From af32515f9724b22a61234628048fdd9b1e983cb8 Mon Sep 17 00:00:00 2001 From: Siddarth Mandalika Date: Wed, 8 May 2024 18:56:13 +0530 Subject: [PATCH 01/14] in progress --- ...-using-mde-security-settings-management.md | 217 ++++++++++++++++ defender-endpoint/mac-install-with-intune.md | 236 +++++++++--------- 2 files changed, 341 insertions(+), 112 deletions(-) create mode 100644 defender-endpoint/evaluate-mda-using-mde-security-settings-management.md diff --git a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md new file mode 100644 index 0000000000..3ca40fe2f6 --- /dev/null +++ b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md @@ -0,0 +1,217 @@ +--- +title: Evaluate Microsoft Defender Antivirus using Microsoft Defender Endpoint Security Settings Management (Endpoint security policies) +ms.reviewer: yonghree +description: Evaluate Microsoft Defender Antivirus using Microsoft Defender Endpoint Security Settings Management (Endpoint security policies). +ms.service: defender-endpoint +ms.author: vpattnaik +author: vpattnai +ms.localizationpriority: medium +manager: dolmont +audience: ITPro +ms.collection: +- m365-security +- tier2 +ms.topic: conceptual +ms.subservice: edr +search.appverid: met150 +ms.date: 05/08/2024 +--- + +# Evaluate Microsoft Defender Antivirus using Microsoft Defender Endpoint Security Settings Management (Endpoint security policies) + +In Windows 10 or later, and in Windows Server 2016 or later, you can use next-generation protection features offered by Microsoft Defender Antivirus (MDAV) and Microsoft Defender Exploit Guard (Microsoft Defender EG). + +This article describes configuration options in Windows 10 or later, and in Windows Server 2016 or later, that guide you to activate and test the key protection features in MDAV and Microsoft Defender EG; and provides you with guidance and with links to more information. + +If you have any questions about a detection that MDAV makes, or you discover a missed detection, you can submit a file to us at our [sample submission help site](/defender-xdr/submission-guide). + +## Use Microsoft Defender Endpoint Security Settings Management (Endpoint security policies) to enable the features + +This section describes the [Microsoft Defender for Endpoint Security Settings Management (Endpoint security policies)](/mem/intune/protect/mde-security-integration) that configure the features you should use to evaluate our protection. + +MDAV indicates a detection through [standard Windows notifications](configure-notifications-microsoft-defender-antivirus.md). You can also review detections in the MDAV app. To do this, see [Review Microsoft Defender Antivirus scan results](review-scan-results-microsoft-defender-antivirus.md). + +The Windows event log also records detection and engine events. See the Microsoft Defender Antivirus events article for a list of event IDs and their corresponding actions. For information on the list of event IDs and their corresponding actions, see [Review event logs and error codes to troubleshoot issues with Microsoft Defender Antivirus](troubleshoot-microsoft-defender-antivirus.yml). + +To configure the options that you must use to test the protection features, perform the following steps: + +1. Sign in to [Microsoft Defender XDR](https://sip.security.microsoft.com/). +1. Go to **Endpoints > Configuration management > Endpoint security policies > Windows policies > Create new policy**. +1. Select **Windows 10, Windows 11, and Windows Server** from the **Select Platform** drop-down list. +1. Select **Microsoft Defender Antivirus** from the **Select Template** drop-down list. +1. Select **Create policy**. +1. On the **Basics** page, enter a name and description for the profile; then, choose **Next**. +1. On the **Settings** page, expand the groups of settings and configure those settings you want to manage with this profile. The groups of settings you can expand and the edits you can make in these settings are mentioned in the following tables: + +**Real-time Protection (Always-on protection, real-time scanning)** + +To configure the Real-time protection service, set the policies as described in the following table: + +|Description |Settings | +|---------|---------| +|Allow Realtime Monitoring|Allowed| +|Real Time Scan Direction|Monitor all files (bi-directional) | +|Allow Behavior Monitoring|Allowed| +|Allow On Access Protection| Allowed| +|PUA Protection|PUA Protection on| + +**Cloud protection features** + +Standard security intelligence updates can take hours to prepare and deliver; our cloud-delivered protection service can deliver this protection in seconds. + +To configure the cloud-delivered protection service, set the policies as described in the following table: + +|Description|Setting | +|---------|---------| +|Allow Cloud Protection | Allowed | +|Cloud Block Level | High | +|Cloud Extended Timeout |Configured, 50 | +|Submit Samples Consent | Send all samples automatically | + +For more information, see [Use next-gen technologies in Microsoft Defender Antivirus through cloud-delivered protection](cloud-protection-microsoft-defender-antivirus.md). + +**Scans** + +To configure the "scans" feature, set the policies as described in the following table: + +|Description|Setting| +|---------|---------| +|Allow Email Scanning | Allowed | +|Allow scanning of all downloaded files and attachments |Allowed | +|Allow Script Scanning |Allowed | +|Allow Archive Scanning | Allowed | +|Allow Scanning Network Files | Allowed | +|Allow Full Scan Removable Drive Scanning | Allowed | + +**Network Protection** + +To configure the "network protection" feature, set the policies as described in the following table: + +|Description |Setting | +|---------|---------| +|Enable Network Protection | Enabled (block mode) | +|Allow Network Protection Down Level | Network protection will be enabled downlevel. | +|Allow Datagram Processing On Win Server | Datagram processing on Windows Server is enabled. | +|Disable DNS over TCP parsing | DNS over TCP parsing is enabled. | +|Disable HTTP parsing | HTTP parsing is enabled. | +|Disable SSH parsing | SSH parsing is enabled. | +|Disable TLS parsing | TLS parsing is enabled. | +|Enable DNS Sinkhole | DNS Sinkhole is enabled. | + +**Security Intelligence updates** + +To configure the security intelligence updates feature, set the policies as described in the following table: + +|Description |Setting | +|---------|---------| +|Signature Update Interval | Configured, 4 | + +**Description**: Signature Update Fallback Order +**Setting**: Select the checkbox for **Signature Update Fallback** + +InternalDefinitionUpdateServer | MicrosoftUpdateServer | MMPC, where 'InternalDefinitionUpdateServer' is WSUS with Microsoft Defender Antivirus updates allowed; 'MicrosoftUpdateServer' = Microsoft Update (formerly Windows Update); and MMPC = https://www.microsoft.com/en-us/wdsi/definitions. + +**Local administrator AV** + +Disable local administrator AV settings such as exclusions, and set the policies from the Microsoft Defender for Endpoint Security Settings Management as described in the following table: + +|Description |Setting | +|---------|---------| +|Disable Local Admin Merge | Disable Local Admin Merge | + +**Threat severity default action** + +To configure the Threat severity default action settings, set the policies as described in the following tables: + +|Description |Setting | +|---------|---------| +|Remediation action for High severity threats | Quarantine | +|Remediation action for Severe threats | Quarantine | +|Remediation action for Low severity threats | Quarantine | +|Remediation action for Moderate severity threats | Quarantine | + +|Description |Setting | +|---------|---------| +|Days to Retain Cleaned | Configured, 60 | +|Allow User UI Access | Allowed. Let users access UI. | + +1. When you're done configuring settings, select **Next**. +1. On the **Assignments** tab, select **Device Group** or **User Group** or **All devices** or **All Users**. +1. Select **Next**. +1. On the **Review + create** tab, review your policy settings, and then select **Save**. + +### Attack Surface Reduction rules + +To enable Attack Surface Reduction (ASR) rules using the endpoint security policies, perform the following steps: + +1. Sign in to [Microsoft Defender XDR](https://sip.security.microsoft.com/). +1. Go to **Endpoints > Configuration management > Endpoint security policies > Windows policies > Create new policy**. +1. Select **Windows 10, Windows 11, and Windows Server** from the **Select Platform** drop-down list. +1. Select **Attack Surface Reduction rules** from the **Select Template** drop-down list. +1. Select **Create policy**. +1. On the **Basics** page, enter a name and description for the profile; then, choose **Next**. +1. On the **Settings** page, expand the groups of settings and configure those settings you want to manage with this profile. +1. Set the policies based on the following recommended settings: + +|Description |Setting | +|---------|---------| +|Block executable content from email client and webmail | Block | +|Block Adobe Reader from creating child processes | Block | +|Block execution of potentially obfuscated scripts | Block | +|Block abuse of exploited vulnerable signed drivers (Device) | Block | +|Block Win32 API calls from Office macros | Block | +|Block executable files from running unless they meet a prevalence, age, or trusted list criterion | Block | +|Block Office communication application from creating child processes | Block | +|Block all Office applications from creating child processes | Block | +|[PREVIEW] Block use of copied or impersonated system tools | Block | +|Block JavaScript or VBScript from launching downloaded executable content | Block | +|Block credential stealing from the Windows local security authority subsystem | Block | +|Block Webshell creation for Servers | Block | +|Block Office applications from creating executable content | Block | +|Block untrusted and unsigned processes that run from USB | Block | +|Block Office applications from injecting code into other processes | Block | +|Block persistence through WMI event subscription | Block | +|Use advanced protection against ransomware | Block | +|Block process creations originating from PSExec and WMI commands | Block
NOTE:If you have Configuration Manager (formerly SCCM), or other management tools, that use WMI, you might need to set this to **Audit** instead of **Block**. | +|[PREVIEW] Block rebooting machine in Safe Mode | Block | +|Enable Controlled Folder Access | Enabled | + +> [!TIP] +> Any of the rules may block behavior you find acceptable in your organization. In these cases, add the per-rule exclusions named “Attack Surface Reduction Only Exclusions”. And, change the rule from **Enabled** to **Audit** to prevent unwanted blocks. + +9. Select **Next**. +10. On the **Assignments** tab, select **Device Group** or **User Group** or **All devices** or **All Users**, and then choose **Next**.Platform Update” version Production channel (GA) is available here +11. On the **Review + create** tab, review your policy settings, and then select **Save**. + +#### Check the platform update version + +The latest Platform Update” version Production channel (GA) is available in [Microsoft Update Catalog](https://www.catalog.update.microsoft.com/Search.aspx?q=KB4052623+update). + +To check which "Platform Update” version you have installed, run the following command in PowerShell using the privileges of an administrator: + +`get-mpComputerStatus | ft AMProductVersion` + +#### Check the Security Intelligence Update version + +The latest “Security Intelligence Update” version is available in [Latest security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware - Microsoft Security Intelligence](https://www.microsoft.com/wdsi/defenderupdates). + +To check which “Security Intelligence Update” version you have installed, run the following command in PowerShell using the privileges of an administrator: + +`get-mpComputerStatus | ft AntivirusSignatureVersion` + +#### Check the Engine Update version + +The latest scan “engine update” version is available in [Latest security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware - Microsoft Security Intelligence](https://www.microsoft.com/wdsi/defenderupdates). + +To check which “Engine Update” version you have installed, run the following command in PowerShell using the privileges of an administrator: + +`get-mpComputerStatus | ft AMEngineVersion` + +If you're finding that your settings aren't taking effect, you might have a conflict. For information on how to resolve conflicts, see [Troubleshoot Microsoft Defender Antivirus settings](troubleshoot-settings.md). + +#### For False Negatives (FNs) submissions + +To information on how to make False Negatives (FNs) submissions, see: + +- [Submit files in Microsoft Defender for Endpoint](admin-submissions-mde.md) if you have Microsoft XDR, Microsoft Defender for Endpoint P2/P1, or Microsoft Defender for Business. +- [Submit files for analysis](../defender/submission-guide.md) if you have Microsoft Defender Antivirus. \ No newline at end of file diff --git a/defender-endpoint/mac-install-with-intune.md b/defender-endpoint/mac-install-with-intune.md index f1ecf7c8b9..84b114d2f9 100644 --- a/defender-endpoint/mac-install-with-intune.md +++ b/defender-endpoint/mac-install-with-intune.md @@ -1,11 +1,11 @@ --- title: Intune-based deployment for Microsoft Defender for Endpoint on Mac -description: Install Microsoft Defender for Endpoint on Mac by using Microsoft Intune. +description: Install Microsoft Defender for Endpoint on Mac, using Microsoft Intune. ms.service: defender-endpoint -author: YongRhee-MSFT -ms.author: yongrhee -manager: dansimp +ms.author: siosulli +author: siosulli ms.localizationpriority: medium +manager: deniseb audience: ITPro ms.collection: - m365-security @@ -14,18 +14,16 @@ ms.collection: ms.topic: conceptual ms.subservice: macos search.appverid: met150 -ms.date: 04/26/2024 +ms.date: 05/02/2024 --- # Deploy Microsoft Defender for Endpoint on macOS with Microsoft Intune -[!INCLUDE [Microsoft Defender XDR rebranding](../includes/microsoft-defender.md)] - **Applies to:** - [Microsoft Defender for Endpoint on macOS](microsoft-defender-endpoint-mac.md) -- [Microsoft Defender for Endpoint Plan 1](microsoft-defender-endpoint.md) -- [Microsoft Defender for Endpoint Plan 2](microsoft-defender-endpoint.md) +- [Microsoft Defender for Endpoint Plan 1](https://go.microsoft.com/fwlink/p/?linkid=2154037) +- [Microsoft Defender for Endpoint Plan 2](https://go.microsoft.com/fwlink/p/?linkid=2154037) - [Microsoft Defender for business](https://www.microsoft.com/security/business/endpoint-security/microsoft-defender-business) This article describes how to deploy Microsoft Defender for Endpoint on macOS through Microsoft Intune. @@ -36,7 +34,7 @@ Before you get started, see [the main Microsoft Defender for Endpoint on macOS p ## Overview -The following table summarizes the steps you would need to take to deploy and manage Microsoft Defender for Endpoint on Macs, via Microsoft Intune. See the following table for more detailed steps. +The following table summarizes the steps to deploy and manage Microsoft Defender for Endpoint on Macs via Microsoft Intune: |Step |Sample file name |Bundle identifier | |---------|---------|---------| @@ -61,21 +59,19 @@ In the [Microsoft Intune admin center](https://go.microsoft.com/fwlink/?linkid=2 ### Step 1: Approve system extensions -1. In the [Intune admin center](https://intune.microsoft.com), go to **Devices**, and under **Manage Devices**, select **Configuration**. +This profile is needed for Big Sur (11) or later. It is ignored on older versions of macOS since they use the kernel extension. 1. Under **Configuration profiles**, select **Create Profile**. - This profile is needed for Big Sur (11) or later. It is ignored on older versions of macOS, because they use the kernel extension. - -1. On the **Policies** tab, select **Create** > **New Policy**. - 1. Under **Platform**, select **macOS**. 1. Under **Profile type**, select **Templates**. -1. Under **Template name**, select **Extensions**, and then select **Create**. +1. Under **Template name**, select **Extensions**. -1. On the **Basics** tab, **Name** the profile. For example, `SysExt-prod-macOS-Default-MDE`. Then, select **Next**. +1. Select **Create**. + +1. On the **Basics** tab, **Name** the profile. For example, `SysExt-prod-macOS-Default-MDE`. 1. Select **Next**. @@ -86,11 +82,9 @@ In the [Microsoft Intune admin center](https://go.microsoft.com/fwlink/?linkid=2 |`com.microsoft.wdav.epsext`|`UBF8T346G9`| |`com.microsoft.wdav.netext`|`UBF8T346G9`| - :::image type="content" source="media/mac-system-extension-intune2.png" alt-text="The settings of the system's extension" lightbox="media/mac-system-extension-intune2.png"::: - - Then select **Next**. - -1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or select the **Add all users** and **Add all devices** options. Then select **Next**. + :::image type="content" source="../defender-endpoint/media/mac-system-extension-intune2.png" alt-text="Screenshot that shows the settings of the system's extension." lightbox="../defender-endpoint/media/mac-system-extension-intune2.png"::: + +1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or All Users and All devices. 1. Review the configuration profile. Select **Create**. @@ -100,73 +94,85 @@ As part of the Endpoint Detection and Response capabilities, Microsoft Defender Download [netfilter.mobileconfig](https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/macos/mobileconfig/profiles/netfilter.mobileconfig) from [GitHub repository](https://github.com/microsoft/mdatp-xplat/tree/master/macos/mobileconfig/profiles). -To configure network filter: +To configure your network filter: 1. Under **Configuration profiles**, select **Create Profile**. -1. Under **Platform**, select **macOS**. +2. Under **Platform**, select **macOS**. -1. Under **Profile type**, select **Templates**. +3. Under **Profile type**, select **Templates**. -1. Under **Template name**, select **Custom**. +4. Under **Template name**, select **Custom**. -1. Select **Create**. +5. Select **Create**. -1. On the **Basics** tab, **Name** the profile. For example, `NetFilter-prod-macOS-Default-MDE`. Then, select **Next**. +6. On the **Basics** tab, **Name** the profile. For example, `NetFilter-prod-macOS-Default-MDE`. -1. On the **Configuration settings** tab, enter a **Custom configuration profile** name. For example, `NetFilter-prod-macOS-Default-MDE`. +7. Select **Next**. -1. Choose a Deployment channel and then select **Next**. +8. On the **Configuration settings** tab, enter a Cus**tom configuration profile** name. For example, `NetFilter-prod-macOS-Default-MDE`. -1. Select **Next**. +9. Choose a Deployment channel. -1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or **All Users** and **All devices**. +10. Select **Next**. -1. Review the configuration profile. Select **Create**. +11. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or All Users and All devices. -### Step 3: Full Disk Access +12. Review the configuration profile. Select **Create**. -> [!NOTE] -> Starting with macOS Catalina (10.15) or newer, in order to provide privacy for the end-users, it created the **FDA** (Full Disk Access). Enabling **TCC** (Transparency, Consent & Control) through a Mobile Device Management solution such as [Intune](mac-install-with-intune.md), will eliminate the risk of Defender for Endpoint losing **Full Disk Access** Authorization to function properly. -> -> This configuration profile grants Full Disk Access to Microsoft Defender for Endpoint. If you previously configured Microsoft Defender for Endpoint through Intune, we recommend you update the deployment with this configuration profile. +### Step 3: Full Disk Access -Download [**fulldisk.mobileconfig**](https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/macos/mobileconfig/profiles/fulldisk.mobileconfig) from [GitHub repository](https://github.com/microsoft/mdatp-xplat/tree/master/macos/mobileconfig/profiles). +Starting with macOS Catalina (10.15) or newer, to provide privacy for the end-users, it created the **FDA (Full Disk Access)**. -To configure Full Disk Access: +On this macOS Catalina v10.15 (or newer) platform, when you deploy Microsoft Defender for Endpoint using Intune, you can configure an FDA profile by doing the following steps: -1. In the Intune admin center, under **Configuration profiles**, select **Create Profile**. +1. Under **Configuration profiles**, select **Create Profile**. 1. Under **Platform**, select **macOS**. 1. Under **Profile type**, select **Templates**. -1. Under **Template name**, select **Custom**. Then select **Create** +1. Under **Template name**, select **Custom**. 1. Select **Create**. -1. On the **Basics** tab, **Name** the profile. For example, `Background_Services-prod-macOS-Default-MDE`. +1. On the **Basics** tab, **Name** the profile. For example, `FullDiskAccess-prod-macOS-Default-MDE`. 1. Select **Next**. -1. On the **Configuration settings** tab, enter a **Custom configuration profile** name. For example, `background_services.mobileconfig`. +1. On the **Configuration settings** tab, enter a **Custom configuration profile** name. For example, `Fulldisk.mobileconfig`. + +1. Choose a **Deployment channel**. -1. Choose a **Deployment channel** and then select **Next**. +1. Select **Next**. 1. Select a **Configuration profile file**. -1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or **All Users** and **All devices**. +1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or All Users and All devices. 1. Review the configuration profile. Select **Create**. +By implementing these steps, you are ensuring that FDA is granted to Microsoft Defender for Endpoint. + > [!NOTE] -> Full Disk Access granted through Apple MDM Configuration Profile is not reflected in System Settings => Privacy & Security => Full Disk Access. +> FDA granted through Apple MDM Configuration Profile isn't reflected in **System Settings > Privacy & Security > Full Disk Access**. + +If you previously configured Microsoft Defender for Endpoint through Intune, we recommend you update the deployment with this configuration profile. In other words, you can upgrade the macOS—on which you've deployed Microsoft defender for Endpoint using Intune—from its current version to v10.15 to ensure that FDA is granted to Microsoft Defender for Endpoint. + +> [!TIP] +> If you already have an FDA profile, edit and add the Microsoft Defender for Endpoint on macOS settings instead of creating a new one. Apple only supports 1 bundle ID, in this case the FDA profile. + +> [!IMPORTANT] +> While adding the Microsoft Defender for Endpoint on macOS settings onto an existing FDA profile, enable **TCC** (Transparency, Consent & Control) through [Intune](mac-install-with-intune.md), a Mobile Device Management solution. Enabling TCC eliminates the risk of Defender for Endpoint losing **Full Disk Access** Authorization to function properly. + +Download [**fulldisk.mobileconfig**](https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/macos/mobileconfig/profiles/fulldisk.mobileconfig) from [GitHub repository](https://github.com/microsoft/mdatp-xplat/tree/master/macos/mobileconfig/profiles). ### Step 4: Background services - > [!CAUTION] - > macOS 13 (Ventura) contains new privacy enhancements. Beginning with this version, by default, applications cannot run in background without explicit consent. Microsoft Defender for Endpoint must run its daemon process in background. - > This configuration profile grants Background Service permissions to Microsoft Defender for Endpoint. If you previously configured Microsoft Defender for Endpoint through Microsoft Intune, we recommend you update the deployment with this configuration profile. +> [!CAUTION] +> macOS 13 (Ventura) contains new privacy enhancements. Beginning with this version, by default, applications cannot run in background without explicit consent. Microsoft Defender for Endpoint must run its daemon process in background. +> +> This configuration profile grants Background Service permissions to Microsoft Defender for Endpoint. If you previously configured Microsoft Defender for Endpoint through Microsoft Intune, we recommend you update the deployment with this configuration profile. Download [background_services.mobileconfig](https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/macos/mobileconfig/profiles/background_services.mobileconfig) from [GitHub repository](https://github.com/microsoft/mdatp-xplat/tree/master/macos/mobileconfig/profiles). @@ -178,13 +184,15 @@ To configure background services: 1. Under **Profile type**, select **Templates**. -1. Under **Template name**, select **Custom**, and then select **Create**. +1. Under **Template name**, select **Custom**. + +1. Select **Create**. -1. On the **Basics** tab, **Name** the profile. For example, `BackgroundServices-prod-macOS-Default-MDE`. +1. On the **Basics** tab, **Name** the profile. For example, `FullDiskAccess-prod-macOS-Default-MDE`. 1. Select **Next**. -1. On the **Configuration settings** tab, enter a **Custom configuration profile** name. For example, `background_services.mobileconfig`. +1. On the **Configuration settings** tab, enter a **Custom configuration profile** name. For example, `Fulldisk.mobileconfig`. 1. Choose a **Deployment channel**. @@ -192,7 +200,7 @@ To configure background services: 1. Select a **Configuration profile file**. -1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or **All Users** and **All devices**. +1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or All Users and All devices. 