From 3de7a0b911e4082ea8bdca314201af77384e8bef Mon Sep 17 00:00:00 2001 From: JD Date: Thu, 2 Nov 2023 11:40:47 -0700 Subject: [PATCH] Article osquery cyber responders (#14901) Article: How osquery can help cyber responders --- .../how-osquery-can-help-cyber-responders.md | 69 ++++++++++++++++++ ...query-for-cyber-responders-1600x900@2x.png | Bin 0 -> 38873 bytes 2 files changed, 69 insertions(+) create mode 100644 articles/how-osquery-can-help-cyber-responders.md create mode 100644 website/assets/images/articles/osquery-for-cyber-responders-1600x900@2x.png diff --git a/articles/how-osquery-can-help-cyber-responders.md b/articles/how-osquery-can-help-cyber-responders.md new file mode 100644 index 0000000000..4208857e89 --- /dev/null +++ b/articles/how-osquery-can-help-cyber-responders.md @@ -0,0 +1,69 @@ +# How osquery can help cyber responders + +![How osquery can help cyber responders](../website/assets/images/articles/osquery-for-cyber-responders-1600x900@2x.png) + +At 3 a.m. on Sunday morning, Avery's phone starts vibrating. It's their SOC lead telling them about an in-progress ransomware attack. The entire next quarter is a blur of whiteboarding and crisis meetings. + +After three months of endless shifts, much of which is spent trying to tie together information from thousands of endpoints, Avery's team manages to save 90% of their data. A good result. But who cares? Management even pins some blame on Avery's team despite the C-suite ignoring warnings and delaying pen tests. + +An above-inflation pay raise? Forget about it. Anxious, disappointed, and still not sleeping, Avery, burned out, quits their job. Avery is a fictional character, but [a study from IBM](https://newsroom.ibm.com/2022-10-03-New-IBM-Study-Finds-Cybersecurity-Incident-Responders-Have-Strong-Sense-of-Service-as-Threats-Cross-Over-to-Physical-World) puts data behind the reality that thousands of men and women on the front line of cyber incident response know well. + +The vast majority (67%) of incident responders surveyed by IBM report feeling stress/anxiety due to their jobs. 30% get insomnia, the same number feel burned out, while 18% feel physical effects, and 17% get panic attacks. + +Working in cyber incident response is not suitable for your health. But cyber incident responders’ jobs can be made better. One actionable way to do this is by using osquery and decreasing the time it takes to respond and remediate cyber incidents - helping analysts get their lives back sooner. + + +## Low visibility hurts incident responders + +In their report, IBM recommends two core actions for decreasing stress: creating detailed incident response plans and testing your incident response under pressure. + +It's worth adding a third recommendation - centralize and simplify fleet management. + +During the investigation and data-gathering phase of an incident response effort, analysts must quickly gather information from across all their endpoints. Few can do it efficiently. + +Lack of visibility into IT security infrastructure is a severe challenge, [with almost two-thirds (62%)](https://www.intelligentciso.com/2022/06/13/global-organisations-concerned-digital-attack-surface-is-spiralling-out-of-control/#:~:text=Visibility%20challenges%20appear%20to%20be,cited%20as%20the%20most%20opaque.) of organizations reporting they have security blind spots that hamper their security efforts. + +The result is that when a series of alerts indicate a malicious incident, analysts can end up in the dark about large parts of their digital estate. They can be incredibly stressful and frustrating when an incident is a false positive and potentially devastating when a genuine attack is in progress and you can’t get to the bottom of it fast enough. + +For cyber incident responders, who are sometimes compared to firefighters, the building is burning down, and smoke is everywhere, but no one has a floor plan. + + +## The case for unifying endpoint data + +An unequal security landscape is hampering endpoint visibility. Most organizations cannot gather unified data about all of their endpoints on a single screen. + +For example, if an incident response team wanted to quickly figure out what files have been deleted from hundreds of different endpoints or which applications are running vulnerable versions of SSL, where would they start? + +According to [research from TrendMicro](https://www.intelligentciso.com/2022/06/13/global-organisations-concerned-digital-attack-surface-is-spiralling-out-of-control/#:~:text=Visibility%20challenges%20appear%20to%20be,cited%20as%20the%20most%20opaque.), the average organization can only see around 62% of its attack surface. The other 38% is opaque. + +In a world where lateral movement is a feature in the majority of cyber attacks (and [96% of the time](https://www.intelligentciso.com/2021/04/09/expert-says-cisos-need-to-take-lateral-movement-seriously/) doesn't result in a SIEM alert), visibility gaps like these are a terrifying prospect for responders. Threat actors will almost always attempt to "land and expand," mainly using hijacked versions of legitimate tools or exploiting misconfigurations in interconnected cloud environments that bypass signature-based controls. + +To cut analysts' stress levels and reduce their mean time to respond (MTTR), start by plugging their visibility gap. + + +## Complex tool stacks are not helping + +Growing tool stacks that consist of endpoint detection and response (EDR), endpoint protection platforms (EPP), and