From 99d10258df14fae82ae3199d2d5f4b7c09562b9b Mon Sep 17 00:00:00 2001 From: brbrahm <43386070+brbrahm@users.noreply.github.com> Date: Fri, 14 Aug 2020 16:26:12 -0700 Subject: [PATCH 01/12] Add custom managed installer information Created subpage with detailed instructions on configuring managed installer --- .../TOC.md | 1 + .../configure-wdac-managed-installer.md | 160 ++++++++++++++++++ .../event-id-explanations.md | 6 +- ...lication-control-with-managed-installer.md | 136 +-------------- 4 files changed, 173 insertions(+), 130 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-application-control/configure-wdac-managed-installer.md diff --git a/windows/security/threat-protection/windows-defender-application-control/TOC.md b/windows/security/threat-protection/windows-defender-application-control/TOC.md index 1a4b279e16..fc4c0fde64 100644 --- a/windows/security/threat-protection/windows-defender-application-control/TOC.md +++ b/windows/security/threat-protection/windows-defender-application-control/TOC.md @@ -9,6 +9,7 @@ #### [Understand WDAC policy design decisions](understand-windows-defender-application-control-policy-design-decisions.md) #### [Understand WDAC policy rules and file rules](select-types-of-rules-to-create.md) #### [Authorize apps deployed with a WDAC managed installer](use-windows-defender-application-control-with-managed-installer.md) +##### [Configure a WDAC managed installer](configure-wdac-managed-installer.md) #### [Authorize reputable apps with Intelligent Security Graph (ISG)](use-windows-defender-application-control-with-intelligent-security-graph.md) #### [Use multiple WDAC policies](deploy-multiple-windows-defender-application-control-policies.md) #### [Microsoft recommended block rules](microsoft-recommended-block-rules.md) diff --git a/windows/security/threat-protection/windows-defender-application-control/configure-wdac-managed-installer.md b/windows/security/threat-protection/windows-defender-application-control/configure-wdac-managed-installer.md new file mode 100644 index 0000000000..e82c905d31 --- /dev/null +++ b/windows/security/threat-protection/windows-defender-application-control/configure-wdac-managed-installer.md @@ -0,0 +1,160 @@ +--- +title: Configure a WDAC managed installer (Windows 10) +description: Explains how you can use a managed installer to automatically authorize applications deployed and installed by a designated software distribution solution, such as Microsoft Endpoint Configuration Manager. +keywords: security, malware +ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +audience: ITPro +ms.collection: M365-security-compliance +author: jsuther1974 +ms.reviewer: isbrahm +ms.author: dansimp +manager: dansimp +ms.date: 06/13/2018 +--- + +# Configuring a managed installer with AppLocker and Windows Defender Application Control + +**Applies to:** + +- Windows 10 +- Windows Server 2019 + +Setting up managed installer tracking and application execution enforcement requires applying both an AppLocker and WDAC policy with specific rules and options enabled. +There are three primary steps to keep in mind: + +- Specify managed installers by using the Managed Installer rule collection in AppLocker policy. +- Enable service enforcement in AppLocker policy. +- Enable the managed installer option in a WDAC policy. + +## Specify managed installers using the Managed Installer rule collection in AppLocker policy + +The identity of the managed installer executable(s) is specified in an AppLocker policy in a Managed Installer rule collection. + +### Create Managed Installer rule collection + +Currently, neither the AppLocker policy creation UI in GPO Editor nor the PowerShell cmdlets allow for directly specifying rules for the Managed Installer rule collection. However, a text editor can be used to make the simple changes needed to an EXE or DLL rule collection policy to specify Type="ManagedInstaller", so that the new rule can be imported into a GPO. + +1. Use [New-AppLockerPolicy](https://docs.microsoft.com/powershell/module/applocker/new-applockerpolicy?view=win10-ps) to make an EXE rule for the file you are designating as a managed installer. Note that only EXE file types can be designated as managed installers. Below is an example using the rule type Publisher with a hash fallback, but other rule types can be used as well. You may need to reformat the output for readability. + + ```powershell + Get-ChildItem | Get-AppLockerFileInformation | New-AppLockerPolicy -RuleType Publisher, Hash -User Everyone -Xml > AppLocker_MI_PS_ISE.xml + ``` + +2. Manually rename the rule collection to ManagedInstaller + + Change + + ```powershell + + ``` + + to + + ```powershell + + ``` + +An example of a valid Managed Installer rule collection using Microsoft Endpoint Config Manager (MEMCM) is shown below. + +```xml + + + + + + + + + + + + + + + + +``` + +### Enable service enforcement in AppLocker policy + +Since many installation processes rely on services, it is typically necessary to enable tracking of services. +Correct tracking of services requires the presence of at least one rule in the rule collection, so a simple audit only rule will suffice. This can be added to the policy created above which specifies your managed installer rule collection. + +For example: + +```xml + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +``` + +## Enable the managed installer option in WDAC policy + +In order to enable trust for the binaries laid down by managed installers, the Enabled: Managed Installer option must be specified in your WDAC policy. +This can be done by using the [Set-RuleOption cmdlet](https://docs.microsoft.com/powershell/module/configci/set-ruleoption) with Option 13. + +Below are steps to create a WDAC policy which allows Windows to boot and enables the managed installer option. + +1. Copy the DefaultWindows_Audit policy into your working folder from C:\Windows\schemas\CodeIntegrity\ExamplePolicies\DefaultWindows_Audit.xml + +2. Reset the policy ID to ensure it is in multiple policy format and give it a different GUID from the example policies. Also give it a friendly name to help with identification. + + Ex. + + ```powershell + Set-CIPolicyIdInfo -FilePath -PolicyName "" -ResetPolicyID + ``` + +3. Set Option 13 (Enabled:Managed Installer) + + ```powershell + Set-RuleOption -FilePath -Option 13 + ``` + +## Set the AppLocker filter driver to autostart + +To enable the managed installer, you need to set the AppLocker filter driver to autostart and start it. + +To do so, run the following command as an Administrator: + +```console +appidtel.exe start [-mionly] +``` + +Specify `-mionly` if you will not use the Intelligent Security Graph (ISG). + +## Enabling managed installer logging events + +Refer to [Understanding Application Control Events](event-id-explanations.md#optional-intelligent-security-graph-isg-or-managed-installer-mi-diagnostic-events) for information on enabling optional managed installer diagnostic events. diff --git a/windows/security/threat-protection/windows-defender-application-control/event-id-explanations.md b/windows/security/threat-protection/windows-defender-application-control/event-id-explanations.md index 965a842f19..56b4a80d67 100644 --- a/windows/security/threat-protection/windows-defender-application-control/event-id-explanations.md +++ b/windows/security/threat-protection/windows-defender-application-control/event-id-explanations.md @@ -30,7 +30,7 @@ A Windows Defender Application Control (WDAC) policy logs events locally in Wind |----------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | 3076 | Audit executable/dll file | | 3077 | Block executable/dll file | -| 3089 | Signing information event correlated with either a 3076 or 3077 event. One 3089 event is generated for each signature of a file. Contains the total number of signatures on a file and an index as to which signature it is.
Unsigned files will generate a single 3089 event with TotalSignatureCount 0. Correlated in the “System” portion of the event data under “Correlation ActivityID”. | +| 3089 | Signing information event correlated with either a 3076 or 3077 event. One 3089 event is generated for each signature of a file. Contains the total number of signatures on a file and an index as to which signature it is.
Unsigned files will generate a single 3089 event with TotalSignatureCount 0. Correlated in the "System" portion of the event data under "Correlation ActivityID". | | 3099 | Indicates that a policy has been loaded | ## Microsoft Windows Applocker MSI and Script log event IDs @@ -39,7 +39,7 @@ A Windows Defender Application Control (WDAC) policy logs events locally in Wind |----------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | 8028 | Audit script/MSI file generated by Windows LockDown Policy (WLDP) being called by the scripthosts themselves. Note: there is no WDAC enforcement on 3rd party scripthosts. | | 8029 | Block script/MSI file | -| 8038 | Signing information event correlated with either a 8028 or 8029 event. One 8038 event is generated for each signature of a script file. Contains the total number of signatures on a script file and an index as to which signature it is. Unsigned script files will generate a single 8038 event with TotalSignatureCount 0. Correlated in the “System” portion of the event data under “Correlation ActivityID”. | | +| 8038 | Signing information event correlated with either a 8028 or 8029 event. One 8038 event is generated for each signature of a script file. Contains the total number of signatures on a script file and an index as to which signature it is. Unsigned script files will generate a single 8038 event with TotalSignatureCount 0. Correlated in the "System" portion of the event data under "Correlation ActivityID". | | ## Optional Intelligent Security Graph (ISG) or Managed Installer (MI) diagnostic events @@ -73,7 +73,7 @@ In order to enable 3091 audit events and 3092 block events, you must create a Te ```powershell reg add hklm\system\currentcontrolset\control\ci -v TestFlags -t REG_DWORD -d 0x100 ``` -In order to enable 3090 allow events, you must create a TestFlags regkey with a value of 0x300. You can do so using the following PowerShell command: +In order to enable 3090 allow events as well as 3091 and 3092 events, you must instead create a TestFlags regkey with a value of 0x300. You can do so using the following PowerShell command: ```powershell reg add hklm\system\currentcontrolset\control\ci -v TestFlags -t REG_DWORD -d 0x300 diff --git a/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-managed-installer.md b/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-managed-installer.md index f0c0979e51..d6810894b4 100644 --- a/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-managed-installer.md +++ b/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-managed-installer.md @@ -14,7 +14,7 @@ author: jsuther1974 ms.reviewer: isbrahm ms.author: dansimp manager: dansimp -ms.date: 06/13/2018 +ms.date: 08/14/2020 --- # Authorize apps deployed with a WDAC managed installer @@ -24,136 +24,21 @@ ms.date: 06/13/2018 - Windows 10 - Windows Server 2019 -Creating and maintaining application execution control policies has always been challenging, and finding ways to address this issue has been a frequently-cited request for customers of AppLocker and Windows Defender Application Control (WDAC). -This is especially true for enterprises with large, ever changing software catalogs. - -Windows 10, version 1703 (also known as the Windows 10 Creators Update) provides a new option, known as a managed installer, that allows IT administrators to automatically authorize applications deployed and installed by a designated software distribution solution, such as Microsoft Endpoint Configuration Manager. +Windows 10, version 1703 (also known as the Windows 10 Creators Update) provides a new option, known as a managed installer, that allows IT administrators to automatically authorize applications deployed and installed by a designated software distribution solution such as Microsoft Endpoint Configuration Manager. A managed installer helps an IT admin balance security and manageability requirements when employing application execution control policies by providing an option that does not require specifying explicit rules for software that is being managed through a software distribution solution. ## How does a managed installer work? -A managed installer uses a new rule collection in AppLocker to specify one or more executables that are trusted by the organization as an authorized source for application deployment. -Specifying an executable as a managed installer will cause Windows to tag files that are written from the executable’s process (or processes it launches) as having originated from a trusted installation authority. The Managed Installer rule collection is currently supported for AppLocker rules in Group Policy and in Configuration Manager, but not in the AppLocker CSP for OMA-URI policies. +A managed installer uses a new rule collection in AppLocker to specify one or more executables that are trusted by the organization as an authorized source for application deployment. -Once the IT administrator adds the Allow: Managed Installer option to a WDAC policy, the WDAC component will subsequently check for the presence of the origin information when evaluating other application execution control rules specified in the policy. -If there are no deny rules present for the file, it will be authorized based on the managed installer origin information. +Specifying an executable as a managed installer will cause Windows to tag files that are written from the executable's process (or processes it launches) as having originated from a trusted installation authority. The Managed Installer rule collection is currently supported for AppLocker rules in Group Policy and in Configuration Manager, but not in the AppLocker CSP for OMA-URI policies. + +Once the IT administrator adds the Allow: Managed Installer option to a WDAC policy, the WDAC component will subsequently check for the presence of the origin information when evaluating other application execution control rules specified in the policy. If there are no deny rules present for the file, it will be authorized based on the managed installer origin information. Admins needs to ensure that there is a WDAC policy in place to allow the system to boot and run any other authorized applications that may not be deployed through a managed installer. -Examples of WDAC policies available in C:\Windows\schemas\CodeIntegrity\ExamplePolicies help authorize Windows OS components, WHQL signed drivers and all Store apps. +An example managed installer use-case can be seen in the guidance for [creating a WDAC policy for fully-managed devices](create-wdac-policy-for-fully-managed-devices.md). -## Configuring a managed installer with AppLocker and Windows Defender Application Control - -Setting up managed installer tracking and application execution enforcement requires applying both an AppLocker and WDAC policy with specific rules and options enabled. -There are three primary steps to keep in mind: - -- Specify managed installers by using the Managed Installer rule collection in AppLocker policy. -- Enable service enforcement in AppLocker policy. -- Enable the managed installer option in a WDAC policy. - -### Specify managed installers using the Managed Installer rule collection in AppLocker policy - -The identity of the managed installer executable(s) is specified in an AppLocker policy in a Managed Installer rule collection. -Currently, neither the AppLocker policy creation UI in GPO Editor nor the PowerShell cmdlets allow for directly specifying rules for the Managed Installer rule collection. However, a text editor can be used to make the simple changes needed to an EXE or DLL rule collection policy to specify Type="ManagedInstaller", so that the new rule can be imported into a GPO. - -An example of a valid Managed Installer rule collection is shown below. -For more information about creating an AppLocker policy that includes a managed installer and configuring client devices, see [Simplify application listing with Configuration Manager and Windows 10](https://cloudblogs.microsoft.com/enterprisemobility/2016/06/20/configmgr-as-a-managed-installer-with-win10/). -As mentioned above, the AppLocker CSP for OMA-URI policies does not currently support the Managed Installer rule collection or the Service Enforcement rule extensions mentioned below. - - -```xml - - - - - - - - - - - - - - - - -``` - -## Enable service enforcement in AppLocker policy - -Since many installation processes rely on services, it is typically necessary to enable tracking of services. -Correct tracking of services requires the presence of at least one rule in the rule collection — a simple audit only rule will suffice. -For example: - -```xml - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -``` - -### Enable the managed installer option in WDAC policy - -In order to enable trust for the binaries laid down by managed installers, the Enabled: Managed Installer option must be specified in your WDAC policy. -This can be done by using the [Set-RuleOption cmdlet](https://docs.microsoft.com/powershell/module/configci/set-ruleoption). -An example of the managed installer option being set in policy is shown below. - -```xml - - - - - - - - - - - - - - - - - -``` - -## Set the AppLocker filter driver to autostart - -To enable the managed installer, you need to set the AppLocker filter driver to autostart and start it. -Run the following command as an Administrator: - -```console -appidtel.exe start [-mionly] -``` - -Specify `-mionly` if you will not use the Intelligent Security Graph (ISG). +Note that a WDAC policy with managed installer configured will begin to tag files which originated from that managed installer, regardless of whether the policy is in audit or enforced mode. ## Security considerations with managed installer @@ -167,15 +52,12 @@ To avoid this, ensure that the application deployment solution being used as a m ## Known limitations with managed installer -- Application execution control based on managed installer does not support applications that self-update. +- Application execution control based on managed installer does not support applications that self-update/auto-update. If an application deployed by a managed installer subsequently updates itself, the updated application files will no longer include the managed installer origin information and will not be authorized to run. Enterprises should deploy and install all application updates using the managed installer. In some cases, it may be possible to also designate an application binary that performs the self-updates as a managed installer. Proper review for functionality and security should be performed for the application before using this method. -- Although WDAC policies can be deployed in both audit and enforced mode, the managed installer option is currently only recommended for use with policies set to enforced except in lab environments. -Using the managed installer option with WDAC policies set to audit only may result in unexpected behavior if the policy is subsequently changed to enforced mode. - - Modern apps deployed through a managed installer will not be tracked by the managed installer heuristic and will need to be separately authorized in your WDAC policy. - Executables that extract files and then attempt to execute may not be allowed by the managed installer heuristic. From 654b96e902fab83d81923bf1b2dafc25b38f2558 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 25 Aug 2020 14:21:42 -0700 Subject: [PATCH 02/12] Update controlled-folders.md --- .../controlled-folders.md | 66 ++++++++++++------- 1 file changed, 44 insertions(+), 22 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md index d48749b987..ae4a616b51 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md @@ -1,6 +1,6 @@ --- title: Prevent ransomware and threats from encrypting and changing files -description: Files in default folders can be protected from being changed by malicious apps. This can help prevent ransomware from encrypting your files. +description: Files in default folders can be protected from being changed by malicious apps. Prevent ransomware from encrypting your files. keywords: controlled folder access, windows 10, windows defender, ransomware, protect, files, folders search.product: eADQiWindows 10XVcnh ms.prod: w10 @@ -11,7 +11,7 @@ ms.localizationpriority: medium author: denisebmsft ms.author: deniseb audience: ITPro -ms.date: 08/05/2019 +ms.date: 08/25/2020 ms.reviewer: v-maave manager: dansimp ms.custom: asr @@ -23,17 +23,21 @@ ms.custom: asr - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -Controlled folder access helps you protect valuable data from malicious apps and threats, such as ransomware. It protects your data by checking against a list of known, trusted apps. Controlled folder access is supported on Windows Server 2019 as well as Windows 10 clients. It can be turned on via the Windows Security App, or from the Microsoft Endpoint Configuration Manager and Intune, for managed devices. Controlled folder access works best with [Microsoft Defender Advanced Threat Protection](../microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md), which gives you detailed reporting into controlled folder access events and blocks as part of the usual [alert investigation scenarios](../microsoft-defender-atp/investigate-alerts.md). +## What is controlled folder access? -Controlled folder access works by only allowing apps to access protected folders if the app is included on a list of trusted software. If an app isn't on the list, Controlled folder access will block it from making changes to files inside protected folders. +Controlled folder access helps you protect your valuable data from malicious apps and threats, like ransomware. Controlled folder access protects your data by checking apps against a list of known, trusted apps. Supported on Windows Server 2019 and Windows 10 clients, controlled folder access can be turned on using the Windows Security App or in Microsoft Endpoint Configuration Manager and Intune (for managed devices). -Apps are added to the trusted list based upon their prevalence and reputation. Apps that are highly prevalent throughout your organization, and that have never displayed any malicious behavior, are deemed trustworthy and automatically added to the list. +Controlled folder access works best with [Microsoft Defender Advanced Threat Protection](../microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md), which gives you detailed reporting into controlled folder access events and blocks as part of the usual [alert investigation scenarios](../microsoft-defender-atp/investigate-alerts.md). + +## How does controlled folder access work? + +Controlled folder access works by only allowing trusted apps to access protected folders. Protected folders are specified when controlled folder access is configured. Typically, commonly used folders, such as those used for documents, pictures, downloads, and so on, are included