1. Review the configuration profile. Select **Create**. @@ -202,10 +210,9 @@ This profile is used to allow Microsoft Defender for Endpoint on macOS and Micro Download [notif.mobileconfig](https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/macos/mobileconfig/profiles/notif.mobileconfig) from [GitHub repository](https://github.com/microsoft/mdatp-xplat/tree/master/macos/mobileconfig/profiles). -To turn off notifications for the end users, you can change **Show NotificationCenter** from `true` to `false` in -[notif.mobileconfig](https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/macos/mobileconfig/profiles/notif.mobileconfig). +To turn off notifications for the end users, you can change **Show NotificationCenter** from `true` to `false` in [notif.mobileconfig](https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/macos/mobileconfig/profiles/notif.mobileconfig). -:::image type="content" source="media/image.png" alt-text="Screenshot showing notif.mobileconfig with ShowNotificationCenter set to True."::: +:::image type="content" source="../defender-endpoint/media/image.png" alt-text="Screenshot showing notif.mobileconfig with ShowNotificationCenter set to True." lightbox="../defender-endpoint/media//image.png"::: To configure notifications: @@ -219,17 +226,19 @@ To configure notifications: 1. Select **Create**. -1. On the **Basics** tab, **Name** the profile. For example, `BackgroundServices-prod-macOS-Default-MDE`. +1. On the **Basics** tab, **Name** the profile. For example, `FullDiskAccess-prod-macOS-Default-MDE`. 1. Select **Next**. -1. On the **Configuration settings** tab, enter a **Custom configuration profile** name. For example, `Notif.mobileconfig`. +1. On the **Configuration settings** tab, enter a **Custom configuration profile** name. For example, `Notification.mobileconfig`. -1. Choose a **Deployment channel** and then select **Next**. +1. Choose a **Deployment channel**. + +1. Select **Next**. 1. Select a **Configuration profile file**. -1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or **All Users** and **All devices**. +1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or All Users and All devices. 1. Review the configuration profile. Select **Create**. @@ -261,16 +270,16 @@ Download [accessibility.mobileconfig](https://github.com/microsoft/mdatp-xplat/b 1. Select a **Configuration profile file**. -1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or **All Users** and **All devices**. +1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or All Users and All devices. 1. Review the configuration profile. Select **Create**. ### Step 7: Bluetooth permissions - > [!CAUTION] - > macOS 14 (Sonoma) contains new privacy enhancements. Beginning with this version, by default, applications cannot access Bluetooth without explicit consent. Microsoft Defender for Endpoint uses it if you configure Bluetooth policies for Device Control. +> [!CAUTION] +> macOS 14 (Sonoma) contains new privacy enhancements. Beginning with this version, by default, applications cannot access Bluetooth without explicit consent. Microsoft Defender for Endpoint uses it if you configure Bluetooth policies for Device Control. -Download [bluetooth.mobileconfig](https://github.com/microsoft/mdatp-xplat/blob/master/macos/mobileconfig/profiles/bluetooth.mobileconfig) from [GitHub repository](https://github.com/microsoft/mdatp-xplat/tree/master/macos/mobileconfig/profiles) and use the same workflow as for the Accessibility settings above to enable Bluetooth access. +Download [bluetooth.mobileconfig](https://github.com/microsoft/mdatp-xplat/blob/master/macos/mobileconfig/profiles/bluetooth.mobileconfig) from [GitHub repository](https://github.com/microsoft/mdatp-xplat/tree/master/macos/mobileconfig/profiles) and use the same workflow as in [Step 6: Accessibility settings](#step-6-accessibility-settings) to enable Bluetooth access. > [!NOTE] > Bluetooth granted through Apple MDM Configuration Profile is not reflected in System Settings => Privacy & Security => Bluetooth. @@ -285,7 +294,7 @@ This profile is used to update the Microsoft Defender for Endpoint on macOS via For more information, see [Deploy updates for Microsoft Defender for Endpoint on macOS](mac-updates.md). -Download [AutoUpdate2.mobileconfig](https://github.com/microsoft/mdatp-xplat/blob/master/macos/settings/microsoft_auto_update/com.microsoft.autoupdate2.mobileconfig) from [GitHub repository](https://github.com/microsoft/mdatp-xplat/tree/master/macos/settings/microsoft_auto_update). +Download [AutoUpdate2.mobileconfig](https://github.com/microsoft/mdatp-xplat/blob/master/macos/settings/microsoft_auto_update/com.microsoft.autoupdate2.mobileconfig) from [GitHub repository](https://github.com/microsoft/mdatp-xplat/tree/master/macos/mobileconfig/profiles). > [!NOTE] > The sample AutoUpdate2.mobileconfig from the GitHub repository has it set to Current Channel (Production). @@ -300,9 +309,11 @@ Download [AutoUpdate2.mobileconfig](https://github.com/microsoft/mdatp-xplat/blo 1. Select **Create**. -1. On the **Basics** tab, **Name** the profile. For example, `MDATP onboarding for MacOS`and then select **Next**. +1. On the **Basics** tab, **Name** the profile. For example, `Autoupdate-prod-macOS-Default-MDE`. + +1. Select **Next**. -1. On the **Configuration settings** tab, enter a **Custom configuration profile** name. For example, `com.microsoft.autoupdate2.mobileconfig`. +1. On the **Configuration settings** tab, enter a **Custom configuration profile** name. For example, `Autoupdate.mobileconfig`. 1. Choose a **Deployment channel**. @@ -310,7 +321,7 @@ Download [AutoUpdate2.mobileconfig](https://github.com/microsoft/mdatp-xplat/blo 1. Select a **Configuration profile file**. -1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or **All Users** and **All devices**. +1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or All Users and All devices. 1. Review the configuration profile. Select **Create**. @@ -318,6 +329,11 @@ Download [AutoUpdate2.mobileconfig](https://github.com/microsoft/mdatp-xplat/blo In this step, we go over the "Preferences," which enables you to configure anti-malware and EDR policies using Microsoft Defender portal and Microsoft Intune. +> [!NOTE] +> Apple only supports 1 bundle ID, in this case 'settings preferences' profile; thus, you can either set the policies from the Microsoft Defender for Endpoint Security Settings management or via Intune or via JamF or via another third-party MDM product. + +You can configure anti-malware and EDR policies through the following method: + #### Set policies using Microsoft Defender portal Go through [Configure Microsoft Defender for Endpoint in Intune](/mem/intune/protect/advanced-threat-protection-configure) before setting the security policies using Microsoft Defender. @@ -334,13 +350,14 @@ In the [Microsoft Defender portal](https://sip.security.microsoft.com/homepage?t 1. Select **Next**. -1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or **All Users** and **All devices**. +1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or All Users and All devices. For more information about managing security settings, see: - [Manage Microsoft Defender for Endpoint on devices with Microsoft Intune](/mem/intune/protect/mde-security-integration?pivots=mdssc-ga) - [Manage security settings for Windows, macOS, and Linux natively in Defender for Endpoint](https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/manage-security-settings-for-windows-macos-and-linux-natively-in/ba-p/3870617) +or by the following method: #### Set policies using Microsoft Intune @@ -358,23 +375,22 @@ In the [Microsoft Defender portal](https://sip.security.microsoft.com/homepage?t 1. Under **Select Template**, select **Microsoft Defender Antivirus** and select **Create Policy**. - :::image type="content" alt-text="networkprotection" source="media/network-protection1.jpg" lightbox="media/network-protection1.jpg"::: + :::image type="content" source="../defender-endpoint/media/network-protection1.png" alt-text="Screenshot that shows the page on which you create a policy." lightbox="../defender-endpoint/media/network-protection1.png"::: 1. On the **Basics** tab, enter the **Name** and **Description** of the policy. Select **Next**. - :::image type="content" source="media/networkprotection2.png" alt-text="Basicstab"::: + :::image type="content" source="../defender-endpoint/media/networkprotection2.png" alt-text="Screenshot that shows the Basics tab." lightbox="../defender-endpoint/media/networkprotection2.png"::: 1. On the **Configuration Settings** tab, under Network Protection, select an **Enforcement level**. Select **Next**. - :::image type="content" source="media/networkprotection3.png" alt-text="configurationsettings"::: - -1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or **All Users** and **All devices**. + :::image type="content" source="../defender-endpoint/media/networkprotection3.png" alt-text="Screenshot that shows the Create a new policy page." lightbox="../defender-endpoint/media/networkprotection3.png"::: + +1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or All Users and All devices. - :::image type="content" source="media/networkprotection4.png" alt-text="np4"::: + :::image type="content" source="../defender-endpoint/media/networkprotection4.png" alt-text="Screenshot that shows the page on which you configure the settings for the Assignments option." lightbox="../defender-endpoint/media/networkprotection4.png"::: 1. Review the policy in **Review+Create** and select **Save**. - > [!TIP] > You can also configure network protection by appending the information from [**Network protection to help prevent macOS connections to bad sites**](network-protection-macos.md) to the .mobileconig from step 8. @@ -397,7 +413,7 @@ After completing the profile configuration, you'll be able to review the status Once the Intune changes are propagated to the enrolled devices, you can see them listed under **Monitor** \> **Device status**: -:::image type="content" source="media/mdatp-7-devicestatusblade.png" alt-text="The view of the device status" lightbox="media/mdatp-7-devicestatusblade.png"::: +:::image type="content" source="../defender-endpoint/media/mdatp-7-devicestatusblade.png" alt-text="Screenshot that shows the view of the device status" lightbox="../defender-endpoint/media/mdatp-7-devicestatusblade.png"::: #### Client device setup @@ -405,11 +421,11 @@ A standard [Company Portal installation](/intune-user-help/enroll-your-device-in 1. Confirm device management. - :::image type="content" source="media/mdatp-3-confirmdevicemgmt.png" alt-text="The Confirm device management page" lightbox="media/mdatp-3-confirmdevicemgmt.png"::: + :::image type="content" source="../defender-endpoint/media/mdatp-3-confirmdevicemgmt.png" alt-text="Screenshot that shows the Confirm device management page." lightbox="../defender-endpoint/media/mdatp-3-confirmdevicemgmt.png"::: Select **Open System Preferences**, locate **Management Profile** on the list, and select **Approve...**. Your Management Profile would be displayed as **Verified**: - :::image type="content" source="media/mdatp-4-managementprofile.png" alt-text="The Management profile page" lightbox="media/mdatp-4-managementprofile.png"::: + :::image type="content" source="../defender-endpoint/media/mdatp-4-managementprofile.png" alt-text="Screenshot that shows the Management profile page." lightbox="../defender-endpoint/media/mdatp-4-managementprofile.png"::: 2. Select **Continue** and complete the enrollment. @@ -417,23 +433,23 @@ A standard [Company Portal installation](/intune-user-help/enroll-your-device-in 3. In Intune, open **Manage** \> **Devices** \> **All devices**. Here you can see your device among the listed: - :::image type="content" source="media/mdatp-5-alldevices.png" alt-text="The All Devices page" lightbox="media/mdatp-5-alldevices.png"::: + :::image type="content" source="../defender-endpoint/media/mdatp-5-alldevices.png" alt-text="Screenshot that shows the All Devices page." lightbox="../defender-endpoint/media/mdatp-5-alldevices.png"::: #### Verify client device state 1. After the configuration profiles are deployed to your devices, open **System Preferences** > **Profiles** on your Mac device. - :::image type="content" source="media/mdatp-13-systempreferences.png" alt-text="The System preferences page"::: + :::image type="content" source="../defender-endpoint/media/mdatp-13-systempreferences.png" alt-text="Screenshot that shows the System preferences page." lightbox="../defender-endpoint/media/mdatp-13-systempreferences.png"::: - :::image type="content" source="media/mdatp-14-systempreferencesprofiles.png" alt-text="The System Preferences Profiles page" lightbox="media/mdatp-14-systempreferencesprofiles.png"::: + :::image type="content" source="../defender-endpoint/media/mdatp-14-systempreferencesprofiles.png" alt-text="Screenshot that shows the System Preferences Profiles page" lightbox="../defender-endpoint/media/mdatp-14-systempreferencesprofiles.png"::: 2. Verify that the following configuration profiles are present and installed. The **Management Profile** should be the Intune system profile. _Wdav-config_ and _wdav-kext_ are system configuration profiles that were added in Intune: - :::image type="content" source="media/mdatp-15-managementprofileconfig.png" alt-text="The Profiles page" lightbox="media/mdatp-15-managementprofileconfig.png"::: + :::image type="content" source="../defender-endpoint/media/mdatp-15-managementprofileconfig.png" alt-text="Screenshot that shows the Profiles page" lightbox="../defender-endpoint/media/mdatp-15-managementprofileconfig.png"::: 3. You should also see the Microsoft Defender for Endpoint icon in the top-right corner. - :::image type="content" source="media/mdatp-icon-bar.png" alt-text="The icon for Microsoft Defender for Endpoint in the status bar"::: + :::image type="content" source="../defender-endpoint/media/mdatp-icon-bar.png" alt-text="Screenshot that shows the icon for Microsoft Defender for Endpoint in the status bar." lightbox="../defender-endpoint/media/mdatp-icon-bar.png"::: ### Step 14: Publish application @@ -441,33 +457,33 @@ This step enables deploying Microsoft Defender for Endpoint to enrolled machines 1. In the [Microsoft Intune admin center](https://go.microsoft.com/fwlink/?linkid=2109431), open **Apps**. - :::image type="content" source="media/mdatp-8-app-before.png" alt-text="The application's overview page" lightbox="media/mdatp-8-app-before.png"::: + :::image type="content" source="../defender-endpoint/media/mdatp-8-app-before.png" alt-text="Screenshot that shows the application's overview page." lightbox="../defender-endpoint/media/mdatp-8-app-before.png"::: 1. Select **By platform** > **macOS** > **Add**. 1. Under **App type**, select **macOS**. Select **Select**. - :::image type="content" source="media/mdatp-9-app-type.png" alt-text="The specific application type" lightbox="media/mdatp-9-app-type.png"::: + :::image type="content" source="../defender-endpoint/media/mdatp-9-app-type.png" alt-text="Screenshot that shows the specific application type." lightbox="../defender-endpoint/media/mdatp-9-app-type.png"::: 1. On the **App information**, keep the default values and select **Next**. - :::image type="content" source="media/mdatp-10-properties.png" alt-text="The application properties page" lightbox="media/mdatp-10-properties.png"::: + :::image type="content" source="../defender-endpoint/media/mdatp-10-properties.png" alt-text="Screenshot that shows the application properties page." lightbox="../defender-endpoint/media/mdatp-10-properties.png"::: 1. On the **Assignments** tab, select **Next**. - :::image type="content" source="media/mdatp-11-assignments.png" alt-text="The Intune assignments information page" lightbox="media/mdatp-11-assignments.png"::: + :::image type="content" source="../defender-endpoint/media/mdatp-11-assignments.png" alt-text="Screenshot that shows the Intune assignments information page." lightbox="../defender-endpoint/media/mdatp-11-assignments.png"::: 1. Review and **Create**. You can visit **Apps** > **By platform** > **macOS** to see it on the list of all applications. - :::image type="content" source="media/mdatp-12-applications.png" alt-text="The application lists page" lightbox="media/mdatp-12-applications.png"::: + :::image type="content" source="../defender-endpoint/media/mdatp-12-applications.png" alt-text="Screenshot that shows the application lists page." lightbox="../defender-endpoint/media/mdatp-12-applications.png"::: For more information, see [Add Microsoft Defender for Endpoint to macOS devices using Microsoft Intune](/mem/intune/apps/apps-advanced-threat-protection-macos). > [!IMPORTANT] > You should create and deploy the configuration profiles in the above order (step 1-13) for a successful system configuration. -#### Step 15: Download the onboarding package +### Step 15: Download the onboarding package To download the onboarding packages from Microsoft 365 Defender portal: @@ -475,25 +491,25 @@ To download the onboarding packages from Microsoft 365 Defender portal: 2. Set the operating system to **macOS** and the deployment method to **Mobile Device Management / Microsoft Intune**. - :::image type="content" source="media/macos-install-with-intune.png" alt-text="The Onboarding settings page" lightbox="media/macos-install-with-intune.png"::: + :::image type="content" source="../defender-endpoint/media/macos-install-with-intune.png" alt-text="Screenshot that shows the Onboarding settings page." lightbox="../defender-endpoint/media/macos-install-with-intune.png"::: 3. Select **Download onboarding package**. Save it as _WindowsDefenderATPOnboardingPackage.zip_ to the same directory. 4. Extract the contents of the .zip file: - ```bash - unzip WindowsDefenderATPOnboardingPackage.zip - ``` + ```bash + unzip WindowsDefenderATPOnboardingPackage.zip + ``` - ```console - Archive: WindowsDefenderATPOnboardingPackage.zip - warning: WindowsDefenderATPOnboardingPackage.zip appears to use backslashes as path separators + ```console + Archive: WindowsDefenderATPOnboardingPackage.zip + warning: WindowsDefenderATPOnboardingPackage.zip appears to use backslashes as path separators inflating: intune/kext.xml inflating: intune/WindowsDefenderATPOnboarding.xml inflating: jamf/WindowsDefenderATPOnboarding.plist - ``` + ``` - :::image type="content" alt-text="Sample description" source="media/deploy-onboarding-package.png" lightbox="media/deploy-onboarding-package.png"::: + :::image type="content" source="../defender-endpoint/media/deploy-onboarding-package.png" alt-text="Screenshot that shows the sample description." lightbox="../defender-endpoint/media/deploy-onboarding-package.png"::: ### Step 16: Deploy the onboarding package @@ -511,11 +527,11 @@ To deploy the onboarding package: 1. Select **Create**. - :::image type="content" alt-text="Deploy onboarding package" source="media/mdatp-6-systemconfigurationprofiles-1.png" lightbox="media/mdatp-6-systemconfigurationprofiles-1.png"::: + :::image type="content" source="../defender-endpoint/media/mdatp-6-systemconfigurationprofiles-1.png" alt-text="Screenshot that shows the deploy onboarding package." lightbox="../defender-endpoint/media/mdatp-6-systemconfigurationprofiles-1.png"::: 1. On the **Basics** tab, **Name** the profile. For example, `Autoupdate-prod-macOS-Default-MDE`. Select **Next**. - :::image type="content" alt-text="click next" source="media/mdatp-6-systemconfigurationprofiles-2.png" lightbox="media/mdatp-6-systemconfigurationprofiles-2.png"::: + :::image type="content" source="../defender-endpoint/media/mdatp-6-systemconfigurationprofiles-2.png" alt-text="Screenshot that shows the Custom page." lightbox="../defender-endpoint/media/mdatp-6-systemconfigurationprofiles-2.png"::: 1. On the **Configuration settings** tab, enter a **Custom configuration profile** name. For example, `Autoupdate.mobileconfig`. @@ -525,21 +541,21 @@ To deploy the onboarding package: 1. Select a **Configuration profile file**. - :::image type="content" alt-text="configuration profile" source="media/mdatp-6-systemconfigurationprofiles.png" lightbox="media/mdatp-6-systemconfigurationprofiles.png"::: + :::image type="content" source="../defender-endpoint/media/mdatp-6-systemconfigurationprofiles.png" alt-text="Screenshot that shows the configuration settings." lightbox="../defender-endpoint/media/mdatp-6-systemconfigurationprofiles.png"::: -1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or **All Users** and **All devices**. +1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or All Users and All devices. - :::image type="content" alt-text="assign users" source="media/mdatp-6-systemconfigurationprofiles-3.png" lightbox="media/mdatp-6-systemconfigurationprofiles-3.png"::: + :::image type="content" source="../defender-endpoint/media/mdatp-6-systemconfigurationprofiles-3.png" alt-text="Screenshot that shows the Assignments tab." lightbox="../defender-endpoint/media/mdatp-6-systemconfigurationprofiles-3.png"::: 1. Review the configuration profile. Select **Create**. 1. Open **Devices** > **Configuration profiles** to see the created profile. -## Step 17: Verify anti-malware detection +### Step 17: Verify anti-malware detection See the following article to test for an anti-malware detection review: [Antivirus detection test for verifying device's onboarding and reporting services](validate-antimalware.md) -## Step 18: Verifying EDR detection +### Step 18: Verifying EDR detection See the following article to test for an EDR detection review: [EDR detection test for verifying device onboarding and reporting services](edr-detection.md) @@ -590,8 +606,4 @@ Learn about adding Microsoft Defender for Endpoint to macOS devices using Micros
Describes how to configure Microsoft Defender for Endpoint on Android. [Manage Defender for Endpoint on Android devices in Intune - Azure](/mem/intune/protect/advanced-threat-protection-manage-android?source=recommendations) -
Configure Microsoft Defender for Endpoint web protection on Android devices managed by Microsoft Intune. - - -[!INCLUDE [Microsoft Defender for Endpoint Tech Community](../includes/defender-mde-techcommunity.md)] - +
