVES-IUvtL^tsHn||?YWuBq zsNW_OOieoW`mdR~X^g3t+0hm3DVBLibH+HnF^kRqrY`Y)OMjs)GDqW?3{US~0uCmz zy?wEgIe>_j7V^+K9G_{iU|=(~N+S;yVbU+8%*`>`yu(Kro5M&@AA2(sl0HG9+WZDX zA--?ruxrW*Z$~g;BA4&t{s>}quNJg)%{86iQOo)1W^8?1O#+(8K*#$+};Ia3jb*iUJN3*kTRHuhg4Tj*U|INCT%*f96b|?Gh z#^XH@{URf88l8AIUD(?;u6Y)R{hjQ!7H!RE?3+kVsH7}r=alZ>|4ekrQa3Dq!fj^J z^*T&cR3ZJZ3GNs>3QK)I57Ef~nsZ2qw($~*iLkJ+_L$YrrCNh~3c1M1qk!jaYy#RPi`(Yo!}}mpsa`Apdrb zyl=S`9=z3~5ECsSvSsPeV#q3BOQZp2HUp6m3-=JcNAx^0_tCQ z)oJ4YzMGln45nM2joIKXX(|0sKw^-F(?A5TR){(;$PsP>_Q;0Z|WUZEm;|iF7-)z zTHD9?DS)(j%pITP5o!O&WZQ0w$|@h@M7%8{PXW7lAd|vGv3z(iJ}8(cmXo0zb7c3H zbHqTK2~WWxha=?pV{DDNBhDd|A5q255H)afx!i(|Vh!jbbjCH_9a74ko8~j>-APIGd z@cXLUII4I6lBwIws~|SQ{M`}m_dwH4k7PM;*<)P8kxw#2=i=Kh1=Fr%2p_6rk z9MoUEYZqr>bRcbqO|5aeAc(wo;#AXGJG`9XwZhX=<&FXTW)HhuC}in7y(wM!@o;#Y ziD!PtOmFEKdkl8td&{s8?Ni!b-wTqRzA$a*|Hb+g?qxhg%!$8ZL9*pEHlc2p6CP3T zH_fl-x~y|ZalP~zh}*eDVw)@f zQYQdppav+jo!_l*2C5DP8RJcuGHYPMiuWP_w`xTnVmnSX>5;APo za}}SEg+*=jpI|U2Cmqlo8Rai}eFpdPB|6T`d9y0O5i5jhY$uM9I)Gnwuz9hqwBPz{ zj@WbJBa|YCQ#LG?jo4sQ13shH$31@-_?AocDJD`id7$4j-~$%r^~Ousp4I{YShqZK z&XA4?rlh8NYLEX%)q+o!n3~v)nk^Qu>VGyvX84<21zf_v8R{o2`r`l7%N^N3)_T%{ zs(EbMZ_$FHzJe(`F2=gj@DgckC%&ipaw32HS(#R`y0_kJ+|BAmmwPBUT>Et-vEtbP ztXHSS1|7;BzAdqZXN|`+CC9<{pdihQBcI@9o29|BPoc`99aL^#VNro0!u3LS`~j1+ z7_02%GIs`X?}>lsG!em30lPU{)`b&O;S*1C6%fH7Md z{?z_XltT1mv_y`e7FD#-^D7zF+rRY*l1#YqII8uHl@{%4(yQDiK=Pb1v*w=L`bI6r zmh(orNaj59W6I)ODYz2IUbuInR)4`fh$Zdng@!?fy0LbMBfZX6JZGAC!po9s?n~TA z1?~c(`6Y${hI%_m(gq=T-ei!>{^a-bNLA5}zuoyDP2ZSf51m#Aq=HuYPUtdO9yO*^ zI?C*_(YLw+JFa=OBMQ#iQ79(cno5;z-K81PPVvjkFNEa3=^zNr zmHXMbRHD~iCU!IYJc`KgZDw|aZE!H?q({o)`L~tqT}?{yZjjY8vId`8>VY2y<=4K& zSp(Bh;Y>@CHd^xbKm2}m;*oVTzUVCN8o#Cr#|Xq}opzwc1dK2FPduVdI>`T@7?;b+ zh#{onS%Rdd1ZWDsOtV-$5##oz+B8kCwQi#1M(piDf0bJd19z`?123e|nr{XDYeDVk z)x|#dE=ck zJu2*P`qS!tP& zQ%$e5KxW$~J?D?=l*O+%s~BD<1J|Ryxg4VLRo>~Uwg%b!Smg;4G66MyST+>SIZ6|{fSQzi2F!Vo>G`nm}ByD{AVr20S+n6tXfsFh9?K0WyO(|mIsliXZ zw9uV9J+3PaxY0{9w88kTEM~HFq}$D(V{a8|t+`V}H$oe ztlIF&*aT;gFagDPd|Mq|X!W)kTkR#FrNw#{$z}bD{rN9Z*7NA=41tq7_%ocY6j4_W z;DK5?{@18S>IXN*;vR-k6dW$Zw-=o!q8E);{U<~U%(SRu_f59gM+@=DbL;92_l@?R zNBQHY+6N^^-f-^g9xS-Vg;rOBM9b$q+Ek$$w^cu2{RZi)txXQ4UmkC8B-mawpj7a7 z!9QNwqTWbPe$_N>E`cFw-DAF8hLuUG+n*vk8~pCQ*SY(cigw&EF83j4oVo-mTrU zDvOO#rD`1NfOFbO-@Z250 z#g&#a2S&Fp*5P6H8$3`HNBq=JY4w;Z#EY;UvJ!^9ZjgcSDhPllK)=YEtd3ZajgldsHrP& z@!LPXs3he#lXs*$EMW&yw)eS2Jxb!{HNCeX{tkXZY}B!EW&aMrfzNI8W5}|4S!^g= zNSZAD58FqGE`5r{=AkEe_J^&Yg!Tv3CfuZO?G(&U9LCUVhSbFQyYKW7GjqDj_?H66D)svFO&nzu9m9cxsgYZ2I;JdK+= zdd6eQ`oy=$Dz36b6dkOIgI0$QUtCnkZliylz;Ec7cHK50e~b(#vp&o}*X6Z4I9aIM zS{iV5wB3K92QTe9Tt1(x+_3iZlhgbQz0)R<1xP&8zfG3~Fn_WWr`Ek^)UZHc~Ik-Ys@HmydRE>ucfm$8ne-q^WE8ZcY$1540Cqw&gB&Rg9$ic)ZP{H6GPR8;5nF% zjI^dKkPl!DGe{_&YfD^QdbpkD6!1IMqGJlZmE=*fZZPLFXfQuJ)M3Skr)|2mFSFFb4v%zOhCNcI*2@j%oG8gKtro;? zvPaOYj$@=_(@iY4U}Y#e;OI6k+U;h50#WLpqju>UYluyNk1EG)Dn)(C2Y(h$k#8?7 zXWpu4X)4&#ZR+i8^}EJ!l%k~$m@|*>vQ!{I38T8ic4hX>lu0>mJVTknm+A06*yR-J z)I|KPxv^QhZ`K)u{nj&H2vc}UaRaB0-g{v)Rvg0~WQzyPV3Q_q#-(#T9?Gmbq?lZt zMOWUgTXW@snVa8v6h?TKUvVyDhpI|Sg*N-9Zhz$3wl`Z=1GhaR9FB#ME_p9<(WJeq zfl1Kmp6oxXr=8Q$dG3GRH%({j`W8-ut12o+Mn-^EwhQ)M`s$H*z{sZW*LN7p%^bprn_LVIEqmMa+p_SjvGU9}!` zb&Lxm3Pg0v8g>O{>yF;cZx7@`QcL>{Jtb!kqtW1nRN2 zCNiLX^ZdDtAc_7?cbxmYE6->pC|y7AmLmIZ%lWqdk-O1k)XV>~l1^=WCugfiN%)HHK{`l)t#T*i>l zZOcDM_vnMT>8_WtKIPj~DL0n8Kk1DD%cR0)P)`-(6$Lt9qzu7neei`26zeM&H8{L@ z`KT2z=M)yz1jCM8HLNSk6_L1BE@nsh_dR zk_}YY?=Ed_>h9&a+lYxwCS_;#E&bT zB)%7blDL;w3QE_D)7IepPY7Pj97VCxag;96$$p;B=!V`#GgNQI($0o zjHMxn4Bf7g)ND2j79S;jZ?Zp=c$-7s`L>b}_f&)oq201>;))h1z$nu4F4PcNkA zBcBhQ5Vfl)jvVnc+wuCu>*6gr!oI_l@dXc0>iSFKwKWv{+IFlLCF5RqhupvS=4q48 z<|Pc23*Gc?Db#9OUIxV273SX-XG`WoM4-0b(}GJO*;!rX9MbH|-^~ul{<%@o5oe>+ zXah^@qFXjdD4V(W#o<2_4oXeMuc*n~?N10EKZOQpQGMa7f;`Tk^d_=ZQpEB8R*il} zoI#0#9y{-fZ`+17t=YJ$>s>e{^=HX|>?xBuvpcgPJK;FAkK&O%*~g>qV70)h7e02> z?cT^nTAZhi@%+=UYr?us5!Jqo$ms($so;0v{hBJUJ9|_# z=%@90@xq)ykrq|#Rn zO1PwxSKPyblCr*mo3!L)_oyxsoALJ)RHM_u~A=FQGDvtwoXC3xbEzy0S0o z{l0ypz7%>n3hm$6J(<~gd34!Gbbh1NNK_7lu0X4CAd&=HS2q=10l%N)TTxMAw>v@e z#5cZqLkfi1YFljV>>q*T1@N|@C=Ka-@&BqwZvy;SwOde1+&7ZR-f(^PS=sBp*?p6) zSmN(KiZ9%#8!Pw80CNa;et!N`9Y{bh(7S%?b+ESN(S50j`On>)uE<0rd=u%cLLeaU zS>5rn(Ndbl-L0G6r*c=m%G>t2#6jt4;8^pDHBr{ZXT>P(q@hdS6Okq?mG=5Q-j9@O&cSG`8Ef??}*`610cS$9^owqS`*TP(K@A7V~|+yZk8n z$ez#TU9+13(MR^9pARpY6g6Sn4>fuepeenk_!*R^oD#3z$gS)7TQ?uA(t?=NurZn~WQu$_S%vwPM>ceBUS$^{!mMBqnR54qwI?`qgZ!J1~66ajZ+D z9PAsf=6mfeKr=vcdT@C?r{lXms}MuuwYC>9-OxLJ>f2kgU3S-;u4iICN@|kimu>so z=p&-SJ#BEkfLn5$S~ZI+G<+*sP}<;l8u$94-^14*|j6=OVVY3^721;m?ruRZQ_;gY&Jn8W^Uux-^ zNFn!1?-$&{`O)1;L3=~miIR)*;M!ERPY2|sPbEQ!RHlKHs zek}sJK9nt9!P3IMcFAt-Q-)5V%kFvg^j?|ee);lkhyj6-BrbE-0bo)G2gGg*`H`zpts?ED)@s(N-@)b1 zX@a+Ji4UNi^tOr}dk9#EEW%g6LFwB1q@d9iAshp;6f<*|6_4g9!NA z&ePu~QdS;T$jcsO5$%aLzc+&Zb$>mTMVmO?H$O3D)+Fw3D%<&P24DG{0!_CLfaVA5 z245kUbdS+9y^sYoM=FU+A5kQs!RNH{i@n9571@l8cKqf+61V&L25j!+nUGrgc{6g| zFsSdBxFgwGk?xvvL12XIL5F>|ub9 zPRH`O27P3A<2t^-IF$}Cj3VA`r*b!3`0!!gB=QZwrFGwblA0zGNN#b`jni$U+53qeHtK>M&)_(t-h(8=7&!i6OA@bbiTun}qN z1KW|nJx*`!y9iv4RNF1z(B>Te;i=QXfQ|vvYX)yZr56YX(od_=H2u?KI<8m!n0C|i z#aeNrXXhqrc>i8EP^l;L?|uy%J0Ln&rY9Za{vT7YPk7_M$;|$Fnf;qfZY`c?S~&2T zNpw`yuaCY@|EjQWqmlhhTaS;8!2qC-=-0QWg`3~@Jvj-9UyBfC4NyeeGs$X(Mz-Xu z4i5)scd@SlaCty^FF^i@yT_6ODd;3w%H_xQC*V|4AsmkbEcGxX)YOts?hdjiq_6)K z$d-_f(fuhN_J2ku5k&yxSFA?J#lNz1|DiQ|Du+`MKRy*qi=d0?$G%7aJ%3Ho{u70H?7C{k&yAT* z?8)+?>Ho0y)?smV&6g;I06_u?5L^=6-8I1p7Tn!}yEpDGjcXDJ1lQ2GyLEsdjXNQ@ zJIo<@-|sgw&&+*h?!Egj=stb4&fcq5t*TnN*?%GNP?w;DmP76R1%;5vvbi`R`M47; zJ~`P#tpa#%9C#rF+cq=Etf|QW0mSb@M@iv>aN|EibKIY8FhW1)#C_w+Hansr+zib4 zDMT6>P2=y(ZZlLB#gAGTjJDv2bh)q~ITJWkj>t5ZqVzCm zlw$~`$$o9+h=dV*sSB_4r)af0wWRMd^R*)S;;>seEZq>CN~|!74(TkMWVSXj$*+)N zTJ2hY-PEIOJ`*8p6=N?yw=r_u_0A<|5N2oY?nHx6{j(_jK$__ShpRk|N9`E)G_(2U zt7m(Xf9ES{gKS<&lgrCG+XLGT7RMzDh7I#e?H90zjbO{e4Zlm~CF#=jd1Qg~gmYGi z)IP=B3FgT+*aI1X3^k!xjc3P7nKa)>Y+_v1OaXhw9PLdW*l!@CuePmy9QlhU14G3~ z)r1AfQ^Aa$t|JHjUxl~jxnv>Xx)j4FO%(;S3}FqG^X3TrMYFUFtMNkMD-AAbU}_Y< z_B)vEsVh2Ke-i(85E~IE`Q3Vgty~O`wv6;jL?HQ~^e;`62{eIe#!uIuvEDP&$$sd` z`K?vT(tw2$73)^6g%E|u!9gAJ-MXR^F<-onCJV-=Oo_U6yMorK2Kl)Wr5t!8g3p!1PubO9q)d9pc9CJ+*6ey^3S}?Mwg3 z^#oVc%yXNSH}B1N%}1SkUyTs#cqXQL*hQh$5x+LM6H{$-N%FK-2`>VU6R4{zDK%9g zAMi!O#uyjb$=T6!c9zoWc2q{YE=PL#;~4qodgE(L0;(trFM5OMUC?+n7Vgsgk*|vJ z$2|)La+I{HsS_K}T59Db61@Zp@jt0E0z7`%eQmXw8;a&tUT0R-)Au<+M;Fe8Cw#ug zCGxjhgf#ApWJ_zTe%E_#Du*Qx>kT3bE7s~u%aow+5lgoqhS6;MYD*}}>p+w+$Z>9L z4N2@mmf_k-ZpErb+ciPOp0GF9fwnl(+h5-}?a0`W-A{5Y4}BZ9Sn0^iOq2ntl3R!G z2~YzW^Eqh3(64dsFo`u-`lFibPkOw5^zdw%QY?UUBFF+x^UR<4fD zXKI3>bOU0d@;2chgr+(4-_FrBj{j-_nha(J3P@@+4U|O(zzM_-o+ih!Z8`l55~^n# z&+B`O{!E7XP`P=h2X1*a2Ze zgneeP0IVmn}U2PhjP*LK5Cv#6ZHtkXnVBk=jc7!<=2Y zDEr`A%o#5~HXi}1+e(Ig@9u05H+9WV@89KOa;-O5)MLR^4i;%!UJK=HPljVIDD{Ws zGEk*%91y0-!wZ0IwGhWh2CKk_UT9AK#Wq3%(4g0zJ~2^a5l8zZ4KQQP-BzXcvNtoIC)3%5CEB(0y z<`f_PiW~W`0ofx$!ioPr7O|}@tOeY|VIc}g0zHT@RZa2@h3_6TI&DCELJlvV&T9Fi+2w@nr*i z+OxeICQ+RkYx#LOXHSHk&0FqSO_}*Dud@}z=QOpJtp$@NI@mlaczSZh7I$DtW91V| zb7z4VN}~nksotKKTLNx_NK;JugUGG6Q#jnEM8N5x+w`L>QEVh5cK5)mGpJKPp=fYl zWyAI0HqPd+k|933DJsElaGhbp?Pel3>x#biAj|Img6NoonqDM3Amg7mr}I3#2Vk&9 z1?uc$5_)a-n)1#4-UdR`0iNR7~RkX~p79h5Tw^7mfp_pX* z`}?m6Yvy!v9Nav;d`7I6NbKDtcmcrYMB><>%bTr0jDehxkgz}!8?K8$MMVX~m`ykd z+3?Y`h3^FpnkUN70okQ(P0ZY0L0uhgSl7D`AHc6vzG5e(q_{x?E-I+@gKq4;iNDLn zm>1K=kla6+TIb}=dIQgKDXDq=Qb?_B&sFkj2N>1ynCdv z@b9fdSd+h!G+{bmZumh+q1je;N#Dh_$9J$Om{Vm3{$NypKhf@woW`8L&AkAiDi$qg zsHY%0w^uHUt(gVxTHVLULp#gp4);^eSIiZDypr(nr{8L8ae_Jk$gI8r{2T7lsGp2q zR93dP&kEqy{A?hhmRf~@;Tm89f1FI!#qUT}$V9*G;(CmBHdh9Uo#gKK6-qj*vX0+OZzPr2~e){y^gPwZW z(MLg@8+xO^D&nUYaugItWi@F=yeZB2ZG}+q>9t%aZe!{zC2`6GT%L`sp=UdIqOcIB z;h@f)ix9}mKpzIhR<7_KXqlNqyv0OM^Ogs*Ky)E?o9G9NoN{TraaF=Ur=37L>RA-d zJ^^P(fb;HyE!9RcS5h*6)hT9=o?|SUnL;!Zl>}U1biH+PhfSv`=W4N|5oZQ#`sc>p z7&iaX-WxuH!}fVPSDBao0c=rMquV@u4wDwN<34}0(}5htvGNbfuGk3IQ_7(7GV}KG2GIW*CcZ6JfnY{|sR(wqM(O zhu-u(gJn;{*_V7lHX@;JovGK5mGdtBkUZDj-9~TUSwG9ruro@}bJLTNyVhk`S@?dz zuX4lC5wG_T(=^@#^j#T#lU9+mg5Hqs8;bg#Im!6fG^VVy2vV4aW7W*q?-%>UsKr*g zPtQo?OvPz=7F@7Dzf3^iCkieph>WCnCwg~kl(r%(%s=LFBO!cK&7!_Dne|EfLfJT< zX-&gnbC_T>i_UO_XC>1bRj{q?Ud(Q1f5xi?yk4O-3ifXOwf`2dGjZ|8B)VEM1iRwT zv)fNn(KJfRO6VF?L(n)nR-W&?M_=hkb5wFI3jWOP?KetAs@f34C@ zG?0y-g!d-c#7%cOQ6MS&15YY5FKgIE$F_qpx}7a^G*L8lG^fF<)!y&{X*BOU^k}0a zk))H^gBCLii^bJR4!En7!=NX0k z@;Hx&?p&VbY6Dl@GmeDK_Z4#FPT=a^Ph@-??DE_NezG;$>kmg$<0}%A2P+4)V&0J`h z=kYA?pAnqGm4E`KvzCDa5a6z~q_o{z-@!AlCurmK9USUPK3H;}O*h@A`A+9wzGm@y zAVq&^u$I7-yZrIU>+gg>>GO+BSN_Nh8^Mm?ZDmc?u@g-Pf}N57Hha%x$LYa@_Jbi3 zI_p}g+gh=0ZOK$f(`K{<`+c--%(xHZ zcX_Itowgo*ZJF)QE|O-7X0yGDzvpcHFin2LkEY@#p6x->uP%tL^2b=Y{Io;%$QZP) zQ`zSy4UXq3THBWj_CFtIMh)CwQKbl75%!7Pb3HU42{d1KilHB#5BZ%u1w(uXzN#Qg zb1_kE9udE%Gh0$7QmJVhwcq=ynnFtMqspyPXuFQx`r3O@?)cu0CUxF!K2{{r!+WTY zg=u812-z=C$dRXzo~6p(i1p#3aEiGfLztCuZ8^0m-Jm5I=037EIFYMzI_)}t))seS zGs*{dEg>>Ml$*NZrg3~ukz47qO$2)P+)vxg#OmB(>Y*rYoW*ZQ1DaJq#P=|Q)_ow{ z)39(-w3sm*#l+-&7xv`3>vsu3On!Xt}{!(x%xD{!Q61N-HPzGOI%%(le%bc=WI`=F8 z^b0~wkF=}Wr-a~_+^-{%&7tOQa;nHs$$SgTlZUw4)jS?8_thKI`&9vSOyo|#_Ae57 z4L8Xbmmno{xCFHOh^N-PFBCc{YK)HAM&V8FLirAV*JSZ3_59S)|F-l|K;q>~x$7R; z+cgbyj-xlo7v`j!pW)BsTiXs_wz^tBJ7mJzobe!E!;t`WXYME*-VGZZk|=(-H5?7!^f&@AgW!LZwQLX4S9JI;JxPtw*)hV3>M zih~P-9`?4@ZJ({sW6TlVe{OuAzgatzrmh0eE4;{s5alzYvZz-MHEEJkE?E?B;ACEm~4#`}8;o zoPLnx_`D*&pFYPe#>=y`>**o8X367YXV>>u%;O`BpVZ3lDY;Ne!MJXW_i7qhdJi<` zmV#!GI0!?u6-h zLNRa+1K%Er6U4F$R8;8n;jzicHIlpz);YL`e`vm1y3*?3+P&H-N{JJ3d%_WDu(ITL z*OtZ1u+~k+Q(Zh+#0g)o+*wo%k4`EGrviJkIM{!ohiHry1njo$@VbyHDH-M|v<21h zWUZJx*t%JZ^f<@Mu2uAh;yxY0Ud_zKkShnPJ(Q0-Z!`OtU1dHTI**IUDY0; z$25cUMWjwR=G63S1jsgvXody-azg^v9?*uwTHz_eZzgjGV(&Pd4+!3h=f^zozU)6% z48R|{)oZ%Kn?~J_sz>SiWPiM#3Sq4c*?9wiZD6#78C@Q(*e)g)mB9ASaWC|8^bKk! z-TN}(DT<=&do33w^~50LWz5Akn?wwWkR{>A2+3pTH4FZ*z|C@W8qI={Av4! zlaj9P{DKhx`U$}U;%aKIxVX6Lb(!bw+}*<{oy6D)W1b=+z9c4|Hy5qep#GC$1VFLG z3hi#2bI?;XR8-|xP5oT!HzF47>9bi1dH-k>dBoO5Qc5KRS#7U?lAN!y4!8@c9Pr`Y*O$f-S3nwDx_UyhZ|5b?s z#$!Ev(J{R3;^t0E-V!;n-M!)TeOB^MNgd!zW+3lw?$)20JbMWET#N0?AD0L?^V?`5 zp8brNvJef4#uOH|al-#ZJN~!c(Esuo|37Rk4R>yvF*Hcx_VChno(o;HdwICa}wpZnw9u2{>?}JRbCM zWm&QMk3kCYav&w+2`9H3vA6RD+XDZ9{f;pA$U^5k|2H{2RlAxpc4LMZq=L^3az{)O zytQg>(8UUbdk44GXCM&`Iv7vH(yr66m;lEUS3p4BE&#@mK8m5fDOv5bOH;}iX?nQ7 zK>V~-SRmUIEclAV+ASCUoA&|?V#%x{7$cpFoXOqM>1kh@mm8W+n!MMw4HDTkzJQw>2y4J(dpo~Sv49qW zJSi0gR9SI!Fe8V;u{n=}mJJ4*jaTpOh_MzO?){pqjBgeD6Wkkid|>wZLv_#h9a! z`9>Ur`HA<-=%%5$zCpb;r>hy^2u~9pHuwES?qZy_*sZTa3S+RK-5h~brp3JkPM_>* zyzGtT{f6O%)jblvxEV*C{sm;v6O*j~AE`C&7oM(vWJT*4K+?D#HJkl0wfer$(DH!c zQdQ51?F=O}&`BZyolX3t7syP=-W8Zp=8Sa=)_h#ZAeuk;)KT;qV}aQ>rj zrckHKcxz4U1s_S}D1}dAHc6(NAw;qhMy{y5sNW4US9xV%;dU)Jn{herk}+cH#ACaP z-OG+y$unWTM5E#O9GE1kn$@^d_N?rnoH?V4R0SmnzrQsD(W<>Ck{lu?91+u(VhKV5 zA$&w}tb5xa<+*z47@#G~6@ksZq5qkQ-cVbvpgJsN>@ZhCs=Oq7H;KguTjnwT$ zh+6A(yiaa>JuJV%<}x|n_4++wE2F%zejZ-7%*lABYLMIoS>Noib>`A#YZ1S^u?@Q$ zhwX2DJiuly2G-h{4QDwE_GWv^TMkSVYrPCKcAMKSp0PHzHr)9T+Bb6VW?iEj60Yr3 zj)a*>v8jNB4Y|`@Y42hyDZD%yG(d0#TUZXF$?d-2t=5n&f4I>98CJd+9 z+b{><zX$fM;Wz8MpI*6 zVsqb_9`b=|#z+Lf!c8_+*a6yTZJzYb8ork$_Ioc58cc`Do;Rh88QZP*OK#5C%xvzO zIY|m%wIT{NPj_?FZQZ&t=}71=d{670aAia6&)JjFyec?Y-vSe2i&@=Icu;$K_S#ez zNH5ZF+6b;@>#y?_QV?x%%Gn?u9vo@^iz(JaH$~*Ttxs*y5%AqIw}Or=3JJ^PS27os zm!`o#{Gke0--)?!7!1#n^c>cQz$3&R&N`@!pPF|)5H+%Y+T`CdFB~F*oDsBej zW}GM383to(HKi6XkEfDQzb_#nGG&x@=cP=md|i5sX!-BEthK>WbCgz!YQYt#n>8vk zKGUYBAj06ivQnezYNS`R&&wOy#!d$M{W2_xjn=ZR-=i&gF*l`fHR?CS(94!yaPYMc zhu__`5W^QxQPo)&#~vJ59N#UXG+Zc}bH?14)m|MO&Hj6N;^hS1Zn!zbZzY2wg7bqZ^fV1&5jq>wc7-W-*I9ga z2QryfEIh)^x+Gcj))!tpAruk`NNYq?5ei+{Bq;g1jhC0m?Ttk@q99WRZW%mKU~Y|! zQ4*_SM~D8%L6on`{n8>^l5;!mynljiOn7z?(~^K>Go zy1$OcU4GZpVr$Z1S`S&!C`RxbX-jt#{QM_V>qQ4ZJJ*q;V0 z(C;=L*%`V^X+IlXB|sBFl2GW!MqC*lc62h~`GtjdoaPWn)=`7t-RH(WANOX0!!+j9 zsNcV>09E7N^;uK#A626@0FEQ0qN@J&j^6qJWIsk&P=9|vbGWj2qqd9;3ZRO?kLmT# z!J91s+E(iAg`pFSn-f9iVO}@A8!29TAjhHici)cc8eq`ED3#tE8 zfA)WJbIkVl;mVQA%lYfc!|Jk+r2Y>(H ze>}WE(tb9$;_v}z89cFVQ@LQu4)`{5nwpwC5D;-NWAS5Chv*DWq%-;P z=gGqehX^S2L3jy<3|>@-NPtTQf=>1JT3T8(lH-w`a*1Ci`p@n&GI8ZyTsSQoMrudo zt$n@Q`;MYXNV3Jvjgb3*XE6nXboiICUi!_J6VeS+7By_G&vSkOv!mP=@uzay-*gUB zCZ1BV07N?dHTz1@($TE7)^Hps0dme`%kFvP2GkQDJ>M$esNSL2B@7}pKFgUD4JzOxAX)r9a0kno&cQ0w}UG&p#PtPZb9`f;rq`ez3aOP9$m+vnEVoUQ&^Ts2)yJr$E$!cF~ z^UO*!Vc~GUBaM`eEXqFQZSxci4PWCEgqTtsOlMS4m#!?42P7ig_QgGbMSPWHcOz3h zZTiWiJ#lkpKq3c)f+J&95C_wxTs|JJH!LC#LZJqrxaVz}V*3)$?#@N;*Q!u(Z14Dr zDsnnaBQ_pv)B7Oh0|xQB2LOzN3+ozl=(^vCZoZiV-OPh1XIhm5R ze%qlB2Mv~s#nB(X+|j>7!91i+BXN zk7li4T2Cw8tfj&l?zrx4Lm`_R>u>MP*W9Wft`zi_9=0Trc`+{-jfO_KC_z);3fV!HN_3%_U`g-zR*7rAu{J7 z$?HMXF|nxrkz*ioN3}HCnO>EX_=~Et@sodG;FCJ$+L~?_jw)wNMi$ynpA5OC&V20y zg@US$cSL);D}cyn)H-)HuF`-Ojz?TgM)bA#;L4e4<$R6(j_9szhQdU|C?sKW3jQ(b z+dN6WhCFTGC_?A|T{4uzH!>S!;OjHzXfx3D+a1sR_~#Md;?`|hbpHjVfYU@uyA^cj zZNPK4I+~wdZjy{FpA2_!&WF8FQ@jl_&xt?woss}9s^0THXF&T6=yzxAahFG&IhQlv zpUj^o_$RmJ67<;fkZvBBcmJ54GuQno^b~&Ta~`ix)zhXsiqQGHS4dCLn}gU8?mM>x z`{&z4dTNe1v>MMSnEkHl$Z+;n)3s121#6JAUfsef41NeHMO!nk1MuRBkkR`s zWw;R}W_`EkVV;^s_s>iqDWeQHyr{|EE{vAcc7tR?)?a{;WG*; z^rxNA(A-yxzneUKOA2aBmlExagV}^-93R~}z&ofy3~XJ_mT;J1o@r~X z7SU{ITKlqI;xQJ3_yRO7@ZIHyEditUTl22KO#=gD8+w}k`8|Q=q_pZWaese)B`X-+ zhBNJh=W0D9gEiyVFRjug&n#>lr*YD_k!jW`$tHdEUJrdpIAQ4IMcPXAa{Zz|P&hIL z+s|-sM_s+8Ioux8riqU$_js@ld-z_7vZA#vZfJ3&kR=Pw>hjy+i#&Ux-aU%8-t>o? zq$oJNILG=+>v=w>*B8{~o8PBZSnWNcL@=9T#u6qp8^8NL2cw8dIsTlh*zD>ew%OX= z_1n|ZU6S3J-gZuhYiG41x?@H>;Gg{k%a|kJ9~_?cs~*7KI^VkmGljoYAzjiKl;;P-t>5qHF@s<(E+0t6kyy-meCz#S`t3U37E zJq#6T`N1v6rkAuNzd1WEmtS7?d*VL4ZgFwTQxW@~oZ+iT0a=;(oK#NH!7D$n2(pKJ zXja?yJKw6__dnWAQ^-KkQmcMZu=%)|jkfiBmZkLp8uqLF>J;A^(lzEC4Xx8`8ZEXv zqrk2%g3Lq82mU=H-|JputThOml`iFv*2xc2J|^@#54QX@?uy2zuknME$%OB*Q@-B& zU%L8S4h~NW@_cH+qYF>V&pla$lD+YDX1xIq_t*w;p-6NI{=BI==LB^t8rs?#iVTY%Fjhn%h$Fcp_H4H8MvMD09|) zCzVKDRZ2^1C{c5x;BZ^{N(bld8{~81P`*XIunUJztm)rqU%M0Sq<2pB!s6yZZn2h| z&ualN6YWD3?1RVr%F`E<01c-D(f{)gcOeiKvWbo_N*tjG;`wsf;^9)l@bOC-aVeIg zThg|Sz*kk>qq@?)r60e*udZbl;YXNlcA}e0NFkWub08Jyo<#tVsohw4AkNa(UHG}X zV#STmzTX`loTq)qw}W!Z@9(+-K;9igySmG5dvESths2&s5~bZf5dagBI!~eT4Wqu+ zw_Y{pp13>$H=k$sW|NwqS!3SZ?YocquGyYrm@nw^&_}q&k(qASArnPg4b6|vr>x=} zJ%UqeaFK6zLIzqh*gM+Egnt{6$%R%#61J~0FXBquy6q=vVqKFWIAJ+OmMa!;AaA3} zK7>c@xfHxwc3O|*o@RM!&LiwAcUR7)9xL)n{?y3dLmkh9ULIIZ)4tzVLX_^@08op* z_Q~%hF^iS2`vcj#A5_bmp>uhOS}PZXiE8cw>6+@MS3E;sK8$x!SA>DI6j!&<5%>Y3Yl3)RVRT~=#0RZ3T zdpG+^5oja{KwLP`Z6~^$y!2MYuT5OIW4e_ejeP??%RGW!sTQ&yKYlEM?2O1qQ7@^t zM_MP`{EF8dPgG!6fvmiGnP9i>)IiJ3+-qEA$eylU(SEwK=ECpDODrxa>Gm#(e0=i# z`}fZ(C_K#*|QQc?T_c411h2eNE_JnDI!;mS8=#5HbxjiR8JtxW>Xa8 zBQf?*fF%JgI3(n;=Out0yJ&7nMzai#RCRce46z)$gyQ6=Rfc2|0Gyh-dz!>?k(U1_ z%m6ST2cNp7{Q=xA>*&aKmj~7)U1)6uJPxLVXgwhHQ<0I!PSXqEsvn0F1rSI;FlA2% zr1rM%ZIzX*!{!^gkAyfdyvTiw?Zbf2L`6mG|9SmA8-a?va`Od$jdNi$@9& zC?ahRa3>s0$Ld$-h4Ho*u0zy4n+vVQ4f@%X_Q@AB+!;dAOZQ2Q%i7^u`QX2DKj4=Y8zwAlPO?%&vudd=I zv|1`P-PEnUX4J0D9woS=ox>|L^DB&YU7Pr~smio~HF?BTiu>Hs($Ke~Orf@JN>-5} zFo^dMW{On`r;Y`dOgL`M7Pn?Va1Fl0$&De5wD^hNt2nfpL~=;ddoS!Q6=PB3?$>$C zShv+tsWQ?-EGCC6I@9I`Ph+tj&+(ap#vut)QNdJ9;R%Jnc+2yf>GF`CsB~8L0N0)J z4)}ce|47R|B&YJ6Opi115*@IPZq~h{n0Z8+WXQ8-hw9``HX@D`a0^Soh}51+#)7r4(%62jsO!E)3_!5tMZ!{Cb}N z`m&6U$Ri2Q!yH25Mn+-Qg|5)*5PDE1Yq&nP$EaON&{X(_Xo{-+T%x%{Jl1wGdZDT8 z-Iv}9=+Cc2_()l>*6{ifx3tEjtR8IMMxU2x+}?wM1qMQ)8;ITssFitm_bjP|VX*o-lj|ko z(m~f)Ec`aEiae5sQk&zTc3Z074S;8=D7QF7ocTPHDGDkXXZ#Uw%XS~%%^GYg1!;RC z>)byu@Wz6!c{P)~=0?whGc4L1KZy|N5A=0Q*e8V{vZ3$q!ztl+T8aodJ2!P(qM9E9J*v`H8Y$eKNxVdzE#LA zFxk!Tg42ZIG5zaMK`+7xA5xWi(Lx3~!2tEH-^?XcJ&Rhg4tf|k!M?sY-P`gJ~hwP!CPrPIDl0 zznqoJUXf9r=P%uOIO3uU)Dt^<(2_tt*=M4S@cOP&^W#RH<&3Mw<#Zc>K7%DDI2*Aq{#P|o4LBXRed!zxmYYR zS0jA^9-Q#FfLlNm&-R`HUxZ6}(6nY#4V~hQss2m1n zvdpejnZxr( zu94oWk;v*O77%-gyV;#+D=e$JX$QXXY{87Nw@QVT^?FX|6sc@Rh^0DXX--lLw` zpv_m~PXPs&=cz*yz=Db!g$N!9?l64zEe;5a0}2TO0vMuFq_hSD9o-vVUi`c<{2wQx z-mmcRASHM4Z^UN*dojgN(;n6Br(eH*U2tB$vyQk~ZY82u`mpuO4Yvg@j$8lN_eWju zG-v*~6ECqQBkr&{2i_`K>74Md5y%c{$v?{*klJ^9K-i_4;PjIzaVZuG=7LW<~}4CT*m#`_FO@lm<)|{tgk7kU#{; zEcoxhQN9BFpRmvMH!ooE<=-FPS&j_*%vApIk<2`8{?4?1{dw*Tsei)>F$?F&ePb}$ zyyOuS%&H?<=m&CmHwiq}*GeD))_?d$(3KP9w1q#!l=^GJoV*ksP`K7*-}Tv$e>jMD zQZliH6HKZlMblsWok5_y7aM6q}owB5rO+Ei*PIE+vJXy{WOL zG&6h-Fo)yp19Hc9ii7$00-d_!pgnM%fM|KjnV^^iP2sCm}UOgtAmpR zY}xUwvAGY@UowLMZBMq@Uf)^9dl1s%Uq-?H8~jq> zqTLC4J~?$}b7BXT*9r7lQAb5ZrPUOEa%0rib$M+{g)PCz(7c9glif*r02h+3Shd(V zThr2xB;b>cHXx_{q{PPu*VsT=M1Je=dTr+SD)jB-JUO{WmkyJ0OM~ykw{wk{^@1xQ zd%V(6D$8}O9@dg0kL*=P&?nl>;9%wC@BWQ$Jzt1)4t42ZaqCo6x=u@m|3iP}nqeki zV6<%mPAu;roxs^fdLR9?9nizW)Ro+FPPQ^1=t`d1 zM01AFMj(uWmKMX|D~n>A-WJ2+ zY{RpxDWE0QjBiJBpM3{0Lefny7YzY5$rj%Q|5L?)NaK2CbRLNg`Nh6hK^@0oxYLAH z6}gj!LJ2dkN{k|aR26hd8@-jX{iq)Eg^28xw>WE3Gq3?x`8?od?#N1wq~&OX9D&&*22zNXmEuwu<*C5WlF(#4OVmNWlW?r4H;B@lYy z+`1glpn|_U?PfS^-0FNSuNFPzDz9Ss1n|~=AG}v_4sdshQ?iqzY55d_vC&66=M#BT zh|zPAWyD#R5=0nucBvvRK+?dj>$LiQ;E`p}DJSl%{W>M2PGa3k@Xjm`?>j!^{ z8acqoM%+~XLU>l;(S2fw2b82N41Gs1*J2N9j_%sLZ51di~dw)tXc` z$y1tPT`|iL@b7W$=r;%ig6*Q#o-akOv9uinCTJF(N}Tp!8TVR#+dLkaPz{!JaF&K+ z3tsH~)*1srX4{>zT7)1>mGDX=*qH(gpNBP~#zLnZ1X6!+d>Zzf^kU)2yxpWxm$|s4 z1epF$ccv@!j#O1ue=gWvtl^ngT8r{4ieK1&l|l)d5>nVlXj>U;64ZID3WA1aUFT}2 zjYVT&KBiS;%CE?5Id(OJs!sdpwk>r2k=jM~7$BTL+v3zybrCK0`(QB-oX^M!q%JRZmqP?K}#P zj>^0SlA+qXe~C|mbRDLqq-y@g$#4kv++B^XC$)STl|YJU_4pqDq$l_~TEy}9%k|!U%2{!uUGq+3`xkVzORTtAgE;i!%QtTn;ChhWS zS#8EhsZmq=0VtD6y2YI#>C1 zU;7gZ``A)Q^+9R&i=oo_H?(Y6fPVNHz#{x2%kDn@b$<376VsjxOwvTYL!Y-J2+-M_ zMcqKI6tIBqV`D`hRU>S*I}BT}IBXZ(iwE;JxO4~&znVA_8WYM~I^>0aB>cQbB1OKHsf^qu-oUc=E7s2>~t=sm%j*h7f$UjLbb`&Y|HuHpLPV5wKM zm=xd{eDAKu3KetzL>7UYYiGLYn-DyW>%0%5XH7JuK>UeMp)jx9hdJ- zP*9ML?nkx1Pw@_26KOuMXCwbhbJqL9gioyrr(DRFdJrmnF+}udWt*$%HHPfVc0%$A^nDSD;THz(xT~7@)c3k)n1oIljx~NS6cBTNsj) zlU3E!R$TaZa)!~75P)jqKo3AhTv;BeKh>$pg(41uGCB-D#=lT<63=(OqIq`NYrq3=RS<7s**OT_gTTX1m39qQg%GwL#xW=ouIqJdTWO zWDz91*{MeN1FW6Y!CPDq>~x0-W&E)%l$lDey0^ zY&BwV%o7V}tR7!nw}~hC@ZY|D`^f8K{@^6Z+;8Tfd9pVI?X6zH+*KUD{s)h!H*EeV|x^~_i;?2F4IF%om2ZSD}0IZgywdf{) z!{s+zJ1mz7QloCLboJq{`3<}l{J$R09?pWN9aa^f7Q?yn(756)PfN)`7c<{@=NkuR zA7k);Gz0F(dGmEtSzQmH4X$UQ=Zgw7g|5xlQnI6&$WVg|GgJe*tG|5me+8gYO4}hS zPYK2WtrET*m&A0f0r6MniAgUt&-zD&D!+g7r*)Ev3Y|nm?7rR;aRkxqOdpsEy}h+U zRqw821xjzbFx!9c7vkwcIVe!#ScdME5Dv)eJSjn=4G(FglqNnbkf1?{Pg@*7ZsD(qTA!^qY>s`0M_~^9B~gi5ixtUM^FSj z0RRe}QNFHYCSF@0m2gsrN36TOKHi$=G$+YjlUFaLZiO9XY;PI7Ul2`qc|41hE)^!Z zuMyw5{5XNh!e-Ix<<3ZsL6DSarTg?Zg1ve%d7Q3Nfq{x4@K$2m#9$@u>#0yzDEG0{ zOn3|-6z3S`26{U9XyMZKKw(FC;MG2RMaG5aL34q>(d#mfrv2-KZ*=uSVZGn)4}rJ6 z9~V(#$?A-wp3tth=TI0jFTlY)i<1$5r`pBZXYam?imEO)J|K!(#bMqp2R#RZA?$(a zOo)5a6&*Ol73S6=UlIpqQDx>7-Ub=}7G>vfGtRF0(x4BZ_w>;gj1HAgUuI5jB8fqr^q{4v7>WwZCe?LMEyF;=>t%hW|cA572u^Iu!e@{)HJJ5n^b9~#&^iQjy$5+ zEfuj7gB}C#`8W|B5b_5Ps6s~j`-psdy(h+DI16pbq*TP(7raDB51~>A$2M$)I`pIe z6<`UEyHJk?UP?}Dp)mMx3)gozO2Zw5dp;9HWJ{nPX^y+u6j|+4EVn1EJfk`9Q?yDi z(7V$@bOy#BX=^>h{}I!T?R-#W*J?#9`OPUGJ-w%;)K;#l>V(U*asBw{?OYxs6p*@0 z2}tGK9@Bo)|3;}~tsw}6CjhAp!UyGepnG}ivrp4|-FGTjt+z5CKmOus)_d$?7c=nR z<16I=Smpm2Ex|8@^l}@tMOJLk?fZ{pNg577b3jZ2KwaY^{1F>tdpq`jK@NAv<9zaH zCt;RHlW@RQxYXNwcwBM~m_Aw$F#0C}H~THH004C--Dr4$oLpdTx8-@PF!VUdF&7qb z?!Capm6Vo#22czDCj34-^^p_n<;&0iiCSP5bpKBa^S&L|{o}&?{YUXXM{#}o@0yzO z-v-(A0jjUpHC=rox|p)&P{X~}b4as>`uR^WOsSO0{m@j%kH z4Yp+*o(j`j?#_L`T#A2v`n*%`SKt4AWXHb@8j|WI-$rU4s ziD03XsRl|QsYyYn6I{Tmmrgs_0haR8Z59MeO(E5wCpL?G<<3nzaR!LoL}oqzH1+g4 zpGhjUL7~r{&nm9#oSF1DM{)nTnv$JUfo?g!`0*z0AD>qn?XNhqzgRJOdTf`9=dU%3 zmU1o4cYZYS^g5usYBkGxY67M$ct0Wh=;nWAQ{HIV#;j6H=l*%kFL>F-&`Y;6R~gw~ zueyNo6Y7q=}R1&@^gc47AcErswOh6kv+h#Sh#Nb!$)Pch9Nx_F8YPQ zn|xYzHXrs8eD~GirMbeYpjWRKY>8s!)A(9C|6*rQ^3wDMi}Lo9y}ETN3+mSHW9B;R zkovLVXnul@pFe8t86{k_WPpHJMDZk3B{?u?9dL!Om^zD@jBZ~{a?mgfQD_h0FzbisByd$ii z(|vd1Vy}=p?b|l$%J#MfPg}5FInqV-As73U7fCu9Jp7w{iq51xPA>X?zprxdw#zpX zZzWZ&HFcY$viGou!yN8P&!xIDFCQGusIB9zlJ-|}cVEM^HMgLr)NN*=D@3epV@| zX7@_+nV!?EyUGqBsf~W`=E{|=o_uj(*mtiv+%^8dboyMx=7rax&duz=;LhFucH^wt zd0%6d8IG}8M^xInf8 zQR2Ruug$B@oX<7jDxE1nx`Dl?vbDm3$^EQ6c-yAQ89t~gKSx?FwNhPBDD z;>&%%x?d}1ZSwgW@bqC#XC_15hB@3Ee$z$oJbwDBDu~;8?~(rVuL6K6C7|B?dcwwQ zKT4XP-if}=m&;aR6<2?pgW+#{;J@_bd9p9lDpqnWc9@_Vb7zssk3vUR1G@uH?ugC2 zsmn00r`@JD`%?SH-#`6;rAzd4^Yi Date: Wed, 10 Apr 2019 21:49:50 +0000 Subject: [PATCH 177/349] Added tvm_dashboard.png --- .../images/tvm_dashboard.png | Bin 0 -> 140377 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_dashboard.png diff --git a/windows/security/threat-protection/windows-defender-atp/images/tvm_dashboard.png b/windows/security/threat-protection/windows-defender-atp/images/tvm_dashboard.png new file mode 100644 index 0000000000000000000000000000000000000000..d321e0ca670447432142c2c11c23d12d9e80b3a4 GIT binary patch literal 140377 zcmY(q1yJ12?*NKxf#P=17N@v#IECU;pvB$YT}y%D?snG}FYfMgI0cHkyE})x_ zI5_N{mmhpG6E-;viRvn=_z`sj34@T0WGPoN>_5~;O;>R@S4#(HxT3OQ85ru7D-0!R z=3?S(<>+eVU=N3n{*D@k$9Ta@I5>JaTUl7T!j<3*3&610|6!fYj9$9Fb+xiHgX6iu zL5H=VzqF`1n7euyIh(=hIX=I1$NX<{D;E=6BUo2wxcZKoSQr}Z1+8J^Y;R?60oOsk z9SXyt{u}S+Y+?p?^&E8Yf88V;?Ci|!UE!{WQ`%uTl$UOwtz2!*;0li?=;7er!pTaC zfA-8eT=MZHxN3bqo7t8^pb2J(d;41QLs;IdAp?T?M~1>#q{uos*`OlOQ^mw|U5Y$m ztYu@CwK7wI^Sm*Mci|qaNmbg5W!UQ4^zO3w2gLd1+TyOv!(+iShdHIM!?2f3U}Z5f%0i`U&L& z|A)nGG!AifMf~3g$qak|VEE5Z2~rMYr10?Y%Y&KN{(c#__wU~qmXw%2KRpr<5vl6x z9(uGA(Hao`no7$%}RgHSzO@g;LH(Xg@U1Ozh3?HdAry!9I)!fhl-q*u1D{ejkTxi{&x z885A1FiBqrqrweF1s)O6^!UhY+{X3b;9!Q;_f*d4bP8!NJ#|`_GacIIYV?t%U_=z^ zw|cw5=9etf6!y73+@%W(bCr|${_35u@X}dL`ZTZKy{oFK>S78bI~CQ$N2~j&Fc}Cs z7S_>!Jq3RL{Q0m+FZxbMs70|p5d=EE22yAm=K7H2ph~iPiy@&eA?ms}$_{M@PYssQ zrfQGlx!1}Gr!tv5m#8z*S540Q3hLFr5w4lPqo;a-2_A)X&fb%PF{B$M(?tra#hW8k z&(%QG+iO3oMGn^ZW&cI;!^r|1k42}@jhhYxY6J3qX;G4{mtU~~rlVG|JT)|!uy`(c zD?v}Ql>W3WhL5#v;ToacB+m@oVU20p@Mtqm=t(w5zm1#8g%#QR;ko8e-NB)`0{NXT zG=~X{Xy{MrdgVuiiyJ@s{(G~3y5d^Aob~9;CoQe+y9~J)0`rTZX65SbWnuzujNGW=Hb8?{=#g44rdc)^5ewY3FlkACdV)^Y;lfEXZ$ zOITmF8KgNl+xVWmYI4`1lHJ?!4!(u4tRf+wi?~gwef{FGVXfFNqm-78 z4%WE={%hPu6RD4Ym-@<(d^Z<+*mk*qgMa&}~;C?@pG}WQy7lb$SL^ zO3apeW^EjU@x_i!zzR>zzA5FH*xK@tvM(g(d2?wbB&%t5oCWjKyf;RGXqeqXvzp_H z#_j%Y2*AnD?+;a-ea2{I3)xeSBj-vic)4$dbW*e32RKvK7(N@+z9G5&?6{=8v2JuE z{M?Nbv(!tj5lw48gY8~kZr*X}{=mt#+kQJn{ycz#`oI@*ZAR#D_Gu8)md!8lWE9*5 zUMS~jxSDz}j-9avUiZZ|>_ro6O^o`v4IQavu(*5~+jdwAz1m%}B`vP~Imfx9^w>Pd zxu!B=z#e*KE3#*ydtyJ50(7g(pW_5SA2?Q<-Rrt3R-2XloHifIDhJNkrk~nJkEAdz zR@cvQqRM41m(Mo|l$&*b$Fix@hbyBH*Zo8q@SHoi+52APt|6+^fV{JI^Q_$bH<^ep zKiKzN_A9lNHEYF%CW~O~l&UuVYE@laYpU~D{5z`|eED};T3fIAUhfE>b8|{VRO(!k z&)~r+Bj_`@1oG}iwa3QckQ&T#!F74}Mnz@zb`$%|Z4>R$O{He7ws6|!3Q#|yTi_l!e7XsBUDdj@x7_z$w74xCtL63) zCTxu*(T}+dx=F;?HQcnDh$=1|C>xNKXZP!`GvwgXQ!s|?i9Rw;stFN6l&LNXCeL&i zZS5wx(g{u)xk0k&=0k!x3@G%mCX4(VE2p#5D<2L|O;MzIbRyO^zT;y`Vkx=TSS&WI z_2Bicn(9!f1j%AI#H+lb6iH)%xMx8#7e9Bm)Dgnka-uMfufEvoUr0Y)PRN@+o+;Z3 z0ERXla#zRvMurBXgLW&~B8N#GF79~v;tub;&#`nb?iPmohm8$l#TRG$M(*Y_47j$z z&z-k-y+RL12f*7tW9uWfY1ZxNU+)yW8q)4Io`V8n?s#nGZ6n&k+X{eHcUUJKpN_Pj zw1mHo`z=(mG~6URQ2d3dy6NtppHGBQ`%?86JN$bGSBX3PE2WtR0Y3P6cwd#kzHTBX z1Rt`72m)U;mawh+;qK&<45u1^SpP`@Q`USLBh4<;pPi*3YSW9A*c~P;*~Idr+&cux zIiwdtPle1zscwixTk=c!96h7e2AX7cN}zS;#x!6C|6(djdcvzMp8<39X5L)Yw!dcD z3i3OFvk0=+$8tj=o!`d=vnTCsj}~i@(nK*L%@{+()>JWx_f~#LZEh8pKn}zg;=#;%bip3*R~2JJb(@MUAaegCbj% zVy$zeYEOJq=W;y}vpiuIjyp@T`+%Gm=V7?`-KAO z?DVVK`&yfIJG`9lm!#JFv+DzP`jU`UctlWLljw%)$rDREd%19@MV-H(<^uQ$UgNVo zOKZ5(qdPuNT0@xj4)R~x-vXayjEdcKZI~=p#KUY#JED;oKpg1Avnh}93%hZHzZ5sK zDF<1o1a8;ZmzUzQ@{uaGS@T^O?Zw6UF&g5X%C9rM7>-cy1rtLZo&~4w#-j4sH zY$n~L%!UR2`Y!PJ22ftOSzoW;i**s5MS2}@;m{DF6QCp8d$z(=W&yzWpN_ekz#wwo zDPc||&X4QD&{Hdf?;#RE=QcG;*wz7&Tt>~PD}~te>PCP2myah)vLce% zuyl4q)RX0Sf5`iNYicxyFo?`Fx*zl^(peofQqaN{Looe#IKk9U0_ zoDc>albRtzsAZP<0Y;p>pyC)Y)RJiIBCjQ3ewibceP2?$45yXVUnzb7B7L`}7JPLi zDX~sPxzlO@IU6jrZ1OmPNYLUBjDq^w&HHdEC?LZDiqwKWRJ1r(IX*X*QmuH9@)e(! zBfRMR#i6i$W~siO*Z7H@KH!t>c9WRHFhBvS_6 z`QeYQz&6yR#U8QLCchN2T~0knNIXt&+I(W`27}qfVWWz@v7zp}lgj|q64E|SPEraD znUo_|U-h5KUgRa3n5o8%xjKh^g`^!sj^Wf^L4@UVmLVX_#TjLgMX$ivMjq#kfp)$~g;G_(xX^}B7WYYcFTHQs*E|5pPRd+|QTHP-mE)K%MNdrBy zX9S+ugrq`f`T?LFoC5a80>)fhk>LSZ{A{;gW#gtfZ-1-Y<4u*A8`Az-r_=H(YqBHp z_(%xQyDDbeVwm@*@0$gZ(FP}pLgBM?J6Cb$?v4Fh+Xdd=70OsezgqTRhb&;jOZ}jt z+kgE9j^k6K9XXUeKQK7e&LmSljyeVHJ~Xw`Zb9T13cbtHD#PHC6h{vpg$e{6a)NvL zh9l<5FlvxN$aMa4cFpOpUtP4F6g4R&<`?*A&v06S{FFhzz>*EBU!v4~SExVMS9z~% zO%0_Kkqb8N@#TSAJrklW34Y1rm)P~K_VYVIvhF|;ILTfy1&3Q(@`c~Vq#|Xam7%|d z@SGukGRJ1?N+V|1Hg@0mg#C7Y0}<$03X9lNJnFO~5KxaYK6P75vRjY>zUJ}d56T$? znsRqLwZZ+xRrFYOrkI&<Gep>b$Z8TC^nlF(&NS`;Ww8*aT`%x1GL| z--ta65;8gbvW&BAx-x@u`i%u5y%y^~qLW#+AukqqqOEhB!9ZmlJNNBuJQxh@gn-OM zL^{(s>d@t--xo#ij`7${fy{f^FGfD-@7Bju<}BP{$LbhRtZA$OHgMAhw#Rk!=Krqw z(N6S{U7xOXdLB1Cx{tOzi_o$L0CK)BjUEM&F?c!Pj9BEsg5-@9?f)$Jm|)078lM?D z`yaoIKx(*nl*&(a7o3f6hxB_#t3GcWLlxCzSbalPhC{o&OilCS`z+TnssZAFjbF=Y z`G&QlK`AIQx@_l@a2Q(Fq*D)nG5O3k6}Z546Z3=4`L*}d-*#fFDyX4Ic~)nK-V6owIqTnpaZffgRi4rH)qQiYASltJyWp-w&;k%;O!RT6pp_JSL_h1nUpjal+S+E7y`6|)vbHwJm8R4pTC>1gx=mxD zMDC#lz1$yJCHEgxcBoA)Ledtv>Eq$Y>uGPy*qug;m`y%0(PZ1AcX($|DD*ShoHrkEvQtpGrv6@ATMY$9% ziWW7dVmJc24r4ApMdih8A$$qWWC(QD;*{hGGv6h*Gu*=Yx5C=gu3 z<+yyq7xV7AbY{(|O$IVQ64>P6G+F!RY`I-GG+L6&-cxz7{yuBX|Bg|!Kf7AjKY%Y& z_z|@3fxmqwMyYVSv~;;}!F?itVajnZ%4<7z_THNM7bz0pXF`+yVp4{4@&D|?+P zlg%-yc8Xll_^@q()BqW^K{+Fe1*h^u&`KWD6F0i;k!77_*MR$RWhctmPQ~W7E7eW2 z0yC8~p%B{Kcwh$I*xKP2LB>e=ts=TuE8afVdjIK3bEqn-TIgI0xs-WK@KWZI1m0Pq z%)8VbFw7hpJolt{Z?Y#_py02_ZMZ0dfFnOy#>f{upS(Z@0Yx`;ww>{jnBsaZ< z_KVx!K1o5*?i}M?MGF0Zry*rWDyq>~q-v2Q@T%*{K?CapH@y%QO1_`I8fq!eV-KW~ zcdKz}*3#Jez?LKFJvO1e$wHmnuS8V*k63QCgn-5Avpbuf`u%x(-GG@#h1N5H`^!BE z@PYkij6=cr&Z>^>-e1T84`|sDWObsUs;4&qogA%R+nbqpxIiwy&@x47W_n*(*uQ@8 zD0QwG;u8}e0g;+GIne4GYvu}jIK09pgFn;Lzm=kGCtHCR$E~=UVi6KSYcOMh;#jzV zA%KD~Xce#}fTbQTh_XEo5h|A}j5G-ys^{Qs6D0nvtm1UO@&H|V&OeMy{A{q>x$1;3 zdpz?n83*^CDSFk0Ub)ShofS=*OJLf?I)nu-K5G#pcCU78qJsVh(qZR!{#4aDD=n!i z<=6t>5*fEKtoT-IdNWwekb0PKV+v7O;7ql8Wi@wre$_x2kZ0!7mGXKTh|rx9WCrpX zjjlP=69FHu?<&`ez@;2wtnN|yU*{ZA1%yDq&l0YhD5M;oD>PYe@;lKm*3#}}?>wcw zt@4;lY#}>R1bK9|w${x=1NcZsXKWz?j#5vlvj@V00kD{ij*C_>ah%%)+oE7R!0O$= zg#suk5f-s8h>+QVcCJiwJ4U$@uXz_zo#)>352r6%v`7a6%7V#{dCmhA0GrHh{+Ns2 zdtTyj*bbvx!!p%Ebg94Mn-W8TixJ|u_4FN4Xa%+gz)z!XRgO}gn{|ank%nP*TDrkr z-ha;hP>sT5W8&$iK1nwW6vpKzpD+1}y*=&VO*{@CCo?BevD07W z7q0&aoV=toT3I345f}&xr%G8<e7z6Z_B>rjY0 z1S>G8&NB2uhz!9jwD4Di1nPbm`OISDpKQl!!^E1(*Jatac6~hl9VhGjkb9O5` z8EKaOHCqH=W~VWZs?9_-+dCC*ju~IDoyAbUPgzbv674wsF6MQOdf(1hvkP5){+kxh zH@G@)w%6**wt620J-xZBGSkvG8}h6dp^x>i<2Z}Ps8 zx?U{#3U_t|jyO~pnXu}J&i9t-HP6v>qWSGTdET2|>~kW0HF&l_K7h}s z1_F6}imfG7F)i%Ld#HZFoq)nUhhX&6WEHTo(`_Z%N+?j)eMK~iQGh5FF8=0>Ge3hr z5#oK~qBY9BVI1(pkfKz%^_4^4aDL*$q7r&L3Hqnfi>ODp?0wGX><`-`@@_VX$`{f` z=?+4q1Hw};9k z|H8^vZjrnp4OPx``g~9q4U4L;gfexS$d7XOKfS9XAUd|4v{_6`5tjV9Fy#w`3TZ6v zBt#eZf@PZu-oIBekPcX|P5LbXZ9zcViV@JQ-)SwKeM(cMKKXZ1bufH|H_61P&yskR) zE*0^MTj8HMh(460*YM5bT7Zw^Q0#i$FiWcfH?H~Qw_L2bZ&bD$Q;PvkxcoIxMC_yE zUH94)0{^>g{T8no#1bKMW?^$JC(*p)K7tj_)b0KS3{GmFdl>amUI+o)+D8B{cCKJ3C|jusD;1$A>29>GbVI zfWPQ75E;Ae!smGO0Y9WRRRSiDiv?i+LB6&#Ea_z&uFjbyIk^>Ukx_pzV!o^-8NXf@ zB(t{uJemVvMxZVI7hOU$fZq|8?79%S7){z8N;;_UMiF|@BMQr-M$i?{#dHy(0{-!3 zcg|}*>mwIzLeK7t=3DNEyz$98s0~yl~C<+(ReXr^(X9C9e3NkwuxlGpNN+;qPmkt}r`UNF1Reqq4ItW_0! z>uI3;5MeaDgdcuCL*7zf(D?Uvr|;guB&oAISHOb(Q_M>yYBUST&CTr^vRO=}w}96U zDx{&(KuL_Jo9Nw3tFK=+DX5kEw0T|^nLMQM?Txg)#oVB~yQB$FfTiPPeE3@*-Sqc&rF5O%dma#5wOmEU z*oU%>IUiKS*at0bEo)GvnjcJ;Du9I2Mf~nP+ez@nEk~?2DzBgTT{AM+r122-1LODi zt$7{XmA0{&?|z5XByv|NYgXFJNpNxZeqjUn ze+Z^fQBnN(`7z`sh0NjBj{<{FjO>^OOk1-hzle!Ez}a zEZXh)`QNvOQZEMR!T%DG|1zbzbyU>U>HJPqd@H_OkI5b;yb(lgC`z7et1-rtI&M?uV3E=2j#Heh$t8ty#xDQle)RN`A-!UO#GWX zOs2r`bhT4m*|GHhMg9L%vo8t5f1trU)Deit*1TDqmzVd#bzEF4di7$$;wd=^2}BqR z;E<4!aRGp+UgJ*VN>@kBkDGF8Fy?%^YiMZTwGI!fLH#db8;?Ey=TAp(BypqT8Uk_K z?YHk^B0&V{`1DmL-3V*yW3BVZ)FDAAB+sro2bbSzyW6iursse;Sm zL7NRNY_>TyGLqQEd|AjFi&DYUv!N|9Os08oWCYo8y(gSv5f9hO?wz5p3Mn2@-(my5 zJ?z++*r%?aAyZS#OiUZAA(;0syP$$EE-x>D$$n(92L3TF!QNA}!|S_#YPhVGy6F8c z#g_d3i=_(v>0EzH^%d7yrr-TvEx?s>fSjWvyOEL6(X=~mW7S*`)isz9fV-#tL8QT- zVTb(PAf8;X7db+y0o4*R|Vc_Ga4YB1UNY{bF1Hd?dxKwnp3YQX_N zB?CrB1zuHzOy&iEF(EUvcoml9#{cYB8OR_Xrt=Bu?KyOXo|9|RPD|#~Yn7DOzu9;l z+bZLw4$N+H4Pe67_)4$EGrrnl3=fofkgS#qX}wW>T#t;&OQ_7M#S#A}q_((M||G^vYgG}6oz5FMIS1O{n@JoHs z8xM7M%S=eflhyBn_am=@zkkQewc>e^7o_5;!4OPhevb!!zu&)G^viGO#t?q9mHdw2 zg2Yb3iUhj4y108aB$c%luxoZ?|hwAO0Uo@VM1>jvLm#3Be<>HQ# zzIn4&-P9!i#Hq^8$?@adB7enCcHxDu*Hf0Y&P{Eg`Fp8vT|T^8(|EYzV<*0$_rg96 zo`-2x>2HgZ=L`Hh2mZWe-KUEVs|ggN-}4)%D}5bb_xEPx1|aGqd{DN}*Z%YP@g}p> z6egxHl`LK0gmG@qnd~cOw0ak_qNs8Gf+FAefrV%e^m6a7-Q0SzLC=>o+Avr%nRa6- zY{$-9=vHlEKJrdw28?shh6 z=yR|v81n4bYM1^vdG|5}x;B8s$(M9btaZA5?&ktAY=7I?q5+`!G0`1UC2ZT}MO!Z$ zm=f#My~wZ#A~o@`Ql7H)dzHugahO4#wyz4)U8}R5!~1kMkVs#zA}^WC*mH{|58b!3;g!&8yY(L&*OO;#e%lWg_>}CzNO8&;fb8k4MrXi+1DnUa#|Xi z;2%GT0+L^9Mc`TAv7e8*>~M#`$|fW;2mt^EO-+)Ye)pdyTbpMNEUK%*{P!6@;N!ue zDa!n?kV2Va(#V+Bm~0h<^?6N1B<1M%gAwn=fG>vls%XfsoT8NzlPQ66+iL#0=4D%q zo(?p+ywqy&!}vg@Sf$DQVn#s1KF+S2GT%>T*W4|(7n#Zpg*{@@i1p!qtlc^(jb#so zEH$_8TO-B90AyXqK(HZ-D-y6ZHWNY)i-qMsTQaP59`8vVqW=-fE-JS;t2BX`TC3aN zFcxqR8CSm0_4zXaIF_{gEC`kKHU!$uV)Jy(XZ>_tZ+;-KT+g-xiF)_`eMChC`%AgV z%erF}iMq()NuZHhB1r_xr_r%dO4lkuQd~7%jXq`u2AH z0hv=yj&!b7&|q&os0WSuM8?UErXM z8Eo#yG)B+4%V>{wuzAp1754l~h*4$wV%z&>@F3eYV!{@l zAe~LDkdl^$)i=FdPzIO#A3L%5J_Vf9v?^u2ZK}fiI=E{&dU>L32^N7B_=LjyL7lIr zG+^r&Or2 zFd7aHJwJb%{ZbPyA>qfBHb0=xH8ad~XVq>|?7^Oc{F*!pEXF{RA3x&4_W1A4#CXwn znPLohv?@)ss_0kf*x2q!9}f==#GdXi_8w{<7hagC7xu`=13RwZ(9jnX_;T&RY-EGy z8I>W84HhP5j!wOOa7YL)9^S7kSa+%kI)%x`1Em+0t>N)mu7b&-_vNm*ghY_ZruC;! zanuFrZK*E{>tO5xJ#L-^LQk-@IJOio*57$H=uM!))Jw&e6$?DF6gHv% zFvJ33p`%kGFd1fH{sSvESPRCqQ1p4>%SK+N)cDEq!o3%8?!~a|>BljECWVHg)&=?n zJaFE$zMd8M*Gffo^zKJTKR7@nkwqoY?#I5P;nx2=HOYC{vv>SpfZqo*om!X}{0F(& zjF2!kuSil+f1wSCMO9r*4*8_4UW#8DWc_U81)HwO^V^jr-QJGP%r3uj`L@?fWUxP( z*`f02p4~+ekU65zPWp`59yQz21tCKn4^P-(_3xYPbaW~I<)8=rA+zSArq#c%vnz0sP#fb1J`0>7p z?Os>e9^~hJVM+E1+VgJ0?GrA^a4T3P)pU-r~doGnGMIP4%x$imb^}QM%gz zkKoMKjeQCNcm{or;=OoWcXTdUur<_c!#%cnEYJ70t#rL-fz$I;|-%#|;t{W0*+m8hzHiwYvx@;y9=i$QA^tVI7mDkI&V@@*%T@yH!d?wcS z!_$-`PF`|p1HT`9&o44b0*%!B^2)Upjep^OJ$t3O)oPB^byz+`J80s=6*TbgY!4dG z5vW<#IW?A#?5m&v?~~?{Q6YHqMqU6Ay)W~x9*ntXtkhz>BICo^hv>5#WPSYzJ0F+- zR{EoO(?!)HM?`o%OYFF3sY&GMXN{Tj(MFpA zofqZe{PDrVbq-|?XZ?kciyg?z9=+UT!&`UJ#k#?6Mm=-^+FOmKICXTM;WVHAH?cnL zYy;duNz4d4qI4Be%AEo$@v)osfjd*@wv1ND(tY>N-MSY*NIty=Qo6K!0vr=@^o!l` zLe>_p4;a?i35O}uinG>cd;rZ7*PV!3?^2!mE6#oxV>p3a<8r(W_Vcq4JB)o*hyk%jBN)neXwr>2@&~Z?esE%P6gaIS==$n=H8#5G}!un8y;4;*=RXK z-)Vd;wgjEwR*79v$S?H*g~H`Q&io^reNh^=udF_tMQ9yAsZ`nL>85vy|v#VpieM8t-X#!UGez(G# z7#Yir6K(5IabL=!ao*-725_9aHrSbH{g&oZO{)|NG^4b0#N4V=#lW*=pXrDw{R3?>ke(aviyWWL`Gtkv_e_ zdA0S3!>9<;K3|<5-Fa9d_(k3^?3J~Xq+yi?GW5~W*c7FHvO0@2K9DA(d znU^`wf&Anq-@VYE4X1*Uk9Sf`o?Ff#1ZqNm zp$~Pajv2)euaYcCr&g>Uqs`2$GSx!e`4MDkv%#_X4CJ&Y52$y8Xo;t7o{p^P(N`j9xoAXJg!ej zvx22#Ha@p}n>mN0tLP|g9lgoFfsO*r*aA9{QZG8p8s*=>oEe!Pa{b!b5))Z&$AN)H zq$OG@7{Fp-khU69;&dbJJBpM_l$^pjGz_SDjEWpyVqcT3$@&KiVOp({(ZIiEm`n1e#iKXFyB&H6dkHd8T3MHZE7goP zq;w2T=w=J(c|3#;@%kKn)-fU?qc@yKa2Hfa1>t9p^_IZ}Z1DCw^&7KLgV+ttM#@n1 z8xBFI9Qn9WGn%eG`cskI;}cp4T1K!92}a$;ynBgm%AH>Q(B67~{Kl>_xOrQxXk$b; z*%i{sC8cBMy3pqJ!4x(1WgBINO*CnSHOCgtZ$!z)6rHwniT&-{5_k=f$7 z3)%MNZ> z=f?tirv(Z~NvVw%7q;n~;^bQf#xBHQx9@|;CHu#ts-NM^%$ks_T)=k5CNa>v0WBhh ztDD+GW^fS@TStd0T2VXiYUPGSE*MVZ++Tkbio2K|EW0Sv^Nz->-hQW6Bvr6EyjrVu z5Gu>ds1e(ahGTKy1qDiyvRv^GosB>UL*HLVt@)*DS>=S=Q2f z(>O+($aH)LjTjhCY^zRZl-c0O&~p0J9?5cenFFO?^_~RC>|+F)|`*G?z}kOXbQ7J26^%5I(HRrRPf4jgaA9u z1wQgk*GPxVcL5W7jJ!HVA;gWuw^n!u)23;${O~{S>ae4fe@)@v-ElGpX%!8n zXM%^i!V%}%8pCpBm3hbgaTW8dsL_WNz=IL=ycr649IV$A9y*HOpPQ#Q8dfWkxyY?g z1l)dl_A(2ZAM-cb4mnkt_nCzSRPG_S9E8N(eEuoVv(`38W3MY-IrEt;^{aGZmKuHr ztNDaG^lwTEij*$vUp^6z$$6pZk1JRJ z)YC0V#44ZHf4Ily;v$o=k)2gzdB@7rEZ z$5k;KX}&HstD+Mpb=bSu(QV_*J>NnOkgBvVe(^j(T28l5mr}w;pbHkNN^Wx2n+>IW z9aIJh-Qm@#e^9@Fl|t_+G=&@`)*rQHe=CeZ=CZ=K;_^_^0n4B4CBO#>5wU$oj#0rbQ#L;H*iVFc zYyDe!eu&hm{TA$NgX#&%qfsLxThj4N(d8Xs&QY*HcuW^BygGd)`4_Ut`6kUMsQd?P z5bVR9ue$nL`jQg>T0O#N26n0mP}4a98EQ1aON1LAqn1#c0Z`S-f5*K}4|~j+pASaf z++o|@Rj-MMS=h0H;^XZ9W}&=pq4M9-z;*fw`=;pyWGr}?gLsfhDV8FJx?quAAyY2x zWrO~|z!~-t*8k_Fzl1kk4u5>MzvuV+GQj}Q?7cVKpoGMoM!o%})JG>)nKM{c+aU^nS`m^e*kYa^^^Q@|Df?; zn6&s}c6BBQ zKbY^Az7h#oR{1?PXye77GLzvz7+^F1m{at-RUI0*8!1T+RPL#$Pm!=`MD{xK>{28zzi?z|-QbiaQS zc6%V~D_ER>uH4cMp}pJO+*GUD@mrU`u2p3E-|K+(FPg~9Bm$x>cUOr`XF{>_sRPZH zbE7U7x{FVb&vB2{hRfa$>c?}Rr6|Naxnn_LRG@0RDfNG3#$$hZ5sfW$W+u)4o*4V6 z=<$3ia5?>m79=Ceh^~CIiouLEuWn|@qfK`C$+}!MUV`57W>?ej&6^fone;K1-uQgr z-0K!Pm8E6(HP0QpC5L`j{RO%D_dX*-zrls(G&f*2z6gNn-UYCVmQNH_HC6AtKlMBt z`LH~O`p*8sad2z&q@%w9Baj;H)7uC2h(@Q;u0Mp1p^pJG%T zeKh(@g%B&@T5<7~sbXU3?k??|$Nx#y`hYEWSaAZg`VI|;MK%|+s#h7AH}(~Wc2BBv zjK99(=AR@bpf-~BLxX;^JrXLps8+G)4%{a)N~Nbk-!j=&&>(r=B=t{n)F#qrk^S+Y z9TOAAh%n2le`gub%JLGPMfTICeq?0K^`t=^(KBV1=kOZIOES@ewqKUurOwFr%XtI{ z_ZCy-D0r)*(`xOpni0oi#`NTEUuB+z+5m4JE2gaGiQ5)56Oxr+VKglWYBSFWf@UdA zt32P2){5jTxeUNNZ#T8uUnUN;c^*s434oRe``bK0h}+Nud33E}m$z;$W8-iCd6VIl zBI|Vi3-z&&Q}LJNvq0%cF*s@|_w3tm%_eI(Icq|`3p}UCPOAawXRY4b{=!l1&+Z}d z!O1oxF5O~X^1pV^4(fLwA-E4GO?B37|1%_C2KQalzI^KV0I9;Ony{$I0+ulK8-lMYqGZcq}yczt!H~(wypKNC9 z;i6Xyfo#_sez>9QD(LoCeeT!F4&i|N8C+r^^o z4D-gFoIu<=vRT!_bX9+5wPMGKWQVnOCQ^(@Nv7-|`Xw|rJV03&&7E<2o0L57S`W=W zvKzyY*0%2aZuyMuw1g^@87(H5!SDp|1>EEXo8-lDTb0QFF{Z*q?1!`2#7++>*W$jm z;@w#K9c6a8gmc<~I2thEG<7)Ula6zJS6J}C0M?M^boI2zmNYpHct3Ja+;5ZC&t>92 zqIMvXwG8|JyC)s1ECAYa2Aj<3P++(7wmccG9geFtF{1S z@IPJS-6<+pSCacLAksj@=bp0jIli9ffYm7GVwHpT77$BxvFN99_h_RZs2eL z>}+4|`W$Af@AdrMra~W1K^{5<$^VXBPYD5Wku@$l9)VzlmKM??1SgH7CW)8mi_9Vy zqY?rA8$YBHURgcNvoZ&_5RlaUv4iGWj$F;)t<|Ui#&m;{0lH;QUkc(}1(=SN*-+0{ zfNMKH4sn&|9#WrBG9@+f1w8PvC9#Z`wn>^MDLV&GD52`uWW}F)&ze3q5($q49-Da! z^c+UDgOfSyHiiN+s7Xr|sT=wEF2iQhf7k(((dlNfydGNrkQPnG@{iWQ`dO@(INEmk*k&RWmxg@^dE$XP%blAY zMB~hEW4>xTsjTZ9Gn;I?qM%ZJKt8FgU1Mg_okkI}_yCwJ;tI6uNTKiLn964yQOv2N z)ytmp{n~3N6p`AXSuTC%o@~YaX999HeYD0V+8&$P&KU(OvN+3Qqjy@0GxFWb7xZ%7 zq9lN&a9;pDE53m{v~iCTUC@QNaWj)0FNuf+y!Ldvn7~YAmJHY3@9B&!3v>~tJj)oO zT1d1;=--%gx0RK4+4dHh=1u*`B2&h3=1*OD_-e*YzRJ_QQChPnrMrixBB{CGle=76 zdULo}Sc&`7@TzzBUo(IR`ktmuOy z^8eKWXdGRi1xlw(`Mue!T;Xo~&0;vgRW+%c6DU?N;R^p>DaSnQYx8)b3QcBB=9I59 zlTiKK3+p}TveHRFeA$kwC^2gQzLsW1%olhDsu|V znI`Rvg&8X~_72ZWyBHgu0|v|JJL=M&czF{kjL}w}{6-{OO%$7HBL%_A6PF3VbZKTc z7gtJis*ZbFQsZcwyqh3Jjng)n4HV>k?VCh`|7+3W6T zBbiJ4QXJ&y=orZwbJ<3`*YfhOOxUx5)?r{=BrzKvA>q__7X0`a<7Xu}*RyeIs#5x! z7e!MMFFJ3YDc1SEuHQ_b)?2qbvHu>kzkDE3b z;^{wsR!LyB3Qy?`6<@!_*!P(2N1#W+kx8*l4Ai>vw;=qY%GUXDV&voX`2P_0)AL1{KK8QVNd(D5 zV+?;_0lnrntF5>psEsVJ<`vstl-ybj>c=m+?^$+&m=(^&+uc?YZHb2++!)VT_gX4n zY;*@-U%HMMYq+i{2;5nGSmkW=dHAI3Y5P_I8=1RGpyQ%#?Q-chvH{XCN(k9%1bas1 z5zW3jxFkH=X>~nlikgG>;FCC=af^#RJX+47rQw}~-~u0({{hP527Y2Z)0qtNvn1-< zI~^@Vq!;FEAR|i>d?x|3gQ--n_UL zqr2<6$5N}ES!BGb5L#M$_@eZl;Vb0EeI|3x^>T3Lc=BCfU5V@F7Wc&@;%Q7wJAvLW z;MuBm?T;rN5QmDp>&YOs#!63+-`?I2>BI9dkV8nYBj3kxjP2X4@qmxrVkTy3rmI5dm+Ts+)tcNWXa3E>Dqj!?loz z3f|jexI0u>UGmHyecZ6R{(+k)BeM4MYv>@es=~D*{?nqzaKlN`_T}k?X8)N&oL+wE zA?4&^*=zd%zLD#>wZTH;qlF{&hO|aqhP_#>Dqx!I;n`(DNa{$Kib~t`|JUpU!{+4K zyk_U{un${c_t102 z{gL^psJ7-1WSmeOdt`DUaU8cFF5JhoIsnFw32O2GZCt>z+))c1X+1YT!Q= zd$dt{w}jJryyt7}itgt0v@)xAD`axqZRjQ}D7mKfYsrSk6R0(^CR-?=Y^666|N4fD z;a8gVV*ovgBjFOJkXsT&@OJG}Z!n@7U*KqJCW)7o9^cPtvqCvPu+Qlo8eh@qx7kR@IXz1ga z8f87yjsAQqpP%9Z;+avpEPZ;iB85fP_Z7E2VZ4RBZHx=>+D;$k;`KZn*9F0e7f=vs2ku=C5( zW8Rtdyd3GP=ZwZbm07-o|@@LYda=mdULl9)4_;t=2Z*Rx?8}RV4BCZ{G@p; z#D2Z@p!4&yOOto=kfj*NN#SbssG7BtJFFeJ2~1yD8|nZcX#SOl_cgXCvRBNn^%xOF zeRlQ%BqXoBxS<;K^y}nT^@$(}=d729AOKm%8+gO7X6a!AkMgxt`jxLy#G{LnSJgUp zl+fu1{1cauUdw#9|M@)=ugHoJ@n#ExhQN7565d6td`YR`Sk~vrbCBUE(kAFy3-Htx zdfi2;i(8i(p0JdGh0`W&eAr6(0y`5}^~`v*e5Ktl`tsMHUbFcpOp?lxU|`FV#5lg{ zH#LlV_SPFEd@t&;0=7jO<;in6ccEDWcQBr1 zbv>+oE`Bj%-2$r(GXu){es3UoKTiVh9^ODEgtRpHHgK-)W&lj;73yW!>}WjChqt(o z`}!u^@ro+-erH-ywuuO^gVkz*-**ZPs?&<@FdY*julQ=Awe9k$9T@KR+)aVuHM#Mj z>lkoB`a_n|U)C&sU`rq@i-{SR4Ry%)GSm_}N&$EKzm#GPRQOtTIl({-q&Tz>N9TNL0B#}`{MmEo7HcC;F zQA%&Tk`My_4Um99D*Z3I9L^|{)a`Z9X5vRmBpR^LsTB&s$k&gHw@<$>CYx`U-N7#W zdt)gMW3qptZKk&7OCp6Y)A7$$n!D0C8c#M_0G=ax8GE{t$DkO8QwZ7GR;Ayqok2CV zE7Pu+9NNpCHK;;)v&h-RXbADRDS50yurpo=_PHU9e2PAjfcGWH1>lxs_vj&}op~a9 zm??jLT<43uMirNuITRz#{5Mz01v}Mia}T^&I>PG~p%g>Jb2Uf}+Y1-RHB~)dO}l`x z?_%@v@)}toXTR2fajeA2(Q6|;9-u2iJf*jW)kvMtvs|4G#KV9;Fbh;iD^Wbv`hCy5-_?xUeCRi~MO=2EEDhbAda-3=3`)PsKoPk4kOkXAF?#B8 zgvgcKe%LA!Qslk0He}M{WQgn7J@Ptkat$ErW)DHr6v-r0fgE1D+i{*flc&yFR>sD~ zjXmoRzHP&^nXM7Gv%7AEk+*PKR_;c}fwJ@mU$^0Tq3m(*{ym@J3`cqlDN7UD@|#{L z$6XkiXR|(uGEPZ$O;FbPQg!MP2SSee=3|_GT~lLg;`S%vF&C{jj>b)4~}b;D99!qRhnLBSYXc;~3KW zm0x)-evCz+IdT+1$-xpUU^y-R$;|peG@{_`d`%X*!@a;IFG=qAe1rU-@=EpZ2>}jN zkaTuaG*MC0QambGv}~=sk3(&O6BN^~S?CYV3e6(M%MYmA)?2ZW%1w0{3RU2NFbJpd zx@uFJ6Qs@{La2RlI>&z0`R=Z3WqVjE?5(th5Nmrk1{-*}7u-G_P{mDRdLxEe^_&b@ za}P14Q_hx4%LzaAPAcGkHpNzCUYstG8FdES*(YreV`FA4bmq#M_n-sA4O7^7xSpfm zM%q4n%)T+`nsoVrCOw~ylwalrwWTO&eBr1sx3y} z^SL*6WiWr?0pWPb^FUF_?Mhmk+Yh=2&R1f@GFGnNZ&}B8@dgjnYa=&JK3or35zYpA zGcL&5Yhv35c$RVHJl{F=)!F6P??|-W`f%@z9h1`Oj`nAP`=ueu*&-QSC`2n+t5ytm3 zA&)S+9*F8tNn~o}u%kB8M;>MCav*gxe<#bUKY$!hyA|vJdAVFHbwX*hn(#IzDdQ@+ zzk{;Y*_FubNSs~xxHNAz_e1XjDv+xt*j>L`AJWWufL~`eoFKgdPBlu)J|$J>?&yH6 zoW`OZv2^=lq-de8+ASI^hG1f?&Wy5S2>>UNb$7qVI*>f{cQ1eR^hSm)J&-kZaqbylpY7UGxQ=hhJ(G~cUk8n$yIlS z{X4qWYs2-W2jhKR z&i#h)V%m-!`fqfce|wA2rc=za-mHGYalSruJ~pzbc-b#F^kYpi50gnjjzIyN|ewwYv8yAQCB)sfyRnV9>GPA|REn)CqzkbT$fUv9;Q`XaO9uGcGDZkNWng}HcAhC0T?UEmN0ndpZz|`~-O7LO5Dj5rD6R%)zgI$| zVbnnJ4%9Qsq|*gF1pydp#6I4bv#`TG|l1?-(5eHLZJMWIYz*8 zPuwfg$SkFe%)H73PIzHl=}rw4bnC?`-tjT*etW|J%dFpNy{xH6=~$1-5E}za%(?JS z{9(B1We^jzDe{V*8P*21MU4k4lvh`qh~ar$)0LQ0-<_h~wxM4hxHM%P@i}(P)cahn z88r8gu8pBDz^@zWW>NLfpuD{|lwH}->BAUHjXqP~XHT!hral{b*r+3N zO8Z9Oz0otXrfzkYn0bLy(p-t9R?ZcJtp9%Ap85d;yli7~)gN`z{uy(5>;6Tko`uVzy zn>Hog(&LE!={G3j#aljz#^Kf*VTK%hQR p2i^>N1qIlUqi8}a|)#r=6@Q}$B+Aa zaG56dc`VG23zLzHLMx|442r!Les0B@FyhEuAWBGR)|q|h7(?cKXSJwDe>CpjN5{z6 z*B||57YKjNMTQY*-~UC*EL&d_V0S?Fp|0Vn<2xC21+rY>i87qhkBJ|a&@>vQ1Yis_ z5KXvah>Dxxf$C?ff_>+IPI18>T_2Jme2CyE;LM2gFksiJVw06L%0A$m5PyF-mm`CY zTJLQ2hW6m00`|T4d(O1ulPl@!;)WyAUFZt9DEjiz2K2j?oy5%j6IWZsj2@o0mUH*c zotj5IYf4>R8mz|gy)-I2P;X1X$*xqz$32Ow_LToI@4*l%>8LZG>2&lytq(wJ);^PN zKH$W(HnL>e=#wOr*-w2j!40-$C-;+n>`rOz3qW^oGjbP3)tst5;53oB3nVw!h_(xP za!9O2T#s@Epx%YvOaz6Tf&;(Bxujkv>2xpeljj@bwIDW)R}@(0u<|N9=RK`M)bC2r z&0lysepo10eJ}&df8}M2kX|xS*As4Hc0>H>HKh(%a}GhN`7XUWpmtQz77NK?vpGS8 zE_BIX{CGr1l;g^Ff)o;FU12)hWKlDoe0t0$tpn$@IOlIxT(pnQhKI57I`kTqzW?~KF|rX6 zesnIM$fYro^prvBgtNxz-`ENh6&fi0EGL)g=vDS!LAp^Bh-HE&mr%;XJCkkiC1lNI zCJQO-Pq~^PyvdR$KbiF6I^$ImxOF9tFq;DlSndYaz9{0G?=@E2wv;Hi%kBhHkn%>< zNiPM{?guh_JuBU~60l71JPphwYLhxBrBfx7EjEpG}TIgNUI(WL|p_o}VTOOK$_G?~F@6Uvp z%dHhoq11o;0#8LZh8Ls{@TXs!hAnunwhgS9X4w92AT*Z*QFonFZc_r^3`w#YTuFF= zQzSGmB^rnsGNbY9PJc{UvL~O9V#aSe3ppg7Rm+GUWy&^l8NOK~{6QXu!gP|=eJLoM z7)dD_=peX_=#~85P?CZ3abu51k8!Q9Ae><`lEJud^70BehxCzt>oPv!=6^H*hs9jh zrRDA?(90)t^Sy-z+m`D}4s~}q8Xlp+D6ZdmvHg@lquHx0+k@FpY8DDh6#_kd)sOIr zlyv@7!KqdJ$F$O5xUnaWlo!Q2;(dgP018VT#W|%|nRwaEC!%y25r%AOqogI7I!#7R z&oBg?ZRIhvpOfZ!M{yV>2nHXB(Alqt-9H%`=QU56nRdBuac@#|js3=NB+@@2uu{Y| z6--cN>Kw#$18w)w(My)iu%+lUlYRflA6BFq#>JPsjns{^i*zV?WQb>*s8TI#^=7bh zVyF&7ub`k;Mo7RnFX9o{@U1UTh)a`^9S`{6n-wqfG&sa}88IvvOw(Os)B1fH&yVq! z(8`CM?zUGZOMX4dr*uVP9*ko=-lM}@|n+jL<=5J_$2?H+j0(zW}Nb})O#9cHSFY_MuC zc>=?SW*$IV1KmynYe$$PJ2VqYxMBFRj|+H^glm*Dg5H%@1z2sW{;OGq9-KN|bfG>M zkl1&6Nsq*=>Ur>2uHz4#`l&b&KEBJgHIvkGE=NeU3V9%Kp>zL{v`(>%MhS`q5L81p zeg5iYfq|^2K2Ri>nb%*0Y+iF^O?Aeh9Kq4QHMCb(d>riXl5tnLSP;Ib`%^|pZUWu0 zXtO{*Yjf@5^Lg%TPe7JK1IHrWWn4u~6- zk-@x2xXzsM4P%_Pr~<(z{%~pG2gqVC8wCWm%yrDXe3i#>6vd8qDbXVuP@j{%s!~a@ z!(NMbG5$r{ZTqdGtWZA{HF!jQkP~Lit!0 zDtH#4OWHk)9Zy_y4i990i8bo{1bmg0)V9k5UJG8+oG_0lbUBZKIZ>@~gZ;U1LGJW# z(oTJeI8^}8XaJ{5u~vYs5JhHyr^WwTX_J)#9etjqJKRA|-IbpfXH)PieF&$+|E?zV z9Xg0~-v97Qb%%*3tD#PxemlO^>1BE3Bb$uS6*9NqH? z5@DvkeaCaoJ9ADie<@;__d5iG2d~NPpGv)-tv<1CU4y$GgW!rrV4o@acrWCcpBa?t z<<@8(^B$fW4{xsZ)fEF)$kyLpnRcBl=&KOh6vrJBi9G1#dZ>0v%<&4W9R@0~nrmmW z>AU*je}8mq=n-B629cuh908S%-mC-|!2}}Q{i=$xYS3Oqq18DtGcYMh$6m1hNEZYS zd*NfFQg*WUxH34!`1C`j^|I(1HU%17 znXi0E)y@hIevsiRn?7eRi-ulF@A@*m%rE;Xrt$& zbL;c5ivaazZE*V5gM2H%op-NRhnKgX955U*E-yfg8U6X!-7guO=+AcADYpwu!%n9| z_s2UBduO~UP`atxFb8idVAxFqOxE3kI#t0$@Qb*XwB5W#Unu;DD<4u1fL@s_)j5a1 zxvJKTpmu=;da436`z!=2b+UE8)Q1-L|I+vBiD}I)YyRta! zqV&zRqsj9N&*~+O_cG~^BvZmnPEakq`Q4L+PSHRljYY3b=N|^uxn^+Xmi_9qaYTX@ zx3?b-diW79`=nKxuZPK~Mw$Zm=4M+HkVyS8x1pH-2foS&cn zL8CF`zYB^n`o4$OBwy&2{eIN7ds9=y!_$qO=Z$xSM9QvdK`#=>e?&$&Pu@?GWkLa@ zI*Ao=mewhDXE{#u`WK_G_JQbo8b;FiUr3RWWcwa8sTZsd=eZ$o&aZo9x1vncSSEH? z6g@s?93%q zM`ejwS8O=z-J9*tX-sSw-nDh7e;!|PbC}GP%`|z4;$m3XMSeU9h3+TV+1U+NQ|iy` zr7G#6LbwjZI|wq&pA6jOY#w~a547&`8pyeU?LCrfFaqx=_w;1~d6^LxnCp8*2=VR} zIpzF{H3bKt9JCL&HDwAk}_nuRH|BGp(iYUNwAT@&u-E$K1m}V;f=DB z_O5n+Wx#&B23&oo5Pxx>(o21#fB#;ew7l8r2pbIzEuLO2lFfK%zD~y3nakyDb!Wje zi&3EZ?{ET9-U0sKKcaJ|B0GIosV&h!i8hH*Sf4OvZZJG&F+i#yR~v+&yzBh(>{(M= zJ2)_qErEIfGK!0nHoNV@(Cppu5mtrqu%pz{5f7?^8O6g<$7?ItTnthswvS z0;i5KK6hC}+2NlRL*r+gh&gqPzLp(IT)6O~sJT0GJcD<4Gx}bZmJPPs-@O=r_gm6# zh4F(=?o+e%!Q%#+xR@_#->?t|1U*NFNziYjrRiEX0y;v>s~K(r z947lW$S8~lEK=-eFXa7&7QCcl=E`ML+Gx5NT9f)nq@jLCzixI=m=0+CF`{^(s_&#M z112vjTI>2KrO;bjCilr&F%mCWpLGI1W2#5dnSeh63Y-hJ`U%WmHYmrQ<)ufiqIhQa zgu>}gg99)`{()a4p6~RVf|;KbUuc_@r8ecDAWdj=EL!fDYG?&V#KGtFAho>Z1hU4l z=PqVRNZflK0iB^{8LR)s0tDf-!I1W+n$!`n{8@l+1LLLk3>q$ltwS%1#-=>fHd24P;$;)h4B|cog^$DxW8}h zhgcfDi5^v1`Ee)+rB;jl0_^xd<6!jm?uNz)1~L7dX-7u7nx%;tbu;%}K^1q*4+<8FX05?C+;ql<#3I&*>l2C<+bRUs= zi1*e9s}%v?K6&~$cCVH1Mn5I-2^YGO@a`)W{_nTN7A{m%fp;cnzf9!mqh4Albn!O7 zy{q}L>Ym!+R49d6BVTi>$46CJIrd`WA!}Za^8;=l!P9^#i2^aYFQXENt?dZ2l8`%H0j)e7huW;g1LnJ1% zk>U#XA5)YBGFUHg!*4;*hSEU^Q~-V0L~r8Z;pI(mL=p)mYjQeLjY+D|ZRev)D8N!6+p?s>ju?9^l%{ko1CatbrA&eiPtRy z!Xl!g6J{J{B8H@@FW#~=fgAX6E$lBL@u_$sd%_HfbCgAHYJbl3dlhS81m(0)cz*Il z^DM1DOLdjO+kyE@CSb*%KQk{uTUU`Ny3WD$-su#(wEdKzi#wt#DdkpxznfuyTX|&d```_2@$hkhHkj!giHakCvel- z`IY9=6^5RkNUq<-d0L1nfo~liCK)q)6XB-A+UTo_%72OX$Ss~e#on&U?nFR9riK}x z89eenzuan>6KaV42MSUoLh=PIT?HUSFQm;++Y2!&r%NkPv2s! zN_0P78T<&g%d6z?38Y##H)Gu_8gZ&Rl92IrOvdaY7KeYNBYh-oRilB_MGx737NILu zM`^;J^7T5mQW$e~Synh$0^tulRoN!<4-kp{Gsiyl7PpdgFi?w+;xTXHj#a5;3Mobs z4+keHJr=D?(ca!31hu(6(1&>^T&G#76iSrgLVK*x_;d{{4;R{aczE#Q7F(o} zH2yRn;JC~8xW9~N)SBHjed7*0??!hnIGZj}s_y?Khl4jz+M+NZZS3#L^8b*pIL-7C z{}Eb9q&-`woh_69-H@(uPBS-pLpi|JHNQ9b|1^4T$T#@!O8H}WYbmn+caB7Y!Hgxi znE#a}J!^@|;s5OnV-qM%C-I-j6hXRZq{JfsZ$tmPrPxr+e{%DGTEnb={QnIXRb9@` zpM2{hl+n&%#(~d~Dop02K^TVb11ZDj&;_ys*REsHpc^g3!+Y)R<7T=A{rmNV!*mCK z{4vnOnAm=1&6&dqGyEdGsHgN*U3`wJn_pLph60OL>wMK&w|&xi8#Bat8kQse1|K+k zN+*6{pXMbvg%@K2+Da$ZuWtl0ugJc^HOFR2EZX`-HaXjP*5CX$v3H|l1e=coWS>L? z3^bDNoupCd8$2KzTR6>jk}2hi{1e#<{J&B0<-mz5#Ma;Y$?*7i!pTz-9d7>Gtjg!V zF(Rg>J7pnX5^TPYvypy#G)7BJVJwd#lyxdee)|bcN?`V%#>COyXICQVigQ;Jv~jcw zQ4fkm&HqciYbtkZ*+V}3-cc)9-384U>K=T5&+#OsL{(=>1oe`7_Z8~;#V$zl@-5B> z5hMkQ$$v}uG3NP*PU7~kJKH=ggx{$2%j*Fd*>8>BM68mP0-MD)wd@u#2~wD^m>(iN z-qn9Bo{#n+;*8>H*i7=;q7kap6&pZ&!ow^W=7h9AzIvD~Ln^ktJQQD2yz&%7x}a&A z@)XvKx9a#%rE7gs`GuAyiq-?Vf;ZksJha=sukt44r|KadnoZdDu$|~WtXX{OOBE>G zLp(x}0%iLH%_q1vng0<6M+J@WZ1s1EHq#0fi65=shcuLaUazGIAI<0ep6=Ay^<9Wc9VLJZaX2QT{+(IBMOA7A{)00yZwW4~ z>fD0BY!vOq15m+2$ixPvv+<)ac8J5v58FDg9{MOuk5(&;h#UW0R+yL%346U^N%f&p zVZhmzvIP}ZS$+1BDiZj<79tZ(%_0Q!U?ewfV0b}h3BTR^S9`LlrIv? z%~ro5_c0+S*IHnYKi6T2e+5pXCsA_@IG59$$ZfZOwzO!RYUl>;sBJIK;Wssq^qLwj zD)l=me~;AacA=l!U4-muJ+L3H`I&3=Hi>wx)C8V$u0hLA11Fhz){+fA%!K#XrG;EQ zZGEN+=(S^N<#zB&|Nf}m@5*Zz6z`;3zAIO2;}cG}h(+M66wkId%S^q<^F1T9uyYNA zcp7P{V&_kb>Sqt%)OEw^a=}~EOn0CLH52nAHx#r4Y38S!hBO-P=R;g;Q|vK!TF$Nv z`Yhuur-4+97)jb&WE!fwyC4#k;Tt+mz^b77w`LzOpU;YR$(o*M=sk$5zJ zb{NIDP&mcb)l0Y25w3_T31$7pcU5Nep6dt92J3~c-IEXsy>SRL_@VuiJrP`S02QUgxY!QJ?Nx6k>_2+4|8+S)EMF^%w0% zHYy`dNhJa{`)m6*I@e1Lq-#Tb4YSFO{B98jvm;&{v7tPbK;p2qc-MGEy@<7u2!EOY zfJTVJy{RpS6!vCkFffU=cp_8ac4{8K?9Ne>=TWX8R-+o9vBk5eDMocD{K{x^)}w!@ z-u;e|5^Lv*e`22gPiObTIG;-nP_+3z`qbKZi%=aLOgX&8lmF#G*#Rig*b#$Le<@(7 zGK=TTklY>nLdXF?zfKYGtGuUZ^dM%9cubVLoVDE*-(fn-IBL1*^RK!9tNII2RWo~g zu!a0>axl8h?2h_;hGom(ApPP*&b}8|y;c0|@z^GLey59D8!ynW?tKg$nd(opOw}E6 zRC)1NB zd}6}x!7wYLCT%wAB7=bMMpAb7mv1C9c2xeKl`jQjKfLC>#;>Y(f;_N|o>B)!S0AS) z^$3#%qumH9(-Qfy`qOXii@&g^5vwLucVDZUpb*N3vo^^nMpYVay3@h*+&Y~0wuW}) zHNJQ%H*?pV(ci*d4>BKXi&q9^D0jw9c2U+KCA?)R^UvRa$)5yp<_tfevIvcZ@^drg zw%Ykx7WyBj@%!3M6xr`VmN)uxM$I5c^b$2=e|fhB3y(+Azy*YhBk8v;e>=UgktG_t zE!5Sxpa;2Tk#y8PkGJt#hL#|whdtcQaD?Sb1E8W1KId?23OMah&=;?s(3o~vnWvG##o2Sl(?OT6U4TZqKU3#>W2|MYTEa};S z{Koh$ZyVSU;kg!@Mbn#fN!teSwd~e;mX$0Bjf%k~2ZFldl}klJ@$L3qm}EmiN9)oM z-{~@s*mP4hY^FC8sp>NUe#c!KHyMr-H;>)ugW|j4UE6uHTt*USEBzA>;4}AGhU};l zh@{|1i22v?fU#Rk82+WtlU5_U*QwRR&gb;{z1d=K&p)DfbP{#(rI_$@mgsvuM&EoE z@2Rp)2E9(zD(W-z8JIxdGS-IIoQCjTFA{1CN9b zb5qjyzO5OAC{2VvZo1nbEU*5U&L!{Dt80;67|^Xq>}hiHmp=@%v~zkrUmxj|_-$o% z)JjzCt%}n7(HG{BMX^onsO*xD0|MgH=`*m@GbsmjmXcGhfC%?`v(H=VIDimP-+JwL zlv+hv17pu>^Zh&tmnvG15YH+(dSKhTAld>!#>kByK-+KbNv_m!$ ztfo%S?zB>Q?CAi5hwaruylX3sk$*@W#9~rh{87OqKt$Q0;;jJKTxB zD6$&qly(MpQ|}G)y_(Alc?SIv4?Ctvn`_J%TCMbG108i_g zie9OXy}k>~p0P+VZ>S}PdpbbaH>%N+woI4Mqri8CTgR;Ny>=mH_3jJAtYJC2Gc-k6 zPBte+s&wMzCqvt931rQFo61)_pu5$>Ok4XYzJjjRaKZaohYHwvi5h0{cfl-fx6y8U zWck1OEHK6)k10!oqY3C!Coa0AB1M@2Fs>emwNWUNrQkD5uhPh2qpeg5p zIo%tDg<`djkXymMaMs@v=@&cROhpWg_u5fd)E}=9cb4bqD$`41UMB054@3VN5-g21 zX28P^CM`nHxLRqSOb)joD{K@|OVtdxS&fPmNk@;#yl!p)i21!>W2W(nO@;LZGN~9X zDHeI}n2&@{9fObqh9bHrsT$07P=94RC8eunq+wGdUcebptU{!V^mq24o_ zOU;Wg_N$OIa#>j_6H@7cHy-ip$!f$1^6XE%^+`0Yo_zc% zl{21@;wG^=IIwf6CMH}vAT<_h27uOuXw1N%vIqq8F-qt1mF$zU5pUg= zBQDwh$PBZjHI*gFtn6WrMEgTNlX}PEc>4Ho>H@B@PB;iF7%HJR?7n8D>cix$=XM%; zO;N);d1d@_#t{R`bqaSK*0^j5yvIWrHrh)hQeR1s;q+2MP1u||P#y+(4Cg2anOM*J zskR28*5(sL@CHfvgu@ZoQyyuw(P$YzXRMUZw`VT=%_kjl;|9 znpdB=4f&qvQqfY2lpW1(YwT9PPC2DC$1zIf0JWO$JIa@rlAQm}D(^#2F$&63{aW66 z$^-yfq0Co4V$Kz8D?)uz{KHT6z4c#YEPtm;L3lP_@u*t*LdKih*5F$j&sd}zvu|iD z0wHY)lz-u&1#n2tIFsC;j6_W)4k?|oQ;fevG1Z_-*9o|m%$1qeDWp%(d&!8*(jblf zz5SM&#N<4x1YVu>pRKE^iVY_y6NK*Lz>-%Y8Rg-?QPRx3I5GINC|c+3-QI7R0B`_y(clV7TZtQHy9H^9^w~z{I~OY*KG- z;vIzawIeHlgYYZu2V0k-fJK%QvLngIjj0!eU2DF9`zwQaJ--J8T+ZSEwpaOi$V@Y& zvKesdPbk@;%i&slZiMV6GVaQXf#Vb&qH+F-fZll z79t((V!2O+D>BBTlGd_dx(B(=x-^^t7w+EAxk$G~lzXpy5jndtZLP2ew1{MC*-p%B ztRoVR)?{A-2J=i=&KkV_&S(|oZUvDa9Bv}^9HnIlS9{i5LAfBN8?oYbI%|LKsz z{M%}f|E69rb*in|+MBqZUO@P+AgLsz-~du{{X602=^SWKo$c=3QpdP%%7w0mzn%I- zSf54DgWcGI4SwWl`nfj4rlPg_0X1J=yn9bZQT~M5V)5s1Ct{K5YJ-P}+-7?8ykWN` z7m*Jf@8nGmY2k-IL$j(eln_36K3P+ewZ+iE;#(K3OeO83Edx8g<)ap?7Ig=;1NE2N zpD|K}XV?^!gvu?>^PLTkQ@#)8ba+BMzYImO9(S6bkItsTUOVwLc~k zN2E=S7e3$FY_B9dd}*MsWCr~_Pevp2Chio|iobVjDOWL<2e$aRI0dq^rnC-p9RWu#Bjg%YRV#msEn2A4r1MFBLy}58l|F9Fr8Z{pOeOYRp(gY^>GS z;CSJ6m2x9MaN*$qvJIzInHIY}#DN_)xtefp+MF*wsyPq=$92AQdAgP|+~8bTJa{)} z*q!8O+;7Q?LT~7D4X;#e5XpmsPlSW3PKe~J+J&UWGLQ6v?stH3(%!ZOG)r>JBley} z&Iz{^v+`#p-t01D4xSAT`5gfptAdZ-=I+~jT{)OfyEgd_le%1$xRUbTS#?OT12r%_hHUZBc*ZNbP!hWn7qcEbrB+G&jmkE z$1Dc`+@zk6=LS3sHI86TT6iWXi1WO+cack!NSJc3}p?snmJ z;7x00Ba?2k6!vNJs#U^c%y&A$P$hk^HZp0bntlS=&-_Xb@4qg}N~v6ocfjdYp-|kL z&+9ifU8eoGk2Wq)=aqeezc`}k*$P0dr2Uoi9ndJkGZ8^b%t zLRL-1&*5*h(B7~5`_P^b(r}oP)f+WAnjoNQO&N=b`%s=*_cjgAt&pL)Ivrbbo%T5y z^dX)rxDrZM;kJn8J8W%#YY2c}ohe0x?&uBp2vP2zM-p`UER91=Gv_^PjK+}MNmgcv zziY!=Yi-Cecp&`X*1)7;0k0);Zgp;=j z--Spd=X0$Ku^lo;|5~fTQ3hySAObA$%vZLgk*q#IQ{8@%N?$U=3ji9hBEk>P&=1H+ z>{t&x+|C7P=joP8N^YJkzRhK52dzH&4gjWb@j_%g$Z~*J=gzKZQ=>ydZ%Nvn#f@rY z>PJsGs&WHG{Q$2D3m!ZnLJETos#wMAezPN#!iwq_x1Mh&KJw#Vuz_o1Y*P{6cLOX{ z>Hk;_8y+VNwVb~T$OO`$f_s5Cf3bB`5{v%3O$pU{+vCUy7a`eAY`BddXsHV!81sAz;QVp>W zXp?w>A2SajuTEFoy4^9AHWLtgjvl*kn;|d?H;iTM;#$`D7JGSk{}iQHX`=m^tqbBCyB40G#0pl(QPjoP&%r!p_R}8^8F_MWJF0IULafJ!hfZeO z6zVeKj5i_=)&mkkVSOqdg)Qv3Ui7jbO~)-ak}q{ErEav3GlkN-$3$IMifB=%(ctBh zi(lAEZA(>=2{ZE~g*^=tX%QmShxy?j|2AmWabGKo^TBcMc2qw&YDTaV>|#pLIx?RG zG$zs-rjF|h=1+=`G}}=X|L|# z3A2C-YJ-!LsT9e?3lN;QSe43&5#SnpW+l+t#RJQ6%&@z)V{O<$aR^zakw#U@W7 zu-acr9~>Oj4<{H;nS=XntUYmSI?jLBAKrP+>zRvB)F60Ppxjnk;E%j@f6vdZ2Iobh z=y+zkj53$u`v0|~m#m+}6m}LVa(Go@+379mlhzyMqW-&*D`z^Zria5TTp{F_J>>62 z_PMvykb$cHIL__YQxBF0-h6au0QLJ&dpNvC_XWEk7FMORd3S%q z>Wxd!HE&l{6H6l3s7VgjDh)`2W&wphbh4P^j(05Ofv@VU<}x1cM}}SaDP5UPSME}Z z%|#E6@=z=uG?}L?V^w7R@aCI8t_u&7D&Z~U{wV>-7fGS1}W-*p>&Biu8Br z&#nQK+PS+Cj?J2F&)y6DJ2vW(7@yzH{bpToB>yBZt{kHtFVLsUl>vmuJprfM4wPj- zWMT+=$s4NZLJRZSfd-YUeiyYc+Pj!yZY81ND*j{)5dmH}!^&e!Su=h7`p3@G>$CkV z#nM~cE*8V1(IYYDV6wC1BFH4=6+z$Kv=Yd_WLjX2D*9kz-DU^OR( zIERzx9Gj3ocsBd)#Jw@!vcb0OwPh5gaO{n_+itZK6EGjm!nspy79Ac zsTF_F6nMjMZActBSIWK5i#-Drh)XxyP3=lti*U3HmZ|mec}c7 zG;18+HjvI@4W}3}&Vme+^=xyh^dvDhCZ;}E8Qus?njq;hkVqdDogfuTeD=`f*)nRu zl(j2wbZwwhBsL_`f;76XTkXDkJZ}S>hF*IhWpbxw`x5t+I+Aav$?s2yy=dntPEpw6 zt{}T{J6t>G-P=5Q^j(?hJEtobXK0R-yJE*!QX8C+$G~wKIRwApWS;dwo;uN@s9Ov* zAfjZ^yd?2JhGBBOY;f>C>XmD&Jo?s4S^1h3lP?LlZjL3e{yUY zUXg@04i;j_r@~98Z>+BiH{0*fC>4gw4jY-8I^3S>(5aN>b97?ge>bX>XPGE@Mfblh zHEA9S(x2~TT0I}R=n_Khxj@&OaBBqqPFzgPw+MVrVtfCaU`l0nV#5+4_A{*$e~gA^ zHz*bSo|z)6g&HoQ&+}VBBwl~%J&WWrKFY?$#dZJVJO&0jIycTHNfd%(;WUU(ULLu; z;PsceCq9Crx#hO0J8%AeT)S*-4bF(ZJ`Cu$PFkXj>3BgZ?*EIfw~mUdS^97T1Oma` zEfCz@3GNUexVyVM1b26LcNyH>-QC???Q_%!w*q?u zuEJ_v8|(4c9lWONELhLizbSWF{?j518-wosWMj+s&SejDb5SqwO4frahwcmew^#kG zAs|-7W#1gXqZ~8u@1(gfS(Shlc#Dm*))q8*boFc#_=^b_O>{tno38Ai4F30CAVS20 zcmhcVNMUW3*#m@i&w%|>W=#%1VX6Ao#13*2ij{-FAEX=WlH7P{)2rfA3s>a4?uAzC zdx}%~4+Ic2kTix$bX-WextPUU>UnOp0r5-bs<8Re{!do5UG+Tu(jO1NI;As;7)1E(MLZtFi4BU_Z5)C^QFaO@_)a^x4P8?_gE=Y;6KeEF@;QuWp$>7<=O=u+s0bcsQu*J3wIxp^on40lo72!Z6{({Wu zc-?1@K0i-Sz7Z^D9O>SgPc)Jby>u=k#4-)`nZn(I7hFdzG7{Q3P8Fyzjo`+I0%ibr zFvI2p;sz!hX~9ikVR{z71GL&kf9KD6|D{K`2qSg`1o=UsW}3m&l9;&hf{dQ?sKxyQ zZ89(~g8M6I5PPt@ul&oxzgz?tRM4&!e%~!YIpU%A@$-WWVD+Pp{fbE{xPd!xnOF!2 zdk~bDTq}$wi2t^Y82eu|#F?Mz)+8L;+exh%EUi(rrae_W!)5f zG}~+}K`g`B74CY1uDSDqY*I2hRW z#&Zh7cJdCHGu~p1`jc>NZt#u&KDx>_*nm6G1oiXEMboXVeyL}Q+cJ}5bZb{ay(L|E zpF67z40X2Nc=eunwUnaxT%D&odV|LL$r0-)`Qa1U$xjf6`e!EdrL=?6xRI7MHvqfC zBf)@-){Y|ZtvDqm%+3`$5-Ge|;FJ=7=5fy8s`1%Ol>Y!A3WFEX$|}q^9!t&V5I2(Z zhpjhuSrEfmB{b~Ve$yV-;q1>YhBVLhsMc-43hIUWqG)<|%|@0C@8Ixe#c&QWD^6(y+nLWsJMz6`TI=D4}C3u(adssf(C}Hez=; zOQ@C;6ietTkK4gnYzI3tn6dx#&ehdUy~1YAC8R|TY8^SMMvlWl}El7JzVe-NtkPl`llIdQKio zMKo$!`_Y_x!NJJAj`2l}K8F;O7!TMuvZw z$~Qs!STrCMB}?qYR!0|-?#Xzl*q3mdoM*1w8GzRgV^NS9=MdEw+rt)YQ?4g8XR-oIy*%c;oCmp~WHu2eO!cLuGNe($@;ND_3p z>Js8n{9(I-UjIOUunZpK;@`;)DJ~|0NKpxHKo=@L^@kw-v7r26(7?D`haOqPQv&Ie zkyw+V>e^YlnTpN)<&dw_{)DdcNeMAEc9$D;L===h-r`W?!L#gy_}E~2Uak5xt4gu* z1T1|1{%^MfxLEtCpX720h3VYJ>$gJ3yt%(ed7GS{nJ`f$Pi#!*d;zM-JR1@nqf>sL zBQ)d{J$bp)fBmEow!}TCTWX$zRh>GIKd_N}3&-E_+Pl`+^rSG7P7~bORUHID`)ky5 zcEyyi2>q(!eX-y>BI+2WokMEC;R?2bLXEz(uEAz1a2X`LPtx*g8&l<6V|QN8*V}YP z8~R*K%Ug&#M18!ut_(L@UB392lAW<+boI4mc&bOb5odB3oj%LAJKDLorjW;f`&1&% z#%dm7HusuKbD*3`;!u)I5=X8_K~+&;Gji$m#Yofqg-c=B=Qz2)bz8BgQFOi>TYcOM z`JZJc4(l(eWgZ74u7aZ}mkg3Nr!wZjnL-A|xqG6^Wy|QpkaN!YPtXFIIL1kmpC{{p z(mm|%@noDZt#7v7SzjqSy;(v|qxJ8b=Pse)`LfVzbXd|R*S^WIJxna7it(m4H8w}` z__CMbPsNr}+$M@j@iMc?uP#?ifiham(#7hvG|aI0=NqIQ(oCqhqaks1oU0I~2eFEO z%tzm-+c&6bc%h(g(SM9ISrARkj}JNzB@EhFl~>yzA@aE$y52Pk?>VI+<0c%yecYW&*t+qNDa;P zi_AgMjV<>tuZ-=&Sfy(m*gp?5aAoKG3n+3bJRC-TTxveDknJioyP}@B-Rx)mcz=>} zs4adN9JiXB>s}SxF0-*lM9*;RD)SoGa-wgyCVBgYK3z`b#T$#mhh{VK}|Me z*x_Vrs)}%KtOa_`E+^m~=HMK3mGn*@G*y}e#YW^GtdY!xp&!UlE*`l~W3@kDQggru zZ!0Tq9bKe_8!Z+39?qC?R3}`V)cYJ4uYx77KE8n}-G%?KZOcI?pj8c0Jj~uczIw9&$a#z-VREJ}Yc=!2iBo2-OYU;qL~J{i>A~`^aYl{5zDm%v z)E{Rchv1w~&;*!nS4G-sK%gJVEO_2xKgUTKc$G?|Li@QcnLB4Xb-p%!d|7Qj%Zf52 zxzyRwAvIfADy32D$!2o24_3BLvR0-PT3YMEnhKpp2TP-SAEMb-B9p2hJ-gea6xSsy z%iRM#vA~d;$R}K4LSLxJ?R-)W0RFt+o}LShxSD!^*hH!gbzGlN%P))5HWbRQ1h5t3 z#xd9qaU_WVGB^yhx1TdZPA zZCB(A?(;R~)Wlf5`)nA4vV>22*1tGsCTHSR`%S#8IlnuVh{LLGueH%ywcepw-Fe|| zD8{optTSns?$k0%fi?W=Hix|Nx;@}+{Bq&7ex0F=qyt=uXz0{Zy9j9U(wmyfKwa>6GB2$u;axt8lK>Rc+OS*6Q^AtZKI7OV9 z+VcLx0DBY5QJa`r`^7>j?Q*PL#(`Ug9pM4{#sSXJ9}`Tcspjw{@@>b0r$Qco*5;Wk zbGf|ry1*(!mdKqOdAx(C6Kr0}{jyKCK6VGi0YB~r0P88Eg3BC+_$f@-ty(K^h&LmD zH$69PALSyRYlN3;2`5JFn9>Q42bf;>k!gQvYmJIJDZ`0=oN%!V+ta;u$N_VvFqkb{+xa4@NTs zWwfdj&pFmNqzpI9$<7e{#zxr5Pxh!QDc%JSF4qn0T$t)TQo`+9F0oQ;BD2qUG~KuQ z{1^hN$HYAEw!DQt{a~EcZHHhv=UN)qaGI=3@zeXykA;)r270&Jvj3MSC=mlT_)PI8W(& zw3bkh8Nk0`xSajjVn#bWBcz+0EbDjNCca0?JMx|q-+?w6N3r5y5R6(r)IS5P_g7w zO~AxS&U+g>_;eYi-wI8mzuMdhdrg4RT|P_kF7Sc)9A2) zfWX7BeUrKlZ)v7i+rz^YZN-Isa(Q_<6EpLcV+$suq2vQ7GQZ$lG?9p?s3-vqO+->s zk~HZ&BLMkJAN7y-S_re;m%YiB>@1%4JP2Fn?iWfHlbLT_@{nWH@LC{kVBZ#FjR z5*nr!7Wqw0$pHZnB$7#!1BhP`mUA><%2+B3I4| z^7H+H|BZyik!nNXcUTPkJ0>P3C^GUO>WbsyHu&V@?5)j6z$D;3$*m%EXD+pX&R`g& zKyoN+(cyQxS4-te`ZwTO^Ly?}wtSi#R8I`*&H69i9@KSmD|;M~aqi4R*qkkbOQiL- z_HDW}^PmDS3v~nCq;s2E_PW-t2`L3MfVwzJ?l*4k7j7FnZW}KoO7_=R1b>_Y3@WUm za^PO(SAAHYrn^*??1|n+Z4hWQs?BqBClMx!g_OQSCG+z;Th_`+Wc5=YueXGY_j@gz z!@Fg_!y!iDS#w0Sab&U~!r1CpeTd9A>e%o$)bxKMcmA|3#|~?J_%q`zQD2(gLObPV zOUzm#JOzEJ*7m576V42oAmD-513{!}#GGVmyGk+C|AGJ84422eHYXA*b*=<($5cd~ zYA&w(nLh?XLRqh7zQ547IYTv=Y5AwZ*UmIV$}@WQ>vg=7kULn_9A}7B;hGe%pPNx> zIH1=qjS}%vZjbe|(KPPCmnAvHB%XUkF}KKc@1`nWy_nOmH3RkYvfaCcYDsK2q;cpl z?VGRMm9~t5xRsYj>>E4x5*vH?mFL^DWi3xPYqd|iO)KOjk1;)34Rj~xymk+#va@l# zlJD{>#=#3!o6)>I0W7Qx#mq2+++pm}tu$ z@<0JEcMrBh8}h%>2tTA(s&dmNZiYSuG&H{9JG`xm(L1(Tg?qSN;yW!P@_N58^-lXc zddA06VVO#6n9{}@Nn%@jnoPKv^O4$4k=vdUm8&Oq@y^HaeC7H`GiN0+$l}NJgbM2! z&3ok~gCkFycgL^M9f*Y( z!Sm7{y;Ye;lR&O^#t*i|q}bk_kvpQL|Fh}ikf=+*#8NkVzSF8C0a$y+*kSp*F|EWW zCdrI<%=kc!#`W}GrJA^mARGA^_LKO?t?ZSiqpb~H^`wZSj22*-3rDzjBm5;)adLU| zcHF8}gJp@V8VkW0QnOF!Jt75H@zDKz{0#C19@1+*Gw!#-gr%CxJ;4bAIFT*UJNRch zFU$*<#*>V*G*g>X&s`p?J*T}pf1f|@<7 zcR!H6h9_!PDiwP6XSa18IoY&l_Q&nsBspGrzQ07HDjzPYPuH1V`sc0%WUvSB*$_2 z*RkTXPQ?OJGFX$3t`hB5J}7J|)E?w-`A)tGx;3ZKU(an&Z`aH#2CQodV|E4uoDbdL z<)C2FAIPwwJI1p=;{P{1ZW-B3bPiiGji*{(ddPQhwR&G3eZ>x> zv)%Qldc3nra@vV>b~*YMW>#o7^jTY1NjH5Q)h_h0=T&X-v7U*90g-8A?|kLlXvryz zi)R}Y4UK11MZ@B^-%^t29ZAQtPxPEXKLgc`2vue)y|#v*v5cg+cu31lZDf!2fJ`zo zB0)xIt)U0sfPNjp16;HkY~81%n^N3ill{DhoZS+!)nySpPMAwfb%Unn+E zRZ}yuv@8IgV-AH(a%*GP9+$H zK)dZ>;IdY_vJ?r#d3L2hA)}7Na#d29pdoV_BKyQ5)v+U#-S|1bn6iB|C#~aJ=lYkw zUT0463A`5f48|xMj$xGw-5gCGu}G<;ld8aY#Ta=u@$aoWlGHUJ&0=4ia%3|h1N1~k zUFP!dO}$~+J1JF3rYg!Yz71~K!m>*9@-X@kwP1Ubtg8E?gt0XhjVA6 zebKNJDrnB@bX8L&gPV{=1TS6cI-r$V!3;&bc#hv5x_sOtfcq@z7jd{t^41%^c*CnZeXOOyINHK&B(`t7^~ z0IYnBP)eRzQ}V6mjkokJ4!u3%=Wo56bzHbbv|;swm17n7 z`t;umjASV+XQs8EEhP->ROnR7*InKi!@4amyiI(ZmfsjLKo=NC8<4rtb-nJ++`3jq zv<`3hSI%~o0zTReYqe{X>5klAOD7mM>c)k{_S z=&}k4__~?U6cZ+WaazI(vW`Do>iGtgS2*}Byb-Fw^&cFfmJs(>r{9}hB3e2}5w#Mu zi*7`dk_2#9&dR)gB*b{_OH96Jo%-?}EFwvCazLaJ{T=ns1i+4!R|Lt2!%@XXTT?Y> z_f+{jE>6MZ&nC{lreiOslAS#%yUp5xDsMxP4+lKsHgk-h$DeJsC2rWi9;_Cm$TnK_ zxHDU!{m|8Oz_3f#mxa}8tfgu$dc2ZZ2 zhCoHnRwA>kc*aPq*jBIUS5;nG;6(ACeOw!}S9DF8_L(>21I!CYu!Eo2YT-(kf|t&C ze}o$r&h4V7Vp%SREBKFCai4mg9n_^14LNN7r0CXl&>fV;DhD;dOcfeXRf99E{cwe- zQ3+XTC~b;Uol!L(`kAIG9?S<-QzELu$|zk{u&2x@KDdN!=%zOiuN2bLa($*T_gG#y z_Pcnj;bg+8^-Dy2b4qN_trVml&KZdAU>|sl%+hYvm0c2P+Z5wSn?S=5pBJk0(bzYXU1!3WJCNA zX#1$O^AHfewloveQvvLekM;aPZ#lIVI3#?CmmBz&mrpCah?6T3sgli}`z)%#Ue^7@Wr<7B8yRjPPZ1&nA z?OBQWDn(fuKjjDi2u;dN1<_I2xT04|u7g9GaRebvzm%OBRnJ69=OH2enpVDaR9JKd z-F^xBF?n9W7mtFmY=U~WQCt~ncJN}9mkst+HLzq%5Om~mRdnIDi;-$Rt6qgtO_V~T zm~3!sxf3}CZhH>g=2wOdE|BWuIp_lE@e6bT1=$AI2Zl@rC2DCSY8oq-Y(M1=I1IZv z=*+lZ1HT6F|HA^r6|72xrzB_391YS?Z=kF7g40Js`gqD^Bncray(cX+9Ba{|q0h=D0 zefEyi8rfjbnWiS-m;{r6Fjddpe?MQOg2iFqY#uUf3dwc*Am@AWcvq47!9J8VfZ^x` z?_qi5yyjkqncR5FQlBdUEZ*eOi!6WXIkmxVjxe=OG1x z1+G`9|H#YZ7c%HXcd@7mU}(|$TGs|6WqYZlO+A!ie=Uy7hBGYlvh&cw(!ru4;Hp{d zq$wf>r)t5F!r=B&eB5=iU;vzf*yQ$)+c51%fI8F!xh}8*r~KdcB)j3BL%6>57BinBYSF znkG-zfq%nGb%MSWX1hjLK%1n%iU2RBlq+8Tx?Ub|rF*Lw#dr0BTNmjmBDAo)xW~B(<EdQlwoTnvtYxQN_=OGh(1&OTft0GBv3TD+6i}MTp z<0b9o6=jtbg)XiHRwmWk7Ca8OEunL3Ab^gVBg+(sB2GcFyi=K7T ztwT;k6$QfQfKcYpyTgkO1UiSC5TpW>mFkrJ=jdtFl6F6$&Ls)W1hkMB z^1B(wLtC>%Lj^GQ3KkGE`w{WJ&Xwgm`4z|$ft!%HXgjtVDuLFvJ zJa?h42!m&m7B{_E7&fwqfQMeBQZ+Y2TtOvUc~VVi9BoxUe@C3vPr0sIayg#7$!zdC z6#bOJc~p?73?*@~h-Cg2xOBJ;V39Xd*nM?_v}Oi$m;5s=0tXXM-(+=(pD^qYqyCQe z8NvPhIEG-D$uu<%9AWin~9DrOzVUuwvYx% zE-;THkzdf$!RuQZZq6?(6fk^ryrd!c)Zf(4>VhsP9O9ygQBwmleS5k?EBR!fw z5U+(Mlfmk#%l~-lux3hOS5_72c~GgwRC0Z%$IkOA)hF$@q~!7Yg-WEiog8rD5(d({ zCcxWR9$BxUK_o;&H*fzEx8u@rvc`j|*RpR2x3i6Rl!tSk7QnlF2c4*9R|RvmM=?r( zTMYCKr`v|J8}knUzn@VUuQ0&YM{*BKj(d;ei^K3XL32C;5JX0_GneRC-3W z-1@ukg=U|;0)3-3g1f+g>TAmBG9dIQR$z34s6_?9ovg68 zCwXE#U%s-{ZaZw$b?!j9M6X8<&7octd8RoqjLWEub@#(nW@ZbSP8U=l0)O*|Jd&O; zY+!7liKY3rpgB(Nct+qA7IX|f3z8yjO{VPVkig+xL&C~IOvCZAx) z$?`4B@f`j?Ivno08ED+cO=@bYiLtSEw;z-TPWE9;Gkn)w&NQLz=Gr>t1Gd+12`hQe zjm43jNs*&CxELs5jHmc@YBl?nt)4(k27Sot>gx1&=}A5|K>%W@cTP@6wFGP<3mwQQyxsiQ*+5t(&X<1ksikTa( z&oaECz{{-m(T z7kQdiG1qV*UGWKDm3)GIX)_pat4zzU1wHXfHha{+GgUWMZaua^lUx}dF59S)g$hxK zl-V|z*s#0Ebw6q3482db$C+E zaO%8b!`2T>tDjz{Tl6*3^dVRP#~i1xx3>8~qy7IY2u;jp0*a8m+6J{*GY0a}Ds%*# zLcIhw`sn7geg{VUS3=sXz{o^Yi}To9!?36oX1x`I=LweyH_Y+ZHcSi?MF(2L3IPZ9RP%wXo|Q5) zv9yh_Yk?dz>c_Og z%+{qEQ|qhCi$QO=q5dfp+%xabyeEvnhyglV^Nsb*IAC83rgTvqo$?0_(k0CSkf0F3 z70fm}WGE*-V^T$2d|qf9p4i3j+{N!siU$sKgD03v!(#_$;?|7o&RI~sd1Z@ssyUEO3AlcQec4LE zJf2K38Eu5><#U5hoz^WNgJv(n6Z<+ebQ2l?J2GzQ7nvyBZ(^i<|Zp+p0jR-obzR{M!W%KuHn zGN}k71)*mO87fT5bZ;|TJ`9r?Ng8)s)C>t3N!pr?Bs<+4aTA5^jtcUrsK5||7km|$ z+mksU&t}Kub(?NLSXx^j28Y)@rm@;6b{0UJA076Os5lkssJca)*i%~2HAjwQzF~Jc zPvv}q^;pKXJQc(zbB2TYLUG`fFaOynd-jXqQ9>}3L#2#TeU}b zLe0eXL0c6qhczD{nc6!mb6<=7xEqdZ3Nc{m*a{N6?BX}jG?aPSom+2x&SXg3GqSQZ ztWxE$2Tfcl$0*Dn@hN4*!xTc)BqRrW0WG05+!N?+$%1$@|krp4Agz{Fpi+&n)IP5|alOoilk<)U_5jxNX zj^AROh2c#07Ja~Q*e=0EQg<-Xe5NjA{uNhT&wUTH2gKQKJ?n^q%ZSwCGgIQNHF+e5 zBOC>FCqwiW4@)uTr_5^;tCufi#&YHsePj8ULX|BZ-n(+L223?faQ8Ax4uRW_U^s^v>d`z#DBTR3vI8Y|t=W*jdLV!x~CgRF-ken+S={bT7o%qQe{ zGu`m_ls(&L3;)mb({ytvB&TuzQ2crr@32@ z5LMz9O1|1Ml4`a4Ju;Dwjh;V_G5t`d>ir&}GkQr9fp@+Fm~tNMQSwIs3*d5B2x5%n za(DRT{DGM-kaym5*f*I7uXR>Juhiq>)YFU2k)dS2l6-qP=R z+ROMV!g%ycb^yNSqcOE{QBhS_gwEtOD5LCWAznKL=08P{a!wr4del06X-ji)#Xf9z zrJNsD=+3d}&O9+*>WxK+{SY(|1XiQA!jAh>ZS)vC2O+&n@$`)?Cj)tp`T2-Q=!%Uz z2sKD>|NXQZ>C?akPbmC1=H=*HD~At7&+!&$CVvE?$b00Rj?{)t8w0ioww*!D=FBP; zdu8)B<*b>I;!^NsszZJny&m0~?bG;94np-)ot+aMjc9eidrskrM?r%cD_c1UFn~o% zg$*6&rv+A76|AXv?^{@(ipWbfN0Xdy5J{LZ{mQNp6ttoO(}ylmD5~WC4B6^Jh~vz@ z91WBPAq5zOpP_u0e6rIgfI^j7tOOl^Rer*^QzuB^ zLsTr{e$)a$WA~3jlY_I-)(-ZfWYAZ~l8jUfLZ^K`(%ei?a}bktk0)5i{{1?|3Q;5G z`!pkIN&FUbtQX{RAmLUSunPryZzm3nArVCxggLtGzQ`5MJe@BtQLUQ{r;Cv)#$E%) z-ALC0gwjbL;R?pKlP$ZCe;pgkM?7P)KraaaBkPk^OysVSQXk#x-lhhU*^oyD`qx@o zE+;bX%)lb}tZ8|pBy+gfzMNUBn(f{p(-Btbrra3r$uV^Zm@SMzw9A z)4SCdU)SqvNBD9>?O2SItODi}2eM+}44}N*qQ~1Dq=V(2vz@Bp=K(Qx!s)k?;p@4# z;f@MAdd~7Bs`-WimC5H9D}fJ}?t~*=tIH_arkXRG9ShFyaHU4<9m@Ri zd#PyKX=s;Taav{X2S}mejuU(u?_RPnqQLQUyXS_ES0WQI2kOwb*xaWWn8QKD9|GufuRo^4qTuu>8y&Ff5Fe>O5!in+O@j^ z**z^(Ps8Xkg>!;7ro|j>emE9CEOz6HMo>(PitK-PNt$SK^z(m#s|7Jf>)5j^Rw?zA z)zIWCz>?=H2`yovj0x*kDD8(AJ{9Mxk4oM`7qs^Hq#!hV2n^Emcbh^4+`9rOlqkUA zzT_vP>eB{-emMNZia`oQ(#kIQEiO~Y50n&-Z;@p5;uL=PEbj}M3BW)VyRemSZKF!iZd1~uTO#hK&_Ys z#euWi)UZhPcc1kb+{%h_-w=|G51j=yaAPYUDIWX<=x7i4HW2_f*FM?RaC2tmFHGcr z+-^qaHctwlxKMKL%uBf%NBXmu35}Bq{HsZ zT~CLjK;Rze0CYIH1`?MLj??rz)l)>8tEiD= z|EQ!fszr%CW-qWcgXBT!IkVeZUa9)I7Rkr{w6~w-psJ!7eYDmN>?x`X>mqT?LtKjp zkUiu!0JXj2M$?cyHAF3|=7meIAz=&2!b(K@jD^U66ecQ4(SU38G>qv47}PH`s@#W5 zOc$XsMw@2!U)I29_J2mH;#e1!%^L__w4wbG$BG=f*Hf}0f>`E?offZ0ib|GN_U(+y zC7SFmf`=4BW7}qRfE)ePr0IRclj*QNcBleu;RtFPvr?7#^H35N(J` zDJwf|7&PmAp~Vcmy|WbCjw1X%RM7mtwx6;ZO6tlBWw zdOXtl3W|^#j{`od){^`Crl>kh{pM3~5~=EgN!Zo)WjJV%OWwjSftBu2F)8P78mVPh zedlA{g9Sz6?5yB`T#1+&(J@92+?QFDs+8lP^x_M7;-^(zw|J+2>UbWHvK2A1A|HIT$k65nv|kF zo(uKrEFcF)@w}V=t38fxWE#75>A?gjP)Bywk@wS5qO`v2aC)$_z zeY330IF%k0;}(lzepze|I}RG;Mb%VJz+UneB(<+%-NkWJgE^nxl{EH8Y8VOkgxi-z zr@*?ihGR!m_9krraPgC+jRIZ4HTsU47X#{DY1gfCaxD0WHSEp_!{UaSvfH3WqWxi` zD3@({7D&j<-f?v*%HnHbaX5r zA2|fl>;2Zvy3=F%PfSMJ$5l2OV6_TJ!NelDB}McHP71%P#Ga3FK@JkjJ9uQyN z|1zEpea|{Oxuxx0S=!A*4zwg?tFBO}ox;gqkEq&oJdKX~#jH0t11#WPNE$0?WyPot z-0+oe80PHDFK=iC(4%yJak~A`y(lXQ@@`Ar@;BSs^vcB@+I&!fGJm0{OZ)qf+6bR? z_b8FZz8x}BwK zjv0L#Bqx}O3$GYtj^&z+D*^gG0^U zgk`_P5#nv1OMeSq&KF72fq@3P3?rujTp7kJ457;^3oQ;+n9-L^CxKPSjc>`EP#C53 zDZ{hNB!oHr>qflUm6~EJ(1cCI;M{xx3XvF-xw&k$zdR6f68@-HrY*iep-W{bO(jXB zx|w=rW`?jfH)jlG*|)(gsAXn3O`VCu;X{m7_ZO@E;Qd+Dv-#H_O8dcD@JkujGhz>) zEhj1O6oJB6%qe>0$2$ygeKVxCk7Akm@Ly)N;{b$n&~V(c^j1Z+>fX8UY}|wJXU4{r z1)1A(5cx;=w=eaaDW$iHN;#qC&g{J;%z-XX8gP`8)XdrN_45Z#Z(&)}9F0DcCx1!E zvMco35MA`B;D+En3>msj1N+@T`$uiew=>ewtahc!pGg(~=&8mGDV|(YG8(U7K;zoK z*p~uRCv&@Nio?%&+RO%}0`*}i9H7`@sW3|!AB^sNIy7}JCaxWw?I`& z0h5R5+rgq+l>w6bo)E@ExUmS4AA(WdUkU5LFny%TjmBL;?eS4V^GI==m@wcf&S+otY~oc})vtxCT(XwXiVnL6cEy z8`fc(Vw?Z~zoFJR5lEJ`w`cVB3T|(21AziFGs-{O850woPPZRVgf+s_mB`*0BiIz{ z`{%^4`GaUojg1M&$%7vso#8MmZ=^FD*B=N@E7~dm_5L%TMh)idHnv0E zDs}_0xsC{At^(;<7ZIxpG z?jOW)33hvL^6S{(L0>=CO$kDHOYaKH1@xoB2CxY}z{Xh^)6L9u8NK;*ogUT``tZYu z?`;Iaf9aXx5p{ngGUkCfSi?O7)^*+vn`#40hl%ABkBb$F1fH%ulUE;TPSqCu(!OkkL2$?o_p^%d<7Vgp4-v^ zUFat{xWEK6jH`xQzo_{)q5x1>>?V)sgv5D^LIx-3kJn8CNsMmv{6Y-JXFHz7FLZIh z&u{t5NCdUl+|Um9D1IqfWW(Tq3kdVc*3%hO#&B!DxUrL(bO%+9=sDtGtH+kckI-!8 zzS~IE>F3p1b->~3T_kDt^ zD_p5er=OY^Sf-z7v#ip_Z9R7NY2V>>t5W8YSI;oo@m9!_Wayum@vW!u3_ew%Urja8$M3)le}J;!U42f)4emT>DM#> z+QrGW$Cr+o%$oJ^+AF*vTM_b5UI?-d-+4cDX5p_!qM#5sXnPSra*JNfd0K|H%h zI9DG~g)17Du$-A&fwh(29-eew8_Uvu$0-fAnX&*9;j-#_X*kD#=V8NIX}lr$v%7Xk zBYG1vsXSaBv<&F90X`em@uTqH!mX%MFi3#WF2WjqCGS7}EGL(pQ!_KrTw4Pgz8aIc#f*lmSPGsl9Vl%iH!OTaSEXE@WY6(O)KE)Bs!pL=Y~4Eq9jS5|p3SaZoPD|> zFQxdVmOfy3HFu!4&d5uKeyUiOuz9qVS5rk08?rYab%sRIf0{!vd>vooam7}h^6I6u zFmq%U$zowp{aI3;Qn2u*UY2aDLE?u7FkCm2k5!c&bhJ~YcUhqz^9)5T9qI`CxzZ!X0dwnS>=tM^Ln8QF}nh@-4WBB z(*8AH$^M4uguJid?K7rwwMsZ_IHnB&U1jeYKqw{x_74q%F>^!a@Y%qAk!n}IX#4^g z(rSrFDj+hu%CPtO;KJ)H=M&U^tBU0-??Kn2VK%eSrjt)ejHsUU=`knxj%s=jIxcR? zgk?&R-l=KIfPwI~FbVa960Qs41O9uoa~B{T4lRFm5vd_V%?WyV%TvDP{JIB({%gS0w5R|e{eF#=aHaXf8a+_5*tH$n7v*%W0r;pPG(GH+Ar#<5*k> z2_ayC48?ESV;&>@>BG+8FT9&~DLXzh@;M4LS9O`2*~#JjF^A|AV7EyFNqIL^n2 z2h4kG%J-2lZ6^{U&MNwZp`dlz${!MPx8K3kYSaxGgK|_tvfG!eIo_PZyA>Db zn9Z7Jf+hflepIWR9&%$6;o94O?lOmsD)^+#VZgz$>!HU za1W$6fI8&;T|AP5EK?=VyouFWsgA}Ub`7;7lWKK ziX(*EeaRq<)`%^I0ZNWW&W9ml)IVu%EfO{fX<1HbIwZf$jt1#Y2)S`o=+>v50&B^< za==g|xG_?Z!SE6brpo^?6l&P0WvwHY7i<7pO#qHocRfg3{{t2DhCZYJuG>N(TYcSI zVD>T5)*1D zEH@prxX{T5K5DjRvknfr^`D($>Hr!rNzk$kVq60GvxNLh?^l6ltQK%hSTZl@JI7gi z6xJ<|4E!~e3@R9PxN>qD>y06t6pKJDBaxJcQ?!3D`5^tlMALxSUCT>R<2+3(y=lRmj*AC+}^PJ*U2%j1(1F-b{c8k!3Ekvd=l zfSX+e1i+9Po zClrUn=NXM66yUh~*>}EJV<3^ZpUDZphlfSxcgAge$6ntct@r>uI1OPOeLdrO$Hpo2X*-}xXri+ZNZz5gu|;@6R=DLTbpU;0q^l`7ZEehnyQfg)tJut|LM^mQ z-{e?PQLKTb<60$|iw*uM4KuN}3$Y5^HBT{qNDythM87m3hTDa+rR;~`+q)9kMOrCb z`7UAU+vF9Z`4(+|{-ATpEPg-OMFy+(ocGh^UW|#;STGUTb*tx|iH)?qS=*UX^RkA? zK&W`m8Em9Xp3G}>R4Nj7i!xD?1d6Tx!o!h1c6EbiX!Qn(gG%_1C!VvA&I4lg&f$8e zrSQpB;`TT)Ag|c^iSqIsu+=#-6}2qrUn<>>%i&W6n0O}F6i8;xY9^6B<2SNz9DL( z6IXKqqQt*Ho9BWCIro0ez)swBKc}7AnE&Y&K^f5Mebuxvc^{P=%oHJNHUogk-`}d8 zbn3q{!4PX62-q)4SMG2Xu3$BBMRIN4eE2!E<2G^qMf!#GFX9u>MYemMx%)}5*n7JY zUu~}qBbkmU*F@=ks$*TVF-+2t*!O4(LDlQC8}V8rTFdUc6+Af4iIj)g1+=1`6b;Tb zU8w)pI!PD($zMPYm@yYBn4#jw(A1svnKSG@KHcAD3#I4NMjSq30??qpbajJA4No^V z>)XeHFhf%>P9Z)IvbrvjHTE`=y{bY%T?W7psN%Q33+E)PmLgW$5MYxjaf}dATUzuZrgIi64qoPexHg~QWT27XkK30tWBOoFHk%Vp4g%)D6#x0 zqx#&;ynk>NmXbomyqLhML3M+oj`lvn*=owxsE zR#ch8x0F|54t9!ar*lpGrDuSY?-TQBF(}cLu>4Vi>>PlL8VR zcbQ*hocEd!7XU>&OV*v<{}7&5Y)Vjd<}9usuk+jmYW-OqIZVhHzv8^ zNos7$pP!h7cE$84Ogv=xLe-M?ZqXSsU(r77F(08M5O5Sh^1G%bXI`8gWTbRg#ZYvk zllnvLyHVLYg(sC8h6a^~5@IhAv6jI{vjXjK+TZ^B1@WLYJ-z_PGNqKmPVuBTn^JQu zbCAAA<;1^@^j|r}GFMl9e8?=4QH!}Sg16m#GsCfG9uT;ZiTT{} z)cJ`@SLe4~&hGimOQ%FZv--N^15`ir>K?-w*KobXLSqfNz>1li_gTj10JsZRF(QBB zXnc}|cjRppz|?xo@7{XHynv0p&32Dbgn~fjKDUBw5+Hgh(x=ymW<6SmgSK&&kovBy zTz`aBcJo}IX%RAr!00TRQkpe-o?=~-kR^FO-y^10H?Hf`-}&MJAPlQ{d$gTeQjQ0LW0-%#cX<}1+yH(xdy zzr0K41_@3!Tn3nFvAH{dKS2TPPM^<3Oj>{*^AJwIG`pM3xS2q-^+Aqhg#ZrVYA^f- zK(&%bt(|G(Iz&#nkc?y|kH?@l|2<7Z5V?tnu-Ke|y2o(2HLhO|AyFq)V|g42^U}H6 z->pP;(#>dLw;r2(*E3zx89d3V|K$;#l|IyOBK|TnFmJ>SYY(z|F`XLWY@( zGZx$AH_ebni!qLKccwsC)NTx-aRK1$d46_7K}8J?4LzA<`s|ivXP=pz?DU65edg$< zbo)iaLU8orMmPM|hHv5FE|p3HSAV3*mg~zBpUD`+T7G*41PB}EJzL&E(htuz0{4G)i|Ux7+kHohEnK7bg9 z{pEm=EP(2C?O`fa8vZ@%ff@<_1d|{m_eHMi;!T@@Ibnm3GvQ{}JsT;l=45ZsF~r9( z^tOJHNNRp?AillgWMpjekrR%y;Ns-dIZIRUNemKiIy0)U=nYT*scLA(6#=wA7J~PG zOgC0Ml~h6>>aYO+EN3jMHwyKP@>wLBJkU7*5dqF0KiTfWnk1g@%L-78K27fgNp9u;ETj0M7<7*Cih?^& zB2V7QK41GOUu#|u6=rJ|Xp#xzU(=JB@&VB-SC(Q3yeU*_w?d!lRe+OEc0FVs{oGh! z?gKFy!EEM3Eefn8Si(qh6Cqp~{p6>6fv2?1XqBqt@sx$`(dx|Hu^%`UKcXM{4ZD=7 z<2f&fjJ0oIRve`Ty^fsg3)0M=Og%Ja9xk;CZE#y{P0Y}xXWZYDO}tMU6Q1)oKdB~@ zoUWyGr+IJ4si>e|bbRn#bm)qz%sIb%nZUR|3^M>KD8Q-BXSbO)IGgh%XL!u1L?-)p zcjdV~z2DQ;++|~d1cLr9yIvY|u7)`g@<&^shLhr1y7?aF1qw?D!mO`(PK%ufm3;58B4UijxUTg1vzb!Z4 z+mHX9_*y%Mkxo}yL94523%R**C1}}0Cul{>xjmC<#nt&+!GoQQA^vAPFtJ`PG3ziH zUXyA&{EneqHM}Qz!((K>>HT5&wV&UUsLViG77xBG%IrZ%NK1pU{b<6@jOU#bSVoHm z{iHdaImeG7XqxgL9338c8`IYqG*lQX*xYlPVN^-1sU{~mNPrbT%+@E3)mfp=b+(2r zby_m*gU+Qa&QG|BH9uX>iO{|7A=G<+2(LSMbf%*Y&u%HviMbs8m64FjygyrqRs65K zTZkaCDLwz&LH{wgz2ZQ|Mb%%2SG5D4+(1XH)E+(SY+q$;M<=gR5EZW~>*R#v@^k;OEaAXGq9rGBZap1h!?AF` zNQ*aRc7pw-PXDm}y6=K^235D^44-&@drn5@KsTdWr*zWc17go1&-LT}S~p>=baG$WFZoSlXEQ`Pz{j-Ao4|Zm;i0ZQhW(GQSza4*@W9R{#cr264 z5i4w3V|(!c<7WchFOO$4VQ$ z{ie6J-bN=*jTX;*dx+<)RGHv;YR26s32dYIE(E!q-5FhSy8>QT_}GP*e{+Gf+&9g_ z9iP|~&_fSIEDlBqvsPDY+b(lvf8ilb$LkrPH-%F2cnJh{kD-vSW2z6|FSlQ-THNKiZo8T;7wTxk2kjP)x#&d(V5hZq~)Z{zid{z76 zcjIH8u7T->7k98k)+FDB-v`FIQqY1=GJv>U+>*R<(c-6R-RNsGn%F(%jd`8Y(LTVr zq0{%KCV#re@V|yPC&KQd9Z%gzxSZhBntewedHJ~x@G@E8KZlq+*jVca9;eHJ77k>% zLZ18bfF?6VjNU@~qyavUum#&{g?Pn-p`>fT=%d0(;d*Vjm3uLf6#_Hs@sAMrxYDJD z(9MI;T1NUFcYVV8^?9mXDnfscN)x?-PzpcrjUM5-+mKHEZ$#V6D&4|T6;Kb(<}y+% zCWWKpKQ!8`R@?#-PqXH0w3hK{64#RM@8d3x!iv4Vv!C|-h`XLnWL8oS{MVy5yCq9n zV%1^+Ok;{A;&MJklshO|^?mbM2KH+nw-pFuw2yd}7n`59cXKqZ=JWv+Y&WN=BS}tE zIyxJ_3mbOO{@W~~T-yhGNAwpvn}&dF4fXN{n29LPom(C}Yn!Z;A(BrpCC)Q(dWrcM z7ICh$VZAdX1vO3%Ejbi&X_y2kUlqbX?^VAYb6#K+{sH9 zN?Y#5wkG~BS#=TJej-Mtzj)zt8v;gQKb`1)gshzPpE=)L4G_j;WbjvViH|p9YzI7e z@=h}{by5L8kGByGYW$1B??8i6sw>a(^`{4qeRV*5NKb(YP3y%Od^QztmSm@C@(#Yj zw#rzxFda&M6lUUvA{Oqid2yT_OPbfH$jhDi&sq(92$4ri%nAG9@8dnS5;q^GYrnN- z=bk&SCK%wj|5%1pL&1b-#{W!`E;5S#I~P};tTnb`wQ#*&?pOzO(P);V$F1oaxzX0J zv?#I})2SyHnHrJ7goIF1etY2?xrn@|93H3nHt}+ojLE!l@sxfu3f0ZyFz!&CaLZDn zOGAA^BVSApH{&0EJaG3hc04g(*b}R@*!l~6z`V}v=|p=C8MY)IVJ@9Wi8rj8$2hR) z*-Yt9Fgf~qN}RREp}0Lm<|DnX0kS+fs`__Db*{yQv7Wu9Q(4S0ZE}h6WukHO>{@#h zuci{f^$n?rxHu6xzD9LIJYTRc-IjwGbB|xCUf;I4NG9R=Z-Y`8!?_dXQut+fdpPAp z5Eu|}z3GQoZ7_gAPSar)@*nAXtueTJ7Ig*nM^X$x(=WU5M` zCjO`2Gfxcfcbf>t6%1)78@iIQAPfuL|(nB}-u&vz{C9^g_N7Sj|gl^WI*4yUm^ zx8fdVWn~w`4s?yTIc4+|Lq;;Y_gNOV%N8%!jU%L&9t#}#tH3*H8j;>-N>sNdh5v#EO6;5sLK!wOu%R+f_5!ES%$U(@j1*tx0DSS{$% z%goOHk~0-lP+-!sjViP#rlUiE6An?Q5iXTyKE=wF7IA%Tzq-0=Yx}RP_wS))m>9{^ z(-Q{=N2Y3trek=Qo0C*FU}46& zFBZ9Cx$ocgU4*zELm`- zPVQpk;+m!9Y#GRCxu31cXBM zO5)bE9EZujL~P)4G=k@vjjy{ASBK={{NbsiWfUv#vrr_Wrl$VI4c4Y}aF<&liIoLR&Fm_kMtavYA5>vC>hRFYLcbV`1bWVTD zC!wQ|$gR-=mID9!m1U!l#Qs!&>HUr@{!AB&hzsbJ`!C9JgxFK1Y+W8Q2?NP3C;)TJ zULq!Uri(w@_yHl-W;6fujo3TiBum~cgB z5zN&98`XT8UvR(T{}}Y66FAIbsay+TQCB+yIf`?%8qYn5{0wflrvH5db^;5OAr|C3 zo)E|*xUiExza_iW?msvvL2RHFvsxYzt&XobH{l##TO^+sxi~lE^sB^+MkEw}JB=!8 z_`&(?BJ1?5)$zc!Kaz0baml8VyX9Qv=!LDyOqWY}*Z#G$!K3O4B*{r**Vc4|!ow-^ zxG+7em)3Hz(ia|=t?KOn&XCxf`=x?iz3fC3YLM*Z zlp}p9{pW$Z>4mqh-Ua-~qw#>r=#5qnZrG+#@_@IZ9DTgbbSUT+B}&BkWc|B{nUMCFC=qzEIa zKPo3fYNyUZT3Va}(sV_Ig1W%OP8|H`BuhqIUt=i7BRMq!@F++b?HEygphM&2uTdAq z$%v`aomP61>Ws0c1bSENNa@mlRHTrN2FVkcHE6{W@Q#b%Q@Kl&IMv0Z$TesIoxzF$}4Vt+EHk`#j%k$r>AVFSJLJE5<=4(kt!DD4mVAWB=g!TFc36gi4We0-Cl}QG%{llGDk2 z5~mPz(V%6!ta~Ag-ht^7Bk)$mME3@n#_=)N+t!at^i?GkrPlme1Br8gdWdyeZ7xIF zX^Mn)bt5l{SmaW)z!|tMt{X#taV57!vsvR;)k%<}Pik9) zDNkzmEHn28WsRq9@mpHTZKqBodPWkI_z&1gSR2hz>=5h_OK#_M4TT)hIoZFPq&;0qrNP8ccnzRtafEs69(J_w~^*+zAkCE zr8&87J(`9nAfl_sJAad`+4LaWX+dtr4wS{MMHzcC)zd`;#E`ZEg zvI7a7*9}I6tX8kKXVgMo4Kr;{aAM0mON?+*S=0}1=3i2-v$9eGveCWDsH8NRR~p1y zp#Gqetm<(Z(ylVhV#nHw1y)Y%`gQ%XY&O^|qTPibOucd%oP-o_I$Ji5ns{-P0V3{h<0gSTbrRH=|a`2Eh1O4v62o5zB0 z+b?18e0QS8>t_h47JZ(20No{DK4V-Mk+-+m>13I=r`Mc@SM#d?Ef7pKFik&rbqXVT zib$pHaI142i)9=93JMO^?>Z<_4gbEE!x^U0JahVXuEiDdyr%QG5B~nz&924pVk$J~ z+?HJ@*E(_N53G&YxOvZaM(WC-=Eh~mq!+$I!uHOx(Y~U zj>167aEAIfO2k%|P0?ubfa0VvGx_#e97HpbL=1jadg(P=#X^?%a3V~MCQ)JRMIK^8 zDVRGqX0$lSXUMs4v`EHLb2JOSuybFfKvU+Jq;+Jmn^={jXA$9bQBJa8zg8-K&34H_KINinOS?yRR0|w(qDwx{WlqdR)ZJEJG=<(A(q2h6d5(dyw z&n(tbe|mXAJOTwT6p&o~o>0jHJNDB;z&+TeYdhC*Dnct0p+iw6wN@9a3{}BIMvbgU zxJN|jrE{&Z|JfRsNgAro1QCn|=?rDyZjc;k{ zhuRfa>v4pP2Yve*`jcf=fiuEXC_qm@02z?yuqER zguh>c)t1r=gbN5pUKto*TZL zl|nQLtz-y@G6vO|yp3P4TAUX`>z6!En&c050E|z*$N@*N@gzJ?8=Nc#i+9xqBw&YI zE0TL-ExuUd2NeD~;vx}ii^efOZJ@S z4OI8z%L|`ZgwoVSm7V7o!gbH|1pamLWA=>7mt*g%qvt!CHr}8x`VAw`!yS)iFOpD_ z_RWr!>!pXQk<^YCVU+ofiPJ53@9}h0N7xG+kGRCrxYLU_I707spTUX_BX2&D^&3J} z@78pGOq>1Ad~HKRkD+V!yVV!{FDLBn{o469bB-4$>Q(O~1ZOYcEr@ftn_u8UUlRS* z3^?kZAQhJe2I$lF#vj*ct%OAA-O+!Y3x6(F#>_KbnbfSjRg|PS3+q-AA z1hoGu)|tkD1mE?a;HZ}kiOZd}@WbBkfAwI~_0$ca1EYA}v_vtBFValXy51R}YT-u9 zwPvaO-UR&o{CIeH%adDF2wt9H&>zJr@InUp3!;t!cgFg&Z2FABcLm8n4Bo`?B4jOf zbGE$GO?1e(T5V7}1EdPV9bRvVe4bn&{I8c_APd?q_y+x9TQ3(KCa;fIh05Q3BKRG4 zv!5(jw7T>BIv}#~kLmN0hHEdOc~Wi}NIG+#a|G)>qLKy{-;IDDzC~ zT_nEh=%)K%UYHz@&?E8E{#m5J*z~>yQRh!H>SxPK_-7V)ti?{_0d?BOlI_*jPG?z`N2NDq z*LtU@+Nu-8Efv+P;wAG2FH(;bNV&=Nm{Z0`m_7l#BdNa-3Q0ElGlNwRcs{Fbzs0Je z7yZxWdTS>m+ed8)4|tfeN^M_h#6#Wy+K&eo5CsK=-Mu}#`&0Gt4F1SKfccu9?&|8A zIaTWzAWnF`q`#Z)Ccbjl{F&9^hD>Nsz^ghI6Y3{_1cHso3A(O8y^yq$Oj?HQU~6$t$KTIDh{9xxBin(y{zZLzQ03YhSU_^r*&+@-~rTGiqKr=&ED)uj~Bw z82N7ykeJSh0z7Mcy{aq{XSBz3kb{>%4 zblp#RDK2NF7yjMP&AeLNAxqt*kGgtL>ig|89v$_)9?6NXu0f*Q+}6kdvq9O$G9+)C zz2L6EUo}uI_{)>ACM>+0Q_2ipfYB`eZ%N?Z?$Li;L~im|K=Ntbu`A}=zb4!DzTb$y z|CVQ=#&6lN-|^&GaJNW1AQn+l_VxAc-%n9jn@gDu*!?KVN2?k*(5-8f_v;c66$KZ| zL6(=dI8!9XF`VqGxae-jjLj~dcRt~oP8CPN!yA>RZxhkd!V3-#KD>K|NOAxDduwM$ z_~9HwXMr|3E+HXMEJv_RRZTw9Izp}>r?nN2oxOpLE(S$tF?!0Bl%Jmv5)yLu_!(Uf z*O&oo^2iY=ZET&KSZqO+opw)D?tcf$2PTM-yMFmqX+i$#X>Q=rWehP!LX3s<8Qy^E zt`;6XepOA4#nr~wvMP&(a@D#F4!d79RzN||KqiY+jW2EQ&L%AM{b&BEVQ zLR}que0+RyWhDk*TghSgze>qS7_z>0LA&q9y5H`E6{c{8q^TMe_)2zm_Ta>X4GS=X z;c8nH1_lQ3fUbc7NHsMz3(@bE5_c6j^$1(lHzT$7nt|WAf~d#27{IK6zB;+AqIq~NDWjrj#e&22uB2QV zm#C=d-@NS4nl#Qr4^D6teP;IL^^T(x=So*0;L+)2R1s7Fb0Csb%-;zA1r6obW;cC( zgvb=dr!?^o9UVDkWi&D}GGNW>np18LCSu~_#q8{=!2f(+GI`Tv3x@;*D{eQavNY8u z#l`@E>9dZKOd5==&&fZ~Qx0y+H#Hwc*$V0F@>Qb@0~0gh_?g%$E+$48z%%MG74f@XmrE(d zECrBfsYgOb2d}lpmK6q;4S?K8sHscVwm#LgX}4X-^xm~O=XzrvL*x(6AZg+HADPA8R-|^7Fy-^V*zH(xIdDWeEpL$jXv^{|*D}3xa}zEiJUP zw0pZlFq%$i?2rKPNawhsrIXsn}`UNy_- zd+J(w3H#iUr4N+X+dpMFjj=ftUu6YK=DrNGwe4$tG5B97OhGYV>G^rpaF~`EuANuB zjVfbr9lGiDKQPo|YnA4@xN!UzW zYH-6i#~N`L*(#R-G?55}vCa5+aWrwoSn7B&YNh!vc4K*l1E}mCsW%vBUIYkgOU?xh zqL{(aQNxGxH5&EmucqFfQ30{Bv9{-{oU`Vv*4Ea>7rH+qulhji5d;B$Gr1@w6^~xf z^eXim*;+2>ENa;sIEESbf+C|RWscvln#cYuUp28&h^3Zm4(~UV@3t&*yPii@OGguf z?3VqSJ1`DWcGNoB=sBn0wpRT5jWmQd!x};lsH~!)p=Hjfldu2z^JP4ZTl~ilBsn=b z3~XV*ohqe%7&fy1-SQ)BXZB#A z@oa|P_CrH{HqlKId5RS+%`aoazf{)>UvlS5|DPIqjk5U6%x_|0Sb`eKMhnsh`}^67 zMNqJ?HHX035H(j;atoY+xWS%UZXY8q@WKmURB#$oLUN1WM9#&fdSJsKsGHC<_-^uz z{?E<}$Gt&rlZtE~cVcpV;d>P+Beqk5r9`f2^7&Y0p(1Pl3CCu*DGRmb@j*RXAO_f$uZjhmKBm% z?H$v8zu;Gal)H z`%V5`FPi$?;BH=KSS;gtqCvFkr(ZQE=iHQX>s)Zoid+|fC|(EY;7X-rM}J0kdhQ;99A@) zMgiY-(1{S3@297Bl{Ow9@zZL$fdhm+S*NHWY-62fyT(#{Q2l3b$qwVP5Sazvr~_fx z`CqkVcCe&}I5R|jBMH|=HHhlURh_kkwjEdjkNS(A_P5tt(+e+yh=BnE;vHPey|yU@ z*uL~^Y$kFgVk2ydi)5E=SNPxiuTCmQyA@X>K2tRt8Q&qA>;Dy-vap2w@}M=W*p7k*GXa zOxUO+1V11R%n>fMhEHpM-k)MGT&fU`>B~-jzdtRCyTfYu$Lo%v%Bna1yuL3Va;hUY z3#$nVm2$&o)9=qV|8Gx$zS3!%xb{Xog%b*Pu`TsCwoyAnn8Kob zz{hWGi{d;KICsv}yZ^r0H~-eO<}{&hIHAqCOeGclYHJ9ex@6Y$p4O)S=n1i0%_eZ}R@kl0@^Hu5brsn4D)_JA;Yd1H;KP|c9k(#OEzKEJnQ>5PEKtA{TUu@*h9tqXt z7fI06S6{y(M*sQY;N0?zfgb9(S((MuhTjg4g8OZiacK4S_OB9(&ZmFlG$lJ+5U>K6 z`N?C~Mshe9ghpPcib{38{%t93-UX_ChbEYziCG&tumf2f);29LWSDUD+9sy0qsaQa zFnPbN{hpK}l)?Cl4GOAxa#i-%z7?D2nxm~aOCvJP8O*G-jnKOr0%M~PvsPpfNOgic z2F;R}%3fGg9iuogyw>kS{5FB^h$i1_YA9J6xA)2mri-|pf2*TCKTkjMam6VUJmCxP zvvPR6QjX(*c%Oc}Lnyz(uT@AYBM^k=7hR}{yTkSU#j-27Zy`6Z1OFaw%Ui@^q$;rKV^o9&qSRpMvA z^35LqYl+Rd$($X|_&#D8H4;%XKm&n8e{Hd@SX{EZL`&N1qRK3Z{Fw-!AcE$LFN6i& z9SNxXBK669e>=2t)O}55Hn$9(!_>5eoi&!#F1YHp^nt&lS zaq`FdY`=gCVHkuW2lge~a^eqXdfjnt4cZ(@qqpn3+=z%Q=k;GFh?n)M(x%65`&P@c zqpwq=3+73Pr#gI*enmD+A7`AlKO{$iJT&YfRTufOx3 zQ3=oQkgILY`h(n&tg2>uLOQPRb-;&d8rs>M0!dlVLho$2~L>v*4AY-#j_Vba?~tUeA|%G7=KM(NUQ&u^jcCM%SxsAo@lUN>rPZ>D{{7>MYSS&24O4 z05J-X_|W*P9Qytvehlqxy}l}j0HTiiHhHf8gx*D*z`q9LDYeaxZVSoQ`{qo9BB#I4 zfltjR8m~%ILSo|SD_5bWqmuwq=~6=XXeEQ<{h3du_Z%0l*o9ZhQi}u8PCo#!ryQ|Q zD{K0r-RFVZg_B(q1K*xPiD^#%J>qh+9}9=Yyc(MeW%P)}v1qDe$3h|$??8usnehb@ zA^JE2;hj-=ffQ7aI8>|=!Lg>51bMkCOu1tD+>dAlt)Ao-V4t=0kwKm zv4^=bLs93tGY#m#i&B~N@vF5cVDJ=w=V@V-AuqGIXnnBp??g{b4i<2H$X|Pu8L_-9 z3fj=LBg+=@6HzcrfXltxB9UQ64|frEb_54ww0)7gUOG9Nq>kMJtvmt=!-8)~@D}S_ z(WqT+NSe{RL{&E|w#uFxFYw}Ah{4Xc96blK1Xo<>C?AEIGFNA*%6hN2*K@JRa2(i~ zTtg4Br*ygLnShrH4W$}@=jUf1b_nULbDv=q63XA+cE|J7p}K3RpG-i@l)vsL%RfRa zM!#?5#-VJr^@YV8SIVpz=&OzqmC1pbQv7T3?N0jU{%E^^RHVFi^m!$oCdVwOqk|uy zNrb`OExstDdS2A-^Vj{p@}FC` zarJey-@c-|YM|l?2@4tlE^}mHj;bnQ2|Kdi4{z7UEy`(3vm|~GxL1%KVWL|tF3lNn z20}d%C)g4ny$Y1Uq@X_R?-P@zB*pzPS@ZjS=x1v!97 z#R>#T>H0gr6C;QujjJtS9r-JlKf2-$Hvf~X@}n-dF8`q;B4zb=7^G> zeqd}29ukr|H{~yqu@MW-(8R<*R~Kkqvr)!B95@J|0olmNNZST_$K}JPR5zB37}UTb zLU$E37?pkKxLDkTQY-t^}ZG&|@E#)$s*zFz} zTEbE1Il)tj2W{cd=I_JAIfFsV z<38)-@ZK5so|RhvzZfwnd*pDLtS-dYOq)i5eG*i@Ib>O zV=+agg@xbf>E-`pY0wzVqD;;{<15+Yy*EPImoZGdM0WU2fq*`!dzD5U9_G|bhq&r2 z!YDv0a|&|FpY{0YFPAHK=d!|o5bam|U^seNtTiJ%QvT=u3bNrZE?W8@zldoWO#k1Mz^jMd`MruKTO2J~GLouY|VB35lu zmT~G0XQ}?G&R90W8wB;ub3;w#`S<^{sSi5*`AIa`KP8wsO2 zJtQTk>+g=4{mYP}RXq{0lXN!xaFMLORX4s@<2m=;tHW?F=@aPP#9EB>$$5Evccj}h zQYo>MzZ|*Xd=y*nnw8w*$i?3|1P9S2F7NQ;m+uI@BKl`vdX-n*J$fJcXQpDw_>=^( z+lD!dX@G4-wF|65dYdjV~&S#D59#aw_*qwex zlm3kgc?!E}=hW_KYPgNCvXvp(%=2NMS0TFhDD3>}>M=Z>K_b&8<%XyIs^c`OnhV%( zvb@7Pu}X*TA^1*sL_~oMd22~dx^YF1W%KU%u89V=jd4XLzJSn;E+6*HfecH`K(e%- zUntV+t>6%Ni9C|543M(1@oORiker49KW|+%ydf8R{=i-Z8(Yu?Q&dz0=Dygrn1m`< zH8d2MOr#qh!Tz&y=l0#b?dMyP+rGut>;4rl3I=UAZ0}E2{ZGu1_<+tn{p&WM+i(49 zxxScIhBxsMp{B#pRocX^$Zrzuz>=o*p+}6fiqI7^sgrK__6`rdL6BFg#^5P)mO)E$ z^#8a305;r5k>NSkrG?o2@~n9&8O-HDvC=*-{-plsRIK=K*0j=!W?$I@4Po8zB^OHI zQCg2a1qMjZ+$DdBu+X0{#3mNe1>{h`ReIPlIMC)4jRC?#mgv1eXgkLCBJxwrRlpB- z0}T0V%C#FR2K5M1F$!rkE^?Y!1=c#iVqvtS&)`2DN=B?r{g!fO(<*fiHi3ew{PD*z zB4Y{}Z@yy7>i!zxW(FAyx#2aK`y5ODV%zWZrR}RvI*GN>^KDCGUPToDJ!!P{Rsp#= zv^O>$w*b@kGulP>ztzlgCJFE9)sEyQDP<&}9o$(9GyonAcoVo}SkQh_&Eaw9&q^02 zUGH$9rv=sz5;5QVS(iFZ)Ulf~%`s$y}F(?qx3R|y`V!O;;M zVew^GnHy%PwR)0!i{&$7)bU^NcRhX@5H~Y5(9$3XOx9rStL^LCC3yOV4IFLWc!^v1$mn^fa^i4p32iI|I9R%r(Vl zYe(f{7w9g;HN_PdIzPY?yy`z2_UUi|mcZCZS%tsgiD z>olz5jTow#Wlb1-`+|dMtS@JOp`haOkcbSh?-QOrUJ=T&K$*-ZvktGN=Hz1D8QXR| zhnhmz_S}NzzgXX5Gy3w89J5}vM5h$!n58F*uD}NccK7^yX)7ZsvODh>9(!Pea>Hu1 zsdo}_%KLzv-p)Ei)D*Wb`p0p|IX15VC|Dbb#!ownVm?&gLhz?5%RS1fcWwP4Up^k* zd=q z>q6xG6 zBt@4mfj=`#qslNDPu+^ww66O3QC?ndd?a2l!|G*!fI|L$pedJ8$bio= zViGwf^f65ph91mge~FMjkI}g_;c6M5o*;)^B;n!j=fV?SUnG(MMBwE^c^Lq>UTE*q zvt?G9gNxUwvjoFF5yrjEn$H0(*OndDRKiX=Ah?7*61jqbz^k|E{=XHMu8z$g;T)>i zaJx!)2*?I44^Hm2$;eae6u?>4Z>5>=5N=7fX<6yVf`b4k6=11pX|!wsO(-Nl3>BV% z*ATlgaAx>kTp$x3d6{!hcdl^&jzeGG(uP>^VHYCxLO8YVggLx*(%3d}@@fZ@9gs}+ z*_M?ML*OE`(I+*XMKbcH)0F0_LG|r~6|{ALS{L8F-g7^c4w&kl(m{CrK&2}!pUmzo zjdM%D0lv%yRN@zWNfZsm*g8A2imDo|Gpf)5nj{u-RM{J!jI_-Pp3rUbli#DXcs)7p#SzTXJN`T< z&vc|wr}GUwk_^y%!Xb@#cb*vEt2aksG{vWxnmrmT6`EA493Tb=HYaCp>*hVR)30C6 zH@?g2a(7!ZS+Tm-DMo%y!WESO9`h>S#-H#Xk@9?Yb<~{cSGJ@nD(nXgm4MALdU?0~xRPVHq^YxnGK^xJGiPmcOES3+ZS$1&{`$gXvB%Vow+5>s$X>47 z8XQi-+DW5I_YytTri|v;lHQlX#x%`C?Fr|5p0M zw@RW4B}M|Q_WJ`l6cX*I1&;W4ozCg_TKHDMCZ`{3EiMCneR*9D!hss)U(5u2SlP<) z2J8)FMZIJnc`ci5<=fbBx-XV`$pV1}pP>Ck&d$n-tpn4+6^j#75v#69!H+%QMNCYR z%Ih8(}s-@i^QZbQ&2Gc2G0`FHlpxmwI zNkdBN4@uzK8KCe9+@<;SLk8IR=^A`{vCtGJ0TIghtxxC;I=ltQeGy_g`cK!NpjSj?B}2OBy?S};wUlNcuontB zdYEH2nlry*z+w|FaV3}2zM>!AG?wKcVJP2;!N-!#MWZ2i+ZO|RNJ~qf!4<1a8dqGA zQbE1P%YS_GSyn@M(`I3f)-sZ#WQcdjFXuH*Xx%X86u_kIc$1v%5;+;KHw&HSGD3n~ zhu0B`#=WYs*d*_7M07+QhMzSCXRJ$d)7H)2n)-;`lS$X^PQ=WCGyrV<8HJ{Yo^4>} zmL;qCdgK`&!8bC~;|GQFjZl~?L~6Euth|TmcaXR@KCLQvTnj1fJ7b*x_tioIM%y#cOB|CE2|8V0#GWAS zO%&r3K-VsNgn2{}XM%g<*G>&8bR~7cs-Ae#h>Ww>zloOt>)r9r9*^dJyd2>6cUZc3 zdM8K#E2>`WS#TGD%TwTAtqPf;)fc1hqssT*&Q4h5u%?x?#H>>}8j5 zyw6sPiq!@N+yO-C*;fO7$LQ898)|OI!w)VIYd>qXC9cno)4N(%sxdIc)qtxLN-;VP zP)}XsgnLke#{n;hdzoJ|n((Cj!|O&C(;G?lu(pd~$e|G@2Ne1Pu;CemUNF{x&PeGi z-04rK0sg=c#UBqo1RsAG5e0kP(VVuySux)I|Kxg7`nS*2P5??J{ z{J1}u%kYDgBWdM40)b>9WMMb)EHeKgJ2|F&hAqF%e?4NCkcpAp)Yiv+M(Q`v3GY(S za-@b1dnRr5!^-k^8-RiHhx`v0WF{^Y1(?bDthlWBQSqc`UH;1SUoXq{>~1at-tBkfEhM|&b;jqkNvqDJ*=aN&wPn~^ zAenXk1BcgP0VhUR3BN)xYr|xZ`ja__%C_Cr)a!??N5%@AI$-XN`(1cpyFX*ex4ts7 z0oIP_?s1YkM&H$bOQ7L>|1wd4)Lu6Gp9BA}E7N0LUC9**e|uWC+JB5BYK?V*N3HT6 zzl?m`Hy+|0#yBR_TUE+%b8DgT%K2U8aY+%lNwm4jXRGMJ@c>G&Ge71)%MvvU-yJnf zH4gNdYM#~>cQ6z({A%>+qpmXkLq2+*s_3+0;)KcS>_Kq<(8y-qu6d&#aQFF!Av7YPxcKZlQ?0UyR`k$j_mY<#=p~?_<(Q zIJG`7tB=Sj1A~l=8D9PaD=D!!Nx<^;0zW>a$|b~mtb2}ADm)bK>&Uw}V8NOBF}cf% zo9-Pj^9!{W%wALKdZn&n%JK8=eVgT>sgltIx_f*Oq7QWI36 zJ}gb??#P1PlVq02|B0X*wz}Izd>M;aDYm#5#E}nJKxN;H1$84DU;I}P^cE#Jmjo5(aK*oD}SQU<}I<_kNF->zvSEohu z?SKpigf@?&WSDiy4O&}?uKvdFq`fv)9Yi1EP$rVdP8`&OIP`eIWNWCA(2Z%b`Po$3 zl-J|3pz|vy)0b~ja_)V^@G0MR2&cF>#A%E2FliY})SUz1?)fK`4=PJ)3FJPh>uKZz zW*Zs5NPqUbGZx$|r0zDT6;llfLt^LXcQ>S(9#G^izR$86FNq}bUZ*oSTDJ8Jthu)F z^F%f%92v!8tZt57)C+H7?+AG|%vk1!juw(5$S)%ATZc^6##206mlRWVNzF}*N)>qG zPrH6lfwCVgWoBNFuJ>{9py28>wXFGL9)MH^TZKzA)Zl8)5J4l{rE-o;&R^;{ zV6$H1&GB$T1-tTH@Tv_VSS~mqW1kDjuRABI?Trad}~Br?>@;i@LaKm}uQ^^7#@v(8^Tb=r5)cd+o(GkQxNmpbERX z-I1JB;CET4e&uhiP8m+CzEsts8rV#}D>Hqf6GXZdp{sAn$!++)zK@+(1s`M4v0*-W zh;NHhxqJgOnWg-YF(OB0i1n2diOVtKtRQO9F*lKnl5tYQG+v{TY(Yqz7+V#pAkMwNqu2+ z%|QRq`zcXbMQb(E;L_oRS0+}y7(!p~d!N{kHUHTWS6cqPnfVgPDobk}6L!>VZ&{Nf z(J&NGH3gW|e>?${lCfwN_5cW?soX$zsy|)2hrUq=5+;7nm$`r_U;`><%gcrjFlR?< zOv8~YQf~0LpN!rke+%!DnU(t!>Ak|!trh}ExWhSFtS|08Cm0=v1De#0tCC|KK_hu!9YIdB zkush)Ic`olpF5}~aG(J;F9S~}lv_rl-^<0?cxr)b_^r*8>)rmJ?xcZub1q8O(a4z&Z|mG&7*zZsX*{&0`7W;_ zZFc(uN8eQvl!I=*dD-h(;f&wKK`{4mK-gTX5}d1??fH+%d`Oe9501<_oaA>66d`;UZil_l!c zl<@;|)08lSB?e)Ukw#AT(_UNYO^;$KF+Xb9h53OQ)CzXF`}d{H?kIcWhYa|p?CUiTO10A=+oqgnENsw zTNBkfIC!v>3=0IaA!YJq!H(yrelE%pn;DHFC6kxRRu0onmRwI)R|e@y>Wny?N{J0? zG02z)x^4ROGq7ap&MXp~nhx4s5Q@0L^>=u~La7IR!lmc9HR~?&JlloiKIW50gG!@( za(p}Mr#ji1)a>zc!uzNuQ!Qf_DQ=L}|7+$*gT5(Lx4}wopBYb3w2=#(wEBJack*E6 z6HIw$d!xAX=nb62Dr6mc%5k5lZ*_U39y2B6L|uW+1%kAm9YLD6r)$qomphCk^^-qU zp54!hC7U(e6rH!#g@sOPTug!{w!(y~lkT06$16$@_3O|#D&>f%Z(x3yB)sw8cS?Il zf(qc78bxmc-&rM%T=8gAUHg6Qfz>i}s_yrTr<6Cj{cX~~1LaJQ#e1c1sEkScBjol9 zY(R*N`2Bh}z|a+WC%MgBaa0Y+9q{sGHOc{DalZhebQ6UbeCGPh+@ z%CD5-DFJnKvP|{r{ID1qQUs;j*b}I(_i4LdOcuo1J)jjQq~N*`D0yGiSwX}VFDz#w z{R6*3=8`cxqx`rYDKmv(0uwChKcl}xk(Nja&lX5Yym2*VL}2ytQyssg{0kaOAtZ!) z_BmRLQx=hA$w-U#r%;{QUOR@nqZ<2~wMObFkZ7`l>7W-c#5;&>YQ;`m<~10&aJI5dWW+m*?}a68mA=0v?zD$~e4c6e`Y zXO(X9h@%pjNWo-<`VAq`=ShhU(sJJB3?TyH?}}UgE50Rod%H32?s8Ve`72%@jTPpT z{%Teb#n7{|R=Af%0zCAE$%KCQtAdQyc#bdEM^RZ3h)oxckw2yh;uUizPu-2F5!~F2 z6`~6Y3OL=FpB1$1)|}-y@gRwP<~GDZL_?;%>n^VSq6sg+1c4H zw6|oIWIQ}L5)u*z2M3I29}dg4n!inZuLD8=b!_-i0N?)E}!bP#4qU$Pj!O)kiv)ypTG*M zkqmunkc+anP|Jn~>qnX#p}83!Xt;gdpOz*|onZK?@x$_1KLsky&K;i#b^Q6@&iSLF zs;Y#m>&>O_vK6G^^_8l zMujh#%gV@~uO+N8R>aDBKYP1gN`#@ImGzOKp`pb&B)CmXFD{5m0dG!!k**kb8-t6w z>W8JwR936xiCIb#>z*mSs9R3qyq(xpOz6~?@J+@Xl8yDM=LhHyqZ!UTsb3wXTxZrr zAN{!YhFH#7s@D+dgRgnoM|h_1@oJqmxLlCIKp0TB|7%1*PHYvYNS zWxHn|1jBk#n1NfT3$3&4({8h)x3>0hmKSm3Q8tH}WfABn4Av&Zo)#wbTqje(SdYu@ zJY0>tKG{ zbJLKm%@of8hPjwrB%y1McN>ezU?`c99g$;@1j4g|8UZ=n-c69;b^I0gC-g%b7BY#K zShobpZJW(vW5P)Ui?x%lYjs*n69{+QP%pMuU}<+Z1BdSdDTWjvM*^1?AWD9K6th}T zQ-CB%CUi2`NHNpMSUo0GR-Ns(xYW(>f>-1wb;ufz1yNKCWnjo(u!*uGSx@EeeXAxV z>sM8UEtjSw2gZz+L!ab3$>EWaI& zZ%QrTbW{@CV=smlD_SNH&rNF`yGvS@k=X{sjpE^JbqV(>(_A&OX}Mu#bQWw!oe=c( zPiLIz_lvG$qzB_0VKBcmNMfz}prg!5_SLBI;13e4z7!S~QtxGGiq$CXqun0bU^qQq z5_+8W=I&Fx$!{ABk^!c|%N3`sG{PAUXg)X=l9fg%K7JaSCEo*3HqFUZBWgfQ7B9xNm(5EfoEFWx-?^2gmF(wx=!DU$mP6khECifS)-PXMZxq zCkkSbHKfy&gF(mx8AS-(xfY*{RzGZ44GZ@=*nkHr@xF4KEs=OLJY6@FuZWM^ad)g1B$Jj(htmD;F(#2u6fhDO%+cGg5-BIPd%tX}umDTL{HZ{A)PoA{}dLG@dImfU!YmEqkX0T1YBRIx$pA*cB32o{(4 z#3(PcIs1nryG6lpe=X1V7V+1uw#jvG;*BDl^}uFsEK%2`5y7;VK$|dezr9O?CJj6I zM3;D5&J^^?*&s8;*Ac~mB)va)_@lk0xW2jemlH!3#Vc~fA$!{4nlGVW%qHi$kgDrUH8{Mvo4#NwlH2zV>+`*-Mi$jHfBw*rGa+OAdzDhV|}SaYC3uZ)U{nwp*E za6Qoln)jn{N*``qc>$aFx4mIp3P5xe@F>0mmdi6W}o;wmNx z+{W`Z{C}(&I!4AwNhMs-ZYCu5jGOMk1kdRy%mY^@;GZ56`D{ZSG1#3f7h;}eR|?S( zl*44izpFU#YZnC@%0UfRlo4B8LcF4qEpjhkqEUc8+y)u5--t86%xs&}ftjNi;jG$SAg3!#^?X<;UVJOIXO}Wnp1`}lY z-Qsx@!osq#(+;Del$$jzVStE5TwH)IW=LsVohIaQbpqCTig!ETKHW@EsIp$-_kO-# znZ*2f8TNPG3C;8?uskR$bmyyw%^DFeK)iu_%@z`bX2gwV#)eL`wzf9K&3U43Kv6Dk zK(CW97)V9#{~Zl2FeJpFQq8mV$)G>l=ybjJV7@v8@Is$QZfMHv)g!MStQag*uKnW|Fy)^L?3 zo~8C@=-5^Gp*iiD@sTqUjAJsoYv#VnZwVVI?^z;p#?Io)L-PY@&(Uea5kf(NF|f_Z z64v$-9tkPh;DdNm70S6vxAL``Y0Ly+6NIlfE7j4*1{GHBPr}!Mvh)%$rM|Enw|EIFKW9t0+aV8zC1HN??T(X`v*TwN;#hFaweBCiUhN30o6Yf| z>Os2Fc!w&$P)s&+ZmTU?xg;f6C!figrYV6VsMc@%d3}IYUsC6Tn>h0Ze@o2gY*n#g zdw7)Nv-EY2wwNd`0=~)(*NpvcYR?R^N}{pk#LRu(L&GnY;t0`58%}Q8#D+bJN)Kvp zt||P2MqSs-vaeZJy#-Y=C8aLj&M4?a=l4jGZza_ywY)qvFq}1H56dnTVsBK#ZV*vX z0dYHa)8C}bZ8z&jY3{#RZUxaY4?T(Ybf3=zffP%TpcebcU-A0pE&FFf&_C%$^BW4? z>X!t{=Hj9Cr7}?jT;Pd$(;_=)7M27m@deN_c!|s{Ub*beMO(V=H`TQ}!%}yb%EqXV zh1-wSb0r-_rbXLuGp$?}-Is#|$2>$1ma}N($MOj`pxYMfOHP{#d9zwt1XqMg>Evn1 z$owwWoy*7YyLmr0#%#@HRd`3EDQWX**^?+(c?KuAJk*SUnxgJM@&jNbe|AjhiWiuI zW$7I66}=D`(n7-3J7-{=AWM7QE!oFQoVMITdg6VsC@04xtH3GjGgzmbS#++B@lT_? zKBN}+#}oGC#nJI(d--{p6Fs45hDJt}fasq0Swar0e$N{qJ(?E;iDdayr}I7rKhpm- zJW5Ewt8m)#Fsk%R<(c<#R!GHcwNsx(w?=W%4Kl7voPyn>?a#vXU3(HJ)vc~6ztPWD z^Uo>S@Pv*Iz>c|rRZD58*%qn`gY`X-z(gp7(X!6vwAUrVwyPDLd+)|7@d;4+?Y9MR z&TwN^Z83GVbfm!jr}*KM7?P5%NX7(*#6-*e>EAMCchEv$`p<58BO(Ju$5#5M884`R zqqi_AKH1gTt^7)^m^AK@FS*xaT~1KrzivDeaEi@xJ{F9E`Dd12KxfHEYI@&pE!y=H zE!u;bUVfln)`OjFkLX|Y1`ohl3p+M3Q49#&1B95|X2m^KAS3c6BeQSgEUT*=>aW|m zl+i~lofXxqGqS|)qcG59YHBaX(;46dsbIN!3uu6e+@C5r`olK}$ZW@IB2>^9xqpOs zA=ww4Wj|DzusfSxnUPhJ!b(Ht7Z?~+>O7;kq3ZR%Dr)N8Sgg5BUjxf&wseqPPenp9 zU4$CDG?3>fro&)Y9GyP#-V_kHm=i11*!^*zx+jy%M~L$Fm5r>%HIuh+b%NiVslO(D zjjO`P77}RvfCElu>YMq$){fX+lRS+$)DRea3y|VuJv{|QZaPuFmEL!vdUyQ(F6wsF zxbs)Q8rDr--O9!qxl$ku4?Z%YQ~d&008heFAE~q=plk~Yc|$)ln>-SqewN@6b+9oT zerM4zH?yUGHO?1WrWJyzcB+hU5ot((`2(l631xl9gI=7FR}g{FhAa3>8QQ?^t|njW z9-OGdtK9B;T!N_Sd*W&3s^x^-y|Vkc?5kr9f}um+M|1%qpK^a(oPbG?f1kMwH8=i@ z>Wr)W+C}a3KU=_sQyH8N@-#q<={p}2LB-{mfO@zc^D(|TSu53QuCvG!z~Kd2R}Wz| z?J^$J`S;1#u=QQ49WLc98<|is01bEq1WMOyL_q~PrqN&94tUi;V%1$f zeR0{IDstH)jviEDOxa}#gCoNhZjX4?X*!%Cfv}{)*{+54f{`QAU74`S?-V>+l7{62 zS49vbj_(XOAnh@f2^zZBJ-A~JTU0gaKMGj{&uQv?Ru!#0?mjAaM#2?uS-U5(x2NKOlz?Bbytib9l1LO39JoV{K<49-x^_=?vBLWbGp71Q} zeQRR7xNvp%p`^n(;#h-9Tz=&rQw)ipPfXSI{;*!4_7M=G=U)WGVJD}i#I&@Q8b$Pi zBuQRSrT;IIDOK+VBq?QqtYOVA$1g_Gl~o3aj9%}O% zQHqKt7Q#;$e5v%J)0ZnMosvMb!%`cYrFqkj!bpQ=9*?&a9?Z$rYB$r@XqOYG+_NEa zxJ!*NeJ^`GZ}(3zu>v3aDnt2KGM+2_93taBUVIEQ3MP&Dfph8l6FUbza2@6|)r27i zJZ=ciLkucpdaX|DByXOBPfv#}he8>jK7WEd+| zIh2j6fbOJGOFQPVmXNa}PI@Ydf-X)sF^#xZ){d1fG$~5G$&N@iB-l)XaUK|^N)|M@ zJ<2N8t_qxPTbnjk5#l%l%(XU zkS&(2&3*sO>w-$j+-bxZSSCQ0KDT}uj)H?161eWDD z9Wzz*DcRWKAlA)MCnvT?t=HO`%qccYzR)nN86z)TF^}WcdhjbOz-WleUenZ(k`rgF zJTNxF61z6%9GsJ+X&sO*WTS41VT<)}ILj-X8+5n%(SMYs{962|^aosMS#j??SQRT% z=OKIklpR+h@|=y>fIr5N5?!hBl>oQBfN*N2DE0CaXM1x?Vrjp?!WpSWb$fqb$+OrK z56{V@$5s5(9#x{wHQb_iXbkw;_G~EU6e3}xyV&WXez&TWNMcFaI1+!UWB&(CT_}7aKrD$rG+L`rRbh)Lhs|K7 zAT&a|`gzNyasRgcL|uu!(WfDY4PrOlkc@a&tMd!FzM0 zNbLD5GXQB*;M@oNxN`S%tM&nMbL8f*nQ8kiEDjn5t^!cH&<2bW?s_1MPv9{3W!El9 z=`oHqlRFu9G#LiGsiM*@(%C{p9!C1$nXFAs_H)7N0ypD$@W4P%`f3^#6R-?hzoS8->Eab_KrL$d;>^mYeD^+L58{C{&x(Di`97>M2E) zCC>N&(6fIdi#6HyL(1F*3u@)ra>*O`tMaCpB#h%7h1V&kr-)_`c3y9J1adZWR#=QK zX4fb6l_hSc(=h|jM;Q-?N0i3Px379#UXirD|27Ue z$U=(9v05*mn3lbE+*O6Dr2uWkFzlSA=oD1#KHf{6i*yP%9PqH%KOf;pdU#VnY}!J( z6b{yAL`wAwjhNJaP1BY9`xATP%wzWZL|%{tR} zW>3Na=ws*3_T?}V%zeB#F`c~nQdi}a$&vBduB-~wvo1qO_N^ZPzrrsnPrJM04cnSu zg{Dqg-svE!G|l6d%gT}KJb_;0#CN=gYL;OE9n5KSk?1Yosdo6?buDrDnqh%NWPJy7 zhTiHInM0!TnIzF`6KUeq`kR5SqaKe+t`FAM9%rfrqtP^v zo$$ElgB}MfEg^i_QuH*#-tE2KDZSbs!Po|mqF5wE? z*cFb`%+WkVtEsmt(Oy*%*X3>LCa;2-TPUyCyZkyki5dE3DUB&lwn&3Hn@sKbZ%_Wf zw_F~ZF~Y2VQ!KY}V{%|7z}|dM9y}=>8OZ(`1OS@f1!Dq(N`!m{!GG4Q&!GTgcT9cE zvAq&n%>ARA_A5lyd#2Eaq@v}KZT_+PS`BRj237m>t$?|!c9f?!8{RNFRlBt?Ena#N z-TO8S&NO)R$1=n6Y{3Sc@>N0{55zAla#kLXe@35B^D|olgK%vczl4o*J%jNOR9jwK z$ zg@^Cyob}Pbr&$mU0hBP`9_KuSny{}i%?-C@&+7}<-lBWQet%ATtQ;#UnZrupGq*qa zcrhk0ra0XCY;#Pqbn2fsC-bFb?dMkvr2SqkAt$%`^}S)>oKvkfdng^r-QC|G+xfWQ zZR&CandI}-gX)!%^3yhTHi=sX3*E;_Zs&t&Lrq1_980$-A)1k?Mxp)aX*9kyeq$=s zjZG2y8*m+cTdF4(&Q;&1OmH5^&@=@l1+8UoeHb~|Mhmhfai~Pz-x+AvN)&V1xI0ROI-WV*L)@Z3usKAX4IH^+`bLG5v3GRZJl!%N#A(xln5Px0 zvw@x{Dd0~)LO%df0}PfN?OgJS62N+qb#>(hFeCuxjlD9nv@8IUgm(tO1E=2cMvR%i zu*!`8E47AqMbD%@*-l@5$KkVO>_fn$wH+U<+50%-Wmw(U+3NJ3?4{YA34Ds9Vrbfa zh0_ZLAX2N;@sA!XIBqi*pD}mDm8_fZ8pF?=L}(mRwm$Jb?-ff5pZaW--tN3!Ons1p zd*ykC&0<9$HW9^yK`IB~KHJ%&Etit|Gj;s?|A2sg^Oh)PB*0?;*`A%8oFehLeqoqk z#8tmYHvIzw20aLTFnMA7XDxX5MdA@zZve^c%+2%4%cD_O!mb>Aw(;Y1 z0SGWOJiJT4(w6knedTQ2V)>$#`%)Z$Ax#3(hc1=l!kPH+H0YI?)YsCGzGt@Z$^4XN z>R7W~wcU&-?5f&2-%xL5&00_YJSvQe!{XU!g}Wh-0I@!diV>Y3CbSzk{Nfm9qfC((_7jaN<1IZOItqX=U-aA3QD zq5^!7{=dH4dtp_i2O%taVoQp!Fz8?o=IK<&OfiQYH}N2UKc9 zC7ZuRv8}Jn0DrIn4wh|0lYQ}M5jLzJJ@^_M$JP9%1zZALB)jIKQ>Lf*p&7<2-!(&U z%UaKWon&_j9ErZHV6&=<322b!fbOBj!^e?_q?hW0}1SD_1h-pF-D#!Jk_6H>$E+gKO=VFGPiH=Q@eQ7ywu{m1=o$a%_OkgOe7PN zczzXIa6EZzuh^a9X>^lLkq?;&2WlCo%X#xFG>|^AQV%*TcHI1ow>r9D)pAeKC))070ViR8~T_-ndoV!?saKGtD9YkVzgxGbJ< zy*RxhA1Si`b9+G9;0Eiy{f0(|*hMcaoSYuLZJ|CUA6br*oAdYYKjtpipsV8@21c>Q z7>8AcH#-a{gf19Hr{(*S7!ubc1$wKdeVVS&`78~wAT8d&KGA!=g}JXdc$xn>Pj*n zGz+O|2-x4vU+m|zt;qh6&tkaw{-=m{W-x{XpBaAFXD}Vgv4EHs{BD44LWUBuE?Wj$ znr5bb8f)5!n(1mHM9fu!jgxS#!0gQq>V<%U8YV?ZMzO#|>qZA1+sjBGC%2z*P)s-K zPFBLMXh>wti0bGKrmXtwhIRHpJ6~6n%(1X)^h8U9m8!{1J1q5NN&jInTjhNCEn6;Q z?y4|jIUodh+o@a!(v-~^;Iq^jTo*=@oHgThB!r8hJew1~A`1BVA%K;KYeLN@awEz( zSevz}+c_1w8?GxQN6CW_PW%%Z7FO^3Xr=qx6jocc{xaSu=3%q|e*nvJF}S7{=j{7u z2uPARoei)H3*V8K@gvBtm^}PpY}>x)Xh~`W9}Jfb&{)K*IRAC({~#BM5c2CkQLT*E z+MORpRy$a%j*>DcGjT@iJeV7pIW&{K0Eb!XxUpO_a>TRFl>QL(*it!qoaWCgHR!Jq z%Os%Jo98z_9(pyK#3-3DP}s}icKoZBF|{cxDWcwfYvg2D2yFXm*fq5lv9QYQw6z7k zbi;XOxh2IzXx~JzCHb|IM)osTxp9A$5pQLD?S=XTwYC1~uukRZoA4iF(QCCH$(7MY zr6pd#4chvKJdX9!CLP*Jpz5kzw}nd2iSqYtbW}?Owy4)zln8H&!pLyM?Djgm+w76o zTgc=x@mXI@u047J${JQ<`5T2#VnRilYe)nf;beMHXkwA!~#zz~-fk7_ENW%Zkq}}|yV55^LG7dW)ulE7hV4;M{eD;TUa+4t`GXzTN zTPC`ZF5_z8xDuB&b(LLYLT)y;3_mt(xZTRYX3oNWy3ki5^p#Sk(S5_hG97RjqmJqJ zbz8Vy;WRRiq<@&10NRWTj@#Nu05VS?6!51NqIa)io)0oy@8Qh8B&4wD_pm(ET#5d3 zA4xfAQM-7gPV$(2y*M&s6?i{WZgeJ^+3cZBL?-RezT{ClcB_CZOI$2-J19{6Kc<2(c(`K?vBA-`j!is( zE&~CFSywZ#abJFIv8&w7>}E%#)FDN$9^w|-U%BPdPfLLz<>Aa^aU5WRZR3CFv9`yM z_D9`iYr3L-B(qDoJpD6x2U6dan(^J40U`nlV#7F%l474!>ebUkR@LD{n;Tsw+P_J1 zd2IS7jLLf!37L$Nbfo5u>H_sOkG`VWG*ezy8WM5N9r~ST#Ovu0m zhK$<^X6k)mZsWI&KOqx+BjV-@()@yiC?YSa=6YYoYR#G^w`%P`Rk+IV7>LGo=1DG3 zyv{II*pHIcA*fIJWl4Z8>YEv`^VrVMWH_jQHqYf`n8Wtc%S;omHEDJ^ zpai?4u$Kj+)se}9#@b}774&-E0S*!j(RbtYf!%V<(&38A(j^Vae~2)s*va#!@W1-|g~w z^Bj&t&i9$7W^k+U`*_zZb0`uSI-)4K)`P=}uzYZ%nPru&_BD2d>*xYrchM zyl6+wciKm3jl=bfOuC>jgVk&gW5xTEZ`hh{T$X_hG+jMo7V4@VScp*N=^eu!#_N1< zQR@X?nO%Q!I37-W7~%~BJ@%Sxa13+8A+4>|Dy21eu?QTc4a!258ZI3m2By`bRy%ig zxA06>FZ1*bsMA`$+lg_k^jX0njKS^6?F`6$!i8_=MG6=-naYip;oc*V6;t2ib*+gT z7ZoZF?#m}Et$t@@olE@j?jc=HHyU^JgSgw!tbFM!GNDsNLz81R9^-@v>Pg+cOpzN| z=Fp}le!y{Ep~grk*}7csd6CZJ1rjaC#mjhfXgk04vA;$2IhL`X@_O*tras(CbBeL+ zZAO%A0+seQk&NPYJbRuvRP`svL5|)H{Ih41Pc(P2N}%YQ(rU5zd7$v+oI^MGb}09) zo(tIJcIM+c7&pesBf6bTUzC)3*4^?ctQ$blxft1_z1PCK9=So`I6_p!QoJV25XtDk zs%~b~{>QG0W9DHi+xhjWzy^Vjt*UHK^j94;66sdZTWk}NE*TcL1PUi{#mzifVu0;n z1A-3Bz&GPvP9lr=*FtlQiq$aFR=+}@QI9#>ytZCl(f{T4yDrq?Nx4IYrIW}7^K|!9 zTFV8X|H=NqJ4^Y1dVB~Uy3xGx+!>yC^j7EZ%o4l%)y5YcEGhGSO!^#9Q-9poH17B8 z+E^JhoYqt0g2`4_?T`UcS9mNsMY_8{tG2muwKv~OmlN6?sI)plk2x7{e*MqxBu2Mq zK=vHMsDFr^XjSoUIVkeph+y1Y`m&-o)r^>Cr-K&)CZ@FNvR zc!yVbT86+ZtvxaAgDFpW`3BumyguZc3>FVjJv_9-pP!3-WjBze@VMsg zNJWw+#Os4=R6#FZ~|?gt&ylzRPJ?nz(P!NBJbhDtk-FhvKE9fs;BGKyccrn7*1Z zdiRt>x!cy>m6EV?Z{fk;%f*FRL=zjUEsOkFDf37@8r0RL8n%9G;RTQzw%i=l6knHW zOMY}`qjK{GWPBj6#V~EHp~h}o!L3__%LWBS_cL2b1Z*R0^1~mWZ!|QEp56R=KfK@i zz@suR85-|qJDsq&33ka^&*ITp%OhFtjbvMUk7>|{bPjpKJO-(E;?zG847T;s{9I^E zK^srN8#L8tNgH70c!%W|#M&hb1%t=U_{wzkM3u(w(jxx)jJqt<_B9H0BRp6Z5$B*FH#?;EA^vet)tRY z__PG4PSQ|Wox_gztz>V)gVd-|qn-ZSZ#_1I`IG_4J9Lsi%m*`74mq|Ml0R=n{Mf3M z(y0jeW&$HI%cQ^Hf_^hvBkSF~`~G~7!ltUqkb0v zSpWGJhs~|VWS++6bV3HC_(Ufg`pECCG3mGpV5;NZqwS{b`7hIHS0fQPESiY|_-sh` znoR6wQuk5T*Y{X5+mx{twp^ckN0*xC)nBXSBao4-8$_Y#?E~(SeuBXW`+IZA+Sil> z{#lU8Xbh5WUf;PtD#+}oY#Y9IJv}bA-p6dO#yFURb(^Unir>u<9MIECj0#xT45~T? z2#D7}$NXwu$F|Z>9!$&QV$qhRt8yCj9Q{1UUz)9WqS#cZ(}WPCtqhdrHKtJ7{PAYx zj4NEa2WJ6#feY)tK= zBM(@paVV4!MK4f)Zx2j%I9kYQQpSN4E3d^PI&`I2&Y&$(n?Y}UT-w_b9Q-8uY8VUF z1wNN)d1siZsddU8F(i5O0Ar3rwRyC`L^~)q|oqr z-Kr3vs`-#KqcY8*P`rH~^8tsY9<@?ic>zEKRa3*IP9W|COmQBz32l3^08n@+tWx$) z@tadgrW2&DyEo^vV|s&tvmB~t%*0I!4v*^ffvnmbbkNh)Z z*yM(Kl_7$|gdR|^a*$h5ePr)um$Giiss~QQ{PJo)v`Rr8=8UwDY)(UPi2xT z4CVP5eF_53am(K0Rq7h*wA3>}uUN@2y(#`7={{3$?G;<%;4@S^M$*gfjgN@)NT36= z3L{+AkM3h~o=QRU%el%&8ENJ8viD$TAm!5YbZfumqP;JkEoBAhE0?n;0+Nc7?+8ja zpWB>wG26HZZ#LiP%=mPsfZ78qZ~sAIt{1n$Loe`_3qpJK*QSbzH?s0oOa{wv4 zyu5tTPXQJI>*$J%sedrd>{K#|o*mNTXCsWFHa8BXJP($)06#H~LINn)Vae^%0@K%i z`$A2eo@O(j`e_~gS9Z78L0WRY0lTPJv-|^kd zKVcH|z)p9^s`EOyeqFSnKXNmi!20NrR7`A?ZyCPkb3!Y*z41q>YRvu{);PiO^73w5#7V0BiaJgJiV)`0$ODg}J7Ol7C{DGc)rOR&C zAQ6}Sdu}dt(9pbIUrZ$GpG{n-<1Z&*3ZfT!!5}9m*Y>uoj`m*^W&&o4pJL+tqm=ls zBylmyH`f~p9s;ny_w&I6b(}coziU+bA0+I5z_uSff1eBZb)k`kZ?H+Qas%gc3)bOx z@+Sb&75hAFkYp`L{MQaNj`VEoK>mfRqa|>udiBSJr)gE4EkHfG2@7Z-Q1(w@WTuzk{lp}=Z9oO%=~^IzQ{PVSL$BN;pxL_|arSJ#UU zsQ1^$B4r)_elFIeQ3OyC#iQ_h!7S~I=C_CSE29o$Lj6Ehy}(Z!B2S`9S1%y)%QNIS zEQG}YNa9(>$^)G5OO8BDR8&|PTvNjd^&;x??Hj&=$Rj6(c;u?i^Q8`u%FAH2!|!2}Mr3WbC}%q_ zf_X1F;xB&^jnCz4tWC9E^_J3_#&!WGgRMGEOv=~rYKHC$K$$pWB$%n4T(=TAV?^Bh z6L?l@2na@qb%5_%eH@}c3>SEJqFrP6NOaydwhT%>F01A&ant&JJzCv<+~U`d=&iXc zroTCS@h<9w8=?elRWg9vdw?zghyelu zGMw+p3vYWOUsv024XJ=(QoQaVD=1Cv3jq4? za*Z-$B^eRfOi81M(S24?`5Ry(40tf7#iAZ9n zqYB!qsw?l3GLyoK{n&I&`P33t@>Hx;#`*oF^#%tAf#9!u?PFlL0^`W}viP6+!FnbU z0VxMMHKsI)?nQ_tPPqEm+u4Mtt7Wn9vY-hAK&E&R-aHhiv%5nHt=mkqca_ z(8ZlTVvEy6)MNENKlmLAGqu}{tDr0X2uZ3;fEpS&&6+*F%V3#mu<>K!v+{ZwKSqjb zM4PQA*#*6IWOb}=7*ci{VOLa6)NC_*K1>i+YtR?G_^i3*)4GcPhqJegilckpMM(%D zxCPe)cXvyIySoN=g1aTSyTb(c;O_43I=H*r!0Eg{Isd!XJ!{=_`M`&nJ>9#zch|0} zr|Nk+U7>#}hbc#&JxK!(#6u2xEve%v@ReiqsO3!Ns-IjOKk6>i$k^>=S;kuD)8S>$ zz)%A1->s8Ywe-A|fu4T0ruAPYYPB@g{NuwC#n8ZDITX#nIQ6dvH}9ioGUKNu`p{jV zG2s&}EeZ8RqY5XjcWWHU&KPepy?o=ZBhN&rXjHKjWeBdOe(GqTFW!oXKE>^&hS&4_ zt82^+d}IO73Js`;?&cRj%~~yN`upB3iT`;3Q=XYl<+!6Cd}`ZUEgHrkMZlud2aMYD zd63|Bt1O_P!qWts*8i`E{Fv2Xt`rU{ea1z+e7k;K6H=qOH?Fi3eL(GXuIgU1G%{_g zkhrBsy-}upZdx-f-|9y{rs-U(Q3f@+wUrvR7{V;jk^m=KDaPJx!MoHwv|`-1@VV~> zmM=HRbJO<_0ci55O~8d~xm&a5r)MdPIw7R(5f?YA2W7#<6v$B6;3<6@6L@!OXdH^> zdh~QG^Yf(mW)|Bns3dSE#fxs<1SN3r&VQ49%JIMr_l?>APyNP7dB*|WsM4$VJpE<2b#sJNE58&yJxs;B% zRAkp>dy0sY{9;5o^wQGUDSG_E+sJ^;owCHrAYHVX=_WqrsWmlQO3^MLB9V$6&^UJV z_HGrtdtAik_Q)6;ukbz<8MB6*?JYmeKeEtxu~xoU{_KiVM!QZ&Z>~$spUKtkL=TI1 zL!rJKllV?{D`c6HhlJG7^KVy;Es3n8)UvptD-GPxQ21BD<$*9)20Mn~<2BVJ>tj3j z*sp6t@MqnvuSfBYyP8?fYEBiT?|&$!p3S#yw!*F%`Rx(0_ZuR5A4;XqoM!X<$Z(k> zw1tsiqSp*Hb16judvKg(sfJM4#+r9ynSN0b{h&s~)F$=AZ;HjJa2e=#lF8 z@3ndfA$R<2n$>*R5?aJb9p;f*vIi@zO431mw4;qAbaaS-`=Fyk2>228%d5+uLc~8v zQ(#cU9n{1TP{f4*ZF8xqsXu^rsgHTVj^t!qY5m*=NU_inoYE z+vCx$gta(0#$d2kCk@YPjkD3i3^e;(sQvAOqa)EUH9oESJTR0yapsU#MRi}0$N5kC zaU7Dr?pT)r&BJme3O@Q?{s-|>T{&=-b8N$ zcsPLaS5{6Y5unAijX#|OEgm0GP|jwAqVJ-JUj&~Xe*y63cpA>di%%!u2W#1H1OCP7 z%q^?Q$o>!D!O18oVF2Je&>RA?F|)ox48>#9_&gOgJ39-YR{?+{|K;$eZ6{~G<-lXr zmPWLtUEl4MvRE%tc#P=9=Mztco^MM#mj)dc z0N&L^?>L+{p2oEq^n;i&Yc5UgQ0C!iG1Y0_w<2UX5UVh8wL`TKG)732a_;Noc&qqp zF31b*fD_pHma9E@;bW>}B`N=9!G!;xUi1HSg#Qoz@&DDwRoBi?{DUXXK$(G8Ibd&c zZ4nR<^=fo5Ib!!ps1@Duk zDWvl!5Oh{;I01JUszLjYO^BSZd!~;f5KY|VY>WSoqDzAt`f?KREiH$S^}Co3|3w%+ zZcBqGksZ3x&kkxlx5v2*{5C*??2s_;OVH}wydJaZ)+`-kL(HU(J4cLnJkEt&C=d-b z)OQ0Xk3l8mcaH~1@&Kn_9Odhp&lNsCJ}!rqI*KsWXa19gO2f8S;_IO8f!ieF-HS3A zf)JkEhtXy zB^)f^4!wokHarCj%6|Sq8nJ7sUUBUmTew~XqTg6`XN_xrWqY8eR8Oc5o;sn_Kepa} zbw`eiQazvH4|6Lpe}^HK?pt0T4s-(d;jfH+>Ob;y-XL6ol%YI;IP2`}522q={m7i3 zH*6A1Ut@*zIGAtzz!zVp}Ej^yNF?K9}({ z(mnsbOM1qX4oFX89a_|3@!VcT_oS&S z-W=2(p)(p*?k)V{0^YWDp=7=q!=`G(xIc%P3SBcfGg5!H!f;9WWAZ3&_zM5qdAs)6 zZb$p&GEAAH)ko0$g>nHl39>743WmHjAGbAn8pW>M4dGvT3{n}XDJ6gUqvpDmSVsRx zB$prZH_rY184^U4E8_gP*sJ}JSy4x9CvpqXd>$csrm(@oC1%XSdX4iT)2^2H7( zqrv6?ZHiV!sGzBa`eWY{&`E8mJk(96*BF~Xt9H3vS`?m9vsw+Nu2c1z7~JQmJha2+ zY(Lj)`EjRgsBrDN$-%Rr?(!ZRa#JZ?r9Bq)G9B!&GXyd~XuyiOO?U1cIHzrwyZv<~ z9{NaIZR;5>$LQ|QPWxxiNaT~;cKg6ww+?RpzkH*vBhC;(**Jg6Znl zPfX8b9E9|B+gC5_*Q*zS&wqTP3raV_M_m0;PTS*V1T`xV<#uBz^D8VzbNG~>QDixg zOvfPLF87Ppm2)$OYMTh7foR+4+kHlf#+&|@I(>#BS_->Cs{NIZ%yA6{edw8)H(ql( z82x6VzivGE&T|N=Y$bLUJL6Jx&dK(iZn69+V_w2s9(ps1=)wp(I}QYQD=UvQwZp_c z{z(EI@YKXal^RaV^t(dp+qZgFJkjS~gF|y)KbsGCx3F!CJs;PEO>+es=@ZC{ms3PlXlDMaBp~m*D5@Y#jyN{$l&0TJ6_##QRV|(JW`RiKqR6N} zOM=Kki~OKm4tWe&h-9pav>F9_dEsx0T$1_+h@DB`cN~5BuQO*)H zEwaEO=S!TWe?=}JwF$^C0L&p&$ZiW5kvo>D*ESNO`-{m=(nW23+W(e&$yE>wI%r7zPZqo?>t22 z89wHAmOT=*`MgG}5giUc$o)*ow0EMV|I4-pFy3_Gb%zWkYNLI^GlZ;{$d02i=f;O(R+dyLM&-@EX|_=1v+6~5k+{&e91RQf)jnvR8_(FGsA@tuag zT4=ZuI-Ro7-wMDg_OcvE50T6(ejT@kf&Jsw`m8=llQ3YEFBt&pjUdzy0Kw0Wj9~o{ zB8Rc0v`=b6s%Zu2T=C=WTT6UaZOe|VE#+?&8m*ElJWdQ^FUL5l!?%nWbVoSFXtjQO zClwiST4Ga9-v43KJ&Rqn)JTsPbI<}*-Fj}u4?70V1Q{t;_7v(I2}Z%sZ#?%6>p?T4 zfv~bk)!a^k&R(8S=da6VJT`70LFYU3cR3zj*+8>$ZUs}4$X%ybn0>;X9-m0LrA~d? zU=a}7T${X@u2R#~$>pCF(dqg$P%6+9M*Zau#kc^J3ZuKazS$>)2{Z--e8lqZRN~wg zdBs@_+r4;91mo$AJf~`1A{_0F8s3aq;(WU&kD+`YWs>ko--#|wdTNNRdH&c&0c!06k74Sf~CZ=!gjs4WVbz5l5N zurn|c7c55Jg^Ip85cMX$z~r{1aM-)y8wj2*YiMlT*qw_(zSRe3fveaP&RvsrRrHzwAH^8tTIV1v#w6OtxzG*L{dkxFvBnH>s z#@BGsJ5t_wNFqQ({mI<1KJkx!x9r(=SPQE%{u)a1P-Lv0xue?1p_ls}_I3tyVux=L zFV(}1ajF^8-=mY1K$G%!bxj<*MRw+3pL=n4*ct3uXFa6}RzQxF+tyy7ZJohgE$YTh zF_&l9Oz!6n$CLhOb2$MP;P=Wzkif$4I(CXh^4w0w>NA{FxT%i}6w_PkycY~JG?=n3 z{*`qdd|p?SFZCs%ep0uG;G}4dMYw`N^JC48AW3$NZWK1yku`imbw7|~?{$Mp`01g) zWL_U7M}IQBJBKX{#+hOcaC9(xOm3@WqTH@DW^vZEo3W!>`m^efFRx+Int9*y6dmS! zYG;aUE>L<7?^I4Oq$2Z(LusNeWoDR~cn+3HZ+T_sht>I|WRJVAm1(Jm4hzqaFpUG+ z%HmJT0>TZ`WWJ@y+QW!_1YWU!H(vOyo zz3w<0P5OOCrU)mo9V6g)c~77>41S?Z$vTqFnNGM6%1t~k5d2ftE!TYRdh}sunR0r5 zF{3iAkFnmAW)vG zFy+Fs>;rkH=lQU$M%Z++d~>$ZTgKyf7G*Rr(BBY$%lhOSOPIDeUruZ;c$^oDersg1 z$vc&1Vn??H+7~-+VWV&Trd$XkJ_d3VAzeX&(BUgFuZSK`-vMTia*3OZmBsIpCyz;?`VpKHAL&L&%s8SCP>IwLiBj{G=bY zkdQw@x?=qV&xf?k(|-mIb47RP{ZyT>)DR#y?tduQ{h)=v&>gu}UVZU}nnwp0EWI+E z&W-;t>Wajn?J!F8U_R=S^*Wrll@0xoP+DI&bFo%!e9?<8>`E?YTIGB>R=1R>{U?F^ zpZ>3w=jx9brc#mTJpyBGye`-&-mUFuYk9PQ-k8H;!!V zJE+(Vp3nMt0oQ(5r&JIux^z{~uH?#dHJxaH4Io<2}C zKC-3}j~b%xoPwsDY{zzN3=Au$PgHBi8w2L|^!%BOQmiTN1*|j)tS$l|oqFUp3|B|r zw(_`Y49XY&xJjQ!jCv0lvIr^VIg{kgr)S|nCzr0GCrEh8`f%PWQ9+?BlKsN@oI<2G zsxT)kCi3dfhr)gISAJa=>PKYbnqh3=z?Te6umyG5JMZDo%u1t{wsISpS_#&CPgCj) zUa4c_s>dFj?UZn9ujGP+h1+}KwhzOvV_m$|VSFz_b4}iS&U$(sDVO}ixMz2ir~5ak zuT(!nE#e3fJz~Y0XihS#H|QgYAilqCkP8W#(4G}y0w4fWx!u)0N?IbpPNj?P4jRf% z)64zU__Ul46U(d<^V<>7@cOp!u(fUOb`)$E9JU=H*1Q?(U{RbD`5v|gWeN7^ zq`L5&sMhYZsMioJou8t-g(I} zkaj=X(*sUjF} z3aPc9M@vC0z$SJ_2xl@&qQtbO)s{D^d zgVvxSC}TUU0PnzMg*2YMA7MbZIkf)ea8ODBf1w`rH^#|me~w)ZXPt45`^q>*+lJA} z^4LYZ{PU|F@rfR&?^NbQqScz^=zUjFe9`^LaaZ8$bCAMnRCU)GvMQ(Qt|7?oGOVB> zkiQV1RIFiUxM6%;nA5#x*6pJyF#xkAa*IOtGbl&#AZ>uZhqK;ce#wTMb&F$-S*No<_O$;c;S#5J)b#|ZgpU9^hxUmd3ay@ohr`85Q)>t{;6D_xxghK3Hr zR3IFV;y6HXvduw|s5KK-yLOJhQ`$+!Xz57Lp{6EX@dTSr;}XA{^tn-{ec*+>~=iRlO%+1d1k8b7k?hsHs@^X?Eu$y&Yhs0Glu zt7FAtQk(}4(dj@EWBcelYkcl*ha=X{<$b81;+F8?|v(mV35Zz2Mx$= zQaU6|5ZX_0jBrnpl5>S;Q8D!uv!oi|rrskkXzPAwxCL?pH&mn?S(Zom*8z`f2wE@t zLniByQ6813s9U@fMlN-4?fUMe{s4Qi-Csoy^t+`h{#g#ZsnlP2Kij^a))8&mdopflDH0g4l<9e*u70Xx?pP0EN2x{vsNDRH-BIsvy>KZM>r~~e_ zv3pFZ%P9LluQvM$-;i3g4VMZCP>5TyCAmXH>1VdXWAwVv8%s#chJ235fXeWgh%$g5 z*BDx?==a#JE{xkuP6Co06=>>BH~T9>L0+k^X}LX_^B-JSyyS~y2TptZa=8fKrU z0SBk7skB4gD;<>)UjM*6Z4{ z6?k*nT!>6xGY11hC^mk=E>*ME&>|mx5}p^1Yvh|Tc>gU5ZOiR=*r^mDS+e50)2nza z#Y}~(D~kJlOMlUe3uk*IpnAs*A-Bj5`t2+~dDAw}JvD02Qv{w#@VAQiohHSYkLAYP zXZ5lQVXT+|W7h7udVhEhr@smGR>OFXA`pOk4y@!)S7^N6DH7J=8^O?Pi<(5y-0k2m zU%oKeExDggx&WD?S--x2$w;?5#pud!o~zoC@d?v2kr(XfNqV~6S+Hqn$@Wyj-G9ZN zd3d-c=6=Txu#Isg9v^FWJ;T14xC?=4F}Xt)O6T3WVl)+f;8?LbT=$8-k{|(xpZHY| z1+>YL8)(@A>LK4&_+}7&jf5Sbl2520tE0U+k-smYKgQTLO z0zmp(hf6$PPoQa^8@5tDSB?yK5ls5 zk*Bz%gc?x8TzlC)@FmwV$D8A5p4u;LbBsaQQPBq@Cpptdj>m6KJgAl)eN+@VI5Xzr z`Kpn}KNjx*5M?sVA#Y}tV+e%KAW~)4$XFGxBxrY=5w-h7G8& zP-n@P>khL4zj2rnPdn)Eyg8euFhGW#zw%Bi98k$^{&JBbRdaSIy661kpbLhEAyM9B z>*vy+Sg;%@rzPavuN8>i;VY_Zd;9VOhw$*NtgI_@eoAJ@Ohc=vr5B9!1u&dQ*X7vf zJBVowjq5dS>R3rvXG)T$<}k+9A0>O1l>lDqw_vP!mrG|y`$_C?HNI6>v=4b?A?||7 z%l?xkM`TU-XB_PQU=hZ&$76!2x<)B1qh5yy`PtO! zFcJwKBS9#USy2+w+v|^eDQ${yU1k*YhJ&qwSI=n&W)geyz9>s&+!ZVthH;c%M_We- zrh`t-V5<$q@mL|qRWA@wqYIlSlNY(B?{Dth(QCt}r}1iNaZ@_;90WIAK|wQFVBDdN z4=IYh*^Xq5S#pgPoZ+L@9%P*}fwIbiqS7ja7r&sKEF&S8I8A72?TSi~)zR9)Qzlu$CA-S| zcm0mHg}hu_Mrr}Yn|%GU+PN7`Qqwwi#TFG#X0}=S9*%pAek?=EVbS4efA1x*B+PQs zdBaV8rI?xy`DhSd9Xqdo5Za=DY*f^oBl{UONFuSs9(R6ovqP^-dRUB-ITOSzrR$IK z6VBV4U-GoqnZx_;w?LQ?E{b=3%!yYYP-%$z)nQ8g(w=RY0*2XK1CLc`b)y-?J@6IY zzA-#RBr1c`lW=zCD8ImJtE6Wh5-0AXlOR12xnGBz{HQ=BYDp4! zbh{Jy5P;P8@fpYdiCLE58FxjjyAs6hx{1?p*U3d8Q6Uf}w1`jCQjhW@x=ZMw#XK40 z9gbl_4jVz3Gm{m?TMzvs`evNgFsmg+x1EAAa&-)~y=j^)PIL?Q+OECzVRTBhkl@Eb zZhn6DPnvkYQG6AaoW#P^#OKR4e>*iuD*6IF?WfV+%RIcmQ z@khkSU(e4O0%McDr~D|Dr@ss*T2bz9{UdnwgNdztdF$P8Crdu5n4s%~_el z%zq4^Ml81dax9EPW9i@Q4w_oD%LqqU#-a4U#KZ=kkG7Dx9qugy!$K0KlIE5)>=S}= z;W7Rhd=50e7XD$L$IMty-=#DL4WIzlnRQH%_bBqp<$|`X#k=KsLoA>Y6wdtlU+Wyz zI+Ol{XGN~LL?PZ8DUJf5OyUjQFnh40z5c)nP!d9*!nY%=u42Ug#1A$QQW<((A3!q- z-1ANUQo}2VVAd*$;*|ywjZ|`*kF?xs|$^x*(XV zZ{VhXWA66HBVv+v^Hgni{1wo4XXt{U)665UtNrezdCF`o(2$Zxho?6LUaR=c^n{L6 zL}VxpZ<9;4NjNI6Hi0FV(<7TP4WY`cv!lhL5gL>-5fPD0fVF0Z>hgJE|DKQ-uAYnd zqLEVyJ3Bi-aQ=JxV1J=<3v*WP@3v4@0H}Wg*n*X{wL($q%U~f;1z2261JI$_IXPJe z;K6^=TyAvO`{C%=)7RHm+>S6>3m_II^u!;Hm=k^@XUK{1Q6+=TAeT6)hz?&bEUe>z;;LX4=^ZBB>Fbr7O zb}<$f1WgkvWqNJJ{?omf3k%yiXT;Nto6PQHcG8bl{rj9*K=h5ziq?h zhX2`x{Tmh+8`lq=5oVJZ?6XP{kCv?#60!uff4iyOo#msHZT&dC;v9hD8Eq$tIP zq?Ea|v{3NzEf`+L&Jx&_m)Gn?zM@&K#{0#@QOa@fyN3U@mrL(pgNDbm`0ctp)%id5 zM05-mvD+l{jOLFglS{g!r=`Mc_1_jUZVfijBr!O?`Hf$nJldQm#R}ili|KOpR&zlH z7st-Qp&1Cc{#sv53kwS_kK1G8a&W81U5PqA;62%$t~3I7?^6%bc0S^Nc5Qz%H)|UL zq)&9w{WpN5Xy!b3|M!f_zT_za z#|~CCF*N)Y5h0TU;%`4QH`v;GaA78e%u zO-+MZTfO4mNc?v?!nE>5$_q>+IO892pjYpAH%BVIh&0-o?gfDE%#Vv~Ag)xWg&YEyO44-d(z2Nt- z`sr^$G60_P0Uf7ORFwcI6c!d0MUTt2cICE)XO^KS^*1A}3Jx1)X`9aPN%nNE4i1y( zES9rZT^YSf;e604d=4Wm;kI_lnS32Bw+@?IaYVFJ^Z11|w$lU(OB4J0&0l~^{uT7v zo#RG9;a9cg7_*E(XtzVu2|DZ2b9B^;&YK`_d3!yyDW3Y?(wd?cBdw&|-HzuIY(gyL^OQ;pNR7|15 z$`-oK&-I%;w1}}R9Yx&^%vAU4?d@^ z;N_*h`~sbJJ;UeLiYyKkkzb1(@1c$<80^v90u5Dg#H1B|+w%`WmB$@W7^mtY+&q0( z6zgW;EDepbQg2EW3*sN{u+&LPG!gU-j;ceq>xJ{)+dPcf{=S19!s|Oj_Ki*PMc=*}VsjJX^1U z^WTC?#?RHQEQw<1{m^Lr`}||jF(k+W8RImJwmq0>1w>zaS$>r!Q;*Pu8s2qK`&*FE zG9c&gw;%T%i{itJ{Q32Re(I+)r^p}ZNi(*do*;w!Z)pL%(Xh~)As0cV4Tx_yw=Tq_ zB(>o+U+bJm$$D;Nx8Nn3YyGiK1Kud%?Bn&@&>Nlbhggyr8GoF8LVT19QL~w;-V9zW zBcH+i9UY(CiWnTFkVqcoX@W+qC$4SuULy;SiE)@Pv<3Je=T+I%_=`H+J($;`nY#3Bx!QKUx z-i)%^eoetqu#+uDKbUwv+>@MEA?F=i==wu31kc+VZ4tcgB&igx_&RL;<5x$ zl=9AOX)2S9)hzAbQe5uIMCNPkzXcyf0C-YuT?Cn3T-|JXLHrSxBj1d#4gLMhrY1mSz4*F%?_vEmk*Ll83EY3h%;u38OpD$;u%(zU!dTp z<9;B7aSjsU3j4kk*sI;Osz39|rF>gI#raIS8n3qmDPSUDh#e>!LgEmi9F&S8W0BCy z2CAOlol;P+px4(We%&P!{w?TBYZJIE?85lo0t%jbNXk^fsL4))Ueg($1@ng(I9&8a z={+ho?x3nroeci2iEjS{lXJh(Iv%TtU}whfFOW`qm)^1u@L?-B`dk{iI2QOH3*Y5xuNJ!W3sQXnz1a-4*TlAC zVaymh&hLrKT*^p$b;sT!pORP;g?E4F^o)-cK zB9PdZcR9WZGak9)crlP0_-3znB=y+L+>+50gg&!^c}c_UgR;r-BE^Je%z zwE$p9XbUU0ojh1%poICEf1krpBUBRJNBWa@FHPNU#>VG~Kh>1b#1ZQOroSe+=F3bj zBFFE~4Ix#?7LWHb+;<8391y!S9@5gi>+l4MQ4-|PvMcg3a z#nX2tG6LqFph=W*awB}>3%WsSz_KLVZIev8kZ_z*Z zRVw==KaPu=7|Va61#3%Bp@>~SJ<&P5-kHBot(EfX-S%ls8BKeUiM++>AJ=|IAm6+i z;&WfkcXy52lw7W;F>pG1bnm*VcFZ6j33I~3O0^E78`=1aAg+m8G36w~qSSKJ^>9|u z?iqItA^EF)2uoRiZqy=|^^X$@*4-jrfpKQtBiuNB2dwC&ri6uJRy+ z!H+ggsVkJbTiYl`4YL<|Ly@sjWKNWFZB{)mt3sWHswh_3vX;CU+l%ooRG*??_2Q18 zfMkjfwghP;xl-ywM5cY#g9^z#&;9daSR-TZkNL3hSrn+gj|Woab2U^Pp4uj(Cs=r9 zi;D~raR|$FcJ92o4)*_W&>URzH%)0_1Hs2BGGn-`R7dX>Bsa1tJmj2%a|co?)y1^iF$_?C>C4}z?(sCd)y6bj z&cAwS@HwB9^1k`?5enOTJ0m3Qp`{LuyTJ)f$+15Aag1vC2Vp zmdsAjuP}9d_Hg7tjoxK9+a+2u;?hE`kzUqq>!BU95kl3|8g61w(ISaCG117qZ6zk_ zib`t-7cWb`TjZ$l^(_M5gA;1Ydx zkNN&v#YLMscR1;ZH<;Wtj-e6$$j3HVrq^{yzEnb6D30 zQVHDtUjAT>tcZ`R?{S)^)@3KAb+>_CkhK>CIA6dD!u92)tUtV)1qLzWvH4eWR-M-5 zN4Fnc69%@h&9aR)L`MA^b29sLbQZsihwam7SMm)Y@onprGWLszTT zmU=55G<{@$ZqOH&bK3pV!6x6b;gix(w9sX!8n$>YgT?Ckwi0&C=Lwnd;MZql-8fglTiifrYEs4v zn0%jjx!z7;tTIB`p=#)jXSEhy#@WprtuVpY^br#_Bwr!0!btKxS(NKtPTErDP%Iz1 zUhZ-0U14vosRdhePVrfS+`Li6)MnA8z za>C1bbFHeHMp9GpfUtDpz|rw|;Ue^q5{L=ZNog4ZvpeuTQKzs}m6W;{t4-~ko%`nI z=8EI5fbqq}#Z&Y-9|Em>LU9wsjrsWL?b0@*Hjbi6;j#K^tG|^F8x+6mJ&DHCIVKJ&LwZKXgZ*$ z(-Qq`1Qc8zF&Pt_U29E2CdGEz zhyo2QF4U?Y_>+FOPQ!{(JHLF|e}Y;U-KZF6CoZ%Zt>quemQ^qxc&Wp zG&3X2waX)>cNPVc=FSjq0a(l5}#_a;~D9+Bbz7Ncmn z4O3Z#Q^ilxdsx!M$)L*a7|S8h&|P0GQh@61HL|JqwG!eS_-U!+34>r3ywqyri_)EW z{Pl8Z>kAC{bcmd1A_$||y9*UsQScH2k;VUgS@H=bfN53gjr(+UhRjd4(~7zwuKxXotaQ$c=--0t#Q(h@@QkB8CMQ~!q6A?Srr*N#c}4)NMG}ARU-b8H{JNK%_V&KBFJf~2hFQo zh^97@bWsPOzSt{WsMj%Dqgfr;1)1Loaz;hjP3WbeW{7Q|AdgbzrfP!mPd=uMw>XNP z?tFtx#3dZ+Vos#6**0o;Qtz2|TNzzl!7iSaw|Zo@qe5;>GBA{ap#J7NS1p1&5g@0D zH~6o7pjj;cuWplb{|z(>Ou;Hok){jmi)9ZB3mx_sZ-LR?*Py{4yd@p4sBitm*Zw<|Ai z$d7B>n_-dcZFH1x<9j5;+g(J_#P@&p>FLLpJfzp%Bj9RD!$u7l_VY3Vr*6a$%ID92@o~bg}IkrY?y#h9jh>&vRfz+ zz5Ps##y9jAh}E`h&t%xY;v8vbR=+*wTDORpq~@>y1n^Z8EZj}YJyu$~U!6ndb_#qyeKFxf zl~zQ4hv1NN;j=H%luJSTwSDu1&g(m`libb=j_i(Yl8muhlqnA3dat#G$53dL!_+oz zt4&6^%^gtPZAKmYFO=qc9z#y%r>XleS7s2SjDab+{#m!)USv*G0RC>`+)?Gh$o0|G z^-m~hkiKSco-yHhD&8Qes;v{0cc<>m@+yNI6MIXRg5dit&Z@?(s0G&h6qpek$JZt1 z{eZjV4Tl7=`3hpm4vd@nqjmNKaVaEY!DLgcmX6=fs`0BEUjqdlQz(bmpP0!a;^X&O z)gFVGMjji2(Mc@zGh4^?Qh5K!K@2Uw-lPzcwO!E3y}w^SIT`&GHO?x~Hs5La9)md1 zh7Cwn{Q7s^y>xf5!F-Epje%Hq@F~Qj=v~u&tFYpw#|RGl2hQ4!x~Vs{%Or0zHNIS{ zBaAn+;vK^>?fzmfO~vnoWM(k0CDk8=??L2PEEiet@v%?8>0jd|j^p+I9vg~9K5WKe zr;LpH?9O3Xor!i<;VKH{HG@nQ#q1rs(2#_?)VAUDUiLZK1=I-AeUz*_!t6Mvgy8FT zHu&hBm%}99GX89&oxfD*@x{V%tby*Gt{7NM=8>#z-RsC7^9a3#P#P@^1gD0i~ z>1ls;byofmHkMhU0CEo)ne#S<6F>(*^haplM#i?D$PYF+34DmU(xz zU22@`$(Q-&QXTJ8kJGoEjg744xdf(ySquDh7Xiok3#XuX8Py~WB_$yd5g49~NI;-P zR{`=DwV34j7l=YPHZ}%80@;d1rJ4oB#i5s%|7x{K{NJrMmB8QO**6COyeiWehJ}G) zZwv=AOHECwz~JK(atktH%fB@vi;K8GC=)6~#36gubb!BQ`ELXH7p(vQllOYH-wbi- z{=x@lL=mD6WhEqkC-R*PNGJ|qbNvTC+3X|JG5`C;KOg*045r5XpPG;(e5ri9)I|2U zkplMW770tUqOZ_3mJ}Py`Wcj!`HT2<&OYTv_?ssG1La9H?%O;%lCrwWVRTQEXrVw0 z<=qFU_&(7758Os1g*&ahAsjLcw&*=ZLfW9M9vq7_aJ95n)V?!1SNZq!8rFbA@w%`= z9&Zd^Um%Ymq;B1)BopJdRysM}N*b*!>4ueUI25*-N5i`@w$X&_Eo+yg-~ozaKdPRA zBBckX2m8eGaWcMQ)9GanE9fuHff5*r)$K2uSo11}S;nKeaCG2uuuC<|qm0hz&<_c6 zG$)C^|A0^{B)1qHhsRb`U>rCr6B{dvXo=&MQOS;OuJN98s;X*W#$zToGu{J(UVS^W> zzYM3=Csu=ET4FL}ZV!vDS#{=%-Hp(BJ9ER2t>8jGg#B-5iZj^zjnE_%;@x+$j`IFV zliiBNDL$pgN?{5*HG5ibew)U#uq?~b-Nv^2N7*kL&uVz;1W+=r?@0YdLj=1BYo}`k zZHxt(ro=#>3^YwoqO4R*XmA-*v)&~Oilw)J@6texwItpo{g^zG-WIpVlnWe21crf5nunjl5TG@Go>YFtvBGR10 z(WBjpK-6Ikfg8S?KS3t*hx_m14CavOp78bVFtJC}K-twGaeu0R3C5cEBT;Jl?%!eu3>>GvtC-pOoz)NpMF?HnOtPF9&jU>4zY_cPVnD3}GlpFml#TA-fx zn!1*cmEzc=S~Wz(B}-C3k+~mQ`oq;uWLqirG3+Smzi^u{egT}`pali<_dn&#h2QN+ zCLzNq>&@D3{Fg`&Po#30)gk|#M>oi$LYgm2IJQa6yLaG5r(u>EjX{>h5pD437s1CAqfwmYoJruB z9`VkTePD~_R1GA}3IE_ggMxyxTKmVJyR2>lXYFA^p>Lj0kwZhr1SlrM#KZ(D!+4yJ zT}5s%fEQEvsIaJL0}wak;^j58v<#EXtFp-WAIP`n{~7uIIJ3n13;IhKbeg1#Z_Lfm`1zWc$K>`U5!QEXO z*93Qhh2ZWMAh-p0cMtCFPH^wwF2UVh-zGWdyW@^=f4uQz|7qwR-MgxG)vC4TS~aKa zDz=WaDsG9<-&Ep82OQdagh|8-c!{7S`M$ccLZEEe2bcEcHXUR#cKXnZ`&(;mv&ep? zLc1w4=F**U%S+nqnT0X`CAE4ep``3}CRt;uS{!27f&eI-{XJUHskZFNrly@e;tLwi z$vYH@+Os;8_2xJhqLU!#_vH@!<><}u1>CNi&?b!YYwp7gwNBIP$4BT4Mr1&=>LJPi^ zNXqn;uSMoY-T2y!d@4s_sK+?&U8bo3oa&<{Cee`ga@9Eq(Ilb`<@Ov)uqNbRi(KW_ zvGaB;4ppvq>fI7z>3?5hdvFvW>wadQceg!H`rxSNjf8BFe z;FeqFQF6GaE*LseC|Oj}Qj;~>Q)4V%7%x-hT;N=oUL;Hmax28f>mhn+Loe`#vc<&? zJMuEIbv@)bBz**&&t8oHlOFNX3_GIzw~2H8@-2*ZH)|wQdy>a^V-{efT9f5>x1IQ#*6>g3V?+M{{nw+S=Bs#<{WgLbj!3OJl~N@6P_{m|Tr z^X95!hW%fmKsYeHFkEkD?M9eyKkBjpG)wddP5CNlLYh^OXqfoMJ|d#!VMh$#_qGS} zq~n#9WF2JDk$E1@l!iQ2^z17d)Dm%!@lV;S34`e{E*MXjKZ2RU{+kw&i0@uoGVRV`-ld8c(om z>gCs^Pu1*bmsQ;u6?&b%r{WT=h-b3E{zW8@q4>BV+d|h*MdgNZ*V->G+F-S&(_1_(NJq4(VV28{Z)GGX*#qwTF!n%z*m`Z@GHtgaW5KiznJpeu%4WH>4)b;FP z$w>Gq5zEuaV|zG-GsVxhd)n;>+{P#iY;fGnQ+Qtc?OB`^WhL_xq-I01)?=^+*N`O zWQfPnK2$|`V7V@-j~38Y-W zr1`0Yn)e3F5^UO3o-w`7ogs2z*)>FPxHReCLS$Ns9?pc0Ikpb=&}j6`PG(K2AQCUV zUUg>$7FySYK{6=mWO-mCB{hfG8!ps05im^){lR#{z^9}>et2s*n>ZJEIFn_-r_xrF zzb}W!*KAQ$Wfs1`jRyeW8DK+e3KyJub5xypcxOIei{r3Ir0=Z^`<90bMu>r73RbQQ zDO*D2 zfEo~zBG-X1YDQ#VwyJH_A77h_BBW{YxBSBv$Fi~`k1U;9)7i z_4s`=eR%%G1jhH|2j&QmjQmL@LWVB}B;`|8esC0_J5*Yff3vNacOCq%^j&fc~G!}P?1`VJ))?*j#kF0#uaz;j16=( z?1@aA!J$^bep=#0Tb4cqF~FPGkfjv5S#iiQ4uWb8>Bh;oBY8)l4LG;p`lxWL9rle| zp#}J%tQ^IT1Z0^9;m+{o*Sk=Fv>oLvy;6^Us*zz%dbH&X`+{@jey#knhenX`p2_`& zikH{OVo3sQ8~2F9PvRYB+)+Kd_djw1$8X=_5)s&#&aMDm2vK$)9F;X}HFx6)Z~gaigg?O_NgkZ9}_`16pNgG?G)MrkNk$R<@)EeU_n`NXv|_umT^y9u1Ow6HCOW(8(&k3p%oy6 z5O~$UAsn^mg-x1hjL5Nb+k`#f>RV!g&(PtGGH_(hIq zxTJV(7C9}r!;oMf*B#dR?Y+x=Sk#+he-x{L|BOd@l7O!+A-(DMpFsLmz}F=p40V!M zI2Lat>`fDB+rcC^qy6=^I~H6St=wb+W1PaF{e*5puZr1Sk)@% zusB@$SUR-e;H(M%WBYD=%0cv9`sdn10yDtn?I$6?N9{hP9n2JsueL&i$ zlz7-+ZK|vQ!$HAOJK3iC!eL=lpF1Ng^JkG&LpOjSnkCppY`G8BnpymwNzRZgJ%JPI zdlYoLA;j8p*`e?40R6WX;N=CTJ1D51n2^+z9LbNoY@Ub1LTr(uF}IxNn37@;Eg!{m zkHn(RmNOV5{unKXLNZZ#cA-}7z4yJWbZj|!z)Vo-^g9cJ$;L&$0qn4lGnD8cs!g^I z!Q*5-E??NsE`mhJggE67%@q&!tG<1Ar%mN_!MVBQ87^(bIyrV2`34$Vj=lX18df<^ zl~m8C_{f4cuyUGbCBYv*8XD%h{q!{jZ`nDx9A5g~JZML{K9y-l&QDAT{S(w0&k@)8 z;to)WObDv0t8+Q*e;^?t0a%?NAzfFV3iI;(0d6yZn(`gMvlU1U+ce~USRwlPw-$xZ zWyz2`?;z}Ca|Ke<*!0W{8gK+eS68>2qRR%Q=-Zsa zK+h4T=i;bKcK)l6SUDKA zHZlhaazv7tkGM4ESwS0>ShbD{Pw}j7#=d(QaB9C5c)7avWE}Af(BVVx_tx+$+nv&qL_0S9VWOv6TQZ1Rze*u?H=2ygJMV|SEM99rd!A1NGLr#6d;ap| zXg2REzh{NzfeV&n=uGDMtuW9zCnh(Mc}Jt!f%wp#EZCHK5b$U8e6Og3e46g`OxY(Y|eKf~X>U$P+^mM@y4K>k!8_|A7 zE~+4Zc5v8oyS7EHz08vdQ@+FfY)aCrLp1on>i&Oi+Nrk+55PE z^468mm;>+wdh^v=Q4egyBEHp$!nPG6ILipO4*0Fb9Jop8!A?hjObvvRNP@%8&3p_ z_HND$uZSLT{i>HW97@mHRPgf-++fC*VZOk*cIw4($TMV|Q<&)jIs6*wcM*h18+a&t z=-8YH1^eviNJqn(=WyXP3xPqkNvO1^U6huckw1Br^#<-F_lzT*r!479=RMT@5S_s5L~-J^I!pvy~0mYm>RrJ}>p}I-d8XU}CmD+G{_LS?18_v$F7}9Ts+k zrM4TPP5L~C*gTB{)fDc!%`GegBdh!$%456bbGbb4qR2;dr>8#+GBsFH0)0K4H98wl zYU79hvn^8uUem2I==4kw2ZTCcShv%-53p_sr&>`G3>Z)X`7xOGKMF+kho98dlZE z?&qrH8v(7Vf9ew?uXen(;){9Wjwd}5RrOpvfX#SR#K;sDDnOl)h5H0Nl& zvea&-d_AYUuhlwnXM?`#l4?aHB4P7&L`!6s!j{l_c4UcfdSGHp)PVfT})NhDA0 zYmF2vPl$!E8RoTiM|Aw=V#UUdR<5+IVWGN6?tcW-ZsXR!G3e*i{FvJHj@Ux$HCZ1C zgZ;_68evDiTsYEy?Dlay7gMwUq$Mawll331A4HD6E=@1SfkeHrf)tI~HGTEr7kL;l ziaSTTFC}MNB_h+^C5S)!20^x;p{l6^CLB9 z6*jM9g{o$Ou3AT?w9Msqjg3KIu`^5`oz8P<_b}j`c_{LsUlb zB2GAoi-SdDY$}+d@i^lxmR|G%&=GM(JZ{y(MSkVDSuIws81NXS2d{hf$W!ymBoV>R zW0qgd9k44n?|a8n1@hE3WzPg|*pS+{`5Sy3V6C{)HRI`={Z6)R+pzB z!PxU(>l2hD`I7OlP*anZ&+Z)EbL1BL3CAA~puXZ0dE6)(=wNOw<+FYMIB>900b(Yy9ET7UQJ#Y13R z<;SkNy`_~*P}H=Iia3$6IiVQ^EmOwORAq>#HpkGo9MP)2_9yFKf0#t%epNu`#+;Wi zQ=BV`g-}iI^)#VnjM83_L#vmdhwb~DlG68b@wg8;0*Yszx4NQ46?n4dxLoJM^X64o zpS{s!{U~Ns=hsX8mW7=D8uG(3x6 zZ!>693`@Uk+}-QcFx@C8+fccrM;A(sI69^`0&JHSivO=%IY?IrIe_~VkP`s7Pj7_d zW}^W=4%{_#T+Ap^4pmoI2Mr60j*UH6(t&kv{&0Qdv7Z?g_1l05piH&52LWG88r_yg zloh!z1TD$U+Voi#RG14+WR9j;J-8|xO z(q^~iZ9w5}viEx&Lr=3KCJBqP+Bw4+Pr^hH2#huTK-Fw@j)s^-34nIET5O5D<69j3 zorkQu@Bn8bXTlO@Ipz^FGzWcB6^OG?;q*Ni_n>g@Ug=Aj8Szu3)?>PxD{n>XTG#pI zhPy*t!x^M_nug28%|r5Kr1b55*%MYZg7sOl+@lGgq;whB+}!Mq^e2VgZgapJ=@Vb= ztvS=zM^(lOdJ_wnGP+m;dQaovpa8%(W2B=27$u8X1(B;4ZF+aLK7xboH#FxvV$Hg0kUil#X%BI+37Adi z3j398I@d%h?9zu}+(zZL8x|-Yq;JQVm$v=j)-XUvFp`sjZ6h3?v29!w8T zaQeb~x6&G7bI>^B2{Crz+BnwrJ}V+zrd*FdU3G zvj^VC;SmVSM-SxIwlUru_?&{5YQ|?Da`C1cThN6sYgz7!1Jvb-g@{b??K+1S`@WZn z^)mE=+2is972$$h)DxZNUGloBcjOB(uzYb+eM zX|h)}rad~&Q7o{6(>oT=1gpa*a>$(i&1{K}P8DXdbo*|JPY+tQE>mGPadU{`vwkioX+h_V9W71o zpOoR!-G3WjR<*lDVuym93~)Xs*WCi9SGo;@Oq!;gYd~+kiUPByw%hY2IM+omtanl3 zvQ9O|hO&62LM8As7@TkobH>v3s`r2HO@FVy#=5&5UE79bbF1BrQ z<8z&7=z4vkdKW)j2MTn#*k-X=;lspIahQ!xbGb-Lthta9|K@NwviHZcT;bS0t+YvE zxAC1HqHpNV*!Z{h2zYNYY@Dfq9V+vp6A}+yr0Y>q0Sy4rx!jC_? zY8rI>VZ(wHXLd|lb$}Ft!?VhMzU&=t?>(kwnZO&bNgDn#Bwb>wMjG@sn~eSguN1dC z%J$g4>@`V(C|-Jd2y%f5L(HuV)mZ$gB~yNDoH0&lJ8nFA@ba~P{lU*536s{zwJ^a+ zf?7$L_XuRtolQlpm@6 zcEWLC${oWiu}*dkR?1+HS6>hgo~8*2zhwKNu4%5$3b$rG>|{L#7^fyL0j3HP*hIB%K zt%$B5YDcTVgeGH%&cKQ=ry4?&A6shd3RPqvt7zQdXw3;%KLUAl}9rsnHSa+Q9!UI@t|u@Gc9oA zF7sMP-0tqu_1UP)o8ZtaQKOJneW^Yqw>YR5Y^67BfARHE2ov7EA*$sYA$LUsC8gu` zNH;ZQQ8sl!P;oISrd!|Xm*m3{H5s`v{SCK{jib=d#UYrnN}K%cbFqGB%B3Tz{jI&C z%2lyx{!NyHTDv$MA=$lF6|io6JM`@wXxwd|S9gsiOvwtEpjq`T;ldr*)6C)i~s)hox7TsKawg=tBxL<$twWUOYfk6+)C|ilKFSI=6LzzOpnCV;l`{I-lJOUX+HyLkRc0*Aevpc zz7g!Wum}m#jQH`}RwSVQw{v|&a}5?VOrWiOQd1&D5E(X4?}&f0JbL5VJ2}Ek8Hm7d zk@ET?>I^%MUT61`A>VuXV#PrwNZ$b=D!XoG7RyVteBWsNcO$y{eiR}|d!sKb3^FP8 z$>-Gw>+79$7I>4!TlWN!x~wpVc6qv0AJy(Wk7cVNVzYFy%0Iwkg1@Kc${7>rWKhS< zBt$6#Bb%09s`c%|_Q)wYO?DDXAQA>enK8)T94Yh58+5GBV}51X(tuz|Yz#th70eIl z1hB9c=g`H*5hMkGy)25FZtR%CazuC$=o zg?hCKEM`32b!D!F9as=?KnheLuZgjY1bk+CYv*n>*;<#RfXzFSCHII02zyT6vp3do zY%miOW*D(}kiKw-pW!F8AxQKLnw(n`KxADws1PO=U;|uGMpQ|wRo1JTx!pTR7GxsX zxzqMcoX6AHzOE8F?LFs1o=1N`d}&~MM=}C>B%i~OGS)Tz151xlY4(zF_giK!jEE0m z>82A%dQOH>)rZ;>la`hc`WXXcvyf3;)ozoLHC7P%&ZJCP~t_9NQZO6 zDvBQzl&eevslaDuI|a-5wm%ZJeYoW*S;+K}QysfUC@MiaoFb)6S>!{7*n8C8TNKi} z=G({KIVvAN0CiND#??P}DRe{!#?pGzH@WL8-FDE7b#|1z1H<0=qqA!w5cM|(fYJn< zB07Km3B%*`yN}KMw9D08HV@YxoXSYJGx-*M^!GNF)+mEDZi-K%i~BcKlZSWuBH!Tq z<vRk7&q+Z+Oe8ra0hm+ab5d97aKr zD3?-!@=}Z>@l{($`2!!f2@Cwr*8Rc)hCT{ADkfu^_|-XD!blPnuddh!5fAmzg#Bdt zH%Z*_F7P`p8Qu;0J)Dq|@?w?FD|{IsMxntNN1Sj1CKjeyqcjcH)WYH%{I6V*fC99B z51gON^e~NDb=vX;Uq5<+l3g2S_**|#j#7WH9R9{q)Mufk!Df|a~p?);N1^dCi z-hhunKKn&Q7U!w&mBeK|P)PFMG75nOJATlh$Owypcxt_y7fM=oi&cTB(op`2{%LG$ z-*s?f5_#psjeq~D!Ij@wS{fb^5wUUES}c;#L+vaW2-03m&CFi4?)?1xbXk+(;CAnb zj2RdhUNy!5eBRmFSx|(A^r@`AK4EQ57ZM7}?dnEI$7;2`P5ucT4bAlsP?|8aw$5*F zC#<<^*22#P@9*!w|Chx(6h|)40GJO*-TEt{+la|O;KM?=>mP8cH z*Qr|irTx6K<=E+Vd3zZjFG)gF#J#rfwKWnQyd%Hf>sk}Z z0lM$awMlcLc((as4g3k}KR{QkeV9!`NNvw(+{fQT(r;`@0Y93vHQZ`+mF4|U7eQDg zSack$U*atswwpe|t~VdW=}EIgUQ;a5+N`uJrH*bE(*YH6J@z924yh$&`(VFtSwX&P zeOdH1@enVEt)xz;-#k+4{33+J5tVL{N;E8%AA>ACl3_v+_infQrqaU!$$-Tk0Bhi0 zPSFLf@%eRZqjC&L8yOI+Q)_@J}c01f0t4Y?So@EdwGQBy@7 z&JLGL1Aw-J1N>LC$0YR`z)}rk;l!@Qjrrp591}3z#=vs9`pY%7qv6iQAL&s=8YJuI z7OxJt>Lp&dJIA4zNe$!9j!r*|5pqj1K(M zPw{s!L#_(BEIIR&{Sldp_Xd>4FRt|+8vRZ2jeVopdnb7i;O(08F%xm;3G?eU^g&D!`)hrzG>d3eF|FtvjU%B5uU_RNmsVv0H5yKHE)4D7T5 z`UV;W6FrL(xs9?EK|2ujBGio9A@P=J$#iP9>`iq#hol^sx%D*kK$c0D%rPcW{fYK7 zp9*bY3!cWLS?-Gn71Ku5iC3h^K?m#QSm2q zV2mN;b|PB)jNX;!w_ebI106B(kIs(_7t|A(t?@?76cYcl zuMD*kjR1|tV$ue5jG_|~Fqe)ktc{?e4>E4Rsq>b`15qUWl;rXM)vbhG=^6N)B@BqD z11$trMLF6@X2VLUXzpL+6c+;p_2YogtIT9rnI9*L)G^-p|DY}0OpF7 zr>ax}dn64WeAv;Wh=?^D16xK}&aplyKZ+#`sj0IH9Z?2bFyE=51*~8{B)c0W#)#t6 z^auY9r$4Ie7AGdkUM#@mgY+Ga)OX@?ZxWWr&vQdIBxs;cnC|6L2=J>XAL7#`4ztBw zlRvx(qM9tq4H{rCV}mc@&m8iO*x>mi;N;UCD3G_UPfXGsh|aSK*^flDqbdA%2(pS= zRz0=WdJ3o-QJ4`fdSlZHIStAMe+`Bj2f#Q-TrH++=J)Z?N_qC==nQ7pmIxFyTnvS% z&Ur3$yaI4G=QS$at#@bB$V#t9x4EE4B2zgg6V^=2ko&K#otdd9RoqCU2g8<6&>!CA zZ7#NXG~e~t23^KVof9zX!}5e3h;B$mOr>BGaR;Xcu-TU%<0EFyPGIAX!QH48N6t)` z?w21LP=8{x9VhtsSr_G%@&o;o_b2E^rU?-g;fEt*M)|F~NNb+|)&f`v5$|^r5RZp-KIRYNgG$jVi5>= zO;yQ#paL!;=CHHa{u^cj${#ESKHN@)Ase#7*r+^df3nE1C%&f@3-7=Yf&vbVIAs3= zpoJY)i^F&=xMl3=qy*1*%qMhJ+jvD+sqzcGn*2RP00AqDdE~>gH@V`Y%4a)J`#OJz zOI{WFO7NQBBh!% zv7ariYQwk5xhmQ?#mst7&*5n@Q(+N~^5WD{$vA*@$yE+aMX( zZMcj<2QZhmkSyuGf1jI|chT+riPCil;C(4xH98sOz0+7M%y@X!KOOj?sGpmNL{!?T zfAGAaXf~r5Licm7dCW9OtEbOL&Fa2K9qGJuS_A4qvageHDaqIzjMU*7L#o9B-W(rEh9dCS%-)+UKn84{ z9h3!ducjuocc{^xfbb6BzP=@<_gi?%r_k}r6p-=JP~-(F39)q50vf!2@NgoZ1ayPFJq z8!|nlN_fk;A~1FR?W$bXazOp738`bTHPrwLy(lP1{`W^%VxX(6xA@z-Fw70e z1#!lDTIw=~+2LGDIg5nSK-r2bjzOpclDTTzXMjg5r;2N&A2-YV=q?<{nYF`{f_Exptnws-&i;ay37% z+jm565g8R+1LG{HOPFsPM%6w(ZvKJ7Eei@t{P);A6!b_&_j;1k;d)&*RfUY6Yf4Lk zjK;;N#==8`t{fr&v?I7i_Qg~YzFHDG=bj9d0i?O4L-}`1s1&P?)fTqJ_*94!;IbFV zH4cyN9q=`BU+~v<-(aJ%4&6FBQ$6?9wQZXHO zw=hZb9Z}?~e=dOUPr&b8pSK-3`BH0GwThPvzvYRE(DdJ%wX}qi{1@3o?!rlf)6uMI z^YLf_hZYG>4W2aHdlyb!oMi^DO13CQtA3?Mvi(1T3G;E z4hg^JzzXS4fa~p*u8Ii<*;9npQ#M?OzM6OCM^*Iy?7VdS0(T|bMN*Dyx-h<8PC1+nl&CrXFp zg-zFESQ-nIEKtb}eKFAZb7Lm3{qEdOsd9~*iZUR{0s%>n2{p%_l9Rzv9<>7jnlQXUyNRrW$ z2gkE9ovoj;5xtA6cnvq6JpAD4tKnP;S#P_dLV$&aoL1|J$*Mtd5z6FkT_oRwc_)o*!Z&KqQH z=a`SlrAP&;u{As)zBs?gs6<~58h>$~#onuw5W&ZBkw@tk;P?>#hnD`7T#~1VGI;n@ zrr$Q|Mg-w-@niJMw}*T^C$4X$DaaXT^fXOkI$`8KIZv>QjpP|YZ#WY1l%$4+<`H_9 z+?=q8e%!E(9v77+EsZj?yqDCen!jZ}3T_(iLbqA+l#ISB!RNwv;X{Q=RlSvWI@4a| zs<-LJeXrGri!bKc-#AlzSLq_!!p`kJdq*N@SE?_tmcBjZpfJ)#e<5JQq4aqda_H-k zmrcpG(*^PRz^Po$xm)IicY&|nY5!!^-fZ*~#paXV)K;={Fl4~)@Ps`uTT68+l3^j_P@ z{^$tqFnRu)hifb1(fUy(igD4^yBc?J{s^eU=;D2R#TMpnJWXMN-Gmr?=@cTa6+KEhiKJN?LzJYq(&{$l(3kTY-kfqAnaG z^`?qsw2!01jA=P^k34!k`?T6%->X~*92XC)EW_W{>at#Yhc1rMH|Ai@-u;E#{}!Qf zLaLHj@DXLGj>2+O>>6s!m?IrQ>1PnrAZdzU-?%yt=bG_ z_FpTLDH52{V*xjY%@k3JbrrY)m481+zoTRM`#&QafVTS5h(b7=OK8JFLS_tBq=K=J z+geIQWT0bP(lRCtqQpeU>b3ej+-N0ul&o6K`1D%ME|0ZpuwiK1A8e~EG_XR$omZhw zl&N*{0y(G3Gff%DaUr%d9~RrAHk7My1F73>p88WSds*Fvr*g`1&ba zW>UV6d*aP=#qb@34 zC!T>tK58~}2x>KjI#m^WXJKOQTcK6vD4pe;JNyi;QXH_d+8snKIZ{p9qK_Sus-pBW zBb}ZSBZ3R9eGS!AZCBNRoMYuR8{enfTh{u>B+*;#o_f1 zX#_$)?Y5gi!+d4g?l7{}3tUiG*mvabC`V12T04Gng3cW$SB0~y`&UV?z~?_PMt;{z zqh6|4e=P?nmsTo}Lq$XL88jp%CjP0q^Zx`Kop&$F8Z^3C9W3yw=RW2Ky$qgwAOx|&a{CAzX~sh_cHu9}4x`d|N&^r_r| zM6=?qq?kmw7JA{Hv@c7tS9Z7Rh-{xxhlMMZDqfw)We*%%$_Y_qQ_VdFO zUhLcD+`j=CP-7+qghAptjSiOVy(dCT{6~@Or$ZfHoecs|i~OjEkN4CNL)uS2-01kU z^t-=#*+Uvt9B&wCAVjXZrl>wYVbh;Y-%|Rru9q3jqnj=eBo)h0l}D{c&61Ifo-Ckv8S^ogR-yFc+5d`GHf^0s4OllFi%mZ?swYwEm0?_q9G!Rp6TUv+WzqC2u!bY|tvdnM{?-jlnSm z!c7YAw~8iTtEtLOtt7s;0$fP$?kUK9Z_j=O7I?$EGjr6&O2tt+MkfDolZ7@bH&;y7 z4P(ECG$Qg<=(Y2%?GLwTBti!GTu558+C-?2*;)9;NE9u^UG#(3BA&`TfM)%@f}^!V zAGQe^XJvlKdJaaa>>;VuH}YkV*?qlsT=cs z`K0^fG56`gB5hFZqPU)NiL=fFg=%9btRIR~Nx?%|jzmthaE6V?tl&yePIg}nhZOs2 zvFXu&A{A1gcxaq@oqlCgWXBp2em(E0EVMe|sKUf}j+)HH_8kAkJGoJVDvGN<`ehC| zIFYT6!jJd#OC$tQCM7Z`cF_sXrVn#by=`6FzGO!7@2rSEP$qL=cVI*Mj&0XHj!VYR zGfMZOJ=!2};f{wF@Nn>ZD=p5=+Gz20*uOwI&k#1jhUE^iw5#ArA$>bwYrOFqaX*RC z$L-yKmjgY-Bi~{|2+!AV1FYLbGi9-ZFW)kmFi%`xmn{%d^4p$EnR9p*@(<5b^Kvth z+ov{Nna-QzfuF#mVej7N3kY3bAfrv|WHr5)l;`zZjt>aSH{e zIME&JvpgnpqF|!*)%yRmT90&M)!f439TE~HGjpY?7t`hR_0i(PlpqO7R=pcy015f8ZAvok@3RmH)VovV1tofCUs6rlCtPbS>%z~~kXYYl^R)`1laVI={6E={ zzh!*DB-%{jh|3brswxlZ?l(a**lTx^m3)hQlGI(Hx;j{Y!mwHRzGzxhbPv(;5#XZ7o^;x5`T zP_Rv@r}yUKKDC=I3AdM}vCI_qn7#BO1mK&x;Sm-)oNrU1-}axlN8h|0SY7KRje=Gc9+PZxho?GM#UH`&pls$@i?}`63BAOYYb# z3bu)9f19wiGFpDAqP#4S;o;>Txxo^8y9Ey)RO*s=CFmSIfs5@3CiOg@vJ_anWy9&< z_n{%r@Vc9Jx;rSj!W?vv{ZAGs+9GX3Fvi(zSkyYDBMi3Bk*}SBDp>I4L%u-F=moNX zn7RUG2SeJR*J`U@=Cajxo8sTI3(xxx?utoreTyd-buG^WHJRj!w|%qkN?c+KlstRO zX${9_Is;#Q0U8|^?gzbKKnhZSS zG@ZA~foIdIp%QmbljO(lkp(f2Oy3}n@0~oaru4Ms?rC_7F~1#X2(AwRqa5z?DbA2@ z%x0C-_I~G$`$Zk;vo_s(3C`Nv;(unJeeAl8G$h1JSV{|1(DlMJaN~xNCcCgOXon~a zlHPqI+Ejb_^RHQ=5QDe^Fjn?S7s6Lc*^S8*bd`O33kAqJ>o4p%>Ah!&hCZSoB(N^+ax(g=IBBiy^qvcWGSX* zj(=P`A_QO7TgWN+<;vl4!K3ScFk%O#SnC9WH3MF!{I#oV*}AQGF(2i6v{K*q4hqehR|z&%-@(}D&r2g4oI|klU zO!+d;)KFR3r1n#W=c@yB-tT8}d3yU~kCR$nYYmf!A95pqU5;96yLn-bciss;QANJY zx}{;;5eYhv`*738$9s8(^rPueP@A%y(RuYO2d=CK4xith3W0KBGuJ~Cc)vc@5yjlC zK|x1i|2mQs++5uj>}=pt*mDPi zw-F-$o9V%5{985wGDRa>@%jn_4gKx&8Jvw@0rb@zaHDHfDNn2 z-_5Zp<*kZ7^ujZl^dNA9Xp6~@6v6_|JLvBtoIFSF^E7Vzjyw^=Gf(@&UwUVJ9S|~a zF%;XcIG5a$XDdd)+3sH`i^d5ewHm*9M@2;)!%~k@39{BrUWke?&OV%UfVG^K*?~Nk zrmZg{%es8WD};&aMHMj zZ9U?K@0ZIT__T|A{Ibk7v7MIvT@_-oKz#gsM-crPEJ!*S-)rE7-H*SBE!S!vQ?X4? zJ_35&JHO&<@Sq3HeY(;S>|f1T=vis2+z$WtY_=Z3(f_7TrSrHG74~lpt*B-yy%0{xBv1;&^@v7^$%>D}8uo@-hDm=S&zMkvsShJ9 zC~vZh1Ir(#a_A3n1W<7MMQMi8cJkR7)rbbCr|CV7E(Vf#S~M38Em@whSYAUhwR&rm zX5v{og$F-S?&#{}IIfSm-L=Z}1Gy{XaI(px5iV56hiaD6_AW=F&^#B{V3UMD71-?Jc0(nxR`cZY_?;VrWFKIhzj+<%OB-+OBe=t0xHR;{X4Rp0#PH|K0xI?~F`u#oHT zm6^-qNtQqF(`8ZB1HKIMVkKG45`ER zyWGvC(koV-%t_R3CJ9!6%4A#bHSD}xao%MGC(i2>*UV@ygYm}8_)H5UF0cl4=4ej5W}HHqBukxUe=^J zxxr58jU`!=(Sf%zy6S!^0gGPrkk)YVd?I!@D!_DfDZ_tTYaeVFVyo>-Y|VCm1tnY= zhC7!=wNhL^UERHL6uGV6JgcCM;lDU@C5(4qvrO*%&{=^wnXA6Fv)j!H`5hKBVD^si z79~05&D*yx`&}+xt0g%b4`6#$eu`gL?}z?Om{FQc$of2dh1Y7$l4Y(02#*=~j_Kbu ztgJlmN=O6*npG(zn~Cg}J24WUe#xq6ga=Lc9ZuxF?3 z+QN`!MwKSSHB2+i=s9Z2gP2%YbW}Q$p?k;=VxlRd?BNekdz3RM*Pi)!j7TvT%h$F3 zC)jmOJl?%Vs$B=Pg;ysi`m29MT8>#-IMfG-NHwF(9A|GS^F|ZrTKLpN zgrEOR>PWd?&aUW1dJ0le8loqAc7=K)*XXX*dK<~*V^}RE7#xL_6%vXYM;;Syl9R$s zIemR;Lx#kcDr$ljC#`JX2v{~;+3$;cN5NtJZ^|*=MLdqQC7w$i)-=V$pN4zz>$6Y5~_+NA|tId8)koiFfHsJKEzSSg#HWQj%L`PvMh!o|?2L#czw zFeapWPV*!C*3SS!IdIT<;tx_+F8E#xer<}i9|NmPXhYy0!3O@^g{SvV7P)rXw7>e zv6R6Bi;9WNwHwBdXABHI8kw)52L6DiSgpse&X{&7-Ql-1$<*IVs`$ahoZf|6fPvj` zg7}Ql6kZ&8An=sjrI{E|ROhaZ=`6Ix?{0mK4NknzZU)817Pi2o?$VUx8EMdP9w9zr zHGlr%w^ngC;v|lsV7Dn7`3^cu>cpe(m6cLON$KpY#lMJ%2VNGw`uw~Aw}d(Gm9!Rp zIRR^_Mj|HhI`#)-ym;mK{=vgoaQ`hY+GpgATVL@LrwvfcCP;EqhL5O{IGTe+J(3NkB)uXprZ>78S_^zpvEDh9)qI_&L|M*zyaxH=AOjTLgt|oSFKd-V9FSPT; zn>Wpb>g(vt?Cf^gNRCE|V+W0;MKUjvwB}z5(|$9XkQSxDW+%e1r~eD zO&R#U_NSp=EM9h5@tXoMMm|86h!>}-7CII#u-j4vy3{0ae=!_82kWu2X|BcFTp&;N zK4lE>rHg{{a-5)c04i&(Kfr5!XT&6ug5qMkLvG-*xxpDKOpNOIY*&D)bmVxl=CiF_ z8@=ooIN1Z%bFp`-*WdrcuIcyk>i{x@KgXlwf6?x`^-0~Wi+7A;q| zpyVo4T~3=2Z{M*@nd%ca8PP}o@SvjNLf$OdK#zZic%1PB{yoWQmx^c8ryz3Fw z-{3Gx(=`&W$I0=J5(#x%Mn2iadpTNfIw;XmR2wXW|ItqZ;y)dv!^OeC*f;JbdCg#` z_;mGBK?vWCLG@iOmNjeiLobENqi!~RmWwMOmjKD&Xy_<9TR(mktio;}?VOUatRIJO zW~P7}_>Ar#!i77Xn>4zPRi7l9QQ3mI%*pJOuBd_yMt+bfn#aoW2!~KAk~-riFf+w3 zgmz!gdhHQns5p~~@v6A8EiF;AU`iq&xRR~|k(iBVX z@Nq_8=u@57y;CGU9at+q4jLJE$van%s9tj9K4}@3Dp87sVk`GcHmCq z9&^$RBd24ei?%DFVa?LH*B=xMI7yDqxcXeHdP^r2J0)SgHk;Sg_r6dVj$3uO|01kC zkR})PeE2TRjBqL4!!)%bUP{u14HpH8#u@+8%;A-Ej?-Sw%={c3auCfYs&mej@hU=% zo3q7j%erU=BMpRLbI8t%K8WPAMWN<3smY2y&|cVbutp>&h#H%}THVVK4Qu zeoxxCU16E$8IP@g!cBA2!L0-dt;2ep`?WK_kHnwO6pbHt!{TJR{}%2b(TKapo>w=m z;8dIC#%Dm^DxO-JnLaC(>Hr-S9)Q-d?%EZ)EpvLB9!y3XOVOe=tU7#iFuXq()|}6~+kfc#D4i9XBPbZ<_GB=-Pa*O&G*viQ%dPg2;)V zs6NEh;UtfltT0f1u z&3Ucw)aWdBH<(LKF6D1xA_#$=lfV`9gw=dL*vF#60s`!JKH8brns9<*9ZY;KeHa%6 zqm>}kw1)%l=i#lY6~Zt~1cMNX0Z?d!Q=`)5R^06%7)G`Drrn5mMqc@FpeSG{|7a^6 zQ^dW-W-a6CFpt9k+OQp1hSREK)m!CrD11kvui4BL8uMw?t<&S?W%Ec zrFic3_Pt8C!rj(RyFI6SeQ|@7OnJ>? z>wk-M6@s)ZWwJ5&V*YLt8+#}U^_fo(mqHEjF1-{lt}OL3CU;#Ax7ecLV1?OxdbscR zhEb1?;M*o+&MbqA|+w+1J2>HY+v?3Spv$Es6_M4^2r0zEBi~E2^QC&)Ab<*>7 z!!e7-$Ghw_ZJxs;_4|Lb|gbqgndFl)=*P+v+KNO4aLS*zUihOh==<#x&{F*7G#9 zeJ{syIh{-4S{-*Lfb8RYANQ%o;nU@8@;a)Aey633MO3QI($-f|jEH1$Cqs*fVjSDs z^n@lGV=|0z{LFyms|582HsXEk0457_m+`Ss%&;4efB%MiFo|l&5j0;HBuPsdibt2i zkx||dAR`Lq_NMm0D7yP%u*{AsDj+@>E97(q%^s_AXcS2;$3Z3LOvE?bd@hjvPLz!d zx`BnBz!G*ibSDb=YC!`}2^M|wlvdJ`J7?#Z&*muC+pTQ6Z`nA ztatCQfaJ}?0wBtq10Ff@IUlsoqRBXbN<0NkW_pa*gD_Bbx^G=moC5~vaJI|&lQvxD zb`8 z;mO^2*+r~WcGrtw%Z%vIK;O#j%&tn%6f9tu=}2owT(Z#Fa<aBwq|t!S&=>6v*BqT;0`Flc8_!8lJ+tuzE?& z9^!;@+Xg>kS`KFQWC1Sw5m>uv=O+ z@*@s==6`(uIqL{bs!G;4ye`4}@;-L2mf8eiv3&W%6HFAO5KjDy>})&ZbzoVOkd)}H zSlchiFc8j=97U49v?FOPH`ov$KY9j{FxyyfWS7CZM@qi-Lz4Y`ItP(gy@)FCbfcr4 z?FpcSSza;)U|L*laNMNZN_xI>>lj%DiGzMJ`H|KCH7#iIgfaa96$!jl*?!2OR;Xcr z;w8B_0T}0@hr4UX$XZD@2REpF#QY=uGkiK8 z9-hAd`bGP?OI&vL;(`g#M?8!P;gyxVKye`ez}G-9CXv}!z=X{RIro2K8q!-`)JOfjlK_UDUnf=fza%q+BHfe0+ih#4 zNU(;;kkDGMrAuD@pM+ZvE&jW0xVUKA|Iz~g&!2&ta{F}+BDgiOj6Ex#xo40$h+3EHFb_abhq?as^0p=Tj?{LrKUE`HUJymg!bw=4qnzA2zk9OJ3 zbQms);g6>Z{!$;UFdtwEES$=;XUne~9uNO%UGBo5oGyqyz2P?>8I4id7dbPqy~U*C zG)K&?T^Xz{&|@#0$6zP2PANnK!B26Vf9y@qUKh<}1Gn~i28?8!M}7hSU1f}=>FJ~> zLsw2}a0wnK?xM!HNLCeD>F96h*x!pu{S+aCzZxDJ|?e3{@PFr zwJ??lH!f!Nlqgv_6X-^aX{%aZ|CKlJ_x5IbT2wjBXd&u)CnOobX=i1o8*s(u`eucG zUz5S;rO)42MBDFK(pp|Ir(wiZj?H6fw$aVWYa>E`$(fHo)2VpAt)xM>D7*=a>Fm`h`sFs zWgX|h3dkmRBREpyoa|{@OPXd0X1Pys(dBi&MVvin^?j|?kb8APmS`{`YN=gui|rDm z`tS*VQr>r225th#js32@v`F)?>r|jS=yn!todauHA9X(f_A=TPb%7)cRt!OlDrW<# zocw6Z8!PS2%<-AsQ!PlQEl^l&tLs?1WECvzmhIWfuoj)w!(3A_cI|6)YOhV&y+m?2 zy$cs`GG<$4lC7Em?G;4Nf9w(UrybSv^BmUM2EXiNMyVop+*Y6i6hgTIE0&v|6B49{ zVP+CoX4&WBt;zAU&*3VIy%$J!P|fSA&k_=Z=^RO?g%)Dl1%h@3+gPf*P4UhX7dVIY zr4YV`ODGw6RDHTcc#`1dEoR#AP6maGmZ~KVs&>W2j!{{NIaj4g6$fpjhtp}KeW|SVJ=?Dy`;AkEE6nowaU&ii`}|x_4&5*$(f* zb% z_dF|L{(__&Zxmb5WFx7B)nim_igjW8X8oXZPd#aXS9GzcwZ=(#_0Q%!#R?KF5G1d8 zHG?I7u4OR&R^jYU2%0rSn~tStQ<$GUq?P|RM^KgF`C05Cw`OmFfC@C?LmJY)IUl#j zgRLtL(xfu<9Js4$Qe^b+-@gmZRF5;BplT@}!(j*G@^;n31qaT)QjuiMg#yEn zba^tdrUu3DlLFRDo|aW6RhOmBj_NigE$-P<3sXJc_R`dS1o@`srd$mtHh0ML?+#1f z-%A;C{MktKZDn7><{udX3O6p)Fr|JPru?2OeAE^Bg0w8xKtj?pDc`wqb=%iG-u~=% zS$eC|ya+%gcBasYaa6=~ow+_HT?jv!s-|oc6W>avirM?I!U<(+r z9mm&kd#`}G-X_-E=c)qqa6#tu$?AP?(cjS$Kpcv+zf)U5fV2rASmPK$0t68>ATED>WhuXU28JuZaQ!J<@3lg!X;*I?cU$QMiNtI3V3 zYJ6^x@M64xu%@;$WXRQ4^ULps4FRl&S-43$fC#j=^yg8@W~H}7=5CT^er1=BP|odO z)U>DlIs&)g`?ryKI~V>^IfrnSzGe`A&=1(XVihp<2LFJFK20-Kqev#y@&>JLxidGi zRuq~E3$p_YRn3o%l(WfJ!q)2Q(L14Rr|t86!CmhVSCpFg%dT|2{nJ{cRm7{vi+>(z zENR46MJU|r25?UC{ev@0H76yzUYwy`uF8pwoKoFk4?=S!#?3r@q->{dHx{KPFp9Je zH_01)M5Ak$a(kAWH`iAs%3h2ogqP`ZPtet5TNd}^8FhUxKB0e0mJx5tF8Km-}ddi=T~`^$HwA}XmJk@M~TV|Vy@bn{1D6A&9?VICSH{Pc7qAKt|TihrFx z74P7jw7;<> z;yhK5TwROeY*l`uKaVhS{Of`M_@gC>k$br34U3-b;w4kdhI>r~+&DV=xJtq{km5&+ zVV14Vwdh1+%W+lFB;oPvr)2zo?zh$QvvFS?7h3@A{*AM-`8W#FeSH2-B4+;L!=hP( zKIcP;$wsK#_Skym3LxH%t66rb?}I>k0fUAY%uRynzrXq~m&S`k+ObJ=bo3|K*gaPK zS7)AIzn{QhdcRxWl^G7ffztq>dc{fj2~fz=9*DSpi5-d*+5K_GZezagx^Nccd!#mD z_Wxt!)Hfs55%CLDKfr(89vl1qHMa)nb2^KJ|to&SmEN5Hfq+J6VQuwMn=ZAXO3+v*3F8HJYd&OLD3)~dvw z6(<#_-bd}uQJ_66$uih6EhsLUXEk0yMTPOQAezEqV0v#mca|v5?|bi%;U{~wOf?7) zT;+fDC_n`C{VC%I6`&gliHK@^7QcP_#zvxm?=tn7*N#SKAzue0l*ewGo5(_7M99{p zbKjr3mk(ZU!cyFCzb*`Lfc)1eTR@)7yZp<-xOstG{!<|lTbjU(e|1f}&D-##{I4?8qe!HoIeu*6yhG zDZ}&~e?o>h}q~-fwASg z=#spMD$zK1x$!2G((%U9U)KFvs5eFcR9p%*YmNn_?XGSpI{QWycb=Kz-;L(S?^KX9DWg9nof`MRlfLvCvP}j~^1IDr+=BKpZ^b z#IA+I<7bIqK0h1G%WKSrWDKcFQT9_4Lw`*g4KHc@k`1wd4umRySsGwhNnGe}y_>4K z`Euy(!G15GRLQyImPR6AE27#X4UZ34pP+o7>X6kJz)7amFXrkkdCScJ5Pd|=gPlUe z@y+HaO0}9})dBAm>nc1D0G#Ug1RouKbSK1f1N%L9aidD@QtpPV+6*T+mRm61DWXm= z`mDMhmhZJ+;6>XqwDvv!U3t-1lz=zdJt-E!-dZcwt>fLzYX&qJAUicYOlTm<(s37R ze4D*_w3J0L4JWlkkr*cDl6t-f6VtxiWiZbS9RX2owq{YhShzCcx!%W5WkqKMi_aBXy{BSll5Bieur+EvFUvcQrt6Jf{rT#clwswy=+~r8lIz1Et@cujvD7Vh z*h=v*?XxLKcJ11@{1CrBxd5k+7~p@j0L@Q2sc7tnM0o`{Hd>&E$NdHBO|5RENwF>M zc~PDh5VVD~lvTBx&Iru0dv}CGhx_7T#NiG~)hdT^y!h6c!TeB@sfPQduAs8xVKGN; zp8HnsYgne;Rpy86TTc{H#Rz%)M3Q6a_wU~~*MtvvmYd0SN)0egQg>!Q)&s0}@umsd zPP4-F1C?X5lDHO3YBQ$Z^rODnBaWK>iivdBsiXN?_30|hryzLoW(b99C7tc^_|XcL zY9p3lHU00hy?Jg&fM<bjGo*VsB7E42} zzgN-~VPh9}fk^>AR?i$uFCwU4hcS)KS#Gt7J$Y2@w<7G_g3x&D>I3!XQ$tV_a#pHs zbq%{ty;5b;7C)fbD8A2#Gzu6xXc}rda^mgh^2Hp+lPsz*8lglYoqf~i>{tHC#AF$> z;nw2Y6WSW10F`VhrS2)}qnp)&8*z7*fO-x2{_ka%KIihXG2w+0JtH6Hago(B8wH&L z4NqHX(4Ww;&xaR{#oWSP!dnER*Vg28-iJo4EZ?{}P%nV!!+Vp>$9`#$65CMr7Q@vHyfc!r_@1h$C4C6yMdE4QM-^Y|0Ko~$h! zC0MfpLW06fT z2iA>s>JuG1DU?^S?}x8;1e9e@!&l2aTO(Tix)+GDhT)z>t3J=77r(!LkBm@pN`A@$ zl62>v4SevZ6Hxx_zLE#S@<;J{V6ITKJ zyszf#RxRw%?WdDjjHyd{(x~+Pn>D5f6-G#3((uergyDYi;Q&LMYXm44HHd;j5U{kZ|Nnf21PkQ5L?n9}% z>n&9A>p?Pjiq_crGE@DK=qIq0SMud5HNCKSMteWxjg3NV0y4rA7)(=Ob_9#JL+gkuqrg~cF z`SjD}msy+Mea6q84kMm^=zC`pfQRXD!{EDg#B;>6uoIm|&d7HdLJ)!lnuYn!NA7{M zpLa;dR$VQdU?PzSm41kbL#Fca6?poT9A&hG^8B7!uX@|JUKg5&P+JG@j5Av% zzLB{W8V`<^QXLH9j+;yR&%v7}A2(~F$xV0t*t8jJX)wUC`9+7qK%pB7W4(c!PwYf_ zYY6Gnr-W_7hVy*cpBkJetcZc#p)Ct3c!<4{j0d?GI>(shvGE_6_2%juKwt?GuVHNS#6BtJ{PeAxGJ;Lb%!2E%oFe*@O7t4C-$jip%0L?f%*aDv9KU6MZRM! z_m&}pVA_iJBR<~KgA?eSxAfrGdg}spSZtxCwWYK_0ZElXcYoo(Ls_hnm|Mdtl4q8I8E>no-HRIZD zs`n{_{`yAW#P_+gtA2A{Tr#rRmD`Sv4({}%fCni!aBPR2hBrS3-g|8UZo!yArV#Gj0-YvS=W$($B&M;MV>evjA0ILO?_` zxdxO~{OibF9si>Q0w&P^$071hWUR{&8z6u>#6bqyYITUCtNaf~^BWIg+_@OLei`~8IK+<*|K38CQE_w zr=|9OC(9j-d*7q&2Q5Zt{fmbIGG)^{RZqy-jLDBf{18f2OWRr19G9xM$xX_aAg_3G zGdL(bU)juO5ueDP@H2@|ugMVuyJHYcst+E0n!w}AGFR58Jtf7_!urrHv@Ru8DyH$( z$3t)fy>RlDUod(}@V2c)e`qGET!P)>a$XjOnBN8-j5_HgKLqxegh{4QAwP~WsT-5= zJ=#1;t~qOZuq=~2K_{ox=H}9S;UT6mOf7^oc1EH>tN6VA6r*YQ!h?%3vF6?uytjH) zAif$d19Tt{_O}4ufnAd;jNt7rid>~D10C+dyAIqcxkj-XKByDWrGjBEiwQy% z2mR6@rlYl&l{59ER}8hw6;CaXh+MU`xL7JPzbkN+KMs`HFdsJUTE?_!L8Xf=Hcf&m z?wq_o^>IWgs%b0a=mqnkE{L8X48&ho`B~#}*&*WLD~RI_APpR>IV#=vWLCv*Lri#^ zVpTaa`yGri@cWup4C6O-VCe0YuRkdmU~;-iQWr002j7MArHYsldZ@}J zb18*Hftz~eV~TZyp>tYnYU*a$T_OYFk5%3e(px7{;%$Bwu|*E$v*0yL%4cVGR$;92 znUY#uyVE$YVvK(>Up)x2FYJMsYZb*SQzqn%{WWpi-X!<+V`8gz7}Te@EXIn3OO7V& zGQFxKHmTY-zbI7rsi2!HoZgy!SF)MEX3uGOBq^EM9)3c0Tb$r!ajKOE)Ty3o$HKK6{Q%G?U)p3k4+a&*bHp-Phd4Rk34J`1HjWdQ`^Hgok z^=mYyOJx4e?CkFcLzgu0ZL@_14^K-+moppiRM~H*e{mk7F79QblKOdK@DiCE&y&HF zAgWtZxHH|?!i-?a%pHn=F;<8!O_7}R{Lw6r?ln%WcfKbSR}4rP#3SBP0nDkso8T3A@4yxqx`mh8gzkPpSMvBg_F1{96J6}g zH(txkvPr!2u?C)Aiu^mmW{-b-jbmTE6X*=2%%4ju;ELOZQA~^1 z?hJF*{C3-05Sw8Cg|cD^6JOX@kBR3Mqbld!29MfhuFP24w_2v@=jWc;%=6^$OdG4J zo-Lp;Wz9f3_0zG^?a}4boBA_R%p8J&tDp2?u$R>0Z4>#v!na!-ibE+>Osnj!g)OU7 z91Bn#GhnK?+{i;EYyjD?wJ6wSP5o|zqhI)@R`qKNby2!k(Mz)0%xHO3dbx=6IQnVP_0q+J*{*#*SNcoejfA)xMjV@COt>s&!{UVn_s$R%2 zjipC3rOw1i3SM?VV>(lYnY6rxp44GI1-QHrB z&uKYREV2i$)=}4KDVCzROAnBa@e2H1Yw*+rN_o1JLTf^V}2`fg%jH7K@_>YtEZnOp{&1%VKm zjh_dSZIl{Ajb~m58mhp0x0%pbTZlLvIwlbL#&{!Z`*AJD~mzr$K{^wKWUyoz$U* zu0J~w;Cf7wtgd|yL`wkI@jojmF3ttWEI=?($Jz*SymVhRJMXBm_kENolHQsGu4n?>0wZC0j-I{{iA6^bOrS9; zxEahLH0^E3)3tUuF zXvN;Klc-P@XlCU@Gvk*}U4$j3TMOfSDz$~}NIILOvZNpaMQByp!o@wSi2^@19x%_N zXjZ_~93i8@PdQwwmvzu=_FHK3vFA+LRScalk#H~?N}ES!d}?7Uicvpt z0eQj#%}?;MS@E9T;WOZL?^|qe>5QXJev+a}cj-Bq{>=9L(Z62jM^SUxvWYg`Q?lX3 zsa&I@FauWFt2G8~p=dew(VmAm)|*_c6}d_Row8n+kw`$SzRZh9L8am}<9)*RE$jpq z!an>BBM~L^x%J~0L{5o1TX+Zey)Szgg(^U<(nmgu{l=u9YzWUNoQc+1v#Z1t!;vpHx%EO45t^1K5zgRQ zD_@=?CnlU%4><__(fOtWDwA3 zZ$>wKhT+)4^ z_7z`g>dicZrSQA8uIb-$G5@{f+wQ^;yL#`}O$aDIh9*yT@yCVE&C(ibAxVmD8ZZw4 zt&-+qQr-$hwmIe3=~UU-ELjg`$(N(a`16_5sEdo3Icg%zfF0Ru{6ylZ_a^xQ#T9od z#)s1CIaC#k{j3Ic6TH+`%crmcE|WVd$9QBE6+>dxed4qN)@AgD{hGQNYZhl+J(v>V6yla2`ZcU-Q<2AW|6{kw7h7#o?@QTlIb;xrx&cMzA}3senaC|CRdnDY zR_r0-DoKfIZ;51OoYV`FhP%jOPA+-M;UzQvSwV7i6)Fw1maJo(4~(0Y6*J%w`1MQi zD&_)rcyRGV-@+9XP1}Es+WE(J@~Q4@qIH?dJvu5f^3H~KtnN&0Elj?J(wV+!3TZVqpi9;1tpBq()@i_5(Pqx!&(`Wu_b=mjgt*DWdRCsz20_(+9 zCLsltWM=MwBwZXFP)=n7r)6el{<2$6uu*+9&~$Wk#5hHwklG68&1rOb7{F#lJ76UM zmNzMyb`ma8C)r>#Nxv8j0D9r>taXT>ZuF64#F$34za9#94jTP5I&p+o;1HD>J+kM= zpR)o!gIG7+MjhR|kwsAm(IbUx5e|dz`;~G5U}}gKubMgPVghFIkm|I@lRm(IGC3t?@@&oI?St23j$rrajIr zIF_0@2^}!(K_a^K_jj^*vf8yD=Ea<8@mH%WzvxqI@Ql3#bZtL=FatLR1nW$A78O)T z09k~~%ga3?{^(IKCc~d8O|2PVnjMn ze1d)`Tb_dx)V(MyI^KQ3kUm9dDo)zrnQgOw8RkX-tj_U(#L)Ekx-9fhul23-rJ-S! zc|ztlNISL{ps;dF=r{N$N{}{#pVf+5qxR`${{{G+i!TuxU z=3l3t4Qn?BEO9{OCUw8@5B#@ALJ4{i4n$j6@RRY7rKpNxRu)7*Z~zDKRAIqekF zVyj3(KTxt|;;pW(qK*!!N`BQ&EV$jc4VZO6{-thH>rEh`H*ns~8ie zuOpD~OdugXTJ3Li!)4gD?KU~L0c1KA&D3vj3kRHgz%=4ccMt#b^)Bh%s4zEiUEk`* zz!M-6aOWGO5ZCbFgaRho&!0cBXaNtz?qq@I@~4e2fOIWP9}rVq^sl=(Z;yQ^I`rHg zW8f$RiZ7LDAm{r(&9ABPe8_i6I|U?#zi~TW>GqhJG6I+{57F(CHi`1-ag3_fC zKp7OvcldJJCall8#fIJ!3*#(Q_u+239~@zdii$R>*)x){cYKv$Xts3$$J@xs)c!HJ z3!6zvNdVh|Pc+$wox%}`MICE$n^le3^leqw+xJ$N(P-wyD?r}y%IO1}QUjUG3&sxwsI~wHt6o&7jlTi6#x*DeN?5`#LSW-n~SlX7!Xqg_U zlnI2b<*8QqA6ZsRYygf`HXLAOK}LDN3Ltm&`Ava?|auK}5vKTI={1ko(y*tdxH4*ZgxBCBY<;_fs&6Q?>~q1u21#ATRtlAyG4h`0E2WIc*Uwwuh?8It}3 zJ2odA?FUx18jU6-dte__JYg7;S5f22k$5dDsQ%qKeOQ28J?y)5IHvJ(eqhtv; zf&Q05k>2v|6I(pm7zu6HfAZU#l1vy}4PuAm~Ee1C8>Y4?KrZ~OXpXHDw)9QtJi(Wk3 zIL1?o$pu{CiebnEz$C#TBLg(kUn(o(OFQ4DPIa6Y1MBg~$Vd_X-;VyUpJ^MO7r>VK zZQ?p4H1zLOXb)&m9(bO?LlywTs+X};uFa18__4s^pZwdvOq$Ke8~gcOTbl%^cdcLN zgqSigVQ!Q&3LxxH@egD2a8Rb=(Q%mbg2N&rzWw}35Zb9$&1^fg58TnG;NWWYPk()i zb_J+dpxY0KAOM?63>cN`C!(07-nJBOCyUP3_8Y{j|?qOf(_0h-ZpfkSO!WHUsg7Pxz3G{ z6)!76+DJ*vDjuHE?aji;Ebvuj#vVSc^S70LXi4Xa;FBMlBnNUF#r|biSR-tomJP+j z1!a?1NkC9JcLN9uU6BkuSJ1Aoi#z4CeTCyu2IGcxKwZ!nof%nKw&sWMG&MtD%KH4K93zNUN{uF z`+BZgHA|*<<|End-*9!?_l_GFwVHe8_&p&m-mde7rE9_)Eu)8NeenvIm)-YvPY$|y zjtryM`Z(gmMG@LMK3l1de}$=Jg+&%DaB+TuZgTM&mj^>pRb8zD9!uMq7`OI)rR;u_ z<0w#d9<5G~1XMU&kkMp#$Gon@-u3jzgBquwfK_8w+?ndSupt(> zDE~?pVjb~Q6Rdn&dbzYaVM%!{7I?^S|sq@qSj@C~=S`p!(GpIUwOHz+8i`VeV8XCe=2Xcjlh zYuYFxIo65;P9zTl%92(+OpF+qcGmeehgw|#a`do5y(NO)Q~&T~FbrY(ApHHc#F9c` z#zw_Q?&L>EE5@hyD8~a@-30wPPxZ~ac8yL*5NPZS!~+rCJIO|31+MP{K%T|38U#Iv zHv#xGC~?U2W0+uFobA1D2|;>%^~9*u&*!g@9pH$*D5%xxOIze_pM@=UK99V3!ZR<- z|H)J{K26rfzjeED-W7Y%4cqs8-nC`Wwf|NOd~k0QijMF(BXg)4=FJOg0IQa9`g#ak zvV}sc_+;bhOXe=GTxy0To03qeRTAVBYRG5&rXa_|>*$1Y&=PSFRMmMzHNI)eWYXAP zuu8tQV0u6jH9|SndmVsB%QY;^*Dc9ojtIU|W=x2Z&H1TYB4CbIJm(~=T%x7){jH9b zq4uOPw|1dlBh=6vyKN_PPXgTQ87nz#);fj&9OOzS$iU0AHaZ>f($@2q1QB=@oUCq1 z+PHa9JRq#&Ooh-kaplqPKk0iB;MdwwQKVEOG}U%y(fb7WWO)UFEbtN-eTJk^>xE?Z TNd*J=6G7pXicINC Date: Wed, 10 Apr 2019 14:52:06 -0700 Subject: [PATCH 178/349] removede xample --- .../windows-information-protection/limitations-with-wip.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/limitations-with-wip.md b/windows/security/information-protection/windows-information-protection/limitations-with-wip.md index 34fbd59f55..6cea68fc1c 100644 --- a/windows/security/information-protection/windows-information-protection/limitations-with-wip.md +++ b/windows/security/information-protection/windows-information-protection/limitations-with-wip.md @@ -127,7 +127,7 @@ This table provides info about the most common problems you might encounter whil - From a5bc93ae9a49814be71b25cfda5e124c86981705 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 10 Apr 2019 15:19:05 -0700 Subject: [PATCH 179/349] added server core edit --- .../applocker/applocker-overview.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview.md b/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview.md index 758f313aac..c40cc607a5 100644 --- a/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview.md +++ b/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview.md @@ -12,7 +12,7 @@ manager: dansimp audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual -ms.date: 10/16/2017 +ms.date: 04/10/2019 --- # AppLocker @@ -92,7 +92,7 @@ AppLocker is included with enterprise-level editions of Windows. You can author   ### Using AppLocker on Server Core -AppLocker on Server Core installations is not supported. +AppLocker on Server Core installations is not supported. This applies to all versions of Windows Server. ### Virtualization considerations From 3c24289d2cbd17a9ace85a215594a7da130fb7d4 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 10 Apr 2019 15:58:36 -0700 Subject: [PATCH 180/349] added image --- .../images/seccon-framework.png | Bin 125416 -> 64034 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/windows/security/threat-protection/images/seccon-framework.png b/windows/security/threat-protection/images/seccon-framework.png index 5a1c8ce2ad996437920b2a7384fa5a1f31326c70..06f66acf99dad691d7362ec4b1c438327d65f419 100644 GIT binary patch literal 64034 zcmeFZbyQqY^B@Qz34!45F2UUzOK^90Xsm&zahD`G!QBb&?jC}>y9IZ5-_B?Io84KP z|7Oo{4)p8y>fKwnZdKh01q8`usC4Fe+}>}F>Sv^H}h zGcmIO*$PsewscUCflLJ{G`ZwiZ(<%*+w!0J3ueL2SwX zj%aKGadr}k>+9Sa*X>)$2)1JD%sA2>T_2b+IPZVF^E zvoQmk**ZBwVcGrzYi9{@f;d`2{x639&*T4Q0w`(a<^MCse-{@p_&-xPI*GeLm+>!x z{CA-p)!gmOSX9g$A+|J|?=4q#*Gnn7S=3o{lwTMG)Z|49w2S&=wxgQG?Nw+q=3?g z83Zx~u$k}zO}LC%nT$<2xS)SHd6{^*ps$$%je*=iZc}zsW8lBv7lQzu|8l{<-#7jL z_`ae82r7lfHvhxp{FTkW>;sSjIYKwq{a@0fYG(hhD;p5mKR5ZA6NO0 zXa7aS{|ye+8-FkVqp+Y~{-g5DY@vG20jkgzQ9IOOV6IA~#lEPyr5&xfdSRRNp)Zkg3zYHpczUa4!Ht-GzhL7~UNf_*0zwMzc>!+zTex8tg? z138tR5+}LcrI+yi(cthh$L{L#@UY{cW85qOxj&l72Xg-pEE1lYpP?6jzv*Q91ODDb z6A5Oe%8K|002&37bRp%xfJHG5{ssCw>VJXegb&W>=q7Bl%CAV!q7kQpwFg<_RF3u0 z(F1E|>&xU-b-s%oP7y5C%hz197$%s}S9|uXh33+UiIo)E{#L0`@B7RIttRl&h3&8+5Hh^2HBTd@?Jt>ba@8l-u>QXS5U4 zwY5`|ld(xj*P5w!cXpcfBZ5C@9^x?gs|+4q&rDC#_V!9wQtG5r4zbTFtbh~3f}oOmwwxixm09lsj)0e^}*`FK-9>v z(9p<8S6&@qR#2=`A8S~*f8)k`=T`yv$zN1DiSJbf?Sfz9_nH`5b${8MB8IR6Nk}H1 z{k!LFy-%%AQ-WEyE_-a2-7=Sm=MJbPd#OxkeWOY{tgmAN3Y~A}TX&X8A_ex#KY>r1 zgIR0uPFgS{`SO`Ih!&m7BUJuG!7EQJa@t~wuK)h#FvufU%Zxb{QdH+vA(mPRZkUxw zb!xQ)Z%!v6mRx_tB~A^OCCoo|X>b)6bDIpDaG~rqa|`@mtpC4L08`=(H*8BA1NrZ` z`bsa$`|k+kZ(&gEzFD1GeIUP)5=mbhnY;tn+OFv|68EBe$4a!hM5fwyX8!N+>lR6|p*?T0{qv(FEp1 zn9Nt+luPnPDec})co-=Rv%$s2W~U$PMqlC0HE1H=uem=H=j%Cj1xDD5kt6_|ozlsdr_8`9S7&&SDa0HEo&1jX>Cdk$HMUA66zhftgQKNw3yrRhOBl|f}hi~TSFIw ztGx6*;qjQuUs?KA`v>KZ^)V-!1CfDGZYIE`CW1B(HsE_j;qaJ>xl`(_(NoOvTe*Xq z?RdXFrx5TOOHP?{`dIPB+r>JZY<18I2jKFDy=$w`hDU=#E#!x5`gUF2G5Gd{dZIYP zE9QLj{^il7JWz#-1_O6)bOsF`2L7W4+qt=|FRWTiFJ8+0Ck&u{(y=D|1P+OJTt#~} zWX&aljqzhg=E1>Dsc7S0S`=UFd|iuiv7LBe1Z&<|mpolxTw{RA=@APsE%wFT^`4?8I3(uW#;x>NTwWOY&O<-C+be9WHqywS2P zM#WOGnx<(uk2h&5o_`ZQ5aA*QQwKX%ebB0+_%0A>6m4s}%7NNPSZ1OKQ#9y(LxpzN z!!;7Vh>J^&QgeO6LXEVX>6K;J@%hDKU8%O;Y!b~%^F+t1kPl`yC0k*k$vq8yF)RiU ze>wf`Z6zH&@LnQjbARn!qP6E<_SvI$?e~=TfwwetB%GfRe`vRdc%aHeC-jeJG_LT! z6Upv!0PL@2Dx@nRF6CE71$=~!Gue_-QPr*wW718D&iaoiHaGkM(O9 z($~*lnRK<as`!x$ifaC42a?2^!iuz$d~Q&k*PB2V3R+F{FE7F~iAnK&0FfH~bW`k?x9# zLk5A@c4Mv(F0;qc%<@RmNpwhC#i{-8eQo$ABzPn1$B^Z*Q{CGyKB6I4$4+*c-n~;yj#O16h*`BFj=BtT~#JG;8%zSW_3jz8#rY*+$3}<5wU^dU$Yu9y(0) zZfbs7AVnM{$#Ah*>y|2*;5{yw0Qsp3!akn!-G{%nKK(2WQaq_LavUiU#=d{!;?n9l z_;bsZdCzw%Ru%_R6o17+90xWN%U@pEEp-GC3)R_mMq*nNCHY}C6KArq_oBNG{0`Do z2R|6TlrDK@vH_}gYr#t_KV6KJ^b%pK((`c`lho^proT2aqawGuNqNn=)_ZqUdpO3e z6C^IbrkunoA4J4gK()-$wS4FeC-A*RrhI|IvOWC%J{Hc!NsFEvxoUyK-Fli2AX0dg zHq-8Mgo>K0?I7JXICP`9#Eutc)hE?)%2*m2`wK_SQ2 zzcOf;@h50I&6_jlL3wk1DbwvvpE0#V|93xZnjI^|cc?o2YJcIX_!LJ~V}wg}Zw3Jg zhiP~6vB>&QG2PX0R%>99W8=DX_DY&Jqiyo)Y_z@?o1$RPM$fV%>h-m$DXSSGq+?`4 z^0Et6;2NtSW6-|O{;*6Q(?^dvUoNXSlr|IT<+Ay(@ls)DczwYF;qBgHe5}F-6we*J z*-}s+4{ie0G)Pv*RUyLbDJ}!5t{e>w>)e3qn_j8=T?|6arhkt6T<(okuP@5DIA+x| z_&A;26o!wG)x%c+eCOzt{5{NT8n+9B4n~$P!(FtuT5*Ps7atkwv1hWdLfzrb+8hkl zmLm5Z7Jo40ek&54M9)7QJ`x>0cDk!^H`H&t19fx|lmRJJNr>Fesna8cS}vns8!oOP zG6^qPLu{0o9yAj9YHlS;gWJJGL~~q==;vkw8}jO@n=9vY&cen{CKdb|9nNcut_W_G zaOoQ@ZLCL&j*cj)%GFz&Wt08WU*hBKx8rm3q1!3XHV{Wghlz>T?5^*_sAQ&nXqx$vbcdr#y2+R!@pSZcp~^uw^~l2(mFW!J%CaB z_hzKy5R;yR^kZw?88uIGz3IL%aZEhc@l&5g(+?i?tY0t%_cLSE)-nh1<`M;B{H)W{ z+j+3596@>b;fjbUvGBB#E#YIDiH~rLoQ*GMM_p+0h>+4<0oIJ3I^9(t$lsQ__nnq?+nF?55y}WLCP6*{jchE4q6rTWcN5C+iPpCN zbPLV<*p%qX&5{pz&&^@K=%xRt@6AO@N)mdS$_`N6_KE0#?fOP(BD)<}A(KGG2lSAz zFyS?&x9z){khEDH_P*sh^xU6|WCJGgL|!<2m5vP#HCg0*TDpw#y(OlmPIEJ1ty;3K zSU*3znv%CivD?c+BItHqn;5SgTMgfXAu84C3(HJ$_@J5gfoA>>C3EUIC0&V056u}{ zEA4X&n=f|L(yzDhgxpnLlsS)+f*<9~nf~n7>3P!kg~P#dx()1)tcz;ZB{TILKXZ%o zH=h9Xm~ESj=tg0Mo}%Pa@c^7|$*BPBAitVX#1pQOeDaRZYFKjyvS22jm1(S97)a|E z@poN;T!hGsI(}CNwbY{FhXfU5g0s#K{bBjW<~saH*to_LO-M*wK(P3iI*3U}u2f?2 zwbh?mayn!m&&5!7EZZsGM%~u6S^e1Mg2mronbvc2pKc%a-U*rx?-l_=SK38`2ZIS~#*4i1+ zd$CF`<}1UQ@x89#>g(F#dj~@GynF_WI~5gZavshmcT4;8AS|r+wg|d1jc2@*F`qen zv9Y~eHI_=xvic>8t-I`K_&CbE+$LYviZQEb0D~j4Oee#Kk2@d|XyHs$>uq<6Tl@KQr z;_?PHV?IaxJ~`y#2J|U)}rbPCf)sM^P~vP;(q4a=Hvi}hZz#oY03 zB@#3@Qo(Y?*E2{^`%bCX)r^6@E&dZnFZ#Q*BtGcoDD&fP)WC6l3$*fWTb|)BEz_+6 zpEQ?jAJnn2nVO-a!=hpL_#-^+3YQv;%vW_zSWA-1-=4tK%Nvjgk4kUY zCtc|;$oVp-!CfsV`UBadyaam{Mw+WuzO)Qt{(!1t-S7u>U0D#Q(v_bj^8ONEIOB_- zR&8*(K0Y9BObB>w1yc|khn1#a;8|uy&c$W3@SQq*u1xNP11t^Y_IJy-BMFlL-yh4c zGRi84kk(M2>ej2;&LRtB+0?rBgRO7U6SkKjrwtxY+=#k|Ru$VW1g?r>mrG2f072N6 zQCeSY;y6Y4r~10~@;}M)hJg60OYy0qVKXlG`q@v8-ummy7j?iGk8qj2rfTy;W4dSG zQmtF@iLp-svm`?W#u5Y7pa5aM_$J5Dj}7Zds`VIU)TiQoaY?}{Pn)Dp2h&GI=;J9@ zSATp-eFdOrMJ*_dc&Jo6F7B*A7#$zsC)U6K)H*opYFuF&a^(#UwR&tI2gDS9&{LoZ z+c*O1)Q3I7g&m`EYlZEJzA_K%ch;NKj>I6#5sgG;7=4rW!V2s(>*H|wJQPm_hx6Pl z^{6PB$5mISh4cDEdwtDxtAnGi-uapYh?kD#y_CaY+SrO!4t;&$al@};w6e0}ZQRXB zpvHT@z3nCdepLYAAUH3^lwHyb0Gqpgs`9;ds@Z?;M^{xb&`f@NlV@I9rl+~cngucO zNIR^}D(b0ghs>#SlN{BQ%5P`H;q5-k%Ff!Zg2>Z*&7@~;M8tw}N=hHt4ds(7b{6Cf zIo)K~>Mh<)5`c|)?Zti$gORD%;+WH;gq&z0)H%{}F#$g0KlBD)s$gR)Z+S*8@ zBw;P`vESgd+tUy*_a@CU)pVRpQ%X%$HU^}(kAR);_;ubOv;O+%^I@FMuPgBE$%1i7 zN}4*JE9^*Aj`1x_vjzIP>1WN+^jh!VV-X@)ZZ7m1PM^NPG&NoAb<$>5x}9f4JZ*gB zhL}%Mk$42tsm@pD(fz3H>)IJ{I_OS?#AL4B#N)&y{ET;dQ-8B?*YL{u!sFG@J_*@R zjW~)+M-M1sRRfmBM5E8tINGpYM`c(3zPuR|Ux}d@B~9jTc3d95R*y&S%%|$;X*gt{ zB<@{{JjTF0l>oDJtEE?Gw`_MyU8>C2)E!r~*4|Z>y;1Cmj6Zze=X?)r*o>n@G&AB= z3S196$rxu41i*oF)P7xfYu1~%kL+wt2Bk-P+x@EdDb|Wa`H3~CrJveSY<^e;5>*%y z!V6;1`XDAwbuD*9Od37!a24}`zvZTZ6L4pgopXQcOZUmLzAZlxyp;0bo}Jxzr7~N- zeK~f2#6hD-!(6`qrwg@jceDNR%p(z)bS2o~gTNWBEnYWUF zp7vn`GRAM)Ass!O_m69-)H<-$HTx5kcWXMasY9Np6Adi8nPY!Cy)NZdQ4$_J+8-n0 zuwHH&{_y@GZgz_1&Z;MC1C)KXjyOn;LffA|cg>2scz>jQ$ne_m({Aujob+?di@jXp zm}b2CG`x+xM(Lsdmw`iB!k5cyb3@>51gNzk_h=^vV93oqrFL+g85*Y&o(FQf2?7_O z$TS(5didnI-UJpCRG57N&`QXWL~*iIJWN0u2I;en<#J+I>Q7uCJGnV`r;UN{Wi|{+u$gpvRwE-{{I43%I?j=5-e` zP7Q0>y8b+#PBhc)*MKq6JA={X()#1*S}zc_wdFG8WDrr{33=E(xt|~GU+(1__JNVq z%n`3IiGlA&1u&;<=wF99+&7UkJVL{ePz2-r-+pyIOyc?>iUJx`rs}S+_~h{M-T?)L zk~cxlS}vAk;p(I_0JCw2?Zhpl*rVALZ9ls)lvER~l6TkAgWF~0ZhtNP%SsY=;^O;q zf#{QkrAMo$Fv9MI&HG)3gOm#fJ%+$TOC&(3xj zTbbgaYrOb5%z!$`SahwcW6|AwK`)TW$YL$?>8DnGnTtNC>*w%ZX2Yy^Q@+=3N5zxO zX<4RiD^O%kx6ifRSwNi2M>QH_Q_n!@_G$ThZ-HT6uuF2Z!hZfohCmhcKn4bi{k937 z(^mbQ%)xY@8O2wg5~m*DS?{v~TTD{YEBMG`mfP9xmTXGoIsT>gH8ss(c9=Nj!x96n zI<`qC@sx7>yrB!L`ai)iN`uvKr`ux#A#y^(yTQ0Y`l^^`(|3nc6d0`ur^&4>p@Q4t zsvgUMQ%ZrN$yvp8C~7{!1}v`2UrbGFlnNk*LJz^C=}?(EcXQjPHgNkknr`2u)sc}# z6agsK7KlwAC{%`;UXnze^Hn1WgCP++FON<4<|oZRlJEe|Z{{n%33>CrKK)_SQPrdk zDd?#%0eQiiGw(cZH>P(QBQMg>Mfe&Fim&jl8`Z~O9C41er;dWCx~t3HBKr!2bl)9M z+1O-n;7>)mwo@}jpHl{h`}H;n5@01}iivYUU0Pbly)*?mtfqUa?u*Ee!C@b8HqMoI zL44uzL}wHfN})ldwoTs89`8}}YvVdz(_2n9SbW!6e6t$y$e6;RhUN2hzF(dBxd}HU zUy;;&WFr-la;(!3p$plD_->xGRDoq=>;Td-CaVG(d!=2n}|2N^vYrQI5XB+be)kGbJ@ z8^7`fz3VE#>B&c7Tycv+XK#L4z?&zQb+4CS%n4N+9~`7S0jC17yHpq0mTT@zJ~1& zIp6Q&!-uX5f2Cc-qvr$V!R<&ZA82zV&Vz)NH0Lht%QRU`OuoOKZ^e3DDNhmb(q;}z z)3SNF4P}=%1ztHR@RE!9-JY#O^~Y&j-_w1k^eV32uQ+|ED(CKU zKbLl*!SQmR2ez8yZVa0U;9udBU5um4;loQyG)xZ1M$}0T?hDU{(5hfi$$oKzo;>xo zJ)F7*k=!;P3_74z`fm|v5Nx&0PhP00NiMbbc8!OB^>F(eJRU!HW7_DbO=`oM`4El* zAVeXZ6^Zf3Ov(KnFo7AFL{+1Ahy^~jK4eXDzaBsM6kO=Jec7bxwb^|?1W!8Oij#n1 zU!)oue2f6c7{1oK>XW3xi{x_r?OaETJO3NM+LHUP-j1m}eY&*w5yt_R@_qrZ=<6iy zR?GR#w`8w}%BQbKONhoRV?V)fkoWXck+JhJIo@#U03R!#mpTX$ySkkwvf(9k-wMFw z6Lu|J5SD;#NL|RZf>l1j=QGT+ywx&bB#j8p--0(D>=u|@xlU%TT6tVqSan7>?%$Li z9ciN#eEyxAt6^KA-);r;7{I1`(8XS@*&#+lx5}=1k9zmBO27Zz=y4F}?3-`FTe!Ct zM`*CzZYif$rZz0O=R&p+7BPsgJ15@wIC(Xe8vi3$+ehP;KO>wmF8M0^`q^ttP`|vD zosO@G2@&I+*Db9|%w@yYu7f3hAudR>lu2q;D>Xcbc8d3xNS> zkL1aV|4z34ul(u%{1n)-JVpFR61-Lr4rzSpwdga{ox~v*n~zp1U|MJfv;54r8k!W> zn&Q@(+91sRLKm04jY9rC^vC(V(ntqczO;k{zq(YgAZsTq3Tx*tT@huzott&WdK%`G zJ5xImm^Vh>R?4w))(?Jv92llTGdeeEe`#*Bo~n{6oZ{wGP|fRYlFupoPON*FZIww4 zR^H$lcd4ah@4>d<>L_7|>$}i=ci^S*`8)AMVQCn(tX4w=lkR+N$oDslCEIL)UvvmS zAS9CEpI?xOLzh-aoUyZ`VQpCpKW+7?59{{ydOdN^)J=09VHH|0GjC)M$QVnx240zJ zDTY~|but?|ko)B9S)McnO)1hcqjY5MW+p0Gkj5$%fGyKw@$UNv1TiR<4lr-tmev^R zs~gZp=9;j8_ysBUi)}F@rSKbN8*+3s(r@p273b7;v$i(Iv((jCt#Q`8`!2S(c2zYb z%%}}cSz75S{lbvgIiSw7szR3aoVT(%dCI5Y?5s3Jb5ohFb6JGz3_~}4bN1u` zr;$H<>uD~$pyWS^UnQSx{oozv^yM8DImg>E3IASHVl(xbHen_ z`nsjKQVf$*?bRyjwu%!Wx(WQ6!%?Xz?9;HAtV3dLWAciQ(J=f{-M)Nz@&~({r^VkQ zI4tI?0z!9Rp`KdvVgIOYO*3Lu%?BqqQn}r-3hm02*6cPn&=>r7W{f&RM|rLMu?RVh z8&nvv>xsWT$z2Wy8JezCBqD4UO|<9P#T*QwR4eP28Q*## z-z0*bmNralr6|SKF^L8nQ;OP+QGT2Te)_ljlzhl(vN9JJ#sT@u#1&<@K-W#JU z`gW(~ZQ;D!#K_PmHzj4xvAMo$$mpBzG#YwKQk96pA68Pnan>cR2sthO0QHK4XV1}5 zL;?EUFEoD$quKXz!zPaPQLBV?Y61%~&5su~7{+%uQz6iBuX;)2dY}e_MzA@N(fNbL z@+-{{cfCTiy0g~>Tq@%IP%<=r&)k4yj@hALPNQi!0zF@iK6`44zlFw(G&U&YMF%(u zstl`uEB1YP$cN}m3)NyDxVWZg>wT&YXU{8q(LdM?F_jrM?(HqBC0yP;3h;z8^_1z| zOol&gy0;23rv>X~6IWTt*xzrbxsp&y^!ukhhx!A+qOlmqQF`MhuNY@2^7w8#vtMK! zw1bt9`~k&a$zgD)>6lw0%&0%gTh)F7HpzxzeW}MY)Unyj;Q<}$y*mg@ zpm&R5Z0FmHn5Ywr$1^VV!>_SHwryqSb$*wPMaT9wcA{B6^N^z$DbV5?4(}IC6`-aA z>RiEMmQd`F%Q!ZdcbKyjY_+=#3%0rMj@H(SZ5NtL4cO&>7>-Vrw~xJX`gNe0VJ~M_S#XnG|>TtjLA>aA+XC3w0^GI@@oudHZ{PxE@Lb z!RSB`Ybj|PhqTmNxTBpFc0{BIqQP8yM*Tj~)3d3Raf^khG2rP0lV2ETh|60TK0djW zZhQ+?yPsEEN4wC}3PTn8PPyn84eXhYj@;=BowCc?{kT^6jkzi~eIUR7_Jh=gPj(1HWqpWgI1T@ya!h!4N-da?@(_Ge9y(uf|IACI z=ZK7}-#wn?nbJ_hAK1A!A@Iy;k=8kxM~-sl;eIZT;4G#a60&uH+33Xn-0~gnO^1mw z5wedG(!q%LoY6w-Epbc!a>eD@8Y_K6?JTr(>X&`ZE2C;r+@&o7J`{X-O-)?Xe#Q@Mv8)bokYA(&v9(%ZetwoKAc5Vh3bUs-{SdR%NWLMZ%LYjaitG3oa8;b?ZV^6}LO#7pn7) z52<{xq1x-~`^0^AQLlRSjIRl{#8oWXtI&xnjy%$aEN26Bx5|dgSga~!LY`xXW>WI> zUG;;NKZpA~RdFd&0oa#%N&h583)l;c+f0;_JmRnK(6t#=U!idhm0NJX z+zE_9Mcmn*ZMgC96gkS(<$1V8O($mHam}2Q@TWsAAQ=_)&GwDd$0&W~=C(%&Bm68P z7o7faPRW2WQo#fl(%Kn93yqz2N{4nB=jT{*Tnt&l=@j(vik6e=oHiVJ8xT)?0f7n1 zH#vIcCV;pau=j)t4>zf!i?S=rq4{*N`l4iCc68+exC)4)#A;^ zPy0vF=GJG`Dbk`Sv2+Z3o>n;($qg-xK~IDCoXO|pv#9S{VVgdOdjCc-m9)@Xbru=h z3rpv*E-S!!;jOSVe$8D$635NHrlJm5C5h5&%dXp-Jse)>q~VUAFC6C|Dyf3QD@Gn= zxUo>MuzMI;Zt}WB&h#A(M8?9YcdhGYfu5>Nds?o+*P`EkTV>Ygo$A)Il_~G!hDEEg z_tnmGG?jE4OxV?(A@h+-w{Hnftl!;C01G!rA&=!o7OGTXI>mB-VZIx${&3Mea!#mOFf(3Rf2 zjZ%kdiW)e4WsvWlht1l28jfc>z5dhAPO=WZB|=kAyOIt81%HVO65cpT9s0)Hl-f+d zDkg3K$Mkn)ieYt)dROFb2-RiG(pMV3!KOpK^w5W|GtAfM#6c4H5eWN~qy0jSJ+~0? zkpv4KZ}t5Wi2;3`Bg*^xEZl6oRd%|cXpfiy4OR_V3N~1QqBI8|?0-R3AhIO}1#wF` znGVxoP-wlmJAAM6y=)}rMhdEa2?A$plk?5;1~t2r{E_UM4SrY9Zoht(W~FSTm#{l>XSH z2pR|>ze#Qtm@P%9@;=g%mLYDF%k@2-2~6dQ zCtPYJigHxo4ae_;ap>4)=dcBuKpx2jMAY)pCTs2+2m)CoI4m7{8W^~bJbvK3>A-`T z{kix%OKnZbV7QQFyG60wDOMMd(3-|^OyfWQTF!zAngRdWOMMdu zqEB3wwTYolwSS@kBAW*jf9jMXBoYzf{IDshBjzav&GW&9hFiwN`Clm3jz+kirdT)k z0tdF0YY~>#=m3YOZ3>6j=`$u{(0E0pP14Rp0+K%Fqa27%(?A*o3f7Mll93x0s)$1C z$oS%n@MCrzIiB8I&R1oFdK!J>GX6?0Fqc8(n7OO$As*s8L{qS2m1ZsW zVOU$^;Y2LEMD2VHH2pJyJcURY%9blDc|^Ir4b|kAyFv5Lz4%1FPk(3d?CE(TT~Ij8Z`z$izgCd=8a(hHhulKKYxHKEF&=abbCJ=c3MbS=p7z zC!~NP(=7ILSx&sosX&9ZXE)bNw_b~T;d$=UlJD+#7Z%Jn(UHPC&{~;-Op&c5p$jPz zZ>)w=HkKO;#HB7m!x}oZLJl9QbPgzX!Ej*$aCHFUb#@VnPqZjfeD#Vdd&6%--)CZ1 zp1(hOqCXwGuM>t8rKf7PfpnQr;DW+9uv(1ogJ`asDqi1(j3(rKZ?DjL9uHI$(2*6+ znumvGVQDjrRt4(8AFFQrDc$eQ*x7H~>-^^#CR&B#@jspi9W*4fhK5lMNRxHLN{FP- z=1WJoq-2?-<2B%Ku09`xPju4U`|K-kHuuil9}y@T*?(D4t!Wt1(tiIZ?yDrH#iL_3 zhwY)GL`Bjtj_2$Qwm{{}W_BP3elyKt@SLoV(B&?NEAyJSq&9v)fL2z5bo-UcNu!@a z`i(nwz&wLOz0F3z*Z|AND#s1W2)yrI2-P@^Xz*AF&N`_yY?H<>?JifAiTKCtQzmKp zv6Q{e5xVMnuLs|MYx;hQA_r%O)C2XZaGgnn`P#Oz(g8!4JF^QMh&w~$T<59oZBU!- z-MgfbB@4OOo*zYJJ*R!UIr)K$Is`5?^Cmh3x2r?aw9zrusKt!kr$%3Qq8pN%c*S-; z|H%$`^&E9Xew4Ozdv?1Z;}Vq zOQl`inqfJA5IGXKv_!%82T3JHpuv;;UHdGEO+nInEJ7;WC4-Z!$yH`cxTD|G;tP5C z3aURQ@waW#xcS3x-*BmUb99fiRa>sxuSwNC7|ixk?$TQgT36dVrJXn>Nk)qS}^An$SLJFh{#c-CWXfzD2M~6Y@ShPIj4UO@AWC{ z-_M2UpATR+z}3KMPwczi2-avi4bcJeRu5>o6*4uOC50xNqT{o|X; zZY3)-V}0?qwMnG@V3}YC`tg(#x|47C6Ck#7Lsc(mK5{3AA9wD-FfBGx^}z)|0+!^@ zVLtG>+PaEnx|!btiGMU$ymJ2xMd!vy+v^HF(>riT+)DtH#%|f3$lJ+NQ#N=-8LiWr z)P7fX%l2cs*u&|r{UkXra&jJJ_cs|R%kQwBJem(t)?5(2Zl5pB-ds&0ZX;+Vga>{I zT8z#cF(Zgp=mHY}n|nxRIM#=aLFk^t%;|Xhjkk9vdCuPy6R@VleuoZX38l)Qut(0{*|xOc;5MFA~=7y_-vgU}e;r6~_VKK6If4GIi z-NQ_d>h7<=a|%b=v3BZZ~b4xI7f$y5gob zYPhOP`!UP~tA2*R{L&X*KjTEfvZ`QM^K!4Z$PoAG(=%UootPwtuaJ*#u)ec1qhW+u zbn4KK453^6EFL|OC(XWiR*H3xjBe#CNRKdj9e0(WSew!KyaCK`YhnxSMT2DC~ z{E?s3-nf90xY&%fCKqrzHe~SWR$VHMaxrm8Tm>VY-|=!}ICHEAH%O?oJYvaq(+~9q zyzL)sB1(e$ocg%>vyj3m&GGE>YE!IgWDKula3zJ}z#~sUA4C|y;Oi*97yqx4s7a376~Rf%cajA>8K`#r9qtc+4}?}j*nR@fJGV@! z^lUzLLS%mku&dDsj$Dz3-@$Gt3Z+Pzaw5FudH~H zkn4p1*kCXBNLn(a>R`O`b`XOIH3tnTk_)}B{mU@q2+k--LbATi^xYH|h|N?@>9(Lb zRDM7dLG;~L6vM-Dj05srv)e%Ukb%{>#$JIG`3>sCguso~o;!M8UhDl1)Qs8V&DL&> zaeNsVnkqt`Q221x7wdM)j6$m5kEDZ1;U!(@Xf&?lTUkrB#jJ{7g`TgM-xXSqsdw&r zLbJX26k3P-`sC&;N|%uMxeM}GRMVP(QU%kPcig;!ZS9V5jX{3%=Z_!X-cL00rdh8W zZBI2Rf5CUmLQmgoPR)15+(gTek&@^6eFAM#ki701~R=>ns;H#O@5%4i$jb!%&IRFXDMO5d}yQWGQb` zm^-PXI)P?o8H^@!L~3O%3R%;KM51|;e<#IpSd!fel2P@z$b#xQK>)D-Cl@(@>Mz$K zdQeIF+u+RX#UQev?9U)DJQ}}&NnD@jx~xO%kT5d~o^g(&;HVL_qWm4=2fi1$M3Ck2 z|6r;h6bJt*bxRbtHGrF)6Qi{I>t`Im*l4hPiEB&K9n5q;_d8hSI^lMPY3)g^iFs?1 zrz3N${-M{@aM8@G1L_jCXw2Do`&`bISYPN%)MyPUNn|ycIEo_l`r!J7Jg?=;XEpTo zolaQ=+vR-bxb|F4`_?wpb8(in>`uPIpJkesi$m*hP+1m_|^<;RHFzC zu;8-t5kuXUvN8$X`Ing7_5#!J6=%h!4i|-m;>nhfte-Y``9{ zKMndD*}$X~W?sKnJU?X*Zjl9OW)A;+`DEy+CikIg4cfE<^V8_F#56RA?6QJgc||)k zw6)IhG_SJ+<|)@(N~jlQ7AfwWtj_~4=8H-@eLii)^tf6i4>FQ6Cpu5X*CNS(?ay{5 zcQIi77TX7ua#0}%2sDim!EiopCXGfY>GL4NJ}x;=mQec7`+A>!3GNh^v47YoG+#fedO?RG?C ze-d5f30hW&j0{$}7>r-`^$iXI$k<;^P|-FFNQ(yn*1tHJErgbFu`5e{IQP7JmdhAcRYbR(dDqNs zYkFaNAi}g?$knj6nzD;Q9P#A~oprtc{FGpaFc7}IC z6>wk#xs8W9Ko=5!F1~TgHm}k9@Py_Wvmqr9^SSOk5^du%*+9N-^7|>Jkmv}08mA^_ zuY$;g`1Yp4t*Q7tt#I7F6&9WfE&|Rz6shLp`SKk8o<^dq%y*m*LtNOd3PUsOvXUPr zJZw^*yiVE@`$#t9RPTli@mP&cW!xUYB<}v1zP*Pl$84wqpB0AktOMp{Ljj6=f!)~- zJLTQRPpetjoG%U4JM4C3~&NJK!S~$s9|Qri}j-=M5|C@ot%OL3^!=#z$z%INrRh#o ztQZLmOLio1Mf@3>E^Dg|3BKOw4zFstUt!9U+$%tB7_q}2VOx{3(3Dqf45THTrTwQa z57f(m(jTtrzLq}G{o3=;98zdiM&5eLOviV1-Xkekb@eDeQy=ybr;OfIiFvArKi|6C zc!c2P95p*fx8PS85{Xw-IAPN!ieC9FooeuN&~j7{gq%)$(GSVUT0K9dJ^yKFW}C95 zJDrX5`VMxWO_kDDlnvV1W?oj|;r?a4mpzh+Ji^kun0vf3mwrqwf6SKP-3B|6Y%$Nw zdjhJheM=<2J2z-GlCJIgVa5F)xO|1YYKMxUfnjJr8gt{nwMu{s5 z`fTD+TWgBtZn1umJd<0*kI*i|giUWaXbPE^W--hkP$p;1c*j=Z(Yce7D!ec*$mbw8 z*LX4zEn1z8nL`xhtjLk*Nu^KCU|=y|n7kH9S9lkkQR)*tNpUzQ&KJt6M5J zxLGcT4S!z-MrvYr5)1qyheVs+9YVWtTVsjNpb?eW*Xn-vT&nd2blJ1t;zG?&n76kO z+l2yL=52QE<77huwP1k93FY2)7qMP8#WMSFz0Q=ZoY^L7PZy|g1ah08` ziyUzT#++DGkxo4%VxIl*7J;_NH3)iu9!Sak=U=%3nK6Dr6ZX7z15#H1EW{AQi&2vN zXCpg$Ak{SbKYQN)+N1yMb4N3l5+VNoDX9G)XrdPuy?1MgdQnT)w`YriaWO0blE{0; zyI81KR;SV^&$_gSl$|r#D328IajJ~y0vWSxsN2cJ3Orxm(soGkI|?jmS++<;HnG?X z!py4F>9CuqT4=0gw`o{%846IY6$0ZmkG$FEMsTj3t#iJXwsqDJ*1I61*NJ~0L_s;o zJ3Ha~bz&ecLwceZNzHOxD~Cprh`AQ!dkO9Md$+MlH&# z`E9!rBMx6s*`}eR?~wSUn$K%pTua`dKaqlzITjnMs;QY6m1LPxM#^0~5UxkJ?F3*- zB_L&XS3@h4u_k(-ATQWXa2%~9S<4K!O%83-pVFqxim=p|SIrQpMh|RVb<2eKgPL{PObZy;)kmZ!*6KY5M5dG4 zp0-04NPV!Bb*BGTJ{7vnSAJ+%vP}KdjJ(8%Z6vh;2W?_UfqO^uzTbv*Vo**FQ}mD< zq>CY9ExF{~!kOP2*96F(0TJoY9Y;mjPH->g3l~JcrTCxz|2JUfGlrKfwP2WZWO2E` zfE%{y7;QfK?CTaB8#-$hYMSU;9`dLw{FPqf=$tl&aRnRV2W{DJDuv$q>9gCM>J?#y zUq=Eb-^;$qFqGEaQ_75ISAzHW@m0a8XG<(U?$N5jebDuC=2f3)aE~B;om;QzTKqa8 zXyq9Jw890ToJDUcYHy?&uhcBCBP=(tPZr{@Y%l+Xa-WLvm>f=ce!n*XS5VVdLUH4Z z7^b9&f_ww9B3xLiDcJ#cJnpn+Gi_}}#faE4tE-nO=~Ngr>e4Z$76fx{3YYNIK`>IN!dD2Tjws zjh!a>#kSR`jcwbu(b%?aZ>+}I*tTusy`OpiTg}ew?B3UYan9#pk4(K(o(bpRI}Cs` zx}W=YD4<>RQe2;3&3L9U9v6o3faMMU$?K{wrFQU-n`ITAr0ch-if9=EueT0gZydimD${Ls4hqV7#y>E=$^)4v!-~R`7757y9IM1l+f4{&IyB z`1ebFy3mSLzI603%Up2j$CT2DYRLYBAbM zJ%iTSpI=a1T$G|V^i55k*Z+LqBM|7f&Klfb&!^~8yLFV%XN#vBD1<}my`FUvld~r> zxj6CfE+;|O-4)0?uBWki(VJZ_Q)k^ov+j$0G!Z8g?#}n|bZn{J7eW$f`|OT8+Rps# zwS&z9PI=f811;mW3(6|)m45Rd_gsu-uSxog1et5Di+n^_A8s!JukQ~v1RO;_Cor-w z;*?IR=&zNVKG9l10E2@Y%u``CFq%$hJzWHC<|Lh)H=~QS)Ca**g|=o7w!Fy|9&NsusQp>E7X+f@BQX> z9Xz*r|7U60`tG9Rn+1IS?svL=NF*fQ>o2Zrz1pt!ujjOCJ@VrA6I^eXzP-@N45p)r z$+AEDg6+rIq%wbtiJdO0pM~|FjA!1tg3z1S9QWktGlzSjkJF&bn+gbE`8XT<4{q4KThzQVrx0Tq40+)WIDhT`LtlwRMo&V&&3_k2dpK}HMGIUVf4UYC`I3R~?o;3J zM|!)mmZ!@AyuH`<*<%mMFg=`ET|odw8K5 zc?>Bv6bu{E9%g;(--r+CP5KTy7Sh*kW=*yeMz!{^cHQlFb))~7^jVijL|W7vlEz^& z-(~4D#t5+D66o_L_*3F~pRRk`=K)#!GnupVxm;8SFMW$%jcySejjF>*ndfzU=r{VV zR6JY2@V6C&_3#o&TvY7vdJdRWyX?qujLga4U- z3CU-33B!hGW$&f_-U||HqV1JyK{Vq(rgUq|qBi`?tvA&AkU{MJ8v2XMc{+c{ zp@RL~NprUMD)+kE8UZ~x43ts)L^FRkSKU-pr8Aud7(g^CAbI>|#!X+%8rSFGx^68Y ztEN@#40qS^wjgmmhaR$I);YzhmsS6Xt@cJm@ySP-s*)GC@B6ixh_a~^KkGdw!=`pq zOU8{`7?>daFU_o;&l4D{TK;@7dRlZS-~M|k-qn1YtH5r8TXSVFMVYYnq4 zGFsyTo0x+%YgO+b0bju;M!GtkSggIT^?^54!1TPvdqmy!dM!$d^NWj3rE2Xi{4}TC z(uTR`@H2bVkfxr3+L&?-qbC)X^j)E;Xq-D6@&W_7}D_d zE;~!Mlf|$E?l-QF=C9;v^S$4I@a$Y;XP4{Ms_QA>vdi+4yNPVISd{@4?XmjRY?6co zD9lSs7ie#L=H!J5AV{);!=20scH~F(%QueYZ9?igYUxM!kCM@UY%{VZF1~UkdA>m+ z^^2r-vJ`k0i&;pkWWH|M*f;4^UJ;Q)$%1R(*HqhpmWMHUlunu;Lu49u#us|cp(vBw~!T&n7)eKU48MXB0A&Fi3 z)?n*lr7WyxZSNh^Sh`0ko;9hXu5`#8C6r}w`o2(}e_k>x(iTY{_TxGZ83tE-S^0v1sw0 z2ss`lLi?0rYf)Dr(^r5aavwD^68XEnX`P1K(rOd}uL-CD0K*aI!$0emHnAcy?gB{3 zRkE&fX=l->$#?jqqv&ItEcLUh6(!v@3Xo$5OZkj$Gl*Sa;m14!d&!zAuzzQyVJ4#? z8OcM80xS=GXjYk}9`~ zQ`M?Dweojg)wFZ6skgQN(8GDl>SNS7>aJZ)^>_`^S?W$1QegRaJa`;=eBSV}ll~mVc?^@OgYE7!O8D zOv*$5^T+8N7r*r2u|XeN;4^Yj(wxfiFg{btgFB0x?cO;t1@^FrQuNoa23|}qseoNIO7!Bknb)co-PEUs;4xyV+3pd0vO0F(UchXOxwd*qUY{vtuZzL|LO9 zlT#!m{>`$eh6o>BQVAb|{f;GFqGV98Qlp-TiZe(hhu7(*DWVJkVM;#JKEDRuO>hjB0=&`ihVpBu) zbJ+kN@`jW)0iX=W7SzBM-0X@Zko+lVLvL*S9~n?n4GdVVh~)714=JjTtTgqe7nUSs z;&ZFLrjWWd>A_d*3mF6uv+urX=KSvaU_A z9ardsvl#>J zlxXShhuX}@rLEteC@INnPa}g-14!L2D+;Nz-UjtP+;6?c^X|Z2>Pgo#%R%CRQ(F~d`OTI19Hcy@BnCz{!iK>pB`dncHX!Z}99 zme)jPc~pST-9`OgEK#4@(O~6jQT*-s-P(~z>vLL@)bi-trJ+Zy_R|x_9ec(9!6u%e7uK^W#vc4E(P3V8-NBOt}GB2Om(I7Wt~!>}<3%SY2}^s_FO_h!USP z;QP_{_6(d`FLtZenRZb2_DU)ax8qV-@U`}&y52BXAp%#EzVX?}wN^Nj{NRcj1pu|> zbUL{1>NrZ(3sKOO-7t}#=g+YLc!-}LyP2dhY4w&Ef$81->GO?bGVONjAy5tqLZn1g z)Eoe2PS3|JG);G|5F(k+kB$di*UfRunz;CXqe=f!IF2!ih}0Uv!NEcJL(G=kKJC6; z3D?HeS*q&zr1hbobm?~I$ntO34W+Wtv={>hZnvM*O{N;3k=dMB)o-!b z;HHwR62(7~ruz;P&lGj?Zmk{7d%T z3wBx#&@n4b9#Ca?Ln{#(TMw8_==KvlDa&@sVp6-|bs>a-1G2>f{=H2PJ9j$075scD z?)6N%&t@iVKr8#628ivcVzj$Ubp^a03EnR{>ptzRq4VP@anh*TPC$6Mzua`SrdBG|gwe#5=jJV-JbSWJ(l z{)m)C47BYcW{&Uj4m7=7&&csH*q5O1hy{w{#@PUCE?u9I^JW%bpQ}Q9`?otZ7?`_b zv`h*#w7z9i$37(B4sUU3D4@-LaVnPDE-MMZyX;8dxhyOW1~VL1HK+2Xsp{^pyShK= z1JJ68tTeuiK4enELzHeT>t%D+v z-#M^qn~<02U~6&Ur_x8i((sd9U81$AvVGam(9%*S!rq`dINAtf$Xq_0+Q~_=s$SOG z_I5j1==10&TIH};7g|4yQU;BuSW57x(==iFR~zDu6GO-|5J)*uuPa8le!z8%F2 z?dE7OTM8Fd)mdpze=ogVoy=aQ;9KCbRdkk*+Qgf}rN)B-9c(7Fql|>R8_L^PEjpxI z0DzWLv>t#sm*9;_PIg{Ol&Z2XmPb?c-4Eb#BQM}%IiIM8#d78A}dC5&r4bMxi}DkrEJ}3jrTH@D>*}g`q6aLG^nJ2lw7lMLzuYsnA%93fh%EA!NE{50lnY!F4(yb zQ(JX6oY?-FobzvgRZQcH-u&?Y|T;yzmUqZ2ZH>mzJxcU$O(WPZ#3F$R1u-L=LABrYZE+ zQkH6HW~EKM(#r^EJ@Ut-8@TR)Ll3eH8jblbl7g$GyY1bKXXzT?f;{zXXz57Oojm`P z!d63~RnBoSqVzdi0Cce^t|f5Ojwk6gkMB3ehujqrM$Dhxyg9h7cV{-imtqWdJ0z&? zKrKmNnfS?`OjDif=?ajW0P8J(+L2i>GSbHBV)cH0#4vbw&GC3OWk#V`dbb|TC@sT- zRDxC%8bd)6@Oo)Fjyo7h%$L=|>DR((VBq#*elP~K))U+aMQ)dT0JTE7!fhLdnZ;jE zR^Ex#_niiu!s0@^-VO^LGZ^pMsQ-C~Mv*1*cmXixn3$g4J6>&OwbWM+0FK)!?N{VI zfzRH3gL91y-yB65{e!V7cPMVxgWSLX!=+#(1RJ0@ZA+xnkc3%R=gbx^ezJFTanF=)+jbAkm>u6+5kxKSD~9XB(S79AgnaArc#P!577 z)mno6-$5bV$OknBio~Y)Beh*#Trq1<06m~f`{&-AJ&HJ@p%KwRwUH*3dKyHXe82eh ziYj0y>xE8pz%K5cBXWB&RN23NlfD}kN~_!)!*PYu;!YbgO57Q*DZBj|k_l!6=`#M$ zBy-h|258(Cs@|@kDKdL1YCwq2Vv$<|Sbtc%S~4(q8+8}WP# zNV3JE44&+YWlaa*PfpcAh(%Y=-@XiwY)^}qRqelCrtx6qsxo{$aFmz3?IN*TldvaG z7XU7ORJ7JNhm(`1GZs`-&ZD0*Gr+Bz+vWNo=?uAWe`xnBp=jQC_gghkWH@}A>mi{0 zJ)uHHb3Z0KIh{^#;~pL5eAGfkRqIH7@o;cly<6OH;kGF?H1{YHA)KMHKZLZ>tmt@7 z+VHD_1TSQvuCpwtylrPSwLUwWoku!&y@m9my^7e>zxeJg%}ge)94?( zlxy-Yo6W=8QA;IZUiy5DZOjv%R;sGL*B0X=L3+QHHa0Wh+dcMIQ}8xdmJ>smNk1lr z-f(}0P1dNzX~KNp4s}WsROzUgz;eDzkX*2>vaZ}9J(h2%!C|k{o%s`}sH-a%s$eE1 znlo2=Z;T}V;d%|ScIHI45pSU4)SwXIq9;gbEt=uEUN&9@&F?Ty;g(FZvB3*-Ns-_E zX#);TMb*Tt*OT&e2?luA%F`~iHeK)E3rVo1>+i>dgV*u|y+{2zRMksaw!#&bw_uQf zu%*-IQf7%m$*1`UiyD%ki_}Cw-{mD?7SqozaD2Hmpg*xudl_4YrpHfNdK`aSX0Uzw zVr;;T)W=2JH6#qp@KNWm{^#~XS*;zZh;gm?j_Y0Eee%=ua<*FS4m-D3KlR<9{!qD^ z$K`?`$r%QlUW$XVME@ajLQB43fA9IT`aaR$UteZ~>ui5}F+0us%2X8LFqwA1Y4wP5 zmhUHMcJ@ga&wK-PPES96L0@rO6p(G<{&i$-uh8#CK}D9N&BnYqyHp4 zy*U=k9(LRY?2;n}Dp&lL*oj~`njv#DiXi?^AGt2AMdN#E&!zRD*zZMRTl-mh_ z_1E=WOf~&5E$%po0|+rcpJhX38Q7D7cYCqyddjDoD=Rk`L^Lo=W8B6P_%PYr84T;s z@s;u76%Ky8u^i|suos^$LHj`uAk6-m-p)AbykvIg3<-RGLuPC#POKo@$x4eP>Mb-( zV~u|7HvEv7;KxjXW>xXKOfj@1k0$0$>mb49Eu`3SIwvn^4E}9UKv|PliEG8kgakjD z%AeDGu@zd^3*%nR72#;JJB}mu?k|unB7*<<8lDf|^&x;vgcoUD-5z@bg^wKO=<~;l zc6TrjUEp0r7#ax)K&{jbF*{M}dQG$bqh^YGy(sW>t!}R_ll;LoRuJct#>W{<4tM&{E&o=X3CcR#=Z*a9tNED10O zM;lqaf$EKv{gP`o)gAFC7BZav&cF}I^%D8&c2dimErxHf$G_u^`Ldg6?bI%p4H?$^ zmD!bkh)~kl*iKax28FLbf`Q%ocq5CU+i3W^f&wMoKA1thEfGssgbI+a5cwh!CZ~_) ze2xK>%ctEnJK!;7h`{fkT0Hi^;+G7EM8SdKy zK#85~ayiO84W4Lae{$UYkp(DM2dy9_^0wpDpIZlzTBJz`KE7JMoG{z=@K=g^c@;v# z*fiLaM1hreJy8TuW%RG%{V1KX8V@{>+v6j+Q>nLvV`K=;lQQ5%MHuHU# z**2%kTvUi44w)nawRrxy(osjdwW~Dy8(MSN>YBo__tomS21}kSiL~NQ67$oLX$C0C zJ=7lc2Z@U_4mJJ1JoL0WdhtpG#cg(`DCr_3L9u|>@IdBfC6AA5bsOm-tQ7y*tA(dc zH6<&{;QfBel4WB0aa_&S8pLjwhrGv$9Py|_s9mkJ__GeG0m9B486Rk2@Ymcko%X1dc`SxKA2ym!%A-Wp; z{c%DD`s|nxKM*PQQe(Vao!L*N2VO*CKk(^&>?m1r>xbDl^S1KxTFwCl3L-@nS1N1v z(%6<2Oy)WE!-K3rm!SY?yhnNCKDZetxNIiHoX>m3oUoib-`ZSF=c(Zl0yS}QYptRD z_2TEn91m*sAOTQr7zMla*-8?i_ZSG*yFH2)G6Oo4;kfZ~)76&sjt32J8Y2Mc@#5X| zn!Ov&LoX@<$b8cF6V_%RD@60qN^xO3f;Arn^rz(d8{tWU$N-O{4$@qB3;m`Dk9+{-zX*b`q zkwPpE(`U{2&Sms1ft<;f@blfaLG1#};C@Qy@o2L!W0)?Lvq9?)_AlFgIN?M}#+a+3 zEM1MWS~12&04c$OYN8COalKrsIKFF%<1i}QM@^#DzArHB5%ITpcH|`*ANP4uLH>R*HAyPAr|4@M{l7Aj=^C`7@}bd|q!=%F^RK#Y{T-j#g}F9aog!Z!^|9OC&lP9ky7{ZxosxZU@E( z+RiV$vlN`Zt2iXinp5lcAa{p-Z&xSpHFfFkM#Rj)gPg!vr`hNX(CH6qR)1Z5M5+}CDcg(}T(mq0$o zDihRZa$6kC?AsH#4Y4l3PC-LbHh6;=d1}?~4A-R!&N+#OM$MF$!0|{?kwYu!y_r`- zq72B1(Z}?p#O`Ow&!Gy#}c*&27`)C{4XtmdLH*j=qC@OCoJde1y}) zG`Wo`&ORpUkJi${(CphY;-zEoms!il>qDcFC)$>YnV2|hoKvcsOnjdF>zQdImK!qO zp*l9U%%TZOfHJ$bPh(@*I%7<#zCja{$Bl7$8GxJ*p&?3IWk5o6-c9i-4>AHo-L8-H z1X+NOg~Jj|ubnP7=h-QhBV+VmP!RBy&Mlx~4IPZT@#ZCfozF+*#joEVdzq}F3KroJ zT3=3du{(>=kzsES?3eU=>87XeF2*|_KOC5$r;%Ct1>m)07}dI?_VI95bI9;&7i;DF;c0qgRd5SlZkJx)<~W0qe6+?_=(KnN%$VK}w6F!%x0xLp^J@|Dt(CYD;e>d> z6emW|p*}R!-MLtb6Z@W`rfmAbRGt@S2AELK5^gB6(DLg@SUv7>O)fgASZwx$<0M-U zFezd(h6h03La=pS?pKg}JQ+)BCX>aLmBz$Tnl4>=07n>!&eI%sHJshr0_1(FLW_`d ziKT+D-qvKSl2D~N?a}ORf{P1OQZ_CAvI6@Hn$O#??6w;bfBYk`IL4tY=29*7d;GRa zH(Oe^ZeUtl>1Y;yDWG0oS89#C+>e7)RU4eBG-lg5{HzVJ)i43u>{rQLmpM7{Z5M1= zpYAH-dh-x}(o`!ADrFs_($eN7^U#buAJNsiycq+no(9tgo4O&q+EcG&-`CM>33-jf z+b7{SQ5*@b^vT%i^zdN6O_1SQG1%M<%4K&jo|_0V%8}zxH>5C$2tOtwWJUQ8kX#rsX^v)|_3~uAULzNXfPUeyhoFr4t11XfhLM)S~IP zN^ZnWtar|x(T!06c5#V{1sJ0XVvlJ~pj8C-Kv!b`zL|#*^zB8?|lSPoXwqrE?|9$_2GsYcQ=Zhd-=JF>%IS z^M!D5F1`qtt-Tm@6PW#w!E5)bm5@KFsz#n`m?b)|d3t+Pj2bD9;fXHE*_dUjs~cy| zh6E9`r4$5NuU@^jUh-eG*DP!EFvk}b7K@rRl5=r6N#fune;&1qcV(YiCtdqEd+KZRhNzk`g=h;8b=x z&fu!H^qOvRV*fu0K6%Vhm-KvD2{I(i@k?r7Q4Rp;r-vwM9RnpT!>WXRs?#6Xgd2-d z%hWDE249PZAbYMbCtKaS*@2_3mMmJeajtt#k|!Uo;t?TeJ8}PFQ%tiP$pD-WVb`;z z%287O;Jf}}Ax04S6p3}?;5PY;v=En$z!R4-)WH7RC5?@*|Lez4>yX1iTqKTPMFHa1 z&#E>j{V{A@+|nxJu~fa5eCMl0UK@NOZ*-}Qchypp-OB6WlA?XR4e?vJEIbY%WiitOC-Z~#{`uloFasLP*X-HdpcDFd|Rra5G! zfn<`yU{a2h8wX@QR?ZLyl$~AscH#aIL22m*Y*{K?-1I?g{9$g3Qs^_{<+}&n#yp?h zzi%EnFueEgpcxO}2q>wdaLaT98{r`2?8ZSGpMB+UA9ML>`i8>6#VI|UiQ=PEEDtS2 z<=O9?he7)Vp5$7-ZYq~^rJ6ApUI(>}iaKgtPL9$&3qF!q3r_&3?#QgGJiJfNG8_-e zrPOLopBhkAWlnph-sn>n$$9cn^bgw9cId1=9tF#4dL;%c6m?m|tl#l5CBi@Z+Y)Ur z%>BXM4n4xiDr=&@Q8DmDkMpF@3nMjIy*ZPe(87d@E9igOyS)M-emEWC)34bBP(`B0(}<8uu`98b)cozTK=) zJUjHU7ri8KeeT3S3)Hup7LCN6KT|<|dLI`HSaLbS9MjH0@{326kOa8R%fB1elcxR= zxLzF!IBt56WsVfY+}zDdWsRmXVSl~8cI%`oU>3AA0Nj(w{ft1iL}sQQA!u;T^8Mx9 zg)1v7qKS4eay!k`r*$PiD=ksAo;Ial?ZxFQLNh{2!t{HK9n{8wuaHl~v^Sn=r=gr{ z@Ppp82Kzo5*7(0Be5S-e*g%-@N_5m+^*G5tFy>UXmO~v00oGRZ#gg1**V4OdbJZwc zzbfyetH$GtTm45_x;xtN)OXGMLYOnLn`P^6gKN7n7zVo=Yi5cP%@aLc5Ei!W5Buwk z?@7<&5jmJUN;Uk*3_m&L^b%w&Q6P|hU0M&p!6E&m~CbN2t@9O_B&y{ ztkB(n+{D-zK>imNJG|dZ-zLt?;;@=EA3wWZJ=dO3MQPGw6)&G<7tS#t5^@SU9m$m_ zpP4zC8Ju>&PqtLsU((X2wbn;w!TPcVGyKR?5w)WKXWrj7J{nvspl5yRpEfO{n6wD{ z@S-p44}P*Y+~=wQYt>Z)xed=H!u1zfYv=tGDRXXBK=o1{+ylL7Q(be%jzngoCEsXo zAgjiw3F5-Y44rR8E*rWzn8z{|B^T(ro{evNI{*i-PzI6CK^>*^o4c^!B>X5Z!?9CQwsq z+OAf%{eH!&ecbpJZ#Jq9d~(+v_izlsNM85YTm;6eJiq*9smNu3pI1FVf?m~J!_hvQ zV-Z6rBEsmwnxflPf^{Kd7@;F93_d?ykk=Tk)$g`l(JS3vLMF!S$nhWAtwh&2Y|pIn;z66ihzuX}*M*14eUN zQ-ToYbQDIGsjC?$%&L75!mtc90wTJb_gwSQD*Lk9Z+V!&Hfvu86}cGmn-qj+@V?Y% z{O!f|AO+5B&Y9APR4pDoRv>IbY)>XvrS9epDvK31fDl^JAIplE#PTvCVvp?a*Yija zlW3A+@6=UqjgO#*YI)SL=}ZbC0$TlmJdMzjk@eq_hEH}rPkHM6!E;I;cV?LPY#XRf zx5RrzMRRjs@G4w%H0HK*C9&|Mw_3WOZEj8pgM?ciGGG#UyfVs92x_a03f`tdvCjxU3)6Z{d_&G#kzrp-#BqMpj53mJRQXQdZd> zA8Y+-o%ap=;P4oSoo4whmnU2(l!-NXCkdyFxab>?&wq4me2V!WPIk%LE_#&sVupVc z(tadmqF+~hT>TSeTy~1c>Fi*b*B}fEXVqHrIfGcKZuY*VUMz0gu{m>&2jfI+_t+V5 zGHM?)Egw&-dw#^SQ5FG2W-fYf&SWf}DYc3paO)I>NV?h$_Ypgysh&T4L^6KZ^absU zr*Rr4r_g`ut@8e)V1{8akX{Ex-47(pisL8nLjgo)O=B^!|BQxQ!W;%0Cscp=o9GOr zbAvq<4vy&Msnk?E2n$>3rlW4UMn@`tvq)P z3c8;XZPU@QZm);N!|y%Z_c6Tqfpx?1@Orl!R#cj#tIKwfk!gbqowGA1ek7i_GDeKR zM!gWI?FH*=qqsPWJ`@{U$2}&CDX{L{8}XE9s?%jcw6poN_m3#&-gt@U(Iw}KMu;Zm zMy7R8I9?2LuSn&Gh0+s(uyW$thnZ8hz4W(dwntQ_@~ZPgG5LWvKFq)B3UjoO#1h@Z z>ULw;l@`JPQGH(GqIhZif}i~sO1PZq#>m9f8xd!&pff(Ssi=)WZ|8^5J%FdHDBq_p z9)}H!d5^RO0sEAfyc=EQ%fXHzud@zGZ_&LRON{UI9R>ziUI36UQ7pDs0B=i0ZE&-v zS8_fnps3V8EzY7R*zhZwpF35;q1(fWDKZ&4?y@r_ICzUB+p1dxSFE8BrhV514I^lA zwGp=wV8{ppQAY@+o3g^t^r{Wp1Dc>(3k*^*yMJ)wqi35rhS7P2|8a^^cl^qVUac^+ zT<2lC*~*6FiJ5f3wy^%=EkDl?MYY^3R}q1C;`NY9Zx8DnK~r_F%&MkI&090ZkjhMH zJer$`RFqvtBT<1%t9iQjdnhrltf=V&u%+)j7a^P3-w3`*S`VNh|^>ylw94bkkP@n~wqCuAk6g7|S1r6UG`m$?*d+**Kd}ucO zZI0&JdZIp6Lksl6_v4}5mE!;I=J$!{X*bSAa%)-0>s;e$il3*bnhL3#H*U@z*v6NS z_UGM$6~qe>U#gwTg5-B9sPB~CTz5?=iekF*hW==tfH9RS%bMSd6}0nb$V;M9bz3ij z)+SxEGG{B*s%F>Ve9xUFn!2mUR10zyl~!`vb7D`Ty{R8>i!e?f@=FFl;^dF`*o(%0 z_Fr(prUizGL!p1Of$0+Tq}0e6b_SJwGTd>niImg=s&#a z(ojzV6Tas9(DmJS)3L}-U^`l^OyPNC-VH9O?|0!w5n^uc>b_4nQz{C(31Cr*3PB=Z z>ZMCR8n2R*{tq#dpIJ!@#7T8!68Yr%`WhJgmfXGS<2q+0bn}BH+=`d{{ipZ1uqCzC z(Y_T}e<>(DC=~-rtm`orBU2U=#JD(CRz^qiNrB0~aFIltP6_X9RvC{Qq%;wk`1r_H z8Ay1g@4VbO!2<;E~BM{G6=S*mF%09ZdVaj@bAW3NOoVCh+s#}w&4W_>Mp=k$fzXIp#aPT82uku`PlU6Vmq z@&rKJvOa&oz1{SNf*ecyT;i4_>u;BqZH4yz-wa5uzNEG%QV19+>5@m1lR&ZNOb(sr zJARFm@e7auVLC3wnm})humtyB53v}1tLZ=;i(2?63uMG`0Z5UhI-q}RGzS27WGQy* z&LUz8a(>o87YEF>#0Ebw4k4zewY;4fRU@qp)9)^0`g#Lkdc}U`#9+|awR4?N`h4Jk z^Ghl3B5`wDQpqH-x#AHRjC!FE1AX3GUMzUCO>8^z1Ca1iIpauU3M&z7QUahv!{ePIT5a};s4L`kRezB*jKSl ze#-d`o->l*i$xH(7Uz*<2G6b$T43*~dYIT&@>>5sS;e}0)Oe^sfWLgUa5QfE%x2(d z&0M$PWj+iht#4L&hDyFj#s@mf?&pN4D6Y*!l7Hqc1bIAW@a5hO>`GnsKHW3i-IMiz zb%B2NiMaV?LDtclhg0z%kV7O_tzECmPNQyFqMymbe4hPByIJ|!E1BS!F(Ds+b}>%iS&;#UZDF7aGB+n4iV6sLJ=)2Vz9Ha2+bbhu0zWk&d7u z!TmbXVxxSH35}uOw$?6!j%-Xl7tKYdamv=Tnyh@7mB{5GrEt08cj$jl#NU2>o5ZI1 zQFjuh>6!ELv<1ec)y*sUXU*9_l90S;%4)Ef}QY2r#iugKUB zxzld4WEA@{ONCa5zOvOdpxDd&?hJEZ@`Q^;mNP z2KLx#-eiX`A?l!o5JI^N-$H33zvzdaM=*DQOmCG8gGHG zRSA$d6IpEJ+I?~>;KwS1mBycS*=;-8^YzI~%NYX*!I0Q~+`VobL&{~-v28dmu(!u| z{|``(B&o)yjQ~iT`*|ZHyLn~cKl9_Y;})6E6PV!K?5C19uP?AFt)32?B3ZvU7zIeK(DI;CS9iLI+?`?Y6m5nE@J{rbQX;;S;mHo67zOciMOhwR&h}g|yL}>Khv-#T9f5m^iSS94O zguD<9Uv3v0xE!$0SV7~Uk>5Kl)4Xg+rp58t;`UsclE;f_uhl_ki9z}Zw@kg zt)}U4lW%UGx<7Y;t^HxPAvk&KA4~)m5Ovnu8WRO9)mvg`6h1y&>0AHKSG1ne0|^pk zipMKSfEKCqk&>aLK0Xtlmkg=e@9rOh_G{no(0H=h}(r_PEQc^%&BRo%V-lGbD%wwr|p39A+XgKb-pJLin zWld2~{WGtmF3-tPz1?{W7$+mdk5Uw(thn`U%YQq3OODCD=eJx5ua7E1io(GH5SS=F z4f{*{f6AC-V4V3+Gn|uZXep^{ZrF=UtM9)MKDmHb;)4}~3ylWa5Q{n>UrVakY-wqA znu>}I3nS$n!HaIz-F;?hOk=+|inS`>=X^Du6m7iiBQ_UKR;p$rd^gmHw01-aR8?%d zoUYMaAGlclIn8TsI5)vi8e6{qD`o)rLODr}W{ah)id2%Tw$>T9Dj#PsWMF#{GpDW+ zFOTW`92yQ(Y87==O}qV_5}RY^lhVR$c(xjY@w=S?TiYzf^NK;c+@`Agl{V`f3_2~% zRWI&Xg^ZJkZpsgL(Q(W~C`Y0Fm(NO1Un>J3QRZ)eJBH=P>O$C%{PyBV*)Bz5eRCXNTXZOq6}a1k zw0?HpHS8*H;?2RLqrO+-n53y%Sg_8}dAn_Evwl@4-C&UXv%O@v45AZBZkWjO-zr}i zA`n+mY3Qu019-AjRMNu3h=JX2FtdALhC15%`T)3vHmB|DA+9$&z~-C}RmJseG{G5Y z7!9}4EtMdQGH_}wF$@wmL(WPe2F#+s1ArQHJ4hNK8)|pxc7mtlh5GgYrorlSmnhRw#;$CZFEnB| zKLSwp$YlLu0QAgbdn4nR-z0u-r5gS!oWVR7Mk5-Z?mLbX?LnS!ii|K=gBXm_bMs|% z4R?fy`0HlFpP}FB_NvK_rN0_^0)~UNzaj1?>xr&q?;#FsIdd~0!I?2EQRiC)_wJP)ajyD>lYfD%twL8akFe%sfB|NSInmC z9R!|dwXSPRmlZGuCnui^1F?VJ+<5F?K96s&mra$FfJ5m19sm`gQN$+&DY)@^eeyAM zVN2CPEV17nIu2mG-Pds91G4{=wUJ5F7bi>x8yEVT6xYoGM$S(!d}Khdvxf#mRYbCs zmRqE^?mgaac&3scW`&s7TPR;St%86F4KS%9`Vjo}%kIY!3jbEqVmj_$C`e2Oa{lZp zP1n~`PP8EW_4-;AIObx7V6o5`V)d!8e?b18`E_@V%CKnYU+zF#PMnP6u7DUIKm370S6O;x zz&648wXetgtYZc_c@VFM)sDk=bSgbKOJZTG`I}Wv`a(-#*{s<^7wdR2HCu72xqaLF z-$CngPn4T(!uyZOuBs`CIJI2=^{S}dNHH8UJYT+G|AJ>IqGT*^2*6M!!?zOfA7rwH zACkF!vKB~=AwW4D?RR3MOEQH0#yZvVa1{NT2SSl1qaB`ge7%yj3fRbq zs=)6(83i11Jm|#HUckOEJz>Js0IKs^@-H?_gl>2~cHvGJ zgkG`HVsb{oe+ZynrerZq&OT$rrc+1UsK(JZ=6P_GJWhwG{4h$h$+DHwo@ zwPD^XClbuPq?FqJ`4>raj^V#`3!J_)4IiaaIR!Qbb$_tY-{wb_IndllEB!7Cy8JT|gcRGFd6EJPkIbk+J$PO;@Hn(r;D#+-Os_sRQ(C^G9j zGZbR>qW|=p@alf8Pn|ZPA^HN$-@i<)FlPM^=UP&_#}I)Dq^Sl{fs*`L_6{#Cs(u1! z5*ymm_x*zO>8(J%m|sfYpD@TYYbEP@b+Sp5`Dw?1jX_bfYF(x{~kQKj#EDzum7ZQ~3kyl-BdUvsSeOIosZkh+_noe`eRRq8fZ+OB& z0Ydd<&&{@h})?^<5raFM+kpsMW=Fpd<079N%4%bMtP_#cF3Yoq{!CUh&Ij@PwE z4kWPvJM!BJq#%r%%^5!Q-!-Kp{T=b+{A2iG=@7JuVjApFHw;m>zp;1_kLwLs-+xs% zXK?Of{y#jzXe)nk4lhmdtDOxF(XVO}^}i(kivHa=3$bK>*HV@I;O#zA#S-i8U0&$H z!rxj6Dd$?{&A-@4NcbUIF|aL(Qp=4f7Y&bWFqLKh2pUXBRU{biCR0tJHC&|U%)%BR z#MQtE)1nd;n#M_7ASOj-+7^g53mM8wFk{o3(|bZ*vmfF>kd>86{}KVS3KDu@^6G@p z)s4gpd2l&feKh1MBI3jCaVZGDnfG?rJ@HK`emYVr+`>rvm z&$o%w03WuRXE`=s(B+ql!UgdSpR?0eiNL^25hHHRV_7U77OZ;j&3MbMyA?mwo%+Z# zvnv!^Zdblm41VtMy1`lE)es8Pr8^L(JpCL?lr;RiQY)-^BjDl&YpyHVjgX7$=>V_e zgS%1nA*vfkzGea`Y`4eJ&DA%su;=6qaE>7V_-ISidz`_PbgzgKYl@>Ow4+XXD9t+) znAb#cNpuNe3*V_;DDe~(77|i*PML*@?$Y0b|ATtbg@*}lJ%kk%(!_&D_<B$6a6KirE(fC>l-xRLZijJcx7_L=9gR24)qzg&YR`c z;p98w72Bx(_i_Hn%gq=)FPoP5UT@BdRrKfMHubD?u^x3xDi)Ky$`2v8I^dfoS%E9q z`RtA+Hy18Xb@~-C6Zrn=%D#?VCSV31d*#V>bG14M3Auf^1Bx+T-Zou*;gw|C-Y)OO z`>|nZQ9*44pJv3G8j<#E9{%relvM+}HTuscspqCVLFh;KZf`bkyBwiKp;=eF2NMHW zx_S?1mv1_qgpZps`(P%UwN@t9$k8KXNA^byn zwC$j?PX&bi3I!D=*x*{&4Fku&AeY~QRpo;V1;+yqAq3^O5_|3CZr6QxIL+Mb@V_AA zFM5mosiTo-Nf}hEU{(`dA}i(m#%lx<4mH2r*{XGPvxRMk5rB7> zk*F@88!A`mxTz3rUF>v-u{FQ-_xADl3+FdeajRjOVTDHlV+!=5SHVmOnPZ=te8Kv5 zgf_h@+lFyH^s4XHa^{f8;oqWRH!a^nphn;*x7g;Mh3P|n<`%)Qu{D|gsjZiQG!o?X6`+0h`}W)K>(=Clt1eXT*C|p}e~8ivF=qImP$WH& z+?*mxZ2va#HZJ@KYoT|Ry9l<=KC$8KqBiy+_{LNcIRvW$N>-mQlO{iWW!IKbh9yK= zC!ZbtFk>NymScLd-qGj0d;{bE`y13di}tn8)u*P-w`;bmGh;D0ZJPbV(PI2MR55Fdo;$A7x2Ob&|` ztqXR%ccAaGRP43w+r$5lwzmq4s(r&phwhSwp%m$s?vRp}1}SNzySr0BLOK+X4gu*B z2Bf9CLAty4`~83WbRX<}T^mk@8D_2Z*8SX1Z`hBba|wNOlRk_t_#O63DfXHax>qUw zHR)g3jzB~KwCauYjg{Z!URz2w&mr$jloRyjgDd{JAJe?8&j`s#%t}9wRHDe#(JNp4 zZnr0Rn0)kmhfiYDy2}=P!TUMn8^xz&N13>#=SarM*~PI_^nxSes@Jno-|&9Ui889) ziMQn;8>c{#45pB>HT5Ktx6+{BafD~p^sFnz$ZPs(yq`aGY$_Muiu*+A{w(plYW=;Je90IIRTQt ze}6w{Rvb!c;vkKLO%XhY884-X*%uq6x8y@VJk0O)qP~7|N?7rfVZDDJ3nEbH6a$qbKt#^?_+x=g z$UySiTF`K2%LZb+lm*?37pvRI@luxb(J@YYlTFz^p2l~s{MkBfWTd1dT!`2x(-r&A zibaYNZxQF`PYxSZ39RZ#M4_CVs%7~MR@M@Rlw@SMx3(4+ikSmyt7VXF?&M-5Bf?3A8~5Xa#&Cb$#Zo2o%k^{3FF4(Bkdb#BFWov7 zsuqi(Bj#kLQQi#QoE$K)$8|D7P+A-6uELZwDJd6U{$3aiTYErcZA!29o=Bjn~NjM6 zl%;It+Aseo9*>7$=F(r?R>Ry|f&k52Zm{z_S2|c)pco*DyXm1iIjB21+gmn1)C28& z-H#9j|3W5auTL zP?4<`qn1pp@n-kGcX(J6{T;r3I%E8EH7({Ojeg{qSF6XWTTFX>ONE05KZ-N*g(E+e zgKr3{tntr4gjk}73*OcnTuJxv;M^feNyLjBe&-id<*=exR<F<>aqbF?IVM&^-6BF%|Z5HYb+DUbEBCBPrt<*~0pIIMR)4Ot$5O{ZNXq zI+Q)GV6R>w9JfUzy#ST;(b1cYhK741sJcgSlIcws8jgsQlTUM>JI(g|r>{>sgONPf z(ag-@mayh#8!B2#lFT8fXk8Ih1>cdhn4fNBW1(n})6>VSzJ5^C7#|U7Z7Z$Dopo^u zbfomWP<#6}aHr+^xf9{$L<*BU+cFG^fz(0Xyz5u&y6*u-v@UKcXqy^ zJZ()&08VlCY8YESoHjw_>fY0-mUbhgM@c%)LM;dq>hr1j;3cH^8~^KGv*RT#(^`ds z@?XJJYFaGVx~snehGMFYs*hRrZU4FQOG~SDStSeF6~N0y*H-<#0W}pTlKklU?jNsp z&Yz-{BfcFl9QZ}Nwk0O}O2&;Nwzp~nS3SKm^=4&KN1t)zb}c1sW2QsKM~Kn~ z6AcX)(RL+1FV7`PzR|8n3WtURx8qsl<*V`K_^OV+ssOBj0G1E4*)#O)I5=Xlm28Xd zaN@YDYj7T*y)gczcgfU_cZ4Tpd%G&Z!&#c6OOM|*jUbr~&s#iE z(UYqqe;*qrfFlbHYdtupv!?w6aHFq;$ZKjq-evg*FT)bk8siB%PcM_*zn^?52Da4m zX4Wg^JwFk;Z*SxaK_Ji}EvN{V3LlhRN?jxv0g^WydFU01*42#`7#Z#Ta7W?WMt-f> zTS9|+B4fa;bi_<*YJiRXw=)J<&ZK)$CNYIlmBj`r>w#UToC#=eF$*S+#= z>VhG_ulV7aAq}?oPCR$_Ydmb*W1=IBnx5mec3_)d>RgG*#UhRd?X2#EU9mlEz4<1y zQI!DSnfmI+7=ek*(U+9lPtd@DO~3Ku3>(nCtE*k|m6esR4<6QfY68T{wIJzSNbT)F zYD~^ZeeagS0T|(Q$88uup{eO8n3xlPe=MtrN$Cmkxpr@?{n^;_v1{cyenc5`eZWK} z!9+#nKZZIxpIj}RoOQd5u6<8~7%#UT-E0~?2M;5spwG?WN;9CxL%T-(!+)rAnj*J9 zylC-|O0Dr=hj@Ce(Thn)Aw1n_YiLVV$k;GZ`r`WglZcQh(>FN4Tt-d$Ffpm(Rm7wX zDTge8jLEyVZE0>+iQ3>WLk0O7$#f=L?|?Bo9vczK6_0v@uOm(g51lO908(W=PD`PY*1A_vbNeYOztLp8=^d*+A8zAIZrZg*`pp<6_9%; zp0{k4mPbve`uw+CVweuL!Tjzj>nIRY?kv0@o(HG+(N}UaH7S0NH?t$+4#3dUQO5UN zf&l+&yjo}X&`S91lWgZ+N9a1jC2U{O!%t^&(hPZ2qIiA8f^8ilEumYtl~OU)m9yvM z)V@O0@aUl;l36xk>%2MTj)mr?f_curWQ9EH1SLK!qaa&rYH2;!aU+g1yw7KhPMfz= z`#meDe=j0y=)gDQp;ECnm2WSx>WNjAL&5dXULv16dF1_Xwxj$?8Im>MHZuPt`DY2I zSMk30)I)=5>SvxwhkSZt%jKk>R{%TT7pbx8>=5G4GX4)ob}7_8r5E{vD`^T^4;w=> zxD~3_U8h<5q^TQ2Np4DqBfR5WBK-TYO>2jxSaE$esDl0L)7!~!f@__9@jZSL>CiHF z{y;j^c_yecTlnkU{f~R%1K=Xl6%0(>D^KAOR7d{iUGTGqON|BfgdMk7i;E{mE&T(# z%d6A+oL*eufSdMF^AZtZ_&r6*m6qWVPCb5fdE8bK{Ee^gvqs;-r!Oa|SBE z<1dnkXvb$(&s$PRU@TG{4e1&I4JwHUJe=XpN1+!l9Y-}hk+QQLHh#}y4pAli{#K_V zZy$LA^9ztML<@f{Q3d;XdNR4T-r%)ud<#pB8h6;GdD65n=RMZQbGo*RvWRV9a z$NmO}-r7jSE;8HJOaNOm6EO6FA6=XiS^75;#ZcLo|B^uCdTkIlsOA)0>Uix}C*k79!9{(EqB= zrLfhEbR6_@{rxH-ue#djjdqD?9StX*LtEGv0#M##$q9SZbl?Slw&!Zlk%_gUCqG0( zYyEO&Z9isr0$A!rZ&nwPE#82`y5bvhb>+g|*Y}bciJwmz=BYU zw=}&a-iR7kEAOB<;{IHn!kXrVNC@WUzE%0r@Kad(B5G1!#K#-`bD*Uy$$SuO~<{cHPZaB+pFKJ6}ocU?*+FxbZ(azF?nxBt* z*8&Sx|EWz*X8EX<9r|a@*CO@y0;OQ2R{#Q#(jE$EC(M>gI5GsqX;dVgYl|r>VInHc zP>^`%LLsU79Bs~a$55k;^AizEstaKo?b<9SH&6D=sFXjg@Dhgy3p%sY4L7y8>&q$v zrNdu7=&egmKM^5jXj4l6I6k_PWg7js&%N7YTYvKZIgt(*ajVqgQ z!tHY*%5R>oMc<+zXmujb1}Z&4$DewZ`?ClFtLgi;af>;YX=Ph*dQFo|Ly(HDQ6zbKuYa(j+=H)U{e zrI!jb>ju60+9-g2&y9Az4WiMhQOEW<9}ZNdRa8o*R{8&361ULd;iZd^7b~w_&WwJN zVq)tPI_{hyE|f*Ej5w_MH0zQC`VW+pbmmD!#VvE-nYr}s z6OPY!*6D2R&ticgONTxN?=Z2+m>B5=HnDIhRZ|-G3;);rNKAfI#8iCtIqwB+cO7zod{hbOzHBF>K zJUV>H!6I5F76!3lK~ftuI(SGClfwJ;F(IOvK*s?=K6x)Y-)s9fAvD55ps^K`%CJAiP$?{v)9xNC9)-Xf!eRw zpgH#Z1_=C}PM^*H@$}1w85w(!^qdIWy8G53C>^4n_An>B5+O7mj|`2aRUGcK)E_tR z5>e-5A>FMBynAqU^!uS^6k;6^8vL*1~FPrKaM&ggln7@aGpu@y9jx z3GhZn-+Dg|s=2z-jHR`O|3)ndrOX^aJ%fWuDB*m90L!AL=Jn=%2AN_y@XC}M#+5Pw z{`B&d(**+;7cNDdK}&Olr}SHK0;f&Xteus!aO5v3CVvP*Lsu`X8PGi`v9NaN9)2;P z2M3?*l>zAiTKqg+2aKjb* z5rN<>k~MOiB{{!94hP4;z+a`07T6P{UcBl^El38Pq1fx^%E%mD7_tC1w2Ql-ws$y> z-gkxTjf6iRtCZ`Ft;Pp znR-p;v-Wp6J{sN3;w1wr8CGAMlr++xL6iD!8|ioG)8!Htbc>7C*6P=@)t%zAw$%&w zbL8YzuUn>lR>#K2RlemjL`I4$VqzkI7L!VJ_KP?BXj{B*-?r z8MXp0{_}~n*-VXZU-nXXm?OnUo@AwO-tXCkNVZL~+m;`3&&Tnib$)8G8O*3?%c#&4 zHkz}KfKTnD?lfR^{3Z8u!sCa^kB%uZucK%xD}h3#yBoQQeU}Xfs`Y1^Wb+Z+fSewB z+04q#fz%HaS?bQBMmPQi9tZ1@XlRrs=aRC@SkPwflpO0k?LNuYDBfQ)cLZ;SviJxZh_GiDoK_TZgUJ(^O$F%u$x^L7oL+tOr>IL{;IJQVy zNnql)qb#Y~MUm4fp1ph{zcM+^0L^F?qqX-N5LdxPH)5^I-x)lf2b{JG;oBDP9Dg#0*73)e``zvE?n1T==kG0>t+>Z_M_zAR*avqOv7@`OiEHH%LJKa&bM6wd z{{EwZJ7#_7|55R#G}*2NtAQ*8t20V)f*ysedFH}w_IysJtB;N+#6HEfm47K@%>F}`%Tgab7k0=a7#kL)fsPjf%N?!SCWS^D-W6ho}Ep>wg zb1B097oKpz(=2nD2jPy{M&TYq@qIlzebtOy1ZdFFpbY^-*eBQ4yAP=^|1)*9Y23As zk8ByArj%zA`*Tnw|{Q_*iQ5b#clV4$3&6IJolF`tIIyX zGMFw%s9r=ZO36g{0-w|42x+BXYjt20c5}KUHSA+Dt{^LW?0r7;HKyLe5b9%EMNx}9 z))i9Y{2F+peU52fBboMnSflB$->&Q#N}P4XZBZ%c4HP$e8y1MqVTSwSW%X;EBX1Jc z^u!5@g&S|`m$^+F^Reltht z&(b!SzA{fnJ=5}xQedZpm??)&FFh>0Sk@HczX{<8b@V=+lJENbcXl=^m4#GdIN_)Z-Ic=_~ zPb+;j9K21mXDa-0$53I4~>W!PDcC0vCdVb1>&(IFe%u15Uxu z-PjpQUndNqDFp6AL7|k^s^iBC z)Q4RfSKX5X@>zEhTnIKDh8d}GOtLOsPUQHm<2x%pc&@xo1C$D63*K!dl#&*qFP%Nz z$RgHoe69_q_fE4=OLaK})zvNR6i70m4PjoJ_(V;tywqAgOsqrFR45OLI}q6swosc2Id$(O5Mtg06Di+|CF-HbE>+s%?oz#m#03+99{OvGn|mA=^&MNsf0IhUH} zvh@)}f3B}r`|!=rv-zn?1dc}!!v~@^9{3~Ot&@AL(#)tArLswn)F!QdST#zmPUqO_i~O?NJy|8T zk2264n_t{={qycynuSfYgJ#R)cUDboHBnWYn@y{8eA6DouWzhw6N@siBj8{EmA(Hx zd$O?1%rW;}{jx}8EBnp+2g5AV^QkD_Oa>&MlH6>PIV;!D`-_=)@7+4B=*$ZE(P7ec zqa_PM!Yu2$R9=0!5!tt243;TIQ8`7KC=f<4f!7iAk6)T5Tj%w>R@# zLnej{B!0k7r>0YhS~!Q9??z6>!*cK{l+Wc&HPfu%s^%y3RBcOJ*lm(J`p#8eGw<0^ ztd=P3G|$x_NK4Dfi90%8uf`a(aQO1Sz=t!QWMDCjO*8C1_K!fqz@@~lAo~7&whl#J z-g6bsiaRm^)`PQgy8~#-MrBL0P;hh%C^PH1&-%OXB@3p@_Ue+y>GKm65ldh(y^YPu zxGXA$)D9Agh9M@5h7CJ97#M@)P&Js|%6f=NmrMacGb$31W)x2CyRtd6IlqqkFQnhN zd=8}zyF+hsDdMoGca@~|7E4c%!y8q&twqSjx2?vNY?`9;*&m|YwJLG)w{SR=aG{0= zXOzA7%i0cCg+XXJ1fEDKY#@3kb&c3z1B*gti<+IPMTMFT9`9*YV3MrbT`Z~a^Viv> zL;Sr6hyzqKE=4Gj3?;yW_V>p=RNn@|XF~*K2_0O$IGqk0H`bG}Yt&|fw@{f3$O8(SM{n5nxXQz`)CIhqM3~EGK z%TrC+m10Z^7MhRSr~2rf?IM&#-rp;mpP>coJ4H;N>iu16hqqNB*ftN=3MsVA9u`RL z_0%d(C-_`y6YNxF5;R1VNGD}-8N_*$JFt|c&3uxcntg1@+=867c7k6t=|FA01 z7Va@~;qSP~@41JFbJ+CFwl?-baH6tyx3?s@|A~ z`jj(Si5S`)jPpwS8>0u}wWFzEW>^#16}&`irDpnj50W@abWp_A91H5snhI3>DFg0Z zqA(z?{7Qm`h4_<3Q&bH9$|3ZD8wyI79SjevX{U{1FGL>4(|0M9lhghzt#UtBS_u%4 zw(h0pU)0x5bwqYNR{c;A$|lO$ILEYXx90b>oV8+4A=j_`g5Vn5r!-c2yDS|PukEtR zT{$DrzO>v_x@MfAeUbYGBQt>eLw_^p&{@B!zknw-7R;j94hY%nc z80_%4)~fEr3xTrn*i_+Z#D-qqg(la$XkPWu7> zAU|QvDNHKJI^V(}M2tHUFRuJp?Mh7BFg!R4|n~!?FhNHYCe>x5@uHOi`EU}S%OYMnmLH<$lWZ#EF znDjFQ>F7uY*vaqta{Tb&40X6kJM=;sU!6=++?*HBy1X!XQY{0DFA~0EDLUQ4oRw^N z6>+LE41;Q8yrV}d!jfpUxKU!b%Qj@d+kG|>UZV3jwR3@j%D(eV2^9-63WAti`c|*6 zKdO3Of992zNJAnb_jZa_CE!PK_AfuS+EHfFg;!BImf_;4>r`(tLYG<7a z!b=Y9iHC;(BY~?`vFHdX*5k07xypE@z0MTh)6@HE;`Okh2W#pFjZn*6P+&YnmJ;ww zu_rtz!n@fQnYc2BZ_nT zq;R@+L+4`s?v1(EgHT44n4JZIg$SGS_hF;yJon_x249DSG!i15Fb-ei(J%oLhya=C z=nKJFPY4KQDXha673Cl~IUDpmA3j?4jStbnsBgZGG?NHy5poqoMQCzMlFWWWeTaTY zb&nyT%G1VxqG))`c8E-A={Uf{f;RHjm8V@Fot18{-h@x$^2K$!h{w#;oGb2Jy`fN@ zy^H%G6>*sM>5qFFd2OMvNIero$sm49He-H>WpWMli4ndZ{wg2^-{vaZNywwSJgez5 zda_!pwXjQ+%7TBHeWl$nrQvqL_6)+As`Nk2vnub*{Sf8)vQBr7&#XYzkEV%{HAe#s zr6bem(F1JRRvf)Z|2l-13nI}gzpX@mpvYD}f6jS2mRq3>h@(fDHG|ujW=km&5t%eGc9E^8KayVc)iCiUE)97POef-bPr@!u}VJr)RlOb@awz zt!H(incD_Us#V_9@~up7GqS#Hs!CSpDc!)8^x-mHOa79zO)aUQGzNcHzTAFBd;@*%iQ;tw{vyEbsn}@zy z;t%X-#rzRBZgX_tR*{Vd&eHWg_xFAF?!lGvotGIM*Ir{Xg=TVEsW!L}4;4O0sUZl83%9gm^&s3Gm0LY#QD+`?M~fpl z!pEOa)YdSvxpzAG@BY1ZgByc~Uxj1^BC9q{(<4BaCPGI*{lB?zBiP)=S>TcF<;!e8 zwUwRU-u8VXaDfYR35>Y`1gs+>c=8|&eZLd#DA4su+QmR|;rldvb6@P-M?;|ZdBGcHemr=&nsKDA@o(MU^{9Y3~TUru(h1LAkQk$vYifz-bh zqdDWx`)%$Fe?AjPGcTqPk{lM_?^HI2yOYNmwk-3b>P-u{jN5VJvQ6Fhm3gCx?HqC4^(pV0o1Bd;C0lf{#<6gBnYBb zS01**6I|?xMxJs8&GS@7qFjDcDnwolI`Mv9WxH&4T_!91_lCBd@4JdCoVaKJeeCWT z@BTfyQ1oE|ec?r8z=ze3FC^K>MG`U1$O!qkM))Sx@%Jjc%ryS}kQrQPv2j@3c0b!F zkaId(`(cP@*y^n|`OT^^&xqJx$E>`dHGZ@7Gc5s8K_xaT>&?CqrzZ!c*QR$aJ`Kpl z!3q;ZNP};S4&b1_$T=|1=@~#i$H**=-WwWQihR}HpOC;}af^AUzPIjqty*^A*Czj z2D;5Q!Hv5NboO?!{V}4ld%9D71u5|?u{OhN^7hQ1)iJPT2rCHOps})IrEn%hgYS#) zovoR<7X~da7yB6|N&j&R4`)-)ptA>hv|L#HpN_RN2qK91|LgpTOpWgLzt*-i2)JQ_ z|7&Rb87@+i;(wp_L*C|N|KI6JkOI{R-2d}77euW@>VID&4P==7-{+y2;sksD`&{z> z;j(gWabUr-$|3Qee)>4$s~e}$Fjg~QGw_Q4TBd)COn}CexxVQI@~BWr(>0jzM+c!W zgG&(?D1B$2MDv~x-P^#hIrsO$BN;HF&XROZ7B?4D2MJc$(B9p!p&B&H$%#@6@(K(^QoQ{r; zEMnYX?LB%GSO1M|(^W8gV)qLzS*b*&X#58FYs#i=nO+i^OgB|TL}X(l#I3n(@jF82 z@Nh-ZnX9$+50*h~znx7wdemUOiiSDcnftf>kWEMag4VXBr6sSY3^UwcS_W*<1&+{S zFif&x9x$Y@@=3I)-Sz+e(IN&iL~FPwmMN#2*Xs>CE!O|@R3ni7{@$9K4Bf52o?8Az zO7te#n%C33o2)uAud`G^qV#4)0Xqpz=*8RbFPkL(zipNOpLXE?%gb*5(Pbe@9{9%a z2gik9K559J4ovn#V`PC9*VhC0`+A`=!vpu00kap#G@G!te(HM|gFA{~n}z{j9H7O95$+5~=28Q}g>MgXgU>g=#<8PH$-B z-~0MLR5UK@X=yb$ZS)PYoC3X{*J=HCYip~B&sBddi~QeEG<;_l7f@i*>E9Sl{6?i4 zspl<$v~I1LysPVlES2Bn{Ji(+$6<@Qr~(GmV8g2Cu91_{WZD7yM&{^(DH|U@I5XXb zg~KFT>w3L-b^Jmf^21a)NVp512qD6_Nv^6O?oKI@3fa#rtq{mfRsS`^y0#I zGf}o&Yd_7%AAGUuo)JrqVDB?|Izx1w#qc`?1@#{qmGIs6jZ|X(zRypOyqSj?GD51!jA5~S)=ef@;(Jz6^P3XVPoXHR! zUEq5;rCqF?{V`z%4i2u)a&)A>KOLOC|MorC*UC$|hO(G?VQ?yKH~SO6fB#4N!J5@D@{z?^oUC@eu^h?bGJoghb{T|#!Zs<$HV6*8i=W@4d8#MNlp1FE0;o z@yv9wQBhCM&fswYBH`kW{r%gGOaZn!6nb!U)DG?sj>`Uhm#*yM7e@8w=H_^)z*#nv zYR=BY#00%khK9EGOr75G!GW;<1Am}l&sD!Bpe;>nPEc)KU9YoEd7`}%4W^K;lZo6X zS1>IL4R&ubhocLse>`}%%B?>TNP~-`!-3};tOZ})b*)@isL-mjgIwH&)qZ?OAYGwVHf}Y` zewS3}a-VA8XPIy@AD*IjK$xvOT6Gcr6p zZ2l(gZmCu~yPIu8n)jcke$BXUIo%e2JYl*BPFJ{bli=YTKidp_+l`Sxe4SneIOs$% zuLT7KX=%T;x94ao0uGdzn5bNwjKtgC-mavi6ii(`#{=FH9_8cXt0T)lt}rQ{uR}IT zX)j;^E1FFhh~Y+4>!n)RTy*>j?%uxor+E3E$5!%~759PYpV|Xg5PM-aR~Pi|`wPS% z^EWRLyLgy^06G_5DRbY~-bT**{{25p1E_eQi&Nud1TLhksAyIvsi2^sUHM_|9LgULUS__rR5mnR z22%FJ>spz@CQzH^)ytP!ZW?-=5FnzE#}QP(c{7&u zjijWctKialZ;V6RrB?F5Pm`W-Adf;rL#1Pg2#JZSbZTC5bGsfbHVKbb={Hsu6a-K0 zmz(7Zy6r{cy>bWdd!275zLEu<(a*t?0vU03b=7{@umI$mq?D9EywBMHJu8udw6wIJ zpP!zdo{!Icky54((uUwU*jB8JjMkTXQvgo93@Z@dSSB;b2<;&*>_xYDs=-`G;A0@zKq$Fg;ejwono zST=Q6m;0z#IPQD179mqOUT>K>%xlse3S?Yor?`9G+1c4tnRZ>jRuU~0RqjACJ&-)< zND9R&xrQ|#!^)b{cwQ@i<$BG=7B8Iuw%S6YL)DKTO+QNEBr6%G{Wr-%EjUQ9sYHdX z|9-2k=7^K&q1-A~%4`UDegbrgO}Ccz<;(TWf#fo+ig!v%*?bO${{ByUQ)Q+fKW-0w z-Eiaw5?@S<7E->kU(r5E(585v_!l&m1wSu8=94s#cA4C zEm%-r?{+v}4*;-oS1O4X0FYXt48ZZ&6bG>5jr?!7s=*54P_^4km9DRU)Y_;%vs?ci zH8(dWn60e#Wqy7h^q+Qhb8Cvmo1Ww`?ThUSL1}4eK`5!Le7cxWVV`5oV|WL|l8udx zy7~m*gMD%2#AIY-cz9}nAMQ^uM!%H*d$Bw5-#n%isqD*#B| z_Hd>_nETtezrpCiXdyZ*sXY-m4xpn}818|_#`-#)VmdA*<;Zz!&l&?8+j5;{!lyh> zXJ;-Usp)V{Rn=-Rg;!VZGj6IsGypwGNl5{c=;`UHzP|oo{jIDl3RydxXo7>@WYzQC=o>oO=6ot}LylN)k zqzi?SkrBwx9e(@Uvn{`55?z*5u-maHg@3iRJr*X2a*@RWFabggD(uNowy&?R-{`Pn z`2KxTdipQpuHes~aUpLkhWbZFkpH8{2q@Uqudpcuzg%{}Ir2mAua8%%O+s2)ghtQ5 ze*Frt4GSH8o!@@B)eE0qnLyeJm`=UCyugS$K&X9YW~SKFjj8raD)}UEUg%YFpcE9t z1?7MK`~mAvL`)18r|u8mn>Q|Z7rQ9f(AhR0zI)W@f}f3z$BRvG#Kdx^W)3P}zkVG@ z&d0{W61$Yv-Q5ii1(>ZR;W+RAfGGSiorf&0Y)ZCl3Y(Pcw|(Pij)>3R3QnuPf3M@T zaz5to@4vgd%gV|s!pxDgv$3&}oSe*OJKGsfH&|OfvmbCbk!xXQR-#eb(7-#*@O@$z zU zT>PLla@E|=qSXCxdk!eT=GK-uH<=x;K0qfqIn+Otoxetz9vm`FO=)0EnL+hon6ct6Z_&pM?dX{)_qC#~M#>Zx9yG4-jvdZ^ic0rwuPdH3B}q zMp;TPT4rX2!f~)fgSA;18DxN}t*to?4EDZw12mCtV-DN7+O4COW1!yL={vMdoln%@ z+)t{j07L`OT`d^4;|0+9a(@Qlm)!TB_o9waVk)ZVF)19Nj#cY&0v!pkLm=({lL?n< z07Jn>4hadtLPi)Q0xVGz5c%2J60I`XSdtpYweG;cz>yJUEzpD&DH|wMJF&VsJ79$R zdU`KFL)M-il`Q_Qc1&N zfCnJs4M0EI5qq|-n`>=rqw>F58yZq9oBETntdpgyr}yXF*VveP|Fw&Uhh-H0Pd(Oq z8CHX4SFi(_Qc4R8LpFYa!GJwJHa4ar_W0$p4-o~Wt_%2K4a=#*dvEnB+<}r=X`!l> zh(#fI0j4-UI=Xhw7U<|zGeGfsO-~;H^dB%t(^tgs@bFw*T##=-5hyB}KXkuZiiwKS z1&T~6tNv_c0_Zx>a@1V5;|CO5fSgWPc&((WB~r*_nZrac{`*;XsT8d{&7AI8-C`okyqE24r_=^Y{T zD%A!k2r5btfgm8F^dwRO0xBR)3`HQ+sPwK>X?mXQJ@)k(=iHoe)`ev#D=TZx`Myt^ zYsE%I(a`;tm;JfM$Hz0NVO!?DUN22av1FG9p!TX?xZvUWZ>$SGKEB<%J!gg*aZ%Kp z_G3@<%N9EF93&(p20z87Xua0WHZm|a9(R!e#snk+Y)eT=*(N007gl9qX^GiVKx+RU z7UXNvw=g}(Sx}Xgc;+?9yfNWwmPxLeGKd;emSscl4w&x-aO;6Sfcv5$wyVk&jUb-r z*x^{vJ-0BJD6HsTSXd}?{CFdi$&9AQ^%i2ehn7>XPuu9(Rqa(~t&I}x#&Wxoc9A1B zpd;fXpXa*iOVzGjmr!Z@`tY93`7%^P(hD|DN_6Tf3=0dxvKjR#;y+ zBns$=!Tvi&o|)bFQdd(NJ-ocGX6atKbcv{sUi{fgssz{(Se&rKh50>$!MF|)c$J$C^7tcYE_smC@{>}6KQlhJt^t^ zHy46Yp$obf79A*+<+-g;4?hHNLcj2vVB64-K=c7Z!9R7D_!YF12CfG-y*PK}(;=T#HKSuMDwae11H5J*Ba_>03o*C0Z0;gqo`6{{8z;?$Lm(^4=_0pP;O) zjH*qlFZ%V%$Ju#ONX{$w2bMo(h&SYxvk&%m=Q|pnJ-be#Gid5@;suI)yWL3)D-~o= zXOV+WY(B9HoJ|7*OY3dGrYHCfX)=SKN`)4<`CgopW%=$T&GaJFDO|hIi@;>=6)XmzW-?2OpC2 z`SG>LbM&gAp|MbvssGPPbcL!1!c58%WS6+u*z33u=du;@?DDZccx_zJ%BX2j+O$=I z$m`dyA*7)UCI&9PZnPUS_znQ``Sa(nu#NdfHh@Y72K)lLof&G}s#HiGG@8`@{T2<+ zmC<%@?ep>Rsi>-Q7u3_zY69Mt;D{(VRenA>f-5^C1M}v-TFMSpYG!6;UY;~sm#F9+ zYeg4t?*|VaoQk~w4rD`Tv~BXnA zP40t4q8G*;0vYE9f{-!GXjd@x#!z?j(TW3CeA`akthd2E6u@X;Nn*yjxzTE@I^JHV z18PiumjP8DAGkKUzi-_;o3*qztMNrLy-TvP9MRsg&55LkotRJU8_fb9Z$_lJFdu6+9=h9)v_`Ijs4Us+V@aVTL24jedq zI2~e?w6y0Ki>j95y0SP+s+H*k%>f3<{yYdVu&b*JWf|iL)hZ;|*3r=s%Yd4K|Fhi#AFakpJM_#J@-M%8D9R@ANYGc%OgQ&Yf;3JzyJLxFvv3xU9?p zi?sKyMi@hM_VkR5n4_jW?(g`xh)R7Z7ZT%tgS`j}F89Zn(nhyEPftIe(W3aXViyJ+ zz<+*jF7n74L41kPc z`OnSGp`D`%gqAn9w;N!l85#=Un)vwiK@z`x+riBZGp4q#&S19^^ih0u)OYaLM8$w- z0siO}ZvC~OH)iN&9A-8)R?)t?6$Mw|lv8GQwoT%f-6Q&0t(bXeRp<%O${1IRqoSgG zC~TCO>(?2h-`&z-(leuK`1$#%s;&{ZTs8ex^xS0GpFnl>aEv}vgw)Uh%^+l} zP!S4Bc%_z!$!FP@SZ8&(vVr@h-d*+eC^pvspG*U0TR8B+O^Ze-$j|>+QE`8-f~=fe zac=HIPf4oJaQM+uvjmmQYx^+RKp!F^Nx8WVY_<{x9{)vEajZ1A#`%RG?tDr9=NTKDfw}R{`LXt1`y|`lE$ED$ot?&;?tiSTq^i{0 zouoGAm^={2S19vAf~eos}sGBJxh|_Q(yh)z_`~E&Jdw?AY-!; zSFXoDV{h6wR|j6%Kz+o8TM20w^UF&%Axd=3+O=R(FEGx~)Y-T0Z!vb4{zXm5&`t-O zq0wl{x7Sh`Ny*|Np`leDKayi&=;xFFJ{OgooV>iU0^SP!v)yhLktZ3tl_T?`R~_wB z$QAm-j}}x^y3le>3_pMeI!V#g^z?Lunx&T)akRlUr48c_-NHB9cVd5?o0C(vNe-yy zKLA-H{#GB2D;a}b?ZiFeTnm5%FBCEpSNt-V19zKM)}u8 zb^0z9$w*J>vR~iBITg?p_m$Vg=Ub%Q1gbEdsc5;)pG$v1*T4X+@FLfW*zWDClW@mg zy%Ilp^5pU3kD`6d&CP3SYCtu!*EOqCE@)|Kkw{};NYhhOnYt2nUz!>kE^BHgwb-}+ z7{K~hQY!oKL51k}Alexo(1QR9jnHOgQJBw~V)M<9ADK4NXDGC@Sgz)32)w z7t%~?hB@#w?|bp#XSliQHcV!H{qEJ@@NEgpm$|LM_GyGmiHaqI9Rvo05ta!!pLFSAKoQ(DKV!E9QI>*&gP=`NRNd@1zlgo3wxO=aFfLze;WlFbn zW}j6Mq?Cjcwvlmh0!tF3SBL$C4LoOhDsMJUG1D-l5TSF~bx#siT z-lmr?H!Mw-1^xPA9$){p>Y@*3I-oW|16HgJ{|(kdrMcGz(&LM1$>N#UU7<{e^BxVH zYqt%WFJ?ywo{lm$jMs>77%f@x8XEQ}0+fu51TOZo7PQYd2--qJlY6 z^;s_A62GhEnQ`?t%6V){)i9ckkYXzQmNDzQ7FMw_fG)vp70@5l8dB3Sk-l`Z+mWc5EO#qQ%U)nf@5!F-rl#*B z5;m7&w`|#ha!uNK(UdfH1)Uh;7c`Ofa&J33JLr(_%{bL<~^pWIPA zlStow*BsZ#;9y$wFd72u#>qCDfVxw}7Qb&Fg2BK>7zKCluGd@O;p3~GUXDFs>+5;h z^zB+r?n;zONy%&)%?-$zbYJqu%F;YDLGBchNJItA%)CDvQdv*1vRu3>ZfZ zhKD?4b?X)WEKlRf`*RhazTZJ}&MEu7_$^eJ0-EdVyZHJ_8VB41$Zy-Wt@TF%7~4U0 zGVuE`35jse18`90k6c`%YzO_u&JJ&7(S|(*G3i5jIj{ugJY3KZO~G=4TU+;YLAHKA;(R((xZOGkV9L{s3X>`{4?az-; zB#ra#pHE!`juqhNkEKxda&v2&m;`=(cM}%YOzqZ=7}0Z^cqIifWqf=JA)&RCCWeM` zuVw*@us!dc=5cQO^2GzQ>HJ;$V|*wjEFtsaXlq7EN%yb^tyFpLUAflLT>dkFZ5eRF zi#!eq%vVpS>*%!9>((QQ;N){_pFeC-RDBvDJlT#I2au&7nLvq~{q(OIyS%HK+)Ly$ z1nSMvvi1v4DSxH-IV~77$t@QMIy2q@&PPez_b^$jtE*Wo7Cs#h>VU%!ZUT0HE3vLC zTJ#(#wGkx&G^4e(72V==!sqn#!$dz?+gzq$rtRTR6ye-KrFK8)b}=z}OeOvZwZ}D9 z#JE)$PY|##U%p^X;>@|Zx%d>=meNGxoKQ&!y>0uu;B1j%2hy>B=g4F+7_ku)+i{np zpi$sM&c);TLqkJ=PH^-%z&GYX_?h*L3xZX7`T3<_TbbA5HRuy#W7-ME{Ox(xWgDLO zMOiZ-uauT5f-g!*(I6ZsD)yKi6O{A1Z{1xIzw^OvA^W_J=4QI>w|8PLv{nDfy!qCa zvPcn5o9xj)rOj0G^z!oZ^rTMJ>)f6>qA#g+8)VJ8mK&54ruY*3PwC)mNOx4m7+T9% zA;Gy`wYD5ZJ998h!)Z9Wx){n-QqoOptsamakUm(SFU~!NS`!M58+}~bp>_Q&vx3e7 z$4=DQQ=kIS0n%Q)03}8nFb7`?kQ+LqnVFMQa5W1pTtoyfvOVrwQkt3?oN6fv`@zoc zKac`9Z@z!`F0lAf2+Beh1jdOvtA_a#a}fedx{ERbdh`i7dV80UHKptVWR$}CVi zoR9v20U!aZ4|g_9mM%FlKP3ieJU#YpuG1MU28IexhAET@C}|ip$*Jr>Dxq&hQe$G| z;OIi0x$&hE#pe!sUd0L0t5L^n0Cdq!!9M`ny53xC){wptp(5l~-Yb)h+^1+`GmmI)&WstPum{gTBBUeWR~@l4QX^bF8FCe0vuwzhTcR^B|lI}uJ{n3 zRY1mS1F}I!5yXMG`e)+{Z4~BeXw|c`v#6<1kgPNKs_cB$^FMO;G!QsT(mq$Y*nD40K{^)#@suwdS%Jp-|J z9mOkW4D?wxm?VURf7r&xZ<`RwG5)UuRnnI|Xp`TxHQW{*#NNT7z^Qu=FYhUU7Pweh z$X$SW$|iia&)cgM__nCX7p^8rv{T5t%UmiJ3PQKLqcGR4ecCv5b=6c=t!-_qAj;eb z3kU=B2Ne4C>lX$>Nl8hQ8)~G{LM^zW!_Sj#`y{C?@Zl#FxD z-a}M7S|?R!*gL{{ot+Ia7n9l5-MzRsQVuAIOfZoSgDmj^|F-REgiBLmO#>Dt;X3WRt=Ete^E&<<;{?7Pzy~jRpU~o`RPtTc^D{}Cl zHOw~XA>$(>XnT4&OHwybCD;Co$W_GNdt=iM)ko6YsV`n&YB72w>ZIcCS{&oMAodt# zZl|q{jg7MM&5UarWb2@yAo2&=;5Duv^YfGKmY=7WLH>+XDcw#vnVEvJ9vt;g-+ZJa zDMR2{NroP)ftNWg_L$R3NgGQmEjDb~(#>$UH8kv04LdgXs_}&I$Yd-m*EA0L@G@<>=K z>&!kb(!!>5Q84gZ?5*#e$@1}MSq;=IUuxb zsYK7Mx#vbujUyr=6zCDusfeswwa@&Tnwx>Rjke{Gn&bu8os-wM?l~zgF8(Sh=^I>( zA)OuTZ{=FmMB&@Pv=EeW`8RhZSOj_p;xx(0``c2@61WICKUEJ4Vf_?zZdrRfG<2QA zw42U9q?1qftskT1-l#G=hQJr~qyyk8C`UP_bo~b|o>yo?FzK$He70s2&x^D)x{ifk z;03+fVc3;P|Aekxy&B8=R#tR{O&od_^ku+Ra6KB3PHJl9?xtL)0!)0^2pmU}thW)U zcgq%pBuI?>@SrVL28zBjugbsqAhQJtPnk@~M7Lu!pX;ws=@mPtWgArDbzK zVhO!$s|^uG(FqRDhocYUBLKotGV|Wh+6;79SJ?A&l@q~bWkJyL@9p|qf2B^$2=E9& z#@p}TP4Sp4pD0p16#j@KiW(XMo9gq-0z6{lNL@QKBC=`c!#LassQquQW?>x&owR${ z?PUA-JO&)nlBaApM~AjOUiY69kTJmGi4iUKd9-LRU!GH8$xq1S^HEQLK6mZ1B*wL; z@7Tmc_%S;h&CFJE%)8o_WtgV*TI>=fo=k3SX|bla6L`W+auQED@0Hl7s!4KkY903A zOyU)zq1(VqaNZA#h?t{UYz^&&GRJ%9txP1arA6K|-3;lt`s_Ta&S4$c?Z(F4uQXGT zyAco&04QGSjy|7?{FXjERS-2@U7oo44|{kg8G{r|1B&4UyQ~a)FLYX%mR!gyHV*?2 zqkO_B_0ID<7v=Hw-6}5hjr;fR9TFEG@~+rdKD`W;4QaYU*Iqb8MyD$6^Ljknj8Tg~ z!n%v12Nz(gs;a5cVyj5EY`nbYa6$U@?~6XLwAu;RR{3=?zQ%-XcPr5WDW1Fe*QLzN6=6?_Axhi#k71}FC{)+9>OpAW#X*y zQIoem)el8vilq)nu#q!>QVG@ez1RV23DsI+)>nZ!O{fXPGZG#m zJ6PnRgP)(=rp>Grubc-Tr~UQxc-8e|qM~56c6W4)>=Ak=b<4}cBX`XNnvKyWLkJ6q zPGZr3|AQ3KgYP31+GrP#*Z=@H7MhW3qiXIJK=;|Qqy}jqb(eJ$+PqfQXol zJ^_B;)XYr0Qc!75&QWz^JMg*g|*?{PbZjIBQ)ud&@BQV z#V+Ie3+LLAhJ=BIaD&3iOf$66C{b8`u>T>@i=90A#PL9#o2qIh<{yF}3vdjh$>jVu zZ(zw*RGca9E`^dA*&Bb+79#Qa)FPl1ATSc14z%lU4g*}_UVA&~`ExU@A{16&k!6osv!2T)&dpyfj9%45P5$}cF`CP3W$ z4)sH_DF^93b#**yB#_}T+_X;E-vvJitVBpPfkJ@5$SP=wlQ371%q?4N$~$js^J67#KhQG1K6Lf zuV<#F>`5f6LprP;Km$5}ID|zd%sLbZlD)l~Yywa=kmA`$K@txm=Fb!@5{F- zAv7aO93ZdJgme^;=AK(EA}!rwCFRI2En(Bdfkq*K5GK704B)?Y>zM{f17=n2^&{0j z;eg6L5g`Yi^~(ZR4oV1tS7DZ51t4o64`z$f0jUoK2uK=%C4K6x{&U5E=AUfbH8dhb z&jBI8&O#m-;t?_Kh`juAcJai>*qGHnq8L5US14x}<7Gs`EZB$drN%p5yS8E5HfKji zAUw-<3s`7OF^z+wqWE3QZcfk`0(m}eI@_J80Ng&-ius9!&xuW$mQf;Hiu+F8^!!Td zDr`hv7Rty2g*g^vPq0E6ByUpHV{~TrgefDCnjGyp;a&LU;-g7abjs2=vBKC_SyM8$ zh^;MwKTQ>@Tr*S4+EVC*I=26`hO6t(rc`xzH#b&zlqknW>IOt{XrPOSB?kRwyf=G_ z9669ES4PXTm>7^rzKcrW-v!bQ&XzpM#CWum(nis`4=6G*?{ zU=jXcO(T^~B`n2`es{*mSx_$|DkcOUmyruJ1Dnhy%eQtzi~uqj0*G2%Tr?@)fs4oC zd$F*qG{6rDB`_^n66;vLZE^Q+6lB`(gZKk(0RQF?6re~5=q2IOPm%D7>(_>sB7DLI z+Ud?E2ZUebCf~XP&cxX}N~>fGQ3i2p$px#AP4T&!S_-DN&STQ9k^LbyLI9-1tDX*6 zoWVyuhQi6u-|oJD2?m<}0y!a}-sFk(0<>@>Sgef^wa>ho2dQ(EZ0N*)++y|8dPs4| zTKuZH6xifmy(>k$7XKGe>k>u2W^wzX6yIh}bO_cF%o7xb1Lv9+XF2&PTPBh+f^a^S6n~i^L=J@%@o#H^H~IOXVUH9H>5+G5W;|M*kJh=Fn}5U4Lor{Y zd@S}tvN%#!9$4>OXEZ-CnQVmAVN92KC+1}$p%)w)dg|oK+!sCBaVChab#=ufcyo*o z!JdQXMy@Z-jkRCV)2m9pOw{Lk2V(-JDCDfcT1I-?=+etn^KE}+{uSEtFC^$vu?X<3 zOntru^P2ioA$dSnR8*umvH>?SisS9{s_1Rc5hzEx$Kb8c&o8g9tjgWd0eFbVl5m2S zAP8JM*J*oI+G6Rh!iWGqLnk~^(DmIz77jeTR`xRG-a0v1SRNO_nLPAU|q=fb5 z%M2{4X~dqgUAxEhQn1k>LbYw!gXAgGcG+*1~dkB8@F^Dw+sd!{&>rDYRb9kZftK z_G)8LU8sny#yuS!wMCcFn&H>&^&LuraJEfpIk&X*_x@CoQ9e%pL#|5rz1>N)cTV7I zagm5L@0&)FI#SFy(tXh8aWH4~U5Sizn5pd~8-ufczoic!4jWwP=(yUJY9lPVZ{NG! zYBa&~+4AxnzZ^j}jyeyrcH z;rN~iv?~So#GzSV@_PoFoo%U~s-{13@GC1Ys&E)QeZR4flaR~XbmQQZg*C5)EGzyK zo_*csE-JxBx$5ffHdy#rLf%H~_TPtdYxYu4coPpi)+9p3-Zs!!!D*-X3T@wVN$d%n`b1@9x&5)LW?#vWg|gN zY45}&Lt@#75+nK=f?-Am!ewXF)H=rJpoUTsk!^zCRXnjKg9lrIZ!R)eKGH~f!kluT24S;WM8rYru=k^SiqT`SrQi4J z^T!tc8S-{6AzEsG^flXY2-7SRgjHsHyJslMSby=rNTG+{~Gr@yJ*r^n${=VSt{J%`JqH| zw%@3nvVqSi;=01N!H&Yo&JBzrr~J!H`t_^n@2ME<$T?avqXq2G^#41Cz=qyxG<3yixoCF9D2A}D>`H30 z_g{Khjq_o~HXGQJXNTr3i++0~Nio`9o4kq~^>bWO++65YnH*!HqsHEK+1EZ|% zgqf&8_%a_p=sS5ZW44rGxYU!mDS&D$S9WV@s=T;0>9fX{o2qMH)Gc?Ly!cRPCGG#H zelft3ePzU(uD-WmG7t>4Ag+IZaZ$tUuucQLh6Y2959&QUdu8QSaiwmLnu{A;mlVER zoAiZu)k~Cy=y}PgRL^@S?azqWw6Zhj{JnW&bZf#kGfIs##Q`@|2BwT8?NO~yp=Flb6UT3g#tjh{g z*hfur=1uz41AnqV_xn?G#!5HKV|S|Cm0haGk(59mhDM1N13MdeiJIWG`ny!BZ~Pth z9YPfkLB9b)kEy9MRUfV{;$W~G!^6Umy<)k?!!0@+NwHbac#TKX3=E*L3i0z}=MA?X{s!Q9_m-Qljp&!>;qo;`z2n6V&2M-39pzO|aEIAf61)OTY;NhKzt8QSUt&=@y z2aPtB*Jjdep9hZ=89=QgyHuQPpm$*MBABo7)AlbGOKQ%B&L4B?)4lCe2b7T{Jta-{ zsgGXjS8@OM29Z9o_p}oQpt-f3XDSbfoZ63#y^Qw8PpT^GhhN(gi7M4wB0_rqUvB$F zlMh9>(ZORqHWBx&-Csv*9@ggWzxw6AU=4@ClcOE+2iN4wSMy#rY@?PjB`0B5hBS#j$4&Lk#F`pSPGk z`RCakS+4ktX*E`E-ri+AIRADPr!!&6@Z+)7uf;xRf`ULN?3jJ)^}Gx2Ywf{$%?lO) literal 125416 zcmeFac~p~E*Efu{Y88dn36-g89S{MP3WhMW&Vqo7f{alS(VIyLB#ene6-RJDB0@k# zpvn*i2|^%2QKBG;Kp{*?M1%+l2@oIzNb;U50i?+Ne9!l;Z+(BkT3uDVu4|vY&mMkz zpL6!PcED!Of_W?EDJdx}*td7*AtfbMxRTP3Za>WizZps^iUR+efjqQlyHX}iqXYcq zN6$a4|5Q@Sj#3^uJ`4PP?%BPLNF}AEYoPyT>^t;Zw~~@9dEd@I4+pvNBo>jaWka*Q z=@^>Ii`jG78y3U5jd*XIF3s>%VeP$e;nnb!EBNJ`Hl1HM$Gzn2>5|Qq6H#Rrg`JNJ z>rY(61~5M^(a3jtz7}Sp8i!P6ODHmdtZ4=y3V!JOV)nf-fc|tWgLUmH^z&kWz^Wgh z-zX`W&T(8@MTY)#KCiG&b*KEN@i&uSM&C}jwDI0)1oZDEPOjWJtK>gE3-MQ>Ux6R` zpWnWo*+26a=;w}+j?H%RkW5MG<&Mn=iG|EUNr``(?%*m?Q92Kg7T(`@C(NRc;Y*Sk zbgfoWV*M6RsGg~GKL1*~uHyYu;QfoQRg{$auZuUV=P4;2Fi0d6KFXS@^hdEj`RUjO$Z3V9<$n)d`D>!NTim}8KPG0*m{Fs7LzYj6Ch~{u92aLaFr|`a9 zmG)Ws;a)LN8(~7ac5bqbh7wy1y8ExnSlejLPFxvx+KV^ENrzd*aqNgo- z+I6p5HSN0pFJp9;afBa+8)+e}#bYI@q!BT_pAh{;+?Q98C=p@=k!(q`=0!#$XL*!3+1HRQn zOFArtlTahtNvN&vWW;6&eopTa4h?bQhgy9ubp7-pNfC`#hSN5{b3<{0nh!l557&|R zBHzkB2PZMG84L@-NZ^0_nqL6T8o^COc1GpTBCg&Pb(U%&9&iV!V!i1g^0~o zh{3)*D_M~pLsPZKtBV=!6KF$+Cv&uy*4ukQ{8gVjOd`8e$e#kwTVI_7*LbguDS@d7 zs%6%qUJinJ?$F$R4!@7n9~$>t#=00wG6WD^^v`GLWN+V`?mH6JEMZ_m#~%wnZRy-pRcvs7MK~>SOh_advbMC8-!_)}i)s=dwjA65-Kd^0>mLMrz6PH-+3{L$FAOFwn6AZz6$w0OZfF70Rdho=j_qRMFz0%@ndUY!Z@ z462K38YT)gY0o6U-1X0d3uDeBER5*vU2J1*56^+;aue}xbh%uAeC_=|^6gOOBfWO$ zGud^qR=Ge&T5#Ico6+Hw%aQxIarr-v3}pvP*9?)x>*2W$3N&2*qF`S3jzw0FoOR#` zn!t^}QKOjZdP=`CGaN4&I%Uy*R~q>b5_cW}H;P(N(P;(|9aH==@EHT-k`obYWB$lL zgd&GYI%uz}LYqC>t9kP28F1I{5bQNW&mGKj7uIK`v+Pi(2(QH(%#IniZ+N3(`0U5R z$2r2y#r8MyXs!=khfShVeY~j;-E(Ek{|puz9z>l=os5f}0|$EuMid0oxj~%#GbX%X zX>1y=Xdsa0zmCJ`wM8d%>Ho8YdaCtvc8+1_5jpZFc6PU<8VPGzn;hgZ2t zOgszk3BB4k{z?h)HqzJ91(KYoY0Q^l4X0^fbOpOshMmsL5jHYlHTZahq2~;7t$Xgd zo}&%1#q%I7a^1Gex_o&~evZ&;<;ak~-WG>_=q_%2n+=VyrdaBYew?|@$XPAwKEC1E zq_m`Dsit#`4f-&c?E1p^xGg&xg8R86?II$jg1&|Bn!t^$tcXJ1PqTs;lBXc`Puwf2 zJ0gK*sb*9Z=om)h9Vj%Bg(-?`=~Ybm*#+(GX8z$wroPTMy?Bzf6NbB%T)!2EAKo6+ z_b|6Ge`kC;29Mi)Iq4T9v#p@L-t?)DcDO(z8sCsMnh5qSPvU*h|7%To!TybJGYfdl zYOj+R@wLTkKA!|5l)ggxI&n2Fe|qRHyiE-6D@Gm|(+8nbjEx8|WcI1^vj#Lf!n1|s zcbB$UT`20UH?2I9sRDG(ZnDi}1Q#zGwna;OMEt=@`s(EJK6VWQ#2Tr8D(kc87->B` zHIeZA=LC!tQG*)f=i_`9lIxWGzCluU!OaGZs#)5e0FLw+Hx zA>2p*MjGR!wwK4jd;)+PxfvsB-vSw(Go1 zGb0OBs;ElDwgtLUF3i${m9@PQkScUj@OAH8i$S8A4Xn~zy4{mr}%n61QDpT(- z(c4D5#-$RYYi_9qLu7Bl3+qz2fo-!}0TAb1R&G#6$;x7mPO+%6|CT25&T`9FdDQkZ z-j(P>U=~L6>1xlLIfii#b~nvZIPnx)`U0}7ZEH1yhDeoRWvd>**8YD%OYQ+`-1N#) z2#GeX=w-U+Qe-S_*Mo#b_fyaZ0S0)!;jdIqd<|+_N@B2gXuqtOl6DTeuIuX>!G?C< zV|eP{+3H{JCZIz+!X-oWJObKJXIn9%GNmgq;3^qAyDI8A?}N(ZoY<(XP7^hp(}DIQ zS@|IDn#qFon6!f^a+*>Y;rd;!X47-5gsc=M9?|lXIx;A1%pr`hhd_O zW$9dmr)#$K7W%lB7Sg>SZJFugtL(qer}I9zDar!J?DUPLKZGNU%;vD|9vl2Eb-s;1 zdVPU%vfsu!T3fArYz!P~*k4fL#q7xijydn`knw$V1hx4=Uw`QJSGBuF;B08(LXRlQ z3%AYPfl(3#ejf_JAi1AHH}uV_#VY3jS9bhy->tWe1w~H&#qQ4iL)E?ret2*O98(9P zH1Vh`rI+9RK>Z#WW4rlf;Z-bW_$F||3YVSh%RHWM5T~{0dJ3V#DhJ11@(ET>%WaMo zWo)p_6nUpf`-gw%=7@rX^uh~)_Di_zL7{3?L3ZlUr1APSO@*wl{J`RJW|21@T0?Q zgSRno*HV26bbwp?%&H2_xq{!BY%|jl)?BxF4X?N|ZlwFOLSDQE>!r3IB)ETBmC@KY zDf6Yn3%qpU6jbV$(DKp(@_y4mFt(w<6v4H+en-Hjl;6@KvgtnbPQ^`zKx$)?iC^^Y)lkw(^h+P*O#UR zDLKN*A9}7^rU3Y#0l&IV@A|9!>+h+?ODRbV9>d&(Gn;Tu6`EzJ#%XjWJ*@C_u>aEo zg@+r&_7-UCH8sFd0zjH0b6Y0MW z6IXq8u|JF=pIi6Y%8CA;dC(ZV-nNPb=SSXWh{COY2_C689T}weV^7A4Umh8koBhot zC)xHt;w!F~(~S8$!}f6`W6J)C^K2S5h$t`1< z?mKecPbRq9XuMzZwU-p-9za?BsOOE(=WaO*hGSOs)@KL9X2~Q&d0zurmXHHelrQ%t zZZ4;J*B$+HAY<3Zg7g$#SgXw&iR)DdyG_gz6X(TIUdu088M24Pf*_@BrhD z`ht69^Kv8t^CujOH(=QL{GCPh_>`Fnjtg$k5}ERM{WRiI?-)M}9R?ujyV&isO!p!U zYutFI?hs1q(}(_K#q=-%_Q~4dPRH!wG{-k_>at-{bELF&#<$peC41G^5p)v%l%5C2 zk17LE*Q>x|Cb#HFS%M^zRshSVXSgFr!rMovGa*=_C>MLbJ^D)kpHyX&7n38bcl{7k zSkd)9h(2>MrPhYkBj zx^{ngHq5CrL7@FJWDN=%G`bmWsAgc3nZz?iF}Qh4tUw%F5}nPKZQ6ne=h+A@aiT)n z>NWHN=_1viCgcFuyA3i3kG2(Dfy6^#*l%RMHrZpfEUGaTWMeBsWM87mOEL7Tan$x( zheR&2^XDgrn)I{Mqko?BU*N&XCbdJf^JTC%YkeTSUqQAd z?7mi(+3L0rZ*Sbw)qzL3y0|!JL*C}#514<<&7S)FvR3nS#3yl*8_Z~r6|;k)M(E#N zI@@hFGv@5w^}f^wgvMv-|Vq!xfhwnh^h=`dB#J7RU`s`HU$6U z-Bw>_ltn9zi25(jj=H1_@ZrtwFyb@tVgKt4M(7v$XBS1KF(NAqSl@@+jUJp|3}f8m z8cR$J5M^AhS+C0Hq~z{v)LJiUyNduyLlwZk3rwqg$a?9*#fW_gc}gy;N37=RfDvDJ zN5+T>R)&O66($#y)7;DEr2+q|l1Pc}Cm>HEQsOB$64)P4Zw|BUC~U9SAl>UXofQD( zXo|$}QjYLJ_Uq2JQim2HE=L*|$*YJK8dM3@SLj`_)p2EL#JQt$5>n4+egh-A(Rg?F z%eAFC80jHm7VRuzEfqO3a>{pcX=-$)S7c>2e5CT=9}bfZC7Gw8uA8n!z6pk=mu}dM zd*8zy6jwH{AEg7#WWIc4a^Fkb(-3?(>~RLy=8R7j7}*dsGINQ5^;&S|SS@oEKEIEiH>vq5P;5b@lt7csejLbOq*q<+H>n?W}0z{5@x22SxF+m!m1gdg` z`;+V2fk3ji>K~@zlQi4{y%R2R`c4fNfDG+l`Om3a3L;NDII))5l|IMu?p`i`$HVu) ziaP5@OoD9ut|U5-E5mZ#Cn>U^s|m98TQ65%Ii>T~ykuz|j98XjUVz4x>PA(zzEiL4 zK~CjDGmdib7jSxTZOjN~=!&eek>6Q#IWW`rmiwA7o$hJUdhdQut8vWgoK1tzG;l_l zhYbdWmPpaWU2O&s#evKRXIXCJ|O6Nhq>CvaXD;`wP!1r67it0uswcV*I?k8(Qe zw%Kn_IO|=j6_+9PhO)(pxo@Qt7mQ~k98pboD?;ZGNhW^B@oCPjN9P8=&OQ=4M&PpW zNJztripyGBc52Oe+|J zP45J5UVHZ#-pi%+YrMLt@fI*LJW?U)~q>&gCV`Xe2Cb?)Wr zhFe9VCrzt!!0es7)v;{eJ*mcDbh@>Cc(g=|q19F zyG~pw=n({|xw(f?+Zx@&8?#|3Pi`pj!Z#l{)l1TdAhJ`?tsYIBS5*HQz#%?E&@dZ{ zx})WglRSgxqL>ZI`i>}-{5?+e#`33W2u~A~impp*z5FdmF5_>FE;SB8$wQ4Vtw8zy zA)po!P41UHs%r^`n(&r*Quhif|D{W4Iy47-?{K=&cr75VY+h`*f|yo=R+{cT0AnLw z#H_a>Y%VHs1#g&+zHzmVFqK$NzPKG+*+yk+xjc2r;+guVax0=NsB}d6(z=4`t&y67 zK<>j3??_XNwv47fznRAtr*}o|y)8|1)O6G~!lRlyhI(7l2E|qlz(@+qvRjLNUG1VO z?{HF!0^t*4=iRF9?X@ezB~`o1-qYL@@e-4f$dmqQ^y0+H$xRElSQBMtyd>N%R z5q&kDUMcLnO_qLL)pi0*A>38e^lO;h>)y{i#|t93GX8Nl48!!+bv*)hDK{J7Teetm z`mWyX`FIfoTexdt^}{C|0}o}c3wH%IQuI8~+RSKA0-GZzhrd3lD(r0?mf!TJbR-Rq z5&nI*(;s|d6;DhW<&soJvaI*p2BdqInQUQKB}6<1bQP&p#x(&7E-&|rqBcC!cR*?B zzD~eilY4t)o>x)YUy>{CNS+GAb;xjunQX}fB{pxr{aQ!buu_U4%;WLA)Otn8ct%#4dsb%S>u%?$%It8Xej5g)d=q_;@qgygi%ZoyWPa)~_P7o3D9MOl z!Aw6Z!0*w9;00duInCvhUf+gDp5u-1XepqJ|H*m*GQ?mW$6^lMwR(5ma<}=er7LRA zElz&EX{63wSeBR}Mc)P>_bM?h#}NMWq`fconTe#!l;TwavX6g8L$?-$(mA0p>iq z_vI;l8NirrrYN<>Khmm&M>qHR5~2^4id>I>qoP%u6tKlZPDPH`RU>*xA9tTQ6hb~Y zzu4H=>e*@msc=;X1XolO^LX($nFm8Uji##F$B8Qan8Djyf>?5e3AN0M0&|yHaJ%?G z0}OUkvg3#QZ1%TWLVK}{2)A9YL3a*ud(I29ojY&`3c_kRY8&9|BC@f2AN3B0e)BL! zg5FGcWb~2MNL&J#UAEoD@TY+D%FDc6<+S%6Jne;lk4O_H=PZeWnvI(d+28u$I*Ev& z0pq6+Ux%AO2hs*!dCM}K33ZE?Tm#M4)bD8oSijkA5XHX*n8;(ZZ|H9U7V}-2 zQoJop#Q2My530%75uYp7$vHxwa+=67lV>`_>Y&q}^=d1B%j4WMFyb?>!}_z~*g@2P ze|Xe$sNsZzu7#_pc0&oD0#m>`jE^$+Fe>u003W|WmaR0|T{zu3dt6v13K&kY`& zCSsP22dDmPyt6oJ7Nk(}skWjHK0g$1#lWwPHrk^DXA>_6Zh%vFvq;#g9epEz^zAv+ z5Ucs!nqvi>*+ZS1%(0L?*Y_<0B?&tenGVp&7f@hlM<@F?LEl%bAtK0~k=kpc6J*k7 zg)f(b=d2sV=2kKIdk9P+#xADZ2YBVN`luf*b*{(l9pUGYH-XrkkEZ4buOho8#pR;O zX$T1|^?w~dOd0yzzHE%OUl4QH?6ffKSa=xVehf_QF1L@j3gNE|!8?Ka1wd-$w4^fW zj0=rEi^7LHBM&~%pIoH0wLnu5vS(5Ww~d;3iShSiURcwW3K|otgGpEGxu9%bzxKDR zOk57hTd{Io!7e>pDp|xsyUKPJa*o~~%3Zw_HDs`X*7Q|0t z=1TZLC66D6Jrf&3l9_153A+(5(i4!Bn}{TkzytYk>dj5((8FJZ64^`-&TktxuG@+| z1$h@a@}%rw;McvlZQCIRHMrdkV&Vd@!lV1NMW}tIB?oCxbRhna&~xpO+f*s2Uw<;E z;?2UZ>x7FfQ|(X*^w||O5YJqw?eA6;V%>^$3&&mkKnA%lEcWORl9LJBI|9mS!iHlF z1)YNrx%C>3J48LTq$d!B9$kbaHC79cpP1X13!9hhmwkERIX`7?vr9ukFZBF;#_b}M zgFLI95cY%t|FNP+TwC*z-o8GX{C3nHjU7;#rsQ@LBTzwd;9rOGS~+eKZVRYQ<~&>T zQO$6P<+`Tr*Iwpd4)o39xdet)26{)PKgRX|y}t1E2f`E{JZK&}Y=apkrsFavxt!*u z|5e4u9pA&efiMsni7Evxf-_wHPV-iI!s$orwLJH2p}@99l3FeFiggPDj;yHtBLAaN z-EwyEVE-0BqyT%BllB~bhaTiD?XBsL%Pl(O@-5@(fF7$Px8IB#B|Ec;eqnFr^0_{c&F+40?$ zWvT}7b$$)Izj^V%HM&Vl-wJxGze} z=_;$ymErpWR|XX12%VG*3#`+HaqLodg!u^z)a!tvY+V=s`XL%Z+7+c`1fEdvEGqg71@l#<$+Y+hRz3^sGr4PKQ5RUADSmhKWCH(amLgmWi6n`C1z3vV`W6}|my`&R&h^Ogo6 zPgaZAVUI#_?^ z+o+#2&%8!?o%6mzh~0^fgR~J^^F5!I-Fpgqd1DCX_^TY@(Ld2X9@W_->Qpz3uZ^$S9yjmFjHBvtUwqf(acuYjB{`6 zf3ytp{iCL1lu_j91WEx;A0_p8)*g8&AXsqjW63)_l`FW){93P}OPKTaECdl03xITA z%V5KtqYbd-y87|@J)lH+Igk~q@xk{Ct<{cymH7pFV_ooOm&qm*dx&*&qdm%IH-{={ zl_%y!qHPbDfKY1lFQoU`Fnc%K-V-m!^dZbByU6jVd}!9nCOf~4tR7EI8ylI(p;gG) zZE32I%asXS>P(FLWYhfgu}Ua*xY=hC9^5uA?CQrC`Ka+%ky@)2mpAETN9*50FH zZ0xj%S5`F1rKs)t5zn!yzZF$^eLE^>&S{8(!aQvKDm*wR(*uUyZT$yw@BEaJuNV0) z=-0j>-u8=gO5uN41UYY4o>0nJ?hih{&ONziPv&D#)_|dm+xDmha0(ZpYTR?5+}32x z7<$#T(CH_zGfHXpgi!-YW!nrSDHpnP9|Wx9l~GSwuY?!Qd@-dh!~qT#TM~i?HLv;A zzX4I_a`c&9t?&;hHQoRy_?SzIGRBka?mi<|l$K7ko3II9qP>8w#JmPY7S_J#f;1%n1B=6|nl%==W-esg?`Q}E{fewxjR6U=F z!QS~4@idlN60|UTKC44Y=Dsr4>32--a=}IB5C|!$iTU@(9Kn2Vuy0`J8!mmuc zT_Y}snqSqI)4v*gpJ1oCsrm?h}o>h3$^4B(VuEV+1d{(il8#22@KtukTB;X0vV z>edF%7N6@ioCQ>VpIbw$WVA?LqYhq-amIno8j<2*Rrza>i8EorJ9R?6)r*t8C0BuG zC{C?_1Eoou0NZ!?K6P<&_H`}fHIrZ#v*ivC21@#0eo5v5lUU%v-2)0;NWKUtrUR6A zZ`x$9pRpl7^AT@EznF2lnhsVX7eZR0oE-iTm*eN1^j`jsJJ;GTY%c<2gx|qYx^H^3 zlY_VG4&cs<)z2m_S(0F!O><7>*{)#?4)gD`j7?&Oik|&C@(7GMF+~LJ+)zj;S6w&1 zZizGF0C4Dn+0CB2E^`1DvDX>4yJjpUhbD_|MJAj3ZTQIoM3AP`j&Ml3M*RgT+uzG4 zI}j|1I-_UuGg7*X?tr!Jw7xa0uc7T{Z$>7w)RkYWg5vkUnGpF_&WS=g1qSR44Om>q zJRh2-W9oMjZ_H^Hv=^Hf%Mm%jlYPD=;nj>M0>{?? z%%nw!>-Ah=qX~WFs_cI_*0WmXfT%G10t=|3HcU=)7l2*EWYguCE*18Od2eW57^Nz*-ZyQv|caY9@W(CgYK-j z*TUd;OC#=xpA&;fcXN>b+{iZu7Ph%}`M(1%U3my~>9ufJeHX`=!fpixQS7EqQODpQ zCd?d73a{HC62MLwSADQSo5VAChNxZY=K!{c`7-akMEf4C#-CWk4NHzT3vGcFvrbpR zg1N(Ho%I@$IWwQgK=4-?J=-R)bQy8~!L7R_!{7v9MY>8jGi^P5T|R$rGu(J%hfVgi zK=PsTgyQaaH@_EO_1~Cd#@WblWPV7-mU|0Cg8L#1ZCk)82RP!a8PFE~wRv&jgMHJak}cIb5IdQ^lj= zxtBlYMdL%0Ea*qNn9sdjtGSxCJq%xvS(K6%s%lg-IP1Fxywr79_46B+MwuGc9-?~zcQ0~&FYfi%>M}NUAcGN1cM$UdCow< zKms!(`uf30C5>Q33GIDjk5*hQ*iU*d$Iw|#z9kAd5>R~>hGzEs9467*UH&Nix$8j3ku=W>tYt7R;(ThhU-w|+mtQGJRinzbM} zwl@*i+u3ppT_3JPiCpTN+Pn{K?ZI)|)zQa)JqT63D1{ZA#9?bls=>qh|LCC8dj>WS z>fp2m!(#0aZ&s1|z^~)6w*E@desNE7QAkj$CJIqbNV?plgRXY9YbbCyXi`ktBn7En zw;ftMf~0hKGRsW-*q2S(BDb>4XIr%OwvZELkE!jIq~offo~!ajezfqIZZG8|3+G_q zSJc{NCGOwdf-1)cfINp^JcR412@&YsOspYVgh>n7gSo!P!M3o=LkU~SsQCj!+XMTG z^Rz;|Qxa2y2z%x7beOn}F#QCrt0Lw5@0wVo^s}6oS)}@42f;vlJi(?B1WCEy%qy&G z8L$6x=hsj#v%dQM7PdWZcV4XZ@FeO(+pdV~4D8&@?^~-@A$9xO7*+aSL)-hg<~awP zlAZ*FppTn|3v`Oh6tdi1CvJTECA2O`xU8r>fJ2u7)y%6N06Q(eudw>OJQ4|=JQ)f_ z4`muyMBU$kwLuJbQQ8=H_LJ`Mz0f)dtL@4e`-Wg#409lu)Zer=2%mc4JLXl;479Q{z4#mGzV3Kv-i$Q0rYOkjRY0HzCv8tU_btAy0qpF#8+oI9t9q={OKl-k z463zAJ!1`a+__F%m&(=J!XZCCR#=!LtX*B#|C!dy1ErvS)LnxQZ|&D>jtUNFC=hif z+Cff9Zab;OWucyH)%Ne1mz=w{_|?h~f%DivPvTSe=;hdk5ahhQBlyN7#fE^c=axy+1B6#woowzOt9ln3S!e>O1P%u6Q0Y#`A`rX z710ZQIF?8AE4;^ds-P7U3R_oO7NT*UAVifKSOjqDhKB@+g{^S|fhVu!Aa_COvF1C) z26p=w`WH0VLF<@#G5AmkK0S#MS34h)R4zqVnB7mdAz(4B8Jk%@{$9J&1R2}KO4-v*zvG} z<{+SS(Xja&7SRLMKA&8~<=tqosI)*NCx#Nc1_>VJG=el1EdI+JHl|d5HQ|P^ISvwmF&_epop@$#<{@Y=nO8yL2PVv%*Q}(i( za-PB&u2=JOXygZG!|`z#egmX9qmDPi1!H(2=v)@)R5bo7kdXsJXp9C$VEIQZFb}?c#KN5R zva4O6p$=Qp z5;MrW5l2c_HN7asN3HRl$uQhZo8K&wh>V*e--FT}Mmv&Ekw>V^2_QVz2b6~e3D3Mk z23J)s6GdMo*dtKVbT+EP)2)W6>~j(?!6&Gq`NPuTI3McCXE{iU>K^$Zeum&kT&>y( z&W5-IThaZih@wNh_%$61_->xnek9@k8{rKoBo0Y{#QTsMpur-2z>Us$ZPOzt4 z=1ZqSA+8qa(KD7TJhtmbs_bU8?XWE2DJLGYpYCU`&%FI&fw@mUmssHY%rueMf#?XP zpi>1Ht0s6*MhqZD9*k#++Ba`I>OK^#aVg73u@FZhcd7vWjMT<_rD6Nt)}Y z{LKmmZHHtDeRNnd$57}Fh4raPcax4Mz{)={8hsO`>ltDEVbM$Ar*04JM~MiB5MCoo*Qmn#NA|9sIxSJ2>4Nc)B<6 zbQ9?5CeYK}zNfo=caH8C0L|>D)2r$9YC64|POqlZtLgM=I=zygf}6g2WqLh&dOdo2 zJ$iaQdU`#2dOiC8hxO=gd-)9`(l0?pCPiG8nF7|4Wf*#YpiQbRp^37mkELX#GkOL? zhJC`D|2tA_UYUZx`j33RS1Oy`D@MKP4s~{l69>J*o<#atzN#Oxhj~?h%`OLD~+SS9b9GL&C)p z{3F{ll~wc~K5id7^C0`t!}C~91>;PNOIE#08iL(X@q+cqQ|W;fva3KHF)mcZJO25pVwC-~yzuyrPl-OG#|u zWztJNK zQGTtWIjGS+&ZddN4p(&ZJA54bImIv!Za!0Q{LCTfL3!*jb`B?xT`bNR`kV{?5h*|1 zTwhcp4p}R{0?B=H1Es7zpuNo197CR+d=k$W!=&dl&pPdCSe|f5aTF*>MWPumayzSq zG%aW{+>|(WoGzHan?J%32?}e}dct1r36E`JCR_;p3v}94@@72d($La-HB*U|SLMgl zl(CXNEcWoMPgO{GxVNkIl$D2Pkfq`v<}oTbfmxHial2{Sj>e_97uK(RW*vAowo{&_ z3%ZKxvnkw2c<~M7{l45pa%BF35QcYyLwDsO)C%1LKwOH_2=gjMCVEL(*Z z4Sar#4&*2C=G*Eh_Q-oD-W6)90NKJ=nM!xYrZP4YJn?m8*CzHaCKz!h>Bpv@KjlIv ze9!lD1?|mW6G7L&DR~^`4mIs}+%kb+%d1HQad(AbDtpkuvpdH*^9P)*!VxN8`SnuJ z%=fMd7k-gXU0U5|Us~yuTDqg0mNr34&4LD9@xwr}c8cTSN=--@P=|>0mnD)Rk}2Y| zk4m@W*xYG=x%2D}e|Slz_Tk)q|G_Qw#F83i=+ytwRH-jb&zZ*f-_Y!G{**}r$E{m* z6#GrjcfrWI%E})&LD%!)e-Or$6Qc_+r4_^pKS*)JGg$zEEB3-6A7jYrsDfa zlWIWSbpI_#qVFA&2{;x$u9%>IaY1ouk1KjE(d>^g*1%D+E1K|vIHVy*(CVXNnkb*N z+HD#n{>a}k!mU%>~Y%*jmB$#dDJ~Wddy>UKzj*Z zm5ARy^3%G@p1(pD5-A;JJ?7ddyBm11BcDQ?(Uog2FwmJd9WHzq5I(L*_K%*$!r z(TXESB?If>7Pns;-X04`i48!D3~_`dco^PFFxLoHc6-v!0ja+)0s2J8bb)38kVEJ0A0UV7601MG+!>U zT^fER?^QRD+!`2 zEy2)X5GB*PdQ&PIYdxF*Lfx2mAfE2|PRD}(lpxN|ADG*1I!474Q1NaMU8i{=Er)+=b|~?c zQ~Dikie_H-Z68UT(s+z1de}YY!PmY;mM+IvlWaB@^u}+wtx*#al8R=EN3Qq9<2Y*# z*l{}vBowtTcjxe|AeHfHb8J{{#Cwta1nINB!8iMv{$Tgt0^90bRlHPKWU~P z_p!M}oSB6g8&EDZAn!a6j@PpS1AWA)qMCCuCxcyI^VA;I4C%ibx)2WaHdA`QTndhZ z{cmQ&s7<2EEwBesb=+Coa&wRfUvqrpk~l9{aOT%ZAdRmJoLe`ahZyq!-oOJaa0ZuH zbnkMaGkQ#%J1Xd@Qa=4vNDOLli<@DVg3 z*x7%i)ubqWDX9}6G_>Ad;sL~wM}U|XVR5mIP2 z^jX-*9}IJPPn^*xm&41ZrB?q%4m6;ZYrkowk-POI6Q+a9v!p7Z3*NSf>JU10kmLCJ zj8~KDOXo2m?3WASDKDNStU{kn_!5%OIolN#L#$onv^q;yE&xAb+g%|z#XSWAGGt2v zCD!fDV(2Kh13IO#19T9nPf{Qg=j`W`Y=pzg5%%<=BB_S@nKY`ElxVkXk^%O=f4>T}-6Z)-S@t%ibeg-v)8yi~Y;?1(uyp_z4D zubdYCUR+cI{{=z5iEZC=7VTM2kURY9$J|IxX45&Um_6l07=VeONSBheOLBGO{YA2T zL8CzK)%?PVoP$^*es&`tcX=M2&!2BQem&z-fB~*lf}XjAz#$V%qU%13)>TLX7@xv* zj-&yMDPF#UHnkEMP!R;myLfmxP03(X?hP%aRPOow*As~w+M~=hmiQtz9u7jGJ->NM ztt(Cl+uxPmM0u0a0ft za)P7Dpeup&}ex$YJs|+P?xi)9H$LWH*A0Aq$;X!lelETS7 z)$8y0Vf^}rtFVPN#;=BFm_Akz_k!YEwa%pn%_N9TmXezExd2lF&?m(|>|5jL$iCnKDklZamQH< zInE>xj=^F)yEC5X`qG*c!&(=DJr=6aXy?!d@!dLy=E~r`4a<+_Pp;0ud%+bb>=QIi z56|=TQSbE%@?IN_-KB%iyoMa+O=SOlkE=cH^p~JWwst*vjQa*i!Is{~t6IJg1^>gu zGlSJptD&e-pA9s@07SkrFDbZG>lkx#$%eN#Ek~G0K}SFl^nfCQwuLu6iXO>^7yI=T z0*Cue-|h)F>w5m~zwNC+)q5OI@s0pdC-;(asryTOQK-8o^|ZDAFG#+cp<4?_XuB zPWDMl+Q-8-Xn|axbzH}xDtNbQAqm`5YC9+`Ns&VbIPrOoa7_m1X96;MO6%GItZTGl zbz=yihM$c+F`bbH1b`?%jNZ21?Hws7zgWft6#%PlR>{D>>C!zscX7mKCkFD^$FxWJ zwQ3ND-DHS1OeyU>xj8}tc%rQ<`lq@h)>A3k@VSxxA*&As z09tnw6lQG&1NY2memeDmZ4nTGWdnIUKqzWhpBh|j9AQa!kpE)Z6%zJ6_{@A^plKSd z6MLpClBHfBJxYE9a4f@Gsyz?ag6XXL&U<2BfCn%murQ1Bo}-!cF9Pi8vl%1q=n#uA z5L}O86veFbsYqJ+@>@Xl%*W*oNS}WPYG*r)Qi*3LP}OopC1iXViJfwSKg+LE#yv0u zx#uU@V&M_6gEgp#09}OK;zL{91~A_Qn!)>9TBBL(!m!6`#w5NnH!#G-Ti8v-sT)8@rrQx&VjSZ_mt5eO^ftyYvwlUhkRk2V_v ziKdR3aRD&nO`k`0nG$FngMlNg5|l!Z>xy{I&;J{bPsStSXyL#;Pv=*Jd02mzXvp|m zKB7eb8n9k@1=0?6C48&~n+UE}Ra&i&C=+(Z13ep7Xs{Q!TJVKF3|!ebKizq9^`Lk# z!?6cMrEzIK1vf-L_MwePcA$S^Sv4#_y;4y(>%K{&PRU<8H^>cN(^By%{DSqUYvuzp zEoSWiY2TDy!T`e6;6gPBSH~;N#`J@Mg{vnq7%5#7L{OXHCFsD%294kJBo}D=Ft{Hr z?g$6)(I0+%gz6bjEhzAN;cGWN^`njN9&$=Cf8 z)W}HK7%zSXpDpOef&eLQllKl&N&ua)yY0tvX(R}-pJoGuv{eyPi$O;=_FHk#RfM2r z%BZ^NTb^`Sp_uI~*~gOuq_Dva7z*}ZiV2b+`m5m|n#LQ}pzq^n_->OJBsh8k=Mkq6 z;!)7HC+8w*8+dw(D82|v5f`*K15dC_aUJW&I(aJew~?n*`WXI~!1(C|FMAVwB>!J( zX$)+LpwJIqUXD=wPhdn|^II4w!+o!m_|r#FQlW_dbFp^Gy-{k_PzZfwLA3i;W0D!gfQI#j={y)KpPOvgB3#E<-w^{i;tL+Kh+3rS%GvmvK`{Q%?CD3v{Xlfl?9=Zq!whjS{kf4EA2bhhV$xf6Y2x#S!LyD%EO){BO)~Ufo7^ zgHzW4Vw=3mUm3`E_C`tpK zWn7yBXdW!KiL8vT z0Jn;W;AFT3)m+OMA>S7y?~A_JQ%L*(4X)M;?XC zQ%@P{6Sxe1Ln;SlM6F${{-%y#aEmti&sen+_{dgQ@k2Q8M$0< zDNgQq<+*`U9e@i{+vD#J^L96`WJ z0D8O>rSu;k>7a01kTqK>8Zi>YFRJ~gi+S-B&lD1Z@ zm7zsJX4>Mo6_HjdvV&DbK?oQKGYQrztrTgcg0fNvP%E+_0YZYJMvEj2B|r#a2qBOG zBoH9$Iafj~TJV2=o;S~nM_)-G*SXGbkMH@NI)@XAJMH+#V{jh`R*`iFCC{S{uI#^e~k9Hrlr14%Fp-_uO7^Lf?Le4op&akr+63>Y_5j`0ZX>EaDR%{niJ)J_v-N z@tEvR*D=B35hz$#TWhe z9k~2gY1didjp?Q)h3fZEW>>n@2*;ajEab6NCY-@-rgl25Ppam0T&Yke8K3@37YIvei=+4b z6aJZ@>&PKJdDjhX92z*}#@J4_W*AVi-4djrH|rxjivlU24RqGJ7#xqJG1yFqp;HiA_LRkJi=UIxT`qo`=h zN^0zoUUP`fYj(7md8%XDo0tp)f<7zdQxoau2}f0JAvaj3?#&VO%<$Y@T!AAgqzCfn z8p(r5*R0HszL?!I7#Yv1iv@wh0+RQ4tqdbiZ@5*)U;ZxWE5>ht6i%VtaT|k{zSoz6Ge`MsTKhOYd2PF7vH!Rj|xG^yYojBEdmpi z=qNEJ^R1NC{s%N~V?Q&Io=5N%;q^nyZ02m-CPbAI$!-EFP%}p)JQd)EyR5=i zF3enZCE=nfEGAtcPHw8vC)6~urluEN@dB<=*AB*_UhLnO3g~_}#4iz8z*wjr1wK!T ziXNI|ZMLwHn%e4|(QXq3ZL<@oB*UsW4$g5b#=VB@(ptXHBuOr(TO)J?pb`ak-&MuI z+a1^t(y21(8hqw~S(*nG7r-xyze}ulBC>ziH8}iRsPx^gjS1Q%qo5_*dLy?mDo5So zWpyC{t`@P#!yNFX6qNEI+HSwS1XB=^%CxG46!lo^TJc9p`7cMTW)G8%Yi5>acnH=uxDLBMV@CFENtM8cT`pPTRYMi z>(n?v@D6bkc`OAs%OOMJOs&sB`kE7bJqsmVL^IF54t3MSIPA8e8 z5;rzxo-?&pZDtd&)%a$`(j6c{&$uDqaZ`F4P?Bv!)*I~H9e>-hivj`@!-N4~qD?_5 z4D!4O%Pyq;3Jj1(86za!C6rvxM6ugiEVmp~OHkd~83nQb$L73xII53TYdc3@%$qH? zsDf3DFU0-U+fk|#QtlwQV4LAI+7A0fyLSY%_jKvWi;aVw?p8%-S<6BXEUY|N1Gsxj zCCh&Svy6c&3k$?4as`1;@hZr2WuN;;eCx37j=wwWMxn$_g7{4Esy4`z7sva5?PdZI zh#JTcD;!DKp2>wB|Aksbi=5*mx>cWVk(P7DP-E=7Qq>x|rTHeJhF#PwpwBVFJ&qn2 zWiy7$$~q&~8vI%|fR|WfiuzU)&j}b~SXe03WL&^7TnXTASnG%tS~ZJT{5q>HDFP&I z(e-Z=5#2u$?co2AHbLg!F%8eWvp%rr3oRv6AWELAABm=i^c||M?Qw(=H-X%KiGLN4 z!3NNXfTDn>1%01>3XF~WlTvg&B}x_r@8_;11#5I9st;IUw9^fxGMBZJXt#OpdSRjl zdWthWajI(3suvz+0;md0inbrAERBPAE$cbHus^#1`Ln~$6~m*vBvi~&+$;x|0S=CF zTR_-0gb4)Ug4XVb!G)0>9o9BFZeZlD#!XW|?XOaib)0poE##!wmZV?j0swjon1T<> z`0=@vC_B#ha^qRvRjYY-rRh(Fs99isX0EW1ZU=B(V##sN^e>IH<&#PkS9P%YP>Nn68#2q62vHoRO zKucULmP(UiuvngyNf?OYS=GxHca<-!g%%BTOUZ;Y@$HLC!VntQ5y~7)L8Lf+rRLmQ z#2RDp0z9aS3IZW%uX}p7*$y41`>euKR|0vk=5?awliVpBjA*g&t{O_k`>~3)5Y9u| zTO_PTNUVpM$TfHaMIceOoy6V+;#F-ZN75&j^H1GfeFc<X7so z_7#3CR~o+j>2j6jMi? z!{2H52Z#0-Ap88vS?_(ssQ(C;g&`JpjCgIH6+VI`GNf`3XkjG8By}@}AJJ?!lZWoTM+U=Enz>#SCF&AUOE*g>#4jFH~LY zDh{%u`qfWzdnmA|g^fzvFnZwnW2ta-0wHtdD8;?bM67grStb$g+$&((R^{Zgrbih9 zM0b9Ftq-149Wpg_#@kI}%GUuyFkNtZs^2A^l{CkJg#m7={!~5Wo<+qkrE94!#enyU zZ7d%mgW$)o2ZGEj5J!7qg_soQ24uA_Gra*u?}Z`GSE#(}5{PqZE(h8lGV$6r~^qFA#0JJ1-=SiLG>ry})=&Q?j* zK!Mo8YnfSzC=s$E5Lq9r=>oOv^HMlzg+{1HDyRDy{hVO|2)j6wuda95)IrDMMKVMJ z>m8azEGZk>ev{?!mUJ0}C!gPkco0(9gKVO(xE&R*>=tzImKu?kXja@j35gnm6{+Uu z?K$~4#LtxSn4wAFN!}6ybe_g9*FZ!qiTm&gf%$7F6NF=*F1&16Ba5M{sN|y9RwQcO zjK)|LJT0PbQx(K08pv~vAGpvl#;PW98|@)uQy4*;S>}X*yqF?ANqI8Zc)Mh1IeFnt zlHPXqiB(E$C`EOD&93xq|N3qkh?sjrihiE!MT+_Hi-5n$($Z2^0e;)8hhUI~I#lvd^@TEfQ>?+BQ~udA>~MJWkly3|?tXg%@6y8O7~8vo)pl-Hf!RBG@;tt z9ge7-Qf4YTRCg>GzI8snXTMj^-DF#|Ev?%EG*N$SHpWd zh<5cMpjrxL50xO6rDhpnfJumEjm(Ml>b%zKHB46q>N3I*TEX!HwVx}Epj5J(oN@T1 zm7dVBZq>p|v9AXAPLBZF&4&9Qn%!Ekm`0#cuNYxkb!+DCtNZJ;95efR>CUauUrF1Q(xFOJ^4tZ3tXqlpD9o5*QK*wvO7K8R1hx2~ zN|5=C2DJ!8t&0DM;B`wDUQ{-zsp^U@+s03=>eBZ&n`Ps3wS=aJ)$8HOZ->eZ=4eD% zgI>)ko9Fv5iBn402x#4F@>#zI`j>8r1bDTJmDraxm>+@oLAG=Y1Q?p%OZN!Xx!z^` zkXnND{Xd*t`lyUKCgP;ApZ!ocXT#Q_EsXE~cC5Cjg9iJk>v~vbsb$j>AgtXrd4iEC z%A)=27gYNmRiwK7wKzUmW9VUN&{0KT=vPA(OL-0P2$atLz@qrhky?<~IT5j+rSJCY zxEgmA#!T^8tYgYyCMX) zPr8nTf|)IB-;LE7V9#a=4;>Frc(7S*6|QtZR`v-ArHTt*a05_OI=$Bwb7)* z>R4|}x;pJdR+!a{ob#DWRZw03{N!U`AYHT#7ug-4reBDPWcYVCmQHVKOm4>NkbYQD za1-2^G7J|SPXwzu&#nd)45-JvC#4qb4J3i=$UhlOU9Bzu?-VG$E>oC5(rT@XECOykD?sJ8rN+1Qb_BeeCSB2!u`oqX6IkYB_7hOLi-LQU zY7&{vGEi|s7MiKOWY;8nP7c~rxE5+BRED)YGH1I-!-18ajihA-K#8-Y`s~R=_C()? z!N@Qw?D)dF{iYLVt2`UlN{M9kRGtaYNGs_&5`R)T9mWBX(3pU;b}l>FIB)ZuZOy8b zb)bgT_M$Le2DCU_fQe|hp49MrzewZu&U#Qn~Oe34ro+#&y6=mfSnxN!CI-Dugs=M8SMsJkIL zNweHsk(?e%m{F%e%Gx;zVnU*@c(dWRUhTquu)7xppc1eIxO;%J-ro3I6Hvy1{(VFD<96P;I($xA2(Qmf{L?h5&Z+o1HDsj}m3E^2FZbo|y9$ znwaZ~S3hcH8y1k(V4bFon6OfI`bfa(Oo%O3#qVgv1P>I#zO(k7!J^F_km@~HSoO|> zZp1!~WVn^_3zmY_UTk9zEAe!AK#;5lb0+ddOm!Pjm9mQ)QIpuCgca;vFo>%w7UcIM zmRpa+5#x+FR>k`lTBOFMlH5`!d>8ypymkX9uz{#hyVmPs&@jZq+90&n{E3YJm4LvH zX1&1n271u10f8RBXqxUYTsbGr+0=~%ly_;`i#!SRfqVUGUCRzx1^YG#xzH}Yd(AG? z)_-;AW$@fgjUB$_iE%$`YFGdLb4{sn^hSN5&#|kW8`!%+gLPc%vumG~T6W#2GRQ_c zM93moz1YPbw-$D4M}YqOXo_P`P3>-fm6m;E>$s*N{fJ){kY+HWx^@gazVD^SXI?eP zwnjJrh#lC4&%(Rd0)oRrO}rJ9mi_Fb272+T*^bvSJ$?4zHJ?*ge+N6fqty(e7v_B2 z7l8ii;#b#C|F2&Bv+c+n;G}N9D66?Q(8Kl=QikLjWz(&@v#{M<1;qT3CMVtBSX#E` z*c_=pC|;7$2w=#eh92N#ghrR4H@1UHDeh*uEW5X)Iz4R*2W87afBCsaf%A@cc&-2@ zKj}A3OYX~)#K&nq;M3La;HGpd1n94%n)3b>37Tb{pv7uqHp8M@qoi zSo~+J0WRbv!(x3Rlkv?Ra_rC~h#P40diT6=V z(GRQtT9QPEr7Uc8my)42Tc$qT@gZ@Asrv$wQlT`s3&Cpqr(a_2BT#5@auFV?zSA?g zNC*wwm_LiIONioJRDIqBTE@kW|Lf~-?#}nzl$o6|noNfw7FN!mLLB1}%G+TzlcGLg zTW4!_|28cG!&8-z`#3b$eURR(IXoucwjIz20S-XV-#38$6oOc*`j+Gg#e`Fp3yRQH zY}Im0VEBvu=K2ono>AMJ?7T`mXx7&`EG$Pq#Z&Gbd#AU;}v#XWlxeXHKJtYCi( zU`#J@qD`o9B0fHzXMiyPh>nF*&odAoKItlUB>+EUa7V3X39M()V_l2C=u(e60avxD zebrVqzNz3vLBZS1uKsV3hoM`4uSC#@D-wY3O$NIDYFqPSk;r`DxkhZm2k%GdlHa^$?ct$(O4QgQW%?lcfk2DapvtjjyVBRLdS=N%CJqvRL0cANy!x|_!o)rkm z8#M7lonUU{ui_I2PCt1Hsw|cNL_abR{dnAJ;|!C5W%Y&O77k6rhS97gIY$9#{48r} z+aI$`pGzv$$=Xw`5T3079GKO#1CW5NTWVb_qgueXA`Jc>p$ieMhC=$nT~Rb-!G=r`7YA7Al>X(!c8>gVK{_ z^Y5S?)v)C1tq{yuh|b7MYgi#@;+F3qT*F)b-z;pQnlDqHRY65Q?7W+p&4WI*tnjVQ z9-Tb%?1dEpNv+3KfE@A5_}h`>0z1EO%q}UMxI_0P;tfF>WiXE{k?2HQ#3_?%r!ZDs zwbn0V+e$499?L3KiN^spq%L}4Ndo=u_$i#+u%`_RutWkt26cJhB~j`T`trQ9t!qGL z`)qDn?(v(#b&S02GFvuB4w!3|5&}>(_P8w~fQVmK(PMnZf#JYb~H3=y$t+pV_!K zb!HRA1?IOfBf9c6MMP{-GZPe=$ng0Wah9Fhns=?y94u0yT?7XfY3speB$s-ggaD)= zi@#a8f=Ai|ab&diAm!QWQ0T}J0HzTE`dEu5_K(4^K*lGxZ9O@Y{KIO_@N(jd!V3{3 z4omck`eROhULysN;?dFt0>&cD zaHrmZ&{8>CqYKKR=Ra%*ZMOYx00HYU5{%4QWYZI!tJHDJ~UA#$z@TJl}6hKJtBmTSUr($vERR? zEn#3&+Lxg3_Gw}55Ffmil{T@0%G#!E**189xaB79ozRsDK?~}Cu>m0^X+5V#k;q_g zkgq;}3ei|Rly&hL{j_aYmO5L6g+c)9S$JXH_;PH2HY&!EQ(>4bTQcDkhDexrf%GW? zMy;A~_Ug&6H3IS)+)dxfj_G!QM-#GXJ>02gwXM$bt*T!}TNe85d;)VmEgL?a#tm;l zSJX~kM}NO{ZRlaGg2e#^ySLVlhHm{1iZXOx!$glH00h2O#Hki|J6BvI@@z6sHdl?b zg#RpDSsXhbjbkt!(P*7_Yr)DL{_Ye0Ap#Nc6UMT@wAGbndW)Tf*@3WW|{{7X3>n%W^s zB=Qs`D~p&pWmA1Vq*^hATSR}gt04`oObB9%1lb_2< zVNbS7`_B?epgwi9D#3dmSL2c6Z19y8%g#5}(LSPPHMMd2TNMKLi_j>{O>2o9L5nes zkIirscbxnlK#|QC4#k4Ep6;0D0Jxk!0TsPSdX%Uby)#YKWlq$x*kWQ(eYU2F(u0}P zoib&7z=>sAH~^&A1SbO8D z@FKEFcZwipuQOd$4m`PQPuqMZB=7pvR^K+)yb`HWqH0U!Umh z`N=ZBga3B*9yxo{vt2_>s@XVp5+l(m7T41MA2?@!CC?^VxH&9S%LE)?f&m}oC^ty! zia-k6vS0vH=e56zFF&g269ZibC>`NqvTrwWhpH)`F{W4=ssW?E;vF)~>A;%3(I(y&_NRLpF-PSv}Rti=7)@oIq zi`MGNN`ch_03Xfoax31E8&!ztSO3oV6fHH zw%&L41j)m4Y#OTHOa+|kyMxgr!b_&Gb9SHNa1vmM+XMs9uenjUX-Ygg9zC_ zEgO`r8Wt|j25;q*io*aPndwJe?#m?*kR1onzwZhpdCzA9J^wBhqh}sGrv(g!)aG-_ z-Y!HPYB~DzMWZn26r%dfhZ2&9Q_|0`+#*^0AKXYI@#FJ7!7FR}2rosN9y!}h?KroS z!JEWs8Jz+#8dS5uzT#h_YH8Vqzd>J{Zv!QK^8QTUcyfa5MXBTD|3oIBY(hPPqj$to z+?6{fT=j8|mza|hz#Zri_8(o+1!kve>Uf8Nby!ly{{@J}YcScm4RkbSYIN(44RsFl zaUDE3pkr-c|65&P=7Q$I;H<*=C6=7;f%#iF7;d{)Dz*o3Ow^73MP0Y&^WYv!J%4I+ zA`*v|AJcM=0^mLdPvVpQ&sRPy0=@R&=GBkpGhehX9?7ksxX##U?kRx(?VY#Vfz01n z2L=-UT2R~6VpBa#8a@(t3i|sOH@#3eBBXF)GazQuuTgqaJ7jJV2Y|>&3+AW7)kG9} zY0!&|sS5;6SEddAPbp(f*0S(ZT_N|lCOwFGg>CuifXu|usGm}nd0N^^MarK|`DMy~d%3JS`p9PLM<)RlQSO;3{z@BKv4GF{!4vZktnr$&F*J1~ql__h0K+(z z6OJaN&m$l1J)=z_)*Yp=z>ZU9Hah9rOfruAzZlTVF|sNab_OSB?n~zNWM-Xtd%h*^ zTRRXMA@uo+hu8j34=n6VfT-cA~1o!P9dPH>j| zFS`kS$^u7d@D9rQ!DP%1+}W}vfjwTD91M&N*A&RZGG|a$-68Pm#yjSSeA<9f))^bE z#)+0T&|xq`b&VF*WB>BG)E>uE-8h^Nt{d+wwnpU3loCNBs-O0D)9mpl*wY40t5R6s zKQ0cf<;c4%LZl6il-ku-wBS@_AqY=lVQTCx3`Sr1@<|HeGaBCD4-S?$Nti(;__erBwY0wY|P}PJD56r^xM~d-7lZwTXdz3{p;UzZgd~hCzQnlJ6W7a$? z6acgV>shRJQLwCyFCQQKX4vprYLw#o*qG5Z*@J#R>W}fmQ;5!6BQ%aIBDg2D!!Fh zCm0nEQjcuY5g2UCftSx8!4hUOE13EQDS#;ipUir9RYyp9Id~RGyKOz&7Qy_pUOx2- zgH605Qs9$WO;DDxPMieKvh9tJEG^K1)$Mp$h5++4whp}NY(o{M#eRWf5X~)MYJcRt z>EUCZ;345JpT5>y1gd$}**+t<=|TfZnPG(9$c04XNAa`A&|QiBVD9Ri^K5`dntCjF z)p1P+6nvtoU`hz=-OdmP001F106gU3&o3X7)=a>kD|z4(jg=Wf)Fh`t8~_Q=#s*s$ z?3Y(W`VE5tQ)a6mZy5YWgEc5DU~JxK@Ea5T#zd>I&UgjP;Ki?CF@P85}N4vrd0W+7X79c zJv&Gh#LRD+4R5+h|G)1hP4E2=O#LqmvCXx)1p046u5BUwztBL!%GJO{-lSKhgZQ4%=kEi?$g0A#Iq1`v{t57;@pjPR(xOO0HHC5Yej z?KA+EH$~w$Md3G{clF)#Z#wS~p7RZ~;tjOo|C?~uBNH4^0>=bYK7Wk>+5izOD(w#(K1rE@W+!||(I3iGL}+pC|^mULZz1$h*#Iih`Z>Le1(9jnm54eK(cO`>kkOr&z!@q6&n*X_kc0B!}TZA#KopONrp%0=?eY)K})DXKOG>G^!9=F2O zj(Tc{B)v1;&Kd4s9P0iu)~pi%;8Mkn^er`NROKIF)Xx?h4u5%>1}=Ce4ZvjY$Cp_? zd4bG5o0eT=w+4cg(;!)h!l7$lVI^AbfgT7&z~_?MosORDZA{q(RHmOfZzvf zkmukX?b`;Ksz{(+d_BCvLM|Fjkpyn8J&YaWO?yh$31TZa_J|mBsXHujbl}|Gdg4LJk^>Mvx%hhvzHJfa ztM*cKu1l=n0ZL~aezWdf>rs*wZ=w^iw1_2+R(kyQvNDz*?Wp=Y{O)ujIMO*gZlDQh z)aSG%TsS!MTSzcBJC8hcwYt4>9E;>{E@QJxS@utXGgEosjG9185!?)Ky19o^o3HG+j&1%+;v1o zOoC6nwAf8$IsXa!Kk3={3wW!i7WErsTXjqJfP-`s;U!M7emA(XrEo^?%jxdCRx*gB{#%|VJqwV%ol!$NfV(2~K(F6gaET-9UU? z1CDXEt$!h8ayOhQ4R z+k&R!QCS(TtSGisr-A)Vf_~xA$EFUYyZwmiWAc)NFJnVb&`QxO)T^k^Ktb|#9*9ij zV>PN6G80q)vHs^Yvd9$@={9hHF30x2Pu z;!}2t(`ekE67*=6NyXG|ZkH8_y(ihvxlVlmpxDa7blV=?vkD6XW|@DQiRZc^Rs&F} zTmM!m^_DfGnSc$@$cJVo(3j4@&VfTW{=Qn+ximi@Q220rdUhPc%$_Kp?De*mm5#|0 z!SGI8pLb2KqguJYV1=z4J*UbUR+$Y;V$+_qtP6e~8Mk^KtueJ@0(f?@xjF;=(k?AK z7z}dqNY^;H6OT*94Qd&ANjpfBrDzLsV-70Hv7t9|)W<|{mVgQf`%U4c%dEQ&Ikw_2 zEX?1^Q$;<^NLy;QAoByW8|axtLJd0~#qJ%E_ODeIDVdXSN(75ICUT(JH_+iVA+g3X zNwnUBt;6_`8Jg!&v5+8>I4Q95(XI07=I+T984Hmji=I$TPWi--U__3X%ps}OQ+fE| zVG*q3sVEYtrgB-zHL7m( zlQO+A`>1WK4k7Cy%OwvnIxKn}O zO?AiX@ESsW2JRRfVN9rN?M#2CwKe{fo40YxoZj8jFw@0va1@aF4}P zoZy+6kf-AT(FnRQj%XJ+CKhl{-EC+1SaZ)I-~0WAW27$p zV6gZe_ryi!y8Y0#xB&U?9~GwqsrlHe;#C`To}A zdLCCc&^9{r`FCb$Y6NwupXIZpzCe4SOEoyk8*4a53ce|8ve;qBJiJapNlMEJjCQ#9 zf!3&)9O<}Pv$dfV-NN@y;N)NR_vb}4g@0^CrufWM4cUVE8w3YtT}xQBk(2I2-qywv z54#ATU;<%Ox~J%8%ZuU-zKmmxz10fbU7PA`LzftY|6R3D{4MO~7^JeR>0pHT0SUMF zi%yUDLdli!ffna-v;V07AA2-eV@`8X4 z8#V)-?oflMQHT)T-M_}9XLBN0W$=E)TIK)zv=^4b6XO`yVcFqs?nkfX8=F767$zJS zB_&lUF2yK0=zIkJ`f;ALg{vsY9X}?d`S$lQk4}phnp9v(?MEt_=Jx#yuu$vjL{KUxI1@6NBj^KpJ9aPq7#71v>n53%ow;~VI1_79ILh@OeWt^AG$T}0%t zQUK_{!Cjl23O01FX~G3jXue0UGw*vg(8Uy!Bk#=mH{jh&NGUh|@{Z0yb;MktMHi^7 zMnbOnTKGO0WvV=V8 z=Y^p}TvI%*oXjL!rjqF`k$}A>YKQxNFL67fY{=0314pqqeU&1FuH#^qPAPwD>Jm3C zI*~F_T^+$4XW7MlJarRokmK#>>ZB{avF~t`D$X5OV^JjucR9^*b4Fqcv1a;?Q7au> z^Pd^#gI6=M@1_`N_~YaDDo8CmU2J)1=5jVVT>Q`1vW*0H@Yg@93`RW|PA4Y9nK&C1#cNvT*~ zwC4(R9lEYv6TKxpJ2A~%1!Y8S0#{={A9{QY?{rQ8R~4yVL55>=h0=UyipeeJF&PiSa z-N`v!L3|kMdTJ?7_|(}s9c^ZZLXt#^qjuN=3x&LW36pDpzMbxuf*`~RtCtyOi)oop zjX5Q{477uA%~?j{w__PYxya21<*h}@;FfvW#DCnhhxy`ufa10*4?1tHFe|+1yOT{R zPN?3i!e)k!AT7)aDCNJ{jtU;6#%GSp{15EA$34~)$o0#sJ+@k26~Mi_iz}bnpxCO9 zpS<7B>~KzMdoWUvj=QsCwqu{tB}Oms;b)Wxq%5xXE(S?|J%- zLXo5tUy(VG?q?RR8%~tDm#m1HA?urkPI6{qV`~-Y(NjDs>VSz;azw?hRC`w^=W9Ge zS9oiGzpXO=ZVO{4QIRF_zVOh#a7ao>gJ;rcTO~ekF{wWVaNkR+Im_^U5V@1_%(=E) zZU;O_tezjaL!#3g+&@Ji1h=S;E^#yVF5L7=mTnr?5tFHkRhgAA%-*G9ao>tZdymRx z7r`YQa?<^n56nB4>Q*84NmUO5xZJcL8R~{|>dB=cnnZpR)Mj|(bd!-=cOP^?lYj_E zdDEN$5F5>?@(FhFtEwcK$S75GE4Y{RgUpK}VJkYRqMx!WI*qnge(G9uXwD3G`+Le9 zxG~a55gh#V`q&qcy_^jU11#)NVx)+=ezIywACiE4YA+w#pv3OU)#6G~=|_eTd*f~p4%F4dG#>DslEJSo9E+~izRC69TX;4s0*I>d(Fszi2U zL-&^Bapx)6sa#rYP}o*$wo;#(CL95;#M?T_U^NL2A)`uNm}C5dr>gJxMqoESj87Uh zO|hHm_tpZFbt!PQOR3`9KWG_6bIMs3Wsbz}s$GeeJ64jz z;P+VB{y$Ir8cHN}e=2u>p61LnTot=~yEHhg!zQ|b6@g_qazw4+7Yao?8;LH6HPMA} z70#_GMMPz!<=v6D+MugM&TVfu$$wsuZot1DP^~n)L2ziOQ^fLr6>@ZwqBA9&VCsi4 zPY!aL-WTaJ_RL%rSTc}!PEJj*g4((>saqxq&g54sFNcb%b}>qllFl|~B1Hs(eUwmg{G+ zcjmY2%Bn~3K>RP`G~!;BO37WSGR{-^b#awSN*E!QVIq#mY!=0wZsdx-mF#ehKQvUhMn%M2>)*i5qEMD(HqI-d}%*8wjss&A&uj;t&ilR2tUjwUOU%6(;pKgu2eD_ z56%(fB^GvpzGSkjofOc%(a@~W@#ttcwfrd-+&;Bb>3CaloOg{TZO|`Dc8VoWIG3s3 zF0xZC?c17S9pm$bqq6P#d$fV!l$v463NvFSoZ*&<98qTm1wmO%&-WxfLEZ z0_r{7wg~toF6HOwp~_%N?UYUP*eb90O{(>eQcI#w8=4+T1Tme>bnmKU8_MI4*@U}S z$>SAP<=^4yV~##kYtB?aC!LQhxwnK~-=G`YD{`JtJ$zRo|BPY!uDh9j&Z=rczHjw? znNx+-!r|eynl{8k`SGCi*ky3k%)}5kapz%6p7{4QWq;aBiVG)6=lxQ7hBUGXL86=6 zT%=zmiQai{q)RcigF#8=Pp`o`I5DDzv!quH7)XoiZdyxrkyipD{PCrzLSD&0#;duD zZCW-BznMR3{Zz==g;0^feOAC4-=O>~Juy`Mxu`!$_pzaU+i10`9d~RpXL_$p5na$5Nx;zi1rA~X z&Co1{7~i#>X&q*oiMJg80g@)Ia|AUSZv19`)4dY{>;9Y|P=GA|AVVk}8tA+>@)tS9 z!u(U@s7L*XW8`a|rJbK)sJ0)~{H#-AmM~W)>9gig;8StrLFwT6!jUTOkshg!1Q zGu}oL?*Mz|Ifr%cq-E#(opIz;zIu%XkKCw&|=6HV_Mady7THBE6X`81YydI+5|(sgd? z+CWRNec@=OMZC+!aNgKY%k8sMeC7D^j})Fm)V(|8sC7R|w<^AulrgT#r{j)qs+v@w zzo|wZS?7mxNik!7@Jf~VJay4@-)>VKeG5Be>2sUWcDl#+4sqd;|4l-P){^KDbwYX4 zEYv;6XXDlI?)Zx;m%{N?fH;TA$B%oy@7MlM3BXdm;*p{C_p76$JEkwKXPlv79=<=) zk#yV1D?UzC7ugn{I)Qeka^qJ{-b!OCM)9g7?(M&iLR=rqxEioG`Uu4G**3(s^5@Yd z84u_;z=RSD&++AO@0p4c=Yl|sLcP^fgRCS6jwgSl1lz*?Z^!v&p-K*Dm#`geP;p(4yK!={5K-oHG85u*#EEf;#&mjCIb-x z&6D-4xoCFiRf~5o9c=fr1APH)V@Wr-=7oA!hj9b+TEduOukV!LVQm_dom4~(-K!i< ziM!T79}{ok{KJ5<(EzTq!G+Z5tC8})p(;T6ylP|>S`-+MKWK=n2`?Iml=h7jd0(Q= z^!p8!qUHALbp3^f_+d=K*Zy`bpsnPkwVkBg7L>KHf-LNAnqZnf)@sI6FagSmQSSq> zZMGiT4X!UlTep$;UBgDn^&{Bcs{f=1GGdfV4e|+b`+L!cOTLL;k!oS*Dj}UOR8^r) zf+0#==+c8DkCz(k*<&{1QXHS5n=Waw*p0AjYg#P4LbHDmDfjQO;nzHmAxGF)+v=4$ zy6#D*IMT5`(sDleCQ4Z=VQ~rj74mZo-`M0|eD9e=^u~?MN8D0CT%|!fh?1ERol~f! z9Lz~erBz=NWta4`c$3WrQHg1|e3GkKk*s+MXP?#_m93O}t|})(>aQNYaU!szfo_P` z<%_6mi+JT@90LbI%W-+geM4-L@Y^YScT=IBnc_e=!OKs2Lzi+HlE}gBD=Eh}PL*vr z5i>`~%by2ulc-Cq6w0Ak8qQnt)H$>H(!E`r>v11ArhJ%GiO15Nobz7I8e zJ`NhocJGH3So8@M>aAvm{%WtFwQ&w9l{8LPB<~vthS=DO-d1Vn?3XI*efMU{W>8_+}s&`ynlD z&8q?4;|6+v`X$}oPxwz7=quUz-;h3&jay3|I#XNKTTF@eBo0o2AdX2szBG-PiLDVY zhSJg5L}a~%T?%ra`HxA(mOy$U2w(SJ=QnVgj4Tuf&=8>!eF5x@eze+ytoG;*1-Fvv zf&%x83I+6i-+kuGP4CgG`S#7&cUGAGO_8jqb#kU^Nc^eK%%3|Pf%o`OdU9x@Ie1(^ z*CATJRGa`qpt_Qunc3-^-gcBWlAqD1Fax&?j@+;r%cVttMog+P=f)_-L7D-NZkz!3 z;w)E}itgUiKL?4kENhd&PlRpA&(=;=KHVw>Mo3=ivE1)@srV-r{C!Gy;V1~6xalS` zFO9`;GrqAmm$qvAB;(=l3{HgsC(#eRUAN)(j>@M$z0wkQ_QT}(Z#wNC9>FI*KTyT* z;+IU)eSDJBarsq{G{bd@ddsNI)xG_Nv5ofP!13T}RI1s}s-r*8ak7`vvp0HNF!nHB zD>JKdGqw(SC!me>f4nq;4Z9x zzS0@u){FY9Kd8T!JPP0jrhQ+JLLS)QY3qRgZKjXA#p_C;$8wX}&v3ikfE-L;p?kg$ zk1dpOh=j2Bj6&77W;kyz{xZ64oKv?r-1ck=Ub))L;AeEYxkDu>CEa|(o%-)@j^aryTsOYZOdi9(*;33vG$)dM;-|OgbB7`B3lv9r1L+w-+fw5YtW)9X4jw=<@XVJ5T)8(e_IaQD13d4F!zxSNjrR#&y zD+<0q>$DS(Rgzs@;G*U#VmJ_WS;pJc_ok_!5cEYy3%a%6vYCL`u}6z>Fn4!14>+*i zhqPZhk{j^MaD}Niy^3$_$NT`|Nq*jt>Yn$40+rw5*p4;^-NC)(0vCiUL-S+0K?Kek$!A(9LPRrixci1IG)a*&z zI=Z6U)rx0p=1{Mm*zfV@Eo!7Snettu^{+V>3?zCrQ-O>~UdvI5hed5lZ>jiP($CI5 zn4CTjdL=(=IrfIgO%}nSD=a0KfWi5+ntn?~-etwZp;`sx@+P@Y1x@xCD8{oK;+Z9~ z44DJ7B;fQbMu+Lq)3m5T2d6``rw(T_nY7dbxV!T`7tpQJ$ z`B^)47bSUPLQjP^&;uQ#oahQLP7xvei@CSD2#DWdHvK-J;tFj;N?+ZOitLE-ubQf2 z!Dj|JX`r0x7`1n%xlVM))59dz+;3*X@ZeGtx5mX$Q&%?N9CB*1{3be`@j0dr_3Ar_ zJ+7ZwQk`VbTS?pecui!sq3L9DIIrbK0M{1WtdZyk3IHMJ5Cl-m+(ku*#xisEn9oq3 zx5(E1Tv+z(>r>P&W5u*1v9n)stduL-CvtP8g9@~L<+fLm1fVB+CG<#C&va-PC?Bt^ zT?!0tDj3LVC??U!?&>+Fj45&HlYd+!Xk#by3^2=bL=Uq;vAsF?51{*3BRXQXro=r7 z9$bSG0YdQog)&lOd*_TT=q+%Nt`?l#_)UQ_bxxhQd=~?wo2xhtUb?>!I59 zzew1_I!*Atuy)3(KP@ONje#|(f57^ii$5`48T7b1*Ye^>DzN|3hh$|X50fX~9psS- zl?V+^3}uGXaJp#onUBJsoW2vlEsz8^Gule|#x;`g6}1QITl9q+VikVzR2{QIOY4bC zVmC;!!r<8{Pk8%4Y53-dD%JF^UXy^PSU(A7fG0G~A%+VvmC8a2KtJRF6cJo^5$4<`t z?G5*t9vI4VrDC&#wC2pn>Mvy0q4k&5z=3V7{+;oSpBsoxR&;?Yy|`dqARF18H#ycp z*Q^!%$tO(l?^4;`q>=ddeWSWRRy3K{Zm8s0SvxVDXHehHic61jzru0i(|D6s5D3Ht zmC_ozUJ3jmv`MR3p`JYlNsR)xU1xOECJP(z?qw3YkI2avn2cc)DJz8+JCdHG5BKwm z_5(e1ZR-_)L>@*Y-PU19Ie3hWiVHq24URx6%QA8~i+V%8BjenqBs?~?kci_=kJ6lV z8BptA8yP_eo6OVU+v6#%MIo&d6{X->#(~E{X}D!S62Bdr@nrWOplv00FUpi~KPTtB z;--&6ZBiEKLs@@J1vfD%T&R^U)S}CsC@+(mKaH^UqwT1Gi}a6UZx}>vH0aL%d%X}e zP-v!C3HyqYuMO}Xb#ba!Fx7H-??>l~!=GiN6Q$f`hrJ-#Y$`=(#{oECi^cFo&saz9 zc6J|*NTT~i@Cn0)S<4JF*BP3KHl{kXMR0B;T0amQ{49)WB;0VPrQLqjCj$`2ej=&* z7p@(#I+p`qZpQEKDHT%zG$M*q?Ia9o7~H)hdVzR9lpdf+!dQwu)9zkRdaWA_hccMiN$n3#l@q ztjGvd5Ks{UVT2GM6$%joiGUKqiVz?o8DJm*Ldbg<_G#_&zF+?z{tsWnx$kpd_cedl zIB(l;q@Df#IO+Ebm;ShZ{mk~un}2$=uGy@4C}&XZgAU@s^D6{$uCjEU_(@!c&jawA z(YmH$9od#q1@cj6g!y!`csTA|m}0h$nJ^^g_O2F@4r^ai$S=Y}ZGeAT(ncrUd`BX) z1D)vl543{0_o$uz8SeI5h^GlGkK0E5zgLb%-6g(X$v0SDH6ex;(sTZK<;Y6og;T!j1k_ZgYXPPtxlo=oG& zp7r@(K#UXe=F@&#{`;jO!Tk1@v8tC(vq&d9My}L6*T#pDCiP_EbYT-yR%;PHr_JZ2 z6mTsL2p`u`Wm~W8?7-h_+)|m(gXH;y7(<-Wn6(45>F6k$WOx!isBRXWE1quc65&&j z_CuVduZ=fxojuO?-bhcyF^XLwo3R%rs`SG;3fMzksJT8UQaGl;XLL?l911%y1{Pq> zH-)1$+%K7InE;n-WSyiYfNm@KfjC)A(3Th<8I1Yt=ug6M8sW&35Q z^r4D(r+@j7UU~*ODtclr;rSk+voX}a^0~HD{OX>hSjn5V|NllNGH~c-Yl<;c=uElI z6%`6EFTQAoBAYnxgNwMF?gYc>x~Kv5M|V0GwKaLiL2Y!6D@xA&^*v*NmrybvNs&97 zQ8MfDr#C3a3~t60H{o(HwnlA#iUi9naz|9G4?JbvM(4iKEv=3&vG%B&aTm=t{8^9# zM;;bYLFI{lMG@VG1%&J zF9mLOy^RhN)bkd#otOAV+z9vQl7e)S&j38;v6n#V)WO`f#c$!_Oz(xR1xwcj&%RKL zqKwOEjeX01UAp;-dw=rU&}WCxx2vjI=nzuZXZtJ&$R)tx`ej4luP`1z4&=bRqpe}w zTkX{k2ZliZq~J3pXSOUD@`qocu%W*Xp#GrZp!Za-Wh3A9NDI*sVgB-Jd@H}cX_-gq z_}bsgzR=SG>1rP(g_;hW;Sj1+3QqdfsO-<)TW5(uILtVU77p}_K? zH(1wU`oxJSU63;+Dy$`wIdn0`>$}cHtCP!rk6llx|NK$ju7nuF4~&o|9lOV9^x3w` z=?}EF*8m48o0K+s`(23=1_Ru4N>mISoe%K(6E{f5z};}cu{YP|3GjNufVxG3;cPQh zvOcMJ$|bXJmB7P`&o(N6UL_Mm5f|c%GeBDz9z~henjofj_jo$gzOZ3#vb2(?HC� zi7443IsL@TjFPNpxF>FADGw;ps=34>QM&o>NJ;l-g&Bs^&BBXjd;1E5dJKBE6bp2- z$@!sOBT3DV?v~>m-gl(o{L@%j*r#8RZps4{7GC{gLa~zf-i7#;j&6BmeW~`kuXSXJ z^=+?=W3Z2eavyF$zL@^a5$fY}wWp3Tn#3XrzX9Y_AgdIkw>OAqe$JzA38>0-@HkA_ zwsrZ>FTFGF{zn?PLprXCwDHJ{cr4n%vq5?&deLlpF1-}EHXN5d5g8->;q}2x==wDk zI5={}C(Ajao(8F#$@=g?#2w~v?^21^27>?$S`H+E`T?o_8_BBTi-(WkXCkpR;S)zA ze(_cVqf0MGTQg-;x|$E)>AZ>$o5gXIS**6CUIgYrdq)a!F~@1C^0c?g~U`CO+20{^DnNW1{E8 znMSI?gNUTAu)uOk+1>vtn&g^HopnKBM+X6VDQc0WA5!P^TgLjQNAS{Z)HgRl#=?Mq zGMNXYW5;!3ZI%F#$hg!&RD>09st^3|X(s9}=gJFQrli{9=gm#?7nHXne%F9;MOT!a z;p^X)2nwU7yM%VFgV>@`!9_@|s=-pNj$TyP$1VOclzPjC(mEAabg#zRs*Na? zgAd)(h~2(Fx*5p3UX_l6q;VU<<87l2yrbJhQNNI?CdS%&m#6U-Y`x zeMyZreRW?Z^zMqiJWP9c;upZ2AyRSHw_&f0C$UgaBvp?=d?axSPHc8&45* zw9#V_w$Sw$R8_@4jOISwTcxg)vwN#feHMNfpfR*!+%&X5xTOZN7#8G&SgMLzFc0Sy zwC^dR1&Mdb+>lx1E;#DOijKp^x2q>dKNissuy%6 z8f(VBbO_yn&gl15+D`DLnIUPPALISBBBnP0F?G^1I3TL@rA3mq4L{4fT6lXt(^TU) zjBD6N531UUsp_v-sD7Eykq5I`9KK~<0QegVVp?5~Ih+~rV+GH2lKcj36ZYSf+rEZd zQyHI6sIayLr!i&TZc7HumTv$mYBAW0JJIaQaEP>Br62gX7sZVLHoq%*BPtjJFB9o9 zdI!K*sxa=hY1P||?Y}Tyre80v6EM0z$S*(~2cPq@KP(DFQ_{j_PMhwBhv<68;NJcs&$ zhR8tZ%cSnFmeofNv{gwZ=|m*d4oF*6YJwyh+_JCh| zVLo{yQ};4g;JNsIuS~M5pL?+7#RsUKUa&1tMpZ!TptoA56A7u=yHo17iyox~qtlkk zs~}#%r&>dw4&bgbl*Ie3ZtGd4pvHBbS)}%oG@QEAQpokPKP|iynuNKBavoH9o7qpx z_PY_gQVhO0RjL##?_K-~l#jp&uvY3xvFxs1JuNU-{4_6l z7A*!W!(oa7U`mn*@CQhXJrq%ZC)(5QY{$^Kqk!W|jkSCqS6Ql_?v8dI0xB0#J^@r= z_rp`ttGOA{b~PG3&U+Yh7-4P2AfcW;xm2I~4?C{>3r1Z(Uvj?(6dir{E_p(XmqmC@ z%xaWOPKM$i@dmQ0RJ#!o31ZezJ8FCcPyUq^=j}By2fSM{voinhN?3VW3HJaYz*5Gd zu^v}mkXyi2pyRJ>PlhAk^JgvJ$F6_Vy-nC>`2I3Fw`bDt{5YRR?Ua;;lpc(B!Ne8} zS0E>Cdg=-*CUe@|(0z)8$*cxXg1TB;+eCT1_~`)p7-#1#{~gP!`bc$6Fr?|;hPzW!wGkQ9TcLG_e$*bJf%9 z1(-9mrTHLO|63`8Or41iVuny*Tnn^n00VpC#Zk|e4W0gG9gCm*>Fy-YRH_$zhnb)#2i%%5V@#Acg$)F-OcVLR z9_n38`i?94%O?R8(Zvi~i1h4|>+2E5t*YTI zd03sZ5?X5s%^_0olyFFg2+N7#~7KEB;+O8=MDD26@hdoVW3~X!BGO z@^%3Cgb84mLi0iE$#2n64Gq|2=EAn%N;UXx4lAgrlGn+^-0^k~jhi-|JXWPDn?6(g)!AHtw!YuLJ`!ln{<|b9@4L+^vdwz-UH~?l(h$!fQD|Pu}Z#4h3 zDfP{LQ9CXejqZgyB}tyP&bpP!Ja^PP7r*mxoHvMrYfc(=DVg$=nk7C(6@8}0q z)4qXmFI|!LXl}^uW_!#*<`Gr*ytDN{MRKR&Ixv#V)J>E$^WK@hRf=84KQ@mEG@~XO z-F=MjwcRU-<-$$%Hr-J+^S$~V;E^C55T5r7sBd|k;r4L6D(87+!ketgFget8sOU-% z#i44b*rsAU-0w&=#O=RG3*!*}H#bj&030ofJpE2#o-c7_)War_7f8tQ$vw4$1X1pw zs2y}nF@Oa4xB2rIR=q;*L+6uv0Fw?Dx0dD?STp*FR=r1u7 zCDBi~FUOpJd3dCOfqhr}SR_euk6&QMF`WRi>ECw)8ach)Y$_M+SDyL{BKZl3R6C#X z7U$$$jENQvt^?{Ru`m1kfRrMuN%IS-C3c1Sv)MiQed36;Y6pI!*pWpdJ`1l4h7_kg z?+(oyYbsG#j`w%p)91}jFg`np34#SoEO@~}LS1%3+&_0j=;!nH{HW*Ms*1DiaKjjJ z>JbSC3dVE?FUiyo%+(C(P@|rVi+7*#&LUgSK7R}|E7=oQ=uOl3FWe}CjA^`z0782_ z8WQF_h-IUNYTbs7Fx%d`8R>;xMXpjW=(tSyUgiyav}oxePjaK6$V^H$wRo+q6jb>S z3TqqOpzDCtqvi9@fEvHW=@XKN>09-q8pjKO+DwyfM^%6x*AFz7{)68>z%p zcPv)LvN5hS>Rzd%&8UW+{E%ikU^=t`B&&)b>f7fp-_tCWs*o(cKiHNr?Fnk}?HKd{ zY+16fZ93_7AKKJ^>G+8f+2i@%P_0kh?y{p62u1c{7g&Bozo6kU9vmaFmede}`wZk0 z78Lb#<>{6s-&bfZhH1}{zT)BDRZ$~F6=nQ_Sj`RnKw+ZDvfQ6J5K`A#g`hsPYMhw#A8x)OuV>h zDZWF}Tsg4h@-El+;gY|t41StTj7asomV%@L* z0xaLUX@S0QUq!vwR?UWn0dDZx4{P9#Y}0wfSG~Xq2a=Y9w$Ij;o&D6P1ec`ZZs@Jb z$J)cIIOW<8TxWvi9nO99SDK(Nt^y|vJiQ!tuUqG`{}c4#vl^#1`X5Rk8DV+VRg``0 zhmVYH@kJ``vm?L>i9al}C@|^jyAJ#ctavgLHnaCfP2SqYuUN0OhgZ?(wI4Y1X;&W% zn>^0_tc|{I_j$yf{uKrFKX$t6_5V3LtvgOy72b8{16N;W-MX>0tAB?dJXHXE7^n@9 zw3Owq3jtHg{^=mDTbH_fC6fa@w07mdI%@*9)ED5m{4u7pCX{1Z%O7L1{gjvgw>dDm z^nYakAH#+GPt^XWWd5gKw{HE2Jp9kF0Ot1pZzi?!gSTWR*8)T7c^zgTpD&2|T73f~ zWwrWYcP`Ra2z=qw@r;G@kh~c935ileFU{1Nk7N2HP-W^wsd;1A?p0TKoj({XrhFlP zabkgO@WT78Q^KlO{0d4=v;zGR5WYmo9p9y1fVafNI@=zQcC7y2b=#FdVBiUt6Ia}A zX3>I)y%kr9soR50PvsW9J@m)ZPm`V3mC(E#G$_Xe+!3U}2eB$q#l5nTMFIo9{#wojbzKfsZ5?EBn8Qk&sRjv^Sg0K_IOiF)O<8I06fGADp*Txc7d`_Dmw$)29(lR3HOlWOV~lWKWCzqgaKBW0YN z+%(6Gy?ldC^EXjv<$8;1HK88^0EsFPBYCya+dnXWjWLZ}`Sp7MSBd!}(H`NGM7hLd5J0V{Y0%wz=;V@^(jkHTP|~1h{BZ&n0LX zWe<4evEO;oP&G`&doRyg!QRN|^>(&|R#h)JUa#c%+#INo*S^QLGXRH)i2RMR0SKV~ zk$QVOj+$i)Ors>@vGa@=4)>|XpbGER zK)oiwR*?f02s{>&ioNb~&W1!N!nnUc(L-Z6473YDPmo-ksJg>gj~`%VfDV65QnKw3 z4PIWI#(rUOJ@IM9-5(k)Y##p!0%|#Qf!*U*vKG73$Y=ax^fe|Kel4s5yaTsS+*&Qfoai9H2>C)&;%|uxs-QyY}LX^+0lI&@>|rkSaD% zp$24&`r2*NaHf;h?9(-YACJQ#mwFQZ%+xxOL!O-Uq|xyUWU#PcW&i_sNp+n}mVV>x z->PnO-T%nPvj~B+z(^w(;|Y`Nt&>S)My-gq{Fbrs*Qbz|QUw#2ETZQb3wfd@XE|6` z)NKBBmdZ-tBn_*Fafi5r-BR0vw^#|$;d~vIAmX&nUBD2GEZ;X^%z&$F`ryfnd470} zQzbxAq4{Y{(D%+JXsbyj@Y0(h8hryu^V$(qqRb%sE5ORzCz%^#vqX*l38v7C74U^%PTnjQ+h@McREF5w$KL?C7;!kHm&9_@) z*t3W36+*ho-!ASK|J2*Q#sZW2Aa-e#CMXU+eGbiEfdl7c+zckJA!n(dLykddV$~>< z-l^wEsopQ<&;5sJ{aBqQb8{*NukBo|ulWtsl10MyOxQP1KjPuYwlm1z(Kej>{eh_R z8B_koxX_6yY1+yftR<@PUzImO0Oe||cie(AM9+LkeK=p*U>IxOWvPCGiB`mKEj_-h zuxl=0wZG!#aE*;=Z!lEYmJxbId6Yhgk{)9V_s7fBJb!@P_|%L9(w!-z!01A8lw_s@ zGcCb&vh5`EMDJn8&eV;Oi;TEI!8zWovWyi|SO#sQORtGwT%kNIH+KmDu4e?IIVt^} z@R@Xx8q%+o6}op=njyoatw!X*8*(;K4llj`+_Dj(LVSD~C}x1vBs6@v7^?djCjHQ1 zc>S}NJ6fasP&rEJEGbj=ut8q72j-yvqnQ&whWGj-?uI%6sF5*2&EowApgie8j7>W} z=~-H_e3t?Ag%N@Q<3@$^1p}LQEX`*P@~1!F%|wVOiskwaI6g__|l z0unD;5iiT3DkFaU1e3bazw83^PmeMWQe?@bc+pwZ#5~B-LH{&MMGRY2X@Gc`49<41`hKX>BSp+E-c9Zx(El~Fc-R9S@rxY1 z(BKr>U+p$sYXFAM8HZ3(aisl!8K})Lt~*v|pL5-Jp{3_h&zwldBoItYqI!%l6&EC} z0*tx&s%}fy*~eV{r%bo8_XF@*u5uog4Fc+b>=0k=`t6hQh_{8&BI$HH^ZTlM^kty1 z7yGxX?1pgxOALMWeM_!R0q^V@fLf#I_28fusp-Q-5=c>5X{W>qVg7F8A5CMp%N}ZS zO(ap^X6ajV5awIj`u8i^a!G#OcB)sSv2pBtLFlZ*a=yn6Kh^`VuGrrhaR;@6zY=-V zCSifqn@p~oZsBx4EWPJJ8`&ERYV{aZS=MNx) zQp1&+H?cJ^wk;6oGfG0WiO6%)Wyt^B1n7Yd^@#3w4QA^Z*i@zGNLPel%xd6F_lLQ= zQ(+!c^N)`F>ja~1FRKK1%(NYfxbX@-#X!G*jrD8^prrZCQee+j27{C)48-ims99K_ zFGO$I{qTi^e(f&Vk)0W(-!#Dm1hBxaa1d<+1j8&;sy zIGH_SsHk5L6tnEQMT3JroRI7^R}m6f_q1lgRD=$+USs!zZ`%&1QB@7e@c|+oWET~S30~r$mPx0`}WCqxdzc@ZS!RXSS`42`X_T;yGl~?(e`~V#aR$Kko-H{aL9vFX)ON z-GtTx2~!A05Ji};+iEdxlWN5L^QgJ2QyWL?ztUip)jVt`#m@ld58L1%)`Iy4CIU@e zmp=N`4Uc%y2i$hV=G((5?Njqk>BUW-hs8FE^&I}eOM>I!F9HJWOtg*Fu_|Epv(T`@ z;~x2CD4Kw@DeC{Ks6v3=A$2kpFkU$^(q*^1hOXWn!)FLgWfCerPZ%&v6%1!pn#<>> z2J9B_ltr#YFp)I_bkY$g$~^A$KV~bjWjoCql>VU&A{5#3lBh`e3CV}kj%Gj|UxXYl zm>A>^OG=G_wzR5J88fH5)*Q|D@!*nr2qNwvhXLfrq#<(7%Kmx*oEf${1=B!`T~3|( zp@w3@1)4G@w9C9xm@jes(c&t0_{apYnZXyw{D-V4lH*UrQz}Ryj2p}XIt7MA4sMdl z9L3gPnG_E$lrKf!;7i_*nSyO$wU+ zAitTb(t2Vca%OIy{4Co7GVVV=hrfka*VA`C&3IGn%Hvu00V%*j=G1*HCkZs>EGEKp z;h0n8nf@v$r85%N62gG>E>)QogndH{3+?Rza$*HkJ*`UULY0NY+hHp5iU8#7j%c{) zT_Q=&0TD3*FIg{UId>AWAt$dexUKud;@mbxTWW0fXjSy$PLE-CyV9hbV%v_3+!Jm+ z4sJqhWsX;Qtvqr;XzS;Z-jGzK)(w|ThGZ_uxh;ow-KkIYk}^L;4-Dnc^dF0`!AuCZ ztD)qk$|$~{sv@3SGnAiQmlL;xI`Aroifl99<6n;k!=;zyRV7T!;J?hkvI0tMYeX&a za`c_H=L{Filj19Ykz{cmSG8YnS<5d;!#ZHxBkP+QUN4*o->jbt zC3An8h~U?z0W-?A7i35DLMKag1IoKaaL9pRqJ9Gen$u-aOpYLO#uVgKHo%% zUsvS0^m3rbpp4DjiEV$#Fj2dgR8+Z?(!XC64NrPARRhUR36KinILx8Kz@I=%C%(|L ze*4^L%>aM+aCm8K-1E&g4t#MBW@2)fV1f?o=}i-o=rw9Njbh zIiq+6l>+0&-mPwRHAQAzBerPKzRiYpg-elV`qJs*U6 z9@~E?u{oH8+G?Te#eGcG2D6E)jOLaaoB#Rjftwam^+o5^JZkFUj6+qP6)EYn-@4BA0rfA=2sv6jFBA80|PSevg z7^50s$>ajwg9vz;jBdEDfoGs=@FwE9wgxNgWOY#P5}o}fDc@Lwn_@=UxVpMfVd?l! zyf-F;Hp3o-4Xpu8I8EQU zYD)pl-Mu%_>Zx(Mbibdg;tP1)gO=K!2Kdte$$no??-JDbYtN*r3K+MNXB^AJ2xA7a z{uLfrjc=)zYI%$c%46H6`cmNA=o)c}7jMTL@ADT%h>bYmokUgHw&qN*dOS z(wN6qO~1Iv`vy*RznmE%_q1L1K*#5fp{cX6h(Y((3yRH}-RiKH`C zoEUHiKMm)*z1xU!l=gWq%At9y%f#4rGu;`r2Dg(RQWV88MtgxdTTHVf_WMRO-#2 zIVU39IdW97+-;`U!Mexq8N?0JU}lcK92PQrwv+Vus# zs&U|ovw&&-LcU9uHi+9&MUjdJ!rbB1h*F0Y_wzdvu%p)Mj!oPsQ-}SVN87676)>2% z3lD7~kH>6aac@+xv4l&wuDsKxsn))!25{JG9^n@Cl#?}4S0}38`ssTo46m+Z3{(Et4+^di`>bd5jmc zVB8?I%66JX_+3vs)Ohh|o#L7g=EBF@~_ z+sNZOhGG!(&(~Z$v3?>vd{>ggG4m}*s*UvZgdwy;8$^*Ze|KE^X)bR4O^f?ePRDZC zSNq!$&!*6Ogw~V7V>a$+rjJ-nQf+OmB@z$y%~odUO?E;RMOiN zn?JmpT?X;Nvu3^3!w4&=dz9{|xWHN#@`V_-76n{8s|{jjxFLT@Qg~oDe=xFvq|prN zgd_ZpWoSPWYqW50!pw_iGqmya`U?MQ$T8jcqS+`bXq1tY9||Zr3+=ylA;ee@B#pai zCCNBDT<=_q+tN=~C$_`IcsVe!)Ya-7G+r(0{ebzm{1d3XVqQac5aTi~sZfD{jZUm; zqeq$bgaXBg5vQP8ZWJSL(&OJc!Zt1!OiD(kO}f>7bl!*i5WP6mozNDS!Oe2F-xQxS z;jj3@`@on&B6X&KRzW*U3%}>Nct$N>nDwn*sR4EiZA7*J-cmhyVnGhz?S`<|1B86) z7VxDOyzPW}icYWOi$l?Rk2qohRZo%)IA2XaUnx!P!#>HUqEpk2Ns5nWRrH9^agxw_ zfv-~1y?26?FN_FlWj<6hY~vB&l{g#1oAPuWkRk;gDBDjpgq_)%Rs1hr*Hf@AELw%* z6_AyBsd~!lJwGhvJZK+;`(p1@(9X;UxZKy9el)Xq%>l-R4(Sq~FM^K{dD#yBrX*SL zpz1@;p(ml#%e_z6zz_*AFIJPNX7y*MI{AH7TuxrSl8&UV5lJT4$T5Nb*%p|g~eJHQPO229YYo|9#p`s}MAX1-uU zsa=qhU-(5+YoawYQV{<~XAJ1285anei)ea!F^Xg9s^B9J*h9stok@JF6c)OrAgZ6IBGb$+1k6-|@Ni*dRu#BDc z!5(O6Ax;_@<$tfZIG%ncaJQb;GfMknjxiq9))&$mkiwGw+BIU_FR(X9hMzw9GRyVUOms!tn~bhYB{#);C%(CNk9eSGyK`LL z?E8&Ri)hemzJotP5Uqr~L*|9y{agk7M0|yqnBUN=iURvi`{x>lpEI`pLuN{tirQZp zo@kt|qQ|*EGeR`$u@c+|7d^>F;f$E^#mb*5!hp=$ln+I9?OMAH(sYy!Ncn+*uFcI% z`8dNtPj^O%R80^C#h~5T>kCGlqjW%ccFgA;ElT3Gw1u-v7a73$rb^4yE2ff)SYxUH zC(zSzzRFsnW&z&{^Bqi-QrE7VV~`9iZmJYY(^jjXjB$(nR63G6{B=O`>B*v59Lg-( zKK}{CTV+GB1b4h5q@ZfGq;TNrSFk}yYp`Eu#VI>di{U=6>BFw>Payk<`b7)m@goLc z-+K-5)yP0sBQfLZQw=@uFc$bg#Sj^&A%~$MY!%wBJ_ld|LxWLQFob0Dms4ubnjcyW zTO1n5x^R5acTr6}O&U7ZXlnUKFxrs#DkEaBUZc6+nYC>^VRqxj6hD$Wae9CmdC@P# zSX$e~jHlIS$VTmv^(A(FiF>Ng*@ya$ocAH?x)PP}A+v_a=;t^ckOAu`e6s3s9esAC z=o2Le#!BTV;d`N>Aq zv)QFDcdyosNiXDIt2>#<^>9Aez9WE{w(fv+n~_3%3eEMHImu9*xo_+WES76-AjA%I z)|`}~_Nq|`+fWFeyE>NXgg|$+@mDVxKf= zmLB5HSeLV3J@C@=Z<0r@q~*a4j1c|`c=%x*fPgHpCFUN;~R{%lPr*@SI3b#l?1{fM+{(a=)`NU8}_s#8V}h*6VyNjz&2IwICXzO4FlTtx0Lgp=VD5Wp?eS}LW`rcXv7Pt6~KB0L?;J4*UL?1QQ1 zA~6nQg4J!hJ*o^YrOyK?=#?#?za{`};?d|Vo8lFp6k{knNAvWp;}gkQAoyA&f*w7y&`n|3$U3X`XOUqNpT>`P$17{27Dm2`9U%>r}lk4u&3V6U9($hWS zVLcH5zEvd+tl_Cl_7s-`BkLzs^mJSoj^zhXuCT}7{{<(UgKE#P^wGHnu zoL#z!od@dmN=vkS{BGj-uYs#`U$?$`d9)Ci2bG)|#LyYrJq z|AAQiQa@OEXpCfA(go*}-!-_|qdNxQ%3ATo@5)Il$>a|IWz~fKXbZz%4mv-EIOuQ2npQ09<9aNYQA_=O zYOeEUK+nlt-L12Go?M6wJhW7=vA!2_SH5p-`85qp)b6Awbe~UzWh-nHTBl=Gy2qO% z{walzAj9}4JgnMx4b;;ZutF}r>}!|&lMi*Kdg_{{GH0{3cjEP|=~|^e%pY9s&pRP< z?wcl!r}w+pwHVXd`6qyAp8(@3_3M&eH_*i^l85_dW6X*J7S{+ewxD8AJHSx8t!4Ii z57yncpNout4q=>)sjzZ2bVHPeXS!qHoUD9aHc_0!#k(!9n$Uo>rMi{!1}xx&C@P$;Ne6m=ka7>Z@I>nZwTBf2c{cGaO<~I5c+U*DJ9w@G^g>$4wlyd)EX*oy>qz--@rVHc+`@r%= z;*MBmIP{5~{uXL*s5*O&-tP>2Z0nGXR0qUOlFv(js>yZ}!Vj+ng;FIY%@mSl!#jM-yGd9c%Xu=D49)E3~O$`myanjWof)yAd!vr24EE3&>Uj;HzGfmbC*r&(-^)w0kXkP1XhZ zw!JKl|5Lrh0NDbgDl~VGFg%whr3m$A9B%P0HYcBq(Er+gR;^QZ1jjViQr=_-*Bw zug1Esc1DaH8?8P=vG3&g>qPLgTK9Yhm(YN#nJ~l;ySO`~=4>ln2ov4Y&f1>Xnp$9_R7hU{prsHSf%Zpod=r1Q3qu+P@Twc~ z9F9=E*n3qKU&vd0FRIjw(aX)H>wa}~P9GP<62b(8Wa?f_Kh4QdC3NCq5!IzjZ^t+T5Y1=-bwL z;T}_Cyi~ZUqz#Z1Er>WFZ1Rmu%d5Tsz`HPF->NzH(U0_YWX;=*DO7W=9-#!^;P4y`4XcFfA1@{dmU}X*`Y^Pr#2%K^eZpr`VVW= z)3KGf-0p_ChdJ`S#B<61`XFdidCyhV?wzM|eV-}Uvr1OL>$pbGi_6n?FnKq}tz91l zow;GSkdyqg_-WZdxF8IeCWTK=J*k{%`3T+*c0RAC$~>bO*L*wT41*jw@0%UP$9}k9 z-Q*oPR8%Q6FG`DS4MYasZyzIK^ zGqbVJSnzmvDYHG#OHfsk+%r63CFJ!5VUoMx(9xs@3w!Tug5lWk050r5Zx&0-DG#jQ zMce5{wm3O?t(<(j!vF7=<_WVZO&P0em!xiAk4@dw1e8PV^K}`>c73Q{bq(cS%DEI` zoah^vrM8Y1_?4y}zeV`Av?Dsws zpo5GmIV!W zkX^v{Y@ zH|Xprw6;{fVs$Uonu0$WKCM~5G$7_5?LASJZJZaja~zngb=b300t~<6cY0&r(>glM zs}EO*g^vMmys}-#w8t$C2NxE>sVT)fK8c>!eF2pbqmmRV517Vm=s)`nF=Qm~{ld>v zSAdwOv@$^Kf$%IJ0J4APb3dk4t3Yn8;V14pbp6eQgqy<)Be1(wV?a{OsKFNh!!Bw{ zHYGm52YNX>+#Tve$-Wi<<689>wh-J)*dt>N(&4$cDUN->M}<}`%e&b14{q+em1YabMwLSCS_@dZjS#+yea8|^0 zXt#OwJ88|vkCMRw)LBx8-lkKq7E@TmJE{5-bg@?hc{2$DsO7F><2_o=*8(rlf!Ri! zLy4&FJmgd_=?XR*ss+Nf@|kV)s~Ri7{!`c37iTld<$F}k(V8NeZN|+>9_XjjrH`+x zcqWuoCJi66++AS15IG%Af1na~aN>sTW@uCi-;F%Fm`UoVe586R&hOKzqtEsMgDlwR z2FKcK%mhpThcc!J2*<|Xw@&kFZTI3%N53EjND}#Dv*svn1Rw%p;h-Nww z3lHIz9x(3FRGbBDoRC!lb#xN|Ri^pWoZou5$1u~<)hg2sktF-6OJ|H6c)GPeT)PpB zQ!}@=@ExI^zM{+N0W9~ffc)>c_iEed2U2m$24vQPWx?2}X(aFNWmMn@UEp|Vtz_|- z4IsHLrRVny0cgO1x29tp)Ah{-u$D(18y~ik0xByZZu^Kf58_Vsk6oZp#;kfCQ~_Rl ze;EA;c=o=y8NFMApClPrZ@>U!)KYfef>SdIMkOnCO`si0_qv&CH>r1!pQF_*0^720 zj&vDvc7rs3O~0D|PI{%pyT&G?vQHnMGyeSSt{Pz7{r$##2S%sOh5HSc0M-92#slSg z%nBG-8$FZ&7=cbh{HTiqqVU0|S*@2*U(B!ivz>0Vetf+TM>9KHs>i<#D*%W?il=&=RMegP!JR6F8z zWDsZJuQ(8hm!s0P4xUE3m)dVz^e;>JQQP^ng+nOvMvlF|sYbfeLHF%W(6Jt^qBqs^ znu)XB?O|?iI|Ir+tgC&YSI~NgDUX?1pi_Y*yy(sUpz%Y8JhC2B^BeO!&K|dbdJ~g} zR zB+IlS##R>;xky7=+`+`U8-L79O=yAe)zynncxJXW^;P z!cpOM@~xZGr`zZbz{tZrm~*8s)dPgPIA1f@su@>#TLiNz@TXzg=x|tzv4*@4asJ@a zFRTbFnqf%dGJ(P&p&Cn<-I+U2RIgSzZtxsyEA_H7a(HisB)&FH#TgjrzTWS^sf~Cs zcN?hR0b_A+PO{GQ>HgZ5ouQz=tm89+2uIst5{LXH@m{ob8&$)ytt(9X5ic7mc8riD zYjiY(4`O5UXHATWQ;;a~DeCc{iE1E2t`DK!{0|*fH*U;k+@e}qHq4+VDrWnsJ2bWI zl}a4$>SzIKBBh`(9eiP^{^aod_h4ISU5-l{Cc{0vwAQ0r5_?9c;j%j{otb-Jqk3-V zMYijTDg19rSz)i3tP z0H$^L$$$}^22(&`N^wNiQ*vKmmHhM(s4}3`Gf2GjNo+rQ_|Wde;Zsth$<3=%MKOl4 zf4oa7Bwd_&t$Ljc6axMMFRM=m9u@fQ4r3v2kvnz9~vGnaoh$b z@>&~3t)cqEdrO#qzTdONIWdJYH75GEh8SAAVKm`bCP32K_IFY-;=eNG_OEHRTHnQX z#|f9r%-{XEd&h~Uu-2h^;%Cbqo(IeHZrkFE5BW097$m&LBY$}ui5I0>+ofm4?-t`t z^|v#$EVMxe-=>E-?5~a@^Ua_&`Yg~K&>z02WwcDDEqVK5$`&uH*WUG(+N=@S!RwKs zO8Ucm==B`!KlSbMYic9rXZtR-)jAY(m(4YF9%(rFO$;zQ5>N*Epg7B=U*|i`9YsmA z1Ah&9nSRDQYjzq;iVt-87UK3~(RZA?bmnfAkKaMvU-w(z>*HqkCz<{q_TD_4&Gh>p zH;d^^wbkiV(@|yGnJ(5$YwX)}U$nGUrM9$HR3o+^wj|xuOjUG2YM(A>t+gd0k+hVw zf(%MZLXZ+f5(E+1eh*zf?@qlxpYPwlYg{fD51#vZ&VBB4pZj&rc^$*$g{6m6vzYs9 z4V%&z=ty~?zj_m2vq}cayOPfvQ=hj0$s{%#p+I)(n#H7!(|L~&(V*VPKUG&AlT3sG ztf1{vI$kXSb?OPUXe&RoYgx@c#`f%q0|2A1pRy!{^f-HM* z(N|iGRwx^}ntp39r)0&nMQEiCJUk~+RTDk^`TZpHfY9D1*$DsVzsksZxvdXXbD5ib zxT>iE;)%e&HN~^K$FX_tRmv z6ETZ)nx$Fi?Y}QdE*E{X4zM3pc58LJ(e6zF6ivEL%Btby%L~L`dzrzm*OCqof%Iu` zlaE%Uu-w=$A+yc%BqMq5!4T3wFK=j-(mg2T?9K|(*p?R>L!AreIhWR|;T!`OfK zD>_%YyM^y23gj#U`mz3}QO-&*YK}Ef@fAGiL1*h2)D-hc*Par zm-bzhyk-$4R_raCJE7qP#Fv(}!AadN4`IkB@?{aeAB_lcvK-Dk;U62{m;B>`7p)4= z4rge@f*v2c1KA>yf$h-RcI18t#|jA-@s<+PHTsOJpuGL5VitMZS>AK~qtV8D8Vqv;+i-M6! z3&Yv0TpH=Rck!&0b|4LTUJw~t^_ld4A8viw;nO?fP_6r}peIPT!U#m{n4Y)#^?){6 zDysf#moGp=C>c4D7DXyHtFgBjfA$_Qd-@2$0{}%yc@qyKD2Z;qIe5QZ^kv!_Y1nBq zV=s{TH;tjv)?C4FwTe~Ew>5{9sXl|6v_Jw%Crj5j2`}1@*q)#Memd5suDZ)0W?ZNI zM8P%x_$^~kH=(#W>oz?xD9nsijDuGjy#j886eOt{Oy0pMFQge`nIES2p|Q{K1*@RY z_|S-tSQ)^IVjPwKdh5`$BZL~TzC+(k)P0XX5l7F)TxiKc14(598(*BWa4?SBj5^`= zQ!l*R0`KS*-fht>Ez27}qW=!RJld;Uwa?;LpmyuXK*Z4}zqt?cbHLHEHEG=KhEdlu z9-i10)>YoYsE2iKlgG!8#Av$3njjsM8>BvgIY)Gnuu`{is|0M6>XOFhS=8C? z--cM8=>SKln#qmlw4tUh%0lkD{rTmuk-ns@K3tc!^|cts3AU*&zuxve#9VOP((6H^ z$OycCSnXAzJteJ@J~c>(mhQC25wsF_W1Y;FC&D9>~EXvN#NVM$HZxq>8UzA zZl`MmZASWwW)7q5I|XxV9P*;(yQ<8e)9QEws~)E*XWg!q0BFKg9X}xpiRF%Gk-CRg+5IM)GH z2Pa`fU)-y9`8GUd`u!Y0Qwib)7wIztRJ~Ej&sK=o^Qz4w7<~NNwc(7|pm0g(#Fi!o zp?s#D+nS1(vH*qL)otFB7eD#kEN7IMUJrX8A=OBo4kV9TAJ_Ao>DhK83+bB-aNdo} z@B&>}{Fu~55ZJqAU#|(<-4mr#^J4uFCLx!eWz#y}Y_9E=`X|&tdP4ZHZPxnc(WmN; z?6yqkd;f9s0Qk8bvdgpJ)*H1PsITN{d0Z(0q8h2vdtIB-H*{9( z2Sj8$-M_isC}#iV&>&z%znTM>SC`Y%X14b#>loyxZ!|HJbvv4R<<%~^}_G61j% zBp+R)U9Mloq7LWeCMl)f?VwX2FP$qxdDi=ey14xSS>f96rPEx~I-zdL>DkOL0q;G+ z=j=@99RTBKjDMu+RWPAdLcJ*mNAnYI6sPU*`fYz2QfUGg1MuMFivszMisJe4fhA8& zfz+~QDO1?nVODkH9>Ho&{@T=2^$#xQ==pT&bWEXjjU2dYbqfT&4Q!_tGm1_Q^qy*i zaJ(EtC@Y6s2d->1(BtOMY_wCV&Vt^Qy$5NqdZQ}=7&ClJgC!zU{tFsEl9X1)ayPQl z$yO%m)Z`rAMn=P}omsQM+hBp0 zf%O(v)-EvA=I1Z3a|BO{Pu^|(CAzO~d{F$NeARMl9tcCfDa<(mMEQ0U+Ik(|VOI>D zmbHjAO1eJe`Bejr0IoiEok#biBt2{&*mLqrPuJ}mn|ecV_&idUeo3pYg#ZYK(bgtH zH27cX+UU0*6rjPB@lcl0pB~I zaSuq?&*{Kh*9$VsCtfR(af}Cd<`ybIkk75> zgYvg3zI}F6F6`iCzr4vgD+HEV8L^=^;OTWQrd?+7w=z4?bjf>vpl0J$^IU|sWBH;57T^KL$s0D)EfI+IJG;;H(7g| zydt2_qr$*dgsG9w`(e%C8~EkpEPLkpi#J)35_@6S4(Y~vCpXz5eeCpWs7%u;K$Kf3Y?3-fMm3;8y2a~#FHgtE#$-lI|Ow+nYNK$`L0xXS!iC<1055CuYpuuA6n(BJ<%=5O^5;+ONl2}OM`uH za#OG53m&tqlFP3OH$-_-o{Q;*U5>DPl->54g~9zZ$R+mgW#OPfNury{vY+0{)&?2< zyjok$n2bK0;*-zF(%&?Mi=t$KdXW}};OK0pVu33i_MvKbQTtv$x@mF$k%uS8s2%VP zUB!r0Bi&(JCFRc{gY6Ci9AKW3{nh9B8c2Fu#yS7!0E#d>$_v`<2vXxJj zTgC&08p6!(Ag^|G%#kDuc{cf`N3NE;$VA(@TPGjq0_047@a(Q$eU)&OI?es^fiMeJ zuv(H{xqCot6jpKuxqbK>ws^mrF#pe$RgcVnGz?S+%D+zz5ZFMdfMjWyI*Z^N84`SR zj14*CbD1wO;ukg3-WzPFugUO0%AZX&0AX*74f!Il0NRFgfK77dzwBITYl3nOYBK^| zV>jl4eUyDR>Lh@hH#Hk5S9f6%z{-YR1nv8o)t zvsNjSM8s^Q;DClPv*vD3DbEw%*Q>uz*n+vAus#Z@li!cAojH)VIy!bGl)<+J8cLK; zV`>Jf6W5HZzp@X^F+U&JZK2y^)&b?yUewRLDzfi3$FiQpl2#5*MWGS==BdCZh*`^>yRW@%DGIh?f>F9(+SR&2xD*V#?kEAKiDA7i+#9nS!9u~JMc==HY2PZ zugCrqUMMRZZ{CJZWV0PR4Rmr0U0n1wkwXAl`U0@GZQhJkCmLV|J}^oFciR$;thSxq zHQo7Q{ZS;O5*Z)Ye}4-?-xi;gWviq{oyfZu6M;VJfJM|an_-wmrz~*8&~ay`4kB^^ zjyb%LquzgJ%7Kh*M<Vla<7>Omt2c_X+MuWC5Y;0#Z|+H*qPI?hvT_`TK0BU z(_gRmp@8v7dO$xglEX)eU;ZZ7)^4Af9}U2WZQOd(LRUDV8OSi`m7<#ZUtG~* zTC05HJ*-9+BvEk0V~ZLsKQ4~jzLw3$Hv!bszX`AiJ0Gru3G?rcnqS4TrzwK%-)~!S zsq{JGgIGK*q$m@hhSJj}~v0PxcE;4NU6x&g!yo|Js4~bbd?j z7g3(4k`*4zktq7(dCj}&QcmB(JvBeeuZu`#nM9sNNo!*~fR3BdbHg*OM2$OLQ2+Zg zS1VieG@d2^mAKAvT!1$oh|J!7vS!MhMr)N!o-R95z3Edk@2qxfp-$8`#*7*3)kpCZ zSMefm-$J4P)&q~zz+Vh-ya#DU%r&Cr1Su}Ih63pnbSRR!&hYjgAAqNLeIh!O%XB#`3n5$V7d$Ci($54}k*Eo)FzV?RR9 z%XIdEzJWN^#%Ah%t39>T^QDJjZ7M4Z;kU(*j{FVB&sHApCa}r+ zV&ZAuZEY(8I~RtZ_L)Katf(GuCbM&(8*Kb81NWa-R6ksLkytE5U*}64?#~U`QBLYx zP$oN*3I$WL(CrWgvHl&&Z^9rA-zJ0oiYk!;i=v4(1-_wJdCtOkENT{CL8 zfH0vQ-GDH=uM5GkdQ#$v2WriAkN_)-zW~?z2%OH)1BOBN=$uNv30XD7i$-)KU5~$n zkQ0Z4u1>;x9lHrGUda%rBdq})Y9s{QqJFUz%9(c294HG?Wdv-oIk$1j4yUZ$lY4p` zst&gXJ@UEkeQab?qI1hk^dVaG5!%gcUZx52g242TY@SzBYpumTiHUH}fN5=tcv<>K zXRW@em9)b-J>a-4Dt$YK-1h}O7dxGvn(87Yt`xI%3=tTpu9bLrUAB}8&O$JH$hBBX z>%DCn*4(!d-|pSg+cWgWt+cFDQ62vuljmc9ca%3O3Y)V@u+dt#fol;N`<1$WQz7z; z%0|;CUPd;@!@H6GGu1b@KWraqx&tldGp!Jy$t2xwI+t8B{pR=~Gr4lRoPaY+%DCSJ z4XCmc{FfseGbw(v5FkSe1IUnSfvRl!+sNI+N9RkojqY${=Tcn^*5rs5-1?4?-UqR+ zT%c@gT2q_iU+V=pcO&@D>4<27J+-rIi;bV1?Z6unc~+^{O};(LLuJmxB3LI%Ep9qe zN{jSHsXpA(2;ub&?~1spP1S{p@ahbK{ju$_5)MNk;XawV;ITJWLhzcL!NsDsPub?d z=4Fcb`q@NW3}ls!3_pD@Kc|DEzwS@EYkcu^tV6R_?erQmdb-};B<14H98MbF&pvi&{f{X62uTw?8>|+FBX940)SuY~a+MPG9ZOuM-jp&jiQB-h?WjClQ?a9x4K1Oa zjm4B2$C9Vn8Zf(2aa#RsQvh%*3pyE*9nK9Dd_456KNWHPA=zMl4&6a-KC-Do8LebH z3R~^(SGHs;Aw4Mn4S@utx;LwI&os+lK5Q$d4yl$tQT8~^3r%iR!e65j4b8i%O%_0~ zue56flTWOYT_F$l4^Q&wqdU|`%LaD797`y1r0d|$Rz`u#kxAZKi9yP$d<9UbLbEvC zcj302(auAXrpYIyCb(da15{13&!YO5%*gXw%*~WB;`KJ`1b;7Liv8sAw}MyCVDk#d zbJldcU`Mop3-moP7b^=J5|Ss@vRU`dN2L2{xv|Q#<%`d`1go!#gN=eam*JWZ5HHnJ z>ufX^DScQePycv4zT)-doMJ97G+m5V)1l40$G}v?!;%n>FogloYrtT|$3U~UkDtmV zjfEKHQZ&RWu~Y1RLFNL|01%c*e_M>sR_hB<<_eN|BC+I4lf4KGK-o2K8*RV{`0zFv zRQfmjxNk?dp#I+nB1O*$=$z8CS#R->n)v>*;CCfvUx|Mq@y2wNW5BWd%jU@mQ7P3d zvqd+>W-7% zn|6N4ibze#`ao&eg#L7rQ-2z!AB#MR!5Hu`eR_kH12(goq6tbZ>9h*;Q8 z4kCd3!zQ)xU0&=m6+xq@dW02&(N_EMLr#nL>Fys@&crRG&@DyMtOBIVBb1V$3D@eN zcf$}T>9!h!VenU1`4ZqhT02q=d(&F~$$#aAlg%{7H0za-$D{62u4*7{ao zsT3`8o-DT3dE}K|WBTGAL)ucG%k87;*e_dmjq%*+0 zrPcKSvo;a=dv_XdrfggWGz$R>m7O;0dUa<+>RY&W7`Emxu$*OHmv&0*^7`dNT_04% zeRfIKj7@WNveM$HQ;8Z;H#cS)?{ZQbRf zcA$B|K=1u8Z10Is(+kb!c2*mHkoh_-AUh@{>R?i0>K9u+N*wpUOPmQbhCCH^U9{-< ze-$&m5KAW_Ye^)fI}n2hJxgvcuXrGmf6!X|UzOuUBh79f)&|G@e_b2T_*U)_KoYfJ zv~VuwGXC8l(wQjnoJhTwHpxeyM#+zbMwt1XxnHr+_h%%VL}jJC3*)E+s{vJDIsomU z*Pt-Y;^PYu{*M+bcXo6Y;F<{)oi??~`!T@Q{dSIX z_EtUGJ}C-lLe%?kYSXb@=zNKyb_g~vzQ2Ia3Wj5ot}iAnsys7{j8YWEM6O?(c^9DL zUjUT8vi~@pi2r>$RfgWZIzWQ`{^bBN?RSvbeM-cJln51-?LV}ZIy70Ts5E~@xeo9~ zFUBhuh*IB^Uj9yaUv)SS#UJ-yrgCZLfNbnh(N`+Ztp5pg0^Fki4*sv$|5Z5Zzf0|3 zBlE9$1=@Lh=;iV6#`5o$`t&QnDf!o#_}7j4*Ma>1iR(PK>1&n6k7}LrqYug!zP(gy z*`@xjk5kVt^FMw0?)R)^-CNsS7ruYywUM{%9n&~$4RZAt?|v`18gTc5!NT`vN-;BE zy=xa~`lsz5?|!W!-i15#+q#7xp1M%yFE6&cKA17L`rVD*e+{(@K?dvWSoPszIoBM$ zW$_14%fz0SO0H6>{Oa8e17A@cvVHEdSyNDYWdOYoP~}6jcN;jid&uavGe;t z{H>9z%NMSys044g&RFJ?v0~9vOav`l3fN@%{&Cw4>eV;3Ez?-Is-n_wx}sFQ$rNbf zjOLqaf)_5m*&U`hyeQ;Hr?2bmexRgf+CR^L1mw_X(6Jo zCHbf;+U3$-CFZNna3LGXM1F4@SXzRV51i1_S5aZ*e`1Q8L)hGz%=o;m(jT7jC$d{( zOYVQ6vxF5d;(R$}BC!_>#nc^^EmA1qQVgG`jvaLULZu(I@;`0sU&*5A);&&l<=^#3 zL^}FuGycBhxP+nW3i(2EBUauKa;Y&&96m8uOPHOBw+|@-%sTZGvwrMllnwX(lP1O2 z!B(Vv;{@o1XMcWfjxTH@JvIMX$X1rdCKVAnfgAaUsMx6K?)&51)xjNBo>wqQb@`-41wC*K5?r%AVJK&8?=-x2&Y7D=piiwS}oB&*|}XgidH+ecu^%r-NgA7!WhhVg5!c! zFMAz(*$=6uxAcF~IWaRw^UU`TUN*Yn3})iFjfXI-R_n3h=dMAIzk=qA>|;=lwOAYd zWEMs`Bi)LFZN%}fvA}JWt;!lSnvVh8vuBo{I3-=d3JKX<{pe8!!OlmpSF*LQqWS>P zTOx-TaY8f)=XP5NqA|hh3@gtLRm~fp`8k&&>eLeAKxZj)Q{Y|@1Z_nQ)@X?9Ju2B! z5fQ)yK6TR|Z_+A|^WurO!g%o{km%_Ahe+Wb=Lh%~gin?))La=0$)rEbgR*kA3b)7H zK|rW%b-V#0_GE3}t=g;8P(4636rHVoJEf+ z6#TH$4iuRV0* zrAAWx9Xs=5Q1Y!9BXsjm5p?)9pc%#RrQhv8ca#2hh#c^5**64Mw(U!h-O8z<9ANK( ze|!di=Lp5ygi<;-Tiy<+#nTs`F3?Og8QjV}-qFc-JbT-?7958_7e^vaS8Eb-24+yG zc;SZnle#W`C2jW-&i~(Xh`DVh#uA*?a&QA*dRyUORycn0tPfW`l=4)hNl9J?;QnTx ztd5o39ASbe>U9`Q>J*7()Jr`*Cc@031;-;j@?T3N08_LOwH!lP9`{y_l{??X`oCtP zAb69hEEi*IbP-mk+W1~AuzFVL2{9r~JZ+1L0-oWX|9|?F&ozOS0pf}tkJilQkM4%g zxv{=Tjal0_YMt9yw$VT;$Fr|fhsQ$0hr{Q7{w7LneV{s?5xDBx%C(=n*Zgas?1Ht7 zLCE+7Z38p-a@j^EZX+|I$p^@T3bw|CFn$5_0JF3n6!zrQ4RT&dkLRr)CFzN`iA2OY z)=$y&NO5=uRCjXbjxt=S*om?h+blf5LNkj>(0_RXS^4SV!7{bljQ@FpAt3KcJd>y0|B`xB9;3BJ zaQseL)v))MDY zzyUf~DTbKpOSYu_2&y5wMo$La>!GX-o7-}eQ;vOmUdzRE#R~LyXIfReGWYwmR5AJY z%85n>M_Ur`qchq%Q(IFooIaL!lt9rH$i%TtC&9U0=C-ZfCF7aWeXJqoOg&hm=n#6@ zJrNx#ryjn&UwE18c~MJrih_L|8w8kx_D>CR9i5zFi*Au?DaOXRlNx}1AHB zIYDzH9t7Tz`KeA`G;21(Eh=#Ayt0&%<#rFAZ7O=x#eHOI1-WPLLa;U#C-5xI(k<3K zuv>HN7q7m2d7fYTvIhMW3+?n{BfzEy(r*#>r<`yL3k)X}c?mL-J)lQ~;VH9O z9Z^lm_Tno% zK&lkVu3zgp(&Tvrg4ILEQQn>lIfU^hjGgP(NXg=|4L9cu?0aSdA+6Mb_}q*ZQT+w; zcoq(ZZ)x&|rp!|v39K0I9lqNnvRVlp8i2=!@~KT0hU~BMJtMS$P6ZSQ8PL3YOKKjA zK97$mImZ`Ms%9kD9SgGHPeRD3^L9*s7lw(E&+yFMT%o%?3_<>z(A25BsB(orBRnsh z-UXiLYzm?pp~zb}?o#!XlPrj1Ik1@DN(FJ;gZH0=Z+APz!cXf_5BDl&FXwHnKBL8?h&NX~T@GzK{OuNagOGx$sxpdrHg<}#Cqfn|c zI(w7n5IQ zN+sb#)TZPv;pM0eH#xrtqGOLvSCAm_Z5O3OYATl!e*8}u=jr~rH2!tE9bHj`_U7t! zp_JPe^l-cJ{-B+lSfm}!jF7cc%FJkf;~<}XjL+)%juCQk!!XY2Dx<1bvYV@ye?sap zl$%qUo^Gdn;Ik6qI2Wr{67Gu`@Ug?wg{ASFU)I;3Vibsk#0|~2ujip!9}SHUL=xUs zy}h&JJ8>2VO&emN;IA0f(K(U}XsTQFMs=xkphw4iix*yk{(ImeIxkqXq%vOFmy)2a zbd_O?D?laJK@R{S%cVRD$+HhTs?4X>DkH{rGo~9Tip?!-x))1fFBS*ogTHN+G$c9h zWb$tT^U}^sXQ3d9hf*=IF5zY_=&Sk!sv7ExGrt(GQZqW?00B&+BE{n^$||pZa$(D( zf`oS_b`MG?!LZsH{##p9*%`3j+%fFvf|-JSiX%Hqxz4z@Em{|BIJaGG!?;B%PPDn8j#crqd3*t@*BxA zt?DuOLmC>RzK{AkvN?5Q>7GeN?c4Ox*NXHm=tF2{cMd0``L@HOoF4`h?fGFjglChX zub{6cZC_KU*;4W&c6Rqhzjh^< zE-h(P?f^z5tmHu>0mG-8k(#m)2fL?Y<+u5jUjdY6&v7&oy4VVWJXbG@YjxJvQEa94 z(djvbBnAB80R3h+PbcLJ2jI#!gF4*l9#$JRnS=@}_*G+b+_?z&BXzyCS!T9gsgzmW zAV`O7ffC!tE(zc^)1LiVJBeBVbm`F7IPCTqr;u%sIHe_7c-=jN9K~95|J`lflpG&Jdx|Gj4n2^dt z-QVotn^QOBOQFyU!rh~8`<)PA%@2c9hq_=b4LD;^(_wIR90=c4%vhGj@Zjw3Z$d_5 zQI?Zif4RNSi=ow5Y43QO8grN(SUS>*Aav;~WTVNBc&bfDu z^7sUY`-6%~@uxnh_o&~n?qpPU^5RoCCWI3oilTXB^fvB>Rb!?0;25L)B>wdAEdFcP zytOBzi*->tZfGxkBL5T_pYldPK!hIgnD-bm%-m3Xta1faPb}9@VtRyx_L&T`6qX2! z+f|GLxbP^|BNmg)K2^c+;c$HTGQCtBoj4;boxF!_{-W<9K*ehaXH$FLdiaf&rA8&` z_4wi^jN>xaEqToNa~-5eX7A>usB5l)OwHYL2IX{l^y}U}jcS9CJVmv4w;FwoB@22} zv*4gLT*xI)Zx>LIv9zt6v$c=Bg;r2?v>=dKz}(u0081Ig3~f8;P@j9N7CH^G)vb!3 zD!bBtR7-yYd70q67D(Q{NkxVD3AlYGaiT(4oQ-x^hwh@>7DX45(O_<3vNWwI>-}Vozy9nHFM7gxK)ICe>V0VH~uJ;RZpw3!>RP>G_GC6Mz>l<3)`hc>DoPI z6Ab2zV1c+y3FDt$WVBhdf`FG*C}5ckcaeOuIv}L)ac|9ZS9U2rt4U0axR{yYiL%l4 zqb*phVcf1P&Zf{&E_4fOV;tirkVoNnIi(}jh4AJ^DbKdVSv)vnPngisC2FgQCySG? z1mQMNRezGzUO+|wL$LV1TnjpBo7R3VLt~tWpE8bPYAmTW*2|6RVkd_d&nydQmR%g^ zS>L0kxIWYlC`$LiAUNTuYs7K#WQ~u}iFIH!)`#0H4h(LCwZwI0n$SF=zlT4bw={UO zwF(a_R;wBaJ%y3PLNPg-sajVjV>}Zfk!sYp&Gc-Z?I~QWI;+jxR}re{u{xrn@^{}q zB}6s@5+bjTalb1WC-qGU*&R_2ZE^tN6d0lt4|5;Y!Lore-mcVzozuE{n$YBK0eIA1 z35~z@e8V07dLTl-dYIsAV|P(Tj#^8>Cwnpyxtqf=PueYZ3u-4PvdgD?rW+Tv$$b)K zfnWk=sfwEtW7##<`h|l5GKrW1nDL^e%s8U0+|5_<;567PKV_)L-t({1p=Cr#O|ikg z>!tofky=HrrFxW;$EakZzOBx)`6HWyCHELTTRZVEU&?6;Y}n}G^%UyNMK#pr;_jG3 zYXo9HRGJ_?DFyJJ#lKD3Vhm8@KBtRET&*eW20CI^ zS|>j{Ozx5)MHd=&{79j6TI3xb{#Nop)D-?^F7mXsUCkes3>$#Dx`9S|PqbU@pbB&i z07O%;lxWBoPHz*k<=(U4^qIkMH^inb{Hh_KhfN#YC9e~2_&NCyVFeiE!WgHu&_!HJPT^raYeXXIhXlkHZ#@=tZ zNVoizsI4k0$9zAc`=KhPy}am^d>F4ogm_6nl9JHV;J= z;$V$EJ|#@s$?9f;8nB(UpJSHvA|8aNSHQ+jqhzmd6E4|J_Gw`Jip4c?AYtjuqVYj+ z?#Wdjt4ApX?v!gl)xe%l;ofiU4wSU4qT5m2=1(g-t8y6b^KwJ#d4c459xwE~Rm$m_ zEVmm;Z9@$E!J!tbz!>*za9GLIi(I;MUlXCNnRky;Oq(T2qybsH9oR^=?2Kd{=RtiX zp8hSnO^-p)Mph0?hK}a=K^BoE2wLwqDl@|JE*0_@K#f_`oGP7krzKTQARjkc8j-xB zgZ1s4st+v*pqBah_W>ag{2;d3tCOPQ%-tOJB#MVlTNKq#r0qDM+j=NSm+oE#Gd=}| zx5PD1#Bk;3PAm#)_;8I6h>vCK{zaydOB2t}mObIBQ!7GRF}xIQ{Q~mUbuwkIx=|IxRmdp!b;AW!Tk>n`GrueP|pDj|kEBlfa zr7B{I$E<)^@A=zBMf+}f!r2(|<8W2V+O=Ni`^v{-yC<#l6$&@+G@y*I0J7Qw*x=m) zn0(u@w);NI>*N@<|Y@ z=zG+x;Vb7XwBo$HymZo|VVg5O{5OYK^1x26XF&c=!=%oAJL5m(q6ZDZ~Nf zkdNl2&|IJEKCj`F*zaLXiMJ;-qw)=ISpx1T$rgs{e((ZE-DPfiS9;hNxgq~TY>B|N zJ9Hdjjd=xPE0QG*kGG?~`%2}E{illZt(~-wCE+?27)Wo>dCoSBHuFizby_BZ(8;eX z!;2YFk?3L3k4geIt+nWhdTEysHxoF-yKI>ZUVX_8l&)M3wA*Y6ln z1L05Ico`6+M^~8w`@!Jip~85Z{o;bb;q& zU_(kvEP!H@KHI;71TxXK@Kj_iccvhl2ap5D2qdw!{IG+$-r?jq6a3Lp33p>Qm^DS% z;K$(Vl}cC_A`N$6Sd3F^%|TNeJi}iv`Z`oW&Xr z!#V&txK{yGvD-S?5S}4i5c)u^(0;a|xC@P$*gU0*J8A>4@C|^!$US0<@I@{}Xc@|x zx&4RP`6awX>&xcMHDX1Ai%P83MQ)(_(yWClF+Y8VSww>BA1P}w9rZ_h! zpV{2-N=*w~g@;Baitds7W#Z}d2f~C-T`KMkB6ZP_1g|KJ-Ctmw9aP=dxa#wG`0rNs z;AfR5mFM1MgFn%V8?+VZT|bE#j~?>fqPc(IFBYQ#)i_=ap?8~_U@n{BtX9>997-b} zBbRa_-WFg|4Dmy))E(2`61k8O}Q3C&D-cXsP zOSKX9U>mPDlwHl>dX2RM+Q4I7@aWf4SSQ?wrIj#}Nz`P3|C1&t9f0cJLs!MJv)mRK zMMDucU9$7O-uJnLi!i~$Lrm3Gf3tp^eml0IDyRX0sZ)Pgv0b^T`Ne{5ILljUfTuix?T;0wh`{>ri>iqfOo3=a*}A@aE)*e zmI={UWK_{AMiE??!*?B*btuwk&@YZdnuu61EcMA;zaAzt?8iKHh@2W7^bf$?%SGu^i zS!enlvDSUu${zcp@PO2^t4A&?kdnhOJebGfC5)w${EDlpq0#kDr9SmXHKT7EDc_!$ zEbSc@SRSi6s_*$$D*=qtC}!j~Ry@l#>bqVyxxwr2m5t{bq`w1tGUYX~zfye_{^-ex z+Gg;@qr}*53smW0-CmbEPQ(Fpw=^Bl7QpGZ#pLc}2J2AGRG#rS`~%+Y7O$h*={S4N zYGgACV@kX;L@NiNZ)lQv07dMDFdlCeFZ*dj=ANe7;XB^Z2(B7FHjt}FubCFLtR^o* zTYodi36YT3frZ}3cd#7vac#Mnl;)U2uS6%as4J2Ur9fz=9%*Wc)7Jve;GkEbSM_JH zPJqfRI{f@oO|8qU6aW|B=UI(Fv_D}levak~ns2x_2a0X=c|=bn&x zrC0=Jc%8`^y0Iu1gdJumU3tPtMdkG8hGS5|eON;ylSR>0^zeXC@>x2U2g@(#pLFug zC?(t8`CfaEt{dbO#jAxpW^)N=19K4}8t=?nA^-n4; zz^XHgN^&NTH_w#r!F3;CXfMdb2TszH)hF&MFEsiDS~@y5odqYDYA(xHb^qEHgzKd@TB%(%4}dG#7;v^_g%2 zWj~e=S>*T7$T(3njeGcqSWQ$(Nu1KDEAzlEMS>37tcYW1#HTTp6J`> zK0jkAHV(NRY&FfmaFEbm9m|&+^{uK;Ay39=!!P!gE8A+-@Xk5*B>ajZYp*dFqX$4p zY)>nCysCgb1`JnH-R_DjuELsHiSo3%mj9wR8Eb`l&UI3oh+aES zBbSJxp=3K*Uos61(1A#znf|@DwvJ)4+~1JuG;6=-GxrSXAWN6i&jA}Om}Om%^|eE2 ziH*^6lRg%``$-Ok#uvNIEQ6vjImYO2g1Fw6M?IICLbb2uYX$)fkn|UHCPAnQtSS>4 zOIo(B1d<}zM@sq)9fYV&Y+TB5o!H#gq9{MDcrY@rW|-y!3Z#vLuM}w}JV|(_YmD;` zl&1#b$9a4wl9wU1!Xv?Z84!AG+o0_iifTCxK|wUeQXuZhYN(D zBL+){^GT37>Z+X}B2Qs56J7$~o)b0`%NxrM&RH7C>`$nuATEA-rp8)Qj1LsUU2d&jTiI;xAUAP#VI|%m<8iDSz?}&xVY&QDes{92uuC&o5w=BcID4;x@5%AJLp+F8B zD$1B)fqrhd@{rpp$-Na2j&g8nuxKV@E;si_DeeBjC>bumx7cN9(t2(oCWjtVct-Eq zIqy@SY=S^sfUo%4`(C4feH9F}d)`+y6Z8}Y-_MgN@+Y$rU6OVkO+%s^Em4y`kU$6F zS%0*hdob!~Vvf2K<=&lC$~1Tq9gRL6Gbsah#+B@^5WiyLb25-XQ*iLvw_Ru#ss*q^ zYW{PF#5YRfGlb{@p;8El)~|ITqor+ zttmSq#5e|BI;ROKX6uM!isCq~KA5ti@mMART&OMyT-+YnOewm}nA$z|JT0M1s16Ff zB8=hGgI&*KD=uuvCPe0R@z{PwHOTpf1jkYE=B_t+-3j@~`S6UIxfBI+q|Sdn`*>O< zeY`At`#G`ho4{q%@L12>!G!8=xi0$lbb?_nP7QCC z`H#sr+pmnHj63ZxL7koLoF?CE6f^4}*T$2WZ84J)NPqW^|>ZUb_30 zXrG{0AoO4%R|Vw=mqhAc#osd`5vgSyT+ls$^g4GXnqQsCgkl0RY>5X^^@Cd4fS< zidIs}iLm=<@@N^dWzJ^k*DivXv`6n|XVu09xH8ZJGXTD-wMHpxRTNndpP&>iSGiO! z^7>GN0R-;}lR)s^%zZW`v+(iEeErbP(95Fz`?wxgW?mNW=@iW{a9LO2PM{tK(NJrx z*VF2|y?Jro6$6qw!<-nJ_aJaA3R18}PL|EwN)tNyW%eT6nmrGr8^7jskGX}@#J!rd zR-st;2k**wj!(2s2BKCZi|J(!)mlk7-v@=h@ufAD-3FMcTwrL{K-oIMUFSYOz2q$R z+x-A^IrCqvMuHm7_#`nn++hIh(R?@&<^rvCFe>q!J=af=2_ttEp97eqqOAQqUu4Ny z8&b09YtLgnsxc=$l}$jV-D~inap8k;)uvW?%u6f`A|AmAolkJEnE<^~T5Bewy3^c2 zajv78R63=trUJBd{Lca#==;>A+8joqWF7(Ud)#G#UB~79z@W9>yB1`DN>1LhB#Wq-Tr;@;k#K%)*p)YU1I;N2LE}%cXycx=FnA{mtlwX3# z<9N?tMDyfRrQ;rAlT&>G>3K72xAYfOFFlg)NIoHGH)f#tUY27As&oqb3K? zy~H5p@gO3SFtvH;%nC7l$HeplpJCASsl@Q&No#al(1pHz&w!?EPCP*<=t6$7F?13gsnZGA{<&o|600L~3P z)C9n}^@KK7*_(Wn#N6mx)IlC}ZxtqGW^s{r{eSIUYfw{16wb6Wb*dv7ZG|#o@j=yU zYN{w0rNla-21ZeIghC)pD~hEM4Fw?~2`xH|A`L_(MG#s*Q7Z%o2@Q_~jmRUAv;m0{ z2`G;cLkJ-Wfn3S$-sp6~qd(g}P3Hc{?0&m@_Ut+5?!D)ny~K%5!IE}QGo`K#e0dV; zxmd_o)3rKx&I%nAz#Mv#l4&wG0q4?-#5?1zr=BG#ML;>j{#iN2Q(re?Ul^I!c?UL+ zVS9Ro*QXY_>R@?2L`_+8yRor>4^Ep_Yi#a&aM3U^Y+>M8I*9EfQ)i3_a!K`Q|p=;Ujc<)Qr_osKg;9x;TP+MhP+gCMG^WqdDkQdc@&KzXJy zm2uTweIbjcavwU)_2HsW?ewYGF_+)KDc~SbxFL4N(=w{_DC~3*NlKe1zzY?v)x99Q zTGxOtKY-}_8SZ`5hJ|on5jfEWwQHXDf~e??HN~w+(7fvxAkQ#$+YGHkEu&9&=))(s zf)oiBFj=V6^X#@zsX2nl31$-sYq8)^D-h}}vG;hs^Gkt{1-~pZWC8MAkjBj;oi!aCQZYLC?dT+bHa<7^hfLGXE&`*bw6Jq&G!A&e@6?8o%QN!*n6nR zJmT)|qSXYp2SFwn<+3;mv@>IH{Ckq`Mx@O0WZbv;Qog9BhnGxXEAO!6*6@?MEKtMl z{8kqX238C#l{qg%uxy@bi~`+z$gL;h?@RrW5(d8xy=9H6BCa|%f?ZOr9#xwr){V&{ zxGbhw8UPS78n>PVvi-ih9I!v^C}`n9=sp6MN#rWlU?tK+N%eYNT3a*jt|B&%V;qh;8y`12x&$^%38MAqCkYr7aMyi8oLLi+_*K)FWxAxom^qf|>`y2gEBDEI! zEZ&L4+CXu2e6lsEej{vSN6;K8u;dD$D3w@j`jZ@#jmSZ7sB%GWc6>;+!V62F3VTR+ zpL!y;8t=`NXgF9LE$s?|axb4PPL|v*awMNPzDUX~v?|3W{R47*4g$SkHzoElvmA{M zlsBocx=ao^z1Htd$p7Pz1 GKmG*^8>4*y From 160bd4bd04ca548b81401879015871b430ddde7f Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Wed, 10 Apr 2019 23:09:53 +0000 Subject: [PATCH 181/349] Updated tvm-dashboard-insights.md --- .../tvm-dashboard-insights.md | 17 +++++++++++------ 1 file changed, 11 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index 4e5bdeb5c1..2459f4aac4 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -23,14 +23,19 @@ ms.topic: conceptual [!include[Prerelease�information](prerelease.md)] ->Want to experience Windows Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-portaloverview-abovefoldlink) +>Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-portaloverview-abovefoldlink) -Enterprise security teams can use Windows Defender Security Center to monitor and assist in responding to alerts of potential advanced persistent threat (APT) activity or data breaches. +Threat & Vulnerability Management is a new component of Microsoft Defender ATP, and provides both security administrators and security operations teams with unique value, including: +- Real-time endpoint detection and response (EDR) insights correlated with endpoint vulnerabilities +- Invaluable machine vulnerability context during incident investigations +- Built-in remediation processes through Microsoft Intune and Microsoft System Center Configuration Manager -You can use [Windows Defender Security Center](https://securitycenter.windows.com/) to: -- View, sort, and triage alerts from your endpoints -- Search for more information on observed indicators such as files and IP Addresses -- Change Windows Defender ATP settings, including time zone and review licensing information. +You can use the Threat & Vulnerability Management capability in [Microsoft Defender Security Center](https://securitycenter.windows.com/) to: +- View exposure and configuration scores side-by-side with top security recommendations, software vulnerability, remediation activities, and exposed machines +- Correlate EDR insights with endpoint vulnerabilities and process them +- Configure Microsoft Defender ATP to integrate with remediation tools such as Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) +- Select remediation options, triage and track remediation tasks +- File and track exceptions ## Windows Defender Security Center When you open the portal, you’ll see the main areas of the application: From 7ce4cd8476c8769f3890b958598fcbc07f47da2a Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Wed, 10 Apr 2019 23:10:52 +0000 Subject: [PATCH 182/349] Updated tvm-dashboard-insights.md --- .../windows-defender-atp/tvm-dashboard-insights.md | 4 ---- 1 file changed, 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index 2459f4aac4..a7f3476507 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -46,9 +46,6 @@ When you open the portal, you’ll see the main areas of the application: - (2) Threat & Vulnerability Management icon - (3) Threat & Vulnerability Management dashboard -> [!NOTE] -> Malware related detections will only appear if your machines are using Windows Defender Antivirus as the default real-time protection antimalware product. - You can navigate through the portal using the menu options available in all sections. Refer to the following table for a description of each section. Area | Description @@ -67,7 +64,6 @@ Area | Description **Top vulnerable software** | Get real-time visibility into the organizational software inventory, with stack-ranked list of vulnerable software installed on your network’s devices and how they impact on your organizational exposure score. **Top remediation activities** | Track the remediation activities generated from the security recommendations. You can click each item on the list and it will take you to the **Remediation** page where you'll see remediation and exception activity details. **Top exposed machines** | See the exposed machine names and their exposure level. You can click the machine name and it will take you to the machine page where you can view the alerts, risks, incidents, security recommendations, installed software, discovered vulnerabilities associated with the exposed machines. You can also do other EDR-related tasks in it, such as: manage tags, initiate automated investigations, initiate a live response session, collect an investigation package, run antivirus scan, restrict app execution, and isolate machine. -**Threat campaigns** | [to be filled out when the widget gets updated, right now it's blank]. See [Microsoft Defender ATP icons](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection#windows-defender-atp-icons) to provide the information on the icons used throughout the portal. From a973f4d120be299406fdc23fb7bc9254ff5d5a0d Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Wed, 10 Apr 2019 23:13:43 +0000 Subject: [PATCH 183/349] Updated threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 2299331aa8..baf1c103df 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -80,3 +80,9 @@ To lower down your threat and vulnerability exposure through remediation via Mic 1. Step 2. Step + +## Related topics +- [Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) +- [Threat & Vulnerability Management dashboard overview](tvm-dashboard-insights.md) +- [Configuration score](configuration-score.md) +- [Configure Threat & Vulnerability Management](configure-and-manage-tvm.md) From 48c869ed4d224bbede6d3d3b45152ea50d9ed885 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Wed, 10 Apr 2019 23:29:11 +0000 Subject: [PATCH 184/349] Updated tvm-dashboard-insights.md --- .../windows-defender-atp/tvm-dashboard-insights.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index a7f3476507..098b0b84a3 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -37,8 +37,8 @@ You can use the Threat & Vulnerability Management capability in [Microsoft Defen - Select remediation options, triage and track remediation tasks - File and track exceptions -## Windows Defender Security Center -When you open the portal, you’ll see the main areas of the application: +## Threat & Vulnerability Management in Microsoft Defender Security Center +When you open the portal, you’ll see the main areas of the capability: ![Microsoft Defender Advanced Threat Protection portal](images/tvm_dashboard.png) @@ -65,7 +65,7 @@ Area | Description **Top remediation activities** | Track the remediation activities generated from the security recommendations. You can click each item on the list and it will take you to the **Remediation** page where you'll see remediation and exception activity details. **Top exposed machines** | See the exposed machine names and their exposure level. You can click the machine name and it will take you to the machine page where you can view the alerts, risks, incidents, security recommendations, installed software, discovered vulnerabilities associated with the exposed machines. You can also do other EDR-related tasks in it, such as: manage tags, initiate automated investigations, initiate a live response session, collect an investigation package, run antivirus scan, restrict app execution, and isolate machine. -See [Microsoft Defender ATP icons](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection#windows-defender-atp-icons) to provide the information on the icons used throughout the portal. +See [Microsoft Defender ATP icons](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection#windows-defender-atp-icons) for more information on the icons used throughout the portal. ## Related topics - [Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) From 1b9c1741b49074499a6d7df43fef046993e95b26 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 10 Apr 2019 16:42:36 -0700 Subject: [PATCH 185/349] added image for access settings --- .../create-wip-policy-using-intune-azure.md | 14 +++++++++++++- .../images/mam-access-settings.png | Bin 0 -> 30266 bytes 2 files changed, 13 insertions(+), 1 deletion(-) create mode 100644 windows/security/information-protection/windows-information-protection/images/mam-access-settings.png diff --git a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md index fc50cfc48c..d10dff6c03 100644 --- a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md +++ b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md @@ -30,6 +30,12 @@ Microsoft Intune has an easy way to create and deploy a Windows Information Prot Before you can create a WIP policy using Intune, you need to configure an MDM or MAM provider in Azure Active Directory (Azure AD). MAM requires an [Azure Active Direcory (Azure AD) Premium license](https://docs.microsoft.com/azure/active-directory/fundamentals/active-directory-whatis#what-are-the-azure-ad-licenses). An Azure AD Premium license is also required for WIP auto-recovery, where a device can re-enroll and re-gain access to protected data. WIP auto-recovery depends on Azure AD registration to back up the encryption keys, which requires device auto-enrollment with MDM. +## Differences between MDM and MAM + +Same user/app targeted +Can only manage enlightened apps +MAM has additional [access settings](#access-settings-for-mam) for Windows Hello for Business. + ## Configure the MDM or MAM provider 1. Sign in to the Azure portal. @@ -54,7 +60,7 @@ Before you can create a WIP policy using Intune, you need to configure an MDM or - **Platform.** Choose **Windows 10**. - - **Enrollment state.** Choose **Without enrollment** for MAM or **With enrollment** for MDM. + - **Enrollment state.** Choose **Without enrollment** for MAM or **With enrollment** for MDM. ![Add a mobile app policy](images/add-a-mobile-app-policy.png) @@ -602,6 +608,12 @@ Optionally, if you don’t want everyone in your organization to be able to shar >[!NOTE] >For more info about setting the **AllowAzureRMSForEDP** and the **RMSTemplateIDForEDP** MDM settings, see the [EnterpriseDataProtection CSP](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/enterprisedataprotection-csp) topic. For more info about setting up and using a custom template, see [Configuring custom templates for the Azure Rights Management service](https://docs.microsoft.com/information-protection/deploy-use/configure-custom-templates) topic. +## Access settings for MAM + +If you created a WIP polciy for MAM, you can set Access settings for Windows Hello for Business under Advanced settings. + +![MAM access settings](images/mam-access-settings.png) + ## Related topics - [How to collect Windows Information Protection (WIP) audit event logs](collect-wip-audit-event-logs.md) diff --git a/windows/security/information-protection/windows-information-protection/images/mam-access-settings.png b/windows/security/information-protection/windows-information-protection/images/mam-access-settings.png new file mode 100644 index 0000000000000000000000000000000000000000..f23673273b65ceb5d5c1d3255caffb49054dc2bf GIT binary patch literal 30266 zcmd?QbyQnzyC;kUiUcW8+#$F_krsCn3KS1c3GUG1uEi}#ic9box8hLTp|n6LQlLno zXem~h@I3FCch1cFotf{f`Mx!4%^xgQ_PvvR+rI9fTvv>ih6({5H69uo8iAUsqBa^D zhA8SU9tQ(;#XHj49rX|0Q(HwI?cF5pF6sloR_>V`8d_Zv{*5IT>NBpJD%2AVjj;dz z4}HkB9EOJWYD!H}PS?lmpmVkA`{Jwb+cy-w}}Ugk|vsg2f&c*+?8fjkFdWx$n9vWbHAYaVV64cZ4PDS{Z= zo-4Nb+kt+;-G>rodpA3W*XO6}NA>4Rjx|l^OV?kkG%DJEIU?cOqh6QS+F(v=t45`C zZSW$8^K;ZiQLwQtCla18ORk4%D*perY1Fx?-2eB_uTfu6{m5tdSm@H4Dd~R>%zs(& zdo?(?9E|G8wj$kLl<~)np(FPgNrIL>bunVBc)TeONKjyk8cc|=y5 zlKM_mxBJ|2Si9b zQT8ptpo0bKMvW-b@b@$1ku6TVz^{^atYhZxCoRmy-K;su2qS8B0`*ZrJ|x`ZX2-I- zF7xYK=3`fls_q{bpNluA?-H%guBkR_%x}CRZ5EGEqorl>+jgy1;tkfE<(Il$&B+K> zVGkF?(K5U8_P&&nLsaqbAmR0aK2uYa#XnNMa=5RihWb+`C=ODFz!@>6=V%5UBrmx$ zrHo^ws`xH`RiPHSuE#%UkkXXsO3{nD*oFnlt5_oF7%fU2PmV`(>Nux0AVWL6ul38I zTpKL$Xs|(A`F>~E*u`<79`t;v2-PVkcr&VzlLpCKiE2`||4%hZ{3L&Mcl(D(=Ee=k zw=q+!qM0vE7e19Jw&J58(f#X_@nPrhJb0%3cPH|}3k|L5srkDG-0Q$PNFTzZz>2uw z!}dJU6|v76MpAD&Q>#P4e%* z^J{+WdAbRE!IU20g5gT7%CD_lqbTRnuX(BNdZv zpxgj^GEi@N>AsF!q^9EL$JunRy@2V3HlW3;aCuxtla6P@)lm-K#P323^D0i!7dg=N zoR(5Dxf9O#{bl>BbBnzzoGZ2#1hyi5($F_|hsBv9;?vQF4dpt?y}on%tM3zR5))BB zx$@kKpOvuU2MvpRN9-GpkM=A&h##Nk-`z}ztp?O?G<`NplPxZCC5ZF5UVa`o+Rl73 zDA3fw>@^@YXqXS2OLu;0jZ|#5HUrbxiZ72EUkzzv5AXa+%z@T~_QE9ze_>4mXvyS4 zI|L@q9*Y%mX)QR<(?;&Re<@zUSYh1sAP9US>yP^K_#`9vv6D;H5HE-lRdQ5kh*L}FF^Yz zPcDclo%TK3{(yAIEYi6GR9Ey|%-=7+0kpo%E;z;bOxpNIP@H{kn1eCDb{S_apq`!d z(pz7CM3pfIp6F;fN=}tfL^K~-Q`j$oJ{+lmrvFNyqKgk49vsc@R_~!cx~IpT^~Rj+D0@P&#m=m3Wz#=pp5s zEz=p$sUG(D#W=AYYw<@V0LHFYDadZ;sq-d)Of^68l}+6j9BL@o>V{7E^6fNNVQavi z|F=jmP>zQVL-b^%Is+fpW@?Hhigthz>P8ZwlS)sD$9S7>qS8I@E<8azE{;@!)s~nya8fOeGl!v1;ql1{m|5 z_{UuwqV#ms6rg9T%g)F(yr9OT=*5*Sogg6xx4j<{6o0@D!#XJ~XgeS9$S~&Y)lj7o zNJGz0wT|jho-MpAmbqei%zAOKdV7#0bGs1y`9XjAvb5N0Q7gI?F~xwJY00`UZ|2UY zy(qPQ658)?xBM)llHKb*Kgy9GHgt)07&@~)U9vtIUs|v@1V(OX;NtiyAN7p@JAovw zN7b|s2_c{kbp`eI+Wh6$IwbJnrh0@(DjmM7z6P;%<)i1Nz+=peGH8b8JmlGTmiuAf zmJu_bs<&v^FR`ttV$x#No|&naraYIGww%>mLx%vahnPmcZc<54e|-85%V|@^ZoZ_^ z{TuTpwy<-?n##!@{m>e1(VDFh2pL7O9p68nqo(PL_w)ljW@!gG0*b)pq5FE%%W%_c zr$R)3bIfoj_@)N+23ReVzluf$=x-Ng#*e>Z^TpP{Bk(OGF1W^g&Di)_x-ioaPC`^L znjfR!?)IF1CU7ZSAiuf^f#{0pIT-=6gOv%9B82Oau}#?~hhb|3^;oWeWTbg1liN?) zSqZ}QD0nJCLxdKOy->LoQwSW=pWK&G8yV5%#iZbG~M%B?LByL_ZYDf zU`Q$4*ukSz>aJg*xhev9@wOBupe3GRCn4RbSYH{Tz`oH+UhBRTQmu!>_q4v@G2qq1 zoZ!-2_bIQ|g^dU=c>5r5Lg;dP6v}zb**S*Mj6P70U@V#wy;%}jdT#vDc9funW39H0 zp-&9gvRwKP05~7oJwH<^Xy~s_HJV++Upq>XNaOoGFjLL!8EiMuTkh7npS?Z+%%9;) zGWLb+;-%1-ln^%)g+p1N8e3cMd_aah4lrt$@M#O_$#d{heKNN_ENQKYDz2&hk?oo% zBAZ|#EF&x4F5jx-{98L%{dhM3u>Sg01rL$M-3c2_#JuyUvMT1B&A~LxPBx}Y6^MwY4tN_lEtV#vAohSK*+hQl8Ii#gubPh4RhDf^qgW6 zu~?XJh*b_wjj_(>V^K}Jxy-+7yK|4JQ2MiS_$SY4l+NuG1rj`LkJhf-yV)dvxX5Ek zUv8!unE6KLoqf-C?YjQi4yV5S_1XNcs{5+S^0`Ys3R@(m-{h`c9gQj8o;+W(mAPL0 z;@bW8`xy$b25vuHy&T{V68t`zJ58=PDkw)Wv-+&}*EK19RLyx=z1qJ5C~YI;zw-a| zm;Je{4jQCFK^9#1eqIMv6;}W>OBp;U3g+C3u#2PK^bC%dv7$kNIQd2;f|E9x!Th=e6k1|x{!(=Nqvf{m z@bK`yR*9ZbKM<$)qVF>#Ggin z#gG%3LrmlR{3YYk6y?5TJLJ#y-PgOT&8b@%fOHD7Lptb3&E2Un!=KgNqX&1#ncmaL z#yHeNLCp(AJIYs}5tx_<-1~0x4l({NeD&(b-P%F-O@fRj0dMSTmA2=G%#sr72_(i& z&u?zw!42$ZV`=7_cYDFhztQ~W1>R$ydrdGH&763b%G{dYngh* zLpZnK3wCivUUWg0sk6_UFOA7~_wIXV-!aQx#Ls8K`*#mT$DCz{LS zg5yqB(MtpV{M!^Q6lq)p$2r_%#;S$^ax9S&g*(OkVy9-MV|<+_^2YS%h{ zudw{2q zVYaI)p1KDeMkbg)l(2crMmZZfzFMuC(m%$nYE=3vewnx|E~!qzP;M9JXQrRzw1;l6 zt!xCBDmP`?od3qQCaQV)jr`X=9&BIz^V4--_F{1=NR(~#xjP>3-n4=IZ{wXfG3@-? zs(6vP1Y7d_*%FW|5Tw8h zVV{2bz*U8w^?IcBr6XSB8TMFg9XW_lj@qh)ajKenW59pUEu^mgmH1&Fb+U3sEHd&9 z78cflDvWV^|HBbKLA{AuL$+l2mJqSdOOXpW(sOdhCrv>bnvTth76cC&@2IJ6;EorQ zj`mW)PLE!0^*~F_v<2Ar)S*GhpHSIHeOrW z%;Y0eIndbDo(;k60lKam6dbOQ0qJLd1AKFHRwkoo9G06@mTDe!xs`vj$=+X1i_1P+ zB)j?~P%wnXmFne&PS%kadhPl-+(!QQSCG?0~Sr^hg*c0Oj&6 zY>e4qrYzkQIEb88NDiG|$wb(mjXx6@OEuYI%70H^K&y?${GKgh;gZJA9OuoWIjw?^ ze5K6d&eE9!=Vf4Y1Bd`w{`ne z32E%#56r1Vl9h%X^Y(;gVRoJGt5FxrT4aD<_Fx^GTl)65rmAy9nVVMO*TR?0qN)&i zaZlH1x3Sj=DS|4#VN(AxTLBAiE8;JjQuyiNSUu@goz+B}wZ<@;o84!(J1%d4m(9i41P9EL2 zC)@OD+9!nvhWZs-=vrJRe!`d2toGv`D$pi&k%u5Fb&LQTo&&ygoKzje7bYzim4RL~ z;;d9O9`jQ8FOdt@Wy<}mlb3Jfi?}mj1M=Y=!V;d`P;70RsEe~MU={5WJ)4#T#R(78 zPhzMaUTg8`p$;~CRPB3x_4J2ravqcQEW%AD825UCvdU6Z`ThHY8d9(8pHHp?#U89V z@^Kh0GQagM;$j7K-P2z+oN}|CA=44vx*<|Jsn#r|{Ki4NL?hL+-a+&C8_$f9n;>I> zreSg~*(nFO7O|6h%r<35_H*{_E?w^mzBSrdtaWva2z_P$`8zbboo{I1Oe4{YlwMej zQ~2^5IHSx`F2O!I%!0{QI612*oF`Ibg*xcH~X>Z_G|aG_dh}d zSVGMQUgq6q5_uS~je6S-J5Cc(c+z_{&|5uoqY!l@AIy^f>I=9z9x}hX`aGXQe8sOs z$B9xZoidxtPbA9j5AFY6lG3qz-fe!bYsNpg^2oh7I{B>AAn;~!7j&1Te*&L}mY($BGVa?@I2Gs+d{=X9g%TNH240UH4 zn0F=k?hi_jWVqHqAtesGxFyeYqmHv#NC5pmuh{ec{Muf2r_*G$YL623uuu=Ix*(>9f_|K0^8azq z|D)j*lHY5)13m>cL!6EGY971V|BpKF|9ee2{~Jmo{C&6@e6oq#=YQBK*4RQ+x8nEX zt>6OCwc{9j{^F>gXy{_t@~L+>MPhoZm78^*bRc+ZXia(DWrOO@Du5~LSP2D!$hOs` zo#aL#>#fiWj9=Y^cu%mmmU49CzS(3I`qBSv)g&h5aeb?F{H%TB@Z8zcJ#KU(grZ&k zGt+f1ej^9(%u~Kn85{Rr51&Uu$ZYFHd%l&LmU9zc2d?4yLjCGT#@FQKSk%tRnlLJk z%VqILPgf34Vj4OAEKYl8ZuqXavUK!#UpyfmTPJS*R3w@;`&i3!Dl3#^*4 z!vW3}mendIMRDTx4I1vva*%_0BXZa2-_2w#ywXpVvqCET_>LQ>l%}pt&szMM#MxOd zt(A;1dJ-VSH`erc9cs<&Kg~mZ#)Ts;RU6D*HoG;LPU1(9+fy$Nc~(T6S_Y7e2tMY& z9Y|*WM48WC{I=6P;*S^1!L_A@>Zhy*zxG4UY+t%asw;%DhhYj#7Rw zxhcKQR85&5TKEtiazIL64+DDnNbvlAU5z;rc}_Iv?r+Y>-W9#(Sil`R_<;9le;VgJ z*```s%U}PoQ|Xn@Cqnd2_&8X2o~ugA*%_>WmC`8!HZxAc4z~|i`GDHF_=K_sibA4K zf=sE+pPKRv`&Wc#YFD8V34Pj1BXNok<&Wh{c$euCe};|hXR@f)O*x=NO4{ZPx`*nG zrfIf6ipXHo5!$74MKp-H2uvm{P!gf60xi)K8}2OJ{F7xdfk`(!ycJ}gnbgK(u`94 zC?6GD5A0?4h_d*^X)O+4A`3HEL_;`-<<#`a`;$%vPz0|O&z<&FGu3r0+v%i2U!cx} z-hL0J4p0VRDsHK^ROJyA-l8^ncANAX z73gvhhcAWbfMo;j%++R(BX-U9VtvT>L+^J6>aYZit>MFF(Rz&;W8=#L9}XaJhOqqC zgbgHYd&yjeEFMUF!Chd~5sC(@ynb1A+4Zz;iHQF2<1`4tk6p zF#6W*`#y6^wZ}7K1!ZCE{K3VO-LuzuV_0C4h8*lk$@KPs-?;da9Hh`E~qxSyQ!`VU!-S^{wlKjfergollj#1tBoNB`k917D~gZ7N29ugn2q*ZWhmtD|1 z0U5*NwKevRfRm3}xeZ2|ix5$c15Y8X?};yjEZv)2dVPuPf*G;}X|e1P$8f;Jcv2i{`FoCcf>`HzEec3~ z(UF*Ct5jXX9}wAX_P&dVfB2HA;+ z+Lt(n?=mJIp=~FzDSTl9zXkL0(c$L;`$Qn(FHDgpcy(`j$UbgMJ44ltNtZ4*7w;F{ zqzHfv)WDt$XmgNXBpDv~z+T_7HeN&0H>hsy+`x8n*n|UBwy?A6=gNuiB^)yS$^w4$ z3IAcq!-y=}@7N8DvS9FRd)`q+=%3AZy_~o<)=>(G!sovtglyHg*m0iBH`S9tH`XVtF5xwd(X3l92hFljM%W)h472Qs;e`eg zr}*;XnlM*VD++WZ5k8HU_<+$Tyl_ErTl?=Y0kfYe(8wcsr~M3APT2@S{fGLqlc)!- ztj86hm|ODjj0E{Lt#iOcb&f=zgH}&ZHVLq4bRoECnbr2BKsOVT7)fgXyug^_#0EHT z9b6Wltn%X;U_{8%Xba;!b&UDa5zvgTBKBUd$LQM`nYwy#yZL|JMLMgYo6 z*-XO=<4jJFXa=MI3+SPw8oiW8$<(O0njx>LOAfIBb~~5^KU*+y$;{*(uui>)Nkn(a zBXvek&&gyZNAE>U!`7UyL(HZk)KZiR_WgrYTqCA1Cuzo0v1!o9(jJ64@r&(iph%_* z>7r;Xh^jN*62T71N$qh`b@Xpc#($+O{|2^H;6Zwx+^#X(;Qe3)4v=31Qzvsvzj8Kl zNI@iFJ*DJxe2ndQ81;v}4Vtm0RnK_lF;eIDgm;f{EsE|?ZI$ctm++hc3V`LIP~LXP z1MjO1wTJii^p^tOJ(7ziwQhHX>p7--@YW*tuW$^C19V*yb$!XdMX}O9iyx=%flo|h zIn%w-jrK2b-+zRjP>|0IWj3QAUsCVS?g`Js6{!f6L4CL0AFXYcpZ&{=PBq+Wf|r3J z=kq<9TgzByGuis6tG(X$MAIe(N#@-asokuMLT?bqUP!MnoPU_0nWH@{p^@YKsZ^%Q z5Z0kT`6VB|24kPvckbdlw!%{wx%DlgfVVOSt@~z+Ke}-ctKl9%zQrPXkc6M0IE9zv z6*me`geSCcxWL~(Z|1PMdI{9z3Nen-Wi5N_WFhD9_;Nv}n@7wk3M8i@CSi@-T~q0I}<$ux$2 z7NsEs$(Vf14N}D=ENKdO5#vFX$@GXO{M2-T5mPOkF`-wv>H+*Z@r1#!v zRd9hKX6z1h%T>RsPJP5CBzR;}ry(RQcO(u`I<<~b-^OLTZ_sN@ zE4#j5O?kQ$4YHq}E?Kq}L1FW_CI>UB$k}RqaH$b>{m<89CI7#W|+%XIkgI z-R;b#C!1HC;_!0{(E}blTX?i!JX%>h6UTY9FE%5DKNtVnh=UeVK&9<73T4v?lDfhA0mxdUk*t!SZgXe>166)5=aHvqcmq7Zf9-2|> z)Q|@UVpS>iTDN^VqdE;9MY0llqjhPfdt85Tmx|6!OycVLJNH&N)G@9gVs2JCvwe7i zFHQFZ#~yp9X#&`(I8^sO;QCorDb?jH52Y?*#P^08%x$E7hoOKqD16GdUOlPHfve zL%0=YZnC?y{v%^$R319wAA~V%^hr#?B4#dkRH~acnQDGnOn}e@p%q%|7$@Q*;ilMS z(@{kP#@kO!bL2o%f*~+;fyX^>j>q1=5_hvBzQXM5k2R0Du_~E*k5?mr+ zmJJ_#H5%|flj}*h+|$AeqX0sv^oQCj@=Wc~dHcAfITUlf&!2G#N6nb?bAEMHq}mci zvBkOj+?s5Z>+ny8cOTs9IZ+F&757)j+MOy58pI5gLJ5YbkR|aieUAT~`trY^(f{j7 zA6H~3ZTfxi-EA7XCh-c2trd0#zDA{VxF+=4_-rJIl@CTU1c?s@-~Fx}r=-QrSDQo$ z*7Hi#8{GYmTaj@?_GW()EfL$d(DlQCQ~ILrVXFZ4<>TUGiS-gAvdmfF{HfbeV3=Fi zv^VV)*OB~jc|xxQ`(jZRvRHLep-s4+flurj~&>> zkYvg8J930KrhL&$c#bnN1{k#X{k54?i^o8Dr03;_=xu-Kh9MpB9s zY%3J1{qh6{aw~3$Bv5ejw%~%E9>$=kC)i@DGHODXVd|&Tlq@HK&Mc23vf6@+3`YHq zb)-DR1NrtqeX@s5%qJctT73g%3~`F{ex>hG_J&X>ZC7SDX0I}cUWlS-K~H#mnZJb< z@Q4TL5?}LGNC8e59a5*Q)a?0HB4T__oUaz_dt%=bHa!aivq^36dY%tHb6IXf2S>_I zdwg0#gBlyVs65OS$l!x#h(F+$%ZeTGaIBq?Z+O$ti5}({#?784`i==hqr}AKg|5R0 z&KQ8?vr4_Q34!lv8&CL)iZjFEYU#&Yk#=O(c<4A(VVp23TXB&c&?XlZqhof!=p_mH zQg%KzbhGK)SJ9z4Hl>Qs@nT-@1pE5hM!a;U^{?D68~J_D=W?Q z6O1tHqXQB9kTu?m%4gTivBD1%@y~l~-+4@iaW13O>0Od9D6Y100jKdx|2QW2^vjA% zcojq|l?J~-2zn611Nn)w2|gjiBHY^7Yg?93&>y53XEC#Rk;A)Ls@gM_5XZKNJ$b`Z zW|;nnl*hoYSy#&+4M?`7^_nM9XY^Z$Lzr?^t!3eqk_%#X3A7`aH_ast!Z`~ldagf7 zN`zqdbCx_tQMHtRqiUWV?m4xJ^*Y~l!s-wZ0-RA|EACv%eEq({4~nIs2=Z^AvVR!? zY`=k2Mp3|P>oL}uZ*)LJniTk}5`*ZD=mi@t5dz#r213)rO@;Ufd!wkUJ_U2r|P{mT>)5|(a?x{!fmMlLaHUY ziw`$XorJenaxM#r+xUsf484kqETbM^rSmkHCZ0aS6roJ&CA1y(cq{ZqDQQj8nZH`o zkeOzS4cWtMU-K?Z^0DlvM1c%6AAN9$r;}tOq6)B5AD=)vEpULG5wMIY?Kxj@Vml-t z`G{cPL_yM!hGT9EaT-&?(9pz*Ol6<9L^LnIlyd(FZ{cRL0xVzct&Ohet6>7nUp^Q} zPp{hi10f27!gVSkv$$)D#)eM-1{R|Posd}c29G{v;>KqY__VRrqUB@(Mj2*n`f|sN z*?NRqP974{>AWaWnWL%c10rkulQ9}eZE*Ok^jr@jf2+~(ap4COb!X9ka5gAytwOw@ z1qT)FQtfd?h}nxq(MSNnBD1*Wfuoo&_SFcJPdH548mUm%5+nJzmf?^(C)HBl<^oPd ztw+>htq*O3RX)lX10KkXpdiK6coH1NU1+g~HV#S3zCkt|*RwYvEFII)1ioJaSW*IA z1CU2HRG85UX<|0Gb^8+5=8th#K9XekJj%$xl168WtBv4v4H) z4f6*j3gTZhKPo~b8+i;Nj1eYHA5csU%@(K45q7CL%@en)u5Obj=bmUh!j{hY^lzpX zS(nDn+;6fq&W}?l2^yn>xH`Y*+Igf=SBi&5Jw9mhfSyhGhMNj2eO3TTJpM$)#w*Ul zm$pr=531aKma&QAYQBZ=jDbaLFQy|-|F9?At`b!(u*!7s6YTAUV0ocfX%G?6vTd_f zJcS%9Cn6DW@-mu>@6(x-C3sbxL3Go3+G7|J#RIBx$}u2y!klZuHs!S7b$3oS;1x@k z$QEq5#t-!EQGYYf+@pn6P3L)>Wdn{1*#C4H{sVhhC!Mw5u-LslVCh;0XhR6B4AO)`{2@HQog$c`$ z^?m6jp=p=Tpf7m{bPgxIhJ$!cKS=9f==(A?SZ!Szm9oO}mMV^xB0v?kh4FMxIzhWs z9ZxAM@w@GCd_KWHf6stcfeL^_YXRL*^fvIm%&|>+2V8z71CkgwXaC$AEm|tD7nLKr zOz-@B3OzV>L?#!7SK9QJiuiiFCl#)BP)(qJl~{~A8m_*}T(|^Z&7nw|t&Yq_Xcs+7 z&56=Q3G$f#tsws&5wm})_FPRqsBB<*nIK8*_B+OXlwwbOuhK^oF@SvoT|Rwz#Ym9& zxFtTP-}z*JQCPzP=tA}4c~RAkcY&JyZ(a$7a|F9Q{gtUpA$(%?FS>N(Fr9p|-r7rU zZBUy+-gE`dlZ`8C*7f0B6)jPGfs@nJ#e-nS0Jpr4Ytb5YKSq%*4^>AKfiHi5S>!Zl zM)fA~FP5f`N;2Ib$9k`%6UR(S^rdK&^LUFt_>$ZFa`ax)GQXP59JILS8W6`qcDCyw zhdB9Shn<*_mZ+hxHYaRUGDaA!sbbeD1htCPz$gcmC{^fSfo%2cG>%hi{`M}Ey1G{?(jB;P z0>Ef1)DwGB@@q3GQH7l`XEnAOHLNRVHiFy)>PZIDwi(c@n$3Sl%>>f6_DIUsbH6F- z@V)t+xN_cVG)R(_;`Z~ofTBG#thR0n3#Tw_xDd|CPgnoJJ}vKuj3o^qvfl%YyPyC1 z&BQZba&{aP5yGwA*Umg=zjs{RdG%Kx%X|a=61^;ZSc%I|S1^QaI552uVH(v!AoaMoWJhg4FH3Ug7$bZH6;ay-rjZk&jWc zY2#&5XqdKHlRrjWeGsKopATsu$g#~nnYEmxCdn54)@Ku$IX~DvIV`R@480LP)8#A! zl>Sq3fgsf17QqI%&{dGCI?MEpg={=u{E ziP>oB|Gi{PjNsMa-CUXG(8Zid9UH5!Kh+8&zgO`BH4SYzO(aa!9>^Ci((ESlYd~>r z(#^A^1CKT7k7-bGXhF+MuY7KeN+oyv2`woi?`3wJ?Za`p=q|jL-{NK|+@Ch}Q3;SI zB8NW*S}FP6@Tw<3V=@oa`>Wg_uMEAY>pLyF`9BqP>|t3jg+>rrv$!#{G+h7g?ClWX zcuUcq-SpPf1O*s50*Nj^Cez$tu=l2{Ze1R@jNwGP{nlI`2>8xvDj3>a9)rrwf25GP zGqCc*xU&CiV>v~6AybZddVpm!8v8f@uxhFAHdE9e%YwaS+6}!gK77SN9WEzq&)n)F zG&RbGpR3il^8b^TT~skU#e+l*x&F;c`7dm^ja@WxKsM!ZHkY4=D0UO2&~(RyHLj)m~xHvQ(a>o-Cy>bl}Plk7FjYX&Hs_25qdO} z*28FpyR%DxrMCtSJV$8`BbY8@QvKYKJf4F;!&X zwY}`BdB7v}yu=qC=3#D7&r3zGW*~?GPw)Vuz*9yIo?;iRjq{9xA?om2cD0Cc{!s4s zw53{JE)HUp%Gz#5W+A^I6?&AV5xI$m(e>}|jWqV9hYvd+mjQN;iw&tq<2BiL4LKf? zlum0l^#xC|;jud%PRO$*5zyn{&C=qd_?hej0qkuzNon35*-TE&haH~`@bnMg)fAiJ znqw`0GZ}@rDo``>@E@Q3GL{!N?>%G8Qj$QvXU#>^XpBVmM{rJ{hCX02K^rZA{nSMB z>>`B(>d4FLOUq0uo6N9mv^!UaX1kdGR7L9rWV`L56D*^kF4S_q{(EBA8@JR@Hq3Mi znK3<5*nrWYDx?HHh%iS*fjP{5At}fs|I!}El!q`jt7vHYEA-N`j@2AQJT@qD0=RtWE-^b`8`VQVuPXH){G>7F# zO>0CSL!*&aAi3kEOEjZF>V!k;{>)>+zXmPMj!7|{{RDs?BmP!tL%|*Xm#s!+`%s`k z5GD>wc6yCtRjY9Sn%^EoRM;m0w?rw5-1Dk)4hkY{5ez{%Y3+^S}Mji=W7 zOc!vee8N3Lk_&iH7|6&mgK8-_HG5(cT}mSZB07mWSk?r@(NZ#P$_a1yfa<$Nnb;#=>-|A%Qvl$Qa=fax=|4!H@TmlF@k#?ozfPz%l{y%udat2rsB5NSwn z$A)MigwX~*UT5VWgoS87fM41!l9qPxYjF-T3dxX#?L7T$YvH*o>i&WTaIKhpETnnx z0_e3ijgOM$^!pmMMArbR_TgiwasWyv7;tx4gQNIHfSX_#J7F(Blhw*PGJPHXMoBAqE3@oxB(xnOlTQ0JU(O{PrSpy+%#gpry`867 z%Fp;qu}=C|;x9_U3Or>9Xp#A|s~LRNP?3KuYo3In`wI7^g6Jsi`hN*i{nwlRku#OV zAVVMiHJJE(rPCkhu>0<|Kbi=Y{x0_8;7Ky}&>Q0}&ZFvCUZ!Q_LumHhudM@Feck=V z23xCutgm7=jQ;sg72rVcC|jp(Fx(^a9{)CyOVW14zpN1Kn)!>n{eJ!DyUk(zRISoi z>+RFuksJECfj=FdUq+&m(p4r$jeV6aDqlu$HX(ppy zY4`UlbCihh@$vuBTvI>9scz;Fsf@a{%ju5WEM{>{J^r6qYg<*$ojK|iOC(5<71t-Q zR!0Tfz}HiSQd4s}BXG%wZ%0zW#k{I4cZ%NN0;t>fEU5l#PD`pWn!>Utl%E+e_vv(v zAzFm?ne6#oY+<=aG5I-MTa=eGNkM0k`~jAW$ms%GuXu|48EGZ=b7%E0)4#%6pVN#n zlLAQpl0W|Tx3TtlqpAhh)vpGTj(rwH)osW5Kl*BJ?>b+rKY|vzr>|s1?)sG^ShRh6 zr}4~~P0;ZuhcnbMG9iHNJindXEDNN>!ag1bAJ>qJq;MF6C91=%srhgkJbvJnkmBZX zZK*=NDj?T?v6NPFNn$@2?eAC!`pn%e?Prr_ABK`DbIaDrcm6Ss4y}Yc{H!CwIQ~VhOi^=}W~Vs@`@H`EEA)9|ZP!z;ALXx=6v)#apY^CW@G)4l`yFC5H@kOZH(6*rvltwhjK&Mnj*IPr~(S& zL`pFZ%ix#ERz3>Lv3omGFvt{vX&KWA=gh8POg46FmQ4jdMtP13wna*&$iGZbe23oa zqRg=)vm>{Q-Qx`mJKcnU^sHaRmVQ)NQ^Zwn=_}e9#>2lMYg#&#j^uLGLrny0`rzW7 zHMc6Fs)= zf30rVK=snd&ZSrhUEx{!NgK*2n|e0?%`?(`9wjZg{}pIDQ6@er9iaH$L;Hx2Dh&d+ zN&QbE(8r>G7r0Q_GxycossAd{{U1{U^2zrHs#L>ggJ6Uq=wkiP^>3*Ty!&F05z1w0 zRKfI0u}ae5n$YmU-eAw*BEAyk29^&?s9-A-sw!SyOPg+kTY*h1Z~Oxt!%thnUz4>*VY9_PGw-q=Pc&yUUzcR$_>E2D^0(wy${i z+T!^^r*d6a2D@*F;ciw(zTe1<;CaAc8P}sHeeTbfiF@4O080aE4zeE*u zk)U{Jq0(D3vQ8HDV_e^{wq**AE$}Kje{{=gP_||_#+=otmQ7C|r(aM%6ts2nGzuG% zEEiOhQ3Yd6AP46oXisXdI_3E>r!#vIveLl{ugtimtu=8}Y~RK*`nLQ8s*LPW!951b z(mpJto0x9Ny6MMpq$Ed)2$3Rl9h+3*=YaJk;|?)8^>vR!;%$JF_~{qo`rezV7&F!i zjLs39z-kIR_#MCxYt~5mF@S0~=@$?wrk?xA<-lm^(j&bA3&gV+L`-PUIA@ljIyo~o z*o0v(3%-7i;k!&&MlhN!A{254bn;Z+Cpncf6yE2n2HN2r6?{vI`AVi{lQ(>hEp)ol z=`{+N%CL4Txz7+!w0%GH#ELtRNL(qN9h9%X2i|=e!YI>@5cW53g-5z%Z^rXMz3EzN zg(ceKw5gek;Kpyik@~)R6xLs-h5bHLn?81o%k>isx~W)r;EQ2JrK(RR`SeK`-IIj) zusW_BABpp}fL*RSZQ~5%7s%A9Gke6;h~*n9_`7CW2M#E`N%=AxhG;4Q^&uT*u1_jd zkb5e?AzgT!`W?2sJ*JX-Do*N*?aZcxB_1a4=b%T!GdlKeKc_V)+4+il2C1FMtd~AF z0^EMqpT_WXN|mH;X@?o0561RwmzX~hMD;IRH%Q)9QLw9(B>q`x=t*PVNAyNAB{Y-?dRMZKPh=@Vuo|G2}%>nBfPQ~^{#2A`gbFkUnij8v3;U+dBm(p1 zrd)>dh0tv6dTs1bsa;`lUz_j!98MdpFD+3+kWON~*4`w@mt{aIhf5TlgMQhQbuMnY$(Jj=qV;t~sY zc{Ar$WjwN(ae7P^h8}1Zg0zwl>=$?}@gW-{ROrmVv{cSR78ul=v za<;Wm2wND$mapR%wqZezj)|)cRweuM;*wGVCB~rdl!RUv9%cbntyZyv#Zq-0V!AO; z8nPwA4b|73<1tIC^YwRc)!e|4EbWtFpN8mpy=H*Tt2WPck7NS+fa{dZ%e1`o-4A)} z0)tMeof8T|E6GTc0eAPE0FN?hiehIj^bsL9{eUGjRW$a=iGmi=Xi;@&1xKn}I|PJ_ zlIGNY_TjQq)QrMp3(+mhCws@ATJzTbNMe*ouRSY1P*t;o?ap12l;*JB3S0Ihh1GK= z&syxiVYKxN18J~e7MgrY*qRh3Fa$}}2}SF%M{!0&sFIte^Z26*M6Gc9txZxhg}g)e zuP9ZzWu@=!aP*;`0g@*~fv&#}QW+uBf5@d@asLXmC9umej|)DN21WK_trTUgFGXQKVW21?xRU@s3xevrZ2#tM^ykurtLpFVU zCwkKgRf_qM+=A1mz>?I6A9QasrOJm-jlju}~Rk`JNRI?KL zR_8pk8#mvMYzti{9OPH+vP;x8q+$HgGo+v9Hv(0K$pz2c_>r$SR=UPL)pTaAlo6Bm zm-CjG`>!#Mz7O~99nckzHgE8b8SMV^HecMQ{#s1=I_bZZciur!v~9X4NzO?IkUYd8 z=bS`fNRopnIY$QpL4stE-~ht_N)!eZkc@zUWF&(i5>)btB#Dy4>GA#c`_68?TeVeN zd(Npkf6{0-{Y-byecktU{aPVoKd4A>gT7GkG~Z`lKQXu-Xdg7oas_V0=xOWIxH1H^%Xt!7l-;6PET$D}6{<)xx zHS#L^>N{T`ReM(mM^WSK?Afi^C&izr)p_7741>)Xwb&>!U9u_JxQX-!uV*2W#c}G} z60DDApLWZJ!=2UiRdh_4tBho-@l{`_BUd@ejAvYppF$KPCGLDxT{M;|c(dwredN=A z{(VP@5R(vNy;vl0c#nX2=IAHx553lB1EJ*N=AnGQX*qs6Wm1cb`@LzTi!dO)=vgtt z4|b#yvG`DmANL?}m|AhN-^xk(sWZ%khFj$Z5%5xA#kwR-}0oyJiKbMPFMV?l-c{tD~01sTzN z*tu70+y0;c;|Bo3(ft|$Gr_C^?#Fw5@Mc+)#`RRAKe%P^hE3 zW}o>`j1t6K{^H^j>t!krD%(%B(1H$?8=ebaFimo8+mbU1xBy!BMe(`Jw9|3aGYL}*ZA;VF{^~F((E_`1Fk9- z=s?(=)7wgQUki~U`1#Ha29CzsAk_i36ZCy2NyR9dLr;Z9;c?der1=&$m(n(?Mw2q` z867N5ZSa7#ZNj1_*u&T*2tw@I%3PZ^(0(<29b8{TK%sQ@lT)JV!`TKyqeccSC&xAs zheckZYYgO*BN+mHV^00}weA3$?P zP|Fp+zXVbKe=}J(VFkdwbialGgZfyE;qWacZZ}~yo_%OD8+5X}1Tel(0N)Cx^H0ycg9YtzLXqFwgZxw8(R(>bu^pX2|3c?1$Y_O8x%)~@NDnt>w-{&j?E z)yw=j#gG$t3fKvgw8JP$RKsE>k5@XqqzPs=2*95HKTO$ewqjhGt$VSn0GDg`>hhfB zK}@MZK9Jf{;sku0iUFed(j$PWb7m1EG*7Z-yX=TY6OEaoyb6Yt@uy>jsia*<2lZ4G z4OToJ#{;dvV5gqs_MwxWYX;`nmSw4ceZglwy(1qaiw8Yq@UbHTN`qq?S4yq@^WFtz z1j1vk?3JhOzHe}DhTb9xTC3`E|LxsStT|G+zpuBK`|-zy;Ks)B#k1AppMANQv`eu4 z$>&|?_Eq!n_I)MA>GD9GZ|;eMkqd;y!LKz=FV(&*o$;CHPU2VYuhxv)yj_#4xEE^h z^%WHMy7jA@q2n^s6CL4szWUcw>Ju&9wE1uzJw4&OgBdI&|0WoRa`c2;c*Sj(Xuls5 zS%6W`zZ7&*J9fYjlfU4A`#-AoHWhdXwjWz__%z+b{cS5Mdj^zOcqvCIgS-n3_+=#< z_bpzcBfy$wmw)LJXEXzs+*A=Pow508_Ax}c;poUMMnjqpqpefXdoU1>fh zZAZ*x&Pi4rfi6>^Vr300HtbbVuZ|PFI=mS%TlhUU#)Ev+THYS2-oHZG4|I0LFFFv{ zwZ$_@dl5W7!?&*RwavuRGN&xuDG_Co_6@Cz!?}G%MeL5>rbwx*gFwPV0y(m_-TcdQ zGsxx~mF7gZD3M!oj61!vWlCRk1|S~70bzQWYAog@w5ZH7p`hD110x;nJ9tpjh>I=f zK6XK;PD5GiJDI}}F>gB;F(H(r>TLupu>w6KBdzj<-#M2d(rZhqjgLSn)iUeeig6^3 zj_=ERqpOzSSzhqEB^uE>SV&c}VJGeueN4j8PnX|(!%gCbOkjdpC=N+(UXHD&<Y4gV7d#GiR*E78fA)FyxYyEG@#95M44Se<`5S4`M~o@+?^YpZ@7o{afTX* zcLTIIv3)Ch%*65VN~0?j_p{NGO${_os6t044_uD9gl=#%F(|^o<(H!gYc~6nI_Ig= z-?D(mi&IewO)s~`=agv{sy@XH( zB4~k~Z|2t6K|Z4dyGbmK>myM6J=yxT)fBer$~lJ|`L4&cd-yy$cex!XAGfRAowcn% z4~9qwNo@{VWWCDzrXz=Krk7nDk;^kv#2R&DzTrkzB(bv>*0USyA(Gfp1_}-$vM#1b z`~7uy%FwczjW4aKhfz-4Rg?M5mE8G*eA{R`=)QOS6tP2HMeI!uSCSC@CpOFbXZ!J{ z$=`_0A4{skT?T~aR(l-Zl#UO*DDE^N5Y7FBNAz>k7Te6Hx9nikPfidJrn#Cd$|pG| zw|z`pqjRTNSii1n?jL&52IZHS%H8KnUw5u}u%K=(;xk;9Gp{0V|5lBOM`{bFWJ3J~ zy9mNljLf%;cZ_4ZTK!hEz*D8^7Yf2muEK!tg+zn#8Hq7%w;D+29ZmoJ91TUy7mvJm z+evG_NlMLM(V9HAQOho7tV)-OGV>&MHmb_iil9cN(BjTx+1!2pf^EQP;`ljLgF43{n435EXqwKeaJNp?=t-FXK_NG|TtOsh)h|121w^}?i{dITsI`Sqv1|8)%*{`7Ene@grJX~`uomlEtK4(Fa*!}0WYeYKr3q5^9!=SGE9z$KBoSfHB z-*6$FG6TC*E#o^kDvg_mnE}Hhk5EZ&RTpHQ(!$=7?Q4QB-}nc9_YV(1Vkul{p8?uvHzOVH7!UrrBGk)2VjiM9~ zg^IYrOae2#bJ=7T3yE$(X6-JhPC4 zHYbD7aaKQR4wFbu8i5*(Nng*cIfEx~8kb(`*`H5v((mm^cP6CRW;eT|z(c%5&=Oxs z*@xKKb8nUEY9cP4xUSyjJ!9ypq{ywZ`*I_?@Us2@Qn5>oJV>ZXk0yb#lgSA5H!ubd zjQ6FeyRP>pQ8|Ror=jjqmEqYiDoyU>${5 z#ke9#=7EZEihXK3#_&21j@BFfvV&7o1VMN#i!G1f6OSNb@s-8!V;{qZ)iS}GQPq!N z{il+^L$1N`H&GLn@8*z6T5AtbcZJTq%A>fF@mmSkl>uR@Kxv&niu0@M6CQO;p2b;q z7L#T{&-`5)1r12tORwvwMb^s8#ABe&5(1Q?&>yzwO(4l9)Ks8xxnbUZ_Os}D*nxET z0g(B}U>@2pw|%asY%Zs=1W<@EX+SRRE6<76@39_fp;U!&FOM}27dWx6hni1?&)6)U zOIrpb`P}xEO*zO4ti24wj|0Os{er7kq{CLE9|WQ4qRnkWe=A?aU5h|~Kh$p+=$=Wl zzlb=Cc=4rJH_LyzaCQb4>i=SjJ|=%l9X`7E=K2o(d@DVQER90xMCEdQI{b3l@8k^N zaV_6$2V@2+#9KC(9@U3sFnyJOqe2%(xBXEp^8Kemddc5R7o={-N|D^#eV zr??JaF92TJ)yYTYu=DN4k0+f`J7LEyfQmCxssgmezK_VG8`4>(FuMC6+cmNe;et?+ zVkY)QO~#dlZanAAcf7ITy9D7PeV7ga3@SLN*pVAmQhPDNH$dN;_6Ap#|DhyEgoH39 zYw_E*;H1tS`QY8fmkSr%-5B;p()rEMKmY9+cjww?(u(LQp=J6T5CpiXj+FCM_ZsS zV1m7FVFWaFo58?L%G!z~ENDUsn3H4flP?(Ws&NB=or7`yy@L7YX<%-*f6pd~vjPxh zv$PniG+R2oZ0_Ih}7TT{dv9LYK4x;(K z#ks}gseoy81}6}lZ?Lgsiwz5HzutGYbh@A*#{+UGSFnQUYJ1FSV>&e&V*#UzIBYp zgA#Rxouazvoo2t5tM1hKyv)sM+2&x}rsT{`oC~Y_irqI?UI=cSnR{>?G@sM^e?5`d zsnEEe|7Txi8t7w}W0-fn#{KJT`6+t;-mAo7IEOYCG#%i-NhsQ<6$X?-7|LEH|R8{0e(`E^!YshmobRbuFG)Dn3t#+Io8X)n@w@z(M}a_84egTu-&1nLC`h%D$oRRXtPl^MCXtv? ziw9~dd7_YxZ#b?u(LITCoD$YbWM@PsL9si^4Zv!XwM)O=n2!R28qM&A~ z9IXLrgixYiR_koXlEhHyE8S5i;cPS^e>_6$OBaN%_9mkmuPIzWC7TC~x)cGgE#gr! z(=zL@oD8ezFf*#wZttzXcOpa(M-=o}xZ*l0uvx6=iQZ0Nb2_6PoSh98K7vEPSS9q8 zuUf)_@A;<{JW`rWS>-y=BuXQ@O5gzLfKJ%pxje{}m|;(Ef+y#xi;l3HkquwiWYn8` z=Ld##Pq%cBY-1-RA2xj}$>^hVV6TJHS%v`@ayFguAi>u7OM6!xl!ONDFN1~C(ZDcF z!1ipToG}dG9d$3u04o&Jp}on!RoRohxXHW!?4;P-sfGHde{-n3Ds(F}j(Ux)mHr7p zqJ8G)+}w?BBm^@5w|eseQ;!Q9cJK0;wb{9$sm=Lt*?GS{B7CQvZ!BhSx}NNEBd1jy zo9C&ma+Xs=29tFNUe~FGZ_FoNq>3=^&aJxdAI79UyvGAK7p5k6Bs6l?dw9_^^9sJb zz58L+Mr?+~=Rwm3mv)pc9SSF?T_l6iliNDtzTHvFmzr0fD#Z6-^!m+j>HSCpv~VGK z*4oa4^IQ3RHiA)>+&ejw6Ho^-c1i@77&~PM;&GpHBz$a2uP{};uq~-m_Ag{`2tZ3d z>7)qjsJhEIQ6Bs0Aa!=q-&0RKk`SmKlLs!6D1+olL>barZmELn%gA z;fiNVhZkeb(FYk|%HV-@S)XdfA_QyHK4u}7H0y|l&}8v3_zs$ywz4?RFX-L`7Vv>; zhQ~#QiP?A+a}yEdj@Y$jYO=ObA-z$)_PTCFLrcTKalb97Uwo_994K`xp%tx}9sLNJ zq=Zc`s)P(C+$9{tffC{1dNH>_3Ci`;hT}qmhRCBkEn2%j#gvKSi>~@XWC*~PZnAaI zDZ_x?d2=R)l#I2<#y}(6LsiU}(73sTgXAUAmt|vQLI`7sJ6&EIXDH6mAWbp}$;68L z8jNC40VgYVIf_E*u6pFc#mGX)@%O-wwjV|0^!2MX*6kn8yqEhRs#cl;*D-T418((k zHHotn@JyXMDGqRL1OQk$frcAIC1f3uRBiOqGqRHaBmrCGhp3oIUg3LtS z6LjvfB7Hi-Pv(eMVy%9j{|w^EZBdz%iKIE{sY^-~H@#^iWh8gDQ8He@8r8sr13=W< z<>x+~E^H-tlFu^p@yxt>n%JAV`RwP3zu)&s6&tD+G z8?dN_LcQGw=e~1&^%IhqG#_n#8{93^IL4#Cw$moknUH$W)R0EK>o z>Z3xbKM@rmaxAg4<$vM5(RXvSCro?WGw;Nn^9&25R-Ti$S#p7ruGlZ(`dT{9e+yfN zk`aY)40h{C)BP%2A*Y@7`@>A)q;J7tEAi46w&hwE%#n`H zA%~wdT`$@-+Aj8oYGsY|>onGjLz5{Ppxvca@tGBa@8hlFjp{lo5F+;vf#|76a6bzQ z;@^w9jWin2a%Nzyr5K4Z2hsZC->M8!MOiMqt> zf_fLcuas7`mqVxCu;;@n>^XGRP-wqBv6o(LT79yULX$W2PKEcgRn#XTF`B)){L8Hj z^9P0oFTxVf`lLUwzvKkO1;9sRrmBDKRN73waD8<=mHq)x4wEP@nwVdbkd$;xCDrWV z-Kx<^5q{D={osk-2+_&q`V7W_2Bbgk`!NY_aQ&@rp|$$FlL^#N4FAnk+JD~h&hHNX zAMJQ|x{T$qEBueOyk7%!VT9hFI-U3rgHQYa$O}XMV}bc!t#dz@VmJhU_;I{zApkrV zK+BcNIJ9C2x=#*&eq#8>eA08kU`>(oJMu!AX68GFWT2HqtP`}N5PEjFp&11xcw13P z5mp&4u-if3w@BQ&Yo6sfdycB9wq&9A@NaqGIV96MHME{HpcnU~-29g_Af`3e&3*7) z{EU6R@payq(re==x4BRJM5h5gq~0TXqRXDX7QBZuKiY3-I+wzNqI*|LFu zc461H55OV|xY(2L6U=1qe7b{IK3?sZqgoE5A(6dC8r^?4QN;e2ue};~zXws{s$zR2f>LYHQ0NJ^v5kdgQ$(1=JxbF!qF(BG>KTDH6FMM>T^AV=3LPZY6cek9 z{r0H95|xbUbY`maU^8P)lgK#74xeesh~%cbw2kw8G|4OX!Kx*-h)+gj&0?ueM^g6J zrnbIZ=;qfTz${9BKQPHk5`22x%M;AA<&j)KtZVD3Xt>H1m?|HV-N@DxaSSD2Y(3(7xwD!oqCD$-eakm~2e zVX3-(TRv^VQD#`kA_nEq40ScZOWOX(__f6>meeWVI}>t%P4AwNi-jbm@^wY2u8XVn zS|#&TF7)_@uZ=J&xBZL+pB?O~zFIP2*np=gu#o!%o;hTc z!j{T%Y7TQ#x4!yDwDx!lCvUd!jteXu`Zxe-m0>O(9vo#Ud{Pnh{urWBI*r;d%eTwP z2aIWNO)_llHu5@ssl7Y+$Ya9R^g|Q(ZFVGLv8kd#H1d1x-J_F0s$uu$q+H>^IPUTY z7Tk|ru@*2P5PPP~J`jR9y^5oev-tsla0IjBdwQl-UNk*LSLy=d`9D z!eZ1#VBpyXu~FokB+0_~f+)(0sme+1v$1gwGWdOo{uLTG_`~Ee5^=nsJ4jY}uH-k+ zuWJBsB$B+FXV7qcl}lV8M1hbL9A)5b)r1J8cp4uNxwz@CB_*ROym~azGtq1~e1kOgC>EVH{K;`%ufoW>FD)w7 zIY<>8-rTRzV)Z$Nsh>K0AC0aOh@&|r6zZSlP{E$-lQOv_(KCKYNw^hVO>>kI5l0k^ zUh#^I3*ey8_9oVvAYv<(W?HNCdJ18Gh{K-=^Sy$ks!LdK*jDg+%!~1ZGH9SZP|fJ_M1r3okN1b=AC#?2m5 zVL}Y^kOUr_uQ8C{zYBN|#|1U}W3=TOhpBIdn<5+E&=Q5^eEql2_I`)D#5AV$=N6X>4^M$4i@FdTU1gE+FkUUd&LjiFo68>|Bob=QFw~m%`L{jgpW4N{z zoW{FMI4qP_k#Fsah|6Pz%zr>|A&M;z_1|h>YodX%Dx>I-Y=jUEzMMujyLilE`axHs z)9E2hW%q_07fCE{%=ZW2$}XbwdTA*q;EtVC5qpBDiRCtiHCboPWX;J@=3U;G<2r|Q zK%-E84=(SZ1k&-#_oqC%JRk4?uSRHKjBK@gQ)mpm?i&@YJDB5gM6tAl||iEDtzcOpvD_X4QEjhI_c&M@4ppgG}!QWwcdYxt5s$1 z@9W<PQEKYT;jSi%vLG$6e_phIgF<67tAlKVDM&3w(P8VB+YQGL# zcvacG;TI6^^^SLcO;pmzxhyCC_p*>c$Z z3^ReENec6g{sHL{Ua52~Jh}UZy&o$%zwAPPZepPk)h9zNVv<;EB=yvYu>`2CUFpTj z-KIWsiQsyQ3C!XK$IfM{Ad`VilFYS1y9~2y(5s*C>`t=?&C8*sacpE-MTcAIltK+g z)DtTF8c34r&Qha{KAzja9?eWU2O%1tp&2=9PBQ2 z0}b=VHRbEmEFttD2HohfBFt|it8|G{gC|8~T@@K)VK=KAS&3X7^IJr=dcO|%mc`-{fq2P$M<4s*nAtm{Bp(b> zgNsxq9AYa%#O|FBlad_;kcf3m3~5K9n~`=xRLvw#9H7oKyz6&+R_}@~I^8%O!G`+e z+XRZW!W88utZrDAN(12&0?}K!Q4h%>hx4L-8CxLARRWNM%S-V7uklr+7aWk=7b6~3 zZ6!Yr+jc_7+6J=`Fn^#&z2|ip=##KO_`&Kb?L>aSiU{8!v<=(t6s(K8dQmo%#cM|G zI_Nb>ujAD4eo$7PMzh9t3%ZD{>`;yC!zSCUs!zn>?6jru-6{c1>rqx_7V*1$-^AB3 z(+XaE9M84_;bYuRw6xTBqB4HS94}E4k8=*0u9s(vCYG_}ke6Pv_-P4tnB5|`3nw1U zF(5K>pSHK+*!{7s#W`NLIe`26%D7AnS)m)E8%deYy7#MPr;G=~nEq*m!HIul4Od8l zHZub4;|o3gldD~S>NAc#y?2&jvlc?)WT(#Vyhs~0iLhR{r4UH9FC?W`e&2(__#I1S zC6H^L;e{7L7Pw;__GH8CZwqxM1Y-XzWfXe}=w;tf^75QwOLvB4k)aR#H0WVBxHe8u zN`lM_pie}6gLu$)j4(e~Ka6^2f@Y`%ekS6;cq+{G*Z(s56u?8@u)> z9v-2|W%#YHiEbjA04I9_&+VXH`1dH+{!_3$KV>o#| z)VtGmX9Aso)hA;u^biWq`1rUis-xq`h3Tv8s`1Mk^j7pUYj@z=>}~8KCU>VgiJE9Z zT2d1_dCNHDZIs2sf~5ot%(4B{Y}1Si^47mNPCs6sus%hUO$YEsOt6)Q zz>9A??`|h)+mhm3oIkRj(WUc|s})tEc;VtcraMc7->i2eR#EgLKq$m_kiQh~4BhOA z7-rTXlSI|JHcv-NG{YrY6IUC<&l@#0t?FMtS31*@LRqH*>>7YsbNVwg@f3K0fX*N) zFZu##-P`N~?45$Bhj&{J9{fWNV=y-j*FPxEF_fE9<(Fq5io@RkFi5f(m_IRL za%Tr$mS>KEAsAEX-|_(ebSf~M3O_f&JjEv^ULOF?Jn8e$b|7CAsvgwxPeq zS||V96_95ukp12gI3~8e@xO0eoaSbTIv{(l`VZp#-yjG9#v}kYRlaWIU3FOS0TA@S z8YpIdi6m13Ud_1#Fi#&<{JZTodG&f$wB7&OHg+%ZUq4_5RDZ~Z|2mWZ+W70W#=m0& q{XaJFD#Faz_+G9|hizXIXdYMJyP Date: Wed, 10 Apr 2019 23:57:27 +0000 Subject: [PATCH 186/349] Updated advanced-hunting-reference-windows-defender-advanced-threat-protection.md --- ...-reference-windows-defender-advanced-threat-protection.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/advanced-hunting-reference-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/advanced-hunting-reference-windows-defender-advanced-threat-protection.md index 467af897d1..e513f42e95 100644 --- a/windows/security/threat-protection/windows-defender-atp/advanced-hunting-reference-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/advanced-hunting-reference-windows-defender-advanced-threat-protection.md @@ -42,6 +42,8 @@ To effectively build queries that span multiple tables, you need to understand t | AdditionalFields | string | Additional information about the event in JSON array format | | AlertId | string | Unique identifier for the alert | | AppGuardContainerId | string | Identifier for the virtualized container used by Application Guard to isolate browser activity | +| Category | string | Type of threat indicator or breach activity identified by the alert | +| ClientVersion | string | Version of the endpoint agent or sensor running on the machine | | ComputerName | string | Fully qualified domain name (FQDN) of the machine | | ConnectedNetworks | string | Networks that the adapter is connected to. Each JSON array contains the network name, category (public, private or domain), a description, and a flag indicating if it’s connected publicly to the internet. | | DefaultGateways | string | Default gateway addresses in JSON array format | @@ -89,6 +91,7 @@ To effectively build queries that span multiple tables, you need to understand t | OSArchitecture | string | Architecture of the operating system running on the machine | | OSBuild | string | Build version of the operating system running on the machine | | OSPlatform | string | Platform of the operating system running on the machine. This indicates specific operating systems, including variations within the same family, such as Windows 10 and Windows 7. | +| OsVersion | string | Version of the operating system running on the machine | | PreviousRegistryKey | string | Original registry key of the registry value before it was modified | | PreviousRegistryValueData | string | Original data of the registry value before it was modified | | PreviousRegistryValueName | string | Original name of the registry value before it was modified | @@ -110,8 +113,10 @@ To effectively build queries that span multiple tables, you need to understand t | RemotePort | int | TCP port on the remote device that was being connected to | | RemoteUrl | string | URL or fully qualified domain name (FQDN) that was being connected to | | ReportId | long | Event identifier based on a repeating counter. To identify unique events, this column must be used in conjunction with the ComputerName and EventTime columns. | +| Severity | string | Indicates the potential impact (high, medium, or low) of the threat indicator or breach activity identified by the alert | | SHA1 | string | SHA-1 of the file that the recorded action was applied to | | SHA256 | string | SHA-256 of the file that the recorded action was applied to. This field is usually not populated—use the SHA1 column when available. | +| RegistryMachineTag | string | Machine tag added through the registry | | Table | string | Table that contains the details of the event | | TunnelingType | string | Tunneling protocol, if the interface is used for this purpose, for example 6to4, Teredo, ISATAP, PPTP, SSTP, and SSH | From 9cf881b36004ad62fc134fc88a9277a6fb58d401 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Wed, 10 Apr 2019 23:58:54 +0000 Subject: [PATCH 187/349] Updated index.md --- windows/security/threat-protection/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/index.md b/windows/security/threat-protection/index.md index 04346ca1c3..9577ffb3b6 100644 --- a/windows/security/threat-protection/index.md +++ b/windows/security/threat-protection/index.md @@ -40,7 +40,7 @@ ms.localizationpriority: medium **[Threat & Vulnerability Management](windows-defender-atp/next-gen-threat-and-vuln-mgt.md)**
This built-in capability uses a game-changing risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. - [Next-generation Threat & Vulnerability Management](windows-defender-atp/next-gen-threat-and-vuln-mgt.md) -- [What's in the dashboard and what it means](windows-defender-atp/tvm-dashboard-insights.md) +- [What's in the dashboard and what it means for my organization](windows-defender-atp/tvm-dashboard-insights.md) - [Configure Threat & Vulnerability Management](windows-defender-atp/config-and-manage-tvm.md) - [Scenarios](windows-defender-atp/threat-and-vuln-mgt-scenarios.md) From 04a7b6557ce17227e379d22663946a445441ede5 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 11 Apr 2019 00:03:12 +0000 Subject: [PATCH 188/349] Updated next-gen-threat-and-vuln-mgt.md --- .../windows-defender-atp/next-gen-threat-and-vuln-mgt.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md index ca9812ba71..c389931807 100644 --- a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md +++ b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md @@ -60,6 +60,7 @@ Microsoft Defender ATP’s Threat & Vulnerability Management allows security adm - Real-time remediation status. Microsoft Defender ATP provides real-time monitoring of the status and progress of remediation activities across the organization. ## Related topics -- [What's in the dashboard and what it means](tvm-dashboard-insights.md) +- [Threat & Vulnerability Management dashboard overview](tvm-dashboard-insights.md) +- [Configuration score](configuration-score.md) - [Configure Threat & Vulnerability Management](configure-and-manage-tvm.md) - [Scenarios](threat-and-vuln-mgt-scenarios.md) \ No newline at end of file From 7c14cec28caa9c7777e0ffbaca1eed35b8e1ca59 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 11 Apr 2019 00:05:28 +0000 Subject: [PATCH 189/349] Updated index.md --- windows/security/threat-protection/index.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/index.md b/windows/security/threat-protection/index.md index 9577ffb3b6..7687cd6dae 100644 --- a/windows/security/threat-protection/index.md +++ b/windows/security/threat-protection/index.md @@ -41,6 +41,7 @@ ms.localizationpriority: medium This built-in capability uses a game-changing risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. - [Next-generation Threat & Vulnerability Management](windows-defender-atp/next-gen-threat-and-vuln-mgt.md) - [What's in the dashboard and what it means for my organization](windows-defender-atp/tvm-dashboard-insights.md) +- [Configuration score](configuration-score.md) - [Configure Threat & Vulnerability Management](windows-defender-atp/config-and-manage-tvm.md) - [Scenarios](windows-defender-atp/threat-and-vuln-mgt-scenarios.md) From b3216ea93d8e65b00f590fd7a1321427b7c1e3be Mon Sep 17 00:00:00 2001 From: Max Velitchko Date: Wed, 10 Apr 2019 17:09:01 -0700 Subject: [PATCH 190/349] wdavconfig.py must be sudoed --- .../microsoft-defender-atp-mac.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac.md b/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac.md index e4d8180854..84ebbf6049 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac.md +++ b/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac.md @@ -325,7 +325,7 @@ Thu Feb 21 11:17:23 mavel-mojave jamf[8051]: No patch policies were found. You can also check the onboarding status: ``` -mavel-mojave:~ testuser$ /Library/Extensions/wdavkext.kext/Contents/Resources/Tools/wdavconfig.py +mavel-mojave:~ testuser$ sudo /Library/Extensions/wdavkext.kext/Contents/Resources/Tools/wdavconfig.py uuid : 69EDB575-22E1-53E1-83B8-2E1AB1E410A6 orgid : 79109c9d-83bb-4f3e-9152-8d75ee59ae22 orgid managed : 79109c9d-83bb-4f3e-9152-8d75ee59ae22 @@ -370,7 +370,7 @@ Configure the appropriate scope in the **Scope** tab to specify the machines tha You can check that machines are correctly onboarded by creating a script. For example, the following script checks that enrolled machines are onboarded: ``` -/Library/Extensions/wdavkext.kext/Contents/Resources/Tools/wdavconfig.py | grep -E 'orgid effective : [-a-zA-Z0-9]+' +sudo /Library/Extensions/wdavkext.kext/Contents/Resources/Tools/wdavconfig.py | grep -E 'orgid effective : [-a-zA-Z0-9]+' ``` This script returns 0 if Microsoft Defender ATP is registered with the Windows Defender ATP service, and another exit code if it is not installed or registered. @@ -431,7 +431,7 @@ The installation will proceed. The client machine is not associated with orgId. Note that the orgid is blank. ``` - mavel-mojave:wdavconfig testuser$ /Library/Extensions/wdavkext.kext/Contents/Resources/Tools/wdavconfig.py + mavel-mojave:wdavconfig testuser$ sudo /Library/Extensions/wdavkext.kext/Contents/Resources/Tools/wdavconfig.py uuid : 69EDB575-22E1-53E1-83B8-2E1AB1E410A6 orgid : ``` @@ -445,7 +445,7 @@ The installation will proceed. 3. Verify that the machine is now associated with orgId: ``` - mavel-mojave:wdavconfig testuser$ /Library/Extensions/wdavkext.kext/Contents/Resources/Tools/wdavconfig.py + mavel-mojave:wdavconfig testuser$ sudo /Library/Extensions/wdavkext.kext/Contents/Resources/Tools/wdavconfig.py uuid : 69EDB575-22E1-53E1-83B8-2E1AB1E410A6 orgid : E6875323-A6C0-4C60-87AD-114BBE7439B8 ``` From 3c785a0abffad4ad78b7fba2993c93f2c5017eb1 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 11 Apr 2019 00:13:49 +0000 Subject: [PATCH 191/349] Updated configure-and-manage-tvm.md --- .../windows-defender-atp/configure-and-manage-tvm.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md index 6d6f575517..7fa76e4ae4 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md @@ -37,4 +37,8 @@ Ensure that you have the right RBAC permissions to configure your Threat & Vulne >- End-user: For more information on how to enroll your Windows 10 device in Intune, see [Enroll your Windows 10 device in Intune](https://docs.microsoft.com/intune-user-help/enroll-your-w10-device-access-work-or-school) >- End-user alternative: For more information on joining an Azure AD domain, see [Set up Azure Active Directory joined devices](https://docs.microsoft.com/azure/active-directory/device-management-azuread-joined-devices-setup). - +## Related topics +- [Next-generation Threat & Vulnerability Management](next-gen-.md) +- [Threat & Vulnerability Management dashboard overview](tvm-dashboard-insights.md) +- [Configuration score](configuration-score.md) +- [Scenarios](threat-and-vuln-mgt-scenarios.md) From a4b37b9acd0cfb85bf8357dc90a6263e4ce83df6 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 11 Apr 2019 00:14:32 +0000 Subject: [PATCH 192/349] Updated configure-and-manage-tvm.md --- .../windows-defender-atp/configure-and-manage-tvm.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md index 7fa76e4ae4..b836236390 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md @@ -38,7 +38,7 @@ Ensure that you have the right RBAC permissions to configure your Threat & Vulne >- End-user alternative: For more information on joining an Azure AD domain, see [Set up Azure Active Directory joined devices](https://docs.microsoft.com/azure/active-directory/device-management-azuread-joined-devices-setup). ## Related topics -- [Next-generation Threat & Vulnerability Management](next-gen-.md) +- [Next-generation Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) - [Threat & Vulnerability Management dashboard overview](tvm-dashboard-insights.md) - [Configuration score](configuration-score.md) - [Scenarios](threat-and-vuln-mgt-scenarios.md) From bf523e25e9c8132844329f508e059f5331471ef8 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 11 Apr 2019 00:15:50 +0000 Subject: [PATCH 193/349] Updated threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index baf1c103df..44168c3cc1 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -82,7 +82,7 @@ To lower down your threat and vulnerability exposure through remediation via Mic 2. Step ## Related topics -- [Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) +- [Next-generation Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) - [Threat & Vulnerability Management dashboard overview](tvm-dashboard-insights.md) - [Configuration score](configuration-score.md) - [Configure Threat & Vulnerability Management](configure-and-manage-tvm.md) From 19becd60c5cbdd4c0e9bbcbf31de65d0a72a1bfa Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 10 Apr 2019 18:11:55 -0700 Subject: [PATCH 194/349] edits --- windows/security/threat-protection/TOC.md | 26 +++++++++-------------- 1 file changed, 10 insertions(+), 16 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index caec919411..1f7e4b9e5e 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -1018,23 +1018,17 @@ ###### [Synchronize directory service data](security-policy-settings/synchronize-directory-service-data.md) ###### [Take ownership of files or other objects](security-policy-settings/take-ownership-of-files-or-other-objects.md) +### [Windows security guidance for enterprises](windows-security-compliance.md) -### [Windows security compliance](windows-security-configuration-framework/windows-security-compliance.md) -#### [Windows security baselines](windows-security-configuration-framework/windows-security-baselines.md) -##### [Security Compliance Toolkit](windows-security-configuration-framework/security-compliance-toolkit-10.md) -##### [Get support](windows-security-configuration-framework/get-support-for-security-baselines.md) -#### [Windows SECCON framework](windows-security-configuration-framework/windows-security-configuration-framework.md) -##### [SECCON 1 enterprise administrator security](windows-security-configuration-framework/level-1-enterprise-administrator-security.md) -##### [SECCON 2 enterprise dev/ops security](windows-security-configuration-framework/level-2-enterprise-devops-security.md) -##### [SECCON 3 enterprise VIP security](windows-security-configuration-framework/level-3-enterprise-vip-security.md) -##### [SECCON 4 enterprise high security](windows-security-configuration-framework/level-4-enterprise-high-security.md) -##### [SECCON 5 enterprise security](windows-security-configuration-framework/level-5-enterprise-security.md) -####Windows Security Blog Posts -##### [Sticking with Well-Known and Proven Solutions](windows-security-configuration-framework/windows-security-blog/sticking-with-well-known-and-proven-solutions.md) -##### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-security-configuration-framework/windows-security-blog/why-were-not-recommending-fips-mode-anymore.md) -##### [Configuring Account Lockout](windows-security-configuration-framework/windows-security-blog/configuring-account-lockout.md) -##### [Blocking Remote Use of Local Accounts](windows-security-configuration-framework/windows-security-blog/blocking-remote-use-of-local-accounts.md) -##### [Dropping the “Untrusted Font Blocking” setting](windows-security-configuration-framework/windows-security-blog/dropping-the-untrusted-font-blocking-setting.md) +#### [Windows security baselines](windows-security-baselines.md) +##### [Security Compliance Toolkit](security-compliance-toolkit-10.md) +##### [Get support](get-support-for-security-baselines.md) +#### [Windows security configuration framework](windows-security-configuration-framework.md) +##### [Level 5 enterprise security](level-5-enterprise-security.md) +##### [Level 4 enterprise high security](level-4-enterprise-high-security.md) +##### [Level 3 enterprise VIP security](level-3-enterprise-vip-security.md) +##### [Level 2 enterprise dev/ops workstation](level-2-enterprise-devops-security.md) +##### [Level 1 enterprise administrator workstation](level-1-enterprise-administrator-security.md) ### [MBSA removal and alternatives](mbsa-removal-and-guidance.md) From d85231cc754c1047ae62dd2ed574739e1534424d Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 10 Apr 2019 19:30:54 -0700 Subject: [PATCH 195/349] fixed links --- windows/security/threat-protection/TOC.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 1f7e4b9e5e..a42ae1274b 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -1020,15 +1020,15 @@ ### [Windows security guidance for enterprises](windows-security-compliance.md) -#### [Windows security baselines](windows-security-baselines.md) -##### [Security Compliance Toolkit](security-compliance-toolkit-10.md) -##### [Get support](get-support-for-security-baselines.md) -#### [Windows security configuration framework](windows-security-configuration-framework.md) -##### [Level 5 enterprise security](level-5-enterprise-security.md) -##### [Level 4 enterprise high security](level-4-enterprise-high-security.md) -##### [Level 3 enterprise VIP security](level-3-enterprise-vip-security.md) -##### [Level 2 enterprise dev/ops workstation](level-2-enterprise-devops-security.md) -##### [Level 1 enterprise administrator workstation](level-1-enterprise-administrator-security.md) +#### [Windows security baselines](windows-security-configuration-framework/windows-security-baselines.md) +##### [Security Compliance Toolkit](windows-security-configuration-framework/security-compliance-toolkit-10.md) +##### [Get support](windows-security-configuration-framework/get-support-for-security-baselines.md) +#### [Windows security configuration framework](windows-security-configuration-framework/windows-security-configuration-framework.md) +##### [Level 5 enterprise security](windows-security-configuration-framework/level-5-enterprise-security.md) +##### [Level 4 enterprise high security](windows-security-configuration-framework/level-4-enterprise-high-security.md) +##### [Level 3 enterprise VIP security](windows-security-configuration-framework/level-3-enterprise-vip-security.md) +##### [Level 2 enterprise dev/ops workstation](windows-security-configuration-framework/level-2-enterprise-devops-security.md) +##### [Level 1 enterprise administrator workstation](windows-security-configuration-framework/level-1-enterprise-administrator-security.md) ### [MBSA removal and alternatives](mbsa-removal-and-guidance.md) From b1e8515cb3af66df59467ad3aaf07a30b042c30f Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 10 Apr 2019 19:57:46 -0700 Subject: [PATCH 196/349] edit --- windows/security/threat-protection/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index a42ae1274b..c8aa4f90b2 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -1028,7 +1028,7 @@ ##### [Level 4 enterprise high security](windows-security-configuration-framework/level-4-enterprise-high-security.md) ##### [Level 3 enterprise VIP security](windows-security-configuration-framework/level-3-enterprise-vip-security.md) ##### [Level 2 enterprise dev/ops workstation](windows-security-configuration-framework/level-2-enterprise-devops-security.md) -##### [Level 1 enterprise administrator workstation](windows-security-configuration-framework/level-1-enterprise-administrator-security.md) +##### [Level 1 enterprise administrator workstations](windows-security-configuration-framework/level-1-enterprise-administrator-security.md) ### [MBSA removal and alternatives](mbsa-removal-and-guidance.md) From fb48d1c6a77aba0a93f6a8dcb5f2267277df8781 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 10 Apr 2019 19:58:28 -0700 Subject: [PATCH 197/349] edit --- windows/security/threat-protection/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index c8aa4f90b2..a42ae1274b 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -1028,7 +1028,7 @@ ##### [Level 4 enterprise high security](windows-security-configuration-framework/level-4-enterprise-high-security.md) ##### [Level 3 enterprise VIP security](windows-security-configuration-framework/level-3-enterprise-vip-security.md) ##### [Level 2 enterprise dev/ops workstation](windows-security-configuration-framework/level-2-enterprise-devops-security.md) -##### [Level 1 enterprise administrator workstations](windows-security-configuration-framework/level-1-enterprise-administrator-security.md) +##### [Level 1 enterprise administrator workstation](windows-security-configuration-framework/level-1-enterprise-administrator-security.md) ### [MBSA removal and alternatives](mbsa-removal-and-guidance.md) From 818fd466a3c62eddd13a0cc14ff7146fcbf3bc24 Mon Sep 17 00:00:00 2001 From: Lindsay <45809756+lindspea@users.noreply.github.com> Date: Thu, 11 Apr 2019 09:41:45 +0200 Subject: [PATCH 198/349] Update distribute-offline-apps.md Added instructions for downloading offline licensed app. --- store-for-business/distribute-offline-apps.md | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/store-for-business/distribute-offline-apps.md b/store-for-business/distribute-offline-apps.md index eefb7fd379..ff1b7866b0 100644 --- a/store-for-business/distribute-offline-apps.md +++ b/store-for-business/distribute-offline-apps.md @@ -63,9 +63,12 @@ There are several items to download or create for offline-licensed apps. The app **To download an offline-licensed app** 1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com/) or [Microsoft Store for Education](https://educationstore.microsoft.com). -2. Click **Manage**, and then choose **Apps & software**. -3. Refine results by **License type** to show apps with offline licenses. -4. Find the app you want to download, click the ellipses under **Actions**, and then choose **Download for offline use**. +2. Click **Manage**, and then choose **Settings**. +3. Under **Shopping Experience** set **Show offline apps** to **On**. +4. Click **Shop for my group**. Search for the required inbox-app, select it, change the License type to **Offline** and click **Get the app**, which will add the app to your inventory. +5. Click **Manage**. You now have access to download the appx bundle package metadata & license file. +6. Go to **Products & services**, **Apps & software** (the list may be empty until after some time it will auto-populate with a few office type apps) + - **To download app metadata**: Choose the language for the app metadata, and then click **Download**. Save the downloaded app metadata. This is optional. - **To download app package**: Click to expand the package details information, choose the Platform and Architecture combination that you need for your organization, and then click **Download**. Save the downloaded app package. This is required. - **To download an app license**: Choose either **Encoded**, or **Unencoded**, and then click **Generate license**. Save the downloaded license. This is required. From 9a2935e160c46847f8b23d22ad70e0c2d3f95ee5 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Thu, 11 Apr 2019 07:44:47 -0500 Subject: [PATCH 199/349] Update windows/security/threat-protection/windows-defender-exploit-guard/customize-exploit-protection.md Co-Authored-By: j0rt3g4 --- .../customize-exploit-protection.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-exploit-guard/customize-exploit-protection.md b/windows/security/threat-protection/windows-defender-exploit-guard/customize-exploit-protection.md index 7401f885ed..d2d4b0adf4 100644 --- a/windows/security/threat-protection/windows-defender-exploit-guard/customize-exploit-protection.md +++ b/windows/security/threat-protection/windows-defender-exploit-guard/customize-exploit-protection.md @@ -100,7 +100,8 @@ Validate stack integrity (StackPivot) | Ensures that the stack has not been redi >The result will be that DEP will be enabled for *test.exe*. DEP will not be enabled for any other app, including *miles.exe*. >CFG will be enabled for *miles.exe*. ->[!NOTE] If you found any issues on this article you can report it directly to a Windows Server/Windows Client partner or use our technical support numbers on your country. +>[!NOTE] +>If you have found any issues in this article, you can report it directly to a Windows Server/Windows Client partner or use the Microsoft technical support numbers for your country. ### Configure system-level mitigations with the Windows Security app From 13824d5da2f8d9fd86e1704c089b05f56f25bb71 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 11 Apr 2019 12:49:42 +0000 Subject: [PATCH 200/349] Updated threat-and-vuln-mgt-scenarios.md --- .../threat-and-vuln-mgt-scenarios.md | 59 +++++++++++++++---- 1 file changed, 48 insertions(+), 11 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 44168c3cc1..620ba65858 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -31,7 +31,7 @@ Ensure that your machines: - Are onboarded to Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). If you are using SCCM, update your console to April version 1904 - Are tagged or marked as co-managed -## Lower down your threat and vulnerability exposure +## Reduce your threat and vulnerability exposure Threat & Vulnerability Management introduces a new exposure score metric which visually represents how exposed your machines are to imminent threats. The exposure score is continuously calculated on each device in the organization and influenced by the following factors: @@ -49,10 +49,13 @@ You can reduce the exposure score by remediating issues based on prioritized sec To lower down your threat and vulnerability exposure through remediation via Microsoft Intune: -1. Go through the **Top security recommendations** list from your Threat & Vulnerability Management dashboard, and select the first item on the list. +1. Review the **Top security recommendations** list from your Threat & Vulnerability Management dashboard, and select the first item on the list. This opens the **Security recommendation** page. 2. In the **Security recommendations** page, you will see the description of what needs to be done and why. It will also show you the vulnerability details, such as the associated exploits affecting what machines and its business impact. Select **Request remediation**.. - +Note: There are two types of recommendations: +- Security update which refers to recommendations that require a package installation +- Configuration change which refers to recommendations that require a registry or GPO modification +- Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the [insert bug image here] icon. 3. Select **Open a ticket in Intune** and indicate the remediation due date. 4. Add a note for the IT administrator who will pick up the remediation task for more context. @@ -61,25 +64,59 @@ To lower down your threat and vulnerability exposure through remediation via Mic 6. +7. 5. Review the machine **Security recommendation** tab again. The recommendation should now disappear, and the exposure score should decrease. + ## Improve your security configuration -1. Step - -2. Step - ## Request for remediation and monitor its progress -1. Step +The Threat & Vulnerability Management capability in Microsoft Defender ATP bridges the gap between Security and IT Administrators through the remediation request workflow. +This capability allows you, the Security Administrator, to request for the IT Administrator to remediate a vulnerability or misconfiguration via Intune and SCCM with a click of a button. +Once requested, all the recommendation context (name, affected machines, justification, threat information) will generate a new security task in Microsoft Intune. -2. Step +To use this capability: + +1. Enable your Microsoft Intune connections. Navigate to **Settings** > **General** > **Advanced features**. Scroll down and look for **Microsoft Intune connection**. By default, the toggle is turned off. Turn your **Microsoft Intune** connection toggle on. + +2. Click on a security recommendation you would like to request remediation for, and then click **Request remediation**. + +3. Select **Open a ticket in Intune**, select a due date, and optional notes for the IT Administrator. Then, click **Submit request**. +Note: You also have the option to export all the data from the recommendation in the CSV format by selecting **Export all remediation activity data to CSV**. + +4. Notify your IT Administrator about the new request and have them log into Intune to approve or reject the request and start a package deployment + +5. View the status of the remediation request. Navigate to the **Remediation** page to view the activity progress. ## File for and manage exception +You can create exceptions for recommendations, as an alternative to requesting for remediation. -1. Step +There are various reasons why organizations might want to create exceptions for a recommendation. For example, a business or production need that prevents the company from applying the recommendation, the existence of a compensating or alternative control that provides the same level of protection that the recommendation would, a false positive, among other reasons. -2. Step +Exceptions can be created for both security update and configuration change recommendations. + +When an exception is created for a recommendation, the recommendation is no longer active. The recommendation state changes to Exception, and it no longer shows up in the security recommendations list + +Note: You will still see the recommendations under exception by applying appropriate filters. +1. Navigate to **Security recommendations** under the **Threat & Vulnerability Management** menu. + +2. Click the top-most recommendation. A side panel will open with the recommendation details. + +3. Click the **Create exception** button at the top of the side panel. + +4. In the exception creation side panel, fill in the following details: +- **Justification** – the reason for creating the exception, chosen from a drop-down list +- **Justification context** – additional textual context related to the justification +- **Exception duration** – the period of time during which this exception will be in effect. When the exception expires, the recommendation automatically becomes active again. + +5. Click **Submit**. A confirmation message at the top of the page will indicate that the exception has been created. + +6. View all your exceptions (current + past) by navigating to **Remediation** under the **Threat & Vulnerability Management** menu and clicking on the **Exceptions** tab. + +7. Click the exception that you created to view the details. + +8. Navigate to **Security recommendations** under the **Threat & Vulnerability Management** menu again and see that recommendation will not appear there anymore as it is currently under exception. ## Related topics - [Next-generation Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) From 619a93295d5933013ebda3442715cbcf044ba94e Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 11 Apr 2019 12:57:10 +0000 Subject: [PATCH 201/349] Updated threat-and-vuln-mgt-scenarios.md --- .../threat-and-vuln-mgt-scenarios.md | 28 ++++++++++++------- 1 file changed, 18 insertions(+), 10 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 620ba65858..2f20a014bf 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -52,10 +52,12 @@ To lower down your threat and vulnerability exposure through remediation via Mic 1. Review the **Top security recommendations** list from your Threat & Vulnerability Management dashboard, and select the first item on the list. This opens the **Security recommendation** page. 2. In the **Security recommendations** page, you will see the description of what needs to be done and why. It will also show you the vulnerability details, such as the associated exploits affecting what machines and its business impact. Select **Request remediation**.. -Note: There are two types of recommendations: +>[!NOTE] +> There are two types of recommendations: - Security update which refers to recommendations that require a package installation - Configuration change which refers to recommendations that require a registry or GPO modification - Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the [insert bug image here] icon. + 3. Select **Open a ticket in Intune** and indicate the remediation due date. 4. Add a note for the IT administrator who will pick up the remediation task for more context. @@ -64,7 +66,7 @@ Note: There are two types of recommendations: 6. -7. 5. Review the machine **Security recommendation** tab again. The recommendation should now disappear, and the exposure score should decrease. +7. Review the machine **Security recommendation** tab again. The recommendation should now disappear, and the exposure score should decrease. ## Improve your security configuration @@ -79,14 +81,18 @@ To use this capability: 1. Enable your Microsoft Intune connections. Navigate to **Settings** > **General** > **Advanced features**. Scroll down and look for **Microsoft Intune connection**. By default, the toggle is turned off. Turn your **Microsoft Intune** connection toggle on. -2. Click on a security recommendation you would like to request remediation for, and then click **Request remediation**. +2. Click on a security recommendation you would like to request remediation for. For example, a third-party tool that you can easily update, or a registry value that can be easily modified using RegEdit. +>[!NOTE] +>- Security update which refers to recommendations that require a package installation +>- Configuration change which refers to recommendations that require a registry or GPO modification -3. Select **Open a ticket in Intune**, select a due date, and optional notes for the IT Administrator. Then, click **Submit request**. -Note: You also have the option to export all the data from the recommendation in the CSV format by selecting **Export all remediation activity data to CSV**. +3. Connect to the machine and apply the selected recommendation. +>[!NOTE] +> Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the [insert bug icon here] icon. -4. Notify your IT Administrator about the new request and have them log into Intune to approve or reject the request and start a package deployment +4. Notify your IT Administrator about the new request and have them log into Intune to approve or reject the request and start a package deployment -5. View the status of the remediation request. Navigate to the **Remediation** page to view the activity progress. +5. View the status of the remediation request. Navigate to the **Remediation** page to view the activity progress. ## File for and manage exception @@ -98,7 +104,9 @@ Exceptions can be created for both security update and configuration change reco When an exception is created for a recommendation, the recommendation is no longer active. The recommendation state changes to Exception, and it no longer shows up in the security recommendations list -Note: You will still see the recommendations under exception by applying appropriate filters. +>[!NOTE] +> You will still see the recommendations under exception by applying appropriate filters. + 1. Navigate to **Security recommendations** under the **Threat & Vulnerability Management** menu. 2. Click the top-most recommendation. A side panel will open with the recommendation details. @@ -114,9 +122,9 @@ Note: You will still see the recommendations under exception by applying appropr 6. View all your exceptions (current + past) by navigating to **Remediation** under the **Threat & Vulnerability Management** menu and clicking on the **Exceptions** tab. -7. Click the exception that you created to view the details. +7. Click the exception that you created to view the details. -8. Navigate to **Security recommendations** under the **Threat & Vulnerability Management** menu again and see that recommendation will not appear there anymore as it is currently under exception. +8. Navigate to **Security recommendations** under the **Threat & Vulnerability Management** menu again and see that recommendation will not appear there anymore as it is currently under exception. ## Related topics - [Next-generation Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) From 9d91f5ec8d0668b96283fb823023e00bf1141ca4 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 11 Apr 2019 13:15:57 +0000 Subject: [PATCH 202/349] Updated threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 2f20a014bf..f2847113e7 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -28,7 +28,7 @@ Ensure that your machines: - Are onboarded to Microsoft Defender Advanced Threat Protection - Running with Windows 10 1709 (Fall Creators Update) or later - Have at least one security recommendation that can be viewed in the machine page -- Are onboarded to Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). If you are using SCCM, update your console to April version 1904 +- Are onboarded to Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). If you are using SCCM, update your console to May version 1904 - Are tagged or marked as co-managed ## Reduce your threat and vulnerability exposure From 420f4145d3c6fa3dbc770154e73015e0a24ef03f Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 11 Apr 2019 06:25:49 -0700 Subject: [PATCH 203/349] the final link fix --- windows/security/threat-protection/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index a42ae1274b..178b297aa0 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -1018,7 +1018,7 @@ ###### [Synchronize directory service data](security-policy-settings/synchronize-directory-service-data.md) ###### [Take ownership of files or other objects](security-policy-settings/take-ownership-of-files-or-other-objects.md) -### [Windows security guidance for enterprises](windows-security-compliance.md) +### [Windows security guidance for enterprises](windows-security-configuration-framework/windows-security-compliance.md) #### [Windows security baselines](windows-security-configuration-framework/windows-security-baselines.md) ##### [Security Compliance Toolkit](windows-security-configuration-framework/security-compliance-toolkit-10.md) From 3cc450ebeeac3e646edc0f793e09fb32152919b9 Mon Sep 17 00:00:00 2001 From: Lindsay <45809756+lindspea@users.noreply.github.com> Date: Thu, 11 Apr 2019 16:00:20 +0200 Subject: [PATCH 204/349] Update credential-guard-manage.md Added steps for using Intune --- .../credential-guard/credential-guard-manage.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/windows/security/identity-protection/credential-guard/credential-guard-manage.md b/windows/security/identity-protection/credential-guard/credential-guard-manage.md index 0edce00395..e5fbcdb64b 100644 --- a/windows/security/identity-protection/credential-guard/credential-guard-manage.md +++ b/windows/security/identity-protection/credential-guard/credential-guard-manage.md @@ -43,6 +43,14 @@ You can use Group Policy to enable Windows Defender Credential Guard. This will To enforce processing of the group policy, you can run ```gpupdate /force```. +### Enable Windows Defender Credential Guard by using Intune + +1. From **Home** choose **Microsoft Intune** +2. Click **Device configuration** +3. Choose **Profiles**, **Create Profile**, **Endpoint protection**, **Windows Defender Credential Guard** + +> [!NOTE] +> It will enable VBS and Secure Boot and you can do it with or without UEFI Lock. ### Enable Windows Defender Credential Guard by using the registry From 734955289c01ce276787d7286d427734032a4047 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 11 Apr 2019 14:08:54 +0000 Subject: [PATCH 205/349] Updated threat-and-vuln-mgt-scenarios.md --- .../threat-and-vuln-mgt-scenarios.md | 27 +++++++++---------- 1 file changed, 12 insertions(+), 15 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index f2847113e7..c23b8aca5c 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -49,25 +49,22 @@ You can reduce the exposure score by remediating issues based on prioritized sec To lower down your threat and vulnerability exposure through remediation via Microsoft Intune: -1. Review the **Top security recommendations** list from your Threat & Vulnerability Management dashboard, and select the first item on the list. This opens the **Security recommendation** page. - -2. In the **Security recommendations** page, you will see the description of what needs to be done and why. It will also show you the vulnerability details, such as the associated exploits affecting what machines and its business impact. Select **Request remediation**.. +1. Review the **Top security recommendations** list from your **Threat & Vulnerability Management dashboard**, and select the first item on the list. This opens the **Security recommendation** page. >[!NOTE] > There are two types of recommendations: -- Security update which refers to recommendations that require a package installation -- Configuration change which refers to recommendations that require a registry or GPO modification -- Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the [insert bug image here] icon. +> - Security update which refers to recommendations that require a package installation +> - Configuration change which refers to recommendations that require a registry or GPO modification +> - Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the [insert bug image here] icon. -3. Select **Open a ticket in Intune** and indicate the remediation due date. +2. In the **Security recommendations** page, you will see the description of what needs to be done and why. It will also show you the vulnerability details, such as the associated exploits affecting what machines and its business impact. Click **Open software page** option from the flyout menu. + +3. Click **Installed machines** and select the affected machine from the list to open the flyout page with the relevant machine details, exposure and risk levels, alert and incident activities. + +4. Click **Open machine page** to connect to the machine and apply the selected recommendation. + +5. Allow a few hours for the changes to propagate in the system. -4. Add a note for the IT administrator who will pick up the remediation task for more context. - -5. Click **Submit request**. This will take you to the Intune portal. - -6. - -7. Review the machine **Security recommendation** tab again. The recommendation should now disappear, and the exposure score should decrease. - +6. Review the machine **Security recommendation** tab again. The recommendation you've chosen to remediate should now disappear, and the exposure score should decrease. ## Improve your security configuration From 52109f8aac3f8d20b0bfe830a79dce50cb7ca425 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 11 Apr 2019 14:11:09 +0000 Subject: [PATCH 206/349] Updated index.md --- windows/security/threat-protection/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/index.md b/windows/security/threat-protection/index.md index 7687cd6dae..b8472d1f00 100644 --- a/windows/security/threat-protection/index.md +++ b/windows/security/threat-protection/index.md @@ -39,7 +39,7 @@ ms.localizationpriority: medium **[Threat & Vulnerability Management](windows-defender-atp/next-gen-threat-and-vuln-mgt.md)**
This built-in capability uses a game-changing risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. -- [Next-generation Threat & Vulnerability Management](windows-defender-atp/next-gen-threat-and-vuln-mgt.md) +- [Risk-based Threat & Vulnerability Management](windows-defender-atp/next-gen-threat-and-vuln-mgt.md) - [What's in the dashboard and what it means for my organization](windows-defender-atp/tvm-dashboard-insights.md) - [Configuration score](configuration-score.md) - [Configure Threat & Vulnerability Management](windows-defender-atp/config-and-manage-tvm.md) From 11d19bbe9455ef51a94ebceed82625a3ea023ed7 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 11 Apr 2019 14:30:38 +0000 Subject: [PATCH 207/349] Updated threat-and-vuln-mgt-scenarios.md --- .../threat-and-vuln-mgt-scenarios.md | 28 +++++++++---------- 1 file changed, 13 insertions(+), 15 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index c23b8aca5c..d16725c964 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -28,7 +28,6 @@ Ensure that your machines: - Are onboarded to Microsoft Defender Advanced Threat Protection - Running with Windows 10 1709 (Fall Creators Update) or later - Have at least one security recommendation that can be viewed in the machine page -- Are onboarded to Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). If you are using SCCM, update your console to May version 1904 - Are tagged or marked as co-managed ## Reduce your threat and vulnerability exposure @@ -54,7 +53,7 @@ To lower down your threat and vulnerability exposure through remediation via Mic > There are two types of recommendations: > - Security update which refers to recommendations that require a package installation > - Configuration change which refers to recommendations that require a registry or GPO modification -> - Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the [insert bug image here] icon. +> Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the [insert bug image here] icon. 2. In the **Security recommendations** page, you will see the description of what needs to be done and why. It will also show you the vulnerability details, such as the associated exploits affecting what machines and its business impact. Click **Open software page** option from the flyout menu. @@ -69,6 +68,8 @@ To lower down your threat and vulnerability exposure through remediation via Mic ## Improve your security configuration ## Request for remediation and monitor its progress +>[!NOTE] +> Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) will be integrated with Threat & Vulnerability Management in the coming months. Upon inregration, this scenario requires that you are onboarded to Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). If you are using SCCM, update your console to May version 1905. The Threat & Vulnerability Management capability in Microsoft Defender ATP bridges the gap between Security and IT Administrators through the remediation request workflow. This capability allows you, the Security Administrator, to request for the IT Administrator to remediate a vulnerability or misconfiguration via Intune and SCCM with a click of a button. @@ -78,18 +79,15 @@ To use this capability: 1. Enable your Microsoft Intune connections. Navigate to **Settings** > **General** > **Advanced features**. Scroll down and look for **Microsoft Intune connection**. By default, the toggle is turned off. Turn your **Microsoft Intune** connection toggle on. -2. Click on a security recommendation you would like to request remediation for. For example, a third-party tool that you can easily update, or a registry value that can be easily modified using RegEdit. ->[!NOTE] ->- Security update which refers to recommendations that require a package installation ->- Configuration change which refers to recommendations that require a registry or GPO modification +2. From the navigation menu, select the **Threat & Vulnerability Management** icon, then select **Security recommendations**. This opens up the **Security recommendations** page. -3. Connect to the machine and apply the selected recommendation. ->[!NOTE] -> Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the [insert bug icon here] icon. +3. In the **Security recommendation** page, select what you need to remediate and then click **Remediation options** from the flyout page. -4. Notify your IT Administrator about the new request and have them log into Intune to approve or reject the request and start a package deployment +4. Select **Open a ticket in Intune**, a due date, and add optional notes for the IT Administrator. Then, click **Submit request**. -5. View the status of the remediation request. Navigate to the **Remediation** page to view the activity progress. +5. Notify your IT Administrator about the new request and have them log into Intune to approve or reject the request and start a package deployment + +6. View the status of the remediation request. Navigate to the **Remediation** page to view the activity progress. ## File for and manage exception @@ -111,9 +109,9 @@ When an exception is created for a recommendation, the recommendation is no long 3. Click the **Create exception** button at the top of the side panel. 4. In the exception creation side panel, fill in the following details: -- **Justification** – the reason for creating the exception, chosen from a drop-down list -- **Justification context** – additional textual context related to the justification -- **Exception duration** – the period of time during which this exception will be in effect. When the exception expires, the recommendation automatically becomes active again. + - **Justification** – the reason for creating the exception, chosen from a drop-down list + - **Justification context** – additional textual context related to the justification + - **Exception duration** – the period of time during which this exception will be in effect. When the exception expires, the recommendation automatically becomes active again. 5. Click **Submit**. A confirmation message at the top of the page will indicate that the exception has been created. @@ -124,7 +122,7 @@ When an exception is created for a recommendation, the recommendation is no long 8. Navigate to **Security recommendations** under the **Threat & Vulnerability Management** menu again and see that recommendation will not appear there anymore as it is currently under exception. ## Related topics -- [Next-generation Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) +- [Risk-based Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) - [Threat & Vulnerability Management dashboard overview](tvm-dashboard-insights.md) - [Configuration score](configuration-score.md) - [Configure Threat & Vulnerability Management](configure-and-manage-tvm.md) From 9d663c69a6192442d2710939648205e84f607ed2 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 11 Apr 2019 14:31:39 +0000 Subject: [PATCH 208/349] Updated threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index d16725c964..8d5c8831b5 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -48,7 +48,7 @@ You can reduce the exposure score by remediating issues based on prioritized sec To lower down your threat and vulnerability exposure through remediation via Microsoft Intune: -1. Review the **Top security recommendations** list from your **Threat & Vulnerability Management dashboard**, and select the first item on the list. This opens the **Security recommendation** page. +1. Review the **Top security recommendations** from your **Threat & Vulnerability Management dashboard**, and select the first item on the list. This opens the **Security recommendation** page. >[!NOTE] > There are two types of recommendations: > - Security update which refers to recommendations that require a package installation From 7eb7950698ee90a7ef063f30bcd14f4b161f7fbc Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 11 Apr 2019 14:33:16 +0000 Subject: [PATCH 209/349] Updated threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 8d5c8831b5..8782789dbe 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -53,7 +53,7 @@ To lower down your threat and vulnerability exposure through remediation via Mic > There are two types of recommendations: > - Security update which refers to recommendations that require a package installation > - Configuration change which refers to recommendations that require a registry or GPO modification -> Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the [insert bug image here] icon. +>

Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the [insert bug image here] icon.

2. In the **Security recommendations** page, you will see the description of what needs to be done and why. It will also show you the vulnerability details, such as the associated exploits affecting what machines and its business impact. Click **Open software page** option from the flyout menu. From ea9109dc1c96dae618eab57ce1d50efc4f2f687b Mon Sep 17 00:00:00 2001 From: Lindsay <45809756+lindspea@users.noreply.github.com> Date: Thu, 11 Apr 2019 16:45:02 +0200 Subject: [PATCH 210/349] Update credential-guard-manage.md Removed commas and added >. Added extra note. Changed 'Choose' to 'Click'. --- .../credential-guard/credential-guard-manage.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/identity-protection/credential-guard/credential-guard-manage.md b/windows/security/identity-protection/credential-guard/credential-guard-manage.md index e5fbcdb64b..626de0ca3e 100644 --- a/windows/security/identity-protection/credential-guard/credential-guard-manage.md +++ b/windows/security/identity-protection/credential-guard/credential-guard-manage.md @@ -45,12 +45,12 @@ To enforce processing of the group policy, you can run ```gpupdate /force```. ### Enable Windows Defender Credential Guard by using Intune -1. From **Home** choose **Microsoft Intune** +1. From **Home** click **Microsoft Intune** 2. Click **Device configuration** -3. Choose **Profiles**, **Create Profile**, **Endpoint protection**, **Windows Defender Credential Guard** +3. Click **Profiles** > **Create Profile** > **Endpoint protection** > **Windows Defender Credential Guard**. > [!NOTE] -> It will enable VBS and Secure Boot and you can do it with or without UEFI Lock. +> It will enable VBS and Secure Boot and you can do it with or without UEFI Lock. If you will need to disable Credential Guard remotely, enable it without UEFI lock. ### Enable Windows Defender Credential Guard by using the registry From eddef6dd10af0c30c1cd58c5ec14abd90e258395 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 11 Apr 2019 15:17:08 +0000 Subject: [PATCH 211/349] Updated configure-and-manage-tvm.md --- .../windows-defender-atp/configure-and-manage-tvm.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md index b836236390..59fae40bed 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md @@ -38,7 +38,7 @@ Ensure that you have the right RBAC permissions to configure your Threat & Vulne >- End-user alternative: For more information on joining an Azure AD domain, see [Set up Azure Active Directory joined devices](https://docs.microsoft.com/azure/active-directory/device-management-azuread-joined-devices-setup). ## Related topics -- [Next-generation Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) +- [Risk-based Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) - [Threat & Vulnerability Management dashboard overview](tvm-dashboard-insights.md) - [Configuration score](configuration-score.md) - [Scenarios](threat-and-vuln-mgt-scenarios.md) From 595be2007e1fd9688489446e56e8fe31f96469c5 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 11 Apr 2019 15:30:51 +0000 Subject: [PATCH 212/349] Updated tvm-dashboard-insights.md --- .../windows-defender-atp/tvm-dashboard-insights.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index 098b0b84a3..6bfb12111b 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -68,7 +68,7 @@ Area | Description See [Microsoft Defender ATP icons](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection#windows-defender-atp-icons) for more information on the icons used throughout the portal. ## Related topics -- [Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) +- [Risk-based Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) - [Configuration score](configuration-score.md) - [Configure Threat & Vulnerability Management](configure-and-manage-tvm.md) - [Scenarios](threat-and-vuln-mgt-scenarios.md) \ No newline at end of file From 3379e56bda20d2a469893c7e789fbb8789bd0f19 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 11 Apr 2019 15:35:20 +0000 Subject: [PATCH 213/349] Updated threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 8782789dbe..5f518e0b87 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -46,7 +46,7 @@ The exposure score is broken down into the following levels: You can reduce the exposure score by remediating issues based on prioritized security recommendations. Each software has weaknesses that are transformed into recommendations and prioritized based on risk to the organization. -To lower down your threat and vulnerability exposure through remediation via Microsoft Intune: +To lower down your threat and vulnerability exposure: 1. Review the **Top security recommendations** from your **Threat & Vulnerability Management dashboard**, and select the first item on the list. This opens the **Security recommendation** page. >[!NOTE] @@ -55,7 +55,7 @@ To lower down your threat and vulnerability exposure through remediation via Mic > - Configuration change which refers to recommendations that require a registry or GPO modification >

Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the [insert bug image here] icon.

-2. In the **Security recommendations** page, you will see the description of what needs to be done and why. It will also show you the vulnerability details, such as the associated exploits affecting what machines and its business impact. Click **Open software page** option from the flyout menu. +2. In the **Security recommendations** page, you will see the description of what needs to be done and why. It shows the vulnerability details, such as the associated exploits affecting what machines and its business impact. Click **Open software page** option from the flyout menu. 3. Click **Installed machines** and select the affected machine from the list to open the flyout page with the relevant machine details, exposure and risk levels, alert and incident activities. @@ -63,7 +63,7 @@ To lower down your threat and vulnerability exposure through remediation via Mic 5. Allow a few hours for the changes to propagate in the system. -6. Review the machine **Security recommendation** tab again. The recommendation you've chosen to remediate should now disappear, and the exposure score should decrease. +6. Review the machine **Security recommendation** tab again. The recommendation you've chosen to remediate won't be listed there anymore, and the exposure score should decrease. ## Improve your security configuration From 06d5b05785c56237817f2bbfefa52c398f4f4b77 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 11 Apr 2019 15:38:10 +0000 Subject: [PATCH 214/349] Updated threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 5f518e0b87..caa0730d57 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -66,6 +66,8 @@ To lower down your threat and vulnerability exposure: 6. Review the machine **Security recommendation** tab again. The recommendation you've chosen to remediate won't be listed there anymore, and the exposure score should decrease. ## Improve your security configuration +>[!NOTE] +> Secure score is now part of Threat & Vulnerability Management as configuration score. We’ll keep the secure score page available for a few weeks. View the [secure score](https://securitycenter.windows.com/securescore) page . ## Request for remediation and monitor its progress >[!NOTE] From b88a9b0fe97f4f8b133eb9659445ccd27b2a711e Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 11 Apr 2019 08:50:58 -0700 Subject: [PATCH 215/349] added WhfB steps --- .../create-wip-policy-using-intune-azure.md | 66 ++++++++++++++++++- 1 file changed, 65 insertions(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md index fc50cfc48c..6d50a3b1a9 100644 --- a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md +++ b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md @@ -11,7 +11,7 @@ manager: dansimp audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual -ms.date: 03/25/2019 +ms.date: 04/11/2019 --- # Create a Windows Information Protection (WIP) policy with MDM using the Azure portal for Microsoft Intune @@ -602,6 +602,70 @@ Optionally, if you don’t want everyone in your organization to be able to shar >[!NOTE] >For more info about setting the **AllowAzureRMSForEDP** and the **RMSTemplateIDForEDP** MDM settings, see the [EnterpriseDataProtection CSP](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/enterprisedataprotection-csp) topic. For more info about setting up and using a custom template, see [Configuring custom templates for the Azure Rights Management service](https://docs.microsoft.com/information-protection/deploy-use/configure-custom-templates) topic. +### Configure Windows Hello for Business for MAM +If you created a WIP policy for MAM, you can turn on Windows Hello for Business, letting your employees use it as a sign-in method for their devices. + +**To turn on and configure Windows Hello for Business** + +1. From the **Client apps - App protection policies** blade, click the name of your policy, and then click **Advanced settings** from the menu that appears. + + The **Advanced settings** blade appears. + +2. Choose to turn on and configure the Windows Hello for Business settings: + + ![Microsoft Intune, Choose to use Windows Hello for Business](images/wip-azure-access-options.png) + + - **Use Windows Hello for Business as a method for signing into Windows.** Turns on Windows Hello for Business. The options are: + + - **On.** Turns on Windows Hello For Business for anyone assigned to this policy. + + - **Off.** Turns off Windows Hello for Business. + + - **Set the minimum number of characters required for the PIN.** Enter a numerical value (4-127 characters) for how many characters must be used to create a valid PIN. Default is 4 characters. + + - **Configure the use of uppercase letters in the Windows Hello for Business PIN.** Lets you decide whether uppercase letters can be used in a valid PIN. The options are: + + - **Allow the use of uppercase letters in PIN.** Lets an employee use uppercase letters in a valid PIN. + + - **Require the use of at least one uppercase letter in PIN.** Requires an employee to use at least 1 uppercase letter in a valid PIN. + + - **Do not allow the use of uppercase letters in PIN.** Prevents an employee from using uppercase letters in a valid PIN. + + - **Configure the use of lowercase letters in the Windows Hello for Business PIN.** Lets you decide whether lowercase letters can be used in a valid PIN. The options are: + + - **Allow the use of lowercase letters in PIN.** Lets an employee use lowercase letters in a valid PIN. + + - **Require the use of at least one lowercase letter in PIN.** Requires an employee to use at least 1 lowercase letter in a valid PIN. + + - **Do not allow the use of lowercase letters in PIN.** Prevents an employee from using lowercase letters in a valid PIN. + + - **Configure the use of special characters in the Windows Hello for Business PIN.** Lets you decide whether special characters can be used in a valid PIN. The options are: + + - **Allow the use of special characters in PIN.** Lets an employee use special characters in a valid PIN. + + - **Require the use of at least one special character in PIN.** Requires an employee to use at least 1 special character in a valid PIN. + + - **Do not allow the use of special characters in PIN.** Prevents an employee from using special characters in a valid PIN. + + - **Specify the period of time (in days) that a PIN can be used before the system requires the user to change it.** Enter a numerical value (0-730 days) for how many days can pass before a PIN must be changed. If you enter a value of 0, the PIN never expires. + + - **Specify the number of past PINs that can be associated to a user account that can't be reused.** Enter a numerical value (0-50 days) for how many days can pass before an employee can reuse a previous PIN. If you enter a value of 0, a PINs can be reused immediately and past PINs aren't stored. + + >[!NOTE] + >PIN history is not preserved through a PIN reset. + + - **Number of authentication failures allowed before the device will be wiped.** Enter a numerical value for how many times the PIN can be incorrectly entered before wiping the device of corporate data. If you enter a value of 0, the device is never wiped, regardless of the number of incorrect PIN entries.
  • Improving the Windows 10 update experience with control, quality and transparency - April 4, 2019
    • +
  • Call to action: review your Windows Update for Business deferral values - April 3, 2019
  • Windows 10, version 1809 designated for broad deployment - March 28, 2019
  • Data, insights and listening to improve the customer experience - March 6, 2019
  • Getting to know the Windows update history pages - February 21, 2019
    • From 1e437804d34306ae973076fe5fa6f69c9049e6e1 Mon Sep 17 00:00:00 2001 From: illfated Date: Sun, 14 Apr 2019 17:30:00 +0200 Subject: [PATCH 239/349] Inactive machines: typo correction - support ticket ticket Proposed change: Simplify the link text "Open a support ticket ticket." by removing one occurrence of "ticket", making it read simply "Open a support ticket." Closes #3258 --- ...alhty-sensors-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/fix-unhealhty-sensors-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/fix-unhealhty-sensors-windows-defender-advanced-threat-protection.md index f6ed806476..e6933232eb 100644 --- a/windows/security/threat-protection/windows-defender-atp/fix-unhealhty-sensors-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/fix-unhealhty-sensors-windows-defender-advanced-threat-protection.md @@ -49,7 +49,7 @@ If the machine was offboarded it will still appear in machines list. After 7 day If the machine is not sending any signals for more than 7 days to any of the Windows Defender ATP channels for any reason including conditions that fall under misconfigured machines classification, a machine can be considered inactive. -Do you expect a machine to be in ‘Active’ status? [Open a support ticket ticket](https://support.microsoft.com/getsupport?wf=0&tenant=ClassicCommercial&oaspworkflow=start_1.0.0.0&locale=en-us&supportregion=en-us&pesid=16055&ccsid=636206786382823561). +Do you expect a machine to be in ‘Active’ status? [Open a support ticket](https://support.microsoft.com/getsupport?wf=0&tenant=ClassicCommercial&oaspworkflow=start_1.0.0.0&locale=en-us&supportregion=en-us&pesid=16055&ccsid=636206786382823561). ## Misconfigured machines Misconfigured machines can further be classified to: From 429d61aa0a7c2fe38046cce373a7a1e13df8ba0f Mon Sep 17 00:00:00 2001 From: manuelhauch Date: Mon, 15 Apr 2019 13:05:25 +0200 Subject: [PATCH 240/349] Update windows-analytics-azure-portal.md Abbreviation for Azure Active Directory is AAD --- windows/deployment/update/windows-analytics-azure-portal.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/windows-analytics-azure-portal.md b/windows/deployment/update/windows-analytics-azure-portal.md index 7e923f2c27..5d2c44a281 100644 --- a/windows/deployment/update/windows-analytics-azure-portal.md +++ b/windows/deployment/update/windows-analytics-azure-portal.md @@ -29,7 +29,7 @@ Go to the [Azure portal](https://portal.azure.com), select **All services**, and It's important to understand the difference between Azure Active Directory and an Azure subscription: -**Azure Active Directory** is the directory that Azure uses. Azure Active Directory (AD) is a separate service which sits by itself and is used by all of Azure and also Office 365. +**Azure Active Directory** is the directory that Azure uses. Azure Active Directory (AAD) is a separate service which sits by itself and is used by all of Azure and also Office 365. An **Azure subscription** is a container for billing, but also acts as a security boundary. Every Azure subscription has a trust relationship with at least one Azure AD instance. This means that a subscription trusts that directory to authenticate users, services, and devices. From 8f685ada44fec357ab744258e91190336976e149 Mon Sep 17 00:00:00 2001 From: Lindsay <45809756+lindspea@users.noreply.github.com> Date: Mon, 15 Apr 2019 13:38:47 +0200 Subject: [PATCH 241/349] Update distribute-offline-apps.md Replaced & with 'and', and removed wording. --- store-for-business/distribute-offline-apps.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/store-for-business/distribute-offline-apps.md b/store-for-business/distribute-offline-apps.md index 5b9af1645f..352c98fe25 100644 --- a/store-for-business/distribute-offline-apps.md +++ b/store-for-business/distribute-offline-apps.md @@ -63,10 +63,10 @@ There are several items to download or create for offline-licensed apps. The app **To download an offline-licensed app** 1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com/) or [Microsoft Store for Education](https://educationstore.microsoft.com). -2. Click **Manage**, and then choose **Settings**. +2. Click **Manage**. 3. Under **Shopping Experience**, set **Show offline apps** to **On**. 4. Click **Shop for my group**. Search for the required inbox-app, select it, change the License type to **Offline**, and click **Get the app**, which will add the app to your inventory. -5. Click **Manage**. You now have access to download the appx bundle package metadata & license file. +5. Click **Manage**. You now have access to download the appx bundle package metadata and license file. 6. Go to **Products & services**, and select **Apps & software** (the list may be empty, but it will auto-populate after some time with a few office type apps). - **To download app metadata**: Choose the language for the app metadata, and then click **Download**. Save the downloaded app metadata. This is optional. From 420ad46005cf1d8544ada9bb614890a459720a9e Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Mon, 15 Apr 2019 05:42:03 -0700 Subject: [PATCH 242/349] Update windows-analytics-azure-portal.md --- windows/deployment/update/windows-analytics-azure-portal.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/windows-analytics-azure-portal.md b/windows/deployment/update/windows-analytics-azure-portal.md index 5d2c44a281..bbca1ea487 100644 --- a/windows/deployment/update/windows-analytics-azure-portal.md +++ b/windows/deployment/update/windows-analytics-azure-portal.md @@ -29,7 +29,7 @@ Go to the [Azure portal](https://portal.azure.com), select **All services**, and It's important to understand the difference between Azure Active Directory and an Azure subscription: -**Azure Active Directory** is the directory that Azure uses. Azure Active Directory (AAD) is a separate service which sits by itself and is used by all of Azure and also Office 365. +**Azure Active Directory** is the directory that Azure uses. Azure Active Directory (Azure AD) is a separate service which sits by itself and is used by all of Azure and also Office 365. An **Azure subscription** is a container for billing, but also acts as a security boundary. Every Azure subscription has a trust relationship with at least one Azure AD instance. This means that a subscription trusts that directory to authenticate users, services, and devices. From 24cf8df434cd15a60dac762f151a362052e4f256 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Mon, 15 Apr 2019 09:29:30 -0700 Subject: [PATCH 243/349] made edits per Trudy --- store-for-business/distribute-offline-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/store-for-business/distribute-offline-apps.md b/store-for-business/distribute-offline-apps.md index 352c98fe25..c9b1df28bd 100644 --- a/store-for-business/distribute-offline-apps.md +++ b/store-for-business/distribute-offline-apps.md @@ -67,7 +67,7 @@ There are several items to download or create for offline-licensed apps. The app 3. Under **Shopping Experience**, set **Show offline apps** to **On**. 4. Click **Shop for my group**. Search for the required inbox-app, select it, change the License type to **Offline**, and click **Get the app**, which will add the app to your inventory. 5. Click **Manage**. You now have access to download the appx bundle package metadata and license file. -6. Go to **Products & services**, and select **Apps & software** (the list may be empty, but it will auto-populate after some time with a few office type apps). +6. Go to **Products & services**, and select **Apps & software**. (The list may be empty, but it will auto-populate after some time.) - **To download app metadata**: Choose the language for the app metadata, and then click **Download**. Save the downloaded app metadata. This is optional. - **To download app package**: Click to expand the package details information, choose the Platform and Architecture combination that you need for your organization, and then click **Download**. Save the downloaded app package. This is required. From cb009c9eac82bf5377a9fb0c4375d5e60cb9cd78 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Mon, 15 Apr 2019 10:41:08 -0700 Subject: [PATCH 244/349] testing a fix for the build warning --- windows/privacy/windows-diagnostic-data.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/privacy/windows-diagnostic-data.md b/windows/privacy/windows-diagnostic-data.md index 4a50f70b53..dcf4d2be83 100644 --- a/windows/privacy/windows-diagnostic-data.md +++ b/windows/privacy/windows-diagnostic-data.md @@ -506,6 +506,6 @@ Use of the specified data categories to promote a product or service in or on a Here are the list of data identification qualifiers and the ISO/IEC 19944:2017 reference: -- **Pseudonymized Data** 8.3.3 Pseudonymized data. Microsoft usage notes are as defined. -- **Anonymized Data** 8.3.5 Anonymized data. Microsoft usage notes are as defined. -- **Aggregated Data** 8.3.6 Aggregated data. Microsoft usage notes are as defined. \ No newline at end of file +- **Pseudonymized Data** 8.3.3 Pseudonymized data. Microsoft usage notes are as defined. +- **Anonymized Data** 8.3.5 Anonymized data. Microsoft usage notes are as defined. +- **Aggregated Data** 8.3.6 Aggregated data. Microsoft usage notes are as defined. \ No newline at end of file From 52f0fb4721ca4557c8f0bdd2e9585b806d26f0c5 Mon Sep 17 00:00:00 2001 From: Albert Cabello Serrano Date: Mon, 15 Apr 2019 11:22:07 -0700 Subject: [PATCH 245/349] Update configure-windows-diagnostic-data-in-your-organization.md clarifying diagnostic data endpoints with and without 2018-09 cumulative update or later installed --- ...ure-windows-diagnostic-data-in-your-organization.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md index da571eeaf2..5ee34276fb 100644 --- a/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md +++ b/windows/privacy/configure-windows-diagnostic-data-in-your-organization.md @@ -155,14 +155,18 @@ The following table defines the endpoints for Connected User Experiences and Tel Windows release | Endpoint --- | --- -Windows 10, versions 1703 and 1709 | Diagnostics data: v10.vortex-win.data.microsoft.com/collect/v1

    Functional: v20.vortex-win.data.microsoft.com/collect/v1
    Windows Advanced Threat Protection is country specific and the prefix changes by country for example: **de**.vortex-win.data.microsoft.com/collect/v1
    settings-win.data.microsoft.com -Windows 10, version 1607 | v10.vortex-win.data.microsoft.com

    settings-win.data.microsoft.com +Windows 10, versions 1703 or later, with the 2018-09 cumulative update installed| Diagnostics data: v10c.vortex-win.data.microsoft.com

    Functional: v20.vortex-win.data.microsoft.com
    Windows Advanced Threat Protection is country specific and the prefix changes by country for example: **de**.vortex-win.data.microsoft.com
    settings-win.data.microsoft.com +Windows 10, versions 1803 or later, without the 2018-09 cumulative update installed | Diagnostics data: v10.events.data.microsoft.com

    Functional: v20.vortex-win.data.microsoft.com
    Windows Advanced Threat Protection is country specific and the prefix changes by country for example: **de**.vortex-win.data.microsoft.com
    settings-win.data.microsoft.com +Windows 10, version 1709 or earlier | Diagnostics data: v10.vortex-win.data.microsoft.com

    Functional: v20.vortex-win.data.microsoft.com
    Windows Advanced Threat Protection is country specific and the prefix changes by country for example: **de**.vortex-win.data.microsoft.com
    settings-win.data.microsoft.com +Windows 7 and Windows 8.1 | vortex-win.data.microsoft.com The following table defines the endpoints for other diagnostic data services: | Service | Endpoint | | - | - | | [Windows Error Reporting](https://msdn.microsoft.com/library/windows/desktop/bb513641.aspx) | watson.telemetry.microsoft.com | +| | umwatsonc.events.data.microsoft.com | +| | kmwatsonc.events.data.microsoft.com | | | ceuswatcab01.blob.core.windows.net | | | ceuswatcab02.blob.core.windows.net | | | eaus2watcab01.blob.core.windows.net | @@ -170,7 +174,7 @@ The following table defines the endpoints for other diagnostic data services: | | weus2watcab01.blob.core.windows.net | | | weus2watcab02.blob.core.windows.net | | [Online Crash Analysis](https://msdn.microsoft.com/library/windows/desktop/ee416349.aspx) | oca.telemetry.microsoft.com | -| OneDrive app for Windows 10 | vortex.data.microsoft.com/collect/v1 | +| OneDrive app for Windows 10 | vortex.data.microsoft.com | ### Data use and access From 006a9dddcba07e3514175bf17a9a6874fe8617d9 Mon Sep 17 00:00:00 2001 From: wweibull <49656177+wweibull@users.noreply.github.com> Date: Mon, 15 Apr 2019 11:32:12 -0700 Subject: [PATCH 246/349] Update microsoft-recommended-block-rules.md Added two additional researcher to the acknowledgment section. Philip Tsukerman (@PhilipTsukerman) Jimmy Bayne (@bohops) --- .../microsoft-recommended-block-rules.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md b/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md index 8b6d1d2ef7..34fbe7530e 100644 --- a/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md +++ b/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md @@ -60,6 +60,8 @@ Unless your use scenarios explicitly require them, Microsoft recommends that you |Lee Christensen|@tifkin_| |Vladas Bulavas | Kaspersky Lab | |Lasse Trolle Borup | Langkjaer Cyber Defence | +|Jimmy Bayne | @bohops | +|Philip Tsukerman | @PhilipTsukerman |
    From f93d126cd940ba20719db93f4953b09cee6786e3 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Mon, 15 Apr 2019 12:29:31 -0700 Subject: [PATCH 247/349] fix values --- devices/surface-hub/surface-hub-qos.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/devices/surface-hub/surface-hub-qos.md b/devices/surface-hub/surface-hub-qos.md index d8b5262549..ed7eea4ce2 100644 --- a/devices/surface-hub/surface-hub-qos.md +++ b/devices/surface-hub/surface-hub-qos.md @@ -30,10 +30,10 @@ This procedure explains how to configure QoS for Surface Hub using Microsoft Int Name | Data type | OMA-URI | Value --- | --- | --- | --- - Audio Source Port | String | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/SourcePortMatchCondition | 50240-50279 - Audio DSCP | Integer | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/DSCPAction | 46 - Video Source Port | String | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/SourcePortMatchCondition | 58300-58339 - Video DSCP | Integer | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/DSCPAction | 10 + Audio Source Port | String | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/SourcePortMatchCondition | Get the values from your Skype administrator + Audio DSCP | Integer | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/DSCPAction | Get the values from your Skype administrator + Video Source Port | String | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/SourcePortMatchCondition | Get the values from your Skype administrator + Video DSCP | Integer | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/DSCPAction | Get the values from your Skype administrator Audio Process Name | String | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/AppPathNameMatchCondition | Microsoft.PPISkype.Windows.exe Video Process Name | String | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/AppPathNameMatchCondition | Microsoft.PPISkype.Windows.exe From 046d1e965fb0589dc65d492248f600764ba1ba8b Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Mon, 15 Apr 2019 12:33:53 -0700 Subject: [PATCH 248/349] try to fix table --- devices/surface-hub/surface-hub-qos.md | 19 ++++++++++++------- 1 file changed, 12 insertions(+), 7 deletions(-) diff --git a/devices/surface-hub/surface-hub-qos.md b/devices/surface-hub/surface-hub-qos.md index ed7eea4ce2..5cf199afd0 100644 --- a/devices/surface-hub/surface-hub-qos.md +++ b/devices/surface-hub/surface-hub-qos.md @@ -28,14 +28,19 @@ This procedure explains how to configure QoS for Surface Hub using Microsoft Int 3. Add the following custom OMA-URI settings: - Name | Data type | OMA-URI | Value + Name | Data type | OMA-URI
    ./Device/Vendor/MSFT/NetworkQoSPolicy | Value --- | --- | --- | --- - Audio Source Port | String | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/SourcePortMatchCondition | Get the values from your Skype administrator - Audio DSCP | Integer | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/DSCPAction | Get the values from your Skype administrator - Video Source Port | String | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/SourcePortMatchCondition | Get the values from your Skype administrator - Video DSCP | Integer | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/DSCPAction | Get the values from your Skype administrator - Audio Process Name | String | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/AppPathNameMatchCondition | Microsoft.PPISkype.Windows.exe - Video Process Name | String | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/AppPathNameMatchCondition | Microsoft.PPISkype.Windows.exe + Audio Source Port | String | /HubAudio/SourcePortMatchCondition | Get the values from your Skype administrator + Audio DSCP | Integer | /HubAudio/DSCPAction | Get the values from your Skype administrator + Video Source Port | String | /HubVideo/SourcePortMatchCondition | Get the values from your Skype administrator + Video DSCP | Integer | /HubVideo/DSCPAction | Get the values from your Skype administrator + Audio Process Name | String | /HubAudio/AppPathNameMatchCondition | Microsoft.PPISkype.Windows.exe + Video Process Name | String | /HubVideo/AppPathNameMatchCondition | Microsoft.PPISkype.Windows.exe + + >[!IMPORTANT] + >Each **OMA-URI** path begins with `./Device/Vendor/MSFT/NetworkQoSPolicy`. The full path for the audio source port setting, for example, will be './Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/SourcePortMatchCondition'. + + 4. When the policy has been created, [deploy it to the Surface Hub.](manage-settings-with-mdm-for-surface-hub.md#manage-surface-hub-settings-with-mdm) From 2057346a64fd0c712ebd03934f32f47ae0250943 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Mon, 15 Apr 2019 13:26:01 -0700 Subject: [PATCH 249/349] changes for timna --- .../configuration-score.md | 38 +++++++++++++++++-- .../configure-and-manage-tvm.md | 6 +-- .../next-gen-threat-and-vuln-mgt.md | 6 +-- .../threat-and-vuln-mgt-scenarios.md | 7 +++- .../tvm-dashboard-insights.md | 25 ++++++------ 5 files changed, 59 insertions(+), 23 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configuration-score.md b/windows/security/threat-protection/windows-defender-atp/configuration-score.md index 507dd35077..fef9812d33 100644 --- a/windows/security/threat-protection/windows-defender-atp/configuration-score.md +++ b/windows/security/threat-protection/windows-defender-atp/configuration-score.md @@ -1,8 +1,8 @@ ---- +--- title: Overview of Configuration score in Windows Defender Security Center description: Expand your visibility into the overall security configuration posture of your organization -keywords: secure score, security controls, improvement opportunities, security configuration score over time, configuration score, security posture, baseline -search.product: eADQiWindows 10XVcnh +keywords: configuration score, wdatp configuration score, secure score, security controls, improvement opportunities, security configuration score over time, security posture, baseline +search.product: Windows 10 search.appverid: met150 ms.prod: w10 ms.mktglfcycl: deploy @@ -19,10 +19,40 @@ ms.date: 04/11/2019 --- # Configuration score **Applies to:** -- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) +- [Windows Defender Advanced Threat Protection (Windows Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) [!include[Prerelease�information](prerelease.md)] +>[!NOTE] +> Secure score is now part of Threat & Vulnerability Management as Configuration score. We’ll keep the secure score page available for a few weeks. View the [Secure score](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/overview-secure-score-windows-defender-advanced-threat-protection) page. + +The Windows Defender Advanced Threat Protection Configuration score gives you visibility and control over your organization's security posture based on security best practices. + +Your configuration score widget shows the collective security configuration state of your machines across the following categories: +- Application +- Operating system +- Network +- Accounts +- Security controls + +## How it works + +What you'll see in the configuration score widget is the product of meticulous and ongoing vulnerability discovery process aggregated with configuration discovery assessments that continuously: +- Compare collected configurations to the collected benchmarks to discover misconfigured assets +- Map configurations to vulnerabilities that can be remediated or partially remediated (risk reduction) by remediating the misconfiguration +- Collect and maintain best practice configuration benchmarks (vendors, security feeds, internal research teams) +- Collect and monitor changes of security control configuration state from all assets + +From the widget, you'd be able to see which security aspect require attention. You can click the configuration score categories and it will take you to the **Security recommendations** page to see more details and understand the context of the issue. From there, you can take action based on security benchmarks. + +The goal is to improve your configuration score by remediating the issues in the security recommendations list. You can filter the view based on: +- **Related component** - **Accounts**, **Application**, **Network**, **OS**, or **Security controls** +- **Status** - **Active** or **Exception** +- **Remediation type** - **Configuration change** or **Software update** + + +## Improve your configuration score + ## Related topics diff --git a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md index 59fae40bed..f1da16f74c 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md @@ -1,5 +1,5 @@ ---- -title: Configure Threat & Vulnerability Management in Microsoft Defender ATP +--- +title: Configure Threat & Vulnerability Management in Windows Defender ATP description: Configure your Threat & Vulnerability Management to allow security administrators and IT administrators to collaborate seamlessly to remediate issues via Microsoft intune and Microsoft System Center Configuration Manager (SCCM) integrations. keywords: RBAC, Threat & Vulnerability Management configuration, Threat & Vulnerability Management integrations, Microsft Intune integration with TVM, SCCM integration with TVM search.product: Windows 10 @@ -18,7 +18,7 @@ ms.topic: article --- # Configure Threat & Vulnerability Management **Applies to:** -- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) +- [Windows Defender Advanced Threat Protection Windows Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) [!include[Prerelease�information](prerelease.md)] diff --git a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md index c389931807..97496fbf4c 100644 --- a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md +++ b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md @@ -1,4 +1,4 @@ ---- +--- title: Next-generation Threat & Vulnerability Management description: This new capability uses a game-changing risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. keywords: threat and vulnerability management, MDATP-TVM, vulnerability management, threat and vulnerability scanning @@ -47,14 +47,14 @@ To discover endpoint vulnerabilities and misconfiguration, Threat & Vulnerabilit ### Intelligence-driven prioritization -Threat & Vulnerability Management helps customers prioritize and focus on those weaknesses that pose the most urgent and the highest risk to the organization. Rather than using static prioritization by severity scores, Threat & Vulnerability Management in Microsoft Defender ATP highlights the most critical weaknesses that need attention by fusing its security recommendations with dynamic threat and business context: +Threat & Vulnerability Management helps customers prioritize and focus on those weaknesses that pose the most urgent and the highest risk to the organization. Rather than using static prioritization by severity scores, Threat & Vulnerability Management in Windows Defender ATP highlights the most critical weaknesses that need attention by fusing its security recommendations with dynamic threat and business context: - Exposing emerging attacks in the wild. Through its advanced cyber data and threat analytics platform, Threat & Vulnerability Management dynamically aligns the prioritization of its security recommendations to focus on vulnerabilities that are currently being exploited in the wild and emerging threats that pose the highest risk. - Pinpointing active breaches. Microsoft Defender ATP correlates Threat & Vulnerability Management and EDR insights to provide the unique ability to prioritize vulnerabilities that are currently being exploited in an active breach within the organization. - Protecting high-value assets. Microsoft Defender ATP’s integration with Azure Information Protection allows Threat & Vulnerability Management to call attention to exposed machines with business-critical applications, confidential data, or high-value users. ### Seamless remediation -Microsoft Defender ATP’s Threat & Vulnerability Management allows security administrators and IT administrators to collaborate seamlessly to remediate issues. +Windows Defender ATP’s Threat & Vulnerability Management allows security administrators and IT administrators to collaborate seamlessly to remediate issues. - One-click remediation requests to IT. Through Microsoft Defender ATP’s integration with Microsoft Intune and System Center Configuration Manager (SCCM), security administrators can create a remediation task in Microsoft Intune with one click. We plan to expand this capability to other IT security management platforms. - Alternate mitigations. Threat & Vulnerability Management provides insights on additional mitigations, such as configuration changes that can reduce risk associated with software vulnerabilities. - Real-time remediation status. Microsoft Defender ATP provides real-time monitoring of the status and progress of remediation activities across the organization. diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index caa0730d57..d9694a0674 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -1,4 +1,4 @@ ---- +--- title: Threat & Vulnerability Management scenarios description: keywords: @@ -29,6 +29,9 @@ Ensure that your machines: - Running with Windows 10 1709 (Fall Creators Update) or later - Have at least one security recommendation that can be viewed in the machine page - Are tagged or marked as co-managed +- Have the following mandatory updates installed: + -- RS3 customers: [KB4493441](https://support.microsoft.com/en-us/help/4493441/windows-10-update-kb4493441) + -- RS4 customers: [KB4493464](https://support.microsoft.com/en-us/help/4493464) ## Reduce your threat and vulnerability exposure Threat & Vulnerability Management introduces a new exposure score metric which visually represents how exposed your machines are to imminent threats. @@ -73,7 +76,7 @@ To lower down your threat and vulnerability exposure: >[!NOTE] > Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) will be integrated with Threat & Vulnerability Management in the coming months. Upon inregration, this scenario requires that you are onboarded to Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). If you are using SCCM, update your console to May version 1905. -The Threat & Vulnerability Management capability in Microsoft Defender ATP bridges the gap between Security and IT Administrators through the remediation request workflow. +The Threat & Vulnerability Management capability in Windows Defender ATP bridges the gap between Security and IT Administrators through the remediation request workflow. This capability allows you, the Security Administrator, to request for the IT Administrator to remediate a vulnerability or misconfiguration via Intune and SCCM with a click of a button. Once requested, all the recommendation context (name, affected machines, justification, threat information) will generate a new security task in Microsoft Intune. diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index 6bfb12111b..918e84241d 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -1,4 +1,4 @@ ---- +--- title: What's in the dashboard and what it means for my organization's security posture description: keywords: @@ -19,23 +19,26 @@ ms.topic: conceptual # Threat & Vulnerability Management dashboard overview **Applies to:** -- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) +- [Windows Defender Advanced Threat Protection (Windows Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) [!include[Prerelease�information](prerelease.md)] ->Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-portaloverview-abovefoldlink) +>Want to experience Windows Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-portaloverview-abovefoldlink) -Threat & Vulnerability Management is a new component of Microsoft Defender ATP, and provides both security administrators and security operations teams with unique value, including: +Threat & Vulnerability Management is a component of Windows Defender ATP, and provides both security administrators and security operations teams with unique value, including: - Real-time endpoint detection and response (EDR) insights correlated with endpoint vulnerabilities - Invaluable machine vulnerability context during incident investigations -- Built-in remediation processes through Microsoft Intune and Microsoft System Center Configuration Manager +- Built-in remediation processes through Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) +>[!Note] +> Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) integration will be available in the coming months. You can use the Threat & Vulnerability Management capability in [Microsoft Defender Security Center](https://securitycenter.windows.com/) to: - View exposure and configuration scores side-by-side with top security recommendations, software vulnerability, remediation activities, and exposed machines - Correlate EDR insights with endpoint vulnerabilities and process them -- Configure Microsoft Defender ATP to integrate with remediation tools such as Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) -- Select remediation options, triage and track remediation tasks +- Select remediation options, triage and track the remediation tasks - File and track exceptions +>[!Note] +> The exceptions workflow will be available in the coming months. ## Threat & Vulnerability Management in Microsoft Defender Security Center When you open the portal, you’ll see the main areas of the capability: @@ -51,16 +54,16 @@ You can navigate through the portal using the menu options available in all sect Area | Description :---|:--- (1) Menu | Select menu to expand the navigation pane and see the names of the Threat and Vulnerability Management capabilities. -(2) Threat & Vulnerability Management navigation pane | Use the navigation pane to move across the **Threat and Vulnerability Management Dashboard**, **Security recommendations**, **Remediation tasks**, and **Software inventory**. +(2) Threat & Vulnerability Management navigation pane | Use the navigation pane to move across the **Threat and Vulnerability Management Dashboard**, **Security recommendations**, **Remediation**, and **Software inventory**. **Dashboards** | Get a high-level view of the organization exposure score, MDATP configuration score, top remediation activities, top security recommendations, top vulnerable software, and top exposed machines data. -**Security recommendations** | See the list of security recommendations, their related components, insights, number or exposed devices, impact, and request for remediation. You can click each item on the list and it will take you to the **Security recommendations page**. +**Security recommendations** | See the list of security recommendations, their related components, insights, number or exposed devices, impact, and request for remediation. You can click each item on the list and it will open a flyout pane where you will see vulnerability details, and have the option to open the software page, see the remediation options, or create exceptions. **Remediation** | See the remediation activity, related component, remediation type, status, due date, option to export the remediation progress data to CSV, exceptions, and its corresponding details. **Software inventory** | See the list of applications, versions, weaknesses, whether there’s an exploit found on the application, prevalence in the organization, how many were installed, how many exposed devices are there, and the numerical value of the impact. You can select each item in the list and opt to open the software page which shows the vulnerabilities and misconfigurations associated and its machine and version distribution details. (3) Threat & Vulnerability Management dashboard | Access the **Exposure score**, **Configuration score**, **Exposure distribution**, **Top security recommendations**, **Top vulnerable software**, **Top remediation activities**, **Top exposed machines**, and **Threat campaigns**. -**Organization Exposure score** | See the current state of your organization’s device exposure to threats and vulnerabilities. Several factors affect your organization’s exposure score: weaknesses discovered in your devices, likelihood of your devices to be breached, value of the devices to your organization, and relevant alerts discovered with your devices. The goal is to lower down your organization’s exposure score to be more secure. +**Organization Exposure score** | See the current state of your organization’s device exposure to threats and vulnerabilities. Several factors affect your organization’s exposure score: weaknesses discovered in your devices, likelihood of your devices to be breached, value of the devices to your organization, and relevant alerts discovered with your devices. The goal is to lower down your organization’s exposure score to be more secure. To reduce the score, you need to remediate the related security configuration issues listed in the security recommendations. **MDATP Configuration score** | See the security posture of your organization’s operating system, applications, network, accounts and security controls. The goal is to increase your configuration score by remediating the related security configuration issues. You can click the bars and it will take you to the **Security reccommendation** page for details. **Machine exposure distribution** | See how many machines are exposed based on their exposure level. You can click the sections in the doughnut chart and it will take you to the **Machines list** page where you'll see the affected machine names, exposure level side by side with risk level, among other details such as domain, OS platform, its health state, when it was last seen, and its tags. -**Top security recommendations** | See the collated security recommendations which are sorted and prioritized based on your organization’s risk exposure. You can drill down on the security recommendation to see the potential risks, list of exposed machines, and read the insights. Thus, providing you with an informed decision to either proceed with a remediation request or create an exception. The actionable remediation recommendations that it contains can then be pushed into the IT task queue through the integrations with Microsoft Intune and Microsoft System Center Configuration Manager (SCCM). +**Top security recommendations** | See the collated security recommendations which are sorted and prioritized based on your organization’s risk exposure and the urgency that it requires. You can drill down on the security recommendation to see the potential risks, list of exposed machines, and read the insights. Thus, providing you with an informed decision to either proceed with a remediation request or create an exception. Click **Show more** to see the rest of the security recommendations in the list. **Top vulnerable software** | Get real-time visibility into the organizational software inventory, with stack-ranked list of vulnerable software installed on your network’s devices and how they impact on your organizational exposure score. **Top remediation activities** | Track the remediation activities generated from the security recommendations. You can click each item on the list and it will take you to the **Remediation** page where you'll see remediation and exception activity details. **Top exposed machines** | See the exposed machine names and their exposure level. You can click the machine name and it will take you to the machine page where you can view the alerts, risks, incidents, security recommendations, installed software, discovered vulnerabilities associated with the exposed machines. You can also do other EDR-related tasks in it, such as: manage tags, initiate automated investigations, initiate a live response session, collect an investigation package, run antivirus scan, restrict app execution, and isolate machine. From 0d3aeea387b55a38354d68125ba947a39e178be7 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 13:41:17 -0700 Subject: [PATCH 250/349] Update next-gen-threat-and-vuln-mgt.md --- .../next-gen-threat-and-vuln-mgt.md | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md index 97496fbf4c..940265d7a6 100644 --- a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md +++ b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md @@ -30,7 +30,9 @@ It helps organizations discover vulnerabilities and misconfigurations in real-ti ## Next-generation capabilities Threat & Vulnerability Management is built-in, real-time, cloud-powered, fully integrated with Microsoft endpoint security stack, the Microsoft Intelligent Security Graph, and the application analytics knowledgebase. -It is the first solution in the industry to automate the remediation process through integration with Microsoft Intune and Microsoft System Center Configuration Manager for patching, configuration changes, or upgrades. +It is the first solution in the industry to automate the remediation process through integration with Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) for patching, configuration changes, or upgrades. +>[!Note] +> Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) integration will roll-in next month It provides the following solutions to frequently-cited gaps across security operations, security administration, and IT administration workflows and communication. - Real-time endpoint detection and response (EDR) insights correlated with endpoint vulnerabilities @@ -47,20 +49,19 @@ To discover endpoint vulnerabilities and misconfiguration, Threat & Vulnerabilit ### Intelligence-driven prioritization -Threat & Vulnerability Management helps customers prioritize and focus on those weaknesses that pose the most urgent and the highest risk to the organization. Rather than using static prioritization by severity scores, Threat & Vulnerability Management in Windows Defender ATP highlights the most critical weaknesses that need attention by fusing its security recommendations with dynamic threat and business context: +Threat & Vulnerability Management helps customers prioritize and focus on those weaknesses that pose the most urgent and the highest risk to the organization. Rather than using static prioritization by severity scores, Threat & Vulnerability Management in Microsoft Defender ATP highlights the most critical weaknesses that need attention by fusing its security recommendations with dynamic threat and business context: - Exposing emerging attacks in the wild. Through its advanced cyber data and threat analytics platform, Threat & Vulnerability Management dynamically aligns the prioritization of its security recommendations to focus on vulnerabilities that are currently being exploited in the wild and emerging threats that pose the highest risk. - Pinpointing active breaches. Microsoft Defender ATP correlates Threat & Vulnerability Management and EDR insights to provide the unique ability to prioritize vulnerabilities that are currently being exploited in an active breach within the organization. - Protecting high-value assets. Microsoft Defender ATP’s integration with Azure Information Protection allows Threat & Vulnerability Management to call attention to exposed machines with business-critical applications, confidential data, or high-value users. ### Seamless remediation -Windows Defender ATP’s Threat & Vulnerability Management allows security administrators and IT administrators to collaborate seamlessly to remediate issues. -- One-click remediation requests to IT. Through Microsoft Defender ATP’s integration with Microsoft Intune and System Center Configuration Manager (SCCM), security administrators can create a remediation task in Microsoft Intune with one click. We plan to expand this capability to other IT security management platforms. +Microsoft Defender ATP’s Threat & Vulnerability Management allows security administrators and IT administrators to collaborate seamlessly to remediate issues. +- One-click remediation requests to IT. Through Microsoft Defender ATP’s integration with Microsoft Intune and System Center Configuration Manager (SCCM), security administrators can create a remediation task in Microsoft Intune with one click. We plan to expand this capability to other IT security management platforms. - Alternate mitigations. Threat & Vulnerability Management provides insights on additional mitigations, such as configuration changes that can reduce risk associated with software vulnerabilities. - Real-time remediation status. Microsoft Defender ATP provides real-time monitoring of the status and progress of remediation activities across the organization. ## Related topics - [Threat & Vulnerability Management dashboard overview](tvm-dashboard-insights.md) - [Configuration score](configuration-score.md) -- [Configure Threat & Vulnerability Management](configure-and-manage-tvm.md) -- [Scenarios](threat-and-vuln-mgt-scenarios.md) \ No newline at end of file +- [Scenarios](threat-and-vuln-mgt-scenarios.md) From 75e60b484e5e3f659bbb6d9a3639fcac3720f5ff Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 13:47:04 -0700 Subject: [PATCH 251/349] Update tvm-dashboard-insights.md --- .../windows-defender-atp/tvm-dashboard-insights.md | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index 918e84241d..d2487a9fed 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -19,13 +19,13 @@ ms.topic: conceptual # Threat & Vulnerability Management dashboard overview **Applies to:** -- [Windows Defender Advanced Threat Protection (Windows Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) +- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) [!include[Prerelease�information](prerelease.md)] ->Want to experience Windows Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-portaloverview-abovefoldlink) +>Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-portaloverview-abovefoldlink) -Threat & Vulnerability Management is a component of Windows Defender ATP, and provides both security administrators and security operations teams with unique value, including: +Threat & Vulnerability Management is a component of Microsoft Defender ATP, and provides both security administrators and security operations teams with unique value, including: - Real-time endpoint detection and response (EDR) insights correlated with endpoint vulnerabilities - Invaluable machine vulnerability context during incident investigations - Built-in remediation processes through Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) @@ -73,5 +73,4 @@ See [Microsoft Defender ATP icons](https://docs.microsoft.com/en-us/windows/secu ## Related topics - [Risk-based Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) - [Configuration score](configuration-score.md) -- [Configure Threat & Vulnerability Management](configure-and-manage-tvm.md) -- [Scenarios](threat-and-vuln-mgt-scenarios.md) \ No newline at end of file +- [Scenarios](threat-and-vuln-mgt-scenarios.md) From 8ffda3150dfb9a3ebb1ead8e539fe41a04bb10f3 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 13:58:10 -0700 Subject: [PATCH 252/349] Update tvm-dashboard-insights.md --- .../windows-defender-atp/tvm-dashboard-insights.md | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index d2487a9fed..50e925a2e1 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -36,9 +36,6 @@ You can use the Threat & Vulnerability Management capability in [Microsoft Defen - View exposure and configuration scores side-by-side with top security recommendations, software vulnerability, remediation activities, and exposed machines - Correlate EDR insights with endpoint vulnerabilities and process them - Select remediation options, triage and track the remediation tasks -- File and track exceptions ->[!Note] -> The exceptions workflow will be available in the coming months. ## Threat & Vulnerability Management in Microsoft Defender Security Center When you open the portal, you’ll see the main areas of the capability: @@ -56,16 +53,16 @@ Area | Description (1) Menu | Select menu to expand the navigation pane and see the names of the Threat and Vulnerability Management capabilities. (2) Threat & Vulnerability Management navigation pane | Use the navigation pane to move across the **Threat and Vulnerability Management Dashboard**, **Security recommendations**, **Remediation**, and **Software inventory**. **Dashboards** | Get a high-level view of the organization exposure score, MDATP configuration score, top remediation activities, top security recommendations, top vulnerable software, and top exposed machines data. -**Security recommendations** | See the list of security recommendations, their related components, insights, number or exposed devices, impact, and request for remediation. You can click each item on the list and it will open a flyout pane where you will see vulnerability details, and have the option to open the software page, see the remediation options, or create exceptions. -**Remediation** | See the remediation activity, related component, remediation type, status, due date, option to export the remediation progress data to CSV, exceptions, and its corresponding details. +**Security recommendations** | See the list of security recommendations, their related components, insights, number or exposed devices, impact, and request for remediation. You can click each item on the list and it will open a flyout pane where you will see vulnerability details, and have the option to open the software page, and see the remediation options. +**Remediation** | See the remediation activity, related component, remediation type, status, due date, option to export the remediation and process data to CSV. **Software inventory** | See the list of applications, versions, weaknesses, whether there’s an exploit found on the application, prevalence in the organization, how many were installed, how many exposed devices are there, and the numerical value of the impact. You can select each item in the list and opt to open the software page which shows the vulnerabilities and misconfigurations associated and its machine and version distribution details. (3) Threat & Vulnerability Management dashboard | Access the **Exposure score**, **Configuration score**, **Exposure distribution**, **Top security recommendations**, **Top vulnerable software**, **Top remediation activities**, **Top exposed machines**, and **Threat campaigns**. **Organization Exposure score** | See the current state of your organization’s device exposure to threats and vulnerabilities. Several factors affect your organization’s exposure score: weaknesses discovered in your devices, likelihood of your devices to be breached, value of the devices to your organization, and relevant alerts discovered with your devices. The goal is to lower down your organization’s exposure score to be more secure. To reduce the score, you need to remediate the related security configuration issues listed in the security recommendations. **MDATP Configuration score** | See the security posture of your organization’s operating system, applications, network, accounts and security controls. The goal is to increase your configuration score by remediating the related security configuration issues. You can click the bars and it will take you to the **Security reccommendation** page for details. **Machine exposure distribution** | See how many machines are exposed based on their exposure level. You can click the sections in the doughnut chart and it will take you to the **Machines list** page where you'll see the affected machine names, exposure level side by side with risk level, among other details such as domain, OS platform, its health state, when it was last seen, and its tags. -**Top security recommendations** | See the collated security recommendations which are sorted and prioritized based on your organization’s risk exposure and the urgency that it requires. You can drill down on the security recommendation to see the potential risks, list of exposed machines, and read the insights. Thus, providing you with an informed decision to either proceed with a remediation request or create an exception. Click **Show more** to see the rest of the security recommendations in the list. +**Top security recommendations** | See the collated security recommendations which are sorted and prioritized based on your organization’s risk exposure and the urgency that it requires. You can drill down on the security recommendation to see the potential risks, list of exposed machines, and read the insights. Thus, providing you with an informed decision to either proceed with a remediation request. Click **Show more** to see the rest of the security recommendations in the list. **Top vulnerable software** | Get real-time visibility into the organizational software inventory, with stack-ranked list of vulnerable software installed on your network’s devices and how they impact on your organizational exposure score. -**Top remediation activities** | Track the remediation activities generated from the security recommendations. You can click each item on the list and it will take you to the **Remediation** page where you'll see remediation and exception activity details. +**Top remediation activities** | Track the remediation activities generated from the security recommendations. You can click each item on the list and it will take you to the **Remediation** page where you'll see remediation activity details. **Top exposed machines** | See the exposed machine names and their exposure level. You can click the machine name and it will take you to the machine page where you can view the alerts, risks, incidents, security recommendations, installed software, discovered vulnerabilities associated with the exposed machines. You can also do other EDR-related tasks in it, such as: manage tags, initiate automated investigations, initiate a live response session, collect an investigation package, run antivirus scan, restrict app execution, and isolate machine. See [Microsoft Defender ATP icons](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection#windows-defender-atp-icons) for more information on the icons used throughout the portal. From bd90d51a9f3c7fe8be02a23f1a894314fcc9b22e Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 14:01:55 -0700 Subject: [PATCH 253/349] Update tvm-dashboard-insights.md --- .../windows-defender-atp/tvm-dashboard-insights.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index 50e925a2e1..7c6206afb2 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.author: dolmont -author: Dolcita Montemayor +author: DulceMVeluz ms.localizationpriority: medium manager: dansimp audience: ITPro From 1713aafd46a694f872c0d6000714502447102526 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 14:14:49 -0700 Subject: [PATCH 254/349] Update configuration-score.md --- .../configuration-score.md | 21 ++++++++----------- 1 file changed, 9 insertions(+), 12 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configuration-score.md b/windows/security/threat-protection/windows-defender-atp/configuration-score.md index fef9812d33..42febb951f 100644 --- a/windows/security/threat-protection/windows-defender-atp/configuration-score.md +++ b/windows/security/threat-protection/windows-defender-atp/configuration-score.md @@ -1,15 +1,15 @@ --- -title: Overview of Configuration score in Windows Defender Security Center +title: Overview of Configuration score in Microsoft Defender Security Center description: Expand your visibility into the overall security configuration posture of your organization -keywords: configuration score, wdatp configuration score, secure score, security controls, improvement opportunities, security configuration score over time, security posture, baseline +keywords: configuration score, mdatp configuration score, secure score, security controls, improvement opportunities, security configuration score over time, security posture, baseline search.product: Windows 10 search.appverid: met150 ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security -ms.author: Dolcita Montemayor -author: dolmont +ms.author: dolmont +author: DulceMVeluz ms.localizationpriority: medium manager: dansimp audience: ITPro @@ -19,14 +19,14 @@ ms.date: 04/11/2019 --- # Configuration score **Applies to:** -- [Windows Defender Advanced Threat Protection (Windows Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) +- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) [!include[Prerelease�information](prerelease.md)] >[!NOTE] > Secure score is now part of Threat & Vulnerability Management as Configuration score. We’ll keep the secure score page available for a few weeks. View the [Secure score](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/overview-secure-score-windows-defender-advanced-threat-protection) page. -The Windows Defender Advanced Threat Protection Configuration score gives you visibility and control over your organization's security posture based on security best practices. +The Microsoft Defender Advanced Threat Protection Configuration score gives you visibility and control over your organization's security posture based on security best practices. Your configuration score widget shows the collective security configuration state of your machines across the following categories: - Application @@ -45,18 +45,15 @@ What you'll see in the configuration score widget is the product of meticulous a From the widget, you'd be able to see which security aspect require attention. You can click the configuration score categories and it will take you to the **Security recommendations** page to see more details and understand the context of the issue. From there, you can take action based on security benchmarks. +## Improve your configuration score The goal is to improve your configuration score by remediating the issues in the security recommendations list. You can filter the view based on: - **Related component** - **Accounts**, **Application**, **Network**, **OS**, or **Security controls** -- **Status** - **Active** or **Exception** - **Remediation type** - **Configuration change** or **Software update** - -## Improve your configuration score - +To improve the score, you need to remediate the related security configuration issues listed in the security recommendations. ## Related topics - [Risk-based Threat & Vulnerability Management](windows-defender-atp/next-gen-threat-and-vuln-mgt.md) - [Threat & Vulnerability Management dashboard overview](tvm-dashboard-insights.md) -- [Configure Threat & Vulnerability Management](configure-and-manage-tvm.md) -- [Scenarios](threat-and-vuln-mgt-scenarios.md) \ No newline at end of file +- [Scenarios](threat-and-vuln-mgt-scenarios.md) From e7b9b6e866b35b9110d227b5b7c690aa72fce305 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 14:16:36 -0700 Subject: [PATCH 255/349] Update configuration-score.md --- .../windows-defender-atp/configuration-score.md | 3 --- 1 file changed, 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configuration-score.md b/windows/security/threat-protection/windows-defender-atp/configuration-score.md index 42febb951f..bd19fc65a7 100644 --- a/windows/security/threat-protection/windows-defender-atp/configuration-score.md +++ b/windows/security/threat-protection/windows-defender-atp/configuration-score.md @@ -50,9 +50,6 @@ The goal is to improve your configuration score by remediating the issues in the - **Related component** - **Accounts**, **Application**, **Network**, **OS**, or **Security controls** - **Remediation type** - **Configuration change** or **Software update** -To improve the score, you need to remediate the related security configuration issues listed in the security recommendations. - - ## Related topics - [Risk-based Threat & Vulnerability Management](windows-defender-atp/next-gen-threat-and-vuln-mgt.md) - [Threat & Vulnerability Management dashboard overview](tvm-dashboard-insights.md) From b53ddbd4cacf70818ab75c9f0c7e06691d82a677 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 15 Apr 2019 14:18:04 -0700 Subject: [PATCH 256/349] removed bad link --- .../how-wip-works-with-labels.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md b/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md index 4217c2c52e..f0e7da92ed 100644 --- a/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md +++ b/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md @@ -1,5 +1,5 @@ --- -title: How Windows Information Protection (WIP) protects files with sensitivive label (Windows 10) +title: How Windows Information Protection (WIP) protects files with a sensitivity label (Windows 10) description: Explains how Windows Information Protection works with other Microsoft information protection technologies to protect files that have a sensitivity label. keywords: sensitivity, labels, WIP, Windows Information Protection, EDP, Enterprise Data Protection ms.prod: w10 @@ -13,10 +13,10 @@ manager: dansimp audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual -ms.date: 04/15/2019 +ms.date: 02/26/2019 --- -# How Windows Information Protection (WIP) protects a file with sensitive information +# How Windows Information Protection (WIP) protects a file that has a sensitivity label **Applies to:** From 042892c590d1675abfad1ff428f85017d489e8ef Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 15 Apr 2019 14:20:12 -0700 Subject: [PATCH 257/349] edit --- .../windows-information-protection/how-wip-works-with-labels.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md b/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md index f0e7da92ed..cfcae5b9de 100644 --- a/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md +++ b/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md @@ -13,7 +13,7 @@ manager: dansimp audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual -ms.date: 02/26/2019 +ms.date: 04/15/2019 --- # How Windows Information Protection (WIP) protects a file that has a sensitivity label From 4a18680b9d3d07173882ba8f103a95119c97d5b9 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 14:26:34 -0700 Subject: [PATCH 258/349] Update index.md --- windows/security/threat-protection/index.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/security/threat-protection/index.md b/windows/security/threat-protection/index.md index 3dcf4f8311..f16e109f8d 100644 --- a/windows/security/threat-protection/index.md +++ b/windows/security/threat-protection/index.md @@ -42,7 +42,6 @@ This built-in capability uses a game-changing risk-based approach to the discove - [Risk-based Threat & Vulnerability Management](windows-defender-atp/next-gen-threat-and-vuln-mgt.md) - [What's in the dashboard and what it means for my organization](windows-defender-atp/tvm-dashboard-insights.md) - [Configuration score](windows-defender-atp/configuration-score.md) -- [Configure Threat & Vulnerability Management](windows-defender-atp/configure-and-manage-tvm.md) - [Scenarios](windows-defender-atp/threat-and-vuln-mgt-scenarios.md) From cd395e94ecae4911250e20c610c83a93eb5db657 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 14:28:31 -0700 Subject: [PATCH 259/349] Update TOC.md --- windows/security/threat-protection/windows-defender-atp/TOC.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/TOC.md b/windows/security/threat-protection/windows-defender-atp/TOC.md index 5ed7330eee..56a10629bb 100644 --- a/windows/security/threat-protection/windows-defender-atp/TOC.md +++ b/windows/security/threat-protection/windows-defender-atp/TOC.md @@ -3,8 +3,7 @@ ## [Overview](overview.md) ### [Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) #### [What's in the dashboard and what it means for my organization](windows-defender-atp/tvm-dashboard-insights.md) -#### [Configuration score](configuration-score.md) -#### [Configure Threat & Vulnerability Management](windows-defender-atp/config-and-manage-tvm.md) +#### [Configuration score](windows-defender-atp/configuration-score.md) #### [Scenarios](windows-defender-atp/threat-and-vuln-mgt-scenarios.md) From 8adea78546d13cc97dc267b6b126bb0a8747cd4c Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 14:32:06 -0700 Subject: [PATCH 260/349] Update threat-and-vuln-mgt-scenarios.md --- .../threat-and-vuln-mgt-scenarios.md | 57 +------------------ 1 file changed, 2 insertions(+), 55 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index d9694a0674..3714d44216 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.author: dolmont -author: Dolcita Montemayor +author: DulceMVeluz ms.localizationpriority: medium manager: dansimp audience: ITPro @@ -72,62 +72,9 @@ To lower down your threat and vulnerability exposure: >[!NOTE] > Secure score is now part of Threat & Vulnerability Management as configuration score. We’ll keep the secure score page available for a few weeks. View the [secure score](https://securitycenter.windows.com/securescore) page . -## Request for remediation and monitor its progress ->[!NOTE] -> Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) will be integrated with Threat & Vulnerability Management in the coming months. Upon inregration, this scenario requires that you are onboarded to Microsoft Intune or Microsoft System Center Configuration Manager (SCCM). If you are using SCCM, update your console to May version 1905. - -The Threat & Vulnerability Management capability in Windows Defender ATP bridges the gap between Security and IT Administrators through the remediation request workflow. -This capability allows you, the Security Administrator, to request for the IT Administrator to remediate a vulnerability or misconfiguration via Intune and SCCM with a click of a button. -Once requested, all the recommendation context (name, affected machines, justification, threat information) will generate a new security task in Microsoft Intune. - -To use this capability: - -1. Enable your Microsoft Intune connections. Navigate to **Settings** > **General** > **Advanced features**. Scroll down and look for **Microsoft Intune connection**. By default, the toggle is turned off. Turn your **Microsoft Intune** connection toggle on. - -2. From the navigation menu, select the **Threat & Vulnerability Management** icon, then select **Security recommendations**. This opens up the **Security recommendations** page. - -3. In the **Security recommendation** page, select what you need to remediate and then click **Remediation options** from the flyout page. - -4. Select **Open a ticket in Intune**, a due date, and add optional notes for the IT Administrator. Then, click **Submit request**. - -5. Notify your IT Administrator about the new request and have them log into Intune to approve or reject the request and start a package deployment - -6. View the status of the remediation request. Navigate to the **Remediation** page to view the activity progress. - - -## File for and manage exception -You can create exceptions for recommendations, as an alternative to requesting for remediation. - -There are various reasons why organizations might want to create exceptions for a recommendation. For example, a business or production need that prevents the company from applying the recommendation, the existence of a compensating or alternative control that provides the same level of protection that the recommendation would, a false positive, among other reasons. - -Exceptions can be created for both security update and configuration change recommendations. - -When an exception is created for a recommendation, the recommendation is no longer active. The recommendation state changes to Exception, and it no longer shows up in the security recommendations list - ->[!NOTE] -> You will still see the recommendations under exception by applying appropriate filters. - -1. Navigate to **Security recommendations** under the **Threat & Vulnerability Management** menu. - -2. Click the top-most recommendation. A side panel will open with the recommendation details. - -3. Click the **Create exception** button at the top of the side panel. - -4. In the exception creation side panel, fill in the following details: - - **Justification** – the reason for creating the exception, chosen from a drop-down list - - **Justification context** – additional textual context related to the justification - - **Exception duration** – the period of time during which this exception will be in effect. When the exception expires, the recommendation automatically becomes active again. - -5. Click **Submit**. A confirmation message at the top of the page will indicate that the exception has been created. - -6. View all your exceptions (current + past) by navigating to **Remediation** under the **Threat & Vulnerability Management** menu and clicking on the **Exceptions** tab. - -7. Click the exception that you created to view the details. - -8. Navigate to **Security recommendations** under the **Threat & Vulnerability Management** menu again and see that recommendation will not appear there anymore as it is currently under exception. ## Related topics - [Risk-based Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) - [Threat & Vulnerability Management dashboard overview](tvm-dashboard-insights.md) - [Configuration score](configuration-score.md) -- [Configure Threat & Vulnerability Management](configure-and-manage-tvm.md) + From 1053584c5beed278102a7ebdb550fbaea2fb6712 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 14:34:03 -0700 Subject: [PATCH 261/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 3714d44216..4463a6ac63 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -30,8 +30,9 @@ Ensure that your machines: - Have at least one security recommendation that can be viewed in the machine page - Are tagged or marked as co-managed - Have the following mandatory updates installed: - -- RS3 customers: [KB4493441](https://support.microsoft.com/en-us/help/4493441/windows-10-update-kb4493441) - -- RS4 customers: [KB4493464](https://support.microsoft.com/en-us/help/4493464) +:---|:--- +RS3 customers | [KB4493441](https://support.microsoft.com/en-us/help/4493441/windows-10-update-kb4493441) +RS4 customers | [KB4493464](https://support.microsoft.com/en-us/help/4493464) ## Reduce your threat and vulnerability exposure Threat & Vulnerability Management introduces a new exposure score metric which visually represents how exposed your machines are to imminent threats. From a879f72aaec2924de2350165e24191102ed608f8 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 14:35:37 -0700 Subject: [PATCH 262/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 4463a6ac63..fb36697bc0 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -30,6 +30,7 @@ Ensure that your machines: - Have at least one security recommendation that can be viewed in the machine page - Are tagged or marked as co-managed - Have the following mandatory updates installed: +Release | Link to updates :---|:--- RS3 customers | [KB4493441](https://support.microsoft.com/en-us/help/4493441/windows-10-update-kb4493441) RS4 customers | [KB4493464](https://support.microsoft.com/en-us/help/4493464) From 98c5fa8f5818d2d297c67b9e963b438c5be5131c Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 14:38:02 -0700 Subject: [PATCH 263/349] Update TOC.md --- windows/security/threat-protection/windows-defender-atp/TOC.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/TOC.md b/windows/security/threat-protection/windows-defender-atp/TOC.md index 56a10629bb..ce6f328b70 100644 --- a/windows/security/threat-protection/windows-defender-atp/TOC.md +++ b/windows/security/threat-protection/windows-defender-atp/TOC.md @@ -123,7 +123,6 @@ ### [Access the Windows Defender Security Center Community Center](community-windows-defender-advanced-threat-protection.md) ## [Configure and manage capabilities](onboard.md) -### [Configure Threat & Vulnerability Management](configure-and-manage-tvm.md) ### [Configure attack surface reduction](configure-attack-surface-reduction.md) ###Hardware-based isolation #### [System integrity](../windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md) From 3eb477adf1e8233ee240af7a549cabe0eb109b55 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 14:40:40 -0700 Subject: [PATCH 264/349] Update tvm-dashboard-insights.md --- .../windows-defender-atp/tvm-dashboard-insights.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index 7c6206afb2..38d824f2ac 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -58,7 +58,7 @@ Area | Description **Software inventory** | See the list of applications, versions, weaknesses, whether there’s an exploit found on the application, prevalence in the organization, how many were installed, how many exposed devices are there, and the numerical value of the impact. You can select each item in the list and opt to open the software page which shows the vulnerabilities and misconfigurations associated and its machine and version distribution details. (3) Threat & Vulnerability Management dashboard | Access the **Exposure score**, **Configuration score**, **Exposure distribution**, **Top security recommendations**, **Top vulnerable software**, **Top remediation activities**, **Top exposed machines**, and **Threat campaigns**. **Organization Exposure score** | See the current state of your organization’s device exposure to threats and vulnerabilities. Several factors affect your organization’s exposure score: weaknesses discovered in your devices, likelihood of your devices to be breached, value of the devices to your organization, and relevant alerts discovered with your devices. The goal is to lower down your organization’s exposure score to be more secure. To reduce the score, you need to remediate the related security configuration issues listed in the security recommendations. -**MDATP Configuration score** | See the security posture of your organization’s operating system, applications, network, accounts and security controls. The goal is to increase your configuration score by remediating the related security configuration issues. You can click the bars and it will take you to the **Security reccommendation** page for details. +**MDATP Configuration score** | See the security posture of your organization’s operating system, applications, network, accounts and security controls. The goal is to increase your configuration score by remediating the related security configuration issues. You can click the bars and it will take you to the **Security recommendation** page for details. **Machine exposure distribution** | See how many machines are exposed based on their exposure level. You can click the sections in the doughnut chart and it will take you to the **Machines list** page where you'll see the affected machine names, exposure level side by side with risk level, among other details such as domain, OS platform, its health state, when it was last seen, and its tags. **Top security recommendations** | See the collated security recommendations which are sorted and prioritized based on your organization’s risk exposure and the urgency that it requires. You can drill down on the security recommendation to see the potential risks, list of exposed machines, and read the insights. Thus, providing you with an informed decision to either proceed with a remediation request. Click **Show more** to see the rest of the security recommendations in the list. **Top vulnerable software** | Get real-time visibility into the organizational software inventory, with stack-ranked list of vulnerable software installed on your network’s devices and how they impact on your organizational exposure score. From 0070673f9518dce169f3e7a82ffa479b4ce5221c Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 14:50:31 -0700 Subject: [PATCH 265/349] Update index.md Added rebranding note --- windows/security/threat-protection/index.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/index.md b/windows/security/threat-protection/index.md index f16e109f8d..bb95d807f2 100644 --- a/windows/security/threat-protection/index.md +++ b/windows/security/threat-protection/index.md @@ -14,6 +14,9 @@ ms.localizationpriority: medium # Threat Protection [Windows Defender Advanced Threat Protection (Windows Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) is a unified platform for preventative protection, post-breach detection, automated investigation, and response. Windows Defender ATP protects endpoints from cyber threats; detects advanced attacks and data breaches, automates security incidents and improves security posture. +>[!Note] +> The Windows Defender Security Center is currently going through rebranding. All references to Windows Defender will be replaced with Microsoft Defender. You will see that the updates roll in the user interface and in the documentation library in next few months. +

    Windows Defender ATP

This setting has different behavior for mobile devices and desktops. + + - **On mobile devices.** When an employee reaches the value set here, the device is wiped of corporate data. + + - **On desktop devices.** When an employee reaches the value set here, the desktop is put into BitLocker recovery mode, instead of being wiped. You must have BitLocker installed on the device or this setting is ignored. + + - **Maximum amount of time (in minutes) allowed after the device is idle that will cause the device to become PIN or password locked.** Enter a numerical value for how many days can pass before a PIN must be changed. If you enter a value of 0, the device never becomes PIN or password locked while idle. + + >[!NOTE] + >You can set this value to be anything; however, it can't be longer than the time specified by the **Settings** app. If you exceed the maximum timeout value, this setting is ignored. + + ## Related topics - [How to collect Windows Information Protection (WIP) audit event logs](collect-wip-audit-event-logs.md) From c82cb52ac46bb05489ca186a4bd0076a2e77f01d Mon Sep 17 00:00:00 2001 From: "Jan Ketil Skanke [MVP]" Date: Thu, 11 Apr 2019 18:45:37 +0200 Subject: [PATCH 216/349] Surface Hubs supports Automatic Enrollment to Intune Deleted the following wrong statement, and added in the correct statement with links. > [!IMPORTANT] > Surface Hub does not currently support automatic enrollment to Microsoft Intune through Azure AD join. If your organization automatically enrolls Azure AD joined devices into Intune, you must disable this policy for Surface Hub before joining the device to Azure AD. --- .../surface-hub/admin-group-management-for-surface-hub.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/devices/surface-hub/admin-group-management-for-surface-hub.md b/devices/surface-hub/admin-group-management-for-surface-hub.md index 5771b3f3c5..05e00d56fe 100644 --- a/devices/surface-hub/admin-group-management-for-surface-hub.md +++ b/devices/surface-hub/admin-group-management-for-surface-hub.md @@ -64,8 +64,11 @@ Surface Hubs use Azure AD join to: - Grant admin rights to the appropriate users in your Azure AD tenant. - Backup the device's BitLocker recovery key by storing it under the account that was used to Azure AD join the device. See [Save your BitLocker key](save-bitlocker-key-surface-hub.md) for details. -> [!IMPORTANT] -> Surface Hub does not currently support automatic enrollment to Microsoft Intune through Azure AD join. If your organization automatically enrolls Azure AD joined devices into Intune, you must disable this policy for Surface Hub before joining the device to Azure AD. +### Automatic enrollment via Azure Active Directory join + +Surface Hub now supports the ability to automatically enroll in Intune by joining the device to Azure Active Directory. + +For more information, see [Enable Windows 10 automatic enrollment](https://docs.microsoft.com/intune/windows-enroll#enable-windows-10-automatic-enrollment). ### Which should I choose? From a382aa03e426e22e73097ddf11a5549c74973fef Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 11 Apr 2019 21:58:17 +0500 Subject: [PATCH 217/349] Updated Location I have updated the location in the doc where the policy has a different location while creating a group policy on the server. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/3180 --- .../interactive-logon-machine-inactivity-limit.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/security/threat-protection/security-policy-settings/interactive-logon-machine-inactivity-limit.md b/windows/security/threat-protection/security-policy-settings/interactive-logon-machine-inactivity-limit.md index 14740a3224..08badffc52 100644 --- a/windows/security/threat-protection/security-policy-settings/interactive-logon-machine-inactivity-limit.md +++ b/windows/security/threat-protection/security-policy-settings/interactive-logon-machine-inactivity-limit.md @@ -40,6 +40,8 @@ Set the time for elapsed user-input inactivity based on the device’s usage and Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Security Options +Computer Configuration\\Policies\\Windows Settings\\Security Settings\\Local Policies\\Security Options (While creating and linking group policy on server) + ### Default values The following table lists the actual and effective default values for this policy. Default values are also listed on the policy’s property page. From 9ebfee95c0b0d4f73cb8b9998418e1911ffd480f Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 11 Apr 2019 10:04:40 -0700 Subject: [PATCH 218/349] added differences between MDM and MAM --- .../create-wip-policy-using-intune-azure.md | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md index 6d50a3b1a9..9bd9bff264 100644 --- a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md +++ b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md @@ -23,12 +23,19 @@ ms.date: 04/11/2019 Microsoft Intune has an easy way to create and deploy a Windows Information Protection (WIP) policy. You can choose which apps to protect, the level of protection, and how to find enterprise data on the network. The devices can be fully managed by Mobile Device Management (MDM), or managed by Mobile Application Management (MAM), where Intune only manages the apps on a user's personal device. ->[!NOTE] ->If the same user and device are targeted for both MDM and MAM, the MDM policy will be applied to devices joined to Azure AD. For personal devices that are workplace-joined (that is, added by using **Settings** > **Email & accounts** > **Add a work or school account**). the MAM-only policy will be preferred but it's possible to upgrade the device management to MDM in **Settings**. Windows Home edition only supports WIP for MAM-only; upgrading to MDM policy on Home edition will revoke WIP-protected data access. MAM supports only one user per device. +## Differences between MDM and MAM for WIP + +- If the same user and device are targeted for both MDM and MAM, the MDM policy will be applied to devices joined to Azure AD. For personal devices that are workplace-joined (that is, added by using **Settings** > **Email & accounts** > **Add a work or school account**), the MAM-only policy will be preferred but it's possible to upgrade the device management to MDM in **Settings**. Windows Home edition only supports WIP for MAM-only; upgrading to MDM policy on Home edition will revoke WIP-protected data access. +- MAM supports only one user per device. +- MAM can only manage [enlightened apps](enlightened-microsoft-apps-and-wip.md) +- MAM has additional **Access** settings for Windows Hello for Business +- MAM can [selectively wipe company data](https://docs.microsoft.com/intune/apps-selective-wipe) from a user's personal device +- MAM requires an [Azure Active Direcory (Azure AD) Premium license](https://docs.microsoft.com/azure/active-directory/fundamentals/active-directory-whatis#what-are-the-azure-ad-licenses) +- An Azure AD Premium license is also required for WIP auto-recovery, where a device can re-enroll and re-gain access to protected data. WIP auto-recovery depends on Azure AD registration to back up the encryption keys, which requires device auto-enrollment with MDM. ## Prerequisites -Before you can create a WIP policy using Intune, you need to configure an MDM or MAM provider in Azure Active Directory (Azure AD). MAM requires an [Azure Active Direcory (Azure AD) Premium license](https://docs.microsoft.com/azure/active-directory/fundamentals/active-directory-whatis#what-are-the-azure-ad-licenses). An Azure AD Premium license is also required for WIP auto-recovery, where a device can re-enroll and re-gain access to protected data. WIP auto-recovery depends on Azure AD registration to back up the encryption keys, which requires device auto-enrollment with MDM. +Before you can create a WIP policy using Intune, you need to configure an MDM or MAM provider in Azure Active Directory (Azure AD). ## Configure the MDM or MAM provider From b3edf52829f9e599b1bf2c87432b2e8c0c65f457 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 11 Apr 2019 10:07:15 -0700 Subject: [PATCH 219/349] removed bad link to Office IRM --- .../windows-information-protection/how-wip-works-with-labels.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md b/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md index bcad37a020..f0e7da92ed 100644 --- a/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md +++ b/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md @@ -34,8 +34,6 @@ Microsoft information protection technologies include: - [Windows Information Protection (WIP)](protect-enterprise-data-using-wip.md) is built in to Windows 10 and protects local data at rest on endpoint devices, and manages apps to protect local data in use. Data that leaves the endpoint device, such as email attachment, is not protected by WIP. -- [Office 365 Information Protection](https://docs.microsoft.com/office365/securitycompliance/office-365-info-protection-for-gdpr-overview) is a solution to classify, protect, and monitor personal data in Office 365. - - [Azure Information Protection](https://docs.microsoft.com/azure/information-protection/what-is-information-protection) is a cloud-based solution that can be purchased either standalone or as part of Microsoft 365 Enterprise. It helps an organization classify and protect its documents and emails by applying labels. Azure Information Protection is applied directly to content, and roams with the content as it's moved between locations and cloud services. - [Microsoft Cloud App Security](https://docs.microsoft.com/cloud-app-security/what-is-cloud-app-security) is a cloud access security broker (CASB) solution that allows you to discover, classify, protect, and monitor user data in first-party and third-party Software-as-a-Service (SaaS) apps used by your organization. From e5573c6e9575fa70c97f5af6b4316f01fbcad543 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 11 Apr 2019 10:07:51 -0700 Subject: [PATCH 220/349] dates --- .../windows-information-protection/how-wip-works-with-labels.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md b/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md index f0e7da92ed..8b4b4b3ed0 100644 --- a/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md +++ b/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md @@ -13,7 +13,7 @@ manager: dansimp audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual -ms.date: 02/26/2019 +ms.date: 04/11/2019 --- # How Windows Information Protection (WIP) protects a file that has a sensitivity label From dca5ffc9504516c6805de49afd9d72ba555795e9 Mon Sep 17 00:00:00 2001 From: Louie Mayor Date: Thu, 11 Apr 2019 17:20:33 +0000 Subject: [PATCH 221/349] Updated advanced-hunting-reference-windows-defender-advanced-threat-protection.md --- ...g-reference-windows-defender-advanced-threat-protection.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/advanced-hunting-reference-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/advanced-hunting-reference-windows-defender-advanced-threat-protection.md index e513f42e95..e4ad2bca0f 100644 --- a/windows/security/threat-protection/windows-defender-atp/advanced-hunting-reference-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/advanced-hunting-reference-windows-defender-advanced-threat-protection.md @@ -75,6 +75,8 @@ To effectively build queries that span multiple tables, you need to understand t | Ipv4Dhcp | string | IPv4 address of DHCP server | | Ipv6Dhcp | string | IPv6 address of DHCP server | | IsAzureADJoined | boolean | Boolean indicator of whether machine is joined to the Azure Active Directory | +| IsAzureInfoProtectionApplied | boolean | Indicates whether the file is encrypted by Azure Information Protection | +| IsWindowsInfoProtectionApplied | boolean | Indicates whether Windows Information Protection (WIP) policies apply to the file | | LocalIP | string | IP address assigned to the local machine used during communication | | LocalPort | int | TCP port on the local machine used during communication | | LocalIPType | string | Type of IP address, for example Public, Private, Reserved, Loopback, Teredo, FourToSixMapping, and Broadcast | @@ -114,6 +116,8 @@ To effectively build queries that span multiple tables, you need to understand t | RemoteUrl | string | URL or fully qualified domain name (FQDN) that was being connected to | | ReportId | long | Event identifier based on a repeating counter. To identify unique events, this column must be used in conjunction with the ComputerName and EventTime columns. | | Severity | string | Indicates the potential impact (high, medium, or low) of the threat indicator or breach activity identified by the alert | +| SensitivityLabel | string | Label applied to an email, file, or other content to classify it for information protection | +| SensitivitySubLabel | string | Sublabel applied to an email, file, or other content to classify it for information protection; sensitivity sublabels are grouped under sensitivity labels but are treated independently | | SHA1 | string | SHA-1 of the file that the recorded action was applied to | | SHA256 | string | SHA-256 of the file that the recorded action was applied to. This field is usually not populated—use the SHA1 column when available. | | RegistryMachineTag | string | Machine tag added through the registry | From 82aea0355540717e117b663ea8807ba71423d461 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 11 Apr 2019 13:53:00 -0700 Subject: [PATCH 222/349] added disclaimer --- .../create-windows-firewall-rules-in-intune.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md index c8b51339d7..59c112d9c6 100644 --- a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md +++ b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md @@ -12,7 +12,7 @@ manager: dansimp audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual -ms.date: 03/28/2019 +ms.date: 04/11/2019 --- # Create Windows Firewall rules in Intune @@ -20,6 +20,9 @@ ms.date: 03/28/2019 **Applies to** - Windows 10 +>[!IMPORTANT] +>This information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + To get started, open Device Configuration in Intune, then create a new profile. Choose Windows 10 as the platform, and Endpoint Protection as the profile type. Select Windows Defender Firewall. From b282535b516d562eff916e9d19934a1c08208a87 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 11 Apr 2019 21:34:52 +0000 Subject: [PATCH 223/349] Updated manage-automation-allowed-blocked-list-windows-defender-advanced-threat-protection.md --- ...d-list-windows-defender-advanced-threat-protection.md | 9 +++------ 1 file changed, 3 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/manage-automation-allowed-blocked-list-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/manage-automation-allowed-blocked-list-windows-defender-advanced-threat-protection.md index 5afed1e6df..78b40b3a95 100644 --- a/windows/security/threat-protection/windows-defender-atp/manage-automation-allowed-blocked-list-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/manage-automation-allowed-blocked-list-windows-defender-advanced-threat-protection.md @@ -37,12 +37,9 @@ You can define the conditions for when entities are identified as malicious or s ## Create an allowed or blocked list 1. In the navigation pane, select **Settings** > **Automation allowed/blocked list**. -2. Select the tab of the type of entity you'd like to create an exclusion for. You can choose any of the following entities: - - File hash - - Certificate - - IP address - -3. Click **Add system exclusion**. +2. Select the tab of the type of entity you'd like to create an exclusion for. Currently, you can add a rule for certificates. + +3. Select **Add allowed/blocked list rule**. 4. For each attribute specify the exclusion type, details, and their corresponding required values. From 6a1ab8964bcbcc9c12689c4332aeff72f896b575 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 11 Apr 2019 22:46:07 +0000 Subject: [PATCH 224/349] Added configuration-score.md --- .../configuration-score.md | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 windows/security/threat-protection/windows-defender-atp/configuration-score.md diff --git a/windows/security/threat-protection/windows-defender-atp/configuration-score.md b/windows/security/threat-protection/windows-defender-atp/configuration-score.md new file mode 100644 index 0000000000..f99a2871b0 --- /dev/null +++ b/windows/security/threat-protection/windows-defender-atp/configuration-score.md @@ -0,0 +1,19 @@ +--- +title: Overview of Configuration score in Windows Defender Security Center +description: Expand your visibility into the overall security configuration posture of your organization +keywords: secure score, security controls, improvement opportunities, security configuration score over time, configuration score, security posture, baseline +search.product: eADQiWindows 10XVcnh +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: Dolcita Montemayor +author: dolmont +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/11/2019 +--- From 810dd4417d62168e195ed707974be12a5c4b1d14 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 11 Apr 2019 22:47:39 +0000 Subject: [PATCH 225/349] Updated configuration-score.md --- .../windows-defender-atp/configuration-score.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/configuration-score.md b/windows/security/threat-protection/windows-defender-atp/configuration-score.md index f99a2871b0..9c09135a61 100644 --- a/windows/security/threat-protection/windows-defender-atp/configuration-score.md +++ b/windows/security/threat-protection/windows-defender-atp/configuration-score.md @@ -17,3 +17,11 @@ ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 04/11/2019 --- + + + +## Related topics +- [Threat & Vulnerability Management dashboard overview](tvm-dashboard-insights.md) +- [Configuration score](configuration-score.md) +- [Configure Threat & Vulnerability Management](configure-and-manage-tvm.md) +- [Scenarios](threat-and-vuln-mgt-scenarios.md) \ No newline at end of file From c0fb6a7d52ab6530b6017f918e83e20c72393a75 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Thu, 11 Apr 2019 22:49:23 +0000 Subject: [PATCH 226/349] Updated configuration-score.md --- .../windows-defender-atp/configuration-score.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configuration-score.md b/windows/security/threat-protection/windows-defender-atp/configuration-score.md index 9c09135a61..507dd35077 100644 --- a/windows/security/threat-protection/windows-defender-atp/configuration-score.md +++ b/windows/security/threat-protection/windows-defender-atp/configuration-score.md @@ -17,11 +17,16 @@ ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 04/11/2019 --- +# Configuration score +**Applies to:** +- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) + +[!include[Prerelease�information](prerelease.md)] ## Related topics +- [Risk-based Threat & Vulnerability Management](windows-defender-atp/next-gen-threat-and-vuln-mgt.md) - [Threat & Vulnerability Management dashboard overview](tvm-dashboard-insights.md) -- [Configuration score](configuration-score.md) - [Configure Threat & Vulnerability Management](configure-and-manage-tvm.md) - [Scenarios](threat-and-vuln-mgt-scenarios.md) \ No newline at end of file From a8b2c36761f3f04705ebcf260cb9db6a0888544c Mon Sep 17 00:00:00 2001 From: Max Velitchko Date: Thu, 11 Apr 2019 16:14:39 -0700 Subject: [PATCH 227/349] Fix for https://github.com/MicrosoftDocs/windows-itpro-docs/issues/3183 --- .../microsoft-defender-atp-mac.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac.md b/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac.md index 84ebbf6049..3c3128dfb3 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac.md +++ b/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac.md @@ -347,13 +347,13 @@ For example, this script removes Microsoft Defender ATP from the /Applications d ``` echo "Is WDAV installed?" -ls -ld '/Applications/Microsoft Defender.app' 2>/dev/null +ls -ld '/Applications/Microsoft Defender ATP.app' 2>/dev/null echo "Uninstalling WDAV..." -rm -rf '/Applications/Microsoft Defender.app' +rm -rf '/Applications/Microsoft Defender ATP.app' echo "Is WDAV still installed?" -ls -ld '/Applications/Microsoft Defender.app' 2>/dev/null +ls -ld '/Applications/Microsoft Defender ATP.app' 2>/dev/null echo "Done!" ``` From ed7f12374bf62681daafbe8fb2d4eedf0d1bdc70 Mon Sep 17 00:00:00 2001 From: Liza Poggemeyer Date: Thu, 11 Apr 2019 16:21:40 -0700 Subject: [PATCH 228/349] fixed broken links in Edge FAQ --- browsers/edge/microsoft-edge-faq.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/browsers/edge/microsoft-edge-faq.md b/browsers/edge/microsoft-edge-faq.md index e3a128b0ac..d862020dcc 100644 --- a/browsers/edge/microsoft-edge-faq.md +++ b/browsers/edge/microsoft-edge-faq.md @@ -26,10 +26,10 @@ For more information on how Internet Explorer and Microsoft Edge work together t [Enterprise Mode](https://docs.microsoft.com/internet-explorer/ie11-deploy-guide/enterprise-mode-overview-for-ie11) helps you run many legacy web applications with better backward compatibility. You can configure both Microsoft Edge and Internet Explorer to use the same Enterprise Mode Site List, switching seamlessly between browsers to support both modern and legacy web apps. ## How do I customize Microsoft Edge and related settings for my organization? -You can use Group Policy or Microsoft Intune to manage settings related to Microsoft Edge, such as security settings, folder redirection, and preferences. See [Group Policy and Mobile Device Management (MDM) settings for Microsoft Edge](/group-policies/index.md) for a list of policies currently available for Microsoft Edge and configuration information. Note that the preview release of Chromium-based Microsoft Edge might not include management policies or other enterprise functionality; our focus during the preview is modern browser fundamentals. +You can use Group Policy or Microsoft Intune to manage settings related to Microsoft Edge, such as security settings, folder redirection, and preferences. See [Group Policy and Mobile Device Management (MDM) settings for Microsoft Edge](https://docs.microsoft.com/microsoft-edge/deploy/group-policies/) for a list of policies currently available for Microsoft Edge and configuration information. Note that the preview release of Chromium-based Microsoft Edge might not include management policies or other enterprise functionality; our focus during the preview is modern browser fundamentals. ## Is Adobe Flash supported in Microsoft Edge? -Adobe Flash is currently supported as a built-in feature of Microsoft Edge on PCs running Windows 10. In July 2017, Adobe announced that Flash support will end after 2020. With this change to Adobe support, we’ve started to phase Flash out of Microsoft Edge by adding the [Configure the Adobe Flash Click-to-Run setting group policy](/available-policies.md#configure-the-adobe-flash-click-to-run-setting) - this lets you control which websites can run Adobe Flash content. +Adobe Flash is currently supported as a built-in feature of Microsoft Edge on PCs running Windows 10. In July 2017, Adobe announced that Flash support will end after 2020. With this change to Adobe support, we’ve started to phase Flash out of Microsoft Edge by adding the [Configure the Adobe Flash Click-to-Run setting group policy](https://docs.microsoft.com/microsoft-edge/deploy/available-policies#configure-the-adobe-flash-click-to-run-setting) - this lets you control which websites can run Adobe Flash content. To learn more about Microsoft’s plan for phasing Flash out of Microsoft Edge and Internet Explorer, see [The End of an Era — Next Steps for Adobe Flash](https://blogs.windows.com/msedgedev/2017/07/25/flash-on-windows-timeline/#3Bcc3QjRw0l7XsZ4.97) (blog article). From 1655376e83635677608b44dfc20294169441f88f Mon Sep 17 00:00:00 2001 From: Max Velitchko Date: Thu, 11 Apr 2019 17:26:24 -0700 Subject: [PATCH 229/349] PR feedback --- .../windows-defender-antivirus/microsoft-defender-atp-mac.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac.md b/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac.md index 3c3128dfb3..fbe8f28763 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac.md +++ b/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac.md @@ -56,7 +56,7 @@ SIP is a built-in macOS security feature that prevents low-level tampering with ## Installation and configuration overview There are various methods and deployment tools that you can use to install and configure Microsoft Defender ATP for Mac. In general you'll need to take the following steps: - - Ensure you have a Windows Defender ATP subscription and have access to the ATP Portal + - Ensure you have a Windows Defender ATP subscription and have access to the Windows Defender ATP Portal - Deploy Microsoft Defender ATP for Mac using one of the following deployment methods: * [Microsoft Intune based deployment](#microsoft-intune-based-deployment) * [JAMF based deployment](#jamf-based-deployment) From e7143d234d5bc936699087aa74ce5910809df6d3 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Fri, 12 Apr 2019 08:46:03 +0500 Subject: [PATCH 230/349] update use-windows-event-forwarding-to-assist-in-intrusion-detection.md --- ...ndows-event-forwarding-to-assist-in-intrusion-detection.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/security/threat-protection/use-windows-event-forwarding-to-assist-in-intrusion-detection.md b/windows/security/threat-protection/use-windows-event-forwarding-to-assist-in-intrusion-detection.md index 12b4fe0205..3a5a569819 100644 --- a/windows/security/threat-protection/use-windows-event-forwarding-to-assist-in-intrusion-detection.md +++ b/windows/security/threat-protection/use-windows-event-forwarding-to-assist-in-intrusion-detection.md @@ -13,6 +13,10 @@ ms.localizationpriority: medium # Use Windows Event Forwarding to help with intrusion detection +**Applies to** +- Windows 10 +- Windows Server 2016 + Learn about an approach to collect events from devices in your organization. This article talks about events in both normal operations and when an intrusion is suspected. Windows Event Forwarding (WEF) reads any operational or administrative event log on a device in your organization and forwards the events you choose to a Windows Event Collector (WEC) server. From fd9f712ad5091fa0823da78efdee61fd04d5c41c Mon Sep 17 00:00:00 2001 From: Lindsay <45809756+lindspea@users.noreply.github.com> Date: Fri, 12 Apr 2019 10:14:23 +0200 Subject: [PATCH 231/349] Update distribute-offline-apps.md Added comma. --- store-for-business/distribute-offline-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/store-for-business/distribute-offline-apps.md b/store-for-business/distribute-offline-apps.md index ff1b7866b0..e2c2bbca71 100644 --- a/store-for-business/distribute-offline-apps.md +++ b/store-for-business/distribute-offline-apps.md @@ -64,7 +64,7 @@ There are several items to download or create for offline-licensed apps. The app 1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com/) or [Microsoft Store for Education](https://educationstore.microsoft.com). 2. Click **Manage**, and then choose **Settings**. -3. Under **Shopping Experience** set **Show offline apps** to **On**. +3. Under **Shopping Experience**, set **Show offline apps** to **On**. 4. Click **Shop for my group**. Search for the required inbox-app, select it, change the License type to **Offline** and click **Get the app**, which will add the app to your inventory. 5. Click **Manage**. You now have access to download the appx bundle package metadata & license file. 6. Go to **Products & services**, **Apps & software** (the list may be empty until after some time it will auto-populate with a few office type apps) From e29fb46cac29b99d09d678152b359fab72f15e9b Mon Sep 17 00:00:00 2001 From: Lindsay <45809756+lindspea@users.noreply.github.com> Date: Fri, 12 Apr 2019 10:30:46 +0200 Subject: [PATCH 232/349] Update distribute-offline-apps.md Added comma --- store-for-business/distribute-offline-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/store-for-business/distribute-offline-apps.md b/store-for-business/distribute-offline-apps.md index e2c2bbca71..540b0f5d24 100644 --- a/store-for-business/distribute-offline-apps.md +++ b/store-for-business/distribute-offline-apps.md @@ -65,7 +65,7 @@ There are several items to download or create for offline-licensed apps. The app 1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com/) or [Microsoft Store for Education](https://educationstore.microsoft.com). 2. Click **Manage**, and then choose **Settings**. 3. Under **Shopping Experience**, set **Show offline apps** to **On**. -4. Click **Shop for my group**. Search for the required inbox-app, select it, change the License type to **Offline** and click **Get the app**, which will add the app to your inventory. +4. Click **Shop for my group**. Search for the required inbox-app, select it, change the License type to **Offline**, and click **Get the app**, which will add the app to your inventory. 5. Click **Manage**. You now have access to download the appx bundle package metadata & license file. 6. Go to **Products & services**, **Apps & software** (the list may be empty until after some time it will auto-populate with a few office type apps) From 1b90f8bcb5a110ef20cab3fe3c5a75c20fe44462 Mon Sep 17 00:00:00 2001 From: Lindsay <45809756+lindspea@users.noreply.github.com> Date: Fri, 12 Apr 2019 10:46:01 +0200 Subject: [PATCH 233/349] Update distribute-offline-apps.md Added commas and wording. --- store-for-business/distribute-offline-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/store-for-business/distribute-offline-apps.md b/store-for-business/distribute-offline-apps.md index 540b0f5d24..5b9af1645f 100644 --- a/store-for-business/distribute-offline-apps.md +++ b/store-for-business/distribute-offline-apps.md @@ -67,7 +67,7 @@ There are several items to download or create for offline-licensed apps. The app 3. Under **Shopping Experience**, set **Show offline apps** to **On**. 4. Click **Shop for my group**. Search for the required inbox-app, select it, change the License type to **Offline**, and click **Get the app**, which will add the app to your inventory. 5. Click **Manage**. You now have access to download the appx bundle package metadata & license file. -6. Go to **Products & services**, **Apps & software** (the list may be empty until after some time it will auto-populate with a few office type apps) +6. Go to **Products & services**, and select **Apps & software** (the list may be empty, but it will auto-populate after some time with a few office type apps). - **To download app metadata**: Choose the language for the app metadata, and then click **Download**. Save the downloaded app metadata. This is optional. - **To download app package**: Click to expand the package details information, choose the Platform and Architecture combination that you need for your organization, and then click **Download**. Save the downloaded app package. This is required. From 53f105e2a7ce9c37e2b4656a6a92433d5975115f Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 12 Apr 2019 10:50:45 -0700 Subject: [PATCH 234/349] removing 2016 We can just say Windows Server to apply to all versions --- ...windows-event-forwarding-to-assist-in-intrusion-detection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/use-windows-event-forwarding-to-assist-in-intrusion-detection.md b/windows/security/threat-protection/use-windows-event-forwarding-to-assist-in-intrusion-detection.md index 3a5a569819..024554261c 100644 --- a/windows/security/threat-protection/use-windows-event-forwarding-to-assist-in-intrusion-detection.md +++ b/windows/security/threat-protection/use-windows-event-forwarding-to-assist-in-intrusion-detection.md @@ -15,7 +15,7 @@ ms.localizationpriority: medium **Applies to** - Windows 10 -- Windows Server 2016 +- Windows Server Learn about an approach to collect events from devices in your organization. This article talks about events in both normal operations and when an intrusion is suspected. From d1673904dc742b0e9911a507843d3d3dc275bc38 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 12 Apr 2019 18:43:19 +0000 Subject: [PATCH 235/349] Updated TOC.md --- .../security/threat-protection/windows-defender-atp/TOC.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/TOC.md b/windows/security/threat-protection/windows-defender-atp/TOC.md index 5dd07a5c83..73d1ac9dae 100644 --- a/windows/security/threat-protection/windows-defender-atp/TOC.md +++ b/windows/security/threat-protection/windows-defender-atp/TOC.md @@ -2,6 +2,11 @@ ## [Overview](overview.md) ### [Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) +#### [What's in the dashboard and what it means for my organization](windows-defender-atp/tvm-dashboard-insights.md) +#### [Configuration score](configuration-score.md) +#### [Configure Threat & Vulnerability Management](windows-defender-atp/config-and-manage-tvm.md) +#### [Scenarios](windows-defender-atp/threat-and-vuln-mgt-scenarios.md) + ### [Attack surface reduction](overview-attack-surface-reduction.md) #### [Hardware-based isolation](overview-hardware-based-isolation.md) ##### [Application isolation](../windows-defender-application-guard/wd-app-guard-overview.md) From 4c8c5dae409709f40b56d866e8ad5bb8e88fad4b Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 12 Apr 2019 18:44:48 +0000 Subject: [PATCH 236/349] Updated TOC.md --- windows/security/threat-protection/windows-defender-atp/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/windows-defender-atp/TOC.md b/windows/security/threat-protection/windows-defender-atp/TOC.md index 73d1ac9dae..5ed7330eee 100644 --- a/windows/security/threat-protection/windows-defender-atp/TOC.md +++ b/windows/security/threat-protection/windows-defender-atp/TOC.md @@ -7,6 +7,7 @@ #### [Configure Threat & Vulnerability Management](windows-defender-atp/config-and-manage-tvm.md) #### [Scenarios](windows-defender-atp/threat-and-vuln-mgt-scenarios.md) + ### [Attack surface reduction](overview-attack-surface-reduction.md) #### [Hardware-based isolation](overview-hardware-based-isolation.md) ##### [Application isolation](../windows-defender-application-guard/wd-app-guard-overview.md) From c9ef017ff8f3b49b9ff04ac6c1f7f8e59f0f4301 Mon Sep 17 00:00:00 2001 From: Dolcita Montemayor Date: Fri, 12 Apr 2019 18:51:57 +0000 Subject: [PATCH 237/349] Updated index.md --- windows/security/threat-protection/index.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/index.md b/windows/security/threat-protection/index.md index b8472d1f00..3dcf4f8311 100644 --- a/windows/security/threat-protection/index.md +++ b/windows/security/threat-protection/index.md @@ -41,8 +41,8 @@ ms.localizationpriority: medium This built-in capability uses a game-changing risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. - [Risk-based Threat & Vulnerability Management](windows-defender-atp/next-gen-threat-and-vuln-mgt.md) - [What's in the dashboard and what it means for my organization](windows-defender-atp/tvm-dashboard-insights.md) -- [Configuration score](configuration-score.md) -- [Configure Threat & Vulnerability Management](windows-defender-atp/config-and-manage-tvm.md) +- [Configuration score](windows-defender-atp/configuration-score.md) +- [Configure Threat & Vulnerability Management](windows-defender-atp/configure-and-manage-tvm.md) - [Scenarios](windows-defender-atp/threat-and-vuln-mgt-scenarios.md) From 7a16dede88fb56d9aaf15c63e267f67a792d11ba Mon Sep 17 00:00:00 2001 From: "H. Poulsen" Date: Fri, 12 Apr 2019 12:26:46 -0700 Subject: [PATCH 238/349] Updated latest news --- windows/deployment/update/windows-as-a-service.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/windows-as-a-service.md b/windows/deployment/update/windows-as-a-service.md index 0b1327b761..c020f63f0f 100644 --- a/windows/deployment/update/windows-as-a-service.md +++ b/windows/deployment/update/windows-as-a-service.md @@ -18,14 +18,15 @@ Find the tools and resources you need to help deploy and support Windows as a se Find the latest and greatest news on Windows 10 deployment and servicing. -**Working to make Windows updates clear and transparent** -> [!VIDEO https://www.youtube-nocookie.com/embed/u5P20y39DrA] +**Discovering the Windows 10 Update history pages** +> [!VIDEO https://www.youtube-nocookie.com/embed/GADIXBf9R58] Everyone wins when transparency is a top priority. We want you to know when updates are available, as well as alert you to any potential issues you may encounter during or after you install an update. The Windows update history page is for anyone looking to gain an immediate, precise understanding of particular Windows update issues. The latest news:


Threat & Vulnerability Management
 - -

Attack surface reduction

Attack surface reduction

Next generation protection

Endpoint detection and response

Automated investigation and remediation
By design, files in the Windows directory (%windir% or C:/Windows) cannot be encrypted because they need to be accessed by any user. If a file in the Windows directory gets encypted by one user, other users can't access it. + By design, files in the Windows directory tree (%windir% or C:\Windows) cannot be encrypted because they need to be accessed by the system even when no user is signed in. If a file in the Windows directory gets encrypted by one user, the system and other users can't access it. Any attempt to encrypt a file in the Windows directory will return a file access denied error. But if you copy or drag and drop an encrypted file to the Windows directory, it will retain encryption to honor the intent of the owner.
By design, files in the Windows directory tree (%windir% or C:\Windows) cannot be encrypted because they need to be accessed by the system even when no user is signed in. If a file in the Windows directory gets encrypted by one user, the system and other users can't access it. Any attempt to encrypt a file in the Windows directory will return a file access denied error. But if you copy or drag and drop an encrypted file to the Windows directory, it will retain encryption to honor the intent of the owner. + Any attempt to encrypt a file in the Windows directory will return a file access denied error. For example, if you redirected C:\Windows to OneDrive for Business, new files would be created without encryption. But if you copy or drag and drop an encrypted file to the Windows directory, it will retain encryption to honor the intent of the owner. If you need to save an encrypted file in the Windows directory, create and encrypt the file in a different directory and copy it.
By design, files in the Windows directory tree (%windir% or C:\Windows) cannot be encrypted because they need to be accessed by the system even when no user is signed in. If a file in the Windows directory gets encrypted by one user, the system and other users can't access it. Any attempt to encrypt a file in the Windows directory will return a file access denied error. For example, if you redirected C:\Windows to OneDrive for Business, new files would be created without encryption. But if you copy or drag and drop an encrypted file to the Windows directory, it will retain encryption to honor the intent of the owner. + Any attempt to encrypt a file in the Windows directory will return a file access denied error. But if you copy or drag and drop an encrypted file to the Windows directory, it will retain encryption to honor the intent of the owner. If you need to save an encrypted file in the Windows directory, create and encrypt the file in a different directory and copy it.
From 7922dae0fc2547da8089189b8ac9067c942a259d Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 14:56:54 -0700 Subject: [PATCH 266/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index fb36697bc0..b4e7cd51be 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -30,10 +30,8 @@ Ensure that your machines: - Have at least one security recommendation that can be viewed in the machine page - Are tagged or marked as co-managed - Have the following mandatory updates installed: -Release | Link to updates -:---|:--- -RS3 customers | [KB4493441](https://support.microsoft.com/en-us/help/4493441/windows-10-update-kb4493441) -RS4 customers | [KB4493464](https://support.microsoft.com/en-us/help/4493464) +- (1) RS3 customers | [KB4493441](https://support.microsoft.com/en-us/help/4493441/windows-10-update-kb4493441) +- (2) RS4 customers | [KB4493464](https://support.microsoft.com/en-us/help/4493464) ## Reduce your threat and vulnerability exposure Threat & Vulnerability Management introduces a new exposure score metric which visually represents how exposed your machines are to imminent threats. From 52616764039e0bb563e73bd83e14ee158894811b Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 14:57:50 -0700 Subject: [PATCH 267/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index b4e7cd51be..f32ea5e173 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -30,8 +30,8 @@ Ensure that your machines: - Have at least one security recommendation that can be viewed in the machine page - Are tagged or marked as co-managed - Have the following mandatory updates installed: -- (1) RS3 customers | [KB4493441](https://support.microsoft.com/en-us/help/4493441/windows-10-update-kb4493441) -- (2) RS4 customers | [KB4493464](https://support.microsoft.com/en-us/help/4493464) + (1) RS3 customers | [KB4493441](https://support.microsoft.com/en-us/help/4493441/windows-10-update-kb4493441) + (2) RS4 customers | [KB4493464](https://support.microsoft.com/en-us/help/4493464) ## Reduce your threat and vulnerability exposure Threat & Vulnerability Management introduces a new exposure score metric which visually represents how exposed your machines are to imminent threats. From 3862a40b3f505757822f7bb42ecddbd9102bb662 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 14:59:05 -0700 Subject: [PATCH 268/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index f32ea5e173..b1c7d7498a 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -30,8 +30,8 @@ Ensure that your machines: - Have at least one security recommendation that can be viewed in the machine page - Are tagged or marked as co-managed - Have the following mandatory updates installed: - (1) RS3 customers | [KB4493441](https://support.microsoft.com/en-us/help/4493441/windows-10-update-kb4493441) - (2) RS4 customers | [KB4493464](https://support.microsoft.com/en-us/help/4493464) +(1) RS3 customers | [KB4493441](https://support.microsoft.com/en-us/help/4493441/windows-10-update-kb4493441) +(2) RS4 customers | [KB4493464](https://support.microsoft.com/en-us/help/4493464) ## Reduce your threat and vulnerability exposure Threat & Vulnerability Management introduces a new exposure score metric which visually represents how exposed your machines are to imminent threats. From cafb3fed0594ba73af35d90585e8e868bc776fc3 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 14:59:36 -0700 Subject: [PATCH 269/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index b1c7d7498a..0b66b4a1f7 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -30,8 +30,8 @@ Ensure that your machines: - Have at least one security recommendation that can be viewed in the machine page - Are tagged or marked as co-managed - Have the following mandatory updates installed: -(1) RS3 customers | [KB4493441](https://support.microsoft.com/en-us/help/4493441/windows-10-update-kb4493441) -(2) RS4 customers | [KB4493464](https://support.microsoft.com/en-us/help/4493464) +

(1) RS3 customers | [KB4493441](https://support.microsoft.com/en-us/help/4493441/windows-10-update-kb4493441)

+

(2) RS4 customers | [KB4493464](https://support.microsoft.com/en-us/help/4493464)

## Reduce your threat and vulnerability exposure Threat & Vulnerability Management introduces a new exposure score metric which visually represents how exposed your machines are to imminent threats. From d6de2d80a6f9da212266b3926c45cd1e1cc56f5c Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 15:00:26 -0700 Subject: [PATCH 270/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 0b66b4a1f7..8cfdee3d06 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -30,8 +30,8 @@ Ensure that your machines: - Have at least one security recommendation that can be viewed in the machine page - Are tagged or marked as co-managed - Have the following mandatory updates installed: -

(1) RS3 customers | [KB4493441](https://support.microsoft.com/en-us/help/4493441/windows-10-update-kb4493441)

-

(2) RS4 customers | [KB4493464](https://support.microsoft.com/en-us/help/4493464)

+- (1) RS3 customers | [KB4493441](https://support.microsoft.com/en-us/help/4493441/windows-10-update-kb4493441) +- (2) RS4 customers | [KB4493464](https://support.microsoft.com/en-us/help/4493464) ## Reduce your threat and vulnerability exposure Threat & Vulnerability Management introduces a new exposure score metric which visually represents how exposed your machines are to imminent threats. From 6102a0d4a425d504e410cce54c9476163dbdbd2c Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 15:16:49 -0700 Subject: [PATCH 271/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 8cfdee3d06..518db8e9f9 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -56,7 +56,7 @@ To lower down your threat and vulnerability exposure: > There are two types of recommendations: > - Security update which refers to recommendations that require a package installation > - Configuration change which refers to recommendations that require a registry or GPO modification ->

Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the [insert bug image here] icon.

+> Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the ![threat insight](images/bug_icon.png) icon. 2. In the **Security recommendations** page, you will see the description of what needs to be done and why. It shows the vulnerability details, such as the associated exploits affecting what machines and its business impact. Click **Open software page** option from the flyout menu. From 80e286b7d3a079ee2446025c8e00cdb364175152 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 15:18:33 -0700 Subject: [PATCH 272/349] Add files via upload TVM icons --- .../images/tvm_alert_icon.png | Bin 0 -> 1307 bytes .../windows-defender-atp/images/tvm_bug_icon.png | Bin 0 -> 1202 bytes .../images/tvm_insight_icon.png | Bin 0 -> 995 bytes 3 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_alert_icon.png create mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_bug_icon.png create mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_insight_icon.png diff --git a/windows/security/threat-protection/windows-defender-atp/images/tvm_alert_icon.png b/windows/security/threat-protection/windows-defender-atp/images/tvm_alert_icon.png new file mode 100644 index 0000000000000000000000000000000000000000..ebd390bd987fedcbefc67e37f2a5943c728242f5 GIT binary patch literal 1307 zcmeAS@N?(olHy`uVBq!ia0vp^DnP8x!3HGLr@S%)Qk(@Ik;M!Qd`Cc-ajG_-G*FPe z#M9T6{V@x_7$>8Dry@I8$TgzGv9u&3zldSwx-%X?A)XSTkV|TDa#3bMNoIZ?gD|I} zGEkfgB<`GFP+63jo>9WEhX0HeP?QfWT9ldyQmRmrnVZUB`kkK>D8mVo3C>R|DNig) zWr!{K4^qwzHaxR9IVTaQw1{E*fi3+&VGfXRcw$jrW?nkO0qJM$KrwcR{?el4REDqr zn_t6}Ip^o*rskC}d^u8|L436Zse9 zBDadclJDFj220)8S&gqAtz?*L**aBE*7bjr$Nq*-`UzjSRdS==NR+nka`0u0eZ*tN zY~5`9CGSL#etC1qf|SPV3zbe!)|h0-v&G>rBU8$!ySx4G@BO~_v#pZSpY{(o_xmPD zmbaWLa9_a#rT*tT71`+Z?ktzyoTI0jv{o>)*XsF-;(bD&%gV)#H9zWba24O(&)FD} zU1MX@BGbR{kif=k$9}u_HHW1=-oAUcz+yo&+2tnR)rEx?3!baqJLSmpImxT<9%D;p zXz<9cdHP#BMXOm$DX7aYcDfqFTVprzdG5xFT-Q}T9^d9G+)!6G=TfcK)qpjoO<~+x zJR4tH+>qldey!5Y-^_S!cWlJA-Y|g&2Q~#H^GwT?F66z=`o84Ser?&CmFw9>+aAp2 z+opX=UbpYcx7sUW$0f6SU%xczeK@zzk!{6=Z%HOz+(k2e)|lRV|MubXG-38>t<0wn zRj!{t`?5zx|lCrQG8+w_VqmX7wy}UvcO{$L06;mfku>~?M66t~c0<()9!s7Rjno!LUET~j)y zEShX8wqe?Zd`Ac2hI6}OAOGy%=KH%x@_d@pg_W-_2|m|O@snxyi@n}q|GF%b>B+B% z%;~DSvmM$O7V;dh&$F3cv{d@J(}Twk6Z76ZoydIW(w6%tCe&>R2{t_)wOj9$;+Ac1 z&5hEgx&A#V{9@^~ZME|CI=B9NpEthuRP)#FDfQ1!75?7JrF!u6?EJkI8z1c`JqL{R z4_{wjKc;pv;BMCTUKwLe-uFfuwuy?d?mR!^p|P=I#(YDoM|%o(tm~f5=?IL(%42_AZ}<8+<9@4UULYU10Zk~4nUNv)f`Zl-sqycF*h%j3n0pUicwjFc8> z-(SwT;gM?RpM0Z##*8nj&%HeKxhL6g!i=H6_v z$3m4vG^egAc(rS(`B9xTrzQ3;Zfq-_`a8wxbZ5VXx}lV)Q1_HYr|af_lk`6BDJi+A zEBuCz-tXEIA09WEhX0HeP?QfWT9ldyQmRmrnVZUB`kkK>D8mVo3C>R|DNig) zWr!{K4^qwzHaxR9IVTaQw1{E*fi3+&VGfXRcw$jrW?nkO0qJM$KrwcR{?el4REDqr zn_t6}Ip^o*rskC}d^My-F^7+;ZcU2unv?#1{`>REySn;!qJn~P8{+KE9j2)@RGKoLSCeCUJO8 zYT_)zIr+ISL$#-!j`&jRW5~wvLY?zmmZ`||=Z4vlH(OE`%)h^XGW!Mp>wCZFHXGi0 zIA`7AfZOX1Pbjlc=l8gI)trAp+Z46nU_JGhY>dA=nZw2ODD%r@vps6lZ7al!NRarf7weU{8XJKJm_F7oXV8y=+<>!=6*_16-8Z08nz$6u($*|Kzw)Ou-_Ups@>O5G3cVc7lq_l{1b0!_oC z5>{7VooHCK>gO8^hJT?>{!BNzlYwFC#(Go!_3L8=bE9|{zE1MTJ4$^xb?(MJbEt+u|MShTb7Oic)!3HF2zdn8dq&N#aB8wRq_>O=u<5X=vX`mo` ziKnkC`(qY;oF&M`+;I?AY~z$B{``KE8blK1_aYOPZ!6Kh}O5$*H_&u!)WK5_)mjuKL%+ zo$>ka_SyUA<>&wZ;Pv(0QpS0gq+3Nf&lfo`I; z!;0&*v({ewd^mHhrTzb|u&%BtERM{YPZt+Iwpez5zmsqM3w%K;FKvUWB=EoL3 zYLDlBt2BtQ;M$lodx7AS$Toqd&u7o~9D1{Tx}=_`(3YSRT}L*(i78+R@>;Sc@4KZ| z%&VE}ovXc$+iRNEGoPimeKza+kS!&8AWFOMacN+{*)WkORo6^Jd=~#{ zSZv^;-TJz6W^lwhg*)%I2s&MOAHOj|$7ua*H^D@UBb#z-?w{YICq5_jrb)DJkKvZv z;u&kduZz^1{-r9`W#y3sgA<|$iq-3YJ}tM(So)$=fBu}+Tc168B<+y5!Kpwq;qL!E z*Z(aGYzgbytgv9tMQ8ptW{#%PPxI{_?!9OdCC=rz_=05X!*^BrvuxkJ%3Bx^!v0l2 zG*Z#?S Date: Mon, 15 Apr 2019 15:19:44 -0700 Subject: [PATCH 273/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 518db8e9f9..ca9adf7108 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -56,7 +56,7 @@ To lower down your threat and vulnerability exposure: > There are two types of recommendations: > - Security update which refers to recommendations that require a package installation > - Configuration change which refers to recommendations that require a registry or GPO modification -> Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the ![threat insight](images/bug_icon.png) icon. +> Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the ![threat insight](images/tvm_bug_icon.png) icon. 2. In the **Security recommendations** page, you will see the description of what needs to be done and why. It shows the vulnerability details, such as the associated exploits affecting what machines and its business impact. Click **Open software page** option from the flyout menu. From 221b847e49e903ec01ac202b9fa68210d0146c58 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 15:21:18 -0700 Subject: [PATCH 274/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index ca9adf7108..402d5839fa 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -56,7 +56,7 @@ To lower down your threat and vulnerability exposure: > There are two types of recommendations: > - Security update which refers to recommendations that require a package installation > - Configuration change which refers to recommendations that require a registry or GPO modification -> Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the ![threat insight](images/tvm_bug_icon.png) icon. +> Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the threat insight ![threat insight](images/tvm_bug_icon.png) icon. 2. In the **Security recommendations** page, you will see the description of what needs to be done and why. It shows the vulnerability details, such as the associated exploits affecting what machines and its business impact. Click **Open software page** option from the flyout menu. From 62ef7da5d21cac0130fd5a156fcc1f2fdb714a35 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 15:30:52 -0700 Subject: [PATCH 275/349] Update portal-overview-windows-defender-advanced-threat-protection.md Added TVM icons --- ...l-overview-windows-defender-advanced-threat-protection.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md index 352394a662..9ace9bafb4 100644 --- a/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md @@ -108,10 +108,13 @@ Icon | Description ![Running icon](images\running.png) | Automated investigation - running ![Remediated icon](images\remediated.png) | Automated investigation - remediated ![Partially investigated icon](images\partially_remediated.png) | Automated investigation - partially remediated +![Threat insights icon](images\tvm_bug_icon.png) | Threat & Vulnerability Management - threat insights +![Possible active alert icon](images\tvm_alert_icon.png) | Threat & Vulnerability Management - possible active alert +![Recommendation insights icon](images\tvm_insight_icon.png) | Threat & Vulnerability Management - recommendation insights ## Related topics - [Understand the Windows Defender Advanced Threat Protection portal](use-windows-defender-advanced-threat-protection.md) - [View the Security operations dashboard](security-operations-dashboard-windows-defender-advanced-threat-protection.md) - [View the Secure Score dashboard and improve your secure score](secure-score-dashboard-windows-defender-advanced-threat-protection.md) -- [View the Threat analytics dashboard and take recommended mitigation actions](threat-analytics-dashboard-windows-defender-advanced-threat-protection.md) \ No newline at end of file +- [View the Threat analytics dashboard and take recommended mitigation actions](threat-analytics-dashboard-windows-defender-advanced-threat-protection.md) From 8387540027fbd39adac4a4b64ecd3ef14e1e3463 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 15:35:37 -0700 Subject: [PATCH 276/349] Update TOC.md --- windows/security/threat-protection/windows-defender-atp/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/windows-defender-atp/TOC.md b/windows/security/threat-protection/windows-defender-atp/TOC.md index ce6f328b70..e822dbbca4 100644 --- a/windows/security/threat-protection/windows-defender-atp/TOC.md +++ b/windows/security/threat-protection/windows-defender-atp/TOC.md @@ -38,6 +38,7 @@ ##### [Investigate an IP address](investigate-ip-windows-defender-advanced-threat-protection.md) ##### [Investigate a domain](investigate-domain-windows-defender-advanced-threat-protection.md) ##### [Investigate a user account](investigate-user-windows-defender-advanced-threat-protection.md) + #### Machines list ##### [View and organize the Machines list](machines-view-overview-windows-defender-advanced-threat-protection.md) From d7acb6a6524fb9e63bd9cd11ea66ab5fb55b9611 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 15:55:53 -0700 Subject: [PATCH 277/349] Update TOC.md --- .../security/threat-protection/windows-defender-atp/TOC.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/TOC.md b/windows/security/threat-protection/windows-defender-atp/TOC.md index e822dbbca4..72817bf77d 100644 --- a/windows/security/threat-protection/windows-defender-atp/TOC.md +++ b/windows/security/threat-protection/windows-defender-atp/TOC.md @@ -2,9 +2,9 @@ ## [Overview](overview.md) ### [Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) -#### [What's in the dashboard and what it means for my organization](windows-defender-atp/tvm-dashboard-insights.md) -#### [Configuration score](windows-defender-atp/configuration-score.md) -#### [Scenarios](windows-defender-atp/threat-and-vuln-mgt-scenarios.md) +#### [What's in the dashboard and what it means for my organization](tvm-dashboard-insights.md) +#### [Configuration score](configuration-score.md) +#### [Scenarios](threat-and-vuln-mgt-scenarios.md) ### [Attack surface reduction](overview-attack-surface-reduction.md) From 8fe6c3481928727384ffe9627e8377c7d2736398 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 16:09:36 -0700 Subject: [PATCH 278/349] Update TOC.md --- windows/security/threat-protection/windows-defender-atp/TOC.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/TOC.md b/windows/security/threat-protection/windows-defender-atp/TOC.md index 72817bf77d..3ac4481724 100644 --- a/windows/security/threat-protection/windows-defender-atp/TOC.md +++ b/windows/security/threat-protection/windows-defender-atp/TOC.md @@ -385,7 +385,6 @@ #### [Configure Windows Security app time zone settings](time-settings-windows-defender-advanced-threat-protection.md) - ## [Troubleshoot Windows Defender ATP](troubleshoot-wdatp.md) ###Troubleshoot sensor state #### [Check sensor state](check-sensor-status-windows-defender-advanced-threat-protection.md) From 6e48679502f403743a2fa8e907903ffcff74e828 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 16:26:48 -0700 Subject: [PATCH 279/349] Update tvm-dashboard-insights.md --- .../windows-defender-atp/tvm-dashboard-insights.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index 38d824f2ac..507362e6e3 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -51,7 +51,7 @@ You can navigate through the portal using the menu options available in all sect Area | Description :---|:--- (1) Menu | Select menu to expand the navigation pane and see the names of the Threat and Vulnerability Management capabilities. -(2) Threat & Vulnerability Management navigation pane | Use the navigation pane to move across the **Threat and Vulnerability Management Dashboard**, **Security recommendations**, **Remediation**, and **Software inventory**. +(2) Threat & Vulnerability Management navigation pane | Use the navigation pane to move across the **Threat and Vulnerability Management Dashboard**, **Security recommendations**, **Remediation**, and **Software inventory**. ![Threat & Vulnerability Management menu](images/tvm_menu) **Dashboards** | Get a high-level view of the organization exposure score, MDATP configuration score, top remediation activities, top security recommendations, top vulnerable software, and top exposed machines data. **Security recommendations** | See the list of security recommendations, their related components, insights, number or exposed devices, impact, and request for remediation. You can click each item on the list and it will open a flyout pane where you will see vulnerability details, and have the option to open the software page, and see the remediation options. **Remediation** | See the remediation activity, related component, remediation type, status, due date, option to export the remediation and process data to CSV. From d7a46e98e86374a92e286bf76e40b4840b6011a1 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 16:28:06 -0700 Subject: [PATCH 280/349] Add files via upload --- .../windows-defender-atp/images/tvm_menu.png | Bin 0 -> 10674 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_menu.png diff --git a/windows/security/threat-protection/windows-defender-atp/images/tvm_menu.png b/windows/security/threat-protection/windows-defender-atp/images/tvm_menu.png new file mode 100644 index 0000000000000000000000000000000000000000..eaaa01d3c070c4b124e6286c4fec0919e403aced GIT binary patch literal 10674 zcmaKSby!=?x-ZfOTA(dZ+=@ey;x27)FYfNein|o24N}}G?(XhTGz1Gyafc!Sg5L0* zd-mDSefB+nBw2YgYqHkNn)%85MtoM3!g@*k5(x%O_VCD+ec};)+pe zLSFC+kA(Yzk{S_z`4ks(`0D9oZE59#RQ7sQ01SSt;1bYlR`0r+74t93t_AW@5qluk}7~rXynzf6qIa1N_ zBs~(+J0uzLPih|NN6X%7(^naPPu1?UHjcng}0&1nKzfc_kCTz)B>j65( z(;i1C3L#t`^Ql0S?~%fg89*fV<)7!doExlPa9E@1Eokf@n;sLjj&#`aC% z9Ci4PGmN(3#$UfjA1hOC3ZHvmz05D%-G&zVPS3Y zcEYieSoPO4+*i77dCp-_Lp18Qlzm9(I?%l|hmLM5uGrXEptd%V=lH;}GwDM&@PnHxW{Hr2*n;1n(pa$&2S5$H zS(0ZkC;{O@QvbRufDmLfLokWkW)|tQw)W6LWv9pl<+JJicGxuZ_Tgm0Lbxhb7zR7^ zq@4SCIl943`u@`iSmMKBc8A~VQr{#G+)B?kOIZenKY*R^H!xTj!_cz{Rj1$Z6AZJ& zuSEv+EG-aQ(Dup0@rksOlDnO|i_6#D2}&eZy{3;(qj25*`ugFj^L3Y!|BY$~tlXh_ zT-0e3y}Z0!Cxn3QV0)l;{PY}gF*J2{YsErA`=Av+U+#+@^8G9;(-BoT;SJvhJ3Un0 z^@MYclX6Rlg>Yz_L1myOb6s8m_ASca@9rtp;t*iM)dS^d%#|AW3K9=irGrJy92P76 zD&J&0QxMj7@rIO1a5`;DZ;z(*x_6wD709Rb^n_sO4~jfoo0e%XX_Vr%F24#esN88? zy=O&o-X5hC64EQ32>$-C(z<6WuJvvH5O&#=;dKs%&CXViBO3I!9)Qkgb%HhN3)Wvbu?=7XjR(-;6 z#AwS_e57Z#dS+;@4!<{hx-F)Uc?~{HGoVMBYWoVqyuIz!iCFdNxNaP!+-1NUknB3G z+2Z|^X1VI|NtCNWFET@g!~3RTt@cLm`7jQ@`os>cb^(Bo%r`(X>RBaOU;3M??B9&HI^yBp$A)XKpwY6qPRR9CCc| z6k?_kP6|Fgcu9qF?-qyNp9MLQa z?6SZT!-1x&jg-RUGnWR)UEk(V30hoX+e&ZE94MU~WEAu!t+UurO#O=lv+%V`{>N>a*H%&KylGCD= zd3&=+w7Jw}LIH7^vGh4sp8f_WsIcB}i-_%odYi+=MsU5bP6aY8OAJHa53B@dsz&&!;X`MAB&7u@if z7i6(@lcSvjzd5L6Pg&}892d`BDHNHVnb|s@JCcFh5JNW(qfI9o1PtQ#rd*v%!^@R^ z*?Ci_ZVb*OIV#BM(tB)m7CGK)z1pnh5r|k@k?&fCJ^-1OGq7y; z?8-_=^3^@(ahiAr1>`Vb)uoVC60zO+mc=g`ikX^9}BMnwlKU&7XhsG#evLs;?iruyrOS9@Gy>+y4os8IV%<< z*(bi%*kznw90>}|s)rPl_ns03?F7{Nol~t_?GDy{%m$@x)*s+uuw2nsNekDyr^SeK zYNeccmb8Qvsm;V6;@VXh-nlv_q~LDNQF(NJQ-r}P)fj8J+Z7x-Il%0#IVIG1CF>h0 zyzZGCX;ZxyHI`+AR)^1gu1#Rettn0_-ajxN%%oNW9ILjUEDJDOioH0}L?KB%{(S>4aj;)% z>W(~sHu>EP`1AXx3JZ?t(K8!%v>D=!W{GAEQur@%ciGhIv}WW^?IBs&*z}rloUVAE zz)BSh*Wf}?gu_0f!XkIpA_s4Yh=!V-cjj7LZ7O$MTwQ-=W*+O5N`@Qngb3#?ugZvZ zT5g4skKvBh+d!{38sx zW~|sqxb*^Xxyii3xeZ#l2lomixMZ+FL!AJsbLV;bat2xw?YkPJv#UV}GbHtjN}^;+ zoCHbQI;=l6vyQ`+ouW5}TiDbbvX5R|@w3cCZHcL$N^U__v;1oh#>2a1b-0kHa+q6x z8B|~|$?^DY`}%=x9t1)Z^(D*tn?uX5Vqf{{Jt7cX^~9}Amqf{@EksLm(lP$e;6iJ* zDz2UlS*u9My?9y;zM~HwOSU7k6HC>RV$3*4>B73!Hf-;d9IA9#zj8cwha3J$4oBf# zyNU#=V_x%Yj3ev(u1zzt=g~w>!KvO})0C-1 z+p!~Di$)fc2{D_aF`803z9_UQ2Td1oe0D+zVvp>EjBA$gs6Kw7SzEm z8C<{0a`4Z4V+}eQ2b;G~%2|mfpfHv?_;tw}#2>WsirD0GcIo5y=8yO?Q@pp=r1te4 z-OGB|%L*h=Mv{<}1mv%{I&jCtP)JSBzu$(-Ka1)g%+P0srgpOU%_6#zC1ADxLR`wu zz>+wMgRg+q&pmjol^|*-^TI2x_IXaB*~tcJn)eTuSj`eE4-+D5Z_V0q?#tR#VeeBy zrTsLQ{7{lT0qbrAVA8Vx)c`xNZlwVx<3qak^0HgLjjKJjD*Ea>{PupyLt&EQj9F0o zjb(;~*&C=ofPXApH)<-MpD)lsu}qE%SCXh6#3SGS zT9thVuYDKrXTV@SfncGlqm8# zPm;ho$tuU9w&oCN`!!2Cybsv>6E&VSD{^P2m^!7sEgn^hxXQ-~FcN0*D!$yzE#5-; z1!dsJIC0#R*0>vYx!-BplD=l}jK;NP$kx zHF-;`PO&dzS~{7=m5g#NBm4?BYS8gRQ&hoZW-UO9A(+qz*#WY7zi!>(4r4gTx{&8U znkD1!d+hlQZ*|!{7KlD2IL(v+{Mvd4SE|_AojEzZsCyXFh>M03OuN?k0CZSGI4(qe!1$R$ki}p}qw^`-C{hyv%<~$Z<7e?6BXF z*~gyJk<|SDkb~;6JibgFjeXsIUVNLFzv+v>6$muQClCvJgr;N<#M}i*TNRu8{#P$u zmKo!#NkiROGO|fKBY_fDa%ydT+ z&%_#HZjJJ8HsX=tZ+ki<%BE*jYP8S_ZRWR#|8mz3C)kcA6Ftu&8uE0)v-owWd0(!D z&aP#B)|Cm*H#>9JGWMdZAF!Rd{t;^n%3Awr_V%aQiS?gRdMv`EL2K;9H&oJGx9Gsi zp>4xh=`%%+0iBorT;G+h%4rT(iR)g;RHQ&@)8iQS zN1Uc_48beR=J@NKk!@BS?L|jy5)#w~+N2~OW{m)J;#r9Gs;%qEifT~m1L7848BTSN zKOXPVvaH=fIWZRs<9sfxt1<*a-?D5qC%`c9T6EkLnN?F0(2-ji8a)>{!H>Vua)23& z_E$W&@gR``8D}|vIW(gSQ`CHTBwYjc!UC7_AD@)|sWa3Ny zRt}EezkmM`Ui2OP3UVIxY7Qi7lM3BP799F0eQ5fZV%!Fpe3$pdmc|6Y9yweM$|yva zD=`|2c1+^Gj4$oLcYJ4Vn0Z!h6sa~h9VBTI zdpvbB5P?h=)Gf9Y;?}xR*r**>Sx1c2z+><=9d$f&gO*b4j;>dDdC!?jDU(ATG$5*8f^+-Cr^r9vJ(s6Dijgx^ns2h^b z`(tQo6~!dc;|SDMntwO@e!Jq}(5n@4=)B01FV~Vb-@@D~8e7iU6CufW$+)qF&WVI& z@gJyJ z6d5xJ3x1>XU%>MpJ*R(b{Et0luk`_!-C?Ee$-?@GfT(cfcmL7AqHggmk1NBY3`S=g zD`-^85a>^4H?@b~kO{i|os|3VoQ;Z7yvpi^R6#=G`OM4=ukZ4S|D!h+!U22sqab4Y zaK4sQ(Cx6G@?d{|@*Odv?Qf&1|Mta5=6#2Y{ihV;=oCz5%d~wE5_3C(KJy(H*V_QZ zCO@&Tu(0Y8@|#f?#Q%3fj9lb4B zx=WZRQ6S{mekPKK%!UKl{`LoczH^?`dDp*F&AZ|eWIa{D?z*oQeeaLBK#zMElsn2c zT$(Y*=M!^o#v;MkE`}^x-v0hNZBtgLY;M&Z(EvHvtiJ)d_WJX-7}`(FSv zBrh+|s9FnQ@@+l&dGz#Q3ky2Y&InI#>`9EHR(YJ7XjJI&e_q4#yR=Z8ZQ>pI{zDzj zdCo|l3doOb(~qMGJQD&mw8(3uGvx@OUVdP4qbcEfIWm>)^uor*Y0fBJGOQjogEf%# z!2U9B{I2RXgy0V=Q+M#1GKK^BYtx6^qqe>Ga@OlgHmhTk>+dTGg-7&t^du1DxP1VO zS8da=CLcV+*Ca!XAx)Hfrul}n#B~x)=GtLf3Q9ap_6n^?fK;5$3vp@ct}r zFOLwSJ{ooaZM~$Wr?0hvvO?YT^hgnL)71{&yn+G_C@em$zR}&$?H}9wCzeUTN-3`xmGtuZ>f^J&`vQJ%8AF* zZmnKO;0^Y(W}jIkt`3nm`))Hz8Mb@MBXZGH5$5E~%OP5l!dn}E9Tg+)sZ9LG!?`57 z{?9@d-@y7pWo3|f^eMGF*^K}R_6s^p$iCf9yE14t1QMSRAuCF2cba1G;X+w- zyh3- z=PP)a$@O*i;CuV`I2N}-cBzbtnS=O zy9IH5eKJG;d+szIyY*VI2!>mDcS5T&H#t(Cym3x#R%bcHS^i^wOLht?tU8|RrSrE` zjRp0M_r(%>6|n9{Vcgs&#zRhVo8}Vdl+<+K6B7_RSq-#a^Z7UXSOm)y1yn;D8;UGacb%c>>V z!yYE$;WpD!)~YRlq+clL*I)(b<+We>a}#;6)Z`Y~xscj4F#e*E^O}%HF7YDqP>hv(=xKCNdvn zG2A`_uO)Q2#MHFoBKvmHp>9uTB$y`jgvIfRz)MNosf8!ZiTFwugf&1j<7S<;#Wx~L zT6t$%%Gnxp`lZ+-{#zuq_Vf5H`@Wc8eQ8!)>|-ry`Tf|oY>K(LCJ1C~fv&Y^=u45& z2n_Gl99vjB&akYCv434+Ay!DrgZzY5=1==sb>D^2Kv(ialdFBSP zq^PU7`C~sGOKwYXpBL2Di{WgQ%#K^>6Dnw@?ADIX4bU624S3kL4oG`3($`xFMkMRA zloVJ=<(y$J#ZzG2bA=7eHAc%oyyO6cj+0B0 zV2X!7k-ys06oU>JYgN=H`C`qdI#SAi3Tkmm_&p6YxX1pRtH~%Ixw)U9+_%#vd$fZ; zN>Wqz$`T#pQ)5?fw^fgkeAuwOhApb*B>ypaC8JFZyTE7$prylN1NV)b^-8`DzHmx(%3eGvcdW|^LwPSz&!HBX zKIkx#4##r)W8`fl#ZRN2m|r68`ZG9xvre3JzP-}9C;I#Rvuhku)7s)(PVev`cw(^YQXseP^V3&u=CEYZDP!CDF{^Ri)|0 zOZl#Ry+G}6DOMX?FI8p9Oi7MuHdzo7_qaHn6o*L8$HBN-8H_6OXzK-rAS( zi89BMn2?9r6LmD};OOcp2+L4-wq#s|>TD<~=^P9}@aeN}>k^nKaVPQxUy+Z~dwSu> zOvMd}9?m6Im;!&}>4?t!tn;9)JQnCe-jjqO$c8J~F2{H2e8kSm=XV^vGW-v?wxsY^ z2+wnx5*_8nPkRsaXqHzTE4kI3{7gS4buBsoD*&Z9>F@1iB0k9l;VY1*6gvvd!QNGi z4pTYM=o_~G9I2lM!~M(r zudR7dTT*1c&Vlfd$T0j3#WnQ!a+_prf_|aE0dpgtUqNyBl9k+po!}%Jt5EI+xXOE)$N2$ zKFYBDr?oQY?x}SH?*mzp%h2(nD4{fZ(^%w7-e3A-{Qirv zezWB(Msp%Znh&G&{>B`RMCLwThWPzy%X>6u^dW@NsYBkI?`LzR;P0!D5s7-E;2Zw- z2hmc?{_6uX6H5YRZ#71Q9p)QrbpL+dWvGjM=KVzhl7_tUyr#R4d1HsI6}WL zrjp5>RYq!I12J9Cw4a0=!Xcwdxo_2BM*AT{KL2r^V#!$&O(|<<+}|g)M@p?wROR>7 zqX+$t5{1jr!d(~#u_T?U&jj%3#DcoF8HnkNoVnr`vnfuNE3zOzc?c`o`4P2^XYA7$ ze>e#n>Mb*1rwqBBfTG_9LZdNH%fWn3w#654@u>fW8zmTkcxsORQb zXLOkfaX0MlX3WfgJ)*X2j;8#Cr8ay3+uapRpqH(2%28;SXO>rqT(Jy7TENR`!ERXB z3K6uHuTeHL7u)3Pgb|wuXTd&TTe16_ z*?;GtF)COWE{l%MoT}sio>eeXyY<{hmd@GipBFc<+tSmdsWoJF6vER3!!MPE_*}DR z*U%Bp>$y2q$Gtg|f4e2m066aYqPA3g<(3gG(X9HrCcA@wD(obchwsqjr5roFSV|wB-C5(=l!7_;$4jS^DyZP!v|=>~Z<&?Q z*)Ocv4!AsiBN946K|aqu{jbF%OXw)AeVK27F4Qdlsv`N%P>lS5!cQ5ztEj`(_-#7p zh!8~gUvii5HNP!e>Rb%TAz$z;m!YxJGid}qW0(*fEp=E)8h+j%4B@BQ@6!1>v_Ndh zZ|sw-{xQW3a#M^DL=SBMmON#x2Tapw%Ni5i7+_PRbPmx=mG2COY(Fh5YmjPw#Lvpq z8$NfL(8<;J0A5JojD0qC*v@;e9gjy)`f9tXJ6Sx~d1`(^xjv8zL|5SI)4yA7iX_dI znryK=7G?~7v%Gm%T5*?HdYW8e<1=i3)(16MLRU7?ciNzF(OG+teDo3FJGMf;njSQQy$MipR z15m@8O1gtG$G2WKg)LU=$}FId-tfUz{I1ds>dIGoVOPvTKKg_JVlEQhOz(ZV{Bh=eD~%)Ew+m&7+DgmuTw5zkzKhbkvyOOg#= zFqnT*X80}Ly7bp(_Rod!m6cTitQkFTEiox~dx#-|!!+*H=een#Q-YZyAx{d>(mV&u zVM>yf2U?v@&zmRzRA<9XkC0LmOMj&FH{!zWRifIhpX*Cv7bD1#4X=ja+&%|HF!o7` z;|yx)neQFEgP7_u1x6f7WhD%KH{>?KNcsI1D*T($t1a?1?a(z%goSjG$&t#If*D&X zTM@3JJ&ph~!e9Mp$^R?)3~y@aNOF6rcGJjg^3PjTQdxm>!qy-0=yeaHvXp5*ite{qx%KNW zPsnRZ6LwHLg3Q%hMoiL(nD)(b6lwCg^f8SOpAA~rV`3AKpmjGv|Ip|cQs$Mti{pr= zYsnT`TDE;GnQ<;FC`h<`&Mw@R-G&$$e(H?BZ+}OT%bl;G==3%SHc%rf-#V(}?GtLl zP~6Je-;(^p8y1WmIwRO=L&}#k#!5(1Wx&b6_v+%Kp!|Cex|uxo{G^ta&RLBGf?$|R z?v<7XUb&&L*u}FydRMh0skVeU&H*YlxdTKqCxG?5nM62? zTPCGP+;YT3m%1TFYf^m!2f+-M^~pum9_xc3%2UbVlN=@XR-r}K@^{1Yc;QC2;rm#H z6`g7C6&v^lfhaPJ?(3t3J$m}_A7}GjLWG8g5h{P@ozGSB08Tr5C|jv^i$Z%0{@CZL zF?p%x7VlpVOa{Z>ndgjr070ijABCwm#T3{n#<`j;G7|AM8He6ezK9YW(Eg%0nT|cu z=VqB!gkUl3g!sv9%t(hkwr;EasA>cs{>3V8ZC&sE4W2aR#q;VqXmi@DMgvVen`nCD z&tn1!cxHhu%&q;V8pS)w2)U*O_~z{_brZOwZurhUqu~dFLfE}T_@9)9@94RbRKz_2 zhbPpO%f|?HBQ9#z3Mi0pK&Tr>CIm&34*yL4CO(?&LIzQG*Jz^qjV3wmU9IAOD#mjt nd5cKo{gajZkA-?mk7&{_OX(KC-OGs5L?jsrMez!tQQ-dpIqv5n literal 0 HcmV?d00001 From 5cbb0c8eec566d2f66a103d31bcca72224d2e190 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 16:34:23 -0700 Subject: [PATCH 281/349] Update next-gen-threat-and-vuln-mgt.md --- .../windows-defender-atp/next-gen-threat-and-vuln-mgt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md index 940265d7a6..87b20dc689 100644 --- a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md +++ b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md @@ -32,7 +32,7 @@ Threat & Vulnerability Management is built-in, real-time, cloud-powered, fully i It is the first solution in the industry to automate the remediation process through integration with Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) for patching, configuration changes, or upgrades. >[!Note] -> Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) integration will roll-in next month +> Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) integration will roll-in next month. It provides the following solutions to frequently-cited gaps across security operations, security administration, and IT administration workflows and communication. - Real-time endpoint detection and response (EDR) insights correlated with endpoint vulnerabilities From 2a378435f4e2da71fe6a05cbd099a575852c3dad Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 16:35:33 -0700 Subject: [PATCH 282/349] Update tvm-dashboard-insights.md --- .../windows-defender-atp/tvm-dashboard-insights.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index 507362e6e3..f1b3d4a70f 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -30,7 +30,7 @@ Threat & Vulnerability Management is a component of Microsoft Defender ATP, and - Invaluable machine vulnerability context during incident investigations - Built-in remediation processes through Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) >[!Note] -> Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) integration will be available in the coming months. +> Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) integration will be available in the coming weeks. You can use the Threat & Vulnerability Management capability in [Microsoft Defender Security Center](https://securitycenter.windows.com/) to: - View exposure and configuration scores side-by-side with top security recommendations, software vulnerability, remediation activities, and exposed machines From 44509db156bf9760176f4ed6766cc82f720a2e4e Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 16:36:26 -0700 Subject: [PATCH 283/349] Update next-gen-threat-and-vuln-mgt.md --- .../windows-defender-atp/next-gen-threat-and-vuln-mgt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md index 87b20dc689..4b3ece7293 100644 --- a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md +++ b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md @@ -32,7 +32,7 @@ Threat & Vulnerability Management is built-in, real-time, cloud-powered, fully i It is the first solution in the industry to automate the remediation process through integration with Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) for patching, configuration changes, or upgrades. >[!Note] -> Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) integration will roll-in next month. +> Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) integration will be available in the coming weeks. It provides the following solutions to frequently-cited gaps across security operations, security administration, and IT administration workflows and communication. - Real-time endpoint detection and response (EDR) insights correlated with endpoint vulnerabilities From 0ed9548f697a1d31f6eb6992dceab781b65958cd Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 16:37:33 -0700 Subject: [PATCH 284/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 402d5839fa..3b52fc4a21 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -27,11 +27,12 @@ ms.topic: article Ensure that your machines: - Are onboarded to Microsoft Defender Advanced Threat Protection - Running with Windows 10 1709 (Fall Creators Update) or later -- Have at least one security recommendation that can be viewed in the machine page -- Are tagged or marked as co-managed - Have the following mandatory updates installed: - (1) RS3 customers | [KB4493441](https://support.microsoft.com/en-us/help/4493441/windows-10-update-kb4493441) - (2) RS4 customers | [KB4493464](https://support.microsoft.com/en-us/help/4493464) +- Have at least one security recommendation that can be viewed in the machine page +- Are tagged or marked as co-managed + ## Reduce your threat and vulnerability exposure Threat & Vulnerability Management introduces a new exposure score metric which visually represents how exposed your machines are to imminent threats. From 061a651fe493fffe8f33e80383df0eb04e428213 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 16:48:39 -0700 Subject: [PATCH 285/349] Update tvm-dashboard-insights.md --- .../windows-defender-atp/tvm-dashboard-insights.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index f1b3d4a70f..74aeda3694 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -41,6 +41,8 @@ You can use the Threat & Vulnerability Management capability in [Microsoft Defen When you open the portal, you’ll see the main areas of the capability: ![Microsoft Defender Advanced Threat Protection portal](images/tvm_dashboard.png) + + ![Threat & Vulnerability Management menu](images/tvm_menu) - (1) Menu in the navigation pane - (2) Threat & Vulnerability Management icon @@ -51,7 +53,7 @@ You can navigate through the portal using the menu options available in all sect Area | Description :---|:--- (1) Menu | Select menu to expand the navigation pane and see the names of the Threat and Vulnerability Management capabilities. -(2) Threat & Vulnerability Management navigation pane | Use the navigation pane to move across the **Threat and Vulnerability Management Dashboard**, **Security recommendations**, **Remediation**, and **Software inventory**. ![Threat & Vulnerability Management menu](images/tvm_menu) +(2) Threat & Vulnerability Management navigation pane | Use the navigation pane to move across the **Threat and Vulnerability Management Dashboard**, **Security recommendations**, **Remediation**, and **Software inventory**. **Dashboards** | Get a high-level view of the organization exposure score, MDATP configuration score, top remediation activities, top security recommendations, top vulnerable software, and top exposed machines data. **Security recommendations** | See the list of security recommendations, their related components, insights, number or exposed devices, impact, and request for remediation. You can click each item on the list and it will open a flyout pane where you will see vulnerability details, and have the option to open the software page, and see the remediation options. **Remediation** | See the remediation activity, related component, remediation type, status, due date, option to export the remediation and process data to CSV. From 87dd60610ca0139219d3a6fcd36602eac306b992 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 16:49:39 -0700 Subject: [PATCH 286/349] Update tvm-dashboard-insights.md --- .../windows-defender-atp/tvm-dashboard-insights.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index 74aeda3694..be5d235dff 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -42,7 +42,7 @@ When you open the portal, you’ll see the main areas of the capability: ![Microsoft Defender Advanced Threat Protection portal](images/tvm_dashboard.png) - ![Threat & Vulnerability Management menu](images/tvm_menu) + ![Threat & Vulnerability Management menu](images/tvm_menu.png) - (1) Menu in the navigation pane - (2) Threat & Vulnerability Management icon From fdb730c819131ec6b901c00139866cbff830a693 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 17:16:36 -0700 Subject: [PATCH 287/349] Update tvm-dashboard-insights.md --- .../windows-defender-atp/tvm-dashboard-insights.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index be5d235dff..83d91b6194 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -62,10 +62,10 @@ Area | Description **Organization Exposure score** | See the current state of your organization’s device exposure to threats and vulnerabilities. Several factors affect your organization’s exposure score: weaknesses discovered in your devices, likelihood of your devices to be breached, value of the devices to your organization, and relevant alerts discovered with your devices. The goal is to lower down your organization’s exposure score to be more secure. To reduce the score, you need to remediate the related security configuration issues listed in the security recommendations. **MDATP Configuration score** | See the security posture of your organization’s operating system, applications, network, accounts and security controls. The goal is to increase your configuration score by remediating the related security configuration issues. You can click the bars and it will take you to the **Security recommendation** page for details. **Machine exposure distribution** | See how many machines are exposed based on their exposure level. You can click the sections in the doughnut chart and it will take you to the **Machines list** page where you'll see the affected machine names, exposure level side by side with risk level, among other details such as domain, OS platform, its health state, when it was last seen, and its tags. -**Top security recommendations** | See the collated security recommendations which are sorted and prioritized based on your organization’s risk exposure and the urgency that it requires. You can drill down on the security recommendation to see the potential risks, list of exposed machines, and read the insights. Thus, providing you with an informed decision to either proceed with a remediation request. Click **Show more** to see the rest of the security recommendations in the list. -**Top vulnerable software** | Get real-time visibility into the organizational software inventory, with stack-ranked list of vulnerable software installed on your network’s devices and how they impact on your organizational exposure score. -**Top remediation activities** | Track the remediation activities generated from the security recommendations. You can click each item on the list and it will take you to the **Remediation** page where you'll see remediation activity details. -**Top exposed machines** | See the exposed machine names and their exposure level. You can click the machine name and it will take you to the machine page where you can view the alerts, risks, incidents, security recommendations, installed software, discovered vulnerabilities associated with the exposed machines. You can also do other EDR-related tasks in it, such as: manage tags, initiate automated investigations, initiate a live response session, collect an investigation package, run antivirus scan, restrict app execution, and isolate machine. +**Top security recommendations** | See the collated security recommendations which are sorted and prioritized based on your organization’s risk exposure and the urgency that it requires. Useful icons also quickly calls your attention on possible active alerts ![possible active alert](images/tvm_alert_icon.png), associated public exploits ![threat insight](images/tvm_bug_icon.png), and recommendation insights ![recommendation insight](images/tvm_insight_icon.png). You can drill down on the security recommendation to see the potential risks, list of exposed machines, and read the insights. Thus, providing you with an informed decision to either proceed with a remediation request. Click **Show more** to see the rest of the security recommendations in the list. +**Top vulnerable software** | Get real-time visibility into the organizational software inventory, with stack-ranked list of vulnerable software installed on your network’s devices and how they impact on your organizational exposure score. Click each item for details or **Show more** to see the rest of the vulnerable application list in the **Software inventory** page. +**Top remediation activities** | Track the remediation activities generated from the security recommendations. You can click each item on the list to see the details in the **Remediation** page or click **Show more** to see the rest of the remediation activities. +**Top exposed machines** | See the exposed machine names and their exposure level. You can click each machine name from the list and it will take you to the machine page where you can view the alerts, risks, incidents, security recommendations, installed software, discovered vulnerabilities associated with the exposed machines. You can also do other EDR-related tasks in it, such as: manage tags, initiate automated investigations, initiate a live response session, collect an investigation package, run antivirus scan, restrict app execution, and isolate machine. You can also click **Show more** to see the rest of the exposed machines list. See [Microsoft Defender ATP icons](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection#windows-defender-atp-icons) for more information on the icons used throughout the portal. From 6969fd40fb7b49b122e6e08ba034acde4cca6f3d Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 17:58:44 -0700 Subject: [PATCH 288/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 3b52fc4a21..51f7224504 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -59,11 +59,16 @@ To lower down your threat and vulnerability exposure: > - Configuration change which refers to recommendations that require a registry or GPO modification > Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the threat insight ![threat insight](images/tvm_bug_icon.png) icon. +![top security recommendations](images/tvm_security_recommendations.png) + 2. In the **Security recommendations** page, you will see the description of what needs to be done and why. It shows the vulnerability details, such as the associated exploits affecting what machines and its business impact. Click **Open software page** option from the flyout menu. +![details in security recommendations page](images/tvm_security_recommendations_page.png 3. Click **Installed machines** and select the affected machine from the list to open the flyout page with the relevant machine details, exposure and risk levels, alert and incident activities. +![details in software page ](images/tvm_software_page_details.png) 4. Click **Open machine page** to connect to the machine and apply the selected recommendation. +![details in machine page](images/tvm_machine_page_details.png) 5. Allow a few hours for the changes to propagate in the system. From 0ed759e2865d645cce5e703dfbad29a5a1e200bc Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 17:59:31 -0700 Subject: [PATCH 289/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 51f7224504..bb764bb67c 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -57,7 +57,8 @@ To lower down your threat and vulnerability exposure: > There are two types of recommendations: > - Security update which refers to recommendations that require a package installation > - Configuration change which refers to recommendations that require a registry or GPO modification -> Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the threat insight ![threat insight](images/tvm_bug_icon.png) icon. +> Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the threat insight +![threat insight](images/tvm_bug_icon.png) icon. ![top security recommendations](images/tvm_security_recommendations.png) From e202e30744f0de362baa87c4592bd09979a742bf Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 18:00:19 -0700 Subject: [PATCH 290/349] Add files via upload TVM screenshots --- .../images/tvm_config_score.png | Bin 0 -> 27416 bytes .../images/tvm_exposed_machines.png | Bin 0 -> 13128 bytes .../images/tvm_exposure_score.png | Bin 0 -> 21367 bytes .../images/tvm_machine_page_details.png | Bin 0 -> 71105 bytes .../images/tvm_security_recommendations.png | Bin 0 -> 36871 bytes .../tvm_security_recommendations_page.png | Bin 0 -> 75439 bytes .../images/tvm_software_page_details.png | Bin 0 -> 57955 bytes .../images/tvm_vuln_software.png | Bin 0 -> 14866 bytes 8 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_config_score.png create mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_exposed_machines.png create mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_exposure_score.png create mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_machine_page_details.png create mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_security_recommendations.png create mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_security_recommendations_page.png create mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_software_page_details.png create mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_vuln_software.png diff --git a/windows/security/threat-protection/windows-defender-atp/images/tvm_config_score.png b/windows/security/threat-protection/windows-defender-atp/images/tvm_config_score.png new file mode 100644 index 0000000000000000000000000000000000000000..0ef6b942327b7fe989eb99f98169a42203e4b61d GIT binary patch literal 27416 zcmbTd1#lcekR>Wv%(BIj#kQE4WwFJ~%*@PWF*7qWGh58e%sgTo!HswS{fPTW*Mw z$OHcl@FZ$vJdhE_NnBb4W*-s-ivUWh2%+acOd@Jd0?tlmwhmxr)f2x#CPXKYN!ZxY z(81i!$=uck3=NK$6l910XBV=yb9XQ|HFE;1M48|MS&{$4>R_z@&y~o@+}aq7^$7(I zbO!F<8AV$YCs%z3V=!&I&wuU+|IxX*qoI{P$khR?rMEE#WQP4`R@HZ~F}E=V>%}_? z0oh>wGv3+3&=~CDGw}R>x(V4@TN~Rrfjv$n|C<5yKQ|?FCo5yHQotNJ7#IAZ+b4gnI2ds$DkNMAE)xfZou5ED^w;ly@}1z-FcclX*=8osf3>K%5rr41 z{rZ4DPgrHZYEG1|(5KY*3mQH0D}J6IDh}N@*nnS30jScjz^CEt(F@)NQ?gN`-@Q+F zJUm8^I!|3kSxs9_kFU)yAHXXNNCDJ8Wb@5M2t=>}cHNG3kAe9V?VnH}Yj30Zd@!5! znj2DCJ_SYi-_-`w^G__0|2^mgv|qFJ`do7rS6L5sr)Xn!b#yd7ce558C~yj`8wlW@ z%I2-WRhnk`xL9piSX^wfn*~Kqp`3w!rq@2C3IeE*#4H3)rt8hti^`rc#7QD#plb%_ zHDy?P)58Z4!RF1bNv(=e!3Lm`8T_@FLXeL>Nw5;AAE|*@ zP{f}wY*4R%7`_VqFF~j7VzgrHQ>I>CG}dd4yF;pv4NpmU=F4Qsry3ub+b+#c@{oC}W-dbQPepP6rXNRtxwu{Gk@0Es?^cNJd7kfcZko*(<2mv{t4&{R zmdGrBS}sTVkQOue4kAY{L65nUPopUGyL#rMd)Ib#vdoc7=lJ&M+Ge_T*a)RDeQI|< zcdMt9dp#a88ZYcunsfUHQ76Z*p@oK%aTVjGG+UnjW&INo79CbBS(2Je7fQr}hZTZ6 z$MLN?L)ce>!hLvD_35Ww5YXeY1X%|r_m69)uDx!+@e~_drw5{e36n)ASzarnRL3zF z9Rx>x&|!tj&2u7#(NCU%vzQ!{i9lL~5H7aej1fiZ zUg=u99AGi3fYV^;&V|Bvi=-H_wFiKF(6}glxp?vM8OM}DP0u(xvp8HRQydFJBTqCO zj;7pg5KqGo5uA`R){Z(lyWj}=cu)Gs9hlH6S=i>Pmr8?#FZ)!Hp$N~XI8RK=jqOxh zEs$l;`u}k?~hDKAls7GD!4P&4N|?>&z@qq^{mMd=)LQ zl{D6)Xo!ANL$k8B(ro7QNF$>HW_;A1Oeb#krKN!=^Yc5ukJiiUc}-FRxh&P!>o{cn zg&M=1kRq#`nxU|vh{y8K!n?;-TUJ1Q9+Ws(B8M&Y3c**=ncQJ6+LLdBU zz@#IcOPJ1&3C2_>gr%^SgfWyi(&O##7Rj$#(e8;*D}#Asy?GWfT<)iUuLHy7bp9*P zU*C)!-=#Ap2}_?Wo6VP_@)VC69&?Al>pq@rQbsVFJDu2ez8PzkIV&@a1@^RBdKsMh<#&UMymDt^&pTK`ar9C6iu^`4e5KBq=cJ)H=fkBvQM4pI9ID>cH=kKs zj;9`t(b#QT6Omc??2Nf=+a8GL^am78Y@g+b3;bJH$%t^Zbk2ZsT2fc4p4W95qG-JOi09+`53r4RZDDzNHueFW#N!#u4bFQy2iGBo z`OYHrk3-dq40mScENR=ocrn7mmHixh1^MS5#@@Q8m-8M&aiAozhzPYBM;@(ZHtsO3 z?>b!SZ)z$MAg14k)Te1|{ZhNzsR=V00X>u z*in|`PM#S1&FGtteM2`lXFri6-{cPY(EB7w_dR1gq~-S(e*M?R65bTb4j z$52raZiodOr+wOx9+4-@D>Vj?CycvUXfegun!O_g2%?#Nly&W8Rm*A=f0su;9H|$F zmr_W^mq$0AxB7{kC_Wxd5neC(vhGZAubb;;ItgC7u=Qdw6jbgm>7e9E= z@_C_KgHx&f7YX&Gx(H`pWjnj5zs}f%bJ9nPD~%E~ZYwEOvXmUy&sD`x zXJ!nq{!8`BAC_ygtsfuD&2%R%c&UAi4C;B5aTg=_HS{Njz*?h*9Xsy|?o|{lH<_=75 z9V}mf)}S#U3MFIi{q(DF*&}Vsaa*K%c$=~z+rwrJNot>})OEm|Z=-oubG4$K%5|?a~%ZY}vuVA;NGR z5&UEgt)ZY^h1wV@oK62u&(1tHwef*d$>^))4h-LFg)QMZgKcZ+*0LUWw72IN$4z0!2*J1h>WN*a2*POy z`mSLtXL(_8U2ENGmz_r#+u?&Jt)~X_Lzf*Lh2isTT>h+h#Kc@*D>Url)81^;?$>I! zE9BTIz~idxA44PyoLw&xLE!J2UI$60YiL3){=plrflVHCv|kGhl`Rl8+$)Wjq$+6r zHO}J?0;QWn>Arw~R`W!?g%&8l1sj%B(RR`qlY;%x1zlv23pd<$R3)a zllM=%lar2(%TH@Z$8g&i@GR~*E*C=Y;ZZ}dS*=QH2Yl1?NdeWt;9*)V?nCwF)H%10 z7f?#*2>@nLzZ{WRpfa=J_c!@4p1wC<@4Xwgj@^4M`66wXMG2RrK2By^YilEcJ=Jhb z?Dq40s%!{cnM})@nUgdV>uy3jM>fgwPtOrH4lyO~wnzmKsxX^QDfsNTRQ7+tp+wsD z?F-+QImo+Yj2!LGD5UVSuGDD6KN)O2#W6B6``F|{7fh?`Fu0|;2{mN zFMxJ5mP6q5%aQrQrz5<}_L=#r;|O8ji$}dZ|FYPWvpm4`7%j%TcFT_6TrpbZJ~vzSj@ zpMkP&bsI6VTVT@FX*TY9xTGH(q^DJOqiXf0jMEdqY561KTo}Tm!>;@5S3(fd%(j+e zWMqUdr21Uq3g+qNC(KC?Uzf#U7fnl!%QG@EqQEiVPt4AeBND}70`_|l8cc@7P}}D+ z=!YrfJ=+;1IoKk?Gd@vubLZiBUW|&ZS{URn4NaL_AQ&4JDdXZd18q3*IMHeZP zOWxiR_s9OJzsF;2E+1F#v?ctL82Trfe)jU!**-U-Qg-n3@2*3f{5O*uc;i8Xj@$WG z|FPZ=kDStBSv=+g_OU$->cqhwoP4M7Fvk11v+={#z2w}t$0CvsVCOIvS-k+lH|^lVrv^f{|ac5_8tDsHwwMC?YQTmAU-qP9F~+rWftjQ%VS- z))1Njd9Q5rR2tdUYQ>fcX$dS@`+=UlIXzJ zYzcC?+=RKicBe%<5JFq{F1Iw1QHdDl*dkVvJ;nk2X58R{Uw{MR4GR=7OFZQpJ5x3D ztfymplNs+l_pC69tT9`;1B1D!XeArhC%DG@+mToqUO9?~M?qs%yxfZ=Jyy%OpUo9- za%rwYne9*PblU3fKYn>6WhDJ{nU47>A+>>OeA~%720lq5mwQB7YZx{nKW| z$apIqVvFzKPRn5LTcW+JZMiODIcKeC8oPVw8egu{8K+Dg{c5E;3!>3)43V;}yf;Zj za;^uZ>Wnv447}d_qWXy0;Q$HA1Zn9;$?^L zn?^fFfL*qty1F=s#Ds;1#|ugN(0IK+O7eU{3`BK{Vsb;~rI|mvUIwZ3ZvA|-@L&|O z$r!laDxstv(O20LdqZUozUW9WsuMy@$6+kQBEk1`L?W!cc6I*_1V33wI47GnoN7S1 zy~}BI+J)TxE9CW$^GN^tk7hFTf6I3MD~hyDov-WjVl0^`gbKOaNkT?e{9(&4v{t3b zPS>rb(+8q=u%gCAsyW)lkN-`6^Bw5xx2$K$aVm(gDgSkpBm90?Guguz=wOU;OW zu?FpEImtUoVhNz83;#hfXI;M~*m335gf;P*LXbhfG4c1wUtMHN8AOrJRrQ=s(lD8F zxw*_ic&UUpsA;+x5lS#(ftS-BHPz(XnMbmu)F7Ph5{c1!fOFWaIX2+GNB>lF^_$1{ zaNO^Tx!q>M#h8L1G5c+~n#P{BePGqY0Bxq(ET7-O5WGD(gDdYx@fz*Up6E?UK7iPJN2~ZA}K1j)uhOH_CNQPmfd^K!atoWWwY| zX#ZrlAsHRR6ADhKhDiU!3=k^i4=O2;i2i?GR=Tcx1-fnyDPa4hh)vhANEUGv0Y~75 zs)G3%lLBo>OPA1YysKK1BmHo+QW5OfRXxGdF*m8lMASq!ZfXeqT<}? zYQHy@PYu;8o#Asy-NPs(ZjO9RKfrS2UN!I|L?DNM!WWptS=D{{HfA(Flveh{fxEn( zA)4zFrgKMgm#saRJT~w2y!ctS8+X2VtKu`1y!UNu^O;ZciSWh~nthWmYTXv65Ey5r zwGJLlL-QIQcR6u?R}?%?_~r1XVY9;BUZ1a`xvi83$>}8Ew1jfv*&CkJ%l8HE*X6Et zr()|LSCvbnE5@c60hYSW{omLO!J|);2PT2^Le|PSc&eR)86t$Wjy>erYy3du)-X@P zZ2zVfT@x$MlGvYDl?KOKh8Di%G0gEdiaw(U=abLuVtya#-zL*dk8du@X_c}8y)_@U z5CEGU${)sqHMe6KpF?f^ibKdwj7SENv`LMcV$Vp)7OvfW`?3eMfL?R1`|hv6gu7Pj zU(}mf^S`L5sm<4$Y31eR<8b2Io2~9~qK24Gx5}iM^N0C~Z9l&2tk@0sdZ;N5eq9!$ zarGX!#i}MbEDKt(JrTGbRviB5G@p31=U!04*B`%C-+0-=%yz$I6cw{t(;1&)C)n$| zK)Lt)VOh>me`uZkvK@oX!9b>v26OmlpVEX^MNPMQo;4fOp;pfeI+$(t9q~5jEp&OS z{%$V9T=*V1d+`n~!&RS}DPQVKP(p2AHNNZ1?-qm8Ruj7xI_0^+m~*dgyVoOL6kJXk zvf^L_*EIyhowI1B^~@a3-qu5vz09eOxusmKVlN!#A2s~=zK_pnk$Kq4r!j?~T6Dc2 z$j$!eO`gMlzf7G+MQt0QboPg~=d-ti36De{-}ak~;^}MX;k1|VZaf^%6LU<6 z$pPe+N@<>nF1T+ikW!Fs_}I3-l;KzIK5}+D5CvLvfxL#aBJDk7(CX3YPXfjT^%I1{UnCiCFn&TSVQ`N-nPqO0PCpbD@m-tIb?dRI< z(Qo87`4wavH-|x$&Mm%o&DwunAy^j%wg%8%&MBO^R$C3|nydMUw?0ucaaDvLZ8Sov zL+jX?J=@Zo=iB1)mvs)p7IvN5M(_%oSwdjEeKrbe(*L5-)799XM~SrY@LDI5ZL#U3 zB^69d&ZlG+ovU?U6L@d)>5O!WMCbCu8(S_LY#_<(sIj0_MO|{u0X_)Iyr04{Sddgd zn0!A|JYm-;vnyVoe=L`9+Y5}@ch83Fex)sPOZ$j>Y%}FUn2X=kjLr|e%$T@`ieVI8 zS1*TmcQvf7W=e!Pk|J+Y^<<4Ae!2!a<&<>3BRsN8;(Jlhis}~eZ7}f&@Zaw_8hue6JfmE1Oz=giDQoy;`r|S zig^OE^{jUt-eW422B#T3Sx_-i0^8rOzBO{r z;EjOp;zk;*S6eVULPe*)f$eb^lsVukZq1c^^~(4US=J;T`^`_Vz*bKiX!b_{m@t~> zB7N%n#U|E7Bf-=nb-r@Rb9J4)OY&~zoDPE_9{0lb_Tqzw&F|oc^R5($W^4bjf~a{` za^{6$b$$wc2FPc88yT%?+LLml_MllIZ_9-Yd$jn`t;TFeNmYf9M!&|wS6jMeva{o_ zP0GO4Zg;etM8N(`-lY|<+Tf_+7Sz`yq3@q$Uj`$TeDzrRy*6aBfZEbuEGZFCNwHN2 z2GOL`T%FXL!qr=RdM!z>^!^sgOJM^#P8xzfJ8N>NV%qkXVttOXjAguanbxt-ms4`j zAJ}6jJUS=k1!s;<(*NdQ7RD7a?u2QBiQ!~4?w0GAn#`T|A*kC&lJ+M3TJT$Ud!1Yl z2;q+j^CM>cngiRe<2K^&xb76pc0_(+2lXoOi{vI)v3IKRs<21FvAFsxP8K(EGSG{) z2G9={XqV+p?L>ECZs?@oXKQ=uv%~}BkfqyRbg(VWB7e`jlP-Ik#=AP#MrBp@YPMm_ zsnVPXKz@H&ENDn$B$mhLY#*bXUzKNGP8Y0kBB;K`At4{aqd#)7iRtFFfL;2|YhA#2 z23;M#Nj!cqoVPE$$KJ&HEv~FjAs!D^-JgtG7Z zZmI*kX6`P({UA_PB`~-;avcTUUAa9gKP4LL`39f*%(gTfK|sWO-b8iQc*60e>%YUW z$?~S-DDI)Y2T5D5+VzslU7Ca=;GJewa0K(EL0ADx{VPcGIMk}2FouTn92p5$q{Iud z!c0poFYGS7E>JE#8SjtHd2W~4DLveA+x1)oSfzIT% zsI%cMuk35!`C`b+=HKP#>joi!19+3Nm-DS>PHdgi39Oz$r1hUEiY2S*UG`I7lLylz z09$#H#ixl1-5c%a6)&sQLTT7ZMnNPNLFS-@Y~~u(n98*2>)XRgh9QZxMRXo%n@EZ- zC;hb4@pMH~V7>(viuX`R4edcocEFb{q?fbQjRsJwRm z!nTnLX}ox=K93NV%`$fFex)~4Qd7E1Sah`LlZ1pKV+M{up6g(<33mjbCr)H56EQlI3}SX+y#}mOlVvHa8Qr0vs_A9@6g=yg>;Bio~S#Vz*0jZ#vYKvY zZ#8AApN_xptyVjKeq~Jrex{C<^B?S6M=$cEb*J}E>YD=Ip}FyK2Z#V4hVZs)2%VPr zC9ZW|DqJ5$3z+CT*kVRPKJ#I?c6bOnFTN{c&bDi0ccni}4(N>5Vv+OuUGT%acfZVO zJODf7f2`&hiq^h5HR*p|p;oYW*%}vn>-Dl-G8jQOT;1Izvqn*q-}Hdrg`4Dhvk^C( zd7+hkqP2D+9ep`P!4H-))E^R_j6fs3 zKi%-RMDG~&r5{n%ve&3?8QgVKfj$;Kmgl|Q0&t`V}rwZ*3N%x5PnJ>PYMVJZfG zBI-?ymhJE*ztAl9iy9ru;cS0cT{alVVg25Nj)XOERX$)X-EKB$%X z69Jj0oX7iKhS5Xvx?kwAPJMuBfgfG>_QoX%Dt4j%nHib6)4JPgDC}8I8r=`pKh60y zO?T<9QQo~4bXS$)PUi|C#?n^+vo%>*oSFF(_AjRp;%Qqk06nMcohqkm)2~+BdO~|< zp}!VNfJ1d;p*v|V&zEYt`<6l_u&XtIsFBV{*rQs!(V*v?n@`QQ(UaI8+)(uP?k1sa z%eyjz2)2q)y$MuKG5b<)K@S@+6ZwDpZr!ClNc=yw0ROvh*#E~G3yB+-I4cZqI~Vtp z!^Q6;Dg-=y$)|1zY)&8emMtIBFz_Iwzfo7kj|}Tu?pav6y61~2_9gc7m-DUf$pZIg z3yhLURz9vs9o_c6R_jszJ+%&1IYessiy=?ftAKYeW%qc+?PUi{zlczqZU5*^smSNF zFiB^7zT+;{7Q0sPq7%jg8BtyQ9g|HsWWaM|7EH9m?ZVSSHWXcWv3JS%Y1Xr@*7{Zb zbBQE;s-#nAfM#pGp-OLoiNT*ay8JXBF~9iTSW_I%SghL>PZomf!Ej<=*J)XY`xef& zX1jkB8l5zk_}vDDuo9RUSn}m?BiV%)#=-Cwj7t}tD3l16n3KGOe=&;}jcewVwv%ID zw$ncMW#4g+7xT@;MUE6+&d~^B6@@Qo-)%-OTcPeaA`lm90{Q+mEavOG4S$j4asz4V z*C=#n7z$^vZv&xUG7o`5nyb&J`e#$>eV{5GSv}v}2_Ukb-sq)WAybCD=sdaMnt;&z zE?pYE+LhJw4Wa_UP0{ju$NxhclI!U{;cVuR4PvnBPbRJN&K=t$Z|N<&a_G-Rdfcr2 zu2x>c65f?{gqE7MRjYBi!gV)1$X&PGLB}gXC4WcoR@V9pyN@z!iC_u|5ylkl#q!zr z;d{NAY1_l8bz2kRZ8dEl@+TW(OJnRbxBxlX1FyoYYEzfKO{t6XEGDtR$Di)6-wB?l z(X&@CkTg_$P`#4E{)YPoSm#)LL5;f1qajOMY|NiX81eW!Se#a)c!(^o)1K5d4;_bE zD3O$-YS*|W+FYdhw&*mw!T;WtkR{d`+-z<2Wt3f8taIsB%(YN6N5JXaFt%^CAzj{z z{52|V#X2z@8oc9FwUjj*?NWynquBz4)ipQ0zx13d$!XT!JKZcu zpqm=4LAkT;Zvd%Ez>a-@ikBuX){8o!N5P-Ca}zgcC+u>TL65gD*=Vmu(LRI3lgHJV zj&e;??Yz2na?CsDGw0+d7YlLTUS)L+T3ZPNqR5Zs-Jd#lrv~|NE?*#zX4tpSyz8^L z&wVNU2vY>*F^0{i+E4CcQmR`7t?kkjzU&%&nm3Ib7|!->GBj? zwh&t%aXnsWTXK#D$}BdMWKy(_az2VuX5d&3c?Mm@{A~mfNMHqFNi2VByB8K8$eFk` zKy=w=PF-*+!nNK}WIlJ<8cxl_q59d8JvNNu&euH(`6jx>c7q~ zrx&%o0y5`pHNv@?B3zdUk326KZmeiay7_veQIPE^Zajw6Jx(GwTS~rIdvQr#K9Rq? z_9F9@u1HSzu``}oT%Od!Z|Y&@N@oyZ+~($H-c>;b*zL|T*|IsG^rw0LX)8j`Q-3kaZPcY+1}JvQ+lj z*41}n7$&_I{Pg1K``RmC&iCX=$$%LRGn~!C`NK-z7uiZ*&Ww+;J9Q4jAAQh&q$7MY zWp9s|kAsjP*CbvyAHOguEHR$>zf5Fs!3t$)wS>^$Ps#htO}ox{MJhrAlMULnh32NK z^TdE$-K%$$gg)(rS5u|)-&eGUcD9z6@D3|z&{}WvWd@p`3U&Kk#ZW*Xr797h>+r!p zyUJjDimCe4o;J#^06qYfn1q{zwJ7e&Y0n8%=U`X3UyIwb{Q1C@8JVm*fLJY_%@jeZ`A)AP-eiY2FjTc?~cA8gj?VktzRz@~4GT9okVgz<4a zR|!=E>e$X=JDUzpDDD0?oo|lKl2(mAa65Uo6bZZT<_6_0qUXS>#D@silexk1b10H~ zh}q-b%qNX4W1~lQxKeT-L**3f(O-hEhT{w$uK7~5v&IqKkAtplprmorV{YAaXRXN6 z^u6@S3WFTC(aPs5T$kr_WU8$FnVQfZbb-BQC8PjDF_c%KJR&wHW))?j2|I=^i|!je zyR~o!KEKNzfv*xbSE%hT)W1goJfc?}^B$yg?+OK%%30<$>p438 zIGajs;8%;5C$s9l(etBM-H+QlzGpD^5$7p(;#z)?-esJDANSzzX1BM|uX%^7<+krK zaa>vtSpdiNYVFhY-U}!JSScgK(=EZtO7e@3w9+HKYD zR;r{vE(KL=wj_(zzbvR+mi)L9DCX}`$KrV{X4Kkld)d?F-17*wfUxq(=AY7)R!_1R zDo06{yzuHt^d>*^!;QA_L@Al>xaNJm zU(OWM5L?WSs`TiS^4FdP-xmRB%Y{WUcd}fV?hje)B8&Ug3b@t z6-j_}IN_jQBNR<0+mCy`@e_bl>bon!V&@wAZP)8Br_S{Agz93;4!y~>e-Op6>%-zp zCpqe$h?50Rwcb{&2ka@NK+kVHKo_ST7xYmwoG5rf$FF&4x0_7F)DiB!=QdQx%1iWX z{{Z^)z>gu>m!AnW>}ZzH3i7Qttd#g0QnTg8oedV$9XzLI2NFJ8U39Jj?)&*-{Jx`PFyG>A4pUiA`GAeg7Zl~=p zxhLw-w(Z;7hq}}beWts|G48uO7~VUA_+-if0|G8y%?S`FOt5ssi~ZmJQrV)y1>_!Q{*KD5`QuZgg9<4SgRMY| zr7l6L&vd{4Y`*@t^`8Gnto(lyiT?M3%w2@e#v}&~>agD=e@;Vj)Ylds?ZTsO z#~Js{Hm<<{$1n*yn0lq4}}wMoR1gBEyFj)i8r(Pap#$}ck@R0+zm zuX1NDSUQMViw^hyt=m~f>%CU=cD_^OljvOCtn*>a^J^P}7VjMOBP-S=y{nlIuCa>) z^f6O<+B2;ql1;fy8CXVyEJblO@5rJjVkg7lQkR-=pki4pwk(8?C5U$zH>MKvmO6u* z1w*`2R&i-Cz?TdQBo9U9;)!$CJJCVgetYG>+-zLrl^7i-T{M_|bATBguHh*=I5a*T zzjP=$R>TC2JTa4rV&a;zAQ;TPYw^A;;@_m8gA(Hs^2-9Nc_T$DEH;_p^JvHi`6Jo7 zuR_U;*8I=+ttE3zw@SY{Umq8^au>xPJH#4`3s`&D5?((F6nyRaNavf>tB&b4M#v79 z<)3uWV+mjC(20DlY1ydmRH8Y9AR9CwX0@&I^#HK=d~b+1$!%}f;B-Dqbl4k!J6x$V zl(4q0n$tp`#wp%N>KK2@XR=B?dac$vtk&;OX=Mdw8L#5 z8ugouRnN=ddZ<;~Bo*1V+t2tyLN$3zQ)M@_o_M#JUcI)IE79?iw|7?CauV1HbJ*^! z&-Xa_E=&4a_$2D$Gdd*8Y+bE8UJ5IyQ|MxLro}$JFhnS)oVOM47Wk=b*MZG}x}OV$ zr$EFe$g_gJ`Rl5Ax}WSVE434^d|yjHE!H-UU!IdTOJd+Y{uiMtEi(!0dfK7=QtI6A zmOel@SdUi+^_dv2ilttUvigg_lP+1M3fc|{eG96l3)w@RlzE{#xENf}8WUJ?BS?Hc zm}n8MFDZK`)3j+{yhLtdT#g?u3Gr@_QRfM0w7R4i2P=n%Eb zdp^}c8wzTt6p=vMUyy{z$sHwtpx5&wzUtVUz+u{wi4B-Q3tYXQ^J!Hw81h(O?(htx z1@{E4v(W|FV{q9RSBbU*MV%QzW%EIdzV&}IQ?AVrj;u!vbEbOSXiIFLW003%bTLr} zM^*s1z?~3A;1r1Aw#Gn<7jz;v$iqa#s>EC493;2@W)?7KTrmy9v8Je6iw*F^`h{!r zsi`7ocs8N*&QDn;7n_4V!;rpUOZM@;xpKWUTvx>I&f20%$ZP_vB*Uo&Jsxj{l%#nE zN91xw=lHOQ&INP@b7aGETyD+wgqcaS0ft9-t(1Z19b?1~ukSw;q+m6_*LI2<>f4k> z{0P^-pmF`ybz;b7n6p^BNr74#11;0PILy4q&n_9eWQ2#)R@54wn_4#!pEM0UU#@zI zuZ}zHSp$MgLTw}Cw{#wn#C0{ zft@@l`r39zaq?!QoQeL(uU?fu*2hNDD%8I_9S zi9wX;OW;PRtCC~6yCd^VSJ!TB?~>TsAR8l9$mneVQrjFIe_Q?0{AG4XI;Z39l3-BR z%AZz;b$}NsDm{>ppEkET;?mA7&}I26Llk$5vf6}7gMSnLPtwE}?lQ`=Mm5c1=&0XP z<_D%JhT?TQSzgdCsw_O!VU2HJeoOahN^?V*Tcnk&If{$d#Tqs%#uB1XrgN>=+e1@y zI+tf{B%;%B0=R;y3Rn}qbTn7NZ4@s_Wv;5Xzpm70fqgieo8bky@nx4ab?1Pk{+4Xf zAFY);nHslMFpw~y;XL?ZvcI4-l$b2*(k5~xQ)`SD86NmF>t~)iCzsK$N#4-q$I_dg z7B#tN|CCy1y3S~t7-IF))=_#eyCQk?e9s>5@jKorQ-v+Mb$LZaQiJKV!_fqeg@r}y z{hVam^PY;eE|fqhDrgZ_7|Q_sePxvYf3-~(n~I*G{Tsy9JV!^l>((SJh&Uebe`5%o zcNt5hoaNp*BSR>FkztotsGGn?f1rK=e;@YR{5$y}p?Z9{Vgp>%H?D$X_h0bbX_Pcir@(MH3 z-JDDjo&6*4o!^=)wfHpTG+3oR%i?9dTIvmSl2x!q#hAq^yc6SvaDt2==jY5FydfIP z#L78iqm^slB3Wv`m~p>Ugq}5pF96*E&9jzJK}##Q#rmZs#w*S3!PhClk8ya&sV)iU z!M<)Gs;&~!vg@k%H(thLLKZeqt;Zz~h4T;yvnc^)7N@r;D=^*Su#a!O|c5(kZgi8Oz8vetYmLe2IQ1;R(7;T{uZ5LcyIC?gN51J{u zH4lsBlI)wa@!EWosIhQxzrE%WBb@x9tvPWsD>j!%AA6L1><)7#`_Zl=y|8e*XiG(h zT-wA+F1L-4M{iu{iz&xE`Lv3KRpATMz9lHE)<9Xy7hQf{uy`gv9dK{4_lrS0cjx(h zTW|8m`qIeWxs&e#ODB1_x;Sz%{h^TXndSIWrdf?_jlc`597F~22}}BhhvX@rF*OUi zrh}Y<+0xTjMcmWodLmpkjScf-4^egv+9JDow$coHSX+YPA4BO)_6tITO}NtLX}H?O zg>?@SV8pB~jp@=$Wh;}oleGMQXBKV~VHnh_hK_I3=SCKIbgl7)P9GO1=d1u*qGo1b5)E(Q_Tlr93GOD@{8s zuwI_4G}AwZuU@Xy!Vdn>6Bsp<0$-M9@<3pg73e{tT#T_Pu-txL<#$9Fm%b;y@L}O* zi<*P2$FgjNKl-$+arsMHj5Yu8R3=mALAPJ5^*Fz~6-llCj=AWt!g(|}^5~xN;Vf{~ zs-*YSn!02@Z2siWo1ga|(a^54TjIeYI<2BX2DVXNF01Iq3>-1c0C=tR-WQfMEw$zLOh zqTTahikGE2IS!zkCk0vj=>K5<*5sj7mG(+6u=0|h1^|yXZjUPz$7rABs6IXe0Qb4a zoaGd-X*y-YNaS^+jH=s3N^5=A(5ZTY&Gp=EGMwqa#Z;gLDgep*sp~||nN ze$CPZDiyEgxzRZ~eq*HznlWc@x6#j!?%g}jX{%^lsi;}No~&YkEiOA88^3+TQREp? z(COwjQF09r>3vlQ4uY#rI~tiQoR8qkj>bLlpe7;#{)RZ)PX&!OUG^JxWg66qBI_DQ zvsJxy(18a;taZZz2%J7zT^u2Pq24rOiP?ClH5V%^W|`wXU9Gn_d5v^KYz+HbU1Lo% z(WFN?Us!^#3^__)3!PlktcY9OsJ;@>Won1RzJ=8^9Z)SYH#Pj)iVHX>{NM+L7qi52q?=E0YoHG}{n;b6ka z1rQnA)gt<@cGvv~2wr$XT>*o6Z|@A*59V4~K^05hCT^Mx0)Xj>sX!vfE3Z?qehYdU zAKRRQo+e6UlN;B!lXEdt9Fervh5^gLIzefF9DeG+PrK5U^FqG0F$XFCHcM8?P0nS~ zN6Cb?%kb6J6vo7t|4?E}lFIzGk4x#m%ZL)qVqN`Fna0t-wQ;pBAYFLKopD*|ADcRv z>Ku~I0^Sn-i~6*O*shj_{A)%PYQLepCVn2Gn&q!|8%tSXM>c@uI#24{h^xhviP^3X z&Q~E&hRK~tzI>8tWt}f0AlZxiC|yBnHp;S}!?(bLSEU?`G(KCXi*1k+#m}RVG^)gZ zAN`HR6#Wg}den$){k|jsPI_3m&&ErqgRLm;k<{0lfrR`Z1wFkE#tnQe{erh{^GU5^ zNWmAm2uQ*7UfO?mUcDGBzDUTJVnIBfms1RxDT;dniF1AdIn!ib%BCQv8qx#8eJWA{Q``GG9jTg8BL!YkF)hDRnOs) ziSAcEX#0?t#srV`+)6$!L4T**BXqnLX}j6Pb>>R-t1Mn!?T*?JFD&MCUwwChCi7!}RF_QD^vGgz)lCD7(mHwSlnknN zhFq&e1m*ncR%r;<`FYVIsls$93!gO)Y%z<;DzRyrfMLgjQzsfci1PS*&w!FlD(_1N z)rxh4A-ktcsjHmANj7vlYgYY3(w!&4kcK#Ny@CS>X*T{TCq8h-GdC670*c}a?OH?! z<=3Sf;V!}?U|52=wzDd(Pbbv9ltQl5cRf`pUgAzt=vL9znwX#|!TxoW@Mhzqs`+R) z|Hs<^A9xbWl;~WWC8(t@9?K95S1Jwz$P5-A^WsuBKNKqYgbOraW=iWof;X8-Qr4eI zozUN}&nYPXFtLO@l^+~Q58^V^Q?;Q!6PZ5T-^c!$S%oXKMB`G2*vyc-TovXCK{EZx zomSokP#E-nTT{k(Vx;h+%pPD;<_?=P_?B=dex^9Fp@3x$v&kpX4VYga?+l^zR6F`jI*%)CSUSiu9C`iSuadyz`@P)tD_R{-s(Eaq8b`W32=Y#q zfz-0G>8ihc)&#~j9Zp|O*yo3#SOk|T|6zQl5nAUslYlvc+Uf92Qg#CcQh!l~=y<^i z|3Wq?@kpfdc(t7Hvk=uTS^)-E~9^}*cJNwoPBE?odp7Hy@QZ`|OkV=}pT8ml>LFz$SOX=RN^#B}Y1 zOOi8VGsEr?31Zs3Upyhw>l#wT#0h#ek0u6pb_qCN`}0@#X{Z4rUtcj^^a`fQB;K0( zhnQz@1uIU5ERG;qf>l8!N6MbCE2p%0WKrsdK@@a?K!*Do_kG{`*@)C~Nr06r981)E zyYCmvfA7^&1&WFFr=!uSDOuEDl322;RG6C~0Xi{Z28=Nw}Y&n#L8hnNNgntC$~XLfvsX@QMWt{&bJwQ5W}P}khBYDvH9Te+iE zhAFW9om`~U0ztsljPx|&VY#bM4^N#4IoY#u6EB*T8Ba4$`lfa(Z!vq?f)k7cq|OTwKm~r|Tn?7Iga#2!$VUgLK*E_oOxMWELEn{bGgC zui^r%l~R1hg4@u=jb8QRv>wZ`B`7cp&P;J^<1+T%?QHc8)+`dD#U^0 z6}&5}aY+(`3!>q9r;0@5@sc@yA4>?*SHl7-7Ep>&2Ql;O%kv1WrlLAZ~QoVA^;L82Q|2*7eTHRW z)kH>}$o%xEWKrf{$y9?mfAzc8yc?g&OXJcK7)?OKdJ%rQS zzK@Wy{4CMk^0eAIpvrARsLhD$VNrZOulk6$oLGfB)<#^=&lcHK<8tF;Jd_(d9de&L zkc=6+KE4U)&VBC6<9dMn(N2*BZXgA<+j;ceYDD!xULkx~Ay*NWmVIW@9M?xfj8^z^ z>I>!@X)=t%F*I8~*gr7}dy1Gx=U>Ga?lN9i5p+o6zrw#o7H9`AnCF;_jI$G-bf)pi z)iOR&+CKo`L(UIvha*fJc#YKi1a7f_wwFp?`|2^!EDJf0sq)wCxL5@?iKqG!Q5HSR z&Gf>bK=rBZPMR*pzOCi({4oY>{LMvY9)3a~-#L5u zPmDhZK}YO`Hj^1UXJ0||6z8JZ@+YTD!meQ_JhQ}am+k3l{-zCKjqU`i3=fJ*u^}+O z`tM^2i`Qu?F)?iNq?~!#^)_y=9i$PFn~xrwon2l~HkS>6%CafrJ1D4IT*Y?hqh2 zgy0a|9fDf{2?UqIU4jQfaEGFBcc*Z7DT>17);TkG?z+?6)7|&S{N1a*wfDDbeeWZ$ zY~mMLw}pBW9D2Uj6{QdzV!1@Ugth@&ED)0Wt#GMOU9s!WFJf+vtKp@mANjeG5!EV5 zh$AESbhS2Wn9xv46&}>{{ z=VQo8-YDXHpB)s`#to+GeHG9(=N3q8DNb|Jn_kk4gxRZ>If-N@)ZSegKO#U{_sl5L z)fJ;l36%s-9_PE3lDWo*V#r(io-tXS3KCm{OO)KDA6=+MAeN!drI{4YIy}y1T5|AR z2E|!OT3ub_+cQ#kx3+9fetekY1T=)`&3izmw zdhJG(jo-CT(}tah%FSUb3Z=`QznHJ8y|*R(g>NVfL0ia=OfnicYy##VAesI9DuHMD z62jC3e|^Kx%>Q|f(7#m|^iRE)|5r8AKiuiVY^+dqr4Gvhm__y(*O$1I(xM8w)4QfL z=rlbqw)V4lqVF$*KwGO0Q2#4dLY8EW^8+x?jJ+Ob#sz6WNRO$>bmA(s^DeZ6SFXf# zO0V^HmW~PO=Vo`CicZT0@5v-1S@Ovq1b#tw4QUoyQ{dk0 zy9-zcm(D8_%t42q+T!e5I_uPBYOK}YZlfbdzZEsm8cnH7iJNE7E@cabN&N^b zISeyOcMlcco??gK&cWaH#rRfeXWhqqX6xf=6c-hi91|lrdbs5%ZhM|S5i4VFdx|jh zUr}+Um6(kn;U`<~F21fl2))k+v+A(udPz2&s~s+*zytJH3U;2S>yWA(*Exfrb>6p) zlw=6$wnG*FUhi8Lu%W>uY_=lwkP+)5{OTvCRyuS|hQn3lWSqES8^&ul!Ah`sD}O51%o- z>zYH?O_fmin8q*jQ6b3hM+{3OTX{nm8qH{D6qO8w!#TR+H#@l?<6}rQ2hDRQ&cS|N zLJazHs#=QIAQ5Hww-|7ac*TOzDQdJrH7p>YF&(SMUqWq?-RlfanaU*|x#(j@t?fUW zYo@Bd(5Dn?oHk9qlW^5=4&M%vrJ_+EZ1*&BxFPTx)Awpj62KgN{C7F0*8np{-_eU+mxmcQ9!%(sjDlxYkt=vzhhFE+3V(W+ z-pX!5*GS6}J}#xrLv6Ms7fW!nZ!qm^F83HUZa<%C}IjarjORvn*Z_j`~KARjEgXP8OvLTc57qyJM8QtsS1;e zmzJ`?#H!sh>~?1 z)@@Ek&twW#Y(Q`Qr|!6B241Z(IIBSM!slkI{4aKt7xkU|g2sOVJ6_C57-qlhLtrz9 z8T&ZUjWj0w`h!YRE3c5wirW;+3nDI}22j{7fgh^v=+FFaLU$0%nAi7kI@t>eC6Q5U~Q-~cg1DdRJiRC>UN&*H!N&E_1e&g|*WjX>zUl{zTur{Ksm$MM{SX^`(D?^M0pml@TH7kwPjKQ@hj<6GZH z8Ge90a*-CgSnWfls!g*)*_OUmw)p=_#$lzkDnzm>f!tUrC8 zfJwY~gTW27QMwkXgjH~NHt`OAIDCcv)D<#AI`7O9!HgblGX0(gXgg)2ZeZ{`Q`9#Z zF?ivVx_Vb(is4`nk*r%z8|m1K8PBbQo}`r0@rh=)?dwOrrb{()It{(7$Tn=ZH8x5Oc$=+rl>~BY0-8>yH`F+ut z%i4jm`yk7ry~80ydDopm0zs>d?bXpTJ_-vria)l`Ov6%@rlC_e;dh2xhPaniS^b9d zRFTs<+bUUQIv3eWrBt5}9r=imV>@$@hk>fmrqF^qh(1eFz5C7*EAh3EYGU%y`OX04 zrDJ5u0IWnU={DPSOjKL*;jCrXEuV@2w@OZeiP|(SP~$^4_4AUjFlkIRT--?f0%~eP zMmgyZENZb4VLFNDrx0w>8ipCEh_Iz`jX10*^QX7s*{jDtAVi++CwXn< zn0lu4WEfdUR;=IB&#N-i!=kFb#4_vo(GgT*@$XG9jVH!^6YrN!M+4<5C9^sCKz+0%SMv6U4d{GN#W8vECfF6S=c zXkBaHVvF#|rK_L0l2Pa2`OH!iN6v7~@e$Thp>WTYFdBgkj*|tirHD`o*0k|#vj0+y zEr8gI&xi5%ue{%H$?`A=eo{6F!)yMCvnvecKQvqmdb7HpRf*B?y~JGT(Y+sEWb()D`LMY-UCA-#qvMn9SFstL!XN#lN$kxtOdb!)qQ5h| z7v!z`2-7wrjqYf41!S0MGHp-qRT*yW%)s~-SC9Hm^zmL#yqhw8i#fiyimqg7s%6@+ z(v{^FC)<&yuTvXQAyyet*d&j-!k3hZF+R1dpu+G$^LG~q)CF|x&QjPpE=01F-u0d0k=x3h=kc>4~iRC9{fFIikuM?N&KyY;FR*&lj9%wJMHB zYO_YoZ=;%0ut6|%?-nQyXyK)f>Lb!N^A5*jH-&%0;j_4;Y3~?xFJpLCBFiwX+mUF! zz48Nz%|TFYC4;^N-$Zt1=wrwkq$De^vtNQ#(;XS*8`1=Qz?kB-x)>*J6J0eO*Bh@d zK^fvLzMQa>0IaJJ^xP-UR&d{ui|rh&timfkq!WIBlrnZ!C>Rbr3I*0rWN7v;Jx{41 zZ+T6z(;Y02&!XEA*h+Rzm{@JCC1jJ z!j{=0ntb?RlAI{ae<_aKXIH4ye$A6!Y%nE7P+g21x2e~$0jm20wuv_(wIj60y2OPn zaH(=XcKXQvap{SNT^yWEFcm+F%{w(A*q+$=93L=Ph!z^cHo?)qHnZA6KpJG=ORA~T zIIp$d(Jos@bF-=Z(KbIrekZ?`-us2s8;Ii{P4X72eNqJCJ$3uI*%VhqfXiep|A(66 zPZ!E3&h2eRt=*%K7Jx3!?zYv(5Wn>)G44Ayt;L#s-p~6lww?R(R93ae*fU29b}S*{ z^YWK#l62V%ecv`w3zm}=k#Xz+K?!&fY22rT{;MvjsLI9i8Tv{l{Xu^jtw{*FkoyA1Nd>^Kwkxu-8QY2fM3BK7tpO?{XqlfQ)6ll zLFR-YWn_fP|BhJQVm057*e(!|eKR*V$Il}m(BBhDw10X^Pfs5j6~+0`nGn|B-|PwN zoh5WMfD&l=4c_j-XP1|iKYu1kOG~>g2Zb#OKr$8uL?e`oNTZq5aN~ach|u`(F8Kd~ zjK9J@!}cOq110`HK@ny9smG^d)XL4$ ziu^%BhmPZ)z5GYl(ey6Z9@?Vr{O2E}9jS%0+cIPgk5vSA%CJ7EJ3fkiabq46yFmrq zjdgB$15OrI&Zl!$K3Yx+fbJgd50LOjPB!}|Txs-e(1zOlu_M32WIYiDy|~RjQU$;< z6RiQJK|&>^eZOe=*j{2U!*g|l8)k!GxgR}GRnl8K_|5a!H5BGuo`d~Zlo?uNkA+s~ z;;Z!1h3VfDGI`B#ykqQ3q@*Va&BRa|r3mB2%FZ9LULT&e z8AjWCb=HzKqMuqH+d`hO@AV`a(>C{hHt|j;S#dDRIToeOcF97UG*AMPp(gqkw@D1` zg~2nru|DTjzjxxh?)DG#hN7C?x0H@+u*h%VN2jBE1FR=2UsO_s({Oitr=nvwI&SUx zfvmWXCs8_6H`w*ijvo2p7Bf!W_Vu0oOj;mq;Sl3sU|z0c^NM5crX10b3rx+!%B)$& z)>Ehowau3Qap(fpLM}iSm!r@s!I6T@bVh7RX;gbRGWZ=9=*7Hg zL=U9&EMKsu_;s=2PM=ML_h#x_m-CG;Zk(cEXE@D!f3_)EYb?IwZ_u2cdL96kFLLCL z6nH}6UhiCI5yPhjGp&V6)aJX#>)Ookt%6H&*yBC>*~qD>%7$8viV}Pa?F%r<;)~H< zkD3x|R+Yx1uRz-?Ij9+0VpBGW$y!OHn+^fN_Z-x82nI?=uLJQq?DHZL#F`iBjzqzM zCK~&?6t4@v{cKJCgea}h(@bDIYZ}dV95X2F`C?AN()!xT*pn3n{A2?ki9Aze1si6? z$qkv1**c~muq}dnQL1ASeTto)Zh69y^{q**884GrCj+0NI%dh0T@J6$%9nr(Iad(? z^ScXUZBe9k@+Dt2E6Jxn!+V{j70Lbf^s@u!g^}`62-3G^Ci`uR9WNPXhxdBFkUfMw zew2v5ctity^;2f7-@EqEhwof}^C7y#-NoBaXvLWASEQg>D#syc@|kLa>8U_Bl{2oP z>Z@IX`3b8&Z9`W^$4H}7zL!(7dx)4woGNLkdX7@uCP28J!mwa@}N9Ki!Y`UmzFx;WxfxXEwC3vz<=4ZiW%?Sg3~dSCrqNn|kvR0C+8yFm!Q$y}6H1G-}$ph9S08l`%Uj z#nU?1*@RJ(+QLC!*x-Q$UcmS623qBpvemy9%48)m4G*P3#=s{srXegx8m&H`zj2Rq zpCfMhmEE2MpkP*0HCrnow$V2FAU0#Qc9Fq;c75w!7O*8)|9UC-@HF5X^ZA>Jg@D0T zvE2<<(F*9^E&To=x3Dq$4mXL9YI-=X-mv=I3Tx3kkZm*zxw3hDX)VHwQ z{kxkyN%^CINoDKC?w55He-r_f*y*YH!9N<}F@cSr-~GD??z`Y>`aPG9b!~pbHZ>JID-5;`egN1sU?)A+_MqivdD_XaQK;{L&21ZJe4{Tybu?5*>_2 z{4VDY)hhykU{R-C@cm7Yd7tMIuk|spu>uqYvsui1_q0a0){Uv}vQDN&iM2VaWJ3FG z3@;y4e&W{{#I=f+TL`8>qSHO>p<{m zKs9as1;t50qzESAc4wX@0RByrWn`rF;u8o>xzA^SNxwa>Yxc9qp%K>{Roho=xP)1gnWJ*{l zmM2~ERQP4as!x-W3Wp=WcCh0qzOT&knC$>HuAXENI)$^`5O(dPru5GE7YpiJtLCy8Q_6q-{_`c&OFOP_VPf%@u2 zy%}FHD#=&Lh$DRhUsV&YFzOo9qVP+_q=Id`u65hB5;=V)oH$OLrBU!n$hJ{yNi5L&8R-GX-U?8jrzPIq^ijgQCKxpHR|;M4^ye1X)&Y7 zMfhySZrJ;8(}l!MIUGnDM#v+H$s-N!_RK)!+I|N5b^Cn?9w}>n)i%5|(udF`$!?<% zrqaR8HQ2X`be)6*NGX%4a!fa`MoVPf_WSWNw&=Y^kE5M$zczk(tktyqG@4WBseHa{ ziW&b@f**&!XMEa%HhfE`7|)*;r6nZky;Q~EnP^6inA0uMKVoq?zh!;EJUM^6L!y9( zkc)}IDbyp%S>1JV30ZlPKUzcHgCe_&sE3Pmq=~o7qJNt~O1-Gdmrr~G-Fvisi1f!>jJ8gcyL)66Ss~FWXZI4b08u!~D=M6< zzkG>}Bx0XjT~+z`@%5WGW_Q8#2%#_u%HXfB|8f{nQE8iam~Y0HbmBNUIoUrvJneam zAh;7NOTGKd^XAQ3|9Y6^|M{Q7!j_hnmXTDE;2)V-|0Ez5-nU#zjj<@eW2ve6dH$#J zGOHLv^PLD2{Tkkw( zpTeTqx6ZUrr(^HykCsn&wb9pNp1iPwvwRmEYRBC@zIN0qIcD(zw|^z8b5Q(9cv!sp zvbXi-Rw`CZEcDGK!IIw{&*ZmHDldIKNo(D*EQ~p#hxLj%oo<+tGw6$li8Tsng7>iK z_6jH0+g0~zy+FHMc~mP3=&xmIS4dq0smIOEZe3S*n2r31$Mmu;`gpMbdlr5@oA&#l zlu&*LOIT5;H-{6-co6i~6>!IFv~4n`=XMF?`NEIB*kTNE+p)-cXI<;^){0{2q&1DygwkgW%-A4~fHIvK`iz1mToXlk*<7 z*PuJLP^pp!^@28PEWYZIuUnWrd+t-I=aJDN(WT8un$S?l=cYJU3WznRik<<5^7;HE z2gWWo-+0?Py?r>}#hK;uO901a#ytS$sgsRSncCxt`V7O~#yB2^Zg0KXu2LVx;pofl zP|Tgy)cKK+sM7Bw(%dSPx&KBN;NpTFItCb)-$_v6WY&`YI85^-iCuAYTy*s+_GN-Y z&SvDoLaNmm{b54FkpKd=R66hPrym%5zeG>B!{Wtn2emZuu5{j%G*XK@-b0IJn0otF z3R9>MNK(KwavEc&0yuV;z3naEzLXl*3(toTW#@%rhN51rHieGS2!$3j_0XlcVbcuT zb>BsTf&Hh>eu0Ke~$4-}Kp5+*!)}8ViVo#Xj`r!2a6o$>1x~w1kzhawSPJS!X2}9v{zegRL z*1;;j8+`k*5}cn=8y-BIZALK^5n_F94>RYASE*+}cs;*Nv$*eDDjiDM%?LJfFaHFO|2svd|MD`2KE4x{c^c z-=E&lE2pjQa%_RwlwJq!$boP&vBn@GBS4(C;iAM)ur5oBCvDA?Eb(nOo0!0?EX0AE zarDiKV^69^!8R{4O5Nx@vXOh4!a0BHx{0SMN;`6h@}FW;_Uq6Wx!-m5o~nIjOIvnKbui3*EE8Fhlq+qy& zfIqdMU`=Ykor_iq0XOZmvYw*Vmib4&H7mPK&RZCvx_Id?=>l03SszwRGR>Oj!rN=0Bf(R98wh>Lofg=&WTHyupkb z*_HE~5eTu!)a6~UKm6iT3VlPtM3$}d>sNL&6AX9JjF>nZGjGI$2(Gz4&e5)Y+>Snf zypF2PEE3wktLT7Ggubs{bs=RY8sss=z$3xv!sWN6al6=G6WlfVejF>%g%x*x>qD@5 z%kDINC_HdQfhnE{fw=gF9c3TbnD4|WO0OBqm4Rm$jo`JKhT8MP9EZ?6Cl}!6WN{sT zgR{`D*q)agljU=3d(f9kjShTxV|=jn(6|u20Wc`6q(f#!K=9j!Agpowij_=kynDZP z0H0_F6+|oxbT#R87|!-e-kBd*N)Hf5Q~-GnnN==mw4c!rT>~YP)bR{Z$<{Bfd56O` zQ0(V_`cPLZAy@Ea;PXK=))8`ZJWO{N1}wa#K+jX?L6u-y!j1?&gpZ zhdz0L(BYh`ns1NYICV;be90lD7bLBxe)lm1yl|};!|D#LA!_69Wb@bgi)fl}k0~sf z3oXj7Qt4m+3&(7#1Nczo#L)L9*KCRw-g!UjmWs zD;$#p4-XGXNyx~yHhLm2uC5Xi5~O5$iT&31Wr!}+bk{q^8@_%hFZl#pyoZ&mq+SKz z>1MZ%xdk1ZoY1kdMh_1USKUVJDbtbsFd22nRE@JMBFe7|`m{nGo}t8#``m`h>bMd} z8s4unXzF}3rvm^Ln|z}3pA%gD>i z5B91_|MR@w->{WG84BZ5`NKGOq?%|!SU;BX|CCPsSMu=hZt@S+?ti5t^S)D&^E)oV z(?i4hm6=HjFjaBmCP?`m^)KjY9^WJUXelYFSFc`i@bGkxkB`H%e<6-b8=rz?V`Ish zjvGKFDw^fGJBo`L{32KqQyn)>ATE#_u@)8e3c)$$6cxFdC*?vfF5KE*%^=o-e}>7$ z*Vfir8_M_t#UOp2pJ5LYp>n+Uh7%U+HbWql&G#UT&19(pi)tOu0ug_ zzK4S1+=I)P00|8y^E&Xk;-+liK|w+NmHdA$ft#8U5K?-os4Gy;|3yQ`%jI0k@AyZg zpzrzA%hTQ!K~YrNs|<*)djg{8HXc?82RBa#R~L#~SMIX`@~dRIysMiZ!okkolcJcW zR}zp?|B)hWEXb<&JRO{EC`9*Zt^g%h$R!Y0TTdSggbjs>+ZkE?+MmW9Jgl57096D9 z_EU8%Aihi%>scUN99--uJ~1vu05ZydsqclbvY{ZJg|7XZn!KyCvyF=<#a?e>3n05h zR)actI@wSZZVYl!P~4+XdHxjYn?{%l@r3RNEuW2kvj0m+=>FS>c;sSfu{+n@O}fkq zE1pD#SlXC?FU8LOOiKFPc`>n_`x9Gp#V0Vr?F8ybE9c3t-`2(cw$Facb1{VR{EZ_5 zZOXX_{d@<`{F)0_+2U@?Uk(4wsPg86=YA~7ODPq@Du8?<&AQwx(R;E*3S5c_JRVfq zJgTqlN#bXGCmgjPcaDPM1uC)6HjaHP52`G7J@gZ>Q!h}44<3T^%cXx`1ST`-89EukgzX$;z z^Oxo1qoaTCpC}SfYaMUwH2Q)q%BqygX{!$4;Weit-F|y)d7_wcP?l2oMQp)L)r*<`ENA=||PfHeM zHXpyY)vW5W#ld_++^hC7=}SrFVj)}83ld>HrmD3k6XL8xA}IB$Gt11IO>MR6L#-&b zcd77KGm<1o)A4sF^{O#z9ML7neJ41b{=4Q-RS(qHvAEZId_918(Bs;*D|lPxFwrzv zS}@TeHE2^0f9P(xX>+o~YN~1);ZU{7jPF!J4m7VsSNtRB}mTqP&&)M)F z)$qF$^7}?Y4o8C1-?9uF@#odb>~70KLg?^YEv6&$`|WZ&FC3GYhFnjd^7G<^i76Y! z1F>>qtOJ-F*QVSETg^y9$S)fL*juP>Nm94DN*T4kIl9C@U1D@=^r-JmuM7>bNp&#g zMBU%pz+ydcq6B2T$IN_p!w@(o*Yhx#p2s1ljqckEDr_j(NvN%|knSc+-EwtBfY*on ziwqo@My?`+Ne7XVvoviax4Z%-da7WkKT~eTnMc2->ql)>m;PD(O*TCt1nZO~Q`PFh zu8Wn|hp0*9)p??`RCM};sd&ai#dJ%o%}>b-*-o;voeIc2V*N5o`iQd zJ2N#{-VNXSSW%=FE;5t6X=+|PUfuU&ta|#uSfvygMy!iO;z%q49MxaqD&(Eou2=1k zbsrbFKHuFRRihvTt;XxmR116e4suzZFz7|eqZ04dcZ;+5R&@QS_b3?H{c@g7uf83* z8GLtb{s-;+fH8zseJ#2_VS%x}UMP3CJqwH~52(4{_3$A`kj3|7*N?H??5!uw*NZ;s zSAKPlhc>!6fsN@F88pvMNMEtGPKJ9gw26jJ(i5g3UmhZ__k~P7{#$PDSkp8rNRRY( zJ~fIM3uBB1rnoiBnWH8Ig%m-%2R_<X|dz4$49xpRe+>5i_ER3*DVT{t*?MYdcg$y$5?ApYy*J&@&GtPC@(I zE5xIe*yUqg1U1-?xc#+eA&#*JzWh^0nDC)F$1cLo!hoxzNE#2@ei>d35{ArWvWA>Hru3m;` zXtU#!kDr4A2lLuC?(@6r7?5PT90S*QGm-35#7x#fySWL3OC}dK7qToFx11L3G_)3C zT4ED&5YgbV=hVhG^~j`=ePy1edijEiW}t%R^#;==@Ur&y;NoPdpNoo&Hjzrg5KD{G z$*js{*sQjn0)4 zIl7gyw^y|Jj$J0lxg&P%;KgWd{|t*9pAy7_xf>Si?~hpQOqYD6<)u+kYR7FgNJg%Yi0XVFk*>ok;7&Sd_p+?0-p)~kxF;}@a{U5!(WQOo0cYX&bF%{@7Bk1 zSEcsXr22UVT0CS6WLoi9zyn^lnQYx=-Z@pih&**Uns5-WO!o^(8fTZ8^Uh~xJ#0HF zLN#V@I&O|YbT%IJ;n*N+91Y8Iw94b9SXnpwZ)p+^Wv`C)SECfg)>8O42TCv@x%sLN z{YjYv`kK27Ssi88^)4-IT zKXbMpyOPIxqQkX++5-ADmXj1*Zg$vv!5=y(=X_Mp7YP6MqT<`2NJ1ycyfl|HY%j&d z1;NtolvylYO2#Vn0L6&>b>eisZJRWOke-riYsG{hq3&x%gv)b zNnR3MW_dJ0Dl`5^SjpWcrQDpd6(iRmX(uwo(rpj1C7trGOlU5w;b(Y8PkPLBJsdHq zW~QY_Ex+>-;1Nf{Eo>e$3n{XLSf7L%ZV0N%Flkig54_iR=Gu=w){R`sM2{jTA&02N zeMeGHAKck_c(0FtWsAT0V=MA@^uxN<{%WO!!;RDq=vGY@%P>n2DP{AK48PJYU2KR3 zzc?0tv}9M~J81SIP(sfD`Crx-xrrG>A!X6Y6dJtT(4kK&BG!BI6AD3xQyCOk@k4nt8 z4TAi3ylcc-ifuxmWmY~mN8q>hi?=Q!zxXefo#~QWD@o8?OQ=RC9})9D<#ZDq@Y_&HlZQE5i@o-vTS}J|^n6=5y37uiL01n??rXNNHyEGW^Rc%}_qM8|; zuv}JFJayh@j6I3Xq+gEaZvW_-lsBbpe^)Omgyg?&+w=o;yNL07@a{Bcj=yPeakSrX zdwym}ns@7ugjmC9Vl1z~Rm80m9??M8#-s-Kt*@F<4b|?~e}pVrS#3Jzue~=ikLMxM zpPfZ?U5JV`G!r>}*en-fT2ryow0~*pp1AVyr53zh^^e55`}|uR>B0TJL2b@Oj!ld2 z2O7pbTP+c4YtbFFx9`?>37+}P+bs)M)2&&5@-1=sExiB1uW@7sV{y0TI2f+hEqaw! z+P2vB$Qe=N zH<0e1?_A@}ICHxn0^pIl`ZNg-MF9IE9y5tgQw5V@p6~tt5w3=<)!LFFZ}MgQA2Hh# zeR5R9^Y=uHvs3W0=^@$^3hngPB41E~Ffp;jkCf8+Z|jVOAo+~?C?(|EZzMzV4OSfo$t z>={*XowBDN)-F~0$nSN`RCtw)xb(TqRom5wstg+U$qeLD1<*MT&#hyrftA`x#pLyu z4ZjYhS;On5u7(!n{k zj#zDl)*r8JR3i0C@SjsTotx}_W?ogTu_P##ypO-!X(UD45i3zTGPOfIZjY{rJcdWp z7EcyNV=QNV_eZFCO|{WYjBwB2!WD!ru}eh2_XvzJ>8)Wz;R*5ATO#!w7C$qD?UlaQ z5M2o+^*a(QRRTB&u7jU_69<8zIgFzNMoQn;mJVZBdq;N|N84Zh0>lP5n8#@8_bn~V zQt{+nN2}bukb5#M+Kk|YtAiC;`7tGqyqsFM=5FP4&o4UylX3b!9nHc!HI=(BrCV4H z9h?pwZ}}-~XybJ}2TKjOqv!e9iZ(H?&9G)W3;ryCGD3gHl@UqHlw>)BH|8~=KOT-Eq0)j`w9d9R!>n>PMq%y_wv4cur>^CF`-Xs<^pnmVSz;@t#r z4|SH%_rNL@o^6KC#y8CT=6(I?*WV}!uiiAk1TTTrH!<@W`!z>j150?A4-aDYl_b93 zxI6Ea2(GbQ)Jgx*WW+URB&m`9e(5&5qbBtRR(1m2_e!E;n4#h2s4CEWXLb{#r56yF zpFL4u${X5ag$fB0sES}aUYbQB*e7sjA>MZLak^XFD3f~g7U~VyI{#^Y?H=`wpQ_iE ze)&2ovuVOTU;;iZ-gbuDC7xj{89OhZeWVdtp8cwJ@OMY-%ZhY^#5vYVm^#-|$Bb<8 zMN##wBGN^}a`RnvK2u_&MoG}HNK=Sc3lT61llr})Jr(qm32>dEw|V}-2~c!|Xu%T9 z`QeX37_$0_q&_4^-_kHEfpPw&N1I`ZG%QEY@g{HHUJ9M|_g4wyb^1u%U$YlQ;qS0D z=7khk--Hag8r?F^Bj$}ujXEXzIGqBxDNKDel*4u1=r~0J4oB*iGMpY%n6Is_3S|!z z`uqDswX_5{(}BU5r%@SyKF{X8)JqTW5nZ!xzw5~K(x1kahL2ePR3Ia{C2wFmk}ZHW==_D;o%UZj)yoaB_4X^amf_jo+cO=C+I})MHT6z0$G~wj zHS8FHo7#?0n|SaP)-V-{EqMD-e?`|u07F@4EPwU}#m( z{T3q^tXX0O2V|N)T3IWhYfpaL3~Y3ZXHERTq|sM!LY>S~rHVT0j!ZOxG9<%Vz4EE< zleo`=N@y?x!p-tmYE+1`<$n&AuVY-&I)F*H8wKi;&fY0kg7Y2qd6$W4L21ULqnQE9LZPI-t0&| zbNTxUT4=zOy-?Ms#1LQlq)i~?TRB6S1J9C+P>j`gJH}qo8%4|%6j3=}i?l+PaFIL+;@x4-0(`j^)`;L+&Q}@)NTel*88ztN)yVI=y2>xLC_3;I; z(omHlyZ$4r+-?3lDvR76oDBVgL&f1XJ>zq&uB&fbj+=uIhcc;2ho@$;AH`{6E1hpG ze?iob`#6}56I~&Z7~^Z{?}EDS;Gok?x{sLxhLbKq1qEK$;^FBdUt=8hx`uU7_21eJ z^4i^+8WCNifRa zgE#OZn2~|>nXeIa&AUKIyGf7mk~b$ctC7~A#9(7{6FXghpjl(vmwmrKWLfozR9QaZ zujOY6xbx#R{MjHo9+B{I!v&CQqOfVm{I+OM8kdY0al3)BnqP;*&Jx#CAo?~m4Tj#k zgm>e4@Cfx3Uxb$2dD6WA3mt3_jFm?&t7IDA!KqnApSab2jdi9TwefllfCzu9QW%SU z`!B~N8Jq2qe1w)g_zBQD+ar5P9z1Q2R@ZfcpH6eQSH(_DZBg4I!~;)u9%0YZ?Cqp@%-@bgm^9##Dpz!Y-7-KfE&`NFwmn zMb&QKYg{#@%pb0Vgx_rtX$^Fe-c6-qim1}cbD;csb*Xi>{EK6*SMi&36rUEv>~%@B zMQ#@GvqHNh8UI19i?y%W!|)?>I;1b3#gCcS-j83nlOG8A_#}WwP9et2x>v&h0_91< z=--0bOD@IYSX{rM;eHpKB|$1j-bGVJ&Y4#< zyNdJDEvhg;7yroC8n*9#3K;Nci$a6N*8}~0QW*527xt0<iC=# znvF2ulBzJ*PoHDB#EVd41`TI*xdV`hWK#^w;OsjM-JLJB^seun$bRxr;`xC zCALb|k2j&kM*E=wcM44ketv1Uo~;;` zr$T>HX3;9JHOm7{Zs5g|H2b1q2+p$xg052;xY<9`xF*FhF&*Z(Fai5`)#nLvp` z0&}zI%I5({fm@T=##QY3x6af4VO&2Sv9KLJ-5S9Z_wo8TuLeE#Yc>1uP6`x%Dm+oF zsM`vd#hcw9SQrRY9*{g!8?}Ip1~-321hC_R&Y@_AArDj)T6-20S(*leGnH3?{0=|W zT5b--P!}l97sH{3{h{qk+9tlom8cSc7Jj3c1Na^7r%ykNiqb|adTmTf3?)|i+w}MKwc37m{x{mqy;N=F@}AT`R1B&7sZ+4do)WCxvCF=xCkF8JtFX8B+&TvYHW z3vd-}|2urJ4zV3`!J;y1_qoG@^|QXbvu&z$$t}5!{uy!q1U~hEV}npVLCCq>y@k94 zEVH=178!mL@2_Dj7M7RS*2k*0e6A6fkD3d1^b|)Gqh0fDY3x1NAADAY{WT5|70Fqn z1-z+p+^|s8Yj6@@5e_HC?W~?DYa(ph+o@^lJ|ATwPxmnc5ZaeX;Jn zxVZR8T-=8zf(%lwJNB~r5ZoRwxIMldtvC$$cY6`^>FH^;RlZtEc3K(}pdAe#z6Pk8 z^F$j7^>ua8PlYM~KVMuCvlS($Y(7QD{PW2ga>f6AiswJ7b>!=X9~~_yE#)(*M<|dn z(sdOiklpIDg=lER0Bd87jh%Q;ZsmTopAdmS7;cNC8=jazxraP>yuZ6!2p}tOoC%3U zdTk46snrScw*FdQ$B$Ln@rEKeo0^&cpj0d=CDq|(4V1?{P4fI*@|NXmu9&R_=}XwP z)z#I8)g4?zgXip*FrJvpz+xdKNLDL9h6XE|-?DV&igH?z$a%AWLr0z~gLynrWWCB2 zWXy2_^q6YJe(gDp?O?aR{>IuG#K*^HWPEL7L)UDk=A`yE00js%COi7if_-$yyYiLG zbzHDgr`y~jZe})GH&k?#gRyM~Y)@g-kM-V#m|{t=BJ;0-F-8epR6rNT>BklLBlVS1 zxkSWhEZkdSVfk#9ErE#p)t>D+2MqsTfKp%W`@QUqt4q96g`4s0 z9!A!ft3NAL27N68mQ>4|ZEh2Go`78F`w@nfEpGT6t?~^d8jdL?u>mWLxseIulf37E z_Us5rpsrC3i&fkG#F<|FjYlbGKzpiJTnAWAGWK)bZ>QBR|EMs12o>M^2Qr5#WcaZiIp2bxaBY#v z9_5dXtt4C@RJ{cXl}w#Y-n|)meeqg~DveOBc9A)|?wr=dgBnWEf;TP!?fvGVzJqr6 z-;V4fA&tcrb+V9{Rb?EwO<~Dd<4&R~bB9nm6JrEPlP{y8{0n_Sw9-Yz7yfs zLP`lt!%RU%n(s0azrl;g}G<Z=)N?I%>yf2er>c3ZUmZ^6MHLSm=or2Y+I(mRcNal6Q z65vVWHJTql1!?bo=|_MUHDe$WtB<-V`|YkaZ9Rc&}(5>wrd1>aGc+hltx zTI~yC)yR{zgVi*?yhMnEwmrzl=yzQ)(oDDnTM9o$Usi5jQmgs==!1Evp|Pwe>Q-5S z2GP`Kl~NtKfOJ)dfu{X4;`?DAO&mI|F90AX>3mIa0>}A)&a!b@g9O%CBm@>ci?^cz zrsD;seJN4Rk>w3g%MUyH&E|(n7s3E1I{M8RBds+pI?5LT;JIy46z5tR8odYl{`a-7 z8A4_7iMcq0QmnFUX5&jXNl+L4Sb+&>G_@-sp~@)ygYRpi{$1^f4_2$+KMlS<7sH~B zGlZgQyX8v^Z)fHaJsdJ#+-SI}HD{?rj|5_59aSnc)%@d%WNk)eG9gYxKsQO}UioS8vp`guaG>%m2x z%_aa+<2i9YIuyK;`A9~<*LJQ(U+|e~DZ`B`=*lm=KJ8W$5h+CVF2xs7!?dwZW}U2B z4r4!#lWFhZa_@7#qde&VUItX!lVO-+ib;(62tkr|APe#BtJzfgHQ2`0LS87RSNxhv z!2-_?x|TOrs3z9nQi`%cxu=Zh>oq8F^ zU|A+ZBjLC#+=QO3;+5VUj6O;k2xHg4cM6rA%D$Iw@7gIprb`49fDQdx```}7gfLyX zZvB2uO}9q?fk0f6TaxtGp9qx_4MEE@iibzIWc@GTZMNtdW_nXMOzQ86pCx)#W%5f$ zz0zKN+c4eS7;UG#2#^XW9t4_HU3Vw(un5f+Mb;Rt=_(!H?T?eK2f-IzREn8qwN2_w zgMGquOl&}FztPRb>MlMdE6M0t$6x@=tG~pfjNd+xl01K*W6J)7^<{y^tbfa7m*X-l zs7jN0@+T$56WSjfqe?l_cJJ_IQIH(@1mA8*LHVMFjjzDi3x#u>^hSDmNjCskGBlL) z>eVYpI1fYg>SVn~KCd0|TdK`ryNTR)lxBkcK^^1pthj6$Khxnm?@}Z79pNL}zEloe z(9J~sh-1Vk{0+nE8caFZC-hxJ!+_vTs7>1q*o<2y;2bA=fy7x3z^_O!#jN-9Oc1<> zQaf98ennga72A(+uPKhJe!Lodcd%@Pcks&rEpAFyB6ORIrsOEt{C?1=WLF7+=f&ULtoRemoDuK{fCwC+D=XwtH;0-q!(RTV9A4#=QNf&j8)}#t zj&-FSS9q>Ftmw}?kF_3Th$|0V8RQ`D?g9uMNG3ISuISJzlJ&+sRg_LuL8sxK)n3_@ z!VWe75e7V!0+7BVflTa`ZTcTLKgu@G186NHmk@iV!)sleG5blruuFI7BQk*Co9gF6 zY~Hl1s?SM9Jnmm9u!N^NZOYasd<_*3)9c)3Ujb)6f#|Kowos;(Rc$(}*#CHM6&6&d zF+T?2vbq~z?GhrXl~X}eTV{FkB|5Wgw`9syxG=&!1NNR!@ttU>t7}>Ifc?k>Gq0Ze zz=0R7M1IWH8u^YW0}NJJL2k%6dk|s_i2VhH$QGTapeGuU?A ztF0EpDmv_i-Q(1x)Yb~t24$_!ISxvgk@N$LJa)kGbc$f4MT3sGl2q!!c~)S`O~#`4 zW-cCLZ|$U#pm%vECPJ( zT6*Le)NzD|Vf)yp^snk2__){(zU@^Zdsk7|BHzUrri7aw&3R#6V`g><4xGMqJ3<0U zHoj=IqKI_TX4kowSZG+$xuWjf&2~3*9{}eKv6p*+4aE0Wbzd+!T1OO?DDatifMPp~ z(D1VJR25IwACVn(Mr;hrhd^1s3re0)q;RDs4q7T2$IWerwUyWsX|51Rt!4Y%y>RvB zoi52MUG?S0rHO|1QwiOk7Yc{{Qhd7`;WW@r!XCG?a}+?v$`_k!8`>XULGVHAF$y&s zvzy8QE82sht%>e<#srv@LlJvj3C+W=K}9E{P#n`hMa($^1?0PTi}2WsmUr&-3=ihN z&($)D=%&*x>SgTV`VfT6-42si6P`|P-@Ot%&tKbU)K-cRjcC0Z(F)(I*TJR3;MXJW zl=8!}zA#xwNbuj%G&!!L9!^b)1MhzDr84MX;@-L(u?Ax(EWf@br~qQI1?+^m5V#k_ z&pelWu)Yl|!L36ritz3{@^{_uV3bugc5A|(!Pg#+KC^Q=Uy;X~o1-*NNl8!v-ujK% zR@qe54`7+eJ83#hL$7s*rlD{9Q5NqTCToHjLOmizg*sk_`dzO$2zVqN|iEsks_3;w&3gm!ksqyoJtB2}~ zcl2<*MxFdSJL)m1gKq4cs#iI7li z`q^-KRZj(C5V~S-BXAR?rFMLAnvgh=-aH<5o7)kFgEk9Plqk2s^>A1xooT&>hLvcxhZ0{6C=va+Ky3itX?LIn_f# zY40n?C&V}vg)+we7nz|9A|*AzFjF}ECjo-SANr@RXSKKTc7SguKq16!27F7$lelx7 zz6wIBf6SCBXr=hap-@CkC(FcJ|8D_-Lr^O(c9KlrczJuLx*RgvKJmr@G)O!OC3XCn z>>}?n>{yydwBCv4>=?!&tnXH)UyIA?o+% z2jq%Gi(dGjhrNu<|KZbxf0WSrj~_hzzpJ&kF79WFYH?TVPgC`(SONR2fH?+dnIk-x z$5Mn&chc5<$UK;}L1OFn6`B1x2M3ZgJx#kf^QkgQE)j~H$^c4VR3uIbMYZbfdZ@?k zKOL$?P7w1bdHaD9ic+JobOS#3U$Q399^4@E{`u{UP1f(Ngo=;+;H5fB*r7Xua(t*@AmIeAYHmeK_onZ>v0h10%F&8SEeDwo_ zmm!|K@i!hVEH}UDyuR|z&Y5%jPBjjlrbs&$* za!o;w9wrH8XSMvRpQXCv!j>BEqnfqlf_^ZPI&))qm2wBRhvSyyY5P*OM!S|`3~2#x zq;Wc=j&Rt%V{KHx3}ad&l!RjHUIm^Q2qky)`~BRrcJS`nPBEOCP9f2e+0V(p+g(=b zD8bf&C0eLpAHzuRG}g~orX=0EOZ{4snrjvy-j7(`fMsp;j5_?7NBjsY+7oTddtL!lP{Hu$M1atYj#(uYS5 z-tu2^!se#5GD(^2T-E5XO`$AJ+j3BH8VbeQ6JvJ9cS`ZUSB!RJY*+UNZ=of9pAENE zIhq=XwM)Npx0dcGRX=-F`y61WDL5l|%EGrkWPni$F$rApeW|jq;;d|F%LoFal9}H< zqR>hKmHsonc;c`?H7VI? zlLhR;P}lwSeF1+9m~|C6h+9t(6RV3W7$cr~kJRz;Jg>LT9Mn@jtJ%S)KYNRL7p2K< z+3oMsIkdruD{75 z7q|aP?)^V&MO3BX_9?Qa}zn9bTq9D8v^wD8F7jyC9(0H*oPB22UT0^^+RGQAA2by4aVT*xFfj0ymELJ#U_1h1U_8dadX9!L z2ZE*1FKkC8eHRQ2g06qhqj*jNDl`xiqO7ifx%QNhj8-DDizuro$s z*^m+%ga<)`-dVbsJKH!yY`_i}MA-CT8G%$Pz>7k`No+gZ-~Z8*Bw}H+8neFm`0B&KPxns-w|htbbr# zQ)dSo2WyN!RGYzQ80LR{@9J!BiE;kmkNlr#@?a3i(gA{TF_h4ThCTm>reg!Kx5Owo zm|(@gc#Wa_?yZhT+TM~klz963>R9uu1@;e&AVF-33sc;zduo* zGK(PwlbRx&iA&S5ka#(GgS(3+?=Z;hl+-l6-m?jApWO!?60ik!JJB2?^)|I78u+3EBj*2M`^_JWcsKg>!=^*gcAu69Dlg+{z(}rq_)EDo zGI5q`1I9LM*k|+i>nInsEN3Q82q3`-A7< zRsHbV1`*{1gtU4a02|y{(Pdv+Z}ibE!{Kl5+t+yQ+hV6kDUhwMYXWZd<>GR+pj*}8v`fzX0E-{D+2*O4Li6~dD&4NgasRXY)SdT zG)p<8i(d>!h<&pSZY^!hbubfp*<^>|S;qN0nLDAHpj?Ax-SESDgTPe#(O|sPGE#f- zqFs>06l5uBWA`gd0#^!U;hnE}EGV~Rp)742^zn2LKG*8gph8P!X6RsFY0xwZVwNE6 z4TVjgSoGGOyT-P;^in zjOg}MBUOv829M@+Fw$uql6bbkqUN?*8)tl*&EiV?XNrk{Ji7f+7nJ;J>cDbkA+n-v zgMono9ZSpHqQb(Dt?I23i3NPWIx^>Hh8WC=12}sbYS+UV%rX`r9pgC2=~`3m*uyHX4SFZbL*vLWFqWZ(D|SPF8f1fAYX{+8y_RVjql zxaIXHlMmDtc&@OS0Y25H9fY{2QIh%8czIkuk8kj*Xq1}B`IBQ+HtfC^U_fi9^&+cG zRliKwVj=1i7Mu2-GpcsaGI2 zKUsL=CeN7((RC>_47>G-4-tOJmaEgU&|r}^c!B)XQa1acY+3VNyIM`H5f%G6t0KYY6P&3ZgFR1C(0_)1xk~Y{mIz`73!+^6lL)K zCXX#@Epz48hN+$aSkS9-4IL=Ho3i01MTrP#mlzyu8V0(fb|ZX-V$v6sK=6zT6)}0& zYTYf7x8pT7u`qBi)ccZ=x|}%9%P8jtg3TLbYPw);UQe&$^8BC;arBbc=0ZK`3617+ zeqS@A*!}cMdy^e-Ov82MU_IootZ)6RUr7TT`&v$F)O2(8=`YQ*znN+1inK{srel)1|?H#twd9Y3>F~rnz%U>)bF%%@Wzl>|BpCD3?3Wj}n*_7rQZL@4o zl6kCiMzVMvOp_D~*xZ=Tbehu*ycyCTnRzl~DsM_3$n8gUKw}Ez{&A4^T5am1t~Ep7 zRC>bcij4;KyVo+r6`9zFyWiAmSpy_TSPF?{glR}-|_EoyhY=+(UAjCD$o{j;hj29BRI!A-h1>4R5*B>pv>I|5CTLVV*|jdJdZr*KD@5DjK4>Rsngx z5A^3(kj`4}8`7alU@4$tWHjo@axY>ww`UDL&~JR(QUOVa7t`$4aXCmfWXr6OW*z8n zkyAiKeD?~Mt0ioxM!Sg%9f0;S^bOE&jf|eTAc?58b#m1aV6j!ohrGGEy$#V-A$IL` zNR5YU-a@&gf-%`De-NNeohu6B_ljdZ!}a2Lm}@t*4?ev*UF&6Z7qA~-+O-O{SM;97 zGxTn_F@^U}2g5$oU&I!xm$^AEtt4Djg_4?80H0+^vEWi_)_YdLGDhjCJve9FYShiI z(Sq)od%=2q#^}$GvfMR|dayl{%Of`{X|At8yUFC)i-G-hTMAJV>=wrEsC; zValG0gx@};~0z}$4pG>&PP3D*(#D5hxopUGFb3GWi)O@=W{lc^KpQG0+ zX$i26zDeD5Ze)SY(tS!rYeC*iz9lk#)1A3i4sLU&zKxS|Z;AkD1*ri#PF%*2{{R5F z*q3zsfDWEIlrEq~iG_UhLR!=V3ru4VKKL!OSi`xA7uJy|V7=?FPB5aYn-DtG%oQfn zLrJ5q>;6L|&uAbm&C~v)-@78ikPGA=G~R0@_srd~xykc!t8D+5av>KxrVxw_=*7^} zd!4kdC7H0S*>O#e)4;^5%eNsOt0K3KN#o<#^zTrRg>@=Yv9RwV8Jn%T9FK@reu~6Y z+VZuvu%>YPXwuSmJzHs}M62Q3`+cAe@zvb^}BVNcEVU>L5{Pbx=napzTEfziA>wew;7q(-am#Ni1GLrsOO7f6J zYcjfwtuU0uMQw-(*z5Pl+e(EaUl&PVFnVgNS-*G9bU1YItalNYI0(e%JHnXKjxI^E63!q+gp6;?2Rh2_aGWN@M_0F>ohuCjZuR2#{ zj#i?yY`vC->10s&5808G^1EtAU&Pfui~}rouSE{oU$=xwaJ!xH+S1qYRk{Rlji=Jz20; zXe4|B-z6c|Z#7Hb;GAi3!^R%vVcvM3C}OBAJjyIHe3Qjurw#o0u04w3v%=z@S}V=Q zo_mhWG5MgI#Hy(LoqlilXB-*h9&_B8qZYd)ph={ww45_n*Ld@By~TJFhnWbTC=_} z{a3XKreVUN$>2#F|Aubc*0uhcQ|$Nifhy1Y9oBv}C;L1Ak*4Bwa{Y^I>p6OJ>GAP# zhx=E`b)uw{?a_4J0ZwmI&UZylH+T2-9*GWkgUeP!HaC6}N_MAVXBc`cBLEQPX0P+6 z#N(^V(u;k#{yz2~=#}HrpUaZ#jXTLq<1EjKjsez1R)Ametp_t~-;GXD`Qmi(K~+Tg zU4BMZ7!bXY;mtx(Ek7>N?nS0<;Qh+#}PwmHz1vsR7OVewrWEO+J;}*p%N@R{_T?D4^p&0c z&C-!rLqh|!)s&rZyHX;qM8Dg+H$B?D<*qs}ABz`_p*nx$$=%RkIA1y9O2usP#y1dc zRCM~o=duiC;tVtOdlO0ooXh~Pw?2YZB>QT)np`b|mT&Nowf4*+B8iKm0-jsvh!_ub@{yLhO4s={Zdcka zX7~Gq*;$aOodbFbnXwJ4my!^FmzER4hd+~zZz$0H+-A8gC8GkmM~3?vA4U%>N2_|| z1Wx9fuR~CY;w2+pfkiINz{d@e$7GVcTBka9z0EDsseY|3J@ZHYJwGd7SL`@`EB;A% zv>3x=wzuZf{*rIV=VD83jH^0w$(!0IuGFGbYPB+SOD~4lA4K#mAS%rCAci$`dJ_?b zCw;S+;WL_%-7XY$!18^+;(4$Fzv-rV^UXtE?TcofFGLfcYfHRis4&}))sg)Lj@%?( zqu_HCxln8zCT!Z?S|SrHp)ok(T(&b}?tCEmlgR31uJ|FkFe-6SB(_2WF&&YDdS0BF z)*tZk_XXjsNk>_IXfVLJ#63-&Zd*q0yIJOXJgc=}R6Ay{ar@BJ))^>Na>g12Hl?dp zK6l~Qy$u+LSfq#Ie#)mf1rdvW6VsHEy^seB5%5v#9}Dt`v`&5}zpP?a`oeem{kpbL zkRqO(?^_bvT$vc3d%@8Qlc2+szS1#nYK2=tkrw2mht5d8qvPI@d}p`)ukieiUyebT zZvp1bB+#ofW9ab+@j*IYER~hf+BH*p^fO}=E&%HMevRB_yMRsZ+g>xMaf4$yy?5O` z74g~E=_PM<;493RWe86WX=qAQt4A>V<%r29zCb+-hYm1PqIE;t_);>#`>?V38Z0;? zwKuab_o8mmS>TCLB5v9rSEo)7Wa;;we4N(h!M7|gb{b2Tz6Ly)D^FOcPtd88)972T z%57w3fT1b-cGj^nvjR85--tGkik}V}76M!*7jXPurtzFoB?SP&k zR1^gk_r)q&p9XJd7J|z&`*%@KUik?V-2HtoMdDps4(%URZf1`{0p|Md4S3vsrJGr) zfzhr@y*>ou21F81F#~PYcTQXv@12F>F}Abt=qCQlctQ|E7xb6 ztz5(|1wZ5)Ss5rOR$3L#c4&(HvR0_Am$0i{=~+1U=P0r{M}G) zj%f{Pf?;*&OZ}C$pmHbB`TT5F636N+0#R<( zV@?gfXEzkSOZD@)B2g5|-$1&z^$ZLPc;0{JA<8+opR8CHrg%4JGG??mP>u=M0=lqz z7-iRdR~-E-!fAChSFsOmv?O}CpAClQB0K?x4av!)h=JF$CIqxANhCwVJ~b4?LB6H_ z#MGD~WCYrujDP!?Igdc%LVYI-wK*=FXA33=zw z$l|Cv0lqrDQCprklsv!gPQ$oKfyn~7=qha0aT5d1gof-VMOt1PS~)DUJ$Kv9QTgy(Q@iw zzu0Fxo>M8(`vYU68%L0^=>TZ^;-t@TNY(dSq_@V06(zQsT;jd!821F}4xse0+aT%v zJyKEsW+ZWsoh{etkW=HsJY;LrCa8n^bt z(4rgo%?++b#)d9z%W@r*|npmtIOuSoHe0;KPZuI2?

