From d83d4a2781f04dca4c4b8b70a71d2851f94fb002 Mon Sep 17 00:00:00 2001 From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com> Date: Thu, 18 Aug 2022 17:57:50 -0400 Subject: [PATCH] [DOCS] Attack surface reduction / credential hardening (#2266) (#2325) * First draft and screenshot * Add to page jump list, minor edit * Smol edit * Apply suggestions from Nastasha's review Co-authored-by: nastasha-solomon <79124755+nastasha-solomon@users.noreply.github.com> Co-authored-by: nastasha-solomon <79124755+nastasha-solomon@users.noreply.github.com> (cherry picked from commit 035c975dfb8d722fc87d947eaf53a47bab27acf2) Co-authored-by: Joe Peeples --- .../configure-integration-policy.asciidoc | 12 ++++++++++++ .../attack-surface-reduction.png | Bin 0 -> 38562 bytes 2 files changed, 12 insertions(+) create mode 100644 docs/getting-started/images/install-endpoint/attack-surface-reduction.png diff --git a/docs/getting-started/configure-integration-policy.asciidoc b/docs/getting-started/configure-integration-policy.asciidoc index a5ba19c1a0..b700cc9542 100644 --- a/docs/getting-started/configure-integration-policy.asciidoc +++ b/docs/getting-started/configure-integration-policy.asciidoc @@ -20,6 +20,7 @@ To configure an integration policy: * <> * <> * <> +* <> * <> * <> * <> @@ -140,6 +141,17 @@ TIP: Platinum and Enterprise customers can customize these notifications using t [role="screenshot"] image::images/install-endpoint/behavior-protection.png[Detail of behavior protection section.] +[discrete] +[[attack-surface-reduction]] +== Attack surface reduction + +This section helps you reduce vulnerabilities that attackers can target on Windows endpoints. + +* *Credential hardening*: Prevents attackers from stealing credentials stored in Windows system process memory. Turn on the toggle to remove any overly permissive access rights that aren't required for standard interaction with the Local Security Authority Subsystem Service (LSASS). This feature enforces the principle of least privilege without interfering with benign system activity that is related to LSASS. + +[role="screenshot"] +image::images/install-endpoint/attack-surface-reduction.png[Detail of attack surface reduction section.] + [discrete] [[event-collection]] == Event collection diff --git a/docs/getting-started/images/install-endpoint/attack-surface-reduction.png b/docs/getting-started/images/install-endpoint/attack-surface-reduction.png new file mode 100644 index 0000000000000000000000000000000000000000..cff71ebf2e7000097116faccab281940b900b3be GIT binary patch literal 38562 zcmeFZhgXx`*DXpF6af_l=^`Kk0wPU1iXcVcmEKWWfCwnPg-}$a_g;eZjz}+|h!p8P zbWlow1VV2iNAImAHQ@R*!{gph%N^x_iW zCPT>h|2$SCd`Lk2pVx^92!d=0NdDI~>cIWQUlee=c+da5C(b1NUsnUKWfJ}Gt4S9# ziU0Rw!WS2Bn;xh02kx%ES2A!WAfV;ExDhIAa%>Y2$Pp;Nc&6<^h@K-&x}(F`x|6u& z5Ow>XhDLcg4h|jdW%(#wL(Uv|6^5%6H=o_UxxVFK8?_bZaJ-ssWewVbH=_9)m+?}A zbK=Ophd_x0foncIUMg*W5~2uc3^-{M!f7pi~S z0?ABDB#bV(=Hkud$#Qk?e>bd0_xVvLv%X}zI={Q_YwW)+qC@%d@`lbFD@PTJxd~zMfugv*OyM7oPqBbEo0po9JQ5WwHtoaaY5;qkM-j#V8Y$APp@6JP6YmP zq~xt+J?-k3kM;S38-kWWq`qUDGwv(9<3>&goqY9HW0-k3-7z6r;Zj>JUcL4r?C!Iy z7ZDEyvlXHz1+$ebvstD&wFe9Qk4EXrdRBPFo?~UiSudaA*9Vz2T?ek4r+nfNQx3Nh zn-~t?zJDlx1{o5Z|H)-^`qKwJOpT*Qz1(soa2;(Ee#%Y?eb65&{*{UU`yG& zQ0MuQ->i`{k>5;=D*?572i;K_|>5OOU=yHK+yM!^|!O{Yjx zt;`hefZ^3Ds&m`X+?_j; zts5B5QD#?8dl+4;!D!LtE5N0m@%{ih-&{J|IrcYM%mX#MWD#)0yUDuO zHTDbKSO0Xxml%BSmc)$RhQnUQQ! zu>~O>LdVMkIX#S}ubdUyub!