From 0e6dda660d0460e736755c093f8d53c701545baf Mon Sep 17 00:00:00 2001 From: Iaan D'Souza-Wiltshire Date: Thu, 24 Aug 2017 16:18:22 -0700 Subject: [PATCH] final exp prot drafts --- ...tomize-controlled-folders-exploit-guard.md | 4 +- .../customize-exploit-protection.md | 10 +- .../emet-exploit-protection-exploit-guard.md | 40 +---- .../enable-exploit-protection.md | 4 +- .../evaluate-exploit-protection.md | 2 +- .../exploit-protection-exploit-guard.md | 4 +- .../images/exp-prot-gp.png | Bin 0 -> 52841 bytes .../images/wdsc-exp-prot-export.png | Bin 0 -> 11306 bytes ...port-export-exploit-protection-emet-xml.md | 163 ++++++++++++------ 9 files changed, 128 insertions(+), 99 deletions(-) create mode 100644 windows/threat-protection/windows-defender-exploit-guard/images/exp-prot-gp.png create mode 100644 windows/threat-protection/windows-defender-exploit-guard/images/wdsc-exp-prot-export.png diff --git a/windows/threat-protection/windows-defender-exploit-guard/customize-controlled-folders-exploit-guard.md b/windows/threat-protection/windows-defender-exploit-guard/customize-controlled-folders-exploit-guard.md index 42fccdb3c0..f8234bee99 100644 --- a/windows/threat-protection/windows-defender-exploit-guard/customize-controlled-folders-exploit-guard.md +++ b/windows/threat-protection/windows-defender-exploit-guard/customize-controlled-folders-exploit-guard.md @@ -54,7 +54,7 @@ You can also enter network shares and mapped drives, but environment variables a You can use the Windows Defender Security Center app or Group Policy to add and remove additional protected folders. -### Use the Windows Defender Security app to protect additional folders +### Use the Windows Defender Security Center app to protect additional folders 1. Open the Windows Defender Security Center by clicking the shield icon in the task bar or searching the start menu for **Defender**. @@ -79,7 +79,7 @@ You can use the Windows Defender Security Center app or Group Policy to add and 5. Expand the tree to **Windows components > Windows Defender Antivirus > Windows Defender Exploit Guard > Controlled Folder Access**. -6. Double-click the **Configured protected folders** setting and set the option to **Enabled**. Click **Show** and enter each folder as Value? Or Value Name? +6. Double-click the **Configured protected folders** setting and set the option to **Enabled**. Click **Show** and enter each folder. > [!IMPORTANT] > Environment variables and wildcards are not supported. diff --git a/windows/threat-protection/windows-defender-exploit-guard/customize-exploit-protection.md b/windows/threat-protection/windows-defender-exploit-guard/customize-exploit-protection.md index bc4362edc2..657b44a471 100644 --- a/windows/threat-protection/windows-defender-exploit-guard/customize-exploit-protection.md +++ b/windows/threat-protection/windows-defender-exploit-guard/customize-exploit-protection.md @@ -1,7 +1,7 @@ --- -title: -keywords: -description: +title: Enable or disable specific mitigations used by Exploit Protection +keywords: exploit protection, mitigations, enable, powershell, dep, cfg, emet, aslr +description: You can enable individual mitigations using the Windows Defender Security Center app or PowerShell. You can also audit mitigations and export configurations. search.product: eADQiWindows 10XVcnh ms.pagetype: security ms.prod: w10 @@ -29,12 +29,12 @@ ms.author: iawilt - Windows Defender Security Center app - Group Policy - PowerShell -- Configuration service providers for mobile device management + Exploit Protection automatically applies a number of exploit mitigation techniques on both the operating system processes and on individual apps. - It is part of Windows Defender Exploit Guard, which is itself a component in the new Windows Defender Advanced Threat Protection offering of security and threat prevention products. + It is part of [Windows Defender Exploit Guard](windows-defender-exploit-guard.md). You configure these settings using the Windows Defender Security Center on an individual machine, and then export the configuration as an XML file that you can deploy to other machines. You can use Group Policy to distribute the XML file to multiple devices at once. You can also configure the mitigations with PowerShell. diff --git a/windows/threat-protection/windows-defender-exploit-guard/emet-exploit-protection-exploit-guard.md b/windows/threat-protection/windows-defender-exploit-guard/emet-exploit-protection-exploit-guard.md index 3aa16ce468..4551fc78ab 100644 --- a/windows/threat-protection/windows-defender-exploit-guard/emet-exploit-protection-exploit-guard.md +++ b/windows/threat-protection/windows-defender-exploit-guard/emet-exploit-protection-exploit-guard.md @@ -1,6 +1,7 @@ --- -title: -keywords: +title: Compare the features in Exploit Protection with EMET +keywords: emet, enhanced mitigation experience toolkit, configuration, exploit +description: Exploit Protection in Windows 10 provides advanced configuration over the settings offered in EMET. search.product: eADQiWindows 10XVcnh ms.pagetype: security ms.prod: w10 @@ -26,44 +27,15 @@ ms.author: iawilt - Enterprise security administrators -**Manageability available with** - -- Group Policy -- PowerShell -- Windows Management Instrumentation (WMI) -- System Center Configuration Manager -- Microsoft Intune -- Windows Defender Security Center app - - -Exploit Protection automatically applies a number of exploit mitigation techniques on both the operating system processes and on individual apps. - - It is part of Windows Defender Exploit Guard, which is itself a component in the new Windows Defender Advanced Threat Protection offering of security and threat prevention products. - - You configure these settings using the Windows Defender Security Center on an individual machine, and then export the configuration as an XML file that you can deploy to other machines. You can use Group Policy to distribute the XML file to multiple devices at once. - -## Requirements - -The following requirements must be met before Exploit Protection will work: - -Windows 10 version | Windows Defender Advanced Threat Protection -Insider Preview build 16232 or later (dated July 1, 2017 or later) | For full reporting you need a license for [Windows Defender ATP](../windows-defender-atp/windows-defender-advanced-threat-protection.md) - - - - - ### Converting and Applying an EMET config: -1. Export the existing EMET configuration. This can be done from the "Export" button in the GUI, or by running the command: **emet_conf.exe –export emetConfig.xml** -2. In an elevated PowerShell window, convert the exported configuration with: **ConvertTo-ProcessMitigationPolicy -EMETFilePath emetConfig.xml -OutputFilePath win10Config.xml** -3. Note that this may give you some warnings, but these should be safe to ignore. -4. Apply the new configuration: from an elevated PowerShell window run **Set-ProcessMitigation -RegistryConfigFilePath win10Config.xml ** -5. From here you can check or edit the settings in the new interface in the Windows Defender Security Center or with **Get-ProcessMitigation** (this command by itself will output the entire current state of the mitigations to the shell), and **Set-ProcessMitigation** respectively. +We're still working on this content and will have it published soon! +Check out the following topics for more information about Exploit Protection: + - [Protect devices from exploits with Windows Defender Exploit Guard](exploit-protection-exploit-guard.md) - [Evaluate Exploit Protection](evaluate-exploit-protection.md) - [Enable Exploit Protection](enable-exploit-protection.md) diff --git a/windows/threat-protection/windows-defender-exploit-guard/enable-exploit-protection.md b/windows/threat-protection/windows-defender-exploit-guard/enable-exploit-protection.md index 4f8180ddb6..cc65750b6c 100644 --- a/windows/threat-protection/windows-defender-exploit-guard/enable-exploit-protection.md +++ b/windows/threat-protection/windows-defender-exploit-guard/enable-exploit-protection.md @@ -32,12 +32,12 @@ ms.author: iawilt - Windows Defender Security Center app - Group Policy - PowerShell -- Configuration service providers for mobile device management + Exploit Protection applies helps protect devices from malware that use exploits to spread and infect. It consists of a number of mitigations that can be applied at either the operating system level, or at the individual app level. -Many of the features that are part of the Enhance Mitigation Experience Toolkit (EMET) are included in Exploit Protection. See the [Comparison between EMET and Exploit Protection](emet-exploit-protection-exploit-guard.md). +Many of the features that are part of the [Enhanced Mitigation Experience Toolkit (EMET)](https://technet.microsoft.com/en-us/security/jj653751)) are included in Exploit Protection. It is part of [Windows Defender Exploit Guard](windows-defender-exploit-guard.md). diff --git a/windows/threat-protection/windows-defender-exploit-guard/evaluate-exploit-protection.md b/windows/threat-protection/windows-defender-exploit-guard/evaluate-exploit-protection.md index d059f0ace2..a43d553c8c 100644 --- a/windows/threat-protection/windows-defender-exploit-guard/evaluate-exploit-protection.md +++ b/windows/threat-protection/windows-defender-exploit-guard/evaluate-exploit-protection.md @@ -20,7 +20,7 @@ ms.author: iawilt Exploit Protection applies helps protect devices from malware that use exploits to spread and infect. It consists of a number of mitigations that can be applied at either the operating system level, or at the individual app level. -Many of the features that are part of the Enhance Mitigation Experience Toolkit (EMET) are included in Exploit Protection. See the [Comparison between EMET and Exploit Protection](emet-exploit-protection-exploit-guard.md). +Many of the features that are part of the [Enhanced Mitigation Experience Toolkit (EMET)](https://technet.microsoft.com/en-us/security/jj653751) are included in Exploit Protection. This topcs helps you evaluate Exploit Protection. See the [Exploit Protection topic](exploit-protection-exploit-guard.md) for more information on what Exploit Protection does and how to configure it for real-world deployment. diff --git a/windows/threat-protection/windows-defender-exploit-guard/exploit-protection-exploit-guard.md b/windows/threat-protection/windows-defender-exploit-guard/exploit-protection-exploit-guard.md index dce69a9b9c..1b57659769 100644 --- a/windows/threat-protection/windows-defender-exploit-guard/exploit-protection-exploit-guard.md +++ b/windows/threat-protection/windows-defender-exploit-guard/exploit-protection-exploit-guard.md @@ -31,7 +31,7 @@ ms.author: iawilt - Windows Defender Security Center app - Group Policy - PowerShell -- Configuration service providers for mobile device management + Exploit Protection automatically applies a number of exploit mitigation techniques on both [the operating system processes](configure-system-exploit-protection.md) and on [individual apps](configure-app-exploit-protection.md). @@ -44,7 +44,7 @@ Exploit Protection works best with [Windows Defender Advanced Threat Protection] You can also use [audit mode](audit-windows-defender-exploit-guard.md) to evaluate how Exploit Protection would impact your organization if it were enabled. - Many of the features in the Enhanced Mitigation Experience Toolkit (EMET) have been included in Exploit Protection, and you can convert and import existing EMET configuration profiles into Exploit Protection. + Many of the features in the [Enhanced Mitigation Experience Toolkit (EMET)](https://technet.microsoft.com/en-us/security/jj653751) have been included in Exploit Protection, and you can convert and import existing EMET configuration profiles into Exploit Protection. >[!IMPORTANT] >If you are currently using EMET you should be aware that [EMET will reach end of life on July 31, 2018](https://blogs.technet.microsoft.com/srd/2016/11/03/beyond-emet/). You should consider replacing EMET with Exploit Protection in Windows 10. diff --git a/windows/threat-protection/windows-defender-exploit-guard/images/exp-prot-gp.png b/windows/threat-protection/windows-defender-exploit-guard/images/exp-prot-gp.png new file mode 100644 index 0000000000000000000000000000000000000000..d7b921aa697e82d57daa1b1b68d0bf8f3036f798 GIT binary patch literal 52841 zcmb5W2Q*yK-!3c>LpOqDJq%6D?X0ozX|s zQAZiZJtP13{qDEcz2CjxS!S{JoOAX*`|SNI&-46*zE)Sfdx!Q84i3&;rB`yAI5@bT zI5;=$ZsP+j6$X66z%N3_S9&fuI3z!@pBr(UBy>O{fvb|5Ji*d!YDz&q1$A$+>n3?! zS6Me#8;CPbe#yWqpo!QOXp*yZ0Xf?`y4pekFNu2wqQ#fp%YR<;2T2hH(C%YR}V91OB^G|E9~h+*EhFy0oj`Yr#j=* zwpB#~&9|}5I%duewhq=fZFGoWppD?)^={4}OPu4Yz^(r}?Ii>ZwsdgCK@G&W0&V!% z)85*;+FRoM*d1lZ!FhXT}jc6BwG#wccUL+o~VS%>PU``p0+qBrEq zIv%$v=q|_07cLy6?SG_c-#zaOM+)|_&x}*NMQ%J3742PIe24?pf>t6)Nl5r%7$2UqUe?%R}v-6G;)Wqfz8~a};qio# zBo@a@1CbvY%%V)6gw!HpdWns=&_p!4m=6{#;z&{M%<8>(bz7^84i+xyG zM%}ur;>0RY0`dUzB`8OoGWRxH=tQIsFXNC3Cs(>wqK+IDgVZD1z#R3xQPR#OaV}0( zpFhHPHE;)EX&ABe#u^7^uZS#^V!k^uk{#*RUcJ9}I;t6ab~0j;y(?-~nC|W!a(XBo z%y-T+HhjIL1m5_4*4bDjVPjbIA}W}38?LPHnNgdocGr>(L;UO_L^qEJfr!~glp(%s zj!O57564En_9A9#assPN4cM-P6@D~ZZl9TckUt%hVasxpN3?k%G@$S)#gbSH*Q)Sxk0(0AM8#sd%&Np_; z+>5>kqR1xkYz6pU+_F)lRy8P#K&_waVP8lA^0`r&oN|hzf5QCM5aU49j3v`#OCx`= z3TjLR{x`Wa>D_n6^ZOQxaBYfygNWcUlkRio4~k?`zK<*3xk5jfwG-Y*2F6fpt9nC! zGCT0co6>%~cbHe)-Xq}#HIQZVN(?9C*mRXZ%c#-omI ze=hxy`&@#%^N^g}_sBw%C)UU{!tly6@gb+dqvhdjCiP6UQ@sbhbTMHbBy_Ud-?KR9 z;e6|u$l6`a$*+Ie+a`bCVkp#`Z$DKS@*&FK2`v+sC@#rqiWv>9GQrNj1^$z2eJf0A zlXAqWn$0cbv?6ltb9=29s#US2c9QWHT7#IxVZ9mIYDJ&pZ5tYMRQTL3U>ETa9ICx} zL1~OA6{%S3!j(>L1Rd%56&=ZcPyEhZ_ho`o#*g#nhkM`Kri9SRjeJC%cxPQ7CT@Y{ zLFs%mRZl;@gLvK0cp}I=UReVXiyw~#BTvm!MmBl8JXp^OdF3l6GSjJZEqrvAT|(D( z1%A&cheT!WfQiSokhLKn%@b?>Gy3e`A4GW_`@XOinY6b2ePYDcYfxd)m#t;a9m}(H z8c&5YRkK<3hSw9-2NknZl9~!6)~r)T_>h>PQPR8mXfEq<#^IQrf%PQo1*@(rBfflv zA>uI?jXKY%%u2r6=aJWjo4&4FDnO)e3tZDW-MNTTdmbaTyS+1zA(O!p?IY6ab)@HD z?B#-&%<(QJVsv!&7cI9w$F*^1iI8YRzuqI7t2wVZD%@cmqFoiycv6?r(o{^&EM*+F zDoFeK!S#|*qV@>Oz3wbTRU_6=UJLtbKEmjR`B7-fz1k3FEo^UrmdeO{n ziGQy%ATs~GN4hB}B)vthz1-7U;(PaEl}*O=uvH-fZ1Mur<2Tee^`>tz7!mxv7Xu^v zfKqn`eRdL`eJO~aSEhD7InHfAUigbB(;D+D8wuwK4BU$42&YihArKTg-4ha&Rix@O zLn>}L=Vvc@0`5vfLQ3u;scOhFCD8=L#31~0HGiTb;0nC&hT>3d@2$hY z2}Wk$$PM)E5pq4F@22C5FSY#Pex;fA-iX^>X#OecOeu1PZi$V%s|o_KMhs=WCNbJ1 zS98sZQahlkQX4VuGPe01xp+Ij>sX`r@mp6Cc!(&6Nks)f|QMWIc+_N0W0n#hhahd^*Ar6<8PkK0nK6rE@55 z7pOwhcf&;PTW!YUd&un^+jk{J1GlX$ANcLUSrlxFP!ycjYLzGTk$*wh^-M-ndMQc3 zE5{}Cgj$H1ODA zt&jv24^56`E4TX>#t%i&tC7l-kcD38LCKCT`~^e{SK3EV@OZSoq107x{58sYKGxtK zyVPg_p5^t%U~`a(TEw$esd@o_HT&_TsGl5Z&;E?rb01ORbvWW9=+X0IuyC?a_!a00 zEG8}nyi=@EJGLOJl^J#HLiLnU{JwT(^{Mw}Z(cyr*IV}OukBD{8$Ioj zl?_j)R*vzgh|Br(KI$Fg+~3xe%)Mg z{eTu$zl8}Y+=ravcwIWT;&}gAGplr(#xMl9c3yZ~?MGOC6Yp_8cCfuixnxcEBlvXV zg~kUHKld;~i;50!e!y`-4CH%WTKisztcWk9q1A=qwb{!%*Uum}rTVmOw#JvY)n}K~ zXOr0^XGY)!6e^LI;U`XI>}fW>Nxhr10JbtU^`9AAXkFMWstVs6jYSm=#GVB5Js&ij zfOw_@9Yq|7ETWqYvLd^+P$g4ty;bRX1A_d2SLa~Qj=lEAapPQY}l zfNph%cB*g21)A+w6<@gkrBAX~TcPz?hv9GiAdS+4lQUci=A#U! zj;0BX)*Bpzzu_v}@-nTo9%f{OT{z+Rp=TE=TsKCQs)ZJczJJ&rc0v4c{FO1d#-c*9 zmVY(f-L@;^ypPA!c9Krp;&H-6?Hqke;H`Fju}q>NOu->l7iN_m6m;5OSi0&Vv9#w^ z2I946+M8*CEJ)+KgRPN6wKP+eMAkO`9XH#~vOP=_x*mM*5SoC|Zx9$bSqUT$TA`m;n!MSg`+tMH1) zCHvCRI1csjqkr*0pPma8S_zY4md)@92&OBo{nHxVE9@qD+>!9k#g^r)&l+ki+Su(E zQxVD8Hha+{C0OG3FN!PsYv;2x%}&JyjX|XVF;mB}bIx`y197UTjwwrjx@@YcQdWhHGo`>y5krNrzoy zJ)$vsue|m2wg$L1QOJV?Sa{t9=-asX5i92Q34dB1;h&IH*quC7%Ntm^I@?h2JO9-1 zWeu2+W<$TTwTmTEnCb3Z{XmjH@Y&(I00b^+HJly^o`pB%`lA1CZLMU6^Ay;87D0aQ zEGOMxO1Zq#@58=ge#*zo?