Configure Microsoft Defender for Endpoint web protection on Android devices managed by Microsoft Intune. \ No newline at end of file From de853e4046d08674c4aa33191b3e227eb7bcd825 Mon Sep 17 00:00:00 2001 From: Siddarth Mandalika Date: Mon, 13 May 2024 18:03:09 +0530 Subject: [PATCH 02/14] Update evaluate-mda-using-mde-security-settings-management.md --- ...-using-mde-security-settings-management.md | 34 +++++++------------ 1 file changed, 12 insertions(+), 22 deletions(-) diff --git a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md index 3ca40fe2f6..645bf21c30 100644 --- a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md +++ b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md @@ -14,7 +14,7 @@ ms.collection: ms.topic: conceptual ms.subservice: edr search.appverid: met150 -ms.date: 05/08/2024 +ms.date: 04/11/2024 --- # Evaluate Microsoft Defender Antivirus using Microsoft Defender Endpoint Security Settings Management (Endpoint security policies) @@ -39,14 +39,15 @@ To configure the options that you must use to test the protection features, perf 1. Go to **Endpoints > Configuration management > Endpoint security policies > Windows policies > Create new policy**. 1. Select **Windows 10, Windows 11, and Windows Server** from the **Select Platform** drop-down list. 1. Select **Microsoft Defender Antivirus** from the **Select Template** drop-down list. -1. Select **Create policy**. -1. On the **Basics** page, enter a name and description for the profile; then, choose **Next**. -1. On the **Settings** page, expand the groups of settings and configure those settings you want to manage with this profile. The groups of settings you can expand and the edits you can make in these settings are mentioned in the following tables: +1. Select **Create policy**. The **Create a new policy** page appears. +1. On the **Basics** page, enter a name and description for the profile in the **Name** and **Description** fields, respectively. +1. Select **Next**. +1. On the **Settings** page, expand the groups of settings. +1. From these groups of settings, select those settings that you want to manage with this profile. +1. Set the policies for the chosen groups of settings by configuring the settings as described in the following tables: **Real-time Protection (Always-on protection, real-time scanning)** -To configure the Real-time protection service, set the policies as described in the following table: - |Description |Settings | |---------|---------| |Allow Realtime Monitoring|Allowed| @@ -57,10 +58,6 @@ To configure the Real-time protection service, set the policies as described in **Cloud protection features** -Standard security intelligence updates can take hours to prepare and deliver; our cloud-delivered protection service can deliver this protection in seconds. - -To configure the cloud-delivered protection service, set the policies as described in the following table: - |Description|Setting | |---------|---------| |Allow Cloud Protection | Allowed | @@ -68,12 +65,10 @@ To configure the cloud-delivered protection service, set the policies as describ |Cloud Extended Timeout |Configured, 50 | |Submit Samples Consent | Send all samples automatically | -For more information, see [Use next-gen technologies in Microsoft Defender Antivirus through cloud-delivered protection](cloud-protection-microsoft-defender-antivirus.md). +Standard security intelligence updates can take hours to prepare and deliver; our cloud-delivered protection service can deliver this protection in seconds. For more information, see [Use next-gen technologies in Microsoft Defender Antivirus through cloud-delivered protection](cloud-protection-microsoft-defender-antivirus.md). **Scans** -To configure the "scans" feature, set the policies as described in the following table: - |Description|Setting| |---------|---------| |Allow Email Scanning | Allowed | @@ -85,8 +80,6 @@ To configure the "scans" feature, set the policies as described in the following **Network Protection** -To configure the "network protection" feature, set the policies as described in the following table: - |Description |Setting | |---------|---------| |Enable Network Protection | Enabled (block mode) | @@ -100,8 +93,6 @@ To configure the "network protection" feature, set the policies as described in **Security Intelligence updates** -To configure the security intelligence updates feature, set the policies as described in the following table: - |Description |Setting | |---------|---------| |Signature Update Interval | Configured, 4 | @@ -121,8 +112,6 @@ Disable local administrator AV settings such as exclusions, and set the policies **Threat severity default action** -To configure the Threat severity default action settings, set the policies as described in the following tables: - |Description |Setting | |---------|---------| |Remediation action for High severity threats | Quarantine | @@ -179,9 +168,10 @@ To enable Attack Surface Reduction (ASR) rules using the endpoint security polic > [!TIP] > Any of the rules may block behavior you find acceptable in your organization. In these cases, add the per-rule exclusions named “Attack Surface Reduction Only Exclusions”. And, change the rule from **Enabled** to **Audit** to prevent unwanted blocks. -9. Select **Next**. -10. On the **Assignments** tab, select **Device Group** or **User Group** or **All devices** or **All Users**, and then choose **Next**.Platform Update” version Production channel (GA) is available here -11. On the **Review + create** tab, review your policy settings, and then select **Save**. +1. Select **Next**. +1. On the **Assignments** tab, select **Device Group** or **User Group** or **All devices** or **All Users**. +1. Select **Next**. +1. On the **Review + create** tab, review your policy settings, and then select **Save**. #### Check the platform update version From b0bcfb2aa982424590a7f2e8fa03d2519b26153d Mon Sep 17 00:00:00 2001 From: Siddarth Mandalika Date: Mon, 13 May 2024 18:29:21 +0530 Subject: [PATCH 03/14] resolved warnings --- ...a-using-mde-security-settings-management.md | 4 ++-- .../media/network-protection1.png | Bin 0 -> 188620 bytes ...-antivirus-using-mde-security-set-mngmnt.md | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) create mode 100644 defender-endpoint/media/network-protection1.png diff --git a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md index 645bf21c30..cc76265e67 100644 --- a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md +++ b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md @@ -1,7 +1,7 @@ --- title: Evaluate Microsoft Defender Antivirus using Microsoft Defender Endpoint Security Settings Management (Endpoint security policies) ms.reviewer: yonghree -description: Evaluate Microsoft Defender Antivirus using Microsoft Defender Endpoint Security Settings Management (Endpoint security policies). +description: Learn how to evaluate Microsoft Defender Antivirus using Microsoft Defender Endpoint Security Settings Management (Endpoint security policies). ms.service: defender-endpoint ms.author: vpattnaik author: vpattnai @@ -204,4 +204,4 @@ If you're finding that your settings aren't taking effect, you might have a conf To information on how to make False Negatives (FNs) submissions, see: - [Submit files in Microsoft Defender for Endpoint](admin-submissions-mde.md) if you have Microsoft XDR, Microsoft Defender for Endpoint P2/P1, or Microsoft Defender for Business. -- [Submit files for analysis](../defender/submission-guide.md) if you have Microsoft Defender Antivirus. \ No newline at end of file +- [Submit files for analysis](/defender-xdr/submission-guide.md) if you have Microsoft Defender Antivirus. \ No newline at end of file diff --git a/defender-endpoint/media/network-protection1.png b/defender-endpoint/media/network-protection1.png new file mode 100644 index 0000000000000000000000000000000000000000..ce82325116d0f1c49410813b8b0ae1929236f6b8 GIT binary patch literal 188620 zcmafb1yq#H`!>D?qNIpQ%L0NTjdZh!sDOx+luEaBg9^e50@4lA($Wng-Q6YK-L?D8 z1H6I${^#=`$K7Xk=9+u1JLg_MJ(Co}x5poLJ~q~Xqnzu4_{vduQA>}QZz$DBXxuRp7Wks(?ml<#f!s* zURbLx9$mGUoeJ4O?Fh7Pd zMJo*dAG5@eh$0^SF<4aEKlU=--TyJ(^g0FX&&frlycS1pWm zWpru{Dqk9O+ORtEco*~S1O30-;!aBya%pu)KL{#6)Ff4hKJo1H#Evr3HCi`7_H^{&hZ$z|BR8OUEo7R9VlCoK7q!xJ)l|kNGA{ z_n$?hCArsJ@TE8-6N4e9sdygJ2_or#G$XFd?*1#=7c^a;Xh={WTQ_dYfKgxRe4Vb= zm0wmyJ^V_W-1eVUy%-kQtDG3_wo_byR#o|QsPrxj?{4xcIPQid{&OUh$|^z7xqoX( z1FNde=X6ST{yX-^zS#Q(wJSiHFPOhePQ3_iMZ4JAZE-B>`Jt?utLBH$w1T}N;MhN^ zVW!G(1x&LFR+w3+9G^CK{$;##XlU;kynwK-l;2WFG`-iX{qDoee9SAfkJRZ(c<-B(X)EyAqkQaLmf?LQ%wJ@Z8+Q1rkv85AFaNUHW}Iq9 zsI$*bZ!wNh8zp$M#_M&)zaSW^Z(fzQEetV6Y;IGlH53^g?cYq@3TOSQRN2b!VK(bxolk4<98}8;CFR@fl6c_2 zi&gXxNHX*7|CakWv4U}*)ZW_Rsl{;!}(Vl@DxGUCr1p#>jVkv&>M8wCqr+RpUMA%C^;~1i;Z0DUN~n zUFzxOUue2iT|xgKQtN>L&o?te@chLZ$}!omhY~Q?Tn&i>`HS{)uRUG+RdM@^3toP zfMq$Bx>Fga>hkpYn$sPA+LXU3<_qI(b~PBuV3qMQFn-Iia0L*h>gPYyy*G)w7Wcl} z^7(GL7IGZrb+9wR7&+|l!=*KXV|jO75%sn|6y>lrVd*R-Kl053a2T!b0steLesvl( zTb+-bi4}BHE3pz%jj00b>yvE`y(w6@vvU5C-Ee`-%mB7gVNK`aBmvJ52YXqzdSQx0 zFR+-mZ~Vguxe8ZA6e&yZV|3JfsJ7&84`#%?$@-qGrT?x|ZQk4qX!|}8UE-35R-0BH z&|Nn^+VN;LD4ZD~&+QFVE3;muk6^$?npSf5W^u{epI>kYG~iILinU{xwH?Um?UN|> zv|n|09wct$HH>Qr-?>lLZxcI8e53ep`QJmy%5~bVY$xXNS*su2-nkEH?7cSJwaJZ) z@1_+}YRDtTDA@#=^M{Ru+Q^AIS-FE&?DWng2w4nt;G42G2OcX*cw-0XPBsUJ9=uqR z+$L=w2BY>?G-CPkYr`mOc)mMU91`a*_LXYaI_sye@%U<}ylpPB%SY+8dZlrw*d-Z% z(2;$Ewl8mI$#1eUkVMh!UUC`ly+T0|L%>Q=jrI9uADTdGY&Zz4ATh6xZH-c`mv0|4P&10x=W~;oxwmifwavJ(@VC+ z<4S`!YdLQ<{;-X{Ndd#X3hYXW@i)F4i-Z)3x6MQIjvsRA)RIP#=n?J9&Jl)Qh5oXd zy-0)dgZ|-9P2HU=2kSQKnPam&V%{W=4qLgi-DY@Zm%0n8S9Bayqm&;(7TqQlLh0D# zD%CW+l@y9_4_;-4#JtV%u{t@Y1S`#eRbyK>QW>vurTcOmB$Pt|TOM zwhp&_Y_=l8ik`5&w$#-+*;M97`!&G1-ZbH>cv5@^L)*kxW|rqi%AeDSZpS+j>(C#3 zG{)=|-)o-;cNf1JlvX~r&9m~D%6L4T$GH5p!$j(92RofGbu7r-3HCy}do8=y8HDfi zs{&Q`Ys8zrX9;oOMAR!HL8!pEd1`6=r4YMo?WAeTT8^@o8w@Hxe$~t0Gak?#{=C}~ zi9TaFEcP5-e#6V^+DxsfMyvC}yuMyyOS#El3py#q_}7O0Tr0!Dy#}AyVvdkbO1VoE zF;jJs%{B$9jZrL=aIS#|8~TYo_X~6nGRSTN)-ou4ya7XYQePEdw(6xx~Qg^%QO3G9#)w1g0Q6OQY zq9Vb6C4Lo80BPMTF&CxVU;A0sV3Llo=YwI*Mb6z<@rmzct!~lS8K+Z>x0fohk6IXK zk@X={`0P}|NL_@4#%cDU}7pGcxaIA98dz#YFbEj(U zcH(YOs@3OQp@lzv5tS5X#iRPt+Pt@BGe7>}ab#zo+$IdC`-?Yzr+VMaRdQi1WA7?n zCBUu}*#279y*a4fi;VhQo9$Cx5jR&!4ZQWlSDDOmP;A>*o>M9+DNPdywA< zqTOQ?(u8Z$+L}kwA>eqpRzcruO_Zotjm@JoU^7uVN!KqQ{SmSBV7o#-NAqVzT5kF! zMM$2~{Ib>*<1LVps2*|Nn!${)tWgB$6H~<}4R&%Q+cBzLprih}03zdWKVEKH!!VjC z;Pwk^)PSWgfP)AK+vZ$(-Degyx^&-xec7Dtz#64BT43^N4@qS*`H6aM_?pRmf>Vej z6yv0o94nmyjrluX1j{v+xl0`n$;-3V(+Hhy)(OmxUiWv4vi6ST8n(WtoQ{?DCgUoY z`6RKy`1k><-*-N%9H~rXK7oFNk2c2ueXd3>&hp!g?Fh<)DBD*{pRW#il3E-)2J7n5 zU(uyJWCoZ;V%bL~UwO9kP-=`t?>KEY>*#pMlsP(&oPKahhLY1gW6Ks%qbQ8cX2HN4 zF1DK0MoLMpSj_oKNG)=iQ(2TOp^97a!_rH;w(f|s@@!7w(_)8aPFEyu6E7I8;P8+u zn|ZdAFRssNIk>9X^|o}CIlSGh8!-&K5mz{CdeQ2!ai$uM&1PL>8nOOGRx_EF~$!)#Dhm^Rf=DKW?tPaIEDl+p3-^|KFz&IRYc%+Se z_}sUeL3|;l!Otua*ZTXX^Oedx_Y-nz;=ux& z%k^9Fc+A(Bf=t~I=_tc$6OWOLV<`k;jutX7a#Q(?LY&2&!+Y6#WYu3U?i7vQnKjjz zX_oQSN&6vE<(H5^CQqko^U9^T;$maIYj|Aj!3qaC)0fwXKJEGD@++#poSk`iak$=E zWjA>8@H#a<;w+l+dWTM>+*PtA_~TrCu3uz=z-1J!Nt-+UYi*6u^Bcnv&800SR-8rI z1b#9vc&Qa!`_rbj`VYsZW_@A+u;$GitZsv1{yV?lOO6%aae^J1?Er3C+ znkXAy{Zv?tOxRaF;u3KZn6_0s1R-%ck|Y~xR+jQkt{_@S_Hn|x3WUsxl%{!B2uVu5@nM#11onLFd>F8^GCH%E9ls}A|7y*RK8VM(L}NWa zK{l|+VJpYoY=~LS+n7eKZ+V+IupWC;YEcNa-gu{3u_wbb!(>Z=`RitYsjn(Re6p|w*Y@Zr!}r-KY}jIc%(?XwRPUl z6MxG6{1k59NDgmi+P27UfWCTtQ&#ILT`D`VZLr? z@mK1}YgDN4;S2MdDesMc!cMdAY^z=SlJdv`9@#^wk3<;by8$oAR?oQ@-t< zLTSYcIv#eV#vXQK+n;s`ND_y5cs86-JS9uCy8ms-#;i@f7B-ts_Zh~t5KmUvnZ ztF%)e`^;cu0Qaqw0Vee?`f7>k`P*CDHPYM|ATk$q0cC@~QZA2vn%y7WYbItS$*l@u zzf{7#7MB^e9a^bZfdh->&i(tWM{wJH5Y{M0+zHfD8-jTOx7}tTV043QkQ}dYLkNYt zHUZBu)7U9(q#IN-=g_H<;Bkz+j7LY#gklV!lwvC$6|?TR*x1}uZ=xR>vOw}w>lMYZ z8@4DGFi={yQ6K$E;N`#8)~dx#6s*lSnJ3KJVaA*LKu?ndmKRExW}+xI9L8NLwqsx# z6_eH0*H=Q_zEb$tG>U5zy;UNH#`6K?2%l9P(sJxFUiEwWma@su7%Cic+y~LDFN`u& zWmYW87W=#FNsX^RRuAuJCrI% z1s5-@+&L6<@>*oA4AZOtIV<}SmlO!8ird!g+mw2`ypIyp;Jr?+1V_V#TJA^775*Cw zX`ES0dQl-pdl$z&=HS=cJu$KWcB~@Q^D{)DM<;e!&*I$K23{&_pZehHg zY;u{My8}2p&FpaV5|LgS=JmT`h~3Pcy)R2s1r*3%f%?2y*QTtm&qqf|NJzFa0YXbT zw$?xO*AF6D!C>gaW&V{FT03qPJO7Esn?-m?z#wcTn3xO}I9&2%rapH#^XCH&X|0?> z9t*N?ikQ)lZ%JB^=wk6&T!9W#=Zw95iSX>zv_jiTOI?Y@H++_^F3z>!`k*A-=YPt+ zqZq$=fSGCZkhjb}P}2REi${XelL$5)cgcoCvQZND*lK&Mu_eQ+wMEMp7X=0zR*j5F zl4Qc~ZHmXH(9F3om3jKrkGc{%a%mJYn2IT@m`v8PyJVCn7j5p~z_-a*0$Og?ZA_D#|qfXem)_mZfY$ zcPU#JWI0H(8hYyVwziq|Cvql$Xrm(1j^iS~VpmglIELJqD*~ArVq+VD?t72*uKAYR zDy~WFa51m(>!)($6a0@R%nLsVmQ%GV6smW&bAK*WnGp(cc!fGDYkjeb@-GyDqtJX~ zir@sV5VZU}1(Ns`SJS)1qmfB(%DRy#FT+l8(wJI~+MWz?(N9+CR=k(ZJM{ET^#vbU zw|vI>v^N?tfw5;B-kERT6#z0D<(`f#r0bw@`9?bYNoLLGM-TRj<0}{k=sFK>4`--s z1}O(jNY?thUs_;N;(e!z~3E#w7YI=2tcIxp9L0gU%%$xKe#6L=ZP@g}2>b9?9Q>l2_D3SX)}F45 zro+5Jfi@EnFLV$EKNcTJ$8m@CH+%6H-^p!xanW!9^QH**(^o8d+wW<;4u>2Q6DBlV zFN|E5-Gs=Lq`ifl%n?g{_G}&~aJhZpXeBp364We^bB*Q3xrYbLy$fAl7M6QCJ>*od zyeg&hOShy~MxHDLiava6Ww|FypRZtidvl5ywtvUTdFx?SPdzuqi%{H5dy3;Ey#3F8 z3&U%(ANu8E5P73LAjc0?LEK{IHIs9pYQoeS;+deW9e%IXcr{Sq^-!4B!LM0lB73vd z!%x%5VC`0!>GSjgBkE-f>CZ%}^1A#)o9zx*aPUaQU+W-dXCF!Lx*^Vq-OQOoklx{h zvpFwa{yfaevBX7uy*mJkGqx|RB}X~DSxzr6nhpWAqyvy0X8rXORM^aa=4*v_9E>wY z?HMO-?e;PTs91OWm@g+cD}5k8A9Zhf;U2fBx4S3@&GS4vqwgzpO`vKxv#wbmL_cCN zgSDVUw2&ZCZ2H0mg>-0<?X13X*k~r=1 zT422TLDA^bUKWGI2BY7pZ$4kA1>o1Ax`U>Nk2eAbL`=AH*&k8tMn83Vo5(H zuPF|mv+BE*Tk>@C`CJoluU$*n$WsTJ57)k7m3U z-|jm(7Of}vF7p3vhp3ntR1H;Rc`cH}t@@za% zphtWJ<@^eYn7vC?-aDh^Cbc~KGu~Filh%Z224U96mBE z&t9`**EH2u#ike!eNl_to%NElE6Q#nHj9vF`kCMiU7F-vp@L(I<4UL@^;%_YRm>l+ ztUKL3N|wBLD~Sg$#oXON`}JVAgZblclM_-7AGqzNLR=6tPnDvA9a^!>T6)DRj&D1P z7@%59s;B^JLamCNycGr?(xTtr_<0o%DhYHUDOX6ia_k11Yt%=Fx)YJpG}|QHrck=e z&RFn+uQ#1vrkB4!9YyX%#`Rr$!7A|*cKZ#x)1vu3D!4gs=XykJ{q?0;FM<}W{*MS6 z35n9z(sD(1GV5t}uL-8o88-~Q$jjG%a7sDD30FYOpx$oHo#GUbdvq^%pzD2V-)jQ{ zlykr|EUBnwD0s_2p*ZU@-p+7Xb;eHw#hZ+zon_{Y4p2zu!fCLVk6~5&{CtcsF7^q@ ze#jAK_hx_yV%AzkQ}CK{-nQaK94F77mDRk4iMh7YrG6TadFm1fBX*~<8~C{lJpyh= zb}YamURvLwS5#B$M;RQ|&n>>Lw}Pcd$t8433Y0n>VSUoI8hM5?j4D0{WwPo|N+SlS zSKuX@J}GOxi8)9nW-$$1SmcO$Tte{9&=BYL0yi_-zx74_ts}Maoo&07(%#7Pd42*7 z-h|yzeja(K-Gwmah1T!j>VrJDo*B8j=CkDK$n_?Qdb%05G~sXc*&<&z14NPBa#lL} z4^d%GYkyZ~ehS0oZ)1{-u0 z53rbJgjcjmC`Ap-hVg_lclbmNX5^Z=_>iMs53YMW_fY6gY3CIXvvTa+<6-u|WnS-8 zYko`)JC5;5IF$EMdX|$3;96!1C9ty@T4YkYOdnY(ZbliK{e+~y>?g{Ji74mS`=eHF zqgqhSF*od*`BFPv&}s8hIijS$AZTqO)@~(jtr_p&siB=-t6VJwKJ2-_T%sFd31eIq zCB2Ig)5ddgrKHqwI7>7;K_Z2ur`*0PE+wH^F$)=3d@Y-o@%G}Hp+n6a-_FoTp2onp zb>z`OxS8ZA^2kkvU%MY`31gJr<9X6>u%>PC7|!4g*+3$AXHoO2TPnf`ANG^cR=OthUUsVHOtNFh)3MmiB>) z{&cTon$OET-Gh;B&E|O6M@0JP)d_EJvZ2DQn(1we9?6LE<@XWj&5!B`h^S2?thQGQ z(rm&>(N)W$}uHLCjtS z4O#Gt9^td;B%UIx#_8f^iJm~x;+;j5GwU6FD~%aXB+ATtqK8j6-)b;HQzosmd!ZwF zZ(%u?A$)W!4g*hWS)E_`1qt6~3VIL2HzJ?iQh{%#^XuSFg!fCI>tJKI@iH5Hi~iXKk*VG$f$@#G%G^et_LOsv$f zO8*Aq7hN>^o5VuId5(^Bq`WiL_lr4#HXdn;?O3tBZDb8*se<0GcUpc9_QnazHH1P6+a< zGH>;^^o>oY2F)&9=G(LGeDK3xb&=@3yDQ0x0mS)kst-&i`#mFPaN}_B;%%EtdrQ_j zYthAah;a%78i2%ztkj={J8ZVK25vqk-;G}|9>?JsAR*+1jJ1Uv!n%nXqJv;26e>39 zO&S(^JN7L%4|}5~m!pgZj}o>fuI6J|<$lfp#?)%`>z4^0JZ*k!K_vwc&RV_wzWcWe z*9C>XgP|Om6-=I@*lt$&d$qXC(#|&w2Feb8`B*(K7w{@G(?H268Cj0t1c@X1R7)9D zvgSVVxp|TB>5UF;SF}^250Hlv`TJqLeB0TRIOIXXXZp4keTtc@atZRuESRc zrzW+1(`4+${>-feea0=m$ww4#Viixxre%n7Dy;nORiX1SuRA1sXH6nI%yVK)>coCE?iGe4M3o_$(KZU?eS4dCa%F%u^ z+$eZ`I>VS`#ps6m=|w@Bop%n-HfdiW*QAZk&2D3)?7^3{c7etIeU+7^+x7FTxrPgo z@a!X=Wk*Eh7H>r-q3^TKtqp zZlUfE23j~2t@HHQmRT&Dlp}Yfv{W`~kfo(hwEpPY5FG0~Cy9pkg&geq|LW`z9BX_3 z6rj#b#g#^y2ui=GxN&~rg=G95=Cjo^%@rR-&{@u%CV>#`}_c2U?CEry2n_Wp63$p6{}(B%Q$MBUqH zXdx#8cPuHF+=wn+_w*W*r`({8YDUJQGQbx^m_ zUaONN7<@Ut(i2=WDcCQY4NGw%v)8@}?daq)PCwV8jsS#I&;@j%bL=6gY+RS* z+v=JSIFLF%*Z;IMi3J_XOjhAntwk+3W<9)s_Nt8n8vnT{%D!W5sg=dhsrEgg{Ilz_ zI{*0)jsKy3RT1IZRo<@a@7%DN!7gGp_F64w*g=cdZ|zs)RB~Rsh08P>$}(u&SqiTt z&!eF+@69+NXSVHd{V-t1WCbb7X|G#1m*!E}qzl}Oc54r`fyKp5LcLME=LB!YCaJv7 zyu=3x)dOutMv`mFY}B?N^d?3sKacs51G){JB-rTp z({7XFbqFk}9W{x|o6~k~``&)umH8Zq<+LNtLaQIe$s7yy*%|jwcptw_YNlE1MuoU; zfe9|^{_dQMP)>J>e-xq9jd5MnVvBohcjCA~i~G*P1(fMgdLnJ|mw&tazI~vT_j)A# zLZ0D3^5chly|=yv&UlF*cWc=L__r7EO1va@`#r1F;FZV7(Vk@!{L^Ri zS^u5`!1hAOpRTV_tlwJ;#&X)b_iYt;l+(sN@S$W@I;ngz?hWC)JHeO##!hi|l0?}> z3|JDy>C@`}NCVg*3(4x>+c!)tt$#90*UFrT>9@|p`Ps)+ZfjHsn+9yw&prId?N?x+ zsNBC|g(gy_o~TsDuS(6X>?*aA^SO9>=KgB`9zTH4ji*`VCRb=yF&m)!;gQDQjg2AD z#XMvdPku zEqN6Dbe@lDXE08s@UBJs^N@aij)!0MG`kX0L}=&RmDBkNOwP_9v|a_~H)nbr?}-!3 zo6W|_Xzm^G>=YvPSrIo))nhN2qPytQ@d{yj;~YH~*{OTfv(+#B&FOEIxBm~hz$7Mt zG@Ln&q__$6@)|mFbsjj`*x18(5h=W}_s&_6{0&LSVVo1#>rE@*M`o!|YSWUyHKKjt zfMU(K*~>S;3+^uuKZJB}GVAR)G9kO5o(n09`FX$&9cy{~&7uWaw z9cMqF1wL>a#fH)J-pdgBK;3z$bKtqTAk;Fpmni;94#_T5%MLx7JO^bSce%d;XY`J@ zlZnYp&R(be>~y-&bggXHn!dQYiF4;cm~Z1idHkbxW_oCjkc1C}9ji>@XQxbnrnK*P z#3T|*LS$|LObMDG87^pM{1Q|761=D*_PoFvml^GM7NiCQ(k3?P)g3n0&9<{h3?L-N zY`20l!HpR3VJNDZ5EV5JxnMvCVCVYUbeX{MhZ7)N}NFYgGa&=_mVmph>tr$Xv zj&+GO`hB!pjjQBYS&uP*$CFQGDlm1mW~2W&!76C!!egNj+Ugk0#+?<)CbTp*8_tPP z2)U28)KIx+!4E+*^mp(wnGxOEZ|`gSbX=^g16{xnjc1{!itW5ibVRpob+l%Mj+;*> zfkr}1-iHn>71EYwOg=VN^ZkVjX9YJ4363RB{1rAtuzx1!IGG$16FepCpkh)wGdc0e zqYZh z&`Kd~R7~ihCt|__{uR9S1^9i)9x&a4a7G{FH1B9?6QP7d5YcW&S%=?+c8d8o82S@1 z9fwT6Y4z!dTfqcam`Bh_?7jYtz^5RNWeG`Ie53L=ah<}jc_jyU)&^kw?-4LyJCvY} zXwAm`K}ITQtL;E+^rtxf7{PQh;@1Bd;oK)&)v%Ys^UxvQ2&in|+$%^hFi3DG>=6G$ zH>{x%9qqT6I8F{Ru0Hx7$#}C~1iI%|1x9@Fs(Dw~4z{E&LL-5Vb(Z85%wU8|2PQPf zv1I&2oX@iK1%x@8?NXB`q(kiH9e-#U0YnC-W;C+|px~ZZ5q~HedJUKYSMdA~PMue? zV*d+9CIsU`8yXY#$yTEOvy~H0vO_jSAQV|GbY4Utl#pBZUyZw+hns1NocEGeOHu+B z$C8`(cq|dx^wZ9tXb?LMbauNE`Qy)OC>enL&h64WleQeDcR>4r{XS_@FBvyUICfQp zU`bv!w9n279~~hrnru7i0RLMFg`st5Bv5Z+Aj<~ykc$nn{J^k-^a}ViY+qo>e~5RM z2SfX26~O`Ghggp$s0uX{eu;6`056zyHgDofTs;qQDl;0SO5nXO@+aEC2|>UFyM}iP zgIz;*27bm4NCF7&s63J5v8NE&+3fHA!-5mhz4(31-!S(cp1=%%9FCA#xq|L*Fw0J0 z#%cl-kJ^S9`9p79f|SEgy=V$tF)feO?PZoLwEn{Ro~A z5fi0ekUndN(VM`4XREC&1ZTNiFUi=cIgiFbh^J9*GpJ9erLV>#PNE*u8t<1|L%|X>2DET6tq8aqWx-# z*q^T;wwvm-{Sk0ELPFot8NbQVjNuFs7Feu5A~p&(pcd(3BIO0TFK#_OFMRc21_l+~ z!a5pH;CfAaVlSXAo{j!uAW+Nz)MJsK&me0EK>cA2-60`V>i|7y#t=CTPXMpZh5)og z5c6US0rO}u;{o$djNI9ii9JUC2|Ag-k#p<*4hlOC0!0l;>X>=|8`KvFRDjMbbTa=Z zC_xC6d<;aF{~OeKT}Yg#po0G|zw-#9=VP`_k1&XyAUp)>2M*_~5RTUiivFZVrgO{$ z0Z6le7dtETcxZowp}WWXI~96n^q61NVcc17cpqXzV_O@e(Z6i?-Kwh}qj&vXq)<2v zB69bWi2Mlzo&^Fw?Gk;eTmP8VQ|qq)$to!NcUhf!Dd-zfAiVB?NQH@Y^d_F-HTQ{& z0DO6WCYC%!4Qv9@HCGU4d!KQ4|DEX4DLYRinBOPjgto8$_x6t`x&&0~3?jEq2oad* z7|}n%JnPur65*zN!lyyny<5mAM|M16?6y?tsJ^LIqEUa13&)gwU|`^-l2W2%#LJg2 zle6ECi_WaT%J!O#)0OfW)&inn@ z^rVI5AwEqz&S8>peos%A+}56I2%x8@_w@7(QghtXO^is$j$osD3VCJ7HUPKD@|)WX zzf|Rp%UnkwubgQz@sRJP>-6+=B%hrg<=0#7d&ORh!d1S$zM>vC#A(_sG1e!*`dUrF zc*b7e3e~=uOw^<)7n;g`IIQUC=wNX|9oci((q(8shuc3%w( z3u|3o*6@l*zR_?C&q@hhMu};AjA)8{hHAN^gOXBMWbOs7l!cx&r9#uGpC7Nrhp>4a zl~GS3T1MkR3rkBdb7jEoDMM<1}rc&)453D!SOVBuA#DrWP8LY{sn z6&6P4zro=d$6cvg*Z-hbIre-!m!It1V{b(lMA;1nd8>qZ-kA8 za~O~8Z!K(*h~61ajgB5W+-U73h|X@`bI{!JsC?WU78Z;#4IZ`pS4$E!CRxZ1P*0<4WygnMQWh2HE{gQKjW zeiEo`zgAt;@z)no#O{)@(_m43U-e_$>SWoJ{mr@9G_!<4wRhm$sy%L^e?-v9rG7!) zFR#n7@P$-<4FKY-Me>B*yy{`_g6xI z>p8j=vxE67T}d)wVPPCZ6{^Ueg=-VFVZ;r16mQ1rN;jT3zdw)O)6s3*PcM{M^6lAN$u^p|W@fupzxvSu6*+*`>SG^jP8>l|3>Deq%F0FpC>y+q*$sl3)gP9iygxp4 zimv%gs6KZkIlVX=NDFCI6lQ2#JTgA?yHvcJ%*o{%8Zir zhUMYng~gw^rWZvce-^INsD}1rsFfQH7bRTS6G3;2sC#J{Auu@@0E}9R%?9^c%k-i! zoZ^7jc5{}1PR^k3yU@!9ryvFuZtK-o5v2IdN3h)*jxuKL7LtB)I-!#70sUG}Vyp2_ zH1h_|t}b)`=5lAqN2ynLOujXR-ZhFhqh$`ABd)X&Gs!9G>!tc>Km;){Z?+fv^?TF1 z!R=XfOrtBJF^ExZkxC}@GJBdu#J*Q|sz{YrG!(V~`wU{Y|7KRFDT~)P3hgoV3KjaM z+i>0<3ws2oz9{cdSsHw)Fo%!x3O6Y*~gI_2_LPJ9}48cOtV4*V70=u2%*oU4k zbM*q)ugEDWr8Jsz3Rm5R{3a;!9J{+8nMSRVeB?Ywt*Arq!=AQ&aaOG+Yhdm84_8HW zSC@-d__zDiMclBvZ9sj9km9%=6XP0=2MZO3(F#|o3)c}`-;X03ekN>=y(yV+S5HyZaRtG(jQvYcT%xI!f-=RV4V<1_y^eC{e9LRjaoKZKE7E3E=1zg+3xm z?RLuMlT+lmlT0fUiaQ`b#=v~d}zKhqB5xYO)1}KYHDg@x>>2zcB{sdIPF0r zc@J<&Z^wR8h`9DKOO=TL=X$Nbsw4hMZ-yG9n^u}4vc!JRl1mE4bX z*mJSJpnn6J5Ks3$Dy~&1c){{b(9Fn!+y>ZkoPHln7(j?TB-Cch7F&exfeo3}QJI zCOGfJXVyvEQm{dChfSY57}3bX8G*(OU6q1c^~UIPrLCZ^C(O8Pu0iFUy0Aa)+9#UG zHk(VMiIJcVfy3K!9Wu!VA}#Bru!kfMQ3JhYdEhYe+N>JWUgjp3lnm*SO9S%^&Z-w! zyOhhXG8Db!X>2ZF?Ki^B4hKZBNA={MKR4a#mUqj!Zn|rFZSsYJhlWPmS0Rs^jCuG4 zZ?h=4G`Lvt+w)w>F4H# z0O8JZXQDT|XPEg4vwBTkJSOVb<+)oOe3LI0d_%rS!c;UtSf`u+#zzYTOo>sBMGR56 znXJ24RvgQMS~;#{_17;0&+1T4(qy64wO3g#+3AbrN%TMugi`z2Q3$KK`f@U0@sb;@ z+1S}1pEnE*Sf!LW2)W|q_bnWKlu^mUK1fbpK0~EgPAQR6KP4l>JJ?Vggjb;to+#a# z6rln7UG%!rRkzr@Y`;4LXjucbYLtei8+$*82T9qNj35mBJ36<5*);0D1P0#Ndx^WA zNw6NP;KO9Iu3;DyryDJ%sMzm+S7w@~4kMh$$_V&tQYd&6ag41WQMKrn1%CjYjy4ko z((vA_8X{oKS?$zya|6H{RPDAsPh}Pn6|FYRAKnHbbidW>Yu|p|BA|wsppXX^k?(oH z?FFgpiMurwX)z_aDoLktwEbwUEm~ws?HBh0|NGY*f^4_ubIs>E@^tFmQf;abcv+@L z{ggV&JdbPIfcpUEbRo`s@&zV2|IkaD>(cAJw*gs+STqpnvfG~ZE# z?|;hGlBuKipskf;piz^b6iaUeIvq1APN*`l+N}?QAYe%AW^3-xk#&fh@72krDwu5d zYcJfpb_INwpw+HTule6os-J%7MN;^>@>0Ykg}nXY?pjgltDCCUV<7TOY~-vbN={DB zQOW!1&9@TB}29#rd<>&pp*ZfVOzlVJpghZz_mU;k#hj&}2DiUrCZllni0f?D{617-_3# zjo9sPb(E`RcOTvET<9R_j6=Ve``k1EeuUEt2CA2()+DA}4jV z5(;fDuZxKUS&sT~oEo&FL2QAd=1Ucmqw^uI=F07#gOf(+Vmn4GtBWbtc>-B;+!kw4FIGO6eOBBH-jGF8&Fe+0OFt)Wnzei&<&3 zySQt_qq`65uo|YhS?3SO)Dm^;T{X-)WJANkEPSJEHm2vcKL7^S=k{C-pZsyKy_B+) zMc^2xDpYF$z)o&I^pIc1w7FTibV?_L$GYRZvPZRA6En@efA+$~ zqkW6VlWk9q+|Do0Ekhr1*clchcX)x^Pu>9T4}?L`HOV3tSEI>&&a^LEYEDO6^2#Qn zbSxE9C|!rQOq6yDq`f!BV#h2jEVAUC2GDPL=(|I{DB9j3gj zIA`Q_|L$EN+_Ic5O_rRPUn20mSMxZI|1md;YAk*aq(f0<~ ziC!_uoz_j?1~sM-?KzK7K0@y ztHMR#64-t~X{pIQL4r~&Tm{ZakzyRg^iv&56yuw7ohlULapHaq#fw>>B|#L_$2RMM zm8~mN6d@K}1o2A?gV1&G|Bk$mWj&8}1$;>qx@I|a4WHt?5iVD^&tWtaEc$^Kgq8Q` z=q%2YQBzX`8{U(!R>+@%YjU)|1ywLP*!_6rofton0Ok;n0iFkcjhvTX#_hstkuE{l-9gKMz=Mmj*TBr#lXPmUp5rfAK`YVs$B&Vbdn%Yf9WGrM~!86MQJ86#giTVQ)l6h~({F2`w|JdP z=|q$b)gV<#BYqUz*G~}>%x$6fP$fM#cgvkF9kKpYI%w7H?Uh0VIGjip%?4m<0~yuI zn0Fs`%cjU}Ee|X8F8I%>Yn94fw?qU77PfrmcJflQnht6L!M}Mjd2iwmO<-1qNKG}1 zif>U~5$ITL_1`>9NVsD-pIBJ9x7jI`Pc%cOd$2wN)VdB=x}_4-8K&&`J8|1Vd!_&J zZb@Bsg_ThI*Z*+yvRimH!TLpNalGDg z%cTKAR;{Ox6~4c!*qVD&cpBN}zn&c~-bpsk5C$e?!m4Z|;;u|WUEXB*x^_s+#)o=_ z{)vNx)z1}FwVWV#UAUDf6;%dwD9@a70z}N~`GUjGeV^*;=(OE9r_r3{*zcZOn37(k z2dYWBI5Gpfca#XHX!B?(VipsX8T*we76seXZL(e$}E1*$~_iIN*R8N>q`L~3y z&giQhgr-wRfC%T~g(s$Wrkp2in^u0jKkv+s-Ql=CSwGNn+vAZ~_rnT}nRv68Hzn(4 z9;HVNi_77{v_#o8oa$W!?(}ZmeTy+iGd8DgJ|;$l4DrRrM>2C*nf85uO))bH!>PO!)Yu8t?z86n0QkK%IR0J@igT%Tk#2FDB)e;ru2rfu5MCFN=kBa=oco7 z`4@X^^~OJ}MXEqF$_TPYVpxmR7rN(ia@!oPjE-v_rhn;!KYDr~NuCN)<2Rpuwr3am z5D~TC6`~z!BQ9*>hTs@_TZv9?|Fz=77zltnIC7-##L*$4Tq&Je7bH$S%6st}4Rjd_ z-jWVLVJ5FBb*fBu@E)#K8kelqM4=9~^|7+*fC5L_EpzQPwi0TGM=yP-SEFJ#9w`CY zS^kJ^qvP`hVCgqO;j6Bt4jqmhiI>0vwlJ}q<%(i=QwXbtIL%(brZf5BulOKUUv+=a z$Lf0-hl&Yxo2$y~+=|}zJ$c5X$o++kLE>ws9g|&rfMcdaxw?5jD`~h6wWA!iK~HcV zJN?XFGsmd?ulMMau^JB^Jt^DKKxy7RAX23B`NZ;sm@v|M93v%U4kSCh{jMtxD|Xx5 zhTa0mf)+{Nvd!YrBS~$VdZD?+%ae4XE#(X$8ar5u<(qq>z+aiZPgTs4H??rw?~HmW zCGGWdUec5v38J`ubn2PIVUS*dcq2Y4QAO4tm-*0-7>@mn-`BKeGPyrWj^f}hd1(ZX zRm0emu!H5|*5#-?DB?iMeWhFfVxd<|wfEdt4V{}9?V0&W?MaAp@_wzfvC=bNf6F6K z$_WRR1>of^-n)SMQf^L;&Q*b4JJnFl5R!ccW(w40a;8`B@+5ul>WbX%kKrpbzS4T@ ze#h6Mq5->!MxZ=B=;a@!m92&?K)4m1C;7Oz8tB*)hC;X!@g!5FG1>s`>bJ_zrq`7Q zaHV?`Wo4(h>7CJWuyN2d()YfJ1bvDQd1IaDPt6E!ektcr_cYkA7FQ`~|q<-<-zz5F|?LJ`(}n!4~t9 z0!N!5;Q=nwi(FvjrFUKWhLUjEkw!$8mf?&TgQxOs!=i(|y=KzX?D!+Cdx%%)g? zqy3_iOWjdv*>P^t)?u18D)UDB5aU>Cc1tLTCO|<<9hA3LKQcCjbIC{|j1dY-N_I7b z+B()coO5x0z+pOwRAs8yHjwGL>?TQV&2@@7s@=3g^p!iIf>dqA#b&X{9e2k-E*9&_ za{an!-PG=yx0As%_sA^~Wy^lea!}%K(qaJIZ(ngj+3jI>fxycbqVG!CL3$qc_H>x> zW9`mrU+|5tw8|WON;Q@pFP`NufkjWJCs!OZ%JxADp7qFC4Y?lFPRWr6bz+r)ZT?Sg?nVm*On=uhRK>e#Ax6-}_60xD@$6Um4y|E&EG zdzI*^RI#J(FNt24!vjl)w?6>w?x2`@62w7bXIuBZSb^;D-u)1=NJ`ZxLqq}driHVv znu%34fxJ%V1ul8uU^{Fa0o_Wx*BSMWYAb{83}I4TueE&=M>3tY|v9?Wp5y`$sW`saqP7pFF+-2E?M5nXq@ zoR*e$Q^njT54#Pdr6H`^HyjbPZsb!-@A@qqpVZ|?rFQNdR9#1w!=Hw*hz@dnT>Nfq z5E!w_XxS@z_wHRT)ZqrW&M30o(lf*}c)#{ldXFC0bbV^FDf9u|qzt86$=E2BDIcd|%}GBLuA)vW()5jm_S8wMQCg zdw%7LFq>&9{q^B08~Y}xp=NA~0D6M-5~PZrxB^>uxl-1*6ox2b!s$j!413d66vdP~ z2pnQB&rykalXXYomoU33HwYltyt#S04pzz;k0frg?i%qSa!Mw=c+BfvNJQXsOyx&Q z#v&j7AA4^d6@|L?4cko#7=Yjm5(cZYz; z(A^F1HM;jc=Xp;&`}^%Q(^-7L}hj(f|sc>?vrGW69L*Iled zY^k1?OBLPrYX<H#A<=malbS9Ke~t=BZbd$ zQAHp4kY!njW3iCf(D)0S&iRb43TYm;K)p zP~PRfVP7sV^ug6ZjWFL~>!HqYxg(PcK3Ec!Yst*UKoabC045Hr-&|(N3k~;3{%ve92iqF=e10cfpGAAqr^vSYYPnj!BO!P4`wFtV2DzywB4I zh!6RQUqi1agB<>5t>A$I=251;zUQ!J&>L>o9h>wQ-?&UkvY6=1E7p~Ia~u|xE=-am zF`L8A*%cd62ZZgx9bq$R0Y0<}>q>Xzpa z_l|<3-^t)khwOLN!!3Oup}jczsqz4v~8&mkPoVkBaL zi6W8#m0wW1uIh>YlQh923|dATOg6T5aLVmIXGc{fHV(1^IN0bDbC4c;Qe{egJ z-?@-;ojB-Z10xDcr}w3}Zaa>{RH=^RT#>`F&IrR5tFtcF+MS+oqH2C7mYr;lPW8KZ zO&7XL-YO9$Ku9w=n>8Tq$tt$063^_+wG?S2+S!rnubJOe*cDmC01xUUHe*FYCgAG~(xVpbvQYOr`P zXm7u^VcSl=PW6yYR3qXU@JN#6fUe7Nk9q)E1$T_Sb78Gx(D^Y{iUR&{@QvB6{Tva@ zU-o5J^pxvtgv0)NFI0=n+pLqYMqpxw_dffwywvf56XBrOeZTh&GiD2LWXIJOIA!o` zFxqVe>jcEieZk*w2y+d&#g>3uXH#h|w5fQ5MHZV2@68nar3;x3*Uk5#Eeahr%|uWe z(B2>q?JRRYggzXq692%5-b-cgcp_5BGUFq_Vbv zfXpnp1c0WRMr-Su*JD<(NwG0JE z@;+Pf597At*j_%?>lDh=`N)9Ia02sYy`hjr%$u~uX36>6L3azX$?mPkmp-H}X=`-BQ zLPJB1J8g<4M138F@fC4B#2}4+c%lbZe73V9`t~g2o!OIP98W$!2Z%s2yA#h)XZh#1 z;awsTrbwxe z4R2%Ha&ZJ?dNyX@d(~1|mVOv}Tgn$~qasGw_A0^jQkK>b3qnUFHF4|a*K+F?4oD!3kd|a?v3J<=XXRfQY2GRuf{0LCyiEI}-3;^saP4ECK zYvV&+KB*|w2u9Ox&}6Laa6;2)<@U~`;GwGFjgo{fwN&mJh7QH0MW*h;OqKxwgbMic zaAoVT7-#-ql@;r{p*mvJ+3lCyxzLv*GRaf1JpuHjMVK`c*b3!TOU#5PuVOosX77VB zu^gIq*F}*~e#iNOUcGGi;tu2CUx9w1qf%ir4bS>H^mOsE|K`=aTrnO$TpOSCM;p(9 zWz5R?5&vaP!>ipJ|Jp66MBb)vR*I4X29-Kel)?gb_g-#r-ql??Wu-MLzo;?kt8$51 zD}(K>9v5uZta)LnyZ~3N;9CT;9bq|PcJ=VIowA6$?cT03lTmq3hyBDT`*=I~nP8PDi zbZ$|CgWhcT(^HX<%lE`DTN$YaSPTJBTFR@kwdt;_s~duU6D4e3zHy+nG|%JX@<~$z zR*)6|SJ4z{Vs_Ijjm*7va#6d<#Nb;TJi&8(W%)uWvE{+u_WJtz%D$qqG8YaX%rk8K z(r}>dy50?BavUd0O;*+q79Wt5z;`r4HG+c;SKLTRNpo+T8YR}9@T3|(fu!yrtx)h7 zkFg&vf$`65lP)}f`{6yNfIU^F*PBBY!-IJ)Riw(t5Uvw|)`V7)Ot(^YRA_FBLObp~ zvOBzKQ;2W^2DZ?&mkAYubzU98 zWgBeeKOL5Se1Yw$db@(^sA^uuNEEq3+vF5%7pIkay7^~a$dRyNw(Cuds+ce3bc#K+ zD2>gb2FKNk!^Z-$S(9Zoq{xO5s}bm@V+OsHSEcu+advFsY>W8!QUc{T+M zc*@?MJ@TUu7iI`z)Q`U?(-Lo{k_(C6bVsvBcbDjyexeu~@&2o%kS)CspFCa33!>S8g5dc-uU9=LyP}nVFe@=)Ll!GPg1Ek+yMS zVL1aPEHyP1g(>l9DpR;&|#cO8jIpk0Dhp3zSy}niE3D3u8Cjt z4rNdVE?9B!8v@(LN+ZFdS4XIsjo3T1jerxiP@3+>^G&UjBeA+CJ&;+1Iq%;Kfe5;v zxDiNAfRPGfg2mmZ^~jJ7jt4FFnBcdB3K(^80M=b5L+GR=G3mnk$ zsHo?;m}sf(FnTg3=10ZI8t#l@z7&I663}0>uiTA^;aK=yqL@ls0msG0waAsL;Vmg_ z7vD~H3(`cWhcKU3)|jkdV9Jbd4O~>c2*vP2;hl)x#R|Kx(P`=~$CUw&F}$ySqnZ@y zB=}so<-N;U(>FHdy)6ZFR-qNn(L;D;;Kn=uSLfpS_T(gGDVEijGWJBV*W#|1fN%Q+ zXpT8zq|U$xOZqkei){8D7H-yU{2F0TjJSs)oR z&$;C$q-AE}rlb@*vOlC;xzml~ddgKIA>8Eqi%BUTA-h5$CewvAMm(0ow%Z3odnbSsE~YZs~H4gIAms! zCi2?wrcXA4Z-SrvYv@yn=_X8^#_G9qBOkV))^zt1)h%9LoKV>j zEV6`>@51Py)AC-LscLFe>bWT)PxuoBsRc_mCn;u^ACRRSjbb%=%eD;;JXl z2qc7-Oskjh0a7-i|%JJL7wW z<*Pjk27Wh4a8813tracm0 z_uHT~_WQEvU;m=c=twWk-Luc|kltKc3ZLQJ;%CO9{H-3?RSTny&hn%K9JpOyAy}*P zSr_K%qDyw!RiXMGeJUIAiKhKcyx7cLYRw9@(lD1MO~3hGky7&) z%~_MXc0U60t_`~ZdVZRKvMWt$^lidAe@>RX1|uS2G4}KjJH=1T?t=BVVT1cK75yxU zeAl2a29XJlgVVs{IZt)Ig@uRkkE2BhyHvxF;E4vj#p1lfzRIujMM3U~gJ{0pyqdF& z>Vfzb7V`^SAZ-Y6r4^k!0^3;wE-wpVR6JrEFgLtpq%S5c%Cs;%du??w7x21TJUpC=l&AQW}t4)&bhA^tr^Z zc>&JUv+#TmAd~@B8l%2~Y-EH4LDN$%TP#k4>Su_mG@%tMRd>@+X2a^0I!X3?l^+5I zDPL2`YWl+HQ1@okB~>&%t$ghFOG}4bD%<95szKQpkQBA5N%;!n%T})lHLe}nF3}vm zZkci~heD%tk6!02k(kIY-M&@QC1XJl@1YEFQy?Q!JzC`rqRW*uK>*B>n@3LUn*I{# z3NyketaD4K+Zn$WE7frz8T}b8BWh@X0LWokpl`K`K+pv)r=WP+j@!f1b;Km4J1nl@ z3J|86iTY~HJP3+MykEi^F3YU~{n7px0=GNRZ^HkUH@x9lt%gX5^T_WV+DwaXFWDH` zJttn$uyPyggh*I7xUa0+--;vVcw-r98r2wDB^~IeNDsIbw`YqsDLa?=h{mlNyL(fl zvdV5HYSiW{w{0dyeTzXGzO$^!(k!#tzR@2b6E6RO;kx^Da(Kp|_|YR`Z-2`<FUC zf9YN09Vds2KgciymFf)hg`%Le0e&^%yu*o1#9dwV#R`w_2lTjJfBvFDjb)h%00vAy zYMtAw-nQE!%u2B0qv{u?!~U#MMmR#bc523=Bhbc6qWbyW%%u!-(8&OR-IWsAn9QbU zDO**^>;H{VfyokTHq%^JUmyLU(uIMZ1hF??wfQ4r0z`;&T-vY!$riI@{7RW>kCl{C zWM9QVwvW)HY{t@wrEA2vjbiK&aby1rt!by-DNqYux$E$WLV1l)VW81++Y5dE65|zC zy)y_M5>qB{I_}^k?TwTF@shD8Mq~n1OdwO9-@z5VJ+$bi ztg32^s{2`10=T29hWZUx=+l9e2w%|Qy*gAk?s}M@kuhjq*6eaL7AIh{wR;F*N4d8B zr(*)wX4118Mu;z_BJj4!pDYen*lNb|;d|P;zjwSn7u|=g%!-heOEmS){FWJNcmw#% zO%cOd4~%JW41rTs0&LMYR@XYSYVAi@UFj0U+!|e$zML+7eS*Q)#&!{UxG7jfonVRj z1`-9FZ0a9#D2_-tQz9*|0Xt@Z>0aHPiZcU)OTJIVO3SKCZD$LO+L5UF)WSlgXj%_C zf2DWvvd2Th!Z<-Ke2j9VlSmdYCCwY6aLaYb)~Z{+6()0-XBi`Ra>$;)Pye)5YC6tGl_%e{Vp( z{k2XJOd2PM%dN1ID6$MFm)P^xqhCD-n9_9N6c$vnGYURbJXWGDNrjCbHsA6Cy`)P0HoJZ8_K0H~&qs+VA@_w0>9!60 zctB^#Wux}i&^LUs#0htMFZ>eCVdsR7_{MLCC{GnGbgRPSirDYRkXwMXczESayBueO{o;iH?sNeTrYF21jre&l>*UcVqH zzUcYM=05sLY*RB1!}%tGuWe@weHqBBd!>kMW_xbmB{xN(fab9-uq`Fd1rTt%_a$d@ zSOx<7<*l&YG{|ne3R@m*c{AMjLGX6N)54HGfRN?J4$9Ot`p(mrg>S?$3@)3Zv>-my zhDE=V_f+3}^R3sJ%J`DQpPxJ|Xi!BU(>^=hVRaTKgff0u>w$iC3Qz4f0Ek5nV7b16 z2uO4DEp*yKDTtrSn3Yf->xmP9F`oUUEyuYie>-8$lhS%j-qSI4o8;4=tilaCa`c=QD*!ShI%P5I+`V;Has# z_X9{;jAJMTP^2>>m50*I6-jx)ydYZl$7)8e@lU@PK#B~<+rWi-VwE$_Wkm|*)Nm7b z1Cx^t=-m2l-8xNhHkT6>g&28*w43W2-Jd(b!RZ{oS&SnYGWg6j%Z=X!P%`a9JrFJN zR}d({?1l{;KKp^E80WTQ+&lKretv-TVE_0LdfMMIjAAmYu*IAopbnz4M{`?Y>+rrT zM+AtyjGg0xL#Lk#HV|(9Pvw9?0g!tW(^Rl{c-?*Z*n#ax{~^tnRt?hJuK|76=P$XA zy_>TNfvBIV%Vs7fw{G5SPhrV%-U3QczcxYC$BGD8cCJ(2F*<+?tNJg@!+GpnT&Z};r!HK%K3PpF))?9TcD=o#a)skJ+($jHfUpQd_wof^p_!8n(EDyzs2kT(+lD(^O6&TK6rpbx~9D}U?J z1>gbRXzwLtG=SK}Dxwe$tj3201qBA1ZQom$B3oSyK+c9^kE|a$py@~M4lrFso>P?q z^$XZja1uF8&u^1!{4Y18*fk_RbkBgEwzD`3y6=rq0dx6u`^Vtb8sPoMOU*_w`@o*> z0cfFN?6Jp#A{j+$wvf+x3O;;n=M3n1ht!&3CE>EX`%WillWgq(iX!e1=jOCnK)M7Y zROiVp%HQ7(!Zy|2JooyZ-VRP#C$p%u<`-Yi=MEaMV)F))7)s>1k?5tb)E^oe8gSQu zO*{6*OQ5*7khdJF*i59_ult_=4sTWF)U`(>LM8Dw(|ilXBIGo6+E=hD<%XXNY_~63 z^SeB*I|+oUgyzsqBhL=@7Y zJ!