*L-=jZOgO-E!xey&zC|_-}iISN&uJtwTieU*^3fFqR zu>}U)?sjK>MSR&Z-|HjIz%p%rWz%jpHYgu`WY{!T?6^7YY6__ak8f{ON_ZXYP&FH2 zU9h&rZclI+`T_pRvdVRo*fB@zVxwzoNIW>l_>+p$AzHjRl<%@=*(!8jj$r=y-k;8J z-aAqO+Z42XF^xxC^)h+6y}EVN(*?)Yp5-#d7RWMbU6EG%nM1RlT-8K0&Z~cw&oKB3 zBAxT~kK@%a_c@8)DQCJI*HpIw{*6o5eb5hxF+r@)5A1YIScCZI8|+b{dJAF6mB#jJ zgt5Z5ntCvhJTW#^tR#j#=&%P9%cazpG;AWjFX4>ruf?toBy&}UB~}XC>6=ZIn{cQ^iRjH#MoSsoq8GBxNzRrw|46P`_nwVj#HRrHI9aGmmH^*1W?P2ybV9}rq<P zN3*BmyfSq8WbbUcCnU2_lciw`*e?r^Ql5mgZy`1;?20ah2JoUYnF9f=mj1Ul(e&tv zh!tMlX`F6{-j)X#=754|>j}Tvdc>(pOQ*)3U1(AA-Ms~mKDbk?YcRKZxDgM2vN0oA zCSyN)q!gJ=P5$t5dq)5fw+r;TTE$9_z;|x~x;$II7xVZn5qp2{tu7@&=T7j}ajVMd z{(6(!%g02!29=i49jZ7G0w(U<$>fe4U>=SW9{3JgkXawkZ>j7B;g)S%oR4Rfxh~yL zG<5e!!vmZ2EAE?$PwO!VjX2KMu~E?Re+aw1(?^e)KKXW2rpa;MW;m<RPL_L7L5ZPSu3a^5iXGD^_)pXxG30oi%9E6~XF$ z09Ik(t1$0yIsj+CD*UsnIQ7I7m%+TVgiUX+go$1{>d~9`2r$1*b9ar(2+sPZD#Ken zULgvmtBX|k*M?0X%?v`I!D#n|!j);){WZa zn|rU#HM-}5FwJf=MYjcX$BI-suB~h~=swUmkv~MwAvYS`HXE9B*6n{q^TOhIOr8}X zJYIgLVq9mCztpEJu3vjhJl`&xRiR{8nj&JkTx%hHcr0Sk8OGniMCc3)WJ+h90N<;& zYvTJA%N5(9n&8>*i}-q{r{yi{*ZP&9NT!Q}Qg7#Ki)e_q{FP$has{{iOX~&QmvN`V zSyE^0ITn*_bbeW?PcFp>B*YLOs(2oq>yHV{X2=I#hTWB_;fB82`*5d)pK<`yn=n3) zKSh-*qZ0TmhZf(u!3KU{0CzigSdt^CIcc-;-yiR546HDP2=vs8!0Bd{ah`aHD;5o& zuZkY@Ef&&?csEiC1{K>n8u?BbZy>Nk4rIE+*fU7ai{RVbns3@Cg9wNO>RYE>QMn&R zX?NekBdxZYP6X<&II{ljq&=PxwWappEVsD(%5JqO3DCr4g?^nV(os95X8OaB@$jt= zU_l^Cd{dlns<)a)uaDH=63fPfQabZ~cOB#=-^@I!PAVSwhMCGPj^iI_*o<(L3JW+s?k}#y<1vCPSranhTb!2a52Tplo-{vi6}Bs(DL6Wz~tVlVSa{d z`ffb(68n;zDr`z_U1C{w#T)rf18CPi!R^zW86-&eR6e7>v5`c6Oh`H7Qm{3gvU@(tv{M~9%^zjk~p%?-e# z$T^JUd@9)y)Y1;Rh*_pkzHAF&9e}6`Zk_W!dVx2hu-l&V4EH)<{Pn|Ah*K*Mkv=!Z z%65a#Q1}E}Uiidz#IoLVFJY|Uye3CE_Vnh<3dX;8qTJ#KfOV0*-Q=-j?$_pSvQ`CY zoQMSX?~vbnLmtK;(ustEN%xTPcH>1o;LgCZO3*;hDJ7#--&4%KFeRf{EU7a{MSBUs z6PHQRWPKKp*Q=Kv;7h>%Z)quuksraC{12;Mz2l!_9qKQy;}u=5a0B@+i^k$=f9jKW zKb6X3g~ez&92T0xU${JqJDV_a>`7JRiKmt=!lhF+@4ESje+}nNA zZO2?8SGzFgyX~m8L6t}0ySWCPFj6KCcr>dC2#T7%9?26#&6;2f#qp6*F~wPMsjHOS z6>5%!a~^Fwdj1{Dt`PEwx%r&{_6QH2-^)@6iVeOz5I+j;#20GiTka=)xByOACfyZ; z8P~7V1603t?1ONQ4_PmE7ohlGQD56j*;Z@ZN>dI!p~+8w)pg+x&(p-6l>nc!0>s$w z*8PUVP*#l$89rOBd{MfrGUN49IYj%Ah=9x6Im%A?IE$``)cVy*MvCo%!rb<*LNLpIg|H_O{wx zUNFvw6#q$$5p!hGgNf2U(&ymSD|I?(!EQ-rQ9mxZHH#uU+WTH+VL$$1tBKU<=dr_D zd*O><8s(I+!WVN+^sxByTSK5CQ`JPiL?Emxhus~{by<(mtWvtE9CfeRGX;Bu>D`+1 zw(RK9`9ABR5PGZQEMtw~q1~%z{}n#_FJAp9^x1t}o<+)INTK!_pX6b>aFF${s7D1s zQlm@4a(nqVA4_=d#@P_uf1UL)M$kf0sGBZsv2pcqbGkGiC0%2SOSYtVJMWGNwz;<* zK;D-k@{&Q=Zq-XnVh^&x8fyX>=p2*9$E?B{p#GXgF9c7lencLATjn;aMj6^7R)vC@ z#J}%vj4q5jiU1D&p9Z&0^tEFnY#5Xx*E`ZwhAybOlS3onMW>JCb0_40m22|MhXvd{ zGgnutJh{N7zofr<~Ta}oZVT)Yv!R9htMmTLhgL3KwU;j}KHbKCQ8#7jj z67MUP22Gf)PSfDeDouLyT*}}6?#nmBFDX9hBHuP#36#KmxnjIfq}jgVWUqRg*PK73 z7_aU{3t8LQ!n&GJtCa{Q3&9@*k{u*EIqFt4^x4Bq=a#b@SnE!S?9Qa#X6>(ycOg$o zElhi(+Ui;e4_jKus99p}cl7Ev_HRm7+jWZtp4OjMy@q#6nzjs0o(w7mGm4doi*g{S zw~$tIaWdTnU@5lA6nJPQnB5E`bQ>f$$TFa{E<=Rz(e#5mxx^p*Piv@W9PYi zwbV|J8_^0ixXN}Jw^j7illO9Fh*zFCbvITiB2sW#&0ElQCV#hyGzET<$ z<|_=`dS7E6C5g@WyhqnB*s(tG9Ud-Fb}nA8#+6txTI|eUlL^E~=+kZ6PyZ1zfSVUe z8_lCQT>gq7eu;7(E4^&7YOGA4M%x_Kr_f3E$~~|K1qw{H2u-KP`!9 z4Zut!!F)4pa_pvTMEXnfTw+^JRjf>8x10vIKSI?Ju*`O@t|ZN3L$sDgGx^QmeBPS&FYRvY5>)c{HJT{ zF;A&ct+Oa(BAr^(hl)INZ=%#_q_Xx%fYfQF`+-EN2{eB35yN8^8S}U~ote8!j~bxJ z0h0lKgKDqR;?nSq&IS@g7UXFguF2)=A0UUMw|z5_gs3@R0~HC)OUruWN(^hS&YBM9 zV#G7QJK!FyPs82i8vA{veRmzTh?xJSwD6wdhM&9l&~v~_x1TyKe?b9QEBEFS@@bij z8D&3w%RrdU?Tx}9{LR*NaW@ZGiE+(P8sVn+IUT!MgN{0*_(0>qngw99E0VPihTyzz zgC?7Zv$LhA2wzH{b7_l&;z2!mt<^9wUp67{RbhHD>ztnv%tjA9mpKqi)@KKeYp!