}3uU?ESTpmOgm^KQ1}hJ3zv%Cb%Fvp)65PU@bH25F6TK z-yWxMeBD-Wi)9w|vo*ZZ(+B&(yNIPzfu_BVi8&=oIftgt2`5c$6Jow?mgFT6Q6hG9 zrBiza7d^tk9Mt@8cMO zrX(yXT~6*vcpxoLN@P*n@ct5hkxO{B9TghoW$WEdP2Xc?YWi)Fe$vf}J{W`X8L8ilE>i`5ab4}RL)pe# zLLKP|Ky4KdF~8^i`z;fE{rhK9uOOccbbrppVoR`XQ7dsJRcfu~ zg%esE-($zZ(UG@g#c_j`36Ty%F3xb$oo=0n=T$XdyGch5&bCHi@su4Egpb)KRVE2o zQ&w6{F4mQ~{I*0t4>N)WO-Vd^_1=`}C6vGkwTp}XT|vtSERgr_-&51lcGQ5a29vu| z#at2vtV!Z6%_7>VV;Kgan6vfDjpSI8J$tH%yHWk7zjAvpQs{{OMJJ58G2{-&g z2xrprL>g+i2HPapv4r^@SJ$4(&iY<-ib%^K+&rqTEDVoV4;9KHs8-Ezs2rblo1t4o zJZ-;4KN4v3L6m__iF$ZMgA6kC+OMF9wAAyVF7gr)P<))q$Xr6eBRYG~>E86A*EwwA z;kgFG05mV!OEF#Pms1&+fU@nU19WAgrmtiYhJLqO!?2t5>e7t1v?<~xsnkcnKxk^M z47xQPu~6*~pA=boja6S9Q=lPsq}LALKiOG5Z2rE*Si{xQrWUE?(43g*;IhWcy+$LF z)&;SjvyCU^5Tx{6yRT@{q61R;RnD*XKU;j!Qd59 zFt&Gx%i+Aam6fq}CG}Rz9_a{Cp6={6xB5ny)NsZTyYNZVPYSg9(g3+e+Z0c?yCaxj zQYgY>%LPO%0v{O^S}@XaO49lU;^hoUTdO`fd-ilQ5{b}G_@ylB?)3I-N@llL<95X%`mYu#EaWakO0R0+0PS0GsW(7%waL$T z+QpLU^Xr9X4b=_`JlUDtZp*YhYP)K#Ov%wP95CV) zBc9^nRIhpFem6>rz`D0XZQPV}uq&HHiFEd>$c)=hGDXKZryf4*sDyJdyNRN0Xvx;W zs0wd6;9!G-g6d9}!@d4~53WPa*q!|jmKH2;90E!3K#*Q3v#_&gye&`(A&th1!KL-X z@0C}nXO-4V+4N0!@o{h`L<8|A-E8lsk+x09I1Dr5db%LBTMk^c+RK&8z!Ht$lqUms zs6j5%qhobG`5A7IT$@?`@T@3_@U!4StEG{=!(d;+sH9`Y_v-Y^6V?eX!@(J8Z!d** zqqc_wUvd~~1+FyAwV=3-cc6?`OkHqa;Tpa~z1+o%^3{`Af!QUdbTt29I3|je(YG(; zkpI$nU*2NW;o@hH&1J1!Km57y{3z!zwK=@KFdXK7Oqy=W%^2Cms@X!>lXuvrfR@+Oqji3 zuhkgEy1fn}&iivWrZ|EZS`Y9s$yuVdTQ{XIms}hp%}_;p)ID87B;6L>JEPFM5rKR` zyjPwK1}6i#$KEC=>NcHphvm0d1kZ!j?c418r>rMt8NNyZ*T2$ zlD42BBvdIne#@7L*t(}bEB+UD~| zrbC%byw1t-dY+o~L^1dWIx*0eU?h!BY7h2UQat(gg@;lfKy6Q(z{qjx5&dNeizku;M$%TKw*uGKybkxwyDumI zLZecLJrdHobS9+x_pP}K6jBsKmqS=QPnUu@8RtIKhFL|HCmCr4rWyN=8a(T~No?$H zV(kAc3Qv~bq2Vw;fUGGZ3&AkFvwj(olAe5F*x}RYzSB`hVmfwQi8P~0iS|8e_Sqgi z@ptkUcqCPDa*&?jX}VQm-pNE_k4NowI!f zz39Bl&fs->q*Xcv0fTlMgtz`GpqRT+SJEyjTw-?+CCm1sKLV4e`q`RG({hM=fLb~r z0U1)?vo}m7DUAt=Ha9hWNY_RK%BxixqN&Em+Zv z&39}z@k)#>Rm1%v;Ot_BeRwI9DhzUD$U#KKv+9e4n!F2;@HdixulDu8xkM47BsDvq zE5MNBp|@e*zdrz6!dEb8Ry}l7q2ZAIN`LRXxrd2=SvO|~-kf4^wOdj!!IxaW%W2wl zG!NE**=-XQ9jq6|jd`H6q6IEs7;D$d^{gYw%Llkng1Y79<*d+u=Akp2jhNvu%FEDq zS1Inj%9{+#QC^`whIO*`UGX+iinKv>h2r531O`>!96T-cbUPPxUiovhZZjmc@&NmB zs5@r?WpH6{rfI3opCpJwRiqYOS0oNrrgMF0mvKSq%=(F~74;t=&9O3C`uy)v^eoO) zlh@&&Y6OnQhS@l$0n;_B5fWi37iPt?_>a$t!BrZ3EAkw>VCCeVzWo2>fd06;yH}XD z2jn{hW9K;}M0Ipqg}1qCvF!wTnvib`bdR%_GwdslcCofz|09IGC5b3YjS|l3xlYQ7 zhlHHmt`q<|o$jrp{8L<$>Ai?H#X|r))E$rj2X$cIqw_P^8=wC+z z_h{Q^qX+0(tqujQ_zvpq_R_9sin63d@rtiGjhLhtH;gH^{dUBJrALI9PYD&7y36yp zmePoHaQ3RvX8*60iQ*sN*!z=1zVc2@^HjT-ih3@Or+hoh*#Q$Dw6+`sB9aiU*%QgD zaa>sD8GwV=s2E8>dfKQrRBG|iM`ndlHuqmCfDO9L{9%QAr_hD6H`mgQCXp+iD;qT8QeiXJfpQyIGaBtud+E_zZIwj@k^{60(mb>%qYiT5Bc4COLJUH#|rNWA+CzF4ZoQyb$k z+1>5=7_D|i>Y9;KGR3FR2O)CIRW&v0dY4R|JudW8zonMzobI;DtY$sNr&O0M1Rg7U z^lPRbUer!NdAn1)Tl4zYyDvGW>havc`{^DIA9i@l(Z`r_A~pAs5%NqY&j;&v-#C7& z!0uPrCXVb;bEJB0B!i4%BQz7#2=8i1-VjjwpE1v-lT5ezubRApl~d&x!gpaZ>Qe=I zX^hMmLs}cjR0;M3T5)Zr2ZfDu=m$xOuO4ge8LAO&Cy0W+fq$-uu8T!USrWGNBilUA z7%nUpNm@=7LRNg%or^A2$7flAi9!e8Y1a8q5 zITMj^b(kDQ0@O`?28(YbHRxISJ*k*+%Uhf|C86XfkKbRPZJd0|(QQlI&I|-dB+nb{ z46c^y;iYVvbcZD(K{ckKpfiOgrtHC=x5>T~U&m=ny68c5(t!iC98!r0pzc)6+{_z7o^z{;K1s!4#Sa zxuv^0d^y*^&%lRAM;JphPp1}Y_vP})N@0+TsIVn1y(NZw4-2q<;rA63l(ldZFFN97 z{%vd`8m7Ii+foi6?&T5H(tzrntV9Ns(56f4BYeXmbo`zrWTfj2J}fmQ*&DjGt<=$G z6)!Bb|2MW-vf50b`LdKsk_|yz0$zAE%iGkG7ytH1_)glMlEYb7v(M2jYKbQU)msK4 zZ5lcYopdWDWdm)Mb6Z3+ynsD3y0cf%R&Hbny*=w*&Ok8h?q~?S7~Vw}2Kt^war{ZQ zW-o8hzR>RnHhC_mj)oQCQR(`W+TdRXA&Gp`WV`~-b&>y2Tl<+T0JYsoga1e>O>zL~ zb{-fiTa<(FPQ<&>i#cy6VjT|%!?5K2-A=!*K^P3aA(%t$vzO&I2}y27vr~+J?z&1WL)vE z;NH&h* z{hcC`s=KW#dz{sr@i&V-wjy~uGb=9@y&tejcA_=p8>aeu?_0@?tnoVpPQn_6-|<@4 zh0!`Ey#KiNKITBGDTZcHA4UpGP){337nqxv6Z>SFkwjL`UWX3j9UVNp5UfhvJISC{ zL^tv8VlZwWOY7p`UykE`WG&7e9ebUmab`^&cPbopHw+IMR3hWHIROyo{)5GLA6951 z1U{~0|6Lm36%kGX-G`mqOyMIVl7wEn(v=@p@8+Q zdI<$E{L-^l00lg+T)t^ZvaInq0w?-2iD|`+VI`jzJhG}9hPQk1KIW*0y-woDNWDoY4K$@cm0qU)BLnvhQ!9xVY>b4GnyOny&z-?6~JnoaOe^<3EI}6vKNq7B=sGf-)JO?vWJX7dkZIZE*JyBK^L8a^FcA( zbSr+hN3DoiluNte{>)krVISHl*r{xQ%PF(#Ns&C8O2O+%Ju+AM_M99px{AGIIm_Hsa)9MW zmLv%D;@Eebqc8=K?wl}^vQMA**iyWSyA52rJhMD?O^cKPHtWxT$;D^u5@0>sKR=Sx zkUGA@1ePSMkw!#%-!*YN{3x?7*U~Sr1<7$IEIVfO!}J0Vr$S*5m)lawKpzfWy##~c zHuHo`2uWDXN?d`?Q=UJ2AMzan0A`&7P`V_^9<1X8iUjCrt>jn-aJ-@-XiK&Uv+{fT zIMwGR-MSP?-VfIK(kCod6cr?KdY*t>GFU*nEE22xtQCGN^<*^FJ-6!qy}(m9$B{)G0ncY7a?>kNjnr}yr2^WyBCO_LrTm%iuu64L9rGgS`KoaEIl^N0Ad z|4NWP+1M^08d9GqHt0#Zo55WeQ8|a!^+E6vV{CO$iE$#zBIYE|DCf7%&n`2HQ{T?2 zKm!^}>jKFOz6f*hi{p7PJ3kw}ogUIl%s(R5c8IYLqvg_My|W7hHaUPO$O2!9@$8dR znhfXVy(FavbHLbCZ@~R5;HN?<8E4TkJw}1Zi(ylS<8}_4xR6&uM!k7{d?Q}Y%qw|7 zYDnS^n0nI_yW#Tv&=^kJbjKqzdg!nF@Ono)9Fs;S;cdV8sKbo!kj}u=^0)s9L{$xe z=+u;L27rdwxx|th7Af$eSNmZSG;O?JNtF7=}L{))(`5Ah4{>ATp+Go$KHtPW;2v%J(e z88G8NQ)X|gTOP7;jwouFl3@ny7C!7HVPoW8)okEN=x6ajFTJzO+GfF1)Kj&rl?!D( zZqv=f={`AFInr&ZjRdUl;WoVYHPOd!&CTo{Eep)|!^~y^es)qG?@SZ%fxVWrnROh# z3CVht_vU=ty~iiOWvYUW?99jao(xSs*ZLNSd3?*)Sc0l6`R@;2O_LGv17vZ0qHQ4A z$xT4$g9?Cl7jllMx#Yqp^qI+!9h%4Z`Ud%tuGyvijnSqo-_O0{73mJn*_En>G!_a5 z*8N4orYl0^JaCQN{FtSZth&GXdC~=D!Cm}hKA8u_UAmo);l*F1uKMT35CWoblMYLWSG+uu)6QG}O@Z2?6}RDa z7P@7tl9#FVs))Ivhvv%!m8X~Iu3m|#cKb4+qFv&;Vyg_;9 zB12US`6C`QZ_o#&QS+aO+ZZAezMq+Zv1oul=S-@_O3LE6Iu%_!*y_{?yxJ9B?4(Vb zmRE`x#bc!p=OgP(QBK3tes_fL|3U^{ps>l@4J5$ytbQP1?8Wy=5e6>QrA`)<|FO3m(}lrxour5!K# z$YVeb)~t4Sda-(zdZJ7c^0PFNe-|t9vT8DLsQ*O3=;?2Axv3+$*M>Xi+|R8w|2V1p zIwY#27Wo8j6s>75pWp5zI(^mZKDyojq7tWFc=5iE=-Zb!`ZI?LM+&j6&tGAK)C&>l z-@nSFcsc7MkxvASJVvSp=9G*Z%zZJa8^-4>#hiyX$L}A6>i5H`@MJ-c4A;sglHAL*__`GQ*2F5H=Gh zWu;f2^H$Y+D6J1+rSDq0l_%{wjIl=uk`Eh9I~UAqzTj6*YmI)lq8c3;%q>oLs6FRQtG6}0 z(tKkXIxFU}q#v(V>mHXy3of-udWRWcpPAS=Pg>`mpipg%>VBll-$9q|%fDR>q&-fy|-`$V&YT;Ce>@9UuamJB-VwW>mVd%T0^MJ#|yZ+?@rXu z8T+)x_U$kH9Ai5S_M_PPerJuUs+rbOyHSQMe;du@&NTkFR=L-th^TE+wQ_VzeibJR zhz0=d;a||@mnIp7OA#lnjU@>(8kMq`*BT$!y0o9E1NaEf14=e^tdt3AH9YF*IkhDU z4>30K&RIJe9+`V#fQSB$h%=#zL>RF%^GjpJUnFmjbt=s-2Mu-XJ=uYgT3t~$f5^mz zvJNXbqU*I$(ZA`;`5ek<>%x!cntpdQm|57C(>brN!!@F3=KNlwnq9(4cZ| zrES=m*Pl3q$S$K?6!QyH51O5W+#b|sNNjs<;}^L=*!g@c3SJq2L{?1furD2Ge!{2UO0iMO*ZMNnQbBZARng>i+Y}jXsZw zNte70b3B#0;sw)PdNEa9m^E8meK>`OFAHyuqm;;rQCbNIZwrD!FSlEv{DLM0W}1uE z5sU{3A4VgAbG!h*c?;k zP>{mTOz>DnL@MnpOO#=i)z}ndRrRx?jCR-ja!*Dt2RPBb$->p(BJUTBkNf=eMH?K@%y~wnY2ZyOfr^5y3*1_>fH%C_>(8+1mxb@42SSy( zLeHVrR@8tDO@h7g&+W93-alIYI(UsH(5T%EKeL~p{zFoiZ4Q+^BR>KF>RM#S_1NnY zc|pG}kVv(h)p^FwFG-k zdTTS7WuZ8dZ)_?W;I05H~5S`CO|Ljn0HgAOHEQ$BgFO{nQ#h>)h(* zbqQO_c{Wi6x@a~7D-J^ADc$@ERIH~U1a9!9B#QB7_{E~ZEAE}Dw|1JTkVn;0WZHS4 zK8q@Oj$~$jGi<;=8_tkgxoWW)pz}cT3-1+Kr3W2=u9g8HE6n9R(Fyl%$M(FoLcUXn z*CBZkuG4`VAdk$MWguNYR!Tgb()p?#i3)wIwT)^Lthq&6Y&85u-fu6X+kE%wm-wW- zKVle8y&8)MyWoD4ZPxvJc9YRaVTE@?&2PV5*c+zSr9tN6M3TS4HsktDcNPv$?5L=i zrk_r0%joa~R!>^qdH>)CTt(3SSkZCFsY|O% zhtor>7Vk~mQfYrlVvTMH%DZ%XO^^f7&9bQifc1dHsw0Bw&~GYfj}iLiSy@t!nwsRf z1+NBpN)>Xog%^F0&F(<=GLwS2KTB1O>priGTdCRlS@K57YRwHVGzAUlS*ZL`^f}tq zv$1eaI_7<$Ok|5{Lt6Fc6e^GXBQ?Ko=@Mv2Ue?u+>t9)_+b<@VZ!A& z?0$IBpDXTKCjlaEqOAsLN{#ooAf8fdbN#FR3sawYpn%^wPMA{p4P))E3vZ+}F)}Z0 z9|a$q)DusvkMdpW@PJl~==xs`(@(&49m-=qiBJ&CWC~#>gG8f5#?Sn zQtoVYT{=x_VtTr-!ENhwB-&4~ZzA-qL7d1tnGkGh)LguBddbH8B@2M}9j}EHL?v5N zdG^%G?L*vUcHt*YE=2aQ(D~96jS26qCm8y6W5J`iK9NrH3m)=20 zbgZ;QYJzm~JleYI(m!ZY!d`511a;?EVmz7x@TUL*_vH@E<4g8h~odx2@cz9MgEx=&~KqZ+gF#+zeZK~pqbm0^QG*B*Ez=YgL}Lw*+1(y z_!W02$+;SaHH2Bae%`LGy{ASg!<*+g%mfkJyg2I9gyOBG1feM?cCg)#WY=2t=K9xs zH(_Gte*^5`HYY>J;Ac^RPKJiFU24PA8 zBgVi(UWDJSnk1zQr3FJW?xT+%#2Rg9w=~7I0=dThOuj?9fyse_*BbDOskI5IK@{iH z34lc>_yqVs<>3cpN$;^;{vQBg%RcT3epKr&#dImVl&sI){@_SYHD^dhK$rUcD*SE_ zFL~93%P?hBIW{$Zb^I@P`d{Imj6w#UFhhq^S(8`NowUHMqfL!p?3K18rAk8xuFs# z*+u-P>Za(K=b?vTRplbh>(Oh-ZybC>VgzGOt(lp=*A!m`%qHdIQ_u77rRApsAnJ>; zl5M{JU)(w7qb|Fu!XjgtP$QY+?@*MrK#nGWXk7Rfjb@()rq?Ll6Z6!I|HP*->^)JL zo_FDedV59c#5PmCqL%KnJs1E|_vSJFRil)nNeukl%>lUgY%#@+C@9bL<*@CCol>M>9Dfuk3HodF4@x5(&{`vru)0Qi>MM%UzcJ}O>E|Y z-2#B60^1l00R0pDO9N`E-?y@8&{B&$S=W3Tw;Vvkv-oLUWFJtNP#AJD^BY}PqQwNJ zZ#87$d*MJ)+e`aBOg(N!!Vq|>R65N@AW&`;)nViv#t>`EQhDxX^mWrm&e9J903ZYh zCl=zhF!9=Aq$Spr7=D{BGvT z$E{hyF5+Bh*!n0Mpy%d28##BPVGk1R89GaNZLToF7sk0-v$;Wt#T`XNq)Fvj(iOGW zoY3je74gIyrqlp!EHMk7tt$z))Z3of05ez`b_S+JA2f2$HpOy<%=t*+@HU;Aqx1*c zB|hWnW?Pn7294bQM`$*{&Oebwa}Uc50EA{cKy#h)v<7An&$Ux6+;&Pu8Uiv<(eXh_ zVD4!E)Fzq3Y}f0 zbRH&Mga*e|V=sT2WJ1Dfa`qZB!PIXOCUdvz_Z`KnT`U$JwC3@jvx-ezMrbFT7>gPv zpc&(wkkjJIex$)L%B~V7;rGIp88FX?n#eaW{#KJLugN%@VL>bk@P9?eT7IQvPd#A@ zd)H@ntZBV=#oq`0dXb?