$B!2&~oN^c;s+KA4TJuB6+?w#1zhMJ#AYK=b~Khv%%ThM47+4Jg|A1&A_=0 zek`6ST4jRpOmG?al5sR_vJ^sP$^P&mV3tW!;qsXu6>ETQZwJmRDJhAcO~zgXDTf1W zzMVY8Jjz{XexLxjtJR@4=udANipZ^;Yu(QnWqwZ5p{{3%in%@s;_R%T0^>JFYRy6P zbd5#FgVQhNpoQJbMMgYBg%0$e?q z)?NA1Utk)3&72=lgn_R(oz^_`<7CnOZ(S;f>;_Q)(gl=Y2JuFtl_M8L=RiUPjL{_j zVFJjsLH31H-?PV>XuV1wlw+E31xY;J$(=#!JzB+8wY^`L?l0iq{U z1+hzy9utuu&y`d&moL3^@u@!;ysSBS72pxl?K4v|7i)i&)XA$j@^fvK=j_Vq5z>Qk zX7|A0GysnoMCV2-D>sePFY&B);CPhKSD{0L`NqL}^u({2;wVyFUfMhr9Hu8Z^5FZg zlP$-qJD_YS=ZB1=cb7?RS(D5hK_u^$f zxFCY&STAu!dpl32-SH@p=GH*q&l+4XKHcL<(f*p0Aw@pUoGOL!B1TMA&){>XKwhH) zFOBFN++XX)v^*(N=2UEL3*KGg5wr@U)!TX`6~08tB!MHh`xEw*58iDgs3#?JHHWrb z*A!OY3KUVtxNPf(Yfe-QK1^|$RUZi&1Jz}yfl!QUS5MFVb15*S`%zPImc4q`X)U*n%As$2=puCq7_)};=4vw0$& zpt+`8{YLC6jkY2TyOsWU`aOSz19E9}Uxl;%_786l9IqbwHi@FHa<8${$RT14&}E&*WJMpN{~kHXXPU8W;2U+hM$mlGWZ1ururev&5K7* zEjFVI1;KZ>c%zRf@EJ;3;97^wTlXaTPWo@7AQmhGI*o<8_2H2FJu;pH>pK zU%a?}R`qRRqsCTLXOKB_jCOD64Q(9>e~R`?S65t@j6-IxET1zdwLpZ+yY+gw%;ass zi-`Wlzt2u?3ad*3m)_l63~;L3$!--vM{pX|tNpq&s)9-^Ju|Z#BGh zDP4y=r8ZXkq~z41NkF*?hbc}~473gJFtF~}($)x;F{pAM)6yb?e(Bz_Lx13qEMT+t z27+8WL1?@IgwqJAr5F}hWfT(5gabUK3!Ta6`laW7?F^)c!MsasTV+_;%vXS~-LcaS7_gH#gD{p`nQDATiZM#39=IL(+i<*+q* z2zSHuPWxN8BtM``kqx}Bv^Y$H41`+Cn-lna;N)rKip}~;sEej&9ViNDylitmH({Ji#%K(%sjjK`(=?i)e{Q35sAi}^*PS4Db+k^GHGZN0Ag zCZNp~*^jj_J}X!gf4==DA^~m1^)U?sw*#czL1;f2yX3Ru%^d zOXOOg#%D7X;Qv!%0ypwRiD$y07dH%{c2Xpq_8#r`YN`O=6zDCk?epBEZ#rLzYKiu* zGo(wr&I!4>_s`JbxotOU&k#tRyofxvZ90f!BBw6%>a}VT+$?aN+T^V$Tg0dv@>Rf< zVrBmQ?{OD6oZzZFD<~eho36dz;M^N8i;=Ey%?Z;L@tgXCndC&)3WLQqGzldwHL7a-bE!-6=<+ zRdEw!y(i;X?~P1!=6zLn*#OX$O~=YYe0-vDG8}@lg2xy>Oe;75=^J%g{p`ZNe4=~c z5E29Hp*R?=%(1v014duxwcx@yxR5m#>IDMOy zfGZb*7zfh47x8W&nodeuVx*G{S*j0ew+$!W9iuwzb76Q&s5%KU>#HGjC;9JptqY4v zKlnN2v}BwDYpVZ6rh3sSTgu1-IO7{@WqU8i=jK|06-72G#)m-m1taC}5A_)u8Y$-YQ|=1w+-_wj~Cc+-7T(^;?<+4>#*`j%x%*hUHJ zQhvUezq0j(yE=O(q?D(7v*WV3BJ%6=6-$!#r_N4$AmT93fK(5NwFBV~v^5#6!k1#+ zLz4P-KtnhvGU*y@i9jJRI;1{I1QjIGZr_gHS<|AQG-f z?7`_4IX^|Do!ug?JL`9zVObzla5-3w%l`NgDeBvc>yls^_jfnTv>wp8hus8!$_|*& zsl)r6sX{eoeG|@P<7N!k41n-@7legT(eSSy?m^oDP10`Rp!sAFvbkUh1ub8Tf1pc<6`T@gfWbe>|A83lbY>rGP_xuFfuM6b(EevvOG9fYNtgvG88XdG?LHDrSvbo^{P>N{X;=&~bWK;9=*>{dQWy0GIgChrp zSqu?tcqM36Ga7nP5;zgUGfm4L*p)5BB=IUC@_sa!=ks+(a)UsA z0%rE~W=WjuND_Kc8t=sP^EA$Yi2R(&mT6>?n68H3*qxn~g|F&!d-HQ52s;4n2Uy*TxH6yQpY+0jr$!#1-b-KTszCH&9zYm~AA_CbcDP2|3%Nx{XLtR}Y zxx$h9HG`@)UN6rPiB+#jbKZ#V)EDmV?w)4-<@}7s4c)HcEf1IP;0{f6$-mt(Ii7xf z@06&zp(h$1#+J|e_))FIDtW^DEZlGOvd!kVM+XX4JeddiXEXBHFUkO_oL@Ih#%DJN z7|Zx0=n$1PZ9`#&w1E5j(FP>aRPju{vtIsoS^3eUI(J)01$=jg$a)#B$}=~mcN(=1 ztN?DAHiICP-`u=^>CtJh#<~I=cK$LG?)a#|UdQY`1+o-+Pkunc3p5K83@`lYtfe*Q z%9&^|hY1J2XZAHgHw13F1F6!!}o#n3{q+aaOO>st#7wTYdG~6Fd)j zimbePGu7$ngybcVnSqKo=sxD=u7G^7w+BKVqzt14TuaRqdYC7_fBz6L-w?~r!BOvd zh0o5cZQki>ASmsbpcgA$bDETO>-eH)Z8bDII}1LKwp4j4O@PUuTTQ* zL#W{9S#PN7Z#vNw84gm}o2l;-o<1pLzjI*&x8T8QOa?-xy@?>dQaDKJrGjZS;Yb2a zZ#!_F>j02UWD~RV*z92G1RcTU?gqIM1zwy-K6?_fn64`hS9oTjYj`b=OAp#Y;QWT+h{O=ea zT%ZCj)9U&WgpMdUCT3e=_>?nL5QgFhyP$(Az9_m3^2!{5njr?zhUHHztgRnzjW$UE zmyx&}m7Ov<%M1VIb8(J~*q9@@W8|&d8Z`><$duEccxrqe=xwL&0QU$Nx$ecwZy^Z9 zcD6@0IsuJKC6YZujWe@D8V@d9MHt>HA$(5AlCVU$jFY$kCJYeng@5ybSB6S$gR@EY zt(F6rk=wi-DfCPbcXglm>zO|ya&VtWc$VnsiR+@i^mj$S!;XM{w&3QGc_^G31H1`2b5fWd;Mmdk<<6+$eFOF7S6$${lj{5*5@F zi~q~_jwf6Oe(5{LmG3O_NIck_f-uykB%|fKjR;w@Q>V^Y_sI}H7e-dPfx3G zX9W0JV2uHFA_v~9RhG0jMK?#PpRcXXfb=ZI->x8nS#O0wgh&hM`8rgX(W z9ZNTz{izNo+lc90s>X1i^+b?dNsqI`Zu_;q2RJ#j+cY}m0I>MvxEyMx@m#X zd7CQ~uGHOP(P8r-pS{a}W|E3<cdPp=H04HyA7e##MhLM^FjdJa|h@7%mKka5Ci*gx`>wC0&8+H81z1XS0M#l+V z4BZ`cr87G8TK|5{9f6?N*L7bi8CSfx zJl~K~+OE%=8UIdAOLx3cdbVb*$M{G9^i!O1W^8v`SMI~jqU4e^ zj6u_LN?vjZShwUja^&?J3v^!(JkPkl0}UK3Yq$rAMkkm8b^C9M6K=*KsYLA?1u|?S z>xv><`cq?R*JL@Vo4$lBdIWD{2y@J2Vsg?`!gfAlp0@6vY+Hs+3IS6e{`2DWA!Nz? ziAR*V8uf!1NvZr$AT!5Ri%y`0-GxB@cDC%?lNW+5`QI<_g>!bbre|B+NwrBHRDYrS z0*dO9BP1OEb!fWvMXHZI*m92ONlViWkoR`&eX6SO`qS1wLBHog%o!3NMQN*wFPxhk z*n73z@Z(-b{pS^UhNu%MI(Ju$5Q!fXdf`0zN4aj}vsDHhv%b3PZAY{#7-rSgX6QB= z1y0^A(C*#~3)>Eju{q6->$j#Z{^vC!ijKI1(3!kBL1?KrbU#Lc>ptDlS`1rlQ(mb{ zA&(AHsEfmwUy;s^5!MF06kzgS7BY{hStN&yJASwV+TnfZPmUfJMLL@dP>HLj@hDY4 zc6$1FC@AF;1BF_D2YaP~p0+N@{zX1{wTe>nBsm-U964QK*JNtzThmzNZGJcaIo!gW# zBYk@7-Jp!1&P@gXZ%Vv%{qh5XjGYWs{>KnaBzHO~Si<$k630wn8HmZ^k~4*`{27G{ zd3}Fn+~#gt%snEnW5T7-`LY-}dlM|aP+>jt-|*@yH_hs5OMZ{^K$SETVi{ zD3M%5hH)!0Jk4rW$!7S(g5S#fdfU%mGR;xRv(UHD`wK!xRlj1D?8Zi$ttNYiG)quP zDeo+MmW)|@q;t3OM%PIsYj%Cd4llKx={v2!qfV9{VodqO4??qiAXU1ENN(N=DJ9DiAY_s80fnJ9$es z7ezyjkt%oKSteXzeV*{ESw#5W`!kQursGT?fD{mPkP6AbSP=<+uAQxh>!LCOqn(G_ zao4UtME7N-naixyzov0b_kH$N@`T^r`qcx;v9N+i@9Z?T^SdTyYshqG`EQwo&-iwq zPiODFU-81iwsG&{hWDG45d16r9XV2C7>UIg7kG1xI@K&H+{sQ~Y9z40Kl*wFLPxr4 zjpaCnyboh~7dAcyR9K_VS4fZ>StgQV`nU1AYpSH3xh+~uKX6*qO4C@+tC5+`d1U8* zEp6}Vco6gSwSz_^X-;(1jH$SugM8wblJs=-ur7Z~0X+6Rb89(Ulf$qcC2pn%uqP$( zrTL}$rby?pjCgtS7So=O*K0KLy!l>EhWh1+r`jo(`Z+Q`Y0P+-@LNaBMu~&&bW8T^_D@)-FuCxj47Y3j3(>O{bc4E@^!LQ2RXADnm6^A#Z&4} z#&odbpCM}I;$zCNntYOq&lamXbB?HSXB&fQk#zn3#Y73A^Ub#lKPnp`bBpa^N|;OMb`;six!y|#%S3P77}HkU9&$BQNb_e)#(oWr**Ih- zc|||{7jt{JiW^v#4h<~Glc zT*?`A>6APObJCKTdh%{K)K=GpH^NdR(>0+f+;yNx5X3*UCCbP*Z&k3mQl8Bif~Rt* z(zFfX7%wvqLl4jJ>*xOWqmNBA-$MBQVFx#Zq9he^X2>snw#H`ohgA|`&eNdHfPE3} zNll%7o1d1oe))-)$BZMZe9I2LPJg7Zw<)M3%(Apw|Fr776IWpd7lE$Z`asJOmeW740BI8n46UHui+8-?UJb<({3})=%ug%l zQ$vw9&qM4R;$Yv@xgFPs7k$$s8-nt-(PDSQVzUeo-{t$oQeFmqeJS&I_5&G`vR5$= zZ?Th1v!k#^>6U!e;zyc z<9jf+-oE@e>-O;dMClVZ@|Z@;qQr`LvWg-tXgRogWGS$|BQKo_zBqSxtmU5=D-<4q zFL2q*lXVl-BWiC;fAzz~;+Wr~M?tr>(wHa}{nJuelW?}kh2MwuP zic$io4!6%Kt3-j~WL?~*I*%Ve^DF5qmQSyZZ@7x*&$o9mYNm#Jm@tBNV0q~9N8Zy_ zg2DT~wJ!=yjm_cE(H2ZhG0~B&h+!#6ef)KLHxZp4kpHpfE}Wr^ zC1eRUw>GJK+Py9tYd+?(V)7)r@M@7+VG~(YL`X`is_$wv@IM_?Z*t76UHvATA~-VG z4(Ys*KPB-P&T$Hn@Mb}2<=tijW*;US3n|A-jgVS+%(H4DSGT~yK z87#-0rm!AAh)FTtn8^_b8m*+-$QJ2Lt{y^`t@!G+@d9bv6cLdE>T$d@m!qqa+C<8G*9_+N?z8Fvn%kA}7e8#pVc=3b{Jl^%+jD4F8-D{gj8__}%L#~%4; z+l-gbFkxv^pO}Obi7C3TwXTEgqf4jFu5M5pE8nZyjgV}Pwllu-#Aa)+ zH<|`38u@FubXi7m_I`aH&6LuH1!7k>}IpuKBm2s4Xx2(k>Evmk}ZQO;Iog0aCO&^cRD#4 z`;+A|ss@?zfsrZBIa7aYrGc^p6D`Fdhy5J>DU*-crG1t<(hsx0n~nr`F|wJcsf_as z9^G}93(b*8CpYw+3-@)o&z#Y-rJVe=P^fdxmd9N1Rz*@_J4Q^VSnkml<*69=F)i+X z4G~*MdA^Vt7D>7AmO#fALiQeb_wll{q2HXT`A3`2$=&N|*K+ip=_*BOHs=r4MVc9B zT;q>_5>GIet(akj7)KJKvB%Uo_7 zs<~N{dL71ZO_wEDI#NS<+NHrK#oyb7uqDuG+`GjWHDl&@j_7TAMBoKEcKfpqDGAiRCcPcsyY6IT+@#>*dNM6@ zP)J!ip}Bm=D>=c^_~L~$*1$&)gJ5IVO~-jT30KC@vC=UX}E0XtPx$TH<+SIET5dgz({&X7Rue8{6CEwcW3DLSJ;d;oQxUWjD-98vSP zL5@ee7zViz4UMt#s@6=mj6(L8OxY==ISb@N<(Bc5^oU(;&Kig2gfvUFlI0Ldw&%-w zl3`&rQE#f`9`#Xr#T*8?>CQ$`sK$s$i}-CK;#j=V37d7QS@f-G$?xs-MuNIfW%GNn z8`FUTqD>zLi%Sz;X}mu-mL;&N^Eg!Acx^~nap+1VV}3r;=53ULb6CT#_BEe@{92Fv z0Ne@-XiD+_sa^RWVYJ}N{WGZ@3q}x{%e^e>UbbKQC7IE{yB4?g8k#SF#%A!fwLslal&BWo0 zeZ$4ZQnD)*zN5R^9TtydXDG8bPR@R0k~zWt;;Fh0(JrA9Cr3+GmQke`N3++l%{$H8 z7VZwl<7+!zxxy{q$_MUGj%lHm;eFYGI1S!(gzaIRR^Zj{DqlKtUh^2Uv}_ssNplE; z)2ueP)|if8F0h@DYtUln;^4Mt{owkV$;u;yUkk9r( z_gy|uqspT>6G6`}hrWOCxW)8ioEFEN%VhLP=L=WZ__uc&?ff{7+u*-GgFwEH`#Zn+ zuBZ%s#ix&M#)?&If#07yFn)ZOeY0Z*a?_iASie?zgzYr2qWlts(deJ4{{($VM)?0D zqW>T7QM_t7OJpe{?TN-Had!L3makqEL;ua6=z*?Nsqby5?P~g{-GMDWnv)DT?taG1 z)8kG?Y$Vjeq9lTUW83^`^7;#-`43<8_@4sLKcPpwe~w@N*Jn8X0VV#YwfHAX^4G=w zKb(kvJWKYE{_a23{Xd@4`UmRxpBBfTOwWH=ke-tSLx+(Gr3TZuM>$AN{_nru@9Ws> z$Mhd(LvU|z+*9})Uxxl}mWpRWsoeite?lbVW!9@<;A)6~w7|Wc@ZZLh{%-ZHDc-4h z7$TOxGerOYhco=^zVZ9||I)B{Ql*1oR0sG!cS#3GTDLK2FPTn>&d}WhDPSeUOUFdX z>+9>e?OV@U#qEt!_U``nJU&gK#Z;ne+)#% zpT6E%hB!K0cmVj-N+4XPKy$*sgfJ&1Wddx}1$KR6axGvLGcTP^fv8TS*(4Bd)%spt z-CJ!{SI_5PYZKuull;~_2npav|9G$Czc1dB+FS5b1h?zu-41t0OfQZH>fY+{LHq>a z?*jOjfHxg}R)xoV^JM^Gd!hT`0p!kVUPsgr=H%zwfX;;g{vL^#UUhx-yU;IX;a0K41RU_u;9z1u+u1j|Ghx$J-TaUoW)XM>=dPFUL#B zRm26$G*htD5GrIzZhcIViOhxcm-J>(6|qBJV~oO_)g0`^_<-LjPyhAsA&I5X4Fx}s znnf3}_wNuJ7WV^}S=AW$0^onZIfvrF$p%T6>8_XjrwQA?kFKn&0DBEnCf&n`sHKrG zY@Ub2OWFp;^k&c$*_vDq(6u;y*%FtqSJLmoYp_a}Y{7_!GbE(e zd^8dkZLIbohSgx&%n!C#&|GFt$B-foY>aA4DV+I$tkL^BwVN(n<(u!O76|&lEjR0{ zLJHnXoHbj;+S8T#Izs1kU2@U!BhQaX{K|azUzVwr&totAYbLeMIBgi%q|@0FAf?N3 zE~gf!SDy`io$ECj>x{Dw!pIFE5h%2Zl9Jt+AJ@V_!7Px}9pbp0Ma*eRhbL=O?E_zR zL69T3^@Tu>sQ*KO!S<^?;0g`QTV`Q}hYs}=oRB0(MlEAS2>7v4Q?duxBjfpdKQC7X zbgNC?KVXQ^+rV4oj7j=iXo zy2(|!?Po)}Xp0N#iF2B{neL~-2XgkD9s|uzP{OE0A1ofiKalNwp(LJYyaTsXU;M4Q z4@*`4?y@M7)MT?uQ6BFqtEi#Jt=qRNz-5@()H)9NLAVgebtN%r2egW!A~A_CF8u-0 zW;^Y?K)GrTR)m2%sUB@3#82Fm&-LpzukeC67-aPsVJu!~NH0s%P-XbM8Z?cQn>zY= zTt$L}BeQaEoHLN~bz4 z9|o6PTD7c_39|kK4(YG~kgGxZpS1BFR6-SEcs57hI5Cshykz_mTX{(G!EWWDIwwjt zWF1sbYbBGh!8dW0Zr}{e0uhu?9dHO_G29y~@PSeS}(;yq!Z9M?PJy zLqG(PwQx|GuZnIPgk@nZK0iMSzrK^|0$2p>uA5{@U@syeY`1pUvE-6noe9VhV{8XJ zHSU+h_t+?-9bo#@I#Cn0A*YJITfJ$K+=6pZr}<*m`CH-B^>lIh2KD_AbK7w>vateJ zFJJzCuo3Fzz1}ghqe&mK9t`Z3L3-XFZ&>~LH0H1SrhcnB zSGx(^w?tx0aBW3Ki9G*$2nWbHzvt?|;jjb)GRS&)IqF;T=lbC32C3bkR)J8`29wM% zAuz&=+=YGEqbqqERuJK8{$8#7p0}KA9i;e!nKknb{UJPx6D-FO5+1(zy`)pk4$6yS zicC&Q^z3)=Hf_#FOyD~+tHOe-DBhg;Zq<0ZCj%ZQ$%HoxQVp20epL%X#IKBRs1}-U zO-}?QlnNU!E(YNM<$t|!h>u#@a>hhu!n-M`!NN%9Yb3b3G*4j(>}6Jokln&}RV^*1 zH(Oq4nB-l^jnbFBU^voaQ1fU5<&RhadJR&#AXlq|!Qear5t!oO!3tUwrPCCG=PXEx z*%po1^BxCEqm3%FmvLuKdU|J?9A=iQclsR1?Fm~KFe+#ky^xC&7!ojsGVCEI8^l20 z+a49&UhvGP=+|WZA)5UEFj*5dw#o^6U-0MWJ}}i%?SD~Je_;3$ z2@(T&!LWKe;7Kir1xS;{+nCU(*9H+jn2AfF88OYuz5+O3D2FD#5WZ+CZ~x}WQ*gIU zZQSG?XbPs?%~lNV$hw>0vStTh{q?_YfKyHy)X#ZI>6zB7qyJmQv4*Ye1gg+}`?vE$ zWxY-|snL`vcbg~-C9NXH1S+vjyG zS|9|LT>yGT0}2LHH*j=;a`~3GnP5!8D-qEVP1)#G+~$5>{#V2Hs~*lgiZ5VSu8VPxb<+?24N2V`J z@YH-@)7F>C?h!5Pxh$XktAo7Bw4bEK!HfkSx^v>ARs}K1jz`9gn|M@k{}dVb zykhL$oushSk8A_~wLSi?RrKD#jJ%2W=U|E+B$XZ6$6K)DXNhFHP(AvEjI@XFr3 ziBmQlZs}i3S7vb5%Jy-ZH;kMx@Or3h;5Zwln9|o}B57gzf?Qgu?ED+kmPXHjVx=x(!Ena3R z|2v-^`DB4a?*{HBOcfy4!GU!c_;Uv_4(@ij5G^n;fHXYA3Y#=L0et*|nNx7`+y!)A zlf(OWjWDE~K};f%?CEY$h{#|@;SAEe26ChteKFJJU zbj2+{Z4kZ>$;+-X=?>W5fh(qGXb`C0uWogooO7!o60L8}!XyDu*(eiP72=8 zL4EA<>mB=4sSFD(OQ!kOFqv9qy#cHDP1zTp)c`%xEI~{5BJ1&oqjER$?#Hdbkb6%a z2p#A!#Z0{pVUc~V_TTO*lV(-6nkLQ)mzJ~LpSXR6wmT5;>2v!jLGK^N;>T9NT?y=N zGF{rqqs6O^&lz1f>b{x1wVI8n6+_7H%J`+_yaG7d%!qBxiB0dmR-dTtJbe~N0FL2^ zw9VHTo_Oe_f!Dh!I1fN`Z$G#V4ob_coc#hKS($fiD_pEejlwA|eS=lryF)^@@5re;z(HMapEoR+JaY9WKV=l z9||X^A+IlXIVT%zKuS+0cp5H>P%4v_T$y3)(c~h?hmZlFB(h`2H55wtw zWpy{J?(Fub*E~Loixna~z@LE%!;@x$XLF%Yehx-nu&t1+gJFz8(AEU}#$ZNO8%VuN zYB2|+%dJNnk>8;;31{c)D2c3>kD?yj+{hq{SvzGJyv`#J@K$vUV>=Y&Ve-HQs-NfT ztB=d<$WopgKmy;3zF{Mv!0xmv?B|HXs zL74wlInKcRH&^BIdziXY*3>M6S8tkKh7_oRFD2q29R*%K;-6W1=L?A4DaHE^zK&)Q4P>;%QX zI&)Eb6@W6n4UAc zQ9^Pc;sE|+HR0N2X1HAXx>0=%C6C(=NhaS%MXf|gip~&q-{U5b0X*<-ddET~xLoZl z2XgK$Ga@fwY_>x|NPgT9$!9?;6`U>NtxnaOitP)YSgNpVc-+@CQxg+I8&AvrcQ$96 zj8SWXIfaZ*-3};6Vuc*CI;}w&128GU>R~eN!zs^>-5Q`==tZg`-@(D~96!H6bHEeu>f#=*SFE~vQV zr)r1gN=O)uV|F5G$U|RCY>`goJx&lV=tcJwmM@$Z%FPA;QLp=0Jy7%P;x~qwOH<|4 z=ayHB+1_ozgft>mI^nN>L2JzsD_61Q7?&;sW<0;EA^!P9x5*%b%;1jG`L?;$6wE%r zF~^LFRq-jMTgbrED=E*Vk8Ez?)|Qr@PC5^5ZEfbyOpoWTmG`aUGL`uXFAMYT^)orC zdR{_u&vxtG!FTr@J1kCn#QWF%yFEylS)(j6lrk1v23|_qE_G>%bZ2&%oA!5V7LE=- zG|tG`@|j`(yb-fh+O2COA9A+Afas!8TpF?jv~rL}dEqLiX)1MRy8JP@-F}+th|_4a z&uj9e0M?pm^@!5*i1t29?wZ1Cat#MsFRCQ88ikU&5I9HgH#?_YqMgjUzqVcHuw>q& z#0UwWMTx+-=G2L=D^pX>pZI73f#p65jLPcU9MAd(+q@M3qaYC@QoNQcZ!`5yoBjUl zA;Si#kQZ4RzIjK7#in>;&yjo3oM({7_7z@D4=d#zTY@}ia=%(p_t4bm&pZ{o(Rznb zXP9=1ytO%ke#LuOs@?2U+GyLOjkXjUx;Mvf=S;9&_B+=LF-aE#sV29r7KMIYf_2z5 zdx@C|9;R_Y2xcVGZ1AFSq_E5KEWkFlwsI(xGzH4)@OGZNf-%1qS~duEyK$zM2E*{( z6EewSs2y5XYKXV&9UNkv_xu;%KMp>IJZWr(vSf=PY151=qj2M7f@eW2gM9l8PB9%Flx%Rd>{rr7jIV(pRiIG>;52c3>9Nz_*PJ4h~9Vc|kD_*6<;`xahz z^AobQ)l~!qVz7IzT`>@Ql&N$eovWg-pkT5k;H+s^lsaTWE0CG0NsHk2hOXb-pL*(u zJE8=A_UzfRva+#P>BLq7fdD34JG%~Y88(K2_L}3t#RqiAJeRh%JIr>E^7y(yfno`! zqXdfrOg$&09>I2vw6>3U=`Q7Ews9OW#jYz~q|&Q)b_RvuT$SkwJ#ja<-AnvG@3%5= zHpmzW;4`Wh>+9_`8wuJK9%%$Km_{pR29`|)(>*V$2d>oD){mWrVYNeh8|GL7j%6p& z-vB(T;81H=%p-x zBekA#M?;nuoY75;2dc{1N6pzRdFK?Ut%d7l%?79iq5`+8`8w0bFpKq7ejpgEmFMBh zj!PE>tTyybgK7b{bW;DG+-*eKVkXyOrutVSA+iRAO}moRuGZf&+}BjZfkG!*6V;Bd z;ayikT*;{C&$U((^39mKb%}c%0r_YQ&I22524a08H=A>6N{Ym0nCBd{A7&;df>kap z#tQqDYUMUZmd~@~mC7zY#;a(Bfs>f&(%c#h$)8YXBdbq|3=faKu#yyUVWsfVy6kNb zxixCDgX*s70!LwE*+}@i>rwqMUx((LhZe!eZlt3z+6rROjeJcNAL(dmM+T!1qoBrc z_LfH>LTI;XQ|*r8haaiV_1IFgNzwz-6vl;ya)idnk3zr6;51lakuqFb13BeV5U(hn zfVwh$Hp+3OUc9TfcQTVzPh^EU6*2Jz1btxdJ@5*O%VgHFX*o;qFE)j3Ascb3;f(L8 z&(AY6UtSy6O}~B%muvVczfLRnC8w-S__zhZbTKL*6=(3-q7_;o1!g!s!hwiPk^4K* zdh+t}1!-M)d|YN*JwsmE-dcJ7erk&hbYi5c&$_|BCbz{dhDz7fVilIwr|IbpMp1VY z5}^z{);utTVeMKNxvWl1hE%5D4ezP+!t+R=olq@X7K zkQLpy_w(c=U?9i)PWXgINYsHe@L)q8J16HBxbS8EJbngH=-)D5U9XCN#Iw7psYyPW zr?ZVU|MvZyof(|ZvZ5R2H>bQ16Drt=ZoxjLW@hk~!rglXkpjD(>}g~F=uk6vt_YCxt|`f2{SLoQQ9}&VTFH~T2TJ4P*7TSwftC9QoOCcfJ>>D_YkaP3t}0_w}(e`9sAO>fTs6 zb+$%S&8YL4l2c;-kR;~lu2}#29St6ZU~$5*paEjdV0aUv_zZA?2F-k`u@NZ@ZvRRW zK%ybj70}EW9UOy^W@wg$pE|-!dWivo?mjmisvA0PD>3s*zcQzpwiq~_Bkv)(opJoOH{NkP-ncQD>%cY3S;QTxK*9{* z-`gQ=a3)MDdgbpIHjc65rl1bsT>G5ep-m#2y>vLN4eCegj!N>uCdh7}Q3*jQdXY9dU0I+_CE_-{R9>i4Pn# zR`5a9>fnKtpLkSiIYkF>6Q@{dM$Li?1XDiNob=PDPZLVCB3_hScMBF8+RhY3 zG?;cjrdux^=crLE6W}6ns{g>4+Yy1B7I|?38x!YP|FK;aW;w2>M{EYPf>pI#>HNK1 zZuCBgY;+yH9IVm;w$GSv@r1166Rt+8rn0)MLTuL24$yoHh_gB9#RUL@KZCMe7oBi* z09IV|*eL6YYN$KYMu*r&C=FusIhqu{LrUu<6fBpRb?NC)qYqE@an|{}5E_!Wv|*w? zu=D-<`WGjCJ|e)!mo{coMD4xw(TFxXqAl|CsQRqTPj zzP=Xh3%>DgmYAS@T6LZvt+vrSNG!1fKBFUdTRyaa9 z`T3>$bdQeq=?t43neL%{0o8o{#tE~<&@?V6%NQ1FzHT2!u&pbF^ry0Jjw5^0JK8Ka zb23Dh<4iWzEIiivH17JGbxHQcd(Lh>-;zmwq3GirLO87p*B2i*+>a<-GjoXCxVb+i zwz3NK1={W5OC@V%;Sn3z6!(Rl)YPH}K5%Lgb>FqM{d#8s8Kb807rtAKZ~gTsJ9(Vt zaXgjQsAS&(uJ`$A$Es8o23MJAuI4MH7#eg$Q(k+9X-t; zjVW)k77pt3u9nnbZ0dJgLxV$k4}ssY7@(D_JX*VvWI9La^z4;52{Q~ek#+A@#wGg_ zm-_mlqg&*qzcBk^Ls{iRA{93!S;^`jS&$m)k5pgVJPoD}OBI{lTig%1A|7IM#Rc-s zE>Oq(Dgv%nk@|LE#hLrkde%gIooP#g@}dCojgpEc%htWNpJobzb>1(GjMw`WbcR1( zIPQcCo!-8urN;O5FJ%YRqec=5?@JdTC&k@=_&TOlXht~C97izGNEFRG$>nPnnr3Ey zM5oB0#b|E31HU5Qy6ufJOE0La(*%ZdTHOs*oXu6$UW-1JS1T?&#+2)o8=rd;wflaS z-@I=cAvAZXrA*9_ti|S#1vTmgr&ZEAj!Lkkq-3=7eS2JPW@C8_jCFTE`ZW(nU=R6_ zz*O+9G-^>;d|6PU`Ab4kU$WU*2OiaP=rJ8d`GXeod*etVjm6$pG9IWcFz>5kw_SUB zdrM;18bc7e?~#d^Ir)-H7rnV+k#nnSMN!G>?duEVO<&Fvu3=rsdJ0Q}m@9wLbf`d~ zGJCLWTjX&=<}P3vKKbcWkiOQz-5Tw-$52iv7_N;DQX*OkNE$GK zm-@1Y-b`?B7&-u&9G4EGK>n6IUcXv3kE+o*F2lPw-I(7=K0(+KzL}e?2{D)??+u-^ zC|?;vg0)c_yr`-7_E8jZ9%^^;%n77ExHsEF>se3itTKpdd78UlEj&Q5v$185{c*FN zoXUgLOU_i&GI4~Y=Us9(O>RM*0mq&e9pzeoV;M1JoEIewS*cA+QvV11+O?j=gXczh z7g;F7#Hcj9)^f)p%$3GE$xEfSEwUl1s5COSTlcB!kY1Li`e=0AdA&qL&cbdf%KQqU zD7Mm@8kHx>xyJG9E{X9xN>7oK_t!&Cd-N?m&)HS%>PaU+DLI$8^DuFni6W+Hk(a_@ zrkLHKo0aYer{6%3X2CA&MDc>c*RZrs&dx2|i{-iF)1AIvFeDbKp%xj* zhcdJ@UQXcIlD; z==X%2N7!x><2_tmW+XOgkEZjTbu9X|9=6qT#U|k=>>{J(W?D(Mdd>Z3-UWq+WbUn4Gk(?hDe=i%sqyKCL|R%#5lfRK#yTey;jp)VBBS z_j^3Gi|Q(z&t7r<7~^~|X^n{@3Ti79%CG{_(kmbGrh@|lo-A3{Pa4WTy1nn>QhUEc zT@Efqy#Cs54c#8=LwU~C6gP|ay{RuDb2#oZ=s*~-5i4&_^Bdaq*)3q;oOGVdpQW{G zy^e{vzmJ_xomk1nw9~hO3@M9s9Aef&Mi0`Vgaid`*&g3UeF4Sa(C~V0;#i2{+k^y0 z0kd+*onzF`?ynVKVLo}JIZ;uf@I zOWGwDeeteOkCTpWl~!>|C#+pFh>c`=CoB9o@^xd`GvVTF{j0y-HfxvmEWHUS%wvd5 zX^$f{=3HmrvZca8wpy=09AlbwMn-hkl2U;s8_GFnw3_h%`nKFF^dTFED+Gxv_AxH| zV_2@GUl-L@V#Ak>Gv2|~+SD(eC)^P=INsy%v~(WQ>NYxhq8t=}L;*2w#c#L9@j4IG zAo<9Itnb=+WW^xb0=}mzpcel0_Kh*s%BQNh%XX%#_nt0JNv#=LkKskv!loM@;P_Mv zFpH&h`6ElKt4>R16?me%)=(sK>&A)PmZp6ZER64Dbw;(q@%doe(|c~HX*$5=M?}%n zJ~33TN-UjnKXXKA8ju_t>5)uV!OFgVadfG-)G=>hEU4^wU|&avzSgOs^2S99 z7QKB1EbV=A%ueDb=UYGroRf1=~fB>cc-QP!u-Na!PSo(5i%9&wJn{|pp{Mh^E7DopT-ck<@gVLKf5U}?L2t~ig}ED*L?lJ? z&Ty7v&y_Ys`+>qs^l5%NoyCN;U(C<)8XL!?nk+`C9eD?xFvN!eV5&xjhtQdvG`GT! zhwCp6E-K)3aArIvOXHt3-txA}Q(U~Qq|1!^V!`!NHHLEsvM{V0zZ44mRd2ujUwq$-%rWU5pO1jSH=TbC{W8 z$L%Gp0_-O@iCdI7Mz$r=5t)H{M8Zp5J=Qg#7FxVi#rZeC2IRL5Ryw~>8)M=?W3$xC zAUYwR&Z6joCHr|y*fb)*1iH@9+xd7Nb85ON+UZb$lfo8>-@v~toVl#)K;&X{@updO zlldKcr!tW>{^41{PNFu)_FSU)7YJhm3*Eq=DJHytR?b zY+Uud2JzORd-jjr%Oa%oe2#1sYoX3rcWV>yIpG8PY$@sKGJKp{CA&*xEEvf1>^dHn zKRCq6C)8+`N#k#zFL#8Wa)Koy@_9yvEUCWsc9nvZH=?#j<|(UZ7uR!kegg`%_R?<= z_>VMlBDh3Flc=rYH7cV)T5IypPwPbDtq=|4n26IB{YcGwx!&1$q`Ns^+UqtaFRhN4 z)cuXe))kkp1x%h_v%<0Sk?}JdI>&gIEa3w=9cMm0Ej%M2TKU{;AFqC`|G0*^C7f(s5bELFS+ZnJ$znAta4`ABO4dP_bp)=B$=g*#nq#Xf?G$@FA zJ38_p(1Q~7JN&a?uD2&9us!hhEeC`{_fb6bNpN3Ha}Q}90RR%ZewPAvQK7)HC|k>} zQ;C@E3*BcYXrp5=Nr(MM08=KB3_uu=-fv$#Iu|8t>j&F1=1xRrN>9f@!!yn@5)Ki< zuZ z)|_f`U6-dd>pE#CWzF^#2s8U(HN#8sg1p*Y1n z(Gj~q;V)oI_m*cyyV}*JSV*9h38J;=Q|B9x&DIgh4ZlI;ut&4{yPk4a=Y*M5v#BqZ z{_8vUf6wt<){U=Wv24TE+CvGVpP(@v>>lh}k43ttO>{O;1A^j{HQU#9-`=q8gbx8^ z0PWPyGwa4(dxwHa4MW&atW31M`$WL*a)>ricoc+r`!Sd^fEokL*i^wV0{{EPukxP{ zlV^Ou41vJsYhfHQw?1{kDgFAhv@~hAVwQ27rNn8uta|J@P^+{#8EbO$rZ2u8;t@^* z6@^I;8-YV z6UvhPpwy7)a$@?5Zj@1Wq2q{`g{f&rti%@1L*x$m3fCU`14JA|yXXAQ4i!_mP4fjq zQkW&V%SS(JfJ5Ryggt=f2;6LOD`1y3rvm%TXUOU6TdM($0oq&(BWbsW%|n;xUXfvk z>K|g^jI`59C4D=3UV&R?dr_!SMI3o?34X~P?6Sqe?lt^?HDkWB=%22)yT9 zU7`^R$wck+QrNy;H2YAf;ii9izs`cax-+Me=?A+FV>&Vimew0Mos-{o=H)6yo2k_w zph01JNw~6af59+0D&T|nV@J5;^SP=Zpcc&Pd?QKAg22yMF2F} z9e3y5HS=9(JZIWLP*i&@C+8z%Dlgvx0l!+i)*dXPqnc^7%=s+3QMtXZRjwmYeZgRT zrpHypxi>nEd1N%mYr#9evGG!#Os>j~ZCA;MSqjE;q{@FG-pkUiCu{knW4}EX&ul$Z>Xyu0$UdMJv+7eWHFyj}U_8qThFH4d3D>&Zv@5v~oV8TXQkfzh0uq#{*{xjT@p9E^s?e zKbL>XyJ5%ZvZ4f0rEOSvS4l@LANp;gnD(aR5r+yOB?3YWI3TB^>+PUYDIzDW<7b*7 zY?0H#q${J^3bKEA*b+N)X^1l#j%uRM@pECbs-6lUQ`MwB|eTwvynhiX! z$4~<=7TP`!iqD?sOD`|qR3BW8h{goCa9A&aJUso}@=)l?_9+K; zzu7V0&mG$5+0ZFrCDl6&s)04FH!LdH|fgs~T1j?V7DYacv zk2-ZKQ6+e0UY8B23raffyHHDq>=?U8#=+$P84@**QFD+`BP7iJu_DC%O|d3`qvTR} zVA-<6@W&Ewh%1|rWWZSFdhtW-h_qvUG!z!F|cWeF=)WQLucCbcp@|=>Ft1>qxXeefqSB#dW_H2+9XY zt>oH>RC`(-a--MM<+jFP^r5Sp%VICS4$~%(b{K{9E1;#Ns3jtTjbko7F%u6e0l*ij zTYcjt3QJ@O`yKl$5U7dYd60v~jZjNt9QOj~6wnth=`-YM7H}LpG1B@FYptzj16@B$ z%WTcebq?ki=FNC3U>&$lDDjkZEem^y3*qU@*!$?XQ#$K1lY+j2C>!zC*}=B`VnQv@KF-1tB|&J0}J9c ztp8e=!A2Wbiro8Tv=8u#9sSNY(Q<4 z1ov>8iyaIz-;KdQcgggqC7a{Jk&9fOS#U|JNjNwZo;qUMc0DSd4#ioqPIO=Pafbve z5Y6cTEExLxNX&45;0kSD9u@vh>rcxi`A9qFJAxR)ghtm!1|x0YBmjF5@(1oL3G+cL zR?rWPWW!g;CC{NJDcES~$0JBzV{RVvr@~^1X@<{q?*fB_74sW|Ijc2g`syq;CsJEN6-hw0&HZzv0Mbau!nuH*e{01q>+&> z*umfUC9kn4R9!p*3+u6Av2Oy0@$U$cYzV-26kYqTm)!pse*y_>0`mOZpLqTD@IRy0 zn7I9HfptE9UERw!ep^~;PhIL3Z#Re*kU$C+UUAvJD>h*4XKVNW?=Lpild1vCU6feQ z40bbJU~)tRi^}7QQbkE=BAM;(_Y-@74;>L6PC?!e`1`^p35h>P{NMQA zJqJ*cr__jW;{*0WtSD1mCX~#GLfbI#4x{tb3-`4`_qFBWKzXutkm81mao!?ebJLCL z$S47PP7)K~c@bG__#5yQP6KN7)*MXPVQR$bzAc1?F7rqJ@-GiPJUk$Saa4C(gqcgh zkLxRQb_d{5(SPSreW_58vmgVsu~NuWLOr2kdApuFmtS;i-9~K;aQ4ZGiFP_+NN^C1 zeEd8Z3^1L$eO{UYSjoB6}&Z z=DbQ~K=`ZlaCwmp;{APTf?Z*sRnMgN8)^l4c)X9e#6TBjUg{z*J((jMznPHQm@Y`F zBMy8ylBhdK5ZW7d@V5x`Q=Z*Q^f}ZQnBf(%`dH)ctU{j&LpSYg$OM}j5gBjGHSi5c zuv0!6&YgC2^OLmLyQBWEzQ5~-wb9rW=^8MoXdnWCR;!an6{$zLq+T`KkFdWq40b5o za~PHVR(RB-njyn3A4`4)-6hDmv1z36U?=PTzq8tV_M?D+5Wpa0q<}WFwCrv_1+HIE zs_j%;M&>B-Hi7VvUEuA@=_&5k{*OmIFdU5tuy?{ME_36lWw1g^)!fWGsoZ5bflut6 zd0>79s$Whv?N_PAna4W^qhBi=LvODSeVeiEbqy7A*(BxPj#Ka5*#9J$D}c0`Erwzv zpI#7}Vzw43%fBGFY3pw0j{v|D3oABSY+u5J0ytl6WV>&CmTBDu)=x0d2h&-xEZxu5 z;L2RDb(u)QI{`}=CK77~CP7Mm6znV%Mn$jFO zv@!=9jE@XF@I;O)#0AxfSdU<78q6VG1Oe_x&&OecB@y__G^Nu8ea+ztqmI!i|MDLP z@+Ky1aJ)6q9U*@uf`mM8VL-X>Arw1LEFsX`Dpk2)im6mZFOtWOdmyVl5Std>ZNFe6 za7{=2-QU_{)<2_=AS|FdOAnT9GjKql!DrMlqLDib%m{55mHbQu56d3! z*CcA5&!r=6@(T;M7P8$tz1Fp003xp$hPscrH_{@dn3Q#BX2@Ejrs(nqPhed{RRWnB zOoN*~fSFb|4tJCEOyl>vTBQ_qg<3+Iyq-6W-t{)T;hKk5m|wVDI#L68%K}{}n3Lvi zk#K!MxRKOsry*^yuRzj`HZ|i0<><>0))HThtLeS}j$~#XW=>w8X^*}MW`3R?#yTG$ z-);A*rAArh|BCYXGLhSxwYix^G3TwlEv+SEuye2?gD*HV#^=I#C&^#Ec#o%J?*Q3c zn#uLLv`Bn>Jd-OZz!+E{rmG92tuXpg2IAv#7BG++X+!D2%HrmdY?xHlIa=}*6TbNl>rZWNpW44u33$b1Bx^t@pZ#`# z4m>xE^_c0!uC?6r77@Cxzag2d!RRz+W|K?RS{>3tD-Bg#T}p|pHEwKFwfMy z<1sL0bK#92#XyzOje!pLoHX-laqSSh7){k%re@kUlPTFNUbUR6s)OZX;R8{do|-M4 zP_rYc6#WR8#Do<4iv)%n_;WTyQrqs#d2m!sYq?7OV3*gsqr`goBLOaFHQ z`eXD*@Fu&)V2$|3S_lF`dB;BCBnis7C!Vlk3Q%-V8WzH^2G#cI9pO(Z3TBtT3`1FF z#C0_n)vlUr(16$utSvkw(r*omZAvg+w3Mp+aVBz5R~SFU*}QERlS%^2Sx4ss%)Gs? zsC(PS{PBHb>V`tYi>vAf*Np33mriDPM%xDVz2H#qFVOb!TwUVd)uq;Hq_1>;L;Ymh z#JvF2ycyJy(s zcl_(R-|#I6sZtSqG-0s@+tlQI=v&3MO7W{hK1|+y>W+>pkcf>Ckm=j4`7|+CFd-gm zOs?{N4Fw>~O*GU4QgKTvm!@G4(@aU#l5O1h0W7w9@IwG)C?oS? zEWKCWJms@eWlq*;UHkZzevw;E{ikV#FWArS#?4r?_qd*5s4aVRurm1sR{U>7wzMAf zM_3gD{Bxd=huD=wZ4;Yeh`p$yXSXPk`C>fMo{)cXRWR&L%vn=J_+n1dmw29z&#aB^ zGRgNtPWKR71kUxAw^TI&cO{A`Ed+Xa0OAtwx`=yaa&VX*O*uJplfJZVG$}WOF5aeQ zwJ#!8SMh_^j`S>w@I04?cFL*y7G^B9B8mq_-WMX*;ekwXQC3c_VscL&qr@iNuGQMf{LG*M+a<|h;To2D)k;43_<+mLd)+Y8Yqz)V1pQP;R{?=Adutk0=L#o z(Qp7<-~|N*=ee83kQ$-knL)!o(PbTwV-So9-4L&X%N;J$E7EzPqlP?k(#;z?A0B@6 zBa0D6a{%))mX`5pR@MMuC@Y$_c6M-i*da8gLE!q?O`NK=!H{beeYk!;$KpR>Kb zOz0duAiB#;EmmHLp|kSlq8i17(};a#(^$&`!A=`x*0Y8R+vchH(2HjCV(B-}GAx$9 z@>E|p78>)%N(>&@BUz)i&@U)_2b9oXczBOnEMDYOC3F;2xhMLKHD4H^_vug;^5W5( z(~wo?QO_5=6Le0I=W?{i(S|h2gK8ko`r8#GJ+M)YHRnGTM(cYHnqGwMo2%c@>x}xQ1!sB`C2{pu<++A zaxFE_K4ccd+=;y;H_GaUE9-u5ZQO+n9<}$lDU^8*J;j_|n{~OsyW*FxB>=zQ$H({7wAxtoZ6dEoHk+C^T559+(@4+aXk-g@uc&DPOpG60Sg&o zdq~`3vgHjh^TZ{9p-NtE?p5jF{2x1x58b$>5xQmG{q9||d!l{sXrwj=GjjAR6ot$I zd*sfANDJ{n(?`745+nEWK9wA6py31Tm7ONaDK;VM77U$EOlQrz;#kfu(9ss=JJ>Be zp6VW^*-X1qkNs3Jn>tjJ^Ln!xh4RT`5Anr5;AyROICxWP#O*MSRNAgCoog(|It#>4WUy$w5Ldqvg$G?BRJksW~eBNK$^yut%O-RAa0(6 zf7M59T^H&6(~iP*6JggF0vxhin}d%`gr4AKeSQmk>^hiIFzNl8-GoDiTnsyKYhH2d zm?!ue24CPuyN$AI-?X%htb_`2;&MIQBv;7ZNY^}d7O*?1Fh=M&*i|?)Q#f8L`9)0m zD6?M9PD)y34E@`zi>zotx&sTezV+j=Bc$x(M{-eTvOPO)Qx=@F%Ggds5xm~q_|@yT z8m%2gMt#I>nPw=EQMFnrY1l>hJAn3c49f2~x|auq+<}XW_Idv8gM*d|64Vx$si`T% zu)0~($;ru<7lBj;w>FoISRkoeL|_lnI=Cv3lJnZHgHVD@_Z5DoNB{|^VePF2ZRQ;Y zj*i9nc8xO&U+S2;uTa1K-r?K}1u!Tmd3bDF(RK#y8e$VnkU`t`6?ENJTw(h8RnR!X zEUP3CEH;GhV?U8y@p%=)|GwLJOHDV+OEA;A=|WjuQuW40`Uc#!<}C{gEt-pFm@R#Q zKyDbQODL&w9fBTQz#UH|Yt##O6&oG8bus$~cZ0tuRX>qb{~xWBAK<^eai z7$dAS>);1A=(aWu;YroPnmIYgm;zCgKr#{VS66~jC~a*B$7{$KJe0(l9OJEHp|AwKK>fED zs4ama3M)TP`45bV3k|~=R*=^Lm8?iOaf0ZP}XS5p;rmZ1K@u;fg^t^5rX z%E71?*L+Ah8JvA7rAm4oGiws~vPD0JBoN>b4J418@N- zWWBDfxC`1u@{zLYfVMmzf>ODgMI7qrm3Ok7nQD1bGatAVkJA;W2x}0?p6HGI2*qXWYOL@|-k$Q`>VPidFqMX1_OwRLpx=+~03NV*Ku4RSf`JA(G>WN`ZY zfq&plA_HG5U(M#M!=#dN*I7#DkCz?ZBpINS=V&Qx-(za_EtQbQwo&;y za$ZqlnT$;{Lug9UVy+*3WRIlFfornArCOh`JNN!7w(dVGz3=(Z$u=ud#{XDvNghDG z`Ie31AOm(FfADGUv-_tMj(ekCNYZ{6UNUV0VcoPEJ`gdTlde1^TR~mkp zjfojqf+WBNEa}3<3e9k6cd!GsncZ~5)LiIL&Zi(;51)LRS#;j=i(LH6BqLcx#XMG) z@%=FynhQ45wywB$nbGf#Z4Vq3u6!TyW<`;BoDmf-#7IcrH=hGedlzsq_{(*X1%lBz z6=`24=MDAJTGaa|`(Bif$Kpvdfcw+?yjNjx>@25)V9U+}?6f7l7Ht)&91fnw&xT32 zc3P&jJX7T*0!KnISY;V?MDCWl7cSS!rhOKoa^yW~1SssE`x!sBMW4G|F> zW0Od<{5;cSWa37p4Ndj_Ky@5j7t z`}(h_Gvz-j*t;kzASa9|+SEQ`V`sNvPWFA!6v@f|0A|`RZ6c(fl@3Wveq*=oV{VoA z@489@e$QtC~?Z+(a|ZtDS3-}_%$7=92Nsi zy^@}!*+*hNudwD;o`mjrWadCFr}Y}?%96FCyz?Co=f`UD!is*#gp zZ`!>XM&-Au z8BKXILlxH(A^OEO$RT1Vg6^a-g~ekcf||b}D%6k@#;H!Vfz} zMtO*XUN~50^F)P%on1WKRIF&2W2^wiv)jbJZU*JD$G8)C@oP)r!NY1b(RVieW{Bp^ni&=0GG#C79CWhJ|1 zmMW@W6aMBET$CFRA zX;jqGwda+Ul?#kp8EMXRi$26)FfUZ|pBTGK&&50$EzjnP6EwAQjojd?@$lFT=#2B( z?SJhbwc4M@)IDGBObQ#@G_V-ORqW4W+k>3fff&Vh}eW&LB_5RE6AL)ly!JlAk zKaIKn_r-tO>iS<>>Q-cE3A$e`F!QlR>eu%N_UPZZV)I|V6oFo$1Kw&E18Vq3YWTNz z4M58R2qJO`g6>7Nsin3pV@#EvgZdW0xh_+P>49|z}O#6kXdzLey=Ovg8>%s*H9KF{y@dct7P-ThKOcswv;74vWU zeg+5R=zk|WfrMd_%kTaTKzB4l=i`SzDARzFe@N=j7i*u|PO4phTx3wU;Qh(#L})Jc zC!@~&QF{hBP>=sjB_*L;SyKt@*YkUrL3%6b5wtkrUCRF(MV<4?L-1bbQf9#F^z#1S zcKp9z!Q(+n%R|N=*FQPK$ANB|H99JCn4E;_fH=M7KJ2<rNbz=?FzX?7-du5>V`}1CI9G(DNd{b@^N>3CY&H z4CcaheKFWCzlqh||Idpo)ldu_7w|~e-P;B|K5fw40Udj#>(}e$p@#ybAV^YMK>{G* z(vxOlHCF(loA-tIU_G7R-{$YF%?M(Fz`BL7Dd8==Z^xiepr#5k#ng1)uXOKUFYUM- za>sNB)xV)dowhi-2D=jUqMz{}^TVp%N8U?P&u<6gPk!o6wQ`r@(+2R;p%s)p5R?ex z7TQ~@-N23WSOHVGYWSUQAohe1S*xh%5Z>ub$xJ!$aX!P+M;aQK*99_dK|lGGQ46gm z+5ogO5oZLvB;)(%Y9MX{Y$1!Kp(^jy)839!HNp;(NBSEw3!y~;EkXS(Huk;dx-AST1$lfcK!05KDTii)~wp-n@3?wA-T-O$% zo&Nc9%&B$g#25{fI=*_*OvW|iMWYSP7cX9U%{W^q7+f=pq zOVQGRvtmU16A>_k2~wXL(PDC6e<7St6SlyqUA_)f$4FG+jfNR+G|c+N*VamDsxVqh z*E}NZF9GY->e5fAbJf0Ro!@?d4 zD(ld-nmkENiFol0a5ay#zHt=)ZpM?Hh-L*va#_vG#ZU9R-sS(C}m(77rqgn5Lk{TgYnks*kEUv(t@OBm@axD!LE!#fvH7sG z5sKBQsJ|Yd!^8WbqvsJiR0Btwt~};bspA|-n%m{QhAl%=w0;u?GGPleXY!qe4*HHA zI}%+NqsbGX0R*kmckTIgOz!yW8Q%#aQU*fWE?*=q&sOrRqYnt8DfLx~CJ4|eDgnc$ z=AxjI3g|bEv7*jd<$xq#>N%W0w0vT%9OlqV4dt$DQ_=TwMHZ_b;n2y#>7YKjQGL{N zaiWMbxxOsX9R#hTVz;+mED~xvo$`0y^}ClKkOS^54GHE(^@#|Rv0qjmu+HJ?`8TJ5 zNWX`{t`sIb$GTLsT|52Zb@OpT)8-U?mf7ekv{bL9hxwb~i`pq}TC_g6{t0`|Uvnt6 z1c{SIZL7FeHzSMv1U1j(=g+4C-Pco!8~QZ~V-0U_-nzv-9D)A=)C4{<7l`m8A|gh@ z>X_zAQ3l+8exOS*BQ1#F5sB}{c3pbE;?B^V!BB*rr z+xMA!sOLEXq7N}^lp`2r1yKd0-@R#?TN2WGpp9Ol^1&}AcrOFW=LI|7b_t0p3##0D z7JkBK=RnSjyU-0NqeSlL3l4MJ&09lU4G#wS6mZnL zNMFps*0!gqbGbt>$Az<1^q7nvOu?JovX+Q^h$ZNp3Qe`Hd3I4k zQ#7O`Uf`pe#bQ8lN4(~vQ_QlHCNUy6In^ht73H5L5Ul>t;Du8=547RbFZ8nR@d@hw$mo=CNI!!E{tW0B6w4ZX zvfc$<%T1VQnCwpmfL@Xi!mKPwJ4p=2PdB4liTDHh`%%+-0uW_%^TK{3(meA9Bv;a& z2YQg(`je;G`^_Dhor&8rv-84xtu=xRWm(ttd}HSGO-5KrB+ zPhc@mI8OL!u?(MtG}IW$e=(h?#avZZUaS+_Y^OdF`x2NMz^Fl7bb__34h5aI#c{5z z!D(`KcDCacT6&}nA;!i+n^NGT@}@PWMt92Zp43;SuM2mg`n~=c27i1AP%)a~yq94D z!p_z<>Ox9xE;9DO+ceIE8XYnV_s0uE!u{YczVJ)3N=luOwp5t+@on^F=jF`-a>>2( z6AUI;f_~zK!W*u@g@f@KqoMzYxwnq0vRnH`F;Nk48H5PRLJ_6AMP&g#QX(bd0%?(w zZctHJQi@8KfPi#&Du{GC>lriqt2z?XONr zw@B?dYB=HEeKK#~;t3E);dFA&vwJ8s++Mf%WOe(ioeCSAb+3P&_0!_IJVtFoay_fW z@_B_H91oCru{!7lS}tcOFH7S^-1_C%=sn514^X5cLUTRf5S4knf*CPsgDS*m@%59f zCSWe;4)wX5cR(z4axV|agB0ZcBEUGW7&(rc&d2NxU>?$jh>GZ}WziPg><0?H>?#;G)}Yb4XgPFXLE^Z%;%N@_F-xEe zF9vj)UOF%Zk8S%*VPlMdIsZalvwIbRnl#;Mh!(a&j&rtskm>8H6H?oqh_5|Tq}Loc zzuk|Yl)rfU;WrSxI*R-GDmC53okTDPPjZ$S8KBWD7QbwVM0Jl|{G{LeH{QoSpMC#~ zH=_sCNW(~F02NI%RA}{bblfDluLnH|)-G~U7wz@!Z9${dx3>exjM2R1{S$f+DT_90 zjP$ckEp9_rmcrgJdgbLkV>b~8KfR2P#5 zR7%%dK^c^)Dt~i;k^m2n_QKD4{|ze>Aqfg~tC_4Q;}x#Bz2TQ5)JQD=39jxB>(~bP zg#j>b_&);0IUmHV4XX*PpiVJs0NJK)SePhM(M^b5L{tKw+-$C1y&3}Ocy7Vm{ZmNM zezyHqR`Ezl&w6<)=SQqeJ#HPqWdq|45d(rWU8{M0J4{cWKg?vbhQv^!_vR8*{?|IP zM(gGsAQ_K@9hl(0PIQy^bj_FlsIbY08Xuxi&oCYf%7M5e?v%eCr<%ZTF$CHiDHIFH z^0Lms!Gua|y=bSa2=UPow6D1|1TKIM;4e5+fNXSl&oAe^`O&T*B(n{;YEGSe|F7__ zPvum>UY}6uZ#Hj|Q~ic;S~IW~Ths>2=5LVKc8h_C)Ua{W0f zP%4V?+Cxq*$5v)i(i{?4sPBX%Z8LR^8ajDth-(IpsEk%iZA8ag0O*M=ga$pD77FTt zNJj_=tM+(|&-=^hsckqJQ!4$Z@$e+>{j2lWcyN{hjehe9&M{mTr$qd6zVKB2B*i0$ zuVn=Pcd!3CD>d{pPv747nJ(DMB0rfQI--<~CF&QZWWESYN~YuQ&^JRmm}JHf}1 zTehAci8)y2`Rl2L>rtfZe1H7ke})1prnI7oRKehJ&%4Q~rMGVyd?#lf8{FfwearO1 zSj!-~&~u-?eT?9%f_N_!s~`_c{Rq+P5P06#@|gU}*)@i{j0EN~A2fg2Xc2z!LvqUX zik~y7BgnP^Vo;EROqV}jyf<}c?PF{vnM6ooa#WarrobZwAryXA+xjF`m4 zOhW_tmCnvw$u2%yVry>qh7HYz#>f{hPS8+-5-cd&(+Hgr*Bkz7@TjAsODAw4#MwW0 znMFjjl$E>8XePxI7t?yCm!4|#N~p>)oij^Ep9cLhVjaFC@x4LU{8vVGH`Yxq19Z4b zwr&zhX<-3li)r*kcHPI0xcj-vuW&Az-(Ki=107zydpHS+{Y=|eJaPAtCXM~CngsJ*saDhJ&V*8QlI59_~uG4OT& zHo*J73>VN+vAqM5CB$aj)s0~S8{rM{X99DpLk}F_kE_|Q+jRBueLmukMNbxuYKAo$TpNZqBmW^rHEAKe6#;BW;aJXMG{JmLku(`Rj}` zUZnapH%|pku)fnKz9y?