`} z>GxA)Ix9;=cPqfdQb;4Qa^t|2a7o3dYj>i|e9ukK zpZMB;t;9?BHbd}UZo`Uyxq3O0=c3Y2qG-NT0EmQKsnuE6bt8_Om|T zo#|S8z>$~Pie@W@^K4Gn#NhDfV5zDkd&;Z3hx2odrWOLmb!#dLWAGV0%}PaAb~DfG z!FPBQc0z0$QAAk`#-^J|D`gaAq9U|K<5~V*gSV9#h9Vt&_zhW(PFIx!j*-+$k}Hq? z7h6y@y0TXO+_3sgo0gHH&|$W!gGIu5_0cbzeKKvYgEbz`5IP}u6a!a_#({6QPyv)x z+5S;YF{kG)e_1tQl?EMG-e3MfZs?-gHWw02es4R8D21gX`N~oY{+wcj9>}@ZMfgK1 zy6xl?=&n{@IERl{X_AC;^3Q&=&W?GDL(iKyl+*NU-c8w2R@b(u?WmrZyWfq^eiy?_acSSJAvcHU=Uw^6F5Pl;K>51q>-c45;S-2IJpeSX_dBULmUS=eXrM?$N~DOZdW z6oHNrQKj8u`#gQhBU0S5d94-PeAJsLklLa&3HOdnJetwroyk`Q-eywEOUL9ozxT|lAYuEl!KVSJ^wGrH#o;~AUwF$GOV|=Azyi$a3HQVqgros$Asn` ze>ngC`#cbPC|>ZF4O_D>u=Dhnn?O-mg{Ux$9y4%;#)eG|J>v%EdBl+L@WXw8|5`dg z2pQ@iL@g9CQd@N424f6Y@eNufn`AV^z6n=YQR$9-pcU5GHl06!DDR`Ea%U^0xCXgFW3*@5L{-T%%9 zKN|ZnZL`%bDFNp>ua%d3wtiM*XiYqO7Qrp%c&JhNc2nb)5`pPYcT-Q^^e?VdbMwNq zM`KQ#H@WTmo)Ml6%X!IhJ||fKPHq_Li4|{8W?Oqk;bLQRWWnn!l6^NKbc^rk;4nib z;X5-? zUDf{P9D8ea&AYh=p{!SwOP@)|&mhotVEiWvx{@NW_ej?xcixsJWSCd_=3L!ySJ@J= z-5PprF@cJ?Wmi1an69hOdKo$xBOWU_<6RdWVy*UG1E<}|rM!Hu5Fleb{Kl!uX3JnA zUp<{_2e)2+-Nm|bb=IuTrs9#HQ)cr*asfd&501Q1|!ZumhP z&W)M<6IC+JJFbmXIEx{?S@3%=hK*-PDeCBy#-F9Y8o^?iMIUC?`i^w2bZPgD{R8sz zd7<6>!R?A;&<_${TQMoRk8lVw!Dss!v-fXRt$|A48LMHMFO`c{?z6VrbX8~BYRt)1;PV% zP-5@metfz%oye^RbV0FWWa$eKMS^C6hALI=e*nl^1U*Vm3;~? z!v4mNG#Sv8YneX9oQu5ZOA^dEojDIJ-XO%0QGH-O+LEkpVrlx=c@TK&sZ;XLysK<% z{u!J1;g<8kI+T6mD{ZcdUet!jeDv3L#fHwI|GF&*{PP7`uOH{*>EDx)H)#{WyWDkKo7Jz2n6}efH_@;N+RbvtjzNjFtQy zn&kt;lZ%)idy$a~w4C)gf6_ zk|04k$8odUYx3byv?ecH0J_>ZNDMrznIdNYh(4^t^$0!1p4}DZyopde-7oh#fSXi@ zyh=Z;)oU4lT|Z)^J3jyUf7(lorE~2FVF0Wi|E6JW%p(J#RMdl48B!gG-q}O7w5; zNV(0(N-oDf;3M(@r%2)s5N3PR<;ZJm&m!}nzW|DE&;o!P07bT+VZ=x=ut5aZ9UiP! zJu=lD1s5+MdE()$Odgaue^bI41q9qS84tziyr+p?MlvU^LkANGiGxzh3!&$H?pw2- z)3pa9CN2N85q$?pL?MLhKMOt!^K--|CF7nM05hK2W(a~+mbD=Svx7pBe+n6r#_12A z@o7C!+ZJz^c-TeFG{iOZmO;PVc)ee)Yi&RV-sHS&M252xZtu5YxtGnzx5Fs3X7kpTFvUcbR=B2xS1tfWBE<6O)mZuqlygI zP&gENIuYKNA!KGZcJ`0g;f6qqTC!d9XR1+Q>Uqy9Gq+-{opTY9?tpqBtFbR_nvbET zu*5Mx`&3<6&$NzeKhuH?*~wZMsP8mG()+V^(b_<6sl3SJ#y9hiV3ldEEd$@ogrNyd zN9wIYn~WkQ0w`U9Sb#%ZXY;2`r{5}G9!OUOGKWVgLGzVseVYppG=#NAo*voWn54u&`*$5hwOoZMrUZ%l))AErVw$_6`fN^Ya z4B?p$X>N8Nz>WPy5#D=G7%t^D&PL55wU#xLnZS%yPm!;*RH7Y|&p5857eXo>vEa}s zsTME@d_f^Z5l6 zKJ9Bd(@URG&8_8;DmC)lK+M5GurXXgGy($Pt=AH+HmGrpu2{M{S5!ipgsaLxnm8zj zESN2YOS)iPD<Z_)QwGa4&!kRwj3rZcUNO=Kzsw5izaxHbkD+8BEi4Y}$2o-Ck-A@YW8xG98F=15if2FRo$7k1L^K(UG-W zwF&EBU*7B|@!SbA=uC>-8_8^J{;B^y;cpS?U}P%=qo3@DKRF(GCIE4qe0H?JX`#D0 zdi5V^S+h_&j5;s}tCqqe)L5Ly&Y5+DVmL#`RzC1SY;;O79Ko+(f}_SH6B4R>8b-YU zd&_Co+~jn!dneg`%zbOxVpFs>MUhi)fT^tcn_U=oi)>x?{g=T}6#D3B-n$DaBk|Yv zC-9HDCMEIJQEBijE;3aN8Vw=iR6Ruwj^C47S)r-(#$=r29U!iyOn(H%@Rc{yHgLMe zVcm6vzH(J1(E)C`C?*dNz({z=;hU{Dn9GUVGc8t2#0fK8hceIE)NwS6%2R(kIRSVp zg*dUP^WM1#B;n+@U2AnaU8&Wtm=$a9(}l|LIP!S7j7Pd4ekM-V1P7!fv2F5-DUgPH zrhC?~ZfW)?$&Hy0PDfkPQ?(c~XIP%_w@%wGECwM;Oa97ctMYud1!|VSXT)t(YoBP* zrQXeHA!_sI#ntdn_k@(|#Z<_+aX+Ujk(Ql(^-hb6Z0zpaR?2pLPy5rvvn_j56igu^ zrLKi<>?2uaxwU+cpbHp;;MQDS`Qq*VQ0Cme}# ztzAW369eR5Uqa2Sl_0F1kY zLA_l%dcIQc8eNa0uWkc5#(g1Ntc!Ht0DiK{xSR4)g$zRNyviR1q`9G|FT!cZ`*0== z+Jeq`4#(RKF3($6I>Q+|cPJ=h=bX0Cp1~~aMHPy2*6frjic81n$iCN`XK5O+LvK95 zFU4zehAQ>Mm6Q0qJ-oLaM=E1`Tv0#iS}ucQ_2eqI>b{r#l3MIZQ4Vx@a_DX*zSDc4 zxprU%k1{pIQ|V(T|3&T_$-e#k%Az}Z(&~!(oz>FXo>Xp7Poe<3b9m;OI{QPfYxFh2~2zc-XlU>d^ET}!mR1kFG*h9~fGs|hPzP;L zpIU$1N6o0E2^~n2oeLfaoHW4PH$K`zPr~1g99s;(Im`}dAK2S44-ZeN5)Pc5UMR5* zd_%e*0zJ)iRO}g(&6m^wBZ4CD@-B5=k3~;aPC^V{Q}-4th8OvhEJDRFeEB!4+^#G} zGK6v&c7b|R47?5*-uRYHC}_$WKh+~%pLhz08qy(Cl~xtRj;Fq#uQT##NwNIY@3MnN zpbe}hht6;Pvyrmd>0a&`>Smo`i+Vc8ufKTI`t?pQO0E0Tco!