in the list of controlled folders. + +Controlled folder access works with a list of trusted software. If an app is included in the list of trusted software, the app works as expected. If not, the app is blocked from making any changes to files that are inside protected folders. Apps are added to the trusted list based upon their prevalence and reputation. Apps that are highly prevalent throughout your organization, and that have never displayed any malicious behavior, are deemed trustworthy and automatically added to the list. Apps can also be manually added to the trusted list via Configuration Manager and Intune. Additional actions, such as [adding a file indicator](../microsoft-defender-atp/respond-file-alerts.md#add-indicator-to-block-or-allow-a-file) for the app, can be performed from the Security Center Console. -Controlled folder access is especially useful in helping to protect your documents and information from [ransomware](https://www.microsoft.com/wdsi/threats/ransomware) that can attempt to encrypt your files and hold them hostage. - -With Controlled folder access in place, a notification will appear on the computer where the app attempted to make changes to a protected folder. You can [customize the notification](customize-attack-surface-reduction.md#customize-the-notification) with your company details and contact information. You can also enable the rules individually to customize what techniques the feature monitors. +Controlled folder access is especially useful in helping to protect your documents and information from [ransomware](https://www.microsoft.com/wdsi/threats/ransomware) that can attempt to encrypt your files and hold them hostage. With controlled folder access in place, a notification will appear on the computer where the app attempted to make changes to a protected folder. You can [customize the notification](customize-attack-surface-reduction.md#customize-the-notification) with your company details and contact information. You can also enable the rules individually to customize what techniques the feature monitors. The protected folders include common system folders, and you can [add additional folders](customize-controlled-folders.md#protect-additional-folders). You can also [allow apps](customize-controlled-folders.md#allow-specific-apps-to-make-changes-to-controlled-folders) to give them access to the protected folders. @@ -45,13 +49,13 @@ Controlled folder access is supported on Windows 10, version 1709 and later and Controlled folder access requires enabling [Microsoft Defender Antivirus real-time protection](../microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus.md). -## Review controlled folder access events in the Microsoft Defender ATP Security Center +## Review controlled folder access events in the Microsoft Defender Security Center Microsoft Defender ATP provides detailed reporting into events and blocks as part of its [alert investigation scenarios](../microsoft-defender-atp/investigate-alerts.md). You can query Microsoft Defender ATP data by using [Advanced hunting](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-windows-defender-advanced-threat-protection). If you're using [audit mode](audit-windows-defender.md), you can use advanced hunting to see how controlled folder access settings would affect your environment if they were enabled. -Here is an example query +Example query: ```PowerShell DeviceEvents @@ -72,18 +76,36 @@ You can review the Windows event log to see events that are created when control 5. Click **OK**. -This will create a custom view that filters to only show the following events related to controlled folder access: +This creates a custom view that shows the following events related to controlled folder access: -Event ID | Description --|- -5007 | Event when settings are changed -1124 | Audited controlled folder access event -1123 | Blocked controlled folder access event +|Event ID | Description | +|---|---| +|5007 | Event when settings are changed | +|1124 | Audited controlled folder access event | +|1123 | Blocked controlled folder access event | -## In this section +## View or change the list of protected folders -Topic | Description --|- -[Evaluate controlled folder access](evaluate-controlled-folder-access.md) | Use a dedicated demo tool to see how controlled folder access works, and what events would typically be created. -[Enable controlled folder access](enable-controlled-folders.md) | Use Group Policy, PowerShell, or MDM CSPs to enable and manage controlled folder access in your network -[Customize controlled folder access](customize-controlled-folders.md) | Add additional protected folders, and allow specified apps to access protected folders. +### Windows 10 security app + +1. On your Windows 10 device, open the Windows Security app. + +2. Select **Virus & threat protection**. + +3. Under **Ransomware protection**, select **Manage ransomware protection**. + +4. If controlled folder access is turned off, you'll need to turn it on. Select **protected folders**. + +5. Do one of the following: + + - To add a folder, select **+ Add a protected folder**. + + - To remove a folder, select it, and then select **Remove**. + +## See also + +- [Evaluate controlled folder access](evaluate-controlled-folder-access.md). Use a dedicated demo tool to see how controlled folder access works, and what events would typically be created. + +- [Enable controlled folder access](enable-controlled-folders.md). Use Group Policy, PowerShell, or mobile device management CSPs to enable and manage controlled folder access in your network + +- [Customize controlled folder access](customize-controlled-folders.md). Add additional protected folders, and allow specified apps to access protected folders. From 8b563d30d91283e4f5271c9d5dc920ff236c63de Mon Sep 17 00:00:00 2001 From: isbrahm <43386070+isbrahm@users.noreply.github.com> Date: Tue, 25 Aug 2020 14:56:06 -0700 Subject: [PATCH 03/12] Correct indented code block suggestion --- .../event-id-explanations.md | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/event-id-explanations.md b/windows/security/threat-protection/windows-defender-application-control/event-id-explanations.md index 56b4a80d67..6601f20830 100644 --- a/windows/security/threat-protection/windows-defender-application-control/event-id-explanations.md +++ b/windows/security/threat-protection/windows-defender-application-control/event-id-explanations.md @@ -70,11 +70,12 @@ Below are the fields which help to diagnose what a 3090, 3091, or 3092 event ind In order to enable 3091 audit events and 3092 block events, you must create a TestFlags regkey with a value of 0x100. You can do so using the following PowerShell command: - ```powershell - reg add hklm\system\currentcontrolset\control\ci -v TestFlags -t REG_DWORD -d 0x100 - ``` +```powershell +reg add hklm\system\currentcontrolset\control\ci -v TestFlags -t REG_DWORD -d 0x100 +``` + In order to enable 3090 allow events as well as 3091 and 3092 events, you must instead create a TestFlags regkey with a value of 0x300. You can do so using the following PowerShell command: - ```powershell - reg add hklm\system\currentcontrolset\control\ci -v TestFlags -t REG_DWORD -d 0x300 - ``` +```powershell +reg add hklm\system\currentcontrolset\control\ci -v TestFlags -t REG_DWORD -d 0x300 +``` From aa976647f8b244acf1c3d57322950dead0d808a4 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 25 Aug 2020 14:58:29 -0700 Subject: [PATCH 04/12] addingbitlocker metadata --- .../bitlocker/bcd-settings-and-bitlocker.md | 1 + .../information-protection/bitlocker/bitlocker-and-adds-faq.md | 1 + .../bitlocker/bitlocker-basic-deployment.md | 1 + .../bitlocker/bitlocker-countermeasures.md | 1 + .../bitlocker/bitlocker-deployment-and-administration-faq.md | 1 + .../bitlocker-device-encryption-overview-windows-10.md | 1 + .../bitlocker/bitlocker-frequently-asked-questions.md | 1 + .../bitlocker/bitlocker-group-policy-settings.md | 1 + .../bitlocker/bitlocker-how-to-deploy-on-windows-server.md | 1 + .../bitlocker/bitlocker-how-to-enable-network-unlock.md | 1 + .../bitlocker/bitlocker-key-management-faq.md | 1 + .../bitlocker/bitlocker-management-for-enterprises.md | 1 + .../bitlocker/bitlocker-network-unlock-faq.md | 1 + .../bitlocker/bitlocker-overview-and-requirements-faq.md | 1 + .../information-protection/bitlocker/bitlocker-overview.md | 1 + .../bitlocker/bitlocker-recovery-guide-plan.md | 1 + .../bitlocker/bitlocker-recovery-loop-break.md | 1 + .../information-protection/bitlocker/bitlocker-security-faq.md | 1 + .../information-protection/bitlocker/bitlocker-to-go-faq.md | 1 + .../information-protection/bitlocker/bitlocker-upgrading-faq.md | 1 + ...-use-bitlocker-drive-encryption-tools-to-manage-bitlocker.md | 1 + .../bitlocker-use-bitlocker-recovery-password-viewer.md | 1 + .../bitlocker/bitlocker-using-with-other-programs-faq.md | 1 + ...are-your-organization-for-bitlocker-planning-and-policies.md | 1 + ...r-shared-volumes-and-storage-area-networks-with-bitlocker.md | 1 + .../information-protection/bitlocker/troubleshoot-bitlocker.md | 1 + .../bitlocker/ts-bitlocker-cannot-encrypt-issues.md | 1 + .../bitlocker/ts-bitlocker-cannot-encrypt-tpm-issues.md | 2 ++ .../bitlocker/ts-bitlocker-config-issues.md | 1 + .../bitlocker/ts-bitlocker-decode-measured-boot-logs.md | 1 + .../bitlocker/ts-bitlocker-intune-issues.md | 1 + .../bitlocker/ts-bitlocker-network-unlock-issues.md | 2 ++ .../bitlocker/ts-bitlocker-recovery-issues.md | 1 + .../information-protection/bitlocker/ts-bitlocker-tpm-issues.md | 1 + 34 files changed, 36 insertions(+) diff --git a/windows/security/information-protection/bitlocker/bcd-settings-and-bitlocker.md b/windows/security/information-protection/bitlocker/bcd-settings-and-bitlocker.md index 77709b6ef2..7dd0eb0898 100644 --- a/windows/security/information-protection/bitlocker/bcd-settings-and-bitlocker.md +++ b/windows/security/information-protection/bitlocker/bcd-settings-and-bitlocker.md @@ -15,6 +15,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 02/28/2019 +ms.custom: bitlocker --- # BCD settings and BitLocker diff --git a/windows/security/information-protection/bitlocker/bitlocker-and-adds-faq.md b/windows/security/information-protection/bitlocker/bitlocker-and-adds-faq.md index 65e915649a..d6bad09f03 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-and-adds-faq.md +++ b/windows/security/information-protection/bitlocker/bitlocker-and-adds-faq.md @@ -15,6 +15,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 02/28/2019 +ms.custom: bitlocker --- # BitLocker and Active Directory Domain Services (AD DS) FAQ diff --git a/windows/security/information-protection/bitlocker/bitlocker-basic-deployment.md b/windows/security/information-protection/bitlocker/bitlocker-basic-deployment.md index 96fc9bd8c2..901ed382b5 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-basic-deployment.md +++ b/windows/security/information-protection/bitlocker/bitlocker-basic-deployment.md @@ -15,6 +15,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 02/28/2019 +ms.custom: bitlocker --- # BitLocker basic deployment diff --git a/windows/security/information-protection/bitlocker/bitlocker-countermeasures.md b/windows/security/information-protection/bitlocker/bitlocker-countermeasures.md index ab57ef7b30..6de06c740a 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-countermeasures.md +++ b/windows/security/information-protection/bitlocker/bitlocker-countermeasures.md @@ -15,6 +15,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 02/28/2019 +ms.custom: bitlocker --- # BitLocker Countermeasures diff --git a/windows/security/information-protection/bitlocker/bitlocker-deployment-and-administration-faq.md b/windows/security/information-protection/bitlocker/bitlocker-deployment-and-administration-faq.md index f8fa65855e..ea8ab3bf7a 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-deployment-and-administration-faq.md +++ b/windows/security/information-protection/bitlocker/bitlocker-deployment-and-administration-faq.md @@ -15,6 +15,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 02/28/2019 +ms.custom: bitlocker --- # BitLocker frequently asked questions (FAQ) diff --git a/windows/security/information-protection/bitlocker/bitlocker-device-encryption-overview-windows-10.md b/windows/security/information-protection/bitlocker/bitlocker-device-encryption-overview-windows-10.md index 7560239ff8..34008453ad 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-device-encryption-overview-windows-10.md +++ b/windows/security/information-protection/bitlocker/bitlocker-device-encryption-overview-windows-10.md @@ -14,6 +14,7 @@ ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 02/28/2019 ms.reviewer: +ms.custom: bitlocker --- # Overview of BitLocker Device Encryption in Windows 10 diff --git a/windows/security/information-protection/bitlocker/bitlocker-frequently-asked-questions.md b/windows/security/information-protection/bitlocker/bitlocker-frequently-asked-questions.md index 3c5449bfe9..1f6db4c45f 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-frequently-asked-questions.md +++ b/windows/security/information-protection/bitlocker/bitlocker-frequently-asked-questions.md @@ -15,6 +15,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 02/28/2019 +ms.custom: bitlocker --- # BitLocker frequently asked questions (FAQ) diff --git a/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md b/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md index 436ef15fe7..ad93d7dca7 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md +++ b/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md @@ -15,6 +15,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 04/17/2019 +ms.custom: bitlocker --- # BitLocker Group Policy settings diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-deploy-on-windows-server.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-deploy-on-windows-server.md index 121b0d3e49..4ba7629cc0 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-how-to-deploy-on-windows-server.md +++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-deploy-on-windows-server.md @@ -15,6 +15,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 02/28/2019 +ms.custom: bitlocker --- # BitLocker: How to deploy on Windows Server 2012 and later diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md index a7a7e7fce7..be66dcfa75 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md +++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md @@ -15,6 +15,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 02/28/2019 +ms.custom: bitlocker --- # BitLocker: How to enable Network Unlock diff --git a/windows/security/information-protection/bitlocker/bitlocker-key-management-faq.md b/windows/security/information-protection/bitlocker/bitlocker-key-management-faq.md index 226acb2e7c..d7338589c5 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-key-management-faq.md +++ b/windows/security/information-protection/bitlocker/bitlocker-key-management-faq.md @@ -15,6 +15,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 02/28/2019 +ms.custom: bitlocker --- # BitLocker Key Management FAQ diff --git a/windows/security/information-protection/bitlocker/bitlocker-management-for-enterprises.md b/windows/security/information-protection/bitlocker/bitlocker-management-for-enterprises.md index 2314ea2eaf..21fcd6cdfd 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-management-for-enterprises.md +++ b/windows/security/information-protection/bitlocker/bitlocker-management-for-enterprises.md @@ -14,6 +14,7 @@ ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 02/28/2019 ms.reviewer: +ms.custom: bitlocker --- # BitLocker Management for Enterprises diff --git a/windows/security/information-protection/bitlocker/bitlocker-network-unlock-faq.md b/windows/security/information-protection/bitlocker/bitlocker-network-unlock-faq.md index 153be07099..264ee0242a 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-network-unlock-faq.md +++ b/windows/security/information-protection/bitlocker/bitlocker-network-unlock-faq.md @@ -14,6 +14,7 @@ ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 02/28/2019 ms.reviewer: +ms.custom: bitlocker --- # BitLocker Network Unlock FAQ diff --git a/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.md b/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.md index aca61b7f1d..7f9715b9c0 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.md +++ b/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.md @@ -15,6 +15,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 02/28/2019 +ms.custom: bitlocker --- # BitLocker Overview and Requirements FAQ diff --git a/windows/security/information-protection/bitlocker/bitlocker-overview.md b/windows/security/information-protection/bitlocker/bitlocker-overview.md index ebece73d96..131a256f82 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-overview.md +++ b/windows/security/information-protection/bitlocker/bitlocker-overview.md @@ -15,6 +15,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 01/26/2018 +ms.custom: bitlocker --- # BitLocker diff --git a/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md b/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md index 822f7a9985..943135fa94 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md +++ b/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md @@ -15,6 +15,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 02/28/2019 +ms.custom: bitlocker --- # BitLocker recovery guide diff --git a/windows/security/information-protection/bitlocker/bitlocker-recovery-loop-break.md b/windows/security/information-protection/bitlocker/bitlocker-recovery-loop-break.md index 36decb2b2f..f06b11a197 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-recovery-loop-break.md +++ b/windows/security/information-protection/bitlocker/bitlocker-recovery-loop-break.md @@ -14,6 +14,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 10/28/2019 +ms.custom: bitlocker --- # Breaking out of a Bitlocker recovery loop diff --git a/windows/security/information-protection/bitlocker/bitlocker-security-faq.md b/windows/security/information-protection/bitlocker/bitlocker-security-faq.md index 2962d7533b..fb1c2281f8 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-security-faq.md +++ b/windows/security/information-protection/bitlocker/bitlocker-security-faq.md @@ -15,6 +15,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 02/28/2019 +ms.custom: bitlocker --- # BitLocker Security FAQ diff --git a/windows/security/information-protection/bitlocker/bitlocker-to-go-faq.md b/windows/security/information-protection/bitlocker/bitlocker-to-go-faq.md index e8bd11f12b..12d2b4ca0d 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-to-go-faq.md +++ b/windows/security/information-protection/bitlocker/bitlocker-to-go-faq.md @@ -15,6 +15,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 07/10/2018 +ms.custom: bitlocker --- # BitLocker To Go FAQ diff --git a/windows/security/information-protection/bitlocker/bitlocker-upgrading-faq.md b/windows/security/information-protection/bitlocker/bitlocker-upgrading-faq.md index 7873e99c18..a856063b96 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-upgrading-faq.md +++ b/windows/security/information-protection/bitlocker/bitlocker-upgrading-faq.md @@ -14,6 +14,7 @@ ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 02/28/2019 ms.reviewer: +ms.custom: bitlocker --- # BitLocker Upgrading FAQ diff --git a/windows/security/information-protection/bitlocker/bitlocker-use-bitlocker-drive-encryption-tools-to-manage-bitlocker.md b/windows/security/information-protection/bitlocker/bitlocker-use-bitlocker-drive-encryption-tools-to-manage-bitlocker.md index e4e1a3ffcd..f3fea6898b 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-use-bitlocker-drive-encryption-tools-to-manage-bitlocker.md +++ b/windows/security/information-protection/bitlocker/bitlocker-use-bitlocker-drive-encryption-tools-to-manage-bitlocker.md @@ -15,6 +15,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 02/28/2019 +ms.custom: bitlocker --- # BitLocker: Use BitLocker Drive Encryption Tools to manage BitLocker diff --git a/windows/security/information-protection/bitlocker/bitlocker-use-bitlocker-recovery-password-viewer.md b/windows/security/information-protection/bitlocker/bitlocker-use-bitlocker-recovery-password-viewer.md index 9f41146f0d..1bc4358ba0 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-use-bitlocker-recovery-password-viewer.md +++ b/windows/security/information-protection/bitlocker/bitlocker-use-bitlocker-recovery-password-viewer.md @@ -15,6 +15,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 02/28/2019 +ms.custom: bitlocker --- # BitLocker: Use BitLocker Recovery Password Viewer diff --git a/windows/security/information-protection/bitlocker/bitlocker-using-with-other-programs-faq.md b/windows/security/information-protection/bitlocker/bitlocker-using-with-other-programs-faq.md index 0aebf543c2..ac4286c885 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-using-with-other-programs-faq.md +++ b/windows/security/information-protection/bitlocker/bitlocker-using-with-other-programs-faq.md @@ -15,6 +15,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 02/28/2019 +ms.custom: bitlocker --- # Using BitLocker with other programs FAQ diff --git a/windows/security/information-protection/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies.md b/windows/security/information-protection/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies.md index 72436ef74d..baa25d7cf6 100644 --- a/windows/security/information-protection/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies.md +++ b/windows/security/information-protection/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies.md @@ -15,6 +15,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 04/24/2019 +ms.custom: bitlocker --- # Prepare your organization for BitLocker: Planning and policies diff --git a/windows/security/information-protection/bitlocker/protecting-cluster-shared-volumes-and-storage-area-networks-with-bitlocker.md b/windows/security/information-protection/bitlocker/protecting-cluster-shared-volumes-and-storage-area-networks-with-bitlocker.md index 1473dadc79..e009e18c5e 100644 --- a/windows/security/information-protection/bitlocker/protecting-cluster-shared-volumes-and-storage-area-networks-with-bitlocker.md +++ b/windows/security/information-protection/bitlocker/protecting-cluster-shared-volumes-and-storage-area-networks-with-bitlocker.md @@ -15,6 +15,7 @@ audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 02/28/2019 +ms.custom: bitlocker --- # Protecting cluster shared volumes and storage area networks with BitLocker diff --git a/windows/security/information-protection/bitlocker/troubleshoot-bitlocker.md b/windows/security/information-protection/bitlocker/troubleshoot-bitlocker.md index 88e28e59eb..f4020af299 100644 --- a/windows/security/information-protection/bitlocker/troubleshoot-bitlocker.md +++ b/windows/security/information-protection/bitlocker/troubleshoot-bitlocker.md @@ -13,6 +13,7 @@ audience: ITPro ms.collection: Windows Security Technologies\BitLocker ms.topic: troubleshooting