$;vIICS&+(nHNq$-HUR+EG}B_9-Ft^aJ!d@=8RpOM@>Ad! zl1S@Gx5`NbVlnbjOEQqC8fX~Ydw3naGaD%q>xW%16V>D_i15AG;g!w!al7lvPIZtHI-p^#O5J#SP*00CEu{HsPig(ZI_|2$B z+`FMqj=z$YX!1I=<`&>D7-L#>ig;{xqu$Wz?ch-!-|NqHM;xnR-Fvu?0_d3Nxnl&H zrmzHyO|>Tq2Ux-zbrkcFX649nU2y8J;nw0N45vQKta0+UEc(YzQVW1fv^TvZvBvNr zgVP9+AfP<4h#?? zBb$a9PO1?=_BN65#Z&SqWdi6`7peYL8j}x%d*KS+OifL;7$+654ir>0`%Q(&$}}g9 z;P-a`Xi*+7-@(j)`9p2r-RL2oKA!6u4UB~Nvbf zH}cBp^W5ZgYt3oV$x2esfW2Ye)Ig2V*{~kQV}a6<8G*=a<1S=MKicp3Ar`|5L{Z&a zGVP;wC7HXRga?u}E&4-GjH9q;r;{|0L?8jUw71G?)*WTCE`#oh9`hXRG9}hAbR#o4 z9c4c?KQwUy9h&4Q9yJ{bIJ0>AQQ`$rq;BUW=u@7*;zgMPw4#}<@gwu3H!rj-{s16A zN&1l(p?>frAGump>C^X_Zmb)~V)M!Z?Mck`ET3xlaBC_`RpXyedsag=RbO(FT4DAC zPolOBP+lGa(ZeOHdn;U~k56VPP?J77tig874g>Mfd2GUck>?r?Ds) z_^roW)=jsl!cqVXQ|4CYAE|jz$f;aak`AAUyG2-0QJrwUjq$qi9vz>z74n*nQ(Lhf zOta(ntJtpSJZSPw0Yn8>`gCF4i|zO1)=s^*&OD?9SOM+*V_)Txs`fnDw!dsM>g1_>)dbIYA zULD51Q67wVZ}~AKX#mFM)S*oje*X-emu*6xGsN^^LJmGx|7M8y+?N66_Ye7EJ7Kbu zv>%xk^%=EIEgM$?S!E)#XF^VxbbNCO00yJM7PXckGT|HYRtLl6Ltbv$ezWB`?TN|x zTwZ05xP*jWtpkJ1`A9U|v^W`!njo!Zm$fu5rLHHe*UYOuW$p4a26tEjl_h}*MOa-n zKYoTlY*)GG|hclmhyD>A}LuNDB3`%rP&Zz~6 z$Dgn#9m%{r1?p5k4tdhGKb)T1d~~LS2vthma9= zJp*&vg7;TyneW{u!xC>HZ-3XeUhWW@*y+UwGzIE^7Orgla*DDxBA{aec;ckbp2cFG z@Ai&fnt=9`dY+x;8BK%EHt3Q}ZnDv>>ist=nj7*q5wRFb-^4GQo_<_pEv0c>sQ~2S zlTjjG2jwC}QDPhQo*c7mamsvOmH7m}GRG;$RDkVglQJg&m0zy~4d@8CXv<4qlC!Na zK&2#O)k5%Ea2-SV8+b3*$N!u{d(%ugtqrm8Kx8+bK(CrUF-nVzxSMzHD zqKbg|QmLM9c7>8`ua1#mCjjH{T<@U3@!9d4Dnsju55a-}fWx_4^FQUF{7%XvMFC)5 zcgLYGvH3*CZ}wibTqpwiEG!QQ(190&`P_50bwrgO1~fU{ga(w_a2EQ~^J3MGUettq zZ0wW5C_)qI-OUcK9TKe=2LPg+%{Y089S#92o+qf+o?4XgkVGu?tfz^|ovo=S{V}n< zm8}+ewDfep7M<|e?3H(WmL%4x1BK}TXVdbcy(f{4)^x3U^5>7p)AFaZaoUgeR21?H zgA-IJ)+R`hz5j(%L$_$roPg*Q4Mg$aXGv1SZ`ME}pvl*kl43-Vhnorfd?|XEMa%s2; zCB*pzE9Z;B4N}-se%8G=VE`!y&kAGfoeU?r(fU2^?Nf_&iw$s>UqRm=Y|q_ntnnNM zJP;~j>eBn_l#Uu(ttj`B?G%u;(Zy&dGA@O!!-;wx(G+v03+ugBV8a6d&TCngAE(Go zovIc-tQ)BsOA@QMp;5|o%gXtlt0mL9#6J@UyXUEj05iZ9m7f+>xBp$W8FX(ovh#!)53kCB=0Rtr>L9wq<77G4wZo`(fcPfRI`}?y@-vjz;XN`X`bcbpKrm zkRJ3Cb`pmg=!rEo|0hsOM~i*<&uH^-AjCpKLVw1``8;+FYrwPJxoRohP2K<71iYJw zx~DNJyfjIuxVckd@J0P6Syd~!!eqABCjYcqRx8QOmRJ>IkPsJ>aKHrat!}bcQPb4t z&>qpQ$${jF=kWi*-g`$i*{$27QUnA9MWjfz(0dIX6cyG!ZGGiUy8^_de(R?zg|Q&%I}i`_J_+heJZ%^{zGNeC9LPT5t44QMBe3 z$K~=*^?p0p8vCgqwhv#PG!jZa8`bP?P*Yn=edo^n;X=&H-moge?wtssUhSW#93+QHC>$_C(hGYKKI0qOuhuOzDyG`bwcRoR-cLRcQ zgl2wFSv;`o_5BSTMd0t?L+*@a2l?O|cN9Zc<%dOVkLW?H5 zY4nu6koHC0njdvX1)ln+Y(4P)z}%*ceJxn#9(BONHMSo&?mwi&;t?Ef`}Q%)$>BbUsmxv`#kH0eIWA(~_ zqjRy~P^9HkGd+6WQ}5;{4RWY--%ay4(iPum;3S0i*f8!?*V84Qz`32J9*O;5>i3a3 zHfbGG*S{%ar@3pd@Cr-WyMWVFEq4wWw&o%CSO+u-;^^4fazTNO4)9@#F78D2uCrCK zBNejtPCoVD@Luy@EBo;@c&eNV0OK zK@wijN31Oc?bet>LG4e=UdEa7c087Ae8RF&-p~-Bj*>nYH#1cGr98K_ALN=i}B zOQw(EP1`5-oVr9P@*Z7vDesb4-rt1M)wI8IW8nY_5$u1u>L)%pnkn{y4GiJI%3)q{bQ; z_;b-_1t$D{vDCtR$CT%g-|=?1_fGYKgwLM)6_^iYztP3Vng@F%!XZEuM7f6OfBu{yObM$_MYu(W)ZJ?L)wTrW*n?4R|#MrMIvc@+q zYQ|9pvCD>t+P##**U;JG!7o(i)l3GM%y{QB@~!sS;Bfl6W){Psg0#a!PXc(MGk?a) zK*sl@^&_Fl0wYq|tS(;owij|c3cDij0T6sHQy<*w@=Uv?nNs^5Ia-Y3OjLuesoupr z7c^Euu%k(g6oySNVJtZv$lwQU@6FQ+hwV0tBVFyKNxS-<8%K}aa7nwZ3%NElgH&Tu zVEa@pTZ4u|zT2{G|L`GQc zq;}ARgD9*x`@LVq`hs7muspPJ#%t8Sm;S!z#XjB6{$9eB3iT82vx6c#HKnmGl)@vE zBC^e&hL&YFp*+uXM-dI)VLRqoTG+aMhzm!|KKFaR>P^6xrmMPMSK+np)IN9b7QWa* zNo-s4;v3Fj)cu3hZ}IEBad}+e30|frHlpW6k|PYu9<~faj)7N*v}{oLjd^zpq=oK+3%C; zx-C|J_AFjI$&p3Csqp#|oMnysRTmTdzZc^+9``l9iOK?@Ix1%-di1g#KXfx|ycQ2ZK7{?j&Xlt;{QgwAf)oW$ z0wQ<}(igv1?qH4~p(Z+0YN7g(orJgIXGG&>$LC+R-0x{8;4fp|OJBeI^|)EBQ^SVZ z=-q|Ee)`&=Z&(Eq<_O2p-jp)_c%Xk9d6KTFP$chQLy4Xnv8B(OXhQ7PwGJ1vIB*<< zbs{LKWyzn|KfXyrbMpoHP3jQ7gP^Azn8yka#fDMUxhRxhYFL*Oo9mc!EZ%h9&HQs% zfy*=2Kj)dyk`ewn6eaw%uuk>=G6b*zsIfG#UgvhIL+>{q8hk*y<{nM!{SjFISL%-Z zrZ*cIN*63+jq?*y$*m9B#ZMm}aRDp7m+z-e&c{1bvKTm9q)-E%9iQIk0g0!UxO1yN z7A_Xct~UiGh1X$b_#u)(ir;Afa70^Y#IJLh=YE>=r(J6yjAveKPy7Q#+*z0xy+yG# zi?u#?ellAtWT{dwwwF!{^Ug4=Wt%5ek4)tJ+l9&d^f zdYKvjrN($l;8mUV&8>$wL~yAKuP2-Qebyu-+{MR9Hh!9>SDl#-7q^^4X;UO5@$>g- z<1*y=XNpM-=}gD(30yO~k!X4+b=Tivu&`~fD_I;~*tdrj%jdh7oV6x7Vq%o7zOnA@~v zkvgYq@w7|rT{+riaX9x0h&oss!|6zGA)H{d_KHE#!y(2MqRW)>@!AJ7PGf))$a{UV zasS)<>qFmCRoW4f0ayuOuMLn0=E%TU-ylnXKK~_|Lsi5%zVqMuQoE8jq}-oBLvlBM zf*AYW` z8%Mu#-ZZnsQlu3vXb7{*v2%{x?`SFU9AcF|msj10v(u<^KUz}F!nA|h4XGa5K21h)7az?4P9Pw?jdUXu9UY9Vw*cvIx#OJ1Isgmty9 z6u>tVRf%m?-j90J%i=v#AgxQR!vXXOi1EA{@AeL68}GEv_b$v|{)KeW4e|WnhP=1S zRQl(2{fZqKOerT5O*hZs(pzvN%d>e}0QCUS6FuLWCp$ms$#S3OB*T5^LT=L@MIOQ# zzopsOR&`9b^z#f!{l5O^!`HXV@b^hDGXh@*;759|-!}mXbhT>oZA@VJ*32D1!JMDU zr!=M;Wz`?=HP0cxV}iAN!G_#(jNj1!Y9=xMZxjmg?z4SBbg|_t^O0*slwrY!optM)lKhw zH-ZqwXBI_IGv`iVTu*FF(tVDJ`_$s6ACh25WsxM88X(~IV30AL2xZ_?JmGs)KG%v2 z-boi5zH)4wJsvCY^-NC59Ap=$9ahrJedM7hzc8v(v*`_#yHBDhmfU2XE9GFfo=a6m z<{@ht34X(dIKk(>Q@a3~o4S_Qt4-H$@aunuvGbM-wPojYSxtTm^B=GV`@>C;g60yk zFcZ{vs76`qCT1%9bE*C-^h^H80Vch}^&gU_byM_#+z5#E{aeMm1)`ti`3!&}DDf#b zPzBWnY>C4mxstc>bElPpCrv>JuAzPze>M`iIW;=w8rNv9ZVrL%v)ZWAzyueWi1_~Z zC`7NUcY=b*M%pprl%y8u%K>H7eKyK{`*jRWFOpy?95E*vFT3s0xyaTh%p`8@Cif$R zx^C)VBjq+kpV(B>s2s~0h8=~HvAwZ6{@w3^kgZY>7Z{+C50Z~pQU84r-2kc3csm^W zz$u%h^Sjoy;APX4QvhKS39jkn%Ldfw*+EPirjEd7_JxDgL&T82Z{rsYXJ!-YXC6M` zGwq4#jOr;h+fjxXf(PG6>!{H-v~5j}I}FiHWi zf1$1C*qvhB=73Hh-1*Ma_@{i<>I+T0rY z<{`H`Rm&UwjnzJ?P<~auebNnD7*be<|DH0=9^t^5ah`#dpr*Fzo>J-9K>Gc{4jOWw zV#-c119}Mh7Z7-(%)$L)-(0C^7=%Tk{VW3B_i^i{UuX`^^hphUWTD|iR!3Qac$rXK zWjY@6(U3+%%#{H~4N2}FE~+@`7C_zA zY6BVPL#eyT1y2(^`*^GQQzEl_&9lT43Xy_?+eOHdtOod^Vj_#E|6wIJIxP|_``~b= zhv!USK%!OMH4uL`5q0qvep=(!)LK(}hKO<8o>xtumA>YPXNqLPhWo#I2|Tc()WN_ z4sB4Pu+KkzU#-@0=;uH`$zLhZ?|4Yz9k^fTWGEC06<1yRVTUVc zC>8YL(y}qhL`&bsUh4)TfoJM#EZik7=aSKB8keqA zEKM%(BZ<<*yF=Sn-dk@e@g}9ej)}S~z8K}{$J$!nb*{Y#_z|7*(xn53mWx-$ ztcwFAoi^CMy-#};h5|ezv`e($6T%GCZcNh_oDY-Zhr6`vI(V9f#@p{>1|w^b7)|fZ zdQBnt-@;FjA;{4r(S4wNm-1Tik4B8zScPg@zH&oJycGKcDSF>+59tcaos{& z3dgF(0d{D*6FQJK~pbxMW(NG*0Wn5AWfT8 za)&gS7us3$ceavGAI3>?ZNfOq(d=3)b%u2^N4t+$8`j(V-fPmp{SU+ z{E4rr$*wqmuct(V*n_V9fd?cstLXz@KV-@C(GB4GAay>eI3!A8)}y&2x*99Qfd)e< z9O?Q+^v&mGtZ0SHwBu-FnYIFcq^o~SkZcf8_05-Fv`8{~CM*KDZH%%3VtI+Zea}Dj z*@Dc4BK*tU&W<-H6zxL$!SI-!NT+xY%XH9((5!?C*5Iuk=E&2QI%) zc7arwlFgiscExz;0u$^vt#ITH1238a10jG5_01@Cp>Jj7ur)#vu%=^1oy(uy!0meR zr8>j6>~>3vcb?v7`BKn%5M!sB=;6bM+IM{wJIbbfh1p=8<(pqGqS2V(lKaP>dX1mq zh4t^D3`)sM`JK8D;q@3J?%0~2PR@!JNys0_K}h({Mig#Bihm3jDi<&nEEMu+5ROSH z-UEe5=ze1sdMrDg*niUEtV?(id2I#lJ6-q#YEmHAkj`fSA6Yk0IwOYoHrTE7eltB+ z;Xd96;#;fr#bN|`LpFpU#--P`IS0vwbUzMbO(-^TnpeuK*wAHA%qUH>fBelBc?V78Gf5;;> z_9}h$>!~NU(HJ#2^ujgP18+@n`(h(p(Y;3fX|?ST)baV(zWsQTN^4clS^s!ij1TvP z^C!p{95Z`EbNMS^>7y(wDi5G2-y>V@BN}2~k3Ux20!qWRbrT64b_I248$#sM)d4@Q z-0J%^F43_cq03*nMrnM}Vf{xk*;05$*?y-4phN08ZXR%iUxE zK0Qa-2ncd)zlV{S?k2l=e`s$?E-O5XIy4lQ6i4fGCm(6|SYIhn>nTlFVl_44cOAN9 zGf&?EDe-d$M{wj(upq=F;I4N7IPB2{s1#BuD7V9?LCN(K@1bACN;O8dLJMJTYNXy9WnNH8R&0~ z!e*lXWEAd|8ETspje=^+3;s%Eb_htFrPRI##ICse?HIG-vffz4O1+1Vhi$T-WrkTz zUgL^X)G<`DlMjuvod!?PKIg7iZE%JBr*e{Y+V=Kv<^ICmE+rTN7LVu0ctbgXfcQAGeJcwd7iVwiKoPj=6^mbFTD7`nlJ6q-jo&rX z-bw>Nw-BNJ>sXiYy6XM`v2Bk?Skz^a4Ey{)wlB{;C-lOORQPkA22X0likoVqQTHB- z5e>WU^mSJyyqbKfE~E~@Q4sZFlKPbpPuR*hIL$-T+JgC+=YV>)xML+dNH$nhQ?_%) z#tdWZSL0jbp)L2>>)QDJZ5gq_Q3OSXuj~@%2Y~+L6i?Op{u(T8*^>2pcdup(0uJ;* zAIiL^ZG(~P#+kmi*iAU!U4+M*A{*=j;r{-X9QPwhKUF{DinFSr*~DufkuIlH>ms2> z(j#ART7pg{9Qu0K)iVCZX)~2lL-I+wsm(lz&-RbM#v$V!TlATL4v)>+k;?RDt=++aPYea(?bW*C z4^!@b;*y?rfBdx=O!e91Fk9HB7cM|T2@x5j4v*p-eIRFkt&X8|g*%?u)o_ppM`Biih$W1JK}r`gmy23 zF>-pfa6j9(K`zYC)7A;Pjo6zm^hbl;8`?+zuHF>?I>`Id)TChsq=&bylF4H&IZ;g}+E%TM8W-y!VCN4Tm?eC6tC1-@ znYmZ{QI|v_($;LZL1*Va9MvxI(Td}BR~2inZ%Phso25j~5?-7?V%w)>24*I`Ftu8Z zneO36TT6*X$5!dyVY$oaBuzZXi(8FH?yEuJ?w%)84Dk8342kBzbN9kA3fvUEyhHQ8 zG~|dS9%qK0MgG>wl&I3p>bB9bF~_xY^g-kB^P-mGfbCtwsrmVPEB$E;8x!RqQ8BbC zp#1F#RI`)Ex22ALcgv(GkIp}7zwzWI&5IxHPal&%c?@i$ko@!