other point solutions organizations lean on to understand and secure their environments aren't necessarily improving visibility. + +Modern IT environments can feature a mix of on-premises and cloud endpoints across different flavors of Linux and Windows versions. Some devices will have a full suite of security agents installed; others will not. + +This means incident responders can get relatively granular insights into some parts of their environment. A modern Windows workstation with an AV+EDR agent like Windows Defender for Endpoint installed will be much easier to query than a legacy Linux server. + +The same is true for mobile devices. Very few organizations are confident in their processes to inventory various assets connected to their networks. Only 23% of the organizations we surveyed in our [state of device management report](https://fleetdm.com/reports/state-of-device-management) successfully enroll all or nearly all of their devices into their Mobile Device Management (MDM) system. + + +## Simplifying endpoint visibility with osquery and Fleet + +Incident responders’ jobs are much more manageable, and their companies are safer when they can query every device connected to their network. + +Open-source and deployable on macOS, Windows, Linux, and Chromebook devices and servers, osquery agents can meet their challenges. + +Using Fleet as a centralized management interface to deploy, update, and manage osquery agents, incident response teams can ask questions about their endpoints and get real-time results on a single interface. + + + + + + + + diff --git a/website/assets/images/articles/osquery-for-cyber-responders-1600x900@2x.png b/website/assets/images/articles/osquery-for-cyber-responders-1600x900@2x.png new file mode 100644 index 0000000000000000000000000000000000000000..c58fcb35bfc0b6b421240e180269ad533edf8cbc GIT binary patch literal 38873 zcmeFZhgVZuw>}&zARtYODD42EC{01>K~O=EUP4Ej2uKqVDFF)|F(@L6bfhIf0O=(t z9Z^84bmol#{R!_G<7iB>_g-brXFl_pb0u6yOO^f<=P4KrMt@iB zmL3dtQV9k-7DRm#ytAXZp9cP-aaS|(gu!T8p#P7+;uAQ)n@2qLRFz@*?dRvgKaM-x z)Vv9U6{2YOtWUsTajti7-86W1WO0NxA;AkNc3`Ef+~UF_dPyP(bA~SMk4p6m#>>2g z`?Sa92``m{`3ti+tCjrZsf{ivWJR3tT$B+w_2GQyobJ&->WrNy1%w4lc{y(y@bU@F zlvcGaKZwy>Pab1=@KtW$SG)YRue(3Lt`HZb9A-a_3?weT@%*vzX=PR}EyIVn42A~& zi{|G)MtPysPOU_F@qC!+Ipqbcf**E-^6IfF>?q~M)En4w%8M4RBh-`^(Q-!_DKB`v zkMmMqC@uf@MwEs4?;1U)tiylp=)W#PF@*oZ2rp$F{)>?RjUtdC{5R76e@Vn0K#_Rk zERAdUiXS=BisUV|uIZ}Yqfym_UjZvdM+HG?OE}N|6Z`U&@2umqmy^ZJEiWGDaX|)* zI6pX_c$_cr@m9|G=8Yr+>N`RIz+g%TuOB*&*2saY>2vHg{K}`3Kd^}siRYftO(EHn z&K@|82EPP1@v-L&OwWqZACU#bbX%~nUPGrL;tttuw(M#7W1 zT+3(n0TD~lrBMQZ-t?c$SFN);AiT6JYYayPmLE*GxB9iyIVzMnsgxhkdM~jAHK^x` zk@s1li;CyW@64*2EmMzkoFV{@QuYS1E4w1zu8$0ml)rA#uzeP{xvVeFPi4_KE@nZJh}uzL~oO4lRtz&1_SQ<@Hpk0DP4Gs