ms.date: 10/17/2019 +ms.custom: bitlocker --- # Guidelines for troubleshooting BitLocker diff --git a/windows/security/information-protection/bitlocker/ts-bitlocker-cannot-encrypt-issues.md b/windows/security/information-protection/bitlocker/ts-bitlocker-cannot-encrypt-issues.md index 2382b91a2a..03b1c67188 100644 --- a/windows/security/information-protection/bitlocker/ts-bitlocker-cannot-encrypt-issues.md +++ b/windows/security/information-protection/bitlocker/ts-bitlocker-cannot-encrypt-issues.md @@ -13,6 +13,7 @@ audience: ITPro ms.collection: Windows Security Technologies\BitLocker ms.topic: troubleshooting ms.date: 10/17/2019 +ms.custom: bitlocker --- # BitLocker cannot encrypt a drive: known issues diff --git a/windows/security/information-protection/bitlocker/ts-bitlocker-cannot-encrypt-tpm-issues.md b/windows/security/information-protection/bitlocker/ts-bitlocker-cannot-encrypt-tpm-issues.md index c69bb9ab25..c112d898f7 100644 --- a/windows/security/information-protection/bitlocker/ts-bitlocker-cannot-encrypt-tpm-issues.md +++ b/windows/security/information-protection/bitlocker/ts-bitlocker-cannot-encrypt-tpm-issues.md @@ -13,8 +13,10 @@ audience: ITPro ms.collection: Windows Security Technologies\BitLocker ms.topic: troubleshooting ms.date: 10/18/2019 +ms.custom: bitlocker --- + # BitLocker cannot encrypt a drive: known TPM issues This article describes common issues that affect the Trusted Platform Module (TPM) and that may prevent BitLocker from encrypting a drive. This article also provides guidance to address these issues. diff --git a/windows/security/information-protection/bitlocker/ts-bitlocker-config-issues.md b/windows/security/information-protection/bitlocker/ts-bitlocker-config-issues.md index 346095b34e..e3c4f3f6d4 100644 --- a/windows/security/information-protection/bitlocker/ts-bitlocker-config-issues.md +++ b/windows/security/information-protection/bitlocker/ts-bitlocker-config-issues.md @@ -13,6 +13,7 @@ audience: ITPro ms.collection: Windows Security Technologies\BitLocker ms.topic: troubleshooting ms.date: 10/17/2019 +ms.custom: bitlocker --- # BitLocker configuration: known issues diff --git a/windows/security/information-protection/bitlocker/ts-bitlocker-decode-measured-boot-logs.md b/windows/security/information-protection/bitlocker/ts-bitlocker-decode-measured-boot-logs.md index c3e4f16427..3e2cdad741 100644 --- a/windows/security/information-protection/bitlocker/ts-bitlocker-decode-measured-boot-logs.md +++ b/windows/security/information-protection/bitlocker/ts-bitlocker-decode-measured-boot-logs.md @@ -13,6 +13,7 @@ audience: ITPro ms.collection: Windows Security Technologies\BitLocker ms.topic: troubleshooting ms.date: 10/17/2019 +ms.custom: bitlocker --- # Decode Measured Boot logs to track PCR changes diff --git a/windows/security/information-protection/bitlocker/ts-bitlocker-intune-issues.md b/windows/security/information-protection/bitlocker/ts-bitlocker-intune-issues.md index 18236c1ddf..fdf85626d1 100644 --- a/windows/security/information-protection/bitlocker/ts-bitlocker-intune-issues.md +++ b/windows/security/information-protection/bitlocker/ts-bitlocker-intune-issues.md @@ -13,6 +13,7 @@ audience: ITPro ms.collection: Windows Security Technologies\BitLocker ms.topic: troubleshooting ms.date: 10/18/2019 +ms.custom: bitlocker --- # Enforcing BitLocker policies by using Intune: known issues diff --git a/windows/security/information-protection/bitlocker/ts-bitlocker-network-unlock-issues.md b/windows/security/information-protection/bitlocker/ts-bitlocker-network-unlock-issues.md index 77216f2dd1..b5882849d0 100644 --- a/windows/security/information-protection/bitlocker/ts-bitlocker-network-unlock-issues.md +++ b/windows/security/information-protection/bitlocker/ts-bitlocker-network-unlock-issues.md @@ -13,7 +13,9 @@ audience: ITPro ms.collection: Windows Security Technologies\BitLocker ms.topic: troubleshooting ms.date: 10/7/2019 +ms.custom: bitlocker --- + # BitLocker Network Unlock: known issues By using the BitLocker Network Unlock feature, you can manage computers remotely without having to enter a BitLocker PIN when each computer starts up. To do this, You have to configure your environment to meet the following requirements: diff --git a/windows/security/information-protection/bitlocker/ts-bitlocker-recovery-issues.md b/windows/security/information-protection/bitlocker/ts-bitlocker-recovery-issues.md index a25ea79f8a..b9d677c092 100644 --- a/windows/security/information-protection/bitlocker/ts-bitlocker-recovery-issues.md +++ b/windows/security/information-protection/bitlocker/ts-bitlocker-recovery-issues.md @@ -13,6 +13,7 @@ audience: ITPro ms.collection: Windows Security Technologies\BitLocker ms.topic: troubleshooting ms.date: 10/18/2019 +ms.custom: bitlocker --- # BitLocker recovery: known issues diff --git a/windows/security/information-protection/bitlocker/ts-bitlocker-tpm-issues.md b/windows/security/information-protection/bitlocker/ts-bitlocker-tpm-issues.md index 553780277a..9e19de9f72 100644 --- a/windows/security/information-protection/bitlocker/ts-bitlocker-tpm-issues.md +++ b/windows/security/information-protection/bitlocker/ts-bitlocker-tpm-issues.md @@ -13,6 +13,7 @@ audience: ITPro ms.collection: Windows Security Technologies\BitLocker ms.topic: troubleshooting ms.date: 10/18/2019 +ms.custom: bitlocker --- # BitLocker and TPM: other known issues From dec74b2b51794370de92d843dceb2f51cf48d0fd Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 25 Aug 2020 15:16:24 -0700 Subject: [PATCH 05/12] resolving some build warnings --- .../bitlocker/bitlocker-frequently-asked-questions.md | 2 +- .../bitlocker/bitlocker-how-to-enable-network-unlock.md | 3 ++- .../bitlocker/ts-bitlocker-intune-issues.md | 2 +- 3 files changed, 4 insertions(+), 3 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-frequently-asked-questions.md b/windows/security/information-protection/bitlocker/bitlocker-frequently-asked-questions.md index 1f6db4c45f..3679c9fde7 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-frequently-asked-questions.md +++ b/windows/security/information-protection/bitlocker/bitlocker-frequently-asked-questions.md @@ -18,7 +18,7 @@ ms.date: 02/28/2019 ms.custom: bitlocker --- -# BitLocker frequently asked questions (FAQ) +# BitLocker frequently asked questions (FAQ) resources **Applies to** - Windows 10 diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md index be66dcfa75..612474e464 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md +++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md @@ -368,7 +368,7 @@ The following steps can be used to configure Network Unlock on these older syste 6. Configure registry settings for Network Unlock: Apply the registry settings by running the following certutil script (assuming your network unlock certificate file is called **BitLocker-NetworkUnlock.cer**) on each computer running any of the client operating systems designated in the **Applies To** list at the beginning of this topic. - +```dos certutil -f -grouppolicy -addstore FVE_NKP BitLocker-NetworkUnlock.cer reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v OSManageNKP /t REG_DWORD /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseAdvancedStartup /t REG_DWORD /d 1 /f @@ -377,6 +377,7 @@ The following steps can be used to configure Network Unlock on these older syste reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseTPM /t REG_DWORD /d 2 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseTPMKey /t REG_DWORD /d 2 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseTPMKeyPIN /t REG_DWORD /d 2 /f +``` 7. Set up a TPM protector on the clients 8. Reboot the clients to add the Network (Certificate Based) protector diff --git a/windows/security/information-protection/bitlocker/ts-bitlocker-intune-issues.md b/windows/security/information-protection/bitlocker/ts-bitlocker-intune-issues.md index fdf85626d1..895c4eec13 100644 --- a/windows/security/information-protection/bitlocker/ts-bitlocker-intune-issues.md +++ b/windows/security/information-protection/bitlocker/ts-bitlocker-intune-issues.md @@ -206,7 +206,7 @@ To verify the Secure Boot state, use the System Information app. To do this, fol 1. Verify that the **Secure Boot State** setting is **On**, as follows: ![System Information app, showing a supported Secure Boot State](./images/4509201-en-1.png) 1. If the **Secure Boot State** setting is **Unsupported**, you cannot use Silent BitLocker Encryption on this device. - ![System Information app, showing a supported Secure Boot State](./images/4509202-en-1.png) + ![System Information app, showing a unsupported Secure Boot State](./images/4509202-en-1.png) > [!NOTE] > You can also use the [Confirm-SecureBootUEFI](https://docs.microsoft.com/powershell/module/secureboot/confirm-securebootuefi?view=win10-ps) cmdlet to verify the Secure Boot state. To do this, open an elevated PowerShell window and run the following command: From 87688120f7e76aab8adc9f07f78a788d3cf4a757 Mon Sep 17 00:00:00 2001 From: isbrahm <43386070+isbrahm@users.noreply.github.com> Date: Tue, 25 Aug 2020 15:27:27 -0700 Subject: [PATCH 06/12] Update MEMCM MI example --- .../configure-wdac-managed-installer.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/configure-wdac-managed-installer.md b/windows/security/threat-protection/windows-defender-application-control/configure-wdac-managed-installer.md index e82c905d31..b7f98f9949 100644 --- a/windows/security/threat-protection/windows-defender-application-control/configure-wdac-managed-installer.md +++ b/windows/security/threat-protection/windows-defender-application-control/configure-wdac-managed-installer.md @@ -1,6 +1,6 @@ --- title: Configure a WDAC managed installer (Windows 10) -description: Explains how you can use a managed installer to automatically authorize applications deployed and installed by a designated software distribution solution, such as Microsoft Endpoint Configuration Manager. +description: Explains how to configure a custom Manged Installer. keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 @@ -14,7 +14,7 @@ author: jsuther1974 ms.reviewer: isbrahm ms.author: dansimp manager: dansimp -ms.date: 06/13/2018 +ms.date: 08/14/2020 --- # Configuring a managed installer with AppLocker and Windows Defender Application Control @@ -63,16 +63,16 @@ An example of a valid Managed Installer rule collection using Microsoft Endpoint ```xml - + - + - + - + From 0a098cf2daf28082e92a309c9ddafaf98528ea0c Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 25 Aug 2020 15:39:41 -0700 Subject: [PATCH 07/12] Update controlled-folders.md --- .../microsoft-defender-atp/controlled-folders.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md index ae4a616b51..74f0ab9e28 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md @@ -37,11 +37,11 @@ Controlled folder access works with a list of trusted software. If an app is inc Apps can also be manually added to the trusted list via Configuration Manager and Intune. Additional actions, such as [adding a file indicator](../microsoft-defender-atp/respond-file-alerts.md#add-indicator-to-block-or-allow-a-file) for the app, can be performed from the Security Center Console. -Controlled folder access is especially useful in helping to protect your documents and information from [ransomware](https://www.microsoft.com/wdsi/threats/ransomware) that can attempt to encrypt your files and hold them hostage. With controlled folder access in place, a notification will appear on the computer where the app attempted to make changes to a protected folder. You can [customize the notification](customize-attack-surface-reduction.md#customize-the-notification) with your company details and contact information. You can also enable the rules individually to customize what techniques the feature monitors. +Controlled folder access is especially useful in helping to protect your documents and information from [ransomware](https://www.microsoft.com/wdsi/threats/ransomware). In a ransomware attack, your files can get encrypted and held hostage. With controlled folder access in place, a notification appears on the computer where an app attempted to make changes to a file in a protected folder. You can [customize the notification](customize-attack-surface-reduction.md#customize-the-notification) with your company details and contact information. You can also enable the rules individually to customize what techniques the feature monitors. The protected folders include common system folders, and you can [add additional folders](customize-controlled-folders.md#protect-additional-folders). You can also [allow apps](customize-controlled-folders.md#allow-specific-apps-to-make-changes-to-controlled-folders) to give them access to the protected folders. -You can use [audit mode](audit-windows-defender.md) to evaluate how controlled folder access would impact your organization if it were enabled. You can also visit the Windows Defender Testground website at [demo.wd.microsoft.com](https://demo.wd.microsoft.com?ocid=cx-wddocs-testground) to confirm the feature is working and see how it works. +You can use [audit mode](audit-windows-defender.md) to evaluate how controlled folder access would impact your organization if it were enabled. You can also visit the Windows Defender Test ground website at [demo.wd.microsoft.com](https://demo.wd.microsoft.com?ocid=cx-wddocs-testground) to confirm the feature is working and see how it works. Controlled folder access is supported on Windows 10, version 1709 and later and Windows Server 2019. @@ -70,13 +70,13 @@ You can review the Windows event log to see events that are created when control 2. Type **Event viewer** in the Start menu to open the Windows Event Viewer. -3. On the left panel, under **Actions**, click **Import custom view...**. +3. On the left panel, under **Actions**, select **Import custom view...**. 4. Navigate to where you extracted *cfa-events.xml* and select it. Alternatively, [copy the XML directly](event-views.md). 5. Click **OK**. -This creates a custom view that shows the following events related to controlled folder access: +After following the procedure, you have created a custom view that shows events related to controlled folder access, as listed in the following table: |Event ID | Description | |---|---| @@ -96,7 +96,7 @@ This creates a custom view that shows the following events related to controlled 4. If controlled folder access is turned off, you'll need to turn it on. Select **protected folders**. -5. Do one of the following: +5. Do one of the following steps: - To add a folder, select **+ Add a protected folder**. From 66f87905dc9230df9ce0c743bc7541a20118ed4b Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Tue, 25 Aug 2020 16:28:56 -0700 Subject: [PATCH 08/12] Changed code block type from 'dos' to 'console' The valid types for code blocks are listed here: https://docsmetadatatool.azurewebsites.net/allowlists/# --- .../bitlocker/bitlocker-how-to-enable-network-unlock.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md index 612474e464..d8cb2c79de 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md +++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md @@ -368,7 +368,7 @@ The following steps can be used to configure Network Unlock on these older syste 6. Configure registry settings for Network Unlock: Apply the registry settings by running the following certutil script (assuming your network unlock certificate file is called **BitLocker-NetworkUnlock.cer**) on each computer running any of the client operating systems designated in the **Applies To** list at the beginning of this topic. -```dos +```console certutil -f -grouppolicy -addstore FVE_NKP BitLocker-NetworkUnlock.cer reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v OSManageNKP /t REG_DWORD /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseAdvancedStartup /t REG_DWORD /d 1 /f From 76228a3473024f9476a37745dd9f211b62363276 Mon Sep 17 00:00:00 2001 From: Louie Mayor Date: Tue, 25 Aug 2020 22:00:48 -0700 Subject: [PATCH 09/12] Time zone & more --- .../advanced-hunting-overview.md | 16 ++++++++++------ .../advanced-hunting-query-language.md | 17 +++++++++++++++++ .../advanced-hunting-query-results.md | 2 -- .../advanced-hunting-schema-reference.md | 15 ++++++++++++++- .../images/ah-multi-query.png | Bin 0 -> 69041 bytes .../images/ah-reference.png | Bin 0 -> 80343 bytes 6 files changed, 41 insertions(+), 9 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/ah-multi-query.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/ah-reference.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-overview.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-overview.md index 5cd3f15a09..f2825a7ad1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-overview.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-overview.md @@ -1,7 +1,7 @@ --- title: Overview of advanced hunting in Microsoft Defender ATP description: Use threat hunting capabilities in Microsoft Defender ATP to build queries that find threats and weaknesses in your network -keywords: advanced hunting, threat hunting, cyber threat hunting, mdatp, microsoft defender atp, wdatp, search, query, telemetry, custom detections, schema, kusto +keywords: advanced hunting, threat hunting, cyber threat hunting, mdatp, microsoft defender atp, wdatp, search, query, telemetry, custom detections, schema, kusto, time zone, UTC search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: w10 @@ -41,12 +41,16 @@ You can also go through each of the following steps to ramp up your advanced hun | **Learn how to use the query results** | Learn about charts and various ways you can view or export your results. Explore how you can quickly tweak queries and drill down to get richer information. | [Work with query results](advanced-hunting-query-results.md) | | **Understand the schema** | Get a good, high-level understanding of the tables in the schema and their columns. This will help you determine where to look for data and how to construct your queries. | [Schema reference](advanced-hunting-schema-reference.md) | | **Use predefined queries** | Explore collections of predefined queries covering different threat hunting scenarios. | [Shared queries](advanced-hunting-shared-queries.md) | -| **Learn about custom detections** | Understand how you can use advanced hunting queries to trigger alerts and apply response actions automatically. | - [Custom detections overview](overview-custom-detections.md)
- [Custom detection rules](custom-detection-rules.md) | +| **Learn about custom detections** | Understand how you can use advanced hunting queries to trigger alerts and apply response actions automatically. | - [Custom detections overview](overview-custom-detections.md)
- [Custom detection rules](custom-detection-rules.md) | -## Get help as you write queries -Take advantage of the following functionality to write queries faster: -- **Autosuggest** — as you write queries, advanced hunting provides suggestions from IntelliSense. -- **Schema reference** — a schema reference that includes the list of tables and their columns is provided next to your working area. For more information, hover over an item. Double-click an item to insert it to the query editor. +## Data freshness and update frequency +Advanced hunting data can be categorized into two distinct types, each consolidated differently: + +- **Event or activity data**—populates tables about alerts, security events, system events, and routine assessments. Advanced hunting receives this data almost immediately after the sensors that collect them successfully transmit them to the corresponding cloud services. For example, you can start to query event data from healthy sensors on workstations or domain controllers almost immediately after they are available on Microsoft Defender ATP and Azure ATP. +- **Entity data**—populates tables with consolidated information about users and devices. This data comes from both relatively static data sources, such as Active Directory entries, and dynamic sources, such as event logs. To provide fresh data, tables are updated every 15 minutes with any new information, adding rows that might not be fully populated. Every 24 hours, data is consolidated to insert a record that contains the latest, most comprehensive data set about each entity. + +## Time zone +All time information in advanced hunting is currently in the UTC time zone. ## Related topics - [Learn the query language](advanced-hunting-query-language.md) diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-query-language.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-query-language.md index 947c3638f3..a27ec1c3d1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-query-language.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-query-language.md @@ -144,6 +144,23 @@ Data in advanced hunting tables are generally classified into the following data | `int` | 32-bit numeric value | | `long` | 64-bit numeric value | +## Get help as you write queries +Take advantage of the following functionality to write queries faster: + +- **Autosuggest**—as you write queries, advanced hunting provides suggestions from IntelliSense. +- **Schema tree**—a schema representation that includes the list of tables and their columns is provided next to your working area. For more information, hover over an item. Double-click an item to insert it to the query editor. +- **[Schema reference](advanced-hunting-schema-reference.md#get-schema-information-in-the-security-center)**—in-portal reference with table and column descriptions as well as supported event types (`ActionType` values) and sample queries + +## Work with multiple queries in the editor +The query editor can serve as your scratch pad for experimenting with multiple queries. To use multiple queries: + +- Separate each query with an empty line. +- Place the cursor on any part of a query to select that query before running it. This will run only the selected query. To run another query, move the cursor accordingly and select **Run query**. + +![Image of advanced hunting window](images/ah-multi-query.png) +_Query editor with multiple queries_ + + ## Use sample queries The **Get started** section provides a few simple queries using commonly used operators. Try running these queries and making small modifications to them. diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-query-results.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-query-results.md index 34716e8296..f036dd4418 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-query-results.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-query-results.md @@ -24,8 +24,6 @@ ms.topic: article >Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-advancedhunting-abovefoldlink) -[!INCLUDE [Prerelease information](../../includes/prerelease.md)] - While you can construct your [advanced hunting](advanced-hunting-overview.md) queries to return very precise information, you can also work with the query results to gain further insight and investigate specific activities and indicators. You can take the following actions on your query results: - View results as a table or chart diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-schema-reference.