TC zS0tQ?(C&dv_l!A;iVGyh`=hm9t+}&FneuEWiwfdU| z@s0W7U1L5!=8Lv3(sgx$pEr~-XOioAT{BFBW9$L?SuG(n-^+Xg^tJc&L0xKAh*H0; zxDw9ym(WQC=^17F{Vw;b&mGm0}n0UCoCwE+h z2)U+NzRTuG9uXgBe8;C8N)PuP<|^gPrTC`i3nlSWq4p>9-Z5{fzxkazG;8(tRMTSv zJj!cc-lPr5i1<6g?6;Oo;lGqIH;LUCAd!jU#9duT@ob+HCo=xXx^taSzO&KIErX=) z-@~-t^~#NXxcq1~E0ujc0PIL1OB8V3U(B05ef(RS?5MZ5Z7nhpVKTYQz_AMwsipAl zjK1#oxpbWTLfCdj=ZH_pHEPjwp(bsFdPH}ysQ9+9C3u=M!qmKMeFkpjgd8UN;@p<- zHn!e(7rQi865xxo-hT_=`qickGPQ_^FI&>qOJWZ1AxMzBW3Df=1F-rV)vLwDh+a6= z>lzisspR?(&!(oP*ovoBjE!klR#x8kP7=@_*lr%knb8Lv383MhK9PL;_6>5l+(Lve zfrYjc-^IXQ$dSwb-`Zce#`~`WUZf`){pa<+U^xEwP0as4V`|2N-E0NN#}Dqc`k%kq z34NDu<*f&o^D+|*-5~`AK{Cqsy&=`0hbnCeeJP9lSLsO_tYJz4pr#D9*QHL&h^TAB`0Jl%%UBwF>A%d zDbkakzRN;t$m8Pse4R^mthWHhdx`qyLe=QgufZ&CO5th23#=l%xpAE396`_Jo2BOu zzP26y-fCo%j_e@Zt&}m*9GRD2MwRER3%gkPai)`KzFOEyZTSW0PVKEK9y)&7|2oYBzP?<^ijV;x|JJzFhM@QRmF zs<)q5bUOUTNxQ7cEsL%ZB4bnt>IfDrM1_lFU3WNfC9bHK-UpcFalv`Te?U(?aQdo{^r8vlG+j;8fL~*&``( zDlH+Yb-pP5P{q1yKIr9^m9mYeA|>$=HCGWOpaEaAjvqX*0ZjHB%xMmv=#TE2O&%5x zu3632?6)~AkzC9gnL~Wi;y0vy-Fvx_`a&O@G`U^34Q5fFhh}Dhu{YyWxdU39pZ8o0 z^Bea)N_5>Tyb5?w!bZ_GE~)yv`o{L^JMgenb4wmoAm)Ye2Bq$rxna8Il!(eOlG|y2 zP^-4iKhQqp=ri-(rwM44)wX@ zgZ{zpMDD#5Z8XdIHf5%r@f>n+(z_{r7m56&ub*60QlcXyBsB0Kg}4%=3us!}qgu$!FJ zuePtwqyEaKHS=bwm&6h*pHOPC(Tz-;Z6)}+>0=g^om?kRv|ujpMnKUh9^P4tdqA0; z?9jG}_djz1aspG<#62lLdMY~3Bm`gN==V^QSsNk%WwoU#u`!{eRdiIU;+*_vt|l5P z&Xe!g^a}J@xLIf~w!H5XCiYOhHQYl?Qt5JW!JumcLYeqUTPIu>WmU93M;W4GI;`TZ z+^se-AoL?i_Kg3v^sq25xZhePJJe}Xb}0&$5-gDN#!&vGoPgpqbYx71PH3VNN1XKJ zQXUW_^*-{-oU3&CwlU%Mj#oUd8w-P%)wH ztR7VSGQxfj+EDz25cMNNsiRVIi|8YJM#9+=D*p-E7m6EIm3A?pk(2y1P4!ijs@6oG z@wQm<`v}Mx#Hda%Wra3MuB(qNODn^{+`q0RbTt+pvuB_u;w@+~FMZyk@uxvqw5LJK zC*~_7IR%Nrz$B+lgI6_nE@KK5_k4Oe_V4CO1WU%cRoQYspebVf_}HRE$@;UA3qsC5 z^c(qWGYj+RO66jE`#7gJL&KKzq!UC$N*4H>u?v;B+4R!$O~sg%+Mxix7@>xS+Ilqq zWT76nACmVDGgKV4n-k7ySt$WziTl2ZuD4_tD<)o6FG(#`OmM zYDUOJG0mHtd~wX(;Z8+wJ?>PUVOeOGQZHGMsM+eNUagYATxPmPWB2_uyLszD*ITz; zDF3RtWb5yt*!=cN1yJi#c5ar8h-*-jTlu`}npw!GVGqN;@*sqeHLOxw2u0nll<8B) zZ(dA$SoS0;Jd{;aH*r2E-*7Kf{Zt4ZGm>Rl>PJ?-9h1=qozSay zq_@dF?|pWnS1W8-wa1WP`Y>RZF;vZ#xNnuuFTE>t!*;FK9=p3|#sxw^VG%2i z*g)#X8i&v?=iYgnAt?yJYHA6k`XgQIzoqmiw9|WMB-466ELDFpq){`kocE#8o0v?c zR-6Tw&5I2mf~)rF&6qxV4m#43;_h%76v)u+=12hrI+e$uLSd|2v&K9O-+!Wr?B$6} z=rYQ4KlGLd`ch$xz*M8ADT6sBgJQb|su|xQTOE30H>b}BWf$dUa+qSq$k~SRa;vS3 zduKlm&lX(?I`8wb_9_a}L5Eb*%J zfdg5nK?773a;3;jz)jLm+GLxpjkaO`I3zOxAsV*TG$!gTi6dcRdRH~nDei5oBrUtxYsVr^a{Ss2g|n_Ii6PwQ3I6U{=|2hcGa61r~f3X{^OAK<7YwE{<<( z6z}NlywfUpL6(5_FzfP8sDDQrj{heWvWft$LcW`2`7h^xCxIN+3MT*FKdterISzjTCO(Lbf6$^Nm<`A%2s#8te_ z`$jzs=KTXR6B@hKgU2BFqJ)HXE)n$-IdQN7TOq96u2VJ=__O_m$No9K#N6S-{19kg zeCL#so(ycm_{_rf3$6$2VI;MUH$8hx- z79LF(i3s!Y(C+!0##`J?RvAUN(9Fj~4z4koWM~hSHd=Y(d|!JPbw~62`29$0@?$v& zUr=pyjJ=jM%;ZWHeEesF3!g*p`k)lkJ!!s3Zq*&?sVi zU;B%-L_U+d#{9l-%I;=fm)l-=K6_aWOlTgMSU9qzp(}fsJLr$lTESEq}HJ!A6&ZBWs)6XoDUoEs@-YK$cNNw4)2RA z)DKQAE);G{X@r&)XgEuyNhdr8^h{0`%X9eo4fE_f<<-3GQ;U%V)%m1 zsHH%=4q7!|7X{ z7Pif)=>y|DdiQcjYpvR=`FN+2T#(GbREJn1*1)I@FECWB(y$20O6pO0#rHKq5!XAP287dy}3 z(w1m;USL^kPLimu@m{jO!RmD?qh}O_rBJw?RVJv8G+)KNstQ1p_%9f>wpmd7R=5yb zU(K*eOC~ry-)%CccCV`L=8T~_tNvWMx+o=V>}ZA+v_d2;y<&wlwOY4`O|L@C3`U02 zOEU)VnJe~94h7h<4ad!)0|x75%H!&I+pgfe;XQ4G{Q1GzTQP4d-2Do5M$Y!hdK;9P zBQA}AeF`G2vp5u++{0g)C$%)E#Q0tg zfIb>pD*Z|JCJC)7Z8LANK-VTAk=%1f%}FrIfST|4w0|x$i;94swbTOtW^Q%ztmQuZxI4towQ$Zp(ZX}rrgK|sc@`e}l-fM?xgYi`leFKHuv)3uHdJPkX+jSaqk;I6*`#d7+^uiTz+cYPsYRNZb~~jk+DS|-A2Q`f}ADe zmEjDV(xtTyyY1)z|NE@}zDDF4s@ANh1gwr|?y0clGZ|QGju8%gkoG3Ll!_fmkYX(; zkCxZt)F`)B6(3!6Cmg+Z$FYg=z-N_0;Kr;KeI;m&$&%Mo(o`FZ=IYJw*KAq(*_7g{ zQYHob7Z3hlkzoHFDfj<%90Yg%_lMgJ4HmpTWm#DaDNK#O_abf|^7K2r>;*J6Xp}U2 zk%xNal%$7&Yk#SFNKUL>n6&G*mLw5KPi&MLQ1tY?m1+$jsmeQE^kcent3INd z>>C<_-1{7{9_$k4Vde|G{QDQaDCJ2oKYJGsKCP`ByJgqxmhO{y_Fj=&{GGabBnJ4!XzH+-O`SZc z?S*Gx>n73a&?Ugh=9+XOpOBzt==~XpTXldy*#9AubmDY>V1#OOM z9?FU_$zi2vaDOl$rGcArx3$`FtX_#n7E!U=AAj^$dyxp+F{ve!wDX+rUEl&)1C-k7 zPj3?e1zFxUuT%tqEaa;{n0I4BY#rkcmN6*taQ#Gp`?2WTm3#3JVSy5-6?F35qgG+I z&$=@lY%+Kx!TS%iPWNrKIoGcKn6iD2aA2lst)IN2*u(xi4&l}=n0xfvrJc3OU=6ES zBW69AIGZw&vVD%+e3ghsGX|_HxC#&^)>y0GFqFO<9BsHPQX_yS^v1>(6}%A^7mZxd zV!J2RIQSZiSh!cYto89G30`?uhMN7}Y5F(*g)a$SGfoFA;E`^1ONkr%-#bgN7Fksq zoEjlpunDmi7tZQLpLW<|c`Q0=xhr&vftcqD)?njNZNG=_tgPJ&UJb>#Y|j`Ti4Lu# z%YJZgbcYz>TfcrF5^Wv60Dmki%|{Z}bUQK)UTpDh@d{3z%;#s0Szk@7)o&U+bU8aR z!W;r9imm3N9|>MK6K1YIHKAhS_!EPhhm^SO!+N50(()&Qoa#w;>b&dGLlQBz9$^Ji z6${Aw`P6kbn9>%6eOMrM9Pc~(GPfFV75_p!=KJ@@4$Y@8A3u3gSX7kt`}a3mDX$mA z#8ajUbhjSQ#Jb9F8%HpVgv5N4ofci*yXwsbmQU+_lwh#dNui5ytW5b3v9MPfQ; z47a<6`pq`%nu{hffzo?`-y8CY^##BU!?ud}=GRNGV)s|Yl z!Nq!$)7pCshlUMO42?`_d|6LVv5k!lViJ<^Hb1|cbEIOXv=8*dk#y@kmZS&sM{d|t z4X>Cqbyue4OAOr>>=hB|k-Ri(Cu;HWny3F47dGRFqV>R^6T>72&+RL`mrNMw zdW7GNjVbcM1bntrY!`d;@~*C~v7gX|3)_e`na&{mY+V@OK1vVr2yM$06>*>sZD+Zq z=?tnMF_kd)s%(SK5fVN=?x8t}EG;WThr&`mX21WatGgw9{Fp75jgvFGxjF6V$niNI zxh&dQen(NWZN_vRHsgZF1Fa#~pyL%!nQ596?)po9=!z#6mzY>rzdK)L&CbCw!MyV4 z&!4F9PZ0eWr~;CDB*1vk^g$*vDreuQ$J=_ST*@ut(kr{RHX&OvT9{>}yqp)&%ibuc z+}a^g(_Nd>gmi_&Mn-fQSN}{!r%Sk3`aSpt;Zby)&jO>hiazzv{zlI%EG(>tiTc&6 ziAQh4%ameZU*>;Dn_MEx{rty&R%fQF4*i)yeo{ea3ahY(g@+dw6nvo$<4sm;4b}ZO zt3YcZR*=+^F-(4gFFX4fpD;1WQ(ze$gSPojPEXmnxGc}M$Dd+i)_JF9A<-oxi^bgE zFZ~v;VY8sf@T}K+&MGP@S7(!&-)bW-Yje;md4fs6Yti=ty;*;&_QT2)9N5`YZtf9B zhx*2x$8xcN!(kD`qDMN|*f?D?9GzspvOS(nOiFqKY05(W$bgN(Plcf^PX|sSqPi}P zxcQJF09eAb?FJf4ukFdw0bSK8e39|fc z^+CCLcxIi(u6zHMn8h&EvX>z`7=RvihFzeALw;i;W!3zf*(bPSD{gNkw4c*GG$UC7 zUz~klNaLZ~Tr>wbY?xnhr8MAx+aChj3CJRDS zQ`4@Vp2svY%gB*r0c%m;+j@G-@Dcf#!$4cOS)Wh;Hrs8dZ@hmK5eQwmBgB-myK9Ss ziz~IPpbqhgf%3eAlfn;_+)%vppV%Oo*B+y4-Ay|pUI+G-Dktcbhlj>M5`lthJ?HbeDhe7ECM&A`;rf5Gwa&)wbK0RaJhEnl1Jzow*6TGkj878f&0N-l1D1n^kO;2`e1 zx7p6T08h;iD()1z+&r8Reh*SVfBrn%nauCUhs0^6iMxi~-a`Lvuw=pv`VL0W$z(Vz zt*3eDnxaQ5Dq`T}{c*6=q&iwRDE*4#kX%Cy?pudeK3P~2os{L&)^9hz$=cEA5zHcK=6+Fs^!b9>d+!K z9-c+t5Bh+hAT1*!HD%>cQyGaFXFQoR=6&_ zXH@%_tH|Bm?a6#Xe0+Q~L8Q^k2YJ*0(6Pf{0-9aowRSZ3T{#)#VSWAj4|*7h{&IQU zS;ro?!{^!Ow0JTL81iKTZvrBzL?*_@{-F8Rq3h~1!wxDbFF^$bg)~vqJv1XLDq`c{ zu>Ewqdiy&2+IZLxP=43n zi9+v>b$Glz(3Z-LcObyCmKOZ$Smwpm4H72ib;g$cKGJNpD|CNh=Fhh$e5u1hBhp4X zI!rAH?)PYtak_a;eKS^n!aC%iq(F0H9y)WR0Mq3Z6;0~vQ|h#$lXgEyTUi_JsAIZz zBf%8-btYjx(0XDDKW}>5bLl~2w~(m+#dU#q{fm7suDuqN%3LVzO1`{Um#k| z)EdysNKKeO7#&k4CMGU-MSlMN{X2B#)D;UC*Sss_rSwu>9h!v1TzBK>EpZWOswY`5 z4VuKf1v+$1X$VdI{dH%mpcpX;fQ%~y-JR^A$uCX9edI@FAQ-J;;SjVQKJa@J1{Ko= zKGMBv+as;sdL;nHrxBm}LC5^*^JlG3pEfR?0}qu?q!96Y-+T_Q+7_{+=N%r+_p{|f zeJh7!(G)=LjO?wf%dPqbDMoZs>pl?W4b~c5Wvqf+M z2{pC7(%~g~BI#E5V&iTx&{6mM49bGp*CD`AN*ZbrV&Kj zh)&7fs#-O6yj6Wj5WDa*oq{|h%;V5Fh3czD)Zdm=Y4|fWqd6_q?N+q_X74Emr0^gy z%Gho@F|a{bFYY1QGJnelJKvqpqDmLX#y+$W%EZOT_v@T)iTxWmd;XpaZ2t<6d<(&E z*p3!5onIe4!6G2IF!V$d%6^;xFYdoB0DdBC58c1#WcfYZ z`*Lab_>6+ltI_Rk3phEv(*>;Wk6pfch@VwKGYja=PX1TEelnA>UvGU|b{fv0|Aouy zeg%7@?N`6Crf5<(@>edn2K zzW&2MK_-}XBtwc*WI-(Y-|Vhk`hLe=dbQ8Rf(-6%&QFoBW%Orl=qH+kKz?5OA#Pd# zFR1$}zeIRoWMmUvmKZ@LLQpkt4-xfE2h|Ixov<&wM;~B;JzZMqsiuBsS#UTv`VCr- zrrN1~ucQ=$7>MDd9RbEbBh93GHd*ue%dIgUNn!G@+`E^1NT^1jj}Aj#!W~8?KI#FJ zAI*@u6W;hSZF_!C8aora-s(h`cyarTP9k%CZj&`xyqxvXBPj~e72oA?;jW8n?eRCt ztw9BUtMbi~?zKc{@7SW7+j_Mt%}6IRP=tUQWMy*{!I;g|@I7ZS{yhruQ0aaM=;-K3 z5_c^cU%{v?ro9zf`XDdwPv+9}sr&&kdfZv?(n!D>A5#dJ!htT;N!sBV-ye_e8$?MQ zGjk>h?Tg);*ObndxpAa0_s?Rn3ZL{c_mW?tWU3r@EsflIRhut=t$E@3ZB??3p zGE$!MZn^yYIqT8(Or0_?x>nNu+am28%*Vz%mu=w}y z-yqJJ{qqTT57;s{_-K0ik?!(4$9aA&Axq(F%WO zC!x&HTC|J<#6$eiqetm7*Zkir_&zjyl0|YIk8!s$rBU@p*#ad3}m zn_5d|zJEk0`o|e-h*dzPJa(NbFHkb#0wb^@MA_) zS&!B_4J%pY40Xkwvbku-Nt)S(3}w7SEfjwF$pnXtGs1p_2j$YDD%4F zTulI5F5Ug)f*Bn4?wEhSl@Wlk=H}+^EjCQ9A*ZLOEv&3=__7kNk-?;(!|RT6Z-fQ% zB-8PvTd%Bf*R(avaAd~y(%dd||4V+B!lQp7b+qQHt83k-R+1IZLC~22d59A_=HtCS zlzukcKQOS`D|7Euby=P+X!8nQ3pzE|8J0i`3wTB&ELn}k^DqPRKLs0~{n>e_Vfb- zAbkpBziyhy#N_18EDRW1F@5v%V|t!xlm3Bt4lWa+vs6Gmf^$|GRBpq-(%rh0xJ~58#a` z{=q!n%L9PjSAYHTJ0Z4#fE$C?5~DdY$SV?Sd)xJ(tcy{3dFbSI{J3zV7eJp zMG{EO&bA3rr9+e*99la}Qp42)MC|Nbw4;GFTQl9|`-WuF0 z`4mSBAI+eF&$|@V$A?~0=VG?5ImUJs=a=M*S&0qVh+Mvb4UTqBFda9NYO5Z<#qEWQ z_Lpy`FkR#1hk@a(2N`W0-{ezRxr37AkCMJWED@}sS|qmh-v3+KNc6w~LRq~Vn*`ly5%yNvC(h!x!zKKnuuZA=j+`;xiVVPalG8$H|S z&!{B7e?;paiZv?-@>=jUKmH>Nno+&?x#pSYr9QPJayESi)198wfl!OGeyXL9mC?LG3u|o zj*slWw!dcANTcd{v2%izv&C7xt10?G$KOoCc@X$`f6XK$=@*b`_4(M6;9;iYubgW~ z998z&A$$txxJgPX83Wp;Z*6G~PjX>pgN<2@$llCWWFfH{w2L zjDspi739YvLS6{w&^59veIkh;KCG<&ioPToHBIRcggEEEEfcZ7Qe{P+b2}S<5sftN z={YB8g(+=*F2^-N!W?dEK$r*UMd30N9lwwmH$I~y19Bt}F#u#?yA+9AtrGkKG@r*k+b z!hdCaW$B;EEPN{W>jdxS)SAUh__}#lwOqN)H@zkyFH>$+j!6n=>i$&2)2o!41K|&5 z=>#4IFmi8QbTSyda^@mFnC6)*$Bk;TuWg->_uLY7I*GHA6b`w6f_YtCF*DP&Cy(*8 z9;lv528FB2Ej`WtfAlp6!K9E`V+a`bILidsDD>W*R zUlyj(DJ6BtEFKs2_q1^O{PUkWWC^xq3|Oz3)chD!L&{{mT06=x&j@D;>CU$Cv&;PT zfgL|g?p77+cIgOj=ohc>JZ@gpx7ft4?;8-OF4d(qD*8UZ)rJDv@75AMzr+Nt@xJn>fqB-O@;V=Vx;$3w5)B5uRb; zIC%cHdV2AL@RccJCqakATlF#;m&2@MUKjsVvZB8(!@2f&-`dHV-mLBWP%ps1lY=k5 zc>Rxd&NP}0Z41D;s=Yvp)Fckdc{m7 z#2i9mY)vJlMTi({YD7^4F(xnX{d#ZR|L@OxKhIw4th3MF>+E&T+27tWMuJ-;at}#Z z;+|DbbM#k_VRl!B$Pk?>S{&oRobtA#0-;Q+fXva+hK@!|7as&rO z9X&(R;qJ27Q#jmqiCq_G{EAh|Cg!I#O@|tvpFaQ}!nq|?^C(9q3$|AMDspoqpecF7 z=CCdlV@^hh`|@t`oi1CKf&U({x2S4~)4Pq`Ck98%Ktsfbj&9|*y3K-?xuFUTmtQmE zZDJ}&hq^&V0Fc&b1T2qC9{OgUkt>83bWlBd!@zF5GCu%&j0~x|bn2w2j<{gtu?nej zk7nbabKfkZj(JdAkpV#wjEg5lsKLo_iWu0x}G)(N2S-8-}Ymz*{8I zQW>NcewsQnoBN>y`tUVIL6}dNb9@){AR~Wx91?_j8C%8MFnhY;?wfrv`f!A_P6G6} zSH%*<+0dZ-1_)d3Uo{D@cNMz%Az~5i%lrGxhaA-T$vxQm4qvROY<}L3`mj$~mi=hp z&JbQaqCM`ipA)v5oZI;f^q-ws!URvp{#Jhf-~UUCWbaxV;ev=fe6cFn-f;wFLqJG#o)#o zZ$wZm$CY9pylrB#Wk-M(mt)m$9?4p^E3n09bAn3x$37c9E}-iSk0AXB@fHn}>GyN% zx~CQ%5xR*ra}@E%Ovf(m`syqCD(RaYU5B+riaIHVmzz+Wdufs~i#B?y=b-Bl8M(6ws7KlOikk#Q45Pm1`c{``DDS?z-B| z0GFrM*01V@jZ&R~H@C->68wC^VFEo#{`4z)I$dk?Zu{F?2tPBcdj`lawfcT4b7i>({wcvK@MbCuZ}X==uG@;$P$VabzTNSuYXZTApx1knsk2o9#WAR5 z_g*Re%mMNUY4co74-K3IEfnPM1;IKxwK+iHTrS`W;G!Xhy-NEpzRRV~UH-IA@$Pje z*9<__!@#Z^G~nB4_~o7spZTnMeN~U@qDs%GUZwG0ok7#U4rMuRN#e7Mdl)?Y(nKp* z$+f4zUphuWad)Xjh0O_F$;H5wQ`&csr%XwXt}Abgoz9=@>$2HX|Kx4cXnOrz)6-fs zKfmu4#MIR@MF~0@DrY5Gua|qxYZv@{elGh$)E)}xCNoo>&U{pDW4^8k;rrkv-Jb?e zzU&dYhat-Qj#BRg{*mTE@Q(k>v@{(_7t)fq@2XZ1(vCMPgT0r7oV{J|MPq_Ncv4)>1WC?9 zBn5O~LBXSOp|pUp7ZW>l-93y%3d!k^tklyTjB9`JwsR%6(;F4#jk|Lx>M*h);J2lv znu5Ywf|VqY=w(@0DkfxW)&;o|cR$p=q9vK?N!w2d;wnuN;g7y*`1SQz51?P@-X&VY!u!#mBd%V1L*nXLz6=jj8 zslwU3I%%#Lao|LfW>d6JjGrYM=6Qa#p;Rz#c5_#VNvAZAs!@BkMc#f-?b9Zn(GC@H`_&b9H-= zipWbRjfIrRzsK>iFcnM`%V1VF@%;!a5R7Pf3EP%r)SMIiY%QO(eyv(^4AmjK+$H79 zhDyfl=2Q&nIe`2yU%+XSQ?oBWWa2S#gI~*JJcT>w4xR-0W3LaXQPejmJtND>nUJa8 z8Q{ksMe8BvrJu<69W5C-%_$*&Nby#f3K6T*TTf@A7wmn=zGevO4M%xIcE|9Njd23@)yj-#PC<8KrJC1e=Q{L4={(*$+#xE+Z{+bh%p(Yc`LtOZ?7i z5(n^)DQ}Uco59=96Aw$PO7(A8~R95<`Q(&SEY_FR+eQi{d>-DPg(AvPGRk&aT zcB=P8u?m$8mMxujZPl7qrq{cNC*_dhScely8S~Ry6SONkTt}!Q$MsN&lQpt`Q{Rv%c z?hi=O)Mm;ch3tM5d)T>3W@#d(676-d(CsQJ-*;C4O3-A|3BqU$o-D`8yhSu^s}@(J z_4`IDRTg^A(c2ZCcN-)8cT4StC9`naW(IfDz}+iS9gNi4+SLhZjW4>-{c%)Mgr}c?Z-FHcKgZ5VjXULfj(>rYtymF zMy9SLbk4~E4bgSIKX`Gu38RmbGrN^#WGQbBLUUZoOGhR+hxre#kiK1i=B#>U2FFraPdb2JKx#2Dqj(kEQrH_gBGmHs7n>u?`AIW=|4 z6Y!|O+4V(dL1<`bEgp~8Vk(R9(_%XBzFy;L%asFu<4)^~Mcx<9(SL+O`G=PR)(D@Y d(bLSsBdVPu=4d_;liObsU}j=@t-{DN`X7-sRJH&B literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-defender-atp/images/tvm_machine_page_details.png b/windows/security/threat-protection/windows-defender-atp/images/tvm_machine_page_details.png new file mode 100644 index 0000000000000000000000000000000000000000..6e474ccfa6bf84251731a030d3314d7e87eb3209 GIT binary patch literal 71105 zcmc$_Ra9I}*DeadJp_VF0s%sB8rR?uEJz3h3+^=T5+Jxskl^m_4#7Q0aF@nupn(P& z=-v6g_uYG+i*s}Si&JATx|pk~R@JI!&YCqP{G*B-9ySFw5)u-gg1odk5)$fnB&283 znCJ+K#Sy#(@q^_cuj7n_gx~-75BUcRJ|%*P;i8}{gRz799Ep$iF}zCSKO`A#7YSDv zOP~`{Y1Ozqf`sdWAW54!n>blHxL5)0k%+Kf(jV z2r}kh@@FF_dnzs)qQ zTx`vdO3r4OkdR&>DM(9bdSsledHWFmd4yklZXu78md0v!;QHSGilj9x_hUWw@?g^@ z8nB%2JX*PfxI*joCq;@1is=u*K;7JrTcNg{zp>}|9_bDS17&yV^7_9sJlmp^V5fMF z8Tas%y0o@5VeiKO26Y&A=dp{NCh80tH@!JIu@Ku=((Lwow0=(b-x6=0FQdW#UizP+ z!h!bv-}=uqt$9N+_yeTKIyCH`!jm_~-aZcTH^U77mjb~4AJi))NeQhy+TBm_bwIb_ zJFmww1U%_X)2MYnNF^Ws0XhtGw>R72>lEoiZ{y5jXztie)A&w}C6f==^1X+->Hb>+ z-b%^;GwFgfwfFz0E-3X(k|kBh@>LK9-tO65ZYY!oSUBEo^C}3U#p5dVPoG^@*9d3K z%CAQ`ayrKPJRr1rP)t-#j5=uJ`fVXW=j3u!frgC=5o{a2S4+1iLDO-$tx>|z!-b|! zoiLwp6h-bQmX#XxRW&3Q_tU}4Xp*y1n)1@yJf=m(FUdU)C5-| zUNf)1IMI$D+LZ9juoL7=Sx=LwW>AF;#dcRM+%rH2yefRXmU?rJ?~Y=#6MraDW=ptMHjx-$P=SAkLHGL@vFR>=4^SDgX6mw!bXE6XLBEq?5m z%fu)XBLWtRk#nx|(HQktBe*%M!>L@6 z%-5_e#YvRp;xnr%_Ue__DYk4wOk`Y)v)m0M!!zWN2QNi$IVYGD^J0qcdj;7SgwcW4 zYw6h{jw~FjqCtC*BJOvLbJ!#OFxwuW(_vDm11lA&4&^VGzo6(zfnHpd``(V-Cdn>J z+QId8$m*2Jwd^F5tyYAtm{;puH@EDxczOT49@Er3!O}6GXj4V7X3C5E>P5D$&;Of0 zuU#Wl$%A%rF>C-)uk{dXy^MibX$v>0WjKj;U%=1OAAGA6J;UvUUnLyK`hbZe)&kO~ zSKiV90zb?3Y<5$Oz5OD4k*cJ~S)6p|zBUe< zT&A!)y3gt6>j`zX|3b*ANO*(K}Asv0tJt>BDtXI2T!a*1;bt#==;-KSQmhi71?EaC` zg3%PLuTbCnaHwmWo3`~s=?VpUese;71TP5ZPe)k4^foc@bBmBh<$jH=vz8Mi-WYap z7qQ$kCW8dVml8M8Tzy~$W#*}KC#V|5q{|0Me6z4zHr#iF4G)r&kjR_%zFNGF-Qa>g zu$qhgkUZZWT57xHf7qg3yIY%Bqo`^8N6O56Jc2LY-FXrhg6>UcD?CmaA~a~YL&Kv@ z9#T_MT`XuWj#tU03dghW6E0fr+wy4UdlHKEUX(5rbMDm28I9v8Ig*}c{z@342~G-a zS*wdO+w;&ejJFU89|I1ja@0Si_>DbiDklGq5GhKqQ4*s5&>1KZvKzI*?YMNhh+${4 z+&0WzVSNfDqr*c-cKJX)$^d)}BF)13R0sIHKF2(s{Lh&*eCUQvF3B+7;`|Cw5joh= zvmBhvoaVd$hz?MqXjrUg-OF9jp?v4ev_!2$F^p?}g(@FqWHRt3`rN*+GwQe-j1}S$ z#KPgZ%xgEk9Va!I0H6|ZP)#_s;*1G?t;OSe(R_D}jZPk=&;}SET8Diw+TIAXz-O>9 zZRBCCy#8lj z=#<|hzy9Cnd67{zH{**Ui6Hb)*2L6BC{M#1pU(CT;yNYIyO=mLudA>tLhpZi;wh3# z{yWG-6!-T6g$%1DaXgtN@&8ht_&$cj{qs@f0r}tlzt?vli+A8ISXJrrYr1Qf+jFDk zMw^AXiT|o0@%3Tc-~SPd(m%=nFBRl}T%VL?QgOPH*5H@?&-jy{Du1>i(>Z~byC(bMRobr}Y|^^*6sq_OA~=_KDW!CSH`r?l1{Xw-vJU?T$NL zVH#35NUu)WD5l`JCXc4=q8e7M{?aHX*eMI-W7GW&uA6)SwN<%Tug%#J#RGc7NBewy zTb3a(Pio_q8X7~gt3xI_IIj?}Z_UIMH-^u!o|;{3bb&Nf>a13 z?o>G06+d_!2z9)W9~`kx*)X;sd~!@J`Z~s3P*W54tHULsexCv^zSf&Vv~h8!E1Y&E zgJa*(DjZ8-+Y91_Y1e|D@8g|}=0)MO9z=?ob~MIPyW-P3Zw-$Q>3k-%5VO+3*CXp~ z^Kmyy394vln|DnBR+0XtyUri$@{JK*kkDBx7F-KM>Ps3w&^H6>x)pza@tH)k@cXhu zvm(?W2wt0Q!@{!7F)Nh0(YHDH@^w!3`d6Q}3dhbsL zOR8fKFJ;Nglqh*nbu8}opB1mm!~>HGQSHzADwmb}ru12qz0#LDZsr*{bQUR-Qn1V0 zVMy+!2qPY@iyXbk=<^qZwDVs-ChSWV0L1-E01Hnrq9R`yb$14o0pRC{wboZLYu>!2 zx7&Y))zIP~@Jd)X?ev?l?l9(ahD1?!z8h)MmHaf|!JE`D@;3&R1uBP~%vs9JH`G=z$mSK5J{mXOD*VqCO z1)JX{YO2XykG4x%8aIj-6(nq}o7<41hrs!FARl&2SA%D7EWGRLGw-aFoN=%9rZU`K zi;cOkhe@AF54c?#h<-mkGxe%olGhPERzpZm4^(_~&&-ODmi3g&_Q{R9^F#+5HWOi~ z+8=@)?vk024$Fhwa~gxPD!FN;fCWq%a%>0gk?~E1uk&3)U7Bk7qP)L}qOW3BL=fS&7V{k2MK ztzqMozfX)wi+fqL^AbX+esiYSfU1`$<@M+CC5*YDiSygA0h)GjTktkckihKd!Xb^v zCH1FO`Vt%>eP!kIT`dl~F!PwX(I!Vw;+}&CwEU@52X8pIPfhk_wa2$x)sW(y6#eF% z#VKuFsvw}p^LUNyE?G$s4s|;BWBzD()_$T7helfH-afKHP_kgXVsbwBg`D@WZ#pjQ z7&><EjR&94uW|a1<)6HBRCE00zLdgX=rq@MAdOa)px-qn9aw`NBs3pr2VYRl70q*U;`Stfxp7Mj2JL}Zb^Mv^(MvDc%7P?i1moI8ph=#wM{>n-X zt1rP_S(Mg3W!viVKzb!eNqX^K$PK#2s{8Kn47d+U@s<)Q6<~fRKV)E;tV|Wb<|({s z+*toTFo9?6yun31KnNV)N@Z#``O8w7dx@QXmSN4nvMOcxV|x5rlE55#TH3C=&9~OL zCYqh&s#ArAoAJtJK;3aOv3)QLU1fC-mNO2s5)Zo%iQwsOKP3mlvIQW8mBcmubfm^f zv0Iqx3nu zGp26JX_@Y3zpCe6@bh+2Es?d`P}IM;e4Akh7%lkGyV!>BgjL_P!pu6(wJb7$oM_8w z$II?b7v7?Ms`Sd0Paqmk-O@I$!iVWXlv?(^V-vIo7wgjf0#$Tvh{;*F^vvXQDhkMt z)oFPoO_a2bWZJGt7}l?WbC;%K>x`3Tx5~$8_cJKBKGYcX>%O{W24}&Y={4{7WS2JX zv<2@|^R0v_kDSl$1|3}*s6<5zV)N|jo_Psjq6cD>$oo`L!8(x{i_Q;|{)m$_PjkxA zB^$c6rqmq&GfOcZfRT;|_5_bJMJfzlxcJA{q7hKEYYF%Ah4+8kHy075PVP>h{_r*} zxX=7)LJz-=8{$Y3W0rCO;;Iu68FPL{+vkxAYT#;iXlgce0RbwjnwXZ;k}_q?zx-rS z1Pps!h&tZRfq%vCb#rtDMCe_<<)MhBXG!!azJRi%HBx&Uy%ub7Fjel`stdm3w|-Og zN1&FA`6Fe<-Qa^K$j=+V^Xw1N?Za`?+j=c{oL_vSKPF?3w`T?0`)=YEj%HwUhB(sV z;UUzIi!#P!nf1jbHdouY&#J!p!4#oGYc=w(Bk;xHj;}j^N}fo5RI_UR!V^`^(o#Iw zUrAqJ6>ctgAlMw2A&msTS*Za#Y>+wm0;6@XrZ6E(_d8(7+|&W1g{Hxvy@l$|=TmtmJJsw1 z?D<&v8Kvudw_`F~5N|hiA6HhkZ8l4)!vYd4YnWlq+U$tk)X^8H19sd>Ej2A{X%wcc~mdq3~l2W;%~EMr-RrRK?JP7~2y zA;m(ZXaf9e#UI4hDtwik_!3X%oqvr~xqseyLpf!YVL6nQHNZ~lg5%MJKOoDPcDE+d z_a{Rpcg5akiyz!C9F@x~{H$_FyZfGqoWjx&i9QVIOTcK{T%2geleK$NYknskvit%Q zjw|r!1Eg!2il;^%Ll=W**fw|V)4$m4q$)9Vs$^t&Z)mTm%*4+hnUyOhtnat~lkJB~ zX!{WEh2XYEG$86}y*d`Uv?c zG;f`5qJ$%=#O@SV!$zZzC9h){>W6tYqQnALawPrHQO^|V57X_UCfvTdq^LxU+D0k& z^S?4}b;GKt5_{7VEd+?o$p-p1O|ewzo4tYZ%yJ^o@f+ZwJ{WVF^rnD`g$VrXv$7nC4*#RT7GjSv$Hj&SkySeu}%caAZ?A=pv;yh|ET)Pf&X zRrXco@NPBT)a_E2CDo1Rr}!Z9%8?FGy2D)|y4_g^6}MFf#E7XEjUp$3#UO_KeCNz1 zABW#k``F5fooX_~Dv<5Za2VyNo2|(ynY$bc2JRzD#08=KSX#E#szkHV>Q=RI;Ggd* zbx;#hsINo93D@JD26)y5>xFsGl8~Wx|BFy#7C=Y}i4hai^h0Fm!wd5)B7`oHmMlDt zob4izF4@j?@|s_Cs-u4G`FNBN;u>VtTCo2zfkJDg^BCXNlxu>E*t_QX;b^KB239Pv zcs!ha+J=x*u@ceOQerWfpKlR2Yrr0y6Z|7w@5|RX1Ou=3_^@#%zS0gJ$74a93%F!_ zAef^fw43qG@T7Z!*koK<4;m=(*(SQT2$#f%Q-6N~@EbRJVNKVw?n*#5PiRnWlaN?_ zAK}PEyU-i_MzyA4EaCvsA(3sud9`waS{=iyN4?Ay!0$~aLLdW z`DGwJH7cx{qidIA!)<$CYK8v;Cnis5T$py_UnpGXzz5YYBf3odry0+*-M%kI>N>i7 zW?(oTyIsp3U4lHK&KzH0u1mLPqS|J)`-+WOm{FLtM!xE-`e17^!al}3s6`rj{g{2eTUZyNY ze^1cyDDuMYY1ui>(jB=SQFN%*cpu+dHMWI$+t7+oOH&(%0bfV=96rYVX6uMtqF!Nk zOyLa*YV3!;Y3 z^MwEv+MDmTK2l2~k^ap2mUpsMlZHco?v7io*FKEmW3T{CY~9FP#ULo;&V`HWv%WFG z&eNhxaIMTQVNtTGN#%IKeu+(p^I&}|7j%?kUi@0Yj3+( zHQy7|hROcRR&cygFb%X0<_2$!w+?5%Ci)`aYo+~{`B;9<=+Ebl!_rRlc1OPRq8>@H zR=0_NzBnf8b%snWrfb|*kXqSd#Gc4Brg##`We#2l`dpPDx zWko%43ZISa;@WbT4!>FQ0Gh50r%@m9j0 zrQPufMixLc59HHE1(L~P=mgLhPuE(gRYt{W(0qq;L3wiW1|7++^i6?T0*L3#x^4e0 z^0;s&ALf3-3gYmTV;p2J*jYo{xVPB1V`7`l>@~$_8z0Gk%Qj1OnP4xXTxDQez_`18 zAh-bN=n)f+Jc<+vvdvDG{khK^D*G5d?>r#VY=`Ozy~RzJXR79mmzHc;v!I3^OU$RE&iWi-$Z7rD z=<=BAmWI8ls~?AQn1f_~4=!xvO8xNJ;};z9q!t1^6(u%^f>D82)lIAf2C?2^d{biS z`}m8)EOk_oS0W}))$g}n>c&B)ip9BMZ?hruBwGeBsAAJMUr+1!jYK}=iWTbPO2pHP zj_zMDstXZqx(nia?;QuVq-5EuskRG*qG?S#t8ga!HCuFHIO5%?iM^XnNkumK z(vpWPZD<9(gCRwOPmc|*1N0B#{$isK{nI&NTQ_m{`Z1gD7*Mt*RKX@1`>S92{E#TR zJ65#!@k!*zlvn(q`}VmQ!alP8w)fSy62Hg$KP~=uw>zxzO6_jZ=M2ZU zSTQs20`EkBCSR*v6uWVexS%ArV*a95AuP4Nv48kktd;%s_wSgfXi=r7%lra^h0JW8 zudn1MkE?38v%_jm8tv6@)0Te5jPmIU;VMGG#j&Jeh4(Ht8FT&Q-Wh6A{84 zBB-?vk0dP@y8Jbb)pjP_mf9c(O=b+C*Z=nVA+ZFBUp#Sbm0bx6LZFW=L-4?32@C zl4Xp;O4)wIuv#SfEfjGwY_bS@UUYwQvGPvZTZ!>bZc-J}XA@qzHMjPtcb-%Wu*c=q zVp?qz?He*snF-+-$-H3Jn+__3%3W&85(+ZuIbzv(c>_N-h;-Wp0rPqR-|?vgdWcj- zdYkN4N=i#}i;5VpJ}BqNM3U(FTny~)@6RGk`bG9J@}0b2{`DGUXjG6(;)#hKio@?z z5&dLcU9ZV0ai5h`Rhfg=J6Uz=3QE)e^*}g%;q@SCo;@sRTNWlXgoE{`f2RwW4P*m% zcSjQE=H|}Vy}^zfzEED*#DARyD(UD1m^%BoN5rH<69i9Xx%`f!=6hm;G?3{RKYsjB zUZwcgFEU%+iy}FHl9SA)J9G1(k&V`#o4K*RQUvhSPXE`#VPbhM_N_^NV#9JRFP6yvj3a-e7%% z9wt9qT2+OfQ&dzGu1iNZp{%Kyw9oW{mzOt-mN0%+;W0TZBRVfH&vKg1fjthfzzI!P z*G9ze%o_w1vF#Un8Q)=hWkp3HiA<{Z5A1YKLM<>hC~3L;edW=SwW@!ipQ5x1llul5 zDlRtjt2Z;aIvgs?&A^Sh3Bq{ugU#Nc2CG@dJdRI@S7rz}2I8={~F<&AT>4H+km~@un1>X?83UP=Dtv<{fmB&{x(ajJa36sW!gon#(IK|>(&5`on z#?_LreeqzQFDoxE6}r@y0&XXLqAs^SV*Jnk4ePx5?SMlV575__I7FaK9|3YrO-+O~ zY^$$=S#SL>HZg9%&<8`v^M3*4JiCdU%Tm=6Xf~FN>~Qe=_0!!E3tne9x+}tI$LmV; zzhPUBo-JkBA4ceMG*_BiZbwWl>}HDiS9uNhU)ar-Avg}5fMz_Je|>oL2MaMFl9MtHCS%e5+7&VS*w9+j2LD=J1dc>aq{i$>Wr&3i;AP+56ZUQ0`A z5C(y4!&5jB)9rR7$1kr6TTM-3U)W8d-AWUoUA}(1+ZA{tJ4@7Cwjt}Eq)26i?`h!3_^fM z;+P~pq$xD873cOM)_=Ur6HGYio;F3gI-bK-?J;_$ef_L^M1OK#*4C`^)H8dPb`a7+ zr{FYL`c=_U@JH4L3p2-hPY536;#YkG9hD1o=ey*H-;MUnMIGFxT!iuHUk{u4Zf`_i z>OSKj&{Gy1FuDR-RPR*ynF}m*F9)TSyVrX|Q&?ek94g=4Hy)C1_3{sYz7?RR6vW^` zgxLfjHamk}E(X=7vaBqE*Jl2Ff`8+8rEYW0v53F6YU>jHs0eNW;D(Uxk$xba-Iw{cyYr zvl^X`3~L$qO>c%I+Jkwdsrg=sN;A1WwhEW*ImS!f#gA$dv8gQ|e`NMGK@NrYuDmuS z?Asb}ko3=d9~x|z_9>JXq7N(%EAay{yw zuhb2ir#?)alrFFrPMNZ}5N&pJg_gGh>XQV=_&p69iumP*jM5(k!JCEW`8RPrN}0JnaPNh> z0j+pg%fVX&bnm9ibt#{6BECPLr4L3%X`AVa;kKKMM1EINVXYcU_KnO-Z!Sa%!)C)8 zx*opqLSSduH?+$*QZ+eVIDNS7X~{cweVId=klJGB!hLk&X-8lWDBhpbVwsm`Onx(- zxJvkPpbwO}xw8j^{LT@`%g+m=zQI*pH@YDmjO>84OdJ66c4|Z+hEY{E;>Y_@#s0R$ zYSZDX*GKnAzCWzsUZ5zjs;wrmnp*7@t$64)=oT*@K5j9&Gk825?tbBAb^7xmbmIP@ z3oey)XVg*rG$if-bi?0)Q9fGP!Y^1?U5FQdWe}=KuU&A)LSuPv0K@lmgo5g5c2UJ> zpJ_y-DczCYvd6@H`q2m@QM@s6l=1q_ZHtGfM|^PzLe( zT(9W1+DuYBaQHv#{>%l#hx}w{5|3qFK>>>@CAoT(T|?QN$qSRX=Z<1MEBk`jG_Sap4_M#^Uq)F>R(+w63O8_A<5cwN z)NOFOz)|Urgn^$~l&4ZCIZXX{@xV)MQl*$zsstgq3W|!dCY2-PgI2lK-Tu@|JwRuOd-(QpEIiO=uk#8S+#!}ZJ2Lt` z{i!R0bapm;tsz5@ayHFJQ9P!4(!>Kq2=dbkhx|f$*iU(EJ-Z0d99LkPpUG>|2ksO` zcY|hdbnEQa$-FGajUG;CYsB`?Z;vbj=U(FV9N~%H`oPrgWl)-3jitAzS})fqiVRV7 z4O^3i*I~@GGsDK< z7bP!xKO7Ls4f(#*d@e`zQqzgh*ZAFHT|PY)ikAZ)6OAwIi3qp*iPxTaaa`Pv`nGJ- zNY(&u(&qETOf;1~l_~y6`M9wtzopuK{zshFRKS50NjKGhU-eEG&cCRAtI_6jtx9v% zVR;plCI`CIDNMv6cnCGT>5dt~&^kB1(s(%EPxsvI%Y3-RzTG8g=EA-8tW37s`cd0= zi{_tW2^U}&y~KihH%A*KwrOxNt-Y-?C&w_<9-K5x=CYe37*0)`IGwG+_ukl;>JDL= z^bgMbZyXWXbEqra;k)1Dr|}-fU=3Uwz0c4oT0E#maQ5IqpRsX?h_(!@g+`Nx zwMcmZxgdifT+VlpW4kYrsO6gU^UPhmX4X@;|HW-hjBCedppglP)9+#e>|oEnTQ};d zbhr8Z3ahiyy}Sxk?>qH;fnr_v$iAnu!ez@@`O2<$EyKN!vIE{NzQt5KNc=2C{7$g% z;XVLg%1Nhg&(*6xW4Ale+v%D}v8LM_54`4%0e-xa!mm;s@Kv~eD!{zYFXVdIj)C4D zhGOXKx4!kxR#*_}y{kScIGVI?Dd*fa^xxkpp_>PGhcio6?N@v0|`an`(Fi)8ui?LkW@;sXbdPa{9^Sr+S{1RX!(B?te$Ul;ZtUXit! zE102kB3V@L$;SEGtIF}}-Ma`J`_!@8X#eev>}M6lo3VSVw-2+cE{DPW{f}XCXJ_Pj zlJq70*JWifNL((KhB9Von#o{5h}(0y?8vgW z!YpTX7|@Xwz}xN%Pba^*pwt7h`*oi9@DWPSogg+_-;Lff6@tr1T^L36n$S8fIBp z5ws@Fy#n=2`jXyc@g9@XGJ$+z%6xsr>Ym$~}+^Y*O|GJa1?gge8i{1W$ zp>O!c*3q})F?p)P(p6CM<=Kf`*x~OizOxjOG;y<&>auNZhUcVG=~5V_1%VM#b_dT< zxJ0+D>cO_7wkN|q-lXas%}If<7_Ms=pSf+>PG_41Lp58>-ojmM!ZLkGsvqsn`)>DPW8 z(7Mtyo(airJR6#+Z#}&vGrnKzY1yi2zI<-0KUgvFqr)9;)({<$cWOqYGa%cwx>LDR zm45$%$Qi2-NcJq-j=%*#k$N@M)}r_+w0caw9D; zEUr7Mxb|n~fokc=Y=WM3*g{$0)}VB>6-8t#q6A4#9zKYT;RC5wA6 zr<(LOrsd`n6>D`tnJ)$)eR?>Mit|;-Xbp;*a==6r!_%c1dG+eIq31<_WfLo$%J(`RAfcBXS@I45@EXOR z7GuW`%a!x-#!nlAHilP==DO%nQJ1@=JKJk+-^tE5;eBeKxWD=23GO12!-WaXiA_EP zYW0#h)5O$CorVi5h8R-8L9YybuYX)PZ@&Fpu%TLvMi2+fc6t}9Rd-iOKECLM2i03k z7Ynk_ksHA^?`TXL9YyishU$RYSdIW;lwL`kCWE@RRTaBEOwOM3ki2OEc0bl^_=ynq zP_!4k3++C-B^t8s5x*qUUQ)rjFYfOb@+W{|8D@Rbr|5B+!T}jU@Y~v_{u9!ToT2_~ z2N_h@N~?|GqzM{W$X!jRHQt@dhPAqhv8X!Q8}g)d*7$?<&Jw4yx-EVTDyBF&Mp-I? zFX#U9;ui}TqqOtpo^I>nhL)1=Bwx8h@QSC3K%Wa%SoeFkvU z?tX1{9pXw?V-%|Tm8VFG68|(ba$KdRu48fa%)aG7iT1KBxLf=Q7ihOQ`q|KTfE4Z- z4F5cXwPGe3)cx7pa3DG*<$RaJFsGy=VN_qH{!8n{v7-%y|iL=z(4s(^uZjp zh4ILJ%yfoyH<7FU+jzy*GIFvM#-e8hy?&cZf!UtylPK`V-hgErUQ2lB(>)!5G|=d7 zUpTx)JmPHdTRP2lHHX;ytK>bhPyN3a+&Db_C-;^|8KmbJuDc>AIX1@X1v%=c7s+He zIwWh>tE)`@;&o8FPdXpwzbO+`v%7DB0Z+AJtX-7=uEceVV;ht4aC~8h zbO@t?_np0$oYSf_g%XvodWE6!_5q-0{D3@e8}Fh2>eYZ=){FBC^7E%f8Ha{t9a`c-->dZ7Da19z-`xDPaO@IF_?3Ol&}7FN zsFkX=+p3qqHeMMsSz4y3( z3-%gBu@G^kDa|YE_AFOoS%iwal{DZ|$Yk0H!fi@P`Mt{h= zkrv9~kC-I9=UUVxyz|OnU38hmYeVv>K~u||VY)On({7GXml^#!{O?o^hz=p^0_TrV%zgw6sycz;2TJX3#TaUk%(={|vLfk&p z)LdF7MwF{N$JaW=H=99kX6>qm3;)c533XEDVqx&cD7ms?2QypByzP*L_D(>6clYLy z>_VgyU&PTuwP7?YC06{Yg?WXJ?%DwnFK%o?e;@JQ)s^?tr%wo5@Na|>O4d3pEQ4r# z#Bjw$3G;Gc&!-^mp_5 z+s1wS^}b_%*Vp;L*K+i!i#pO2iVS-L2(8Cjb>VAoq1R%!e>b6v-Xk}n^?VV=p_rS02!Xj34mDk7!v5cm&L=pC`7_G`L(|IyD=y(*no~I3BW=aTy z-z0ZdF_ecN3>i|`;JRGk^Q!+5$V6k}SPb)ApsK%qqGh^R8#XjK#?!^g+N>SOY=N)I zBSNR;cWOnr)F|esQEVSgN$!Apea_h|WN)0BH2#y|R*)QN+1We!J4U#4S461L?81G& zUeAQl)L_mFXO-fFZWGlToNN#5JjLaW6%stH})hzdqady|`Z{+TO%l|Cr;r}gPVz%t{ zJ3*ga?O|?=8^4!zN|DLA>CRRkx__T8buyc#{V3N8W_6w((3eWK`U~Tzf6cLJ(*Jk1 z#{a|lfJ?5}evdKeKMLYHy2QBqt@jie*eBxN*gi)JgcyNKVK2s0% z)z@@%xk;1VLkIbxN(>L>L+CZeWvy%80{QI=P8bhjqqjN)HF%)3ZsBHL*W+E>=~v{E zG*~;@eja*3TAs@p6LzG6nIHC@V|^J1kPSYhZGM%IO}H3~_{7Sa0$f+aev?^*o|UUt zUE_W*tBF!c(%N$H0W-e$wX3oaknU9j&qI^y!WlVCC5VPK1kiPXOGu;!JLx@?rHs>I6*MHh3}W2YNj6G z{K5eSc%R+-n|eFeWxdgXXu2HQFVL!xWU4Cz0+8p+uiN%`vt0|=edh+My~} z!&^~&DbQ#js5i$e>~WeJ1Xs5#{rVSY!>uM8EFaIBZ6CWS-P1)w`eZBWLYCO~|i=L>WyP-kU0d9Th{Qw2@ zH0tYq$tb22;8IWe(n4vulxT{;Hdomr}6@GpR>`zZb=S6-*VKZ1GF z+}{yC@>T6miYP*egzWS-EGKsD3ktvl@)>h}2wEDOC4y&_7<+JOkdwIK%+BLJqo`Ck z+`lpc5E-@5MNvCPmMp7%8Y*5Q>)oXQ$I8Ni8L6$;!jnWEFEvb6DS+!RgPSt1-ni z5mNvW70&tTWilkGbFnVd*j$V^+sFtyjr`@g<;Lo>$!zs;C79^uMpI$p#o2|N67{8e zYBoQeMQCASsP^RHv`Di#HaSj~$;$JcHgk{-%W&#U&>du49l_5MvM&lDYsa?c>!OOj z>#75QQ>AErSmjqp1zYBL+ytmmyN3IEh2E#VwC8bpW<=^$;7LgvY)m*ct}ZEUpvL77 zc2N`+R?_8`6Qm@HCT2Q#BdGHx_?7GeQBF5YW-P468?blG`HEm&A72FT*x$mm&(?Fm z!_I-mR{yM7@|&kK()O>Dqw4ePn`{3KV^5mu@3aQEh^s zeQGZ3O+awI?c^b0z5C(cSOEG_m`#ptu5b1G)-_D*)??#VLZssWcgt0=v5Ox$f4$1r zO)hnw3;mBH>D&PusFgh$-p<^qrWv-Vr=F){c3FBn(_mI| zNWB)f7&q1Ic#!%)KH}hPoWE@cvO}HPU0{x)NG6u0Ze%cv0_-btA6w#9eHJiB5Beek z2MU4R5%Qy=E&u+rn8b-6Y366~t;3V@ZjnUV(AP5_qs?fk$*zaH!*#N(y+EKi=xbow z>sFU6M-0yao3mGgmRSIp(9riUR!Qp|_RK^Mse4(Jr-tJ&nZA1EAyjpwf0h?%Xp@HnT!%C(_J|FvVgs9Su;yt!@8h@AI+}iQU(L@n zSL$fMb8VT4#&1}MkyQOP+c$WY$wJ~D&0h4aGM}cqlP$Ou(r!m%M5Ah*|6H2(Ufvfo z=)G?*z#U8reRmtJRu1;2C8>Kv`I=6SN`dD4Z2YwTiNn0djCfTGrMoP^W@0?GviuyM zAI0OB$Kz+-!QZ9m{OcvKrr>oMSXEi)N%~h+u6kU&_8uYk-;+J$>RERI-z3iNCvv92 zK}wR!94(xh!u`sKC|4`8Ty9U+zEP2Yg7=2~d{aBjkRXpM=O_2#V^HTuuCsXt5~!T5M$1L{U{2t%a~k%6}^n^PJx^=FR&>TjpICFoy~DrZ(H$ral7 zF;F)qcP|>yyNbxJ3+O0CVv9wtlcJ+1pV ziMpexXJm&}VlF+*JY%)GLQBBm5VP(G3uFFJJCAmg?ym7Rf-S%GunZZWz;yH9#NXmI zL;_~g026Ve&dCd%yquFO61SaGC{Ve1KT}AIdO}DvH>|i&Ni6uaJ}BA8KF>4gX1z^R zN9f5{jq^23u>-b=f7Y_#2n8lnrXslByqjk!5$kN@x}{azp(-)0V zpF7!N_6WbP+8_xW>)%870^EA9Jn@Al3S>V(!VVlPinBIyrrITrPR`H>C?D6ZWZ5bf zwVx`>u7T2EOaSf(c(C(<2}RY)iz3)))~@xRDq`sDSH{|>XtBdzVi_i{Stw5Ko!4J~ z6l3UP)_EP4w5e+shOMX){JpbSlFn4gCYQj0fBBUfLH9#REpVCcoi4=t&o{O&B=7C0 z=8L^2(c+_e{$y>y@ouS(JVEbE-auAiUyPfejOyuEvLwISSo7xI47P4`U>#&4_{wj2 ztN;jG`uA(*3i{x1C_KTRu4fs3ya5ebxJ5FiaRe^5pBDTpH})WWO=0m~C(&rysO{)w z1UX;9aueqy>xV_NKpSsmX@ z#iM*MKWw5ADnG!Liz6$aG<9n?Rp+^hyf?v;xg^{XWtHvOtR6E|t-D3=WQ@c3 z_t6~&`u;9yy>;~Y-P!f$$|t|*_IO5H-`2^v$h_a%ToNuVeO!1ay&Hdj0piW7S$-HV zj#Gw;$8)>9JyF29xk2*d*vd+qa-MCzR%A>%5g@&23gKSTLy`VY&qPAz8xIN8N@XBb zzXXriF>dGZ{`P~gGcmA+wLb3fkkHXs01TN;xJ_gdlC=2Z_d%hw4%`4!w!vEsl+i;n zEIS8f7V|r@&;r(AQ{0!af*Gb$p%ioXiKphp*gmno*+L9DXJqDk+(lGTd|qxW?rj-r zZMvnm2v)UD(S;%T*JZ>L_lj*cVh7nZZuIAv)P_$m1e&P*;$wjYyy)#|&XG(37!rR( znH;YaBdn73bc015h5|8?CTUoMg%@nJO00{d>B(ECfR>&O3k#b9aOh|3i5#xubZ!Il zwZ1*%hqC(fHOIpt@6*fGn#Z{4N6^;VAyc@qbqZVez8p#u_6bzzK79!h4(gn#g*3)j z^V<+r4k|qn9Rr!+8^a7r9 z5q&j=bCSV!w!V@MFma2wJ1YxzF%c|BfAlHv|!vM{Z`ydE0Uc&-lTPmp~y@{BcZmC05eW-91(qvt+Y}(~V7BA|KOw)bHNX z(NjCoRAqf*x@e!jA{WW+)6K1~F|9It?@1OF%b6C+X>IyZ5Rluwd|fx?8{NnlzG0jA zvomsaX@b?l6s`)I?B)<%f^E%r&{$WZj@}{6m_*St#r)BEoJ+a-33~+N_&1S2xW@kC z#rrI}2|n1dWxqtB#7^(~b*5#>!1X(MV-!cAaQ}qI{mR5Jc!U+>JU}QGaF1^-r%hV? zAVb2Fw*L~O;m7cOw74n(mL1Q>5eT(jG%!r%(^sXKvQ^U20r(1icCJXi1$30H=d{e; z(Q+My6kC7RPq^}V#N`;^B0eb%I|xlAG5rxuBe&-;g=_?w=Knsmu`b5uyz!X#o|cj! z$Q4r$DOh{iU)!%JJpvmdFBYgoNOfxO3GkG$zVVRr3oFmvsHXBv=+T4J_ufERQmJ9t6`UvmTlt; z_><3~0a;Sk>xt?4x6{{yCf}(#=U)}pW)YlnC7t^WownqrV!tD}$)*iNGEE+hri4f` zx6MkWcD!KC{^CF+=ympM7T**3xh0%j?~*5e8tEHE@odHh==)?w2U3_0TxB+qlE?aJ za3RZ$v*OLr-bZE&kIykdsFqXoe>$AtyNS#O_Vw;iT|gvat}YdDq+T#)(dfjJvIg+x*D9Pf3^RvtrMS{|E5)j zYqokvec^y*(YX@ZG34j{?8ioD#V@1bquk*Tgz_|9e^0H$-3f+8vU;<#(BbB|XFqSH zT4~#iE`!CIQ-m80l2 z;DF|O_PghFt*O>(g@@g-;K+W0p$;*(6C%4;+nyv1Gu!u#GsOgk+1aTLWO8QU7k_*E=R7pz~!?2_`JRNMey5A5GqZ@=}kFZ9<=ytPb*jGom<3%{_O0bM=3DkOn z-i^@irsoCA@>XDj2R@(}W`_)nMdcq0Cr)R{4PK~@5$NOUdczayVE*#W+9ZZ_=%m_M zeK9)uR)2!Z=%?d-ECd`taB~sz33wG2zHd$U^+91%@!foDdljSyb_d{pg8mWmH#`Q0 zb|TX~o4Z2jI*>72>NzkgM$BiFB$y2qb>>w9ZzsrR>)nTK!nx}!QuSA`MJDWo2#!=C z@tNQvo^zsoVVtM5DB^u#tk$ca2)QK=#g2A) zB}X(AkK+YvH+Vnt=GsdJtF=1BZvemjOGbbf6AaGOiMa`dDwOZ5k3)(ETXiGfN zeI17KgU95VpA*aNLc?)j1w`Spq(NM@YU6qCZ+o-=$(y}&4nl*e#*PxsTA_w+6RZAm z_AUko>I1Keeu9$~)}Z7ziyC(!q$qrdyF{>2$l0M6i;cs3L0= zolkdT(3vK-RV&0sim;kDTz2R`*%)$erNy?Q7!JVYbgpEHhwLPE|w z-TC*7b_^VK_Frx9_EB0lZ&~!u7qA+xAIA+dgbp@_I08csbQ0_xfuJ2c*U1nH2{H4T zB6cD?v|J6ct_J5ii`Dz5!<=yuN0!jR+pm@)cT7`40*~skIV?w(G4dN-A?0hcY)j z7l*re^+tayJil00rSo6MOc{$-V)<2~`g0yIoU%ILj4xl!;G(kutv&1^E3$MXfAo)x(|EDB@hB`{WMP7-3paH->HUlGe}mz zx)?L15lT(E;u_!nGida|OHjBqO<1B>VO_;__xVVWAS-#S+Uiu<(+%Jg?><6q^1+AP3P}(2X z1Km$hdx!uRd5b3ja^~v7^y1X{ytJqlpD2T=w8ch3^3dWhx{A1Wi%J(0CVK2iNb(T2 z9Sq4u|fVk4I8^n*WTO`ouPG@zBdN9g#&A@^j16Nn>N zaCvO0hL-$zdmCunS$h&2Xw3V1quI*{f1x*TIoM!{PAkSl1u55|)ozJ?Ogl>{8qi%~ z3R(I~dcMLL4D!gN6tQl2e`#$swHRl1&#~wGG1S)2O*NQu%!`%+y_ko`n7Pg$2WQAV z`t#5H>IzsuqV?dB12duS*uRoW%xXg*%>T@Jj%`4DoECXm45Mj_};4xe#_@M zfBJ3DCg5di4?QVSNe#3cDf+B!TT02UkNqd)nXQF1NY0uidoCu zc+x)XO2-R5Fx6Qst4>G4EjTFL4vdXU#LmnVWp0Wku8<KwST!oW`*-7(QT-L>%^0PwWiFl3`%J%vw`;yQ;{&B}sLn0Z!&|Yiosa z^b_Z4eAQmsahcsIqWcNGnmF4RFx$$Djm?+gD#u9GTX?5unom_99IeR%RanZ9bJX?Np-Ij^eItjjSoz>rRGj_)sl7<<@81Lm}Ns zUJz4U9=7$Xawan2_c{EsPo(U`ruHe4@7)dPJyV&oHrz72zdtza$vCFLy<>wqkg8*XXg>#?Ei4cUitHNrRY z?Ji_d-}DPYRI)fhU&+K*!@B-v>*Cf_bSJg`2LT#Lmb^B>GM~t^28XZ!n|ayXANRwY z=4PoesAR0tS;2$KiWsh~emQNbYZMnP%>HoxE@oc8eZ(rvF+qzuxJ_(3Zg6(D)Nc|) zn7Us)!po-DJU#Lz3~bw=H3=@&m73O_J#`daM0B%kSgSVA-l&C-ByQEpFrzf2sSRR> zWAj5l$5naW8+VBtci^Wa{CbH*8zK{sS8m{UfF3~%vkB?9uPdsihSl2IYDcnP zPj2S4jo*E-?S2C`Ove>fRYlwW@^bCgQVy>@G!|2>^VVPIwl8D9lHx2H2Gk@gpzdmc z)@DgpTE;hK-&purm7G0vP3M|he#}046|b9NMjIj7b(b&urZX?u6Gx>D8DUosg#x5} z|4a(bHY)!GJp*5{1&RH-UtfO~{Ob7$M_Scfk(h%$SDO2q6P_14nN9l03UO7j!T~o_ z+e~#EV(1zn*{(o&vyN7N^Y>t-gJri@g-qy{Z`QXDv1L9f83#Z}l#)8?Au*3{DEvey zq!Yh2gZYVaI_gruoi9dqxxZ8hIiJk2V#(73h4NjpM~8a$@GRUbfyD+ zWOgyY!5-5zT}W$4%_+FKavQV#j zw^H45{NR@eZq{}f5?%ID;hA|BA2{GoFO#ddX$bUD9{*G7+B`2HTY6gN?4dg)?3d-Bgj-2TJOyCE_#Zmg-@?**54+HIm7IO(ka54sZituUX7?e#S*xq%2!Fw z@D-_$CYBYwrCXaN@M&?W@kM1|q+15V2$ssMkL4Yv<4vB#(*i%2z_qq-~g zYkftUQKSvrq4!dG?LmzwV+zRJE4$9XjG|gM`$eoOs6-;UDRvM%Dn~hYgJoE`m}k*; z)K06LooJPPp-w5#C1kqHjpB-(ozYWp#5eM+beksIxA#hBs$afZ&`xfxN$o9LNMP)6 zKI|cFCz;8#{wB9u(^6_0S9;%ag`-f(ME%U|@|@U}SkWd;Knp!SfG4;)-V?n4?6(b% zJ+|V<$iUC+wT-V=sN*5ctIA9MvU%~-^u**s8DG?#-CN#x+aD+E z3_2(-PPlC0dME;C7#mTwwJGFpx6L!R^=D4OSo1~4tvntX$l8v+iQl$|f$Ea0s**34 zxv&(6tw_>7KZ27YRe}QyWlzR10o|IkVwZ+drfPg-LhXO1OCDnh&WF^>5&(Wn=St3a z{ozeVd8J}()3G(LGdu6};RxJh9E9-=vW`O{N5f=XG&E)<30%QCT^pE+JXUheZE?~; zGiFan8}&yrRbBy8nr>FBa_~%?tIGJE{6{H99>qpQD^{#3E~$h%*m@!C-XfFXM0l3g zLyLRxJ)}kXFzcA8hj*i%7mIMt2jdKdY^K6D?U)AqYTtDz$tS~e+9I&kBQUoTr<7)u z-bs!~@*ZWH_zDSD$u=sasMZC52vn&Uf;Cicw~P_BO}D?2i}X3=65{TqP)PGf?P^nm z{xX-VRI0F%N}=N6$kgc0uBgdW&p%}-Rf=spst6n13Y!{Ie692r&xf$~Sh2_P!q0g1 zi%Dp>9!Ws~pg{;{NALtiw&qs`*<*4%kO$dsXVPzYIO8^+nhQL9W9So`(yE4AVe%ZT z5po44EALZadzM3ae%#>J)jO5Qq`yLWar(5rc?P!XeE604pU_j$B93Q`xITQ-?gf1S z$om?YkcVjjv70GkvO_Rvy4;qEEPIo3!4PHbT4q-dA-mreXQqCnhj3wctvv7RbfGpx@E3Zf89z=s^TqHjOLV*NwpBjx$)nlm?H-^ z4&-m_k9J6sT_k(ZD~v`dt+&hcO>}xL;BmX~5`MKu7?R}+!XEGSj54E~i1C_K*-V<&tpaPGcL&r1`+8V$OQ>z6V6{j1pHehR-_IEsRn;J`F{0hL90 zXYe5v^k)QDpAc7CgnSx4ANhkmS6aPh8p6k&cCoKxJD=35<>#`tCp)m$W`0&p^v2Yc zOQ;Gl8&>SurM26^{2WJbI{M~3TGO%`KtKWW7<8 z9l#Nj-);-?^teThKP_+lWIISCjHPwOi$GFd{atb!=K8*Xn@WkuCHw5mD*iip=2_|) zTisjG^cy9Tr2{Cth*{7y!03x>G7W=q6`6Y`r?qNSJXS+mX0A-NEc^oRJi%Ao&&~uI z7Ea2&e?J9iwq`5jV&EmRHvdHC?{`_9PT4`pIrwuU#NNlZn2N{KqVLa)FKD{X%S1fL(T|gwx(?IXyD|}MGbDj`+;guSH3!5fn6l~QIy}u76d@Qpx z?r)WuL}KsXl0@P3E-h7DpgO_Y^RfcDbtCw~^w{$z-o^c44#luKxrRmSeE;@-$q!un z&mdrp1AXL=qL)${&F?sFk0ky!51v^P|GgZS$UOz zXS4M}&^HG+-!&xb<)36r1Xm22YP4q0B!x68*fxkO2#y>mMPH6c!#6Y#jbet8<5d;R zKsR$lbcr~f89$5%Sr1d4bz&^V(Pizwn;B0$@9=9kc(B)U31mOHP6;URXNRagDtFo%7+M!Yb{3-p2W?^ zf2WmJ%>0e-VZIeY(6kPSD!g=L8= z-K&crcBG5K$8*XmAv4NbRD8nSy6r7@yjKTqNH|gfOW%7RMR=BiT+X8A36Cp&>#J-Q zT02^yfwS#sOUh_=Zg8lSh&QKKcE)EaL#NkA;xURcSIgw`C1NZn4dxvsRWGQ{AIf~H zC>49xq=M|KESYOJ4X86bje%18Cl}zTFNmmtO0`(x7DMCog|#%4U>0A6#HWi?RM+`z zKOtQwTS-fujVVQDn$fuKGI!m6q}j`tu0 z_Uw1dkF_RS!_ zGVcKfa@foqiDVTdB`XX?n7bJMwSfDk7??XaHiSs9d5t->N)VX$?KA3h`TTx>#zRBm zMes@moV#B2fv7~B^^@MN>W-kqZaST2OmmF=LS8>6YHZRJCMp8BAJK127d@m&9>tuI z-4p(`c8<%50C~RFfxet|7czMxscV)HN_=dT4}eip18ArZfPTH_uH1NZ-}iQc6abJp zt|O61_JRN`{=DvA%U%c z-HCA_m;3rl?7IKD4a=t%JUc^^%*X|-yCjAHT1f&m!l5xG2?Qk7pgZNO&gl_;=UmHa zqcO&V{uht0L-^za+m?HggSLiC$Q{MRi*R}W$A3 zMivnxX`%bl!0{#YV#lYMjtbHG{cc~*C9~89fH_Zxh5U`4#_m<1gS&<}%nI6V83QbT zF2=h-ghn(&fDH6&xY2aw6D-RK#3Mq649sb6kX6$0=$eG<)+|myEP>dNAgOG`z4^eybgWOTiH}(c#ax+AOTblh_$Gd z#0dW{gg(LD;U`yp8X-uxZ_`$egd$PZiGG2U4O|K&6wSN9RzyM`P;WwMMup%^BMfMn zjy}YWH3Ts8DT9wlli&t2#{~)vhWuqv8O&pC&NYe^_oA&M$1dPn@s5+8bYKvtf$YN^ z-Bk4Bb{MYUHD*s+v06mPmrSD`6UX)_tfGjhjltjt(<@h={GkfJ6CAi>9p5S&j>evS zRm0r^juDCpDJHt-9wbdh)*A@`2@i*SAp%xHaA4{L{ju@45i5C$;KfPG0eV=WUfH-0dk#QuX&qLnr|Z%+0sfD4X&oyw$S^#$kBl+WZY`4{DQyw? zO&vqccrRME1Tz_Lq*(Z3m?2eCJP}YBp-fF5ioJLhd1kDPFs6MA@+RYFy*wP@$ka`v zz+#|n4|zLzAfqK{c5eIBOfey-Dq;Vkgf+9B=!T|i2j;hN z0Y7{o)D|-G<{ttP4~Rg)R2a!DIdPx747w4$#1sk6v24^<*MIImW@LBEi5W1&c=TXA zQ2;3NQXUK;l92Ity4FlEhm*6L1W^GkxCwe-Tg|3>ahWm+^%vo~l6FG_o@_kUncfX= zY`~W&N!;HJItORrR5tM}OR(`vkvTS*tjgq{^S@5QP;e*AB2?pH#|Ov=K>i$#Mkztf zXVa<1@`H`NBscFW>eVE$#8npH990KdfS|jV`5c(aZSDA5$(QlGJoJ5!{LS=x1LZa! zNmxue7Eit8{z#CcRHm~*;2-&2JNmCj%tHNEW*NOP3{=;QXLvJkP{mqO#SjSf)Q`~f^ZKHlvhH&{`NI5=X)$$ogboq0`Y zker;n2GkXZ=6f@WhDPYrSI}F{j{8V9o1KxMk`0-LRAFJIyZ@_Qg*9ad9~zPu869nS zxic_4IXM^r1z+Ry>hZ|)f5ZW?|D{m>Wo7*Tw@HK(^#6T}f86Aw^ec|*0Fu_BmzCY` zO@1LJ-SHp4gGQPP0uXhAiOuG>c&V2QYuDhvZKZ_INI3sAtr?{Uz4D)7{J&@u&z^z; zSv++sP@CVIjFEnF-)XEO6T6+5=xbL!)(yq4`(%I3JH6T;LXx8tOvjeZ6A-EaEp#;ZW`zrEL)PJsh-JWm@+ zmJ0UL)6?yrZp_26_3Kj?kCTT ztK_p)%Q}J51*r<#m5a4)0vXw4oSsS6i0f^cdp4v%&GD`eiFW;YX1F=h_UhNHqix*A zy~|67C@R&=s!co%7b+`+>)sO_M#g*u3uBHbp>1Zy=V}IPS|LAR&SFz~hjNnT4h2 z&}p=~G%_-BWbFRtW_*zxb)ux&_w~5d5xNreWi&{dq&P6NFC>#)?_yfqAQ~-pT2Q#} zzQ~R8Vx4562oiW^z|S%Va@SbWPOgSWdg<4LL}7H$kqN=;VQl%m%KKBT$5MoLh8L|q z;a4o-%+Qzqk60t@+^DaoH{PE=weQ;Rl_q0b_U3fsng(Ls1l7`?L9@wu;)4!OC`EL_ zUDH+5g9aL3ABYiDb&Ie#0<*|QbvT%3L;&2+#}xoUZ1`|v6(QRQ4(QAGehyzn17U^G z`S*z0_9-aG3fK^$J061$LQr%(3U3G69{1;QB?t$~h0+<8kj?dR3LjghQ3VPF9(dIE z9qxki7|4Ed*N7nw!1rqBo_;k?f^Aj6T`;TMUFGp!zg;~=YCYa_IX-*N!NpW~%_aKX zU_-f3!Yh>~^3~~yLBD>r;hFBBDy2ap8{OJ)*bu9WA|XNp9_W3yVoFIvlkg4-lQ+9x zlLLmU`CcyiuHN}xZ{{2{s33+61APnzV0n^?hdYd8E5Ut#(S2N~FLw`%G3H`TPpYK2k8MUDui zJB~~Wjg}9jB-7b!M?on8PSI3U3IQ|#FQ08Pe;v)zqsus-Lo$Xjl3jnP7ATUpE@av^ zc-poEDAI4)l;wRed^9tL+XGxyyuR26Rnzqo>IuQICFSOvrAmH<2!vGOpwyCjnWNVn zHK}*tRagWd!j3)e&>LGJfeme4K^!7`3@Li3PzJuruJ5=iL=uX%{OqLpJMFe@HoQx+ z6ea0f!6OFiQzd_~DABCeRn&jO|T4P@beqh!UYC?%eq$)i99xoay zs&Pfk5R&6hl=d1HYJt!kCqxn20#u_O)DAEiCMMYW+7e-;t$9%s_2{S&FckERy)xdA z1+ZX+#GeLAw>`@K82VfZG-OoR#IM820s2?bJ}S7o6)2Y@DvS#;Tr%Vl)Yp=d?66T0 zgUis)f0f61;%nCDiY?+TdW`}6W(cE2q2B5o=+q&@(c(sfio5jX%MyC5%A+%w3y?Fh z&)(!;Y9p_{99&)Q+10w4d?C7-%YIYNnk%lUL7{8E0KdAvz8q(o8m^9xjMN{B!iPN` zothdtIH0t!u-LkEGs$ZaX3h_j*CBz%6(p$d4InxEwn-JC9OmlWf07NY8+UhUsH{gAUNCRPI z$+2DU-xL0vNx02Yn}iV8Q%=cNVloDI{aB`ufNgF(ILK);yZm0d1u{@rXY`EG=^i4A zm3h_5ETS15!;xn_=9qWyM~upsbyx%nw)+4R-)C9iN05XYKj^kR8%#K`y9_q1|ftiuE4-KT{MaS)=v@N;sv`{X~axM0+SiAet;|y zO~nSvYzR^BO9!$3)Qc~zSewjD$PK|(&hUM}_8uV~LgT47tuq8RtpJp=2U`-FDioP! zHpd-1&Z>E=tYPYRGtYyxy_B4J2IqRdfq&hBrQ-$$Vo|`~hT?1=O#*_VH(&k~E+7C@ zl!m90e3Rzk9Xp1;9{zT#`_58$CC76+kI?YNJ3_>reSuIANJ>fN3V0Pfk~5=0s9vK9 z_O{}19>!tl-a&b5)U-0gmok8I2qr@&*NU=(As-^rd5CKPz?YUe8+<|n-;+Np!%rRqWA z&k`Ep%#XH~KQr3H2Apmq=p#s)&Z#SdQ^`npFO4cIe!&~yMz`Wn)ShjJCRqNOFn{i_ z&f2dbS144amE+T2jTlK~U5-rK1?B9_A97CzLUXkH$Kgpye((s2hH+s-wpU&xXl>J% zfpfBEN*^@WN4F$bbv^Or7k0*5bY@;)%j|?c zC#mb@Sf--5Zzj|O(c*D?^iW8P`->|_UU^6z5d7>en{pNI4^4>=bi)QJ%7_AqMLdMY zyh)d%i3)Pnk@8W~_%*og*DA?PPOumHMvJJ}kVlK059FFqNW&<7tE?h-;V?fU65mh6~nw@4rTks3<>@kbo=qy%|!9cR1z~pdN$52|W=a!^c%(ui`rMP&13z z40qpIP_s9*i)s=E894(Ef4|Slg~lpYM-DTHp8|8cw8jB5Mwk?smePJln16Ff0}5X7^Dyh)gHIk8Ls?Wc!v>!&t=g<@~@XG*u4OaJjgS zAiEsX9baM+lPK=ab$AZ0x=B@5>wYneYIKH53uFhtmi+S1BTo#%J7M6Y9yrd9fyzb5 z4#ob38D3^n=aFZuWjIc_RvYvwRWeMEnNyxhj#{Zaq5Kp&C(}*i^AQywI1g9toDBTaiH^7+ zsjYs}4(qtwZ4V@yZ5P3uMWG`NlLYKy_5ev8MBBxgzvgm}BjjVlmT^haKFmkMR{mVR zgv-^XP-nZ2u*0JkXlh2L7Nw5W{1t~PLZ)y3oDijHqobZ7M0tCw{tfyvrT-jgu1S1m zo1ZU(WaGjvQ^Nx1&z{YB~*AiR6AB+G6othFSaWJahso#z2So)#@g{j&(C><8m!jytdmC_Lt z_OwjdR=&a`4%M)$j5;{~+s8?Pm0v<^Gb4LECOw-|1}ID z4=2?L|1ylW|C;R2#}%ij^;dZq;<*&Bp3L#5c+ttQE_m|YkdLnhK)s9j)@Fi5BQ{)2`s$d`Z@sy=?8ittNPe#|U}fi7A_$ z2T#DoIlllg`MW%j()vY*_z4XO9=iW`;F_( z>^RCHeMBde2=c7c*2TobwwB71UTmQ zM{nuuPu2zSo>SF9?Q7C%fZb|(=n(wTzUK-Uova}h*%CM(KBsVLx+?zxh_$d|zgwNZ z>ZgK2WfU~=<1gUI+!y@4j3Wwj zNx-SkP5Q3J^J|0kwL1g42J!`=XZF4>znJ{``i7QF2Qd&0p;qM!>m_6{^(VzkG%dk{ z>g{IR>g0JNEkxfeHeQcz;4C@Gpo!i8)?!laVjH&rC)v$UD&h zb%K$>LGTYv^x8GZ0C3yAr@!IZvKL?B>y7hp#3*G-010DE577sT6KBq29DyTv$sk0@ zYXUq>-;@KvHxrNLHtj+PDsfA6Xqmw<{rvG zqaMSal`x(UYOHfL21))+Xu5b zGEIKpC(-HhF3EiC3TWg#1OG{)M-%^B+9@o2Ez|CZ1-iL#sK0&<$Hyf}V^ZRIzi1Z` zb`;@!m)_&-SNOarJHb=xE&GS?P=_Vf#prG&Nh4)bxv%9wku^R;3#r(U5 zrQijE>LZHEeF5NoK4E$}bM5K_DP+@Luz+6-%d9# z_L6mfO^FEC8T14|xo!EwfM&yI!tnzm&O<0TTb7oUB>@r0R}o@1D3KZaQ7ZFMWK%=b zAZ%P}=y-poZDeZtXEKwEX_vo`apwhcm3`EWjg9pk92C#ye|LB$^Oc2|EtX7aDQVbzQ~^y+nq-HEn8+}C z(}HkF#(Cu+OBB??Ipv@TiFX1Jp*R+ps0vm}hg`KF>K(r=a)f-4JU9u9x*qO!Mv~`= zIHe`bOn3>Bx&Ms+Yr(?*7)66tv4<{KEln{Ggnj~WR1}Xn%B*Y*r5*Df51`H zLZVZ!+(M~j(T=-|K4b`h%gHhrKQ^n&-N}kmb=rq^{TOjEcYf26xNLbkZ9cE9c$BNP zhA<$kik_2m^j~P<$80lr;-37JY;0H)6BAdPAgJr%amqIe}WyTMkz^8e=tw!R=*u5U?TGc=v)V~Mp_^{#rLcAo!HRnI{PGr?1 z|1X#~?=kZKQdjcd*#xlJI>|lnHdqN}tD>&HV^x=5AdtUu*zq^>Z7~N-@OFpIR zp89+3W_(1ZhS=IksWL~k<_>}7A%-c_`$2n<5=c8Y+5OOd(Jhx!HyzjCDs+7b_MfT^ zp6?QsDh}ANk)wCQZHtRFg0#O~oCjRw=Qv_&B4Lc3KZYC9C710$_!QK(rg-2Yfs4JE zTYF;k(bhkh*1SDyT>7W-uwLG?@H?-F)q` z-P*fCQ>WSNY2@SdclAXi&hOps)qRzKrBN9IeI*?l1s#|vlBS;d!N9p_>%~!(^+VJE z_!yz99=kT8>UzhSb%~&-=MU;~!I55tvlw_B#NKtEOPjhP&V}`ZAeX`l&f~l${j^jb zeJ^f|Ki}3{7p$uUJ=r7fpjAA3PfIKgFvnPOIyxk2C`@>7S-TxB5NI-*D-;N7ALgCB4`|Q|< zZ^#`vf3*gQU+&c|+2eP#mgv1He~;JAcP6hc>K(4Qr14S%JhMt@S(iMlvh&<0ra~{2 zxF;WBpZ8s9mQ2pRQx!8aES==&E?M%_r{`67vZIhg!uSp7SC`?N=x9aLjB{h5>bn&4 zPHaQYeIqhUr8%3-YYptx>)eeN$@`a&{$QU!^lf|jMdm9Ms|{6eQ&^+kpK2d}T~U!h z+MRRccXR^22f2&qP0_hJEcy5N`@p6k-riq)j}#ADclx?gU(1#Ng<>xkgp{K1?<*nG zi(P|jK723lVo+D61+U3=SCXhNK75)@cR91O(Ij1jZ;KWP4HEv5`Q4zmKtGk`GoQ|} zo>K{0PGSS%4=@Jla>{hogE!BEUqSxlOEr@WRbHiR3a<^{*hGm)7w(ZK#uwNDkw_p7O-f}GxL^kx28#|1#rgeV4k=SQHo;Euu zzvSw!{HUzlIsVqB2W-keBC-><^0mB0L6Tf^J^WII@wk28WMC;rMziD6sEV8`v+55! z7C56rMxfM1=<|$;hnd{rbQSjC@wF^?wV%INA%ljUq_GXiPI~&LZ5DgP4qo37tl-rh zOQ*#imai39CoY}_zl(#( zy4>~FltWc6SnfK)df>{Jt`3R8$&O}2xWDo}qPk$+Z1G&~U3l_P)|?Ceu9lsJF+*>x zQs_bveO6d--S$f?;GWD5XUY^2K4* zx9sr*c+B|zMVrj1-707oXX#Zh)YUH4e!GY=IoZQK=;%+S5%7(l)z1 zM>|hz%580cN_RRw8%Sg-ta*;t7N9x_^|{1m)jyV}@KA`@+3-QI{uXZ2*?y|uzT^mN zN~@8>T#g~qp=MV!kK|nU|Izl>VNteG`zSm}ilj6W0tyHyDbn2_rF4UYbayET2q+>_ zQc{8fB9hXGbR$T2Nl16@HTw9zzrFw3-}fEg92`FL3^Ot0D!NRrpK_}DWl;*B)rfVskh5r` zqrO?YhM4uB!(8c6ZBO$^*-&!QxjQQ0^JLa^cOT!xCK073#nN%PlS2CqJN?JT-u!D# z(#*f3bWy!edfpAJ$0uDM5XGudT2O)jCX#a;R#plPYsyZWq8t16r zmOht@9&NNd;d)pu?Mv$;=(N~Rk*wxU@DocAD_h-|wfP|ZAl&pAbA4|6s`pP6V~IZYZ>b1R`{EngX&h&c3dSFmY% zUmz*b9J6c2@#$`^{fmm?)M?M2gu8=QFIut13Y7=0zjX8=8PzQRws9}aMLoOti77`; zISOfq_#2u;-MCk(gK$LOORrgB9=$h`^Y9q~@iO|S{O0!tNrC4Fy(fnF*x|atN=dBl z=IiMnquf>#_LmIs#4eqEo(mK|Y?j_g;uy`TjkAJj$o0mbxi6+7PS{V1k6jl^li%zw zhR1>Jl6<-GJzgBmlRD;D?7=D7`cG@`a^IQqIb$yS(!M^nhL)i7mn1lEoEnDo84iXF z7WiWsRk394+2rutIMzphH@ra>w9)IA21u}9=uzj!L1t~O;SONcNbdkED=fV-+rB*d z_mE*AD174)=wt*qR@>jAu2AFYBf2T2@foSz>=?>63Zhs2d`pJQRF0IxWc1H5E;>r4#S! zLOzD~Xm5}PM}45iFL6B;l<@FpU&DXOk?ij0ePJP9KB~Tg5_KNp|1MYC_9tcXtUwEB)jj5i!srqAHQ|w8-Mw+J%%$RjbtwH0!txOM24?vBlOfyDw-g_ zTj#}H!VcNzTYjxNH8OY6?zg_})8Siz`eSid$}{h8phimwmNYvqyxy(pD_d6Y@fkHs z+}$kA4f&Opm*wG6`mU66_Om?fr|>sFap)qNo+1T4lfQ^mqxHT(H zOiG&Z?i~Ug7saKIId&a!x3!B*(G?UF=7;=G=V<4C^<{q6W^)us**rOeCr+yrl#~(< z4u$LcxVX3`#>QgBc%_q*h7}X*2~U!=vo2rD`L^sjJ6dYv32w{6kYT`?8#I`i#uPn7 zSy^4(YQE-R49!Fwt0uPHPY+u}P+!kEs;>T7FosS(!~z%=U>+j-3M7cO)MA*73u>GZp%70so%oa0OgT-ZpI-(H!n~1 zRzS}#*UPJyGYyhm^=#2U>ggGCh}Es5%J#CC>r|uKvj<9d&a)JJYJQvh+>Bw&Ao!Bv zO*Y}#6yHWhTWW#ltk4Xt=-yY7L5*0|w>KZ%q2lXjFBfko7%sHGcxzo!hBd;pOxGFz zK;!X~eqvF)@3!UMb+H*G4}EL$DeX+DZ4?yg?qfdCzp?fs6^y>^Yiq(qAN8NN)-DqC zZerjBOX`I)$m8!l&`PIlM&IJLM!XxLF&XoqK-fLZCYMGheW>gGT?vcsotyM&pOOB< zz#z%IXjGF{^(POF9^X>fql}5`sUqLx^FnvuGNy1Zoo*$$!V=3)uN#~4sm?bWJ+7Z& zla?=#;q0TiVpM%y2O@YXLibZeE&_8*GxP4x&>Iw%cppPLFYhQl=2j}1TIy%`=D~8b zf%!c$C8i={?Rp8-*9&FA^*VxH(Uk9yF@f?^ih|?J5(na@07o%9IT|p z5^nQle@6H6Tba#R$@^*Sm%41BYqly2+2) zRQxX?oDniC+`#HCrTXBZqN4sukyl@B>U z1iYrO#+@+o?lWGN?IZRdCz@dW_FIE5{47}z>PUpiwIEsR3zd@x&DdA2IKj@wf&F>3 zy`T*vg@K95$wRyvT`A__aS!;MP-rJMJMiHFBG|YC{?}=JoFD8!ySWkU)_j91Qm_V% zUtN}ZCnjE`r_&LWk(t3pH;k&pMR0I%TxZWD!|BiLe%t2)ZP#2qJQ_C+%-|0V*ZK(} zm2197&dGuvc(BW3LKSOZ{GeOW8Ii58uYPfgL){tgOB&&Dm!)pxy{Sp|T-`c3tMJ^) zsP0m)XQb$Nw;lO{-Vx6pk1Eu!S^)yCHt`QzTTV(!O4HD-(dzNzzDHpw-?mup+=)9l z3MXL&IZi@<8A0Ff!-V^grsCFrq^b{*}?4I&~UXVT{aNsr){nt2-MRaseRb8~ar<@VIb0p#Ea z+}?KfN>P7hK2_^C{KZ^R!DU##%KiS%0Yj9~RSgSx723unFwV(ZPgT0DLe(2Od#96@cb}5x z{iOXKCu7FQ17G8nC@H2&CUW<5Y47n9{qkop*}rIj-gzZOjnJv}<@fgSx%(tpYCwl` zh2IT`NxZZkri%%fIucgRcVOD#Ymrk?z2Vk{FHvMaA%OTMB&Z(9Fv9Om zvuP7H%ngDd#0&I>E&BfO;;-Kt7FDW4@vYy#2UizBYr5E>TSeMz+m(Z>YL-t1hlVn% ztA(ts^s9NH)(i5{x0Vpy(p?Daj*OipikSs=R(-u#zho)GgzqObk#t-e<`g=bkJ(=B z_Z9Dd(7ykBjAhiU+Kq?_r1Hj+bUinOY8U0e#fOpI43b)_M@O-*^4GqaTS#) z{ZMb(_g^Lgx$s{fw>ip2(Zmk9z@|E?i6b>xY=&JABVu%iy=#w{p9fjH1o^Nq8fA)o z|KWj3rC*)83dj9pz7PKue(nmUNO}17{iliw?bP67{~PzQx{d!M|N6$?M$?(`+=XRO zS4i8Ex~2;Ck^em2>inNPH9T*3YbrO^ z#A-PLiJAEEUsJ@e_f|5OBsS_UM4Vk*IQjVaepecLEyVJa{2guh_r?gf+A^$GNV5v9 ztrfw+$7cZU)UqeFsVCsv1yS!&cVZv}!mz_-l>lr6GYiYNm(+s2wSqrP5HiqKcti(g5c=HMS^3%z#q1HmB2q%|`$b2iTT`jvm3pbS)2^uX*w zn5226*s^bYJQAV>Ic|0TX1xpZF+Ns`u#aZ<3Q8cPnIZnD7opmJYodUa~0J#y|@r0#8qU=NA{-H%LfHFCjh|)!n%eMda(1>L4g-XlRAXZ;Chlo-T6}irTOhm zQU@y@yBJsh0Gy>pewQcW6rmlfN1mIG-AlgR{AoLh5iXNE=f29`l^LIeB;{VedKCyq zVZp!Oi%WCwFuQXhHcA42BRV(8t0-!Y2N+(JO66e(ac&Cc>1xidb9eUEQ&;zDCb-; zwfUbx1I2o6&zMp&-&Sgw$5e|WH#4e)b!p|4!u5$-D0O%p=Y@Pm=|i3&x@`w8c$Y;Ct&XEr8%B8 zr)|a8+U`s@V)<=Hi=cb`kE%QaWrbDWR_LXLQiE;XQ*p#5AL;GGtIsZ+2oJ@Fr>|fe zShXZph}=zdR7$Gx z6&pE^FwS|1EW-GEMG^CP!(amivG=ijr_U~9x2)AG;hJ(mg{g)XlCHzGL?*(YEsZ!C zG=EBBWt_~myHQmNU78B_{}Nh9$afY{IOqI%OhL-ea^xw$%VJpFnzPUJOLKPF{p8!9 zcfA^`@G<1|#nWYt&!Zyvj=j<_jM0ZA&7!x0u!7IhDa>DZc<27Y#yDFdB0LOOjQs7= zjQ?LDuK5|~le=%ISAWfHP`*5>P%etM?6||bu_*C5V7Q|g)hB(-@5UQT%q5|ui;iF- zEuW80B&0tAX1GNUEJymOZw#9*--#E^*>*m1pKO0T{Wf{$4m99ZGdR1We!By8`&6f_ zvw_O*+Ca=nTxqwIZ_-2YRmx4A8mhg&ZMMhnq?!!_s1O{_4whW z1o(D#%yA~Hn%@XA@1SCH=vb-j&6jc86Uf?MZapK@?|T%R&ZhVS--oi|eKkP{Q62Lh zA#r6mQFdMZMQ}}^<>|Q5iomkh7}lHkMiS-X>A;&L8=6{~#}ib1QeT~`+&+kL1epa% zoS2+0o?+HSl8OoHN>+xu@T zKT!^vM-YzW?C%YZ1LmE-&58^u3YWUJw z7H`r`8e?43+{4Itv?F?=v^T|Tw(?zxtqxw}a+K|JlZQx5&EZvQtw?bQX-8u7yyEAJHTK0B?&Kw-R@)io)kVPnz(Y4 zc^(@hCE=JTUzvJ!Vcy$B6hG9Po(Eyfe_7W0>1q+<6&>pvt3TETy?c{ZA24i1)X z8F2%hIT4A}H>c6k*czd0OqL3J#l7zjd_`47U!gy9zjsDhPrG%3zadPH=BWPok4@j! zLkmA2y6@}16ID+pHt=0`D_9S=l$dWbg4&JrF0W?1nm{@v@dMKU#f9+1_vkXisL06nGe*CY(g(lcx)1-C_-l^d&Ullzcf6$1)F)C! zeZJDz=@|5+)lliR|CZ~zsh4Ul!A%?vP>xVXM!>nADgL7f zU3xfdWo6)#|0Q*@s&2)pxCNF_>IJ=a6P2#*BN0#66~*3}a*o=mz>B>`&q#3(4!MK= zheD%EhIN8DxE-7=)85sNW_Q0-9@{GS$r{`xHDzSuJL;2oBu||qFSatzTQOOcv(>lE ze<-)+L}ziy&-3Dh>ypV2OVk%FPSu2GuW#-SE@`P9(gsKz8z<@OZo`g0{oPY^T*<1K zJGUddb#JP!+?aqMFtGRHwC7@1cWEZn$6VP+f*KyA}D#-k7QUySNq1&JHBBaLV zUSI#f%LS$jG^rOsPTkr{j(M|ItAQ8s!IY0kr09LRsfcfnhgnB;(hGJAlA10GJmx3i zCX1W%)uR0N=++^R+Qb>3&{e+W8r-j7!EvzN{x+e5Bpq1&;6p zMgs?$GF~#$k?{4R9C~G128;^wTNbfyW+r0Y?LL9AkW#g}CX(VwbFbDXK2co#dX^3S zbiN4w(SsE$!52|DU*0u*d;UozB{>{T%Tnw%O(?@vralz0m`Xeyy+z~hoWcs88PKaJFm-mDH-H#pPTmn2q>F2+)obM!W%GIkgg)|MXvWaC`aYRlpn}WjVhaFdgTV1mnuw5stI% z@%8=N4yxp5OeMZsxFRAh=u^JucSX*(dC#A6e!&GR=tI^TXFh36$E#T=X{|{*;8NMn zq|*FoPpM)t9!`PBA5vFmh3N*LEVwKh&oo;DE+b)W)YAgQ1#S+CtNBN^ z@vs#)b&T-5aM?06^&Sd zB{nDdfZ$-s;~&ZW5`KPX!W*w3+_(Os%VPDxSw#h3o#7G^`<=}w8*uxd9|hINN6lD9 zG&VTU5#zvV#aDMY8Ol1+QS4-FniwF?vJld0IO*Oaxq?9rW_VBRiI0qdC||(25TkPP zFSFlT6~o%0FMBD%(sn-&9k(wC9!6~|M;dUXw-~GTwBS^W>Mu(!G+*G0+B%z_$JCE# zlK59RQ>Jb-E>8Kk?>R_FJY}BC>i+{q=gV7&-cK(z*rTa&$Pw9l+*TNol1u^6Lfp0} zJE~ptX(~v(#>E`_*^$A8)9H1auxEKWLO})rd!?&eouM2bY2Dib|MQt}Sw5@^VMb5j z-q%cYp507kjS!5&W%{uCQSG+}lUlvdHhHs1e_hq1|0&+^bp7;bM|{G+;(tBhrz?g_ z+m{#h#ey{IluP|i54X<8ssD4t3DL#sEU>y#g{wq8hFD8={fwgiHOk^4-n9w&=eiN% z`u?vsj?10=@So`Cm&nQfg9c#{0FRRO(1|T*0u8wjC}kjV^tVDX$ zZ{{VX#XooiZ~g!Ka~f=S)Ti0+_Y|vlw#dl&CD0KSXR$9?m6YYORXT5=G9@rsn6XPSJbmZI;?Ir+L@tl11(+c(?2z!Mk=SXsZg zU^S4c$)+a!z&-7@N6>4_znHDE?rdo=^#Sqjh@K$l$JPl^AHm=TN;>%Hb3n_QdJTTm zKm<|?x+7yHG$#uB{rV3mu9XV+nVu?ZK~v&iPcq4u(^@uOd#^ecwhE(S4M*2oZ5 zgynOtSXEZRtdBj3d0e7<>sr0dd&lbX8EJ&<=AsRCtFHs8a_g$CC!ytjEyjb@;=^fMVt>vH4?ee?*|;}!u0=Ft69*ne)a6W_&+eFQ`d{%howu4|ZM3*9c@MS!^N~el zbHNx9hgST|@uW);P1p8L-SA{-;@ZiNChv#(mjW%c*BCgpa!~E3@P6?Vs!gN2sxPk& z6*AnoffmTBi0NpKwy?B>q{Lv@!jFM!LUvm0Ig=l=8!N+w*M`gNlC;Z#j2ajmY_R2x z@U|%CM_5WrDHu&}FR+h?V<>a9mPb_VHKF^O@_e%r!Z>+0RzbMN2%Ifqo1T}avw7># z^Lw4wcMaF?!9UG$t*orXyat@sn%Fu;eW+v+)2&X%BkDp+hD(t)KkzxO;cncPCPqy2 zv-uUGvDfK84LOLLE$uwA5_ZC|JYW{SQtK`%tM%4*C*Ik8B( zCO(X#B#s&>bLH(xUG_l}S-Hr%>l4wK&>s0gDcbusQ6J$yLt#ymQoBQrgeHvVm@>BUnEB@eRG;~2e!Q{v*_ zu;ck8hs`F-`-f}FRE7z=->+ZBkmn-=(dOQ~w5^p@eF%fYY-tUlc2x19v8<5DFWnR8 zLySk=qE~(pB3hn|Tnps(5nk=QwCSv(mbzp?*Y0}Bk^rx>2W?LL{F?C93g)P1`uVbr zcDSwrL%r|A^-{+wo-&!#zZiSv-;bRXjWQ8wq0QEnz%|_bDpcB7qLEYkZH_1P`J`=; z*}OirtH~!Ex*^_A`RQQ2x*n)=O8cMJB%hPTk2(>WkPlv1N=O~(h=oSV>xer8`6&(A z<@DMQb#yMLC@*o7qajjKQihAnLbX%x+K`%>n)degA_+=*Mn(*+Px|6MK7x=>C@mb? zI8#&@kV+ChK4mEGvotjP>i7m?`hJI-e#IW{5gN>hUklip`{I+ zR^#4Z(MHn=rg-Tbona2L&-%ht5S;IU0&bO*B6h5%4%_Day2~})be^+6ER7MCR}R2x5tu{BRL3y# z!>QLRIRL*{EwoGQG#HzTo0312ppSr{w<_``BctiX`I+{YN6(ob5 zD2F0skKeX@rgNJ&NMRxrej?BQeP;E-X}a$^X3#f_EcYDF(5^rps>!_$BP}lvlc5A} zIN0x5?$4IyQ#($W0a%Z%3tdW$5F4=B3NyNbV9(4lK{fmyk?^9FPs9fmG5s}rRd_|p zQ&>iDF5!KXygM*w~A3l7-G^~9vLBrvKMct6J)xue2f?B*9cFg<^ zC4G0-m6(L&*5dXppxl9$ML|GxgADTDVFaY5rGeJoCbz&qM3CNAe}pC9*pkH`j?nsi zOGrrn5!N0l)$!^FhOMCo6lnA-v?^jd6T`;$o`!|x1_+fCZ``erwM=d7KcJj89Q9k` zpmmF@4aGGr?>8&={#{Uisw6bzz$C^~LG8s&Vx2_z>Sf7wv$L}t_Tv?ZQe+tQQkUBdt2q@RF5bBX)&!V|Pqle8aIF^0 zD*V1(-3N(ut`_WuV`%v>e5mDQ^ULfUA?*d@OV>gvU*GCOpPjI!^Ox1jx=g=M zIwyx7ja6f?hu)wZNTB-zWdZd}MqH!peYI@fIvjnEu#O3P0TP~R{w z5_=O~Q%G&vP1!b#o2TE5n(vkIu{yeP0!o>y#ihotC9t9YF4++6|BUFX@o}p%lky7a&O3g^0 z`=MD9@ob61M&vVtqI(M`g6~UtOI1k9NR^i61&%=XegOCLr!U}|xmwUi#OrgC7>pke zTkb;^zLaj`dzo6$?b!2k()5IjV$s@yXa0)|glX<@|AFeup;sidQwAFguh#{`y~gf) z=4G4@Xe@X}5nb*h$b8Fd_x7;lLt!DlgGv}Z0q{l zs3#k>2>PG$@!E}MG3%9DLw#NQa)z5XvwOz=3!4(+no9~u%4PP|TbE)~{mpTb3hD+? z0(MLr@tOsJS|HAHAOYeO#5bx!%JT9J@9!rOFKoME1kL#0i~c*{Vn-lu=o=mmTmF&5 z%`C+u1!cawX+?a=A>6cH)D53__hWezVp`MF4MDJP)om}JmLWFf3yfR0Znd_xU3QK6 zTiOoe#x3$UiHWz`l^A186T>j-=%VRLj2kX#7iezX^E-Bp5{PFvLI$udA!dz^_Td5u z4wG-e_4g9~-bmo_b_Y92L)wQ2Ii|l zoMQl>{)1IeiKi~_D(-cN&CG6nrr>gi3uI+wg|X2=mzEI5ScRMC+uPg6=4oDDULptP z#Ut<3KO8Uc1wCn;2~@~_+BmbRlaq74-Smh{yl@B=%QtOh?^p!W5VgUg__+&X#*7V8 zT~O^+oY84te&QDs1EpWS*_WF^FgrIl7fXr=GkJ7WcWtbkeYlHU6gln@We=ef zs;Pv0H)uXZMj$$6%r5HwyJE$vvU%*wg}kiPfY10i$zr zdp`v!)F1ci&Pi#i-P?EEm^|$_>m?6&+Q)vat?g>>L7oW%56{3-5tvDos);-H z&d%HOZ8WPs#m)=uB7-^UH(6M)p-;4gscDAM9^j@(q;w$s3o;zo zBnB*5qok*2h3UwQqgdWxxOq$)8vG!7t$65@upG_H5|kLDa2RR~*~?Jg=*X>~3|W_& zro1_usjYcv)E>MQ*ER3R_bNUKNMT8!or=X zM1Q5#FW~Bt6IA0)$vpL~DHUI_`QSU({GxZ+6{(2fp?qQF$08iHzA!nuGAV-i_3PK> z=$#Kr0%DN2)MNOG{_BjLV@UiS1-H z1wTJOjgF)`WAuPl|I#`HnblNPuOG|mvfHumMGY*$n{x{aNc?_HrlCqJD1;An-ue)b zRkkr!j$cqv0NX2s9aOSbt;3}@WUpgl&L}@U;!1?vF5H|SA6jJ~;2Xu9_wnO4xo%dU zmFj~Bb4AqC*v_3v_f+y(Sy@+|tkj*HICXV(r(FeVEC%1i#brQU2<03inM}3h_z_zf z6BD{McR?jaB9Q8^y!@b?VsX@qgy)pcZIGeEbMT zTp8lj*V)G|Zk2Ld0 zFoICv=l=ckiR5gkqy*35eV}OMAjb&{4+qY583Nqb@7^7>G=j^A)qc@tLj?Z(sR=1? z3=9mCeerg7cAv+7!zVoFUfhG=cJJsY%l_c#D0WaoASjk#hY-U>!7QR$<&Q1>I2DOZ&A3h|;!3a7m0(-&qXChyPaNmE+bD1UfV~eqp zrzhXfPX?=MvNQ>8-QAkLYGos~utDS$6t*jSU;x+*tF_t4$jA;3rS%FlVZ6GQj>pIK zo$@<7l@huv5MtimmCWV31=?k{iNh9MZ|@>KW;`msz}K&@Hl62dvclC_xgNp-a6CWt zLa3tk0c#pOKmRE0_vkhnO~zVlL>p;=IFWl(RMDJE(J zu6o@~>I!@LGDIO;!r7S%mYKDU4fN@{UFL%Sj<9c&l!WA2csMrX%F)4~zwvN)H{F=5 zfrCc;!2_Z@MzxW-xy(g|G(s!SA3E&*>YH^k3eCoq0y!ILW7fQm##M)lGys_5a46cB zvmUc^ajB#EWL^B2U(Id--K!*2Yyyk9IW~1p3f0Jd4Y^d3efaQ!J_g4Tz0;yQ`Evcv z1spJcrsNhgvzVe{1ik94^4pyE6%`dNmm^^zp!Q0{8&tWcfBe|Kartv*X6D9Gf;vXz zZv2}!XjKz0-@GB_%>M}cT{-8+(yOA{)~+rMDu?UYKRb}~o0ymgYC}0iMIxiOKYsim z`F#-A78@Ij4wkU8QlQC3xi;mEG;!+?5h1R)bugfG^G%~+bpxM zh~~1W#(mLm#S@;NQC7wqNh@mD=dez3?=^^0*Hd2&HsXOuR5RP-{s`NF01mmzS4^0<$9A zQT_e>#A9Tnr1YGegwfH_pLGim`i;5szt!>vL5(M_p%L41uAr#cWL9IiaW{$i=1plQ zWxaCyrfRR9R|yGWF#Y@5T6eg)k;bKj$Pt}q-tKo^a4=dEzZ_ipv)ihsbmGal%68@C z@c`}e@^ZLW(0q@jm)F-GKLw)%Cgo(T;*s$=>OsWNYR1Qp*gpGfgcS1YEg1Sn{R=wc z+iZ}dSReb9-rPkFa&w=TPkJkITB?G{)OPO)Z)@v8I{FFJ^lBQH>Nl7Kby=w2$$olS+0VIkr-P36SXOCOMM@dQ zy(c`;u2xpeOE8KvF7cf7l*c@jxUh@9f7z|b%9477vaq;#$q`*UEATlFPhNF36&%?_ zZZBjQ2CPeG$?x918@}suwB`PL6um%`b>D`EvZ?nIlobP9DkUq+AS^tQSp#pPS&B(Y zVjaCoP5paMQP0AH5ot%3n9OHddjy4rsbRUm9EAI6YG~ZziUJiAm{BaWwovmuX|Nju z)^{UiGU-wCva`{v+<#vsx}(_A+Sw@uTdlplow$M1$Zv(lb_nWIq8#iy#v9qh7eFpLOJIy?(ZI}6r)}e=Jn$nONmnr6Df%=E$KHW;%AI@^XKEs%)|?C?>yyDbK~lMcmkqSa7_4aJ;>@ z{ToBwLec03BV)K&ZFSoC##{6XF7Anrg^tN%_1cT4PcOlGrlEWxvo-hRM5N|Sdu9Wl z{H&oyczYrNUW#DWy04Gl3VD5#i3xwSUdPC*Lv#Ik zU3p5~e+Z9&?2djt?3N}jWO{e55nz*Ft^y!P;vxr!LY%2*clnA%4?&+}1B3|F;-9>E zk*S%7`OxPyIx+D>MIPB7#E+~0zXZKi!v97B{y%>{W4ClNQYiZMnOWKyA%kqL)X3YB z^e`H3`mh2dNQFnn%o={cVUTGeO1l5Cnvf+t zJlbO_-}G?GBoMYhTNK%0_V>ylx)5UBO&wDv#$k|siQ`W6*PF|wMgPa!(h*eA^v*Ya zUlBMDu8X*ajySBUP-{K=9cz3y;_sWs^=rII!0C{&u(0@?BtcA!Ld&J8r4@=VdP)EX zvy_1WwJq;8B>OZn@|=iC8G(T3NEs&|72eu#k)&;v^&m^`pf&IgGk~YCE?;hFesN9h z;lp6ag1+Qvexs?mc@`wnRt^p=;A6ZSv_?U|UP2%MQ~+I3_?tVaE8H8HF2o->Tp(YZ z(9UC^;r&*E;%tme1{jj-lK$Lj?mewS!zQ?r30I=y*|8f^nTqsQ>S&khE>7yA|B{HZdYuv|x>%k0C-?1M{SA$cG$4M8Ke&2T55z4xr))K2DelE7ga z140&yN?!aO90#Bw#{x49pV+kV)B={R%wg(Ih>QFQI}6J;C4n_4D^^%q|sG(izSQtoFzMH2b_Pi5oMb-3Q=uOQ5 zY#@h4C%ICJfQFj?-in4*sV41xP)n%=*dVAUw-7%MfecP*nuBK zOG&_m{|%IMpU?la0E~>YAU-5Er>3T!-Ga&6gyJ~Jv;#Ez`Gz!*Q6l3tpGRzIPV5~V z4w!vFxDOlc35fY4L~r%ZtJDk+Ya_Ms;35U<7RbP10`TnSid^I1xO5Z+G9-nU5^#FO zIlxEy5r&YO#MITVLd~~Vsi}B5 zKc3&U`3b)h*H5YiJ*$Xp7yCdH_NtbCwV z_DZ*)xj$Qx#0AR^j0<2vQ=@)&aF0#LV78;?@&>JgLql0tS~oC$>eay6?|V2CDyO7` zh5+PY21`DCA9V32LIIQa{}j#-`?U@mIa%0;bffm<4*1fJkY@lB3)2NZV1m^Skcv^! z(?-$y8OM5C-nmfGQ@T3_mBD~GeU}8M2>1Gb{NQw$6hdAf$b=diQ4tXuq<|I*YB<6< zV1d==$Am5kwKkpu;co`#3Av!VZ5@r|KYGw;s!;Ht$(A=0Ik(Tla+AuHDpJ2UH6azT zDAu@0%Z`hwp`qdTQPgMOwr&N<6sFeZ@$&M{3Qis2A%`?MITCIss*jf2qO%?;m4`5k z?RW(tkO%H#J3$B!ScKEG4%SJ6QZEnj=bsLT*RE_fI0K%wDX-4;I~LFApGH@C$wp&&A4 zUP$=*3YFPUtPmz2#RnXbfg_H2`}Xa_$%ER^JgveE011pSA5;>Bw-Nm?GQjjW&NbtL z`?lZHMsU;sLN5eljWq!YbS(UUnfX9MMMcHZ{l7T07jn;G#44c2Dm(+&b>-&Gn+YO* z0`41=FOHABi9Du{VePPSY7C=tQoXVJ`uYqVl%;qcB5PT@;*X<>`gLtOFS!aN#wkhhL;~Z24}N)r zee*kYJ-rB|mp=jrP0+yGCv;3qvReY9UtMxqg4^fo0K~wqOi+67UzbPJC-x1jSf4>V z)L~8)_8~TJYC_gzChY*{HPR&>U+0H)DOf0)1$9zoS67}+3+{(3Bvg2qRCuALq7W@W z0NcT|KSvYEm8g_aE0iP;UM@R(Pp1Cts&-9uS{`s86w2E!ZhTZCCsLE7NnIEK#QO}7 zyxLDT?76>$h4~)6U(^$eZJ*m%Ev#!^N()%u+W>WZ@z8d6ceim`_bVcBxqxE=3K3NX z98)}Mfq9R!85%JLdNOc?!q(LvJ-Pu17E4v`Nla_2Tv2jzGEUBq%kY!g$Ncn0f1$hj zSK`xGB_$=-0iObm0I@R|OYjb!Ky4K8xB%x%O@N%)>k%n5?1JSLZf0p|8DU~*QA`2u za>lrDLWX8ulRJQ4WOA3$8Qlc-&t+F{1NPXH6(Xbg-vu8&G<-4dKp>!`jH#&K*C6PH zD~6;}pis_rCMHbxDuZb0hpMWGstLTR36XqM`u>a3$uD_XwK2zFk^B()I^5uhBSI|1 z0OU$1=Ovd9J+QIK(+0K;Nl$0^yo!x|2FX2$ddMUoDZg0&2*}?4lXiD!C$UjApnOP{ z{1esT^H@*rF@xm_AobRxUD`034_E(ozy2qri^iSUkWChLsV$ zhg$Je#Gz)76ud2|O$a|PHa9mze?cNhl{nbD$UnJt_pU}X|KjgGDXAMsC>#>JHP>=* ze1J4x#|Oh^QG3Tr_RzjYPFY#T$*Cwq2qOO3+1aLFa|C0)#ssL{S5SbqyQDgtyh*t3 zRW&W_#m}EV2X2C>!@I_ivooIw>2cL1)9^Xg7uvzpsOsvnjQ$cqQ|{MGlN(di(LxX} zts9E|@kR+X^9BpuuM*jeR-i*Xb!+_tz&PYJ3jpfrf&? z=sdbq@$_1tP5(4dSVg!&5)-7ib#E{}G=z}lFToF@IZBC_@&>Wt`v7(2gTsBz8rG z^K&Z>W!}C&OWwc4$}@&5czo$<LT@;DXFN1AP>>!y zs1i*1rzM+dDjtRs()wIvLqH$|54>i3)Bs>F{4Zl5&on|cV>I8^;jk%((3N8f-@VgO zFx*cWHkHUaGChJQOM;-s zr;L{k#$vGj)Ya7;PY<2c?!;2OkddAU!o)|00>CZF@P&U&JsTlc8Z}?HRAEiUyZZ5u z_f;YRe*t4<9kNUqxC8GXA87bK9p&aFQi9iCf@mt7Nb&VQwrDx!ZB37y`P&HwocsO> zt*{FIiq$eCTzyF^`V!Veqjf1P``P%q)0+sbz$LP}Lv-NwV34MA$_y)AkyO^Jgdh=-(|lM>p$e;+%U5dY)mT7|6dCsCJ0oK%Rz!Oct;_lTe(^uIczgXzb_ zqpGhv8>^eCe*&*1N~u#nPPF2?EGH({j(6<69VM0M@-S;kM*{jJ(8G*{%(X<#=}jHS znNC1d9hsdJjqAGHe-n_#-V8KT7|z*OPT)WRVL}Kn$x$fA0Q~$$@&C*xK%y{A4Y}tu z&pV8Ke;0Q{unSrLczVP#tqD?{h!=W9FNFSNSpjJJ2F2t;;GCoZ_a8BhP5BHE>nT+j z#_K?|;HzgJ1S z6B3ug?}E`Ia$+0U^VG_C`9MB530AuAR{_33MfZ z&(8we5iX_*{=@l7;d%QKFMw5~9|s3e)836f$8=;2^nq?}VPV}8wTS7@nIw4%`s=&X zUoXC)YF%8vB=%9y&U3!8u9=oww06mi5LcQvsX%3K?*ELihlK_|K0FvR+H~PIZfRFuaO1>I#2O~`hrU09x2rml0kvc{^P1$*|=|~zI9X%!a|I!~2 zef9p$il`syxfnOIAeg4yUP!&Xi(D2UcBz1>X+6JT8eXofSXb}%D;`W5XNbR_3XSxO zEh!xm2uS2W?Uqel+mIwu3yh@V=NkS~4KTw*4jX%q5%^l0uWvYSq|wTW__fBeYHh*^ z7k2b4EF{Js7wgPi;?g-6UAm};{NJ@Puz_Ufcb0m%1;auL{CoaYC#<}NFZ}LXU1yEx zjv1scAJ$TZTD`+=wOjhvP0VWA^ncW*|6dVGe=ijB)gjg;e_QsX=z`eaj7oE zeYPMze4=rY;xT#IF(NGF4hTmx=oldQ0v+Pi-Va&>NO?Lye-nauHHK3;cECo;CK?uo zc3D*A`0bYB`q_Cn*z)StZS2^4t)}_>=H6B=9Ezyz>gXUUG>d7Q-*bU8goQcROq1f?;rb84M<>3xR(oD zCS>t9*kj8rQ0jr9dA9D z>lR*>oiqXxmP)p8C=((;ZEbCaMknXHDW_E9Mjey8KONMoviIA1`p))dRj9r6vd>*F zsG<*|d;_*41dNvGOSR4?V?-TlMU1NVLQ5vk+@>A*h~4HX6t+7Ry?(}*)a-s88QZxT zAX;?*F=}ZDv&;(r>hUSB^W9l>K)EOcXC>*%o?%CkAKLlplIR@N?>#tNU0Yk*(uS~& zs(y8vkk?fJXnxik0EhvHIcY5kkVD|d1OOm-Xn};_(@2Km9T@~vVD?^;KNsjcG#45CWQe22!-QCG6E6f(^eaYwyF1zPANT`3JNpeNjndqYAD_Z~15&JL z)qr@?Ik;>YhWGEksPF{DDXpPF0;zw|5LvkM3LlIOe2cWR=>Is1vi7!{h^Qo1t( z;FO2DK*VEkO+}|qlOe3$KI@2gu&dx^VShpBDEGq$!WI=}<^9n#KmqVV_>xp5bG)If zdQ$e8;@H<1+Nm^uPRbWFWDDTl(I=Rc>Pq_oYDt5yi1v9Djh!X+9$8B`&dr_%a; zKIPQ1vazATQQJBdguI6-zrCb#5sbk9tF2rlzJ(r!M)O2R?*Til4IK6TiB3lB!Sd$!-!f z`}WSo+o$l=gl9&DIlZH!WAX(gP*W8Wq-=9g2WQ#cF6}iM{H?NavZ=tF^wh3jFLX_8 zVpz6LG{wr=+U4hGwak`=hO^j5!@i)7N6i*YsVXZkLUdp=6h#pkDtjtERz5Z+CIJ5& zWhr)fQbbgA1@(+hJGHPW?LY!bQjBCj2R|g5;YwYu~+FQ0&&Zdj0x{Q^Q~7NnMJL`6w`w#crAQ5?6E#4Crxs zd~>&9B^Vp8ouh)-Jb-5K3kj`kj<2$Fb#(=f78W)Fi3qk=uU4~}R4Wu>pqdDIj9P@} zuzba(sKQ@-n>GJ_hX8(D#E_ zlOJY3m4(5XAqdcYa!!tZ)P4(zD>(T~0Du6*y1W5@o#}&wx1zF==J7TMF)^`%(Q=f* zQP-|*do=7OvS~mp*C+yo4@+I-M{r-8&6ro5QVD!uaV_uLGAcAItW1Uq_5sq!GI-q2 z6yk#@d0Pb%2qAYDekt;jMre8TgqtuU@_SlgZ})ix7eKThCK< z7(cO|zJ@jTpq+2c+O?UGZk0*=EU%UxTSt*p8XhfH#myR@=M4F6G!n#L-+Yr~UYO#< za;o8FX$Y%V>o!TrHU8ffR0<1#UwjE4z2_CG?6cvot6w*tNPwz@C_UCKBX#cav6;)eT#~D0daCe2 zQI{_>-~`3IPI>Gfr`m+Dq{p(UJ0!31i217vJphLd4F$6FfH{?(*lO!CB7W~q5k40O zyck#kR5fK-n$lU__-*i(7gL~Gi#gZ4 zKH*HV=Fw^1fvy>=yk=z!!)r~SBPQ+RWSfi%`l_41g_R~X-obYKj2TkIlhWz+hoXY& z8#|JV2JAy7?KS2ZkKf|=oFBe=^~%5g(8!u~v7%;6>1d(Utc9kh;Wd{!gl?TDTDAXz zKWB_}&DBHl>pj50QnHLOnvWNP3Q!aVqzILhYAaMbz_Iwwm@SUuMK4PcPHg=cM=9{#+c8s=+()P}H%F(;S$8nM~`sAW{>tKrZBB)|OR;6D`eq zv2g9rdn}0mIJyhpUK$ro^mfhYnwSWh*%#RIs6LmOnEY%u{@XiheA1{Ds-*6X$facX zNGjA8Q?O`N>%^q*CGt(A?0;5|wwaX#{G+cQ`|4}tJ(DN8HqTT~(4|6@X**$}=)d)$ zzMftHaBDNZY|bqN2s>jALX*X3<20AJZ3SD-qer0{bvN3Cw;J4Mo91TPSo!+(bK|20 zK}5z#nKW4{9$9u{DEH#!V^#e_W2z?i8hn`2dCAGgdtMk*y(KIZ=|>a@;S)nmNkVf|7mV!#)&lL z+1vQKwGcjv+6U9IqMW*0Ur{ZW%>CnkONxK>Yt_4Ofpj=V|O!HDbh{Et9Ed38sHV014e zVx5!ivxO(UhrjMuHVujW%?6GYjwm^Kd7!J-*Br{l28f-4kD@?A0vlXj+1J+xdNk;R zhpKAu-m~){A7DOhmPmgz2B(ntYhPx9d*kEBG=&ikxucQ@KjSQePAck8Y3~dnWVoVkwAYo(g1o#c3q4xC?~_jian2$h z9b?aT>IC_&8`PIr&Er|1A9su$d371hOOkAdao%|jt6t-F-I?Na6IaD@q_;lQ4bV$@ z7eF`u1%`hhXCeN6=Z8wV4`UD`1RXyPcC{<#CdF~m5n?vD<~K*HGkzbR5cXx)0#ZE2H{ z$QjSI{}VzNjD5XKT!!}dqv83Z68DBgynDox7$5o8`+ZCFSkS_g{6E?TwnMx#zt{(` z*o&Ambh4mrEb!cceEHcUd*mj*x$7x{b~T!LF%`{D4-8#tpQ1y;Gu>)3zn2yu!E&GP z15gs*5EvBHiIn@mLf^MncLy-8+BOFjwzXqK9kJP)apH+GC;7Hn#D8!d>M7`^hgVA8 ze7gTv3vf)UaAG8Hup?LR+80B&lMh=etIlwqWbiXPwH9dt=Uqci)WB z&zx^~`kmSLcJ7Df7i->qJkqGGa>-5am3tHWyRH4M>uk@gYBYPWx#U8>sbuuq(HD7L z#mCOM7S%lv+V1F8P?r@c|FXyAiGhOYJ?^q)Rc1~H><%+!-YC$WRP;TW;gRb*JiW1f z*lF3q6^9hYhkUDSK1+SuT|IoYBz;qo_qA^uBqZD`3SA}FOYYfYOLGHvi9G0@BLXoD zgBcS7`;SysRh50IjKgyEudCD78NA6C}RWh3aPP{6Uozv z9iUV#;({Hbo0FxfdEhsBLh07~8yOkV+Ct&mDQJ=x*^xXpkdyS0N zVEY;zZ9dus0D$}k`x0dV5{^i|!hgq#MiX;8VkSsI>f-{h!DClf2q|2h8w!ktCr(Rf z7U)(WD#Ba@;1d?vO{Fu4$>1dRxogg6$lTB@@jxQQ~ZEe`u*# z++zX#=q?x!Q0+Nca&DZS-P|k(ktHpey&f{PT`@TL>qYQM3o}l9sknIEtsjuqb+^Ll zQRAjj9CrZc95@^nfLZ{_;AJ{q!)!YyFy(|XHB?t;1gIGah8tzTCbV>375!Rt@R!D| zSeB|-D>!kPId;8?7pq;z$U*~Qve=!ZgoIGc2Ud0vKk>&vsB@>3l+?}Nh=Sbp`7T{A z!`tqD1QnjB*~I!REz7!m+0d_TJWKB1y~{|L)jd|L6{@9%my+p#(6t14zah3~!%4H= zD&_NceeH`{sILGNt9WrJF`6kYP`IU;hz`n^`2&S(#UBq7@D%(dMXlR)Y{QBY(i8(# z+9@dg74FuP_k<}Zv0v=(?^ii+fSoG-ay;ZGB5H_V2j~F8XaaesgB}aN1D?ACfBOY- zr-U}mWeQJdD56Lf?)&Q}mK+~~{!V}%wziw+hN5&b`=P^P0W~$6S9DQ2lsVF#!Og>i zmIA~1G(SJnrAq}O13!PLE+E}G_N8K_%amBPQ~)w?6|3>TF_O{fgIHjj_wfFxkzvyJ z0_2mXqjK5r{G!SH$d4Z$yKDp^M0G$0R0;%dh+xyWU3e6`!EG>()r15q*kvBH$UJCc z%NygUYj``QcsB)w&dtY<$M-~N9n!m@9c-{2%1h@wua`bhwPg0W=K}{+kZE(yJNLyT zB>3xH*q;3w9o5Wlx7e;>%(o7{x!8q=5FHQ6pIdIqu)P0!Y6 zr^GBK>hBs1At2KWa;;sP|HTD%qi7*kyjdGK^uv3Kb{F&@5I-|{aYaQV`^6|R2WIQH zz(Zbu@>RTF^nunv=`(ACzxH)EAK*hay*Y5Kw>MZ>f~radSI;`}Bx;f}fuC(j)XJ3iJum}h2vVR4E90pYU!u=7XuDA@ zUKa4_rBv2na6(P8Gkx$W_CK8*(npV5>>@fj%{(y>()xu?X;JjTrDal zhNdVET{>2lT7|F2pTIeeIpFz*ENL(yokJ&;Bs74meGsDYxJj8`_x8K`a+r{v$>HCQw!`g)vTkl9;954^JA}5 zSQ?CI>c85E)h}sgY-M(EFniuZxQ8UN%4;*-5mrc?)gi^NC zT#(?PMR~G=r#`pIiNN3AYC;^YL5ZtU(};0ZETA%HN6h8TS&KRo`DJCzB{m<%Bp3Pe zqrmrp-{Wc@JjeipXq2X#`1ne`k0?B7q|Z2-*X#n>Rn+vxj3S9dC<8J-_-)tSzVFa% z%?(AGThTitBv1s=qOWtWx_V{GG*+~!sp+6+0r|eCZ$Z`L>gLvoLP$|diy2@$7M9|g zwd8ENN?J->8G<x86Q-e)hHSZ%Bdxc*Yv?-KSs(Hdjn}<-^JYM* z^~V8XME&`7OjZ^IO0jWqB~B97FhhqBT2WDv^3Ti^IVr`7p|C94MykNi%AV|7FfB7Z zuywZDNGWGr$wtSKC%No;Ztg$q#fvYc(o&$vKLOHZb=@B?PUBRJ8?$vjjcJq;WuwGzJCg0ET7KP@{5RwH!x>a>W@PI6?w)O!{z1)WT%jDu}}ox)4b7EM}J-`Iw_7 zanbosJ0A;6F;OTzW2@MC1ti9{I7a8ZwLtv2=>z>cXi~8GAVEXsA1aDt2LfkU5E3sd zW|{-r5pVR)9s_|nG&>sK+uiMtod8fmn(6rNI$zk*vVd^Ric3xf=8M}8SVOXgQGx=r zK0t({fS}ga>YS9ib}HBGod%?vzsAPG-0l{B_hDs%yaVD?X6awrsw2!8eA>yvB4lD| z4yO}`Oua2c0B@C_o-WWWA~w;Wd9(I|&iYdHRm;n3GUc~XhWkg6 z{8ndNRFPDTgcTA)mr(^?*D^KEv?|M)3<-X_Mb>d_u;cmdU;EjdNr!Ey zKg8)Grs@esI}%ZaBeJ15rOUX24h59+wZ2H8YOJxJA!o4=jVJA9Slj~TX^r23Xev$O zvSsZIN3{cq*)?(AxXK_vFritvwegp*;KE#FkY;Cf#qQe-rS5fY{>SH+vs4KT4Grn_ zV?SsT>SI(gnxr599!Co@Yw8DA4ioR1oCwzQ+}Pk#Z_3DmmvAu!#@r^A99VmBD;ie*hb_ znCF8-*-hwl(?QOd(@*rqX*EuZ0@K!*BW*zbd1OxXMX+gL&?2eWi&g;F+w15kfYdO@ z=t#}*#wB_8?{9;_c*qe=OtMO_$4>F1$Ij5uaOs>jML9$~=*?V;3)hTFV6ciHs_|xu z{O2yOQ9&xW>_bR$gdVz_zphTzeckg9Nj6TDV#N)?1U#gVxRj&Sr5I+%I8u^^qb_Dy z9zCPZcH}Q1%Muh1ksNHAsqt&>^l~;!S*jKhaOv64Vp`_F)McbF)Y%1EvIFUemFaaP z`Ibmmt!D8lWeJKXj1>_f^*$ID%1L=Muix!G zz8&mH)TK*w6frjdUrEVH{G$O-3fL6f(vw`0l%h!3n0x3jphR1@tUTo>iUg2j`?n;G zi)YD|uTWv|R0O{_PDJn&|8RyWG9__hDb{M9Ev(>>jcXc24 z{0Hc85I|JE)n}}=mU995NaY$3c{%6gl(NIgS)G5duZDe6anY#XX%E>6t`?tj3b6$_ zBJ8inT3O0;<_;A9Q?-;MQE=O;}u&ori;qzXHhQ=8g7=zV7f#|A4Vtu6chv@!(q zNApB;qbxr6&)owUkw7*Iy#{nult46nU4P3EI-U1g@pCujdmOEqnZ6Y=V)~nLMrOo} zDsI2k7M7fMU)j}r{#e3JSJ?$XgRRIc&89mI>)*X6m6R9_ka*AQEZy_hBUtZCUEwcG zxx${BBC|`0`8yJD3R^Nf&WYrk$O`~M&{9Og^YSIBDM-6lmznpFvZ0^XSpUkqpT2$j z)^(bmbNOV8^H_@Yg>}0ZP{h*M)T1>B6$~K&Nrn#aTm-iImoHzAJfk0w3ksW($QVsnA%~>j6oIGcYxNUkyuAwNaQ2 zs3#278F9NE{CM-pW*(Xwh+Ch^R+*Q+dc^=WEaDa5)`!Qx>_aEBdfjmK@--YB6gBnh zmTVB`3iVvsjSPYFs~5&C@nz+(~XP&=L4bB(0a2e8MQJU&K)k_;eI+@eIYj~rof zTIWA~WA&Uf039fOH@j zH9ZfYr_TdL<;2`3_5 zR(>+OpqVxMWZEZJN!z4sb#-;Z_h+etu zi=L$2ptLtOFRQy>Bqz@)uwS?)leLlIXHvx|j$NbakBm-79IaNg5FlvKGxDM6$VyBp zbm)YW2R61y6k@1zX$Pe(H^!zPeNVXIE7zKU=&$?vct7v^6v0~1FJ4nhO4;d8o~$k? zD5&Lp`RrYDGb0MCt#{MYL*6-jrNi_53n+Lyk3UJ?#S{H^JDY?gi!AP==^34!mQhc- z+SB~#qLhFYH0}03T5<5uq2Aad=7rvdIY+Xawo6HQt6Qf`Y~~>YYLkuMW7^H5M=j1f z;o`8oL87F}L0t1nzY}D0u(p7_DQw4Ac=wm&Nz112CFguh+ zj7pY{-OUZ9Zutc+sB9Le`y%azS3PT|PSySK@o|AM%uV`nX*5U?X#+M+TSldCU%tT5 zq3Usl`E;+r$1i*1lIo`gCDo9$WTl>YL(Mkh&| zgKHT09o)=F(oh*=ILQq>(dI{?tR#JL-;VSatIT4n%;4h!j4y3OF$wefilU znS-jiEo{pIk%$Ogy2iVeNfQK zX-Uum=RD)OVXlC>^P0C}BGf8G?;y28DlIgP83$i)f~o-ljUOb`hU`(W)~ft+rt%9; zl27d3HPRqhspZ@A_dRug=XTiHnXaQUA&R}qG)%DY&a#l^_RU!(^X z-*}JelE>qXQN3X7!S?FNWNP9JBAcMvJ(Y0N#e5`6u|DJ!AzuujxFIeCXs| ze)@DxKtKRbm#)vVXOFQr>xbrM(y>J9 zL`eb)p!6*6h%SX^jhL9;fd=GG$f0YsbabLV7?_$eQQ%(XG&RpZme5OlAYLGZX8(1S z=~hZPm&5(>XV-0bvJ@51+iKqjEIryi0y-);;vWFX;!|1QiJA8X#|FhFS`4lh91takLO6C`>SYOu^@zVv@1W}?G}n`D$s)?!{eszpq@3>TqIm|{#>NJH zn3l(mX@|qkftFx5(#3f)IzZR)a!`{(cNyiT3~p#|*uC4(h5zE45w~8Zs6>yMw`1cBscmX(1Kr_Prsbj0cntYgOiQmhFA?Q*yevhh`qXdGht{ zgTf_7-!OxM$q2Pr|6(J1S6BT<)2}vOSSW3GAJfXLEWb|NLkuCe^Q~0m9m+L>gM;C{ z<$vqUu>OKAwI&EIL9j*1tRg3kF_uj({?L*S-l)_EF+a-x`J4$+^7gJ+5uW5lPKEaL zLpt*;SQJatQb68Yh91i~-pGO~Iy5U}*mFJufGy`}ptNFl)z0?P0A?A6D^(JX=GR4e zqP?&o-joj9JpeY;w?-0?-?Ha0m<~(Fb8`ie!?wjwwY+73h^5GPGhv>tEJYhv5aN%8p_h91=xJUeZMS z{L69D+Pd7$%&RZ=n8#nTREc|ummI_8DRGgD`^xyjS*onfeJ5;5;WziNWQ#%#DkSL9 z?&I<2mn`CF^+e%VD;V|)tM|`C+(QIh%-rMa(jK*XCGi3|=AneeWH|EtLr4_xOY*5N zNcol-*#nrcbOcx<=#bd#%*bg_gofCFhB-bXX&_-lPU*(Kc4{oOJpaSd>;K1domfbO zZsz6f{8)0?012e!b`Bd`v=!*AscM1mjLn!1k`j|`25fMd8-5<`!0aFFz>AQ7reT7p z5OOq0m%Jo$N&6Z}GSRC>64PP)Y9zsW<#{&`Z)};VFHZS+#jxE1oqZi52yisBnnI>e z+3?JgtIG=7E#UQ@KueXp_)jQ6FoT{DbmXw=P9p&TPR94*CQtH{^QhCw;{?GV5oz#a zvMmm$9edxGPQVZ2e}lo;kRP`?4|Pt1MuwPk9d6v4QXjjw2nak!ABC+gyu6SmpF>AI zq8|G7AfBYgv%;l0nQ@*}<6jK#2ba0aK<)ZuI>1OEkwLQ;La_^-*#ZXU*?AdrE_x>C4tv+6W$q-zRN?#P= z`(-V$QVnrmUwn);&*x2CjBK6a3Yu8rp z2n=Q*f$~&p1c11}j81fvp_v{{mVBRoYe@|)L}Rsm-G%19m#1mzANtMCtd0=UHV1%E zRw-O0b#o@<#gVk5x|c8l=noND4VEaNA^xz|>Pb*<961E0(h+B3X0E>Nix~o{BT!n2 zbdB92 zZ)SPD9MwX}oqz6PGTnqu;taS~mY=0GL=Xr#4s= zn)RNd*aX#-$?uK=+Nt^h@Sha znztCvsQJu?a-D9h_G9fnW3RLB?dN61uF6DxDDc|(%uE=JKmPQmuC7{Gwj!0~5ffvj zP(;+ce;)vo3gpPODwqg}&mPj6{iOv8i-y8jG;{%4U#gDg7spj8N2@(o)T50nmOni? z#6tihpdeuL<Xt&ttyBOp0L$g51p>0uJz9U@eN5W}TEj@-CHZ6+gIs^` z;Aq9tBsk1kLO=u%zq`Mmjsk;IkrkX$I8{y%GjuD8Y!kTtzM%oq`85xZI6A!(&-R-g z^GkAhw1TBdgI}OrGSQh`WiIqY4KmLTGCMdqm1_C^WQ9IQ5xpflZcxEVYuBtHKpWTW z5Enl`e=)kb&SNSgUJ(}PFGozL4jm$*`Cy+K-X-*)HGs=tLaq$Y*r5-%!VNPHMD2Lr z)Fg057|@M^nVDHl*ZX(xu)t6r2z^c6*GEKp*xY~(>2V4xyW_&pP+WdfL$O*c99&#P zoj{=%+Vs~>2?+wU5%3IS%nDW2uYMR+BDWC~*fk9e?7yV`6#1ga_25d$feeX%+qSc2 z510==C@5Huas>q0dta5S-NfPm7ZU2$#rdtA_bpk2E|yu*P&j8dfluHvC%*Mu2@S$Yah^p}#)O;r|kkk&!ar9*jslX;yoi;|6b7X_qPIDo-Lg$%rXWrM~I z5S(C!c`vFRUaa>1Zc1GNP)ch^C9IgZ{fK=dW)r^Rj}|?;Ni6=-#cS8jL#z|rH9ZNH zcnR=XodXBXlJCL2DZ_SC6D$~F`yQYd@*el5{ky|3qEBEgT13es%^f5aRSY(gk$QZr za{<+U?>s_ri{I>Y45!`a<4;PfL4jaTIQhHh))2AFNH$rrD>Ds93EArmcN}89tW)y4z)W@5QLLcKjVrPc3jbkPE3qI1`n~_ zjm%6Igc))_k)^tH*|JYaxQdfzr|iMXY(&a}&IXhj%14d}NjQC=C?Xm@j4ZPm{uC~s zN<##0snIoay(uk!E4D#Nyqt8a;E{b~+oHf=eoiY&JQgtl*Q-Pc$1(pfviWPe%ER;j_WT9sa?jzao#2)6 z11?wj2{yDZ5OOT>$Ri&^9&E|MHViNVfGV4GcmW@+3_`L(540E)+18K|f2ywkNdOP7 z=%-8a>`hm*MJz_lr=zfUK@J1*O+HmODBo-TSQBnJ&zK9(RC_fl+{yoOZS#2jg|3ZK zJjp>@fyk<1wfPQTX%Frr+tQt_JUj{K;NiGBN0Z-g4|X7yoVU@NpU<{LfSby|yiC@d zx1?qGx*OXPK~5xfrT@hJ&EavRM`Q0z_Q#qtLSYpnJ{%jQGhX;0XC=){^9c>Z(X zT$B8tFR2MJ=wc*d$NF2II4}n}yk+!~b3l1I{>^X3zNt#^6mu*SV$(5^C zolC7koh#6s)!fHz>-8qKx$j!-IKuf4_er6#G1F?rTkl(cW{T%wdBIu2fti*XAYbFh z`R0`e3x2#67)z4%%Oa%dP2Kiw3Y+?eA@#^-h@`yQ9CwP$CL~7_Wf>zQdKXA62b)#%pYk*T@p}dne;q z^x7smG0s)0>T0WVoT>WkB>Y@B-1DV72Hwn$adm%$frHj5X3eQFnuUd2)8C)8I!Cpp z>81~6CrxX(KWpw|AG_h#{_f=Tz>&7CY)9H>zF+X4&A9yQxBIw8@$ny+*5Wt4B33ct6mX;P{$;JtA&5Mx_16{pJbm!RG&YAeh(AA_^ zM0R~L;F#=f_IHEWG;A;DsfAQzbo7}EGQU-SczurAI|!p!S_+cT?VxywGB@`Jt^zSD z4@3vDbI4plg;b)(AEa|+nvtO(J8|=H;!)Gni{by?+nXTH1Pb`Zty}i*T>J-Uoq>ye z@aV3&;dsmC9|HsHW5iYKm`|Li*@rNvp?ra@lqF`VU zi|LXW)C(glBkwSWyk>YrMu1KW@pY3-yhj|RhB}M#^VcG%;>8jNdIG{5zn67%Y=C&p zQhZHqef{QMU{+m_U0nO=SyKlWy3*X7Is8opbP#18xfy`Owm9{vw_CPsp+VDx^X>5H$Ar13+trrJLE01qv(*qM+A+vc`>6u)( zb~TXI2ovXv z1u&tr^I3wco~SofU#Y4-CF5Un29pvY9O)uA6tIm@VguqYtSX*}?Ghu4nGlEw8$7P* z@4#t+7Gn0LJte)wOMss()G`%ChQJbdYRxE+JYNPJF3;WLH=G z&Na%&^4Ef;7=w)J>9ZmFTP}`U+|b_wS;)pS`+-g`jD>b0_M7^9Sizoc?wdOU&^&<3 zch4`|F;YzzeOv#IKx1c5fB&WF{;gZK;Gd{*-*3A4TC&sP5H}ESIG~XgStUq;0V)AL zM~{Pm%t36&AzcW+I24M4Yw;Pg2YZnOW8v6#9RYa{RC1TIjGy-A1c6jtfvjLKm9RrB zD}*Y~31c%LRRr03G`k5MY}nyCT_qKJOL|<<(h0R|7ivbN5x~$AMhEIl40LrxdqOV$ zS9KaOzGpXt^g!X_DmO3K$EY@6oBnsri<)o)Ze_ddQ<~K+kB4$s8O%=dzFSemrMtZw zn-CJs@&|s?hlf0WzUCXk#nx)BhH=?Yx$F#!-|$X9)_%PW3ByFkyr|qk-0Ik|<$z_A zvd-t&X}Y(w0aWcjQ1U3&kcEG^Bnexsp%wx^<;^99OLMtR z4A!mrMsOGdHjhYN+tw!2HxO_J=0)A#zboSO;ReH%sf89C_G<8mu5^xR>wtZ0a&q#g zJzCFoffIK?h+(7ma%!MVu3h~5h$oQE=Y8$D+^yW>9Idf=W#aU^>#R9&PUvB$L{ z&6lKL^Cd3)%ZL*JOkGNSXFFf|fJWvsI)h*Xx1GY-qge0`27_ty81kGfekq#;UF(wcGjSu$49j-EqAfAK!%v zG)+n~!RQgp*&c?+JID|{GJ6WvmA-c{)@^c&Y#803kHw`dLn` zb*p%D6H1+?A?VN1)&_eVw)jJ&5J7#!!0VI!&7XAjFdgX>qRrSZvf2+Huj3gjWe(DoTyRJDo3I3;KC&bS)GX z7OIU^=tF6(gYFyAXx>qwi0sTvorMXH&n_2|K({W$q%=jrk)mdBrvkVl#d+bwx7lnP zT%`&h#{Kg0G)@v%1RrlU-6}w<6cQ&fiA&q+cY)y zUafpzlGZgbb%mUFkA7$)Vk*o}b}oV|qR}H^5M&z6Xm486|KuBIX5sQ$tE^2QX*cjJ zSq1bNxpbz`vCb%ee#Z0Dw#uD+h0cvl&OE-OKxrk^5AAR80B``T|QE4Hah(XdURir`B_ z)3~ko$B#gq-S1CP7B8IU{Rg`ncBF;*Q|03IIghz!$IIV8T1=VyjQmq0nb*obl^+4% zLDV5pyKuMZQ&-0tNu<^C-&>a8;^Af&&453`WzjVKEoIV|5b569KAkK@Q*TfrO?we5 znt#%Mt9`*4L8j$jX2miVs1IQm0+-S$)MCYM$=7^F4V~HxO{cs_OUCI#=>=e%N%zuZ zF34-a#s~))C@NMot;21yqRB`eu?kdM?1VidO<{2~EM>H`s#AOz>j6-do~Z!w_~~Qm z%a<=~L@jZ_K0TMfIG1?wDyJJmMfOAhxkiC1tt&zI5Oyl)C95mn+&Jb4|4fV+2<1!i z7X7Hm9lB&rw^b2g|MqIg*Mq?f48J!;hx`Ws3R8#GxS3~9>Y^(uoI=PZaa+Wsr3I}> ziLdgHoLz8V5C6Y>))YEhr)bV1&O6#%wZ5>Mn%TcGVIu@zM72DRrn9lU<0;>lDr)r| z?LK&*1|u-~tZ>aQfv0Ys1=qgM8wFMA{GC+s-$lzVTi6RGf9lU4Sf-w+-2%|q(vgqN zWLFF+5x>&@7ZyBMRwVBRiTm6}wDZO}&L!zHaJZSPDgK>lkst<$1-xWHLo<|Fg5hT! zIzQp4<{k-S?ms@9M%R=fks`Q2<;Ncp?BHzu*Rg{=aAw9A(*_)v102jc@UA7j0MWun zmy^Q@K7(|k1Svf73BJDUCMVK%K*64TC4{X+(|Pb5KjwP_(KE_mr)TC|>iBU@t@mgm ztpWsEj7HxcHJ{<*@foQ%kpC`dxWfA}BBA_ubmuI}Kqpbv!#cy+A|Q^g+fXP>NPBjS!SHV0CD1YZ3|W1IW&G$*_EKx1UZ@uv;+=Ie^?rTYpNXZ{aV Cj{TJY literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-defender-atp/images/tvm_security_recommendations.png b/windows/security/threat-protection/windows-defender-atp/images/tvm_security_recommendations.png new file mode 100644 index 0000000000000000000000000000000000000000..5cb086286862f853882b1b092ca3bfe02de6f121 GIT binary patch literal 36871 zcmce-WmH^IuqKKG*M#5}LV~+H2@-<4TX1(8cY<4RclY4#Zr!*wE{(hUbnadE&8&HU z-n=z4KYI0Ab?WSMcAdRzSAF$Wn1Y-H1}YIM3=9m0WJIV0kqzVr z{X?<;sp$j*gW3P@2b)NbNemStIZMilBW=IKhT%ixRF};D50SWr^LK!=xt$|SY1Q~o zs0iH|DiSksGIF%Aceb#zg~36gpoGd%|H(z|?A;wL%*>r(DzL`+pi<2LkUE+e{8Rnp zY++*p!+D2=0=pYUuvRuHZ~@<&M>#*NnKDG;y*PN3ukK+n3B_J zY8aSLFp^^5RopU;S3Px90I&BK`04{_rk15{w2q%xkIEzU`&iYxrNyKxgRPh<#LC;W z%w4%ZOH*pMX^epG=WP+uq^XvI5@`^o3`NwYC)nU3l@yg(;c*hd&#x&@7{QbQJ5LX8 z=WgguLfN2)3=r>C7HD@oQd>dc4<^NL?31mvIb3X!(9@p*#n>V=8x{|sPVcAIGBOcl zhY@0S)5wFGYk?qa5m=Ng5#(IIck&d!6~6t4>ZcxMWQvb}HfVoiqy9YqD1wae#SN9> zH{6H+yXxJ_?(=YJWy!JIhKExqn#SW;3Z49$Y0D?iCs<+a+T6h*Zx^noNmTe-dCh(s z2T|48i!4MmBq0A3h5gHEDae^76)T{q)h)gm8 zkeV&!%K^d)85c@}R+N@t*k3UIx$`3z9f)sO;qQkAEm><11P-!7W)*A;1ka}fPri}xPuOv3s zh0itz0v#JJy;KKRCB@^$YcJJG_LF}KK4)q)5CN=P1HBt-SMQ%k;mid_qt&;spHk}m zn!4aiJ_)KtX?4WGDJN;nT5?_~jl$4Kr<$32a@HKID_nb}v_z4X?dA_r=cde@m8ZXc*)`uVoLn-7P;Q>U{OXkfDEgvYNA$lRc;iDR%Wgs7VD)|zSe zkL+?Dr|+*@Z|2$-61YB7c25_A*Qlq(=PmDNp9}DE9Gk8Pavm1hj3SIW**_!y~eks)Nx(*L3W>a4=Q&A+Oq!A z#!Nx1Jnw$YLuR}0k%o2f1G{LwDJ7&|$1EZWkm|CxYAWam+EQ++2h#7Jh7}tHT(QD< zY1`8(4Rq^k8XK&AH!0Nc=UD77DFxm#0J* zV`|hl0x{>`P4PJI*{BZ?j=E7cIDfATB#5p2G^bhW9`ZbqF0o4K52R-ZeD8<9u=1*& zBy$(siZ#5d1$I%Do3kf4?|9{l=q_cp8tz9)5tU*+D@vN&AeGueyO@8vA?l56<{6y% zHgfwRnjm}q36u70u6x)`t>c&e0tF7f;~k@o`qbApEXNmRW|pp~?t?Vq7ETWVdp~)X zWvlccqE$FOa8XXwV5L9HIQPb zj|^5OBFFgz*6qV_$q)7^;=?uXR8@DAS>E(sa7PF!V8i>Ua-3xU*Hb9W>kt+VZT|SV z%0L!~2PQJ6GxGx9)Alsn)Z5=5C+oFCQ$Im-3_dtVbF-@8ey-IuUKtdho2=|V{`mBK$a&f9E zN6C3lcOAX9+N-Jh8F+T%_&i?CM}SMk_grrly%6T@KevoY!mU|(b66M4!!eqVUEivO z?&0=SX561IN||t%%43)nzH6#7z5{gmq%G`dr}8^e+F3Id-REM9gkLS$!~9@sZ#W6! zphzq|<_K?VEud84_5^>jb+B;r~$zhPEu)$UVpH2uWu5b?5EU_3`j&`SD-0>BgU?m-}vDGj^DjwFfs#o0utziScM~<-b$we4=DvgXBWh?;jdd~K}%#Jzw#3A+X z)pKSb0#CBu37pbhd(72%7lvLucK0!6mpsB=a;i1ndt`F+qSX%4npgWOA!s=HZ}(;@ zb;ah~ssIc(tgHd{G25Z3yyi-MIyQ~8bB@lyp`7{qnQUbhoAr^b z_#3wv*-tL54rhA5zf@3cmJ7$$a;CPqRt)$)8xKA_*x#P3CmdI97D4m``YqyT zZ7Qt9wR;+R8#)C7Rg1#RQ9gFmJk#omCRQ@5!85s1-OmGv1uI zp42wZ{fUgk=g>18k+ZnqwpXOX)mal8b9=gzFYDLD960p5=GQ#jD?x7Wkmjuqg~03l zO{CYu*Xb+nnmSky4CD>SqDB%^~oC~1}`Z>Cu(s`kjV{C>e!jD&ZwI|hkU-S4nPBqn_7|w zq6WEHjlXg03}Xhvy*JicG*?i6I-))urZ!v4`DR2!AUmsqk|DxF*`ut%pE87`P5jI2 zOYZa(elIObR<8&Kf`!Gg>8GpHRGYh91`*^s;LGpWW)2(QFy1q=?J`RKCHKEs{)*)f zMo2!kdZGH1C|Phk@;5*ml^dd-3ACh3v1dD-))VQ_v8BSUWv1WQ$;g^E_#&ZbU;dZl z$mX1YYYk3I0K);Ut}Z?W6UOC|ivvpO#tDM&R-t$2O2eW4GvKiLMEjVS*29Mi%eo@4 zWG;aT%auaoX%_`|jR_-|md}kYntRgDd-u$I~8h^qJ8@))~*^6(Ny! z_i8z}I(kdA1J0m*V$)V&tFA}OevgW2OTMdRde_=h7--7vv%+b^mZUGM ztL;m4-aj+vKAME51tZXL?3vWje%&W;M6_9phM9$XP*XBzsfPD$dy2H32!HTPLz*Po z8iYT>IZ8r$@%$RjR8BEptz1z)btIseTfwn@N^&HMWc3NQdQBLVVWvdT#O#)KyxPEJ z0a9vV%q+%Vkz4$7RDS@b;{~gA_%8OA-+@?nGJ7kArYCOr+LG@W4+Tvia9KXS)q!kL z^wadTIkDu8?V~SF*EYFXY!O4#(k%E7Lh{ThBOe=leA)2@CZ0S==W1VU)c;Pm)A=;A zfwr2d-gE8w=&fGD%W1Ft%?9^TX`Yy=N6nN?X{Zl2UKeZHhg`VL%AltAy;MUKE!=-X zQ-!j*lD)$HkSY_}arOfBp`vt%Fyql#PQdZYhU#gy*;=y4s0?KFjgI_S@bJ7jp)o{P zyQG-KY3=1XfAMzNN*V*9y5pPNss!8EK$V0TOTX|;mFR#$x2~m&kNxO=4{s1 zuezHeNMLaZ!V1#0**U@~#Bs*KDQjY&VC9NMa}a;I1u=53w8$JIf_yBmEEgYsFo+f0 zC0sn(q*VVPehOCW?t8oEch!Db)W8sj9+w(wxELBcrOQB|VEV{|CE3(A#&*h}-LTK~ zzW@~KDPOnkj9Rm?%&^XK&F@T=$iO1E6=pxB(OvIP_GOW#HSc%QXQQ)6uh;cNALc)I zt|j$)d&`r3@cJM*gz?TI$xs=($YY*Olh4%o@^&*@*coUWKY@Yvd_F(T zE@rBoKK){w@#UAx-aE=P{_+}2p1!u-0Nd)rmLofWNy-9}D7k$+QGwO+sd zEZvnEJ-7+BM$o()h*K&8Ib9u>UhjR})s9$9z4+4hrY*XxUGom+ns6jxsSf3_FrYHq zOFZ*T!&D9{2dld~cJbAtJu~g|JcCbUMH%8gr=NpC-NjkVYuaM!_e-Gc4%3UUUIa$( z6jo?`u^>^Gq}gV+(mnJWP}*h2-wYV820=d*FSsn7dXa6AzC@)2|-5)$u}$)=UYa3LKKf5^a(X6=;}YGaU~m z9RtCLtFiKG`=*FUM zZl?n_6-4?`=#bJ7;Srmq->-;}nHdOrcN7q4c4!JjpBgAUnMsWh z$Q{$q6%L+Eu8>xlc6p#j2Oy`GYF~`Jk9gtOk8XbpW%|OSfltyPcNe58>Rsh&QPk<< z`*L^3SB_WxrgV3!s9Y|S&LJDV~n{i88~INVd;UCna9nx zu#fIuwp^8IEzYSpE)cftu4@*z2L2E_^hbpR$DJgQunOoty|*j$5f5~w39ARbbx-2?(v%x^nzE zZ-eA8J9f>fNVI{01^yJQYpvWweDh%s7nP@Axxe6cNn1+7N9y-RV7(xwOT%Ro@6{TP zIJcK>u4Ys&VpV`=$cA_xD7(#78i#iC4Y%%dtL9pY{PxJCHtE-CvNWfnH~G5PVn$s4 zDirKRn_-bZ>hTf?3kyFZ>iWlUb7Z`R1wMt}-)|fG{B1iaNnN(9_qv^61-5x^@(*J{ z^$>M8qlO-E5>6OQyH?6(ZArPT?;_H|U$B@?O+nFo=h0j9snLiNl*sqw!i%~hnuIJL ziKL~MreHdqPP+~8&>Gs_L{TGO- z>(x>+N!gSC>RU(nW_)#@TbtRH>%d1Z_mr!S;P(Q653n!e+ySqbqOANIj-;S#$*18SwPFCp|f7EAaGnS`gZ2Ek^Rc38%6>|e55zTd^5P$ zxwn4@16#iwi8-fmeW>(-eRK+cAp+Lth44L3V!A|9?ZFlN3FBn0GG_>^a24sYRG$Zi z#M`TLxV~l2BWaD`$)@-)dA5PUQeV4bLhp3m!bOJx;?>(d66ANOIe+B5!ug75ffs^N zvJmh&$L006lhON!GqT`|82h6r8*1*$Q(wV&&Ks}x!VKjQtSiz5!nFeVOOss+;CA0| zdIdc7w`?ns=7U8Cq4Kh=^jcQ*mhY$6&Z;2@^71iiOdrMuV5#AdG~dp)PaY+m8Ex!5 zZk=0(r9%Q5l?OvyICx=j31cobe(-k2<6mB9?>UZ{>t7M;^^9VoWqDL(b={JOWcuT1 z+~2|Zv~ed#**(Y0@^i;uE}H7yWe;6JoyE?)M;vZT!S24gY?lXs>`*?)4 zs(F!{9Tz(MB3@DQ^{y`vfTby~_uE{ev_p^Amk1kUFZw-^^Ji1`j5Y{!i7+n*;L0Q% z=-M82+c-t}tG_PyJ$jmB%9>mJg7ho6GtWP4 zx?TOwaIbC5%s{Nn!7Fam(r@dT3{~`$cP&VgYiR>UBMaxJ^mX=pR|lJYpM-@oe2}kJ zXfd-ZLiFIzkJfPzAAVt4K;%D)1MMAb=fW{Fb5FAdxzmEFNPtXXXfCmKaadcAVQZ6r zK)&G_tGebk`?7Ci<{Rg25A}&A`~BJk>uSs4hL>Z07fmdRBR7jC%g~wV45gs>d_!mf zyYhGLIo!E8p3HmuY&=!NR6(TLTq+Ijd~cmKFy`Jo={x@ee8?;)eNh>^MLh4g@l|wP z%(`j!l5pA^4Qa+Or+I9>iP6yG4&fyC84dxylBE~PbDyxjyjekhr7>Cna)%Lw)tsI= zCXY}N3Hedg@2A0NIl(wjq(M`rm}J6|l#@-aO^3S9EfFLFPppE6Oo&QDgFCxk3KpJ} zZcyZL+TDEBM}qs8=h^+zD3;r{U?07^*t;t&NwAwUl2x2uaisrv z+MZX<=5#^M$wwk#8@zmf_*7p?DA+LpiIQkK*D<7$I8g&vZ!XusfR}0pE}0(dj&Y zD*aLak$KYg)25@7o7a(rlug>OI5sba+ukpB9MG&_Z2wFj?y9P2g@Z&a=Pfz%r9`L;#3lKIKsAaOL-m;nsj`-LIV_yeeRws&DNvH;pt6iN6_QSO0l8|HW${ zTd6V5>kf1N@jsCeAQ_}Qu0tiGV#sqo0+08R^=68b;pLUNUF-Vu#ikvLTO?7`1?0T? zsF{f(B1mrfF(!MQN0_`1Jpgjz0(va&bTX`StRUtd=Zm!nDta zr#&QZb?&8J>KI6;CZaJ^D_e#+iG z&-(15J~y=?n4$@4|8++Zc+2m9J7U7%Y5Skx$^ksS>MZM@l7Tw&A-?D%B4LyC*Q)z@ z{BSLxgX7zR*Yyk8<89jqeR3Y{JDi4MV)MbwwZ6cq$T~ezVgcLF-y5F@od z$n9QKzB|F25vTQZQ2TIO5bW72%JR&hte5SGPd;-mI=@iqy-84IpMpmuRR7^C)h)4$ z;%KQj7ETRr2=AYk`BxI!V!63|`qu=(i}grQgyoml@drF$^St|VCV36Y`7P;q%3p+W zt#gT|C+s#11e;=K;hO3Txo+sdL)zBhy7-u~_KO>G5UIS-ST8auv61qzBL=!}#+&wB z4F1~%McbXV(TtG(^AN~%jxr+kV%2GJ4`zSJ2CHi{46^6u1YWQPs|@(19ySUaaIj?b zAHQE|ztC^be4%}6v@ygAw%V!+>IY`qxW?45(e>ik?oE0QB%D2mqM|QM??iYq&e=}v zZ6n$htuGBCkGK+0N<8=blUwn=%*13Mu5@@zKaIYRL~iwG?Rzq4V%TB*Q?uFR1b9e3 zE-!-^uWAAt_pfwW@3o$XR>X3=a?RRW5D*X!BHxa|P1W>ApZiS?KM~^rw+3FE+;-!K zGS=%DT31q7jbvhWwG)5uTMh>0X;ZT*!kINu^eBfi?QV(0Ht!7o)kUVz`O@b?@w@rk z|JgDeKAr&mbeL+nqW1GZk-D?OoQ}%h4*+Yv%-RL6Th&-HaCEE6AF^^&lkY>S)!Jo0 zsntlOCG@!v=;uoK3mwoj+}|IrGvZc=RqBoGI!d~J1F?tC6&5BWB`KvP!q9?r8u697 zpV6h*Ax)Q0+nG7+>oR;I-Ck@`>?ywAqfE)Wdy|uuS_Pg(tf-eMy?6@?$698!I)3dA z9Lxfa{|bKkZIM65V_zaFjVlr=EjNS+3cx7%)2%b39phteNj9(Ta)73BVBM_$clvY8 z#GhfyvQJ6Zhg^ro{0+b6=-IC|P#I?G1&?_W$gG$^j^^eIM|A=}wtcL}nk1Dst+l~6 zDzRh{9-5d5g)G$#v>(-%zjznkT&OPA$4=C!X*7l{JM#7N2yPzpFnUB`7Wt3w^^G*B z#L8885b`F(vVpu9pb*IX9t5sBFd)&g?banqwxe=+rjZnVucFsJbFr~SwPk)G_{8Pt z%3w(ib2@c-B++SoR3%>a;gL+=|KT3P#&#)bo|*jRLff{fGuS42$>q1nO`1Yo?YH&Y z$K?KYmn?4lcmLLt?}=JgQ3ML+JVN@b;lE4>te%oZvrstj?#K}RZLgX|c>Z7%@bC~k z^gs_y;^>_p2H7sv_XCWkop*~~G*2n@n?Ca_wy#RQsO_X@kLtg#K;sfLNY~dN`Zb20 z^iMO8@z6%Q(?l1;Bt3#H!G@0u{DuK=N)y&^>UBO&ih<^c?w!CzuX#YTA6Jdcq-k67 z(X?91on{uE(RxuOS@8tGC>Ep=rB?M-!X%-1ASGrqpgPcN6*Xe~)}3^2T~W{`dSpw7 zx2$^Cz1~*Y+uMl2#j>G8Ko;NVhG=v_xY2vfrK>8#6UjuQxPcc`)INCB?e#oAWGrLn zIicO8ZUwH``r)3&#JH|w8@Y`$YnyaYYqTdIz0Jb{+FJecOK40sUK94W46$tLK+4)P zkKehycPpF?Wr3!jA5 z#VLQbTdIbY4{O_&Az9^|Q5mZ>ynEw4xv z?^oXaNG9F*)AzhNF6;MfxXsDd!|-2RfKG-Y3AkPqR|nwaE*IMJ@eU4%!Y10!IVmA?bCSJO6@S7&CB({PRT!9=lNbJo*G=OgbjoYB{x zpMo$B4g})!3>)T1Y(ADVLO}44q4%mqzN7@zQPhl7;gyZ>3SkGe=va0`0>;F9LcfF@ z6nV{cb#RF?&kHE3Uo#9GWcgd=eoz~0W)#~)s3IH9t9RAF97PLy2nQCtY6}FgSE;_S z)cS(_jXW_L1Tr>8~k~3ou$%}s&|P$E|}=9F?s|fFuwDQNvj`)u`qDNBp+`BN1(V!qO(4`isGDnz zMu!bj`Gy`JrYNV*)ZT)L_?Z#r4yU=`R_uQet+|uxYxfaa=-44=%m2XZ2P((IiB&R* zA1p8B!khf5Lw^!Ae?z1Bm4d3$x12~1{l_GDEB_?uLUvociH$V+V$83jdy?i9*h%!Lp<`$jsV&*+;_>FloITG zo07@v8T@IyS^L#j@D7D3@_}g_-i#A=B$*l$n4OZHei*bSVivtUlMyPZRY276t1+3F z8TB-3Px#nG$IO^2#8aq-idX*y{t<4N!1xjs^>@Cfd{58NsWJ> zfH1KrH|xQDZ$Synbj|noqy^7hS0DzKLWVNPETck6rC_Kwa*jd2Gh>bp?95xB`CMIH zZE#OgMNu}+=PmxoUceId2PWrN;XqBAXT{@M71-IP({4ltD&g4b1|_4FWp3)TG+YkI_KvZ{ zSu4)V+6!`V4Z_Z&2Z)ix&q2e)|0`53`=xiF(Q!8pA`GGlI@GpSHYOUK!l?yURo9YA z?Bwh!jI5w?bXdl$aj7HORmR1Jh=bL97$~%g*9y4K1%&8*xaNMRw+6T&LPgGg;fn@f-KG9HrJ~v)mFCmjgCgj z_Y!cy;}_Nl{V=KFjlZ|P>dFn%st=q0`Vo&GvsEM%xDXX!Mp4f3xPjA56E)->-K=8t zE8>f0`p*)RLsg=<@!0Sk7VstANMsD<92M6ODl18Jaq{skB~}}ttVp~S;q~!V`Xyh5 zPa|!m?#4TXfxl}X85l>SWqzcG9xTGr$bXfKw_Jo+hlqqmlzL)73#@>IFrZjS~lj&Kr{!R;(hw%yZeJQnY5;5(l(5mlF#_#I@cWooaP9n1Ny+#)%QYP3 z$ziPaF^z|sqg&TYT@fx|Ci|r~)kHTw>MF-S;^&NI;R3A~{^5^4m%488sUnJ2OG5(x z(%l5*XrGSV9D@?l;XHF?I;voVI4#>%)%v5{){^B}lZmgAM#_E$fR$Fe(q6ldlZrFN zBB4wR4T2y8%E`NhNPp1y#~e5bmI_jFHNL|wUa4e4JJbySi0O=LIZ}x8Vgv`R@Xv<8 z;*cm7ysU^CC!#d-{hPGb1SlUd&nmEZG)6Hvq=gW#Xc*d z&?1@ukxtksY}cBeb)7rahW)z*IuJ5IJmi#vNf%{-kJsmNm3`BjNW0L_BC|PD=&nl9 zUsw?la*`{?jQWMUVWmC5dSGNLJik7+roRM6l_LVqX$qe(L^sw&ydi1Ou-T?%nXDtU zdqrjRB>2RiK}tKO@8**#`cXVq+Udo(?DXUsA-wllgN_%TJ(8`7E!3xgmKQ((4mOmgyqcy$Kn(UZW*X*`r{h|kH% zxp{ID6%vAEYirxw($bP(H=e>;G^D!*+px$G@VDEo7 zcQXeqaF18cr!L-gL2wvarZ!evE-o35l*pgbc;=N`*hN*(ovO%F_QkHVPrSM_3kC8OIXAW=Z?fbl5Q-! zNU?2mnyYn;QPZ2Us`3;)1Ov}{TD9&P?&DJJS0 z<$CAcJJ$EgQ|25py6v%LnEbvX&wS2-8>!N94nTIHc&YXjp11d>JXc&6Z?9Qzwr+up z+esJpza6}^P{W9a7OxFd=UJR1i?dB_Ws2VI*y4aqyv4W zGbzI`r{?$U@8WysZn$~KPR(Y|W=0t+o{pSFW-$IbxIdgw_G9Hl?xF!g+5H)zck7&@ zpv(c0w34I-xch8m3qM@zmYDTllernD?z?Xa*YcpN#no{ND`0VcRO1D?p)a z&5DO@9`EHpEzh>o!ji9s+@O9$ww^svrEHyvrH3go3%CoxYeMofzOhbSU#e$-lg*FJ z62pb!-TNQUsr>NXu==MNK4{Fx=DXOomyF=!b zAXV+orZot5-X83w@^0NCJ#)A;rj(xm?$R1fcjJ(dS8WxQ`%*mx4V|~{k)5Up$*n_) z-0`;90;C{!50AV4@|vv2BE9?T+7-hGUv|a`y!6NGoDf-Fy(}`8XH2yYSHa~B-#Q0b z0gINHi}}wm`aWG$F<)^QomApdVZA+4q%Ey&^8{txRo^IFK#85P-OBnaBUW}*8&vC` z)hyz!iGkVM6?3em3Z*RXq?tLml(+LWqlRPl{IaTncT675;Z}U%Ehw2gCWP7>xD0qmIU9Y*xD$SkYaMh_ zv2%}cy~Fx+?}7V@Q-tldW25&3rL|@8O8_nq*WSEfnpVAVVDviuWui1kMZ3EE>)J*i z*4}KXK8&s3LG0Okc~`P;;#7OsO3!TCh|D`@@ADO+w1%J1 z^bA)E92o9k2uA*9*M+9*^|OLDWxVg*@ycL*KxJKXwUVID6GdY#{8Ja^p5GN!TW zt3O=y|2QP-G3%Bc*9I^v6MP$9SF@*k_?q;iT`nI4W1H5Rf&@FaQXE<>vsHMHtVb%8 zIM5W-(}~7EI#PFP)EijM;`w+aqv6I)F^KVEdfES0zMb0DF}PLIc%!D7(qtE$`B^<+#7i4RSZl&7d@{x4K>!Q-8| zg+*>lOX}4gXnPlc61@pM3?!F9dG$B_C9SP&P@qm#Ss7<-ZOzTiZ36-chDN;74}+0} zMjk5|!6(pmgoD`s=rwQ-S{Z6_3zJ8KSBS!u>lIHhK_xg#=&4bb@L>8l$PzXFI$U$?Hu)4l6T$bPearX!7sKD zTEL0voYVlklYfhCzHR7@MirD_9Z`OEtco>V`L-8q23or&w?`0U?y=2+(x-eXoui%| z52+7<9Ftq8(ZsfHHyz>S9+~-&ds-q7^gLhBQ7Zx28PEpnaAt5`GHY1o~JQ_^k!j8^>2_5 zKlf%KU&K@P-gG`bhppCVs;qE*e(l6;W<`D>=ocau%R4z3ZY-~==5UIal@k679E=mY zpop?31kk9=7AFxjoVR1rDg2I;EahG<-XCA@``$u}5qj$ED3@1;%&+$)vD82J02VfU9?i6fV1c5#f{gmsg+52NTEGnd zI+&>X48FiNUw$94iU*DxS;2iU$YEi+;|%7pIdl7(cOl{!eU;u#&GZ9#Q`Fyj4m^bA ze^a0cGp-+rt;AFI{+rSLH;h2u&iv<>V`1x=r;0D^M#8bNm@dw-xE)^P*{ikD?d<}W zmzODh_)PEm=xVurlZA=XHUNM=%+@=DP}#cpBQ~T zQ)cd7{IB?ZV_bh~n`o*vhndRTdGN|^e3xf7Z|!f*(q)U7)aZ(;&CV*+TafzPWT6At z6}`VZH1Lsw2C6pb3X(;E4F3`*n4p2mQ(=xTaRmj|s74=95KtqWP|&6OE<0-3u6UIs z2I9Cr2d)HGk!eblZ0+CC*|zjOYj?%x=kwRWb~ z3BoR9)t&IodCC0Eo?8>{KrXkf?Gvdbz3WhKG~h~4OCZ+dUcQ1rWO|XrRQrpCk0x(s z7T9oqN{h8|WyM}J1T%w)i}Oe)RefJaclzr35O)wmUFf&^7#UF->2rh5P&Yk!9cBh8 zEysHswl9Pb0rnpSHEWkm;q>h8On{FgVY&EbZJC9WwoO+P}u?xQ0yStQzPe8vg*xrg+oR zRxYj)ff@NzZQL&cn=A4Xr9x%oqx!oyXq*ju7q`yEr^Q6cA$_ez*$y5+bYLed${8-6 z|4g^hA&y%}$HY?lHqXlvtJV>*=D`wt^MWhhb6Lc%#$Njd(F7DvoH0K$~BR zBL;*$7~Ms${b5xFj-V?PD|iD=erK1JFo!Pv>s`nApLV1$y*A9Gb~vnxugm12okX8q zSSilFQ$e?^89$E}!oB*%fLV?qzPOC3;~c)%APX7G>B8hl<)~gS{gSFo^!%M4{en6> zHFFG76xhwLUErlLFPYM72s4mVh`$yBXUX3F=Ql{iZKwc*;i`Om31D4lwWWoGv9P!d+}Yi&IZXmJgC^O_`5pz?v)r(iBQIl2fsu^ImURn-XA?fR;{I4G-oDw7jtkM-lFQOh~s!s?7mxvtM>Xn_s6m-6MMqg zrDi9BE?C9aE=8YlYd16sT{~GKOZahZg=ueh!mU?Penwn%iJ?V)Jw7wChWdzRRk2eY zV;eK5twq3nrWh%sgg?+WhZ)`r-&wnMDWI?Z%<0UJtm{5v4vaR4Q5u^bv{Zc(7R1Yf!AKL zqOt8R+<4_Yf{^Ft&T7z14KDY$SW%@+rY9Hd!2;1Hqz9T-PH}EYOcbt7xa^dxvQ9r&K3f zz3cY=;G-YOGT&TXkJ|B2WoP5sr2>B#c~Qj~+n}E`v!8svr1t0yd3=xyB$VGd*kgSm zH`aaraLR6@{JzVUG1_R)m}=ZD$&9iwCtQDM+1xk4?jh@D&dF`E`DNMc!DkWv(V)SX z!^u?a-1@hWIWUE_&mALw;Zh9n?oPa-sVwAWUu&RYt{VG&E>?8eJ)j~J-5%+J_>6r= zoz*BA^zj7~LpJM`Hu180cx6bR6J)^}% zk-mfYXBAgW*Y$G3jhW~k`|YNBk~XxM@;aWTJIu!wbM}j+dwpOBESUpmeFA5IKEIHG zabDj<2a;gBzbPrk1Zw#H7u)aOzZcO4LmNi_C)g$~_1fWPoXwTj>6Pn{5D^D;hZ9lVL|(gl4WX)Txt{2ZeoRhQ^gJ_IX(yhFLLZ_( zkbNvWDt*)Dw~K3<1Q$~mAC>WXEo10PqmgwW0o*o@X`tbDGfA^&nlO7+3cjErIqM3H zu>YFx6aMprkm^~NUb!0@GO55S)EKVGDfGYhJ6Bd$!8hfp(e+2^J5l^juC9B}4_6!j(kK>guX&&Di2qJ9c63uTbuO8M-gYV!PvTx5QznJFn}-9VrXy!&~il4kW`>~TR`zeL=2-V!*A@>D2EA%h(~s~t!f;?XXpdw-*@>@ z-2HF=hzif}_IWSi(o$fVZE*RCGMjOK3D?Z^we?dmLKzl`CHsVG-^;Sh_Wbm%x@RWO zt5LcIq7G;O;oIxWV`HjBXw_%I|G8(q**d_?#8iMN3NgwQH%M2PkOEa5%HW#-*qn3d zeuILRT6T{BgtmWG2Iy*aK%r#-atbViHb>RsT{h&Rs=2T9+fUFyxlpK&@oK3{Pj`8p zZb5G(sJ!B6->^~6b?I6lkqzMjjW4i|;QgY3YHJ0dzD8BYKC^BvMQpG{{<$&$C^P{J zt`Oj?ifV)=1wzrYj^#Q9gAMOz|0TuJB6Pt2;sVqz>DzutyO+@dYj4tF+%7RqTru|4 zsU{{^)7$ZDrmM)H$M3suqB@*Eo@I&POj$OVH-!CmS(byIu$CB4vPQ9+aSXy5Cma$c z5U1d7!r?p)MlBn*!N1ws#|$2LwW9>El=0BJ3Q}Dfqdu59{I$o0SaShZ)TS*bPf%BB z+zvxJ2lYbSHO}13?dEP`K>e?me@Vj^(cjathb?HdZ$qe-uHBBWnr`JPF0G!{WTwJ< zRn0jh35?9#Ei-h}!I*bi*_W*P@@o0v&@}G^SS+s9W>7u=_**tvWOlqk#D3kLAt$YQ zyuLZPT;!uRv@*C)!!gCCpzbtjZ-W#~0O62tpj9NmQH9ABBc{}{t=Yb<6d3pE>l?;? zAyZ|o3C__5a#2s!UH+xTf3&7EG{nelZO8$Ox9-Vag0m>AR%#_uq?MkLr{{-qdcQAp zL2E5-m<118H3{hj{>F@9z-sDiW~wW+C8p~9Dlv0p39f_&H5wSC3tRSyi)>4S70AX9jT zoM4nz-7ul&Jvpi8pR!$Ra9FmoIMc9R%&QR7oniCt(R!C>WZtAz5j0cL?v-G1Z@^7b zGXACSo{kNjkfH6(H1|tdFw6YEiqUsyj`u&5jM^2TC8JF*ni==NI{m^)v2qHdjXaKe zE$e)$i_fCS2&i=!{_OVeErOjgNlKX)I+0A) z-W~~Doj^bZ^-8sf`Ex|O>Oa;-D(t#Vcnhw!!KpTOKhlXK+xmBIvTnkM>!y2NWxJV_mp*5Q(Z>N#3BNiRwXqnM_;-p9tS059%`B6xa z4551@8klUtd^3rXuIs2TEefC`QYyS1MpjoR~z22&N?x*TiUH4~w|E*tvo4lUhK9xwpG)H*+ z0}|xIpcP*M`|FrKqs!u$#oX+CQXSjUlv(|lHTFDsaZ-HL^Q;*ht#ZAu!EuKTlCC}O z(x_-j4pItoA-`_U*sU7U7cdRfIL zD&9XWguIs?*frnH|TiY@m@?U1lduO214Kz|pwhCI-=I zGyG1frT>e3*6_xvipDKQO^Ng!QJgDH(jbfo>lhL^3ol{Ls^bY|(TKJ$Wmv$~Plm&d zNav?%#+E8bA|Ij_NY&99b!1s=8FWyNx?X z&FKZ$K)X72R?7KKR%~(mQk!36Sk*{~Ka%UmHRyB?D_M^%gN~mC_W}sw!*^Md9+3+@ zHQ?hJsa~lXyX#qjrJNo6@|sCvrl!>W`aCGZ8&;ZCh^+0-U>d7xV(}bVQseZPR!C*s zIvW5K-}pS0rU_=4vE{)FF$vT$RQhv;i&nBVxN*Vc>V=_F&ODZ=(k%4ys){MM>agSC z;ZnjQ+b9*7g5on=9DqNpwf@%Fn3>qx-3~uo#?jM@YRbJsskclt)e@j2Om1?W#1?gh;ta-d&dgKi=#(Q=H@O2sB@DR^K$)& zd@tc0v|qmt+!#eX-bW)-aZOr_FC{GmYiI54BZ?^ zk|rkoIaDp~cbq!3nW6q8dg>0a4xfweEd?#&)92iQ(UsS?Bn@4k%`2FR`)z`;50&Gd z72{6G*D3e=4q6NdVt>!B`D@5cz@JGtpEm!3qyPCZL*OQ-z)xXo(+gvyHN62Eq{ z6OZ~mgbs{=WYVbkc<_0~(GNH~=~Q2f44D+_vyPW^UeAMf?)a27W!XJTglR*3Dk_6s z39Lz@#|?#7yihgsX9jha%MD||cU9J;%jVIKK&NZ%UH_HpF(6Nsbt3HrggMa4P%F!8 zl^7So_ARix`KBQR--u>D%G*Hmh?!*}*oPvkEuZ)X~08;v`>L&Wi`qmQ?MbN-MUt zwe;@dRqn@G;?B1r151Dh9qLK-)txUuZ!(!b3INv*VlMHpaDA*M(3IYNnXZ9exgNql zX>?%(tUaUKWI}E2UCsi$eRY;CTNFI#9oC9BB6EFel1qZ?udT1V6kGImcen5l;k~D9 zsL#1aPPi`cqIVliOI-bPKfq4(1$(tQ^S6?cFN`f}_6lJNt=x9mRJUF;^|HUE5G%1w zEGzfdj1%lr^LrzLubq3`>eHz`PrRU}ka33zPGGs4IYts9!!g?#t-9nJ^ZIuG7)zLT z6`K0e@Wy#tU5X-f)sypF0Vph}LT0IHebe)~$PWIxX6qMFB28XVw(U?ONk^ z0@F8iTsAD#o@<;(8E+&_9%p*5r_`SN3UD7-pu3o_QVNxA1om47gjEQt?KU;K+FiEo zf~_P%NQ}SpbCttbYsxPA((8F_OW*Np2uQ!8x@Dtv3}}t3Q>tUW!Ex7lkdTni#7&>- zGZiu!-TD0h-M`Tj=|5N7T&-M3SFbF5Pi~w6>e>3d>Gd0S8Fmq8kaBu{D>n`z$>4?G-zEz${=}QMC==cX5S1BX#=D79c}6QD?){QH_gk=zs7MpuH%8h3 z`sB*>-vkipjOnb8>)X#Rt5N_-YKrN%6s2%N0@pWTK6?(mtn^%uyGuIqwpym-sHb_? znpxl6XK3xEb=yHvw>BVtY+Mrdalxv40I4tXaAI8kGoe!R+K%ih3PHKeRq8#xo6B28 z%|zYIMOU^njO~`GSKL18)43N@-tR5^^<9efSG=Za;>-0+?F=sjyYeK+_<`annyOc%;rdsOG_=%~G{D#9#APw#+qme-nr+-RlSO}K zw&Yz4qC6Z1s}&jF)?X$FG%qK8tUM35b+#{4QB2okw1ywg_m+X@B-?N2Ra{kibMp&# zl_*4jD^8-8ZE*&=?X|)-$bEV%KwAazUUG$r+f#A#!;t}3grsuSX7+N{DJxMMNKO6e zn~A2Mn+2uY?*qynh7zOU1UKk)0)9SkC|4e$6>D~XfByr=XuZq*(q{36+cr2;P; zNzbhS)n7Gh*Iyv=@7Zd9PgVP;ha2j>c^zPEIS3SZ1CCQBP1BA@LM#Fl{~@k{Pg?;? zge^qG>R#TiZLgKJpOdgCVw8EZ|9aDIHwya9HMUK}kR|@kL<4rImL6?26EkY&@Ke+o z5gihTT`p85LODss;vl!0Q<>=6pr#%9C6Od$LOGoE$X&j_Ih$?}7fj^{l})uxFFbanx9+Cd zqmlYv3DaWz`+~e=;X9uLsq>;F`cX5+(Zhb8Bns&7HRH1cq>CW{ZqY z=P^ep#U6L6oQ|g7*{RUT)2qdS)N2v(f|wKmht4yRSLG`p4yO!X6bLQb<+(@k?2jRk zPjVOZ5o<(#^MGr3VrRSyll8i5T3gb0QOfMK2zdtUmwiqZOzLP*dBIPN{P#0Uq&JhQ zeS0POCsm78ib-lqf-*Uo)CG}EpAoUb&r6FcXq$precGymK&-c^%g`{-{L+hs#h!T#IPwq7ZejnK1Sf*)-ugF zL_xk<%15Yc?l&KB%y#=|MB$SLyY zb_;dA1ddE?r4D5heNRjpLAEoOvzTNS1N}@;^7sW{?|=0eM2-wYfK`uI7ulQG^#Yh55_lEGniJ{;8^M&9+=ZK{}p($gBHAC2JcCH zR9Rl}wXDe^w_*TT{^#ZS=4trR(O00VUo`$4n|}U+h}Mq}PSQ>vg-z!biPRI|=$KjJ z4Hn(tP)-T#EVJvooiUy1@>G#=I(FrAXQ92IIc_gUrn)*76>2lDq<0k@u{ox>L$pi# z?CzvyruEJbNz>MU3W4aYg+Z#SwohhrmO|}!WKTAWBaftoxRq>peQ5q;i?Wp#WrX*W z{6%Esd`l>mQIyTz`BB40y(_Jr6Lq0&7d2&19#~`L`erKwg?mpi2`au$zVtW@m~v_{ zqIeJ8@9Wjd4WVjhf7Iruy`R&+qN2(+W#`fSrj7TL9hHXGP&IroFS3cWeOnR#=UiVk zscudnIn$seci#tjH;yVDK+LkTO3zsn8`HHXW>srbI$77c*ipr= zCEOl}MYdG6pTaI6JpEZWMa(7Lb~L50Cs{}6;UQWDtI+wh;my5tx=;#ySK5{yys=X( zR{EP9fe7WDI-VQ8J;z5JOO2w>gwL1KwFE;C*D108V0MA+l1#XU^AUN*{(E1nkna;L$;DT1D^!~+wP`REXgMA zDJx7@UDHaXfA{xRpJW+F&Gpy3Fbb&qkBb(I8ku8DO5~nE;$+IATVegT0?i}IVYrpF z8C4Zwi!<|e;T*f?M!cmWYSi}GB7bL)+!Pkg=EPW4-9$ZjiqsGZX$qR8hB($Kfo11B zAG1H1sB;a-5Q}>H;ytFM>IVH)iaJW<;%t{9M(~}e1NX00l~b4~3lNDt6H|6BVKZfX z;2VhF*)Rf~%!*7+v4(p|qwXEV(;~Yr&QbRCCOBRv1|k|8On}GAvfvog>u#=mucd=c z=M}=SPLft!931TdWg=;EQ(t(`jj9gERWN66d$kbEm!NOir0jGk!S|S^Yw}Eso0w3f z7mhP#P3a{WPv82OVH}vx=4X&#JkD}I^t9kQUk$)iMvT29c-5fB$F*`C|RSAEOB zcwD_|elXiHBDg7cdD^wCd75LK4lAblsxN7q8tONM@Y%$K9G8=O(Tp>oI4d@+g+6RrB-=snOu zFHrM{lmW8u$`OAF`tcJxo+}84cjJy}M|q-GDM!8DQq4AW^Wk!Po9)h(r(x9^1{QYm z@K+j+-Rp~Z6WdW2y{qaWQh*=A_CGw6IKStZqU}0)tBnC za7`LOz?uiYP`=C7YnRGoJfG~A3Z4Dsp!nJsVsgH@4mVNm%ygB_Ti1!6@z#@0w??r1 zV#h0IA=C~giBU`26&0yAmy zj7}`-iB!2VGY7}O!~_~$B4TvE|NL=!12j0phw@#SGOs(hb-!`_d=aDWpQoQh6n#QYd^w?)~OSYRCMgu=^zMi7Au!d9y)?2rNPUP^hBT~aayq8 z&6wZLX4ZSOu5Cm?Z^DcDAdnQ~U-%&D9H+$&F;BGzqUjej5G>|DAp9>Ov0pMmJFhbmHkD_c(p$tfZr`xv?li}il{)YQza`2~0VeTAQw`ey9;C$iX z(4tG+N=G2+QABtVmzE>SiqpQn`RltW%#8uAc{)y=b*>`ZrZx|6-O2vEHKl(W{!POy zM23n78t}m3*)IskIQ_0-QB&f!_&}MgQQ%8J(jZ+wh3q8j_W*AQMRm{%#k3cZz%1vbNM)%{ z4>ihct2&VesWbcaI?jN6IVreN zVU|JB?-EY^8ZXcUwI4@E6?vYrz{-E}qAisoS1y;n2ec~>TPhTCbHTSxGUOA+3^ULXu= zYY1p%sVy*Sagtw^T4~l#vz)k|%wSm-lwhjkr&RB!GE9o8eL{MTH?-}WSQ4n=C5{Va zEWP?^DPhSb5%j84gopfw^nJ?J@g&SCXppX2k2<+w)sfAgYP_Sl!X}csHVD^^kh!5? zOQ+j{cvh!~3ju_nEODofFw%yNwo%FuR9+eB{nDVMd}r=yQ(w-)5NcZZ0D>cT^(G~D z$r_I7=bYqnVI%7<7}A?<2OPe8Hc7j%8NKEIQSc)DAyWZ-(^)?jL^n@YT|O0FHgflA z-kH)MRvKy)FY#zb>1T zWA3iwlf6oGYX!bp6Nj1}{o7CF5;j?Kf$jp0awW?)LH?I))(szbiCivkovbKpb=kwb zwXa=NCmq*QZ=oP$lJp6xZ&cy_xW@nwwp|6Q)Sjiv)`ZsEHgCl1U$i*Ub-$+6>)b~6 zDeNzT=RQx*S9ArO*VVe+pt=WmYZOx<<97#OK8&!FcGuK7QF2?dS+e1?`U3CgU{X#4 zUKzGhwHGZHEMrO_)^7%}UJ&Yv`Iim=9|CyC)>WL^;5|;YK{u2xGaN_JQH11+**7T+`tiN^$qW7(x^x*|Y2m98e-*p_(Nn`6D&YgNa0RQupeh>eFw2EW*BK(^DA+>$mvA$|ue6J(vyNm6h8p!>`gG3F{_j@AMzcLJGEfal_tX@ya_`yCvUypuaFnPl*`Czi{eP{lM^>HB< z@Gu_jr%>-qk6ia_0sx%EIJO?7%J^j8MDL^kTogzh?=b~gXAEL}#QMRaq|W^MrX^T4 zyBJw^`ZLt|{;fy1jQN5iN!1-X-HR|@+TBBDi(DXsCvBnicQstN{fSo3$u=~pcP@_9JtpH|}Ab2xXCHTkB0Mvf+kT zqU~h=>9c`v{(v5mzSN2_JGhDM1~vS-jS<#`aqi)yj%O3}IIzmtH^bBtdnF6%PK2L} zV&9MYdLk1Qy2jIwK`?(omOBwR5R=Vz(%H#=jUjsc!q1%j3AHt$tKc+Fo$YG%1EZ&# zRoT|(E-Tf$57=3KPwkXUy+A6XIF%$BFQrlt)c4tt(?-j%8-IdgE8P;kppjY(v3s7>6(K3eNTTOG*1N9~M)8O{6-_D0qYLB`q!Y-lN)VhmL8#eMwhxcgzYipJ9$vOkx_&_-GB(jev>C4ZQtI}>d^1z+5Druhj zsv)Nv{D?~Xh@%-%gO>F^geX!+KEdO9y;<7;P%72`kbu2CSNe#eVS&q|8ylav($B(B zts5qkCg9g^1JLvdz{y~%cC<+DH*m@)U!3En^Z%+Qnz$*+X$GO%Z9N0-Aoo z8}8%#e+@2OGd~dty>tcAw3u%Jt+u(=(L0(VElYX#*5^h&;!*AUxz?{b znzZUWpo>=PW1M{NoB)Op9go;3=S`@?c+7iF_i~Tl#&Hbl6f|_f@t3OI?L=lSY2J39 z6!!69+lz+)XMH^N@IA*ZT{Ce@H<13Ci_Mz5qhAK}0kq4|{IWc!dS-AA2)f%aUF+?0 zG9Ixw+lhfD-VWGQc|l7+MTk!e$my#1*OpWd`AWF?wLBe`t`Jtr>cKw8TKtu*yN4ljpXHRyy&cabGP5# zmNoubb{xfaoZ6;pf35e$?Od|O3n3)6Uj_8|-rK6?Qs%UE#I4YeJql{fxP)kFta@|sK1qSFQ|(Xid5;w6kIDN0r(>a*vmx4WoRReDWhSTI#k!*Src zzQ?{%n9U0-e~D!lusq5nlXFbP`vr?FHPR(xSzu|`l`60yXvAln0YT$>hMWOgcg|`> zqc-8iq^&gT5)fmjLnkw5DaZuapTTp^PTHf}t|tJY->4 zI|SJ;f{n{oaaZm)*i{pdc06Ij2~Al;vM&LL(vGj_SxO4H>_ob-M2QQcnQ&J}FPcSArxyG0hou^0ibi zADqqa1qG#wC<>Q*4P}gmPTuFfoxkev^xPS&?=OZ zxTVerO*P)l6XU}1pmi3-uIg2rCUkwizfL2`NZXn@f9?@9q@i+QfZTyC#tV!d1+v?z zdyrbx^Yy;!KsJQ`rto+ioCc+G-`(Ug(;2LyX5>87tLZ-DCRjb&ageaNaf0NW>47mL zM-;@lCjHEwuTWmh$6B_NMYYco{8wJ{| z3-!IO>pAImmsM7u>Jak0?Ktqb_Q&aJ_O;4-L67Myy?JW!k1%VEU)?CUT+a48;v|;o zb_)T&EnDz-f@*4S{Kp#JUC+s18BQvM=qU~-&|br|ae8~cyu0{!HK|~eprRVd;Sm0> zT2}g2Hvnxqet1`~az1y`RIXUDNU@}d$YolZ{XK{mx&Yjb$@u!WV}@CG)B*jsWYuDU zJ9rnVW8Z%yjsH^lZfo`GzQ?j@%TeGCH&2^8$uTR0HV^-gaS(i3O;jGbARhA@bwKM* zlfbwzZB675-{LqoN5{`K0VHcpB35-|Bow4<_MX46jv{{+6Qq}q5%j<{Sa@l1I7bbs?Xd0V#YQhHUVL4!t=cqj2&95&@yY!o(?~iwL zj82)SAe-<+{z{fCj;=}+q>ah z!6PJ^7k2l6g+vbOd8bcaat1R#>4X)FMUIj9OJLo^>tLVWFkw#k{BRnnm*PWVknb7Y zSZq(%j%lendz3Y7M!@4pCMK3R6>>FuUX{SKxahnZ5@PIx?3E}%HgKge`mwLnvT*EdYzP+7BaRx{hkHYYsrUu<$!UNWp z2?LhG=UedHap&&)i;Y`%yW88T<>lbv)iy$s_V=f{lLzlk@if0ZhUK z?u)f;46ptgFY=pQlM=F^ONGkMqs)|U1Xu9UV&i>WB?)`69;`w56~$?^qQ8r3|By&k z_Ks>(`<%m1vy%0Cb?TI30R>mdI5}WihDp-sx{Gw1W+1?y`Y{)4{*jJL=9XbYIk(Th zAACVXdG}ptbl5#(GI}zCwHOoM(UIxK(x1}C#_1XIlzm}4ps84eu=xtFuNBf9aK)t3 zM*ahaocQw8f>2<%bk?%a0Z3mR6h7yOR6G_Ff8sN+EPlM`EsLrBdGgpU#b4oj`*Xf87sn<2p2K)ySs&rKsyKq{sj~<{^hZl2 zh#or4THYkldlNJ^yOiC9og^c75K6C!w(L}np*{t(VLSq+b_>H^FFA0YIhm+3jIx-=$SFit zvqP*mhqG;zijzojb=fbBz-XC4E|aByV~{Ce28l)EDP+M(#9ggA^a!*^Y_sv2 zesc+yb^ybb03{dc-8U=gUmAj5s5Uw>T3R0xHnzK#qkd4b#T!uCDWY#<8xGSt*@I6T7c6xxbC!_J^g z++imzW;w<(LfyGeoVX5-Oba~(`pZ6U7Y#{TNa-b5`<&gOG!e-3l|}|J_GCHSO&{Y~ z^n2Z)numr)*LRm14AJ2fZ`-Rey3i9lTIJBc(3HMq1Ui(e;uYdPcitJ}echQ9!}iIU zR24Z46*QNS5@_y{q5GyzggN)V&9>|NH>3A%W@vDUq-yc1)Sgae3XNa}D?xP?_BSM) z+mgyk0)+-9AgzDQC~(d&J%pIbDh`Yz=Wr{FY^h}d)0gTmxj16E3+DL?^US*m{w%wg zaqt}^QF5WPDd6;0P$bJrgHX8nSXC_syCeY`;i5o9Z60k< zINebIe$M{Ldqq1K7Jn}E&j}$^==zRnD*ahawn0SQP_a2BrWi?9C%M-nocjB#0wYyz zS{z_M2h*209+@vvfs|U;NbgKNHw=X_(jE$S%d}V@OB@bAOMwM930b*^qN|eItAV@) z^IrAj-WXcnuyTKA1Xm9Fk3W)+5jO^^LrW`0knB2srG2pw!m4$Fuu9`f77F5b z6vQrZwhxI*LvT*(4(jk;ma&T!IzdwO*C?r8UOo(|T~D*h78ur)g%tHW26l!yru72} zxuM=4hyDsJ@C$ymp)xBQVY0jWHIsqCoHgt2dF+1)<0#~H)70^^)<+mImSH0YXako{ zLWI+`JDC%Cv@`}GQwY=g?R`;Sns%w8&ybJyb`NJLB9FQOLX8tP=kzK&&3N#b^Ja&b zgnil7vuNc{%6276Ro@KGfih0;>b78J?NbNVs=Nw>C9^k~PtcGC`f_jc=*PO(S`wAj z%~mZ7s9wIMj_Ad?KE6quZ{J~UaX6mw3YGosu@Xx4IGYLa6 zWVnhOh-0*;_*Lr6mr9Mz{byr}0!Dcf%o5VOSa*dem4>8;rofsn+p#E`NVyawFiiwr zuKPIRY$*0m*C;_-Tay+mNVi&sV(j5=BFJlPL{Fi5){3*)Sgqfp=Z-U~RBzo|O>bdt z;v}#!tHnib2=@=2`W^gXHa556iTSy1@1Hi!;SCioJMYRiE>$Url+1=K`L-sK*AKPhg(> z=vh^yG;Aq}g^?mjLUK&^V1j>bVa1ooKU~fbbVf>ZnV3#^>MT`^`0CHm7xM#X{g_Xy z8`_%UKdCu*uhRV1DK8C%mtac`-k%3ZzkhtLHNd^Zs&#sH40m}9P`o3+xlgQ>q2y>XKxNj zJ>ZQ2PloqniqS(Rxf)#y;>N~gxMVX81oFEXMhlK1r^zQ~OTLcFJyX=~RT#hQ%KQVM ze5!4N=cA?f_s2p^=m6|kb|2AmUsKgjS}*$LyWiBuFfrRNG){MA3&bZScgChaigyGPQmvGA>Qd@SV25SG z=~*1?2jB^LscUqHu@GlDm#eU_71ZQLh^XFbJu4mdbYc9OUB^es$SzGc-0NL+&H=S(;oc394LqHISJ9e<5!aG+DoW(Nb_*cwct-4g4zUM|%dmb~J1qACbY7 zCAwoAGCOQ~CNg?r-sa09$xYuEV~V36&>7j+H)&1`d9t4;y%NG1!^M7FD00XE1OX@d zd$_*7)?Dt2BaKk)YCHCg6UVovEO?4km{dxR`&$L6)(CGNOW@QpWLPSnl*Eh(UOeKh z`%~DLSW}!Vo%EiUUx+tpyxk`IJVi>{Jm$QYeINHITn`S@cBHTLwhWNdTxzcu-7vvd zDE+cxc1xYS3FcW1L`8Mk>ozJ;{O_v`k#KgBd=QlEE*|G?jevE zS9DMqi#!)6$4DK~55hVZD3{_A5Ez=8!X*v|_HTC{-^#4`f`ubr0c*25buh4XZ{@>D zlYn-dBJKvuP7|gqrgd$><}7$E+Ld6>p1wLlK(2Z@im}SZ^%8wx&V^#>?13ZKjCtKV z@DD}cM$%aEkj?9!j%1fxwQX$seJ|d95eP(^mUk5hs&tYO-^D##2iE`!no%e6FO%Kq zY2eg9dBx$&pRHj3UD5LSKN;z>9>^arbozhkjD8dxd6#$%F6Rg{e6x^1%#P^b8=b7X zb6%%Y$B%?gltz~*c_{;Cn^f=L^2ooUPKZ~!x&QH80&~*A;}IPTBJT}!hQI>$w|jOid_Def0TvA{|r3v49pC9e`>3C=kj#!l?YVr{sEKDuE$Kw z`L}O2Q;3Vz&V~SIb3`@;*3bA3E(>1=VZdC=4`D-3^2{eyKbX$EHnKlOKd1tHP&6H- zT)zTL%`&PY=g|1|Qrq5q;g?;XD2T=v`NjjRh`zP}y4XUipWv6_7~@6<%secP<((J6 zc!h*DFKjflRD?F~kE`ZZfW7y=@Ss4+LcG#EKVF&74ECXie^#cDfqo%O$zrIO{B*&N#TMeNW^0h_Lf-sM0fWgz7pg}nK+!aU#b^+^!6`n5c zU=}Fo%p!ov9h*wzLdI~x3mnFVn3V&2j182O+sA_W?PGi9+$MtASy!trKc*LRk3SYo zrP`>J`a%U&1?fBzM3M?x1@F#*UpkRsTj~$yy&FOEzM`WkL>Ht?{r$5JWpwrRk;)3( zx>nJ|S~pQXoKseU6>fd?^*ng+PW4!DsjUYQ1I(QBxj z7sFgpPCBEI@OECwUF{`~zxIJ=1_#vEe5b^ft6W6o9zOKYS!8-=O1LW{cZZ@c&%>~d zw>DR*oR`Ew*n(fdZA8hVsO5_jszG&|JshX{Avz5|168av=Y3Mo_j zu*y=5V!G(QjS=xVLbXQzQk#?0KShx-$}BD2;Ty&q*>hS^cqH;&w79QUueZ|N*ML$5 z##q($zbrSoRbG8NQ{C4fQUwlUxkA(}v;C%SR9iJc~7;Ro?7>jTlP3N)SFi2zYlpyAysQa+AxkDf9@;E+=M{}=azvDo$ zv9k@mJOC`~v}CK<>wK-%s^6ClvFJvE8+Vt0w#ay2w=h|KbVgj&c1~u##xod95AqYD zCekY<1J5AbeXXFcdA$X?8qKE{-Njcuv$yK5_vdN=#OLQT_acGod-44>hfll8>-8>~ zg@!svF7qw^qsH48s3RSP1gojiLiIz?WsE2 zs}4qp`}qUbLAbN6tSv99C=~_vZ-xU!$_KrVoLdC6# zoac%ceLp%DrDlbe-Pj-bsMe~k>@Op4(%>CehMrNFn^9W&3^?ghsMa=2dmw8s^)f40 zWzR$4>mArsF6DaBTv{(QEYDk{E+gCbMB|Zf>Sr%cnEM}xqSw2OYc9te@Wq-5Wb@JH zf8t&w?sU)b)WMIuPjbS)$0{cSC7)j!nBWQ1tHRNq8eO=ot4o(as(Nu-Oap|4R4A-g z&uw|`WHMg+G27}(*{{kqbPW5e`7a&{9GUb{sulS3V~&~QP!x!!!)(9K5HgT|agoURPbUQu|`kyzDwN&cKk zn^o`@+#(03yHjCO{;?bZ5CCSnKhZFb1`nMXlNFMgJUWX&9w2Pg>emH!x3kB7Rcp(f z5zV7z1`YvGl>w6;(2i1L=EXBm;Gf!fLh4Zt%NeXG3G8=~9GO+0Pc zl<+hVZ9W*6!HPJqGS?pkq;d~2u`0G(0ovFr=QlYnKmYN=EonlF^ZfFuGuoB|)|B7T zM@9Ba&6Oni6q7Y+>o!@2$0c+VEQ~4t6H{e-;>f&>8j8Y~wZmEx0R#j} zj`;U)iUsZY@o{E=(UM*i6durLV$L*%iLpuEXIE?t9ra`>(N~L>#iNeNS4jF(n}(fS zp7mwqLGh7rr)g{6u9%LX-QmHh*QgRLo2x==*r+-7$I<7+7H+`2+JU;c>!utxG>2Vn z+u$|q>pdT?yxL{t`BmJxH}dLX^uu{5|CLtA@eooG59;;zwapEeM(#D;+ev$r(e_M0 z4NY(Djkk9DIWCorR%bLTgwChi6+X80wH~w6$g;(!kN1H08+1b%C%Y7~Ae*y=>FBYB z2q%8mu&rfd-%}IS`qTc+fQ6mi7oo-06%nS=OwWi6!to2);lXJ1Gf{Me)^YIxx=!QNqi=BFJ{6V%Z2&swa+ns+If8WP+vS-Gy`KT7D_UA+!KhEZj8=eg_sJ#-T zHlmgkqJ6ro1F&IVB`g$A<44_Qkt{V!+Q+b?lW=M!ojuuZM4Ajv3wMlbd#0c|c&|+8QE~d(MHw z1%Z~^FEGb_lcybV44IFEZ{We* zW+AO4f$wV+Ihw|p@-|pB#hGb%{`9?48o{!qj@~Q9@`^Oe%Y2-BSep50pHu6zBp}F^ zP~B)w$^GK>S9cGi(8G{vDRq~A^+Q|Ok!kqZj~UEIB84@_Kv<4mu&(~KB>b!_ zqwhg;3!bsEE8E|qGcCfj?y_hVpt;EFO{ir3+yYi-6&7Y|gc;XY=pHsDt& zR;Ki>C1UnSDoZZ(ou+1Re+? zxnkU=3(oY+%&oLx0sSpQn3JyZSqye#Xk-||h61%iPO?(Cv2f&<`Nee2o2Y5Ax~N}y z=W$rr7%!DzX>G^)H{&F%!BQ%|>FDZr*B;~l-p%vk{C6i$8TK^QT!D&RZFRs2y#1rS zDYp~4!koKb=3Z*D=vw@Gc>^7iogSKg-1d(~LPu_%FC#hwG_-BSFNfb8LkCyT3SsK7 zc>Qls%|d5Ir-A>1n$Di$6j*8@K_#oTqHZno#K$!bi_}Q!>DD%omPd?&C{uO480v_n zAowy?as_%>cR8TwVdL_>nm_3T#=^?k=9z2=6^Pc5Fya$A&ZEbXbf>T+jeL78O|3eg?)mtJ=#vr5A+3Z?9RWNI#hT-XItQc)~X!2 zeUe;M*sWdYUlHZp1nW2=!5CH2Qrq{@_z>p6`aElR)39a96h{b&%Y?tRqS|>y6qJ>a z^kB-}!c}nc6#qvpbhy9zHc$T4HU9hPT#W-5mT#8=7j2$zey(nA`F2!OjdZ=ogtaKq zfbf2MH!eXm5ZvLD#_&T<4cx`^u4`9JnQRV0M{5b(j#E?tw(aYeEq6@C`qpt^eBA@+ zXOnfa2No8mQ>b(Ku$Y=}=E2JlS&-7xMiwLp(F}ftnfh95m@*0gXyxe=;Rrfvhq$~$*zwOx7ng`uX+UiJLuD?tD>r>V>8h9GSl@yX;DDV z>O~bOY5C~u68v(RGKk{^74l^Ed9b8bU-~*d(O=rF%>Xm3=s)%O1RZcXKq{p{j%Gy# zgplQg1>g|w&oUO#rDgY5`Q#N*Exj|w2h$aYs0BB6H0ClJ?5HuKAf&-BqG17)Ecq50 zz7Ub9X=Qf)(-bZW-lj_#>7sh>yrQ{UWtvTTuY}kgAIAm*xd)>A-;5?#A}=)v6231Z!P}W4X!tM>_T4HxKpG089)4imBHTn zN%%@mMZz`{xwlOeG|H{o^y;mUuX$6#!j`cgy!zeTS1(txAR9t*b%eWKCMDlZcY>9} zia*_Mk=rV18_fp_I_g+WRBNiDN)~jbHJ8$xqiprfdY3e? z&eD?E*F>f6prTV(4A9VetYYnny6fmV6_hVFc3J2v@Spuz$5etgJTkCpIQ(r%LFEbr zbh&4+N`oZm1KnqMv0aK9U`T!XK}M4;!SI<}cR+t|Xo51G>$~L#`7d)-g7b>;a_qm7 zX)(|(rYMgFJ{HG(77LGuV3LlA^qPkx{-!JcjQqvf)jRI8|Iso}^xVUxZJ4?;G+9Oc z^)^`~rF)D$m7dkzqoENUaJ1;Q9DXf?=hm20czQBu6Xl#rU5Yts`Wck?=1mrf#5(`< zh*%ELPoGaDD&0rHJJ8qOYuc*QiXUb zMQ{`OL7&++e$%xWfaWcyxVU(a(53Fb?M6}c^A&Y*kyl=?{5|Ve?4-I2&Fb1*{V|v3 zx>tQl2>X8c>77`c=M@)EPuy?5a{19kT@PhjS=XAj&;4E(eIc#T@95Oc{d3K1BQIPE z3Vi)gqp&JS*?aY_y)|F{ES3$PeLVQvOZoJzR@Z?`y&YSN-EUo<6+iFl;hn*+Z)7zm zJ5~kiWUc&p{Lrn78K(b(9gi-36llWDDr#3(<$K1XxY%{Ah}af0`}I$6w$IWwyT9^h z*eM%vw=wwA+=6G%X9hj^Z4~G9GRN&?#_~e#)muWZ zZe6qb@7!5?O2TGNQCB{>{%v;o@-?%jhpyVVn15sRsmMRtr*5wgefc}CIn$H<{g<@s z7kd}x%wGKX+tt^lmGjiEmp--VlUcs^eNs)$pC4t{du$kE4AfVplm(nzb8eo*5ihTm zKN_{vR?ps9zjgQLu;}W2J;Eo<=Lx->lc!eucAAxq$G;Yr_?X{MeRJPhbJfJ>B|SKF zxH7Oqy+CxviR1TsqKmIwpPwzqFh8WsU}a8sdTQ}TvG3cC`#vvO?XJduMEKjX=UcDY z8karje$}=2EyIOuiOM*pvM7f8c5d?+5*jO*8dx83GKh7kGejtmF7U!)Uf<&r60^7$ zl(&YT$@#u&=Gu}H;28JW9>Y~(t5;pkT6O*Pr`mW&fj|G57#?VI>=x~Gc~Uvg=DaoE z@>~b&eLU@tEsA2pC!VtKVAOTQ9x#Yp@hFDi-<$GmE?)Zx2^V{I;pJKO=1o|DtVy^h(TU7`{ifd7~S%-q~I^HeG`0D-5gpUXO@geCyQW8Gc= literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-defender-atp/images/tvm_security_recommendations_page.png b/windows/security/threat-protection/windows-defender-atp/images/tvm_security_recommendations_page.png new file mode 100644 index 0000000000000000000000000000000000000000..1ae6f4320d2d38b5b95110b984a946061d3f51c0 GIT binary patch literal 75439 zcmb@ubyQVP*fvZkD5;`!2?Bz2HzG)ff^@fZcZ&!}cY{iaba!_n4Tp|H=K&7QH>kho z`QC4>_rLF~#bTe?vuDrTbLTY|1ih0J$3!DULqI^ll#~!vKtQ->hk$@2{Qw2D1n-rU zfnN`8B-HE?5U|?seh_0{VG)5wR0m1fx2P-k9wG3M_dBP5|I_qV)j`ICkyr329Pph4g-d$I6 z2UANU1P(a%LvZKe-5o`1V+UtFJ0k=wo7=nY=zj(`wKuTP16}P9s+!BgLGy#VW)(d< zD^n{Igk~aW0BA$~`@Ex_ff2&Vt>5;4-9)S{Esd-k5KjB!nm`-MUAGUW4i-iTKlesx z5D>@_Bt?ZkxTNgNxoavZ-P|7HX}=Q{RjkR(C182!E3z1&J}=48*^|Wbn>b%AC)l_t zJC~qoGbS;5f}6)Ukxed%)>xKPjEl*anikneeI~H-FT`YVQ zH5_%P;Z)tcsNpaLwp2FZvIWwe3rsL)q$D<=ENpg$s)VEX{~P5D7`b?Fc9sa>k7zkzpcEMyI8T3mQ= z(R9gu+(?s%j+LFs9-8*FqpuDAJE=^5$0o7CaG_#2{V@U0#TLf$f15ZK?WVDFW+8|5 zR*50yRv?`|ZSZUf`5`(wrNzO^?8dW)3+sFg{qS^pSyX`gUhtZzjf5<$U6zCh1$Qbm+2v6w^CfivP zoyM9ObT)sS2$|QtnDYZmGFUvIrJs+JeEiPA1}8XYLCek)#U8GhCqbw6-g4Z450MpT z@^I(FN*aFm!J&K!9m}X~{s8Ba=m>9Gs)Ai3asXT7Y%T2kCK`_^e4u$r#??uS$B1Qr zEhqyeewL_myKHlDEiJPkNk(-_G;Yd@B8{;opx-}QdQZ{>otCd5O`gHzvSq|ssi%S0 z^_l5g)ah~;UT17hFP-e8ZB41OYA^V4^!8Hqq24-;#LfVZ z*}caJ4UrMoU|a6-rLsWle%zJM5CfbU)`Bo&ybB$5=3?c$;0wDp=lLCv8tl1$6G?-+ zvuF{JTz%a#jd5Vwm+1G<^ws*fstV0~$8s!X{VW>GR3W`efHvP3LXs4*Uj0D{y0h&v{(|{4C!xJ>>Xd`|eS2 zm{;e4BwOO|zB2)tbr=7JCx0APB=2~YwNBolk_wvl)$m1sDsuk!@82gN)HfZ3Wh)UJ zL#~qB@!mv6m?WH#i$i&TEcY;PP6#hO``AVIMTYToQQW*GCMJn)YANfux@skB^1ibA zK00Q_eAQ9iuiaPExQ+{+6MVPjEwxNtjnMu4SNrG{U%m*M%q?f84X+bds-ril>XJaq zcca|)G)x^wUZHBF-SwC^X|V2nx;>(>qI|Ztke~4;K+VMaDthId?6#lRUG*o&apZ}z zeR-q0Spy&Y7_V-xl(|`rpAzfM_l*1@OCD{r1>5bg`;~_`qv9qzd>=6}F)O}cC0kzi z?>)+B7#@DNJty5%x(zx7$YT}Xz0MIoZsr$_LBmNT;`fQm`Kc9`@MqcTDzkWIm?WoM z+woZtV&;z85xsXIwfmKgC0&JInQo0qo)ManoXq0pt!xliS-D!p6cj4JU(aet7t~2D z^pOdgk}TRVX%wu@YbfWzF7sCTQ?-U#$tKmvNFJGCHe6zEuk8_?#P2q_T3>Ba=Ghtz zd7Nc(u!HqnvUT;MdtdaZUkrkjA@|qvvi^3KbbS8Xw{IsteL^z#@@nMZ;+k~Z8lyEg zHqJg-Z1J18zJzNu-CUS&hmr6R*4BYY8T!R@CtEvPxnl2G4~%G{^y7>!?-hPuA6plT zSyc3<5Kr>-+5E!`(S-?n#36YZwz z4+Z3ogP@HpjbZBxYfhb0D8bg2ejTS%RXvNwr0#=^8M)$47e!~0|} zS}P(3Y;__O&8(|*7CLsF0?HfDam5^v@jI`httz*5@T`bfA56)2E|qFkkGLraYKc=A zB-(iw8$eaI8$(EmuuP(-n~FXp!v|i**65F=wnWk!w7&0gsS`Vx>K`GH)WT;mLgR`T zAo(Ka_4!}~UV1A#i;yyq=Q^R_UUWM_UnD`oy+H`4enS`j{L!8 zJ`6}o74OnAqF_7Bk>7OJsXkqc*sgghc%MDAYCJu{x-DJ#73Dac@@ zm6ku{kS}{);A?VGo{d80-%Mi6?*e@lf7Z&dzkib8JWmzMe@su5p4xHJFmG5Y6yY3J z_IfG?4_{^eh}=rx0EOH0Q^xC!ia}-S8aq!nZIxFi_rh;5xtP2YLl0?1FHwYPaL{*O)0~St6`K^vpO!u#HF$DTXP_Z?^BxTT)0d!@1wOrp47(P z5fInT6(~@T!#OdVE>-86jvcoTt1o+9#pkjdDeS!Uxjz@r`g^zgmQ(vIx3jxlB&t5oma z%|-IpzDjFx)Wv`dq1b692ky2#mU)$LM!{$l`jd8-sgJ9TJvs}YP7&Oaiq~ByMXK;y z_oWj7$8pn(+NbOUpY%|CKi%8OzE0FQk6GyHuJnZ4>?PMC-WVbp&a{eC*yyvZjuYW# zmCLE^RoBC}e2o;1W0m`(jVNDOGmiJJSnyC-t}0H)x;JOj zU^!Z`gn{YoU#+56e7``)1R(Zc$oP z`jIS8#j0Fj@KS2dhGEh#vEY5u`Zoyva#D*)opKr5DZRjc{rF~U^|(F5l1Q5^RhSB% zbyok!tb7XSk?!;-N&n>Yu4P%dLjU(WPJ5(~7S3#=&f9wrt@Cy5_3*p|PNm9%w&bRK zBx-G9s^atYb#h_!y|e9Gp&XcRW}744bG1!ltCl#WuUspahgZB3EG}?Y?0g(XW=CIV zcJ40M8z-Yd8Gj{(Y|l*2nj~mge6%k&2wUW%*Gcp>Kf5OuU-m`L$c~kbw&E#|R_)m$ zV!3%<#h)rwRFqH(j@&3yMcCPdmO0XEeY&@JUP^@v9^C zOptZQD?8k*JGVM}(HXY!7Lq?_akJmG!^<9Z|F>92+U#M#`nmDG#eBLW(}G34pU&IQ zi=(F)s5p&_0fONr%)MmQiIGiM%ex(9u$`EdopcX8MAb9h6YuJSV7`NeTU&;d)zGsA zjP{0Joj4u+5EHt929v|O?_w&H)v&_&>H0lcx%7raQ;ur~EvfK2(zPX7ceVOM)4dxj z?&!|2Zz>RaC+iy~vVGq6?mj>NbrSEzbL&&q%WJjS%K@>yGo^da1uc2(nSGhOHrfo( zGY-0pG8;e?NEN zFH4qRnClL2^By2^pVar}^2cmUW+YlzCkyA7IbE%Lut=`KRroy1;K9ucUcnxW>fcT{ zhg&*v_NE~;xd9D{M)RUsXY#8HI{qj)E|l!9%MD=%v#j2GBne~WV~DGeKfNEx^D0cb)gN0 zp3TzQxW`DDaAJl1CXNX@aBF4QQwaBQayZ3?av3ldVJ-`uQ{mzFi7-r04qt5>U-OHCb@+t?*gmf(G$rafDovhG}-5wIfrp_c79^@?!+>^6Yw=7bZn;F31= z#%6aoIeFhT?fz(|&C0VEgD$9{Yo|oYC7$Eb9@>GHCD0c6(qlOMQQ>-c@Sm+>$B%FH zyi^Y*Q&3bSDrHis_(6hBaB_zFdFc9c)BJB$8tOaXV2mVh{Oh<`R(18%Rjtb*1xP%f zK7IP`-MiObUV`W6=c{XLEFXuzec3Aw43x-tgpdExYe84Oz)ah2>gqRYiX+KD_k;Vk zca>-oUEa79cxZhnJ*T)hLOPz&c5{S^QM+CuPr2aZbSV{sMrHf>_%ml`=h@j=8(Uk` z4Xfb5ZY5FQ6t{Qf`$Fv&jG61mkr-C9u&BH7+Jo*OvgqixbJ%)~!)DYdD;|^f>T*Xg z0+^F6w4Xq|{G)GO9bZ~nT6N8)FCqnn-P+UcTsG7CChoL2!SnXUnxt#3J?NSw7uV5= z(Vrm!d_`JQQ?m+%>Q|`068aVc@@+eNdmiUK;$28pS6dshvooA`BR4RR9S?1FEHN(S z)|e+4UYTLvZFs{8fBfa6ax4&sUnSKU|{!n z-dhpp*LSnbEU9+be3F=$=!o0S0;U?3m?){IrV z<&@H9XEo(gdB@2ug99Z-GdjZF-c3Y}jg&=OOULu%nMRe>THSslB@+|2kB<)m3I=}j zZqKu9Z^t>T)q5@U=An% zg8)0P#CSWvwJ=<$RY%8UIGZC+R#>;k>$E$gw8r`M>(^h;G=EtG#ejl=EH|ux6wUvW z;)gjONic+f+wso{7On*kHX6AUaD~UH`BT}oZ7f$&t;x%?0?zSld$Ndzo<6@nUhi~g zS|*jZ0@3{?g@RD|RLPw)V3!7VJx-^ilgK*0t73qQi`zLZLS!x(f*k33+j9 zwY613TAB?~C6xVxRtHjLO~b}kCZ)zv)Ohi0x~sUDS@3)nN4Zc_ZLcOMkX0;i##p@gKJ1U@69eR~#H2>0g~4 zLWkr9PGZhsc}0!Ay|J$nS&h(ilSfu}ceS#^78i9p!^wuu4p;hQ3T7HT`GB`_;HG9} zeL_Y?ma`HQ71g@&J0s82tEZ>uZWbyGMt{I@iL$X;$89q*Hm@reEE3*!pz*Kht4v3! zIW1?}V`vrWJU_Tv9_LZ(8yJvyX_tR|oXlm7Vj-N&V$hi&OzZ<}80X0o{hOWreI05E zR^xvB($dmiOZ$_paeDRgZas*iyns=q#naO6-LPMwZ5J|Dk_S&a(|(T zEV!eU$@{#IaB?nNHkpuQeRp?YzQH|p57OXX)kerZm@VW98{jfF4hav(rlqAd>YXC1 za)lY=GN^wrZ8&}N=FL>2r+WvDzRAI2i=nZx*+ooXAjw~co2gbC^;#}RF7?5K2aA{c zP3u5ztWChykf*YB$DNyinGDjTdniC3$|~l_8TBWy81+KrrKO~$4VGH{fip#5c0Do# zy0`hr!S!TZg(Ul3EY@kvymd?o_8z!>(2gU|9WxEy@86R8HW;_WX6a4Nv|#54W|R7c zhMvJeM(3tL3B|1cmjL3F3)F27mpce2OANZOoOY((n|qp#{~CXGKOrhQ`VP`w>y3q0 z(kf=hsKrcmbpiMM0QPvvN5m<#sYxgpm%;8qtxO_o$8+-IE7%YY0fA|ylABPowfCh) zSy+YnBrpHtzDGdUTEH`O6vtu9i0V25)GwJ%4TVy3Mo)@6g4-$hPlfY z+##Eh#(5$ESeSG7Q9}!afM%S1G`ow?f$SQ4dwbP&b@n$`=VoM(ENMJ?Tyzl0VrzDX zzl+?vcTe-Z4wxw2kJn*;x|;)k{_8zC4J&I@NC<|u*SV3sMm(dI%W9;!*(^4APcQov zArDa0}6-8*DEZ5xFu-2o;ktoCXlie&S+_s-abL1yA+_N0F#)3fTWmmlf)2W^= ziX8n$z_YZpggIRw$nMkL-u`9p69~ZsseH~*;6d+BrQ9Kfg@q144D*m@k0Y}sgGugE zIEk|L<>gP{(9O!q>SU%cIhhEgFV)r6W99(!8*%t|NcM^0=SYqHx*IyQ+!7LJURaYo z?rKLvBZn^0w3h+#uNo{uqaI&MJ+GA8Ijm>>U@(et;v8d2VZy+hV}t*w!h z@2b3s{$S0%z}bK~nSi%+^+eP33=K6c^KQFufy_fQmC%TMJs^C<^;iK<(53gm>{EO0 zJ#o^jVgJ~sozFK;&qof9PH#ouNRv@qrM@_QmTC->d*z3sdP>cyOk{4{ec3V-4 z9f=dQ<8OO7+&r$zC&U$YwT(Kzin3RQ4Skvl9q>-|dCc`P@GdpO1XBR6UCh>&&1k6CSDBbLmIEk}O~nGy$u~!uy<3ucQ?mXN^yS%odPU&k zGlR^3|G58G<+&VGKtrOLhi^(;goe%U%|b<2WnQO3bq*^_yY8NQ3kvBIYz#rfy@(&B zCw;t*Pd}$1yB8Bzt?iZX625MlPm3_slgEmP7D*;ux_4%*FUkLTcewE0ahc$D|BI`#QY<|ppEAVNXm_!Fp#o0dp>oCRn4 zj?8Dz;p~kUc?=8$Fq`pThnNpgr73~}c93uqal>j*9+B=nG}JFK{FK9#)^PcFo(NJY zK-1HLBft2@_Z8yO5*68e_!8kGx$5&=fq>}Mh~R=o8EJ~d#D>FibmFy?{w&#Wn~QU8 z!A?QNm+L)w z;sWi1SA_Ppu&yBCO6TThryvvepOBN+lT~sLkz$c{f7h|DyFg+siMc1;ifqvmA>$#v z^)p|FIu7IvBH0~psMF4n@WLP$Pa^Dn1W>UfRv^jzea|;+&xxOe>zQ|zaa~*B#mMxL z%0XZ6`yd?cBB?{qlE>dIeO@E8_?~r&b5h(Ka zXOrdhh9h6eT#Ou4zBpU<_^+6#lBRcsW>_!cjjL`>ae7h*AiJO1d{YtPUB|Oos`hVR zp}IfgRAJ;YW#s$rN&Dfw88-*Up33fwN7x>Hnc6PP>1Jg6nfQu# zAlVxFguMlI*?V<>@jr?|?yFGx2z%dZj)1_+=@a7M+U~SW#e9jH&s9ZyiaB%LCme34 z)ij+Z_VQJn<-2AwJgkQLJ%=y&`4J2b7fWZBdRgS4G57BO`t7vuwRB94)0c)^zCB4W zS($eHvf;IzF%i8S)b|rB&ZsiVr}y9dw60)vCH3DT+B_Rc~y<) zS0cMVVTluHDHHD*%SEWC4|+j8!wH$tH4QNL^>1$%d94A0(Ml$#yc_&TH=HU`6yggd zFTp5!;}G{8AWLV53o06nZgBBLq6SI7Z-ys{06HHZ^^g8jZ!EKHVf5{aJb+6q$1Q28B}S=J?NFBMOaa+D9{iPh$k5GL;8 zuuWm`q5tbNDmt^Q7aE~#IJY248P{k7DFFkB?o>jtn9JRB(Tlp^?1!Q24|CbH)f4{~GCaJ5dBcezBV zk+i0!W`8M|opmHqUKT){pM}@;ipp-7|)yk@S(VM;}W0bkp z1UYD`#hc7RX)l?pD(o#=z7g>rvKc9BDJx73 zUw5GuZ6>HFZkKQ=kUhbM+AX%<=dG<+CbJbfglN>eSiVuQ_wLL^inF>5+Nc^)J<+&D z*~yg{_%A1Q7bMY~c3q@5j}BAGy^44)(qDAA(lu$j|I2E=-W7v@^)n_BC;Klij&kvd zESTh$X=i=X*1?J7)+QZ^kU=L#fH?rWw7UcvXBnG8;W=HbCsMNp9Y_{`^9Jd)pVsB) z&-cJLlN)}+?nhNuI1M0b?Tf#WSH=T;~s6YWzWSzG`v3zBs9vhi~-`4jMx$EfGMr%Wh*$7(PjThR94^teEHt z=8`Mrh`&;+*M@@2q}?AyC2dyZ7yEOtfx~K+8#Zqt(dohwQxM0-&+>!lk`=b$DofNH z=V>Gqx)=0#F3{`M0Pd>2oi)DH?I0JPmzNi&7fA=tUo}|$rSkijaE0keDN(<~bprAl}3bAI}VlBP*1%u#Ck#<8jSRYuqOcHxggF8Iw8ehnZ zpUq^@aQK@rJs1+;JWp_NM4X&Bea?Ly!PdICx|SFZ5JHF2v77VN%6e1c^+4-A6qKZO zU}7z7L;NCd-h6T;*1Yl2apOk-QxS7>_h^Pl?~v$tdqS{+UiPSp@D(At)CwnH*s0d z_g7j%h(9HtuA6!5+)2`?54W_eY+(0vcjEX0zBdvVbX^zaSoz3?w3$uj!ESGWyL_BR z=k$KP9+0PtyL<9_y=3DTy`d*cZo;uhTTY#LIi>-PQfHtf;HHD{JpRdos_sbkesnl#ko* z{#CvMO8tiz^mWWuy1L|D;gD>jj`sFqO9*EG2G&YjScxYX3+muMHueFmrxR3OYE@RL zA`K58KD?V_7f9JztmpYZefmVaB_$!D3j}%xJ%HyynQcVMWjVvnCSkCUZ7aCa8EOFZ z+}QIpk-sa9!~paJBa~Uq@s@>DRaK4V3Z{GC)TmKYQTYRdM8PC9v~s^X>{4s=-~lhQ zm@e&@ZFJt(E(=pDGfsqvhY_2ih!u*Gr8}KD*ifz3o?__;lF(`2n@$`Ox=jHv6X0a_ zkwo9=**YIE>;Uuom5Z+dS+r*E>=D2D1if;;>U%5P&ymmdyqjc_Ilw|z1O0@p57AIi{E%4)-8P9C8XV;8>Ur>l z5HdPCdNk*-OgHJD**vl^ROM z-t13TS`q<{W(x$8+(qV{A{k8`OK^E~vw*1aDCby!(NUU!2Su8nrH&2p;DAWX&^!HA z5!ZBJMs);6D~$nkIfIs?LNMy>d=>@&Uflm2K5h1uM`C*W2zRcj&C>-JgXsT=?DCBf>Ux6;=5Ip-5Nhux`5z!1#m;@es<3y(& zwub<-8Q8_4mO-!}GgbutqZFmSzMhUB4!R~?(_P13fk(x{h&PAj%*^P3xQwYIpM!mv zh5eF0RpS`qhXM1ncKNwVH(67!+XYNw;1B^a)!xyuw6@lfDH+{=>i6jra9^Bk zGeFf-PIsl~lQ+a=?4})yNr{{+L$_e3r<~qQii(N@{V&@Nmf8@z`m=%g@{C1-&;w1w z#=>%Xxw7L0HqZn(2>!E0KPWfhw8&|Qm(sB}_S7ELrH`5E+I7Pf zFDh`v(N+;6-YUfLwf*>E#ETNAA7V7LlFQ>nr1qbR%;8TJ*^9t4)$bOKA{&BTDyAGJ0M2UwhYIQt zifNMg=rjZ)#1#fT?0r>K42*>EgpZjy0&J80*KttQOGrqNzkC@844SPC>80~y<;z?q zrE#!E;8DAPn1Ct=C06L}*mq8s7rd$vdKGRyt5I@!z!R|BP*+}HN78u);(Pm*&z^$k zgOm3B7#)CKrI52wOh&%~@Yz}}oo;{rXYbR}qwFT7w@SDBEH_0_okh0t1-$Wtw^82T zu0*S5EM6tIWtEziMd^e5^Eov&sdNvgv`2`ghQ$*#AaWWb0)NW|6RO8VWbz&|^pa}0 z%LdWirR_NJX_9W57>AOQ?VZUL)2BLCk(pC2%PR(fvc0874?Ef);ot=SmPxdP4zaYy zjF|_8Qwh#bz^5|l%Z4iF;vvPBeH644C71#B^aKHCnJ@HrE2pafg&!|Hs3gOV7M3qGZ*J7$ z7)(KhhrOPjR8~~(+0HxUO^X%X*^^;)j<3fnhFI5gChg1XGo&z$ew>Cg#d|a6mW{xX z!isuW;)xn(C+Ql+i@mL*Vhr7fN*U*oJi1QL$ht4|i1xkSSI~5_$2Ej-Eu)ZTG1-0p&t!v9F3gj9$z|@}N;g%2OVYht zqT<6;tz=pE zRl=D}?8661by?*nax0jLi#X3D5pb6gk-o6f!|lYvs02yT5$~y%a<7xTqeFj*v*NT7ow}emwZLDyyK3K)Px-=!yUSy-8qr5ap{EUw`^U zHKCz6utNgTB!JT=fa|>%O%0+swZXMXpkEF%>G)EVDieoEzOv6*rZckS^Toh(F$MQ`rbxc zNJU-{r@1t6TS100YSKfo+q$c8dbQF8{;+Z-nY8N9*UeM+d-@6VUNspuy@%_S6^vXG z)cLIPP)cZUBnDL?tJc-Ni2fPL8&4`O!@EfIX6&7Yaah@;a&ue*(KwkwQcQ=*%gE>J z10lrH_4k{8zC^kc->I8v&#AHMhZlmt$U9@v)(oj4E$Y1yo8Q#Gpa0l)+N*uzj!4GX zM2%hH?yc9;>8|=TQm}K|<9z?IMbUa?h~Y|u zI=;!VxiRszK^%q;Gc)sFqquO$FK46_>GUG}T-KBgk#A!WyvokbR(5}^a!D)S($c~Y z>t_Qs!k`B+=hV&2-cFk8*IxC(WC9xd$6@m2qR5T!Ey`~ zo^_VfuBcL?Zyt7$aSb&bKP6~Rk%9rg&MlLNhJj%Sj1j8e_2p!Ha`LBlEXno`FEaE4 z+ohx3T?tU{3L`G8C@BWKEXA&!9BrjZ#VY6Z=_wHqCrtz^wxY*I<%uu==Vq?YdV6YNqZvEdn28HI&Qn$m_~?fvHTOhMQ7?0qsAxwKYa~-P7Z$9v z>#jAO(GOYbdf1&@fr(m|wbLC3NMKnC;1-$oM$& zp)%9VEaY1=+B2JcoW4$}G-KqmMAb|~n@C99#~ge_7VR%T_6})hV##l$sNl2+-uO8t zrm8{CIPxix_{AC*iII3fB?cHX{|>cWU0tuP)`g0W zhSQtij4*e&v*6DQjy$8zADJpoTt5D~%N9OA#4$T=aR0(fT(Wo7FpguWLoGH;Z4*Eswy(@9I@TXjlN^*vt>ecv8H^4_ zRb3tk$pT6A`m~gB6~iN4bSI-!`yAX_1`3MtB_W^4ofo?{C=TIYw%v}dYYT{>VkmFh zmTHJVVnkV4<>HyZf;i$7XV`(@X&ghZS#xNrJgC}d#@5OjM@xm6l;(*r!hLit7Wdhb z9qydY7Vwad1_#%P5s?HRuUijcy689q*abOz~6S|lVMV4 z6h9&cW)B4?Z7@Rkk&Xt#;bx^pLX=QrjM9_Y5$}o=k!=6 ze&XKUSx;)#OB&jGmTgXXsJ zEK={K-*}aW(@K)S51KOs9xd9t5-k$xr*X5ai!d8!K4y-I$WMqWsi;`;%W7>72ggvH z-nB6Pp`!Xo+B`%Q=BRbGo~O#l8ljttVm{QC&!X9~BU1Q(yr9f6yqvl()05CWTk!0@ zYUd0R=V|f}m1yFI*c$sPR{g;TV*QfTJeJSwRkBzR4Zg;=a&h%`n$8fmjQz4FmYJ1x>N2lBQ`BxVS{{2P!1w_iIr|paKh&5W)wBnTVpcw- zSDWm#3MGcrvLjEK=4*)b%y3dE<|z-=6dFp6>k!l!ne^Zk?WB1bRf%C4;6?B+1p?H( zpK50_G{JoT3{nu;ri%MQeo-Qq!#oYZpc=^r{OKF|F_c)u{mKfT z-^|D|^#aub<*&iPw2X|MW)*ga%Wv<<0`&BmfJ1mksnV6uDLN-CCPT`WL0{A1@UU3nQIkhpT|(N7Z$S|8sZbsznZRz_n~ z=Sg)A3hr$Y9+Y=RFY zGyDPquE)Q{6NS751F%SzduYOcg6ZA0I%6L1H(uQY#i zUZzu0Qr5r*`AB+a;#nF2wT+yc8{g*+j#{HLD{~OITO#|{*Mk*l1+=w>RQeslPgswL zPp>_@BySp5Uf7Gf9j@zXAw2EBds(D99sz+Q_~Tr_s6nW|K81K3cHkiZ>>1dzIQe@~kk z1az~=&b*e%?#;16Dn>?T*Xu}DVPbdtO5&A*BKwW8LZj5<6*Ba+mC?{!TMHO=xXnQ` zT&eKxE3INc1IMjbL+kY*G5>);69LEYQr`w7$-7BA!|MH@skp#*0SNrAG7`mHm2jV*o1Mm@Lvs!2OinPaaTP zPs|TOQcf+^4;IEW1*hUQOs7$A?PFMOcJJ1j17jQ)*(X#!DkPyl>r<@1oQ^j-9k_;= zV-8aSZBX~9)gxJWL4{zm9mrSh*q(s0_j`P;LyfI}-+SKs(Jr4$l;iQErkmY;qGA<= zXMoh|urn2jjEaR&3{)3rE+Ff+w6*zxy7p*7!@2}C{>aE6$rhd72HdEDE;h7uj0fY6crN>duyW~4@ z8i@V53Jq=xs(MYN?iWlc+;IcQ;WtfEeL&s0N9Qv{M4Xp?l^AT(%2#hP>F7)L6%k8-gpy+|Mp%w^^wr6DF6=`3fI=A?!|+eyOa_{CxY*o!`$m8p z%l!owxVXDkG(4YyJbHWeM#Opjm+hVf7MK4qszoB#W}Nl8>#Z=fQbRoC`S!+hqgD1N zz(m;nI0x~CaovFu7*zs>d;VS27YzQYqe!iblYKAXMPD|1Bxcj87D4Sg ziPbn;8S5-`8FlwlsNE>HUA;ZuW1M*R^|!%33!Gq@L(F&(=rMF|s4;U$R;cJg5}d@w zWVja*osC{m%|1IpD7rbhC9LIBi5;a0M?TnIxJl#NPaJD*i0l+gWCP;OB4m#+xM!F~ zIMSha=`)F)V7?rKyE+>8DY$~H`&?~-{N{2G0v+n9b3%wmrqi*4nC(H%_SCN~XFq$V zCr^P(`#RgJAcJXR9~v-aHgd!Kbc6CLN-ITw&sxW+-8gfEQFsxc>sADv2oR>W+oq65Oq}UaN9(MTJ9?A*uImapyMuR4(I) z1+|lp7&clOFY4+;Vzb%WIZ}!R*SvV5CXS6* znWHSZyD`6wvR7{s)uxzt!|weM_y^sa+4;8Us`#cK9Cw`jOfk)i(_QoIDsVk);kOE-%8qW6l|Ys4MoInR)oCv4zbJ!K;_HHAm#tX@9*h3F@to zI~;FRxpD#XR@(mJ_~TgEds13ks{=?o6N!-_O`Hex5sm8cr+W@E@|k9uLC<~0CK1W1 z-}og8>(f2!5%3LskT!q~fx-Yo@lVHFWB{Y3lT zW7ve(uU=Ml>(lePxd%@9eEM?e?q8;0?xcI0@8;m&2;Gt`W2Yk`2=W$*4Ee8|HQmB* zTfIr%JOVt_Kc9`C+)sRo5xNCkeVx5sG4RahTb6JCAMV~foXYimA6|ykmV{Ik5+#*{ zBvXbmG#F9|88f9qGNm#_8B!!6Q>KlOdCE-4ut-W|3L!Ei^UQlbwfFD)`M$^R{T<); z{quFKWAAFQtaU&4eO>2up67KvQ!cWSSC$tx)8^{&&b!zgrZ;}pXDzVh-=FbyTa>g_%3=+Mmn0asoms;=P|r2EG(`aV?okCYmsGiiDiMPm` z-Ok;9@vpbNzZxw^oWC+C#;Q3^*6v$JUU6P~*;t|XpyJ9M1U`Msv%O zvQN@0pDHZ*T_Y{~larEYgSK|4m>;A(a?G;x>C(1?XNP|NR8Ul0Z!QvMy3o@T)p@M6 z=sbC#NTx-o+-Apu-LS+vLdkK$p#wt(C+p37T8#yD8T+buGwm7LGI2A@4gZ@ zyFXX5wB9-`KVq1%^dNcvp!#C(E3sdHc8yxx#L~)#AGU99k8@ywJYt)8Desd=WyV6X z37;rjmuYm=n9+7+bp1MQz7D-*-p*Yv%Yr3KKP46{ZaKT|#+8bTiyKl7+wgd~ceBff z=ld)xr5E}Gp3M|3{VZf*W%Zwti&d*{Y@{Lyh0xWTW|~jtXROP0 zrwmb2_*saRmg6EGpFgW-=j22e7VcD6SAUh5Sl-ja`L`rs5KGm1ZY{{)7fleJ?zxr<3r($4hd-1E+qcF?eEOcDKWFWKa9`qW1*|N@!nVnY&*%-dor^BHEiEm^g*-ew0s;cA{{D;( z#b4PQ`-l%ZJbYa=LgkL0-1mT2SMi2W160@5J(A>T8Xqo8nU|cIo;ENrka>B`&Q+dI zUt9Ymj#p4n(9>GuN3$WC@ltu>5%m1QXFquwN;Cyk`|UC^GCIjIrBd43+?usGcYW_a zQS6nM5)ZfgMqOQ9D^a!=AtC<9PI7sXNL#jSImf*2_Rr4px;k3eUnu;lxo=+I;{9Mb z$PvGFOHJFCFJp^*7%{_5r`g<0JNa@sy7?;4Ty?y}VGvUg6JX0`Pzt7vQQ#Je{sG-Xo$k>(@u~(w3~P-n(-$j6Bf)B%*ah-o-^4U0Cji zOXewitysL}PS_k-gJxapv@W)3gL}EFnJ{fwgNG82dv30XgXBv$dy0M@|3m18{JF?HD^b3ii_K#{hKE0P7D02qzS!9}QDYI?WF}ik!5K`h&E-3E=n6J^ zxdFq$g9l$FCsU=f*K~aO@`3thWqxDncR78%H&zs+UkihgMov!b_?nCtW1~Nr@ac-9 zqmB)Kvs~0fpPw|psNdV6p;x1^a$LLp*#BSwxzM4TUU*%l_#r=NRUZzQ)p3tJoO*@Sxotd#~$oVn1 zberwnbMk-{8iCyCPG;y(%U227+S%0>NG}d?lcYD@m|9v%?--lBZ7Lqo5`N6DI#z5u zscy9x;rr4g8@nA{KQXhcN&B=TxBi)vC*2(_1X!M`B$#a5NP5v=YHn^$`rurlr>~#3 z|0>q=#*G`HcMeXvbNlU*rXh*x#D3A?Db&)}Z_Q3iO;s_Kf6mpO^!^!x7VogN&pPYM zyun8?Wd;Jwue-l|dCJOHHk;Su?(UAn(qep`ncIzoe^`ra-|M@@wVwKo(^4)^PoT?J zHhRx+qY85ove6dV{PRi4$pg6}VVlmLJ-e>M>#nVM#ApCIE^r|2sx$A8-QZkXWRjbG z7{e=cR`Clq_~c|}y)myn+cz5Q9OmNkmmwid)btcR=;NAvb4)}eJtHGJvBO-X4-Py; zQCZ;~^8CRkPoAVAf;a1P@9Mru8{6giTOndx{gH##L$=~~E*$nf8ce=|5EgJqLsvKD z$4R@EXPTA*EXMlJ@4b9fTPm`NhALIRls>N`rIwG;era@rgzntJVEXfj_puw|2ewe; zI!N+o=`=fC%h0qRJs6>)k?k}*Fx(omX(7a>%)UE`s@w2h#?6c}?flZ#RJ~%_ypCd{ z@4aeOe{xZA;9~`Dq+;YkqW{%#ZDmeKfQpoyoczYB*G-2%cl$9GLro=7Hjg&*cL|Zs zk0fsYG^;}_K+~XWxj`BJi8jiL-=m;F{IRd^x8k|46`&dH&8JjsRMEgfnRl~0XiQs6 ztL><$+G|y;aQK$LHSgVzw0zvG#kqhBaBF4J?v7GS_{7Am&Qh0MwWaPpbVmiV9{cv9d2sA~gv7n!?M=B)o@~04f*&azT_M|HQE_;CkCiTL zavd8X8)hIEkn7{&b}EXp`26|vtF*M>5ITv5YD28-hjS^hu~e|5Smo>N^$fnKp}~z~ zI2wgS=;1-bChg2N;h^*N#rWP0AuccFkH?Ka2x!wRv)}dVh(b)$tNP1K ztYY|^PYJH81dV$0R}dy4~)+=!2oZ?nGFN;5z$v*W5FuU%JniIeuMnwZVm#DU1_ z<(?hs?8|5ll;sZ&sEBWFjW0;!kanh%SJM;Q5TBc!{dcVnGk$~lcrx#2zeh1d2%G=r zbJ&f@=H-#csxm`EcVJr;&3(Ox%oor0%}^+W zWZo^{oiB|1C%iPUdG9cSM0N#|sG0C}q3g{9i8pgUlgI4u)!rr5 z3!A5Oy{7ge@-mNxtueyLh$c=LVPTg2SJYn7Bl9CP8%&#f`@;mOj966?6-6hdF@OxFBW zXC_>?5H7ctlA2m)?=^C&eiJjj=fHS{;R?^I;O!j>37@X{Zgs8ywvn1LRLr_A=hOJn znI&W*Iy$d#9_1$3x&_4x0u6Jn?TP)n=UOUsvrKfykKK)VR7Zgjg4Vp zVP85sD-nK({=1VmZmfO^_R?E#7q5us_9ky1Z)g5n5l%Rsq51yJBk(tG4Eof27k?kP zVfs7FGBUDL48Qgb3fe|<%d9&wGJT!-)#Sv76;~Ga92YNm;s3iZNt54eLVP#--umCw zN&EWEyQDhp!WtSHbn_Mn(5{; zlq5PDDm7otOV{Vdb{V-0k^RmlX{*348NadkYJTYhTyKx>pbV z{95b-tAXyEQy2a>8yBw0M?*RlcYbJO#QoEc=GU8nPj@DNrp;=jE9~N*yYs7u!Z3s7 zd?NE@ZS7mD%XgYvT7q(3dJRQ^s;p^sF5QJ3gJ>Xiy?JEjZLbyEr72<$yrMSke=cj> z?)Cbw8R=Z43G0Q$#R8q5R-(dM+oI2HfMJpV^ICkvLQ`2cuivNY~^em6dHG%G-4Y zoC!+c_PweM@xT+-FD{CN1(L_V79Y&p>{(%bhm*ne(+|0;SNBPBY{qgic*{Li;u#QW zGtV{HK(rC+&0Q(UY-zbv-_UR^Q~mC}drh64k25j^={9fXW~Qwj4Z!La>*)(HCuU_` zpb0+?v50_bs}rEDONFb1~o_Lr@LG+?m?&a7-Y2xlZ*6j%Fga4 z3U~HRbp6k3fdE^dJb8jHVhX_e9XodpSlgL;h*SOj0@>ifbRy!X?wjt+YI|H&B~L2*_Kk~QzvQv8koS)t*V;7N%rDKV-@JL4 zB$L)^boXw-kfS89>yhc?yu9rwkIL*lp70Xw?heyKYUQiN#l=`&mYq8f9=ze{_3FG_ zY?GU!+C51QVPWAiGhvSN$;6g1+eg>G{7RGOK}`#Pn%qNXPL*n&F6}}{cM@rp`4r?T+UGQ zD3oGmlvX1nBcZRu1NNz2Z`n>RYr95lh0D6S^18Yaj^lGn$kQ`!bnL$w4RMy51^+g4 z1x|*i*_dEvqq9sc0@ueIGb_aP$_Zz#8aE~jxYU`lpW{y^XfEWd?C ziep{Ki|3bLynOi%Mz(>wS#5l2{ud8m3c|WCWA<-!_~p3#pN)8X>3J&g#MTyRX=_&i zfje5Oi$_RRwy1kR9=qKdNp$EJu1emWHfxPcNlDRlLBVRjLU?5B-X&aG!CIm6Gs_hF z{{4IZ4Q!-VjL9R9hG2Q~i?Xt|ka}#z88=X4OvjZBO=E@kcqdKm?T_%ZlCtvF=3wc( zjU;nR%esX-)Seahv17&d)bv_$ve8!zPHmMGOw7qq|2a6}fWwiIp3d2UuZ_Xvy@SrD zL_dA^IL2l?OibKQw`o%^wwX}b-dT(5*WEr}m$$Jw;^FCO5@DLf z>g43~J7C1`suFyqTjI!yc#)~BlCY)L`25d=){%`IJ|j~L0>_UZBIk6B3C$bjb@(@! z4yWTp}S2NTGdxq3sd%SiJtHa1(3(i|42 z_hW*E!xv>tD-&n>>aymv5PI_WUMBYQ0cy`nf%ij1iI>5bEwcdk|B*|>?n`3$Q&kX0 zSbYPHHSsdU*8yrOu|KaOC%4t@Kd8D1ANSNAl&0sH2cnV*MlOc?Ki)9Z0*b~+>FSo2 zZKzs)jkX=ZCHw{n%Ck#{_|_j~RAS>rQ}1OpF!Tej9Hq%QSmm?bVRcyy>Xe63wQqD% z(iuyl8S0^E_Md@92<`tnBJlsqoB!YNj9p8vM)!X^myDbjVti_vn6kfch%KupraT@+kUWkdkuXSeEJ(_ zyino+5t3g&U>#jrx(h+fB#@EzAxY+fM`+_b#!wwr>K+ z)ok@e=>g9QwQROz%q&4ybsr8E3p;yNb93{{y4(3WFG54z$OCVYuRe5iXwNz$M3azQ zj3dEEVNwnSNkBw|rm!njEC{I!3I6Ti)Rnt;FJCZ4(2ZXOEjcqYli86S=_s{}L((CA zaFq|!c(}It)Xsr}Y%||RGRV-R9d1k9C4c8_XJ_~_-K$`q#b&$2r8k=F!z)u{irmK9 zni?<1G)wJ0Oyvln-!+?CPiORT#&mh#eBaUDPM^Q`CJjpLh2#H_q)1R;zbedxOU~zm z7A8)s33!{yng0I%mvt!3-&haOmMl-61&t-j=F6U^n(zsqcpa&^wKX;+MLFwrT%3Fm z3O_8LfT*aKned~K5LPW;m4u3M%w0I1GsB5;?%s>Y$m-$Y1Lh(-!6pJopHS zYx?wws>AUP+EzEDO+wfpF=&%j?xnK!>|6@Ee&h>cs4F> z-FWdF2Z=MFwrtG)q#AQW2^Q{EYHHAok2p%2^r9j<65ge}g~g%siO@eZRFB?<1}y#pdYMT^iGV8+rin zN5^Zqx$gQ1KDCh(i%9{5PDN&=`_c`Y=@ln$I{W^P{D z+|2w3(1Fck^p-;rHLu9UI6X778`m`INtL0$$@J{(bxL7+&%Se%B5|V{+H&b~PNO6% zptNWAr5LRqR~cryOu6spa@a!q(3o`7%lR5*fKrX4* zIu;l2Hn~2o=q1>2mqIwwX(fnidJxn;v=Fn@)Fq50keWsooh3 z^rV6=LwQIswa?wVck9|QhP@;}mM*PzqruXg6__(zExp3|`v$L~D6X_yUJi(rU=h@BSM=%+u_Am{Nk5?mydM+&7 zSzd@-6C*_x6kMiRbe;<9CXuApmTly?7+Gs5a@{!qcFANixU-H7XJkPX>0mg?Q%#>g z?>%zOI-d;;#DP3Ng;>zKLFHhKs0<`X$E2kXyPt`TjU}o`C#T~0QB3q8kubZ$9UWB9 zPNpI$+KRJ-cFagv-NO~rb;~zg2;~MI@cH1;kavlI&-sh-&AnDN1BPn=V7Ss{1JVsd0+!7+3;?)-kd{e0bw*Itf@c2gxeIa_i1 zF>NIA;+aoI7U#_V^#ZKNKjbRvsya(lHaI1gFawjDFeHNP$~C!lixF*rROu1478#m= zzz8BfntYc&nC@n#jZREFoyEuGZD4FnO(f|}g)?A|KZb8cwRCDvOq*)Bc4XteMrB^+ zk2?GOPs!Q5#Lkb`V-()GW5>toz#-|J-rg(9R&unQKXP^1`I0G_WaFIyg)q&hB_U1%UsLmH9-vs2ODe!1Kl zM;BM!K)@?Cl|Mw8+l^}&m5RRQmM026Ef>HSh*>4aN!C%YAqSkp;38YNyc0dvY8kOKyB`yh70S+S&mX0nHSF)`&i&4vGjJ z{(X&WLqoive*wFQfIyN_R^H?q`90!RVHfsT&46{LWX6-4XLmjuo!P^rsjK@?CE*kG zGQo_HM4gvKNi|U&*o5mzL_}%`JBH*CcP;osSJ#uDKP^M@1J>dmBgPW1jC3|Gx*ii& z#@MOEOm?7%VqLe*XC10foP6MN{?dDMshv`6^yC55jDSoL5fP{^kpfQaVUiUJdEQ~1 z)#kRd>)ktrJprc|R(mTv*R5G~7vIwe%D52Z+hrNtaYvFv`RQJLoUp~kMd9+e{CqJ@ zzHOC;8SI{+2xwO#72{YG;XqbJ@sXbgH z+bWzN;6s9)Qc_WgDJ|8Xs(KjOJ+6qeSw7k2M&D#MeRUlV{j&|7M7X%3UZ#4VRbK58 zjqn-9>bCA~KTv8=*tUmn@lO$wlH#Y5b$fLrpti_5Qa9gv9o`9I&bqbRUX9CWPmJb$ zL?`JzaOlvX%&rAi?Qi3bxJtt#Be%`n8%!(a=S7ibo{|U7(Cqd0G8<>9*&lF9VqGp3 z-)0U;8KDp&Jm{c7mR~>lrlrs6JxrltV_;YZSs6#|3zyfYHa|J+%1*WWI_Qc^$vOSU zOimzEq54;ODXAs2xtKk-sM9}iSqs+8h>%B8IVw4LPU`qSY z*~!-}5uqaKIDand3HFn$ABK(5q7Wr4YsT@Z{3zn&lvv=tii?Mw|&#gfw_<_ z%WC8XSSv&1L}$bMuP`QWz>Id2AODFBXa#bNc?Ap4M=a~z48jld&Ba?>+?;)otqKr*tSNjXAa88jq zup)I~cXJ>Lxho7CTqps9B{r_KhiU&jPwI=WU-fiQQK7^_Mc!d|FKU@Dq|1xbP24NC zb;SQnobfsCu!f(PBUyZN^(zJT2&!eg$m4Z6KfFwO@Pb@@JtwFuc&XenZ~OF4QbUml zz2`}qh-PwoN5@euJy6RpHy3v4F>q4mE-8iwpC3F!eb;`Y%D~mX2kwDSi0?9--{$Gf zFvh>*iJ^ss@{!8;f`Y|U^!F0wurh>BnTLOnjhUHNyx58DD` zvFoN;`34T;ckev-w2LlnUZ~r(s;;a11hAat$-5ZYXoP#Pac*I^>^g3Tg;kpg2RWYq zc;%popPII|cGKyy&jGVZODB(SSIU@dUJ_&Tjfu=VzlCyeJWM~Y$*kEtmX}sUMC8nS z7xe>P+V2IE2Rj&>EqeccCnvYwk5x=sD69d}?PPJy3C3e#h)LF6qoaIEJX@4_0!-id ze9?FMw8LA@SZ1iwdrRnI^T~`e*8sFYn{Y@uYEHgu{b5UB^$?{KX{~+b?(3~1YB<&M zPCM}x)|zIC+6`Zn?ZT|IXHL@yWfb%KjpRFDZ70XqNLxlWYCIL>u4~xr`)Wyhdc?Ba z6~w@^W3$7YA5e=PJ^A=V^tmQ64Ujv65)udJ8bCFGZW$UKZKiILYY806vi3{X86MHB z&yW2+wa~w?)n;|xvBZs&KD|pnrs&k3^TJ-a>FK0mz0$t?^P5{K&j}1ZOMml*cW`pQ z0zlfL5QpEmHmCoP@>OV@3}L>$^g!50yt4c%e%viJe2p=~P^q<~EQJg^+7pyl@}#tUFM8 zL+5dogbTUFUmA+fspK+@?ebTxZ9a4xFn5CkTnKOx5bs4gIP869Kb9rugBJ|lUH*JZ7( zO-ot({@4{MF87$`b30^LM1L$h!*`5qb5QGLb)UZl(~7@~B+_bb+Lzc2P%{_>DNMmM zk-bMy@vL*F_3uHhL(1$P^&}j-#0XDZ626#IH#@c)85|xY;YJ)@6GzV z*>8)6%lk*H92_1My-)o@w%cuK`uZyJfZWnPX$CIKS5uzHwv+35gBsM5B#+vOJcIyR z^P2Zku(*$DLc)!}%No~Hcg@Ty#7+e6Dpa|rai9Yn#8)HB*EswTF?TDZy{bC z*0(YH*GZ)Iu;)XP(0}-kDE}q!|A&mm|ArI*0rKBD2j^QKwn{oJGCzu8vpq^M7q*rA zA5qGy{hAy&yD(L;S(>0}zO=W$1@ZCn_&tw?24%^6v!gjViAhPrIn6n{D%U;-Hk*<{ zm+qgrA;H+BX47*&{Px#7gHg$x#2V0^<9j;wt!ksB%PJe3xfN(s?^j+OndcISP%(n` z193dP&71^r{?Q+ENwIYZz!!?trM8QSe~czCUc3-}I=T78fxx$lyPT*=!~|8CnRe&l z!(`t2vtGqHC^=0{O=pWD#Xsz!yjYdHKUa4(H_q+SLWe@E8V;JqMTYexAn}QrR{g$_ zv{D67iYKB!Tsh|L^(uzlLE*Pit4Xcp<3~zB-j^>q^7*8*-ht})VQXk&LV$-_W2U1= zkD8g8$$-j^;YG0%ymYTv&sd1H=#Qa>f<&k}fY{br|LFi>qgO0nB@vdF=FgvNT`%wi zh^0S{bmyWx4`ud==quR6Xz*EW$Fv1X48MrdAhB93KBog$t zsFISBZ*HQb4+tL^^FiVX_{+X#VQ z^o(lqeIE{BLvV4C>dvd<8oEo`{Y*a8Z=a z285kaUQGVo4G<`nyZs3!D*gW&i8B7%~T*vBn z_7SU?2}6j;x1DE;_57?v=?o+St`Za%QHnqeAd$cqWVZ3S zj@^`?Ft~en2MO8E3w$)*vX1528p} z%NE9_FmL=WRA91v+fMRrbFVVI-#B=Zm-)p1P(s?~f2yCs?K7yNTJ<~KB3k$C% z7%&rE!(tQ=0xZ<&>_v>gj~{gpJT;IT`t4mqe3qP8l-`WH^)H6)|;ERrPZ`4k8uy zGJGal9K>}d$>hW8yRZSkv^t~0s&zAgh{~5=yx~3b#*e_7fR-TsD89TD&VTX#y$ULT zk~22M!Vg{D!NO98K3&)j0d5)ns=)(5RUrQQ+xQqAa7faSSK;@pMxH^KCPF+=)CkpuZ2 z+`cbn8j}yxucx6Qs^foxnk+&YnxSfYAP1}S)2A%{tLRh-?3<`eB2*7cd;4wJxp-t{ zWm)Hckq&F9BdJ1#qu4Fz;`>VVI5RO*)JyMhVVCc3=2w!VI`E)IUHf5JT41C?A&i){ z!LtH3L6%*+6kS|O!}SIIPZ{7joBBKL{ZB=K^F`RB`^LaneC37z6gPgg92W&h-C$69wXGm*zfH19&hM2p~k4#hwDey^el{&uHGPZY}v1mx_fHg#EWfNoV2h&7`PLKS<^- zxAwg{av5c-|^wKWZn3+UE_z9h~*QSp$xWmi*tfKDB7~ul&RHWWf z$*`kcADk`Wx6wr&YH4jH{6DW#Qfi~>Rj_~5^!5Gxq!u@n&4vp@Zchby3SUuP6 zl2%*ftq==`5G6>u3zu|ddOM}yFGSKOTtlySk-**GT3dBO24fWfTBxg*d9STx+#}$M z-*0Ox=xURW(Yb)3a5@T)Q{5-QoKi=dD#}LhP^<@4f>eeZR#`1hU(5e$CTs{FEKIOK z$3a@^>JQ`M_J*83A}ARB7inwQ-(SFLiCI@JBCmt>AzP!!%E-=spu|H(nxF6Uo9jGG z{KDVbmCCKP|1@C4^U^ZQmt!v3KqH1z{69J|DlCN%ApCz}mNmIGeDnpe;qmp~(bhj! zZ{(5xU&vEU+Gp!KY#3}Ni+t}m>&5xD9$!1>>=eF+2sZeS^W*CouzpaJtO|(-PPxhW z&L;}Jung*~q0ews@yJG8e62Z5`=}i&(mVX|hi&;}#H`o`ltM7}POe;ybc(;DDkpc( zrbjh}$iQ6UNq~CT<+nQ()R-@-tJf+qO&F&vTRebL1lAf4l56+4Cz$tfpD~RjCA(t7 zLTGl+#`rE>5*y>swJhx{umdTxmFNJ1#gqcfURKYW<}tA$5gbmTe|52VdQAsCBmCG9t`Mb6*MM7PI629o;o)*%zmTxNRRW;kaY;kts4Pobs}J^=yxND4 zAKk#5|CU(jNgW|a2wyI^i=!r<6<6SJG^?YfaVK7wuy;o%B&;V9cn9;>PpB~?Rcs4mrIX+`)bq?SgHRQBC^{NxD*3D!Sf+|q!C^lN-=bsWUVN4_OA2yT9T z9BAP2A7FI%1}eDnF?%W!cE6yg=mya0BzztKa2Ov&NJO}WX$J5cT2|&`l#d{DC`n*q zmz|~IAEhLj-MDd*Klos%{}KE&iiDN9ZdfzQf7o*2zkf7r%RDGehK`PGq+eCr^`UBS zKkf@!$PxXer0kOkp!RW=VeY&&(sD={5bQA06%kRiayM{|<$+MaY6~Ad8l9WF4LmHE zE&@w(`EMXTEC|m{Wva3;7aZ{Y_aklHdD-N55i3lVpY;K8_wnO1otJRzi-Zl_^RK-? z?=KHF;%AVQgZ=!c2SBxgxo zi*H+-1_1io>1km+F;Dj5kzrfHU8(l+9De~CgYBZQ00$ICNuF!dr{BUzCjvl&QiG&3=g4?+_Mk--SWtM51= zUpooBZ~Wa?oO=*L4dIluT3cOlbNa^z87^j{z_B)B4OYxSlEZPn*E6(08m+d(pXNui z8m<0#i%N2d{Y;C&A&OYaOUde>E2Q8RxB{fvJz|}&0|_fr4>u~a);9}uvJ#hq&=WxU}y5|dVK6rbsrpiEK!}-` z{&7L4$YH{c?Op1;*luXzv%j-NeNEdRwEL`0jD!tDyQ&2)B-EV4|5}fAzHo?C+3Y4u z_*;xSrM(pKf9gW z?1Wbkz_$lq&C&`vy{A0{q-0^rrDUG73ZnXD|K97Zs-lZySig!h^hPcbUlODcPbd0q#r| zW}*@DfOX*Olha{~?dRrf5*uB4^S&%JtSK=ztpW*Pb;Kc0-m0X|!J+}Rb_R3OlcuMq zYr4}0-j_}$xs^xNpJ+>)Bt(KG>@+G}3C5{nwsqkS!9eUx@BL#xwzlrm_o?Qh>`09K z_Rikk{!$h_QPwm1R6%=v^Zqx~Vgb;ughbEaQ)SFx;^4pn*2$FHtE>#S7U(y=Nn-G; z7L=5Hy|B*|(tOK>>u)}E72X~YDNMO7$~KwvCgdjgMjU&>;In023}-ga`;EdVmY zEf93DBsvU&i``*9J_B=eI{1-TcI+S|A(1e7c)+p~K^sPO89ITmfRZ(8f3Im39Ub!e z`jPP~RnObs4Ok=O)4`J9CC3Gt58i@{wU5Ii76rEXU?WEZa&qLo@vSsE`nlQ(@UdY+ zfs3(W0S8v}_Rnzh(nTGdW5P6z{TV8B@7}$EiNv&xcIkW37=x}TGwH1;1WdG$;o!A- z2Wk~L13KeDzXf<1zz>A3?w@64Xp_MEMg*9&dDS{{yC}$eXfUJA9JydU2eU)RA9r(+ zLH>qNnC4&u*o1&~RwZO{eHQ9%8~=|=|6C@Ol4Ruj0YYVt1=jS6cTwUL}~ zZ;SH@kqJ`VH0c0=8V)euWaoBIQ6IU;Hw+Nwx>8q#aM5Sk_l>*bn&oxOdXQIX?< z5F}{G=kdze0h7Bv<3$5!F5dtC9XGK>bp)#;r`I_?FRJC|#UI<-4+L)=>4xeRd6%<2 z$^HfSp+AhwXliPTPA|YGJ6ne`-9R7;oU>^TSS6yr%-Wg>mJO2C(yT>DPF6?y zo|*B+@^V>V8Hndm(a{v>f+6MZ5=`MI8n5c3@LbzAwFHOoS>)6mJ9Y?&iFu>;Lh}vi zE24gzL^_5IfdSUtTkzGGmGltzh5yjhlrb^^@9nq4Ym0o6-7{F32!ne6`y`F8?0 za-jupG{023c5i5Au}dNxF!NC5<8Yy|>Ba}J^niCWq45ykXmS`A>lf}T1BqZ;r$aCV zA9D0z4!^6_Bp<+Xq94at=#z_htzW3K%U_sRElrl|Gy?S0Hd|P_}+z0~*m%rCCk7#6#?|C11 zGk5IJn#f)F*9-8rrsh=B4Cvj!irx>BZsNh@Ynhg4o1~*Tsb%8**G(TBIuYFfNe@c>(2KM_@ZggkOSpYZd(P|g zvJY@(j9^G;Gq-OIy96Vn=U{(#8RSNEN5!a$Fvu-bxe-4Zn0EE*)muM1#qjwXtf8Vz zMv{xEouSt7IH;LRE-x;ML)HAtV9wwngh%it-xCe)wY@XUU`~nsA~@FUStuByB=q$B zqc-!FY0sg3D8(Hl^=69%VKL;C*;9wkz|h^gZ&g}@9U^}#(xk#JdY`J8kka35ld=6K zQo}@&G!?$Rf6x>G*mMPa=??g55j3dg_is_C56c3Dm|pB)crL?EVgcfp8t6!^c&xL& zaR257wE2Cxz+Pr=bt+qpy^;~d1A(?00z#SrTOd3UjdW5{zNqi&9upxi`J zc@Y9Wiu-G;VoVjO3JMCsC(oS0r!ljzkcXj*r|$$cOYqVrZkOqWr5&xfc$L--*gBZJ4Vhcn-=uC6{C(9qBzS}kd!sS`f!?=XW-)zZSVW}oOMQ924%0`M0_ z3-lyC{`fQE+rC$~l7q8?{-)i<_aly@&{OP{+OSi1T^RUEJ$>@XzkvZl{fV0>tw23l# zvn@d1JD&X*wfyY*Bfo8=Lpgs4)8s3EL<2B`YU>RDTc^YCCJG$Ef4jS5@`7IEDXKm1 zIwn;nQgrBRywP4Rao&IX-uC}-UIOppQEu?-T)UuvfEDjdiOQoGfZN`zMk$HWc0&^C$4w8XT$cIm#+~LQ7p9_UHD!dwN znEOD7z{f$VF(G(d`_8ma@Ytb3+qNA_)_!330Ps`gQXK)rfc2f`E{T(c z?k(EmKB-Dq;f~{A3*Zercj1CNG7HhNTwh=Gvw{cWl0C#GghcD}7$L#M^(=t4)N$eb z>hiCO&4lq5MSnWi)hGW;zO&02lgj<8~4W z_z7h<$@PCVxG{h!1N@n9xarJ20;Hv>rB#kf@ORN2OfJsF76M@wt&VpjH{DWaEM#pK zSZjQOCxAG$SF+lO)?nCNs7UyL3>&CP%fjJx=yr2DtXn{h*7v~@3Rg59v*3DTwzLp; zb+1(vU>^PqqDF{!I@dv)=Qa=Q-M>W;{o9WJO$5QTE{{tV|92UaMDnY4$2gJ-OBzPT z;;P>^?nPDl40hr@$|-VWox(Zf{f8PdTaPY((NP|(;pzXEUhRLB%_a(%wSObLo1FhR zyq!H@U9b{;tret_&}(0~IT06Zn#YK9z04ja%>FtwFLoX7d7^9zf}f8hb083I-gcXO z7>qI>pKo4y*6m?kmv=b@+|xZv?fs~>KE)S5XZM!tnOd0DNdQZmrpw=YFmU34qf~dv zEIXrrXmy|1C{NKX*e8*%2~o{fy!f!m;>xOFt;&<5*~dR#b7!CvR$kjySEidBrSy>JuM7R6asCg;4(GB2Cm?t$%?0(&duNFwVmMj*T;$QUvvlo^qbY91P%V1+ld_x>RZbZl$#1-Tjc>!r08sm7g0p%zH7$zRYK1%h(7 z*J8@0gIMwp5SBlzkNIjYf?nmYu#?cMIxh1Cu~Y3s`2b)IVEzhfA#d_;K1+30_3G6@ z-)g)WG%m3%0fjzoFujs<8U8*vHlaUlz-5QmQ;eT6`=5I6^)cxefoI|#=_!6|zm>1E zt~w?4?6l8aEgPGu8=I#Y)l4#fS8c!U7JGI*KUN1L?m)Lx4$PV)87HUX@IM%HZXyv@ zwo`lhl?yjCQ@fY1MHVmlT^}hKuU?xD&q?f{ewIs9a-%`PJIHAJl|$lsXAC1o%`4-B zj@*_|?ArbId$<iU&c+3xYqgSvmEmvb&Hh zux0|)59Vc%N4Pm3^fbB+xXaoI|$PieucAVH-ZyDJx`LM*-<$Iap_C(y<=z2 zoB>LE0D=k*ZcZ4k4Z0EK(Y;1b%2Yy)t@LwCIejk(J$Sf1+D;>yI$-e0t=Um6qVtvT zLBde*KttbYD;feFaO=^uL7~^D@MbhLwgXGR3`lrvAn_Fadb<&oGp1wQPf8*pvimt+ zYFsKpPC%o(5bzVceUN(w@)Pf;Lv)KqBM_z#Aoo;3=@K}4bZ?gZONVcN;e8rl%RAtv z3>mm#!O?LEM#cdim6QS%xFCNmI8HvXhdhmJO4Jk&6v&`c2d8#3c@zD6bMIWNtj<}Y ztI%U+6CItw;QNSIuU}U}swYLkiwx%~jA-zr%jxUyf^32p0kj2eY!XHcagkA3&(x7a zu@7cq+%YqL9c5@(SW|Oz_UL}~_6*c#naW&K`*YG_^fES+DDS&E^1Eq-@IIn65RB>r z7bLpmD1}oBBR(t+HIqQXL8B+3QK5zeV}&S3Xim6$X|~`NEu9!NfgDQ6d*bIu<=SZ} zy!GIWRGk8~^ZDw%3>#{4g}hG6WtSW{aNwMd&SUh0qrZJ-@iMIs~} ztZQ^~@{QV2_K7Q-(^=-R3p`p!s<{0m-8A&>tRrDf;|`+We2c&V5{|HO9*TL7zE~>F zdagUTcOnsr5kVh4qQ&hwc4DyMvw^MKxA)=Bs0i+vyKr-fPbLDTuvv=Q4t;pG!iw{K zA=$OcJP6G&MHBCK&i~f?eAZkzB<$(XU_xe@*m+eXjDnA*x6;Uhfd}4-=xAA*Bs5xO zV02ivwOqQzNK1;xjO1hucP0l(=o~y6uILnZ1WAd_L)eB-o~%exCZjV(d-D$&!z4|;OIq7}_V$%v-SPV% zPQ)qu!!qjj>BsZNeLOt2CIf?mWEc4lC(MrwZzk@i9i5%cOgeY|ycA?LpJz;yA&_oZ+D)M+8fNOE|#j(k?0sx^g70ajkC zHH0u2#`;M;LN{K8!H4r8e9)p<^jhT5)kjZXgn~8hw>`q?L>tgO-Z=k5GqqNj|F`oW z8^+5^gaMT(lxflj6eypYRvhfX`0!ZN&$88um*1rXZUmn8PYC9u)RzLe)bSqFh#Q%ql8YVzl+=E798Qz zL?f7xPo)=ctFh3JccxZW41s}xT1&TJ{teOMjz5F>@>GJD_VA!}MAu%1=m!Jw2xB+O zUyW_)^Cw_bsI!259$EnF66bJQVq(*iYuDog)wEAWKkdCm&afM~#H#d3FH6bpT8L77 z_WpZNVyD)*%OaCg%sa4$z!s;U>K_msydF3MWAAD#!2fxIOGuFpXh0zX?Es|=0v>MC zedve@s?NXAg9fWmjXgG?RzeMp$g{{u!qLV0fCgbq>xQhm@k?T zu`e_A@$;ad_=sfP*O#^Z>BY{FWOjN_JJzEJ&t&n#%(QWF z>S0Pe7-lc4#{4`muokyGCn@mR^Koq7wyjPG&EZ$_I!v^)FTBMcd#&>U>+C++X8Wwa z(V?fUT^N&r-TDB|ZxCK~)riX&OhLXlT2dnQrt4?+L|xGRe)~cbg5>8r`K;KXclGr4{N3Gf6aB{RqV`Y*{Y(BVPt{?)DwzSw^7&bJxek~~pvTW~q>3P}q zS#CvNG=pZ_067y2uUlweK0cQ)){VI+y?5l~^8b;DW4fDYbmVB%hF1g4w@9l>PEfmx zopl(^sD^%!+yN^D@x!Q4D{LSkPt+f2?8#}>tAM7886BM%#n6&nEGIW&(vWZog)t+e zg)L-2k}DuKws|zBi~|xSCB-0J;}1}P95Akzf@ET1B6@e4*R9;3U4-QD&3oT(Q4i6Q z$nm&`H;v<5VYmFXYd^%Nt&Zb1=syx9BgAaLZx|48D67rfVJxQ=1rgm@-UA0NzwW&) zD}+{oNQ`bW#PoqWtGR8#;h z5{-$eH6cD;QS}z6)x-2nfE37kY=JrBfV{gP<;m6#Y3v&BQrt^*F``OpJHwCU$ z>{?~;J3h-&G8Hl26LR&Xe}~I2_gzu>`K$nIh0&AVULsuoRH`KO7m#H1^j-^{8fF_y?ZDT(*+VMY8JP6pza z!S5#d6Cdz?gK1%J2?L`A^*<-*&;`sfBK2UFumaN6rICAl*F zsRlP@e$raAAo}8hZJtprr>|Q2*+OM_)bjHB>O+o*I{f0qR$FHv7(0v#56sD=W@-24 zthRbidd9BvA{Owbe&107ls59mms#-8`=-@pP0gp$K=OYYocLhsL)}Z*;Bh4TqCGh- zkMo>0%rHv$l>b#33}43wv}X4kIj@NR-mGA9e0!RIn^a@=T1^;oakcaQGY$pElL!|J z?065bkhv^7uNCB?e*@>M>m2L1fY@`q+22(CPeeaubBBW!YPy4@^U1NM+_Mrbk78b* z$#?4>S3P(H-~G$M^q>nj6lL(H$1Zxn7C#q59=M!yk8``p((w;JeK7lJMAc@iv|ULt z!ugEl+d~+u7n_<&kFE|hnP>+Jp{NGl)`)xk853rLKc@mhFU;$&4(RviN#cVv)!n)t z=+QXX!Emr0)4QjKq;vo(mx0Y{P*9~Teoga zzVtQvq-Vd)n1%y}k2lo`a_`&dU*#Vf$1UXqHf1v4_Si-ddA0rwv_oOK+|TW-^ld_x zgjEfwAMs=%{@nA#22)0GyQ!Vc=8W=cwjr$TLUOaNxfpCzHZt?AzcwJVt9><&Bhun^ zHn^5f%e*TLieVIce4kYJonw{{E{?Tux7W$Bs8e9$e%Gf^*XoOTOa5cq`%)SvndZFT z__mAut+)BmSaE#UxOKkmz>R7(bHJAHUKW5c;0i>}}e>}eP{LkV!Jpjn;F}w&19i=AS-`*C8nxNb#H77)|@@Sw&J~u7FM8@6z zr_d!$G;5nKqrT6sXYps85i z?rN!jT>|%w-{XD)(eDd_P|1AN;cu89PeVA`K|x0&f}z5CWBY>%-hTFFltv>ny3|Oi z+FdY3sZZEQ+?#E?`guKvgUl+y?H{)re!f^nwYkO!PbZ+BK@p{N+-0@sr(=eyy7~;7 zQHMcmW9H`pGLv1nxZN3!ghSd6BPn^tT8&amula~})nTg5l2IiyE!x)I=o>H=!#(N- z8_82urGt%;!PP`JP^-tqZ{bi`YYQ$cy(~E1q4|HY_8#zD?|wvQ?73%ScF~ko|wYb-Ns1xF1yh_@?O$4j3cs3xO(a8A4rwd)y^t9ff^ zKl;w5vFRj8S#lB+_xRnkw$A*vd(?KDAC;TyFmB2)gLe`2qb@_Sp^Z=}jJ)3fUzNRO z@)Vt{3%=DfzLgenSvm1fZb@EE`|^-ObB^`h#n@3b3yUkSr0Iu8tJ&Rd zlmZnjV6{7UR)T-xNs@xCu@*{hH}qI~Tb}7_VME%2{&+P-c=k&SB5EJafr*AWxxd)( z=)sX~^6_HoVa?-cQf0#RV;7!@gh}a-${b}VM?ZEjYLBq}HqiF2Ey8D!uwNMUe% zPnymB&%_iBqNRNgw2ji5XU$I1c!0@6w=KzxJvUG(1Tgwhh9*5xy@I%~uU!SZerKxz z7YEc>KU!xa;~~K5$&x98mj(0b0UkBJDW*stjS)c!%~sKl8JUrYvgX{z6P4P0GX)_= zh5RbtdR(Ozt_?ey<@kiW{EVXlspatbCoKHsb{V)*QwB3jBIX^?} zfReLw@tct9pve6-)wQ+fupLwW#BzLVMr%pBWk3Aql;*bH9%3(-$wk z=eOIi4j>K@7HA3r4A!`2adM$mLU*Dv7iPAw4|W{fTmXWB)2e75z|bR=X|LI`AV%bd z^^Z${%|dMhM2c9vVek-_y`rH}{PnhRY{^Mi%cTt)H#U6u<>PE1SJ^f;tpkLHD^XLq z8rNd(NMstv25ds1yGtPMqko=9os_*uLmhi0{4M-4Fw5B54oyX#uw)ti1-Jn%5QFsF zn$KwFTQd#(%+)kBm`TXOU!9;#;j-Y@ir)Mecj!8X;E<5s-f}M^wL{Xl2y`Qv3 zG)Jt=L16f+@Re4o91f$s4=kZBUn@D90~K$8${D0ZU@LeM^Y-2PRV(>7vN8D7Nf~Ioq+TytO+W_T;QbXxjGutA@pL`%d#hk#7(PMnZp>#d5#o})aBi`yCA$Q%6 z#&Ol*Y5EIGjDMQ#cwr;z^RA^k&@-A&zxwgp&)(CGlDhdz8LK@!I1o#~(cG@}00L~CwgDhBkX3+=2Hz(r?J5$^0zB2KoUXaCv1%m1>{|Jql+&LR z6eY~F<|ihs=-+SCX@=m(@6xDDBKW7StkgzsFEH>9Mf}10&^V|^;))qH1n(60Uug0z zsy}vF5f~B*7j?$+g@Y?M_6l3_WKSy`wB$98Vr)tp^{X!mQT6Q@mEI_(&oBrs_Vq}9 z<5*^W4<*KKdUBF}>d3Zry23r+5p#2|>W|Q^Rs_4Mo&MN-xM@tcA? zs?o_^exr5;pF)}FCeIc0aBMtpnwFGAuzGaFJ<5}@yiOMn^%v??ZrOe6)=mgS(O<79 zB{`U~2f}kKdJdH=jbna`a$U|9TJ3hfdIjh|vwJxYiZMn)FWzQaY^13eHG0$A-H`P+ z?r>patEn!_qfEqb5orNpuE(ob{i;q&gR_M#lJvjHHv{3=5xB>6(yprVcUEG}83}rU zJVP{ezx$Bn&Z%-Ydl_{@I>p!_Qs|9|X&|06zg_)!elwgJD&zH0l3XbzR>9*%-8=dQuz zEHlX7pI+fGE5NPLWQ>IUI{Vbx0mRB_+J)sICAQ~hjsZhju*M~E*$j=e@H1IRy}=L` zL@po{_Vs{OibL1&m@Uz2{vD$lV+T5|fJy@Yf-8~))hlvlqFP5FzhaH*W&EWwx?P7D zXP}28wgME|#p`)6dLn$d1Qa9ut)2Rw8eMDT1kSt!kb!zVNwruBBFu{y*Mn|RN+~?| zaLWoxO-;>r9}7pSjT<*kkQ6ng2X4EUsT(s0KoSzxlLRUfJP|cLJsrRLq@3T_w{H)6 z#wrQi*a7?qa&07oMAtv>{AQI$a%MnZ+7%$l+!MQWgs{VQh|MXwGn9}`Im#)`Svsef zw?gB;f`Y}SHQzSr+is*|nY@MoLRMX!XBrC!WIRLfsulF(#wo7I6^vV5C)P!=nak=B zUr2B|l6a{g1&%sc7ZAgXZPv(XJ$xZTo0nA@jJRr8R!e&quK!GkLDl;ZT5T1Tu+DEk zW>9k2^s)I~E>a2`=3}55EmBld3%8Rtp3Bnn+7yDOQ{AbZufcZ|2&rk>@&bU!>)KX? zcljdiVT>uM=?}XxcL89?4yhcMI@2UZSI|<4MSn#zvmcXHei8;tR+h{lm^82989>x{ z@KU8A`oM=Y!e)kxVDfca*!-*^FQh|>-6w! z=VudWg+??tGq?NJC8v*WYa7u@4dpPQZxRu;`}+768XeNT<@d?ez8A6`R#2rU{hII; zzGhWmUue-I(ls8P+BlJ|=VhH`)(~QiA82znyG{DQCqlLdQ+V5TnC(BVm`us-4jAyV zg5Wio^mz2OZ;m>XmomS7p#7Fy$4k7DpoX@o_waVJo&4%2KeZV|1=||U9h{1N60X{f zzHLCD{z+qwksnQ8d{JsIbA3q4C|Q>EPPI>wx9fz4w4psTVQc#w?+(i%xjD`pJ(Ihw zPZE|A%vy6TqJ*zrdl>u8!SWke_z&MMjVe>i>dTy(Y`k^+Q;0PjDU((HtizXhi=N?v zL%Tc)Q<#$CWZ$^Cxp{MBOwpEJ%e~vKEI5~N{{Uc>zrb7cGk{^;DqSX3m=>6MeVdqB zhb`bR9NpOgI<<4EQC?qchBt*sO(xqeBnJGxVU)!5Pw+B8v*BNnFK&#!Wutykar)N4gU?=t^QWMq$H#bg}#+lR(6L{P%q`~ z4zKbTH^($)3Q=B<$~S|pU0iflL0WWhOF9q-icQ;I?NK_*?bdiGy|i z5AB>t4By*kSV^K8&+#B8b1d96q~U>SmKn+{dw7mkP!KSLO#5p4I;s7t|%z1 zDz#5`cQ-$PCmoD4;r0=KC@z*oeZyGM6WtnVwjl=p3)iV3 zu7u*{cJG?jQSr*YaXRUJYCieibUvDKs~yUJGV$5!$9lCeG_7{rElfSf>c0-)TA{{R zqEtabN{TpAj?6odk@_he3tK*?c^I9K!SGR`lAb659`j>xACa3V!H8wEXkfPCYb*Cs zAL`UGkQr`>frmSnLWJbGV}NjtD*b$X2-WK$rY$}haq2cLVkGL#5Xf}y#O{zYbbJGs zR+(j;c|5TFObn<~_+?t&fM1HqB1 zC1cvvVVlE>ii9PZp`!?xwX@}#W7AeXv1oC0t-N5+Hr9)8!jygUpE-3QJQ{*hc(q8I+)Xtn9F9F z&#I`y7QQ+*dA^Iy>7?jKgL;SyC5H3yT|d$ zO%NL$y86|)k={73Uvro6KIwSy9Y1Zi!X~(D?x3#gboP1VX ztf4>bJ_=PNV)^0V4;mC5FWX^NAP^`XKF-R2C9BfYEV>)~5Vk`4ob;HOb2(4(pn$cy z_bvTTvlu%jZp&gimrp;38Zsh*kMOfXvr$vo&YwN~fI}wyjBcaB8Qlbrxia(In9R&0 zfUY_<-_-1jRx2liR1BUttbv~X+vd=6?}(oIL%tgv3r{C@j5hNma^-j#3Af8EBB2ye z*1)*-t1hmqsa0kG>ma{*GkaMCWVhAR>pX$gs|ZFB{qj!TU;~dFH|9b<1Rs54%RLH3;SpH#mzu={t6lo9#<2Et3ag+Qz1so{hn5? zeX;f<^~RH4<-X-Vk6Jq3yqWvW9zCHlxBkoLHV5%5u^1NYx<{_O9eiLL6>M+b9ElV1 z;QliOM_fT;C>*~Liaq=nC1XKpW)>mcKNq@mfQaqH-! zl*$Px+yPes!#WFPoq}SMlSvbF!q6RqmKnz!>6Ha`qhxjBJ9WxTxmy)a+$Qu`xKBVX z&_X8l5xXk?Ix@twR)?LPy&jnpD4-zq5{B<@g6bY<<-AAPQ^!;hG*SFBmiKx?+-3eM zYfN~U|7sw54z)1~H0YP9pw5Un?>9^vCjecJ-$x)bp!@#99j<%(;lqcrDB(zqDaAEZ z)0rN_h_DrecwP0npX%m!mks+GZ0w?h?8FTBXRG_juZ8iP{+TJPu$Gp5#Y+ogeU+k% ze3&h}FaDItT=M>mM!CCw5?ByYxo)GEjB%Lmx`{}3&iMh&#r;IKnC7xD@~d-D+k37kX=?IjI+djpPLWdC zGyk^dBbvB8;q$9JfN|Ka*h>A847_3bfn2#>a^^3v7N<+Kmbi$*&Ln(wn-fG*+n}{M z*s%cDC4&eeC5iD9@(ZM>%nJyZX@X8|m`xr%hkk>b_ELdG`SEn4yI!Cxs%mSGY&yH0 zdSC-}8TG61#=+WbwCFRB>6deu1-~dcTF+&tIc)|@kA^*O$kwFAW&Oj~06HQ0s(|A8 z1u8-MWD>lam}tdAb_b{fi7P2Fv4+=fo5?yR5Sk@3Z!L6lyjl-sIEv+=J+0GgJDwr( z=y5*8UHifks7_0(GayYh#l@Nxmj)x#d5^e?g(Wy?NKb91u1~4rF#M5M=d?w0X|~0J z~7~xEv zo#CK}6=@a`wd!BzJlhaeQ!ETUJ4LJ2;3=?M$ds)l4|_ zfzsxlv2jXo-@U8xjtJ+=Hjd4bPx>;8UIIv3a*z3eIH%auTJ-5$q$cFW(yMa!=s$*` zwZQSNWeATp9&|QY&Y!C1Pp+_GQ=M1TupmavkBPHU8v$*eq3}N z`e^=&gk@Pgd9nYJZsUIpc6c`inKMAH88C*&rPL5GWg8m9QDYm)KCG~FwNlctzI5=J zedD^F@uLsB%r!05LVB(8KIDKJL@eSlaKriCCMj^VqpOBR|M8Ip4KC*r(LOrEX(N}b zRuA!Z`DghAl*a*!9Vs4-yjcleZ>ES(M zTjtPiy6e?|Rjk<#C+d!J_V3Jo=X2F%cS5{C00wmY;F0lyp-zw5$E2_VIa-EF1|>N? z5fX^@d3xnS^T_m^txgnAAQ_2c)aO_PwwIz@*vv8~uB+>A8qzo`*5(=gg+IugAY@6%cu^NuEb6S+8LWN@o8Y}A~aWlG9n4J?>=-7+7)!Y5Uv;C z>jp$oV+U7KzK&RA`zVrG`<#-Q49vo_Mw@&?tF*SaXl`q});^jrx_wU0>DZQj?p(<&Hjz-5P>n#%9KL{PNXd;y>2uO=V_FemjgvO+zB4` zdWCPRewJthS$mW2(+e_SM#e;X-5}Kqx<}ho_9L4MkqZ$0)xPV7Uz><7{LsH3plhYF zV<3R{{&e((uI1X*%FRe2Pvz;gpe=<^;qM5118lHq2Ibsx_ z2P$a*-EG7~ORr(V1NjE#VH!--Z?sLJ5prfsTBr0@f)6 zaa0SS&P8>PH-#=Z2D}wuDE{w%GW9_>zVkrf#T*kzNJ+7m3;^GD6cIxzV>*2Aq8-PT zR~@5p3u=TJj%}r6h~i+U3jz|N5}*Y*(kw+w#1I}CqOFIp75Eiox+^G{_j7k@%8v3#kFbqaJ#ezvjzSU;@YNcf5CE)n0Oiw| zsj2Fcc$NwV{s3`=xFA=X7HY6b?W8Aj)!(5@JL`C@1bK) zHaZ8%X^0>{{~g1liF1CZnEgh&-|M5`VXZ@xl`m6|ZzoLH8WI<<=#Vj=MX z9=YEU6;~1b63~(jaKn68OCOdT{#tPk4vq^ZUiH6_)K}vi6dH<&liIqvW#3gz%y9E# z1;dUT9kIS(Dza;<6<#Fn`5l+!q)l!ZwkpDQU4idJi3PzeW#N4B2F-J3J^ihzD^dPA1DF z*5!Csr5ZOa0S71)6vlA4j4w8HCy8YVp;{&hgXrq$xrd+}vG^&z_aj=T{2^h;&Bek8 z+CO|?p*n?&WF$BIUP0r3opqR`?>>KCin?&i?h~%ifMZj^ zH=&)U2DgTP0+tylzbr@*McBikA5$=D2Q9qSMfME7;lbRu;yH78!vBPhm;~K<)wwMG zKm_X>q2{C^6jLZV8?t+bY16D=i4Io21LC*T_5%ncw zq)wmM-F-v;6Rc;=rKjK7ZVTH1g)*&I`Hh1L2io`@ux>$^R*-CkPa5J5kM+IF|m-pv7z`SpPR`pibJFhY}6xcWy&N7H0GWY_Gna2H=Ay_^dP zom{92SGyE7EBZl|yDMs$G_NNd|AY_p*8IBwBQ4H+U+2Xyx0Ig;9&~I;1R+hZr42 zg;n!kXwq!bQn2w1jAYx6hMQ>ONn=z zvB>5BH1cnI#Cho%5VJlJt?|v8va7cXy1kw0zN3Sf5-uh)L5 zkH$b*2J;quS#CuQoYe|fiR;&&z8T);1if7T@%HxQjc24Rw=ZnDf7Ys|LC!qOk;5u(K4(h^xtGrprZzE@L%+CMR!# zP8w`?&LncMC!7VL5WBtrg{sQfZA!jnU1RD%XC*xOE$8<&*wfI`4yT&Lne^W{fhD%# zjzoJ;u<61Zo8qbNyly;!{zHp85?kuqk$230V_)-|v?05pf3yJ9BcBOT-B(#rK`FhV zDFCO?Wi^unyu32If-Xc(91|4Gix$HD@yIYnz?~I++{aQkD!4!&40ep#p%7P*I3S9# zzLsBG(?=F5y|*y50(I40ZQjD~E6I%y=O=H0H{7$e)>&>xQ7Sf-dGFqAMtc$SRw9G~ zBu~#$TUC( z2(}^Lh^8&>#As*U4uFCrolibU%puxa%83j%8@Q9y{==n(YV-n|BVN;icPE7MM%N`;_>rnm`sIsZ`>7P@VD3QzRau;t#+wo`&|R5O!YC5O zJ2HmxQ&lIvB{Yn~Qg!G>;)43nw{OxT2F7Y~9cuFOF$F!|+=F8k06<){YiLTY`x@F} zi~KK|51!5E@In5BM<$*p5p$iKBUO3Ljd*|f{FGle7lMK#nidxgDFmPQ`N_;zG0S7c!q>;GjNLUU}vb53zYzb zWo*4ft#VOYY74XQW7|Y}NG&JZv*5+gOJ4k2HXq%ANvx`tH+m(|h@kUhe3FW$sT&RG z0e1G|j#CeR&03E8NE7nUz}cDE+S-~hz3@~bJohlj-l3tPaAq>|ul>2**VcV|jx0}F z;#g~IW3v|_n`ODIM!W0|;C^C!{ZHGs%x2p-Wzh>>`(L?t9OwTVEmg1Yq&bB&clEdI z;W}<9SdVJ;C3;mQ8{ywhb{jR-p^XN37d~2VsRS`BxdjX+jyxE!lv-Zo5gyIL7u6t_Gm`I?}1b+_7CFdaNLlGpGCaIFd zxqAz5lDalGDoetj1Ar-3M<7u(=q)6W9Hf!2h~JgE*`w*lA%aWRduynn`%1`*}ewAulp zpJd|Yw*%SG(4NAv0ro7g6c``%^6TklaQ~>d!gJJrUiv9tuvvN21+-Zp|6shtYqn{c zmEhaaD%y6Gz5HX@;D7?U53RUWIBXsWaNA0Osk$6vCQxux;YTQ5Q6V^2HR()rbnn%7 zjsDUbj`<>kqI|$`&aCW<28DJk8_I%}6z1Ds`R0)zbdo}%E+Csj-^iRa8bwzir6Va8 zbP?4OL5-W6bGk3*#S&rP#M1Q?)WnohB-UZXlOD{}fA?B?BgGV_Hy(QXn$j)q6u)&aqY8i}T36n*>lhS%& z&S@~4`x4`4-gbHmWsN12N_(YKK9G>8h6h;<%JBZ7KtjGSeESGE2;r_p_#`ee%#FYW zP^#er)=*yLKf+CnK>%;Eh`_ZHr(9(TzGHlm7=XcgpM-`D|3|K|h{zVybk4}!7S>p` z3&khchD}tP5b4gr#dQ}1(<`?D1exu|%bABmcY%i;(nj01QM)!?;v3!=DeNFOwa?a+ z)!+Ti&jdg(@H6AJ5#t99uZ=Cj(A2jfuDe<)9z!j0&*bqU;c1l6CvB!U{kS!PM``A= z`v{Dt$0&X!5puMfPMMc0kL2%yvlEy>|J0uOk89z5gE39Awv1XnD{I>Gv5@}JIDn7V zs3ZV;5d;QYz?v5)PGM>fJ(T%G{Z1h*5g|2@rybCCvYk@`5{>`5HJO4*o}N9L>1_YqQH*3tv*h$`1eoGU79kmu~Cpt;fIZpH=fJK+gq0@ zwCP1exsQbeJ!6wU>v_n=#l&=70p}#p)Ah=8QIM{F22U)y7+bfyv4xAXBM4c_=k{&n z{^K{vuD%z%^mYn#KAR{R(&L}6Wi@=d0YBBYQti?T4mzE5Wq$p35_tH=hYa95yAMKu z*E*Gzm3pFL72eHw^dRz0M>z&~1;AxivDZgGyWL=OaX-mkxw4mvskE}~Z0`whM5HJy zHEeGO`M3Kdg_N9*5q}8kh=tP!GCY^txf;R&qv@*dB8WlBV#}*VBhFX23s(t=FFN+p ziH$lY#>Qmu92l+FeCpLjl7OxNnc$<=G!&0jSjtLn{j_DeKDlwpD+^CBiM;rSt>1t| zb&;rl^*!>>%LHN;m#tTC-f?hpzQPEG0m0}J1j)S1&$&F@n5Y1WG{GEJbVej7CY>oT zf0yzZ6!r<&kP|Ow!oA(}>hwE)y<2@z9_s|=U+tN9yZ)Y45mbk&mbQ&et1{=vo<4ZLHSi*V%i%K*Ekn(}6@q&YO^AwLo~*?5U#gARiAU;81$3}LlxiRFZbkqPcm=*cLD=i|8Qnay0}(jd}=`PwM%_EYqYW(-&3O0UDl z`lfWHD-b#&!_|T9`SV7Mx?@ZNI{4M@B+R~@2a5N9MdxIt1|SuqXn{eZtO$AYZ)#y% zDY#XU=!=?zIAtj38^g?Mq!2{`1Js8_QG`Nf_(;g-5kKpHB((cyPqZf}mdrM#Q78mw zaJO)o>-g1H=WN%|0_mes;J2BQg^rR>ev4oHzPFpC(JvBZefj(M+YpSi;H_uqG!Yne zZGs)+2CAcwov_~p%v8wyOc}dKdVihz&940}I1ZqF-NzVRP{oP7sZzmY$Gecx65C&w zIRNU|qL&vV8DRB??>~R_ZTa{cZKeVkFP0^4bA;NALL2|teN!ahOGLg19^>e^lZ&Mt z=bq=JE-);t!kxC4t1qhSw(9c7PO5YBn~D`&$+UMnNb5rzGCOsEuSv>V4@u#j-H49_ zefStJj$b-Nds4(wKj{BG)uDeDUnoy(nzT0xbj! zEtT@M?|CI9qA7j}i(l&&H;FEe`wjdu?=EzB+mWXM`#`)RRIsO)CBp1e|G`wK8iyPl zJYC5qA54!XCLW@%3WHq!xV3|7Kl&+!XCY zm(*`VCcb;HWVy>2Z|88(w3muLKSaf?|4i~7#8sW~t^tU}3Z|T3~ z_Wplt{{G!e9?>&Cw*YQwqH=8db>BERL2d`6{I*1zWUHbG2obKsSLRwxuN`XH9Eri& z$OKqHH%*4cLT_xIJCYN-0Wl^KO>rEa*CT5Y$o!O}=3vg3&xmW_DlUdD7EM^Gj~^p- z*KDWxG!ZrS*%c6V8>(5r4k?mhs6*lGOpQmW{@phqS{UlHlaTQbj&Cu|&1 zH#>S3r*er;vqjT|iE@~qer)A;B`lMtq2^SWTq^t z%Og(^MT@bhsY%66WX>=!Yh=nGeXK(_Th(@y3+@%(X4GU5Jfq$paDLdgWH7d<(~&<` zP+v0nY->Av?#A^o!3pNUwD$*eTKDSFdiK5NyWUxveqS!q!Yy5fsd^&+QbUGK%VnQ0 z3a%5Cs}5%dC3a9{gha>RoPA};WBu^fu_Ft^hl3~RdLFDEeSPcu0G(cAzNgYDH>u;b ziA>{*Pa`efecI}gvHwy=H}B~e_V1=0>jrOMQ0{*iH8$OfvwoaSLhstiYRR-H?XQg^ z5@Jak@1KQ@%~c|%?duh0E<{@>CE0eBw4$osUQ*Cy4pCH!$&w_PrQdFkk!DR|iN=_j zUTlfVs;Yl|_^=)I>>{=dx~Qf3!E{Vb0hAs73lHOF3QAJd&>t`WoHBo0rQ!x|4UGhn zh;JY;9pR~n#*5C(v~IG90{%+afTPEcvto`Px+4k&BUw>xC9;8xB6&Qz{G7!O0fA=` zK8%@S+657Ya#N5J#R#RLJz?7}n;ps}1T~Iz@0K-pq2|H&!1lx;o9KpW8%F*e$a)Fs!<=T8Cs|QG3)6JVVkJ|{Tzngqp zOiRkClUuM|LDE?thq;%7FG1~~-NZ`mkwb)xMn)j370T6383oTYAjk%HA4zzpl)cQX z0jQfV|Bmg=@bkzdHXD4>(Q`75f7EOI-<#g(V>z#XB9R;b%deM$tq4?b|S z>pz@OZp$_a{lysFZzHsV@^I@O;0cizo~<~IA&hJnw^t)ixbMddV(2mcq^!r_VgO;u ztn&VBGR6f*U>F>Z_*`*48+v+7KLwA0tBUb8X9L(Mr_Y_cJ3NB~suPaC4j<&=A`Kv_ zP;4~k0@(b&p0xW)M=0{sKRE$TYinZrJm?Dr17<(bC`SJ5_2Nb31w+(qW4vcx=ho4y zs2^AbF@v;TQe>{JE;ZrQ4#5o*50$h8*RuqQcEUY~o-kpGM*A=wg5(i^1$vz&k!2Zz z*$VsFb3+t#ki|#)y#BPU!4;VtFo%n?z?u+^vCV8o^UfvquQ}LPqfaYy0H%T2D6foT z!0OTYNT4WyGL?4Wx)WGT{Y-~)fn4*hvnZ4*`>0z^Ge5kR$LhCLS(+bssG=S`6K-$; zfb{z@#j_{W$;oZtnQulu$D9KhA?>`7pQs%Riz48Y#4-#8UHKw{4(tUGYcj42_v-b- zbP5(qUPkg45S(f()z)-EAe?8=LE*q>@VM|4z(aLm5maM33`Au7N^d(RD0q$hG1dtx zfyJ3*{=-cO30Z`6{Dlypz#yeD0nn?g8X|WRZ|xhngL{UfdQTR{P_OxgR6)8%kzUly{W zi2V?bN5wt-nQhlze9+g`6=SnNBmHrDZlko{ACZwXeRyIMjTC3FU{kqXxW`esFR*eg z1&O#1*)I0_#AjGNyV8Rs=dsDl2LhuvKPq7{(AGZNw8r(qt!jwSR^u>1;lZxFLb-Sf z0i53DND>^3eJpUFqcW^Z1glIkOxOrr(on^4Q`u7nc%Es4PtUwd!8!ni$Nm=Gy)5lD z7{7DDk#brnlD6q!snw(;nmJjgl%KIM>cO-E*1s-{B{Z@%EGp{iWGwU(B~}yS-60mj zlt1eYF=}fC1#2YSNVJtzeML4yA3RMubY)U%LL_6qLodH#*)bG-_Hh;G2je{fnbmv# zBAj5s^Jfo*BgHuxd_J40DJdzvh{{&DQYCL3bn%fczsh0%m}{&CB(MftK1Mrxc*ZpK z7Zh)KsPne2&5l(@PhQC?B_4%c`mbZ84oHba=Yrb`3$F#`BiP6{Mtl4!u?ApiXtsF* z+0$m8=(JqdNWT=;ZRiH$ZfR-Pt9-$PoGtO$f{)~HE+qglp61BXyuP-glLnOLlp8Mll z*vkR&ZqyQd$|oYC(eEC@C5O!sIi%%vU%!4$>{FAev4^oa9ji2gWIWltubC-acsim6 zHzFV;#h$i|4oY6j4TPg8%Km&|BNUmaAgsAsQDovo@XcM z*sR;#Z`AyiJ1=KPK5a@Sw(7}4`J!GSL%uJaX!(J$8 zAfF4R78YJh_G6Vv0sB+gXqbEYndq5p07);;=EI6?)gf~wRWK9 zWEb0Qm$-4vNZ?z7SRc7@r>v!xulSne9&AqgCLMA1kMMN$K{Pz_zwM%+e z_|TX`2qCsq?k&^Y)s>=J2?SaPFbRNBJb%5md(&drcyvft#T)&Bsb^XvY(sh#Wtk!iX$ zgPM!#PZ&a+x*hwjeB)KPFMsvw+V}>-k|C@UQ@q?06p?}c(q%~mnBhar-XeMA%8MBT z8#RBO?OsF;ZI>Sam6v`$30G}>qip!lf0w~$?R*r(CWDi=a8D~;3)D{nB9U~!>Th@% zN`#MqnZlXK1fvk5wj4jnwVZUE^VE?>06+Tkmk!HAfz7+>;6^5YR2lzeOw77`*#Don z|CjI5aY24hP;@bbA*_ETrCl(|<^G zf&0zuSq3qar1OhBS`O-Zfk(Xl)=P^{Byf}j84+<*P*9M2j^Dup`)B64vNcoQ-mOTN zE2%kgNm6nm=c;+F`O;p?Dkl!Vp6BB`sAb0mgnu7c7R~*$`*0gmew`5f@cupW4&=T+ zMiRxjq^4*r+ggm+g^>BG9qwp}Adh~yV2C6Xryq)4Ge)jdSH zfZa;~y<7oogxMRsay zt8%xFQqqS!j4HrBiB(Q~yQK6tU^XyLWB(hx#)_-kg&;0*{`n(OGjGmKmWwU-Zlm_N z4haeyR8y2ptqZ!M5AN5@_QsFHkaHl=O(NzDRNn9`ei%B64-KbDGRx+SLM=&=JqsH% zrW#d6nf+M^FNfL52 znxFXx?t?4_Mq+s;NDfK0sw1cpee~3+&02zP@*oXB9AP0=oU8+#H&L;FEDGPMSVyT{ zAB>`vuP6~6*P#7CV2@;SGftdrOEvLw4bo7rx#7eVd ze`VW3ar}HF>J=$ZA4-0n51rf+L~cF90)H+`M8&M4L<y4oM~Ts={YW~q|H!r<-;Q@V)jBA6>`wlb!YpoYl)Aw{rK2Ld_AW(KB^ znh!=}XL^l%!Uli8;3T)lFZZ#ihC5!|9mXGKjc}G@({DY0U)=N{d2jqOLR?JVLXPP@ zJdj?V5x~Y!se6!DQca=7MP=}jX!64j5ARzU1Ljby1P=kp!m1b7II$-oK+57zZ1IEk zvB<@ND@mzrp9NJ&{8ch9{`9x3M4Vnr?|Q>k6xcv1wZS57q-RxVCB7VfQbcfa64v#hNDdEo_FF21~4{)=2ZcSA;PmbD0*AS1%x)hYGeIDxF(#VbxQ zj>2%}$(M%h5)92YKR8>Eadoad#`}`P=qcv9{GVI^R!6$osq6btQ<>SV^J5CFU5${1 z_y(05o;9itMcs;H{8{uX-A>C|LW?p!N1inV7MSZQV*~L!)}6hzKI z#4%vX4fSo3*EtD20}Ez?`q z;$pKo--If~#6+!SF&MNEnlQ!OcIVc`pxnVHVPUdeXTx!@%?~^xXi$^DOX6OJEGV~X z-8+~W3HbFlQFR6N67-Piw@PXUAn~djl2KXF(A9;7$P+3@v`3c7g{L~8HuYsbwINb^ zEtJW#fP%@4N_u)(CSLaQ=!$<-;3!DSA(W<+S{gp9Jy0fN4x(@>7#O51As&Xa0<(rl zv@MqWzqAem=yA6Wd#ew7&pui&%;H)H9ijgPG1IFPa|?KJLv!;(v$JX`&4n#;4m{}a z4#q)VGWb(QEGrN*$*@i%K;i9{f%FWMmP25rBSx*nYv6_jw8OsLsB~gwCiawm?}+C> zgfUeFD{OC(8{0)fP3B#DZ=8+h9l6wCAOv%R(97dnh$;_cG(t4lF0Q1&kpBD$M(Vh| zez=t=ULl}_^@3E$q;V#}N+fQVA{LclFMMc9uV>N_!yY>GK~?~l-;JHx9)1@RnnA|t zE=^f1J;1u7Wn{D-@)hjXhnxX=-|)dh94&kzdw2!dENK1I*bcx+hY}YbME2g${W}gE z3fTBw`-Ju3)bky(5`9UMw=RW5=mf&M`?@S zudW)D)5rwpZpi~K7h`C|3rMp!vzydYdg;ofRYZLT@?XnARRNAYWSSr{fr>)7LVQky zg~pS<6BhP3!DKUsiwRMTWNsSS^iqZ^Av-{;j>$vVeOPE`B9_C`v7+x5v|0s9^AX#6 zRH^8;XyT(9??@w)o-0c%0mnNRs+k z6U;?;C4+Y z|9W|DL8DdNSDSU&oxwd}#PfPg%r2}%4S^L1ML$tx!h7}TImc|M%gioHX`S=bk@;qe z1zJk->;S=yq|3$LZ9tbde7O#HI@KgAyHdaBW6-=9#87DRsh>4%COSfzt#Z4En3%0^ z&)BY})1VW29TC2dzgO=NM)!{>ZCbB{0Fen*!TY|)@$QB+fVu#RJZNkRB@Y&9hcRcx zFSB(}Q$ci2x$-?#1@iY}&>KQL8j3z6k1WLw=i9*qdtnv6; zu}Im&8-Pg=%0Pv}szG7v&r+`zvsHNzcw=R5jLchc@0mC&Y$c?DWDBmTttC1I4>6QR zoH?S1f$lA;f$qf}4*QYxzCC~?;A;idT-d_>W#*kG>Cl87-S!YIv z>6l2^N2IyGay5)h;s#eV3)~g1RHLCL(dK6rH8D1Tl~wA1e7AB&OQn4GjAWeS;y@3S zt0$r+3TG;wc1E2tAF%t~17Z%EWo05Urec#pZG&QfLm!(C!I)_n@Cr>7agug8Pa9QAg@kdiz9aaG&r4T@ba7)Yb?{KSL} zF9qeEgYKw%vo@>7)i9|CY4to>?DJ8tTH0s-X=jpAMIG<9KPN2WJbz*l7gJGjoQ;=m z;VLq7dhb>tpP@|XJcvtZmjJTgX&JfCcG01O`jj`|IL{VE85z_k7)|uj+^PQVNtZ=o z5zNA*l%lJ;a^r2f52U#*PDO=|P7~QV#gB=!ktLdmOg}fEHke7(Dzyrbh^ha0(|PbF za>_ja_|S~WY~R>E+X%q~^@p_qUvxG$OStZU)N1F@7-zPRNI1-^)`dA;v)dluDl#)$>-Tp*;t!M)C98D~!k>S4T%Cmu z^0t?LX^WiTYHDuoMQn~#|NC?G#@T?xDt^?7@@m|!F$PG3F(9i`ls4iMz?yK%?MBX2 zQw1iqkzuZQGRT&LFaxwUR21-YkMN`&D@PPYZquFNj3{9#j3Z0Vaw>nBVE@bhgG^~H8z}&#A%)+Sb}X+~s?8ZiLem40DNTWs z6w;hUzr~w;0nu~B=-RE!FbJ)nTnJ!G+{t$FEaVVij=V%F(b3?Wn%TA5)B9Vr@MW|Z zt^-?t5z!Mg8`wO+$nU+low9ek$H$Ma?h2Z@4zw&l4pa7%2?Og9>4tWka4zo+kD|-O z2O{Od54T6M2TOV^!JD@Y8UaX7fT@aahje}egu0|l#12Fz5P6#6@O!f@$9u)eT-MTw zB{lqJF>Lbq8TjXcU_uTMBPquf+h9cCnMi3W<|-H|9(i)vAEE^~(&N(gk87^@AD%*+; zT7P2|&tRb;iO(cSvh{$B8h#uBHMKJp`K<|xz!b(xmPGJi?E3Z0c3;U<|JFJn3<~NT znz_hNbbRryMgJHIAl!=#J`dzq?%6l6#DkRpL#1(Xq8UtZTg{iObd0zW;uj8X9=q#u zD)r1@ROLuoiSMb~Q?PM;!aWc@hFd*us0h*k6JPn%?+#GGLLx+B`Z49W_mbvpz=_Jc zXlJ8;6~Sm*C;Vd*ag~3XY|%7eVc&XS84oi&|6ybjOTiUI?!t*0E?iM_{-S?i#_oq`9a_ijqY2S7w59tF2LO=Esm5ITzay^}5hz;G}tOp_~SvZ{@?lK)YL0J+LWeLX{X*(g~U)O%isRz8ms=p4lz+4_$D`AT+Z$4-PJi+nK2lHH*GIv6=Ah~-^t43@L_ z^A7?8;7_%(e+(E^^qcu@*OR@FwxK0>5#854!cCZ^Tx3)g1&|%iw36E26M|X{4$^-( zu8a{tXxS*ll87mo55J+PfZFV=V_2pl$f({<}`NuS9?ow&UH%?GiQ(tmKick6h>;XG070v3irk%?=W6EQZC!f!UF#QHEY!n z?=tbc1DU0Q7I(DMmAh;H$R?`?z>)9c;mMHKvTXP0AC(t8q}K#X*qZ`%2dSraH6}1Z zD^?y%dWh}|Dl)}jZmT^L$AUU)6nWa}{3jSbGkQ60!N!Kw3?>&X@LXkSg`aDRgDhzS z(tIWyfd@dKHmQ1rnQ_ya9~ztiq=tvdIUn?w;@ypd+0U-F;YH~aihx?rx801>`aw3 zTvj_lDwmC+pQN}V@Ikg3;Vnce2{$a-Kd;eJs}HBU;UGhgwSP*Sg&Ms4@8RhRyMcH4 z;MEbzj(QQX$tpB{sB_KkzWVcdGUtN`DX<1#Mn>dENq!qb8{SQQwamu!tG@A%v7s7g zQHvTET4jhkNO9AWVszMEP{rS=s9%Jz>QiUY11r?s-+gyNFhJ)Jgr_G${QaqsD*9UM zFg7gMuFhV&I&flO)lQ0H1PapL$$dZUg;#fQ)Ui)rg?$!;S z!_0foKQylc*hmERfYq6#roYT{&!x3MPLIzMi|;++y89c%UW1z8VgQ8#7$9*_)c?ZA z@1I_i@kOwz0`Md~)5QR6sT2yVqC3Vc`bG3$@cx>VlA>6S?ei|~55&JV9dno+ieEvo zC>&oyb}N_pN|!QX5#+gQi-$U^3GCmaQ`wkvhe$q;N^~1g+2SY>AX6u((S5+>BS>Vl zqqqvuKK#_cHtr(wFojMYxwEMYwED`dZdqiLEY zTPV?E_z@4uJ#APT#WmY(gqZM?xV5kzUiC=>rzWz`FBkuSp#V?8pRm35_4Q#Wg5j%?_+`G8 zrKZKh-EahWE!mhGhIUqOPix_dQ?B+1B-5s#aNf<%t~`P120LA-&`63!Lm~YM&pnwz z28bsqX-6fV1vDrAJN>y#`>pe@9RidDpdkW&UF@*vC;$qg?gWCcALKZ|9{GHPtkXTL z8i%3HTSzGr@W9Sy#ZS?z#d9Spcn~C#ZQo2I+tG$T{vd{z`8Pe6ww{O6yQh()y;i$x6d}4RS_wV1S%8_&M!}-WdW}-uxC7{`f-L#@@iV~7m z<+4W^oc>JELHvwEZko;It2zSVisQ8&x!SYWMjW6C-nMCt<-)A3e^t%R1%#$xEqzOL zZ5?oG*JV}F7o7A4r=mD72!j1N?by`w^> z{MY;U?>)^lklBr+#pvPB3Nw`2CLy%W5P7ZML4mYld$lK2uxmXPpA6YZHv73VX{;7oex8k`mdS{Y~h!Ttek^b45zN)(Z<%16#? z9A}52D=Rdfd7vYg46Y?z1>w1$AJor?cjOE_Tpkc8K{H)~|cfZelNkk7vQ%DwF3`4W$*dbyi z$W2m>RB0$pKO@eXyst9(S%nfDrA}Eou$AcO&v?obZEyA)iJ{t&IzNoyNu=XN-j0=I z0s5MHzs;1kiT8J>jp9@S0G6Q(WKs3GKyY!G7_b73i~?V66VFUVK;$z%tcgPMfSe&q zB0%gE^hq)3)dj-M$_EP`3$%gVg~&}&equts1gS$%8c_pLF;fTTj-`PjqH$gyRFSsN zZXb!e*az^aoHfOYbRUmwifCql!omID1oQ>MLBz#IhzE}h4?{zA0~6b+&$Df(9#oLN z`Yx`?7_(gW23+AsI+FI$Fe&mRj;RIpz57-G_M6QWcT<>@#ANYC%9C5eoP`)ic5OLC zg=RlWrngmF%{yPFhouYKp*+V;Aubo+nr+N+mB^S!MywM(`ZvUDH@Bjvz14~BACGg> z>*8*-=O1TItiU_m`(mz9>BK|JC*-&{VE(`@6yEROcueaw19yNvSAhXi!py z#72lR6bhNi*lZ{=rNK}XwN07Hl)?_BBy-5HkIYk+EyZ zG41z#@8`a+`x?~v0`>#=Af*Tkn&hO|*z?u-#IjzTU5v+{tn;umBY7oo{M-X=DOr2b zgw4uE;qMrnbygl8^S=$`j`(@8YwO>g1VT!a1jMST{9)vB9(m?NLEbA$UGnCom(=;;(zGEj@HnDTy?u0vBZZ^1Xy za7@aLUz0mwF;(gBe!Vf%s-1A8kK8<}yLy47Tj|HP;s#~EMuHHy=YR-!=R@`I?qF*$62Yj*~9?ekdzD6}-Dq1YRMK>4-7=ArSXlNyrg|xM1I% z(A7oW>P>=mpt6r6GvN;kt@hSeec2N1b?8ZXqYaaPINUBIiVZ&dYE>~Vbap>Qp6Fs?^w~y7qx|_zLaB_Y;sOggcrCV-#rAcUL~Qd1+T`Q?4^B z5Sp*O+f7%VT^Q+wki#Pyqoo-5ly**NS300mHI=Ps$j2WQOmG1zX}w}31r!dy#Kss+ z=RAEV1`?e29v5OesoXd`;fjkzqBe(AYTB~PoWfN$V|@px%?I7Vk6qhzGF8$E)~tJrU8-k`tl{D} z|8N1gncHD>+l05<_t)F)z>k3ij1f>CNt6a<5GhZK$M={SA`o(HYDA^5Eb(S(L_b_h zNS{oEqO@ZK|ALH%6;KI5GSCXy*2Jp;yg)A)H3RlS@j9ss3Bv*WitMpAG7%tU;4BN= zQ#Pa+cpV$QMcOK!;JirBO^-k|ZC>%_ecEi>+HG&XJNWAQwM-2j8k$mf8EZSIRZF8v zLD~=@vT;L8y2!o^Jz|(zELRO;P(s1%m+^KRb4idQPqqb zO;YaQQM92(m@hB{IU8EjtK0xv+shS(?{n1FN8*UQyrK2iXU_zNMxc~##V%c2Pp_!0 zjjz8s&ld`Bc$R-FhCvy>bvQC-G}4We99c1~V1cOKXM@~DD(?jCY===u@P!W~(UWr5 z@dH<8WB6|7dUMCy2w?&crT&u(ffZm?CUypezeCke+#Wa;V6^R=+lI?~x+3Secgl?y z()xZNYPcXIMCK|MRi%#Q)(zS4Gv4gpGPuBwVYw?ePd1|RDX0*{aT#R14ZU}PUt}yb z;k%W|3%30HM}y!30!{wq|K_!9a{VGgfMT(@X)x2RMeqX_mVZ%;=Sq>kf#^qRS+~hu zF#4+fLZqq&1_l)lxXbo$c-cL)z!t}vcpl|I+f$v4e%AnuhM~LxH$+&DKQYo>g(D3E zD9r*hGKyVX34C3B%yV?)R_)Bd_8grQ*>9u&GBp*7mBY7200Fj!#P<3vjKquG!&S7t z*yf)6gYpSZ#6NmWHoa?yKOcvYKotGa{|oI{3~RF|Q#z`{EpgRt@TkOAg^7|24{4yC zKn1vXTFh%EONi(EmNR?`t!G(RtSUF%g~gwbydS?JX))E-m(z<+Mg}7~WLOIcT@oZM=h==X`63_9NlPa3VT91X~#xpWAjj*QPKU;Ly#={|s*hYcm zDV^^=vll8R5H{zH>q%$45Md0?w>-N)cl0m;1Bl;Gyw8Ee>uP?Ar6mY-- zBY%~pYk5b_T}w4wK0dq_uj5Fs#N^Tz*~@)%vp|6oN}<@`HV1Q-&u zrGa{XY0O)@OQPrw38?*lGyYLXH{1&iH3I#CSS^w~QE+|RuC0>w=KZ5{|6(&ZA;zwn8 zTs5fF7bW~!VW8hr%BgbTuY`>Nj(P*h?w)hc`2F5Pb@V`qZ=SAllsm4fiwyO^ouUC> zfOi2ndkKZAWFv|%)Khi7h{C|h!&C8s8&RX*`};Zi7`uZB&!@k?V&9B8k71 z7Qd9cV_0VM#PYLwaMCwN9?V3NK9{?SKL>Ojd zNV534RseTdL;u-(C-R}I{EA?RkQXS@yhX6|hGRh_t0Q(zl;`ceL8ufGoJj1VwR!atGm!oXWZ0Hv^T0;7e);w4npU#zTDK0wGgd_u zU?9lbYRpPiW;;@Atdhx}j0bX|tKGEj4j-0|?%0K)c7i0M6|TdyKZH`6c~5DSbNHvQ zR&cz@#d_-AEvMrUUV#%fKqF`h?H0kFz*4hpdPV(_Ml-~_t;S#y-MrLyqgE@Tfypxp z?5M)5eaPvh%a|oZRcg!A)%M)+@iMgspC9frlnoq{A$fovr25*2_F#To<6ZQyVkfp^ z=mlS7nC)5zY$4!!K&)%2BA3aU7;T%+N0Vw1zq@zy&?c=};ELiQ$AsbRf+ZoDfT3@5 zm5qEZgdQiVEt#)#(Yp)RDCO$5#-O?JGj|mEo`eY%%}o~8F?f0jus>kMii|cOAHa%Inj0Y}lVWPCC!r*x2~=+Se*j zL)gP4aX2yhgx5S!wjGZJGTFPuE>MW#jyU>zc1!77;c3$w(-xgKmR$jS2p1Hef&4Iy zDYVS=wXi8J13p%ifdDd4&1epqaW#t1PDb&W^~#Mc9r_$Hhq$_%tK z5Es5CG$DEjYy*)mv&I{VX(umw^k;W!RF$UAz`tb5r}hfkn^?ocephYw`sALlkj39m zyK&wGCpOBj;VUHvd#_y2Bpa4C*PaZ_F4e)0fEL2%oK-OB#rNcQD_a~K9Ns|l(|sTN zCh8w}Bl$&wL&S!qrY0wCEYrgW5|3clLo2$Pat9b3HSeA8>T-Z}@JusJZAi#HEf(sf zAe9GTT~(r~kKlG@#>a-a=&p`Y;4wz+HGO7w2sNL^e?;8T1w9mr*u^4ETPTaO>~I)^ zmIzW~oc{5$PS;Jb`#`sOjFl699tevuxXoQLU3Nj z?G#>yEF-OdVq)Uzz^atmwtq{RNm`-MEY{*K4Z*}dO_`DRJ3)Q?Pojz3@iyOIOHEkO zgl5X&J`G=3j?Vfo=q9{O9|f#EtuH(T&Mnv5o}ZA-b>um}(G*x<&G_#KNX^O;S_6By zuM2z1*`VAAZnC@A+2l`;rsbCdmC(e_74m|0qCHf_C4ur;1!rQd{v z>wAT~OoJ{Z8_mxHLmg%Y!|P-(m=!dL-)M-p>pj-zd&hd~@Xwsj6Otm#A}W)sW|KZJ zU-6P;SwPuL6#!V#a%_;R@((~}uGWod4p=u%AMlwu1blqFA|fKFQ|_%d))qy5!bFIY z2u{ucm?xOGb}0#71B-^n5vrNtfdEQPJuYEjTkw=&Nfya0z_uKxl1BK)J_jQNX#+Mx zijN^n&%$WDce6vb%uClXHI)&Uw0@`Awf%D*)?a5@_luWF?ZxD&n$I_R zxZ%pi^y{~#!&44jxcIPtu_0Kw2ZqPiV3BbH(4GvHpE z5P3%XBz*32z;H&djg26W|Dov0{YkY;C}OUh-0lnGI zBZ8=Wb)iT3eiQV!NVB{16 zR)ej|qH2fiCcGTaP1*!9=Kw6Owqy{xWT)(y6pmq920Zf(=vAt6c>%4J9KSRvYCNdQ zN=bqI%Yjg_O$DpRrPOAY&fevQ={4L+km)IXNfcSJbTo3rxdVy_^z+pdJQ)X(oYxT_ zZj@SI#0j`(i^y+qBdVK);f{~-S_{$abqb?J1Fn|J1Rp!eZ%VvOVa^;Ti6aP&H60M| zt+8g8RiwbRL-K*_Cz;B7Ja^FJwISM|4M@1|?`!wLCJ$6I#klIfPai*WE?FCE)D3Gm zYzq;0 zeN|$xk{~N#1x@Y-1t&7nU_{ESuV0_%ZKAk6Q$moe0U%ou|3yn4CvU?>#S6y`^kbiozwx9&z8=3V_K5?Y9dIMbQzr-wnYQ^GR z7Vy7=E>K=MzHLvgzepVUYkP`e22Y`o>BiGPNDvJL?8*n&L>Vq$0|NuY(j7nw0@OB0 zGK|u;3JYHWgXNJ`zBleGLSzK2Pczf4N6+!OE6vnnj<5yH-j6|FR!s!NqE$8r(j!a4P4 zKXIhu58E8+Y7?z`fWS$O`}5^12;UI|Mrovpkhu9_K^Do+;Jp!u6!-Mv{S^tX5l@Lp z!j@wd^aLz)%0%2*^2RrmW)8_BsG`}a{ZC4H=AgdChet%@!XxCGGm;K1p8}x3V$;<6 zm*D1uYwTlza)}KrZgkonM6NPbFaDG!j*8Rnv2RYna9#E1q`A}6v)*%w^zevTDy!6% zrUsqn^XWQ6?YwiGSRha+y)Ae^Xa^Im_B; zr_nsKkzRMqn>(BD{D0Szuv)xwVOj1t7s;E@&|g}T)b8Cf@%2!o>H~R_lZDank86d4 zpJqNcY0{&w>HPbUn0M>!!uf`%jc@~oVuGX2gO-au=N-BPWA2( zwv?~`7q&%N?f48zXy5+};OifNtFi`|lcvQ82&*>Lk`T{0XAWS2@If3maG#x0$Mog} z^MPs-WJAG3L?~AqRtvq7gAsOqetvEvQaGUlsQC(tivmRHUh_V}L{{+KZZG&V44F<% zxND+3Y8|;Wj_MzaW%kES55q1xZa8d9FB5N?h{ryMlg^^bL^1g z78Jb%!#}_hoN1Zz(ihUHf$Ug&_8by`8C(W(>#qYGhm8{vlmx>LK_!-#=AX`Qw4kav zo2<*pu^s@dC37Z`qW_bLzy)SZXSSy56P$y(<*&+7j-MKHRefo+LO5 z@22FYfw9goxBurJ@n;9OyWuWt(jG)dm!#6->F5VtVbrc|RK z|AcuimPX$;wxsEt6pslhyFJ{71v`Gr9&l|})9-;u{AFIQva_XB45rlE5TKyXeBSw~ z^^#YuGLWPOvvLVSrNsoY!g4hLlBji5Cwo%;l@$oEL-tgrPuH#SYI;@2w z9pkFY%(tibMGlK{-ubq0JKGEZl zQ#>$i4Lk7pf<561DIQVVKp_n!RWpKR*LpIRM%4DOH!{YJ=cf(iPRa%H8`#?Jgss%< z?{YI;s?p@j>3)8Gw7~uKuxwPLQkifJ*VosxH^TWm4Dswgnjl>P_5!0V>#wkj1rvmV zHGdmmqLV)fE#JVPpxbVTGc8p5W_8AvDToMQF0;pdI_v0jA^#lv9?fQ35&ypaezD8P zJn_8kc%UaPb|!mR(Y?8&(-tr$cWC$}1P@>Uz}H1ZZ2?+4-ch8hpm6K^A@|eBFv1`! zXm$7m*<3DLwv0N}F^VZL>W)fmxgux7MM?PR`woFT!k$ z%wtpP^ITadwuaeP-Is^k^jP%c`#k0`hqq>JP>A{_(ZDwG>3I~JOKOorpSH_jKK=Ht zP33+j^`&D=ZoIF`buReJ`_lwtteFd8Uor}@RWEYZivPJqE(5SpE6n7E>oN9MIeB?8 z$3e~ljuD_(S16}a+^nrx09^pk!TUhTShJZV`UtTd(KJ{I<~U!cnX}{w@qWRMLdSc1~d<-9>&E7q0c9IZ+n>;g9$8q z-r}dGu&;u7+}X6E0dr*3f*lqCL?+H0FOL_;D*#zgum%sPO8jc+sCc0g@8Luz8uqwe;b#WWE?Fv3 zz&1EqnGcFnqyC(lw@=u#nd#U-%eJXHbP>1MYu^c@_a&UY&*>llPF!98`_j7~&Z+6@ z#>E}nZUl29`j!2UpQc-CP@#`L;Np_gud^@Q2l8=Gbk6v5@l36N@Q+60D55H&OUUWg z>RwFG$*Tpn^B@=WyoTysj{(h|QZ(9SqI6u8TeM>LalZ7lv|#(bjnM;#bYG-a)ye;4 zh9FY}00AzwW(kgn(yrr<1I;(kSR+?BECVIoq{YxX2(>q82PiGT-uiaY3}@1e?!5u! zkVp)s5>Fyxp{}m(_2lGUq!kz=6zuK!NH@*Vd1Ef-O`09|SLbN|mG?3;Jsoj&pfOY#Wo{WG@v}K z0(%4aK*FaIS7pmwh_;KHh4i@=1;LymfC9sp3QpA_;;0`RPLN)dv>NN5c|v1)Z5SB5Y%vR z@TKKLFTC;KnC1Qri#J-1CKQ8+s|b_C&7@o#jWiafs@vGuDYG5`HxTX2u*Yj+WqRCg zwtN%>uMAximppwym1WxH66;I4>_ECd?pIY^ZIY$p7bUdEV>UPJbI_d3gW|@Tnw#+V zI_Wrb(kym2!z1){jV*jAi-7NTlKDof`7o9^=vOV?Ffk6gc4y_J9aq_KSJ6P9qLhj!*Ms$NSuW*cD^}g$ks@fy!3RP z1VB4>6zI7$_FktSn;rS#Bt7UPjWP#;%`4%P6zn}tzbp^Vx;d&d(b=)t1l~pQi$5m@ z1+}Oa1syA8K|`z8TW-cnZ>xHgb=3 z8IlJM2^eksoDJ58o|snQk5tEI=ktvn>cT|_Ux#(WwSp1T#G{9;A>loGcz7^v+QOS$ zEb}ttC62`-Vxd(6Hj=w{+k1zlr%S}g$Dc7VVOqr_z2HhSSEb^3?lALup@tQH5K;x! ztQHBO(O%Kw_HTI256gtUmC76FW?gIiJdMCbi<-;eJrwn>zPZ})jt=ft>uBO`M<)8p}F z!?e$5SF7FFZaZ(+p_&G23JQ@kS*pO-@M?Gopik&7(dK|99ew=F(rbklNi*QTl>Q9F zo`bk4;5R|H+T|dOCKm8YW#8TynYrxFh%K*VT*X4)LJVmf-!N)bFv9_P#;YNWP{iB} zmk5mX?2&q?c9Ow*TkV1Y4Q_H<2j-d_TioJnUG|#t+}1BHDLAQ}XT8#6yvN{J|M_5U zQATQb*r6PH=ka}o3ww5%WPD5Xlc(=`O+c9eMIbH?oG;)&N5RILsqq6>rG5^wLx>L& zq5(iICZ`D+exUY1z6o-(V+g{3`&t4pp{YZQim6e$Y3E(!5zn|ZmJ_q21 zQTQD|Qa)07=g9C>RkIqEo!4Vp91B?}@c#Umjg77QRNrodS)I(70rhJfZq0*0HwYtX zid}3yr6A63L8lM`(h&k8RyyIdhc?Gw{RJEDHaqY2$xgQ74aUAlE5L>V%wI0=^|AA9 zTU*ra;^(gv_|FtMp)SQ3fiL=Y?J#81S381Wz3k0(>#f?|?<`~Y<(hrBY&pX-e7hf0;Ri9$j5S5r%@xvDOSwS*bF2Ip_I2A1pAS$w$fh|#EGVUg9 zMO!cJ!I5dd94Wvl7IP5LzkmP!F_h5IF$o%sA}zB@;3BR~E*%jfCo;Be+g3h`EOigetz`qIq&<#!xo7-b+j*L=H{>+2}(R22H@j5bkNe1 zA68R{76LXhB9|*5fdee!vsT~fK&?9xU?q)eEgJ%%dSXQSz5oka21}PS+kXeclU2xtx)I&*ikb?zI}Y=JeP&$z z8u!pe)!3>q%T!f)3BSQ9Ii4mpDpn5x%O9er1zngeESe^QT;^*~nqyT4rb725GJEi{ z%+|~Ugxz+mRTAwu?L33s?u3Peu-|KDk%^I%l+0>e&%zR-#LtZ~#qdCkbkV{g{xT!u zW_2}{)GUDRy+feseveUQKn;Lx-b1A`7c&KKJDfE_9u{sZY?ooEb9xQkF!|k57SF3I z!d(qr#S`L?znU+9VJ&}iU({PZVU3F)crl}1l+?ZChJS*Uz20AOA9)NEVt%sk`S>GT z%sGKOu3G2i5tV$P%4i9lzkdE4)w3VI=cE4XTpU)m7WpCrJ2Y&wbklfX0%>r`$$%PbrC>~akPds?$>VE)eQo@D+ literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-defender-atp/images/tvm_software_page_details.png b/windows/security/threat-protection/windows-defender-atp/images/tvm_software_page_details.png new file mode 100644 index 0000000000000000000000000000000000000000..c10e10e5167e1e479dba4ac3dedeaa4356415754 GIT binary patch literal 57955 zcmb5W1yogC_bz@A6@wO#Mgi#%q$E`u1Ox%;mXhuUgBExJDJco*ZjqE05b2Wc?yftJ z`hMU2kMX~E{O%b?IPSCeUTe=a^O?`W|Cy{f#tq^d2m}H{QbI%lfw&xiKwQ$ib`_3j z9>=M`uj^J4sVTlavufo4JgQ;NfXTaFzW&B&uTf*xt_A(gu;4 z*C7Fi(Cy%m$V*#&8xt!#6H5!kt?PHG;P?&XabZg?6+RtGN}#r%EL=A|z3 z)H`-2<}VSP2UyqPo9oDLo?9B)IqKTHL}*%FAWy&f`{pLL`ewRtstuyNt|SBwUqc># zp=)DdVqt`+BboPwV`zV_x3|%MiP*b%yYla8!j|UdFD>j4`yG+BaO^7bG({6TvzLgB z^&VOT;toPmgFZJ9LZ~A@q*!yndckr&)!4|^6z{tqY7uVDzGkx`{scW+SEg2aL4o){JRc|TBaaB*<#<(}fm7l7@Zbg!4(E@-S4*GbhgABj&m{Q{?80qI1!gye3Evcf(bk zh+C}GTpnETX`pV}k(7xcrvk6bC8f!WBMu#;#{~aaVP5bso>hgkaXIdi)l^?XC%+?& zOQs&Q;F~A*B0I`?evT0R`1C-6_xV89o=n6O21!ap#Wu4A0?~X>zr=Vr3#VZ`p|A zOAdX$yi(JZKO>0r#g}F#FRJ~((TF(}bYKYZZJr!cGQXK6?Yh|Fr?GbxGw)m=Y_m)z zLUhof>di|99|=V)$?Zb@W|l3}jx5_l@$eZprj_C{5!t^t9Mc$GpgZQzZpuo0#izxl zREe$>^I~DhRQ~afvj%no#qka08lra#GlHm_M3ER6>`DZgii9!8N-TV3YFsU$in=Lf znzQ;X@9%W{vPS1Kj2`#gAXFSIcK(stY!GT5A=*-4)QjJnZwQY^_&!=rS@%8D{>h2K z#|cU5m^`y@jB&L{OM=g(2D=4u!F-f#N?W~ zpo0O%xAg71)`_(*BX_?PnUHMeWp;km*O9_)dQ7l!LRe)|c@{3(Qq*Ww+;%a}A^BH0 zA_ku3IdsG@?;lgW++IS}W?5GisNd(Ai+^A6P^ps6dS{}sFvdOUICss)?4v{r2dmt9 zQ1iRaQZoY$XPj{S_8MV9Es@sf=CzzKT8*bG+DC(q-z{jn#NHc!2qE)4LJz++yA@o& z%YAA!CsDSxbI!l3FH$3baV&ItU3`OMVs`{1Vmww^L^a2P_^o4CLW7IRIAtyO)9dW9 zGYmnM-hs=XJ+9R$QUj@Jr>Fu@G|XTxY+kF{-V2T+exbI9zq^c``*O}(xd*Gp`Gnr-cHw-ipnw;xxr|*6HtQnhwrt!@X3^{!*#>s)@SWt!#DC zq0w$2%Dfn#WEt||Xd2!!;x4TC;P=+9jkkse)c1I}gqX(fc?PJ@gbc?$X3l`=pR_j0rPAG+ z+!0Rs%b(b$tTDLrIM4IA8duf0*z*o`e{DukNJ*@$Gx%pb=OSBUw zBDjv+SKkwvHC#>jcBhuHwYAV%FgeXk1{WphWZ>{*!P1)2^zXvRK9ag-!a-d4^mweh zEqQCE1+^lPH0+#_*)oXhUO?WOiaD46Ug22mIu^I93xOW3c738&q)-eK1>gASJH~)7 zuN7Nw$$ry$Pq^UQH8cKgq3Et5s>iR24omE-t&w*xzMkydAXCrf-F@2DcM%~|`+R+{ zu>T;@Zy;=d+Ml?bY{x&xW^t$7pkZSCNnlcnbs~!3-upkMmO*wpadAe0co`-^$s9hy z6Yv4=xLx}^*=bA-^u2O`$G_B!{7zLqVH&4l|HGU_CV_du#dE8INE$T)$+SECLc1Qx zOG`L2lW4yv^k~%Qxmi@q4wj-PblHe+(FniYbQ_S!_DK*R+sQPuS#M6PMgL~UxZqt= z`AVEIOa!+#wJ)(|D*fEyCcZ*i`p;6m;=fB}FyBU-s3?Og$w7>f;I=K9eVmn-C#I#9 z&~y+O7-+rru`{IG)KT{Q{9J6Q>9cecDbdZ}&i|HJ3J$!lzI}Y!H#nG*mxsy8$(fOv z`C2RAS1VuK-k$TxlP9EP>=4E>$cwlh_9@qr4~=k zz{rTIqa{FH9XVdE)TNyJpU|8;JvVm+ad>{Rp&mhf34w)$6)4;>!k)zW-{`Guy!K1P zH1&J(4Lbb%%3SKc~hJ%iU(u9g@-f!ujn{9I6nPHboJG)2cHI4tT)C5#C@e9@R}F= z561bE4p6XB3N6zhk^cc%ai-_M3Qc0Q8eXUw6BrA)dZ(txfDGB9o_R^IgFtxgh zZe(P{f4bRVWpD2t7Fp3&tz{`@BWSnLkri^@r=>i89JEA@Ol{7eIWftRybC zoDd5k7nodL4iI!du4`)gOeIW1Nm)evSI)|i_cX`zIa)3JAR`PCiyh=9M6a-2z+4}% z4%Di4nJR1{f1911O-6Z-lG5}~(&Fd$QI~^QURl}a`}gn4_x$>f!*OL{3O?!SMqjZc zzj~ax1e!A`3AYiU`w)yS?i~}1@^80NF_#t24+-x66lN}a=(0z@Gtp>>nP$8FAq5J1guUKx&5oSs1FECS! z@hbn35w))tzOcB&f7gRkUR^zKdU_gDdc3c{KdGby5A1`is2WXEPcJz|_zvZA(O>C> znHU?_!LXnt{Yj&_APx9W&PP7Kk1sSdRu{4T{3@CL&d`8?fninfS4SA1M>Aeu7{v_Kx#wj!pT*dO5cUv2jYt{|Y^5{nwY7%_MDD zX7eoL8}PHmxH7H&EgB#1Wy)lhz`uHrI9MOE9r~v@4Nga`*4kLSUzroZ_=5NMN!jTs zsCSU^SVrfS4wKjhsUcTaX@!7*plqo5BW>lEFJDTB<}=e1ObcZ^JUjx;zqhxmo9)bo z%fa`9gSXYoEt)=ZzEU#-WuO0>WLo4ys+)Erp+Eb@%yNHr?)bR6WwrN0qG!!8mrFJI z-rnBgaQKA*EoE|W!^H|VQtivr2Ul{l3PN3%Gt=+8AKS$ae6gOn>aa0xt~6R%$-B7c z!oNSH&t?AB3+zJN_mN27%ioEuh{%}Mt9eu#dwcUjhK$_xv9B#6@{CqPL^$#*|2aWZ zGd@N5S^r3dmebS~#3KU(YQe)vR9~Sht6MD;mi;cFp`j{eW<-gzVj_L75Bnbc7RWv^ zF)=CGo2;_Nh>srwK7G35OACp0#w%S>q@Ci}yJG1j(=jmIke8QVBa~_3bK3m$TO}M+ z{y3Ad@wZ&N5H~VP|CP!