~0&0Ar>>dA?cXJlBOa5dl>*T`VY5gMI!bh^{GjunzJb$a+7BH_# zWDpv!w#nE=Pn{8YUcJTf7z@a49V3le-c~Z(R7X&P&>B�xfkcnL-6KRhyQPqs;(g zK`*o*)C&kx;&51Mo5U)7R_NfH>Mf%R^J?B>hq=VnN(B9Zp&|sE&Lr;is=?==e#&=@ zl~P^o-F`B&kK;&PGkq&`?85*K2Avu={y4GWjjO&M!>y&r-s(EpTuznV(7S8~jq)QJ zn5bZzJ7j$PYX4bq!p~ruBNm$Cv`{8NrxLww`1`L!x41Q5 zR7B`u1SH*J9j_ctw3{e^CM5zfr$dUYGE#MTxrwrwHxVXv?}O2EwPp{_gr|9r3n)${ zSii6Bh=(_gacQJ~XPpmYK8iJNbW=0*ofvc7OoR*iOfDv-FD858%bQ}JOSo<0YuC2s z8gH>Z|M>F!l>O1d$MeRiEYH|)O(e*_Xh=emCKA&+f~EoU4BH&r;VeP}N*C}im~6R? zoYrW^nFyrD#~9C!c((&c?3D4o(r2Bt`xMj2U$G`$M`-gy1E}zwaFH^dR4Qu%!$I(Y z!IF#j0(p}gdbXXa8Fl?=&`?;Eczfb0G7Ks1jP&lOT>v0QmBY+113v`o5`%wzF07z=G^6OP`p*silHQr)Au?nwWhM2EV<` zuHO1t8+n3@Z0R$=r#!cw+!oyJK+e~H-E50|J-pax+M?CvW{NR#h8w|pvt^2PiV;2K zvFG0~Ie5fe?wdBBTbv;a_kr?bp6#Bf^*v+a70_V1Gp^@%Pdx8P)(Y|vglq9~U5@>X z7YdB<(mb%6X|5F4!WZmhTKeDog19ZMJ5}ipTaz}lI{tPZ!{x4yJq85%J#@?s$*|;s zMFDVMPHpqdgy6fI9=fFa3u=GUMfbL!T>A(ep5NaPL2cf%iSN0CzSlTlKH(y4DEzR= zs@Tjh@|zF-_m5ybum*_E4(ZSTbV>LAI4%iO*4z5r)-IwhUjt4c z8H&VbUQ}wXF&wt$FpDZJ&OGyBE`1At|% z4#V#lITMTAMCczIT6$42=>muGKHw*Liz{fC_ytZAjVMUm0sh9BwvlYV&&~ zH@ag0i8};)UR{2sI2GeISDEGSn=Z(#U!hr`Us)xh5R#X1)%I5!XDp587zY3SsD$b2V#byyO1w0_Cu%M? zwTjmsVPRaaM9pBrC0qyiqp#_q3k-WD_96!wM;T_J1FJ_mnmI}j%5#+1zzF-t?m-lE zZ7gnk3HWy&AUk^RR(2k-GAwi;^6thoMEYY_z54UNS&RP=pg&$Me!AKU4v7NJ3mJt< zU}p+c^7W68Z4&$ifxxnJQp(uArAAae9iK1bNPYshCUK5covr)O2f>AZ(#?N$GRgwd z`O_H+*6A01=*Ipr{&)LnZ&izRcL1qszaJj(fxp&XFVxX8Qf?LQt@d-Cj_k|MxTE9j zXWSTsaC9@=2AyHJ*MP!>T`kpzX;y2dMVtK4pY7?J9|Ez)ZATZX!R97$&beY+&cYpV zh*I?Zs^4(u|zx?|V8w`^>2Cb^I zEGY`RAF*nICP4){d-g(NHLG2R2So!^kZk%bXwDg=impV@qojdMmwfBaBtbYIC%o06CUHfk$$qPWbn_zz! zkesV}CsDt`oV2LSbMS(^ju=i}#2(^M46FjCQk8Hkl&lOfYT^xOAS?=TRjX3m#gxA73S+5z38>jN?#+j3q<%$EF58#~?)b-ZTP(aiHv@N&c0 zP@}L1Vr_;@y43H6*0gMoPV`oP6gLwMT+r$?TOotd{(RseS@cVV~#%bE;29~G#@?2+6 zre5K*VOnT?!4iiH<&L&jaln*}?^#aRUGWLzk;6{RN|rx%m2X=4Q;3L9M1_XRC7o3n z4SuUc+=cGL)nGm6;)Be%O1iR?_FG)!Qj^Sa&eB^+7--Tx?=XVGgwAl3>a=hntEUR3 zuYgf=4-=h`wTs@oJ!QbwH2fu?!D7G2bAc?m=WF{*4*Ab|CP=s|Ho-=Mkq^iu=qNus zE;Ns(DU?>W(r|ncSb*Rw>!F*|lunz|B0@Gr&-O*Y6TJn)3yg$Q9jm^mLHq{Xah0)l z+H-d~rnEEAFP2M#zR-e-p%NyhENmg#$j{JVzG6pjMe^;y*wCfMCqH77!~8`{-*bk2 zJofjGDo&N#(P8vBR`MK`c+DT5C_q=X4km%P)0=vyXIiMDTHu@0LQ=oIiTn7*K_|8W z{HTiI*?x);Xdv2`IH>0rO@5!2cDb(dwL3kIFn-@NkGvVE;wimI#@USasP$e#DWEXa zrk5OGUYj6$5YKx;T5!PO4;R4RXNj-hqwN{a?s_%j#X7z-$!kr873l=!9A#rrWjp7> zIs;z=Us?{#l8zJ~$?3h3(HnTD7;!v%=&6~n&V7WDjp|RW4QVc)a;8-ZTN_@^*pZ%T zwn(hMw<$mat?YshH^+0R#0@zhMRxlg=NjhD(g31{vpC%Q%N?Q5v-RFD-7wRf!p zfuCoV7=4WO0I}BF+QNT#j)02wqcGJxAWO;h67!9o9%?D)a#N&?05jYvzU@ZhRVrgP z6Qd~C04hIUEo%Yw0Xja$Np5qV=9ACS304jD8X$Kgp{CwMUW>@#bkeYnCn6e+dHTbd zII+N&DP7Cm8RM@Y+5X!R%+pD2MstEYh=u+{@$Q|Mqszzn=2wxE?24^Vv-YtKsbko> zWF~2+zU$lWPXf*|6hO%U2QH*fQ8a;HAp72~Uk7kqBC7)A&BC-+%;M%zo@#@8-ZjN= z69e5+L#~UE7|ATYAvwrqZ3MOb=cxV27`y-bCvwwBW$8gF+PC^cLNmOv`(C@2J?zDB z5VdnyX8nLmt!V~gJWfKw+eEeQ{VBS~ghBMU`}!`*iv$oxUf)Jgo~92C&KkJT`n34Y zwkY>+-K!{2SK)Y5bvN z#L*3wXy%$n5f1^%--H;>(By9nk8nsBv*`Cc_Tf)YMOf=9*RI=vfKpt|tGlwDGLhAe zm}Z==PLZys>gVfQ;42%O13`Bvf2gNDR(D$M-lzv8O>q+JpAYFEP{3|*6!tED>EW*w z&RFD@+|2Lxpu{bcmN+0aPF`}U!AHufk?-FH=dZ?L9G7D*@+(;7>OmSSqMWxq=zuPL zXUo6|+4GhGBtrYil@^lub^U`%BL8o+FWT!idn>d4FxlPg7H0FaYm1by_7vfBeXj%b zvNLR)UdHF?`fOpk&&W`1uuKxYwB5Ip^luR#94tD*Y`w-yUUy8{14y$yv6K=vP-dn) zNu040lD9a_bbQ+2G>)MYCY;;dZvo9%K!tqSZt4%4@wse`^fJkMd|8lx++S;kor~-X zlFIGTj@d&Bkhq0Bp2?@KD>-Vy{+1wq>n5lk_AlXayYK3n3#!aZPw_O4zk$+js$x)} z#XaG=Z`({J%TZJKsLx`)1}whr!;(^y#|PpjNV>iE+0U!&(yz3ICd<}Mq(ZNpQnN^y z=M@bLi#HREW^{Sf9Qdl=UAJ*y5W+9rJ&L>U>BN2zdQ>eHNzq%w&ry5Iobn+2-m1~}Nu`4(HzinwqX7OR$sY1h$l}!UB2>=QFpn(8(puNbamQz|latyv5nW zzWLl~K8ht9!v#5YS>??