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-schema-reference.md index b1d61e1bd0..9eaa69cd9d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-schema-reference.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-schema-reference.md @@ -29,7 +29,20 @@ ms.date: 01/14/2020 The [advanced hunting](advanced-hunting-overview.md) schema is made up of multiple tables that provide either event information or information about devices and other entities. To effectively build queries that span multiple tables, you need to understand the tables and the columns in the advanced hunting schema. -## Schema tables +## Get schema information in the security center +While constructing queries, use the built-in schema reference to quickly get the following information about each table in the schema: + +- **Tables description**—type of data contained in the table and the source of that data. +- **Columns**—*all the columns in the table. +- **Action types**—possible values in the `ActionType` column representing the event types supported by the table. This is provided only for tables that contain event information. +- **Sample query**—example queries that feature how the table can be utilized. + +### Access the schema reference +To quickly access the schema reference, select the **View reference** action next to the table name in the schema representation. You can also select **Schema reference** to search for a table. + +![Image showing how to access in-portal schema reference](images/ah-reference.png) + +## Learn the schema tables The following reference lists all the tables in the advanced hunting schema. Each table name links to a page describing the column names for that table. diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/ah-multi-query.png b/windows/security/threat-protection/microsoft-defender-atp/images/ah-multi-query.png new file mode 100644 index 0000000000000000000000000000000000000000..ccf1f877273e1387bc9ca8e201199f06b858d22e GIT binary patch literal 69041 zcmd42Wl&tvvoAUcgg_t=BtX#M5L^c*!JPoX-66QkAR&<8?!kfwcXxLP?hNiOGlR|@ z^1tVPI(6!Pc(2}DRa0zwFYVR+>t3sShkRC)di{#%6#xKuEh8S z(xhlP#2+*VX)R{}0JG=m_bh=ClNdpK=^~>b@p2252$`PjB$DetBneHIPp&SO_D+Dp zvJq)SEesa~N!-lY#L3FR#me3efQv>!g`mHBqKnx(csf~GSh@g8utxY1RLp-=Co`j` zs_$K_Y|Q}NP%JdW8?>i4s`lnC?nX{#06hozQ+4!zom)AZ*cc(IIsxiCYN8Ni)F-lr zk&~U3oduwScqa%!d-3?+}(AK2P%M3u;dTlgx1v2+gSic#74^^I@4iDsL(CpYDP3MM~5K0~mvcJmGPQ;A{h34P0G zIk)&J_+J@FkQ&VX&tt>qD*FGlVTor7{SOVDChR|?4blH!RGS>S*db;kWVuHU?2rAW z8oWQM+4tH_KQSJ>I5AZFzvn2;SV*KtBzMS-) zLR=o3in~uAOWIHL!szt&@@UXFoW=AXTqZHYrQQ(h{d&z9xLPQ4bM%#Gh;dC6-zw`OuecW5N86sX7 zs^Y*2pok4eQdpQvC`oJ4$VR*1G-RWWnOj`1d6vYdwLDhb9gs5g(p&Ab$NKI=5ZkFU zt3Ut6{^s(XJBsqV;6BX`R~&c zJYVt~UUG7qW0*Li7|c zUhK)mXSL5rS$4-ZV5IgEce7YfZ|uoG;yfM(;GB3EH7@s# zmp!3+R~dpoZk&ZT>afUi4FXD^>Uy%m4t{)HgUkgq?*14(>x@TfD$_1bsyohv zT}dlQIJ{zfn!F~m+vyN2$({f$>f;Y0G% zg1G`-uD1GbTbUl0S|nT;bC^dJ?`P~w{XNpw`@&2c+lBO%c2$P{QL1MD&- z>!&F087{HsD=+Ug+6X1FYB8;JCkh}Dl`GonbTLmE7Pf{J#oUCRE>?^is0(rMx-ycq!{vG4Qm2prdYl%}2+59xJ(JTOyH< z_BXjrV4!H*2amYBZu9e*TM;KZEG-j|6aB3Cxt+WT%h74$it3TfQH&D#ZpQ1Jn}TCa zV+b2OAWS5I`H(FL`Yh+ClNe|&PruE_pERCpwy;%lu)tBg^^8w!$MhV0C}QXZqgtvAq^=#oV z7@Z5-_R8ccr!bibGpzWP3=y&T6)lzHJBj#T)xn$_eJW zWw}n>Q+J(e%Wv1n%ML@LIf{bkE6+{I-7MjyrW_Brnn`hkEvs5Rimy$UiQhEyBt@{k zh<%X7u;SweE$Mu_sY9N9o20A_Bcu2+7@nH$Z_+SUC9S*Jy|MANC==a^EhD;MnBI%- zdGK1R{SZBfA6aoLhD$iUch`7;iP>bF*a%MuTk&4IA014sQYR6srLC|-Z7{-Uf*LkN z?Au6_5Qq;F?fSkg&UhGwqHM zL=JCqy|ttL9L>gZ)?&iO!yS&adGrFH3b%f)Le>aC!dDy|>N z%Kk7+42qpf2X9iID7|Ruo;OtfSUqnzQC?k!RvJ>=l_Fo{=f~bkv$d^Cc3IG|O~uN3 zMT&U=-DuCTkc~-jK8@6{&F{!eFQ)`zaN$6tF_bmw>!x+XSNY?5RmIr6K$`+gKj+_d ze7*cJloMvSVIg631mMC~0@`~wY1Lm`LHe4BHD?Q=qshe%VhO+dw6aG=(5*;)7q1dSXsrlp_b1tCEuNsA|?`!I-e+a z{>)H^KV+DB#9JiJ6ARho>NWL!3jOyLp`_BaiwLbN^tCZ&5dAaI1=rP}Xq#76{&Ncy z-mZ+5itT{r#_booqjX8nU(?uO+OqgO**zrp#~8o1{pga$3U!oS`^K|@bk^zSs^Uo@ z8zVlQpRDe__hW!azz#DNJ1tjMtNH}i=I8eo0s@1Rm7*~(PV08V%Cns)vzk}O3{55~hf%e~qPJkiJbQzFJU-Qr;B=L>vY0t1=XG}Qztc0_}8P~;jn8vV?oRj0S-X$QQS_8;dc|L zl8Cp>ONZad&(ZP5$RdsEE@@*h@7Qh)8XO=l19eQzujr}2!&1L0*e`|8vnCBEG3mP# z7`e9%^x0MuYM+|&w4xFs$C(_Q7$2|{P+vJ7$Pku>Wb@@mm#@|cS3O)Cu38U8-al`+ z922?d_gVz5HomJ?jkQ+z$No z;zx3TO*`5!_{}tOepEm^YXbaq@ei01Hna-7{Nx6Ce!!UH-jse*Zw$bdz~s0Fp@&S-vQ>#41s5*kgJwCl2%0H^hrGtZ<(ridOhI*Gxrkk2~0k%ruIV=mNH>+HP*+bCkhZ}O`=lxcgn z0cLpR2J$;6x0vsv&*(%4bmFDI>KD3}WYHvDxjQqs7a+S^^PW>NQ40|%T>KIpNi?o9 z82nw)J8m}I*kXcjP5XArl52A@_S64(rma22~U_`n_=A;uXaCEUh9cZ;NbPx z&&4o+{ubGi+moF>0LBLybQtk`34&u`?If;eelpoaD{s!+S0%9!JMMk3Zz79gF3VEF zuX2eN6NEcM-}0JcTY{qum^G#PzTfRX95;`oo*M|BFPdW_rQbq-s#<(iC+QLkGk3Hw zVBZU^opkmJ>LnG{tl3w&5;;huA)R)tn zWYH5D1ZeG+8Pt(F>d=kt`hJEULUCB}@??v?4R?~wEYMgV=hL?+EMb!kHcui)i>ugT z!|c@%sus4yb>Hrgl{eB`R0`HvgXb`*=)^e1y;W1naA6oMoYpRYP7-{}bN1dtk*Bfx zUK1+*##dMvSxGvt0s5n?E`ro#`S$rLv8u#k_&PEyf~u0RB^CG1%=qa%b-gthr^AQQ zNSV%Yc^=z%&rlqgO0FY6S+lf1BmJXdVJuaPoB6wj{XIII^UjT{{@=3EpH3?gh32cM zyZyzO$C4ejX%Ih#0T#3l*NTBry`&-B1V8V1-+1dWFk#s*gl?bjG9ZPuN`Gy} zK3qPtSX>!_mu1Xo6etI+%i01&?TxOivLw!hlsJ_tRrIBYK~W*(ca#RYz}S61Em8U7 zeNBm{2F4WQYN`*q)>0HIK$@`0rn2Tt;Hwk+WBMob70*o^7U+DMA)?fv$>KjX5f|_I z5i5aE5JYjzGJP5rQFQ6G@cu(1_#dmeSRMnmF79qJ-Rj&>MP zlWO?opNhspo`#h+`SO3)^Z(@p{y(YaVi_Wd;oN2$V!nk_tnXoB9rXU+aoINT!~etQ z=8eRb8o+R-*OH$JgFZzrGd)g$bjJ?X-W;AG?a$w$eK?tIfA(e*{-5!tzEf%ul1sMSu`f; zM{`Y;bDwQDzd9SH&*P%{9vrSxR9t-cP+6+_Yh9|d>|z%4;RD{QLn%fhycp|5GqYSF z?6a^TO2(n`&eWvZIpqzHw<*zz`;RV^w7II<;Mx$|8^p7=fWB3A*uw^8G|1r=d2W3FnIz z8*@ZCA25rWEp5Jj7JD`=u(BmNd?6+fv#c?gh(xx_%UaaF6&6ap*+IjL0^~gf%g=^S z$QvB&F#g{0$wB`ZV;ywdXQparyy%-$9PWpgQk;EedvehiPY}oL$DdJ-dP;A-W71;^;vXtozhBq6B0`lA)$ysIgw;6pF5Z zr=@+v{hm@o5G<2os`!=nwSxsI!Hoo2Q7IihmdqrEj|V+rr}(^3#5Vk#Cz`;8fH9Xi?6QIWXvHi6MIp^!S~;>>Ye(!S85dbNEv)r4>)`drFeV zXv=J*n0T3{ma;El_OE(damla4D4VpG2bvp6gdyW$R6S-^@3HeE6r(h@={W6J0>QIK zzvj(cA%ZS8;EO{ZOHuy36ZO|v2+b*Gh)9)5#g@@N6?bY+mI|&vK9_?ncy`I3sNjY- zei5(?|FKbDJpf{OjIG%gph%xYWB%*H*igk77U@M)0?)XcxIMK;QEokx4E1$3N`RWL zNMCn-YI*t5AQXR9`nu$i>9L&nYf}|UnDBFOePwB<_x+(EQV!1_$r=am)Na5H_0j1<)7WCpK4Vuh z;vOpEJyXPs;}J+4+6D4t&_8#%?8A~a$oO%ii*%?ZPyJ&qt^CaNLUA5HJ`QTmv}v>A zfD%RJTY5aB;VgB3gHdG>(KkMuekIQSuDTz4%i_3>)6T6fHR0+PWM^(UqGpBJKtI^( zk@qcbV2fy=e@+)_HJp%PC0^l7 z4ow`ZslY~0c3fiGhO8xsW3S}2_ zV$ql;+Ju2l0^$0DcF3Qu7M{Vjku?JGtJEK}AIyAXTW_sMO{|H3DNCFW!G4V+P9-N1 zbRc`5Pje*#^WQq(7(Ofu=~yS+3a27O&I*<0+1kzLf+4SfIhB8RFLvY`IBzl}9ffQg zF+B^jJtDeq2uX&nG%k+xypIq4teSZo8&F)JH0FBX~y7rWe+MXVf&q zJrGHgWceK?8I9Xa`yl^p%|a??!Y#yMv)c|Lvs+#1N*( zX(Yzu$?YfoiYM#z1-q@~;oD7%mlBP3eZ=pl=~ErVqn6 zHt~L{!To_;PQyd(Euat5fb#mL+9h&ayGj3E~9ht$P3H0`$k+f0=pCy zzb;E9yaMEjyg{jDw#x(4&|O-bZ3D&gTP_@PaeYEYBWcQ0ads=tJ|m*$m@64O^}N>Z zkUOr(->)Z-ugFKQfC`$rv3%Jwi5Gp-|CVoDBEe{xC@Sa-l;-mIIazcNH z`#MkA1ou5y4vS(^Y zu=4D}XR&_TSP$BC>0tEpj>6hE@6s5^}18)Ft z2=@G;QEI04ybC=@w$|T6Kp^(MdK2m8&v#5Z1HO#@Ero@-!Z_jO^)Y7)Xd^Ybu^A?v z0@UGzRrK^_&tDDdkadGjM{?Q93DG~_oAC?c_c;JV6;CeG6VGc?YU+fyGf_?e4vBJlK7{$A1U(9ejrQz zz+N7>aaLME+su>4>l8IoeAkCm7>-V&D2j>U=fa-infFCwH&&V@L|H)|&zi8G)!f90 zD9&G+clCRH%a z=bTcr%i6ab0S()}Ouhm!Xa1`&%rFXHH#X0(s>Azl&OzWDv=L&n9(QSEc1}t|9hTn6 zI}r<76F07W_WfLuxsDf!!MX_~{j{@CklY_A3hn1M9{+VEyf;mzSO~fEIMx5dzb@A! zU{;cf#1`dhW)?5B@>ilHql`8gTb#oF52=(UTa~2 zBy)pg%dL+*`*J=h(9gWno)~s%$q*kxk>a+%bJ1*ASF*4j*DSKD8qR45?QI!q)xAaR zL&WuBEx|dpb zvqCl?bCk>jbhn1Krd18cj361WbHPc{Nxt!=y(B~J+as2SaVjIvEvO%Rl=knXJj@E1f}Jcn6B)vNet`s)oEuzv(~l(n#H3dBz)c^Gz&PU27!}nDEk9?^)CNY8SC}QLU~_F0YC zGzq4NJyHk>yk?JSV@^vc4)AaJIi9&xf<{How5FC}%Hh`>7(%I;2^D-r7DaO$){ERE z=>Nh)X~@#2Xdnis+b zW_qhQVpDQs`3C1o!8+ehkuF&IYe!Fdn-$*$@D@PFknqSw#Z#{jAYpgKu(c}p}2Z*NiWn>jLiHG zoKXl9Pu0-BYoVKc#7!S>--%gO_8i4fGP>L1_sa}@f?3O33+L{BlLfVp6xcoB>F}j$ zd`<~`)K-Rpeboeo4ZSckI54St=;6cUk{mLjxk{KWKN3)Z}aHE!BE@N0fD zL4t{PG9!xSB4Z*D6GG*6{X=4P6L(M#Pa2Z*%mY#%DP?`2!L(JXC%<0d(M8H#FRX1I&(E-WL7YV9{)2P8J{tDI>UGq0`HZjF9GMy)8gfvc3ipSYE42l@6ylo`Dfq{q zccKHa%i5WFuC9kyeT2`wP2B!8C8!>pQGl<;cYa3o&k+W)BJQxi_SqU5P?sPL_AZ`*$!dS?WIdCew!jCZQ1|q9`>e z>_O(`Lh}eIn-w4yYQo`cqFV=zakZS*(lOjuA{ljNczj8t9-Y45v~+Iz5nVx#d3k}s zLQ?nNT@n8(=;8ekT47sA&Gdolo`>ps;NlfB8n%+oazuQ3H-cDu)ka>7~QEsA$!0X2nY(dM!3o^6%5C(jU!zo;{ zb3G5cvHr!f%)$3#TJ9J9b7WlQ)1!t?ad{47{gj!jvNQu)Tp@vo5)#~e65ItjlaN#_ z3Z+2Yy}q68#ODA(LBXt+3q+mBh&&xEJ#L5_iM&9t?z2xa&+~RznhB$@1%&V3L6< zbJI9HZN8H4=RD~|R;6%D#+?{gs%{GbvgrO@<$eGdlBvg@V zf;OGrNfV7hGNT$c)Z0jplA=&;BBgIaUBNznv=qe!xNit$?kAZJcXx+OjV&x@re0UA zTSr}VbBCk_y(Cl1Gi{ICxOXK(SYE)$k48NE;heuX(lA_#EoND2?(+B#zlUPwZkrq9 zo4?G52Zmz>%{cb7T4j6Kv*!bGHIF=;knE3JqE?RDT zO1PE%B^!0 z3{z1RHSFv0wMM{>M&DC>WN^c=9!OL=aff|v^UK# zjxyXS9i?f5@*5*PoSmc5UK|^@Jg_+S@7Ym|=%gr4uOd^Lo9a@v;)<8)B{fx9vT)5T z4{#X`G4x!BbpzR$tz%_IfvUdGTYMhUgzW|SVb5P|?GTs@mG2f=>ae8X2a`>FE<#-< z>Jv0TM^mDUt{e^b)ImWTFEG$t-HT8+)FhnfR*~@*jIaTfr~Qn|l39cr-IK4j*Mu1B zfve|5ew8Tfp!>leat2BoD~0Tl9XjMsJ{r{j+=oRfP~4@;- z?d!(la=b3UlMyeYmJ25SxRz`>bQ0=T#&r7=7cPmsT`rEpMG>JQh?)_naKa=qD})`G z8HLq}tHOZDy0N(LE8O2=d6nbPY5BdcCvF8qixw$hc~#Aq{KtI*bqP;t?~kTaF;R2k zD_T3BXQvT`l(u~i&+q$UH02d+%4}!w?_GE#-en~xiQ{e&e1v@$73B;a@NJ5j^HZIc zKLfV#`cL%zH3$An8hZ+IuztYrPP1qIddE0B;2$4x_zJ`XYXLF5#CD@RulzJZ?2s4^ zb;oW!oIJ|&T8|iA<*{#jHkJHKgl8_c^__T>R)53m{lIOle&1Y~DlkFJaYdMaZjqqs#wsY267(d_Ou!UM zC|A;CraOL$l`O`5>MB8wozuYKWyq+}@?~mcCgPACOxsdePrdH967ag5bVQaPrllbu{}#)SiOB_^2$^bxJhP z6}Jv$5*RUova{3w#Ad9p+r&$YXp3sQ-&l!FzgGJf(D}cP3H>)A8Hq6O@$9xEy?-5T z9b^yvSMH%@%+N+#D@Z&0-G8D@Rz^rDC|uUf_%iscw1EH68ZZ737d^#}f`k9x&s7Y= zEG7M@oF=~)>|r{|8WoT_}_=ddhsF6QGUb2sRl*PTD|+5;abA6 zN^a)*JAV$Kh!=A0G^^g84%Tt?KAx9y9?V?2%KfT3V&nY@d&U`2a{I#pI{WoKsbHV` zrQy19L_-eq8|e><#WXwDVb^nUu%By2oN7sUO2h=)CbtDw6GBtX$z15gqJR{$Ot+7+w>m}bldVhxGU>L zA~beS6uw@%cjs4cI$#S#;W=A_1++it0v^5KL8Ge>EUL_1#LvFda_is9X4~99a}>AK zb~hZ%xMtYSEa%^^JmsWXq1o0|X*wB_KR&!%JKmgH%mO%6WCwB!s5`rNupa8#74xso zx(6=Vs;3E$NnVOHwi=+;Uz2uPfF9RtM0B>h)I%!N$T8L9-^6jgn#l5V6blv6 zM}MujLQKj?_^EJCK&@GLA!T9Bqz+3gJbe{!csnLUE8gyU`K99TltEcbCe81#1K;$L4!Ht?h7 zd6xYXn|)eu7nZ>9Kmhp3!(q4(VqwPB1(&^4;8;$Y%u7Dvw#ebW2r1UOgtEi#WrOc&;? zAZA!#lJ58@@){93R(sz;E6?7vuP4nE7ulIni;m=Jt|PuBJlC!G9lwIh7AhBMSll13 zAF=et@^VHtqUIeNfc8Iy7p5n_4o?IDRf9(Do7p?_nmaBSuj19 zH7*7Szv0aq+patK=%dzu>s_}?jtpswK`2i{=_zVtrf}aFRWD>)KfSs7$X^YDd;;;M zz$3qfWJkXEU9KTQ*2edfySMn+;kl0^Tf59m#7R16-lRE8h|XM2m(x?~g{y(N5W@!=@SM?cnGrayDhi;-*FC+Xs*SiaHIt98&! ztY7W!;j@NX^~RNB0U0KOKTfXJ)h77m)Da50Q_}|kUFnau1YZ#{h7f5<1j0n&lh*^t`0rh=(3nt|2eso&6)k{}|4Sg9=J0FCvn4v3gWDo!@Uh;|#A^CSz2=34O z!Mg``7Z6fMtWq)#ZE4oGIsdR!RX(-1+9(yb>K@ZMVo-wa!)pe< zw#-n@w~z+8513qq7hd4kF$g6`DKR;qRR2+b6Ns&SBKcjxFq7CHUC$e9jQ=MB!=H=_ zXLW%<>D}C&NR1m`DgFA1Sr&jfk&R!yNaup@>%S#ghiWumB|4;i+ua^zb%a)Z76$Pq zWnQavAwC&!;#L7phq*Acu^^QUe*B!7>5S08JJ@f8%8>B3jUU^&`Ly02>q(~$A@)#` z_;md;R?v-vr3ec9H9RYEfq+kH+gp>?!|Usdf}m6x&Ew4{+o*`UygciUOw$jIyY02M zt2Z(cAa@o{RkN5A)7hSL)J<)+1@`eI+8{9G+ck>#&~Ev~*(m#H(E-Lj>GYN@%Ugs5 zBli2$O~bJNn8-``*N5w{IeNY}u+{S-1UPxPo+u)A_qA}jetOHEhV_x1bJVaoqO+^R z)%HO@;Lj_}D))6^P35j`YucusmA{Ujh!#i3N|!<78TlI{=O|Enxe`R;%+|q-Ib#_3 zm_EPc=+6Tje9B$z2ZmmeJ3N@B!}=U`jr53$_<3^6j%_xJp6qCSY&`-AG(Dg=AlE9; zE}8d*jx}&L3D~|BpSu#haXMLgw4Q3x0Mh#7^Bp}E;Q{cg2|gKz!sDOweM<{XRS{?H zadaoaIa>|2#l@wv)o_^b9na;7*F@=o^6_Q_hIh25d+T1!eRYs?Bchk7N&)o(B7Tdy zqL|V{3SNy5aD;t^q_Cwfx|xhi9XB8_+NC*Et=U$m`J{#R&`UU$=b=)fS&xMq%{V5p=28Lx;^kU>`Wc*o&R68a2eJg()wGKf!H`b#b!52!6 zXatL55wN2np|PCkR*}8lZtc21yN~md1_3!qD^LEko!PnUlljvr@KZg#K)~33Tan%kB--33B# z7NR?biGnN~3{ZU8Vjx1z4qkIc5aBEAk6|>QjzMng1=fCZl(sW&d~ss`9B(TfL|=Q! zc#tzlUw3x^r-fp@vG`w42m5;i;wYLyaVQ97s?CC6j9jR9m7(|#lOU?@AHhdW&%}Un z(<#@jk04{MyUHr8_IzqzQh<+npu@_tGRvKd?#m8X{h$jeJHVlg%s1q2ZHg?1@Kw{)x~Qly{^NS%Kf61V zr9trLr?Zrz(bqwaFPU;5H(kb)zb^wE92pi1grglU)b=`W!>h-qPt-1;e^ z8TttNnk(EEwF%fL3638z=jaSvLtcF~u}$hJ&jD{Z-rslV4hi4?s(SmwWA(^FB>!hq z7TM#a`W@fX_e0n*vyN)=4%Mf3tzXpDC!5EW5Z*lh)q!YGMg|~F$RXTqMPO>P?S02$ zUX6td8=XA-IZcZ6e!;q0!lx%u%P zH~_LD^yl`3%>t6R&Nn^2Psp-eQhqEbu#xFR{>T7bpnHAcXDhhkn}tY^LzFEitLl}{ zq`1AqLP%eI6n9Q@sD0C0t^f3odpY0UaYXv4d^zQ*+dBJVgoY3%8yCT>h|&+9d)Lga zZgWTY5Y@+rMRUbde%=1r2i~bt^aO6P8Xl|Mq)M3trO*G)0j#;lc=pjX zahv?f_f1;Ln!E zWoa!H{nIsG6kCtDh;iJ>a?DH7`=WHXO4#pJzxBpw>6?V=9KWHgoXXv|*m62mpgF}@ zf-yR)^Ft30ujdX-?zjTJA~R+yneyRX$!D=T$E(DAF`nm2u{AJPl-F%p5+?Xh3zaJv zRmYcFWe>&$>2LOA%)y}bVZ06%X=cUsb#9s(LID<1z88zF$jQ5Zq1~4JSck*cFO;wi zGd5$>uD#vxka)&_Z~oRV#XC;ODXNN1!pSg$mZc+>pI-EV@kVaQT0Y!sfFbJ;+l#>6 z25bv&v^@lRfUh$>i2M%RmI6?~AD7d1VTgL8Wt#tN-}an&oP?B~pujqKuDQ0`GPW8H z<%atjQ|}J@I(W4lg!wr<@wkltMaNA}o@PEurJsuclWIWPtcU?5z-Qrc;`q;iS9jh+ zHK=ZBuCfj^*`_ElOAN8KuJ=*yue(Ei+7hx&QCTwBw@WhuoWP>eJKpfDR3z_PTT^ z_^0jz38zKU_)+ocTT7&Q%h-YywPKDs%^7WgdynbKHLq>I6ovA@1Xy|T?^Xjqfs^p_ z5)-1RHXO0J^Y#LGANl@Wy^3PlL-iD4fA!0@P4Kz<6r&N14_tldW>P5a(VWvzK~|~k zffGTIg-3`?y567i-O7fmaxCbQzPvW>*m-vaKBGVO5!6d0H&FfvmFeE&5stoauit=n z2HbnJggVpoKbgiD0^nbtNw()B&JAsA43Xu_=1N0jNop#ON#3{i9`S%nl7i6uxt>%s zw(-t8DAnF&fy3QJ#&~4a>0M6&c;oI-9JG{hb9ZD5*L3_fwS+l&It6w#wq+-c5ZXu7 zReXTL7wSc>YdmPq;SxOdhd-I@+HWz zPg&08D130?Vb(4>K}Wa~)K^>st<0!q$sx zpM}QQ&6>*t`TFxu-2K}!2yz-u-KAN=m$xLAvuz;x#+i(cI_PHV<%rqzZf1X}nXydrsJ(tHV_=cZ_c9WJjRPY!CJt1pDmpuBh_u z4FYc%n1!U_hc9^uy9?8MzxdX77Z$;~4-#~thFp4fs5V!Gw+157lam1lp-=Agq-4zk znjL^F!{H^CQUg*2ZRAvjw&GCN%l(ao!UQVow9XvH<0i=3y)yc4RN^GN;h)x_d83YK z$$AmL=`MyTS;Z7}exX&{`_tog_bd22(wDER;o#lEdVsas#d15;aSzKRz0P(n$GtkL zATLeCDRz_b6>nQtV{k=?RfwI=e;s znIb=cBCA!hW8{1bC5|cZ(>SJ+h_t=gT-Ijy&KxXa7$g-vN+{K^lnrw50tLxi&rpHh z-N!;tc%EYJ*w5#|Rzsa&5LxZNase`o;ZP89#Cp&S&}^xUNXPl@1+ zOU zu5Ly;c!|KVQKHI57yUAm<~ALdSW|0{^QMp6i1(`KQm_%?&9+!-I}|C}#W`!2 zAA_Y$K75Y~GMkv1`h_tT%+A)WZE1dNF)N#GtGoGlTKZO^LRek<>zbE|>nKETx#$BK zTrjheKkAV(N4G%~|}izi}a7sq}Z zO8uX@|J*tu?LM|fLAW>H5l=e)WgAO6Sr>QHj)PhqPHI2SPBHToD#-1_s)f@Y+QMjvueGtrCWDsNN5&!O0QwNDvODbpF z#y>c^7yr=5RsuMj0evC;EOjbYst5~)DU@mpheNv!s@(}}ZjYPc`S7PbHg_$X0Vr z7!fQI>a;0&e((q3Lxf|k?xvfO^V~F}_;_^%%FKkfFa3HS*+fhhUbeG^c6gBmL@>a? zhdf})&03_IHe&XxDYqDkW)j!~x25{1i%{|#e0(*%pWC(I4hdcn7i=RLFCmVHY@=49 z`YfpsX6@?IWTl5v)5@$bRcyPmC}5%|S*d7$$fLfbU!X`3*krU+`S+{TktVVY>0k9{ z%J>UrbjDrzHxJlO(x`y||2KD@?fNZT7B?BYX-sKByL@!2Wazyo_4QO&=UNUMk$#x+51o7ngrE8f;5?0y^C>QZ5c@h`pug-lL%r|~*I%eBvhOb_l@1gs(~dA z?77MB_P~wfr(64r`OnjgX#)o-V?t6d<1fJL0i$d^iZ`k%*;-c9{q&g=n$TSZSo;I$ z_3iclqU|k!;_SM0!6pz09)biXxDyr( z-+#|k&6zrLt7f_?fo?YY-Lm9a&suwf^Blz=;_AOPyK}7#jqg~Q8gs4#ya?zpTu~tk zP~PAU{-3V^W;c+zwkv-8yjXgO$Ah8hZ(@$GFAt?ke8ZB&puY@Q?Ov0(zxY0^o>`MU z_IVW}JTV`604?zEhePjD8LpLY4o`E>qCYg>Z&@0L8eySw(K+z{0@jYO5^nT4qsy&`!HU_}A}RwpJU9n} zx~pBl0RP;AF`B7U@c24`VdjU7pUwnj0~0JRlXAxQs{z#_ZQy5Prpp?(3k#yU^nf$*~W?=Q~+5V#GtKS$L&^ zPK2#xOizv~T06Z{)q=6ofYjf}B_mmp%QUW==w+jzCO_mJo z&qJ@dk%aTZfjty{Giz$LaUl&{xkD_i_iKi`wTvq!Em#93Zjd=lqP{)3UA$Y1b@3Yn zIGvV@5c)|SM_M|9G-RBHSqq*9R@U>L^-5; z1U{S@i)~xfH@@9Hfb_Nl?-YEEvgiMxE(s!!7K4#NbJW*}hmAySY*(5i5npsj4zmc^z3a-7PkX6qnkprEukV^fduH z_1=aT+TO@|($^CcN!_=grlWDD6s#kB6-SSMUZSq5I@;7E&u_Z72S#KWG~}0ju}3?@ zeEp2pBQl%Lz^SJ8?Zk`f=mFN?a5tni%EeGm^`~c!(_-UDVY-?N1w5CV4d!l{I(1#6 zomCT$yF63hq<_@Z2ids;j|qR1wu-va=2>Iq2C>G9BMvpScN{jI;@X9GUI&Mb?hh~4 zmZEdXe~6%zCXY4V7e?HU_;-bkT&{0D1cf&IR6jQN9+XzMDYbq2eRQgrksN`nOtty- zSu)yfW+Eo-?x7Jff29K(5G)y0^X&d=LbvTM~?9BOrHhjVqPL@htD z932yFY;0H@Ikb)$O(}r7J4Tc;N0Yjqc~+jB-~`MM40d*-dCkEu6!c~^?iNxu{){0- z2~>3tRY@sc?jYbVaC73AuUH9h3xmT+OEnDOQ^cwKltlKhazzqd=KxZ(eXt>bKZ8|(dw>=>q&QU;Rsk63lobMlj3C$YmVgX3cc zo3`H-aHM#Q>j|&uxxAsnfZ@`UP_C(;)UrKfoi_Y1MV!0YM|w>h98tG!Irg6C4Xoyb ztjy%lKy#Nr1BEQ01>L`+Y?|LA1x|*Hr)I@P@8d1uV>7NZ#`UruFnl!PmQM=-bX!Ek zU7kwxl8Bbj|B@zPK4ROx^AEln8rt!IpYb3kDQ7lnh9d4&iC#svYZ@NS{jRl)TszJ8 zV?I-@&{1t^cvz&D_@kqa@=T(;A$I)fHxbasuFUVPD4@aV0g}E82*dkJkNW{E}ZjIhvnkyzdMV-GDQE zO3arQnJzp`1q5!P#^5(dlahE!! zsIM8`cW^WECpBG>MrM7lU3i-i-k#0<0AgZF*_$2NVu7#lduKu#-1KEuuwVE#|EPdW zo@w7CUoPHL*!WP0*hGI&^@_HC4njZqbofI>0~r+iSoF$`w9jyBMyrJwkT<|=!h#m> zqzv{cM4Ss`EJl+Uvf+f%e0Uhqu;M54vL%eaMW@Y!571hl+sKuy^@i*Rw#4UMJB+Hh z?}@$^$pi*Vq71I{MYJBK;Uo5bvjiJ%6Zpe}7H<){M|xnQcXqs@Dou=R!2kYQ7^JAuEUzdL7W2egS>b>8Ci2JPqQy~c>)47LXbge- zTT3YxV3n)!KByJ5YN4M#d~5?gnfCWZ+wT%sNIm)U+iCN8zR$;Si%rji&tw$=l&Csf z2)U)v5tKI8MMij(vpKAzGcdGArbjoO6MYEd%|B0TR;LUMuEPa3qS~o0v}H)D>b!Mi zd9*}*puqvBZ+`M+?K4)-NFU5awlwpv{&1cJ%gW@u7A4PkzZ)e|)`63`)YCs>xS;M{ z!64&Jl3rfIJ%3J{-e;R%YnkGzjKy}yNlAh~&NizFEx>?L&P?JIttO`UylNph`|z9m z=;1-p@tRlCjBl-gMdcII)UsU}x~lbl(z72%0P83Gx*PuJYaLf$n=DF86rZ|s37fX$ zHr-ZeqfM99onA>WM@5g47g}>HR;LYzzDH! zIYM!hFgQ53vl-XzDWrnt@F$-sexW%{*|MfK*XHtpIIfK$Q#0!3C!(V}HzlQ{Bew^sqJW~mnII!pseH)BamJ|xhaAd1^zS-}VqWdS*VZ~Cx z;t?)b2L4+)Lt|#j@0lGrOfjJ}20$M%E2EWl%hVpX#5$@}F}=al7N$o?s!kf-`x2Y2 ze4=r0aW=AKsC0~JMi04J-gtu#9H59{WwA!q0=3~1J)pfBL`lt4X{03$FRB;&zJ9T^ zn6An5{(1h%i*auLD?cwUU)FpeLS9Lu+9{3}Heh9t_TQ^3+>`8NTBQkOA|`OtKMhSI)k<%hjsEgW6Ml(<#wI56-b!x9)ZEEen>L z>_7qmg_^F~cPey%k93sRLf6(G59$VFN@`syAYTfefCRBU7l+J#SaI`CaL|09`*?Lp z;-_f`=GmP;lMi zyY-~vtk}j?2@s9HAl}X?byJ(X-RXq*`Qdr2oJmpdeRt}CFz%jD6jOn(UfjH6f_$j;;ln1Ez7M00 zv?bsayC;o+&Qk|)0iRl<5Z!Qj8G28GgN&_x)jW9Qi@u=N^~L##JlJ&(91fsk6Wdh^ z;MkOLStW-`!xYey;e%kV!QNigW$M!HtugS%;kJO%qO=mH5%Lz>1PEsCu2>=?B9s{P z%2$aOux~v-oc+GwRFEvplRH)#hK4rl0yuOk5koGjBrRVCzS2eW)*qzH{eD+n$LR(K zz_;0KLIIyeb|8H6lJ1K}QX!HH+ zkul2P{7nFdNk$H@Z4}n$;{q{?!}F7`;c@^B?Ag@fxp>q+S(#rw2DQUvpvA?-?!g6g zvYN%koWBpi;8$1-k@`D?k6Nh=ZvbNe&B7$uiP~CNbWf^J|BZOg&aVOk^YY^I{&_5` zFI5HunyYJ{f;!ixqna7Korx){;Xh+y4L~SFom=aH+1*7SJNf4scyq9Ey2GZdiOE=f z%ggDi|Av&X%uAfJgtH#%&%WJ5BKc9{|zU@!iWihN3gQ|)8_#{`bQvc{rkeh zN%-#~(*N6nApZ}|P;GvMi!ENC+8$3Na7wc5kSM>-z<>-Y;tl3vMsECRBxl0WJ-TRp z8_CprZY#mSQ&T*8h_g!Dd)CnhZT!wQ*3I)V>({3h{+eIk$x>}O0+-b4(DeOVaW7L# z_=-=#CnxGQ;^k*w8+}P!fAc8wgO4jjfpwl$rOIZ|d%R_3qSEi~-$rh}yEM%kaH{!5 zR+*$P`aLMjZO=dDk_fcncsdwtc|h%Mraj)8Xo7pWeP{GTjPIeRkET_5b`KIW9>!s% zG($q)GE!Cu<2#S!@$VMLhDgm(+30k+UbdZ3A@|p`^~%U z60FY~!_i}HU~h~rl;$uVl^)*EV_kFGlmSB{uVBn(#4_oxm)*ar9mD6I4>^=`$_@e^ z>SC=shgiq*o5IeRb(e+QHh5ZO5wb`=L|(jlTX@F{9ZG9dlcv6bzc@4;(eb%?TU1n8#j!!GLN>iatyM^X0rO_g zD@qqwt?b3{ha$gxyK&YSIL|qIQ_?|a3z4#eY|X6+97?OxTL61FmAm4Grz&%R{j+gq zd7#3+Upl+Sm8dS4S4`we>*{OcYUACVZbfX_Y0AOX%5`(Y4gTC-!?(l7nKhre))3sb zy2k^Vocij%y{00@!GlS4$PF1($wG>YX~g7LN5)Uiadodoli2$k^ebunT2spZ93-ED{Qt5Dm#)r22HrC7|+iy&{2`3 zm$QUerB|}>#4DxdE@srKlRpiIQqfx-T4N&xi$L448;OABokuM zCgXj-`lH6$drUyf&Vyq=^D2&xFZ zW6>6zW~C(onYnuU;fjLF;U;lkFgkzQM0fVq;?ZU2F-O7WLCek?1=4v6HEb%mxw%+W znwp8DCKh&fAu?2f;3^WTm+~QH8N7BW$=~Ypnyy<`;ke8C52pLy~_j&=!oW@hpXyIJ7R-x39*X5r)cNg=h!?SQ)E+wC`9r` zy8~KnB!59%j;dF-;Hsp%DKJHZ@fm~L@0c63QzK0))04iz0lzBe%}U1#XaaanxC|04 zhCR8TQRHoUpAafL&_j*>0`!IN3-qTVmZTs9*)x0{`YtLJ&spvCuF+exm(wpcwKTj5 zypPgbq>VjwU7{<{fp>%%{wOD~tI!Ab5cf2zxyj;=&h%hDz3~TiKd@XXzGLjp9N^82 zDQgW;zw)Vfz1y{9$gEcJKovN7GxK0!AWmRs>dYigAXq=TKwNV^q7q@FHL| zHpjui1rCHleDtMs1c{xK6A;AX)n@V4oLNy^Hjk)@?}tOq5)Nm>fvH6N1Oc_EvU9s7 zb{EWjI@z?qBD(#yiN5BRN00|W$4wK9V-Pip8)#Ejk(Oun6VUF>e1d>jo8N`N8g;hZ zq5^6>m0H$m#@Y<*cnxlG7wpWLWhq@_lK0){F3;!2Xr?KhL8OPttiZ-`;Y-+ww z)l*CNds<5kb|f=ve)iWmmVrxy-i0?*#QOeb0;&P(_ zCHhzR8*O9uMqAI8l*ZV~J0NJGe`mfo1RmoN%2kKA%Z##sqkouWV!Bjf3JO>joaE)i1U*+9Z%tM_GIIUtZ5qj(CA= zOXjUa>h_&n-jMK@)Wl%~7Jzk8JY^f^Q~_1HI|Qj{MK0s-g!_7W;-zO~Y;J5U7CE}? z9kK?@&o|^P#5CT|y)6y0THSXgvV#DFCcY-dw@uXDG(3d?1XGeAU&GxiGuEd#KC+=` z!EJH(m*FXCeXLuO)x-7|ll+t-caI~N{!IOh^_}^aci?welE~Furd4{QH)^I0*OYI_DXs%v^UfK2niseO3PZYhXTA>_#`pV8R1E=R|{bp z-iUP(0|Udx)**F$!FAFMm%Q=V1`AIYQ(j)_7T`D}HPgSODY9{B^{MDrVUQ4mmwwb4 zHqObUE;LTp0tO<85D6psN7I`+Di2gM@o}tq?YHe{4NDEZK6AJS6>bN{ZRjq4)ux%q zhS0%l*ir^?bGFZGg+F+H)j&kc3fKT`0(R4)fdN1YB11W^w-y!db|+1kss_c}-+WzQzIc^TDX|7U5ezjF%e{Tobb38QG=IEqW zQhih!x3@ov(L)BTifgC;GH+oBKGYF~Ph=f7R&4^Fk$o-WxTA`mXqd_{AdOpTy`9vFN? zATdRO;;M`Tg@y;-Kvsium2>u~+xHuS_VL8cKkDJ)9*3Y*v#qTubMjQ_VYK>&{`HkGXNCqr8iGuVhit2}|% zf5G1W3FY0l?9$;?PTaw9srv-qUljV)*v|dNN+FWWZ~$GDM+ihmLc0$0%Kqf%8lpqh zcQxk1&dzQj!^Ool$UM1;dvGvM?I@XW5%)A^7;U-cz1K}?qmymZMZK+wJ*4A;g&N$@ z%Rb!Ba<;}#uuDdtd8ow`c|O(j91J|xu99bN$97L5OZ41(7=PyOpm{Zgi`3kfPbV3! zSKxcyLX!j(cbk;Tuxet3_u~p0<_^?9XnWGM=_18Rt`yZQ$~pwv(t0J z(0VdxPg9`U1t+gXDrBtMxLBGIekz@!gihyLxg#jQXW4_h`*cVo%!ktJI8p#I@9ujQq?LV@FSu=~!VQr-v^cuIpjugW z!U@bm6nbien=Qbx9#gNfQ2VZj*;ta*+*pCbRs!9*T>UZxGED|XT5)4z@(@oiJYFn~ zPlse&yxd3kjO8N$ImbbBI8!>>;Ln(= zFf?TerTH}iZBo|SrY!0T*P8fLW|i|&-=W*Go*dv9KKkw=Nhm!Le5Bqr&ue*T18D_z zk>e*_WXqR!uCAG~e%FnU?uow1At7J1NNXx4E5AIdyibiRcZop--JGz$^PZ#qL!|jC z!w_vqlK@<5Zx3udAs?4)=-?eKQDY9L`mjQ~peDB&bnQQOnW2A2wWAvuH8AIzDpnQ4 zrVqzWo*)AWi3&3^z%RE$kdgmW3m|l10|J?97mZ$iF8+{#3UbKW3EW-wV#lJXB1kk< z6FNH0RnMK)p%h&*w>(=RT(-M#-&4YXuFF6zvPt`14ZrO$vg z4}tj>>N4#WojJA1D;w_-K_AMtf{qKDj{?|fNdjtltOY%}Pju+sT-ViTAOW)A1?C3? z1CS2`rdnX$RZNs^$6BLGumGLsy+OPTN*z zJ7RRdQU$^Dq6fDH-~8O#KDRN&NbdAIPfk$n7?MWY60&XKUDT>>@`O>;%8j=P6Hmm~ zIY(Wq?7wR7HI?d9tD&d|udNLcXoIyfS5c(})>#(2R_>I!R4R(FFj~mC2FpnBahU{Q zxrkVHuiOq6%11Bdc^oE$nN@LDwmH>Ocf=NGV!y_a%B>)Rd*ACO@)}kEuSzu!-kdm>XsL zBjlD|vH5GiNG~&4#TRX`uN`v&jo@gBM%x05+mO*Qg;X9{k)qtx2t^hjf4^g18u=&n zQ}d%N!nLHodAsQ?z^N!b?$Q7g|I^PPWVTp?cB)~u&!9#n9RIXw8AC!nfa^r59Zg4s4YN9JlQM1Fj)_FApOPvZn^aXflwEZ| z$EOZsnnXp8GRtbh2=9Gx(;{PfeIK!+OUo;3u67!o-mvz?koKE~4m3heQmnEyRH4yy zu0DAk5TW${1XAPdl74z!qmSpN_N7 zBz2k{dKL};T%Mmai0wiwYkqk%K>G96h2GWRne|;P%N$~=dm@NoSe5*gJ z<>sM*J0LE8z;W{BCGy!pS(VXxr!OwQSG}+?6pZAq8P^UQ0c;4!KAxM-s6es2cDklC*_3hXG_r0h)eYtv`)l+hZ~ zQ5>kOj0SyTN->_y;`eyE-Q)O4z-Nn}H8z1myq+-Zu%D#P>@Z8yF-Xks#m;HJ7RB#< zZ2&YCA^XebJZ207R*I9edwE&h!^YMY)!BJwiRd<(zWHfA;fIQ=ws9-_4m+^EK=OAa z!cy53v6Aukp#PUK2iu&kfeTsHreM!!L{`zI8egrgQTrzb250AE!j+UJHKWm(W6XJ5 zUN`VHW7!K!Otg3XrU+0MJFZ$g|0q2oaYC^Eb2p+2x?6P5X`ky65geTR)tlejzW}kT z4?DQdQ~ztWXd+v3J)`0;f;|r|M~y0>{Y0!wivtR1=;ycn!EhCz^md^>^CsF}@$M!& zXdfyBKWky9^L-2-0H@XKa^;zc5&qHRZog=AZ*QR@S*C?hqmz)CP5FsIzw&FL(<2YF zpUZ^CknY} z!f^lRryGm%ia9O&-XKJL2(;Wd_i56lwv6+Lh)_{iHyCi#v7;tH{Xs}WL&LBNHX{P+ zOJIJ<2RfB!9SfTskFQ=#&h-qe63jjGAPITOZdDw=H#}>{_Mi~^TytJP1AY|R!XLc* z!eCO74s&`e!OYo-g(~);xGnybP+DU0pkDyc3fj2mQf*`YI)y!c_~gy4)a%sNH(PH~ zdZsnoB3$khRGJwOzkf4_Rk(N(`$MD~^w*Wl{sc^|r@bFS${s9+N+S#=n|j_+9Xlzl zb!B{xhd=88C6lPa53ZmfQa#V*A@-; z$3;vKtQR&x>}63`K+2SV_Mem~`I8eaS+*ndThsvGDVf&x2j>Xrr;!4mz3H1j3QoFw4GNff)(-P_x0+J$s9U(v zWwl2+dZ7ygVwyzgwNkMDGOeJ19Qm0O3TQw8BJ10^6^ah3XpxHHO^Il2IL?u#Mq;c3 z+`ytdam-!2m0{;-yijUn#k-4yZqH=!{2kzUk%vnbH1d6CRvP#CEhtXo{;uU|K!+U!B%Ccu8N>kd z@=?Gzm@cnEeUExgHmRVP=ki18gij@l@7c;u@3U>_t;jYcUC6uh90p{nT3f?T!lgDj zt+6nzIDP!cl30j@XXhUu0m-&#q;KtbgCdl+5&d5Xp*mw@ev>2NIF4$E{4uQ$f2RFr zV&7nYfUGd&SyO;W-leppR4{DVu@4en#Sj(PW2 zX{e`7F+Do$-?Sk&OZSXNfo5*jt7{Z#T<~jc=6yOQb0|zSEqz3Qla?aJ#&Ly~e!0484J+kK@DZfQ`GYPU z9UV}P0;)lLUq))KrnnzFw@5oY;G+v} ztF2nH6yL_3daz^deET_@!(^{KH?37|-q2%bWlUovhCRjD9z{j18qbMraP8$D#`9TUwVP9K&}v)U z<$lre$uqj(Lja|8vWw+96weKLj6vzyNYxJO)x`f@IhhW0ih++GFv(cWrxe$tz4C1h!->91u=ySa~on;Oy^nW19-%?n`yb&5mZ z$1}?w)EU&)u;<2PJYfm0r1AvB!Nk$y8C*~}1^?(3X*?KXc)2^SYuEKRy4W)MPlCzP z;6L9rL=HoVdf;VgSStxd??9RMf91%iBH`cQ;e{i=Wy0k}fqES>vOt5{Mfuf~_5Se& z=XbInY>yOL83iv0r>O`7_{v0#y#RU0Z$1)=7)9Hb$YN7+DJ*z+@cf#^jWHdCvh80 z&DVz#4gd)IDEUW8$8F=FTz*QY05~p!ND%t17WHh6w`de%mk|II-)#cW?49h$>4gS5 zzNI+4ocz~CL)Mi0{URvx8JWyJ-5P@G{ScNWK5xLu$jF$GvoqU3404bp!@ykjd-8iT zoWFiF=aCK|CYYHV@jiCOqotg$uoD5)0f7&MY+bn7xkPfWk%XNy5TVcR`>Rd;^J>Ft ztjOTomTbQWK(bgoMzAVePlrvKe~-{t-&_T+4#lm4g~@t;vzfPc__Z0k)#^hR+k_9$ zOrSvKvx*k-p75J6Ejb3tK;5au#jxdcd~%5*lK&ph0>zB7NtDfvQzQU_?P~~r!XM>Q zUB%gbq#i;s9lW-Te&2OlS3L&ok%PXUx<=vAq5u?Y-dL>H(gCPdD1|@|tQBSY{}kEq*W$QKK(sr`6YJ>cG)5uDQ7x z+};{AB#$#VtG7&b`SqGXOYa`o;@OmBqv;&cYC>)W>(z&?!Oh2BnJzCNvsth6ZyhV*85^{?wt z4kpneKq@w_KK{cP{bh-|0dD~ycqpr5+yanZinpe%^PC9$JMZg@(j&_a1m}>imQ*V) zvrz*q>Ye^Yib0<4OxQgDtTgm(6H;G{aj@c|wJocyeN$&P{v|CfZD8_ZXOuK$6u{;c z9Ft>XW80_StjXiL_jXc(2d`mZs@)ufL_J%W$Crl@!4Jpw)p3%{27esF`1v_@q2=p} z&n7^E2<`HBZ*;kgj*MEC4SGC^xU+Meg5lBWm>8^q;a))Dh!VSMvd}ggP`0-0b?e^h zr))|KpuLzy}te1fxl&I1Jgb$8vH=nnzY1Y70m2jdjE+< zY3$~I7$=t|^)DR6kv^2wZgmo(eiZ{Qo@y^y-x7(58rp^)y5$SBA@!e9lAF7J9dJpZ z{G3_IYcciC=l-~fXaXG_UBbhoS-VZdk5af{iY`2w9B$B2cB zh-bFw9BN_}Z&HEt?;F3u!ol!}U}))dn|9HUbl_;Y*X@=aP&<}{-Rro_7He9NBk&#; zIJ)%1+BYCEpC7npu)gKu`ndarFDV(h>2rnia5Fsw!!`nCEY;7snc-gc5XS*YtYev@d0AVPB(Y$Tob$`g zP!bV}H>7-gI@VbtIls8Va}TV!n8ZJB=)LXwBL0Y0xbS?IaJ75()VH>9G){%w3}% z9}*hoTCaA3f|TF%hPAfEA7}5E8>VMH1JM`FwYz8MDFC1Cmzf{tRk1$kX zyf&);!{h;nJN^$#X&#@-*lJnXfIC56s&lz}pxs!x6N5A~G@x}xXfZM3Ve!!60-5D$ zd-{J*ZsfGIAOhzov@S30cZBIGf`NiV8Kf)}ZEfxC-IX96DmIaNsDym{h@R}1!GN>9 z{^jx=;tD@s!!A%n1P!