{k}tW9-L)*%-44&d)j{w{}+C`UKPCEVD_m z{oR8IXO|bTTkD;SerI803E|=4GHcmcS({^y6H{|h+7|u$kY?nX4yK@?A+T}eTmE{$ z%4%^6cRZKs@vJgQNy)?YuN(I*e(_XPR18(+t_~+@mVyHAxaWm?)!u-5Crw~ZP#{R6x*#$F z>8pN^SkiQKo~QAphXpcRl>!}1{!a2}aXW zQ}5in_gS-y1P{+(OW;-5i(GshoVy+eySt6SWPGbdWa>?gjXM2VN}F3-IPJK&xSJgh zx^#L{B?HQM<1w>e%C>ALJt)cLU0gxEz-GN z`^gTN9O)(+U4kb}F!G2%UfyzZ?Tt;}iH@s?_p$7#wI3h0)Z@s%_%{l9jaR#J$I@-@ z>@nfB?j%ls+93_+LPSWr;$pu4QVV5J-e2`<#xWiP$O^IKg zPj;mZF#b9+E{nx28oAX{mMR zXD8P1QNEN?DKSH7Qes0?RP-(vm+~$wyn=#)$mhV4^Vg_o1#{}?#_JY+mH|}IDK+q0Vy;6@ha!!kg6(vWC*03!nt+pt@i2kZG_j* zkP6N#NlAaxOH%2*y7h0aAf85WhSSJA(a?zV6IC1Fus{sedJ3^Wcu;8C&yb^4Ju+== znvFvxrqdqDjCk5`Hzhe)q$fQ!RfN;}f#SrMd^tRo<0HEO#uvti0<|G>ZoP-YQI6a@1B zxUaSwn?O*ZF){Q5<}Ps~vAfQiHEu-6sVuiZrBdn+p3!>lJ3a!tjap7luF1%_4T?K9 zmtEsPcdoOX&+mwJj`_hl@%kkZcr8Q-etv$uHI!a#zNMY^wzkJlp1hgnS%B%lAckAn z@veo1g?>Rn-m>Yp5_Kgdufv-9WK%~fOkJ~i}d;flE2hyW@pfa4X8fkzJZjtxX|dmV=W$gj^?Mq1S{)9cp+@H0bDEL z5*W0_kWqnSot>WUnUegN2Ew0&k4d8+!qDjH>A`Jc1`^rrMzksNMf&zk&=dN1^2Q5%L;I)G` zBfV-y87nihx34dnjg5`SYD`QF==_H!b0(Dn1l$iyQAs9F!d>k+XU9)2uoW!U`&@q^LW4QyRSdM-&Nbd-tbYj(q9l#v)_EovvKWg`8vC&^2B!#MG zi%4>ZK{eZiAKZF?6q|U@;j7LpZ@qCRG<_Oz{gyPR>;;OEa`SN2mkMCfTORP^eGF+( z?b_4kXl>C4k|JEXegoFe-R#qtBHVW1%D=O;7#>ix4WgR9W6_qa0g_Cd3 zLB^6?&0)Ru=E_Zx(r&QQ#*^)buBoxR;CtAxf;jB5=}lOOzCqzK|x_)Xvi>6 zcj+mAvZ$-CaeuJhI#nS5LFEh8s^$_HZv> z@%3l;G?k>kHB*nGr{4HRV`Jmcp7p_+jCt#G$MaKO z#?mhO1@)6olQJ6%Jn+h>_wT(OFq0{D(JU1SFBL;yj`rWpv<;*nhuKXXNrpNTo2ZV&G|z3x35)I zS8x3k#u_#!8S~!lW6ylzm%&(kkL_}_&nL--E(jj}0#A}H-uP1{TRc5R<3Wsj;e?J! zwB3DMkAP}1HcS*sCu9<8W20BJh>`;19jn#+k|%dryvx7Uc&ozwgbQl-QBITo6mhKG zrCv1mlYLQ0XpNj*A^(zh4{7`q0b{p()8MUhYmo)6mqM zTK=9yi%j+>6FHEXFY@(2D(n9z=mb=$@{FXscGrl5uEGQTH0I#3Tl~kA1SV+k@+Ey_ z?b-h5;$XgZ;3%x%H%Kf;ndj%<`TA1v^K0x?L%ONIGLVb#+FKcHXls+KDz{%zjuZ0K zvac5Q#mpqXO}Wgo(3N<5Fl%$u>O)jicA2e>%^Og_VaKwnD$=v#z2ak6OIEne?LiT7 zZFQ&%3z0>8OBg(3r644J8A@fA6TuK_&`G$^9~k}MaP|E5?z)w&Z39Fe{Pqyihi?`a z7lUsUcR~o+9Gy5<-m9KC-!F%(6-7sivh84HCPb*Yg~IdKT{hg%FWcKTRh!>#Mhm+0 zf(w79r4%QM0 z#4RX-{ocP{&3HCy230hu(KGk_Puk9~F2hbn~(mkKB5u?Z@@ zR=uGDU3e@s1Ulh;1cJ$>y{Ioq6a$w=sv_R|T`} zySCed16mZtMMd{b`{)pL8S*IwpknW4S>oTIN;) z;xaH2AR|NI*vs?;y@`#DozCyH>DerP{~o;~p6|Bj`A(v`z^WMlV>~vq*J>`#UEdRP z-XJ0(@(T`bhKSE*^n=uGtLZkF6E=-(oL}PEs!@P_kQfzW(wD-c4nPKZ&_2(Ta?ge` z^U(scVRpnL7Z={Nr!j9p+jBI&;DS}O3>E6<2CN0L)?l}#veq1aTRnqP3jm)>An1&o zoW=s(25dq?zqQfwl&UI?MsblfX(`;cu`jkQdMD01^SV%X!+gZV#IB~vB?d#Sm|fQS z{rk7=x%RDt+6ztUS`@zg+ZRNM266Q0=za!URE)#0IXOA1KL-}Lk-?5+%AU44sk z^=(p<3ZM>V<3iw9i^v#}e&D?rRn5^niHNwkK4?y|X-4MaqVefbm#3JsvvaIZd}qu9 zG^h>;AKFkOdad3Akbp-(pm(%Ahjd(x{T3-)-q2+v~++yq-NLda4)pMi+NDy$HoSH(>*4F-2X@3)3p*Ym*Hnz5G zP^l^3!Wn)&@~%BZU_ZKPA95lIIXPe1bYaM4wA{8t1I^D)PbcT+eVPJq2VQPJ+F1yV zjSa*g;i_wCLAyos^pTa-eK3181QI#=H8#ek`|a|33L)}D_x+efxi#X!FlO~KzdgvN z?;HJyBNz-V-aj^OgDcoPPMw}c-$#KQfwJ(P(o2-OZ{9bN^Pim5L8Pq|@1AtTJm{P+ zM8cFU`beWUZ~f=)P?hroi?Pbj5>rXsW_!6P((9iky-w#K;h;t zH(VGXVmG+vgF)hRFyTpokB{G}{HXHl*BQ@?15cdWw|yPQozbSIrn35_wpZkhW-?Z0 zKt<$LRQv$eBL{qvK{-#uWN-~q|4?%z;1x>-feA{+jt3~1wVIXxasd!>{9Er#)lCjn zq0}0diOSDs{gEKRI6qy`5BHk_c{etSK(t|;Hpwa~!i6Z);Dv(vPeg<_xTL0&rKP3T z@85BESdNa5N8H{TEm?Pi6BW0yDaxoEskG0Io-vqh4OJ;N#Bg(WN5TlPW#S@{L1cUc z00B?SuX~=(P~;LHAFpU%5QBmgX61hU$~XTbKCq&KXLf!*;FW@#8$UoFMMXsgt_K!X zyFJo~J9-bn4?s%}e}|&9`EYBd&~ZbnFn4y=U~9bYH7e+4>yjOBldDXro%`jd!o42> z4kduot-;G#lR4Vj7Ml*`0U9wqGsEVvsuCyQI`DA}fbe9@Z_thyUY%|V+}ztkR#K34 zzOB7D+koV$a7d7sm)P6e+pysWTxdPpiUZm7C%Hty+<-Zl1Jd!s6&}aEiQhUqWlH1i zQs$?oUITm;d)DN3dbs5m65@+2&TMUw#dhp;G)xNY9Y4HEDl9DQzS+?I!{g&`P%gBD zQ1~V$CPwoQG&G<#_+UIoN4=X|W(`3L;OEe|ICLmbz*&>N8ptuR7Fbg2?g{VwktoDU z<0&g4QJ1Ir6%m~$=|zuoo~?a$0}0^6qn@81)CQ^$uxh=(IL^N?we_B>v|mBSXBd-G zP>>wf?Dk+?p?-@V%#@JR6c0Sy`0A->rzQnh-F>8m#PM`9B~d^O21VAL?}!0}s}6kN zR(b7N?(hW#BF*4Sc=#>I5K*Aax;X8+Fk8Ee%;fm2AcMbMoRRR*wmGyATb@x#Nl7)% zsvq}ly%zxd(4E*_8y%Dl#labSp{#uM_U+p|e0&jcqdUsK zsUP-_0UO7+ja`FmqOB?;^Jg>k7fCWkXTaqSE73KB1s;88NDZE$yX(5YhEzzte@Q_z!Nn!H8gR3PlYh!@3!PBoYr@=$OkC68DDK#%U-|HzB?45 zZu;CaGWfZg+Q){jw{PBDYI3GO!^6X~GbT;c%x$h9<7WF*{vf!KKe)&g6^3n@$Wzw! zEVIZ2+7e_NJxmdn_E@WUQbVt+UjV}{>PPa z6LnYelY!m*{j+jA8DrM%F41%6;c2*Xxj_dFax9%OV3d}mJUXc+U-FMH?D8`REiF;Y9pbK2T)QKO+cpy==qcT@2eJ)Vrtm*~ zASElSOv+ul-x*pSH68haqN$}NkSErnoOvLw0%O7hOV>7)Pwy>x!}o6Yt(66ehLd!e z2$5>?vU3M^K|!s(s-TdNmZjeGLYO+0JOIwK<>U`3vFU7Ust7p=eh(|B7}X3?nd^729y&!M28 z&@po=Nr0~0q?L`s_S}oKAV=|=6AvNB_YakhVwr**N9C&nGqT?`;HafVj?B(o6oeia zc3_{SrKJVbIIfLcsk1}HCnThc^nLd(+I$0ofZ^x~NTR@DO$`aJLcK~yNB0P{kC0D;RAm?+ApcZ$lZ6P;a+9^{j#gL91M$XG^s zwbrk)o)Igo0t|eY3?Kiqv1KPlL7&HHnK|V;KBKaq3QXsjh6eg0=k*^k4_eY@dipx~ zFb+ees`1;AI&hTyQF$*aCdQUeB3a?vs6x$E4m2Mv(}h54IMD=vT!1;LfQzCV z7BY7fi~@Z?955Qs4*I2?sULgfsT5v)ChMdZfFt6!NTzh_tc{cs@;T%Tdq}jgI+ONrimaUsC_{6F`(*XGf&yOq zIb^naPzttocAD?(S27^IjN3)Exu-W3rD+h95EcC^+q`>|Y{WtL;Z2A>T?;)?B-2nv z1_PLeNcO<5uZ~zQ)in(>t}{X0jT^eUy3;g_R8**mZrlD&a+MFGdxElfg`~H@q?g9pmdkbDtch!TdmE`#h%}NZh|!ns-z)3`7>{otdOHrSr-r^E zC(%{+S*>`ZO{rAMSI#n-9Hu79HFaz2!r{UXFHR&RsY_?Fx{Z;3CloK5P5&y4cqbUm zN{CJA*|R%Y52)30%bJ{!u4=2#w3O0fDefct%YcgRz3uI9;IBqr`e7s7Jk!YqExwP6 z4f@8Z^+)Yi7wu_0JF#e$T!{OSbNNnJdTKpAt4_Du z5l<6+m9z0rXx)_o8QI#}q7*#(a##MuV|}z-u6rWxp{-h6i1F%B;dIrtYu6qDtbYj= zwNS6=1|;6%)S}E}4_c11U;10iu<@Y!_um%s@a2c_RIBDa(I$L$c4_% z7Dg_#sVOi;k_K1gH8scbMlsRR8$tCNJ3q|!e3lN#qI?KrefaQ!Zk{tNp$`!F@T z^Q_&{ES3fzYR>}mQ7&VSj|9FajV&!yOibuNkVwifLwUOJo*05z?0mSCw6rkv!-l`; znh4&b4~7u0-~67)Jd43abR_^|IKpYVFo9Bacf>Pl`lWe3!GM|2fCsnQ$RHGARIIFW zp{e0M$;0a4g!lyntRW6UWLK#&nTVlE&5*Qm-ODeDEXr27w|_>Rzt$=)AKb_3PKKvl{wlL90a~L?P{{`0`;QM+*Pi z_Rx(RHyXG1`DHDGopGNh?9_F9$UZ#QcD(;!F3ZXCg$4cm2Fs)7h*1^6b^6#7%xk>$J z+49l>D#sSB;dt?&o(ede0!GF7I!NSoOvK zofr1yO6+*IGT!XV;!iy=f+QoFL_*Et)k_ImB)FmZ)j<~$rJtsy(`m~<6=_`TPHDo3 zaa#<`P1R*oI91CXFmv)(&Tb08XKd`OP{jY#Z`$P2V-*g?qj=*y1dd3#81~PaA>oP- zIXI7QK)y=-#LaakP`dotZi6O2_ov%j;^iK6-`iPhbJQMl={KVnpOsSc@~WX1hmM#6 z6h?uJh_)3HJ3|s`Sv4OY7zOkE*j5>Ln!#vt_-rfYp=CK*mODJeJWRS242i7%ui)6| z3rqI`p^?6WkGINE5EH+0>O1)aw!Yr}rPg124^(5?{~fOMM9@F~VCO(QKt>f))2!(@ z)K7#(F_DpmT#a&BMGxJNOPad)?%Y8X8+Cy>JlOofw?S7UBpu207{cIk>ZXh+U>it4 zq{2F->73bJD2hpy@<$ZJEfvQ*O2|YF;xS&sMQT=ZTFcY5Q~47Orudm2>>prY4ejmH zq>l7=2X{?8dQRoGJyNr1Y)EOLiDamF3Tgb@+wgWxoKU9= zPMlILB_(_p2sJjsME|z}r=cx#?uZ#+7$CKP(}6<18wE!}yvTlW81R5W-9pLm?<2e- zE02GUd@)Z=CoX+4{j_uNqVlch$(Fvu%0vRxpg7prKj){MA|ctF0uQxz-s(7(>r&-e ziQDA35_*4J^OWUYupjllU`yNiY{S~BvOM*@H)bj*c{u)0NdXrC&J4=-^~l!)FY;Bg zv+w!OMiA+@1e+g_7$038SyLUOS(q8P6-zZ1YJW!V;dn}*b=a2ThhbxRu=Z@wV8b?! zv_%kKv`8x1+c&#_MX~BNfG;|cQj`+qXHnNQHu1sX=GH;~Z}|o!$~N&|kR7p%uc0sS zhIQFrk(JdNN#UOHFTG)syo^Yql(e(?!U*_$;c4p9LERN?6hw_0_O%y-b3DW6uYb=K ze#k#q{fDmdHKR64T^HMfJ~S`PQBM=88!;Zym!XXN{aStxrxa-}Rx)Tv96v-n$5&A5 z=Y3aJfcft|N?G}+1FqI>EFd=V9TNIbHtTazlrpk--+Qmsvi*A(Q(6ZJyrVmIX_>r> z*;i}}GzZVsf3vdSgyemrs3ar7;&JmF^5YvfFMa;vPx+5=Q)OJoM`Q&EuU58I4sm(9 z0VSoWg6}HD-oE_{6qSh@|K6NZe9@%qhwz|Ml4*SDMogGA!N*&FXBQej%=w3`)JG1& zAS1hkWMb*0|8cm#oo@gCMvX-LCA%SKCH7y+A`ap&$phw+f%BI;02g2O`Y-d+wDG^p zOB9_y%}V6liT`r6kYoK%ZZ9u~+{K~UMNUgw{IWMl3{6B&yXlO>u)T`m29Tg4&W+E% zOmbt5FT9~*IC;2^@=MM%eBCDgQsq#olt+A+VDLSA%9YR&?#H|JkWc&rkU2CX5D0)) z8jqnQE35*fCiQTP655KAVg}l=Kx#k*{K*r+*Ec0=72&jox&ufqd-{ zi0OLZH?Q$I9Yp=DwepEe_sM2}j0V|@a7hG(BmFp> z@(m!#`ucjq7M+%0vLS%MRM7!&PBym0GHoeZs*yY)!Nirhzz>k}R)xfPfhnkTdEa}&P7hd)r$ zRtitm7(AInl1x^SBpGNa;0>}bePpgK^Mw&F(aI%o@NofYtOZa(i}E$t?9%OyY*T%G z`0;^tI0=5lpL}T0CcFs5WUV#)ZK4o)+!Ys65{$p>LDQ`qZEe*fDNZ~ z6_RLk(4Xgy01nmL$8WFR<>UMMJmH0@KU1Ccgero^b{@S%jTzBPfs1Tr7N~#K+xO2l!VG{hjhwcqUgm>Lc(N7k3G;hG$_hn|YRIL9 zhsw3c?>7}Ky^26C&~$S?73Uc`0h0*A5NI_br22+O?l5`$xw!P8ztJpF7>VsnWUg1s+S+y{j&%ysYVzaJT{r$ zA`zlkmx)Xlz`JP`Xc66ov5{-*PETVpB&m);%JYmmjWoiouw)ECZMXelqv=vW1p!wD z?km{Qr{EhQq>Vk!p;1x3K)z+D$sQ=MTMNexfjIydBsaL6In_OkLuTkZ<6^4r#~w~3 z9VZ~EK1D33$h8V=?y;!o6~rVcs?+IKOVcZGNJT=(hT|Aye;G99z{o>V-kPu}Ua1hP zMMg!XN1wFdq)yp+*<1?{2@v4nQR%R!G~v~j6o;lMEPbg8XRqC&s(KJ1+a-9AMX<>? zZ{9S7}()G)5?Jt5wFr#RbBdLnPXYSbP)f`ZEZJs&Llnm&#xvx{hI6?<@Rk#^+HDkMY!NU|{Sg}+)3YMqUIAE7oh z@{a=k^;^g@`|@C)0`Nuf8c31cNpp{_K*y6i;7r(9vCk z6(Qs>#>OP&@dAPfpsfYZ<$`6`#Mde* zd0=^44i%vj;4u2t)YJvSGCZ?FEsJEXuvBN@ZTMo*kKW&0nRMZP! zOK!jqO1J0pJv?P`y)t;AIk?5@C|3Y*jOHJW0)}!UAT)0q(#-9nR`7l{K$wX+6cYkJl>}(&^AQVIi6_&R~i}}jciY%BEWaxONt)3K7Rc8 za4{tWn~2CC+DTKL+!L2|q^R>$i^a?i;QZFEE^%m|`JfX~4rrH|#rWL=MaZw(4p`=z zn_WZb4CJT=xVxO~4T^FuqEWaZEG;cXUFo@;`AVH)&si*4Lt!~=&!N1@Xicp!MZNY#Cg6u*kc`mcvT0qx0= zqwfxbj-8y)nIc=}F=Kw!?>P}cn<}#s3nq0#@ND;ax9_ zk%uZ3R!N7N+5O2C6)GhWw7#>m!iBIj@`{QE1I?qO>bn9?n>rAH?}B(TGc%!s7-M{! zm^iD_!_<_)u=ArgM2tW|_;7EWm4QKFRocm^!t|0c%q+kGNCNU>32}DlkZir0`HSYW zBO7p#uwWAt2LKJQYJcRFq4`J54Pa3l7i!Zx_r?K>Lc`t}pbns9iYp~$-U~+ zQ@1!iM@(efhbfBo)2zbt=lG+=eVASn4AAOCFE;E{pzcAA^e@3oOllG2F$2U5uGpK4 zvu)ujwI0>ceMj)gu%Uk>7RY-_JLehq{9&8W)Y1|?!v`iM{css`#;n|s@gm9So`F~CSdThS+%eJdj zMJ9D%9Y*5;`em{VU?_oSP=_r@bh^wu6D2YQfSAG+={jk_OcLaR)u zz*C9ed7JwDr1pXYAQ{9{TWP!fGZ{(Adf>Cc(!7I>DnPBgbaB3M5e$d;cuO4mHTT0u z(!R#g9vvM)2e!CE8TO@hKwk*hu9(43<7Ly41OQ~Gy+P+b(jC-6ImgH0^YiDk)4hC8 zrRoH6VED4LD^SZJS95+rwZiHy>{+pAt7;#)kr0UvibLVH`C4x%dIUQkR$U)LO2AtC z0$o@_9nHP)Svk3zSXeDcrT`E;K{)-ZZ6=-c3=FtHMDaHRP~_+#Y;z7YYWm;XT}h4` z<6OD=(5+HeznRkQSL1#%Qeq(;63@cS+ypIgybG`O4*y%yYA&<8!^K8Ow!`jn|4pH@ zB{`H|o@znD`$r)RAtV<;+t!mkRI#6zfQ0Ccl$cbw9CwE_9v{C}Ff{VqaahhYcHJ%^j@SMM0=eU&(Cm133310K*`7w*eGeZ&=hGBK z^q^UO3fA79?{^jrn|zvpU-<6&EgBwPysyt=8>oeZCQw3E7J%V{@T#kO)U=&=I!haH z@U`;KbItK1Z2%^E6P#^R$}r3U3qB#fOZt(m#ah-p2K)e!x+Wu(y7{|3P=)omAS=64 zDif!7iV;6!fJKYqRq^lxhx=H+ebiZM*%Hfwzv9^8;Y>(ub$VGxcWPHtdwY9*C~}h8 zzb_33cRIZ})v(x~eOt?YPf6TY7+Kzl7(6(6YS`$LsrN4zAU^)hXV;xZ>9rCJKMae! zBZbvY)JZZQ@09QVRNRg(yGziSqett_Q^0}~lh9jG|D?_vZQ$-!kq`k(;$`i0z=9q?74h zT9SV%jWd&{*?B%G>{&};G7m=`kEn5>W3Lj;&{8ybLZlq z(fZZL>@s848<9C|oh)*-_26*-7`jVd9U@GfAJhnRH+t;pNN>amte9l6nC2+-$c}oc zr0Oh<ymlE> z!iv|fUq?XzR1MqNF0rt%AiPG)E&15NvnN|LvDo4@$@X4qZ5aP7U1(==qexe(aV+#8!PU^s19P!m+W6_b?m2VWg!h=o#Xa^m6Gme7oR&!ge;@x5 zXY)Pval7j9^>#KH#yzq?9gbpm?+xooMg53=AB>?oYWQOgQ{aMl9M?%9%Yk_RQ8u3X zlGmip^RQD;VtC>!I+d#YZin~1PPmOVHUBkRq%%Ym7{e z{FcV0kH*2ht*TzOyoj1)>_nqh|6H|c(#x8#zIo-T3!~vj5fsw3!Slpndb^Zc8kxz z5+~uoU{^yEIJsbOveQ6l1A2&ZIt9B??!WHPd98GC6B0Zf;2H6Fp7Z}Mw~!_c?sau? zu|pE5 z*frQ6tZPDQ^JCS0sjx4;4LCWIb93Gh4*X3s0IInI4D;@!((He|BoVJ29dc8k*>I7l zMm8`({eki2_+6^?uCR{|klhbqoA(<4@F91uLdBP4$3kEL>d|zlduDsHeyBM z`5#I-3=4#w0u%MIIo>OFg|8x3d0%o|5<~dhvxjyly#M{PE2gH;oyyuT@e^qYFhk=$_bgVRxuz z(UfzwTh_M07``TEHM6q%>fR>SUTI6(@9#%)Ai%(8CO?1w$5sVP+J%3>MgS7i-lkAV zu4A|dnrE$`GnZ{ynICa2o=_~Sne7JWBeR`U8e^e|v?xEd7g|B=~ z=t{*urW5i#eBO}8QHt4QSXEb2m~(J*E8si;Vy+kz{Wjh+1xB6+#hjEjnm4F?q!b?A#N zEt13c`ZWsl<{&c;V7P}!?lj}lhkYz^cI@BhY?7+0-J1mgaD>33`3Y_+!9wFtX&exm zUX+|JM7Aie8+3)x>_**$?wd@`KJl*%yBGX;uMl^LB$u-hSJ~d%Nj&K1SXz4Kih_=b zy5tgy4v&jE{#Xb9ldPN(l6mjvN3JF>j{_`%sU7;k)|~8YRP4Cmf&Tt0z>^CN#W5SN zB4UV;Vl(g50qQm;Isdiv-s=b}9@5PtH@!I8;h#UTfn5(hA}Yc4J(sD2liNHDl$2qO zH1d}pm5W`;9=w?`P!S-l>fU2ChK z1aaHwQvKMJRtK)=&)nBprTBF8Xb9tg@}w4*+GGiJJz-~?R18kK zAJ6LzxRX%pIRpCYQ3{yHZhXxYCPtLmU`*~bufpDYSh}`U_@fNq*I;iUv0x$=*q9Y> zd~z}!F?`Co^HF@Bf~JY@GEDHvDvXu%i-wh==hKj$aAC3>8x!%-OcGzE%@F0&(E&Vl z9Y)MoeGv`payY;HC@A&x#tK(Lp%e_I5{Ifn6`n{$lc)str;3V(_Abp5i(*ardY15K zWdo+s-JlwlkRV7u_Qh#Sk6-_8GMe4VzB&KNYO(Ezp`P9)$Ms+Jv$NDt8SCQ_0eB9u zfz$C)dLeMknN-wQl=GV{v);8`P7As|U~y zt(&uv`LeCLFD*CYJ(4}7{pm?lq97WA$8JmdboZKkMAR#T?o#$VV`rh~b?>D|N?ilwB zhC}h3^VHsJuRYhCbA^P2AjugNY)o6d5z_jvr?b>ciZDp~d)@wPFcx{{zcsOcdY^K!blpaGkt&4Oon8&Z?m4_xE@O%Emw&5j?ps}l zra!cg43Qg;*HN}}xyH-phltPG_oa!3=r}$b+H~grXh!)P+}wUh&Ia=+0d}XZGH~e} zh960kg||uKI1L47GrHkjCC>9|NF{-SmbMLW<*@XO=X|$s2ZPKR&VW6WKen= z5;)+6B?Dj;JPD|3Qgyk$&w2m;@vl}mwUE>Q2HU5MtSmaHRnqz#aRZWf|KAeD!pSN1 zcS(qP`4ZJIhVUX$jez{XKYfACyyq!Gb^9?6N={yapU^@aT6Pcx6PP(W+}21lX< z3|MLGfxpIcAy;9o1DS;d{Rg3{<^s1LYhE-oJ=K_u&nOJlDO{Lf5Q0fX zp*|Ps+P;MnfjF;w=(*jmUA6=MCanctDNlbV!f!yT1@nHzwE;#7*ipc5HoN#C22fJM zkb<#pzD(Se`5R)t1^h(-fUY+c%D2*g4s^a^U+iT>VWND5BXuj;fV+9#6D5bw% zH|Z4n0Ef`7!b)fv@t;@+bK!pr?w9_Lc=czpkRTF;f3N?o+u!>ewDfRZ1O@`jE7&a% z@lK4q4c~GWDVx%J@2rlAu1=)_xC~AQC|_b`rMIP}j=y%-1*~jsTcGNf<>d)l{mJ## zR;eWzi%pZ!qWm5^OR6pFH@b%bey?4rRuk_7sHa)nhXoX2` z*r!Cwm;|I;a5E%VbCFQLUIhybY?1E6qQN~ZZEw#BvIyF;b@DQhO>wn*gEZnrTH3Xx z;VJ^C^oao~3N8|)jxw^(L8&z3x8u0CcE8ll%#0q?j}D-3J}uPB+yf+5o=iKa2oWBB z-Q6@P`?&`0SEqd4Fvy*RNYe~&cm`s*DPRn9A1~qU0`^RQ>Fo8v6Ed~?_tRtsTYBNb zzm1JW9vrx9XltK3o1%>xthA&2<-W*aJ6M7RC!5^&0W^)6y+}+D=v#3h&Jdx-jWOHC zh{c5`=5Q=^>=_K|bSrd5di%fw{|<&js|~a%^NmD>AoREULib`iaANwyPjptTl@2B< zlT2>%-sjAQT%EM7ceRr9+wF|DyN@4l#PZE^?ZCqiX)yZCF0S-iAT8%Ywaao+y4qd2 zGp|Lw^fa;oHF#THefghMi$tAqn)LccB|K@Cylc~kz_TOsHJMS%Sa^j9F}Yz#70)qi zYDx4-8!=uB_W^dH{KU?a;Y2r9TzihCw>o4R zKv*bF;i7CuKav7!0rXJKt)KN?LcoF-o)YL80wWd>$Mg&i<_JjbZ&J<+WO#3EvTE`L zqz)$<@odbxee`NiO_kAP2@eksamig^t9{H;dm!$fD${n=$Md7vt08*LSsA*zo#}q7 z4KIX^jd-oNy7IfgxSV+!v~>_y)unaO8UB^izYr8Dy9`KkO8kI2JpNzahs&(9n?R`= zeE%@i5^SNUu9KbrSW|g3$wE}U1wsQE zNaaEXrkzWV;5Xv;?_WcP)7G3Ss;Na`Z~cY#J@AtXb(=}Orbe~lC2u!ToGT+JDA;nC z1?4~}wPd+n2SNs{SDxduyikv7IOs2KIR>O-99ML&=~OsE3nXB2A(dS4q~Jh*+edPtFz7g6Obi3&^z;~hjy>AlF* z6>wQf$iaR|LPobPEM)-H^7OQz$%Eqad4Irl6S9O60^52 zGCf>bvDYco0*zLBX(`lnFVlSm2Q%bx!r&qF@*O8Ha~<>2ZejIG8v{)uwjYYmcF-4r zd$=?amxcIKEbNnTtaN7#bQ%FPh#s zJTB9UWngBW0vJ#=oID)3_6F6DPj`!A?)Z)`a$Y*iVk+V|iF4%LkZuP-5Fu20+QT^% z*X>+^ap(v&Ot?}+s^Yd-Se50~)t+iLPxU#q3eg{$mIiHl!Pp0@8CgOMV0Wal?Uj{$ zwV0DbRmEIEaGoj9Vn@>5s4thPsKO`$C9LC5xO|GR#$mOXEQQ;Ku8fjd#f|9*fIuX< zt{1v>Ky&4aT5Y%aJPM6%CM*owmH^sLpi_W9J*X=Awk`%*euPw!iA z%U`_l`(pF2g}};|7mp2dL|3Zh&1NV$?&A^73=R=dcJ|59IW;oo=?&Jzbnj>RoYVK@5d8FA&1p*NSb2XFDUfm!xnh@GXa*U045M z8|Uz&_rvE7kHa6@`RY-Nt?ka62qh_4ZriAuDtyu<^qHfwla=m1+#N1wC(iBM zXn#dY7Vp~??|S;y!up0stXKk{d6Xi_S#_@+^A1~Am^wJ99Q7NftL3(k$60p8xgpha zSd4s4?wNp=M*RTP6Cqq#-VL;)qobyjD2HkTmHhq?uHtwuW34bo%)Mf*d`VNe{Qk*` z0VCq7F^|={oC6u-g_+sxl9EfvkOq$oiD5+G2hnZs*xPoj-mpCW)vMs)UUEyTu=(~F zJF&H=F+}vJmLZynzE2rkRhtucvtM^TJc3Dmi;pj4;45f-NN4fSYPqx<2f_d&<20@h zgGuA;>>R|97+a3#(r%vXs=9|x-BGSwJfnm-0Zfc5$) zQz%)a=43==WhiPtxutz2Ty^D&4TH^WrbP!*;8jjw(MbM)k15|Dc25Fr( z?7izR`sSTwMvGaeo$6B-MFZhrU2LjL^Y7*a?NzA7p5heQcB*RlB1%R^Mhv6{{w?K$ z8X6jikE4~9)ucB7vRm$Tlk2~Kn?s1|PVjtHHoUBos{x2qxb70_<(oI*U%x6jHh{np z_Iby(@{86YM z2)PINQpl{kL8-CDWq)U5wqxdT@Gg=AL1nnssCbW>g`HiVTPtHzLsj+KN#U!ZPu*OE zXz3-gGJF`(H&4g#?hiYN#-~dLcb$=UCnzZN&e;qv`6>7IqVxD(7lS3%Uh#qN3C$J` z%Fc-U7GN{Be1o=9)A^_7*4QxV(>Cwl(O;q(NGN{Mpvgzg?nPX}0*rmWnMUJQ}C z`fDJQ2QKzd^tV0l@~?vA?9{`^hyBEqBTeO!Og+s+zMp96jH(gvZiMpuV z4Z%CQ%Y6DHVh5Gu)sk;@LC{vpwlb{T45hB2lNl$VoBhW4~ zP}O*YQqgGn!grc!1Re!qYz{uhitA{>BVJO5Pp&6QxOYji_b!5)%qSenQ$xKwi&&Aj*Yjl_8OZyQnvW#5_G9>Z zNa7kF+zf8%R{-K6>8wPaoL;@>zIdCE`t_bLE=`ZG5^_w>8(O_VdOZbJgwN$NKY{c- ziy?|k54;UP{e3>QJ8;0*hZ^eCKNstrs@j7Ga^>bP=6F1TymRJ`?B{1VRu)mpxubk)!GO6cGKAg+Ce!DL+SsXPk zo!>!{*LwL=*SA&qJk2X&W#`yXjk8VlY8O!7e2AO6^s_IEV)wIIzHMUD+&gvLxsLWm zztG97Zcu)rb|Yju;}AnJVmu}*$lPmuwqHi>%*)pS?HK0(BBKRQTlOD8yss6qR2bDw zDAX}O1gbvpsuLuTr9sqMA6StwCWCRpoM+Fl5fWngBl9d~BPlgCG9m&WRi<44(XU4v z;ZZ@TmQG{w5W7xC{wq|FanOqwFIvjk_p8-&v+Bn(oam`% zVMFDx@I6M3^mW2M4gTvs*hn zo~(w|D?Q1A6YrypV?d4L)C)JSfJlzf$eoI7=qvV>1G`YzvnZr^da^%DuT}kpcYn9! zpGbadcMKD6XjEDTA@|Pih?9C2=?f3ot8)to2+X|B@3)3^;J%w1MLegW+L8rlR;XlN zNK$eB3~+*w+=7CJMys3|c*ihfKn6k&fX`T$V5@@tSiP`KYU0saplAz{aljBg>PS7p z(<(MPZZzwX1keR|0#QjxY(wCt#C_w&)s@}tZ4R01p+8|!ZJ7;>-FulQS8K$@XE%g% zH6g*V+5qLRc?+y)+rNHA2#FM*XC4DbnG%XcA>EX$)z^+??BIVVD{n;%EIuE#mwxo9 zc#dm3hUZGSI-B8B@B?Ye-d<_G?+qU$vaiLq;EQ$NnsglPE?M5JCs4H3({LI&R7cK66PnO3X5^zqyB{jes#gBmb7~(QfHCk>lnj7XQUF zxu`vdelA4|N(prqU6PB&>g-1<^gj9ydI?+tm%`#qFLY+tVbNJRV+y1%^KD$%@4aw z_D8aZ@jrx0^$O|ET-}q@5_!VpX&Ae2QlVFBGr);HPMnNO<+ob+sqDQ$jO=<~RSa?3 z9kMBIGA(@zNr|fCCM2fHPnELh3q|P?3lAh9$=deHasopk*7FA4&+nvwUW@e=aj$8! z*o`z6VNRc~pF2BShEz8O(nwr^zzx!!mg9LNp2vvgE^urlXsyOzQiTlcIQz^PA|4;r z{G*$K$@7yhhhZwgHt^fX$eo8v?Ak>^A&r*VLFNx0m_U*YD=)FEyw%~_z%HmeTe#Mu z*qo;`rsrU~k*d%5CK^|5=0dIjRT5A?`Zk%ME-CDxnnHL3o3SeN!jbg;$1FnPhhw|# zj=Ca7${_P?giI3*br3_CU!I$akW`8|kZQx02z*)j7~>FCuBD~S9rCg_yFZsks)=FS zP{6GL{vo1=WunA=`GAek8>Jg@g37nyWV<-~xB%9s_jEsRYD4aH6BWeDiCT;I*^ei< z^UFXY&p=K=0q0V|+Z)MU6qhd(_DkJzh1`ZNZKFq;7OYz@EH5w5EiX%Yc+|+$wx7nv z0tz%4;x7lhahOQot$8D8gxR9`fzpD=u6@T3C9GYm4S*Wk1WQxP?8{pJ+`2ky;MrQ* z*gX4bo8r{prSK{n4gm)&8D5@SS$WYmbr+H#FfYvw@_;;A1|*42PCT%tWXNPmTv5L% zAP@vg$=1$JIt;e;lwf40Ch(b84bPUF8;FZPlkx8$w(O1l_~OMGLL10sznCK*4uGiz zOBDKPQGR~1nr{E_@S)f%b%|S|aiBv{mUHDasukdRb^u!f>T|}QrRskum(&@T(sY04 z4e+;_4cHYA*bejT%m}f)cy)hD95yc@+{^A#yZluhWWORxq@p~JQ|2RhCiO&jV{|vn z&K14Oh%OXj5K0^(qKNtW>6hQPA%&*xSPe$Lg6b<*c*=jgT*A5LQ+JNqBCE(RV^g** z?@jX+$ql=}d)?|9T&MM}A}Rs^zA0C4(1bWAI)|j%3={>U%d^42(Hn?pqQU!mlH~#j zz}JdXsPTq4H!qCFu(zL`UU2{cH4tCuq@*NW_93K(1r>_mV7zr65s?T;kS4)@go2W? zd2TLePq)F_D=dN~Co}Ujyd@-$0EPH`!-_#_cjlR2M|z-1)i8j&lBN=QRD$kXIWiRO z15_Y3AXO)W!vZ(JGR`9!=~EJE*dY&%H5P*=8QiN*%FAj zO+~FM^a>;yXdhMbhGZ;nyVuDm$j)Bt{djM~EN)erCZ;?~b+58_6Le5LpQ162f=r~6 zA0Ja@{rIg=C#OA~Z!bAa@WF@sy^J4Sa9eZwudH z-KRH}(Noe>4wj`0`2jm+((~G%Wf!BnTr+9WMle4`z!5hnl@vt&(n?BS{R<^|QxVP( zGz6IH*ES|4RmBgapZv}b8iD%y`oO%`?$NTcbXIrWto&xy<`sEV^ZP;1OdOmJ2?A(+ zuR>A=y9SbAig|x>6rv)JVu&V^+X%V(l*s&JfNaJTY%@qTl_m^0$zjSn0#F5}rAonY z-_L`W3i8oV;ZspDToX_c3MenXg^s;Be@_Hv9zr}fFMJGJ7a)(6DK)%0kAodD3oE9L z+-Vhab0)|?vX*AwMT&d^s7dnE^dIg;M8R5hJ?)iT$?V2Bq? zbCE}wyj1VYYqDZ6TD2lR!y_yeSwBy$rhf;vk-DwLZP_52vHy&PGE39 z3#SNS&-6;=EozS5^0Il*Lf-GoQZzk?x#M^(m5i|=PX~qzctc85gxq30cUB8mw$C)P z(lP=vR^dsK>sJ$~qVh68vY#Ur-Dbg;tg52&R$wQQNOL1V0fLo|jGo@-V$kHg`1a9P~fVGm$mKXQ}NSGGp=gXI$>fCIzrc2)o=>YF? zJ)O||3zwmar%O|jYatOSXchA7nL*u>Escl$ZiX|Tpv9_A+?EJYthJSnT#7qRK!~A*aeW3|Q z7f8|}MZG_-NybX`?t{@1cfYMPd}kcglX}89(~F*pOyvhyVxdH4L|-cp2z_a@Kwiy} zKh9h6De~J?<>NUz{1x$-@5-=)%cQvSG+FCBM|74wK zYb8^-xLs4Yc5sPXb=pQSlmXs<5oJuAjhul2U&Ofu)7`4#M~&hT#`M1%LH4k7Aq z%)ceSKlFB;w`qDiO^5il@LxM0r_D#0okvhqf-NKzmE5g&in*qy%8W_ZA&5d{sfob* zh7B!UI+|rCn9j~9N09jsp~RV`+s41+0THQ`+_8iH^4wXR)!fZPKh23}J5#?^P}DBO zf>*bNLNl&${D=*_;%xI)*h9U#zw4T%BrcFaLd*CM#qYl$((aH|G4^UVWBT_1+%KSK z^DJOb?%WiT#*}(`=6&G7sF8_&iCWH>9eO?Jlx2xrrql`F3<>wx+Tn+VQ_g~@`usI| zSyj~x-AsQ&XOyS*u}UE;ZtOk-@|EuQp5CE>tQmSRpoI`C)(=7A=`5ah*HAjAUUkqI zykj9qSCc8!IyE09-ScWTt>b||9xCI>^R0aW8~A>Xb@s`K6J&?HvK`Z2BrYofDQ zgAiHUADjG0N~nkatx(Q66V#L3{aXSBJ;1HV9(bPUU(s7zTe9FMeJ0yIc(G06H+C}5<_EiQ^9O*epJNXN){+P+GEB)&Cj=i2IdL=*|hhYaLB zsHM>wa;SvbmO0HTLu zSalG9ExO$F%#36Ki=f-uRj8`MzU5qC^R*#qDJjH~ea=}Bx{sJb0S;=va5c>!YCz2T zoQFOfdp8U={Irz_pg|p9u`WxIvWL$m=YV0hk?1@V?j-|tnfg{0Ik|Ii?WOQlrMCj=`kLPtbHtFgm_gSIWYSpDWZ}neL6D{c^Q))&W8kE2=?|gXmkO2 zQuBn^y?dX;IYf>>7#J=C(p|RmbmBQV*;OJaQU`?U!db$Y_G_NFq&_qq`hd$tjVK35 z+lGdQb4yEMPH?wwQG9x1X!WW#*gF)4uaE;eqiRt;n+k?2wa>g`voRkpupT=qu+>N~d zI7a_(uiXDvEgF>);)?onIwW-s8#rr+rFf2*#8pnT535=mBCOX_Fil`_KmCaMV0iGN zGV;!?fPHplRJG5Zu&u|kZjZ~+hV~x2vTp~xIf?wW`=4fX%C+_NA~5RKryK-;9T#|t zgM)*xiaWWhFJhp#7dx_TQ-vFX5xV}+{#Vm#8tHOVfv@OS)zMw9)RET3{8X}CE>FRb5K%9D)Y`#9_B#Ap zY9Vj6g}t_|7d9}HAms0%|7YnTaUXmmpMxq)^5IJjI}PwKo*RZsdDe7eS*Ldj96Mp7 zS5Z*`Yz>tED}`P+2u)|6-5-+6oJ}!$q5p1|u1(0Dpj)`k_G{aI1|Y>yA3&kvKR*Y| z3=t#4xtE_31Bk#a476rul7u~U+~6^VkPU*;|A%vw3P9onBaet2cK1=>FIV) zN(zcgc&RYT(PlJ}xFAl2idkFi4iFUu-h2%*I{@Oy6r2$-o}?gl0;e5uF9Mk!&@fGa zREZEwI(4BNk7**8KS?HW6{qyH$fcXpD3UYGJ zLfnRM1flH|3Q81>tGnF-!idYO@7O9isU-X_oD&5F1%yy2Mj?N{e7OmjfuLy`cc}r& zD3N1rbVbvH9)yQR>T^Klyn-eTQE%09O(|L6`ToaVA(2|h1wc|ItKxzJAmfmzM+5r>d~y$1)qAEv?ub{Y zbw0a~)f-t<(qRJyT~Nr(Kr^qtmB_hYzFc9kzDudO_i)Va2p!zL{<(g5?=YMVt@+Jz z1@_5^HaF-HDnpK8FM?R=1^#wIV+jN5&rjPIK;XRe+VrU3w~zAfX_E1x_UJ zM3Dg5+5@Y=!UB={5GdwhAMAUU z{<}G-M2%`Zi2i}|3eD@4@nT>&HqnCv;Thde{D2a{&~nD z-;RChorG$`@VS@{k^?J$E;6A+;j=o)rezk!F{CRetl>A%mOg(1A^dTEB6sjY{=NDh ze^W(UDIbRU&ij36p|i->q*pK2JjKNvCf;|%ED90tsV+R$IGT5I41-uZc}*%f{YE`g z!dIpyOV$^y12}#Cyd{Oz=N7vdas&m(ao>LB|D;xcr-l7f=n@K*BaX*Ro1{>x!7EIOhkB#6D?h0C6?)Ffpo zZ>w_(C9HVk=P{53N?(Z&tiI^4ITyF_;6tI&Rj;$u)L3F~Xz$p!x5e4fquHrXA!}9- z_F+xswWDJxQZ;Qa>GJ+^f(Zz`h%o)`_9T`SN;36Mm&t~8&w>HJ`|SFDicIZ*!Wju)1t3j4B_A-In|V*rYstQTUSCb z+r-39zF~Ort(gD;pZ@KGQ7tOhUGaF%u~1s!8=uVk8i7SKpnYNFPQ=6={gQ>8v2Z3= z(deF2n!y*zv=Au?A^JZRykj8effkuQf>2WHZ$1a}NMwxy)*?`?ew+7i2>9U2Bs ztHUKR!7VjhMZw+)^xGn;r;1Do3TbS#BP}X#Pr0ZE-XhvK#O1y|tQC`jU*T%~U}0-( z{6srde`S1D-4P@bL_bk^zC4lq}SL5Z)bL1w;i+1Gp5@xts3R@>-Y6^Zz%t2d|=zM_uj z5QaJ9DS^3T<-x0`^PuUSNh0s6K-SR-I z4~1|@Od(xIjP5-lQ3m3M0LUx<^vDAtH^QPneCA{K*S#R1ZOU(W`3wp~15=PcLgp?3 zpFTJ^7=K({0v5svUFOItZ(@Q13E^KL6Z+3!19*@X&Q+V*Wa8U5kAnivGU8ob+;H+S zCpLQW-0m0G`1IA^)adfE(@v%M-;S9ZeQxBzH>(mN^#LGOWRBYMi5Cw@R}4d<2#}0e zp%&7^3lcofw`;*cWbX!*g`Zv7U(}r2qa&y^r9OD1cmI*z>ESD4!p>w_D#77`V`oF9 zPT9%_YT8m3l=lP_OXFO0eyRxcud}?LELo)-Q_f|5tF$g8Td02V=5@d|kDLYR!WViK zXTH69H=QTj!uo?HiC(c(Ll}oU;w0K^1?Y@bQ_V4VJ1HvsLUjXtN-{mDDN(@yTdl!S{Q zp1bwCb$=+2BozpyT1g4qEbbj4mW_y58CIOu*48yJ>j6qN3DEFC=qRo*6{Wq`4!L8L zGnT*Roej2B$m|d`0zwVY*=(CyN1fHGhSZZgvoJIB;ZO*j)fafjg$oyg)|>NvGk8M` zI0s_Afx!R?7+`2{g5mBZNuZKu+&qD(B!0g!pEDWpSgRO{!6y$}6*EHUUdcU&JtGQ1#sQB*FjPrZaMnRxWoJJh zh)<1;8eDdv67i%!t+i4n80P$e( zZ%10FK}`weur$aGAQ^gc=@KDF4p2HAJ({xqQdEWQ0g6YUusFhdeviQcGIGEsA@uu#3Y`P?~ zcQBpd?dy)iw~_c3745l@2qt)qjlK!L9`YrZ!j>7;2yRCXVB(EZQCN(w?E3uqnNqg8 z2Cl67H)t;cHSkc7&jxYJXo~gj^)WunTFmaZhSNejS3tuX_Pme`H~RevT8=i5OgxRX zSiELfaOx&T?dQ%Z`I0=Aka-JO8rIzF;LKXn#1SkUZ3brdZIJn*kAb6xbiRhbf-P0mm1Io z!Ir-qxWN_3edLaHsBRy2wKvvYd;@l+@rSXU?uU($$*W_S85$FGsH);!db;%eCin;v zp)4ohzSeIl+_=nu*Wfd|>x;RHU=xl&f(8p^&wXqTk!oKk=TgJ&#_~$&I!_>(Rz^tr z`nuytod-Ge^+03^h`6CAo(!)mxo2B`pKz^T%wZH(5Iq%0^?K+-jV0hvWQl91;gEAt z&Hs)J2mjx;FeF6H5K=pz{_}_QHpZ_a$eExp{a9?Jd@^7)bEq)towRii^CzG`Q z$Txtx-n|B_Y4f`~nyRW;HKRqAAOV72C<%QOkL&8{pciIR{2nCBPEQG>gtWk72C60& z%e23Wfk*_-2_vh^%Ws@Kficl(aS=|i#}w&h*$MyNZ70_kXwmMJ8QIyyq*s zp`w6320`mwTC2Rg{Ij;Hr#aj~Ebd0d{8_RI;L}`QRTX*&RevaGCihYNX~^qXFOKMI zLWF>b&SIXypb7;J;8c~G9Cm&ALeh_IR7?)0NRy?oGQ#GSUPwrPE2>Hs3Pr$r;;1j^ zWT(hD**J$|<)KA!sp|_Unx1w)tusO&zK2)_ox!Bwsth=_HCBt)L^hT`&2PH{*~GD- zriK!tB3zlAfm#8S9w)iuKWECAOCA{H!tL3(eGfq&1Q6T1-)Oj8z8UX3(Gp^7T*qn^ zVjdnseD)(OG(ryJD1>eT)zqCGm-Wmd2sUrtyg~UQbQjq7!Qa8w$ea7&5lrBos;Vk- z2t~lCrGO7*Yw!^EXuw7h-ZWTYLk{r^sHJWMaDFfkk(w`99ibr7p$~a_4++IucE`b| z1nmOVme=pYV^vm`m!InuNEf$RiwWI2Y(VYWjMu`z7c_ zP-Q+5-`*j}Am9cee1Xk=P#MZ;gC)Vz$||wfNMBzl+c5=)Gv4NF-$%eWvi*q(IS`Y; zxil}3bL?&PDNDX*Ns*mcsse7T)(;U0^vowvDr*Uz+u+{g{fz0PO^pP4ZQ z(kTiggF)uGwzjs0P1Yshj*Q*ca+%nd6jrn}H6;z0bE>LbhdQsyX6%}1X~nr6h4cSP zcpnZ48{A(A)8NwOD|XcvT&_a81A+H~YJ`q8C=^^2#LScpM&2VHiGwc*%T57g4S}-w zkbVeIMO;2i==zO&P4#2OG^@Pf1%cxrj-xh$65bPm?ifUC`-a1P5eCL|9OT; zRtE*LXY$qJM6%cTJ_O(_!D=5^d>539Jy5h1y9%t?vp`mYfX@1Z`Wyz^0~$g zV>iZjzl3qpJySBztp>XW05DOIJxcsz1x~?QGvXpZ1+at|pv%BE!9tO98eBS_@xpow zh=4_R%IQlAwsM*d0JR{=D8+^JN6`Hn)S*Fu#6VI4N&>|5=f%H#R&+y?zn4}cWBb!I z=8QHJQgq_Hy)43X|sVkLPcfAR(+hF4&`(lP}gBR>)hYhfxj zfoap?2j*bkLt|`uM&Ar$x-l?wg_dfiJ7?ES{vbo8b$W%rjfH}L=K$8^$sI>jt){6A z%;d>qQh40s!;cyY_dZd`!f$e@&S9=YCLMD8^Iy_}q#vcNs(UUVo$wgn6kF%NapSE_ zCrS)>^3bRN(oLk9hw8FAl1Yg`N*U690*NNlKpVO}!-5EmA^>pw;9f#u06u}B#XV!I zyX?`@Y_HA%ZVEPKI1Zwv)9Y>sB@Rjy!3=7~#;K+rWj~MFnL{$e7xMd*{QAd?+Q-ogAhegH3pqh|;_>j?4 zB$ZB;q1YT$kj(&ANu;;WZcYGL9b%RXUFU&wXRGx64y*=h*I6Dxg%g}p;Kiyb1{V~? zl2=^Z1}Ta}&8_DZ<>k(uA0{;YVLa3!nPKuj(2WPM{DhmC`7km8_j{p~9SV@20c?X2 z;C^boacbRUrt{S#cVruVUSbAA35d) z?gjgLUm#kbhXUYWt_FX-Q!URxdDj;xQn1y6pSG!{e{ejQJh0@2GXPK~<>lq2(HGTa z&I4&0luzJF-uBIp?;e7-?vG4v*#(@RSblT?ABCiE8Yo>Hrso?T55LQ*uGTGBKP|@a z1d?3DxejngHnI|9pt0dYGZn}1n-zM633Pgfh8$#--Cw`{Ml(VzxCH7g4(vZzbY!x$ z9a6^aiBS;Q4*Pd!U>*7Y2UVK>qg#p$1d#=TV$tbI{CDtx%G2cWW1^|4Da4@(NJ-C- zIu`6-zy*{;N?Lk~8qv)WKLhWCkj?>lVgzF*c5W=qI*9n3oqWrSC>XLF+`t6KU2I>aUf1$t!mmgmDL{+ zp;9Rc5^{tKtj?YRL`nL}2?77)CkUZFxR7es#^+!HpO*gT#r!&P21k;qynYp2?6U!_ zUn%kJC@r6NxD!jsbDv38c=<_Vmh!&t%=6rS+S)h2h^d5b;iH@f6)8AN?-!l^Q)L8o z@ObBUR=W=4E%Y@al&JpAisfQva*>F@9pm-}=eg5*r;2TAdr8mc3z^X4B zKuLJzXWuq25--Ea*;YP&+Yu4rOUB4Y8Mbe|r=L9j41Wf0NLr;>Ao(*i8BS>2#(fQj zU{tE@g=CJ{OYdE;zU3e^+tV*}*p=7MFiY+V^5nfVH-Go>(>1}GrJ_ps^D&i&TqFIaVD$#NcD!qt)-5x2bXgeY3FPw_&> zPN8ll_SIzlEWOhgZ&6&ZiIY(u5nN(&4j6iYi>2sDQ%+sDcG%y}{}m(n_uvGJt3xl= z0HBsJ+@|i)>JteNCvT7dWjT3UJIMM~w}K4s-Fv3Vc2(dsht9R9$0w9Iu z&-D5@@TSQ`Wh*sbX7=hG``pxW+SKms!Ik^QF&nd-N3Z2(IgUm;rXrn1X1p@jsqh2S zBb~2L%=X*zg-%69(uXtpM0}cx9@5v-BbkLHLb-GmqCMJCrtRL=2e%d?N#CMcoFNs- zD5#C+cHklAX_L z^)jXC%!$v=is;AO&9A%1fw37@r%E@Qr7}3|OH9?AE@@wO<&bJ&Yrf6&a;VIbvi3I- z@mt|m8|y09FV$qhs~>y<)RjxL*9%Cishj61a074CN8|76T_owA5WM+r>WSk!iIM3u zl1kRDL;-%^?QcY!s#vAn_$5<$bZU*O{jefVJJUk+@Mkxf(iN{gk?x4sFFllFVs~SI z=+OyI(4_RGFzqMr%sHsMFYuD9d2iQKzwO;os=z1P)SQ`@`VkX}YtOp->-e;AtaEnn zN`pLs=%wR*>y0;Zx;KnBS7l1#Xi&bl=_oF+ad6m;aJ70jj2)>ZBq!$s<0mo6=rtfY zs&`vuR#Pz7i>z}B^T#~v#*1$6YMQ7)Ipbm3Psoh2KYsjZb$A2~El4k%nHqwBO-4{U zK`)k<3=g4=s$KM#tLE=beO5vD0RGVS&Ifp!T3Vg+&Ph&73k%U>s{m5aC4WHpMPM95$=LsvVlcSb@iBxIr6b6zqWQK#*V4=oa}6A zkd9SBKexCNR~Hv}q+L|(TwL8ppK8`ZU0FQW%RW4`sCw@pPyop52d=F?AQH$0$S8GWwHUk(j1NS>A zNpR+Ve``3UCRA0y%GU94duOM0n_Hwi%4eta?#nLo7&uGlJoibiKg`f#Wq#e1nqO7ngT=jgX~~ zp2Y#ufUURHbrzNz@gD#n-8^ptmcM{8li&x=th-HqdOI>=uqki8)JrRi*WK0Kt!-hE zeOZ8)kB{y4ZC%hh<`ooBkxIz+y2f$E9{P9}G<1jCkCj+=#4||pe@Mxf;`|xhKRRmn zf?4Vt8Rh$M*OhR$$zWzkpqcXf^Gt47dhf?)q@>Vnx|jNW3YSw-;uB|i*J<%S?fZl9 z3tk0U`FCi#bH?_e@yWvR?$`iSS?^@tf5ia#>1k{~)w@bIHu-w``e5sv0VBZiR321D zH_IZAEu8xEG=HZmL*04Fr3UiyFH-iv=P$#(&# zyG!I43DVob!otx-r|n9;m;`s-FW(JWpApr928VF{Uv||?zqH#|<%6OPF4rAy^p|gD zd0`h)Ojp?<2oxke7N9b3B%<_Jc!e~jfu#t>H1{wJ*RGIS38(OfM=8+sF5;YL*d-us z%7YEjZ?C=MlMlYKy#aSsq4({G=p#71-bd%$eIZLvCD3c~9)jwDmEuCu05{ufUwyp0 zgubk$>M|e~>L@P%d;GFzPyZEav^6 z5J~aE=SSBg+sw{T(u;?~&PR1tsXW)w(C`glBA_3g`a1k3CT~D=E(RIS%4g1OTXq^A z%wo3lV?JhAx8`^zD)6>zl>W3G0%-uSryLDuFMF_}VPM^4kNq@Ja#?^PY`iH)Cb9Ev z``J3vXXhi^-ht((Ovtb7?%6&F23<~JV>7wt6?zqb1j23_{rq|<#QjO{cpDoVX|I&l zo9_q5o@?f7S%J*|vEUm=uTy?v2K}QFcPF72yN02mT?93LAS@-&Ey-lXkwgfW-eGZJ z;U=aUKd@PyW(SMM4~DHG4`0rS?jl+?l{n0kZMNAsrHB{6;1u@foQ_*93a6%+2D7*s(R^?%^e6V=gvGc|6mqm z=x$#2^Fh_{R9>U$Zpcjvd6G8$_mvMiqPd%6C<%qypzCwBLD7ffg0QR8K<-Ck{=Tup*YXe}PbgHhD)=%>(0PP{c)Jv;07qe-kU1&}{wW@IQV z@`_Mca6R)_J@H?uJH*e_Zpa?nHIf~iMK>4}geRWg-h;sWHHF=Md%l=;mGb=ds&Me( zSdbZJAm4q?MxJR!08fJitFQTNNQyg?H*Hj3gI!;sVM8A>%#|>eiVb!)n$yj5eb0$b zOSPTMG%T{q*Nd<@3~5mv``^(*6aJ0>ui?4w@wWiY@e16^5jCvK14YLiknZ~|PMtc~ z>N}b1p84#)(7{_K{7}KqX*aS+Nq1{KT=e8P>*#t@j1K1Wx4FvdB{zQ$9saUi6WbLU z8`wVMxnn1M22HkoeLZh#FrJChM-T5UQLWzS)$g0P2X=(r*15|Eg|lq12{bp$Gu=dno@vGH~_=eQA z=#wA#jfzjxj-=TJ*ZE@>Y`nHaWuog-QtoS!!8e;6sH)$2v(!Tg)hdY|&5qZi7z#^93jOkNBpYYZenZy6`upki2iseChu*@%;uEeIW7*zS z!Fw@9_j#J1{;oCW##r5%1%}EACzhSbYDoMtAlxXe9#}iz31ck_`v=Q6hir0&3`o7nN;$Z z@!f%hRphYmWxeLEAGU?4;^1sGFRQxMWyXqq!$#r8rlZGTtQ`#C+qr% zlqPPInDN-4)EQiO7Oiqw7A%M8ck!mq$0{aUSAOR1a5~=haPFy=e`=uu1_w)zj$U6@4oJ#64I4G1o0dzTY2jv`Tutd2@6Sm!8$=xx` z$!_*BSF7psd)KJ%xT*MwiABk5)pP->SY(m%R0`TK59XWzRdPTSvnjd=G%$0FVltl< zfY&^Hvl0M0d2i<%&x7-KG(#vl9VlS=(8Z)Eb$Iy)Fy5rzJgOS5@WGt0zENi(=>;Ms zqbwj=ulnX+_pW1&ytdMFkISoIGz%2wZ!WDf7jV8p|2FaFd?(LIrnkKwCu$^)&ZjmH zndB#)9q}{l?mDg)Fp>kWL@!#6FT504s1vkH)~Tv`^Zngt<`c?-)91;RI=1WUx1#V4 zN4U9~#N1{OW&iG&30VW|#$3#07B+I3C&i%28DawvUn zmc?d3%6#S?eKVabq&#{Qn`3fXi*sxx$mW6ehFO0o8Q z;=?>$7by=;k(}?u%p|c7boFnhA7qIudW_sW7ZWx`t>`iBG0rMH=&sWgL~`9r+D88U zlO`{nyRz@?)D#V>ql~vRo7*1rWnIbUyz=Vae6y2KnF1q0Ws;^!YsHs^tN^F?Ezj?- zevj{@u8W%UYW*dv@cflspMr)sR@q`?>WQq+(Uvlg_h^A;X*GISg6MDXP@6Q zmvIIk9Eh}YU||jZ;4#Sk;Q!@Df1kJ8d9RhfJ`ETEA1Xm64KgljQSUpPENom{+5%KG zns=SSHRp2Tq7Fz!GQb&Qu1)l$R5u)$G{sOkuLG+O$GcIb0ZW14by}{q2PRb1!tTyP zt+)=GS*$DzKk!_0m1LTmI$T~EjL@fIu=e$6H99y0r$yhj2cPdO%I(>icxa@UShLl* zc9vSPc<#*?qW&ehc+&`J*EJdKUqy-^O*BaM7b`66f~|?-Zrm=fYvsQ4n`ZxLekkQl zp75$O3zx9r3D2nB;z-e!bD;G`hGk~2(1MJB*2fK(eu-!FKF4bm(R9qt*J`AAhu;mj zWwNT*6paQMRlh7ux+1+LvXK0JBB6+l1qFfO$2P+7kIn$vCC?xjf%Skl26E^2k54Y2 z4`^F%C{2p9zKlW_7Ne7z(JX?UDo6PtznRj56EbzBD&8&N(FeS zb(8<;&aN)r;pAkP&iHL3`g|{0a?U-!S9T*NC-r128-%6q0EBOc8XuYd_>E=a$+N?e z{cfJru>EVCk(FB8T5m!7bEgm~CTjOt>iMQ@hBv`G##?W{3mR+_yB?WNuD|mjf0ARR zTz6DcWS279GaZwXr>c11P@!C26_>fvBczzCw&Rldx%hzRvxa(^VNa&D1(9)!aWT*5 z^jG3Nj5f{7QRi>2GBkzj*d~{UZkxk{YWx5UAJ`iiMDT7LD_pK_DjT)e1|gvV%4|v8 zxm$R5?$OEbM_&}*wGHpN^IbkX1;O!J(Q(Yg%pm}-vA1@z2Ke)UAqllP4M)fI*M|zI zmgJL6i}#kxNg8kV1oU~I;y;1$>Uw-CPnSveqkfkh<>w)yWx4pH`nj|7PnB7nBK0$S z?xuSjX2?^oQVcj)>RRWHWUflIJ;F1hWHx7-Cy-g0s0OL)#bU#l=EPj#6&UPM8ItZL z!@_sSL$AkuZy}WorO~LW(de-!(^U%(Nw=?vi(7DT#%2p{_ViP9)hL2?GkIVc0DB*~IQML+~ZY=R^?>xG%$ zIrW`$t8Sh8{fsAA4cW>!fumI ze{7>}@%J88Q-8KBEiQ)gA0K^(J#zzQOtxKiVxYy?S=Exj^wHF>mM{}nM>>KxA zq7^ZDRO%Cj>B0v(u`>WANdRMMcVrCh!2ndrNkmWH%UXBYyz!l4dcZ`FfGs!i!O=Sr zN~#_H;|;p8{Ly7y7MP(H&gr)tY&^(*HCS0s&-xy}WI?o?xL!#E%Z9TmM zqvIv=A-j&Ljo4^WrU+BEOTLWUohW5>fa?Vcnynh#uP37DH`n7QEqW~I98(baiMXpq zkgQ?5%p1j|w#RmGt`ZrMB{P@yTi-jE`vC|?=&lS$4lb?(4og`p3t2O74FcKe?}xdb zqI3!7hQuHG`OVwTn9rKTcl+t@xPq$3*{*Ze$F%cgi7q-?+xRl}p9%bMa$r6{&t;Uw zj{Bf*4e#*xV+Kv&>i9;=a82y4c}xDhf)N$=qg3ZZ*?vRUYukFRE{gs9F}MJGLAiXo zZzBAzO5*EzjEp~~n2<>F34hBq$0~_Ki2nwPrG>@Cj)8$JILtMFrXG=xz8~cx7-#)H z#l)_O9PJ|bgw+K)Or5jis?EtqSJ(d$<72zdf6~};mp=T%g`+#p{P}*?uFg`4m|gg> zTfaJz_#1i0F2vUOx%@WoSLwTVxyQr@8(q2UDmSh^TJ@O!*y$h(1>aP?0GYGLvIA%Tf`ND#9`f{aP*Svp%cVzp9`hTPrIf}-&yn-X4nx|W)Ryw%!yoJg6L&*K z!#1t{0*Te)=k(T6nP!Or))A%n5qAr6{^z@)m5KTbZa&5`+{x0-=dBKMEF^I6BmZ+< z8VUo(ofaCSuh=e{`IF1%VnmzTM>ke?oRxIWID4pqEyH=%Z29L#MUn1m;@;q!bSkJy zxBMRHCOum3^QlMjdRDA}OXo;i?qqrT3r6j{m2Lq(-h*qG<0r^>I;it=cT(Kq4hl77 z_h{&1bf-7B@Jw(Q*(}`0quA3paqX*m-5EAAHr~G1M)8TLK&0KeYqxQrJfu>2d)x4l zt=Q_I$cTrAfj07`Bdz56kPp@tKWOcrKRssV=EmT{Pb?WrrM>9G(20LFcC{6rBjz)H ztl5EQt^Pcax`0R>KVDZ>AFASk#Yt$r!=+_TPEMQ8+SrE8EiKDNEu72WjqNij7#bcX z_7MopY$s%Nu3Y)R)wq>(cqxP~&9lUXc@-Z%uw9M{ zbnlm&Uf?_8O?leiyg5wKF20^Xco|Zt^+T;dTL5uFI!C4$e;d4B3^&FEgnk=tpQfm2 zX@vt`bS{U#Bnunc7_b9@+d+U2yDbHGGcraF0%GT2XMa_uVQXvK_ZT>=^D;vCv zv?MFg3E6AILIucfnA`p7ny@{Tf4SuVNB{>7yH*YyVtgyx;`LH9XLxQA9Kxp=7Xsmg zv<3$vAmS68x1j3DcNo(E4qB{x9FHy!3su5QT8-FItYbw$AmHLD*z)e@JJi`LWMpI*-wjlr;p;4x*`Nw6lAMC}SXXZB zM2eEz-7p6;EPUbudcqK>72wVfZ?hqqRMXN*LG${eQC5aW6K|!38eu zJky?$btGB8)r~INRc7~tZ2N{}((C5tz_jE00{gAIa5Y&_2x(<#lrMfQecjYlk?H;y zePjLa&RYqfhl5o*EeODx{mSxOpth(nS5o9(%A@#D5u?S!EFWp}_UNZm^g!0f!?AXx zzppPHF4$&~>;L`YKl&`p%v#VFqG7I9?+hwj0L2+U3fQrP(x4m=HE2MugeaVdHE4Xlk{ZhX14Jn{4(pQo(6)^L zq8euTNu;nm7>dGK#O&I&H%rAXYhez=KHIi#O|GoeUtV4=foTR*2;#k}zmeV-7pMrM<-4HJ^Feg zZZNilCE+~vK#!hX=>Q60NnSdaOiV`ZxPL7f%LIm8;pY58LVxKaBilF)Ii4;4ff%4p z%n<>J;tdI}Yz6%byXs;$GE!8$BW8;nnCY$Ztx{VY&$(@&8d=?U9D3rbF?h7#n0ryQ zG=rQ}&|hR<1;Guw{Y-_!Ubmlg?Gydemn-NmW~yQCD~7Eyb;x)d9lhII;>Ex2Y#Gck z!&fqEf17>!qNTGM|8G8N5jn)y-uP)h6W{eBHP_=F7sDr)&a*uc6JGOiL8OM6fg zD@(pU!KcOV;vuEDI`)@K6b6{2gLYmI4dE!Ew+Q{-%HmnB!^SLVm71dbO569A_t=c5 z;6%%Zr_vU3=4xnqamiVwE$Rb{j(|XFx1s8%J32EzEzX)qsK+S?Qi80-f2i4WNxy43 zd9XHL_0c8O*n9@cX)~?HYb)>f&JSHIU%bOyppcrv-l8pc!Q0@sX21Q-Sqs(AO{)z3 zPBdhTiw;Ck^K+yWUyeALy1vqed5){&khpz@-MQe|1KVE%fxYqgFU6v#-waYu{S8t}*UfxEzW~K*O)6cedEe^e{kYy}oVNb43NH8wUeX@fhD1O=c zqn#onGu4t#YHmhr`YD&~`lK&6?af+FGSD0riq$CnC%QZ?_&$`-U7|f@ptRnuj@!yj zr~2(#rov!sQ_8W9)p(wMQ4g8ksu|v9l--c*nXQVQgX-ee}UFdGKKQ&ifkM zJGNfjQS+t3k*~UN*S1o>SvyAN>MNal4)n&+dJKKD9^wG6%EKN9#G3DV23STEC1CHS zIgAI^4}q2nw4g06?+h55ap{1A)_SLF%Qy{D!2AgeZ-IUmFpj%tVw5Lv#%}60k<-xV z+}1x}h=W(L_bo}nGg0IywUrj7!q1r+T3|!9DuOp@o?60;N5aU&K0Tk^R=sWHp@|-H zWU>9RqxC&W4~2|a1h!iZ81BzJ>Z6zI(Xdik&R~x=Y^nLK!u02x)e@yQGaXk?DGq&; zKl^f1;Vi%VuEjr1yS~wvw6=cMleLK6S9<=XzU0#Uf$irD#@Wl9FuZ0V#mJKvQh zMA%E=7*!Q~XXv+E8=6bRuL{sg@`*-g|G}{?>}6R)L&Kkgji_`mwmVL;Mo+kC6&3o< znsp=|Hewfqq0sHyw}+cy4ekJENbG{9moJ~fF8F0~vTLY5G#~B1%%W9=4}{bW59VW@zW1M-GS63~Jf7ol0UcIP)njPm_v@ZnV!J zaKTR9up$7n$JDYiT`GKK8jJnJj2pU(0?7E@;dVH7AFMIcWbFD%;5jfEKznwAA+ewO zC{0lTb&oiK?J=zpNXD=L4wr{PK`}U>F)$qT_f27!N{x+?JNyTaWYW^ok}?Kl0vSU) z%v&AaSFOuc@VWOVP7Y+saKQxP0}!OAz$y~_6n%hz3gQEVOoY1;a*n3P3CGATc(lPe zb^3FQGHu)4Gd*R_cDe&^$M(^tZis#P`c-hmxM9FlC^PhPE{u%`K(b8Frf zfDcDO0k~6D+#~!C5oIFk;xNJraMN9 zdy}qPtb$RqecnVQ_3%8w#CkR17+BJYqc$&0SHBjhY+^-iE?B7 z(S&3T8V;YM!f-JUzeG$}7(E|yphE%{dF_55py-C? zj|riA`)0IYM_%K0>pB-WG`%|O!uk=K8Ll)(lM5Fsbe5U4$813`7nncE`cEi-h&XNo z{MrOUNBzpJ?#F>8|JGWme-(Z?A)#a)c+Fel} zMnt5-uuZv6$nx#w<7fFo3IQ4@A~)w5xvYC6q~_|0vxf%DWXbf5=0l%8;W88#Dw?01 zG-Md$Kpo=^Alt$GD1K042?lbBob@YJn&kiGSo zkkCbB7CqSp-rYh7U=el!!TvHnt_HW>Cc1X5sj;Tlf)#CJtzHszg17CCUvuD@TymoB9+rSa?Ho;tGM$xjS$sh5havyKz zE8f|QyiFF?)}82ek~vlanEo_E1$D z85)w)!+ZohfBvn%#h+)@4Y1j7=8E%P9{1mUaLc|G!ww)8v~Sp?|LdpG%i|_k%*Gvm zL4g6d4{RyS+Mq!V;W^qUJav^`u6n0x8vpV2pro&9|>myXyj}$(B z2~-E_o?$WiyE3SGNQSirrh5W@BRM}`UB%6))&3Qb3Yb_XKVwDy0eBbZ1ZIySAp!zqaeFO!Ju)a>gIa9E!r}maN^3>Ky2I%r<$w_krr}V2QriXsv#IEug3Is zq{4{eqHuw4&NCmp4=KJKA?z`pH5+o=MB{Rv6cL3_6^maZskS7k>~H~$8GdB`Tm=mf z;E`un|K`=4pXD~hnJd15WcT~(j)GVHFR^JG{VoUojtXbMGjDzMQ#5?eAXNHyp>bob>E|;vP%N5gUO!dvt?~D zWp)z9+=gk1!`g@2gYwQ*Y;?Tuw+0-%A6D?ZV5r0DO+MywfuVPOOV=pf(V0iSKGp_? zE!rd3T7#ofz7j0~ul;RZ zT}eo~yQ6SVf(3y_5LwCg?Gch_3E2T>LIRCIRsu944Ot0%q&tCBn7FRzYC(YpoNaT(^LwdvgDBkj`Y=#OQ}bwavq^bA3l27dHzkMPw$ZpSQM&Uc&#Q=WZPog+wiwxEk2{gE@;yDe{ z7(;}h@Z^DV>mgP+RC5T_8ehl3X9fm`6eRO_#_yzLfj$BwGR@smAJs~TQ~@;5O7Ppp z`jsoQE>C@T2tz!RTwL63nU$Q(bNfhiGb3Z(o(^6NT3o6Q`PHa>Dgrpi(tb-{DQ0c7 zfhMzKUjjs`xW{o1LY#B?c?hk56;~X%junnOO5gCGU&feM)!iqN~ilE?|`A>`1$-}YS6Y0=gy(I zkrBtz85{t9A`D(Sbq5F)d4AK0@Qo@Bf;dzoIXWPF1W+|5g8?sEq!&SVn-Hdrl*tf_7L5e zTUn_qDFxzKg%0#7?ldqh05}&_^3KTkc$bW34OtxFbiA7OpjMlnRr+=)4$m~q0B|}K&3XPyepPj&_O-_<`TWYf zSMjFdJL+oL2t`v7PDFTW90}dLPyI^prYEF6(bYrLYwZ0s;fC`uQz3W#$3r32Ln>6{ z{s2Kh9-yz>48+_rU#}G4*4tGcFqk}SFy9(0?b~1;bD2l@ix|ZPEpoEPTo9NE&K=yx z{b|$PGw`H(pKPQLQiDHK7i6(6Sj9bdeh7|eKQwPP+M{oifaF;StKsHVcTmZm4jo`X ze_Q|rgY}jIUr4{6H$8(>s00u9)PR7%U&owPdXkU+zC4HhFW1H(X~B?RJLorLMxjs$ zhz)`48q%Ytrzc@ti2#L|uyt^5C3X&Ctoiw62|!Wwwi7Q61y#vtYJ;F*Ga>JWS(_P5 zY%po4{nkRapWyCVy(`nAew;lVv2}3t3WIM=`mXDx{pYcERPiTTNB|MhDGs)n53kBl2Wwbi1nRIh!#ZA{`G|` z2oIq;+PoVCSaBgm1S~f!F3TIbIiPRE43Tx*Epbv|!G9A7ReOL(*_3xLs@7EtJl{z9 zoll4i=O#7WL2?$Em9oYlnBa;D77#Jc8~=zD0CpPkJLuOHb^Ni)7=+~_wPAJp&Pcla zrQy4A=j7i! zF=8h`8Ke$KW|(yKjjtW@B#FvImZLexznkILEcJXsPcSuQek|-pf%L2S`;qd@}H=DG1}0}SOCe#BIqBV<4Lxz_*RPhRBwhrAH~e?l*R^le!^ z?;cN>xmg2iCNPuk8w6J|iN%6ck|09~V7++@!t_c2ExG+8wD1Y*Lf7^_WXJRYJ9;Ie zfbJ>}D$aV)vl9ee-{6#=Gu@GqgNq`2=a@F%{kX8`R>8i^x1Pso4c-@eIX07uo>m1( zw)JM#*2oS+n@37hY;i1LBSYByv4@dcFCEpq*z7qaB|RHx18_#pjYdK>qKb%{h!?Pb z65QR{V92nErD$sa6vYD0U&NVDrVsxX1&HXEn^p0XNKnv3f%t{vp`2H)K^xRCn0@7u ztqp!(?uIzh{n`8F+>k~AN2r|MUsoi)wvaXvK^7XT;Y5I$$s;n7>If^~ zGs=)u5`?q*k(yZyBh|1XaAFKx3gV^EdX`b`Z-&#bv*oidkxwMyN-nkO&be399~R$m`?+nF z)}>1agSOAjEZ4$xc>OblP9tHn#_hvdRDl&xHNd&3t9$e1+Ik9qJ!K) zDfj<8>Wxo5#F5k4sev?$9gHw2^}_z^(Svn?oS>DFI^jgL#n_%S{*48P@oF4{08RJe zVZcZYMw&3k;5{3ijoC)fO(#wxM$ctg#$BY`2z|G#ZV_j`+aX_nRH-MR}o%NUXs*Q8mq2mXqLj`Luy3I*o z5#K0LmVEV|6jNZ`*7N8;w>LK$r;mP?J}hQ3uiQD0jS)j)TtxjVTg?J_B?R*!duq2_ zB`yVS6p?m%*;l1scx0b$o;hAjyCLQ>nh;u>&VwM(cn?FV7#C9fW-*%l3m-DO#07*( zHhtN^v5KBq$3ELuHL*r)%cAVKCVew62QSDI{DCeT1r>E-PKK2zZ=Znw(eb5}jEs)X z-m%lB|7rm;bcPTw6!hArXmR26T$2Dwsql-T?o{x0EW(kstqwb&b@!k$pF}oIaYGpC~Ch> zg#NXgfx#S0aqu@W#Qc4KSi#LRH8ZmlEiG%G9P#R112>+2zMhS{Kxz3Bg}j^Q4nl}r zQ_lTgVgu^{fgF9*#_CEdgP24GHj(yd>_XoHhXtGKAy7o}9Jl8=vo-DoEA#-TUmJ$V z5fs*{-miSeM-=NKXy-aEECQ=El#^c85F$jC1SnNM#G7`9HR2p{1_JgQ)m9JK;Z<{w zhlq>PLV#l3dj1qAC<>H6hCKA&bzh1QGtl;}@lR{`Bsez!3%SLc3U(ZYf}yi)AD`XJ8+K^u(EWIe*M9gz|6k>RVaCY2P*~k{&{$puxfA?B z2SY*?*a~}(MK;P*{qjBpMjO{@0&8G^wFLlTJ_dTqPHwjKUd3xN(^RXqRg54n8>n2+7$JQdS*HEr!{(99;L?u?6#OJ-q7%_9^3 z$>Kr*{5P|((Y?$4XCa;aml?W+Y5Z$gSctdNfZNeeWLCZ#g&&(ncDTB|v$Gl7nB~E5 zVE2pHzgt@7E8w2Mak0#ixT)*viuJ0N98=?W8k6*-NlY|Ro=~TvbPG;Zz6(iQPWt&Y zwTt^Ric9!d2Adwfuz8n+|AdC83Nk$=7QdbyoL%RYBD0zr`aS<}4F>8gnHeY_K^90Q zM>ZPYla-kv%9|Hqwt%!Cd;&H3$bEn-BRmA<+KE0L$Qlk)@OKUDv$!H~yet%?HTWxE z77T~~A*oUNL{QSiuGz(VE3?>`^8JbE_t`_|@|#`1T2Wf(a=*55SI#|{jb6CzxWu6? z%@_VO{#)eSD5KROLhW@bN$;c`yR~1P-uQ+0aY{3vayA%O`V3nyckLWud1blsJnazs z_gA~ir&^Lkbt>e2Ih&7uf2GbB##>v!^*H+54?4YN*_F3HH&R;P3>-T&=fUKfeb#2_ zXn#7_X1D2-ifD&ujbroFpV`ZF!@`%uFE%*ui{43+-?%zUE^h^*j)>mY3MDZFgil5? zOi@94xc5DAY9d)ebq_X1WQN8A1c9^eY$dlSeC`EZla^aBeO? z)>X*FUnh)Vk-RZ;L_9j!ys1Mo!uT-_^UmdZ_Zhw-=jGcH(h|j2f0L@sIWfpocYQWE zZPW_r(e#EZkjZjdNFT&Sde#`_r=lM%Q4*S z_8<5#H`-7lhD~PAm9hjK*hAQMocgVDfZMw|hUhl9ikt&h39BoGKm^IYP)LWl!X6n4 zZ(6XQEoyc!1sXZn;%>2P{HOe=F*T|9OK;$DwTsQWDP5^{TW7t$GVxuwZ*+&}{?bCf z692SQJ+XPDx-8#{{~RTGcc4sZQEB=4_+0I|XjZp_oXP?ZvL9Mu$UNrDy{GFZ#pAJJ z-soqQNPcL2mOE6hhUwum{B`VI+-k{L zPu1q+p)L_|Q(8>Sb6q`@EfJEA3YkTOG`G zul8=kzGci58XKcAUX;B^N8F&@9yE!A&WnM@(Uq4XV}&Hfh34e;?e$U67#CY{wAu_@ zF0t|d$OWnxy8`o(?|Jj)0ilZ$7B>Bn3+_pwdlBJo0istZY%#>EN9YzVoX#$GfwVC4cnXX5A-hTD{SHWu% z1!WxvI|OrnS)*(h=_WvuGWZUagarGGMH`ty!gkMx2un`20{$Hoj0-^xD+daH6;rp9$Cp+)7*Q`+Y-G83R7q-{HC%pGe)U z*B5zacgOQv*|!*|9NXU<^W{}dRUGv5e|;w>(ziV_{Ddu4RPedY_+58Yu^C@JTuUBa z40;e&P5UlsvYml8x8mH?D6(OoG%_)l6NTgi=~TI#~33K!MN<@$l$HzsptC4Q>! zUZO2??)sBNa$;~@eLbzONF*u7i92Pn`Oq;Dis9T;!?yD8BZ1S#pQxF7(WSR{{6c!h zyC&})9zC>D`fg#M-pMdMt!spMNg}s?*H6!to?BMUO9KtDgYII%F7uK7SJV0{<}ws~ z1J;o=BiDY}^4`00`#P$Wqo;?bOwy6iuRn^goGE02K=taamHZ)ZBcHCzYr=D#GI+?X z;3}m2-<*S1<9B-t$(R8p_mYpaC66zv?qa!1?tvtd=GyO)C^jorGL!B%9BM|KC#%z3 z7HxbdrGF(=nIBdrU?|yz$sa?g zJr9;Vvpg3+_1tooh$@c3)8C)$=cA)1d6jytuG@6yNq6B=)?rkroLIf+XT!%d*4bw@ zY$8=%)pP;*!{XHusETkhgKb8phrs{(9{rDX z_S<2I_s|mx3QZbQ&yBeiEZlH06i7rsY@g;?Whjh(BTpeC(i;%#!HlWp_U z#{IbuC(9%!n$blbH9)TCMwY}3K#v&rbxzI=Oub!4a-#d^cREcnRA0r>jTU;&yS|vR z5MuD;@6I<88>;x!;{7n+dUUyBEB0jdOP9)fu8>F}_t$ngl@_5x?TOnsS4O51w`p-K z4BxK*qJv^1pl!$^Q{&>Q4@`dk%u{#n+&KYJQFA?RjctaLW3+kdaL&bz{s956fym8L z8|FMJC1d=_^KKP)rf{jD4)1V7yrqcE=Qbi7OfU&sCylw8n_Pi(eaPUD=9v zM&Af!KrF~9(M?uBL?or9MHva3U0Hm*6blQ>@C+g6X=!Q68|;Kqr@*A?F(qOw+$2hw zf1khv;W|cCCZe+rz-nMvAlAYVQ>X;k)Hvesc_M6k_0`BWQc>yJqAPTt+fR4Aw1;iy z$;y1nz;f;P+Q6Eth>v)(U;&$9%AcBR()*GKk&Rz3 zmS1Fxc2l9^Zw+&}JhQsOtGR*eNIyO@uTJ8(YSylrr8FUn>Wg1>janAc9eRe|rLVjk zC>uWk?g`bvjblJOKp(#PaE+`^155Hm%vmMo!b`GUtBCE#J1IwVs3Nn)aCq8@dREe$ z;F{RPlDN4wg+gP`7jvfdJ(txEHFFshnnz-KOfQ!;ayZ+!Q5T+w*wv1&pZ*lAlnVZD zd_S22v`a-#FA8#Edk~X$OQ_Fu8PBephL@jQiTW#5Jm<(1T5q(VeIJcAM3E(b84A@0 zI1#(=cT(pA2N;S81YZAvP9S*^*(A+G6c_+zGs&;UT{Qqk3uC-CfJ=>CKy@5YpVHXW zWbWvw!N=uSaKA zKjdW*n5gEs3Nryy<@IIVNYr{Ewt>BIrtd7Vh|(6Fe3Cs0^&^!IANd z0~Wha^;Z_UT)q~MXq?UGr+;#{^jJHoJwo6##toHm~TMxz_BM| z-R}e<&X=7C6B`K8uP-l+NLK26_=Qwq_|GDOh;Q^hThyD+pFf*>Qwb{^l(nZp=|yRU z&}!G_yVK|wAVr)OS)^l{^w)uF45^{WVocP_Kzq^fdGqgY@_(m}H14`E$n zmpXr)x}l4^SpUT}3vx_U5LKCbXU7uRVMj-Px(98tm^+s+-W!}UngffVpFD;>@(HI7 zKO;_#XIB*;3&+6orLU|Y#K|Zp#Q_?7tzV3lS_y$Anr3oW{D@sUX`rUHoIRW~%bSxc z`3f~$@sFD;3WLfscH4@XT0EWnY-H*3CapKB?vCAdvzM>dZA9HcOCApNA=kBrd4LqSyGznAbJhKVd#bAF>hm z=FX7m`t|FLwK|YB!!rYa@GH3s8>R1O+@iTwlwpO zoy|)Y#{T`StyFufbPt$lZkiaJDuQe1Zr>Vu=rOhGYtk)jmK&OWitgFUs>`=ntksnc z6sE@lW=lU%}#r;ySdthdt&aU_$=lNhu64W zcU@kyQ4J3SNrXbu$tiM-9#B<#yWzWF`;iq?h7+D8J~+8kQ+bK{392D>5b#Lq>MWz3 z%U5km{}}rj^fP;F;}=G-K4p%m-w>$p0MH&GmSW_0iU}{ETlR}ZB(e{mJjuWafdYz8P{q<3b_wwFBd0$Pl!?Pv zqAb3Bn-$(Q)}g8-&Vp;ih#eHUE`=|S#ipR3Ff5U~(%?cza8J+@qn4BAfo5HJ0#T1C zO!u*5@aY#o_4XK1JC}u5#3@2akN6Mn-3u$PEFeJgz17}yk%nO%)|Qrp{aG+McsfjS zRie3nzrrC-Wz)d!g?AOx4ce_CUzf1phwMcizO=LRDXObK^7wZ9P}rO)s6o+d@4c>O zhXovxwC<5%-T@ksbvYoO@5G51)g(ofa1yd4pb}WtrSbymSTFqh)NO6EiK(QmojMZj zsn?njALLM}J@*E3b})$3U(&L^%#TE0L^%ASH5YRUwD3+F$i6H0Q>U9wPC|L5g<-&) zbU~NhMpqFrv9hajZ;6BZyIaFcPQokSmTQ+4XNI61tx)UZtc9} zDt>N;TWVd{OWwf7%8GJ<)Bcz$y157luyonf-ZfM@(k5Ts9nRC-^sua~>`noY$%v>Z z!HIj`-i`TorTvh-Q68yL=`%swxe7=~MDgmC-fdceP>+?>b;$n-$TGQ)s7aHrA#N|o zF&H|L!&4vM6?|5Z>FqFiz7_ov6~wUUhNFJ>t|q9>hOo&pT0pTrXm<)xjFISmz8(#% zJbqLkisQRa)q6ItaGrQ|mqT@rbN&rM9_E)pC{osPtxS(7BV6l`p6m@~TRwXyW zj0$^lo>6^B9)+=VUR{P7vhTRZxIED9_d1$VI&MN#%@T zFfI`Xf7t8DyCDxJdh$7qHndz%vq_Iv=3Z>?Ks0gRn@82L)SC}?$!-b=6_$r zsZH!%2hqeiQS^nj`NR7t_PcZbA&A*+baZUGG>8kJP-SJYLAcQBaLKRwgRJut20qU$ zHY6=q?MwS{25eF{35UnHqA)k-)St_7o9m*c;pKK>Qs2X)0yVhuycw9yFa!o&suV^v zK7(|x3v~4hkMk*+{a5XbIr>>UL2Za$|MXXFU7f=9W{;I5pMj6|qB}jfc||}+L9qldUa5`E00#9jHZ45?dY#REYv(S8)|*5(3QD0w`{V$QC&*`mE~GrubaR~jRTh%_cpY^ay{s;B98yh0 z&Cr6xkB*wP)rnT1>cLKtDUfaO^#d$RZ2l>wrM+rAcysJuc8%C$0uG48VjFMEf>Z_1 z8&@04vAVM11*+Y=EABb9dh*~Av0xSa6qD>;b(}_M4Atpy8Sc!Pt1;-4`{D8a{rh)@ zNERSqSoTYw>rMSFSMW~3)j47DMvOrZMe4K~tkmRWU!zDj%s)9nXD%?`TeU=l@5)4) z(WJpdxuGOC1!p1Qz6b-sc%8~4DIp7#!mk4u5<(Z5k#THdUMEroHpi-nkhsgIsg4sp zj|BBlNgj>1)d-;Y>O7|74uu`>0_c?9i_X)1<{Q@$_mJe(5t@JFAC+4AhE-$< dj~=Ehcy2TZ`m*@TXg%>NinO9s=9$a4{s&ZU4y6D9 literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-defender-atp/images/tvm_vuln_software.png b/windows/security/threat-protection/windows-defender-atp/images/tvm_vuln_software.png new file mode 100644 index 0000000000000000000000000000000000000000..d7e4a4dd0874d519af0cf434075677a994ffbbd1 GIT binary patch literal 14866 zcmdVBcT`i)zcw0sqo@c{1XQFqmEKi)6A1}DAks@fN?oU;V=DS;m_p zJl;R?691UgO?@82e4ISI0EqG*S~L@#56z@z?``Yl{L;tS!yUkM=?)Lge)+_%>haRw z%h}P%2T;oRL!M@3_{ZvHZ*!9LwvRK^9w4>Dc!}n@bmB4caPaZ7@v;X%UQ$nzU-_qS zXK!0K8(LB?Ky7PvJk5OZ#B5^YuW|*(eNsM!A@0>l6J*;fKO!vs+&~Z#W<mxelRRhd#?|oyLkHTwXdhf_H568dSfO_EP0P!oPB(EWdlOMd@^fX#45Ym zID2@=oTb(7`Rn^+54v|#C*Q0ef#bEX8?d-$T6m5Ui6nK>J^%|4o~yv zqQB(4oWkJ>ySlo1r&Va?UzPi-RRg2b(`AE$&-_eDB$Ba-$@o0!Ce8P90tSO2uviP0 zX!SdZ0h+0&0D#vh$iVYT8`fZ(ba{JPn%13==BwlnC;xE$9;PQ<Lknfn7)_v$nhA~`AeIzT?1943`=XScW>cSF)SUYZb!2R*JEj| z^^&XY?S!chFwV=36e`oQ$#LZ3`p!YLXDH3%r9tK`1G@(K(dE{-^UEEJ7?Smf=hAA?onxoch`-a1I zeZ}~7y{K5~t|e}#Ig-7`o6S3xya`q)h(6z1^Cndg|HAMaj|URxT8S;YsI=kWYK^rB zW*OvUi55|2YT_KlD~ME@=8Rfs&J2(EsSCHgFjU)u1W=%a{_4;}>wx{4ZuXHXYvrRg zgrHU4pPb+gx6LK%apH%ZZINqH&GVDyD;}B(6x8ly?h2GzUQ9?Fx7jR!a8t)enmXn0 z?z033u8E~{KItyx@lZmcr~k}o>Z(<{?^&hCZTBnp4!Ex*Rhp89t|WriOWePh+WA+S zx{|*vMQ94&(-xnyT|acIC3ato7O}Q0L*`H{sGmK|XrH(m7#L8rW`@WVVL6%&y_GbI zB&xjH9(bscL=MI;Vn&PzP5HZK)6ATAqUW`tN@!bJGnV_N-4T&-USYh|u$|d5{Pi0* z^3@0*^J0i$S!jU9mBf(GWk-p+do5FF>Q0x;Hfs3A(U$PgzSDF;#=+mvrIMB+kAsL1 zNnPTrdOb45q4*uXq5MguIIexO)ABh%X6g5VS7E2sm`6y%qapgqtsm1WgPA#YB&0b? zoPVk~)Z-}C*aHvOZ!r^T+9+8FIjU`znF1>o7PIFJUErr@Q}JWOnjD3MD<40}38{5X zl4e%P>pmD?9;y$9VmZgfxpZ*kKRIKr=oa|uH(zL=`NFT01kON{vzwxt$Jw9pby5j;}^M+R+`3 zCBVoA3pafnzw#ZCurfM{B=MhcS}}s&3pbNDKEwT_ozwVZYu%{^Wohs;%*ZXhgSlyy z<=2TmEwk*}^mq!HLyB+nT#7p$K5pG;aL0bY`Rfs?n&4<4v^8o(AF%K)>0wOn3Tac8 zg*K2~TwNv1&CO%>_XBu7DF+C4C)kNh4107m-;6a&wCVlnBpIMz?!Tw3n)q>RSW|gr zGIzozYuTdb)t)lj@R<%2?6?+7{%#gwCz0wVH!^aKryIrDa|@%A~lXL!+R%c}CXr zPnc)7W~$2GBnMu2`FBhp^So5>@S3$zB0MTMGC0-1AYIs%0Bn%jme%$lPM*pMP3^k8`TwDRV|4ccFi+cQbG+d_t+rRBGEH5`I2gmRFnXy3)%DY&Vb+ZzNy3 z?cE&uX!sN-bjyWL(CpID`FgC2P&K8Ps%w4lN58>&gLNQ43A$5Wf}U1JkS$QEej%#B zcImZ)Zw7t@f{$Y1mL|-)z3&obEPN@8j|8S44(S@A%g0$^l3mRVu%e z3%T7f70|+!uoddNnpmwn8C~ch7NW7kuT9-1MJCRSQ>e-Ahhvb8WwYXXBCKh*{d>bs zQKpZoPc=(<8m;DsKXy!c1G(q^ty7syd8ZoOIxroEMR7S+w!*Q=A-SV}Q7S#l8_Cb7 z(hAfi^ivr##OmemP1gYX@#Z+nK~J_q7xF^r$SJ}RDM2rudv-GzBOu7L_ ziW4QxC;}=~SW7RzZn@7Y7)<@fWTCe87#bBvJR&R-<0LY-e~c>^BX-KcxX-Ymo4?p2 zNd}4R$6Gl_ircs_JtOfAd?MqB7t3xnQLYp?W9S?Sp(d|}6lttb9OrhY#?CduI_^R>nE(cMMJ8@_+s&aZwNG+UKsKE01X! zUMZ1U8|5Y>OZMh1ANN!^&WQP?`66LY^jef-(^|yp@ssmWb;jPu>&{2V?*gFIHxN#X z+%aKn|B>U(PizfqZ#WA5q?c3134?DgkjBew;os(bCKy0YD`S^AzZ43~4K;0H(JE*j z9Uw_O*BJly-2NZ^VxJ)DFAG`1$)x>qSu@omPz}Wu18Nt)NvsJUK*CG)cn8Erq0}wz z%D!F123OWx)hk?la}iq6BEM2*jQC+rVe6=AxHMNW?<)z%k#uMf@N?|5NopA=e9gvQ zeARVC-aChsR~9{L8_eA4~bin)50vAEq?c znflGsAMdPaXySRbTf|;H^+--Z%q@!x2EL0B6}J!UXPY!sR;b5HvxVPfI6fxkb!EnW7hjW%%U&NTBA-{3A#{Hcop_P8EJJ=d zVbqcBn|Wt~?jYNM%|6tO`4@eNE*;_E^Z|L6ZT2VSW=yDFH3x0|IgUA}LE*m8vfd}_ z{qyIpTE0zfcS4{0)ZPeZN8l0Omr$K*SGup8zCM~wqChDMv8(h4F(Xa%d(PA!4{Q&v zSasqZWE@1gq>qFB^hIaZ2t&ul{nxo1+w24hD@#cPdHXN%RKX8#w*Zp()G+y=c`bMHpV^h4%yB3J zg+e2G=Yg76I4uJs-CtEd(XC4JA3yWgYona}i-g;hoKYx6?U+T$6Gb_NpuLdFdnEcD~;41k-u zSq=kq+y4Z$tG2;&bJ;DARJF+%=(zYbeX%T&2mcf4!tLE2&~qauz&j99eS zG->c+zwk=FNyE(e+F$0WhcWo`IKKYX-VV>`YNt=!j{vMLe^wtLp(SfaAvEBoqo+4o zel)3Mgv2)$#OpOQe`umNwE?geYfIQp~l82cu(w^|oo1m6R3TE5t2h zvod%}kC5(Y8q4VNyBP!Qkr=PLby;J?jd@Wdj#&C)+fwoagPO zmhaFVbLlY&(Gty505SAjx{k;UdQHc;5{Y}3R+8>7QCOPejBzQ69r}^;W)WvbtS7Dp z9&h653E2M{tp(CSc zm0;+BhufO~N>F%2Y~aDgxmT{Ol_Uao*_A8pu$iyip?R+$KsCo$dWvT! z506e?239P--s2MA+!>l6_|1^-kaHoWEF$mM3Hk%f$1^)NtEWZ#s!)x^`skhaJCtBu z{lmr!w$oI~&i;a$rgNV~8fj&*5IR!>?x?g6-mEFxn9=a)?Lc-K zvrPt2*P0+?{|FmUlY@u_CBqQcatTnEUq4Wfs$sKQtQVTa*!RYaBk6KCk!1f-S2k{| z#r_#e4I7GU)4YZ#Wt%>}S3|_uH%A?1w@2jWwwuL~ZLK=L zZoOixq|b$wQwXt>#%%FQ6jMT)$$5V_Tun%4XST$?Rn-jn%1-04S=UbRa+S?UOeHjB zM_N(N^%oyvo?CA1zzu>LnSmIO(o)fyJXZ z8Xfvw!_*E|Bv*3G@L0mpUO}Fip#-;|_`;^3c}1m3uTf@NNnk*vG&`smf=@{){4+y; zuLl*w2#9zi+n2+P`V--zO+Q?ES9-#>s+)*nyBn# zLCJc&dl9+br{1I&hYmE>Av1O2pjH{u5Y?O^gr6Re(3wSVX^U7Fc%W6 z3N7<3`vD~M4hKI?hsJ|FJ#(bLF-!{|-Mk~Rqct|We4r#Ab;Z@u;Y9_-1Dy(~l2q`o zsV=mfL~&HhI23Kn!Q|}p2keVpY%WCnfs_HR+If<&ht+o+(q1SQT=t}};z)!7CD?H3 zmaI1Jp|B>$R-?JFV2v^T;{D-YRBcVq9*Zh19LGj-3V6lLVW`!);-QM)V%bnWk-n$5 z2e<})7I96Wr4ze|IOjUn6}+ved%S5}$z?q&nDj%ah^}3?)BxXjH6(7`Exob7))iJ} z$2gqI>;Km49cf)L;VVS>j^Fcmj4~uA>Bjk*;lKWi)kGNTrB!MkXd3RSk{%p z<-n>H7g$|82G5hlzHsRUHBZ|q1L$sg`hFiJ;bt1t`c^r&G7#Syn(!7JJXpuMPA((V zLlyq-j|Wf{RmnMNV$6NGPfz2zBS%{Q+Mafv`zk$ zAN|>K4{1bk5aF!Y#T}CG+RkROJU4BM?;AchJfl>kf<^UEa3sbAT}Nk+ik(iSm6m4SbneIP_fIfqkLMn17l&!|E zvktDtEsZRVPv*xiHp~P zIWT1GgO1*odFR0n35c!PvdSS_d%aBg30^(OF?AVF{Ua}Gx?gvLf0`+2UNGMZgOXAW}!Zg?D;}9B$X!GM} zv@Biqix1#t5dxtNfj}-ZGA<54PH0Alf6#(@1r&UN{0wu^U((ayv7aR!9ekK9(&f*6oG$fyj{ADR-R$@-_UW=O zL1s18A+=g~Ba84DY%_z>B{?u|nF=~4u%7^ztvaWeGbZsOcU`-mc3tb`O zDI1&nLp`zbtXpw^fEV|>yugMLUdSr&AD{T!J0DCI_NShEFaYj9suu#?E*??3We85r ztDaZSz&2C;*;M26j9{9uC$p0FF3F`D#ZR-Hj5ARdHC=`-D+wAJ@kUPGRZpd4bPMvO zoS!%W)~t#X{5$O>butF|3c$p25t9}EL_>ZyX+OhA)O_6&2P?m8J02wprBV5WrL>mg zcMR3qI;JlvU>9E}KaAv2Z|=A$fel~3E_$@*!A-2w9hQS!YJGNn?&G{ylesBk^t+?V z9TR5zt+;zw&3xU$o+pKJx4h=kF4S58UV^m^-QBI6ENuD|N1p7x^)G`2!zdP{SLcNFJEt|oC{w6~1P(rnf0W7;a~tFUb)${_P0ZR) z%LeRN|L6?*b`%bNxv0&L8@rbGfTg4Tdy%ED~ZU2SlDh5Vf)-bSmP`7c#_P0*71HN{NzJzZ}%%NS=mkCzX-p^ zsX%L;^2PHlrwh*q+X4VB0Rv4>dBL)EZ}y`caZ4ovX7*i6#MC?8N4byce7wE`VZl>&zaD!zj^}e?cM!qAEQj=4Ms$p{jgp|Y4jAJi%X6kR z;bWpjz8fe$NnWj;7I~xX=JCO>MjMaY3R7W0qT19lM}i9 zT+g(I3lF62sD>k>Qc+(Xg0-i9%WSFtl=4)IWRH{Xw&yH%MQ0*E@TlTWB3&Puq_!Je zrTU4$k)iXjm`?(MYPVxMgf_5@y})F2f6I997UDd>a%dC zel_Z)7ZD{RZ#6OPx*|*%qBXwj4cBGx$b0R^TP*}AX2iYNDWPdn)Urcxeg z&cV?HMKf!`P;O-)G zjawn#%uSS0%PW%_pSK&I&3&DAl+*r@<~y2E=Xm}J7~Uj*od2cbc*4xE{?B8G|19AD z?nQ^Ub6`;U+2Nd=nOlC?gV`BdFGDUsrPg*t`I8?lXGBq9}5Z{}e_pOur5d{GV0;n zOWE@w+aawxbkDYeAjxkoXQ`xRxF{Rz>(**?TB6w`id^@%mK#EbSux{Wxb^b;;eLL^ zstye)X=%i~j|l)ude+;gGUAxnMh;RNTXGL?YStf8s1@Acn66aZe}C8Z-r8<@hRJGO z*MZ+TSxA|T30zq2^WzE@sKr5bjulp4G-PrgThnyd7*g$3z;M2)pzcQ7TRcA5S!d7z z2hxt((L)7TWC}ASCp<%_YMy_ZtHN8NM2l2g1uX=~Ni-FM5CS~}cu|V% zd<;1=%@CBooxUD2*<#=>sZn3w zaEX(C##Q!5*l|I-8PDAtY&4RPb?8J3z!saxSKaND(jeT6+y7uUsvXe>8U5`dSDuhQ z4*7P(L1aMXFUjoBqp6?IKohUCWCf>WaN;4N`qYg@sWHC@U-uy0(BsKSc~YWXivVW_ z@71Y{`Q7@A+-HbBE7dNrhljB}@r7tyl8$hrhIrg9pgoQ4UsEy*Owj=`3$}mE%ip+b zzZ(-#m&PHh^T#-ctQ3`qKDOnZ**r+I-!0F)L!MBYzpK={%MrHB)@}3pd~1TyG4gUs zS)}4k@*fFrTw3&OO1&&NC6iE8>L%diF}OY=J;ATuO_a|wP?0O0g+eZ0`q+S_?_L51 z+D6OELr9-*DQJwnX3sep;)b0^(YW0?ulhL6ovkLV?avr&m4&sAl>|A~#%WBI%58Q~GQG7f%(xn^LUvZJoShdof2obHe5W zv6Q&6k>L{88_vt1kqSOoYj;)!!5&1Sk{Zx0%qh@GwATL5ocvw<+;(C?Ht8e zYl^tbF(KDz&bqnmnv&qb4E4_J8v=3HMETh_>rF|AHucFS;YU#+b%N@^lql)5m4{Yq z2Vcx)7lXjH47;O=a1SxvM4x9I1V&#KPr-9X&aCT6vyH^mUa(=t=RNP)!sL5}lrho3 zap6o|$SSk35)Y3GMW;ZJ(O&o~Rzu$1i@dR(p1$F%gn87&J0!>`IO%v+QN7-3dwAV@ zQ8;fS!QiLy6GBN$Jo2vnT(S`6xzb~{*1-`E(8R#$0L+(-(nVWKcBrG}W%}p@A0U+T z8oR_-Aq;NiFM$!OE5T=h15TEV(4t%!@rW9^R>v3BWZZ{NBU~03{TFBTc%t2FwpNM{ zZB;00pvqV>Fd{@wtEyn$-x-@YGy3;tn#0^^{nl$g z$p5WpP|=t|winAc#Qi>M0r3Zj*}m&zjoGHIA~e-b`18Q~l*H@%xED0YW>_9I4BF$A z6dOouuXsA5lQs2ICM<@o7Ky5Y0O1;VJPyBWFelVH&zrqTHCfoH? zp9Q;zfYI)hrs{E{{Eya#$gn-{0fe$xh*#EVi)34FvZY)$Z;x@F6}>>a@$y<<%A$$J z$NSbQR@R?KhqFGbbg}`&O#Q=kjFKd83)42I748{2S;_JAQZ)~F;6{D&&S8SY41w?( zuAw}G72MCCCHn@9%UZ4_`Q;ygpFDwm#qevkrx7M`pr0l!@GtNCtHg;!P#3*5@F)Gp zn~mb_kiPOW@~b-?%5*X}c}1|UA-Z7mWec6(VnYI8X9Ld7dM$sgiA#k&>;6+}^&3ir zw8cP`qd)H%z(SAKGgdd@aYD?ZJ7S%(uARviiK5I!*FK%16P#x*4AB`3aNq5ni)hXh zXev5}-cp?Sjf2)y^Vg_8DT}26ZR!7qH3+^y6ME zN-m!#azH>x-h8%0e^6jxibP>TqC9{WU9$Qg*m!kY*Fx@%r%p1b9v9(dluL)M@KZ8F zEk#`kpe3eS)XGsjT->W2|J+i6FhW{b&q!+ZY+yIV~8Ih~{EEWFF<+x|_^4`2EG3f6(=ZVX)nW0Hf$`U;{RI@GDRWXrb zLqETn;P4y46F05<2F#T?(tKH{YG|pM@>PCPftCL!7Z(?xiAh>pd%O5>7fo1J2Ve=0 zj~$z<7)orICoTa?`T|a2k|ZSe13l&aca8OTH+3-0bx&dq8pYLhE>j!ZQp-la9lU@M zZ<2dbpFZOP^)jr@ECQ#RrhfWip4**(&cA<@DuWE&|DIsNh%^6v_1gbR4Eg^-M0W;o z9}erq{RaAxcf>H#l8CjSOm7ULZ{B$vx0XK2Hy-ZG#9GuQ=0^*JJ_?QKua+!n-h<0G z&_rbSqM=!Q22rES_yQ#P{UC!qYt%RI~*jy%)Mjc~gUEJJ&z02hQykeehWc+g2 zy~*7V?96v#-+R__NIbdBCS^DaO?-N544tFhiUWU4lAr>5* zLDhWv7wJDwU#m1%F-p@-#8^b!fnlT&6%ZmRkuJLURsqVwc;$U`L!|1Y4fw{9M$6$g zx6fyNVB6a&G_Xn)iz-~UK5p#T?;q@s^;jMVJ$Tj$N$g+N0YoJJvU1ec1|oI9za5jS zXbq!J`|Z=&Mh!p+*f@{TkQgiXLj{OpO%d-)GFnM_F9AUDz|56>@xEs zE15tIlQ+PDhOacXOTb=5axR_@zzr5MHz^w(4eOo0b{6?RV6?*WJHnRc zKB^)Sh;f8_v`9o?oJ~c^0jSBvg<-j?`)cfmhKzPE%rVdlRMou06fE3Yt3R)Rg-QN# z=u4NWA!Mn_|Fw#KL2j_NzAa!q^wu&tIUf!}REL_2p`RguDWeKkGk#l;p5>5h;jPwY zksjLZt+2jc`u)s&=Sx6XY|H#KFP&T=(B8(}I`=RIMg!~x1j*co5ixf;*Qd|WSUhs^ z;zQ?z9!{hSvaqgOnfvsg#eS0~^LaDP-yF-+yqm}u&W%u_#t@PzhW5X7jKI~F;hxdk zgVnv$OlOe=+trdTjsJl)Tf;l)f4cv4TEBDDfwOpN=|g3w-q7gJYx3Smo?kU(hDlQP zZtvygp$!ZB&JEH5Z~62-eO_`cUfy?gBd%T?`YD*i%xt>PRRr8>*B4)oWYjaEF0By$ zg+ZtCEiT-uy%+2~aXr}k_#UK>TP5P%XOq9hbt9DquYA&;-`nG^C=&u|JjGP%W_ihH zd!^c~SoW{XGXvjLc|e%O81FlE2zz@X73dgC=DpK&ZoqXe(fYl7aPQ6YMkgq|t*%-5 z$kg1#RPHC20O4a%-{$nBC#{?lh_q&Tx+*YP(Y;ckk4p}O2y-?%4cQYxZc!F`?)ZWM zt!7|mXMdZl%cqt6ZM2*eW`RzoVellEmG^_6E*T@rtRkr)KOq?pCXlIkjqDmT=HVbc zOy4PGrh)?r9QU4SWG0rGjj6zpg)ot7_#o=Ts`2LUco_Ux0?qI7{C;^hEofz*xG>d$ z%ls{}TZ?57_%2|g?%ZZ3_Pf*BYoNqFsOaIq?o7Iy@=YBH{S`y8CS#TBB{8>OKe85WIkWt3 zJ=y2kn^TtBw4F!eGtYA-kIdLk+x-U~P+Q~k3cI|a1v>6y0W+7&NXbR2u6j(Rpkz?B zhVLkfqShK~{rz9aG-{-@I}Iyd_erd+%4R?1MY2hWq)qce2Ba-M7qv%2Npj>bL`Yjg z(c=rA`umxa3PRbwHU{k_G~)KUkJ!5gO$IQ7KzafViChQykBySKQp93}6C^$l@t_%b zPYIy~z-@>1r&3%2tn59T(~IZMr=S&i+RKPUx3n9Gk2Ss+=?2i)EdIxm|e9Iwn|^g_L9GH!{n2%`*s5j=l>P75g5AtuI^p*z-WNu8=&x&ZQ?m4 zo8_r9%l;{P|7?_bm}M`Voo{{Xdwa^{+(Kr^@TvP-b-k5y^)D7)$|f6|F7F**SFB{Z z`Aym(%m-=4AA4UN!c;go#v{Mw+{Dho0j4hB;dG`4k4hO{mUxQXOO|{QBl_A{)xK)N z?#hFHWmYKb<%$Wrs&gA*u_%lG08keZvrUDpi`Q$Wcp7;pfO-67Pt&FE?{UeE%J^7r zQyjoWEN9n;+)0_oKO7B4UQcK;AZj(&lb9D5oo~+sbN#e?DHM$x>faj5izv|d zGV5H%uN1lb>3Rn9^Aq-&Q`2uEna5T&jQUhR=H%h)aR&l__ZF>JJh<#EpGPTo-)tFO zBpRC>T#^d^Cg2-%`_7?@F~ZN6TdKZ-vAs`ypGhf4Gi81*OUW%|@!;?=J^4ACiriBn z$hgcfjneWL`?7P`oOuZqm71%{rcu9fkY<_Of^6$)F80;h;LO_&`wa``1UCCc2IxE+ z+f!a{cl;RgN8+Y1rt(>DQ{+hRW{Ob;@;e{*>HdA6sAPBuG>1??=$ZDT2fjT8NQ+S~ zc){nK^>nH0w|w@}#i0^UCcD~6DVr&QaG$Ja)4zG-^E@+dNc1$qU%ZyiCS4rwdhd(5 zwR1BKB0n=+{{G`{qHOR?sMZ1UH-0b2S0>&h=(G$4LNA8T#m40-SYHZH8J-|QiuH_O z8LDwPWTPgchmjXJf%xochH7|@Kko!iN8uh}kHL>!zf0_y?~^zN!K+4+`f@tnHv;r^ z!EeU9bbC}MbhLUu7M$P&AsJrv`g4dAoZe)PysT3R&K|4%o@`lsd4n@}jY8f82=>5O z1PDVT3#}o$U?M3EowI$uCf)p(Vy9*c7*S-d1Nk9)<7Hv=fTj52Jn3xz8?a##dVGl% z(;E*i)fmXdrrLB}#0YvF+CfzQjpq&Tdhvi3t+R4;aRu3aFxDFt2sgV|u$i1eB;wfR zttx)=!%8z%VADo-GnV~wbjc=Q1Wk{8dG!vfMD@gsNnDqcK@Vsh9R7EX zx8c^R%RZ=6wcK#^6NA*4RLQ(gvE4_yaOZEP*cW_1N6iEErkT)9J-L`57SYM-n&(MA z9&udtNdfb}Y3uR70=WGD921#oY=1azPQ%*&rMB*W5) zL6;`K>Bdi$XgX+Jkl`An@3XZJ66V{@JV$HDw<29O^-m3yaRQ=^W*v$H@OP0I$|pG6 z*Xipt@5_pFwRE$;*w#Q{z(s%k%m?839}@qB(pf9tDpV@+Sk@BZI(}MyjMo!tkKJ=g z2p_6~^NiimPFqFOCWE`;XAWNoQV!GxEFy~9luxj2~Qnyt$^PJ@&jQb`0+sx&?HTjdmRrOFgi#^u%bh5k=Mwd zkCujB0uL0|w$INKukCkL^=od*!v@I2!|fBnsLA_ZD)hD;prajcnO;+Y>CI7Pv;7Ml zVV8n=S~mHJyn)3O&LlVsw2U;G7(P=_@nC<^-zMjgqOo6RxU-{e^u6Whw#BJGqCvy! z67mA|?cQwyn;$LFYcs*BVepHhWH!MZ86DkG#JdY;mLnsTfYd3DA4)4z%9vWoz>c;G zbD)0@^}@+{D$8qPGX=8?eF^JRc1=EwhJJ2tm!5~yUh8U6CVD+v-uB6-xl7+9_`(qR z4eA$g`DHj89f+)PG|b$BQO82XWjvANbWl%+lrir_Sw=w4(chN1t+tNfN=4izuH3jmGD94!#}G;6rRXTa!eQeILgg>@L)>Gc}75V;%9!D0vyJq zx!fXUY&1(uu5Wo79Ur;80DrzE_c~-3!mlSDj5~U-NGp<#@o@-yhmF#*MAWL7ffl>U z-PbA8_AKIVTjj9wktB{L%^2I{j6nn}RH@8DX~f~jtvldar)-TS(&w|dNBh4$IG2a0 z)Gys#C+7&u)gFhkM~sbiRTdQa0jb4$bPfA$9NQlmmLiHN+fOYj2X~fP{0LX`qI8`7 z2ddeAH(-9lefv2$sx{><3^RtVxb00V=faZjzfozWY4cy6tE$Fe*u>IwIXO8iC)d)j zCuiYW?Qx@{@bYr8@W@E(Zybj-(`(^d|0WLp|3%;N|D2-K-rqA5VKEa)?VUb3fA_0$ zrMrW6_ReO82_lw8*PdX*nmBq8O7lFgTe;K~VIy$w-Z#!vQI_Z@PoCUhXGhY+eib9!quHFFD^7?I{3l^`~m(PoBU1zW~D+qSycc literal 0 HcmV?d00001 From 13d285df2b831bf6a0d72c7b6a38cc2ce383ae06 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 18:03:10 -0700 Subject: [PATCH 291/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index bb764bb67c..4f7a72644a 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -58,6 +58,7 @@ To lower down your threat and vulnerability exposure: > - Security update which refers to recommendations that require a package installation > - Configuration change which refers to recommendations that require a registry or GPO modification > Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the threat insight + ![threat insight](images/tvm_bug_icon.png) icon. ![top security recommendations](images/tvm_security_recommendations.png) From f4f29736d2fd8a669a202b3e0abc2c1ec07324df Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 18:03:41 -0700 Subject: [PATCH 292/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 4f7a72644a..51f7224504 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -57,9 +57,7 @@ To lower down your threat and vulnerability exposure: > There are two types of recommendations: > - Security update which refers to recommendations that require a package installation > - Configuration change which refers to recommendations that require a registry or GPO modification -> Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the threat insight - -![threat insight](images/tvm_bug_icon.png) icon. +> Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the threat insight ![threat insight](images/tvm_bug_icon.png) icon. ![top security recommendations](images/tvm_security_recommendations.png) From 185d0b8dc0d0b987b357031d8a1e22a85d7d39f6 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 18:07:07 -0700 Subject: [PATCH 293/349] Delete tvm_software_page_details.png --- .../images/tvm_software_page_details.png | Bin 57955 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_software_page_details.png diff --git a/windows/security/threat-protection/windows-defender-atp/images/tvm_software_page_details.png b/windows/security/threat-protection/windows-defender-atp/images/tvm_software_page_details.png deleted file mode 100644 index c10e10e5167e1e479dba4ac3dedeaa4356415754..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 57955 zcmb5W1yogC_bz@A6@wO#Mgi#%q$E`u1Ox%;mXhuUgBExJDJco*ZjqE05b2Wc?yftJ z`hMU2kMX~E{O%b?IPSCeUTe=a^O?`W|Cy{f#tq^d2m}H{QbI%lfw&xiKwQ$ib`_3j z9>=M`uj^J4sVTlavufo4JgQ;NfXTaFzW&B&uTf*xt_A(gu;4 z*C7Fi(Cy%m$V*#&8xt!#6H5!kt?PHG;P?&XabZg?6+RtGN}#r%EL=A|z3 z)H`-2<}VSP2UyqPo9oDLo?9B)IqKTHL}*%FAWy&f`{pLL`ewRtstuyNt|SBwUqc># zp=)DdVqt`+BboPwV`zV_x3|%MiP*b%yYla8!j|UdFD>j4`yG+BaO^7bG({6TvzLgB z^&VOT;toPmgFZJ9LZ~A@q*!yndckr&)!4|^6z{tqY7uVDzGkx`{scW+SEg2aL4o){JRc|TBaaB*<#<(}fm7l7@Zbg!4(E@-S4*GbhgABj&m{Q{?80qI1!gye3Evcf(bk zh+C}GTpnETX`pV}k(7xcrvk6bC8f!WBMu#;#{~aaVP5bso>hgkaXIdi)l^?XC%+?& zOQs&Q;F~A*B0I`?evT0R`1C-6_xV89o=n6O21!ap#Wu4A0?~X>zr=Vr3#VZ`p|A zOAdX$yi(JZKO>0r#g}F#FRJ~((TF(}bYKYZZJr!cGQXK6?Yh|Fr?GbxGw)m=Y_m)z zLUhof>di|99|=V)$?Zb@W|l3}jx5_l@$eZprj_C{5!t^t9Mc$GpgZQzZpuo0#izxl zREe$>^I~DhRQ~afvj%no#qka08lra#GlHm_M3ER6>`DZgii9!8N-TV3YFsU$in=Lf znzQ;X@9%W{vPS1Kj2`#gAXFSIcK(stY!GT5A=*-4)QjJnZwQY^_&!=rS@%8D{>h2K z#|cU5m^`y@jB&L{OM=g(2D=4u!F-f#N?W~ zpo0O%xAg71)`_(*BX_?PnUHMeWp;km*O9_)dQ7l!LRe)|c@{3(Qq*Ww+;%a}A^BH0 zA_ku3IdsG@?;lgW++IS}W?5GisNd(Ai+^A6P^ps6dS{}sFvdOUICss)?4v{r2dmt9 zQ1iRaQZoY$XPj{S_8MV9Es@sf=CzzKT8*bG+DC(q-z{jn#NHc!2qE)4LJz++yA@o& z%YAA!CsDSxbI!l3FH$3baV&ItU3`OMVs`{1Vmww^L^a2P_^o4CLW7IRIAtyO)9dW9 zGYmnM-hs=XJ+9R$QUj@Jr>Fu@G|XTxY+kF{-V2T+exbI9zq^c``*O}(xd*Gp`Gnr-cHw-ipnw;xxr|*6HtQnhwrt!@X3^{!*#>s)@SWt!#DC zq0w$2%Dfn#WEt||Xd2!!;x4TC;P=+9jkkse)c1I}gqX(fc?PJ@gbc?$X3l`=pR_j0rPAG+ z+!0Rs%b(b$tTDLrIM4IA8duf0*z*o`e{DukNJ*@$Gx%pb=OSBUw zBDjv+SKkwvHC#>jcBhuHwYAV%FgeXk1{WphWZ>{*!P1)2^zXvRK9ag-!a-d4^mweh zEqQCE1+^lPH0+#_*)oXhUO?WOiaD46Ug22mIu^I93xOW3c738&q)-eK1>gASJH~)7 zuN7Nw$$ry$Pq^UQH8cKgq3Et5s>iR24omE-t&w*xzMkydAXCrf-F@2DcM%~|`+R+{ zu>T;@Zy;=d+Ml?bY{x&xW^t$7pkZSCNnlcnbs~!3-upkMmO*wpadAe0co`-^$s9hy z6Yv4=xLx}^*=bA-^u2O`$G_B!{7zLqVH&4l|HGU_CV_du#dE8INE$T)$+SECLc1Qx zOG`L2lW4yv^k~%Qxmi@q4wj-PblHe+(FniYbQ_S!_DK*R+sQPuS#M6PMgL~UxZqt= z`AVEIOa!+#wJ)(|D*fEyCcZ*i`p;6m;=fB}FyBU-s3?Og$w7>f;I=K9eVmn-C#I#9 z&~y+O7-+rru`{IG)KT{Q{9J6Q>9cecDbdZ}&i|HJ3J$!lzI}Y!H#nG*mxsy8$(fOv z`C2RAS1VuK-k$TxlP9EP>=4E>$cwlh_9@qr4~=k zz{rTIqa{FH9XVdE)TNyJpU|8;JvVm+ad>{Rp&mhf34w)$6)4;>!k)zW-{`Guy!K1P zH1&J(4Lbb%%3SKc~hJ%iU(u9g@-f!ujn{9I6nPHboJG)2cHI4tT)C5#C@e9@R}F= z561bE4p6XB3N6zhk^cc%ai-_M3Qc0Q8eXUw6BrA)dZ(txfDGB9o_R^IgFtxgh zZe(P{f4bRVWpD2t7Fp3&tz{`@BWSnLkri^@r=>i89JEA@Ol{7eIWftRybC zoDd5k7nodL4iI!du4`)gOeIW1Nm)evSI)|i_cX`zIa)3JAR`PCiyh=9M6a-2z+4}% z4%Di4nJR1{f1911O-6Z-lG5}~(&Fd$QI~^QURl}a`}gn4_x$>f!*OL{3O?!SMqjZc zzj~ax1e!A`3AYiU`w)yS?i~}1@^80NF_#t24+-x66lN}a=(0z@Gtp>>nP$8FAq5J1guUKx&5oSs1FECS! z@hbn35w))tzOcB&f7gRkUR^zKdU_gDdc3c{KdGby5A1`is2WXEPcJz|_zvZA(O>C> znHU?_!LXnt{Yj&_APx9W&PP7Kk1sSdRu{4T{3@CL&d`8?fninfS4SA1M>Aeu7{v_Kx#wj!pT*dO5cUv2jYt{|Y^5{nwY7%_MDD zX7eoL8}PHmxH7H&EgB#1Wy)lhz`uHrI9MOE9r~v@4Nga`*4kLSUzroZ_=5NMN!jTs zsCSU^SVrfS4wKjhsUcTaX@!7*plqo5BW>lEFJDTB<}=e1ObcZ^JUjx;zqhxmo9)bo z%fa`9gSXYoEt)=ZzEU#-WuO0>WLo4ys+)Erp+Eb@%yNHr?)bR6WwrN0qG!!8mrFJI z-rnBgaQKA*EoE|W!^H|VQtivr2Ul{l3PN3%Gt=+8AKS$ae6gOn>aa0xt~6R%$-B7c z!oNSH&t?AB3+zJN_mN27%ioEuh{%}Mt9eu#dwcUjhK$_xv9B#6@{CqPL^$#*|2aWZ zGd@N5S^r3dmebS~#3KU(YQe)vR9~Sht6MD;mi;cFp`j{eW<-gzVj_L75Bnbc7RWv^ zF)=CGo2;_Nh>srwK7G35OACp0#w%S>q@Ci}yJG1j(=jmIke8QVBa~_3bK3m$TO}M+ z{y3Ad@wZ&N5H~VP|CP!{k}tW9-L)*%-44&d)j{w{}+C`UKPCEVD_m z{oR8IXO|bTTkD;SerI803E|=4GHcmcS({^y6H{|h+7|u$kY?nX4yK@?A+T}eTmE{$ z%4%^6cRZKs@vJgQNy)?YuN(I*e(_XPR18(+t_~+@mVyHAxaWm?)!u-5Crw~ZP#{R6x*#$F z>8pN^SkiQKo~QAphXpcRl>!}1{!a2}aXW zQ}5in_gS-y1P{+(OW;-5i(GshoVy+eySt6SWPGbdWa>?gjXM2VN}F3-IPJK&xSJgh zx^#L{B?HQM<1w>e%C>ALJt)cLU0gxEz-GN z`^gTN9O)(+U4kb}F!G2%UfyzZ?Tt;}iH@s?_p$7#wI3h0)Z@s%_%{l9jaR#J$I@-@ z>@nfB?j%ls+93_+LPSWr;$pu4QVV5J-e2`<#xWiP$O^IKg zPj;mZF#b9+E{nx28oAX{mMR zXD8P1QNEN?DKSH7Qes0?RP-(vm+~$wyn=#)$mhV4^Vg_o1#{}?#_JY+mH|}IDK+q0Vy;6@ha!!kg6(vWC*03!nt+pt@i2kZG_j* zkP6N#NlAaxOH%2*y7h0aAf85WhSSJA(a?zV6IC1Fus{sedJ3^Wcu;8C&yb^4Ju+== znvFvxrqdqDjCk5`Hzhe)q$fQ!RfN;}f#SrMd^tRo<0HEO#uvti0<|G>ZoP-YQI6a@1B zxUaSwn?O*ZF){Q5<}Ps~vAfQiHEu-6sVuiZrBdn+p3!>lJ3a!tjap7luF1%_4T?K9 zmtEsPcdoOX&+mwJj`_hl@%kkZcr8Q-etv$uHI!a#zNMY^wzkJlp1hgnS%B%lAckAn z@veo1g?>Rn-m>Yp5_Kgdufv-9WK%~fOkJ~i}d;flE2hyW@pfa4X8fkzJZjtxX|dmV=W$gj^?Mq1S{)9cp+@H0bDEL z5*W0_kWqnSot>WUnUegN2Ew0&k4d8+!qDjH>A`Jc1`^rrMzksNMf&zk&=dN1^2Q5%L;I)G` zBfV-y87nihx34dnjg5`SYD`QF==_H!b0(Dn1l$iyQAs9F!d>k+XU9)2uoW!U`&@q^LW4QyRSdM-&Nbd-tbYj(q9l#v)_EovvKWg`8vC&^2B!#MG zi%4>ZK{eZiAKZF?6q|U@;j7LpZ@qCRG<_Oz{gyPR>;;OEa`SN2mkMCfTORP^eGF+( z?b_4kXl>C4k|JEXegoFe-R#qtBHVW1%D=O;7#>ix4WgR9W6_qa0g_Cd3 zLB^6?&0)Ru=E_Zx(r&QQ#*^)buBoxR;CtAxf;jB5=}lOOzCqzK|x_)Xvi>6 zcj+mAvZ$-CaeuJhI#nS5LFEh8s^$_HZv> z@%3l;G?k>kHB*nGr{4HRV`Jmcp7p_+jCt#G$MaKO z#?mhO1@)6olQJ6%Jn+h>_wT(OFq0{D(JU1SFBL;yj`rWpv<;*nhuKXXNrpNTo2ZV&G|z3x35)I zS8x3k#u_#!8S~!lW6ylzm%&(kkL_}_&nL--E(jj}0#A}H-uP1{TRc5R<3Wsj;e?J! zwB3DMkAP}1HcS*sCu9<8W20BJh>`;19jn#+k|%dryvx7Uc&ozwgbQl-QBITo6mhKG zrCv1mlYLQ0XpNj*A^(zh4{7`q0b{p()8MUhYmo)6mqM zTK=9yi%j+>6FHEXFY@(2D(n9z=mb=$@{FXscGrl5uEGQTH0I#3Tl~kA1SV+k@+Ey_ z?b-h5;$XgZ;3%x%H%Kf;ndj%<`TA1v^K0x?L%ONIGLVb#+FKcHXls+KDz{%zjuZ0K zvac5Q#mpqXO}Wgo(3N<5Fl%$u>O)jicA2e>%^Og_VaKwnD$=v#z2ak6OIEne?LiT7 zZFQ&%3z0>8OBg(3r644J8A@fA6TuK_&`G$^9~k}MaP|E5?z)w&Z39Fe{Pqyihi?`a z7lUsUcR~o+9Gy5<-m9KC-!F%(6-7sivh84HCPb*Yg~IdKT{hg%FWcKTRh!>#Mhm+0 zf(w79r4%QM0 z#4RX-{ocP{&3HCy230hu(KGk_Puk9~F2hbn~(mkKB5u?Z@@ zR=uGDU3e@s1Ulh;1cJ$>y{Ioq6a$w=sv_R|T`} zySCed16mZtMMd{b`{)pL8S*IwpknW4S>oTIN;) z;xaH2AR|NI*vs?;y@`#DozCyH>DerP{~o;~p6|Bj`A(v`z^WMlV>~vq*J>`#UEdRP z-XJ0(@(T`bhKSE*^n=uGtLZkF6E=-(oL}PEs!@P_kQfzW(wD-c4nPKZ&_2(Ta?ge` z^U(scVRpnL7Z={Nr!j9p+jBI&;DS}O3>E6<2CN0L)?l}#veq1aTRnqP3jm)>An1&o zoW=s(25dq?zqQfwl&UI?MsblfX(`;cu`jkQdMD01^SV%X!+gZV#IB~vB?d#Sm|fQS z{rk7=x%RDt+6ztUS`@zg+ZRNM266Q0=za!URE)#0IXOA1KL-}Lk-?5+%AU44sk z^=(p<3ZM>V<3iw9i^v#}e&D?rRn5^niHNwkK4?y|X-4MaqVefbm#3JsvvaIZd}qu9 zG^h>;AKFkOdad3Akbp-(pm(%Ahjd(x{T3-)-q2+v~++yq-NLda4)pMi+NDy$HoSH(>*4F-2X@3)3p*Ym*Hnz5G zP^l^3!Wn)&@~%BZU_ZKPA95lIIXPe1bYaM4wA{8t1I^D)PbcT+eVPJq2VQPJ+F1yV zjSa*g;i_wCLAyos^pTa-eK3181QI#=H8#ek`|a|33L)}D_x+efxi#X!FlO~KzdgvN z?;HJyBNz-V-aj^OgDcoPPMw}c-$#KQfwJ(P(o2-OZ{9bN^Pim5L8Pq|@1AtTJm{P+ zM8cFU`beWUZ~f=)P?hroi?Pbj5>rXsW_!6P((9iky-w#K;h;t zH(VGXVmG+vgF)hRFyTpokB{G}{HXHl*BQ@?15cdWw|yPQozbSIrn35_wpZkhW-?Z0 zKt<$LRQv$eBL{qvK{-#uWN-~q|4?%z;1x>-feA{+jt3~1wVIXxasd!>{9Er#)lCjn zq0}0diOSDs{gEKRI6qy`5BHk_c{etSK(t|;Hpwa~!i6Z);Dv(vPeg<_xTL0&rKP3T z@85BESdNa5N8H{TEm?Pi6BW0yDaxoEskG0Io-vqh4OJ;N#Bg(WN5TlPW#S@{L1cUc z00B?SuX~=(P~;LHAFpU%5QBmgX61hU$~XTbKCq&KXLf!*;FW@#8$UoFMMXsgt_K!X zyFJo~J9-bn4?s%}e}|&9`EYBd&~ZbnFn4y=U~9bYH7e+4>yjOBldDXro%`jd!o42> z4kduot-;G#lR4Vj7Ml*`0U9wqGsEVvsuCyQI`DA}fbe9@Z_thyUY%|V+}ztkR#K34 zzOB7D+koV$a7d7sm)P6e+pysWTxdPpiUZm7C%Hty+<-Zl1Jd!s6&}aEiQhUqWlH1i zQs$?oUITm;d)DN3dbs5m65@+2&TMUw#dhp;G)xNY9Y4HEDl9DQzS+?I!{g&`P%gBD zQ1~V$CPwoQG&G<#_+UIoN4=X|W(`3L;OEe|ICLmbz*&>N8ptuR7Fbg2?g{VwktoDU z<0&g4QJ1Ir6%m~$=|zuoo~?a$0}0^6qn@81)CQ^$uxh=(IL^N?we_B>v|mBSXBd-G zP>>wf?Dk+?p?-@V%#@JR6c0Sy`0A->rzQnh-F>8m#PM`9B~d^O21VAL?}!0}s}6kN zR(b7N?(hW#BF*4Sc=#>I5K*Aax;X8+Fk8Ee%;fm2AcMbMoRRR*wmGyATb@x#Nl7)% zsvq}ly%zxd(4E*_8y%Dl#labSp{#uM_U+p|e0&jcqdUsK zsUP-_0UO7+ja`FmqOB?;^Jg>k7fCWkXTaqSE73KB1s;88NDZE$yX(5YhEzzte@Q_z!Nn!H8gR3PlYh!@3!PBoYr@=$OkC68DDK#%U-|HzB?45 zZu;CaGWfZg+Q){jw{PBDYI3GO!^6X~GbT;c%x$h9<7WF*{vf!KKe)&g6^3n@$Wzw! zEVIZ2+7e_NJxmdn_E@WUQbVt+UjV}{>PPa z6LnYelY!m*{j+jA8DrM%F41%6;c2*Xxj_dFax9%OV3d}mJUXc+U-FMH?D8`REiF;Y9pbK2T)QKO+cpy==qcT@2eJ)Vrtm*~ zASElSOv+ul-x*pSH68haqN$}NkSErnoOvLw0%O7hOV>7)Pwy>x!}o6Yt(66ehLd!e z2$5>?vU3M^K|!s(s-TdNmZjeGLYO+0JOIwK<>U`3vFU7Ust7p=eh(|B7}X3?nd^729y&!M28 z&@po=Nr0~0q?L`s_S}oKAV=|=6AvNB_YakhVwr**N9C&nGqT?`;HafVj?B(o6oeia zc3_{SrKJVbIIfLcsk1}HCnThc^nLd(+I$0ofZ^x~NTR@DO$`aJLcK~yNB0P{kC0D;RAm?+ApcZ$lZ6P;a+9^{j#gL91M$XG^s zwbrk)o)Igo0t|eY3?Kiqv1KPlL7&HHnK|V;KBKaq3QXsjh6eg0=k*^k4_eY@dipx~ zFb+ees`1;AI&hTyQF$*aCdQUeB3a?vs6x$E4m2Mv(}h54IMD=vT!1;LfQzCV z7BY7fi~@Z?955Qs4*I2?sULgfsT5v)ChMdZfFt6!NTzh_tc{cs@;T%Tdq}jgI+ONrimaUsC_{6F`(*XGf&yOq zIb^naPzttocAD?(S27^IjN3)Exu-W3rD+h95EcC^+q`>|Y{WtL;Z2A>T?;)?B-2nv z1_PLeNcO<5uZ~zQ)in(>t}{X0jT^eUy3;g_R8**mZrlD&a+MFGdxElfg`~H@q?g9pmdkbDtch!TdmE`#h%}NZh|!ns-z)3`7>{otdOHrSr-r^E zC(%{+S*>`ZO{rAMSI#n-9Hu79HFaz2!r{UXFHR&RsY_?Fx{Z;3CloK5P5&y4cqbUm zN{CJA*|R%Y52)30%bJ{!u4=2#w3O0fDefct%YcgRz3uI9;IBqr`e7s7Jk!YqExwP6 z4f@8Z^+)Yi7wu_0JF#e$T!{OSbNNnJdTKpAt4_Du z5l<6+m9z0rXx)_o8QI#}q7*#(a##MuV|}z-u6rWxp{-h6i1F%B;dIrtYu6qDtbYj= zwNS6=1|;6%)S}E}4_c11U;10iu<@Y!_um%s@a2c_RIBDa(I$L$c4_% z7Dg_#sVOi;k_K1gH8scbMlsRR8$tCNJ3q|!e3lN#qI?KrefaQ!Zk{tNp$`!F@T z^Q_&{ES3fzYR>}mQ7&VSj|9FajV&!yOibuNkVwifLwUOJo*05z?0mSCw6rkv!-l`; znh4&b4~7u0-~67)Jd43abR_^|IKpYVFo9Bacf>Pl`lWe3!GM|2fCsnQ$RHGARIIFW zp{e0M$;0a4g!lyntRW6UWLK#&nTVlE&5*Qm-ODeDEXr27w|_>Rzt$=)AKb_3PKKvl{wlL90a~L?P{{`0`;QM+*Pi z_Rx(RHyXG1`DHDGopGNh?9_F9$UZ#QcD(;!F3ZXCg$4cm2Fs)7h*1^6b^6#7%xk>$J z+49l>D#sSB;dt?&o(ede0!GF7I!NSoOvK zofr1yO6+*IGT!XV;!iy=f+QoFL_*Et)k_ImB)FmZ)j<~$rJtsy(`m~<6=_`TPHDo3 zaa#<`P1R*oI91CXFmv)(&Tb08XKd`OP{jY#Z`$P2V-*g?qj=*y1dd3#81~PaA>oP- zIXI7QK)y=-#LaakP`dotZi6O2_ov%j;^iK6-`iPhbJQMl={KVnpOsSc@~WX1hmM#6 z6h?uJh_)3HJ3|s`Sv4OY7zOkE*j5>Ln!#vt_-rfYp=CK*mODJeJWRS242i7%ui)6| z3rqI`p^?6WkGINE5EH+0>O1)aw!Yr}rPg124^(5?{~fOMM9@F~VCO(QKt>f))2!(@ z)K7#(F_DpmT#a&BMGxJNOPad)?%Y8X8+Cy>JlOofw?S7UBpu207{cIk>ZXh+U>it4 zq{2F->73bJD2hpy@<$ZJEfvQ*O2|YF;xS&sMQT=ZTFcY5Q~47Orudm2>>prY4ejmH zq>l7=2X{?8dQRoGJyNr1Y)EOLiDamF3Tgb@+wgWxoKU9= zPMlILB_(_p2sJjsME|z}r=cx#?uZ#+7$CKP(}6<18wE!}yvTlW81R5W-9pLm?<2e- zE02GUd@)Z=CoX+4{j_uNqVlch$(Fvu%0vRxpg7prKj){MA|ctF0uQxz-s(7(>r&-e ziQDA35_*4J^OWUYupjllU`yNiY{S~BvOM*@H)bj*c{u)0NdXrC&J4=-^~l!)FY;Bg zv+w!OMiA+@1e+g_7$038SyLUOS(q8P6-zZ1YJW!V;dn}*b=a2ThhbxRu=Z@wV8b?! zv_%kKv`8x1+c&#_MX~BNfG;|cQj`+qXHnNQHu1sX=GH;~Z}|o!$~N&|kR7p%uc0sS zhIQFrk(JdNN#UOHFTG)syo^Yql(e(?!U*_$;c4p9LERN?6hw_0_O%y-b3DW6uYb=K ze#k#q{fDmdHKR64T^HMfJ~S`PQBM=88!;Zym!XXN{aStxrxa-}Rx)Tv96v-n$5&A5 z=Y3aJfcft|N?G}+1FqI>EFd=V9TNIbHtTazlrpk--+Qmsvi*A(Q(6ZJyrVmIX_>r> z*;i}}GzZVsf3vdSgyemrs3ar7;&JmF^5YvfFMa;vPx+5=Q)OJoM`Q&EuU58I4sm(9 z0VSoWg6}HD-oE_{6qSh@|K6NZe9@%qhwz|Ml4*SDMogGA!N*&FXBQej%=w3`)JG1& zAS1hkWMb*0|8cm#oo@gCMvX-LCA%SKCH7y+A`ap&$phw+f%BI;02g2O`Y-d+wDG^p zOB9_y%}V6liT`r6kYoK%ZZ9u~+{K~UMNUgw{IWMl3{6B&yXlO>u)T`m29Tg4&W+E% zOmbt5FT9~*IC;2^@=MM%eBCDgQsq#olt+A+VDLSA%9YR&?#H|JkWc&rkU2CX5D0)) z8jqnQE35*fCiQTP655KAVg}l=Kx#k*{K*r+*Ec0=72&jox&ufqd-{ zi0OLZH?Q$I9Yp=DwepEe_sM2}j0V|@a7hG(BmFp> z@(m!#`ucjq7M+%0vLS%MRM7!&PBym0GHoeZs*yY)!Nirhzz>k}R)xfPfhnkTdEa}&P7hd)r$ zRtitm7(AInl1x^SBpGNa;0>}bePpgK^Mw&F(aI%o@NofYtOZa(i}E$t?9%OyY*T%G z`0;^tI0=5lpL}T0CcFs5WUV#)ZK4o)+!Ys65{$p>LDQ`qZEe*fDNZ~ z6_RLk(4Xgy01nmL$8WFR<>UMMJmH0@KU1Ccgero^b{@S%jTzBPfs1Tr7N~#K+xO2l!VG{hjhwcqUgm>Lc(N7k3G;hG$_hn|YRIL9 zhsw3c?>7}Ky^26C&~$S?73Uc`0h0*A5NI_br22+O?l5`$xw!P8ztJpF7>VsnWUg1s+S+y{j&%ysYVzaJT{r$ zA`zlkmx)Xlz`JP`Xc66ov5{-*PETVpB&m);%JYmmjWoiouw)ECZMXelqv=vW1p!wD z?km{Qr{EhQq>Vk!p;1x3K)z+D$sQ=MTMNexfjIydBsaL6In_OkLuTkZ<6^4r#~w~3 z9VZ~EK1D33$h8V=?y;!o6~rVcs?+IKOVcZGNJT=(hT|Aye;G99z{o>V-kPu}Ua1hP zMMg!XN1wFdq)yp+*<1?{2@v4nQR%R!G~v~j6o;lMEPbg8XRqC&s(KJ1+a-9AMX<>? zZ{9S7}()G)5?Jt5wFr#RbBdLnPXYSbP)f`ZEZJs&Llnm&#xvx{hI6?<@Rk#^+HDkMY!NU|{Sg}+)3YMqUIAE7oh z@{a=k^;^g@`|@C)0`Nuf8c31cNpp{_K*y6i;7r(9vCk z6(Qs>#>OP&@dAPfpsfYZ<$`6`#Mde* zd0=^44i%vj;4u2t)YJvSGCZ?FEsJEXuvBN@ZTMo*kKW&0nRMZP! zOK!jqO1J0pJv?P`y)t;AIk?5@C|3Y*jOHJW0)}!UAT)0q(#-9nR`7l{K$wX+6cYkJl>}(&^AQVIi6_&R~i}}jciY%BEWaxONt)3K7Rc8 za4{tWn~2CC+DTKL+!L2|q^R>$i^a?i;QZFEE^%m|`JfX~4rrH|#rWL=MaZw(4p`=z zn_WZb4CJT=xVxO~4T^FuqEWaZEG;cXUFo@;`AVH)&si*4Lt!~=&!N1@Xicp!MZNY#Cg6u*kc`mcvT0qx0= zqwfxbj-8y)nIc=}F=Kw!?>P}cn<}#s3nq0#@ND;ax9_ zk%uZ3R!N7N+5O2C6)GhWw7#>m!iBIj@`{QE1I?qO>bn9?n>rAH?}B(TGc%!s7-M{! zm^iD_!_<_)u=ArgM2tW|_;7EWm4QKFRocm^!t|0c%q+kGNCNU>32}DlkZir0`HSYW zBO7p#uwWAt2LKJQYJcRFq4`J54Pa3l7i!Zx_r?K>Lc`t}pbns9iYp~$-U~+ zQ@1!iM@(efhbfBo)2zbt=lG+=eVASn4AAOCFE;E{pzcAA^e@3oOllG2F$2U5uGpK4 zvu)ujwI0>ceMj)gu%Uk>7RY-_JLehq{9&8W)Y1|?!v`iM{css`#;n|s@gm9So`F~CSdThS+%eJdj zMJ9D%9Y*5;`em{VU?_oSP=_r@bh^wu6D2YQfSAG+={jk_OcLaR)u zz*C9ed7JwDr1pXYAQ{9{TWP!fGZ{(Adf>Cc(!7I>DnPBgbaB3M5e$d;cuO4mHTT0u z(!R#g9vvM)2e!CE8TO@hKwk*hu9(43<7Ly41OQ~Gy+P+b(jC-6ImgH0^YiDk)4hC8 zrRoH6VED4LD^SZJS95+rwZiHy>{+pAt7;#)kr0UvibLVH`C4x%dIUQkR$U)LO2AtC z0$o@_9nHP)Svk3zSXeDcrT`E;K{)-ZZ6=-c3=FtHMDaHRP~_+#Y;z7YYWm;XT}h4` z<6OD=(5+HeznRkQSL1#%Qeq(;63@cS+ypIgybG`O4*y%yYA&<8!^K8Ow!`jn|4pH@ zB{`H|o@znD`$r)RAtV<;+t!mkRI#6zfQ0Ccl$cbw9CwE_9v{C}Ff{VqaahhYcHJ%^j@SMM0=eU&(Cm133310K*`7w*eGeZ&=hGBK z^q^UO3fA79?{^jrn|zvpU-<6&EgBwPysyt=8>oeZCQw3E7J%V{@T#kO)U=&=I!haH z@U`;KbItK1Z2%^E6P#^R$}r3U3qB#fOZt(m#ah-p2K)e!x+Wu(y7{|3P=)omAS=64 zDif!7iV;6!fJKYqRq^lxhx=H+ebiZM*%Hfwzv9^8;Y>(ub$VGxcWPHtdwY9*C~}h8 zzb_33cRIZ})v(x~eOt?YPf6TY7+Kzl7(6(6YS`$LsrN4zAU^)hXV;xZ>9rCJKMae! zBZbvY)JZZQ@09QVRNRg(yGziSqett_Q^0}~lh9jG|D?_vZQ$-!kq`k(;$`i0z=9q?74h zT9SV%jWd&{*?B%G>{&};G7m=`kEn5>W3Lj;&{8ybLZlq z(fZZL>@s848<9C|oh)*-_26*-7`jVd9U@GfAJhnRH+t;pNN>amte9l6nC2+-$c}oc zr0Oh<ymlE> z!iv|fUq?XzR1MqNF0rt%AiPG)E&15NvnN|LvDo4@$@X4qZ5aP7U1(==qexe(aV+#8!PU^s19P!m+W6_b?m2VWg!h=o#Xa^m6Gme7oR&!ge;@x5 zXY)Pval7j9^>#KH#yzq?9gbpm?+xooMg53=AB>?oYWQOgQ{aMl9M?%9%Yk_RQ8u3X zlGmip^RQD;VtC>!I+d#YZin~1PPmOVHUBkRq%%Ym7{e z{FcV0kH*2ht*TzOyoj1)>_nqh|6H|c(#x8#zIo-T3!~vj5fsw3!Slpndb^Zc8kxz z5+~uoU{^yEIJsbOveQ6l1A2&ZIt9B??!WHPd98GC6B0Zf;2H6Fp7Z}Mw~!_c?sau? zu|pE5 z*frQ6tZPDQ^JCS0sjx4;4LCWIb93Gh4*X3s0IInI4D;@!((He|BoVJ29dc8k*>I7l zMm8`({eki2_+6^?uCR{|klhbqoA(<4@F91uLdBP4$3kEL>d|zlduDsHeyBM z`5#I-3=4#w0u%MIIo>OFg|8x3d0%o|5<~dhvxjyly#M{PE2gH;oyyuT@e^qYFhk=$_bgVRxuz z(UfzwTh_M07``TEHM6q%>fR>SUTI6(@9#%)Ai%(8CO?1w$5sVP+J%3>MgS7i-lkAV zu4A|dnrE$`GnZ{ynICa2o=_~Sne7JWBeR`U8e^e|v?xEd7g|B=~ z=t{*urW5i#eBO}8QHt4QSXEb2m~(J*E8si;Vy+kz{Wjh+1xB6+#hjEjnm4F?q!b?A#N zEt13c`ZWsl<{&c;V7P}!?lj}lhkYz^cI@BhY?7+0-J1mgaD>33`3Y_+!9wFtX&exm zUX+|JM7Aie8+3)x>_**$?wd@`KJl*%yBGX;uMl^LB$u-hSJ~d%Nj&K1SXz4Kih_=b zy5tgy4v&jE{#Xb9ldPN(l6mjvN3JF>j{_`%sU7;k)|~8YRP4Cmf&Tt0z>^CN#W5SN zB4UV;Vl(g50qQm;Isdiv-s=b}9@5PtH@!I8;h#UTfn5(hA}Yc4J(sD2liNHDl$2qO zH1d}pm5W`;9=w?`P!S-l>fU2ChK z1aaHwQvKMJRtK)=&)nBprTBF8Xb9tg@}w4*+GGiJJz-~?R18kK zAJ6LzxRX%pIRpCYQ3{yHZhXxYCPtLmU`*~bufpDYSh}`U_@fNq*I;iUv0x$=*q9Y> zd~z}!F?`Co^HF@Bf~JY@GEDHvDvXu%i-wh==hKj$aAC3>8x!%-OcGzE%@F0&(E&Vl z9Y)MoeGv`payY;HC@A&x#tK(Lp%e_I5{Ifn6`n{$lc)str;3V(_Abp5i(*ardY15K zWdo+s-JlwlkRV7u_Qh#Sk6-_8GMe4VzB&KNYO(Ezp`P9)$Ms+Jv$NDt8SCQ_0eB9u zfz$C)dLeMknN-wQl=GV{v);8`P7As|U~y zt(&uv`LeCLFD*CYJ(4}7{pm?lq97WA$8JmdboZKkMAR#T?o#$VV`rh~b?>D|N?ilwB zhC}h3^VHsJuRYhCbA^P2AjugNY)o6d5z_jvr?b>ciZDp~d)@wPFcx{{zcsOcdY^K!blpaGkt&4Oon8&Z?m4_xE@O%Emw&5j?ps}l zra!cg43Qg;*HN}}xyH-phltPG_oa!3=r}$b+H~grXh!)P+}wUh&Ia=+0d}XZGH~e} zh960kg||uKI1L47GrHkjCC>9|NF{-SmbMLW<*@XO=X|$s2ZPKR&VW6WKen= z5;)+6B?Dj;JPD|3Qgyk$&w2m;@vl}mwUE>Q2HU5MtSmaHRnqz#aRZWf|KAeD!pSN1 zcS(qP`4ZJIhVUX$jez{XKYfACyyq!Gb^9?6N={yapU^@aT6Pcx6PP(W+}21lX< z3|MLGfxpIcAy;9o1DS;d{Rg3{<^s1LYhE-oJ=K_u&nOJlDO{Lf5Q0fX zp*|Ps+P;MnfjF;w=(*jmUA6=MCanctDNlbV!f!yT1@nHzwE;#7*ipc5HoN#C22fJM zkb<#pzD(Se`5R)t1^h(-fUY+c%D2*g4s^a^U+iT>VWND5BXuj;fV+9#6D5bw% zH|Z4n0Ef`7!b)fv@t;@+bK!pr?w9_Lc=czpkRTF;f3N?o+u!>ewDfRZ1O@`jE7&a% z@lK4q4c~GWDVx%J@2rlAu1=)_xC~AQC|_b`rMIP}j=y%-1*~jsTcGNf<>d)l{mJ## zR;eWzi%pZ!qWm5^OR6pFH@b%bey?4rRuk_7sHa)nhXoX2` z*r!Cwm;|I;a5E%VbCFQLUIhybY?1E6qQN~ZZEw#BvIyF;b@DQhO>wn*gEZnrTH3Xx z;VJ^C^oao~3N8|)jxw^(L8&z3x8u0CcE8ll%#0q?j}D-3J}uPB+yf+5o=iKa2oWBB z-Q6@P`?&`0SEqd4Fvy*RNYe~&cm`s*DPRn9A1~qU0`^RQ>Fo8v6Ed~?_tRtsTYBNb zzm1JW9vrx9XltK3o1%>xthA&2<-W*aJ6M7RC!5^&0W^)6y+}+D=v#3h&Jdx-jWOHC zh{c5`=5Q=^>=_K|bSrd5di%fw{|<&js|~a%^NmD>AoREULib`iaANwyPjptTl@2B< zlT2>%-sjAQT%EM7ceRr9+wF|DyN@4l#PZE^?ZCqiX)yZCF0S-iAT8%Ywaao+y4qd2 zGp|Lw^fa;oHF#THefghMi$tAqn)LccB|K@Cylc~kz_TOsHJMS%Sa^j9F}Yz#70)qi zYDx4-8!=uB_W^dH{KU?a;Y2r9TzihCw>o4R zKv*bF;i7CuKav7!0rXJKt)KN?LcoF-o)YL80wWd>$Mg&i<_JjbZ&J<+WO#3EvTE`L zqz)$<@odbxee`NiO_kAP2@eksamig^t9{H;dm!$fD${n=$Md7vt08*LSsA*zo#}q7 z4KIX^jd-oNy7IfgxSV+!v~>_y)unaO8UB^izYr8Dy9`KkO8kI2JpNzahs&(9n?R`= zeE%@i5^SNUu9KbrSW|g3$wE}U1wsQE zNaaEXrkzWV;5Xv;?_WcP)7G3Ss;Na`Z~cY#J@AtXb(=}Orbe~lC2u!ToGT+JDA;nC z1?4~}wPd+n2SNs{SDxduyikv7IOs2KIR>O-99ML&=~OsE3nXB2A(dS4q~Jh*+edPtFz7g6Obi3&^z;~hjy>AlF* z6>wQf$iaR|LPobPEM)-H^7OQz$%Eqad4Irl6S9O60^52 zGCf>bvDYco0*zLBX(`lnFVlSm2Q%bx!r&qF@*O8Ha~<>2ZejIG8v{)uwjYYmcF-4r zd$=?amxcIKEbNnTtaN7#bQ%FPh#s zJTB9UWngBW0vJ#=oID)3_6F6DPj`!A?)Z)`a$Y*iVk+V|iF4%LkZuP-5Fu20+QT^% z*X>+^ap(v&Ot?}+s^Yd-Se50~)t+iLPxU#q3eg{$mIiHl!Pp0@8CgOMV0Wal?Uj{$ zwV0DbRmEIEaGoj9Vn@>5s4thPsKO`$C9LC5xO|GR#$mOXEQQ;Ku8fjd#f|9*fIuX< zt{1v>Ky&4aT5Y%aJPM6%CM*owmH^sLpi_W9J*X=Awk`%*euPw!iA z%U`_l`(pF2g}};|7mp2dL|3Zh&1NV$?&A^73=R=dcJ|59IW;oo=?&Jzbnj>RoYVK@5d8FA&1p*NSb2XFDUfm!xnh@GXa*U045M z8|Uz&_rvE7kHa6@`RY-Nt?ka62qh_4ZriAuDtyu<^qHfwla=m1+#N1wC(iBM zXn#dY7Vp~??|S;y!up0stXKk{d6Xi_S#_@+^A1~Am^wJ99Q7NftL3(k$60p8xgpha zSd4s4?wNp=M*RTP6Cqq#-VL;)qobyjD2HkTmHhq?uHtwuW34bo%)Mf*d`VNe{Qk*` z0VCq7F^|={oC6u-g_+sxl9EfvkOq$oiD5+G2hnZs*xPoj-mpCW)vMs)UUEyTu=(~F zJF&H=F+}vJmLZynzE2rkRhtucvtM^TJc3Dmi;pj4;45f-NN4fSYPqx<2f_d&<20@h zgGuA;>>R|97+a3#(r%vXs=9|x-BGSwJfnm-0Zfc5$) zQz%)a=43==WhiPtxutz2Ty^D&4TH^WrbP!*;8jjw(MbM)k15|Dc25Fr( z?7izR`sSTwMvGaeo$6B-MFZhrU2LjL^Y7*a?NzA7p5heQcB*RlB1%R^Mhv6{{w?K$ z8X6jikE4~9)ucB7vRm$Tlk2~Kn?s1|PVjtHHoUBos{x2qxb70_<(oI*U%x6jHh{np z_Iby(@{86YM z2)PINQpl{kL8-CDWq)U5wqxdT@Gg=AL1nnssCbW>g`HiVTPtHzLsj+KN#U!ZPu*OE zXz3-gGJF`(H&4g#?hiYN#-~dLcb$=UCnzZN&e;qv`6>7IqVxD(7lS3%Uh#qN3C$J` z%Fc-U7GN{Be1o=9)A^_7*4QxV(>Cwl(O;q(NGN{Mpvgzg?nPX}0*rmWnMUJQ}C z`fDJQ2QKzd^tV0l@~?vA?9{`^hyBEqBTeO!Og+s+zMp96jH(gvZiMpuV z4Z%CQ%Y6DHVh5Gu)sk;@LC{vpwlb{T45hB2lNl$VoBhW4~ zP}O*YQqgGn!grc!1Re!qYz{uhitA{>BVJO5Pp&6QxOYji_b!5)%qSenQ$xKwi&&Aj*Yjl_8OZyQnvW#5_G9>Z zNa7kF+zf8%R{-K6>8wPaoL;@>zIdCE`t_bLE=`ZG5^_w>8(O_VdOZbJgwN$NKY{c- ziy?|k54;UP{e3>QJ8;0*hZ^eCKNstrs@j7Ga^>bP=6F1TymRJ`?B{1VRu)mpxubk)!GO6cGKAg+Ce!DL+SsXPk zo!>!{*LwL=*SA&qJk2X&W#`yXjk8VlY8O!7e2AO6^s_IEV)wIIzHMUD+&gvLxsLWm zztG97Zcu)rb|Yju;}AnJVmu}*$lPmuwqHi>%*)pS?HK0(BBKRQTlOD8yss6qR2bDw zDAX}O1gbvpsuLuTr9sqMA6StwCWCRpoM+Fl5fWngBl9d~BPlgCG9m&WRi<44(XU4v z;ZZ@TmQG{w5W7xC{wq|FanOqwFIvjk_p8-&v+Bn(oam`% zVMFDx@I6M3^mW2M4gTvs*hn zo~(w|D?Q1A6YrypV?d4L)C)JSfJlzf$eoI7=qvV>1G`YzvnZr^da^%DuT}kpcYn9! zpGbadcMKD6XjEDTA@|Pih?9C2=?f3ot8)to2+X|B@3)3^;J%w1MLegW+L8rlR;XlN zNK$eB3~+*w+=7CJMys3|c*ihfKn6k&fX`T$V5@@tSiP`KYU0saplAz{aljBg>PS7p z(<(MPZZzwX1keR|0#QjxY(wCt#C_w&)s@}tZ4R01p+8|!ZJ7;>-FulQS8K$@XE%g% zH6g*V+5qLRc?+y)+rNHA2#FM*XC4DbnG%XcA>EX$)z^+??BIVVD{n;%EIuE#mwxo9 zc#dm3hUZGSI-B8B@B?Ye-d<_G?+qU$vaiLq;EQ$NnsglPE?M5JCs4H3({LI&R7cK66PnO3X5^zqyB{jes#gBmb7~(QfHCk>lnj7XQUF zxu`vdelA4|N(prqU6PB&>g-1<^gj9ydI?+tm%`#qFLY+tVbNJRV+y1%^KD$%@4aw z_D8aZ@jrx0^$O|ET-}q@5_!VpX&Ae2QlVFBGr);HPMnNO<+ob+sqDQ$jO=<~RSa?3 z9kMBIGA(@zNr|fCCM2fHPnELh3q|P?3lAh9$=deHasopk*7FA4&+nvwUW@e=aj$8! z*o`z6VNRc~pF2BShEz8O(nwr^zzx!!mg9LNp2vvgE^urlXsyOzQiTlcIQz^PA|4;r z{G*$K$@7yhhhZwgHt^fX$eo8v?Ak>^A&r*VLFNx0m_U*YD=)FEyw%~_z%HmeTe#Mu z*qo;`rsrU~k*d%5CK^|5=0dIjRT5A?`Zk%ME-CDxnnHL3o3SeN!jbg;$1FnPhhw|# zj=Ca7${_P?giI3*br3_CU!I$akW`8|kZQx02z*)j7~>FCuBD~S9rCg_yFZsks)=FS zP{6GL{vo1=WunA=`GAek8>Jg@g37nyWV<-~xB%9s_jEsRYD4aH6BWeDiCT;I*^ei< z^UFXY&p=K=0q0V|+Z)MU6qhd(_DkJzh1`ZNZKFq;7OYz@EH5w5EiX%Yc+|+$wx7nv z0tz%4;x7lhahOQot$8D8gxR9`fzpD=u6@T3C9GYm4S*Wk1WQxP?8{pJ+`2ky;MrQ* z*gX4bo8r{prSK{n4gm)&8D5@SS$WYmbr+H#FfYvw@_;;A1|*42PCT%tWXNPmTv5L% zAP@vg$=1$JIt;e;lwf40Ch(b84bPUF8;FZPlkx8$w(O1l_~OMGLL10sznCK*4uGiz zOBDKPQGR~1nr{E_@S)f%b%|S|aiBv{mUHDasukdRb^u!f>T|}QrRskum(&@T(sY04 z4e+;_4cHYA*bejT%m}f)cy)hD95yc@+{^A#yZluhWWORxq@p~JQ|2RhCiO&jV{|vn z&K14Oh%OXj5K0^(qKNtW>6hQPA%&*xSPe$Lg6b<*c*=jgT*A5LQ+JNqBCE(RV^g** z?@jX+$ql=}d)?|9T&MM}A}Rs^zA0C4(1bWAI)|j%3={>U%d^42(Hn?pqQU!mlH~#j zz}JdXsPTq4H!qCFu(zL`UU2{cH4tCuq@*NW_93K(1r>_mV7zr65s?T;kS4)@go2W? zd2TLePq)F_D=dN~Co}Ujyd@-$0EPH`!-_#_cjlR2M|z-1)i8j&lBN=QRD$kXIWiRO z15_Y3AXO)W!vZ(JGR`9!=~EJE*dY&%H5P*=8QiN*%FAj zO+~FM^a>;yXdhMbhGZ;nyVuDm$j)Bt{djM~EN)erCZ;?~b+58_6Le5LpQ162f=r~6 zA0Ja@{rIg=C#OA~Z!bAa@WF@sy^J4Sa9eZwudH z-KRH}(Noe>4wj`0`2jm+((~G%Wf!BnTr+9WMle4`z!5hnl@vt&(n?BS{R<^|QxVP( zGz6IH*ES|4RmBgapZv}b8iD%y`oO%`?$NTcbXIrWto&xy<`sEV^ZP;1OdOmJ2?A(+ zuR>A=y9SbAig|x>6rv)JVu&V^+X%V(l*s&JfNaJTY%@qTl_m^0$zjSn0#F5}rAonY z-_L`W3i8oV;ZspDToX_c3MenXg^s;Be@_Hv9zr}fFMJGJ7a)(6DK)%0kAodD3oE9L z+-Vhab0)|?vX*AwMT&d^s7dnE^dIg;M8R5hJ?)iT$?V2Bq? zbCE}wyj1VYYqDZ6TD2lR!y_yeSwBy$rhf;vk-DwLZP_52vHy&PGE39 z3#SNS&-6;=EozS5^0Il*Lf-GoQZzk?x#M^(m5i|=PX~qzctc85gxq30cUB8mw$C)P z(lP=vR^dsK>sJ$~qVh68vY#Ur-Dbg;tg52&R$wQQNOL1V0fLo|jGo@-V$kHg`1a9P~fVGm$mKXQ}NSGGp=gXI$>fCIzrc2)o=>YF? zJ)O||3zwmar%O|jYatOSXchA7nL*u>Escl$ZiX|Tpv9_A+?EJYthJSnT#7qRK!~A*aeW3|Q z7f8|}MZG_-NybX`?t{@1cfYMPd}kcglX}89(~F*pOyvhyVxdH4L|-cp2z_a@Kwiy} zKh9h6De~J?<>NUz{1x$-@5-=)%cQvSG+FCBM|74wK zYb8^-xLs4Yc5sPXb=pQSlmXs<5oJuAjhul2U&Ofu)7`4#M~&hT#`M1%LH4k7Aq z%)ceSKlFB;w`qDiO^5il@LxM0r_D#0okvhqf-NKzmE5g&in*qy%8W_ZA&5d{sfob* zh7B!UI+|rCn9j~9N09jsp~RV`+s41+0THQ`+_8iH^4wXR)!fZPKh23}J5#?^P}DBO zf>*bNLNl&${D=*_;%xI)*h9U#zw4T%BrcFaLd*CM#qYl$((aH|G4^UVWBT_1+%KSK z^DJOb?%WiT#*}(`=6&G7sF8_&iCWH>9eO?Jlx2xrrql`F3<>wx+Tn+VQ_g~@`usI| zSyj~x-AsQ&XOyS*u}UE;ZtOk-@|EuQp5CE>tQmSRpoI`C)(=7A=`5ah*HAjAUUkqI zykj9qSCc8!IyE09-ScWTt>b||9xCI>^R0aW8~A>Xb@s`K6J&?HvK`Z2BrYofDQ zgAiHUADjG0N~nkatx(Q66V#L3{aXSBJ;1HV9(bPUU(s7zTe9FMeJ0yIc(G06H+C}5<_EiQ^9O*epJNXN){+P+GEB)&Cj=i2IdL=*|hhYaLB zsHM>wa;SvbmO0HTLu zSalG9ExO$F%#36Ki=f-uRj8`MzU5qC^R*#qDJjH~ea=}Bx{sJb0S;=va5c>!YCz2T zoQFOfdp8U={Irz_pg|p9u`WxIvWL$m=YV0hk?1@V?j-|tnfg{0Ik|Ii?WOQlrMCj=`kLPtbHtFgm_gSIWYSpDWZ}neL6D{c^Q))&W8kE2=?|gXmkO2 zQuBn^y?dX;IYf>>7#J=C(p|RmbmBQV*;OJaQU`?U!db$Y_G_NFq&_qq`hd$tjVK35 z+lGdQb4yEMPH?wwQG9x1X!WW#*gF)4uaE;eqiRt;n+k?2wa>g`voRkpupT=qu+>N~d zI7a_(uiXDvEgF>);)?onIwW-s8#rr+rFf2*#8pnT535=mBCOX_Fil`_KmCaMV0iGN zGV;!?fPHplRJG5Zu&u|kZjZ~+hV~x2vTp~xIf?wW`=4fX%C+_NA~5RKryK-;9T#|t zgM)*xiaWWhFJhp#7dx_TQ-vFX5xV}+{#Vm#8tHOVfv@OS)zMw9)RET3{8X}CE>FRb5K%9D)Y`#9_B#Ap zY9Vj6g}t_|7d9}HAms0%|7YnTaUXmmpMxq)^5IJjI}PwKo*RZsdDe7eS*Ldj96Mp7 zS5Z*`Yz>tED}`P+2u)|6-5-+6oJ}!$q5p1|u1(0Dpj)`k_G{aI1|Y>yA3&kvKR*Y| z3=t#4xtE_31Bk#a476rul7u~U+~6^VkPU*;|A%vw3P9onBaet2cK1=>FIV) zN(zcgc&RYT(PlJ}xFAl2idkFi4iFUu-h2%*I{@Oy6r2$-o}?gl0;e5uF9Mk!&@fGa zREZEwI(4BNk7**8KS?HW6{qyH$fcXpD3UYGJ zLfnRM1flH|3Q81>tGnF-!idYO@7O9isU-X_oD&5F1%yy2Mj?N{e7OmjfuLy`cc}r& zD3N1rbVbvH9)yQR>T^Klyn-eTQE%09O(|L6`ToaVA(2|h1wc|ItKxzJAmfmzM+5r>d~y$1)qAEv?ub{Y zbw0a~)f-t<(qRJyT~Nr(Kr^qtmB_hYzFc9kzDudO_i)Va2p!zL{<(g5?=YMVt@+Jz z1@_5^HaF-HDnpK8FM?R=1^#wIV+jN5&rjPIK;XRe+VrU3w~zAfX_E1x_UJ zM3Dg5+5@Y=!UB={5GdwhAMAUU z{<}G-M2%`Zi2i}|3eD@4@nT>&HqnCv;Thde{D2a{&~nD z-;RChorG$`@VS@{k^?J$E;6A+;j=o)rezk!F{CRetl>A%mOg(1A^dTEB6sjY{=NDh ze^W(UDIbRU&ij36p|i->q*pK2JjKNvCf;|%ED90tsV+R$IGT5I41-uZc}*%f{YE`g z!dIpyOV$^y12}#Cyd{Oz=N7vdas&m(ao>LB|D;xcr-l7f=n@K*BaX*Ro1{>x!7EIOhkB#6D?h0C6?)Ffpo zZ>w_(C9HVk=P{53N?(Z&tiI^4ITyF_;6tI&Rj;$u)L3F~Xz$p!x5e4fquHrXA!}9- z_F+xswWDJxQZ;Qa>GJ+^f(Zz`h%o)`_9T`SN;36Mm&t~8&w>HJ`|SFDicIZ*!Wju)1t3j4B_A-In|V*rYstQTUSCb z+r-39zF~Ort(gD;pZ@KGQ7tOhUGaF%u~1s!8=uVk8i7SKpnYNFPQ=6={gQ>8v2Z3= z(deF2n!y*zv=Au?A^JZRykj8effkuQf>2WHZ$1a}NMwxy)*?`?ew+7i2>9U2Bs ztHUKR!7VjhMZw+)^xGn;r;1Do3TbS#BP}X#Pr0ZE-XhvK#O1y|tQC`jU*T%~U}0-( z{6srde`S1D-4P@bL_bk^zC4lq}SL5Z)bL1w;i+1Gp5@xts3R@>-Y6^Zz%t2d|=zM_uj z5QaJ9DS^3T<-x0`^PuUSNh0s6K-SR-I z4~1|@Od(xIjP5-lQ3m3M0LUx<^vDAtH^QPneCA{K*S#R1ZOU(W`3wp~15=PcLgp?3 zpFTJ^7=K({0v5svUFOItZ(@Q13E^KL6Z+3!19*@X&Q+V*Wa8U5kAnivGU8ob+;H+S zCpLQW-0m0G`1IA^)adfE(@v%M-;S9ZeQxBzH>(mN^#LGOWRBYMi5Cw@R}4d<2#}0e zp%&7^3lcofw`;*cWbX!*g`Zv7U(}r2qa&y^r9OD1cmI*z>ESD4!p>w_D#77`V`oF9 zPT9%_YT8m3l=lP_OXFO0eyRxcud}?LELo)-Q_f|5tF$g8Td02V=5@d|kDLYR!WViK zXTH69H=QTj!uo?HiC(c(Ll}oU;w0K^1?Y@bQ_V4VJ1HvsLUjXtN-{mDDN(@yTdl!S{Q zp1bwCb$=+2BozpyT1g4qEbbj4mW_y58CIOu*48yJ>j6qN3DEFC=qRo*6{Wq`4!L8L zGnT*Roej2B$m|d`0zwVY*=(CyN1fHGhSZZgvoJIB;ZO*j)fafjg$oyg)|>NvGk8M` zI0s_Afx!R?7+`2{g5mBZNuZKu+&qD(B!0g!pEDWpSgRO{!6y$}6*EHUUdcU&JtGQ1#sQB*FjPrZaMnRxWoJJh zh)<1;8eDdv67i%!t+i4n80P$e( zZ%10FK}`weur$aGAQ^gc=@KDF4p2HAJ({xqQdEWQ0g6YUusFhdeviQcGIGEsA@uu#3Y`P?~ zcQBpd?dy)iw~_c3745l@2qt)qjlK!L9`YrZ!j>7;2yRCXVB(EZQCN(w?E3uqnNqg8 z2Cl67H)t;cHSkc7&jxYJXo~gj^)WunTFmaZhSNejS3tuX_Pme`H~RevT8=i5OgxRX zSiELfaOx&T?dQ%Z`I0=Aka-JO8rIzF;LKXn#1SkUZ3brdZIJn*kAb6xbiRhbf-P0mm1Io z!Ir-qxWN_3edLaHsBRy2wKvvYd;@l+@rSXU?uU($$*W_S85$FGsH);!db;%eCin;v zp)4ohzSeIl+_=nu*Wfd|>x;RHU=xl&f(8p^&wXqTk!oKk=TgJ&#_~$&I!_>(Rz^tr z`nuytod-Ge^+03^h`6CAo(!)mxo2B`pKz^T%wZH(5Iq%0^?K+-jV0hvWQl91;gEAt z&Hs)J2mjx;FeF6H5K=pz{_}_QHpZ_a$eExp{a9?Jd@^7)bEq)towRii^CzG`Q z$Txtx-n|B_Y4f`~nyRW;HKRqAAOV72C<%QOkL&8{pciIR{2nCBPEQG>gtWk72C60& z%e23Wfk*_-2_vh^%Ws@Kficl(aS=|i#}w&h*$MyNZ70_kXwmMJ8QIyyq*s zp`w6320`mwTC2Rg{Ij;Hr#aj~Ebd0d{8_RI;L}`QRTX*&RevaGCihYNX~^qXFOKMI zLWF>b&SIXypb7;J;8c~G9Cm&ALeh_IR7?)0NRy?oGQ#GSUPwrPE2>Hs3Pr$r;;1j^ zWT(hD**J$|<)KA!sp|_Unx1w)tusO&zK2)_ox!Bwsth=_HCBt)L^hT`&2PH{*~GD- zriK!tB3zlAfm#8S9w)iuKWECAOCA{H!tL3(eGfq&1Q6T1-)Oj8z8UX3(Gp^7T*qn^ zVjdnseD)(OG(ryJD1>eT)zqCGm-Wmd2sUrtyg~UQbQjq7!Qa8w$ea7&5lrBos;Vk- z2t~lCrGO7*Yw!^EXuw7h-ZWTYLk{r^sHJWMaDFfkk(w`99ibr7p$~a_4++IucE`b| z1nmOVme=pYV^vm`m!InuNEf$RiwWI2Y(VYWjMu`z7c_ zP-Q+5-`*j}Am9cee1Xk=P#MZ;gC)Vz$||wfNMBzl+c5=)Gv4NF-$%eWvi*q(IS`Y; zxil}3bL?&PDNDX*Ns*mcsse7T)(;U0^vowvDr*Uz+u+{g{fz0PO^pP4ZQ z(kTiggF)uGwzjs0P1Yshj*Q*ca+%nd6jrn}H6;z0bE>LbhdQsyX6%}1X~nr6h4cSP zcpnZ48{A(A)8NwOD|XcvT&_a81A+H~YJ`q8C=^^2#LScpM&2VHiGwc*%T57g4S}-w zkbVeIMO;2i==zO&P4#2OG^@Pf1%cxrj-xh$65bPm?ifUC`-a1P5eCL|9OT; zRtE*LXY$qJM6%cTJ_O(_!D=5^d>539Jy5h1y9%t?vp`mYfX@1Z`Wyz^0~$g zV>iZjzl3qpJySBztp>XW05DOIJxcsz1x~?QGvXpZ1+at|pv%BE!9tO98eBS_@xpow zh=4_R%IQlAwsM*d0JR{=D8+^JN6`Hn)S*Fu#6VI4N&>|5=f%H#R&+y?zn4}cWBb!I z=8QHJQgq_Hy)43X|sVkLPcfAR(+hF4&`(lP}gBR>)hYhfxj zfoap?2j*bkLt|`uM&Ar$x-l?wg_dfiJ7?ES{vbo8b$W%rjfH}L=K$8^$sI>jt){6A z%;d>qQh40s!;cyY_dZd`!f$e@&S9=YCLMD8^Iy_}q#vcNs(UUVo$wgn6kF%NapSE_ zCrS)>^3bRN(oLk9hw8FAl1Yg`N*U690*NNlKpVO}!-5EmA^>pw;9f#u06u}B#XV!I zyX?`@Y_HA%ZVEPKI1Zwv)9Y>sB@Rjy!3=7~#;K+rWj~MFnL{$e7xMd*{QAd?+Q-ogAhegH3pqh|;_>j?4 zB$ZB;q1YT$kj(&ANu;;WZcYGL9b%RXUFU&wXRGx64y*=h*I6Dxg%g}p;Kiyb1{V~? zl2=^Z1}Ta}&8_DZ<>k(uA0{;YVLa3!nPKuj(2WPM{DhmC`7km8_j{p~9SV@20c?X2 z;C^boacbRUrt{S#cVruVUSbAA35d) z?gjgLUm#kbhXUYWt_FX-Q!URxdDj;xQn1y6pSG!{e{ejQJh0@2GXPK~<>lq2(HGTa z&I4&0luzJF-uBIp?;e7-?vG4v*#(@RSblT?ABCiE8Yo>Hrso?T55LQ*uGTGBKP|@a z1d?3DxejngHnI|9pt0dYGZn}1n-zM633Pgfh8$#--Cw`{Ml(VzxCH7g4(vZzbY!x$ z9a6^aiBS;Q4*Pd!U>*7Y2UVK>qg#p$1d#=TV$tbI{CDtx%G2cWW1^|4Da4@(NJ-C- zIu`6-zy*{;N?Lk~8qv)WKLhWCkj?>lVgzF*c5W=qI*9n3oqWrSC>XLF+`t6KU2I>aUf1$t!mmgmDL{+ zp;9Rc5^{tKtj?YRL`nL}2?77)CkUZFxR7es#^+!HpO*gT#r!&P21k;qynYp2?6U!_ zUn%kJC@r6NxD!jsbDv38c=<_Vmh!&t%=6rS+S)h2h^d5b;iH@f6)8AN?-!l^Q)L8o z@ObBUR=W=4E%Y@al&JpAisfQva*>F@9pm-}=eg5*r;2TAdr8mc3z^X4B zKuLJzXWuq25--Ea*;YP&+Yu4rOUB4Y8Mbe|r=L9j41Wf0NLr;>Ao(*i8BS>2#(fQj zU{tE@g=CJ{OYdE;zU3e^+tV*}*p=7MFiY+V^5nfVH-Go>(>1}GrJ_ps^D&i&TqFIaVD$#NcD!qt)-5x2bXgeY3FPw_&> zPN8ll_SIzlEWOhgZ&6&ZiIY(u5nN(&4j6iYi>2sDQ%+sDcG%y}{}m(n_uvGJt3xl= z0HBsJ+@|i)>JteNCvT7dWjT3UJIMM~w}K4s-Fv3Vc2(dsht9R9$0w9Iu z&-D5@@TSQ`Wh*sbX7=hG``pxW+SKms!Ik^QF&nd-N3Z2(IgUm;rXrn1X1p@jsqh2S zBb~2L%=X*zg-%69(uXtpM0}cx9@5v-BbkLHLb-GmqCMJCrtRL=2e%d?N#CMcoFNs- zD5#C+cHklAX_L z^)jXC%!$v=is;AO&9A%1fw37@r%E@Qr7}3|OH9?AE@@wO<&bJ&Yrf6&a;VIbvi3I- z@mt|m8|y09FV$qhs~>y<)RjxL*9%Cishj61a074CN8|76T_owA5WM+r>WSk!iIM3u zl1kRDL;-%^?QcY!s#vAn_$5<$bZU*O{jefVJJUk+@Mkxf(iN{gk?x4sFFllFVs~SI z=+OyI(4_RGFzqMr%sHsMFYuD9d2iQKzwO;os=z1P)SQ`@`VkX}YtOp->-e;AtaEnn zN`pLs=%wR*>y0;Zx;KnBS7l1#Xi&bl=_oF+ad6m;aJ70jj2)>ZBq!$s<0mo6=rtfY zs&`vuR#Pz7i>z}B^T#~v#*1$6YMQ7)Ipbm3Psoh2KYsjZb$A2~El4k%nHqwBO-4{U zK`)k<3=g4=s$KM#tLE=beO5vD0RGVS&Ifp!T3Vg+&Ph&73k%U>s{m5aC4WHpMPM95$=LsvVlcSb@iBxIr6b6zqWQK#*V4=oa}6A zkd9SBKexCNR~Hv}q+L|(TwL8ppK8`ZU0FQW%RW4`sCw@pPyop52d=F?AQH$0$S8GWwHUk(j1NS>A zNpR+Ve``3UCRA0y%GU94duOM0n_Hwi%4eta?#nLo7&uGlJoibiKg`f#Wq#e1nqO7ngT=jgX~~ zp2Y#ufUURHbrzNz@gD#n-8^ptmcM{8li&x=th-HqdOI>=uqki8)JrRi*WK0Kt!-hE zeOZ8)kB{y4ZC%hh<`ooBkxIz+y2f$E9{P9}G<1jCkCj+=#4||pe@Mxf;`|xhKRRmn zf?4Vt8Rh$M*OhR$$zWzkpqcXf^Gt47dhf?)q@>Vnx|jNW3YSw-;uB|i*J<%S?fZl9 z3tk0U`FCi#bH?_e@yWvR?$`iSS?^@tf5ia#>1k{~)w@bIHu-w``e5sv0VBZiR321D zH_IZAEu8xEG=HZmL*04Fr3UiyFH-iv=P$#(&# zyG!I43DVob!otx-r|n9;m;`s-FW(JWpApr928VF{Uv||?zqH#|<%6OPF4rAy^p|gD zd0`h)Ojp?<2oxke7N9b3B%<_Jc!e~jfu#t>H1{wJ*RGIS38(OfM=8+sF5;YL*d-us z%7YEjZ?C=MlMlYKy#aSsq4({G=p#71-bd%$eIZLvCD3c~9)jwDmEuCu05{ufUwyp0 zgubk$>M|e~>L@P%d;GFzPyZEav^6 z5J~aE=SSBg+sw{T(u;?~&PR1tsXW)w(C`glBA_3g`a1k3CT~D=E(RIS%4g1OTXq^A z%wo3lV?JhAx8`^zD)6>zl>W3G0%-uSryLDuFMF_}VPM^4kNq@Ja#?^PY`iH)Cb9Ev z``J3vXXhi^-ht((Ovtb7?%6&F23<~JV>7wt6?zqb1j23_{rq|<#QjO{cpDoVX|I&l zo9_q5o@?f7S%J*|vEUm=uTy?v2K}QFcPF72yN02mT?93LAS@-&Ey-lXkwgfW-eGZJ z;U=aUKd@PyW(SMM4~DHG4`0rS?jl+?l{n0kZMNAsrHB{6;1u@foQ_*93a6%+2D7*s(R^?%^e6V=gvGc|6mqm z=x$#2^Fh_{R9>U$Zpcjvd6G8$_mvMiqPd%6C<%qypzCwBLD7ffg0QR8K<-Ck{=Tup*YXe}PbgHhD)=%>(0PP{c)Jv;07qe-kU1&}{wW@IQV z@`_Mca6R)_J@H?uJH*e_Zpa?nHIf~iMK>4}geRWg-h;sWHHF=Md%l=;mGb=ds&Me( zSdbZJAm4q?MxJR!08fJitFQTNNQyg?H*Hj3gI!;sVM8A>%#|>eiVb!)n$yj5eb0$b zOSPTMG%T{q*Nd<@3~5mv``^(*6aJ0>ui?4w@wWiY@e16^5jCvK14YLiknZ~|PMtc~ z>N}b1p84#)(7{_K{7}KqX*aS+Nq1{KT=e8P>*#t@j1K1Wx4FvdB{zQ$9saUi6WbLU z8`wVMxnn1M22HkoeLZh#FrJChM-T5UQLWzS)$g0P2X=(r*15|Eg|lq12{bp$Gu=dno@vGH~_=eQA z=#wA#jfzjxj-=TJ*ZE@>Y`nHaWuog-QtoS!!8e;6sH)$2v(!Tg)hdY|&5qZi7z#^93jOkNBpYYZenZy6`upki2iseChu*@%;uEeIW7*zS z!Fw@9_j#J1{;oCW##r5%1%}EACzhSbYDoMtAlxXe9#}iz31ck_`v=Q6hir0&3`o7nN;$Z z@!f%hRphYmWxeLEAGU?4;^1sGFRQxMWyXqq!$#r8rlZGTtQ`#C+qr% zlqPPInDN-4)EQiO7Oiqw7A%M8ck!mq$0{aUSAOR1a5~=haPFy=e`=uu1_w)zj$U6@4oJ#64I4G1o0dzTY2jv`Tutd2@6Sm!8$=xx` z$!_*BSF7psd)KJ%xT*MwiABk5)pP->SY(m%R0`TK59XWzRdPTSvnjd=G%$0FVltl< zfY&^Hvl0M0d2i<%&x7-KG(#vl9VlS=(8Z)Eb$Iy)Fy5rzJgOS5@WGt0zENi(=>;Ms zqbwj=ulnX+_pW1&ytdMFkISoIGz%2wZ!WDf7jV8p|2FaFd?(LIrnkKwCu$^)&ZjmH zndB#)9q}{l?mDg)Fp>kWL@!#6FT504s1vkH)~Tv`^Zngt<`c?-)91;RI=1WUx1#V4 zN4U9~#N1{OW&iG&30VW|#$3#07B+I3C&i%28DawvUn zmc?d3%6#S?eKVabq&#{Qn`3fXi*sxx$mW6ehFO0o8Q z;=?>$7by=;k(}?u%p|c7boFnhA7qIudW_sW7ZWx`t>`iBG0rMH=&sWgL~`9r+D88U zlO`{nyRz@?)D#V>ql~vRo7*1rWnIbUyz=Vae6y2KnF1q0Ws;^!YsHs^tN^F?Ezj?- zevj{@u8W%UYW*dv@cflspMr)sR@q`?>WQq+(Uvlg_h^A;X*GISg6MDXP@6Q zmvIIk9Eh}YU||jZ;4#Sk;Q!@Df1kJ8d9RhfJ`ETEA1Xm64KgljQSUpPENom{+5%KG zns=SSHRp2Tq7Fz!GQb&Qu1)l$R5u)$G{sOkuLG+O$GcIb0ZW14by}{q2PRb1!tTyP zt+)=GS*$DzKk!_0m1LTmI$T~EjL@fIu=e$6H99y0r$yhj2cPdO%I(>icxa@UShLl* zc9vSPc<#*?qW&ehc+&`J*EJdKUqy-^O*BaM7b`66f~|?-Zrm=fYvsQ4n`ZxLekkQl zp75$O3zx9r3D2nB;z-e!bD;G`hGk~2(1MJB*2fK(eu-!FKF4bm(R9qt*J`AAhu;mj zWwNT*6paQMRlh7ux+1+LvXK0JBB6+l1qFfO$2P+7kIn$vCC?xjf%Skl26E^2k54Y2 z4`^F%C{2p9zKlW_7Ne7z(JX?UDo6PtznRj56EbzBD&8&N(FeS zb(8<;&aN)r;pAkP&iHL3`g|{0a?U-!S9T*NC-r128-%6q0EBOc8XuYd_>E=a$+N?e z{cfJru>EVCk(FB8T5m!7bEgm~CTjOt>iMQ@hBv`G##?W{3mR+_yB?WNuD|mjf0ARR zTz6DcWS279GaZwXr>c11P@!C26_>fvBczzCw&Rldx%hzRvxa(^VNa&D1(9)!aWT*5 z^jG3Nj5f{7QRi>2GBkzj*d~{UZkxk{YWx5UAJ`iiMDT7LD_pK_DjT)e1|gvV%4|v8 zxm$R5?$OEbM_&}*wGHpN^IbkX1;O!J(Q(Yg%pm}-vA1@z2Ke)UAqllP4M)fI*M|zI zmgJL6i}#kxNg8kV1oU~I;y;1$>Uw-CPnSveqkfkh<>w)yWx4pH`nj|7PnB7nBK0$S z?xuSjX2?^oQVcj)>RRWHWUflIJ;F1hWHx7-Cy-g0s0OL)#bU#l=EPj#6&UPM8ItZL z!@_sSL$AkuZy}WorO~LW(de-!(^U%(Nw=?vi(7DT#%2p{_ViP9)hL2?GkIVc0DB*~IQML+~ZY=R^?>xG%$ zIrW`$t8Sh8{fsAA4cW>!fumI ze{7>}@%J88Q-8KBEiQ)gA0K^(J#zzQOtxKiVxYy?S=Exj^wHF>mM{}nM>>KxA zq7^ZDRO%Cj>B0v(u`>WANdRMMcVrCh!2ndrNkmWH%UXBYyz!l4dcZ`FfGs!i!O=Sr zN~#_H;|;p8{Ly7y7MP(H&gr)tY&^(*HCS0s&-xy}WI?o?xL!#E%Z9TmM zqvIv=A-j&Ljo4^WrU+BEOTLWUohW5>fa?Vcnynh#uP37DH`n7QEqW~I98(baiMXpq zkgQ?5%p1j|w#RmGt`ZrMB{P@yTi-jE`vC|?=&lS$4lb?(4og`p3t2O74FcKe?}xdb zqI3!7hQuHG`OVwTn9rKTcl+t@xPq$3*{*Ze$F%cgi7q-?+xRl}p9%bMa$r6{&t;Uw zj{Bf*4e#*xV+Kv&>i9;=a82y4c}xDhf)N$=qg3ZZ*?vRUYukFRE{gs9F}MJGLAiXo zZzBAzO5*EzjEp~~n2<>F34hBq$0~_Ki2nwPrG>@Cj)8$JILtMFrXG=xz8~cx7-#)H z#l)_O9PJ|bgw+K)Or5jis?EtqSJ(d$<72zdf6~};mp=T%g`+#p{P}*?uFg`4m|gg> zTfaJz_#1i0F2vUOx%@WoSLwTVxyQr@8(q2UDmSh^TJ@O!*y$h(1>aP?0GYGLvIA%Tf`ND#9`f{aP*Svp%cVzp9`hTPrIf}-&yn-X4nx|W)Ryw%!yoJg6L&*K z!#1t{0*Te)=k(T6nP!Or))A%n5qAr6{^z@)m5KTbZa&5`+{x0-=dBKMEF^I6BmZ+< z8VUo(ofaCSuh=e{`IF1%VnmzTM>ke?oRxIWID4pqEyH=%Z29L#MUn1m;@;q!bSkJy zxBMRHCOum3^QlMjdRDA}OXo;i?qqrT3r6j{m2Lq(-h*qG<0r^>I;it=cT(Kq4hl77 z_h{&1bf-7B@Jw(Q*(}`0quA3paqX*m-5EAAHr~G1M)8TLK&0KeYqxQrJfu>2d)x4l zt=Q_I$cTrAfj07`Bdz56kPp@tKWOcrKRssV=EmT{Pb?WrrM>9G(20LFcC{6rBjz)H ztl5EQt^Pcax`0R>KVDZ>AFASk#Yt$r!=+_TPEMQ8+SrE8EiKDNEu72WjqNij7#bcX z_7MopY$s%Nu3Y)R)wq>(cqxP~&9lUXc@-Z%uw9M{ zbnlm&Uf?_8O?leiyg5wKF20^Xco|Zt^+T;dTL5uFI!C4$e;d4B3^&FEgnk=tpQfm2 zX@vt`bS{U#Bnunc7_b9@+d+U2yDbHGGcraF0%GT2XMa_uVQXvK_ZT>=^D;vCv zv?MFg3E6AILIucfnA`p7ny@{Tf4SuVNB{>7yH*YyVtgyx;`LH9XLxQA9Kxp=7Xsmg zv<3$vAmS68x1j3DcNo(E4qB{x9FHy!3su5QT8-FItYbw$AmHLD*z)e@JJi`LWMpI*-wjlr;p;4x*`Nw6lAMC}SXXZB zM2eEz-7p6;EPUbudcqK>72wVfZ?hqqRMXN*LG${eQC5aW6K|!38eu zJky?$btGB8)r~INRc7~tZ2N{}((C5tz_jE00{gAIa5Y&_2x(<#lrMfQecjYlk?H;y zePjLa&RYqfhl5o*EeODx{mSxOpth(nS5o9(%A@#D5u?S!EFWp}_UNZm^g!0f!?AXx zzppPHF4$&~>;L`YKl&`p%v#VFqG7I9?+hwj0L2+U3fQrP(x4m=HE2MugeaVdHE4Xlk{ZhX14Jn{4(pQo(6)^L zq8euTNu;nm7>dGK#O&I&H%rAXYhez=KHIi#O|GoeUtV4=foTR*2;#k}zmeV-7pMrM<-4HJ^Feg zZZNilCE+~vK#!hX=>Q60NnSdaOiV`ZxPL7f%LIm8;pY58LVxKaBilF)Ii4;4ff%4p z%n<>J;tdI}Yz6%byXs;$GE!8$BW8;nnCY$Ztx{VY&$(@&8d=?U9D3rbF?h7#n0ryQ zG=rQ}&|hR<1;Guw{Y-_!Ubmlg?Gydemn-NmW~yQCD~7Eyb;x)d9lhII;>Ex2Y#Gck z!&fqEf17>!qNTGM|8G8N5jn)y-uP)h6W{eBHP_=F7sDr)&a*uc6JGOiL8OM6fg zD@(pU!KcOV;vuEDI`)@K6b6{2gLYmI4dE!Ew+Q{-%HmnB!^SLVm71dbO569A_t=c5 z;6%%Zr_vU3=4xnqamiVwE$Rb{j(|XFx1s8%J32EzEzX)qsK+S?Qi80-f2i4WNxy43 zd9XHL_0c8O*n9@cX)~?HYb)>f&JSHIU%bOyppcrv-l8pc!Q0@sX21Q-Sqs(AO{)z3 zPBdhTiw;Ck^K+yWUyeALy1vqed5){&khpz@-MQe|1KVE%fxYqgFU6v#-waYu{S8t}*UfxEzW~K*O)6cedEe^e{kYy}oVNb43NH8wUeX@fhD1O=c zqn#onGu4t#YHmhr`YD&~`lK&6?af+FGSD0riq$CnC%QZ?_&$`-U7|f@ptRnuj@!yj zr~2(#rov!sQ_8W9)p(wMQ4g8ksu|v9l--c*nXQVQgX-ee}UFdGKKQ&ifkM zJGNfjQS+t3k*~UN*S1o>SvyAN>MNal4)n&+dJKKD9^wG6%EKN9#G3DV23STEC1CHS zIgAI^4}q2nw4g06?+h55ap{1A)_SLF%Qy{D!2AgeZ-IUmFpj%tVw5Lv#%}60k<-xV z+}1x}h=W(L_bo}nGg0IywUrj7!q1r+T3|!9DuOp@o?60;N5aU&K0Tk^R=sWHp@|-H zWU>9RqxC&W4~2|a1h!iZ81BzJ>Z6zI(Xdik&R~x=Y^nLK!u02x)e@yQGaXk?DGq&; zKl^f1;Vi%VuEjr1yS~wvw6=cMleLK6S9<=XzU0#Uf$irD#@Wl9FuZ0V#mJKvQh zMA%E=7*!Q~XXv+E8=6bRuL{sg@`*-g|G}{?>}6R)L&Kkgji_`mwmVL;Mo+kC6&3o< znsp=|Hewfqq0sHyw}+cy4ekJENbG{9moJ~fF8F0~vTLY5G#~B1%%W9=4}{bW59VW@zW1M-GS63~Jf7ol0UcIP)njPm_v@ZnV!J zaKTR9up$7n$JDYiT`GKK8jJnJj2pU(0?7E@;dVH7AFMIcWbFD%;5jfEKznwAA+ewO zC{0lTb&oiK?J=zpNXD=L4wr{PK`}U>F)$qT_f27!N{x+?JNyTaWYW^ok}?Kl0vSU) z%v&AaSFOuc@VWOVP7Y+saKQxP0}!OAz$y~_6n%hz3gQEVOoY1;a*n3P3CGATc(lPe zb^3FQGHu)4Gd*R_cDe&^$M(^tZis#P`c-hmxM9FlC^PhPE{u%`K(b8Frf zfDcDO0k~6D+#~!C5oIFk;xNJraMN9 zdy}qPtb$RqecnVQ_3%8w#CkR17+BJYqc$&0SHBjhY+^-iE?B7 z(S&3T8V;YM!f-JUzeG$}7(E|yphE%{dF_55py-C? zj|riA`)0IYM_%K0>pB-WG`%|O!uk=K8Ll)(lM5Fsbe5U4$813`7nncE`cEi-h&XNo z{MrOUNBzpJ?#F>8|JGWme-(Z?A)#a)c+Fel} zMnt5-uuZv6$nx#w<7fFo3IQ4@A~)w5xvYC6q~_|0vxf%DWXbf5=0l%8;W88#Dw?01 zG-Md$Kpo=^Alt$GD1K042?lbBob@YJn&kiGSo zkkCbB7CqSp-rYh7U=el!!TvHnt_HW>Cc1X5sj;Tlf)#CJtzHszg17CCUvuD@TymoB9+rSa?Ho;tGM$xjS$sh5havyKz zE8f|QyiFF?)}82ek~vlanEo_E1$D z85)w)!+ZohfBvn%#h+)@4Y1j7=8E%P9{1mUaLc|G!ww)8v~Sp?|LdpG%i|_k%*Gvm zL4g6d4{RyS+Mq!V;W^qUJav^`u6n0x8vpV2pro&9|>myXyj}$(B z2~-E_o?$WiyE3SGNQSirrh5W@BRM}`UB%6))&3Qb3Yb_XKVwDy0eBbZ1ZIySAp!zqaeFO!Ju)a>gIa9E!r}maN^3>Ky2I%r<$w_krr}V2QriXsv#IEug3Is zq{4{eqHuw4&NCmp4=KJKA?z`pH5+o=MB{Rv6cL3_6^maZskS7k>~H~$8GdB`Tm=mf z;E`un|K`=4pXD~hnJd15WcT~(j)GVHFR^JG{VoUojtXbMGjDzMQ#5?eAXNHyp>bob>E|;vP%N5gUO!dvt?~D zWp)z9+=gk1!`g@2gYwQ*Y;?Tuw+0-%A6D?ZV5r0DO+MywfuVPOOV=pf(V0iSKGp_? zE!rd3T7#ofz7j0~ul;RZ zT}eo~yQ6SVf(3y_5LwCg?Gch_3E2T>LIRCIRsu944Ot0%q&tCBn7FRzYC(YpoNaT(^LwdvgDBkj`Y=#OQ}bwavq^bA3l27dHzkMPw$ZpSQM&Uc&#Q=WZPog+wiwxEk2{gE@;yDe{ z7(;}h@Z^DV>mgP+RC5T_8ehl3X9fm`6eRO_#_yzLfj$BwGR@smAJs~TQ~@;5O7Ppp z`jsoQE>C@T2tz!RTwL63nU$Q(bNfhiGb3Z(o(^6NT3o6Q`PHa>Dgrpi(tb-{DQ0c7 zfhMzKUjjs`xW{o1LY#B?c?hk56;~X%junnOO5gCGU&feM)!iqN~ilE?|`A>`1$-}YS6Y0=gy(I zkrBtz85{t9A`D(Sbq5F)d4AK0@Qo@Bf;dzoIXWPF1W+|5g8?sEq!&SVn-Hdrl*tf_7L5e zTUn_qDFxzKg%0#7?ldqh05}&_^3KTkc$bW34OtxFbiA7OpjMlnRr+=)4$m~q0B|}K&3XPyepPj&_O-_<`TWYf zSMjFdJL+oL2t`v7PDFTW90}dLPyI^prYEF6(bYrLYwZ0s;fC`uQz3W#$3r32Ln>6{ z{s2Kh9-yz>48+_rU#}G4*4tGcFqk}SFy9(0?b~1;bD2l@ix|ZPEpoEPTo9NE&K=yx z{b|$PGw`H(pKPQLQiDHK7i6(6Sj9bdeh7|eKQwPP+M{oifaF;StKsHVcTmZm4jo`X ze_Q|rgY}jIUr4{6H$8(>s00u9)PR7%U&owPdXkU+zC4HhFW1H(X~B?RJLorLMxjs$ zhz)`48q%Ytrzc@ti2#L|uyt^5C3X&Ctoiw62|!Wwwi7Q61y#vtYJ;F*Ga>JWS(_P5 zY%po4{nkRapWyCVy(`nAew;lVv2}3t3WIM=`mXDx{pYcERPiTTNB|MhDGs)n53kBl2Wwbi1nRIh!#ZA{`G|` z2oIq;+PoVCSaBgm1S~f!F3TIbIiPRE43Tx*Epbv|!G9A7ReOL(*_3xLs@7EtJl{z9 zoll4i=O#7WL2?$Em9oYlnBa;D77#Jc8~=zD0CpPkJLuOHb^Ni)7=+~_wPAJp&Pcla zrQy4A=j7i! zF=8h`8Ke$KW|(yKjjtW@B#FvImZLexznkILEcJXsPcSuQek|-pf%L2S`;qd@}H=DG1}0}SOCe#BIqBV<4Lxz_*RPhRBwhrAH~e?l*R^le!^ z?;cN>xmg2iCNPuk8w6J|iN%6ck|09~V7++@!t_c2ExG+8wD1Y*Lf7^_WXJRYJ9;Ie zfbJ>}D$aV)vl9ee-{6#=Gu@GqgNq`2=a@F%{kX8`R>8i^x1Pso4c-@eIX07uo>m1( zw)JM#*2oS+n@37hY;i1LBSYByv4@dcFCEpq*z7qaB|RHx18_#pjYdK>qKb%{h!?Pb z65QR{V92nErD$sa6vYD0U&NVDrVsxX1&HXEn^p0XNKnv3f%t{vp`2H)K^xRCn0@7u ztqp!(?uIzh{n`8F+>k~AN2r|MUsoi)wvaXvK^7XT;Y5I$$s;n7>If^~ zGs=)u5`?q*k(yZyBh|1XaAFKx3gV^EdX`b`Z-&#bv*oidkxwMyN-nkO&be399~R$m`?+nF z)}>1agSOAjEZ4$xc>OblP9tHn#_hvdRDl&xHNd&3t9$e1+Ik9qJ!K) zDfj<8>Wxo5#F5k4sev?$9gHw2^}_z^(Svn?oS>DFI^jgL#n_%S{*48P@oF4{08RJe zVZcZYMw&3k;5{3ijoC)fO(#wxM$ctg#$BY`2z|G#ZV_j`+aX_nRH-MR}o%NUXs*Q8mq2mXqLj`Luy3I*o z5#K0LmVEV|6jNZ`*7N8;w>LK$r;mP?J}hQ3uiQD0jS)j)TtxjVTg?J_B?R*!duq2_ zB`yVS6p?m%*;l1scx0b$o;hAjyCLQ>nh;u>&VwM(cn?FV7#C9fW-*%l3m-DO#07*( zHhtN^v5KBq$3ELuHL*r)%cAVKCVew62QSDI{DCeT1r>E-PKK2zZ=Znw(eb5}jEs)X z-m%lB|7rm;bcPTw6!hArXmR26T$2Dwsql-T?o{x0EW(kstqwb&b@!k$pF}oIaYGpC~Ch> zg#NXgfx#S0aqu@W#Qc4KSi#LRH8ZmlEiG%G9P#R112>+2zMhS{Kxz3Bg}j^Q4nl}r zQ_lTgVgu^{fgF9*#_CEdgP24GHj(yd>_XoHhXtGKAy7o}9Jl8=vo-DoEA#-TUmJ$V z5fs*{-miSeM-=NKXy-aEECQ=El#^c85F$jC1SnNM#G7`9HR2p{1_JgQ)m9JK;Z<{w zhlq>PLV#l3dj1qAC<>H6hCKA&bzh1QGtl;}@lR{`Bsez!3%SLc3U(ZYf}yi)AD`XJ8+K^u(EWIe*M9gz|6k>RVaCY2P*~k{&{$puxfA?B z2SY*?*a~}(MK;P*{qjBpMjO{@0&8G^wFLlTJ_dTqPHwjKUd3xN(^RXqRg54n8>n2+7$JQdS*HEr!{(99;L?u?6#OJ-q7%_9^3 z$>Kr*{5P|((Y?$4XCa;aml?W+Y5Z$gSctdNfZNeeWLCZ#g&&(ncDTB|v$Gl7nB~E5 zVE2pHzgt@7E8w2Mak0#ixT)*viuJ0N98=?W8k6*-NlY|Ro=~TvbPG;Zz6(iQPWt&Y zwTt^Ric9!d2Adwfuz8n+|AdC83Nk$=7QdbyoL%RYBD0zr`aS<}4F>8gnHeY_K^90Q zM>ZPYla-kv%9|Hqwt%!Cd;&H3$bEn-BRmA<+KE0L$Qlk)@OKUDv$!H~yet%?HTWxE z77T~~A*oUNL{QSiuGz(VE3?>`^8JbE_t`_|@|#`1T2Wf(a=*55SI#|{jb6CzxWu6? z%@_VO{#)eSD5KROLhW@bN$;c`yR~1P-uQ+0aY{3vayA%O`V3nyckLWud1blsJnazs z_gA~ir&^Lkbt>e2Ih&7uf2GbB##>v!^*H+54?4YN*_F3HH&R;P3>-T&=fUKfeb#2_ zXn#7_X1D2-ifD&ujbroFpV`ZF!@`%uFE%*ui{43+-?%zUE^h^*j)>mY3MDZFgil5? zOi@94xc5DAY9d)ebq_X1WQN8A1c9^eY$dlSeC`EZla^aBeO? z)>X*FUnh)Vk-RZ;L_9j!ys1Mo!uT-_^UmdZ_Zhw-=jGcH(h|j2f0L@sIWfpocYQWE zZPW_r(e#EZkjZjdNFT&Sde#`_r=lM%Q4*S z_8<5#H`-7lhD~PAm9hjK*hAQMocgVDfZMw|hUhl9ikt&h39BoGKm^IYP)LWl!X6n4 zZ(6XQEoyc!1sXZn;%>2P{HOe=F*T|9OK;$DwTsQWDP5^{TW7t$GVxuwZ*+&}{?bCf z692SQJ+XPDx-8#{{~RTGcc4sZQEB=4_+0I|XjZp_oXP?ZvL9Mu$UNrDy{GFZ#pAJJ z-soqQNPcL2mOE6hhUwum{B`VI+-k{L zPu1q+p)L_|Q(8>Sb6q`@EfJEA3YkTOG`G zul8=kzGci58XKcAUX;B^N8F&@9yE!A&WnM@(Uq4XV}&Hfh34e;?e$U67#CY{wAu_@ zF0t|d$OWnxy8`o(?|Jj)0ilZ$7B>Bn3+_pwdlBJo0istZY%#>EN9YzVoX#$GfwVC4cnXX5A-hTD{SHWu% z1!WxvI|OrnS)*(h=_WvuGWZUagarGGMH`ty!gkMx2un`20{$Hoj0-^xD+daH6;rp9$Cp+)7*Q`+Y-G83R7q-{HC%pGe)U z*B5zacgOQv*|!*|9NXU<^W{}dRUGv5e|;w>(ziV_{Ddu4RPedY_+58Yu^C@JTuUBa z40;e&P5UlsvYml8x8mH?D6(OoG%_)l6NTgi=~TI#~33K!MN<@$l$HzsptC4Q>! zUZO2??)sBNa$;~@eLbzONF*u7i92Pn`Oq;Dis9T;!?yD8BZ1S#pQxF7(WSR{{6c!h zyC&})9zC>D`fg#M-pMdMt!spMNg}s?*H6!to?BMUO9KtDgYII%F7uK7SJV0{<}ws~ z1J;o=BiDY}^4`00`#P$Wqo;?bOwy6iuRn^goGE02K=taamHZ)ZBcHCzYr=D#GI+?X z;3}m2-<*S1<9B-t$(R8p_mYpaC66zv?qa!1?tvtd=GyO)C^jorGL!B%9BM|KC#%z3 z7HxbdrGF(=nIBdrU?|yz$sa?g zJr9;Vvpg3+_1tooh$@c3)8C)$=cA)1d6jytuG@6yNq6B=)?rkroLIf+XT!%d*4bw@ zY$8=%)pP;*!{XHusETkhgKb8phrs{(9{rDX z_S<2I_s|mx3QZbQ&yBeiEZlH06i7rsY@g;?Whjh(BTpeC(i;%#!HlWp_U z#{IbuC(9%!n$blbH9)TCMwY}3K#v&rbxzI=Oub!4a-#d^cREcnRA0r>jTU;&yS|vR z5MuD;@6I<88>;x!;{7n+dUUyBEB0jdOP9)fu8>F}_t$ngl@_5x?TOnsS4O51w`p-K z4BxK*qJv^1pl!$^Q{&>Q4@`dk%u{#n+&KYJQFA?RjctaLW3+kdaL&bz{s956fym8L z8|FMJC1d=_^KKP)rf{jD4)1V7yrqcE=Qbi7OfU&sCylw8n_Pi(eaPUD=9v zM&Af!KrF~9(M?uBL?or9MHva3U0Hm*6blQ>@C+g6X=!Q68|;Kqr@*A?F(qOw+$2hw zf1khv;W|cCCZe+rz-nMvAlAYVQ>X;k)Hvesc_M6k_0`BWQc>yJqAPTt+fR4Aw1;iy z$;y1nz;f;P+Q6Eth>v)(U;&$9%AcBR()*GKk&Rz3 zmS1Fxc2l9^Zw+&}JhQsOtGR*eNIyO@uTJ8(YSylrr8FUn>Wg1>janAc9eRe|rLVjk zC>uWk?g`bvjblJOKp(#PaE+`^155Hm%vmMo!b`GUtBCE#J1IwVs3Nn)aCq8@dREe$ z;F{RPlDN4wg+gP`7jvfdJ(txEHFFshnnz-KOfQ!;ayZ+!Q5T+w*wv1&pZ*lAlnVZD zd_S22v`a-#FA8#Edk~X$OQ_Fu8PBephL@jQiTW#5Jm<(1T5q(VeIJcAM3E(b84A@0 zI1#(=cT(pA2N;S81YZAvP9S*^*(A+G6c_+zGs&;UT{Qqk3uC-CfJ=>CKy@5YpVHXW zWbWvw!N=uSaKA zKjdW*n5gEs3Nryy<@IIVNYr{Ewt>BIrtd7Vh|(6Fe3Cs0^&^!IANd z0~Wha^;Z_UT)q~MXq?UGr+;#{^jJHoJwo6##toHm~TMxz_BM| z-R}e<&X=7C6B`K8uP-l+NLK26_=Qwq_|GDOh;Q^hThyD+pFf*>Qwb{^l(nZp=|yRU z&}!G_yVK|wAVr)OS)^l{^w)uF45^{WVocP_Kzq^fdGqgY@_(m}H14`E$n zmpXr)x}l4^SpUT}3vx_U5LKCbXU7uRVMj-Px(98tm^+s+-W!}UngffVpFD;>@(HI7 zKO;_#XIB*;3&+6orLU|Y#K|Zp#Q_?7tzV3lS_y$Anr3oW{D@sUX`rUHoIRW~%bSxc z`3f~$@sFD;3WLfscH4@XT0EWnY-H*3CapKB?vCAdvzM>dZA9HcOCApNA=kBrd4LqSyGznAbJhKVd#bAF>hm z=FX7m`t|FLwK|YB!!rYa@GH3s8>R1O+@iTwlwpO zoy|)Y#{T`StyFufbPt$lZkiaJDuQe1Zr>Vu=rOhGYtk)jmK&OWitgFUs>`=ntksnc z6sE@lW=lU%}#r;ySdthdt&aU_$=lNhu64W zcU@kyQ4J3SNrXbu$tiM-9#B<#yWzWF`;iq?h7+D8J~+8kQ+bK{392D>5b#Lq>MWz3 z%U5km{}}rj^fP;F;}=G-K4p%m-w>$p0MH&GmSW_0iU}{ETlR}ZB(e{mJjuWafdYz8P{q<3b_wwFBd0$Pl!?Pv zqAb3Bn-$(Q)}g8-&Vp;ih#eHUE`=|S#ipR3Ff5U~(%?cza8J+@qn4BAfo5HJ0#T1C zO!u*5@aY#o_4XK1JC}u5#3@2akN6Mn-3u$PEFeJgz17}yk%nO%)|Qrp{aG+McsfjS zRie3nzrrC-Wz)d!g?AOx4ce_CUzf1phwMcizO=LRDXObK^7wZ9P}rO)s6o+d@4c>O zhXovxwC<5%-T@ksbvYoO@5G51)g(ofa1yd4pb}WtrSbymSTFqh)NO6EiK(QmojMZj zsn?njALLM}J@*E3b})$3U(&L^%#TE0L^%ASH5YRUwD3+F$i6H0Q>U9wPC|L5g<-&) zbU~NhMpqFrv9hajZ;6BZyIaFcPQokSmTQ+4XNI61tx)UZtc9} zDt>N;TWVd{OWwf7%8GJ<)Bcz$y157luyonf-ZfM@(k5Ts9nRC-^sua~>`noY$%v>Z z!HIj`-i`TorTvh-Q68yL=`%swxe7=~MDgmC-fdceP>+?>b;$n-$TGQ)s7aHrA#N|o zF&H|L!&4vM6?|5Z>FqFiz7_ov6~wUUhNFJ>t|q9>hOo&pT0pTrXm<)xjFISmz8(#% zJbqLkisQRa)q6ItaGrQ|mqT@rbN&rM9_E)pC{osPtxS(7BV6l`p6m@~TRwXyW zj0$^lo>6^B9)+=VUR{P7vhTRZxIED9_d1$VI&MN#%@T zFfI`Xf7t8DyCDxJdh$7qHndz%vq_Iv=3Z>?Ks0gRn@82L)SC}?$!-b=6_$r zsZH!%2hqeiQS^nj`NR7t_PcZbA&A*+baZUGG>8kJP-SJYLAcQBaLKRwgRJut20qU$ zHY6=q?MwS{25eF{35UnHqA)k-)St_7o9m*c;pKK>Qs2X)0yVhuycw9yFa!o&suV^v zK7(|x3v~4hkMk*+{a5XbIr>>UL2Za$|MXXFU7f=9W{;I5pMj6|qB}jfc||}+L9qldUa5`E00#9jHZ45?dY#REYv(S8)|*5(3QD0w`{V$QC&*`mE~GrubaR~jRTh%_cpY^ay{s;B98yh0 z&Cr6xkB*wP)rnT1>cLKtDUfaO^#d$RZ2l>wrM+rAcysJuc8%C$0uG48VjFMEf>Z_1 z8&@04vAVM11*+Y=EABb9dh*~Av0xSa6qD>;b(}_M4Atpy8Sc!Pt1;-4`{D8a{rh)@ zNERSqSoTYw>rMSFSMW~3)j47DMvOrZMe4K~tkmRWU!zDj%s)9nXD%?`TeU=l@5)4) z(WJpdxuGOC1!p1Qz6b-sc%8~4DIp7#!mk4u5<(Z5k#THdUMEroHpi-nkhsgIsg4sp zj|BBlNgj>1)d-;Y>O7|74uu`>0_c?9i_X)1<{Q@$_mJe(5t@JFAC+4AhE-$< dj~=Ehcy2TZ`m*@TXg%>NinO9s=9$a4{s&ZU4y6D9 From 795030aca54e510d190552ed0223f84f97c0f053 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 18:07:38 -0700 Subject: [PATCH 294/349] Add files via upload --- .../images/tvm_software_page_details.png | Bin 0 -> 55474 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_software_page_details.png diff --git a/windows/security/threat-protection/windows-defender-atp/images/tvm_software_page_details.png b/windows/security/threat-protection/windows-defender-atp/images/tvm_software_page_details.png new file mode 100644 index 0000000000000000000000000000000000000000..095eb7424cc2a6eb334a863923742cdbcdcb8936 GIT binary patch literal 55474 zcmb5W1yogC_bz@A6@wO#Mgi#%q$E`u1Ox%;mXhuUgBExJDJco*ZjqE05b2Wc?yftJ z`hMU2kMX~E{O%b?IPSCeUTe=a^O?`W|Cy{f#tq^d2m}H{QbI%lfw&xiKwQ$ib`_3j z9>=M`uj^J4sVTlavufo4JgQa)oG0__FTrL!v5nkL~S@Eo~5) zc^wjP2;B}2iM+Jcw=uD@GqJQl+`4|33Xb1E9v8N>a<(xsGPXnHV0G}qQOw^*ZC>gk zPrYMjV*V1rd4P2tzPXP4=DDSzoujVJON6G?1@iQpzi)10t8bqNb9`?7j73$(SIyoVEEb{j?riCSr_UPaL#iQO5{rB@_ z#3H??^-|A0@uuHrkG=0Ueh2S*9c&>C42+EYd~r=pGSgSDnz|h=R2RdG#1D~r?M@f&Pzfetd*W0%bp9bot9Z8uOaw_n;TvD36IO5PjdQ9+-73KvG<5^Wm8<*oQSxxmNbn-jW zxMb=<3%+?`FS4VY=jRB~k53OIc%Khs?a4$uVUVOmRBSU_AP~)WM0i`@CRQd=^OlV$ zzU0v7%PTcq`7?q@Uwmn1@}k-g9F3S$K?jBa-{#3NCG(qE(yogwej0mMG4sv^!Zyof zB18urs@}X*@R3l&lH4xTZ)Vvt?Z~n{6c3+qV_GRL6OsLU!!eD~1-fJY?53>5SA1G* zN|oqJF)tQ|OywW%IBQ@hP#oV-t|5B2Fe8Y%Nfe2J!LCG*sYn=eti-}srpDD0s;HY% zra7zM^8QZ8FKcu@!{~9(4MN4iV&@;J%?6?75uz;xM!opG`G)X#gzux}ly%=T?Vp?& ze4LP^j>$9o#u!(NR1W0JtS?QZyO*uDL9e!}z-*CmNLM$fx3K@Q)63po6;_|LwfgDP z@^!2b;$kWE7qM|j0iVzhxWR7;C!D&#pq1Qj(QH&~M2S-+t?si_3$6H%3OhI)Lrkuz z3pyBJd`sWHYn@p8GIIAzkqOCWUS{W4eH|&>rpE*uCxlfdm1p6iEk%u1#cdbk9Fl*9 zBVyoboz_}zlGOYFVzhY&K)BlPfFvs=OS zyWFQ%a}s51JLmkn`XV&~7{@}V*TpwDCU!?KBF1BtMO1Svh~GMPB{aC0j8oQfKfTT# zOM^%IN12o7HNHAvT)A>(ZD3-qJ!&*Jf4^rx$q11Ue1vzw<0_;}9Y(}m(}Z7ZP1s$+ zKfk2&e(&oWOUt3Mcod@St7ubQa4-O5%M z9UAQhqRfl&NtPiWj;7%)BksbA4}Nd$+IVYtKz)ygONeRwo@apiOvrHDW9AH)PTu%C zOIr1ZNqb(8H(#CZ?c_A4a2qO-Bv6b0o!HuADRgHSmv6nj&kH-``T3uI@kwi=Tq@nI z$sOU8zx;`9${K?^kMlf_t8rD0i#_j9_a}nngdjqq#p>AB#BZ4J-P0P7mz%F;zC=55 zB7*D4ef2$&S;N(YZ+B`LTU!gQ1(VavWN=Y}P6iH77A&nPP5&;8>?5gbCLF|tPmjmC z+mg3tT2LzzNyE+=nJt63?giwnshD&5?-h>4u48e#x)A8mYS$-fMGD0*QSgnAzGDpd z@>;R=mh3m3_k;_+T{Gj~7K-i~qI&$Q=&;1T+8TNH;_J!I4Knpy-rc8deHRfjwa?cF z3;Pce{RYAYsQrn{$#(p6Y!-LQ4H_oKp9ChQSSO+g?!EtGY8hmw6BlO`h?ij!l+58H zJOLl@j@z}*lby!YK;J6|c>GJv$nR9;6Q*$*_CL%?WD=McTs*fbh@?>?kW9P7FSP5C zytITfGl}+#LXSp$o|{F*>|iN+LYIyB7LD-RO}7DwY@Y-HvYkvboAu_zTJ&#rj0@g1 zm9NAZ!$fdySiHb6~k{rYs32xhx*~eLVd16{x z2~7uqfq~X*A3H<3O&w*=&(Fn{nm$WMkrLhf?fh?vrQpE(>f6VseS?E3d3l(eoSYe% znXk3-eYNt%?d>_AJb6M&#tvaDgS?3AVV|P4HCsSnU{b#+N_2wD{Kkf5*)M|aDZ^Yc z7XobTJ06x74}Zrjq_kS!M@8MPs;a_^5M7I)4!aoa>HV2g|0nFg=<;Zxw1HV!S!(gr z42+DZI$8qM)sf@nN?ppi{|U{x({poI5Qpa{8|o3%mk?N3Sb@SFBkW0>|Bc?t#%sSs zOjExn|L_s+`m;!We%BEHJ)zIf|8MZ3q`Xx3pW$&h^^*TR-4Age86*F^g8l|r30K-^av0H0avDiUwLi7sT1Oie(m#M-Q^0(R9*<_UWC@D?0Nrr?vFZuAvP z@~g+0OQ1QEl5iUlx(~tV;@&aADF1dV6?0kP{E*=8PhsY=hc3HxTApWn1f!szynn^U zl#!d;l&fC8*?=W9^!b9q;}8W_%EH1z`QCF7(`t~M02Oj+6}o@^^or%S9ATEE{sJ?# z7_agl8BzOc;R}mP{C7P#<<->#r>CberN{gF`;$sa@W4LEimK5x_4JZcgzr!;7yXr9 zn2E7*9SjRf(w{V%3(|o9xICxvV+@k3t=PNZcQ1Bh|h|c@z!&S8s}39E=1QZLmAs34 zF8upL`dsF3y}&NSeIJSRz5JcniinJ9y_!e0v9~ubWXQ-}AN$%OBF|_wM1&*1@}Cnl zHRDr+pY@MaXgN(?K|C@rpcXuwMD-QAvbxnmVcG8z8XBrnW=51aD<;zS`mpc8Z-ML+ z6BCn?y~!$TjQIF5;M1o&zO;~7XS~uCMcOHjy(^YpG93fM4S9L_HA0ydKBvu3zg5CP z<&QHN8-L5S3vnZ(^k1oLB>9rt*j>xweWf8HvO78b^FcD2NLRus?=2kpK`;j7`#xbK z7J?A{>h9|BEm&A92L}S7{rT0^U-a3IBSjmZKYv~$ygvN=;{2>La%*SBtxqsL&N7=6 z+uuEiaCUhSyS3iQ=yw)2mJl8uF0+=Mm9;tMI59OBrESr_4{1iO>0k;P8UhlE@=H{kXVxo4jIfe5qPV5O} zQ2(lH#;EIVw|K5;)Q1o6a&nj&o1681RaobaYbhw;j(c9XSM3d`chUsr1Oku)EtBOvblbM5f-<*r?N=rL?)Vh0~6Ui@VwJ zpi8GGRWhKAHy$(lMZSgo>hs;vHxpz5sUHDaMYHD3WgYYig>UD!JR^Zx) zh=`<|oTsZKh#a-j8&qQNvGeuy^zK`Z^S>u#dt%Lks5?E{vEEx&D)dlMAp{43*CL(U zwV&*O$&qfN(It4o1S5|KC*)ZjzAdR?9RjQl2}wD5f7>^Q$G>h~s5_&rS}gSXeNv zt*x`n-QC!-o$yL2lp+?&~#PBNcR0v93ay1ba<(*U%uf<0V6=tQOO&3t>6K zAPzkbdqNj7bI;2j5D7W+B3?HL=a|-7&rvd|?j#LwlUy*=6?QpN%?CN=j5|z4+?4p` z`D9nx0OPMyLsV2&e(UeYS5k_ka9mqh7@WS`w?-r_9?fBbE1ST7z0R)JeQR12k(OF_ zes*FFALUCal@c?QCM7mRMMdv&aVhV@!Ye2!h7Zeoav0uiU?~J8AHukTr6_S#Y z`ndM|T(w;&q^O7;Y~*7+2}pmM5cz1FoJu9EjEoI^na`(YX5L0e6Be2~KatM5Q>56R z>aZ?3`j2NG!U`lpeea%s*Odm|wqseU!noHy|Zz>+QY88!s#W(r&u(dMI^hq%=Mcs9kcv zmHSF165NwL$4N;^(=?h{ZlTBj4Ai>pWtl2lb=ncpM%c>YSe*AwEeUW@l$7KSyaPkQG5n$vOg3R-?8nGaIIy_74nf0A&`TL_r|` zkNax7u?Ykf8WTf5VD1t(61(fHS>r~8oXTg(T*4gRlo+-(XX(0Sb_?R^MAq z{mlYTRFsuz1cfryZd7>2G2d(In{I1s!%2*41RaCvdZnkQFBW@VoHIA~D=U=#{Fa#_ zuch$5ZtCvgi}QQ(N(Q;$Y_QKHIL_6!PBwoQP9Fp@-kxfCn@e#l*7ygJqa<>4bW~JQ zN-8TWYbZa1T(DtmtXjA{CM=ASK@svzky0PU*OVq|nca%u>cELG%wL%BGPU+xp7h0{ z;L7GLLQV$hNkI>o%dTI$hIC8JH5*`{VPUwWJXUo~p$2Qu*i7CS`E&SU{oJ-T#Yzzm zX$J4vRKV-$>B)wkPY>?8GnPA0isk4hgY=FNN+(u**a6HzZ(o(${iAko790KbK~kt{ zwumHm7*w-O_`$6QNU@3c9KPzz^41%7Ler-a*KbL4%3h!tDK`&SeW?Hzz2yNv-p7yz z)vi5lj@A}^ASuG7`zKOLG`F=~Pe@3hV`YT`ZlhqWvZA7HY>Z4+R@Px6Qc>v=T{!vn z9AqrX)g0DaZ?4=FDeVR;Z9Lh2=$ab43%-X9D~Q7`o8E+l2&@M@Rltqg6ciK&hK3CD zbeEpuOZHej_yVHP-&^k2lO;WJQ794<6qkSU zINZ%x`OzbdbPg6rqbyKK9Hfei@9#_t-8+`+SmY=z`$kFYqMU;*CFLvc=P5G#4ljkhY?Pq?6VALTUZPZ7u3 zUFt=1KiLgf=)n{D$hvDYj=$}=qfzWPh$=qyTyM@NnnBoFJIC} z)}HN;E)M2v2aduDeuKnvlzD#sov$wyKflIaHKd#RD+9R*uf3JQhPF1zs&e}kZ3tfq~2eURetv*CWWtZ97*t`J+9Cj?Lsvc+X0)I? zFSzh$T3W#npE$n$fQlDC{{cI@)ye>K6Z_FY4b|#+HHmteSv~iJ+uN7zk@knBqLADj zZcb4ydCoLrFlpD2a$EdbEFgrLX6PeVjw|-Q?j^Bc((4d7m^3PWu8K+Fl92@oxbFK6 zLfnEP*zf)O)r@DOW>7_g8a;E*PfosMyYS-*0(|52{@Unt_1ITOeW+5%aH()&PL5ad ztzkY@NAs~(j*cys9y=sWdl{L!4L-V%I0i_?Kqy4-O_zI767IRd_YKwn1tIK%j`DMB zFmj{zf*eMi-uvgSunq^YC_kj@yOT&4ua*mv_xJZF6!NHAK7q28j*01=Y&xpW@k&)} zED6oiXhfZxQ_SZnL(m7OleKaja&il46%QdyZGIVGhD`&Owg zon`G=nW|8v&*zsfU;2AAG&F=JBn0p7+Odg<*09da&FL-rm9Wa_JKESRZ%#3ZU=;=4 zX4M-i(1piBL!cAhMKar5eVe#i(bP7QYCQFyK=UQ3CVeS9>HuVr2krAbDfetB zGaoH58)ip5a&h5Jdm8fwv^_`T3ocki%TS?yZopa~YYlc=Dr?Q*x79N!wE*zB1cJ`U z$!RRmZNMfZ^jjM(PpPWXXcQM&la|758~bA0qIcrFGp`GEH_S&&Ozdi!Tw*ZPirHnI z-@kv`o@?JasJ+mnu0`>?k^1f16OC#Y{M)QrjSsr`-}>L8)f=m{Kb#I^-P{}0)}Lx1Sbn`UG#E*hU6b$N<8J3Ghv#COI# zK!fUl@SzPgqSxv@010>m1bRo?b4bV4=zj|(+DA&luq%Ptqt@g0R&V0DqBRvN zVx}de<<}S6srB{X7h29&$}Pseft1zoUp+@UfCK^8$*Cz6ZEfvemG(Em6^cW>Zewf9 z29=ufEu7)kBk$Tn1ooqw_8}*dkdyP3O&5k-M$2tWG|>F)^mKB5-lr+>cHrgqqn(A& z*w{b}60W+I7PMP5Paj!X-3PNrLm-i(Ut?ozy5BCprw}4fbl;Czlv^Vn3}aR=^V@@L z`o7VRID)~@;{9XeHn@V#$JAhhe+a=JFo{CeN0!1`K7MbO*3KVYc za>IoIB6fpoJ{TlE2NRwY`1tsp%8x3)ex32WIPk=|ecRV@+!<|ZYAUN=YI{ZAXeMK2 z22?~|Ma2(bJ#xS&8IXU{08la;nnG;z|FlqWF-Yz z=iAzgvkgd|3Wo%Fd5OKfy$u_Fz=hVctvHZPf09cS%ng`>IUpTBT;XxtoA|A>Q>HZD zE@ggd>NUVuv1d(gr-xg9AtAoV;>^|-S!~BnN5iDR-toh$q{70&?wbwWKRiDE2IWFa z2!(HAVq!G^Ktls+gAc}Ybkw`aW!4b10DcaQi$jM31)MeMtAQL7Yk?)T?w;_@ABjS& zG@h~&5_Nf+UlGxHl3w&U=h@n4H;@26JnH%RL2aN40jt*gi{tzYQ(N!3O8XULe1!AuD`P4U3Pjjx`Hc4|_9)!j#0NE}Z$QxXNlU{GY;`HmPsxaz<+l$2EC ztom`^)_VcK58a8~wb4P@P#m1G7s|?4Z{NPn!^f9RqZG?d9As>44EZ65O&m>RsI)Ut zhyoPYUg7MA1aSbPjG_5`!e`prApl4B_4R#9OS=kKHoW`$`<>RmEd1`1b)!n3Kf0s* zoBCn@7_f1C+t@Y8M!q_3h^eSVzfFM|Cg-GTqhX-^S3tm^vt}9okG*D6U{Vg^tKX<2y z2PS4@(24u%mx=}wWU_<=1UykwQ$rKi_f!Zo{%%XI!fAa+i+q5BoAK3_we0m9?Ylz} z>ZZ>CYA2iAH2l-+qv+DNov|v3^4%-Xl4E6MT^%WvcH0l@ z=y>Yn>|Cn7nfs~R*a|>0M4GMQadiqA{m&VRjv0hk=GVZf{%l$wp`-g2r$4>^5%LVF zmECI$jc(Z*@f?jzeZB+rP!@~lLcHV1FURK!dX!XD4J>DlXpw@f>aAV2%W?nq6{Kuz z*bO_PlO*t-#;{*e%T-pSPyPJa-xTvmdj-<-CYz=Fvg_0L1j7K1z0^@GV!h|Xc zNkzpEDm3{{p#vlWE*!Fnf*6Q^HOcnW<;$4?!pm}60yq>D`IQ()WwYj~HFNE=XOg3S zu$~~*A;;1g14d~{%A=EN@+JTH!Y)69(9#mM+#&8d#kD(fxNS30f}YYXdm!6@WeWe( z2U4=K%B0+-`<ga_ziu?R}P{3BvKk!Whsp> z48YU1n>QOE*%F-qGDpCMlbRYaC;>JF1rqP=NDxrp(zJ9j`>ZlIagnwl(JNI5I@f>R zUz51Kll{5t`SOc^=Og)`#Z5=#`1sz)FZBm@Pfd=$NF+w7sb_|ywPb$!gkV(8c_b$0 z!?O^p9Ksot@?}LuU8BMZ<>GWfs53GG0#@W%*TrebaMAj^KaIC#WfqMJFE1}d@f->Y z3LP`2k_70=Oc(n47z2@xDL!m4t+!@mGU3 zTxlv}aD!{;Z$?)+%8(Vf_6!dwFmYGwo<1;GzslareX=tE7a$f%t^PnYdrl+ry z592Uosv5r?sRKvJAC>o_Vq#3nD8jIWPO-JLw0Nwi->H_q=-m*Lkhm7fr22;Ffg#u= ze!5&D!Nm2Y;!s*KY7m~Nj?NuqOAksgE|L|#jVjb!AKrxM)3wkOMKTR# zWH5kfh-44^`s#?~QeD$9<2n<>-MFEvt2<4@NJWL3=(g?eBv<(`%BS$%yLTBh0bqs_ z+s378@4UTH?%zvKt?BLQY3xi=919B#O>%iV)UyxH0wqWc6>$w6T?7amNVNn>h`!1A z^yyJaxL&x$RY-aZOnPaoZMj_c&6>Ejx3`f>g-9crf*5`2{=LFJfbsYSqPOGFdTQt! zauQv2pVf*t+LTJAeB~^Y$zf`uTvNBUE*viW@Zv;5lDc#ztJ@gqcS7-^+4Qf%h8iH+OiL*(mf}9LzYM78-rL^(2L5W~r5`rJ%`=@`(Bk{3 z*r0EmT7T4Tb;09@?tKg&4066;4-OyLRmn!1|X^ zQ495&Zb0HKPA$qz_TW_)h4ccC4(|Y1y|IJ4vru<;cYsGQg%Bp7qJb0TWzoF$41i>P zRv{oE38YPMdQx@XCg%ZghB0I~WhUyHM9@P?t+X=o0U`z>=U6VJgQmZZG+>8j!MBgk$mL~l-K|zHun$wS zJI~rJ&0=Zrq4q2=ALTOU_(7S>mxSwal z&w%qDDlrKk%YT^*Ue36`2w8QL;mD>pB^e>9IeodH;Zxyqg7WAxk}yf2H%VBu`r3jq z-UJ5=D`{+9A@wTa!v{Z-ZxAQ~rS9b_kIp+AQonxvI;){?7PMLxG9?cDVnmo1bixXZQh+8xg!6a_MP4Rb(n-gzpy@Ok(<hk`Uh*e+w z-+5tQuEdUaE91?+EdJC3BSfeUmbKIQTl0GI-Rx*RFTHT?vy5s z7`Mg1+*Dmgg;TZM0W&9m8YL*R&%i(&t)84|Ae zkc0E+2IQ;MPuyH*0;S8J?KWugbAP(cC0_19_r0C9Hb?C-mwq#P@mVP~FRvPUap;IC zKw%Wfh-h0Ou`?v0mR0ldfl)Bek8PE4rx}bUhtIZR9$J>8Wx2yc%)_Kh!H~%6{|b(c zzOZyJ5E|(__;{-v1u^j}r@oUeE%Leh~;k0A^$r*6uK0=9t! zL@KOPn$DTsg`${LDSt#k+){D8ql8SBD$7&fdt;`8l858}loW6Q;LMhOR)I?iSg0pku}vZnuVExTd`DQq4sCw9*(C3T8C{Zei$~E2W!s;4K{4! zNLvK)MT?}8y?wI_SQM*X1Nfp7DMcw!ein62V-p`7Zf+g)|CVn+qHGiY1=$hH_!{~G zZ&;W86)OE2v=tJ|u9Q8Djx)I|MeHqHQ->>EOa7vNpVkLuy#PLJKb9@D* ze%^Ow1(^Tdqm-48I^b&E#sXp!-yxw7WwSmfMJXeT_r3R8E!)3$F{O2oz&pBQmzK%9 zn0>{zKy&b1{WmKMPDtK2ib^sPEFL${AwRxx^U~)p{*?b1H&w=Ud_-1&@M>jSJ}N`2%Y z3^KAyNG6s}`X7h;+v)cIZ`4S{U$Pr=R$~99EaD*kl00B8890Br190(Wum3VHO&kBq zyhPFY)2u|!o%kn<#Lz_aw42U24BM+1ZU6}?;@tTB z%Op3}_`(}1hLeZuD8J-P!`E%%FI5heN_oVG2?pP@$Gq+h1NZ&q79l6`|Dk{K0B37N z6Tnd*2{f(%ER>p_4uK5|ao_mo9i)dC9v=R=WQXv2o-XUZ?|!^n5BbDD0GUHG0)YT% zrSTX_vcf7rYN8+7(jX>b(+I+=wN-*|T)j`zXS}UKpbf0Vn$Y_wg2$w`qIMR>9 zDc=B+tgo*(Y|&{6CL016Ocfmf=VW6`EYp^vr5ec-5`6qCL1J%LSIyjx=A!hfQ&Xug zU%4{ODQi=eHW&d6YsNfHHa50vn3x0$eE_H8ugHDmxIW==l3Rh9p?NafJ~!bTeE0)3 zZKd#3jlq*SB*|nINs@t<0^T6|(nsd%GG7?+60KYU2Ok%Z###Usv?yPL%`V;U$Trp2 zS1!Vr5rE!JrvaDYI>>OkI_80q9soN5jna?n&yF}9)_?f}xiot3IwB$>0s!)oi614Q zA6gXxt5f#YMsEXB93avSjgszkIf^Ycaw7)^E}%MmmT+48^`&R24AJY{MBV*XX01{IA|b9nq#hD7GD>l10N8L! zS0RZu2mN{O2;fk?ef;+7T|U0A&l6sl`ZLv8PpBezZ0FHS)R+;y6u8J{W`PQ*P$dcE z_{k3To0E^9e&on(a)2hh@`3Z&v3>t+Bg_C8)5vLy>SaF2geP0ko-n^Bq^wZXsD@lx zc&J>9{C-o>(yIvM0!=sPQ*oZ56ELYD6LlcU_|5)=bJ(B>Vqj#H0%?0Fe+pXo=aqms z=7q<$gEb&=Dxf054uWF(=HM`xHnj4^eeYhre0dV!#c6vF4?$=KlOgx|$RB(IFKPM$ zIK9ol4O5&5_u+&&UkBlU(3JN~mJDTxw^5=k>{9RQkVy(EqI&tE-9L-al4^v(!DEx@ zEfOJ$b(zR?0lb@5ffmtS7#q2^?({S!Lz3zkq&&~4(?}!S3QNWS)OOn+HkvL4R1k1g z;J$(#eG0x2LfY8l92ynn3*=jdn(ToByR~rK5SRmSL2`r3nN!`vIAn&tGcKm;e(d2y z(s2Tk>Qlsmid?I}<{pcRUO`NPqB@;!wKTl~hg2klY&ecV_Lo6p4vah`<*f;u;*|=q zT4YpIdh|&PPU@7Mm(8^RkpKZ69+eJzN)ujfNpWbJ!qS(jaQ50Qs;UPOvR#4)Sp=JW z^X5%soFZA~mn47aYU4*Jfq@-vx3i+u=@o^OlSclyX|f1r+Wzd>Go9y`)Ye9#!oyP} z`dWSU9q^7$^?H7ONlSItEY$OkUcvCvJIr*`dg$s3k_e5A^a%*KfozEa6tMWu+Q@SQ zgVgCEhg1N*om^ZfA(b3EahUZ0Al=<+kqD<0$u^^-d1S%B&W;O~!G(dp0`miN$yA}i z*a35AEVCF306n#@oH7Cl!a4El6hEPU1z83x)4s~l{5p_>n`Ajr6EMYrG$WFiON2Z& zKN8axu9&AviI5@|>7tU^K*fFuh8U-+x#pw`*Q_YrDC zBmXGiU%!Psvo8*y@F5Y>XDPW$$t{E)LtO|SK=Je?2OZrt zSP?=FV{A-P9xot>BD@-CL$wO^u0%4c(@Yl{p3}GnzJHH*JwC0CbBPd(nB!XQVG}D} zgDj2AM+1jjI7CF5hh}~IT{t_qZCw#*3tiAfZ1mvY>3G0nHR&ax2ijWjTrOC4O?<7A zQZ7LX-*AA&1*{)TCE&Y&v*-jg=EJe+VT%zdBmR4zLlT16SR<+gN0x#@$@a zF$6m6MN48SQtf%U6^YJD{x3uqveXm~Q;rtiOz=A;-VDxIU8sO6n&J^O5P`k$y14j3 zoMIl83{j96upS=e4?^>{AvZmas;MEjx3`D= z9gm^<1WLmnRs#+$uHL~WppDQg&f|T$0&PPyo#UAnaHXNq(a82BDgt~5zNF}p>*L3d z4;NEHu!)HLp`A3<$vtsdM~XU6wOGvT0M2ji>Jo?cnGZS<<$!jXS&ZL3P=x%d?SN&j zx!E;@&OnZ8fV<1t-k>PwA{vDo!qU=G)RmsgnXl9-_MF9%H6#}HLe>Igw#Db0@HE`!cE;3}d{PCRf(bQC(Rfd_)ei&Wj`Nb#$9tp9ol6wsa= zIr{D}=-9~#ohh2LF+p^D_jUmBd@4vFwi_Ys=h1Ww5bCD_%4ViGcyx9h%v^u ziHWl+Jxom*3_Cx1L&OLagb(+|Ss542@5tcaRAT&tM*4;8Jd5@+yEA}aiKQ7b8j55C^YPy0qOusMqbAKqP`!%mfWj8 zJ#~xYbHqfpeVC$XKg}vUe~v#|+=uBU!2qpJ^kTzK1?nE;NdFSd#H1EM9y379;EKJu zINKJkQtMG2-FF0^3>*4KVu8G;v~!+u&mXo4O)V|aGkjoD;%~c0LxYsXY6?e5-a}}$ zB5`FsJxW->7$(TrlaWamyfXY>XuIQE)*R75i??%}5uTkXN(hIUpa0kNugB(Fzihio zRb)~J)?qXrpkF4-0EQBH26Z^&{L8Q|+f*?@w@w97NN?>ia-awK^`YxN)42PACbY_g z3OtqgowupaPiikn0FpsGwUxHpKa-J^tOq_DEX_OEr~=f=OBd%G7r}6dkGI63Uvocv zB<*V)?a|Q@bYP1slwn_52lR!2?TQ)vG+s6xNdQ20+8cE4Bi%tAlyiI>K0kjxJKf9o zRH{x82Zk>@y8^Wway91{R4c6R!k!g-wyO4#8wru!YjJ6vppWIOCG_umvc zTarWh<*61VynhtJ5JGYhv~4}vLlyfu+7dR$Bqvk8Cw+(uRqX1gN27~=-#vm|5eGXc zivMY%HAv3!_Iv<;223t+Ex@cb8&Q@Xq@S#RD5qAb3`mIHNQp^>>j4Y6e{$DVHtSqy z6Ey!!66Rx4KC=IAeEB^BU3yvPJ|Vo3jW*bxLrFt(6`rOEdcd3Dc&35CP~oy?+R_Aj z9QryTz44m>j-1GvlvIKp8k`6q#${+bGG!sT-~Yg#1c=@Cm9r`y9yJy8<6j+Fj}JCj zE$#rL#0rY_;A-8H@b#j^KCZDP{v)6iyn{X+1MZMQ*eWRay4^`kT-MqZehWf^VI;IPX=%&AyxPNF%LZvgqM7Z zn13`N#H}<-S_YjbUsZ% zL=T$fr(o^v`F>~7u*s(h_=WGT-=g8+#ryg^wt-qmXaXfvWdRsI2(P-jM@`#_r?a#H z2VX1yJl7mQ(gt9nH^JF9r3}Lyu;3HoyQCl4TC8QwW55ppscSMqshhvs165d`3$n5+ zr804Prx@`w23WKxUKI~NaJY~4+ee+HmMyU?_$!Vb9?pcsR;QPBbfr@WZgk zJ5pHfM4cq_@lN^vPsQ!%vbzMGIeN6-JOwN`F$ui|^-t=&(FX2r6$ufrBwp6uyQ&fu z?N7PJVRntVrLytq9kaWUath`$B3NEPMmdEBv^cPwAVK%W5WYcECrpWo?>~G#h%!kxe`I{bOKnIXd9wpoC7=Qkn$E!gNy9R! zC9~NfMnXf)$Al!Ix%4wZS$@0^MpBXBoRadmZX{!vUxu_QWKRHnB7F+5Te4-X##GUX z*e^r*&>(biBnKTtB=w9GNBQdt%Za3UujY?iOKrNaS%Hq38GkSX(zSJbSW56N@cglWgy$)`s!V(uH;=H;QznDpxyq z#D>0M02PS1L^MX?DT>~0pL&us>UN-?6x{D1@gnHuVrt2*Ki?E1&wGhFJor>HGHm+^ zUSt$v{Cx8OLu}OtL$5lyBODv6cn`DT8%A2Hf}SBxNiUa9!?*iR3u~eQr~c)`^!M=} zaW>ymAGfOxUvFoVVca7N)Zr+0_ujCcRMd~?_rVydqlQ1`Fa<7%$8nt$vK)x_A7$gI zFL_PsJP$hsC59)yqEo5L?{;|K>xA1_Q}bW5MLI)7fl(JZY*Tjc%aF(P&wL2%bp!&) z;kE21(2oqh0ecBEMhoRc<*k^wE(7+p6ki%ZsQ<#!fV9_0LtCCcUf)>zh}eO5Q^_yGH3Poryit&uZSS;pVUU zV6CdQVdCu8X|6qW{qV$<>VYk5B+J;VvjTp~^{oI?+d&5|lDhZ|nW?0BfKyMft4+svrP#w?l|!{`A;q_~J? zh+TvI!MY}-Ha}L~mkRsh+klfZIXCAG;lSTC1E88az%cJlD$V}aOA_(g(IGblnhh6; zYGeZw)E^jMj^CwP?+W|q0NMQzwt2q+03Y(`N7?;lRg{pPmfi%1R&7Ub(8b?SGNf}z zN!a^6QqOW)!QfKblzO<^>u>D=_U>nAQ}HqW9gX&N-{zusO9)(dw!I3XCRfza8 z-q0WzEeWpId1P*m#E*~n*IxBjy2izIM9OdzE2%k{|6k#^E;QIuOr)WqF$p`6X(Lu7 zp8uhg!>~Z;DKJqVo8!G=SNJMomG>pbB{780J$q<}!u#JpyJBkk?D_K)2|NLb9WfBO zJs0#srX5d^XbW1;TbJT~#q{d#qS?n!Z)EB!_~rc6%zOUm_E+V$d>Ck{MaN15NuD)m zX8F7A7YSYF`TiG|{D0mNj*M`BUjN6P+N~`9$@cWa->(eQt2lltu#d+lzrPXkJN&?p z5luN)yJc+~jNxlyRx>NBukLMP?UlBq{r-L=2LcRiX7cm*e{5B-q+R$2Yy==N?QIH` z6 zJQWp<5`+%RKQ5i8alWRbXLx85BZ<@Th{*u6H%(cVSkS{qe3~%#7T`gA`r+HHfF6{8 zeIOfg>X9L3MmH#m{+j@0ECz5Qka+zhkn1AguNOwwlbSwrXw7|W-}FchOVOF2&b-Mg z0i*2Mc1GJ6mL@O46HBM0K5Z+hZPq)Vu)?_tZApxT>EkmSV<(KC8_in@c7)~x#@J>; z>$1Kt@v#Y|-gFzHzKTRH&!R3=8VyrcpNfhUx-Gb3+1S}HA(EF{&A6!8*l=XaWuzSIe_X=@`NOCzFah2`8oy3EFj-{n%t|;i3 zs7o%P=Bs)3 zT9sQlbjwR9VPz;4#M!W09&C^HC-@W5xsb*wE5BK9{>*)yRf(@76iUHRDsiYPRN;w4G>J-Jf2ycxXz$W2u_)G*uV)E= zRyJT7-3_W?2?>JqV_%%M^!WAfCZpM%?3?qStQOmj80zU=a$NsaKRZhem9ah^5rF3a z8#o;=r56InoJp1aMPj}C{P!P*T3E%drUm*~l+n&1(%Bjs* z7sd}wM|?MrUd$XG4cy*(vZf@O=y^s#rA=VeaIt4uQR9e#{63M-!f)%dd+jq44Mxt* z6YD0As8iM#jf80BRjtrg5_FS&;NI~(L^Q1(Am#uJG7U!?s7RFzQ|HH;n*MGTNe zDWyX|L_&~Iy1P?Q8U#T=8boQ3kW>()8!3?%4yA~I2oloL-Fg1?sPBE>|9;~ehvzt`=*24j(D{#z6Kr}rrrOV@357pX#c-Radp?4HAGqj4p-pG*k7ks=!OiW5L`H320XVQ#m6o^nohm48eAtn^g6F9b957xNG#CSSW)UM$(UfZlsc=CeJCPm8KF{KqyAv(GwU1MX~g~dfu zJK*~Q%Kc{GSbz#2<~mYy+Z0@Rw@}tCl3dXZAPuigD!?RPhGr8jQW7h=tH!*AY*JUf zcVSM+f)c!<8>S?WO)5x>bq^(+`Wr0CJR^U1M)iatCI|2<`XsMH(2#J|ZS~eJMFyp} zA%O#4STX=s!IOZhCRLZ~`<(ahAOC8FQwur$Z?JvJ$jYLFS|zQ|5jP-t_x~+XES#KD zf0u-)moHHbV+b!2)dfM%zK_9RJR}Fpd|F=<Av{@_!(X%^8)yB+*uG73@j8>HbJBW3knoUO_L$A z!x7MXus{M>DEwN98NT=1z(Cd8Hc-xy;QfmzbRV89k|9T*&rVIx$&o3ysnCo1{uIz+ zESwm*-er*aht`8t(a6_MwW1l2(PF<*Vy*-$3U`u!7CS6q-LuceR;A%uk&{_>Ycca~ z5Y2lMN`;RL^1TUXK`6tST}BN2YX7--5c;b(Wt_WerFiY?2UNvRTQc>pP*}O#?*?hb zq?|P@4(e=3z@w3r2Sz{o2@#i3Ek(CZ&>Yriy%!}SXRd9Ag)L<0|BS*=ox+6)1|gVK z6zX%4uI*bW5s34;ho0O0+GRW7Z_--emGbm=BK!uVS}^ZdTpM7dfE@+=X0wYQVgMy2 z3@I4v=F7xgnZF_STfkog0O)#Cp?oX-=RoHx_Vr$QuCC7~L6+u7fac5oJ64eKf>QeH zb(2o94{!+WDy)Q-5&wyGFciBDSUBJrLwgswwSzex?)t_8% zZIxPrvDh>jEz0k)v!vRxexrLB@K@5}GEmU4?9`~V?cJc^YXvRdIMl#5NxHt5X4}N4 z@Xx zC&31T%RRcel{|KI2A6;)Y`&fmCbT7-6I9^84Gso@qKa_1+k2-B_e$UFX48Y4idLB9 zhJ8w;j7dPs1vf)-H5Uo>>s7G8z!vE~EE?Ry()RY8Ad8?aTPH6A*%Vj1H%KF1q@`V3 z8m=OMN}m{@qTnJy>L?@o9F$5kemjnPYxhg-%*^OP{pbMt=F>v0%soJ2<;k>ziV)%9 z*WFE%vY%_wu2>DaI(pLA3)QH*^9&kfxZ<7;tUaL+!(WM zj96TFVh+br$DYBUPPam5q_+<|@b6$awAw(MGT%s42tt3mFLW=a11F|G{6uHfTIpb- zGRfp7?|sf}$kj>PdRHqszunGgyZiX@Ml9bv*A6`VkOrgA?BYtV1=4aZRJ$xErK{bQ zJM&t^OHU&kP=mMC)tCQCwMf(%r%A7GRKk;H$-6dv2s}G7Uy~WNjD=T-5R)5*RPh|M zrj|sXv=QUAa35e7N{+29P(AgWFq1Lk=i{4%GI5E{bHdaFaG z0fdF(6fVkk^dl*t7C;Zx-1=GXB?K&Z;VFThAuwVAaZJzPV2*&){wC$TK!*3mCaWf2 zKeLO#!y&9s|oRy)g+nMgS z+VDcy*ofDPt1G_?jLVs)L0boLRb5&ao#9_O{R=^nvde%pr^FAa!{h(ueYngzy9t!4 z!S@eCEx{Iw>N?r^k2N*u>X_8kpKSL(wNcX0w8D1Tjk*pby>$2Kn7!gomMlcoTOc%$ zfmAMJVA{F#2!11e|Nb>(IBm_TqMBM1_SRo$-vd9XP`8=XYid**Uh;Mm#kn$qf`ToF zSx^pyQcITGbs%KGdgVDj%M10WhJ*g%mSaFV#&JdWnoflyv_JwT7gEUuPYMq7x4k42 zYdgsp<-o^=Uv|jE1!IS4(2cw-m4hmG+6vDEo zT>+P+gdFUbM1&x|MWH00d;`}Tp{YGYWNe(|gREzoGCmzF|J_cGmAa4P=U+Komloul$7g7o89ly((aZ&g2;hLbl_uAo~Gz z5sHTCIpuBu_m(^w6S;8lB2ut}`eO)A7-4e53e1Q9}|r#+lQ zaox@p7>ABf!-OkEq$+NUg;iNzUG1r6^HiTxs}TL6X=%`=7mR(dnvo^M0Cqw2ME2Q*i%sMU6xPwpb3;%h4qSZP65c+cECE4|aIKF{L}E-vzP;*H$#9@TBf;?J+A&h^d^5h8A8LB&Omk=pe7(B{9#$td6XSKjd_5Ap8CcmGJ&G`x?B|Xif z45!ENZcpHTz-*r^n?vN+Wu_4Nk*(4?1k5QQr%I@)^%l$u!o7|bpD^-R=Jf=}fwBnV z4iLhxD`U2lCr=*v9O{GCu=&Bwrr9auN+kRIgsmv7PS09RYoAX|oi>Kszb~bu_4K~= zw*18#zb`ibS_rIcdGXjVM|7o1-fV`F<31kI%-|3aWoHkLdOodnh2WOFrKON!Kz)b3 z&NB5`J}XsI_CQWg+v#RY-P6Unq}~-*7Q|3k^8z8feXZDbc(yZwdr1nH0^f4@*>&|F zws8(WdOv*b@HqUTov$9X*xK&AiBOV)<+hEgslq2+LZ3M*J6Y-O!`M!va6dg9#9 zjrLchWbwXT@vf(DEv#>N#EK>GnMWy-oK^SQG4HT-g{gys%2B^zx>{}vd7NceoEuU- zhsDU(jGS&)X#M~>^%9k{i%kQ78 z7%(EP8uM7K%Q=uSUYME9E-AT$3~BJlkQhb;eh}UEj=gQi>J7`|U%d(*?j^Uh3Y%|_ zu@hT+8bd^nY8j%L==+qxRkb;BH~V$h!y}l~xA^!%2EKyUhjbSItd>i=aUcvZGEU?A zFqkyX&dxy$iLvE)K3y{XoV`w-;Ov9c%euO{(v`Kf$$bxJJzzm2%x8dU>xTdPW`9;m ziAva;s3jXKn%+rTJqp1X!<+ zGKG>wYEDK}R)(VXlUv$X!lhpO0AsGH=`J8S0ZM2wm+NnNeQ8W+^*2Si}H2-c+&|ZaF>?ux>ZKtY+FQQ~*WW+#P;NMa{ zsG*^O_&8cwSxtHaAiL#WH@W`%w>gBU?gY~r zfzOA7q7rgZpc=4+9rdNNIB&J`C)V90JRUvbLYM@D(t9r85MsJuQGS@8lOqPa$sdLK zfslKEFNMsy8lAm&KFFKF!bun0C?G+#Rp3rRJ zpzMseZvi%A%Qt8%HJyKIZjB9-K5g^<9sMP$frR204Vrw^>|T_%t)4lAV#>-5>BSJK ztG@;^dEjCXMSt7#F8?Y>&Q3jyeArJ+Inq=v$<)(KE%9 zAiX43LMKKu0R90KF(1rh5)*TS%qkx!WXyX(4g!x0iZZo1G6~Ay79j!*ne-%gG6L-) z167STC>4#CFMOw&M&MB(#^&I2thkOAJmMv0od7j#=3LCHSEQOmX2AMD{J3DQUC&w( z4qFrW)KH!Zsf)O{_~d$`gnO4Hd+#E+$&A9GJT=t2vxpUWdp%#~k%7D)srg7^Yd?ms zha|4?!Oh^7egz;NlFmxx$?4U5?u)kxsbB92x#c;aS8R1}KIlH)oOe@|3c8CdIa?j77 zxiUmpVopw*<(Qoh2As8!M5zKR2cKGSOHB4w@jxgLV+|U-4SS5VwF6=7BO|_+7DlR| zkPv(tuR`x)@c{cIcxsSE%C3`>kOVm~AFo5^faOx-_0^H6=P1N5UFHpe8H;LK&IeWI zYnM@H0tr!<=1Q6$SU;x~GjSvRVTpBNR01=81N)n4_{xc%Ad`B|$m$Nlf_Zv z()k@Ed99Z}b$wfv&(pjjR(6gJ)i~Q!uXX|T&4;+DOF#RvD0V-a<=ZAU&An5{o$F|C z^b4KL>IUT}YBxfrGY&BnBgSL0g3P_fXZvO3&b)jb(2j8qATnC;v}OMh#QRzyONCM0 zghCzjL!jyduR1{jSsFyG^??-`V=@>g%z5?<8zCW-Xu!-<}H z7B*B43*U2f8{8g2o(3cD!{Zq_jZ)57FyxzpbT`{ACg(p~07CMcfNbys^z5*|@zAnj zh_!DNPAgl$c(wkpD8~pq45)4Sl4XWqSO$D4Rz0#8`IPpHpI0n=>PQ7sR3W($wjohiYhQ4B7Ij{?bJ&Qt$rziWf^jg(lc=vZp z{)yzbcE>RBhDN1j5OVMAjyS1jk-qSNy*jsmfWXY_{C;a#2kyJMQN(i^sx4V?W`#=T zg(MZ{&j2R~$t@^oXtc_ifp-iu24o=g0Qih`3AQTOkJSs?q$VD%1&X#H83zo}qmI-g zJgs7*<3_VCNdR4dClHmC#5M$OO58VYTwU4S-sX_G9{Lj&)t1@7*u9r|avhr5Mz~b{!d+A4y zis!htV|cEFtFsv%d5c2rAB7XcFwsF`r7-WJsv6~1ke7E3`FKXqz@j9Gw?I|-JZQEE zrrCOpg1&xokgi-OvW8SuX}_kmIs(_L9%-c^Bcl#BW=0<{OCVX^@DZXzvuny@H6jER zFt=dsHqK~yWmN1l9wI@PB)VR+kQlpmHud97O^B8cK}70B)DY3!Hv(7XtG7tmZr{47 zz!_VD7od1~llT6@fIs;&uj8hS;4_zGqr@!p`kQ-L+6Wi}H1cox9_^NX6FF{fV)0)* zlZ)DO=;uO}4RIiZk%+)csf z-65OeCezZlkd&x8ZbD+J{8TB6zEG4dvG70wlB{j7EGIA&Vm)ur{rpY}=(Sj15%-!l zi`__L5$5#y`nj{SWk_{nAdSQo2;3muX*r%Z;(3f%?gGa~g4SvbCRND5j#2- z%|E&+m^?rEau}u(Yy-cIjNEy+#I9Ww6w+v!9c2FCfe9qZu<{bi%3B?-4eWxtvxRFd zip_aCV|osz8>#w?Z=!M4W-jCkP$dENqi>T5>XO19swspwuoXoT#;UpZ$1( zJHHGh@(kn@6mTvTyuFd!MREBuVZYQZSIBMX(l&aeX~DYn!t(O+-14%dhewS}ZTo3# zETBM>A^vi}8;6PX-I_OoMwl&{A1Ez|?AmwyP{P`^+5o7rO|Uez%)YGk&#kMY2A-{@ zjm@*4wkb~iT?((V;Sg}ZlHujKm6aE5Q+FW=0`t<`AP>l+Wk8bXlx*$nq{CoaPYFh5Y672m)$nY&xq-O&Ga3I5V$0sxk1t-FA+&*9_KP|4;Q*Lg zutcGs7UkzBtLgR+4|D{ijOaok2BE|uB8r%=pMLp$8&YW6j@4k~E2zG5g{S<-%O#v^K6U4)EwYOIGB#z~ z^4>IGk=(Egyw|O+!F5{iDxx9);G1&w22F@_qH{>9%|KBwx;z^U9KC^vCK|l2Cs{6l z0DP@Dg&J>&bMwMz414?8=@kbMPy_LWPD)DBWgkLnSWuw|4#r#O5fO=i1ZfidM<^&M zo9E_o_H-M(y}}|`axybd!&^e~2vCU6H>?<>c4waXb)*NHR1E{TD`_f`M zw`t{lJY5=49LliF{JLC3#mb7+-NS=)UAB#$v17~qIBcrj?4t3atlUl6WzP8XkS&3T z+f>xLLa#uQf%Z`)Z%D@SwtJn7g6!!^cYqFE;X zOmCH>Z=w`ixSzbA;(8(Z@m6+RUe!!-dFp@8!8TjaEJf3Um^+TwQpp$_@^oOhfH$N>MaV72b7!@1W&2Ds zD=i}+V-=nxxqdZ)Dk?7nB>Op1(QOud$*L+UZv}P|i8MC?6d+jX$mr>PE(U#%<4kEH zkt6`qljmMI$@V^{-32uHWn5gAK;TAx3Ro-2Yt5Fo*C3FIZkZ5_x$=*lprW0ai0FS`oC@omM1ccykJ&u z-=j4mp;rbF$bbChB_jRS@}F_=DG(6~Ux{lKLLp@^ws-dY|j|c9s28CrQ8k*VmASy(s%49>bU6VY%lG=vlrC9Ru5NoU1&d#6fWB9iRPs~J+I?SJ!-WQs1 zbb%xtQq=qNnq;h0?>-nUarfIw!*|9(J*g**Grj1k$W(rSB^F9#M)bAvfY6sV3*^-t z`QyA5pCZ3aRX(1h!(S1P`K}B*xJ-&GPm{IIb3|v^Gwxgz)5q4Y#y_@aua#+2k;cVV zp&zrn3px~K+<%3Vo_E)GY)JM!Q134Cg%c<;ae1PjeGrT#cvncF#wn$J^TMK{@b$E% zuvRjKi`zAYYX_IORi|wPLmA-x7g5HJ0xDLNs`9>JXy- z#{66I`$KQnd7GxU({zY$3;(tAaoT)@*?9y-CD=kjQOVtUr zZ`jb%rK4GPg6Zsxas-+G5K5d`x^4VB9uSdA$sIfBFVCIDSQWC^X|5$B)>+E6z4=g+0`(`@61LO5y?;B(#kGQ2hQ2BJB=Y6=SbPYXAYbWz@97;H$eN)C16l~NV*L;#p3dTFcMYX;>Qx7g z!8;a$bTyemtyA++(mk(c(>fmby{pg8&u^*tbf3HbaB~q`8WciAL5YErjLXs>VKVX7C7L$gkP&-+ z5K-N*5ru(p6(ma|5#4{A9i&Tt0k$C2dei#m*P3u?Q7BIlTEuMqeKwrC*p0gkx1qhk zhgAmw*rLl#&&)^`un4-XU4^PD>|4$SHeVZ(mXbm&+2@=Eq5Fs_6yTut3s=(&q6WmQ z&w1#>v3J8@!%tf&fT|$C&Q65g`I*1~j2lF`jl9k>8GzZL1n*18te}J|vOi4>jS!-0 zd#o#f5csc%4euZ!6@&D%Zv{wKstk^>`S=FpCIswKQFsz#pABv~a_{Enws*B>UR#a9 z_x9*qS^e80WwL8_^KO1WKnw7b4mmD>o~RPDHhh6MN}%FB1Hg#}4me)}e`{-d``Wc@ zcWq~#1uYEXk=!_)Z63@g61i!v>NGinl^N99*|N-K)yFJ;9fFNm#J@6k&`Mk(V*);e1HogLEPTP~JQ!5n3DO}NnGVb`>?9DA;Nk+1=9o;_tTH44~7RX zDkJaQ3fN~?MpgUl3EO%s>-M-DZD{YYEBki9o0G_2yZ>oMr(9cKF9M@(eab-q*l~fU zI5;>6tGJW9`XUB;d$A+iHdVMG7@_MA?SD0`wlPUW&wWF4VWEbNJjfbolf}lmga|4c zp5OQYp7)W~7wuDz9=5dEAGKAjKc5km^t8>Gz=T<+f^YzKC#1V|MqB_~p}B!zhxN(Bmk4uUv((Nvkt~$8u*HSRUO^sN*!rk%uglTDq+c3A%;rY`?bcX8=+R^#K$r{_}Id z%n&g$oO}5xF@Ol%!a!?gCP~;s#|<7+2-zSg{eL(|sQ@HSK*EkNlJ@pKeDGN{nx1a= zq@ zvNB?1ss{i-71D-_i;G}!Z}e;P(TQUVifZC%a@yg83>xDahDpP zj1oE4MpraF=s|dBq&^2!-rF_9dz-r_)QmQ%;e)CEuwQ-w8%KaJ)6>%KcTV|BRlR2#${Yidk@F#j?lr~>!0g~_YT9^(3;;Y zS74uvXmf)Op)%wc_9BR-Uf^#hG?p-+{`|Ck0R+xVuT6iu)L^0D(WR#X2@(ntSl~ng zPZSA|tv#>`EG!VI4}oGHR=#!cMSfRbZ=~Ru4=3AX(g=43g@P6HHDBd-&9Npw|F*LC zjQgSWRqGj{lEcar)H@WH-k z>A#zUdL*)a92}(hFTst3lFv2>m^e6~q4S3eFall#)jC7=Vd8y9%%TwSp6bG5jiY%d$1sSslh>qz({I!> zC46OSvSfYHI)KyH&s$PheQvRfAxBVf9QW;4{!eNJcv{#$g)X5`IpTQCv`GquYo~lG zaVj4hI(*UcDbWtF>(}G()l{D>F*-fIOAnlFM@om0Uw*!W%AzA$LW0;EUbyTTOHERi z^0qpsP{N8gejWo!p!Aja!0LOE4Kee!^-U`64!J`&qQB}jAQe>~K*IY|c^zTVO z<*7|LM9!5BSF22ztZ$bZ(tx@{Xv9O5qPn^Q5<>i<%Vg`^i9I$7hM! zOY-jbH6ShJYU)f$Q(S z&(O&-Fb3k2eh>5&U#p=3|fo+&G-O|khl zO`wjbnG*CeIrCMF>Msgw5i1m?oqMO-&Hm?7p@GP`ot06*jL1gX_*cef^^Hl81&u9Q zoV}iS%4W=<0p;m=L1&$A?ErIS7?k*`8f4}Rmwml=9WTtzV6~0TRgs9Fx_X03;VbHR z4q=!xo)QR6IWe`og*x!~_Kd;y)LYi7yMf*x3KiFMe~4v%ZL9nykS5&7F3N;as(;O(wp5^EfErEF<34#SJGP zb7G?>&+UG3jZa_wO^q%uJMC18|LvH$(dR}Ue6uPcQXc?fMdqk2pLp?rbj2_viU7%o z6>1?pydc5ze7hDLMD}h_S@_wN{YA~WJvxF)Q|g09diNjcogTg-ChSa>r4k%2ICeHv z>XfZ~pr$QlL3vL=u{6#_=ckH5|2oV2$&yvdG38v=w@T|mvW4mwZ(avn^T=6{E_|U^ zapv2rchh;YEv!FSlIRsnHH2}vBTlj&FViDxd5AI=aH)`Qph{rd64ip`FG~iJ1W;$9 zPzZ5!b06*tY(XR`FDcyE_Y?spL6i)(Z(LlQ)$W_L7IrubP!k{?gwOxW)1Umb{Br;YHtpmNOi8#1 z;<;PDTla_ZNK%1Ns+E+$&Enn>V%dm@m0`tcZEalxvmT&SlK>4LgpT40Q&HM`?T|Z0 zIb->2-q~PFh0G37BOufOoz1qXb<|m{YDhh~GYc~_9}b1kS$%ng*fXLKWE}7~1Vfcn1!o=9Rd)9C zf%w$esKI3yDiKc#)LJX$qqiVW0tgIX^EJ0S>76oQIkC8%4oEp*>%OD*ZR6ut0T2%c z|8}H>8q}0f4oidF0Ft36mo5=<?&D>bjcvV}K#s?RhGv2MAR`BC5>g*v;7M+)z`cNSSvo%drL%7#Zv;5m(%xRm!h#vz2jyts!KOe^xQPG|YiC}`)*yx+^>mgrqDQuZhjo^0V04Clj6@|s<%C66!pDAUl zYv9VNe}ncSPy-JI`D_rkjHX!cULWJLti|kpYd9^ma|JZKVb2T6aHHR!pyg--$;8uG zi^Xe(1*dLe)PC-qk}t_)37NNmrD4sz4$iDKO&r0((Pm(F-v*g4`WQHBSiW@JTk!b4 zuo_qmgKs%f4G~-8r7M(|lqgU5$DU4cg9ygMq?(cU8s_BH$yYse97NQ)#u;7#+DBhV z0zJRT97A3tF++@+bNMm`Wi>_p0-uCBYMKzG_>dZ__j z5N!F&fg43-N4nY=oNnV~U3hpH;xrKd~ZZ-S2? z5z2A`?rZ&~!i~!ecnvqy3l6$u0_X*ef#T-Uq1<_N1RIi6V)K~%zMV7dB8V)%Z z)%@?saPa?a3qwNGEYZVTtG`YlKwLu&3Wq2qI1#fmZK1&UiAI3sx-@(S@A zWC;0z;i&zU+FZiK^p5!72UIUOg#Ud9{Q199$LIeS0QY6KDgPF`+v2yeR(rSqd@@P< zk9-5D>)mU>nl`_?qp7NjRWn*-2@)Xag_6)m@wl$84tilG#qU9~?DUjCN=OSVW}s?f zu}u4`7>GpRoG`Mwy!^(=6BrYn78l_JdrXl&i0JPYsa`MGwX5h?e*cFHP-N1T#CyK7 z8!8IuV-U2?rM1e-%Rg(IdYZ!>#NuvL%%3Hj06xv-RaK#fQ1yp`W^y0JpN71S_2P)W zCPWB`=q%4k*!x1y?Kp-=>@Cyx4p zPIiinlZ|sYRvuaum%6@yqUmY((>f#c;d_W>&>2h$uF8N@TVu6&O=M&F)BLtOkWCyL zYHBDUD#De?8K@ON>2Z=f{&S{`x#WRCF5I4t+xHOkK>)G6`;CUn<(u)o6D=XO#&xV# zA?D#B#AiRkLL=lbjzZ`rP)*(0aaqqSf?)IJ%^Q?2LU)0EAN(C`jl8)Z9>E0esj8|X zhfoBJS_=43wgwMjj|OZM;Z1`THslb$fLiKC0Otqu5UKfs)e#CJ9r}=`_mEJmWp^BW zO3*G)ZF&7ZJXU38dHK0sp%j!ef#->yeHJ@1zp!u*VqE>vhCIU2hI4_=qo%Ldx?h4` z1Xbn}@$DUg3<7Qt!WY==2bH0mHdqoYt*jDzjr8?}vK>=!IOA=;_I(75Bio;tkOMIZ zoJ;cpImg~spR(k8mK0gK>R-PQwhrQ6&X?Qy7Vfdw+IgG1cl}Ij$c@~v-0O@+@R=D? zAf2K>G8kl@Yinz3*koN2?#S4EEtiRXNnu4xQ&ZA_Ij5@1b*S^IY{ssMmR6kGQ8@pv zg!kc)u)+O>FbytUzG7E>!R0EXI}ms;s7B~mgF?YYLCj3qVB|gGkvRC0u&%e_s5{XGJ$O`Fm+KGPXZW zW6o$pA$9i=RJ3z?7gtuK;Bz38LK-^*!4TKx`eWYQtWKmR2yNcvIQs=DU_(g~08O|fiFeVVQdLUMU545VPANcECgA%Gs4K-)HJhx^n?B&WBgoVA- zK02*WqTN81Pk_*!-C&4K{e?RI&%(JWR3H8-kI-{-EJ))WXt3FGD+Qpv#6lXG^hvOhg%jR5p`7AHbv+)eOOdn45|sqhYuM& zMN;Wh8H&w81=$Q>l|*{`?B)c3)gflN&~+X-ceYC3@4#xHcAe!BR5-yo1zxP0VsJrG zEP2JnZIGf!)ZBVrQC{xc`C&rSAI3u+k{Krd1KoH4%TKtOnGYiqaK9Hy*`WaW8NfCe z0q&>P8>iMyW;$O@a!0n&=Otz^#6Tb*3eIoy8(2ictd_u*mOFu(^1VVWX~WYDjB%)- z>0Yp}_XVN_dME%6=4$ZQJJs?Gly`lBA_ZG5_-UJJ`Ul5@$pcGXI0FD>QeIwO8hue+ z<~)$5LHPu(;A~(mR-R4iRDKZ@KH$mrh(GMVS2vd@$kE>>T2DB_0wVu zPaw%foa+F0WFspv1{xbaG*fX5zgeMIm_VmzXvjfU+5PqFZ!{ysf=i&@;=ulcMMow} z+aYD#o)`s@?XZ7$2G)`Pe^90AKf0yJKoD6VC>EWb#D515s60&`KPH-*nnE0!fRywM zsbj(Z1zbQmq@<;%s1e;9@iXvF2%YSi(P?3VO^nTIlKUGFh z2ak7tXSM4v-a=m^LW%0%tXM8)CKrha>>-<=;Nx8428y?`)#oo?48BnWS$cEq1+4nA z0hEMSe)etiBJnbuoNeXfw;d4?zGRGilwteUd-}=a&+up9hNM-B1(H8Qli`HMZQR#j z2u7vaUP$JMz4YGo>RS#%vpxMnhh2I74722}AWz;)bMto}KV9Q1XDrbT!KxxHJW+X~ z5lrS6G3CGleh-`e?A&i%{(@CkmMrJdC0s4Z5pl~4Pl%!=`xGy9 z>=f!|VqZZQu5y2%U=YXLXxLAsgH09KVYlr>q{9iGGe-BQuxH|M= z4FGBx!)@vwtv-^kX?wxr&pp zT=Si1vXX}8OmKOzurLGlOC1CG!_(mg1Xh?$t}}~WsB1>hQ{c6*1tahqAm*Eusry9U zoSBD!OVC70_t^jOFq24~uk=zeFVihmMnPtTRNW%wxy#GT8)r9z521j&71K89AOKQW z{!Fir18Z_pWg`Ghg0;?DqA{5}$kR}QHbw&vSRFNex3DQkZd z5x*5~wXv>p{ZdU9y!yc>KwY^+d%b|Pn!0(O0ypqBeKh{A-bIq`3BjB1rk*&ylNgyk zBdKKVN)+Jt-Tp?zsftzFjbAdAN2k`f+7Bz@v@C zt~AIKh+aD0x88Uor+dSAb5*7!jt1p>n~vfF8wZEo2v@6j!`P8pLUM9GFn$t~j9vqh zqk6YhW;F$Ky~sMJFn`RmZoKIBuBM3^lrtWd{e;XY`{T!tR)(1P^BnW-W8*JK2x z6ZB$v$?y=`sMmClRk`S2 zJ{YejE-p#4KpX6wNJtXq1xo$Q<~|V(<^Iq9A3v-+q8T0ST30=wi@{GCA)}>QMph6w z-M;Zh-Sh>b}<4e`k8fy}-*`QVCz{-KJ6LQt1>VZ~RuxxNmTltF< zOv3hTZdVQ%oR8daVXgFV_g|+n7l(~DQ5WrAZOMp`v8(s}6z{{;)P;tVvDqhSt9cCb z`tqx)6a1@v&AVfn=i`g=R?C`nQ&>@`^)PE>A1QX##QXNn;W2cxeMvH!F)&y=F!R_7 zIF;vcuz!=g)87EZ3mCgbo)Ro0^z3jt7i>mhy0tJA)e&E{b10sR!go6%{ zQDKJ)ZvLu|9<644<>2J3FJdD~?jqauun34#XY8?vPfaZzJNnK4d$pG2Vl#jdGjP9? zk_2b&_qT>qYC=^NtZW?*w|910x4A{SqkMKs@4oCZkAbs<&U2sS3dF9y1+&ekcT(_X zfByK91&pht)k3X&;Iv;pDF6di=?E&>y_&)P{)gU`>ZI?nc&vV>x}O=Z+*av*bA{@P z+K#B_+sd)sHfozguZEpk@4MZYYz^UEasoM``-CVHB`X`77&u<@#5X9ZeQ|l0*9ch( z=~)~g4cK~HU1wpr5&r=I(#`WWVEGFeGYNj+%(~m;r?(>`2AlHcOTDzRc->vy-P#rw z*_Q=)`S{pw-_`}KV_rc46{&=5uWKAv?4gf$K|^=A{aA^0M?8Zh|A&-(DbAn4{iCCH zFPNpikx{-6cU=j0n+#@#1ez(oKhNZbrT2b(MoJ3JrhBR1r*JtXB|dSMcbyjR)4o3l zzu;A%m4An(J7;Vk8lNm2?~V;XmGw^M{Z|Z-pPt6{Q@yKXW0S9^uMf7)888AIPvt>n zbh9k-*utqlPxE)GGSr=yTxuXM|1t#-#CyF$s4c*ZO1;qnR;}S4sW2k|HXQV9fDT1) zP1f)!^JKzy-NGNLq%w_#{%_AV#(r4+Z2XOSGouYN;cAU3@%iE{x<6pg=rxaj?9hLV zBMISwk>WyLRngDhoYyB9d*^d;cm7c=;j5$lW45E;UPC?$1P22SsoozspL`c^ zy1PV*aRX!-%;BwvJMt}Kc zmKSy*#dMV&f8Omh#zaP11Im2e7wc$5N7?;_55hFt>E zraagX{r1{BKKbA)+Z%9K6?)%}h(3bD>wR?2-50X-R06#w?;)rjSScZKBDFrZKJ%t_cQF$6%8sU^s>E}jjsORI*kt~G{suU`v=)l2IWH60i&*i$70_9 z36T^pe13F2vd!!aCB1k!?0i&bmCAD+4GrG_CIb4=sjtItV)6z==VFlItbFFowq>W` z!7OGwKjve0b!(1iq5^NbM(I!6A&>?Dd&<#p_Ob^n8V1%)_SjDoC6@&#!p56&WD+~y zwx6vteRe*w?HyQt%7pyN?w;*~V9@0hHa3%MUZGb3NFeN{(a*1!LfoJ9j<>O~k@iYy zz4?A{?73#XmKDhS9}B*5^g87yX3#$>ad#4Wv1=F_+C@;~2f|VU-I7dJ97%+5=^Yjq z7H(py@dKOHX?C!9{9xEB^6=%H=q{pVQ;EYo*=C!KQ;Jxz5}u_Lda7bhYVa%ePk1@U zZ>#7R!aa@J?jbcFZa6v6cCXw(2Taw%o#fDQD~{tZzC3W!DgVSgXZoZDBTjUekf|8J z`lCxmRMT1RFs>Y_iqGv%7m%7w583FS* z4}{c!KP@aT^YU--?(l?c7Y45ORMFJW9*8E~&H)lUlns8@tE!hS+1!D^a_-DC^ABc0 zhVJHNKOa;LPvte5?uOi?kSA%=e_#2aBbvK8hLTXI4Z1#88x(ywE(p6i4di|#=I?t8 z#?_-k42u$jN|{xcL{HI+Dw|!_UCNr!%I`ObzMK!n*qmE>?;ixiic90Q)e|sKrB?{; zL2V39tJ$LUY(=NaK%(u4x!$Igf!5+-JQzj&j(!TA zBCiOA1=ll=)f4}fx=!VeYvoOUCNlytY&!$nVyvyQGe#pqx@f19hUUUKvI(BUuJHL+cx zv4QO~o;!BJXV7HZ*Vpr=2IHA1ef03&64mOBUj4p#dtgV{ZJmpJ@ldzpV9Z!3`zz~( z7gBnd__5^5QY?jVddybjyL;(T?j9#sS+86YKA}zh&dwEnLOBwAT}Ploc^(Ue+N(90 zzwDdrvR`%=38ftJ`{}=G_7dY5#&VZ^;;u^%#cyMt5X>P*IAN!qPklDf8NXV+h;K+; zi$3{*->CRB?MRw!aGgJ9!NzM#R3^GUCFQ;r8GN(JfvPIbc-CdVZsVWnKF`JuYCazf zoxe8fG)p~{P_2^a(d>9FilMM%q|h%PN3wAi?KfmCtiPXLf3UrUcjzrFEI#3iF_!IJ z6}%Tygs)e!X7uL7E}4P#XvHe-4SfFyiY)}C5G;S{nY%T*PH^i7cAd-bXomT2pY?jU zJyaDV1uH@XtTQQG3iBrtsNa?Cfrh_{I~a0J+Q#PEMUUUfr5w)Z)EghWeAUR2t?MS4M@tD$Z1%N0}>d9tpL zNNM6Wi5ZU#N}a)lXVEH`Wx;ZYeiv`*e5_)!b>(O74yWU759gk0`KM+YS%-@-?{&i~ zm0cPsf23sz7t1IwtNp5WU#_0}UK9|sk?-9tdE0e{btT8A*2#CcPr6R~LA7iBNosVa z;6B{);i=Jco+KB;Dvx#FdryBbj=bX# y?gM&iZ6F`?UcTmoe21}HiG-2BfmfRh~ zoa|;FbG4d2zjuxLj+=^~m{^p|R!tY6ibWPFPoBH!A_4llOMM@jN(xM>B+?(}4n(4_!=(Qiqp+0OL*S&7-Q}3Lne~>l<|zl3pNE zGRgv?^{Q|Fb?-XX$ZIP-_qe2QeY4bUk0@@jc`oKZqhxR{x9%9-PAmLJrcwLl+eU`OJ1Z zeWWGed4e801&D$OaOnjwq3vvMzj2rXYGBcWo=8a09+v9Bw=l|1tXMm6v_Ec%uEvdKv(}}`azbsqQ}V1b1`94)QTR{9^Svv{rms$O>?J-}3za z>i76g>bj^ouhw6(3eR8J^(knGW0fsNrk=?99BnD{c#jrnMlSX;r+(Rcf`w}Qe)jo2 za~Wsw!GTCS2Nu@g4<3Wu5B^_n^!ItYo%dS#>(hV%@Szf9(jeoa7WKZv$->6Pr7b{3 zqj}dETyribF6w|(Bm?+dtgFEE$r?* z)Qan{nZ?So@B_~^S4pP1sl(-!!3cdS25VoBR-=P6a9Z?Td+_CF4&qV?#Au%x>oKxziIZ5=7&<= z6ds$?{mCH5lzSJe62=`clh0a zTPCY|P0?tOQT5Bhq$|=}A`8jiClZR-SWplcerzKQ|L6>$UGfZq5m*m+V<2~K|M=wc z`4A!wr!u`l*e`vYP4W0r3HMJNCKyztzTYfMG+>Kw=dWK6S54~%=os0nKwj6i=LvR2 z#gJ8gSYSdqb${Uy{_G*QdO>@GqARZA>%_wc^POK}J!c=Bk(}j}NmP0_TQP-qyOO=8 zUL!Lz4oCi%lorzynWvv)Kh9D=nSRrkxT0`7yfeMIX~M}?kFPcJXgl-c54%L}oY&2o z_vZ2J8Hnzr_4YRZ9wd-~pnNMa@8QE3ZXXeX2pp6N+ht7-&>9BW_<)RdDx&)gq*Q>H zS~vNh?(FK~9ZpV$>5ShtqR;n|CFk7pdu2Cba#ByWvO!qt4nX*JsPU2MkKb4(o;*7o z+3)5_4couQ8Cj{dt@RePKX(d|Vxo4RrJirfW_T04W4!hDyP&}~vFnlPe)L80UEA=UJKyEQQxF`l6&=S+%p3yX8hdLeYk)rw7?Mz%({OZLe|@Nc zYDqrHw0Lj1oTTw)Pe7mdDgF}}udc_Z@^qPWKk9eMQGOmGT9%7Hs-HVM|5TaPDN;YP z=We>kVTL^QD#d_=)UV*_Ll_BX~ zGAw+DJoI|p_ZCvgP#TS@8jT)%GF`RskaYWsxVQxeXKc3MhX1F%?+%JG{km+&aU3Hf zA{YP_8wC|Xq9VZnXp^&o2qHO)B*`c$N|Z*4l0h9?Qvd2TrO+;g{xPdCO`Y?Dr$QT`1dmyad+@#Dz4q<5~9 z;y9ofgd4Qpk32de`KzQPxFGlYG&JVTz7`0wpnEu6Lj@hU_f8aE{cxJ5D+zx8?U(v& z$F814w?He{nl@vl60u6CDY`(}r2yJJQ9Cz0n~EYv!%BF3My*1?$%uV7gM0+ajb^_X z?lTMe=T@bKM9DDT@w5Y- z^)nBSu4(L-oL{HyCs8?L$Y+rEIXFmucFwH_vRQ2s=}RW-V&v!bsy+ELRF3BBzx+c$ z?C3CSFY^LZJ`()V4QB%n6#Fu_QuwG@Kn|saS#?@FulFU6Rj&%by)*Rxy zDi`{J1Hna{Wvi>LJ*t-i!}z^scbL7^@qWvrr!(+&Z_EqKkvW8D&p(Wf<;@V<`6XbH zR?O~ErAIWTA7kx+WdKT&jEbe*zHy8P15hO=5j%M&XVqo%hIfjYffGGKw!Fj}$8JR^ zslMm0x0uHASEqG(P?mbcA^)Wi<3a8#Au77M)^`LYm%j&@xb4vS@}uGcgpgujYstv$ z(Jn%KYynYTlEGlGIBEaThqYfLCjjbL@2hUfJ7qB1{XQ;Rx8ltC?E2Pc&+bF=uYJH% zV`=HU!(8JD6W7x4y_?tb17|U?vAt@suIe+SQ64a5eLN14DYDsUOERK{U_$l> zyHe|LsO{_y{+L_LW##pQ-?>;fTj1K~;aqHA+CdlWyobkfsv|C$!Sm;t(3n+r8&7S) z>UbUhkXysvN*G$SDMFO(k{=6i2U=Mjpn8FZW~+MlYmd?No9D4iiyaR>%N|UQ7I)PQ zK4;h_^HwpX^^qNvtB#MHBXgAXTi-dG_W=k;7*m$x!NZ4H9Tszb&F4&a83b`N-V1j< zN$C{M3r*U+{LRPCSiqVj;2rlTuHf0DT-RA^9_{>d#1tK^O#)fFP6vHBF)$aX>oUq| z$IIsTihuYAk3l19bpj*hxF&Ab{KWu%;mAt+QL6LqT>qhK)vY~O7Q~i+4$ebfP_BUC z+i^ixCGpjKM#dl0Oh_d86~?DcjbXB=NYr5<+X~(yI&Ib2A`xuK~1{( z&mcGH(K_ExJ(AaQ5`7fOXy^ax782lRTe%#6VS!V@9iO{X5*M~msG-|N z!xmyYe0Yydhjfz7B78kcJdGc(d{nPn!$!u&n|IhKMvDqX*{!RI&|oe&1Y?xVRK8%@=*)tig)8XO$vvGhY33Z zqM7Z4%td|u4~H8zlJ>0J)W?_kQo-6nC~|ZG7$bmcS>HSC7z`(3p9OLvh!FCnzZx)L zyL)}u>G=CPN5Xn~dxx%-d~z(~q@Wqbxa`%H;F`gR?|xz3M+Lg~ z+YK+&JCaQK+TOn1L(wj|mP}|FQmA!9EkIiUae_KWrWk)4yjB7=#$<$kYrIcURJF7s z053XMKwpycz=3gK2SVP#fDgMZg}1S=L=6IBKgi8pTdrwqYuon-IIQy$ezl;mP?m~$ zYUyolZ7K%66OLfnP^f_P9{>PGQ-j^%!JgK==oWwkU1HDb8(tXM&O?D3nhNZ|4;n4S z3gv{{m1Usc4=6o3S!dgghjDVIF14WE}jCL4;;|A3`>DZyiCB- z-&>WqFohWy-a#%dWdnmmR59wu>u)J@C4r4G0liFW{`K!4ca#Z}F1yk1yH`S8BZyiJ z=DTt_GZrSR^dJKgB06y4Df6GdPvOs@&t4%bE6ezHkjk_`M~TcDHDHnCG>pg6zrGbI zN?v#UEX1(zj`NraL!efGJ3n;gf;6eFrIm)^^~EPGOTl7>nyuUqmkQ%v7|_A_!`k_# zJtM0~=lto0F4k3M+x=Yo`c%@Jrlz2bBRhlotvhiwIbaBBWocF{d@Xy^*jSnEewVSK z?oa291kiJEzjQ`0fHnJHOS3`RqQ-|)qVB4U;!TemE$rd^NSm|AJe}hE=X^aJt4I3# z`ZA${Z5FlqUmyHupM{xOGv-3n&sOW6Mu!WaIOB(bTNZJ=!d;nm_;Xr-Hlu1!8-*wh zFhosf=Mt3vu?a7KRWU?MkU))soE+x8Q?Wa-N4u@_x`_oNvn~)gm4ib8c1=DYz`QYT zUS69PTG^K1b5ex6g2&^eF#AcPhIAv6N!Tf zrJTvKRMs9{yRrc^!jil$UNSKmx#j+~bUYgva;2N|3kki&k1Pki(2(QV;va|sYQ!87 zkSJc4@XA%tQ)a43Sj$3D^@*G*cHm&NDzHj#c0B90hH7MW&v7W)Pjir~kjK3^R+?E( zD)=thPeFLiHh&O`2<^a zf!f1MY6%6*lv8F}4Of4?-!V6IzGC4PN1;M`8h5j{oU)I>A5H$dnsVk}J~w@4=zp|6 zS6p-;l3MUoO7ZoGlc{U1HpFvW9f!p2v+T}>%&=~L0|fT^qq~a5<3l1TQCX3Z3ciZX zyj7F8II5SnGSY9R*AD&$xhD4eIa5zIcPIs*$m^PL9&)BhWywva5&f1$u>oN4pc>o9gEFU%wh_%4AEL0iMlmOdJbNCWe zH-xfOkOggFX=~v4v`ae_v{pM^U4l161M??TcnkG%fN|VD9j`J0AG@yCL{3w)V^jZt zAsnw_Zx>0z^YL*mY6~q!Rq#-HSfLHosukUxWjA%JtFOzDRd%+&)RB@sAT81}QcFc9=h!FBp zaHDF%?+pF7X@hf#_*DU1NdeK=+`kU43V&T*Uthm>umPP8#&$bS?LFKCX>bQ9L&6H0UcP)1R&Z=`vU8{|tN`P`%wpA!v4++R5|*BcUJgB6 zHIM@?Se}xjW8sQp=Y_T?ydTPxS=t4%$l>74z?N;@sw5TsnXtbVHzY32S*AJMAWQTpugRl_+NS5o`^ewte#6k$2n|o&? z;=f{x$^NqQ@P>>?9QN=KxvTiZHX@LGmh~+4o9!{yVHOjgm-?DC$S@+>^LO?@6&ba& zctn2~Alf9R)RMZM6YGxcL5Z|qgIl7hq@<*C(UMcu(a}-o!e8`)SHocSHNxX(p&pKg z0@O~`aF6gmM3j%w7l##AkUPg@0j9mNMl;4%KMV=k>g0wMGqS|$Dq;I695OJp6W_W6B33%#I#3Xo=`aNf<5M0d1i--*iq37KW3`oGDuHNed6kXr+F*!_k z=d>2&$X~hLymlBhG~F8OqPh{98Lsr{g~Pa5kuw~m?Pl}BdBFTh)_cMHA>z0-&}$P4 z8}-ker;vGg6u?SQ74%1^s_zNrL!fzV-&j3udyG+XT(}Tpdb?8x!KlQ`s0kWp?tm)~ z;z;$SeXN@gA(Q@4@bCC*zrg#*BgjS<#Rl+k5NH0)b9R?jfx(nOy2}+SjJu*fh>T2! zV4F&fh-KI1BWDCcivSuZA~)w7xvaA<^wpK4XLb*kpCdD}m=AsWgv(HzuWX7wVbXY> zipk}%e4p+WSoI21d@stfoCs_kWwq^QFX~Y1P5q8&u6k1_!qLGO;opVdvfJ#qfEbqG$NRiIYMv91 zE_P71U-4)}-EDUI#8@=?tzMuh^~sZ~>Rwyc->yFx-<51GGp%U(sxbiZrAi-vb}j$R zdHzNVYwHfoI>{a{h0Kx2nOLxF&H76ns7b9UN^&i!0hI@K9$;F}xiJcz0QO*28yOms zGsAs_JeU90+YrD&7e6* zK&7jTqqO#tHqeK``9)CmXGckQN@Y4&or)eMMBLyc#lBk%}Tq ziX()+IZuD^*{#?$Ldau0X)-)`1B1)?(vB;9s$BRQMYSbKG;$Z;DwlqbH1WcMfCqTsjwLu}g0$mAf{o{?rCDnpzU7##bOyaEQ#FNvLMK79peEkqtW*wB+r5a-dJ~_w98!4G_b{dWlF*wFvS-Cid24*RokR(* zVaDTO?LBS5`DZKFI^OeN0S?{|D|jj!Ufl0P=5bMG?p@v7Im*B_{m{?X+Q6_`d*o_M zNKBgioV{X8$-FAtX5C$hXZoM=^h!*$uAyJm&+^FCu1wPQANs!41v*UyvbS+~Rx}>Y zP$7aB;chZzlp*Qh^*fvHtt`*ux~cO_3a=BscBnpN53JO^_*8Dxyyei>55j)Zp>0M~ zgEHZ0ZVj`11N)%F`g&8zl{p7S;^+jk&+k**$!nw0*ydc0yH86SqXHcJAhP}xV}McwUAzNj#(|&gp2d) z-nQ8XhSzXeP*^yZz#c2Oix4FyY5_v8{o-4l%6{i1ce35y%;LEIS)5@J<{6 zG+C?$8Vnj2E*wkeX}$n)9sIgM;F|XxeB-Br4NkO6;hMtT(Ey6Wrv}0ZVMBFvGBFB% zT@%fv;&<83G|;+HReABv_^E%~C&=0vUqrbPk`;uPIpeb#fsc9LQAjTm|E_SI9m7;? zYQpmxD6zET8B{H!Zuo9F2|%*=xD>}0_#tR_2J8yIb$Tyq1mN=hU2tHhh$f^0;eC&% zS0IjpBZI>@PodPN9^KmSeKaW8Zu@9f(L4TyKtcXbqVTfC2CIsN>Rsq~PQ5hN5Fscu zdBEIyfD;bZ90Ik5H;K@hfxsaJ$vl4Ie?qcQ4}lSx=5DEnZY4yj02*kec(t)!)vphj=es40S7erM#-9zyX7&_d~=bzsPZEN6ncF&HCIF?Pr z0r($h_PSWZN|eEg`v(#V%s7<{{3$>bTLwh5gZP9%S7=>8?b};h1=8nJ!4b*UGcrm( zerL;RcusTB4MCo=eMo^X21)~dh`E_r@JrhTvEm`TB@iCKFOQzQIqQ35U2mCF&LhQ? zKI<)I{WHYX=hBLqKCqBO$G$ZO}?g2CFk# z!hPPwn&BC%lr#bA#r;e+**B|4k&_E)H-AV*OJs9jjj7nah3ToORQ!36Zp^K$G?bKr z;8wu{jl-P=rUd}!ylVbw8DEbbRsDqCG0GOi5hF8FiqAHks~*u;ua<|{(w)Q1ep+S* zMZGnf-2I0v_8oG(l5xLUn{mIicNm;!26g~yI+P1@f|vZC)r{I#^Hd4=m;2E1rr}!} z>bVF-(-BTYdTQ?TreUhXWRvWneZ&zPTo)JZl8uG z)%#Qtd3UdMQe=!XwtVE+JYF#rW43t|)kj)X?VK zK)^~2Ehb>OVexbPVe13?M$8adC*Bk%6&3y$fl$?~d@82=JJ7YRR_OUw%3n4)DuS0( ze+$W3R8HDT1;GSYOjH38XWUKV1^IJ~r zx8=Yt!Iw-#sBgl;aCEbY=lYGm9yKrWR;JqgeMd@UEI6gWQ{$rjXm_1n2hsMPmlaC!^`C6pH?m!#ac2Xjc!om`|8Te@}|4+VChsnr^dF* z%-N|J-R${_nEjk96@+5$R$5!$i5A04pIZB4&-sNs-cRNiD=}A?dbLkarBvd9wys8h zL??Nqz&$|s&;yT>U#PU)?p%4_;(i4sWirJnX*7ePcJ!^QOUbvj^GmG~;tTn5dWY=a z%!PaoJ`g)Q8Z1O@n*DNhfVo2XXME*Zg7$;2tNs7=#fzu^E?$WLuh7e%eH-Zh?$Lyq zn>Daz0yF8pPSh$UaafQ_62(vgSZ~^ZFue*uOJ4s7En>pD$hEBx*)e0_mR^Y%pt~xA ziZdRJ+(dz{Z}7XnGsC_SwuR$6X4%)@{y4wjR>{32u$s?l1>P5VJwBa|nO21|x>6%|tgZjQt@=NzZ!P0F;sQVv$gds3GDe;sw}GqIP#C z1T<{oDB2nTMX`YL7vb~Cj1k{r01^Fm<5|)q5)=$kAYO1J?2!IdaD(axbM+tE+Tita z*Ts?U&)lov1vLsdLiMyb^!hNVS?p`Ys$%h#gS3tavM^W;9syz|56MWXBdvhXsDM&Q z6r45oy_&%?QVlDECdN@qLA(@J$2qF~&2S2GwgUD=0yTeLB0`(KKFdP9odDOpteZy< zUT4%;i>xxWqGIXJ2$f3;i4c*JAgdr#(39E;0suGn{D{G#)+-?F!{TeapWEhWUAn|3 z0tw}#84-;AN^mpBJuOJlRFQI0IS_#2LM{x(O-2dIx z8=rgtm($Uqi8PBF6=9Uri~6s{4%P%6LRlH96Fj0V*7k()ADnQ;^f(3qn$Gz>fRXBr zEo4oRG|uA&j~_K1DysIPo1BCe@QEIu zBVV~A#U50%Q5N&(cI3sv`{?E9L1HFb|CTHaBbLOtn0hx?-2!|zGQ9*WrRvLeYwD~ zil0~~JlXVYVx_Qs4sFM;GS~ATy1%(X@&2T=i*K%+iJM>OjqXg_@9*l|dup`G-yrU*f*BtWUUA^wb8`y*DI%s|_@Qh!>(CsA_)u#i`>u5b$%7z`cdYX>E= zody!9R7Na8pjPnj?`H&g1qAF~U$?_Rhweukymmn!`u`{g3^zvJg~sYmHe-1i!!5Zbs#6IuZStStZ#3otWMw(=fW?Nzc;EPR%^PiK`^$%nx1 z7`oFTk%s@c`H#yz$MFxs@Qm-j{3*Au0P|r@WU1J$^t83F{z5LXb*EiyT(XNwUp+Jt zoGd94!hh5AYu!8Dmx~ze$EF$Pr|_@gV8p|A`ELFU0Dg@Lyv$N1Xf-I0q zj%qNzb53TOXm4JC*aFgmhza!MBliKWjPMX8*AC3-K-RE_g6}n9XK_WS@p4j-*5F%# z90(5oQ=~@g6H$^TtY#08w7D2vr@g6(xOMfZdqx3zzb?ic0viAvL-o~|*j@*TEb>fAcQS!?<0dB$$; zAGO;mzBi|cUaXY&JJiJWqgF#8oWHv8@T1soKN)nF&i(3IUQ20tJHWGh)`Q(O_l(UV zSAXW=^=?yXm9Y-7nmlvV<=iEP;bWJ?&(}NejNM9-UrXO5mp1}YM?`OHg_als!Y3mc zrl=x4-0`09nn;$=-2=mj%+Pp%0I^m1w)p%W0xbcS z3RQiSc~T)~gaD-0yg;!v#g?|d$~m^wCEFA?KI%p-wnw^AO()SQar7lsFW)^gzUtx; z?wv{UOiUA!(`$KjxBqG%?(A);H;_42aQ%Z@#doJVjpn{Ay{d(KM+ez!uFZsG z3_CENk3m^)_I^+4JkZCm`ogZJPuQ;3C73=_v~s2{-+KIbKe02~MRTzuwN^3JeYkp# zs+pyoj8Ep^See)L4hMb7s1 z8XGBP20uKF+m~-US24`$ANM)e=c{njy(~fgc^Qe41h%SD%`L>wdWsiy8?f(|CVH4~ zWZLCyrp&SC8CdOYrQafs^BUCa*~qnid?U~tH+FV(-K5d?7jwpYg!!lVUvPOZ#q)C8 ze-OalXhn+{jLdfZ^5lz+EZt1{93y#qpj>G|Y3ccw+3K^g``y?MsR-TAePD$p^O&pfnW~!-#`4mr)fwdB2odQ9e0nj+^J4WB~??uU+oDthj zRzJ;0Un1hBjQIHHI=X0EA}Ae|G7AW41gy)En-D>goWy~Iy5U=^AICp`8xIx=IXcBDB3qi)QRhOa?L?ph5%*yTD;j5teMeLWO)q3D^ zj~o7{wLn#4S71K!J#XLMCwNiEj+rj&RJdqh3|2F^Y~V$;fy)M7)TK%{EvPxfOmMFz zUG3GbT-3h%Z}KHbYJdKZB(?4T|EZO9`11eRN>Gz9RzbxICKGUB9^Wn!$$0I5TG9~4 z^|!%OHCo;-#vatoe9`?uRFnlf0!o7z2GTPfe$T=KgnRE>4>Zn3+_X}fBujGy7ti9ikpl<}EJbq zg0>E}cHyVLt(0sR7$#68W%e5?4Gjqpi#0L@h3$?n5tf{60sK2CoEVB8)`MvLRaCW? zd{Z_-Dks3HG-OENiD~ zQ@qEPrj)2jNo7@Wx19#!a|WEk_<5Yh399l?#BZdl1}hnrt$+Xy{24RyG__`*M-xqTIp@_Uz2M6~c8wVAAp0CC}x>weDhhsqOZK{@Z>dDethS-*$$dz0+m$Bc5S( zPdm&-GlEQ*r~9vId;S~>IT0AWsMq3H(OWxV<5_3oRMeZ%B;1?5ij=Cb@=|9GJ)Te= z@|)SYhNNl}=DNxwB+}3d$JDY|!d1yYPxDB9M7UNPE`8g@-6Ss`X?j%pdD;1NtVf>u zcXx>;V@gp-a;)p`q?4TgFetMyHoUR#oH`4nFFwb#Ol(*77~D`lBD3 zP8i;*0JHLnbTZhhvDNiA(q$jIrx$9N`qC_Hn`Pa2g)$~eQSvt2bo0+EB zn<>d3%7;yCm!czL=I>||0p|TL1-!L)v5CI3ee%B3AUFKx^UGSZZs9^p9-hqxn_hCc zPLRAR&aAv3rd8#@q#e)vXTP$j?3}D#$wDjxLJW;sZZA!VeU*grz_Php{Ia9OoriO;Jl$08m{@&h<>tfj$XNB<{Hg!LBSem-J zx&p_CopulX7Qa}5)?(0sgqG_g1gOBtjNEZ$8?s|Fcsw_eo-MEJ?N8sG*fb}6rw#s-z55zD*xsv*B?Lz<5OkdHD-DH8nLLLZez(nH&X#&&=Ll{jr(0z9J~b`!vt0 z9I3Azz^Atw!;TkwcZ^=)dX1Gz8=2E&OLzJ_smD9&`1Dq5IxSyVbZVDVMtPIar1`r~ zpOPFlzl{(u0hiSCMy5F>M>z0*taZlDvLE zYVfH_=-eVFiN&A%A&KJv)NN-k- zYS)d7cJ9s%S@Qv9(z#Nyt$DLk{Xb@IG`BV=I+Sc48?g#7x7YkSYDOZduV1m7zo#TB zMrV7E*|TLjqE$tGBlt{sUz|NM{jlOY%N67DfAguU!&SwY2vRUc`u0~xXQu<&q0Ga+ zpF=0hg#tPH)w!FfDT6~EY~H@={oc%+9K`DJJw{^unCzf20qd9QJ2&TCG5gN76s=VS za;r#R)ab^GWXZSjj7ODcYr)lHhhOrM&FVVSpF_Nk*{_ywBaR0i8QIEQhV7-%m>>@H zwPJ2K%2neC>HU^7bn9$+SBe7@#UCUzn-<7*hw5)9T66$#lfgh%erz^|Iol7&pyHv4 zu#fAiML-xNH0bT7n$!PWy% z;iGHg=B7ip5`cDh+=<7j!ijHgRv{|S9bJ76FZrf0aiC66p@P$aAG0h=`{->>(Lar9)@y>0~PnLR=xu`B)K7Me}f!Pe6J z#xE+WJvCth^49n3I#fY%ajQ$Vc&2 zc{`5at|{HZklmmP-_L=PslXwMP1RE2#Cw47y+Y&&$g0G~}I*@_-*F z!U0+K1e%$fKV{3Sth7GyIDA&OenEDBNTGq|`SVsa`Gti&f!vsyozIr{cwYZU)HmO_RBz@EscBwm%dw3+Hvhtl{Jt%sX zHB7Y5x9BhpO=c%Ods%Co_XZC`{*JSv(H%WKk*aAA@SxTv;Q;~x(MMn&R?hp$+6Ob| z*3>{Tyhx3i{O5%w)`pP0t%@to!d&xh_>y{pTMi(%c~plH^$g-x3H!GB~uZK7|O|H)HbPGH#zyTdkBsC0IBM`Stv6QZX| mh!TMXzV_UspA&qyYndUMlyb&x>+mn)2NY>VsqE92Z~ix)?Aqu6 literal 0 HcmV?d00001 From ff1134afbebe95be673f2d8ad7c5e1edceaf6a2d Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 18:11:16 -0700 Subject: [PATCH 295/349] Delete tvm_security_recommendations.png --- .../images/tvm_security_recommendations.png | Bin 36871 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_security_recommendations.png diff --git a/windows/security/threat-protection/windows-defender-atp/images/tvm_security_recommendations.png b/windows/security/threat-protection/windows-defender-atp/images/tvm_security_recommendations.png deleted file mode 100644 index 5cb086286862f853882b1b092ca3bfe02de6f121..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 36871 zcmce-WmH^IuqKKG*M#5}LV~+H2@-<4TX1(8cY<4RclY4#Zr!*wE{(hUbnadE&8&HU z-n=z4KYI0Ab?WSMcAdRzSAF$Wn1Y-H1}YIM3=9m0WJIV0kqzVr z{X?<;sp$j*gW3P@2b)NbNemStIZMilBW=IKhT%ixRF};D50SWr^LK!=xt$|SY1Q~o zs0iH|DiSksGIF%Aceb#zg~36gpoGd%|H(z|?A;wL%*>r(DzL`+pi<2LkUE+e{8Rnp zY++*p!+D2=0=pYUuvRuHZ~@<&M>#*NnKDG;y*PN3ukK+n3B_J zY8aSLFp^^5RopU;S3Px90I&BK`04{_rk15{w2q%xkIEzU`&iYxrNyKxgRPh<#LC;W z%w4%ZOH*pMX^epG=WP+uq^XvI5@`^o3`NwYC)nU3l@yg(;c*hd&#x&@7{QbQJ5LX8 z=WgguLfN2)3=r>C7HD@oQd>dc4<^NL?31mvIb3X!(9@p*#n>V=8x{|sPVcAIGBOcl zhY@0S)5wFGYk?qa5m=Ng5#(IIck&d!6~6t4>ZcxMWQvb}HfVoiqy9YqD1wae#SN9> zH{6H+yXxJ_?(=YJWy!JIhKExqn#SW;3Z49$Y0D?iCs<+a+T6h*Zx^noNmTe-dCh(s z2T|48i!4MmBq0A3h5gHEDae^76)T{q)h)gm8 zkeV&!%K^d)85c@}R+N@t*k3UIx$`3z9f)sO;qQkAEm><11P-!7W)*A;1ka}fPri}xPuOv3s zh0itz0v#JJy;KKRCB@^$YcJJG_LF}KK4)q)5CN=P1HBt-SMQ%k;mid_qt&;spHk}m zn!4aiJ_)KtX?4WGDJN;nT5?_~jl$4Kr<$32a@HKID_nb}v_z4X?dA_r=cde@m8ZXc*)`uVoLn-7P;Q>U{OXkfDEgvYNA$lRc;iDR%Wgs7VD)|zSe zkL+?Dr|+*@Z|2$-61YB7c25_A*Qlq(=PmDNp9}DE9Gk8Pavm1hj3SIW**_!y~eks)Nx(*L3W>a4=Q&A+Oq!A z#!Nx1Jnw$YLuR}0k%o2f1G{LwDJ7&|$1EZWkm|CxYAWam+EQ++2h#7Jh7}tHT(QD< zY1`8(4Rq^k8XK&AH!0Nc=UD77DFxm#0J* zV`|hl0x{>`P4PJI*{BZ?j=E7cIDfATB#5p2G^bhW9`ZbqF0o4K52R-ZeD8<9u=1*& zBy$(siZ#5d1$I%Do3kf4?|9{l=q_cp8tz9)5tU*+D@vN&AeGueyO@8vA?l56<{6y% zHgfwRnjm}q36u70u6x)`t>c&e0tF7f;~k@o`qbApEXNmRW|pp~?t?Vq7ETWVdp~)X zWvlccqE$FOa8XXwV5L9HIQPb zj|^5OBFFgz*6qV_$q)7^;=?uXR8@DAS>E(sa7PF!V8i>Ua-3xU*Hb9W>kt+VZT|SV z%0L!~2PQJ6GxGx9)Alsn)Z5=5C+oFCQ$Im-3_dtVbF-@8ey-IuUKtdho2=|V{`mBK$a&f9E zN6C3lcOAX9+N-Jh8F+T%_&i?CM}SMk_grrly%6T@KevoY!mU|(b66M4!!eqVUEivO z?&0=SX561IN||t%%43)nzH6#7z5{gmq%G`dr}8^e+F3Id-REM9gkLS$!~9@sZ#W6! zphzq|<_K?VEud84_5^>jb+B;r~$zhPEu)$UVpH2uWu5b?5EU_3`j&`SD-0>BgU?m-}vDGj^DjwFfs#o0utziScM~<-b$we4=DvgXBWh?;jdd~K}%#Jzw#3A+X z)pKSb0#CBu37pbhd(72%7lvLucK0!6mpsB=a;i1ndt`F+qSX%4npgWOA!s=HZ}(;@ zb;ah~ssIc(tgHd{G25Z3yyi-MIyQ~8bB@lyp`7{qnQUbhoAr^b z_#3wv*-tL54rhA5zf@3cmJ7$$a;CPqRt)$)8xKA_*x#P3CmdI97D4m``YqyT zZ7Qt9wR;+R8#)C7Rg1#RQ9gFmJk#omCRQ@5!85s1-OmGv1uI zp42wZ{fUgk=g>18k+ZnqwpXOX)mal8b9=gzFYDLD960p5=GQ#jD?x7Wkmjuqg~03l zO{CYu*Xb+nnmSky4CD>SqDB%^~oC~1}`Z>Cu(s`kjV{C>e!jD&ZwI|hkU-S4nPBqn_7|w zq6WEHjlXg03}Xhvy*JicG*?i6I-))urZ!v4`DR2!AUmsqk|DxF*`ut%pE87`P5jI2 zOYZa(elIObR<8&Kf`!Gg>8GpHRGYh91`*^s;LGpWW)2(QFy1q=?J`RKCHKEs{)*)f zMo2!kdZGH1C|Phk@;5*ml^dd-3ACh3v1dD-))VQ_v8BSUWv1WQ$;g^E_#&ZbU;dZl z$mX1YYYk3I0K);Ut}Z?W6UOC|ivvpO#tDM&R-t$2O2eW4GvKiLMEjVS*29Mi%eo@4 zWG;aT%auaoX%_`|jR_-|md}kYntRgDd-u$I~8h^qJ8@))~*^6(Ny! z_i8z}I(kdA1J0m*V$)V&tFA}OevgW2OTMdRde_=h7--7vv%+b^mZUGM ztL;m4-aj+vKAME51tZXL?3vWje%&W;M6_9phM9$XP*XBzsfPD$dy2H32!HTPLz*Po z8iYT>IZ8r$@%$RjR8BEptz1z)btIseTfwn@N^&HMWc3NQdQBLVVWvdT#O#)KyxPEJ z0a9vV%q+%Vkz4$7RDS@b;{~gA_%8OA-+@?nGJ7kArYCOr+LG@W4+Tvia9KXS)q!kL z^wadTIkDu8?V~SF*EYFXY!O4#(k%E7Lh{ThBOe=leA)2@CZ0S==W1VU)c;Pm)A=;A zfwr2d-gE8w=&fGD%W1Ft%?9^TX`Yy=N6nN?X{Zl2UKeZHhg`VL%AltAy;MUKE!=-X zQ-!j*lD)$HkSY_}arOfBp`vt%Fyql#PQdZYhU#gy*;=y4s0?KFjgI_S@bJ7jp)o{P zyQG-KY3=1XfAMzNN*V*9y5pPNss!8EK$V0TOTX|;mFR#$x2~m&kNxO=4{s1 zuezHeNMLaZ!V1#0**U@~#Bs*KDQjY&VC9NMa}a;I1u=53w8$JIf_yBmEEgYsFo+f0 zC0sn(q*VVPehOCW?t8oEch!Db)W8sj9+w(wxELBcrOQB|VEV{|CE3(A#&*h}-LTK~ zzW@~KDPOnkj9Rm?%&^XK&F@T=$iO1E6=pxB(OvIP_GOW#HSc%QXQQ)6uh;cNALc)I zt|j$)d&`r3@cJM*gz?TI$xs=($YY*Olh4%o@^&*@*coUWKY@Yvd_F(T zE@rBoKK){w@#UAx-aE=P{_+}2p1!u-0Nd)rmLofWNy-9}D7k$+QGwO+sd zEZvnEJ-7+BM$o()h*K&8Ib9u>UhjR})s9$9z4+4hrY*XxUGom+ns6jxsSf3_FrYHq zOFZ*T!&D9{2dld~cJbAtJu~g|JcCbUMH%8gr=NpC-NjkVYuaM!_e-Gc4%3UUUIa$( z6jo?`u^>^Gq}gV+(mnJWP}*h2-wYV820=d*FSsn7dXa6AzC@)2|-5)$u}$)=UYa3LKKf5^a(X6=;}YGaU~m z9RtCLtFiKG`=*FUM zZl?n_6-4?`=#bJ7;Srmq->-;}nHdOrcN7q4c4!JjpBgAUnMsWh z$Q{$q6%L+Eu8>xlc6p#j2Oy`GYF~`Jk9gtOk8XbpW%|OSfltyPcNe58>Rsh&QPk<< z`*L^3SB_WxrgV3!s9Y|S&LJDV~n{i88~INVd;UCna9nx zu#fIuwp^8IEzYSpE)cftu4@*z2L2E_^hbpR$DJgQunOoty|*j$5f5~w39ARbbx-2?(v%x^nzE zZ-eA8J9f>fNVI{01^yJQYpvWweDh%s7nP@Axxe6cNn1+7N9y-RV7(xwOT%Ro@6{TP zIJcK>u4Ys&VpV`=$cA_xD7(#78i#iC4Y%%dtL9pY{PxJCHtE-CvNWfnH~G5PVn$s4 zDirKRn_-bZ>hTf?3kyFZ>iWlUb7Z`R1wMt}-)|fG{B1iaNnN(9_qv^61-5x^@(*J{ z^$>M8qlO-E5>6OQyH?6(ZArPT?;_H|U$B@?O+nFo=h0j9snLiNl*sqw!i%~hnuIJL ziKL~MreHdqPP+~8&>Gs_L{TGO- z>(x>+N!gSC>RU(nW_)#@TbtRH>%d1Z_mr!S;P(Q653n!e+ySqbqOANIj-;S#$*18SwPFCp|f7EAaGnS`gZ2Ek^Rc38%6>|e55zTd^5P$ zxwn4@16#iwi8-fmeW>(-eRK+cAp+Lth44L3V!A|9?ZFlN3FBn0GG_>^a24sYRG$Zi z#M`TLxV~l2BWaD`$)@-)dA5PUQeV4bLhp3m!bOJx;?>(d66ANOIe+B5!ug75ffs^N zvJmh&$L006lhON!GqT`|82h6r8*1*$Q(wV&&Ks}x!VKjQtSiz5!nFeVOOss+;CA0| zdIdc7w`?ns=7U8Cq4Kh=^jcQ*mhY$6&Z;2@^71iiOdrMuV5#AdG~dp)PaY+m8Ex!5 zZk=0(r9%Q5l?OvyICx=j31cobe(-k2<6mB9?>UZ{>t7M;^^9VoWqDL(b={JOWcuT1 z+~2|Zv~ed#**(Y0@^i;uE}H7yWe;6JoyE?)M;vZT!S24gY?lXs>`*?)4 zs(F!{9Tz(MB3@DQ^{y`vfTby~_uE{ev_p^Amk1kUFZw-^^Ji1`j5Y{!i7+n*;L0Q% z=-M82+c-t}tG_PyJ$jmB%9>mJg7ho6GtWP4 zx?TOwaIbC5%s{Nn!7Fam(r@dT3{~`$cP&VgYiR>UBMaxJ^mX=pR|lJYpM-@oe2}kJ zXfd-ZLiFIzkJfPzAAVt4K;%D)1MMAb=fW{Fb5FAdxzmEFNPtXXXfCmKaadcAVQZ6r zK)&G_tGebk`?7Ci<{Rg25A}&A`~BJk>uSs4hL>Z07fmdRBR7jC%g~wV45gs>d_!mf zyYhGLIo!E8p3HmuY&=!NR6(TLTq+Ijd~cmKFy`Jo={x@ee8?;)eNh>^MLh4g@l|wP z%(`j!l5pA^4Qa+Or+I9>iP6yG4&fyC84dxylBE~PbDyxjyjekhr7>Cna)%Lw)tsI= zCXY}N3Hedg@2A0NIl(wjq(M`rm}J6|l#@-aO^3S9EfFLFPppE6Oo&QDgFCxk3KpJ} zZcyZL+TDEBM}qs8=h^+zD3;r{U?07^*t;t&NwAwUl2x2uaisrv z+MZX<=5#^M$wwk#8@zmf_*7p?DA+LpiIQkK*D<7$I8g&vZ!XusfR}0pE}0(dj&Y zD*aLak$KYg)25@7o7a(rlug>OI5sba+ukpB9MG&_Z2wFj?y9P2g@Z&a=Pfz%r9`L;#3lKIKsAaOL-m;nsj`-LIV_yeeRws&DNvH;pt6iN6_QSO0l8|HW${ zTd6V5>kf1N@jsCeAQ_}Qu0tiGV#sqo0+08R^=68b;pLUNUF-Vu#ikvLTO?7`1?0T? zsF{f(B1mrfF(!MQN0_`1Jpgjz0(va&bTX`StRUtd=Zm!nDta zr#&QZb?&8J>KI6;CZaJ^D_e#+iG z&-(15J~y=?n4$@4|8++Zc+2m9J7U7%Y5Skx$^ksS>MZM@l7Tw&A-?D%B4LyC*Q)z@ z{BSLxgX7zR*Yyk8<89jqeR3Y{JDi4MV)MbwwZ6cq$T~ezVgcLF-y5F@od z$n9QKzB|F25vTQZQ2TIO5bW72%JR&hte5SGPd;-mI=@iqy-84IpMpmuRR7^C)h)4$ z;%KQj7ETRr2=AYk`BxI!V!63|`qu=(i}grQgyoml@drF$^St|VCV36Y`7P;q%3p+W zt#gT|C+s#11e;=K;hO3Txo+sdL)zBhy7-u~_KO>G5UIS-ST8auv61qzBL=!}#+&wB z4F1~%McbXV(TtG(^AN~%jxr+kV%2GJ4`zSJ2CHi{46^6u1YWQPs|@(19ySUaaIj?b zAHQE|ztC^be4%}6v@ygAw%V!+>IY`qxW?45(e>ik?oE0QB%D2mqM|QM??iYq&e=}v zZ6n$htuGBCkGK+0N<8=blUwn=%*13Mu5@@zKaIYRL~iwG?Rzq4V%TB*Q?uFR1b9e3 zE-!-^uWAAt_pfwW@3o$XR>X3=a?RRW5D*X!BHxa|P1W>ApZiS?KM~^rw+3FE+;-!K zGS=%DT31q7jbvhWwG)5uTMh>0X;ZT*!kINu^eBfi?QV(0Ht!7o)kUVz`O@b?@w@rk z|JgDeKAr&mbeL+nqW1GZk-D?OoQ}%h4*+Yv%-RL6Th&-HaCEE6AF^^&lkY>S)!Jo0 zsntlOCG@!v=;uoK3mwoj+}|IrGvZc=RqBoGI!d~J1F?tC6&5BWB`KvP!q9?r8u697 zpV6h*Ax)Q0+nG7+>oR;I-Ck@`>?ywAqfE)Wdy|uuS_Pg(tf-eMy?6@?$698!I)3dA z9Lxfa{|bKkZIM65V_zaFjVlr=EjNS+3cx7%)2%b39phteNj9(Ta)73BVBM_$clvY8 z#GhfyvQJ6Zhg^ro{0+b6=-IC|P#I?G1&?_W$gG$^j^^eIM|A=}wtcL}nk1Dst+l~6 zDzRh{9-5d5g)G$#v>(-%zjznkT&OPA$4=C!X*7l{JM#7N2yPzpFnUB`7Wt3w^^G*B z#L8885b`F(vVpu9pb*IX9t5sBFd)&g?banqwxe=+rjZnVucFsJbFr~SwPk)G_{8Pt z%3w(ib2@c-B++SoR3%>a;gL+=|KT3P#&#)bo|*jRLff{fGuS42$>q1nO`1Yo?YH&Y z$K?KYmn?4lcmLLt?}=JgQ3ML+JVN@b;lE4>te%oZvrstj?#K}RZLgX|c>Z7%@bC~k z^gs_y;^>_p2H7sv_XCWkop*~~G*2n@n?Ca_wy#RQsO_X@kLtg#K;sfLNY~dN`Zb20 z^iMO8@z6%Q(?l1;Bt3#H!G@0u{DuK=N)y&^>UBO&ih<^c?w!CzuX#YTA6Jdcq-k67 z(X?91on{uE(RxuOS@8tGC>Ep=rB?M-!X%-1ASGrqpgPcN6*Xe~)}3^2T~W{`dSpw7 zx2$^Cz1~*Y+uMl2#j>G8Ko;NVhG=v_xY2vfrK>8#6UjuQxPcc`)INCB?e#oAWGrLn zIicO8ZUwH``r)3&#JH|w8@Y`$YnyaYYqTdIz0Jb{+FJecOK40sUK94W46$tLK+4)P zkKehycPpF?Wr3!jA5 z#VLQbTdIbY4{O_&Az9^|Q5mZ>ynEw4xv z?^oXaNG9F*)AzhNF6;MfxXsDd!|-2RfKG-Y3AkPqR|nwaE*IMJ@eU4%!Y10!IVmA?bCSJO6@S7&CB({PRT!9=lNbJo*G=OgbjoYB{x zpMo$B4g})!3>)T1Y(ADVLO}44q4%mqzN7@zQPhl7;gyZ>3SkGe=va0`0>;F9LcfF@ z6nV{cb#RF?&kHE3Uo#9GWcgd=eoz~0W)#~)s3IH9t9RAF97PLy2nQCtY6}FgSE;_S z)cS(_jXW_L1Tr>8~k~3ou$%}s&|P$E|}=9F?s|fFuwDQNvj`)u`qDNBp+`BN1(V!qO(4`isGDnz zMu!bj`Gy`JrYNV*)ZT)L_?Z#r4yU=`R_uQet+|uxYxfaa=-44=%m2XZ2P((IiB&R* zA1p8B!khf5Lw^!Ae?z1Bm4d3$x12~1{l_GDEB_?uLUvociH$V+V$83jdy?i9*h%!Lp<`$jsV&*+;_>FloITG zo07@v8T@IyS^L#j@D7D3@_}g_-i#A=B$*l$n4OZHei*bSVivtUlMyPZRY276t1+3F z8TB-3Px#nG$IO^2#8aq-idX*y{t<4N!1xjs^>@Cfd{58NsWJ> zfH1KrH|xQDZ$Synbj|noqy^7hS0DzKLWVNPETck6rC_Kwa*jd2Gh>bp?95xB`CMIH zZE#OgMNu}+=PmxoUceId2PWrN;XqBAXT{@M71-IP({4ltD&g4b1|_4FWp3)TG+YkI_KvZ{ zSu4)V+6!`V4Z_Z&2Z)ix&q2e)|0`53`=xiF(Q!8pA`GGlI@GpSHYOUK!l?yURo9YA z?Bwh!jI5w?bXdl$aj7HORmR1Jh=bL97$~%g*9y4K1%&8*xaNMRw+6T&LPgGg;fn@f-KG9HrJ~v)mFCmjgCgj z_Y!cy;}_Nl{V=KFjlZ|P>dFn%st=q0`Vo&GvsEM%xDXX!Mp4f3xPjA56E)->-K=8t zE8>f0`p*)RLsg=<@!0Sk7VstANMsD<92M6ODl18Jaq{skB~}}ttVp~S;q~!V`Xyh5 zPa|!m?#4TXfxl}X85l>SWqzcG9xTGr$bXfKw_Jo+hlqqmlzL)73#@>IFrZjS~lj&Kr{!R;(hw%yZeJQnY5;5(l(5mlF#_#I@cWooaP9n1Ny+#)%QYP3 z$ziPaF^z|sqg&TYT@fx|Ci|r~)kHTw>MF-S;^&NI;R3A~{^5^4m%488sUnJ2OG5(x z(%l5*XrGSV9D@?l;XHF?I;voVI4#>%)%v5{){^B}lZmgAM#_E$fR$Fe(q6ldlZrFN zBB4wR4T2y8%E`NhNPp1y#~e5bmI_jFHNL|wUa4e4JJbySi0O=LIZ}x8Vgv`R@Xv<8 z;*cm7ysU^CC!#d-{hPGb1SlUd&nmEZG)6Hvq=gW#Xc*d z&?1@ukxtksY}cBeb)7rahW)z*IuJ5IJmi#vNf%{-kJsmNm3`BjNW0L_BC|PD=&nl9 zUsw?la*`{?jQWMUVWmC5dSGNLJik7+roRM6l_LVqX$qe(L^sw&ydi1Ou-T?%nXDtU zdqrjRB>2RiK}tKO@8**#`cXVq+Udo(?DXUsA-wllgN_%TJ(8`7E!3xgmKQ((4mOmgyqcy$Kn(UZW*X*`r{h|kH% zxp{ID6%vAEYirxw($bP(H=e>;G^D!*+px$G@VDEo7 zcQXeqaF18cr!L-gL2wvarZ!evE-o35l*pgbc;=N`*hN*(ovO%F_QkHVPrSM_3kC8OIXAW=Z?fbl5Q-! zNU?2mnyYn;QPZ2Us`3;)1Ov}{TD9&P?&DJJS0 z<$CAcJJ$EgQ|25py6v%LnEbvX&wS2-8>!N94nTIHc&YXjp11d>JXc&6Z?9Qzwr+up z+esJpza6}^P{W9a7OxFd=UJR1i?dB_Ws2VI*y4aqyv4W zGbzI`r{?$U@8WysZn$~KPR(Y|W=0t+o{pSFW-$IbxIdgw_G9Hl?xF!g+5H)zck7&@ zpv(c0w34I-xch8m3qM@zmYDTllernD?z?Xa*YcpN#no{ND`0VcRO1D?p)a z&5DO@9`EHpEzh>o!ji9s+@O9$ww^svrEHyvrH3go3%CoxYeMofzOhbSU#e$-lg*FJ z62pb!-TNQUsr>NXu==MNK4{Fx=DXOomyF=!b zAXV+orZot5-X83w@^0NCJ#)A;rj(xm?$R1fcjJ(dS8WxQ`%*mx4V|~{k)5Up$*n_) z-0`;90;C{!50AV4@|vv2BE9?T+7-hGUv|a`y!6NGoDf-Fy(}`8XH2yYSHa~B-#Q0b z0gINHi}}wm`aWG$F<)^QomApdVZA+4q%Ey&^8{txRo^IFK#85P-OBnaBUW}*8&vC` z)hyz!iGkVM6?3em3Z*RXq?tLml(+LWqlRPl{IaTncT675;Z}U%Ehw2gCWP7>xD0qmIU9Y*xD$SkYaMh_ zv2%}cy~Fx+?}7V@Q-tldW25&3rL|@8O8_nq*WSEfnpVAVVDviuWui1kMZ3EE>)J*i z*4}KXK8&s3LG0Okc~`P;;#7OsO3!TCh|D`@@ADO+w1%J1 z^bA)E92o9k2uA*9*M+9*^|OLDWxVg*@ycL*KxJKXwUVID6GdY#{8Ja^p5GN!TW zt3O=y|2QP-G3%Bc*9I^v6MP$9SF@*k_?q;iT`nI4W1H5Rf&@FaQXE<>vsHMHtVb%8 zIM5W-(}~7EI#PFP)EijM;`w+aqv6I)F^KVEdfES0zMb0DF}PLIc%!D7(qtE$`B^<+#7i4RSZl&7d@{x4K>!Q-8| zg+*>lOX}4gXnPlc61@pM3?!F9dG$B_C9SP&P@qm#Ss7<-ZOzTiZ36-chDN;74}+0} zMjk5|!6(pmgoD`s=rwQ-S{Z6_3zJ8KSBS!u>lIHhK_xg#=&4bb@L>8l$PzXFI$U$?Hu)4l6T$bPearX!7sKD zTEL0voYVlklYfhCzHR7@MirD_9Z`OEtco>V`L-8q23or&w?`0U?y=2+(x-eXoui%| z52+7<9Ftq8(ZsfHHyz>S9+~-&ds-q7^gLhBQ7Zx28PEpnaAt5`GHY1o~JQ_^k!j8^>2_5 zKlf%KU&K@P-gG`bhppCVs;qE*e(l6;W<`D>=ocau%R4z3ZY-~==5UIal@k679E=mY zpop?31kk9=7AFxjoVR1rDg2I;EahG<-XCA@``$u}5qj$ED3@1;%&+$)vD82J02VfU9?i6fV1c5#f{gmsg+52NTEGnd zI+&>X48FiNUw$94iU*DxS;2iU$YEi+;|%7pIdl7(cOl{!eU;u#&GZ9#Q`Fyj4m^bA ze^a0cGp-+rt;AFI{+rSLH;h2u&iv<>V`1x=r;0D^M#8bNm@dw-xE)^P*{ikD?d<}W zmzODh_)PEm=xVurlZA=XHUNM=%+@=DP}#cpBQ~T zQ)cd7{IB?ZV_bh~n`o*vhndRTdGN|^e3xf7Z|!f*(q)U7)aZ(;&CV*+TafzPWT6At z6}`VZH1Lsw2C6pb3X(;E4F3`*n4p2mQ(=xTaRmj|s74=95KtqWP|&6OE<0-3u6UIs z2I9Cr2d)HGk!eblZ0+CC*|zjOYj?%x=kwRWb~ z3BoR9)t&IodCC0Eo?8>{KrXkf?Gvdbz3WhKG~h~4OCZ+dUcQ1rWO|XrRQrpCk0x(s z7T9oqN{h8|WyM}J1T%w)i}Oe)RefJaclzr35O)wmUFf&^7#UF->2rh5P&Yk!9cBh8 zEysHswl9Pb0rnpSHEWkm;q>h8On{FgVY&EbZJC9WwoO+P}u?xQ0yStQzPe8vg*xrg+oR zRxYj)ff@NzZQL&cn=A4Xr9x%oqx!oyXq*ju7q`yEr^Q6cA$_ez*$y5+bYLed${8-6 z|4g^hA&y%}$HY?lHqXlvtJV>*=D`wt^MWhhb6Lc%#$Njd(F7DvoH0K$~BR zBL;*$7~Ms${b5xFj-V?PD|iD=erK1JFo!Pv>s`nApLV1$y*A9Gb~vnxugm12okX8q zSSilFQ$e?^89$E}!oB*%fLV?qzPOC3;~c)%APX7G>B8hl<)~gS{gSFo^!%M4{en6> zHFFG76xhwLUErlLFPYM72s4mVh`$yBXUX3F=Ql{iZKwc*;i`Om31D4lwWWoGv9P!d+}Yi&IZXmJgC^O_`5pz?v)r(iBQIl2fsu^ImURn-XA?fR;{I4G-oDw7jtkM-lFQOh~s!s?7mxvtM>Xn_s6m-6MMqg zrDi9BE?C9aE=8YlYd16sT{~GKOZahZg=ueh!mU?Penwn%iJ?V)Jw7wChWdzRRk2eY zV;eK5twq3nrWh%sgg?+WhZ)`r-&wnMDWI?Z%<0UJtm{5v4vaR4Q5u^bv{Zc(7R1Yf!AKL zqOt8R+<4_Yf{^Ft&T7z14KDY$SW%@+rY9Hd!2;1Hqz9T-PH}EYOcbt7xa^dxvQ9r&K3f zz3cY=;G-YOGT&TXkJ|B2WoP5sr2>B#c~Qj~+n}E`v!8svr1t0yd3=xyB$VGd*kgSm zH`aaraLR6@{JzVUG1_R)m}=ZD$&9iwCtQDM+1xk4?jh@D&dF`E`DNMc!DkWv(V)SX z!^u?a-1@hWIWUE_&mALw;Zh9n?oPa-sVwAWUu&RYt{VG&E>?8eJ)j~J-5%+J_>6r= zoz*BA^zj7~LpJM`Hu180cx6bR6J)^}% zk-mfYXBAgW*Y$G3jhW~k`|YNBk~XxM@;aWTJIu!wbM}j+dwpOBESUpmeFA5IKEIHG zabDj<2a;gBzbPrk1Zw#H7u)aOzZcO4LmNi_C)g$~_1fWPoXwTj>6Pn{5D^D;hZ9lVL|(gl4WX)Txt{2ZeoRhQ^gJ_IX(yhFLLZ_( zkbNvWDt*)Dw~K3<1Q$~mAC>WXEo10PqmgwW0o*o@X`tbDGfA^&nlO7+3cjErIqM3H zu>YFx6aMprkm^~NUb!0@GO55S)EKVGDfGYhJ6Bd$!8hfp(e+2^J5l^juC9B}4_6!j(kK>guX&&Di2qJ9c63uTbuO8M-gYV!PvTx5QznJFn}-9VrXy!&~il4kW`>~TR`zeL=2-V!*A@>D2EA%h(~s~t!f;?XXpdw-*@>@ z-2HF=hzif}_IWSi(o$fVZE*RCGMjOK3D?Z^we?dmLKzl`CHsVG-^;Sh_Wbm%x@RWO zt5LcIq7G;O;oIxWV`HjBXw_%I|G8(q**d_?#8iMN3NgwQH%M2PkOEa5%HW#-*qn3d zeuILRT6T{BgtmWG2Iy*aK%r#-atbViHb>RsT{h&Rs=2T9+fUFyxlpK&@oK3{Pj`8p zZb5G(sJ!B6->^~6b?I6lkqzMjjW4i|;QgY3YHJ0dzD8BYKC^BvMQpG{{<$&$C^P{J zt`Oj?ifV)=1wzrYj^#Q9gAMOz|0TuJB6Pt2;sVqz>DzutyO+@dYj4tF+%7RqTru|4 zsU{{^)7$ZDrmM)H$M3suqB@*Eo@I&POj$OVH-!CmS(byIu$CB4vPQ9+aSXy5Cma$c z5U1d7!r?p)MlBn*!N1ws#|$2LwW9>El=0BJ3Q}Dfqdu59{I$o0SaShZ)TS*bPf%BB z+zvxJ2lYbSHO}13?dEP`K>e?me@Vj^(cjathb?HdZ$qe-uHBBWnr`JPF0G!