z#+c`W@-OaZ@5Km3(U!H>ruDm^3xH4F;RB@i`RjQM2|p;ivOk9s28MUI^t`qql_d0g z${Unryc!VTj0hGuuU9S!Bme0dgv295{k;b4u%EXvzv;hFW1+MnK7}6l5Rdmn$2#l zqTvZ_Xpf(7^_4v}{I=&K9AYLp0v@dlGquZZlz`jtYTPN7Tp0zn_MC5{vMivwf3w+T z1Dowcnyg^I9@K_4XZ)a0>84;vC!SyBt7SL_KgoNoqcU^Vb4zi?Z>9V~^>oxVFf=8j z>~BZGJq#A`7>$|33wLUY=SV&auN{2`%udKO2Gj@X3hvT1F3x5^tXg6O`qMuyNK+PGHDNvgd;V_R0|BD9AEUv7A+=5O*&R>rt0+~O?Q$s#2vB~eM? z?nNZ;*1enZ^>j8fA%;ttP&Toe`8f>sjrZISJVx(7-@qUUhMfQT2HJsOXi9lQ{_v7k zJ%ZsSLu0T6qfi=iKiV#bgf_^nBTadcZy2aRTOBP(8ToOOT%5312hk|VZ`n`&3uV(= zD0|#vqJYLuw7)Smu!^npAFZ?F6cC}@(g?a`O1qNCi)i`*xo)xG1|k629`?>h${<)ZlFC<3<|B z!=XdDrxHE*6kYrneNoGLla5dL?Y;Cf%AblUtMuwFGzdeqDxr7pgoZxC>epvExts*N zh85qfig>fZ`e}qHb*~QOaCB_YPz-Vudl4GSoJin@!t{K?g^RyqDH|R_S#RN9L$<^^KgNBVj!0hHo)RBz|1AlG*<5z zCp0K`*rQB7n6rk2?%4@^?DWx#^g6mp0U*E!5o~@b1!r^^pa*9wS)#G(BeH?6c;VbO zc%=?yOft|%7xk0CM~#frm6+KeNtZp31xxS9sK5xzh;+Hwrq#YI)frRr8UdlBq?8Nef@ z_}YZf)ZYJ4tVV=_Rsmou@!?sP)NvhVj9p=HvRql9JYC2{t;8?M=E|`$0iJHHx3?%O z?eq!qwE)OND(AXBE1NQiR$QRVly-Uiqg6Fja^gM3qS2|)0J1}%4I_!01Ki%PAH%`F z5W<}eA&*s2Jpth0eKxQ~Pq9bT?E5~I^QiB+xWQS6I0Ie7i5C)2RvP=9qFF}XYLY4s|)Ch1+Qj(fLlS^sB;>c@Ma3h$qH$x8+%#H%{;)qGGk?T zcZV|e7nI4y<>2ti6vzGj5t!`)-N^6}p z_ag+Sa(WE%o#b_FNDj1!h1Xg>NW9LU0Qdo4lszh+jyOzwmVIY$XCwdP2=crNrlUif z=m*5Fbxq)e-wF^YJjN-LYvO(VROY6iDqh6LKc*>EQZ%_t{L{&tLs&Tv8C^(;uYuJs zs{+YSPu2Jj_N1qy?F%FDJo&ZKUzqAq+LnH*+5h?NJd&Z62#sUU#4N)H4(4C73Klw^ zyAz>+T=i-`qCnrtf54pY|AA0|aATA;-fT#jvt)bc)qLNMXE(wcX+T*>E6TGoz_Ue6 z_uQ|JMBfn!IJh5a{mTo{LE|W2=7huxuHB|A>OSOp;)~fhbfU3JZ0RZIgSrgL2bG5( z^k4u=NPYSJuosbWh}Hto2#j@+hJKXqU4g=f_#<$GWG75P(lh+dA>Junf_Ae$1dkz+ zLKonShfsJJ4k+X)Bp5J+M#u0wSP)Hs^$GIb;`BIri!uQXXabML0LXY)KQlj{q*@q) zo;`C%(1z7$uf~WHjC7!J@DlO5$k>EjZ8M~o7Y>c}#XFx$H~%HFG`@bBJ;;dy|NlVa zs4xOsX5WUma72xBt--&8CRkoLu`auzNVS{n8cCVhTVUqjy-8ceWByo^ zZ7NUG7l_Xqc1AAL~Y9S^Wr%zc*iU0jz;!G1| z{~N{v2Wb+Lphxa05JX)349z_R@`oMT51IM6_#56&AEzZE8*3vWAH6RQIp4#F1PsoUxl0Er zC4LwRp_txTfHy>X?Znb50|ukUua$hym6QF?p)1$WK$jVVkYZZAJzlW*`w7d*l8=gK zMJL7_M_Fe>B!M9$9MAaxJ)`9YG(-AJk-dn1G!Css#|u)Fx#&B?C)OMEJ3^hHoqO&N z#i&kq=!yGL-WitumXY%@<8wR*Tl;)@+UCFy5AQ|U1o|w?UPKwYsAD!x9V_`f`&O>7 zJ``6sAvIV@1y~$Bnx5n2ZMc( zn1ss@-;X@fka0=K&xW-x?R{W3Wh<2wp`~sq22S7T_(D5?^d`D5Z)5f(em1hd7M{bQ zG0DB^aAf5V1HXl!YlV8ygnRfJhV6i%0wUZ{u@>(w6_5^BOBR4 z)d6P)92Lr^;=lb3H?(!c6aY@A4DGx4PiR|P z&i5j2tr3wUy`IXPYb)o;qrDU}k8-}Hv9UY?!pqeuFSq??*m=~@jFm27vl)sp%^iEj zYWyd~I~0=w9@||67zW7mozrgZ@t!KiTMsMoIibtA3p5gFCZW3zlDss>Wr~S1J}X@P zL1op2l`Ftjd*Yxyx)Ea3hK#t9mBe{a{hQ-e={b3H4J>{xjj$?LW&b^r`5ERywzE~;D-f>(Bz>8-mOHpkdOFvT8IB#a%*xB(Jprv%c5Z&r(m#bGh* zep^Zg-tT0L_!`}Lql}SW2Xb2UCagkcqNI(_?*b>a5%TBy_Hh|w*pa>pet9cumSysI zOzS_}&-ULVcq|AjWup_5a&sxa#}9bq&kFYr4<_wZbs&eFRXEK`p9X1uHm&ce7ZU0x z@6Ykz^VGvsZy(+AmkEthw)~*6K;OTJ6}~(xqd^dG0o2^20gl zUYP`!IQK6rxBO-+Wm86_^@(teYma%_8rM9~CsI;J-l{7%sbIV;U{OJ0Yh-13F5s2} zyHOP2rCXWt8;4C^8QDFHkrf# z1D3`2gDfwH6a0S`>1!zp=Ll%o~JEUKB|@=_ygX zySMkERt%WrHsp156&s?