^?)`W{Gq~P1WwY1U7yf3 zFd)9tQ`% zpjXSvq9N24U|^*2CCK8Ou6KcZzxZqpaEVx#!rD7P%Xk3!RR(;AmbP}^^z@tSYqVY> zCDn=&AU+yEjrnK7FjMyS4tbH13?UkPAYhaLR|F4QVPgE;((-{&G;VJLn1k`}^4h+EOJ-z_ygQIad{toL$V9q*KB*16} z;mpJopQQd`#Ncp@+$-dyMDfAKtU^2jK5BsVWF zk2C~e;SSW%i1{pzUIV>Gh5WxOjr;FO=l??~|KEjn|Nr-0g5WDz^O>wNHuzs_ISV=J6H`FEYP+z01dqgw0fSf6(S-8ne>+ z{vK4=N~B}h`?P5XV!nihwMt21ZAP(x`D4~mFkLNuwY!*)_=uyEeq|#X@9$k2n3>HV zXM1L+;CsI@3<UtJrNGcMP>pB0&(}}ThS{mU}Q`TsHg#DX?SB}Iv8gvhvr&N`6rXz zYibG2$eWCN!S)5)KetEOs(%}sx{Qn*@_om`r){<~sx3Y_=fcQvz%keMqaE-_=R7WO@8#XmxB3Lf;{S$-^mPvkUSpn+_$;tD)$JcyAq;(-Ab$W zXVsO{km&(J@{)rKpmi1L_);DZQlGS3cP?`(u`E-Z6xVH1W$7_XD=9^Zs+7MxD5>++ z9lt{(wz<9C3L^fP5`ivAV~J<~VVQ&$n}kU_gi$}KK27gSeeb8m(g@>zxO~5~k1XnV+N#Q@me=vQwM+y-zU*#xLBV~4>b{eee z%L%IE28svhL$4oJM&DWetZ_W>qJXoLu=>O?A6+FZuJvMCnm4S93a?Es{d2+K{SC=T z8bhfwiqOz+g`ma^<~hf+Y| z5*=|!I*3D-W<*);(dlcPXLNquxYxv7^I8uJ>{Y(z#3 z=EY@~Z9ArL za;1!NZQ*XQW!gRF4rhn;Nlg51+mjrbQ0)p~bKqFysnoq||4~wpMaeU$toB&_^IfuF zF45qT;DlW?%bB8#5TX<$D?UDw?Xq)Pl!Ty8HpSd?BcqEd1qynwLwga*(>u@k+MbF&_V=DpeTL%f4%z+|oC?7& zuwX~GQ%?nq9tDF1Cq8T|xm7VDu(eRa!zqv|dNI+{w+DKP2MX zJebj}t<>P7-QE4C767e>$fwn^Nx0r}wd_;h=M)u2zqMCOufh1gJl3u}QN;$xk2@T8 zSOqQ}Hk|km-ji5ZhMo<4<@y;1sSWX>|9Jm4KXl7v^!;4=cU=wqqt)q%W-J7z!#}1f z37=EBW`FwRH83_&orBc)=cYM-;s<=N|Nbs75HoKgCi}I&QTthEMhz!%%XmwezcE_- z_}IpsL$g+S#URbrRsrLn1=@V}i0!Jy+NW}L@abtL`@s@g{}Go!uUr>5gKtY2=$|Yf5q+&BoR% zjaGPreaE?)a*30Yrl5tWG;2`rx-@3I(2jE(220VraY$M1759f}luAQtn6DrIR9{yT z*`0Qr+f&#$1Z!?E6}y8AI(TzT(+@t#3!S_@WEm`?Om?(y@$XH}*EH=#RaP;1 zju+ZR*SA0Mr%ue5Kfgya$dbSBV&h#GM~z?C4*pOojlAq9u0mm~KI&D89!lRdSLoZR zT}AzgS?%Qhm2+jKgogy8u`ZLG9rEB^ne*9?&ZJk#E&?{@I(s(#J+^gii75LzMfLTo zNVrT^~P5?^Hj!%_C~~oxMvwjH68a?i)NSku_iwonH-ie(I07 zV4fXfp0U&BY_oiD3}^~F=D-PM1jxYp?JFPmS1jSJ&qhj_p0A`y+*Gq78F<6z-JSSZ zI~DGUb}+vb^qvOm5PJ2ZnAuaj%J#JMrm|>^(eox#KM9*-7n_Rm!w8_j%bn~xhU zSFb!1?c+8zz=Is4&K_5#1~Z z+no_sRw;g!zOe?eKZu`RQAs2N?!{lN;9Gd-*9TWFh1~PBVx_X@7xbZ6f}aOaI$zX| zF60_w0t|O19D6A_qq)eO)H-wxS2{%Vrd#r-)mMZ(MUPMTcSoeanFV@(zh&?eXxFci z$T{@I6|KGD^=xKr7gl8a0pU@0R*Y(wHu%qVrE9r-pLQ3r&>wX2Y9=Zo$`x~eRPm6!RI%D3?4Dr{&WWJMxLGrrb{EbZR44i1s zWEPDEQmx~+K^M40wYuR!+Z0FWa{ZM>ZVg|X3k?_QE~`h~D1SXJEJ1;wB;k%Unq9J8O8X#*ol<_gPgp5Y0Z&CVEkpch@3=vk1rZ+p*lu%T z@0dOy-jh@f6h0#Cp^J_Qkt-^Je1ZtDxdcL5ls{`%5!(XE-D2 z(zv?!So>8I19!>?r=gFFuG82A@|5qcCq*4E=3WH}xPm-5&^{qTHlN3tJ`$>A+01=i z4nwReBr|bG1110zG79;I&eiE0t-MAq;`$kzh!b6Xp!@2%kBMS|ey_isFyf5lMGadE zKIM9Opz$nW(5d3Ha?dB5=Uzl!HY^33gJ152C${;!@J3rDC@LxWKl3(Jj=ZdVM-g@K z-2lP7YROs5`WjfjwOM@Y(I(C%C9fynNSveLUL6>u$gjxPjFuyQ;x!Fir>xzGGRir4 zC`l~+y2}%}(?x%6xwf?zTi?#k@*YJeCJ>VK*;-m;vBGUW*%~8-Q9A^^M#nlTz8U?z z;NGbte%!95>iXHwy>ay|j}&fOHq8s64S$l}r`v)>?m5IYH#Rul2V#Yp+zcPE~K)u5KjM#+?mm9DB^eQcK z)_xlF^`nyX2SF}Im;&&mxC3OOJp54Maa1A|+2EwdMMb?TaDvUfVh7!@QbO9t@Y5?F zYQ#CpbB#UVc&Y!?L*B1p+ZqQiY6PVIj8~oQ$d|h(Uyeu5X-b%cA3`vA1dQ8g>FA_> z*e8CcBNGp%&2?7AjK_l1=*H!Hr4m%UBEZfGV`TXgg8kz%r+dqu&IogYZlduaKc#5` ztjnsx;?nQdf4we@(ax)?!DdN-B@{%~*zQ{YH82P1oeYL{u0kRqvNEU+n`Bi1qT^Xk z_Cg_uc+7H1f~J~GPH~lrZfDWzUOtmPOl>Taq=JTJw%#rA`; zka#R4u?8}`msq%6au_M}r!Kl3`l9a#kg7;`teNXwGvhVHaKEJzDCZiJIAHpC6{%%7 z*(X~?5rPUeY!#-B59LNg-?|UYu}jI*TaAmCahC@r&-*fvKoQ5oz$uQn(!~$NNMq|& zl8g&}ay+io5*YVhXV2!RCxH;UQ?YgbO#FfU>eB}FxLCy1K(_rfo?4>edUIoU_nT#L zPsb26?u@l)v9W;9Z6&a%iyorP>;VaxEKZW7@J#&gMs#JX}5IekARa>2{J<|5F8>>AJ(uBwxRftf+iV=iTO?Yw<-Y?!T!YZahY8^OwAI1d4RU z-7CHds8o%P!iDTL%6&+UWxQ;woV_%&|8cOrY1aRy0*pG*;-urb^tm_L&eSMohqpnH zzU#3HOy}*#kNrsT`*1Jm_<64C!4pk8tzmQbPrCqrP813XE%_R0LDyh`N`-h&{MRmw za8C=J^*WIH3d z?9bwgiRT zOG}CFN1oS6a&*Og1g5&;$ME`q#!SH*g zxpkdPVt0Dimo!+jv?u3cbmV)cO8fp}#2siSH)R64qA3?DCOUolc= zkVm79J6!1;EUu>cbi=#V7|CS&X|!xVa&0D2(yN|FN?XA0Sue#1q2S;a!_)~w&fna; zsJ1@KRio5nsV+Pajarw4(&t9;t=yn6r>9<_RnE^%Ov?7UR1(z7YK6JQk88-X>>ZCZ z<2RH7AtU7KZ{O5DMA#Ul@7FP(Z-Nv?(&t+H)wkmjP<{pOIXmw@xQKlXwJzO%^1Nza zdq1WZhX9wFdLxs&q$2Pkh`uXjxqZiqd&XWFY&71Ava=&T8mk3gr%CJyvK=;+U1pbM zdq~9GYrAUBu9_E5dJ*ORqRNhnn)PQ^T{tK6R~=I3dDKMZhl+f1gB8(f3spBeVrC(S zwcFyhliK72*faIfywjK4dfHaiQVigsS#Z-*iTAkdqj?2Z#{XjPtAgTc9xp>ka00=d z00Dx#TY?66cXxM(;10pv-JM{Ay99RzcL_ScFtC%~|NHi7x3+excAxfPs(S9+>D#yU z^f{-yQyME80-;-q$74Ydb_HacUYs}H6DdYVe@an?NC{=~yNgL+9Zvlign370mXnsp z%;W_zfvC!@tM~T0W%xCvN4geQvHIY0r)Iq$#o<#0sqdT<^dO^n-+$~Z{ORNyp7WB` zn6H+8|?(o zY5Df;z_cBf|G6pbin?eGHS#ZDG()pX1Wdu053Wq80Bcdrg(ogwn|bhS!)qZyAHDhJx_rspW6bo=C^$u z8dB3DWSR=!sWQiqEqr)=l86if3|V6dvR=Vc(fenkAEZZ_Qp#jyX)~YN?Adw!@b9z> zesy$si?=;E4EzMzR7pIb&)Nq*e29JRAM@W4`h({2Fc~q2+zvTLYqw|{lq7U*^WQFb z(w26d=gH)F^sGPKI%D^Iw4Q35%#__6@>(z4CGzf0+Jv{Zyg3FiQ8BSz<64rwc?U~` zENr=*(dLfeT&uX|+AIG?nTY zJ9=l#VExjMGgOa4*Cg8Mf(|De*S3z6^i5@%scTgmt245?p3AR{)l=j>%?oXX#Nu}a zyu{~U+RMA|jXu+UmzQP>^gbkic?qS7*#|gW0;!<-UeNtdJy|geTXc z(y24spO-iAxnUBmDp1z^#YJl=J|RWdA zIn4S$zcssY(~P8tFz5GPIDYjC;f0nT==loTBTfAP`Ln)_?nL)izmCbfzr2BzqrpZk z7CHkvSQm z!3pwQe68-=sBrlH-qf<*of;(N1^k5crgA6rUF-sFi6r^~Tkx<=0vZw>#j#ovPlVyC z1|)_@5J$MpRQ*9M?l~D>R@p^t^iDupbhJ^6-&;)?mP&P_#<7(rDPl@MTa@Z!rlm)7 zSYR)Vm%g>Bb>Y(oJ-uGD9@$ei*mpm6Z*6ML&0S!>dF9v{KNQlGur`i14*>Bnr@@a& z`I?VqQLEZ+tPlmvW?+Vyl~rVUIZa8uf|oHz3a$=2Kyd1F&pdY*!^S(53&|Om&AG4O zE$-g9P)q;()K55L_T~N8ZkXDyzu+$=z74^zm4OxcQoOCp*^lT;rU8Rn#phQfLqW+_^s<3qF@kQaynQJO97wgw zfNH}i{Us}#&(dpBnweYfQiyB&TGQh;#i`*?quc!6wWh zm$X-WhUMD21IIL{bTU`v!Rv6nO8Icl0!hZ8OZiCK|$}5wxzdF&%AlO?P#`P zU%c_zdUs-ATnR!aP)=Ez&!(zy3=T`B;qJ*$r(+clNe*^S2BpK2H0M+#W*(e|R6!h4 zRkhE|AqSQQ8&&#tWJxf5%OJ5R7{~pzby{%zEw!exv2LH{G{fnHFV?x!xExSewtF5U zs{kAQ3}j+;+VE!~>1telBpgRzI^i?l#Pz&#AAC*?!D~Xizb<%j$L(Ue-nn#o%sh2k z0Fk*8Z>Q>c{m7(O@VR_^nU}Ca-Y|SVal;C_Ww$H7Yu2l--t3|JZF+k$`mBFOVSrM>vm(03i zg9BTwnOVa7cby{9;Lt0$oAORT@OFyXYAE$Q59tq)Hh<0ml?rdL{hEcBZ`Rg4``(nw z@YM9|8U0%wZCSAPWKu0->0`B<71Kb-*2?I?H4-hkKLf0c@4VPtkS-Qrui%NGZhbZQ z^ob-ZMz@_hvU%PX<@aru&Z0_7e~Mjb4!wF$}3rKuNv)4Vdcs=;|t z=-!lha4GxS`Ou7ZjIL~BVcf-zQSQ5pk zCn?K^JR*<*=DyZPdEU!I#ZWU&G5e^*norR}T@mY9&^w$)Mir^2>(^(ezN*s%3aD0% zjgk#3PWN2%?~YlBQG!F!8tzuf+*1CI*C{#j4NcF>VeWZ>>s*9irp8St1?*CUmg7Jx zQvC`^w~wuO4Wp0CgC*DDfFd^Ny+j8&ro9A+(y6qp*rg6+}^?!v5> z*A0n6&2*^El>NpFWjcjq>|8ysWuGs2X@zVG*xgYx^USoaFYsIlDQ5*oRC} zl3paWMzWg(QvUN(x080UUAjW2Lo!M^ddgzpyv*4+t@5#PGV0PFUeiw32ah_mblw@8 z9nzztqxmji?tNWYc1pLSLaA~BX(IF&B zt-tqati?z?=@^UUdPqG)xH`&bidb2GsR%y4}J-yi4$0Rnnck+QNq(}Q2e@j(vaj&Mp zDK&Mr#`sncy^^D`TUkz*`Ky63Pw~nd94VrG6c0Fulw^Welp!AtT1$_X$a3h2a**Oi zHPZL;ok;}k!0FEm$KJu70iZbM3j0@izgwd-LQC0s>$>*(UK7f8x3S?G9Da6o_Lyz! zMoS){u7WwwCG~!kpY_25_x9W(s><5!P5y86#1z7!vi=CiXIM;4PmteQDh_Ckj3DsYcM`nX=C zbN2S8o~B%rfb^{yv1e2zN6W`?{gZrT>8fxL}`=~V^XYgiv_CvN@ufVrL>sacjBNp;&-YHh8tla=OrV&RX7 zvo|Vq0+(@^Sx8&HzSNnQHbF6yD$){)6W?5d9asDvo`d2Z&!RMIJlv2jwe8l^Q`IC` zgdq&QBlahe(xVusk(Tm5<`^joJ;-CA(-gG|bDgUD!{IV;TXy6#QOjHIdq?^$s<^5U zWF~Z@k4gL`dHinm%Ju9hLfIn6yPhh7duCgXyYXgZIN~@fC^JpPf!k<-3zRChj?OmT zch7wbgX*i-_C8^#TrcK=`Y!1)~dxQ<{`8&!-n5i(u~v^EqtwC=qI6?evY( zmhJDqy?Z^?(<%Z^d=y3?8&DS)7l(^1nDEvmOUWpHohm?wUJXW14H#$au+huzj*doQ z>^N%>`<{S)C?Sp$@}HkI-au_D2OEG8Q_MHI$*kgB|pNochY{}fGr<|(|;DIJF^YYrw_1*uV z>HPWDqVG_`(`?9fP+dBbHFZ%jCn9N>$2XM<+kO)_HI!#bwy~Wt7<~t0d#$h%)77=Y zewzOBoUQ4jd{-}I)(q3Amws|;r`#Q1qbsD77;L`8EL~<0>36ojLaM_vovlAAJMHfF_9Df85yK+LLc*ABNCjL6)EI`jeRR`jop+r!NkwKN-r{ zy4ar$;;?3RqLOvzeiT!X@@AVn0k3d4Q@*mj!)x}R3N`B2i*r??+|w?8Q$j`WuggAJ zotKO{KSLfWw0~v~%KLA~Z-PjRcJAe#ibX!5BrUxJf9;5F374Ks_L;tFefRQ-QXSz6 zo82)>f5T7Y4CYFe%W;l~bf?&k!U_$X+mYQFB3X_8gK|alImunXQ)M~t2&~QhXFRxG z%=e+s*ZxnrJ=)U73L@A(E;Nz^QZBeoPlhGS^|qYRJ;@xUTiPwj9HWnbe7h#M+mjRo z@KkBdeNbpF6cUI-Z({0jA#;m3)OyvukX>(nLd;>Fm{vK|L8gedb4Qc78y`BS@FQf6 ze5Az0g-iCrk|!1Rdd(bGwii)%i+!1&Vzck=g|O*ewzpHapFs;Ah{}Ig3G%Qq_Q`f3 z&%nWV#S+#ju;Fr8ds&-4Rn2d*6(t+^q3x9|2K39(supl<*yynZqYd-wMQkHaZww^2 zz`Jf2MC2D(^;`EiaubB!(_SUd2lAmQv+V4>edRohp%_rMJku*^ctCjztV8s z(J**)%`hpqU12AopZ`AprPIwRtYt%l@9nx`rwE^Ym}fNg(VsvqJ2%nk!%Ok|{%mJ| zby@oNaHdnOVW&HNd9--T77l*C-WshGOzrFPM~49y9WMJf0q}mTMpz&GlVXV#UbxiX zit#gJ&>35OUr1iRT{k2F*Wd_(jn5y!wK-d+ZWjAEIZwDWF~Z@}iXYJ|wjV;#j6lE~ zX8nQldN17B){i0RQRFv9)SqT%^xd4+K&108s-lDEt#g;&@#L8VUOlnI&K`jCcQAf^ z@-CvuW_UY5Abfy);N`{g z$MZ71$Dod1)ep=P{+&N}N&5mJ_ibYrE$rY2C$Kh&H($O;u9fH^8q8fuy*_CBoH`)6 z9WByhE1ACroLabkyBmxuDxSqr&kyXY)Pj8;155?2+5et(rmR#Gc@u#7&hL%{o^#bx zD)qioS>ZOB-#)crj}>%W3%hrr_8csmK!Xx;6y&{9sRzZ^QLr+Y2=ap@I%LnAf;nzSJc zZu6LjZ|Aa{!Jh6c@Xmd{ht!9e1n~CC(pOOE5-K9pbEjySUwwgq6ZzB~lHhH`vJg5Y zHbG2AH%AqjZPs_bo!%!@Y7o{Q<5%WPyUK6yk`rU@?nIn;>5>S#^&3;h=UjiH<(I5L z=iBY~szd}=PL!)h7g?b05cNa;tJnuto{t`AFT8i4p?&B3alfYn-zwzw$xHDZ3f>Hc zV03+aG5$YeI5ptn)uBwyC(Z(NBS-pbW)+~}2T^mz7D1qt8j|3Lr7xaQg_mEQq`#?9{F=IDTYX1@q+Y0;&NKMuF*9-7by}|0v z8-tY-P5s4{1dy>{)28mEJSUIP^eRJ$JumL7Ry#XY@8z7HnY`!QnwYu|nPn=bd*x;7 zCgHh*W4Z(ii}fWQ7hKwJ2iRd0%LAV^n*v$E*XgSfJ>EWC@`N-(cZ{$A-nbYDus z>u#vUGnn{HC@yzF0hHXji})RZ4SaF3%b$O4oL%}uL<>)BCJyapIqV6~#}j0$hB58h zE@@WN9?_u&kSMD5-AB7v91F@mjYR7|ci!-H`X!lRAfeNaF}^tDHwNUy6KfF|sjSR3 z$ZlE3RB_O*u$?f*DEiw%M8`DNRW8-91>hwy*P&2^a@vj06WZRCfqEIE(SJLrf{~-M zGZnjz^Op2ftc*f_WuG)8-SC}K`^{m@Gj4!f*?)l*Vfv4MVWSpBRO%0n@bZ5y`gls3 zJ1)*^b{t@^{);nGD=0Y$Pn1ets8(U&fI5#shaUGoN+te5CpdA@{}<88&xw%b5$ar@ z2I!`A|3IVq9_TSkEVXwyMUC9RY~+7Zsgdy+MfLv>FlolGD7;>$0_X?K{=rki^mVoV zkkcD2`)|BaHygkH$(`_G$v%buLUaFfoMrND^B+WK)IF8WH;k+A)BDT$klX!&D6-&9 zd_qERgXy?Niw(X$cy&pmMP`U6xGnx)D90EHU5)K{f2KK=BVhf|Rq(~84|Dye(%H;$n8kzg{| z2&|WZomueo;$^30+j6_m+_wM-9dhylrBD1$!<0@a?qio24}3c}?ajI9jXZ}};N=&G z-DuO#=O6DnmhIw~{6NoBzB>4`v6kQHds(;LbM-f;C7}^nj_W#Y20!VJx&{G^XJ&2M z0L!h7RcJABrc`W8L2NclKtm7WiKU&zVwzafkJGm6e*KU$j zKzE!iYBfeT*1bo=$^hGb%`|D~b2vHfF}^n#aIm_ zX3r-x;2X)Z`AKZlGbfxP-N6$ZL+y}9A0>j}GYf;I3!J;!&8dWeOe3U2bsp;VFS6J+ zYq~+M-I>}dW<+-h&zkaWY_o5WSe92|w3{y7xEx#^LNo0RV;F1cnAtjrYu>IO9vLUC~i*A6kJFIERz&>NVgHXjHh=}acW(%jqG?qNbu z0*Hs&^&2&$RGw`fVUjQtKMn5BtXpN`6(L$d7Jk9YnHsG-DxTZd-6CmYr2c8!J`Nm% z9a~+A-9)_%JD0|T6-PPwb{b!IOl|$_{0?r;p7^fxz$;0r%^GU(BT~ku)Dh#;s$&&$H~)%HOu4-OA0ld7R)MY${yAo$uwO?&rtCLKzdzQq{ zA#?L+bYJ3<>Bk%yN2iRA%5W2_%_P}(4klH4Tb}NM!8i`VN8U zEbND5GzUYDWi+xGxEU_D((QQ~ZF@eR@m-d#<{Kb1R>xbgjcPew5d=q#R&ds3wIJ6w zvhb6zO$Em`G#9+}b)Ijx6EFmZkm83MSM(UN*d;NBJTbeH#B3w4I#x-~tqABN>!j+f z-`JMe1f^3*pvDdu$q5eq`65B@wy0OOmyK4)YNHpy<3Z~slV7O!g+82)&JT#EwiZ%; zdB`~VI9tDpgz%neJ^MweTYutoqmNGNF^rV{@DB>Hc)zW=X<~LY#FsSyY@R&7p(Tui zj&~Y*iLIQ4x?-BSEW^|*A7EW!;a8N^d1lj4TWz9D=^-@dW)UTiovygI`r5UzvMp0>bjv}q@x(eye@m2 zdCKppLs(KIJfYzFNvu;rWUp0Ax)mu`O-{`fN)@1{++`jYq-_4q^{itdmXeP!$`&)T z8y?dU{NZ=Ab--*`#g1C$)8{wo2d8A_eo0r&QG!ov7caSaitdgp+8SGR7z0|IJWG>YCKpSio@2WU`d7`F`k*w!u#w-M5>mi05we!veoK!9Dx5gYY9p5}zs8iL=6Nt5R+Zf>X zX~aCgGd9*bIf>Xn+Ma(WBl;Ijg z`4!=%&nTzIEvFK$Sx;(2y>c=d{2R~I@iD1H@Uvjt zWbEC*&s+~XB!`R5uV0*ET@Pn-HPBYAKCzyV^4OPPdG3*t*{lVui2CS;^|t)Hw|vgd zZ);~4Oj2QR9vHJPVsy!fsohr@Hu@swYw#!AYZ9-RVY{qqFpU@dNBwj3y>_G~;aSvl zzsRLQ!-7M@jp!_794T~va{jUanU89k@1gnjr1r6`Q_j_waD!{-qEU~?eVOOlN?0I8 zBNX!@aQjo0ZYvBgd2R^8`$?T@)0wItX7h#HZNEV|t;LtjW~n90RZ>W}$m>FZSgst47)x5T1e=T_gP>;{1AtHd*9<{^Lo#dk-J3%r6pZcam9JAwYmtz{VQ$X%E5`80E%P&-ypGjx z0u}30KVLdnIRpe%k``;Ko5}-#QV@7;M<8k5o#lCd9BlNv%4MJG`^zf+Nc#`75b!6T zjwIREuON>%HDQ5E-d|`eXT{e`@cpYJLWi}FAyrvVLn?*hSC&~`faFm4RSSQiHlJQYdCuRrE=++7$@8se{jSb^Zi2`TXP|g* zF?#>EwH)=A+OkcD9Tt!;El0|%3`ziWWphlo424V+*j;KNJR8wz=bn|g(}x%5 zWt2?0o!BHa$+O;OC6?&wM(ZmMcI&ql0%g0Fq&B)3+lM~AE>f*eFBwj^D74oj=?RH% z*&w30%{lwh$S%d3Wd}dMLJ*dvB8s-y>l!}?QArCfpta21DIn0r;8)PTX2~G!%Chj@$zEo&v1S2e04UkDg zYz#JDn_;M(o;!LirIUX;C&r5@QOq57^c3vpiH7*^`Fu{H*m%L5cD@CNB}u%{3_i+y z7x77#mC3aOw%g+69;zJ6Jo6`{Y_>he(C3oZqRzE*N7qW~V%#omEWfmwqAo2IulxaP z=2ogadP(6sQ0{5AUuQb_RxZi!0k00lA#(bRyQkf4Ud(ocSFYyIEW@M{MmYoabXNqD zkd0_pOCsN#BD&g9P+*%cUdr(8U7(|H7Om~o;l5rcL$IiV z4P#o}Nw>0?Pj+*VG_(Enp`G;(LVlGs)GgnpKape)-9)_b$$;hgaoS(*1*~sRS1k{y zer77Xq!Ln!eSY%YUs}}%Iit~l{mtvL?o(%v{q_~3bR9kKNabkZNypURyuVIf&4~z3 zrb^DImd2{FR||c?0=pDcO6eYIFN}2qWrn&R=Hh34e2cHIFR{h&?bPx#@s+T|9t*Y0 z3#1%hS=!$Z`XWoIrnUgCe5EMM);ed3qb)M|1=g#U%a!gusj>Gbide6Gl7-jZqUSuG z;)auVS6}6yJJot;tD;3yNtH4p&b^N$v2utaZ5cBzB=@(vJf&QR9q(>>#-*@V>&3Eo zYT8;gu*Pv(o%pXcd#Y7xYt)}!i}vRj>?kuT{WDaksHu}jBR=l$GvK_>l$KS0$Wv-< z*K&lPAB+Vk71v#v?zchBg`O0Vko=&rt5L~)4T)x>nPP~Cdh<_^0>FuvMM&9BUXcoR zIB9h5#%r2xJ^yTNmKv5A zkF(5*d!gG!nTk%rb-Z2nNV<2cCQZJmB}uH0m)2x1^l=`Sg;I!LngtTBlS`^j##d#A zS<(KgaX*noV$dX6JOBetIacSA)xSnaaCeL*q8G&3qX#aLw>8Z9`wTajqZAo#q$UcT zJ%xIsSBgSom5&1)>eyCk^hyaS%xaZtspCa^iG?tU$AB2H;WTck6b9IZ+k zdA_w8S+(gqt(qbTavu}ULJ9jLN_~IaBmen!G5lW8v@4q;!M#=~1>P3$#A?kj#LHVy zLdHM#aU5z_NksP}h1(ZW<(*7pAmgt-redP`y>AcmL1Isf&AHhU1tcst&n96O#baxc zwovX(YtJym9>y%yI4Co+8|fcsw|Gda+MQ9qx&zdfRwt#>10F=8A{M@@cQ$TG%V$<1 znMj-K{DQG&2Gi1qPF)BeA1|Th5}-71~^jiu&}8ukQ6I2A!njJ18|Z@9xzV+*V&BZ$F3!Wmcygg$ar zFnWAD8Whv?bKHSll+7p7VQ*t#q$4^XGnihzm|wiV0go3ZHe=aQn`wT1swAyOSyi*C)=w}PkX34_D2ssgx z*xWd8hm>E?X$*##BDdcS`ryL(yMU`+UysY`LCf*b37a!6J1W7tIqn!u&2Mlyol#J? zV$w?;@sEk;4<-XEb0_{muxkYkYhj?HL4#Dgbd*R;G9UUP1@NvJJ7@|r`%4upX#;uD2=c-P*! zC@j@w-+|``h?vbnff5I09%GduNbtwM8i_#ep=l~uNnf!=fR3{-hV8CRY@kIoT6_Gw zX9cD>JyM<@RTdAHn?qC?q(AQK9nBak;gpEReHiMQ=UIFTw@7VGy!#HHepmit#a+oa zPEz>j@gw2)uqUf(ovnMw;wOY+G?6>dwjt#j`7tw+Bve^wz`dZh(HedH?0fvB=a*^l zxg?o8ZDk|eX+OmS4R;(me)Tv0-Hu=~IPeg&ZCT(=yDiR^!)^VNKnnVO8u>i6Zo3S& z3SXxSF{+{&nJI$#HPyU>UM}gMuAtGypMQMA6Ajro`-PLpv!`&}EE`AK&5^L9jZ3P! zLs)I8W`7SNh;Y;n@bj)YsRT^U1`g{7&Q)*__*#`N#W#oQb~LAx@lhChO+4vnD(_YP z8j))&%#Ck;dxLUk$c<+dx∋X@J<>xCF1a_0L$yuo_V#ys}Euu@tC!gvqIRcGz~ z*`||XkXNe=c#)xTWF2Xo-uQ>6|H)&~QW_tra*;w8VqA5X?l@nGRv#VwgY2Aa=@~z{ z{{~w>RFSVIn*v2k*r0p{M+s<3bQ@#Xyf9%2zVYK?CcyBcp@K(TM7Cwup`&j2c~hBic8Zc)HyrQ3cSSnD0)z>oU25ax{5g z#tLlLmf0yTTMWwyB170&r1o1|01_FdERVItG*jTm8vAr@db9QrE>6 zTqth+PHQ6Aj4db+!@MW3ll(I8Y*jd8MXDJjLeHTUG&8Y)=y@h|`=Q9Yz1Fy$xk`GQTWNPkYLL=o?prfkZ+ph!Tx{8W2qwskU}Gl1gu&UmLe>7s)h(bZA|D9Kuu zNg>>eE-FzyAKQ9WU-Yv?@Vg@EG^gz`l^hH1O7C3Yuu|4NnS{x&+x^Mt6%7AL=-BiJ z_oS6r|HCx6JAr*BCcRRYEcU_0HHdTk=;H=Bvay(?wWbOTHo8p8P^a39=$2C|jFuxI zfYF9IfrVw#_050ajS4>1;tO4oaY+=soL3YC=40yUnk@3>`MNw#tb&jo0N*p)el5yJ z8Lu=9TDz5OwxkA@_Ih@8pT>tlaF9jp(a_UEkK??LF9OG`>9?#)k3%Nga;iQbHqw-o zl%!?MmVA1&W$GuDg<2IKS1tV)gg07mwlio~sf`;o4egT=j(yCa+tDEM^GVh#6CMQFW-@xl%ModS$qdEQN8oYIhhgwc&oPBxjtv|g!Y0)#W z&vBN;BFp)&OM}q5aUh}c_zN=_(=+I%VwP&0*bO-9Ha{|h zYpXfgF610aGS0~zA6-wcn%b8yU}WCUC{#YAE+IQyEXs0j&!oipEunXiX$hPg68Ub2iL~M+Z*%p2?JD~o3?Mn zrreSraGp*4;J&m~R|a6idA#VHJ-#%k9gcQx#a|96oF3eK8F|NbqI_#XON4p`-H~5* z3d++M0kxy*-P}IQI3#+=nDJ-l&#y&AlT#+Cn~SmJgt=0DpMjJxqJ_#psg~~kgptJS zcWUOav1+($q_MyhM_%NsQz~s{K7wU4@_Z4cH{Ie;vS|%CTOi;WmwVLTUc6tB#8=rE zVhds1I7)>o0eJkfafAZj6E53Fg9;KsX^V~3evF5-ei%{TyT#|KWHF4)LZ9ji;7V&* zyll*dy{fX(ys0L|KF7U~cG&%>z;jL@Zj>ONd|$_k(NS}^G>ZZ(u9Q|@ocuf=GKH!^ zdhvVA3udtoYZ!x3K_WzguV6{cB$!&)*Fb}`R3;NvBv8VDC8U|?rN=Mmz5a_;TR8Z~>D-}WOAhU|HWDBhKUwFH1X{0;6Av0hGBX@L>+X z1c^V*WSzHlkA$}MgZ7SWS2tD-FMGw0v0Ao2lBBY{;Vd@GVu=SQFVY)zAo6aUnqMF9 z^)fCTm7dh)QtYcrAsn{zm3bdP`7{|9)6~ZF-~X=L2$D@Qhat>#d>t9py(h{*s<8B$ zmBfa9^KMwVwEpR^*`}R3Y#qC~i9@Yqx@n>L%-cDu8npNOR#R|c&D#>dLO4>=VjNx$ zwx-d&_}tbWyqaN_5$LE-*a=_EgIa&i&l7yDA*n+mqyNq2evUo>ZLRDJP&9yF>cYZk zuh@!%+su{W!o9Stqcv%tGCGWBYRVuBaYec_8GC87**!7@u;8tCA^%8pour*T#L?snt88b#xn4ZGD@~{ zh*$-i;{A8cPIBqt>F2u^r|0jh_w+gC99${y{4s2g|Mdbu4Xeqf31X41f+Pkb@B%^; zlx_zV^9f6IR7V?1l439x7-W#r+e&xZa^bO{0nQR@~9^eR@&M`5uvNC zv@;{>>a&VZh=z4RVHj>4Z(p4WLj=FpC)`Jk32amv|JD83mVxm<{Jx&kOCgOmE38m4 zm&e-;Mz3ggbYdbYwg5c}Y5+7EWmRXdJAFRX{;S>&VAN|s_11x%_)2L67Wu2oGo*ZT z*AhQ@jtzIHhpW|eJjL;GKlSGEFqdiMo)Pfugs+Na^ilF3^Pmnh)N}YHvJa~I&ZE8T z0(t5{{!?w6D}bKncJriEUAOdTTBQ1sJtWNki0ioXrm4Dry^XoG4}356$Cn44FZ-$b zjKpGOjBkF8{YM-hc#oT&c5t@R*ytC>!p5dd)%0=a?azNKhizZTFPY8E%&rG<^&KwO zd7%1tSizS!e>Fnr`=&5x4=r`ya~yw0at!?MNmNPrkdJO;nNX?pzmo59_Ob^7&-+Zs z_4xmK6OhkN^wHL>@%c+oy` zuip?zal;3IpYIcz0AYl#{)}+_$PLH85J8Qg?GMkmhD)imfR2wKA~yQ@%g7X{vdqMo z=OEM+bvf)>h?pCbupPy!*^&o{YPfvH-?IyjI;xDU$wSHL)4q8Hufx ziwlmqlzS3J8+hu61bg3{HnQu`AdfQq@(Fj%(=l_I8eDPPa#gj3hih9Mnk-+`k!ddY zIT^KhGJFY)hT9eHj(u8Cw++|sA|+I&Fvyq z(A5vbXNJ~J>rmCIsgxC4@05vHxE9qk<6}$Py}cBiEVi?OOS=K{OivzTXnW(!D+y%9 zG^j9GyLhyb2xrPw07P{`g|dx$>kS}Kexza%Qz4+b4mOvxD&akJ2rGv5Z+qJ)sXfdE zXNVBgq8G04dt%k~fYNhP)AoIvudx9`xGx@5ouRJpL;$gs2|;7!;vY+3Mn?%$tpp2G zBVgkgi;er|LQj66c&z4F-r#_0%mK}K)`tjwNKH4GeV52Er3i}Xlc$N>Z*A1h@wDW( zma{7^NcwjX18GzR)9P3APA$S4zU!Wo_R1p&i!LF*7fG`vWHui9)$z%ZT3RGOB}|k= z=jcKx$`)p9Rt9C94}E9}Qd=v};uQk0nO;WBUp_u-wL`)-dz&a- zVTI;_@UeIG5d6KM6(cIF=!G$;=(yPT_AW4>9s5~OL)#^gR}ZDQ?WZ%l0Rg0F&IVoZ1W_z88rBg(M+Dez>qPJzSRLbmWWC&c zp|Xx(y)H=cXeyPM8nyVaaP5oS)_nUpZlD{})9FgUJ>l%3Bb>BgFr9p0LjN*PuLzLi@tWZT1w zI?Z4w|9AHf6Hu*AwK(+7L0BamKyjhB@7{q>ZJkGNqS9LInB!V*C{UE#-<;z9CmLsK z-Bu;#R%yOe5>)5%kt5=evAa9?m+1b{borPG3+7^6IMlqw+;qzu^&-fhV#E>5P9utl z00;_$b35m(EilAr4&&DvMbQH1c5FYj z2=|+dyRUQyl#Wi@)Y=T|T-0xzmKufc#1XotUbr8)nubRo>2lvyRc${*0JG{X3@v|G zuG`;=OliM`;TEU|)t8D!*N|MbC7O(bS=Rq{Yp9Z_8vcg}QyUE2&2XazZC_>8Bb`|a zlPoKGXDZxeCc=0Pq@|k*j~bin#t{?3FoVRRRy<#?qg+|djQ)B7x}JWE{-v+2HjH^s z-b=^WsZtGq+^lbvmA{q& z#g-EkfEL68eG_IkD4=33I?=2$I;o^VIq7?`IuW}GaR8t!1Smyt?*3VowMaU4i5xJC1hBc+}0<4Wx@!% zAVhSdN0oqT1>|oso{VNGys~CvR%b+(s(kQPuymqd5MHL1_rB-U38E-XNEo#ll2zF6}sm6 z2iMucTJwCvJAZ1yj&Ik&HE2BQU@#LVQJ)q4G!rjj zJFrmU3mrTxDQeWqFJq?TU#X((ikN(UIG7|&SI8&wlAFXXqMGSKh&$9EcDU4BMP6+` z)6mSSIIBqzv)^cwnQi!zLqy;+>TH8A{)T?xe*3OTpvg9OXcDGLTdW+OwpbO$A+SxnXb+{IutWPP$(%ZnvXq_xL1 zM^GW;GF`QaBrEihOEOAdx!qODv7b{-``J>zY}lj!t$n69oiOSBGCi@!Gxq8o5n|lg zFuT>FI8)P~(Za&ubZY^O9h0jyk(@0vgxnwWp5Z5 zTKYctKOg=l`_w}M{95hAJVhCXBA+`utiEZ()i;wIKnpi8~I=0kBL5DA{oyD;Hsgjr3 zOflUPc~!K@-}!T?#kbKSk8=y9j)#n1C?OAEVP|gn_5|beWoU#{nZbETWCJoOiz5a8 zP<05k!>#q`#i}m$J{vf#kVfmE(dqHQlV#HER>2xeT%4ki?d3SN4C?d4ffOM`4A1u7 zPoc+VL@q14$pa^tPBYbwIC=G;b=xznhUa-cY{h5@Snf?ud@;;cA@B?E<+gCZ*n@vH zJjRpKgV$xa3M^;cl*`Zlw&g9kd`8EU@C@P?v+UN7B}gsjH4!l-ML$n;ilAFj2)Skm zqqN*Ry80r^@ivuStseE}M=?Vnsp*_QFokw-jDFibHzGw~Zj@!i+q>MN%*SdkAI8My zOy=+kA4TW^td8|i-eg1sEI$rJNgK#l(QG!j0+r%D=!WxNNikk9kz(UAy16hrT zQ9~LcxO4SOZaZ2fYV5;pq0fo=%;{&P+~kVHOwmjHyHl3T#Y#`ZB(yxiIz(?CjQNGI zMWd>3OcFcdtmea3bUn416ZG?>9rtrf{U;-tm%kBfVx#ro!ADZOXjTaIK?4ap?+#T{ zr}9aplv8Fu$5zTdSsSG6Ol1?W`t2!@N??q|=O0aP6@B4jrKbr-XVX%mi1OQMb1{)(3&vREWhJI)YrB(ThHFg+6SXT!RnR8rLh5R_@oyem*Tf?>rE$QaVeeCiv%q^I%mFZEG=lZDznfeZs2EbnXRQ@+SuEEZYUo?P}THBr6!F%r?{RRfbs<$=OS32XMJJci|LI)_D_u@cbd%&I^%WMK=r>pg= zaaB$@42BHq29lU(VmQfA2wnbLdv6&PN7r?WA|WKfLU0QS&J(mA2ne>K5s-o3QwUSs&CyV>yl+(vz*+Fh$QCkHi3oB|Od$jeWHHN(R)6SEN^_p02t zP{UwGXHobOeJfZCkCA$Y_|Cjv{ydEv;?1pEm4*AFI4b2WH{ZjQg{ewAmmy1e$HU4p zqNmeq<)+yO`z>K{qvS^6pkpwYQMFI$^c&Xicog$@$R@AI-o>LFEaTBhe3HtVm@S%R z)6*K582>`1&g>dot=9X+Ue-4E+vMk$R#zOctw~ZvvXMVKV@XyzqS-*6QQDj`XLGBQm3pXuotd!oc=C?2#5jopqkJ0lblSj^n{63Hme*THt14pnyE)wBL5+;7Tc%I_*cZx&!28ZKa98G zAJj*jqtm4CJC#|80xGe?chzw~Z#?zg||CqSR{w@v0{2`cL9#y1Rar zW_y_dt52n_h4KH^TkRdr=6uZP3mpGn`ueX!Ivmv<8!=SCXxg~fVAX3(`MRSy4RuYc zQIY)Ql?TKR*C%6Iei|dgBhI^;L|V4`eH-~ad}0AKynV=b(~c27LFQu3k0&3=m)f@@ zQ@=4FAZju0QHba%N_SZH<+@`4h8}Yi*RX^o^^R@8BY{e`n7wfdOLeAdkhcj{aYZu% zKnw(SRSj?pn=HJHN@C}>GxF!jEff?mAmq^YW(itt6O8m9RV|6>kiK+eQ(Hwd6xk_G zr{zz4R62t9r`GOT#)oNT4od>Ukt?Lf^clfF){zCZOC?%#|JiWVs*Bo|{O= z@i1A(qPKA3R19zQzQ#pKzs3~?8HYg>zA7y8308=!Zro+HGC`F>rz+!*9xKnxX$#mI zjz!HF@)OrFa0z_?J8&VJU<|A2RtHS?dTfhYdSx&i>+{rEqhCdeYhP8a{$ri7 zv8I40p^CR3Zp{i#u&RqEYT289$0lzx(lbkSui0J9qD@; zQ|B#7V$H~OsN#ipOX{y?uAT_fDr!oApI1t(ocn~YC=&|ztXGhhr>mUql#rwhrH-fX zmWg@lymS#RNvE7L*2Oj%$(#MvW4I}pS^L)BG8A}Ui|J`ZOzu6lYW?ku+0z_<{6Vga zp%Iu*SXSHLOXl&V>ce2<@i6nBKc#DbpWRWd)V%KICZsIwVtEsb&fN6cbpNnD93rhy z4dWUeYitW+hawdLkT5^lH(U3`QCD_37|Y?Q+3&Hij^Sd}(w)?-4(;zVb3-1q*!=6L zFAGuEClpa3bklrNOlYi+GlsNndXns{VLc{p+U?eMVF&Un(p|$3P(7$CamPxMW=K;h)@ASsH{BcGL)Fvl@JADya$N%4{^7 z+_A@D0Clu9S8oEQwl@-ku<1EaD>KHEkSFaB&!L`#yMy3}OSRNRPADPkO~r9(t}(9WK)AUwVvG z;)tv!Gq)S-JV?c_?DV(`9;1wZjwq_7Z4??>Y_D#_BAF?C=HP@HIIyDELSNkGr5irzKUe%+GzlQ z1w5T|NA+VnXkeN{)*$8$X1f|P9nU?|D)pJAJ|{SX*wgrU$njUUP|4u6m-wuT4M%dm zpyu}h)HMV8dk~unWw*QeQ&y}p;b;;R+91Bo=jc(_a8;Rh-<_shzEq(NI}-fI-M_{r z2rbOP)woR{#kCE~F8_B;t7j?xQ{z+0Cy6C-w+nTyJYOaz)hLn?lMo@SDS^N+FHZ4= zvgOK7M>9iTJCs~62(*^kz&(|uBH+YyolvF)hhs!4*$$H29Qyo6x?~e-eq*_}U6#K^ zR4sv$K1u6VQDo}KSc>dMlJQX7YzH)%*;^1g@=7-g5e!j4Np7D${KZ)2jX}<@`aPaq zQ(NRpV*IjA*2sY2cZiug`y_zTF>xD2Rm&jam9 zwf2(hB40-lBfHMWsptxKVYB}9(8^mpNA;SE~6GeNh=fZaZhSbHJa<&T1$Yvo=>xIrv%bhHtSGrJfPWL2BoCz zAS;?t51iuhAE?18Wb{0L$Hv|2kx<_GX7;lj*aUTYE}0dku=BX=DJrrg2%F3xs4wz< z)h}Ox-Pi`&bM>*uC{kAG_6#gSNOs=Lf`*)9;D{i~wy6oZLJT&7E@L6tBw1Q^t8r+k zr_W_Y?S&LzWK>(bD^zvv2Zw)BmkG7S?xw3XVrR)m`?R%~5-YdjzBs)mCW9CVHydhDS%gy%*b@hZ4g|rh93@SANu#yEQy!@X zd#_H?tg{{>=wXaP)zfEK;s2=tRYSo=bKYF3UpCd=MD0k6Gs2}OM8( zCXM*9F(GWu1Y%`u_pfQf2k{;8*+ejLWadUpgF88-fgR*QEU8IQH4e%MEv^nY#0x((nK9@^0c zyA6r%i!Zo!LjOMhW~92BT3r!tm*Gr_j){?x(L_I94BNktWiM&fC6ysTB+k8pjYEi# zg;kCU9JgG)>TWP|8a6^i&bWCvWly>k&>okh^tI;VH?jNLxhr6;E(I3M;1lQZ)O)#i z&-Es(40_S(aGdrm~3PKof^znk*k&uLAGran&HZgL%)3;l4iRHhDEQ0+-Odqe_s)l}6&-9_7IeZpyzdeEAO*fmuN(XylM#e391IO?p< zPdZ}6x}?}72`2H^hherRXHfYx0sKn%u7p^ZLjSZ0zjz&MzZ&5eNFp19~#x(UDDoYpQ%PTq?x~5KAezGkW zoCG+eY{W3|sinxdicOxN>RG2vN~WqCG`&stx4~}Kg`5tQJ@HL31xd{a>7_9jFE8kxq1Z{Jd%U(gnAl60=<<}QitO4GzyV`lg<0ViCPMSu~i$MUpx#E~4 z|GDeU$hp=swFQlv8?9@Js&Y79JP%orF~sn^y-WNcBEK)W?G2e#$QF1|9^O%8!2fx- zGa5BAWGyE)0n?G*seZW1gji)O$g($-33C}}j9>B9OrTq57uC$@7&B6jF9YdLcB~LJ zA2-7eZ!ZrrAFiVwq~LcDn*euh_jeZ}u`5yDFdu~2?t}L!Pv*nbgUq?x;>zX0%)}%w z-oAJ5s{+be{Cejjr^lu6xw>jdE~< zz~@g^yYT_p?Mpz1!SR&!$ri-9aAo36VXj3orr0VUC&IFe?qDQk`S%ewO?l68dhfJ+G zu4;Mk(PtKLHynFtCId^O(sntxI&Z$5<4^jJdvmOax|-Ie;hFRae4TT-CfN!qw4&B9 z#ZDXuZ>m7HSZtWyHy=DLq4fU#&BQ_ib7tss#L#+oiWSZ9=fStJln>5^Of+m@x7k4t zXo(%{cvYC~Nchq2nG>JrxU0@nqS8UBxv*SIe{p}{;&OhMSP{jR%Y3(_RKEhyz^5o@ zXD@yWS@&Emm~B@~?P%zBqY~r6_=lvVuMaKE;;8Vl5O)!77*qF=OdS6-q}bS>4M>e)HM}f{A@0PkUGhg zE19yxKI#$E&Ls3FdBlh zU}5DI`lNIETwYN9+nDmFjVnOX>- z4!stP6*^`7d|x{glCP&W(JtFXPIZhjD)3TfEVQ!kz_N`GW4Wz%a`1a)-L+%>W_`zz zJsP~$UA>*rzK>D=)Tui!z-T@}qZ4{=P~EBZE2TM<@r2#i(kdKpK}9;>&Cbj>J$y3a3Q2?82W(wThv}&nrVfIcIG1o+&Zlq zd?xL*ohS#MT6*XR{9tYn*`U7M3j=f=Ns;m9j33&@VeSPQ^m+0mZ_lm35Ajq?pFbzZ zFRMq_*c(|@cl{E#e*mNG<2(nx-02_t)$lO>#A3R@CkQn zTBRb~$s%${szpjqc1Rfds97zRFqj&j8sQXsxBCX^?)nFCIz6O^yyf}Q?Uv3mjFWeC z-#%n+zf0-y70h?w%}%f!I9A>0{38qak5Mg@k5oK)l5Bqo)@YQ{8M^O8xN#+w3c5AS zg++y72)|-3Wy8qvIJ2&6%qe^hiN50TXmg3VE+BlEB&xBFaT<0W#5KIlk-D`u6hQOc zBf|RJh}5W9_S3ljqU~iQRARzlgbi2r&tuR{Nzz~6dKalQL60J}O-AX^kJT2L2%DdO zXzkm{5#K*YQ=D94P^3woAW1Cv7=?jQxRoW6O$KR2$P|W@K(^+ttI+7=TmXqk?CbIK z$hC6L(J{@+woB5CDX@g33F^z{3^G#I+`i?2r8&R6Y>bBZlYkMVNf+k;NfD|MX{Xt+ z6aEIblFs*%PMV`ePNE}7oV@K>&b|tG2jovYOjKO&(7N}INLtA$%%mHbd1|#&+U7+i zO*B&~syqJrJEGTA4&VAj$M%DbEGhdFwfeC_!`rEi9$n}^+AA>|l$6xEGW4~$^yhtf&rs$R3_x(Eh72pHVe=C& z^FfV~vFH?^e{wgEh;PDx`i~LJCy*C6tXv))M3Xphlkf-b!Ns7H%aRrSxl@%EH?+xS zw)f{YXRSQ#6E_i(MWrwj#Zl%IV zlmaPdg+C&vAnN`Wb(WcE@8Razb$`3nL!f_`IC^RC=ft$E6=%hlt^xBNe&N;RTb?(( zi678T^hBJ{==UDZ+0eCzG*$N9k0Rj;j9VhriiiX6!!GBuojble((BN~)y#?SxowKr z;LM3QR8QWI3m7+*4Fhv`#<#!xeFXiR);NwP=otbgO_)^<6G7B6OwSijy@k|)$&hsSPBl9x?f6)F{|zf*NTXEN~({Vr+ZFAJ!l?`NEI zy}>W8t@8y3cr1SBL$jbm|I9Zxb?y$B_`XQ^dO)go!HS)FJa92|Ii^agw$m@$Ltg9i zRqR|D2b`Ej?2lLZWqMQ#7@^4bq;^p>@b~*n^5Ss&Ge8c1Zy0y8LQsBfjx(WxcOVqw zrjS!*;4fZcf^8u!w)q8@whPsDomEOUN|ExWX9<7sgQ_yR4E9Q^m)B)N zslqSIUKeW%^s+%a1O-H)wf?zIT82sNDXkC9l*Z_$LIhVzWt2ZGE_}j8*d(F(7-d(o zcPFUnb5xeFOP$$kFYiA+8!V)9Q?sEO?F$ow%$5U1uPEw*s~vP;&aUXD6yXs`st8fe zCMTgg#b*3LLXfw@PXN_6hlZw+JwhTC*M&1K@JFD;e~FhlCIhWJwPEd^&e`%Oy9S(h z!)Ed0a!tZ@ED9T_+88|^z&!H0^?8~&roRmS3xJfhaxjZPp1@tRd`+{9Jy4V96O75o znP^X7e z;FzC8^Je$ZslkUW0@d`^n*p>y?>b0kpz1__@!-aQGO*sYP@PfTK37HB!$<_UZjQ*W z1<=1ly}w6A%OB88+aBCl!iPJD76?TP4nHkD*_J*W83bR#81g9lqiO2ZT}XL?(ZbC* zg~1AIuUFp+zznbhz21AO41<*QO}3RV+`es%@$c`dY0=r3r8n=)6C-rf!(z{EnYbr4 z$)tS))DK5KbV&+lq;@BcfF2H|VbFki2qYu&?HLBsSe4<0q%-MG0kO|H=axt9<=Jb~ z%|o*DR8MOWkNmAekdvq|+7&V-F3ZlTeR!RyG=)=-JjWqMyCj$-s&1^jOk8CM2`G862&~2T+@vSCTOBpF$j_{`tJ8p7*^=MMDX-BjSb!B$$B_ zQ7qOOhlbrAFILmg2%qVwvm)FAab-xXuG-+N=D%I@Vq|O_!O=WJBw}bt&3k%*o|4J8 z3Ao=-G$^VRut110+DxYP32glFl6yF5n($1#Z+k@NjLbGN_1RJ7omwG@<45V4 zbu{uB9`d-7X+gq$==XLTLh&~enhp|Lb$T&^hK{g!AJ@UeQ{ zi(1@;ampcgU+U3N9lLU*njG~kKl5Q(*8x( z4w|^%eZr-K{*2?