{WTwJ< zRn0jh35?9#Ei-h}!I*bi*_W*P@@o0v&@}G^SS+s9W>7u=_**tvWOlqk#D3kLAt$YQ zyuLZPT;!uRv@*C)!!gCCpzbtjZ-W#~0O62tpj9NmQH9ABBc{}{t=Yb<6d3pE>l?;? zAyZ|o3C__5a#2s!UH+xTf3&7EG{nelZO8$Ox9-Vag0m>AR%#_uq?MkLr{{-qdcQAp zL2E5-m<118H3{hj{>F@9z-sDiW~wW+C8p~9Dlv0p39f_&H5wSC3tRSyi)>4S70AX9jT zoM4nz-7ul&Jvpi8pR!$Ra9FmoIMc9R%&QR7oniCt(R!C>WZtAz5j0cL?v-G1Z@^7b zGXACSo{kNjkfH6(H1|tdFw6YEiqUsyj`u&5jM^2TC8JF*ni==NI{m^)v2qHdjXaKe zE$e)$i_fCS2&i=!{_OVeErOjgNlKX)I+0A) z-W~~Doj^bZ^-8sf`Ex|O>Oa;-D(t#Vcnhw!!KpTOKhlXK+xmBIvTnkM>!y2NWxJV_mp*5Q(Z>N#3BNiRwXqnM_;-p9tS059%`B6xa z4551@8klUtd^3rXuIs2TEefC`QYyS1MpjoR~z22&N?x*TiUH4~w|E*tvo4lUhK9xwpG)H*+ z0}|xIpcP*M`|FrKqs!u$#oX+CQXSjUlv(|lHTFDsaZ-HL^Q;*ht#ZAu!EuKTlCC}O z(x_-j4pItoA-`_U*sU7U7cdRfIL zD&9XWguIs?*frnH|TiY@m@?U1lduO214Kz|pwhCI-=I zGyG1frT>e3*6_xvipDKQO^Ng!QJgDH(jbfo>lhL^3ol{Ls^bY|(TKJ$Wmv$~Plm&d zNav?%#+E8bA|Ij_NY&99b!1s=8FWyNx?X z&FKZ$K)X72R?7KKR%~(mQk!36Sk*{~Ka%UmHRyB?D_M^%gN~mC_W}sw!*^Md9+3+@ zHQ?hJsa~lXyX#qjrJNo6@|sCvrl!>W`aCGZ8&;ZCh^+0-U>d7xV(}bVQseZPR!C*s zIvW5K-}pS0rU_=4vE{)FF$vT$RQhv;i&nBVxN*Vc>V=_F&ODZ=(k%4ys){MM>agSC z;ZnjQ+b9*7g5on=9DqNpwf@%Fn3>qx-3~uo#?jM@YRbJsskclt)e@j2Om1?W#1?gh;ta-d&dgKi=#(Q=H@O2sB@DR^K$)& zd@tc0v|qmt+!#eX-bW)-aZOr_FC{GmYiI54BZ?^ zk|rkoIaDp~cbq!3nW6q8dg>0a4xfweEd?#&)92iQ(UsS?Bn@4k%`2FR`)z`;50&Gd z72{6G*D3e=4q6NdVt>!B`D@5cz@JGtpEm!3qyPCZL*OQ-z)xXo(+gvyHN62Eq{ z6OZ~mgbs{=WYVbkc<_0~(GNH~=~Q2f44D+_vyPW^UeAMf?)a27W!XJTglR*3Dk_6s z39Lz@#|?#7yihgsX9jha%MD||cU9J;%jVIKK&NZ%UH_HpF(6Nsbt3HrggMa4P%F!8 zl^7So_ARix`KBQR--u>D%G*Hmh?!*}*oPvkEuZ)X~08;v`>L&Wi`qmQ?MbN-MUt zwe;@dRqn@G;?B1r151Dh9qLK-)txUuZ!(!b3INv*VlMHpaDA*M(3IYNnXZ9exgNql zX>?%(tUaUKWI}E2UCsi$eRY;CTNFI#9oC9BB6EFel1qZ?udT1V6kGImcen5l;k~D9 zsL#1aPPi`cqIVliOI-bPKfq4(1$(tQ^S6?cFN`f}_6lJNt=x9mRJUF;^|HUE5G%1w zEGzfdj1%lr^LrzLubq3`>eHz`PrRU}ka33zPGGs4IYts9!!g?#t-9nJ^ZIuG7)zLT z6`K0e@Wy#tU5X-f)sypF0Vph}LT0IHebe)~$PWIxX6qMFB28XVw(U?ONk^ z0@F8iTsAD#o@<;(8E+&_9%p*5r_`SN3UD7-pu3o_QVNxA1om47gjEQt?KU;K+FiEo zf~_P%NQ}SpbCttbYsxPA((8F_OW*Np2uQ!8x@Dtv3}}t3Q>tUW!Ex7lkdTni#7&>- zGZiu!-TD0h-M`Tj=|5N7T&-M3SFbF5Pi~w6>e>3d>Gd0S8Fmq8kaBu{D>n`z$>4?G-zEz${=}QMC==cX5S1BX#=D79c}6QD?){QH_gk=zs7MpuH%8h3 z`sB*>-vkipjOnb8>)X#Rt5N_-YKrN%6s2%N0@pWTK6?(mtn^%uyGuIqwpym-sHb_? znpxl6XK3xEb=yHvw>BVtY+Mrdalxv40I4tXaAI8kGoe!R+K%ih3PHKeRq8#xo6B28 z%|zYIMOU^njO~`GSKL18)43N@-tR5^^<9efSG=Za;>-0+?F=sjyYeK+_<`annyOc%;rdsOG_=%~G{D#9#APw#+qme-nr+-RlSO}K zw&Yz4qC6Z1s}&jF)?X$FG%qK8tUM35b+#{4QB2okw1ywg_m+X@B-?N2Ra{kibMp&# zl_*4jD^8-8ZE*&=?X|)-$bEV%KwAazUUG$r+f#A#!;t}3grsuSX7+N{DJxMMNKO6e zn~A2Mn+2uY?*qynh7zOU1UKk)0)9SkC|4e$6>D~XfByr=XuZq*(q{36+cr2;P; zNzbhS)n7Gh*Iyv=@7Zd9PgVP;ha2j>c^zPEIS3SZ1CCQBP1BA@LM#Fl{~@k{Pg?;? zge^qG>R#TiZLgKJpOdgCVw8EZ|9aDIHwya9HMUK}kR|@kL<4rImL6?26EkY&@Ke+o z5gihTT`p85LODss;vl!0Q<>=6pr#%9C6Od$LOGoE$X&j_Ih$?}7fj^{l})uxFFbanx9+Cd zqmlYv3DaWz`+~e=;X9uLsq>;F`cX5+(Zhb8Bns&7HRH1cq>CW{ZqY z=P^ep#U6L6oQ|g7*{RUT)2qdS)N2v(f|wKmht4yRSLG`p4yO!X6bLQb<+(@k?2jRk zPjVOZ5o<(#^MGr3VrRSyll8i5T3gb0QOfMK2zdtUmwiqZOzLP*dBIPN{P#0Uq&JhQ zeS0POCsm78ib-lqf-*Uo)CG}EpAoUb&r6FcXq$precGymK&-c^%g`{-{L+hs#h!T#IPwq7ZejnK1Sf*)-ugF zL_xk<%15Yc?l&KB%y#=|MB$SLyY zb_;dA1ddE?r4D5heNRjpLAEoOvzTNS1N}@;^7sW{?|=0eM2-wYfK`uI7ulQG^#Yh55_lEGniJ{;8^M&9+=ZK{}p($gBHAC2JcCH zR9Rl}wXDe^w_*TT{^#ZS=4trR(O00VUo`$4n|}U+h}Mq}PSQ>vg-z!biPRI|=$KjJ z4Hn(tP)-T#EVJvooiUy1@>G#=I(FrAXQ92IIc_gUrn)*76>2lDq<0k@u{ox>L$pi# z?CzvyruEJbNz>MU3W4aYg+Z#SwohhrmO|}!WKTAWBaftoxRq>peQ5q;i?Wp#WrX*W z{6%Esd`l>mQIyTz`BB40y(_Jr6Lq0&7d2&19#~`L`erKwg?mpi2`au$zVtW@m~v_{ zqIeJ8@9Wjd4WVjhf7Iruy`R&+qN2(+W#`fSrj7TL9hHXGP&IroFS3cWeOnR#=UiVk zscudnIn$seci#tjH;yVDK+LkTO3zsn8`HHXW>srbI$77c*ipr= zCEOl}MYdG6pTaI6JpEZWMa(7Lb~L50Cs{}6;UQWDtI+wh;my5tx=;#ySK5{yys=X( zR{EP9fe7WDI-VQ8J;z5JOO2w>gwL1KwFE;C*D108V0MA+l1#XU^AUN*{(E1nkna;L$;DT1D^!~+wP`REXgMA zDJx7@UDHaXfA{xRpJW+F&Gpy3Fbb&qkBb(I8ku8DO5~nE;$+IATVegT0?i}IVYrpF z8C4Zwi!<|e;T*f?M!cmWYSi}GB7bL)+!Pkg=EPW4-9$ZjiqsGZX$qR8hB($Kfo11B zAG1H1sB;a-5Q}>H;ytFM>IVH)iaJW<;%t{9M(~}e1NX00l~b4~3lNDt6H|6BVKZfX z;2VhF*)Rf~%!*7+v4(p|qwXEV(;~Yr&QbRCCOBRv1|k|8On}GAvfvog>u#=mucd=c z=M}=SPLft!931TdWg=;EQ(t(`jj9gERWN66d$kbEm!NOir0jGk!S|S^Yw}Eso0w3f z7mhP#P3a{WPv82OVH}vx=4X&#JkD}I^t9kQUk$)iMvT29c-5fB$F*`C|RSAEOB zcwD_|elXiHBDg7cdD^wCd75LK4lAblsxN7q8tONM@Y%$K9G8=O(Tp>oI4d@+g+6RrB-=snOu zFHrM{lmW8u$`OAF`tcJxo+}84cjJy}M|q-GDM!8DQq4AW^Wk!Po9)h(r(x9^1{QYm z@K+j+-Rp~Z6WdW2y{qaWQh*=A_CGw6IKStZqU}0)tBnC za7`LOz?uiYP`=C7YnRGoJfG~A3Z4Dsp!nJsVsgH@4mVNm%ygB_Ti1!6@z#@0w??r1 zV#h0IA=C~giBU`26&0yAmy zj7}`-iB!2VGY7}O!~_~$B4TvE|NL=!12j0phw@#SGOs(hb-!`_d=aDWpQoQh6n#QYd^w?)~OSYRCMgu=^zMi7Au!d9y)?2rNPUP^hBT~aayq8 z&6wZLX4ZSOu5Cm?Z^DcDAdnQ~U-%&D9H+$&F;BGzqUjej5G>|DAp9>Ov0pMmJFhbmHkD_c(p$tfZr`xv?li}il{)YQza`2~0VeTAQw`ey9;C$iX z(4tG+N=G2+QABtVmzE>SiqpQn`RltW%#8uAc{)y=b*>`ZrZx|6-O2vEHKl(W{!POy zM23n78t}m3*)IskIQ_0-QB&f!_&}MgQQ%8J(jZ+wh3q8j_W*AQMRm{%#k3cZz%1vbNM)%{ z4>ihct2&VesWbcaI?jN6IVreN zVU|JB?-EY^8ZXcUwI4@E6?vYrz{-E}qAisoS1y;n2ec~>TPhTCbHTSxGUOA+3^ULXu= zYY1p%sVy*Sagtw^T4~l#vz)k|%wSm-lwhjkr&RB!GE9o8eL{MTH?-}WSQ4n=C5{Va zEWP?^DPhSb5%j84gopfw^nJ?J@g&SCXppX2k2<+w)sfAgYP_Sl!X}csHVD^^kh!5? zOQ+j{cvh!~3ju_nEODofFw%yNwo%FuR9+eB{nDVMd}r=yQ(w-)5NcZZ0D>cT^(G~D z$r_I7=bYqnVI%7<7}A?<2OPe8Hc7j%8NKEIQSc)DAyWZ-(^)?jL^n@YT|O0FHgflA z-kH)MRvKy)FY#zb>1T zWA3iwlf6oGYX!bp6Nj1}{o7CF5;j?Kf$jp0awW?)LH?I))(szbiCivkovbKpb=kwb zwXa=NCmq*QZ=oP$lJp6xZ&cy_xW@nwwp|6Q)Sjiv)`ZsEHgCl1U$i*Ub-$+6>)b~6 zDeNzT=RQx*S9ArO*VVe+pt=WmYZOx<<97#OK8&!FcGuK7QF2?dS+e1?`U3CgU{X#4 zUKzGhwHGZHEMrO_)^7%}UJ&Yv`Iim=9|CyC)>WL^;5|;YK{u2xGaN_JQH11+**7T+`tiN^$qW7(x^x*|Y2m98e-*p_(Nn`6D&YgNa0RQupeh>eFw2EW*BK(^DA+>$mvA$|ue6J(vyNm6h8p!>`gG3F{_j@AMzcLJGEfal_tX@ya_`yCvUypuaFnPl*`Czi{eP{lM^>HB< z@Gu_jr%>-qk6ia_0sx%EIJO?7%J^j8MDL^kTogzh?=b~gXAEL}#QMRaq|W^MrX^T4 zyBJw^`ZLt|{;fy1jQN5iN!1-X-HR|@+TBBDi(DXsCvBnicQstN{fSo3$u=~pcP@_9JtpH|}Ab2xXCHTkB0Mvf+kT zqU~h=>9c`v{(v5mzSN2_JGhDM1~vS-jS<#`aqi)yj%O3}IIzmtH^bBtdnF6%PK2L} zV&9MYdLk1Qy2jIwK`?(omOBwR5R=Vz(%H#=jUjsc!q1%j3AHt$tKc+Fo$YG%1EZ&# zRoT|(E-Tf$57=3KPwkXUy+A6XIF%$BFQrlt)c4tt(?-j%8-IdgE8P;kppjY(v3s7>6(K3eNTTOG*1N9~M)8O{6-_D0qYLB`q!Y-lN)VhmL8#eMwhxcgzYipJ9$vOkx_&_-GB(jev>C4ZQtI}>d^1z+5Druhj zsv)Nv{D?~Xh@%-%gO>F^geX!+KEdO9y;<7;P%72`kbu2CSNe#eVS&q|8ylav($B(B zts5qkCg9g^1JLvdz{y~%cC<+DH*m@)U!3En^Z%+Qnz$*+X$GO%Z9N0-Aoo z8}8%#e+@2OGd~dty>tcAw3u%Jt+u(=(L0(VElYX#*5^h&;!*AUxz?{b znzZUWpo>=PW1M{NoB)Op9go;3=S`@?c+7iF_i~Tl#&Hbl6f|_f@t3OI?L=lSY2J39 z6!!69+lz+)XMH^N@IA*ZT{Ce@H<13Ci_Mz5qhAK}0kq4|{IWc!dS-AA2)f%aUF+?0 zG9Ixw+lhfD-VWGQc|l7+MTk!e$my#1*OpWd`AWF?wLBe`t`Jtr>cKw8TKtu*yN4ljpXHRyy&cabGP5# zmNoubb{xfaoZ6;pf35e$?Od|O3n3)6Uj_8|-rK6?Qs%UE#I4YeJql{fxP)kFta@|sK1qSFQ|(Xid5;w6kIDN0r(>a*vmx4WoRReDWhSTI#k!*Src zzQ?{%n9U0-e~D!lusq5nlXFbP`vr?FHPR(xSzu|`l`60yXvAln0YT$>hMWOgcg|`> zqc-8iq^&gT5)fmjLnkw5DaZuapTTp^PTHf}t|tJY->4 zI|SJ;f{n{oaaZm)*i{pdc06Ij2~Al;vM&LL(vGj_SxO4H>_ob-M2QQcnQ&J}FPcSArxyG0hou^0ibi zADqqa1qG#wC<>Q*4P}gmPTuFfoxkev^xPS&?=OZ zxTVerO*P)l6XU}1pmi3-uIg2rCUkwizfL2`NZXn@f9?@9q@i+QfZTyC#tV!d1+v?z zdyrbx^Yy;!KsJQ`rto+ioCc+G-`(Ug(;2LyX5>87tLZ-DCRjb&ageaNaf0NW>47mL zM-;@lCjHEwuTWmh$6B_NMYYco{8wJ{| z3-!IO>pAImmsM7u>Jak0?Ktqb_Q&aJ_O;4-L67Myy?JW!k1%VEU)?CUT+a48;v|;o zb_)T&EnDz-f@*4S{Kp#JUC+s18BQvM=qU~-&|br|ae8~cyu0{!HK|~eprRVd;Sm0> zT2}g2Hvnxqet1`~az1y`RIXUDNU@}d$YolZ{XK{mx&Yjb$@u!WV}@CG)B*jsWYuDU zJ9rnVW8Z%yjsH^lZfo`GzQ?j@%TeGCH&2^8$uTR0HV^-gaS(i3O;jGbARhA@bwKM* zlfbwzZB675-{LqoN5{`K0VHcpB35-|Bow4<_MX46jv{{+6Qq}q5%j<{Sa@l1I7bbs?Xd0V#YQhHUVL4!t=cqj2&95&@yY!o(?~iwL zj82)SAe-<+{z{fCj;=}+q>ah z!6PJ^7k2l6g+vbOd8bcaat1R#>4X)FMUIj9OJLo^>tLVWFkw#k{BRnnm*PWVknb7Y zSZq(%j%lendz3Y7M!@4pCMK3R6>>FuUX{SKxahnZ5@PIx?3E}%HgKge`mwLnvT*EdYzP+7BaRx{hkHYYsrUu<$!UNWp z2?LhG=UedHap&&)i;Y`%yW88T<>lbv)iy$s_V=f{lLzlk@if0ZhUK z?u)f;46ptgFY=pQlM=F^ONGkMqs)|U1Xu9UV&i>WB?)`69;`w56~$?^qQ8r3|By&k z_Ks>(`<%m1vy%0Cb?TI30R>mdI5}WihDp-sx{Gw1W+1?y`Y{)4{*jJL=9XbYIk(Th zAACVXdG}ptbl5#(GI}zCwHOoM(UIxK(x1}C#_1XIlzm}4ps84eu=xtFuNBf9aK)t3 zM*ahaocQw8f>2<%bk?%a0Z3mR6h7yOR6G_Ff8sN+EPlM`EsLrBdGgpU#b4oj`*Xf87sn<2p2K)ySs&rKsyKq{sj~<{^hZl2 zh#or4THYkldlNJ^yOiC9og^c75K6C!w(L}np*{t(VLSq+b_>H^FFA0YIhm+3jIx-=$SFit zvqP*mhqG;zijzojb=fbBz-XC4E|aByV~{Ce28l)EDP+M(#9ggA^a!*^Y_sv2 zesc+yb^ybb03{dc-8U=gUmAj5s5Uw>T3R0xHnzK#qkd4b#T!uCDWY#<8xGSt*@I6T7c6xxbC!_J^g z++imzW;w<(LfyGeoVX5-Oba~(`pZ6U7Y#{TNa-b5`<&gOG!e-3l|}|J_GCHSO&{Y~ z^n2Z)numr)*LRm14AJ2fZ`-Rey3i9lTIJBc(3HMq1Ui(e;uYdPcitJ}echQ9!}iIU zR24Z46*QNS5@_y{q5GyzggN)V&9>|NH>3A%W@vDUq-yc1)Sgae3XNa}D?xP?_BSM) z+mgyk0)+-9AgzDQC~(d&J%pIbDh`Yz=Wr{FY^h}d)0gTmxj16E3+DL?^US*m{w%wg zaqt}^QF5WPDd6;0P$bJrgHX8nSXC_syCeY`;i5o9Z60k< zINebIe$M{Ldqq1K7Jn}E&j}$^==zRnD*ahawn0SQP_a2BrWi?9C%M-nocjB#0wYyz zS{z_M2h*209+@vvfs|U;NbgKNHw=X_(jE$S%d}V@OB@bAOMwM930b*^qN|eItAV@) z^IrAj-WXcnuyTKA1Xm9Fk3W)+5jO^^LrW`0knB2srG2pw!m4$Fuu9`f77F5b z6vQrZwhxI*LvT*(4(jk;ma&T!IzdwO*C?r8UOo(|T~D*h78ur)g%tHW26l!yru72} zxuM=4hyDsJ@C$ymp)xBQVY0jWHIsqCoHgt2dF+1)<0#~H)70^^)<+mImSH0YXako{ zLWI+`JDC%Cv@`}GQwY=g?R`;Sns%w8&ybJyb`NJLB9FQOLX8tP=kzK&&3N#b^Ja&b zgnil7vuNc{%6276Ro@KGfih0;>b78J?NbNVs=Nw>C9^k~PtcGC`f_jc=*PO(S`wAj z%~mZ7s9wIMj_Ad?KE6quZ{J~UaX6mw3YGosu@Xx4IGYLa6 zWVnhOh-0*;_*Lr6mr9Mz{byr}0!Dcf%o5VOSa*dem4>8;rofsn+p#E`NVyawFiiwr zuKPIRY$*0m*C;_-Tay+mNVi&sV(j5=BFJlPL{Fi5){3*)Sgqfp=Z-U~RBzo|O>bdt z;v}#!tHnib2=@=2`W^gXHa556iTSy1@1Hi!;SCioJMYRiE>$Url+1=K`L-sK*AKPhg(> z=vh^yG;Aq}g^?mjLUK&^V1j>bVa1ooKU~fbbVf>ZnV3#^>MT`^`0CHm7xM#X{g_Xy z8`_%UKdCu*uhRV1DK8C%mtac`-k%3ZzkhtLHNd^Zs&#sH40m}9P`o3+xlgQ>q2y>XKxNj zJ>ZQ2PloqniqS(Rxf)#y;>N~gxMVX81oFEXMhlK1r^zQ~OTLcFJyX=~RT#hQ%KQVM ze5!4N=cA?f_s2p^=m6|kb|2AmUsKgjS}*$LyWiBuFfrRNG){MA3&bZScgChaigyGPQmvGA>Qd@SV25SG z=~*1?2jB^LscUqHu@GlDm#eU_71ZQLh^XFbJu4mdbYc9OUB^es$SzGc-0NL+&H=S(;oc394LqHISJ9e<5!aG+DoW(Nb_*cwct-4g4zUM|%dmb~J1qACbY7 zCAwoAGCOQ~CNg?r-sa09$xYuEV~V36&>7j+H)&1`d9t4;y%NG1!^M7FD00XE1OX@d zd$_*7)?Dt2BaKk)YCHCg6UVovEO?4km{dxR`&$L6)(CGNOW@QpWLPSnl*Eh(UOeKh z`%~DLSW}!Vo%EiUUx+tpyxk`IJVi>{Jm$QYeINHITn`S@cBHTLwhWNdTxzcu-7vvd zDE+cxc1xYS3FcW1L`8Mk>ozJ;{O_v`k#KgBd=QlEE*|G?jevE zS9DMqi#!)6$4DK~55hVZD3{_A5Ez=8!X*v|_HTC{-^#4`f`ubr0c*25buh4XZ{@>D zlYn-dBJKvuP7|gqrgd$><}7$E+Ld6>p1wLlK(2Z@im}SZ^%8wx&V^#>?13ZKjCtKV z@DD}cM$%aEkj?9!j%1fxwQX$seJ|d95eP(^mUk5hs&tYO-^D##2iE`!no%e6FO%Kq zY2eg9dBx$&pRHj3UD5LSKN;z>9>^arbozhkjD8dxd6#$%F6Rg{e6x^1%#P^b8=b7X zb6%%Y$B%?gltz~*c_{;Cn^f=L^2ooUPKZ~!x&QH80&~*A;}IPTBJT}!hQI>$w|jOid_Def0TvA{|r3v49pC9e`>3C=kj#!l?YVr{sEKDuE$Kw z`L}O2Q;3Vz&V~SIb3`@;*3bA3E(>1=VZdC=4`D-3^2{eyKbX$EHnKlOKd1tHP&6H- zT)zTL%`&PY=g|1|Qrq5q;g?;XD2T=v`NjjRh`zP}y4XUipWv6_7~@6<%secP<((J6 zc!h*DFKjflRD?F~kE`ZZfW7y=@Ss4+LcG#EKVF&74ECXie^#cDfqo%O$zrIO{B*&N#TMeNW^0h_Lf-sM0fWgz7pg}nK+!aU#b^+^!6`n5c zU=}Fo%p!ov9h*wzLdI~x3mnFVn3V&2j182O+sA_W?PGi9+$MtASy!trKc*LRk3SYo zrP`>J`a%U&1?fBzM3M?x1@F#*UpkRsTj~$yy&FOEzM`WkL>Ht?{r$5JWpwrRk;)3( zx>nJ|S~pQXoKseU6>fd?^*ng+PW4!DsjUYQ1I(QBxj z7sFgpPCBEI@OECwUF{`~zxIJ=1_#vEe5b^ft6W6o9zOKYS!8-=O1LW{cZZ@c&%>~d zw>DR*oR`Ew*n(fdZA8hVsO5_jszG&|JshX{Avz5|168av=Y3Mo_j zu*y=5V!G(QjS=xVLbXQzQk#?0KShx-$}BD2;Ty&q*>hS^cqH;&w79QUueZ|N*ML$5 z##q($zbrSoRbG8NQ{C4fQUwlUxkA(}v;C%SR9iJc~7;Ro?7>jTlP3N)SFi2zYlpyAysQa+AxkDf9@;E+=M{}=azvDo$ zv9k@mJOC`~v}CK<>wK-%s^6ClvFJvE8+Vt0w#ay2w=h|KbVgj&c1~u##xod95AqYD zCekY<1J5AbeXXFcdA$X?8qKE{-Njcuv$yK5_vdN=#OLQT_acGod-44>hfll8>-8>~ zg@!svF7qw^qsH48s3RSP1gojiLiIz?WsE2 zs}4qp`}qUbLAbN6tSv99C=~_vZ-xU!$_KrVoLdC6# zoac%ceLp%DrDlbe-Pj-bsMe~k>@Op4(%>CehMrNFn^9W&3^?ghsMa=2dmw8s^)f40 zWzR$4>mArsF6DaBTv{(QEYDk{E+gCbMB|Zf>Sr%cnEM}xqSw2OYc9te@Wq-5Wb@JH zf8t&w?sU)b)WMIuPjbS)$0{cSC7)j!nBWQ1tHRNq8eO=ot4o(as(Nu-Oap|4R4A-g z&uw|`WHMg+G27}(*{{kqbPW5e`7a&{9GUb{sulS3V~&~QP!x!!!)(9K5HgT|agoURPbUQu|`kyzDwN&cKk zn^o`@+#(03yHjCO{;?bZ5CCSnKhZFb1`nMXlNFMgJUWX&9w2Pg>emH!x3kB7Rcp(f z5zV7z1`YvGl>w6;(2i1L=EXBm;Gf!fLh4Zt%NeXG3G8=~9GO+0Pc zl<+hVZ9W*6!HPJqGS?pkq;d~2u`0G(0ovFr=QlYnKmYN=EonlF^ZfFuGuoB|)|B7T zM@9Ba&6Oni6q7Y+>o!@2$0c+VEQ~4t6H{e-;>f&>8j8Y~wZmEx0R#j} zj`;U)iUsZY@o{E=(UM*i6durLV$L*%iLpuEXIE?t9ra`>(N~L>#iNeNS4jF(n}(fS zp7mwqLGh7rr)g{6u9%LX-QmHh*QgRLo2x==*r+-7$I<7+7H+`2+JU;c>!utxG>2Vn z+u$|q>pdT?yxL{t`BmJxH}dLX^uu{5|CLtA@eooG59;;zwapEeM(#D;+ev$r(e_M0 z4NY(Djkk9DIWCorR%bLTgwChi6+X80wH~w6$g;(!kN1H08+1b%C%Y7~Ae*y=>FBYB z2q%8mu&rfd-%}IS`qTc+fQ6mi7oo-06%nS=OwWi6!to2);lXJ1Gf{Me)^YIxx=!QNqi=BFJ{6V%Z2&swa+ns+If8WP+vS-Gy`KT7D_UA+!KhEZj8=eg_sJ#-T zHlmgkqJ6ro1F&IVB`g$A<44_Qkt{V!+Q+b?lW=M!ojuuZM4Ajv3wMlbd#0c|c&|+8QE~d(MHw z1%Z~^FEGb_lcybV44IFEZ{We* zW+AO4f$wV+Ihw|p@-|pB#hGb%{`9?48o{!qj@~Q9@`^Oe%Y2-BSep50pHu6zBp}F^ zP~B)w$^GK>S9cGi(8G{vDRq~A^+Q|Ok!kqZj~UEIB84@_Kv<4mu&(~KB>b!_ zqwhg;3!bsEE8E|qGcCfj?y_hVpt;EFO{ir3+yYi-6&7Y|gc;XY=pHsDt& zR;Ki>C1UnSDoZZ(ou+1Re+? zxnkU=3(oY+%&oLx0sSpQn3JyZSqye#Xk-||h61%iPO?(Cv2f&<`Nee2o2Y5Ax~N}y z=W$rr7%!DzX>G^)H{&F%!BQ%|>FDZr*B;~l-p%vk{C6i$8TK^QT!D&RZFRs2y#1rS zDYp~4!koKb=3Z*D=vw@Gc>^7iogSKg-1d(~LPu_%FC#hwG_-BSFNfb8LkCyT3SsK7 zc>Qls%|d5Ir-A>1n$Di$6j*8@K_#oTqHZno#K$!bi_}Q!>DD%omPd?&C{uO480v_n zAowy?as_%>cR8TwVdL_>nm_3T#=^?k=9z2=6^Pc5Fya$A&ZEbXbf>T+jeL78O|3eg?)mtJ=#vr5A+3Z?9RWNI#hT-XItQc)~X!2 zeUe;M*sWdYUlHZp1nW2=!5CH2Qrq{@_z>p6`aElR)39a96h{b&%Y?tRqS|>y6qJ>a z^kB-}!c}nc6#qvpbhy9zHc$T4HU9hPT#W-5mT#8=7j2$zey(nA`F2!OjdZ=ogtaKq zfbf2MH!eXm5ZvLD#_&T<4cx`^u4`9JnQRV0M{5b(j#E?tw(aYeEq6@C`qpt^eBA@+ zXOnfa2No8mQ>b(Ku$Y=}=E2JlS&-7xMiwLp(F}ftnfh95m@*0gXyxe=;Rrfvhq$~$*zwOx7ng`uX+UiJLuD?tD>r>V>8h9GSl@yX;DDV z>O~bOY5C~u68v(RGKk{^74l^Ed9b8bU-~*d(O=rF%>Xm3=s)%O1RZcXKq{p{j%Gy# zgplQg1>g|w&oUO#rDgY5`Q#N*Exj|w2h$aYs0BB6H0ClJ?5HuKAf&-BqG17)Ecq50 zz7Ub9X=Qf)(-bZW-lj_#>7sh>yrQ{UWtvTTuY}kgAIAm*xd)>A-;5?#A}=)v6231Z!P}W4X!tM>_T4HxKpG089)4imBHTn zN%%@mMZz`{xwlOeG|H{o^y;mUuX$6#!j`cgy!zeTS1(txAR9t*b%eWKCMDlZcY>9} zia*_Mk=rV18_fp_I_g+WRBNiDN)~jbHJ8$xqiprfdY3e? z&eD?E*F>f6prTV(4A9VetYYnny6fmV6_hVFc3J2v@Spuz$5etgJTkCpIQ(r%LFEbr zbh&4+N`oZm1KnqMv0aK9U`T!XK}M4;!SI<}cR+t|Xo51G>$~L#`7d)-g7b>;a_qm7 zX)(|(rYMgFJ{HG(77LGuV3LlA^qPkx{-!JcjQqvf)jRI8|Iso}^xVUxZJ4?;G+9Oc z^)^`~rF)D$m7dkzqoENUaJ1;Q9DXf?=hm20czQBu6Xl#rU5Yts`Wck?=1mrf#5(`< zh*%ELPoGaDD&0rHJJ8qOYuc*QiXUb zMQ{`OL7&++e$%xWfaWcyxVU(a(53Fb?M6}c^A&Y*kyl=?{5|Ve?4-I2&Fb1*{V|v3 zx>tQl2>X8c>77`c=M@)EPuy?5a{19kT@PhjS=XAj&;4E(eIc#T@95Oc{d3K1BQIPE z3Vi)gqp&JS*?aY_y)|F{ES3$PeLVQvOZoJzR@Z?`y&YSN-EUo<6+iFl;hn*+Z)7zm zJ5~kiWUc&p{Lrn78K(b(9gi-36llWDDr#3(<$K1XxY%{Ah}af0`}I$6w$IWwyT9^h z*eM%vw=wwA+=6G%X9hj^Z4~G9GRN&?#_~e#)muWZ zZe6qb@7!5?O2TGNQCB{>{%v;o@-?%jhpyVVn15sRsmMRtr*5wgefc}CIn$H<{g<@s z7kd}x%wGKX+tt^lmGjiEmp--VlUcs^eNs)$pC4t{du$kE4AfVplm(nzb8eo*5ihTm zKN_{vR?ps9zjgQLu;}W2J;Eo<=Lx->lc!eucAAxq$G;Yr_?X{MeRJPhbJfJ>B|SKF zxH7Oqy+CxviR1TsqKmIwpPwzqFh8WsU}a8sdTQ}TvG3cC`#vvO?XJduMEKjX=UcDY z8karje$}=2EyIOuiOM*pvM7f8c5d?+5*jO*8dx83GKh7kGejtmF7U!)Uf<&r60^7$ zl(&YT$@#u&=Gu}H;28JW9>Y~(t5;pkT6O*Pr`mW&fj|G57#?VI>=x~Gc~Uvg=DaoE z@>~b&eLU@tEsA2pC!VtKVAOTQ9x#Yp@hFDi-<$GmE?)Zx2^V{I;pJKO=1o|DtVy^h(TU7`{ifd7~S%-q~I^HeG`0D-5gpUXO@geCyQW8Gc= From 371888199048c8ddd56ed9b666d9c2c489852620 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 18:11:47 -0700 Subject: [PATCH 296/349] Add files via upload --- .../images/tvm_security_recommendations.png | Bin 0 -> 24854 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_security_recommendations.png diff --git a/windows/security/threat-protection/windows-defender-atp/images/tvm_security_recommendations.png b/windows/security/threat-protection/windows-defender-atp/images/tvm_security_recommendations.png new file mode 100644 index 0000000000000000000000000000000000000000..89bdbc6495ed97ae48ff6a0a761c7ac6b16afbba GIT binary patch literal 24854 zcmeFZRd5`^wx%mtvY2Iy!D5SX#mvl%mcv?9FT)&1|f}&|!&4KykRgaX}kfH+wS^Q%A5e`yC=ByAtfFUc zZDwr()`hzt1d2ib^Yc#j21a0aAATqQ(M-_B%F4*v5$t{}p%WB?`rAy&%+b;atmu4( z0u1aMn79zXl55&2&_`8iG5zt1z4Nn>L6|(rdkz9*?0v}RMJG{qVXfLYnxojbGBUyZ z+SI%`^STXEWzq&TQj3)e5ee~^I>(~E*Q5o$m3&LBs5-qKb+Iu%AY_nTHBOj_pwth! zC)N$Xd3)~|0|VyXpebMF!4~QT@57qIWc!1|B&Q1pdY$PsF@*rkmguDr<_{P5%ehdzAPnlS^Oh63#fzC56oEtHZULC=P)K+pe>yZ8f0P!ns((8OH2*Fp zPSo1wmIKd3B=AOIry|Hdf`NpXNNRu?zN(@nn`}+T`Z>?iu1fENZ-Gq8QBUYcb9Y5J zY6FdOb$fNR$eD=>R8(K!oAoHE+~d4vhO~q;XXg09tcg7H-ZHy)sG&bCJfnVT!|W2r zbN~wY5mYOi;TWjfqe-7b_pdD#6cpCH;fkcwWcB=`|o5@XLYlugjRrud+&3K7H* zRRZ-!OA<^?GwQ+S=LujCT5qi$W~Yoo4jPCJdW97&BQZ*}3C+`-D>d({%H zXt`b)L|IIIU_|af0=sByyH*@Y53nDp$sBpWGQgFxeCLkI&Cbiw` zxu`ogSs65PNDmLo#I7R6GaXVUrihFi1ie668{x$@4)3zKQQXUmI)|D~T~V%j5Z0_TQl#ee~aJE{$W{xv?lTDB*ivO~tEP0@HevF^-K}ZgmbezbpM7*$&DTS_l zJLbgbdtztX$az+kPETZ`+i7&vP}cB)wE$V3#E{?fVql{gh)_f%uBOZSqh;bP;5 zf+FL(II!KP1ePhx`bA6^c<<|Ju1#4$X$CRbgveaE(h-V)q&F?#CJnBEM23hHu3ZnT zJ#Asd9%>!{U;k<0h3DYFJ1-rjcbjN}9*9@T#GYut35nghmOxRqlZ+_N^0hOkp(=&a zry+^_f?XB%WT`?~%%M3zP#kyZ!Y%?$wQ;hPPK#-2Z-m;{i4%Kj4iYy5yJ*MXY1i0ShtOmnYz<%^fM6}82((mQMdBBUaLFGt@S0){ zO39=@*TTq8b^G%WL|r>6Wr=q!&-csUsI>i4UWWnpJ0Etkyf^NQR4GJY*|dCIl{H~_ zHE6gG6X#>u`aH8XZiA&X0PHFVHxQb@Inhi>y*v?xoT#)7ICjvT^6S(@gVB;39BvD zLHjkqDT!iORZKNeP~-~3l66&$RmDxc!h3(EXL9XHJgRPGGJr9Y6t8!$=an>28Wm-K zf+B=eIdUW@Rm2vNJ@KZj(z>_)+>OPCz(o*9K{94M*GeQ&JGj47?suJsH`jI(-!L#h zL@0fdZT2Q!{*iYWe=` zwn0I{eB4c}2V}MsJhW~P^Sbt(^>fA(b$l`F;Jhy@ zp%?4JSs-2My-&T4_G{VdNjVN&gQiXq*13qb(bz9R3>qX}h}2%ydSz_6iEDSQHBA}c z6J6zMFBK^1ezlCd-2~(Ldo4qjud#bqE#=AAr?hz2I6pEtM!K{W?GhHL2aHGHMcz{w z^t6z$@$^Fn8DBUq%tvPp(u!Zz{y_Kt+4@~E7~y6th!)h~+D=tY`K`2R*r7_jaO)yA z8rx6Smb}VZhot&5rKPxC=~^D*sm<*)>BLh1`xAzOLPHZ7P&RiX^fJoi-L>5pG{y$r zZiXimUd*lCE^bs7!n9agYL+LVL^1j+-ff{;aa{OE5-e;oD%D2=Noi#(8yQzx3J~lo zPAHlBs-r=(lasa4)lXS*%caVEwf_5ox3S5IYrGGbs!nj6!&Hw5MWa)5LtvB!qS4pY zc?TZbv5tw>>pW*eEB?~$Jj9pf&aGvB1B}uI>u;2$s>3!(b`Tqb*{|aL_5DVGhhZ2< zTJ^f2;y07F&Xc-=ZvnKB3&QMIDU_2FIqrAfl`8fEVSuNK*&oU`aQ)Kjl_&v8u4pu$ z{@icnSP(9K(Jvd)Nr!^WKapP(>I(l1lbt-p2u~!W8w>i|7cBnYS*vreVJA|4f5~)E zb2p`<;4WQaB^tk4)Y)HJ?jAO#f5*{jne`gB)Ao77GJ!_BWSxW*2)46*>lR4ITCibq zk{L2t0}P)&45&Z^Py;z}-g6TYKXU!%UJ@BjxI*dtr!HDriC8PY?D%MBZIOH9uQUgu zrx~$@YJnSJNGfcH9C37C?JO#367{jRbm&fNM(oK!wK^LiWXhzg^A667a*7U;1&4GP zEsgUXo&HKP_qj!B5rv_suT|uJyeS@<*u-@AQi2Zy59_S+Jh~VgW9rDuSfUijm z1+Wu=VH~M&8_Q`1-Brt7?@q7?+&fkdoC$)Ui+Mpn#g|Y7Bl!~~r<{Q&LAH$OIEQ0)MrU}EyCxStPwoqL;J=n-F_a&;P zf9nZWCKL2soDR28A<$gqAk1&pC$0v9Wpr>#)yGa8^JnX=}hL8OpDFC zK!@?dPMPS4zvT z+pk?q0yr6Ms)(gKgeS@V2B)}|LR!b-vKBBn6MZEFj}Ol|5gy&t*VIf8yT7K z8zt5~wP1xbNL%Kn+Bmqeedc2-qZGSp_M{nQLVYDXxJ((X9j3D(sJ}*V;f;OicL=izu@= zk7#D?q#OK`dbGVio0lzRbXYmD8EJ+V*yYQvm{D$>`UY3%d13V}{H0-h&k!@NbpcT= zxm;bX27AeI6LwKE=CiGCy4dhi<9}ipJesCb8r{`Kx_g9*UwtFS&oNR{%!;$QypH3)V~O*v zGha>}9bULL2h9krX~wKk@vZ6fDh+~jM?X5u)gx0Y0zaL#Eqsa6lKat6*>VMB`FSHh zq9n&)n^xh~(tz8t)-kb{_54_AU(<+}Q_L~C!-c03ia~2{4ro!juqCIUpazhK&hmZt z1)4FQ*(!6V%e40IuF0QOS33l)vdwct%_P$tE422TNhl|H>>g(fn7OEf^k;uXzKV~F zGPestb$MyoJa^i#dA8wKN^aa~F04 z1@io%^~K0edk@1yJ38q3Y|-YyAP>)`4(lQ2%QB2TO?i&cZE}$6imE!t-q%>mF?FDh zDA2E&``)q_6?6WkSf!o{#iNH^8VhwXOM(bXqk&ksz6ckW>;1V~b04Iv#dEypx7VH! zBytQZWa!%d)Z?xxB6y0=Xwu$1$WA+&hT`1Se&=)i^B}GZWWK3JxchRwMpS5<`tKUrvvAK<`g9^{&3$#_{G zYZK_kMznCy(V?6-w1%^kr+ z+{}ZS8+T-c+*>xGX0S{%%e-nk0K`KIQ@^%BE~#&JQn$EBDc^W8jy&-r1T_PAzyRDAOATfXebQa*toN%%@%A4t?ME{Ww%?;rG} zje3?~bELVKBu{4biU;@qRpfb%_%q(QUB*fe?V$)4XMysHmo#Pgj}a>=pKwL)IGmqG zhe~kz%H!4hBPKdmvuyutW>r63X~YcfLTt;=M>d6Kc5+$*fZoAW?N?P2S%1s zfuvp8gz{|Bla=f*`J*{SD$Di}3$&m%*&S`uR}hS@YS#FWFo z0CNY6uIIg~y%R-(P4z{kW^8w00_w>vlN>ia$f6H8aCpkz+1&f_xbV2}%zL>!)nV>*$YV`jv?(x6ECN2A$j$G-tcX!jPtCDhZ zQ>uyLFpNk70s=6wu+v_$C+2D#=`znRFGoj5%@sYcM4v=;bO>b%(F_I<;FV zaC~GO)B8CGwb6HZx=?Gv2jr3T(oH0{VIidBcFWFH5+qFJ5!$F)r zbX8)E0gpgMK0<6awU<6!0uwsa1C7N=F(jG_-JRxn$08gvXTI|cJnh(O;hsq$%is{I zN^?L{Go&1QpNwY%V(PenHSv;UW^NC7#Gixj_0;@7G}ya-6_3@X$~9Mh3hEY0CR1@+ zpxD>1ZvG5sU%h0x1UK8QJ>uZ~j8rdtzJnp`iWHB<5N~EALAt0P`-8|@9sCQ;j9LPm zuI|x@P}jtfa(T!_`$Reyo8DLo$2iO6s7hf8vrG>8E=VQM)7r zL1$tA$1?1f1mR<*8F?E%UELpY7PO{R#g(6n`qfLy*%>I-z0w=X1>m`kmdO$7>{oc@ zu=Y_RBR^Emaa}FsH5eZe1H1c_^9gqwLvyUN66AwZS2+-D3t~*DAr1IA2NaytxB?n@ z+A=TVpG5Mh`H7n`oV>J&j^dvxoI*k*Fh6(cj*z!2X(R@(QhkdbTN9#^gofg%w~yP$ zqI5bN^k?@gMp#WF4twHk`hyVF5vByy7@)xHAYMij4=!V;2(Mme8f`Ih?y}*vXp+;> z!RPMoet3LL%*Ev%7n;?ceTo0WAH^WIvokX|80Poy-+`|=*{$a-qjw%)h_-MBXMou0KmaN#D{b*sF1vQ%UkLh=~ZFUJ^3Iw094Rmi`xaDkL6w@*(Tu>NIas&2GT6IS&#~i-` z`YhljR5$K;;WW+-3)+1HANc~lN;}@&GufQoynZ`zc-?p}9D2FK z79du+`p|wR4`i2oJV&-LCHd32dihDVKxXUlz0mbJepU#}7!_j7f&N$SCkH+FP~-Q2 zl*Sjaakr?7MP&QiF@zeI&L0bNfXg+P@;0DdhGcEc@|ysLOG9TreFm_*dluDyz10^& z2kKd!*a#H%bWlV?pLx;n$Cf#*BZwFklecJ;?@rPo94&HNqB9tZR_e6i`# zZ%&>3Luj?Jq8B3BFP+2lQQU63qQag=85dmW`aIHynMI9lbpd03M79^?WgFU~2APxl z?3E(+S3ZRMAs1r-a2!s1H?J>}vgqm>eJhJ4ZnpbI+MaGmsX9P$CY!6+GR!BfW52XV zH5476{t*>pa6F@n&h)Kr9fEJPb${A?-dHczI3Y%D&>z=r?xWVUh1Ufax<7M$mAIZP z=TT1|OdMTVZrvCmsZ1Gu*=aT8^#*8+UO@BZQ`yi4ZA@&><~}WTG^K8wHpeo6iGEIN z>CyUlN0WWMqcDue>%Y3hi`1&?Umujcu`inN_yt&~G+7s=*AMrIQE>tGwgSd?RpwnB z9&An?Q_Gdv=wNYQV!!#zpySZAwGtI$>ueoFcJ=|ek#ojh@EgBp9D!BeBzaYY-wevm zR=Hw(^njfcdrxz>?L2~iqp(fI>;%6XetW^huEzs!;tR>P0ELK+KI$hLzsF)98U)gT6AxFbZ)Sx@#&HE7@wU|NV4?kmqRsUjJJa{jB$2t}!S6mi;ivg0!;?iu z6EmN0Bdf~b&$an47sd_Wj|kOx5Wj`Z4Tid24BJHOrH}2#r&g`AUvn|M&WgNWd91n} zcEjlFV?;l-`w-Q6Qtw@86^kpXpVV`861`H$l zC*7X)Y-}l`W3YS_{T%Vp|86-3ZHjOtMeOYC3|-6r7n{*YTnOE7ER%oMbZFs;9PMUY z>O&`}+fgutrIb+ct?>P2GY3euRvYb}kevk(yKg;N{Hi+8Z^_q1cgx*fHUvF1aMRoQ z{UJF)W1swa0b45k@(o(ofasSx1`^en@Enr5rf;+9l!8+{cJ6fW^x|%7y)YKEbOv=F z>*3jEPc!mUQ*GwdkQgyZ*3PTjO6$wv*?B>$%Ofl@-G?o5VzSI*eBu$;A!%M`Oofgn z(W|mmI>4(=$26Dw*x7h8W%!KQ#BQ(*%bi|3tKFpzX{NIa1_SgB;hb?R?U=ZX`*GVI z87b;zqRRT!%T;R1_Pd-9U7J}s?~ow|N^31Zv%LKL=!6DTi_xhg^)lSI0$4m+Rrd1& z>zq(j)3kKYIp_GpRTD;DxC&?I8Q}cH-X>Oo|NZ6gQ>f;Z18%^YbNo9q3X>B!zariA zB4a?-Bc=b8#7Dda?3GI3xok5YUaytB^$YAD!)IC|&8ORAC&CWm+0mL1LZAYbdKpV!g51xa!awJ=nY^SY3rTm&7rw?RosltD zL;zbMcG${RX~FeKTj-s8c8`QKxh9_^QLyo)#dPS~Rp_UeaeLyD8_{#h_`V~Be0lV?^;>bt(2RWvD zJFZ%^kZ`-$%&lsL4cCg&b%U}l8%}ksO!jyljkD6_+L7gmlw93Ki!(!BtWBG+q%j_Z zT}}khjGGgo3#Z|yRUq($k{iJ&C{@+0=pYyZDU;=<5?&*@*^PNrqs(#*BK6)FO{Fmv zXlX1ih{KHxfyIz`N`_92i`-Cic`2?hc^~t-AhM9isrjOMzTyMF5Du-^FFrDYr^}#N z!;W62?yg!}{s(%(+VDUR8jr7d_oLf-#+g9*p%M01?Lv57Jg4qBTL~NT=~nHrL}cux zhR5S=udcqa$jr_3XRhbmX4Znp4Dnf*_uWtU%*G72t=Rn}RbleA>7`4qtj5J}R9 zF517&MUUPx$=%PjWtME&1%sibbI;tEH6vTEj_l!DTF!s?&N#UtHLO@JS&kO5W5|d4{W*|{O;6;)5#7|#B==zN&ZuKyD|rjW zII*ZImoT%k^jj>WrPr?}BTwV3})fLmp}%J0l0}2?meZ1N}n_f<_H# zl-Z#i3HlOW z0d$ewje*{NfWzKq^VSVavV@c^1?C#`cX#f`Lj@GZ+1Cb1k@2MtL|E+~J@`(S-S!iA z0!ohf4`Zqf=G@Yn%}QtPeN6PIMfD2im5>Jc)YAFbG)CkiPWl~9QuoS6Gy1@x^OklR zGp(T*DJS4H8O_=oxNXpdbgW932JIX;GL6}ut`>ZCUrZR&Kz2PO!aj5y;sTAlItr}` zr(084U9Y)_g>fzR1K$)5f%1!xT`eY6=y6>FM3r%>3BUS8&mTh`4|xc;z7eTFFey0r zoOb3gv*sWt-N};uU>UIw;r#d{Hpyd#p+m9JU)`HM|`5eRG0&ysUA;ajPGP~7uUv4FsxlB z>(Xr6wm7^r*5=@T*tWSgwp42WewD(Z{tQh>7T0@BZ%ZX4#qM{9EZyuueMx0$dPl*L zkP+RSe2knv@$(UfPsYswAg`T0uIS1_sfY{e|3yq8zl?Gawldvn*LTmlO5rue8nOlCV@ zGfHnP2tEAU>{{dtP2e-LGEv{StV-3?`#LX&Dh{#08jZ;F<>FnCp?VewC}h{x#%5#? ze4xjJ(j^%=Ih5?|Z2zDjX0w?*J&KO2f|p7eKR-WMWMm2sj-;w8hBTSNk8pn!@V~oL zQ*r_Vw^IA;xbJKyM;8|z2k-zC-~7r-2hU*a$ z#`U0qz?!CrJ0S9Kz8I7p^0n?d{L6$;ghz3~r28q7?>d#7W$DAPuyLJh+$Lo-k^V&* z9UGg|`U!^di<#QLI-h@l6QeP|fZU$2X;aY5fTgOc!Q#3Mb3gzdwLc;_ROHw*<&b6hg7)$c|-C;6{9ncb>r->s;4|G~-~b(LD{qlJh5x*x4$ zT0A;4SSI9qvT|&`);HPBkn%J>+OJ=$SNk;vNooJ3!wmnc@ijG3`&3{#13uM_7huyo zbcnJ(Hp!yfc$jQjTOy*eYrCkc%&_RZHRkn4xdWl~I+cM)I?&2v@uk0q37y!%H!B4INn08v9~!ges=$FCIp` z^=`#^EeEc*FwWn!hUI_{s1aOJSR$-A5#eB_YDKcFx!ARCS;Ooo-Su}PvNFZM!3J$< z3DM8{X$q%c_X_r5#&M@@GcSLR1M>~M`@oHcT1xVVOmAlm2{>Fy0W3Z>Nmxom|F^wSZ8xfIU8);Te8*3+lqNAKN_o;K4@P#JT|KQWg9( zPH>b-JcwVuoL6AxVD^*p!%=P$fqhii_AAW2zrKQX3m8!Ftp<)86S1S7=1*p8(of2p ztEB!uZUKjqGGenlmmcx@%7H*WLeo6r$Ha&kS`GqI`~jRn3UlP9dR$AAZq{?y+X5qBm?S(&d&4m08~?yKaGcJlW;yUrX_c_pueDW{xtWF+L#k>J-8 z%%7n-FpJM;tSH6Uu;|aJ(^E_!)a`3NmC9PNmQOa8h6sXSyBYOKF^4;3 z>w?Q7skvXsapYuS(~Lk}5k(b~jx44=OA{ceZPCqzyRDTB!p+tB@79{r-RbYv*ZNcg zVl{|q@V*Y7h12RQJD^7^`CTWWq1y2e-pK!?xU4m+JbsFoueq!;?)&@#ec!C8^FRJBTM}s9;V{Pv>evI&Ds$bN`a^*NMY;k#{5=X{xBTippp&@>d>bwqwFyM(IHv^uYkYBQ=U_L{9-P;-Fd0m@)9N@Km?RuarGtDV& zOmwrzJb+fq-1)c%2(MR8qM$YZ`FNONXKYjJaq&?V#Fc*q24cE0Il&D+0QzSu)5v=m zLa}r+JitM#1iXeS%MJZp8&K4I!q2hYJ1W=2II8{Sb4|g!??H#f-dV(rW=j0{Ic7~$ z?HjH4)hQBEM#Q(Jrm4lA?n1&XSsNd*Q-l21-7V!mVRtmOd;HPS8#fG?k#7_} zXRVp(l@%tGgPc)1V#1P`V^37VfFXSmAhKJ|qjW{!+As-#YMc7Tb1@lZ$4ubkxNa|> z){p?f*MnW}?OvVW#gnbmjWs6pg+ z^;jmxEi}`xedt1gaJO&r_v16Qat9Oq=68>eGX&)KYcR9ypSy1-m2L+U*s9*CT@T*1 zLA&=<*90|4bW_E0F+SFN)5km=nhO)_Z^{I2^HS@C8)PR}FU#uQfJ@4sZWf%c&KQ{l z(5kUv8r#ZCueBLREf==rYuhrhXH+=4> z7HhF>Ehhx)Z)W73B^{})J{p4?mi0Au;!8`JkVK9tQ@UF~MDg)QIDpS9+4;KL6zfm* zwH((1h`tGf`)0NYLV$Gdw$UjpL{sRa@Wo}s4)m+Td*;(S`%IDM9m^^qM=$r;pzB*| zavZoVefnS|vL!ojhOk`+982U9LlT!66R4WTiI9Xo34Mo|eJ1U#tvZp(o&BcCt@8*C z9pPeJYhQ}$4Zj8DJBKl*i-!6Yr1JkOvNYK+xwa zC=5c2?Q(*w11*_07v!rzhW$$K7#)IV@X`00NWlFB5uYPtWQS?LdA)wUH?F}c4_f`% zO2iG|K3j4-H23(Rt=g3t@S?_tJPx7SmG+47-g-sKyJ$C8eS?-9-4Xt#oL@Ex_%e8F zh~A3yis4`i+v)Sd#e}K<<+BL8zlWQpAZEXh^nvK=EJyUivM20b2MS*NV{zNu;Rv07L7iR zd?{h>>lI5)Vg&^tH-S?Ua|+N?L)YZ-xm$xh_Nmav@QURZg90J_b~{Cn3Eu=*gylezloR9tyF*{2S-GnQup6>NrS&-mxau&uk%d{!J@#N~mvuCX43gM`GQV%Ohwb8OPP=U_H`z}PVIjEMXJ?f9A;4@876_vkp- z;)alpX#iOd7s7TR(D4BYu+_asc)rCn3)^|kqy?Ssf2%Tc7fS8FQBrl&(GOqu5V64jjQOLxhd-bh=0Us*q(s9&#lhU@9CbpCM@=2c=$0`K z(}J^U`9|*WI#A9y!=`VA&7~FUl)J&=oBR1>05~V@$oMI|Ha2pl0?q4%ra-iNenO_D zb>%Nhi<=_gq_RLj)@&yopqJGqAPfhebGWAB8=x5MG zJ7NXkkCy5r^QX?#Za){Cqh|OmY=tUffRs;At1_?8TZ0xl9ylH|8sfFi-f?jk@yAQf zwAZ*+9!uxXyl7N29j!8szGP8JNluA5eR4;^fg;+q@(G+o$$bpA%HTQB*A92#Ea4Xe z8W59P@7j@=F8$z@EI2HJJg+iwy)^Og6j5(vY&GO+HW_*H5qjy4Au}Ne?cT)&{r#zv zh-Pi1P{$j5W)}8AC3xLipvP;Bgqae-MshRs} z*IInB+mdCnQWB7Sy1e`VL^Kehzgx+!;IMHpjf_E(sb7Q)fvihhLu96_< z>+nX?;V^@5GIQ13RunuC@A~X7M&XL4$rP@E7thkNspSD-Nx80G(Oxz zcXnNB``EcQb)3db%-}!|3}Qc~-B90Xr&}3=fKS|VSUYB8W$2kH$bxWG>&2$Keu(<8G!EQOGn?UbXKH2{3?Kx0v(E`mdVENJH0S$w z-advpUm;Myc|# z-wdwd7#6l(Bt08YIL<_>?Gk*qX0b~?1wwkv%q$h%)2o+Nb~jMv*H7F; z8cUQk+{~?8m8sQ+m$WC-MDU6W;$MQ(Xu=SJIU!aVa?)&+?NvvyuPeOJ1?h#XaB(g@ zSJiZoCIs?(rS`UUlb4i~d{?`IfOP`U{;>Ks84xiN@V6{ zX)wM8W#;>c_C;o_T=DSYya3avp;#}SdnleA;LF`v1O+FJ743tIjQKGZ?{^S5Nn%LF z*qyFvOPB=$=(&>oeNs28bl9v0tN#QMKdJ33UM(r-eJY zqyGJUD9%qLT+bxQI1Az~a!Z#sf^-n@HlH&gqT6j(d2F9?w-Jc#pRN3LI>dswVE6Mw zwfv=0Wp*Fi5wL?8;aPQQlDK+)pmHNe;Qge(RzH?4Gc4}jaEEZ%rY=?)q{I`AMCr72 zZ2fk=ZA`zryNt0}HKPtzWU*;@ir;GmX>+<&zp&g#t0Q39%dc(_8)8viBWl5Esj=g+ z%DOsN9YaN^71ozwN%8Xq>Di?eHHR&z3C$c|!$DtO3nuwBh6Nf!2)_A0UF>U!7*fl9wM1b?nNI=eic?g5qJ%Yla(N?N0{pLiL8EzPT%| zPZ;dSp=t+;n;mbZ5?-#^Xp*Puv&SSfC@$YLP_^y!<9f`<1+p~A*L!k0A)1xRDni>X zSSm`OdBohA;W8$k8qNL*KYsRQgx@0jp0Zl-;IQ?|$<>=1l7WW^DkV6dqX&0{V^6;m zp0!^{liY>|9l3i^GU}vM(7ZM!RQP35uv8~&E4+20f(!g6B7McM4mmG)+kQl}H2>u8 zd=cVk;I*cKy_wd&=r!eF>2=R{es-T-HYF}3DvXj-3%^XW8p;EN;khjE>$!Rj%o zl%?yt{JRSNyY|pT)X$;W?_ob->~3bi($sajBW+L@W|>HPa8SbQzFo zbxn88@3%7`5>(|IRSFdWfwtA8Ff~n!eUKL^$aCUfmHtM9JK=ut>43VXH>RC#PS|Jv zfhw@(T8FG+-g)vDrgdjGHmdygM`8B`bwNN-P%CqHPVgZq;9mL|bYwvtosHm`6F3Z+ z!dMW8``Zs8ko8EEB`=Fxb%+DRDifpECrR9$s6gm%lI|((e*;tgry2Ku&B~sKIunR< zQFE(<)gw0s^*4+?l|yqs)yh+*+Oa%b*wNuBB?VFTGSuDVyt!s*(CX-%tTnoub{bR9;vO5kj5Va&N|vJlD0idB}=iME?(%)WGAp7Sk)iiZ~|< zs&#|Oq}hShP0p;j{o>z#=wWkL!23;tyDVlz0T_9Ni#e||bzPV!W0**QcNDTNY= z{p+PNCb7wj$Ib#7sSsGa#`#i9GNe@}DWVRzR37*}&>)s1hwXTs+Gk!Yo$_*6=wxg~ zfFjMCNDff>c$sHv{PHxA(uucdl*cgH za|6P6VF&J)Zgw?#rWHuIMWw>r&m7Fb`9vsi=V2n1;b!r|S}j=y{>r?j{%GuD&6|~JL?{gBml+1jscGxX4$O_nA|2)k>#c-ff@=|r=`KO2$Jryw( zMBYy0)Za9}LZKT;aN|+k0Dl*QD<&&bNHBMfE#@w2S)ocq(^`*vY~cMRuk|e|pu-~j zpjxa(C52WJ^bXDI)7B#=XM!$(aQk;O2U>|xS#J8H00~~|&xCjk2;?=h;4dKTdC9d{ z{{{P|Sm_3IO9>ct3|6o1)K)KB#*J4~flIDtmRs7wiG*@tl&z6TxE3> zjlTKR=-}Li8ts|KD_kz>N)svrUr!6o?&8~>iT++vkDL|R7qN0@;ZxCwZMjykjtujP z!aUIvVdT4z{Ce-X!qcibzBXqA({9H+^LRdR>O?A)S~d~pBo`oZ-p>|HzUzenf*E+x z%G81g%x0JFSL`{o>6Qe(V>J(kH0${W#X;dZJ1SNVi*n2d1DCzZhS#{d4(N=#cyWAc zdo2|~%~5ni5DeFodCf9f!Rm5Cex1Y6V=*uPe4#vuqB*VecD4LPu9f(HR`rD1u2ZjV zcCR^O0s{DJ>$|k#SxA0epospac!}nwZ_j*=82xRTVx{$9mUT#{r|5|~_8<3I zeWM8x`A_$o7l&Z0So?=g^W@o`W`C5d$zF(}xDi2U0 z^1TD#Gmctv;1=t|_LIBwWzwuE&ebAjgeH|+g8;)mNJ{)n%vU@#=xb-%C}MdNBVEj? zn4~5J?bXvU$~P~8BNSN9NY*=rG?jl+7#@?(tEr2_+d;LbHLCazAKq^3(n^01iWbTx zp4exjQ)2qB!DQ^!F*7rGVfh(GGUH=p)ip|#g8IbnID#2YxnlHqhnTGgZlsF>$(8Q% z*ist9yfHhqmg@)wOmMQe!!E0hFW%6{{P6DaySUI2$w?O3V}{>;@&>857hcFbc* zd4WB8NT;W8%58|+SH~rPr{)P~1Q720=nlf06xT|KxK^@-_XmwM5XFpZ!B^x8=%7nn zA)fTrchZS~Yh(%B8u=ndf-d-941&aG@PREYEx{2H1bf7$B+nfX!6^EcAUiBNDk?w7 zNE@{w;k>Bj((H|#1ujD*^ey)9Qz1rp12nJlP=SG1oG1d2F#jLbod4%DB>&PF2&i)T ze>DakTP{(778w2;cY@yQ!(7#f@aqnLEE9v*Mk1eWij8N8@-0H9@xhfQQRk;j=Ig-5 zBpU(_22fdWyCvMN>d_;k=+Oft8s}cbmv1IypPuQKuBn-|`jM|zexoh8ct!Rka3`DD zY|<0T?r$A<53ry6?m&0Q>ItK3wYQIHyzl^qp7A~!KPa!gy#k|#e!g}lc7$w=qjkLW z;;aO3U$C`x#TF}abbL@|c<-^G2CDV_ItZHqSs4RpX;Pjr&DYOKSP%GHv;jlY%*;dU zZ=ci@Ke`+?>aU##-RQ$Ll{l5VJ9haaq8^-^23I4++I0@6) zGa`TIu&&ycocTtR8MF^hqbuVH{{eK3$vELSUUCZ=6WbW@E>&1KApB$CUK64P?H$Tl z=fBbEg`W)1_~%nDZcjT;Lw4wPXTeSGnOWM+{ zhe@vzMPCZC3olKOIca1LT!N@i=)Z3yAj<;8u@bDTu2QtXfLo2kQKD->qJI0&R4H-N zlU)eLEA3Y6Eaygo-d`9M{i~3u2K3f!A*1->eY>NleR8n4Z8JrfScNU?HHQA}y6*(& zcq9vwKb@yB$T)fHM80s;6Qk7X9CEMjusO6G5B;- z=khSU3Y2!axU9`})NJ|zoh`)0{Zs_ebGVr+LlK?5!sYX9+BqfSGIutX!5X`2GO-<@ z#(1mU_QT`C6hF@g9EAo{vsgF`V8)yfPFY7u7ihwz1+$ zKU)aWkp29r^z&ym`|Ki*r};>ux|)1WUh!&s>aQl`6KBaEScnrceCDkZw`a9U1fNy7 zxsT4x5A1Cb6a_pUcVC4o9-G5^ey86$3Yv<+ba%hq-a@0}p$U8k-g5X|anG7R6lx+x zY&Cpue1jBbdP_j5@N~axL6)zqJ_)?7zxFxk91d6?)utv6`Qsj)cU0|1UA!=Ibjl-@ z0bdNLj*)`+1+M7Kv!9D31qA`Bes#DRR`P7Q++SMQUn8!Y50g&N%G9Z{*K|mQC__2G zdYBLzdM)dH=a!n4fVdOIvwbAp_t6qN85_6MUjOa1L$FkrIM&4Fd=WT~oMyE1%w%-j z#kyLw;t371=9y`^CdF2hol1L;)_adPP_fZJtbOn++t!pJKtqj@nRkF}fn{I*#7I|} z9O&WU?dLW7wtr-UEzG0# z6=@S&7)9fW%hmWK7S=x%k$hS6*aLCJ(Nb_{WJNEE>VQLH^AW4}R>pst8Xe6+rbgMy zPpFHojwH;b+SzzXRsbQZ1 zapn{DOgsU_)-m!{mRM|BrUgDk$!6$>Rh9{BaFBVStbjk^uq)1}DH^ zAq)Y61$PK80fG$f7Th(!B)A3FK?e8WK7+dihG5IB-Md@0_wLqx*|&W<-#YbsIMscA z)!m=!)A&n$8JUX@gSHuY=t=%5GV}sl0OW*Pc&QdE^J+uAPiuK=`3|~c8|uP~?p^2h zxF#d$QD4`O-8jwm+1y}`wK(k#?TS+ zUhJH~&!uIVI#%PUbt+qOAF-tD=H+EkQ(;^eQ@d(auAC$ z0UsBD+WZWK8fI-?d1bStj);z&-VF2MmgwS+N_kp~HLLBbE zImDVS4IpXz&Jg{&dc*Gftk2iNekJt!dgYI*umBNr%UCKY?*1v)kG@l#$j-wvPJje) zs-|wgLtLNHdCQz^q4T4c)zOYQoDq+pJSSsNb@qu(k7>;5)&lc=41y=H!B+zZkZ{>k;sGw+Zau)4m*qV?Lf zGS3M7<*NEe*^4~Od4_QCx(Wf>uB@AzuT}E>_?aX$Ewr zu`!VIpePnexLRd}K$K|I)+^Ia?t!Djhre)%#K5MX~1?^y41^LpuxP)5$SPjg#C48g=}7} zvHV0ll<{d;n~ijXDM(QRZrVS8D(0wC!Q8=$nUBA|iYacbLk^oAtY|~8Y>07cd1N~M zn8n*NgHDyE0DElRc!Hh>0GuS|TO$!?3;XvEAeRSA)vM-Bi%kW!fjFt_ks~pwdGjp< zdcymA0VxkDDNT%ySiQZ)<>lEsS7gI(he`j?KO>JHZbmzJ`;cu4du!Q}XU9UD6(l@{ zom>SICm#aE76aIZmHC>HCdO)ui#lMluy;LKkRJc8Q6+6097AQpgX@MFVmOv#CC#5y z#pd#eb3ViBhx9#?;|p3`zqLa7_CtQX&AAiZ48bOzr!0T@yetT@_6!9A!Ovvf){;y+ zXwu)D@aq=Tuoc9UwtG<`6Q33;=jL`1^CH2oBJx%WK@<)23nx#AhWca%ElpWiWvOXc zjUh(=qKHJWo@l!jtIx7J74wo375@q!GEZ-=3SFQs(b#zkh(_LD5mmc6C%#RD35X1gMINkEMbD()%V^e<}1c8iGiAdhJNPYPu#n3SwyO z%gRtl#Bs-~#2jA^JD76|J5_9YGM9a5C`C|ED4mMde-}KhE({HDRyyM7>nE(>>|VEY z{e2NAyD>FQtixXqu`xHWprBqQkdt%4{ZYsDGJ2jwykYho*}UgQ+vcFybY1k2&x>p} za1p(gyQSq;ng~1V*i-Vq-dQCX0$%#Pc>`pox_p?rvpef<%5%QV>a;snphm%yS3yqk zgplYzgxcKwW8Tr}X|Po$CNNN87X#nst?pb+NpgjhCCmQr1~%>KMCho!)7NL}=3g4a zXLR+suH>k#YcgUG;b4vb^Kdy~y`a#YD$%B}vFNYlRh9DAYqIz$N6xFW{LfJD83C(I zbOKso7tM8r>bt6D^Bfmuo!*TXAvtDRe?Jj*5ZKEuM;!@5Jn=2mb#hL(By4MU25YLR zqZ!m-KTYI-+D#ME+8QL?=`XCXEsIRmmRJNdHC50Ini6iGzLCc2Xj4al(t2mNI#55% zow;7CALRBBEv1Ql5D1cDRu$-%QAxy)K?WeJZo?+e63!!$uOk^v6E4GRTZi=Aa;qxb)X-wXr@L5pKA`>pagO=^4rynx`Yd0FqTH9 zA65GboBLx!(xFOPI*^{!;|d4P{s&yy((V$U@R%)BEYlo^7+mA)P=@Yj4q&-*K|Okt zeW<9}Mk#C! zrdiF4QZora{0s#=!`!UEWX+jK_$}}KWlmGba+&bORca}kr}OUT-dO_A?aj?fv?wX| z*MW^4hcC0xDW(M;)ui-vMbrGX7jwOH{qoveCgHwbgy2o53MUsozVVoTr7s_%GvJob zvYUI^gUx2E%%14DW(ztRBi?p)b`q12j4dxK`*-wkt5In?rwG0=pC9o#zs~>ck{#ql z`4Ibov586fAO7I`?o;5UP&kd?x6W@d5&~i*>q`3Tb#2~m>C=-p~I@q~InuHrBg*6Jc@6G#3R0d!)Ie?13w@jye~f*5Q}-2l&rH zp!|v>Id}8MC&^ZZZu-Y(hi0p#x%Ktt3$Ega?{6@u4{dxyo0O?$eAhoF3{Fwy*Dq~( zEEFd1J8X~Hz{=Ekb~AWfkE*l6@%-hqiI~4^xs!qJ{w@b_M5s zA((NXEthx#158Z+n$KYm4)I-*4C9ms8y5m3i>!Dtv2+ zrChT868F|5YjfrtvFS@RnJ5OinP;qbaKX>IYfd)U zYkG|DTZbp!+;wu;)-?^gGZFXz=x&0InZdXE8)LE)Y}baWt}cJYa+=v_4&AT^TK0i?snDcLTq_^9AUZ=M)?sc1wZ*K;IK0G+m z{v(btJgct(Bnh$aycf_Wl~0ZT%WbiP5WnJi$b?*D?k;E6@+J1&7`~W=2L^R_(0yh1 z%(^xxz&Jn344viiMW(mtR`%OC3%62K zu86=%l!btUMgQm9T$w^iYCV$ewV~--vWA!ifr}$C~x(+gSjE-np z`jU;3ZXYE`TW*R6BnRA`StuW$PPYw+wat%|Uq|#-E_b6weyQr{DBAAFqs`3X8HLJr zabP0d_AgJT#70(|-d=7iyB!${v>Vf`*Bqta&G(Of7Tqn`)8(DA+gzV}Z;x0uPz_bdT&Fpj4QTCnZ~Nk1j9{ zGu@i4Erdw;N?+SjM;*`$D_bl}B;57LeS-&f(rxjj+9yTJfFc6I4-b4f3!t$!4lRtc-*-{-k4QQ$^eaF`)5Q!jvRQ0L7@ zQR4I8tGkCr?P-uI@6glD#)j8@1HDEhyl9-Jq2ON(hR+SVKUEtck?%+Q^F>PkaJ@2A zViki8egQe=FPfvqgF1F$;f3aQ47>|Hea;4jof5Cgn4>Y6&H5*tFR$fJoX$Rw3Js6e(l? zsC&x(#s_>W3G~)r>^tRqmicy2Aq?Jj`r1|!zmLOlu=1)B!!_#Kn2kZ7^}%^=v1(HY z1Txc5%J z4XnK^NGSW1TWbom;e?OQ_Aa%&_wW&Us#7HOB-ej`GLb947L8@AxMMX`l;hQX9DCxw z|2es3Mdy>EVEdfaD$*5Htr53@NUJ$ zmVSWGkxI{|jb$9#7uq>K2E8+s2q5Uw{k+XG1W>$zSrP(_*avWSL*iX$2)}lS# z4vGR*AgKt#Mfhl96u*P2oSn6(nJCc9)kzyMh2Bz*BpK96_Celu3r~LrKBJ2Q2sWqP zyL4ygg_bu4E2{YIkLO%D^?A|u;(Ej9{@AtCiE8eeG^I!ezljP{f($%{n2vt+6;QtD zf~?~%j})K3hnBY7m)!Us9NQAIWQ)fU8J-_*jAlM+%IS4~A_ZDL)KK}G)_Xjk4A>A1 zO0eh7G4!l&X(^9Wr+C55?V>-`bMEgEZS~f8m{NLt!4z8@2$Ry8&`T^&KMi)fTz{n5WT z(W(xQN1O=n)FN72qDIF_i!}q`PoWwm!RIeI)dV#w(p*0>%&*=i);zY(FL+!2<L`0sgwO|d$hgJzsMj5Vl^{!g}keP&JIsGMARb7gPxtTkR4D-i^#w|1|;;z4r4X`CL1H4k>H4T!t7G zvYN?*Z?@jT4cA0Bo+92D00Y=~?e$p$^k`XF68{|o zlr6?^(;2$!jyW)gj@Vlq=*IKoizrk+@EFNNEi_c0VfMR5mU37Z0=|D$PDM)3nvo^0 zhLz~lhkrkz_TGE0sq%-|qki#Z6g?M;WI2DK>Vm5D|j4~V^a2-w)3wXeuD z4rhb}y6{py^RWh=X@^xC_2-TRLn0eE2E;=GFs`5<&$L;Z_Ybexx|AJO2l`?M+?9rQq zNDw416IaIuyKmYdaXc;oDvWhXe|G|Xmn|h7MsKQbAg)Ur)UDK`tp(k_FIgAj>@F)t zU+Hwc`>=4p$vUR|ui}Y&mQnXS!t9gCCS8zB{@4!zF4i$?Sp;_bedBudY~cb6MHn>J z8}v@Pb4v|Q6M=irFFIEZ9UREpmL=||*|64CSi($xYJq0+%X1Xk3}o%jBf92(JlJc(zHCVtBLy`ih!Kaj zjzP9{z9A!T0rWo{W{(TFvjDairAH(4(D7HQ)_ax~H7#Q%o%_)MPk(j$ch>-jsj(Vq zL_zk*I_|LUdEUdEZ^=|b0|Wnt!7simR-z-+3`p?s0<=l4r}X^KCFATp9ItC^NLs9<{)IZW#JGN^ag zXS+&pi^hR`bQ-lIV`-wQ-9Vzci8kC~rT ztG)5;0c>*5aIu90-L&#~gnS^mKv$YuRVxiDB++m;*RIb>#IpU^Qcqz#m(^581j98UIV1k}&WZAYu)}QN~tG z77{$aCf{XB{X>P->%$f`U6AP1XL(*9pTDZ1(k1c8+O7k#+{I;Shy{n()%xgY Date: Mon, 15 Apr 2019 18:16:18 -0700 Subject: [PATCH 297/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 51f7224504..fc8a18d8c4 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -62,7 +62,7 @@ To lower down your threat and vulnerability exposure: ![top security recommendations](images/tvm_security_recommendations.png) 2. In the **Security recommendations** page, you will see the description of what needs to be done and why. It shows the vulnerability details, such as the associated exploits affecting what machines and its business impact. Click **Open software page** option from the flyout menu. -![details in security recommendations page](images/tvm_security_recommendations_page.png +![details in security recommendations page](images/tvm_security_recommendations_page.png) 3. Click **Installed machines** and select the affected machine from the list to open the flyout page with the relevant machine details, exposure and risk levels, alert and incident activities. ![details in software page ](images/tvm_software_page_details.png) From 1393c1f6f83254d05d6b1a9abfcbb50276282475 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 19:10:51 -0700 Subject: [PATCH 298/349] Update threat-and-vuln-mgt-scenarios.md --- .../threat-and-vuln-mgt-scenarios.md | 23 ++++++++++++++++++- 1 file changed, 22 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index fc8a18d8c4..75e9cd5930 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -76,7 +76,28 @@ To lower down your threat and vulnerability exposure: ## Improve your security configuration >[!NOTE] -> Secure score is now part of Threat & Vulnerability Management as configuration score. We’ll keep the secure score page available for a few weeks. View the [secure score](https://securitycenter.windows.com/securescore) page . +> Secure score is now part of Threat & Vulnerability Management as [configuration score](configuration-score.md). We’ll keep the secure score page available for a few weeks. View the [secure score](https://securitycenter.windows.com/securescore) page. + +Remediating issues in the security recommendations list will improve your configuration. As you do so, your configuration score improves, which means building your organization's resilience against cybersecurity threats and vulnerabilities stronger. + +1. From the Configuration score widget, select **Security controls**. This opens the **Security recommendations** page showing the list of issues related to security controls. +![configuration score widget](images/tvm_config_score.png) + +2. Select the first item on the list. This opens the flyout menu with the description of the security controls issue, a short description of the potential risk, insights, configuration ID, exposed machines, and business impact. Click **Remediation options**. +![security controls related security recommendations](images/tvm_security_controls.png) + +3. Read the description to understand the context of the issue and what to do next. Select a due date, add notes, and select **Export all remediation activity data to CSV** so you can attach it to the email that you can send to your IT Administrator for follow-up. +![request remediation](images/tvm_request_remediation.png). + +You will see a confirmation message that the remediation task has been created. +![remediation task creation confirmation](images/tvm_remediation_task_created.png). + +4. Save your CSV file. +![save csv file](images/tvm_save_csv_file.png). + +5. Send a follow up email to your IT Administrator and allow the time that you have alloted for the remediation to propagate in the system. + +6. Review the machine **Configuration score** widget again. The number of the security controls issues will decrease. When you click **Security controls** to go back to the **Security recommendations** page, the item that you have addressed will not be be listed there anymore, and your configuration score should increase. ## Related topics From adc39a74f03c2cdb65ec175b87b3f10de5420f3f Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 19:11:28 -0700 Subject: [PATCH 299/349] Add files via upload --- .../images/tvm_config_score.png | Bin 27416 -> 19710 bytes .../images/tvm_remediation_task_created.png | Bin 0 -> 3364 bytes .../images/tvm_request_remediation.png | Bin 0 -> 20827 bytes .../images/tvm_save_csv_file.png | Bin 0 -> 9066 bytes .../images/tvm_security_controls.png | Bin 0 -> 62469 bytes 5 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_remediation_task_created.png create mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_request_remediation.png create mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_save_csv_file.png create mode 100644 windows/security/threat-protection/windows-defender-atp/images/tvm_security_controls.png diff --git a/windows/security/threat-protection/windows-defender-atp/images/tvm_config_score.png b/windows/security/threat-protection/windows-defender-atp/images/tvm_config_score.png index 0ef6b942327b7fe989eb99f98169a42203e4b61d..36c8c8b48f855aba6d582524dbc0020dac411a17 100644 GIT binary patch literal 19710 zcmbrmWmF{5vLy^OPGgO`TjTD~I5gHkH}3B4?hcK+yB6;5?%ue&YoSwp@5r5bcix+C zeLr&5s>sN*GONysvm;{f4ErG`fe4Qa4+aK?C?zSX2nGg@0y=zPp+OeElB6`y2b`^> zngbXZQvcrrJdqX&4`hUKl#&&L*@Z*_XQ0*DD+&FFNlevI$jQ;v#vZH`FfIu)eRc$y zM2#E_?9FT)&1|f}(BMeOKz8`Qb`cv}H+wS^Q%A50z(WkjKJcn0Y#bOwZ?ipo-1;upy6vm5|m zl2!2yAbus&=Ygi|go!L#` zDMPdD7uEN#R}_(*=U??TNmRPb^7Hci!--6onNLK-b@KFX9!Dd*s1QCfr>vUR#T7Qb z@O_y*bQ!NK$pQJbAcG@MI2|a(ihRi$ule=!$MtR(wmE^s3GJrCs7?N*?Amp&U9HM5 zg^$PB1gs9J2k9V7?uGqUAVqeK$fa&;TmDy{?YT3{8|8+qK)6GgTtvNRt%;+t=$b2- zw%bQJylkxXUizl);t!4U&khwk5$hvsMQzjZba@U~`UVDJ=YsxJg6~-?!CLLFC-{8g zW0N*1+*92|@AojD#cXbYJTAR*ccD=f92`lL1ina_nZSPM!VXS{*8agSt3IEnWLwi} z#VnR_70J?jVn3Z7e1%4`UDWT+r!8H3q7#vKYO!{%)W10CaBWZ3x87SH{VveC+dHTT zCp;X;1!E6Iv+Gg49YM4VF%Qs~?A@zr&tOhlk65gRD{*}Ned)2*jq&EcZwF5Exc2Eb zX?HQqD#-W%=Ypir1%B7(QdfPuRX1!wL1QpaiW3!U7yl&E^#e=gij*?yNXlag#k9Xb zj7tJMJ;hlITkrQr{ILty?;-LI;cEfik-5OAXP7Hw@s?ms=`19&vsN>?vC_s!D0xID zBpdxW*Zl#zERv-nvn99p!H>tdVmJi6$=#`Sp{a)@W-GMUIKiY`{#7(gO!1d2GS@=a z?7UY}!q$2AJqN`5EN7#3n|rnkBJ5rKKLell-pwwy6CEVo)-C2z*qDN=s~bh+kHB#iB&xFDD!`bO5zZ1Nh_h!rPgScMa0 z$P{byP{N*-BxELNrSZ1fP5+Ih-%J&RtuNW>01<5#lu;4*)8-@YQ5%>g^r#t8<-Bn7 zMmw_hq`+5n`KZuxFQ}sRN&ZyRbFQVWeAG0jfbQuR9?-r+up zl?!98)kKan9sRGeAthB+`ZI5*uG>LC%j<;faTq+jq^Y9gwZuEfLU}qPonIKMomrB{ zXi|Jl)w5^=5BK1+og0Ibmsu38!~tdl@As;s7Gyd(eR!v(rB%h9Hy8k@Mz0%>xGZXl zbwy#LeS5;v%~3rL<~IO&7PXgu;Y(S`p9gj{>1^WTmLS*fukTblI_ux>YhjL?&e6O- z(jkJU{)l;bVT=*c==C-~%0GJ|REi8kd|}?gwcb{GZ*oVJHu-69Gm6qo8g$K%S?jsZ zv*_g!>2cQ=YD)e)v#s%48*DE)2mM}0P|U~bWMELx3~a?KC1m@?cE|wx66`uR{R1?ZOKO(Fv=M~e9r`w5s7jyaIer7)4 zo>4{Sz2GJOc;+JuWer*;gWQ2K!E3vd3R>by@2o$mJKsB`3zc)8SFz|t=f{RI2PAQ7 zSQFCK=c&9hpM#Fb(<2`uqm)YhI`x4CMk=oSTP`7vXcSl*i zOdiB7Wcf&P&oRZDHy3!kk~z`2>v3_IWJI6wZ&NlU@b%EG}l|Gnh;ez9CCfp&~> z_8KV>pLMYH$pL7$%is+pZULGx9&Kfk+0QVLs+Q|M=Jt7$bhO;&TXE5K74H^5<{tC= zO*Q_qyUVdzC4Iinud4gT!$!wsDmc4qq}UrBe>=C(c$O^oC6lXpVnr3 zh7id2Fq@n}PY29PeSwfVV&JqyvMYho=<1pm(m*@yT2W>!Ad!}kIL zWlW#COwh(&ThfimSKjxs;(P|7Z@@_WI<4M0OnXCkx|lw;EHdyO>;U7XG%K}nMe6f< z`1`C1VEl6P=w_kJC%@snKf+FthZaUgXn5nn$b2&Gscd;Nb~O{Qe6>U5=HP}Cf@Ea^ z^e?nLP8W8+f!2QA6$IM(urI78-@a?qh5Fn$LnJP{JefkDdnXEhIM9cf=eobxZ)9}d z?VV88-dtYFaW9)oLgJeyB>_67YhWLWLM8!WaB(s{l7D9Bf-(!P^*3$}sonyQNK zV!eUT)gqZ&eAt5S!dXHHS?gbD+tkymLocAwZ{Gi?+#!4WO4xD(q3=%4+E78zAGx<+ zBOv^7?nOQ*ipolt?)A|Wxbg^-`DTSF^1+l{Dnb{z)Ia_5Til2XSO653T@ zEA$gRxqx1Giz?`qy%4p$8vJ9|Xlc)CFOhNPp-TG60sgaVeM})Y>g(>HK!5+;Vb8#V z=*;g(Zt0P*Cj=TSQB)@>Tm)!u;cXoySk)b03E=Cg30JHG26L?5UHdadqxSL(Ip`;& z{0GEya&p4wb&dpRwKY0>O}aUIvji_kigs3dXC^EHB8f}3y8S+hii)BT5;A1hX4@xq z_BrSPOnjW!UzVo!gG>%*c4sso(r*228)q7isf8sSBesg~%3E|-NlcdlHu+w0Hrshv zs<|0qO>kHOQ6aYrVn`y1Vd?$sNg!&Lbth1Eaze2Mb_vX2@C&GNZe`^%q6=Vs^daEB1|?Jdq2 z6cHxZD;ZU)jn)XfUoA3vX4a3qR&=ci9wC1pz0_OA%GL~p+X-VPL32h1Ox+sS-BWiX zC8;ad0x!T#%WaN2eVKGuABQNdd`c>P+~|Kglo{8) zxC)2qp6RgE=tw~h|E^xvY+PqN*#_SK>06%_+GUxb(F ziM9L0i3ig@LslzKuq5$w?MsW$($`<;lg#Ra5Gw}z3ooDe_chYhofDGXy~UzEv*aUP zz7Xvr0a+dHe5@1GGT}L8q6J>{OQrc=>V^GFRgv(BbzSMFC#*cl|cKVi+D zH&)y1T@Y*Gkwoa=;5K&0E~v7IvTg@K93yv7S>$9v8+~gy%xn$`~Aoa{(TESyQix zH>r77L_C=T2dEX5V7eA#~}k7p(*I^w`$fRBTWC1+SN*yu!e2 zQJxOFe=2?w9qgaY--OM|dZiNA zEa0PvNWH)QETHuqQO-yj)?!F~EdP-R6VKDeTA)91IPUI)sZ(LMWf@*R^;!PM)vE5YvdT}?>>()mGcbmb3s2f-&c@in=pQG~ z=iZ1EOq+dIOL+ONtg-b^X=i?Q(Vt+DP*72YTwPs{FePVZ-3YIV4+ynAJKc6_O!nLO zUgkq8Dz6a*TbFunUM-UtU&AY!HelT$MsJD8JWkZj`Hq$2KYZj-uHR({@o;yf%C$m( zH89LHUtJte^=0G<^e&I4Ymr7Lq1x}NAiM$KT$5ouy0=X!8&BQx*wM91H5so`$FI$- zzmJ2bO{~?=HRl0+uhlk!pXPsF=&qh*Q}dsN4Y$f?@29RAJw?Y^l)O4|Z}K>|LK-5| zZh9pZ3*0RZ{30{SHexi{R#9ueA6$pD9KFtF;#ca{S0NcX)qFExXCWEeQF4~uM^a{V zjUP&8G?`uf(5--8ZvQg2Q^|F>pUiU0%j<&NOzQeF1umQ+>h!~0C8O*VVCd>_u^ynj zF=6i7^IUC$)3P$BhIX};{Cdj&5doQ#u(G)fHf^|PP=^sydQZ4ujHz3Xu#Cyc|5CJidcWXz+vl8=^(=lz|$3 z&Is|QasIcJ<$6sM4Xe&1@lSGnEwJi$d7kh43|t4w+F37|by0PjhXZZTsK?saVAR_HibY};!}Xn4zUQ9&Lpu$@ zZJXT@zzCYg6>9B_sR&M2T4kQP7-HG&+93hkgSU0f3!={h2t^+KPDlL`IGNZ`qNqM& z=LPr96dLsz7!BY0!7jYLkfg0ZDX`mH27c$$+*hKwm2+A?ABiIV2)p{E6j)+X=<}l& zoJ-V;@5;RR;P%)fX!7flRj{E)PGm0Y`L6whfyh8r zS6a-udxQzYcv*X;8arVSr20F@3pl#S7KgI?VIJakl?-7DP3t`bXdmO2^2uD(Rj`$7 zi+otP6DWKgE$6IRQg{RW@-jvnWh`ZUHOjZUP1dPlhI%(L0Yz_)*Pk8hQsk3Uua}FJ zk2Ex;Iv>)(ZVI*Z(%GyYICee%Qk=Y~^gY~NQ6K#- z@9bNj+_9P#z2JMUb9;=Ryq#rBbm?_Rt|A6*c{n#Dxa(6GMFAbXq<}CXfIN+Rn8&-s zf6uHFr8S`9AW+bKKZvk(bW&<4Pc&|VOuK8N|27zqbBxc#$+)`QQjWJb{O=j`WcjYP1WSlIw(G5)}x2_-MuJ)SCQL0nFf9-W}B6}Fo{}3B# z$KR-iOv}4%=s!zxqpK`&YCP!c+kKe-an6ExMPiDfh%B@{g8=@C8E}FCh3v*3Z z9BFTorDJf=@=GjF1zvotpnQ1T5l+ny{nYH+}p|Me`wRGQGTE$E?ZF|H=a)&(f zyf&fq+q*|}%Ay_DJM$KcFbj>?`p>UP@=~)%PY(=fbKf)_8dvMjP~dqINZH-zBA@WN z5*<6UVmU=?4P)!rJuu&(`trJ5PtkGU*xyO*QQsIY5otAx#EPsK&M*-!Rts(rYJFayR7p!J8{KpFWU7J4fU- zn!{iiEoAL>w7EdBtv$5GzMk$=Oj2H|1s|6hrJw^%S>t^L3W}ok&VNn1vUg!#t)=+V z>pcaonrSPMO15k>v}(X-#5aSFLer-Vnf}!DYtlf ztT`+BI=oyXlj_M?ys3LOju(bk3z6Y-S2J8H<0lK2d zsKU}Br!M}8r8!13a&7V&gJLG&#X%D}>9K&eC7V1{_~kcqXS#vfo3(5;tK23g)X&W? z^atJ#B#Z)V;UqQ8;Yh!WG;9!;))GffcdPCLox3h@1m4dG-W^|1^bOW($il)1de2j< z4Bj2TJRgiFXF`xd8(w+$&|(8xAWatXj#o8H?oC0oTV*4n=RSDiKWF$k}m73xQmEG6nLKv!$W`D zMe1+hS*9RxFd~w~dHCG0)B0deYT{*jCW3Ve+DKv$h1U=rS$3r7c1J3{AA7)s*i1zW zpM1(8Bu3Ckuxoj;_;+#aX<7jG-8_{HXT||Hu8^rw0x01jLV#~TX(&Hno@4b({WhzM zioE?Q4oQx(`5F~gMYBQPV*HYwc}H^5RJ=Y%Xi(wFMx1e2e-&gv4J zw_XJT5ym`-@VzaOu#&_(PHRpR&(LEm<^b#wS%b^HEQL;nZGYQN&=dj{#L-#8zQPJe z5dVKkSmsDIG%!;UQmz+R7OhtNZpSXSc>Q{W&Jc`Qyxy^1>-Ewt4yz^g^%<#*dIR|E z4{hC{RQpRC^`WxgEO3chTqq(Ux8rhMV%~>4A_?aMRlcu_cc!<+-Kgit%0s^?Pj#CP zYzK7R%*j(&ZhFOtuseOjBmFaEyS*=^S#`V<-Vl(8kW_vBqgvRV+3*$i`6X!a>^Ug0 zoKwMW3$}qOM^+T3_3mUSrktVpkme7mFp3-&y{=z^F8hRWOCLSq);b(rK$}j@vlVQ8 z{G}k!cc6TI2mFV~e)IyJ>#d#lV~Pj6HDkl+IG^X?ZhMPv!xHB}hyUXn+LHlVgd$-> za_xGeNxvAJDgTbbP*#IkNK2ssmAnC zm5l-27K)}Hs!;=#i=cv;-0dwn?D@LNscD~mrR3j+8rp4Wc%5l?Ery4iXfT15g|pUr zqq|kL1z&Q4Z`OHxI;2M*5MTFJdUJTqlmxa`G1RP~gCrX-gwOg^KmnTLCNpK(hIWLjD)O%$p zymo>Z^8qHVTkC}%_4p>BL%Wpgue&IFm)Rz{TMjvMEZy(UF0Qo*qX=)Is}d{pQx&t! zI{1jqHqPLY`(s<-a%vtTUa$BRh$Oh|=0*&${Auve__>q0#@FkW1EU3Djjb{?IAJt7 z5goRb*ZJw_NI>z1R%2Zx)VTwj?`sh4m)6!r`=|ng%Q5WvD(OBtKO_a&bGfDn0+06H zcsaOFIBTq5dU;uOf9SNfBF|qKHKp+zKyH7|9a#EQTDjKyCkQxhFE8D{Hhx7CMPBk} zY-+&R7`^pVeIzzO^=tL*{TfFjuk^v0--JU-(-r0yEzIHMO|E=Vq}GV}Z>M)e4N50j zuc6V0`UCmibAZfd#6W--WAV%4<&)>S^H&Rb6vCAt!mt3zPSVLXt~B_VC(f`{06_bUtqs}5&=FXjxitzTg(YV=ns^P_3jYi^9P1F5Q%K+k}>~H z8!11cF31d8jAqeiy~JTMajwra4A0$z*Ni->4S)BrotNw6Ah?%ziSnF-QdDA5050zTXh&_|#?fWfk1db0*24OrpxA`r^}T^@cF= zcV`-C_p}xtKb_UEo}N?T_{@py(QfW8g3`IGOg?M%LBhOahY2l1W5F?zd)$b<^T^oWC@;7em0OKF9o zDh49A@-=HYXVxokVl@*mNuJBYESDs5M^Ti+E;NI%2nkkP{|mGf=mKEZ=Zuz8*rxJ?SZKU?MGGMZb&lEY`_iLY;4bzhV!eG6xvIp9(=sZqju#VE?Bv0Txzu$K6ml) z0#p()uKgYtqLBCT#+EP5wWpfj9W7AE(w?k0cwJnim@S+az}U~!>!NQ&HeA;Y0#sq0 zex0qTju&Na!{wBN!dt*2WQ z=dBFuTy6p&H%E|>wHTyxmWsT7&O;12Uq{@tdS6G(9rz0no*E5}Learpz<#oFw^hh{ zX^XY}vg=U?$QuWqJgP!jbiRJxM7CeG6(ZVCClTU$;Tm9drRu_Szl$k$rDYvq{TbGL z0UkNAZ1?tI?bJ!D{M;crq=WxTJ9YGa1pQFtRZVER6wxyx0-?$XZaU}pq_?E>dbj#N zxByHg`JB}4n?Il*k5TFaR_}3TZeoo08DLH5wi!F0cE;}S@8=g5P(c-&)kZ3lgnrHC zbU?$)a-9Q_NBNqIH78r2HQC#UluW05$dn0j2Loy6xi^yK=2&OnP(~+lEOWnh?D!K* zo!j*>UQ7QWzcrgzoVdg37GVBjwQthPqqNMaxW(@!dqg3jCb^+}vAP&Hhc;Q0Jwe+K z5e1C2jcU5e1TPw&@B1%VM5lW>n-zeaI)K299S)vzhhrh}j8}2s`p@os3#C*q8Sf1H zgFc}7!W~*?uPa*)66>xdCCe(>_R184o!x1EE;#fdv*oC^yxIDR!ci1uQlPB7Jkz7M z-pnD|itbmZKXCJHR3S%pO6XNtFh=}N1O*Z!BOgy12<#v?72|{4Mt87Q15pMt>?aiv zL{S3g{x4jDe_#6je{~lAf)cXgD_49AG-2ZHHg|j{BKFR?ssne?h*E|z4nRFM`?_S# zW?R-auE(KU524D8JKpnnWyV7_9;~FZ`J)=w3D5{nFC+<(H!?hAT&ECINkAeJrk~gNOqJW{ec8X737w6h8{t0_@>K zmalZJ z^1izP7i86{pp7_>Qo7#`lrHk1@14|Typuu~N{+?`N0A-1*s6YK9Oz4aB%f`etFtc&gSe%R8Gy-c|~+X%W!j>l_{B8-TG>i!s)ebsM1WE4LyJf zy8Hl;t+N6euWj~gUx&|2y@!bQ+g>{&XlVr9$A&g~bz=xvTuPku0t5suEMb8z62t)qL>NET$g7JH zy=WnCyn0RrG4k}6pA&6n9YuOTF(!kDyz>jJ6oP*V@hW+Riec0aWBhY~K_6^+!WX>6XB z7m6si$4es>mz1Q6=VGmEbJpyavTGH2lju}7jw$I1jkc(Z`<1+jaT}}b>J6hE4vNAY z?hEoWzO;oos_@s*Q6#*mvFuZrJvpo46c+59*ODvJP}tu3-=){hnJvPKWy|R6F(Xx= zCvuHBB_!)|7PeJ{(a}-tcVg=Ko(gLbz05>5KktdcM-b>{O6du+u2R=;Xkb6SO4%!b zDJjPbbxs7+x4;Ih_)#*TO2=MKU}pQ?27a34hL;Sr`2lYirp|(pamy+@G4qWN?hl*2 z6=+sZxb;)H9(r4H;5FiRC^6BCMg6XP`{Ocex+6JnthiNL{Lvl|+$@UFsf8&I5#-ud zks|!XblNEE4*Ypy<#-|^dnP_ZRkEf9meM$UE(@?CsdSpw9=(X;bv^*zBQD*N6{k+YAD(qY1p8n5>M-IajVxDM@h;C9VF^W?E^AfQNUuX{e)=Yc@iE1>rC3KJBLfBlT$P^@rAjFP+%aJ1x0TEz zVcrhJh#F#({ffV#zL;7|Tvi0;5#X}aD$zJTin-IEeOl{|dPt`XIGY!iZ;`u3(AIft z{s}MZN>Ad2geE;V11wNM*=jX)CbD2jNjYj9y`i3g=C@)Wiv*SA9a$VctmR((TUuUzR_X!Y-zpe5Cb0=f~+sLRqSUe&f+{UjZE1M$!h&X4SP1h+{RPp@8eziGM{V(W$Q;`Svd zFA=YeKs|V@%kHmbj&BdmS2n}t*-SFq0HR^5w$5tro9b`oXINA*r*6|cpg=*$A+!BX zK%z{ zj|^S`C!gh)gmQK4AVz@U2Bi&6a%GP=;T`TVsgz^UHO>+Zq3)!8Kfz2QRSs>hBa=jC?l5xHus! zlpivDba8piui>#^wR4}d2(_qY@QYxp`jjNVO`mhxMl~g#%wp>O0@2#S*(3{Y=QhQY zA>RR6{LygCY+J*C^fl`Gg z8Ma3x9O@ya?Qx?Eq(gX^Wx=J3+Nw+#vYYmSgMW0|c0zL0z|$TY?sia=)oi2YPm%wy zkIIFUByKVnOtz8G6?`!^taRLNQZ!V+x16d>%T(w-bgfisVPsK6M#NbS97#7yo z6j^dH%8Ftznyz?&vU5PLk$tu+O~6d&KXqZ_>RKeF3$p{HuXyMsXVzbO>f%qvAE;5X z{@@iRTee61o0(g#Fb#Yl)#K89cOICMy*xI26~`V3xTJliq&(3CTFjWENm<9Jir^oIbH$vL+1TerJ8F@D+JpVu z6RftGcpmz+G=|}mf$N#d$SCCUAvhwfqyXq?^7s;I36&HnA#aC2hxQJfT*;8O#`}k2 zxb?D8IZ~v0-+2nrtN;;nm#^lmG{Y{Kam>u9TCGTEISb}epMQ?Ti=x3Chx18UEhGJH zX-btz6O-}w>~q1yhy&PH+v1SV$zlyf=n$A|a)QZeaz`t?0q z#5xwqW(gyv%4HI(Fg?RRJ;_2O03)9PA%cqNC4{(=; z`2~e`Fh(ov4Zm3!NV&A#wq!QUHIDuIXX)!pF|>mL@^|Ts#Iocq?`;Qv5w_Hry?MXBLu78Gh;+I}ez6*?7|nixnEQ)~6}Q{blm z(coNmyQUvIow@iZKw7gA;0)7wi!yHdl&^mb^>Mp%xj|T^)PzZHjAe4b7elBHRQwdg@Z!+1vgyNSZ!AMaMMEbbLIL-q)_omc#UR}kSLVKO z(qmqA`gbYk!}z5;IA`l(?z-(X#8ImCenn$-p=_mZMPqif5=8R;7GxF@b~IsOg>n)V zwTfTj@3)v(3z-(`mMVR8V$a%sS9riQh*#F@9uAn3cR1$#W=-w0BxcO*K9pKl?Skr4 zJhImvm+fa`?RKldRM^?T$a;-#US;G=8i*2u?a#L8wMR@N{J&1kw>Nrc$0I(Je7tKUw>q z+XW$CEN(VOxau~UO`(ym2X-ht+J9)B+>;l(bx1a(?zS`RPncI)Txt^aAk@Zp=(HBh ze+jQZ3YSL1PCoNwQIF7k8RV#e6t2B7Z#0Ze{xQ9WWZp9w(Us1fwUd~+=Gp~CHt~0% zp-hASspGVc0m4r83aF``6%wip1_PfL7D}+4K^Kk6g zr3#YJx#?5+UPHZN;K$ba8lm%6AqGy5 zl5M{ZxVVNhowM&4BVM+j<}|HJ|B*yD9m9+oK5i|2wMNbc{`aq|TaLJuNJw)yGB5|&ldNV;s2{LJ?S9+y+T za*jmfu&N+K{1=zEa9CF&$#LkGKqH_dIFLQDNc){iY-`N)f-Yk z5MdYAgfkZ|v`7~Vm8EapdM<7}uia~sC zdDf}CdL_hm;z!{+s+hbL5f5#?(_(yFb6hq@=@FU`*KgPr2&ud4=er#y`CO)k?p?Vo zb*=#q174L-I|h7%v@i^QZm3iSPKzd}eARkTY(c0(aAr{RrVZs**&Ma9KW=?H&1$#nqu2nza zgNi@(2Z>M<;SI7zu3dDFxh#5DmK~nUbC2tM@(pMx1RFLDDH<2j)+CkHRc=Gt|3>f{P`JXQC)c!bfD>+j~<9g+<*BE z1V^xZNeD7W2$KHp)?VTqrQuf~J`y)B?DOb9#^>SD!fk1^>l^~jaLnWB;|#%uRH(fd znKmvayjkXz^?i^!fK0OG&7LspfxUDP?-;3jAkyvDZeTSCKj@4xq#OW*qcNY->eXPJi1^8jNQ-od0 zG7TH|CT9xBZ91`bkPhVkrv3Q;SFiaORf!o6xLpc!{q*3UNqV~VRgJQ-IXw>7#{Rqc zbGEZKT3B=7*4qhZDNr9Jad5rUo@qMq>DpUrw$zeuWExHuXYqycN#lIpoR4TfSJb~-~Pv!o%bnvVq)cR zx}1q|3Z;lkBzy5g<0a^T?Aq1}h=86gh4pXH{!6%aNd}Iz^%kG3E`$GUxFXg0(IMz^ z#sXONor)c>blJbox^nIysjCQa$vTFgoZ(HAMSHJ5*4n7h56R<)Xs@?)d!3bJ&V~c} z?=PX>st%F7h`RW*^)64cm+gdz+})*#i$r*%e-Y&YE+Fsgi?tk0oshJ?Rfwrh$E6ie z(fmS4;(K*Tl9_1Kqa7Bt;AB=JL4W8Eo1Cbf>yBGmMm+7d9PZ7VDEL<6*GNgW*|6=* zV5U0E$_rvv#iv7?veH~NY2zDzR>Q1Mg#y^0r_6eVNS3Z}z_T>yG8U+!i*nIhnrzBd z8y-(<@rH*fCD*_Z?|c_8T3|j8V~+H8CcN-h2o?l>J=*`x)xVgg^*GXN$beQs{0 z)ywL(-Fdn5pAb`hw=mH7NyKo0p*|skiDD58Rc-Kn2~>;uO&uF0k74%=jhE7bO# z9jZ&0K_962_qwv{IP$@XzzIHZdF``!`sAZSzg1pUWIH4HF@DDmwr@$tD<`~D7zi^8 z0Qe^g{CVvKsF84ofUgl}cVh^ryr_ttfC|J@WmmZM7hdMk7s{_WqP*?Sl-uf@dU7`MLUZO+cp7Iz6d2ziy37GLF8XAA{w&1CbIQkq z)xSj|GzmW|SWsQFCE=tNlr(8x-%81SijZolX+ra|$5o{>JSJXBsu-pWcwJL;RGXkz zL6L*u5WvnHh#bWwHDK6otw_f4LY*edOiu0^&$doO9Lk-_6yLyiM{jfD63xKKhi7AJ0<(-P{4 zW{4S+oeP%)+7^8t06Sww4WHW$noq&Ko?|QNK~0Ck)gRWK`3W8lYl~h?(DT z@!9{>tNk+#iJ?^J%hK6&B;QWB+HE$d)PmZ^*Sp&4DVqz2`mYpk{}T1kWGb{nvZnui)#pFx=Kf`r|G&q=E2ca{xjkdMk0~Kq^^@wF>{jVQb`jwznRL)Eg&mX0kjtI)At*M@UVQlqo90C=@qQtu-x>PX~ooq8G7#OKK!Ut;Io1VDVj7c zC6!$toJeShIGk<1uTWJVeK%N`Z;Q5izBYMym}Wizq|b<28}&VFf!$5N2Qzo!P4VY5 z1jivJ1gc(6L-y-YPC=Npa35(2J=>+4*8C`75;+SR2;C-u?Xj)y*EhNAL$(z|N12Jx zUIzypEY5_9f};}ThlN{8H&ab0oE2g?MxDxYK0CY-xIa7I9V{1$P|4x*e*dLKa9^M6 z<#E^(oym(PM-cKzw6E%jP5>7*4Oviu?hzwGv5z!u7?W8F1*+6$B4zf_36sJiQs>Wa zgf##Sq-KsKabEDV0ZN~hA1e0NlQ#+Sw?m&g@6T99Q00b<{9x zI!{QyJh$$gtB&~N)IIHlyg4r3<*S6UBg=jREox})1nfina#NO@niWg*=0L-68Gl%R zqV4*qKp`BWx_RaCO>xVu%iD0U60JuXpA4?laNdu;7o1O_wuRK2s)N^oq6~=037g=H zbUH(D=ap;R#-H=uiMB&91Rc31)d%pG&+kiY<0HqmxlTc}%HRM8?Y59c|J*mJCy0FZ`7$@=mX75Rjt)=fj= zS(^}#ybJdv`XxA{qzdMwq^t~_n2+ysNg+o+eUgYe8pc0?P^M$%2nGlVO|Vn#Fd0a4 zx`lB6k%2eF{Dty*G>-V2uV>U`FfZLPBgL<)@5%U!B}bk6Z-N&usdfb4q;Y@G3jmFg z%Wp^kBA+|B`|QV!wCeR-^7w|WKN{-#k3<;$p-c+*L;N4Y+5h1GFL>xbixy~kz98i2c;pB@j^vVpkuMk0gNMRZxZ*phTXd~z zUS>Er9eD$_J#LI~xsfYU?C^f8IpvYW?6gA-SkM|P84@sD5Ze5?PkX@XGcZ-5$rOOY zivA(cRD)1bt{Ua^PG>xxGVp5SZLAa8U`c||A8j@|5+^Hes#*y}P(`j@0gJ>71fn3ZkJJ z*x&US>sbe$IT?!4Z7y0or&r(l;jFWLnH7Jm79INGOFKf?(i&iLg>T2^=C0vAoh zo7-hfjp}Ifw9rRQzY@L*%WckBm}i0i*5;-(Z{<|o(8`(o@H@CQ6MtsU`rLO3RZ zm~u6y8W=T=%N8{wxYbuF+)Yo*7PDp9W4Tzn+zGmF<1wL2IGVu}BfomhWOsyKwf+aM zvwqo`&`3Wo^^=aga4L=mEi-z+k z=w%~1s#A6pdH>9lvt4+8*_{UKr^>k>BW0dcAwQ!;!<-$Sm;q&d1X$}6yc~EO8qC@J z8$qu=jD~1h#~W?Yt-F)dFy%-+10BuSIUsJ+5SnB=+gke2jO^L+Lez$JJb4lSdFi2O z=B>%Z^{!+11GAl68m1RQK2dVmqV*7O8>+lNW^&;+{uoddj*xi=&1CjnVQS}{;zTP>-F*L{0s%ztK?x9LWgo5D=phh^S`PM zF70@9rdbQj8_z5>WuaG6zps815qG9kPln3N_&rTk431f=d5ihH$5y>c!VVV&>JFYQ zpPP}NY615S;|?aN#{4;0(+4Fer9cycyOJosp(fPd_CW8&ccyEm%BC_9^y-0{zwZUe zoqG%R5DX(fy`Iq&g?t_=vIY7J#uVU<36>M>|8{xs%Xj|n@<=R%cOEYWeD81!KL%jW z_Om#u>O@z*WZ=|AEU({x52mKa#0dNa66r53EZChbGw0>ynQnG^N#el!+q$o`ok%Aw zAniqO+Z7kK|4%JQ^IruQRfyuZJ?WqSPG1FQW-(TMxYYEMA9B0?pI9e|HM%DNrd*B| z^WQ4^|9xPRl_ZK===#%DctQf(s}`#Izuo}w@BROuyY@GOplTy%tI(s0($qkD#vJ)c zuN>J*H{1|A*NTA}s1$JMeamuGDxYF~bol%W1aSnrt9h|!^~eNQ7Hi9;zcgt%`Pvv) z6bZ)y{z0b`%WwTkPYS9VUJR;I*B<29OyDgk$ic-dhyOweR0^jI@YD#ty{yc>dFpc> zEV{qN2dp-y);eEDMrurj16NDntBMGH-y^Xv)&29W(Z&u|&59Km38zU#uxZ6Gr;QKd zN};4<7YRO8nef*1cpSx52$jirGLa7DRe16j@HTb3x8euGX9~xY z=m?xyLCs=#D6b3S(kgQ9}J)v;sJ3-}H3ZiwtUuV=e0b zk++T5Z@kLt$s6W@upF)~O>cNshQCbxH+4YN>u07zHDY?KbWodEFkt#l8D)|fiD75% zcdOmwgo^9`f-_O%bce}0$kVh!(grnYAg#4NeJz-?%rVcbtaG=VUd<;EGD0FBq_O_< zP4Ay6%r#hA^8vD;rr8c!y%4FXW?s_1#R_aMcX!WaQZ+Sql*Y4b-zaC29Un=obRVA7 ze{1HvqME>(I8HNEX@MXuU<3>uMFB}xP$LLL5LgqDB301Pf(b1NWho*cb%me;Vg#jy z8l*}@5$T}70)n(i6Cx2IL;*LuXTP`ad;1>tZO+{LaL>7C=Fb1z-%KMdHTnBTwG#@Z z5%Eyffw`0=;UH~QN73yLPo>w{j}BP($i7N6_fVLZ<|SzQ%;vvJdT&nTd-EVS@Cna-{El^5YU z=2vS8V%!=L1D}=Z z6VDwK&t1sCN5d>G&MalbGZaeqY#c1ufT$*O-}f+TApp&>GA& z*?fKGG=wHpPNh<-%F7qVYrGKW&kw&K{Qz}e;Sw<2ZYWYy>SSz~0h~FKgPW!ELLd+! z2?;swx5*sil1LJfOCSH2$s32;-W()Ek!(iK`SC_6g;mhXRUan&i;9!l7;Z-&&NTmX zA#WW;y-c=RRm@bG8w}3WmwlyLR957(8&72^kM}z`NZote39X?)A|HD_BzjA1y+>%K zxIfb7gJuq-EIlE15*MqWOUo$5F-{%%m=~aKF}myftAPcQZny(= z4nQp$3!&{UFn9kWTK-aqHCh+{YSYS@<2a#i3Od*YMh5@7ND<93f&xZ4G;j>##uzAZj*zhk=dSL9)?*o@BoWH6ouEUn2 zFY9EI5?LS4CV(fN4upmybdRXqU}O*yy`9FrLPm{F1&L^ z1I)p36&-xeLYs>Y;7pI8c*=)?%o-ComkAPP8YsTyh8J*!>-RAYljp4f`Z^6n19F9n z#5PN?_k0Y(SKSR@5Ah+OR83c>Xdf8q!=dr{;7`$Il}2-Y2(Q`cRo2>Hb{aNTZ<{MFb(Nvr-GBpfcA(^ zo^J@lW$A~*M{d|0@;Izz?$>=%-rM)4t8wi-pkBesc*3fe_D^=1_Fo~d-C#`mkMBpr z*z8G^d>3|?lvNT+8HjZxK)YtND3tJBJ9}7$_oL2Y$}a^`o57_tBF;Pw|s+L@^t#(XD#9;BccFk zQb-)Mn)J@{3+Bhfd#Yt)%M_JhN=HF_yA-4vMIg>sek(4UEC3?gomqAvuNJ&LsBA_7 zGACKpuILmg>$}HXZgoh6oIdsPS-VVDD7mr4fC3!-q2Dica189VGH$sl4f$nXSo{;a zXnUMtRZl0b-k^332J1-9j^~B#tmSSArn-7+Y|0T}dutUVU#FT+cYd1(Z?oao%K8oP zEJ&f2ez@;d#T+NDuaH?YsfM!QvM|M#G*8P+hpinx3JF>9z#NwmqfSt8sf zp*^o9B(D?+yKN^n^xh3T{)#>%d9F&ugIzfDb#E}t`qffnNJKL7hlj1$x1o>jclyU` zgFL3PAAf7ay-Dz7K5hGPCwl4^DaTEnU)us_NWSYDzxMmw9+c`hEREerFDQP|g#9B= zJv-`B|GJA2=!)i|oWkh(q!-ece4rV&dQ}XDY@I5a&A9X%d`_ITig7{({^Vys8ILO0 zO92aC`}U&ZwyC+$nT9LPIqs2rJV))ehA-a(V8Xs+32sEzKr@`L@#i$=kgxC2t!%gO zCzZj~2aN44t(5_@ZVvGQs@6IT$vXnUJVH`77Qz-s59KRsNJB4sSv}s1+v$3vMY}5k zJ{Y?oDLgxHQSv#%xBBNkhL3wGMk=bumE6UwjiWFa_V$c{a*rsm<0V#Z(QofPzUu6bw@@efHkXb7!kxn=js!WU%RoR{~TeD5(bS^E!L%u|M zv$l^3P zC^R~SLoDz&>P=II`C%}Ig#pgR@+$JzD_|BO=Zw(^u&xcdeZJ@W8Cy2q|MO`S3bnx@ zhPQpxfMwk7WE|j=5)_gu|Jf)PfrJxw)Sf;k0P$doI0CURF{+#t)uRV_BclrOtSBX@ zjIP8CS%S}2V;i+Cc{TdUWv%(BIj#kQE4WwFJ~%*@PWF*7qWGh58e%sgTo!HswS{fPTW*Mw z$OHcl@FZ$vJdhE_NnBb4W*-s-ivUWh2%+acOd@Jd0?tlmwhmxr)f2x#CPXKYN!ZxY z(81i!$=uck3=NK$6l910XBV=yb9XQ|HFE;1M48|MS&{$4>R_z@&y~o@+}aq7^$7(I zbO!F<8AV$YCs%z3V=!&I&wuU+|IxX*qoI{P$khR?rMEE#WQP4`R@HZ~F}E=V>%}_? z0oh>wGv3+3&=~CDGw}R>x(V4@TN~Rrfjv$n|C<5yKQ|?FCo5yHQotNJ7#IAZ+b4gnI2ds$DkNMAE)xfZou5ED^w;ly@}1z-FcclX*=8osf3>K%5rr41 z{rZ4DPgrHZYEG1|(5KY*3mQH0D}J6IDh}N@*nnS30jScjz^CEt(F@)NQ?gN`-@Q+F zJUm8^I!|3kSxs9_kFU)yAHXXNNCDJ8Wb@5M2t=>}cHNG3kAe9V?VnH}Yj30Zd@!5! znj2DCJ_SYi-_-`w^G__0|2^mgv|qFJ`do7rS6L5sr)Xn!b#yd7ce558C~yj`8wlW@ z%I2-WRhnk`xL9piSX^wfn*~Kqp`3w!rq@2C3IeE*#4H3)rt8hti^`rc#7QD#plb%_ zHDy?P)58Z4!RF1bNv(=e!3Lm`8T_@FLXeL>Nw5;AAE|*@ zP{f}wY*4R%7`_VqFF~j7VzgrHQ>I>CG}dd4yF;pv4NpmU=F4Qsry3ub+b+#c@{oC}W-dbQPepP6rXNRtxwu{Gk@0Es?^cNJd7kfcZko*(<2mv{t4&{R zmdGrBS}sTVkQOue4kAY{L65nUPopUGyL#rMd)Ib#vdoc7=lJ&M+Ge_T*a)RDeQI|< zcdMt9dp#a88ZYcunsfUHQ76Z*p@oK%aTVjGG+UnjW&INo79CbBS(2Je7fQr}hZTZ6 z$MLN?L)ce>!hLvD_35Ww5YXeY1X%|r_m69)uDx!+@e~_drw5{e36n)ASzarnRL3zF z9Rx>x&|!tj&2u7#(NCU%vzQ!{i9lL~5H7aej1fiZ zUg=u99AGi3fYV^;&V|Bvi=-H_wFiKF(6}glxp?vM8OM}DP0u(xvp8HRQydFJBTqCO zj;7pg5KqGo5uA`R){Z(lyWj}=cu)Gs9hlH6S=i>Pmr8?#FZ)!Hp$N~XI8RK=jqOxh zEs$l;`u}k?~hDKAls7GD!4P&4N|?>&z@qq^{mMd=)LQ zl{D6)Xo!ANL$k8B(ro7QNF$>HW_;A1Oeb#krKN!=^Yc5ukJiiUc}-FRxh&P!>o{cn zg&M=1kRq#`nxU|vh{y8K!n?;-TUJ1Q9+Ws(B8M&Y3c**=ncQJ6+LLdBU zz@#IcOPJ1&3C2_>gr%^SgfWyi(&O##7Rj$#(e8;*D}#Asy?GWfT<)iUuLHy7bp9*P zU*C)!-=#Ap2}_?Wo6VP_@)VC69&?Al>pq@rQbsVFJDu2ez8PzkIV&@a1@^RBdKsMh<#&UMymDt^&pTK`ar9C6iu^`4e5KBq=cJ)H=fkBvQM4pI9ID>cH=kKs zj;9`t(b#QT6Omc??2Nf=+a8GL^am78Y@g+b3;bJH$%t^Zbk2ZsT2fc4p4W95qG-JOi09+`53r4RZDDzNHueFW#N!#u4bFQy2iGBo z`OYHrk3-dq40mScENR=ocrn7mmHixh1^MS5#@@Q8m-8M&aiAozhzPYBM;@(ZHtsO3 z?>b!SZ)z$MAg14k)Te1|{ZhNzsR=V00X>u z*in|`PM#S1&FGtteM2`lXFri6-{cPY(EB7w_dR1gq~-S(e*M?R65bTb4j z$52raZiodOr+wOx9+4-@D>Vj?CycvUXfegun!O_g2%?#Nly&W8Rm*A=f0su;9H|$F zmr_W^mq$0AxB7{kC_Wxd5neC(vhGZAubb;;ItgC7u=Qdw6jbgm>7e9E= z@_C_KgHx&f7YX&Gx(H`pWjnj5zs}f%bJ9nPD~%E~ZYwEOvXmUy&sD`x zXJ!nq{!8`BAC_ygtsfuD&2%R%c&UAi4C;B5aTg=_HS{Njz*?h*9Xsy|?o|{lH<_=75 z9V}mf)}S#U3MFIi{q(DF*&}Vsaa*K%c$=~z+rwrJNot>})OEm|Z=-oubG4$K%5|?a~%ZY}vuVA;NGR z5&UEgt)ZY^h1wV@oK62u&(1tHwef*d$>^))4h-LFg)QMZgKcZ+*0LUWw72IN$4z0!2*J1h>WN*a2*POy z`mSLtXL(_8U2ENGmz_r#+u?&Jt)~X_Lzf*Lh2isTT>h+h#Kc@*D>Url)81^;?$>I! zE9BTIz~idxA44PyoLw&xLE!J2UI$60YiL3){=plrflVHCv|kGhl`Rl8+$)Wjq$+6r zHO}J?0;QWn>Arw~R`W!?g%&8l1sj%B(RR`qlY;%x1zlv23pd<$R3)a zllM=%lar2(%TH@Z$8g&i@GR~*E*C=Y;ZZ}dS*=QH2Yl1?NdeWt;9*)V?nCwF)H%10 z7f?#*2>@nLzZ{WRpfa=J_c!@4p1wC<@4Xwgj@^4M`66wXMG2RrK2By^YilEcJ=Jhb z?Dq40s%!{cnM})@nUgdV>uy3jM>fgwPtOrH4lyO~wnzmKsxX^QDfsNTRQ7+tp+wsD z?F-+QImo+Yj2!LGD5UVSuGDD6KN)O2#W6B6``F|{7fh?`Fu0|;2{mN zFMxJ5mP6q5%aQrQrz5<}_L=#r;|O8ji$}dZ|FYPWvpm4`7%j%TcFT_6TrpbZJ~vzSj@ zpMkP&bsI6VTVT@FX*TY9xTGH(q^DJOqiXf0jMEdqY561KTo}Tm!>;@5S3(fd%(j+e zWMqUdr21Uq3g+qNC(KC?Uzf#U7fnl!%QG@EqQEiVPt4AeBND}70`_|l8cc@7P}}D+ z=!YrfJ=+;1IoKk?Gd@vubLZiBUW|&ZS{URn4NaL_AQ&4JDdXZd18q3*IMHeZP zOWxiR_s9OJzsF;2E+1F#v?ctL82Trfe)jU!**-U-Qg-n3@2*3f{5O*uc;i8Xj@$WG z|FPZ=kDStBSv=+g_OU$->cqhwoP4M7Fvk11v+={#z2w}t$0CvsVCOIvS-k+lH|^lVrv^f{|ac5_8tDsHwwMC?YQTmAU-qP9F~+rWftjQ%VS- z))1Njd9Q5rR2tdUYQ>fcX$dS@`+=UlIXzJ zYzcC?+=RKicBe%<5JFq{F1Iw1QHdDl*dkVvJ;nk2X58R{Uw{MR4GR=7OFZQpJ5x3D ztfymplNs+l_pC69tT9`;1B1D!XeArhC%DG@+mToqUO9?~M?qs%yxfZ=Jyy%OpUo9- za%rwYne9*PblU3fKYn>6WhDJ{nU47>A+>>OeA~%720lq5mwQB7YZx{nKW| z$apIqVvFzKPRn5LTcW+JZMiODIcKeC8oPVw8egu{8K+Dg{c5E;3!>3)43V;}yf;Zj za;^uZ>Wnv447}d_qWXy0;Q$HA1Zn9;$?^L zn?^fFfL*qty1F=s#Ds;1#|ugN(0IK+O7eU{3`BK{Vsb;~rI|mvUIwZ3ZvA|-@L&|O z$r!laDxstv(O20LdqZUozUW9WsuMy@$6+kQBEk1`L?W!cc6I*_1V33wI47GnoN7S1 zy~}BI+J)TxE9CW$^GN^tk7hFTf6I3MD~hyDov-WjVl0^`gbKOaNkT?e{9(&4v{t3b zPS>rb(+8q=u%gCAsyW)lkN-`6^Bw5xx2$K$aVm(gDgSkpBm90?Guguz=wOU;OW zu?FpEImtUoVhNz83;#hfXI;M~*m335gf;P*LXbhfG4c1wUtMHN8AOrJRrQ=s(lD8F zxw*_ic&UUpsA;+x5lS#(ftS-BHPz(XnMbmu)F7Ph5{c1!fOFWaIX2+GNB>lF^_$1{ zaNO^Tx!q>M#h8L1G5c+~n#P{BePGqY0Bxq(ET7-O5WGD(gDdYx@fz*Up6E?UK7iPJN2~ZA}K1j)uhOH_CNQPmfd^K!atoWWwY| zX#ZrlAsHRR6ADhKhDiU!3=k^i4=O2;i2i?GR=Tcx1-fnyDPa4hh)vhANEUGv0Y~75 zs)G3%lLBo>OPA1YysKK1BmHo+QW5OfRXxGdF*m8lMASq!ZfXeqT<}? zYQHy@PYu;8o#Asy-NPs(ZjO9RKfrS2UN!I|L?DNM!WWptS=D{{HfA(Flveh{fxEn( zA)4zFrgKMgm#saRJT~w2y!ctS8+X2VtKu`1y!UNu^O;ZciSWh~nthWmYTXv65Ey5r zwGJLlL-QIQcR6u?R}?%?_~r1XVY9;BUZ1a`xvi83$>}8Ew1jfv*&CkJ%l8HE*X6Et zr()|LSCvbnE5@c60hYSW{omLO!J|);2PT2^Le|PSc&eR)86t$Wjy>erYy3du)-X@P zZ2zVfT@x$MlGvYDl?KOKh8Di%G0gEdiaw(U=abLuVtya#-zL*dk8du@X_c}8y)_@U z5CEGU${)sqHMe6KpF?f^ibKdwj7SENv`LMcV$Vp)7OvfW`?3eMfL?R1`|hv6gu7Pj zU(}mf^S`L5sm<4$Y31eR<8b2Io2~9~qK24Gx5}iM^N0C~Z9l&2tk@0sdZ;N5eq9!$ zarGX!#i}MbEDKt(JrTGbRviB5G@p31=U!04*B`%C-+0-=%yz$I6cw{t(;1&)C)n$| zK)Lt)VOh>me`uZkvK@oX!9b>v26OmlpVEX^MNPMQo;4fOp;pfeI+$(t9q~5jEp&OS z{%$V9T=*V1d+`n~!&RS}DPQVKP(p2AHNNZ1?-qm8Ruj7xI_0^+m~*dgyVoOL6kJXk zvf^L_*EIyhowI1B^~@a3-qu5vz09eOxusmKVlN!#A2s~=zK_pnk$Kq4r!j?~T6Dc2 z$j$!eO`gMlzf7G+MQt0QboPg~=d-ti36De{-}ak~;^}MX;k1|VZaf^%6LU<6 z$pPe+N@<>nF1T+ikW!Fs_}I3-l;KzIK5}+D5CvLvfxL#aBJDk7(CX3YPXfjT^%I1{UnCiCFn&TSVQ`N-nPqO0PCpbD@m-tIb?dRI< z(Qo87`4wavH-|x$&Mm%o&DwunAy^j%wg%8%&MBO^R$C3|nydMUw?0ucaaDvLZ8Sov zL+jX?J=@Zo=iB1)mvs)p7IvN5M(_%oSwdjEeKrbe(*L5-)799XM~SrY@LDI5ZL#U3 zB^69d&ZlG+ovU?U6L@d)>5O!WMCbCu8(S_LY#_<(sIj0_MO|{u0X_)Iyr04{Sddgd zn0!A|JYm-;vnyVoe=L`9+Y5}@ch83Fex)sPOZ$j>Y%}FUn2X=kjLr|e%$T@`ieVI8 zS1*TmcQvf7W=e!Pk|J+Y^<<4Ae!2!a<&<>3BRsN8;(Jlhis}~eZ7}f&@Zaw_8hue6JfmE1Oz=giDQoy;`r|S zig^OE^{jUt-eW422B#T3Sx_-i0^8rOzBO{r z;EjOp;zk;*S6eVULPe*)f$eb^lsVukZq1c^^~(4US=J;T`^`_Vz*bKiX!b_{m@t~> zB7N%n#U|E7Bf-=nb-r@Rb9J4)OY&~zoDPE_9{0lb_Tqzw&F|oc^R5($W^4bjf~a{` za^{6$b$$wc2FPc88yT%?+LLml_MllIZ_9-Yd$jn`t;TFeNmYf9M!&|wS6jMeva{o_ zP0GO4Zg;etM8N(`-lY|<+Tf_+7Sz`yq3@q$Uj`$TeDzrRy*6aBfZEbuEGZFCNwHN2 z2GOL`T%FXL!qr=RdM!z>^!^sgOJM^#P8xzfJ8N>NV%qkXVttOXjAguanbxt-ms4`j zAJ}6jJUS=k1!s;<(*NdQ7RD7a?u2QBiQ!~4?w0GAn#`T|A*kC&lJ+M3TJT$Ud!1Yl z2;q+j^CM>cngiRe<2K^&xb76pc0_(+2lXoOi{vI)v3IKRs<21FvAFsxP8K(EGSG{) z2G9={XqV+p?L>ECZs?@oXKQ=uv%~}BkfqyRbg(VWB7e`jlP-Ik#=AP#MrBp@YPMm_ zsnVPXKz@H&ENDn$B$mhLY#*bXUzKNGP8Y0kBB;K`At4{aqd#)7iRtFFfL;2|YhA#2 z23;M#Nj!cqoVPE$$KJ&HEv~FjAs!D^-JgtG7Z zZmI*kX6`P({UA_PB`~-;avcTUUAa9gKP4LL`39f*%(gTfK|sWO-b8iQc*60e>%YUW z$?~S-DDI)Y2T5D5+VzslU7Ca=;GJewa0K(EL0ADx{VPcGIMk}2FouTn92p5$q{Iud z!c0poFYGS7E>JE#8SjtHd2W~4DLveA+x1)oSfzIT% zsI%cMuk35!`C`b+=HKP#>joi!19+3Nm-DS>PHdgi39Oz$r1hUEiY2S*UG`I7lLylz z09$#H#ixl1-5c%a6)&sQLTT7ZMnNPNLFS-@Y~~u(n98*2>)XRgh9QZxMRXo%n@EZ- zC;hb4@pMH~V7>(viuX`R4edcocEFb{q?fbQjRsJwRm z!nTnLX}ox=K93NV%`$fFex)~4Qd7E1Sah`LlZ1pKV+M{up6g(<33mjbCr)H56EQlI3}SX+y#}mOlVvHa8Qr0vs_A9@6g=yg>;Bio~S#Vz*0jZ#vYKvY zZ#8AApN_xptyVjKeq~Jrex{C<^B?S6M=$cEb*J}E>YD=Ip}FyK2Z#V4hVZs)2%VPr zC9ZW|DqJ5$3z+CT*kVRPKJ#I?c6bOnFTN{c&bDi0ccni}4(N>5Vv+OuUGT%acfZVO zJODf7f2`&hiq^h5HR*p|p;oYW*%}vn>-Dl-G8jQOT;1Izvqn*q-}Hdrg`4Dhvk^C( zd7+hkqP2D+9ep`P!4H-))E^R_j6fs3 zKi%-RMDG~&r5{n%ve&3?8QgVKfj$;Kmgl|Q0&t`V}rwZ*3N%x5PnJ>PYMVJZfG zBI-?ymhJE*ztAl9iy9ru;cS0cT{alVVg25Nj)XOERX$)X-EKB$%X z69Jj0oX7iKhS5Xvx?kwAPJMuBfgfG>_QoX%Dt4j%nHib6)4JPgDC}8I8r=`pKh60y zO?T<9QQo~4bXS$)PUi|C#?n^+vo%>*oSFF(_AjRp;%Qqk06nMcohqkm)2~+BdO~|< zp}!VNfJ1d;p*v|V&zEYt`<6l_u&XtIsFBV{*rQs!(V*v?n@`QQ(UaI8+)(uP?k1sa z%eyjz2)2q)y$MuKG5b<)K@S@+6ZwDpZr!ClNc=yw0ROvh*#E~G3yB+-I4cZqI~Vtp z!^Q6;Dg-=y$)|1zY)&8emMtIBFz_Iwzfo7kj|}Tu?pav6y61~2_9gc7m-DUf$pZIg z3yhLURz9vs9o_c6R_jszJ+%&1IYessiy=?ftAKYeW%qc+?PUi{zlczqZU5*^smSNF zFiB^7zT+;{7Q0sPq7%jg8BtyQ9g|HsWWaM|7EH9m?ZVSSHWXcWv3JS%Y1Xr@*7{Zb zbBQE;s-#nAfM#pGp-OLoiNT*ay8JXBF~9iTSW_I%SghL>PZomf!Ej<=*J)XY`xef& zX1jkB8l5zk_}vDDuo9RUSn}m?BiV%)#=-Cwj7t}tD3l16n3KGOe=&;}jcewVwv%ID zw$ncMW#4g+7xT@;MUE6+&d~^B6@@Qo-)%-OTcPeaA`lm90{Q+mEavOG4S$j4asz4V z*C=#n7z$^vZv&xUG7o`5nyb&J`e#$>eV{5GSv}v}2_Ukb-sq)WAybCD=sdaMnt;&z zE?pYE+LhJw4Wa_UP0{ju$NxhclI!U{;cVuR4PvnBPbRJN&K=t$Z|N<&a_G-Rdfcr2 zu2x>c65f?{gqE7MRjYBi!gV)1$X&PGLB}gXC4WcoR@V9pyN@z!iC_u|5ylkl#q!zr z;d{NAY1_l8bz2kRZ8dEl@+TW(OJnRbxBxlX1FyoYYEzfKO{t6XEGDtR$Di)6-wB?l z(X&@CkTg_$P`#4E{)YPoSm#)LL5;f1qajOMY|NiX81eW!Se#a)c!(^o)1K5d4;_bE zD3O$-YS*|W+FYdhw&*mw!T;WtkR{d`+-z<2Wt3f8taIsB%(YN6N5JXaFt%^CAzj{z z{52|V#X2z@8oc9FwUjj*?NWynquBz4)ipQ0zx13d$!XT!JKZcu zpqm=4LAkT;Zvd%Ez>a-@ikBuX){8o!N5P-Ca}zgcC+u>TL65gD*=Vmu(LRI3lgHJV zj&e;??Yz2na?CsDGw0+d7YlLTUS)L+T3ZPNqR5Zs-Jd#lrv~|NE?*#zX4tpSyz8^L z&wVNU2vY>*F^0{i+E4CcQmR`7t?kkjzU&%&nm3Ib7|!->GBj? zwh&t%aXnsWTXK#D$}BdMWKy(_az2VuX5d&3c?Mm@{A~mfNMHqFNi2VByB8K8$eFk` zKy=w=PF-*+!nNK}WIlJ<8cxl_q59d8JvNNu&euH(`6jx>c7q~ zrx&%o0y5`pHNv@?B3zdUk326KZmeiay7_veQIPE^Zajw6Jx(GwTS~rIdvQr#K9Rq? z_9F9@u1HSzu``}oT%Od!Z|Y&@N@oyZ+~($H-c>;b*zL|T*|IsG^rw0LX)8j`Q-3kaZPcY+1}JvQ+lj z*41}n7$&_I{Pg1K``RmC&iCX=$$%LRGn~!C`NK-z7uiZ*&Ww+;J9Q4jAAQh&q$7MY zWp9s|kAsjP*CbvyAHOguEHR$>zf5Fs!3t$)wS>^$Ps#htO}ox{MJhrAlMULnh32NK z^TdE$-K%$$gg)(rS5u|)-&eGUcD9z6@D3|z&{}WvWd@p`3U&Kk#ZW*Xr797h>+r!p zyUJjDimCe4o;J#^06qYfn1q{zwJ7e&Y0n8%=U`X3UyIwb{Q1C@8JVm*fLJY_%@jeZ`A)AP-eiY2FjTc?~cA8gj?VktzRz@~4GT9okVgz<4a zR|!=E>e$X=JDUzpDDD0?oo|lKl2(mAa65Uo6bZZT<_6_0qUXS>#D@silexk1b10H~ zh}q-b%qNX4W1~lQxKeT-L**3f(O-hEhT{w$uK7~5v&IqKkAtplprmorV{YAaXRXN6 z^u6@S3WFTC(aPs5T$kr_WU8$FnVQfZbb-BQC8PjDF_c%KJR&wHW))?j2|I=^i|!je zyR~o!KEKNzfv*xbSE%hT)W1goJfc?}^B$yg?+OK%%30<$>p438 zIGajs;8%;5C$s9l(etBM-H+QlzGpD^5$7p(;#z)?-esJDANSzzX1BM|uX%^7<+krK zaa>vtSpdiNYVFhY-U}!JSScgK(=EZtO7e@3w9+HKYD zR;r{vE(KL=wj_(zzbvR+mi)L9DCX}`$KrV{X4Kkld)d?F-17*wfUxq(=AY7)R!_1R zDo06{yzuHt^d>*^!;QA_L@Al>xaNJm zU(OWM5L?WSs`TiS^4FdP-xmRB%Y{WUcd}fV?hje)B8&Ug3b@t z6-j_}IN_jQBNR<0+mCy`@e_bl>bon!V&@wAZP)8Br_S{Agz93;4!y~>e-Op6>%-zp zCpqe$h?50Rwcb{&2ka@NK+kVHKo_ST7xYmwoG5rf$FF&4x0_7F)DiB!=QdQx%1iWX z{{Z^)z>gu>m!AnW>}ZzH3i7Qttd#g0QnTg8oedV$9XzLI2NFJ8U39Jj?)&*-{Jx`PFyG>A4pUiA`GAeg7Zl~=p zxhLw-w(Z;7hq}}beWts|G48uO7~VUA_+-if0|G8y%?S`FOt5ssi~ZmJQrV)y1>_!Q{*KD5`QuZgg9<4SgRMY| zr7l6L&vd{4Y`*@t^`8Gnto(lyiT?M3%w2@e#v}&~>agD=e@;Vj)Ylds?ZTsO z#~Js{Hm<<{$1n*yn0lq4}}wMoR1gBEyFj)i8r(Pap#$}ck@R0+zm zuX1NDSUQMViw^hyt=m~f>%CU=cD_^OljvOCtn*>a^J^P}7VjMOBP-S=y{nlIuCa>) z^f6O<+B2;ql1;fy8CXVyEJblO@5rJjVkg7lQkR-=pki4pwk(8?C5U$zH>MKvmO6u* z1w*`2R&i-Cz?TdQBo9U9;)!$CJJCVgetYG>+-zLrl^7i-T{M_|bATBguHh*=I5a*T zzjP=$R>TC2JTa4rV&a;zAQ;TPYw^A;;@_m8gA(Hs^2-9Nc_T$DEH;_p^JvHi`6Jo7 zuR_U;*8I=+ttE3zw@SY{Umq8^au>xPJH#4`3s`&D5?((F6nyRaNavf>tB&b4M#v79 z<)3uWV+mjC(20DlY1ydmRH8Y9AR9CwX0@&I^#HK=d~b+1$!%}f;B-Dqbl4k!J6x$V zl(4q0n$tp`#wp%N>KK2@XR=B?dac$vtk&;OX=Mdw8L#5 z8ugouRnN=ddZ<;~Bo*1V+t2tyLN$3zQ)M@_o_M#JUcI)IE79?iw|7?CauV1HbJ*^! z&-Xa_E=&4a_$2D$Gdd*8Y+bE8UJ5IyQ|MxLro}$JFhnS)oVOM47Wk=b*MZG}x}OV$ zr$EFe$g_gJ`Rl5Ax}WSVE434^d|yjHE!H-UU!IdTOJd+Y{uiMtEi(!0dfK7=QtI6A zmOel@SdUi+^_dv2ilttUvigg_lP+1M3fc|{eG96l3)w@RlzE{#xENf}8WUJ?BS?Hc zm}n8MFDZK`)3j+{yhLtdT#g?u3Gr@_QRfM0w7R4i2P=n%Eb zdp^}c8wzTt6p=vMUyy{z$sHwtpx5&wzUtVUz+u{wi4B-Q3tYXQ^J!Hw81h(O?(htx z1@{E4v(W|FV{q9RSBbU*MV%QzW%EIdzV&}IQ?AVrj;u!vbEbOSXiIFLW003%bTLr} zM^*s1z?~3A;1r1Aw#Gn<7jz;v$iqa#s>EC493;2@W)?7KTrmy9v8Je6iw*F^`h{!r zsi`7ocs8N*&QDn;7n_4V!;rpUOZM@;xpKWUTvx>I&f20%$ZP_vB*Uo&Jsxj{l%#nE zN91xw=lHOQ&INP@b7aGETyD+wgqcaS0ft9-t(1Z19b?1~ukSw;q+m6_*LI2<>f4k> z{0P^-pmF`ybz;b7n6p^BNr74#11;0PILy4q&n_9eWQ2#)R@54wn_4#!pEM0UU#@zI zuZ}zHSp$MgLTw}Cw{#wn#C0{ zft@@l`r39zaq?!QoQeL(uU?fu*2hNDD%8I_9S zi9wX;OW;PRtCC~6yCd^VSJ!TB?~>TsAR8l9$mneVQrjFIe_Q?0{AG4XI;Z39l3-BR z%AZz;b$}NsDm{>ppEkET;?mA7&}I26Llk$5vf6}7gMSnLPtwE}?lQ`=Mm5c1=&0XP z<_D%JhT?TQSzgdCsw_O!VU2HJeoOahN^?V*Tcnk&If{$d#Tqs%#uB1XrgN>=+e1@y zI+tf{B%;%B0=R;y3Rn}qbTn7NZ4@s_Wv;5Xzpm70fqgieo8bky@nx4ab?1Pk{+4Xf zAFY);nHslMFpw~y;XL?ZvcI4-l$b2*(k5~xQ)`SD86NmF>t~)iCzsK$N#4-q$I_dg z7B#tN|CCy1y3S~t7-IF))=_#eyCQk?e9s>5@jKorQ-v+Mb$LZaQiJKV!_fqeg@r}y z{hVam^PY;eE|fqhDrgZ_7|Q_sePxvYf3-~(n~I*G{Tsy9JV!^l>((SJh&Uebe`5%o zcNt5hoaNp*BSR>FkztotsGGn?f1rK=e;@YR{5$y}p?Z9{Vgp>%H?D$X_h0bbX_Pcir@(MH3 z-JDDjo&6*4o!^=)wfHpTG+3oR%i?9dTIvmSl2x!q#hAq^yc6SvaDt2==jY5FydfIP z#L78iqm^slB3Wv`m~p>Ugq}5pF96*E&9jzJK}##Q#rmZs#w*S3!PhClk8ya&sV)iU z!M<)Gs;&~!vg@k%H(thLLKZeqt;Zz~h4T;yvnc^)7N@r;D=^*Su#a!O|c5(kZgi8Oz8vetYmLe2IQ1;R(7;T{uZ5LcyIC?gN51J{u zH4lsBlI)wa@!EWosIhQxzrE%WBb@x9tvPWsD>j!%AA6L1><)7#`_Zl=y|8e*XiG(h zT-wA+F1L-4M{iu{iz&xE`Lv3KRpATMz9lHE)<9Xy7hQf{uy`gv9dK{4_lrS0cjx(h zTW|8m`qIeWxs&e#ODB1_x;Sz%{h^TXndSIWrdf?_jlc`597F~22}}BhhvX@rF*OUi zrh}Y<+0xTjMcmWodLmpkjScf-4^egv+9JDow$coHSX+YPA4BO)_6tITO}NtLX}H?O zg>?@SV8pB~jp@=$Wh;}oleGMQXBKV~VHnh_hK_I3=SCKIbgl7)P9GO1=d1u*qGo1b5)E(Q_Tlr93GOD@{8s zuwI_4G}AwZuU@Xy!Vdn>6Bsp<0$-M9@<3pg73e{tT#T_Pu-txL<#$9Fm%b;y@L}O* zi<*P2$FgjNKl-$+arsMHj5Yu8R3=mALAPJ5^*Fz~6-llCj=AWt!g(|}^5~xN;Vf{~ zs-*YSn!02@Z2siWo1ga|(a^54TjIeYI<2BX2DVXNF01Iq3>-1c0C=tR-WQfMEw$zLOh zqTTahikGE2IS!zkCk0vj=>K5<*5sj7mG(+6u=0|h1^|yXZjUPz$7rABs6IXe0Qb4a zoaGd-X*y-YNaS^+jH=s3N^5=A(5ZTY&Gp=EGMwqa#Z;gLDgep*sp~||nN ze$CPZDiyEgxzRZ~eq*HznlWc@x6#j!?%g}jX{%^lsi;}No~&YkEiOA88^3+TQREp? z(COwjQF09r>3vlQ4uY#rI~tiQoR8qkj>bLlpe7;#{)RZ)PX&!OUG^JxWg66qBI_DQ zvsJxy(18a;taZZz2%J7zT^u2Pq24rOiP?ClH5V%^W|`wXU9Gn_d5v^KYz+HbU1Lo% z(WFN?Us!^#3^__)3!PlktcY9OsJ;@>Won1RzJ=8^9Z)SYH#Pj)iVHX>{NM+L7qi52q?=E0YoHG}{n;b6ka z1rQnA)gt<@cGvv~2wr$XT>*o6Z|@A*59V4~K^05hCT^Mx0)Xj>sX!vfE3Z?qehYdU zAKRRQo+e6UlN;B!lXEdt9Fervh5^gLIzefF9DeG+PrK5U^FqG0F$XFCHcM8?P0nS~ zN6Cb?%kb6J6vo7t|4?E}lFIzGk4x#m%ZL)qVqN`Fna0t-wQ;pBAYFLKopD*|ADcRv z>Ku~I0^Sn-i~6*O*shj_{A)%PYQLepCVn2Gn&q!|8%tSXM>c@uI#24{h^xhviP^3X z&Q~E&hRK~tzI>8tWt}f0AlZxiC|yBnHp;S}!?(bLSEU?`G(KCXi*1k+#m}RVG^)gZ zAN`HR6#Wg}den$){k|jsPI_3m&&ErqgRLm;k<{0lfrR`Z1wFkE#tnQe{erh{^GU5^ zNWmAm2uQ*7UfO?mUcDGBzDUTJVnIBfms1RxDT;dniF1AdIn!ib%BCQv8qx#8eJWA{Q``GG9jTg8BL!YkF)hDRnOs) ziSAcEX#0?t#srV`+)6$!L4T**BXqnLX}j6Pb>>R-t1Mn!?T*?JFD&MCUwwChCi7!}RF_QD^vGgz)lCD7(mHwSlnknN zhFq&e1m*ncR%r;<`FYVIsls$93!gO)Y%z<;DzRyrfMLgjQzsfci1PS*&w!FlD(_1N z)rxh4A-ktcsjHmANj7vlYgYY3(w!&4kcK#Ny@CS>X*T{TCq8h-GdC670*c}a?OH?! z<=3Sf;V!}?U|52=wzDd(Pbbv9ltQl5cRf`pUgAzt=vL9znwX#|!TxoW@Mhzqs`+R) z|Hs<^A9xbWl;~WWC8(t@9?K95S1Jwz$P5-A^WsuBKNKqYgbOraW=iWof;X8-Qr4eI zozUN}&nYPXFtLO@l^+~Q58^V^Q?;Q!6PZ5T-^c!$S%oXKMB`G2*vyc-TovXCK{EZx zomSokP#E-nTT{k(Vx;h+%pPD;<_?=P_?B=dex^9Fp@3x$v&kpX4VYga?+l^zR6F`jI*%)CSUSiu9C`iSuadyz`@P)tD_R{-s(Eaq8b`W32=Y#q zfz-0G>8ihc)&#~j9Zp|O*yo3#SOk|T|6zQl5nAUslYlvc+Uf92Qg#CcQh!l~=y<^i z|3Wq?@kpfdc(t7Hvk=uTS^)-E~9^}*cJNwoPBE?odp7Hy@QZ`|OkV=}pT8ml>LFz$SOX=RN^#B}Y1 zOOi8VGsEr?31Zs3Upyhw>l#wT#0h#ek0u6pb_qCN`}0@#X{Z4rUtcj^^a`fQB;K0( zhnQz@1uIU5ERG;qf>l8!N6MbCE2p%0WKrsdK@@a?K!*Do_kG{`*@)C~Nr06r981)E zyYCmvfA7^&1&WFFr=!uSDOuEDl322;RG6C~0Xi{Z28=Nw}Y&n#L8hnNNgntC$~XLfvsX@QMWt{&bJwQ5W}P}khBYDvH9Te+iE zhAFW9om`~U0ztsljPx|&VY#bM4^N#4IoY#u6EB*T8Ba4$`lfa(Z!vq?f)k7cq|OTwKm~r|Tn?7Iga#2!$VUgLK*E_oOxMWELEn{bGgC zui^r%l~R1hg4@u=jb8QRv>wZ`B`7cp&P;J^<1+T%?QHc8)+`dD#U^0 z6}&5}aY+(`3!>q9r;0@5@sc@yA4>?*SHl7-7Ep>&2Ql;O%kv1WrlLAZ~QoVA^;L82Q|2*7eTHRW z)kH>}$o%xEWKrf{$y9?mfAzc8yc?g&OXJcK7)?OKdJ%rQS zzK@Wy{4CMk^0eAIpvrARsLhD$VNrZOulk6$oLGfB)<#^=&lcHK<8tF;Jd_(d9de&L zkc=6+KE4U)&VBC6<9dMn(N2*BZXgA<+j;ceYDD!xULkx~Ay*NWmVIW@9M?xfj8^z^ z>I>!@X)=t%F*I8~*gr7}dy1Gx=U>Ga?lN9i5p+o6zrw#o7H9`AnCF;_jI$G-bf)pi z)iOR&+CKo`L(UIvha*fJc#YKi1a7f_wwFp?`|2^!EDJf0sq)wCxL5@?iKqG!Q5HSR z&Gf>bK=rBZPMR*pzOCi({4oY>{LMvY9)3a~-#L5u zPmDhZK}YO`Hj^1UXJ0||6z8JZ@+YTD!meQ_JhQ}am+k3l{-zCKjqU`i3=fJ*u^}+O z`tM^2i`Qu?F)?iNq?~!#^)_y=9i$PFn~xrwon2l~HkS>6%CafrJ1D4IT*Y?hqh2 zgy0a|9fDf{2?UqIU4jQfaEGFBcc*Z7DT>17);TkG?z+?6)7|&S{N1a*wfDDbeeWZ$ zY~mMLw}pBW9D2Uj6{QdzV!1@Ugth@&ED)0Wt#GMOU9s!WFJf+vtKp@mANjeG5!EV5 zh$AESbhS2Wn9xv46&}>{{ z=VQo8-YDXHpB)s`#to+GeHG9(=N3q8DNb|Jn_kk4gxRZ>If-N@)ZSegKO#U{_sl5L z)fJ;l36%s-9_PE3lDWo*V#r(io-tXS3KCm{OO)KDA6=+MAeN!drI{4YIy}y1T5|AR z2E|!OT3ub_+cQ#kx3+9fetekY1T=)`&3izmw zdhJG(jo-CT(}tah%FSUb3Z=`QznHJ8y|*R(g>NVfL0ia=OfnicYy##VAesI9DuHMD z62jC3e|^Kx%>Q|f(7#m|^iRE)|5r8AKiuiVY^+dqr4Gvhm__y(*O$1I(xM8w)4QfL z=rlbqw)V4lqVF$*KwGO0Q2#4dLY8EW^8+x?jJ+Ob#sz6WNRO$>bmA(s^DeZ6SFXf# zO0V^HmW~PO=Vo`CicZT0@5v-1S@Ovq1b#tw4QUoyQ{dk0 zy9-zcm(D8_%t42q+T!e5I_uPBYOK}YZlfbdzZEsm8cnH7iJNE7E@cabN&N^b zISeyOcMlcco??gK&cWaH#rRfeXWhqqX6xf=6c-hi91|lrdbs5%ZhM|S5i4VFdx|jh zUr}+Um6(kn;U`<~F21fl2))k+v+A(udPz2&s~s+*zytJH3U;2S>yWA(*Exfrb>6p) zlw=6$wnG*FUhi8Lu%W>uY_=lwkP+)5{OTvCRyuS|hQn3lWSqES8^&ul!Ah`sD}O51%o- z>zYH?O_fmin8q*jQ6b3hM+{3OTX{nm8qH{D6qO8w!#TR+H#@l?<6}rQ2hDRQ&cS|N zLJazHs#=QIAQ5Hww-|7ac*TOzDQdJrH7p>YF&(SMUqWq?-RlfanaU*|x#(j@t?fUW zYo@Bd(5Dn?oHk9qlW^5=4&M%vrJ_+EZ1*&BxFPTx)Awpj62KgN{C7F0*8np{-_eU+mxmcQ9!%(sjDlxYkt=vzhhFE+3V(W+ z-pX!5*GS6}J}#xrLv6Ms7fW!nZ!qm^F83HUZa<%C}IjarjORvn*Z_j`~KARjEgXP8OvLTc57qyJM8QtsS1;e zmzJ`?#H!sh>~?1 z)@@Ek&twW#Y(Q`Qr|!6B241Z(IIBSM!slkI{4aKt7xkU|g2sOVJ6_C57-qlhLtrz9 z8T&ZUjWj0w`h!YRE3c5wirW;+3nDI}22j{7fgh^v=+FFaLU$0%nAi7kI@t>eC6Q5U~Q-~cg1DdRJiRC>UN&*H!N&E_1e&g|*WjX>zUl{zTur{Ksm$MM{SX^`(D?^M0pml@TH7kwPjKQ@hj<6GZH z8Ge90a*-CgSnWfls!g*)*_OUmw)p=_#$lzkDnzm>f!tUrC8 zfJwY~gTW27QMwkXgjH~NHt`OAIDCcv)D<#AI`7O9!HgblGX0(gXgg)2ZeZ{`Q`9#Z zF?ivVx_Vb(is4`nk*r%z8|m1K8PBbQo}`r0@rh=)?dwOrrb{()It{(7$Tn=ZH8x5Oc$=+rl>~BY0-8>yH`F+ut z%i4jm`yk7ry~80ydDopm0zs>d?bXpTJ_-vria)l`Ov6%@rlC_e;dh2xhPaniS^b9d zRFTs<+bUUQIv3eWrBt5}9r=imV>@$@hk>fmrqF^qh(1eFz5C7*EAh3EYGU%y`OX04 zrDJ5u0IWnU={DPSOjKL*;jCrXEuV@2w@OZeiP|(SP~$^4_4AUjFlkIRT--?f0%~eP zMmgyZENZb4VLFNDrx0w>8ipCEh_Iz`jX10*^QX7s*{jDtAVi++CwXn< zn0lu4WEfdUR;=IB&#N-i!=kFb#4_vo(GgT*@$XG9jVH!^6YrN!M+4<5C9^sCKz+0%SMv6U4d{GN#W8vECfF6S=c zXkBaHVvF#|rK_L0l2Pa2`OH!iN6v7~@e$Thp>WTYFdBgkj*|tirHD`o*0k|#vj0+y zEr8gI&xi5%ue{%H$?`A=eo{6F!)yMCvnvecKQvqmdb7HpRf*B?y~JGT(Y+sEWb()D`LMY-UCA-#qvMn9SFstL!XN#lN$kxtOdb!)qQ5h| z7v!z`2-7wrjqYf41!S0MGHp-qRT*yW%)s~-SC9Hm^zmL#yqhw8i#fiyimqg7s%6@+ z(v{^FC)<&yuTvXQAyyet*d&j-!k3hZF+R1dpu+G$^LG~q)CF|x&QjPpE=01F-u0d0k=x3h=kc>4~iRC9{fFIikuM?N&KyY;FR*&lj9%wJMHB zYO_YoZ=;%0ut6|%?-nQyXyK)f>Lb!N^A5*jH-&%0;j_4;Y3~?xFJpLCBFiwX+mUF! zz48Nz%|TFYC4;^N-$Zt1=wrwkq$De^vtNQ#(;XS*8`1=Qz?kB-x)>*J6J0eO*Bh@d zK^fvLzMQa>0IaJJ^xP-UR&d{ui|rh&timfkq!WIBlrnZ!C>Rbr3I*0rWN7v;Jx{41 zZ+T6z(;Y02&!XEA*h+Rzm{@JCC1jJ z!j{=0ntb?RlAI{ae<_aKXIH4ye$A6!Y%nE7P+g21x2e~$0jm20wuv_(wIj60y2OPn zaH(=XcKXQvap{SNT^yWEFcm+F%{w(A*q+$=93L=Ph!z^cHo?)qHnZA6KpJG=ORA~T zIIp$d(Jos@bF-=Z(KbIrekZ?`-us2s8;Ii{P4X72eNqJCJ$3uI*%VhqfXiep|A(66 zPZ!E3&h2eRt=*%K7Jx3!?zYv(5Wn>)G44Ayt;L#s-p~6lww?R(R93ae*fU29b}S*{ z^YWK#l62V%ecv`w3zm}=k#Xz+K?!&fY22rT{;MvjsLI9i8Tv{l{Xu^jtw{*FkoyA1Nd>^Kwkxu-8QY2fM3BK7tpO?{XqlfQ)6ll zLFR-YWn_fP|BhJQVm057*e(!|eKR*V$Il}m(BBhDw10X^Pfs5j6~+0`nGn|B-|PwN zoh5WMfD&l=4c_j-XP1|iKYu1kOG~>g2Zb#OKr$8uL?e`oNTZq5aN~ach|u`(F8Kd~ zjK9J@!}cOq110`HK@ny9smG^d)XL4$ ziu^%BhmPZ)z5GYl(ey6Z9@?Vr{O2E}9jS%0+cIPgk5vSA%CJ7EJ3fkiabq46yFmrq zjdgB$15OrI&Zl!$K3Yx+fbJgd50LOjPB!}|Txs-e(1zOlu_M32WIYiDy|~RjQU$;< z6RiQJK|&>^eZOe=*j{2U!*g|l8)k!GxgR}GRnl8K_|5a!H5BGuo`d~Zlo?uNkA+s~ z;;Z!1h3VfDGI`B#ykqQ3q@*Va&BRa|r3mB2%FZ9LULT&e z8AjWCb=HzKqMuqH+d`hO@AV`a(>C{hHt|j;S#dDRIToeOcF97UG*AMPp(gqkw@D1` zg~2nru|DTjzjxxh?)DG#hN7C?x0H@+u*h%VN2jBE1FR=2UsO_s({Oitr=nvwI&SUx zfvmWXCs8_6H`w*ijvo2p7Bf!W_Vu0oOj;mq;Sl3sU|z0c^NM5crX10b3rx+!%B)$& z)>Ehowau3Qap(fpLM}iSm!r@s!I6T@bVh7RX;gbRGWZ=9=*7Hg zL=U9&EMKsu_;s=2PM=ML_h#x_m-CG;Zk(cEXE@D!f3_)EYb?IwZ_u2cdL96kFLLCL z6nH}6UhiCI5yPhjGp&V6)aJX#>)Ookt%6H&*yBC>*~qD>%7$8viV}Pa?F%r<;)~H< zkD3x|R+Yx1uRz-?Ij9+0VpBGW$y!OHn+^fN_Z-x82nI?=uLJQq?DHZL#F`iBjzqzM zCK~&?6t4@v{cKJCgea}h(@bDIYZ}dV95X2F`C?AN()!xT*pn3n{A2?ki9Aze1si6? z$qkv1**c~muq}dnQL1ASeTto)Zh69y^{q**884GrCj+0NI%dh0T@J6$%9nr(Iad(? z^ScXUZBe9k@+Dt2E6Jxn!+V{j70Lbf^s@u!g^}`62-3G^Ci`uR9WNPXhxdBFkUfMw zew2v5ctity^;2f7-@EqEhwof}^C7y#-NoBaXvLWASEQg>D#syc@|kLa>8U_Bl{2oP z>Z@IX`3b8&Z9`W^$4H}7zL!(7dx)4woGNLkdX7@uCP28J!mwa@}N9Ki!Y`UmzFx;WxfxXEwC3vz<=4ZiW%?Sg3~dSCrqNn|kvR0C+8yFm!Q$y}6H1G-}$ph9S08l`%Uj z#nU?1*@RJ(+QLC!*x-Q$UcmS623qBpvemy9%48)m4G*P3#=s{srXegx8m&H`zj2Rq zpCfMhmEE2MpkP*0HCrnow$V2FAU0#Qc9Fq;c75w!7O*8)|9UC-@HF5X^ZA>Jg@D0T zvE2<<(F*9^E&To=x3Dq$4mXL9YI-=X-mv=I3Tx3kkZm*zxw3hDX)VHwQ z{kxkyN%^CINoDKC?w55He-r_f*y*YH!9N<}F@cSr-~GD??z`Y>`aPG9b!~pbHZ>JID-5;`egN1sU?)A+_MqivdD_XaQK;{L&21ZJe4{Tybu?5*>_2 z{4VDY)hhykU{R-C@cm7Yd7tMIuk|spu>uqYvsui1_q0a0){Uv}vQDN&iM2VaWJ3FG z3@;y4e&W{{#I=f+TL`8>qSHO>p<{m zKs9as1;t50qzESAc4wX@0RByrWn`rF;u8o>xzA^SNxwa>Yxc9qp%K>{Roho=xP)1gnWJ*{l zmM2~ERQP4as!x-W3Wp=WcCh0qzOT&knC$>HuAXENI)$^`5O(dPru5GE7YpiJtLCy8Q_6q-{_`c&OFOP_VPf%@u2 zy%}FHD#=&Lh$DRhUsV&YFzOo9qVP+_q=Id`u65hB5;=V)oH$OLrBU!n$hJ{yNi5L&8R-GX-U?8jrzPIq^ijgQCKxpHR|;M4^ye1X)&Y7 zMfhySZrJ;8(}l!MIUGnDM#v+H$s-N!_RK)!+I|N5b^Cn?9w}>n)i%5|(udF`$!?<% zrqaR8HQ2X`be)6*NGX%4a!fa`MoVPf_WSWNw&=Y^kE5M$zczk(tktyqG@4WBseHa{ ziW&b@f**&!XMEa%HhfE`7|)*;r6nZky;Q~EnP^6inA0uMKVoq?zh!;EJUM^6L!y9( zkc)}IDbyp%S>1JV30ZlPKUzcHgCe_&sE3Pmq=~o7qJNt~O1-Gdmrr~G-Fvisi1f!>jJ8gcyL)66Ss~FWXZI4b08u!~D=M6< zzkG>}Bx0XjT~+z`@%5WGW_Q8#2%#_u%HXfB|8f{nQE8iam~Y0HbmBNUIoUrvJneam zAh;7NOTGKd^XAQ3|9Y6^|M{Q7!j_hnmXTDE;2)V-|0Ez5-nU#zjj<@eW2ve6dH$#J zGOHLv^PLD2{Tkkw( zpTeTqx6ZUrr(^HykCsn&wb9pNp1iPwvwRmEYRBC@zIN0qIcD(zw|^z8b5Q(9cv!sp zvbXi-Rw`CZEcDGK!IIw{&*ZmHDldIKNo(D*EQ~p#hxLj%oo<+tGw6$li8Tsng7>iK z_6jH0+g0~zy+FHMc~mP3=&xmIS4dq0smIOEZe3S*n2r31$Mmu;`gpMbdlr5@oA&#l zlu&*LOIT5;H-{6-co6i~6>!IFv~4n`=XMF?`NEIB*kTNE+p)-cXI<;^){0{2q&1DygwkgW%-A4~fHIvK`iz1mToXlk*<7 z*PuJLP^pp!^@28PEWYZIuUnWrd+t-I=aJDN(WT8un$S?l=cYJU3WznRik<<5^7;HE z2gWWo-+0?Py?r>}#hK;uO901a#ytS$sgsRSncCxt`V7O~#yB2^Zg0KXu2LVx;pofl zP|Tgy)cKK+sM7Bw(%dSPx&KBN;NpTFItCb)-$_v6WY&`YI85^-iCuAYTy*s+_GN-Y z&SvDoLaNmm{b54FkpKd=R66hPrym%5zeG>B!{Wtn2emZuu5{j%G*XK@-b0IJn0otF z3R9>MNK(KwavEc&0yuV;z3naEzLXl*3(toTW#@%rhN51rHieGS2!$3j_0XlcVbcuT zb>BsTf&Hh>eu0Ke~$4-}Kp5+*!)}8ViVo#Xj`r!2a6o$>1x~w1kzhawSPJS!X2}9v{zegRL z*1;;j8+`k*5}cn=8y-BIZALK^5n_F94>RYASE*+}cs;*Nv$*eDDjiDM%?LJfFaHFO|2svd|MD`2KE4x{c^c z-=E&lE2pjQa%_RwlwJq!$boP&vBn@GBS4(C;iAM)ur5oBCvDA?Eb(nOo0!0?EX0AE zarDiKV^69^!8R{4O5Nx@vXOh4!a0BHx{0SMN;`6h@}FW;_Uq6Wx!-m5o~nIjOIvnKbui3*EE8Fhlq+qy& zfIqdMU`=Ykor_iq0XOZmvYw*Vmib4&H7mPK&RZCvx_Id?=>l03SszwRGR>Oj!rN=0Bf(R98wh>Lofg=&WTHyupkb z*_HE~5eTu!)a6~UKm6iT3VlPtM3$}d>sNL&6AX9JjF>nZGjGI$2(Gz4&e5)Y+>Snf zypF2PEE3wktLT7Ggubs{bs=RY8sss=z$3xv!sWN6al6=G6WlfVejF>%g%x*x>qD@5 z%kDINC_HdQfhnE{fw=gF9c3TbnD4|WO0OBqm4Rm$jo`JKhT8MP9EZ?6Cl}!6WN{sT zgR{`D*q)agljU=3d(f9kjShTxV|=jn(6|u20Wc`6q(f#!K=9j!Agpowij_=kynDZP z0H0_F6+|oxbT#R87|!-e-kBd*N)Hf5Q~-GnnN==mw4c!rT>~YP)bR{Z$<{Bfd56O` zQ0(V_`cPLZAy@Ea;PXK=))8`ZJWO{N1}wa#K+jX?L6u-y!j1?&gpZ zhdz0L(BYh`ns1NYICV;be90lD7bLBxe)lm1yl|};!|D#LA!_69Wb@bgi)fl}k0~sf z3oXj7Qt4m+3&(7#1Nczo#L)L9*KCRw-g!UjmWs zD;$#p4-XGXNyx~yHhLm2uC5Xi5~O5$iT&31Wr!}+bk{q^8@_%hFZl#pyoZ&mq+SKz z>1MZ%xdk1ZoY1kdMh_1USKUVJDbtbsFd22nRE@JMBFe7|`m{nGo}t8#``m`h>bMd} z8s4unXzF}3rvm^Ln|z}3pA%gD>i z5B91_|MR@w->{WG84BZ5`NKGOq?%|!SU;BX|CCPsSMu=hZt@S+?ti5t^S)D&^E)oV z(?i4hm6=HjFjaBmCP?`m^)KjY9^WJUXelYFSFc`i@bGkxkB`H%e<6-b8=rz?V`Ish zjvGKFDw^fGJBo`L{32KqQyn)>ATE#_u@)8e3c)$$6cxFdC*?vfF5KE*%^=o-e}>7$ z*Vfir8_M_t#UOp2pJ`0dq|zIOY-N{yClj)a zbzbY6T|)N%J$=`AUC;VE=RWs&&VBB4eou@(LW_}}n;wE7MjdSpLkOZM2hV)8)Zpq; zzLO1ZbY9x#J`lvzPChBp#F%&hNQ2YSy+<=o#c~c3Ea#Oz`~%%H!>Rh>oISD7hmwA6 z05RYIq=E85VqLs&E}j^Ojqa)d!0E}jx~JD;tP9#12Ng5--v%ht9~6tSC#&+~Ts%;a z>^?IckkFAOMxIVMKYJ_+vi3S7tHb^nckw~G+XGcBRNeeJ3Ba^u*wh}2alxRWW}c-e zfYJQlcwa0M1?`?aTm64Ebx#iu6b1+F^`|!hjGC&~{)a_XO z(xq#N`R`Ndg-++0IjP^4zjmv_Y>#+ztc+SKl zUux(M(6lcHdTuB$Pw_411a4+tq>oTz(LdH%`ffwQCpY?Vmj1ZLwo% zvD=D)X_AHI-<>pDI^5V zp5Lm!Q~mmI%)ZOmDVVZtNH;YbHZMAvj0qi^@94;4hwfVYhyxeq20M>GKDOHMSSCpB zSG6T$?nZrNGh(}dbGaR~aI9~l8Jxn!r6uE-7<-Sj_N4wDFNG}>Yzx(%SAbf1qtjqY zSo%D;XRf%G?~_XzA@0tXO-sXHDh4j){@sRgp@C9giFbL;-h@cGXICKpRWqT0600_? z0cHv%?s%{&3+xMau4=8{!^2xEZf#8wa@B#EhAWaK!QaGqKIiScJZ-;ZZ|SBk)+_pe zl$E3UqLP)j3IRrWp#^&JwvJ1iQ1kb2Dr6O_FNbSQ@OC#Ln6mlbd2_RxFWo37LYjy0 z1okn83w%$`b4oB@|7=#2)FiE?DGyj&2pYS!CPJ;gQ@w;bX`A>)e-_Kfr8OkAlN93M zsutEU6PD6qAo1*d0a%Sn=9m|;6<44dDS7Te+sxojccex()O-+I&AN3y891^&KC8?> z95>?IIOl;+XqRI zAZ&^qSpcvi5!ITCo*RS8SfkFwywp+nZH$>(kR4M zUlebaOX*vfx30JTGENtv#^(hUpB#$?ry8f73tjVp{E4o};=0CIf~h;g{_w{T?pxDq z({)ol#Yqdqub?AYXFGyqc zLIz^lfYJoZ#x1?d^UouCp4Kf{JPer&3!Gr|C}aok6@`ZJj0y9dq#N+Pt-xSg{yc=q zX^OkR)G)?uO}txDx-aLPr4Vv+&m9LBiZjCAtvkRMPt6S%{61PUC#1O@&kzqqzsrv0 zmDHLn9rs5FlR);YZmYe@f0349>(~iC`MYfp3|7rS0qxjIcm>`Axs_y=k9yG!HuC2W z6VVS7dJaZ97Z^e()5|X%+zX7^6!X5%L|o{~zM&P9P?z5S)FPN`w4xTObApud7MtG6ffQnFI6TS-H%AUik(1sVW zeP!3bmI;+6xK-MHru73%Pj)x;^0$1~$J0fArlL}1_kyU6rT25#& zFefs2$NP@o_O87(mFRx_;MSe_!>=&puK6|l0yY{<;@s)P*;dy|^|i}p4Q1Uf-hY$p z%(2*M^cVUQSU~2_hg$&+N)96hKfDMb%ph;ajv^l~>@E?pP!cs`U$I8}4U2UJ$lRpU zkp;!NDb@a;b+r_pFXqD2I7i;T_PMnS?C6ZVUdr%KT%}!ci?xfo8QiITG4VofNDU2w z{-i*!B9{uP5Qo_Am7I8xFco$g6z8pC%L4{lt$)aKg)ghb`$^K_7Tb$Hn z&5wn5`RHPm>zYT!g!0Co2^IcdSB-LG6uCQ<&y;OEXL_urI4|F8<{%NP&GNb7M=Yz3 zb<{x=nJ_&FGW;ddpdza%&Gj9ZDAzddvlL{yS<-v%QhLjeVO+O-7OOE0tBIUI)=4{D z+l5c|sCE%u2ja1&8Jmz^+}jh7e&r;kbLN&8X@ZjYsMdu z@3~Hg2dbpYe`VOT4BfJU?pjW7Qa}+L!9^?0>5bdhPTrZyiGKon5iN1Z@k>cM#*YAU zJ-x}++V*^tBvdL4pZ_^kv1TpBZOp{Y`sJq7x#;M;5tdKdOQgnF0Ym9Ue3@4uD@ZRS z;~!2A-kcn6 z7LJ=dLyVbO$&Lo8A_S_j1%?d4iBMLBASJPD(kf$CeVZe)W1xgQn;sh2Pi-d@zR?|- zbI^qmipedgHi0&vD4M5p&GD+wZE}BOwf(C~v?;oFiwe|QN4JB1xpL{ml|#{-QvdAD zv$863N9kkRUogYFswO)V%-UDfBXN|C7p|>1wZ-F zrn#i<*XHanyJ5I`v7Sqp+3li)QZtl{wY#;)6zh#1MSNe^YiYX+UD;QsSw@0gPa@Z2 zMAp0Z`f)CGnSB$**2ES*&~O1aXl%VU5sGr^l}=k1-cwbtqnLQ~v3M42wuN;H=v|s% zg_Mck8zBc~+Z=T6$V0dY;DKQ+{K3EfrJ1Vrp*gah$+AUit$`q4+Q?AI*Z6O0Ryp+IllxW$YoLU~2PD?HPhzH{Fv^!` zn6HFuz9pXKa{4@6UdzY}CLZjL1>a+WKP`LVoQ-19aA4VQ_!-xq)bTW?0G3uD;}@o} z(vNtjBHlF{a*xJM1<~WZ+%k79EfQhjM~G+@YC7|L}$x0n(dRZ+4(NM z5RIFhQ&JRkK(40ocF+#6SO3$4<&@(c$BpjiYH##uq0zCiZBh%RlK&R8y1F`Eqf0ig z$Yd$5m%T2 O0MfaK&?r%}3;Q2Va$JG{ literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-defender-atp/images/tvm_request_remediation.png b/windows/security/threat-protection/windows-defender-atp/images/tvm_request_remediation.png new file mode 100644 index 0000000000000000000000000000000000000000..2711f9560eb1ccfeb0a192c6b5f88420d822a358 GIT binary patch literal 20827 zcmeIad03O_wj~}*k#Yd4oG2MfMNv>tK~ToR0Yn*85QH$O$V`YblMtdJQfdJu3JAy~ zG6^9vB|-*JR7B=6kVp`bnGnVV2!YhI#`c{9Kh z?TgsDVb>nmzEQOO6#8bUpQpP=0HRQ;K?k-<{`)YJ6aRbv zKtC5(#QbW+_<#S|DKrY@>KlOIH6&EQw)LW)S$hWfxFYf<+msQAUlFFKjjThSPxRjM zk?pxNyy&bR*K^~E(}`%i2Yz=w+S;%FfIWDOwOMQGt=a1=9g>eo zc3r*o!~0Wz3<+<^96!FX^O*0(82Ql7aDfw=iC zof9aAKrH;aD`XAg=Ey0w^CX)_v7JXCzE%V-OkERb=sO`0a=S&}{{B@AQN8P~Gy)Oz z9~PiwU|=X6MY?l2$|FmoTAS*>0*`_rhPla5V!T`>z!9FajCNwUtQpTW5O5f zoek!-(o{ms2kFa$>V|=55QuJX{6Z9dziD8l-|(_H$PwU?4%gC z>^33Xc2<{5&2nD;CQaw2ZJr^n&R2z3GS?tpo0xUsW}c*njkVy$xLzyVRbiFkWzn5w zU|uK?-(S!`d|e!DeAD}h;+T}07qnRpaeLSZ)iN2x*6++s-r$U=o_)VuaRJ5cTBgh5 zE#}^zYIMTSYU69f^AQM-tG4%(X+Jt55cV~}$JQdg{`7Ve;`XU^>M-MerXmo>Pfz{u zpSw{JF&bds;}b+Im_GfYH4i?16sqjNB+GMK3?UOY!H<3=9m|+uP6RD<_$~s;cVaHK@ctynp}x#6VV7 zmW-_IrZ2|(x3#sk#i7pz`T7=3o-o!)wXwBLw6U>)Ykqnz`{`Mwr}cwR>uyY7+S}V7 zez+b-!o*1_8d&FBzhVWW9oLJCA3Jekl$AzyBIr$C-oFig>VxehJyK%r;dQx$hW7ZX zD#WVBpX+1S}ooklcPDj1Gbifq(_VDrJ9#QoXCmC;oILY^;qBw^OH^_3eYHMpR z=UY$sCnP2YF3ougLh`LIY0AuZW?QQ)PUaeCU4*OcuHCzM|DEV6^eL5wR-= z4(_mm8L)p_i9kj&D!$PzaB;@f8Fwo4g5!xqb!XE2E{`=6+9)Y@Ma7A}r~)cq+`r=a z`t|F>&@nD9EQ-_$hu`SXr) zZ^pzxL_`GrXzj<3+a8>j>7r=}`@gdi z_{Yg!Fll^mxWHT+A0JoQwlT;KPEr0?>Etif^j2P`8+Xb_Q|5B!h1clY1qB86PEL{& zZ*5ez!u{DHw!x`^lfnzI2tSzHOsv96X(41_ni)ot@QAj;c#bOB2m7i#xrJ zO|{psAFVINWtEm{+)V1R)p*L0_nNo2vumB2y4gF!Jn9`96%_o+T1CvaluTwwQ_IQH zf5362_R`+*Nc14srFwqff0s9wXzT3Uz7T>! zGgz!6)SB$aXHN%De(52F4_TsMUg7x4!JpSHw?F;)C6Q=3=vUD{ka=PM)N}^#F$wcn z^sIJG8;@(X<)P{aXGr>-)Zaf`mx#(apWRmEy9vRpTZ}4z5fRN5Q=}1@N_F77ZXT*R z2~#34cG&Mk-|Jh)Tny%&G(LxSv_>reaif^`Z}n>TOnkmwuo ztH|9ruvOW@!`HVd*w6}7MQadmrpCIL_T0a-ePiU9LIJ_w-QB(Yu!4eu&AunosL~7j z;kRlxe_ZnX1LnFytRNw~eY8?AZq$I1gv8La`h5S6N1ox~P7oBIJb9wB|J z)22=I^e9n`8M6AwKKwj2^|Gc+Isc(m{!{gX*NdMCUlRJ|H##{w5(K4+EyvW3L6)cdwgt012DvbJGfUD_IH?{-=Oz^v>pwiQ&WZ@P)0SH zkEgOx#LFu23Bx|U=)gYpjgfa>w2oLcp4g0Nru>iak6V372z6o|arZ808!b!y&54<8 zOS*Ew1Uxjdu=)Q$nCd~LlKf3 zyD1De@kVJ+rPFUZslH5&-)jfx{odT4iYwaYBm=Sa@MK`|b$$8r9Fi7I0hH;a+P;zswwAN56(Qgfk7n!El50#i0~>pch_y5JL`}`CeB&aFHTp3cUx9clg%J)iZTM9pBu1 z%kZ@&IuUdg$^|&ML}z`AG`-P++Rg&owXE&}5}{!QLw3YEb*8D7*X}>tvWSNtQ4Dj6 z*qmoB90DGNWTc_lm0G&BBwYhmYLrQ=!hEW<8@g&hGJo+|Px_45jHa&wOH&Q;-#kUAt7v8Q+I zR+2r(#&AtR{6v93z-f*=X#~5HV~5<)x{!;VDTNM1Tlm@TXrd5w8Q7<57!@_-hBw?(flkuov6DC z!DwcYD%9V$agpQ?$v^VsE@vc<&u5XE+)5#B(1TL`PK#lze0|X%6VjsC!VOV1GIDYq zsk*^RsQDRV6BC?k$oN1n+P`T%fwGlFQ@a}z$O#=qNn0_Pvn{HL^`3xE$i2nIN8-=z zHEqi>iQTp_GK}?oc1v?Eskv5HM~B(ATru=M#yCqxULG}iuRwk!-==^U>gebgI8G!I z$yde+(yhzORNNhBN)Tc6L-pf5CiZGb%xa^uOtcpUQ<*Il7|J-1ST9=MGc$g@7*U67(41f1K;heIb z;8Ivr#Oxoohi3)3jJKnyt?kky>|OVZtO&m8I+`aYyWR7Uy1Kx?j>^J2OF#M`f|cqy z6bhC>G*DJn2F#g%<7oc$^mM}7ZjbpFL!nR1_LbA=le#N{!Db4e(s9g5%NO$L$$g`X zov(t@quk~WJU;7#T{8g?uk-8I41Jr(lh;_AQmj=v%g9au#f4KB_Mb)==JKHO&`A2@ z;fEIzRAaAGwwKy>r70gfd^lsAK~zm|7U%s*vSMMqtZRFE?6NN%Xl!mKI|QN8=<}zB zjaUcc&jCip%y-&y4%@cqG#0UgPeE4wYVa)W!k_1|U(C-3_Q|$c7~Tfh;2M=mlbH|7 zCZw5NK!&o&cG$`H7Ew9KRsisR71XTZGQTi;eW{cOr*{W+pZI;JuiCbaha3@%v{|EJ zt5U`p)mi|BosKt9e1(ATpB`7w79}jUf1I40td`2`?;)e_YA2a7vHSC_&skYnNiZZL zPtvt>lou(V+-e?ve6UqHfWs_TuFMVi_WnVo;3X6aykVI5{GrMx8IL|(hgC`xClUqyB1@jY^qP>5*xFl_#a zj`j=3_{FR^Dj?rPC!n1wO5~L$aombeVH` z>HGJW!maDGIx}nf`>(HPN7`EdPWt49Z!{qEgeVFfR+I|jM78>=p-6X4Ol?8l$%r4?=p zveQ!_3g(7Ne}#Az7#L_f8Ban&Nw&PaY!&&f)J;96+1Gd04(Ir_CrCs-%+hyyt^Xs; zplZPK0XII(fJmp)X+`&~u(!hC0Tsfyyf^k7rd^AbDbN`oOl0yi;z? zSlxk$NGw$KWjpymdvx#lFD&!_Q>g<*FWa|d-`=+D^NC^gF^Yyo3}-x!K`JgQd->tR z2UNX2eub)|qZ7cJuuC<>J9&G1CqH}EqDrKecn7XQWNb%mavJE!w|ZDRpry2zW54im z;MRwMX%qvAL|UQIM5WO$75xt zfBcc>pf=9xTOny_X=xrk`XVW5=ZAq?vQITMG?J5&rX?hr8yfN;!THLjugv8h)6mF* zD;e}V;d*qZDYD;*#Y#<1z6AFtI_2`htwU;RV=F>I+{@ZnMQ=AZV|{&n-t{$z+qr{< zwW_9YUphCx-d4~H`PGz;tyZTmybulPXxm=L$^g?nd-l+GT_>icrQK(REDk2_H5HeX z^RSoR`g-Vkb>Zqr>z+O>__&Z)X z{9-+fPDCS){oug^c@%e|rxgC3MB|4_PErB~;rrZxaPJ-2J&G$#Tar@tY;1s^FTOEPQ&8i~rRboBzkjj6DljBK z((}-K6{1HUca@F)tW^)RMqJ&E-T}zIw&Nnc$Rc+HiJOfCiTuKXVXD@g4qq=+=edF67s)rA`#F2jBJxX7Ewo)%7Y`PDZ zV_(;dKe;-%g5Gvw;UZ;4iau?^J0ZFU`bux`e5#?YNBS)DZS07^Fx>KqF!fyc%GM>r z)dTmUxvLBMLRY;x>%ef)P$W+ONvIV+!(YVO8}jW;+xRB3mWGR(lV2*btW~m4?`}<) zK|VgKG{J*gQqae|1eEvTI(&*r=&CCRC&w_Bz^;qi7f zRw@s7P0T#;_f8h}6ZbA+QKCnobAp^BO%Js#HC!%t!!L~I&^kW7jb&B~S7Q6xWz$#h z`L0fo<6bHXzmau>_9nglN~7unyWpS%p%5FqnnK4cIG>B-OydVj)tN$#dat#m7qKC% z=DBy4O@#cpNyD-8XklvGq6wY7xT!B})%%ROEIe$V3U(l+xv#yhqP+5ABtvcaWl^FN zGA2LW)5YK6B|kPIpX|vsu5Z*bKk*UfP|oBt+dctJKSy-Q^x6DYgXAEBqZ7r9Ikv{_ z=uTMm*cI{U%}Ht3TRa}~%fI1()nw3$sDoJSo18GKbYR7xTD`2Yy$|E2%T9CGO1Z3+ zBH^Gg$CUiW3B{%-)(=h$WM49E^(ZUyK?}c4zk%BM@A4Uy5~4SWB_0Vp2=r7^{wZK% z%k9g@T}$ndu?}jsWO`3gzLl`HA`sc#b**7iZns21UA8WxuLdfh0Wz~4KaMh_~m8gfEj=Fv6)!X&=v!seH49l zfUjhlh%d{0l8!y{x-f%x9A?LAL6sF8zfjv?bpuXF;f@Ki^dHJC|Nht2-N5HM=`Q@- zyD*A=+GKd?`&Sdu0!B-?<0sFEHqI&H7rZH4=f#OfE7gMUCMc;kAMW>Ir;gZ_2OG9wB!smos;F_*ip(dKi-QMXqq zWPFig*g$OABB5q!#UnO+ZWv$K@<_3yw(MfB7r(V*x;#ShqR#54m~%cbkm$Z_0^`4fKci^dP( zLqe_qh4|V4NbkTbtGXMPpt|J+CIPGM!YFbCVzvWFCLlKVn!-^?PB4)O$tfwNtT$nc zB`*m*AAwtk#}6b9@Zvr_09Mw!l-qYsO}!>yfis5Pfm6j1O|vh39-a-to1Xv{5Gq)R zSQ{fx0xw2qhi6}E9js5}EUjI;Hc;9qN6tzSQai2I+hS&qNlf?DG24W{Suh~IF>@o2 zhlYl>MH?T})O-m9Y-I_x--;4evMQ__ubSzJWwi*LvykXCf@ET{Hp`gSY`^cT@A8~B zDOVJ}U%{GvHB-NO(U!C!MidHklC(#SsnYVJ%X=uPRSV-)4Ch{KGa0WPz9cK`r18Tz z{o6YfM6&EW;25VAxjhMC1XuSnqrOS$60 zQHD+!RKPQ~{1u~2X+yayRjYoh+L)THL2+}Fcma*mdmhOVmewL&A-pJ(1wYR?JQX`c zr1N!!ADmZdP76bhxBcHGBq_7s`m2w2HK7q>WTH? zEwG*!@0+iVu?_X6ai+8TJn!GjCTLsDx}opi_r^_YD3Cf z*hxmOewJ1%U+HBTGFEw!iApGmi&*kB({SD(n{eUtmj&1MpQPG^-=cgh`{tItge+SF zH|)456jx>XrpG;7xZ3eX{48<8U}dCv^@`|-bMPQDvxm7i6r;JzJvJ%f0v<8Bh|$@Z z4aG03kLXAtp^gvDhW6z>R&rKv5nNM3FUFs9HMui#sNhomI;WqoP!0<)*_6H8HufkK zl$EchroNR7=SXTDwg-Mj>`};-a*ol=|04q+vg!Q*8cH&i5 zD%DWu+cAI~l`Yg^)>79_e+0_&A?U zUa>&0q~NpbRxE_v^OyU6A}t>7mNuL{(nmLeAn*H2&$uo=sD&LhPr5jhJ{g+g*AUdG z@8nrf%g#HLyx5d3KbN{EXM(&kmvKm-nl5}Jx;KU>J;(=F#)=X-%F@5M^;38EGwv75 z>`OpovDUw|Gu-mvEK?>NxFVoigOUyy0=j_e6ZC|`KZ$0qs2X*3J+pP|RxY=8qL5qe zRZmcRCNUl~Il7 zeD!P{5JO}%QuUqaN4NZcwdlXmDDOkr?dTjy>?OhC`TEAh*NmgiSGa@1cNngoot&EA=yxs83+pS*LAZ3}f?qsRUpS!(M59;XFzS0$P9-uG?b4b0MF+=IL2i7ZBQJ zBO6ln!%=Ew0Wr+#dbEi7;E6XTea z3X4)_nz|>y{5aN=oOY&V(T=4S9YYIFCsW$~R%tG3rIb5&^!Ys0;nKxA`vhMc)TEE= zryWqu!%=0*FLS)BDOKh55ymxlnL(6UCNh{i9;{3><%S{!GP4$|!>J{jz!43vE3XS` zH^kISC3hW8tViiadS&_V_c&L_)Tf#6u4+BzaUh znt7ClYCmYmI}^oe$vl-Z)aOgNHSkeHglqQ!M^2d#G3dkax4(#VPto@M@_JkovmC9> zo{GnD*|bX6kD}iaooJOn|5Pk~ltr&gm>x<&`#On;dNvIk#1hfhj>>rx+UyV)(H1%; z*^kO%fBEu-db9toqk=Vqxg@8L2@st@g5Qc{*F8}d9g+Fkkv2c)+gym}vi19xfWq&F z9ZvSHV8*}qhI6Km*3&rQK+so`X1W?#B0j!+JfxoIHMbBXz|D_c?xP>m(Uys~Lz2ky zTG|n@s4N$B({KhxtO8C;IA7|rV=j6670&k%*Z(fFR&}I21a`u*vEHFx=mPLQqfkHDTDssIGNeV`_or20LsQX02 zx7K;wE!~^d*ij>JC|#jp`C+xh*6`5gN1LS8*3nHu$FG0(=vZOTP+9!6Rij}?R8l$j z0gJ|GkZw^zOGyOhot`;jnznvGxChz)Ht^~39=f`<6lNI?Eu)~|8%hBb6aJv`fUbvE zv0sHx)t~fB`Q1q-Q00D2q>3`+()@U(|8NW^(z@WXxrGHY5J**I+r?KF-%5 zom>;^)|JHc{FZE9YNOkm#Q)qmWl_PK>OX}IJW$6!v&<%G8K%_AcEaF3IQ_1vW^6Fk zW6wy)L_n4I_=vtXECX`tJ_`)~QiR#Qtn0;jH;)$r=XWLxw1NB_XSOrJ2DD&beBb0V zK99%r9I@ATGlKHVC3kvuhLmzbI)YhS;GiZ>-w~0+^PXdd08Aim*4Ta>#UlBIiS&nt zGegg@ag3K_ly_2p`;~)3-v0jedGWKkt>d|^W%qNwWbjY=7rq0wFK}c~pWMY@aNhsa zCa6^bwU{)w;**2-AvxzXDO)`MQLYCJ1-wuKmCU)ZRA)>@?Lno=x|KZ6;IGii)N{n< zyfjf6!S=6}TYbEWFYJE_0)6W7TPICoT;fE{-qcj=q4T4gX%COq+2rSUQK^xkav*bjA@SU_}CcW-jYEwrn&fHuZ+3N@ODk1 zqpB+xnA0|3vWd^#!1w{x3QC~7WdopIP}g5w%GcE6!6UXf=zMSouD|7+Jo1E_(eOo1 z#XgP?Mvs_E-62cUN;Z!iL9uLNh>QB^&8)-tHpY!TL(2_=es|Wid|sSYBBtB0Hz7m& zMkXgowHW1evL_6O`CTU5U|vDN`487ywOLjgx=GrqtD$0y{(@4xK))v_+JT zQc^ZiRY0==JRR6hDF+PQqxvl}Qmk*zHSYko zJiOhSY~0@6`3jZpCiuCmk9~kE!*Ssh{~{;n6S7>|QwY%7N7h9q z2C_pAo~|ktZdM%TCf$9gpjK^M4*p>o#IcF20pF+DUzv+CU2VG9D_b#Pp;6j)E_ z`(%^S)5&|b8*z^jo*P=uEP2j3y=mu1KX|agIX0LwDogZ_;f z6#+V;bC(U8gX;x<)gXS^D8XzWYb9~5S=`jR2IbA(+&V4v<{~+31_Hf^H z@9%uM5a#G_{IzWHvGPM9jh)0Kg;zm3Dp{?Xo^Cp?nNDUL>sv-L=GwNp684~;gC5w@ za-lcChLw7deSqHJ-`MHN*>;^hN|V7g6ZoNQObVxiUhJ!V>{)OMo9I%2%C*V0{NjlO zZa@&9z*ZF+TZJ9-jxZKf_Le=gJUVa3si^2J``yXNs$0z5%5BW`^DJ+RYPdO8Bx{;atv8BPH?%&M08s4_&)H!(DKaI=n6IaihKDc5-7 zf^HiyRw#LxdA%JE*gP%P3@M&WHzGzF54*QKO>nd0ocNmRMeHg2(+z1v{E(sb<0~S0 zndxci9qY|mG71zeu3^m%IxG+?bCmB=ZvU*s6C2&=r%9jl<42S4c6n;{I&gH{WK_6M z?Q~N~DF4!MrZ(5wg`Gc3W&N1UQ}d{zw&#ZCE_u0n9VTXsR%&SnYvEqlxhtbC>t-Wc zI-FVMMp-yip#2A%90TvNDuUUgk-^l51kxm1>+t-Hg*(G%;|C@u#gEEq^Lg07;bjJG ztZ=J6>M>TC;m>-m7|kn>_wU9!9ZTM=IfDDZ3TkvxWG{6Y^a*4(V{lmK6u4Qp;o%^z zX?eS0vd~-W&`YvfIdPr|w~9tBvPTUfa+G~KV9>QIpJUL5{#u8=LYR`jv>}<38?>b6 z5*9}7e=p85-_G! zia}$;$e#Sc{I|gEq;CHlHcDk!=WWZ8YBqFVCk?3onvCmx@F^itR8H&We74EwWuUV#|=Sw-WF6(OTP zDl#(ieod%oFgz+NY;uge1DRSHxgJm|dG3n_xlpj%cW&PiLqjy#n^~ueOHN9$ewDtW z;^Fn$N6R~RSAoPmH~Z9+5!eZljBGzR)X6TQB3O znab+uczP+nBgXKhbeUBD&2H_!R~1(@=X-sV-`g~CekE9-wL$0f(Hc)lJT?*nf?wZ> z^7h%c4x2-BtG$C1NxX`3Vx&z|bE;Y6f|6C}WEtFD#8CJAq)90cLNwrtp;On)%gSq6 zB02uyfgO()Cm)66M!ZU$slSJAnX_xmdG7_&JIk{L_!~`NHy{olMp0J|J&#)Fm!%@l)M6w<3yJ+OA| z|A!WyU-j136ns8S1v#Ab`;#74Jc zT3TIg+mfPrZ*_$ZV5OpEq8W6;bC!{PDtq$%gROKnu5`eaS!5R)eXr&k&@qc?eO|GI zR_|*Rq4!+ccYSf{JZscCO_zYq8r>U_pzTGxan!S>hx(Bw&@eP4uB@y`EsJxRTBav~ zOEgIDYrWAY0N{QZjaJv#(!X|Bl9>+PMblqK+))$Mab1SWms|RV9PvBBara2PkaY3p zC6mQFoDl4RXv{LD@gAX{)7#lq5RdJtF1_cuW(~qaBS&l<;%e+q{{@~`T%My?UuEF= zL^a2fs^EZt{ZH!3y!}}^{zHFYu-HHlt=tDwv^<7`)*zY_pd7me0usnmL1;H;ouG+l zG4i@3Mkh!Vdr(qN#7ENVuRs+7H7gFZuQT$7;SPg-b|A*IFqz3pJqq810{*dM$6V9V zCzqEOXM=hNYGcRe8P2xA`hEO(U+Eum%q&6rJA4gB=3*sJ7nf6@1&RI^E`kz9YKp63 zI8pRX?UBg#Bn@{T8ht8K-NVc490*5@J8Q+u-n_|6OH)ARLXM`*d{(7n(sTmPr3=0c zhY3(!YY}<^rULcRqeogdn^JXiXNQ}?^mLZF@yga@kusN*)CykN9n#X{_dSUY6))f} zaLWUV47h%xGH&|Y8Pm3ghCkGtsCh7Aqi-X`MVImZ{XM0{yA9rOsZg6^hEszoIR=KT5dqTj=-=zt{9vT0V~U)@%65_{!Pw#EOxG; z&=VwWP~k>-99AVxKgG`xY zuIEGtR5Ha+iQ_Y16l6zoEmBL2JTNIh*HO6V+DQ5zK!y{Ii|8^ZmdNNnQY?d)3_4d~ zdHFG9AG3rsJ5#UD(gD%1+o_a1DK4eZ@%i&ZM`Og=>e-sn3#CdR;^}_Dz*xxA-9GVQ z4B}oIE% z$}-=r(wCls1_-lbM0Eh>5uKBSrCNRioenG!q(T_0z<_{-N!6{Dh^gg}{=Z7yL`pDs z(sb{o{HKy~$FE{b5C}a>Nks!6{Lm&%F!6s{)Mx*SUHl+}K)gBq|Jz=e2|hwS1(6K^ zK5B{H!#UvH-&Z!DQUE^G^0KmyCUXR0%IsR+P9RyBGSuu#b&|(mfdu((MBH{iiHu5q z^x=h4K6p1_&I19>`635?@wC#+A+YRvS;107qQ<9pY!r)*jb-(ja{(Som5{`MAKK%y z29ftRH~D|sQ}EBK;y=U5|5ZzZRC&QyB-wWq|Rc^rSkhx=pUv_UwSyxxra}*dnZORC>ND$kg7=({V za)T8tvvX%FJnS%i#@})0{Km;$>4tc^+68W36)`{mfIt98gQZwrT$~B#11}G_O;Gjg z5gEPD*#jK#Yb-6mYX3Y~0$RC`)M6I_$(sgM-2;U(hlLC>{p)(?(82AE4GkV3NrSx# z4A45klh0uyb+or?b|EPDxPfJlf&CzXTAQ%`&QIi2!VUW4jD)~@r zLZGpBcUSgTSo_;r!HZg1Fs80>?uY0V`Djs8T}3|D5|D)m#9*gudw|ob^{;UFI&&`j z8`gqD$CCRG)nr4sEwEM@1r?py-Q5x)E;Y6yvOd7S0n9@f<)w9OMWl(r!I1}dKx2R= z_|UVnvmFnB6FQGVL4s1$-re23HPH&b1MG5E=>?r`K+yx&4A8E?752{pl02rX>s^0V zX$t_xvGMVCu-1Wvw|5wdx4}VIXEZqH7f3%x8_$mw5W&%FIK85m4+jF~16G4L&rS4% z*NRK#UCJMU(AhLDj%a>}`cnV&%^3z*P!(PcmjabFzs=J&{3jUh(9hzTC-C!3OwKw zv%n+lH3ek@IudMvssyPG&KPgD54964AksXL&wvtYN?XT;U>-gdq3AvD?Gr{F zGD~p?rNeF##C{2p_X6hiQmxnh7?H~cE}?85;PH&;w{R0 zd5yW55j=nOkf=CWiDQPCISJi{x%S6#Gyna4tN>pj;zsr$aQ7cKmi z;y3uvDSXjY_y|9(J~x}b>M$MR(6`tWJU36o_pYG70Q8hn&})G#p>U-uTwfiLk@{DP zWs~)tCe;6qf^np~3+bz~_(?$@EYH{DYY=0&uXhvKlT9MP)ZO}%A2={&z1Jd|Nm33| z*N2@TX4A1d5kYlyp*6VYoA>;Sf5vNE|F8I!`e7|%s=*UEHA7BDAUa(BO1J;iU-y5W z3-dT{v4fwtr=IXPmR5J#9Jah76o?>okwZmW+l+EgxJo?c)zPMOLm~iB!&d+1=O?lt zHwb3iyRu0Wkj}=weRxE%S3_jr0IdRshFk!iFAm!}BV9P*ZaKgFk4ysdPB(m#fFy@i zf!_+iyWVBo-REEii%VPDErw_bSM+l47rD~_bN&M_9XfOftp4ZY0M>wYYb>qZqk=yT z5lNKw;yPHYf>QV9F-V1#0i$t_Xuwv0K#GC^Q9&9U0SG3_BHRi#3Sjl;u8Yjdn#$y63PqKpa^C6l)87qwE^@M-Gu1o;3i-^M8-A0 zib4o+EZ(=PZf+l?E92%Crd1r(MDvC|tRFJGE6ufX9_E7ye7v`akW6 zS`N|RD}<(wW1BCag=SNtG2--A;hja;8>RaD2Ggz8?BAsP1U!@}lIEmQD1ivk0#a~O z>YS$?R+|4AIcms1Bq6Kd(-o2u_kylYZKAKB76>mnhg*~ceD3o5|798f~mnC za6}?YX-HFE=*PsWWmo4Owtz4c{(AH+2nJ(NI+D}7wPu>fxQ&+~ zfs&X00dZS6IMrXnbEp62A`7t#YEjGOV5-_P1?|jD2!W!=rN{h30a{YA_x`C-*NfFR zO@|Y6RAdmhNk{tpy46s^&!2*96%e<3zrSez^jBxkf6&P4(X&aN`kHYWFu%e-b-k7; zzfGwh1osH1>Rk42({s7)081^#u98w4-Qq2Bk>O52LqMMrQX#e$l~mzSSHO&%C>+1 zexts*ad;LQBj&_xv{E|3c_9KB2Y1ASS;7UfD*zNo`*gpPnSVOs!TfgZbz@W0t1Ab+ zZr;2A&0@eDfoER#iwpE&6%U_k?7w;ZW~f%m{QQ(xVv^IV(K{Gyj8Q%G^1T2W9hAod zNoEi}4x}`K$kCnV1AQcV3Q~o(fFHn+qkdLbR~MQ>WZr}uq%&Xx)NeIfBje*%<@TtB zkUdbH-t5Q->T5L68hd=cWL(=@7b*{kgHwL{xBVn9OT{0xpX(>74w9o_C8OmFta zV3<6oy$7DuX-=4fMh<=QXaZeg;7PoQ-IgqpwG2hPWdlwvyccQh91YHPcj`~o)W2~}mF zAHfy@hNL^34Tx@i><+5Gzdwj0GKz|Pu?!{X?ErMgN=qD-z+he6dH}3J=H_HVdnJ5D zamu&$s?bgXZ+J<`3*extYiAd!gkTsYNc6boLpvVD-KgP%$Op*dZ^dPHK8_Zshg%A$ zNyBS^>JayR6N)SJC$_d;G@akG8G3^9tv{;~QI@7-V`I!)5FOq!bq-zC08}V}wa&b7 z7M^n;-)VSw81*JJ0;G0R=}KbVK9&K!19s}ax$t28O=_5dVz+U02)2HReG7$cn-#m=Tk8InWd>db5Fcq;Ti=1e zrKUln{td28+rY%7G&(ohPM^2m@aAM@Mt!2Xs2GIW2JF-HVF1VDA{}%XKoraaeazfh z7}20m=*v}GlRi6vK>Q>rdM`j?fvmwKm&;gQ4y%#!2cw{V*uqT{Mc&5iJpC;X%F0#% z)B_96dCVZWA5HQ(4sTiLPWrbv2RM>(!0!|r1s)q#Y6eVOj_tbJ?$(r&aZ$V&)?dB3 z9f43(`iG6(V`ohRVruR`4PpFm*5&`_Q0BklL?fp-2bTvEoqgS>fm88k?w|q&^ssG( zf0X{>wf;YN-NFA|_wZjaF8}YC{{qzi7ev$ln+*SDp=9X-W#h_|Re{s_aUo}Qx+mx| z^kLxK`{qNQ)V=)str*{?7o2QO;=rE(TIpU?C-GALL`o%ei6x|gQTr*V)^_FhAt$uE zR6G%Syo7IiRze}pVprg$3)rIfUsW!|8G~b#+;D(>_`SfRcd`5H!a_hcu96o}k?U=K$?e{grGXG{!)R_Bx*$ zbSVg!jgAiR=1jQWExU4XDZ#ze4t#HwMM8DRy8;p4fMNwB1hr{%AzO(GEhdIvmU3wN zQ68Eqp5x{nEXv_nAY7{zOhB>ztL3}1YL&k#G7XNDM8sC#c9ok8#L-y!klU`Sp!jkZw~HPN93?h~)HgeM?gr z8JSD@)+M#jnZCe0couxhfY5qpV06G2(sc-$ba@NgH;RdR`TW-CIX@Rif9qVkv>Fa( zU|#TQX}=EK1zr0+G|EA~R86%25CRQMe_Nz;a&nYRMGl55SMrdPj;n^tQL7n1UxA2O z>2wylK8vrE(GqN;;?HNtfnj>fgL}Xs;9Q?+Gl2a18}NX;2Whf32Vf!exB~QpL;d(A z*SLWP1!s|SRnh6)nE*Jz091L{qsv%TRh1-%ezp_97AZW34Ok0@!;vK6xdQS6;6Yc& z8l6wpBG?qr)21LT1H^>$(s|{?#k-^MAc38j?cAGW2A#6@Kt{nSgF;)5%q2jJoTiqR z8{CNy462qxQ zP+3qC?AY*y^wB5silnNP7U74F++>61dv`Z%o*nwq**PdHqlJFY*5-=XCJWA#n=0Ce z&A!?q>$eBMAkV$M6hIgB?Anyu$14GgbuJDrUD$)H70q05b%Kopo`a|fla*^MxQcn6 zWah@I)bh>(k`Gz?YfkQQP0bsLgu=p($m@H6%c=|)R>I3@NVPTVtV-D#`K!=sH&J2} zlSvl$jDufz2Ab+%PVz&^9f29mijYdRhitJA+atus-3E!9Ig#sqOn62u<3rd9Gvl;U;-X zVZ6(6P`MeN0gtbN&MJboeYD|}V0lwk`0+8&VMPZL;;vr(Z8U%x+`s+=X9K?@O#D3k+q1e61%{3#Ol zl<)h^d(pO0_TWzAIqdZWR1a_)eiD?v`|(*vn$zE|T0s8$!OyHc4V`o#n|KEXb}}eF z<vP&b*EcaI3(;IfDf1mv!@u0DG!eI@^AEYN=)NL^jtN-@A zY2;|&^!-qm(`e&;^+$96JiOz*UD%pEcRM2QT92rm-E>b{+)pwRXK4HM`RsGN{X637 ztlsc*p&&jbrJ%6z;ALy;&6FQ~fxwPnC;s`^pyrN?^4`7CODEjj++I~wgtk1buI5A` z*9A^=7aOIgckuaGP|m=tcyyU^hs&=F9Jju5<@k+_V%2lo;Ti% zR4i?OoK;q4ZD(hfQ}k*5?FU0alo~^mFM-tG&U&oGw}>51{iSOf3T1-;(5KC|h*J1g zQC0iwFF12r1c3J)omejeY>%-7C>ht}B%?A1WOq=Fr6m#7*6;H{E-(|l%IWIvf8O^# z!7GMYvsOCiZbq$eIT{XpKjz;%ya+5D{#jHfKlqWoMiOO~(C(WwaTI}Qzj9g}9ZoXu z{4lx^^94Sy)GQPO1sSyjOSaiBjAEN?yUS%?iniz5n6~xyCJo5cdMx&6T}C-;_P8Pt zAM0MrdYIi)XP>hUGb{6pW!q#k&?ChvwD1oJosrJ!WoO)mb@7vCd#_|EQ#K>2kDm#c z`dE9qfKcjwc4WQ&RDOu11qyd+ZlgQyt_~iOtK8BWdctnl5GKpAXHQ z{NoBXoP_GWr9#R+u;*5SQvSlbwesD6ZYv^){-83ws&%ChhtHiB=LR#Fmn)f>OL3d! zi@XGuyEN2;a<12pl?8M3;){az8?yG9J|r6#jD$T=8ufX5@`JtGeo~)j@6 z!8@0G?}A^loO0gVeP{OlYFf#=RT=bDd)y(~@-j<$bU|=nY-IAX@wbD63baF}l~=yY zmAmEkzSt95R}-_<<$=tl+NS3VQ_>QM>W(d~{#4iPQt{Y1lD$x0=k+erTWjr|kh8D7Q+E4f&$v5-B{{@IzQrn@{GR}PyOv=zF%`Wf+4((cNE_@yBy zfBFg%PU%s9lwzB69MM7XVUTxQH9TUx;+u1Gs@tROfp zp!ie%yt0gQo(-b<`=gNH=J;^ZWIopt{{FHt#MNhf>)kh{NRVMX2 z-k%-Qg_rd_ONOhZQFJw^l?!R=8Mt_yKUFy#&1iZaLgU*%m$9crO)!dsA1IC9yqp5J zj!V$xxiIub+L{$_;Y!bHLY8Y`le;4RuVyD!- zyp<<+R_eu)opGl3$L!N2?d9bUgaBXmOEYJ3)meA11-#hpu;b~u{Grji=kW-{E>RTu z*P-KIt?kXo&W8C+cst=4@H@g%2kz}Z2poR}oqx6G3upwqS@H<9&DFdA5bOzxE(Ol!z1rLC6+CNJNXeB}#NbMDKMNLX2KxM=!C(XwicpIwQy^L6nJZ zlo>5L6FurM&LZdkzTeJuKAq>fn02jL&$HIE*00?6{hJ6a4JBGCW-15-LaY2tUK;`- zYX)siN^{@+I{QY)#n#=^!p#O^^6K<#IQ99%9bQ{GS%9H# zklN<-!cfoKAK zvl}pyi5$19^bTSv_p4;}=wlFJ(-rBU4=A54id1u~IMMC}k>1DZc|8hEKsfV{m zYy?_Lm`=yuNw2Vv^|eeF6++>vl^sZH{0V77{LxD|yfC)_UpTn2nKXJzMt^<{(C+(g z#f_LL5ezPKo?kht7RPIpkj>L0X=aSiPD2q46l{-LA7x>jN#`#3PgFjQ1*e&AxnKj|Ltv zjX}f{x|&^C*QDuZoLpQSH(Z>ZEq#2BO5zNPF-L6f#-4|MjgB1VOysFOi2gxcl%#={%knj+MLXM zNZ7)F!Nb#Y!8dkpX1vPI(EL}u0B1a<+R!jEuH90oL|47%GX`qdUAX+BcWI|{!R-}m zft5t=@(F#Ql9Cb(|55uMEWLcHSC<##@xf1~Y?qfjucHV(>^};v>34Suls?e;ftgZ^ zUuDq^tkC~_AO7Po(uVHk!uhR<`}5WE_;=c#A}(%Bs}@h??x~rl&2ycKCkYM17k9|G_T+3DTBgFRI7hyL) zEnL|sT>IOaBz#UdO?}+?7=B%Ez1$t@su60@X+@AtSbZEdSG2?`{12y-??CQ7EH3l( z*iJt8xd9?8o6(X5-bCCh5V%Izc>g#XVTRh9oftmaF}n*l5L_EL9lx}Sd65+5w(oPc z$(*YN!L&gn<~}}#`I1qBqr_$}J39)5jRS7M?eSN?!>c8F)a{n^RaI4P<9mBZHL;RW zJlH=-P-5Z@UEUkuNFJs?WRA(vF6{K@zklBWty6fNGd|qdv`}}R(YERB+l#uzFV;|Q zbh0oP3P^fq{V({ha6e zyz4Pt!EtI2w_DwZuco^`sJSCYM@L}PLJGzwYLUoX#H09Uot5Dd^rLl2$R+X1`T6<% z(3;Ktrqf$7ie!*#p@WD$p1pge?5~*LF;HFf{sDIDJ$j*k2X4X`6&2-nvbE(}qVAnh zVB*=~YW-lnzErPP(5z8DTZ>X!uWDSLGyZRsX%bLjwZ`>L)%Tj~<2e^r(A(u&kh* z`8|==!!6a9u<#r$s6Fr^QAGi_K_n7W(7C+VsSKr4^CK)P!gqIfGe#KU{QQD~jxdNg zN`n|i`$RM?k&a?ybo6SM?fn^<6` z-qBuCrP4I3d20%s@kk1eNqJ8Cn~=yb4^AU%7)-q(G)K*1cI%7B@yf~yQZ&!h6Nhy5 z@}kT-sp9Ar{PF!exf5<=)$D%pm$9r*+3PkGZm{sj1oH zVq#)y)>JQ$5Z#q$dKfoM!67{ojFacwrYaeS*PC~njyMZn~$Qu+nH&!cLzK@u0OCb6CceTrg_9zCke0DBwXWBYUzt8&~X4B!ixxIj<#??BcR`#@8K8%iu*`2^c zamW!eY|QD-0TQ;s>6O9A>{Zmt8#H9<65r#>W=E@clKB_9veYlsZSdsxkmiX1sY%ZM zbfB4U4_-YadJX>Nplly5(l6cI>|m}}qK6|jL04*(==J^H0r^A;`;UQ~Ls$BscS6@k zQ3PF(sEo#i#nperY7FncqABDU)!4#A`xHEeAjZvv$%&A1a<1_%F@ z(vV_P0_W20>E-n)?>O@PXw~upH4@9`fJ2J*>PNr6VfF9Huxm%N!{1pl{GHZ9Ag>tq zE&lrD)WN0-0&8{k9baFtPoVM7*49=moxVWMegk8j@#Ve@>DJX%C@xtoJ85rHz1Drt zNi-^qj@_e#Q5IcU{`D)rS@Ef}XqurxM@PrgN8HD6WD)|Pxa~l;KJ1?E(#gFtCs7vt z{09UA!LXSP(anA*q04@)9X=U57h`8@TiqA?iSBl~M(t$Mn{HKkd3oVa`QhlxS^VWR?m4YEAcJ`z~U*hyN2D8Z4!3XL?@_E|vg{h$y)#_tawY3F#)MDjbOU+5jFlBETZ-Q5^0TOUY}do`!k>o%zwA@cGZd;9vV0t3y~cRr&O zUcY`_sb(RkT%iwq@7<%p($AlpEBWuQ)ti=u#gdsA7z}jt^gex7FyyxVu*O+Jy_*Z0 z@T`Cl^(~#PJUk-XC#B{H#uR$H!!>d%N3QD7!*P1j-SMTdmB%I|$2K>-11rqaWRM4nLtY=(F~3yu4EYk*_M>#%$%CWm z`07AAU!n@EipP_M+x5lp%^BL(cTJb1mZg`$iOQoasf58TBHymJrp4ULYh6e(3utNB zXvA$;eqh1jUs;@eeRhE%{}UKq?q+3YH|vyG`h%?nCPOIbHV2g0yPB5zGWQ#v$%|pL zj=wc$fowCdu6%Ng@&&HEJdoRX>$K<=JNsOeU}JNi>?vz~FZdrV*my9j{l=WU`J-~4 z_9qPVMBsZKXmu{_Y}cIHnHi5JqTBj(Z-xfz^XIP>=oLHQK-;$Jrq>Vc!jHFhiXtkD zQhW0C_OuI!3kK;2)JN@w&ldA@3gtV7#r_*8OFWp<^8d-AN2Fj+!sI?(>t1j(3#pge z1A|C{JT!BP9|;M)$;D-ZLWOw{k=?YYiEa(xO+5i@GyGHcLUYTp-&qy4H~MC zMaj&WnN?L)L2%jL{q>7~b=SvyhL_aX!q%1?I6qdR)@8b}y3(}z@X#AzrknG?1<^M7 z4xCpbX6ENVYUXj}q!kU=&nz!f0{n0W=B5KrrGv!o1;x&FPJN@GW3$Jzv$H#*BA}c6 z$QQn>EHU2~(pll|etr`kYqfY?sRgX;4-#;ish7=|RADLrAW{N2Tf*r3wIxHWiJKaHtGJFmRPZP0#F~s^oPVtzUPxD}8vh3jDHz%o zfsD`L#U4M7aI51tD=RDGO6%z!rJ$h5UZBezi4iX=$2&5SXUOY{2iF_a_8C9T}Y1$j{{3R!>LWi!2`A#^; zlM4*Ir@pIWJy|nW$%QRt%^U|Yqh)5EU+$gNYb`*CbM?Xs>cStlO$1wsplRzHvv zZ?m)eZIT3u?Xn{$%eDXPH3?l1!2A5@e+yFqIwmo$GyV?3ykQB06Asbxq!{xAWjZ=2 z;aI~=_4dug%L;ubYFhwz2B0Z;3AhJ!%xRTIaLIAh|^pAcZB9eC! z*9|uTKG?kgHjyV$<$?M&fCl29$&YB(N-zW`>*tdv@U}j9*JHcjGc+`0FPa9}jL?fZ z(=sy1;^Ja8#|?4VHIPDJgvrTCOoqh9`nsi`pRq3_3mN7m73+g4y|@i6y9c>W^|qga zIw0r6?AN{h{rJ8mi&SnW+;`xb#i`=YajR)+TKW1Koso5m*ROTf)51SxDk>@A8oxC8>{2zaFt$s2u6Oz#c6L(!+w~El zEh#CU0IC?yDn!H$PyEZV3U@Rhy($Xi#cYtH(e6DA0K#1nBJBg-dXC~ zYNeCyT$4H8d`j+dYNoZx_kePJva>UM|LBf!p3s}z$BYde|I&m zqo%qS1U~?^>(&5=$LT1Gyt*1(faS|~79?d8;o)V78XF%UFpX*!Nm2W@BLyiyxdV%l z3mek}kOzxR^=mRL>3%I4r;^8sz5>n~hvc`))@oi|Eix8M*Km}xlwwQTrT##!mF^=W ziP;((OGZ5TMaLa17Mxk{6cAvFFf&Gj^YN0pJS1F0L2gMfWoH03!JZXv{(K@C^4(KwtSv7O z0wf30d~hHRV)8;|mXF^4ixRz?AWPYO8h?aw2*L3nM3*f?_>qjT{6T2 zD@eiV>G3vNaG{d0zcCla9`I%U(M`YfH)g?duY5<8lfhx52|s|NW06~$KklqQIs=m( z%4zG9W`g^%rM=#8evaD{Pyh)jY=`5h`~DY zZz20Z!6D)2{0umsmnR)mT%~3B`t6_LhNT<>_PQfB0I1P10&OT5T7w=l zHR@sWo79;8o(}fF2@iH(;_+ieMa5T3z3JKhn^*2QeJd`ed_y4$VL(|j?h-zZJ0aH= zv0XoYM2m)g8F$Lj;^|!A+?42ZS&aPcbo$YBwL(lx4A|4ZUDnG1{OE7n+m*mojI{dd z01lJOf#JLkHna7}MK%F<>lhw>?^lw)Lba+hssaC;k+}?KNI*pVEt#T*#5fe{KB*cX zp4urm#3EyWSoiSNhvejbXT^Mn?uR|!e*OCFH#1X~W>`Yrw`1M#`xNo2&Uih!$W$N+ z_dTo_g_)fI3nAO*!e&1sTqdxCPy$fQNa@nzV!ns8qL=JU6DK z{dO@gvGtzo6D?Cy8OBQ>puU&>%EiTXu$bmjJtcc;tt>3g9HVFyv^D8D{WC7`m@8;# zgKo7yXQPpzVFbc!!vT@70o*HF`p%`)clKj%;k?GbMaABJxm!|N3f;dtz_xSv75R(5 z>8YfUP)>~h%Z=w}050I*XIOvAudps40d-s|8|F9=3avQ49O!)_3$Z_`d0phxbYOS2 zbQBK+RFLJw#l`Ij>M!B5nfm;pzyt2vKfkM92{Y30x)Gy@}JmHf{sK z_SahmTp`c_)Q04F6Q6J=4A|a^Rm^p(VIdBhBt0yh6ZUrLEU_zx%E#6f2@A~KIWDaVAI9){VGs*^pfXxoBR+dK}Jc+rOo z^n0F3+{Xy9gl1!&Yo*=EY1tprl-+HhOahve-|5LdOm3^(8+_J`jvo3D*tLH2_I6W% zb0EtMB-R;&_~7d2_u1qWpv)Oy*)WIoGtBrMQA|KN2OKUiekH6o0D@3A`EgHW@~~_l zCoUtie)K9k3Eund0O!y#*-X(K(#Gy?mY-!_!cO?246RAsgIM(+u%{Y-EOu&;cdv6^ zWmF??E@0B4VI*&MPdB!POwe&c*v76e%gxmbP`&+T)YCb^7r%~f-nEQq-sYdPE{#my zJr;UnwzZ=xCrhVrMx}(+0;V@eX?O#V1p6QN>~eluX(GBi)iZ^R5%>nj1RX7t+$H?) z1&h!RC{*&Rvf!2F<=t;GLBhbHzhwI-G9^}!%I*Ngc2FL2R)<)IKDd~A*7!tMx^rNb zgO4P6@P~=fUL%EV0WI+eNKqH(8k zzsq?G`+x>;*){(yMgUEa^!GjjrTe`hoF#kQDKwuK0Q&oHg){pcZ2+~y;sF6p{dPZg zPEe;r@2N0z;=(n;wUuJ1k5{4Y;9g4KQq4&OtgVg$lY0fhR?MbZ^0G!IMEf77r8wdn z?B~;C1^?oE(>WS#^*P5mro;HTrU2sJ%#vW0{@vwASEAah9Scm+<)X6%0c^uQn`T_Q zQu1jpM_o-`j@XUWoo{+!DGWjb`J)n_l|zDtnzOVE|8T&T%FoEZtvoy!0A2-_45kjX zu*dIj|0R*uV+o*QqX#PmfJ_VB)}YRkqK$0`>F0J{bpk*hv(G<-wI|Jw^JNaDUq> zgSvooQ5lqC0CZOZX&INNea|c7ZY>`}lnGw%jG?k(gzbie0fq-iVcu228v}9k_cvh^ z%-&v>LzI$T2a&Q(JecUB6p;(Uj1mHfZf*Sn9lrRdVq(y(w9?u2YuTi*j3 zYp~L(-@mK*3w&Zg90PZIs4LVd7^&R3IyN;mBGc#cNc7wloEwAbf)wb|nkX(qfNnqE zq?&gXM7TG#pnM??N)P5JP~w2hC;5u-psj^Ar8EUxY78H!SCy!BS!)N}^fX~a*Z?qp zxPUv?cbnlR;;|v%-V(JUKz!Gj5H>$S{6EX%~4#eO(XNmMs8-r~) zkbQ$kj*cXF6CDhX+0=Q+WZO1k>)TC&Q>zN=y2lp9jYpY0(04gXFZCiDZtgrk? zEAAe)$$kfDvsS+PrlyKOtH#c(uJRUPilpoYkfNfZ)qAu5T^pl;aTS47iLR`+nVlxO zMS7H&>cEX$VIUpOAEEp_&O(X(7g|3Ezt31(<|>e#vG`|q29f@EuC{b_b-hI>U!X3< zTY_?tj*d=pM#lHv-dLLOb_qF~Z5^E_w>nyW{V3jy*>GozkmlbX-(*dG$D zvA}o?FC_P7tdPCU7KaWK0nbPVDmbbP$iL+<$=}H!nLGPx!gkWJWc^ba0I~i>b`lYB z$)F4vPjYhdJGm3E!e1+E!;1g3wzkHOV$6C$W{#y}J$uveUg!+jOcmu(<-~msDM28H zR#k<7lLQaAlc4Mb>Yc!J^Wo%M6y%{6=B}>KRjZ_nLqbBDIi6{SAOY{_+tDhxPpawb;&*btev-1)J)R(k)u4AWU`2y>UpN+ooMJkwo z9#JmQ!y6J!Z?Up=24=zoiCqogB@l=V&S(k=0PCeXe0A1bg<^9YmY}eggPza()Eh zooBRlBlE=5#f1(8S{uvgVx}-=;nIeeppLg~NDbohf?FM|@;>}u;noM`)z!l~hYcxd zX$klGO7V@mL~d^G8Sjh{oTCBaSD|biczd9sCq7Q=fzG)D9Us)`ey!br^-Pz(!G`lL zKPp1#z^)D0Uk5eEvZfuivo{v&`+st=62XLFRqhwE%kKhvL!9 zb8~m*o^vSx3_hPC`Ax+2c?-&bcC{Irfb(B8@N{kvOd$38hkmBLSn3bG`Cn^mM?0>X z$ZQ!QTVIu)@34D-TJV4W=z%5XUjKQYys+;7hZp9M^M%RFKMnq$amfFA;DM|Y~1b27$;O=^YyF1Lz&As*BkExnB zRqs_z)$Ag2dUtQ>wfbA%`g$EA6yzk45%3W}AQ1AWk77z75R@$l1knKp1GK;=eUbe0 zkNrmtClCmw_s<`Q?{p~dfJRv7PqN~$U??;QIt1GXnQ#9ziK{ycyEvQMIf9DHM?L~g zNX|f$n2D2-qlLY*g`F)31D=!|Xh-uI?hGnL9pM35QT}OlG%@(omBiV? z#su`?78M>i1OMlYvYn~3n}MSVNXP#5Pj|$BE^gsuWNiR+bp$nZ*2V$NaDSTB3>m~HrT)8T^x-}K-aH9hyQgGwX?A?v2_OBj3jmdZ7_ejsaQB$n}7;Wrl>$5 z63{0xVHNkZqg5|$%-uG@vp5!AG7?oA^=J{xIpiPVIvTl#6lksW<~CpPv#m)xptxgx zTrETv?FxY%w-l|9}5%aFCGaV;-v8e=#Mp~x*4V1hnr&&N3Q1@{#~LwuMp_VXJV zWA*~)Xsh10>M`k6*VK&jU5;$0Jde3$5Hed#z2^=8_ZZw=nV-iZA^Z0j$89A2_rDj4 zx5IkgSCf)HpHcri{pM`JDDIOV8#wg8;gT%&qGErK-?{(uV5Ai^^uNbFHH__lxAVq? zp zhEYsP<^2{%Vn7Sw-)CN3#|T;DyLH2SE<&>-6pR`#UyE<6!A*_E3qOtsdHe5+tr|7+ z+dJhsLw=oJ4?KQRR2Wwe$6L2=Js-d1I`7&z(bYy(BK0-n-qNAsB#>M?^b>j+G~v3V z6;*KN#kc1>b$KH7d!IF*w7aHcUm8cPLNk>+oJ?qU$Cv?o^U%JM~9O+ znzf{FkzGs)9=x#18FlC8KV-M45{`tu#1@xCb+!F#kfrH1qZRK5csV^-$}tUlI~be) zEaj;fha~6SmJLyso_@c>eYD>ERys2>SRyxo(o#T)<7A*ImB_5W=~=6a)j%MJ9p9WC zUu;y~|72sgd)bt~79Y9Rv*uBfzl|z&&T|uutJGeXY@>*ycVvKdlbp zLAhfvmeBFgsyl=D3KiM;%oO{c{2Wh1U9HT9)V6JF;*t9LU_s@K)gq^Z?Q4I1eS|l{ zP{r{LE7MOOZUf&0qjj|U@oYq!4=jgu6XtI#WfvkU=c-UYK@#%be3FMG_FBoX;8pPL za;b1UD$(R0DZ{ZhKa}Dlq#$CVS#aMAeDrnSX1}qO5l%bel2O<2w`3}j`nz`8a=nPZ zD~j_lxbI-KqH$o>7en4TIq-ZP)9pWX zdv7q6RqyfIYWjhr&5N*yI5P}q%1nf%mIx=7u#al~$4Tj$UP{%aS%pE|XZQPx3cgXy zU@9fufy1QO%?7QtezPCOtuI0FApc2>%Vd3k=ZP~PCK&6%^wTKckotg$pl4FPT-dTK^tK9IKvxC6dWK6mN7B{63Pr!h zQP6y%I=ZjeRa9+*zsIYxm(8%`Yr>uPuLHY zr=x51Lcs^B-vkSxYCpmZ+-^|Ory#erX`b!)I&MIky*^us3a>VF8DTEU0<4DVRpv0I;0V1_DQK^P$Yt6%6y`BX{ zH;K8aM=V51$JA6T^C#J=a#C}W3*=;Pk0XYLZmg4Bt%~mIe0;^C`Ja!+)8}8Kf^M#o z;k3uyN17e3|ceto7^leth`Kq`mgo{c=K?-KO`f)z%t#6CMud zB_`ASoOMLLbpZsFBYCq|QPmEnqeowXX(IG5=5CgWC$s~a#(oy2!Tc<{kh?ym+vJbs zy}+=Mies$u;j|R%aTiO>s-uEqZsNhn!hfDA*yrWpZHv>Pw*ixepdR(G2{G5jfb}E% zypPBF_%U1hjY-SuVY^9#*IEa`;l71ey?66+yCHCgt$hM7t?Ryv)kCJ^cNH(AjJAsp zK7tK@W_=o!2WRc#e%E!LKj<&edS>vcP9MifA$xM6q`X#uv=Su^?h0U@4!#rXzr^wJ zjZNF*_IZ`-8!C}u!|<9RL}xUhIrId4D-gsa+BatiBV9+3@xeR%M(ILpl}9&{DcfJt zOp(m>bR$i4l@6_rjgUseee%?(;(`}B4pQ#Gf&AWp%F7)DyHhbBUDH2Q{T<)F(H*s1 zMn+_-TYvYOm>(4}q`x~%#3*|u9+fVCYx}x7nnEr1hM4cxr1kCL4`nv|8YR8Xl`aM@ z@88t;+G{?0ixkOJkAqo7Y-o>Ypx%vpV%hJrcI>8t+=!ic>Q*Zy_66H2#0xRs)T4jz z_N245z{qw7_Du&IN~GN{n50CMXtOH!R+lvzV-S-#*4}P3x!+^WN9Rt4%gXhu+|CNu z-cZQ6ttNer1EYiH?N)qM)vp6qxfb6>{`PZQ&j=#&MH&7k3URo8cJf%B8Qmq7^blpU zVpzAymef?SZof7a6d1HxUG{gj3*B5E#{(ciF#OSl+gfOO{9(_$^(2p@{2$|(M7KjZ z&!RkHJ9`Ew)2t!N?WFxpQoKWhq-N>l=8gEN#MUO7VSnue-;3$_}p0IC@`>yS}GKUWo3r# zrPH6M3Hr9AWvaE9iGU1O)HbVpZX+LqaUmNGy@5?7Ojn*+)cfUjt!E%p-Tom6vC_w& z#|0$PTjZ3@YZiM=kl{bHnXwC}Ca%xC)-9RojUq!heG~etjWCZxzzN=P8fr}4zb`i~ zi;E6Vu&O;gpEk}2XE#TcGBu3@g_jQA@TjasJhIxgjB_8j?P0p;( z5RH?;hamQ$3NY+i=&d^mlrZRQobC=us25kBJZhyWA{*SCmv#m%*gHemA>yF%;j79f zXl_h z4>|571E?U?zGplA5!N%p5t(2ikMLmZmqmBXA&BUKQMH2|F}HPOo5wkN-h{`Y)@|aW zyA>hl6t0XKvwP#4I15t)#}RhE+YPF_p2UXLYAqgl?Quojd2}P9i?rG4#bXv8><)MG zciA0_!8#tVA=@4r3Nl_OOcg%xmqaHgPaJ<4>p^4&@(LFcuxOh{F7NKB{Ccy&rskh% z^*5ezkv4{fD0aqANl3uS4JS*xLc1MOx9#!NBk3=6);#WSW`}#wUtZt|o~*eNOH&TH zOY){+wtTazveE=Qp8cb_>{dV2E^89j@9#FM!fs?w-t`}=wZbCz`rJa^8B+I;WXA1f zsEdJR*+J<`t~jq3f(uu+i0!FOsQVWKizA*#5GN$|V0HP!&)U}pY2|B4VeNJvvtztgk)GWE_Z}=RGwe;(+-R>AxUX#eFKn@Jw zY}ABh^ri9oqDY6p1O6{F5JNGdbuA!Q$7v^Nvt*BOss<56#lIq)Ran9IX8ZT1(C{bk zqnD8>LQmZFA4nU-#NgVnbvrwsTViUb6xXpQ0e^G8eIA%E9*XKe_w5n!^LhRpZ?vxooepf z@$iYPO49cYq)?*^^7XfrF)6Wo`#}NZ%T;w(k&jOgA_Q1^u_P7Z zx$&VGFMlv%=J(`*0mIeXF@$JYeLhrNm{S)yE8J#&aXTbMT^32RA7ObxakNq z;%>2TG-1!s@h(^t;g@7%L&-hIyJ*-yuNwBOpCb~{JwJvaB?gyn zfV-1%R)+&;o;A%|0y!){ob}9-P(yQmMgrbQdCKqU6gX_Is*K3 zGb6Vf9&MJy2ft$74P{R+XtrX@XZj!rY7#_+g)J$#+*PH@?v%Zh))k2a)%< z-rGXF*8Tf)$3SsPJ8%C`R*GQ%kAm0OtA_f`KH{{_En-H0O$S6Asax=0_=-+w0x!~_By`~=zi^IgeQJ()Oz=8`xVBF zMG^_pKO9#jPC+!}+gJxXjDBDxhQT9~+eS%9z+E9F+~Lpk!4O)A4)<-Hr{y^tcZV1B z5$OjAQ(BPLtijXuF-9YoHw#DE>!uCrijEsK^3X%T-Ix<1`r{egO7-V1g+|!S7~SY3 zBk#LOvA;O)o8<+`sYr9z;|D|fYG(%yI%qgg!T`abhHX{hef;#PD-K7_{$X)P_*?DW zaVjn5lPMj7+)?jN2P7^BLh+ede3J#Y;kHR!Y+tirm{6M$-P)ZMOMUtRq&}`hQTKUI zh>ej~VQp&F^&!3WTt`&v=yzN`Z@%_#S60SjPq?oq&jVr2Bv9j}%l?QJHe%$gMvVk`Zb|Rn8-dQtn1*D4@86?mWj2qi_JMQ+2 z95oA)i?u;&t>4i_Hl%kFfqEp0&|Z2%;x(n`@;&Tcp;KSMp$hpAG_7grk!Ja@ZjbU6 zZcGmR4PIflHpx zTxxx3I^yxwQrKYk(!augT1UR!yw>YDu3g_A2VN+{eyZ#)-fYgGCuF{|${m(oTk_aCB-KC0I#7nBl>K3h^H-+PNb-_6Y|%)5oo-7mUygfyDX$PP|4(db z->VuR`u1{C*A?*?2Sf0(tgB7j3Ubp&U^T%X2Vii|ze>-S3ZspDEhMqaBEkhvPr%%D zcXcNed_x64|Gmr}3XAr*g z|Ieb>>iRjo+er_q;89E;+80#Mr}KfwW`w_{b}Q3`UjcPq?N57IDT@6jm&@Q=od5h+ z;A<{9SETt%V93b+mn1h&8+*gkc8SpzoU?C{*tHL+y`z-8?ffq6)jQF>6Yb^r|JqQI z_~5d0l*+G0zfUcP&$G{*Y7f8;9Gr`XT_X4QY9R2soVP+l{Jp@5c?<^O=Sk*m$VQb1 z_%&v~<0pwj!SnvpijA*^P(d7jZz+vmIq>v>$nW>N9Fk>Lcj2kh!Wt=&CSxkJWnc+C1JO~6#e&i}Pr z+x9P)BQD39RSia6h+4+!UmOAvdWQUK9#jt;IM%{l7yP(2;Lj_z@MI?4C`Ws}-ad~u zRwNU5+Z}xEF2|vSx$yFGU4kMzDpNiy0x+ilOH1aWdSa>B%!tnAYEUuZQGtqY$ zLgY$<g7$j{lLEW>&alUix%j ziqNE-p+Ch2KK9{9_WVKCw1siS@~?{oteN_!j3J2}U&9H`v!|%sfGPR2{uC>urGI=~ zaUGAJVA!bN&|?HHy4i(zYvqL~>NL*vJ~|Hsy{lYxIBVXpMGrk(RaI)!zP%My9i!wr z*3X({4MrT~ZXxb)ZpD7XEiZNX5s%&EU6nUjg5K}q6JJv+2wOVf?DpF*DaB%f4dzbL zniEY=wjG--5m7`Fg$tLr3+7JjS6REZNWN(y`lnC3krAWJZ+MW|t*8t?2asdrtAwpg zyupp31?5fbO9ezbOjtRgYw8CpO6giqB{=M8FSq6mfZ$R%Q%kF(Q>zBD`E4b>NL35HfSP%+a&&Wu(%;qO|dsJCR-G;y9(j*Vc-Qr1nsXcL& z#v4pl)Dfx`u-gz%j}%1Uwv4kkA_zZ%>~Fl`T-z>D6ed}YSYe>uk6{t9N! z#cYulS>36qdgGKv`NLs<#c&=+bphgsImFHE!QGH1;b_2axr72PA; z{&oFDfrB6G$-1ODP!yADUoh-iC&Pz^F_WLV3QmmH{^IF%%9oFxH^O}O$c;DmE=a_e zp!R*%f%~YWW);J$68OfuKys`8p2sA{H+!S` zZ1@83h^hk~nC+bqC10G;C5fJ~89NAq2k;N7O0HO?+Hr#uwlQok&!g%)LoAP=WVAnn zawn;uhNS}$z-WJ7xl9>bTt@F08I_n!!L?xAwVU#AZJJ9h=$WICMD&GL#S-LKQ#&gAgpDfp#lO|9V+ zZZgy}pijR;kQ%k&W37Rj3Tuv+e`m{B2FBmG?Z;Iu4Qu2K74i7{S zgm((-FZrce8dvHrV(-#@bBL(Y{(o6I@~o9*5pVuKfk{l`bKqr2adayB8>RMeF{77khJQxyI@g~K>Cu;vb>@E z8(|-+AirGBQ_92=23g<;^mORK`}^MCxrUOS>&Ww+2Vc2Wn5}qM-s&POC1=l5>My7C zEf^b5gr4a1P{wv?+u5N!!0bp|oBrLgDfIJ#D^U~teV(3Hz~FxTd`N9~-9wxdcRD51 z+g>~m$*G)J$eh=Jvt*?5@fRCe5g6~E2Lm3hfIp|#D(=dKq8SG^@4t<}3&sCw|E^Hi zOXcAA(6_ca>VL^Yj+aOUl)+TVCZ;nWnfEWr3;$o*<8#DMTNod&s5lV*?-Gp3 z4*yZn|06qztLy(`pObiQDZJ;gy>s)O$jv~KtG>h?E+40fx!!!K-d<+FJ7qkC5=#gW z#4p@lS>+XvlzJ)LXn#su{N`--b(50dE=>Q%y-E~QwoW+N+gb*6be9oT_#Sjbd|-$| ze{a_`&4Q|hKMe^AVOl@0CN3>9B~-6CI5sl-Mcnn70xp!NA2m@k_EQi^%E|z0n86B)J=jZ3)aquGPLo?TJWK5`AV&Ya^jGwWtb1Kby z2L{L`@Q_So__n|;Ec*6pr!8FyZnrK)@{0PJX?CzSBc2SvHX88rpzNkpJpJ*oY`+ML z31AMKEm!AjDc70?FN|!W72nI^B%D&WSD>X_+Bz~{zzAa@u|b}gAZ^k6htqdfy_$6HE)m`<0f)ONUHA=6lMJKv6dGMHWV|@IHKNK~3 zE`-bnFdDxssrK1ywCGhMKCaB@S%poYUi911eu-e3REJ(AM0JG8Qk9${jn*h*k(6w7 z10{)Ad&!)|4s2OpmT*L7?h}!rldn>4`2^DkCT_)nv*B?lK}92=cm7LD5>V7eS=Iu9 z#hN7QgmHV7^(HfOZ@La}?=)gNrxxmw3S6R7VN~$-MbLiGW3%(*)98!lZNkyV2npFU z`-3E(Lo7s6Y4mvwg&F9ntyRf&4T7>+kQ}BlInfiuMB3_LBWRd9AO zb_{iJHVcdc*z)IX-(~HL8Vr=^5%O>C$0_tFE0%8{!Yk>q=b(jo?%BF;&)-`!t*;V99_d_#1hUY-hl;4Dq>w4-rjCQaD7W9TlO$O?i9RU2inwAk(NTP0Pa-D{F%Gqg|D&JYkee z>GQHHz2`4YH_cEO(1f~$PLB;#Js`(Qa( zW8==@Ww$Q?;$hC^suYB*5k$TJjLJaE0V!dJY&s|E=1s}^RYd{d+o$!|St3dq=%1)V zDm_kK%BI~`me0P8pNjU9vFzqT?=ZoTA%HgG@I=cujX=U}dXv6=oUFD#=($wy<)h(G zL$Z)Dld%gRqC=?JRYV%sO#_QG_8X=5VYTv*nZI{!?KV0s>J}&=Qg4~Kp?Bxx@qU_| z&KHJ%Cj-*2&ZaR>ljg4TC(~_=|6c8%V9t>ON>(sMFX%J)(H$y<_>-5_Qk_79KgRrG znnXYs*>4zq0TWnhiaA53j+zqQ(QjoxO9)}axz`CESX%p+z2$Hq{630iH#Rp1@#D_D z@R^~T{TsZCaJM&p2c;x_`*s?Qh#~2#AP^=E`t-g{^735O66ue?THGpn3@An<4(z zOc$IgqT91Ej};K@fa?GfB4I)LnMbq{$|Ln0@W+0{8|O_h2J56|=VwJvR>& zS!I6l*DjRGgn@;p?rRBc{e}Xx#QYKTPjZ& zY&E^1Ik5ZN>dThuN553xuH`199h^)^Hy%BijhQz=VJ&)I4@F8YIWiI8 zB%z?Cb2V|ulSD`XmD}5AwOWqKH+x&&OvDTz^8QkNSmQClp~;+8_H@*;vUOCwi;b4w zBFE&maD`6P)>d8hEyOFS9=JM*$y!aTBUF#6)YfnQ7LPMFOLni+0++Y30h<EDmpH+eJEuz_7($5uhZO^t zk~umhEVTg!EeYb)OzxsyfQ3@i3v~(X8#I#HX(kd}2m=rr$j^w}8kbZ{0`vq4GEf!l zR7IWP%$;+DvWdcq?bpu(lXc0P!)h66X;Jq>lXgxH@t94yTlhbi-qHQk6y4Md^@IXJ zNCih+2ZoivkR1^Bhit8!DCw_IsEeAB8I@u+<9B)&LE)xC)%bFXAVxD62lJ-o4GLL@ zqW2@g;kXTqesuh~op8V!;7rb{V!G!Pr5Fh0a~~!wTyxoJAQx=Jt0%+NlS3qH`yuAI zp_zBCXO8>Ub}OQVS86>Iu$J^iaJvDIhORD!hU&Rzw-q%~W}puVDRgWlCOJ*Q1fyYY zT*M6Td!tre+FuzVL?f~ahmY1yGr@m%zC!JU6ZB*64wZlsKKhCU4%9C`pVRx0J*Nbx z;T8*m656L`?j$~P@K&sxIuBWwUl<3G2(9c8m4DF}jY+tE2g(}`QCF{hV-gZld3E5< z;@16vjT&k47b~fg21F-}#yc9c4ZFbILlNkl9!q^{`rr;8qDccnZ9Pw(SO}=_(?@6$ zE+IbGX!BYKf2SL*y@Upa8NCGIB6#H8d^@Wvz5Pzw1kU_k)+eq|SqbvQ{kjDm zgx=U`u(~-!w1_0K4o&5e65~JlE}A!Ym`SxsWD1LjzJZ$s3@d^vL~QiC1RgSeQ+~&) zp)c?hP}afC)J|G>i#oBE9zL&yPML7!d3WKOiD1@jYL)gUuIskQ|C z<)(Z7ME;aiT)->^n9}?~f9CruMp;yQfG{r7EGI0yopzb{ef;K~2UCTs-%M0MDy4Qi z65m}`hqaO(l#MZ_p+BSzO%_VMRFwU#{0-k{WhZ_Rw8DCH{um><3`D}`oPH+I^it~h z2b~#Jcq1KTYlT|b5*O`oNan>K8#pj47IC{ga2aJ&)7r8&Hj3-f5>SJzUopFdl8)(f z=S&0bv1|j&hEP`(Y{;6`3QY}BVtcfWp!+F51*GB2be6u)l2D7bS&pni1_4$`gxCRV zzPIKjm(kd6#HH7bTKNoZ9@RxJQBA(i>r6(nB1_-TAzO9zvJj0#&s!cM!6qz))xjA| zs%aCHJr!CBI^Fe9PJ#AiIS*HZi<@nBx@Wa02^K#{I+$G9dnr^|zSo_2KWZl`ONho? zh7s_s-xRK`4EckLY$q2N|CaS(7Rmg8o$QhQi7(^)$9k!tcnvI=O>}|=)L>E`ff1IS ztnPvV)pMCaL--5MoGEN7Z9xwB`4WU={gM!J#DN}{Y#w*WorLr6p+= zPwST%p+|9g6lum_Vf2ciMQLC-7j~%|yo1B)gwnpaFo2zv2|f`(Ve5b6lt_y0uj}fQ zh0ohnMSW|9Tro+aSL2>o%TGC$0zY8dU4^et>EAaL+nH!dA6)lAv_jV39*?55#M{dQ ziwhU$&{pGBh`9m#!=9+@hL(hv3 zZta(K15Cy z7QBH%7Fxako$JB-6%87CdMFZIWBDM;L4R@)=&a}n(b}a@k%855kO|TjW@8QJbfr1< zFhYonGrdt-!F5W0uwOPf)NNhb;Vzz(Lst_vr zH5F~NI3=qS6$v*g2yjx?FHy$7A*fwepc68hI1jV22FR#qh3Rx_7}kP~t=>52NmLlU z9n9QLdcWP3tb&kUj#+g(b$MoB0LO}}$jyi%mAZTBo!m_vB8fnn)=!AXN&Yn9+{+>t z-j52y0;W`tx!bc)c);N~S%W1Z>0CESxwvdYyRtYO2yS=5w?1?C6JpHz^y>=!fd@JZ zK5+9RDMDYf%%yj(FpF#ueo(Rl`AiqNhhN`7o_AW9)lUauW+L>48gj5i{b?llnN%nu z+4c0tJ;J6U&AGaA&l^Emg8b~aFh&&C_@Kg|s!9cXCt4(-}t%b!czdfNpIfeyaF=w$PxVv)9u=;y)q+oL)k9b_^+rN<1Pb#&cNH@F__ zXq#NSy!jM68FiVXvI!3aRTXdZDVChZ>#s2=4nx|1TifQ8qF&li9QL(OF<$jC`WW>B zHCU^F*^TKQ7^juP{UU@5{oF8x5cc15n zuk}ev>$VNcgwLLaIo{94!$~$qnX1+8$IX2`H(aTy3-wHtk&hK&R-_&+JT^`Pb#to| z*tc9BrKbOgKZa<#xp4vqAqt8Z^rx8v69YYuJLiRKzwfY+Rz8fYW1yp7Q_Sn>zb9Lu zHDHeDP?8eUQ7R6)nPQcch{y9hwv8TbNg|5787rMPyj^H@W&JWV&wsOEG_~%-%vB|r zpxoo-SLM@np2h;~p14Th=71lXQN#o!SY&a3CWkkR;YypaaNwPGnPnBO?+5*l{h$kp z3#K!PFJ~nysGgY9eq_C1_`&**FXH>Lk8@ls-Nxa zOY4c)ZL=-%N;DCFGjA06znaj&{9PgDe_MM0XKT1!mH>SX*ztOn>OfktUT-JFkCAw2 z@OgCoSx`XE&)>G3^!@ACH#Lj&44f1ceTS|1F)-WP+pD@^8JIXYyH{?Cii*T@FvstD%8ww>6J^r&FtcY@akg%KLGJqzgiy zJeHD{7FAVM)l&nPCnY9^h61^8=Z_CoSt_)rjUz`#*1@5n584V^M@~G&YL=F?j*gBX z(Ea_rxw&~~Bo-Y{UG&qFH%Q3P(6D9OweQ&XL{~{mD+&SnG$bJt2X zr#e8V+1c52%i+jKgoN+kS22z=($ixO4lF@J?(Xgd<8l5ID4uOZwBHf*eD6)->LfKa z@e`T!));&=eSHP`S#4mzlWVhozashOfezs ziyOST9UL6wru)XDrhnVSfBhN=46~Kc=4sQR1mook<>#=fX1* z?_ZmE3l9JL-mxDsv@@1(tl=4G{Ov%y$@AMJVnq|H%?+YKf z6>M>Fak=F|7r(a!9S;X3a@W+fw2s5{m-T*mKYzOGgf7@#_=v8Jt;IrAY0EFqUnl3h zWas3F90c!=;Ud9^iHnm`QNeO^bFVrEAcE*rOXFj&k>7DROQ)>;-rdd3$;r_g#$b|w z*x2feQqnKs-}0oSr1X4xi|pP$aTNXY=X)BG8DgC_Pb|?e6mcOTknKuiKq{x*)-Y2? zZ!wnq1nAT~gKdb;N$>`>2ad2p8-%U@~GxCn2ihrw#l$G@& z!~7QTYA6^Osb>kbKn{@o%aaE%c+*VqQKO+DtW|LE*RO+mfwB(f6qzYkWF#c#LoGU5 z+KGt?l2HsiyokZUkNYliawsCAqISIIPB)G}=5K!w>(-j11K)UQYtKwbc<)0sJT}&! zBOV10dA;^HDcB_(2M zNmC|;69WgDaTg+ z7pINR0M{Dl-=_n8eV_cI^wxIA(xX;Zv@tO;h4Pd>3FkFA?QX^SJ>{}@aOr4|1E0v) z*pzA2_{@R({xmsV?;r-At!pfu_e(}b?8SxSf;9*5Q^50lHz4R*(s0+lXx$H3038c! zyUItcTss0lCf?a~47 z;`R2@1$^+GcE_$4|I^)gi&-n!;yeAN;x3kwTe7DK2+MjeDar3k=rqH$Te_qEAQU&7sb zf4hzKwzzF^G-#G3^Lugp!IfOexGezG8eNa^i%Uw-adF{5$%20E^SogfEs;^!435PE zeNi}hOx;*mSa9(0UtVIPql3Hj{bwy*nhzTcdSER0ljt=9FL%dtv$G*A>ogyt7l_Jj zu!x8lSBJ1p4|H2xWq;+X*O(%ck&`Q`s=B_@x?8h9oMV83hR!Z8M?vMkLMzv8izF2d z-DrP2Ib^=u+T9K7@0UO#;=}Fg>H-A|DOg$2Jv}`wJs-uq<7Bp8sI=9JJGt2iLiO|+ zH>~DOuIjYrwM!^QpM3@R!rS;fV_j9g(h zRwRL_@Xr5iRk~tc+Qj{r=Q3ckH;|BuIywv{WFDHFc}g_b9y+7y2cHN{awF#vi;9Yr zcn3|)%#8M@^7xfF=P%O_?~kAEFX2#8VMzd8YPAK&zw$KVxJ0#tU-xol_`#-sG?76I z*d8@t$6qB%nX;_=`0-36?fGyy1Z z)`xXX*D8=pkIzLc1TBlj2;&<=pm42A1CnIT%iV8W3=R(Ff}WS9{FYEQvG$NA z=tl$|h#R;&2d6XM^tO1`n2m>a>Dz0{PXdO{8&^?N^U{uOxXb{S*l^&*6-8^u-9bsk z#L5bipPwIqazJ#^-$IX==&%i`nXS9)BU78t3W0PmE{ViY>f&O(y>-n(={+wp=6e5yruoubkm;e*y2TLG=RbT zHH0QC5xaUG`C+q`*9*iTkxa^rQy|Lz^wHxRXVk3yc#tY~@ghnjhQTI9OG}Fe(9Ei_ zts88%OTIEKfafIAYmk{3XwoO5Xg-g5I|AQw?enmG6==%2i2{h} zo12?*yXaAUfdEG&8g^8o{SK@UNq`apAjS{FDH%(!&r#L^Tk>erFYC4BCE*EhG&lr= zudMXHH7Iqe^t;}q0nSq(pXvITv#J3TBK`eRZ9hzQ&W={?4qH-CJ74c_ z?^sq+a>%?~ShMZIF0WS2$Fm%o;l3nL{utZPVq;l{&+B&L{A2Dri6nprD8vFtAfljP z9n$)|2LGLvCZ|8)B_S!v>$tS9Ed#s~Dyfedjs2CYh{!D4Q;yGgWpkWmW zJA19NNztrj#VO#bIe$=uQb<%ZXj*)s&T2mG*ITAmiD+C>osXU^xEM?ekdTmhh=b?g z0Wjb=Q)a!_t1WJJE#UW`)zqZjLbn0eI@Up>{VoNtIge3q^NO^7(c-KEI(LI`qGcA!z0|l*mq&HKa{&8Sq^NZm39gG?s zCr3vGMMYAR$6q=?qu;Xx(6 zop6xH<<92WW>4j!HKFgP&(xSxV2*OVg(OCu$l6+VAnq?6?)F{qL*tk0GyMHd(2TSS$!j7i1){tJ;kJF)?O&u zIZ{U#I{X9yj*+EWlHR|*2z&s2Tx0{K&8hh!6#@=6AZu!xpD-&b=0?fKr`^2wMX;h= zg_b{dpLC7%=)j#A7L~~P(GdKw(sW3!U5=xhJ_+#2Sw*5+^fIjm6zN3z^B*3-#08w4 z*%uK4sJFUZ5;wA`2fB-hfw0`riYEgF_nRfSG25iMk6!(eG;#bVeC z$Iih~&)bena-_AD)$3SRR+irE9~T`h2G|%t24KnqP#W@>3JVMOoGZWE#^J_ejiUl= zByh;M8wmC*)tr2aC9^VD?)>itzY! z%VWlv)#acOaH_RGdChW3TUJ7Y3&tU%De86YkkOR_6d$4x+>#7Yu3IXVprGC_&1Ez_(t2b4^0+i1fHzL@t0JOJg547O1*=hsHwshRbyu3UEfKkigWNjI#XlQ82#f7{7F+Y%Xk#KV_ z(&UODK{=bYqRS6s4q&6ZByd-o3}YAEPftx{DNq9@%nL9EV&;{3^qqSw*Xjqb=ue<| z(tM@=&4n?*6u7+aDpkr02D(%M8p{86Cgny}TKe1E@G{tBZD+B`sbJcOe`sh(y~&Xx zUnXUXC2C0Po$EgXeI9CS*D_e$08eSHk2!Q)wmKXck+Im&uZopUV(bIR!C4n9u{+Y+ z`Ud$-fX!MGJ2a)Fq)c%r0WNP=t66q+m(@ye&q6ZC1Vr*5b{D^grdWSJlAyc9Jk68# zI_Lw@WThWcz1lc}-DWaJ96)I|e8GJF>+9<&CVv3wj#gXdkEK5u8j?*-O;y^h3ltFn zA$^KuCF_~sNYCz%6MEU?ZY z(ZV^90zii zynsTTM@u0%H5u8Ky?sv;i{?kmU8t4x}B+e`~t_ zWUEYvB5g9>X?eMsG^aFwLexfQoA?Okeu>LTX+i>~Md$hnkhsJG3X_{fd==1A0l`Z~ z7Su(8{A+*M`*^p(r%b?S8%R$YeV=(i`gdoWgr>{knHILT5&)Y&a^1Xe>GX%dWj99y zm_5(uen2N;HXcNqnVlu2p&8m&%lD4)uGGqDnQZfJZ%LXjjkF$Bf8wR%rJT<1)vu;A4c21h_QklLZp@SG6FpF)8$gWHkT5d)Y z`Hw9BqwYRzkj<8h>yIG$=lDPJI~ZL2+^}82{m2W)Hz)L8|5S_Zm9yw~f^<=DvtL$T zo;_A0PFz;;8}T@-)!ndxugm^(%vAipty%xy@>?kWCy5bp1+ax^?quWhY~ldAZhJTlWDdNm zuxR&RA0M0Fv@y`qB1q(-19Jo1?q+CA4yhE#QiuU$ZEHRPR?|-)UI4h>aP5&g3X?mz zFk1Jf-g+?*0Ey&LQy^%pxIWts0P2UAjfU8>thhMzl_x)tS3Wk=y732f`TqfvPA50@ zD#MVg+fd|pmA0$RwhVfVfN}_A9+Jk!#tq+-5)z<5f8ba%=_LN!x69W>uZ{)Eug<5h z!_4tWNLH^Pim_4-U6WiSGgX$VaA%3RcTrKuq}`>BxE}8@DL+bojrwgEf=Nt6M%M=W z1##E9_U%oG!56rCGJ{cQCHfGV9WoZX(o)|<0{k*eKHb`}6GJLkN5eO4LbwlYgIXVE zk8PLlB?&IP-v>|Y_+=LRHXjrf6ho9=fdO$dJ122i5vKV&>LdI^A5a#~t10QwOU#Yn`M4CO{g~zfZA9-tU3&+ zDM0qsOjC`v4r|-s)ib?LUX~0Zezq!eYng-{I`QUZ@C9Q)m@--8`e*Jna&x9sXc;-^2eJbzhKz*kR%Q2tlyeqxhEkxGJtn567f()3 z0-E$u&k>B1m4#g!gxT5JdXXb5pkW3`PZu{{CZ^by^JRG2`13lETM!Eq7w8=h4GkIS z>Y~Uvv^yivI`|V6&{2?%y;jI@QOz2N?|<;<@niJJwwKN#uj1q5v%i>`nN4pwm%4W+ zizgT2DP%-a`KV4n*aR;CCW9Z-;R`|MI|vnF>z%PteaK<_9-_sD-ZWX4YO^^d5t^Yj z+3bxkMMXvf8lAyy(v^eb)CAr9jI}V9SA=0+lm=qnaaKgvN#(vEhNVN+e>Fd-K{uQ^p=sS!DqI*}KIXXrw zS`CzH-YA{0dU=bE{l<;$)%_n6=&waz#Y8@?LX+xyVo(b0H$Lf^>IQTf?+g?b_`YHn`s`||Qb`Qz)P*zl!r3JC?J zr!xV?Xjt7#&CL9Rhll45QzU#Ii1IbV)Y(a4D{eZv5+}cXAYTlH5vvla@H;P8?@9=^ zVZPZ2Kx#e`?4)zSGHar>?VY39unNGlA{cEO{FEmky+0JT<{`Z}h?T{^I%HO!ub?Gys|+byf`JLlu%F~pMb;g>qy*I`#x5W>lqrJhb-D%-vfxGRN6!MfjxnZt+HXJwzd|P+RF?BnwaP$KcCBUVq@QY(P{sO z76d6NFiK%MqMie`2f(NgQ%Floi=2|ud%#SZms0xvecaDFHQgQd@O0GlnA@;JZ|%3i zLBHJUU##Y{Qxg-Rz#B;`rSHDE&r7*rq@Q$urM$p>L=?4obaHHMoZZK884q2RYZ?Z- ztsp)Q&byi#T37*`HYOLACm@%zrtVG>4Ngg+gA<0Krdi`j%@oOU&$#nm@P~D~vIEDW zC#)Ax$K`{AtPbMs7kG9*F3j#9xu~_7-X?e%&}Hm1VxeqtVcWIp`;Q-fJxdL1YwW0L z*iSYO-QmXtQ)HIaL{SkRX!y7l|0`PYSDBeCD7I!Su0)9|sEP@^z8&?ii(u-rCG!8Y`Tdhht&j=!;pbe-2)tvrKP1qT|r{3 zg$dSy{(f|Lf0z!>MgYc&Jva6lhF$I1?MQfMrpVs=h2$=W+gBm+e%{n14K#LoeXN9; zg$42$_jgaf5d4`7Bed_JiNo`S&haeSaD`LuY!c0s*O@3J=OtWG!@8RF8bd3n4SHyXUS)5T?Q5$_{QK{;KvcT zjQ3e1BRw6^@XbA|{8Xb|jo@z5(3TmS*p{xPrp8^UkOs zmI8%<7aKRZP0=;nN8{z^PfJhtJG<`s8NM{;`T|P@3*UnDbPPy<++Pn(OmyX%6XN+p z>Gnl@Jmv7ZZO zyDpQm$U3|L+InH9XPwVb3Z+t?+;S{omSO705jd`r4MZLJVSTIW#kKb|c z-VGQSdKVcldK2jR^lWX}R_hN;P4!&!4V1d|Y~emO-^V_03Y;$@Xy5$a`ubjwR=2RT z;-x&))v>Pc?&BiIaZiP+)rZa3wgQ*QX=!`h6e61RXV9%k6(bm%gqI<^M=4|ErAiul zdTMjU-c0DafZMGms8%uWov2o?{7fxw;Bd^MxDw-){$dNQS0haI&8-$%hD3$Az11P+ z>(`~Be4Hfa5zk{Kl-Rtz&5cJb)R;>xWPcID75B9?Sy)PG zB-^DKhGg5QSQC@c`ue)P%rFLgF|h9S!Y6ZBn4Q&+u9L_1sjCgGkmvvO=a@Ut3hTyr z=iKt00{6=go(5Mj175ajZiV&18~7Mmv~FI3OYZ{noCvaVl_y|_#K6St z?d?UAi%@p>F{pkpFeCnMz5(mF2S4&yr_G-Pc_5oLF*=&G`W?`|(vZQqy8V4$@tK)Q zYzSynT?M*fU|}K8rKgzDf3TQfZPy&w zGG|jUF)qw7q)Vl`h3B$4E!oZ4nPrmWb{En~xTeHOH(g-K52h=4+}zNhn<}rb?|iHP0l6roCo=VO=c>&GP1IT zOng9kX9&|K>#tI3Vfj)7K97nL*qhGD$iOt|e%t2qIxqeK^ZDSWROgJm7xSH+A^Mx@ z%F5}gzQFF|mtF?|e7_U%UXa;{TX+9b;CUSvW0UQVdX^1LZ`Sr5$CwJ;_N|aGz9(6H zX)Lnl?9>hUUxm{~H^n|&d4Q;jgL@E-PQ!l$=V-*-$)RAU<8^ZLd2)9pOS&cdtkfIA zKq)&)jh(&Q^x|uR`mWm$D8|Ocz34UV+@Abe4_l4BJu$4M$MNbLq-+>IboZ=3tC$3D z5N`4Fn3`6ZNO62{55|_a{rwnzJ_ZH`3IxRws^vFt-ozToTh}OyO-`1D z0`v1^oa@=0vscPKe}0u*_xR#auFg_3BgBk|b#CmOgF|VU)8GxNIYocuc7gCH`zNWY(OQ zG}t#6Z;6VN17bD%*n|StM?j&xZ3H??F!CkYI|{3+wD>)M*+T^_8y{03Q9)ZKCr6E% znwtFbX!T?SM! z`Cq=Ahx34B2R3&2<->=o6So5?FnnIn-eoVStknF9N^-d^MNc?h<;K5pYpB9|FYNU6 zl->HfDto${!lhu9@8pqRjm^yNrW{?y!yLkwzs6Yw*=s@dsZrqwBp+p`y?qr;cTG&L z%nq^^AR%5F17&#vrI(@5wtKHWDXV;Kw@TVEVY9!OGy&sBLD z3HqEIF-Y=KsY=Ff&OK#d!IzOxa!WTZDzcUf3YWmM5hg(R&0K`a7x|Qda61nZqgT*t znM+WRMW@WpC@VOhiALO$J>wCJi>>WLZB5NLk2BvK!Z5uAsq#aFw!M;|9&t&(gy@m(>Ts0<0dl0@Aw zPzNJDp3y^NeoZc0vlpUcV(2>98io*>(vu_#)d?@jr;v-FU%h%YHX-4*xp~$s+vD?+ z*|b~OE~|%c?YXwahC-PYJmI}|rVLBzE_z@2`-hocssT6A_BQhVfBigs|9ZynpC??o zn0kk<0r#K3N)kwg-}0mS*AcD+(EH->|Lf(F1kzX(R(~HKIZhBU_xRrjM~*|x@}JJ( zk=S@^V>PVttp%0ga+iJ|tFahC6TCE&w;T(Oo$Mz5nDsEZjmrer-w*G|`$Z|} z|L*y=+Wb$xFswxmufq;yGCkRR23&rcFiar$$H^^oBYoQtv_X>inGM&!0SyJg{;^Za zc^}CeK9Ki=&Z%*3%OOgZJ%)MJMxc^znOlTLQ8^yU-4olLQJ!3|RREHx_{{6-=H{Yf zVQxN_CzeOuws$#Te|Ae?bab@%-Ak$#v%Mzc8N0IL@{1c6Zp2{2`U{0U3HtEi*SuBQ z9Jf-w`n@j-e|am#yM3Uyx6TXm9GY|0T_HGb*#riEv9m2AzFYv zrseop1hsjFtp|xWls1|mpHLyOc6FuH&L!iw8m|SdNl>~Ds5%0r>>C0WaL=C;QON&h zPyw32gJ(%$cNibp4C}Y7?rm3pQ9mIMl=|A+`$GJ5D=dLEY;Q#|T;j^Rqql@oTst$$ zWV%`8iDkjWZif$0di62oE&pMMV#CPP59bL_wioIe z^R%$A2)R(Ldo+CqkP?4+YZ>+0&t z$Lj%a{2WRW!xqK3_i~GhqRvExg)4sWPFOkB>5aS`ow3PgO;Q$$V60o($q@|I|341X z!dFYCJcFlzrcvp%Db4O20yP69@M+{MvhDq>n#I$nl8`1{3T%ugT@SEelxwH*Tb4-Z zD%Nu~WBcR$IbgZK#UN_DWp2Kj-g?WOHe1%~hkd0sN2l?#=vTUP9H=~1cFh_{dU5da z(NPM?VpYZy+cuNFiXFRS*Te5XrYz3pl|Q}~xAx)dVrwjE%s7F8gJ?+YyZR4h~yU`>@?UV179{sT~p$ zf>O;VHm7*f+}!;2clu6G6NcnV87`3dyzhUCnkH&0F6N7sXG;1!%6SRTpNo&r57Eb} zQm_~B0!9E@6sF4FylR@S>YNDaXYd2&_aAjMG!p3DRa9a=XG_5pfI-e1%2%gLu(Pux zqF`;!0Xez9y%0hRwr%tirOQ5byqERx5JkN!E298%EhBJQ``NEld3Y(3XMO&BVecqPeaFeiw>w>kl74Zs=h6d2`ECLxT!RMD6`13wRhlL403tt@&i-`?KN$;THRMYA(q4&YGp1{rWb=LvbH z$Ac?Z?gbC{x4qtr0(qoyR8(8)13@QefD}X_g9u`*O&$0Z^AbVuYhFGABA8qU}o}6kx}VGtJ04j6G1*s zvM1tsT&hnnjvT87l5jwaA~fbifY?gLx~{F6QE)Z#T_WtL_w4EH+;mq<*x%c;Rr`e5 zvJnr}{M0XBh~cD~0M>5)T-T^{-NORD?F{ly1%@9l&@uBMCRB^wTI`}iJ!kJw)z)r? z2kjQA!dkYLGm`DnaPv}$tjA09xkxlH51C{FrRXy>TQ{pbV?#iCON))pCd360RF|_B zgeP(GscC8G6B84#e!~P))zqAq`SKrepGrx#j0t+}!GQp*G{i(+>DaQevNs)+xZ_?j z%9&bPDt%YX8u;W)%NQxAbwUv+MG)M?d+qS~HZ>>*P$n4L!{{8+XFfkAVm)+ z>CRp^+15$rEK89ieze9DcQVGJS>>uE=D0?F#?Qq?2cen<@*n(X5K5{=8y)t2xVPQd z_>x|%;#x-m1den%@bqY-xQwRlQja4({A=l55P8xmu0rugBoT=khw}}#p+In01##$> zy=plT5s`@4k(a){w|^DHoT)fws&AoUwNp9ZprX@rmCa!^``GN;p;oy)3tKk1%ykuI z@jX#4tLp6>K977_%~Bgl2vyJF=XNLi8m+gM!tc3Djg99OZ)4|ED8@)8}w6rD+xaT>Nae*9QmFdRDe6t8hyXeW_|hEVJtTeQJxGTBu3G}wEf=+Sco z>Z7@BGi&Rf2&$uG--knwUw&X|f7P_(EK*qs*SlZ}TzY10_pZY-C&f>`)Q8ma@_faNmR9_XvP$&Nkq`g|afi!^52=mpKTX58=V%jcbZY zt(i|)tt)}vc6n|uiJ!TUe3;Vw*2CnpM@TqmvO7zVx3yiqg&@&LMqNT zhkn*2v@iWh=vdHCSR*Hur!dkz5d-J0zPS9hbaa(VL$AM;r z+q_L@RqIfUe$>oyo`S!&oz)(|G0@n?MR*V(BDP0T>JOX zO$s4-+k|7;K-uwWM5c|-EC2cu`wFth!-dE~M!93P{>T^_-xXAq>tZl14hD&`seYDkc@pYCkdU2PRJAJXvS4Z}5el|X z-W`273mWBMDf+q&x<~9;5#px@4BC~>FT%u6$(QXZb9HKDo<3y(?zaix=dEr3GA|@f zw%@Y=tl2)4T&xv7-%qa3u^jJ6I)6t*tY7 z>iJM`jv^u<@R2{Wk&%&Y9WEs=g_?7cBT<>KaEC)0f|1nA%|wN$p3hQ8-c!lkuzqxo_tSduqtVj7NPMUTkjsF|3U#X0)hqzzc8Ry*lWtWLH8Ako~9NS zPb_%)=!a;2cHISM8=z$L1G$I6mJ2ol#2R+Htqz{ATjnGIESYpjq>05zgD=2`M7>@Ja)**Z_GYKFP@Mc{R@%kW8~U8LPL zu*s+_f@NZE>B*#m2S@~Fm-*&kf4|QiMsLU)%C6I03WQC0(`|OFHq`y+Mw{IzAN~3OZ1Ov(ppEs~dW} zPM@J_Yfkq#K%X%O3#8y&wdV;X#1&oT)h0bOm7vct8Ha5S%2>0jxi!tuC$p}nlEu#w z*Tcg@umoqGyLgd@^U|RnhUp*%Bpp!BgFp&2!|iMaAhL%Tp_+uKb+Do-s7|-FFJX0H zB=wZoE6X9O)p$j5>m)@s#r1Kn)yleB!hPV4wFXzJc5ecFR6TUV-QC+uDJXcPH>^U{ zt<2+jx==T@Gj-Tqs<*=;T9(g+vl&?@GePDw%GXQ1YFntD+WS%egP)7dcj{SJxF&Bg zEBzYupj2U#n{3L971Pl)7cj{W`;wbWqdr%X6DRq%o8LJNUVWd5fQs~ivq<-9n#sj{ z^&EsdA54{4O|+W}nt%|oe%;aBbru45-yw{h2XYzxmF#8ntdzV`X)0oT^d5_P2KlPQ z>u`{=&Zc4_IDnw&D_EgQ?T8mXOM^%t)uJp!1eiUNR4~f1mfmj?(<>PxS#L5l%vZHP zdJ`~VrLwCb+Q`?-N)~Bdo$LOzZA3qR8kpg+by4NEXpclO9znX;_k2b8O!qm+ zfkBUDDEnxibr=yd6_d@X7(-#12ecR$NF>Y(9m+Fxk;_-~dKX+{*J@@$vACb6&ytfmQGd zX>iJ?PeD3o$2&b-Vq$m@=C;ok%2oE7&M$}pDK%Cb*yBy;3Q}^^H9E%&>xsmb+BpYD zM^%( zQmj$8Sfk*V#=gFYA1RGEP_@9nN~)%CCen%XqU5#31=}TYc~BdPvlBdsoqP^6)TbUzzdJ%6P}ZqXigRRwlC!pXfhb! zBIbVZT8C`sNpcrMM?q@!;pme@{MEVCkVYPrFMUKuZ_2eA3rrL5HMZwQhn8O-@K^y9 zb)iEou{zdYxrU%8;bF(UtkV^-=9SEA))=eSvm&Mze;JNtsd zY>KOE6gSJdOXb9mgsjUNdB#-Z8lTM!dk{KWW_*|FRW4jD>=BEMBV0lhR?4HV1J3*p zjHqr}T3TjJ+T9{(det)bqDkMyB+IWXiOc)SHeAbad8U$+YwArs4m^z<4RH35nQyIu zAiB24^Jih@Bp-V>BU?%ghwF9OlIG_-iK#@MKB)Mej8~+^Lv4vC`W5!@D(f zaH(mEY;vibunFJgKY~WW)D~Q71^Iu2kN+3oCasmBK2rZSRGVyN{Npz$)gQ|WXDG} zXGh9p1}%98qE-+DAJzaLny>+Ov~;pp5RHZ&TsT^A!AJ7EPhIxvZ%(@DEK+VeHaZHp z30vWrFo>WgT}Jlii$;ra{2K(vR<&x|;ZKM!4Uj4P6c-oY?>W+%m#oy#yfLIqHd9r* zV3z{JrJo@?zU&I6EClAVE*<&?@goI$Z#cF4`6nKT;;=H^tEwWxt zRaaMgZ(nEZy2DtYw_IiZD3h3!jO-!k=8{j=OzwPmA*GzmZ&jC#Kro{Tw zk=qr5Y1^Q!!|_)LjZMy6KR(Xfa;>W5aH*P9Y6_L2hw!nM_UxeLew2U5!f2k8`V|7^ z18NC^rp8yhrBBVxeL5Dr`5GD(rwiSJXu{Ti5oAmk;;&whf7-A%dxXE$+ za&EL2Un9nPRcP_aH zQ}+X{xa%(BZV5VqZwLau1bUu?EBtrP5w64X_GBp;3zdg)Zlvq}x;w zQoA&8Qkxcz6c0Shki9|x^04W0iy{aOFM3tVmnsRbGevQ9ui#~b0{;p}sMLdQr9yya}Ovv|L$$XNuhW-1I=Brwd} zlAt;8TjG_8ftnOz13VZGdH&fYYfze;o*d+T8KLf#{;SH z{8Mop92^APezMny^YXrg%PM`jig#}w4Fwv`PVVUZN;Kvl;7z0>4MsyjZCJNttZ*eg zD#khIH}6z_e|7LGInK5tC`=mQ>Dqa z{DsGM8>A_=YUJ``6gGul5)u-2+JlD0{)5<1n2?Xtz~{29?q47h7yI8pB!q!z z+45!}IfSbcBE#@j;Tlju!i(p@uSw!_gYSxgk0gZj*Q6~7T1Q2I!GVPqYNMr28#Lhb z^ap7Qpv`Mr_wV0#Cur$23_uszo3{S1WQG#QxNWy7b-KQUuEeDKhwS-IZ@Nn>RP3*W`J>z$_|kpNhNf{&*LuSTU}lCfpY@byP2z0 z0*TmZ_gKgU@1pvZu3trza9yU1ItvG9Y?vpn!9tPn)02xbv>c-hc_JR(`E!*Pow~Sd z@`~%!WlBL5hK)Haou!vTWe7uMKyAw@DjEut0T_r0#eGOMZ)jJxHWUVm?`Z2i{ zai@|$R20AuZ$uHe=2($BH9zX9bcX`!A z@wB2M5?ox|AhaW>EYh+U=5Utbyn(X<7$e~Ei#H~RQ4W4(W@7`9BAj>w*v86I+Kdag zNIKT*f&T=+2cL%cLk2`)t3$bn);A*J5==l|lW|yf7Z!{z3)u(g2-|-r04B6!6$ML4 z2e*X+aFF-!4cDVabiqWEF1VZ!A78(e?De^{x%h0kiB7qtvl9oTgs(0O*5g7hb`jJ= za31hQnLd5`V#EUEpL2d_{ta~wtKYs6XDer=PhMC465?szJ2E>jb{TJ{^sq8ERvVh6 zh$wK!eRHQpv2F0CZ>&2C5B0Yha^LgfZrt}bmD)LUhp!*lJcwZ8jf~g3LRQoru+N_p zc(#bc&uj55`i3YXQzT3j4d2@U<>F()R}|vxq`}5QZH5sYgD|LtxGS}-AFe6DLBZHJ ztxT52JRDBLZ()upJZ7Y;``oP|Ac-25ruZa5)Mgj|l%b0#a4J-2Xz1|h?XrXFXS_6pi6-n>E`{HK*#(reOZBf6wyuK^8v&fG zf%a?Tz>z#_bn;K6wPd3gcXz*}A2$kRK6LX(jU?TN2>{ETreoQ*e)A2!cl>ekV@91~Ay!H@DGoxy-dp2fEUTHyeeem`Bw>#s zw^7sv7=zU~8Z;e11%*Ws6re2!x42VZHjkns)2GN*W&@6krfbx6D}r%CtmhYP@T$EK zloK%|G?dThM}jJGoanqN#by9TmlS?H`w=h$^!V#q6B8tWx7ou-dnV0wOPKPP) z_SuMT@}B^cyG)np>Y`EoY~HWQvS-&agsWVyzG)(w!iTwlnP;c^S)eUBIa%fV)4~zW zuhVZSRKKmK`i@?B8>N<5(`DRnaNs;y865Q&SsI_iK%MU8dZmDA2h?sozx8e4KK`%u zZPf>}*q)2`^T|bH$^1#<s2ogrRfC6d?zQW5(iA)b>F{#q)+t0#Ag*@Mq4=Y zsat88)LF?9#QBM*zc=tngDJ9Zdiu&fd4YOP!suj;&@rZn^LWs1-_UXVaxK|kN=8k~ z*gK58dkSKw)tlEUU3bV)dAoL$_)98_B3EfWy>)1gtLWKxw9yNy-ak*SoPd&Z*O;b7 zMv>LVSohkU23*830VA&#La40)6&)i>6SUVwpOmvrEz6eI*C*ZtW^2c*Z};y^>yFvR zh8q|8cbP3*cuxDKW>m0fO{yI*V<^KClL80YKX-I=^wn?a$kr-vr-b9!;K$Xsn^r14hOY&8B~ z#8CrxnDhqU<|F)1*mPh&;0}_Z!q{1ZYWoH2dmvzj5Ev<_Wue9#d3ku!$SY%_qV(L| z-wv_F$uClWg(eCxT4i@|D4EcU3%W4cK$@K#ljc{1oA97uYRoc09%AL_=xB&(%J$#? z33V==jYiUdHq9&WuAz%d*%d*E0zm8I(;*OJyRFqXG?XFy2b3cPLvxzU2!<8%mI8_- z!5IS!6$DAJc5k;2|4ZpO>KOL~=ni{TnRep!YT3pqsEwCzP%M6U0_@FcmA60BOf<*; z;PfkqP`3FxqH44!zTn^|$o(hU7-dRPN)A#BcRGWc0nKslCgTAnje#3_7)N6u;t*rC zO3`ork@z0nXGT~P4bDWVXKJ`_YuyN~yn-mh$f z)MX;ClRSlwdth*I+fo>1FX~7Rt4Y3Uh?~I620aKjee-W~+!sAuM#PU6YGSB@V!V9r zK!=Vf74Qil1_QPaNG%^$uJnuy5u9 zKjlL|&{56#Wr6Piq}a>th2(;;??ILth{T^`CHNqzYUt~`gygNm=RPz+9hR8AQru_AkNQ^DKXZso26^XVYOfYTzKMHgsQV>n0hKFj5Ff$o*5gPlUn<8 z{cfP8UCr{~OTdNwXqEPQl}0vLUABb^a_{EIn3zK(@1mKW1xxdguX+*yy5d@%{~IZS8uEGa()sM~6kA&L#r0Ke zb`;YP)}$j|eUKwfb?TGQ{;97!T_*-*;#FE<$B;8O&_Y5<)*VEOU90Ss@rZyikL-qK zYq{fc-&Ld(I@92P%-^vDp?AmcHr9XgEj7f zK+O~f6q&8;p7OnFYm+;KPJ0?!Avbs6W=^fp9cFuc{OvLPPJDR@3cY`kM|N?~V^xI@ zkG7#D4VJaMf}ODgaHsF?E5q{ zG|@&b(is5@R@T-rkhYSzE<&}M?O=lYU!q7rLL%1rBETxcK})#+=j@qVQK4a*tTlx< z7ZxhR2rQTMO{d+x@@Q zn*YlW8sL4{p>tX=AU*sLHgvGdNrD*aY-!6mD4iXoie1Yu8)j}c8Mr`g2E>l5exP*x zzP>(Cb!`w~gXQdprsn1y<%2*woJFdiE|W2sTbdL4H@pD7Q%Gp2WrC|UDNUHH3dXGH zmfFaxc~?&$tdlo6bgCO6RR9Qy_WVreB5Z5Uzjj%`7*hVpxxc@E)3vJ9b`AsSIro71 z%ZeQlLLikl|6Nbm#|_~FJy1K!P^+hcuMj?$LH+yAiQ^2H~`2@>)vQm;MQWAVHK-F%}edvGczS}E14BB-_ZO~A_ z-r>)6_~OSXPz@$5!Ib6{6b$63IlknNPm7V)=l}1HU2o9n!DK}JI(alPh5iBs=mZl5 zDVKe(X!2M%7&_!4c#~ysf&ma@_7{AwI|4djlslK_sznqig;ekXLxH%;tbacIp8x0Q zKLwPZl$Oud2Rx7JUbYu< z@dVWeWC_oT{9RBJl`fGjM521JFW%?m;6gkRqmqrCB@1B!;!}rp65^5VRmkk`Wb`Ad z36w6#N`c>f-`M!GdcEa*AgXLFI&M|+xi=k-0DtaI1^hr81D%_4Q^1k-2uo45e>j>BO@cE^=IF*y|O2yV#vE9 z4i3Zu{4FXu+Febj98!NUU~}+CCMatJ=ZWcq^BBvQ*n{kEYjBzBDfbr%kmR0*3qV5!5Y?8Kl8e0LxV(a?HhsmM(14a(ik zKi&!i4DoPV5L1c11NZ}aw+ngOB9?EsvIwM3%GA@|gO~-XvV2B)Yc>MYP;k1#I2p$- z1+zH_EV>9WgNVKX!j!F*0k${M(X&V?-l6V)OU6eZOvP_yA>T9@2)TOm%^XJ+sxheY z{)-^{CEz}%;ION+f7fN~#=&$7W@d=KsY+B3Lpq^;{^cjmIv~AeVJdaicve4S)9w1*7GRU_ zL+=F-kl9LC#fg9^EIA+xZh^CG|5@+^rY;27sA*d$k55>&fSkzow3Xpu3C* zCN)rKN8)S8;=r%~CnK>R8sKjz9)WWa+`r*eEhuI~cj)zERf?{RLk!h}g#sbBpV_J7 zAV)C~H?}hd9|}#FKb7cC+dcezFO)cieWF6ftXgkYhER3D_g+%)<8L{Cg|(Tr3hns4 zNi5+ZD5J)8;c@8FhY7skyBF*N!1rp0hshNyRCRrjVh&RESb`p1@vad$AM*!TY^B#h zDHKFv%*O%=9VjFLe;%J)le_d^LuVq{;)rJDtws_pzE%^Jn-U5nQa(^-VOI-GLK=Ljqyrs=*#f#5 zK(N57MJ7Ry05yo;c(x&THHWmI;1gzt#iJ>(4jo+otp3Yg3`jdv>hDCH2X?j*ya4VZ zu(^#~YUqNm7?CoAobUK}NxTJdy+gGMU+myY?v@cCMUW8GgXk7)sA#%P1YasEL*Sw> zg&dviPZ@v?l1e!&lrg#YYWSUbUeoXyw-ZhZ@E?iEomaMpr3mR<`Cl{WP}8-tC#wN} z8r%EHYrxq4-0e!{o-qh{!8usgLcgQ^HZE?a{1a&EYhs}P8I12)4@7M2&ZMyz2(~?- zFU~Fl7_M7?3SM=M*qca0hi`pQ=g-=6H8IIBM!f4Ju8wR~6wg zhUKEL`JD!`BPuBk{0YAD{iuq#m_W|M?(~lo5ZV;#OR{}a&Wg%#0WBURGrm{3Xu{Z- z^2!99eq0WVRLCHq;fJR$+sFH(d2ZLk6#@U9dlL-`$|Y#o%-pC8F_N8;AHwl_HLk>T zew(}!f+zu}Fl!fJ?*YJ+9v7`#H5hpcK?4Y%AYBDLI`o+!c^W`-KUIUzJPc%g$lD%+ z8nduH_39Kbiyha?qOQb%iD9k}S(t}|0}uKiK06C7RdU@Xfo-58 zurgDkV5z`HsU^vypnXLh$r11yPVftEE`s(Zs5tZE$7z`?nAoswTD{R5dbVf4ggq#e zdKuZAl0$C+Q|U4v|C(h|eW0H7IBS4P-x+jBMAsBhsuU7n&m23mv!uH+i4WKq98+M+ zsKXr9&W*v>A9;5K&^>5iKr^c|bx8~S?fh%tsQ@)eN;#t4li}imDTLLNe24KIN<=ZH z;{ucg!9xB+Y1Xa`S!`jFZ;>d=MU=WB1(jS(4G)9P&dzzQEiF~muha(=I2e!(nzgfn z@2^-5{ESci(3L~zI$uB1(h7xfjDFD8;Co_h*Q;@zxTAf%e&oC)cCYW-wyTkCHVm&| zSRxH8n$c>(q00$b2U~8}{C~6$-;Opyb`EGdTZ_2gDRp6^g?NeN*BWR8q4DkM3#imS z?tw^d2FV9KxuFOV5fKrZIgDYmK67I_<|MEazjWjD zy+sH4IV%p8*=@{z#oD{VYB|bU)DJ^UDNY7I6}GgrpqZ}T7mfXVt~U8T^y=vDR*)W* z_jj$*{=9KJg6wpo~o#u5^LogD27Ne3DHqQ`CC`kaA# z7Q%%Fxct8LA`DQV+p(f}6xs2(#gKajbW|5UFj%4K<*l=*n_4O&4q{0cE?^M*gRKtE zg`mEI2K|aL?pd<1)GIlkH?33dAFOxnGa=Gl)SLTT*(a;JJn`b%Ps0XhM!FsXaTN+ zbpv)l7o(3#ii=fEaDPNMH@Dv5;g7?l8BH>8Yd#E|4Z6L%nJ=pAqsXTQtF`-U^lTj0 zFPiB^tqb=7z5YhH|Jc&=Oc7hUyfv!L9z0XiKIO1fLrplKMQ^VP`bu{Hu?A|JMF&2* z?rUs|`Kcrd?B>;Vd8O9kI%-g2-UPL$fxZ0`{_Ilj?hxthY|!acdLH(oXbd;LlDhD|Ff+oGM!Bx>mVbCw=TA( zDK}r}XDtUxd3RqNL&eI{?WBV?A!z9u8FcG_N8JuW!@^9K19CR4*v=bwlBgkG^i2M} zuiJ*5n19;POBD>3krupgRzaJyf5O|{yd*2-Rfj64`u_#C&Eg(KeSJe@00voL*E$X( z|C!r1_x+38@>IeUhtd*z5690EC?H)SfW9!n`q(7>aZSH0EHQ+)vmTk#QHHW=w#F`b zCy}*6yBUWKG&Z720Dw)6;xu6<9z}jRU$U-g!Sq*>e>>7%)1+Sq931;&FBZhZ@k7!a zf$qyU`T18VIpvv%_D6Lcf?MW-0*k&Y)#++Pt5!k8GFAU3Y%jg1Seh#~dqj|heceVN zTP+=$$#scHD>LX+6%Tq-9Keeql-dA~u$eX6-W0GtAdS$-2k9n)gw(5`K-%Ddjy|Er zr|?I?BTvXx9Soi$~j zLuajX#wJj7J(!<@tj-G-3WyfeX5zLaSG8~aW021uem7bFfrgzFG0GSbhw_C$uaCEa z&t!(Kj?dWWIy=W^q{!Y-3#=KK!9t4h&SfD=u0}?Y*|3_R*wD2d#V+uSe$>+&Ije0S z(JEuoPLTVD5Q8B7_1zDEiowwQ-i?{7L6>v$cAzw@V%VcM48e)qW(X=48wf>iTJBBa zfQHci=n>oa*@$p-W2af3SGeR1M6-^DG07n8}SgE5*9rA_%l*6 z7SA053e(3&ZMsS1BYBoDYTF07dfAjB-rpRUi^22?13x@si%0+9a9lEKn#QCe44L75 z^t2HR?E#ewQ<#p~Eur79_KlBsmUw?8EaA%|IY8RIY^0Q}<>?n|Np|ocUaBC@&O({> z7b#-IgP`fj$_n=Cqd0gv1_DKYM!9%@3Udhl{K4_F-4I9tY1z`#c_DIg)vW@(-#%4NC%NL30&*odhvv>Y%W0H$>N{0Z_)>Hll zaOcC7YOvu!KbZn1XvKTorc9HZhGuaAj6+y4rlL?7fW8!kl?I@p;9wa0)nFg2YV9xz z#Z3321nSxzU4PPGmybq9AiUL?_==s;1gFm>An-AE7unQiS5j_dm3|tAwibmWAU8$9 z&JHS~rXgRcZRx4uPrOiZ-fr-txB2bOj%? zp;|K}aoFu%R#tdtKdsNw1qp{)8?U23x5I|6Mg6;2`ePTLuQ^^*ZUM)~t^Iub#}Ex6 zLT9l0i?0G??htM_E}Vft1Qhz14@zG#V<4=U`bBaztJ25r!CUvN)pL|#FWO6jM%-A5 zn5H%O!-taW)Wr_`WUxpk+NPyHn8;S*-;!sTp0J!j8af;$9h)g7@pTrq!mPH#2a8U( z64cfbtcF#*s)E{}gHo6qH`fOL7R9AK?c28-+-xNd%!c|boWXfDL#Yms7w8cQ$Yr*zbReH45HQz3uMfzqKy(mc(J#)DF<^|1c=a*-Xh=1y* z*`c|9y<5al`S3jf`+HT7_uuO-5x7de^za+vfD^_l#e*-0Fn; zpRE}f)SkcQF8)Z#&b|9>T)wDD_eN((&6(%5om)~B&kv09$(ok!>kYXrU49V~W*)kW zl`)%eJwClGAPFjp{>Lvtv9}36DO9b7byd+1Q!3j|kfP?7mj^vD%Q-3sO*>K_fR)+h zgDoKFH*enPg2fk<6rXhBSozwUtOB)Va_x?eSYvVs7Gut+WZTaSG77i)jzHrwKULw_ zhzq?PEnk68ke!rmW82SPk)(JsF`9a$oj zYf3jXQn*YXJ750i2E9+D-Y{5|{?jhgI@f;@ip91g?`VKj>v6${*OnQPv{~Uk(YU3=oU`%meJVojpD1D5L|!&M=7kcucxK77Jd+gSLtDBA=o87eG6g^@MvM8iLDT zx;&Sta1AO5(>sT}9p_M>2ZH8flJw!P$Gq#N(|Zn6q2C^=RlNq7JD4z_z159_GU$)) zE;g0k4So);n>VkDyFrNdyI0qBXR*Mbs6U&1)hd|GeOR&)fRqjmg>=x%%p9?c|7{@! z9bv~)l8Bxq^ydycu*4u;^kDfY%c-iOhM*6c)fIJtiIU(VY>ui{8$k4+@CAE0Sd6hW zgC@+4j4nWDit{KiDyP@abiF_mEz;6a2gjYvN?6p{f1Ek2_T zm6-t*`j2tJuAzSM4Up@2riaQH49+ooK|eDPoaUB8UpX*Rd0t(aSg>m={t9#EV{@#*?(^#ttjguYpJY@HA-V*{$8w0EJ|QjIrhH%3aXb zWGkE3SxZGF9ze$t%c_Sg_Wq-DTi{5dmRQ73)6ye;2J|=(6fhL3axr%pH=C)fk)~a$T3Q!S z$OH#}ulUI>5e~-f!Dpv%7jb0E69XscWoWBYJL*_J+ z(TDC2<6`^SUEdU(d1HoAiQuN~yW&&Ed81i`x zW5$JTgtwtS3|*22bI5JqcbXSVXuG;VBRzRpHLL6D$rmIg|vt8@it?t6b05+wc zA8SDcFdSwHWNOg96oBRf=ocB*f?lPai$xxY7x!J2MOZhLhAd!Y4C+*_m(!C=? zPgn^zyyu3#HhUyc*nAS}ZTaG2wV^pCB(KI*^H{rIn*)USC__PCRY1MGu_4P&>Z6e1 z(`E=;No3jq)Eywk2dRXiFvGd3<#nrk2;KTC4<}3$a3x+zY#+LlQ&FMkk#d6ZvT=T% z5vUCq_t7EQhWnuiMnFoN1~xzK7&r)2j#peES)AWWwUXwfC%E`g=0SQGpOW@(mE(mU zO}80rbFXc)PZomr4~8}<5hxD+pYGl~oa()A8(yWU-OdnFhRh-}$vh7Y!V*HrEUbi3OXlf4f3>e?-}n7q*YjNW@w|V$&(qP-VQ(zU zTHoRGIX~yn#;vEM}3R&f8$4Nue4m5#&!C%K0%3U@`d z;Rz{}pj%*+*74a+90wl^Pc>dU$`)dIVN;PvpjZT(oXO}k6y%hr61xz02l2D^>^Y^P z;y)7c((v4_9FWy*52y?7euKHUOWn|9%^1eLw_C2>!yN(FO%u1uQS!WIR=cH;KihhH zD4kmtc*sezquGEut`F7kEnGrs5j$2ZvY`SGH=&MBp@w2>+X<$NAB^qBErGV>m32Pw zKWt`~nV;;R%cvzu1VV#S5l4`{gd~~64$9fPAY1^FhWVWr(OR7l3Oye`0RPuqT_}Nx zdm)tJdc8&4^Hn6QDI4nG@A!Va&)_o?M=h30g4xkMnEtKJXyd6>g`-{3Tlg%-mX^A9 zQ}J~mJ+}|5I07!=<>OmL0)P9r;%+}ceC?sY7?NBfMXurEBKCu>?kN+KgHh7%emIXy zraLS~Y1trWC6Rz3RAEl;BkcQM?d)G09vb=*W2N(**scV94aSlF zRoSP-ZrQ(s-J|(YB6vuMgrx=hg|+#e1Ys8LkoW``QMDBwNE5Sy8$HO2*`~#MX*sL! zgkQ-H5}hID^~F7$hpykS&eR?}ObC9RNog0GWo})|)uot0fBACEA+E4cM?ZWGW$H8| zGq{e}|8Rf++cV6Ge!`KLzE)Snzv?bfv|7>`sjVCG`X{89e|uTzFSNX{;P0+BCMqh* z(di3N(b$E)@-7RW`Tf@c*I7bpbK@z;Z4n?-!?>-;eMJge(IdCaw_y6M(cw8KFd(U} z?R*Ynp5Z^}=*a?C;I;w7#=Gd}QdX}WC1?TOVC?OQ50Fwggdu~A%Y|LX#1PQpk-Ppd z$w~S85q@erfJVY?)51U`z0U{38u3S__&UFLn7e}eUpIg6LDfJOvysdLHTXW`Ua^5p z4U<5&?Ow)#7uVbhoVxk-<6*Grfa=N6ig*~v(|9dmh9M^>XS~;3>2&d}ndfN|q*+M) zD80k%mvcDf%bu-Ez#Rq3&JihgR`uG^hZZqdS)GqR zXk9<$T>7=Zr1%npRT>5?q6z>Z3fx!9B;^8UKwT5N-<&aXzz)_|30zSHrW>j6KQB>h z1#T|R9`13ORKl-?aSw4==eFs;#sy zc;proTz=mmv#vLH^s#>y^&}-WCrE_JV`LAzby>D*S=6;#JXD(>UsM&9l~bBjY5Ue< zv2CO5XcM3$F;j$>DphYrK`OMX*m-DfM;a`zjv{sjxCCAQc0R$Ki^RrwzN z+Wp-}Q7x%J_CK2B2Vv)0=U{exMSJl`)G~s@4V@?=<9unkN(VE_ecdHy?>|_IYcy}Q zk8hGMU(IY%U_m2VI9T+}g6`!##~vs7Bh>-psQwvmd%|?^>Nu2`p~8_ruADCP4A?_H zaf&UVdQXAs^XqYFW!9p_&N|7oXHQdv_%r6ZXCGi{Gd^xj7;svO4DEe)CUHvNtI|#O z+!;kybr{8hqSR2>pn1iWK5sx$MrIfbAG>;$asA#EP$wQ`mKS7x{L;*Gc<~}Y{Nz6c ze7G*eW|xMl^5D(?tjd@}_oh1P$EVggZ&22mm>$2*x`!J(^fTfio=+U5|2feCB@FZE zlF51rk_TZicFcBgJq!5jlOKV3)X<425S%Y;C0iEIqAmfqCdPP#u`wk~v{ER2fB1=g z4;^0wiO8>sk<}ZXoP)r9W2wG>XlSVYHGNo~9OB@>A$Ty~%AxKFgHmF%Nlv()Rd!Gt z9iZL|lZJ@PK7LsmrS3v{e0ebc#H~+cuXSlzvW{_F+a*{{7pm z9&f0kf`RTu)7LhWZ7o`Y3Y4|9v{DmvVdc_?Ngh*uh|sa@o;{*c(JK6BV`YC_@-Uzg z(LGt%ZQQ0DL^iRp*@g?~$&)AAjvKtSs|F_f#vMd{FLO`91$f2u`v!@q%8i|oV=CFZiiXol05bFoLu+Zk{kTCB5o(+Qf%4D zk-5d6njC&+-MMv67=_rtv6fU$n;R(O7D)NseIi2Htd*mwU1}pd_G+I52l1UFP7bkG z8%Q`SP=qEH3eW{q4Fss)M)8bk3M#Zgk?-f1F>kaD2YVh_EPZ|ZzB()viF#t!2<<(r zC{~({qhdpO@7Ch(=V7b@^|0p;6?VnDfWW2)7WgWkcX6#BcyZ4V|08h#!V}w%MYbt{ zXAGW+0j_b1gB>CGf|NZQ0JqlZNavKHSc8-G>5MjZ*v7K>my@Y&9j z{`~ppmfQK-yudPX#^V*O7E4LfCXSxQQu2g^`#oC=Q2EbWMZ@rqmbu>3{Nh&h zb;d-Ak#VAwIv-%Adr3nh=-rLyCxSHFiBHW7*an(*cfL-N`r)2MYX$T0!JNz=4adHX zo~Adny80+<^DgyId1nDd<09IVll=U7aQ3Cuw>_?=ivPnyREx2RKK3?%9A z7@EW3sWGHB{#YSi4d190&pxe{;0UN+Lp<7r>NS%4WAfRMPAZFxPP0Lqg8VQ9ZqzO| z-ycP=SG+m``5M*!dOaTNS=l1>Y>S(2)zD)G6Y>7z=UeOGpPwwg3>seG#FaefT}{2U z#1n!mpMUq$>tVs_?paE161Q5FQ- zibt-k-W;!%`~ifYhu&2K$vB@r;BDsy@7Znk(|vn?y$crM}X@{UHS&?+oT|wU?4j;`)EUu)4aO zv0y)e>fjGI8=CgEzyI^U3l;r4IF7!6v5`uYYB+2Ia17NCpeGQNl8S08D};Rt5da%5)iZ2|=-|~j zu(Nr88hT;wfr_J$Z}+B@X>@&I9NW~@vnfYGqyx5XDbg9-%zfbcl8%4@ zs8+zA;4mB535p$T`Eed*i)8l^B zp~*S?(8-iqkl}`hhqYpR(C}GqR65lBXNOp$ers!MKl;K>O;&&f*jQ@|6PzSj2+Mz? z%$@sSLR|lRQx~ZM5wr={zCw?5epM9OL#N3ICAI)gZ>ABrYXOyi1snrstRzAdQ>j`y zI$RRJ>1T+t8)EBc#goqSlU>FR6-r6ZeN3N{6A*12ZXU)+HYg+tS5M1TzFFU-tR20* zz2)hm-1o-M0l{uIjfQ6!MP<*;fz1SO3$HQB1N#<<5&enLZg*gF;#`j^ znGOyjugs!d|NI#uvQY1`FqS{NG~sSAd&=4aa2w1i^fMZYRGj;4E?qk5rkpGoc)QC| zh6(Wy@V2$Z!haVd)^llk5tay0>?d~B_mOFlU;1~ z=Uw}}RGQycacft5uPEj2q4b7mp_nIb>9h`J70zw6)=grO%5!hbfOLZ%?$J9@h5Uk| zI0X##u77^Vh#ZGhxlDB7updH+N29&b4@P{jTB{cDU%wg<6rxy_tr>0~G;s!jCuPzB z{zyAFBu`I#`9gZp%B9ed-#c-?-BRx2#l3_)W6OoT(r(P?jBCzVz*6}0Qgr}(fy#p<@5_)x_Kc#6=YCv?QJJACulol|!`JOy4mm9OUGL-6%$@ z&A9Nf(jKOXk{B2Ab8=uudo@b$L91$+sEoj!FN@PNGZS{2`py7?0>?uCH5yf-iIy1T z7N~%~OgRHlhyfQ7lt&O8b_s6ZE7X{&=1?KSajs+tF&)tPA@K7p+!e1w91YzP8}pW0 z4}Dx1t&MBR0qbCypW^bat`30)yBf{yy5}vdt=|F@hJRsF2R{|_&%^H1$(`+i z%g31IU?NXWV^i$Wncj18>7f-l~N)HAcCa5vCHSaT))1`piYSy z1fuVU?Z6)tg6K96EFY)3&M%(vV}rmoghGMdZNSFxuZo-JrCq)1z~h<+FN}V(9zM=hzUu z%Sj|$u*aOJ2k`yq9B^@A-25J9)6GZr_!78(+h`CaDJ4ZM*C{(Y8)Hy|d`Y0y4#gK8 z=9~9|5Q1+fdB8{%IN4=qXI+Ow7;JMJB-WvyCCs}3cAeAF@xoq#@O4c_>2ycYZBNk7 zNEPsF`95Ae(T{?l5+7@1m`o1V>|j1-6C-%<=1VjIHXv-a;UJrc#daho7 zFP;Wa3vi5+Hj!{bLU9BHiHJ6W_X0kFUr$KTFuUEjQ~byg8X%1A)^ISC!Lng(XPYGf*T)~ zIYM_#qbe8n`c!5G*A09pLZO66j~edYNuLD>b;@Qu?!n6P@<8EKH zjPg6td=tl`ro?B8IRUn`@vVv;woU1>82aFeD;b&>4}a5&d#{gV{*pqCIu$ z=|j_Rm6jrAdw+-b9se~lE_H&n=(d00djT(Q27SlwAh_R>9vTRlh^(DKT{l3U$8;2T@k6Sv;f0UN!_YM8zy=yoBNCo|rBjKl~;YE@cGDW0|oM&DG| z8nbB2K#F2-@5BrQ*+K)ZimZ`=XE9GIHA8I|#O|6?ZzZ_j>JNUn8y&6O(Pnv)rK1GiCu{v#rQe2MD}#FRHV$PpDFhq} zx$?<+68r=!Mn+Ob_S}SD-{NHS3IfZjovb9GM@LR`N|8xF_6?Qh7+ZMbDtO=#N*}3w-~1@I{H&6Sidjx^rMQ}kqK0aR0;UA^zN$S8 z=KuczpVA!FBb2-B$^qIqtrdIoV`uz-K%OvVDxo=RbihaG3&vYnwAO(ZU6vu>RiWap z_+(RYHTSAt-tUPT<q}>$ z)1V%&wO_V0;rZadYA|(t>{8#leVL1!H&LRWFX`RQ>e978_`DgwX$m6^?D%lh4*oeA zzo|Yg|E+Js(Bs-i=5(&R``SEwHP2a#w&$wH+cGjUzro}WS4it#vHh(vbJ%OJYeR2g z%W_#L^l0K+bHZ^!k|m_s@xP)?{W4-xU?Kx;%Fru2rS^FS-4)@n(Eq()QxRvP#+4e) zaw4Tcy;i1UxM^mU(C9Z@L!(lRAJ-#_5aHO>?n4sCl>*hp?y1ZjXq=d-Z8(|d5rhP) zwXbAcht%}+e29gT;7q6b9oLC1_c>I~h;jl})O9F|Or*|Q6Yc`ggfKJz(QR!oLwo(o zmERNC|Kv(^)YQ|{!&o0zn8xHlrI-XvL=rOEMgh4-eD90F+4Wh~;wqW}A};oA^LNlE z#Vjw1X(&7sXkun&{!r40Q4Wd`+s*e-Z+%W<)ioffY9S#{+eYd9tMC^epa6@oS2a4B z*jyv)6@+ena-;%BJ?QHQ{=>XHO=5G&ZUS!N@*qzv)K2q+Rbmy$wM+vV$6YVBS)tu+ z#7-RJmKHl0``tnH)ybOfkgp9ZoEo8yF^7T+&o}3`>w-}(so7-%x;hMbQ}ehOedXF& zd^|i`r(#l5&nE0ZL$=`qPX=py!Y)|Q)kqF)IDaK5o%qxWoBWm5(&G1hCZHgxxxpPRZlLI$bp<$+vI4yo zhe7%Efj>utuSY?nrDo4hkpggnZv@O_bCt2$?q2M(~QH&b`VWPi@PtEyqh49F5)quDAi!Z@flX+I1x2c;4-46!=O8nQSD_*Gi{ai{h-_9479rkr8gS z_SJJ^5vHv{P*l6gOyZvfeR)UJr%C{uQh2cGP3}cu&d#?I-NS zH$Hj};l{?OLv&UG_g`l=>)bqu#ui5q{>sEP-g!0*Wyj>)hDVzF=UmE4s30{_deQCj zhghf&jZRFgd!bnsp4?f-!hw2tu7{qw)cqTziKxs8D?||Q?!l)H_vl$UgpBdW-SmTa5DZ`X~d=NOxUCMLVB*Je8bRi z--K&rZZqDlFUQjD(BYs-N@(V!Cw$Nd+c=nHL8VFv{0KcSVH<}zcZAi?)+Hna4Crr| z_0W)D#fR4kTBoSV63`{k%Cl@?mEy&`LFB?;-8@Fr@TV!&kG79SjMF@S));RIQdGvJ zVmIe#^RBf>ba({r28dX8owi^tVe?))dyx~ulq=GXM}RpR3;hPona+K@T<}+0Lz(eA{8zW}9ta6|xoklrsY;x(U({0iGCFo!)1Sl=Qh)N0IsXWT`Gf||Dz zGa%h7&?iFL|`wDMh9&0i*pm; zLcv0R72G2NCCJ}AnIM+z zIS1tr8rgo(mJq2RbBsAyG#=;)3Yj$z+jV^8;;6Yllt2G+76rfM3vsWP%dWFWedBNe z-S{ekDu+Fdax|W&cdMYSXu@~_QDeb&(A61rizT2IDEQnZH40e z)=+Led-l#}_7c-GNLYa za$*FTLmvCuBlpC6>}PO2Y*`lmYNZV+oCm%$))6pM;{(#>&iYr||3aAt9re2|pwa=X zgx3lu4PkBrMY*xir7Kr{LoZFe)z#7x)HqI`T3A?^W>qWKVMzji@onLaq4T24v3zjX z|6rL4N*Fd3pl^+_L{y0vw_@1SI(=l@dc3JudIo7mEQm;667d#S3{_Nka5oH(nWAO{ z%?cAd)Aqo&)tLr|Z&1Uh|G@=-0q4J( z&QC5&U=d?4069YM0a+1RcIwTHHXov(UfN81SMdg(3D76o;@%0Z$ORN(VDZ=LH|lua z;2Py+@vkky4FPQQ;X-%e4YSun``Db@!N}O{D~C5mY*QE12l@F7kY4+V6#gfyXKE03 zKR`VQMl)u+G6F0eS&^ier+k-U*B)lEuphSc@R+Ah8z6Tnwb}I4gyY zBcl!iVZ4Akeki(II0+gm&Zi8$C@ifwwAw`bLJHYk(*!OpdZohj>}>VVN@tzL_~?Cj zFZ0r$#?Hbi)dP=nMKV1sdFdF%^0lCo2CSyBmDQ+hK@(SJAP+E49@$TWp{}YcGwc6L>^wYXt%)y()LG zo>aWCU4;`_35_2<9Jsr?|4Nk5@q^GggYgSW5t6FV_0=A&GtFlHoxRClh7C!EfpOX( zkOJL2a_7)1#Ft>+FGS^S4R3VTO(o)vBj7o+Tnu&|tpWtV#$`DATgPO)ZXg%WACx}? z`Y^9ulh#t4l4QZs4%#DN}9Gua$`lT1tsFf zffLUA%s>qa3VyOBwr$kJOuBO?U4Y*|Xhc~%IHp6RqVyfp{qfLngdo}|@z4E58VK0J zRcM%=o#JAYdayL2BID$)0A-QbE<(~3xx?f0sbcaE_#~uUj^y9tOLpPhRjXbDayDYs zHvxOZ$mayXf0J~&101Tb&qjpM@&g|b%9{Wa8UIo1^c6-tcu~H?n2t1SUl(q~vKa#B z8hdH~9AV&Fm<$jDJu308GrnBkb9xdIZ^i{Q zdv`da3*6G%ti7pMgZNNv!3q=eK|CVHdt#I28s%b(@_{A#UMow(!HXG#Qwocpzp);f zu4}ROY>e#>W4mLh7wR_WUnxD%bBAVzo>^PJkZ)zVsy|v|VR*_J>x7k*Mf+z?Pwj>1 z;%<-I@WKV9@*L-ZyL(X4A#<~#$UTqr5HqiZ2;%CE)4-c55;5e0?fVI54z<^4@Ekwx zSx}vY+}j5ie72+fy$xyzG~gZv(P7?+Z**0X-uPC^Me8dmE1PzG1R1r(^T`jc3*?xy zWik)fYv0-)(&L0dxi< zE^JIE`$q`l$l~9_ZM|J43XEZ1v%?OyC{NL>qhR`Fq`U4pqR*X0^c986|F8;U;cd>ZV#x5&ha@czv>4{y@{ zU<{2VQYU`oDO{20RH00kSIV7=7mGKMKd zMY^;vn`q3K3ajSx@491-M{_g7h(w96qV%pfeA~)61XCGQxwsBn({40EzrFe6Gk1E& z&OHVf20pJKs`I?>2e49$RE_x99wK;$fN#8H2H9Sduc)+p3hS-O^t8pa12K1)c3_7> zIzTaxzA4GyfS5@D8QHXUaDha@HmEBUa7Jd=AYF50)?Nds%`m(W>o7qQI>7^qGxfj? zvpIKD4mjIo?5hfo3S3F$SuFQZw_!(U zx3upZHNbAKo!6O2h((C_GSw&PE{03U0j^e+=`Y1vQ7au9o?lqF4w@{m8Yjj1SNWa8 z&`nddp1lb>V)XLU57l?W1jQAwE-vd@VJqZt5`#B@7en^T=#3Yr^UE*JB)et8wMF)D z<(P&D-14q20L8Z)!XpENGFgCy#o!*%J5Y#X5P~}ohfb-&wZFJU?4&}uvt?F!^vKE5 zJwdNsymIDRYTyI8%W@0J_Q&5}m2L|s$CbEw3R^c}$A9Jyw^d?4aqDUK*twZ$!7Yok zOmzVw6}q7Sm%x;N{GD-~o9iqPZyS{USl^)i7Pf99iH$i*cuw5Y=1?I3Z8%7P^qO*? zn=G8vlrdWT@)vz&`8(_qCXDs^!dEnVk2#$z^jc(3>+*N z6+ue^s>Jz|0Y5GyYZ235p{7xUFMygFV0UWbPbgV6rmU|Jq15J1eUB z?t_dX*ioEVE(QBiAkOk+tYs(gk37_ke<{Z13?cMNdJ!l+SrQcem>+7h_M~H6G@=pQ zvH%B|s3~iNbHuv|^;qelwREb7o9CUrYgMLR5aD+FFY2+`RJETh9Q^a2WMBWB3G;8M z%97hQhJHlJhEei{&;tZm(|GnWuCT9LC-${U)0KK}*i#^8(|2P3WA?vzJsmB_G`#=f z`}|u!;@=Uj{jYxmC*mz}5Z_o#2ASkoq%wF5wJQ+1e@{v^dp#38iAdj&C~%L2Lf4Sc7GaWZ zT1#|vsK@8_J=OLMAD<#Xn13kC>QGRFwgR&Z&~wzsz;lVt48`PkmAoVA;_V`~bU!pHxS(?~rP`w#^U9{>t(zk}A9RWw6nO#kQ2R`Eq zb3zcT06TYbUCGX66=26J1+apIMvLic^e?Isx^o|ZMAmw)0H5HEK|dJw8Ad@DFK+g! zRP%_~CECaVGC-IsuZaYF|F-y4!l3^?Bt4|gwmj5-PD=H`qLd-E_GlagBvM@Ctb)sm zh>@0GL1X`vGcGt``A?kkU$8dj3}DzMwX%4lrHp{aoJ)~2P<^HWcm;;I5PsCpZU;0_ z7jT3r6So=2v7~bSk4WUciww@tgscl>RWYavZWL3WST1mlg6^B*r{T8+Tz$Z8>b~dc zu6T;?T<})q8J-Bp+LB9VtB2bzp)>+P4CqDeBG2fB&|snHcJr|~NdqVqBa{ccQUu&<3RQUN)u%L&cmhTMRwd6hYjX=~vV0>gcc*_y=ug<`ahtC%Z4lT? z{s`<_9CBYadpUaA={PC`&X2-Y`RKZ-MP@>w$h$b7flOYk%DEn&6RjUVKIuBN`dIk& zYcB()atR8^md7=Lhv!v8^YJ)NtQ5Gdbaib)cND3dKPsm*-a#h{A8qOc`fHMf@15Pr zMtJqRyEp&U4UbjmK0INGOtqB6n_y%B^{arBHK8f;PtC}v!rTiIAZ&1aOFCJ_$|}99 z4MV7aBXiqcVwnE`xi2aDOg|AN!?)8vY(X6%ID~QjQiLujrG%{@R`L)!absf{`;u9; z__mNUa4j&lY#`Fqr}RA~IeXayhP=JK(@YpyS&1JWqmBKao16>oLT|%kFD0yV}CiDjHlFCttIY~BJ8-kUQshxLx-wP(f9^>gb&dbH? z9|-?cPijc*U)vg$z!fd%(+E53b--MqfALdB@%YbSsgVRVNy-kDH-RekZ`6-}kE${{ zOo)R}8UPV|0|HZKL4hasEr>xR0!(V__>pKy=5QQVSvT}kO&3PTNf4AN0GqJc3F1!m zLyak&{M8?LBC!XDmz^8^_Qd3X3?zMvNMhO-UrZu_T2(S#g{yBC-_2! zs+-JSCSN%;;~Fo->3uMfgJS`*B5G7!(1IL#{2Lm8tVlZcZ%u!(nHX)_e`)K~{5}#0 z&_B`D{bEwqSKVI4yC^6vhxN|AIz*r>%)#A4b>--M8lN@bSDb}G74E6XBPuxfcC)gEEDW7x{5Fi^Z+(+_AD&yi1$d)Bz_7mMmK`V| zfK@9D11)I@gAE2_@(Z=C~11W6!q6B4F}iOP{= zU3Z|c*ulm8cNAsx%zlPGtS|27m*{|&(7{MHaRJI7kYuO@7gR!J@6(eAfQd!|LSam| zp~F52;am3;9FA~=avETddg6Tp{%)vuL0Ok@UzF5HSN!>Jv?&Ct^!cQsZ zn$SMJd#6}mQbvYCn*l72-ALWUL9hnEJpt->SY&*H$%Ghv_I!Fm* zIXuSoQwH}MpeEoZ%i2}d0UXx(OknTfWd&s{ZX&Ss9f0MWmZXpq`BtPb`mS9rA<{>x7*8P<;_YzI~u_9GuyuGC1Z?{4TN4 zyepU8vS|$DVAxFHvPA(%1NGc@Amjvo4h4poKb#F1;ldS?=}KJ4usNu|488FtTsTB{ zYej}d&(2Bn^&l0Sy12bLe-}T_UV0&?40{d*5OUthdA1lPu^T4HCN`rNHnO%>&hsTS z!`m%lxvb*rXk&`ra>`!=7l^+@DP5AwOAp9lO6tvvD&c0bJs^5lf-=jGTqi z*2colFV3u(x-g203{TcKC)&h2mQeTKk*Vm|Hu58!NHQUgoG^qUG>Ip+MmU3-WGuv$ zk84S%SC@T1>I{b|by$=CGttt}yhufd*;!tNw49=%Fs*g^UFT63fkHC4NtxaUK=6@| zWRJd9FH+8IkH|0mx^t;iM&osi0PvK+nS9hqTy62q!$KW(>3QwsQBUeMy7%vk>OEBz ztn+Vm-`{8?^Zx5sOa0zkCVEl6U|LRSJ)aiSYnSN>vZ%C71SWNfb7d#V5dYX;+iLbz z9Sd8!9Oo?KR7y!yH}F7^&;1;B8D)O_Q>vUmrU;m7LSs`*$&Z4?h2Aa8`$rGU#T{nX zhW$R@B#5Jf3%m(Jt1Z+^n-aB4M;yk^b5Zt)f|F>g+G~f=o9%wx6SqbltoM7iZX;2X zNmvLz!EDbinpIEo{U;O_RELd z|AKXKC%#I6w=xWkG>>1QX??E4=8s~7n27C3;dONGfDA6{HGhJ_m9fO;VOSC;=?=(^ zMv%^%>}Vr!xI#Z)6c9s=x)T_BQ6j{@r4T7FX!hXp!QB>t;7s@xs7=x2Aaaoz_R1i7 z1god~&+w}-3scW4v=tpQPecTk5?W#W;PAY>+(5We4acFd^_omtc_gZNM^ZsBo*tePtnO$EsH1ZPuFTAFBbS~3)Oh5IgdNvdXY zB~0hP*QaFddbLP(A2>7TPRxv)SzW%}UcA-jSHQIsta41W2S6cQJh+dItz#GZH%u~B zrGKaQPQDyjCRJ~(sjC~N6=RZG^=tvOh&;PRA5a3-KQvo<=9G}*UJ{SK=dQ@TD!RYT ze`Lh^LAv>Wk!-%KSWLK`?jTd8JlwlOH50q7Pw90O)IM3KC3Ko0?vjh@>OY+_(}PT7 z1ZWw&{U%RszPr$WQgCZvk$^*zfLb2!lNZMEg01_GzVlf{lUHA6uD)r@8Y6a^usX8b z$3x@~N*&6HdS*jX0vRqy9Ia#Q*ZkRVxu8l-gbYsw_)@Mil)AhOyM>wo%tlM^R9obsM)6=h1Zs ztPW#|vaR=D%Z@^dG9chSw-L=>%A@?N=%vDnZ~~q_#{8U9C5XTHqPW0ibeRd@O`lB| zvJ)pfVHQwYb6tyHxS1-661>`Kj9!)BUdPM92M+FIykCF&RnwuYt1-^vz5;p&f)`Vs zX(&BCmlW$lkU7LLB^;X6DDj1q>%_hnRz(6viKAn}!~|=8Uc9xfZPkfo1Fxwmdr6ns zZKzOOo=)Ko12@P9M#`w*FKSiU3x$F`YTiCkyLZA;A{C*FR)t$XAUC+Ob|eyn(;;7m zE3CI&ju%|uUmR9(caEO|W{~Qjym8HH=qxmT_xWP)d?WwJ3q6>?(}Im;(RmGW7z~I| zw30}m6`hcJvX2_1ocJ9S!9K`Y+jCulsUQsv%#^Pj_gJi40YHq0G||}r=XJDEU@*0X z);$7Iz{4d9%{?a5sLLTV@Nijb157w`3WpcCy3HwrPj!b&cpn_BFC~$-yZkP5@;s82 zeOym1=s}f)>E$Nc*Vbkf4kB0Wlg;_#`y`JY<23O1^XmuTr=es3$CDU@&^r{DULBsA zo+i(r&fk^JL2mEvzUaVM-di3giT@3OnPup-eu#1+Bz<@Ddz?37SPxV7Sp+8p)KcJf z>x19)(Wr?KW64yj-pv7D(HDh* zd*AggPm2~B=)=8v7vL``QOj<~kHnL~rxjW+VfuyfCh5d@739Wn{2*1VV|95kAXP~% zVw#BHEbm2m1fmitP%0WrYED!Pna`-#Nzy%w@VLmxk&cyL5V27|^T3U6UG92iD5r=c znDT+42&Eg0oL8L_-}Y>|Oz;KVNA7_$S`86a?|qPZ@$>f4Ufi$0f-F(bAffyflA#q127ezs9f&$&13(U2tInCgDNy;P~&j*(os_s-jt}b^j_i+{pRm3m`eq~%6Ea}Dq zzbuXiNrV&+gB_Mts=6aG0v8N~dbJy+_VseXLNsfVonHY!Dwc>^a-d`bs$7^~pxXgv z3=H@w;t)`ZUK1nW1xECo!|aBcVU+hZ3B~k`xgUAqF+FSAa}{O1mMZ zARD$66vum!?*Iuh?t_>CA$SinWY-A?Db$p}M4&y?uDF}9u7a}kAr=i}72>f{8%D{{ zYi`_py%AFB{Sq$$g`nSpKS=$S>2E!RCm(1npD?*5S|SLy*TKMhwNn4D*s?CS>@ zL>PJOlzoZ2dn@VO&b6>~hRZ{Ba3`c8H-{n}A!e(N?uCz!e&n6fHP;^mTR^U6tXleF zERA2a3gy+)b7%6{V~>MC2H6q3nSQxM%3(o)11J(srsYfcw}QbK*%wWP6VeOn2_Jc1cA`PP3Pz5Yej_s#K2tdvkRsqgY!Qv zmJq8;?-Nu~y)I|S6E81mj;WCC+wk|BN1f;wEWy$N#DS9xkBoZeU~MY~Y7I_CV#f*B z8QpaF&;`fIw^SK{qX=i#4PivX+JJChp3uD@&>2?<;s6?&+_g4Awg*#;J1=9tp7oq8 z*}b_WJexs3-&IUw1CgKLoiGnX1IRf364X%=W~_r|;P5D?dRH1jV}t=|(Cv-F@cSwE zmy0_X7XdIcEcrCB7obg2Kcf$UPRWkCz;g~wGOJGVJI;Cy2tMrfnqeL}WZf)@xqJ%Lfd6dF$rQ&*D5 zAr&^F+0K%ZZO1dmCpC@=JwwhE3gpMNKD17zrnLBwXG4c)QMPV+)&r6adSsoU6K>_f z+>`I#J&@FYb2QOToNwkjcIupCaX0+C){=m>GwfCG42_5gG+BoA2d+rS`VKS$c@2p( z*)Ylzsa!kH=U5Vjt$RdC1pz95Dypy9C6Cbz{E`ay(s>?WTf#H}rx=!w?d}2uF@F0d zxad~SY()hv6$7Q$m=JY-QjIQ#M1Kw3LNWEga%DxkO7ghCpZGfmE>wtDfJfkt5E3v7 zH*opBmb5Rtt{*ei`w)iXjO(@rOGyI!L=$H$TC51DUbC3NX$a$D2S$m^kM2B46rlhl zWiDTiJ5+H{{61(?7%Yd`ZotyCjl3zTZ!19=U!SPPrQ>k@aAvgp?*w)a-rh+pb4)vk z{RNIrznSzxdoa5)sgD@mcmQSXAItB33->!;e0;TxX9#-IV|HK8*>CtBR@cxlfabM0 z()YL(m_c}I6J-m}H<2(92PjPZ?(pq{ffpL8$^5T&;wGKq($ZVQ>ol{vTT<1m8kIXN zr#!;}ueEhs?|f|T4m9KfN0360Br9p|Mws~oB2FU6+#T)2cr+?}&D7lKy#-*Q;l(C` zA;lvPPV!FY?`Bj>vBbee^zbkJt||?453%+x(lxeZ%dRYcuVWRig`)@Afq0^_Rk6ns zQN)1jwA~AGA+kxD<|t37W^kP;#gGQP&rvPR?*is<3RRnClc)uWnf#;DoT0C3C_704JW(b6KA)+Uh7E<-5t1zaB_9PASxD$NaYO>gX>4j* z?NiAnPyzxch95rEx>dvF$N}53@5fpZ#>dMWlb7c(bk9l2wlKnU%_DNddnY_P`%+WDP zKsp(R>QBa&#FK+-DT0R&uflxursVRehVBk81J)IqtG#Je<>ldzSBMWX{8yfux2Jb( zKFp1oAK_}S?_+J3_UzEx=**Jwx2UT8qxq`aR=Q@hO~rt^1_kXRaWd`Z&K1btI6h$? z!JX@i8i+8ZgMJu&fu5Y-MjG1AUcz<^hQzg?Y#)o4wo_{PcX7(VJ?Yz;v6P^_uorAwG(S z;+)=R*BIaVX^26X9cAX_X?{PNtbk)(%zIj;LpM{97EtUc_4Gb~;+3}#=%g;^W6ZSf!awmUdyXLx!+z0O* z0xpCd%QaHs6>yvqwU>RI&3nRuYD30wrK`;KR_(scB%KKq**F;2JnUU(6n^Vd;cfvG z%smw#*x?!eX|Ob+^_M>sB*sK#K`BB6X$ZUJhb_#?aOLQzRH9HvT9`3R-LEH=S0|C7we=C1;7*GT}0X^l)H4e+0(%R|_1$X9#3v`;M zHn5MhAt~CVfv|^CS8vX1UXhU~!f0Lf;YrtJPWUj9UGrL|YlG5loLf^{7i)j(TlLUs zQA|-@>Rq|O$&2G^_6O^mM*@=W-Ofg(cs?RyMQpyDI;GiAa2>`nRXg9A-l*|-a4clC zG_Bs1XZv2ig5zM*i5$f6lcdDa-_C== z0ArJG2X3VsHzxC@*zo9ZRe$W)%yLk<6VAdt{ruGJ7MyP^3|=y^ zgV`KpxF?~60P6*Y96=3fbU2BOPp9-$wU|OIUCOcjH{~FCXUP=7L2bk^@d_C>87Jd?}3Tb%|i>gL?H*N!q z1STIHBI^^^Wola*9DjXD6ox$(9a6Y@+{bWUX*9bbnl#p63>0!yqghK_E#o6CeSI;! zal093*{mG6w%kAcoQJ=_N+g^)NNt3z8$&)hu2u03>rfPgHSz^XN}s_hn&G*P;y|cD zZ*7V~kd=+ixr7yQci|UvAv??^r`=8Nir}-h9onA`Z&|$gcx|1%d?I zP{30>Fqj}C%s{vn-^=A4%ZVu>8Ojxk<16CdQNU?)t_B7MH6<6yTy!S8snjfL&#ehA z*i8jZRL-!ejQnUB^&CrTRv&u$!Uar=)-;1B!9^GD6iF%Y-M~+(b0mHOzO5_xW8SR( z2dzs>o--pq@QjYuCg&skNi%1!eN@YWY~)r|B4+(y8=nS8?7NW?$W*ROhn_k6VTE`i zR1j!wi{q*BQqN_=MlR=NWT-smm@4Cy3|4T36!D@Hv(H%Sq(MQ6v%xNwyD~ZMkWTYp z!K2i%+PrDgR|oo|KZ2vXzkxDwFjAQZvVt1ZYz6U1O@iq&=FG&zqyPjJrwN-h?6kce zDZ~fj1@X>v1T_gc15?}tm>Dd?@P<2|KVAFCh@~wH>)bt-1Uv_`nle0zs?Rfq#zkHY-^k@N#;q)gAcxQ{9A+xAl>=M>fr!t-~h; zbTpK&!hh4z+Ww}a{mV!FZ$63t)|V$48MschSesokNQQT3U{+@+;N72pVvYXh@BJqn c^1}*EOY^%Wy1Q50N%-@-tg_7WQ-*i`AD43{9smFU literal 0 HcmV?d00001 From c6649f8b48a01128ae86b81c60840b14a9a4a4ff Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 19:12:15 -0700 Subject: [PATCH 300/349] Update portal-overview-windows-defender-advanced-threat-protection.md --- ...ortal-overview-windows-defender-advanced-threat-protection.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md index 9ace9bafb4..9128e2354d 100644 --- a/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md @@ -112,7 +112,6 @@ Icon | Description ![Possible active alert icon](images\tvm_alert_icon.png) | Threat & Vulnerability Management - possible active alert ![Recommendation insights icon](images\tvm_insight_icon.png) | Threat & Vulnerability Management - recommendation insights - ## Related topics - [Understand the Windows Defender Advanced Threat Protection portal](use-windows-defender-advanced-threat-protection.md) - [View the Security operations dashboard](security-operations-dashboard-windows-defender-advanced-threat-protection.md) From d92bf328cc87e201bdcd467c2af21d7065adb385 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 19:16:13 -0700 Subject: [PATCH 301/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 75e9cd5930..06e075bada 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -81,18 +81,22 @@ To lower down your threat and vulnerability exposure: Remediating issues in the security recommendations list will improve your configuration. As you do so, your configuration score improves, which means building your organization's resilience against cybersecurity threats and vulnerabilities stronger. 1. From the Configuration score widget, select **Security controls**. This opens the **Security recommendations** page showing the list of issues related to security controls. + ![configuration score widget](images/tvm_config_score.png) 2. Select the first item on the list. This opens the flyout menu with the description of the security controls issue, a short description of the potential risk, insights, configuration ID, exposed machines, and business impact. Click **Remediation options**. + ![security controls related security recommendations](images/tvm_security_controls.png) 3. Read the description to understand the context of the issue and what to do next. Select a due date, add notes, and select **Export all remediation activity data to CSV** so you can attach it to the email that you can send to your IT Administrator for follow-up. + ![request remediation](images/tvm_request_remediation.png). -You will see a confirmation message that the remediation task has been created. +