<$gAW^%!~n-VgpV1W36XI!IR?sy}ZwJ;{0%B|9BO2CvWew zAveaOz1CKk$%>8wFO0{1ekcDDF{{t~WmcDe#PlWhN|0@L7FQQ?FYv(8ar?J+x1lF6 zX98scYQWd&&g7lWO>om)-X51ByB_kTo%?y zzP-7{VJ2aUuNP@Uq$N7XiqQKm`cB@_kG`1My7gIS^E^YblI*&{q7wdGtFhq~9EuX< zoTiuQk=%Y0-R0JmCJps`GA77 zhgZ*mt4kiP)sJsA&a?US3qN;!B9a&7xsHn$&Yec>%la=Zv?-TBAxP;d1PUBa(Aex) zCv<@;Zu+3W_gAJ4g(*a9LPX%Cp#lb*q)}0u#)QVsnMoNM=b6dY^(OD!`4?a>K;ZN0 z4uO@xh$(0fZ2lSDq|F_8-Jcu^XE+3xLnG?U#-&+KoPkEK!s&5JK~~vt#C`B!JOk&|L6n5L*DCYFZ(^Kt3st#}BeLMR8eB^S0AF z=30Ke3yo(g3>r^m4ua4Nq>vbxK-4yejUn?+5mFUlT$?KMWNG-UXw@?#z1y)A`q;t% zEr1uq9cDgk0Y7FBDdq<3h1crcs_lLfP^Pr*Q#NOu5_&A`zES{Rrn?U(LIZ!gG&-`d z#Uby%I`O2V%s7}(f)%4ZTs9RAC`|kUrt8!(vGGJoc}>C`@v2$rX~U{*_l(GH5YKHM zkcK8anPB3J`s`K#-&>z&SE20dw@!#T=y-zI715sLsiLMqFvJzRI%?FRUcA@3Z}5+i zb?-|k@NsZL>*55hi^sYOfmN3dZfe?wc^kpPiwM{TnRo(hr|V@#DrJ%HKZK%O_Ss%U zkD1`O>Tmm%&%Mq^)0xXgcHE0tzChpMh0)1E%ORBxwo{!Y;1*Kz{(JH@If}8pf&!`z z3oy2<;&D~o`Qvv41J<{{jyqdfv7sqS#z{(;K2z_3NY48p~#%quZ9@{_m41sT)E%BwJi~4>Vo@Na9njZF4 z;l%VmI%Q?*9+-Usisd>y(5?yVbsT2%23As~snqZY$SSV}zio2y7Nt<8vlpNhdj!_I zM8r%ka7Bho;t+(b%0?91rHBOL zDOZfFG?OGP35Kr*ap{*I4gcXR%9Qj69IXz0I50|G{^a{sJO*QEC6$(+Z*h0K(3!X# zEp?Z*FBFqgXUgex6Y{biD8GHaj|N_*K+IFKKuRrap0yrj{dz1)Fob8}hGb}dqMV8m zGM7>D|IfgcTp&}NLx5d?{atk_q$~o%lj{07lE@rBDJ7h1pwzI}wIy&%J{Q(Dx#u z9NPNcgq(&)P+VyevZ>Czq+WzWM+M&(piLAuAbG$>s&G^Gs|iY$Qaymd z5W?U_p6mze3~L`TaC<|C7P7sRtB@%%gB>@bgZH^TJZ&N89a0^x&+EY{5G8$r8DvNl z&lJ8U4C2xv@JzPru1>A?fKaTC4`M{s3>{hPQ44O>a$d1U+Ks}wL(BfsGNMM-BksR; zRq|@eA6Wb;$`Hx*C*2rnZf%b1TiWo_?QU4Jo@k&MDdSm-s3-a-Jbm`qZ_mG)8{z~U z6eeCoavB{TKw~*uW=V=iowYd>v!lX|;rX&CkwP_##y2Uq`0YF{X`znj1uZr$>_ZkmvVyIyTQ;~X;t z;DMe6z(c(;h{I4`qjveEcpa*#z}~sJfCiq%VPh^s9RAXU){~G2P`w)?oaYp)AKZIw zHOyMI@CTYRT@|IJ$nE~^i1k#o`-7oE&rcug-vZs-lBJ1BdygE=wuf1 zvS@ArfQJI$eGZ^nLtja{E$seBprH4HOn@a`KY;_qa?xY0VuWYEP5s275w|aOZM?9{Ikhlx8F&6PXYbjj zGotAX7u_Z%QeK@tW!wCQf$GiKZZ2N~7I%ZoA$$^N<{!Fg=a-em5lKwmVF~-qS-~2k z-Y=%{Kmx1>>e)AO0|2$a$S(sT-RpETm^4(LWB(_F=eG{R+GU`Njr-tt#A*j||Kj=U z0h0l>*R|XlzS-_=hg;tpx22O0xw<%~;eT(9na5UFRh5r!pfqo_Fpn{;Sg8A-jESNx z<5*U)LgC9N`8StEl1cRN0;TV zqL-Ix!{elB*56jFXdh()4@qwFI|o1~r?-lPuP|It;RJqOU)sKuno*)q(0^Bmn<;;9 zwSq6oN^#$28?cYv{dnp5wHIxQTn9FzV}!E-4ZfIH42qKX;OigVe-;LEoR)c_E?SS$ z^Q%j`J03Q#Dnwqsq@Q`g@1A;NM6NXJ760^T{+ky*59ZtDISZ*cuY1id@iu%m7oI^ zpEc$zWmB_w6=!EpEH?ambDUcRe?^01v^1-YHZ`dKLRv4!1p}+Mefbtu^(6XV^}h2v z2a=lS&*4@Fh#``uWlw@I@QtYD$%%$$gj@jbo2~|1w_|uL~m_A>+sen9%BA5?6sme zuG$ffGWHhSQxgi|Z9ebkpUlGNadc|MwOa5Kb+|R4f;%=xkHdIpfrusL)3xosuvhWo z(GV`Zt!v}d8GzUT9M7*htG@Ze)x`COyD4h)hB+rb9F?EXWj)(&k^1#3|C6OZOi!!* zhkHvD7JYq~AF7UT?T4dwpC3C-oo;#h{JZeiy6Lpd=`oD|aHE9JGh}iEZQfwgGyibV zSu4trT#2vW0-5Yo5CApa=Bq%f1k67-QlsOB>mz!D%mm@w-&Bj#np7_IRIleOE?+0UHP`H*T&(7*@%x%zqNl|2!