+5{*95J;}X6_;{{GgBj<=>!WRW){>~}(}h@(-#t%RInsW4SO1o3HaC4`bG{H*S0+UQ&DqcDQ$T6 zY-Yh)_JGvw#fp|rTI*YY^O3$xDWq^DS8&he(9?QqN^xOe5v&PBGF{J{hex?lZaW@W z08|YT@qBBAD-g*9)m;Qd`Pyk#h{sv>1jJM^>4~_nG$YY=C7qs2w+=SNq^-&)&XE) z^-0v0^g13JfBxPy;mdrV+-wOzWjF@sSl<^KziQ>0|Kukt9UeB^br@W<_}LL(CL%pi z&1qzqwrlL~rE3l$#cs!O8%O++x_Ecj$`xG-(PZIu9BsVi=ayDKGZ8Sfr;cHbNlh(k zfXk{lFV|S`4yg@evy?hI`Nq7b-(u#9Lup&(R6UzZL4QBv7Dzpy`r;kKjv!v_dsXap zZ-*pYnYRfZFBlP-Xge8rSMjt7#ja&=q>y zy9Cwx`qo{A`CUdn=`Xmtj5+(kDaR1(veJ*W%{o!5bRJr0@t2d0&I$K@y4MvenwygG#C1%0VXE=FR<%8^@U&~u%aE1NG(bV@R}QwW*5 zzQi@$?)eP#0F{5w{Z00wSe&_fjaIbJ&Lc`ITW@Bv7HFbEsq^ZtKah!0K6&oV);Xu6 z!HXz5f#KW|wjZoIOsvcgZbeEIgn!F}RO?KSA!12k+7ZP&<3)**FIR%r>^;-He?l5$ z@4#Q|kQecHR_yUK)!VPWikRrI<`vBTxJ-KIGyXwGk`hk^seK?K_l5*h#*Bcgn0wxv zf<arQq@2^J4P2dm=0J>VO?u{54<2}=_K*R4#7iMM% z4?3b&_xEzA(2_#+V?WVkixL8qg_hv0Rt&Vnn=lc@+$y7QS`M0@ph^)Vusi*OD%GF4 zQsQ`>hvFe=y7r=Ucj>x+`>8M=K_PXcC+|>oO&*$x9V!J*&tE(^tmLRJluqbip%&Si?kViIBW!R$yFZDgDg zFAg<*ln+48sW_I$Nt&8-qb83meGD<1F;4N%t&QP(1hf|%KIdkqrU2Z>$AeX*<>5d~ zryD$Pu~GNNcO5tB^N{Z|S;RK;)wGwOv9V7UB)M&mY;96)mvFSBmpPN}A4_LZ1)idG z+lSh(K4wD8@zDvPdBEQ72q|kGQ^K9&996WhxXjK ztYO@rZFF!7&-X6Fn>g#3j!& zcs54B0@ahknTS$5e$u zdsixLvGTdasTpOCtYKG^8?HUl8>mPT7Z2TXOW>Q-Ik4Ed!VxD2zV>djI=PnoVb@dl zNXLnLQ_GaiFV*a)6Wruc$6fMRLn3JzMI4RZ7$tN0cVnCw2_N<$WO^4j%4bL`aC~ct z-*@VZo2)&ln)g~l2^tJIgv8!}TLER!Wi049oo5(Y307Ds%2+Lkt@nFP2b&y)2gc%w zBdJB!O+QZ^z)t5TQ7y$+K34@D#hY>OqDJsORDRzGays-f_VuGaYUKDFugGec+{J*^ zvAU|e8$zExJNkiYp^Ho;KcM&PDfZ}rK;!UEOid_2z_Sky%|S>O8Q~jCwM>x|uGW9) z>ORsD?c;DSmb0zW^78g^<#EScmHSo^1ok~_4jTQoSoN~4<(}F>{GoRxH+hwgmDNT@ zl102(76|{S0Z9^ykEe8iG(Pt6O9qHrCs*k?UD)1zmqZA&4o+bU&*W`K&hAj@U;`^_ zb9=kIv9S@B$OFLZD!#vZ>Ad38#{KSRkob7y10 zQUfPhq;$dAJ#K(b|NhlWIF?NNFHjFObnCL&BGREJEA!12Yg;Zy^EskQh8TN?k9F!} ztnkv3jNRPamPXjOx3|qdki`gy{)Yr8+y#Z#)z$qMia|M=!9M6;IY|t~Thf=Iy~7z5 z|3zlfl`C9v{r?jn|BV2F{D(y`_yvN{)t;f>=QpJ-FCR~~K&mH}5v-o2aZQU`TU!@d zVKVQx>4SK|KHuO(c^yzKtyY9PCA|d~8vAKqvoO$>!xzOFV8&vj-@R7l2vt5EE z=Hl&ZBMt#t14)>?OR0j=KQl5js=SJ|QT`6==~>v(g&P$aVhLoy)X)hpjN!+63TxTa z-m$khZ&D}Hh~lbtTX(-BzSaJTNO%KmX?6=Cw0@L;vG6Mm^~NMAvUmwyEaoV2#P?Qs zQDw%|ApwzKrxD`@k#8Yh>Hgg21MSdGjcO}}WHDzkWqTVq3GtW*DNt^il;@>feIn=l zl44Wz9T3-e1?`m*8NnlG=KKci4*CD=)wU7CLm3sZv2@}7$;`Z%&MoSXiBD)Y0r8{iWvpW2r|sd;Ux~~3%{nF2I5@Dg zxlKT{FwasZvh9&edav>Z7Rfc_R*_zgcbCgnaYT663=m4FiV(+iYir6R?-t9*LnD)e zppTm{;41wnST-WEIwhCu=e|H_@(1+8rmez^~dYzF0ZRfKQvukaaRo9*mZSgl# zVMlv9+CG~J;1$VV+a_&O1Hv9A zdzg|z_xkwMfwPL-$WH^)zM@WN6{I8ok9G(>WoM%WQb7WOXk+dj-k zdKJfn@eIfEsP^1bAK|l9g5!-ykX9@rJ|h~xdCyRFT#4E;4#?M2IH*;-^}Dm$GC#|c zB(jSOA{tqU{hXc$IbK2Op(+s}Z984WPq_0Myu<#u>^N~%n|5Qu^2(hWfQAs0j`-!H zO5(XygS9KY zeT0k3Ai9j6E}@T;{kK;{w*Ml34Q)vMnnxK~q}HrRVNjD$zD}fNQLgQ5(UY%ttr4|N z_pdmP&z&yBsO&wg_vYG#2;eh8{%{eCC*gbj)q?jgb||mdFPcCAQ}^!SRJ=cVdk{lt z(6ERXCyQNu4yD5%F$v#&wdK|-M$dbvxS91MiyXm?sWT)DPcB|QqfDoLHK6Fe$v}XK z*Z6`s^F+#PGxkG4*|B>&4ap2;(UMs7=|%bv2Y8htU&FS{qX+O6Pjxwa zRjFLjUNn2XvB-EPOt@&xz?#KIR63<}H_6ugPK^jU%$D+*dsW zo?ZwVL2K~Q?@V&;A|l>T%2>Zq&lL%8bkY$j37_8ZsEP!&gcDY@hNJ)U3F9qMr0~~) ziITf#C<&NDgOw}gR)v;#oMezfNb^~&W&!69Nxn;kFJs($-B*V1v%Sow9Z;PeNedpl zcyfO{{S>-$;#$+dRrBcZpHn~S?v`%Kd)P7rjLfk)QRy@E$2Zwv>h8MY%qi1cx@}uG zI2-FnZJ{h`?DZ&%s}oqN{g`WRNyxJ-S`Ec_=-upr90|C5Pwww9UiR>bNVh`2@-@4v zyL}tO>>|^)KIL}L>*DWmc0bsXK9u^yy&-n-$-`{N#MYQ&M`ov^@W?Z-;|Wd??dbZ| zDKwUQlC!Jtr~|7FWA>QDuLVOlh9)~(9TS8bdr@wPWBrSA(CC)!!5-P<7^RL=X(y-0 zLK3z^4mVkE_nVDPzT+P1fOK6?eb_FVJP%9Sq`ZWmit$!)T=%3)&Fj+?aXiz_T$f@V z)Hc*3A*2f;ar^Dpey4xQbkCS@ta^pv!i#h!yL$0iFV*WO>W%bX;ambWJDQ8n5DA?h zO>X;FKHFiFS=G}8L8GRQ=h-vgs?RX<>r1NbU$t~jcTiSJ4kmm6}Y7|2y9FFM?=ecjg?waUG(BN69ZFF+s%~o9}gkWY#X4p zZhQ@*9n#HtmS=+fC#JHbcQ>=BGh$-PTu>UU$^aI-J@rW8~W+c7N%&+_TtpaU_iEZJ7 z#io$Mhj~q<#V%|6CG2C0u*PGvwl9mKJsl9b+~BU6WWi4{)*8!um2*y?q$UPR<=3Eb z`u19_8jBfmQ>+3|%;j~C!(?G?p@%TOO)^~$#Y*1|kyLq#=EQixTOfr19gH>7wk2+o zNL6N#cO^ZGW5SLsX-nu+epEHPnAY>X47Cw|OfR)hB45I5=<^|EiF%}(lG{D}x1tWY z&NMa$>rW3c|BUH$vr_IIMEQf1clLYp_P)aEf)|Sw87j-r?!j*#a*S+xy=6pxy+wnrH9!F+p5R!K98&0*784>bdr>Y_WV&KU?k>BMUx)tA(DPFqlxNW)C za{V9Rch&lm^tF}`OEZD_cYqIZg{&C}-2%a9jRGlazU2jl?j-KI?QqB&M28R+{N8(! z_eDLj$^kZodf0MjmJxU?!qr{n_I<2{*S4N@f@en3zzpk19HSDd-5wG9oG$6cf#+Cf zAzuohg-SI~pG5W>6Z&xU!=W$KJgb8C3IU2>`hTYgmPi)_m)u#`R5d%1ndDszNe{ldGlu_f|8dVQ;vVF=bUWW0b6-|?Ocb7AW zHFP;WYg}6n40`_lhse)VYk)msy4R<5Motzq-MbV8o2Xo`cf}TYVL5Wzu)PccGOf%Z zeMCt))&F^@HM=oU@N2I!O{+|IgikW4=~)Q~PHrLzcaZps-kF#AR9Nnh16gDY2nh+3 zT>9ht&(W$cv}q!S$gzYctOrKke>1Ymp#EuoK#{>!yyQL8Gt1w=@$}i**4ot#yT){^ zBJpd+1Fsc@Eq=(_c~lf`DQ#Mq+OU??zK%P5_GiN@RDuINO9O)t1ckSz5OeJtmfHTW zL@{HZdr0$h$H;WG9Fugp-W&*q`!H2mZEt6LKP{c>wzZ=1;`uM^(B^(b314b@pj6tL zQ>x%@#(3qa7Yo&bZej>}sD7H#F?xrk`0L}#&aGc#ctMo&7y29=g+~-SDp#z?eEzILXY#L zs5ip7=>_dKLyUwg3_aJ6Y>{)gkFWwYQq?RaYflnJ+@zArAx%fKF3nGCfZG3X_U+8T z*&Gt4pd;6!d9u&oMTibsVeNWG46!t^pwl@Ap;hIL?9zOTv{tCe+AbOBr8x`6? z?fx82xq&k{=CS|bP-sFJ{>`NNS&A2eh#Np74^C^tB*0wN>j@_?P6vzy`#h1=Wy&OCzf~PTFJdhSP1qDcTuc!WNFbSj? zhPwo2tw15SGHIFPia)ueEC@3{VHpbW^O4coy|O8`+a+9MZ_U?Nf~$gFQD50k2Wf|0 z2%@i!NieqzxA!vldl@8kQr0eN#)UK!gT_=vhd>dN_~9G~C2F**Eu~vAdLp0QC%U&? zo}UI5IE2L#*U@)W=rz^0$n;!Cd&c&9>lc0E>J1b?aC*uJM%+HGV0lxIsDOXA>#Cn@ z;(CY_&DzVzgz5ehVd0M!W`yh+ok&F1+?1fGoom%BoUkaEM3!@;#pCJ0WAasmKUwyd9EoEmz{VHhBPTHn4lfPPex(0W;*z74aA^~eHJ8l~ zr>jthc6Y01<~|(ga#Ey+n?d@bNYszC9NB`-KVuBn;)`NC9F~s^5wUl%sGvP|z@2jkkdtJSk4xXn zZN99DMW`0co0d3^e@#}fwGZv0{(_Hk?Bc$9?fQY#>}1HBybe3pTk%<&?zLO3CUv*a zdq3z0?*r|#1b^9Z?ARX?B<}*oboeriLh;03Vg^DA1{MrxSY6UXW-xVvs@7AMJB4b93S6(xxV4X%Cyb*BHhL4fJ@yW+D({41RX;S_z7_&(bMF)t*O371G zf}}jx5hlPPu7k@9Sh2?2+te-xlrQ!_lnIGY_~Om~PMNT_ zr=&d(nArV|E@L*i4=9%c)SU&FRLE&6$EdUk4% z126hcX#&kt?XMn0a@_4+;<*kySyYE<*p{7gma$g9$bcVVv#)K+Ou@kaD5){MB9lGj z9BMgW^k(x3x#55CmMlwgWRJid@2}q~@H8dQn=PXk`+i4k+P7u;Z%@sXNss>!S$G>u z7UCJQC@)$QZ?yBJ8pNgS+mPe8)PV7u^g>)BoUrzqWs;DH2L8FdF%Rc{H$xw)4U>5A z<_5}*KQu_trO(ND=liev&#{c|*gd?;g%k$Im$|SCJzz%%L5C#zoypkXa$HBv{JG15 z@862rhB|A!^|(6Dxh0ZGO+CzmH8V}o{4pWJ6C;onsvz=z3n@2|e7o`t-+q0{E^-)> zePWI35f!1##`#{u$g$`hL+yTcu`bVzh&}l9FS3fpi7l(d5z+b;sIY`?0KpU<<@%C3--mP#CjeKTls3G z_{6=WzVb)^t_o)6hTP`M|H664VI16cqe5*YJlZ?Q(|+gRaw^R-9W{>l&A#Do9rwQ^ z+^%g!ab}+`rdGrRc~f}ZWZFlJI+gM8=xRfjyR^N$S)J*ZQUu%NJeN*m>5@WA*LRkm zqQ~D~_kH1z{U_!^?em$7GF@Eoa+g9DMh;L=UVu+*V~GF?SqY_%aT;ntAje#R?HN7KR=%lOo2utg-a9 znXcGS%laeSB_ipCYiw8ml@9l#9-Em~sLf>y2R;E^wV6N+>;J&HzobllcPn|%J@kYJ zfMqpE!$Uoj|3(Qu4WmlVei*Zlk=v%om~nAUi2{kl3K=A&)U2cL@j!eU$r8KDP{DjN zHw`}o^dVuMZkm8Pduyu}y@dO%>fq3j(M+*c%JSD3);`3pB4+Q<+T{p*3f z_zwWaeC8G(8`}YZ)V1D-+uXPsiy4+2NT?+;TG(0L%XBW~kA_*Hr7qss-aKD7Wf%ad zIiNj{AmeGbftQHb7GJGQYg*rcYDJDKo9~VrxB#GA+|d|N^9T1<*8&af#F&~bI|A^U zYN(~_jaGv*qayy?2mXe~utmcK0A&9GbbfYrRu3@%o={6m{$q9IzX6g~)D1u!Q|r|BpNO{@zD;rTLj+_Jt7=a7c^Ge=Po>>-YZv DLTeeM literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/ah-reference.png b/windows/security/threat-protection/microsoft-defender-atp/images/ah-reference.png new file mode 100644 index 0000000000000000000000000000000000000000..1139fe232a033b72985c001b5bf514a6fc08a245 GIT binary patch literal 80343 zcmd?RX*|{K`!&3qH5pRMoPObD5iBq4+(^E_vs zr)O=~|9;-w_nZ6G^Wxc`-|xCy+qU<2pXYHN$2!(p$M>m%ywt&cH2Vky!a*77t4ajI zPFVtB+Y-rkJkv#(JdJYGH+zY{xoK@=@2G2QNYJv`B))wA)|;E!>09XH zrM85;&mRNuGzsx(Rb5*vQ!8V_XWBs@Jh$h+zjv_JHzdq&J{Pgtl4 zD#dfVi7!(&wYM-NB>wxwMj#v~$Xvaw>=ZuU;jHO5vMDw-X8&qoBL3>f(-Qkx=&$+u zQ>nie?P@|o!qnal=r?@bXz}=pOLoR`r%UI@&B)1^h4@pzp|>Tkf7i%6CS=W zk^0O7@#Ev;cl*Bi(OzU15-J=DjjE?l$;i+tyq6Xk*;&bWhIr{DJ|5Dx={lwCXNeEj z^_6+Y$%EdqckfQ8Y2;;PXIr;_x=^1PCd1L$p3|!R~wRYH+mBQC7CcCA4N6=Y9Nml9e?mD9FsrY~i}W zl&Q>(8)9~Y&r?&!afw1f*JWfT@UrMw;z_vg8RHmHC3F4yby?Yuxw(-%rb>ExCxT9{ zn`?ct(Oq4b@bmNAK~F-wuC=z}o3C!_=y*=|O3>5O3keCiy1J^UG`Hnh&pH)t>?0+< zh|q0`R|N(KR~lu9$iBzJ-=8$Fs_5Rt?OV5QdG7jeW2bUgBKxP7*UVee2L=akYiLw| z|9i;Ii$dW4W8uInDH-OZafWo2vDmS=f+cuaU`9+thmXx&-id$jHE zU%^{(g7NHr$#(dlg@pwxYpq+iey_}r?TX9LDc!(QW)zx=m|I(yI?ulM_1&LS84(!R zm~S_P?+9>M zEhpMUb`n=!_t)adgxuT(EZ@q?3f}ZgW_EUCLqopXvaPeTbIS@AwLRYsUsof~O78k~ zS`n9zpFTNBOMl0D35is3+xCA?x|uNJRP^W1ANi*{m%DE5!5fj1lHx+hZ8ta8pHi|F z6c*|f*vm*teygwNLEM`gxHm89BM)dlRAg z`T5vZl~}}|uI}B5zd1EEHRTNA>_>iG4`x5F`H7Q_4S~VO!txIPWMixR{P~i?L}#%p@weyCcNDuWRtIw=iT3sN z)z;ST*s&unHg+fPvfBn$pU=88H8Iht_v=%vnjy~C(9qDpfFFa%-^RvSY@hW!JDrHj z9KLi_RaHer#k+U!G}#w@7(I@A(+S!qwmJ5sy$%lEoGK?16cofSmBYyxML*`{-H?@S z&oMvhpig~3QdagrRNdn2EVK90^78bun`o3Lf(_rb)OGXq%8HAaSShxot*woXjqRrO z&fsd~B*X01rh4L*5MGP23V8M1RXZ2-`t@OzQ!Fforlv9^`Sv492|MhN0!iuk71Y#* z`}(qxgVfd4lQmUT9FW+$+-BtxIQrydW!28z($mvRsPcRK`0-iQbaHW{nzt96rtTyw z$jh?}3cAdXHt*ZFPr2#^)0N*DI@T5zYu#lJv$C?}%eso3aljPGA3u5W{q^aaiGBf- z?fJ}aYfR0|_U+v(BP+W$7-sFUx$cO3i3F5f;_v@+v^j<4&K)># zK(o|C#Np!At5@I34%Ufno;!cueY7blG?XT}?#q`i5BHEA68G3xHgTvbo`U^k^{t>g(69d85fGb8~YqnWZ-78gC>g zCo6~Re|tVXJ*}vsf(1lUU`*Xa4vyfz`=!0ztu9i;%lF8UBRP3_V$L)1Sy?kelEfN8 z_!1u=Lz-h$gV)UTSJ77^Xs`v=T_qhOna>h#L?M)dEA-B*XI)jE+ob!+j05lZPg7sN z&;QZP%nT|KY8dh*eZs9sQFof7M=SL*1?A(99Xs}%UMTmb_qA)+uK17+*zjwqMu&uj zA;V?dJT^Euh~tNH=f%S;B(#bWh-YZ|EXYsVYKb^abx)RV8fB_+8`VSy)$PSuy{)Ep z63aSh%*Dm^$6_H|z|N>HvLh+$_3NggC{K1~=GlS=1-#as!XhHY{w&x}BO@d47uZDx z2LI86C}UXnqQ)Fr8k*3zZ~F%aOIA;0YAS`ZJVwjGlQ5 zsObKxJUN8#{`BcnTpO~)m|A*FjIO0+L}aAL;=d060mS;bvuC-vxyKf+JDy=0Q9~u8 zqobRfpT}7fGCGYcQTyYEt*z~-auoRt@^w8oQ||idNJvPCFayFR)?6CVd|-E6YHDhH zyf^ump;^?ny-c#K*=?yZcwE1p;*(hr%Bd@!VDOZj%eG%yT-w=rSt#;0_r38y=~9Ky ze0@`rk|@Nr^F%I{E^gwoPuxQ@3jxP2h|9{R`j|D{ywa9yN&Mf~ zsKNtYK0YN4E`^lr6^Y47<1WDjs>cT{HZ|GvP~Y*XUSjgZ>m-N_S4*jlI)z7$eP|s| zFFeA1?0ILv2_`08YwH^%`5xONtI{P;jaRQ;O?Jw#A+*;!6Y2wBzjkAs+(rB(lBhg++ntqtC}K%DId8fo z^!4L{gH_elTi;y|-WkxSK=xVKedS|Y!qw2wP(e%OOS)Vke0+R}A7n;U=O1s*0@cvx z(H-~JEWCIA%o($aXGe_dA|34P8c`7g1IKEw*3x1F1GR-)#Z^|9hoTBQ_iaO35GV1I zjAPYy;omdZoT56(kpCj4aU?c27Gw-9R>ylO}~HNvwZdDO+}AQK~PF!B9Ix&g$ozXpHC|)T3eWC zi^#<_D%8zsXlOXP{CJn1p5B(}5P=qeqXdg`X;EYKDhC?6u+VV0A!w zK*@9u_*5D5E-v*`?~$BrrmU>oQa8ZD!h#$=dB}$BFmhy0j-8!dhF0P4>5bXtHQI|- z?F9~FB7SWg{R0CD@)6fa_U_+5R-nodRx9edFn;Ole_tjk?>aF+h(LF2x8e35KYj$V z%AKHRNT3$5?MKdX67C$V4P!oWB2k7+G-`8hm4Q`+3@Q2fkc>^FX%{FA9)9dsVouk2Fa z*%=uUlJB|cF?!}PDSd%OYgRCa4!cgt8eW8wq--Y|rK6=qPfhLI^JUlND3nCI!5UO4 z&1|FEH)mB7+mnimMNnjyX9kc&QPd|7&5j{wscC3XiX$={M}D!Gwd2p8Jb40m#xT>| z8Q1v)#i+Np*Ksn9nZ}RLZcr9mmYA40S+XksVK_4;hDlg>ZFREL5s9#if|y&o0~hYe zkU9vH&OgofaW5XWFL?Oy;q&J;2<|9hXYn^~v$Yoir-;{8wRO4d;U08SlOG2N6`h@(6%{NZA{{?|Tm$_4{#_as9-o~M$ z5D6Ect16HUVfg0tYrOsO)2H)|YC{=4mUMx_y~$-{sul}cwz_AxGo9>J6m$Wom2V@> z{i(ShSLh+l?EP(sVz6uHPR$ZG=YQ?_=(flhgwav(1NvOO`gM$pZeL)P^39vB8*BLy z5n4!&r>;CcAaJ+$D^?UhaX$ilbhKpkU*YUforaoPQS&LqS7>(B_hmsQCKzDsbfmC-z_s6_t7HVEd=L`WtJ@ zP5qHxUgC9O?mG~CpG$X6e0@sEz`(GBe)lCtAkxtnv4~}at5tOQR?EGOih*H+A;4wl z62Z*eoSTd5`(|!F@ox#2UhRnbfMS6|y1u^HrL{;!Yk!C}6m(D5d1 z>K6PU$2-c@|Nbp%(|yU_ey%p`V$%8wQWM*aNMW4WI?+{Gb#>?H9mMAFegMfUx}}{@ zo;_0xcUamtSpt3xfDAng9BEk|QVo|M8-$dqBN8 zl_HCF=E}Ib3e7((DsuDmAuh*M=fOX+@}OWi%zwAENJ&X?0HA&S>Ma@9V8R1DX;>W; zA?i--=8Jc?DgtdeIr00HFW+Ha*zf7-dE-VM(%}QrttP#D2ld;NY^P6GRad8c{5a>w z8zthJYtnFn)CY(#@WqSIL$k|n9+Hxe0|IV%(ZKy?v#9Ca&ZlAZf;;4l3tCDnn_7jBK@}TR{i{m%I|Dt^-rT>Ay=^T zAdTNQqwKECa^O{T75_Sm3w6G1ZMf6X9od?eX!9E1%grtH@>%Di({{;^pOqf)EzgHr-e0LrU+0lb4I~u&{syL{EL;*a1dHM)u(99vk3} zoq>F1Wo1AyXo!=}5dgx)!8= zJjOc;^I~Ei)Ea5rzWqKSVQgf?eZE<>%X4!bpdb`zI4rCMG@o9@GoUUIOinH?yZ7v& z6t}gr6Wd&~LsyC@0(@39|8?TT2@6Zh^|iHQ2P7*`hazjq1hPsQ#1!4#eMd(} z$4q+|J-gRuJ$-%GO@^&3QdIb$T`MivS^m-`LSPko(T`bKu|dGB>brLD<_f8~fB$~T z!L-=e-v0jA=(1E*9jALMkcAilSkR&axB}iZG&O;si|5+O5CGnfo{mmX^a1_RqeCMj zBfY&!+S(9avxAZ832Z8w?Rip zNlJ!>gaFjFqV}FXZ3=)#MMZ_n0!UF&Q9-Ht{^Lh7mM1Cc^r=&C(aoURXBk#wQ2@*W z=!K{NVfw#QoO#e=!+-lWkr2V(H`#zpS)85@;nej4Rp%!;W`7ab#KOWtNl7VDb{tpX zO%9Y*;9CGPFFpO=L|a~^KfNmeGOiz;2U;@=(15st-Me?A4(o9qL-jHK8BRe_M(ROK zqEnX-PVK4h>=ytIK)8W!OiD^>;ugR^@iU&m^X?3|q5>3e#1ugP&!0bWAW{6!QJv-G zeIpr{sg?=`iy=T2$WuY#j;ZNslRxe4bVrU1^!Cm)tLh{rCjMz{JxI%!YR=|$J}v&; zJH(Yc>KN+lWg;lRe}cb_@!xtpdbBI&nw+GhBo-d*pS--)+;GGE{5Dgr zB|iRYTmw#Da72WN?w6exE@Xy>hvUQnodWGj$jkq8ILd4Jmxsz1-NH}3Oe8VDe*;59 zROqkZt`0m-Of_^1v;6zINHNd!)YSH0 zzg`6g6VVvp7meRwPfr7qNN1<0>92Tv_}bcI9m1RG`!b1OXE{hYx<@Wt6~9*5SD87Xk^#2!H#g0EQw1LENiqQwz&)UZw6rw*HS){$9XmjmC7H&)eS2*8 z!x%iDkrDOc#f$Lp8a*Of-f4-i+uYQ|Am$;P)^WmH`r5U7ZBL{3`bma~d6tBSYf4L# z%(wf#di4wRG-#pf&8Tu8GRM%jSPgXD^4G4p%niRp@Pc;Y;^uDr_3N!HSk0E^X7`zX z8B5FaDj`2wv9AT%z}wr~&##uq z5l0HED=Jb@Qr<+(wPd5O`tbu&jVLSYAkdmOIjRCW#_sNJEFI2A*hOoQM~B1_wg`*t z>}-%mCOlw-1;T36)6!HxAvZP2LQ;{IJ|^PA!}PViz3AP$f$uMw!7YFn5^@-A0;y2g z!6pZsjh*=V)c|D|zoeg(M0#^@;LV9Ee|tfnglP{c-CIG2GY`w0IwD4>BIJW#zpkmR z1^%{!nb-}$gpuK4)WCH0Y~rOjw19@57#q7zGCeyRC$I4C-(yfLxU!7W zjcX)|w{G!WxZsR+JP@q2up#0_ z7Hxj(p)e75dms28B+uy4t!>2L6jb}~-#>S!BLosAFA+|c8&g-+E9G{f5EeYLv)vF8 zePd_)rM!HP5i1~C(xM%|my}NDC=1?*Kv;4-ME^n&YUU?2&%1U#y7=25Q;kR>qwd5? z_yV}di-dO7*DEL~9ipbL>akgv?AqMu+v@x8-}rW4B(O2;fDbuV;}8SGPXjK;@jn;P ziI|leBB1Go?t#NZiuONtq1WAqs9F;UQ7;~ZR5_n*(v3#d_#Y9jC=kb9ztUe(>_#Zh zNOqm*Sq_eXXU|+#=1!{+FKow-hY$9XugEz#EdX!!Qc=y$5R=i0Os zj!zyh;J^x+G-20;)Kc~sMzFyV;B`^wz_*N--%5;n1~Q0PlDkR}aqCz7eewOguUcA8 z3|$W*7w1nhZOULSWjxRRZ$vCNF>w}G-ctRuxTpjHKItxuM4+wRg$%M#Qnd&F0<8TW zP@*9oCq%DNL&{dxYiZc2o! z?f9QeB;nPSm3yv{h2-Q0{DA$8PA2D6cMzEFo;X+I;6FCr8nySDEIJ7}xjmfm0h)Sx zy-z=IMxEC%`WY^fcH%=gm*MPtMp8z>kF|9Hf-%Pk-TIB~?V8HUJm~0PNOqY#|s@N-v3n!lzM;)?vBEEw(jT zrRy-&VRG@r6)Dfnj<(g+y5MsV+#Kvb92K^{t*JRaIup{JMY;0xD$?aRHAfasFA{Mova@vY<`(XV4N*U30BEZfmwXzv0M{ zgfs*Zj2paRTP7|7-1$qO5vS?i4<9(izk?GY*1eigUUL9uym_?z!vp*GLyukuyGX^M z?FO8SQ-DZzTc0Otj+-M1QHe3=HWm=_ng#Z!Pn^)hVbIprZX)-7fujNTT)}-p+m;7j$q+b$f`e}k02n`b@Bor5@+o9( zBCQrx$L9U|%^Scp=%h9X81#l%U1o2P;Gml1A_V85jw3Mx+8v&=8~c48U;s@$1QU?P zTKTqyaB}QF$}a3Mdic#Dn|w`_WUHnEIjZFV4;3eU!z;w>Ka0DeswfLL}>Fs=iq4j-YSAmWvCQ>Gi9iyjdd^ojlurmIRyuh1M2^Fx$aLVDA; z-?wCBlEgB$5jN8BsUD~Y92^+{8R&X(b<@jhPznZzhB7qse*rvweL?~JL`g{*H_D;; zNdfo^W#P}CB`Bm&9>Lh6yTX1$XOx$h_a-k3C-%kwG4UxWLe4Y&$o#;7$tfus>gwpy z6wTA^9ULOU!y%`lA7+&cg}nZow@R1u7#cMsdf=lDe-F1OM(O$`m-A%wcSIg#fW*o#Wt4p5T?7J0+t=4Z4O>fLPMVByM?TzO$LZ9 z&@lv8zY9v=dyOt4T)XM_jFT`J)4bw89!%`)qUg`jF+m-;r%9@5b={Q14mCFMbVZPW9#7rI7ht%!Z#S4Lw)(2<)vCK>k;#AP)#+Z!4hzI|f_ z(~c8?^vZtflmc34Ma2>2oA|f9yg#{kLSqulEuo>_|z;Uf|n2v&9yg2U7!^gM48FcCH-MiQ}=*GKP zAYH^7#X=rVOb1(w!hkjni+cGoZ<+sobR$irnO;M$A$txC4EP+RWle0azSCJD^{NLH zE0$XsYPo>{|A8(*<4wY3|eOdGR z^{~*MZ9rx?lUNFPn^Mx#!6g^l4(vlMST9YnDWt(S#_5CbhaerXFNppy<}Is=vx}2t zWo^9)D-6DUUARDCNJy)lcZYv7{0E_-4<3{e`-83v4I}ntvWF$KwLKuM;xK_(@Dks< z_i0PoMOs1oQ^D0~si|}q^uB8Bn!Sai?HkQ#A5`&z*c40?8g&-8f1$r{gAn zTh)bxSmVp=)4;2?jAxWkWsl9@wl<{Ybj_#l7+y?(%Z2qI8%1rlU*`8m(?974 z2`jq-D)%FuB1^BYF1A|Sb8`9w*7bvK`M2lPXk01j=)yxoSJ2^tx>u?$E;vL<2`S*3 zwDgmJ0BdvexLX;;>9%Y@hzM8kdVv0|t*u^c#@Y$N`Xi&Gxj8u!Qd02F0S2I1hBz*t z-Gwd{cmy3T@`8o6bw+Axk=>9ynX55G@Gn>@bdgX_PM(*`A z$dkjDHHnXQlWH+!nSe^1rSp9zlgRL}2)%`3vV<}E}f zb#amid7YW%p@(00?;2lwS5RO7-^bzq@xoc6Pq;&7XdiiQ^za)ClYP z-s3GiiRiOIaXi?u2aA;W<>Ehu6JX2EoI$%16c&aK6M_~mEGMH$)lk5gPMqk4qW9{> z3!A%lM|7X2=H&1)^%Fa8=w=Af=hWO-ZWr!A=JV%8V2D9Gm8O=dhqeMM?+OB=POgAH zmNe#ehZQ6j}oBS`zkFc=tZovZtC!H0WCt2O*Orx6zmKK2? zD|)W@uuJIN&b1FI^r;j|*FElCgo0kl=-&J|#W_u#S&e2JLHs=ncihEhToEA8PDU?i z1}G>dCc}w}agh0#SXkx@LZ_yW8Pp5RC#R<`Oigu9J3(7pcl!B$KN(r2EX19)V5Ij& zGBGE(vkDz0&c9n)owTDK8G$S8%Hth`_;NaVDe#CQ_QMJZ;^X|AdwXV=E%;m^Q+kvC z*He-?GyEJQ8glP%sH&+gO^m82DgE-;*jN&zLW6xh=$v|%LDeOxZR^j=?qJ1>@;moj zydwi4#SdbewHdUOF7V^PSKx_FO-;RD0NJ3eH3fzT9-idShv|-SFKCAA4Vwq-4})9f z;N>h#LBRzGdlM8?k~xTl2bcV{#|G*LNS`H`$Li|7f1jG328R=h8i6+wyY$)n1t?3n zjYnV1c#M4Q>gxK>2pYA0OOzpq?>Y8i3$ zDAEJ)-hmKVT3YISevE?R@+u=GWgxH|cDO{P21svnZT1EZ@MPGBR*Tzv5GTcx@dX8c zVG*m()%g`OK0ZEB9Xteck-peghtHV3O(R|M{ExXU#bwy(u(>MwfphHa_Z%FW>+4?x z1+fx0KPx)A8_rGaUq_3t{?aLUHITL6H;&Me4uK;Bydpbzu(_pW(hyQYE5vy1TU4Ap zJP=6Xx!Gd(kdum3*g%oob#P$uh75R5#BSXZrT5+Y_X{7Qh^BMGeez@9%P$3=Q~wpV z9De^kfi;l&*fA4BLkT%^qAvcw)PPPhwlimvA%`Lr4h|9x2r*ZDB88o^z%mvWuj4v_ zmJjSMudMW`9&Uu6KAdsCj!l$0^#;avmBI?5VA1-?f)AW*EWxrs|d zB?ZiDNmYkWrYXk~R>@Cy`{3x&)Y1a2ork7PN2ksx8>twc;CaAo5fLCLz-eeta2$h! zU;R+cNnC}`m8Qo7>3$UoONonr0hbJ21C+cAD;vlM9-gMoPHl1VSnED`l=uY%uzJ6n zo3)CZ?qX}Ox?rgkO-)BY4d9P(`dcmdn7k|dGFvThVEp$yMp!w+6!7U2Jdqh1dFkNA z%-K33H#^e2ytc#X0iWjIzX0`>khh?oIiwj`Sil9vDC~5J1e`z0O4J2?N$m01UshID zqJ0$xQ?k8#iMCRdZ3GuS6zcN!?b~6Q@kC$Q<*}LuVjZ1GaR3$Z`*ky4{47JtWB?@% zOt>{KTO$YL1NeAAViNUncx$b!(qm)4=w&M1ylKiq<68lVsc+f|hz8yWP&HnU0e~U4 zv$M17xX-`Ay8zguC>Gokuk};lW^3Ac_zkbao40SJBdX7`u^C%hYC#fJQZmztvw28TS^^YIKvdPIgoSz0qH2CY6FBR3*L*Bl9`~3L<-t3cXY+zHH zz;&pqqLdcjDf80)XTN15pPHs!I?0CqJ30ABTifc6fYr5SJ43?(Tw_sD5%jiaPoC79 z@Q{%O5GkI81(5CoVC{#7*iN3rC!3p?kkB9p4S~p~7lLJ3S>cx@n>V@HU_5{a-m|7A zwM`o4Jm{W}4^YFphX#b7&i{@!k;+wWgB`$MJ^}u4*d2m{f;vmw+d$Q*tLOXV(g$=> z8i;Pk$AZ_|Txhd~%k*cISl!U<>QFAxg+(~cqrE)9p|HClX&U@*6Wddpb_<(zO0%L8jBETP@l8H$?-P|InvXBF>KDccV42gCL_43ID@0(JtjyH58$0@lH2 zKw84-di`2CL7f#o4O&`S9i1)+C$eFDxHvgg)x0)&7wSLI4?Ga1kS2&G2MjK-u*gM; zM!1Z?=mV(gO^zIjl8Q47$Iy;Fr0_rbQFFf^%GG-6>)Z1Cw~?`N0G+@LbSGq-Ejv$o zz{SG^(aXEHweFz*vKc%g;u3uYU#5rW4z~cK2k8)esGzmcDS>44$;)$8P$1_O>l++g zm~YX6oeO=ZDOz(c8CurBssUT1iUP@Dw2wnWdFCzb^z;!RVW5_jqz87^14`#v>tJdC zB8mDrs^DsR9uxBUUq~h(Gw?ujH#;)}?@~^V0}3O0&Llr_7n8O(pj+Yf0s!E%_;V?t z5q!g078atV7XqWHxp`@G?N(V@GHH+x=kMw1nSLN8ckLQ@M{8@YaB#VBagQoQq$7Or z=7oi;u1_c~Nzdte+LY;DqrZ3re>{Bay3w~wJ_N?^$9Kd%AdOMoVzu-C;u_!^?FyqW zMrV4l%k8Fu!UvOvSje6?T_rE_@ZhSiN=n-Dha=IJZaQr##NB}x?$q_q+1BYnxSE=p zf}#helUY<$R7fa{oC_SbzP>)J=)g*)&0n^X=&(-IkG$2X46YZnWOIicjwPZnT-vi0 z_=KqY55(C18v}`E{QrF9=f`~(0c7^#RCOI4Mtb^Un1;Y3(7;VeJncc}HSPh70N^ds z7)YVOV>3{5ANuhtJly&=ZohW3RzU$lb9e@(ZT(slvh%k;J}K`3NI=6mMRc=Ay?ogN za|fg|>&_zBr5B98K6yg&cM~aYygfe~KI=3+D>Jhd_>@uFT)Mn#jrQ+uZfwM0jSlRM zVx%re-{_|oOX~cm>rFl)0`m5~*FY};u@q{J`(irryb@L(4c~t*2%D5?<9laU*F8IT z9)LpZ6N*k4Fo{S)REi@5z=F2Cvce#A@0_TpHq5{mAO3A^r5AO3E1zJ;ACB%E>MF{f zvW`w^@CBr2l=FqGtoxwr(b&LO05R>N#h>W+?*~Um|E>;-kcCD>)DGCLl9M@9;{0|c zTjn8qqIf`p>?%Hc|6;7A3x7S6+n1%%=k&wmkf%&=w2Lh%QO6c3_8NW;N`ZCU`-fd8 ze^mC}K1ta9LEnIPP+~#%hacx=XWL-Ynv??Xp#rZvNG3ZwA&<2soI7}(T9Gk3J3aoj z3!o?4{SZrCK42?A=MNX}osEM^EQw<|Ht*y%d?^;4J ze^Do3CLpEeG9V()_j1)gf3kX`f&<@6V*{>S(Vy%rZc>&-VN6L$0bYQY6v%jDWCZ2} z%p9FR#sd)(0vHBmstk+_43<_`Ap^kTasApgqUwJ2DvY-9t6Vtt9J4p5O#Y(}$dy!7 zP>$?z-Is;o>L|M-EiDZW@xn3CWNvotjgiHuAKgFP}*)i*7EnK}8y41$4#zIoD4kog3?ZL3jg$M71L?vI@-Z{>?!9|3n8U+)!rQ>u z_#!Xwg^-%`#j-zt5Z_`>Q}@Z0p!6~_ilOn#%HsOpL6_n@5&#i80eAX%d$$)l*45OE z&kR&U%>nnaZQC|pqK$P@PM!#{m&}rb_X6RxjR5s-Y+6s(qyEi|KN+ZwK=+v zXhog@Ludu9!^Gs1?Z7jL#*mBsB*E^&t{3ldC%aXcAp^Fh=;+UFZ5s6-@Y^$IepFNp zz@cymVXvqNE*FI2c++0qfN7Y3(Lo*}4yq7W)XdZrV!mdvi$l+sN2qSzt0wz*GD}LdJ%M-~iDx0OjJlLzjj< z7XC#zh2lSaP`G^g0de{>COsW$ucd(jNL651R%YfawWKiGA_>D;05lDIJBQkb=sN3z z#CZK&cx>r>Jem@Cy8a9agoqN|sPOkg9t2W>IxlhcDztZS;{bHqfjEkGY9yCZ{0aOP*k0gj(2x?A;Zxu)dVBTA$jHoY{b*^)!_s{C zV6!yUgGA;{j%tw5C?t^rHgm(b zO*&CGH7%`TP*(*7q2#}iY9}6>%CgR4<)PXMVtfr`kW0xW8b2dspU_Yj7=?h@aD;-~iq` zKW>%RVVxb}#4lU%?HkdnI3)6WMFLBULhRwOq2sv@J5(&@PySyps-TO>+^$m3O}O;D z$?>81Ea>HMhrlcCI8JQozI{WU=EkAJSlg4QPeG)O3w{Hugfx{sN1Rk3o9UDU) zr4z6_4VZR^m4Vga9oNzT>lFP&)r;A%P*)&nfm|lk?mtp5&t`~rQC+X z4DV7enh~_M8pzK$Ral3Fq$KCzdL|HYm?(o|oEtV)c&Gp#A$CqSX+nm=pCGHFNqvlF z9m#`)3H-}Z3W|otMj?>-Eo12JGPAPKQKA8S-(aH5H2?esKo1_k;!rd&8i~#jmXdyP zbb}Zu!Vo7l_+{UUUfX=Q(p);UfQ-Vpjs1OmD#1(-+pnM)W1@tVLHLtp8y}?q&Qc*_ z<~Z)gj>*U4eZT$(L-*|YXZZMv<@xS^|2lnC#S{@l@UV$Q$am%2vE{_3)?wv|K?Z|L zy3Elv*EwAd>#{N_;OVtv-QnSm59~04-n~AuF#Gs;c?hrhtrpd;E&%}`!X4a!7y@cq z6$odzcY-QZ?wPrn8SJOvM2Mw^g5oaRso*#qt88EeorHH1t}eKQW_(Fb))^Vvyv46LvlVAO?ZEdU!|{)INH-!T$b} z5PQy^Ewml@A-cA?o{3?Y{d@P`wYB}#)C8!}iXkGPSy%3;o9gN#IIjr_QV~&bGhQco z`sB&6i&k{=1AVKk zYm}6+&QoO=e&Q{stJ?#Fz`Aq!Gg@0{F0eFiY^+WKiQ~(av?N>t=i<7w6P!Sy$eHLp zfW!c-P1EMeWFT1~5W@Si59@(pdkoaUiONyBHuFt5;r)A~=42JjVnM4ebe%zvxaOVbV}PtBSkFPXy<&~!*SA?@4l3_~dt9^Bqj+q- z#OfSoqgJ_tV`IJIzkZc3SEQC#R4f~>(_9JfK}p6qwF&ZJ1Q(q+NpST+9Bb(O7&_K& zA<8!x1HeS=`_A|BND~Nw8*vTb7f?w^n2_jTZil~5G7gn00^3qIbTfq-Gf|}g=}`9p zlkM``VWT2i*-cC=+H%t{%HXg~!E$|ly=pV)-8$kH(YOC$*@vvGQ5Su9ThmffXsM~6 zS{@;6)M9w#bLo@*<1aH<&q&s&YKTcZC7)4U@x92`VDuzswyG{K`BTPUwYc~aKGpH1 z(e3&IjBQLxdM9*Eb9^Yx=X?%O#g+C14sWO@&-xiOR?`%-2OTLjQ5V+!w}+Nx^xaF_ zhf3FId@MYRhUKt7xVOxk-_NY05$`E_|1TesNP+_4oVMF zf|IZ|oP10t#l&<_8NgW91rr^{6D4NF?dFx`<>e5}@aX6O!L2oQSK#7B$DiQ>Fqe>$ zk(JsGT*F}kHxDm7yzdenA?S?&il7&yw`eFROcnHix)}@4kC>sm{J2lhm_0&%ayAWs zB!tg06nPn=c0fahTlc=8qo)Uc<+J>2U};HY3Yn$++rhVjBL=$1czgW?T4yw_sKce0 zT1CMHFu%yf^@@B383Eh{I2+K*aJ4ty5JShQFb}2+o0P#UAcurRwg$I5$e(2D)ZhBBS_dO|g?OhROZk6ck zCt<3t3;Opg#YI2xRl%*Ovqwr)qbdhWULQLdE7ZS9cgGO&4aeouxwm<9_EjsxGkr-p zX%iyu3SqHK0xBBG@#zlbVgsceeUINaDMct`h`Kfu1Z&lro3VLo{v4zbKi9;vmnpEB zMJMN@j!S#(;xHoA&Tz~mo3dXxj= z1x5x=pWaJC^8M#eSk$CtWT?eFie9}^>e91ubQ~(xw&qizXpFqWf*2j%C@><%;pG3@rZ~U;K zp`~RMbz6d$9*k)_2Bi_60lvQIC|n{PaFOZ(BFp{pXjykX(=c zq3pHe@UFvG6*VQyC7vZdxjlByG9t$;=E&iBmG=FqIr~morS*RCQc-vu%}=87`Q&yk z?-vB!{`J0(i@~f+-qaOCtJ7rs0*m28onhVXwm(H$P%{ADubwD&nm&Q%cPRa6#kndfC z#^)xk#_Q+HkvT-x7%K9*z#x7h&4Tpjsrc?0jj5%lU&kwy3vb-?J)Y4URd!HY-?xcw zPl(xB^W-y1%7+;;INA0cIU@aaFsa7#n;AQZJWfsX4>8FBY439)ZFN=p93)%V1b~>3 z%@1*4x++3l+~v;)U8s`+aP>idwAmY64L@ip$`b_UCuT6*BUCN5Au4DT$I* zmS`98@DP1iHZ?OdTEqQP=mwlJNCF)l>%clhIsnQmYAWb(E%6qEMPi1mp7GtGVMAeBE7;xGw=3qzr0_3xHha;-iV)si9Hw{hXCp&s3Pob z&lg-g$RG({s;UwXd-w-oteCF7*aeb_5z~|Kh>m7Me|NZ$qkn}SU?dfl&MxBYB4Ozx58wV< znucL!i`3?l8_imtma;N-`wx-4c$~Fe{7GzVbbTZ>yS0Fv`(f#CO`aP;qe*AaoPJ@$ zv3;A;t&>S-&mQ-F!nZ$Vsd>KkNYUVnCC4TIc52#t2u)v`ue^J@Td+GR#Ponxymn-V7w?5V@c@Z@WEdm zVQjZ-aeqzj{}C&4CrB9#_}~rE6fZ-5JejL+Xz0-Ul_-9kI0??+-Y#Y< zoD(F8KMb;{uA3%L_R!PVN` z9$uGfGI2~q+WBUsr9}wuTbh5ShyR(*HNWso|HVKx^W#%3Pgd_4m`%O*JycikI)@$qZdCO*lQn{yaSEL@|>eJHt zCh#RCCu2$&r+W~(3eW=*8+IonBSVVBkB0YI*&Rp(@Tq%Udq=v}YbZgm{Q5OM@B*IS zSEuCr{Q2v<<>=mk4yCSMZ7=l{Lry+*>WM5X3=rYf18^o`P4OU_u+XW0D#4r)R>TU7 z9vV)}=s;bSZtda&iT5)^$oglyb3~mDIgt?s7Nh!UV-o|>1Ex-JD}ODRczNf+f%*IS z6?<-aI5{mbdahl7llyeQ6rleV5_}ubbm5}zxAo{jiy^7w)V!|H13L-FDC9-oovqsr z?_=TQRFIRigqza|0?KE${kZkm=Y-)!HkHhL%`4A-oiYB~(Er2LSu;8L%ME=8Ii5HB zQfLgVhoqGTtdmsEZ=b6rnF!%)`sBubA!TB!@5isdMi=eoo7q3sWbO8t6&pyge*Ja8 zPAW8!em%?jvy;dX7NxyXGt3I?MTyQTzoUOk^%%;y2XhG2??7L*34W8J)Wz8uit8gE zA4s$EVSIj-efTaXyjK<{ZzME=q5^*)bMh5}7)t>whoEqu^wI-9oC12MOYvZAz|f;n zZ^vC*+}z+{12nOMkY;990PzTp`<689c z2`~6cUOAFjl7uFf>ZblH7mr-EeiUKt7aMD1uISlTl1yv$hCwEI+`!yx;-NtXZm7~8 z;%eLfr0k9b#<}6_2F$(66dC(Cn|?aV6+>*#&?j}|+euxEK=#8ek{V1tGWhNz)cf{~ z9i%>b~8bWGUk z!)rEcuv$xpiD{Og#mbp`jx#rPb^>7`mpf!%5<$A3gye<(B)E%9Y-RtA z!6RJCIFWZ!Dkx|90(&qmC1v)1!d;&VFJj^7`P=sBsUtP%vv4~F^#AZ7SGxS?ZXwv; zcY76%76LFSveqb1eHLO8svYhDh8D&SDAyyp4NU{wGBtNNQN7`bG#I%67HTd7pc1!_ z=mTjn@hl%n0yGe?QRRD?6VdVkq>Y?FC(MD zfdPzYoyI-J(5>@9+Wh#Dc$0+T`WPM>;@#%J-J$LP8+?tHQ&W2jBRc3vv|>}UeLJ_q zP8VKSDD?E|%+!?A?4X|$bK0YqVPS>vCMD%;>v&uQ4F$x?IVsa^YJ~q zc;fC{9H{n&SP3`?kc)^N4E7ds^{(xg;cbJZ4WJAz2@t2#4-0l}FGG32Z!zEt=bt%d z873!n)YP7Y6@a%xyJOu^0AtuaFm6u^u}7y%m`P#~_MI^90g_|(Lu_M7-^hqHJt{oB z2+j)#9k}~dFLEIoeh@s2!2QtYenyJmUUk`c0j?S&5XhYjj~%y`=(CT^&yTj0_I>UFeIUzf?G$#QiIyqwk=RMJh&jiz*Hc_GIn^ct|k15L|JaC*rK{JEbFs z51%^x3|54wIzR*5&8Y!g@bq-U@8AEX%Kk^+U;VzR8|~rYft>&-1rqSQv7mA5*87Z% zF6ePlQJxsk?yYjfvRRp$QuCTMAwTPsdPIbVnqf}U%nYurfU{6ka5E{K1&9@~SM`{C zBS7q_-M)S3p*WgbI#S%)4zpd~A)A41Wx9IeC4Bof-rzgr6Z(ign#21ZmG^Y(+%+WL z4vU0CSh&5hk&+1o(u@31*GpJTdzYQQ4kG^@way0aIJtxfOV=t~D4Z;bQ%b_kBXQ%D z<1eMN7_0~dUUycHJNpph;C{gUwWvTlq$G%)0H$*W3FoNB0Pf)?g%uCFBiKv`ZDr+G z(UyYhMts=|iXeF+C^|Z{w6r4r00=dI{R)oK_ics*Yak2XiO$LU+jig$J4-zSJS(13 zJrW;*3*hqQZ47?6(*Qi2Buwt^?w}F$9K2!5A@zyF_PMt_akWLuLN4Abqz6mz@bHtu zawKZD>dQBklx`yrKP+2<2?;j1(5NVm>RbOE^*K&~fPUbjm7ftpaK@r$jQ%UZc}6k; zLkUI|0x~>pBYk~w@89!5YQ(@x>z_Z*;kQBkKw#sWV%F91?p*=gEe??)y&Y{TALhPr ze?i=&6!bOT-2U_ZZHH(tlK^ftL6THfKJJZwfYN}_a*TnY1ouQhcY@U?-XjqEiOs}^ z5@%8{V}~?|TO?43BN!>!q|ZP+y9w210U+v^?YvkG1xc`kHaNh7CC-6j zg6ON**s<%Y3s583Vh+W_QUI}(_*BNgcmfRr^JB_zz_l1Sm51%->;WM#xS2e;Wx=n@2aROJ!&x_Z!*X1gPPfW;2e+6i~KP*b5MfH}-X^&w1Su(mtH31o{EsS=CibYoEdzEJIm{hKXri8U?&MY?DFl zU<@}UKn19&Fa!SL!L@@=V#!^7uvL}?ATVTr-RTJ4{Qz|mNM5!-tRceA#6f|Cpk7=a zBKdBEa%yNsF$jZ;?-RF-nl9u?4C`iKuRaCBCz`I~?D6paGC2%L--wV80XzAVPpPTJ z7H%?9e6HOR{t^-qny#-=2LPN+FK+-kaa1a}{dyn1B_Jk7qxoNu6O!jYs0QJ{m&qk# z{XAfJ)*=hu|8K>97zP*39jzuHz9t=U$M{}0$Y3IUk6kOE;ln68-;}}js=1$?`pz(* zt9(=59xVr>nD0qK(-nhMr7ekZm7C?fI_08}w$gaVH2K3d-{WLOI|1DHkN?Vk*~$pi z^qMT6$8#=Ov=JXC)6kTpCW4oonk#)> zavB!mx3c$z8{|`z`cb^8z3tJKEb%QVN+oCf+S@1%q#U@>-wl{_X&Ef=JQAHkrI8+u zKiR|h{Fv$HcTa6C3Yn+w>nak&amT$K&7H09>**Nm{~jrGG(CnfuiuaqH)=qv946UW z^o-?HAfNCIOQ*RpPna>kZQ@#iCWH-6khEdHD2d)Vy-;6}Vd9xp)aKF6DSOq$`&&uF zGo=$=!ih3SNc*?pg81sEnMm1dbsI+aotv3ixLB}0OlYe5?9?