You will see a confirmation message that the remediation task has been created.

![remediation task creation confirmation](images/tvm_remediation_task_created.png). 4. Save your CSV file. + ![save csv file](images/tvm_save_csv_file.png). 5. Send a follow up email to your IT Administrator and allow the time that you have alloted for the remediation to propagate in the system. From f349679016cccfcb179f47bf1cd3a12f5471544e Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 19:17:35 -0700 Subject: [PATCH 302/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 06e075bada..cb40f19d8b 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -81,23 +81,20 @@ To lower down your threat and vulnerability exposure: Remediating issues in the security recommendations list will improve your configuration. As you do so, your configuration score improves, which means building your organization's resilience against cybersecurity threats and vulnerabilities stronger. 1. From the Configuration score widget, select **Security controls**. This opens the **Security recommendations** page showing the list of issues related to security controls. - ![configuration score widget](images/tvm_config_score.png) 2. Select the first item on the list. This opens the flyout menu with the description of the security controls issue, a short description of the potential risk, insights, configuration ID, exposed machines, and business impact. Click **Remediation options**. - ![security controls related security recommendations](images/tvm_security_controls.png) 3. Read the description to understand the context of the issue and what to do next. Select a due date, add notes, and select **Export all remediation activity data to CSV** so you can attach it to the email that you can send to your IT Administrator for follow-up. ![request remediation](images/tvm_request_remediation.png). -