$Bbz%hrD<_$KKq{{Sdv_2DyfzoKF;EJu6^qbiGjW14%W%Mpa-Pm%G(^*Z> zzyl%<*AslRKT2LWQjGkTF@~-h^|>{z&|8k23*r6{z_(V+f|B~HMCT76 zT>d;DHt>K|f17tAwf>G7i^~WSN3KV*)n#*=8nF9n)4Q247QllX<;(u*W0GrsQC$w+ zshjEy+`Vf@34_5lCGu_+-=y_Ey7Cl#_TIgFn81Yo#hL(jK%GBJUoJyn5=(}7f0mpP z{%oP=-08k*UPe_@_Yq3OL+wus7Mu#O(4R)Z5|BosvcC9axY8Lbr_(5c-;^@YfjB?8 zDGsK%mSfu`9~@Tv`Ah)wJ-;a0T}GJRw$6;G_??QsMvjU=26k6eCr|fJ?;u8s@uMX# zGfVVHz#M6|y#-j=ood%Q&NMHFA$R!SHK0C!tjTT#wp;(mT?^v{Oq(R<1o=6OtQ2cP;!gxiG%GNyEbS z2rba9#1v#MKtZ;~GiU!ZUAyUoT{M||*nKB$aT2dLZxnOE#bVJVH~ziDK6z}leEhoL zI~(utj6c)MdAH0qgJg-62P+r3P{#2Z{h{#)kF{txB_3~6Q#(R}%9RyS~QfdELqN@F6W zks`1P-!oC^qW%OXaQ;4C1 z83SwPb>H#+E`{(Pi!bHd^waYcQk~kZg9DEh`82Pn+0Gt(-pf1kE?wtitqkYw1%$Yb z)Y)OH#L=`fz2vdj6~}s_mEu5!vmaMA`x`q-x(6_}qC7zK|R2MiqEmx?Ncf`0MSMWE>rp!?*O=4S;_Tl<8Mad2IHZLY(p zB(?_cJ6F~Id(F7$3xiDw<#!Jg6slUi^M90SRbgW6zH$F<-r&QdNDMy{W6a}!Csj0) zT7&(FeIm&8LdmfF+55s99#)m?PhK%H5@46fZXyCegB?X@WCP52t(!9r9$e?1rAbT# z?}$~THhB|*SIBLKzECN>$a*45cY{1auRldLqj~}UsrbS^d&mR9o_%RY|O zB(Z0Iu=BQ3`mWc)R{MNpo2V+US}~9skZnlcB%)(e$R+wk0lM|fwe;zn+gmS};wRn~ z%-pN?dhG z`NCG}@CYT^-;u3PDeOMnFT;h!jJv)Yasg>D-Q@v78I|KiTOV}L6)7zn;L|BEe9PQcUC(k%)5gi%EUQnHmV0iz$J2>mFj2QWZ#l6*pq6bRwo5%(V1g9&joJ>&j^>|WcV+gD zDdC4Ye8c(k>xrx>(T(H<#8dtJYhI+%hYzpd2C?+J`VV_F6R4xJQ@G8`KJ|}q;9R9j zKpugb_X&>lkf0tg{vq*<%Fj1FK<0%Lg8{A@;=AU!mY&VftPIu0ww^NJ~NxZZ@f!#;jT!yDzw@z1##(W$emQ=^TQyrZ?GVCP!lf(v{ z_FD28J1>tq67UxVAVmNg^9db3-u9}#w!Xd&a=!pJg||BfYRzdi9(or$I6KF>uJk(} zY)qukrU7qynn)1n8~uG`D@vO88}C@UmC52n0nR3hX|z@Ai|LTz!e#ebI*YPzi619@#p@j|D52Cw}$;M1Fi-j?f*35x|Rck zonBv{NKa9TfX3+nFc;<*5G`F-_4?v`C*5B-0_$PPS*K=8+U6%JbL#VbFg)tByt6TF z>oH-T`AJciX4PEBKU3TXv-NP4B+!;40Dv4@AMvB3Q5JAO;*KN&&%g8;4HW-0JoA|y zS1elFhAsGqU;`NH7pE)IN2{uV-J}7$J`|PzDkV`X)Y^bh%N{20cI6CZQpo$$v`eO`dQ)og0{t#; zVhM&o?;|DAA6V^o#2 zMYT~!xTeoCcZfZ2&`DY6D6qfm**ViKz5md|+y-!+8hDk4S4&;cf#31hHPCdESR+=SDgTM^6NlM||55|#ZC=*` zz;f*pET^8d+QZ_wRfn`y(s2fLO+M0Nlmg~)T1f-8aLOh)FZPWt+Ln3}kKh+)a7kq8 zUk4RBg10Sq47BfxU%igpZfNzh>>$!{K<*jbt(F!&NGgqR0GG}C$HVCIY<3`bA|{_- z4qK&q(^QCS^wN@ru&}V#T3#;D-a%dp=IzX=vJl2vsE|1t7~c+0@7ViGBIk${2Td}$6V?HPv8+zB9GBB@Otie zgOt}LU|?ehvftlY#llOsP2ybF{rKZNZ(;GE@OD4S<6|{%5XRvMcws84p&mC#*HgIC zlqEiZktJ=h+)e|?(m$oKx8=LAA!f=^a{&5|qz(ll-wgUfK0KR> zvNlWYCrDQ_*S4oN>4d}Xdi=h; zE3RD*%Mt(KjjaWS3o2uHV~D528DWN>o5iO-X1ncsWaukUN(TE`kz8tG@C?>1VCk0URBc6N-Fsy@M0@A z*cW{q-{zzh08205$o5}a#eBq4m-&Ik54#GtT&npb6fyH3%!V%B|0U=YW=%i*XI9{j z>if$YMGxJp{M!Jko%2bc@{n9_;4f@ljzZ z2%M#KlZ*W`WMc)fYhqb%rhms6WyHkI?n}HOp}ce#{u*I25(|9lP+ss)&r>2=pYIYc zbv+&0%p>`z9i}larsU^thp_l#!Mv_|uOO@}38x;iirAs$^onsr3q$*`LI8|dsEu%z z=bK+BB|_|fAc%hDAx;WC*Tm^neNC~D1z*cF&_lJ!^mjpl^JV(+DRK*20ahR;^(!X~ z+@h8d6*5_AKNk1-`vzv=$afL}tC=vBUbh(NO=UhNoTrw-XunIVrbig<>Asy3*sY6| zkVdPyMr55jyvu86IG+O((ecHY%70TDf;HedtT4}{fd_~@vL0A@(?$ZMisJn$k!&q` zE6c!hy*kLFjz|2Ji{qj%VJ7~V6*TRS7K^&!o;TY?zHMtS_{h;7KI?aIDXiTN-*3An&r?|m=x1#ye* zCH!MrpCOj_hCe4t18=AY@GY~+%zRVU!g8gdZHgm0jmw%&0 zBDX4-qpUz$n(Sx5ax3H#5y{U9?3H1=Xyc9grWzJA7A zjm7Z3$j%N{~0va0ksud0-1s$5J1Ns}J3Ol8YvOyh`|#2ZhH-$P9btZcLo>;=T9X8%>r z-q1zhs%?b-H6HzJWxziiAN$2D5F4iP)}m2~O(+^#8|s{>%Y zYpnK@=3p4all8ym5&klR@JrBp?Z+(-=cJS*scv(JSg)3XRt38cS!`6C;!5WR zYzN(p}RvfPcEit;NMESMu&RlM|G+%h#!O*=2=&1gufLO z9C)5?zo)=c(2AD;VXW_=S;?On>cb12oPO`_f=MB$xESCp`%unwiX#ttFB@c=TOiD9 z7xnr(91Zvq;M<&E{mfy9m5ovIW_SVYxHgmjH1J@PyFIo5c5((~o{*s*@0F5yj~7KQ zsZ{OyTZB;WF-t60ROKMahbjHN_|_+1@b20-U#)Z_rx&)VVx*Y=IXw=#U-9$4Bp29& zQwHys0~UU%z?VXSPfCKuqDr-4O8xqR!MJ=p555{yj8=c$(Sss9P8#^SRLNFtXXlqx!v|MRn?P18OY4-94{Sbw{Gm%{W#yF<~VtPuxiQnPfgfyW}; znDwIsh7)b%trF{NL| zE}KD{F3hmnI!#wVRxF-bHlh;xD4y6R(K?f|ho2}*QE)~O@;G#|%15qP$%RC-ux(N} z`$tv3d6w&E2lIR<1$FqPm$~`n3i1kWaC0(AgCl{T;%o|x0?+SpM#yh{0fSa>GV#@A zLX+F(RgPg^*)o}+3ozw0^?Vfe%4fzN4$2c94$m+V9IPa*9PL%hJ^dl-uiWG|mP1ul zUj&qGS9IUY3yfa}H9oEV_^G-Tsx@B~h z>7u=peJ?{}ZRE3bzyR2n$lrL3WnfGY*-YBP^+pQ6{VAl54M#$M2!i|IGbi;Gw&n7s z@gvW;FWS1-LpVE}wHXDT7bThI8GNRub2WX*k2pUS0Hp;#mA3nxBOu7p7eG-8Gn##% z`KDaN)~5HDnjqBC*d*@iv)rIxqn+mM9#7`>;+f)4{QbK zM!Aaw63@;}Jk%c_Ok^u29{3@ED=9_1cODD`LVL9uPmf^dx`pj+5tO2V=ciJ8&jF5% z7WXHGVO6;=C>#20_htG&6r?O(IB^rB6Befv28jcI5o?G+;>-QgLrKU4279<8=VqKy z)6w89xk2PKe6@dZSs_S{Jl= zZm^B#Atc}1-qZ(N2-;bT&sXEW7%wlzryD_Gm*qgMNpgQ^r~AQ*afL7ZfOEaJ0r>*= z2WFfW@*eMA!EJwa{R$BU0Vl8xyUsuU$SR%QyN@T}@D@Gfm$iMuV^_Kua_-qejkk#k zf_e@Fs1mi%-kllx5qIy8l!QODxD@k(XTax9*ux$XPfZiXP2gG>Idp|B#PbR^JZS$e zud&i$`9iBDKG-lsZ>%K)RNM?d??iw`J;A?}<1!VJN{B+LC-#W96}Z^B?1ycCK%7lP z%E`}ar+MU*NODr^_`6`|TxV3kg=}YJKj#2C(cvss;@7gWTeSe&dGzXKPImHVnAY*3 zGS2Ht9IN$Re6LyBrrT#VwLCxO+SncRU#tFV@3!u>wwNl)F39>LwM5WE&!`3!nf{_a zkn`IY<>-LR<0X9m;Kihhbd>;}-!03X$hKp=b$lx6CaMU5mj&Dc+jxb-GAR_)L*REu z_Hpi{U&p?huTazR2(f-&ZdLm+!Wq?49WZ;7sN8x~Hz7}L)j+_nw^C7Xr9}q(RsXwT z7UYu_`&yxfi7?*2EBSmu{ZLQ#3p$$KPYwd-=e6R+4_!T|?Gh^`Qpgo6m2>XU5D*&d zM6_m??CXYZn9_Srd8u(uyexabTEXSPc6&ctA%||?;`Y1xXhBwT6Hy=hc+v2y337G+ zn61D}desy(@dFP_n3oD}EEYgDcog>O){VoTqt~3irRC2U8ow-l@pfPqyL5uLYOSx4 zhV9}1Lp~4{7_t6I?`c1D=IL&DZ)4yY_fZA-In`C~JnyplZ)hO*ks6Lxj_hN?Zq;KH)yCK?rm1dr zl2bZN@N-js1MC6K6G5;TPGNk2u{)K|(r0(uKH^o4WMZyK7~xC)F9x4O4LN%_Be{#+ zhRw-t+j`1QcK4O*D?EnOk`E*#llRaYRzDMnBMB)>Yafn7@JyT5LL@OOyfyRx5n=cY zcf30zQ~pnU(T(8?Hyp-9w;XwdK2Z(U3n&EWGpfB>uH4hmAQ6Q!Y43D@To<1S?4imL zbu94l{uDWEmOc5~LT1JdFMmY@bkCYzIz7PXU9u`>a>_j}u%^cl2X%ri_Gru7TO_kr z5_r>To=u4k=WL;QBNUuK97MjW^OYBTKJ$PrL9<-MmE<<#3-;LTN$FAU*htZzw9UBL z2f9dlVDv(59Y<6^X_-1-KiJ686|6Wd*UXtFycEB8ti)w9RgQzYLdG;{Ck_v^CRR^_ z?w3*P_BZ*L7mRQ6Cxg@5s#<9a_G%-CaOH zmoasHtaxfTSJgHD5dTVp%f-Oq^4P8%`buZVz+>7N|DA{D+hcn5{?Wrm3T;naH|=>k zUA1eg`t=V^!Y7m=pVD2w_QmMXJ~fX7?s`WYO$u1`JMApWr(b{}#Q{gV^=B2jQ4y3p zF6XC5{=d=JJJNb~1C*f$f-PoK!f7Wd9|NZzG^pkdo0JcmxR%T24reZ$90oW&u8()9 z<8QNkYheMqEZ(w!7w>mW{R9ui9OJ_OH1lSH_nPkj+UQy|1dg-+!g4x^dz%$qUUt?i z6j)=p{9jPd@+{rGlNBSE{UOpyB!~jl#WU;o`|bVTz)b+?Z%7Hu@+O4zS#(b$tl`6Q zhty7h)bV!5(QGdzme;1-)(%4JtCaWK(H`mL*xWxP*9k)-wY`4cPF@GYJ;?FK;Bx%| z<%T%Tbd~;M`_erlarMQ}4$Tsz{l>VZa*V&XSSs#q{AFC-4btUsv~A!usu zz>^f#(5((3ZuH6Pax`pEa6OC4bYRIl;*6hc%J>NrQ@*32RTpfaOjge4wEJyBXvgz} zvfA6?gG%J+=e9{}y|8%6Cq!~LQ&m2E`n4Hj$L1actCg-SabhBThVPC0%tc>Fi-VAnMYXLQbeD-hRJm~UVeGao~wRZ z^Yib*=MLr&hLnlP1x(bAts8uxKbwWNCPW80G3q!sA^X-x{q3Q(z7oVj!CNuyq z8N(l#WcVURU0;Z<9W-p5!|ubHlkD2h=_7rO?oUn5r77?0vqbs+D5pE(Zj~ZE1MjD= zlMI+Jz|Ib>(A{SjH?$yPH{e=6{>SmT#oUW+~P+6wCrEtW)9X3MwAM@r%LcH(Ux449_4BJ>rMHv*9mG~+O1 z7^g!biyZ>oHNsBr8zpGn&uxYndb2`*HKo3(iK($tq0Wh$xO3Uqohzocf(JoHPI26P zRD_f~O8(i1PrqayX`55O9mm4qoNC`oV~n+n{KS-JEi_N?bDB-wUOe zf!@j9IU@s1O#*Bj%Ud+K<4wkXA*+WbGAlH%RAgr5^jMloJ@P$#gJ0G^Ws(XZ`eE5R zn-9qPFSyxO>N8I}$*zXN#QGk;-MkBGd{*iE7OD~#Oq`Np#Yb~Bsov$q*Rf=C3W4Va z&Fcwob7rpJqMr&5w2DQ=W=DCY5xPP2k!a%Mlm|BuAGq?MU~}llG!b@pwsY9{QP~dJsaCmz8r@d*Nkmg4 zrw2fd$NsQY(T&zx_%SCMa5nM&eI7ikSkDm{)Lq5b4A0c!*3BL5eXo+;HTW4(_?$_0 zl1cZlwXC=0H<>a>nfXO#rK`ijn-k>VK|@d3qycWbhrnz6HZy-#&GDXkRC!~#&_Urs zy5>78Mdf!Eq{aGQAo9Z(#m3Ud0ZB;oX2->TwkGi_4~JzQ(Dmo?%{DP1UfE6{d}khtux%%UoHGXVa|FAx{J- zj%Y^utHBV2xx$r;>KKP+`jQ=wNA2}A3_(yPnO%S$ukcyk!l6#{arortmRsq$cESA^ zv7w(V67^MZxTr-R{8ghAdS`8R`bYh=uj<(A=7UPR1NV)rNNQB&xpF`vz;Yw5sRivP zI-O^~Pl996r&X9=pr0bRblf2M zY3Sj>j&u-Ee`VOtiZ4(w(p`<6xiaWXn|kN0A;9t;;$22hPVGgJ|$Z$P7cK1Ervr)NyaivLX^MV?F>T~|4*4^<0 zp_;K!sw&kfeeP2L9dJHY%p14vPeY7YihVQCx8goIYu(71z76ogy>f)-6l$Dqz}cwA z&1PUMUDP!!jzx9n)U(HLzb6BUC?2uZuk(uCT^T^ik^+-+V{X9eCg^kPq(`@-i$A(`Q%^W^Av2g6E;fD!I& zHA8a`)F|_Kkx7^5B1tYC`1P2d^35gd!zppj?#`tTd}F>=E}MdyGy;g#X~89yCNaVf zp%hC=uh-mAUTT)IpDJ4<^*uZ_?#ssYwAXP3AzIAU`{NoMvKUJe&i5DuPrXKn`?1- za19s;JuX%%g)mKVZr(ebB-2;f-Q0wrFnc<}m6?)not~o_R|=u9c_7W3D#GW_NlQf} ze1%h+u>`%v>EPvZhPTh6P~+j8s+YN1R;dnIpSy%wRS;B-$&mf0eZ}4BR)yRAJ*YLK zGq!|DrsUE)``P4ijd!`4?Kj@nR1g^+VtXZArO=evdDjFiKj0KJwh&NQMFRSS%c!X9 zfZ-g(XSrsF^FON;qj*YGCW=x+K(xn_Y3{JmBPPQWq?C=uL`5Kg{DzHo~oTC)#k}cm|iXUwH=j z-T*#U4wG(1V!>ZSB+N=1nvb#CNqO7nl}7S=lZ0= zs>EH0gFUphmhkv}w|bE>yvJp|f^eekg+<=2W1+og$USrt1E5+JEEq0}O6s`!drDlq zUS?r}lHle;yy5NEpnec;T2NC=rAm;%l0@VGpp1Ob;|C&e+U2y&x>ByiO}MWc*J}zg z8yPUYnZon}k`gfYF}R_>{dXT9=a0{k!}_65sb)x0ykMAzQ1Wq`u+UD2M8Dzz_=9i- zPu<+?m|q^K^m%0Uaz{5%-s=K1W5suUFROW%;^#rokXtM&@0FOn2Yg|z?d^ELT_J1H zW4H~?hbe~*&7|0V(u}+mX7*HDkRZmAq^2;eh41TCkAq+O*UJmPtDAPi)8#m8TI1d0 z*Z7YTQjgxx4Wt9wg9Fv1Z-2%Aj8OFLg`7IEPvL4^14q=T<}|Lr@1gr$Z@X5R*b z44o>q*wVR#*b*e`Tw*PGf~K?TFH7|5T-K(kV7{=53L#+-NYs6eJmc^Oi$@(Z0r9BY zmcQ(*9yWZhl6Ut0G410O71724z%6Og4?e$le-kiEf?J*&3o@Z8RtEHQF+So3#l^vgTp9qS){kk0PP>ZSRu1ihpu5S#Ks4ttBWw1#S>Hix9U+$&qwS zT!6jw1!Usmw+F`0t*1WXt=!stA(DZlUCDQ*$kqMM)NcP-ubXDy!7fF;5o0Y>kFhqT zG*PvN5>bwikI(+fQ&%s}p{9zsE`043>n9@OV7|kLRabwmG>x;yfe_f-+^b61WG^mj zQ{#=(T6s0jLd(3~P@P39c({ZHEaHfe29&IiawQ+ z0+tc{ZTxrf^Q42inJ8ZnV#Mw?