^4q*cM-55u*S{^IWe5}6y-0M95gYmhKCz_yX6-)h)0J`%B z3M8Hwte+_f~T%17r zlCrWhGl{8_KU(n`OYzzdcz>$M_mr|tT8rVggWo+zCkTkQ8y;8axbze9o$`jfmB%I* zg7&{6M$hBFxI+IHO8{~LQ+|J>4B1)l!G|4(n;yQT04HWQpn`DET(=U2N0fhmn~e{1 z1GfluI~=U*Y8~i@a-dQuGi=juaeUF(p1Z2Z{C_GE{v%LW3j$=vw4?164k_9N_LO4%hn*k}Ax*huOOTWwD48{+zh{&1pn>BYKH~&J7s{69H$e z1#}CVzexN{xiPgAcEE4hHwjw?0(cBB$Zd~B7<87vH)GkJ*Y9+&;ri=M&b^U1anftc z)sYkhS)s)P>9zkvFp2Xg3YaD6h2MVtDePz+1t)chxR5g!>42>cfT(>od9@ybtcf1s z{$$ykpbTg&423zPE73DY<$Y-)2sDpTUXBO9b%`XP8s(}44T^PH4(zAI@#=M!NaEKT zZp((_$I&BIs`2whi?e(U32hSW;gK0&L>YXQIMVW0jLIQ8Ik)LUGmrw*caHv5qz4T5 z{}nHGr-~&)4gp2JH))}(;5;BQNU>14EpQ)jvT-}I8n;Y*j$8c$O+8P<=nHL2Vgz9L z`fA6|H!~-ub{M*kuD3#ua2|W#zT9N*h9>eWm(LTIjwa0jfF$)~1E?jjo4MLygob>u zhxY5k#Vvj5jYF>J3HuqV4cKV^8@K2mCni`Qk^MvhfCY{VB%^M0L%}t$;Lq2Ygr9eY z({FfTj>7zKKh2x>p^(k`)PHNhYLzF{9NN|aM6O&9qSzo_!=FA@mploW&9K_D#`}4- z5qWap+ZA+NXYi@3*yC{>89G;)!t@5gPK&0^Dr30giok}_8!3J zV+R{ONEav=Lg5e8)4G|&ELNH5#ZSGlcg^moeH|@>fFzI0L_bm7d5mc{{AR!^BMcr^ zSBJ@1!0uao-aiZ&=uIrAg|iNR_gGhHRD~*JQj1CT7LB9OW%oZ(OuE9YOWil>0pMR? zAJ22gp4Eh@b`TM`Y4Nwb4Dje46hO<>%tsbLRmDzda=khy+Rb_b?P+b7T!|b|&iZ(D zv$)i(WvUDyB~`Ot>}bHhyUjf)G-+&rn+5)yK%;?*vC49H^d{t4sm%=o;#Ih}uT_rD zFLRc>LI+nt#{vkv+01rNq5#o1!EQBVYcdPO4aaL5q|^ z58y&>t-Lc^AQL*Jf6`=Uwh?#p-BHuwXUfzZK*+Z#c(gS~Lpcu~rr+h(YBtA=Chu$% zucS|p=h()6&JsVXo`riOnj9fdE8hRUm8|!@AkI6xsyC=KumL|N zKymxAb&Zi#ZvwQWNIY~VB|2Sv4|R)6{hiQSsnCz=M`jg0eaa5Z+k>)_rA30^v*AKh zbQ??j)||v-oBLcY^;O{^v+tII-pe~nT<8YflBRV-%xpzz^qzDJK*7rNv*KN0WrmdB zY_73Tz5x##9HmQCRR&_F=>V4dr0zT@i<+*=CL~1`e>PKsg8fmTm^!Fd%y0t@I~#SR zD7Scpk^(GZR1gKj?H}DvFV0&!>2T=uE150^!R8yMD=(&Mo zFYZ1%J#BW(&k46^xNy58s8*n?HN|Zq{M58lpJZHbcwana;z8zjn_(w! zy)J>7=|WGmdiE`T7VO>Ezo#VS18bb)bc>T;oT?KFYs}LQ)zFPC#>2WswqGJQ%n789T#bV)~CbFPXt77 zA7yfbM)K6`O|3R1@KW0Yq&luw>UDNk`t5aqxlo^_1PL{`es)h0E<_8q6*i^t+xxZ0 zKG>mtWLEDq&f?zf@z0z1H1Y3-I_0HT216OeSBQB4ndNu)74l`N3kIF|B*jiqYt&|V zUrKk|?4ni8`Vbst61Zu&f0~kL8k!gPL8evz{Cz@W-Vjg`b#)Fq;L_Mi)79}hqUR`` zc8QATMNA5`@~hDqwS>cfMTFMSq}wmH?R12tSraS?7pFJ z{@Fl!V}HYH%#lwyAVi27$vqn#vDr2W+~!o(i#erC=^dnbP*3|wMB^vxe{J5ln4P;`X4 zQ6{XGmOc9^^s}|QQ{^5>Mb@}0c&43>&^tBiZym>*+{^h#D&!fJVKV7}wgsp_gz&#I zs^4h*{_cbaA;a+3*7}c&Ali1IHUu=!BqZNKd$4%8FV1?Z(Y-|)JfkN!SN|Rbkab@G zMc-_M3%ADN1fZ^ZdT0e4Cp!d0M;#`PDxN`)e$uN(Ps0(jR}PVjZS03zK<6T$%eV3q zX@^Yhj$7leS=2PpUOcaacehKOGDsoJs7nl%j=srvt@NTKq0Rh?M%6t=KxBKGeA-1a z++kO&SNx|(XQ9S~YsYw2XHfayz~?s2J%T|oLPC;^I=Qie*XY@0pjFG2bSyoz%1|tU z%blv22Qay4K(nv-fNS(HAXy+DIm~=q!tpApRR#+vV>TPgdzv9+KETeo5L?!!q|T*K z0y{_A8#l7KcAg|?(eN4Qt?hdU6AZwmeC|}?)0#Zy^w&ufKM)BY1d0TGCJkTSRoM)e zyd`unQ;s&~i4)*8^O@JQ?mt$WFW2g2X?!2OP>-hiTXqRpz6NL}PYnP(n3OUhFC^p& z3}A3NnyLn_X=KbgTG#EFns-I;8B|(}Hs;|(jHp=lDSQBD+AWR_9uorXntgNW>=Ost zgvDV9X`l{v0kDuVn~&^BT1t0OIfc68;6{&MPQ!~03A-!39xIK2`rZ%H=jY#!ZgAc) zq&x(ddGfKpggWA-4k_K7WPNc8X6bkm>{H4UWou$c>#dT zcyF>bkS_VeX8S$x^90%Nl4INuk+Qh^sbY?mGrBA2Dd&+=EJ9a{N3ZA&qErQFtNW<} zs)V*Ign0uy$T_b$f=?%_!1Ds>mdNM6XTvYT#|x>cE;MHiM{8W0GWZ@O`V2sO`t9Mj zpH87A{?|Iyx? z$3xw=|HEXfgh~>!lu(4SX0N2OXD3<8ZtVL$q>?BR#!j+i-*;xHWFNaRwo&$V>|>1K zIlJ!P{r&y!>*9Gme?HIax%LkUs4z(}Qjz%AS93sopVs&pepd{>XhvU$w}-H~qEwe)p&4 zgA@2ow0j=VnmGJcHKNyEO!u|ic2K(#J8Xdrpqp=4C;|Ks?u17v|AZc$?H<*q{TgdFi!yRpiUcN<7mw-q7$c#04yy{jKC_2M>>yfK*Q z6d6gyk@B3C5?wCidM^MTmbV$rsu`Sd%|np)j4eNPOXLcJruZxc0$GYM;pPZoss_=Y zBa7*IatF6Ga~p`UgEJ$GgnnO#{@T~%TkvO8JxAO}j5ULteiBx5vBW=Wdu}WPrDhmK zSL@g_6V%+4+m{75sxy`K;_#ogWdekYal+!t+OEo}(%vKcCxt9k1QSprWq#zKTZF<28+q}N{`xAG7AlNPIwUJeM+T~}^2h9iQF-RVHS#A;p3`{8QN-JtqXxAmJf&_no-x4&Q$znN-8 z9gfLYo%Ndi!!p@q@9l56mrPVT>TLLHGETx9sm}$X#@axz{F=DKGuShUvM_-U)j*EG zpw1(>WE>p34`Vbqsk|5Fe}4rG`B=_J>a8&ydVh$)QL_Gkc~}_!;~i5!q~0ooP0n-T zzJ$wk^&de1fWu0@AawD~O^x)gb5HaPHx&*6dJ3&qsiN3sdoyi556s9@F}pFlRomYB z$oZ?