You will see a confirmation message that the remediation task has been created.

+You will see a confirmation message that the remediation task has been created. ![remediation task creation confirmation](images/tvm_remediation_task_created.png). 4. Save your CSV file. - -![save csv file](images/tvm_save_csv_file.png). +![save csv file](images/tvm_save_csv_file.png) 5. Send a follow up email to your IT Administrator and allow the time that you have alloted for the remediation to propagate in the system. From cf1b4752fc41df76a4c63078e18455b1d5ef692e Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 19:18:31 -0700 Subject: [PATCH 303/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index cb40f19d8b..c3dfa1386c 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -87,7 +87,6 @@ Remediating issues in the security recommendations list will improve your config ![security controls related security recommendations](images/tvm_security_controls.png) 3. Read the description to understand the context of the issue and what to do next. Select a due date, add notes, and select **Export all remediation activity data to CSV** so you can attach it to the email that you can send to your IT Administrator for follow-up. - ![request remediation](images/tvm_request_remediation.png). You will see a confirmation message that the remediation task has been created. From d75e78592edd264173cb54334e3d54b0c5063876 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 19:19:24 -0700 Subject: [PATCH 304/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index c3dfa1386c..940dce2029 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -81,12 +81,14 @@ To lower down your threat and vulnerability exposure: Remediating issues in the security recommendations list will improve your configuration. As you do so, your configuration score improves, which means building your organization's resilience against cybersecurity threats and vulnerabilities stronger. 1. From the Configuration score widget, select **Security controls**. This opens the **Security recommendations** page showing the list of issues related to security controls. + ![configuration score widget](images/tvm_config_score.png) 2. Select the first item on the list. This opens the flyout menu with the description of the security controls issue, a short description of the potential risk, insights, configuration ID, exposed machines, and business impact. Click **Remediation options**. ![security controls related security recommendations](images/tvm_security_controls.png) 3. Read the description to understand the context of the issue and what to do next. Select a due date, add notes, and select **Export all remediation activity data to CSV** so you can attach it to the email that you can send to your IT Administrator for follow-up. + ![request remediation](images/tvm_request_remediation.png). You will see a confirmation message that the remediation task has been created. From a0b51bd679ee2d8cc084ea03e0646a58fd1b156c Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 19:20:02 -0700 Subject: [PATCH 305/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 940dce2029..5a20239185 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -92,7 +92,7 @@ Remediating issues in the security recommendations list will improve your config ![request remediation](images/tvm_request_remediation.png). You will see a confirmation message that the remediation task has been created. -![remediation task creation confirmation](images/tvm_remediation_task_created.png). +![remediation task creation confirmation](images/tvm_remediation_task_created.png) 4. Save your CSV file. ![save csv file](images/tvm_save_csv_file.png) From 2b90234b1bc99fce87ede222196a2b87111ce2b4 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 19:24:34 -0700 Subject: [PATCH 306/349] Update windows-defender-advanced-threat-protection.md --- .../windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md index 893d6a6ef2..14c491a3cf 100644 --- a/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md @@ -2,7 +2,7 @@ title: Windows Defender Advanced Threat Protection description: Windows Defender Advanced Threat Protection is an enterprise security platform that helps secops to prevent, detect, investigate, and respond to possible cybersecurity threats related to advanced persistent threats. keywords: introduction to Windows Defender Advanced Threat Protection, introduction to Windows Defender ATP, cybersecurity, advanced persistent threat, enterprise security, machine behavioral sensor, cloud security, analytics, threat intelligence, attack surface reduction, next generation protection, automated investigation and remediation, microsoft threat experts, secure score, advanced hunting, microsoft threat protection -search.product: eADQiWindows 10XVcnh +search.product: Windows 10 search.appverid: met150 ms.prod: w10 ms.mktglfcycl: deploy From 19ba0ee18df0b68909b4bcd3957981835c2fd788 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 20:56:56 -0700 Subject: [PATCH 307/349] Update index.md --- windows/security/threat-protection/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/index.md b/windows/security/threat-protection/index.md index bb95d807f2..4c4b362d5c 100644 --- a/windows/security/threat-protection/index.md +++ b/windows/security/threat-protection/index.md @@ -15,7 +15,7 @@ ms.localizationpriority: medium [Windows Defender Advanced Threat Protection (Windows Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) is a unified platform for preventative protection, post-breach detection, automated investigation, and response. Windows Defender ATP protects endpoints from cyber threats; detects advanced attacks and data breaches, automates security incidents and improves security posture. >[!Note] -> The Windows Defender Security Center is currently going through rebranding. All references to Windows Defender will be replaced with Microsoft Defender. You will see that the updates roll in the user interface and in the documentation library in next few months. +> The Windows Defender Security Center is currently going through rebranding. All references to Windows Defender will be replaced with Microsoft Defender. You will see the updates in the user interface and in the documentation library in next few months.

Windows Defender ATP

From a8f49684393705c9d497d9fc145f199cc9a234c8 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 21:02:04 -0700 Subject: [PATCH 308/349] Update tvm-dashboard-insights.md --- .../windows-defender-atp/tvm-dashboard-insights.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index 83d91b6194..e101b9cbcc 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -52,7 +52,7 @@ You can navigate through the portal using the menu options available in all sect Area | Description :---|:--- -(1) Menu | Select menu to expand the navigation pane and see the names of the Threat and Vulnerability Management capabilities. +(1) Menu | Select menu to expand the navigation pane and see the names of the Threat & Vulnerability Management capabilities. (2) Threat & Vulnerability Management navigation pane | Use the navigation pane to move across the **Threat and Vulnerability Management Dashboard**, **Security recommendations**, **Remediation**, and **Software inventory**. **Dashboards** | Get a high-level view of the organization exposure score, MDATP configuration score, top remediation activities, top security recommendations, top vulnerable software, and top exposed machines data. **Security recommendations** | See the list of security recommendations, their related components, insights, number or exposed devices, impact, and request for remediation. You can click each item on the list and it will open a flyout pane where you will see vulnerability details, and have the option to open the software page, and see the remediation options. From 0acd233dec9da383f4f82daba26f9d3b46415f14 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 21:11:58 -0700 Subject: [PATCH 309/349] Update threat-and-vuln-mgt-scenarios.md --- .../threat-and-vuln-mgt-scenarios.md | 15 ++++++--------- 1 file changed, 6 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 5a20239185..df12df6ba5 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -53,22 +53,19 @@ You can reduce the exposure score by remediating issues based on prioritized sec To lower down your threat and vulnerability exposure: 1. Review the **Top security recommendations** from your **Threat & Vulnerability Management dashboard**, and select the first item on the list. This opens the **Security recommendation** page. +![threat insight](images/tvm_bug_icon.png) icon. + >[!NOTE] > There are two types of recommendations: > - Security update which refers to recommendations that require a package installation > - Configuration change which refers to recommendations that require a registry or GPO modification -> Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the threat insight ![threat insight](images/tvm_bug_icon.png) icon. +> Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the threat insight ![top security recommendations](images/tvm_security_recommendations.png) -![top security recommendations](images/tvm_security_recommendations.png) +2. In the **Security recommendations** page, you will see the description of what needs to be done and why. It shows the vulnerability details, such as the associated exploits affecting what machines and its business impact. Click **Open software page** option from the flyout menu. ![details in security recommendations page](images/tvm_security_recommendations_page.png) -2. In the **Security recommendations** page, you will see the description of what needs to be done and why. It shows the vulnerability details, such as the associated exploits affecting what machines and its business impact. Click **Open software page** option from the flyout menu. -![details in security recommendations page](images/tvm_security_recommendations_page.png) +3. Click **Installed machines** and select the affected machine from the list to open the flyout page with the relevant machine details, exposure and risk levels, alert and incident activities. ![details in software page ](images/tvm_software_page_details.png) -3. Click **Installed machines** and select the affected machine from the list to open the flyout page with the relevant machine details, exposure and risk levels, alert and incident activities. -![details in software page ](images/tvm_software_page_details.png) - -4. Click **Open machine page** to connect to the machine and apply the selected recommendation. -![details in machine page](images/tvm_machine_page_details.png) +4. Click **Open machine page** to connect to the machine and apply the selected recommendation. ![details in machine page](images/tvm_machine_page_details.png) 5. Allow a few hours for the changes to propagate in the system. From c25b93c34eb63aed44cf3c66f4b037564a19df48 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 21:16:54 -0700 Subject: [PATCH 310/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index df12df6ba5..068a96ab4b 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -53,13 +53,13 @@ You can reduce the exposure score by remediating issues based on prioritized sec To lower down your threat and vulnerability exposure: 1. Review the **Top security recommendations** from your **Threat & Vulnerability Management dashboard**, and select the first item on the list. This opens the **Security recommendation** page. -![threat insight](images/tvm_bug_icon.png) icon. +![top security recommendations](images/tvm_security_recommendations.png) >[!NOTE] > There are two types of recommendations: > - Security update which refers to recommendations that require a package installation > - Configuration change which refers to recommendations that require a registry or GPO modification -> Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the threat insight ![top security recommendations](images/tvm_security_recommendations.png) +> Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the threat insight ![threat insight](images/tvm_bug_icon.png) icon. 2. In the **Security recommendations** page, you will see the description of what needs to be done and why. It shows the vulnerability details, such as the associated exploits affecting what machines and its business impact. Click **Open software page** option from the flyout menu. ![details in security recommendations page](images/tvm_security_recommendations_page.png) @@ -78,14 +78,12 @@ To lower down your threat and vulnerability exposure: Remediating issues in the security recommendations list will improve your configuration. As you do so, your configuration score improves, which means building your organization's resilience against cybersecurity threats and vulnerabilities stronger. 1. From the Configuration score widget, select **Security controls**. This opens the **Security recommendations** page showing the list of issues related to security controls. - ![configuration score widget](images/tvm_config_score.png) 2. Select the first item on the list. This opens the flyout menu with the description of the security controls issue, a short description of the potential risk, insights, configuration ID, exposed machines, and business impact. Click **Remediation options**. ![security controls related security recommendations](images/tvm_security_controls.png) 3. Read the description to understand the context of the issue and what to do next. Select a due date, add notes, and select **Export all remediation activity data to CSV** so you can attach it to the email that you can send to your IT Administrator for follow-up. - ![request remediation](images/tvm_request_remediation.png). You will see a confirmation message that the remediation task has been created. From 79e88100a8e50ed9ffc1e6f373db9072773816d1 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 21:21:12 -0700 Subject: [PATCH 311/349] Update threat-and-vuln-mgt-scenarios.md --- .../threat-and-vuln-mgt-scenarios.md | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 068a96ab4b..a8164fbb1a 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -53,7 +53,8 @@ You can reduce the exposure score by remediating issues based on prioritized sec To lower down your threat and vulnerability exposure: 1. Review the **Top security recommendations** from your **Threat & Vulnerability Management dashboard**, and select the first item on the list. This opens the **Security recommendation** page. -![top security recommendations](images/tvm_security_recommendations.png) + +>![top security recommendations](images/tvm_security_recommendations.png) >[!NOTE] > There are two types of recommendations: @@ -78,7 +79,8 @@ To lower down your threat and vulnerability exposure: Remediating issues in the security recommendations list will improve your configuration. As you do so, your configuration score improves, which means building your organization's resilience against cybersecurity threats and vulnerabilities stronger. 1. From the Configuration score widget, select **Security controls**. This opens the **Security recommendations** page showing the list of issues related to security controls. -![configuration score widget](images/tvm_config_score.png) + +>![configuration score widget](images/tvm_config_score.png) 2. Select the first item on the list. This opens the flyout menu with the description of the security controls issue, a short description of the potential risk, insights, configuration ID, exposed machines, and business impact. Click **Remediation options**. ![security controls related security recommendations](images/tvm_security_controls.png) @@ -86,8 +88,8 @@ Remediating issues in the security recommendations list will improve your config 3. Read the description to understand the context of the issue and what to do next. Select a due date, add notes, and select **Export all remediation activity data to CSV** so you can attach it to the email that you can send to your IT Administrator for follow-up. ![request remediation](images/tvm_request_remediation.png). -You will see a confirmation message that the remediation task has been created. -![remediation task creation confirmation](images/tvm_remediation_task_created.png) +>You will see a confirmation message that the remediation task has been created. +>![remediation task creation confirmation](images/tvm_remediation_task_created.png) 4. Save your CSV file. ![save csv file](images/tvm_save_csv_file.png) From 9e5a4c41152805f0ebaaf080554c6947f506956f Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 21:23:11 -0700 Subject: [PATCH 312/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index a8164fbb1a..08be2b1786 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -54,7 +54,7 @@ To lower down your threat and vulnerability exposure: 1. Review the **Top security recommendations** from your **Threat & Vulnerability Management dashboard**, and select the first item on the list. This opens the **Security recommendation** page. ->![top security recommendations](images/tvm_security_recommendations.png) +>>![top security recommendations](images/tvm_security_recommendations.png) >[!NOTE] > There are two types of recommendations: @@ -80,13 +80,14 @@ Remediating issues in the security recommendations list will improve your config 1. From the Configuration score widget, select **Security controls**. This opens the **Security recommendations** page showing the list of issues related to security controls. ->![configuration score widget](images/tvm_config_score.png) +>>![configuration score widget](images/tvm_config_score.png) 2. Select the first item on the list. This opens the flyout menu with the description of the security controls issue, a short description of the potential risk, insights, configuration ID, exposed machines, and business impact. Click **Remediation options**. ![security controls related security recommendations](images/tvm_security_controls.png) 3. Read the description to understand the context of the issue and what to do next. Select a due date, add notes, and select **Export all remediation activity data to CSV** so you can attach it to the email that you can send to your IT Administrator for follow-up. -![request remediation](images/tvm_request_remediation.png). + +>>![request remediation](images/tvm_request_remediation.png). >You will see a confirmation message that the remediation task has been created. >![remediation task creation confirmation](images/tvm_remediation_task_created.png) From 8168d8b29fcabf86e185a23a5dc8ce23017e21df Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 22:30:20 -0700 Subject: [PATCH 313/349] Update tvm-dashboard-insights.md --- .../windows-defender-atp/tvm-dashboard-insights.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index e101b9cbcc..98c4077fdb 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -29,8 +29,8 @@ Threat & Vulnerability Management is a component of Microsoft Defender ATP, and - Real-time endpoint detection and response (EDR) insights correlated with endpoint vulnerabilities - Invaluable machine vulnerability context during incident investigations - Built-in remediation processes through Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) ->[!Note] -> Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) integration will be available in the coming weeks. + >[!Note] + > Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) integration will be available in the coming weeks. You can use the Threat & Vulnerability Management capability in [Microsoft Defender Security Center](https://securitycenter.windows.com/) to: - View exposure and configuration scores side-by-side with top security recommendations, software vulnerability, remediation activities, and exposed machines From 36b350f514ef3d449c6bb8b338bcbf89c7cbc7d7 Mon Sep 17 00:00:00 2001 From: DulceMV Date: Mon, 15 Apr 2019 22:57:14 -0700 Subject: [PATCH 314/349] Update portal-overview-windows-defender-advanced-threat-protection.md Added TVM icons --- ...l-overview-windows-defender-advanced-threat-protection.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md index 352394a662..9ace9bafb4 100644 --- a/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md @@ -108,10 +108,13 @@ Icon | Description ![Running icon](images\running.png) | Automated investigation - running ![Remediated icon](images\remediated.png) | Automated investigation - remediated ![Partially investigated icon](images\partially_remediated.png) | Automated investigation - partially remediated +![Threat insights icon](images\tvm_bug_icon.png) | Threat & Vulnerability Management - threat insights +![Possible active alert icon](images\tvm_alert_icon.png) | Threat & Vulnerability Management - possible active alert +![Recommendation insights icon](images\tvm_insight_icon.png) | Threat & Vulnerability Management - recommendation insights ## Related topics - [Understand the Windows Defender Advanced Threat Protection portal](use-windows-defender-advanced-threat-protection.md) - [View the Security operations dashboard](security-operations-dashboard-windows-defender-advanced-threat-protection.md) - [View the Secure Score dashboard and improve your secure score](secure-score-dashboard-windows-defender-advanced-threat-protection.md) -- [View the Threat analytics dashboard and take recommended mitigation actions](threat-analytics-dashboard-windows-defender-advanced-threat-protection.md) \ No newline at end of file +- [View the Threat analytics dashboard and take recommended mitigation actions](threat-analytics-dashboard-windows-defender-advanced-threat-protection.md) From 9a16e848ca71ea99c564ff49a86b40b98ff22c1d Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Mon, 15 Apr 2019 23:03:28 -0700 Subject: [PATCH 315/349] Fixing formatting issues --- .../threat-and-vuln-mgt-scenarios.md | 30 +++++++++---------- 1 file changed, 15 insertions(+), 15 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 08be2b1786..9b22ed3428 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -52,16 +52,16 @@ You can reduce the exposure score by remediating issues based on prioritized sec To lower down your threat and vulnerability exposure: -1. Review the **Top security recommendations** from your **Threat & Vulnerability Management dashboard**, and select the first item on the list. This opens the **Security recommendation** page. - ->>![top security recommendations](images/tvm_security_recommendations.png) - ->[!NOTE] -> There are two types of recommendations: -> - Security update which refers to recommendations that require a package installation -> - Configuration change which refers to recommendations that require a registry or GPO modification -> Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the threat insight ![threat insight](images/tvm_bug_icon.png) icon. +1. Review the **Top security recommendations** from your **Threat & Vulnerability Management dashboard**, and select the first item on the list. This opens the **Security recommendation** page. + + >>![top security recommendations](images/tvm_security_recommendations.png) + >[!NOTE] + > There are two types of recommendations: + > - Security update which refers to recommendations that require a package installation + > - Configuration change which refers to recommendations that require a registry or GPO modification + > Always prioritize recommendations that are associated with ongoing threats. These recommendations are marked with the threat insight ![threat insight](images/tvm_bug_icon.png) icon. + 2. In the **Security recommendations** page, you will see the description of what needs to be done and why. It shows the vulnerability details, such as the associated exploits affecting what machines and its business impact. Click **Open software page** option from the flyout menu. ![details in security recommendations page](images/tvm_security_recommendations_page.png) 3. Click **Installed machines** and select the affected machine from the list to open the flyout page with the relevant machine details, exposure and risk levels, alert and incident activities. ![details in software page ](images/tvm_software_page_details.png) @@ -80,20 +80,20 @@ Remediating issues in the security recommendations list will improve your config 1. From the Configuration score widget, select **Security controls**. This opens the **Security recommendations** page showing the list of issues related to security controls. ->>![configuration score widget](images/tvm_config_score.png) + >>![configuration score widget](images/tvm_config_score.png) 2. Select the first item on the list. This opens the flyout menu with the description of the security controls issue, a short description of the potential risk, insights, configuration ID, exposed machines, and business impact. Click **Remediation options**. -![security controls related security recommendations](images/tvm_security_controls.png) + ![security controls related security recommendations](images/tvm_security_controls.png) 3. Read the description to understand the context of the issue and what to do next. Select a due date, add notes, and select **Export all remediation activity data to CSV** so you can attach it to the email that you can send to your IT Administrator for follow-up. ->>![request remediation](images/tvm_request_remediation.png). + >>![request remediation](images/tvm_request_remediation.png). ->You will see a confirmation message that the remediation task has been created. ->![remediation task creation confirmation](images/tvm_remediation_task_created.png) + >You will see a confirmation message that the remediation task has been created. + >![remediation task creation confirmation](images/tvm_remediation_task_created.png) 4. Save your CSV file. -![save csv file](images/tvm_save_csv_file.png) + ![save csv file](images/tvm_save_csv_file.png) 5. Send a follow up email to your IT Administrator and allow the time that you have alloted for the remediation to propagate in the system. From 7fd578d8fb2c8178f853a6b0d65e9eb2bfac1c2b Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Tue, 16 Apr 2019 10:21:37 +0300 Subject: [PATCH 316/349] added clarification https://github.com/MicrosoftDocs/windows-itpro-docs/issues/3011 --- ...ure-extension-file-exclusions-windows-defender-antivirus.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-antivirus/configure-extension-file-exclusions-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/configure-extension-file-exclusions-windows-defender-antivirus.md index 78351fac00..492af0b7b7 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/configure-extension-file-exclusions-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/configure-extension-file-exclusions-windows-defender-antivirus.md @@ -24,6 +24,9 @@ You can exclude certain files from Windows Defender Antivirus scans by modifying Generally, you shouldn't need to apply exclusions. Windows Defender Antivirus includes a number of automatic exclusions based on known operating system behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations. +> [!NOTE] +> Automatic exclusions apply only to Windows Server 2016 and above. + >[!TIP] >The default antimalware policy we deploy at Microsoft doesn't set any exclusions by default. From 06749a763a4a67ba05dbacc1c4701382f737ca0b Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Tue, 16 Apr 2019 05:30:49 -0700 Subject: [PATCH 317/349] format --- devices/surface-hub/surface-hub-qos.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface-hub/surface-hub-qos.md b/devices/surface-hub/surface-hub-qos.md index 5cf199afd0..3d3dfb7447 100644 --- a/devices/surface-hub/surface-hub-qos.md +++ b/devices/surface-hub/surface-hub-qos.md @@ -38,7 +38,7 @@ This procedure explains how to configure QoS for Surface Hub using Microsoft Int Video Process Name | String | /HubVideo/AppPathNameMatchCondition | Microsoft.PPISkype.Windows.exe >[!IMPORTANT] - >Each **OMA-URI** path begins with `./Device/Vendor/MSFT/NetworkQoSPolicy`. The full path for the audio source port setting, for example, will be './Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/SourcePortMatchCondition'. + >Each **OMA-URI** path begins with `./Device/Vendor/MSFT/NetworkQoSPolicy`. The full path for the audio source port setting, for example, will be `./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/SourcePortMatchCondition`. From b1319ba01ce4ae8b1e147017c924bf0da3e7d2b4 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Tue, 16 Apr 2019 18:38:27 +0500 Subject: [PATCH 318/349] Details about screen saver I have added details about screen saver as if the screen saver is not set up this policy doesn't work. So active screen saver on the destination machine is recommended. --- .../interactive-logon-machine-inactivity-limit.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/security-policy-settings/interactive-logon-machine-inactivity-limit.md b/windows/security/threat-protection/security-policy-settings/interactive-logon-machine-inactivity-limit.md index 08badffc52..49a0c41314 100644 --- a/windows/security/threat-protection/security-policy-settings/interactive-logon-machine-inactivity-limit.md +++ b/windows/security/threat-protection/security-policy-settings/interactive-logon-machine-inactivity-limit.md @@ -24,7 +24,7 @@ Describes the best practices, location, values, management, and security conside ## Reference -Beginning with Windows Server 2012 and Windows 8, Windows detects user-input inactivity of a sign-in (logon) session by using the security policy setting **Interactive logon: Machine inactivity limit**. If the amount of inactive time exceeds the inactivity limit set by this policy, then the user’s session locks by invoking the screen saver. This policy setting allows you to control the locking time by using Group Policy. +Beginning with Windows Server 2012 and Windows 8, Windows detects user-input inactivity of a sign-in (logon) session by using the security policy setting **Interactive logon: Machine inactivity limit**. If the amount of inactive time exceeds the inactivity limit set by this policy, then the user’s session locks by invoking the screen saver(screen saver should be active on the destination machine). This policy setting allows you to control the locking time by using Group Policy. ### Possible values From f242b8fc84d604fba133e54143436cd39a19c8f5 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Tue, 16 Apr 2019 07:25:03 -0700 Subject: [PATCH 319/349] fix values --- devices/surface-hub/surface-hub-qos.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/devices/surface-hub/surface-hub-qos.md b/devices/surface-hub/surface-hub-qos.md index 3d3dfb7447..39463f0d49 100644 --- a/devices/surface-hub/surface-hub-qos.md +++ b/devices/surface-hub/surface-hub-qos.md @@ -31,9 +31,9 @@ This procedure explains how to configure QoS for Surface Hub using Microsoft Int Name | Data type | OMA-URI
./Device/Vendor/MSFT/NetworkQoSPolicy | Value --- | --- | --- | --- Audio Source Port | String | /HubAudio/SourcePortMatchCondition | Get the values from your Skype administrator - Audio DSCP | Integer | /HubAudio/DSCPAction | Get the values from your Skype administrator + Audio DSCP | Integer | /HubAudio/DSCPAction | 46 Video Source Port | String | /HubVideo/SourcePortMatchCondition | Get the values from your Skype administrator - Video DSCP | Integer | /HubVideo/DSCPAction | Get the values from your Skype administrator + Video DSCP | Integer | /HubVideo/DSCPAction | 34 Audio Process Name | String | /HubAudio/AppPathNameMatchCondition | Microsoft.PPISkype.Windows.exe Video Process Name | String | /HubVideo/AppPathNameMatchCondition | Microsoft.PPISkype.Windows.exe From 972819b2c65e9826ec2125ae782d52f8a06919c8 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 16 Apr 2019 08:02:17 -0700 Subject: [PATCH 320/349] Update interactive-logon-machine-inactivity-limit.md --- .../interactive-logon-machine-inactivity-limit.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/security-policy-settings/interactive-logon-machine-inactivity-limit.md b/windows/security/threat-protection/security-policy-settings/interactive-logon-machine-inactivity-limit.md index 49a0c41314..2be015772f 100644 --- a/windows/security/threat-protection/security-policy-settings/interactive-logon-machine-inactivity-limit.md +++ b/windows/security/threat-protection/security-policy-settings/interactive-logon-machine-inactivity-limit.md @@ -24,7 +24,7 @@ Describes the best practices, location, values, management, and security conside ## Reference -Beginning with Windows Server 2012 and Windows 8, Windows detects user-input inactivity of a sign-in (logon) session by using the security policy setting **Interactive logon: Machine inactivity limit**. If the amount of inactive time exceeds the inactivity limit set by this policy, then the user’s session locks by invoking the screen saver(screen saver should be active on the destination machine). This policy setting allows you to control the locking time by using Group Policy. +Beginning with Windows Server 2012 and Windows 8, Windows detects user-input inactivity of a sign-in (logon) session by using the security policy setting **Interactive logon: Machine inactivity limit**. If the amount of inactive time exceeds the inactivity limit set by this policy, then the user’s session locks by invoking the screen saver (screen saver should be active on the destination machine). This policy setting allows you to control the locking time by using Group Policy. ### Possible values From 0550e49c2d78bcc441d77369bac085c81e2f3d9d Mon Sep 17 00:00:00 2001 From: Jose Ortega Date: Tue, 16 Apr 2019 10:03:52 -0500 Subject: [PATCH 321/349] Fixed extra lines 258+259 --- .../customize-exploit-protection.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-exploit-guard/customize-exploit-protection.md b/windows/security/threat-protection/windows-defender-exploit-guard/customize-exploit-protection.md index d2d4b0adf4..bde9222c86 100644 --- a/windows/security/threat-protection/windows-defender-exploit-guard/customize-exploit-protection.md +++ b/windows/security/threat-protection/windows-defender-exploit-guard/customize-exploit-protection.md @@ -255,8 +255,6 @@ Set-ProcessMitigation -Name processName.exe -Enable EnableExportAddressFilterPlu See the [Windows Security](../windows-defender-security-center/windows-defender-security-center.md#customize-notifications-from-the-windows-defender-security-center) topic for more information about customizing the notification when a rule is triggered and blocks an app or file. - - ## Related topics - [Protect devices from exploits](exploit-protection-exploit-guard.md) From 0cf2e1e4fb9935005cfc9d11ff97ba4f03691a77 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Tue, 16 Apr 2019 10:55:01 -0700 Subject: [PATCH 322/349] fixing alias and note tag --- .../windows-defender-atp/configuration-score.md | 2 +- .../windows-defender-atp/configure-and-manage-tvm.md | 2 +- .../configure-microsoft-threat-experts.md | 2 +- .../windows-defender-atp/microsoft-threat-experts.md | 2 +- .../windows-defender-atp/next-gen-threat-and-vuln-mgt.md | 2 +- .../threat-and-vuln-mgt-scenarios.md | 2 +- .../windows-defender-atp/tvm-dashboard-insights.md | 9 +++++---- 7 files changed, 11 insertions(+), 10 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configuration-score.md b/windows/security/threat-protection/windows-defender-atp/configuration-score.md index bd19fc65a7..27e8359157 100644 --- a/windows/security/threat-protection/windows-defender-atp/configuration-score.md +++ b/windows/security/threat-protection/windows-defender-atp/configuration-score.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.author: dolmont -author: DulceMVeluz +author: DolcitaMontemayor ms.localizationpriority: medium manager: dansimp audience: ITPro diff --git a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md index f1da16f74c..b7d4562277 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.author: dolmont -author: Dolcita Montemayor +author: DolcitaMontemayor ms.localizationpriority: medium manager: dansimp audience: ITPro diff --git a/windows/security/threat-protection/windows-defender-atp/configure-microsoft-threat-experts.md b/windows/security/threat-protection/windows-defender-atp/configure-microsoft-threat-experts.md index 8e6edc791b..b39ab88e52 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-microsoft-threat-experts.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-microsoft-threat-experts.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.author: dolmont -author: DulceMV +author: DolcitaMontemayor ms.localizationpriority: medium manager: dansimp audience: ITPro diff --git a/windows/security/threat-protection/windows-defender-atp/microsoft-threat-experts.md b/windows/security/threat-protection/windows-defender-atp/microsoft-threat-experts.md index 380af8ef33..53c9ef1b67 100644 --- a/windows/security/threat-protection/windows-defender-atp/microsoft-threat-experts.md +++ b/windows/security/threat-protection/windows-defender-atp/microsoft-threat-experts.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.author: dolmont -author: DulceMV +author: DolcitaMontemayor ms.localizationpriority: medium manager: dansimp audience: ITPro diff --git a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md index 4b3ece7293..5d814b806f 100644 --- a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md +++ b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.author: dolmont -author: Dolcita Montemayor +author: DolcitaMontemayor ms.localizationpriority: medium manager: dansimp audience: ITPro diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 9b22ed3428..6df04633b5 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.author: dolmont -author: DulceMVeluz +author: DolcitaMontemayor ms.localizationpriority: medium manager: dansimp audience: ITPro diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index 98c4077fdb..9ccaaf402a 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.author: dolmont -author: DulceMVeluz +author: DolcitaMontemayor ms.localizationpriority: medium manager: dansimp audience: ITPro @@ -28,9 +28,10 @@ ms.topic: conceptual Threat & Vulnerability Management is a component of Microsoft Defender ATP, and provides both security administrators and security operations teams with unique value, including: - Real-time endpoint detection and response (EDR) insights correlated with endpoint vulnerabilities - Invaluable machine vulnerability context during incident investigations -- Built-in remediation processes through Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) - >[!Note] - > Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) integration will be available in the coming weeks. +- Built-in remediation processes through Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) + + >[!NOTE] + > Microsoft Intune and Microsoft System Center Configuration Manager (SCCM) integration will be available in the coming weeks. You can use the Threat & Vulnerability Management capability in [Microsoft Defender Security Center](https://securitycenter.windows.com/) to: - View exposure and configuration scores side-by-side with top security recommendations, software vulnerability, remediation activities, and exposed machines From e27e854dcf3b1f263cf6494c711b4e9ffafd6d39 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Tue, 16 Apr 2019 11:13:52 -0700 Subject: [PATCH 323/349] fixing alias for real this time --- .../windows-defender-atp/configuration-score.md | 2 +- .../windows-defender-atp/configure-and-manage-tvm.md | 2 +- .../windows-defender-atp/configure-microsoft-threat-experts.md | 2 +- .../windows-defender-atp/microsoft-threat-experts.md | 2 +- .../windows-defender-atp/next-gen-threat-and-vuln-mgt.md | 2 +- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 2 +- .../windows-defender-atp/tvm-dashboard-insights.md | 2 +- 7 files changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configuration-score.md b/windows/security/threat-protection/windows-defender-atp/configuration-score.md index 27e8359157..d430849f2e 100644 --- a/windows/security/threat-protection/windows-defender-atp/configuration-score.md +++ b/windows/security/threat-protection/windows-defender-atp/configuration-score.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.author: dolmont -author: DolcitaMontemayor +author: DulceMontemayor ms.localizationpriority: medium manager: dansimp audience: ITPro diff --git a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md index b7d4562277..81e1e9bed7 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-and-manage-tvm.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.author: dolmont -author: DolcitaMontemayor +author: DulceMontemayor ms.localizationpriority: medium manager: dansimp audience: ITPro diff --git a/windows/security/threat-protection/windows-defender-atp/configure-microsoft-threat-experts.md b/windows/security/threat-protection/windows-defender-atp/configure-microsoft-threat-experts.md index b39ab88e52..9f81f669b5 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-microsoft-threat-experts.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-microsoft-threat-experts.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.author: dolmont -author: DolcitaMontemayor +author: DulceMontemayor ms.localizationpriority: medium manager: dansimp audience: ITPro diff --git a/windows/security/threat-protection/windows-defender-atp/microsoft-threat-experts.md b/windows/security/threat-protection/windows-defender-atp/microsoft-threat-experts.md index 53c9ef1b67..8f85356b3f 100644 --- a/windows/security/threat-protection/windows-defender-atp/microsoft-threat-experts.md +++ b/windows/security/threat-protection/windows-defender-atp/microsoft-threat-experts.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.author: dolmont -author: DolcitaMontemayor +author: DulceMontemayor ms.localizationpriority: medium manager: dansimp audience: ITPro diff --git a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md index 5d814b806f..d83dc2575a 100644 --- a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md +++ b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.author: dolmont -author: DolcitaMontemayor +author: DulceMontemayor ms.localizationpriority: medium manager: dansimp audience: ITPro diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index 6df04633b5..a88e212a95 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.author: dolmont -author: DolcitaMontemayor +author: DulceMontemayor ms.localizationpriority: medium manager: dansimp audience: ITPro diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index 9ccaaf402a..9613ef139d 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.author: dolmont -author: DolcitaMontemayor +author: DulceMontemayor ms.localizationpriority: medium manager: dansimp audience: ITPro From 9a52ce83c4f03d1bc0fc629a30b459bce0985a8a Mon Sep 17 00:00:00 2001 From: DaniHalfin Date: Tue, 16 Apr 2019 18:22:28 +0000 Subject: [PATCH 324/349] Initialize Docs repository: https://github.com/MicrosoftDocs/windows-docs-pr of branch master --- .openpublishing.publish.config.json | 18 +++++++++++++++++- 1 file changed, 17 insertions(+), 1 deletion(-) diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json index 00a28f07b2..33e053e7cd 100644 --- a/.openpublishing.publish.config.json +++ b/.openpublishing.publish.config.json @@ -305,6 +305,22 @@ "build_entry_point": "docs", "template_folder": "_themes" }, + { + "docset_name": "windows-known-issues", + "build_source_folder": "windows/known-issues", + "build_output_subfolder": "windows-known-issues", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, { "docset_name": "windows-manage", "build_source_folder": "windows/manage", @@ -465,4 +481,4 @@ }, "need_generate_pdf": false, "need_generate_intellisense": false -} +} \ No newline at end of file From 9cd3ee6fd001417adb723b2e17b9705a2fe50198 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 16 Apr 2019 13:18:08 -0700 Subject: [PATCH 325/349] added topics to toc --- windows/security/threat-protection/TOC.md | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index fba8b17c30..178b297aa0 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -1020,9 +1020,15 @@ ### [Windows security guidance for enterprises](windows-security-configuration-framework/windows-security-compliance.md) -### [Windows security baselines](windows-security-baselines.md) -#### [Security Compliance Toolkit](security-compliance-toolkit-10.md) -#### [Get support](get-support-for-security-baselines.md) +#### [Windows security baselines](windows-security-configuration-framework/windows-security-baselines.md) +##### [Security Compliance Toolkit](windows-security-configuration-framework/security-compliance-toolkit-10.md) +##### [Get support](windows-security-configuration-framework/get-support-for-security-baselines.md) +#### [Windows security configuration framework](windows-security-configuration-framework/windows-security-configuration-framework.md) +##### [Level 5 enterprise security](windows-security-configuration-framework/level-5-enterprise-security.md) +##### [Level 4 enterprise high security](windows-security-configuration-framework/level-4-enterprise-high-security.md) +##### [Level 3 enterprise VIP security](windows-security-configuration-framework/level-3-enterprise-vip-security.md) +##### [Level 2 enterprise dev/ops workstation](windows-security-configuration-framework/level-2-enterprise-devops-security.md) +##### [Level 1 enterprise administrator workstation](windows-security-configuration-framework/level-1-enterprise-administrator-security.md) ### [MBSA removal and alternatives](mbsa-removal-and-guidance.md) From 8c19520f78c30f58fbd64817869b5ae6f59cbbb7 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 16 Apr 2019 13:26:33 -0700 Subject: [PATCH 326/349] new seccon files --- .../TOC.md | 11 + .../get-support-for-security-baselines.md | 101 ++++++++ ...vel-1-enterprise-administrator-security.md | 25 ++ .../level-2-enterprise-devops-security.md | 27 ++ .../level-3-enterprise-VIP-security.md | 141 ++++++++++ .../level-4-enterprise-high-security.md | 209 +++++++++++++++ .../level-5-enterprise-security.md | 244 ++++++++++++++++++ .../security-compliance-toolkit-10.md | 72 ++++++ .../windows-security-baselines.md | 79 ++++++ .../windows-security-compliance.md | 28 ++ ...indows-security-configuration-framework.md | 64 +++++ 11 files changed, 1001 insertions(+) create mode 100644 windows/security/threat-protection/windows-security-configuration-framework/TOC.md create mode 100644 windows/security/threat-protection/windows-security-configuration-framework/get-support-for-security-baselines.md create mode 100644 windows/security/threat-protection/windows-security-configuration-framework/level-1-enterprise-administrator-security.md create mode 100644 windows/security/threat-protection/windows-security-configuration-framework/level-2-enterprise-devops-security.md create mode 100644 windows/security/threat-protection/windows-security-configuration-framework/level-3-enterprise-VIP-security.md create mode 100644 windows/security/threat-protection/windows-security-configuration-framework/level-4-enterprise-high-security.md create mode 100644 windows/security/threat-protection/windows-security-configuration-framework/level-5-enterprise-security.md create mode 100644 windows/security/threat-protection/windows-security-configuration-framework/security-compliance-toolkit-10.md create mode 100644 windows/security/threat-protection/windows-security-configuration-framework/windows-security-baselines.md create mode 100644 windows/security/threat-protection/windows-security-configuration-framework/windows-security-compliance.md create mode 100644 windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md diff --git a/windows/security/threat-protection/windows-security-configuration-framework/TOC.md b/windows/security/threat-protection/windows-security-configuration-framework/TOC.md new file mode 100644 index 0000000000..8ea1c320ba --- /dev/null +++ b/windows/security/threat-protection/windows-security-configuration-framework/TOC.md @@ -0,0 +1,11 @@ +# [Windows security guidance for enterprises](windows-security-compliance.md) + +## [Windows security baselines](windows-security-baselines.md) +### [Security Compliance Toolkit](security-compliance-toolkit-10.md) +### [Get support](get-support-for-security-baselines.md) +## [Windows security configuration framework](windows-security-configuration-framework.md) +### [Level 5 enterprise security](level-5-enterprise-security.md) +### [Level 4 enterprise high security](level-4-enterprise-high-security.md) +### [Level 3 enterprise VIP security](level-3-enterprise-vip-security.md) +### [Level 2 enterprise dev/ops workstation](level-2-enterprise-devops-security.md) +### [Level 1 enterprise administrator workstation](level-1-enterprise-administrator-security.md) diff --git a/windows/security/threat-protection/windows-security-configuration-framework/get-support-for-security-baselines.md b/windows/security/threat-protection/windows-security-configuration-framework/get-support-for-security-baselines.md new file mode 100644 index 0000000000..bdbc4a1115 --- /dev/null +++ b/windows/security/threat-protection/windows-security-configuration-framework/get-support-for-security-baselines.md @@ -0,0 +1,101 @@ +--- +title: Get support +description: This article, and the articles it links to, answers frequently asked question on how to get support for Windows baselines, the Security Compliance Toolkit (SCT), and related topics in your organization +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: sagaudre +author: justinha +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 06/25/2018 +--- + +# Get Support + +**What is the Microsoft Security Compliance Manager (SCM)?** + +The Security Compliance Manager (SCM) is now retired and is no longer supported. The reason is that SCM was an incredibly complex and large program that needed to be updated for every Windows release. It has been replaced by the Security Compliance Toolkit (SCT). To provide a better service for our customers, we have moved to SCT with which we can publish baselines through the Microsoft Download Center in a lightweight .zip file that contains GPO backups, GPO reports, Excel spreadsheets, WMI filters, and scripts to apply the settings to local policy. + +More information about this change can be found on the [Microsoft Security Guidance blog](https://blogs.technet.microsoft.com/secguide/2017/06/15/security-compliance-manager-scm-retired-new-tools-and-procedures/). + +**Where can I get an older version of a Windows baseline?** + +Any version of Windows baseline before Windows 10 1703 can still be downloaded using SCM. Any future versions of Windows baseline will be available through SCT. See the version matrix in this article to see if your version of Windows baseline is available on SCT. + +- [SCM 4.0 Download](https://technet.microsoft.com/solutionaccelerators/cc835245.aspx) +- [SCM Frequently Asked Questions (FAQ)](https://social.technet.microsoft.com/wiki/contents/articles/1836.microsoft-security-compliance-manager-scm-frequently-asked-questions-faq.aspx) +- [SCM Release Notes](https://social.technet.microsoft.com/wiki/contents/articles/1864.microsoft-security-compliance-manager-scm-release-notes.aspx) +- [SCM baseline download help](https://social.technet.microsoft.com/wiki/contents/articles/1865.microsoft-security-compliance-manager-scm-baseline-download-help.aspx) + +**What file formats are supported by the new SCT?** + +The toolkit supports formats created by the Windows GPO backup feature (.pol, .inf, and .csv). Policy Analyzer saves its data in XML files with a .PolicyRules file extension. LGPO also supports its own LGPO text file format as a text-based analog for the binary registry.pol file format. See the LGPO documentation for more information. Keep in mind that SCM’s .cab files are no longer supported. + +**Does SCT support Desired State Configuration (DSC) file format?** + +Not yet. PowerShell-based DSC is rapidly gaining popularity, and more DSC tools are coming online to convert GPOs and DSC and to validate system configuration. We are currently developing a tool to provide customers with these features. + +**Does SCT support the creation of System Center Configuration Manager (SCCM) DCM packs?** + +No. A potential alternative is Desired State Configuration (DSC), a feature of the [Windows Management Framework](https://www.microsoft.com/download/details.aspx?id=40855). A tool that supports conversion of GPO backups to DSC format can be found [here](https://github.com/Microsoft/BaselineManagement). + +**Does SCT support the creation of Security Content Automation Protocol (SCAP)-format policies?** + +No. SCM supported only SCAP 1.0, which was not updated as SCAP evolved. The new toolkit likewise does not include SCAP support. + +
+ +## Version Matrix + +**Client Versions** + +| Name | Build | Baseline Release Date | Security Tools | +|---|---|---|---| +|Windows 10 | [1709 (RS3)](https://blogs.technet.microsoft.com/secguide/2017/09/27/security-baseline-for-windows-10-fall-creators-update-v1709-draft/)

[1703 (RS2)](https://blogs.technet.microsoft.com/secguide/2017/08/30/security-baseline-for-windows-10-creators-update-v1703-final/)

[1607 (RS1)](https://blogs.technet.microsoft.com/secguide/2016/10/17/security-baseline-for-windows-10-v1607-anniversary-edition-and-windows-server-2016/)

[1511 (TH2)](https://blogs.technet.microsoft.com/secguide/2016/01/22/security-baseline-for-windows-10-v1511-threshold-2-final/)

[1507 (TH1)](https://blogs.technet.microsoft.com/secguide/2016/01/22/security-baseline-for-windows-10-v1507-build-10240-th1-ltsb-update/)| October 2017

August 2017

October 2016

January 2016

January 2016 |[SCT 1.0](https://www.microsoft.com/download/details.aspx?id=55319) | +Windows 8.1 |[9600 (April Update)](https://blogs.technet.microsoft.com/secguide/2014/08/13/security-baselines-for-windows-8-1-windows-server-2012-r2-and-internet-explorer-11-final/)| October 2013| [SCM 4.0](https://technet.microsoft.com/solutionaccelerators/cc835245.aspx) | +Windows 8 |[9200](https://technet.microsoft.com/library/jj916413.aspx) |October 2012| [SCM 4.0](https://technet.microsoft.com/solutionaccelerators/cc835245.aspx)| +Windows 7 |[7601 (SP1)](https://technet.microsoft.com/library/ee712767.aspx)| October 2009| [SCM 4.0](https://technet.microsoft.com/solutionaccelerators/cc835245.aspx) | +| Vista |[6002 (SP2)](https://technet.microsoft.com/library/dd450978.aspx)| January 2007| [SCM 4.0](https://technet.microsoft.com/solutionaccelerators/cc835245.aspx) | +| Windows XP |[2600 (SP3)](https://technet.microsoft.com/library/cc163061.aspx)| October 2001| [SCM 4.0](https://technet.microsoft.com/solutionaccelerators/cc835245.aspx)| + +
+ +**Server Versions** + +| Name | Build | Baseline Release Date | Security Tools | +|---|---|---|---| +|Windows Server 2016 | [SecGuide](https://blogs.technet.microsoft.com/secguide/2016/10/17/security-baseline-for-windows-10-v1607-anniversary-edition-and-windows-server-2016/) |October 2016 |[SCT 1.0](https://www.microsoft.com/download/details.aspx?id=55319) | +|Windows Server 2012 R2|[SecGuide](https://blogs.technet.microsoft.com/secguide/2016/10/17/security-baseline-for-windows-10-v1607-anniversary-edition-and-windows-server-2016/)|August 2014 | [SCT 1.0](https://www.microsoft.com/download/details.aspx?id=55319)| +|Windows Server 2012|[Technet](https://technet.microsoft.com/library/jj898542.aspx) |2012| [SCM 4.0](https://technet.microsoft.com/solutionaccelerators/cc835245.aspx) | +Windows Server 2008 R2 |[SP1](https://technet.microsoft.com/library/gg236605.aspx)|2009 | [SCM 4.0](https://technet.microsoft.com/solutionaccelerators/cc835245.aspx) | +| Windows Server 2008 |[SP2](https://technet.microsoft.com/library/cc514539.aspx)| 2008 | [SCM 4.0](https://technet.microsoft.com/solutionaccelerators/cc835245.aspx) | +|Windows Server 2003 R2|[Technet](https://technet.microsoft.com/library/cc163140.aspx)| 2003 | [SCM 4.0](https://technet.microsoft.com/solutionaccelerators/cc835245.aspx)| +|Windows Server 2003|[Technet](https://technet.microsoft.com/library/cc163140.aspx)|2003|[SCM 4.0](https://technet.microsoft.com/solutionaccelerators/cc835245.aspx)| + +
+ +**Microsoft Products** + +| Name | Details | Security Tools | +|---|---|---| +Internet Explorer 11 | [SecGuide](https://blogs.technet.microsoft.com/secguide/2014/08/13/security-baselines-for-windows-8-1-windows-server-2012-r2-and-internet-explorer-11-final/)|[SCT 1.0](https://www.microsoft.com/download/details.aspx?id=55319)|[SCM 4.0](https://technet.microsoft.com/solutionaccelerators/cc835245.aspx)| +|Internet Explorer 10|[Technet](https://technet.microsoft.com/library/jj898540.aspx)|[SCM 4.0](https://technet.microsoft.com/solutionaccelerators/cc835245.aspx) | +|Internet Explorer 9|[Technet](https://technet.microsoft.com/library/hh539027.aspx)|[SCM 4.0](https://technet.microsoft.com/solutionaccelerators/cc835245.aspx) +|Internet Explorer 8|[Technet](https://technet.microsoft.com/library/ee712766.aspx)|[SCM 4.0](https://technet.microsoft.com/solutionaccelerators/cc835245.aspx) +|Exchange Server 2010|[Technet](https://technet.microsoft.com/library/hh913521.aspx)| [SCM 4.0](https://technet.microsoft.com/solutionaccelerators/cc835245.aspx) +|Exchange Server 2007|[Technet](https://technet.microsoft.com/library/hh913520.aspx)| [SCM 4.0](https://technet.microsoft.com/solutionaccelerators/cc835245.aspx) +|Microsoft Office 2010|[Technet](https://technet.microsoft.com/library/gg288965.aspx)| [SCM 4.0](https://technet.microsoft.com/solutionaccelerators/cc835245.aspx) +|Microsoft Office 2007 SP2|[Technet](https://technet.microsoft.com/library/cc500475.aspx)| [SCM 4.0](https://technet.microsoft.com/solutionaccelerators/cc835245.aspx) + +
+ +> [!NOTE] +> Browser baselines are built-in to new OS versions starting with Windows 10 + +## See also + +[Windows security baselines](windows-security-baselines.md) diff --git a/windows/security/threat-protection/windows-security-configuration-framework/level-1-enterprise-administrator-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-1-enterprise-administrator-security.md new file mode 100644 index 0000000000..bc0e695034 --- /dev/null +++ b/windows/security/threat-protection/windows-security-configuration-framework/level-1-enterprise-administrator-security.md @@ -0,0 +1,25 @@ +--- +title: Level 1 enterprise administrator workstation security +description: Describes the policies, controls, and organizational behaviors for Windows security configuration framework level 1 enterprise administrator security configuration. +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# Level 1 enterprise administrator workstation security configuration + +**Applies to** + +- Windows 10 + + +Administrators (particularly of identity or security systems) present the highest risk to the organization−through data theft, data alteration, or service disruption. +A level 1 configuration should include all the configurations from levels 5, 4, 3, and 2 and additional controls. We are planning recommendations for the additional controls now, so check back soon for level 1 enterprise administrator security configuration guidance! diff --git a/windows/security/threat-protection/windows-security-configuration-framework/level-2-enterprise-devops-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-2-enterprise-devops-security.md new file mode 100644 index 0000000000..3de02c1510 --- /dev/null +++ b/windows/security/threat-protection/windows-security-configuration-framework/level-2-enterprise-devops-security.md @@ -0,0 +1,27 @@ +--- +title: Level 2 enterprise dev/ops security workstation configuration +description: Describes the policies, controls, and organizational behaviors for Windows security configuration framework level 2 enterprise dev/ops security configuration. +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# Level 2 enterprise dev/ops workstation security configuration + +**Applies to** + +- Windows 10 + +We recommend this configuration for developers and testers, who are an attractive target both for supply chain attacks and access to servers and systems containing high value data or where critical business functions could be disrupted. A level 2 configuration should include all the configurations from levels 5, 4, and 3 and additional controls. We are planning recommendations for the additional controls now, so check back soon for level 2 enterprise dev/ops security configuration guidance! + + + + diff --git a/windows/security/threat-protection/windows-security-configuration-framework/level-3-enterprise-VIP-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-3-enterprise-VIP-security.md new file mode 100644 index 0000000000..9c8c264402 --- /dev/null +++ b/windows/security/threat-protection/windows-security-configuration-framework/level-3-enterprise-VIP-security.md @@ -0,0 +1,141 @@ +--- +title: Level 3 enterprise VIP security configuration +description: Describes the policies, controls, and organizational behaviors for Windows security configuration framework level 3 enterprise VIP security configuration. +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# Level 3 enterprise VIP security configuration + +**Applies to** + +- Windows 10 + +Level 3 is the security configuration recommended as a standard for organizations with large and sophisticated security organizations, or for specific users and groups who will be uniquely targeted by adversaries. Such organizations are typically targeted by well-funded and sophisticated adversaries, and as such merit the additional constraints and controls described here. +A level 3 configuration should include all the configurations from level 5 and level 4 and add the following security policies, controls, and organizational behaviors. + +## Policies + +The policies enforced in level 3 implement strict security configuration and controls. They can have a potentially significant impact to users or to applications, enforcing a level of security commensurate with the risks facing targeted organizations. Microsoft recommends disciplined testing and deployment using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). + +### Security Template Policies + +| Feature | Policy Setting | Policy Value | Description | +|----------|-----------------|---------------|--------------| +| [Account Lockout](https://blogs.technet.microsoft.com/secguide/2014/08/13/configuring-account-lockout/) | Account lockout duration | 15 | The number of minutes a locked-out account remains locked out before automatically becoming unlocked. | +| [Account Lockout](https://blogs.technet.microsoft.com/secguide/2014/08/13/configuring-account-lockout/) | Account lockout threshold | 10 | The number of failed logon attempts that causes a user account to be locked out. | +| [Account Lockout](https://blogs.technet.microsoft.com/secguide/2014/08/13/configuring-account-lockout/) | Reset account lockout counter after | 15 | The number of minutes that must elapse after a failed logon attempt before the failed logon attempt counter is reset to 0 bad logon attempts. | +| Password Policy | Maximum password age | 60 | The number of days that a password can be used before the system requires the user to change it. | +| Password Policy | Minimum password age | 1 | The number of days that a password must be used before a user can change it. | +| Security Options | Accounts: Administrator account status | Disabled | This security setting determines whether the local Administrator account is enabled or disabled. | +| Security Options | Accounts: Limit local account use of blank passwords to console logon only | Enabled | This security setting determines whether local accounts that are not password protected can be used to log on from locations other than the physical computer console. If enabled, local accounts that are not password protected will only be able to log on at the computer's keyboard. | +| Security Options | Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings | Enabled | Windows Vista and later versions of Windows allow audit policy to be managed in a more precise way using audit policy subcategories. Setting audit policy at the category level will override the new subcategory audit policy feature. Group Policy only allows audit policy to be set at the category level, and existing Group Policy may override the subcategory settings of new machines as they are joined to the domain or upgraded. To allow audit policy to be managed using subcategories without requiring a change to Group Policy, there is a new registry value in Windows Vista and later versions, SCENoApplyLegacyAuditPolicy, which prevents the application of category-level audit policy from Group Policy and from the Local Security Policy administrative tool. | +| Security Options | Domain member: Digitally encrypt or sign secure channel data (always) | Enabled | This security setting determines whether all secure channel traffic initiated by the domain member must be signed or encrypted. This setting determines whether all secure channel traffic initiated by the domain member meets minimum security requirements. Specifically, it determines whether all secure channel traffic initiated by the domain member must be signed or encrypted. If this policy is enabled, then the secure channel will not be established unless either signing or encryption of all secure channel traffic is negotiated. If this policy is disabled, then encryption and signing of all secure channel traffic is negotiated with the Domain Controller in which case the level of signing and encryption depends on the version of the Domain Controller and the settings of the following two policies:
- Domain member: Digitally encrypt secure channel data (when possible)
- Domain member: Digitally sign secure channel data (when possible) | +| Security Options | Domain member: Digitally encrypt secure channel data (when possible) | Enabled | This security setting determines whether a domain member attempts to negotiate encryption for all secure channel traffic that it initiates. If enabled, the domain member will request encryption of all secure channel traffic. If the domain controller supports encryption of all secure channel traffic, then all secure channel traffic will be encrypted. Otherwise, only logon information transmitted over the secure channel will be encrypted. If this setting is disabled, then the domain member will not attempt to negotiate secure channel encryption. | +| Security Options | Domain member: Digitally sign secure channel data (when possible) | Enabled | This security setting determines whether a domain member attempts to negotiate signing for all secure channel traffic that it initiates. If enabled, the domain member will request signing of all secure channel traffic. If the Domain Controller supports signing of all secure channel traffic, then all secure channel traffic will be signed, which ensures that it cannot be tampered with in transit. | +| Security Options | Interactive logon: Smart card removal behavior | Lock Workstation | This security setting determines what happens when the smart card for a logged-on user is removed from the smart card reader. If you click **Lock Workstation** in the **Properties** for this policy, the workstation is locked when the smart card is removed, allowing users to leave the area, take their smart cards with them, and still maintain protected sessions. For this setting to work beginning with Windows Vista, the Smart Card Removal Policy service must be started. | +| Security Options | Microsoft network client: Digitally sign communications (always) | Enabled | This security setting determines whether packet signing is required by the SMB client component. | +| Security Options | Microsoft network server: Digitally sign communications (always) | Enabled | This security setting determines whether packet signing is required by the SMB server component. | +| Security Options | Network access: Do not allow anonymous enumeration of SAM accounts | Enabled | This security setting determines what additional permissions will be granted for anonymous connections to the computer. Windows allows anonymous users to perform certain activities, such as enumerating the names of domain accounts and network shares. This is convenient, for example, when an administrator wants to grant access to users in a trusted domain that does not maintain a reciprocal trust. This security option allows additional restrictions to be placed on anonymous connections as follows: Enabled: Do not allow enumeration of SAM accounts. This option replaces Everyone with Authenticated Users in the security permissions for resources. | +| Security Options | Network access: Do not allow anonymous enumeration of SAM accounts and shares | Enabled | This security setting determines whether anonymous enumeration of SAM accounts and shares is allowed. Windows allows anonymous users to perform certain activities, such as enumerating the names of domain accounts and network shares. This is convenient, for example, when an administrator wants to grant access to users in a trusted domain that does not maintain a reciprocal trust. If you do not want to allow anonymous enumeration of SAM accounts and shares, then enable this policy. | +| Security Options | Network access: Restrict anonymous access to Named Pipes and Shares | Enabled | When enabled, this security setting restricts anonymous access to shares and pipes to the settings for:
- Network access: Named pipes that can be accessed anonymously
- Network access: Shares that can be accessed anonymously | +| Security Options | Network security: Allow PKU2U authentication requests to this computer to use online identities. | Disabled | This policy will be turned off by default on domain joined machines. This would prevent online identities from authenticating to the domain joined machine. | +| Security Options | Network security: LDAP client signing requirements | Negotiate signing | This security setting determines the level of data signing that is requested on behalf of clients issuing LDAP BIND requests, as follows: Negotiate signing: If Transport Layer Security/Secure Sockets Layer (TLS\\SSL) has not been started, the LDAP BIND request is initiated with the LDAP data signing option set in addition to the options specified by the caller. If TLS\\SSL has been started, the LDAP BIND request is initiated with the options that are specified by the caller. | +| Security Options | System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links) | Enabled | This security setting determines the strength of the default discretionary access control list (DACL) for objects. Active Directory maintains a global list of shared system resources, such as DOS device names, mutexes, and semaphores. In this way, objects can be located and shared among processes. Each type of object is created with a default DACL that specifies who can access the objects and what permissions are granted. If this policy is enabled, the default DACL is stronger, allowing users who are not administrators to read shared objects but not allowing these users to modify shared objects that they did not create. | +| Security Options | User Account Control: Behavior of the elevation prompt for standard users | Automatically deny elevation requests | This policy setting controls the behavior of the elevation prompt for standard users. Automatically deny elevation requests: When an operation requires elevation of privilege, an access denied error message is displayed. An enterprise that is running desktops as standard user may choose this setting to reduce help desk calls. | + +### Computer Policies + +| Feature | Policy Setting | Policy Value | Description | +|----------|-----------------|---------------|--------------| +| Control Panel / Personalization | Prevent enabling lock screen camera | Enabled | Disables the lock screen camera toggle switch in PC Settings and prevents a camera from being invoked on the lock screen. By default, users can enable invocation of an available camera on the lock screen. If you enable this setting, users will no longer be able to enable or disable lock screen camera access in PC Settings and the camera cannot be invoked on the lock screen. | +| Control Panel / Personalization | Prevent enabling lock screen slide show | Enabled | Disables the lock screen slide show settings in PC Settings and prevents a slide show from playing on the lock screen. By default, users can enable a slide show that will run after they lock the machine. if you enable this setting, users will no longer be able to modify slide show settings in PC Settings and no slide show will ever start. | +| Windows Defender SmartScreen / Explorer | Configure App Install Control | Allow apps from Store only | App Install Control is a feature of Windows Defender SmartScreen that helps protect PCs by allowing users to install apps only from the Store. SmartScreen must be enabled for this feature to work properly. | +| System / Device Installation / Device Installation Restrictions | Prevent installation of devices that match any of these device IDs | Enabled | This policy setting allows you to specify a list of Plug and Play hardware IDs and compatible IDs for devices that Windows is prevented from installing. This policy setting takes precedence over any other policy setting that allows Windows to install a device. if you enable this policy setting, Windows is prevented from installing a device whose hardware ID or compatible ID appears in a list that you create. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server. If you disable or do not configure this policy setting, devices can be installed and updated as allowed or prevented by other policy settings. | +| System / Device Installation / Device Installation Restrictions | Prevent installation of devices using drivers that match these device setup classes | Enabled | This policy setting allows you to specify a list of device setup class globally unique identifiers (GUIDs) for device drivers that Windows is prevented from installing. This policy setting takes precedence over any other policy setting that allows Windows to install a device. if you enable this policy setting, Windows is prevented from installing or updating device drivers whose device setup class GUIDs appear in the list you create. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server. If you disable or do not configure this policy setting, Windows can install and update devices as allowed or prevented by other policy settings. | +| System / Internet Communication Management / Internet Communication settings | Turn off downloading of print drivers over HTTP | Enabled | This policy setting specifies whether to allow this client to download print driver packages over HTTP. To set up HTTP printing non-inbox drivers need to be downloaded over HTTP. Note: This policy setting does not prevent the client from printing to printers on the Intranet or the Internet over HTTP. It only prohibits downloading drivers that are not already installed locally. if you enable this policy setting, print drivers cannot be downloaded over HTTP. If you disable or do not configure this policy setting, users can download print drivers over HTTP. | +| System / Internet Communication Management / Internet Communication settings | Turn off printing over HTTP | Enabled | This policy setting specifies whether to allow printing over HTTP from this client. Printing over HTTP allows a client to print to printers on the intranet as well as the Internet. Note: This policy setting affects the client side of Internet printing only. It does not prevent this computer from acting as an Internet Printing server and making its shared printers available via HTTP. if you enable this policy setting, it prevents this client from printing to Internet printers over HTTP. If you disable or do not configure this policy setting, users can choose to print to Internet printers over HTTP. Also see the "Web-based printing" policy setting in Computer Configuration/Administrative Templates/Printers. | +| System / Logon | Enumerate local users on domain-joined computers | Disabled | This policy setting allows local users to be enumerated on domain-joined computers. if you enable this policy setting, Logon UI will enumerate all local users on domain-joined computers. If you disable or do not configure this policy setting, the Logon UI will not enumerate local users on domain-joined computers. | +| System / Power Management / Sleep Settings | Allow standby states (S1-S3) when sleeping (on battery) | Disabled | This policy setting manages whether Windows can use standby states when putting the computer in a sleep state. If you enable or do not configure this policy setting Windows uses standby states to put the computer in a sleep state. If you disable this policy setting standby states (S1-S3) are not allowed. | +| System / Power Management / Sleep Settings | Allow standby states (S1-S3) when sleeping (plugged in) | Disabled | This policy setting manages whether Windows can use standby states when putting the computer in a sleep state. If you enable or do not configure this policy setting Windows uses standby states to put the computer in a sleep state. If you disable this policy setting standby states (S1-S3) are not allowed. | +| Windows Components / BitLocker Drive Encryption / Operating System Drives | Configure minimum PIN length for startup | Enabled: 7 | This policy setting allows you to configure a minimum length for a Trusted Platform Module (TPM) startup PIN. This policy setting is applied when you turn on BitLocker. The startup PIN must have a minimum length of 4 digits and can have a maximum length of 20 digits. if you enable this policy setting, you can require a minimum number of digits to be used when setting the startup PIN. If you disable or do not configure this policy setting, users can configure a startup PIN of any length between 4 and 20 digits. By default, the value is 6 digits. NOTE: If minimum PIN length is set below 6 digits Windows will attempt to update the TPM 2.0 lockout period to be greater than the default when a PIN is changed. If successful, Windows will only reset the TPM lockout period back to default if the TPM is reset. | +| Windows Components / BitLocker Drive Encryption / Removable Data Drives | Deny write access to removable drives not protected by BitLocker | Enabled | This policy setting configures whether BitLocker protection is required for a computer to be able to write data to a removable data drive. If you enable this policy setting, all removable data drives that are not BitLocker-protected will be mounted as read-only. If the drive is protected by BitLocker, it will be mounted with read and write access. If the "Deny write access to devices configured in another organization" option is selected, only drives with identification fields matching the computer's identification fields will be given write access. When a removable data drive is accessed, it will be checked for valid identification field and allowed identification fields. These fields are defined by the "Provide the unique identifiers for your organization" policy setting. If you disable or do not configure this policy setting, all removable data drives on the computer will be mounted with read and write access. Note: This policy setting can be overridden by the policy settings under User Configuration\\Administrative Templates\\System\\Removable Storage Access. If the "Removable Disks: Deny write access" policy setting is enabled, this policy setting will be ignored. | +| Windows Components / Cloud Content | Turn off Microsoft consumer experiences | Enabled | This policy setting turns off experiences that help consumers make the most of their devices and Microsoft account. if you enable this policy setting, users will no longer see personalized recommendations from Microsoft and notifications about their Microsoft account. If you disable or do not configure this policy setting, users may see suggestions from Microsoft and notifications about their Microsoft account. Note: This setting only applies to Enterprise and Education SKUs. | +| Windows Components / Credential User Interface | Enumerate administrator accounts on elevation | Disabled | This policy setting controls whether administrator accounts are displayed when a user attempts to elevate a running application. By default, administrator accounts are not displayed when the user attempts to elevate a running application. if you enable this policy setting, all local administrator accounts on the PC will be displayed so the user can choose one and enter the correct password. If you disable this policy setting users will always be required to type a user name and password to elevate. | +| Windows Components / Microsoft Edge | Configure Password Manager | Disabled | This policy setting lets you decide whether employees can save their passwords locally using Password Manager. By default, Password Manager is turned on. if you enable this setting, employees can use Password Manager to save their passwords locally. If you disable this setting employees can't use Password Manager to save their passwords locally. If you don't configure this setting employees can choose whether to use Password Manager to save their passwords locally. | +| Windows Components / Remote Desktop Services / Remote Desktop | Do not allow drive redirection | Enabled | This policy setting specifies whether to prevent the mapping of client drives in a Remote Desktop Services session (drive redirection). By default, an RD Session Host server maps client drives automatically upon connection. Mapped drives appear in the session folder tree in File Explorer or Computer in the format \ on \. You can use this policy setting to override this behavior. if you enable this policy setting, client drive redirection is not allowed in Remote Desktop Services sessions and Clipboard file copy redirection is not allowed on computers running Windows Server 2003 Windows 8 and Windows XP. If you disable this policy setting client drive redirection is always allowed. In addition, Clipboard file copy redirection is always allowed if Clipboard redirection is allowed. If you do not configure this policy setting client drive redirection and Clipboard file copy redirection are not specified at the Group Policy level. | +| Windows Components / RSS Feeds | Prevent downloading of enclosures | Enabled | This policy setting prevents the user from having enclosures (file attachments) downloaded from a feed to the user's computer. if you enable this policy setting, the user cannot set the Feed Sync Engine to download an enclosure through the Feed property page. A developer cannot change the download setting through the Feed APIs. If you disable or do not configure this policy setting, the user can set the Feed Sync Engine to download an enclosure through the Feed property page. A developer can change the download setting through the Feed APIs. | +| Windows Components / Search | Allow indexing of encrypted files | Disabled | This policy setting allows encrypted items to be indexed. if you enable this policy setting, indexing will attempt to decrypt and index the content (access restrictions will still apply). If you disable this policy setting the search service components (including non-Microsoft components) are expected not to index encrypted items or encrypted stores. This policy setting is not configured by default. If you do not configure this policy setting the local setting configured through Control Panel will be used. By default, the Control Panel setting is set to not index encrypted content. When this setting is enabled or disabled the index is rebuilt completely. Full volume encryption (such as BitLocker Drive Encryption or a non-Microsoft solution) must be used for the location of the index to maintain security for encrypted files. | +| Windows Components / Windows Ink Workspace | Allow Windows Ink Workspace | On, but disallow access above lock | Allow Windows Ink Workspace | + +### IE Computer Policies + +| Feature | Policy Setting | Policy Value | Description | +|-------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------|------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Windows Components / Internet Explorer | Prevent per-user installation of ActiveX controls | Enabled | This policy setting allows you to prevent the installation of ActiveX controls on a per-user basis. If you enable this policy setting, ActiveX controls cannot be installed on a per-user basis. | +| Windows Components / Internet Explorer | Security Zones: Do not allow users to add/delete sites | Enabled | Prevents users from adding or removing sites from security zones. A security zone is a group of Web sites with the same security level. If you enable this policy, the site management settings for security zones are disabled. | +| Windows Components / Internet Explorer | Security Zones: Do not allow users to change policies | Enabled | Prevents users from changing security zone settings. A security zone is a group of Web sites with the same security level. If you enable this policy, the Custom Level button and security-level slider on the Security tab in the Internet Options dialog box are disabled. | +| Windows Components / Internet Explorer | Security Zones: Use only machine settings | Enabled | Applies security zone information to all users of the same computer. A security zone is a group of Web sites with the same security level. If you enable this policy, changes that the user makes to a security zone will apply to all users of that computer. | +| Windows Components / Internet Explorer | Turn off Crash Detection | Enabled | This policy setting allows you to manage the crash detection feature of add-on Management. If you enable this policy setting, a crash in Internet Explorer will exhibit behavior found in Windows XP Professional Service Pack 1 and earlier, namely, to invoke Windows Error Reporting. All policy settings for Windows Error Reporting continue to apply. | +| Windows Components / Internet Explorer | Turn off the Security Settings Check feature | Disabled | This policy setting turns off the Security Settings Check feature, which checks Internet Explorer security settings to determine when the settings put Internet Explorer at risk. | +| Windows Components / Internet Explorer / Internet Control Panel / Advanced Page | Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled | Enabled | This policy setting prevents ActiveX controls from running in Protected Mode when Enhanced Protected Mode is enabled. When a user has an ActiveX control installed that is not compatible with Enhanced Protected Mode and a website attempts to load the control, Internet Explorer notifies the user and gives the option to run the website in regular Protected Mode. This policy setting disables this notification and forces all websites to run in Enhanced Protected Mode. | +| Windows Components / Internet Explorer / Internet Control Panel / Advanced Page | Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows | Enabled | This policy setting determines whether Internet Explorer 11 uses 64-bit processes (for greater security) or 32-bit processes (for greater compatibility) when running in Enhanced Protected Mode on 64-bit versions of Windows. | +| Windows Components / Internet Explorer / Internet Control Panel / Advanced Page | Turn on Enhanced Protected Mode | Enabled | Enhanced Protected Mode provides additional protection against malicious websites by using 64-bit processes on 64-bit versions of Windows. For computers running at least Windows 8, Enhanced Protected Mode also limits the locations Internet Explorer can read from in the registry and the file system. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page | Intranet Sites: Include all network paths (UNCs) | Disabled | This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Allow drag and drop or copy and paste files | Enabled: Disable | This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Allow loading of XAML files | Enabled: Disable | This policy setting allows you to manage the loading of Extensible Application Markup Language (XAML) files. XAML is an XML-based declarative markup language commonly used for creating rich user interfaces and graphics that take advantage of the Windows Presentation Foundation. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Allow only approved domains to use ActiveX controls without prompt | Enabled: Enable | This policy setting controls whether the user is prompted to allow ActiveX controls to run on websites other than the website that installed the ActiveX control. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Allow only approved domains to use the TDC ActiveX control | Enabled: Enable | This policy setting controls whether the user can run the TDC ActiveX control on websites. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Allow scripting of Internet Explorer WebBrowser controls | Enabled: Disable | This policy setting determines whether a page can control embedded WebBrowser controls via script. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Allow script-initiated windows without size or position constraints | Enabled: Disable | This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows that include the title and status bars. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Allow scriptlets | Enabled: Disable | This policy setting allows you to manage whether the user can run scriptlets. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Allow updates to status bar via script | Enabled: Disable | This policy setting allows you to manage whether script can update the status bar within the zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Allow VBScript to run in Internet Explorer | Enabled: Disable | This policy setting allows you to manage whether VBScript can be run on pages from the specified zone in Internet Explorer. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Download signed ActiveX controls | Enabled: Disable | This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Include local path when user is uploading files to a server | Enabled: Disable | This policy setting controls whether local path information is sent when the user is uploading a file via an HTML form. If the local path information is sent, some information may be unintentionally revealed to the server. For instance, files sent from the user's desktop may contain the user name as a part of the path. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Navigate windows and frames across different domains | Enabled: Disable | This policy setting allows you to manage the opening of windows and frames and access of applications across different domains. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Web sites in less privileged Web content zones can navigate into this zone | Enabled: Disable | This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into this zone. | + +### IE User Policies + +| Feature | Policy Setting | Policy Value | Description | +|----------|-----------------|--------------|--------------| +| Windows Components / Internet Explorer | Turn on the auto-complete feature for user names and passwords on forms | Disabled | This AutoComplete feature can remember and suggest User names and passwords on Forms. If you disable this setting the user cannot change "User name and passwords on forms" or "prompt me to save passwords". The Auto Complete feature for User names and passwords on Forms is turned off. The user also cannot opt to be prompted to save passwords. | + +## Controls + +The controls enforced in level 3 implement complex security configuration and controls. +They are likely to have a higher impact to users or to applications, +enforcing a level of security commensurate with the risks facing the most targeted organizations. +Microsoft recommends using the Audit/Enforce methodology for controls with audit mode, and [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates) for those that do +not. + +| Feature Set | Feature | Description | +|--------------|----------|--------------| +| Exploit protection | Enable exploit protection | Exploit protection helps protect devices from malware that use exploits to spread and infect to other devices. It consists of several mitigations that can be applied at the individual app level. | +| Windows Defender Application Control (WDAC) *or* AppLocker | Configure devices to use application whitelisting using one of the following approaches:
[AaronLocker](https://blogs.msdn.microsoft.com/aaron_margosis/2018/10/11/aaronlocker-update-v0-91-and-see-aaronlocker-in-action-on-channel-9/) (admin writeable areas) when software distribution is not always centralized
*or*
[Managed installer](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-managed-installer) when all software is pushed through software distribution
*or*
[Explicit control](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/create-initial-default-policy) when the software on a device is static and tightly controlled | Application control is a crucial line of defense for protecting enterprises given today’s threat landscape, and it has an inherent advantage over traditional antivirus solutions. Specifically, application control moves away from the traditional application trust model where all applications are assumed trustworthy by default to one where applications must earn trust in order to run. Application Control can help mitigate these types of security threats by restricting the applications that users can run and the code that runs in the System Core (kernel). WDAC policies also block unsigned scripts and MSIs, and Windows PowerShell runs in [Constrained Language Mode](https://devblogs.microsoft.com/powershell/powershell-constrained-language-mode/). | + +## Behaviors + +The behaviors recommended in level 3 represent the most sophisticated security +configuration. Removing admin rights can be difficult, but it is essential to +achieve a level of security commensurate with the risks facing the most targeted +organizations. + +| Feature Set | Feature | Description | +|--------------|----------|--------------| +| Remove Admin Rights | Remove as many users as possible from the local Administrators group, targeting 0. Microsoft recommends removing admin rights role by role. Some roles are more challenging, including:
- Developers, who often install rapidly iterating software which is difficult to package using current software distribution systems
- Scientists/ Doctors, who often must install and operate specialized hardware devices
- Remote locations with slow web links, where administration is delegated
It is typically easier to address these roles later in the process.
Microsoft recommends identifying the dependencies on admin rights and systematically addressing them:
- Legitimate use of admin rights: crowdsourced admin, where a new process is needed to complete that workflow
- Illegitimate use of admin rights: app compat dependency, where app remediation is the best path. The [Desktop App Assure](https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/What-is-Desktop-App-Assure/ba-p/270232) program can assist with these app issues | Running as non-admin limits your exposure. When you are an admin, every program you run has unlimited access to your computer. If malicious code finds its way to one of those programs, it also gains unlimited access. When an exploit runs with admin privileges, its ability to compromise your system is much greater, its ability to do so without detection is much greater, and its ability to attack others on your network is greater than it would be with only User privileges. If you’re running as admin, an exploit can:
- install kernel-mode rootkits and/or keyloggers
- install and start services
- install ActiveX controls, including IE and shell add-ins
- access data belonging to other users
- cause code to run whenever anybody else logs on (including capturing passwords entered into the Ctrl-Alt-Del logon dialog)
- replace OS and other program files with trojan horses
- disable/uninstall anti-virus
- cover its tracks in the event log
- render your machine unbootable | + + + + + diff --git a/windows/security/threat-protection/windows-security-configuration-framework/level-4-enterprise-high-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-4-enterprise-high-security.md new file mode 100644 index 0000000000..2986d0f69e --- /dev/null +++ b/windows/security/threat-protection/windows-security-configuration-framework/level-4-enterprise-high-security.md @@ -0,0 +1,209 @@ +--- +title: Level 4 enterprise high security configuration +description: Describes the policies, controls, and organizational behaviors for Windows security configuration framework level 4 enterprise security configuration. +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# Level 4 enterprise high security configuration + +**Applies to** + +- Windows 10 + +Level 4 is the security configuration recommended as a standard for devices where users access more sensitive information. These devices are a natural target in enterprises today. While targeting high levels of security, these recommendations do not assume a large staff of highly skilled security practitioners, and therefore should be accessible to most enterprise organizations. +A level 4 configuration should include all the configurations from level 5 and add the following security policies, controls, and organizational behaviors. + +## Policies + +The policies enforced in level 4 implement more controls and a more sophisticated security +configuration than level 5. While they may have a slightly higher impact to +users or to applications, they enforce a level of security more commensurate +with the risks facing users with access to sensitive information. Microsoft +recommends using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates) for these security configurations and +controls, with a moderate timeline that is anticipated to be slightly longer +than the process in level 5. + +### Security Template Policies + +| Feature | Policy Setting | Policy Value | Description | +|------------------------|-------------------------------------------------------------------------------------------------|----------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Security Options | Microsoft network client: Send unencrypted password to third party | Disabled | If this security setting is enabled, the Server Message Block (SMB) redirector can send plaintext passwords to non-Microsoft SMB servers that do not support password encryption during authentication. Sending unencrypted passwords is a security risk. | +| Security Options | Network access: Allow anonymous SID/Name translation | Disabled | This security setting determines if an anonymous user can request security identifier (SID) attributes for another user. If this policy is enabled, a user with knowledge of an administrator's SID could contact a computer that has this policy enabled and use the SID to get the administrator's name. | +| Security Options | Network access: Restrict clients allowed to make remote calls to SAM | Enabled: Administrators (allowed) | This policy setting allows you to restrict remote RPC connections to SAM. If not selected, the default security descriptor will be used. | +| Security Options | Network security: Allow LocalSystem NULL session fallback | Disabled | Allow NTLM to fall back to NULL session when used with LocalSystem | +| Security Options | Network security: Do not store LAN Manager hash value on next password change | Enabled | This security setting determines if, at the next password change, the LAN Manager (LM) hash value for the new password is stored. The LM hash is relatively weak and prone to attack, as compared with the cryptographically stronger Windows NT hash. Since the LM hash is stored on the local computer in the security database the passwords can be compromised if the security database is attacked. | +| Security Options | Network security: LAN Manager authentication level | Send NTLMv2 response only. Refuse LM & NTLM | This security setting determines which challenge/response authentication protocol is used for network logons. This choice affects the level of authentication protocol used by clients, the level of session security negotiated, and the level of authentication accepted by servers as follows: Send NTLMv2 response only\\refuse LM & NTLM: Clients use NTLMv2 authentication only and use NTLMv2 session security if the server supports it; domain controllers refuse LM and NTLM (accept only NTLMv2 authentication). | +| Security Options | Network security: Minimum session security for NTLM SSP based (including secure RPC) clients | Require NTLMv2 session security and Require 128-bit encryption | This security setting allows a client to require the negotiation of 128-bit encryption and/or NTLMv2 session security. These values are dependent on the LAN Manager Authentication Level security setting value. | +| Security Options | Network security: Minimum session security for NTLM SSP based (including secure RPC) servers | Require NTLMv2 session security and Require 128-bit encryption | This security setting allows a server to require the negotiation of 128-bit encryption and/or NTLMv2 session security. These values are dependent on the LAN Manager Authentication Level security setting value. | +| Security Options | User Account Control: Only elevate UIAccess applications that are installed in secure locations | Enabled | This policy setting controls whether applications that request to run with a User Interface Accessibility (UIAccess) integrity level must reside in a secure location in the file system. Secure locations are limited to the following: - …\\Program Files\\, including subfolders - …\\Windows\\system32\\ - …\\Program Files (x86)\\, including subfolders for 64-bit versions of Windows | +| User Rights Assignment | Access this computer from the network | Administrators; Remote Desktop Users | This user right determines which users and groups can connect to the computer over the network. Remote Desktop Services are not affected by this user right. | +| User Rights Assignment | Enable computer and user accounts to be trusted for delegation | No One (blank) | This security setting determines which users can set the Trusted for Delegation setting on a user or computer object. | +| User Rights Assignment | Impersonate a client after authentication | Administrators, SERVICE, Local Service, Network Service | Assigning this privilege to a user allows programs running on behalf of that user to impersonate a client. Requiring this user right for this kind of impersonation prevents an unauthorized user from convincing a client to connect (for example, by remote procedure call (RPC) or named pipes) to a service that they have created and then impersonating that client, which can elevate the unauthorized user's permissions to administrative or system levels. | +| User Rights Assignment | Lock pages in memory | No One (blank) | This security setting determines which accounts can use a process to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk. Exercising this privilege could significantly affect system performance by decreasing the amount of available random-access memory (RAM). | +| User Rights Assignment | Perform volume maintenance tasks | Administrators | This security setting determines which users and groups can run maintenance tasks on a volume, such as remote defragmentation. | +| User Rights Assignment | Profile single process | Administrators | This security setting determines which users can use performance monitoring tools to monitor the performance of non-system processes. | + +### Computer Policies + +| Feature | Policy Setting | Policy Value | Description | +|---------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Network / Network Connections | Prohibit use of Internet Connection Sharing on your DNS domain network | Enabled | Determines whether administrators can enable and configure the Internet Connection Sharing (ICS) feature of an Internet connection and if the ICS service can run on the computer. | +| Network / Network Provider | Hardened UNC Paths | Enabled: \\\\\*\\SYSVOL and \\\\\*\\NETLOGON RequireMutualAuthentication = 1, RequireIntegrity = 1 | This policy setting configures secure access to UNC paths. If you enable this policy, Windows only allows access to the specified UNC paths after fulfilling additional security requirements. | +| Network / Windows Connection Manager | Prohibit connection to non-domain networks when connected to domain authenticated network | Enabled | This policy setting prevents computers from connecting to both a domain-based network and a non-domain-based network at the same time. | +| Network / WLAN Service / WLAN Settings | Allow Windows to automatically connect to suggested open hotspots to networks shared by contacts and to hotspots offering paid services | Disabled | This policy setting determines whether users can enable the following WLAN settings: "Connect to suggested open hotspots," "Connect to networks shared by my contacts," and "Enable paid services". | +| System / Credentials Delegation | Remote host allows delegation of non-exportable credentials | Enabled | When using credential delegation, devices provide an exportable version of credentials to the remote host. This exposes users to the risk of credential theft from attackers on the remote host. If you enable this policy setting, the host supports Restricted Admin or Remote Credential Guard mode. | +| System / Device Guard | Turn on Virtualization Based Security | Enabled: Virtualization-Based Protection of Code Integrity – Enabled with UEFI Lock | This setting enables virtualization-based protection of Kernel Mode Code Integrity. When this is enabled, kernel mode memory protections are enforced, and the Code Integrity validation path is protected by the Virtualization Based Security feature. | +| System / Internet Communication Management / Internet Communication | Turn off Internet download for Web publishing and online ordering wizards | Enabled | This policy setting specifies whether Windows should download a list of providers for the web publishing and online ordering wizards. These wizards allow users to select from a list of companies that provide services such as online storage and photographic printing. By default, Windows displays providers downloaded from a Windows website in addition to providers specified in the registry. | +| System / Logon | Turn on convenience PIN sign-in | Disabled | This policy setting allows you to control whether a domain user can sign in using a convenience PIN. | +| System / Remote Assistance | Configure Solicited Remote Assistance | Disabled | This policy setting allows you to turn on or turn off Solicited (Ask for) Remote Assistance on this computer. | +| Windows Components / File Explorer | Turn off Data Execution Prevention for Explorer | Disabled | Disabling data execution prevention can allow certain legacy plug-in applications to function without terminating Explorer. | +| Windows Components / File Explorer | Turn off heap termination on corruption | Disabled | Disabling heap termination on corruption can allow certain legacy plug-in applications to function without terminating Explorer immediately, although Explorer may still terminate unexpectedly later. | +| Windows Components / Remote Desktop Services / Remote Desktop Connection Client | Do not allow passwords to be saved | Enabled | Controls whether passwords can be saved on this computer from Remote Desktop Connection. | +| Windows Components / Remote Desktop Services / Remote Desktop Session Host / Security | Always prompt for password upon connection | Enabled | This policy setting specifies whether Remote Desktop Services always prompts the client for a password upon connection. You can use this setting to enforce a password prompt for users logging on to Remote Desktop Services, even if they already provided the password in the Remote Desktop Connection client. | +| Windows Components / Remote Desktop Services / Remote Desktop Session Host / Security | Require secure RPC communication | Enabled | Specifies whether a Remote Desktop Session Host server requires secure RPC communication with all clients or allows unsecured communication. | +| Windows Components / Remote Desktop Services / Remote Desktop Session Host / Security | Set client connection encryption level | Enabled: High Level | Specifies whether to require the use of a specific encryption level to secure communications between client computers and RD Session Host servers during Remote Desktop Protocol (RDP) connections. This policy only applies when you are using native RDP encryption. However, native RDP encryption (as opposed to SSL encryption) is not recommended. This policy does not apply to SSL encryption. | +| Windows Components / Windows Security / App and browser protection | Prevent users from modifying settings | Enabled | Prevent users from making changes to the Exploit protection settings area in Windows Security. | +| Windows Components / Windows Game Recording and Broadcasting | Enables or disables Windows Game Recording and Broadcasting | Disabled | This setting enables or disables the Windows Game Recording and Broadcasting features. If you disable this setting, Windows Game Recording will not be allowed. | +| Windows Components / Windows PowerShell | Turn on PowerShell Script Block Logging | Enabled | This policy setting enables logging of all PowerShell script input to the Microsoft-Windows-PowerShell/Operational event log. | +| Windows Components / Windows Remote Management (WinRM) / WinRM Client | Allow Basic authentication | Disabled | This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Basic authentication. | +| Windows Components / Windows Remote Management (WinRM) / WinRM Client | Disallow Digest authentication | Enabled | This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Digest authentication. | +| Windows Components / Windows Remote Management (WinRM) / WinRM Service | Allow Basic authentication | Disabled | This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts Basic authentication from a remote client. | +| Windows Components / Windows Remote Management (WinRM) / WinRM Service | Disallow WinRM from storing RunAs credentials | Enabled | This policy setting allows you to manage whether the Windows Remote Management (WinRM) service will not allow RunAs credentials to be stored for any plug-ins. | + +### Windows Defender Antivirus Policies + +| Feature | Policy Setting | Policy Value | Description | +|-------------------------------------------------|-----------------------------------------------------------|----------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Windows Components / Windows Defender Antivirus | Configure Detection for Potentially Unwanted Applications | Enabled: Block | Enable or disable detection for potentially unwanted applications. You can choose to block, audit, or allow when potentially unwanted software is being downloaded or attempts to install itself on your computer. | + +### IE Computer Policies + +| Feature | Policy Setting | Policy Value | Description | +|---------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------|--------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Windows Components / Internet Explorer | Prevent bypassing SmartScreen Filter warnings | Enabled | This policy setting determines whether the user can bypass warnings from SmartScreen Filter. SmartScreen Filter prevents the user from browsing to or downloading from sites that are known to host malicious content. SmartScreen Filter also prevents the execution of files that are known to be malicious. | +| Windows Components / Internet Explorer | Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet | Enabled | This policy setting determines whether the user can bypass warnings from SmartScreen Filter. SmartScreen Filter warns the user about executable files that Internet Explorer users do not commonly download from the Internet. | +| Windows Components / Internet Explorer | Specify use of ActiveX Installer Service for installation of ActiveX controls | Enabled | This policy setting allows you to specify how ActiveX controls are installed. If you enable this policy setting, ActiveX controls are installed only if the ActiveX Installer Service is present and has been configured to allow the installation of ActiveX controls. | +| Windows Components / Internet Explorer / Internet Control Panel | Prevent ignoring certificate errors | Enabled | This policy setting prevents the user from ignoring Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificate errors that interrupt browsing (such as "expired", "revoked", or "name mismatch" errors) in Internet Explorer. | +| Windows Components / Internet Explorer / Internet Control Panel / Advanced Page | Allow software to run or install even if the signature is invalid | Disabled | This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by the user even though the signature is invalid. An invalid signature might indicate that someone has tampered with the file. | +| Windows Components / Internet Explorer / Internet Control Panel / Advanced Page | Check for signatures on downloaded programs | Enabled | This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher of signed software and verifies it hasn't been modified or tampered with) on user computers before downloading executable programs. | +| Windows Components / Internet Explorer / Internet Control Panel / Advanced Page | Turn off encryption support | Enabled: Use | This policy setting allows you to turn off support for Transport Layer Security (TLS) 1.0, TLS 1.1, TLS 1.2, Secure Sockets Layer (SSL) 2.0, or SSL 3.0 in the browser. TLS and SSL are protocols that help protect communication between the browser and the target server. When the browser attempts to set up a protected communication with the target server, the browser and server negotiate which protocol and version to use. The browser and server attempt to match each other’s list of supported protocols and versions, and they select the most preferred match. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page | Turn on certificate address mismatch warning | Enabled | This policy setting allows you to turn on the certificate address mismatch security warning. When this policy setting is turned on, the user is warned when visiting Secure HTTP (HTTPS) websites that present certificates issued for a different website address. This warning helps prevent spoofing attacks. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Access data sources across domains | Enabled: Disable | This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO). | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Allow cut copy or paste operations from the clipboard via script | Enabled: Disable | This policy setting allows you to manage whether scripts can perform a clipboard operation (for example, cut, copy, and paste) in a specified region. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Automatic prompting for file downloads | Enabled: Disable | This policy setting determines whether users will be prompted for non-user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Download unsigned ActiveX controls | Enabled: Disable | This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is potentially harmful, especially when coming from an untrusted zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Enable dragging of content from different domains across windows | Enabled: Disable | This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in different windows. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Enable dragging of content from different domains within a window | Enabled: Disable | This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in the same window. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Initialize and script ActiveX controls not marked as safe | Enabled: Disable | This policy setting allows you to manage ActiveX controls not marked as safe. If you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Java permissions | Enabled: Disable Java | This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually. Disable Java to prevent any applets from running. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Launching applications and files in an IFRAME | Enabled: Disable | This policy setting allows you to manage whether applications may be run, and files may be downloaded from an IFRAME reference in the HTML of the pages in this zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Logon options | Enabled: Prompt for user name and password | This policy setting allows you to manage settings for logon options. Prompt for user name and password to query users for user IDs and passwords. After a user is queried, these values can be used silently for the remainder of the session. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Run .NET Framework-reliant components not signed with Authenticode | Enabled: Disable | This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Run .NET Framework-reliant components signed with Authenticode | Enabled: Disable | This policy setting allows you to manage whether .NET Framework components that are signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Show security warning for potentially unsafe files | Enabled: Prompt | This policy setting controls whether the "Open File - Security Warning" message appears when the user tries to open executable files or other potentially unsafe files (from an intranet file share by using File Explorer, for example). | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Userdata persistence | Enabled: Disable | This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Intranet Zone | Initialize and script ActiveX controls not marked as safe | Enabled: Disable | This policy setting allows you to manage ActiveX controls not marked as safe. If you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Local Machine Zone | Java permissions | Enabled: Disable Java | This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually. Disable Java to prevent any applets from running. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-Down Intranet Zone | Java permissions | Enabled: Disable Java | This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually. Disable Java to prevent any applets from running. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-Down Local Machine Zone | Java permissions | Enabled: Disable Java | This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually. Disable Java to prevent any applets from running. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-Down Restricted Sites Zone | Java permissions | Enabled: Disable Java | This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually. Disable Java to prevent any applets from running. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Access data sources across domains | Enabled: Disable | This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO). | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow active scripting | Enabled: Disable | This policy setting allows you to manage whether script code on pages in the zone is run. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow binary and script behaviors | Enabled: Disable | This policy setting allows you to manage dynamic binary and script behaviors: components that encapsulate specific functionality for HTML elements to which they were attached. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow cut copy or paste operations from the clipboard via script | Enabled: Disable | This policy setting allows you to manage whether scripts can perform a clipboard operation (for example, cut, copy, and paste) in a specified region. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow drag and drop or copy and paste files | Enabled: Disable | This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow file downloads | Enabled: Disable | This policy setting allows you to manage whether file downloads are permitted from the zone. This option is determined by the zone of the page with the link causing the download, not the zone from which the file is delivered. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow loading of XAML files | Enabled: Disable | This policy setting allows you to manage the loading of Extensible Application Markup Language (XAML) files. XAML is an XML-based declarative markup language commonly used for creating rich user interfaces and graphics that take advantage of the Windows Presentation Foundation. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow META REFRESH | Enabled: Disable | This policy setting allows you to manage whether a user's browser can be redirected to another Web page if the author of the Web page uses the Meta Refresh setting (tag) to redirect browsers to another Web page. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Download signed ActiveX controls | Enabled: Disable | This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow only approved domains to use ActiveX controls without prompt | Enabled: Enable | This policy setting controls whether the user is prompted to allow ActiveX controls to run on websites other than the website that installed the ActiveX control. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow only approved domains to use the TDC ActiveX control | Enabled: Enable | This policy setting controls whether the user can run the TDC ActiveX control on websites. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow scripting of Internet Explorer WebBrowser controls | Enabled: Disable | This policy setting determines whether a page can control embedded WebBrowser controls via script. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow script-initiated windows without size or position constraints | Enabled: Disable | This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows that include the title and status bars. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow scriptlets | Enabled: Disable | This policy setting allows you to manage whether the user can run scriptlets. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow updates to status bar via script | Enabled: Disable | This policy setting allows you to manage whether script can update the status bar within the zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Allow VBScript to run in Internet Explorer | Enabled: Disable | This policy setting allows you to manage whether VBScript can be run on pages from the specified zone in Internet Explorer. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Automatic prompting for file downloads | Enabled: Disable | This policy setting determines whether users will be prompted for non-user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Download unsigned ActiveX controls | Enabled: Disable | This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is potentially harmful, especially when coming from an untrusted zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Enable dragging of content from different domains across windows | Enabled: Disable | This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in different windows. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Enable dragging of content from different domains within a window | Enabled: Disable | This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in the same window. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Include local path when user is uploading files to a server | Enabled: Disable | This policy setting controls whether local path information is sent when the user is uploading a file via an HTML form. If the local path information is sent, some information may be unintentionally revealed to the server. For instance, files sent from the user's desktop may contain the user name as a part of the path. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Initialize and script ActiveX controls not marked as safe | Enabled: Disable | This policy setting allows you to manage ActiveX controls not marked as safe. If you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Java permissions | Enabled: Disable Java | This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually. Disable Java to prevent any applets from running. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Launching applications and files in an IFRAME | Enabled: Disable | This policy setting allows you to manage whether applications may be run, and files may be downloaded from an IFRAME reference in the HTML of the pages in this zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Logon options | Enabled: Anonymous logon | This policy setting allows you to manage settings for logon options. Anonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Navigate windows and frames across different domains | Enabled: Disable | This policy setting allows you to manage the opening of windows and frames and access of applications across different domains. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Run .NET Framework-reliant components not signed with Authenticode | Enabled: Disable | This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Run .NET Framework-reliant components signed with Authenticode | Enabled: Disable | This policy setting allows you to manage whether .NET Framework components that are signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Run ActiveX controls and plugins | Enabled: Disable | This policy setting allows you to manage whether ActiveX controls and plug-ins can be run on pages from the specified zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Script ActiveX controls marked safe for scripting | Enabled: Disable | This policy setting allows you to manage whether an ActiveX control marked safe for scripting can interact with a script. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Scripting of Java applets | Enabled: Disable | This policy setting allows you to manage whether applets are exposed to scripts within the zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Show security warning for potentially unsafe files | Enabled: Disable | This policy setting controls whether the "Open File - Security Warning" message appears when the user tries to open executable files or other potentially unsafe files (from an intranet file share by using File Explorer, for example). If you disable this policy setting, these files do not open. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Userdata persistence | Enabled: Disable | This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Web sites in less privileged Web content zones can navigate into this zone | Enabled: Disable | This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Trusted Sites Zone | Initialize and script ActiveX controls not marked as safe | Enabled: Disable | This policy setting allows you to manage ActiveX controls not marked as safe. If you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Trusted Sites Zone | Java permissions | Enabled: High Safety | This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually. High Safety enables applets to run in their sandbox. | +| Windows Components / Internet Explorer / Security Features / Add-on Management | Remove "Run this time" button for outdated ActiveX controls in Internet Explorer | Enabled | This policy setting allows you to stop users from seeing the "Run this time" button and from running specific outdated ActiveX controls in Internet Explorer. | +| Windows Components / Internet Explorer / Security Features / Add-on Management | Turn off blocking of outdated ActiveX controls for Internet Explorer | Disabled | This policy setting determines whether Internet Explorer blocks specific outdated ActiveX controls. Outdated ActiveX controls are never blocked in the Intranet Zone. | +| Windows Components / Internet Explorer / Security Features / Consistent Mime Handling | Internet Explorer Processes | Enabled | Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received through a Web server. This policy setting determines whether Internet Explorer requires that all file-type information provided by Web servers be consistent. For example, if the MIME type of a file is text/plain but the MIME sniff indicates that the file is really an executable file, Internet Explorer renames the file by saving it in the Internet Explorer cache and changing its extension. If you enable this policy setting, Internet Explorer requires consistent MIME data for all received files. | +| Windows Components / Internet Explorer / Security Features / Mime Sniffing Safety Feature | Internet Explorer Processes | Enabled | This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangerous file type. If you enable this policy setting, MIME sniffing will never promote a file of one type to a more dangerous file type. | +| Windows Components / Internet Explorer / Security Features / MK Protocol Security Restriction | Internet Explorer Processes | Enabled | The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted on the MK protocol will fail. If you enable this policy setting, the MK Protocol is prevented for File Explorer and Internet Explorer, and resources hosted on the MK protocol will fail. | +| Windows Components / Internet Explorer / Security Features / Notification Bar | Internet Explorer Processes | Enabled | This policy setting allows you to manage whether the Notification bar is displayed for Internet Explorer processes when file or code installs are restricted. By default, the Notification bar is displayed for Internet Explorer processes. If you enable this policy setting, the Notification bar will be displayed for Internet Explorer Processes. | +| Windows Components / Internet Explorer / Security Features / Protection from Zone Elevation | Internet Explorer Processes | Enabled | Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web page (Internet, Intranet, Local Machine zone, etc.). Web pages on the local computer have the fewest security restrictions and reside in the Local Machine zone, making the Local Machine security zone a prime target for malicious users. Zone Elevation also disables JavaScript navigation if there is no security context. If you enable this policy setting, any zone can be protected from zone elevation by Internet Explorer processes. | +| Windows Components / Internet Explorer / Security Features / Restrict ActiveX Install | Internet Explorer Processes | Enabled | This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes. If you enable this policy setting, prompting for ActiveX control installations will be blocked for Internet Explorer processes. | +| Windows Components / Internet Explorer / Security Features / Restrict File Download | Internet Explorer Processes | Enabled | This policy setting enables blocking of file download prompts that are not user initiated. If you enable this policy setting, file download prompts that are not user initiated will be blocked for Internet Explorer processes. | +| Windows Components / Internet Explorer / Security Features / Scripted Window Security Restrictions | Internet Explorer Processes | Enabled | Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restrictions security feature restricts popup windows and prohibits scripts from displaying windows in which the title and status bars are not visible to the user or obfuscate other Windows' title and status bars. If you enable this policy setting, popup windows and other restrictions apply for File Explorer and Internet Explorer processes. | + +### Custom Policies + +| Feature | Policy Setting | Policy Value | Description | +|-------------------|---------------------------------|-------------------------|------------------------| +| MS Security Guide | Configure SMB v1 server | Disabled | Disable or enable server-side processing of the SMBv1 protocol | +| MS Security Guide | Configure SMB v1 client driver | Enabled: Disable driver | Configure the startup mode for the kernel mode driver that implements client-side SMBv1 processing (MrxSmb10). This setting includes a dropdown that is activated when the Enabled radio button is selected and that controls the “Start” registry value in HKLM\\SYSTEM\\CurrentControlSet\\Services\\MrxSmb10. | +| MS Security Guide | Enabled Structured Exception Handling Overwrite Protection (SEHOP)| Enabled | This feature is designed to block exploits that use the Structured Exception Handler (SEH) overwrite technique. This protection mechanism is provided at run-time. Therefore, it helps protect applications regardless of whether they have been compiled with the latest improvements, such as the /SAFESEH option. We recommend that Windows users who are running any of the above operating systems enable this feature to improve the security profile of their systems. | +| MS Security Guide | WDigest Authentication | Disabled | When the WDigest Authentication protocol is enabled, plain text passwords are stored in the Local Security Authority Subsystem Service (LSASS) exposing them to theft. WDigest is disabled by default in Windows 10. This setting ensures this is enforced. | +| MS Security Guide | Block Flash activation in Office documents | Enabled | Prevents the Adobe Flash ActiveX control from being loaded by Office applications. | +| MSS (Legacy) | MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (Protects against packet spoofing) | Highest Protection, source routing is completely disabled | Allowing source routed network traffic allows attackers to obscure their identity and location. | +| MSS (Legacy) | MSS: (DisableIPSourceRouting) IP source routing protection level (Protects against packet spoofing) | Highest Protection, source routing is completely disabled | Allowing source routed network traffic allows attackers to obscure their identity and location. | +| MSS (Legacy) | MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes | Disabled | Allowing ICMP redirect of routes can lead to traffic not being routed properly. When disabled, this forces ICMP to be routed via shortest path first. | +| MSS (Legacy) | MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers | Enabled | Prevents a denial-of-service (DoS) attack against a WINS server. The DoS consists of sending a NetBIOS Name Release Request to the server for each entry in the server's cache, causing a response delay in the normal operation of the server's WINS resolution capability. | + +## Controls + +The controls enforced in level 4 implement more controls and a more sophisticated security +configuration than level 5. While they may have a slightly higher impact to +users or to applications, they enforce a level of security more commensurate +with the risks facing users with access to sensitive information. Microsoft +recommends using the Audit/Enforce methodology for controls with an Audit mode, +and [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates) for those that do not, with a moderate timeline that +is anticipated to be slightly longer than the process in level 5. + +| Feature Set | Feature | Description | +|-------------------------------------------------------------|-------------------------------------------------------|----------------| +| [Exploit protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/exploit-protection-exploit-guard) | Enforce memory protection for OS-level controls:
- Control flow guard (CFG)
- Data Execution Protection (DEP)
- Mandatory ASLR
- Bottom-Up ASLR
- High-entropy ASLR
- Validate Exception Chains (SEHOP)
- Validate heap integrity | Exploit protection helps protect devices from malware that use exploits to spread and infect to other devices. It consists of several mitigations that can be applied at either the operating system level, or at the individual app level. There is a risk to application compatibility, as some applications may rely on blocked behavior (e.g. dynamically generating code without marking memory as executable). Microsoft recommends gradually deploying this configuration using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | +| [Attack Surface Reduction (ASR)](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard)| Configure and enforce [Attack Surface Reduction rules](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard#attack-surface-reduction-rules)| Attack surface reduction controls help prevent actions and apps that are typically used by exploit-seeking malware to infect machines. There is a risk to application compatibility, as some applications may rely on blocked behavior (e.g. an Office application spawning a child process). Each control has an Audit mode, and as such, Microsoft recommends the Audit / Enforce Methodology (repeated here):
1) Audit – enable the controls in audit mode, and gather audit data in a centralized location
2) Review – review the audit data to assess potential impact (both positive and negative) and configure any exemptions from the security control you need to configure
3) Enforce – Deploy the configuration of any exemptions and convert the control to enforce mode | +| [Network protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/network-protection-exploit-guard) | Configure and enforce Network Protection | Network protection helps to prevent employees from using any application to access dangerous domains that may host phishing scams, exploits, and other malicious content on the Internet. It expands the scope of Windows Defender SmartScreen to block all outbound HTTP(s) traffic that attempts to connect to low-reputation sources (based on the domain or hostname). There is a risk to application compatibility, as a result of false positives in flagged sites. Microsoft recommends deploying using the Audit / Enforce Methodology. | + +## Behaviors + +The behaviors recommended in level 4 implement a more sophisticated security process. While they may require a more sophisticated organization, they enforce +a level of security more commensurate with the risks facing users with access to +sensitive information. + +| Feature Set| Feature | Description | +|------------|----------|--------------| +| Antivirus | Configure Protection Updates to failover to retrieval from Microsoft | Sources for Windows Defender Antivirus Protection Updates can be provided in an ordered list. If you are using internal distribution, such as SCCM or WSUS, configure Microsoft Update lower in the list as a failover. | +| OS Security Updates | Deploy Windows Quality Updates within 4 days | As the time between release of a patch and an exploit based on the reverse engineering of that patch continues to shrink, engineering a process that provides the ability to validate and deploy quality updates addressing known security vulnerabilities is a critical aspect of security hygiene.| +| Helpdesk| 1:1 Administration| A simple and common model for helpdesk support is to add the Helpdesk group as a permanent member of the Local Administrators group of every device. If any device is compromised and helpdesk can connect to it, then these credentials can be used to obtain privilege on any / all other devices. Design and implement a strategy to provide helpdesk support without providing 1:all admin access – constraining the value of these Helpdesk credentials | + + diff --git a/windows/security/threat-protection/windows-security-configuration-framework/level-5-enterprise-security.md b/windows/security/threat-protection/windows-security-configuration-framework/level-5-enterprise-security.md new file mode 100644 index 0000000000..5b7819551f --- /dev/null +++ b/windows/security/threat-protection/windows-security-configuration-framework/level-5-enterprise-security.md @@ -0,0 +1,244 @@ +--- +title: Level 5 enterprise security configuration +description: Describes the policies, controls, and organizational behaviors for Windows security configuration framework level 5 enterprise security configuration. +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# Level 5 enterprise security configuration + +**Applies to** + +- Windows 10 + +Level 5 is the minimum security configuration for an enterprise device. +Microsoft recommends the following configuration for level 5 devices. + +## Policies + +The policies in level 5 enforce a reasonable security level while minimizing the impact to users or to applications. +Microsoft recommends using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates) for these security configurations and controls, noting that the timeline can generally be short given the limited potential impact of the security controls. + +### Security Template Policies + +| Feature | Policy Setting | Policy Value | Description | +|-------------------------|--------------------------------------------------------------------------------------------------|---------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Password Policy | Enforce password history | 24 | The number of unique new passwords that must be associated with a user account before an old password can be reused. | +| Password Policy | Minimum password length | 14 | The least number of characters that a password for a user account may contain. | +| Password Policy | Password must meet complexity requirements | Enabled | Determines whether passwords must meet complexity requirements:
1) Not contain the user's samAccountName (Account Name) value or entire displayName (Full Name value). Neither check is case sensitive.
The samAccountName is checked in its entirety only to determine whether it is part of the password. If the samAccountName is less than three characters long, this check is skipped. The displayName is parsed for delimiters: commas, periods, dashes or hyphens, underscores, spaces, pound signs, and tabs. If any of these delimiters are found, the displayName is split and all parsed sections (tokens) are confirmed to not be included in the password. Tokens that are less than three characters are ignored, and substrings of the tokens are not checked. For example, the name "Erin M. Hagens" is split into three tokens: "Erin", "M", and "Hagens". Because the second token is only one character long, it is ignored. Therefore, this user could not have a password that included either "erin" or "hagens" as a substring anywhere in the password.
2) Contain characters from three of the following categories:
- Uppercase letters of European languages (A through Z, with diacritic marks, Greek and Cyrillic characters)
- Lowercase letters of European languages (a through z, sharp-s, with diacritic marks, Greek and Cyrillic characters)
- Base 10 digits (0 through 9)
-Non-alphanumeric characters (special characters):
(~!@#$%^&*_-+=`\|\\(){}[]:;"'<>,.?/)
Currency symbols such as the Euro or British Pound are not counted as special characters for this policy setting.
- Any Unicode character that is categorized as an alphabetic character but is not uppercase or lowercase. This includes Unicode characters from Asian languages. | +| Password Policy | Store passwords using reversible encryption | Disabled | Determines whether the operating system stores passwords using reversible encryption. | +| Security Options | Accounts: Guest account status | Disabled | Determines if the Guest account is enabled or disabled. | +| Security Options | Domain member: Disable machine account password changes | Disabled | Determines whether a domain member periodically changes its computer account password. | +| Security Options | Domain member: Maximum machine account password age | 30 | Determines how often a domain member will attempt to change its computer account password | +| Security Options | Domain member: require strong (Windows 2000 or later) session key | Enabled | Determines whether 128-bit key strength is required for encrypted secure channel data | +| Security Options | Interactive logon: Machine inactivity limit | 900 | The number of seconds of inactivity before the session is locked | +| Security Options | User Account Control: Admin approval mode for the built-in administrator | Enabled | The built-in Administrator account uses Admin Approval Mode - any operation that requires elevation of privilege will prompt to user to approve that operation | +| Security Options | User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode | Prompt for consent on the secure desktop | When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a privileged user name and password. If the user enters valid credentials, the operation continues with the user's highest available privilege. | +| Security Options | User Account Control: Detect application installations and prompt for elevation | Enabled | When an application installation package is detected that requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. | +| Security Options | User Account Control: Run all Administrators in admin approval mode | Enabled | This policy must be enabled, and related UAC policy settings must also be set appropriately to allow the built-in Administrator account and all other users who are members of the Administrators group to run in Admin Approval Mode. | +| Security Options | User Account Control: Virtualize file and registry write failures to per-user locations | Enabled | This policy setting controls whether application write failures are redirected to defined registry and file system locations. This policy setting mitigates applications that run as administrator and write run-time application data to %ProgramFiles%, %Windir%, %Windir%\\system32, or HKLM\\Software. | +| User Rights Assignments | Access Credential Manager as a trusted caller | No One (blank) | This setting is used by Credential Manager during Backup/Restore. No accounts should have this privilege, as it is only assigned to Winlogon. Users saved credentials might be compromised if this privilege is given to other entities. | +| User Rights Assignments | Act as part of the operating system | No One (blank) | This user right allows a process to impersonate any user without authentication. The process can therefore gain access to the same local resources as that user. | +| User Rights Assignments | Allow log on locally | Administrators; Users | Determines which users can log on to the computer | +| User Rights Assignments | Back up files and directories | Administrators | Determines which users can bypass file and directory, registry, and other persistent object permissions for the purposes of backing up the system | +| User Rights Assignments | Create a pagefile | Administrators | Determines which users and groups can call an internal application programming interface (API) to create and change the size of a page file | +| User Rights Assignments | Create a token object | No One (blank) | Determines which accounts can be used by processes to create a token that can then be used to get access to any local resources when the process uses an internal application programming interface (API) to create an access token. | +| User Rights Assignments | Create global objects | Administrators; LOCAL SERVICE; NETWORK SERVICE; SERVICE | This security setting determines whether users can create global objects that are available to all sessions. | +| User Rights Assignments | Create permanent shared objects | No One (blank) | Determines which accounts can be used by processes to create a directory object using the object manager | +| User Rights Assignments | Create symbolic links | Administrators | Determines if the user can create a symbolic link from the computer he is logged on to | +| User Rights Assignments | Debug programs | Administrators | Determines which users can attach a debugger to any process or to the kernel. Developers who are debugging their own applications do not need to be assigned this user right. Developers who are debugging new system components will need this user right to be able to do so. This user right provides complete access to sensitive and critical operating system components. | +| User Rights Assignments | Deny access to this computer from the network | Guests; NT AUTHORITY\\Local Account | Determines which users are prevented from accessing a computer over the network. This policy setting supersedes the Access this computer from the network policy setting if a user account is subject to both policies. | +| User Rights Assignments | Deny log on locally | Guests | Determines which users are prevented from logging on at the computer. This policy setting supersedes the Allow log on locally policy setting if an account is subject to both policies. | +| User Rights Assignments | Deny log on through Remote Desktop Services | Guests; NT AUTHORITY\\Local Account | Determines which users and groups are prohibited from logging on as a Remote Desktop Services client | +| User Rights Assignments | Force shutdown from a remote system | Administrators | Determines which users can shut down a computer from a remote location on the network. Misuse of this user right can result in a denial of service. | +| User Rights Assignments | Increase scheduling priority | Administrators | Determines which accounts can use a process with Write Property access to another process to increase the execution priority assigned to the other process. A user with this privilege can change the scheduling priority of a process through the Task Manager user interface. | +| User Rights Assignments | Load and unload device drivers | Administrators | Determines which users can dynamically load and unload device drivers or other code in to kernel mode. This user right does not apply to Plug and Play device drivers. | +| User Rights Assignments | Manage auditing and security log | Administrators | Determines which users can specify object access auditing options for individual resources, such as files, Active Directory objects, and registry keys. | +| User Rights Assignments | Modify firmware environment variables | Administrators | Determines who can modify firmware environment values. Firmware environment variables are settings stored in the nonvolatile RAM of non-x86-based computers. The effect of the setting depends on the processor. | +| User Rights Assignments | Restore files and directories | Administrators | Determines which users can bypass file, directory, registry, and other persistent objects permissions when restoring backed up files and directories, and determines which users can set any valid security principal as the owner of an object | +| User Rights Assignments | Take ownership of files or other objects | Administrators | Determines which users can take ownership of any securable object in the system, including Active Directory objects, files and folders, printers, registry keys, processes, and threads | + +### Advanced Audit Policies + +| Feature | Policy Setting | Policy Value | Description | +|--------------------|---------------------------------------|---------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Account Logon | Audit Credential Validation | Success and Failure | Audit events generated by validation tests on user account logon credentials. Occurs only on the computer that is authoritative for those credentials. | +| Account Management | Audit Security Group Management | Success | Audit events generated by changes to security groups, such as creating, changing or deleting security groups, adding or removing members, or changing group type. | +| Account Management | Audit User Account Management | Success and Failure | Audit changes to user accounts. Events include creating, changing, deleting user accounts; renaming, disabling, enabling, locking out, or unlocking accounts; setting or changing a user account’s password; adding a security identifier (SID) to the SID History of a user account; configuring the Directory Services Restore Mode password; changing permissions on administrative user accounts; backing up or restoring Credential Manager credentials | +| Detailed Tracking | Audit PNP Activity | Success | Audit when plug and play detects an external device | +| Detailed Tracking | Audit Process Creation | Success | Audit events generated when a process is created or starts; the name of the application or user that created the process is also audited | +| Logon/ Logoff | Audit Account Lockout | Failure | Audit events generated by a failed attempt to log on to an account that is locked out | +| Logon/ Logoff | Audit Group Membership | Success | Audit the group membership information in the user's logon token. Events in this subcategory are generated on the computer on which a logon session is created. For an interactive logon, the security audit event is generated on the computer that the user logged on to. For a network logon, such as accessing a shared folder on the network, the security audit event is generated on the computer hosting the resource. | +| Logon/ Logoff | Audit Logon | Success and Failure | Audit events generated by user account logon attempts on the computer | +| Logon/ Logoff | Audit Other Logon / Logoff Events | Success and Failure | Audit other logon/logoff-related events that are not covered in the “Logon/Logoff” policy setting, such as Terminal Services session disconnections, new Terminal Services sessions locking and unlocking a workstation, invoking or dismissing a screen saver, detection of a Kerberos replay attack, or access to a wireless network granted to a user or computer account | +| Logon/ Logoff | Audit Special Logon | Success | Audit events generated by special logons such as the use of a special logon, which is a logon that has administrator-equivalent privileges and can be used to elevate a process to a higher level, or a logon by a member of a Special Group (Special Groups enable you to audit events generated when a member of a certain group has logged on to your network) | +| Object Access | Audit Detailed File Share | Failure | Audit attempts to access files and folders on a shared folder; the Detailed File Share setting logs an event every time a file or folder is accessed | +| Object Access | Audit File Share | Success and Failure | Audit attempts to access a shared folder; an audit event is generated when an attempt is made to access a shared folder | +| Object Access | Audit Other Object Access Events | Success and Failure | Audit events generated by the management of task scheduler jobs or COM+ objects | +| Object Access | Audit Removable Storage | Success and Failure | Audit user attempts to access file system objects on a removable storage device. A security audit event is generated only for all objects for all types of access requested. | +| Policy Change | Audit Audit Policy Change | Success | Audit changes in the security audit policy settings | +| Policy Change | Audit Authentication Policy Change | Success | Audit events generated by changes to the authentication policy | +| Policy Change | Audit MPSSVC Rule-Level Policy Change | Success and Failure | Audit events generated by changes in policy rules used by the Microsoft Protection Service (MPSSVC). This service is used by Windows Firewall. | +| Policy Change | Audit Other Policy Change Events | Failure | Audit events generated by other security policy changes that are not audited in the policy change category, such as Trusted Platform Module (TPM) configuration changes, kernel-mode cryptographic self tests, cryptographic provider operations, cryptographic context operations or modifications, applied Central Access Policies (CAPs) changes, or boot Configuration Data (BCD) modifications | +| Privilege Use | Audit Sensitive Privilege Use | Success and Failure | Audit events generated when sensitive privileges (user rights) are used | +| System | Audit Other System Events | Success and Failure | Audit any of the following events: Startup and shutdown of the Windows Firewall service and driver, security policy processing by the Windows Firewall Service, cryptography key file and migration operations. | +| System | Audit Security State Change | Success | Audit events generated by changes in the security state of the computer such as startup and shutdown of the computer, change of system time, recovering the system from CrashOnAuditFail, which is logged after a system restarts when the security event log is full and the CrashOnAuditFail registry entry is configured. | +| System | Audit Security System Extension | Success | Audit events related to security system extensions or services | +| System | Audit System Integrity | Success and Failure | Audit events that violate the integrity of the security subsystem | + +### Windows Defender Firewall Policies + +| Feature | Policy Setting | Policy Value | Description | +|----------------------------|---------------------------------------|--------------|-------------------------------------------------------------------------------------------------------------------------------------------| +| Domain Profile / Logging | Log dropped packets | Yes | Enables logging of dropped packets for a domain connection | +| Domain Profile / Logging | Log successful connections | Yes | Enables logging of successful connections for a domain connection | +| Domain Profile / Logging | Size Limit | 16384 | Sets the firewall log file size for a domain connection | +| Domain Profile / Settings | Display a notification | No | The display of notifications to the user is enabled when a program is blocked from receiving an inbound connection in the domain profile | +| Domain Profile / State | Firewall State | On | Enables the firewall when connected to the domain profile | +| Domain Profile / State | Inbound Connections | Block | Unsolicited inbound connections for which there is no rule allowing the connection will be blocked in the domain profile | +| Private Profile / Logging | Log dropped packets | Yes | Enables logging of dropped packets for a private connection | +| Private Profile / Logging | Log successful connections | Yes | Enables logging of successful connections for a private connection | +| Private Profile / Logging | Size limit | 16384 | Sets the firewall log file size for a private connection | +| Private Profile / Settings | Display a notification | No | The display of notifications to the user is enabled when a program is blocked from receiving an inbound connection in the private profile | +| Private Profile / State | Firewall state | On | Enables the firewall when connected to the private profile | +| Private Profile / State | Inbound connections | Block | Unsolicited inbound connections for which there is no rule allowing the connection will be blocked in the private profile | +| Public Profile / Logging | Log dropped packets | Yes | Enables logging of dropped packets for a public connection | +| Public Profile / Logging | Log successful connections | Yes | Enables logging of successful connections for a public connection | +| Public Profile / Logging | Size Limit | 16384 | Sets the firewall log file size for a public connection | +| Public Profile / Settings | Apply local connection security rules | No | Ensures local connection rules will not be merged with Group Policy settings in the domain | +| Public Profile / Settings | Apply local firewall rules | No | Users cannot create new firewall rules | +| Public Profile / Settings | Display a notification | No | The display of notifications to the user is enabled when a program is blocked from receiving an inbound connection in the public profile | +| Public Profile / State | Firewall state | On | Enables the firewall when connected to the public profile | +| Public Profile / State | Inbound connections | Block | Unsolicited inbound connections for which there is no rule allowing the connection will be blocked in the public profile | + +### Computer Policies + +| Feature | Policy Setting | Policy Value | Description | +|---------------------------------------------------------------------------|------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Network / Lanman Workstation | Enable insecure guest logons | Disabled | Determines if the SMB client will allow insecure guest logons to an SMB server | +| System / Device Guard | Turn on Virtualization Based Security | Enabled: SecureBoot and DMA Protection | Specifies whether Virtualization Based Security is enabled. Virtualization Based Security uses the Windows Hypervisor to provide support for security services. Virtualization Based Security requires Secure Boot and can optionally be enabled with the use of DMA Protections. DMA protections require hardware support and will only be enabled on correctly configured devices. | +| System / Early Launch Antimalware | Boot-Start Driver Initialization Policy | Enabled: Good, Unknown and bad but critical | Allows you to specify which boot-start drivers are initialized based on a classification determined by an Early Launch Antimalware boot-start driver. | +| System / Power Management / Sleep Settings | Require a password when a computer wakes (on battery) | Enabled | Specifies whether the user is prompted for a password when the system resumes from sleep | +| System / Power Management / Sleep Settings | Require a password when a computer wakes (plugged in) | Enabled | Specifies whether the user is prompted for a password when the system resumes from sleep | +| System / Remote Procedure Call | Restrict Unauthenticated RPC clients | Enabled: Authenticated | Controls how the RPC server runtime handles unauthenticated RPC clients connecting to RPC servers. | +| Windows Components / App runtime | Allow Microsoft accounts to be optional | Enabled | Lets you control whether Microsoft accounts are optional for Windows Store apps that require an account to sign in. This policy only affects Windows Store apps that support it. | +| Windows Components / AutoPlay Policies | Disallow Autoplay for non-volume devices | Enabled | Disallows AutoPlay for MTP devices like cameras or phones. | +| Windows Components / AutoPlay Policies | Set the default behavior for AutoRun | Enabled: Do not execute any autorun commands | Sets the default behavior for Autorun commands. | +| Windows Components / AutoPlay Policies | Turn off Autoplay | Enabled: All Drives | Allows you to turn off the Autoplay feature. | +| Windows Components / Biometrics / Facial Features | Configure enhanced anti-spoofing | Enabled | Determines whether enhanced anti-spoofing is required for Windows Hello face authentication | +| Windows Components / BitLocker Drive Encryption | Choose drive encryption method and cipher strength (Windows 10) | Enabled: XTA-AES-256 for operating system drives and fixed drives and AES-CBC-256 for removable drives | Allows you to configure the algorithm and cipher strength used by BitLocker Drive Encryption. This policy setting is applied when you turn on BitLocker. | +| Windows Components / BitLocker Drive Encryption | Disable new DMA devices when this computer is locked | Enabled | Allows you to block direct memory access (DMA) for all Thunderbolt hot pluggable PCI downstream ports until a user logs into Windows | +| Windows Components / BitLocker Drive Encryption / Operating System Drives | Allow enhanced PINs for startup | Enabled | Allows you to configure whether enhanced startup PINs are used with BitLocker | +| Windows Components / BitLocker Drive Encryption / Operating System Drives | Allow Secure Boot for integrity validation | Enabled | Allows you to configure whether Secure Boot will be allowed as the platform integrity provider for BitLocker operating system drives. | +| Windows Components / Event Log Service / Application | Specify the maximum log file size (KB) | Enabled: 32768 | Specifies the maximum size of the log file in kilobytes. | +| Windows Components / Event Log Service / Security | Specify the maximum log file size (KB) | Enabled: 196608 | Specifies the maximum size of the log file in kilobytes. | +| Windows Components / Event Log Service / System | Specify the maximum log file size (KB) | Enabled: 32768 | Specifies the maximum size of the log file in kilobytes. | +| Windows Components / Microsoft Edge | Configure Windows Defender SmartScreen | Enabled | Configure whether to turn on Windows Defender SmartScreen to provide warning messages to help protect your employees from potential phishing scams and malicious software | +| Windows Components / Windows Defender SmartScreen / Explorer | Configure Windows Defender SmartScreen | Warn and prevent bypass | Allows you to turn Windows Defender SmartScreen on or off | +| Windows Components / Microsoft Edge | Prevent bypassing Windows Defender SmartScreen prompts for files | Enabled | This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about downloading unverified files. | +| Windows Components / Windows Defender SmartScreen / Microsoft Edge | Prevent bypassing Windows Defender SmartScreen prompts for sites | Enabled | Lets you decide whether employees can override the Windows Defender SmartScreen warnings about potentially malicious websites | +| Windows Components / Windows Installer | Allow user control over installs | Disabled | Permits users to change installation options that typically are available only to system administrators | +| Windows Components / Windows Installer | Always install with elevated privileges | Disabled | Directs Windows Installer to use elevated permissions when it installs any program on the system | +| Windows Components / Windows Logon Options | Sign-in last interactive user automatically after a system-initiated restart | Disabled | Controls whether a device will automatically sign-in the last interactive user after Windows Update restarts the system | +| Windows Components / Windows Remote Management (WinRM) / WinRM Client | Allow unencrypted traffic | Disabled | Manage whether the Windows Remote Management (WinRM) client sends and receives unencrypted messages over the network | +| Windows Components / Windows Remote Management (WinRM) / WinRM Service | Allow unencrypted traffic | Disabled | Manage whether the Windows Remote Management (WinRM) service sends and receives unencrypted messages over the network. | + +### Windows Defender Antivirus Policies + +| Feature | Policy Setting | Policy Value | Description | +|------------------------------------------------------------------------|-----------------------------------------------------------|----------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Windows Components / Windows Defender Antivirus | Turn off Windows Defender Antivirus | Disabled | Turns off Windows Defender Antivirus | +| Windows Components / Windows Defender Antivirus | Configure detection for potentially unwanted applications | Enabled: Audit | Enable or disable detection for potentially unwanted applications. You can choose to block, audit, or allow when potentially unwanted software is being downloaded or attempts to install itself on your computer. | +| Windows Components / Windows Defender Antivirus / MAPS | Join Microsoft MAPS | Enabled: Advanced MAPS | Allows you to join Microsoft MAPS. Microsoft MAPS is the online community that helps you choose how to respond to potential threats. The community also helps stop the spread of new malicious software infections. | +| Windows Components / Windows Defender Antivirus / MAPS | Send file samples when further analysis is required | Enabled: Send safe samples | Configures behavior of samples submission when opt-in for MAPS telemetry is set | +| Windows Components / Windows Defender Antivirus / Real-time Protection | Turn off real-time protection | Disabled | Turns off real-time protection prompts for known malware detection | +| Windows Components / Windows Defender Antivirus / Real-time Protection | Turn on behavior monitoring | Enabled | Allows you to configure behavior monitoring. | +| Windows Components / Windows Defender Antivirus / Scan | Scan removable drives | Enabled | Allows you to manage whether to scan for malicious software and unwanted software in the contents of removable drives, such as USB flash drives, when running a full scan. | +| Windows Components / Windows Defender Antivirus / Scan | Specify the interval to run quick scans per day | 24 | Allows you to specify an interval at which to perform a quick scan. The time value is represented as the number of hours between quick scans. Valid values range from 1 (every hour) to 24 (once per day). | +| Windows Components / Windows Defender Antivirus / Scan | Turn on e-mail scanning | Enabled | Allows you to configure e-mail scanning. When e-mail scanning is enabled, the engine will parse the mailbox and mail files, according to their specific format, in order to analyze the mail bodies and attachments | + +### User Policies + +| Feature | Policy Setting | Policy Value | Description | +|----------------------------------------|-------------------------------------------------------------|--------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Start Menu and Taskbar / Notifications | Turn off toast notifications on the lock screen | Enabled | Turns off toast notifications on the lock screen. | +| Windows Components / Cloud Content | Do not suggest third-party content in the Windows spotlight | Enabled | Windows spotlight features like lock screen spotlight, suggested apps in Start menu or Windows tips will no longer suggest apps and content from third-party software publishers | + +### IE Computer Policies + +| Feature | Policy Setting | Policy Value | Description | +|---------------------------------------------------------------------------------------------------------------------|---------------------------------------------------------|----------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Windows Components / Internet Explorer | Prevent managing SmartScreen Filter | Enabled: On | Prevents the user from managing SmartScreen Filter, which warns the user if the website being visited is known for fraudulent attempts to gather personal information through "phishing," or is known to host malware. | +| Windows Components / Internet Explorer / Internet Control Panel / Advanced Page | Check for server certificate revocation | Enabled | Allows you to manage whether Internet Explorer will check revocation status of servers' certificates | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Turn on Cross-Site Scripting Filter | Enabled: Enable | Controls whether the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injections into websites in this zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Turn on Protected Mode | Enabled: Enable | Allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Turn on SmartScreen Filter scan | Enabled: Enable | Controls whether SmartScreen Filter scans pages in this zone for malicious content. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Internet Zone | Use Pop-up Blocker | Enabled: Enable | Allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not blocked. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Intranet Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Intranet Zone | Java permissions | Enabled: High Safety | Allows you to manage permissions for Java applets. High Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Local Machine Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-down Internet Zone | Turn on SmartScreen Filter scan | Enabled: Enable | Controls whether SmartScreen Filter scans pages in this zone for malicious content. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-Down Restricted Sites Zone | Turn on SmartScreen Filter scan | Enabled: Enable | Controls whether SmartScreen Filter scans pages in this zone for malicious content. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Turn on Cross-Site Scripting Filter | Enabled: Enable | Controls whether the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injections into websites in this zone. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Turn on Protected Mode | Enabled: Enable | Allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Turn on SmartScreen Filter scan | Enabled: Enable | Controls whether SmartScreen Filter scans pages in this zone for malicious content. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-Down Trusted Sites Zone | Java permissions | Enabled: Enable | Allows you to configure policy settings according to the default for the selected security level, such Low, Medium, or High. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Restricted Sites Zone | Use Pop-up Blocker | Enabled: Enable | Allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not blocked. | +| Windows Components / Internet Explorer / Internet Control Panel / Security Page / Trusted Sites Zone | Don't run antimalware programs against ActiveX controls | Enabled: Disable | Determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. | +| Windows Components / Internet Explorer / Security Features | Allow fallback to SSL 3.0 (Internet Explorer) | Enabled: No sites | Allows you to block an insecure fallback to SSL 3.0. When this policy is enabled, Internet Explorer will attempt to connect to sites using SSL 3.0 or below when TLS 1.0 or greater fails. | + +### LAPS + +Download and install the [Microsoft Local Admin Password Solution (LAPS)](https://www.microsoft.com/download/details.aspx?id=46899). + +| Feature | Policy Setting | Policy Value | Description | +|---------|----------------------------------------|--------------|-------------------------------| +| LAPS | Enable local admin password management | Enabled | Activates LAPS for the device | + +### Custom Policies + +| Feature | Policy Setting | Policy Value | Description | +|-----------------------------------------------------------------------|-----------------------------------------------------------|--------------|---------------------------------------------------------------------------------------| +| Computer Configuration / Administrative Templates / MS Security Guide | Apply UAC restrictions to local accounts on network logon | Enabled | Filters the user account token for built-in administrator accounts for network logons | + +### Services + +| Feature | Policy Setting | Policy Value | Description | +|----------------|-----------------------------------|--------------|-----------------------------------------------------------------------------------| +| Scheduled Task | XblGameSaveTask | Disabled | Syncs save data for Xbox Live save-enabled games | +| Services | Xbox Accessory Management Service | Disabled | Manages connected Xbox accessories | +| Services | Xbox Game Monitoring | Disabled | Monitors Xbox games currently being played | +| Services | Xbox Live Auth Manager | Disabled | Provides authentication and authorization services for interactive with Xbox Live | +| Services | Xbox Live Game Save | Disabled | Syncs save data for Xbox live save enabled games | +| Services | Xbox Live Networking Service | Disabled | Supports the Windows.Networking.XboxLive API | + +## Controls + +The controls enabled in level 5 enforce a reasonable security level while minimizing the impact to users and applications. + +| Feature | Config | Description | +|-----------------------------------|-------------------------------------|--------------------| +| [Windows Defender ATP EDR](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/overview-endpoint-detection-response) | Deployed to all devices | The Windows Defender ATP endpoint detection and response (EDR) provides actionable and near real-time detection of advanced attacks. EDR helps security analysts , and aggregates alerts with the same attack techniques or attributed to the same attacker into an an entity called an *incident*. An incident helps analysts prioritize alerts, collectively investigate the full scope of a breach, and respond to threats. Windows Defender ATP EDR is not expected to impact users or applications, and it can be deployed to all devices in a single step. | +| [Windows Defender Credential Guard](https://docs.microsoft.com/windows/security/identity-protection/credential-guard/credential-guard) | Enabled for all compatible hardware | Windows Defender Credential Guard uses virtualization-based security to isolate secrets so that only privileged system software can access them. Unauthorized access to these secrets can lead to credential theft attacks, such as Pass-the-Hash or Pass-The-Ticket. Windows Defender Credential Guard prevents these attacks by protecting NTLM password hashes, Kerberos Ticket Granting Tickets (TGTs), and credentials stored by applications as domain credentials. There is a small risk to application compatibility, as [applications will break](https://docs.microsoft.com/windows/security/identity-protection/credential-guard/credential-guard-requirements#application-requirements) if they require NTLMv1, Kerberos DES encryption, Kerberos unconstrained delegation, or extracting the Keberos TGT. As such, Microsoft recommends deploying Credential Guard using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | +| [Microsoft Edge](https://docs.microsoft.com/microsoft-edge/deploy/) | Default browser | Microsoft Edge in Windows 10 provides better security than Internet Explorer 11 (IE11). While you may still need to leverage IE11 for compatibility with some sites, Microsoft recommends configuring Microsoft Edge as the default browser, and building an Enterprise Mode Site List to redirect to IE11 only for those sites that require it. Microsoft recommends leveraging either Windows Analytics or Enterprise Site Discovery to build the initial Enterprise Mode Site List, and then gradually deploying this configuration using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | +| [Windows Defender Application Guard](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-guard/wd-app-guard-overview) | Enabled on compatible hardware | Windows Defender Application Guard uses a hardware isolation approach. If an employee goes to an untrusted site through either Microsoft Edge or Internet Explorer, Microsoft Edge opens the site in an isolated container, which is separate from the host operating system and enabled by Hyper-V. If the untrusted site turns out to be malicious, the isolated container protects the host PC, and the attacker can't get to your enterprise data. There is a small risk to application compatibility, as some applications may require interaction with the host PC but may not yet be on the list of trusted web sites for Application Guard. Microsoft recommends leveraging either Windows Analytics or Enterprise Site Discovery to build the initial Network Isolation Settings, and then gradually deploying this configuration using [the rings methodology](https://docs.microsoft.com/windows/deployment/update/waas-deployment-rings-windows-10-updates). | + +## Behaviors + +The behaviors recommended in level 5 enforce a reasonable security level while minimizing the impact to users or to applications. + +| Feature | Config | Description | +|---------|-------------------|-------------| +| OS security updates | Deploy Windows Quality Updates within 7 days of release | As the time between the release of a patch and an exploit based on the reverse engineering of that patch continues to shrink, a critical aspect of security hygiene is having an engineering process that quickly validates and deploys Quality Updates that address security vulnerabilities. | + diff --git a/windows/security/threat-protection/windows-security-configuration-framework/security-compliance-toolkit-10.md b/windows/security/threat-protection/windows-security-configuration-framework/security-compliance-toolkit-10.md new file mode 100644 index 0000000000..fe229e350d --- /dev/null +++ b/windows/security/threat-protection/windows-security-configuration-framework/security-compliance-toolkit-10.md @@ -0,0 +1,72 @@ +--- +title: Microsoft Security Compliance Toolkit 1.0 +description: This article describes how to use the Security Compliance Toolkit in your organization +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: sagaudre +author: justinha +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 11/26/2018 +--- + +# Microsoft Security Compliance Toolkit 1.0 + +## What is the Security Compliance Toolkit (SCT)? + +The Security Compliance Toolkit (SCT) is a set of tools that allows enterprise security administrators to download, analyze, test, edit, and store Microsoft-recommended security configuration baselines for Windows and other Microsoft products. + +The SCT enables administrators to effectively manage their enterprise’s Group Policy Objects (GPOs). Using the toolkit, administrators can compare their current GPOs with Microsoft-recommended GPO baselines or other baselines, edit them, store them in GPO backup file format, and apply them broadly through Active Directory or individually through local policy. +