#rSt7$nF+*&&MEmwH z!{(ClX!;OG-y(8wn%FeAH&3tat^&opEJ4>exG2aqaB;{;OT{QbAFE789|% znq7_Ii^0@&v9+JS1xtBw2AYJ)Bqo&6P|3Ld@HJv<|TY$s8EO)tlPfJ?c0N1rw>Xt>1$DVhfq@c)eFR{la>AtmDBvg*PPLwS5 z&AhSd$sH4qgAQw4`4^EBni}yWsfAei<9JKQ)L^i&*FSA+kWWllvKEeerJAVM@TdM= zjLC~<2@=Ywzqsd-smiwISu2NnjDC^HO)y{C^DWI6!Fc2)y_*>RK1KI-<|d7p>5zfN zUh#q@esizVA3gZMf_*;L3TzF_&D(-+7*y3c?dDxDEx51C38htrUY4@I+gp!Yov_Fa z&q+z@<)zAOgF*4aB=L_)L!a~B`@B-V2VA_VifMQOQJ_txsAtTl3?25Jmew`0 zw7f#XqAi!J#OF_oi-CI=YARwdd-X~+g!z>sMo9q|wRiqxnDo~>Gk()wPK(XAl4d7w z#hzwa?aUS{eVzK82-!Kr7WTiVK!pp?`U6T~GJ^&H!C1A+)?j&p6j>dAe2__iqbu&~ z*HI&(PGw;9VBv%!dkF&Ztswgi!8f5sxk%{w54}7X+oE_@bU1+!bum93}MvpMWW$ z$K-nCXV<|0{=1=F5J zPeLSG>Oxcz+1Z`zSG1pLC>W$3@`aEw2NynLv2>aBcfb<)+rsr=WP;%SJV%S!581a2 zX9D?BsIq(sTS7Ps)f4KpQuh3d0c=McWNshHL`2LR}$>v%Bc$+%f<^&>`}E>i=B2SA-5@iDqM zB@jKqzU%Yn$txEWUnMyUd5kjdnjw;f3y(|Y(59LMAB;YYG)o36k5l=!MjHF)zCdL{77xfK2)Oy`se6EusQRGvZ~v544Y8eLC1 zznv3H#!;)ha%~KL!tuTtrd}BYBa^FX`6 zjtj0){nhbb5CMT|TQ)niciHqojGPd(rU;Aihy!;Xh;aiDYA`538FawH3~v47gM*Eb zex$W>7|7UT+sJ}7{`I6^KNa$y!j?CUJS&JNk=oEa`` zJ2E0(l#R*IFbKZ43$%Og`6MsecJw3mWEA$2xBH<`y|fC8IV02X_!$~%Dy*->1JO8Q z9QS(DHXfXB9O>B7$?T`%Xcf2KMe_PH&(uxlPBf}R;__LBDny(g{19(V&+AFruCbu9^e+NbPa%UV# zTj0YtVI2E}LQw7jRmI)r0HO4h`1pq~HvuG|tD>WG0pEf_55Uf@nRGaxP*a135o$8RD$$0dng2;5*{=ygUvA5fgxBP^tyQd+yK6S7zq+#AVdosLSm?B$nRnA z3PIDj!C>OrTj?R)lag@9!o<`EZQ1s8HIyMBae{y!;{QNRNG29+hqQ(VBS7$pONO`xuH zrB`xyKL_PzjvCPSW)SfVT5z$)JUqZiN6TeGJq*1pv?|Hj;}j5~oS>P12S&To24GBp z7JUV^bc`HSi!J2y%HLs^zPJxaYQ4t^^lO3m!U-S@pc-+V0&KH>+C6?W%>!=5h`6~g$y%Gxw5En#bsIDJ97 z9`?A^ar!x9J}vFvUb%oGNNI%O$imhetZ6!?xg&*-*W<&Qn?WXiN&YlDRqC?6>vo^o zgsV;Xsb=YECjRJR{=ULOI2GOJQ5g}O#_HgClwilR-A~nLOXKhVmhdp|S;FXA#a(!=0W#^Bc+%vvHCLh-G#;T@5>T=`$8(5UcVVc>aa9=>hrYoqW zzVua9`_YPzC&;*sCgAo~fmGm=$TY6VqY@uaZ3~Ic;?GIVQj^sQH{r)Vl+27f zm(Ev`1QX~ow0(gn#@!AOu)Mysgb$in)={{&VC)2(7+QM(03k365i1Qqi32bVGDt{K ztAlKAP@r^oD{v>&+RO?=0YoMKVb1Y=(>%1PK_suq%ZH9%0xt(OX$r(U!Bh*OIUt#6 zAvLqMCS2zf7WM`Z3D^lW6%}v?!+?fh@hQkp0If9O+EC;F@w)^13IG&AO$Ta(&ea3R zp@Ojo@>*sU#1&wmL8qQA5CQ<*^}noBdru{0 z$omKP5447O{dx|*0dx#dBrs&;=jC01$`vwvKoXNyE^Y!Kvp0~Fpe3yZ=OTn0z$*dY z-`3sjQx^b{T>o!W8W>1G8?cDkmq02r$Kc!n{lV`nc597|?^W1RTd-tc z5md&Z=msuBL-w#&P2Ir!Txnl+xIuOM8h7BE;d=&oY>Qh^i0qsR@h91dd8$*>gzPz= z2)P!1ISdTm)%DRG+6k#(n6B<|h1~$l&#Tt0FL-SA@4qFLz;+XM+7cS&`z~6w@B>U+ z&Akgw;X!nB8A^lLGqH#v$oH^O9(TSvE>m|Ho%KEEZe%c&S(oay?QFEvdoEh!I<}-r zc6QI4|BY*|i~L4L>;NpLg7dQ_rVO4pKUuc?C3PuL_AB8bg)GfBvT68XDI;5$g|Lf8 z>l4D6o>3CBEz4_%)eefDs5TTU*rT**O_B!JH<=4=NiV_QE+Nkc76f4Y^)z_n>au&Q zZFUxq;k_2e10G?cxqR5*>@wm7NAliogt<{iY@yg((L-d83QtT`E5dFWe*MF$_5f1cgJLB15_>eQbvBBJi`XWV`oRswM zWDS>~Jv+qi1pk%uQO|e>1|Bsv{NkD?EN77ETw(Qh6t;daXGY6p0FeqL5tw{HP9_X7 z^8l`cnSxm(pBK8)0AU6i!4;4;KxpR`^x*J1Kb(M2s?VQs#Sj^}5DK#pZv5^YoB&54JX*Kz!MF5G|-8_Yo(ib{tvbosQI1{T7VW1oE@bw(Sf%b z2sjOmuN4(1Kx9Bl6}+Q}NiSK=B0LpPbC4wfK!!UbO-4`*aXd$0{Nn%)VI=Q{XW(u` z9zx>})*MI#1cL|#bZrrRG+y#n9_~Y!rQHO9l|R^?I$K@&1#1e#!9u)Mlz-E_?d8=K zG>W;0Nd|w+22Lf|MFXn=-8*bxKL(&bOt%28b8~WDLM$Kf7q;1eECIrIba3F{?5tn< z?m-OGO~*v7ilSn5{WNWf;{4RL_)7%dp_a9tLs_1PKHBY|is^Hm(5}EC7`WKE`FHn* zc#X|9s|P0nZ(7JtQJ+x%sCcxTYK4AYEmeoIEkJYiz(s3X2a7QhinY_YK4*`}&lmrL&ui*vUa<_5TnQl-SsC z(4y2)o?c#{vjrR)VgO=5-2*^BP}v{>0bi`4I7oINpxm_oQR4g@Zg6KCA0<```o1%j|)8O$lV={vxKfkO&hED@2(yLZQM(T|tx-H<$g!lKnN zTZ3I6o7GeO@79`_s|*5KVC}UHdSwfkgxnh;>#;3PBwwtrm(htJG6WbLAn{ZNfw#q4 zFo#kCVhM`tHBeFiX@ z!Qo}hK)knuPXh*5{mnJ>ltQI~P*pg%Spduv{{XeI>na!!3Hi)$Ljn37bQclu3n(G| z;CJ91Am0{;0a&OXKl;bUeBkgvlnc}$7_NO*d&xm&9qZ}32$1OBA#|3jZVB$I-I0>&Pw zz-$%p>GV3Hz56m78bB0W2}h)fE^yU{ayoX4O~Q6 za4}L z%*m0xoP$INP;`L11u+3aCK;HXRg(P?MD%}5i!vBiVq@XV@Ug_or@rK`w??#9>}PR} zVXD~`?Gx0*F^Q<iNHT>H2Rbr{g@d?GXq@rZ_13oc)%h0aBibl^U=}@vr5|`QWj#H`=3fwm z21AuP0IWrOPo=0)q#>CW=6KMaLF)n_gJ0FS?jbY-mC?MggMn-?XvHuEatv^TBeollF}gVQKyQ) zY#qN%5dwqXw4NJ?;_e5Aeelyl{R_SN+}ieYE-F7KVot3~(DIQ`YJFDKZsdNp8N4GQ zacKKlwQHwi1_>!?gzm)i&Lfvv%lTVpVTfA0UHAh{9bxINJat9;2|Gwmvq4-0r64eq zCtH7cKr;ktVmFlkl1`ESpePETECKZadUctv_uD`q2?iaYXn?wCreTG%3git?IIv@1 z0{?JNLud5=Cu8G>I2L$dGgNrkgN^NN4rCeu7;^>-EZF3Qyf1;11I3c%_%pb}A#(?q zq2uk)YseS?%cjzd^8fyPmo4fBchCwj^#o3{L7XE9)KANE_e-#ElGvQIR3s578UU(uS8Y+15 z{&TG{Sy%c@$v`ji!t+cw>o2pw>tnKJGtv4hDvPTrvNBWQ-2AnLXEU01L>GY%p6P|( z+_kQHX)rt9;)TSP)J=v2A3$*W{pm-nEEy`=r$~qH2&P3;poWo!I(md$nonm41qkR> z&qxC?mx8s>*;V{)ujC^ixJ|z2k@q^(U3m|tRE#FX$!k?*w>{2{QV$PnU-=qhToT`5 zV$8v@$Iqv8J3!j?i&@ntHkXedl3uFOoV?CR3Aj~{TrKFH_C|4M@}1%etF6(Jjum>w z?@tbjKF<>cF7rrfW{*!h!stS6lZSNMx^ye#JUN41KR(`Ak5cUU;&fESErTTL;tz}z z(&QUoE-zm$a;l7+Oz=o{uJRlj@5B(8u9W$_D@hW#sQ)}K-rsWYqaG*i$M*pmW$PDt zPcPlLww8kH;iNo0#;7K`u=id6*Mzb?I>vL)x@vcIgi}{~NmD_+yf6MJrSw}&9BZ5e zxnQHi=^wqlf&d>cy_d%=!+LiVG+B=^JPeLfxO#?CYUrgxf~*3iBPANwYT)n^x(&Yn zkfI=Q7HeA;ksq7uuspJKHYh5xMcX^_>HUh7rv0|@P9o}jYyb!K{QPahd?X&`K}?or z#g?I`yZKKAIhc$((n3&9DDP9^DpklFe`_v!Y-45c4JSLG%`?C!<{=u#0zQtY6(Nn+ zw&rDsJpwZSAhAd+PZ&%l6g6%6RIDZ&*X1Ys{4E?lJIlQ#w!J$uZ2T;R8VR@KaI)h! zTtm!_n^=WZOg1fBH(^0FF^nM~;K){-AjX~Qfc%B&|JtUW@(z!rKCOS0 z;ubXI8#4ZwADvD}jGxnS`JSAQUrmiN4yheUf4Z76m#DUYCQDZSg;{)YaIe2>Yk9)P zzPg@23NxN)<%N~#Q3Q{bJ_z}j!6**$iphU)6$HJ%{MDv86>thc4?aEdzp-C%yHk?aW0;|k zVz|j+^M{q)OGwFq++=T2Dj@RSbXG(b{mrz1ZZET^UROJQVMo#9B9l_ZD<4r*#@r~F zAbu#giiTM}yy$Kj+pEH(A1$5Os>PCSiZ9$+I~3-+OQi;>mCZQ=H&b_Jec%nSOr&9` zpGRje@T;^xM6;eUU+kmK(X^;$B%>-!zxgd~!8X^bsOibT?pILwLnc_Pp~<3?Q_m>H zZP}-#)7CXZd2|G?w}>-;9dpd4G%Y>gyIu^(V)}56RDm6-qX8F1QjA>v*Cfxk>H?bYiZF?~3@=`gx+vlWk zMN%rQ>*f2^TyDGE7}X4G#7_Q9lQQN(t+MSviwsvc&)P|aFjxRhAfk{bNG zu0X5e93AxYYgCT8G40#exp8fIMs+w5i3Zn&oGb2T-A-xE<0jS~H25~9#Z}rhHJiOp z(SuYosZubFG;Vt6<2I4@rKHq2Psk-FnE*t}P+bcOu_)b0o)fgh3;f z@Hs|omsK^z8l%Jqj_+;t8|2Th35e1}isW2_rNnpgUcPY7o~$6Ye26LhLM5+Ba+9{GqC8U^~{Uqaf6tH7t zmd>uI>GQ8FzlT)q{>8!`iX>Obr%-0Q?3YfH(fli`-(RMo^ftd=)>?YXxh09REkQD7XV)`brw*U#L6su;LC@b%qDfLK3s}-R zx2M<*YB5a|d7FyQ>V*(Gq0h!`^w2TX{XQsG{ySHC=Ox{ip!m-@31m0;D>xVH*w+$L5KDdef0dCWpD7}*G7;3nXAm@ z`>U!lu-{%>bb1X};^P~UzFo4tt&?cm9vD7fzp90@hGk_I2sbud{z=wp+#rPAf)#8K zIuFI=B2^4Dp|n}UI#S)_e?ib;G0JtHH} z3ZgK>ck;@Tq;Tk934ke2-q9{BTgUji^4-fdZ^1wBZ7kfLdCGJiGG5icqPHKa4^z1E z`5`C!DO;yT`@+BHW=lEkCAQe0%aG~uRE^%>j+L*?FYgO$f`cPAbJo6(2E?MvQS zSveiD-8?PiyuL`j$ML%5!K;loI*s$FNE%1 zIcM0p^>H33?;j#MyF*vQB8<*LeYq>o_@tUUx3>Cq+nC3zNm=tFC37* zda}|Y9}A>Tg^_fS+0C^OHb+Wdz57<5-<^CYK0Uq*AU*RF^+o;xbR4*x;NLs4FCf&& zgQtOyKuktiVE*N!t{-Lm*KJ*s6)>#HBA^`h>FZ>L~==mzaxQm7F{t7_k`BukkGR-XZ}o zRKiws{ajPC4>}pLbMXC z6nc7Xn-jJ2&z0FAN{X8L-%5ebM@+JZ&qPPtB3?fJvisABU4wqSe;ws`XJfWrL@Y>Q z`+Ye*Sp8--)t&0dca{GvayM6^ui*kw{KYKBN# z1&AXOedK!j?9Iv(*7#(|1% ze?_3>)S-iySMBL9A{PDq!}EW`>p^UVi)7M#ZOv2osL0jgCzi9t2N9~-;UXJ8@IDj~ zE^~8K)$_++@7%kdEu8lBHfno;d>RSt;n#OE_Ejo+dgPE~Gd@)x@xpr z)9wij_&*F1y;yf*==z{HwUYy>%i7%aX{86jjvVt$Ol#Y;fTL}F!rw|vr3nbObVzwN ze|A6wNo>7I)hN(0uA1S{&QMHNcD?xLPe5cQ`qw)c8BtTgFb1P*&)Qn;-_2K9*Td7j zc&CkQuWL7rm97}(uRPpbU_jVAUV|uKMyAK??8K<4p#1}&@GhG!)sdEVb32)1jrFH7kl=(pR(_VoA~hskFOI#}p_m3eBN1o^X2 ziQc~T?`mv82;#qSOnAxV?L$J*qbV5{d{|Su4s}IPUm6U8YwZ>Na z3?gMRijDMA>RkbN>oP8x!LPTocckTBIv@o|OsHq^;4a1`_!D&X+77um@ofT{<{t&< z*SRnAb`oQW(q(5nBt9bF66EK4S^&XQ3=D{t#Zy!HiY) za0w_M-0To$1-B>QsNOX7zkX?e3D99B);6}c4OrQoSOb51hl3^Zc7}}Tp_}s~9w)Np zP2NtoA6q}+AQGQQY2Kw*u=<8`b(Y)Et*Egl-*rsq$ot^sFqMw3fvLUehxgiTHXDQI z_K}L)=kN^wxCH(QNB~Ca=U7TvN)+&^D}md5r*3238{7|0M~;Bb>({f~pQsbpoQ=#f z`RUox32*e3umN2E5Qz{P5}J~c2?0gN8z;oYR1s}GeXKtzcq6r3L%Nn_Es?2=#j|It zJs5Zdn0W*&zD+*^td^~}7eb2wcnyxAn1J>^^wBzhHI$z#`yKY7bs9foYO!wFOFUZ+ z*jw~k>Af;+?PgFKbYJ*!tDo7iLxPKo{Wpq6ifZv7*91>3`#&=WI;<;!D+Skp?99Tb zb)WF|_W?cyA-#XN&2SqPnOXzEQ}k6zRCj8QSdlP zz`)H7;4V1sSGN6M3A$p@W_=(rmHm(TpJ)a|zXeKx(HI4Kuq<3&e9nzho=vQ&flQYg z^rvz8^u;)|j!KxyV%a(%t``BS9B#Wj4KL`hIxzXm3VODZdh6EPx9ne`V1C%1@HlLz z0^ivuO8iGyRz-#Pgw;lNW}%;@p3v3ywoI^;)a_xl2AZ5BH`0fB95&yMj{f$1kAGy)>p-S_t2E~HDNQnANvE-kqNTb8z9 zi1IP2aSQrS^9u;voUIZnH*x4tth8?yn5_>N5y@rbVKY&(d)MpnP%X>a6d zt^XR;cAzU_|CckrvPX?}pEW#lQQ*GKk9U7HGwYqbdPNqW?G)8@mQB(Lj#E#0$m@?JcybJn(0*Lji&lb$}={MF-ej*PmkY-1n{OWX7pc~7kv@);Ow;x@Q()Pdb)oT z)~pYY+aN9Irvv)KShFB&L@@zja)H_C5_gxQP^59@dN+y&Ha1=l9!SQY8=i9p^v~2@ zjNVkvcM%&{&Xg6GOR*E*Kaq{z>%$;Awfai}1Nfhy`(g3V-3KCtkPrL?*H;2>nqewD z9OjwJzk9ZKC0pDMh@gj$VlwAm+tJ3Okz3zQ?*GhMq_i)2*f*GRzwDRtMsripB#cOl z-25gHwd5B?f=MrGGAiux#blH}=9?Gv$s6Tpt&g@YTZC0a&XC|fqKh~E1EWyTA?)$M zG5H6dewdyH3i~9jTi{fTO?8_WE^(>vVvBhxaAxuhvbg8zjc?ez)7}z8jng}9S(JqP z)OQo1UlZ|S^7t@BZ5GGAKzCPC@|F8#r-gjj z#+n$>D#Faj=+=8V2y<-XQ46V^qwNn@hBqU;nqzE|MF*KEkH~)73IJ=Q$)ZP_>*lje zXP1qHB;=c$^Gc@+g4?I#mv#rWf&#vnE@h!7H+$Zp%3zyGW7^MYeOM~x{2*C=l*CY1 zCUMUiE6U7B<&bSaEhBey^~(W9-tdQGIx%xingZpQ8%8iOccc=-T^D%J7q^*!>4v!I z&QX1i{O8))tOEq<`r>Zq1FDzY^Uj1XqDwvk>pMR6$ za)BpF?{5}X@%V4-Bd^+9Z_v%XhV>LSIONan#th49kXs;AWmp!{ynPps8=jw$&EjDJ zryPmCV%=OjKHf@GOh!qGb#pDMEh1X%WK-U2pO%#si;B~+JrZ^RUVANNHkyTxTvmyG zz<$B4FW-h$TB+^(~u`vEVcrx5Y!Zd&VnPlO;B-%3b)n=I@;k zc5q;2M9?Fu5%LPV{uVr8-Pq^8bt;Nl^45z}&dp7rZt!b=lqlG18&?ld9#BliN%7ZM zd1zj4SVJX(j-EvB;|*!e!1%+U0dXGe`=4BlXXCZi-!VTEn)utM2o)R-5DPYT&D~-y;A!M$XD4tRw_{|Nj|b5a%4}JH~%@XvDW` z>WJzpod}}3C~s1vCn5S1`UXM=UPzdS7*fMx_a_hOqt|y3k3M5|kNp35ETlK~I<82* zN`ALxQziQc&!jRmf0ma+cdUG9K+jfD{$C#=Vp3AooMGt9_~PCp0pS!M=&1#vTVG#f zpJ>7GhX*yh^>il)JNL&@1Ji|OPMUt5+Ah-Z| z(C#T(N+03_K#m`_7--o*)RqJulHy{vls-rRIR#rOwir<45S$EsUO{Hs5<>8wHxUsh z3yw=ie)2Ig2%-rOe=s2L>3IpC3Nq@UhmDfRm9e2AxN$(RW*ra-S<1jOBJ69B0|NII zQ05*G5Dca;NmK|6SfqfkhMmPlnwd`sIRW`S|GhB-pI6%2K<&P)B&#p8p60(i0L|XI zqdSCBz&EhT#TEnGJcNjBoZdnhK}3uC^<+PNDhwc4Ls}yzk(YDNqVW@jMqBy$gHoUU zuak;3R8_?@RSpggz#q4}i+OAHDTMQ#gUN8O50bbW8^u6#)nPoi?noaEnY5tM63-rj z7z1oEh?StO&B)GPJiJGRPf2+LRWt;yJZ5HYYik45?oeABcxsjaEdZl2$OK^Of`mPI z?fsLJHW7}8_Y*(hY{}$6Bd!9cjZp|Kg|IDPV<0J9Am5J))>mPTZ?`YNG65rm;F+N~vy`qtRE^7rrHZgp6l$z!{qExR--OiEx2 z5{7V6XrT_>Nuh2=O$DdAkB<+uI9@%7Q=ku*!b@>lSy*^~fMWPl2Iz1qV;dU-;G^Hai6jnr!M_d}_EF9m!*TphxsYZj)((v%T3R5k5c(gqL63uWmf(E4WAn%1K=NqwpGDu zpsaL*%v>-JLn0hxMU{d26WRwu05y0bA*|SrHxYz$@Ve9ipz4YJ&kV_&Sq<_S$Ss3Y z>E?=fAfhpundNCAp^VoDB-Ze9wn^~YnAljjYmY~9w!d^Ohh*r3s0iUE<#V97egjeh zUXwddk91ceD5ky$>|!dHoExCovUe!S)RcGsa_WDx57jqu zLV<#77j>(f*t#0WJLTA*txwTZlM*pb68Wcu zFZfX`6@s7SYoyfN9%(!XVYT1sn%x>KHV(2 zo2B!B=5$WV6NvhBD)Y*q8zFy5kkkPCcHOk2Tj|E^*k{(Xng&CJ1FDelwkRPVEA6quQsKBm6e@585A@{ z5d=Irm9U(XiPQ^0-)ieF)`V&p$a?A0$H{Ig{vQ#FvAlA&8$8v7HkQhy-0m@-zBmdNgQ|%gw=2 z4Lw3F(pf6+Qbfdld%VR=_v#<23qRrzCvp8J z-QhViEwR-&{_f+WSFr|n7&rbQ=;Wir_IK~h=~Ea#-&8y?J~JpjjJ(M+DHY(TNq?j0 z;&v$Ul@pD0SN>;LIs?h5-tR;&2Xa=6p?km<0cChuWWhnU&>z+F6u58vkx4D>(vPw? zTEv$2q~8t;LShO%{Woz}d!>>DNJkE?uHBB<#nwVuh4zYoplTNA;kvpD?99ZJiaUk| z03Bs~yZwH({n3mG`6e7h+T~-rfV7C zl?uMHg_V`8ygd1Cyiiz#$BjHaYuf6YRdL{4f~ztyA%Qe`<`;O2Vc*OYQw4Goh!$Gx z@mQhCptG3(fewEe*22yHhnld3m|jKon}m!u#otYr1L>K`q1fiRt{0QB$y;*nTk;J5 zIMrho8Z9+dMq2JPZgDP&w6WqmeH4((Lh&aikkm}k>jj@!kYIOZl-`i;S$zjL6lIs| zJ~f*pra2bI=LR&B_}Ar3{OL^m{%b@$FNSf@ltLU#(jPO?UScVcG|=f( zAbXeg6UFY_KU-z5ElD$6DPyD#{LMEJy3*It)ziQ_zb?+s{hoP|kcpWo=tq#54E!!# zdQw?U1}JYTCK)p_DtvMRKa9UMD?>lCutXf5$7SUK%gVWlZ0FYtq-0O;;P<~jNQg(+ z*>BJU=AQ$R|E@X5wMr6H6vTGuQ~^G3B~v;cpfxTxFO|VG(+GO)9;cesE<*WB0wv4P zY#r3T_$C6|`aMSsLwX&M02mrR1T6?~_|5lusB7Sr;Qs}@)KgZTPA~*205`(d)oWfX ztqnM*l`8cZG_21;^ufroWc<-*7{*Gg5;C3!bV72MKF7TRg*ka%b4sXawB58%ZoMiY zf5bvYplquXsvRg+zE%`cpl(;AQ7|rNkr|RV+Hg_zT(?|XH-L{-(`S?!w`h-rVY?ChpSNW86XoB|`J$Qn}d}i77EO73|b_)6S zFwzl_7RElU{<3kUdbPZ%yOYxIk9Bj&73tNQpeh%HLKZ{QA?aYa!E$}nZB}iGS0dJ5 z8tnamSDGRX_mDT;V#EW-R@=S82g(kM?xA)P0$?`lWiJ~lXOG`ocgLkUg<(hRqMB#ZKZw<8^ z9hGni-SfC5s_{~lClaH{%)xn#8M;4l2ed>(QR^`z#s*kF2T^i=iA9h#!L-2&| z?Y96=-CVAUtd0Nq^BPR;Atr!v<1FX?do*uP2YM@eJHwKm)QFHld@i+oX!Su~o%F+! zIb;k%vk`*yO#XUwWKVDPw}GjtAO^LwQarM-&?GSadKXECSAFunLyL{YanV-whD%7f zk!15!Yl6u`hp!cA33+t}rk4#Wt%=J8HAI;PVd;~VYY$S8k)CF{Wim4yP9F)xy;VMM z;cZyFaBpJZ%D&QY*%PgoN4(_BS*`jkYuS{&hP}wyJ*VMIBN~4hc8JA-_Z9XW=c?XTeewY1i z7S{di)7Y-DU|hm3WF+21pC5j<_Rem*yUO1B+oSD8Tm!rCEU$7m`E;3(toCa>2IkJq z$gEA1$$K9-b#$uyjkbCu8jqB{&%db8N!Lx>ow{&2sJ|Jt{KvTwL8RqVBWhL|f3PC6 z+7nfRVc*Wl@6fHaeO2wX;wh6gKu|exH~eJf9TQJ}q92inbR{D~WFFQfliMvFYp>9UVLA zVG$)jciCF2zmP^UwX*a)PEk*melciib)$VIc{IW-^e{QwT-WPDF<@a@!7b8}f18%1 zj1lYef>P3^SZMnWQ)f{@NDZS-uTaz*AK?H)GcAwDBP`rM&AWCMO58)rmETHGpL2=U z-&Yg(kX#WS&{Z^@vgznioX?6Xt3gtz;j&KbE)#`)^#wOxI_1~Bs7L8(vm^bVTZp06|8IAIww#$_sy%KrVn-cH^pjD_`sm}iRIs8J-GtR_d4}WCCfieC{dAjm$gri zsJk(Md^+9=B*=TMkDVdttIj<4G3k%-^UgcGK|+URY71T9h#+7{PQkx>~hFw27o&Fn`VcT=LUt1kQ*66bWa z=`T;7lJEEFyCH)gFIGr1Gc2HsXhm)4qZXCJ`yed~xH*ivp2e>h{%giG!wYgNj_aOl zFx5|6wKBS_6A-B-^RlS*`0yzj&Aco#GEeH$yaa=+|4UsBETqdr`zz&N&0(E~rBUs^ z15S`{+po>%iSKTL%Y7TE%oJa$eQxE#@{mcJ02V2?-+Uzc!wjLqlH7NqTlOiqsw%%J zdX_u%DZS`r30andfuY3B87P&l^Xeq9K1oa$GrRH|B*tWVr)7N!OksINQFjk1QBOCV z`2LI7_dSts#Ipv%KR&SO?4hb5%r9O%zcLX*TC4u88WyGvIa16MmjB8|Tkk!$V?*M6 zD>CF_xAly-hiR9__{BGcT_O#&9|jYBCPX-e49Ia(l#XjZrw3Un?kU7NF_+t#!|3KK zxCuE|LMf`tOOX6y>1Ziv>1tu*A22(Uc7Y{uq&FRz)5@xLrr>l-eNk@D8XfulsVc*m z)%ft;zv_5lB5O(qYj=>~L{4@e&oi*(jj<0uufJzZp9GWGX{zZmTF}QTajjJGfudV+ zvSXBHe;Zd)?WNjZKP8bIn`pLO5P466PicF!Z^k*9?1cg#vhX>uZmhZOWyD(==;8NZ za;Zi|`ks#;68gsi70I_0<6FX=Y(nJQK_Ykk8vYpHLUN6GA9pJS9EZvF^$u6_r@CSl2n$KNmQgY@qCiP6`4v; z_UIXv_Dn4jXCK-7BcBEo(TwT!#zw+Y^j{Qn;|dlU2V$yg7sN1#I(%Od=_*0lqVEhB zSu2vNj4ti!6%tAPmI4E0efO?yr$6lkQtAzPs3ZzYp>;1y;hO982h7jGPq7RRmM3jF zjQEjgXX-D!d;SE&3` zU?=;4i(P@ox2&Ci8Xg=2#_xSTW@9^jGiuG%6rUaGx%!x7I>BSHS$SRULwkESvMq;^ z;bNdM;w-Q)iAVa^@UX9%92Z**9yQJ`%!qeax5*Eqw)=~sW5)^9!t;0nG%!;VmDpxe~-US1Cp(i6f+naC*27rnmhnK+?ymg+UsMnnX;=4miZ zc@b&mwz3UA!HfQI?tUv}wmjv#%Ln~~B`_5{uz+|s0|-ln)_z@Gp$H1d zRhlnVyE+lZUNQNFZ=z~7T);SXko?avy<@o$|BA{(>cOZ$AzlnQp1C8LdaDK3G}9xo z)dMdh5*vc=bo^>4@5WdZF&ExiC5S#LG<|9Cir{?lf@{_!U816$LRBK+`Ov$8TcU8M zZS8g5dP~}G@Noj8MmpRYUzSu-1$scSj(y03tJl}1SH5u2{P#rps)(Bz3vUbiulTkKm8~=U= z-xM|b*Jyuxkd&rNxJ}E;b^2PPCFq>^6e17Bj%RYeg9#!%LRd~o3H&2Qa&jS1=*eXQ zh%^H~Li8T=#l*l+C#fp|{3q(VwX4el@?5x*4#Pqv(hzNKGc(P+g9?rrU;_r^43RPSHD3OF5A_ulbX z|9$-E)j~p&N)*Z-Au}RdvNMxNvS-OIQB)|QVP=O)$lj4rMrD(oRb*#Noafbj?%(;H z^El`C`2BgV$Nl);DO{iH^Lf8t@7H*ap2Sz8Z>6yN} z6=`KzvQoxY`_G@u+H4gPaUH!?(8F62@J0T7D*qn!#n8l71gu;(3Jbl?25SFHhk<>^zAquo#ttZQoG=jA2p#lxr;$z9gIi)gTkL$@o7360IxD%C21NJd}Vkt(SrzsyEz zhx^6habZPC)D|pSL88@Vvmx%k_!wn&w>f`$((Xjp5SiPz>X))h=!BL<_gg#XfW}{J zlyb&DBlfHRo&OvC&gQ<_-mUs%-RBiKLFCWVFt6btlDrzjhf3LfXY?+$Fh|Uv zJCO6bL*r9y-^LgB8rB_S{vtxD`wbtxcwwycm~lj;xkKgwtGXh^j?%MQa;Oh87YDGk3|%R`bnd<<(xOK zV-GVLKYlh|oN0Tdan>CLxBP<|CsY)aSWQ?CRwtM{HWm8t$IMf(3E!j>C_f{_V)L17 z>GV^rrqMY4l{$+j67S6Q!S8qL&npJ!%lox5hgr`{WMQgmk+8RNunWJ9kobwi{~o$d8tN zVazk~ej+dU)Y1JGpBSGGpH7m!tw=HHrBC(#hXqd!irufvOdT;#l5RNoe9lZLYN1?0 zS9^Y&fzBEVLZ#r_S=FZJ38p#B0(2YRA7n^3bIH%F7nS#26(IOVW#2lU?c%cV^A%O}dP|d@z#Ms1y@!-J%uccp@ zieb0}?Li9Y!w{g{w+K%zhr#!MAzQb#IuZiivJ~wJu=LOk_kuDk1Qsx6X>Mpx(I9(T zk9=T#W1*?(g}9#^^ELw2131P%@`n^&ctivwQy(fN!;S%B8bcA6Z^MoNzK(N?ix41z zco?i-hSbfTl~P_ugmgOw1RhF8u#yK!BU7l&EOI zyLX{lIE!Eb^c$+!q5=Y^JmwNADtzG71ED}P!Uu28mcu0dLv=Naq~s<2DQJ4aLKPl! zy9k)Hz*8Aol?u{3WWXv$`w}K=;3!IO%n?af*NgkWW=?dtz^)#RxdX?+hwf9~u7ewg z1rH7$lm$;lN$v0at+G$ryYG5RoD7aYR+=znjC%y5p0mr9+~NyV`1QLu3nG05Grb=n z19C+$3Y~LMFwF%GpW3~oplko4bXu`(@S%57fztXThQTZMkEmG<#eTKr8f|c_O1^OS zgXzFwldT@O@|yVNv+5kR@e$Uw`&&rcr4=~-E`U~liIr!RqyGVpEq@4lb+;e}OG!yJOOpBwNS z$-pf*bkGE{LKz*uj+R`J_aG4-Rdj6#suvKt0Q(S$?!QM*^sj?dCB{;CL8&2D!c}Fy z6>DriBO{TX4$v5qkj2TaS*#|oFXce2y>&~H0G-3K#KdDPEF*XaNG|l0xTY(!{;CPC zF%^i^INp#o_R*5w=hVBx10PHUW_fF>7;2c@D?d_6^z|JO*KG+;FlLeFckgvK(sd|U za7vEIP5%NU5&@zJX&>X|lUs;H=j+1?wOOH`670q&Cjo;)G(cY*&O{D10sE}`F(Q?e zfEBN;y*)1%7j7d)f-D;LHa5jB6WTH|l^_9wHi-26p4=4|m%JC$d0aOEBTcuv`Q!z% zsQsUEUZ$o(`o!0l0I(+$Q#^)2NS83WgipfNd-opUzE?tS6msk#yvKo;<$eyksm66H zZDmNXO2lSDfZbHU{H%|yEq6pCoPe2nsA#4&1>py|I1LIhlr6Zzl+9~@dz9hUCL}QD zWm-aw7YiqdFCRvGnBW0u?c_9zU?CWV)dDWKdRp6I3MCbl2Jovv_;;|g+e5&Pd>j;n zWs{@#+;b<2)RH@#72$v94_`Md|GO6Ie)X~&1<8Wt?@iJ<=G~t+<7!T9ET$Nor6fvK ziw$O&6o0m>)8eplUAwA#eQ2YbUrfnm`ch5e4r#7~w!`(FJ0||pwnBat+B+dZK|L6r zPTCj3vmQe+-h+o|X{Vry*p|9n*9iA)pjv~W{t8mgoWu?WD44BcBHmG6+Q-AdAch=sdU0{oX45Dg zZniJ52#+6Ybd?N4P00EB^|0Xm$RSFB$V3^1h{!1AMbxJ+)*(KIh6a#x11@|5AD8pK zB535pMQ`4yI7(^4X7c%SBAL1Q?7@c}kh%FHB8^V5Kl{ERx-YWDG0$$NSU%Lm9V=K^ zXSzmDxjf}36+4&~U2k?&>hR!osRQ4)=yMj|huwhR0|3fP;-y|MfK~GM_y7Lg6hlM^ zB#)1eL#(K~`4&Wc0p>=Xhbb@g#bE?w_8Z1X$a`X+K4l40Zf1?sNaH!ModBp8axUKd zUV9ANcJAB>u5jcBk0=cVxN1sEGkL0-TX1K5w#+SUV}MlxnCBqfuu!}~Y=KL>BcR(HDsQ9{nQZ>zbmGu%@%j))S6g|pm4v) zF}`ct?weZxTaYa9<(f}SD(9?tja#t%gpQN7dPQ{K4kz!z`ji9&DlB)XRP=%C`}Z&I z5uE0plecJPLtAL3Cw~$tD?AypFYs!ps>Watj%WpHG{PZ7Az)2VXYLHibxi!9>xb`G z1`x!>3+fSyijWR%U{&3TRkSt#iOC(o2-!Vnt^^v+2r=-xqk0+vY-*~Ui4IgJ^dy9yb}0{Omy?VC_6 z4VJXFBUC>x&!C1EugflPTPHhTPlg2RI~ud4(q4}S)FkI5P8=b~FyvxRegp(?tX`-q zC>%~luAGbU94P3~k&y_&_m!`XO;5uT8SCRf2fPZuLO|yB>JTaP1+dfFCS3I7gg?MW z2pD*52+aKF78XXFixH?{2?qoTj-8ux-|wJSLn04hn>tg0XT*E+PsttI0L1Ax^>LCw zAVNl;my;6)21f61i9c643Y-bI`z0Om9jeJCdL8x^RDR#EzSDwf$8jtF4E_Mdnmq$&7hfw!g zTB>L(+tI}O>nImK4G&K(-g{P^&+3mt72*c-9#{pCeBeEpT;mSh_t| z>A1$A^@zPJz(ghA_3CHCf!-if;W0JIsqWpMMk?!zf8KL<qcW;RJjUTY2DLH*blI}ADRiMHXl@x>+PU%z6RTKvrH53zoxc^$9 zS~pvzoo=9FWRz~7xu9`JjUMV)DcY_sE?VD=4o$sy(-749#H^~ly{(Nwpf1;rd+DG< z)sLWn;z#0*OZPRs9D-?b#l}BRy_1jDQ3?7{L&Kz}PI)qmGVjpPvhhs|t8e3?OW(aY zn$24Wa|O0b(cNJzYco7??^3sOH~bNof66bGIY{vIVPv&NGI+?y$^EQ6ht(nEishwl z-|ed+eZ-w)sdkCP+%XfFm8^TZgMb_m8Z3ME*uQGm_+++U$O9rwU*rC$?0e`Rbb8c{ zygeSDvVVRQ0r-@7Y3qQ%o;mgV?h>k(TE53s=+EeRhsZG4+n{oZI(OD-eVdb4^0tM$ zrY2fV4-b&-{IfhmP9DWyc<4%7#@+X%JLt21o-5kmGh(qV5Z5Lbq$}yv@6xikT5(%F z{6W^5vx5g(tFz~mFI$!39@iR~j+zQ=S(0t-h*E>`!_3{VwtFdd3OvRGSC$XRb|kv# zu$ggvHOgi`dn3B-Hjk0eVM3h}ySMw_%#rb9UU7Q#GoLQL+pQQ@9$?bYRMxig>GTVh z%U#A2WP~qV1}(*wjVlQfL2?9N_uKr0JX)*d+_&zR&TcY|Qaw44q*5q)r)cerk<+7C z?LB8Z56FMs$9Cz=%@2mMmb>bTyzy|N9S>+7jpV$bd|mGKh`Cw$O(jhAC^#g-qFfA* ze)bkF_lAP-y8Fh=jC6I?+Fn@wmEX< zg_aQ+@g59iXY&tjCzO)C|NDb!j1c-9MwGKYb0L4*STDU7Nb6axzEkx{5B>0}3fUU( zZN9ju7TFk?OWDh|{k0X%XVZ_iHQzBi5;66+fiaJPz}cz9$x0Dbim6x?K}jyax!L~G zK6;ub9j=*zx;DpeMn#`0GABLZFxOc7ImerG@-)m?WSP8=`22eL$&~*{-u<<%yTL~& zeyEeGe@fA|>0%!Da308eG+=(hIpozMUz8Yu8PBKO{a%0AS&7GtUu-J$ZXNxG z2ZS#$fYMjG-z?>Qu~@IJs>L!A?S0erHLBWcA}Mlthkp>X@N?b2rTE-a$`)>V{#0q9(v^p$+}9cf_|hzG-qVxUb#_7IWg>x zxLhi2n60Qw+A+Ivblmr&(uMq_{-l5&@-3-$$EFRh?0$V&QKbeyH@jnEq(6Liej4$u zy{ou~nP-35*$-KVKD5%%D{h7IQdf$_9220sUEIf4)47~dpGY=TS>NQBKg8d-b@P>R z058|x?=DAZ4G2$naqTrR*-qFPCMUYJ zBGA-xH5KjWmMP2;Pw{7nm{|5;!-lkT)*6d8Uf~MAzoS8v;A`I=Zg%8Q)VbM+xxm(I zBBKkkm-pSH;j6Iku$b%@Y8Ei%Kcy-adynMhaFN_&*%RK}t^V#3>6V(>ho($YqU%i9 zbKE?9?2>5D-*)IIENo7Aet@kZ%b_URZ(VDi*XmH$eE{29X~eVWNfu@k#a8NZm_*C} z;?By=FrW& z<~uNV?(MFaqO>HBpDWQP27`ISzmjhwVCYlVA-}R{WB0~xzi?ojRUkQI?!ns`iT5AL z>`m)^nC?F4V_S}tB}McO9ieBZ84ix_hLb`3b%vONl?8u(IT@1YaAl!KWG$h>W|fZ6 z{NHh6@&0^67YBAqLXE}J#rqOULj7UXmUG`zjds1#;L)tqiLVDVkFTGys1pY)}E&t7% zb49nVEAA*!J3)VMpI~IO0+;L0I01PQo+Xyu3%2(>8yJ#WChjXKy}0x2MD$ zA+|CpBtZyWBOF!+$uk+Wzt}m$-+IlGC;2P8SPFZeztQ7Fdn1PG2F0s= ztt<%!J>%uBEq$j-M{aDB(fxeYpF;ob+ei(WYW<7i8~T}qqt`Ue@jvRzQMW~D2z6>D zOJ66ZLYkgs6(47iZT~mAvt5n5ZK5?-mXJByq+dm{jmcVA*^{s-ctvIFbm#5w!{jxM z?xPFad_83=`L-K1E=SjW{N7#_7yHiYr|PlG4l_Y2jnzYq`KFc>b4_zXM!gzj`{vfz z><*LgLWgNM^5O2X*LnW&)=}Jx; z9~ehlOHc)V5gwG6K7VX<7TCJ@E{u3^6o9YfeLb9i|*o%Ks9XGMX%#rEvV1f8hV z)rm2g?G6XapH~~?XWqY1@%40Ut;w~6-Qv2Wsh4tiMP3Ak{Hf5~%no!Lp8gZ9$>uQS ztMp()@wmO7VFrtx#wfUC17!2Xrd zO#!{?bzM^SAS?OCpl7ynuAxmC{NEQCeoY#(OBJ7`CRuR1BPEUsqHXtY=N!+nWrI!p zxw|97eQ6t^eCX-AeUJse{b1$;+mRj|v`HIhE$rBhW{Wbv2y|ISwvqk`zyD{Sc-w_N z6?}iqF3nt^*_f_8&#llQ$cVW?_wRnr12OZT1w>wVe2+JLC&NA>v=RHjH=tLx<&1;| z`+BlH=AwkkRlm*8YbL+=FNYe+vUVL8BoB>p!EW!~^R;0t?g^#8JXdZgJHFqI02+k%pK0JEGW5svSIXhU(!#&iXs4;+PVI z-dEmkyM0$(qOQHQ_hWiAsY80`C#0_nKCQi5v465&iS?I648d0*tCQ7!=gkk@^phDF zZFiPhwQsFcY?^TUIfi2P9Vnn!d`$QK5AuC<>^I57cBqT~ys(_mZ(Ud4Z-!i`efH|r zjUk!kPgbFc9aax3Udob@pS0(^dMCQiT1DiT&_sA|n*Q7J_4bl}p9g$rJ1pqGxFF!( z{*f1J=3tHrBkZND{;4Otr_C0eZ%_n3di%%CD~plhN9-M!-=puu_Mkyfidk0aV!`hHVS6G9{$ zZkB0lCH)%jKiYdDR*sqaRe>*H64yW}g{{-j*l3`PO^6z=F81NuAtCM@QniI5~u zdBeghI!@`n6MUT4yC?m>&Fk!YCO54&0tm(OvBl%~HG{XevpfB0HzuO;;;(4?Rr{j>0p+p zU7cf6M{{$x4tkEw+iJfRrFBdkbXZ@fEqxsC{)k=KgWpzv?U%=+t8e=T({0J#9E?l( zCa6{sFZZN7>u56B3{Q%1+?O|o?j65f-p!E340MjEldg0yeEsSW7Qt^EAb!24r9P$5 z)$`E!Q5LJ!xuMO?O|+ONo4*#LCI?Xh4LMFD^khJ5f>yxeBjQhBs2v!#gMg_khAzxe zY8slFTZ3DhL`g@0>e29Zom3I7giRXsk!`slOgM*T%{ce?BICE13^=K=u=qu$ft^A8 z0d)L`E}MYlWBdbI$rYpXFTovxKs9C*<0BBGH&NuF`y3-vvv>FDy#qUa^{(tM*sxM^ zN^d(o=jM~@Fk&lUSG;a(ZOiASd(3E+KGjhBPLbtbk!t3qf!L1p&+AbB z@LCLFe*vcM(JHvIq4tNuM8C*+eOoQ0{h7RRu!aK<4Y?CLK+QA1V)!E6`cdvlm$+_iz;(rcCRq z>VPV3$kdCVAo3*Ja%-I;XGanbP`l~!Q6pGl@J7BsUEN}OozwE zSHNWw*9r&|-Y`inW!>(!{K-g@JN(v$MZZ}I!Utv?x%>VuUp!@gzqq!=D(geAyk+y- z+lJq@@&<%$-)w%~TyE+-MVrB~S)1ha#jRqCs+8SD@`Qtsz65Q?Y)nyPq1fwrd;PA_ zMdiz3!7jC)BF1ORNyFxLW;_r6A-!vEme%F$;}4hicJJ%pQWg&Co>@5>)M*q)#qOx% zWSB^hkz@`}^W)h*;{TdWil^eVcZcE2?I(Z6C{#0RK1f;`&$8!`ujc?9`RhO{!>}&N@ewnmc!d9r(ZzW5)%~kgD@gU5)lW-EBNta zJUvWIeqC(Cd4|DSJ+x&3&RJRlAHG1B8?7L~CZGoSBs=>g0a2AhQgQ=BEO6wpqX~rU z3sb|x&R8UnK>;-q*3x--c?20udHypW#z^Q4#-U&p0k#95$eZwt0)0pUUV)2f*Y4Z5 z4-V0god-E8RpI#g_Ak}deroK}p1*ezOv*gMUc8Wm2sG9P^ls63h0nEmoTMif{`2S0 z7241ajt9jNF#x^I2b2tM_y=@sfeymNCA)j-#fuk}l`@Dp-TEGq13>Z%8cpX`gTmbq9z7-E9jhq16Th=mxln>TU(8q8-1`cNh+$QW_Kh<+u=fn})tRkwig z>RjP(L(7!?dA6cz5#%x3WG;p3mEU?)G^+;dZv!&-#x2-F8tl8$__k&Mx^-ttcTyVCcnH|L(Kv=rywQznep z%GPWjPZd_R)96;1f4)6`gNpkZc})k8kK)+awoh!5+X&Z^9S;@HT9+&uD4HHw4-z;* zcI@8rU~*s>VwuUBUBBjD^682!>1C^>hRb2MUdvo6oe;ZXd(N}+y5W%V{oy*nhj9bc zTV(ZE$;yI>j3o!<^twY-{-|U!1oCKi7@+Ill{Mj9pgR}xs46F#d2PIBGURWdO40d3 zi+lS|xTR@^W~7YRbYJY|Wd0SB2$a0QN z_;##jiH50zVs~w6_feO#-y)UN9Rhs(pXrv>z9BimSsG)z{sy~jq?$7`h*j8 zu4jo!r%HvMwDlNCj2GqDx=Kf#LCu%DHXLkD{<*GCLYOOhQMorYa?&np z(k{a|o7V7*bbR1xFq^-V>TH*ebpHFB?S^+oZ13@w2^+3+uX2jtAI$#s+w=C!YM9@b zrF?u#)ks15ml5aA%nQ-sPyF8>_jeD<>aPaMI14Vu-gSMKl zi7nPdZ$?NMD=FRo2YSPZlgNENb^Uk-!(%!0a63EoF$x)7fs7IK5X^GBYsjPiGXcd& z(DUX^SWl>=Xd{LLYJfpC5)F8@-);KI!efC^FVn5LJHS~0jDV@$_8mJAqB+!~b&+f^ z=N?IdA~X>_v3D=_O#v(;|IAi|@NOG*m0dQ{)_#JCWk`r7(0B^R>%V?Y)qcH$ghE+e zJ*CAOMt4d|N*EeRGD4Ce(i+}##KjIf(Zs|%Dk=1Ibj-7%5cEHHF7Q9|#8EzJF|id~ zAs8lb33R=2!>G*Ty0df6+jC0HwB$~GMJEy3_pvBN#>D(tTO+bFJ3CEaJi*Lt3XBP2 z5%Pj-&d!2>n*MW1K{j^rBL4$@M3#GUPy>ct%G#^*$uRD8-`ezU7YbT;U%PK6koADU z$DCn&a{X&h%IrJs!7F2b+ka-|x}LMR(!Y7_VYTMlEaB}kZ5`FGE?o*YDE}C;q*pe! zrgF|AalGF9^}DE2@34VK@7{~`YK@in*$p|7Y7E9WcsmtLG?B5eKHQVzA)S#IP(O7u zH#mQj^=B{h?%7=%rg(i`c1dw=z8-7eX(WIgQXgb~YBhbzq&H$#|uQ!j7joDw`_ zb6lBA_C{=hQrP(UdmUNv!ffU`Q&Gr|!WtDLFUsXv(~Z`zv7ZmlPaxTh-QL4#lh&MTU9-?5lN>_1VA|zQsUZTBG|#kzMTe&!?|7wteVG=T9y!eIuK` z==kOr58;)e`*X7dYTLNt?J(`gZc?$v%p%4S z^Jxshqio8GKf1?6IG=6fw$sl7r?7J)*etdbMm$-o#(~y#IYu;~eD` zeb*q3!GLJXCyxsz+@Gpf#HcY1hWM1qaO?k8+RR8;(NTuNOnkk$TQ^6W1qSzDK7W3t z`wODu5Q0X+A1~?Inx@GF6#?BlYV7-;!?x95E>W3v9hLz&f0f__yKkTDEmiiXf#T&D z2nPlR_DuwU%?*eSJQAKNvvxa=y1qt8$jCSJ`cxX{ASWS1c`o zwsQZw?usP(*(E+HsiWNnIqEo%{j0;6KHx0&gbaciOhoUzov${_##s2CT%y_8`LzvP z0I1X`I)Gq8t&Fh`GS#xOGQ6>!oqO3^9)A8NKxtNI*`{D#4M!2q$%_xxG1R2JC97(v z*xxZ2A17T_^!nP$(yGP7t``m7o5T5B2^N*+-Ul=-BcHk~xjfLYKT&_|y;+9zxrv{$ zmXVVlkM>9W2#V{A&^_4d{c{`PoI#UEi~DfZr#i>;K?0L||E@%6uX_@FzgC_cJwrA8 zGlbyl^M|51#BZ}*F>7ugf-dMW*Vj~Yl8oT$vtuN=q}zOv{z>?4&g<9ldP&$mJCk|Y&f=-WoY-;n@8OwOu1ME}Q&Rt&E)*dP+jsnHdSXfB8$%(Mq22VuOxf=j6;rq0 ziGIJG(4W{DEG-?L;gn~}`NWrfWq5dbG40jX>#yuCK2}MBTN>M1lHL}?%2n;p8|@tT zGGr;GGA`9+b`0>Txp1cBbfdpkJRON=QojFNpyZqzcC(CK>i8}-LW*gd}--&CFY%%DEwTK=||-rqs) zx%m0rPCMq$dT`LnCi*@aOIH1R)jXE<4N1luE1mt6=P%#s2^)N3z;ozTckFzsYVy*= z)!l@UTtStG-6MZFlB?Jn^^adAA*43FxVOEDxTo}I1tQ;uHfy$IKg~@KJLy;bTCXiM z?Bq!Abm?KWgMRh&Gg5EzBKr;XPJ6ScExC|fNVpnAnXJwk9@Hz*JI)|C%gPu!20#W* zD?mPcVuP__p@OiJl$3#vPV2Rj~|u9cf-r!>sLNN^&}-<2sG{7eg}u3 zhQ?#$xWYe2uerIsho24v-c-_MA|sA+hkPiDQpk+?U^c$Zw~Lu!_Smw>3#CJ67ff1S z=9lc;m3aPbEZ5_>SJdKq{(F5`R<1WEP1te2VI{p6zmJV%+vNmj2O)+hnI?PF2Rv&O z`%3({a?*n-{UoT-!xp z9ugL-u@tU(e~aJl$PY>a0`4y}?$4abr*c-^$;U_5Uq_H=Gv|)ZK7R9FZk*y*b%jpz z$FcovLEZaw^EnR$81XPz@VFQ3?G^c)-XhrEQ6RXJV9Y=HW3t#kS5dzsQ`WMX_Rq^) zYoo)qhkpev*j9Gu<>$0mXBW2GS}VUQiRqWEvSC+q4>}?5ZDA-}5fi)1lR?5Y2&Iu< zG2`&h7Y&+U10EKAc72b8&t;^Wm6*?+4NH1uv}m<_c5QdBe}*xmliZzzoSdr8fo+8K zo}L!#*gE?B8%E~sg)uGHx9()wY>WIMCdVBv{P%Z+K)O_AkXiq8(hbVQh~O7U$TpzG zfyFc{5aF_7?9mL8jE!1tddge#3KLuRk>jQU%zaj>PCJ~ z8xF!SP;khQtUP}J_)KC)lD2fc7JjpACRk zA@Kpw5J3R06vm})N8yWrP>k{!