<&=FeoVO>mG$iG+8)U1@%RyL`ZM_G(*+0&&p{c0W?@mj@_LCmXO+XfUX(~^X8a;BD!QRTH4YtJn+<>~}inkx;o zIkp4tdnb&>@maP>wt0PkGeK&LN!OuX%SbwQ{ww>GMIZ%#Ta?hbZI{Y)*Ur^yx64K| zi9Q(wCiz*;7MPsZoD;6OtIOt=wt-xeO>S?79({iC>i`04_-_Nsax&k;ddoC}!)B_T zGJ?(GO4_i18Nr#ya7@vpHTN4Hv)#M(Sj>FB6h!H+bP*lcwBg1YaI?(ecyhwkvhuXZ z?QOXkgW|=%R$xl~cP|IDwsmE*sLzdTj8F77Vb32^V{arqOF3@n7p9>*QJ76rNL?mU zx*SWCE;nA@PtcZn*=7hovNKM2#H<`;yf{5M)1h+9XyNPG>{OrR<^8;cHOB6JonIYk z2i=!hDes####)$)TN;c82OPD1N1BN#%1FznbaudKQB6JWOdvld z-~Vx_BhI4~GXi7QYR^)ZtMZ*Sx3nO1cJhhM`P}r1mRX;-pOKB_O=m~4+2_b6W^l1lZk|N1Vc+a!6yycaw z4@g&ciNV+hXFPl7-st<+x$#8Pv>TFoI;Af~XU>ockCBb=RLwNYj&V&|-;MFPy~lSs zGAlpHJcVfFz0?yEm&DwTU97vwgX^lD zv-e6t?kOjpX60`pra<1i{Knadyfw5JT+1q$><@+^BF zKdi$)J)S_hT!c>gMox-K>(Lu_K8YHkYi0gAt*7dBEx!r>$^6xCXIBqL-Y3D&a(pYO zRlinTA`s5@dgOt0%jL1lc>m=>;rb$+j^T>lJw?efz=E0;d{y^Z3e6`zOMJ$7GX4<# zWR}H@^h{ssEf+jIFTj>jAG%7Yn!U)ye2ip!j9_enhDhFQz2db8uHlT1l#_OP;-^!) zjbnZy4@%e>u(Z#W{pqRW>&00`72a30bcUJ)muPq3$Tl*(CYFxat19!Pi-pQ*)#4LA zaBE>`?MQCeIjs$xOL)ZmQ^n7G^v%S42Lm(@vv(bdv6~~+{ z*Vc?E{J{pb%Epxmt#Y?-Xh(IyUD!Z;B@->5(<1fuBZPxDfwgheAFoG-t=C~B&}dQL z>}6if4nFK=FaMI&aK-(%cWeCTrYYXjP=91@3b=Gvs!^7@$7o;m)!=@MwwF@jXFtZ2 zcw7~>UtZ>xUFG7FtdG}}E-^D;ne7PAU9+nid&vHXWOm}IKPl6eZooTzZ!@OUv-S)k z1){67yoFUPlG5MK@ib2+;oim8OavN}XIwWj_+|}LD~B#;e)UY;qhsOS>668zQf(<0 z2|3Y~RXVkVg55b5qMO})2T;K*l&h(s`vV;w**+oK!d332I4^CyJbL|?{T~wh>7L#c zDFx5u@xGD_@ZnIBP7x`!mUPlJt-r=>LNsZl9F;|K8I67_!)Y)nw_}hkTIh@dF3*e8 zg&e~=%|)kJDIIdBoI|Kh`z&Xq=E~xmwwhMDBXCDJ3`T=0C%;!i{CPIAE{$WA8~i;V zrjJtF`?tzf?Wa6iFJY1`xWoCB_fcQD#iab^<2e5WvdxI-wX%@I%9J&1D$dP-27f+o?uHZdPnP7VW_{()N}H8D~G1L3<^70Hpg9Wjo#R7 zY~Qnc*e)iwt${*$z56f03sXuR^GM3KWJfYC%WqGXiBDl_Mg#^%50@V(bhY&LWvKPe z)Ay%aujFlRAz1Ui2+6UQ6Kq!_sfi<~P|;IBu40sFQ?F*^I~y5Uhjtwzd0vsGm~OV_ zPkZh@;zW4a*cc7eWErY`)C zqbATI&~HCXul_VKy>`vOxeHbB{FB~2eqnquUpPgY>9>W0WM1P|KPLA^`7uWmi1VSD z^xFfa$XsL#urrJ+=H~L=DpRgUjyv6^Lq`?8XR_b)v3|TtT@xwU)biwI&f76hf!c76 zMy1P1I{e+kvdK8B$0J;G#pR%Mo~uG^A!e@slHzNYg`C)NOliXvoccYex0DE1^BVG| zW)2zJFIvqsiYafdpIb$paTG(Ne^c%vj|MOjo`d4bHO;FJg@Z0T>I4j4{}ymAZA9w~ zJw=zz-JJ%T4!fpzNe-{CCF%t zIoB956rdn@57h3~RqLs08CD7NO$|5QUw&C-zfeJbKd{><#{C)<%*gT+ zFHJRge@uGBS7IloojBK?Cc2hDIf*mGY%j(#GjJVRxT6L-XHu9T-Ncx#wy{fHB|YY8 z%ZC;1+6gErO0IAlG)Rk@It=d!6}pf0G-4fKD#Q#0!0SKZ$p$x$d8j~UP1GoyeY}IO}N9BKrQTvE3q{b zyka&lj@Ge_zSPO=eadDQYcw>y+?z~#t)}D-T78s&GR<*7ebe@sJvI9t&aX~*J+iK8 zIq^|!TYpW1&$)=*)>TUk1xhUKf@_#qY0l{LT$j8lZM{gUb}Z>N3f9acliu3F8XE0l zr%@=HU!RxTwcrYr2~vIFuRhKTOY?9VQV_U=P4zi|PF{e2C>Wb5)qx7!@*D@YVLWbj zepe`aTvsCWEKgEJYktTkZs|~PB^^=p>Kr(sOy3T@@#s`fa|@+Z8Gm=^wj|H$E$^V6*K%|#-PiZfc;4FR6QJ3EU*4yJdDxY0s_H3ay+6|k@m>74H$bc?!h z42rDsPrl9!WoYQOGz_A(OXa2($MwiWD=AUZ*m%<0H5OP*(Q;+@^UvM1%tkMas=ZDu zYi4{t!9A$Xz6_GkV%%*ENEtsB>^-tqDa@#2dv-L+(LXV3Sd9+VFxyf{NuR2pACgM4 ze*4QdO}HResu1SQwVlsPT9RrtYy0yx=395a1WAbHFBbPRSJ{YWz%q+s64EzSPfFZx znJu_(AFStOq(W$W;J}Q$m-NNScCuNN2&VMNuSNl*3ip}vrc*(#V=^6qXs}p_Zb_7a z8LZWww8graNQA*-4+GrnUoO5JtK;LvyHTITgEkqA(h8Cs6?X*s)@Xg?LpkBCZ+^L)Pcx9_h(_<^p*LxzFfjg_W?CWl8B;RDkN-)makQ(o} z{4O@x?>oQsh5HR%90x5#AX%MGcb@vTo>X;<jS=!oD8tCwulP zXe%3XO=Y1Ot-~D0VvHMGHd)a3PNfEi@jSYlu`yWutZ+5ca6@ z$OuT%8taG0z}m?8=iJZQe_iAaHfV8SYI@^(t^@XDT&C`w}ObHm&x4b}=2@)iL6r z6h6#9MN$I|+64QU979h#?|OD#o|A`gWKv#xTi0EAR@2t%%1$4?xw!GeHI*M5nrkIn z+zuBx8gIsTq>(Zt=q)G&>c~<^Vb1kNNH;znoSCfmSDE-mo}Xda^oB{0KOHyTwT`rO zT0=VEdrndG$Uxk;@S{EU^Sfp!{+)(`rkmD>lgn87l4^Um9D@ zgaw*2Z+<)HPv+lglHvL40gAPb@!->eik>5GNk8I?pSSZY+gY?8J;-^Fs<4_6Lt8~5k3RKix(_P*!ss~VpYpPA7&h*hzAmef6b3WXnxP05UG!m9O!$*pBd zwh-J@(psE8BN==p@1bgJTEzopPO-8;1)0Dc@xEuP8K%pJIjvV4J!T60y@?VtEp^0u z8t1jnq>*c5&T%v&5&VpoPUnO#El~(t6pi&+8_cpq+$Y_M?!d`3^7gLv3`ObJ-RohZ zr8nM1GrxD?sUH)-s6Lj~6JFkpX>O|B?j!N%gYk8vE z@MAAr@o5B%VX9wY?}I7xM}7E83`R3|Z(vG!!hd-MaGL;`yyJFPM}^-(v3lS3 zmn9Z4Fi3EREFrd6IGYQo9&+->m~(;bDBp|@-nkHu4%g0jn(7&x37Po-DAs%yQ}m> z(X9cxuWsz*JzmOh9nYt=zZdC!P*TLkRQ zw6*h3dwNGyRfonIAXTjFe<$ zw0&5Z;wF-PWil=qbsk&mjE(W^bS0=JENfOGc$~Ss%z=M9>>ZV?GQIt&HKg>BAVZp% z20FqGxPobwXY`K~!yRBGxID$ULE(|bg+kHY{^f;A1W1>`@b%8cx36((qx`6Epy4;` z?`Ygc96Tadx>K`Mz-qg;D<`d^sHme@ccX9ZSq9_Uv7YedSB@^STb6`Otr>OPG|g$O zrnLjjlSF;KBt(g}MM|bctF`qL&S#`fpN0!~m(8s;TQxQ$DLM3pcpq-LYhk8mW_q|zyATnEyo`<`JL7M}cicDU z#8_&lQ)+euoM_^bIpw z^hxFkJlf+>fd2_>_jmX!y(d~a&>-*bTAlN9!;Z7xZtR7SEDAW<4ehNN%-+|;o;>V- zve*C0Nm-Ac*<$IzcPX*ukDI}bZH{y;O`X|a9A7oL6OgnT&cGyZu0FK0t%Y`N9^2o1 zRkf$vTWR}=V{C-Q{ABzF@5tCtR}k{~lStLJ(x~k2lx*X^WxT!60+r_DC}h=M{bUjS3G;Q^&36Ojd_d1*1^_7Q zfJF%~cNPQ~F_3^+2~MF1#sJ&xU9eelem6NR?1oEO5e7X7?gPVgfK^c5+S)?8rqic> z-jn|kovqSCp^H4pZ9Tmy1WMDo+AJ#_c{c`3ZQE@5`1k;7UkF=m72x07tyzUyvo|pe zL2tXWUSTjfN%1#YY4nB|9BJx#u|j2!9w*4zvV0kDYHGGm%-WwQSrnY znSvC0QBu-t$T9m+tluH#Kh1XHs4w0*3owt+x7!We0#AQ4a(?eKCb0P}8SD%YT|fmB zz}u@jY>e=ob-~@^!IXaI1pGAng5+{tw;v!Ew-?3w=J9CpeiKYWmd4Ku>%>*VOIDGQ z35&1>S#F~L7r(CFpgkFZuz>32G!#W zU!UzSXWya4jC2r$8m=TVCf4mR0lppAkT8ycm@tRZ2z%=Qd6)^UceOL?6n; zD(mXrITqSBN4SB(n<8 z?F*SeOur6k5=`R#bU9xf`ZG($qfwpDb(a+bB{Qq;Sjso5G*t_~%M>UI3W^!UtGSw* z0EEs>9|C`XA|OdfFdefU4|4(ah!1Xj&c;cTlaB)_u(Z(=H^EPY*l}IBpo5y&612@g zKS9ygEe#~G^_ACm<{b9`2Gu%}S}ugH^dkk%3byTu7xr=b=+`Dd+0{dHzR^%S0W7VKbSK79gt zSXu(O>X&_%X$ctIzz5(BkXOA}&YVhR%G~jBV`*%PQlKQe4YtDu2x3>QpOO}6Xl}k( zw+trKZw>T7bxS@6)qvedfcLl3qFD7dRonUkISQLu-h0MCNsf}__Qrp!46<1^X-&iRHV`zl)W}tf z915^^sk9K+2SJmjwW7V9&pU(0irLmn+G!o5=DuU-DSenxL^C@L2m|2l;!n&bl#;(= z+}{5l8q5IP=%3x#+nb2I51Dg3Pl^SxMz9KirXHnTyBfpR+tzm3N$fRM0RYU0r3*gO zI97hRay`|rz}#x>tzkn?BO{~R zMf2VQX(?M=i~K0d>Gp+qF^g2&&(a-MX4yNh^XbY1JOxL|EuyijeyW2c2}a} zB~=v2eFecOH#$NJtaaU)z;PG;{My^#hpiJK7wF)ODlwc}C1HB-h)MM7nu+RZC6(5P zW#;A7{Cz>>h5RxIQD44c|lEhTQqK{wAxMde|?MG>=umvrWWe1;DUZxkYFzAn^IgiW383P*@6sIPDTec8oxd>VSzirDR&* zK!}?zO?dZ3g7Hr!7KO!E+yVX-2#%KBKr0y-F%>ISHq5!y(L(&dN(?*rzX;gghy z@bLcnGZp$rf;lmQlTVqpw*{rQay5-Qpt~8?U1Zn6KV18c;E}%mIf07V4xOo~shaXz zvzKTnDJf@T^!I6}=!95IZ`lRLd3=ijt`k6B}PTjDpdf~dI%wPxtLTgT-8g_$Usy+L_J$hayzF#-*^OGCW3 z+dn(uYwfeN^#ABPBT#^N&{wfkM5};RH3YQt;;bjD3UMRg8l7 zFAM-}#Gbh2PZ29DE-~>MsN%;DK)p-VSb;0S;YPQ%O|sGfntN`g{aw4WWl}PP5W6w{ zJ})2@;uBMGIBAba3$DoVs1v^G?g?@xvsP=j3wcietq}a=5OvUz*6+fVLHk8YVSy+Y z-|gtPl8+Y-;J=N27@|F_XcCYV2U@nZ{_Nj^O!(aOmH;vP@h9x^zif>vQ>q<}aghHA zDsdr3h-r{oz%L7tCRuUjLHZmJ&1JBxCPD3OgzhOB?f`-HQG{1P6)0+*v{nxl*hChZ zKwxt`0%|~o)CZOhJW?~ z`z}X29v2r8`HIv=^t?99;}8%1XM*w%5s(1;m~kM}*AXKCTMWcTHRt_xLN*}Jo_h2U zL!#Ufvc|`g}IapOnpHqHD^b%ptDzVjP4eJJ|TMn0dfnXF!>y#}IOi;@9N zPT^TS1@!(kY`#?rZzP+<>`0+R_;r-=TyFvVn-x9FW&&;8{Hv#4#L(zdk4*JZL+-vW}jf z9fXCNP6KRVu$jD<{>ZDV*O?Oa6~gff_=_Q3Yx3(w2-K99D z1;Kl$&Z;d-0FET|&rEe_wvR`ZR6?>DG&bKU?e>3m0!NYNON%U!Oc8pmvL+!hEMsSe zo>rG8X+`-PAX#>RdxyY6>8VsIV-W3RyqA34XekJYKM4s5v!@W&qLxv)@WEBlXXx;F z1*%&i9|R<=&B(njTR|{k#^!P?id3&&UtH{gNzW*!_ZYgU3g1&DfD3KY;fkkQTskG}~>|E({9v9l!N)x9x#3(4U}{y+Ii$Tye&1D&4x zqLlIu(1q+0C=qLN|cdIp{8+qv*%KR7z z0^yN?jOUMO9!!mYse)9la9`wvz`JwwC^6odetdmRbV$m>T{eD0D-^+>`!^khy z&G4Y?z=38hf|G`)@sl|AyZ3gsuS_WTNCi`$X=f&V7UM4N3arSquq?@Po# zJ?k;dI_>HkG0NJcaL1oDH1NWNS6wm}@l zbLaeX|KZgj`h9?jxU>9L5luvxU(MnyagzjQ`)~E2`I6T= z4X@=ued#B~48H0&UFvE48Q1{=%YM&!bQ?bwPxFGVM@ikmy#{IdfBg9lT>%Li^dfAa zZOra?^i{kMNB$7>5WT*q7GI`emHeNBxg`8eVxec}cOD+XJH7AEF9!u4o-e^ulM#o( zAk_WP;@1wz`|(_VC{z7@!v1gQp$NR^hODFmMxuaf?nsx1t@4w#g z=edJBrQ}PcM_h<+qTlmd(5C+9vyl<*nO2^WZ&M7~5?YbQBNO~(k*_iRh_U+Sch0@( zSu_Nrb+Us`!+-WnPmikI7m>%Vv@~6w2qn{kFWjEu=5&+Po4}Qm8Yy2C{UtEQoigDi zcse2`bzqwXP^PkJ-ls=BU*Eu^yZo@+Ca!U=i)pKH#K7(1|3XyK)dnl(=y$+)k3`kji?+0A%eB_P9hCrU@!dl*)cOBd zi-!#D&10t7NpsgNr^+JJE>EeKoH&CD7OT4GDwC2ad*1Tl2cvJU4436PYQ!@hL<(QJ zh&|D!h%E}su`XGWpTZYbpSj65$TNJdF0oL~NT;gPHO)L`0EfeAtYwN^`9V;u3djWm zcrYrWD7kW95!PEYOhcNe+|@!2A+Fj3Mx13a++%*fBbHrYae z4`eL9_$3q#&7j{=jPLkm`B+o~BW_WL4_%pLR%%>HRacPE+m&h9lv!IVXtQpUOQAiH zDtzh;>YLP2%biz2jf|kvT~L|oT^QtLJ1z?zk1@Ul_w4? zSOZQJ;MO^b|IZWrkb&pjGJ$zHyMghh^Rs8OD^2ERbgrPta(p?1i7;4BKK$!oRhj}v z=X1Ism}ZLU=kF@(_!qHKwGVZKZqn8yPD$+HP~y(y~i@gBz9Z zmnbs*aoIEcEvAS;>G$QjO^@zuI#I_nbX>b`pTv{@IH|?=%1Kbtg64Nuh)k=Bi)#ml zU!Xm3d0kx@sUL5)X)|=FF9_9LrH4fa_L`k;XO50BdNBL#CA4dfWPwf7GoNFW6vxo$ zV+h&|;=wE2;GleiU5BMi)AZNDY1hf9R>QrtS^b#AdDT-bYtyxfpSpSj*{aS< znPCE)U>hle}Fxii9Tbk49X-<|9jub2EcPXoF7R4~S=ziZ`AY$0xuWn`)jnEr=^Ov5&7xlq$8%R5}J$NN+&K6U%_zD;~6 zl0JrA;Tn02+Z|^!HSkTm6Oxg3Q%7eVt=<~K`lQ&Gn!V02g3z1X9;>G#rP6M4eXn|a z>H)uS+lSQIv3@Bk67=A@uOM0~X|6SJ+8_6h)Ufju-#K|zqlhgMviq1Ivz4gX@-w!f zv`uZ%Sr?ZF*kWR_Mx8Rjm)ys2IALW|?IAq?s@64{t#ECvJ>B4Gq}aJT(^9e(^%oB^ zpBGnK#qk()czk9@6`4%Dr8o<&4QDA}fWu0OYD-Fri-SR3O(lJ_V+@Wa{BQ{!)EN-I z_a8zM()0g_+++k&+)H(3b+J=Yih?^*81APlE1BG2EYsT3l4YhH)nz}!$R>axlDh9* z_~jGNdlgdyVZe)CYhs?6aQ?jHGfmiI{)~w91dhpHXUs4yjr|MC_(@4C6BfkzgIpsi z*rhu?d{=j2d^Uk?t`C^twl64Hv{jv3m0UbXkx96#wtnnWTBs~PMZQ@4gFHq`Jt7y^ zp*Ilqiu6%3L?O#z{<~785^U#rf+qEK=X)OncCw49s_J+wMMiIkVYWt3`E#}zbhZXh zu3VFx{_EN2rWZ4jZ@2D~PTeW*j_kFtm{cma58h0spw-w5`r!%8X)wbgzBTju=3?qBu5Nx>z|0|L_$yMS*hX|&r`u^7#{-emVDbW6ec;mZsTAS@e@kYR{&U(@bqh=!T86 zrE%G_$du@!FZr&#Xs6lsaNS$Pu-$x zw)E9LQ>GzgA)jD^1a=xl^t#x^0;pR3*_Sr?+BR#$1K;y*6J-SS^3e6+{H(=SXAF-# zXlqLyJF&%X&9`r~@ZiD+eWMEM_zr8usQaXOVmlIBrw?1i*QZqHan1+FSO_>ocm*PB z#c*7#w5jge-eP5EjlmZ;oJSS&ISJgJ)yPU8j8zZQ40`BYjUx2)oATY==?k?O2y(#rjlJ5tWJ=)Ic~tARGi3sj{)7@I;fvn;CSJ2t)WC#uyBI7 zd9_BJb!Gg;0?&ENuN`9DSkg6pQyR3VM(0^*&J`V%MoK60PF#CO zM?*tO38I(x`2`OdDytc5TKkYiVB~z#{Wf*cb4TDav-m(t9(~Oh? zZ03yiifaO~`cMkQMAxRyGzIaHEil9b7&lIjJ7acw8t~TqnsrTPi%zC{vo?;&uk6g! zhV-;ASu{)siJki%xQ1B%GB><$SZ7g_U%*wL3V$^~j%sl!=I?8vrzsD0+P8A^la8?qaf;JxZ&1jt zzo#r(Ufy{_GuRodU7U6AqU}Cm!MP{KaU1+eRkod6{dHEe^3aj+@ta-}&bk+b&AGBv z;7l!pVqJfbDqu5uIPYX$sObgt7b=;81ph1p19PnnGe^3#Dv_cBv}gM^T3sZ~vy{rc zsclMGqA!|#a(S*@`~-38>vIh&OAkz2Ek{1|@1_upu{5sry@&=x_GesnhG9pe)~HTJ zhN9!tb6wR1!?uT3m0!#mY0-&FA7~13JoW>VC*5#S7hGlBaB$n!>1d0%DT6@V_@khJ zfB-O>^XEr&{`e*}sf+;=H8oy(VXO3-rN)bdDIaCSjjq1ks3{XfXcoMzC3<_bXX2$y5nWKHt;zzV85`=+{+FEG8?Z8J*StpTvOx8jkGuIqMprm z`VX9*WU6oLDvZg@HL0BzXZAa-Bu^8%_#ysvNa5$i(%G^7KF5$uyMjBG?4oHY+^p+Z za_y9{O>W_uhyzvjcAxB{D%I^vIQ$MVPaMuVk#{QZZhMyU=E14ICX#MPo+d%mWvpMZ zO!A|4ILNdCzMl0cmI&I!_r3l&h)!sN;uZMyE!f5BM|m!sy)$?T}9torv+N_tLj1IDxvJnRS3 z?w_(w0%<$MDLDv6C}g}pdv5nbI&ZJ7eazX}OfR3q9IyTAR-UtUj`IsYDNEJ_D49CF zz8lk(mdBJRXk&sQ?V=^Nw4CEC;{E!?VNLmhf~Z}v+Uf%@M@;qf*!JM~lM|3M>}bLZ zMsj{S=Avzr?A#v5y&aP#kPOa3uCHAdAJPnh8FZX>9fEeVoBs^n z=fiOPGX#PJRp;RX(yQ)fL05S`Fve29GzcXzo&QRLI$-poP1VsJgtKgvZ@MN2dM50* zKfWJN^j|g|8r0v8+deG_7%zV2^RiH%1**Q@<}8huf=B66KZzXg#N(|8Ee5Zx>5Kdm zeZBFfI~&1ur%z!=xgOI=n7Y0+xXQ(TJU~;~DQ^f38khaD@z`@XbG&G4qCnGN1lCjeS52k=|Q@7 z4<9o+F?;cxBo4tN+&CRUf%V9KwJeCxzU@z#clvE?bR}v z3Y(R)e!=+}5F2%6&Is)e2}#_3?;BB6q-sRA&r~3PV>Hm)+nZ00!!_ZPKlc}qn5$N> z|DhKN%ZtP9JG4o5@ZWAF%bo{|f&4>s?Y%C4A{{5iRsF?6=Y+yYc0ttnPp4%Ds7>l$ zkq=(i5ii(yo+X)pEwJa`@hDX(zO&b%60D=`_KFEC3TY-Kz+k6$#$24VI`N)D+oXet zdL#HzF<$AQ&>Ok&U1B7mD?Ncf!&0_;>a-hcF^yHmZ^s zpSa+AK1RTUj#{#2c|y1I>`qsGY5{)>#X84d=bJjmoS*oF?$pXzGwZ)y;Wp1~9hVGQ z=iIucqDjmFz;XGumMn{|gtbtKiQUVGViJ9v10v6uYS*dA39i3NzueNrG5B|+K6`Y@ z6Biw1GO>7=8PSjK&30I6j3bp}_>{dksnynZM^SN1q_m|kWcLzOj{+DBD6m8SGJvyk zj;=>7fZ7`f=z4B1wkjJ{^fq;czxVb=v^}91?s)iy9&I?zgDErk zxJgnlkNr&Tys1ata?3wS3!yMac7Wdn!OJuR}F} z0s+C`Cop9P&12*$9>DPclVG>r8aI$xo#|QwEOYtWy|KOR^R<|CkhX%$@b6}wsfc(Y zM1CqtO2is-_*8{TFyLh)? zhQimGIiH-IDpflZ)*$mkqPcXebRFH>mDR}A^j5|rk%`r>Y=k#jQw74SzGy2G?N=@4 zG8K`HwlA~C=flsc%p}qIre$v-><**P=}5w^o*sdEOS+Z<16gw`m*eCp<86w&z_3dQ zkBVHn9%}DcG0@zRnmMRnz^ictWnBNUgPv=~jHtQ9KBgczP~j!h!N+yfwR;FO-7&FZ#k zTmppq#7Qb^Z$$UD<1Lhh-SLx1oZmv&?I)>Cn!x*W5qweuM@ondMv6?*GSpJ>k@uG7 z_9b=ZykZDSW_firVCM?ODTkTrYmR_H0C_&@s&e+XI`(iYoF^VoO@8H#NL#!TP1n+A z{PX4X=&Z`x_Xo5=r`yIfAR$(JNb4D*w5$J7-&tSc;eiJOgbq+lf+H7&a`W&FL_c_G zvvRaT6b@j~d&1VhrfE;_XayM=W1s<;`oh&r5|{;(y3#Nw>W8olC@83Ntz>o?vJ)K4 zCcf%e+2nOu%advAV9i@+>+>S1-<*`nsKjCT2vVn^hW*X*<8u%1sFx-P7v2hkIlpKySILR*ju78C&;dkhfiI38S6iKqgK|h) z{Lr)HfyYKhdsC`=SF@aRl*$jgBeJKNq663Jky;$=Hm3+3kR$`x7TR9 zP$d^IgF>L1Sn!#;%Nnly0js?>Zv|jd2}V;e^}OjB{$wgPE^Z41cBQf9)Kz=aIzn4X zdz;J~g4=H^Y(i`%W9B1{bhrbeLdkcjof46s4}8btVW)Ch*kT>@;+ZT{_`5B-_4n0X z8$SSe1CSQyu%kP?8us&L7-r_lFDh_WWlxj8OFd8{S|(arzScjFRtKxujpZZdnIX6S zSH^pTZ_C>>yRxBr3dIDM`+)`H<0qJI1ckP9oV??=lfqH{baKCuBajaJ_dm?tKxN=tyW1IXWbC@Yn(fcd;Pz)L15Yx$-S#E
u9DIfgqCo}a1&aE zRe*sN_rg0iY<=TFDA1uogYNslYI#Zs+61kEY^fJ@%uxjPQg zI@SKGLoQ7XQFPa|-iQYGa7k_QJe}cCgx?@=$oi1hw}AeuPKI&s_yZ^xLAJh95>^FD z=fcacnbr`HQjC3S1{k(C@mqBhTBu%GqBCJ$YH=FCA=jdT@47TumF{s#P~GBc)KAWT z0yD7|kzmR#kg2aarV2)e-t>x-1{*13+dJSL!9tTcIa8n2iD~V|$SXgc%Py_p z)Qq5;%9l91t^^wRB*n(QwTC8OH#cv~6@IS&ysf0?T_x}7W2O$8#n4k;;?BwHOmKC_ zZ4wpgdD87`szr+~ju`>}&?LcP8a-Ld3P zdjfV$TL*n7vHzMuV>IztiZ)t3<<}(A2&q6d983=+alABx(2BI|uL;RRrNqZigNV0} z&}*^a3OT?>Nom-?QPip^m%H#qO;}D|eg}Ss*Fw=tDJ25-z>7ZxX&>DO7}YE5xuU&7 zifVUQpIv|ozEK9#c;hy#rT^#3%1SUcmp$AE0lS#obzjN79JMvk3uR(-@PyYr}m{cwf9g<3g@yVATtErRxR*t--F`p1uUaB|A4YbC?XT ziL+VY-l-|dHre+voO?K#4mSB`lm1L+gH+v+SRbTS|^G56?2K2n7D+ z$9spCe2*>o0br1k} z@!KZ+D3FHe&hytS0JXwI6{xp2jU?_pz4rLkYhWd@TFK2oRxqNPyu|W9e?)nRlh&tp zfqnVFTk=)W?T97s*GGr3Cw$H`3h+q7?))0VQ~g5=yT;6jboM$e>=Vy?nL-<4FwIxh zF#_8}!DZt0^+OmJs|0=8}x_W(zq-!v}xRM4H>q@piQ<&9=c+Mld5^6p5> zBWB9oSB1fgXHU)yOh;9Jd)cgbta;Uf|K{262A5+^`Q%-%c%6{G)><=`&a#jZxqRM> zr^UEiTp+sL4{o7*+wQETqwX1zgl*eGwD&4?m9e|m_I{ihst+2*rXFm+PGi==Awpo!p1prM6fUyjC&qekVA%kcLK zZteN#>-706)x|iuBJ36ENHNAYD1tQ7Kc{ccN&arD)Qi*3NZ=#e?I=MLKCZAtnm3Kq zHfZTJ7?=$TyPA!We0;2+wHlwBYq>WC7oQta>nf=xB+$s^NRGd}_mE1VxPQ9Qt8$}z z3sEX2+(VbeePi4QFDXvfpGHd_mfqDCU+YdhDBVuxHo^#t*QRzGI9;ttcx)Fs4LJvi zNVL3M1sF_wxCGPTX5p@d>*BW&R&%lu1h7>Lh3U)U68(?3@it-a34=u8SLGNR$_tO? zA)TcR6A##@$dM=evfQPh_1 zj+Bjih*{p500on{a<@+;WF5mjiBrAEaK4=(xdvJXcLc^5a;UV3pYIbtxm**I=I3ybqZB^a zJAPNoy#foU9w2Snp+1p|giVD#cztrEVvzdqwhgvyKbI4M>NL>MGxB z#vwOBcefEa{nZh%wz(8Pb@ba9wIl9b?{AWG(pk@YTFV4#rAD?VP;KOCbK}W}@R}84 z=R>WlTTe)vryXQ8_6Z>emH$xWqVG%Nzj}*^Q`4Oroc+-i-19>37S)Jt$Nht}HLMzW@XcILcKk`;yp!Mbhx$6xyn!nPtvhN$u0Q;>!DJIR@_kCCONQ7`=um(1OdqqY{lP*j#z5skuc(*|#S#m!@VfUtdw_CGVvb30GcNBZq2RtF}o$W8{zD zX7Q66XLX-^c@sHjV#c8)e@e ztiOPs79-tuHq9iD4tT7+bchvQxMX>XuJ=}gS{?fY$$J$sA{&Cvlt5-_t3>Gvn=UT0V}B^#4Ov+yTnWMpP%NAjG) zptaKu5&}d(lLC_mDh}tJ&+xZr9?6v`5)>>tCa$opFdEnCMrZ@Adx#jbh&vJ{b{2uc3O2zc?tS2)n?1*1g>{k~{) zuUAn)fr9f(ox-LMtZIz4scDuC!tAFXOL?!|w^n(dPkeRz-3DoQc$E;YwA+2Evq|^i ze9uAJY_561ynCgC@as??M46n23Pz-Wc7%~UG6{)EmN!ugQ9r!dk{xdFBymZ83bN&m zMb|b%95k3dcHCj`iTY;uJ4W|MDI|~+l`)2rq-NdxAn#0(d>@uBpTgn%C^EmspNB%d zhK#gb{Go`ma&C7F(hs&qOOAazLt-A|7GWyrt3SB9wKG^gD+tkx4;qq>Afp|`#N66K z5S{X9bu+H$S1bhh5}9_8%ZIv2$7awKDnq2yBwkKurMO}1V%1@~kE`9i{<9jdQ(QLW za?PASXO$~Oe%@01W`BAsPO4?AgI>)0=Vz0H8E390={JCrMS+`!LBC=0MOV*l+e{a7 zNht|~y=vES0n*>LV)PQ<4*_%Z4i`d)e^pbz9IyH`m4~tDSh=T>u-BSlFFrr)8?{RD z)05&5MKm>0wKLCr_=u;hx2vzJwX35K6AoY&(C*HSb&{Z2PQL+GN$Wy$PYt*oso# z{B^k*pFRr~^-49({;=`WDG!tg=MC7Wsagk?dhd-ZuYg1F)d!-lK zIAAJs8Pp&*C7L^HU-uap4C13=(nRk7>%1vRXMk@3hN5&o=Ob_SGwSvy%NXyh4RD{1 z(Tpg!p;)M@6nlDZpkSO)5u)>ODn#e*VXOc<#NrxhOCUv*k}`zx3Q%dBF1+9*rx=pB zg}>8)((Z85LESG~1bgZ|X&q7LaB_8h_vKw*TeV=+tC%Dk zYn6%_i8?c%qN^_MwQB7q51p43FeA0)4T+H?7^{x`^KEO!5#{nK=Ha!y0`495$^y}8 z^vT(wxX9LwG?~+fu6jRy zAw`FvG7ztoAS)+_j1HSs_hMu%#||SY!<~N4(3ZwLNE^<0ZOa)IyH;z#J~oFFlt$$& zo@>n@K76o|r2~deA)4rxivFdKz4)C`qX}hvI4VGgB)#wKQj`liH%>*^!HB%^DS!WM zq-taeQfu)bEOO^cV=s?Rfm?dq2c|UveDVu`w%i3Y!de6AtRgtQJnM-aOT3qDUFM7f zcH$pkZ^7*lFL%~yyki;g%a-IhML?Ldxk+poeG`*jWHMicG~!0v;*eQ*}_dgWCms83%9#YF4?9V6kQiv`tbl? zB2bXr+R`J;kCX-mG!j`CvbZVWAlW-8cG?B)~ZaDYp2^34~cb4TId4x z-0-yKY=W@Tr`x->_8#E&e9yB1QdCLe)5B6ln@Wm!_7#Wt5>^~f|Gq6278Vc)q2bXx zLpEV0fd;rjQ8 zYLLFN?0PB;QtQv{f|BL>E8rWz+IFmdbg8SX+X}M^jOocfPM2r<(3;ZR-7Vr2)?5|f z)6`zGdZ;!l8@ z>%iRlWxX31ep#RjIaN07%F7ymC1|Xp6S~-Uu?yPhT%4TV?$g$qF;u~fI507iG&sI_ znQJ{mSb+o&YLveP!@X(%-fiu_Q-kR*Aw z`I91)PcVk=;4%A_d)`rI)GdOqW+=DZbf(m;0JNRGf`rDEV}P)aGKNIn*lwHGH==w^+l zR3lAaDv3Kc+y*~l_i*$auCe+C95c|0GCKQ+I=RfL^6Z!Ho9HgGHfU)?=9R%*H9AJF z#^1{rRa@WG#KOXYOzd-KAo6#B91jk7VwWc08FX8LTOQUkf3NgAmHAnPtRl0K#w2Oe zuc%roxQv2&!d~ketr^j|%H$U-IF!4y54{qMPFtP;1?$`Z!A*ZGwlIx9zY-G{I=a(Y zDlWgcKTY%7w*8ftf`49_ox$FOAl=(vK&-~XbF3@<5m;PYBfBqu4Sri*9UMTA%U!aO z||SBJNbL9_nuSv0AK%sJrOy;?CWJD10UY(EiWogJro?}j-Cj^+RA^Cz= zYQ+mbw-MJcJya*IajF#XS3~Q zy+-^$j@i0Ol^A_N~X>l7iZq&JP zgBn@yYCL>pvCP5VehRMp(H2lHhC?0YD)5?3zw>b5(Cw zdMf%e>wE}J>&ZKgWGpYVk@f^;8CH&U1s&YL%eE^YVw=So7t*LJif?jaEB@7G>|u^Ou-Q!{ed`MP3SfoLW9rnuERnYjj&`?EnWIR{6FvJ`WD zkLbSQiuPf_#DCwZtwWkkbgsSSPvKjvYs$h5rzaQmNbpdt?R^ef>bo>CzbsJI_>^Zc zxKcn}l;3XQ$mo4|;;ECfl{Tw&MhhiEuGoHDHoN-Fc&p|qbRx#_f?gf*W7)AV&Sooq zdYF6lnqDt{X+&V?>W}+v%c+2rfr7ra4R}o3m=#dQ%%p66aIf z(M}q?Brf3kNy1zT(-t@IwWgrzW2M?ikmCk1&5@C>j_GW4)r!H3E7VeA!+k%!)HE^v zQqKk12cfx%_68P{Q6n9X86^zdJ=25uJu5M-5%S8XkIILO`aIs}ebSkSYjBJ1hifE@ z7=CsyCn>A=&6rS5*_wv1kry*f8x@}xRLzHsy_mmHY`l0AlfcBo9Xv)XnU9GsI8Nqt z*E~=noUBw86UeRD?mX5u#Mj|ar{3|zt^@k- z?V91?;k4AGq=`=%T;2rD0h{SFkxyfna_Yb75{?Eq+DZEeb6ddDtGQ zCS4On1G^H|jwh3!!A#*cI3s~3KgSDCpT*l$AJ)yTaW4R>)W#uibn$yf zYVLG>C;70 z-lApl7n{>xoAzy3pI%qkeqUr}t%r?ys5K>6>(HzDwSAa+)R6>hJF7MsDbIq}M?^YL zL6T6Ld2flY3S*Fbs}ReC&JJUp&%ZoD9a1S))n@l?3pE+z4pXGLE``HsF;VbA@-<00Ur>v#SlU(t;1vbdmoz#{l2JZS`YI@!-EQq{aocQEUbQ5o5(iUB^ z#kOq@;KbcO{vbp`kvtdG<5SI^Y8WES_Vw=lCclFMvNIKM#f*##Zr1PQY*y-XSk!Ll zCt)pSh1DxUgIQb{`O9yq6hGG1p4c4tM57Ch-uwRA!Ne~f7Lv(edm|q8eo^bCfYI?S zo^~&oi>_>2R}ZZQ3qey$Pt;?tsXiSlh*n9o`5^#LdY$G&YXlD zD*ouV*Is6=9#vy=Td(93PhkR~_KmjcZh_KD-p{AIQ}niOc_E7DbX3>b7|jYE(pKsd zp^O!K&&Qozee-$F3;P9RpC;_^%555qeSN=DWIvhHRJverzk4ext*4CHGfRl1qotl+d*bzswrVD}L#beHv_V%h6EA~!S4h82yA(80 z3FcpsE!P2Is7!@{rScavFz7JZYWnF@vybk$Yw?U(SK#gRYTsNbg1zc~XL0P+;(fE+ zroMtj+cq@1n%Y0wGG6yWw~raqQP`2p%q_!4uj}bNO#E8PzFb^=7R}SFH>Z3W-zd{} zTLy*t!lYHyA0qlcY}q>{;+{Q5{yPvcTzNM@>-C9ff#{YT`+?7&&)VBB1@#4wjZxYA zdBLTtzm1G1FSj){v45COy%%Z@HaV_g5px8NrT&~TN5^@arm1Jf7i!<^;z!{mE1i@F z?y4V(Kac)uzZ(fpF!!T(qVSW9@%cF`rcg!sTLsrq*783rSW}8CPa$ z?ZQ|jkEx4@K6g-B;Bd#VS5BAwC7%O3QE|y%v@<-Ceq?=@mYbV#xx{Qmn@iy0Y#uh# zt&>kYD7ewNjMVcnXsS=Y@8Hf-4~Z+H0vGh2cIvtBXQDV{@RBjkzv-wk!(!H6yDrnUg5o-@l=Dm zBQyG-*)_$n{?=CZw9QSG5EDQE zBQN}%#25M?NtEIBhP|w)O2k6r>C>l3xS)yMQs;WkDsr{?HpsEv7vqRRZ{uCiTb0O( z1(l3JENtqklfbL}K#MpT#4|i{gO$TPvc36ROWq=zyf8niC{!jhC1Xf!<3EIn-_Dvd9- z_mMwV)85dL{$Y>y&JpfFlEVgRp(~Q+8TQuy%xHk}sxQ7ygvVcL65b7J54OUpK6uL`{vuM98;8P}vFXUToY z5j+#T2G{F0yNG+gMN2H<^)ZSO*2Z%8>=3&Sl|x(m6$$GYT+q>xzmAh$x4GmrOjnJw zLp;7VtGB1b@7i2(3A&pYj@a8AuR#OTtejiFRd5%J{fq71zwM23#RV)A!@D(Kl#8!t znDL%?m0xewTk01g$ps`Ypvgt%f5^ztd|q|$GHitn zqz~YjMDg-z-I8##=Awc2oKw&|vroALNmSUy$I++B+5Ggmqs43n*S4z%iw8Djissh# z3G}$)(@L8AB~`|qTT_$kbw2CoWb4|S`K1j9PngE~(~;MEr7e^3J|SiB(u;<=*y9=h zK;+jFBTKirwp4TVZMUq~x9IXRgm6M8l`FK^VKA;fjV3txif zNbB^n8xpDB+>7>$1D#P1U4TSJtx+X66pB$&@tR-ztIwasa9MqnkKYQ}a+rD~H z%b~Ugx$Pg8Y~KxjJ&L=&=*AxJ^G2s z?fJw`5A8Fq6mnk1zPkzEQeTlSe%CTdcD>GQmFqesk|xv8UeGMB38i9IZf;4!CzYr9 zNe_Yxfj{h!6-!jU99>IW@9ld#YGz{}@jGwdKG)!mv$MN}4GJ-O_$yaoVCY>Hub%KrFgmXQ)EQyhQ_RQk=VOB;Mg3R&SZ(#2bJj#MAKO1* zW4|IaK;>B+@Iso~zrpQ@XrAF?_Nwx~xtTh)oh+h@Vh|j}ffI&d{-wH?(r~ZXM5cyv5W0QS$t(ICD+-dHMhR zWB;k~{x`qvpIgv>s5z0ZzH0RFpMlN)H^2G+d5wSPmHeO8fD`=xyKlN1vkuo#E@SFzR9cwGA4F0Q0H%xaTl!dAYd0eS4C+#+(qhol&h5Y9a zo&R#FPw7{-DNY5$ZECZ!G!NG$U|XT`+%nb(lZHZ}*yQvDf*=HXj!6I!11|xY&r|7C z#4H02e`42CyTCMjWrVz9_45x%{`vzurs(UQ91h1ZeELZ+2&=x^FTt+w(hU^tyxd%C zxHrM%&R1B#9Uw4 z{=_rR0YO5i;O;!AToBz?Qw>z0AS3b=#4?((uEQ%1A{zLI4Nu1_6Oc;CL|ocF%dXI)Ni; zCXtxiAGBS^{WR~T>+4S5a2Q*&2}xq!emX`hh3bY1%@Qv!!f)5rs`*_tb3#<9==JnB z2?gN22M66Gz;}n+%@GApAuK@l#tNfAVX0KImcQ6r8B^la$ z2X%2~hDLSxr3CF1cSx|Y&sSy)=vvQ((&EFc5H&jx3|yDyCK3PQkcZD!`V3Y|{7=f2 z)y*$ALaQG<<|9Ef3xcH7UIWcFuZ4cySeBuAK0`{IccIHx-(t}2&u?MIK`Rk+p9Dcj z9?-W41ff2{9OxHP=tJ|s8gKyW^)1We!~x(2_vp`oS(#V}*XI-cV4j;6dtn<@^!qXH`8e(0Ze7jTw0hmE9wD?Me0Dw}kYffvz&kv!`vsFQgdW zC=Kx46GtdZ(p%@+1{9nrFh1kXKsXvba9#-wMt9W~md8P>Jpo#)_5=@9T0y}Iex;gz zOGBL~f*SQB&-M5aWvKazU{dSEuu+UV7x=Px;JkbQWEJ_+lJD1+2pHGEQc-s%_9P?J ze8uHyO`RXmooH!lGLH+*my&mmZ7@XN1@U5j^`6C32-P#>hCFdLTeWvs1=k^Y@Fq0hr>g($}ZKD^v z`6bsB(~;VD01uWMRYCW&y`#fD&WkV@R)|P-pQ7iiH8&j2j7$ISS z>jmDW_f-<&WlyWONZI#85Mn{W;7Uslj1)k|f&_pC9KtM3m`Y(k;Y5A4{H?L#LbVNk zQAfvcp{YSDx>3Nm(0c;<&xiCsT&vbP$Lv&h?rcOHBZ3Se#xOJVA)*%m{`36wN&dt8 zTFZ_|O1{~D;ei|9h1cRdgipJM+B)A*H3Ioy%j+ z(iHf52)#j_S46=05z)GRxbtJ9J8#Zw{ch&_A}Z)aDFlp$dK1$0(uRwabhiM)rq@Sh zXP-4?N>H{h%7wPg5EiY&WAkjTQ(duye(pfh&1v z)Jfa7w3-h8{DaO8^ENe=L)lXY0`VuZ?<|>oaSvaauf`J(?z>>*ywa)$`08QYwNxzy z=PT@T8{2D*#WI8P<{xZPSlCU^yd9Y+TH`+T0RkN;`9fmWng*Q2jT6t~${T+mzS)}g z)Sb@bRSMRNc}#5nPq>>#xG~BS7jJPCtry@*hg}d2?4tY^g zh5BR4ADPx`j{*(E+A0Ra@`eq?E~dX~-XR_5ChO#H5ntBW^GRn7P7tWv%PBCVPbReD zbeczBFCs{Th#0Xcb@cA{rz(=q_q(|8$U1y}^!PQhNiOZe>cJA% zR}jTf2L@HlD((QCJ=*FBk#qGHi7e|(Q(PX>Xjclmu#f+-iQE!$I|t3lwT)+&tc@Ul z1CG%&M0G#D$Bc_L;VNlMy@i#%Hcqw))GLlt>*ux4w{CObzMg3FQsG|Xzqi zsbEQ=UR2Wk9iwy2y~qh7sycWG<}ueGZt0g zUyGN1(~?(hIkqjKn_bpA)D;ujpWI3uH>BOiy2r@(N()-&SRe1;-kfb=RM8mWPFH7U zF&k@d1lA~89SJ4uC}fZd5{$2Lqb6a%OgcZ+sBn-x4&hCqPjATBzI7>0f}LA~6fg&@ zr}Q|?W;)G=9{A-Z43DDLQOC!DNHKs1O`SzSo6z!}0kAF=d3O}rW7dO9khRfn===bJ zA9d3mIHAj`lW>n8hWk$}d#(p~ec>nWe7m{~iF|9kj*d=yJPW_V5`=yWp=t|uM3767 z%QDT)2XknR<})T@X%A{vh>_T6`5DNI`T%!~qGJl@++Qg67*KmR-OgJEi9H0q5QoVU zCy#6o3!66L9UxNDO0k;Q{mr|kVAxjfaja&$=km%dnKVCYGh5TFY0ZbPZtg_rboq>n z>#=3IU6wl^Bvt7TI(^o$$v4&DJ%0N;NQg7DC<$OPT9LFhoQ*80ie`tEA7;->|7}wloo?j15jy(8U@t-31Y|^@mAid2Psyo@te2qBfcl%8)u3MaN$ufU)diUM_L$gUk+ z3FeL*bWLu#Wa*Qxhr*fYkR#`-*+z8URu>*YqbX*yUveLm^{35R^Ou8NJ`Iq=T~|7c zl^xfwfQ~l9*%H^wPM&)t#3)@vi!-S4!)q9tj5j&Oh_?AF%Po)gNoVkzn&8PL7p6vq(>#H?s5UwdOt5dfVTC)}I7d%e2zOp! zSamx^Y7XheNXb7YnEL7c4sFlX&E!Y))`!))YSX&As)WXkUI`d`3AA-}brlvCQnh@q z2Pf+$93k68g)HDLoH z^UMrL%^!2C`0IbEZ*1&8Y$6MS#L8P!Dw_Abc{L2+f|MKoU{Xil;rv!@4e6W^&HaJX z-t1S-(}T4IC&leyF-!4_Bz%Us#)h$*78{F@EwdA-#iL;F!(H@=7jLtxm?O@?;b1BM zq*!xNT698c^=E~Hq%0(;c%VL$V`8xOg<5gexxm*uz7mnfQc`80KGS@VDqICyrkkXN z_j(0`Mv@Fkc^^$Q=22C4FI$^+wppj9?d4}=)kYcBwCm2qb}_MW<(2J45$0R38xVsy0>{f1E}xy!BP zjI$HvI%Xg}bkIht&~9Ygx}CUffeH~OcnS1kpM@W7Q|5yY=kA8pra-K>rGFBm(gW4+angMAPlPZnbBR`Bs44DwGwEZ289^-Z>g*0#2`*?65P z9z9o=+E4!aVmXX#Jzw^b&w7bq?&mJq**0xa-`;L6g};7tl8|lFDK8kDCl^>*Wx#Sg zp3r>ToF=-J=5%Pf^OKT&U>5c|K8Y_X7HWV7n5qyzwH<2l&lg3 z&}xQU38TDe#)?~Cqy#z**6dN=k`Ys(N9bjL^lhJz#a1TgrTk0VO~Ss_zU9CdlMPwQ z9w!@j7PyTitiV{ntgcvD+MZUGTh$6cybSqnC#RSj1ETkXi|EIroa_yl>Sj&|8ghHN zFur($N*Lf(LH<^I!B*S*ahATbt+GsY*0<(%?nCCp%QCf{X@y}|kJD|12W4p@h+>jB zR4CKOlt_3wuCYPLDY6WS7T>>#ZN43;R9M)r(6?g|@m+A( zuSPA?n?H4J-f8WsEAVQO(?YL0;`+q*`_-tQ;Ks8zVNTjsy9=^hhOBQ^4}X*_W6XP6 zC@=FU^71J6(5<@l8YQT-&wT;8)s|gMTs|trPoLssDjQyeT|%SPKX>e6?Y$4Fk9zRY zw=pp>KL|kCXbrW_9rEP1o>M(j#7>@g#B?~j%gSJ}6~wYUAHs)Z0>#MRpQ%;J%>p?; zD#{4vDZyN-TuA>2gqOC0^(!1{qxmu)QnW-i9bYk(cR!IaKdL3&XHc$G4DEMPAdAmk zEuA$o_NQ2Em#ns^edotJ!iW~fgeij=upViH+}E1;E={y;a#s12uU+ZYi%TfFhdhr+ z?iO}5Xs;&`Lb&>7P`|lBGX(1i$6NjRiLv&UPFL#YF;2x2Mo<;B#A`r}0plb-t4}(A z22%rTxk~k|w?($Zq9_+At;XHua}=Jo6N>UHi)1=3^JNI!rY#v|0sPfBk6J$_n;5tb z?UOORLM0m?My#_XLcUKvFr}L6tf=B=5)5u#KACpym?vRyyc80qE6-0b()Tlzb;f)2 zHoD2C4ZJ?+cA{*>%vM{VwHOlbpn`g_Mh^dzWqQVg$#IBQ6}uTI@)uG|gTKw*6WyLy zZL)gy<>ayX^l1(HE}X|)wE1KFSN0_XPLCzQvK9R-%a@_YJRhX~7+ufsd)b&l-)ug; zoAXQ3>7Q8AzIV5@X=>{?I!leD)n(S@rPsKr89!li+Q?)kV=vtv>K03`8+VKSL3ow7 zG})DWQmNkU>TG*R=i?oyBhGS-_n^zqIfBdBd0JZ_+7ke?hRj=at|wTPi(!`QoISg) zxK(4KnA?zAlRl-n+s#Lx>MU?Le=Ij4IX52W>QzN5EW?nZU`0G1Ds6}LL)l|XqsC_n zlek9BLwE3)ljdXIe?*tnjTXuF=>4rq)s1OYrMjWu!PDMa6@EwNUdVqCrBk$a_p1C7 z7qh$c7^1&iA>a%7{QLeYSS5W5s>})JPux`6DN&+uO73a9)OjMOwQ5>X(JWBiTQUlJ z_b#w)DOTPV+M;i~lc`{(av(ayZDEDiVwqQm>RR`$P06tAlY!z;wtZQIXtsL7q&64s z;T*q8Dr+#Jqr+;`bZWz`X*r>x@I+Fh0Op+uK-i?3TV;gHuS*XEYx`cx=eHez%acQBEx-3Xk zhiwU%k>J%APN<912$cySTtms6=H;=V2^NE?Oi!uL==dP%ealkq6~pM>A&|}r$y$sh z*j}prY-H07Iz&*dJXDv7yAX~PAf8@c57zaV=x0wFaLdW^FFs3$gRDvmW!g}n2kn{D4Q9ydZN_a}$b12!ZZ`K*e<6VoP9_~<`$&nVMy#`1#p%n&ewSwx;@_$T z?La+vvEAyRKnPro3-#|c0TPk3?YbwQSv`W}AgAu9LJ+03dR$r@{Op)^+~?qtScC59 z$4dS%f$Ia`l*&@Ym<(Buu_BP-XUa-7pA}xz36NjO z6RGH|PnWBUrDRA4km)g+Tbi9(8(U8lR{rlaxr)AR8rjWPLF}3`J*nFhV`E`~Y<=pr znb|1O?+7e5ivMioFR)}9$g1~#amG}mMHN9cEi6wC$>{8MiVRY4P`f+r=jTVGwJQbs zi+%@rSV060EtB$T-LYIP6S+<5`{3IH!t-(NHN9i+`PGa^G4M|r&%vvq!!V zTp9sDlXi5`P@@%|9zR77v@Hg8maK%Cm<~B0H>=yL z(rA;69OqfULUXlQd+|4E8Mt$4egS;@A!?0xOAu}4gttgncdCI(>mg~g(!4V^DYXzS zTIFV9v2Tg#PI%f(=r4iqhEs^Z*IJYF-vqwRHj4=SBl2LhMs#kW^Z-8iCI5YYx@qzl zeFI|1v?%5uQDJA(=uU3I8%Vy-Zg$hBKCmr!pLPmEv>=@;qn)}sS)HPVxMXETCj9-k zHs)OU>LbnDP8$rtePnIE}wkYDFc#jiX(x}?O{}TBg zZ*(_N%mWuj?_;%YgZ4pux!6>L4E)Me z71Ql#=rL<{9^sLHDv?Wg7q?+HaZBgR>F7rJvC~C6P?L!nW|=r{&D(ro2cZ+?SjOuN z{kp29JTeH&c(CXb<8AgJ*+&vYSj}zSu88ZLf!mDMA_W{QT&ql`C<)Xo#`n9Op0w{f zr*k1qVb>Mc-4s!BaWr-CwzJrw-?YMpXWhOs&CV)Q2S2E1#tA3xQdq43Hadc0IC}>u zhAW}{5g8$To2ksWt%^jRIaUU+QU{jB;_|tlqV37vIvBag7W#tfm#y~NBh=hJH(?zU zm*r+;AtBfE&5x%VQJ+1#1BYGe;0(}Rcc4k~z}<10#!(+*wWy_YM}vKR@M-+X6t$8F z=5&ccXd;k~`y?H($W(cK9D+9QCF0IDRvhhpi@7<1YUFbAIL9`B0(3@qLB`X&eL!)c zHUJ|k%GDo7qevJkr{C2dHgPvI`z*b zK(fT2N`TZ)dOjqZx|bo_rA%fbsD}g>WtZ+Kv!ezuxiWHgw%YcE+DvRd1arObNnM5- z8hBbkEMWHOHZM>|nof;VUecY4uB+?N1`6iH>B?-$<5Y_f8O?yNN=)rmOa(7cQl|kH zKt?F@X*@#NRZ&}*3Vyu2q*QDJ9t+51N*GD^Yh{s%pw3YdJDG1wlk>|XgwHajJ)qLO z^Jq>;&0nCPE*d?3lE}Ls@p7v)#8Zr=q{_$z;>SK%>->O*AtkD3Rf}xI&blNd>G?k|}lINTvC!{_RL+7XW;+KH0 zdB};dAtg}63^s*mTYFstp4|zPJv#%Se=FX&4I|{z)v{xYboxoE0*U@4r_+X*?15dh zp^uVt@9%kfp&G zupaNVi-)hExwp8}P^T4)x`wwsYtM5=8n;9d=;+QX9@g9SkDBJo(r=3w5c>(-SN)lh z2{*SGj6sf1wa5M{js?Hof|e?OS;}T79(Nd}dI#YCHqDYMsj{pF4Tbsd0MJTnOmxH- z80%MN+Ue|Ow{;RGry*^NYnc=FUUYFM%Fw*)y zHo%#0U~xY-T;Fku9BTUlxo!H17)p@cDQg$oPUVu%KpLgzenJ|(do1c#FQY?4%^8X@ z2abgekuzfKt|oK#cYY2t<({23zpZ_sby#9qUPp&b`S2sO-$h8k$HvAWoatB>%r6bq zQCeGt1Aqy+(w-PB5gHQmGqk~mCSN!}Qzl50x#PEOYYS~Y<%G0a2V(+q_fQW|wpME2 ztU2+SZ3fYyx9)Nj*wL`0?zaHq;8BbEyAidA+a|S9al>t!l2+{0B$09OSdb8cXeA*$>^~k9s(;*>&tDpT)>?7M1>GRbZ5hreeF8W?2zdB=V^X|Ni-__dd|EShZJ2kbI zR*MV+hE{Tv&WmNNBIQN1$P!|A3oVt_t2x1ls~->;kU^kaD&dzz+vadF&4VBQUabv_ zw-%xi$&cihrm36}cyoMTcJ-*uBG_pd9DWz)Pnien9+l>ZO!MW$KH7JfLTzeQ%M$_l zWJ|m0IhAZSTay1mNI(8x2>R`tHD3*`m;w zesEv8J8z3wvzqY(*B8r{x0TAbaXX_ZAj)n55;Lfd2IAk0rXf@cYgcc#!R&FA?*@s^ z|E$?&&!_H_4hVndbnKS@9}cgBS`Do zRI$=JA)|fAkEZ2K$_?Dyf^vULl&6@mYlW9#US6g5UG%Kr>{I6 zWd{R+5oXxFAl)BHHg3q+GGHq|_`Uo8Oyq9C@5tyX?W^Lt2Srj?(>jD0qv-4JBkF1 zvs-nsz;~Jc#AKeCnYjyHEM?WG>)7xT{7c3FPX&jW)iLx8PlSHQ`_z&r=6`49{3M+r z%@a8y0W3IkjEX$Le2EJ2i(GKin;!+r?ZY|WpS{4%@cj|Q*r9yvN#$mQ2KOS+a1|;ZCBU}CLRHcuoFbCKVR7GpI#VgCc*UD zBPwX{v@PxL?}sdHf(g1G^;1=g--7y+_48eU*S7kkF5lmqUqpa492_0>9BP$Zb+N>o zIt58e0ST&qAkD?YxbZMI8suH$3gHBokt7o0IRntI$W=)oaaoVHX8nBV`PI>vNJotb zqA+-9()En~==HMEe@~*5D#>sd`c?<-8_oj1alluH}I8s4g-1cc$A05A4y}kQMHoN(mPOotGc{D z{GV&QFa2aP{bWXNwkzMYI1juyK>^{P{PcgZz@KpZ+Gbx($-|dVPwRqP4DfD#qeP1S zw(ftSL@pSu&W%U<*FQ;zE~_(Sp|Nz*_>aHv@`{N!n{oO}gsiG$pw z*VBv{QMCx4gF(FD7p>!8uZx_jU0Z#!fnekP8|hN)w+*>ruks%@jBvxJp5ftP*vKkq zP%*>b{P1hL{pD}622Oz=EHZ9d%bS2qVE&UB31S5Y=@%vHtnVK=px`Y6%+<)W;DPE$ zu)0`){wWN;)&+B2{ERmKEw~Z>WQ{{}9g#I5PqO*COg9Q6`}ck_dh(k`<$wFT{^Ha4ANcftS?GUK ziT(4!