-ayoSU_BO4QX6V0PXrS$&uJV*y*~`W22d7{9h&TE zZjdmm|EQa|JM6F*6h6*yaNlVp>mOO!L6zCkHw7gw&g+G2)~cp!4&KFOODu0*bKOup zFFBJk<*nDD^o1j+fzfWVY1G=)1KyH`^&gc4=64JtJW~e$(j%Z4a&-B+w@STu6zK=I z*=L;xJ`8cBpZg6iBV|!%OB5to>rhPmzEr0RPve2j;h(0#L+H%PN-unG?i0ylrQ+7q zoUH$nNi*Iu9~#P!`onVkUNUahw!5Kj_JZadfgmDc7Bj2eGdO5e{)ir9X&z@DXiXTL znpAqH^TmCj+Q;_s`D1T63|?RM&s9}AL&V&B6rXUMFE8)cNLjOKZuz+eXw(!|Go=Fp z-He#I>1{%9FdBQ+)!8qrhDU033m%~P*k{!$dC{|9wQyND$sb$7@wmA3kyfU>O|;G% zjwcCQP5o>y-{g$<3UL7i#KT+~?XECtsUZRL!N=9!eficZch6<}_PFm}xf7u>U`3zq zR+?`xUt!2)nzU16WyNf5ltFO*?yC0l25}c*N$f)r;}6PR4p^nk`~&uWqCmNhdSh|& z#tHPsFuHE+Z_ks!SC5CcD~KV0j)W)?jP@20*2~r8ijI8LvvtL!M_7WSO2T@WK8wT^ zj)z^7Q!$ojN6o3_ZT_sy2yAlu%U$6DVyLG}(TcRb(1W=fk6}<0 z=uxMWwVC^EUcM-{85VPXMS8Y)b>>FR^`D~txdc1al6N%k>ue+AvN^*17vva%c*vWr zibA&{V)#64_(S+Yxn(mhr0OM{l*wK7ju`XYU+MSKepT!`z%pCGSx#?!9r8q0JGPB#ag0MKVC9CmYvuDmYR})ovnPcmxYyiK*zAIrZm0 za)1kV$Yy&DMPB{1ie`bBqFoG-?4Bp+AWx{w_SXg|(!ecEt5SDM%je{ig0Q!zdzHSc z4$rS8i^?Gx3aYhSW#7{PEOE}#i${O1+_p>#tLEsa#?II9%Dw!M>l0+HLf~L z^ytxTHu8E|lb)_ny;|p1A3|^@(!g#0t}S5$6)ULWTV7L}^)bG=$%_7d+g~Hw2WB@s zbV+!_4uYAWQGR*1;K@r0jni{HI}HvhfN6v1bRA0lI3YSbBW4_5Ny!wf`y8(woiYSZ zl;;ch^S)liRASNCidtcUhScsd5s`V+4uYR5)KyFn(^ z3ssg8kRjD)@Q^O^0UWwRdBPtbc4AUz`7&BYYM_D%gH8WH3*tw!%O66t|$fHSB8$&Eq4lYKb_L@QBkzk_-I)omXt5pw^h zh7-#dWf~$LEwvxaqp2CA%qg*ITtlirW-5Xel3rUIaGt%u!rP-o7c;R^TFiz?ugOD? z@PgEV4e$ZGXb?M7j@Xxw@TR?pDTBOvRA1kRFYD+h{i+G1XMdB)WtA9N;Xa#KtygEf zUwz4Iz>6IZkNgct3M4N*KdJvOdnQb5mrG!Pz7|^){H!A3lNc!bo=k?G{-Otv#jQF)kO@!q!pDeezv@sN&l)UPGGY;5 zJAA(8p!oFYk`#TWcl}1Vg*v9 zc@R8XX$Wax#4O7^q`xO#JPKox&fsgww~(ukXGaA864aNQ=D0SKBEA&H4+MDc8>8urf`|hOLU+@dN zH+=^S0$kA3b0E*5)dy4p>TwJ22xjlk1sK*tSg>u?~e?0^+@s!@9k(We`OaCRn=yBc`wOd?W%%7Po=$c z`IJha;r1Vpn`J`suLW}D|CN{` zhIjD&9~QrE`mcWv4N^bDop*o_g>%ir++j^dWQH^-9KCdotDFD1GW|K%Px9j01G z(H^(~31|zlv9nNb(EpVWVLr?lEbj4;MU5+@N|^qe)CmOl9`CuhBO1E@%Gf7>@@9EOuSxeImK3@a@dDp4Jv%*o-M|LMoaG;3 z11o*-3mt)L{!=&!iD*4gYZ~Q#URw$0ludy%dSJ%=(d95X(K=D#5CE2w$L1TY z0h~CzQY3YPxgN#waUs(HS0;9yj=6fN@A%62$!Bcp7T3ZVzOENdXKsy zr4U?8`+2;SY(81#<;Yx%^mHnN|%vJb``SEUW-2BfXd!NFnV`Bw~na3|-$whoQPyKk?EsEElfX=3T2pfJ)L zYh>LR41haoMbYx{%CSrU0cfaUkmD!;i&O9CvTAF-xzw1^0z}%A!U);@LWlV$J7k$n zy;i*iW903nT#G8dTIkL<6UGiMeD2oCh`9+7xF9LHAGknAks(O<0Tk+RjdlJF%al5Y z(~fj@9?{_h^ioWh`Qc zc`pr`P(SN?k0f_pif-l(>^cK1R~_2Hn?~U7wmE9OpX1G9P?{{wA-=K` ztf4{G^UkDnbBS%xC;tbTkcG!ci?E5Qh={_i%1S4y1oe4M%tN?;1?)QB6?ork01NjS z55=kJ#2shJmmP!O;Ea zY}`LlIJV^GOHpF}TQ#X4KdGG=0*Y`a%sz+bZ4W zH=8MVp%q#!4K>h%a_pj~ADsb}t+2qa^$oqrrYLF?R`#^OxmTW*D2-&qv3Z#jT@Xds z9i;-T7t>Jir90Y-_@ZlyG!