$@OPX3V{rFTFZLT;uCpjEy~5?F>(B3_u7If#pTOQmmzY(J%k9*yM_ntyRG)7S zOK4d@rcKPn3tL%$>&*r>Nd6)1QrUSq<7bNT8w@v03d?`RBjF#)e&geF(4t)Oe|>r{xYwSSTg z7j7hBD!S2ke3q;Iq0DKt*GUj|c-#0L)S1m5OH~#hib+vX6@XZ+pJ>S)gmjs0`Qugx z4Nf!inwkXcBvGW}7H$G*lafS$T=_=ZNHrsS7`F%W8+Ux`UthM-zZKTAd&OYdv}TgkdwIvu4cR-8N?@4rf{-O zR;6btRmvAhyRk$TN`C6M(s#=36VfwDHDM~AtZRD^rfY!XRC2CT5)A)ZmsA}qsDd>*!VLItj z5y9h=$itptUNA`fGCn)vi4BARPQXI>2r^~{br#@S3?gu3`~E&qF7M6hQY)(>LqzYH z9ter_&5qQ5%V8`~4KNo|FSF^pe?w& zbb(3QJlen!wWGCp?=|}5?^NKqD%I^Iuk?Zdw0M8BK5Ixg2{ccPwUc9S*!khR#A}Kf zN*0I^lA%kGJUafZE03`$CW<@D2AvMXm~U9b;SDlM8u3vO2910wnx_bS!~E|@VFds3 zhr7!`x^!>#zLzT*)z%i1AByRhZUQ~c(}+uAjeynLv7oYEY5z1%Z^-ljyjRWY@9cHN z$O@8mGyw&4PNK%MB{~qR{euo63Nrxm+m~GgRU=@3(pCYowTvn*-Ns2|zEA-ZlI41; zOUQh_YG(m%jp+j)%$lH%cvSUaCobh-dx~L|1KPe@3FpANJXyC&%`TfXP-tYN6noQ> zP9|XgmC+xN?O(n9`xoh@6N1l3jJ4v-yQ12%31IgxAAl57Bw+ju+goM&RJ6aCc`s+0 z;abwJVYc1}0#S)we?lPfLRF8HXs`JcB~J40RXbi=xjBI>&zYPDhKQ6xuzA0B6NI9b~;^&FhWcPwe$ ztw;`fesS&;gWKwed-pr!T|wjew*ZXV?W*^+9Crt4*nV4nY;!t6G8>#6DdQ329<>ZN zKej-Ebmk~FrrT@;GIITWajUT3&8MY26So^TkUXNADE*oCm^|H>v~jpLqp)%n&FsENG9O2@3J^4CWtsUO0l~}Z2DhQ zPuaTNeR2PLH`Vv1c$33@Z>Zdyj@i#OLy{r1)gb4Cx28JiBXFw!T7xln8+#Y$7VXJb zEQ^flE|v$eeOaAoFxwfcbswFe2O3v(t9j@7ZM99tKljb~u}5+~qK$E-oVzCOI943e z5=uW>NXY&1VFhvcX6lZK*@FDvXl?)g*7#ZwqXVU%DZAQB@&gGBbnkiek8lRz;$J(m zkjO!h^%(XC${;bo9*x*{w=W1=$<)0ZKfv~JrMBF`w1C|YSe3z?qqHd5ywB9h#`W`3RzCMyzU9gti1bSS zfYiCnFyk|vl{YJVx+IH;x-HwLS#R2+@a~~(hZNIW4 zG#r5Zx8~89XK90MrrLip?ZK3Eo*v$V^gnQ^p$Ip$QZKB`+9xr#0O96Qvk1IjjlOJk zs~!9CN}~XReJ%tc_D79x{5@f`)FKh@BJd`cF!gg?J-f^oXS{OSr8ipIQLn)IgI>t$ zIKf+D9(mggdco+2t}?(FbEz`R`IZGA8FKvVWdznVGt+?VQPLT{) z6P9fd*!wM}viJ+lq*;8}D{OT>-OxG^@vMMg&}WvjA4h7dCEeiMJFCK-?KDaPK+SrYNy*qtlF zqM&aj#FV0~HFLFlIWlK$hRQ!LkK>A*3%WoQnG&BrGq*9}EBZ&a1|&&z;%`GzR8nO- z>a())7y9eMmiB;9$G^AQfBY|q(P%RBbmLM;PSE@>c|se3T}(vIkS5EJ)V-UoZpKRW zn$-up!c`zj6xW0uvX@FAg0S30fA83#f`m4J8u#)TU3tTfilLy69lqz%?c39MxH4L0 zF=7JOnwj?pgFKp)S;Rv#?{D6fU;vmq5EE4H{I>!?f-kYcM6ilaj4|AP;gz##%n#8I zG)$&AbjLXKr9G#X@LDTodWE`MZ`B)ea&e_I6)W-PsHDPQX8Y>tdhHw5`E<7cjAJI7 z{h?w>`s)G#l$hhhGa*0yLlUxHg|Lf45rX=+QkU-7TieE&K=EoKs^L0UA8rL8&xt!+ zju&xGiWW5a$!zH;S7@U5w8HKMpe+3fXoa%~tDL^$GHPh%K7{wh4t><%q*QuIzFy#f zs&q^()Wm)FT=842-8@_wr}EO)8EIS>zY;`#|J1ct6Jc*TuD*SFy724ucMMW5jdV-$ zDHIg!z7CTbQHyPr-Q0OY;aTul>)gi)-^cTzH!}R@8h#mDe!KRnO~u7=7P`YUi{zh6 zB1qBWyeE8TWx{B$vZ}7UBJWsOE~DHVgg~EQ7)`tq286{!~Qt8qeO)}dvd zmGR<5Hti1|5wZ4t9T~2KpF?$ehv)|1D!Z|AbcSkM^wSDk#doKk@g#@{Snz`b{}T<1 znBx2D#l9b%g}~^07znx}JG#58_Rd01Y`3*3Y8E^dozpiEcWW9_O$7U?_z80&dYy}6 zoNUnQ=R^h^ee?A!^ac%!lHKwF-I)_cb9I6pH>Yc#PjR;)+b{Z0rXfVW8diP4-mp7P zL^0+3NikZ7zPFenai6tFUG??L)n&}Lu$Lb6j1?M?jZ@JtR~BvhqXK<5Emi$JS+_i1 zyh!(U`smezTA)bKg4^_O$UF{>h=6(6hh2O_lS}{X)iGX*_U)jzD)+RSe|{W2_Oj;m z8H8jQX-^y7KXMBJ`@RMTEwB++JpW*VkM!*)?}Koxz~u|I$905b(jT;#V3%J#?jd&@ zUjtD+qdV8#P91Zk+-)R)77cQ5#z>FpMqnT{xS-ZKJ()j$YzrJ{;R`)eLv~bD`LCZb z0xG)aue2VnV_RT>R15Clk_*+*qXC9V-~z}Ue7pBq`Pdc{jGzVa_B8E(7_9&E)t_Al zlBTbN@57F5Q7;Hu5X@RxkDQc0vsL{B&Wmd;y9BS7`Q~9-j3$9Y=qH&?D!|e^4~lC-7v;i$r*ku3v z8UHex{~eG2Tq*w@kN@wEN6@7zkDFt}ga%1@%Yx32-b;tEnG5JrAHBl-?l#!VZ%$R0 z6ZQx^j}&3oA}d2R`l>4*zesxQXQwe&wwZp7Q}0?H$HR29sSE=pnFX|fgb0lm^)Xf? z@NPW$RbCQ=CFDcBFrU#xa-HfdR^*&*L`>l+4HuuK>kIwqPndsj z*OFvzEalNrC07JXel42mOW^LyiVPh-zI4hr-m~XOcelp9H4DhF1@uR6-Vr=~J|wio}n?