{L%E~AG8sF-ZKB$pXZ;?)nBC3|N5f8&c!b^%U{mLe>7M7Z5ix-g`&S4J6MLl z`a1r-yyP#(`fn^o|NmXScz!VdDHm)&^jTIpKV2FBo8SD)$^()4yu5mtg*s0tvXA0Md0mcDLM4*|zhZ`mxy!9PmfNvRl1WEF;-0U)%{;eB%7TmG z{HDL*vj0h&|Jw$$@>2K}@RM$)pn-2%EgdhM13jKL;cpF@@-fUDSf)hi@MA*hrOL{= zO%|5>0tcMGe4coxznLNH!oP+6zug~y`qtE!gdjbq;N`mj!?;ysZuda5BY&HXjL;ABA|3RH`^YM8`? z1X8-ueKEBs%^e+*W-WCCjFsUTf2iw}9GTPtGkJ~2B}Jp!r?4n9|pI?Wig-^^uZ ztC}W{YtS=aUomvsp+TFdU6{HkZRs}~kJmI~pw`|=7+}hcV7iiM(xy~-a6|R|^S*1+ z6;{v4k7}eR{AUd&U*v#%bX`Xl%hGc9Kv#3;OJ*ux_L9xwZT`+jlV7p@_YP@c&Zldj zblm7JUWWxmIy_*S#>ll=pG5@(bXMY9Sl5ZLqDI4(s(G`|g^AWGT*r8s3Z(Vn7UDuF+1c6qthh_mDFty`$Vx%cCw?tk0U0_GzuAl=ul@wXXl1nc;O~eq4bnu zcpHJf#;C(r4GbkkbDW^=$7XhC|M}Pdg3rNDTE&*Cz60S3(N?rbI-<-2?GlPE+smPO)rgumoKb zu_Lk5PUwnLWl!FB-380TIiWunRb-Rg_Ocd7D5yTK!{N$ua*kcZ;o$my{^{4( zS>{YWy_Ht|V73zK#9kwr>yR1)I$7FAl(U72c@9L$;cHpEjhFWKk8M{9j4lt_Co9CefwJ(3s)EPNU3c@O1o%(ENtUZ|a zE&xZxb?3cb%IxN-hNnCK7r)ie=Zw53pRI0qCEqth6Qi5wZE|z`+Q=8C|F>&Scq&d! zRaHz}+_=8ep;c3?-THRzqur-KmP^DeaNyUM z1@2ZGW9x1o4MyXOez;r4R~4NS=I({?QVfEwl*(+t9#u~YSLN8dPTFDTK~Iq@h~UxB zgi$?h&(41hzeasel_8Nd@aZPK?oWXzyX{IXm@T1UE&wtQYi5I zVAV(M%ki@zAp3OdZvQ;E&^FL7d^$Zy=}cf~9w?|_k;vbk zleEV*Os`OguGl$X0;kB!fQkNz5CIe%`(KnE`y==ff*gxwhv^Op35gkTb71|=jzOw# zhM??&60|?1tNO7j@5#UtBZXSqS)ui2jK8ma_GRIl$on*jbcCvy-@g>4>yTYEwv>Hx zeK3>hJYUT5|Gvwpq@gCEq?H{B^fJobB}5jfw6t_K*$D8A?&tFtLurg&R^oERf7{^g zn9Rev#ftDQcE7@q=Pl~C9S3=sPO;lz%xjJCO0s1l9hBu$2mNslw?2tyWaF1=PZtrJ zgq5Xec9MEvvi(nL<-ZQ3436IRTsw;@0GmvU`^$SF!26jTS&+WH9=1Nj+E@phAjPFs zWG<7u5|#LomPOQCi;!umWh?*=TUbU0E27O%)%A z)R|Xm-!QSt%g5VfMNBr;=4V-8wY6KtX2h|%`Y}#@_ui3`)pz02u_QB5A*$e)|0P0u zB#x%cL#`3YodT4dA0Y~faBBjN1Y(s>P+9JB?(+l8x0$Kmkv=T965x~(V4Xb(a?W+R z7bPUfD?boQm2#yjF8h7$umI&lV84zH>R>Y5h3ms55WrY-pEyW6r(HKc;-Zm&5?p+| z!h6#nPrfZ9Grp_v8SIOl+haa@`rW!Pz`Uz!dS-Tf_gmH)S6wxMI>5t%ilp`hW3P^Z z{y-(uR0oUCK1}Ip{H&jh4(3(lwT!>Z-ql7cv;i-Pcbyw_^dbA`VC=^_=BD$A!kh;O z78I#YhyLX1gbe#KAx6{+P%~$wjH+rYA|@=9ztuot%s0bjX2hw> zRScWK>0aO`2SKhhS)KCjgTIUL={> ziDyi>Q;p0MC}33=Ig7I9)Jqg{^QWS^pfbY|wM=rd^j{Xzd%g>ms*;SEuF)unNpLET zG&&%ZV$^qdLNww9T2G~;_i}jt;^AER=`^oxh6}UiR@=LJrtHyCuMCJ@B-4qiM%`zmAQc!i**oM_uO54U0he29#8`k@nv@d-U2Uxub(fmsc`eQ_dTn zkKK^)R_kC0^H4`a=QQVf^i3g|p9=w3Wnqpru2K<|xgHJQYiw$Ie&vy1$@;r^S}Z>> zYFtfLTjF!;5^*r;jL8|}`g1g^y_w*K*%F_e%+5Tg3MVBl)X%j%BHg|zl?JWX%AB{} z7pJxf-Frof;dlYF=C6HR|r z9z)tie#YCvz;@%60)HyViY>rq4AqT3DACT+*{v-!D-Yz@Qfphzt+U*Z@OXhm-SYhO zbQ_dw5S~M|jeL5f#l5h`c^f{{OJt)<*h-`P*N(W_F?R-FRaC*LZYJZ6t7B@r;G5Zmb|V7uK=$tAxkaWyTev*du%t$nQ2z;y*XP4 zRu)$%QrTT&yvEz^TSVZgu^i)97RL|)VLgdAuD?*QsX>G{laNq+FM8hYPJOh;oaJIy zL`Sw&q@kaFJ;T^F_3|C(kD)X?t!fsDugb~S^jQoi7K&gdC&g|s-;@>jK9-)UILI6Z zlg^EXoL&D56aW5Lx~jGFMjbOYI*J7`oOJzMta%ZZ!#S;WD$J;(j=E1UWV$xxA4dkn&VgvKKd zttS(~Kew#*#saVvu$9*V&8Rnb-g?S+aZHb>99l{8-5=qMb`-it{`l=^BE0PqJGYhQTC0$-1b$0*w!dvxofx8DoOG)ynk@90MY7RLzNaZ~T`x`_p+ZFk&H<~0=zqvl@Ub8LCMnsQ za}S4TrUO{a6^1UTCb>ZkHbLc8)wRO_9 z`PuP~MW~@7AZEWN#$V`)HV_982 z;#!RucC*&y3ye$iU<3~`;)WgX&8x}0u#Hz!v*=h|2Z66FPmsvk-jNUiewSEdU;tnJ z{hFSiE`P|gXL}h5?Fr`kz@-DI<%jqPh3WK2yokCXC>kMf%kv0RZ7z%N;C#|@Z3-vB z*4!lPoO+tNynX9u7M=XJ$6ZJ|i@!o0w1W-dozRan7i}Wiix^}mD-^8qRZHB@v8@qA}b;+2}eo;&r{aejr;wL+3&GavYZIvH=gKQ1Ui10s1{ zMCI|!S>4>r1T%|G6ie=33HpTktjR24tkbwg)@8yyfD2e;!QOgG=sJ(oD=MnvKQ0Qb zC9l)K)#ES1+WrZ+A+H8RC|_YF1EgJ3vFc6WT=XK2QM(;nh!AYkGz{V)V9hmMI*)gH z5aRO-^{uiA>46TXF7nXOyB%!UXBL&*{C&jjp(6@Xz!p=;FaTuBBkJ%9wl++5o=4t= zqv*DKaKOsd@k(uN+d0>S;GY#{=96v3PP}?Yn7#P%vZSOWAg&-6MayOd6f&rnie$Ds zq1iySawdN0I6E7gGYO< zXGwR-6wFHc_AQNFAthoLJ;;KjtRaO%7T)>yOt6QY54~{ofBaj!*O17KtaB^Esh%4_ zF(kEN#k1S02aL?f49#6#6EQpcv_=j2oF^*y?Wp&M@^;m6=trIw&PMv&IvIG_*&giu z#&dRH3(s4^Rk%D$N}ZFN@$1Q0PxVy>;7^sgwN9WM_5Yvw*O$yZ1P7_X9zAaE-IQ`h z?JZdw2NA=DSVga7VO#3gT!;Zf=*|@9$zIrwN(~SEy3cJR4}+q4g2omJ+YhHffj^AU z+Bz7zih`6V>-yr!VR+!BxaIzx1y`h8h&-a^gr{*wAf1u4cX>9usCnP{;Y%ttgxU81 zWB@S@Zfx^28E;|k;*JfCqVGj7KdL%~X${ny%XMu>=zx-D*l6%GRIpDtFkj}wjW=q4 zW)LY4I+BIFS(0@?nx03v|Hn$uL+r<9J899sr}|}Q>(nEL=L!l6p+{Y^WVGCu9n|YW zj>?_=n7vo@@i-~F-jzdV%;Y_^byT=Td>GwgL)jxlMhFC)W5jD^i=Q(tcib9*Zg6Edo>1QRYgtmyMLCS{=~K86~>2=pEBpZ z;uJ=A&XpQjYXX_KK*Od5y%~`16CGG%&RX8{5u{FiRt!Yn5zQI<5jm-a2V4O@xK%$O z?x$*xaN~E4kmb9=6`#f19*esfv36M>bSG&J49Kf+>Sk}B*?fc8Ss;B&rUGU znb61w6iIR>Equx@St9{KlOcp-Vg3-pee9O8;*@??Nf&#l&WAqkJ#x{5B z#^+Q{p*yizUtp!o2tZ4$yw+;td#U9{sq*pjk)%}4^e;OPe&b z^^-PzLFI_?T)KN9YzX_2<5C!tNLJ%!DxJSpDu3Xo@NH>L#9E^999JWKDpdY;L~(%; zdscdnh1DudO8m~gFUk$v0!drkx#>{)8zTC&n9TQPF@))vWz6JpE4k(-&@cN5r(Wi6 z+v~A3D-^F&P~7jl)XP^S!vv~yqk9U_WpU)Mm*RwQuD{%A?Lx~9SfX5I7Ud?e!xlGi>f|D zUfqN}_*3lLO)kDW?n=2u){YzQ%9w@75ZGFEfW=fj#F;lW1TbAIFphaHuo9hmzgQvl z_8T^um1HU<3g2e73>b0)Kwip>ZslszT?*@3;&Qp3%1kn$rV{vZQTp#IjAb@6;ka_c zS=w7t*6iVQ^em@&+@DQGUoxjX^jrQ10%Kt9Eq(0eCc^B)mH0FdA6^t{nU}vBpV?5@ z__=h`J@(Jr!5LCJbXV3LNEX~d-AF9wotszkr#|?9a(AWW>JxDCNHu} zc4r$m5nej^*W1EJGuB?1a_>hj1G?vScQ~-Pu1a>yPWt+k*$2Pcr zq4_8@x$9oxJkC!Q{Nz865=>dDY*}|}M1Tbomt$or{~?ytirM&=sbtQT%LdepEF^ta z_v&g}D~pVYjOnGU2eXgy99V73v!2!W3sc4@zJ<^4Ao{45LU0^&00b8T4?=9sJMmbn z!p{SQ{>NI*_M|GyS9jeOUIcW~IJE~}w$>376@@5}5}kjxKD8f_*Z|?*wEa(44419w zc=2(HV<#lqmd8k6tnQ904+5BSnz6SiC6O+Yk?Ne{f9}n@Y^ddYM%i+jheJ_Oh)hUW z$;!RseVx_boWQ5R?x-WoD~am)kuNLhljJE0h~?X2?w#&|@>!-gU7sN8Jehpxbw~gE z$fDPaM*};B8e|e)_vd3D(OA`)$RBY1`1rW*ZIGNqJamLeT~N_zYI^eJ+n2bbCFRZ@ zz;7MTS?<2Q9i$q}z4SI)8jKMhgFeU#Xkmrr^EK8Lt_H|SZ<$d$B^TRc0t>@Upa8MB z(<7T{H`$Hv9f4qso%zPiu9iY8=Wul$)s}wU}nnmN{pniqhQT9P!eKvV)@ zc;a@5Fw^cLF5N~Di0fBu!5%@S+FG_35!7znYS`8e4wi*0ltt0<6}QX-*)<;0z5G>0 zdU4XOu6WWXox}EB$tro7$6&wPFG-p4;SzOw?5|~Lo_r6MinP+se#9P1au@bqssb+q zYT4@c!AZ%-Cn!rs}$~zOibK&lNf-F|B!@RyZ4ZL<_JOYAl1zuV_kA()dH(}jE>uZsS`+v6}@=z zB0b$M-3UTpU@4nnv5O$8|GuRKBH%p0#3ccYDJIM^jc5tb8~|1!NE0BJx-Yl7D_{;) z`z>*G=KO-(($Me*(chp_N2*Yp$D0;F*6nP_wCG?WwU0lwW-~!Crh`U5G#oa0TKvxsD zmR9yTh&PJz4s`Xf+#aMx`D3d`Xcb(SMbK?AZBMxJY8{sdN;@?bO;_7g_u92G$F{E) zZ|{dblZBl33f%edX%vc?3e{bMcT@5 zG9vXqhZ9zCZ>;}mJpP|`<;pfOqLyo>#`7oI245g>$W>{g*~i?!?xRHc0%dVz(|z7I z0Vy7;yjleWO;v>Sg^UmC-3@Gc)j)?ldfD3hT=tH5I+Rd|Z@y`~IsR7|q@R-CxxiGQ z)iM}cra+|V3>z+(WojE=P9gf|pKFYeyfJTGa$F2RZCM%J^iL>;MF2`LxF7i*%QgG% zlhk@r8~Abo#esVqe`CJKdv@`Ja>6du^6P0tsQ`}i-WOAzyr;e2k(KJY!1=h7X5~{Y z0-D{povo?qX1Ih?A;9n{J(Hs#1PkO2JE_GbuU!QygmBaVjAq1VUZhzcTc1^>D2WxF z@AM;G#a20{?bZ(sohsh2J*PCLdxiPJf~4$Rx&o3mAr~=@KjU{X`NZ`1V;pcz!e9Xa z_(AYVT84A1W2*^fl}7?9w)sFI|JDKv=t3dqDrOxoeN1SOm9Vz*p#K0qOmL=7qXvh- zV_=sF5?AAp?dWJWhf{`j6CyP>#d^fH3`_@!W{4%4DnB&7!NJXr)OK**a)V?3I1yon zbT-wpEtagHvyB51^)S;#MYUNgaC*t|hK=L=YUxh142~KCHG~8=;A>3~Qlm375n;ou z5%64lLq^wz_Z4E^1%5`%%uHs&Vd;cqkIi{%vC>XY-ZBOQ+Klq!h?ExX2M;Vq&bqJE zg_Y#1nN zKr6i&NDd$d%NB;&`Q~nm;reeL?!KDU2`j_Fyl*<$^>)@9jr|g^K|{hQ1-x3EY{9*2 z1)})OyCu$r} zjBo;TP6!?N8><#Oxfrj{{wUv1_ZBE5NdhJtPK+;?H4dQ>pgXeEbli0NeRV|9UVWMl zTLYXJq^CTI31iEUVDk$V*)O`$pLdlhdo-tnJ}Xjij8h+5?5JeFA`b1mT}yn3RouE8 zV)D?^9ZLn~gM>w%tYXO3Y}>NMSmiuOdO=)Y{it)sM~PbQ zgD4#2tv*0(>XeD7JwlSA1-yXCaqL)a3Dw_Dd-y%Eg6rjc%*v!wedMge) zoFa~=;d}f!)iYO~mGQ-nv2a6YP^P1KZrq+7COkn@B(Tk(afCP}dPEtf6XiZ5h;)nK zu-fDPL$7Zel|fQf8-~AoEOF4_&3W?~r*lV|@M~Rq%(^$TnA3q$vmBys?>?&6JJTY|TG!a=?5CsoBB-av2_=%XmG= z8y9SdNmQ84Wi;cZGF47Z+(s3=eVYD_sCAu2FA}JE765NMD`Rk^$lp&?L(L z5!6F3VFtB!F<1=GEj-ChIMt}w3XC2na(=RV^+n0Lp0k)Ie24_+v1wspVS6X19jM(u zalg$fW4ldlIg?F{vi8n8iRO-?<~okboqxiBMn8-K z`Np$2>^q_-02=`wB) zwi-L(18u1%fiMm`U;bU3?DD%EemDe-4bBj9kWF9f$V&R-+JDGkZVF2++|ROYV)(6= zo3nv8PcM4zT5wpp6CQ8eqd=N9NNeRcG+3C+5UYE4&L}*yDZv{RVzIzis-bDWea69; zlD@aL(^bU|Jo1X(*^rv_Ny1LeS*{z?x0_F~keRcYZK@rrCp%9Up8{!v+37_qQ)dCY ziLAhbGy6Rb)RzOpv#jr!7Mx~^ZzPG=TGBgD6$5F}fPLGz z`6o6nZnWcp*IT!3V`F8l(JBuP7_Ms0Gs_-JAKqvuQdjF}ZLMu2N)GX05I2fuz5)G0Urd5x*LEd6wc$nD^Gd472Y;KOg z=)fpO#BQJlD#1x=sd~MqkV%HXNxyDxFD<@n)w{N>>jwB{goIQkDhJYgBzZ%B>-OjX z9WLvYtbrqW(;uTecjL8eX%Ce>l6QNsO_i|T;d5Vi5`E|%5aOYv0cFjms}L)D*vaWo zSa=be?Il!df8Cfm(->K8sL0c2;E)+9jdE4;BqB41a2;-t&9qqn5nyT>D%j@(?;k0I zo%Num9jK3V@9|`eaO%ue)le$3?XR*yq5Kw}z3G=hwCe$?kNdj2kiKKb{J%;!2!@69 z=06q>-rU!N@_z_6o>0h7(?*NuBwV>49uwXf;5n{NcUvPxLQNn)Bz?GZOlUdWZ9*tO zuB^TP{zfNio~ZHkyor`2mB%<-E-9797mcn{>k141EsqW*f>f7czz(u6P5`ZCTUj2N z-|YdQ6;QR&1`p>7P&?D>x|=f%PCRMpLxIW?|Z7YCxd|2ku#`qS;iY zoBw7CoeJs-cvmDcXK_c-1EmxswLouES79!5D5u0^6367k@xB3r5z^PK&cfoIM=GZ+ zO|G0io2Z0vt?Y*{qN4!9zx?hi7X$=gf4rX91T6%pSU=Ev2u#aU>I)VlA0q4iFBs9gdh--M}+&{)2Mf5cm6O-z&WZLEst#90@mQ8uS% zx_3c?&VyPGC|UrUv%sYQkw&_>o1z{tRqel(a zMBuv*YBOJ6)kL>}K=jbn4CCHYWkAM`TwO>IG2kEVFU?}nGknQW9gRxPue4A5Uf zXZ8-E^~S4C3Wk&PSL=t+O3dozG3YAY-~*gZ+=1LXR%&}L~;$q zCWxmqJ0aKkS~>G`*edaOJoKZscG|Upnh^Le;NbuVwcf2%D2XG=2G!uO#=tP$@#C3r zS##ViqG8dK0hE+4i>>5ul4C~IA2qYA&T?gD{NS~5&f=2qAxOz3A7q8dWQT|BZsf-m z5B((Qek_u4LJqcjt2QjCysvu`4~(K=;GN)2l5vGCs}*(nV_Pg zF?bGxULQ$Hu3lo|*ek>vN4)W$-trZ2^)gVCAcm}+0z+l~H6tV(!5#i!@)IG8ktR?v zYB`M&{%Z6Ra0)Y*i4#q4fiQ;(5u5vaR%9U@`tI*VJ32bnMYx{o;0$WFt>!I9_rmrD zmBa!#5P^Zf`M0>Cqfwy3#D8&-6d2tMccn7g_T%1PBW(gILl9F2)&b^i8N-l-#D9Fv z46X&#C>z-7RW%*@p$3}|xhxjT99<1L%nn~17Xfu!+s7FaaKtXr*cRCTsh;fpr#Gj7 zn5&~XDisoSa6Shn1o3lYth;L^ofJANBLnP@IhA80oN7f{3H8V^O%K&j#54&x1L#>` zGanfwXf3nU6W1;5lx$nnRffmiG+iU5l`u7Zw<1CZn<`uuF{pYBt0%(|VX9j=aZ1t(fS*;OOllC)u~a zg9KF8zN^=x?aw?_nf0p=`aCsw{|GwNk3~#WOiUX{Y})fngYY$-L50FjGb7D#aADR) zHN0dWSmm>oq8iGye20$e32^RG-Qj1e=WnZb=eQL-O6T0_s2Y~K|Iz|+P#77>g9FcW zPMbL#Zq&KU5> zZ72l+&ZAX#+33qz>C1m*+zDgtX2buc2#lP6C42@fLp-P)$fxNN3MvAMWt&*xrszi z(I*9@Hwgm0lO3fgS5Vw{RPV%D;UunI{h0fHH|QyI$UfcE5QQ4kc99kU(2obH1lPA*T>RJ)9?5P=cqC z{a$S!de=l&j39TzOHLZosOUhZm?z>YyTpKRQ@l?l6Q{PFO8Vh+SJ<8Jm{hAg#l0?k zKo3Fdt>eVp=h1u4u}caasv~FLM7KetVTe6#T|6%Oxif^JR3DIr>$^?CKKd&pa9Lmw z$wA(^k2IG*d=kVVn^I3>d>t`zdj;XUPU`tnl+^vx_QH)W&}9pO3E1CrR8O46v0X0f z-Q93tAH$iuvU>&L9w%4cgX0sG?AFyiemr`R{e6k1d5LCt_G}Ma{q*qP zT`dk?j=?Wc4G1Ug7-C9)V6V&L-z4L4Y@TIGF&MdiNtLV5YR;-8^!;-%emY)bCr4F5OM_ z`Y+JiKbW#&li-X1wtR>uU+^DygLgZNTQ}lu)3gbh5`uftpNt+-e*8)ob&nvRVlk^u zjQ|`Jfli((5K<^f`L(>1YNnJG1`UkfO@eatf=Da(TPF%%Ko(sXET4tWtPELiy!qGB z@*rh3kuN$0@?fpW+EN3nG<<|to=h1@-Z^P{6S$B8r2;|Q!C4YMnsx2(Oey;D#(#X@ z+%Z*6gu=`9G%0C3)GP@YH=3Y#1Zf%o5YJj=6;&yfB&^%)b?POnR~$R|%mcH+u4(&* z$G?F^E^=ocZg!LiJ=36g%DPJ@e}wm37BF9!9)^VBFe1SXtJ5L%ti;On8=q~l^8v{> z`tO0zGUVh}2COIpE1zDnyIlHcdecF5IQ3d+_~N7UGa8kCu9*n$G}RU z;(7KXFr_)uU~*rMHPdsqA$aqx@t);zt8WfV_Dgn}m+Z1HSz(G(HOpYiu9e){`jqZ3 zBkE5?)+(pW6LBf~pmAqPsi0YBN(IVGdxbwDv4bx?3iXJ3qv*}Ez@_s?qK6R;8;j? z8q$S7IX`Os4xaUhRp>hkmq~;DO7Nk-T~SH|fPf#o1`^Y>EKs63casJSmmzWFPxj=g z+{rT?{0_T*L#ANW-k-g!KWFls0kR0agl+L37NKwF%WqNQ(``kHys9^)G18gY=p{mIs=wdj4{4ZfmO)?B}#1g}`@Yup~((8Y^DfL<4_y5C6w2OrN z{_h}d{c}rq0|DvVo4@P>9^AwjdH7XlWSt=|BU3&PY=vCw{%z^RFqxNnifIHk{oBs>wIv_= z;zGy@F2_{5+Q%dWuz;Nr7ETaNFR6~$7=E;%d z$qGLbmgew=yG1}z`wxvvg#ymIo|X)D;(`d^n+VyJYd460T6q0Uak2k^i)7-Fe+xJM z7#Dh1;=GddO!uKxV4w$^kAyi5Wz;vB$~FDV9{+WqfF>b~Ey#zT^JqRrt>bCpB-Kna%FLdCHU|du`|ZosO*4D&}*YWpU9bNF-P{d*NV=*+p^tY*74Pq zOVf+Lj0R;}b%ljpzjkei(n%f-BDRCyThDZekNVO4jfZ7I#UC>dacAbm2@Q&XsdH=B zF@1ICr%sE!3R8xrflsT%^c7T-i|9E*ZjEoPJ{exTd+(`hj=uzHb~)=0ju+PaUL-tW zF*9yz)wCrb{`IY`I=)d(g0DIjLrwoBRQoz$O^=~lJV4wCbSXBjpR5id7NU2}LN{y~ z`n*b!=bW)D3GFCnNJ%=u|EsYY9?x&tckN}eok@?Z%1#txhQnh19vx#VtQ!Ypw$j7$ zx9udADQQPu_1wTxthRI1Q=|gE?`D=TBSt*J+r^fJzTy%d#43 zFO0=54)|FdWHHrIyFP|WP0m-RHa9jN(h>JM#Q;v;8l7J0{FRz}jFX+Db`}a;n8?ew zqZV9z?a}PF#om*@-OPA`H<)AKvJ9R~D_o>}0#jolYrOa(+ciQfrBEX8s8~5=+Cp=n zwuwM*9#tB03(}L4_}o#hySU<<3wb+R^nQ9sH7Q~et<-W;#o8OvycQf8b2AOEu1BTf zF4S$tlqG`Rz_?|UgO4c9>yCHhmo3xwH&q|Te-3kR;kE2w%L`6b!%qQOm&Ir_F7K3C z)<*t5(kNpA5cbT+st57U3hRp5BJhcJ+TE93!%NJVs^!WOpWWhe1jtxYk^7Mlz4#WlR6r^n%3!%D>_YBnFT zuo@4q*{(6qNcN9lSZRqUAJI&;pnaZGxV4kh<5u%lvgM@Vz0DdlLsmwds7aj~x>3T8d0;0Z5N@DXiF~mXy6}h-3E=j+3(e_EoXnaaW6@tTSP3XH5Wu5 z<1d@EM;0dacNUCT&>NnhjJt^=L(^zIB%+GEZUpVN!1(eNcr=$I?<43a^y!qX zFkrc3=rx~B+_oQ|Ae(9)^Lp&;g1kn!B5mT`pB|JiEipBWWzQns&P|;{p~5j7dfkgV z9SlCq-^E=?56YYvIhga}Ri%A)fK>5o#XdOb#2MtOAGn{nen6sET9u+zWdb(l|H4LF z3qCFhqW#nMfYzDviDnjkJZ;BW`{#2ER_{eVC!a|ia*UBQLX_tRMLG#Y*FE-E^txh( zI`rh3M`869HWaleS`kj>m_FLOObSz647>2=Z$vb@Az6&zVHo)|a&CP76c`u?`Cmlo z4zzP;OF<&nyjKETa zZAZNhrp83AgIx5w^MYG7k3bfz+AnJpS*DzV2AZ0~LC)?kaZ~HB)fbN})fgf9dq^aM z=dit_qvfo5dk&J)wXm`(>JL?z2xWrO1ks2{e2prGigkU@KU0q80M#9`I;byX)# z`h7eDN?pTYWR$g5fr~yUPkkn5r>0a8alG)npd>e@to*at201T;NAG6!tA>JF%GS>= zL3nkOYh4>fxq|n%eyHv}-Q_j3zvW$sw(d()6$vy=r}MODm-)T?Z6-|}4PwYQUHg&N zz*Gp>5x=J8*C@Pk9Vpe{vsq|R9f+u3yN)7+6{yqTfvpCngyvrZ%Vv;nx!>yG?$+Xp8wW5M_e(S~h&e`HxsZ6nOSlwf;yCsF;&GpZ_dCGK{d9W*Fa_Ctv3XxRr z++UBqjL_<@m&7^9Z%{AH#*gXl5dPb*`W}TjJNzdQ=3127Toi6{$~Gvw`ITL38GY7^ zlT#!t{>7WFF`+BB##A*58U4A@hOu4Am4`o2t2%Wxd?CfF;nPDpwkP#@N%=m*d(H)0 zyko1aY}S^vM|Yi30Y&xrkgV_|!F+zNX>F0m!=uAw@-R7HD(AXjka?i!kKZ_M2ZI>M zNP-_MNy2dqDUkq<N&jF zfr?ese8(`KS9G)I7Wv=^Pn?rkOF6&JkhE%h;VbomLWw^2BYI^Qv}+RLp(1#U^)WYi zrvQU}*+=A{$N-Fs=TQJb`Uwx{vz|8Qevr&1z#QGS26ka$jAur@iLvxdyE<)pV1&nL+eVk!QXi~8#iN?MwOcB zRtxWqH|VKU!3t_qg?LCK8kA6?O!~}O78rR!?$Woyk|hGY9$@kWbrz@VNXdYzSlo7i zBWlv>)sc*3yDLK@*~0ZoS`LM!O}x$+LrY+EbC~I-*4K?Ye@3i1-0tjXP?KAipfJ13qI?4l(~2=ZiV>cgE4? zOdoUWUB?mQXuvM7t{cV9mpD)jcM7BU?e?_pl=E5;b(e7#`xTZK?q+>gjB1TLL-6_MR$2@~_1o35c=LNgEaYdz&0NpV`pqP@mQEs| zl1tm{>W(jt&CbqBtX2uAbdJS`2q(7TBLvmRVx_vu$C3fI#x6VMPW>}K8uyT4?uCeaafac;jZGkC4tEJ1%?9?Xf z@ddV-(k~+Jv+*&S8}ZyB7JaWkwp31GQebdlG`TC?=*uuHGChcP8DYqFoMB@c>P+!< zgCkz5t|SAFlzEI+j@8s_=1{#H zx>Q-jQ@!_DEO4pv^TQB?0F|$q2op*W!q_UCwd~1-?;%HA4{`z5MG9graB5w!s+&oc zcp`{Zni^np^(@n=U-0mER;p%G{Y^-6H+8aUSEiLJHF0c&cbV8aF?xFBpqa8PhE-&y zlv}w@YGn!NuRD-z?afJloOmG$b@0tv0{c&JjxgZ?%l5(L`r9RxI)hu)>oyEzj@vw# zEPS_oYA}b9t-bN^z%MyXK9(GkJD#N&prGYIW%Y5uK~+cW+Dyoi{a-%y&-dP!q|w!< zX&g*cdA{eUPdn#rjzusU=FZh~yn5XiC!U1ZWFK6G^8o!-VRdWf`Zme&{Q%H9`RR;_ zp+5F}MaMRKz|c9#^&Jv>(;oOLcbJ3Y_S}rU#%R}pCNaB)nJ~wWFy`r^`_=-D?y*I8 zQhXRhtvVYg_#0X>i;U#cuRcxUV(o0aI$-)55&!3(=t{ewTxUA=X>&Ir31h$b>~~YW zq;l#cY|TV=E-z_zt4mM1yIFLEh)Wo8_{!~&2#e7vi4RrVCR|rtr9Obk2l3R_anqJx zOgaNPv~TeS3u1{27LuPkhFpc!EjPObMDIoWhx*_U!VMHLsi=aPzR4B+2{^Y&>0(<3 zW!&6<*D-Np_cY}iS5ly+u#;=@oV9=ee$QFvqT=i6oB~LN-8P;h!4Mj}k zyupqnF-+*55hG6;ZoT2IJN~Jx1S?uTS54P4UTJyGlGL8hbSx(pa5B!Av3LFVBbK&+ zy-cn`CGXkohp|^@B>fQ=wD1%weahLYL-@Fld38t4bd4NsZe;{(zY=XG`OUsGTGpt2 zcnZUs35dIM0P2VZZ*yd1pWE_He((FrJpNA3bKzr$gNcoy`Mwqd_bir^$Og&JtH(Yi zTZJ`ekPFAAA7GE3Bqvy?u7vManEIr8piYg@(C3*>QCvBBVnXFbXIaTI>FTGTnp!pI z#w^J&O(A6#QmfX8N{nqk*Mwf-g}q@3A_R%5X>&_0@iuunpZ2;8V@!cl*Ku{F#k3>O z=xZHr30RB7lJhDQ=B|lZd`x1P>(pRm9oA&OkudI2npjL9nA^)#aLk4n*cri_z)0O9 zkzQ%B_%TBICMVjz?Td@!Wj0h0RKWqP02b@c4N<3NUnjeg6M&xuJW0HD&ui+Ky`zYR zEY#fw5yV_5u*|wvmbsj91x)|)%ONuT~{0if%Bcv19%XI@9ttGtIv?xSdh zPc>>}O&&&`%actTHl)Uz#HzkU2koaZHse`TJSk>pNV1i51WVq)B7#i@w@n7@7TmfY ztBMYhqp)K1$DgSOkCW_Q%zZSS$g6x8VczNRZgxINlephDJ;bLVAfRK=GV8+OeQVzc zDgmJDAEaSxqX`fbEQn>N0kwRJu`YO0yEZW~WMCo<^nqi}M^cbo1R%B){+0fsC*Z16 z7byj%;xG)J-~3<2!0UV5M9}XV&YL?V8;3%3q^oT0m$j)wlC3Lw7qW`zU0C1X4KJYt zKh4~_BE&+Pn_lF$vF-|_ZCjjo)3OYnN0kZ9P1H%Z6FF?FaSsA$i1IM-h;MUY^p;!4I9)c@h zRY#ruDsphGTZI3iTP_~r&V9n*=i_ohc&hdZ)?#YGk2DLWCFxQ-<{66H>Dt#2Uj|OPTGU6 zI3#eob);NNQ|+y0B;zJGPrmm-DE}>UiTpY7hfU#KxXM9+TgP#K8HJdxlFqX|9>Z5v z==7>I-*oCJiPrKKb>z&lC%eN+4TGc@_b zG)Hg1D7L^cAQ!7Vm8l)k*VWlrE1ri7UgWFjk$h!P_|{r>RFlXoH$EI3&0Vh9G}3V< z(}R{ZfdNHZ6qov|Q~wLbU-8MOYnqkk#tY^L3y)5ADwJf$T{x0srK;Ze`Z^{2sz?aV z`6%!sCGv3KL#|pEk`CacQ$7r?yrbXFLPUfegn8QDeMD5M0pd7SIQ@dZ7DTHiRwxt6 zc_UR2{d^g(xBp?hHu~deCGca6pDPNP$$6xgflu@A&stsiz{V(8UmNJEdACN!bq)AeeLEbKrXTdy}vLj*RwSa_U&TTMx!ocr2n;0o*6pf!)q7N1-=qH_AVxPtY zE;?3P@2WwgRZ2i@8Zq?R)>YR8hrfo7x@jNnrPuITOQeuaIPw7?tG#X~wEt=5e;5SmP98*rJ3nW1pry>8jD zc=UC3WRIo)Sr*@l-YrEO$f7s2Aka0trCxaB+cDohlgG)Fc<9ZqSx0=VrALiyq z+XQk&IJDH9O2{S?SvBh0XYhR9ep@>8&6dRm7v@GGzizUe#Wq*#&M`+e4T&ADTj(4+ zxG>S)bmP^^!w|b7Vnbic)iccrvY2C|QGt@31KY>DTIhU3(-}mp#)pZ!I-?n{(^g$e zJD78@>$jPi-%FR5XE8mo-IgAvkHS7-2ig=CGwN|L^MJa@1}2gU^{ao>W>bt3QQB~L9COcHtP1ArAd|1X_K~LehEET>-y>2=QDUv4b?A}lk7uJOjry! zDt!oy&y#K(yRy6OWcI~JMU^IXQQ+Sx^hDd)P+jiY=v`cN3yCBVk5l^?j$7%E@}Z0- zUKy7_DaZsC?wFhc3xRUR6~@9HtL6>=G|YNjnKwQda>`X17) zcs-!tG;3t5WN{4wDWf-OL_tq}iNQKoW>wDJVV}n>MuY0PTQ(SJ<-3u>7eCRmv#}Of zbtTo-(jLr7H&zKigC}-{e>W+kBdy3tT|L^J{PcW~ZQEH|(Tmyp{X{WB(Kh6yrNx@* z36pHjgA#P8^Kwp3bKsR!-a`t}a{Fwc{rT+e{P5v5TJJztT?Y850`Qy%vDAaj#`kY0 z@0yu}<9Ivx?ZIzy(fw_wvE38^jBi`P^(kWxbk|*E6Ket!h(GFV-*@raZ(jx9Zg@-Z z*th{Q+=!MQOj0rD(6BJoB#m6X@_YO@C{t4du9X3=0rLrT!c0)!11!sx0_VvL6Xnl} z74HcHzPU=}W&V zoum>(-y1s-F+6dkoqfbbS+iNQW2>4f@%Jf*oV4e8d5#_Z?^-{<8YzSI5KP3<(}gA- zW1zwRFcjI)&w+NIPv>13B5$Lz0j80`l86NaE)$2^H~bbm9u&VDk}3c}c6JV4 z4Rg%5V=$B@z+ZiRAOw2t#l_Mf2XNotxH@B%Vix)sK|EeToJ|xv_%BPWhg{g&^Ra(= zJ_(455PZ?xNb4tE%_zJCt{HFd)k#v>jJUeNt1dWdrCkqh!4f=2_Rd3Vs#TRZl1F+Yw zJx?AHv-=&=g~cr2Ho`q`6d>JJh03Ya84)}uD^v?R!6M_2559QB*UZWa=wr}R>N|h@ zE26%nTstEyR$_JgA>3Pqal$G6`%g>LeF!Q5Yr!2aa!ir-uV|*S0@%Q{Q-f?b#T|++ zaWgU4eEM((`5vm2%vIR)yA5C5 zcWCf74pP6pW5jeAbytiq$KW4;H5wG9FB|y%{lzdM;IT?lz93S5UO}ODvhNKDc{&Zh ze=$%Dd~@;}ge(sF`<+l|ML5YTJ1$6VS*vf}+=%q*_oD(P)mcz>Hz?ibuF(5h_wj7xTI6@Y02h~HYBw0Ogh2lT3I1f4;tctGi|Go?5GwP^*; zMVT|j+A=+JV|urWz@Xax9mw|zSn;QjYa%hGKxY(GPm{iX8!#)(6u??1PtImQeT3T*P^Qm0a zblc@qL)KAU|88aeG6#P!RrX}!2%VjU1qB6ZX@`#Bo5V-AVhUA}x-UcQ<@ARKMvPf-FkIvJEIL2Mn& zv_v+&H2=$n^5gmU`vCczx0jcSib`jpE2+8p#hFutEuvwyOMFhPOONEr^hE8|K+|q^ zVa6f0DpDF68sg)56nJ&E=VC+n4jlrUy)(*U z{gaGxef|#cb#HR#;MDJ^L!AFL~w&!ty!9$Cq~?K>UV=rsi^QIc?ZpmrT9k z8f*9hr~Y10Yl}Z~tL$o^n4P|U-~4=zynS_bwX(AE?%lh~D>5xyK)k&=h~Gj{Y$Z(0 z3fxO|ywBJr-c4#F@U$y~(2Ve#H|*?^E*W6u64>2h$-uxMD=Ta6R-4MjkCx3Q*3{Gx zY!N#_!)-)cQCBtJFy04}*WQ$nl{#NXx2x(T4Mt?l8m1i4E^>1nBcy`t1E{fkC*$zU z=I$Nlj!Wd`)YiAJ+6GelemlO)z^+ZA)<28HoqYh?i^tAw)=mWd3jvVLxKp22M7Zzy zrp4Tt-d`bGu9Td;(uS>MxR}?Jw4%xA8kwUH7vHZCP0P*}yKztA?d9hu%7R_oQY-7<%j3Z^EOb;urGS2YKbP`4pm9f-8pE zVo-UHOp1>;z_6nFxUV0_B>Gy}D{Q?={ppr%vZ{&gYNc?e@F4w|M>B48U2erqlJV^9I|C;I|eefovvJYWu!p&nxp=V8Zu-r(Il(icTef0a8pQ^ z-0ub#r}(E|%&d_fcRx^`XAoN?BY=yk$$hnDb)?4MBC78l4HrVtZ%C<4ZN`#)?=?kZ@Y_=ccA6IWKB8*AX^0HW}N_ zjOPZ$o-Q^v)#^E=$kGx*s;7xb5BR6!3TkULWFLAS`bf2~wHuftSQb7_lj3J1g78>5V`gcmGj!+3vr!*nVcq@6unPR zmB=<4wwWj6Dmx0_Zc7oV2_Mc1SI>($mA$dEgL2+WqHRphd#*m(H2p1wm{-2eM(n}B zHXG-ikQerR_|&CH?PwRC`}leT(Hh&`b_ypc|4RnJ&2Ub^foNtYkjD!q9AG`TOr_|1 zHQVq~&eMa6AA)I97Rp|%Sp814Gk-xlPEv;W}s3>{EDkZykMv(`a__|I96;ZFknu2YU z5(`NLGCgYwfvB0AbI&Pw9334EQESI3_%CvYI~fG`qo13J zT84EhDb)+34hTfG`x5zyQ(*mMF(RvstZF`jjc(05`=KMs zayq&fzZ^k3zN@eI!Q;rtz*=su?Nzt~3oj_pa_>QC#kET(O-Mgyyhir?j*+;Zcns)d za!O5n(v8GK{)p}=*K6^~KX)rqQ-+)y>+81%6cpVoT7ABmZod~lkdoSN`^f9^jE^bg zfHraRJBk-uTY8Nu%FM1RcX3MUo6UIks_#?LS|GoX#x0BLoc~`vx&Q~B^b?Q5!*^+) z1bbU4!H>K=9UarhZyy5(q?wr<`Qyiq>FVo`^23^KFf^eaA8v^P5wxt_`- z46C*SSf|pKGi5Frt#d64V3&W3b#L__e^9p5Um!~G4y`BIW`$u#iEZobBp1M0;oh~# z?`;^@%4Roqh83|=-J-QgICcM?{~E+VCmvj++iT-4PW5uxYqkd^Y|_G)z$_MXlOTEv z`9a;>+`PBtIKg(uMvlCZ{#jDB#7l6t4Z{uv^OPUmA)<61$84KzZe|7+TK)XCV;P@n z_6;OhbZ^OTO*lNB-|80CQ-cqV!D3~d2JY~uZe}u=*}2(YnSZ>Yz_jxxZx3Nd>%4L! z_v^9k7QI3S{)O4e>Sw)I9zjZ2HjeD9C=`|3iD#l;aupLS4R4qf_9W4QXRst8m5XhK}w zo_+hAtxI7d3if`LJl~#)&X+;W5ASjsV_#Ek0T-w$3R>eZ_d&pOB$OL@?ZOey?l zf5T8v^2zp6X%%z<2X2|kG^TC=3|4R9fRMK~-tmEsYjAPam{ArX+r>#aYbKzl?x~Jo zO7$vA^=ED3I}xx<&T5pkNen^Q(M3FbcE5jwQCRKPO4Wt{E8Q0py0)si{+jRfU78r4 zU0ivkm^iHV@omR!g9)cD+Gw)nrM6XLe1zW@hY(~V3&xAi7RgwO^Yv;CGatmYQxmh) zvxYHK)MDoaA=io4(!h!hTw(aoG2QE@+4UEEF2L1yo^jK8AIOzg!}+dZZ-64E%t$Bm z-#^*UIpB?SG#G*ph^l$QCWbvCDS1s%DLsJ+uHQUQ4=LwLepDFvp-qFaN?EuSihSr) zh`L3MigfTE34M3_S~!BUDyfnV#K4*-ZFzB>qZVbdk-%JZEM{lJL6gBJgoshKJJDjm3Li)+JPi`^G#}z-*Ce;0(`- zt3t6UH$3b*yy$^U?x|B;G5BBIn2xdWxacRxyi;5K_HlBG>=P4>+FfhLieTTh%eE75 z!WMMQXCa3(eMoESGNEk!<5}r5*lBuO-QbIzd zkFj2+*A-~f?>HrWvnEjmL3O4XI^#~LZ`t9BxawE;LBnH9j0*F$+(q z-1z(Z2XBmJolKh9xWg7#tTd*>=j-=ul+EMwt>3C?>w06W%H_5}2P;qz3j68KWanBX z-Z=UNB`+y8zjX5^rO;>4pK+0|yHfJm-^z90ui0?%nnD^Gv;~67`1p8g1VlIBR5#p% zuE^Qth)A9wl!=;d$<~T4GtWP4#^wjsX)Yla0%;walXXn3RXQUwO3rF%a4C4}Xz{|4 z7k<;LyrWS{upB)U5{fzj@jgW1r~y-=?pe&-Mb8aeWQaQjwKy7TpB$5rm9=K+r_hxe zTa~mCC3RI*RmsW8q>2|%b-Ut`=>wZ)nofdKrx|f8CN*us5Yc7dCS9j4XdSQIAXscN z$Cl+MPxeCy;r{jYeyL?ma3J72lRI`SpVi=jjD*BhKS5WPYADv7)zlM~#6bsK#V%6QU*E=7NKF(u=fAqCrBL+zA?V|#iU#y-+nUt>d;G_t`a**AC&1% z!iA&K(q?v8IA6i79NY(*b{&zIr|f!^7rNKy%XhI^hA8c5Vez)b+By%FA+np3GZ*8* zcwXW~0}WBzT&-xcv+a5_htK`jLd+{W&vsuvbKBh06&Yiq%Eyg%%Kd3UB@gg52C(dw3KLt*tU}P*?BGhSa6IJI2l5G*e!^ z6UTbH(zVm4|Jn=t=n3g)GiPT>JGJ+!;yjTMzqYN{B|ZGv4Gj^Usb3wDrv5BFIIXO+ z(5+5Hpsu?54rh-k9Utpvn5jBw!^6X1R6Z3ioQKIvQBw>77%^Cc0A>4PX3D?!p;o#y@@LhB_RXKt&eAZSSYbsTFYwz}r2Z#ZgnVB$u zy#IPOE0crG`3)O3*s66pl9jQK@E(K(Q!y1yO-+t)G6uF5jP~+QVq*nLSUS70q2Y*> zR6n(&rHw>N-NXZij^y*$=f%Z_4_ZV>XbYR0#wFgvFgHT>*fC2j8_(VnJ5e7LBOBkn zdw1pr3kkeOXONL6ck4=;FfOTf0BrfRs=1i$_SlfeT}KS_9Zx%@w0GW<#D(IvxLvc6 z5#Z;Ca=5Jg#*6<}6nn+I+AcTo+74Mk-EMT23d7;yRjXGn+%lfGtUC8#-9<)^{?{VM z_v>o=dE$yDa5>k-1Ww07$nJ(Qva?I)U;pCDe|#4wkVp^Ml!afTq_J46)aFsGOP6M0 zXh}Ok-@w3G2Km#up8r_>0*>cMWMpI~`#^9=$bgR;H^V$~76OUkXECj9JtM=z4#uuW z6%>pN4O2J$`wf11MmNytYf@5DkYNlD4Ly4NSXWo~aa0t_%BtZinm*fVOxX^qp1kj3 zTS!Cu34qCAB#_NeS$jU4&)W4 zzbQQbCD7z(4n?iIz(d>$wu#W zxF7!IMgRF6zN<$4KdWR^D0BN`TB zaX7}rSE}=>CU$rCca@R;Jtn$Bx4FGDyl7*vox)GS^c(6=z6-<8VFT)f0ZvdbjEaf^ zVJhE;?&{^`1xH4WE6kr5ZB36k>d*_GSu5aZqPnWid;f!02u>3duQ$Pj=t5}h0Cm;R zZv{+hrFS5}B^|VOY-D5!^c8@FWwqLW`_CfPGw=)k1n%mk%L}870eGT_$@gKx!15J9 zt@RsK=Y@NrE9E#0gaJ+XM8}%rXv;(CzlxY6wPo0nj8p=Puk!>SyF${#*!H?dii zj@;z<_;M*lO`G}X<8gmg5);Y};NE~F3GQa{o7codksGUG;@-=r{QuC9=^y||3Cc4j z@rZP{#Hl1*_^Zl#Mdu@oRe{K2>>NW6Ter?;)qn}axq$cJaXJ#e|M;3qs^W8oOX?p& zZ=^{lyxwt8dgt@HeHo7&E_>A;3MAOrEao3)ZgPLEnX9%R?giJGR(My7^zqU)nmBdU zEfGYxbM1>eOYW9lTGMWeDQ4rd&$ESvg|$M(EXzDm3z#-rhA8ZaH-k}0G?=U)&yYgb zt;6wrUQ*x4^hX?qURS(-Ss7~`*{eQX@160o{WbHOSL%ugBG{n5gyJ#;##gUhyR~-H zhMyHlxasr>|Haf_*Y5Rt&rE#M)4Iom%j#a*w?&sECB@}uU#KXigZpWbFhlX>+Bh;g zTJ`458oeCO80EH~LC)JOZ!vz`EwrW%8*NNu7D-D
q+!F=H5q)W|{4E7kP`)1#q zM!4#Njm=dgP1P7gl53!!)n&zxM8@)8~h+PCfB#Bc~}pakoFi zQpCo?<9+_K_TKHcvZV9*MOuFUp5}3-SFd?UaZHT`aBBLjEYVi6i~U~zu!5dFk?ufX z>{3q_=5eqe^=S9HsMTV# zpU0|fME!i`&KGM44Lq^YP&6DHARH8WOb@uh;Lv4qwx;6J3}}F0Nfz8yJM+H(!=`Qf z+Lj2))NZhtlYrA6qHP#LwRVjgzJHA#O>#L4e7^^sYMsq)T$IFT)%&QKK4fy8_Q=Mb zDi+h`e(cFXRmfgO<6Y!LMFmcmyzwrgt#!ngaY zys`7V;byJS){@}*Ne+a|{8b$U%Ti9q_Gw#ta7^VVp`D?Rhm5k|^xj?3_=-HOoXY&H zVoL(BOHhMeUC|j)|FEJlg-z)>ML|1!lqy&>6(h5fKJca{D@y*Tcve18`D{9Z(5~;5 zWNq&)Jr`INR*4y#+xYZXSPvsm;CDjuorOHjhNiz|0LVARCXyRq*GpAh7HlT`^dQiJihKjC%20# z>yx&!v1}W@A+GERQGrFu&r+)w+Pw#E+v0`qUv+q16N*H$qha>SEQf@A0 z1p+=>NuIIgp?C=AS0CZsf7oBW@dIg<*dh6p&HmKoqgls4yhpknt$V}M8`~9;%*K8@ zZO|w8N+x=)XZgxc(|vtf$uucSTl%|LW~GYUZO7#w(p}3(29(oVO6Csd@iH5-6kF&@v};>v#YW=M=)|8 zG#+Jd97${YV3>-}gpcTYtgeB<6XPd)>f=xIn&M4PkB~OfvLqcjbT2j!D1-Jr8~(5CD##<)nOeE0zc$F@iBnGJC!SQFZHRe9b|LgJ5>3K zej6VO<;_mkwRY(3NhnHQkiJUsjrON8)xhWe!nVha&Gs-)M?l^-jUV+(va*VfPChWb z2By5ehCRLYQtIdqd*tFodGTO@vQdrD7STG5r7n_Aam!XGS;wIUO$}z8E!r`EeR`4l^MO&&Q^1IU6GeC=s|D?aULcbJy}6a{)>yy=$TMX2An0_u=99TGu+$qRlMit+3RE*Nf>lOJYK?WP{{DBqh9M5t#dIT) z-g6TsC`zj_%z=Pl-xM(kBM}PS#uXr7pB-&o>nJw+emJuRM8bG=aF(4U#48sU7eht| zQ93kS*94&{6iTw)px$ z9GV!!4o6iCW0Wb>%7`7{0RumHg8Ij;rapgee&x!QmF1;{W2o=N(anICKo<<0$u)55 zIRm`{Z_wxRrP;|b68vdKVIG|S*Lo|xPQu2u7F@#L-pj#ZVP{7pAW&b%7+gsBf>^>g z#kg=t0rqim`9`2YjJ*l(10WmY!WM7%$B?S6#osi>I$2vF&=%fIAc%i_z{nD26aE_Q zH;0^nL{C!lfrb%0!DtL2`%t{;V-`dPQOQSuDWX~t-gy4 z<}ZuwYiN?Mf>V|}4vE9sN7nX7Z2YI>>(nl0sEWP;3EBPCrEl{c^pqj*EZNt4gC7nuY3Eq zY5@?Bt!akeBv9X!cMc!wg(B_R>1h4sbo?5H1+zh)$x3$k;y$O4KYiYZzWFJkLxXdZ zeLg-uNyv(TfQ|o#LQcc{lD29HXhF1x5LZA0bRfHKXi8)M=YJWo)R1sSr*;zpeAO$# zDPg=bKf4y~4#_)w=I?#Y=^ys|^FL zyO844kjSVgPN;l(QBwwj@O~>L*qY@ym30{k|FMF1_dIedux?Cd1{vR$U>kz8l)b0AIuEd?b%4>h1}+a&*`{Pc&au@li<8?xh1tC2ZRQ1ehzQ=<-j z`t%8O+1V2>(dgaoRW}WcjaLS0_IfP!glzpcfpbjhNt zTmgmnd|4f((OQ2d_JG^Bfp{=9X6QPw-}q}kUxF5S>WfhoGjH!s`Rl+x$v-?;t>$5E zXKCp%Kb4^W`%>$&tybp~fASS*H@CC05_;n2=$HkSd;5o-r^VcU1kJ}PyFJwG%9RsN z-ir=SPT8pJWaBru_ht~fG?n)QXVoU!rUh%doUhFjl^J<8n3K<~T+?m)p1pf1PxEhH zDZEnn0MDe+BU*TB2I_Xzk0q$T5}lL*sw&1w=801`*6;fXEY^!SomG)YFD)ohmv~IS zp*(zy#e(kGy=TuJ$xXkxZBPAeF9kh5)w$!}p3UpG4ELIKVp$<*SXeNGEq6DNE2D{W zpcna`1#03vsMuysWvep1-b04RZm?3t>(?h~77yhk-6_|9DKH5)z}8hEF5oPky1?^}tz;NKaF2Ji^BCkK|(?GDq< zeuf`4Eu2I$e%%uHx0CCeI(KLN>aB8j)w%IN{UV@sF&`;;>{xqqvkQzA00q*Z&=qBB zTE-sCM zOfz)s7Jz+^%E=WKlzilQ3o}^?=cAw^kg-1`IM}e*GdC@*Hk!lsnxygWJZ0RzL7A1i?!TdGUp}bE5OBRO00KCiVF04k(Z~f#oOJZ zeKf~VORI08rL2t6J|^iR;`z9}y&ckcb>^m)mI9`6a_Ma*+m-?is2%$F`T6xU8fr)o z9Cs-pB@`5*X@`is+L8cBOA1cROPY|+X<&7&|vN2bOZcx8u@t$d z=IJqf@DAF8Ae>W+J}NKo1C2K7hHNb2YmSmkA*#Lz2ae`p6$M_52 zt57dF`P2j9V;+Kq6H9O|>I}x@2=+ zzI@M_S;oY}Nwb)Vx?*QQYzL~dpeEy|ft~#o=pp`rRL4@COA$|z3NcORGGPRTFyx!S<8ZYMJy*r;cOay;Fg2GmkL0FhqiOg=_|8)e zd|bs%gR=nT7BgN+*Zquc2ypbrbg+2JyQ4_LjYJGg{%bHP4@ zxPguM!GQrt<@yql{+bx0cY|@QO-&aK4WqEE*OOf_waavn2H1_Z=W77vsvGiv}{e8!jDk3Rierd5c+W+)Ff=Q=jPTb#OfGS%_@3 zzl|S-#A@q$(G;0e<2ySNhEK>WDhdrMVBnX~|tA{hsWI_VKTF7Ka zxliOpqynr>PVtYU+irU4j65XwY~1}WTYFc2didF*6OH(A%iERP{P|NIsu~RoEwP`T z$a!Q{Ak^-l-$W1LIx}TXVKSKai})93m@@t6y*O)5qk1?y<_U+rGH%Ea?u5=Z83ESGNGz4unbudhKoJ_W{v5|8bx!6-eJRt znLGI$^-Vp!yk@I^lZ{SNMm|qXttsZ?=jVT!oGi8TH*SL8*ndFDzC`8lOvTT7`uhl1 zYmCeD1ZXcq$tYj&`cBbjDX{l7?A;}Fz6sP;C?Q#gD$z)0POt5j5WuTncW@x^hlGX- zxJt?HpuSL%d+Tp=!*(3Nb16X;d{P(_t-=kq6JdU@zWU$a~l%5)hQ8W<*fEAjvWweg3C_P1J|(f za&q2_a}G;IZ)Qtb*;o8K!_YW(__iWSG&olo<%O**Iv`$S!L2mRO=kh8=@b_6tgT&p^ku74{%eF+9&U)EZ`i21jm z?sLNNntlfjd!Oj#$50jo2B@XE8KRKpWoVNkb9GoCB>{qw4i)JEUI}(Gh$9CW0M{uj z8qHsAhO3T^{e@Tt+zG5F2*2)xgmhFC&8sORiSGJ(a13i{J)n%k8iF2`kH@<`w{-x( zhzgd@mQP4d{(!=WnAqCd@?T*ozKWD2T(A(kP02#NEI#3S1_il|b5CF(5ZSkC>?EM8 zDzT)*NGs@PvBaFd6qVuA$h_y&5+L8RZ<^h%rH(>?DNVSn_egF1;<5k5jVHoDPSWcm zb>pQgVLmb}9!ouF=n~g*|*S&`v0P@3~HQENyD%#fe zD4NYAh%y8NCss(jarrPew+#_*BTM<2J?+J#45nSg-(G;ugC7-)uM{VtAHC(udT?@j z{hSlDS4&@KX*u~>iT1l3QzWr;|6=VJkAmt{DBcj^7dl6bjIy4QRelww_8Hy1O@k3L ztKC5EZOJglrxDU2K@&%SvU+ujsYl;;Hdfe$FQ$6OQC;< zJ-n2aNgQGfV2;NW(%winxaQ~O(O{lxWc)s_c9`$pnfu!t>RS?zl-yhr5_we%dWOo> zb3Hb0+-M`qrv31(k+Pel4R5^LL6O%a`V72CsHWHk>X$(VPIQ#5bC*f z53F0q(_2We;8Xo9)4z%dQ~fAgFQ(G}V)w3d(C;c|5bw(YEw2ZES)FwC8x0zDeqQ$~ zJn^L9pCzH%op|TZR^%#RMSc{l$bWS^!u+rOx8Ldg`@e0n|F=!{uQAd8?M43oc*D1n zH_UB^^b3-_2r*+@6sj0B2`I?O%F0s2U?f-;W(7nQI6B!Rp~TDc!J~H z>rEg&q$MX?qfkDe6d8Yf9^>md@$vN%oix@Y{I)4V?9D z=&!c$>4B!Gamgao!=}XkWb9c%xryD6K<)7>$g_7 z)cPx1rJ(~osw4&?2B7kq2*CG6-w^uj(qS+?T@gN>#4Gd{&E$g6SySsG&|~WB>mM-m z#C7Z1SXVVAyouCBJp57Sty>||9PchQe$a6B`vxIf0)A3hnrVb5zwM`0S?blU)d8cc za1z*hDr||n3fD~3n{j&iR}YJ%-EWo{n%Vqd450R_k9=K5|DTtA;)LQ{&lgR8%^3tH z3&BJ|KNx6USGuzNt&7Ij_)_vUdOAx@TFN0!d8>w7sJ@|8<-W!s;TuU+!I63xs&p6k z<1Fo84*TkBWjD{0Q$1RexQiLaBJX=50nO_w^;@BRejrk`1!>#_8Bc9kw2qUuiXYO&*MO@9SUG554rTFp{Y9 z?4cI1o|ly+v}R~)JvkNOyC?FI5v_I?27N4u?Iy}2x$S8=>12oDzI>N+T3w-(T?o(? z|BWGw77%q1Ntb?+#m+jm0*tyzYMTn30zPhO_ zW-!jRFUCdL_qxMKPeP4b1@5DZ$BNiHTp$`CGet=H)+DgYt5dB1MyxUZT8-w}9}}!U zRk8AoI-hIaC18XPz>#=O9Tz1)JCbS+E*9&Q*8&>BPMX&>I9>EN^rMXooet7XdgkYM z)bNKA`ZdFLO~gUobDx15Ev|4#M4iOWtsy_cX&7}6{YV2TNf%?*NUt@iqUP|Uz(h|z zZND$9M!>ArL^2}dw;4t+e^uDQH75ENX4JlQZX{JIC^z#IN$m0<*4_Ta==_LrZ{Y!io$kpbWn6 zB{$9WwFE5c-$^^}9_uyKZ(~!t=_lRPf=u97Top>>J&aX`q=mZOBSJ2f9GOhBK~|Fl zTt^5h>bmhH7OvdXsHlZvn&-8vB!