+ +The Security Compliance Toolkit consists of: + +- Windows 10 security baselines + - Windows 10 Version 1809 (October 2018 Update) + - Windows 10 Version 1803 (April 2018 Update) + - Windows 10 Version 1709 (Fall Creators Update) + - Windows 10 Version 1703 (Creators Update) + - Windows 10 Version 1607 (Anniversary Update) + - Windows 10 Version 1511 (November Update) + - Windows 10 Version 1507 + +- Windows Server security baselines + - Windows Server 2019 + - Windows Server 2016 + - Windows Server 2012 R2 + +- Microsoft Office security baseline + - Office 2016 + +- Tools + - Policy Analyzer tool + - Local Group Policy Object (LGPO) tool + + +You can [download the tools](https://www.microsoft.com/download/details.aspx?id=55319) along with the baselines for the relevant Windows versions. For more details about security baseline recommendations, see the [Microsoft Security Guidance blog](https://blogs.technet.microsoft.com/secguide/). + +## What is the Policy Analyzer tool? + +The Policy Analyzer is a utility for analyzing and comparing sets of Group Policy Objects (GPOs). Its main features include: +- Highlight when a set of Group Policies has redundant settings or internal inconsistencies +- Highlight the differences between versions or sets of Group Policies +- Compare GPOs against current local policy and local registry settings +- Export results to a Microsoft Excel spreadsheet + +Policy Analyzer lets you treat a set of GPOs as a single unit. This makes it easy to determine whether particular settings are duplicated across the GPOs or are set to conflicting values. Policy Analyzer also lets you capture a baseline and then compare it to a snapshot taken at a later time to identify changes anywhere across the set. + +More information on the Policy Analyzer tool can be found on the [Microsoft Security Guidance blog](https://blogs.technet.microsoft.com/secguide/2016/01/22/new-tool-policy-analyzer/) or by [downloading the tool](https://www.microsoft.com/download/details.aspx?id=55319). + +## What is the Local Group Policy Object (LGPO) tool? + +LGPO.exe is a command-line utility that is designed to help automate management of Local Group Policy. +Using local policy gives administrators a simple way to verify the effects of Group Policy settings, and is also useful for managing non-domain-joined systems. +LGPO.exe can import and apply settings from Registry Policy (Registry.pol) files, security templates, Advanced Auditing backup files, as well as from formatted “LGPO text” files. +It can export local policy to a GPO backup. +It can export the contents of a Registry Policy file to the “LGPO text” format that can then be edited, and can build a Registry Policy file from an LGPO text file. + +Documentation for the LGPO tool can be found on the [Microsoft Security Guidance blog](https://blogs.technet.microsoft.com/secguide/2016/01/21/lgpo-exe-local-group-policy-object-utility-v1-0/) or by [downloading the tool](https://www.microsoft.com/download/details.aspx?id=55319). \ No newline at end of file diff --git a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-baselines.md b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-baselines.md new file mode 100644 index 0000000000..af866029c2 --- /dev/null +++ b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-baselines.md @@ -0,0 +1,79 @@ +--- +title: Windows security baselines +description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: sagaudre +author: justinha +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 06/25/2018 +--- + +# Windows security baselines + +**Applies to** + +- Windows 10 +- Windows Server 2016 +- Office 2016 + +## Using security baselines in your organization + +Microsoft is dedicated to providing its customers with secure operating systems, such as Windows 10 and Windows Server, and secure apps, such as Microsoft Edge. In addition to the security assurance of its products, Microsoft also enables you to have fine control over your environments by providing various configuration capabilities. + +Even though Windows and Windows Server are designed to be secure out-of-the-box, many organizations still want more granular control over their security configurations. To navigate the large number of controls, organizations need guidance on configuring various security features. Microsoft provides this guidance in the form of security baselines. + +We recommend that you implement an industry-standard configuration that is broadly known and well-tested, such as Microsoft security baselines, as opposed to creating a baseline yourself. This helps increase flexibility and reduce costs. + +Here is a good blog about [Sticking with Well-Known and Proven Solutions](https://blogs.technet.microsoft.com/fdcc/2010/10/06/sticking-with-well-known-and-proven-solutions/). + +## What are security baselines? + +Every organization faces security threats. However, the types of security threats that are of most concern to one organization can be completely different from another organization. For example, an e-commerce company may focus on protecting its Internet-facing web apps, while a hospital may focus on protecting confidential patient information. The one thing that all organizations have in common is a need to keep their apps and devices secure. These devices must be compliant with the security standards (or security baselines) defined by the organization. + +A security baseline is a group of Microsoft-recommended configuration settings that explains their security impact. These settings are based on feedback from Microsoft security engineering teams, product groups, partners, and customers. + +## Why are security baselines needed? + +Security baselines are an essential benefit to customers because they bring together expert knowledge from Microsoft, partners, and customers. + +For example, there are over 3,000 Group Policy settings for Windows 10, which does not include over 1,800 Internet Explorer 11 settings. Of these 4,800 settings, only some are security-related. Although Microsoft provides extensive guidance on different security features, exploring each one can take a long time. You would have to determine the security impact of each setting on your own. Then, you would still need to determine the appropriate value for each setting. + +In modern organizations, the security threat landscape is constantly evolving, and IT pros and policy-makers must keep up with security threats and make required changes to Windows security settings to help mitigate these threats. To enable faster deployments and make managing Windows easier, Microsoft provides customers with security baselines that are available in consumable formats, such as Group Policy Objects backups. + +## How can you use security baselines? + +You can use security baselines to: +- Ensure that user and device configuration settings are compliant with the baseline. +- Set configuration settings. For example, you can use Group Policy, System Center Configuration Manager, or Microsoft Intune to configure a device with the setting values specified in the baseline. + +## Where can I get the security baselines? + +You can download the security baselines from the [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=55319). This download page is for the Security Compliance Toolkit (SCT), which comprises tools that can assist admins in managing baselines in addition to the security baselines. + +The security baselines are included in the [Security Compliance Toolkit (SCT)](security-compliance-toolkit-10.md), which can be downloaded from the Microsoft Download Center. The SCT also includes tools to help admins manage the security baselines. + +[![Security Compliance Toolkit](./../images/security-compliance-toolkit-1.png)](security-compliance-toolkit-10.md) +[![Get Support](./../images/get-support.png)](get-support-for-security-baselines.md) + +## Community + +[![Microsoft Security Guidance Blog](./../images/community.png)](https://blogs.technet.microsoft.com/secguide/) + +## Related Videos + +You may also be interested in this msdn channel 9 video: +- [Defrag Tools](https://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-174-Security-Baseline-Policy-Analyzer-and-LGPO) + +## See Also + +- [System Center Configuration Manager (SCCM)](https://www.microsoft.com/cloud-platform/system-center-configuration-manager) +- [Azure Monitor](https://docs.microsoft.com/azure/azure-monitor/) +- [Microsoft Security Guidance Blog](https://blogs.technet.microsoft.com/secguide/) +- [Microsoft Security Compliance Toolkit Download](https://www.microsoft.com/download/details.aspx?id=55319) +- [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=55319) diff --git a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-compliance.md b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-compliance.md new file mode 100644 index 0000000000..aaf62986eb --- /dev/null +++ b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-compliance.md @@ -0,0 +1,28 @@ +--- +title: Windows security guidance for enterprises +description: This article describes how to use Windows security baselines in your organization +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# Windows security guidance for enterprises + +**Applies to** + +- Windows 10 + +The topics in this section provide security configuration guidelines for enterprises. You can use these guidelines to deploy security configuration settings and to ensure that user and device settings comply with enterprise policies. + +| Capability | Description | +|------------|-------------| +| [Windows security baselines](windows-security-baselines.md) | Microsoft-recommended configuration settings and their security impact. These settings are based on feedback from Microsoft security engineering teams, product groups, partners, and customers. | +| [Windows security configuration framework](windows-security-configuration-framework.md) | Five distinct security configurations for more granular control over productivity devices and privileged access workstations. | diff --git a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md new file mode 100644 index 0000000000..2160e044a3 --- /dev/null +++ b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md @@ -0,0 +1,64 @@ +--- +title: Windows security configuration framework +description: Describes the policies, controls, and organizational behaviors for Windows security configuration framework. +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# Introducing the security configuration framework + +**Applies to** + +- Windows 10 + +Security configuration is complex. With thousands of group policies available in Windows, choosing the “best” setting is difficult. +It’s not always obvious which permutations of policies are required to implement a complete scenario, and there are often unintended consequences of some security lockdowns. + +Because of this, with each release of Windows, Microsoft publishes [Windows security baselines](https://docs.microsoft.com/windows/security/threat-protection/windows-security-baselines), an industry-standard configuration that is broadly known and well-tested. +However, many organizations have discovered that this baseline sets a very high bar. +While appropriate for organizations with very high security needs such as those persistently targeted by Advanced Persistent Threats, some organizations have found that the cost of navigating the potential compatibility impact of this configuration is prohibitively expensive given their risk appetite. +They can’t justify the investment in that very high level of security with an ROI. + +As such, Microsoft is introducing a new taxonomy for security configurations for Windows 10. +This new security configuration framework, which we call the SECCON framework (remember "WarGames"?), organizes devices into one of 5 distinct security configurations. + +![SECCON Framework](./../images/seccon-framework.png) + +- [Level 5 Enterprise Security](level-5-enterprise-security.md) – We recommend this configuration as the minimum security configuration for an enterprise device. Recommendations for this level are generally straightforward and are designed to be deployable within 30 days. +- [Level 4 Enterprise High Security](level-4-enterprise-high-security.md) – We recommend this configuration for devices where users access sensitive or confidential information. Some of the controls may have an impact to app compat, and therefore will often go through an audit-configure-enforce workflow. Recommendations for this level are generally accessible to most organizations and are designed to be deployable within 90 days. +- [Level 3 Enterprise VIP Security](level-3-enterprise-vip-security.md) – We recommend this configuration for devices run by an organization with a larger or more sophisticated security team, or for specific users or groups who are at uniquely high risk (as one example, one organization identified users who handle data whose theft would directly and seriously impact their stock price). An organization likely to be targeted by well-funded and sophisticated adversaries should aspire to this configuration. Recommendations for this level can be complex (for example, removing local admin rights for some organizations can be a long project in and of itself) and can often go beyond 90 days. +- [Level 2 DevOps Workstation](level-2-enterprise-devops-security.md) – We recommend this configuration for developers and testers, who are an attractive target both for supply chain attacks and access to servers and systems containing high value data or where critical business functions could be disrupted. Level 2 guidance is coming soon! +- [Level 1 Administrator Workstation](level-1-enterprise-administrator-security.md) – Administrators (particularly of identity or security systems) present the highest risk to the organization, through data theft, data alteration, or service disruption. Level 1 guidance is coming soon! + + +The security configuration framework divides configuration into Productivity Devices and Privileged Access Workstations. This document will focus on Productivity Devices +(Levels 5, 4, and 3). +Microsoft’s current guidance on [Privileged Access Workstations](http://aka.ms/privsec) are part of the [Securing Privileged Access roadmap](http://aka.ms/privsec). + +Microsoft recommends reviewing and categorizing your devices, and then configuring them using the prescriptive guidance for that level. +Level 5 should be considered the minimum baseline for an enterprise device, and Microsoft recommends increasing the protection based on both threat environment and risk appetite. + +## Security control classification + +The recommendations are grouped into three categories. + +![Security Control Classifications](./../images/security-control-classification.png) + + +## Security control deployment methodologies + +The way Microsoft recommends implementing these controls depends on the +auditability of the control–there are two primary methodologies. + +![Security Control Deployment methodologies](./../images/security-control-deployment-methodologies.png) + + From c65767647c2058f94544e4c00ca0fb1ad1ff2179 Mon Sep 17 00:00:00 2001 From: illfated Date: Tue, 16 Apr 2019 22:28:12 +0200 Subject: [PATCH 327/349] DiagnosticLog CSP: ProvderGUID typo correction - providerguid is misspelled as provderguid (3 times) - ProviderGUID is misspelled as ProvderGUID (3 times) This commit corrects those typos described above. Closes #3277 --- windows/client-management/mdm/diagnosticlog-csp.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/diagnosticlog-csp.md b/windows/client-management/mdm/diagnosticlog-csp.md index 4b9157ad49..17d1ddd6e7 100644 --- a/windows/client-management/mdm/diagnosticlog-csp.md +++ b/windows/client-management/mdm/diagnosticlog-csp.md @@ -338,7 +338,7 @@ Delete a provider ``` -**EtwLog/Collectors/*CollectorName*/Providers/*ProvderGUID*/TraceLevel** +**EtwLog/Collectors/*CollectorName*/Providers/*ProviderGUID*/TraceLevel** Specifies the level of detail included in the trace log. The data type is an integer. @@ -407,7 +407,7 @@ Set provider **TraceLevel** ``` -**EtwLog/Collectors/*CollectorName*/Providers/*ProvderGUID*/Keywords** +**EtwLog/Collectors/*CollectorName*/Providers/*ProviderGUID*/Keywords** Specifies the provider keywords to be used as MatchAnyKeyword for this provider. the data type is a string. @@ -461,7 +461,7 @@ Set provider **Keywords** ``` -**EtwLog/Collectors/*CollectorName*/Providers/*ProvderGUID*/State** +**EtwLog/Collectors/*CollectorName*/Providers/*ProviderGUID*/State** Specifies if this provider is enabled in the trace session. The data type is a boolean. From 6976427135dfccfa0a2f66f6fa3982a06c793ca4 Mon Sep 17 00:00:00 2001 From: DaniHalfin Date: Tue, 16 Apr 2019 20:30:26 +0000 Subject: [PATCH 328/349] Initialize Docs repository: https://github.com/MicrosoftDocs/windows-docs-pr of branch master --- .openpublishing.publish.config.json | 16 +++++++ windows/release-information/TOC.yml | 2 + .../release-information/breadcrumb/toc.yml | 3 ++ windows/release-information/docfx.json | 47 +++++++++++++++++++ windows/release-information/index.md | 1 + 5 files changed, 69 insertions(+) create mode 100644 windows/release-information/TOC.yml create mode 100644 windows/release-information/breadcrumb/toc.yml create mode 100644 windows/release-information/docfx.json create mode 100644 windows/release-information/index.md diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json index 33e053e7cd..2a308af532 100644 --- a/.openpublishing.publish.config.json +++ b/.openpublishing.publish.config.json @@ -97,6 +97,22 @@ "build_entry_point": "docs", "template_folder": "_themes" }, + { + "docset_name": "release-information", + "build_source_folder": "windows/release-information", + "build_output_subfolder": "release-information", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": true, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, { "docset_name": "smb", "build_source_folder": "smb", diff --git a/windows/release-information/TOC.yml b/windows/release-information/TOC.yml new file mode 100644 index 0000000000..b5ef71ac32 --- /dev/null +++ b/windows/release-information/TOC.yml @@ -0,0 +1,2 @@ +- name: Index + href: index.md \ No newline at end of file diff --git a/windows/release-information/breadcrumb/toc.yml b/windows/release-information/breadcrumb/toc.yml new file mode 100644 index 0000000000..61d8fca61e --- /dev/null +++ b/windows/release-information/breadcrumb/toc.yml @@ -0,0 +1,3 @@ +- name: Docs + tocHref: / + topicHref: / \ No newline at end of file diff --git a/windows/release-information/docfx.json b/windows/release-information/docfx.json new file mode 100644 index 0000000000..6a0fb3e804 --- /dev/null +++ b/windows/release-information/docfx.json @@ -0,0 +1,47 @@ +{ + "build": { + "content": [ + { + "files": [ + "**/*.md", + "**/*.yml" + ], + "exclude": [ + "**/obj/**", + "**/includes/**", + "_themes/**", + "_themes.pdf/**", + "README.md", + "LICENSE", + "LICENSE-CODE", + "ThirdPartyNotices" + ] + } + ], + "resource": [ + { + "files": [ + "**/*.png", + "**/*.jpg" + ], + "exclude": [ + "**/obj/**", + "**/includes/**", + "_themes/**", + "_themes.pdf/**" + ] + } + ], + "overwrite": [], + "externalReference": [], + "globalMetadata": { + "breadcrumb_path": "/release-information/breadcrumb/toc.json", + "extendBreadcrumb": true, + "feedback_system": "None" + }, + "fileMetadata": {}, + "template": [], + "dest": "release-information", + "markdownEngineName": "markdig" + } +} \ No newline at end of file diff --git a/windows/release-information/index.md b/windows/release-information/index.md new file mode 100644 index 0000000000..cc36f41dd6 --- /dev/null +++ b/windows/release-information/index.md @@ -0,0 +1 @@ +# Welcome to release-information! \ No newline at end of file From 67959a5b6b51ea5903ddeb7158395c4529d17667 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 16 Apr 2019 13:58:03 -0700 Subject: [PATCH 329/349] added images --- .../images/seccon-framework.png | Bin 0 -> 64034 bytes .../images/security-control-classification.png | Bin 0 -> 12204 bytes ...ecurity-control-deployment-methodologies.png | Bin 0 -> 21811 bytes 3 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/images/seccon-framework.png create mode 100644 windows/security/threat-protection/images/security-control-classification.png create mode 100644 windows/security/threat-protection/images/security-control-deployment-methodologies.png diff --git a/windows/security/threat-protection/images/seccon-framework.png b/windows/security/threat-protection/images/seccon-framework.png new file mode 100644 index 0000000000000000000000000000000000000000..06f66acf99dad691d7362ec4b1c438327d65f419 GIT binary patch literal 64034 zcmeFZbyQqY^B@Qz34!45F2UUzOK^90Xsm&zahD`G!QBb&?jC}>y9IZ5-_B?Io84KP z|7Oo{4)p8y>fKwnZdKh01q8`usC4Fe+}>}F>Sv^H}h zGcmIO*$PsewscUCflLJ{G`ZwiZ(<%*+w!0J3ueL2SwX zj%aKGadr}k>+9Sa*X>)$2)1JD%sA2>T_2b+IPZVF^E zvoQmk**ZBwVcGrzYi9{@f;d`2{x639&*T4Q0w`(a<^MCse-{@p_&-xPI*GeLm+>!x z{CA-p)!gmOSX9g$A+|J|?=4q#*Gnn7S=3o{lwTMG)Z|49w2S&=wxgQG?Nw+q=3?g z83Zx~u$k}zO}LC%nT$<2xS)SHd6{^*ps$$%je*=iZc}zsW8lBv7lQzu|8l{<-#7jL z_`ae82r7lfHvhxp{FTkW>;sSjIYKwq{a@0fYG(hhD;p5mKR5ZA6NO0 zXa7aS{|ye+8-FkVqp+Y~{-g5DY@vG20jkgzQ9IOOV6IA~#lEPyr5&xfdSRRNp)Zkg3zYHpczUa4!Ht-GzhL7~UNf_*0zwMzc>!+zTex8tg? z138tR5+}LcrI+yi(cthh$L{L#@UY{cW85qOxj&l72Xg-pEE1lYpP?6jzv*Q91ODDb z6A5Oe%8K|002&37bRp%xfJHG5{ssCw>VJXegb&W>=q7Bl%CAV!q7kQpwFg<_RF3u0 z(F1E|>&xU-b-s%oP7y5C%hz197$%s}S9|uXh33+UiIo)E{#L0`@B7RIttRl&h3&8+5Hh^2HBTd@?Jt>ba@8l-u>QXS5U4 zwY5`|ld(xj*P5w!cXpcfBZ5C@9^x?gs|+4q&rDC#_V!9wQtG5r4zbTFtbh~3f}oOmwwxixm09lsj)0e^}*`FK-9>v z(9p<8S6&@qR#2=`A8S~*f8)k`=T`yv$zN1DiSJbf?Sfz9_nH`5b${8MB8IR6Nk}H1 z{k!LFy-%%AQ-WEyE_-a2-7=Sm=MJbPd#OxkeWOY{tgmAN3Y~A}TX&X8A_ex#KY>r1 zgIR0uPFgS{`SO`Ih!&m7BUJuG!7EQJa@t~wuK)h#FvufU%Zxb{QdH+vA(mPRZkUxw zb!xQ)Z%!v6mRx_tB~A^OCCoo|X>b)6bDIpDaG~rqa|`@mtpC4L08`=(H*8BA1NrZ` z`bsa$`|k+kZ(&gEzFD1GeIUP)5=mbhnY;tn+OFv|68EBe$4a!hM5fwyX8!N+>lR6|p*?T0{qv(FEp1 zn9Nt+luPnPDec})co-=Rv%$s2W~U$PMqlC0HE1H=uem=H=j%Cj1xDD5kt6_|ozlsdr_8`9S7&&SDa0HEo&1jX>Cdk$HMUA66zhftgQKNw3yrRhOBl|f}hi~TSFIw ztGx6*;qjQuUs?KA`v>KZ^)V-!1CfDGZYIE`CW1B(HsE_j;qaJ>xl`(_(NoOvTe*Xq z?RdXFrx5TOOHP?{`dIPB+r>JZY<18I2jKFDy=$w`hDU=#E#!x5`gUF2G5Gd{dZIYP zE9QLj{^il7JWz#-1_O6)bOsF`2L7W4+qt=|FRWTiFJ8+0Ck&u{(y=D|1P+OJTt#~} zWX&aljqzhg=E1>Dsc7S0S`=UFd|iuiv7LBe1Z&<|mpolxTw{RA=@APsE%wFT^`4?8I3(uW#;x>NTwWOY&O<-C+be9WHqywS2P zM#WOGnx<(uk2h&5o_`ZQ5aA*QQwKX%ebB0+_%0A>6m4s}%7NNPSZ1OKQ#9y(LxpzN z!!;7Vh>J^&QgeO6LXEVX>6K;J@%hDKU8%O;Y!b~%^F+t1kPl`yC0k*k$vq8yF)RiU ze>wf`Z6zH&@LnQjbARn!qP6E<_SvI$?e~=TfwwetB%GfRe`vRdc%aHeC-jeJG_LT! z6Upv!0PL@2Dx@nRF6CE71$=~!Gue_-QPr*wW718D&iaoiHaGkM(O9 z($~*lnRK<as`!x$ifaC42a?2^!iuz$d~Q&k*PB2V3R+F{FE7F~iAnK&0FfH~bW`k?x9# zLk5A@c4Mv(F0;qc%<@RmNpwhC#i{-8eQo$ABzPn1$B^Z*Q{CGyKB6I4$4+*c-n~;yj#O16h*`BFj=BtT~#JG;8%zSW_3jz8#rY*+$3}<5wU^dU$Yu9y(0) zZfbs7AVnM{$#Ah*>y|2*;5{yw0Qsp3!akn!-G{%nKK(2WQaq_LavUiU#=d{!;?n9l z_;bsZdCzw%Ru%_R6o17+90xWN%U@pEEp-GC3)R_mMq*nNCHY}C6KArq_oBNG{0`Do z2R|6TlrDK@vH_}gYr#t_KV6KJ^b%pK((`c`lho^proT2aqawGuNqNn=)_ZqUdpO3e z6C^IbrkunoA4J4gK()-$wS4FeC-A*RrhI|IvOWC%J{Hc!NsFEvxoUyK-Fli2AX0dg zHq-8Mgo>K0?I7JXICP`9#Eutc)hE?)%2*m2`wK_SQ2 zzcOf;@h50I&6_jlL3wk1DbwvvpE0#V|93xZnjI^|cc?o2YJcIX_!LJ~V}wg}Zw3Jg zhiP~6vB>&QG2PX0R%>99W8=DX_DY&Jqiyo)Y_z@?o1$RPM$fV%>h-m$DXSSGq+?`4 z^0Et6;2NtSW6-|O{;*6Q(?^dvUoNXSlr|IT<+Ay(@ls)DczwYF;qBgHe5}F-6we*J z*-}s+4{ie0G)Pv*RUyLbDJ}!5t{e>w>)e3qn_j8=T?|6arhkt6T<(okuP@5DIA+x| z_&A;26o!wG)x%c+eCOzt{5{NT8n+9B4n~$P!(FtuT5*Ps7atkwv1hWdLfzrb+8hkl zmLm5Z7Jo40ek&54M9)7QJ`x>0cDk!^H`H&t19fx|lmRJJNr>Fesna8cS}vns8!oOP zG6^qPLu{0o9yAj9YHlS;gWJJGL~~q==;vkw8}jO@n=9vY&cen{CKdb|9nNcut_W_G zaOoQ@ZLCL&j*cj)%GFz&Wt08WU*hBKx8rm3q1!3XHV{Wghlz>T?5^*_sAQ&nXqx$vbcdr#y2+R!@pSZcp~^uw^~l2(mFW!J%CaB z_hzKy5R;yR^kZw?88uIGz3IL%aZEhc@l&5g(+?i?tY0t%_cLSE)-nh1<`M;B{H)W{ z+j+3596@>b;fjbUvGBB#E#YIDiH~rLoQ*GMM_p+0h>+4<0oIJ3I^9(t$lsQ__nnq?+nF?55y}WLCP6*{jchE4q6rTWcN5C+iPpCN zbPLV<*p%qX&5{pz&&^@K=%xRt@6AO@N)mdS$_`N6_KE0#?fOP(BD)<}A(KGG2lSAz zFyS?&x9z){khEDH_P*sh^xU6|WCJGgL|!<2m5vP#HCg0*TDpw#y(OlmPIEJ1ty;3K zSU*3znv%CivD?c+BItHqn;5SgTMgfXAu84C3(HJ$_@J5gfoA>>C3EUIC0&V056u}{ zEA4X&n=f|L(yzDhgxpnLlsS)+f*<9~nf~n7>3P!kg~P#dx()1)tcz;ZB{TILKXZ%o zH=h9Xm~ESj=tg0Mo}%Pa@c^7|$*BPBAitVX#1pQOeDaRZYFKjyvS22jm1(S97)a|E z@poN;T!hGsI(}CNwbY{FhXfU5g0s#K{bBjW<~saH*to_LO-M*wK(P3iI*3U}u2f?2 zwbh?mayn!m&&5!7EZZsGM%~u6S^e1Mg2mronbvc2pKc%a-U*rx?-l_=SK38`2ZIS~#*4i1+ zd$CF`<}1UQ@x89#>g(F#dj~@GynF_WI~5gZavshmcT4;8AS|r+wg|d1jc2@*F`qen zv9Y~eHI_=xvic>8t-I`K_&CbE+$LYviZQEb0D~j4Oee#Kk2@d|XyHs$>uq<6Tl@KQr z;_?PHV?IaxJ~`y#2J|U)}rbPCf)sM^P~vP;(q4a=Hvi}hZz#oY03 zB@#3@Qo(Y?*E2{^`%bCX)r^6@E&dZnFZ#Q*BtGcoDD&fP)WC6l3$*fWTb|)BEz_+6 zpEQ?jAJnn2nVO-a!=hpL_#-^+3YQv;%vW_zSWA-1-=4tK%Nvjgk4kUY zCtc|;$oVp-!CfsV`UBadyaam{Mw+WuzO)Qt{(!1t-S7u>U0D#Q(v_bj^8ONEIOB_- zR&8*(K0Y9BObB>w1yc|khn1#a;8|uy&c$W3@SQq*u1xNP11t^Y_IJy-BMFlL-yh4c zGRi84kk(M2>ej2;&LRtB+0?rBgRO7U6SkKjrwtxY+=#k|Ru$VW1g?r>mrG2f072N6 zQCeSY;y6Y4r~10~@;}M)hJg60OYy0qVKXlG`q@v8-ummy7j?iGk8qj2rfTy;W4dSG zQmtF@iLp-svm`?W#u5Y7pa5aM_$J5Dj}7Zds`VIU)TiQoaY?}{Pn)Dp2h&GI=;J9@ zSATp-eFdOrMJ*_dc&Jo6F7B*A7#$zsC)U6K)H*opYFuF&a^(#UwR&tI2gDS9&{LoZ z+c*O1)Q3I7g&m`EYlZEJzA_K%ch;NKj>I6#5sgG;7=4rW!V2s(>*H|wJQPm_hx6Pl z^{6PB$5mISh4cDEdwtDxtAnGi-uapYh?kD#y_CaY+SrO!4t;&$al@};w6e0}ZQRXB zpvHT@z3nCdepLYAAUH3^lwHyb0Gqpgs`9;ds@Z?;M^{xb&`f@NlV@I9rl+~cngucO zNIR^}D(b0ghs>#SlN{BQ%5P`H;q5-k%Ff!Zg2>Z*&7@~;M8tw}N=hHt4ds(7b{6Cf zIo)K~>Mh<)5`c|)?Zti$gORD%;+WH;gq&z0)H%{}F#$g0KlBD)s$gR)Z+S*8@ zBw;P`vESgd+tUy*_a@CU)pVRpQ%X%$HU^}(kAR);_;ubOv;O+%^I@FMuPgBE$%1i7 zN}4*JE9^*Aj`1x_vjzIP>1WN+^jh!VV-X@)ZZ7m1PM^NPG&NoAb<$>5x}9f4JZ*gB zhL}%Mk$42tsm@pD(fz3H>)IJ{I_OS?#AL4B#N)&y{ET;dQ-8B?*YL{u!sFG@J_*@R zjW~)+M-M1sRRfmBM5E8tINGpYM`c(3zPuR|Ux}d@B~9jTc3d95R*y&S%%|$;X*gt{ zB<@{{JjTF0l>oDJtEE?Gw`_MyU8>C2)E!r~*4|Z>y;1Cmj6Zze=X?)r*o>n@G&AB= z3S196$rxu41i*oF)P7xfYu1~%kL+wt2Bk-P+x@EdDb|Wa`H3~CrJveSY<^e;5>*%y z!V6;1`XDAwbuD*9Od37!a24}`zvZTZ6L4pgopXQcOZUmLzAZlxyp;0bo}Jxzr7~N- zeK~f2#6hD-!(6`qrwg@jceDNR%p(z)bS2o~gTNWBEnYWUF zp7vn`GRAM)Ass!O_m69-)H<-$HTx5kcWXMasY9Np6Adi8nPY!Cy)NZdQ4$_J+8-n0 zuwHH&{_y@GZgz_1&Z;MC1C)KXjyOn;LffA|cg>2scz>jQ$ne_m({Aujob+?di@jXp zm}b2CG`x+xM(Lsdmw`iB!k5cyb3@>51gNzk_h=^vV93oqrFL+g85*Y&o(FQf2?7_O z$TS(5didnI-UJpCRG57N&`QXWL~*iIJWN0u2I;en<#J+I>Q7uCJGnV`r;UN{Wi|{+u$gpvRwE-{{I43%I?j=5-e` zP7Q0>y8b+#PBhc)*MKq6JA={X()#1*S}zc_wdFG8WDrr{33=E(xt|~GU+(1__JNVq z%n`3IiGlA&1u&;<=wF99+&7UkJVL{ePz2-r-+pyIOyc?>iUJx`rs}S+_~h{M-T?)L zk~cxlS}vAk;p(I_0JCw2?Zhpl*rVALZ9ls)lvER~l6TkAgWF~0ZhtNP%SsY=;^O;q zf#{QkrAMo$Fv9MI&HG)3gOm#fJ%+$TOC&(3xj zTbbgaYrOb5%z!$`SahwcW6|AwK`)TW$YL$?>8DnGnTtNC>*w%ZX2Yy^Q@+=3N5zxO zX<4RiD^O%kx6ifRSwNi2M>QH_Q_n!@_G$ThZ-HT6uuF2Z!hZfohCmhcKn4bi{k937 z(^mbQ%)xY@8O2wg5~m*DS?{v~TTD{YEBMG`mfP9xmTXGoIsT>gH8ss(c9=Nj!x96n zI<`qC@sx7>yrB!L`ai)iN`uvKr`ux#A#y^(yTQ0Y`l^^`(|3nc6d0`ur^&4>p@Q4t zsvgUMQ%ZrN$yvp8C~7{!1}v`2UrbGFlnNk*LJz^C=}?(EcXQjPHgNkknr`2u)sc}# z6agsK7KlwAC{%`;UXnze^Hn1WgCP++FON<4<|oZRlJEe|Z{{n%33>CrKK)_SQPrdk zDd?#%0eQiiGw(cZH>P(QBQMg>Mfe&Fim&jl8`Z~O9C41er;dWCx~t3HBKr!2bl)9M z+1O-n;7>)mwo@}jpHl{h`}H;n5@01}iivYUU0Pbly)*?mtfqUa?u*Ee!C@b8HqMoI zL44uzL}wHfN})ldwoTs89`8}}YvVdz(_2n9SbW!6e6t$y$e6;RhUN2hzF(dBxd}HU zUy;;&WFr-la;(!3p$plD_->xGRDoq=>;Td-CaVG(d!=2n}|2N^vYrQI5XB+be)kGbJ@ z8^7`fz3VE#>B&c7Tycv+XK#L4z?&zQb+4CS%n4N+9~`7S0jC17yHpq0mTT@zJ~1& zIp6Q&!-uX5f2Cc-qvr$V!R<&ZA82zV&Vz)NH0Lht%QRU`OuoOKZ^e3DDNhmb(q;}z z)3SNF4P}=%1ztHR@RE!9-JY#O^~Y&j-_w1k^eV32uQ+|ED(CKU zKbLl*!SQmR2ez8yZVa0U;9udBU5um4;loQyG)xZ1M$}0T?hDU{(5hfi$$oKzo;>xo zJ)F7*k=!;P3_74z`fm|v5Nx&0PhP00NiMbbc8!OB^>F(eJRU!HW7_DbO=`oM`4El* zAVeXZ6^Zf3Ov(KnFo7AFL{+1Ahy^~jK4eXDzaBsM6kO=Jec7bxwb^|?1W!8Oij#n1 zU!)oue2f6c7{1oK>XW3xi{x_r?OaETJO3NM+LHUP-j1m}eY&*w5yt_R@_qrZ=<6iy zR?GR#w`8w}%BQbKONhoRV?V)fkoWXck+JhJIo@#U03R!#mpTX$ySkkwvf(9k-wMFw z6Lu|J5SD;#NL|RZf>l1j=QGT+ywx&bB#j8p--0(D>=u|@xlU%TT6tVqSan7>?%$Li z9ciN#eEyxAt6^KA-);r;7{I1`(8XS@*&#+lx5}=1k9zmBO27Zz=y4F}?3-`FTe!Ct zM`*CzZYif$rZz0O=R&p+7BPsgJ15@wIC(Xe8vi3$+ehP;KO>wmF8M0^`q^ttP`|vD zosO@G2@&I+*Db9|%w@yYu7f3hAudR>lu2q;D>Xcbc8d3xNS> zkL1aV|4z34ul(u%{1n)-JVpFR61-Lr4rzSpwdga{ox~v*n~zp1U|MJfv;54r8k!W> zn&Q@(+91sRLKm04jY9rC^vC(V(ntqczO;k{zq(YgAZsTq3Tx*tT@huzott&WdK%`G zJ5xImm^Vh>R?4w))(?Jv92llTGdeeEe`#*Bo~n{6oZ{wGP|fRYlFupoPON*FZIww4 zR^H$lcd4ah@4>d<>L_7|>$}i=ci^S*`8)AMVQCn(tX4w=lkR+N$oDslCEIL)UvvmS zAS9CEpI?xOLzh-aoUyZ`VQpCpKW+7?59{{ydOdN^)J=09VHH|0GjC)M$QVnx240zJ zDTY~|but?|ko)B9S)McnO)1hcqjY5MW+p0Gkj5$%fGyKw@$UNv1TiR<4lr-tmev^R zs~gZp=9;j8_ysBUi)}F@rSKbN8*+3s(r@p273b7;v$i(Iv((jCt#Q`8`!2S(c2zYb z%%}}cSz75S{lbvgIiSw7szR3aoVT(%dCI5Y?5s3Jb5ohFb6JGz3_~}4bN1u` zr;$H<>uD~$pyWS^UnQSx{oozv^yM8DImg>E3IASHVl(xbHen_ z`nsjKQVf$*?bRyjwu%!Wx(WQ6!%?Xz?9;HAtV3dLWAciQ(J=f{-M)Nz@&~({r^VkQ zI4tI?0z!9Rp`KdvVgIOYO*3Lu%?BqqQn}r-3hm02*6cPn&=>r7W{f&RM|rLMu?RVh z8&nvv>xsWT$z2Wy8JezCBqD4UO|<9P#T*QwR4eP28Q*## z-z0*bmNralr6|SKF^L8nQ;OP+QGT2Te)_ljlzhl(vN9JJ#sT@u#1&<@K-W#JU z`gW(~ZQ;D!#K_PmHzj4xvAMo$$mpBzG#YwKQk96pA68Pnan>cR2sthO0QHK4XV1}5 zL;?EUFEoD$quKXz!zPaPQLBV?Y61%~&5su~7{+%uQz6iBuX;)2dY}e_MzA@N(fNbL z@+-{{cfCTiy0g~>Tq@%IP%<=r&)k4yj@hALPNQi!0zF@iK6`44zlFw(G&U&YMF%(u zstl`uEB1YP$cN}m3)NyDxVWZg>wT&YXU{8q(LdM?F_jrM?(HqBC0yP;3h;z8^_1z| zOol&gy0;23rv>X~6IWTt*xzrbxsp&y^!ukhhx!A+qOlmqQF`MhuNY@2^7w8#vtMK! zw1bt9`~k&a$zgD)>6lw0%&0%gTh)F7HpzxzeW}MY)Unyj;Q<}$y*mg@ zpm&R5Z0FmHn5Ywr$1^VV!>_SHwryqSb$*wPMaT9wcA{B6^N^z$DbV5?4(}IC6`-aA z>RiEMmQd`F%Q!ZdcbKyjY_+=#3%0rMj@H(SZ5NtL4cO&>7>-Vrw~xJX`gNe0VJ~M_S#XnG|>TtjLA>aA+XC3w0^GI@@oudHZ{PxE@Lb z!RSB`Ybj|PhqTmNxTBpFc0{BIqQP8yM*Tj~)3d3Raf^khG2rP0lV2ETh|60TK0djW zZhQ+?yPsEEN4wC}3PTn8PPyn84eXhYj@;=BowCc?{kT^6jkzi~eIUR7_Jh=gPj(1HWqpWgI1T@ya!h!4N-da?@(_Ge9y(uf|IACI z=ZK7}-#wn?nbJ_hAK1A!A@Iy;k=8kxM~-sl;eIZT;4G#a60&uH+33Xn-0~gnO^1mw z5wedG(!q%LoY6w-Epbc!a>eD@8Y_K6?JTr(>X&`ZE2C;r+@&o7J`{X-O-)?Xe#Q@Mv8)bokYA(&v9(%ZetwoKAc5Vh3bUs-{SdR%NWLMZ%LYjaitG3oa8;b?ZV^6}LO#7pn7) z52<{xq1x-~`^0^AQLlRSjIRl{#8oWXtI&xnjy%$aEN26Bx5|dgSga~!LY`xXW>WI> zUG;;NKZpA~RdFd&0oa#%N&h583)l;c+f0;_JmRnK(6t#=U!idhm0NJX z+zE_9Mcmn*ZMgC96gkS(<$1V8O($mHam}2Q@TWsAAQ=_)&GwDd$0&W~=C(%&Bm68P z7o7faPRW2WQo#fl(%Kn93yqz2N{4nB=jT{*Tnt&l=@j(vik6e=oHiVJ8xT)?0f7n1 zH#vIcCV;pau=j)t4>zf!i?S=rq4{*N`l4iCc68+exC)4)#A;^ zPy0vF=GJG`Dbk`Sv2+Z3o>n;($qg-xK~IDCoXO|pv#9S{VVgdOdjCc-m9)@Xbru=h z3rpv*E-S!!;jOSVe$8D$635NHrlJm5C5h5&%dXp-Jse)>q~VUAFC6C|Dyf3QD@Gn= zxUo>MuzMI;Zt}WB&h#A(M8?9YcdhGYfu5>Nds?o+*P`EkTV>Ygo$A)Il_~G!hDEEg z_tnmGG?jE4OxV?(A@h+-w{Hnftl!;C01G!rA&=!o7OGTXI>mB-VZIx${&3Mea!#mOFf(3Rf2 zjZ%kdiW)e4WsvWlht1l28jfc>z5dhAPO=WZB|=kAyOIt81%HVO65cpT9s0)Hl-f+d zDkg3K$Mkn)ieYt)dROFb2-RiG(pMV3!KOpK^w5W|GtAfM#6c4H5eWN~qy0jSJ+~0? zkpv4KZ}t5Wi2;3`Bg*^xEZl6oRd%|cXpfiy4OR_V3N~1QqBI8|?0-R3AhIO}1#wF` znGVxoP-wlmJAAM6y=)}rMhdEa2?A$plk?5;1~t2r{E_UM4SrY9Zoht(W~FSTm#{l>XSH z2pR|>ze#Qtm@P%9@;=g%mLYDF%k@2-2~6dQ zCtPYJigHxo4ae_;ap>4)=dcBuKpx2jMAY)pCTs2+2m)CoI4m7{8W^~bJbvK3>A-`T z{kix%OKnZbV7QQFyG60wDOMMd(3-|^OyfWQTF!zAngRdWOMMdu zqEB3wwTYolwSS@kBAW*jf9jMXBoYzf{IDshBjzav&GW&9hFiwN`Clm3jz+kirdT)k z0tdF0YY~>#=m3YOZ3>6j=`$u{(0E0pP14Rp0+K%Fqa27%(?A*o3f7Mll93x0s)$1C z$oS%n@MCrzIiB8I&R1oFdK!J>GX6?0Fqc8(n7OO$As*s8L{qS2m1ZsW zVOU$^;Y2LEMD2VHH2pJyJcURY%9blDc|^Ir4b|kAyFv5Lz4%1FPk(3d?CE(TT~Ij8Z`z$izgCd=8a(hHhulKKYxHKEF&=abbCJ=c3MbS=p7z zC!~NP(=7ILSx&sosX&9ZXE)bNw_b~T;d$=UlJD+#7Z%Jn(UHPC&{~;-Op&c5p$jPz zZ>)w=HkKO;#HB7m!x}oZLJl9QbPgzX!Ej*$aCHFUb#@VnPqZjfeD#Vdd&6%--)CZ1 zp1(hOqCXwGuM>t8rKf7PfpnQr;DW+9uv(1ogJ`asDqi1(j3(rKZ?DjL9uHI$(2*6+ znumvGVQDjrRt4(8AFFQrDc$eQ*x7H~>-^^#CR&B#@jspi9W*4fhK5lMNRxHLN{FP- z=1WJoq-2?-<2B%Ku09`xPju4U`|K-kHuuil9}y@T*?(D4t!Wt1(tiIZ?yDrH#iL_3 zhwY)GL`Bjtj_2$Qwm{{}W_BP3elyKt@SLoV(B&?NEAyJSq&9v)fL2z5bo-UcNu!@a z`i(nwz&wLOz0F3z*Z|AND#s1W2)yrI2-P@^Xz*AF&N`_yY?H<>?JifAiTKCtQzmKp zv6Q{e5xVMnuLs|MYx;hQA_r%O)C2XZaGgnn`P#Oz(g8!4JF^QMh&w~$T<59oZBU!- z-MgfbB@4OOo*zYJJ*R!UIr)K$Is`5?^Cmh3x2r?aw9zrusKt!kr$%3Qq8pN%c*S-; z|H%$`^&E9Xew4Ozdv?1Z;}Vq zOQl`inqfJA5IGXKv_!%82T3JHpuv;;UHdGEO+nInEJ7;WC4-Z!$yH`cxTD|G;tP5C z3aURQ@waW#xcS3x-*BmUb99fiRa>sxuSwNC7|ixk?$TQgT36dVrJXn>Nk)qS}^An$SLJFh{#c-CWXfzD2M~6Y@ShPIj4UO@AWC{ z-_M2UpATR+z}3KMPwczi2-avi4bcJeRu5>o6*4uOC50xNqT{o|X; zZY3)-V}0?qwMnG@V3}YC`tg(#x|47C6Ck#7Lsc(mK5{3AA9wD-FfBGx^}z)|0+!^@ zVLtG>+PaEnx|!btiGMU$ymJ2xMd!vy+v^HF(>riT+)DtH#%|f3$lJ+NQ#N=-8LiWr z)P7fX%l2cs*u&|r{UkXra&jJJ_cs|R%kQwBJem(t)?5(2Zl5pB-ds&0ZX;+Vga>{I zT8z#cF(Zgp=mHY}n|nxRIM#=aLFk^t%;|Xhjkk9vdCuPy6R@VleuoZX38l)Qut(0{*|xOc;5MFA~=7y_-vgU}e;r6~_VKK6If4GIi z-NQ_d>h7<=a|%b=v3BZZ~b4xI7f$y5gob zYPhOP`!UP~tA2*R{L&X*KjTEfvZ`QM^K!4Z$PoAG(=%UootPwtuaJ*#u)ec1qhW+u zbn4KK453^6EFL|OC(XWiR*H3xjBe#CNRKdj9e0(WSew!KyaCK`YhnxSMT2DC~ z{E?s3-nf90xY&%fCKqrzHe~SWR$VHMaxrm8Tm>VY-|=!}ICHEAH%O?oJYvaq(+~9q zyzL)sB1(e$ocg%>vyj3m&GGE>YE!IgWDKula3zJ}z#~sUA4C|y;Oi*97yqx4s7a376~Rf%cajA>8K`#r9qtc+4}?}j*nR@fJGV@! z^lUzLLS%mku&dDsj$Dz3-@$Gt3Z+Pzaw5FudH~H zkn4p1*kCXBNLn(a>R`O`b`XOIH3tnTk_)}B{mU@q2+k--LbATi^xYH|h|N?@>9(Lb zRDM7dLG;~L6vM-Dj05srv)e%Ukb%{>#$JIG`3>sCguso~o;!M8UhDl1)Qs8V&DL&> zaeNsVnkqt`Q221x7wdM)j6$m5kEDZ1;U!(@Xf&?lTUkrB#jJ{7g`TgM-xXSqsdw&r zLbJX26k3P-`sC&;N|%uMxeM}GRMVP(QU%kPcig;!ZS9V5jX{3%=Z_!X-cL00rdh8W zZBI2Rf5CUmLQmgoPR)15+(gTek&@^6eFAM#ki701~R=>ns;H#O@5%4i$jb!%&IRFXDMO5d}yQWGQb` zm^-PXI)P?o8H^@!L~3O%3R%;KM51|;e<#IpSd!fel2P@z$b#xQK>)D-Cl@(@>Mz$K zdQeIF+u+RX#UQev?9U)DJQ}}&NnD@jx~xO%kT5d~o^g(&;HVL_qWm4=2fi1$M3Ck2 z|6r;h6bJt*bxRbtHGrF)6Qi{I>t`Im*l4hPiEB&K9n5q;_d8hSI^lMPY3)g^iFs?1 zrz3N${-M{@aM8@G1L_jCXw2Do`&`bISYPN%)MyPUNn|ycIEo_l`r!J7Jg?=;XEpTo zolaQ=+vR-bxb|F4`_?wpb8(in>`uPIpJkesi$m*hP+1m_|^<;RHFzC zu;8-t5kuXUvN8$X`Ing7_5#!J6=%h!4i|-m;>nhfte-Y``9{ zKMndD*}$X~W?sKnJU?X*Zjl9OW)A;+`DEy+CikIg4cfE<^V8_F#56RA?6QJgc||)k zw6)IhG_SJ+<|)@(N~jlQ7AfwWtj_~4=8H-@eLii)^tf6i4>FQ6Cpu5X*CNS(?ay{5 zcQIi77TX7ua#0}%2sDim!EiopCXGfY>GL4NJ}x;=mQec7`+A>!3GNh^v47YoG+#fedO?RG?C ze-d5f30hW&j0{$}7>r-`^$iXI$k<;^P|-FFNQ(yn*1tHJErgbFu`5e{IQP7JmdhAcRYbR(dDqNs zYkFaNAi}g?$knj6nzD;Q9P#A~oprtc{FGpaFc7}IC z6>wk#xs8W9Ko=5!F1~TgHm}k9@Py_Wvmqr9^SSOk5^du%*+9N-^7|>Jkmv}08mA^_ zuY$;g`1Yp4t*Q7tt#I7F6&9WfE&|Rz6shLp`SKk8o<^dq%y*m*LtNOd3PUsOvXUPr zJZw^*yiVE@`$#t9RPTli@mP&cW!xUYB<}v1zP*Pl$84wqpB0AktOMp{Ljj6=f!)~- zJLTQRPpetjoG%U4JM4C3~&NJK!S~$s9|Qri}j-=M5|C@ot%OL3^!=#z$z%INrRh#o ztQZLmOLio1Mf@3>E^Dg|3BKOw4zFstUt!9U+$%tB7_q}2VOx{3(3Dqf45THTrTwQa z57f(m(jTtrzLq}G{o3=;98zdiM&5eLOviV1-Xkekb@eDeQy=ybr;OfIiFvArKi|6C zc!c2P95p*fx8PS85{Xw-IAPN!ieC9FooeuN&~j7{gq%)$(GSVUT0K9dJ^yKFW}C95 zJDrX5`VMxWO_kDDlnvV1W?oj|;r?a4mpzh+Ji^kun0vf3mwrqwf6SKP-3B|6Y%$Nw zdjhJheM=<2J2z-GlCJIgVa5F)xO|1YYKMxUfnjJr8gt{nwMu{s5 z`fTD+TWgBtZn1umJd<0*kI*i|giUWaXbPE^W--hkP$p;1c*j=Z(Yce7D!ec*$mbw8 z*LX4zEn1z8nL`xhtjLk*Nu^KCU|=y|n7kH9S9lkkQR)*tNpUzQ&KJt6M5J zxLGcT4S!z-MrvYr5)1qyheVs+9YVWtTVsjNpb?eW*Xn-vT&nd2blJ1t;zG?&n76kO z+l2yL=52QE<77huwP1k93FY2)7qMP8#WMSFz0Q=ZoY^L7PZy|g1ah08` ziyUzT#++DGkxo4%VxIl*7J;_NH3)iu9!Sak=U=%3nK6Dr6ZX7z15#H1EW{AQi&2vN zXCpg$Ak{SbKYQN)+N1yMb4N3l5+VNoDX9G)XrdPuy?1MgdQnT)w`YriaWO0blE{0; zyI81KR;SV^&$_gSl$|r#D328IajJ~y0vWSxsN2cJ3Orxm(soGkI|?jmS++<;HnG?X z!py4F>9CuqT4=0gw`o{%846IY6$0ZmkG$FEMsTj3t#iJXwsqDJ*1I61*NJ~0L_s;o zJ3Ha~bz&ecLwceZNzHOxD~Cprh`AQ!dkO9Md$+MlH&# z`E9!rBMx6s*`}eR?~wSUn$K%pTua`dKaqlzITjnMs;QY6m1LPxM#^0~5UxkJ?F3*- zB_L&XS3@h4u_k(-ATQWXa2%~9S<4K!O%83-pVFqxim=p|SIrQpMh|RVb<2eKgPL{PObZy;)kmZ!*6KY5M5dG4 zp0-04NPV!Bb*BGTJ{7vnSAJ+%vP}KdjJ(8%Z6vh;2W?_UfqO^uzTbv*Vo**FQ}mD< zq>CY9ExF{~!kOP2*96F(0TJoY9Y;mjPH->g3l~JcrTCxz|2JUfGlrKfwP2WZWO2E` zfE%{y7;QfK?CTaB8#-$hYMSU;9`dLw{FPqf=$tl&aRnRV2W{DJDuv$q>9gCM>J?#y zUq=Eb-^;$qFqGEaQ_75ISAzHW@m0a8XG<(U?$N5jebDuC=2f3)aE~B;om;QzTKqa8 zXyq9Jw890ToJDUcYHy?&uhcBCBP=(tPZr{@Y%l+Xa-WLvm>f=ce!n*XS5VVdLUH4Z z7^b9&f_ww9B3xLiDcJ#cJnpn+Gi_}}#faE4tE-nO=~Ngr>e4Z$76fx{3YYNIK`>IN!dD2Tjws zjh!a>#kSR`jcwbu(b%?aZ>+}I*tTusy`OpiTg}ew?B3UYan9#pk4(K(o(bpRI}Cs` zx}W=YD4<>RQe2;3&3L9U9v6o3faMMU$?K{wrFQU-n`ITAr0ch-if9=EueT0gZydimD${Ls4hqV7#y>E=$^)4v!-~R`7757y9IM1l+f4{&IyB z`1ebFy3mSLzI603%Up2j$CT2DYRLYBAbM zJ%iTSpI=a1T$G|V^i55k*Z+LqBM|7f&Klfb&!^~8yLFV%XN#vBD1<}my`FUvld~r> zxj6CfE+;|O-4)0?uBWki(VJZ_Q)k^ov+j$0G!Z8g?#}n|bZn{J7eW$f`|OT8+Rps# zwS&z9PI=f811;mW3(6|)m45Rd_gsu-uSxog1et5Di+n^_A8s!JukQ~v1RO;_Cor-w z;*?IR=&zNVKG9l10E2@Y%u``CFq%$hJzWHC<|Lh)H=~QS)Ca**g|=o7w!Fy|9&NsusQp>E7X+f@BQX> z9Xz*r|7U60`tG9Rn+1IS?svL=NF*fQ>o2Zrz1pt!ujjOCJ@VrA6I^eXzP-@N45p)r z$+AEDg6+rIq%wbtiJdO0pM~|FjA!1tg3z1S9QWktGlzSjkJF&bn+gbE`8XT<4{q4KThzQVrx0Tq40+)WIDhT`LtlwRMo&V&&3_k2dpK}HMGIUVf4UYC`I3R~?o;3J zM|!)mmZ!@AyuH`<*<%mMFg=`ET|odw8K5 zc?>Bv6bu{E9%g;(--r+CP5KTy7Sh*kW=*yeMz!{^cHQlFb))~7^jVijL|W7vlEz^& z-(~4D#t5+D66o_L_*3F~pRRk`=K)#!GnupVxm;8SFMW$%jcySejjF>*ndfzU=r{VV zR6JY2@V6C&_3#o&TvY7vdJdRWyX?qujLga4U- z3CU-33B!hGW$&f_-U||HqV1JyK{Vq(rgUq|qBi`?tvA&AkU{MJ8v2XMc{+c{ zp@RL~NprUMD)+kE8UZ~x43ts)L^FRkSKU-pr8Aud7(g^CAbI>|#!X+%8rSFGx^68Y ztEN@#40qS^wjgmmhaR$I);YzhmsS6Xt@cJm@ySP-s*)GC@B6ixh_a~^KkGdw!=`pq zOU8{`7?>daFU_o;&l4D{TK;@7dRlZS-~M|k-qn1YtH5r8TXSVFMVYYnq4 zGFsyTo0x+%YgO+b0bju;M!GtkSggIT^?^54!1TPvdqmy!dM!$d^NWj3rE2Xi{4}TC z(uTR`@H2bVkfxr3+L&?-qbC)X^j)E;Xq-D6@&W_7}D_d zE;~!Mlf|$E?l-QF=C9;v^S$4I@a$Y;XP4{Ms_QA>vdi+4yNPVISd{@4?XmjRY?6co zD9lSs7ie#L=H!J5AV{);!=20scH~F(%QueYZ9?igYUxM!kCM@UY%{VZF1~UkdA>m+ z^^2r-vJ`k0i&;pkWWH|M*f;4^UJ;Q)$%1R(*HqhpmWMHUlunu;Lu49u#us|cp(vBw~!T&n7)eKU48MXB0A&Fi3 z)?n*lr7WyxZSNh^Sh`0ko;9hXu5`#8C6r}w`o2(}e_k>x(iTY{_TxGZ83tE-S^0v1sw0 z2ss`lLi?0rYf)Dr(^r5aavwD^68XEnX`P1K(rOd}uL-CD0K*aI!$0emHnAcy?gB{3 zRkE&fX=l->$#?jqqv&ItEcLUh6(!v@3Xo$5OZkj$Gl*Sa;m14!d&!zAuzzQyVJ4#? z8OcM80xS=GXjYk}9`~ zQ`M?Dweojg)wFZ6skgQN(8GDl>SNS7>aJZ)^>_`^S?W$1QegRaJa`;=eBSV}ll~mVc?^@OgYE7!O8D zOv*$5^T+8N7r*r2u|XeN;4^Yj(wxfiFg{btgFB0x?cO;t1@^FrQuNoa23|}qseoNIO7!Bknb)co-PEUs;4xyV+3pd0vO0F(UchXOxwd*qUY{vtuZzL|LO9 zlT#!m{>`$eh6o>BQVAb|{f;GFqGV98Qlp-TiZe(hhu7(*DWVJkVM;#JKEDRuO>hjB0=&`ihVpBu) zbJ+kN@`jW)0iX=W7SzBM-0X@Zko+lVLvL*S9~n?n4GdVVh~)714=JjTtTgqe7nUSs z;&ZFLrjWWd>A_d*3mF6uv+urX=KSvaU_A z9ardsvl#>J zlxXShhuX}@rLEteC@INnPa}g-14!L2D+;Nz-UjtP+;6?c^X|Z2>Pgo#%R%CRQ(F~d`OTI19Hcy@BnCz{!iK>pB`dncHX!Z}99 zme)jPc~pST-9`OgEK#4@(O~6jQT*-s-P(~z>vLL@)bi-trJ+Zy_R|x_9ec(9!6u%e7uK^W#vc4E(P3V8-NBOt}GB2Om(I7Wt~!>}<3%SY2}^s_FO_h!USP z;QP_{_6(d`FLtZenRZb2_DU)ax8qV-@U`}&y52BXAp%#EzVX?}wN^Nj{NRcj1pu|> zbUL{1>NrZ(3sKOO-7t}#=g+YLc!-}LyP2dhY4w&Ef$81->GO?bGVONjAy5tqLZn1g z)Eoe2PS3|JG);G|5F(k+kB$di*UfRunz;CXqe=f!IF2!ih}0Uv!NEcJL(G=kKJC6; z3D?HeS*q&zr1hbobm?~I$ntO34W+Wtv={>hZnvM*O{N;3k=dMB)o-!b z;HHwR62(7~ruz;P&lGj?Zmk{7d%T z3wBx#&@n4b9#Ca?Ln{#(TMw8_==KvlDa&@sVp6-|bs>a-1G2>f{=H2PJ9j$075scD z?)6N%&t@iVKr8#628ivcVzj$Ubp^a03EnR{>ptzRq4VP@anh*TPC$6Mzua`SrdBG|gwe#5=jJV-JbSWJ(l z{)m)C47BYcW{&Uj4m7=7&&csH*q5O1hy{w{#@PUCE?u9I^JW%bpQ}Q9`?otZ7?`_b zv`h*#w7z9i$37(B4sUU3D4@-LaVnPDE-MMZyX;8dxhyOW1~VL1HK+2Xsp{^pyShK= z1JJ68tTeuiK4enELzHeT>t%D+v z-#M^qn~<02U~6&Ur_x8i((sd9U81$AvVGam(9%*S!rq`dINAtf$Xq_0+Q~_=s$SOG z_I5j1==10&TIH};7g|4yQU;BuSW57x(==iFR~zDu6GO-|5J)*uuPa8le!z8%F2 z?dE7OTM8Fd)mdpze=ogVoy=aQ;9KCbRdkk*+Qgf}rN)B-9c(7Fql|>R8_L^PEjpxI z0DzWLv>t#sm*9;_PIg{Ol&Z2XmPb?c-4Eb#BQM}%IiIM8#d78A}dC5&r4bMxi}DkrEJ}3jrTH@D>*}g`q6aLG^nJ2lw7lMLzuYsnA%93fh%EA!NE{50lnY!F4(yb zQ(JX6oY?-FobzvgRZQcH-u&?Y|T;yzmUqZ2ZH>mzJxcU$O(WPZ#3F$R1u-L=LABrYZE+ zQkH6HW~EKM(#r^EJ@Ut-8@TR)Ll3eH8jblbl7g$GyY1bKXXzT?f;{zXXz57Oojm`P z!d63~RnBoSqVzdi0Cce^t|f5Ojwk6gkMB3ehujqrM$Dhxyg9h7cV{-imtqWdJ0z&? zKrKmNnfS?`OjDif=?ajW0P8J(+L2i>GSbHBV)cH0#4vbw&GC3OWk#V`dbb|TC@sT- zRDxC%8bd)6@Oo)Fjyo7h%$L=|>DR((VBq#*elP~K))U+aMQ)dT0JTE7!fhLdnZ;jE zR^Ex#_niiu!s0@^-VO^LGZ^pMsQ-C~Mv*1*cmXixn3$g4J6>&OwbWM+0FK)!?N{VI zfzRH3gL91y-yB65{e!V7cPMVxgWSLX!=+#(1RJ0@ZA+xnkc3%R=gbx^ezJFTanF=)+jbAkm>u6+5kxKSD~9XB(S79AgnaArc#P!577 z)mno6-$5bV$OknBio~Y)Beh*#Trq1<06m~f`{&-AJ&HJ@p%KwRwUH*3dKyHXe82eh ziYj0y>xE8pz%K5cBXWB&RN23NlfD}kN~_!)!*PYu;!YbgO57Q*DZBj|k_l!6=`#M$ zBy-h|258(Cs@|@kDKdL1YCwq2Vv$<|Sbtc%S~4(q8+8}WP# zNV3JE44&+YWlaa*PfpcAh(%Y=-@XiwY)^}qRqelCrtx6qsxo{$aFmz3?IN*TldvaG z7XU7ORJ7JNhm(`1GZs`-&ZD0*Gr+Bz+vWNo=?uAWe`xnBp=jQC_gghkWH@}A>mi{0 zJ)uHHb3Z0KIh{^#;~pL5eAGfkRqIH7@o;cly<6OH;kGF?H1{YHA)KMHKZLZ>tmt@7 z+VHD_1TSQvuCpwtylrPSwLUwWoku!&y@m9my^7e>zxeJg%}ge)94?( zlxy-Yo6W=8QA;IZUiy5DZOjv%R;sGL*B0X=L3+QHHa0Wh+dcMIQ}8xdmJ>smNk1lr z-f(}0P1dNzX~KNp4s}WsROzUgz;eDzkX*2>vaZ}9J(h2%!C|k{o%s`}sH-a%s$eE1 znlo2=Z;T}V;d%|ScIHI45pSU4)SwXIq9;gbEt=uEUN&9@&F?Ty;g(FZvB3*-Ns-_E zX#);TMb*Tt*OT&e2?luA%F`~iHeK)E3rVo1>+i>dgV*u|y+{2zRMksaw!#&bw_uQf zu%*-IQf7%m$*1`UiyD%ki_}Cw-{mD?7SqozaD2Hmpg*xudl_4YrpHfNdK`aSX0Uzw zVr;;T)W=2JH6#qp@KNWm{^#~XS*;zZh;gm?j_Y0Eee%=ua<*FS4m-D3KlR<9{!qD^ z$K`?`$r%QlUW$XVME@ajLQB43fA9IT`aaR$UteZ~>ui5}F+0us%2X8LFqwA1Y4wP5 zmhUHMcJ@ga&wK-PPES96L0@rO6p(G<{&i$-uh8#CK}D9N&BnYqyHp4 zy*U=k9(LRY?2;n}Dp&lL*oj~`njv#DiXi?^AGt2AMdN#E&!zRD*zZMRTl-mh_ z_1E=WOf~&5E$%po0|+rcpJhX38Q7D7cYCqyddjDoD=Rk`L^Lo=W8B6P_%PYr84T;s z@s;u76%Ky8u^i|suos^$LHj`uAk6-m-p)AbykvIg3<-RGLuPC#POKo@$x4eP>Mb-( zV~u|7HvEv7;KxjXW>xXKOfj@1k0$0$>mb49Eu`3SIwvn^4E}9UKv|PliEG8kgakjD z%AeDGu@zd^3*%nR72#;JJB}mu?k|unB7*<<8lDf|^&x;vgcoUD-5z@bg^wKO=<~;l zc6TrjUEp0r7#ax)K&{jbF*{M}dQG$bqh^YGy(sW>t!}R_ll;LoRuJct#>W{<4tM&{E&o=X3CcR#=Z*a9tNED10O zM;lqaf$EKv{gP`o)gAFC7BZav&cF}I^%D8&c2dimErxHf$G_u^`Ldg6?bI%p4H?$^ zmD!bkh)~kl*iKax28FLbf`Q%ocq5CU+i3W^f&wMoKA1thEfGssgbI+a5cwh!CZ~_) ze2xK>%ctEnJK!;7h`{fkT0Hi^;+G7EM8SdKy zK#85~ayiO84W4Lae{$UYkp(DM2dy9_^0wpDpIZlzTBJz`KE7JMoG{z=@K=g^c@;v# z*fiLaM1hreJy8TuW%RG%{V1KX8V@{>+v6j+Q>nLvV`K=;lQQ5%MHuHU# z**2%kTvUi44w)nawRrxy(osjdwW~Dy8(MSN>YBo__tomS21}kSiL~NQ67$oLX$C0C zJ=7lc2Z@U_4mJJ1JoL0WdhtpG#cg(`DCr_3L9u|>@IdBfC6AA5bsOm-tQ7y*tA(dc zH6<&{;QfBel4WB0aa_&S8pLjwhrGv$9Py|_s9mkJ__GeG0m9B486Rk2@Ymcko%X1dc`SxKA2ym!%A-Wp; z{c%DD`s|nxKM*PQQe(Vao!L*N2VO*CKk(^&>?m1r>xbDl^S1KxTFwCl3L-@nS1N1v z(%6<2Oy)WE!-K3rm!SY?yhnNCKDZetxNIiHoX>m3oUoib-`ZSF=c(Zl0yS}QYptRD z_2TEn91m*sAOTQr7zMla*-8?i_ZSG*yFH2)G6Oo4;kfZ~)76&sjt32J8Y2Mc@#5X| zn!Ov&LoX@<$b8cF6V_%RD@60qN^xO3f;Arn^rz(d8{tWU$N-O{4$@qB3;m`Dk9+{-zX*b`q zkwPpE(`U{2&Sms1ft<;f@blfaLG1#};C@Qy@o2L!W0)?Lvq9?)_AlFgIN?M}#+a+3 zEM1MWS~12&04c$OYN8COalKrsIKFF%<1i}QM@^#DzArHB5%ITpcH|`*ANP4uLH>R*HAyPAr|4@M{l7Aj=^C`7@}bd|q!=%F^RK#Y{T-j#g}F9aog!Z!^|9OC&lP9ky7{ZxosxZU@E( z+RiV$vlN`Zt2iXinp5lcAa{p-Z&xSpHFfFkM#Rj)gPg!vr`hNX(CH6qR)1Z5M5+}CDcg(}T(mq0$o zDihRZa$6kC?AsH#4Y4l3PC-LbHh6;=d1}?~4A-R!&N+#OM$MF$!0|{?kwYu!y_r`- zq72B1(Z}?p#O`Ow&!Gy#}c*&27`)C{4XtmdLH*j=qC@OCoJde1y}) zG`Wo`&ORpUkJi${(CphY;-zEoms!il>qDcFC)$>YnV2|hoKvcsOnjdF>zQdImK!qO zp*l9U%%TZOfHJ$bPh(@*I%7<#zCja{$Bl7$8GxJ*p&?3IWk5o6-c9i-4>AHo-L8-H z1X+NOg~Jj|ubnP7=h-QhBV+VmP!RBy&Mlx~4IPZT@#ZCfozF+*#joEVdzq}F3KroJ zT3=3du{(>=kzsES?3eU=>87XeF2*|_KOC5$r;%Ct1>m)07}dI?_VI95bI9;&7i;DF;c0qgRd5SlZkJx)<~W0qe6+?_=(KnN%$VK}w6F!%x0xLp^J@|Dt(CYD;e>d> z6emW|p*}R!-MLtb6Z@W`rfmAbRGt@S2AELK5^gB6(DLg@SUv7>O)fgASZwx$<0M-U zFezd(h6h03La=pS?pKg}JQ+)BCX>aLmBz$Tnl4>=07n>!&eI%sHJshr0_1(FLW_`d ziKT+D-qvKSl2D~N?a}ORf{P1OQZ_CAvI6@Hn$O#??6w;bfBYk`IL4tY=29*7d;GRa zH(Oe^ZeUtl>1Y;yDWG0oS89#C+>e7)RU4eBG-lg5{HzVJ)i43u>{rQLmpM7{Z5M1= zpYAH-dh-x}(o`!ADrFs_($eN7^U#buAJNsiycq+no(9tgo4O&q+EcG&-`CM>33-jf z+b7{SQ5*@b^vT%i^zdN6O_1SQG1%M<%4K&jo|_0V%8}zxH>5C$2tOtwWJUQ8kX#rsX^v)|_3~uAULzNXfPUeyhoFr4t11XfhLM)S~IP zN^ZnWtar|x(T!06c5#V{1sJ0XVvlJ~pj8C-Kv!b`zL|#*^zB8?|lSPoXwqrE?|9$_2GsYcQ=Zhd-=JF>%IS z^M!D5F1`qtt-Tm@6PW#w!E5)bm5@KFsz#n`m?b)|d3t+Pj2bD9;fXHE*_dUjs~cy| zh6E9`r4$5NuU@^jUh-eG*DP!EFvk}b7K@rRl5=r6N#fune;&1qcV(YiCtdqEd+KZRhNzk`g=h;8b=x z&fu!H^qOvRV*fu0K6%Vhm-KvD2{I(i@k?r7Q4Rp;r-vwM9RnpT!>WXRs?#6Xgd2-d z%hWDE249PZAbYMbCtKaS*@2_3mMmJeajtt#k|!Uo;t?TeJ8}PFQ%tiP$pD-WVb`;z z%287O;Jf}}Ax04S6p3}?;5PY;v=En$z!R4-)WH7RC5?@*|Lez4>yX1iTqKTPMFHa1 z&#E>j{V{A@+|nxJu~fa5eCMl0UK@NOZ*-}Qchypp-OB6WlA?XR4e?vJEIbY%WiitOC-Z~#{`uloFasLP*X-HdpcDFd|Rra5G! zfn<`yU{a2h8wX@QR?ZLyl$~AscH#aIL22m*Y*{K?-1I?g{9$g3Qs^_{<+}&n#yp?h zzi%EnFueEgpcxO}2q>wdaLaT98{r`2?8ZSGpMB+UA9ML>`i8>6#VI|UiQ=PEEDtS2 z<=O9?he7)Vp5$7-ZYq~^rJ6ApUI(>}iaKgtPL9$&3qF!q3r_&3?#QgGJiJfNG8_-e zrPOLopBhkAWlnph-sn>n$$9cn^bgw9cId1=9tF#4dL;%c6m?m|tl#l5CBi@Z+Y)Ur z%>BXM4n4xiDr=&@Q8DmDkMpF@3nMjIy*ZPe(87d@E9igOyS)M-emEWC)34bBP(`B0(}<8uu`98b)cozTK=) zJUjHU7ri8KeeT3S3)Hup7LCN6KT|<|dLI`HSaLbS9MjH0@{326kOa8R%fB1elcxR= zxLzF!IBt56WsVfY+}zDdWsRmXVSl~8cI%`oU>3AA0Nj(w{ft1iL}sQQA!u;T^8Mx9 zg)1v7qKS4eay!k`r*$PiD=ksAo;Ial?ZxFQLNh{2!t{HK9n{8wuaHl~v^Sn=r=gr{ z@Ppp82Kzo5*7(0Be5S-e*g%-@N_5m+^*G5tFy>UXmO~v00oGRZ#gg1**V4OdbJZwc zzbfyetH$GtTm45_x;xtN)OXGMLYOnLn`P^6gKN7n7zVo=Yi5cP%@aLc5Ei!W5Buwk z?@7<&5jmJUN;Uk*3_m&L^b%w&Q6P|hU0M&p!6E&m~CbN2t@9O_B&y{ ztkB(n+{D-zK>imNJG|dZ-zLt?;;@=EA3wWZJ=dO3MQPGw6)&G<7tS#t5^@SU9m$m_ zpP4zC8Ju>&PqtLsU((X2wbn;w!TPcVGyKR?5w)WKXWrj7J{nvspl5yRpEfO{n6wD{ z@S-p44}P*Y+~=wQYt>Z)xed=H!u1zfYv=tGDRXXBK=o1{+ylL7Q(be%jzngoCEsXo zAgjiw3F5-Y44rR8E*rWzn8z{|B^T(ro{evNI{*i-PzI6CK^>*^o4c^!B>X5Z!?9CQwsq z+OAf%{eH!&ecbpJZ#Jq9d~(+v_izlsNM85YTm;6eJiq*9smNu3pI1FVf?m~J!_hvQ zV-Z6rBEsmwnxflPf^{Kd7@;F93_d?ykk=Tk)$g`l(JS3vLMF!S$nhWAtwh&2Y|pIn;z66ihzuX}*M*14eUN zQ-ToYbQDIGsjC?$%&L75!mtc90wTJb_gwSQD*Lk9Z+V!&Hfvu86}cGmn-qj+@V?Y% z{O!f|AO+5B&Y9APR4pDoRv>IbY)>XvrS9epDvK31fDl^JAIplE#PTvCVvp?a*Yija zlW3A+@6=UqjgO#*YI)SL=}ZbC0$TlmJdMzjk@eq_hEH}rPkHM6!E;I;cV?LPY#XRf zx5RrzMRRjs@G4w%H0HK*C9&|Mw_3WOZEj8pgM?ciGGG#UyfVs92x_a03f`tdvCjxU3)6Z{d_&G#kzrp-#BqMpj53mJRQXQdZd> zA8Y+-o%ap=;P4oSoo4whmnU2(l!-NXCkdyFxab>?&wq4me2V!WPIk%LE_#&sVupVc z(tadmqF+~hT>TSeTy~1c>Fi*b*B}fEXVqHrIfGcKZuY*VUMz0gu{m>&2jfI+_t+V5 zGHM?)Egw&-dw#^SQ5FG2W-fYf&SWf}DYc3paO)I>NV?h$_Ypgysh&T4L^6KZ^absU zr*Rr4r_g`ut@8e)V1{8akX{Ex-47(pisL8nLjgo)O=B^!|BQxQ!W;%0Cscp=o9GOr zbAvq<4vy&Msnk?E2n$>3rlW4UMn@`tvq)P z3c8;XZPU@QZm);N!|y%Z_c6Tqfpx?1@Orl!R#cj#tIKwfk!gbqowGA1ek7i_GDeKR zM!gWI?FH*=qqsPWJ`@{U$2}&CDX{L{8}XE9s?%jcw6poN_m3#&-gt@U(Iw}KMu;Zm zMy7R8I9?2LuSn&Gh0+s(uyW$thnZ8hz4W(dwntQ_@~ZPgG5LWvKFq)B3UjoO#1h@Z z>ULw;l@`JPQGH(GqIhZif}i~sO1PZq#>m9f8xd!&pff(Ssi=)WZ|8^5J%FdHDBq_p z9)}H!d5^RO0sEAfyc=EQ%fXHzud@zGZ_&LRON{UI9R>ziUI36UQ7pDs0B=i0ZE&-v zS8_fnps3V8EzY7R*zhZwpF35;q1(fWDKZ&4?y@r_ICzUB+p1dxSFE8BrhV514I^lA zwGp=wV8{ppQAY@+o3g^t^r{Wp1Dc>(3k*^*yMJ)wqi35rhS7P2|8a^^cl^qVUac^+ zT<2lC*~*6FiJ5f3wy^%=EkDl?MYY^3R}q1C;`NY9Zx8DnK~r_F%&MkI&090ZkjhMH zJer$`RFqvtBT<1%t9iQjdnhrltf=V&u%+)j7a^P3-w3`*S`VNh|^>ylw94bkkP@n~wqCuAk6g7|S1r6UG`m$?*d+**Kd}ucO zZI0&JdZIp6Lksl6_v4}5mE!;I=J$!{X*bSAa%)-0>s;e$il3*bnhL3#H*U@z*v6NS z_UGM$6~qe>U#gwTg5-B9sPB~CTz5?=iekF*hW==tfH9RS%bMSd6}0nb$V;M9bz3ij z)+SxEGG{B*s%F>Ve9xUFn!2mUR10zyl~!`vb7D`Ty{R8>i!e?f@=FFl;^dF`*o(%0 z_Fr(prUizGL!p1Of$0+Tq}0e6b_SJwGTd>niImg=s&#a z(ojzV6Tas9(DmJS)3L}-U^`l^OyPNC-VH9O?|0!w5n^uc>b_4nQz{C(31Cr*3PB=Z z>ZMCR8n2R*{tq#dpIJ!@#7T8!68Yr%`WhJgmfXGS<2q+0bn}BH+=`d{{ipZ1uqCzC z(Y_T}e<>(DC=~-rtm`orBU2U=#JD(CRz^qiNrB0~aFIltP6_X9RvC{Qq%;wk`1r_H z8Ay1g@4VbO!2<;E~BM{G6=S*mF%09ZdVaj@bAW3NOoVCh+s#}w&4W_>Mp=k$fzXIp#aPT82uku`PlU6Vmq z@&rKJvOa&oz1{SNf*ecyT;i4_>u;BqZH4yz-wa5uzNEG%QV19+>5@m1lR&ZNOb(sr zJARFm@e7auVLC3wnm})humtyB53v}1tLZ=;i(2?63uMG`0Z5UhI-q}RGzS27WGQy* z&LUz8a(>o87YEF>#0Ebw4k4zewY;4fRU@qp)9)^0`g#Lkdc}U`#9+|awR4?N`h4Jk z^Ghl3B5`wDQpqH-x#AHRjC!FE1AX3GUMzUCO>8^z1Ca1iIpauU3M&z7QUahv!{ePIT5a};s4L`kRezB*jKSl ze#-d`o->l*i$xH(7Uz*<2G6b$T43*~dYIT&@>>5sS;e}0)Oe^sfWLgUa5QfE%x2(d z&0M$PWj+iht#4L&hDyFj#s@mf?&pN4D6Y*!l7Hqc1bIAW@a5hO>`GnsKHW3i-IMiz zb%B2NiMaV?LDtclhg0z%kV7O_tzECmPNQyFqMymbe4hPByIJ|!E1BS!F(Ds+b}>%iS&;#UZDF7aGB+n4iV6sLJ=)2Vz9Ha2+bbhu0zWk&d7u z!TmbXVxxSH35}uOw$?6!j%-Xl7tKYdamv=Tnyh@7mB{5GrEt08cj$jl#NU2>o5ZI1 zQFjuh>6!ELv<1ec)y*sUXU*9_l90S;%4)Ef}QY2r#iugKUB zxzld4WEA@{ONCa5zOvOdpxDd&?hJEZ@`Q^;mNP z2KLx#-eiX`A?l!o5JI^N-$H33zvzdaM=*DQOmCG8gGHG zRSA$d6IpEJ+I?~>;KwS1mBycS*=;-8^YzI~%NYX*!I0Q~+`VobL&{~-v28dmu(!u| z{|``(B&o)yjQ~iT`*|ZHyLn~cKl9_Y;})6E6PV!K?5C19uP?AFt)32?B3ZvU7zIeK(DI;CS9iLI+?`?Y6m5nE@J{rbQX;;S;mHo67zOciMOhwR&h}g|yL}>Khv-#T9f5m^iSS94O zguD<9Uv3v0xE!$0SV7~Uk>5Kl)4Xg+rp58t;`UsclE;f_uhl_ki9z}Zw@kg zt)}U4lW%UGx<7Y;t^HxPAvk&KA4~)m5Ovnu8WRO9)mvg`6h1y&>0AHKSG1ne0|^pk zipMKSfEKCqk&>aLK0Xtlmkg=e@9rOh_G{no(0H=h}(r_PEQc^%&BRo%V-lGbD%wwr|p39A+XgKb-pJLin zWld2~{WGtmF3-tPz1?{W7$+mdk5Uw(thn`U%YQq3OODCD=eJx5ua7E1io(GH5SS=F z4f{*{f6AC-V4V3+Gn|uZXep^{ZrF=UtM9)MKDmHb;)4}~3ylWa5Q{n>UrVakY-wqA znu>}I3nS$n!HaIz-F;?hOk=+|inS`>=X^Du6m7iiBQ_UKR;p$rd^gmHw01-aR8?%d zoUYMaAGlclIn8TsI5)vi8e6{qD`o)rLODr}W{ah)id2%Tw$>T9Dj#PsWMF#{GpDW+ zFOTW`92yQ(Y87==O}qV_5}RY^lhVR$c(xjY@w=S?TiYzf^NK;c+@`Agl{V`f3_2~% zRWI&Xg^ZJkZpsgL(Q(W~C`Y0Fm(NO1Un>J3QRZ)eJBH=P>O$C%{PyBV*)Bz5eRCXNTXZOq6}a1k zw0?HpHS8*H;?2RLqrO+-n53y%Sg_8}dAn_Evwl@4-C&UXv%O@v45AZBZkWjO-zr}i zA`n+mY3Qu019-AjRMNu3h=JX2FtdALhC15%`T)3vHmB|DA+9$&z~-C}RmJseG{G5Y z7!9}4EtMdQGH_}wF$@wmL(WPe2F#+s1ArQHJ4hNK8)|pxc7mtlh5GgYrorlSmnhRw#;$CZFEnB| zKLSwp$YlLu0QAgbdn4nR-z0u-r5gS!oWVR7Mk5-Z?mLbX?LnS!ii|K=gBXm_bMs|% z4R?fy`0HlFpP}FB_NvK_rN0_^0)~UNzaj1?>xr&q?;#FsIdd~0!I?2EQRiC)_wJP)ajyD>lYfD%twL8akFe%sfB|NSInmC z9R!|dwXSPRmlZGuCnui^1F?VJ+<5F?K96s&mra$FfJ5m19sm`gQN$+&DY)@^eeyAM zVN2CPEV17nIu2mG-Pds91G4{=wUJ5F7bi>x8yEVT6xYoGM$S(!d}Khdvxf#mRYbCs zmRqE^?mgaac&3scW`&s7TPR;St%86F4KS%9`Vjo}%kIY!3jbEqVmj_$C`e2Oa{lZp zP1n~`PP8EW_4-;AIObx7V6o5`V)d!8e?b18`E_@V%CKnYU+zF#PMnP6u7DUIKm370S6O;x zz&648wXetgtYZc_c@VFM)sDk=bSgbKOJZTG`I}Wv`a(-#*{s<^7wdR2HCu72xqaLF z-$CngPn4T(!uyZOuBs`CIJI2=^{S}dNHH8UJYT+G|AJ>IqGT*^2*6M!!?zOfA7rwH zACkF!vKB~=AwW4D?RR3MOEQH0#yZvVa1{NT2SSl1qaB`ge7%yj3fRbq zs=)6(83i11Jm|#HUckOEJz>Js0IKs^@-H?_gl>2~cHvGJ zgkG`HVsb{oe+ZynrerZq&OT$rrc+1UsK(JZ=6P_GJWhwG{4h$h$+DHwo@ zwPD^XClbuPq?FqJ`4>raj^V#`3!J_)4IiaaIR!Qbb$_tY-{wb_IndllEB!7Cy8JT|gcRGFd6EJPkIbk+J$PO;@Hn(r;D#+-Os_sRQ(C^G9j zGZbR>qW|=p@alf8Pn|ZPA^HN$-@i<)FlPM^=UP&_#}I)Dq^Sl{fs*`L_6{#Cs(u1! z5*ymm_x*zO>8(J%m|sfYpD@TYYbEP@b+Sp5`Dw?1jX_bfYF(x{~kQKj#EDzum7ZQ~3kyl-BdUvsSeOIosZkh+_noe`eRRq8fZ+OB& z0Ydd<&&{@h})?^<5raFM+kpsMW=Fpd<079N%4%bMtP_#cF3Yoq{!CUh&Ij@PwE z4kWPvJM!BJq#%r%%^5!Q-!-Kp{T=b+{A2iG=@7JuVjApFHw;m>zp;1_kLwLs-+xs% zXK?Of{y#jzXe)nk4lhmdtDOxF(XVO}^}i(kivHa=3$bK>*HV@I;O#zA#S-i8U0&$H z!rxj6Dd$?{&A-@4NcbUIF|aL(Qp=4f7Y&bWFqLKh2pUXBRU{biCR0tJHC&|U%)%BR z#MQtE)1nd;n#M_7ASOj-+7^g53mM8wFk{o3(|bZ*vmfF>kd>86{}KVS3KDu@^6G@p z)s4gpd2l&feKh1MBI3jCaVZGDnfG?rJ@HK`emYVr+`>rvm z&$o%w03WuRXE`=s(B+ql!UgdSpR?0eiNL^25hHHRV_7U77OZ;j&3MbMyA?mwo%+Z# zvnv!^Zdblm41VtMy1`lE)es8Pr8^L(JpCL?lr;RiQY)-^BjDl&YpyHVjgX7$=>V_e zgS%1nA*vfkzGea`Y`4eJ&DA%su;=6qaE>7V_-ISidz`_PbgzgKYl@>Ow4+XXD9t+) znAb#cNpuNe3*V_;DDe~(77|i*PML*@?$Y0b|ATtbg@*}lJ%kk%(!_&D_<B$6a6KirE(fC>l-xRLZijJcx7_L=9gR24)qzg&YR`c z;p98w72Bx(_i_Hn%gq=)FPoP5UT@BdRrKfMHubD?u^x3xDi)Ky$`2v8I^dfoS%E9q z`RtA+Hy18Xb@~-C6Zrn=%D#?VCSV31d*#V>bG14M3Auf^1Bx+T-Zou*;gw|C-Y)OO z`>|nZQ9*44pJv3G8j<#E9{%relvM+}HTuscspqCVLFh;KZf`bkyBwiKp;=eF2NMHW zx_S?1mv1_qgpZps`(P%UwN@t9$k8KXNA^byn zwC$j?PX&bi3I!D=*x*{&4Fku&AeY~QRpo;V1;+yqAq3^O5_|3CZr6QxIL+Mb@V_AA zFM5mosiTo-Nf}hEU{(`dA}i(m#%lx<4mH2r*{XGPvxRMk5rB7> zk*F@88!A`mxTz3rUF>v-u{FQ-_xADl3+FdeajRjOVTDHlV+!=5SHVmOnPZ=te8Kv5 zgf_h@+lFyH^s4XHa^{f8;oqWRH!a^nphn;*x7g;Mh3P|n<`%)Qu{D|gsjZiQG!o?X6`+0h`}W)K>(=Clt1eXT*C|p}e~8ivF=qImP$WH& z+?*mxZ2va#HZJ@KYoT|Ry9l<=KC$8KqBiy+_{LNcIRvW$N>-mQlO{iWW!IKbh9yK= zC!ZbtFk>NymScLd-qGj0d;{bE`y13di}tn8)u*P-w`;bmGh;D0ZJPbV(PI2MR55Fdo;$A7x2Ob&|` ztqXR%ccAaGRP43w+r$5lwzmq4s(r&phwhSwp%m$s?vRp}1}SNzySr0BLOK+X4gu*B z2Bf9CLAty4`~83WbRX<}T^mk@8D_2Z*8SX1Z`hBba|wNOlRk_t_#O63DfXHax>qUw zHR)g3jzB~KwCauYjg{Z!URz2w&mr$jloRyjgDd{JAJe?8&j`s#%t}9wRHDe#(JNp4 zZnr0Rn0)kmhfiYDy2}=P!TUMn8^xz&N13>#=SarM*~PI_^nxSes@Jno-|&9Ui889) ziMQn;8>c{#45pB>HT5Ktx6+{BafD~p^sFnz$ZPs(yq`aGY$_Muiu*+A{w(plYW=;Je90IIRTQt ze}6w{Rvb!c;vkKLO%XhY884-X*%uq6x8y@VJk0O)qP~7|N?7rfVZDDJ3nEbH6a$qbKt#^?_+x=g z$UySiTF`K2%LZb+lm*?37pvRI@luxb(J@YYlTFz^p2l~s{MkBfWTd1dT!`2x(-r&A zibaYNZxQF`PYxSZ39RZ#M4_CVs%7~MR@M@Rlw@SMx3(4+ikSmyt7VXF?&M-5Bf?3A8~5Xa#&Cb$#Zo2o%k^{3FF4(Bkdb#BFWov7 zsuqi(Bj#kLQQi#QoE$K)$8|D7P+A-6uELZwDJd6U{$3aiTYErcZA!29o=Bjn~NjM6 zl%;It+Aseo9*>7$=F(r?R>Ry|f&k52Zm{z_S2|c)pco*DyXm1iIjB21+gmn1)C28& z-H#9j|3W5auTL zP?4<`qn1pp@n-kGcX(J6{T;r3I%E8EH7({Ojeg{qSF6XWTTFX>ONE05KZ-N*g(E+e zgKr3{tntr4gjk}73*OcnTuJxv;M^feNyLjBe&-id<*=exR<F<>aqbF?IVM&^-6BF%|Z5HYb+DUbEBCBPrt<*~0pIIMR)4Ot$5O{ZNXq zI+Q)GV6R>w9JfUzy#ST;(b1cYhK741sJcgSlIcws8jgsQlTUM>JI(g|r>{>sgONPf z(ag-@mayh#8!B2#lFT8fXk8Ih1>cdhn4fNBW1(n})6>VSzJ5^C7#|U7Z7Z$Dopo^u zbfomWP<#6}aHr+^xf9{$L<*BU+cFG^fz(0Xyz5u&y6*u-v@UKcXqy^ zJZ()&08VlCY8YESoHjw_>fY0-mUbhgM@c%)LM;dq>hr1j;3cH^8~^KGv*RT#(^`ds z@?XJJYFaGVx~snehGMFYs*hRrZU4FQOG~SDStSeF6~N0y*H-<#0W}pTlKklU?jNsp z&Yz-{BfcFl9QZ}Nwk0O}O2&;Nwzp~nS3SKm^=4&KN1t)zb}c1sW2QsKM~Kn~ z6AcX)(RL+1FV7`PzR|8n3WtURx8qsl<*V`K_^OV+ssOBj0G1E4*)#O)I5=Xlm28Xd zaN@YDYj7T*y)gczcgfU_cZ4Tpd%G&Z!&#c6OOM|*jUbr~&s#iE z(UYqqe;*qrfFlbHYdtupv!?w6aHFq;$ZKjq-evg*FT)bk8siB%PcM_*zn^?52Da4m zX4Wg^JwFk;Z*SxaK_Ji}EvN{V3LlhRN?jxv0g^WydFU01*42#`7#Z#Ta7W?WMt-f> zTS9|+B4fa;bi_<*YJiRXw=)J<&ZK)$CNYIlmBj`r>w#UToC#=eF$*S+#= z>VhG_ulV7aAq}?oPCR$_Ydmb*W1=IBnx5mec3_)d>RgG*#UhRd?X2#EU9mlEz4<1y zQI!DSnfmI+7=ek*(U+9lPtd@DO~3Ku3>(nCtE*k|m6esR4<6QfY68T{wIJzSNbT)F zYD~^ZeeagS0T|(Q$88uup{eO8n3xlPe=MtrN$Cmkxpr@?{n^;_v1{cyenc5`eZWK} z!9+#nKZZIxpIj}RoOQd5u6<8~7%#UT-E0~?2M;5spwG?WN;9CxL%T-(!+)rAnj*J9 zylC-|O0Dr=hj@Ce(Thn)Aw1n_YiLVV$k;GZ`r`WglZcQh(>FN4Tt-d$Ffpm(Rm7wX zDTge8jLEyVZE0>+iQ3>WLk0O7$#f=L?|?Bo9vczK6_0v@uOm(g51lO908(W=PD`PY*1A_vbNeYOztLp8=^d*+A8zAIZrZg*`pp<6_9%; zp0{k4mPbve`uw+CVweuL!Tjzj>nIRY?kv0@o(HG+(N}UaH7S0NH?t$+4#3dUQO5UN zf&l+&yjo}X&`S91lWgZ+N9a1jC2U{O!%t^&(hPZ2qIiA8f^8ilEumYtl~OU)m9yvM z)V@O0@aUl;l36xk>%2MTj)mr?f_curWQ9EH1SLK!qaa&rYH2;!aU+g1yw7KhPMfz= z`#meDe=j0y=)gDQp;ECnm2WSx>WNjAL&5dXULv16dF1_Xwxj$?8Im>MHZuPt`DY2I zSMk30)I)=5>SvxwhkSZt%jKk>R{%TT7pbx8>=5G4GX4)ob}7_8r5E{vD`^T^4;w=> zxD~3_U8h<5q^TQ2Np4DqBfR5WBK-TYO>2jxSaE$esDl0L)7!~!f@__9@jZSL>CiHF z{y;j^c_yecTlnkU{f~R%1K=Xl6%0(>D^KAOR7d{iUGTGqON|BfgdMk7i;E{mE&T(# z%d6A+oL*eufSdMF^AZtZ_&r6*m6qWVPCb5fdE8bK{Ee^gvqs;-r!Oa|SBE z<1dnkXvb$(&s$PRU@TG{4e1&I4JwHUJe=XpN1+!l9Y-}hk+QQLHh#}y4pAli{#K_V zZy$LA^9ztML<@f{Q3d;XdNR4T-r%)ud<#pB8h6;GdD65n=RMZQbGo*RvWRV9a z$NmO}-r7jSE;8HJOaNOm6EO6FA6=XiS^75;#ZcLo|B^uCdTkIlsOA)0>Uix}C*k79!9{(EqB= zrLfhEbR6_@{rxH-ue#djjdqD?9StX*LtEGv0#M##$q9SZbl?Slw&!Zlk%_gUCqG0( zYyEO&Z9isr0$A!rZ&nwPE#82`y5bvhb>+g|*Y}bciJwmz=BYU zw=}&a-iR7kEAOB<;{IHn!kXrVNC@WUzE%0r@Kad(B5G1!#K#-`bD*Uy$$SuO~<{cHPZaB+pFKJ6}ocU?*+FxbZ(azF?nxBt* z*8&Sx|EWz*X8EX<9r|a@*CO@y0;OQ2R{#Q#(jE$EC(M>gI5GsqX;dVgYl|r>VInHc zP>^`%LLsU79Bs~a$55k;^AizEstaKo?b<9SH&6D=sFXjg@Dhgy3p%sY4L7y8>&q$v zrNdu7=&egmKM^5jXj4l6I6k_PWg7js&%N7YTYvKZIgt(*ajVqgQ z!tHY*%5R>oMc<+zXmujb1}Z&4$DewZ`?ClFtLgi;af>;YX=Ph*dQFo|Ly(HDQ6zbKuYa(j+=H)U{e zrI!jb>ju60+9-g2&y9Az4WiMhQOEW<9}ZNdRa8o*R{8&361ULd;iZd^7b~w_&WwJN zVq)tPI_{hyE|f*Ej5w_MH0zQC`VW+pbmmD!#VvE-nYr}s z6OPY!*6D2R&ticgONTxN?=Z2+m>B5=HnDIhRZ|-G3;);rNKAfI#8iCtIqwB+cO7zod{hbOzHBF>K zJUV>H!6I5F76!3lK~ftuI(SGClfwJ;F(IOvK*s?=K6x)Y-)s9fAvD55ps^K`%CJAiP$?{v)9xNC9)-Xf!eRw zpgH#Z1_=C}PM^*H@$}1w85w(!^qdIWy8G53C>^4n_An>B5+O7mj|`2aRUGcK)E_tR z5>e-5A>FMBynAqU^!uS^6k;6^8vL*1~FPrKaM&ggln7@aGpu@y9jx z3GhZn-+Dg|s=2z-jHR`O|3)ndrOX^aJ%fWuDB*m90L!AL=Jn=%2AN_y@XC}M#+5Pw z{`B&d(**+;7cNDdK}&Olr}SHK0;f&Xteus!aO5v3CVvP*Lsu`X8PGi`v9NaN9)2;P z2M3?*l>zAiTKqg+2aKjb* z5rN<>k~MOiB{{!94hP4;z+a`07T6P{UcBl^El38Pq1fx^%E%mD7_tC1w2Ql-ws$y> z-gkxTjf6iRtCZ`Ft;Pp znR-p;v-Wp6J{sN3;w1wr8CGAMlr++xL6iD!8|ioG)8!Htbc>7C*6P=@)t%zAw$%&w zbL8YzuUn>lR>#K2RlemjL`I4$VqzkI7L!VJ_KP?BXj{B*-?r z8MXp0{_}~n*-VXZU-nXXm?OnUo@AwO-tXCkNVZL~+m;`3&&Tnib$)8G8O*3?%c#&4 zHkz}KfKTnD?lfR^{3Z8u!sCa^kB%uZucK%xD}h3#yBoQQeU}Xfs`Y1^Wb+Z+fSewB z+04q#fz%HaS?bQBMmPQi9tZ1@XlRrs=aRC@SkPwflpO0k?LNuYDBfQ)cLZ;SviJxZh_GiDoK_TZgUJ(^O$F%u$x^L7oL+tOr>IL{;IJQVy zNnql)qb#Y~MUm4fp1ph{zcM+^0L^F?qqX-N5LdxPH)5^I-x)lf2b{JG;oBDP9Dg#0*73)e``zvE?n1T==kG0>t+>Z_M_zAR*avqOv7@`OiEHH%LJKa&bM6wd z{{EwZJ7#_7|55R#G}*2NtAQ*8t20V)f*ysedFH}w_IysJtB;N+#6HEfm47K@%>F}`%Tgab7k0=a7#kL)fsPjf%N?!SCWS^D-W6ho}Ep>wg zb1B097oKpz(=2nD2jPy{M&TYq@qIlzebtOy1ZdFFpbY^-*eBQ4yAP=^|1)*9Y23As zk8ByArj%zA`*Tnw|{Q_*iQ5b#clV4$3&6IJolF`tIIyX zGMFw%s9r=ZO36g{0-w|42x+BXYjt20c5}KUHSA+Dt{^LW?0r7;HKyLe5b9%EMNx}9 z))i9Y{2F+peU52fBboMnSflB$->&Q#N}P4XZBZ%c4HP$e8y1MqVTSwSW%X;EBX1Jc z^u!5@g&S|`m$^+F^Reltht z&(b!SzA{fnJ=5}xQedZpm??)&FFh>0Sk@HczX{<8b@V=+lJENbcXl=^m4#GdIN_)Z-Ic=_~ zPb+;j9K21mXDa-0$53I4~>W!PDcC0vCdVb1>&(IFe%u15Uxu z-PjpQUndNqDFp6AL7|k^s^iBC z)Q4RfSKX5X@>zEhTnIKDh8d}GOtLOsPUQHm<2x%pc&@xo1C$D63*K!dl#&*qFP%Nz z$RgHoe69_q_fE4=OLaK})zvNR6i70m4PjoJ_(V;tywqAgOsqrFR45OLI}q6swosc2Id$(O5Mtg06Di+|CF-HbE>+s%?oz#m#03+99{OvGn|mA=^&MNsf0IhUH} zvh@)}f3B}r`|!=rv-zn?1dc}!!v~@^9{3~Ot&@AL(#)tArLswn)F!QdST#zmPUqO_i~O?NJy|8T zk2264n_t{={qycynuSfYgJ#R)cUDboHBnWYn@y{8eA6DouWzhw6N@siBj8{EmA(Hx zd$O?1%rW;}{jx}8EBnp+2g5AV^QkD_Oa>&MlH6>PIV;!D`-_=)@7+4B=*$ZE(P7ec zqa_PM!Yu2$R9=0!5!tt243;TIQ8`7KC=f<4f!7iAk6)T5Tj%w>R@# zLnej{B!0k7r>0YhS~!Q9??z6>!*cK{l+Wc&HPfu%s^%y3RBcOJ*lm(J`p#8eGw<0^ ztd=P3G|$x_NK4Dfi90%8uf`a(aQO1Sz=t!QWMDCjO*8C1_K!fqz@@~lAo~7&whl#J z-g6bsiaRm^)`PQgy8~#-MrBL0P;hh%C^PH1&-%OXB@3p@_Ue+y>GKm65ldh(y^YPu zxGXA$)D9Agh9M@5h7CJ97#M@)P&Js|%6f=NmrMacGb$31W)x2CyRtd6IlqqkFQnhN zd=8}zyF+hsDdMoGca@~|7E4c%!y8q&twqSjx2?vNY?`9;*&m|YwJLG)w{SR=aG{0= zXOzA7%i0cCg+XXJ1fEDKY#@3kb&c3z1B*gti<+IPMTMFT9`9*YV3MrbT`Z~a^Viv> zL;Sr6hyzqKE=4Gj3?;yW_V>p=RNn@|XF~*K2_0O$IGqk0H`bG}Yt&|fw@{f3$O8(SM{n5nxXQz`)CIhqM3~EGK z%TrC+m10Z^7MhRSr~2rf?IM&#-rp;mpP>coJ4H;N>iu16hqqNB*ftN=3MsVA9u`RL z_0%d(C-_`y6YNxF5;R1VNGD}-8N_*$JFt|c&3uxcntg1@+=867c7k6t=|FA01 z7Va@~;qSP~@41JFbJ+CFwl?-baH6tyx3?s@|A~ z`jj(Si5S`)jPpwS8>0u}wWFzEW>^#16}&`irDpnj50W@abWp_A91H5snhI3>DFg0Z zqA(z?{7Qm`h4_<3Q&bH9$|3ZD8wyI79SjevX{U{1FGL>4(|0M9lhghzt#UtBS_u%4 zw(h0pU)0x5bwqYNR{c;A$|lO$ILEYXx90b>oV8+4A=j_`g5Vn5r!-c2yDS|PukEtR zT{$DrzO>v_x@MfAeUbYGBQt>eLw_^p&{@B!zknw-7R;j94hY%nc z80_%4)~fEr3xTrn*i_+Z#D-qqg(la$XkPWu7> zAU|QvDNHKJI^V(}M2tHUFRuJp?Mh7BFg!R4|n~!?FhNHYCe>x5@uHOi`EU}S%OYMnmLH<$lWZ#EF znDjFQ>F7uY*vaqta{Tb&40X6kJM=;sU!6=++?*HBy1X!XQY{0DFA~0EDLUQ4oRw^N z6>+LE41;Q8yrV}d!jfpUxKU!b%Qj@d+kG|>UZV3jwR3@j%D(eV2^9-63WAti`c|*6 zKdO3Of992zNJAnb_jZa_CE!PK_AfuS+EHfFg;!BImf_;4>r`(tLYG<7a z!b=Y9iHC;(BY~?`vFHdX*5k07xypE@z0MTh)6@HE;`Okh2W#pFjZn*6P+&YnmJ;ww zu_rtz!n@fQnYc2BZ_nT zq;R@+L+4`s?v1(EgHT44n4JZIg$SGS_hF;yJon_x249DSG!i15Fb-ei(J%oLhya=C z=nKJFPY4KQDXha673Cl~IUDpmA3j?4jStbnsBgZGG?NHy5poqoMQCzMlFWWWeTaTY zb&nyT%G1VxqG))`c8E-A={Uf{f;RHjm8V@Fot18{-h@x$^2K$!h{w#;oGb2Jy`fN@ zy^H%G6>*sM>5qFFd2OMvNIero$sm49He-H>WpWMli4ndZ{wg2^-{vaZNywwSJgez5 zda_!pwXjQ+%7TBHeWl$nrQvqL_6)+As`Nk2vnub*{Sf8)vQBr7&#XYzkEV%{HAe#s zr6bem(F1JRRvf)Z|2l-13nI}gzpX@mpvYD}f6jS2mRq3>h@(fDHG|ujW=km&5t%eGc9E^8KayVc)iCiUE)97POef-bPr@!u}VJr)RlOb@awz zt!H(incD_Us#V_9@~up7GqS#Hs!CSpDc!)8^x-mHOa79zO)aUQGzNcHzTAFBd;@*%iQ;tw{vyEbsn}@zy z;t%X-#rzRBZgX_tR*{Vd&eHWg_xFAF?!lGvotGIM*Ir{Xg=TVEsW!L}4;4O0sUZl83%9gm^&s3Gm0LY#QD+`?M~fpl z!pEOa)YdSvxpzAG@BY1ZgByc~Uxj1^BC9q{(<4BaCPGI*{lB?zBiP)=S>TcF<;!e8 zwUwRU-u8VXaDfYR35>Y`1gs+>c=8|&eZLd#DA4su+QmR|;rldvb6@P-M?;|ZdBGcHemr=&nsKDA@o(MU^{9Y3~TUru(h1LAkQk$vYifz-bh zqdDWx`)%$Fe?AjPGcTqPk{lM_?^HI2yOYNmwk-3b>P-u{jN5VJvQ6Fhm3gCx?HqC4^(pV0o1Bd;C0lf{#<6gBnYBb zS01**6I|?xMxJs8&GS@7qFjDcDnwolI`Mv9WxH&4T_!91_lCBd@4JdCoVaKJeeCWT z@BTfyQ1oE|ec?r8z=ze3FC^K>MG`U1$O!qkM))Sx@%Jjc%ryS}kQrQPv2j@3c0b!F zkaId(`(cP@*y^n|`OT^^&xqJx$E>`dHGZ@7Gc5s8K_xaT>&?CqrzZ!c*QR$aJ`Kpl z!3q;ZNP};S4&b1_$T=|1=@~#i$H**=-WwWQihR}HpOC;}af^AUzPIjqty*^A*Czj z2D;5Q!Hv5NboO?!{V}4ld%9D71u5|?u{OhN^7hQ1)iJPT2rCHOps})IrEn%hgYS#) zovoR<7X~da7yB6|N&j&R4`)-)ptA>hv|L#HpN_RN2qK91|LgpTOpWgLzt*-i2)JQ_ z|7&Rb87@+i;(wp_L*C|N|KI6JkOI{R-2d}77euW@>VID&4P==7-{+y2;sksD`&{z> z;j(gWabUr-$|3Qee)>4$s~e}$Fjg~QGw_Q4TBd)COn}CexxVQI@~BWr(>0jzM+c!W zgG&(?D1B$2MDv~x-P^#hIrsO$BN;HF&XROZ7B?4D2MJc$(B9p!p&B&H$%#@6@(K(^QoQ{r; zEMnYX?LB%GSO1M|(^W8gV)qLzS*b*&X#58FYs#i=nO+i^OgB|TL}X(l#I3n(@jF82 z@Nh-ZnX9$+50*h~znx7wdemUOiiSDcnftf>kWEMag4VXBr6sSY3^UwcS_W*<1&+{S zFif&x9x$Y@@=3I)-Sz+e(IN&iL~FPwmMN#2*Xs>CE!O|@R3ni7{@$9K4Bf52o?8Az zO7te#n%C33o2)uAud`G^qV#4)0Xqpz=*8RbFPkL(zipNOpLXE?%gb*5(Pbe@9{9%a z2gik9K559J4ovn#V`PC9*VhC0`+A`=!vpu00kap#G@G!te(HM|gFA{~n}z{j9H7O95$+5~=28Q}g>MgXgU>g=#<8PH$-B z-~0MLR5UK@X=yb$ZS)PYoC3X{*J=HCYip~B&sBddi~QeEG<;_l7f@i*>E9Sl{6?i4 zspl<$v~I1LysPVlES2Bn{Ji(+$6<@Qr~(GmV8g2Cu91_{WZD7yM&{^(DH|U@I5XXb zg~KFT>w3L-b^Jmf^21a)NVp512qD6_Nv^6O?oKI@3fa#rtq{mfRsS`^y0#I zGf}o&Yd_7%AAGUuo)JrqVDB?|Izx1w#qc`?1@#{qmGIs6jZ|X(zRypOyqSj?GD51!jA5~S)=ef@;(Jz6^P3XVPoXHR! zUEq5;rCqF?{V`z%4i2u)a&)A>KOLOC|MorC*UC$|hO(G?VQ?yKH~SO6fB#4N!J5@D@{z?^oUC@eu^h?bGJoghb{T|#!Zs<$HV6*8i=W@4d8#MNlp1FE0;o z@yv9wQBhCM&fswYBH`kW{r%gGOaZn!6nb!U)DG?sj>`Uhm#*yM7e@8w=H_^)z*#nv zYR=BY#00%khK9EGOr75G!GW;<1Am}l&sD!Bpe;>nPEc)KU9YoEd7`}%4W^K;lZo6X zS1>IL4R&ubhocLse>`}%%B?>TNP~-`!-3};tOZ})b*)@isL-mjgIwH&)qZ?OAYGwVHf}Y` zewS3}a-VA8XPIy@AD*IjK$xvOT6Gcr6p zZ2l(gZmCu~yPIu8n)jcke$BXUIo%e2JYl*BPFJ{bli=YTKidp_+l`Sxe4SneIOs$% zuLT7KX=%T;x94ao0uGdzn5bNwjKtgC-mavi6ii(`#{=FH9_8cXt0T)lt}rQ{uR}IT zX)j;^E1FFhh~Y+4>!n)RTy*>j?%uxor+E3E$5!%~759PYpV|Xg5PM-aR~Pi|`wPS% z^EWRLyLgy^06G_5DRbY~-bT**{{25p1E_eQi&Nud1TLhksAyIvsi2^sUHM_|9LgULUS__rR5mnR z22%FJ>spz@CQzH^)ytP!ZW?-=5FnzE#}QP(c{7&u zjijWctKialZ;V6RrB?F5Pm`W-Adf;rL#1Pg2#JZSbZTC5bGsfbHVKbb={Hsu6a-K0 zmz(7Zy6r{cy>bWdd!275zLEu<(a*t?0vU03b=7{@umI$mq?D9EywBMHJu8udw6wIJ zpP!zdo{!Icky54((uUwU*jB8JjMkTXQvgo93@Z@dSSB;b2<;&*>_xYDs=-`G;A0@zKq$Fg;ejwono zST=Q6m;0z#IPQD179mqOUT>K>%xlse3S?Yor?`9G+1c4tnRZ>jRuU~0RqjACJ&-)< zND9R&xrQ|#!^)b{cwQ@i<$BG=7B8Iuw%S6YL)DKTO+QNEBr6%G{Wr-%EjUQ9sYHdX z|9-2k=7^K&q1-A~%4`UDegbrgO}Ccz<;(TWf#fo+ig!v%*?bO${{ByUQ)Q+fKW-0w z-Eiaw5?@S<7E->kU(r5E(585v_!l&m1wSu8=94s#cA4C zEm%-r?{+v}4*;-oS1O4X0FYXt48ZZ&6bG>5jr?!7s=*54P_^4km9DRU)Y_;%vs?ci zH8(dWn60e#Wqy7h^q+Qhb8Cvmo1Ww`?ThUSL1}4eK`5!Le7cxWVV`5oV|WL|l8udx zy7~m*gMD%2#AIY-cz9}nAMQ^uM!%H*d$Bw5-#n%isqD*#B| z_Hd>_nETtezrpCiXdyZ*sXY-m4xpn}818|_#`-#)VmdA*<;Zz!&l&?8+j5;{!lyh> zXJ;-Usp)V{Rn=-Rg;!VZGj6IsGypwGNl5{c=;`UHzP|oo{jIDl3RydxXo7>@WYzQC=o>oO=6ot}LylN)k zqzi?SkrBwx9e(@Uvn{`55?z*5u-maHg@3iRJr*X2a*@RWFabggD(uNowy&?R-{`Pn z`2KxTdipQpuHes~aUpLkhWbZFkpH8{2q@Uqudpcuzg%{}Ir2mAua8%%O+s2)ghtQ5 ze*Frt4GSH8o!@@B)eE0qnLyeJm`=UCyugS$K&X9YW~SKFjj8raD)}UEUg%YFpcE9t z1?7MK`~mAvL`)18r|u8mn>Q|Z7rQ9f(AhR0zI)W@f}f3z$BRvG#Kdx^W)3P}zkVG@ z&d0{W61$Yv-Q5ii1(>ZR;W+RAfGGSiorf&0Y)ZCl3Y(Pcw|(Pij)>3R3QnuPf3M@T zaz5to@4vgd%gV|s!pxDgv$3&}oSe*OJKGsfH&|OfvmbCbk!xXQR-#eb(7-#*@O@$z zU zT>PLla@E|=qSXCxdk!eT=GK-uH<=x;K0qfqIn+Otoxetz9vm`FO=)0EnL+hon6ct6Z_&pM?dX{)_qC#~M#>Zx9yG4-jvdZ^ic0rwuPdH3B}q zMp;TPT4rX2!f~)fgSA;18DxN}t*to?4EDZw12mCtV-DN7+O4COW1!yL={vMdoln%@ z+)t{j07L`OT`d^4;|0+9a(@Qlm)!TB_o9waVk)ZVF)19Nj#cY&0v!pkLm=({lL?n< z07Jn>4hadtLPi)Q0xVGz5c%2J60I`XSdtpYweG;cz>yJUEzpD&DH|wMJF&VsJ79$R zdU`KFL)M-il`Q_Qc1&N zfCnJs4M0EI5qq|-n`>=rqw>F58yZq9oBETntdpgyr}yXF*VveP|Fw&Uhh-H0Pd(Oq z8CHX4SFi(_Qc4R8LpFYa!GJwJHa4ar_W0$p4-o~Wt_%2K4a=#*dvEnB+<}r=X`!l> zh(#fI0j4-UI=Xhw7U<|zGeGfsO-~;H^dB%t(^tgs@bFw*T##=-5hyB}KXkuZiiwKS z1&T~6tNv_c0_Zx>a@1V5;|CO5fSgWPc&((WB~r*_nZrac{`*;XsT8d{&7AI8-C`okyqE24r_=^Y{T zD%A!k2r5btfgm8F^dwRO0xBR)3`HQ+sPwK>X?mXQJ@)k(=iHoe)`ev#D=TZx`Myt^ zYsE%I(a`;tm;JfM$Hz0NVO!?DUN22av1FG9p!TX?xZvUWZ>$SGKEB<%J!gg*aZ%Kp z_G3@<%N9EF93&(p20z87Xua0WHZm|a9(R!e#snk+Y)eT=*(N007gl9qX^GiVKx+RU z7UXNvw=g}(Sx}Xgc;+?9yfNWwmPxLeGKd;emSscl4w&x-aO;6Sfcv5$wyVk&jUb-r z*x^{vJ-0BJD6HsTSXd}?{CFdi$&9AQ^%i2ehn7>XPuu9(Rqa(~t&I}x#&Wxoc9A1B zpd;fXpXa*iOVzGjmr!Z@`tY93`7%^P(hD|DN_6Tf3=0dxvKjR#;y+ zBns$=!Tvi&o|)bFQdd(NJ-ocGX6atKbcv{sUi{fgssz{(Se&rKh50>$!MF|)c$J$C^7tcYE_smC@{>}6KQlhJt^t^ zHy46Yp$obf79A*+<+-g;4?hHNLcj2vVB64-K=c7Z!9R7D_!YF12CfG-y*PK}(;=T#HKSuMDwae11H5J*Ba_>03o*C0Z0;gqo`6{{8z;?$Lm(^4=_0pP;O) zjH*qlFZ%V%$Ju#ONX{$w2bMo(h&SYxvk&%m=Q|pnJ-be#Gid5@;suI)yWL3)D-~o= zXOV+WY(B9HoJ|7*OY3dGrYHCfX)=SKN`)4<`CgopW%=$T&GaJFDO|hIi@;>=6)XmzW-?2OpC2 z`SG>LbM&gAp|MbvssGPPbcL!1!c58%WS6+u*z33u=du;@?DDZccx_zJ%BX2j+O$=I z$m`dyA*7)UCI&9PZnPUS_znQ``Sa(nu#NdfHh@Y72K)lLof&G}s#HiGG@8`@{T2<+ zmC<%@?ep>Rsi>-Q7u3_zY69Mt;D{(VRenA>f-5^C1M}v-TFMSpYG!6;UY;~sm#F9+ zYeg4t?*|VaoQk~w4rD`Tv~BXnA zP40t4q8G*;0vYE9f{-!GXjd@x#!z?j(TW3CeA`akthd2E6u@X;Nn*yjxzTE@I^JHV z18PiumjP8DAGkKUzi-_;o3*qztMNrLy-TvP9MRsg&55LkotRJU8_fb9Z$_lJFdu6+9=h9)v_`Ijs4Us+V@aVTL24jedq zI2~e?w6y0Ki>j95y0SP+s+H*k%>f3<{yYdVu&b*JWf|iL)hZ;|*3r=s%Yd4K|Fhi#AFakpJM_#J@-M%8D9R@ANYGc%OgQ&Yf;3JzyJLxFvv3xU9?p zi?sKyMi@hM_VkR5n4_jW?(g`xh)R7Z7ZT%tgS`j}F89Zn(nhyEPftIe(W3aXViyJ+ zz<+*jF7n74L41kPc z`OnSGp`D`%gqAn9w;N!l85#=Un)vwiK@z`x+riBZGp4q#&S19^^ih0u)OYaLM8$w- z0siO}ZvC~OH)iN&9A-8)R?)t?6$Mw|lv8GQwoT%f-6Q&0t(bXeRp<%O${1IRqoSgG zC~TCO>(?2h-`&z-(leuK`1$#%s;&{ZTs8ex^xS0GpFnl>aEv}vgw)Uh%^+l} zP!S4Bc%_z!$!FP@SZ8&(vVr@h-d*+eC^pvspG*U0TR8B+O^Ze-$j|>+QE`8-f~=fe zac=HIPf4oJaQM+uvjmmQYx^+RKp!F^Nx8WVY_<{x9{)vEajZ1A#`%RG?tDr9=NTKDfw}R{`LXt1`y|`lE$ED$ot?&;?tiSTq^i{0 zouoGAm^={2S19vAf~eos}sGBJxh|_Q(yh)z_`~E&Jdw?AY-!; zSFXoDV{h6wR|j6%Kz+o8TM20w^UF&%Axd=3+O=R(FEGx~)Y-T0Z!vb4{zXm5&`t-O zq0wl{x7Sh`Ny*|Np`leDKayi&=;xFFJ{OgooV>iU0^SP!v)yhLktZ3tl_T?`R~_wB z$QAm-j}}x^y3le>3_pMeI!V#g^z?Lunx&T)akRlUr48c_-NHB9cVd5?o0C(vNe-yy zKLA-H{#GB2D;a}b?ZiFeTnm5%FBCEpSNt-V19zKM)}u8 zb^0z9$w*J>vR~iBITg?p_m$Vg=Ub%Q1gbEdsc5;)pG$v1*T4X+@FLfW*zWDClW@mg zy%Ilp^5pU3kD`6d&CP3SYCtu!*EOqCE@)|Kkw{};NYhhOnYt2nUz!>kE^BHgwb-}+ z7{K~hQY!oKL51k}Alexo(1QR9jnHOgQJBw~V)M<9ADK4NXDGC@Sgz)32)w z7t%~?hB@#w?|bp#XSliQHcV!H{qEJ@@NEgpm$|LM_GyGmiHaqI9Rvo05ta!!pLFSAKoQ(DKV!E9QI>*&gP=`NRNd@1zlgo3wxO=aFfLze;WlFbn zW}j6Mq?Cjcwvlmh0!tF3SBL$C4LoOhDsMJUG1D-l5TSF~bx#siT z-lmr?H!Mw-1^xPA9$){p>Y@*3I-oW|16HgJ{|(kdrMcGz(&LM1$>N#UU7<{e^BxVH zYqt%WFJ?ywo{lm$jMs>77%f@x8XEQ}0+fu51TOZo7PQYd2--qJlY6 z^;s_A62GhEnQ`?t%6V){)i9ckkYXzQmNDzQ7FMw_fG)vp70@5l8dB3Sk-l`Z+mWc5EO#qQ%U)nf@5!F-rl#*B z5;m7&w`|#ha!uNK(UdfH1)Uh;7c`Ofa&J33JLr(_%{bL<~^pWIPA zlStow*BsZ#;9y$wFd72u#>qCDfVxw}7Qb&Fg2BK>7zKCluGd@O;p3~GUXDFs>+5;h z^zB+r?n;zONy%&)%?-$zbYJqu%F;YDLGBchNJItA%)CDvQdv*1vRu3>ZfZ zhKD?4b?X)WEKlRf`*RhazTZJ}&MEu7_$^eJ0-EdVyZHJ_8VB41$Zy-Wt@TF%7~4U0 zGVuE`35jse18`90k6c`%YzO_u&JJ&7(S|(*G3i5jIj{ugJY3KZO~G=4TU+;YLAHKA;(R((xZOGkV9L{s3X>`{4?az-; zB#ra#pHE!`juqhNkEKxda&v2&m;`=(cM}%YOzqZ=7}0Z^cqIifWqf=JA)&RCCWeM` zuVw*@us!dc=5cQO^2GzQ>HJ;$V|*wjEFtsaXlq7EN%yb^tyFpLUAflLT>dkFZ5eRF zi#!eq%vVpS>*%!9>((QQ;N){_pFeC-RDBvDJlT#I2au&7nLvq~{q(OIyS%HK+)Ly$ z1nSMvvi1v4DSxH-IV~77$t@QMIy2q@&PPez_b^$jtE*Wo7Cs#h>VU%!ZUT0HE3vLC zTJ#(#wGkx&G^4e(72V==!sqn#!$dz?+gzq$rtRTR6ye-KrFK8)b}=z}OeOvZwZ}D9 z#JE)$PY|##U%p^X;>@|Zx%d>=meNGxoKQ&!y>0uu;B1j%2hy>B=g4F+7_ku)+i{np zpi$sM&c);TLqkJ=PH^-%z&GYX_?h*L3xZX7`T3<_TbbA5HRuy#W7-ME{Ox(xWgDLO zMOiZ-uauT5f-g!*(I6ZsD)yKi6O{A1Z{1xIzw^OvA^W_J=4QI>w|8PLv{nDfy!qCa zvPcn5o9xj)rOj0G^z!oZ^rTMJ>)f6>qA#g+8)VJ8mK&54ruY*3PwC)mNOx4m7+T9% zA;Gy`wYD5ZJ998h!)Z9Wx){n-QqoOptsamakUm(SFU~!NS`!M58+}~bp>_Q&vx3e7 z$4=DQQ=kIS0n%Q)03}8nFb7`?kQ+LqnVFMQa5W1pTtoyfvOVrwQkt3?oN6fv`@zoc zKac`9Z@z!`F0lAf2+Beh1jdOvtA_a#a}fedx{ERbdh`i7dV80UHKptVWR$}CVi zoR9v20U!aZ4|g_9mM%FlKP3ieJU#YpuG1MU28IexhAET@C}|ip$*Jr>Dxq&hQe$G| z;OIi0x$&hE#pe!sUd0L0t5L^n0Cdq!!9M`ny53xC){wptp(5l~-Yb)h+^1+`GmmI)&WstPum{gTBBUeWR~@l4QX^bF8FCe0vuwzhTcR^B|lI}uJ{n3 zRY1mS1F}I!5yXMG`e)+{Z4~BeXw|c`v#6<1kgPNKs_cB$^FMO;G!QsT(mq$Y*nD40K{^)#@suwdS%Jp-|J z9mOkW4D?wxm?VURf7r&xZ<`RwG5)UuRnnI|Xp`TxHQW{*#NNT7z^Qu=FYhUU7Pweh z$X$SW$|iia&)cgM__nCX7p^8rv{T5t%UmiJ3PQKLqcGR4ecCv5b=6c=t!-_qAj;eb z3kU=B2Ne4C>lX$>Nl8hQ8)~G{LM^zW!_Sj#`y{C?@Zl#FxD z-a}M7S|?R!*gL{{ot+Ia7n9l5-MzRsQVuAIOfZoSgDmj^|F-REgiBLmO#>Dt;X3WRt=Ete^E&<<;{?7Pzy~jRpU~o`RPtTc^D{}Cl zHOw~XA>$(>XnT4&OHwybCD;Co$W_GNdt=iM)ko6YsV`n&YB72w>ZIcCS{&oMAodt# zZl|q{jg7MM&5UarWb2@yAo2&=;5Duv^YfGKmY=7WLH>+XDcw#vnVEvJ9vt;g-+ZJa zDMR2{NroP)ftNWg_L$R3NgGQmEjDb~(#>$UH8kv04LdgXs_}&I$Yd-m*EA0L@G@<>=K z>&!kb(!!>5Q84gZ?5*#e$@1}MSq;=IUuxb zsYK7Mx#vbujUyr=6zCDusfeswwa@&Tnwx>Rjke{Gn&bu8os-wM?l~zgF8(Sh=^I>( zA)OuTZ{=FmMB&@Pv=EeW`8RhZSOj_p;xx(0``c2@61WICKUEJ4Vf_?zZdrRfG<2QA zw42U9q?1qftskT1-l#G=hQJr~qyyk8C`UP_bo~b|o>yo?FzK$He70s2&x^D)x{ifk z;03+fVc3;P|Aekxy&B8=R#tR{O&od_^ku+Ra6KB3PHJl9?xtL)0!)0^2pmU}thW)U zcgq%pBuI?>@SrVL28zBjugbsqAhQJtPnk@~M7Lu!pX;ws=@mPtWgArDbzK zVhO!$s|^uG(FqRDhocYUBLKotGV|Wh+6;79SJ?A&l@q~bWkJyL@9p|qf2B^$2=E9& z#@p}TP4Sp4pD0p16#j@KiW(XMo9gq-0z6{lNL@QKBC=`c!#LassQquQW?>x&owR${ z?PUA-JO&)nlBaApM~AjOUiY69kTJmGi4iUKd9-LRU!GH8$xq1S^HEQLK6mZ1B*wL; z@7Tmc_%S;h&CFJE%)8o_WtgV*TI>=fo=k3SX|bla6L`W+auQED@0Hl7s!4KkY903A zOyU)zq1(VqaNZA#h?t{UYz^&&GRJ%9txP1arA6K|-3;lt`s_Ta&S4$c?Z(F4uQXGT zyAco&04QGSjy|7?{FXjERS-2@U7oo44|{kg8G{r|1B&4UyQ~a)FLYX%mR!gyHV*?2 zqkO_B_0ID<7v=Hw-6}5hjr;fR9TFEG@~+rdKD`W;4QaYU*Iqb8MyD$6^Ljknj8Tg~ z!n%v12Nz(gs;a5cVyj5EY`nbYa6$U@?~6XLwAu;RR{3=?zQ%-XcPr5WDW1Fe*QLzN6=6?_Axhi#k71}FC{)+9>OpAW#X*y zQIoem)el8vilq)nu#q!>QVG@ez1RV23DsI+)>nZ!O{fXPGZG#m zJ6PnRgP)(=rp>Grubc-Tr~UQxc-8e|qM~56c6W4)>=Ak=b<4}cBX`XNnvKyWLkJ6q zPGZr3|AQ3KgYP31+GrP#*Z=@H7MhW3qiXIJK=;|Qqy}jqb(eJ$+PqfQXol zJ^_B;)XYr0Qc!75&QWz^JMg*g|*?{PbZjIBQ)ud&@BQV z#V+Ie3+LLAhJ=BIaD&3iOf$66C{b8`u>T>@i=90A#PL9#o2qIh<{yF}3vdjh$>jVu zZ(zw*RGca9E`^dA*&Bb+79#Qa)FPl1ATSc14z%lU4g*}_UVA&~`ExU@A{16&k!6osv!2T)&dpyfj9%45P5$}cF`CP3W$ z4)sH_DF^93b#**yB#_}T+_X;E-vvJitVBpPfkJ@5$SP=wlQ371%q?4N$~$js^J67#KhQG1K6Lf zuV<#F>`5f6LprP;Km$5}ID|zd%sLbZlD)l~Yywa=kmA`$K@txm=Fb!@5{F- zAv7aO93ZdJgme^;=AK(EA}!rwCFRI2En(Bdfkq*K5GK704B)?Y>zM{f17=n2^&{0j z;eg6L5g`Yi^~(ZR4oV1tS7DZ51t4o64`z$f0jUoK2uK=%C4K6x{&U5E=AUfbH8dhb z&jBI8&O#m-;t?_Kh`juAcJai>*qGHnq8L5US14x}<7Gs`EZB$drN%p5yS8E5HfKji zAUw-<3s`7OF^z+wqWE3QZcfk`0(m}eI@_J80Ng&-ius9!&xuW$mQf;Hiu+F8^!!Td zDr`hv7Rty2g*g^vPq0E6ByUpHV{~TrgefDCnjGyp;a&LU;-g7abjs2=vBKC_SyM8$ zh^;MwKTQ>@Tr*S4+EVC*I=26`hO6t(rc`xzH#b&zlqknW>IOt{XrPOSB?kRwyf=G_ z9669ES4PXTm>7^rzKcrW-v!bQ&XzpM#CWum(nis`4=6G*?{ zU=jXcO(T^~B`n2`es{*mSx_$|DkcOUmyruJ1Dnhy%eQtzi~uqj0*G2%Tr?@)fs4oC zd$F*qG{6rDB`_^n66;vLZE^Q+6lB`(gZKk(0RQF?6re~5=q2IOPm%D7>(_>sB7DLI z+Ud?E2ZUebCf~XP&cxX}N~>fGQ3i2p$px#AP4T&!S_-DN&STQ9k^LbyLI9-1tDX*6 zoWVyuhQi6u-|oJD2?m<}0y!a}-sFk(0<>@>Sgef^wa>ho2dQ(EZ0N*)++y|8dPs4| zTKuZH6xifmy(>k$7XKGe>k>u2W^wzX6yIh}bO_cF%o7xb1Lv9+XF2&PTPBh+f^a^S6n~i^L=J@%@o#H^H~IOXVUH9H>5+G5W;|M*kJh=Fn}5U4Lor{Y zd@S}tvN%#!9$4>OXEZ-CnQVmAVN92KC+1}$p%)w)dg|oK+!sCBaVChab#=ufcyo*o z!JdQXMy@Z-jkRCV)2m9pOw{Lk2V(-JDCDfcT1I-?=+etn^KE}+{uSEtFC^$vu?X<3 zOntru^P2ioA$dSnR8*umvH>?SisS9{s_1Rc5hzEx$Kb8c&o8g9tjgWd0eFbVl5m2S zAP8JM*J*oI+G6Rh!iWGqLnk~^(DmIz77jeTR`xRG-a0v1SRNO_nLPAU|q=fb5 z%M2{4X~dqgUAxEhQn1k>LbYw!gXAgGcG+*1~dkB8@F^Dw+sd!{&>rDYRb9kZftK z_G)8LU8sny#yuS!wMCcFn&H>&^&LuraJEfpIk&X*_x@CoQ9e%pL#|5rz1>N)cTV7I zagm5L@0&)FI#SFy(tXh8aWH4~U5Sizn5pd~8-ufczoic!4jWwP=(yUJY9lPVZ{NG! zYBa&~+4AxnzZ^j}jyeyrcH z;rN~iv?~So#GzSV@_PoFoo%U~s-{13@GC1Ys&E)QeZR4flaR~XbmQQZg*C5)EGzyK zo_*csE-JxBx$5ffHdy#rLf%H~_TPtdYxYu4coPpi)+9p3-Zs!!!D*-X3T@wVN$d%n`b1@9x&5)LW?#vWg|gN zY45}&Lt@#75+nK=f?-Am!ewXF)H=rJpoUTsk!^zCRXnjKg9lrIZ!R)eKGH~f!kluT24S;WM8rYru=k^SiqT`SrQi4J z^T!tc8S-{6AzEsG^flXY2-7SRgjHsHyJslMSby=rNTG+{~Gr@yJ*r^n${=VSt{J%`JqH| zw%@3nvVqSi;=01N!H&Yo&JBzrr~J!H`t_^n@2ME<$T?avqXq2G^#41Cz=qyxG<3yixoCF9D2A}D>`H30 z_g{Khjq_o~HXGQJXNTr3i++0~Nio`9o4kq~^>bWO++65YnH*!HqsHEK+1EZ|% zgqf&8_%a_p=sS5ZW44rGxYU!mDS&D$S9WV@s=T;0>9fX{o2qMH)Gc?Ly!cRPCGG#H zelft3ePzU(uD-WmG7t>4Ag+IZaZ$tUuucQLh6Y2959&QUdu8QSaiwmLnu{A;mlVER zoAiZu)k~Cy=y}PgRL^@S?azqWw6Zhj{JnW&bZf#kGfIs##Q`@|2BwT8?NO~yp=Flb6UT3g#tjh{g z*hfur=1uz41AnqV_xn?G#!5HKV|S|Cm0haGk(59mhDM1N13MdeiJIWG`ny!BZ~Pth z9YPfkLB9b)kEy9MRUfV{;$W~G!^6Umy<)k?!!0@+NwHbac#TKX3=E*L3i0z}=MA?X{s!Q9_m-Qljp&!>;qo;`z2n6V&2M-39pzO|aEIAf61)OTY;NhKzt8QSUt&=@y z2aPtB*Jjdep9hZ=89=QgyHuQPpm$*MBABo7)AlbGOKQ%B&L4B?)4lCe2b7T{Jta-{ zsgGXjS8@OM29Z9o_p}oQpt-f3XDSbfoZ63#y^Qw8PpT^GhhN(gi7M4wB0_rqUvB$F zlMh9>(ZORqHWBx&-Csv*9@ggWzxw6AU=4@ClcOE+2iN4wSMy#rY@?PjB`0B5hBS#j$4&Lk#F`pSPGk z`RCakS+4ktX*E`E-ri+AIRADPr!!&6@Z+)7uf;xRf`ULN?3jJ)^}Gx2Ywf{$%?lO) literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/images/security-control-classification.png b/windows/security/threat-protection/images/security-control-classification.png new file mode 100644 index 0000000000000000000000000000000000000000..75467f2098ea339c96748ad81e931bcc0f54c4c9 GIT binary patch literal 12204 zcmdVAWl&r}*Di_$LSS$w!GZ;M53a!p0|a+>4<2L)1Pd|*cbmasa33ULaCd?`2_7t* z$@`tEQ>Sjdzi!p7x<6)mckkY7_j-D*XRY1cFRki)CvcZ_EyNujWH<*i&n|Z(aFmKqpDc>Ru$F ze}$zoh`mK{MHQ3XJMZq6JFKi|i$-!>sy?`Gyw1BF;|{qAl<2sL4jou#?+$RtB?GUg7(m9n^FZHK>*$(gAN|Ln?FgJJO1p4x=r^|H+BP&*zkryly2ACfX6G zy5p<`Ox3ysD(ER9~)zGS+@G~{;cx}ZE@1nwm z!$z>hR^CY1C(|R!9@?jCPHQn}Tf^D5Kj zb^STX8;I*;>3%43?8yjNN(aEBcv$w`%l>%9gKdvhB_ncc#jAw2BNcC_oZR$w6sC6? zKtY?ox70tZeLdS(k^K*Ld3T41x{en_tn1~WI|F&pZGjziN*YTc+;~x$Xz_uD__Dzu z7i=16_n*~YMT-geu$7Ci%SuxBCQ?f~9t^hW8tLPi+3Cg|@#owaEeWful24;~cdcAy z6(4tDJGeAlDM&HxgMj#|7zz4yf6eY?@SIfN|bu-+hUpPPXpaA}0&?f5^KunFp}nsD9GTTA|WI8bFKF_qtWk z<;p;5zr}~qfAHA;8iqaC#U4nO%%mr+C+eK@@{uf57+6o>ps215VThI|jzN;~uC<(s(uwex2Y(VXiT;ar*nu zHXWlTB)5~5g*^yT@v2bo?Oe_JR1$kp^-==X|B6?kQFH1pH; zjl8hh0e=Bv4@b4@F1~HM9W^;F@*iw9xoFsSgZYV%Y#)Dtcj0vZOg1vF*VKm#Z5;C! zP;Hm`3bPoI7b!D!L=&fn+;|a8jl1T>WmRzdJx5fP* zYG~J7L=ke02h_Lx7&N4Yz$kUK2B$o-hg>HbQm)fLtr}mlyEO5=qaSV+UFVzQTeMQn z>CuVH8<q6NmF~JFxMqEG)vSS+q0sglum zvu2@x^NP=xuh8=he{=oPd^)5p20nY+eGYBjRbQ+f&d!IMNSl78=!kH;8~kUNBTYf4 zhr)XEr&g|67wMej-r?c2HjOUdZ;YYq3`tD4+STL-R|9TOao*10fUfJJ#0|^V4ea4% z@wJ}S?Zg_8SJa6;g2gn1G~kc@Wq#*1zs17B!7b8vcB5#Yzz^loOe$fZX4}c&pe*9iB+)+t9_E(BNrl>;m+8S@wU|ZbK)o-SD5$Xg=}|0Wsk(OeCEo z$dAm_Z#iY}FVn2j)HdTT?KV?CI)N{ecWDZ*@@UV=J&?1i?*S)H%@#OnVWks_uxKG` z78h>RyV?uAAZ~8Ib-WO13!3{~sS-P5r}Z9k;<_Gi{fo{0vnQ*e?eee@f1a^u;`Xo8-hR7hnf+(S7Rb!-k9fy zJCB6a_SVR_oBHSXILwvWfBboLFL=6tfyF7AwHsml#F=>4ddj1Vl#{N4BO#pM@x$xH z{ZsAg&R)_#8qK1J>0cdpYhBn}7(PefHyT;ZG7*9yeFFTRmiLNU5HM>M4QAwqx)73B}Q^YhmX6 zBRA#+>Ua0B6iqFu=MGPqSPa8Rr;Yz3NGv|PQ8O+|6!SsXk|~u z`yY>xb%jV1PW;hhf2ziEi2R%^5WC2ho!QuDaDOXY4T2(l#-DXz^C7z_IN1XwPw6Ar zJ^)VxfASdokAKPa9wFVRe=g@u3&2N6Bb~d^3sFYA-i1Z8nx}+@Y|PHDyJoHO^whDi zj=x}}|8qT-7ljqNq?opOo#W9Wy^?b{!A+_x3!e-^WgPMLh} zEpyEd+euk7fuVo&*A5yUQQg|Ly6XR!+3lp5{r&oDtVJY7KgF%ZAmOb{@a2ks&O?}Z z_S=qb7P*C?reDe-h!FE;Z|KUox5rxru(P&X8?n21N&XIr9}QM8Zm`V_H}Q_xMxuxmGLQ`ZxcPeVdY$`Mz_OI<+g-H2bw%ap4;8-jqwrh{lztE;4o z2d8u}(*N;4({2aUZJqV>@E+^^5R~eFOyV-5c^P>N;3UV|IRBI!WSMfF0^oXjRX8(e zwh^+0)m<_4J3Bw3lE!lz7(z@E6ex`3pD_RMu8Y&|?N7akcvp=HWH2r{uc+x7$>L}z z-cbq`SA16$VvbO`MP^B-fdZam@%Sb8bS$odG+aqm_^n8T$Ld!f&q+Ej>%M+5jx9m0 z`}iBxq{~_FLXOFf#X;TG2 z61JY-?@kOp9pDbRw`-sbQBIFW=EjI!WCn^Suv07hpQ^>e{}0MnPrFhNH|r1Uep#Lr zG*VB0j-GDF*Y9Z6MUAP?RWUAEW^+)*q&Ssc1W_&<6O_LowQ|(na z_O8MlY$*_#@-$fI>9ji`vhJ6~WDaoj)kTApkq@<{d%R4JBGk{Yo7gZ|s5LY-xmP^l zDYN;Roo}bI+WTEVPjr**0yjX@`&P|C6McJbLs$=K&q}=oK1bO6Ec*mYc)l*KBiR4b z;Z`YN2cyLCX7W3hep7Bh_*@gkvHE)GI!0A=oo2JCVDRFM?pQ@owQ+m>57g>RYHNLU zYOk1k(=`)&HGVH2hxdUsEcTx5*CG-Mhg=vw15V7=2io=f`CWpVmh$Vkg%t<7#A&Kb z3*__#0@KxpH@FAq8B=7*&xAM)wzjd%OIrfMlUZl+g;qSGOzY;7KOU-crwLJxCBj)) zVLwpmgc*|g87&~JEGiJq+z1sJ8F6}$KlZAKP5 z928;0ooc5XX&&o0>15w%GL5;|wvuxw-|? zWH89=365pcq0m8OX$i4O<#iebS2$PR8|!h&`*(k~rq=mun4@tp^QgHX=`@cKO;RLzV|tFDpr(PD-rTus*~e2pVP#O$ zrC`qGPtx%pKQhf#%4|SG&Wq%C-~~HXq#exes153>kzD?uSe~ndSUVY20ZJ>u@LLb_ zZu80XqudoI0Q78BQ!Af7rg`LI!@&cXYYaQl3Y^7$S5T@aks>6tkxTMUY?e7$!ua~x zOtQb~W9#G&zl~3XmCtBj4tqnUvYOrP!nIaSl5XKnq+ul-9{P;R*%dswHG0Gl^5>n_-&37lZe8 zv5O6sW+@;23umm$jR4RUvU#69)Ax7+MJ_%Ht+7q-cBQ9c0$0}|3wMywgH)Q=x%4KI z?;XJc%Nc@Km9=N?s>^4ix7kwM2Fff zb-7E=snt-a^n;-C$#3~Z?(GJs-fYxvY<;d{5}=An5h0yMe}Lh`4y^(QpTu)*1VXv+ zkzexg+Nl4}O76c$G9N>4q`Ypsm)+f9!t%{--S=2+~KW6JZ$<<)8Q)oe$6M zAiH&oaizH)&9D{+8=1j&9vWExF_32N6C*{)Ijz-OOyx^lDpL)0ulDUUU+j-f!&QvyiuJv#ccwvTDb7QlM^N8c?4{IYm2evfE%v__-TKu% z=IhV<=dQB_)xs)Z-R}r=^feCmuTesEBXQ6@&ueWq%l8TjLWH%s8uo^?OclfM=yfL(v+P)Ivq17A7}p~L*%h>ouIkfDMbH$fk^voiym zRG3Kvw2lcb7VZ_Q^}x&oV=)Kc25V2q!RS$_3T3)^Yop5$?H)wDa31;LNGQ>yioAS9 zXCWL@@f(P0{$nE1Cga!%VkwEzTDDF%hB$ziN01Fx9IHn{^z92FzaW`?^0y)t3IY8Y zd|R?9Sg?nZnxXC`Hih&Fp8gyA6t)p(WhHD(Kma0kC0(v4U7!FW^r^o=j5U6;|5(FA zmJdHQMuutAQzRCv6bgF9)UT4goDQR(_8I)ad_W$IW;B~ji`gl~OyIV(5vxo)S-B;hf&QJoZ-FEGtO#@pD}wQv!3I1^^Ql7L z4fB&e9R91>ma#C{H;b1g6xP-9HZFbBEIaarL~aLdv*BA+=#v!utFmp+GfHMLB~u3HO49OiAyCF%zvM`|6)_f z+SU<>X*qAIw@N*@g+hoOQ^%+buYM1x*fC`pZdxho*J&lv;TICi2)4SmhK=R=C>btOXcL?Gz;$G zkm51n+G4bPp=g%2c7&os9avCF8Nf`)AM)VHby>PcDEQrxcX^p%JmWAXnaxsapYKdk6eR_va;{}KHFxg8?bd(o5WgzARz^LaS zG+9qf#fwU>dGiw0;cGqJln_Ji))0yDRb>kLN4<#300dQ0ozwk0&WWbjDzd#8(G8}s zo#WZ+idj>Ea^!3`lgulD$xh@q^MP5F5R^5|1Go5#FP^1i+Gn9J6p1Uv)v4mi#-$YTbh6z z<2UQ&)^`_?ks!7Q1EAgO!3>xGF-2WT9ut}|9HMFm&<0rs2DNL{NlgD@#tkLX$)n3O z*KoXc)Yo}d$WqMVRqnbBvt@fj=O`~sXpreV$O7m8QA(1A)?A%)uWznFG+wWhZY`Sm zuD*;I!Jnn;oLP@q74&w*4FQ}gbvS?(@OB@9%k8Ab_vCV0cl7hE*Q0Jg$Hhm4@EYeC zB^cEz<3MW*!y?Qy~v zr&&@PD#ZwOQ*#6;mSU*Y+&zEY{_+^5Xc9zGeJIQT5JX`Rw(-cVHu;{Q6$Rd=yV(%gQ%B3D*;YFnTEu*R`<3FG4Hx;C#+xAy{tVe^RgheF zSe|zk>bn69Gdq;P(@8Cq=vwD;yVHdkn?54Iv(p$e79yr<`_CEEX?6Y5QmB&|y~&^@ zb2VV!))YnF!t22kooUP{_D8Szp9a4x<%%5fstUQ=mx&slU1oZ05OXvewl^G&;HN_) z_5{2|Ky#aASJVUzBMuAB`PWmJQ5U!pz_4V=Ml97)R4;^v?Anye9SM#kRDI9{G;NnUsOZ|b+R|EP7tlh$fL5zG zWnci|@zsx2Jy>h;>n!oW>$F{Ib|^+CP{3>~ON8}B3+&6~tN@JDbyAx70poXRsJjLP zKEuc02z+q|wX8n-$;1CzwL#3__{~HPtkI_fp;81H?Jy^c$AifiR~nsS=4nS>IuToa zp@eztMCQAFlF6Lrfw5kdvdiE1>BQ6ND10)Eo3+RGhx?0CCnG6vb?#@CY~|ZENt3lI z`QZ|FdJdAsSI?lR?`I+^D&L1;ZiywPp5^D+>)`m11msWr z2hcSCj!Luu`5F2d5Gyve^QHo)AE5syXE|>i9ANYt`pC@oU`Ik_p2)YA2E9{AtT#jp zNE1vZo2{FWp!w`h+k47j+xPv>@#UmmKe0LpjE0w!WRJ0@A0tF4=!+WDfQbw4HSL&w z*(~TUlfgV_}AF^+?B7l&g3=?7rOG(}0#B(~i{$}FpU_*T<1-w?hXh9nuyYLkC?o%NCZm8@d zOPV`fqYwL`vuS76$)BGV5FyW~9Czf-b1A?!Wx86#12S z@7s^bCkT9Jr(c0d92q$w#66s^2y2%suh1JrrbIU;O$5<%=6RdgaPY|NtG!MgzMC*Tn;6j`#=aA&Q@QMNB&mXN z7PsP6#O{tAoO5ON14fEGh_l})yC^10b6RgwfHa&3IuqD3y;Gxx1}Wosg&ds~K7p#a zI?F#TD2==;wrHrx+{x#Qg!Y7S)fVIrw#v5RmbS?{pNVA8f)dc0H9|yI+`<$0K8vM7 z??^8X(Dr5PsA_~H$RxI++s`oCpr~3xe=y>hv6Gqv8B=E!dF&BiMR|b)MJg99>IInD zJN9zY&YkFkT3OR%0I*Bi_unsuUE!TWSuBM-2=f#GX-!7(v0LQff6WC5T>F z5Z})bf9FyOnQnpbdI~0&YoI?lbQ$l@Otn9{#w=Dyk8o6Y(`@ns97>qK$QtEXUrXQP z(xQ(TauYmdKqIN91chcc<<&D$0#bFg2Q5IQ%;5c5-NIsvyLS{TTN&Y)GgLyb)T&K9 z12JkgABI%uzB@J5zy|VD=|DmCLX(WtB(3{VpbP>ht2rv$ z?*@YgdiN#y%&130s5<3d${%6tj#gC!t*%Z;3$$AFd#~ffEp?RXPeLh+_8RxT#9WS( zQ-n;PI2uZL7_HiHS*UE5Z`0O;kC_UEgK^C%27A&o_VF+iWE{ zPFo)lJPh2a`j8e}+~5Fgd!7j|K+BwAX}gf`h+$ILpkc>iktG9eLTaC9oWlSt?pEmF z+y$Nlel5kK*KkPVUmlW2){z}FDJg3pNmlnJ8Y|kTg8Gi|ky@%W= zOC)BFUI`pA+CW~$O5C}_AQmmj|8)^S>dB~*D_fa#JHhgvDy__Jp!Qq^inZwm;Zth8s;AhuL> zaF6Zq8wF$Yk*=xt2xcvLYXlAm(Ef7>ed8nq0)9W zssX5N^wEl~d~Am12&)m|)tQC9mXyDq-24YVu3-x6xYRne zk%PWZ_C+97?b;!bvLmT$?{A{S;MuQwllC%S*#Ys6l%N7ju)R;Rg{^lYc*MxmRYO_N zx0PT)x5Sne$~-;rc96B#bM$4KZy}hU5ziZ~b(V1L>|m-|L{(xR07K{qd!Vul|2PphSdOSN6lq`^ zlre7U^}9?XGKiK=&w^~#W@^2x`GM$uYrA9DRdsm3mnC>uURgn8^?%V zd&*{K%trN0p=o^q6cXc%X_kIz&*g0hTc%KjAhFmaFiaw`j4Kr@n`6tQX4`>E6g9gr zj3`3^el8RHdg}RU+9g7GsQ8iERy~z5XAa~feA^V(?;sRL z)l|YZSZ<&SHLn*il}lb%Dr1LVC8fSBx+Rs--rGByOf)aJ;vqGVhbiD ziY=rRAuO0ksdO^CJLq+U@sXZwpQGord%CEW6~v})>%sL=xGxPO%_a0W;kDqktzscRr!Rk=)AyCC^dva7 z63k*|qo%xzSI_1G=-9vy-}BTSLNX#nBFPwUY+vrPLusky3JWYahF~)WitEV}C=g6Y zJk4(~4_fAIy8D$1DMJ)hOv5Tefl79zqE9F?)d}MxN{h43h?1>}7!L>=Z8eHA9rtKA z?y%qgT>s7>huKgxafXUQ=%6z>4a)xM8!}U(o8|^8DiA{%1E8A)MB@T#iHL=za$dcN zZyUu&k)P~>r;0~ayeJ-vqQdyKkqosZYD=*o&X{}{DH|ZX%h62L{&`Q)C#nRSAlk>i zqQsm6@#moVI{XvE4Vhwi9H5x{2P+MW{PLXG89&1ytc}0{x%#2OAtIH*b*dq_Z#?dZ zfeytRVH6TWD*dcanLCYYf#(QSNU7#+Ku-UO=UJf&JJ&FF zes~?GKqA%)?ZGgFVK%#tIR`=K*>r53lNHdXFu0A5QBaVjhZ&Sg`My#Kvbt?zIDeQr za|fPryxf?#$N1rpsI6c-PpzY93aQsOSqKqhl*t~g@fiw63X?Ls+&eLPDo5OM$IR5} zSe$X}d?M=184Vy`>|yb&PPruMo1c42>F(JR#`vj%UHWYjFUK7%0h*sv^lM$kZs3f| zZ@r#WB_x=TH}J(X-Eu%I!#~(XSoRl@8%^$?|64p{ej2z4b-why1)RcSOH+&6V9=!oR@cj6-)=W#|FtFb6h*D*+NNvq3@%uovjEmvNMYh2f7`Y$U zu~jK*`Nnxk7kO@TLFJUl8Lj@P`R!dXcEG7X9ZvYQyZA zoj;Ru^6@fXm&h2wibTPxb1V;}nq;TGGX7mRVp6{~7O( zH%mNatrwe&4XyL!m^NmOU0{eJzWrqnLNRORPFA+~r>eq}n49k76p-#`$6@(7=@*df zm9(;+LSq_UtG<+X^q@UcH5hUI$31X2;_iK+h$kl&+JNk+sILbVQ90f)c4?BA;)Q{~K7d%^VGlo!mB9$;`KV&Q1 z_%QZmqN}{mt9t1fo`=(-ee16i-*m!3i|`LZjogAHahz+cD1;65v%3WgSdYh__&oTywko}3DXGg|O@1x)bZ7o z(azfMoFZVQrirrYrcW`8mh1g~6XKU{o75Xi@3Fpo!sXmDRM1-~)K~*S9l6~4JRy!> zm3}=wI?pE}@bIh3Fa0Zp0odHEx!o{{icz*qp(NA7pU?Xv)F$?wPJwGiI?DA-ungYPgb~tS+%l$kgSwK6uy{_`|3g`=0T$@IfZcs0HWjqNDwQZ>3s8G#>b{u zS;q=bA!D=`J-RK@8Q>WPNFCYRT%TOMx(Z%_^7>iFZhB(sd)D+pdU*dJiv8w0!3lI* zF*BEP%wxPxe$Z#isF98ObVh0*ry<7~uCHz{QT6%aF;qs@F&F?R&PRy*M{NT!tbM0e z(+Pl+NsnD9{=kV?XqUu{JJ5|n>-*8fX^Wm2*Z~UAH-47dH2Q@g?^@QmY10t^oJz8< zDkQMMZ7Giu(a!)K;IN8FEt&t+EuTaen)57){j%gukCE3p1^U8AWi(KKTl{`hc9-6S z!V#AyGSa0-T1I`-+fbL!QDDIUCDR~nyH`ZxrMb?G;j&{`$t%%3@Upeu#KL6#x_R1b z&s(~NoCQO;h?=sr3{%wH7N77GPw;`v)`AGBbhVQSb5YSJ!Fb?xAJ6AXp|NrjO-udGMJ18RW%gy=myQ@SxePNhAIFJ(0Lr3uc zbQ1T6kC6>xGQti)S()RM$4;Xs?saPQ0Qhg+gLD3c;DzEAJ1L?j#_~e9i&ol&naWr` zAqPogzJKGEP-%NOHe1>CT;F)SHx0SgRBm8@Q%`GQm2q;=Qwk!YZc-i=8KDu*T8gqd zcUS)>^m6}vm7jXi-R<8i+>uA7xi;#;q9g9;mw8qQ|AU3-e+BWsf%|{8Zy5ePj(Wn! YYY#-nK8zwpp0GzzQP7aDmNgImUvgZOxc~qF literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/images/security-control-deployment-methodologies.png b/windows/security/threat-protection/images/security-control-deployment-methodologies.png new file mode 100644 index 0000000000000000000000000000000000000000..4f869474e2d300b35c10865af53d35096dcba75f GIT binary patch literal 21811 zcmdSAbx>T<_a_(#8XST{fZ*;<@ZiB4Y22OQ?(Q1A@nGFF-e>~B-Q9va1PDQcOy@hl znwhHEsoJgD{bReT>(+aH&%5WH{@i2toLF^Ld8{{NZ(hB6g{7zwZ$rz7j$na})7X^LySFf;p|9ue#KUZ45 zdZj(2C@ZDyV|p~~ZLnFnAuka@iNrqYlr4%KaORCDnHCfICcZO{sNK>*xjL>a_!=4R1(*t!GES( zI&+l&IBeVxZrt^L{&pZ!=-?cdzca45kRxqyuJHyd?}ZD~W@q@}g0X8rx4r9+sL6i( zV%PIe3Eu@a_>+j>Pa*~Vpn5(m{E+!M@Y?@nOX5kztyQ2peL6glveehl zD#%#`Giwt^Y2)GeHus6--+T5I|2>=RT(1F)7(ylsYH)553gtgoP(AN10_T+;#YT$v zUX=#zYMBU{vIh(s=3(~My$e=X)AwQf(@b-#;{qfWj@ISr({9%q~@%W_dq*tq#@ni7h;jQ?~nGT^4 z5VZ6tqRIYGRBP3Dl?ysQVz1K*{5?oGXe5~S7IuH_iY)}k$>lg)drn_(Rb4JR3k#qI zi^pA-eh!>1{dj+J{zOoq=d;k575t>Rx)A)jet@K7ftSg0%=AZ8>B z?iVIs-tDj~f(O0C(|$4=Q5Af#pi&I}E%6*GpH&-4^%%`<*mNDv{OQp&w@&urpqkYL zsh3N8;W2*30^|*Kv%W4&{^|{fG-G6`+ePp8dEoP^_NDKiZvQVbzxeOr039Bdz5Bf? zVJp6=W_f9MV@C4M@}!ID!@z@sCwxUw_=;~;N9Dz@udV+WbOcNVT*z2Hv%M~q)d+rg z`s^#4B{5Ai2O2XIN=6M<_d^-10VpM0rTz&zdbs%N0&K<3o2Dvy9w_d*kLL9fZ~Q&R zN&j?d5-34s`~*P$waAAaL9l0)xrRqwzJh_h`rD|2TK8x(0+1~Bgs%kCdR+7uQNqXD?cRJi{1x?|4QJ1P zadc7do#>ovOe{r9+{4zYo|ByW3me_e1v(@+j8>w}ghJtnfEY*Y5x46074}?|U4(bh zaEpETC*nO$o{Or~o!v=s*5_iBv$gV}pXH-y&)4gFx6$h(!X@7qF{M?4x(H?3d%Sr1{2=O3k?m77A zEL0;ByhXhiw|E>t7ij&DxRpAuALH}=t(w9* zHS_lh508ic{!A;5mtsa@x`X4*LHPsZZqW+KW=g!P;fD9nyVlV8>OVN0?*2URJXRZkA__YRR%UvUz_jTAgcj-?s8M3|dMcujj0uqTSCYg04x&u~->n1~47+2Q}*=u*cGf~)ARbMLN^qo=Zsdmfv4 z(X<}M35%DJNOJAydj*mIl`67=EjUBB74hC@B}lE9sAkLJ#gnZ2Y2X}H{FxYPPZBkn z1NoByM>qC`+Jox>>*#;YKxoPD`tYZh>gj6l z#WM2m(qySv?X!s#R$Iv zhij$17eix!2bRMJ7n@zG9|14X62>pLq`L>fSCdzw-wU5-ybu1i_g>un*Q8(<+I{%6 zgY%%ioB%i&76VuU{yf61VP>$=2&LFdga=7MT$_>!vJus<44i;R&epfzDVf)*3h#P0 z+{Cy3sZa6WRkgH_KM%U{lZ(Invy|Ku(bHzF6skFcPOK(NPY6yCL@quWaHcI<-v)2B zbPi$pZBu1v20e1VJRETb-og#{yv0j9TmwN}h=1WM>BEgGvFc*9P0!@>N+Cy=%6>_| z5S2{y)-mX*O564)A~t8-e>{lZy4e3;jpzHTF9-7DzwaJbYXVNyI_FP&ji#=*#5WK9 z+}MOA&Yvbo`C$I{S@XQZjM~V7Hyd=ofIKw8v(`X3qZ#Me z#r9ph@qf&GL!dfNUIi=Qnx+4ppjs-=&ComcSJ+AC9g)7CTc;t`#{oVqJP>ZAnf> ziyv?fX5n%)4R%jqyVjP`4sZh_EL&))b@YX$Xz^jzA|xq(PkB#E(V?^&3(53rz0egJ zifxqZeOmsR(K@Z{DN? z41pALIdPV_z9|TyUEjI9aZ6R7$Ck#{7ImF>yYLeoie2%T8=B7ab0mP0$s`3NN`l*T zUOU|q`!FlFnDN5*P`KaHN^0u`3n2fB_Zx~3-cKTCVR2CEs!`clAOFfQRM0XeZ zf1inaTpW180fk7n0(U z-h23V##u3wnb04xvlDMqLij7XF}6ae>N!Ct?(fj%5WV$r23uhhslQVK^Ye4R@+n1G zVE-?98sWfemXA|X{4U$7R2(JCQ)vY296b~U3W(eNpJQ>F(10Eg0DtIg%X3|34Gw3j z-*dECEA!b3xiMS;8NUae-D8SiCciRieh8e~`sYF3_d@k0!h`kLI4NB{hRZC93vGLC_6GZvjS7!JuuVEwegMXD4BxtV#K1;`BSu+0Ah*ZVoO@lliRnFV3mWKTXqt5R zx|<;+wcCVOOz73wXr!KyQfsfN&&HL6JHa+7NJUvFNlnxs0i4+=(z$cDk>hw=$NNQV z!Sg2Z&?c=E*K)Htr9@MgDQVX`SZQB$Uz7K6le$B}ik+|=m{#5x?-G(B&WGmuS46L^Z?u^`@PhHVP}wBO?nK|@*PGVzfemLqfA$_VhW~W&`p0 zHfPfD&aezQKpatkZT!P}*GurqxH`6KKB-6xA)B8FpV*nSz7(o9yAKC1ak~Kb8y>*C zS&m-RekK1(T-s5Zkmwt$IA>V}B`6JoRz|GI!f4?1HD!&}0{T3+sjIz@wKfTF;}{~f z<&v14bA}cHM$?(5s3-RqI|pJhr#x!sw@6P;s({RH?VSz3FGw_`Kkd)Rl*Qmf+`JDxsg_oBF=KiRwWLQQ%X-kEgyBW{$ujKggLir9lFgq1VW z2E_EPwzeSX)aMy3`nQNgyjxWtE&R-EN%OJ)G3`5mNSZaLibsJxwZP%CA|S<6_^=8B zkEK-&bX_x{O9zNb^Kad;_RZGmAQ(9$htG8*x&fCp&JZ!2C}W%}+pTPut{Ju8?^vAS zzn?Ds@54RJ7eYhtNFXW{!L_iTPSin}R52f(YT7Iu#>-`F3F%ko(~hAp zvTnz8E6Ms>a)K1-u{ z9XS=lb@*exva6}@*~tXjdpn_MVrWy6YxgW*h4wQ*OGA{>?TZ!Ps}lx4xUtwHS-xMb zC3-+S18)D&QpO^8Sv?O~=N3)nO(`x=)qTG@LeW(D9=DI~wGVjun8`Rb7T~o}k z9zKFg&AJt}S6?IcIA(eUQ2~;$K;_i-X5FNeOm-%dvGR9Qu{f+l;B^%;__zqICn1Lh*Nc>k zC>msGDZDi_TnF67-EnTaS>?e4MoD)0S*JNz7HC%uY*)X(7(4trpjM$*Co0Ll$+KK_ znA{)0R^>DvTKBM2Hy+!g*`KIB=+`FN{_MLY4KVnt~{Nu1@IC zSKX7wp=)IMeMDUFr=_5D6zWDgMY)(L8wD58PEjNBJ^Cm zQ0f@n2d$cc9#dCE$1C$e8N9*~aW8IXX(-eZE5d~B9$CLb*wzw229qT$Uif&()u>(Fk8p;p@6nz2v|iW-+{mie2Nz=8kSpU zAZCYVf3hBchKMH8QSUKD6~7K6Rp3kTtT|?ivD4E6|J%Z!Tp&c<3KS826~%4z;%b3t zY1J1M?BL-LEbf64ZXR5v(Ol5c9Ef0RqKcY-jz?366!A)3%t-~ac`aH~PjfZ5;UmtZusFE7 z*Q=*zS1p8A2=JyyEy4KohX(&tHVj&jrezq-4JD;kKz;1H2iGX#!vMwqLEd69eQW7L z8j^if_dY4J_;9zn=erqC?JE`R{{XL(oXeuF)#t|=AYR!@%Bpf?P6RK9T8sb*b@3JM zpX#p;>ody0d0$uYgp8tm9~Ch9x`FZV3ogot`|Tx9hh3GT`en+7FB@R$8>Q6ldj z=CikKX;=YoSiUo9oixo|GN57iX~+##M|nUE{1hP(iKky_Xur}rI5}`C%Fxog)3?sA zfxP|)$EpRh2~5};1Sx%dD^sDiib~kCCCG)C-NyD^ia3I2gFHxn-Mq|YoGSv#0f*en z_VSrz5?*XeP=4(w9j(MJX1lrfIcj;V6*SWOU(3HLL7%M=;qv5cf7avT9Op5NZx${7 zwQi<22{-+e1VZZGPu5iLa%wi-bsb(f3~UjN0YnTZK(ix;WxcOG0{+|>?rImS> zM3KmN?6MGdG-t?Pi3-*hzi{KVS9vICFU_puXv?73Z}?>R7v%;q0l#|}p^S&w!2_ae zpqj3{zY-;kdTr4StIa>dnt%lZpQLo8v65i+7y5|cshF`#C`goyregeci^n(o;JZEkBe z9Wy&S2aR$)@|HSKIvE1MAC?_5K0L@0aH=ZWP=#+oH5d~DRy#q9_K>a6`@+m`14``W zeRfqZJFH4Dpp5K>$gnY5ho|XyWrd95O;ZR`_y8kSTuzTpYN#QW&QS>(@ue2FOGZj@ zP@ao1@-VN*9hu7Jg%u6onXfgR1R2aq8BS*t_o()%^^E&&Z^u>BMN-1CX2DQSCjg$h z;*b3S*&z~U0YS0?;E!D_1*dk&sqQ`>d?K|((-jfgmQcnd=oe<~t@J3AYV0Fv!h=3B z0b|KJmRUj@)JPe*2$h}$ra&y5sq6LM9d;q;o2nY?yxnfR$y2NVs zz5_I7{m42DovevC=(caQMWOo3xc(plr3)I<-x{BohAPR+6D7Upu~DQpbEHVAY#@g{ zLrYbWRul>h?ft4Ln0>;E#HP+3`MXtMaj=fCQOpp)9CY zCOSvq{b0RgrnfG28AO^TfcD-n`)8o$D1pEAyBG^^QZ}Oeo$%M6>MCac7AHkEjn^e% zUsRPsX2}U{CuBpV45bQ1HWk??h3KlkvTw=}vJ423Ohs9ik@s|KAO+$cOJV~2>B0cg z8AdyjNQq57F?r!U4fltV&{R)J`s(iv!{6x5kfn2Cr|lWa^TDz*A8Xo*budyB70KSj zCgeTMjF_3%XU*>LV^4t?k_3t7GD9XsKwEE(HlXqh`NJQ*sx-5m&mOoIbG!?jF(3^B zI@1xz;eka)-Fn2BFYP{+cdV;KG@`FuxRUhe!KcN$S}jRXwCr_jzlGnj6C~t(+LcF& zVUm>m(&OVa7F)40CzaT504=~g4qVybcm!U1d%HBV?IOxC_EAguBJjs8J$bV0`YaFa zSo+vyjLE=iqv>&9$V3WDu5Gai1zH-C3QC#;N#Z_VAC*1fr9<<`9SLvF8jUAg0%FcV z&^zx)#VL4x#9JsQWsE(H*E*v&`X8?fP7E6`EfmmfDnKAP`3gs$tfL4(w&2)L)5L;A zAiy2(Y;GB`N22(HUVz7W7?p?DwT`o6VwbMGfU%t3Ny!;1(eSXHm@fV zg@XHS+<1Wl2I(FvRi2qmOrmm>)np4Z*Mg{u%k-ZyNITq&*b7GY=3)#Mm__B9;zv#9 zWk>xON!_@xau4-sPjqN)6{Ap8o=ICjaV@AIivJ3VcajMU!Q*K^&S~qRDNU)wW^s0{ zq;*46N5z({6t9%!LU3EaUK-B~*iH$e5vDp(DCGe(eF7=5DUKQYEX-%YF_vIj06Zi{ z4FeS<5@>xQbb>T~x8(~0|H5*km9fH?+gr9a?r>Y6Cy<5$l5{O}zJ8*$B?dR(svm%L zrs>wrBKp3@LRXl+Alsx@1JD>iQCPIJY=a7js$r?F%HpQrfyKlMd&tK+0k8V_N*@NN z{BATcE&Bf{75}qEV8QUXEh*=OVuHpj%*?`dU`Cg+zb>xke1ST?57hqiTky%Q4wbbD z6+1^7fX_Q}tzjirYhynJO=mvI_E6{5HaR;HnZ06#UD8KEq;N)?f`{yPZeod1jMMgA z{Pd?nvQ98rt{5Iy70fhpukfor=_V1HQK=)MXg<_~h!ue{JB+(2Wbvc9yOb|uTB4av zpX9YEPZc_Npb42eG(`CBH#6}^`mD+aBz9pM@mNP6o=2Az*ws$&b}RtpOz9zIQ6nz@ zV<&Q1q#mbN&4!&`gzj^^S4&tq;Zu6AH!m_W2V-fM@qDJqpCP88_$b+r5NZSFv$o12 zAw`%JkmHr=SH+!6;6|utBtS|`@#Up=@GU4Hf>66AydrI#8;*5Phy_L638}Cpg$*$d z!;+q&WoIn?gL+C=!~%CVZY5%%0X*# zikA;?h~4+AkQalN5Sl7lf_BQ00m=ckVW9QQyOi%`pf9Hy`nG`RDw#8p(gB4^Z;>DZ zg!t6hBBOXW6vCE}kA=G+DGiqaRRh3muL5fxW8!X92sokQNjewz#Z#du|0Z@$E)z_9yT7QjRxV8Y5ZV{1I%g9F2+i;JWJVHjz-nH*g#COa0s z%e#bFQ{pdVNb^A8R+UEdAMBhN*&l7H7zK)=6R{ztGI0P|^(1#|Oer-bu(oT`OZ_Ec z7$66v=aQ640XB^01(lqfR2o=fRY#Lw;=gk@S~ebcLvfm0o=uiaI#Ci5^R@a0%x*fh zx2EO%axj_>nr++)aa?J-9hjZ?Nk6B10x%A&O|7Z5n8mwxD7?Z(hyJ_=+v&bLnBULx z%({h9T(29Kbu0&dKZw4K;oU@R+k59;?~H2U3v%}p_}1<1{-V0 zj;E`re*X41`jN9x%>}Cai((P4o8f>m@tUn=Ef+8v^rP`?>!jg#-+UtD31a|#4Ln>I zu3RJ&a(xH7;1#m4Te(ks3TO`kEJa%SX2|BSsjb^BfD#Q-vUY0}XIkPj0>b9L+oXTM{%yF@Zqkq5dc1Ry~SwIdwSERkdKjGA;pLv1UxMd?T# z0HNxn(jNw77Y;o>e%jyuBFErc;FoJ(UUpOY8qf?VE3!s=U^JT*LIafBAU?GG>>k?* z$(5Sl9PZj{t_BRX8ozRKo$N(7v)0ZD-q+9Z_420`^4BkFYS?`XVi+x!xF;8m$B%BO zY7)|0;D*%Zm$1YZ+2oSfi8O&4Wlou}(hb%_D?J5gbmrGqn0z!HaJkE&9uq}$s|Dr- zioH5-M2d2G5d-m9yz=yrS2PH>Q&@H+qtpOyv(g$)QwzY}-zvBV2o!8;=FRuDb|R=v_dFpU}EEO>Tkpn zlX0HWaKgHrLh0+<9A2yVWtw2*n=2;6jYM3~wY*W%d$TO)7gnU$6;{HB`u(?v16em?@2J$hA-v;44o zPPl3HIj%iH1jS4#uT1irrAyh(oc;Z(gw&x+9F&%fd%AiQai?#337O56NyyzbS<~C$ zGMfAhM39iqi?2=rbxlYYi*A@7V$&JkpvZFtjo0mmG?t}p8aI|`05V$vX|3G0# ztn8HqSVl*x#U?rV-S%KzmRGiCYA~gxUl60eUdX5UQ$AHHu2CtGj)I9-?9WW zI^|n?pkpYC7Y*n|*KTsiDj+Hrusl}LcM|29a{CrIy+w6Z!aJ@sIIl;GugvAvQOU@5 zl8%VtlUFF8a)f(sZKD8Mpl!!b>BXam*uaF0;iAXIvs1<)#djH!gF$&LyajY5fK&S^^; z;ro?tjiXIX7+6GW;rG~_L0;V*g(wZyBSDTQOxWq9M2D)QNC!jMQo#1tibd5;3N@+$ zx;S_g%~`Zy-}1D?xwM3k_dezJwXE^vh1z)57YphunH&0 z$L=yk@ygM&gYB?P3kNLp_zF?>0k~u;+c(l)(M3nlmlIWBgfce3VDT!Z_WheMfHe9g zR@jFfPqxZto>uYwC{xw|9v8(&I-KSb#VBi+03LEZcw%8oGDB)c;6oSyC0Px=y(Hx; zO}mivRdqr93laTj^KKzE8zFQ`nZrS>DzYfOLhQ1=m4*k{0R3YX;bJk~>jja(f!LSu zO*>ZJZfRm5(-6s#@_fw^)8(v~3~%BtQ4Cd!6|3T+$K3w%dU!Ae{>V{DpMHY%#LYWc z=m&K2#JVKzS#w0!BK42NdfKs$1ndtLCUF2|TibKl(Mp1mUq1F*c6^Os3(QKADmQkv zJ5ELf;T=B&%NY_oYqt-4-a3)X?ruB>`c-;|WllJdhI~~E+_+_ims2ENsty2&(HdX( z?7X8xBE6*qU9f_QKrsndk^N$NHXstMk1zUkV3#u~ER1pKn%$f-aw)Um~sDT;i?9 z$=}KyZY(D-R()n`SHF2*CO?s^`*sa;O7rQ%T54&1%V5jB9~O#wN?2CAxKwB8=E*cya$QHcVUCc#&la+(Oza+(Ch*`M zR+Nh~nW<+akNCS!PgDtHY3?l3J6tRj?d)UP4o^g!q!HTrzXph6bJ!AL@H<$_!&vaB z9h8z$RLr}h-hN<3H@L09b7A17921++Hgh!`@_;?i@!J3E-R))7F$oe z^J;iK-CqHERzVtgGQ*oIGV*An90DzySQx_I9#ZCTcmw zM`Al|JcXVbvGvW7Y|Hh|k?FLV>u7InqSNpo(v=}0iKUZZH$`GLdX3N40bOQ?W)&-8 z>i&K50E}lj)$?*_qm&C5n^)v9?Jz=2H94Xg{~K`_&7~(b{cKUJYZ?wfZj=chDV}s8 zz%dedpku2_5TR{XHJcH7(bVxrl!A^mL%-k6u}r;D&@etF2UU8Ri$rXk)v1^u=N*=2 zi#&Z!G#y*43X;p)rk=10>3~D;Hnr+ci2U`>a)3-I@+FyuQ_UB54Rb zVwGEAAnkU_dKP8Oxm&JP^lxheI9YL5KTG0D(`1v}L_}t~ljHpsKdf0=uvPge<}~4c z-on~S?>J!YOor^wW|wAcK8X~DK}@)OXJ_ujBU|U)FoW=?>fTlgN-9DWr(DQ~7K5xt ztDHB+fJ5_loKWYzPAG2{*`V@dY!f~vDvkrxj-E2852Qm&DU>Z&_c8VST}*(4%5`t-Ih&yVNl^oW!{HsX zDyQo#4m+gr&ypDv3=1HG2`AZ4k+Sa6d@Ex2(GlZ%wrPDx{%ozwbl>|5(2;DYSsE^9 z`&KMtOwaja#QCY%E9*ButE^D~-{az96v$-?Fkgo*ob_L`7qAEqRt~Xq=JHI-bW)Y8IkD( zAhg$;{ZT-HJ0`Kd^?BkSoP#a1>QbB$3piL<&nPp&Kyv=SGB6mu4@G5v60oH;kNJ|7 zn}H2ClX@g2ycp-Vn|Hgb0r4jd2f2=XgTnUermg6cWXk32;A`W!Vo`t5sLt~duc=+s4Bw?v-+8go=&+jJBS&S85r3?2V>SeO_mss*&%VOUh zCMS;`G?WV$wabmN4Cf9c*;j1ki!1FHJ1gua#Dp2{P%mLfRe!8BAhz(bpv0au`WDDt zWKk?cLju5SLPA`@K)9~zos*U_n!o|0-yx+}WTT|cQeKYx3aKm>zFvM~_Qb=v`V-x8 z!)%hDr!3d3-S=_lj=#(J$^clsTw*9j@bXo7_MYJXv$2b1Bj_ra z&giaX1xxx;;`MI{9O=7}yccmh#b@%;@F}hr-ziTT$7h?e*_48p^l87CN0pa@bb_2k zmWA7@=js<cOsEXogOjd2W8md3rtb0y`5_Ii8@}uR~nN44*QCaA)*yX=9&J4@OXM{dL z@{S&ymiUmB8|s%RhI~)zH3CvE0}kT1jHIl>zMLfWMYr`H3VY+bPASCZvD~aY@?oYh zh`G0?g?HrGG#1T7j>EJLDS3>B_@lqi=GB(pj%-ViPsRYBTlK9F_f@#bCYE3%TIvtd(8WMwEXKm~ zz&9m%v_f0_FF+CPV;~C`PUD>%!tXT%OZkVO) z%znDfnX52vcSV^LF|Zoe5y69nbg-=RK-VI~DGEE*=s@H(Wg?8>Q>&O7Q_t0vd5;v(hT{Y~)h$J~*DqF?l7)3>zImb`)KAWW2d)B&`Y zydSOo74t&_uWLxa*b8|5(&GM$Ml@(27(%VsiRu(VVH*K#{Ph%M#3cbR0Q<@n&YP$Ar%DUx-~{sGn8Hr5(eh6O1PcdMZ0tJv z*DHjX&=NST`f9y)E&FlJvqbd52WPDH4#TLIvS3N7IV|w{wy!5vgoyS?XQ=)-tvM*A z5LX{Es$y(0?sOWMA24It0hdPV2eUmd+ioKtK83%M=66(*=U7tXDY$#yR zV)w*v5|Tg@_M&UnpvX1=9BMx>>>6u~6Y7?x#r8qZWdR0nmSL zFIJ~~5~8FZZnD2hut^(SPTD>_WoI-Kh7eC*pQJ`&e*Kl;Sfp;-;jr<&GACh*0!p^SL6EmK%LN5pXFW zEhW;1Th9zI9owd<37TgVf`8+hu;qy!Vz`LVYn(J@e(C)B5FE>lGqe@~yLK8=dA%GQ z1gRXIRAg8bkKmj@z`A4nE0|6xA{M1Wg56RP@n3!+M5pTndMDBb@^}2u>Nj@Cn6jv- zX?Bb)dL9EaN%#OS4T!x9q#;STQG-@g&i0B~Q4LLRrzj0w8ZMhYd#8pGL-b<&wJOON z_}LU2qg02uZqdnNINPug@_ekbvqR;{o3Tiua!w3WPJOonh(I4BTv9tJ{R%60O+jj= z1b&QY#dTALw8(^_l`Aj;%{(nf2d4o|nzGjAh%}wF8eR!an^%8|ZRvPE*iRQ@OUz0a zcleNX&6k8>@zM;7UDZ`fPay)o7z89v&8XAIQCAMZIY?tBwysTv;*1R2X(i zA&A2yY_PnsVe!v=y>Xig1DB1fwc~0(UAoRWy$s^p%n>0q z(Q>`ttt59Ee#hXdxO~VQr5PC+; z-jz=?2xhk>C|v$M`a?HD^|N55S)~t4-ldz6C~7d+$;2UvFm`WIwALTx!)`NGDG&qZQr@cxxp4L@!}nb`a)Z1%e2>$tWy^1?h;AX)Q}8>-j@;6a;9 z0?yuKF1#;6^(5E(@T_JgWpU_J+cluQAftB8!qAHP>-RMhHO0mAG%w@@NK-+2lu4ud z#n$FohWAS^4?BvPnRcVJt1Ypn*xAZ#4RWZhFmQ-2b{ZO<5JHYHOE*zf)+bF|$^YHz zS??9qqlT}hgUrZYhZo7a2+G3&i>`U6>P-eq9L|>SERnq>{Z1-<}>7A(}&yb$_b-kHwW2lX2e@ZnjXdpz* z9!4kgS~?I%D2^^6x9^Xjf%d8hQABRISI;pmF*Z_l2{j{Y91Ka37^!xhhLJVVD-oFn zqqx83vX~J3{5FuIPT<;GpZB!5^6^Cs*k0NT z46biy7GPuM7P>#O8T2q?`d98OT!;APDx$zgG@>+mr%ex-y->4?`VHKr!Z)XYFFmgO-&g-W)pJ+{m8O9C=n6d&k^NOOmn;ayT+y8u zNy&^1G3+lagewMxO38SQwC39vgq3kqNZ8fMKTfwU|f=;WqiW$d8G>ct%|oAai0(Ljh|9|9#|(DlkEutFVb{DNAa; zgL(O!tw(#yuQ-f0LoUfWGa^w43Fn=Vz0JQl;}hi0oLEZHictDv;b*yKMV}BUVJL zSWKWwNYpvz`6rr~iLeT5A232o<22wi8Q0j}qk15#y zA-Qf1VhZqL*py+nzp^9Gv$cEAuYir_5_9P4dvT_q{OI7UDMPcP&Rb=-JD%71eu*p0 z*)su)0>p|6Xq?gf+fM+{PrwoAqam8Ebo_Cg{s+G~iD~#k1-sZY!tX{BxYAn2o~`Mr zu!6$pW8LvEx8=~Sh4D;!>UsD;*}HkNZ*5;^Iex5(F#CnM5g^8z69{&xlq=vjrFJw3 zXTzbRMkJZ-uYvKS0T?n@zLF`gBUFKp=BLeCz}WUA&TmA=&)VVq6Rz?YtY9TH%F_bG zU{3=i?j{}|H*8~`1qT@z1^QP_lViKGM-nDVq{vWkAOdMO)cF*-G( ze@RqN@3V~{p{1MGoB2o?InF$%BbqAJ4Ls|05nT#(UJUo2XAz(y5_DP}s9Zh+GWF4* zNrUNF5IJS@wIE8xP@+KGnYw)j?QVFwO#UtEWY%XJ7xlZ%lxDs6{`lYzm^-#@1|(eGP0?amJw3U z7i;k7iRBYfD>^Vo!7Ic6mC8qbd*+Dnra$kt{+9C45R~e|Zsag?9O)5VH|Uls@$O&P z*^0H;uJj}}ok0BieeKMH-8l;{j+(m$G=$LO>-E*2o$2fUGy@C#UyfNHgM4l>)=k)B zp2Wl({~|x%h*lm*;RZ+CclURZ22zlq8Fk&Rzc5_^;Rm#i660!u$u9fa|IUcFtX$Ux zuL(crGj=J#n}PmSvT=#gcbF6gR9s+x+{@_uP#l@X?`Etyx`DW7MW)6<=n%W3Ea2L7 z)rXn^49?5i&hO)$XfD$NoVK;k#DzJI@$tP>UZ*J+%;D$g49zdA(!lr|0u>W{{4&VC zO{8JVDnRT7>&pzHRP=T|>@C+o-&JZSzPw!CY%rpUdv2=tmau4PyQ(t4{U0Y~%e_{s zn)e}Cv<6l^Z=*wu5Moe9(mL@oF&*5eLd{o&rZfVY|058LA%_V;GQ@M{$Zsp^fiG_g znxubZHxF#(?5_Y|7u&qnBG>#-UU6fTqs7G!h~h`nKu}_ey4`#ok;_ngtCyK`Rlf-a z_&#D+CgN+vOScBA%qPdAD4;(#(6T`2Yiu#ku3nKq1QC&-R?i@Mg@6;Gy|bR`WCl^U zt&2^9%?xj1E*DG=d$+W|c|K=fuW4|(BD{=cV)Z}05c(Hn+ZnQ#R@x?tBfgO^-3ln1 zF9z*SGN_K|{e|?O{^&e$Q{uUOc17sG!>@7yFDV9~x&5X7x^w~_S{~nzU-nSq@b9)N z8OsZyhm-CSn?}P$MGVazJEUqq8WSN&bK3CoN1$IVQI%O0l+~7CcEQ|WEMo$4NE#M+bhXvsj*ll#AqrQPniZaXkO$-EUQ{fA08;fGTvoKw!_jfgOw!}w9@n#m6{c%6~Q_xUq_4}z@Dp}_4-tfz`Uwk(d zh1bd4U1wm?S%`a5KP+aWc879gI+GB*Ih^M3$ywAA%&XJUF<72ljThJh1I7tTH&f`M`5OxUFYYG7Zt)_szHpX4D8&Vw0;~+; zYK03(u2w#->z@CN6}sELGKzf_wFgy#7Wf*ifLM@BIy#NnALtlJ>`k8b>B-ZADbdV4 zjTdIByfIzV(y~zsJgF}Qo#Fuvf*CC@#=$$yx?Wwlmc(z{1+Yf@r@Xk8&A06ijqoobciTWFj z$>>j=`;af40l_prXY7o9p2Lf=tc+&&)^u)}cZv&sLO5M1->=iy1;^^%l_&B0{T4mV zug(8_m2(gU&x*`>Z}`sbcUH3x>FN0ZCc*tI#ckrl5iM9?_XXu$~I?Si77U*Gn+Dc`nkVWp(bos64psicz> zpGZy0&r5D;X?jFvJG=zT7`)|(d_9ND1p1rZHYBQWTHJ-SvC;*kupFk@NO9G8xvFu} z+8nwvftL}uliyNyB3RVrvElAupr6ke@yoZ-gHz#HHb8%^F+gTDV(k8!x}TpQT?8N6VzeO zfFzYI%8jMGwEcV|@ z`O;Lxm=J)EnI@fuwbDnd5p8L7)=b<@&4Y;brm^)a?e6Tt+>K7sO6W9K>W#=fk} zOWKaSFkOd6luH*Opjjg8SIM9a`l}1{m!COn=W3NVOAJ!`Sxm~6%_n`io%#ImO@E%M zhckBSIsGB}j{$*QMFpW`^_C!8YIp6)f>VVZAH1LVg$CcMd7&laDtE47iRl9lS^*E% zoM$i^Y zyA9!6g%4vgJ=rzsxAr=D@?38GQJ+UCJ9ZuZn+&v4TZN*{Pt=0aJ$PfS{~g-(B^DNE zu^w%zwVw?YxWxmcd+4i8k+rOLLK171tZ^?VuSt1g`3qh5F7O;pO@~f2KfQhyU3;2rNiw0u3cyU zaETR3!B|4Xk^OP~e-TuIvEoIWfeghxPHEm>cC*HJWD zSd?;so}6A88<%?jkZK)B-~QWx&$7gnG8|w_W>I&W+cvOk>8OzxSd`~OUWebfy|?*B zUP}Das&)O1Dgo)^YVTQFqx^8omncZkZsF&JuQIvKU=GH- zK7%G4n0!i7gv;}#-hrvUp4B$!PJ4)Nh$n2b$(9ZB7*o=06*IOJA3s_(E<)9S>8BKU z%++tJzKPyXV|LR zy!hhtmpC9mkxKOPH%D076Fv8wmMK%8YLfqpazaS2{c97I_&0Y;W1y;`%;&=|*vib0 z>&IVD6^>fYhJ(M%YV++}-(&mQxqlDmmQCP~p&^GyIB<1er8ogX$+T+r?OY~1M5VH%BF79*%u-5Q zO>lg9$R$D~*&ovSSHkuw57gr0Z-(@8vni#)ntrfBl_}b@I5SK)?&+6d7S23>2Wnr- zh^)GYMP7~K(e%`<8{+@b807ShB;Vks0=+C`}8A0hfIihlVvyACa^&ZR(;*6 z492>y(xnMGA3>6<{@sDybo9*J+!4I+=*|jhLAl!9ZUFEzlUvb?Cw%Z=vht%*_}De$ z7CC)14;b(&rnnjo0s{M4f2eEdi%FmOzYP;9pb2}LtK=SoUUX3Iog9zOOcvNhvI^xY z0JzNPF?5`)uO4y4uH@8qYx!AguF`56#9kY0U`y>_&z=zRz3jG3RSMquf3ZjsY*31; z!3}|K(DVbi-tgep45hYHNpEb&0;=28@$SnD1>@JbX5(f#Ka}vAdWN(PTXV{d?W0B% zK&#a`=D@hJaMu=gMfC-qG#~gz%$~uLxU^$9u4mPhULE z(PX?$QIc^B2V&tmokG`zw-b%STYi-FMXlyR)l=L=^Lf>VvS6nZQ{Cag$qc2l6LKWR z-)1;}oX#9n6)HC7{G(B7V?&SP%w7f%8{kS(5IR+?Nk$+$mh^yA zc&ruvLyM_060|plU}f?}x`zPbJ03BSvDD|zD_^R-6$bJfnNRkWv96KqitlMi>#8sO zmrp@&kNJj~0?Ar13`%VMFFr3r49Y`N=koBh{$YJk>K*26NBmhgG#VxsV0NmdK)v%D zPYY0}n;hb}+uQA)!*i`|^m;d9>1&$UAe)2lO&pW_hojL%E^4&x)q}}YbNhX=y8S4w z{vp5cR|Z|F+qawi8GUs@upc9DD7k@NlImyrvYd!iv{`(UJ*zjzxtM*JUWT_F2$|s`A)<4twC^GSJN#_Dn-(*}|MB*2cAE!ZUl z>9Xk%tKdG<=j!h(d~*~Hk$#BOe{y%l!2RB@a+});*H5s7wvjeC0XlDs z#(~e^y$GbMMuD4V-zF45=gjG9mM;oGMfW%yf7H16r4bzB|Go#rGm$bQEGVjhfPUdb z^h?~JVhOZ86>_?d{roP)k-Hm7F70Svl@`mVEj3nysg6-UzVYPVTcMJ+ z@7_K+oa`42SRi)&)jQ+)IGp}JY{TvETiZ=tYiwh$C_J>O3JCcpnCQ@iR zO|LZ^kwKfHP;_oqx9LhpXB2oF<+G(VIfQ4O^sYSb=b*QH3tKM8)>^C_1mWBp?rU6l zAJ$HTNcKrk{``4`GMR1xH z8X@`*5ko9#g0>D#sw>vwX~7yS{S7qDbp$>@54*HDp^9{JINMft-uBo9mGzh#Db8P2 zg|TK)bz3Xt6G~#7s~!Xmvu7EfcD7zu9tn=$6nl2V&8+eFPi!k#Vbv-=hSt#^l0R*7 zzr(F~FjLFis)+9~`)3f~WG3>&8Bn=7gtIiTE>H-qcMjojCOzQ>h!wGEDxe6;sfLF~ zqtDeJH;JjXe)9UAiC4)=KX@p&MOF2*IhHsUagpLkP6)PDn)ztTu>54eC3dU{$Mi#Y zCF_j4?!jF3^SS>Rbfl=;1X`Z+1&IL-jY&;kb*Jbxg`}KQv-Ec?%hVe{1BbR58%2>( z+7NCQB&q7+8=aS+Uzoc_<#Nt^e6DlP_q#jii98dMOZI;6rn`Y3l&e%&lWO4CTq4-q8d!MRR$iu+{0_b|3_N+?lKk8&EM*+`84Y=`}0{kZLKc}jk}VMC_=2l?ZT(S6#j%g(D|)vZ>1 zX=7TzXSuv|62(la7@Skaw2Y*vhJ&5S#ce*`teR=ZyO}i{I$bUjMD#4V$;97bDjP(b z%b48hXm;AT|2Yp@i&}$2oE#SG;jpW&`aYKJl0oy5q^Ti&&h*H#0GlQ!^ujdE zOwqUpv@OzPKbdgBle>>JWB#8%J#8sd!|$L2xV``)6Z&T>(fOzF6Hl`4Bd%0Ls3}VHQR7VSH->LDtrPoq#7fQO@KlP%g_c9OC9bL2k)L;0z zYBh?cGhK)b*L2)1yd$x0*<6`6;{gO2yi}`h@E)dlYObSC#jR9+r5uami!(Vez}0r|MMfKcki=|lP9E;({Vkfo-g}IE~RMe{SldAl#26}(;vVHW7LMTV&m z%okL`sVRkfjiBwb!6p&!rq=I4d&0%jGx>0GTV!2Z;#(O*Vsc;=7utdeI3>R0@;4@qoGkTv;d#&B{|rf;%n&%rX6>=*@MHVk2!z8|e$eLbzJqARK$VuTztN z5CFVl*?Gt}Mb z#lhH%R+hQcNn9Lx!0Xgs_jn0=%(P2Qc7S?(W1 z-j7D6D(W=en_=FrWY!Q=OLispD|T*%k=7XmYXrL z)`uSikWj{ARQ_?=XS%nbjB0J>wV7)aj^juobDS+`wR&|!*m*hjvHbvGC+sPnGrX11 z5qtRhX&!z|i5XOYqN5 zBE5Kw9%C4w)oqxCqVma8B~18=VC?%;KSkz|bh7ynZ;9i>&9*jeoLNXiybV3irf+iM9hBVpX>tr;(B9 zY=Rc8RM)QB`iada+sxN%Aoe=DaM zd={d}<#{P0s%f#gYd7a#n>c_>)&O{P#HPfznWPx=J-tz$K^e76l>dnQHN^gp*N}+4 ciN8X@Qltu=Q6MvU(J7U_4&;87mObKs0QCbtivR!s literal 0 HcmV?d00001 From 81ead4235828711eeb8f049e9bfc7392492998e2 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 16 Apr 2019 14:11:12 -0700 Subject: [PATCH 330/349] fixed images --- .../images/seccon-framework.png | Bin 0 -> 64034 bytes .../images/security-control-classification.png | Bin 0 -> 12204 bytes ...ecurity-control-deployment-methodologies.png | Bin 0 -> 21811 bytes .../windows-security-configuration-framework.md | 6 +++--- 4 files changed, 3 insertions(+), 3 deletions(-) create mode 100644 windows/security/threat-protection/windows-security-configuration-framework/images/seccon-framework.png create mode 100644 windows/security/threat-protection/windows-security-configuration-framework/images/security-control-classification.png create mode 100644 windows/security/threat-protection/windows-security-configuration-framework/images/security-control-deployment-methodologies.png diff --git a/windows/security/threat-protection/windows-security-configuration-framework/images/seccon-framework.png b/windows/security/threat-protection/windows-security-configuration-framework/images/seccon-framework.png new file mode 100644 index 0000000000000000000000000000000000000000..06f66acf99dad691d7362ec4b1c438327d65f419 GIT binary patch literal 64034 zcmeFZbyQqY^B@Qz34!45F2UUzOK^90Xsm&zahD`G!QBb&?jC}>y9IZ5-_B?Io84KP z|7Oo{4)p8y>fKwnZdKh01q8`usC4Fe+}>}F>Sv^H}h zGcmIO*$PsewscUCflLJ{G`ZwiZ(<%*+w!0J3ueL2SwX zj%aKGadr}k>+9Sa*X>)$2)1JD%sA2>T_2b+IPZVF^E zvoQmk**ZBwVcGrzYi9{@f;d`2{x639&*T4Q0w`(a<^MCse-{@p_&-xPI*GeLm+>!x z{CA-p)!gmOSX9g$A+|J|?=4q#*Gnn7S=3o{lwTMG)Z|49w2S&=wxgQG?Nw+q=3?g z83Zx~u$k}zO}LC%nT$<2xS)SHd6{^*ps$$%je*=iZc}zsW8lBv7lQzu|8l{<-#7jL z_`ae82r7lfHvhxp{FTkW>;sSjIYKwq{a@0fYG(hhD;p5mKR5ZA6NO0 zXa7aS{|ye+8-FkVqp+Y~{-g5DY@vG20jkgzQ9IOOV6IA~#lEPyr5&xfdSRRNp)Zkg3zYHpczUa4!Ht-GzhL7~UNf_*0zwMzc>!+zTex8tg? z138tR5+}LcrI+yi(cthh$L{L#@UY{cW85qOxj&l72Xg-pEE1lYpP?6jzv*Q91ODDb z6A5Oe%8K|002&37bRp%xfJHG5{ssCw>VJXegb&W>=q7Bl%CAV!q7kQpwFg<_RF3u0 z(F1E|>&xU-b-s%oP7y5C%hz197$%s}S9|uXh33+UiIo)E{#L0`@B7RIttRl&h3&8+5Hh^2HBTd@?Jt>ba@8l-u>QXS5U4 zwY5`|ld(xj*P5w!cXpcfBZ5C@9^x?gs|+4q&rDC#_V!9wQtG5r4zbTFtbh~3f}oOmwwxixm09lsj)0e^}*`FK-9>v z(9p<8S6&@qR#2=`A8S~*f8)k`=T`yv$zN1DiSJbf?Sfz9_nH`5b${8MB8IR6Nk}H1 z{k!LFy-%%AQ-WEyE_-a2-7=Sm=MJbPd#OxkeWOY{tgmAN3Y~A}TX&X8A_ex#KY>r1 zgIR0uPFgS{`SO`Ih!&m7BUJuG!7EQJa@t~wuK)h#FvufU%Zxb{QdH+vA(mPRZkUxw zb!xQ)Z%!v6mRx_tB~A^OCCoo|X>b)6bDIpDaG~rqa|`@mtpC4L08`=(H*8BA1NrZ` z`bsa$`|k+kZ(&gEzFD1GeIUP)5=mbhnY;tn+OFv|68EBe$4a!hM5fwyX8!N+>lR6|p*?T0{qv(FEp1 zn9Nt+luPnPDec})co-=Rv%$s2W~U$PMqlC0HE1H=uem=H=j%Cj1xDD5kt6_|ozlsdr_8`9S7&&SDa0HEo&1jX>Cdk$HMUA66zhftgQKNw3yrRhOBl|f}hi~TSFIw ztGx6*;qjQuUs?KA`v>KZ^)V-!1CfDGZYIE`CW1B(HsE_j;qaJ>xl`(_(NoOvTe*Xq z?RdXFrx5TOOHP?{`dIPB+r>JZY<18I2jKFDy=$w`hDU=#E#!x5`gUF2G5Gd{dZIYP zE9QLj{^il7JWz#-1_O6)bOsF`2L7W4+qt=|FRWTiFJ8+0Ck&u{(y=D|1P+OJTt#~} zWX&aljqzhg=E1>Dsc7S0S`=UFd|iuiv7LBe1Z&<|mpolxTw{RA=@APsE%wFT^`4?8I3(uW#;x>NTwWOY&O<-C+be9WHqywS2P zM#WOGnx<(uk2h&5o_`ZQ5aA*QQwKX%ebB0+_%0A>6m4s}%7NNPSZ1OKQ#9y(LxpzN z!!;7Vh>J^&QgeO6LXEVX>6K;J@%hDKU8%O;Y!b~%^F+t1kPl`yC0k*k$vq8yF)RiU ze>wf`Z6zH&@LnQjbARn!qP6E<_SvI$?e~=TfwwetB%GfRe`vRdc%aHeC-jeJG_LT! z6Upv!0PL@2Dx@nRF6CE71$=~!Gue_-QPr*wW718D&iaoiHaGkM(O9 z($~*lnRK<as`!x$ifaC42a?2^!iuz$d~Q&k*PB2V3R+F{FE7F~iAnK&0FfH~bW`k?x9# zLk5A@c4Mv(F0;qc%<@RmNpwhC#i{-8eQo$ABzPn1$B^Z*Q{CGyKB6I4$4+*c-n~;yj#O16h*`BFj=BtT~#JG;8%zSW_3jz8#rY*+$3}<5wU^dU$Yu9y(0) zZfbs7AVnM{$#Ah*>y|2*;5{yw0Qsp3!akn!-G{%nKK(2WQaq_LavUiU#=d{!;?n9l z_;bsZdCzw%Ru%_R6o17+90xWN%U@pEEp-GC3)R_mMq*nNCHY}C6KArq_oBNG{0`Do z2R|6TlrDK@vH_}gYr#t_KV6KJ^b%pK((`c`lho^proT2aqawGuNqNn=)_ZqUdpO3e z6C^IbrkunoA4J4gK()-$wS4FeC-A*RrhI|IvOWC%J{Hc!NsFEvxoUyK-Fli2AX0dg zHq-8Mgo>K0?I7JXICP`9#Eutc)hE?)%2*m2`wK_SQ2 zzcOf;@h50I&6_jlL3wk1DbwvvpE0#V|93xZnjI^|cc?o2YJcIX_!LJ~V}wg}Zw3Jg zhiP~6vB>&QG2PX0R%>99W8=DX_DY&Jqiyo)Y_z@?o1$RPM$fV%>h-m$DXSSGq+?`4 z^0Et6;2NtSW6-|O{;*6Q(?^dvUoNXSlr|IT<+Ay(@ls)DczwYF;qBgHe5}F-6we*J z*-}s+4{ie0G)Pv*RUyLbDJ}!5t{e>w>)e3qn_j8=T?|6arhkt6T<(okuP@5DIA+x| z_&A;26o!wG)x%c+eCOzt{5{NT8n+9B4n~$P!(FtuT5*Ps7atkwv1hWdLfzrb+8hkl zmLm5Z7Jo40ek&54M9)7QJ`x>0cDk!^H`H&t19fx|lmRJJNr>Fesna8cS}vns8!oOP zG6^qPLu{0o9yAj9YHlS;gWJJGL~~q==;vkw8}jO@n=9vY&cen{CKdb|9nNcut_W_G zaOoQ@ZLCL&j*cj)%GFz&Wt08WU*hBKx8rm3q1!3XHV{Wghlz>T?5^*_sAQ&nXqx$vbcdr#y2+R!@pSZcp~^uw^~l2(mFW!J%CaB z_hzKy5R;yR^kZw?88uIGz3IL%aZEhc@l&5g(+?i?tY0t%_cLSE)-nh1<`M;B{H)W{ z+j+3596@>b;fjbUvGBB#E#YIDiH~rLoQ*GMM_p+0h>+4<0oIJ3I^9(t$lsQ__nnq?+nF?55y}WLCP6*{jchE4q6rTWcN5C+iPpCN zbPLV<*p%qX&5{pz&&^@K=%xRt@6AO@N)mdS$_`N6_KE0#?fOP(BD)<}A(KGG2lSAz zFyS?&x9z){khEDH_P*sh^xU6|WCJGgL|!<2m5vP#HCg0*TDpw#y(OlmPIEJ1ty;3K zSU*3znv%CivD?c+BItHqn;5SgTMgfXAu84C3(HJ$_@J5gfoA>>C3EUIC0&V056u}{ zEA4X&n=f|L(yzDhgxpnLlsS)+f*<9~nf~n7>3P!kg~P#dx()1)tcz;ZB{TILKXZ%o zH=h9Xm~ESj=tg0Mo}%Pa@c^7|$*BPBAitVX#1pQOeDaRZYFKjyvS22jm1(S97)a|E z@poN;T!hGsI(}CNwbY{FhXfU5g0s#K{bBjW<~saH*to_LO-M*wK(P3iI*3U}u2f?2 zwbh?mayn!m&&5!7EZZsGM%~u6S^e1Mg2mronbvc2pKc%a-U*rx?-l_=SK38`2ZIS~#*4i1+ zd$CF`<}1UQ@x89#>g(F#dj~@GynF_WI~5gZavshmcT4;8AS|r+wg|d1jc2@*F`qen zv9Y~eHI_=xvic>8t-I`K_&CbE+$LYviZQEb0D~j4Oee#Kk2@d|XyHs$>uq<6Tl@KQr z;_?PHV?IaxJ~`y#2J|U)}rbPCf)sM^P~vP;(q4a=Hvi}hZz#oY03 zB@#3@Qo(Y?*E2{^`%bCX)r^6@E&dZnFZ#Q*BtGcoDD&fP)WC6l3$*fWTb|)BEz_+6 zpEQ?jAJnn2nVO-a!=hpL_#-^+3YQv;%vW_zSWA-1-=4tK%Nvjgk4kUY zCtc|;$oVp-!CfsV`UBadyaam{Mw+WuzO)Qt{(!1t-S7u>U0D#Q(v_bj^8ONEIOB_- zR&8*(K0Y9BObB>w1yc|khn1#a;8|uy&c$W3@SQq*u1xNP11t^Y_IJy-BMFlL-yh4c zGRi84kk(M2>ej2;&LRtB+0?rBgRO7U6SkKjrwtxY+=#k|Ru$VW1g?r>mrG2f072N6 zQCeSY;y6Y4r~10~@;}M)hJg60OYy0qVKXlG`q@v8-ummy7j?iGk8qj2rfTy;W4dSG zQmtF@iLp-svm`?W#u5Y7pa5aM_$J5Dj}7Zds`VIU)TiQoaY?}{Pn)Dp2h&GI=;J9@ zSATp-eFdOrMJ*_dc&Jo6F7B*A7#$zsC)U6K)H*opYFuF&a^(#UwR&tI2gDS9&{LoZ z+c*O1)Q3I7g&m`EYlZEJzA_K%ch;NKj>I6#5sgG;7=4rW!V2s(>*H|wJQPm_hx6Pl z^{6PB$5mISh4cDEdwtDxtAnGi-uapYh?kD#y_CaY+SrO!4t;&$al@};w6e0}ZQRXB zpvHT@z3nCdepLYAAUH3^lwHyb0Gqpgs`9;ds@Z?;M^{xb&`f@NlV@I9rl+~cngucO zNIR^}D(b0ghs>#SlN{BQ%5P`H;q5-k%Ff!Zg2>Z*&7@~;M8tw}N=hHt4ds(7b{6Cf zIo)K~>Mh<)5`c|)?Zti$gORD%;+WH;gq&z0)H%{}F#$g0KlBD)s$gR)Z+S*8@ zBw;P`vESgd+tUy*_a@CU)pVRpQ%X%$HU^}(kAR);_;ubOv;O+%^I@FMuPgBE$%1i7 zN}4*JE9^*Aj`1x_vjzIP>1WN+^jh!VV-X@)ZZ7m1PM^NPG&NoAb<$>5x}9f4JZ*gB zhL}%Mk$42tsm@pD(fz3H>)IJ{I_OS?#AL4B#N)&y{ET;dQ-8B?*YL{u!sFG@J_*@R zjW~)+M-M1sRRfmBM5E8tINGpYM`c(3zPuR|Ux}d@B~9jTc3d95R*y&S%%|$;X*gt{ zB<@{{JjTF0l>oDJtEE?Gw`_MyU8>C2)E!r~*4|Z>y;1Cmj6Zze=X?)r*o>n@G&AB= z3S196$rxu41i*oF)P7xfYu1~%kL+wt2Bk-P+x@EdDb|Wa`H3~CrJveSY<^e;5>*%y z!V6;1`XDAwbuD*9Od37!a24}`zvZTZ6L4pgopXQcOZUmLzAZlxyp;0bo}Jxzr7~N- zeK~f2#6hD-!(6`qrwg@jceDNR%p(z)bS2o~gTNWBEnYWUF zp7vn`GRAM)Ass!O_m69-)H<-$HTx5kcWXMasY9Np6Adi8nPY!Cy)NZdQ4$_J+8-n0 zuwHH&{_y@GZgz_1&Z;MC1C)KXjyOn;LffA|cg>2scz>jQ$ne_m({Aujob+?di@jXp zm}b2CG`x+xM(Lsdmw`iB!k5cyb3@>51gNzk_h=^vV93oqrFL+g85*Y&o(FQf2?7_O z$TS(5didnI-UJpCRG57N&`QXWL~*iIJWN0u2I;en<#J+I>Q7uCJGnV`r;UN{Wi|{+u$gpvRwE-{{I43%I?j=5-e` zP7Q0>y8b+#PBhc)*MKq6JA={X()#1*S}zc_wdFG8WDrr{33=E(xt|~GU+(1__JNVq z%n`3IiGlA&1u&;<=wF99+&7UkJVL{ePz2-r-+pyIOyc?>iUJx`rs}S+_~h{M-T?)L zk~cxlS}vAk;p(I_0JCw2?Zhpl*rVALZ9ls)lvER~l6TkAgWF~0ZhtNP%SsY=;^O;q zf#{QkrAMo$Fv9MI&HG)3gOm#fJ%+$TOC&(3xj zTbbgaYrOb5%z!$`SahwcW6|AwK`)TW$YL$?>8DnGnTtNC>*w%ZX2Yy^Q@+=3N5zxO zX<4RiD^O%kx6ifRSwNi2M>QH_Q_n!@_G$ThZ-HT6uuF2Z!hZfohCmhcKn4bi{k937 z(^mbQ%)xY@8O2wg5~m*DS?{v~TTD{YEBMG`mfP9xmTXGoIsT>gH8ss(c9=Nj!x96n zI<`qC@sx7>yrB!L`ai)iN`uvKr`ux#A#y^(yTQ0Y`l^^`(|3nc6d0`ur^&4>p@Q4t zsvgUMQ%ZrN$yvp8C~7{!1}v`2UrbGFlnNk*LJz^C=}?(EcXQjPHgNkknr`2u)sc}# z6agsK7KlwAC{%`;UXnze^Hn1WgCP++FON<4<|oZRlJEe|Z{{n%33>CrKK)_SQPrdk zDd?#%0eQiiGw(cZH>P(QBQMg>Mfe&Fim&jl8`Z~O9C41er;dWCx~t3HBKr!2bl)9M z+1O-n;7>)mwo@}jpHl{h`}H;n5@01}iivYUU0Pbly)*?mtfqUa?u*Ee!C@b8HqMoI zL44uzL}wHfN})ldwoTs89`8}}YvVdz(_2n9SbW!6e6t$y$e6;RhUN2hzF(dBxd}HU zUy;;&WFr-la;(!3p$plD_->xGRDoq=>;Td-CaVG(d!=2n}|2N^vYrQI5XB+be)kGbJ@ z8^7`fz3VE#>B&c7Tycv+XK#L4z?&zQb+4CS%n4N+9~`7S0jC17yHpq0mTT@zJ~1& zIp6Q&!-uX5f2Cc-qvr$V!R<&ZA82zV&Vz)NH0Lht%QRU`OuoOKZ^e3DDNhmb(q;}z z)3SNF4P}=%1ztHR@RE!9-JY#O^~Y&j-_w1k^eV32uQ+|ED(CKU zKbLl*!SQmR2ez8yZVa0U;9udBU5um4;loQyG)xZ1M$}0T?hDU{(5hfi$$oKzo;>xo zJ)F7*k=!;P3_74z`fm|v5Nx&0PhP00NiMbbc8!OB^>F(eJRU!HW7_DbO=`oM`4El* zAVeXZ6^Zf3Ov(KnFo7AFL{+1Ahy^~jK4eXDzaBsM6kO=Jec7bxwb^|?1W!8Oij#n1 zU!)oue2f6c7{1oK>XW3xi{x_r?OaETJO3NM+LHUP-j1m}eY&*w5yt_R@_qrZ=<6iy zR?GR#w`8w}%BQbKONhoRV?V)fkoWXck+JhJIo@#U03R!#mpTX$ySkkwvf(9k-wMFw z6Lu|J5SD;#NL|RZf>l1j=QGT+ywx&bB#j8p--0(D>=u|@xlU%TT6tVqSan7>?%$Li z9ciN#eEyxAt6^KA-);r;7{I1`(8XS@*&#+lx5}=1k9zmBO27Zz=y4F}?3-`FTe!Ct zM`*CzZYif$rZz0O=R&p+7BPsgJ15@wIC(Xe8vi3$+ehP;KO>wmF8M0^`q^ttP`|vD zosO@G2@&I+*Db9|%w@yYu7f3hAudR>lu2q;D>Xcbc8d3xNS> zkL1aV|4z34ul(u%{1n)-JVpFR61-Lr4rzSpwdga{ox~v*n~zp1U|MJfv;54r8k!W> zn&Q@(+91sRLKm04jY9rC^vC(V(ntqczO;k{zq(YgAZsTq3Tx*tT@huzott&WdK%`G zJ5xImm^Vh>R?4w))(?Jv92llTGdeeEe`#*Bo~n{6oZ{wGP|fRYlFupoPON*FZIww4 zR^H$lcd4ah@4>d<>L_7|>$}i=ci^S*`8)AMVQCn(tX4w=lkR+N$oDslCEIL)UvvmS zAS9CEpI?xOLzh-aoUyZ`VQpCpKW+7?59{{ydOdN^)J=09VHH|0GjC)M$QVnx240zJ zDTY~|but?|ko)B9S)McnO)1hcqjY5MW+p0Gkj5$%fGyKw@$UNv1TiR<4lr-tmev^R zs~gZp=9;j8_ysBUi)}F@rSKbN8*+3s(r@p273b7;v$i(Iv((jCt#Q`8`!2S(c2zYb z%%}}cSz75S{lbvgIiSw7szR3aoVT(%dCI5Y?5s3Jb5ohFb6JGz3_~}4bN1u` zr;$H<>uD~$pyWS^UnQSx{oozv^yM8DImg>E3IASHVl(xbHen_ z`nsjKQVf$*?bRyjwu%!Wx(WQ6!%?Xz?9;HAtV3dLWAciQ(J=f{-M)Nz@&~({r^VkQ zI4tI?0z!9Rp`KdvVgIOYO*3Lu%?BqqQn}r-3hm02*6cPn&=>r7W{f&RM|rLMu?RVh z8&nvv>xsWT$z2Wy8JezCBqD4UO|<9P#T*QwR4eP28Q*## z-z0*bmNralr6|SKF^L8nQ;OP+QGT2Te)_ljlzhl(vN9JJ#sT@u#1&<@K-W#JU z`gW(~ZQ;D!#K_PmHzj4xvAMo$$mpBzG#YwKQk96pA68Pnan>cR2sthO0QHK4XV1}5 zL;?EUFEoD$quKXz!zPaPQLBV?Y61%~&5su~7{+%uQz6iBuX;)2dY}e_MzA@N(fNbL z@+-{{cfCTiy0g~>Tq@%IP%<=r&)k4yj@hALPNQi!0zF@iK6`44zlFw(G&U&YMF%(u zstl`uEB1YP$cN}m3)NyDxVWZg>wT&YXU{8q(LdM?F_jrM?(HqBC0yP;3h;z8^_1z| zOol&gy0;23rv>X~6IWTt*xzrbxsp&y^!ukhhx!A+qOlmqQF`MhuNY@2^7w8#vtMK! zw1bt9`~k&a$zgD)>6lw0%&0%gTh)F7HpzxzeW}MY)Unyj;Q<}$y*mg@ zpm&R5Z0FmHn5Ywr$1^VV!>_SHwryqSb$*wPMaT9wcA{B6^N^z$DbV5?4(}IC6`-aA z>RiEMmQd`F%Q!ZdcbKyjY_+=#3%0rMj@H(SZ5NtL4cO&>7>-Vrw~xJX`gNe0VJ~M_S#XnG|>TtjLA>aA+XC3w0^GI@@oudHZ{PxE@Lb z!RSB`Ybj|PhqTmNxTBpFc0{BIqQP8yM*Tj~)3d3Raf^khG2rP0lV2ETh|60TK0djW zZhQ+?yPsEEN4wC}3PTn8PPyn84eXhYj@;=BowCc?{kT^6jkzi~eIUR7_Jh=gPj(1HWqpWgI1T@ya!h!4N-da?@(_Ge9y(uf|IACI z=ZK7}-#wn?nbJ_hAK1A!A@Iy;k=8kxM~-sl;eIZT;4G#a60&uH+33Xn-0~gnO^1mw z5wedG(!q%LoY6w-Epbc!a>eD@8Y_K6?JTr(>X&`ZE2C;r+@&o7J`{X-O-)?Xe#Q@Mv8)bokYA(&v9(%ZetwoKAc5Vh3bUs-{SdR%NWLMZ%LYjaitG3oa8;b?ZV^6}LO#7pn7) z52<{xq1x-~`^0^AQLlRSjIRl{#8oWXtI&xnjy%$aEN26Bx5|dgSga~!LY`xXW>WI> zUG;;NKZpA~RdFd&0oa#%N&h583)l;c+f0;_JmRnK(6t#=U!idhm0NJX z+zE_9Mcmn*ZMgC96gkS(<$1V8O($mHam}2Q@TWsAAQ=_)&GwDd$0&W~=C(%&Bm68P z7o7faPRW2WQo#fl(%Kn93yqz2N{4nB=jT{*Tnt&l=@j(vik6e=oHiVJ8xT)?0f7n1 zH#vIcCV;pau=j)t4>zf!i?S=rq4{*N`l4iCc68+exC)4)#A;^ zPy0vF=GJG`Dbk`Sv2+Z3o>n;($qg-xK~IDCoXO|pv#9S{VVgdOdjCc-m9)@Xbru=h z3rpv*E-S!!;jOSVe$8D$635NHrlJm5C5h5&%dXp-Jse)>q~VUAFC6C|Dyf3QD@Gn= zxUo>MuzMI;Zt}WB&h#A(M8?9YcdhGYfu5>Nds?o+*P`EkTV>Ygo$A)Il_~G!hDEEg z_tnmGG?jE4OxV?(A@h+-w{Hnftl!;C01G!rA&=!o7OGTXI>mB-VZIx${&3Mea!#mOFf(3Rf2 zjZ%kdiW)e4WsvWlht1l28jfc>z5dhAPO=WZB|=kAyOIt81%HVO65cpT9s0)Hl-f+d zDkg3K$Mkn)ieYt)dROFb2-RiG(pMV3!KOpK^w5W|GtAfM#6c4H5eWN~qy0jSJ+~0? zkpv4KZ}t5Wi2;3`Bg*^xEZl6oRd%|cXpfiy4OR_V3N~1QqBI8|?0-R3AhIO}1#wF` znGVxoP-wlmJAAM6y=)}rMhdEa2?A$plk?5;1~t2r{E_UM4SrY9Zoht(W~FSTm#{l>XSH z2pR|>ze#Qtm@P%9@;=g%mLYDF%k@2-2~6dQ zCtPYJigHxo4ae_;ap>4)=dcBuKpx2jMAY)pCTs2+2m)CoI4m7{8W^~bJbvK3>A-`T z{kix%OKnZbV7QQFyG60wDOMMd(3-|^OyfWQTF!zAngRdWOMMdu zqEB3wwTYolwSS@kBAW*jf9jMXBoYzf{IDshBjzav&GW&9hFiwN`Clm3jz+kirdT)k z0tdF0YY~>#=m3YOZ3>6j=`$u{(0E0pP14Rp0+K%Fqa27%(?A*o3f7Mll93x0s)$1C z$oS%n@MCrzIiB8I&R1oFdK!J>GX6?0Fqc8(n7OO$As*s8L{qS2m1ZsW zVOU$^;Y2LEMD2VHH2pJyJcURY%9blDc|^Ir4b|kAyFv5Lz4%1FPk(3d?CE(TT~Ij8Z`z$izgCd=8a(hHhulKKYxHKEF&=abbCJ=c3MbS=p7z zC!~NP(=7ILSx&sosX&9ZXE)bNw_b~T;d$=UlJD+#7Z%Jn(UHPC&{~;-Op&c5p$jPz zZ>)w=HkKO;#HB7m!x}oZLJl9QbPgzX!Ej*$aCHFUb#@VnPqZjfeD#Vdd&6%--)CZ1 zp1(hOqCXwGuM>t8rKf7PfpnQr;DW+9uv(1ogJ`asDqi1(j3(rKZ?DjL9uHI$(2*6+ znumvGVQDjrRt4(8AFFQrDc$eQ*x7H~>-^^#CR&B#@jspi9W*4fhK5lMNRxHLN{FP- z=1WJoq-2?-<2B%Ku09`xPju4U`|K-kHuuil9}y@T*?(D4t!Wt1(tiIZ?yDrH#iL_3 zhwY)GL`Bjtj_2$Qwm{{}W_BP3elyKt@SLoV(B&?NEAyJSq&9v)fL2z5bo-UcNu!@a z`i(nwz&wLOz0F3z*Z|AND#s1W2)yrI2-P@^Xz*AF&N`_yY?H<>?JifAiTKCtQzmKp zv6Q{e5xVMnuLs|MYx;hQA_r%O)C2XZaGgnn`P#Oz(g8!4JF^QMh&w~$T<59oZBU!- z-MgfbB@4OOo*zYJJ*R!UIr)K$Is`5?^Cmh3x2r?aw9zrusKt!kr$%3Qq8pN%c*S-; z|H%$`^&E9Xew4Ozdv?1Z;}Vq zOQl`inqfJA5IGXKv_!%82T3JHpuv;;UHdGEO+nInEJ7;WC4-Z!$yH`cxTD|G;tP5C z3aURQ@waW#xcS3x-*BmUb99fiRa>sxuSwNC7|ixk?$TQgT36dVrJXn>Nk)qS}^An$SLJFh{#c-CWXfzD2M~6Y@ShPIj4UO@AWC{ z-_M2UpATR+z}3KMPwczi2-avi4bcJeRu5>o6*4uOC50xNqT{o|X; zZY3)-V}0?qwMnG@V3}YC`tg(#x|47C6Ck#7Lsc(mK5{3AA9wD-FfBGx^}z)|0+!^@ zVLtG>+PaEnx|!btiGMU$ymJ2xMd!vy+v^HF(>riT+)DtH#%|f3$lJ+NQ#N=-8LiWr z)P7fX%l2cs*u&|r{UkXra&jJJ_cs|R%kQwBJem(t)?5(2Zl5pB-ds&0ZX;+Vga>{I zT8z#cF(Zgp=mHY}n|nxRIM#=aLFk^t%;|Xhjkk9vdCuPy6R@VleuoZX38l)Qut(0{*|xOc;5MFA~=7y_-vgU}e;r6~_VKK6If4GIi z-NQ_d>h7<=a|%b=v3BZZ~b4xI7f$y5gob zYPhOP`!UP~tA2*R{L&X*KjTEfvZ`QM^K!4Z$PoAG(=%UootPwtuaJ*#u)ec1qhW+u zbn4KK453^6EFL|OC(XWiR*H3xjBe#CNRKdj9e0(WSew!KyaCK`YhnxSMT2DC~ z{E?s3-nf90xY&%fCKqrzHe~SWR$VHMaxrm8Tm>VY-|=!}ICHEAH%O?oJYvaq(+~9q zyzL)sB1(e$ocg%>vyj3m&GGE>YE!IgWDKula3zJ}z#~sUA4C|y;Oi*97yqx4s7a376~Rf%cajA>8K`#r9qtc+4}?}j*nR@fJGV@! z^lUzLLS%mku&dDsj$Dz3-@$Gt3Z+Pzaw5FudH~H zkn4p1*kCXBNLn(a>R`O`b`XOIH3tnTk_)}B{mU@q2+k--LbATi^xYH|h|N?@>9(Lb zRDM7dLG;~L6vM-Dj05srv)e%Ukb%{>#$JIG`3>sCguso~o;!M8UhDl1)Qs8V&DL&> zaeNsVnkqt`Q221x7wdM)j6$m5kEDZ1;U!(@Xf&?lTUkrB#jJ{7g`TgM-xXSqsdw&r zLbJX26k3P-`sC&;N|%uMxeM}GRMVP(QU%kPcig;!ZS9V5jX{3%=Z_!X-cL00rdh8W zZBI2Rf5CUmLQmgoPR)15+(gTek&@^6eFAM#ki701~R=>ns;H#O@5%4i$jb!%&IRFXDMO5d}yQWGQb` zm^-PXI)P?o8H^@!L~3O%3R%;KM51|;e<#IpSd!fel2P@z$b#xQK>)D-Cl@(@>Mz$K zdQeIF+u+RX#UQev?9U)DJQ}}&NnD@jx~xO%kT5d~o^g(&;HVL_qWm4=2fi1$M3Ck2 z|6r;h6bJt*bxRbtHGrF)6Qi{I>t`Im*l4hPiEB&K9n5q;_d8hSI^lMPY3)g^iFs?1 zrz3N${-M{@aM8@G1L_jCXw2Do`&`bISYPN%)MyPUNn|ycIEo_l`r!J7Jg?=;XEpTo zolaQ=+vR-bxb|F4`_?wpb8(in>`uPIpJkesi$m*hP+1m_|^<;RHFzC zu;8-t5kuXUvN8$X`Ing7_5#!J6=%h!4i|-m;>nhfte-Y``9{ zKMndD*}$X~W?sKnJU?X*Zjl9OW)A;+`DEy+CikIg4cfE<^V8_F#56RA?6QJgc||)k zw6)IhG_SJ+<|)@(N~jlQ7AfwWtj_~4=8H-@eLii)^tf6i4>FQ6Cpu5X*CNS(?ay{5 zcQIi77TX7ua#0}%2sDim!EiopCXGfY>GL4NJ}x;=mQec7`+A>!3GNh^v47YoG+#fedO?RG?C ze-d5f30hW&j0{$}7>r-`^$iXI$k<;^P|-FFNQ(yn*1tHJErgbFu`5e{IQP7JmdhAcRYbR(dDqNs zYkFaNAi}g?$knj6nzD;Q9P#A~oprtc{FGpaFc7}IC z6>wk#xs8W9Ko=5!F1~TgHm}k9@Py_Wvmqr9^SSOk5^du%*+9N-^7|>Jkmv}08mA^_ zuY$;g`1Yp4t*Q7tt#I7F6&9WfE&|Rz6shLp`SKk8o<^dq%y*m*LtNOd3PUsOvXUPr zJZw^*yiVE@`$#t9RPTli@mP&cW!xUYB<}v1zP*Pl$84wqpB0AktOMp{Ljj6=f!)~- zJLTQRPpetjoG%U4JM4C3~&NJK!S~$s9|Qri}j-=M5|C@ot%OL3^!=#z$z%INrRh#o ztQZLmOLio1Mf@3>E^Dg|3BKOw4zFstUt!9U+$%tB7_q}2VOx{3(3Dqf45THTrTwQa z57f(m(jTtrzLq}G{o3=;98zdiM&5eLOviV1-Xkekb@eDeQy=ybr;OfIiFvArKi|6C zc!c2P95p*fx8PS85{Xw-IAPN!ieC9FooeuN&~j7{gq%)$(GSVUT0K9dJ^yKFW}C95 zJDrX5`VMxWO_kDDlnvV1W?oj|;r?a4mpzh+Ji^kun0vf3mwrqwf6SKP-3B|6Y%$Nw zdjhJheM=<2J2z-GlCJIgVa5F)xO|1YYKMxUfnjJr8gt{nwMu{s5 z`fTD+TWgBtZn1umJd<0*kI*i|giUWaXbPE^W--hkP$p;1c*j=Z(Yce7D!ec*$mbw8 z*LX4zEn1z8nL`xhtjLk*Nu^KCU|=y|n7kH9S9lkkQR)*tNpUzQ&KJt6M5J zxLGcT4S!z-MrvYr5)1qyheVs+9YVWtTVsjNpb?eW*Xn-vT&nd2blJ1t;zG?&n76kO z+l2yL=52QE<77huwP1k93FY2)7qMP8#WMSFz0Q=ZoY^L7PZy|g1ah08` ziyUzT#++DGkxo4%VxIl*7J;_NH3)iu9!Sak=U=%3nK6Dr6ZX7z15#H1EW{AQi&2vN zXCpg$Ak{SbKYQN)+N1yMb4N3l5+VNoDX9G)XrdPuy?1MgdQnT)w`YriaWO0blE{0; zyI81KR;SV^&$_gSl$|r#D328IajJ~y0vWSxsN2cJ3Orxm(soGkI|?jmS++<;HnG?X z!py4F>9CuqT4=0gw`o{%846IY6$0ZmkG$FEMsTj3t#iJXwsqDJ*1I61*NJ~0L_s;o zJ3Ha~bz&ecLwceZNzHOxD~Cprh`AQ!dkO9Md$+MlH&# z`E9!rBMx6s*`}eR?~wSUn$K%pTua`dKaqlzITjnMs;QY6m1LPxM#^0~5UxkJ?F3*- zB_L&XS3@h4u_k(-ATQWXa2%~9S<4K!O%83-pVFqxim=p|SIrQpMh|RVb<2eKgPL{PObZy;)kmZ!*6KY5M5dG4 zp0-04NPV!Bb*BGTJ{7vnSAJ+%vP}KdjJ(8%Z6vh;2W?_UfqO^uzTbv*Vo**FQ}mD< zq>CY9ExF{~!kOP2*96F(0TJoY9Y;mjPH->g3l~JcrTCxz|2JUfGlrKfwP2WZWO2E` zfE%{y7;QfK?CTaB8#-$hYMSU;9`dLw{FPqf=$tl&aRnRV2W{DJDuv$q>9gCM>J?#y zUq=Eb-^;$qFqGEaQ_75ISAzHW@m0a8XG<(U?$N5jebDuC=2f3)aE~B;om;QzTKqa8 zXyq9Jw890ToJDUcYHy?&uhcBCBP=(tPZr{@Y%l+Xa-WLvm>f=ce!n*XS5VVdLUH4Z z7^b9&f_ww9B3xLiDcJ#cJnpn+Gi_}}#faE4tE-nO=~Ngr>e4Z$76fx{3YYNIK`>IN!dD2Tjws zjh!a>#kSR`jcwbu(b%?aZ>+}I*tTusy`OpiTg}ew?B3UYan9#pk4(K(o(bpRI}Cs` zx}W=YD4<>RQe2;3&3L9U9v6o3faMMU$?K{wrFQU-n`ITAr0ch-if9=EueT0gZydimD${Ls4hqV7#y>E=$^)4v!-~R`7757y9IM1l+f4{&IyB z`1ebFy3mSLzI603%Up2j$CT2DYRLYBAbM zJ%iTSpI=a1T$G|V^i55k*Z+LqBM|7f&Klfb&!^~8yLFV%XN#vBD1<}my`FUvld~r> zxj6CfE+;|O-4)0?uBWki(VJZ_Q)k^ov+j$0G!Z8g?#}n|bZn{J7eW$f`|OT8+Rps# zwS&z9PI=f811;mW3(6|)m45Rd_gsu-uSxog1et5Di+n^_A8s!JukQ~v1RO;_Cor-w z;*?IR=&zNVKG9l10E2@Y%u``CFq%$hJzWHC<|Lh)H=~QS)Ca**g|=o7w!Fy|9&NsusQp>E7X+f@BQX> z9Xz*r|7U60`tG9Rn+1IS?svL=NF*fQ>o2Zrz1pt!ujjOCJ@VrA6I^eXzP-@N45p)r z$+AEDg6+rIq%wbtiJdO0pM~|FjA!1tg3z1S9QWktGlzSjkJF&bn+gbE`8XT<4{q4KThzQVrx0Tq40+)WIDhT`LtlwRMo&V&&3_k2dpK}HMGIUVf4UYC`I3R~?o;3J zM|!)mmZ!@AyuH`<*<%mMFg=`ET|odw8K5 zc?>Bv6bu{E9%g;(--r+CP5KTy7Sh*kW=*yeMz!{^cHQlFb))~7^jVijL|W7vlEz^& z-(~4D#t5+D66o_L_*3F~pRRk`=K)#!GnupVxm;8SFMW$%jcySejjF>*ndfzU=r{VV zR6JY2@V6C&_3#o&TvY7vdJdRWyX?qujLga4U- z3CU-33B!hGW$&f_-U||HqV1JyK{Vq(rgUq|qBi`?tvA&AkU{MJ8v2XMc{+c{ zp@RL~NprUMD)+kE8UZ~x43ts)L^FRkSKU-pr8Aud7(g^CAbI>|#!X+%8rSFGx^68Y ztEN@#40qS^wjgmmhaR$I);YzhmsS6Xt@cJm@ySP-s*)GC@B6ixh_a~^KkGdw!=`pq zOU8{`7?>daFU_o;&l4D{TK;@7dRlZS-~M|k-qn1YtH5r8TXSVFMVYYnq4 zGFsyTo0x+%YgO+b0bju;M!GtkSggIT^?^54!1TPvdqmy!dM!$d^NWj3rE2Xi{4}TC z(uTR`@H2bVkfxr3+L&?-qbC)X^j)E;Xq-D6@&W_7}D_d zE;~!Mlf|$E?l-QF=C9;v^S$4I@a$Y;XP4{Ms_QA>vdi+4yNPVISd{@4?XmjRY?6co zD9lSs7ie#L=H!J5AV{);!=20scH~F(%QueYZ9?igYUxM!kCM@UY%{VZF1~UkdA>m+ z^^2r-vJ`k0i&;pkWWH|M*f;4^UJ;Q)$%1R(*HqhpmWMHUlunu;Lu49u#us|cp(vBw~!T&n7)eKU48MXB0A&Fi3 z)?n*lr7WyxZSNh^Sh`0ko;9hXu5`#8C6r}w`o2(}e_k>x(iTY{_TxGZ83tE-S^0v1sw0 z2ss`lLi?0rYf)Dr(^r5aavwD^68XEnX`P1K(rOd}uL-CD0K*aI!$0emHnAcy?gB{3 zRkE&fX=l->$#?jqqv&ItEcLUh6(!v@3Xo$5OZkj$Gl*Sa;m14!d&!zAuzzQyVJ4#? z8OcM80xS=GXjYk}9`~ zQ`M?Dweojg)wFZ6skgQN(8GDl>SNS7>aJZ)^>_`^S?W$1QegRaJa`;=eBSV}ll~mVc?^@OgYE7!O8D zOv*$5^T+8N7r*r2u|XeN;4^Yj(wxfiFg{btgFB0x?cO;t1@^FrQuNoa23|}qseoNIO7!Bknb)co-PEUs;4xyV+3pd0vO0F(UchXOxwd*qUY{vtuZzL|LO9 zlT#!m{>`$eh6o>BQVAb|{f;GFqGV98Qlp-TiZe(hhu7(*DWVJkVM;#JKEDRuO>hjB0=&`ihVpBu) zbJ+kN@`jW)0iX=W7SzBM-0X@Zko+lVLvL*S9~n?n4GdVVh~)714=JjTtTgqe7nUSs z;&ZFLrjWWd>A_d*3mF6uv+urX=KSvaU_A z9ardsvl#>J zlxXShhuX}@rLEteC@INnPa}g-14!L2D+;Nz-UjtP+;6?c^X|Z2>Pgo#%R%CRQ(F~d`OTI19Hcy@BnCz{!iK>pB`dncHX!Z}99 zme)jPc~pST-9`OgEK#4@(O~6jQT*-s-P(~z>vLL@)bi-trJ+Zy_R|x_9ec(9!6u%e7uK^W#vc4E(P3V8-NBOt}GB2Om(I7Wt~!>}<3%SY2}^s_FO_h!USP z;QP_{_6(d`FLtZenRZb2_DU)ax8qV-@U`}&y52BXAp%#EzVX?}wN^Nj{NRcj1pu|> zbUL{1>NrZ(3sKOO-7t}#=g+YLc!-}LyP2dhY4w&Ef$81->GO?bGVONjAy5tqLZn1g z)Eoe2PS3|JG);G|5F(k+kB$di*UfRunz;CXqe=f!IF2!ih}0Uv!NEcJL(G=kKJC6; z3D?HeS*q&zr1hbobm?~I$ntO34W+Wtv={>hZnvM*O{N;3k=dMB)o-!b z;HHwR62(7~ruz;P&lGj?Zmk{7d%T z3wBx#&@n4b9#Ca?Ln{#(TMw8_==KvlDa&@sVp6-|bs>a-1G2>f{=H2PJ9j$075scD z?)6N%&t@iVKr8#628ivcVzj$Ubp^a03EnR{>ptzRq4VP@anh*TPC$6Mzua`SrdBG|gwe#5=jJV-JbSWJ(l z{)m)C47BYcW{&Uj4m7=7&&csH*q5O1hy{w{#@PUCE?u9I^JW%bpQ}Q9`?otZ7?`_b zv`h*#w7z9i$37(B4sUU3D4@-LaVnPDE-MMZyX;8dxhyOW1~VL1HK+2Xsp{^pyShK= z1JJ68tTeuiK4enELzHeT>t%D+v z-#M^qn~<02U~6&Ur_x8i((sd9U81$AvVGam(9%*S!rq`dINAtf$Xq_0+Q~_=s$SOG z_I5j1==10&TIH};7g|4yQU;BuSW57x(==iFR~zDu6GO-|5J)*uuPa8le!z8%F2 z?dE7OTM8Fd)mdpze=ogVoy=aQ;9KCbRdkk*+Qgf}rN)B-9c(7Fql|>R8_L^PEjpxI z0DzWLv>t#sm*9;_PIg{Ol&Z2XmPb?c-4Eb#BQM}%IiIM8#d78A}dC5&r4bMxi}DkrEJ}3jrTH@D>*}g`q6aLG^nJ2lw7lMLzuYsnA%93fh%EA!NE{50lnY!F4(yb zQ(JX6oY?-FobzvgRZQcH-u&?Y|T;yzmUqZ2ZH>mzJxcU$O(WPZ#3F$R1u-L=LABrYZE+ zQkH6HW~EKM(#r^EJ@Ut-8@TR)Ll3eH8jblbl7g$GyY1bKXXzT?f;{zXXz57Oojm`P z!d63~RnBoSqVzdi0Cce^t|f5Ojwk6gkMB3ehujqrM$Dhxyg9h7cV{-imtqWdJ0z&? zKrKmNnfS?`OjDif=?ajW0P8J(+L2i>GSbHBV)cH0#4vbw&GC3OWk#V`dbb|TC@sT- zRDxC%8bd)6@Oo)Fjyo7h%$L=|>DR((VBq#*elP~K))U+aMQ)dT0JTE7!fhLdnZ;jE zR^Ex#_niiu!s0@^-VO^LGZ^pMsQ-C~Mv*1*cmXixn3$g4J6>&OwbWM+0FK)!?N{VI zfzRH3gL91y-yB65{e!V7cPMVxgWSLX!=+#(1RJ0@ZA+xnkc3%R=gbx^ezJFTanF=)+jbAkm>u6+5kxKSD~9XB(S79AgnaArc#P!577 z)mno6-$5bV$OknBio~Y)Beh*#Trq1<06m~f`{&-AJ&HJ@p%KwRwUH*3dKyHXe82eh ziYj0y>xE8pz%K5cBXWB&RN23NlfD}kN~_!)!*PYu;!YbgO57Q*DZBj|k_l!6=`#M$ zBy-h|258(Cs@|@kDKdL1YCwq2Vv$<|Sbtc%S~4(q8+8}WP# zNV3JE44&+YWlaa*PfpcAh(%Y=-@XiwY)^}qRqelCrtx6qsxo{$aFmz3?IN*TldvaG z7XU7ORJ7JNhm(`1GZs`-&ZD0*Gr+Bz+vWNo=?uAWe`xnBp=jQC_gghkWH@}A>mi{0 zJ)uHHb3Z0KIh{^#;~pL5eAGfkRqIH7@o;cly<6OH;kGF?H1{YHA)KMHKZLZ>tmt@7 z+VHD_1TSQvuCpwtylrPSwLUwWoku!&y@m9my^7e>zxeJg%}ge)94?( zlxy-Yo6W=8QA;IZUiy5DZOjv%R;sGL*B0X=L3+QHHa0Wh+dcMIQ}8xdmJ>smNk1lr z-f(}0P1dNzX~KNp4s}WsROzUgz;eDzkX*2>vaZ}9J(h2%!C|k{o%s`}sH-a%s$eE1 znlo2=Z;T}V;d%|ScIHI45pSU4)SwXIq9;gbEt=uEUN&9@&F?Ty;g(FZvB3*-Ns-_E zX#);TMb*Tt*OT&e2?luA%F`~iHeK)E3rVo1>+i>dgV*u|y+{2zRMksaw!#&bw_uQf zu%*-IQf7%m$*1`UiyD%ki_}Cw-{mD?7SqozaD2Hmpg*xudl_4YrpHfNdK`aSX0Uzw zVr;;T)W=2JH6#qp@KNWm{^#~XS*;zZh;gm?j_Y0Eee%=ua<*FS4m-D3KlR<9{!qD^ z$K`?`$r%QlUW$XVME@ajLQB43fA9IT`aaR$UteZ~>ui5}F+0us%2X8LFqwA1Y4wP5 zmhUHMcJ@ga&wK-PPES96L0@rO6p(G<{&i$-uh8#CK}D9N&BnYqyHp4 zy*U=k9(LRY?2;n}Dp&lL*oj~`njv#DiXi?^AGt2AMdN#E&!zRD*zZMRTl-mh_ z_1E=WOf~&5E$%po0|+rcpJhX38Q7D7cYCqyddjDoD=Rk`L^Lo=W8B6P_%PYr84T;s z@s;u76%Ky8u^i|suos^$LHj`uAk6-m-p)AbykvIg3<-RGLuPC#POKo@$x4eP>Mb-( zV~u|7HvEv7;KxjXW>xXKOfj@1k0$0$>mb49Eu`3SIwvn^4E}9UKv|PliEG8kgakjD z%AeDGu@zd^3*%nR72#;JJB}mu?k|unB7*<<8lDf|^&x;vgcoUD-5z@bg^wKO=<~;l zc6TrjUEp0r7#ax)K&{jbF*{M}dQG$bqh^YGy(sW>t!}R_ll;LoRuJct#>W{<4tM&{E&o=X3CcR#=Z*a9tNED10O zM;lqaf$EKv{gP`o)gAFC7BZav&cF}I^%D8&c2dimErxHf$G_u^`Ldg6?bI%p4H?$^ zmD!bkh)~kl*iKax28FLbf`Q%ocq5CU+i3W^f&wMoKA1thEfGssgbI+a5cwh!CZ~_) ze2xK>%ctEnJK!;7h`{fkT0Hi^;+G7EM8SdKy zK#85~ayiO84W4Lae{$UYkp(DM2dy9_^0wpDpIZlzTBJz`KE7JMoG{z=@K=g^c@;v# z*fiLaM1hreJy8TuW%RG%{V1KX8V@{>+v6j+Q>nLvV`K=;lQQ5%MHuHU# z**2%kTvUi44w)nawRrxy(osjdwW~Dy8(MSN>YBo__tomS21}kSiL~NQ67$oLX$C0C zJ=7lc2Z@U_4mJJ1JoL0WdhtpG#cg(`DCr_3L9u|>@IdBfC6AA5bsOm-tQ7y*tA(dc zH6<&{;QfBel4WB0aa_&S8pLjwhrGv$9Py|_s9mkJ__GeG0m9B486Rk2@Ymcko%X1dc`SxKA2ym!%A-Wp; z{c%DD`s|nxKM*PQQe(Vao!L*N2VO*CKk(^&>?m1r>xbDl^S1KxTFwCl3L-@nS1N1v z(%6<2Oy)WE!-K3rm!SY?yhnNCKDZetxNIiHoX>m3oUoib-`ZSF=c(Zl0yS}QYptRD z_2TEn91m*sAOTQr7zMla*-8?i_ZSG*yFH2)G6Oo4;kfZ~)76&sjt32J8Y2Mc@#5X| zn!Ov&LoX@<$b8cF6V_%RD@60qN^xO3f;Arn^rz(d8{tWU$N-O{4$@qB3;m`Dk9+{-zX*b`q zkwPpE(`U{2&Sms1ft<;f@blfaLG1#};C@Qy@o2L!W0)?Lvq9?)_AlFgIN?M}#+a+3 zEM1MWS~12&04c$OYN8COalKrsIKFF%<1i}QM@^#DzArHB5%ITpcH|`*ANP4uLH>R*HAyPAr|4@M{l7Aj=^C`7@}bd|q!=%F^RK#Y{T-j#g}F9aog!Z!^|9OC&lP9ky7{ZxosxZU@E( z+RiV$vlN`Zt2iXinp5lcAa{p-Z&xSpHFfFkM#Rj)gPg!vr`hNX(CH6qR)1Z5M5+}CDcg(}T(mq0$o zDihRZa$6kC?AsH#4Y4l3PC-LbHh6;=d1}?~4A-R!&N+#OM$MF$!0|{?kwYu!y_r`- zq72B1(Z}?p#O`Ow&!Gy#}c*&27`)C{4XtmdLH*j=qC@OCoJde1y}) zG`Wo`&ORpUkJi${(CphY;-zEoms!il>qDcFC)$>YnV2|hoKvcsOnjdF>zQdImK!qO zp*l9U%%TZOfHJ$bPh(@*I%7<#zCja{$Bl7$8GxJ*p&?3IWk5o6-c9i-4>AHo-L8-H z1X+NOg~Jj|ubnP7=h-QhBV+VmP!RBy&Mlx~4IPZT@#ZCfozF+*#joEVdzq}F3KroJ zT3=3du{(>=kzsES?3eU=>87XeF2*|_KOC5$r;%Ct1>m)07}dI?_VI95bI9;&7i;DF;c0qgRd5SlZkJx)<~W0qe6+?_=(KnN%$VK}w6F!%x0xLp^J@|Dt(CYD;e>d> z6emW|p*}R!-MLtb6Z@W`rfmAbRGt@S2AELK5^gB6(DLg@SUv7>O)fgASZwx$<0M-U zFezd(h6h03La=pS?pKg}JQ+)BCX>aLmBz$Tnl4>=07n>!&eI%sHJshr0_1(FLW_`d ziKT+D-qvKSl2D~N?a}ORf{P1OQZ_CAvI6@Hn$O#??6w;bfBYk`IL4tY=29*7d;GRa zH(Oe^ZeUtl>1Y;yDWG0oS89#C+>e7)RU4eBG-lg5{HzVJ)i43u>{rQLmpM7{Z5M1= zpYAH-dh-x}(o`!ADrFs_($eN7^U#buAJNsiycq+no(9tgo4O&q+EcG&-`CM>33-jf z+b7{SQ5*@b^vT%i^zdN6O_1SQG1%M<%4K&jo|_0V%8}zxH>5C$2tOtwWJUQ8kX#rsX^v)|_3~uAULzNXfPUeyhoFr4t11XfhLM)S~IP zN^ZnWtar|x(T!06c5#V{1sJ0XVvlJ~pj8C-Kv!b`zL|#*^zB8?|lSPoXwqrE?|9$_2GsYcQ=Zhd-=JF>%IS z^M!D5F1`qtt-Tm@6PW#w!E5)bm5@KFsz#n`m?b)|d3t+Pj2bD9;fXHE*_dUjs~cy| zh6E9`r4$5NuU@^jUh-eG*DP!EFvk}b7K@rRl5=r6N#fune;&1qcV(YiCtdqEd+KZRhNzk`g=h;8b=x z&fu!H^qOvRV*fu0K6%Vhm-KvD2{I(i@k?r7Q4Rp;r-vwM9RnpT!>WXRs?#6Xgd2-d z%hWDE249PZAbYMbCtKaS*@2_3mMmJeajtt#k|!Uo;t?TeJ8}PFQ%tiP$pD-WVb`;z z%287O;Jf}}Ax04S6p3}?;5PY;v=En$z!R4-)WH7RC5?@*|Lez4>yX1iTqKTPMFHa1 z&#E>j{V{A@+|nxJu~fa5eCMl0UK@NOZ*-}Qchypp-OB6WlA?XR4e?vJEIbY%WiitOC-Z~#{`uloFasLP*X-HdpcDFd|Rra5G! zfn<`yU{a2h8wX@QR?ZLyl$~AscH#aIL22m*Y*{K?-1I?g{9$g3Qs^_{<+}&n#yp?h zzi%EnFueEgpcxO}2q>wdaLaT98{r`2?8ZSGpMB+UA9ML>`i8>6#VI|UiQ=PEEDtS2 z<=O9?he7)Vp5$7-ZYq~^rJ6ApUI(>}iaKgtPL9$&3qF!q3r_&3?#QgGJiJfNG8_-e zrPOLopBhkAWlnph-sn>n$$9cn^bgw9cId1=9tF#4dL;%c6m?m|tl#l5CBi@Z+Y)Ur z%>BXM4n4xiDr=&@Q8DmDkMpF@3nMjIy*ZPe(87d@E9igOyS)M-emEWC)34bBP(`B0(}<8uu`98b)cozTK=) zJUjHU7ri8KeeT3S3)Hup7LCN6KT|<|dLI`HSaLbS9MjH0@{326kOa8R%fB1elcxR= zxLzF!IBt56WsVfY+}zDdWsRmXVSl~8cI%`oU>3AA0Nj(w{ft1iL}sQQA!u;T^8Mx9 zg)1v7qKS4eay!k`r*$PiD=ksAo;Ial?ZxFQLNh{2!t{HK9n{8wuaHl~v^Sn=r=gr{ z@Ppp82Kzo5*7(0Be5S-e*g%-@N_5m+^*G5tFy>UXmO~v00oGRZ#gg1**V4OdbJZwc zzbfyetH$GtTm45_x;xtN)OXGMLYOnLn`P^6gKN7n7zVo=Yi5cP%@aLc5Ei!W5Buwk z?@7<&5jmJUN;Uk*3_m&L^b%w&Q6P|hU0M&p!6E&m~CbN2t@9O_B&y{ ztkB(n+{D-zK>imNJG|dZ-zLt?;;@=EA3wWZJ=dO3MQPGw6)&G<7tS#t5^@SU9m$m_ zpP4zC8Ju>&PqtLsU((X2wbn;w!TPcVGyKR?5w)WKXWrj7J{nvspl5yRpEfO{n6wD{ z@S-p44}P*Y+~=wQYt>Z)xed=H!u1zfYv=tGDRXXBK=o1{+ylL7Q(be%jzngoCEsXo zAgjiw3F5-Y44rR8E*rWzn8z{|B^T(ro{evNI{*i-PzI6CK^>*^o4c^!B>X5Z!?9CQwsq z+OAf%{eH!&ecbpJZ#Jq9d~(+v_izlsNM85YTm;6eJiq*9smNu3pI1FVf?m~J!_hvQ zV-Z6rBEsmwnxflPf^{Kd7@;F93_d?ykk=Tk)$g`l(JS3vLMF!S$nhWAtwh&2Y|pIn;z66ihzuX}*M*14eUN zQ-ToYbQDIGsjC?$%&L75!mtc90wTJb_gwSQD*Lk9Z+V!&Hfvu86}cGmn-qj+@V?Y% z{O!f|AO+5B&Y9APR4pDoRv>IbY)>XvrS9epDvK31fDl^JAIplE#PTvCVvp?a*Yija zlW3A+@6=UqjgO#*YI)SL=}ZbC0$TlmJdMzjk@eq_hEH}rPkHM6!E;I;cV?LPY#XRf zx5RrzMRRjs@G4w%H0HK*C9&|Mw_3WOZEj8pgM?ciGGG#UyfVs92x_a03f`tdvCjxU3)6Z{d_&G#kzrp-#BqMpj53mJRQXQdZd> zA8Y+-o%ap=;P4oSoo4whmnU2(l!-NXCkdyFxab>?&wq4me2V!WPIk%LE_#&sVupVc z(tadmqF+~hT>TSeTy~1c>Fi*b*B}fEXVqHrIfGcKZuY*VUMz0gu{m>&2jfI+_t+V5 zGHM?)Egw&-dw#^SQ5FG2W-fYf&SWf}DYc3paO)I>NV?h$_Ypgysh&T4L^6KZ^absU zr*Rr4r_g`ut@8e)V1{8akX{Ex-47(pisL8nLjgo)O=B^!|BQxQ!W;%0Cscp=o9GOr zbAvq<4vy&Msnk?E2n$>3rlW4UMn@`tvq)P z3c8;XZPU@QZm);N!|y%Z_c6Tqfpx?1@Orl!R#cj#tIKwfk!gbqowGA1ek7i_GDeKR zM!gWI?FH*=qqsPWJ`@{U$2}&CDX{L{8}XE9s?%jcw6poN_m3#&-gt@U(Iw}KMu;Zm zMy7R8I9?2LuSn&Gh0+s(uyW$thnZ8hz4W(dwntQ_@~ZPgG5LWvKFq)B3UjoO#1h@Z z>ULw;l@`JPQGH(GqIhZif}i~sO1PZq#>m9f8xd!&pff(Ssi=)WZ|8^5J%FdHDBq_p z9)}H!d5^RO0sEAfyc=EQ%fXHzud@zGZ_&LRON{UI9R>ziUI36UQ7pDs0B=i0ZE&-v zS8_fnps3V8EzY7R*zhZwpF35;q1(fWDKZ&4?y@r_ICzUB+p1dxSFE8BrhV514I^lA zwGp=wV8{ppQAY@+o3g^t^r{Wp1Dc>(3k*^*yMJ)wqi35rhS7P2|8a^^cl^qVUac^+ zT<2lC*~*6FiJ5f3wy^%=EkDl?MYY^3R}q1C;`NY9Zx8DnK~r_F%&MkI&090ZkjhMH zJer$`RFqvtBT<1%t9iQjdnhrltf=V&u%+)j7a^P3-w3`*S`VNh|^>ylw94bkkP@n~wqCuAk6g7|S1r6UG`m$?*d+**Kd}ucO zZI0&JdZIp6Lksl6_v4}5mE!;I=J$!{X*bSAa%)-0>s;e$il3*bnhL3#H*U@z*v6NS z_UGM$6~qe>U#gwTg5-B9sPB~CTz5?=iekF*hW==tfH9RS%bMSd6}0nb$V;M9bz3ij z)+SxEGG{B*s%F>Ve9xUFn!2mUR10zyl~!`vb7D`Ty{R8>i!e?f@=FFl;^dF`*o(%0 z_Fr(prUizGL!p1Of$0+Tq}0e6b_SJwGTd>niImg=s&#a z(ojzV6Tas9(DmJS)3L}-U^`l^OyPNC-VH9O?|0!w5n^uc>b_4nQz{C(31Cr*3PB=Z z>ZMCR8n2R*{tq#dpIJ!@#7T8!68Yr%`WhJgmfXGS<2q+0bn}BH+=`d{{ipZ1uqCzC z(Y_T}e<>(DC=~-rtm`orBU2U=#JD(CRz^qiNrB0~aFIltP6_X9RvC{Qq%;wk`1r_H z8Ay1g@4VbO!2<;E~BM{G6=S*mF%09ZdVaj@bAW3NOoVCh+s#}w&4W_>Mp=k$fzXIp#aPT82uku`PlU6Vmq z@&rKJvOa&oz1{SNf*ecyT;i4_>u;BqZH4yz-wa5uzNEG%QV19+>5@m1lR&ZNOb(sr zJARFm@e7auVLC3wnm})humtyB53v}1tLZ=;i(2?63uMG`0Z5UhI-q}RGzS27WGQy* z&LUz8a(>o87YEF>#0Ebw4k4zewY;4fRU@qp)9)^0`g#Lkdc}U`#9+|awR4?N`h4Jk z^Ghl3B5`wDQpqH-x#AHRjC!FE1AX3GUMzUCO>8^z1Ca1iIpauU3M&z7QUahv!{ePIT5a};s4L`kRezB*jKSl ze#-d`o->l*i$xH(7Uz*<2G6b$T43*~dYIT&@>>5sS;e}0)Oe^sfWLgUa5QfE%x2(d z&0M$PWj+iht#4L&hDyFj#s@mf?&pN4D6Y*!l7Hqc1bIAW@a5hO>`GnsKHW3i-IMiz zb%B2NiMaV?LDtclhg0z%kV7O_tzECmPNQyFqMymbe4hPByIJ|!E1BS!F(Ds+b}>%iS&;#UZDF7aGB+n4iV6sLJ=)2Vz9Ha2+bbhu0zWk&d7u z!TmbXVxxSH35}uOw$?6!j%-Xl7tKYdamv=Tnyh@7mB{5GrEt08cj$jl#NU2>o5ZI1 zQFjuh>6!ELv<1ec)y*sUXU*9_l90S;%4)Ef}QY2r#iugKUB zxzld4WEA@{ONCa5zOvOdpxDd&?hJEZ@`Q^;mNP z2KLx#-eiX`A?l!o5JI^N-$H33zvzdaM=*DQOmCG8gGHG zRSA$d6IpEJ+I?~>;KwS1mBycS*=;-8^YzI~%NYX*!I0Q~+`VobL&{~-v28dmu(!u| z{|``(B&o)yjQ~iT`*|ZHyLn~cKl9_Y;})6E6PV!K?5C19uP?AFt)32?B3ZvU7zIeK(DI;CS9iLI+?`?Y6m5nE@J{rbQX;;S;mHo67zOciMOhwR&h}g|yL}>Khv-#T9f5m^iSS94O zguD<9Uv3v0xE!$0SV7~Uk>5Kl)4Xg+rp58t;`UsclE;f_uhl_ki9z}Zw@kg zt)}U4lW%UGx<7Y;t^HxPAvk&KA4~)m5Ovnu8WRO9)mvg`6h1y&>0AHKSG1ne0|^pk zipMKSfEKCqk&>aLK0Xtlmkg=e@9rOh_G{no(0H=h}(r_PEQc^%&BRo%V-lGbD%wwr|p39A+XgKb-pJLin zWld2~{WGtmF3-tPz1?{W7$+mdk5Uw(thn`U%YQq3OODCD=eJx5ua7E1io(GH5SS=F z4f{*{f6AC-V4V3+Gn|uZXep^{ZrF=UtM9)MKDmHb;)4}~3ylWa5Q{n>UrVakY-wqA znu>}I3nS$n!HaIz-F;?hOk=+|inS`>=X^Du6m7iiBQ_UKR;p$rd^gmHw01-aR8?%d zoUYMaAGlclIn8TsI5)vi8e6{qD`o)rLODr}W{ah)id2%Tw$>T9Dj#PsWMF#{GpDW+ zFOTW`92yQ(Y87==O}qV_5}RY^lhVR$c(xjY@w=S?TiYzf^NK;c+@`Agl{V`f3_2~% zRWI&Xg^ZJkZpsgL(Q(W~C`Y0Fm(NO1Un>J3QRZ)eJBH=P>O$C%{PyBV*)Bz5eRCXNTXZOq6}a1k zw0?HpHS8*H;?2RLqrO+-n53y%Sg_8}dAn_Evwl@4-C&UXv%O@v45AZBZkWjO-zr}i zA`n+mY3Qu019-AjRMNu3h=JX2FtdALhC15%`T)3vHmB|DA+9$&z~-C}RmJseG{G5Y z7!9}4EtMdQGH_}wF$@wmL(WPe2F#+s1ArQHJ4hNK8)|pxc7mtlh5GgYrorlSmnhRw#;$CZFEnB| zKLSwp$YlLu0QAgbdn4nR-z0u-r5gS!oWVR7Mk5-Z?mLbX?LnS!ii|K=gBXm_bMs|% z4R?fy`0HlFpP}FB_NvK_rN0_^0)~UNzaj1?>xr&q?;#FsIdd~0!I?2EQRiC)_wJP)ajyD>lYfD%twL8akFe%sfB|NSInmC z9R!|dwXSPRmlZGuCnui^1F?VJ+<5F?K96s&mra$FfJ5m19sm`gQN$+&DY)@^eeyAM zVN2CPEV17nIu2mG-Pds91G4{=wUJ5F7bi>x8yEVT6xYoGM$S(!d}Khdvxf#mRYbCs zmRqE^?mgaac&3scW`&s7TPR;St%86F4KS%9`Vjo}%kIY!3jbEqVmj_$C`e2Oa{lZp zP1n~`PP8EW_4-;AIObx7V6o5`V)d!8e?b18`E_@V%CKnYU+zF#PMnP6u7DUIKm370S6O;x zz&648wXetgtYZc_c@VFM)sDk=bSgbKOJZTG`I}Wv`a(-#*{s<^7wdR2HCu72xqaLF z-$CngPn4T(!uyZOuBs`CIJI2=^{S}dNHH8UJYT+G|AJ>IqGT*^2*6M!!?zOfA7rwH zACkF!vKB~=AwW4D?RR3MOEQH0#yZvVa1{NT2SSl1qaB`ge7%yj3fRbq zs=)6(83i11Jm|#HUckOEJz>Js0IKs^@-H?_gl>2~cHvGJ zgkG`HVsb{oe+ZynrerZq&OT$rrc+1UsK(JZ=6P_GJWhwG{4h$h$+DHwo@ zwPD^XClbuPq?FqJ`4>raj^V#`3!J_)4IiaaIR!Qbb$_tY-{wb_IndllEB!7Cy8JT|gcRGFd6EJPkIbk+J$PO;@Hn(r;D#+-Os_sRQ(C^G9j zGZbR>qW|=p@alf8Pn|ZPA^HN$-@i<)FlPM^=UP&_#}I)Dq^Sl{fs*`L_6{#Cs(u1! z5*ymm_x*zO>8(J%m|sfYpD@TYYbEP@b+Sp5`Dw?1jX_bfYF(x{~kQKj#EDzum7ZQ~3kyl-BdUvsSeOIosZkh+_noe`eRRq8fZ+OB& z0Ydd<&&{@h})?^<5raFM+kpsMW=Fpd<079N%4%bMtP_#cF3Yoq{!CUh&Ij@PwE z4kWPvJM!BJq#%r%%^5!Q-!-Kp{T=b+{A2iG=@7JuVjApFHw;m>zp;1_kLwLs-+xs% zXK?Of{y#jzXe)nk4lhmdtDOxF(XVO}^}i(kivHa=3$bK>*HV@I;O#zA#S-i8U0&$H z!rxj6Dd$?{&A-@4NcbUIF|aL(Qp=4f7Y&bWFqLKh2pUXBRU{biCR0tJHC&|U%)%BR z#MQtE)1nd;n#M_7ASOj-+7^g53mM8wFk{o3(|bZ*vmfF>kd>86{}KVS3KDu@^6G@p z)s4gpd2l&feKh1MBI3jCaVZGDnfG?rJ@HK`emYVr+`>rvm z&$o%w03WuRXE`=s(B+ql!UgdSpR?0eiNL^25hHHRV_7U77OZ;j&3MbMyA?mwo%+Z# zvnv!^Zdblm41VtMy1`lE)es8Pr8^L(JpCL?lr;RiQY)-^BjDl&YpyHVjgX7$=>V_e zgS%1nA*vfkzGea`Y`4eJ&DA%su;=6qaE>7V_-ISidz`_PbgzgKYl@>Ow4+XXD9t+) znAb#cNpuNe3*V_;DDe~(77|i*PML*@?$Y0b|ATtbg@*}lJ%kk%(!_&D_<B$6a6KirE(fC>l-xRLZijJcx7_L=9gR24)qzg&YR`c z;p98w72Bx(_i_Hn%gq=)FPoP5UT@BdRrKfMHubD?u^x3xDi)Ky$`2v8I^dfoS%E9q z`RtA+Hy18Xb@~-C6Zrn=%D#?VCSV31d*#V>bG14M3Auf^1Bx+T-Zou*;gw|C-Y)OO z`>|nZQ9*44pJv3G8j<#E9{%relvM+}HTuscspqCVLFh;KZf`bkyBwiKp;=eF2NMHW zx_S?1mv1_qgpZps`(P%UwN@t9$k8KXNA^byn zwC$j?PX&bi3I!D=*x*{&4Fku&AeY~QRpo;V1;+yqAq3^O5_|3CZr6QxIL+Mb@V_AA zFM5mosiTo-Nf}hEU{(`dA}i(m#%lx<4mH2r*{XGPvxRMk5rB7> zk*F@88!A`mxTz3rUF>v-u{FQ-_xADl3+FdeajRjOVTDHlV+!=5SHVmOnPZ=te8Kv5 zgf_h@+lFyH^s4XHa^{f8;oqWRH!a^nphn;*x7g;Mh3P|n<`%)Qu{D|gsjZiQG!o?X6`+0h`}W)K>(=Clt1eXT*C|p}e~8ivF=qImP$WH& z+?*mxZ2va#HZJ@KYoT|Ry9l<=KC$8KqBiy+_{LNcIRvW$N>-mQlO{iWW!IKbh9yK= zC!ZbtFk>NymScLd-qGj0d;{bE`y13di}tn8)u*P-w`;bmGh;D0ZJPbV(PI2MR55Fdo;$A7x2Ob&|` ztqXR%ccAaGRP43w+r$5lwzmq4s(r&phwhSwp%m$s?vRp}1}SNzySr0BLOK+X4gu*B z2Bf9CLAty4`~83WbRX<}T^mk@8D_2Z*8SX1Z`hBba|wNOlRk_t_#O63DfXHax>qUw zHR)g3jzB~KwCauYjg{Z!URz2w&mr$jloRyjgDd{JAJe?8&j`s#%t}9wRHDe#(JNp4 zZnr0Rn0)kmhfiYDy2}=P!TUMn8^xz&N13>#=SarM*~PI_^nxSes@Jno-|&9Ui889) ziMQn;8>c{#45pB>HT5Ktx6+{BafD~p^sFnz$ZPs(yq`aGY$_Muiu*+A{w(plYW=;Je90IIRTQt ze}6w{Rvb!c;vkKLO%XhY884-X*%uq6x8y@VJk0O)qP~7|N?7rfVZDDJ3nEbH6a$qbKt#^?_+x=g z$UySiTF`K2%LZb+lm*?37pvRI@luxb(J@YYlTFz^p2l~s{MkBfWTd1dT!`2x(-r&A zibaYNZxQF`PYxSZ39RZ#M4_CVs%7~MR@M@Rlw@SMx3(4+ikSmyt7VXF?&M-5Bf?3A8~5Xa#&Cb$#Zo2o%k^{3FF4(Bkdb#BFWov7 zsuqi(Bj#kLQQi#QoE$K)$8|D7P+A-6uELZwDJd6U{$3aiTYErcZA!29o=Bjn~NjM6 zl%;It+Aseo9*>7$=F(r?R>Ry|f&k52Zm{z_S2|c)pco*DyXm1iIjB21+gmn1)C28& z-H#9j|3W5auTL zP?4<`qn1pp@n-kGcX(J6{T;r3I%E8EH7({Ojeg{qSF6XWTTFX>ONE05KZ-N*g(E+e zgKr3{tntr4gjk}73*OcnTuJxv;M^feNyLjBe&-id<*=exR<F<>aqbF?IVM&^-6BF%|Z5HYb+DUbEBCBPrt<*~0pIIMR)4Ot$5O{ZNXq zI+Q)GV6R>w9JfUzy#ST;(b1cYhK741sJcgSlIcws8jgsQlTUM>JI(g|r>{>sgONPf z(ag-@mayh#8!B2#lFT8fXk8Ih1>cdhn4fNBW1(n})6>VSzJ5^C7#|U7Z7Z$Dopo^u zbfomWP<#6}aHr+^xf9{$L<*BU+cFG^fz(0Xyz5u&y6*u-v@UKcXqy^ zJZ()&08VlCY8YESoHjw_>fY0-mUbhgM@c%)LM;dq>hr1j;3cH^8~^KGv*RT#(^`ds z@?XJJYFaGVx~snehGMFYs*hRrZU4FQOG~SDStSeF6~N0y*H-<#0W}pTlKklU?jNsp z&Yz-{BfcFl9QZ}Nwk0O}O2&;Nwzp~nS3SKm^=4&KN1t)zb}c1sW2QsKM~Kn~ z6AcX)(RL+1FV7`PzR|8n3WtURx8qsl<*V`K_^OV+ssOBj0G1E4*)#O)I5=Xlm28Xd zaN@YDYj7T*y)gczcgfU_cZ4Tpd%G&Z!&#c6OOM|*jUbr~&s#iE z(UYqqe;*qrfFlbHYdtupv!?w6aHFq;$ZKjq-evg*FT)bk8siB%PcM_*zn^?52Da4m zX4Wg^JwFk;Z*SxaK_Ji}EvN{V3LlhRN?jxv0g^WydFU01*42#`7#Z#Ta7W?WMt-f> zTS9|+B4fa;bi_<*YJiRXw=)J<&ZK)$CNYIlmBj`r>w#UToC#=eF$*S+#= z>VhG_ulV7aAq}?oPCR$_Ydmb*W1=IBnx5mec3_)d>RgG*#UhRd?X2#EU9mlEz4<1y zQI!DSnfmI+7=ek*(U+9lPtd@DO~3Ku3>(nCtE*k|m6esR4<6QfY68T{wIJzSNbT)F zYD~^ZeeagS0T|(Q$88uup{eO8n3xlPe=MtrN$Cmkxpr@?{n^;_v1{cyenc5`eZWK} z!9+#nKZZIxpIj}RoOQd5u6<8~7%#UT-E0~?2M;5spwG?WN;9CxL%T-(!+)rAnj*J9 zylC-|O0Dr=hj@Ce(Thn)Aw1n_YiLVV$k;GZ`r`WglZcQh(>FN4Tt-d$Ffpm(Rm7wX zDTge8jLEyVZE0>+iQ3>WLk0O7$#f=L?|?Bo9vczK6_0v@uOm(g51lO908(W=PD`PY*1A_vbNeYOztLp8=^d*+A8zAIZrZg*`pp<6_9%; zp0{k4mPbve`uw+CVweuL!Tjzj>nIRY?kv0@o(HG+(N}UaH7S0NH?t$+4#3dUQO5UN zf&l+&yjo}X&`S91lWgZ+N9a1jC2U{O!%t^&(hPZ2qIiA8f^8ilEumYtl~OU)m9yvM z)V@O0@aUl;l36xk>%2MTj)mr?f_curWQ9EH1SLK!qaa&rYH2;!aU+g1yw7KhPMfz= z`#meDe=j0y=)gDQp;ECnm2WSx>WNjAL&5dXULv16dF1_Xwxj$?8Im>MHZuPt`DY2I zSMk30)I)=5>SvxwhkSZt%jKk>R{%TT7pbx8>=5G4GX4)ob}7_8r5E{vD`^T^4;w=> zxD~3_U8h<5q^TQ2Np4DqBfR5WBK-TYO>2jxSaE$esDl0L)7!~!f@__9@jZSL>CiHF z{y;j^c_yecTlnkU{f~R%1K=Xl6%0(>D^KAOR7d{iUGTGqON|BfgdMk7i;E{mE&T(# z%d6A+oL*eufSdMF^AZtZ_&r6*m6qWVPCb5fdE8bK{Ee^gvqs;-r!Oa|SBE z<1dnkXvb$(&s$PRU@TG{4e1&I4JwHUJe=XpN1+!l9Y-}hk+QQLHh#}y4pAli{#K_V zZy$LA^9ztML<@f{Q3d;XdNR4T-r%)ud<#pB8h6;GdD65n=RMZQbGo*RvWRV9a z$NmO}-r7jSE;8HJOaNOm6EO6FA6=XiS^75;#ZcLo|B^uCdTkIlsOA)0>Uix}C*k79!9{(EqB= zrLfhEbR6_@{rxH-ue#djjdqD?9StX*LtEGv0#M##$q9SZbl?Slw&!Zlk%_gUCqG0( zYyEO&Z9isr0$A!rZ&nwPE#82`y5bvhb>+g|*Y}bciJwmz=BYU zw=}&a-iR7kEAOB<;{IHn!kXrVNC@WUzE%0r@Kad(B5G1!#K#-`bD*Uy$$SuO~<{cHPZaB+pFKJ6}ocU?*+FxbZ(azF?nxBt* z*8&Sx|EWz*X8EX<9r|a@*CO@y0;OQ2R{#Q#(jE$EC(M>gI5GsqX;dVgYl|r>VInHc zP>^`%LLsU79Bs~a$55k;^AizEstaKo?b<9SH&6D=sFXjg@Dhgy3p%sY4L7y8>&q$v zrNdu7=&egmKM^5jXj4l6I6k_PWg7js&%N7YTYvKZIgt(*ajVqgQ z!tHY*%5R>oMc<+zXmujb1}Z&4$DewZ`?ClFtLgi;af>;YX=Ph*dQFo|Ly(HDQ6zbKuYa(j+=H)U{e zrI!jb>ju60+9-g2&y9Az4WiMhQOEW<9}ZNdRa8o*R{8&361ULd;iZd^7b~w_&WwJN zVq)tPI_{hyE|f*Ej5w_MH0zQC`VW+pbmmD!#VvE-nYr}s z6OPY!*6D2R&ticgONTxN?=Z2+m>B5=HnDIhRZ|-G3;);rNKAfI#8iCtIqwB+cO7zod{hbOzHBF>K zJUV>H!6I5F76!3lK~ftuI(SGClfwJ;F(IOvK*s?=K6x)Y-)s9fAvD55ps^K`%CJAiP$?{v)9xNC9)-Xf!eRw zpgH#Z1_=C}PM^*H@$}1w85w(!^qdIWy8G53C>^4n_An>B5+O7mj|`2aRUGcK)E_tR z5>e-5A>FMBynAqU^!uS^6k;6^8vL*1~FPrKaM&ggln7@aGpu@y9jx z3GhZn-+Dg|s=2z-jHR`O|3)ndrOX^aJ%fWuDB*m90L!AL=Jn=%2AN_y@XC}M#+5Pw z{`B&d(**+;7cNDdK}&Olr}SHK0;f&Xteus!aO5v3CVvP*Lsu`X8PGi`v9NaN9)2;P z2M3?*l>zAiTKqg+2aKjb* z5rN<>k~MOiB{{!94hP4;z+a`07T6P{UcBl^El38Pq1fx^%E%mD7_tC1w2Ql-ws$y> z-gkxTjf6iRtCZ`Ft;Pp znR-p;v-Wp6J{sN3;w1wr8CGAMlr++xL6iD!8|ioG)8!Htbc>7C*6P=@)t%zAw$%&w zbL8YzuUn>lR>#K2RlemjL`I4$VqzkI7L!VJ_KP?BXj{B*-?r z8MXp0{_}~n*-VXZU-nXXm?OnUo@AwO-tXCkNVZL~+m;`3&&Tnib$)8G8O*3?%c#&4 zHkz}KfKTnD?lfR^{3Z8u!sCa^kB%uZucK%xD}h3#yBoQQeU}Xfs`Y1^Wb+Z+fSewB z+04q#fz%HaS?bQBMmPQi9tZ1@XlRrs=aRC@SkPwflpO0k?LNuYDBfQ)cLZ;SviJxZh_GiDoK_TZgUJ(^O$F%u$x^L7oL+tOr>IL{;IJQVy zNnql)qb#Y~MUm4fp1ph{zcM+^0L^F?qqX-N5LdxPH)5^I-x)lf2b{JG;oBDP9Dg#0*73)e``zvE?n1T==kG0>t+>Z_M_zAR*avqOv7@`OiEHH%LJKa&bM6wd z{{EwZJ7#_7|55R#G}*2NtAQ*8t20V)f*ysedFH}w_IysJtB;N+#6HEfm47K@%>F}`%Tgab7k0=a7#kL)fsPjf%N?!SCWS^D-W6ho}Ep>wg zb1B097oKpz(=2nD2jPy{M&TYq@qIlzebtOy1ZdFFpbY^-*eBQ4yAP=^|1)*9Y23As zk8ByArj%zA`*Tnw|{Q_*iQ5b#clV4$3&6IJolF`tIIyX zGMFw%s9r=ZO36g{0-w|42x+BXYjt20c5}KUHSA+Dt{^LW?0r7;HKyLe5b9%EMNx}9 z))i9Y{2F+peU52fBboMnSflB$->&Q#N}P4XZBZ%c4HP$e8y1MqVTSwSW%X;EBX1Jc z^u!5@g&S|`m$^+F^Reltht z&(b!SzA{fnJ=5}xQedZpm??)&FFh>0Sk@HczX{<8b@V=+lJENbcXl=^m4#GdIN_)Z-Ic=_~ zPb+;j9K21mXDa-0$53I4~>W!PDcC0vCdVb1>&(IFe%u15Uxu z-PjpQUndNqDFp6AL7|k^s^iBC z)Q4RfSKX5X@>zEhTnIKDh8d}GOtLOsPUQHm<2x%pc&@xo1C$D63*K!dl#&*qFP%Nz z$RgHoe69_q_fE4=OLaK})zvNR6i70m4PjoJ_(V;tywqAgOsqrFR45OLI}q6swosc2Id$(O5Mtg06Di+|CF-HbE>+s%?oz#m#03+99{OvGn|mA=^&MNsf0IhUH} zvh@)}f3B}r`|!=rv-zn?1dc}!!v~@^9{3~Ot&@AL(#)tArLswn)F!QdST#zmPUqO_i~O?NJy|8T zk2264n_t{={qycynuSfYgJ#R)cUDboHBnWYn@y{8eA6DouWzhw6N@siBj8{EmA(Hx zd$O?1%rW;}{jx}8EBnp+2g5AV^QkD_Oa>&MlH6>PIV;!D`-_=)@7+4B=*$ZE(P7ec zqa_PM!Yu2$R9=0!5!tt243;TIQ8`7KC=f<4f!7iAk6)T5Tj%w>R@# zLnej{B!0k7r>0YhS~!Q9??z6>!*cK{l+Wc&HPfu%s^%y3RBcOJ*lm(J`p#8eGw<0^ ztd=P3G|$x_NK4Dfi90%8uf`a(aQO1Sz=t!QWMDCjO*8C1_K!fqz@@~lAo~7&whl#J z-g6bsiaRm^)`PQgy8~#-MrBL0P;hh%C^PH1&-%OXB@3p@_Ue+y>GKm65ldh(y^YPu zxGXA$)D9Agh9M@5h7CJ97#M@)P&Js|%6f=NmrMacGb$31W)x2CyRtd6IlqqkFQnhN zd=8}zyF+hsDdMoGca@~|7E4c%!y8q&twqSjx2?vNY?`9;*&m|YwJLG)w{SR=aG{0= zXOzA7%i0cCg+XXJ1fEDKY#@3kb&c3z1B*gti<+IPMTMFT9`9*YV3MrbT`Z~a^Viv> zL;Sr6hyzqKE=4Gj3?;yW_V>p=RNn@|XF~*K2_0O$IGqk0H`bG}Yt&|fw@{f3$O8(SM{n5nxXQz`)CIhqM3~EGK z%TrC+m10Z^7MhRSr~2rf?IM&#-rp;mpP>coJ4H;N>iu16hqqNB*ftN=3MsVA9u`RL z_0%d(C-_`y6YNxF5;R1VNGD}-8N_*$JFt|c&3uxcntg1@+=867c7k6t=|FA01 z7Va@~;qSP~@41JFbJ+CFwl?-baH6tyx3?s@|A~ z`jj(Si5S`)jPpwS8>0u}wWFzEW>^#16}&`irDpnj50W@abWp_A91H5snhI3>DFg0Z zqA(z?{7Qm`h4_<3Q&bH9$|3ZD8wyI79SjevX{U{1FGL>4(|0M9lhghzt#UtBS_u%4 zw(h0pU)0x5bwqYNR{c;A$|lO$ILEYXx90b>oV8+4A=j_`g5Vn5r!-c2yDS|PukEtR zT{$DrzO>v_x@MfAeUbYGBQt>eLw_^p&{@B!zknw-7R;j94hY%nc z80_%4)~fEr3xTrn*i_+Z#D-qqg(la$XkPWu7> zAU|QvDNHKJI^V(}M2tHUFRuJp?Mh7BFg!R4|n~!?FhNHYCe>x5@uHOi`EU}S%OYMnmLH<$lWZ#EF znDjFQ>F7uY*vaqta{Tb&40X6kJM=;sU!6=++?*HBy1X!XQY{0DFA~0EDLUQ4oRw^N z6>+LE41;Q8yrV}d!jfpUxKU!b%Qj@d+kG|>UZV3jwR3@j%D(eV2^9-63WAti`c|*6 zKdO3Of992zNJAnb_jZa_CE!PK_AfuS+EHfFg;!BImf_;4>r`(tLYG<7a z!b=Y9iHC;(BY~?`vFHdX*5k07xypE@z0MTh)6@HE;`Okh2W#pFjZn*6P+&YnmJ;ww zu_rtz!n@fQnYc2BZ_nT zq;R@+L+4`s?v1(EgHT44n4JZIg$SGS_hF;yJon_x249DSG!i15Fb-ei(J%oLhya=C z=nKJFPY4KQDXha673Cl~IUDpmA3j?4jStbnsBgZGG?NHy5poqoMQCzMlFWWWeTaTY zb&nyT%G1VxqG))`c8E-A={Uf{f;RHjm8V@Fot18{-h@x$^2K$!h{w#;oGb2Jy`fN@ zy^H%G6>*sM>5qFFd2OMvNIero$sm49He-H>WpWMli4ndZ{wg2^-{vaZNywwSJgez5 zda_!pwXjQ+%7TBHeWl$nrQvqL_6)+As`Nk2vnub*{Sf8)vQBr7&#XYzkEV%{HAe#s zr6bem(F1JRRvf)Z|2l-13nI}gzpX@mpvYD}f6jS2mRq3>h@(fDHG|ujW=km&5t%eGc9E^8KayVc)iCiUE)97POef-bPr@!u}VJr)RlOb@awz zt!H(incD_Us#V_9@~up7GqS#Hs!CSpDc!)8^x-mHOa79zO)aUQGzNcHzTAFBd;@*%iQ;tw{vyEbsn}@zy z;t%X-#rzRBZgX_tR*{Vd&eHWg_xFAF?!lGvotGIM*Ir{Xg=TVEsW!L}4;4O0sUZl83%9gm^&s3Gm0LY#QD+`?M~fpl z!pEOa)YdSvxpzAG@BY1ZgByc~Uxj1^BC9q{(<4BaCPGI*{lB?zBiP)=S>TcF<;!e8 zwUwRU-u8VXaDfYR35>Y`1gs+>c=8|&eZLd#DA4su+QmR|;rldvb6@P-M?;|ZdBGcHemr=&nsKDA@o(MU^{9Y3~TUru(h1LAkQk$vYifz-bh zqdDWx`)%$Fe?AjPGcTqPk{lM_?^HI2yOYNmwk-3b>P-u{jN5VJvQ6Fhm3gCx?HqC4^(pV0o1Bd;C0lf{#<6gBnYBb zS01**6I|?xMxJs8&GS@7qFjDcDnwolI`Mv9WxH&4T_!91_lCBd@4JdCoVaKJeeCWT z@BTfyQ1oE|ec?r8z=ze3FC^K>MG`U1$O!qkM))Sx@%Jjc%ryS}kQrQPv2j@3c0b!F zkaId(`(cP@*y^n|`OT^^&xqJx$E>`dHGZ@7Gc5s8K_xaT>&?CqrzZ!c*QR$aJ`Kpl z!3q;ZNP};S4&b1_$T=|1=@~#i$H**=-WwWQihR}HpOC;}af^AUzPIjqty*^A*Czj z2D;5Q!Hv5NboO?!{V}4ld%9D71u5|?u{OhN^7hQ1)iJPT2rCHOps})IrEn%hgYS#) zovoR<7X~da7yB6|N&j&R4`)-)ptA>hv|L#HpN_RN2qK91|LgpTOpWgLzt*-i2)JQ_ z|7&Rb87@+i;(wp_L*C|N|KI6JkOI{R-2d}77euW@>VID&4P==7-{+y2;sksD`&{z> z;j(gWabUr-$|3Qee)>4$s~e}$Fjg~QGw_Q4TBd)COn}CexxVQI@~BWr(>0jzM+c!W zgG&(?D1B$2MDv~x-P^#hIrsO$BN;HF&XROZ7B?4D2MJc$(B9p!p&B&H$%#@6@(K(^QoQ{r; zEMnYX?LB%GSO1M|(^W8gV)qLzS*b*&X#58FYs#i=nO+i^OgB|TL}X(l#I3n(@jF82 z@Nh-ZnX9$+50*h~znx7wdemUOiiSDcnftf>kWEMag4VXBr6sSY3^UwcS_W*<1&+{S zFif&x9x$Y@@=3I)-Sz+e(IN&iL~FPwmMN#2*Xs>CE!O|@R3ni7{@$9K4Bf52o?8Az zO7te#n%C33o2)uAud`G^qV#4)0Xqpz=*8RbFPkL(zipNOpLXE?%gb*5(Pbe@9{9%a z2gik9K559J4ovn#V`PC9*VhC0`+A`=!vpu00kap#G@G!te(HM|gFA{~n}z{j9H7O95$+5~=28Q}g>MgXgU>g=#<8PH$-B z-~0MLR5UK@X=yb$ZS)PYoC3X{*J=HCYip~B&sBddi~QeEG<;_l7f@i*>E9Sl{6?i4 zspl<$v~I1LysPVlES2Bn{Ji(+$6<@Qr~(GmV8g2Cu91_{WZD7yM&{^(DH|U@I5XXb zg~KFT>w3L-b^Jmf^21a)NVp512qD6_Nv^6O?oKI@3fa#rtq{mfRsS`^y0#I zGf}o&Yd_7%AAGUuo)JrqVDB?|Izx1w#qc`?1@#{qmGIs6jZ|X(zRypOyqSj?GD51!jA5~S)=ef@;(Jz6^P3XVPoXHR! zUEq5;rCqF?{V`z%4i2u)a&)A>KOLOC|MorC*UC$|hO(G?VQ?yKH~SO6fB#4N!J5@D@{z?^oUC@eu^h?bGJoghb{T|#!Zs<$HV6*8i=W@4d8#MNlp1FE0;o z@yv9wQBhCM&fswYBH`kW{r%gGOaZn!6nb!U)DG?sj>`Uhm#*yM7e@8w=H_^)z*#nv zYR=BY#00%khK9EGOr75G!GW;<1Am}l&sD!Bpe;>nPEc)KU9YoEd7`}%4W^K;lZo6X zS1>IL4R&ubhocLse>`}%%B?>TNP~-`!-3};tOZ})b*)@isL-mjgIwH&)qZ?OAYGwVHf}Y` zewS3}a-VA8XPIy@AD*IjK$xvOT6Gcr6p zZ2l(gZmCu~yPIu8n)jcke$BXUIo%e2JYl*BPFJ{bli=YTKidp_+l`Sxe4SneIOs$% zuLT7KX=%T;x94ao0uGdzn5bNwjKtgC-mavi6ii(`#{=FH9_8cXt0T)lt}rQ{uR}IT zX)j;^E1FFhh~Y+4>!n)RTy*>j?%uxor+E3E$5!%~759PYpV|Xg5PM-aR~Pi|`wPS% z^EWRLyLgy^06G_5DRbY~-bT**{{25p1E_eQi&Nud1TLhksAyIvsi2^sUHM_|9LgULUS__rR5mnR z22%FJ>spz@CQzH^)ytP!ZW?-=5FnzE#}QP(c{7&u zjijWctKialZ;V6RrB?F5Pm`W-Adf;rL#1Pg2#JZSbZTC5bGsfbHVKbb={Hsu6a-K0 zmz(7Zy6r{cy>bWdd!275zLEu<(a*t?0vU03b=7{@umI$mq?D9EywBMHJu8udw6wIJ zpP!zdo{!Icky54((uUwU*jB8JjMkTXQvgo93@Z@dSSB;b2<;&*>_xYDs=-`G;A0@zKq$Fg;ejwono zST=Q6m;0z#IPQD179mqOUT>K>%xlse3S?Yor?`9G+1c4tnRZ>jRuU~0RqjACJ&-)< zND9R&xrQ|#!^)b{cwQ@i<$BG=7B8Iuw%S6YL)DKTO+QNEBr6%G{Wr-%EjUQ9sYHdX z|9-2k=7^K&q1-A~%4`UDegbrgO}Ccz<;(TWf#fo+ig!v%*?bO${{ByUQ)Q+fKW-0w z-Eiaw5?@S<7E->kU(r5E(585v_!l&m1wSu8=94s#cA4C zEm%-r?{+v}4*;-oS1O4X0FYXt48ZZ&6bG>5jr?!7s=*54P_^4km9DRU)Y_;%vs?ci zH8(dWn60e#Wqy7h^q+Qhb8Cvmo1Ww`?ThUSL1}4eK`5!Le7cxWVV`5oV|WL|l8udx zy7~m*gMD%2#AIY-cz9}nAMQ^uM!%H*d$Bw5-#n%isqD*#B| z_Hd>_nETtezrpCiXdyZ*sXY-m4xpn}818|_#`-#)VmdA*<;Zz!&l&?8+j5;{!lyh> zXJ;-Usp)V{Rn=-Rg;!VZGj6IsGypwGNl5{c=;`UHzP|oo{jIDl3RydxXo7>@WYzQC=o>oO=6ot}LylN)k zqzi?SkrBwx9e(@Uvn{`55?z*5u-maHg@3iRJr*X2a*@RWFabggD(uNowy&?R-{`Pn z`2KxTdipQpuHes~aUpLkhWbZFkpH8{2q@Uqudpcuzg%{}Ir2mAua8%%O+s2)ghtQ5 ze*Frt4GSH8o!@@B)eE0qnLyeJm`=UCyugS$K&X9YW~SKFjj8raD)}UEUg%YFpcE9t z1?7MK`~mAvL`)18r|u8mn>Q|Z7rQ9f(AhR0zI)W@f}f3z$BRvG#Kdx^W)3P}zkVG@ z&d0{W61$Yv-Q5ii1(>ZR;W+RAfGGSiorf&0Y)ZCl3Y(Pcw|(Pij)>3R3QnuPf3M@T zaz5to@4vgd%gV|s!pxDgv$3&}oSe*OJKGsfH&|OfvmbCbk!xXQR-#eb(7-#*@O@$z zU zT>PLla@E|=qSXCxdk!eT=GK-uH<=x;K0qfqIn+Otoxetz9vm`FO=)0EnL+hon6ct6Z_&pM?dX{)_qC#~M#>Zx9yG4-jvdZ^ic0rwuPdH3B}q zMp;TPT4rX2!f~)fgSA;18DxN}t*to?4EDZw12mCtV-DN7+O4COW1!yL={vMdoln%@ z+)t{j07L`OT`d^4;|0+9a(@Qlm)!TB_o9waVk)ZVF)19Nj#cY&0v!pkLm=({lL?n< z07Jn>4hadtLPi)Q0xVGz5c%2J60I`XSdtpYweG;cz>yJUEzpD&DH|wMJF&VsJ79$R zdU`KFL)M-il`Q_Qc1&N zfCnJs4M0EI5qq|-n`>=rqw>F58yZq9oBETntdpgyr}yXF*VveP|Fw&Uhh-H0Pd(Oq z8CHX4SFi(_Qc4R8LpFYa!GJwJHa4ar_W0$p4-o~Wt_%2K4a=#*dvEnB+<}r=X`!l> zh(#fI0j4-UI=Xhw7U<|zGeGfsO-~;H^dB%t(^tgs@bFw*T##=-5hyB}KXkuZiiwKS z1&T~6tNv_c0_Zx>a@1V5;|CO5fSgWPc&((WB~r*_nZrac{`*;XsT8d{&7AI8-C`okyqE24r_=^Y{T zD%A!k2r5btfgm8F^dwRO0xBR)3`HQ+sPwK>X?mXQJ@)k(=iHoe)`ev#D=TZx`Myt^ zYsE%I(a`;tm;JfM$Hz0NVO!?DUN22av1FG9p!TX?xZvUWZ>$SGKEB<%J!gg*aZ%Kp z_G3@<%N9EF93&(p20z87Xua0WHZm|a9(R!e#snk+Y)eT=*(N007gl9qX^GiVKx+RU z7UXNvw=g}(Sx}Xgc;+?9yfNWwmPxLeGKd;emSscl4w&x-aO;6Sfcv5$wyVk&jUb-r z*x^{vJ-0BJD6HsTSXd}?{CFdi$&9AQ^%i2ehn7>XPuu9(Rqa(~t&I}x#&Wxoc9A1B zpd;fXpXa*iOVzGjmr!Z@`tY93`7%^P(hD|DN_6Tf3=0dxvKjR#;y+ zBns$=!Tvi&o|)bFQdd(NJ-ocGX6atKbcv{sUi{fgssz{(Se&rKh50>$!MF|)c$J$C^7tcYE_smC@{>}6KQlhJt^t^ zHy46Yp$obf79A*+<+-g;4?hHNLcj2vVB64-K=c7Z!9R7D_!YF12CfG-y*PK}(;=T#HKSuMDwae11H5J*Ba_>03o*C0Z0;gqo`6{{8z;?$Lm(^4=_0pP;O) zjH*qlFZ%V%$Ju#ONX{$w2bMo(h&SYxvk&%m=Q|pnJ-be#Gid5@;suI)yWL3)D-~o= zXOV+WY(B9HoJ|7*OY3dGrYHCfX)=SKN`)4<`CgopW%=$T&GaJFDO|hIi@;>=6)XmzW-?2OpC2 z`SG>LbM&gAp|MbvssGPPbcL!1!c58%WS6+u*z33u=du;@?DDZccx_zJ%BX2j+O$=I z$m`dyA*7)UCI&9PZnPUS_znQ``Sa(nu#NdfHh@Y72K)lLof&G}s#HiGG@8`@{T2<+ zmC<%@?ep>Rsi>-Q7u3_zY69Mt;D{(VRenA>f-5^C1M}v-TFMSpYG!6;UY;~sm#F9+ zYeg4t?*|VaoQk~w4rD`Tv~BXnA zP40t4q8G*;0vYE9f{-!GXjd@x#!z?j(TW3CeA`akthd2E6u@X;Nn*yjxzTE@I^JHV z18PiumjP8DAGkKUzi-_;o3*qztMNrLy-TvP9MRsg&55LkotRJU8_fb9Z$_lJFdu6+9=h9)v_`Ijs4Us+V@aVTL24jedq zI2~e?w6y0Ki>j95y0SP+s+H*k%>f3<{yYdVu&b*JWf|iL)hZ;|*3r=s%Yd4K|Fhi#AFakpJM_#J@-M%8D9R@ANYGc%OgQ&Yf;3JzyJLxFvv3xU9?p zi?sKyMi@hM_VkR5n4_jW?(g`xh)R7Z7ZT%tgS`j}F89Zn(nhyEPftIe(W3aXViyJ+ zz<+*jF7n74L41kPc z`OnSGp`D`%gqAn9w;N!l85#=Un)vwiK@z`x+riBZGp4q#&S19^^ih0u)OYaLM8$w- z0siO}ZvC~OH)iN&9A-8)R?)t?6$Mw|lv8GQwoT%f-6Q&0t(bXeRp<%O${1IRqoSgG zC~TCO>(?2h-`&z-(leuK`1$#%s;&{ZTs8ex^xS0GpFnl>aEv}vgw)Uh%^+l} zP!S4Bc%_z!$!FP@SZ8&(vVr@h-d*+eC^pvspG*U0TR8B+O^Ze-$j|>+QE`8-f~=fe zac=HIPf4oJaQM+uvjmmQYx^+RKp!F^Nx8WVY_<{x9{)vEajZ1A#`%RG?tDr9=NTKDfw}R{`LXt1`y|`lE$ED$ot?&;?tiSTq^i{0 zouoGAm^={2S19vAf~eos}sGBJxh|_Q(yh)z_`~E&Jdw?AY-!; zSFXoDV{h6wR|j6%Kz+o8TM20w^UF&%Axd=3+O=R(FEGx~)Y-T0Z!vb4{zXm5&`t-O zq0wl{x7Sh`Ny*|Np`leDKayi&=;xFFJ{OgooV>iU0^SP!v)yhLktZ3tl_T?`R~_wB z$QAm-j}}x^y3le>3_pMeI!V#g^z?Lunx&T)akRlUr48c_-NHB9cVd5?o0C(vNe-yy zKLA-H{#GB2D;a}b?ZiFeTnm5%FBCEpSNt-V19zKM)}u8 zb^0z9$w*J>vR~iBITg?p_m$Vg=Ub%Q1gbEdsc5;)pG$v1*T4X+@FLfW*zWDClW@mg zy%Ilp^5pU3kD`6d&CP3SYCtu!*EOqCE@)|Kkw{};NYhhOnYt2nUz!>kE^BHgwb-}+ z7{K~hQY!oKL51k}Alexo(1QR9jnHOgQJBw~V)M<9ADK4NXDGC@Sgz)32)w z7t%~?hB@#w?|bp#XSliQHcV!H{qEJ@@NEgpm$|LM_GyGmiHaqI9Rvo05ta!!pLFSAKoQ(DKV!E9QI>*&gP=`NRNd@1zlgo3wxO=aFfLze;WlFbn zW}j6Mq?Cjcwvlmh0!tF3SBL$C4LoOhDsMJUG1D-l5TSF~bx#siT z-lmr?H!Mw-1^xPA9$){p>Y@*3I-oW|16HgJ{|(kdrMcGz(&LM1$>N#UU7<{e^BxVH zYqt%WFJ?ywo{lm$jMs>77%f@x8XEQ}0+fu51TOZo7PQYd2--qJlY6 z^;s_A62GhEnQ`?t%6V){)i9ckkYXzQmNDzQ7FMw_fG)vp70@5l8dB3Sk-l`Z+mWc5EO#qQ%U)nf@5!F-rl#*B z5;m7&w`|#ha!uNK(UdfH1)Uh;7c`Ofa&J33JLr(_%{bL<~^pWIPA zlStow*BsZ#;9y$wFd72u#>qCDfVxw}7Qb&Fg2BK>7zKCluGd@O;p3~GUXDFs>+5;h z^zB+r?n;zONy%&)%?-$zbYJqu%F;YDLGBchNJItA%)CDvQdv*1vRu3>ZfZ zhKD?4b?X)WEKlRf`*RhazTZJ}&MEu7_$^eJ0-EdVyZHJ_8VB41$Zy-Wt@TF%7~4U0 zGVuE`35jse18`90k6c`%YzO_u&JJ&7(S|(*G3i5jIj{ugJY3KZO~G=4TU+;YLAHKA;(R((xZOGkV9L{s3X>`{4?az-; zB#ra#pHE!`juqhNkEKxda&v2&m;`=(cM}%YOzqZ=7}0Z^cqIifWqf=JA)&RCCWeM` zuVw*@us!dc=5cQO^2GzQ>HJ;$V|*wjEFtsaXlq7EN%yb^tyFpLUAflLT>dkFZ5eRF zi#!eq%vVpS>*%!9>((QQ;N){_pFeC-RDBvDJlT#I2au&7nLvq~{q(OIyS%HK+)Ly$ z1nSMvvi1v4DSxH-IV~77$t@QMIy2q@&PPez_b^$jtE*Wo7Cs#h>VU%!ZUT0HE3vLC zTJ#(#wGkx&G^4e(72V==!sqn#!$dz?+gzq$rtRTR6ye-KrFK8)b}=z}OeOvZwZ}D9 z#JE)$PY|##U%p^X;>@|Zx%d>=meNGxoKQ&!y>0uu;B1j%2hy>B=g4F+7_ku)+i{np zpi$sM&c);TLqkJ=PH^-%z&GYX_?h*L3xZX7`T3<_TbbA5HRuy#W7-ME{Ox(xWgDLO zMOiZ-uauT5f-g!*(I6ZsD)yKi6O{A1Z{1xIzw^OvA^W_J=4QI>w|8PLv{nDfy!qCa zvPcn5o9xj)rOj0G^z!oZ^rTMJ>)f6>qA#g+8)VJ8mK&54ruY*3PwC)mNOx4m7+T9% zA;Gy`wYD5ZJ998h!)Z9Wx){n-QqoOptsamakUm(SFU~!NS`!M58+}~bp>_Q&vx3e7 z$4=DQQ=kIS0n%Q)03}8nFb7`?kQ+LqnVFMQa5W1pTtoyfvOVrwQkt3?oN6fv`@zoc zKac`9Z@z!`F0lAf2+Beh1jdOvtA_a#a}fedx{ERbdh`i7dV80UHKptVWR$}CVi zoR9v20U!aZ4|g_9mM%FlKP3ieJU#YpuG1MU28IexhAET@C}|ip$*Jr>Dxq&hQe$G| z;OIi0x$&hE#pe!sUd0L0t5L^n0Cdq!!9M`ny53xC){wptp(5l~-Yb)h+^1+`GmmI)&WstPum{gTBBUeWR~@l4QX^bF8FCe0vuwzhTcR^B|lI}uJ{n3 zRY1mS1F}I!5yXMG`e)+{Z4~BeXw|c`v#6<1kgPNKs_cB$^FMO;G!QsT(mq$Y*nD40K{^)#@suwdS%Jp-|J z9mOkW4D?wxm?VURf7r&xZ<`RwG5)UuRnnI|Xp`TxHQW{*#NNT7z^Qu=FYhUU7Pweh z$X$SW$|iia&)cgM__nCX7p^8rv{T5t%UmiJ3PQKLqcGR4ecCv5b=6c=t!-_qAj;eb z3kU=B2Ne4C>lX$>Nl8hQ8)~G{LM^zW!_Sj#`y{C?@Zl#FxD z-a}M7S|?R!*gL{{ot+Ia7n9l5-MzRsQVuAIOfZoSgDmj^|F-REgiBLmO#>Dt;X3WRt=Ete^E&<<;{?7Pzy~jRpU~o`RPtTc^D{}Cl zHOw~XA>$(>XnT4&OHwybCD;Co$W_GNdt=iM)ko6YsV`n&YB72w>ZIcCS{&oMAodt# zZl|q{jg7MM&5UarWb2@yAo2&=;5Duv^YfGKmY=7WLH>+XDcw#vnVEvJ9vt;g-+ZJa zDMR2{NroP)ftNWg_L$R3NgGQmEjDb~(#>$UH8kv04LdgXs_}&I$Yd-m*EA0L@G@<>=K z>&!kb(!!>5Q84gZ?5*#e$@1}MSq;=IUuxb zsYK7Mx#vbujUyr=6zCDusfeswwa@&Tnwx>Rjke{Gn&bu8os-wM?l~zgF8(Sh=^I>( zA)OuTZ{=FmMB&@Pv=EeW`8RhZSOj_p;xx(0``c2@61WICKUEJ4Vf_?zZdrRfG<2QA zw42U9q?1qftskT1-l#G=hQJr~qyyk8C`UP_bo~b|o>yo?FzK$He70s2&x^D)x{ifk z;03+fVc3;P|Aekxy&B8=R#tR{O&od_^ku+Ra6KB3PHJl9?xtL)0!)0^2pmU}thW)U zcgq%pBuI?>@SrVL28zBjugbsqAhQJtPnk@~M7Lu!pX;ws=@mPtWgArDbzK zVhO!$s|^uG(FqRDhocYUBLKotGV|Wh+6;79SJ?A&l@q~bWkJyL@9p|qf2B^$2=E9& z#@p}TP4Sp4pD0p16#j@KiW(XMo9gq-0z6{lNL@QKBC=`c!#LassQquQW?>x&owR${ z?PUA-JO&)nlBaApM~AjOUiY69kTJmGi4iUKd9-LRU!GH8$xq1S^HEQLK6mZ1B*wL; z@7Tmc_%S;h&CFJE%)8o_WtgV*TI>=fo=k3SX|bla6L`W+auQED@0Hl7s!4KkY903A zOyU)zq1(VqaNZA#h?t{UYz^&&GRJ%9txP1arA6K|-3;lt`s_Ta&S4$c?Z(F4uQXGT zyAco&04QGSjy|7?{FXjERS-2@U7oo44|{kg8G{r|1B&4UyQ~a)FLYX%mR!gyHV*?2 zqkO_B_0ID<7v=Hw-6}5hjr;fR9TFEG@~+rdKD`W;4QaYU*Iqb8MyD$6^Ljknj8Tg~ z!n%v12Nz(gs;a5cVyj5EY`nbYa6$U@?~6XLwAu;RR{3=?zQ%-XcPr5WDW1Fe*QLzN6=6?_Axhi#k71}FC{)+9>OpAW#X*y zQIoem)el8vilq)nu#q!>QVG@ez1RV23DsI+)>nZ!O{fXPGZG#m zJ6PnRgP)(=rp>Grubc-Tr~UQxc-8e|qM~56c6W4)>=Ak=b<4}cBX`XNnvKyWLkJ6q zPGZr3|AQ3KgYP31+GrP#*Z=@H7MhW3qiXIJK=;|Qqy}jqb(eJ$+PqfQXol zJ^_B;)XYr0Qc!75&QWz^JMg*g|*?{PbZjIBQ)ud&@BQV z#V+Ie3+LLAhJ=BIaD&3iOf$66C{b8`u>T>@i=90A#PL9#o2qIh<{yF}3vdjh$>jVu zZ(zw*RGca9E`^dA*&Bb+79#Qa)FPl1ATSc14z%lU4g*}_UVA&~`ExU@A{16&k!6osv!2T)&dpyfj9%45P5$}cF`CP3W$ z4)sH_DF^93b#**yB#_}T+_X;E-vvJitVBpPfkJ@5$SP=wlQ371%q?4N$~$js^J67#KhQG1K6Lf zuV<#F>`5f6LprP;Km$5}ID|zd%sLbZlD)l~Yywa=kmA`$K@txm=Fb!@5{F- zAv7aO93ZdJgme^;=AK(EA}!rwCFRI2En(Bdfkq*K5GK704B)?Y>zM{f17=n2^&{0j z;eg6L5g`Yi^~(ZR4oV1tS7DZ51t4o64`z$f0jUoK2uK=%C4K6x{&U5E=AUfbH8dhb z&jBI8&O#m-;t?_Kh`juAcJai>*qGHnq8L5US14x}<7Gs`EZB$drN%p5yS8E5HfKji zAUw-<3s`7OF^z+wqWE3QZcfk`0(m}eI@_J80Ng&-ius9!&xuW$mQf;Hiu+F8^!!Td zDr`hv7Rty2g*g^vPq0E6ByUpHV{~TrgefDCnjGyp;a&LU;-g7abjs2=vBKC_SyM8$ zh^;MwKTQ>@Tr*S4+EVC*I=26`hO6t(rc`xzH#b&zlqknW>IOt{XrPOSB?kRwyf=G_ z9669ES4PXTm>7^rzKcrW-v!bQ&XzpM#CWum(nis`4=6G*?{ zU=jXcO(T^~B`n2`es{*mSx_$|DkcOUmyruJ1Dnhy%eQtzi~uqj0*G2%Tr?@)fs4oC zd$F*qG{6rDB`_^n66;vLZE^Q+6lB`(gZKk(0RQF?6re~5=q2IOPm%D7>(_>sB7DLI z+Ud?E2ZUebCf~XP&cxX}N~>fGQ3i2p$px#AP4T&!S_-DN&STQ9k^LbyLI9-1tDX*6 zoWVyuhQi6u-|oJD2?m<}0y!a}-sFk(0<>@>Sgef^wa>ho2dQ(EZ0N*)++y|8dPs4| zTKuZH6xifmy(>k$7XKGe>k>u2W^wzX6yIh}bO_cF%o7xb1Lv9+XF2&PTPBh+f^a^S6n~i^L=J@%@o#H^H~IOXVUH9H>5+G5W;|M*kJh=Fn}5U4Lor{Y zd@S}tvN%#!9$4>OXEZ-CnQVmAVN92KC+1}$p%)w)dg|oK+!sCBaVChab#=ufcyo*o z!JdQXMy@Z-jkRCV)2m9pOw{Lk2V(-JDCDfcT1I-?=+etn^KE}+{uSEtFC^$vu?X<3 zOntru^P2ioA$dSnR8*umvH>?SisS9{s_1Rc5hzEx$Kb8c&o8g9tjgWd0eFbVl5m2S zAP8JM*J*oI+G6Rh!iWGqLnk~^(DmIz77jeTR`xRG-a0v1SRNO_nLPAU|q=fb5 z%M2{4X~dqgUAxEhQn1k>LbYw!gXAgGcG+*1~dkB8@F^Dw+sd!{&>rDYRb9kZftK z_G)8LU8sny#yuS!wMCcFn&H>&^&LuraJEfpIk&X*_x@CoQ9e%pL#|5rz1>N)cTV7I zagm5L@0&)FI#SFy(tXh8aWH4~U5Sizn5pd~8-ufczoic!4jWwP=(yUJY9lPVZ{NG! zYBa&~+4AxnzZ^j}jyeyrcH z;rN~iv?~So#GzSV@_PoFoo%U~s-{13@GC1Ys&E)QeZR4flaR~XbmQQZg*C5)EGzyK zo_*csE-JxBx$5ffHdy#rLf%H~_TPtdYxYu4coPpi)+9p3-Zs!!!D*-X3T@wVN$d%n`b1@9x&5)LW?#vWg|gN zY45}&Lt@#75+nK=f?-Am!ewXF)H=rJpoUTsk!^zCRXnjKg9lrIZ!R)eKGH~f!kluT24S;WM8rYru=k^SiqT`SrQi4J z^T!tc8S-{6AzEsG^flXY2-7SRgjHsHyJslMSby=rNTG+{~Gr@yJ*r^n${=VSt{J%`JqH| zw%@3nvVqSi;=01N!H&Yo&JBzrr~J!H`t_^n@2ME<$T?avqXq2G^#41Cz=qyxG<3yixoCF9D2A}D>`H30 z_g{Khjq_o~HXGQJXNTr3i++0~Nio`9o4kq~^>bWO++65YnH*!HqsHEK+1EZ|% zgqf&8_%a_p=sS5ZW44rGxYU!mDS&D$S9WV@s=T;0>9fX{o2qMH)Gc?Ly!cRPCGG#H zelft3ePzU(uD-WmG7t>4Ag+IZaZ$tUuucQLh6Y2959&QUdu8QSaiwmLnu{A;mlVER zoAiZu)k~Cy=y}PgRL^@S?azqWw6Zhj{JnW&bZf#kGfIs##Q`@|2BwT8?NO~yp=Flb6UT3g#tjh{g z*hfur=1uz41AnqV_xn?G#!5HKV|S|Cm0haGk(59mhDM1N13MdeiJIWG`ny!BZ~Pth z9YPfkLB9b)kEy9MRUfV{;$W~G!^6Umy<)k?!!0@+NwHbac#TKX3=E*L3i0z}=MA?X{s!Q9_m-Qljp&!>;qo;`z2n6V&2M-39pzO|aEIAf61)OTY;NhKzt8QSUt&=@y z2aPtB*Jjdep9hZ=89=QgyHuQPpm$*MBABo7)AlbGOKQ%B&L4B?)4lCe2b7T{Jta-{ zsgGXjS8@OM29Z9o_p}oQpt-f3XDSbfoZ63#y^Qw8PpT^GhhN(gi7M4wB0_rqUvB$F zlMh9>(ZORqHWBx&-Csv*9@ggWzxw6AU=4@ClcOE+2iN4wSMy#rY@?PjB`0B5hBS#j$4&Lk#F`pSPGk z`RCakS+4ktX*E`E-ri+AIRADPr!!&6@Z+)7uf;xRf`ULN?3jJ)^}Gx2Ywf{$%?lO) literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-security-configuration-framework/images/security-control-classification.png b/windows/security/threat-protection/windows-security-configuration-framework/images/security-control-classification.png new file mode 100644 index 0000000000000000000000000000000000000000..75467f2098ea339c96748ad81e931bcc0f54c4c9 GIT binary patch literal 12204 zcmdVAWl&r}*Di_$LSS$w!GZ;M53a!p0|a+>4<2L)1Pd|*cbmasa33ULaCd?`2_7t* z$@`tEQ>Sjdzi!p7x<6)mckkY7_j-D*XRY1cFRki)CvcZ_EyNujWH<*i&n|Z(aFmKqpDc>Ru$F ze}$zoh`mK{MHQ3XJMZq6JFKi|i$-!>sy?`Gyw1BF;|{qAl<2sL4jou#?+$RtB?GUg7(m9n^FZHK>*$(gAN|Ln?FgJJO1p4x=r^|H+BP&*zkryly2ACfX6G zy5p<`Ox3ysD(ER9~)zGS+@G~{;cx}ZE@1nwm z!$z>hR^CY1C(|R!9@?jCPHQn}Tf^D5Kj zb^STX8;I*;>3%43?8yjNN(aEBcv$w`%l>%9gKdvhB_ncc#jAw2BNcC_oZR$w6sC6? zKtY?ox70tZeLdS(k^K*Ld3T41x{en_tn1~WI|F&pZGjziN*YTc+;~x$Xz_uD__Dzu z7i=16_n*~YMT-geu$7Ci%SuxBCQ?f~9t^hW8tLPi+3Cg|@#owaEeWful24;~cdcAy z6(4tDJGeAlDM&HxgMj#|7zz4yf6eY?@SIfN|bu-+hUpPPXpaA}0&?f5^KunFp}nsD9GTTA|WI8bFKF_qtWk z<;p;5zr}~qfAHA;8iqaC#U4nO%%mr+C+eK@@{uf57+6o>ps215VThI|jzN;~uC<(s(uwex2Y(VXiT;ar*nu zHXWlTB)5~5g*^yT@v2bo?Oe_JR1$kp^-==X|B6?kQFH1pH; zjl8hh0e=Bv4@b4@F1~HM9W^;F@*iw9xoFsSgZYV%Y#)Dtcj0vZOg1vF*VKm#Z5;C! zP;Hm`3bPoI7b!D!L=&fn+;|a8jl1T>WmRzdJx5fP* zYG~J7L=ke02h_Lx7&N4Yz$kUK2B$o-hg>HbQm)fLtr}mlyEO5=qaSV+UFVzQTeMQn z>CuVH8<q6NmF~JFxMqEG)vSS+q0sglum zvu2@x^NP=xuh8=he{=oPd^)5p20nY+eGYBjRbQ+f&d!IMNSl78=!kH;8~kUNBTYf4 zhr)XEr&g|67wMej-r?c2HjOUdZ;YYq3`tD4+STL-R|9TOao*10fUfJJ#0|^V4ea4% z@wJ}S?Zg_8SJa6;g2gn1G~kc@Wq#*1zs17B!7b8vcB5#Yzz^loOe$fZX4}c&pe*9iB+)+t9_E(BNrl>;m+8S@wU|ZbK)o-SD5$Xg=}|0Wsk(OeCEo z$dAm_Z#iY}FVn2j)HdTT?KV?CI)N{ecWDZ*@@UV=J&?1i?*S)H%@#OnVWks_uxKG` z78h>RyV?uAAZ~8Ib-WO13!3{~sS-P5r}Z9k;<_Gi{fo{0vnQ*e?eee@f1a^u;`Xo8-hR7hnf+(S7Rb!-k9fy zJCB6a_SVR_oBHSXILwvWfBboLFL=6tfyF7AwHsml#F=>4ddj1Vl#{N4BO#pM@x$xH z{ZsAg&R)_#8qK1J>0cdpYhBn}7(PefHyT;ZG7*9yeFFTRmiLNU5HM>M4QAwqx)73B}Q^YhmX6 zBRA#+>Ua0B6iqFu=MGPqSPa8Rr;Yz3NGv|PQ8O+|6!SsXk|~u z`yY>xb%jV1PW;hhf2ziEi2R%^5WC2ho!QuDaDOXY4T2(l#-DXz^C7z_IN1XwPw6Ar zJ^)VxfASdokAKPa9wFVRe=g@u3&2N6Bb~d^3sFYA-i1Z8nx}+@Y|PHDyJoHO^whDi zj=x}}|8qT-7ljqNq?opOo#W9Wy^?b{!A+_x3!e-^WgPMLh} zEpyEd+euk7fuVo&*A5yUQQg|Ly6XR!+3lp5{r&oDtVJY7KgF%ZAmOb{@a2ks&O?}Z z_S=qb7P*C?reDe-h!FE;Z|KUox5rxru(P&X8?n21N&XIr9}QM8Zm`V_H}Q_xMxuxmGLQ`ZxcPeVdY$`Mz_OI<+g-H2bw%ap4;8-jqwrh{lztE;4o z2d8u}(*N;4({2aUZJqV>@E+^^5R~eFOyV-5c^P>N;3UV|IRBI!WSMfF0^oXjRX8(e zwh^+0)m<_4J3Bw3lE!lz7(z@E6ex`3pD_RMu8Y&|?N7akcvp=HWH2r{uc+x7$>L}z z-cbq`SA16$VvbO`MP^B-fdZam@%Sb8bS$odG+aqm_^n8T$Ld!f&q+Ej>%M+5jx9m0 z`}iBxq{~_FLXOFf#X;TG2 z61JY-?@kOp9pDbRw`-sbQBIFW=EjI!WCn^Suv07hpQ^>e{}0MnPrFhNH|r1Uep#Lr zG*VB0j-GDF*Y9Z6MUAP?RWUAEW^+)*q&Ssc1W_&<6O_LowQ|(na z_O8MlY$*_#@-$fI>9ji`vhJ6~WDaoj)kTApkq@<{d%R4JBGk{Yo7gZ|s5LY-xmP^l zDYN;Roo}bI+WTEVPjr**0yjX@`&P|C6McJbLs$=K&q}=oK1bO6Ec*mYc)l*KBiR4b z;Z`YN2cyLCX7W3hep7Bh_*@gkvHE)GI!0A=oo2JCVDRFM?pQ@owQ+m>57g>RYHNLU zYOk1k(=`)&HGVH2hxdUsEcTx5*CG-Mhg=vw15V7=2io=f`CWpVmh$Vkg%t<7#A&Kb z3*__#0@KxpH@FAq8B=7*&xAM)wzjd%OIrfMlUZl+g;qSGOzY;7KOU-crwLJxCBj)) zVLwpmgc*|g87&~JEGiJq+z1sJ8F6}$KlZAKP5 z928;0ooc5XX&&o0>15w%GL5;|wvuxw-|? zWH89=365pcq0m8OX$i4O<#iebS2$PR8|!h&`*(k~rq=mun4@tp^QgHX=`@cKO;RLzV|tFDpr(PD-rTus*~e2pVP#O$ zrC`qGPtx%pKQhf#%4|SG&Wq%C-~~HXq#exes153>kzD?uSe~ndSUVY20ZJ>u@LLb_ zZu80XqudoI0Q78BQ!Af7rg`LI!@&cXYYaQl3Y^7$S5T@aks>6tkxTMUY?e7$!ua~x zOtQb~W9#G&zl~3XmCtBj4tqnUvYOrP!nIaSl5XKnq+ul-9{P;R*%dswHG0Gl^5>n_-&37lZe8 zv5O6sW+@;23umm$jR4RUvU#69)Ax7+MJ_%Ht+7q-cBQ9c0$0}|3wMywgH)Q=x%4KI z?;XJc%Nc@Km9=N?s>^4ix7kwM2Fff zb-7E=snt-a^n;-C$#3~Z?(GJs-fYxvY<;d{5}=An5h0yMe}Lh`4y^(QpTu)*1VXv+ zkzexg+Nl4}O76c$G9N>4q`Ypsm)+f9!t%{--S=2+~KW6JZ$<<)8Q)oe$6M zAiH&oaizH)&9D{+8=1j&9vWExF_32N6C*{)Ijz-OOyx^lDpL)0ulDUUU+j-f!&QvyiuJv#ccwvTDb7QlM^N8c?4{IYm2evfE%v__-TKu% z=IhV<=dQB_)xs)Z-R}r=^feCmuTesEBXQ6@&ueWq%l8TjLWH%s8uo^?OclfM=yfL(v+P)Ivq17A7}p~L*%h>ouIkfDMbH$fk^voiym zRG3Kvw2lcb7VZ_Q^}x&oV=)Kc25V2q!RS$_3T3)^Yop5$?H)wDa31;LNGQ>yioAS9 zXCWL@@f(P0{$nE1Cga!%VkwEzTDDF%hB$ziN01Fx9IHn{^z92FzaW`?^0y)t3IY8Y zd|R?9Sg?nZnxXC`Hih&Fp8gyA6t)p(WhHD(Kma0kC0(v4U7!FW^r^o=j5U6;|5(FA zmJdHQMuutAQzRCv6bgF9)UT4goDQR(_8I)ad_W$IW;B~ji`gl~OyIV(5vxo)S-B;hf&QJoZ-FEGtO#@pD}wQv!3I1^^Ql7L z4fB&e9R91>ma#C{H;b1g6xP-9HZFbBEIaarL~aLdv*BA+=#v!utFmp+GfHMLB~u3HO49OiAyCF%zvM`|6)_f z+SU<>X*qAIw@N*@g+hoOQ^%+buYM1x*fC`pZdxho*J&lv;TICi2)4SmhK=R=C>btOXcL?Gz;$G zkm51n+G4bPp=g%2c7&os9avCF8Nf`)AM)VHby>PcDEQrxcX^p%JmWAXnaxsapYKdk6eR_va;{}KHFxg8?bd(o5WgzARz^LaS zG+9qf#fwU>dGiw0;cGqJln_Ji))0yDRb>kLN4<#300dQ0ozwk0&WWbjDzd#8(G8}s zo#WZ+idj>Ea^!3`lgulD$xh@q^MP5F5R^5|1Go5#FP^1i+Gn9J6p1Uv)v4mi#-$YTbh6z z<2UQ&)^`_?ks!7Q1EAgO!3>xGF-2WT9ut}|9HMFm&<0rs2DNL{NlgD@#tkLX$)n3O z*KoXc)Yo}d$WqMVRqnbBvt@fj=O`~sXpreV$O7m8QA(1A)?A%)uWznFG+wWhZY`Sm zuD*;I!Jnn;oLP@q74&w*4FQ}gbvS?(@OB@9%k8Ab_vCV0cl7hE*Q0Jg$Hhm4@EYeC zB^cEz<3MW*!y?Qy~v zr&&@PD#ZwOQ*#6;mSU*Y+&zEY{_+^5Xc9zGeJIQT5JX`Rw(-cVHu;{Q6$Rd=yV(%gQ%B3D*;YFnTEu*R`<3FG4Hx;C#+xAy{tVe^RgheF zSe|zk>bn69Gdq;P(@8Cq=vwD;yVHdkn?54Iv(p$e79yr<`_CEEX?6Y5QmB&|y~&^@ zb2VV!))YnF!t22kooUP{_D8Szp9a4x<%%5fstUQ=mx&slU1oZ05OXvewl^G&;HN_) z_5{2|Ky#aASJVUzBMuAB`PWmJQ5U!pz_4V=Ml97)R4;^v?Anye9SM#kRDI9{G;NnUsOZ|b+R|EP7tlh$fL5zG zWnci|@zsx2Jy>h;>n!oW>$F{Ib|^+CP{3>~ON8}B3+&6~tN@JDbyAx70poXRsJjLP zKEuc02z+q|wX8n-$;1CzwL#3__{~HPtkI_fp;81H?Jy^c$AifiR~nsS=4nS>IuToa zp@eztMCQAFlF6Lrfw5kdvdiE1>BQ6ND10)Eo3+RGhx?0CCnG6vb?#@CY~|ZENt3lI z`QZ|FdJdAsSI?lR?`I+^D&L1;ZiywPp5^D+>)`m11msWr z2hcSCj!Luu`5F2d5Gyve^QHo)AE5syXE|>i9ANYt`pC@oU`Ik_p2)YA2E9{AtT#jp zNE1vZo2{FWp!w`h+k47j+xPv>@#UmmKe0LpjE0w!WRJ0@A0tF4=!+WDfQbw4HSL&w z*(~TUlfgV_}AF^+?B7l&g3=?7rOG(}0#B(~i{$}FpU_*T<1-w?hXh9nuyYLkC?o%NCZm8@d zOPV`fqYwL`vuS76$)BGV5FyW~9Czf-b1A?!Wx86#12S z@7s^bCkT9Jr(c0d92q$w#66s^2y2%suh1JrrbIU;O$5<%=6RdgaPY|NtG!MgzMC*Tn;6j`#=aA&Q@QMNB&mXN z7PsP6#O{tAoO5ON14fEGh_l})yC^10b6RgwfHa&3IuqD3y;Gxx1}Wosg&ds~K7p#a zI?F#TD2==;wrHrx+{x#Qg!Y7S)fVIrw#v5RmbS?{pNVA8f)dc0H9|yI+`<$0K8vM7 z??^8X(Dr5PsA_~H$RxI++s`oCpr~3xe=y>hv6Gqv8B=E!dF&BiMR|b)MJg99>IInD zJN9zY&YkFkT3OR%0I*Bi_unsuUE!TWSuBM-2=f#GX-!7(v0LQff6WC5T>F z5Z})bf9FyOnQnpbdI~0&YoI?lbQ$l@Otn9{#w=Dyk8o6Y(`@ns97>qK$QtEXUrXQP z(xQ(TauYmdKqIN91chcc<<&D$0#bFg2Q5IQ%;5c5-NIsvyLS{TTN&Y)GgLyb)T&K9 z12JkgABI%uzB@J5zy|VD=|DmCLX(WtB(3{VpbP>ht2rv$ z?*@YgdiN#y%&130s5<3d${%6tj#gC!t*%Z;3$$AFd#~ffEp?RXPeLh+_8RxT#9WS( zQ-n;PI2uZL7_HiHS*UE5Z`0O;kC_UEgK^C%27A&o_VF+iWE{ zPFo)lJPh2a`j8e}+~5Fgd!7j|K+BwAX}gf`h+$ILpkc>iktG9eLTaC9oWlSt?pEmF z+y$Nlel5kK*KkPVUmlW2){z}FDJg3pNmlnJ8Y|kTg8Gi|ky@%W= zOC)BFUI`pA+CW~$O5C}_AQmmj|8)^S>dB~*D_fa#JHhgvDy__Jp!Qq^inZwm;Zth8s;AhuL> zaF6Zq8wF$Yk*=xt2xcvLYXlAm(Ef7>ed8nq0)9W zssX5N^wEl~d~Am12&)m|)tQC9mXyDq-24YVu3-x6xYRne zk%PWZ_C+97?b;!bvLmT$?{A{S;MuQwllC%S*#Ys6l%N7ju)R;Rg{^lYc*MxmRYO_N zx0PT)x5Sne$~-;rc96B#bM$4KZy}hU5ziZ~b(V1L>|m-|L{(xR07K{qd!Vul|2PphSdOSN6lq`^ zlre7U^}9?XGKiK=&w^~#W@^2x`GM$uYrA9DRdsm3mnC>uURgn8^?%V zd&*{K%trN0p=o^q6cXc%X_kIz&*g0hTc%KjAhFmaFiaw`j4Kr@n`6tQX4`>E6g9gr zj3`3^el8RHdg}RU+9g7GsQ8iERy~z5XAa~feA^V(?;sRL z)l|YZSZ<&SHLn*il}lb%Dr1LVC8fSBx+Rs--rGByOf)aJ;vqGVhbiD ziY=rRAuO0ksdO^CJLq+U@sXZwpQGord%CEW6~v})>%sL=xGxPO%_a0W;kDqktzscRr!Rk=)AyCC^dva7 z63k*|qo%xzSI_1G=-9vy-}BTSLNX#nBFPwUY+vrPLusky3JWYahF~)WitEV}C=g6Y zJk4(~4_fAIy8D$1DMJ)hOv5Tefl79zqE9F?)d}MxN{h43h?1>}7!L>=Z8eHA9rtKA z?y%qgT>s7>huKgxafXUQ=%6z>4a)xM8!}U(o8|^8DiA{%1E8A)MB@T#iHL=za$dcN zZyUu&k)P~>r;0~ayeJ-vqQdyKkqosZYD=*o&X{}{DH|ZX%h62L{&`Q)C#nRSAlk>i zqQsm6@#moVI{XvE4Vhwi9H5x{2P+MW{PLXG89&1ytc}0{x%#2OAtIH*b*dq_Z#?dZ zfeytRVH6TWD*dcanLCYYf#(QSNU7#+Ku-UO=UJf&JJ&FF zes~?GKqA%)?ZGgFVK%#tIR`=K*>r53lNHdXFu0A5QBaVjhZ&Sg`My#Kvbt?zIDeQr za|fPryxf?#$N1rpsI6c-PpzY93aQsOSqKqhl*t~g@fiw63X?Ls+&eLPDo5OM$IR5} zSe$X}d?M=184Vy`>|yb&PPruMo1c42>F(JR#`vj%UHWYjFUK7%0h*sv^lM$kZs3f| zZ@r#WB_x=TH}J(X-Eu%I!#~(XSoRl@8%^$?|64p{ej2z4b-why1)RcSOH+&6V9=!oR@cj6-)=W#|FtFb6h*D*+NNvq3@%uovjEmvNMYh2f7`Y$U zu~jK*`Nnxk7kO@TLFJUl8Lj@P`R!dXcEG7X9ZvYQyZA zoj;Ru^6@fXm&h2wibTPxb1V;}nq;TGGX7mRVp6{~7O( zH%mNatrwe&4XyL!m^NmOU0{eJzWrqnLNRORPFA+~r>eq}n49k76p-#`$6@(7=@*df zm9(;+LSq_UtG<+X^q@UcH5hUI$31X2;_iK+h$kl&+JNk+sILbVQ90f)c4?BA;)Q{~K7d%^VGlo!mB9$;`KV&Q1 z_%QZmqN}{mt9t1fo`=(-ee16i-*m!3i|`LZjogAHahz+cD1;65v%3WgSdYh__&oTywko}3DXGg|O@1x)bZ7o z(azfMoFZVQrirrYrcW`8mh1g~6XKU{o75Xi@3Fpo!sXmDRM1-~)K~*S9l6~4JRy!> zm3}=wI?pE}@bIh3Fa0Zp0odHEx!o{{icz*qp(NA7pU?Xv)F$?wPJwGiI?DA-ungYPgb~tS+%l$kgSwK6uy{_`|3g`=0T$@IfZcs0HWjqNDwQZ>3s8G#>b{u zS;q=bA!D=`J-RK@8Q>WPNFCYRT%TOMx(Z%_^7>iFZhB(sd)D+pdU*dJiv8w0!3lI* zF*BEP%wxPxe$Z#isF98ObVh0*ry<7~uCHz{QT6%aF;qs@F&F?R&PRy*M{NT!tbM0e z(+Pl+NsnD9{=kV?XqUu{JJ5|n>-*8fX^Wm2*Z~UAH-47dH2Q@g?^@QmY10t^oJz8< zDkQMMZ7Giu(a!)K;IN8FEt&t+EuTaen)57){j%gukCE3p1^U8AWi(KKTl{`hc9-6S z!V#AyGSa0-T1I`-+fbL!QDDIUCDR~nyH`ZxrMb?G;j&{`$t%%3@Upeu#KL6#x_R1b z&s(~NoCQO;h?=sr3{%wH7N77GPw;`v)`AGBbhVQSb5YSJ!Fb?xAJ6AXp|NrjO-udGMJ18RW%gy=myQ@SxePNhAIFJ(0Lr3uc zbQ1T6kC6>xGQti)S()RM$4;Xs?saPQ0Qhg+gLD3c;DzEAJ1L?j#_~e9i&ol&naWr` zAqPogzJKGEP-%NOHe1>CT;F)SHx0SgRBm8@Q%`GQm2q;=Qwk!YZc-i=8KDu*T8gqd zcUS)>^m6}vm7jXi-R<8i+>uA7xi;#;q9g9;mw8qQ|AU3-e+BWsf%|{8Zy5ePj(Wn! YYY#-nK8zwpp0GzzQP7aDmNgImUvgZOxc~qF literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-security-configuration-framework/images/security-control-deployment-methodologies.png b/windows/security/threat-protection/windows-security-configuration-framework/images/security-control-deployment-methodologies.png new file mode 100644 index 0000000000000000000000000000000000000000..4f869474e2d300b35c10865af53d35096dcba75f GIT binary patch literal 21811 zcmdSAbx>T<_a_(#8XST{fZ*;<@ZiB4Y22OQ?(Q1A@nGFF-e>~B-Q9va1PDQcOy@hl znwhHEsoJgD{bReT>(+aH&%5WH{@i2toLF^Ld8{{NZ(hB6g{7zwZ$rz7j$na})7X^LySFf;p|9ue#KUZ45 zdZj(2C@ZDyV|p~~ZLnFnAuka@iNrqYlr4%KaORCDnHCfICcZO{sNK>*xjL>a_!=4R1(*t!GES( zI&+l&IBeVxZrt^L{&pZ!=-?cdzca45kRxqyuJHyd?}ZD~W@q@}g0X8rx4r9+sL6i( zV%PIe3Eu@a_>+j>Pa*~Vpn5(m{E+!M@Y?@nOX5kztyQ2peL6glveehl zD#%#`Giwt^Y2)GeHus6--+T5I|2>=RT(1F)7(ylsYH)553gtgoP(AN10_T+;#YT$v zUX=#zYMBU{vIh(s=3(~My$e=X)AwQf(@b-#;{qfWj@ISr({9%q~@%W_dq*tq#@ni7h;jQ?~nGT^4 z5VZ6tqRIYGRBP3Dl?ysQVz1K*{5?oGXe5~S7IuH_iY)}k$>lg)drn_(Rb4JR3k#qI zi^pA-eh!>1{dj+J{zOoq=d;k575t>Rx)A)jet@K7ftSg0%=AZ8>B z?iVIs-tDj~f(O0C(|$4=Q5Af#pi&I}E%6*GpH&-4^%%`<*mNDv{OQp&w@&urpqkYL zsh3N8;W2*30^|*Kv%W4&{^|{fG-G6`+ePp8dEoP^_NDKiZvQVbzxeOr039Bdz5Bf? zVJp6=W_f9MV@C4M@}!ID!@z@sCwxUw_=;~;N9Dz@udV+WbOcNVT*z2Hv%M~q)d+rg z`s^#4B{5Ai2O2XIN=6M<_d^-10VpM0rTz&zdbs%N0&K<3o2Dvy9w_d*kLL9fZ~Q&R zN&j?d5-34s`~*P$waAAaL9l0)xrRqwzJh_h`rD|2TK8x(0+1~Bgs%kCdR+7uQNqXD?cRJi{1x?|4QJ1P zadc7do#>ovOe{r9+{4zYo|ByW3me_e1v(@+j8>w}ghJtnfEY*Y5x46074}?|U4(bh zaEpETC*nO$o{Or~o!v=s*5_iBv$gV}pXH-y&)4gFx6$h(!X@7qF{M?4x(H?3d%Sr1{2=O3k?m77A zEL0;ByhXhiw|E>t7ij&DxRpAuALH}=t(w9* zHS_lh508ic{!A;5mtsa@x`X4*LHPsZZqW+KW=g!P;fD9nyVlV8>OVN0?*2URJXRZkA__YRR%UvUz_jTAgcj-?s8M3|dMcujj0uqTSCYg04x&u~->n1~47+2Q}*=u*cGf~)ARbMLN^qo=Zsdmfv4 z(X<}M35%DJNOJAydj*mIl`67=EjUBB74hC@B}lE9sAkLJ#gnZ2Y2X}H{FxYPPZBkn z1NoByM>qC`+Jox>>*#;YKxoPD`tYZh>gj6l z#WM2m(qySv?X!s#R$Iv zhij$17eix!2bRMJ7n@zG9|14X62>pLq`L>fSCdzw-wU5-ybu1i_g>un*Q8(<+I{%6 zgY%%ioB%i&76VuU{yf61VP>$=2&LFdga=7MT$_>!vJus<44i;R&epfzDVf)*3h#P0 z+{Cy3sZa6WRkgH_KM%U{lZ(Invy|Ku(bHzF6skFcPOK(NPY6yCL@quWaHcI<-v)2B zbPi$pZBu1v20e1VJRETb-og#{yv0j9TmwN}h=1WM>BEgGvFc*9P0!@>N+Cy=%6>_| z5S2{y)-mX*O564)A~t8-e>{lZy4e3;jpzHTF9-7DzwaJbYXVNyI_FP&ji#=*#5WK9 z+}MOA&Yvbo`C$I{S@XQZjM~V7Hyd=ofIKw8v(`X3qZ#Me z#r9ph@qf&GL!dfNUIi=Qnx+4ppjs-=&ComcSJ+AC9g)7CTc;t`#{oVqJP>ZAnf> ziyv?fX5n%)4R%jqyVjP`4sZh_EL&))b@YX$Xz^jzA|xq(PkB#E(V?^&3(53rz0egJ zifxqZeOmsR(K@Z{DN? z41pALIdPV_z9|TyUEjI9aZ6R7$Ck#{7ImF>yYLeoie2%T8=B7ab0mP0$s`3NN`l*T zUOU|q`!FlFnDN5*P`KaHN^0u`3n2fB_Zx~3-cKTCVR2CEs!`clAOFfQRM0XeZ zf1inaTpW180fk7n0(U z-h23V##u3wnb04xvlDMqLij7XF}6ae>N!Ct?(fj%5WV$r23uhhslQVK^Ye4R@+n1G zVE-?98sWfemXA|X{4U$7R2(JCQ)vY296b~U3W(eNpJQ>F(10Eg0DtIg%X3|34Gw3j z-*dECEA!b3xiMS;8NUae-D8SiCciRieh8e~`sYF3_d@k0!h`kLI4NB{hRZC93vGLC_6GZvjS7!JuuVEwegMXD4BxtV#K1;`BSu+0Ah*ZVoO@lliRnFV3mWKTXqt5R zx|<;+wcCVOOz73wXr!KyQfsfN&&HL6JHa+7NJUvFNlnxs0i4+=(z$cDk>hw=$NNQV z!Sg2Z&?c=E*K)Htr9@MgDQVX`SZQB$Uz7K6le$B}ik+|=m{#5x?-G(B&WGmuS46L^Z?u^`@PhHVP}wBO?nK|@*PGVzfemLqfA$_VhW~W&`p0 zHfPfD&aezQKpatkZT!P}*GurqxH`6KKB-6xA)B8FpV*nSz7(o9yAKC1ak~Kb8y>*C zS&m-RekK1(T-s5Zkmwt$IA>V}B`6JoRz|GI!f4?1HD!&}0{T3+sjIz@wKfTF;}{~f z<&v14bA}cHM$?(5s3-RqI|pJhr#x!sw@6P;s({RH?VSz3FGw_`Kkd)Rl*Qmf+`JDxsg_oBF=KiRwWLQQ%X-kEgyBW{$ujKggLir9lFgq1VW z2E_EPwzeSX)aMy3`nQNgyjxWtE&R-EN%OJ)G3`5mNSZaLibsJxwZP%CA|S<6_^=8B zkEK-&bX_x{O9zNb^Kad;_RZGmAQ(9$htG8*x&fCp&JZ!2C}W%}+pTPut{Ju8?^vAS zzn?Ds@54RJ7eYhtNFXW{!L_iTPSin}R52f(YT7Iu#>-`F3F%ko(~hAp zvTnz8E6Ms>a)K1-u{ z9XS=lb@*exva6}@*~tXjdpn_MVrWy6YxgW*h4wQ*OGA{>?TZ!Ps}lx4xUtwHS-xMb zC3-+S18)D&QpO^8Sv?O~=N3)nO(`x=)qTG@LeW(D9=DI~wGVjun8`Rb7T~o}k z9zKFg&AJt}S6?IcIA(eUQ2~;$K;_i-X5FNeOm-%dvGR9Qu{f+l;B^%;__zqICn1Lh*Nc>k zC>msGDZDi_TnF67-EnTaS>?e4MoD)0S*JNz7HC%uY*)X(7(4trpjM$*Co0Ll$+KK_ znA{)0R^>DvTKBM2Hy+!g*`KIB=+`FN{_MLY4KVnt~{Nu1@IC zSKX7wp=)IMeMDUFr=_5D6zWDgMY)(L8wD58PEjNBJ^Cm zQ0f@n2d$cc9#dCE$1C$e8N9*~aW8IXX(-eZE5d~B9$CLb*wzw229qT$Uif&()u>(Fk8p;p@6nz2v|iW-+{mie2Nz=8kSpU zAZCYVf3hBchKMH8QSUKD6~7K6Rp3kTtT|?ivD4E6|J%Z!Tp&c<3KS826~%4z;%b3t zY1J1M?BL-LEbf64ZXR5v(Ol5c9Ef0RqKcY-jz?366!A)3%t-~ac`aH~PjfZ5;UmtZusFE7 z*Q=*zS1p8A2=JyyEy4KohX(&tHVj&jrezq-4JD;kKz;1H2iGX#!vMwqLEd69eQW7L z8j^if_dY4J_;9zn=erqC?JE`R{{XL(oXeuF)#t|=AYR!@%Bpf?P6RK9T8sb*b@3JM zpX#p;>ody0d0$uYgp8tm9~Ch9x`FZV3ogot`|Tx9hh3GT`en+7FB@R$8>Q6ldj z=CikKX;=YoSiUo9oixo|GN57iX~+##M|nUE{1hP(iKky_Xur}rI5}`C%Fxog)3?sA zfxP|)$EpRh2~5};1Sx%dD^sDiib~kCCCG)C-NyD^ia3I2gFHxn-Mq|YoGSv#0f*en z_VSrz5?*XeP=4(w9j(MJX1lrfIcj;V6*SWOU(3HLL7%M=;qv5cf7avT9Op5NZx${7 zwQi<22{-+e1VZZGPu5iLa%wi-bsb(f3~UjN0YnTZK(ix;WxcOG0{+|>?rImS> zM3KmN?6MGdG-t?Pi3-*hzi{KVS9vICFU_puXv?73Z}?>R7v%;q0l#|}p^S&w!2_ae zpqj3{zY-;kdTr4StIa>dnt%lZpQLo8v65i+7y5|cshF`#C`goyregeci^n(o;JZEkBe z9Wy&S2aR$)@|HSKIvE1MAC?_5K0L@0aH=ZWP=#+oH5d~DRy#q9_K>a6`@+m`14``W zeRfqZJFH4Dpp5K>$gnY5ho|XyWrd95O;ZR`_y8kSTuzTpYN#QW&QS>(@ue2FOGZj@ zP@ao1@-VN*9hu7Jg%u6onXfgR1R2aq8BS*t_o()%^^E&&Z^u>BMN-1CX2DQSCjg$h z;*b3S*&z~U0YS0?;E!D_1*dk&sqQ`>d?K|((-jfgmQcnd=oe<~t@J3AYV0Fv!h=3B z0b|KJmRUj@)JPe*2$h}$ra&y5sq6LM9d;q;o2nY?yxnfR$y2NVs zz5_I7{m42DovevC=(caQMWOo3xc(plr3)I<-x{BohAPR+6D7Upu~DQpbEHVAY#@g{ zLrYbWRul>h?ft4Ln0>;E#HP+3`MXtMaj=fCQOpp)9CY zCOSvq{b0RgrnfG28AO^TfcD-n`)8o$D1pEAyBG^^QZ}Oeo$%M6>MCac7AHkEjn^e% zUsRPsX2}U{CuBpV45bQ1HWk??h3KlkvTw=}vJ423Ohs9ik@s|KAO+$cOJV~2>B0cg z8AdyjNQq57F?r!U4fltV&{R)J`s(iv!{6x5kfn2Cr|lWa^TDz*A8Xo*budyB70KSj zCgeTMjF_3%XU*>LV^4t?k_3t7GD9XsKwEE(HlXqh`NJQ*sx-5m&mOoIbG!?jF(3^B zI@1xz;eka)-Fn2BFYP{+cdV;KG@`FuxRUhe!KcN$S}jRXwCr_jzlGnj6C~t(+LcF& zVUm>m(&OVa7F)40CzaT504=~g4qVybcm!U1d%HBV?IOxC_EAguBJjs8J$bV0`YaFa zSo+vyjLE=iqv>&9$V3WDu5Gai1zH-C3QC#;N#Z_VAC*1fr9<<`9SLvF8jUAg0%FcV z&^zx)#VL4x#9JsQWsE(H*E*v&`X8?fP7E6`EfmmfDnKAP`3gs$tfL4(w&2)L)5L;A zAiy2(Y;GB`N22(HUVz7W7?p?DwT`o6VwbMGfU%t3Ny!;1(eSXHm@fV zg@XHS+<1Wl2I(FvRi2qmOrmm>)np4Z*Mg{u%k-ZyNITq&*b7GY=3)#Mm__B9;zv#9 zWk>xON!_@xau4-sPjqN)6{Ap8o=ICjaV@AIivJ3VcajMU!Q*K^&S~qRDNU)wW^s0{ zq;*46N5z({6t9%!LU3EaUK-B~*iH$e5vDp(DCGe(eF7=5DUKQYEX-%YF_vIj06Zi{ z4FeS<5@>xQbb>T~x8(~0|H5*km9fH?+gr9a?r>Y6Cy<5$l5{O}zJ8*$B?dR(svm%L zrs>wrBKp3@LRXl+Alsx@1JD>iQCPIJY=a7js$r?F%HpQrfyKlMd&tK+0k8V_N*@NN z{BATcE&Bf{75}qEV8QUXEh*=OVuHpj%*?`dU`Cg+zb>xke1ST?57hqiTky%Q4wbbD z6+1^7fX_Q}tzjirYhynJO=mvI_E6{5HaR;HnZ06#UD8KEq;N)?f`{yPZeod1jMMgA z{Pd?nvQ98rt{5Iy70fhpukfor=_V1HQK=)MXg<_~h!ue{JB+(2Wbvc9yOb|uTB4av zpX9YEPZc_Npb42eG(`CBH#6}^`mD+aBz9pM@mNP6o=2Az*ws$&b}RtpOz9zIQ6nz@ zV<&Q1q#mbN&4!&`gzj^^S4&tq;Zu6AH!m_W2V-fM@qDJqpCP88_$b+r5NZSFv$o12 zAw`%JkmHr=SH+!6;6|utBtS|`@#Up=@GU4Hf>66AydrI#8;*5Phy_L638}Cpg$*$d z!;+q&WoIn?gL+C=!~%CVZY5%%0X*# zikA;?h~4+AkQalN5Sl7lf_BQ00m=ckVW9QQyOi%`pf9Hy`nG`RDw#8p(gB4^Z;>DZ zg!t6hBBOXW6vCE}kA=G+DGiqaRRh3muL5fxW8!X92sokQNjewz#Z#du|0Z@$E)z_9yT7QjRxV8Y5ZV{1I%g9F2+i;JWJVHjz-nH*g#COa0s z%e#bFQ{pdVNb^A8R+UEdAMBhN*&l7H7zK)=6R{ztGI0P|^(1#|Oer-bu(oT`OZ_Ec z7$66v=aQ640XB^01(lqfR2o=fRY#Lw;=gk@S~ebcLvfm0o=uiaI#Ci5^R@a0%x*fh zx2EO%axj_>nr++)aa?J-9hjZ?Nk6B10x%A&O|7Z5n8mwxD7?Z(hyJ_=+v&bLnBULx z%({h9T(29Kbu0&dKZw4K;oU@R+k59;?~H2U3v%}p_}1<1{-V0 zj;E`re*X41`jN9x%>}Cai((P4o8f>m@tUn=Ef+8v^rP`?>!jg#-+UtD31a|#4Ln>I zu3RJ&a(xH7;1#m4Te(ks3TO`kEJa%SX2|BSsjb^BfD#Q-vUY0}XIkPj0>b9L+oXTM{%yF@Zqkq5dc1Ry~SwIdwSERkdKjGA;pLv1UxMd?T# z0HNxn(jNw77Y;o>e%jyuBFErc;FoJ(UUpOY8qf?VE3!s=U^JT*LIafBAU?GG>>k?* z$(5Sl9PZj{t_BRX8ozRKo$N(7v)0ZD-q+9Z_420`^4BkFYS?`XVi+x!xF;8m$B%BO zY7)|0;D*%Zm$1YZ+2oSfi8O&4Wlou}(hb%_D?J5gbmrGqn0z!HaJkE&9uq}$s|Dr- zioH5-M2d2G5d-m9yz=yrS2PH>Q&@H+qtpOyv(g$)QwzY}-zvBV2o!8;=FRuDb|R=v_dFpU}EEO>Tkpn zlX0HWaKgHrLh0+<9A2yVWtw2*n=2;6jYM3~wY*W%d$TO)7gnU$6;{HB`u(?v16em?@2J$hA-v;44o zPPl3HIj%iH1jS4#uT1irrAyh(oc;Z(gw&x+9F&%fd%AiQai?#337O56NyyzbS<~C$ zGMfAhM39iqi?2=rbxlYYi*A@7V$&JkpvZFtjo0mmG?t}p8aI|`05V$vX|3G0# ztn8HqSVl*x#U?rV-S%KzmRGiCYA~gxUl60eUdX5UQ$AHHu2CtGj)I9-?9WW zI^|n?pkpYC7Y*n|*KTsiDj+Hrusl}LcM|29a{CrIy+w6Z!aJ@sIIl;GugvAvQOU@5 zl8%VtlUFF8a)f(sZKD8Mpl!!b>BXam*uaF0;iAXIvs1<)#djH!gF$&LyajY5fK&S^^; z;ro?tjiXIX7+6GW;rG~_L0;V*g(wZyBSDTQOxWq9M2D)QNC!jMQo#1tibd5;3N@+$ zx;S_g%~`Zy-}1D?xwM3k_dezJwXE^vh1z)57YphunH&0 z$L=yk@ygM&gYB?P3kNLp_zF?>0k~u;+c(l)(M3nlmlIWBgfce3VDT!Z_WheMfHe9g zR@jFfPqxZto>uYwC{xw|9v8(&I-KSb#VBi+03LEZcw%8oGDB)c;6oSyC0Px=y(Hx; zO}mivRdqr93laTj^KKzE8zFQ`nZrS>DzYfOLhQ1=m4*k{0R3YX;bJk~>jja(f!LSu zO*>ZJZfRm5(-6s#@_fw^)8(v~3~%BtQ4Cd!6|3T+$K3w%dU!Ae{>V{DpMHY%#LYWc z=m&K2#JVKzS#w0!BK42NdfKs$1ndtLCUF2|TibKl(Mp1mUq1F*c6^Os3(QKADmQkv zJ5ELf;T=B&%NY_oYqt-4-a3)X?ruB>`c-;|WllJdhI~~E+_+_ims2ENsty2&(HdX( z?7X8xBE6*qU9f_QKrsndk^N$NHXstMk1zUkV3#u~ER1pKn%$f-aw)Um~sDT;i?9 z$=}KyZY(D-R()n`SHF2*CO?s^`*sa;O7rQ%T54&1%V5jB9~O#wN?2CAxKwB8=E*cya$QHcVUCc#&la+(Oza+(Ch*`M zR+Nh~nW<+akNCS!PgDtHY3?l3J6tRj?d)UP4o^g!q!HTrzXph6bJ!AL@H<$_!&vaB z9h8z$RLr}h-hN<3H@L09b7A17921++Hgh!`@_;?i@!J3E-R))7F$oe z^J;iK-CqHERzVtgGQ*oIGV*An90DzySQx_I9#ZCTcmw zM`Al|JcXVbvGvW7Y|Hh|k?FLV>u7InqSNpo(v=}0iKUZZH$`GLdX3N40bOQ?W)&-8 z>i&K50E}lj)$?*_qm&C5n^)v9?Jz=2H94Xg{~K`_&7~(b{cKUJYZ?wfZj=chDV}s8 zz%dedpku2_5TR{XHJcH7(bVxrl!A^mL%-k6u}r;D&@etF2UU8Ri$rXk)v1^u=N*=2 zi#&Z!G#y*43X;p)rk=10>3~D;Hnr+ci2U`>a)3-I@+FyuQ_UB54Rb zVwGEAAnkU_dKP8Oxm&JP^lxheI9YL5KTG0D(`1v}L_}t~ljHpsKdf0=uvPge<}~4c z-on~S?>J!YOor^wW|wAcK8X~DK}@)OXJ_ujBU|U)FoW=?>fTlgN-9DWr(DQ~7K5xt ztDHB+fJ5_loKWYzPAG2{*`V@dY!f~vDvkrxj-E2852Qm&DU>Z&_c8VST}*(4%5`t-Ih&yVNl^oW!{HsX zDyQo#4m+gr&ypDv3=1HG2`AZ4k+Sa6d@Ex2(GlZ%wrPDx{%ozwbl>|5(2;DYSsE^9 z`&KMtOwaja#QCY%E9*ButE^D~-{az96v$-?Fkgo*ob_L`7qAEqRt~Xq=JHI-bW)Y8IkD( zAhg$;{ZT-HJ0`Kd^?BkSoP#a1>QbB$3piL<&nPp&Kyv=SGB6mu4@G5v60oH;kNJ|7 zn}H2ClX@g2ycp-Vn|Hgb0r4jd2f2=XgTnUermg6cWXk32;A`W!Vo`t5sLt~duc=+s4Bw?v-+8go=&+jJBS&S85r3?2V>SeO_mss*&%VOUh zCMS;`G?WV$wabmN4Cf9c*;j1ki!1FHJ1gua#Dp2{P%mLfRe!8BAhz(bpv0au`WDDt zWKk?cLju5SLPA`@K)9~zos*U_n!o|0-yx+}WTT|cQeKYx3aKm>zFvM~_Qb=v`V-x8 z!)%hDr!3d3-S=_lj=#(J$^clsTw*9j@bXo7_MYJXv$2b1Bj_ra z&giaX1xxx;;`MI{9O=7}yccmh#b@%;@F}hr-ziTT$7h?e*_48p^l87CN0pa@bb_2k zmWA7@=js<cOsEXogOjd2W8md3rtb0y`5_Ii8@}uR~nN44*QCaA)*yX=9&J4@OXM{dL z@{S&ymiUmB8|s%RhI~)zH3CvE0}kT1jHIl>zMLfWMYr`H3VY+bPASCZvD~aY@?oYh zh`G0?g?HrGG#1T7j>EJLDS3>B_@lqi=GB(pj%-ViPsRYBTlK9F_f@#bCYE3%TIvtd(8WMwEXKm~ zz&9m%v_f0_FF+CPV;~C`PUD>%!tXT%OZkVO) z%znDfnX52vcSV^LF|Zoe5y69nbg-=RK-VI~DGEE*=s@H(Wg?8>Q>&O7Q_t0vd5;v(hT{Y~)h$J~*DqF?l7)3>zImb`)KAWW2d)B&`Y zydSOo74t&_uWLxa*b8|5(&GM$Ml@(27(%VsiRu(VVH*K#{Ph%M#3cbR0Q<@n&YP$Ar%DUx-~{sGn8Hr5(eh6O1PcdMZ0tJv z*DHjX&=NST`f9y)E&FlJvqbd52WPDH4#TLIvS3N7IV|w{wy!5vgoyS?XQ=)-tvM*A z5LX{Es$y(0?sOWMA24It0hdPV2eUmd+ioKtK83%M=66(*=U7tXDY$#yR zV)w*v5|Tg@_M&UnpvX1=9BMx>>>6u~6Y7?x#r8qZWdR0nmSL zFIJ~~5~8FZZnD2hut^(SPTD>_WoI-Kh7eC*pQJ`&e*Kl;Sfp;-;jr<&GACh*0!p^SL6EmK%LN5pXFW zEhW;1Th9zI9owd<37TgVf`8+hu;qy!Vz`LVYn(J@e(C)B5FE>lGqe@~yLK8=dA%GQ z1gRXIRAg8bkKmj@z`A4nE0|6xA{M1Wg56RP@n3!+M5pTndMDBb@^}2u>Nj@Cn6jv- zX?Bb)dL9EaN%#OS4T!x9q#;STQG-@g&i0B~Q4LLRrzj0w8ZMhYd#8pGL-b<&wJOON z_}LU2qg02uZqdnNINPug@_ekbvqR;{o3Tiua!w3WPJOonh(I4BTv9tJ{R%60O+jj= z1b&QY#dTALw8(^_l`Aj;%{(nf2d4o|nzGjAh%}wF8eR!an^%8|ZRvPE*iRQ@OUz0a zcleNX&6k8>@zM;7UDZ`fPay)o7z89v&8XAIQCAMZIY?tBwysTv;*1R2X(i zA&A2yY_PnsVe!v=y>Xig1DB1fwc~0(UAoRWy$s^p%n>0q z(Q>`ttt59Ee#hXdxO~VQr5PC+; z-jz=?2xhk>C|v$M`a?HD^|N55S)~t4-ldz6C~7d+$;2UvFm`WIwALTx!)`NGDG&qZQr@cxxp4L@!}nb`a)Z1%e2>$tWy^1?h;AX)Q}8>-j@;6a;9 z0?yuKF1#;6^(5E(@T_JgWpU_J+cluQAftB8!qAHP>-RMhHO0mAG%w@@NK-+2lu4ud z#n$FohWAS^4?BvPnRcVJt1Ypn*xAZ#4RWZhFmQ-2b{ZO<5JHYHOE*zf)+bF|$^YHz zS??9qqlT}hgUrZYhZo7a2+G3&i>`U6>P-eq9L|>SERnq>{Z1-<}>7A(}&yb$_b-kHwW2lX2e@ZnjXdpz* z9!4kgS~?I%D2^^6x9^Xjf%d8hQABRISI;pmF*Z_l2{j{Y91Ka37^!xhhLJVVD-oFn zqqx83vX~J3{5FuIPT<;GpZB!5^6^Cs*k0NT z46biy7GPuM7P>#O8T2q?`d98OT!;APDx$zgG@>+mr%ex-y->4?`VHKr!Z)XYFFmgO-&g-W)pJ+{m8O9C=n6d&k^NOOmn;ayT+y8u zNy&^1G3+lagewMxO38SQwC39vgq3kqNZ8fMKTfwU|f=;WqiW$d8G>ct%|oAai0(Ljh|9|9#|(DlkEutFVb{DNAa; zgL(O!tw(#yuQ-f0LoUfWGa^w43Fn=Vz0JQl;}hi0oLEZHictDv;b*yKMV}BUVJL zSWKWwNYpvz`6rr~iLeT5A232o<22wi8Q0j}qk15#y zA-Qf1VhZqL*py+nzp^9Gv$cEAuYir_5_9P4dvT_q{OI7UDMPcP&Rb=-JD%71eu*p0 z*)su)0>p|6Xq?gf+fM+{PrwoAqam8Ebo_Cg{s+G~iD~#k1-sZY!tX{BxYAn2o~`Mr zu!6$pW8LvEx8=~Sh4D;!>UsD;*}HkNZ*5;^Iex5(F#CnM5g^8z69{&xlq=vjrFJw3 zXTzbRMkJZ-uYvKS0T?n@zLF`gBUFKp=BLeCz}WUA&TmA=&)VVq6Rz?YtY9TH%F_bG zU{3=i?j{}|H*8~`1qT@z1^QP_lViKGM-nDVq{vWkAOdMO)cF*-G( ze@RqN@3V~{p{1MGoB2o?InF$%BbqAJ4Ls|05nT#(UJUo2XAz(y5_DP}s9Zh+GWF4* zNrUNF5IJS@wIE8xP@+KGnYw)j?QVFwO#UtEWY%XJ7xlZ%lxDs6{`lYzm^-#@1|(eGP0?amJw3U z7i;k7iRBYfD>^Vo!7Ic6mC8qbd*+Dnra$kt{+9C45R~e|Zsag?9O)5VH|Uls@$O&P z*^0H;uJj}}ok0BieeKMH-8l;{j+(m$G=$LO>-E*2o$2fUGy@C#UyfNHgM4l>)=k)B zp2Wl({~|x%h*lm*;RZ+CclURZ22zlq8Fk&Rzc5_^;Rm#i660!u$u9fa|IUcFtX$Ux zuL(crGj=J#n}PmSvT=#gcbF6gR9s+x+{@_uP#l@X?`Etyx`DW7MW)6<=n%W3Ea2L7 z)rXn^49?5i&hO)$XfD$NoVK;k#DzJI@$tP>UZ*J+%;D$g49zdA(!lr|0u>W{{4&VC zO{8JVDnRT7>&pzHRP=T|>@C+o-&JZSzPw!CY%rpUdv2=tmau4PyQ(t4{U0Y~%e_{s zn)e}Cv<6l^Z=*wu5Moe9(mL@oF&*5eLd{o&rZfVY|058LA%_V;GQ@M{$Zsp^fiG_g znxubZHxF#(?5_Y|7u&qnBG>#-UU6fTqs7G!h~h`nKu}_ey4`#ok;_ngtCyK`Rlf-a z_&#D+CgN+vOScBA%qPdAD4;(#(6T`2Yiu#ku3nKq1QC&-R?i@Mg@6;Gy|bR`WCl^U zt&2^9%?xj1E*DG=d$+W|c|K=fuW4|(BD{=cV)Z}05c(Hn+ZnQ#R@x?tBfgO^-3ln1 zF9z*SGN_K|{e|?O{^&e$Q{uUOc17sG!>@7yFDV9~x&5X7x^w~_S{~nzU-nSq@b9)N z8OsZyhm-CSn?}P$MGVazJEUqq8WSN&bK3CoN1$IVQI%O0l+~7CcEQ|WEMo$4NE#M+bhXvsj*ll#AqrQPniZaXkO$-EUQ{fA08;fGTvoKw!_jfgOw!}w9@n#m6{c%6~Q_xUq_4}z@Dp}_4-tfz`Uwk(d zh1bd4U1wm?S%`a5KP+aWc879gI+GB*Ih^M3$ywAA%&XJUF<72ljThJh1I7tTH&f`M`5OxUFYYG7Zt)_szHpX4D8&Vw0;~+; zYK03(u2w#->z@CN6}sELGKzf_wFgy#7Wf*ifLM@BIy#NnALtlJ>`k8b>B-ZADbdV4 zjTdIByfIzV(y~zsJgF}Qo#Fuvf*CC@#=$$yx?Wwlmc(z{1+Yf@r@Xk8&A06ijqoobciTWFj z$>>j=`;af40l_prXY7o9p2Lf=tc+&&)^u)}cZv&sLO5M1->=iy1;^^%l_&B0{T4mV zug(8_m2(gU&x*`>Z}`sbcUH3x>FN0ZCc*tI#ckrl5iM9?_XXu$~I?Si77U*Gn+Dc`nkVWp(bos64psicz> zpGZy0&r5D;X?jFvJG=zT7`)|(d_9ND1p1rZHYBQWTHJ-SvC;*kupFk@NO9G8xvFu} z+8nwvftL}uliyNyB3RVrvElAupr6ke@yoZ-gHz#HHb8%^F+gTDV(k8!x}TpQT?8N6VzeO zfFzYI%8jMGwEcV|@ z`O;Lxm=J)EnI@fuwbDnd5p8L7)=b<@&4Y;brm^)a?e6Tt+>K7sO6W9K>W#=fk} zOWKaSFkOd6luH*Opjjg8SIM9a`l}1{m!COn=W3NVOAJ!`Sxm~6%_n`io%#ImO@E%M zhckBSIsGB}j{$*QMFpW`^_C!8YIp6)f>VVZAH1LVg$CcMd7&laDtE47iRl9lS^*E% zoM$i^Y zyA9!6g%4vgJ=rzsxAr=D@?38GQJ+UCJ9ZuZn+&v4TZN*{Pt=0aJ$PfS{~g-(B^DNE zu^w%zwVw?YxWxmcd+4i8k+rOLLK171tZ^?VuSt1g`3qh5F7O;pO@~f2KfQhyU3;2rNiw0u3cyU zaETR3!B|4Xk^OP~e-TuIvEoIWfeghxPHEm>cC*HJWD zSd?;so}6A88<%?jkZK)B-~QWx&$7gnG8|w_W>I&W+cvOk>8OzxSd`~OUWebfy|?*B zUP}Das&)O1Dgo)^YVTQFqx^8omncZkZsF&JuQIvKU=GH- zK7%G4n0!i7gv;}#-hrvUp4B$!PJ4)Nh$n2b$(9ZB7*o=06*IOJA3s_(E<)9S>8BKU z%++tJzKPyXV|LR zy!hhtmpC9mkxKOPH%D076Fv8wmMK%8YLfqpazaS2{c97I_&0Y;W1y;`%;&=|*vib0 z>&IVD6^>fYhJ(M%YV++}-(&mQxqlDmmQCP~p&^GyIB<1er8ogX$+T+r?OY~1M5VH%BF79*%u-5Q zO>lg9$R$D~*&ovSSHkuw57gr0Z-(@8vni#)ntrfBl_}b@I5SK)?&+6d7S23>2Wnr- zh^)GYMP7~K(e%`<8{+@b807ShB;Vks0=+C`}8A0hfIihlVvyACa^&ZR(;*6 z492>y(xnMGA3>6<{@sDybo9*J+!4I+=*|jhLAl!9ZUFEzlUvb?Cw%Z=vht%*_}De$ z7CC)14;b(&rnnjo0s{M4f2eEdi%FmOzYP;9pb2}LtK=SoUUX3Iog9zOOcvNhvI^xY z0JzNPF?5`)uO4y4uH@8qYx!AguF`56#9kY0U`y>_&z=zRz3jG3RSMquf3ZjsY*31; z!3}|K(DVbi-tgep45hYHNpEb&0;=28@$SnD1>@JbX5(f#Ka}vAdWN(PTXV{d?W0B% zK&#a`=D@hJaMu=gMfC-qG#~gz%$~uLxU^$9u4mPhULE z(PX?$QIc^B2V&tmokG`zw-b%STYi-FMXlyR)l=L=^Lf>VvS6nZQ{Cag$qc2l6LKWR z-)1;}oX#9n6)HC7{G(B7V?&SP%w7f%8{kS(5IR+?Nk$+$mh^yA zc&ruvLyM_060|plU}f?}x`zPbJ03BSvDD|zD_^R-6$bJfnNRkWv96KqitlMi>#8sO zmrp@&kNJj~0?Ar13`%VMFFr3r49Y`N=koBh{$YJk>K*26NBmhgG#VxsV0NmdK)v%D zPYY0}n;hb}+uQA)!*i`|^m;d9>1&$UAe)2lO&pW_hojL%E^4&x)q}}YbNhX=y8S4w z{vp5cR|Z|F+qawi8GUs@upc9DD7k@NlImyrvYd!iv{`(UJ*zjzxtM*JUWT_F2$|s`A)<4twC^GSJN#_Dn-(*}|MB*2cAE!ZUl z>9Xk%tKdG<=j!h(d~*~Hk$#BOe{y%l!2RB@a+});*H5s7wvjeC0XlDs z#(~e^y$GbMMuD4V-zF45=gjG9mM;oGMfW%yf7H16r4bzB|Go#rGm$bQEGVjhfPUdb z^h?~JVhOZ86>_?d{roP)k-Hm7F70Svl@`mVEj3nysg6-UzVYPVTcMJ+ z@7_K+oa`42SRi)&)jQ+)IGp}JY{TvETiZ=tYiwh$C_J>O3JCcpnCQ@iR zO|LZ^kwKfHP;_oqx9LhpXB2oF<+G(VIfQ4O^sYSb=b*QH3tKM8)>^C_1mWBp?rU6l zAJ$HTNcKrk{``4`GMR1xH z8X@`*5ko9#g0>D#sw>vwX~7yS{S7qDbp$>@54*HDp^9{JINMft-uBo9mGzh#Db8P2 zg|TK)bz3Xt6G~#7s~!Xmvu7EfcD7zu9tn=$6nl2V&8+eFPi!k#Vbv-=hSt#^l0R*7 zzr(F~FjLFis)+9~`)3f~WG3>&8Bn=7gtIiTE>H-qcMjojCOzQ>h!wGEDxe6;sfLF~ zqtDeJH;JjXe)9UAiC4)=KX@p&MOF2*IhHsUagpLkP6)PDn)ztTu>54eC3dU{$Mi#Y zCF_j4?!jF3^SS>Rbfl=;1X`Z+1&IL-jY&;kb*Jbxg`}KQv-Ec?%hVe{1BbR58%2>( z+7NCQB&q7+8=aS+Uzoc_<#Nt^e6DlP_q#jii98dMOZI;6rn`Y3l&e%&lWO4CTq4-q8d!MRR$iu+{0_b|3_N+?lKk8&EM*+`84Y=`}0{kZLKc}jk}VMC_=2l?ZT(S6#j%g(D|)vZ>1 zX=7TzXSuv|62(la7@Skaw2Y*vhJ&5S#ce*`teR=ZyO}i{I$bUjMD#4V$;97bDjP(b z%b48hXm;AT|2Yp@i&}$2oE#SG;jpW&`aYKJl0oy5q^Ti&&h*H#0GlQ!^ujdE zOwqUpv@OzPKbdgBle>>JWB#8%J#8sd!|$L2xV``)6Z&T>(fOzF6Hl`4Bd%0Ls3}VHQR7VSH->LDtrPoq#7fQO@KlP%g_c9OC9bL2k)L;0z zYBh?cGhK)b*L2)1yd$x0*<6`6;{gO2yi}`h@E)dlYObSC#jR9+r5uami!(Vez}0r|MMfKcki=|lP9E;({Vkfo-g}IE~RMe{SldAl#26}(;vVHW7LMTV&m z%okL`sVRkfjiBwb!6p&!rq=I4d&0%jGx>0GTV!2Z;#(O*Vsc;=7utdeI3>R0@;4@qoGkTv;d#&B{|rf;%n&%rX6>=*@MHVk2!z8|e$eLbzJqARK$VuTztN z5CFVl*?Gt}Mb z#lhH%R+hQcNn9Lx!0Xgs_jn0=%(P2Qc7S?(W1 z-j7D6D(W=en_=FrWY!Q=OLispD|T*%k=7XmYXrL z)`uSikWj{ARQ_?=XS%nbjB0J>wV7)aj^juobDS+`wR&|!*m*hjvHbvGC+sPnGrX11 z5qtRhX&!z|i5XOYqN5 zBE5Kw9%C4w)oqxCqVma8B~18=VC?%;KSkz|bh7ynZ;9i>&9*jeoLNXiybV3irf+iM9hBVpX>tr;(B9 zY=Rc8RM)QB`iada+sxN%Aoe=DaM zd={d}<#{P0s%f#gYd7a#n>c_>)&O{P#HPfznWPx=J-tz$K^e76l>dnQHN^gp*N}+4 ciN8X@Qltu=Q6MvU(J7U_4&;87mObKs0QCbtivR!s literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md index 2160e044a3..e17ed61da6 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework.md @@ -31,7 +31,7 @@ They can’t justify the investment in that very high level of security with an As such, Microsoft is introducing a new taxonomy for security configurations for Windows 10. This new security configuration framework, which we call the SECCON framework (remember "WarGames"?), organizes devices into one of 5 distinct security configurations. -![SECCON Framework](./../images/seccon-framework.png) +![SECCON Framework](images/seccon-framework.png) - [Level 5 Enterprise Security](level-5-enterprise-security.md) – We recommend this configuration as the minimum security configuration for an enterprise device. Recommendations for this level are generally straightforward and are designed to be deployable within 30 days. - [Level 4 Enterprise High Security](level-4-enterprise-high-security.md) – We recommend this configuration for devices where users access sensitive or confidential information. Some of the controls may have an impact to app compat, and therefore will often go through an audit-configure-enforce workflow. Recommendations for this level are generally accessible to most organizations and are designed to be deployable within 90 days. @@ -51,7 +51,7 @@ Level 5 should be considered the minimum baseline for an enterprise device, and The recommendations are grouped into three categories. -![Security Control Classifications](./../images/security-control-classification.png) +![Security Control Classifications](images/security-control-classification.png) ## Security control deployment methodologies @@ -59,6 +59,6 @@ The recommendations are grouped into three categories. The way Microsoft recommends implementing these controls depends on the auditability of the control–there are two primary methodologies. -![Security Control Deployment methodologies](./../images/security-control-deployment-methodologies.png) +![Security Control Deployment methodologies](images/security-control-deployment-methodologies.png) From bcd71a5ad6e05484f22e4664cdb46c9ae73a8b0e Mon Sep 17 00:00:00 2001 From: Dulce Montemayor Date: Tue, 16 Apr 2019 14:19:55 -0700 Subject: [PATCH 331/349] Update configuration-score.md Fixed link issue --- .../windows-defender-atp/configuration-score.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configuration-score.md b/windows/security/threat-protection/windows-defender-atp/configuration-score.md index d430849f2e..746d31cc8f 100644 --- a/windows/security/threat-protection/windows-defender-atp/configuration-score.md +++ b/windows/security/threat-protection/windows-defender-atp/configuration-score.md @@ -51,6 +51,6 @@ The goal is to improve your configuration score by remediating the issues in the - **Remediation type** - **Configuration change** or **Software update** ## Related topics -- [Risk-based Threat & Vulnerability Management](windows-defender-atp/next-gen-threat-and-vuln-mgt.md) +- [Risk-based Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) - [Threat & Vulnerability Management dashboard overview](tvm-dashboard-insights.md) - [Scenarios](threat-and-vuln-mgt-scenarios.md) From f13fcf32ca7edbb3bd19b22c2bedb4e5114b1730 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 16 Apr 2019 15:47:14 -0700 Subject: [PATCH 332/349] fixed path for disable dma --- .../bitlocker/bitlocker-group-policy-settings.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md b/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md index f1d02e941e..eb5cdc5d4b 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md +++ b/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md @@ -13,7 +13,7 @@ manager: dansimp audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual -ms.date: 04/02/2019 +ms.date: 04/16/2019 --- # BitLocker Group Policy settings @@ -392,7 +392,7 @@ This policy setting allows you to block direct memory access (DMA) for all hot p | **Policy description** | This setting helps prevent attacks that use external PCI-based devices to access BitLocker keys. | | **Introduced** | Windows 10, version 1703 | | **Drive type** | Operating system drives | -| **Policy path** | Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives| +| **Policy path** | Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption| | **Conflicts** | None | | **When enabled** | Every time the user locks the screen, DMA will be blocked on hot pluggable PCI ports until the user signs in again. | | **When disabled or not configured** | DMA is available on hot pluggable PCI devices if the device is turned on, regardless of whether a user is signed in.| From 14b954bcbe48e39f2767127340d45d235c736f6b Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Tue, 16 Apr 2019 21:13:36 -0700 Subject: [PATCH 333/349] Update index.md --- windows/release-information/index.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/release-information/index.md b/windows/release-information/index.md index cc36f41dd6..45697f0cda 100644 --- a/windows/release-information/index.md +++ b/windows/release-information/index.md @@ -1 +1,3 @@ -# Welcome to release-information! \ No newline at end of file +# Welcome to release-information! + +test From b6c243615eb49bb1c579bfe4db9105fb79f81b5a Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 17 Apr 2019 07:43:58 -0700 Subject: [PATCH 334/349] fixed startup key text --- .../bitlocker/bitlocker-group-policy-settings.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md b/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md index eb5cdc5d4b..0b3297ec31 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md +++ b/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md @@ -13,7 +13,7 @@ manager: dansimp audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual -ms.date: 04/16/2019 +ms.date: 04/17/2019 --- # BitLocker Group Policy settings @@ -238,11 +238,11 @@ This policy setting is used to control which unlock options are available for op   **Reference** -If you want to use BitLocker on a computer without a TPM, select the **Allow BitLocker without a compatible TPM** check box. In this mode, a USB drive is required for startup. Key information that is used to encrypt the drive is stored on the USB drive, which creates a USB key. When the USB key is inserted, access to the drive is authenticated and the drive is accessible. If the USB key is lost or unavailable, you need to use one of the BitLocker recovery options to access the drive. +If you want to use BitLocker on a computer without a TPM, select **Allow BitLocker without a compatible TPM**. In this mode, a password or USB drive is required for startup. The USB drive stores the startup key that is used to encrypt the drive. When the USB drive is inserted, the startup key is authenticated and the operating system drive is accessible. If the USB drive is lost or unavailable, BitLocker recovery is required to access the drive. -On a computer with a compatible TPM, four types of authentication methods can be used at startup to provide added protection for encrypted data. When the computer starts, it can use: +On a computer with a compatible TPM, additional authentication methods can be used at startup to improve protection for encrypted data. When the computer starts, it can use: -- only the TPM for authentication +- only the TPM - insertion of a USB flash drive containing the startup key - the entry of a 4-digit to 20-digit personal identification number (PIN) - a combination of the PIN and the USB flash drive From 7ed6b33fcd34fd1a55309c875a7564dc342a2640 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 17 Apr 2019 09:07:00 -0700 Subject: [PATCH 335/349] revised differences section --- .../create-wip-policy-using-intune-azure.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md index 884f52875c..38a86efebf 100644 --- a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md +++ b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md @@ -11,10 +11,10 @@ manager: dansimp audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual -ms.date: 04/12/2019 +ms.date: 04/17/2019 --- -# Create a Windows Information Protection (WIP) policy with MDM using the Azure portal for Microsoft Intune +# Create a Windows Information Protection (WIP) policy using the Azure portal for Microsoft Intune **Applies to:** @@ -25,6 +25,8 @@ Microsoft Intune has an easy way to create and deploy a Windows Information Prot ## Differences between MDM and MAM for WIP +You can create an app protection policy in Intune either with device enrollment for MDM or without device enrollment for MAM. The process to create either policy is similar, but there are important differences: + - If the same user and device are targeted for both MDM and MAM, the MDM policy will be applied to devices joined to Azure AD. For personal devices that are workplace-joined (that is, added by using **Settings** > **Email & accounts** > **Add a work or school account**), the MAM-only policy will be preferred but it's possible to upgrade the device management to MDM in **Settings**. Windows Home edition only supports WIP for MAM-only; upgrading to MDM policy on Home edition will revoke WIP-protected data access. - MAM supports only one user per device. - MAM can only manage [enlightened apps](enlightened-microsoft-apps-and-wip.md). From 3b556ae012a3ec952df657f12e10082f3a1894f3 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 17 Apr 2019 10:16:00 -0700 Subject: [PATCH 336/349] revised GP location --- ...your-organization-for-bitlocker-planning-and-policies.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/information-protection/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies.md b/windows/security/information-protection/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies.md index e6b09cec2e..86ebe29111 100644 --- a/windows/security/information-protection/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies.md +++ b/windows/security/information-protection/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies.md @@ -13,7 +13,7 @@ manager: dansimp audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual -ms.date: 02/28/2019 +ms.date: 04/17/2019 --- # Prepare your organization for BitLocker: Planning and policies @@ -163,9 +163,9 @@ Full drive encryption means that the entire drive will be encrypted, regardless ## Active Directory Domain Services considerations -BitLocker integrates with Active Directory Domain Services (AD DS) to provide centralized key management. By default, no recovery information is backed up to Active Directory. Administrators can configure the following Group Policy setting to enable backup of BitLocker recovery information: +BitLocker integrates with Active Directory Domain Services (AD DS) to provide centralized key management. By default, no recovery information is backed up to Active Directory. Administrators can configure the following Group Policy setting for each drive type to enable backup of BitLocker recovery information: -Computer Configuration\\Administrative Templates\\Windows Components\\BitLocker Drive Encryption\\Turn on BitLocker backup to Active Directory Domain Services +Computer Configuration\\Administrative Templates\\Windows Components\\BitLocker Drive Encryption\\*drive type*\\Choose how BitLocker protected drives can be recovered. By default, only Domain Admins have access to BitLocker recovery information, but [access can be delegated to others](https://blogs.technet.microsoft.com/craigf/2011/01/26/delegating-access-in-ad-to-bitlocker-recovery-information/). From 433deba19a73275feb20a23639f7dea566e57f2e Mon Sep 17 00:00:00 2001 From: mstojens <45110146+mstojens@users.noreply.github.com> Date: Wed, 17 Apr 2019 10:37:19 -0700 Subject: [PATCH 337/349] Corrected UseProxyForLocalAddresses error Switched definitions of 0 and 1 for UseProxyForLocalAddresses (should be 0 use proxy for local, 1 means don't). --- windows/client-management/mdm/networkproxy-csp.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/networkproxy-csp.md b/windows/client-management/mdm/networkproxy-csp.md index 563f13334a..6a783571df 100644 --- a/windows/client-management/mdm/networkproxy-csp.md +++ b/windows/client-management/mdm/networkproxy-csp.md @@ -76,8 +76,8 @@ The data type is string. Supported operations are Get and Replace. Starting in W Specifies whether the proxy server should be used for local (intranet) addresses.  Valid values:
    -
  • 0 (default) - Do not use proxy server for local addresses
    • -
  • 1 - Use proxy server for local addresses
    • +
  • 0 (default) - Use proxy server for local addresses
    • +
  • 1 - Do not use proxy server for local addresses
The data type is int. Supported operations are Get and Replace. Starting in Window 10, version 1803, the Delete operation is also supported. From d9d2586af76420b8cc9b7d873d992f85310d7345 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Wed, 17 Apr 2019 11:47:00 -0700 Subject: [PATCH 338/349] add back in vanished page updates --- .../change-history-for-configure-windows-10.md | 1 + windows/configuration/kiosk-prepare.md | 11 ++++++----- windows/configuration/kiosk-single-app.md | 2 ++ .../lock-down-windows-10-to-specific-apps.md | 3 ++- 4 files changed, 11 insertions(+), 6 deletions(-) diff --git a/windows/configuration/change-history-for-configure-windows-10.md b/windows/configuration/change-history-for-configure-windows-10.md index 954454df28..1bee65476e 100644 --- a/windows/configuration/change-history-for-configure-windows-10.md +++ b/windows/configuration/change-history-for-configure-windows-10.md @@ -21,6 +21,7 @@ This topic lists new and updated topics in the [Configure Windows 10](index.md) New or changed topic | Description --- | --- [Use Shell Launcher to create a Windows 10 kiosk](kiosk-shelllauncher.md) | Added information for Shell Launcher v2, coming in the next feature update to Windows 10. +[Prepare a device for kiosk configuration](kiosk-prepare.md) | Added new recommendations for policies to manage updates. ## February 2019 diff --git a/windows/configuration/kiosk-prepare.md b/windows/configuration/kiosk-prepare.md index f484267983..436a96f0a8 100644 --- a/windows/configuration/kiosk-prepare.md +++ b/windows/configuration/kiosk-prepare.md @@ -8,7 +8,6 @@ ms.mktglfcycl: manage ms.sitesec: library author: jdeckerms ms.localizationpriority: medium -ms.date: 01/09/2019 ms.topic: article --- @@ -31,12 +30,14 @@ ms.topic: article ## Configuration recommendations -For a more secure kiosk experience, we recommend that you make the following configuration changes to the device before you configure it as a kiosk: +For a more secure kiosk experience, we recommend that you make the following configuration changes to the device before you configure it as a kiosk: Recommendation | How to --- | --- -Hide update notifications
(New in Windows 10, version 1809) | Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\Windows Components\\Windows Update\\Display options for update notifications**
-or-
Use the MDM setting **Update/UpdateNotificationLevel** from the [**Policy/Update** configuration service provider](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update#update-updatenotificationlevel)
-or-
Add the following registry keys as DWORD (32-bit) type:
`HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\SetUpdateNotificationLevel` with a value of `1`, and `HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\UpdateNotificationLevel` with a value of `1` to hide all notifications except restart warnings, or value of `2` to hide all notifications, including restart warnings. -Replace "blue screen" with blank screen for OS errors | Add the following registry key as DWORD (32-bit) type with a value of `1`:

`HKLM\SYSTEM\CurrentControlSet\Control\CrashControl\DisplayDisabled` +Hide update notifications
(New in Windows 10, version 1809) | Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\Windows Components\\Windows Update\\Display options for update notifications**
-or-
Use the MDM setting **Update/UpdateNotificationLevel** from the [**Policy/Update** configuration service provider](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update#update-updatenotificationlevel)
-or-
Add the following registry keys as type DWORD (32-bit) in the path of **HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate**:
**\SetUpdateNotificationLevel** with a value of `1`, and **\UpdateNotificationLevel** with a value of `1` to hide all notifications except restart warnings, or value of `2` to hide all notifications, including restart warnings. +Enable and schedule automatic updates | Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\Windows Components\\Windows Update\\Configure Automatic Updates**, and select `option 4 (Auto download and schedule the install)`
-or-
Use the MDM setting **Update/AllowAutoUpdate** from the [**Policy/Update** configuration service provider](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update#update-allowautoupdate), and select `option 3 (Auto install and restart at a specified time)`

**Note:** Installations can take from between 30 minutes and 2 hours, depending on the device, so you should schedule updates to occur when a block of 3-4 hours is available.

To schedule the automatic update, configure **Schedule Install Day**, **Schedule Install Time**, and **Schedule Install Week**. +Enable automatic restart at the scheduled time | Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\Windows Components\\Windows Update\\Always automatically restart at the scheduled time** +Replace "blue screen" with blank screen for OS errors | Add the following registry key as DWORD (32-bit) type with a value of `1`:

**HKLM\SYSTEM\CurrentControlSet\Control\CrashControl\DisplayDisabled** Put device in **Tablet mode**. | If you want users to be able to use the touch (on screen) keyboard, go to **Settings** > **System** > **Tablet mode** and choose **On.** Do not turn on this setting if users will not interact with the kiosk, such as for a digital sign. Hide **Ease of access** feature on the sign-in screen. | See [how to disable the Ease of Access button in the registry.](https://docs.microsoft.com/windows-hardware/customize/enterprise/complementary-features-to-custom-logon#welcome-screen) Disable the hardware power button. | Go to **Power Options** > **Choose what the power button does**, change the setting to **Do nothing**, and then **Save changes**. @@ -67,7 +68,7 @@ In addition to the settings in the table, you may want to set up **automatic log >[!NOTE]   >If you are not familiar with Registry Editor, [learn how to modify the Windows registry](https://go.microsoft.com/fwlink/p/?LinkId=615002).   - + 2. Go to **HKEY\_LOCAL\_MACHINE\SOFTWARE\\Microsoft\WindowsNT\CurrentVersion\Winlogon** diff --git a/windows/configuration/kiosk-single-app.md b/windows/configuration/kiosk-single-app.md index 6fb60b7a45..18eee13ef9 100644 --- a/windows/configuration/kiosk-single-app.md +++ b/windows/configuration/kiosk-single-app.md @@ -42,6 +42,8 @@ Method | Description >[!TIP] >You can also configure a kiosk account and app for single-app kiosk within [XML in a provisioning package](lock-down-windows-10-to-specific-apps.md) by using a [kiosk profile](lock-down-windows-10-to-specific-apps.md#profile). +> +>Be sure to check the [configuration recommendations](kiosk-prepare.md) before you set up your kiosk. diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index f704538ec1..74acffcf3a 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -40,7 +40,8 @@ New features and improvements | In update You can configure multi-app kiosks using [Microsoft Intune](#intune) or a [provisioning package](#provision). - +>[!TIP] +>Be sure to check the [configuration recommendations](kiosk-prepare.md) before you set up your kiosk. ## Configure a kiosk in Microsoft Intune From aa233efb5f840cb5708419e6fdb4e95a59e4fcd0 Mon Sep 17 00:00:00 2001 From: Beth Levin <40870842+levinec@users.noreply.github.com> Date: Wed, 17 Apr 2019 15:46:33 -0700 Subject: [PATCH 339/349] Update next-gen-threat-and-vuln-mgt.md --- .../windows-defender-atp/next-gen-threat-and-vuln-mgt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md index d83dc2575a..cefa8aada0 100644 --- a/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md +++ b/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt.md @@ -2,7 +2,7 @@ title: Next-generation Threat & Vulnerability Management description: This new capability uses a game-changing risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. keywords: threat and vulnerability management, MDATP-TVM, vulnerability management, threat and vulnerability scanning -search.product: Windows 10 +search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: w10 ms.mktglfcycl: deploy From a434847bc660b00c02a91121ce8e58b7a99ca187 Mon Sep 17 00:00:00 2001 From: Dulce Montemayor Date: Wed, 17 Apr 2019 15:54:49 -0700 Subject: [PATCH 340/349] Update tvm-dashboard-insights.md --- .../windows-defender-atp/tvm-dashboard-insights.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md index 9613ef139d..af2aff1186 100644 --- a/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/windows-defender-atp/tvm-dashboard-insights.md @@ -1,10 +1,10 @@ --- title: What's in the dashboard and what it means for my organization's security posture -description: -keywords: -search.product: Windows 10 +description: What's in the Threat & Vulnerability Management dashboard and how it can help SecOps and Security Administrators arrive at informed decisions in addressing cybersecurity threat vulnerabilities and building their organization's security resilience. +keywords: mdatp-tvm, mdatp-tvm dashboard, threat & vulnerability management, risk-based threat & vulnerability management, security configuration, configuration score, exposure score +search.product: eADQiWindows 10XVcnh search.appverid: met150 -ms.prod: w10 +ms.prod: eADQiWindows 10XVcnh ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security From 91a645528d3aeb1553a343c4ad951375b2225864 Mon Sep 17 00:00:00 2001 From: Dulce Montemayor Date: Wed, 17 Apr 2019 16:26:46 -0700 Subject: [PATCH 341/349] Update configuration-score.md --- .../windows-defender-atp/configuration-score.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configuration-score.md b/windows/security/threat-protection/windows-defender-atp/configuration-score.md index 746d31cc8f..bb6764a9a3 100644 --- a/windows/security/threat-protection/windows-defender-atp/configuration-score.md +++ b/windows/security/threat-protection/windows-defender-atp/configuration-score.md @@ -2,7 +2,7 @@ title: Overview of Configuration score in Microsoft Defender Security Center description: Expand your visibility into the overall security configuration posture of your organization keywords: configuration score, mdatp configuration score, secure score, security controls, improvement opportunities, security configuration score over time, security posture, baseline -search.product: Windows 10 +search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: w10 ms.mktglfcycl: deploy From d9fb2eb5d3f3e2f65a87e2cf00944aea27f8c80c Mon Sep 17 00:00:00 2001 From: Dulce Montemayor Date: Wed, 17 Apr 2019 16:32:39 -0700 Subject: [PATCH 342/349] Update threat-and-vuln-mgt-scenarios.md --- .../windows-defender-atp/threat-and-vuln-mgt-scenarios.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md index a88e212a95..1e60255cf2 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -1,8 +1,8 @@ --- title: Threat & Vulnerability Management scenarios -description: -keywords: -search.product: Windows 10 +description: Learn how to use Threat & Vulnerability Management in the context of scenarios that Security Administrators encounter when collaborating with IT Administrators and SecOps while protecting their organization from cybersecurity threats. +keywords: mdatp-tvm scenarios, mdatp, tvm, tvm scenarios, reduce threat & vulnerability exposure, reduce threat and vulnerability, improve security configuration, increase configuration score, increase threat & vulnerability configuration score, configuration score, exposure score, security controls +search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: w10 ms.mktglfcycl: deploy From 7711732617d0bd6755461a43358fb78e0d84d3d7 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 18 Apr 2019 15:51:15 -0700 Subject: [PATCH 343/349] content for interoperability --- windows/security/threat-protection/TOC.md | 4 ++ .../windows-defender-atp/TOC.md | 4 ++ .../partner-applications.md | 64 +++++++++++++++++++ .../whats-new-in-windows-defender-atp.md | 4 +- 4 files changed, 75 insertions(+), 1 deletion(-) create mode 100644 windows/security/threat-protection/windows-defender-atp/partner-applications.md diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 178b297aa0..0cf1107dd2 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -345,6 +345,10 @@ ###### [Threat protection reports](windows-defender-atp/threat-protection-reports-windows-defender-advanced-threat-protection.md) ###### [Machine health and compliance reports](windows-defender-atp/machine-reports-windows-defender-advanced-threat-protection.md) +##### Interoperability +###### [Partner applications](windows-defender-atp/partner-applications.md) + + ##### Role-based access control ###### [Manage portal access using RBAC](windows-defender-atp/rbac-windows-defender-advanced-threat-protection.md) ####### [Create and manage roles](windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md) diff --git a/windows/security/threat-protection/windows-defender-atp/TOC.md b/windows/security/threat-protection/windows-defender-atp/TOC.md index 3ac4481724..635860ba03 100644 --- a/windows/security/threat-protection/windows-defender-atp/TOC.md +++ b/windows/security/threat-protection/windows-defender-atp/TOC.md @@ -338,6 +338,10 @@ ##### [Threat protection reports](threat-protection-reports-windows-defender-advanced-threat-protection.md) ##### [Machine health and compliance reports](machine-reports-windows-defender-advanced-threat-protection.md) + +#### Interoperability +##### [Partner applications](partner-applications.md) + #### Role-based access control ##### [Manage portal access using RBAC](rbac-windows-defender-advanced-threat-protection.md) ###### [Create and manage roles](user-roles-windows-defender-advanced-threat-protection.md) diff --git a/windows/security/threat-protection/windows-defender-atp/partner-applications.md b/windows/security/threat-protection/windows-defender-atp/partner-applications.md new file mode 100644 index 0000000000..b622280ea5 --- /dev/null +++ b/windows/security/threat-protection/windows-defender-atp/partner-applications.md @@ -0,0 +1,64 @@ +--- +title: Partner applications in Microsoft Defender ATP +description: View supported partner connections so enhance the detection, investigation, and threat intelligence capabilities of the platform +keywords: partners, applications, third-party, connections, sentinelone, lookout, bitdefender, corrata, morphisec, paloalto, ziften, better mobile +search.product: eADQiWindows 10XVcnh +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: macapara +author: mjcaparas +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +--- + +# Partner applications in Microsoft Defender ATP +**Applies to:** + +- [Microsoft Defender Advanced Threat Protection (Windows Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) + + +Microsoft Defender ATP supports third-party applications to help enhance the detection, investigation, and threat intelligence capabilities of the platform. + + +The support for third-party solutions help to further streamline, integrate, and orchestrate defenses from other vendors with Microsoft Defender ATP; enabling security teams to effectively respond better to modern threats. + +Microsoft Defender ATP seamlessly integrates with existing security solutions - providing out of the box integration with SIEM, ticketing and IT service management solutions, managed security service providers (MSSP), IoC indicators ingestions and matching, automated device investigation and remediation based on external alerts, and integration with Security orchestration and automation response (SOAR) systems. + +## SIEM integration +Microsoft Defender ATP supports SIEM integration through a variety of methods specialized SIEM system interface with out of the box connectors, a generic alert API enabling custom implementations, and an action API enabling alert status management. For more information, see [Enable SIEM integration](enable-siem-integration-windows-defender-advanced-threat-protection.md). + +## Ticketing and IT service management +Ticketing solution integration helps to implement manual and automatic response processes. Microsoft Defender ATP can help to create tickets automatically when an alert is generated and resolve the alerts when tickets are closed using the alerts API. + +## Security orchestration and automation response (SOAR) integration +Orchestration solutions can help build playbooks and integrate the rich data model and actions that Microsoft Defender ATP APIs expose to orchestrate responses, such as query for device data, trigger machine isolation, block/allow, resolve alert and others. + +## External alert correlation and Automated investigation and remediation +Microsoft Defender ATP offers unique automated investigation and remediation capabilities to drive incident response at scale. + +Integrating the automated investigation and response capability with other solutions such as IDS and firewalls help to address alerts and minimize the complexities surrounding network and device signal correlation, effectively streamlining the investigation and threat remediation actions on devices. + +External alerts can be pushed into Microsoft Defender ATP and is presented side-by-side with additional device-based alerts from Microsoft Defender ATP. This view provides a full context of the alert - with the real process and the full story of attack. + +## Indicators matching +You can use threat-intelligence from providers and aggregators to maintain and use indicators of compromise (IOCs). + +Microsoft Defender ATP allows you to integrate with such solutions and act on IoCs by correlating its rich telemetry and creating alerts when there's a match; leveraging prevention and automated response capabilities to block execution and take remediation actions when theres a match. + +Microsoft Defender ATP currently supports IOC matching and remediation for file and network indicators. Blocking is supported for file indicators. + +## Support for non-Windows platforms +Microsoft Defender ATP provides a centralized security operations experience for Windows as well as non-Windows platforms. You'll be able to see alerts from various supported operating systems (OS) in the portal and better protect your organization's network. This experience leverages on a third-party security products sensor data giving you a unified experience. + + + + + + + diff --git a/windows/security/threat-protection/windows-defender-atp/whats-new-in-windows-defender-atp.md b/windows/security/threat-protection/windows-defender-atp/whats-new-in-windows-defender-atp.md index 6d2c512257..f9ac32f49d 100644 --- a/windows/security/threat-protection/windows-defender-atp/whats-new-in-windows-defender-atp.md +++ b/windows/security/threat-protection/windows-defender-atp/whats-new-in-windows-defender-atp.md @@ -25,10 +25,12 @@ Here are the new features in the latest release of Windows Defender ATP as well ## April 2019 ### In preview -The following capability is included in the April 2019 preview release. +The following capabilities are included in the April 2019 preview release. - [Threat & Vulnerability Management](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/next-gen-threat-and-vuln-mgt)
A new built-in capability that uses a risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. +- [Interoperability](https://docs.microsoft.com/windows/security/threat-protection/partner-applications)
Microsoft Defender ATP supports third-party applications to help enhance the detection, investigation, and threat intelligence capabilities of the platform. + ## March 2019 ### In preview The following capability are included in the March 2019 preview release. From b40996040a1af9ebe7fdc35158bc47ac4b396cba Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 18 Apr 2019 15:54:03 -0700 Subject: [PATCH 344/349] Update partner-applications.md content for partner integration --- .../windows-defender-atp/partner-applications.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/partner-applications.md b/windows/security/threat-protection/windows-defender-atp/partner-applications.md index b622280ea5..24ba042fc8 100644 --- a/windows/security/threat-protection/windows-defender-atp/partner-applications.md +++ b/windows/security/threat-protection/windows-defender-atp/partner-applications.md @@ -1,6 +1,6 @@ --- title: Partner applications in Microsoft Defender ATP -description: View supported partner connections so enhance the detection, investigation, and threat intelligence capabilities of the platform +description: View supported partner applications to enhance the detection, investigation, and threat intelligence capabilities of the platform keywords: partners, applications, third-party, connections, sentinelone, lookout, bitdefender, corrata, morphisec, paloalto, ziften, better mobile search.product: eADQiWindows 10XVcnh search.appverid: met150 From cbfd8b30f63d341b922550e3bd77ec48d6adc539 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 18 Apr 2019 15:58:54 -0700 Subject: [PATCH 345/349] remove allowed blocked naming --- .openpublishing.redirection.json | 5 +++++ windows/security/threat-protection/TOC.md | 2 +- ...er-advanced-threat-protection.md => manage-indicators.md} | 0 3 files changed, 6 insertions(+), 1 deletion(-) rename windows/security/threat-protection/windows-defender-atp/{manage-allowed-blocked-list-windows-defender-advanced-threat-protection.md => manage-indicators.md} (100%) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index ab677cc666..f6b41f4ac4 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -13944,5 +13944,10 @@ "redirect_url": "/windows/security/threat-protection/windows-defender-atp/threat-analytics", "redirect_document_id": true }, +{ +"source_path": "windows/security/threat-protection/windows-defender-atp/manage-allowed-blocked-list-windows-defender-advanced-threat-protection.md", +"redirect_url": "/windows/security/threat-protection/windows-defender-atp/manage-indicators", +"redirect_document_id": true +}, ] } diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 0cf1107dd2..32688a8c55 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -393,7 +393,7 @@ #####Rules ###### [Manage suppression rules](windows-defender-atp/manage-suppression-rules-windows-defender-advanced-threat-protection.md) ###### [Manage automation allowed/blocked lists](windows-defender-atp/manage-automation-allowed-blocked-list-windows-defender-advanced-threat-protection.md) -###### [Manage allowed/blocked lists](windows-defender-atp/manage-allowed-blocked-list-windows-defender-advanced-threat-protection.md) +###### [Manage indicators](windows-defender-atp/manage-allowed-blocked-list-windows-defender-advanced-threat-protection.md) ###### [Manage automation file uploads](windows-defender-atp/manage-automation-file-uploads-windows-defender-advanced-threat-protection.md) ###### [Manage automation folder exclusions](windows-defender-atp/manage-automation-folder-exclusions-windows-defender-advanced-threat-protection.md) diff --git a/windows/security/threat-protection/windows-defender-atp/manage-allowed-blocked-list-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/manage-indicators.md similarity index 100% rename from windows/security/threat-protection/windows-defender-atp/manage-allowed-blocked-list-windows-defender-advanced-threat-protection.md rename to windows/security/threat-protection/windows-defender-atp/manage-indicators.md From ef439f7b5b0c17df6a43dbbdf6133d362d7250bd Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 18 Apr 2019 16:01:13 -0700 Subject: [PATCH 346/349] update toc update toc --- windows/security/threat-protection/TOC.md | 2 +- windows/security/threat-protection/windows-defender-atp/TOC.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 32688a8c55..3feed9a1fa 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -393,7 +393,7 @@ #####Rules ###### [Manage suppression rules](windows-defender-atp/manage-suppression-rules-windows-defender-advanced-threat-protection.md) ###### [Manage automation allowed/blocked lists](windows-defender-atp/manage-automation-allowed-blocked-list-windows-defender-advanced-threat-protection.md) -###### [Manage indicators](windows-defender-atp/manage-allowed-blocked-list-windows-defender-advanced-threat-protection.md) +###### [Manage indicators](windows-defender-atp/manage-indicators.md) ###### [Manage automation file uploads](windows-defender-atp/manage-automation-file-uploads-windows-defender-advanced-threat-protection.md) ###### [Manage automation folder exclusions](windows-defender-atp/manage-automation-folder-exclusions-windows-defender-advanced-threat-protection.md) diff --git a/windows/security/threat-protection/windows-defender-atp/TOC.md b/windows/security/threat-protection/windows-defender-atp/TOC.md index 635860ba03..3a56abbd31 100644 --- a/windows/security/threat-protection/windows-defender-atp/TOC.md +++ b/windows/security/threat-protection/windows-defender-atp/TOC.md @@ -378,7 +378,7 @@ ####Rules ##### [Manage suppression rules](manage-suppression-rules-windows-defender-advanced-threat-protection.md) ##### [Manage automation allowed/blocked lists](manage-automation-allowed-blocked-list-windows-defender-advanced-threat-protection.md) -##### [Manage allowed/blocked lists](manage-allowed-blocked-list-windows-defender-advanced-threat-protection.md) +##### [Manage indicators](manage-indicators.md) ##### [Manage automation file uploads](manage-automation-file-uploads-windows-defender-advanced-threat-protection.md) ##### [Manage automation folder exclusions](manage-automation-folder-exclusions-windows-defender-advanced-threat-protection.md) From e151042d6424d7a85ae25bddf58fe31bf83f75df Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 18 Apr 2019 17:09:59 -0700 Subject: [PATCH 347/349] data storage update data storage update --- ...age-privacy-windows-defender-advanced-threat-protection.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/data-storage-privacy-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/data-storage-privacy-windows-defender-advanced-threat-protection.md index 67780a3f78..8967eb0a92 100644 --- a/windows/security/threat-protection/windows-defender-atp/data-storage-privacy-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/data-storage-privacy-windows-defender-advanced-threat-protection.md @@ -36,12 +36,12 @@ Information collected includes file data (such as file names, sizes, and hashes) Microsoft stores this data securely in Microsoft Azure and maintains it in accordance with Microsoft privacy practices and [Microsoft Trust Center policies](https://go.microsoft.com/fwlink/?linkid=827578). -Microsoft uses this data to: +This data enables Windows Defender ATP to: - Proactively identify indicators of attack (IOAs) in your organization - Generate alerts if a possible attack was detected - Provide your security operations with a view into machines, files, and URLs related to threat signals from your network, enabling you to investigate and explore the presence of security threats on the network. -Microsoft does not use your data for advertising or for any other purpose other than providing you the service. +Microsoft does not use your data for advertising. ## Data protection and encryption The Windows Defender ATP service utilizes state of the art data protection technologies which are based on Microsoft Azure infrastructure. From 4caccfbad98e278784b2869ef59a125029652143 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 18 Apr 2019 17:15:52 -0700 Subject: [PATCH 348/349] genearl fixes --- ...atures-windows-defender-advanced-threat-protection.md | 3 +-- .../microsoft-cloud-app-security-config.md | 9 ++------- 2 files changed, 3 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/advanced-features-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/advanced-features-windows-defender-advanced-threat-protection.md index df2d4cbab8..dff8fdeb1c 100644 --- a/windows/security/threat-protection/windows-defender-atp/advanced-features-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/advanced-features-windows-defender-advanced-threat-protection.md @@ -94,8 +94,7 @@ To receive contextual machine integration in Office 365 Threat Intelligence, you This feature is currently on public preview. When you enable this feature, you'll receive targeted attack notifications from Microsoft Threat Experts through your Windows Defender ATP portal's alerts dashboard and via email if you configure it. >[!NOTE] ->This feature will be available with an E5 license for [Enterprise Mobility + Security](https://www.microsoft.com/cloud-platform/enterprise-mobility-security) on machines running Windows 10 version 1809 or later. - +>This feature will be available with an E5 license for [Enterprise Mobility + Security](https://www.microsoft.com/cloud-platform/enterprise-mobility-security) on machines running Windows 10, version 1709 (OS Build 16299.1085 with [KB4493441](https://support.microsoft.com/help/4493441)), Windows 10, version 1803 (OS Build 17134.704 with [KB4493464](https://support.microsoft.com/help/4493464)), Windows 10, version 1809 (OS Build 17763.379 with [KB4489899](https://support.microsoft.com/help/4489899)) or later Windows 10 versions. ## Microsoft Cloud App Security diff --git a/windows/security/threat-protection/windows-defender-atp/microsoft-cloud-app-security-config.md b/windows/security/threat-protection/windows-defender-atp/microsoft-cloud-app-security-config.md index 52627d87be..32faa07505 100644 --- a/windows/security/threat-protection/windows-defender-atp/microsoft-cloud-app-security-config.md +++ b/windows/security/threat-protection/windows-defender-atp/microsoft-cloud-app-security-config.md @@ -15,31 +15,26 @@ manager: dansimp audience: ITPro ms.collection: M365-security-compliance ms.topic: article -ms.date: 10/19/2018 - --- # Configure Microsoft Cloud App Security in Windows **Applies to:** - [Windows Defender Advanced Threat Protection (Windows Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -[!include[Prerelease�information](prerelease.md)] +[!include[Prerelease information](prerelease.md)] To benefit from Windows Defender Advanced Threat Protection (ATP) cloud app discovery signals, turn on Microsoft Cloud App Security integration. >[!NOTE] ->This feature is available with an E5 license for [Enterprise Mobility + Security](https://www.microsoft.com/cloud-platform/enterprise-mobility-security) on machines running Windows 10 version 1809 or later. +>This feature will be available with an E5 license for [Enterprise Mobility + Security](https://www.microsoft.com/cloud-platform/enterprise-mobility-security) on machines running Windows 10, version 1709 (OS Build 16299.1085 with [KB4493441](https://support.microsoft.com/help/4493441)), Windows 10, version 1803 (OS Build 17134.704 with [KB4493464](https://support.microsoft.com/help/4493464)), Windows 10, version 1809 (OS Build 17763.379 with [KB4489899](https://support.microsoft.com/help/4489899)) or later Windows 10 versions. 1. In the navigation pane, select **Preferences setup** > **Advanced features**. 2. Select **Microsoft Cloud App Security** and switch the toggle to **On**. 3. Click **Save preferences**. - -![Advanced features](images/atp-mcas-settings.png) - Once activated, Windows Defender ATP will immediately start forwarding discovery signals to Cloud App Security. ## View the data collected From cacc4365f50074a579ecf1d885c11b0496a434be Mon Sep 17 00:00:00 2001 From: lomayor Date: Fri, 19 Apr 2019 10:28:57 -0700 Subject: [PATCH 349/349] Update attack-surface-reduction-exploit-guard.md --- .../attack-surface-reduction-exploit-guard.md | 32 +++++++++---------- 1 file changed, 16 insertions(+), 16 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard.md b/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard.md index e16b905b59..5bfe2c6ba4 100644 --- a/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard.md +++ b/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard.md @@ -63,22 +63,22 @@ Event ID | Description The following sections describe each of the 15 attack surface reduction rules. This table shows their corresponding GUIDs, which you use if you're configuring the rules with Group Policy or PowerShell. If you use System Center Configuration Manager or Microsoft Intune, you do not need the GUIDs: -Rule name | GUID --|- -Block executable content from email client and webmail | BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550 -Block all Office applications from creating child processes | D4F940AB-401B-4EFC-AADC-AD5F3C50688A -Block Office applications from creating executable content | 3B576869-A4EC-4529-8536-B80A7769E899 -Block Office applications from injecting code into other processes | 75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84 -Block JavaScript or VBScript from launching downloaded executable content | D3E037E1-3EB8-44C8-A917-57927947596D -Block execution of potentially obfuscated scripts | 5BEB7EFE-FD9A-4556-801D-275E5FFC04CC -Block Win32 API calls from Office macro | 92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B -Block executable files from running unless they meet a prevalence, age, or trusted list criterion | 01443614-cd74-433a-b99e-2ecdc07bfc25 -Use advanced protection against ransomware | c1db55ab-c21a-4637-bb3f-a12568109d35 -Block credential stealing from the Windows local security authority subsystem (lsass.exe) | 9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2 -Block process creations originating from PSExec and WMI commands | d1e49aac-8f56-4280-b9ba-993a6d77406c -Block untrusted and unsigned processes that run from USB | b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4 -Block Office communication application from creating child processes | 26190899-1602-49e8-8b27-eb1d0a1ce869 -Block Adobe Reader from creating child processes | 7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c +Rule name | GUID | File & folder exclusions +-|-|- +Block executable content from email client and webmail | BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550 | Supported +Block all Office applications from creating child processes | D4F940AB-401B-4EFC-AADC-AD5F3C50688A | Supported +Block Office applications from creating executable content | 3B576869-A4EC-4529-8536-B80A7769E899 | Supported +Block Office applications from injecting code into other processes | 75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84 | Supported +Block JavaScript or VBScript from launching downloaded executable content | D3E037E1-3EB8-44C8-A917-57927947596D | Not supported +Block execution of potentially obfuscated scripts | 5BEB7EFE-FD9A-4556-801D-275E5FFC04CC | Supported +Block Win32 API calls from Office macro | 92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B | Supported +Block executable files from running unless they meet a prevalence, age, or trusted list criterion | 01443614-cd74-433a-b99e-2ecdc07bfc25 | Supported +Use advanced protection against ransomware | c1db55ab-c21a-4637-bb3f-a12568109d35 | Supported +Block credential stealing from the Windows local security authority subsystem (lsass.exe) | 9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2 | Supported +Block process creations originating from PSExec and WMI commands | d1e49aac-8f56-4280-b9ba-993a6d77406c | Not supported +Block untrusted and unsigned processes that run from USB | b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4 | Supported +Block Office communication application from creating child processes | 26190899-1602-49e8-8b27-eb1d0a1ce869 | Supported +Block Adobe Reader from creating child processes | 7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c | Supported Each rule description indicates which apps or file types the rule applies to. In general, the rules for Office apps apply to only Word, Excel, PowerPoint, and OneNote, or they apply to Outlook. Except where specified, attack surface reduction rules don't apply to any other Office apps.