|IaCJU%Khk9T(7I4N%$4<0ovi(}sxzyjH{y6}D3AN>vSkQZH4hshP>T ztmKklEUQ#GpD4=L8&O}Os>E#no%WkL{<(&C-n7r(T(JN7HmKo*4)34(Js*-IXVFcA z6ng5mS_8yNd&7`xGo3-V-f8xgSE}{9iD=E`OZ0GEF8Y09X~^*-moiLey>5C(iGH|@ zM?K(hO1-UfzplLh&QX9#0;uKY#8jzjR%Jg{dhtv@vAeA;(lMK;9n(P95%1+kiKRuzl7N@jBFNi=YXT2o1RZy?4^K7g1 zbHC?Xs^jn&O?YQHGduo#p(R6)yF&&iJI&|^*d3W$3$EoNj=h~lT`j4X1kF~V+NEW# z`#YOg?gR}2TC)x+yx3R{Pd?%gk%IKtAX~x&q`T3UoG#>B*bH$|J<%8OYX+Rksc!Rx6YQ4n~Vz+!}_wur0wP7`6L?Lqa~`IL`5-cKc2uvNoL_E zE9e#$3}a0>+%-!`Ln07e%(v`Ha9QADY@J4#6j!=qvQqS0gRTa_mO%yAbc@^NF;q7|3C9Wnf%VG#(uuF(2P$olZ zB(@-GtT^cM;O1i{r}ifP>RPXL&G?=1L-Uo|_ocol2b;m%%yI}yNlh02<2)mVKLBB~ zu&~j>zB!G<%o&8u*|Gv^V);dAfo?&9dXa)<*MVx5dg=|szP=>lVzCE6hcw%!nWZbR zN7v(r>V`ZH=?QJmL*koHortD@@<*jYQ=apu)iqZS<>~2-B>1RF;K`Q)PCPqbY9uKI z{q?PRW3HZ}bh4;9D)AHKXGzRu&*j^FgEuD(pY}qa`|FHLBil>j?P^m+OYE0D^m+KY zy@`9Fq=JI0&@^mf<>scKaHpqBrA0IhW@V7lgVmSV>XAQDdCuA@7B2wZ-uB#p)nI@$ zxWVCjYfNFq)}7M2%gzr_cVWBle=TIweH@ytTZcLCnXRVIN(r0fqP_~Oj8>duHBl9( z|2mAzqkB;Zw~cdshsALY*Cw}j{!CX;&fh-(6wR|nk3N4AXdKJ@ba`~{61vj9ZqsO> za-_n3%J;_TKMg@354kjZU}}ZXm%h)zG;l~u-8BYxghTR3OaQwF)#6Zr*+!vN$KC+z z73xMPeo&-tPe^dt8;Q>D$SZ2Fp;!&0nv^@-fI#kb%S%>PomlZ4^G?-5I80CP&b>dJ z{H{J-;@rKLEbO@|y;MetFM`{CJ=3s!HOIK279+6}QiX}X+AU3RBz)N{q%I2B{bePz zHxY@1M~R(2eR?K{ik)6HZ_3auQkh?{LE6BfVJ20VV**$0K$yU4JYu~eFHkpxy-+X} zOs8D5Qf|3oUYG8ohrK8|W z=gTTS;$rVkMTF;sa~b9!N_JlU1Ixp)Rq5)|Zml^Ok811zk?=GO&CRnyjA)&p_iI^e z<*aKnbR=3Ku+KDD9b3D^X<%W3%yxP!^`p2v>e)TYNqLQ`@wW#uisy9w|&Sko}?$#Jzs;&msfToRfHx{rc_CsxdCboO&sfb(Mo+x7+s(=ii~RI}JPo zxm-E3@=YmrzIrtisC)ySrJ=&A#XGCR6GL_jrP^^HpD4o*v2&RzwID5lF#U=Y7&7?o zL+87rEq((@rtn@GGu(4LL=VX%4u(`+`~WmEsk!(NC(!wMV1v~q8O>4vUpsbU}ROtNC#&}Hzdxh z_$1?t6xa{)#S!UVD}!^HyG3lvK3kt(u4G~il6wmgNj()8%je}Y3ymbPxU^lyF6v z?dm;$*UgT5D3=hLk*r0v1skadqf{fyW2R zmTl5HEsm-1fUFr>loKsuo-lCwP0!643S)U1 zHnO(yp*%c$=y^f9RXFY*&wRe{m?N`uvTK9!G=Vy_2!2rcgJeGl?ns~N+ja`RR3y9# zCx|Wdz>`JQUcY|Lo!Jh}FIU_Bc8a7?Xn)0%N$+RU@`mbrJrvbwRn@%fWc^Vh z%yV?Iqo;BSY`z;gb4d|`4Qt^sW#d3Whcua#I89HtBGuCQ3dhgxzaPJ;(Vu871rJ*1 zR%PzUU~G|^BOmFxyZGHK>_if?NPxpP`T!shGaKHoE}EnDP#*>fBz}oNoY9V{z>YxP zgd*1}gR!+`gmWPsav>%Q&&v8b7iry@OxdKLiA~@CR0Mw?4xPQ-D@_DgpV2-OcI!PR ze&(cckkqPR1p^;g;O+IC3RB_0s;>GeJ;Yqvyyt>CyZDA5Iv(O24o+aNd8qG6NJ-qG%A0sKz6vcMg8Ve)V-xz$F0W;Kw1?nP=6U;514brcv0eoBev=0pKV&y z-A3ng)~$EI^yS*;)8H(gGNUdyAW*&zhJQY5WR2qz$olFyQ!pfcDHlH@Z$z2w{IrqR zJ*zm`WhPont-S9ixuiyLhQ|aJ)c=smo)4eNG4Z$ZA2OYK&v{}_R2|$|{W0zjYb(E4%(O?5%}cUKKIzrI<g=1PqR1*tg7)w9 ziZ;u8T6Na8uqUv7wH3jji%Nr&JI*bvQzF?2mEthAevYC8Thnj5&X$qCn0KxqaM96k zhOClx;8yBwh=c13gq@BpCN+QN4Aisrpmuz4_o?zxwD|Ut%}^y}t04UPTG2_7w*fN@ zFiF%rS;Sq7$wsXcS$=)!Eq@Qq_M_nApm+)mwfMyXTSiv3|>R!M!mPs-BDT;Y`5Z{o!ta>{gK!K8$88o)8v}C={ zNw;|uD`50XoJ^XBr`jYtdI$?@FT{9NYkavd7nkLHqriG3K{Zj!VsirZk|K--JR41f!Nflj3czKWZrj;4_S$!WReA`}4+?%aHVJ`Z|WabM~*DWrO+RNIgj8xj| zEM|HHtlZ_v%*HA=Z5EBL(z>+=5Zo?S&I&|)*kLD=vTqGwjALb3C$=Gxk?hcYgRB5z zGUi1}&>sBdgXvr5W<+o#nT;OdKoEzBkib@U3;q0io)Jxh{NyBOYF$PiX{y?q2wyK?&~_t zra4}F#b|3%ZvM*pL>Y3oq628YOqXk^SIWKFmRZ71!Wp611_2(PmIagh_g?~Wxi97D z_4xSsAOVR<+2q&ub5nAYZ46E?DT|BPofG3@8n{g%we!|l29ssw6c5Ra^+~1Xx(Lb+ zTL!}eRf?*F{jE^2ko|x=ER(pJKKFVe0n@!Q!>5b?Pj0%LCR< z3xoJ1aZg<6~LBdvDi?0#iX$wM=f$ zs!%8`Ej6MKM8U1wcu#hrz8KY2>K3a8Cu$+~hHi@a$j4hk7%yCCHJeJgsLG>RQ)lEaBTlZ(_ zgt}*DWl>4b5|aC0djJjWsK7Y}j6u~0e8gKSCI3`JTUSm_=8k?pnZ^-W>LTh_+~1yt zo;FI1-~UY=w&4cLX5pgv^&Nmc4+@8kugfIFp=T{)-O`%5I$YJ8j1x=5p&o8_&x&<+ zjTl*2ILXu&1la?&azwxHeuqd~rTn6Ne6Rler-* zT=zrawsP(RM!kxT^Pe#F<)!J-3R)~;3_0RtBqR)ZiVyB-k1+RkGkp@qRG5#vS z!