@b7;?pB)KYudvFJ?}?*&}Wcm0u`6e2(~`V_~Sh zy39(#Kx%q{<~2y$6^h0oHq<2!MubNVN0cl2`1N*s*5|jaF!*Ej6@Qi$AL`i9XyqlQ zc$BB)V+OT{EOO}ExVBAj{lf!4a33ETvoXmshqos!a_n;A^r;$dUp&xHG=uR9y<$BE zyrIo>M^1bGCEf8^fIo}249ms{${|b3 z0b}NR5xCbVN^evAhse~)o{Eu~B6Xkq%Oi7{R^86h zEm|#-vaGAOM6VVrJ)5$;;(>4&$9UBZ7|K0~iHXTwdCqM_lRAC8R}Wd_VeZ`0GIpn{ zCH@^?Te;vz0X1b%QtXcNxVpK?NK5;|cys`6p)M@vIWq*-(QCUS{mGRjMdA>^q6p^OkChESy2vog#ibV{C+c^2j~&2t9>< z0hME8X?@wOs!(iSQ%>_>-nRT<0^TJ{=8?3lyNJx->&8}Yd5dNieuJ*;u{T!gOgQtm zVU_JS+z$!wS!pPV8h*Jk&*5Ht0nO8%-quDS+R1VsIyC;~`PjiX#`l8{y_WX_kny_J z#KJFzp7^|;60h~sC4yR2la$ftsRCugo9bv9DTWaoL1?d1zk)r?gT^d50TEowbmZuR z;pULJg&slmExf(leNNe83&dp_x4I}yrMd*hR7YJ#ni6?Uot&n-idVWo(TnZqfDWam z=4MD-?1025Szbtnv@d#9X1~U8KKu@0qG^h;wo~qk8s21YpuY72Hxb@ibNL1B%`;dZeL1Q>%rH zTDYFLpC{UPW`Qy_wfJDXk0!b_QJ!475j8nXThL_`F{vtQ%lCsW01pMCZb4yTD>nkd z2vSQ611=vQ8C_XwH;(}h9k5A|ZT1#N4TpV*VA*#xgB~ABE`@>$z=+UhI0J>N)$R1e z#((<$#2gHnM2+;hhS3iNA~vwcNEdRqvLi@K$KXbW2YDW*zbWjU9Vsui6&dTO`qkDa zAD>W+HpFmbcc&g4-%@fnT!yPSV5}GjFP8%s2`&4{>hd=Ab^L-nw%4G5J$ZQd(V0do z1zdSJc2@WBFOx2o&O2cSs#uzaZZy}KqZd=l$Mh=L;HD>QUY%Cg*~Fj+r``$l-EdK= z*sw`qrS*BtWo>P4c>QJmZ$O5HvFvTmlf5#4G*;f&u+o`r4v>P2OZQsJx%H25;A@yw z#kco((~{}zVCQLHy6o@!9(}MI4Mf{!e&D@F#PI7`dkM@=@5y_0D}`^qoovxM{n7MS zuiE5$U3;HT>&FqJ=X*a0cP5?Xjng+1CFfHFf59cGARKtr?CUf;$`<(|d<~Ds^q;Os zYu=okneoWL_#$$jC@loTcztl8*#PK5&|+NREVvMbhH*YKvIrV^{u9w|?bYo1hgb7# zzr(O^*z~Efvhqfjn|81EQhpZO*?9tar|#i1of0AT5!P_OjLGFWveo$3LmI)IcGU?L zj>K$S$=kluea88y4_eO05VyT<3NJf4Xl%BJuTo*YuA*G2#!3}g;UZ!JVo_TOEDyEm z>Fm?XMegoK*(0(Dy4cX*EP!~Iw7`>nHNw;QhwD4=i$lIxBY?IJc4PEu9yh+4!#ul6 zSu-WvyJoIDdv>1&6HDcujv-#V|-*{#BBn2!^rWJ!22>rJZ8= zeYDrencGF1uY@fBQu%VKFwY3|pm(3-5DHJQs;)~~B;BPnF+~WN&&teO_YspH{kt&xsr|GX-2U#gvopKK zd}E)X@%Q*r6nWApMVzfZky!(8mlQ9vnI7WtZCju>jJWZX3>}NxeEO0qauGyh24}fE zs0eI0v`!W(E&Bu&Z7NEw#at9TCJ!7jPeQx*3`RiYEyiv1vt7`_cu*++z^(yfxq=Ms zNpRBbeiO6&2phHBH^>xYS(XTXDK@7Nljl$r%y+aK!9XH2-_wb}OaiOxZHMD$_n4E8MM#f=9#T74XFZ8&q z*gM+Vy1G*P%azpI9|CSsbZ(!SP~laKc-=>s)yDW{)BYM41EdsI z8F9}H7v5sZCX?zeWbIq<$nSRDs|DV;cA|YTjh57I@IDg4R0vo&$f`=n?9v|3?lWWa zAA*7!`))=B-?Q%c;koR_n7RNA!3^tjY)9dut@>-~p;`rQvT9^@#l887^7z!7Y}ukG zM8z}~o1VVIfb^S6Yo0sTJ^NPbo(feaM}eyjMHv~>Y|EaCznY1*Xvw`5d>ZLA@hffo zfdrGRe0f0sYSOnHO++jk)bJh>*_}RmJw=y zn}3AuOxNc5L7&0)0+ArShY>~;o7V}nmadf8Ad6f^TS|QB+x8u;Z)jk|nd{bN{Rwma zHQZeDkzAVV3x&M`Kr8_bZyJOkF0QWOA!uMW7C!ZbLZ{kl$a>;`L~5r8>lnI|_gn^! zIx4npA0CSAnP~Uk3JjETVgL;VJYo&?mRNf@jE1kj_CBo|dV&?bPc8;MH$;f<>gs|P zPACQ8aJYff6<`BlS8}Y#i>3@QP`<}B|JuU=jOcF<=ZmH1EUk3K#|beBM3%g~Jamuw zt>l~6%{vVO{?gIm`SI0_P{l4EF!G|W)ezot{0~3Ii0mOAwG-u`LL4?TvoAfF4iCrL zy0pY;Py@O#Aa1LJDM4iD)B}}h?N524OXIzZdw*W1u?+iTv z%2fqWkAgR-kouU*R$ z!}6VBm3pxVno!^m)sk8z4H=j6{CA7L7JBm0c=I}#oeYaHL;g!Z_ceCQ&d^PGS6^(~ zACc{!$nAFxU;Vn!Ish6H2$Rsb9QFzv(*P8pNWAOp>}+Vb?_)slCU(T2{MJ7`^c7tw zN>5PREI!d6VZ0V%rq7`3yK3na70>rV)cRa6oC=(4Xci=-vYn}ibEL*J1s$o;I3K6_<^$`e%!mO2J?tq{a z~HX7=K) ztvr~%mb(8qHD0}`eCMfeX^V%<4*&`aUi+P6g31+#b!%#CrKO}St@@#$9CindUus+F zlG7DNYi<}DmnLvEoDDnq?XT?E8g$fS>cHAE)dPz*P}gAlHPqG3>|U0#ycxo+sBrY? zQ3(mQCDlqmUMhn2*pUiyb8@atx0!FH6BN{nyyqL_3Cq@gd4jeYRbd#U?Pd?AYA2{w z6UB(qv>jL{Z|@=iK5!^_jEQZVeyJ%4@idnp#(NlV-EDZ0@r=Epg*cm=ot@pT6W=qy z;1z1HPoCspsCP3(GIQGo56ax^3y(S2S=&Ij-g||+8Ag5}(%y!QG&Mc+d6JzMViss` z*+T80l0w2@d>!4CEXH_dDgB=~FL-gH{7Ayqy5(s^R86*gLM@|8VS z;}*Z#NI8!c828a%Sn4y194cG_-i&H1XrMO3hcgFPy|yRR_{?B3g~A+T`n+pmB7@V2 z_M*5BmS9V1yXzHH4{l3MrWwODki^tJGxYfP)XJ{In!Rq~B2VIUg<+2E*EYvVyLQnk z*^Qy1zBaAJW~Zf61sGehZw32FnaS(7sWZ{hTr7PkZYaY)!SCj`GmqD-W3x5K zEai$ke)PzGnmrQWx1t8g>eH?%WlejoGo_@bw|4TK4m~xu6MG)FOaJ24tMMoxs33r3 zkh34Qq^#hNVcQ~L_}%2BgS^21fK`i>!Uw>yw z1@(LDHE(Xl8h;cb8h1EXc7# zKTOBz!3X&0DSX@j$?6#!+tp>Evgd<|Q-^CGyWK(KP&gg^Rv-~(bzY%jIqx#)M>B8s zj59YkYdVFqh{{K(~Newn8ziNy7peJKJz8i;10 z9z{okG2rXW;H2c_Y)zjYf){v84T!#zZs6QRbeF}s?z1tZzVFz0yBT=nA?S;tvU{ac z&dZ(ya~G4u5elU_>xWTA+gg5VWpOVqmuf&qTTd4^K zSY~~6u@#@H$*^)a`&S1Pqeq)zmd&D&@tE}d{?{JcOWQWX8-DcwtXKhNH%QYlKNy%5 zx_*rR0lXD+rZkx>!LgTzuvG(1O=tFtdu*r&KCGwB*+}zp6lBg;aIvA5f!#wejD|;QY#Q&?}nOhdqli%_cU~je)7cG zq^*6(fml(}7K;mh$CS+9c|hOHS&JgMx#g~Xt}$>o93xXk_zB(0t_hEJF>ees2ooC{ z!G+Miyfb^MiwLi?CpkrBk`^E$QqWE{a@kZ9?lIiJr%oalmKkls+Una9(^cAjCyVS^ zmVH7CVNNxVzVj7f!f4qE1Y3sf(70mU_Pi8=(jS>Ky}x!KU;5$8qct_XrzfDzuPS-- zu;o@}X3GoLf&rEH&?Y~Ixia}mtf~7$nD%;jyg4xTE6364NZo^5&kHJ56tQYuhAn~E zJ|z7}9a&-T2QX!PYmPq{jCNi(uXMb}xm`WbzBORr`bX2UzQb5&>(1rnytkx{pV5ycU0S@I>WIhmTrYg^-~q-soui~DUhGNnJ5qLB(3bY) zf@l=>xyro=y!~ktgrt~J(Oa+7a<`Br+S_})woq2hmNmePGt2I=H6+-S=JTo`J2#U3 zuC(ZGYE?9s{+=<(Y&jlE*lhwe&@Tdkd#!?5hcb)P{M2>&WFgqB0aQ<;5NUa(OO%x# z!7i6dseUu+_a9VpSDy+LS@Twlj8DLez4__BMQaZ2zV$8thg zcBY2;51#2VREnA?cr&zj|EF!g14VZS%UUACTIXMJGe4gvCa+(B#J&$4&{{UXr!3O9k_WwCrQGiu95`33vhtnrx?>}um#V$_FUTNG}3k2JQ{ z?gOXOn(@R>D&9RCH*Hc={9xF|?n9CGNjcl2-&8CU7{%1Ho4q)KJP>kinE8}{_KIaY z64BY2?Op%v>GBPBPo^m`UU&4f-H3AH?eJ|^{8imT&Y3hEq*s`(FINv8*e&32BS9Fg za>xjSIQY`u?QCyc99e3VLUE}&cD`#w)$Yvzwe^6l`LICR^d(nS?%NGPSrE3=T*7uSTbLr? z8V==XGwgEUK>(cj5=`vb^7Y*Xb0xnh z3wFMpkOJFeXJOn-KN$Kfst@}Itm`WGZ zCvsi2$Q&K_oVBJ7*y_xsfTrCR7s&8Oj3SN+?v=lM-XBZZ7DVZTL5!URtWiK7LpZna zFt|im)s92xaTHTJG-^bQ{!GD8o%PWos{h`PlmY|J;lBx9aFK3_1db$a#k2yLzG`R> z$cD^=3wK)%m-FtO3RYmj#X4aFMsU~RPG@?$uh9ei33f3Eq`{U)Qc%?Ua*lhuQUP=H zqem~&(ps9(W$EscR2u7Kwc*q3jEr-SlH$M<>xW97#}DwOJ?!IQLo$r;e*=8YkvZ*u zJeo&&OW32fdr1*3Eth5ZCYer>v^Ogmk9Kt#Veh-Gi-!noJmiFPIfy*gS~jO~$JK?* zA$SHe7SRr@>_fjlRzJH{4>wu5M8(SM9X<6Z z1g~sn{ajKB@RUSitu`( zoJ>MWO)=xue+>IJ_GdI_erG(!Ge9hXSXJXUGc}EC+X)A<;T}#-X10rMtVX52r22XQ zacu&HO@IT10Jf#c@kYfCCJtNA)%`d}s>2han3-}GMF@Nt4Ld2OQ-KkM9o6cg{M@o* zP?U3F=?_b7fR}#W9DC0#uWd-Yj+n%7H9QrebK7Pkwnn|Z!htwcatnGN3gVO@Js1G`HCY&4$}pVrg%&jR99~^8 zaVoCqY&h#&Zu72(^Cl2V&yx_)>A=m!6%tNb-4(z#aeEQN0da?HH?+pYfurB}7Pp$~ zJ0Blj^B^jXY7e|_t;R==~%2~hwlHqOyHY}ug!chjN z8tAX9rY)eSHq7Q|@kEWWjm6eqcfm*ak zecp{`isY^aiey0lWNE3Q1Cd`qAl*LN8U3zRg4V z1o)O+8<&mnTF?*UI@9??13$sKDFX_0aD3V>|B4F-4a=%UsxkzpMXd}J^4X^<_MU&$ z+;t$)rWcPgHD)!o#+r^lsc7x^(_s8sq;>aI~@%~tpxoMZIkd?dp zQO}z#@UfOzi=Ohwu6Kvg*?&^Nj6qQlVE=Vc4nCHdvHle10?~{nO<(3T*{ywnOO?Lh z6abC4Rx@d#v5;zY#Eb6FpNFpA#@1HtM=58APnZV6fn0pJ?x7KQU1ZBw)?Bes2K1S{ zKU~y^VBS7>Ef(=wR*=NwiJT;apPx;qK;txtK4V9{YJplA$yYfl%1Tu|%jbG+g}1300{j zD$$ObsJG_Tcz5@I{m*Pa+K>pbnd!k^-i;w3!+3#Q`I#7O1|(Jbt|Shu-&45rr*7 zN+x3)v^*vkJ3$u>m!fZHQxohOjm^!_CoW7&gsN@saOB<-m;dDq{&Uz9UKAEs+USAE zM~^HlEb3EUEo|Mob%^=lnvdhh;(rUY{}}GnThMlo;hnr_V4d#|34Y@ zRGvtFef+bv$j7>o2X2YR_usc0Rw%11Bl3iM#}R(|*-pW}gFoXPlfD|-^>l~y>G-gN zDt|PM2;CSzQFt)jZe_B{OI&v|qPH`F3*we>=5 z4I`2Nr@ikEr@DXRSK5+JL{{pkB&+P*a8NQr8QJR~E1Ql{3CBvZDMCmk86BIlXOe7^ zJu(W}<9C0kp2qWBJ>T#3`{(z&zWwoBPtU_SpU->T@B4k+bh`D?#%~;9m#Jb@7}34KmUH%;^4Ka{T+BPVWD7a{s53`#+uB z|LNrZf2@;Rl3XQf(<(VVKR*w*=PL>Vz>~WSWgElJLRYOof)8MR@?Dm%+3xP0x0cy> zT?WK-eh~r=v}!YwJXG*v%dojYUwH+0`R3f<(g4Do*kfmw-un@|RqQdWR`YS==``~< z%K*e{&~GpyFQb}%1OI6I6F%`$r3dTA(!gR)If)2E<|ZeP0R*S3v3Ye7#2tYP2Gwy; z0^_?T)W8zT!N7l2dsdR6)fMhqU>Ru*E*QXa`;PCf#;q*Pk0f?)1jr2(?V$OL)HIIr z*el`j@_;ll{{0Q)0hk}UjeVC!bDiu|!-uLfvus}S>@Br}wdQ~dR(IAP(P>$%SzzpG z>-V1$3-AVgU|Hb`GjT5fSqe4b0aKc<@v1zbB^dum8@jCs8Ly1^qc48zE~k|gxszbe zK_IiCV&?`L2i2l%35YKi&JRQav~6xMN(3-ckDn}l6}`QVR{^ZsK2R32V6cVy%{1NW zKR&gLLJo;K?T%x>MhT2Kz}_NWD0S7(=jvze%p3TyJ6xS2vb~vS+4iGIcpFXo>=JOr zDHqkF=ov=6J1O@DBalHv_16R419UkTU=Qzuq#c2RC1T=hpyeP|@5qE=cjb?ktr5ni_-|(Gs8%_)z>;0r4n~oTX>ClFCiG zB!(P(@i|K;p5i@SE}P*U`S{`40?jcw0eGVs-i%!ZJ9~_^XXfLYwkYVj12X<6e0hI1 zUWK)}^)w(sY%O26c*aLW(1;9>qfU6^w;f>n&FWm(GISw0#6BRl4zy;6B^7yX9Ut0$ z@$~rMnI!ocKg@#`!~wjQ^mbj&s$TU!DEWpc3!(*~sF|MrBsvz#9O>t5FeMuLC5XFHn~NSytk$yi}-J;Hj+ZmI6tkT1^hajX2|+w}DzHb;r9P{5}w_yhHgL zc}#OiH!sPPG~&+0g;}3QY9$FFtJ&!eX^gL7#i;;z`Q6vCoo>-73{5hsZ$9LiMq` z`4nh!wY@SnH*ccb%&wlLt;Q)NL@OHKayhnL3B*0Y1`4NhvdtQ5$jRY1Bg@-Pr;80z z8m&4*Rh(Y!@8_#KBA3!4cJ}!Zinhhx3Q$}o@9Y)^O=Qn&TF+!bq&#Z2@n$I~A}_k_ zt?~DlOMc&+p;vgslXoAgS#W6j!gxFBlSqdA%Zok59k;n{L`Kb5W*)e3F4A^bPZb2A z_MU;w1*|_rKKY^=t|xZ_P`<#&O*3g`U%az^R|gb0s|A3(TMTKbGNDNH^c;h$x|*5^ zL#)zC5vEi*MaQlfqv+d|RL!D+l6_{U_MxDJ%X=c=(16lJdC5CJf^G+N4To=RYey|o zTv0Q31z4ej9T3QU|F>EDv4Yz&G^5_o>Da}ymk-?VE zWBg^;F7CDb+#h#-GgV*ylNXDQlnW+Wl?khHM@{qI+_@8J z4w#*V&#qbyMI6DH@uNW%=Dl?%V+wZf=1{{#mkINynkF9E^a3`+i2+Hi9jiQjU&){E z{Dl=@Lmykbm=%L}m>BPL9dFf(#{VtIykxS80Yz@{*qD5bSOG@MMN==@v4dX7YyjG+ ze4oM4mDgb1+D(SJOdP{!%`FxIV&Kgvv-z1+DMiMZ*DZrNc?v3^*T%lVX>lgm*|g!E z|4ER$&tP!}B#OJ5?evhmy;Ddp&$|{%%Ga&{>KPt3j_leML{BZ_XAvoKLioTzd;L8O zW=2Na7SW)dDFl7^A2SWh!o#<_ngq7JM1;{nLXVFEHRgK71S+i+d|gku&;Y(%?q$e* z9VH_64X4gJ0r=t*fLL-}`s`UtS8L2p`pi(nTvm^vY)7CPSPJ2$$2)T)D7M?eo}yw` z2SK_|f)zuDeV@JW4=#Q5++#pvPQ}+*HzRy%=0pbpa7lfg!|(11+E%&OfL(FXB6!oD ztqjH!Da8D&`L0`tzLvcQ)zSkozOlJEvmOunsAD2H(d?DwSp&vcXKV*BmTnMlg-mN5 z5zmXq_d9yy%lb2b_m3#ZFn52k0~o!#@$oA05&$wl`&Y($Tcmo%k~=wYpm~^IHx1d@ zt$U91#)DZ6$T1}xB8V_KDcML$J(o!fH#-j()HPd5b?-#t8s0=eczu#*KF zJ0pg85UEMedNe`e#hwkQQwNJlJfzICc0oVbGSLyE0Z22Vm2=)@_ zQ>HW5TR5^(ymxO@iaBQj@(g2Kh~E=iH$arlpX@MX&o}FyjO#pcC2pRQ$oseS?MFTD zjJk>!FSJ}OKfDCRB5&~$pns0O&tC+<=L~iDI_=W~uks!^B+g-$##aHc7`Txa0iE)S z$iKg9Ht?J=!rguIqVy#PvbwjZdZfiA1~P2^`VkjjvhlJyc~vv(llY2O8=IN}l#NY;1Cl3`d=@J z(YlV1nvdfaeVym(ANrpp)CoNEJM7XJ?VOe7DaDZu@CH#S1pj*vt_~3k=BRq!OMyK_ z6zh0%6UEzf0zC;Wu4D3iYWv%ZK#?gDoNouf^@I2Dl7z(K)u90|@Q%&!gfo9^s8tN` z++!f|`Y;P;GciW?D&bQuA?<4gSH~ z=`lSpabdfGzMaOJ>pB2a)U>o*$1YDnUk;k~>m<1MR4@(kj6HB{ciK8&vDk#9q;q7O z5Q#{=yCkNvfHZM_YE|dW-YTlt>WQA6y%0tlH%s9hiXTdl%q(vS$$inX?h(o0YU)as z*gnWDqk+KQ?L`dcc)X9~?Wx~&e=I4|$kfj~9WFVsZ2BPJx?e+6lRYnC3baSJ&4MDv z2YP6|2LmU-8qD{A6C)}Z%hnKLTAlgANZ}`Gk+E$plGOl4o=JM+%mjxMEF_0Qh}ghH zdH(!rZY` zN^*~I&}{6?DJw4@vz8YVa}(*r%I4YBHD&`aEvhB5c6YCz=rbQ{_D1WG&Z0$OXZZk|jJ}I7^T$OvK zzJ+3O8x?P!@C>V(_WSfv;;7sW#`_nijkcDo=$?o4n7fpqgTCvN+!MC^XKOsaTTI1n2DC~3ei4< z6A_PDoapO&D3dzue(=-xD~LIki;s^_SXfkuJ3!{fCP zhdO{bp$Ci#K%Ty%vz*DcbaE1|aRF%`@ahA|W!j5&e~9O0Gu5K*IX*}H#^Rhug~3Py zOp4$vM^b^GaST#;A-k3?L^*q%vb1)~`&mwZFik5bXg9Hz%lzT>0skAD0OZ{lx+5Tr ztTS`i5cUb8U+^=#Y7dg^aDS=(SP7Q1NCROosFYF?T&ti`c2k7jtr*4ED zfB#VzRbE3Ty11~QutrZDF8>y z<>TgX{R1H?z>fguwFA_PBZvV>NMI;j9M1)brfUF6cU^4nT9HHAw_V-H!#MnNGnQ9+ zviT4@okSADmT4h6u+m2;Q2qi zxa(Xo!;1d2U+MhsKe~s#f6|MhgDh@85+@{`a00jKk3;wrK?gn`p~ont9CbML>OL!wXa zuCoO6-)-g}FjS`si_L_hohB=YIK7!k?_t+3%nCl<}{o8qL*Q7W{M3I=j8NwWLT6|kC|A8cGvI|cB(1r{5etBd! zg%%1wrPxDXeMy&8lQtC)gRtuD2%QZE#r&nkJixL5FP1%!wVm3qHd5(q45(GtP$r+{ zdOD&{Q4S0CWSYhocKiicvfd1is2ausIkv`oI$v_j&K~!Bb6=Wxf!_SrNBBHFu|Mz6 z>%LXhU~M(!~-^+vJ_N<#bt;rj?#ug+$X6&Z-aIp^iR{| zlju78XGC;YH-Sog4^io`Da7k2C|tdyl3N{r#quw91&8+`BJYOQjj;Pb>+Cv5)JmtD z@}KwjZ|g#MId^NypCeUf{?WTcM`aC30MO_QsZPQAB&w7CHHm+Nqy2RPElI$bW~HjC z>h0UN$!eM0%xX|7f|?6B$spvnx~RsB54)ie1@)_$9y>d`D{t-eEh3R*lXexjOA$e3 zi(o2FoNJfY#W>B*Udn2jb+8K>_-|HG$s`^RuL;tQ=Pv`A{4G?VfPR8#WDmfLk-H3_netoGWJVvzGR7w zdvmnegvrGFdR`$Zy9f%2l9R;$-GD(`YH4Yyb#~hJI;Q00L3Gc|hyQjwhQT^>E6Ni0 z>A%^|x{jC<8x*S94WA|QUoFGbJZJ$yT^rhztxEu*&tw1siDrRQHryB$M+@O5*E7JX zU(G;G4Q}$!!~K#iwY5KhhI1)8w*7f?iWZ`M1wPW?*8w{7+oN&>(?!}kI-aVM0FV|` zz7b$O2&0RX@`5kT2>4MGj@D9q2BFY4VaKgHaY7#{?;71V8(zO8b(^uvChAqccCHUE=t>Tf8?sc>(NVk^K=zKZ9^{b~={7 z2@;h8cG65}5uX?c2CX2)HUIo9pyowH9Lh0+pKR~$?jCBdOK68W@yz?+7rrYWRT%A`ZR+mr8fcMOs7%?hhaCL8dXeRSDqNqeYp(quUj4~pJ zQqE3YjIYSGiT5J4`3X?VN=#((Js}UJIEWNL5Y|n_w}7{cfB<#Pem#d2RzOk#8E`oT(3epn}QBbk@?+>Jhk9jdKF!QhvGkC55U){834+$ zZ)Lj5zU2x1X6)z!ScZ;{j=H)%Wq!0X)ixk&{^`@z3x}1U_%o_3B61M)M2MAzMzg`i zF=KD5B9OsHiaeeO>DcYaCdGlM9oQ#~4l^<`&IEz>KXh?mluFDzWc)P=2GE`?emTH9 zk$Zi)l+Y>zrUWlYo5(kMr5eTw;YM3d;1+-$rcMWpeMzRzoM}fF54RAiqImfD3_U-B zJslx&Cc7UlmV`yZrdq15(?ZwB!&*GtJ8hsmoW5mLc?^z%Y)?}Y@XIxGGdoE5R8Sy_ zYXYqcQvyOzrxQ{lh!Far0kjWwo*^FWb8@xS!)od5`w|lqfgu=kPP}DfC!uveD7CkA zb>iw~L>90|opKSA3w z2u-moWB~tL?S3t#bA}Cu`(uZy9<5?d+2LzI$rmYAQtokiek8}uZYVZayHFvQkpN{j zgrN=kLZ4`=N_;594ES>4_u!h%qVA%Dv5|VpE==J#vDJFy9rLUvxLv({*c021{g_sF z@Y(@wPj+b&P#y8h(|~T_4lN&Gv*fs$mY=+wQfw2WuuVL(BhJPWx=06e=gyud6JZ5sXW>rOekqd_qxwxV4@ydLVEOFN5`mAM3x(2 z(cG>0nd3kWwS8$jREo!_%=u2px7Nyb6djN1r>_Ga0bK`e5@0sDkNWA8u-?CX|7!b= zuFJAnq)_cbc$nnHnIGM@l63?L1NFo*(r}{v)8TE+!Lyn&!bavCra8&y1HG*cPro}|%A!eCc|J<5tUFZOO^CO4Pf zr>DNb8(Ru`U0s=uYb5X_b&UGpYr)cl&;dfnA(v{sqaCl-EQ}sKc>)4eY1B}U?WD*| z|2V(pRa&HmAiC|zJr%QJJb{kNXX6#w_FFI1%I*@I}B`iFe&~kZHQY|jIS%#THGkM>bh?l!5Zpw8b2iIAE|qPcF_=q|fenL`rOt%nq)|#VxONrzC?rM@z&g3O0G&Z!|@tS616| zr&5l-p4RD|YRDtMUCB>Ve*z`xET-OKV6u(I=qAa5V_s)4ZbqBL_=#z#tj^qZ+d?e1 z6j{i(+yQW}7t=StWRR*y7gxT5%3Y4n@MDw5m%~iHY&_wht^Klw;7h@?OX6bjApLj_w8MB5c&j1RF&xam;Tddz3g31%>0 zhYYhi#ThFXk4U~5pFL3ZDq?4Sx!p!|&v*iE{T`xnFNwl@@aTi9%H%f&P*lq5?u@aK zavMiW%<#t+C{WpF1Kgi>1oQOSQ=^N=6oQRxY~I;nQsFQGJWJNrq;NfXy8x-y0}}P6 zw>vQ6T3ut}7`3(zp@@jtb6!-Ryke`5)Ns42<|#y>YtlRHO*_boX_HG-Rl1emn7@r3 zG4H^-{Hf`)JFJGPlB!y4`U03C{f%@lH9Rfdt`o4i6_7+&E zJ_ctu>_f890~fx)k*%htW*}a3rmCodlPc?`Vi|0k5WfTIybS?bebJo9)7r|!OJXhM zn=TTP>1^7Q4MSy`n)5cHgQbSaCo4~9QlE~xL`wB=r|;v#8-&#DBmwXUPUvRyECAB^3kqi;ZA+dpFZ5k-uL>BIMAxzc&1yk zR%gP2X{9fqv z+&7khi@{|ZqwS(~{`m3CV>witt9;%!Hye6veb_L3$|T4bw3*}?c3HMRlqO6g%5+zH zRj<>TggW%ct4#nff;L+rttX(1n%Tm%ouhbRanazW;FTs`bnMf!I2^7cBI2?!m0E}- zAx4y|n*KEQVo%6tsoC`sQ7XS8bH{7>Q`s7|N62yIFtc}06wMzxC7O_ul2Xk-Q*e8L z+1eA1Sb zET5apa@rUwH_-$47&s$B-QsXy4gu|_c8kLM_wFIaS9AjvMphl5za1hKFME&wv%l+- z8-6I5b`1SQVZ)?4EvjFoUER&71@8a{t&sX{Lj%pps;YET^B~F2>P}OdAXMK$YSr5x zJ10ysnx(43IO(ZdHCveUrK!<+)Qvg%7?C6$PrQ5ggxYQFb=K(ZIZ?LiXk1QV-=EJB%NP# zwI1pCt3r|+`t5iG^e<~@1RtDHTPTt?3aG3qvAy6Ce(?qoc0_M3x2q`7Dtw~dI{I)? zs$@`Znnb;@QY@rLuWM?;K9-r@q<0;wQP>+6AY5&_WA;9E zCVkPw69sJdj>7W3H}&dIE`P|~?{hbfBYoeb=3Tu*^p{2DkaAU&GI3u0(+v+4Y`Tc= z$mMFqa_^x;T%7?YsZrqM=;E>hecZ6fNEQ|}B$l8`NJdJE*l+?F|6SeHTpx+Mvm?+E zw^F(9C8ef(GsLz(9OlYF3J_oA25jLzxQPpV>~OUmdLvB})D5k!@w*ihNf)bpS*^F1 zuu-=P_i3&eRqk#-Kuks7##EKId86hbwTYefS0<;kCW3=JM|tp*E+Kk4i+4;}>?6$Q zDEa}|xYgZshrPt)c?fQRe^?qX=$RY|L$OlV3Li?jDfD^v><{~Cqvg@pyg3of?3VQB zMOh;(3Q7F6j{tw(6;P+c2RxmMG*wjtP#qkV={`(cJfS_CF{0-$>R>2%U$vd9OpUMf zwpudwpum>cZ(g1RZ9z%3H+%`K#=Zxe&y7 z)%ocrn3n>H&tNJ!5OLAIH_ZN~DHzD+qNDd_(xbbS2V|2sug}fVijLMxc66=IH80H& z3uoy==H;vbiAV{u4!T}OO+*)%b0#)aBzAJh(`+XZgpmZ6bN{Ii;O)pthwA6&qeDRr z%N!j`XRn@PGyEi_;O)1GK@d4o1yMD#G$G^GOz0h%_o!!R=ZgB}Kv*n{DJNelVR!4Z zj_JKwSD&B41SPfhQOZ8#WE7C#^#{Mp;WrNEpGZ=kRz?rVXG*~ohTVt-SFfEJ`e-X* zll{SF{dP@h=vbjyIIxPkz8F=TKcJ{8YM~ej>6|_P;{@Digb8RXDY-SQ!uiIj@c!ZG z87RCklX+dOIUcwNGQ7!f1y3vpCcf*V?#9y2_Zdos)mUP&NAA@2MbESqK!5M!8{dkS z^nAR^cs#ZY3W;D5w!&DQkUQ9FGCcal5isfjW0In2)elFV%(#PJgb+8s+_L?6y=+C( z)pDdG2`9GW(dS-0J>h#ZNzb=RS!Er5!hD{cqX~*~+08Yr2IP~xfif{<`W0&RtfxNs zF-g*6BdcBevot)hl{0)6$5rFL8(U$Cs$Ku_3S_2rBl`6U) zQ@@f>w1+@{^UetaC$8Jlr#(ZcQJr3!&?aH@j$rMq9%a;m3lEv}zUVu?-pkOnOi%!Q zyz1_%Q2A@=TF;pX^^F}0bKrn2pnrFJm1iMTSg6gctsB&p_8JKkvA2|!c?cgX*GM}K z2+g#61I%XZym$h-ePrpkX)s9F+^(r-Bmz6SJ~Zh zV^=-1$V$!LJJdpL*?w@+`EZA77?r#xY6@M2ogYq&w#f^d4a=3Qyaqv|(&wn+ow$b9 z!V6wA8~>D~BorOxEDs1k&6{#a@}1eW36I}wbjUH~t~Y-2{DV8$%`JPefsyBT&4Pp^ zr~nuw^>IaNoJFa;-iQLp82Q`!wQ=sjRxHZlDbxaaX&!2m`rQV2HL$i6sx{h>mS9I` z-`Int5>UT=wf1G!%i+6*m8t2}T^h%591R5p1+i*zx;7T;tq7lVW47D0#|h1iQ2eR+ za#aVE7&w{d#gBYU;M8F{?5ToH*Z{f3UAcRL1Tj&TYB50tytI<&fsse50jY*K78WRQ z!wF8nhU_&uuVa}~gnf57*y<5=SOHRhxxspfwxolLm-TrSuleSR$?AaTOMCX6WM7** zh@YBPRQAg48%NXNqF43G3A^ibTJlB#)rzJNv4x7vdw0edx31n$K4dObane9rJ8rvU zj_I8&)r!c|$;T938ya3wfzFLGI3winpR6=&v;?7*sfN@Bt7U=IXg z$k-*SVp_x&^HZ|!rUUwGl7ORHM9i3Uy}0k@DVx9Y&b`Qf+t(B<2MTx2*2hX)arN0R z9=;i{aSC>!fx*fPKuGo_uw~L8MU5lmr=7v-D=T5yB)t|+`2v{K-QE4<%3Lw~ zC%`&Ji8|BZev+FF>_T@cxCP~}5nLaC`K+Uj3JNjd40H)zm&hf#u_St#OZ ziVOkE-FjM|uRefK{cXE+Lc%;aI0!{pXK?eR526cCkXB9Lu&zJt_4da!C4+ikak@c{ zLFC%>Ave4V+V9Xru-bEv$-=;tM_CI7S^ib!$>3ue;y}Q)qL22)%Oy5gy=Vccx&1k_`i6hOb_tMHSn#zYx>kF+)QCUS z(YmUzuqxhi8wo0Pqwq3x46kXDHkyfwt#*4Bs(wu`#(2xiC^HKhabG?kroZsm z>?A7J54oHR)GR>#6v5L#br#U4@d16#)?%TiV{a`CR1b_&!-aG}KD?kt+_Nm5p2bP; z()=LrGmMS$SZ8}!vU%E}0OdvZ=4Or2tlZKZt&XE=r;sygEP))lFj#FJUdM>xFkE;Q z?SZA`po!4$qb-5y=c=p5yNU@O14+8Z}akLW9;X%E!D%riYnB8jozzIE%?>Ks)QxG|vb zT{dXqRRK})*5DTg@*yYh&FW_W?wjk(ffpfrQJv~-U0qsLrFf9B;=Q35b(91fr8z#U zt91RRw}Wy#u%1&ufF2};h8|e$MzMT9Fglm^idJ{Aa+?r6qUfAG)?L(bC85r1uvc(Y zgGb}q^Nh)Bw&rJ7@0SMS9hBE!E)Kv~pjCt^8LNl415-R}+(&u6t5=`L#r2N1rYCas zg+lGky18~>)cJHLhKd?xa0_bt5vW^vY8&Z4L;4O0c}O9E-Xc#B=O@R+yrSepg@r~Q ztGzFvk(`{opfaEoedG4gYDUJ2o5O`9R*bQEOk;Mt({{{wi>W%y9^{)qN)@A{5_iV* z$m6!LN~ogb6NY7_D9bby9W$W()1+1XzOt!cffK{p$%+Xp ze1udyyJp@|jwd@UIT(VpYEJ2CYd?V6$%=_fW-$A4j?A~)=QVc4Ly3Tdyag&LwSIzZ z)Tccvf(*FRO)W_nv_IaLe#M?AU2;Eno0c`RT1_XS7dXi(WFME3Qpe_w=A`t_>Ym(@ zQ>nBG+m|2{2jlww+@%Wdin4d*k3D`|4{qk~^NibK4yL#$D~F0ILBV*l!vgf^r}JnY zgN2Uae55;;lqfiMG0L^rM~&3d)~-d}Kg+7{9D@TB1~V56FCDSlW_?nXz8%jEp?O2qvMr$Q7$4dj$RJz2lUV3b1`XND4|42vlK1~Okz{xE zu;i%b=H~vFYN8)M68Hb}ex0{->S-NN5_D?0w~Q@m%--)js<9i@?E?WP{3hZ+03g0S zs4jPjyT_)$u?K9I+gLXH!7T$U2B1O1$5|O>sl#!q43Pa`LY~?DzH$?w6+3Xa%TPk& zwC76j1*_%5avZ`O;T3RwuI2GL6C&*N@tudq7S+wU3Y^Z=h0tW0HksJ?<#mToBe!yR z1gkZu)7_>Kk3!R)zWruQ;%s8WW=d^ZRQr(a3b?JJF)oR_JLWh&9$s!Y9pf!(^4RGnL2p^Uk znaAoFn0;I*WixqFS8$%8Az)^Vw(4E+ofn&z*^5mzxL4n$=w*N`XLW}m56-i3iHQaq z9%2yQX3qZ9bh)dBKzWkQKdclV@hn^xD^6FAD`VhDX$x-aP+7Fq$x~&(T&f=rJxY#T z31u-(k~HU@i%}%o3)Rn$&R$4p7zWbI(3>mYvJk*@e6qJ-g1Xr+o6LnrW;HFiCL~dM zlQ8dRr;pLJKE>g#0}XioWRy8H73=)`lAr9$d|GR0()ppod*>>bT5pY!tNGI!^LP=I z(G3|g&Th`fGk${{(l_w@&aJG99@KG9@hze+OhfDyLwTpj*yElmK=cCssiK-%F4XeI z@cbb5CYwl0Lo>qFECD@rKg3s2zTZv@6ZGP_R-8(Yhz5(?*NY_rrkZ#!`w$ZBpW|g7 zXY&Ru#~1Q)bCLEc!^pZa+v~-fa$#ZAHoB)C$)En@P&Zu{-Zvn9h%s{M3_W|x#xIlQ ze(@;!2h*ZYva8X(j6GFV92U)*vRYSaG{{tyFm$WNCVP2ZqQ+C7T+JJPdp|qr^fJ|B zZ&+y8a-Q;j+dF{na-Fq9i==prfW3z53N~iFIzAXUkTFOu>qJ}kFgLT#T%dR-`RIFd z;l(4X2a}yGLMMi<``%^Lt?Bo_7JX@uga#hFJ+n~MwBewt0R}_=+*a}8=%)4Y1)RLb zHO#$x_m&1CEubM%-`V(Om?@f0!0KU23J}(E$H$~o)C-(|t>U(ISA{FEU<#Hdt4XNX zK}8uJUBpfmV|wKZ^ys-w-nF;W&ii>ap8C@?2-9e`E$n&a7k^?o^F&@)cG?@K^Rd;N za!(S+`6PH2nv0|fn&6_3ilDI^u1nUHN%(8gjlqlA@ke)~(lhmJgHR}cndLm50~1o1 zizmihypXboRav!f5z10WryJVItD;s90rvoS9yhmP_>(n(p<5Vv5)u-k$RxL4R2|gP z7li}`@%Tska~aVI3Q0DCY>PpvRP}H?-|zA;`j#UhAjZyiuiqmrpZqYpo<6f8N_p^_ z?RCyqua}R#VkPgMbkm?loj@B#;O-4{p?O5n9+a1Ytc4o%W?1&}HHT0oOq%<6kHkSl zh8*W49L3bA&m~?Ucq!tt)Z)UVtB$cLBu^y}fD-&TO$Z&ULBe=n7G#@c8J`qf^BVm5fRjA)_0)-n-PWFbx{AWB)xc1n4U)iwRidcHkX zqCTRm@&PR#jk4@=&%Q*RGjHnjkwGNf_37(=N$C_+J%5vf@f96MwyC}T7JOhHNkw$& z3{(=KedmSudUJN;fvB~^E`62~H4k+Wmzg#M#%tT~d)QHT$O|4mbDy0ha$mG_95KPc z4^Oj;%bNT2i442o~ri2@C2`8$Y8_G8?4^~nKDr*vgRhc zJ*XQZ-$F$IqPLuQ=Hx>2?narqC%+_*jxkid$**UIu0Kc^){+*Ftmtg87DAmkDTXb< zlsL=Ga&=G6XHo0)y9A2fxul7C=gAw@SyRX|{MpNJ;7svG7?J|LE(6Mh5Bv^V(DWGr z6uyCY2^h<)4%_5(;2ogIf2!xtwO@%p7Q5ktJJ`4`pvvK0Mjni|#4t4X0iL>{5=cR)bfs zV9PNsG*)QnV|+&@Z4+7Da?~=AroE@7Yh}qYT@zOKl;diwiM6Wm$6{ctIJ62_Sr8^? zLQZbAHy)8UZeCfY;?M+g2=3n3yaWxr_+mMCm+6#)k0XCu6X)NjdJTqq1H$CfDPOu%TcyYAZY(CFyQ&5Lf^?2}{fFzN^#jmsFc@wBhP6Xi0@DZUXD;c@KP(`x z>i2bAPK9r-cb7`rrgzDxU@;w;DP~SO2DO{AYyE<^(lGWi#xCa+Arb$>F(LGLyZuww zh1LlZn$3L8O0E&I&4!UW=He0TA`XO{ko+_9*g`_il0zPo4fCPLw;<*N&@1*S5Pje0 z7r%G`hgZC0$wHmzlav%dj)5o1*YQiQ5(mP^Neyj6rAgZYUZSSo$%-#V)v&s(-b1x=$>`Nt6G{|=Dy^XJ} zmGKl^nR^?59`LbezQ_K5d=}8bHf2P=uC3+agVgI4T||CCv}T`9tMsfgSZ3 zIEc`x18NTqH8u3>UibC&?f1n4gEB&j2ovCp`DM(Ty1GE?(sgmhjDcQ0fmtzRxLV!j zLhRSOEKy&>c<7@DUs&Y`%@6!HO)~lPr7BUGyL~&|8pj{rt?fR*s{1BBG1yPGhiH9%lmn7!CSr}sHM$YjH<1-210Vd>FI@YtJ0W-M?WqY8E`WGDyr$P8 zM88H#`Weem=~DUjR+uHwt2UzK!|?oI(g$cyxH!1yAtD+z`iGzS{01;5$chJNE^9>01li5MG`>TMoxrK89ghbF^L;No$c?bA zao!xX);LYDYJUMMr0W#GvGfVn4@5N3*xrQhDJj{s{yQB1_&Y(s%w2zw-gS$xsVneQ zxe-Y1=(sQ9+aV01(bIS^MeD4GQC$_T3g>=^4;tKWWA5_OVdMMn`6y<}SMqOF^LNCWR_zTV~YskhqK&ma$o8192> zbakR=n1bu~Pp{6Fafu{tfr)Sb4sVdCHw}}kju9hYr_6rxY7a*o-k2I;ChUY@N54I* z;=85zXawn$v4D-y893$P|A?+HoUgBr%-0V;J4yXcWABznn* zED?cg3Lq`5oe3e}sNbzpqvO7@wZ}2lF>Y&%eGVb49FY7vsK}OsK_&H&&!F}&60kwm z77_N8RV34wa2}&#ZJF|l?3utWN-fZs@CJtuqDo?KM)^>hPh#+ z^G`QuS!L`FIRz*!GY@1^fBrff Date: Mon, 13 May 2024 18:41:47 +0530 Subject: [PATCH 04/14] Update evaluate-mda-using-mde-security-settings-management.md --- .../evaluate-mda-using-mde-security-settings-management.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md index cc76265e67..971b17b106 100644 --- a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md +++ b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md @@ -14,7 +14,7 @@ ms.collection: ms.topic: conceptual ms.subservice: edr search.appverid: met150 -ms.date: 04/11/2024 +ms.date: 05/13/2024 --- # Evaluate Microsoft Defender Antivirus using Microsoft Defender Endpoint Security Settings Management (Endpoint security policies) From d239d98210b7287764cf2a263ab3358ae2569755 Mon Sep 17 00:00:00 2001 From: Siddarth Mandalika Date: Wed, 22 May 2024 12:54:43 +0530 Subject: [PATCH 05/14] Delete microsoft-defender-antivirus-using-mde-security-set-mngmnt.md --- ...antivirus-using-mde-security-set-mngmnt.md | 275 ------------------ 1 file changed, 275 deletions(-) delete mode 100644 defender-endpoint/microsoft-defender-antivirus-using-mde-security-set-mngmnt.md diff --git a/defender-endpoint/microsoft-defender-antivirus-using-mde-security-set-mngmnt.md b/defender-endpoint/microsoft-defender-antivirus-using-mde-security-set-mngmnt.md deleted file mode 100644 index 010f7802c4..0000000000 --- a/defender-endpoint/microsoft-defender-antivirus-using-mde-security-set-mngmnt.md +++ /dev/null @@ -1,275 +0,0 @@ ---- -title: Evaluate Microsoft Defender Antivirus using Group Policy -description: Use this guide to evaluate and test the protection offered by Microsoft Defender Antivirus using Microsoft Defender Endpoint Security Settings Management (Endpoint security policies). -ms.service: defender-endpoint -ms.localizationpriority: medium -ms.topic: conceptual -author: YongRhee-MSFT -ms.author: yongrhee -ms.custom: nextgen -ms.date: 05/06/2024 -ms.reviewer: -manager: dansimp -ms.subservice: ngp -ms.collection: -- m365-security -- tier2 -- mde-ngp -search.appverid: met150 ---- - -# Evaluate Microsoft Defender Antivirus using Group Policy - -[!INCLUDE [Microsoft Defender XDR rebranding](../includes/microsoft-defender.md)] - -**Applies to:** - -- Microsoft Defender Antivirus -- [Microsoft Defender for Endpoint Plan 1](microsoft-defender-endpoint.md) -- [Microsoft Defender for Endpoint Plan 2](microsoft-defender-endpoint.md) - -**Platforms** - -- Windows - -## Evaluate Microsoft Defender Antivirus using Group Policy - -In Windows 10 or newer and Windows Server 2016 or newer, you can use next-generation protection features offered by Microsoft Defender Antivirus and Microsoft Defender Exploit Guard. - -This article explains how to enable and test the key protection features in Microsoft Defender Antivirus and Microsoft Defender Exploit Guard and provides you with guidance and links to more information. - -This article describes configuration options in Windows 10 or newer and Windows Server 2016 or newer. - -### Use Microsoft Defender Antivirus using Group Policy to enable the features - -This guide provides the Microsoft Defender Antivirus Group Policy that configures the features you should use to evaluate our protection. - -1. Grab the latest Windows Group Policy Administrative Templates. See [Create and manage Central Store - Windows Client](/troubleshoot/windows-client/group-policy/create-and-manage-central-store#links-to-download-the-administrative-templates-files-based-on-the-operating-system-version). - - > [!TIP] - > 1. The Windows version works with the Windows Servers. - > - > 2. If you're using Windows 10 or Windows Server 2016, get the latest administrative templates for Windows 11 or newer. - -2. Create a Central Store to host the latest `.admx` and `.adml` templates. For more information, see [Create and manage Central Store - Windows Client](/troubleshoot/windows-client/group-policy/create-and-manage-central-store#the-central-store). - - If joined to a domain, follow these steps: - - 1. Create a new OU block policy inheritance. - - 2. Open Group policy Management Console (GPMC.msc). - - 3. Go to **Group Policy Objects** and create a new Group Policy. - - 4. Right-click the new policy created and select **Edit**. - - 5. Navigate to **Computer Configuration** > **Policies** > **Administrative Templates** > **Windows Components** > **Microsoft Defender Antivirus**. - - Or, if you're joined to a workgroup, open your Group Policy Editor MMC (`GPEdit.msc`), and go to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Defender Antivirus**. - -## Microsoft Defender Antivirus and Potentially Unwanted Applications (PUA) - -**Root:** - -| Description | Setting | -| --- | --- | -| Turn off Microsoft Defender Antivirus | Disabled | -| Configure detection for potentially unwanted applications | Enabled - Block | - -## Real-time protection (always-on protection, real-time scanning) - -| Description | Setting | -| --- | --- | -| Turn off real-time protection | Disabled | -| Configure monitoring for incoming and outgoing file and program activity | Enabled, bi-directional (full on-access) | -| Turn on Behavior Monitoring | Enabled | -| Monitor file and program activity on your computer | Enabled | - -## Cloud protection features - -Standard security intelligence updates can take hours to prepare and deliver; our cloud-delivered protection service can deliver this protection in seconds. - -For more information, see [Use next-gen technologies in Microsoft Defender Antivirus through cloud-delivered protection](/windows/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus). - - ### MAPS - -| Description | Setting | -| --- | --- | -| Join Microsoft MAPS | Enabled, Advanced MAPS | -| Configure the ‘Block at First Sight’ feature | Enabled | -| Send file samples when further analysis is required | Enabled, Send all samples | - - ### MpEngine - -| Description | Setting | -| --- | --- | -| Select cloud protection level | Enabled, High blocking level | -| Configure extended cloud check | Enabled, 50 | - -## Scans - -| Description | Setting | -| --- | --- | -| Turn on Heuristics | Enabled | -| Turn on e-mail scanning | Enabled | -| Scan all downloaded files and attachments | Enabled | -| Turn on script scanning | Enabled | -| Scan archive files | Enabled | -| Scan packed executables | Enabled | -| Configure scanning of network files (Scan Network Files) | Enabled | -| Scan removable drives | Enabled | -| Turn on reparse point scanning | Enabled | - -## Security Intelligence updates - -| Description | Setting | -| --- | --- | -| Specify the interval to check for security intelligence updates | `Enabled`, `4` | -| Define the order of sources for downloading security intelligence updates | Enabled, under **Define the order of sources for downloading security intelligence updates**