$N5+-^b~T%}PKt=j%sR2MyQ`mJ#~>nqeVa*USzKU2RE zwS96N^2IMnm@aR8;6Fl<9lMW50+c&_wSpV)XeT^2?RWa*n3SDq38+>)&YAljXu%D- zqQ&^?DETqGv@LP?2ij z4101}ai-Pl=>G6G>U(WS)TU{GV&Tu2U%K;ho3s1&0a@^f84C~Bal%x75w294^=id@ zyZb?MLi{ih^e&%{y=Vus9vRdrVbN-F-8a|O6>p5+ao*o5 z@V!D{Tq*a2L8S+O@oO&vfx-PK()^Y80>9_U2fM_nK>AkKI&;^41p9=Wn^&VF0~$LlZhqFqtd!8c)6BbQqzAftrQ-` z%wF9T97BG)3Mkf9NJz$i0i~(JP`C@hFhMz7NUk-re6#xN*B{sF>&@raHwq_zz%@pH z|K4p_7hI|0J@2l>p(k;1o6ucVk2kD}sW}UJ335R%K@MM@P?B#zM}D+EJZbUN*@up# zYaKyoO?Z(+CMXYkzj%~;pIvSK>L!4me}ITB4h2rGp06ZyMTUa;!SCS1B3w(RF|v2i zH0#=MeM`r|B%Cud1%*fDS-f&(HgDW?HxkqR6KUAI_K17xgq>=nhVzzhPywr%llMC>g&-_5H? zyX9S~efY--6nVtWTj+bUc0jcp4Xt{fCF{G6{lBRS`h0RulHzCLQafakcd}zar|hDq zuz=!>6W3shnC)zmrzv)F=GQruiVK>9W|Lc(tU%03T38Al1jd{g5TrnZIFCtM_X4)*^;!MC{ZiMFu7zjqa>PZaY*m<^ zxf8dy-zLH{)@aYtLwJhnQkL?>)lDBn!a4lB5Pa7pyQ#2QY6iGS)tHwS)_%@Ku%l*w zUgq~^Cqv+QP{@Tt<`)H!oIbL{c>%zu_ffmW^7ZE9p!Twa;}!zzZI~7^J2+XaN+&q+ z<&L?NC1!*R8Lo1|F-sYoRFUiH*4M_~6LkcjkYYSK$lIK3$^AwhB+NrFou?-6m+xQfv%2kgEZXLmp`gaEg*;HB@YRlLqybG| zKjKoG_j!EW*Y7rGpub1RDfud55sDk10V%5;6UPAe&vp)0+Xy?YL+TVetZ_&rf*ghxA#|*HfG-M z6S`547N=(w8aZ=gw0-T34`LKpjS5dL6kH08^BVIAwo-0x8`sVK7NKva$+A#Z&J9a> z3qcw>dKw5@fIPP3OYeYe3y~cQYDUJ}Ti#@my{R<^aByh8`!tPPypMnRE0f;>sRCRB!XvzdH6dWjX7nc_Q+pnHj?&*4i?iqE00ARzhV`7`@?4xC^qMaC-qSZ2e+hm zQQ9E8U(^6+1C&@PX!E_R2Q)j)v}=ui*Sx+oSW@*MvcvYTM^myTPd@4AjUT7rX}!+Z zgWcGV#=wysQR5o4%M3oN3s&&4h4Nt%roFvgnX$zC)+Bw_GQE;h2~0stw0gdnY23vj z>d&=C@#}V7gC%?e`pn+J4c}&J{qH~hD4!D$bHZh5X*`RJOUuPZ)qYj+?3=l!uFkTZd#z<-YifIanQ2rp#uqqm4e^V*djM)Ge1qXWUIi*k?|THQnNs( z8o!atsi15H9e=$p!E#Xv@~( z8xSGi`y?GZK>4saf+rNsec4FYVq>RPL)1f+-r$wjc8@~a)W+N|w?R3NGsNc&>ZOm*|FNyh@oMW^orw1Wdx(VgQ20G?4QE3u zdsBzmExR2bDOXGPz+a#p%7&U*=pN@?^XCVUX4Pza`idAVT!2b@(_ez4bt8bJI=h5+Q6^Cl44{87{OH-tN@#UL!E@BDB>;txA`1e zHPAqp2Tq~1?!>v8aN;k8@B(eN1YyC*d3*lo=3^nH%F0rrY?7jjQ_D*ghNw8EU=}hT z;PG|Wv{z1ZN&Wm{)5-J-1&CMTjolvc=m`V0GeZ5YIeuR&SoYfM*>(o?AQS zdls)X2j;PjXFU3A|b!31#&NpcJEIm+N8D|4s{DD21Q7dt)<;Te#Vdi@Fcdo!?D5?KF z$gb%j#DSvw1rUT-0jD*p*xr*PDqhdtm6%Y%-$d2UqRbhM)*?}U9y^P zFqjiPmgmd2m%=EznDa?^Mdo9VX$IZXNPRx5EAnG2`=gTpj8+)5#_XM{<|_%R0gY{ut{pEyi* zUPJX793L+PxqJ;X5SGLn9x!cj^;!Iwc+nfSyxZSyGNpkA+>|&o}ZWf)@GWp z6&B-3ykha&jbLQnmjp(|4+u=Z2i;A;Gp_yJ_tla$d3hSv37wWuIt#KdqlANpIgd&F zS^*8>HU$c+Sh!ml%xJSFy4$nxji1W}PKIX2 z{vE`6Zys~gtzy+2j^%dH=$M@WbzXlu6`s0Qk2<*OzuY7^UctUa?{90&f~jmm4SoGv zRXaV4>;-e_@<#B?^bBDfHcyY0dOv;7`uw$g3h})f-A&FlA3AWhdiqz$F&LdKB=5*O zR)gAqXJy8o7Wn|QQ8kL60S%jO%KXnVo0&JkKxO@UtZtiNzYQjXE{h)vcY?6US&a2s zjdupmq|FRFsFDc7&ulkYQ6l$s53|HEVX_R0;Oi+f?# zTKvZwJZOCNySJAorH|;nk+5yrlD!U*5J*-27GMX?NdQ&Z1hCeL^$n-}_4!m9rIVhs zYNnvgp>v`99Zhr+$#-@ye|8 zXyI(M+y(8&r|pJ9G(}R`LWIK}j&!}AikOwK z&r@~o;n6SeTEh-{YycVqc&cu2m)7z#u)SE9;3TQJX!4?@W^uQ1*01oYvj#nW3mmSy z12G340F$hjExHht4#^|Mz@MwLGQ(|;A^jX(T93E1tY1*_4bhL{e%|nncWL47Z*UaX zVq<#N(U9ddJH6LO{hV^DFAqWAhW*&eb8Z%GP-z6A%NNS~H=)o4Tw3`fXp{$sNhJDB z{F8iu_U1g>u5($FrESPrm%)U=%F;K7cslxVT*}I##E~vZYyVoSGR&UmZM%4HLt6et+gtAPx5B$I&L}KLVa`7z(DENd+3i_K(;@Q*A=2A0( zf)>)l`gFPHED)a}J5^DGy9sV1XwZRn_z0?AgaHOrHZ!|D?rxIHdW8O3QPUiP(GK4WiTl#0U65j0V=y(+LzZP|C^JmBlhlncb7Ys zW=>2ql7s6T2k&?H@B^$MIG+irSc@_@f{H;iU9v>u=mEiy6 z;Vno@2Sou$kEI3;rQ z+<2>#mm4Gl$~I6BH^&xed&+BXU-C*kxJasV7?ZnLrKGrxyA}%cKBXeg=T}V4k@ww4 z7xh)xsfFUR;82M=AU)5mH3_V}5ivZ8iE?