>+UY&)vV+^#4q!JAY#43{Lg7CfdJp^pD_u!wsNX6$5H_@Jy1W@#h#OZN5Z5R-3>n zM+`!SVlM@vsFams1*nH#VWDJwRSw(Jo?MgfSH{t;JO!QMOs>=5MiS$-mxP&(^$I_t zTy&rwc{_}Jn8MRrJF&EjTR>S)^kfl!eC4&l_rI8(7^!m}0L5mp@Zxn+nJX+l)={Y} z+MjfOLri);oK%friVZpxueh>&v+^@32FBg+Ynjz=B8Y4U+2$)Q=_&g|(RIDICH1LI zz`Im4&~miQ^3bv?wi0Kv2Q&7y>ViCti5H$54%wfe?s^gDh}eW2m0WLI2%%YC4`d8 z84rB`l}f`XH|$3^zi$4S zBr;=cLB?%&fx=hsX;(%i3LI!}br`XGeD(EKhJB}Xf7#(Whx}A^fNdb=swk_&ta$2+ zF##A>up<`z{C0ownB!K{sa_z}%1V&ZXKQ}_l*-4hw2>iWXZYS7==ya#PgQ2!sNKu$ zNCI%oaee~-TdBD!xqM$&wHHUQKh}x^=d^mh5?_xmcI>l@h1gwMb`vSnHE-?e-|5-Fu37LH?w=&1%qInn)71j47mfz&L zB>`EoF*SxrDRFt`<3nMlc?xq%D-rRFPk#?SYGZX8~_F!kX}2g zeqOymM=Me-y@)iN-iiEDu#@5&5QQ%kjG|Y&gRB;h1aaloj!)dMJB0Doj02f7EIy(2 z2R{$vu}dc;u=~$lRz$yN$cK28@_0sc5?xdL_R!i^O~Y(5AO56vhGBIFM*Zsc6ZHn% z2z<&m&Z${P{Ov)qxJ{qFn8Vogu826D|5$Ze(NfR?$3OCX)kIR1ROHV6-J;^oWEBUe{cU+kTQRaY}_?Em1I2?}A0 zvFQ&ewnZ7N?x^5?cd`1rsedXWIOHq|yVmVWQ0?UhO*v1oeatIld!E@~Q0?R#8urRI zU`<)oX`)IyPgj*KVBVN1fLNew`a~6PSf84X zx}s-DKqT$GpXYm0gU|Zax3VS>L>uFap_ohMRF@$p=|m7G)6`SH%-kjQYM6Y-Cs4s= zKL7pG;Q{v1l1{z+9)u#9xRQ0Ao}SY)qE?5EjgT?OugZAgy2Zx>C3yt90vGRB!}(F1 ze$DTVD;tXt$EPUBQ}>Mk<$(9g!!?Go#4Y8##68cM#MnnDzdKoa5$6we$AP*ksPgjn6LgJX&F?gG zLwqcaZR^)B@-TsB#;;c^=PWL?SNRG*w!0;KmoIPFz6co(6MJtPlF7pS3eW?3bvcZ! zv>63~U`8~&1s6H$Sf`N^;9^(v66-Nu(WQa~(F}2F1Z}A&zF{ffi6%{MtFa+nqB;x) zq~qI`iev??Qbmh*ukg*Zelf#-x@Wa)cukC(+es;7XJzzh7>u&ku|VHS2qGs4w_Xca zd1c%3nlXuwZcMH{!PyRlZ(+Bfj`I{FU96h$Q=}En(S66*wIs9JOPGlY`;Nl>wrA^{ z6Q-hxwo3ILz`|FSMAr^>3_o?sM|@v4n(;xbj&u}+h%s9W8t-jOsTo6OByx1}VqG7z zpS>Wcp`kJ4xsm$4$gOW=H{}bIN6$#&0e6Flaa32)qk7#fy(_rz+O9p{OFrmkm*1hp zPC;e0NJt?YH+>4L6)W}h?+QW&;t0o8ZS(S%GnQA{2wM&LGes5(LBEkJEU@jU;uIKM zO5I1c=I)T?Tu4Q-lgP(A{i@Hj&P8AGaja557Q(v{5QBZ7=msC`0 zsJ@&1+7FW=<2}@=m#hN-rY}Woqt9=M`SA@j8;KHM3p`_DHR>uyfqYI>zQ}F(Tuga# zWF!c@Ih1P#S&y9Yr_d59!u?cDRGm0f;k%UhVo_1$%y@d0#X|p|oXpOrPb_!9b#F#e z<`I;?#15_0*49?iHzHy?@U`=eg+1r9xrOizAhf#(-OO;$i`7H~ywFeJy?#Af)iQjr z#%EjKravpjn{MAJtDF|ZgA%t?a)!daXgVQKmduQ}5CsC&s&ZZnq{Z#t3n_5~<&1AU z)A|v2_Ox`0m+ylU?;wdIC|>#|#avd-DM~RIwVb|Dui4qC9bHStb{6QvHYa+sr)DR9 ziB3)N-eli*C|k<~K{NB814YFk`kH<3L2{6>hJw{(mC!wusq+2%1!)&w@lP19j8tTP z@z$}l=}Cjn^TnmxM1dlhmpe0K0^TEsPagH$*>j!iN1_F*QQ6lU_eGRJ&@j~?4!rmvNy z{N7;5Q%S2b8s2PLQkiAQ;^$BBv2?;r2KVpyuYCXjk?3n{8yTpAX6tP)UENAW8uzUE z&H&6tmpDcOa?QFndDgPm{0JV-q(TrcLm-OOYc2m`sfAvO%G2ucu&FD!1LNzV&b@tK z+SovDsixe1^r=XQ_Z_7-@%X}^gFms`k#K#cu_CQI37^$~nP@yW@AlTf*~ig)KXiSg z8HR~d2&_{Cu7kxKGFb=+)j~>42uaWc3Y%cXaWj+df0i8PcoKg?hnvdJ`3HojXv^-b zG1lURBh5F)r&WXP)34~Z?}r(xAU##xzbFJ_=XRD}*l*H-6XL8x5O5h=-zKi!F%_nh zajHu4+X$tSj-da$(}VNrGUogBmL zN`|))5fNoB*YrTPbx*3byBjt(_6!pAJ-k!plb$!s+{#J{$|<=-+$}8N;<}AQw@`vn ze`0W=w^!pltI^CM_G_t^%|G9nSA*l~RW`*6Gw`$`Ndbk4_!t3@nC0H|oYlQbXcBD@ zs_VIlgNLs;1OROU~_@GZG+G@IXdvX6&pT;H5cq(w6R z$-){%Js9DBsAxv7j%r(8_w64rPuvn>n#JGOy%+wV<)>m4iff@ zy1WYi33mP8(4Dt#07)5nKr?x8ELi5-)w?9JH}kbYg|DNZb9Mnh+Bu0Vjl|=)0w-T7 z1d{ma>*pMS82DFTIQjsj{n4IyAmJYcRsOwPPlkclEiTr)aZEP??`8lDi0mb)P@a)cpI7`}YO}a2_yX3mB5sBkIimuddz%ulxO*Qs&X40r2RN0${}Y5Ts*r z$97ep{A6Ru>lmeDNByc17_kf}SvB<7t`?s>8%RgZ7js0w^j}^3f6)S&p>1S*Sj%zz z%siPPzkiNE3rfh-YjvII>gXtPDIPm}?D&~e50^MfU1SS?*h9L@JZP4`Q(B56?-xKF zzo90dl1lB^w|om;um*qgYL{8pw@%3Qr40=7@5%r7O8ej2!>J&Ul~8H+tI17dp2RQt zRXWK&(g@nY*4IOB)-8JM0uZ>+6Ib;UUNKyScc`GvMW5q3o&QN={**b)BpJlmsRB|{kh5JWXv z;sW@98<>peGI=YiHgzYzQAwSC7INGMezI_a*$<^(b@9DF%xb4@=-mF8cf&~ZkJ|O9 zR1=OILr()%f)tOsCiAt&b}AL=^t=DG-v2X%jMUcP%$1tz^mBaD^3ESt)d8j+LKU@$ zin1L{x0s4$)upQVP?=r?C;bxsg56~Ul)2P^hD=;z59{7 zJGaeAy$ZCYhUztB+C-DbVj?-23?!mHC0fZSuGvT1A3smLT6cx325#M60Sif!=kvqI zWY``5*CHg2dbvTn8GEx_70X8T$J#>X@G=Uz2-^Z0%;T)RsGf0<@;EGUwr6c~|5 zLtd^`#}3_pKjS~`!T*!-Nbg+v5Sni|>u{`XK6?^DB0TxsQHA>0fj@VB?NC?@6b^{` SX-fkBDJrNvD7