`InternalDefinitionUpdateServer | MicrosoftUpdateServer | MMPC`

Where `InternalDefinitionUpdateServer` is WSUS with Microsoft Defender Antivirus updates allowed.

`MicrosoftUpdateServer == Microsoft Update` (formerly Windows Update).

`MMPC == https://www.microsoft.com/en-us/wdsi/definitions` | - -## Disable local administrator antivirus settings - -Disable local administrator antivirus settings such as exclusions, and enforce the policies from the Microsoft Defender for Endpoint Security Settings Management. - -**Root:** - -| Description | Setting | -| --- | --- | -| Configure local administrator merge behavior for lists | Disabled | -| Control whether or not exclusions are visible to local admins | Enabled | - -## Threat Severity Default Action - -### Threats - -| Description | Setting | Alert level | Action | -| --- | --- | --- | --- | -| Specify threat alert levels at which default action shouldn't be taken when detected | Enabled | | | -| | | 5 (Severe) | 2 (Quarantine) | -| | | 4 (High) | 2 (Quarantine) | -| | | 2 (Medium) | 2 (Quarantine) | -| | | 1 (Low) | 2 (Quarantine) | - -### Quarantine - -| Description | Setting | -| --- | --- | -| Configure removal of items from Quarantine folder | Enabled, 60 | - -### Client Interface - -| Description | Setting | -| --- | --- | -| Enable headless UI mode | Disabled | - -## Network Protection - -### Microsoft Defender Exploit Guard / Network Protection - -| Description | Setting | -| --- | --- | -| Prevent users and apps from accessing dangerous websites | Enabled, Block | -| This settings controls whether Network Protection can be configured into block or audit mode on Windows Server | Enabled | -| Allow Network Protection Down Level | Network protection is enabled downlevel | -| Allow Datagram Processing On Win Server | Datagram processing on Windows Server is enabled | -| Disable DNS over TCP parsing | DNS over TCP parsing is enabled | -| Disable HTTP parsing | HTTP parsing is enabled | -| Disable SSH parsing | SSH parsing is enabled | -| Disable TLS parsing | TLS parsing is enabled | -| Enable DNS Sinkhole | DNS Sinkhole is enabled | - -## Attack Surface Reduction Rules - -1. Navigate to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Defender Antivirus** > **Microsoft Defender Exploit Guard** > **Attack Surface Reduction**. - -2. Select **Next**. - -| Description | Setting | -| --- | --- | -| `be9ba2d9-53ea-4cdc-84e5-9b1eeee46550`

(Block executable content from email client and webmail) | `1 (Block)` | -| `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c`

(Block Adobe Reader from creating child processes) | `1 (Block)` | -| `5beb7efe-fd9a-4556-801d-275e5ffc04cc`

(Block execution of potentially obfuscated scripts) | `1 (Block)` | -| `56a863a9-875e-4185-98a7-b882c64b5ce5`

(Block abuse of exploited vulnerable signed drivers) | `1 (Block)` | -| `92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b`

(Block Win32 API calls from Office macros) | `1 (Block)` | -| `01443614-cd74-433a-b99e-2ecdc07bfc25`

(Block executable files from running unless they meet a prevalence, age, or trusted list criterion) | `1 (Block)` | -| `26190899-1602-49e8-8b27-eb1d0a1ce869`

(Block Office communication application from creating child processes) | `1 (Block)` | -| `d4f940ab-401b-4efc-aadc-ad5f3c50688a`

(Block all Office applications from creating child processes) | `1 (Block)` | -| `c0033c00-d16d-4114-a5a0-dc9b3a7d2ceb`

((PREVIEW) Block use of copied or impersonated system tools) | `1 (Block)` | -| `d3e037e1-3eb8-44c8-a917-57927947596d`

(Block JavaScript or VBScript from launching downloaded executable content) | `1 (Block)` | -| `9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2`

(Block credential stealing from the Windows local security authority subsystem) | `1 (Block)` | -| `a8f5898e-1dc8-49a9-9878-85004b8a61e6`

(Block Webshell creation for Servers) | `1 (Block)` | -| `3b576869-a4ec-4529-8536-b80a7769e899`

(Block Office applications from creating executable content) | `1 (Block)` | -| b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4

(Block untrusted and unsigned processes that run from USB) | `1 (Block)` | -| 75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84

(Block Office applications from injecting code into other processes) | `1 (Block)` | -| e6db77e5-3df2-4cf1-b95a-636979351e5b

(Block persistence through WMI event subscription) | `1 (Block)` | -| c1db55ab-c21a-4637-bb3f-a12568109d35

(Use advanced protection against ransomware) | `1 (Block)` | -| d1e49aac-8f56-4280-b9ba-993a6d77406c

(Block process creations originating from PSExec and WMI commands) | `1 (Block)`

If you have Configuration Manager (formerly SCCM), or other management tools that use WMI, you might need to set this to `2 (Audit)` instead of `1 (Block)`. | -| 33ddedf1-c6e0-47cb-833e-de6133960387

( [PREVIEW] Block rebooting machine in Safe Mode) | `1 (Block)` | - -> [!TIP] -> Some rules may block behavior you find acceptable in your organization. In these cases, change the rule from Enabled to Audit to prevent unwanted blocks. - -## Controlled Folder Access - -Navigate to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Defender Antivirus** > **Microsoft Defender Exploit Guard** > **Attack Surface Reduction**. - -| Description | Setting | -| --- | --- | -| Configure Controlled Folder Access | Enabled, Block | - -Assign the policies to the OU where the test machines are located. - -## Check the Platform Update version - -The latest Platform Update version Production channel (GA) is available here: - -[Microsoft Update Catalog](https://www.catalog.update.microsoft.com/Search.aspx?q=KB4052623+update) - -To check which Platform Update version you have installed, use the following PowerShell command (Run as admin): - -```powershell -get-mpComputerStatus | ft AMProductVersion -``` - -## Check the Security Intelligence Update version - -The latest Security Intelligence Update version is available here: - -[Latest security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware - Microsoft Security Intelligence](https://www.microsoft.com/en-us/wdsi/defenderupdates) - -To check which Security Intelligence Update version you have installed, use the following PowerShell command (Run as admin): - -```PowerShell -get-mpComputerStatus | ft AntivirusSignatureVersion -``` - -## Check the Engine Update version - -The latest scan engine update version is available here: - -[Latest security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware - Microsoft Security Intelligence](https://www.microsoft.com/en-us/wdsi/defenderupdates) - -To check which Engine Update version you have installed, use the following PowerShell command(Run as admin): - -```PowerShell -get-mpComputerStatus | ft AMEngineVersion -``` - -If you're finding that your settings aren't taking effect, you might have a conflict. To resolve conflicts, refer: -[Troubleshoot Microsoft Defender Antivirus settings](troubleshoot-settings.md). - -## For False Negatives (FNs) submissions - -If you have any questions about a detection that Microsoft Defender Antivirus makes, or you discover a missed detection, you can submit a file to us. - -If you have Microsoft XDR, Microsoft Defender for Endpoint P2/P1, or Microsoft Defender for Business, see [Submit files in Microsoft Defender for Endpoint](admin-submissions-mde.md). - -If you have Microsoft Defender Antivirus, see [Submit files for analysis](/defender-xdr/submission-guide). - -Microsoft Defender Antivirus indicates a detection through [standard Windows notifications](configure-notifications-microsoft-defender-antivirus.md). You can also [review detections in the Microsoft Defender Antivirus app](review-scan-results-microsoft-defender-antivirus.md). - -The Windows event log also records detection and engine events. See the [Microsoft Defender Antivirus events article for a list of event IDs](troubleshoot-microsoft-defender-antivirus.yml) and their corresponding actions. - -If your settings aren't applied properly, find out if there are conflicting policies that are enabled in your environment. For more information, see [Troubleshoot Microsoft Defender Antivirus settings](troubleshoot-settings.md). - -If you need to open a Microsoft support case, see [Contact Microsoft Defender for Endpoint support](contact-support.md). From 5104d6b2db2048759a92d35b60cee2f58e3cfc55 Mon Sep 17 00:00:00 2001 From: Siddarth Mandalika Date: Wed, 22 May 2024 14:03:20 +0530 Subject: [PATCH 06/14] Update evaluate-mda-using-mde-security-settings-management.md --- .../evaluate-mda-using-mde-security-settings-management.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md index 971b17b106..6587232600 100644 --- a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md +++ b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md @@ -204,4 +204,4 @@ If you're finding that your settings aren't taking effect, you might have a conf To information on how to make False Negatives (FNs) submissions, see: - [Submit files in Microsoft Defender for Endpoint](admin-submissions-mde.md) if you have Microsoft XDR, Microsoft Defender for Endpoint P2/P1, or Microsoft Defender for Business. -- [Submit files for analysis](/defender-xdr/submission-guide.md) if you have Microsoft Defender Antivirus. \ No newline at end of file +- [Submit files for analysis](../defender-xdr/submission-guide.md) if you have Microsoft Defender Antivirus. \ No newline at end of file From fa907a7fd0cfd2e3a77148f7ce014610b6665ba9 Mon Sep 17 00:00:00 2001 From: Siddarth Mandalika Date: Thu, 30 May 2024 18:32:52 +0530 Subject: [PATCH 07/14] Update evaluate-mda-using-mde-security-settings-management.md --- .../evaluate-mda-using-mde-security-settings-management.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md index 6587232600..971b17b106 100644 --- a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md +++ b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md @@ -204,4 +204,4 @@ If you're finding that your settings aren't taking effect, you might have a conf To information on how to make False Negatives (FNs) submissions, see: - [Submit files in Microsoft Defender for Endpoint](admin-submissions-mde.md) if you have Microsoft XDR, Microsoft Defender for Endpoint P2/P1, or Microsoft Defender for Business. -- [Submit files for analysis](../defender-xdr/submission-guide.md) if you have Microsoft Defender Antivirus. \ No newline at end of file +- [Submit files for analysis](/defender-xdr/submission-guide.md) if you have Microsoft Defender Antivirus. \ No newline at end of file From 6faa5f90d13928e5adbfea9d7ce53a3bd50e6aa8 Mon Sep 17 00:00:00 2001 From: Siddarth Mandalika Date: Thu, 30 May 2024 18:48:09 +0530 Subject: [PATCH 08/14] Update TOC.yml --- defender-endpoint/TOC.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/defender-endpoint/TOC.yml b/defender-endpoint/TOC.yml index c473f2ee77..8699009586 100644 --- a/defender-endpoint/TOC.yml +++ b/defender-endpoint/TOC.yml @@ -67,6 +67,8 @@ href: evaluate-microsoft-defender-antivirus.md - name: Evaluate Microsoft Defender Antivirus using PowerShell href: microsoft-defender-antivirus-using-powershell.md + - name: Evaluate Microsoft Defender Antivirus using Microsoft Defender Endpoint Security Settings Management + href: evaluate-mda-using-mde-security-settings-management.md - name: Evaluate Microsoft Defender Antivirus using Group Policy href: evaluate-mdav-using-gp.md - name: Microsoft Defender for Endpoint demonstration scenarios From 824be55a479fb85df89d62125e6b137c9edac9a2 Mon Sep 17 00:00:00 2001 From: Siddarth Mandalika Date: Tue, 18 Jun 2024 13:43:13 +0530 Subject: [PATCH 09/14] resolved one broken link --- .../evaluate-mda-using-mde-security-settings-management.md | 2 +- defender-endpoint/mac-install-with-intune.md | 1 - 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md index 971b17b106..b00005ebc9 100644 --- a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md +++ b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md @@ -204,4 +204,4 @@ If you're finding that your settings aren't taking effect, you might have a conf To information on how to make False Negatives (FNs) submissions, see: - [Submit files in Microsoft Defender for Endpoint](admin-submissions-mde.md) if you have Microsoft XDR, Microsoft Defender for Endpoint P2/P1, or Microsoft Defender for Business. -- [Submit files for analysis](/defender-xdr/submission-guide.md) if you have Microsoft Defender Antivirus. \ No newline at end of file +- [Submit files for analysis](/defender-xdr/submission-guide) if you have Microsoft Defender Antivirus. \ No newline at end of file diff --git a/defender-endpoint/mac-install-with-intune.md b/defender-endpoint/mac-install-with-intune.md index 2b04849b4f..2d17dc0f1d 100644 --- a/defender-endpoint/mac-install-with-intune.md +++ b/defender-endpoint/mac-install-with-intune.md @@ -6,7 +6,6 @@ author: YongRhee-MSFT ms.author: yongrhee manager: deniseb ms.localizationpriority: medium -manager: deniseb audience: ITPro ms.collection: - m365-security From 2247356c56d584dbaa069878c90c6ca4d91944ce Mon Sep 17 00:00:00 2001 From: Siddarth Mandalika Date: Tue, 9 Jul 2024 19:07:13 +0530 Subject: [PATCH 10/14] minor edit to bring the term to match the UI item --- .../evaluate-mda-using-mde-security-settings-management.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md index b00005ebc9..4528a85774 100644 --- a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md +++ b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md @@ -42,7 +42,7 @@ To configure the options that you must use to test the protection features, perf 1. Select **Create policy**. The **Create a new policy** page appears. 1. On the **Basics** page, enter a name and description for the profile in the **Name** and **Description** fields, respectively. 1. Select **Next**. -1. On the **Settings** page, expand the groups of settings. +1. On the **Configuration settings** page, expand the groups of settings. 1. From these groups of settings, select those settings that you want to manage with this profile. 1. Set the policies for the chosen groups of settings by configuring the settings as described in the following tables: @@ -139,7 +139,7 @@ To enable Attack Surface Reduction (ASR) rules using the endpoint security polic 1. Select **Attack Surface Reduction rules** from the **Select Template** drop-down list. 1. Select **Create policy**. 1. On the **Basics** page, enter a name and description for the profile; then, choose **Next**. -1. On the **Settings** page, expand the groups of settings and configure those settings you want to manage with this profile. +1. On the **Configuration settings** page, expand the groups of settings and configure those settings you want to manage with this profile. 1. Set the policies based on the following recommended settings: |Description |Setting | From 779cc4fc15e04312eef32a9a52da90cae0ae3018 Mon Sep 17 00:00:00 2001 From: Siddarth Mandalika Date: Tue, 9 Jul 2024 19:15:29 +0530 Subject: [PATCH 11/14] Update evaluate-mda-using-mde-security-settings-management.md --- .../evaluate-mda-using-mde-security-settings-management.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md index 4528a85774..9e835586e0 100644 --- a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md +++ b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md @@ -136,7 +136,7 @@ To enable Attack Surface Reduction (ASR) rules using the endpoint security polic 1. Sign in to [Microsoft Defender XDR](https://sip.security.microsoft.com/). 1. Go to **Endpoints > Configuration management > Endpoint security policies > Windows policies > Create new policy**. 1. Select **Windows 10, Windows 11, and Windows Server** from the **Select Platform** drop-down list. -1. Select **Attack Surface Reduction rules** from the **Select Template** drop-down list. +1. Select **Attack Surface Reduction Rules** from the **Select Template** drop-down list. 1. Select **Create policy**. 1. On the **Basics** page, enter a name and description for the profile; then, choose **Next**. 1. On the **Configuration settings** page, expand the groups of settings and configure those settings you want to manage with this profile. From 46c6fb7e0fb3fdf26db648c09dcba070e68732cb Mon Sep 17 00:00:00 2001 From: Siddarth Mandalika Date: Thu, 29 Aug 2024 15:15:44 +0530 Subject: [PATCH 12/14] Update evaluate-mda-using-mde-security-settings-management.md --- .../evaluate-mda-using-mde-security-settings-management.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md index 9e835586e0..088c4705b8 100644 --- a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md +++ b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md @@ -183,7 +183,7 @@ To check which "Platform Update” version you have installed, run the following #### Check the Security Intelligence Update version -The latest “Security Intelligence Update” version is available in [Latest security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware - Microsoft Security Intelligence](https://www.microsoft.com/wdsi/defenderupdates). +The latest “Security Intelligence Update” version is available in [Latest security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware - Microsoft Security Intelligence](https://www.microsoft.com/en-us/wdsi/defenderupdates). To check which “Security Intelligence Update” version you have installed, run the following command in PowerShell using the privileges of an administrator: @@ -191,7 +191,7 @@ To check which “Security Intelligence Update” version you have installed, ru #### Check the Engine Update version -The latest scan “engine update” version is available in [Latest security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware - Microsoft Security Intelligence](https://www.microsoft.com/wdsi/defenderupdates). +The latest scan “engine update” version is available in [Latest security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware - Microsoft Security Intelligence](https://www.microsoft.com/en-us/wdsi/defenderupdates). To check which “Engine Update” version you have installed, run the following command in PowerShell using the privileges of an administrator: From f0cdf5d072478fd304bb6b925f91b5e42d1c81e2 Mon Sep 17 00:00:00 2001 From: Siddarth Mandalika Date: Fri, 30 Aug 2024 17:22:30 +0530 Subject: [PATCH 13/14] Update mac-install-with-intune.md --- defender-endpoint/mac-install-with-intune.md | 90 +++++--------------- 1 file changed, 23 insertions(+), 67 deletions(-) diff --git a/defender-endpoint/mac-install-with-intune.md b/defender-endpoint/mac-install-with-intune.md index 10de1c5aa8..81cc8f71f8 100644 --- a/defender-endpoint/mac-install-with-intune.md +++ b/defender-endpoint/mac-install-with-intune.md @@ -34,7 +34,7 @@ Before you get started, see [the main Microsoft Defender for Endpoint on macOS p ## Overview -The following table summarizes the steps to deploy and manage Microsoft Defender for Endpoint on Macs via Microsoft Intune: +The following table summarizes the steps to deploy and manage Microsoft Defender for Endpoint on Macs via Microsoft Intune. See the following table for more detailed steps: |Step |Sample file name |Bundle identifier | |---------|---------|---------| @@ -59,7 +59,7 @@ In the [Microsoft Intune admin center](https://go.microsoft.com/fwlink/?linkid=2 ### Step 1: Approve system extensions -This profile is needed for Big Sur (11) or later. It is ignored on older versions of macOS since they use the kernel extension. +1. In the [Intune admin center](https://intune.microsoft.com/#home), go to **Devices**, and under **Manage Devices**, select **Configuration**. 1. Under **Configuration profiles**, select **Create Profile**. @@ -88,7 +88,9 @@ This profile is needed for Big Sur (11) or later. It is ignored on older version :::image type="content" source="../defender-endpoint/media/mac-system-extension-intune2.png" alt-text="Screenshot that shows the settings of the system's extension." lightbox="../defender-endpoint/media/mac-system-extension-intune2.png"::: -1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or All Users and All devices. +1. Select **Next**. + +1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or **All Users** and **All devices**. 1. Review the configuration profile. Select **Create**. @@ -117,46 +119,18 @@ To configure your network filter: 7. Select **Next**. -8. On the **Configuration settings** tab, enter a Cus**tom configuration profile** name. For example, `NetFilter-prod-macOS-Default-MDE`. +8. On the **Configuration settings** tab, enter a **Custom configuration profile** name. For example, `NetFilter-prod-macOS-Default-MDE`. -9. Choose a Deployment channel. +9. Choose a Deployment channel and select **Next**. 10. Select **Next**. -11. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or All Users and All devices. +11. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or **All Users** and **All devices**. 12. Review the configuration profile. Select **Create**. ### Step 3: Full Disk Access -Starting with macOS Catalina (10.15) or newer, to provide privacy for the end-users, it created the **FDA (Full Disk Access)**. - -On this macOS Catalina v10.15 (or newer) platform, when you deploy Microsoft Defender for Endpoint using Intune, you can configure an FDA profile by doing the following steps: - -1. Under **Configuration profiles**, select **Create Profile**. - -1. Under **Platform**, select **macOS**. - -1. Under **Profile type**, select **Templates**. - -1. Under **Template name**, select **Custom**. - -1. Select **Create**. - -1. On the **Basics** tab, **Name** the profile. For example, `FullDiskAccess-prod-macOS-Default-MDE`. - -1. Select **Next**. - -1. On the **Configuration settings** tab, enter a **Custom configuration profile** name. For example, `Fulldisk.mobileconfig`. - -1. Choose a **Deployment channel**. - -1. Select **Next**. - -1. Review the configuration profile. Select **Create**. - -### Full Disk Access - > [!NOTE] > Starting with macOS Catalina (10.15) or newer, in order to provide privacy for the end-users, it created the **FDA** (Full Disk Access). Enabling **TCC** (Transparency, Consent & Control) through a Mobile Device Management solution such as [Intune](mac-install-with-intune.md), will eliminate the risk of Defender for Endpoint losing **Full Disk Access** Authorization to function properly. > @@ -184,32 +158,17 @@ To configure Full Disk Access: 1. Select a **Configuration profile file**. -1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or All Users and All devices. +1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or **All Users** and **All devices**. 1. Review the configuration profile. Select **Create**. -By implementing these steps, you are ensuring that FDA is granted to Microsoft Defender for Endpoint. - > [!NOTE] -> FDA granted through Apple MDM Configuration Profile isn't reflected in **System Settings > Privacy & Security > Full Disk Access**. - -If you previously configured Microsoft Defender for Endpoint through Intune, we recommend you update the deployment with this configuration profile. In other words, you can upgrade the macOS—on which you've deployed Microsoft defender for Endpoint using Intune—from its current version to v10.15 to ensure that FDA is granted to Microsoft Defender for Endpoint. - -> [!TIP] -> If you already have an FDA profile, edit and add the Microsoft Defender for Endpoint on macOS settings instead of creating a new one. Apple only supports 1 bundle ID, in this case the FDA profile. - -> [!IMPORTANT] -> While adding the Microsoft Defender for Endpoint on macOS settings onto an existing FDA profile, enable **TCC** (Transparency, Consent & Control) through [Intune](mac-install-with-intune.md), a Mobile Device Management solution. Enabling TCC eliminates the risk of Defender for Endpoint losing **Full Disk Access** Authorization to function properly. - -Download [**fulldisk.mobileconfig**](https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/macos/mobileconfig/profiles/fulldisk.mobileconfig) from [GitHub repository](https://github.com/microsoft/mdatp-xplat/tree/master/macos/mobileconfig/profiles). -> Full Disk Access granted through Apple MDM Configuration Profile is not reflected in **System Settings** > **Privacy & Security** > **Full Disk Access**. +> Full Disk Access granted through Apple MDM Configuration Profile is not reflected in **System Settings > Privacy & Security > Full Disk Access**. ### Step 4: Background services > [!CAUTION] -> macOS 13 (Ventura) contains new privacy enhancements. Beginning with this version, by default, applications cannot run in background without explicit consent. Microsoft Defender for Endpoint must run its daemon process in background. -> -> This configuration profile grants Background Service permissions to Microsoft Defender for Endpoint. If you previously configured Microsoft Defender for Endpoint through Microsoft Intune, we recommend you update the deployment with this configuration profile. +> macOS 13 (Ventura) contains new privacy enhancements. Beginning with this version, by default, applications cannot run in background without explicit consent. Microsoft Defender for Endpoint must run its daemon process in background. This configuration profile grants Background Service permissions to Microsoft Defender for Endpoint. If you previously configured Microsoft Defender for Endpoint through Microsoft Intune, we recommend you update the deployment with this configuration profile. Download [background_services.mobileconfig](https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/macos/mobileconfig/profiles/background_services.mobileconfig) from [GitHub repository](https://github.com/microsoft/mdatp-xplat/tree/master/macos/mobileconfig/profiles). @@ -225,11 +184,11 @@ To configure background services: 1. Select **Create**. -1. On the **Basics** tab, **Name** the profile. For example, `FullDiskAccess-prod-macOS-Default-MDE`. +1. On the **Basics** tab, **Name** the profile. For example, `BackgroundServices-prod-macOS-Default-MDE`. 1. Select **Next**. -1. On the **Configuration settings** tab, enter a **Custom configuration profile** name. For example, `Fulldisk.mobileconfig`. +1. On the **Configuration settings** tab, enter a **Custom configuration profile** name. For example, `backgroundServices-prod-macOS-Default-MDE`. 1. Choose a **Deployment channel**. @@ -237,7 +196,7 @@ To configure background services: 1. Select a **Configuration profile file**. -1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or All Users and All devices. +1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or **All Users** and **All devices**. 1. Review the configuration profile. Select **Create**. @@ -263,19 +222,17 @@ To configure notifications: 1. Select **Create**. -1. On the **Basics** tab, **Name** the profile. For example, `FullDiskAccess-prod-macOS-Default-MDE`. +1. On the **Basics** tab, **Name** the profile. For example, `BackgroundServices-prod-macOS-Default-MDE`. 1. Select **Next**. -1. On the **Configuration settings** tab, enter a **Custom configuration profile** name. For example, `Notification.mobileconfig`. - -1. Choose a **Deployment channel**. +1. On the **Configuration settings** tab, enter a **Custom configuration profile** name. For example, `Notif.mobileconfig`. -1. Select **Next**. +1. Choose a **Deployment channel** and then select **Next**. 1. Select a **Configuration profile file**. -1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or All Users and All devices. +1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or **All Users** and **All devices**. 1. Review the configuration profile. Select **Create**. @@ -307,7 +264,7 @@ Download [accessibility.mobileconfig](https://github.com/microsoft/mdatp-xplat/b 1. Select a **Configuration profile file**. -1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or All Users and All devices. +1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or **All Users** and **All devices**. 1. Review the configuration profile. Select **Create**. @@ -358,7 +315,7 @@ Download [AutoUpdate2.mobileconfig](https://github.com/microsoft/mdatp-xplat/blo 1. Select a **Configuration profile file**. -1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or All Users and All devices. +1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or **All Users** and **All devices**. 1. Review the configuration profile. Select **Create**. @@ -418,7 +375,7 @@ In the [Microsoft Defender portal](https://sip.security.microsoft.com/homepage?t :::image type="content" source="../defender-endpoint/media/networkprotection3.png" alt-text="Screenshot that shows the Create a new policy page." lightbox="../defender-endpoint/media/networkprotection3.png"::: -1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or All Users and All devices. +1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or **All Users** and **All devices**. :::image type="content" source="../defender-endpoint/media/networkprotection4.png" alt-text="Screenshot that shows the page on which you configure the settings for the Assignments option." lightbox="../defender-endpoint/media/networkprotection4.png"::: @@ -506,8 +463,7 @@ This step enables deploying Microsoft Defender for Endpoint to enrolled machines :::image type="content" source="../defender-endpoint/media/mdatp-11-assignments.png" alt-text="Screenshot that shows the Intune assignments information page." lightbox="../defender-endpoint/media/mdatp-11-assignments.png"::: -1. Review and **Create**. -You can visit **Apps** > **By platform** > **macOS** to see it on the list of all applications. +1. Review and **Create**. You can visit **Apps** > **By platform** > **macOS** to see it on the list of all applications. :::image type="content" source="../defender-endpoint/media/mdatp-12-applications.png" alt-text="Screenshot that shows the application lists page." lightbox="../defender-endpoint/media/mdatp-12-applications.png"::: @@ -576,7 +532,7 @@ To deploy the onboarding package: :::image type="content" source="../defender-endpoint/media/mdatp-6-systemconfigurationprofiles.png" alt-text="Screenshot that shows the configuration settings." lightbox="../defender-endpoint/media/mdatp-6-systemconfigurationprofiles.png"::: -1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or All Users and All devices. +1. On the **Assignments** tab, assign the profile to a group where the macOS devices and/or users are located, or **All Users** and **All devices**. :::image type="content" source="../defender-endpoint/media/mdatp-6-systemconfigurationprofiles-3.png" alt-text="Screenshot that shows the Assignments tab." lightbox="../defender-endpoint/media/mdatp-6-systemconfigurationprofiles-3.png"::: From e12a187394937f34370b143148968f075b85aef2 Mon Sep 17 00:00:00 2001 From: padmagit77 Date: Fri, 30 Aug 2024 21:40:44 +0530 Subject: [PATCH 14/14] Adjusted alignment and added missing periods --- ...-using-mde-security-settings-management.md | 48 +++++++++---------- defender-endpoint/mac-install-with-intune.md | 6 +-- 2 files changed, 27 insertions(+), 27 deletions(-) diff --git a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md index 088c4705b8..05f9baadc2 100644 --- a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md +++ b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md @@ -142,28 +142,28 @@ To enable Attack Surface Reduction (ASR) rules using the endpoint security polic 1. On the **Configuration settings** page, expand the groups of settings and configure those settings you want to manage with this profile. 1. Set the policies based on the following recommended settings: -|Description |Setting | -|---------|---------| -|Block executable content from email client and webmail | Block | -|Block Adobe Reader from creating child processes | Block | -|Block execution of potentially obfuscated scripts | Block | -|Block abuse of exploited vulnerable signed drivers (Device) | Block | -|Block Win32 API calls from Office macros | Block | -|Block executable files from running unless they meet a prevalence, age, or trusted list criterion | Block | -|Block Office communication application from creating child processes | Block | -|Block all Office applications from creating child processes | Block | -|[PREVIEW] Block use of copied or impersonated system tools | Block | -|Block JavaScript or VBScript from launching downloaded executable content | Block | -|Block credential stealing from the Windows local security authority subsystem | Block | -|Block Webshell creation for Servers | Block | -|Block Office applications from creating executable content | Block | -|Block untrusted and unsigned processes that run from USB | Block | -|Block Office applications from injecting code into other processes | Block | -|Block persistence through WMI event subscription | Block | -|Use advanced protection against ransomware | Block | -|Block process creations originating from PSExec and WMI commands | Block
NOTE:If you have Configuration Manager (formerly SCCM), or other management tools, that use WMI, you might need to set this to **Audit** instead of **Block**. | -|[PREVIEW] Block rebooting machine in Safe Mode | Block | -|Enable Controlled Folder Access | Enabled | + |Description |Setting | + |---------|---------| + |Block executable content from email client and webmail | Block | + |Block Adobe Reader from creating child processes | Block | + |Block execution of potentially obfuscated scripts | Block | + |Block abuse of exploited vulnerable signed drivers (Device) | Block | + |Block Win32 API calls from Office macros | Block | + |Block executable files from running unless they meet a prevalence, age, or trusted list criterion | Block | + |Block Office communication application from creating child processes | Block | + |Block all Office applications from creating child processes | Block | + |[PREVIEW] Block use of copied or impersonated system tools | Block | + |Block JavaScript or VBScript from launching downloaded executable content | Block | + |Block credential stealing from the Windows local security authority subsystem | Block | + |Block Webshell creation for Servers | Block | + |Block Office applications from creating executable content | Block | + |Block untrusted and unsigned processes that run from USB | Block | + |Block Office applications from injecting code into other processes | Block | + |Block persistence through WMI event subscription | Block | + |Use advanced protection against ransomware | Block | + |Block process creations originating from PSExec and WMI commands | Block
NOTE: If you have Configuration Manager (formerly SCCM), or other management tools, that use WMI, you might need to set this to **Audit** instead of **Block**. | + |[PREVIEW] Block rebooting machine in Safe Mode | Block | + |Enable Controlled Folder Access | Enabled | > [!TIP] > Any of the rules may block behavior you find acceptable in your organization. In these cases, add the per-rule exclusions named “Attack Surface Reduction Only Exclusions”. And, change the rule from **Enabled** to **Audit** to prevent unwanted blocks. @@ -175,9 +175,9 @@ To enable Attack Surface Reduction (ASR) rules using the endpoint security polic #### Check the platform update version -The latest Platform Update” version Production channel (GA) is available in [Microsoft Update Catalog](https://www.catalog.update.microsoft.com/Search.aspx?q=KB4052623+update). +The latest "Platform Update" version Production channel (GA) is available in [Microsoft Update Catalog](https://www.catalog.update.microsoft.com/Search.aspx?q=KB4052623+update). -To check which "Platform Update” version you have installed, run the following command in PowerShell using the privileges of an administrator: +To check which "Platform Update" version you have installed, run the following command in PowerShell using the privileges of an administrator: `get-mpComputerStatus | ft AMProductVersion` diff --git a/defender-endpoint/mac-install-with-intune.md b/defender-endpoint/mac-install-with-intune.md index 81cc8f71f8..34293fca2f 100644 --- a/defender-endpoint/mac-install-with-intune.md +++ b/defender-endpoint/mac-install-with-intune.md @@ -403,7 +403,7 @@ After completing the profile configuration, you'll be able to review the status Once the Intune changes are propagated to the enrolled devices, you can see them listed under **Monitor** \> **Device status**: -:::image type="content" source="../defender-endpoint/media/mdatp-7-devicestatusblade.png" alt-text="Screenshot that shows the view of the device status" lightbox="../defender-endpoint/media/mdatp-7-devicestatusblade.png"::: +:::image type="content" source="../defender-endpoint/media/mdatp-7-devicestatusblade.png" alt-text="Screenshot that shows the view of the device status." lightbox="../defender-endpoint/media/mdatp-7-devicestatusblade.png"::: #### Client device setup @@ -431,11 +431,11 @@ A standard [Company Portal installation](/intune-user-help/enroll-your-device-in :::image type="content" source="../defender-endpoint/media/mdatp-13-systempreferences.png" alt-text="Screenshot that shows the System preferences page." lightbox="../defender-endpoint/media/mdatp-13-systempreferences.png"::: - :::image type="content" source="../defender-endpoint/media/mdatp-14-systempreferencesprofiles.png" alt-text="Screenshot that shows the System Preferences Profiles page" lightbox="../defender-endpoint/media/mdatp-14-systempreferencesprofiles.png"::: + :::image type="content" source="../defender-endpoint/media/mdatp-14-systempreferencesprofiles.png" alt-text="Screenshot that shows the System Preferences Profiles page." lightbox="../defender-endpoint/media/mdatp-14-systempreferencesprofiles.png"::: 2. Verify that the following configuration profiles are present and installed. The **Management Profile** should be the Intune system profile. _Wdav-config_ and _wdav-kext_ are system configuration profiles that were added in Intune: - :::image type="content" source="../defender-endpoint/media/mdatp-15-managementprofileconfig.png" alt-text="Screenshot that shows the Profiles page" lightbox="../defender-endpoint/media/mdatp-15-managementprofileconfig.png"::: + :::image type="content" source="../defender-endpoint/media/mdatp-15-managementprofileconfig.png" alt-text="Screenshot that shows the Profiles page." lightbox="../defender-endpoint/media/mdatp-15-managementprofileconfig.png"::: 3. You should also see the Microsoft Defender for Endpoint icon in the top-right corner.