@2->fW}~~cqXQ@@C}idXb(x*L28b-cKsXIxaKcHe za{c;AzYiV&AN{|Bc6dab2LMe1=C-u7bT5PGTa;(--w%BHWCgQtR9|>&bZXEo`j34* z_%|R@FfuZ(uk)wrvnV}U1(*o#P~m*W7qzsm!Tjq0k3Jn8oy(gQfk?4!62Z0(HkU3` z9Tuv}E_B^S&~m!1%)O^~r@FbZ6e09ldJnxG`yp96pZ7*5^`Z-c)8AISazAfTjg&^P zYb}XFj*#&2E20Qy(}`TD!FT6H-V*;dHMN4#U(KJE>;ilg z7_JUp><*B7sVlpBkM{f&PZgQY?v&4fIJ%AogEu zzSMY%jCb60uQ|>tdB?x)kx5f>p#33#YCd)eUpJ;5#fAMlYeKbL#Y!m_I{b;eBG1iAE|au4YNLn z#=l(4@3I*pRDzp=rl6#xBvEU~vA+bIge zD={|QI?;E?T+kE!BN!b4Op6tO$4^VXi-5{n@Yd=zAm;Y(e~QN9?t5~Ge}&<#X?ka(fX(5BatJ`R*av6@$o>_D2F(eh0yGWw5=G;h z;?vqDaOVKE9LTfLF*Qw?vdjWz9efJ>{-~!-j8~#KPg95yeP2-N2b-aDR?+SV{$^RX_2M}otLjM ze|3gEg-z2qA%K@A&Np{j)Zy8QlMnlgPiVXKzhfuUQMK(fR-8YE)b;wwEUuv_GZFJ| z0gQUos`|Qj`p%SjpL3RVIl6qHf3TRX;^5jd4EvKFn2eL_s0J8JsL1O0bT855BwS0S zia47bC6QhEG10pGdZZZ6a{8e+GpWZpl^$Lw{-F6e`J3RV9JPr5%xvEiBOQ0sH%3&q6BQ)YMTn@iEs>eRuaGi{yMd7bND#4eyO#PbrGzV32wh@WVYf zmsykQqUPOA;p}S!8E)!5jI?$uCz)F~iJ^B1p*Kh&+2z#lZN38gI`&#VW0bLxWDIFs zvz>035VE3NVVoYFA}18mWbN?PVm@_<=?_-B-)p|j;JJ+>!QJukF&RS^+^zTGnJJz8 z!^5Zo<-&v5HhOop{s`x@`!=~4&GA#j=oEaoeu;IX?u!<6pbttk`)8SSc1)O_7*NN* z)z|M%G1Or*T*f%0g|kJ7P^V&)Z3cZPo`5!#(iy@|zo9B+ZZHJHF&Iew-TX8ACOZ6i za#|WhwSw*G{6qe|F6~FxCm1<$U|`q@n8+V%AIO^+3+VzBI-J+=xRH*L(P;qzYR_si zK+yATJGg7xfLR5+lqb!X`|rs}v8aH55~~mq?c$dcfs0ed`E&N@3(c+kF)pdNA-|D)eB~&i^3q6h5t-4x32Sgjf zbC>kvuP#VT@%)gu{Op#Re!!de$90bjS@(ET`1^!!Bh-c|GT8WWPc}_C(G90;I%{zx z@Z9zB5_p^8aGzo&+&eqtS?BNj1tf`Yp9Y=DWQw+H*c~x_qqdZbA)>azI05hd^P6N4 zi)w*pbN*9nTCMVSg#*?HzaijP{UW1%;2&N3S~b}-g#O0x+%dkigAyu~Y958?w`S1D zg$45Ta*Wf5Wy!zZspqbvciFW-Q}`^Ot;X_%zJ&GZKla?yJSi;kpA+h5(ifbSIVpZn zjTl?4mOr3cW;!E&(?o!PoOH)ovj{$lHT#xNgm*LPPFls>AOC2cIm85JJSoAbK=E{O z-fZXULeweNZ3MnJ>FG(aiOR4GOHv6#np$a&I|<0iyO{nw^(iDHET)y_@4m^tPcchI z0u5(n+FD~vRpyNbk=N1f<Tz#zP1=t4SKH}Ex1M; zR+3(qJ-9XFsd8Cz@|Q3t!Di7^%zmiuZq>~JwmoMfFQUD0o{1rqG0%@2-!HXib9ZZ~ z$sU8Y<|F|zu@Kl%;v8}x^o~G_HzsBe!H;zB^4we`z{5~T3v?ARmKT-S15C$&C-UX= zHD_`O(al?h(Y|7jxLs`Wrf*W&58g;9Jm8s2HzT#K*w!0ut4~EcBwusi)sV`sUc!6+ z;$H6i9|(BY$N|k`{l~0@ngjQ9EEgQd^m5^1m{GebHuZG*pn4Rx_)_`WHd#tC45eiXT80WjLiQ3$q)^Tjm;?j`ag3-%WN@)2BaQL z8YdnQu>Lc|E|XonSk$wzwjh#sqw{~v^I#p9_~d_QqURB)(AwGQHdJ*F;+xqQ-U6Es zH}=Iv7Xt%>Dw`YQ&57_tJ3vdT7AGmr$45nYsXc-D#>U2mGHWXcs4A+e2kzD7GoslH zG8AO8Fh7IAciPLB?Jxmc9eRL@8B;UD-0J*QP0c1S;=+_&zE^HTs|nwU84KCY?I~${ zcHV_IEz~F#6%?SMjTc65;Cf)3^hB8z&S{`u9IJ;a5Dd(~j>9*WUmLm`8*2=vb}Kg@ zpCc$&(GRH1{&PowS3gr8bifb6w!7#I=GY^ekIKN?T z0|_}A8XAx+829gA!0-sm1w^sl-d>_{t>JdGl+K+4??xSJ|Lht>^+(XYWn^R^yZuHl zy~Zp%34_PuUE`>QK)E3D5z(3=Is&Sy+O@wr56n1fK0+uGYDlwTCWx3~0bBquKqUvDjB2q1gl4#1^5%P<#m<6iLpL{eQto-{f-iUx!v5@+}b zLR%94jNt$Z-1$DBbm%$sNSO)e6l8VFZ{mV+LyRYt{u?HKP`(7g%f{?yvvnSV4j2r= zEG#=R>M@yvOX@f}A2z}lBVszcx||#wFrNbfCK3{c0sB}!fBEuvV*__8l!FxoCaOh9 zCw{REIV^PlRCY?r7sv)gMDXgdWyf5X-f7iq;p*&vB3sZYF z_T0uZQG7ba#txR2><1t2At%SD1QbK@co^7B7mbX1dwS6FjEabWa^tfnPtc2z#%dj| z!SLX}eMh_fY${my;K`h0rIE;d{d&l`7z0lfyLjC8qNNE5mA$>C5NUt=mKQCgwYMPV zu+r=flF*Sf)<4zyp`!z0-#ZA;Rbbnx;L8-N!I1~n2$9MJ+gYG1V1LbW)8@ay?DJ_~ zHzytfXx*5~dw=1oYG`cSPeXIp&kv2fQUd6JSx>-`5A@NjxlUQt$=? zmj2>0&^5(qoF;ImA+3vq@#|2klkkV1pZ8pyI~J(m?C$Pp_J)^L@g$-PAju z$=;<93?SzuBioj5eIh`m#knS4&)&iAsAh^YcYA?#_OER6c9j(0G%961+Lu(OVX}99 z$pp_TkO>La(bg@PZD}&{$vo0mAG;-;Wo|W{Ka=m)V>f7Mmz9w)Cr1f~0s>*<%Q;VW z4s^i8#XT|g#d69jJ&~vd@zINVdP`si1IGjk5YP&Bjg2tE4WUT>M~vea5qZu`=4@!- z;^Kn6i<$F-P8NRt*{P{p=s&MX{b?StvF=g&JjJ3$mhe-Ona%1vNy;?8)Nq^9C1u^2T(aK8YGb9b&4 ztY($I+$DYn!hmh7n)879eR=8{SSCWyAKQq(Vj~BT0?fKYpVAEs4B%jb6=iO8G(_He zYlIk3odN`bMi5K&!tyc|71aRfjt{C)5A&i`qtDiql9mQumcQJwC?~Dg?dY0A+0+X4 z3wYSrAy)`cayZ0w3Dj zbwTi|I`!|a4;*|3g%ww#wD0>XyM>N8H~s+AxV$E9ju#X#RM_3wS08{0mUs0|m*XfS zT@%~wB>VByyFR2H8x34uB&{%hA($SKxbfrB{rey5MsP!$qza=izfO9iM6Fek)ze3achc8D zQ-WbHvPaCx6`pkELP|8`%z8l6&p+$ypr}2)sf6VXM%F1lzQ>2&<*@3ky1kc5XzA1p@zW{4hmYMn*a4-mr;n zto!Z*DQLpnvge-g^lg?(Bg(Y5KI6vY0y(|CT>i_nw(BCBf%>Vjb8&n;S^}|F2kS;JMuMjhMW1KBG z9D&d}VN$lr|9~S5#~ThoWDTH)Sy(K6AZ6m@$`c?EcJ@&ZcU_t`9w6qLSjH3528U!-o&SsFzRF z;^b@l_KhfF;6!|FB{`t(n1E?D*sewe_ED0aIjg5aK0SQ&=w;gke6?{v`s^wv-f%)_ zL4=w!4&;OUCVhwv9UZPv=@yNd9v+sX_6Jb^^5sFE;JGbe0UL0HjwgpG{b0a(4FKk) zQa2dCR6$hw*^3ubV`Cz3A0g*~jW|*b1A{|R+m}{W!23macdOrVhLn_aa&i*R^w`Pf z=9^ou3od0MYL=Yqt&|a2y?m1h6wxIOp{NCS#Xi5){ zp!o}U3-eZgclR3dz~3~=0U+dZa>7Qrw5SLN^j&6bRA_Mn9kgrvhx9#LPO{9@$gUqX zZb1E;K!}@Ud-~$%uZan9kkQ@TM1z%piy@-VaHSvoNHKLp6C6X#-%UQ7PniQCLjnHy zU1nH9Nw0q2LE?Ab#N;+kRP@y`L(Iy;a`7VZJ7z*(h{OS5d9Tr+g^dj+GhuOY12`$0 zn+05Cd$cf3PoW2ji+Lilmx?O&<;zQD9_Kk} zdwP4p{d}a6_AsKJGWhb5wD53!506u_)PO@NpF4Nm)m2?ZrRUuhzmyaL@jZpX^eUij=9eL)K&0s2kzqbF(ABj9 zcn0)~O4HLHYNS^nLCxafNQeDWA1-DP^swA?{uQss8yP0s zsFUz0h)&z0?@4jnpVWo3nb!;BTXKP)5_XD{TSP;FXRj3tVV?UcoR^}lxyeq7jP z__$!;V^Xkh-*t$vWB!!LW+NPpIuBJdkPdbEwm7n@Z5euzydF7nL`_{C@u^-zDjkm$ z2@|lZVRl2Qn(;Fe6R)A(jeoSY1tRIVhBIahIapZGtl>AzF$ZeDwzd|9T$>4nl#Brs6kKvjdIhaZO%(p6-EKuv+Vzf*Q` zc^Pku8O&0@`=CW`_vp)RR7G`eloS*wsOp>=p`BAY`yM-Pe0cacKmQL(IZyl3rL{YLQHr%K6TxhMH);aQJ#SHsbfFTUvz`90)u)!Gq>kAj1rK6wJ9CnlSy zv{B9wPsq(hLqE;rmPj@B?r;x&f8-g`TN^?wEXn!#dXh-N42ZK;1i<+~Jk)>tooE=C zmuKITcdoAw(d3-X+pr9W#w<3DA-EG#r&rbe2BPc0F< ziIisp9R=(OXse*SWNEaswZ(=<1`mS*tjFAL`y6BPd&f=m*xoPPo-pC$=B7HafB*+^ z3{WeP@8E&NK~F|7G<^?B>FPa{n<=Uhh&bN2ZeiD`s;E3>lGdR1kB+_w`3Y6kJ!=a4qj>l2 zJO(U|S@t*kg82COqVp25d~q%Get3UmI!MrnDc-#7u3fw4ZN-T9#W(TgvS2e7J>ZBa zo1iR%rw_OfifpXTfdLcj^TUUuUc5MRCZ3;9GesL)0ezKtz%tG#r?nwkpx(&3R4m8$ z;dq3BE6(78g2(o{xW`phN%$psdF^=YFHXWoz(O!el932HSP6lk)NPvH6DN-W>~2wb z5&@T5Bc90c`b26_pP(@Kh4b{ z98qX*JeVQ>4(WI{o|g<|Rc%X!||z_oqE@;4mE>#ozYN zpWi|Y4=`>3r)S^)nL&4r&Bg%w8tCHyNCxK1sQLze`C$r@r}ejHVy;k7Pymc=^*J)} z?OVyWU#%!NUtta$rDmz1fCd%E=g*(({E%y+-b~bfjiR;`?cF5BhvP01Q7*-$r8hl1 zLJe$jdLTH{IPR87(MDZsbM@*CBpyDS3-PGov7xV~5v8vHN)HSP@kx9J0uAaH(gtt} zN?@sA^I)6La~WnL)FL*vzwS_?%6aq{fb{to%uqjFAj=)Mbocd13M#6ZZ`pp#0bu-e zQMWXv|1i*K5%RcAtd~4w@n~C`o9R6J>gy+pf9fyr=;?Nl-K8rTwWS!1J+@Z2GD*FE zKTE!q^LIT2QS`QuU+mbiW7r@^MHPKgRC{UaF{v3Dcs|!AT2rvkL&|Rw3ob%s`aRa4 z83tNf)QpT8@2~12sFZxb;f2!zf7z@h1pb2cEnrjLXko8njXe z^8E!iCti6w?o`+!3v8t#R%_qc&N+aU=;e;ZwhUsi>(fuB_l_Ox5C~C9lOHi~WN@gEm^0i1NS7 z@|aZSs0ZkH6NngMkzn+@CHXAEJ)(htfPj#Y&cCz^K?gA%x>G=*!2Rp}9pBw|$DuS9 z7>E&sQ)+QV5-4ha*O%1Tg>X#vWS7-~{Ds8)TVLOX?f=o;nMYH-w|~F;+$znxIYXrk z4J0XzA}T|JN=i8nkhw`N)&90?4NfDR7!#jdRi(}`>~0Z?Lf)KJ5e0uBj1 zd-xBFv4h^e5nd46j3z{q3_Shw7~XLqi#~qbt{lSt=-O+@Jbis~Hgf>Mh!8iF`P7x| z+2NKUY!2bPT)Yh(8 zwrrHeI#%Fi%gn-Br*VT0z-W_q^j7Mge#m6RgW0D_>p7%>QU{CxW1Co{)$snkqU0&K z1*mL-1{EcZd_Y&YTV7mzj~+ev1N9*m7btY5g>L3Vq)e|{{DzE-cBa!Z)y+UOkB%Jz zDy=BT7rn;fKv|b|^CsRe)&pequ--ZJ9Im`<9u^(_@%i&BBt({N#nY!8jd(=P4`_x6 za%B16_OPLP*=e9KTJjW}`GW`JS$`=h%}6ys99|5Q8a-yLUQ{(JkNODmPoitrWn+&* zWCY$)YQNd-9hu7fnvEf|<`7_L!({2@onw365(B~=@D%@OZ5e^8$nK5nJlhV@QJR1-Q`jn)v z?zKX)2Ms_B$>JHVT&Xl-!=HaCG~VGSHm*Z08gAw;Ht6Y_MO&1U-{SQIww3A}k zB#<<)V{aQ80Aj&gj{rvr0lkK(EM2y&e{|HbV?#uu=h#w3lGis?l+@H{UkhT*S^2|E zQ!rCR?V2-3bdPP{!-q*#@{*(3K)Nvs3JQPW<04Q%DTGe6wBXG|$gaQbVolN2@$LOn zXD6p_-Mi;iVlidrmW_=K|GRp1SbTgvXIx4ArUR~kduaRllgbo7-**6WSVRQlylZK& z6c_g43@1_>cOR67g210CqM|3Q?G|Z7L4;+7f+~8dgBd%@ecezF&8FRo5sr%WuMr~; z9XdqWiOfOM-gtTW$>3K069ue~91=%v+XP%{kPn=M1>pdMe7X9XRa|p(^T&$B`!zM* zbU0GQqi9H1Y}ATg5{18P7%s#SBQ~#JKf}Ad4T>G&mpD!FLo?tU*5;i%!jHDe1S(&M zjh(XNyGxJE$qOXx!bq@pkPJK)P!apJJudh&)u|f z$o%;&;+IB6ta1BTy|{1TFs+U@=f-t(6%QCWCbQdJJ#}T}256j?=FAS#7R=#jtL{P` z&goO{IO=^}UEKNe-*uhU6ZWtImW~DDXKee*?6!TJWE4^G+KF*gOf2)wuLanrpjM=% zg%{N^@6T_^yM~4z^fn3$cvJap+eAJ+IVnkRrTSZk2AUulw-sjgEX{Qzl)y*+43TazEMzOuzKlq_fhb^Lf7Y^nbck$B z+eStwm7#l8dw1;UyYKFcEp)Cz*KOanjo9(@X}*p6`YFyE1BY&3tM3H- zMHmYq1L*2x!*%`bZysHV!`S~;udd+Z^BO*g#j)}6<6aE4MM(jsKoF7&5DHFvIp;n+ zPJbapGWl9ZM1V}ba%HKp@wJo`hS$seFc95CA%0yL2~Od#uD7I8ird-E4dXK|&UN12 zv{7x70$<8S!v1k;I_OH_og5GU_Ki_L6_B{n;^Wujb8x&-#R1QK`uJ1i{Sv41b8|Tf z9d)>uZx(?HwL!2FuElIN1+9*eH%@)dC&MPGkTfOf?voPvn|Onrt*#w^QP(SmSt>Yui>z zA?6%Xh|%1or`IjIDB;{WAuR2-ggZ=aS7R4}Rn3d0Hhr-&bvR@Z9Iz>n34+AH5n7(^ z015>8K+|F(V^-E^a64z&X=~S1RsHeov2&kWvcK&*iJ-Rn^dze+NC%}OimjgQ#1z)i z5S3MOQ8`l5Z;LlrW}TC-C$~Y3EzxSdS6Ml8)TkE;WlSOL@@Z<2Q_w)H*(Xk<6M(Na zk8rOYfk4~%az3gH$dmbtw2t1nqvJHe92dgD>~Q#2T>s2aL?30bl15w1nNNE9^ylYy z{@%D?Lbu(MHYmzJ#dN|#1_Tqy0)vASlah{V+V=FdUbE)P){h`wo|X!q&sReqHkGnp z4j=Bzqra+5s)d1NJR~*f)Jc=-8yfQS@*X~UV!C|!O?sK3_n1eHamkZr?7(k3FCF>c zUVyp<)dg12Ih6hcwFrnGXnYK>6i*yi_~F@%hu)l6x$s)c(k2Ud445>5Mg%6K=#NT} zlQP`4?K>hR5Hj>yJ6ZOhX}5=BJGI+@XEzU-e;fp0 z zNnB^)>tDYfGI+2n{v8%8$$Dyp!@6}E?}Vpz^5hX_99C2qiUe-x#EECnAGS;~ehv;3g7c2XK9SH_bX?7fX#?1uCyXB-&YXr~1NM2}ky`0=k~?*D8*)%% zeMzivx)#Y)FhzfR(~)SPE=^1a3&8^F#;D-}e6!KPC|c_eeyF**Ctg4DJ~fth3gDaR z?2@&okIfaFn&zu2rx!dd^9T0=Kjjy&$=i=6(GoQCnU=d^dICW}t z)42YIqoK?H%FW%fWs6*#Qf~K#af2Q(c>;=#1fBn43oU8=hR=-UyzO`9(2>j}cwc?% zDHBSd<4~XOzTjy?;G!0QLzc&z5ZQg?_>ssSxsi7$2=x5tHEr&T6ZfC!-!f~R9i;tV z*Vp6hu-mlBv#xNs;kL!$T06cIB4D-lZ64sTW{uj$$10?)MrS%gHz5DD0_cXz%I?v9 zK~<*kuFP3~?vf=R@AlJ%0DxMjITb5~$a{)obvmpo@oB^Q^&G*xJU!i^_s8_lhq<_` zR~rEu_qyv3H}vpmMKeMBVsfhsWx@bAL1|`4RJYFBKyO(V3>;Ov!LA}RNhpt)k ze074y{=qXA+}>?*bq#S-DVeu<-<%K0Kh4ES$6J7Ug zKHTK9a@-p!%}hZdPd^DobLhL|&fwru=b}rmP0yb@-+!We=D$(e>(-qlrsyA*9W}I< zzkhzMV3hOJsv)-g{(FSyrqj4Sz-rh_HAj5R4U|vNws6mH454%_1t^$`t{>d@7$$$ zQEWRals#m=$gmSbbu)UG5zH%h-Tr;8AgmW26ZF>GE%HB`#r%O+y6*o}$^O5mApRkW z8%)Tft0&}&4Y}6ZT3{1tHFyEQ<;GS@4jlRUUhKdrGL*R z^fom%wqCa`Br2-?!N$JeH%ZAiA3lt5!)f@F1<&4QC7|!ZfET45b$qDUjo-g>(*J~?}agjq0qyo1XVSs!+;23p7+@Vh;s|8yXX2N{yt78WpVAy&2xR*SC zo-&}Fzl%t_w~q{Em*wTEx-_@<;jp#E_ZVpKfYvlEt#*y%mQ#Y#1ark0j{^a{Zylv5 zKnR?mtSoQQHURX~T|xq7UnDVVzn zo|~ftODAJ~ndFUTBJHm?0`3HL8Z`>1FlEt^E6ecMQG*iP=zFS4_i#q6f~O6-|CfzA zCk{--y<^q-i(w#|GISxorY5s97v|;XFKil;-Qw9!iNwSPK4rYJGJ4s4)ro_8GO?8x zvq$h}@&8b7TAcdB5E&e^5%#hD0gQGCU2ulw{aLsH$YA8F0vq*g{k;|s_V=ot z6C0Nbx+SBzO)YoSzIkIXq9S=CNqo7rwY8pJ4i%JTjiT_|cUr|>H!tAOnJi5^qAM{L z$`qMZ97t6_DnZu)@-D1Cb@Adm$Wf9YtS8g_DY`r$Zn%%U1xlw^uU?G-AAV5}Z3n&P z&D(>ujg)}JAuoOyhD_RWRYMoXECovmuE1*pr2TVfj!+pAX#~?v&V%yh)1r5LTkYsL zQAY%rW`eTN?BMTD2R_wr62;J!E7T?n4Gj1L3s$RBm)*wX7* z+_vr8IXnVFg(zftaTSnQzi<@L9)ztn>=0(GOXjKSRCLHetbA(V#FP|o+-jYAIN#v@ z>G|JuME`+(;Lvb^pAq*-+oZpcB!s9L!Q zxzGcBZjI)zv0EVmZh_;#JML-qJO)^9SjGH&I*c7{hB0Yfp)Prq%443IqDAs_)MI2> z>R2Y@?Aap`XfW^4^+T5!q@I2hT#h>n2*?J*7%3dsV)-&~wxZ)@Zp@MH^)53HW?xH8jL`P>BF}kyXNqf92+N^GS>U7gco;!CK|KMN zPoI`gmB@YgaFU7&4rW!xQ`LssCRV_5z$`d8I%YCq2QMlbBhE9VM3x}QOPEuE405v9Ej+~N!Y(|Z_ z87WOpv}f<$19gZ0Gi@+;@qeE-7#5a7x~cn|@W;*TShNDGfO9Tewm^(pczDd{T&_qp zRNZ(##=9uyKX{P8^M0k$v^rrsq@;qRTEBJarmGfPx|mWPH99LpgXaJHuA zCI^R#O;bbZ<}5g~bga25u9ce*L>Mnf<3t@#Yaln|8_IU7)!lAblu&@qoYA-zgcum; zUl^{zF(`rY*EH&86AtAr$fXN%Cp^b1#cvNsOUJ`B} z$`riP9@9GzY5BDf6*$;=ge+#T6gnGOjT!}^9@W|Dt)Xl;9T6U4XBQW6EOh8GU*Gxq z`rTK=d@|ZObt~C&c2TMy9jeX7u_D zBMhUlHp9iMl?;p`xIj0moMZ>fx%pVif0Lw;%pGeD5OLx3f!VG+9ezY0N{q6>3yqp zL~>Bzd)hRpBEazcmE62ML#Q~NbJxCG zz^}zD4Aw%sS-fZwxDs%ND91zK2?o6!&4w{5$gl;qc*j}l|QiycSEVNJ}NKOgVYMyR=$0rv{NvV$45Wv;0d zWB0YJu10|TZB3|M_!?=%B(^0KmCA_x=xhnnhY1+TTYzX8iyQevE^FWkW{ z?W4zynL$%J_#I;I2`+#thaSFJa9w17POK|n(jn)kzzJfdgB`FLMxPX=#Sc<>o1>4`x_n z8nKD!K~LF4!zDd@j^ihEb^VHg!`#x+5~g6}$ePm9$w_ngx3z2KTiX`FQ>D5G&=Jsd zf221;H`(l4b2HrnS}8MTM&cY?iSORU&S%+nGYgA$jOY*&@MnFt-`1mV1spk4QiAyZ zQi{kFMKb|+3CWgJIeS`%pzZE7ogZ#k81dH@Ngtk$^uD`SlaksP!NQ{Upl8O(E9al$ zaQAH%y`I= zw8Q*pX-T?%{d{~p=bP~0VIF33DBX9L@gWbE`Q)A0fV)j4j(XmjPaXRq02p)_^Ft#U9{;LYmU7vg$%dqq?s$zp)}*3@K% z^}cu;0wb+8ggU0F>1ySFDVSD+f2pFf(m1}1a@A?Brmzd#|2~!zH5#yS)_C3>U^`vx zl_7xc{Y(C~lg5F5y`3h1s2e@z@7YU^_Ng-Y^zmf4<&617b1DUs&!M?sJt@~0`~L&T zp7cdyZ^Ft&iw?QiI#JXqM&FfsHQ|8!ozcSgb?N;%Xo+pd{9o8R(B^ObXw}3e+~S#m zCc-GnR6Cr8&A8XVEwEUD^77DQV^!P~S)zH{B*6-7Xyq zbr=-q=e-Q66$0pnxhf^w)m6}FALu!GD0rwWe*ZoHRU`Vl7w;pO&Bh@avaj+V5`C~Y zKBJs__lWxG<_=(V>Lo}ixZmxrlQMez162ppRKUwvUO8kXo=)HnL4yihsPXjjcsKkd z+@9N;f4B@>FnOX{pvDlbGn550qT00shM4pPT}oL`VxL1mFhIL(p-E9nDp zox|=oFpxw}Q5zQYL@uZ9Go32-Yu5&cgv>vKT({ivR8VN~qep{>4Lg4HXp+_4y+UhC zW~MeZ7<$qC20SnH@9^SyEK0Eic@rNw@HB>ds;fM03R+$kY3I2kn0kf|9z5HtZIz{E z$0Og?N^n8#>(^9B3ucLg-y9!U>7;?POTEbBgJ&Vq9RUc$o9!$KR0c2;aj_+Yrq73u zMu|c{#hZy)oa_7yb<7Rm4Jhfby6C+;b{d}Uzmk%XIXK1vAsinW8699?V3ZBz#f*yJ z&oT&zoVF&t8rR-h0ViXlF14RR7NWMoNK&Nr<6=rmsGJ`w3@Z=zhx<7>v^4-DP&s)) z7bq$y@CVjaw6?c}!T^5Yja#>N;4vX-Q8o}O!zhz=L_m6MPOLCqvs~UR#ipktqByqn zYCVI?m=llv{9udvN=i!h=rQWY02!H^X!T?lY`egQ9sQ{{V~^(=k`EZRygb$nd-G7%W-R zuam8kn@dRwI8gZg3$syo%bLl}o?Z3e!Fd`vQ&T;_?_6vx;}3rMqhTo4+u7;IER`KT zJZ~?0=x2^x>@1msqM}qkjMEWOtqaWx#}}PttKmn_d$6zXP4{zo%g!ex6crWqlaxF@ zWqk?Pn75mi2sI+#-Hlp!0N%qUQt$Ya;C_?v0DXG;cW?0@nJ=ft1 zIZuf0S|2$UKTd_ADyvRHk!#K7iOR{{#x)}+BHy0js7M<{mgZe)yyrY9@au28cFOq) zN9IW&GU$uutz3!W$I!q41@bkV932sOzS4O!29ll)(0G5Vxf-2H*6lGri2=B28Fs zQmC@>cBnJDmRP`u(^}CZMWQSA4{_&QXOcGTM`UkTn>N0L2KEE&1eS@t{n$t&?+@pM zWOPW|xcZO9L7LRm*jr{3W~NOG^;8;z)tJU*=x?gXGZ8CIOi)ar2yj1t{qzY~j>p?v zmA@2v;^Ymwky+!et{TxrELTx<`LFH{B<0QJS9TTHa_I;X{ug5jE;gqzLU19uN$UJ>JY(TxdZ$$ShMO82!2+wVtl`AKwcEGz8QUNYxwjN~u*K|^&K?&A zlY4ahY@Q*D;C?kFrKq4_!q~BLb_>y)X%E48aDRjZ+lZJ*y&KpFJfv$G_Tcz}Gks_K zs-V!nfAJ#b^5qQc?4Ao3=3~JKj3!Dl{fAwx8u~j3?CDd+HmgMCbJZ`m!8sAYFw`u$ z{^s@TZ_gH9XWF@w2C}|)UF24h9BA)EWF(vpxddyszuxK6dX*s!tNRG31b2vcd+Qhv z*IX+B-|!BG4Cd_?n+j*ol6mM$z=u4#dwN`49Muy*=2;;ivl_`IY+h{VTb-Si z$Bm1>c+r!eE==`({~mBht0=de*FS`OTvb~qfF-{RLlNF_nonUh zU~k3ZvdYTuEaGLaAY5Tv@wO~d5`eXCjOJF8PCv-VfAxcuIIB;*1W24a_cW5jsZ&DH z!8-=^Tt|DRZVW2h7FcK=GZ~4eCbYJemJWP|mBkg!~UV+|e-jIKt!Mzo6z=caZe*D@uhg5dB_+GLxvw@PkRimEs?gNI4iD6ahZ2maarJU(!`j;J88;ce$ zq#ly$gyxKtQQQlzmG%!FDsg8Kz}as^|e37 zhj7D%sb~n4K-@s(J2`Wzo%zM4dU`y$g?t;O3#OY>9XND3r<*}`QZuN9h zJic_SY+6nD^h&#`~m&!|(9n%S;C6kri)agbZ7o;$b@+8+8{Y z3)J5-WvLK6KRP0zz2)G+{B!$@4XBOrX^o|gFFt<1zdr*Ks9cvXTgLEVO0e9{Vk(1; z#1N6dz=!B|g2D!=#zkNZ3LLlE*ti57&H0zY`Nn}?wKs}jKB;Dr9e$oWcMezp*XT*} z7_lBl8te%S5@3c&4%fb}VW<1FEfc zWzH1qbb?13IojKc`e`s}Ky4Ux71GVzxQEciBxy&B=iq3iy6XC29YRaCzx*xvdsvROF1$oWjFY2X+7jPaHiaqC)}mo z&Tw*`N3c|19T5frYy~LInQcw^$S2I?m{VBfzI{73;6Hh~#3)ksz$KOC6&3i~D5wK^ z7cul>`gC`G7>f?v0wu6IXI$GEt-n9|?7DQ^sAoXgBA4*H%xy(PjigT8hjWVB-4`}aQ|nOe?PHlx~+k%{2bDAHx5qyoFs)CQkL)leMSDCtuSFmMtZ z-~!!u7wNd=T_WS=C+LW91`=2pYczBuZ9VD`J`7DUP%vW{Hix1wUi|Y(W;;EfMvrH# z%{hbv`r_{?Msw%N!gk8ou-7&b$2k&+xz9G*_qQx&K!wZqH2*w%;@nXP*j|Jsr}A;R>M+1CNlSx--4 za2LF{(3Z_Od>76-_NU*orMsTFe@~^5kn|BP@%>k}Wyz^#YqH_(UgIWCq@M6hb-vIV zGXDIAd%db14KmKx&i^mw2DB9rwIEzC@|@3}RZ>^KmY&WbxqnpZbQ%uaN?%KJFbZKF>O2A z;{-d#r!=cn>CQL*&l~^$nOy?c5G=}gt2{C#mLhL&Z#)7-h?u1ib7+Wo?Moj$`f9dY z_IygpG$p0I_g~$*I^@1TNf`7tIqWZ_B=~vCDtwGjs_YqlLZGM-PZQQmmv*JtV6lyz zoj1ifajR%T>zjx2u(2ZohC(cag^iIR zVzms?V7aMc*zoX&ON8W41q4!_-aX zpP-)Mx51BSRGId(d8$ASef@o%ibB2Xo&}0`E^~L{_7bzT(f11nwC~|R+dk;HC=1SB)G9bD~+*>|4V;^lNS?mUZMEP zD|1wW&{|=Qnt;4VjS?ICr6YN3oX+A%hmp6JluJuW3<{E4w_wfy(VlZFhEz`V^cIx?nhsJWE3ZSy*>GDyF7l_u#Lw6R2vH1`sick{IPle*H}~t>y?U`&4QNW!UbTC`IwH2mDe9QdCmQgAy7ZVegtA;WfXX3bVc_gM$qpYmkBy>=- zEuk*u<%M}ll=LjAXi_!J(t7&(bO8Xt8R3LMpD$)$hK`7jq$0=BsS#0t7mkM|uU|vk z$0`-XT|x6RFkm#6%{l50>=j}^nW>xPcFT6`MIWOs%&QedBD@@UI4`cc$}gXdBOgBj zd<4FWnwn@?doINKs*uPTPr&qq?Qs%1US6ybrWmr|EAb)F zU<%wBcH<*M83055m3t2p;~G2@85tH&9lX4>bVO96a6?2Z^$F7cN^n(GRXANZoQPPo zXp@GPqo-EpwQI&ILpC}a9JW}#Jdv)zp1#*m83_HM*_LKz)LuXMGP=_pq=h)$?r`?= z^IhW}3v)KOd}K87a*bB=h|bv_Aq*q3otwDoBKC+p8(}^SPF&6cH&6&-^-)qF>-|OC zDJZyv8@RJKi8};i3t4C%LH0j5Z}hG?#UMl`CiLysZ^=8FFvPw($SiDDK|7}q6Wv4J zM~7iZo{p%twsufY#aXj{&=D?(__%spfQHZ%BqDSw)zF4FZ*CCh2wNL7V@ASm1He1+ zJ7OMYON>-+8XBHbt|G&+3>PV_RS!!joJ%+*a054IO=^d&felSCOFlqUFCLGlhRjcS zeCd({rYa6iySXC%%9SJewU}&E)6ytzDY3>dmAd*C(9SI0MAaf+4hs;y1L#T169S(lr}At3g6UB@xUZp$Ufx zhQO<oFgx)_R^|Jkq6U~yw(koq1@Sa@4nlTywHF>q*#4Vm( z>X}w)@>Z5RO$iBA7`907LtbE>4W=RxFqzX)GYL{b?{q!Gj>%p~cyV!K4ragn+^QaS z=)_6TpcP|munw(Vds>i@Uhp|^brQebp~PZn2ShBWLdgyKaq^$VL>*})q7*k9+PT~AQ9}+w8GvrlG!`%Jqa$Jy;b@}b zp!do0EYY1M%Abc>Pd{2 z>Yalp!(G$D(6C4A22_UVqLjo$I1kJyh$mGCo{yR3Iv zj}xHiD&tH+EA=pf7~~6on`n`n>(_Zcd&Z`d(3p6IzTub`$IU%km6Kyjb-)#h=Qk}8 z=KZ2d0MW3Y*kpC@){QU0twx(aeFin#8ZNO~!8iT-2&~dH1%-L4p*-e<-%|uj9zPr2 z``R@pG87Jb{K#cxQ`FUi7_(B$DiM6yo}MUqbShyg#$N#G2wBBEHwplnt{@3149qU! z&<~&D#f49vJQ*TwW+ap{GZ`!*I-OuulYiE`odLdyK_8?@?6w!; z;-J^bz#JCv=FPd3l&yd(3JVkv&=9>k*R3d{931GSxxg*@_8>NLk?hfIYYqW|)h1&c z4GqPhc|=h#zkge}gQ5<`sOi-8QM>O&{DuC1H&S5=KffWNU!!o1mP@D;qBJ^NqSTvB22oa-(&NLo72%Q8|fxq5B zPGmqoL3pNHl)^LO`0@1O4c66|m}!@q^r7ELIEL{d>ce_B+26q}a^&-#;2fb{q)Vx# z_yi{((H9C{^{zWflTiWVq$MTSsE08=j7fDaE=Nx&1uZxOY=97sVo(K718~sdsnuF+ z$oK%@7GywW*Y$80!EWk*nsa0m6QgMCi19azfW9inqKoA~f8-7qrnb;W$~_;S>I9oDDM5&-jG`^-Y>A-tJ+E0Ge((ghkJ51@ zgWMk3UHqvyMcSYJ!Z;zoBgSOBQ0!B76HcpKHOBEUS1LC#-+oFsg*rc;)yT9i%?u90 zd_@>S^2Lp^?2NJDnGzn2;jFNu2M_kr5ee8~%a%{EzQywdvo7aqxwE1-SHvdCc)TL z5fN{)fvGm;s`ukNfog(A#)$|R}XYa~qziOnFimsM8w1$;%+ zp@R{=2j&Y$L0H+hRKbY+6YY&KNPQjFvF$bMWsU0^Xw zr`L;ubC`BQza7~zjPvG{IgtlXhfQu zN#-{F2XLs8MZbRiER#2cEFFuvwj=*kpU$ol$(}tA1O(JMrHbd119r`!#dlJ>ji!$r zgEs-l5UX%U1`5Jl$ow=#NnNF2GzdIX>k|Ofj6Z`an+OUN^%*`T zhpyN9)*a*QVhErX3qI8j<(bsUZTEEw(yJQOOtn{Q37KSF=V1Y!YVk$)xw} zusrwZEoxeEQIVq{XAeKvH~dTQL#CxhzW&-KpQ2BuUTq)#?WosKVK!a+AeQxv2wZPqb9pZZEvq_woXF*_;tpK{dSX<)GD^@W8N6$kTA^IgaMJhy8UtB zR&`Q4J5`TIjlK`;!~d~7eoKpIJ7o~fyMufBx&`Q9tk#Y33kWEB@Sv%=xnpAYULAvh zsW8ttV`$JSq?7`wFVj{Wtg zIdLa*J6WGDkv^k4^@T1jJrDe1e~QQbzxhkTc$(7ToxMC*R$qH}iEZ)U6L4Vn8R4=G N=Nrwtth>hNUjQUiL! Date: Tue, 25 Aug 2020 22:17:17 -0700 Subject: [PATCH 10/12] MDATP specific --- .../microsoft-defender-atp/advanced-hunting-overview.md | 4 ++-- .../microsoft-defender-atp/advanced-hunting-query-language.md | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-overview.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-overview.md index f2825a7ad1..e6feab4594 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-overview.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-overview.md @@ -46,8 +46,8 @@ You can also go through each of the following steps to ramp up your advanced hun ## Data freshness and update frequency Advanced hunting data can be categorized into two distinct types, each consolidated differently: -- **Event or activity data**—populates tables about alerts, security events, system events, and routine assessments. Advanced hunting receives this data almost immediately after the sensors that collect them successfully transmit them to the corresponding cloud services. For example, you can start to query event data from healthy sensors on workstations or domain controllers almost immediately after they are available on Microsoft Defender ATP and Azure ATP. -- **Entity data**—populates tables with consolidated information about users and devices. This data comes from both relatively static data sources, such as Active Directory entries, and dynamic sources, such as event logs. To provide fresh data, tables are updated every 15 minutes with any new information, adding rows that might not be fully populated. Every 24 hours, data is consolidated to insert a record that contains the latest, most comprehensive data set about each entity. +- **Event or activity data**—populates tables about alerts, security events, system events, and routine assessments. Advanced hunting receives this data almost immediately after the sensors that collect them successfully transmit them to Microsoft Defender ATP. +- **Entity data**—populates tables with consolidated information about users and devices. To provide fresh data, tables are updated every 15 minutes with any new information, adding rows that might not be fully populated. Every 24 hours, data is consolidated to insert a record that contains the latest, most comprehensive data set about each entity. ## Time zone All time information in advanced hunting is currently in the UTC time zone. diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-query-language.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-query-language.md index a27ec1c3d1..1b1ce276f6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-query-language.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-query-language.md @@ -157,7 +157,7 @@ The query editor can serve as your scratch pad for experimenting with multiple q - Separate each query with an empty line. - Place the cursor on any part of a query to select that query before running it. This will run only the selected query. To run another query, move the cursor accordingly and select **Run query**. -![Image of advanced hunting window](images/ah-multi-query.png) +![Image of the advanced hunting query editor with multiple queries](images/ah-multi-query.png) _Query editor with multiple queries_ @@ -165,7 +165,7 @@ _Query editor with multiple queries_ The **Get started** section provides a few simple queries using commonly used operators. Try running these queries and making small modifications to them. -![Image of advanced hunting window](images/atp-advanced-hunting.png) +![Image of the advanced hunting get started tab](images/atp-advanced-hunting.png) > [!NOTE] > Apart from the basic query samples, you can also access [shared queries](advanced-hunting-shared-queries.md) for specific threat hunting scenarios. Explore the shared queries on the left side of the page or the GitHub query repository. From bc22515e944645213cb882384f93a35303bcf6dd Mon Sep 17 00:00:00 2001 From: Louie Mayor Date: Tue, 25 Aug 2020 22:20:25 -0700 Subject: [PATCH 11/12] Update advanced-hunting-schema-reference.md --- .../microsoft-defender-atp/advanced-hunting-schema-reference.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-schema-reference.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-schema-reference.md index 9eaa69cd9d..0e2f6811ad 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-schema-reference.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-schema-reference.md @@ -33,7 +33,7 @@ The [advanced hunting](advanced-hunting-overview.md) schema is made up of multip While constructing queries, use the built-in schema reference to quickly get the following information about each table in the schema: - **Tables description**—type of data contained in the table and the source of that data. -- **Columns**—*all the columns in the table. +- **Columns**—all the columns in the table. - **Action types**—possible values in the `ActionType` column representing the event types supported by the table. This is provided only for tables that contain event information. - **Sample query**—example queries that feature how the table can be utilized. From 75c8c89150d52a5cad0f3fd45a142cc3bb56839f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 26 Aug 2020 08:09:45 -0700 Subject: [PATCH 12/12] Update whats-new-in-microsoft-defender-atp.md --- .../whats-new-in-microsoft-defender-atp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/whats-new-in-microsoft-defender-atp.md b/windows/security/threat-protection/microsoft-defender-atp/whats-new-in-microsoft-defender-atp.md index 906f92f4f8..5b63a7546e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/whats-new-in-microsoft-defender-atp.md +++ b/windows/security/threat-protection/microsoft-defender-atp/whats-new-in-microsoft-defender-atp.md @@ -139,7 +139,7 @@ Threat Analytics is a set of interactive reports published by the Microsoft Defe - [Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10) - Antimalware Scan Interface (AMSI) was extended to cover Office VBA macros as well. [Office VBA + AMSI: Parting the veil on malicious macros](https://cloudblogs.microsoft.com/microsoftsecure/2018/09/12/office-vba-amsi-parting-the-veil-on-malicious-macros/). - - Microsoft Defender Antivirus, new in Windows 10 version 1809, can now [run within a sandbox](https://cloudblogs.microsoft.com/microsoftsecure/2018/10/26/microsoft-defender-antivirus-can-now-run-in-a-sandbox/) (preview), increasing its security. + - Microsoft Defender Antivirus, new in Windows 10 version 1809, can now [run within a sandbox](https://www.microsoft.com/security/blog/2018/10/26/windows-defender-antivirus-can-now-run-in-a-sandbox) (preview), increasing its security. - [Configure CPU priority settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-advanced-scan-types-microsoft-defender-antivirus) for Microsoft Defender Antivirus scans.