*;JX`Ty6da)m(Pc010kZI5 zXQj&fD(Ka^Xt=E37%-DA<)5tHCVgcq{v@y+)R-s0&;sWT&U~|H&CFi2_ji7r zb+WP+2`2K^=X$Pk-_L)5jG@y4qztEQP(otsx}3V8o^?Y*9$XF9?8m?4W^k5 z3#Ng}nNlt2EsT-j@i~3Ig#wm6V{+Z?c~m$^3YpBCl%X>yhH>O8|vtNO2M>kHJ=k8U8oyr+l# zvt$v9p3dew2FJwviI;5k*c||@%ul?x{oRBGkVl=Zi;`fi1A+T*VUf|*sZn+gPMhs_ z%IM?UU-OYECML{Ikyy7`K=ly*Lw7pXR5a1h@x6p=HGZBCy7NVA`>yO4<=U*1R`q!T zCHAxns4v*DsaonkV5kyPQ@MSgB%PYT!vl97fbsYdar(DW^o>jV>Mx&+83Xo##*F_k zdA(ZVxSs#om!`b=itK=;clY>;Uc@(H$V4`l5^V_sNN3OuEKwmEZMzeh5Z;N8)!}7W zQ92^=zZOyTDYn-hzDaiuGR=|oyeDHhQ$c8I64;-szxkc2u86guU?!sW`1YFTjG6)S zWy2CFNfS#8c{>ma|Dc-;X`vsOZuj#F$9zj+DHXmRUX zXZ0Uu@i}k_fawW~GwlqdbjOh?EIupZAzD0=RABv4rDdg^A)oHjx%ps>y(fYAjG5s+ zRql{E)6%;)?kpM~LM1V@{s)%%dQb}odD~Y)74?y|8q6^!SbbH^Vo_&;4rag~IlNll zQZ|&J-#nVWju_ERl@BQHh%xe*qQjEk7;;K{+$6ac*)8U~CQrH7Z4mq={Tyzc&)!5= z_jhv_jTtl^phXU^+eUmykAJ$?-o|VcZyPqgFNQ`Ty(gk3&R6Dj{K={6td0FZVCoPk zC!ILSl800`;V&oVs}}?Yl?QA&3cd_|ZZxy=9k!;{+gq3njZWFM=EwbTSAm?|eU;}L z!1q{t-3xS z8`Gr5n1Z}$o=~xjn<9s*7%Njl*k#Ll*CfUp68n`{Y={>k@DT7`;mY6yL6|8b9($*H zsRA-I?xfL)lE>r}0Zt9WW$NGud?W{o5|_0UjUF_=+S$#xa`D;T9@EGYhXdef4a$ob z2$58iX#9`+x35acf`}_&E#mYH$|!qSqG?L>7Ba9;wLYBWIr>M$&3cYS+{3kJ^sAlr zHcCRJcz{C~_8Da(A0%2@qzmAtz3(Kp5(YbpwnSr%$qV>aLI*WBH`#ol?z+^QS3F5S z!a5xL;0M zqfV2cB2YfFTq0IQ5-5%j}-ojRgS#Vz!xTYppkjYg4yabd#E1p+(sE zYXkKCD<+KDU_1&PJzwJ351USRoGo{g(Zga;-sMCr&^> z`XI3fJR&U(=+>4~A`r&CcPi;yXoOey@**xV(6tR}2sw?-d}Oc_%y9bZ5fd*>JY$bu z%WZ#RR~C(#^sAlEz~4o4p583-K)({Hj5;^pvw`I513@u)PO$JNTV$U|J2Al4oSBDJ z*lai$uyK%xS;^~FS5DDqr;{fw-X{b#D6)05XY$!W_?eNLo7>EuFSPFHGBqdD$;j68 zB0Rti&9$0F#18>o&gb^QtHLhre>6pZqq;?G+1D^Y!LdG(plZ!~R_Jm|OmB^?gH5@f zqXK>#OVp16oNxz+_l&`|af%-wa;OP9p3yq}W_jW_7p_-fXwi1?pEC6H0UVvP__4S3 zv*BL-akyMbxj+undC;Y*{3V0a&$5;PvT-25qH8kWpJI{kAEMsJ+^~BAC{IAnnv2{Gn+ReKzW;(_g2b*R%lbZjy zN7H$s`iUAeov7%+=j61@hSh$NO#p!Re*Yf;7o7VE;Kn1r1Naq$AkkNM$y5a|n|H3$ zdek4f>Mip>6-%c6($ND;FW~&x=y0-wQn(~aCcJX4lL-yOc^}xGU;hD_HTvi znmycX_fUBce5%)-0reWtQ{-bpc|^vy(6@|4MAc4lL06Gdwq6m|=&R5~CcF^_euOa} z5hr~9qiQ~H8>?x`x0gd~*OV%!1>aRHQz>6xTD1;p?Ltao^gZIp%3=C zmhBk}{9v2kaE#uhYkYtKN<1gCA^`0#tLqoP+31-7ZW_4&N4^8k zmjD$biFUIh^Hb+gs-#O5DOfK|8_q*woPhfJ~$InYOf`^s0RTbla*{>Keq( z(e}X1)#caV=L*amh`A0tdwPsQU34phP9_PJ`+b(~`xASPTNawnXj3)HlkkqX0&wPZ ziRa9magoAORccdui0(5)E2m7Q1bGmSSAofhn+w?So})tdZE7s_w%t$=`bXovNm82O%!5VMj21 zKaOws&MzN**f}pWPZ3O0N+;u)q$y5B6nCBQaQ<t1$TIuNT7_tH?tUg=jNEU=PsvX`vk9kz3x9jJnn)S4<^_=3#g z=SST5`)>Vg_kOG86_=|^*52M;+Qv)Tl-Sr<;OF@iK&t(JqDk#j$h1?kGYZ=i@3Rt{ zTHYA%Qxt5x3UwxOqI^!>TO*$MxV-1)7oBjofsCDcAN{pPomYE$wyi?;YZA$=Obz%_ zB?@&(Z0|s-3RV9oaR2P1&b$=E(G7lfDx8DSSi4$Jv$$s*o4J9tKnH1f(&+?6ji+;2 zb!A-{y%-`k`Rpz+nUcWz9z+ZsE0mSkH8z;j1d$%(@vdziULp-UWlaAVx9db4X#1|@Nv%hR+0MPR#oaGMg%k>?m(gD2toB*FNqM>h|KYLdZSM@P{TNv%-Z# zcPMILdy{F$BAqOghlXoRA?IdH1rVUyaF8_mdk#9{KwhU;arL4i$n0<*J*7bAO;|I8 zq)I#%PcuTLUaZ;PWzj>@OjV!KtcrBjx^U3AOoSczE}GSFb6GDFom2yXO1CI zPyr=vOTB#^u&M=K&icYS>)NfrGXDIXQK3x~!N92`+vzsXWF;4MF>Zcs=_LR8%`Er? zxclZ`))^@gO!8l-Vcb-L?)ZTw?_$-|IN@^Lr*Urc@XhpkH_Lq0vwY@D6p-puPpkPE zsk6lE22*Ft2D?XGi-y$p6J8^on2#_7G?&G5Y4R~<^)=?$$?$x*kjem|*s11m=g!hr@{& zMQZF3M%30Hz5mE3u6}oKr)Lp!+y~cw0pUlFxrcA+)$GJhxHe#rZh^@oUya&7i75-8 z4_y%ri+>|+wjH^b(=3FtbcpP?5gfJ{LifT1m1{|gz>V79>Ju79o1DhIkC}W6$6aQW z75GrQ!t*bpe-37}KL3m$Vb7B-(lzS6fd|ao@bZNNFNqfPvZIi-vyio|^OB>GqX)wz znVoMZh+Z}9XCGgEK)=)9*gf0xMjei#SJuz-G*#Km7X+G>1&#|pE@;O@Q|oU0 z@;IjWqGIrIZ#&#=?%uCb>Q|ThJt82m<`<8Zt-!|_V#394`Iw8xUHHHVTLC0Khq}n! zrVA;65RP!EHbQW2MGD?3DAzvGEhkVRiiGTE zW*>8I*e25ww6v*B9=;JST6C$(z1iO8i!Oj7&g*i*UgB2KX<4~=cETABKq&a8TKNcR zSuGqeg55m8d%7 z_s<~+Pw^jTeiGQTAgdO%aG~}LgK}HVEfaw6v))x!WFRK^Z?dEMSGLzA|3db(DAwh< zTD1FZZUN;xHJVnXdZWfto5o`pEj@{iMZBPeY&I7RZev%kD=e%B%m>b9MNgY4@PDL% z%FO%N=!6Pzk8uh0)OJ+#q`x(YeE~g-@gkvxC3pob*;OpX_S@_^;|-N zh^nRMyD_l-tSH#R=kAotVCt6AoqgDN!}`2K+dAV1AjlDlOPuyZ^Y)nWkDZY?oUv2- zV>F5$?8T&x&NMVm_nRe@_1BfFeZ_A0O~2jXd!2?NiHPz{<{g@h8F8eX&5^RUqHLeDsLR2d-}%-c?we#Rq;nR zYercxx^W4S;8bOHz<^^T-E_PExVw>R{&xBu9UAJ3*awgfG_8 zT7gqIj}4oXI&eDumM&y>sIJA4Pb=|4oEvmpGGT z*NIOS8ut7qCB%E-KF{|h=i$bkeW8u5bx7~*3YGr06;eWgXuG+D0)n7)(I*yMKE->o z^8y}=6e=--5wx~PRx|D`ZbI9EQynNMsm(8P*@*5?W~d@?sQo_yq9#L%lYqeil)1 zKG>|bD}3moC^#c=n56!qR8)Y9txDWq>r8l5HUkIP9T%)!nsr^L+P)FU$E6+m&W<{? z<;xfnKPYaM7hiIqCCF@+sAUQ_6RU*SUjsOM)kDS_0WS@pBm+2!u5Ril039(f1~s$OS{UdxN2*>%<=`Tw>&+>hlfr(Dibs_hFJ@%9Q*0cCqNCKK+uZdyXaMHq ztWu|er(9Vc;7*t^7TlXDBk^Cyzh}b&IEPXtlj>awsN9S$?6S`|K6lL_-Rsl=d=LTGY#7{kS|Z&he#NT)~|L} zaJ~iql}q{5%R>9#qBLIEU!k-#=U9sBtNG7lKkGtv2>~I~VE_;^Iqw$0CzrI!ikPU_b`T;d3Vr)N#2pH;!x%*QlZKz?nNvL|KcD0$sZC<7xQ(Q;+z{`_hInX z4e9y!J+uuES=(=PYM8(3SuY4$Tz49u9qahiG9dnKZs?ourcuhflw#UW3gBGQS(_B7 za29B_k4w~5^m(?7k70{}z6yLbfTdL1&jKyjQN8gdTod{9B%W3|P)$#M(T}ImL}5Y4pJN5?-^#kbMwt_K|y(HMv{Gztu0@|EOQC zbI==CUe8tovNbv`-AVCg717iNm(6ITg42udF*>^((jnn%uIS^6bL~%3-KPxCgv83q z%G%Zz$dKI=+X_-yb5#N~h2^Q^fV#2^HOn^7>mKb2zV1qN@Jc?<+2UekWPw`6cewtk zb>{MbG%D*0Qxlm2LO?$vgryRu5AB-d`O_97yCnW#OukffH-{+vTC`~LCR3O1`k$Q1 z4!rqjdX|CaSJo@ke!=OkfKch;iZU0QO-i0LNILI2O)CgY)Yk`_nkFMLc#d5)?#?3<0AI zlCrVDOUt`>w70syyWE#>{}jh3fBcNQ=5X)iip%Pfww2pf6O{|yIL^tR>mR>O=9&R3 zIFVXW4aIhNc~2g3+zLcBhk{)kF>O(I-A*eZHAnLZ^!|V)FS|ii>*3BKs=x)9!ED>6 zpnxIKo>uH+nhbC42)_9*l)1BM^*}69Ij|FWc9H@w!ceov^)>rHm)D!{B%e~+TuKW! z&ZTRwQJU>Tu+pi9V{uhly19?Gif)bXw}v41e}~V%N(2Sx(EdMKn({$Nu%-U`a6pSo z{v`CJXf4C}^r9`geyrXAFkq|6Jbcii2h8Kvfx;WGI(ygqQK_X>KaLq(ea`j~4AkEi z3{U5i@0P~KA-FWNi=yTIg@N&g$2`wc%NoeS&IkyujERM#hW4%QA~R$eBW@xuZ3K+28Gu7`#STJb#VfZkc6PrN zQ@(OWpfWvPGoJSgb>MjN&**H-GLgie>Fo2m$V3Kp+hHKi)1nis-`UHYuu8yLh`Xf` zToUsKq%41oRX)D;7=)VQetA9@RQAMwgt{N0_BuacNT;K>HB3elp{h!;0R`$&;PX*_ z$t`HB-4c@x&G?qQd3(4?E>QIbRI3*b8TmcD5|aj3(^?`hRo`ncUcax6jZzD5ORmjh zup`B5YXCl80zuNXdjL28HDt&?^dS`Yhd~8%zm*bK z@b%AmQ%)VyeYUR35L*E-?-xU4iY4<6g;zEqMZ3WR31(;0#k1R`_Oyu> zJAiNZ?5>RT95c!3*35pdy zrTF&lgDV6`zc#lsCi<>Cj4)*i4OTchgQ7Mb&d8$#!p=xt)tGandfBW9S*ev``n!#( zDg_KEibE!-&8zO4-@9&-vL&GuG%|M|2hZK!l*+h2{?&wq1uNvy*C+D5%#B}T*k+jQ zcbRtwQ=!Y2hlJg{ z({i9a`*xf_OrfD054Wqj(w0MqR=mrTFg|vsb`^>v#lGOeMWK&gFE(BTOp<}7TCZ$? zo_^JnqQ~LzLn8Ho()_2>c3MtOPJ;Ov6-8DZ6K>gwiCQURBLiIe2KM^xYSvB8X5yddXQVPC{n-q`ULmy38$%^WA9~eZ-Vov?*`9Nch7}lbg?=I4Mu&j&70zCk?2J=_p+nO@me(jBwn2(|?_TOy}d-ES0GdG=rkto z&=N0`vc2U^l+rr~(>IQw05N|(kcs6F1%XnAe{lt=;=U3FfmDeuh=72H9pS>%ySG5^ zDRa+5GJ*<$zYiIhqbFgy@Z@(geDZWCVF&K z>9LQcBY@|85mBeYqif9|&}R=f0+H`@KC_=9AJRJ%oIX)tGkd4iP~s(lw?4mi83amy zr&)J<97iDRKI0sP7!}7SpP{$>Vo&*pI2u;p4FQLn62eErHRF_!>Qfc8-Q^_{-Yk2B ziwXLwk`Eh303DJxEhp78Ejc;_ufM}Y;LkgEIu zdioh_G2=rGKYXf}mRyf`GX?it$}vJFcf&dw)X6O)6jKog#+R8?^^Bjqks$i!wN z3unF9;?mkShs?j+qZVCE&ESn)dh~6dD-ou({`FSJx6RMm^x=0bOG#1 zaJE$&Uw%{9wo^wwMKw`VmqiJAZT9ocjFXYk4o7AD3TUWmzAxhT8`g01J!6r%^tW0e z^D{MX2R=q*7k=y7XWz5XNWCNnzL{GZ!tAAqspH+7AD-|}9(q*!W3X8)WC91YtZe{jv<4nWUbj5WUL%-D2)HSjkhHgv*rRV{x%=fV(>W;6nI;106 zX|`k_A6$wmrI!%xATX#rqB0Lw*sCba>?E}CU640HEsBW_5-Vsfkd`5%o)&b^!zFS) zW*OM-uIHWM!t%HIcMp0Zb-I$o4g?mBS;66Z=Jx_iSHX_97Fx-T+cV7v<_@3OhxWNj za6olejM8AB&s-yqwg5ySal?ZVxeAvU>qn`G=@&igU%teAC;1zuOXitJoL14Dq6Zb> z27^kw9&x`M@s3>g^Z;P%=U-N~JnrD`3!5q7UxL6q3ZqOfCCB$H;_XF_4h$@6y-3G= zk>$xT4S$r>!QsT7d8N!*o7>af?!o9OME`M&=EAr^0N;M9$Tg7aFSoA-4M*zxx-VT0{QgVEhtM5DG3=lmtvu?Z zsjI8o?gavElQT5IU|FW6xmRY=Ty1HVje*g_j+%Gc?x3!I%moj!LxAO4-O2xOFMt-BV|mX1pJy@|BHpB zz{Ekkfcv!F2Ok3LM{Om6O$8qBZ%hG$H^@if@+S6e9V0Mm0gtJxzo7>%J@$S11spQ$ zPra8vzs~-D`Rmju)40cS)-x)hOaMd=I(NC}{H5P}eT6C5iFN^b!jng|3T^gseS zg0xTqL^_HPdXSi42#{}Q=DX{=YrXGnf86`mWkG=RoadZ<_SyBf_Y)JNYkPMI?Lr_B zdv&j0F-0JF81S=y2QQ4=#%Mi&UpsxSTlpane1CC&c#@>}gkf+yTG#OE_Afh*2ui48 zzm{73J#_UZ`l3JD4dsg{#CBYVp*?6Ay5j8T=BdF(|7;9xVxX@ zom()~7g60<5eLINxWksWe7)VhT@j7K(~n?m`#Bud7EU%k1?L!+(W{b2{AW#e_Gg_EFWyzEAXo+)@pRe zz@?fLl!-82e6MJ#w1n4W=%eUgEuPHpODvo>#n8mYsNXW#?UZJw@+0cyy7#N=KQp^n znPRjqs-G71D^9xo00L1nyJ1wT2;`pPy(oe}#2tUL1u?OIt3Lvv5&en}aqrrQ#nPUj ztJkhwtHmJ@C*AMdkq#7;*L5r8POIoUeMH#-K^D+_I(AL}-@d-Dj|Z{5BN|vNdeLM% zqVdFzIr0T*!33Zo{M4o6`%GM2sej~}U)K<|^zvFv9oV_`mlal+qn%u~!KoA3T?GcG z{64tzGLa3Re=C)s&0`^s;>!n3TbEMHgD`;U`%xBbFnm7I6*w2?v3+SXu1 zwL--2*k`xPQh$lMVB`~X<+u3UhYxuftE(v|JQJqBevEmG#mWYryO;64(vza(H{G$* zUU2NHe#5h&;o(X@Dyg3S+sntjvlXM(Dx)LcgGQGAl&fUdRaFhxofeE4B!_F+8?Dy6 z>mL3(67hN}bJ$Pz;Et_*V`Eq*Gk{Ws6VpC#GsqJCHP!c1iVAUDPIra9agcdri$n@M z&oeFjJw-py)B}aejy`s)?!=pvCp!m}m6f-p?0ob=EqtwFLo>}lFMiYz7;r7zg%Gf4 zy*N@!wkv3880CB1<91^^zbIN}yr<_i5+5*SC?y(KR9M(*G(XXF-^0VhSH{f7rf6=? zBQ(uK!pTx=jm;K#t^?oBR>^QCk;cxIl9G~L4=!C@EqviMTy+Lxq#q9_m2MZZRBJ@{ zjEofHT)PDKE)?F-bM4A9_w%D4n%+YexY+Q_pvYIc9W`9lxheWwhcQ=FDu^totn4?x zdtLkhGji^o_oy2F&*RTE;*1K&0jrT!`T3{(0|ST0Jv}@QJ=a;JX=-ZD(P)-7HW`|W zt*5hZD5OdMe1@;98>$Qo4{s1j* zhT?%sz{&tmVo_1MKrW^upgdGiQ2M3=M^j$@6uug@)fCrP!pl#>qA>Sj z!*Po7;2gc65ye68q?4`cN%h54sbci-H(_QC3?=7+DbACan6{YonwjCw7`!bi0v5(-5t;0btJ$?FUq=JS{lm54vWh<1+uN5inapUJ zyRH#=BYK|-%?cKXMQ`8Qj z_&9AS`!;gT%gc)?<*k)1=c=?>%(SA=a}U=$goYWo+nkydzyVn?}J?1MMFbF*nf(|ifpdOOpV z^|i8%LAwtod!I_^DYn8LifcJ7-8uU{aj?7lMMy}*?^P zv%*pQGg7v8wqm54+b4o-hp&FJbQ!f}@_RJ(9sNj}@$r2=m<;wRtvc>ZbL=avsPzb< zwT;c9@#V{xYjJ4(pZ%o~%D>JY(~hu(7h7wO8s1p@_~XZqH-&||{F*;rfZDlqq@MjU zTobT3^hbe}5qJ)eIS)@y^1>hvN#_&O$_&Jy!sl(wURK_H(lWVg>n~HJhelZ%?wpNM z&RVG|oikUusfQ1wSx6izr};aAA};!GiMj`xxzI>(C!b<%L~JaMZ!Z1}{A%HH>(ce| z_g{Q!ac8~$_;739MZE#2mC>~b3|y6|T+A?65~_p~Y&78U!|_h=rhdHt!soM;mGJQJ zWN}YmqM5IEEJG+&mhxmt@Vz&3X*y!tn{~Q|e+5>a+~?|Dw{T7WvM_ zNgEtZt;n41f{VsrFsdxYS!(E>15d83h~B?0ep~GR(2zA)X5IK?IeYJdw9?&`eU4Ve z9htklLZye>v{0EHWhzsP>jcLZKFiuH?Z`1BMfI+aZN_bpqTi&nsg4g9vi4KY>4Z9U zg9mMHZqA(b94P+%>eUAkKR<}o<S&MsMHO#<4V~y9Rvw|+oqODuv#Hy(oqPb`_r2O;m;QFgL=YkjJ z=F*oJgY0TO1?*n`CgX25zvs~h3t+0XwY9Xah5V6di&&9Z~P?V1-Jm3yqmb2s9O z1(zh)19{5D8d!3&RrZAI{3(o)&FJVTv!&wm+S;0QdwH?4=fF)cpCE134PvlLdGSlZ z$E}mNE-lY$g>oBXN7dwyZ5@T(RV|@oht!z){!Rq-E-5o?lS8+MmscfyVZ@?rrCp03 zv}R+}Dndp^#sYQ&B8!)nyrqupu@(>z;Bvqw>Wj~3Einu=lo0M)#fxFPw~?(*aUXhm zdXmm!-g>^e$x17iXFHJwO-VdB5o+1>0|D4Mu_=fyFdy)W$1U= zN8zwpKzA44*6BabtxQR&znI1^8(xs9dZyd*ttl~s?V1o9O%PjFEI9+@%;6R$x4Y#Q}p6&ZoDliF+aYqdubGZ@{H@d zR7HCuORVin@o-kVeSl#g-_J7@9XWAYlDZ-6#p*?OxGK>fKW2?1>m0ITTAdVz2;q3( z1h{S&V`9K!`shgw&jD!$lR1RU$`hiM9gAxnOUBu{k}}WehOB>Y*)3~dyx#09s-&zu zNL^T&YG16NHLTj1-?%X|Z_lYqmbUtnL?UJK_>k(aOP(j@=j(u;a(>2fBy`n+mS2Gl zD~h4GmzVM+P|LC+^Rl*(=9}Hz+`5;S-!+JVCAo?pixbn%!Zm>Ox&;NDFA$C#uJY0= zAV1Z~(L0p@hZP~aF$M-KtdgBeX~!~MJ2F+xK79Cavf#=7t&E+Ac5JQi8a~HPkUJ7* ze)a0r9u_E|8EC+~ACQ@x8R6wsQiU4Fa;*Tw%r}&T8hWHtkdS+P6Xn6QIvv`>o1~Z5 z*WLXpl3g8XCVxcQQV^wf&?*8HNtJpBVp5l`tdhX7;A>r4?Ba)y9#w)TiJnw6IGKC% zIICHO@Oo^_4(z8ynt@=Lu(KpK$~QAo%A(i=G{-K2aa5rn3>OAttC_ZpF zN!F}M)%V+V(n^1SKi3z5h8B&Djnzj5D}kehpiFggYwkz!skzGvz~0Mf*&3Wn%v9AAGJ-;^qK7|G>cct*Zbu5^?OZxYc6wPaMB|QqY-Qh z^sX_hi6z&?{{%O8cQ5lOS1bxg2Hf;yw5exh(W18XL1(F%C0OhLtjT4NVaB;aBGDc! z37_PkpscM#>u7s|*T<&<@jBMUU>TT!1%-9I&7qs4pH$^TnRl-KwqHam?4~xW)%e>g zo6)$1|Bx*Khcknz*s*4~ZBPZ6P~))8W2`6)4~; zw9X$=QOcJOj~LHUVL21Nz!xD=QFz5)vpilWngPbff90F5xw*MJ1&d_n;5;eV!4?gC z?~kuBazg_9W)oU?2O+f#SQ;q=5%>J?aBqNW{r6_!tQplz->HZ-2uWBL+tTwityuzU{F(PL5IKd1HYQt<_QHKx+E z#9JILD_%cmA7PT&RW3cxJGT|_f&$v1#UAXEJhW?SPeu9;h)O7bUX4k-F8-7cflo?v zT<*TiKl|5{gHt4<){f9M6|<~@-F4$U29Iw_=Wp9B_&F|`z$ihv2L;{CP(fuSE^305 zfvYx`79>9vkUF(+HumrWL`HBWF?>e#gEwi=)({syouVJmQQ8!llmb3EoW;U{F4#cxo`O!p!xU7P(;jb-urc7 ztd+z&MWv-Ey=rQObGsm0yDwEX_!9Ppq%-H*X^3X6D?R#adI!s$V<0wZ#>C0kRJqZ{ z8iJ`vLRcDS&knNS#qj8@_b*Zky7zvu=%r8!V8-Y1!!p*nU{B30ER5W>435(l7tJLO z`F2WKX0=UqzrL)7o-wJ#{ca+0C|yunZKXr8>rHK~RqyqEVyLP2tya3N1bbN1@}#(Z z-g~Pw`J}!(g*PN=4X*9UGFZ=^&-g%8kDeDZgq5u9o*Gv>#wVioE#283dk6{j%Bvw_R&8l;^?1M+eh!H+gnes zcb;a4-OZnsuD&#{-cDkT25X+Tc@Lz3H~@4)Zfv|@6nuX5b>hTOe}59$%;|=O#T=K9 zK!&V6p}4J05AcU!YV%Zk3S(`)6h9F6@pi}tgK{mrW4TSL)QvIMZ`}~$KQ?Y!3MQKn z&i2h0JMVL$$g)&6b?NoxM-{-xOkRW6yq)*?wa(|)@7=TKGv^~#sW;~GRQ=Ye^>L?q zr|(}s1{a{l>IXwMS=2>ZD089g9BS+i#1Q}Tgi%ky zH8?4_%h=U_wv$um-?C-P0APnDQBgeVBJ{wr`gBIex$V5X#ef)E!9%S7+}zxPS2iqH zDMuw?aPaT0rOQYp1~WkK(xwf?QL`h*k}Q~7>SX0959U0JnjM&gNl-L)5$i0^mp05Q zubwm@2ZwbqF)Y6&&)1IbRodxwb!rq}l7d{GbY_dx@N{PeGFWjoc1lBZ@iP#1zTg`7mBhA)3Yl} zQqCA=s`|YJYb|Wt@EpcX@{wVr1a|BtLCl|-*;Ni z9h6|##?M->%~=vXB2Ska<}ML46G zlqFU=oxi{}D_E!ZQ{}rmg9;lfDMaa-1%0`O+!oQ$;#{<$+O#$JMwF4%sC-MciE)(s z#|%$@u#v%`a}Wjg4-B|OMt*s4*fwt0%F!c7j#N(F3HfBe|Ck;kCWGqi>>O$c4Q#S2 zN={CW4{`NYhT!*G7~$Zq2WZBed1r=-9Ibr18EI}lm2Lqx$nSNkGbZU_*r@YEzYNP# zyGlGC=%*FN3VYM8)V4Ohnr+}4xH_$`p54@Ru@j@N;=1P6wY*Y`o{e9sr<3Z3Qw>N< zl;mW=&^6FUe_#p~S@5~6xVX5_uS>H4?8e==Pefo~2*YE{;bvQ~hQ(ko+9G-7=&@ty zZI2;kE;TEz$H`b%e8N7yk-544B31Ir=txJWgU0=fa5N*Z(6gUj zo={1o)cR4U_wLDm;ILvb_lBeDH(kTqcjQ6zwX;APxxdKL&pREe0!RI<^T61`4dGVR zlk{r6uMd`-GpouG(N`22*Ju}+KMQP-K=VCgXowbpF{+cSW_6?~UITj{oK3N?un?4{ zh0V>+FCuPQSrvkW&%J-JyAEtst_Du??$;~2ng|z%beyscJOw@ZT}qfM^&sD~nG-0< z!NKPU`pB3&1XOB16Zd$xZ`WTdwVt1!XMjnp3GsQl^T8z#clWYt&E)zAmwv@)h6Wf6 zmMlu@{RVVG8v4dk=~m9q+O2{Ux66)_WK&= znPS_l&$RRgJBr1awta0&k_x7D2J#(KL%Z2hzq{E5ec8sQ_3%3Bo`}=>+uiID3tMjb za|(lEZQ0J})*62@UTZeQt`6vYbaNUeR%u1g;EYVniEFXn(EF*LJc8{-IM2_u8=&|_ zSS-n|B{)YV>dcWn9uQfnB6F|BiTdYN`_B*D-S*W)A{VrWvg1e2wYXSSOqn+huyg-R zgT}KZyQmtj)d8;^gF!jHMrwMpro+PBrCE{|f?R$BZ~OZD^Qc*&vIQ$IFe>ER!t=oz z=^&7GZLSr^<7w-P!AD9!eQaw?0EQWQck6!cOFG)Y;nl?CNqW7?kv(q-1UopnT(CC3 zh}w;J{qrL!AUwhmGE!{inyRX*`cWpNFA$?Rjwyg24G!&IDJ(9&fkL53wF}2+J^lSt zZ3%-dru1ozI2?^1Ho=Bk7p`6|o#dEp&u@HdUi3qbvm!TwR`Sgun0q%K3p7x!8;{a; zsXJX;Hg0WN*q6%tiRWO{QlLY0p6MCOYKJph1iom#HgW51@kb2KL~!Bve?E8o4a@&u z2H|T;Mvg8&jg5`%_m^+KU!N!lU)pDKV`p|QM2BO+fa};!*iWs##;iO>98Nrz6?jnF_U{j3Yt7&8VJ)4~u8#;c8x~Gu# z46r!uCs%$$$=l%rO6u@u8&O4fzn@SL&jBUK{F+xBxftIDH+Q@cCH}2&7nR6 zur0vPYGC?2L&OjK{@Y8F%a`wK$|SU2kDn%CJdK5q9CY{P_LOZdnkgX7Q0xi4qrxsS^Dr^BVX)rjx?_B{qObe<)kn7e~E!t|~lQ42|P<@5m zFqmEy#_|o-q*g^`7($K;;_#*&#Gtae+W2Cu{OJC^_P@3kLc$x}4mdbQD}0D=IX=;- z0IEo(RaNIs9@xp+*!&$|1}*_|hLi2(+-H4#xg?U2xuvDlF~0eahwafa_QmDbX0!5HVJo`88TS55RRFv|1+{aN010^X*=6F> zZ2`Zil>-AlRS-_wfG3`3ue0cjuVxpfQ*sa6hm}omlme&Lb=qs7XJMAx3(zJ2U8uLKv(88fPq@60gHqv3ekekA+^fD_ngM%rk;H`Za4K#Z z>Vf0}V|}675Qvh9uPZ(PkxE3ClO^vS`mqsd*SapAu=htl@0^kNEejvuGogIvm5q+&s@oK{bD! ztMA9VNTmRErs?R5R{wVJKNr^l^a?OL)%))OQi9vp6Jl6Dh2r{9WJcg{Ht;Moz3}|P zP-Qzq2zgHN9Z9uUOEeDu%N;|*=j#!XB(3M?)W&}ta-v$sUwZw*b7IWRJ8vo-QJPCPCXMqzF6{M;Ux*n?zLdjb zrvNS=YzR5Et1d0#=^df@nVA>4(f2#@)yZp^XZAr`bJKhsQ zjEwAj9s_ajPJ^4V(y z>B@1|Pf#klx;7F?-c}}Adkhb1Z+3BdvjgjkO1HVrHCir71_mG+={x2Qe*2C`QNBM6 zhPqql);=+15+!@%yO>eX8h4#|TXv@AV%O$Re&@wn*Z0+X5uf6g0=aD|$!p?tFHTyK z00*Ne_U3!u#f>+22@&5nQ42&){UkCJ6Wj0iLq&h-9WlfI*#b74d`Yx^(*}cI@sz2X zH=7HkQR1BnY~FlapHMvPztr}r+|Oksf7SYz91?d~PYyvavyjHLYflT9kP4i|j&2Oq zIOP*+zZ!*Vt66m2T{I3D%N*WVA2D_(J>!D){EcR(OFbxsucN27A*v;<=MomKJ*P8P zy0m-aICP@8E@$-{dx$l2$1){I{O;9(tWc-L+H2}!n3Coc-o>eGwcvifb(f>=;>)TH z>-4xEd7<7Zl~hs8aNPxMk4zMbXmWw`wMjo+aWZfbO$=IHWY%xbuANC=Wz|MHpvXgh zaiTq%eA`fa;cN2jA=;D=PVAa8Tj1tCn=4;V!rQ%Cee|R z*~7Cg+6(8J!yc`k&5&9`mkieiU^iA( zEJq5tm&=C{ac5}-PFowDoEWy>d`3dDDn)+gy%h8csLMGD{2o=FOdtszd`$G4-qH}b z;Ygvc4V$X7#jqW4_2TCV5q^3;gYRoR#gwp8m+)dUpP6oP>o(=o*PO7F5J)6B?R~yQD z7`gc?R|gra+U&M7{A5kJ=X;KI$Px=@`VsdscmhA{yv^ID%2hxid!ar`wBn+>3mT70 z;@)mx$$S{WD;iHvsy2N^9halUF*hVjA>%s}5#dgGrFaT<%NPj(Fn@X|#92q(N z=yZE(LfKiG7rn^yqvp?!tKqX*!v&qMYBCsMTPDIQ`p%Yk{oD*y3!I{m1G+^K2B)|B z8%UAt6B2ZIcl9RlAo6~Fld@ksGd@O874b|gXZ&A!*8V*t`d{|*?*_Lowb@VnH~Fm* zh!MSi8sz@&qkHdam2AFbfI!?6{$DrAot=J_)#_9M#d0W=gj$Oq=z-d4Vyn|BCFq)b zg?8LE2R#v%5{G)jS4U6l&Mhq5fMy`^Sps{>3!fEx2k+>4s1-fl5$?X#k&ZUE}j5*Xa-famcb)t_|WvNF(%C$3ja*BYxfjCrU-i z?%Od_puJHz7QyyH*7#h^IOmnVyk`sI-nx!gAyh3P259u#`z#?B8iHbD`E*U80}E=A)9K^TtiUZBc5APH z&^GW%=0RN0%Hd1YFCeS=etZ1z;ll-YC|Mkqv+FaCTr&g0<^hF!+A_&phhP|zHwlc9 zu@M&DijB`I6oaZ;1fD_MQ&a7x|*3o42nF$FA^#Yim6*6~5`P{i7`gkx^ zL`2p14{kPL=GOOW2?{%al3H4_;V=~rO}}WaFMkMudQ2t!O}S7zh;#Mqe`^km2l=Kpe}^vw1BT1lKpusJke&<|=U!P+;Rc%nh_Uwm zFhSlbcpCz7HL-7F2_y -> Note: Endpoints that have this GP setting set to **Enabled** must be able to access the XML file, otherwise the settings will not be applied. -- Generate an XML file with the settings from the device by running the *Get-ProcessMitigation* PowerShell cmdlet or using the **Export** button at the bottom of the **Exploit Protection** area in the Windows Defender Security Center. -- Place the generated XML file in a shared or local path. +Exploit Protection applies helps protect devices from malware that use exploits to spread and infect. It consists of a number of mitigations that can be applied at either the operating system level, or at the individual app level. +It is part of [Windows Defender Exploit Guard](windows-defender-exploit-guard.md). -### Converting and Applying an EMET config: -1. Export the existing EMET configuration. This can be done from the "Export" button in the GUI, or by running the command: **emet_conf.exe –export emetConfig.xml** -2. In an elevated PowerShell window, convert the exported configuration with: **ConvertTo-ProcessMitigationPolicy -EMETFilePath emetConfig.xml -OutputFilePath win10Config.xml** -3. Note that this may give you some warnings, but these should be safe to ignore. -4. Apply the new configuration: from an elevated PowerShell window run **Set-ProcessMitigation -RegistryConfigFilePath win10Config.xml ** -5. From here you can check or edit the settings in the new interface in the Windows Defender Security Center or with **Get-ProcessMitigation** (this command by itself will output the entire current state of the mitigations to the shell), and **Set-ProcessMitigation** respectively. +Many of the features that are part of the [Enhanced Mitigation Experience Toolkit (EMET)](https://technet.microsoft.com/en-us/security/jj653751) are now included in Exploit Protection. -#### Group policy +You use the Windows Defender Security Center or PowerShell to create a set of mitigations (known as a configuration). You can then export this configuration as an XML file and share it with multiple machines on your network so they all have the same set of mitigation settings. -The Exploit Protection feature can be configured with the following Group Policy details: -- Location: \Microsoft\Windows Defender Exploit Guard\Exploit Protection -- Name: Use a common set of Exploit Protection settings -- Values: **Enabled**: Specify the location of the XML file in the Options section. You can use a local (or mapped) path, a UNC path, or a URL, such as the following: --- C:\MitigationSettings\Config.XML --- \\Server\Share\Config.xml --- https://localhost:8080/Config.xml +You can also convert and import an existing EMET configuration XML file into an Exploit Protection configuration XML. -The settings in the XML file will be applied to the endpoint. - -**Disabled:** Common settings will not be applied, and the locally configured settings will be used instead. - -**Not configured:** Same as **Disabled**. - -### Export system-level mitigations +This topic describes how to create a configuration file and deploy it across your network, and how to convert an EMET configuration. - ### Import system-level mitigations +## Create and export a configuration file - **Use the Windows Defender Security app to import system-level mitigations:** +Before you export a configuration file, you need to ensure you have the correct settings. + +You should first configure Exploit Protection on a single, dedicated machine. See the [Customize Exploit Protection](customize-exploit-protection.md) topic for descriptions about and instrucitons for configuring mitigations. + +When you have configured Exploit Protection to your desired state (including both system-level and app-level mitigations), you can export the file using either the Windows Defender Security Center app or PowerShell. + +### Use the Windows Defender Security Center app to export a configuration file +1. Open the Windows Defender Security Center by clicking the shield icon in the task bar or searching the start menu for **Defender**. -**Use Group Policy to import and deploy system-level mitigations:** +2. Click the **App & browser control** tile (or the app icon on the left menu bar) and then click **Exploit protection settings**: + ![](images/wdsc-exp-prot.png) + +3. At the bottom of the **Exploit protection** section, click **Export settings** and then choose the location and name of the XML file where you want the configuration to be saved. + + + ![](images/wdsc-exp-prot-export.png) + +>[!NOTE] +>When you export the settings, all settings for both app-level and system-level mitigations are saved. This means you don't need to export a file from both the **System settings** and **Program settings** sections - either section will export all settings. + + +### Use PowerShell to export a configuration file + +1. Type **powershell** in the Start menu, right click **Windows PowerShell** and click **Run as administrator** +2. Enter the following cmdlet: + + ```PowerShell + Get-ProcessMitigation -RegistryConfigFilePath filename.xml + ``` + +Change `filename` to any name or location of your choosing. + +> [!IMPORTANT] +> When you deploy the configuration using Group Policy, all machines that will use the configuration must be able to access the configuration file. Ensure you place the file in a shared location. + + +## Import a configuration file + +You can import an Exploit Protection configuration file that you've previously created. You can only use PowerShell to import the configuration file. + +After importing, the settings will be instantly applied and can be reviewed in the Windows Defender Security Center app. + +### Use PowerShell to import a configuration file + + +1. Type **powershell** in the Start menu, right click **Windows PowerShell** and click **Run as administrator** +2. Enter the following cmdlet: + + ```PowerShell + Set-ProcessMitigation -RegistryConfigFilePath filename.xml + ``` + +Change `filename` to the location and name of the Exploit Protection XML file. + +>[!IMPORTANT] +>Ensure you import a configuration file that is created specifically for Exploit Protection. You cannot directly import an EMET configuration file, you must convert it first. + + +## Convert an EMET configuration file to an Exploit Protection configuration file + +You can convert an existing EMET configuration file to the new format used by Exploit Protection. You must do this if you want to import an EMET configuration into Exploit Protection in Windows 10. + +You can only do this conversion in PowerShell. + +1. Type **powershell** in the Start menu, right click **Windows PowerShell** and click **Run as administrator** +2. Enter the following cmdlet: + + ```PowerShell + ConvertTo-ProcessMitigationPolicy -EMETFilePath emetFile.xml -OutputFilePath filename.xml + ``` + +Change `emetFile` to the name and location of the EMET configuration file, and change `filename` to whichever location and file name you want to use. + + +## Manage or deploy a configuration + +You can use Group Policy to deploy the configuration you've created to multiple machines in your network. + +> [!IMPORTANT] +> When you deploy the configuration using Group Policy, all machines that will use the configuration must be able to access the configuration XML file. Ensure you place the file in a shared location. + +### Use Group Policy to distribute the configuration + +1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**. + +3. In the **Group Policy Management Editor** go to **Computer configuration**. + +4. Click **Policies** then **Administrative templates**. + +5. Expand the tree to **Windows components > Windows Defender Exploit Guard > Exploit Protection**. + + ![](images/exp-prot-gp.png) + +6. Double-click the **Use a common set of exploit protection settings** setting and set the option to **Enabled**. + +7. In the **Options::** section, enter the location and filename of the Exploit Protection configuration file that you want to use, such as in the following examples: + - C:\MitigationSettings\Config.XML + - \\Server\Share\Config.xml + - https://localhost:8080/Config.xml + +8. Click **OK** and [Deploy the updated GPO as you normally do](https://msdn.microsoft.com/en-us/library/ee663280(v=vs.85).aspx). ## Related topics