%K zeL#C^_K;$)UW+B6h&+I`Q+c1xlpjH4lC;q$FR^Ha( zhi()Iy+bRrlVx07Md@s99b!J(*SG9@{`nc+)^QGLnxEn2tY(Yo>yiNlW(m+MLZ<=P zZG7#0N4(Z9M?^w}@a$}RqF-DOXlCO9P1wIchotzG-dd9I$lV%KDv6$c z9WeYSUE!(}Wzl^@M5Eptx9et2h}X0qyK$0-$KPkH`Ti9nY$%u9)1XWGr%(3|7TJ>t zDpj{9+T1yKtEfY+Zf2rz^U(gZEmt=vb7qW?5O0%_G**9)u%;f$DY6G z*%&*?^x3L$s>k1sPzfAS@2T`63nklbGm(4JLqG$ZO}TFek(;4cc4IR}neB?{o?5n% z5rEIwW!PCMbTv&hm&L2HKUT60=IwvvAPpClHs$ z@l?|HuddVX7S}j~@4e>+dM~7$dR_#Rz0DpYQ@D74x96uaDA|;o=2eTpJJdhw=NV#% zid3p^L9jVs&)Q*$#vp$XU@Rh@yD`?*su@iWF}dzqI@v5YOf3{Z~>`=fw$_&JX4% zU?n+T<1xj^EdV~Mi2nS0T7h(`78VxPKdfuwzQvin>fI37P?A%6w=z_cb;>!rVZNvs zD<-l1Y;M`P&U>Z$g8XV{i2Gg+k62KNw_xg$&ZpWGlEsC%>e<)P?6t-_L(2<=NqOdt zoMjKw1m}Qu0X06%c3u)L%jPu|~h zGb$Cc1=Z^D$~x!a5C`^<&=2M;(3$Z)63F;nvJ#p4+#YEkjh=J}xMHs8W?l5!U)+#o z=1gP%>bBdD$Rs(XJFzlH^h|d$q26KWeD-}~plOIS%%e(6+rM>Q7FFVbAEa285&c#7 z4&LM10yJf$j8%%=WN}UJ%>r4o6rl5Xb$~&rAB_e-5mE^+^ROK!O1YX#uOyUtkFmWP z`YKw^2k7_9@S7h`5 zJ|48ZNd)2(nFH?nsEB%>xNt+L*}^{a3>EhuIcbxfO}9FXmb_~%F?`_1O_c&8`xFXi z>AMMjOh;hVsYKg`Z2P@dFrg!r-E#OpO>TphPMT( zeP#!~#_-MxwRwlmtA^Cs-+E}Lz@DON+jQQbZ(m(VDgMGBfC?RTFv2O*4;bu(TnRYA zak`slpvbv@H2C~v6T4n`+_C5-d#&dUT)dzj(TQZPNVq-cL8XS^^FAvTMrMVM-Y!?T z-A+!9#5%-P@4gmyTVAw`;YNab^a=qky;$JB9*#Ywt+0<#tlip*v+9Qqah5ORWyXJY zYYFe=4jwN#7A%AG`Gv7$9o<&F7DLMC@ITWS{(&OySmS%@Rwn;2Sr3V;!2OzU=zgaSy?Vy*0Mz05yoHq(irq7luq*@6}iCohGk?wzA zq}P|a_~AORNe7zX2V9O_cy;#qu-_Q?IiWAafOi~8O}?1NLXv|+#N#IvYKVKZ^-{^? zs{K(cw?5yrR$zl8>c+wEz*7#10eARv2gn_-V?=6qU8)yplqYVrjO(k^Z#Rnh!HGW- zVe^Z_eMn@;>M>Xfbnu?H>?%O~5mqAha$H2JGTqt1K`P4wZlD@LXRY1s$2}5=Z$1S# z8w^ZdblCB6{AHNYmmd{3V*O}5UnqgGjxY2Pd$xcNH$-bMR1x1XVtd)J8?E8>yM9996GQ=3WF&N8yo}+Wl``o_&!uPy>dfhZL z*Y$i{kNxqu->+FT;-G%d_cZiwgs79@d<3_L(}f|cV-Ny`*<@C)p#TYD?nl5(p&U=i zZ>1uJ#T>Jt*PnrQ_S8rYr>8Trw@ryRqtjSmYBQBsa$MvvHTg=!^eXIR*+~&p4<~H! zvBsLqcfa03*`0SY1axf$EI|C^nXEdMlN2Plpgvzr^2+IX^7lLnYDBb-n=%2l?jG{% zsdH|!L%6o(MS`BYrJs*(2jSfBpC6v}6!;lD3TKBs8r#NC4qG3eeQQMN>QaX6u6dN< zLJWBWArAPb0M=OrtDX%Vuc9t}YKu@=Ow2$mY}G^%E3cJ+mGq9pH@-$^K(kNghyQZm zHhzgS1tOqhrf4vSZ_5s^yA^Ot(xr0-LxZv+GO6o!7dcMp^OZ#7`@Pajrcc#@>BHl6 zQi1HU%P`LAl#{~22j`_IwGiL;d%82{cSLo9$}3-<(cQ{zVwb6`rx`Z!K2HP*5a}cG z)W0(JSsftS|J!C|*Gi$|oj82d`R(!kPRZvY$KFGPx2yM)i`yJGo@pVmpleZD2oXs0 ziiqLmzx%fK-i`GKiyv)CWb?wr&||F)43j+h=iY#*;$b0q8s{J^fO^TYRW(?TDV1g3 z7?kicLdFHV9^e+oF?erM`AJh>FzusoM5z>m{V58Junxe!OU#X0(5eR?4?Bv}n2q}+ z)pYTeR~m}S>Kn&8qG;ZhVA};R@b_7Zq>19;lKZ2Wi@Fa(w8FxAu^Qw9A1qI*sRu-l z>CNwX7UZ-o>@D03!wa>7Cdo}3mT2p)RLI!yp4_3Z=Fejg5(UoSngt$N-x2>v z9?D)Z8(IoLVVJN6gdB-^>XX#eMQ&r-$LGSo%v~dOI|UyXVZ zccbD2%@6n7L4=Y67xhH2H%C+l0UqoTRq_UJI zle6vVf(fuSv`~m^iihvArJ!cp$Pe;CMb>XI+Xz}GdB@x5uiF^z!<07GR%Z2dybX$~ z$<|;+K!+<%;ozJ}AlMAx1|@4GJq372jEML-WZicYcu}L(3xmk?-9<|@*Hdv~gr5rF zQJ{?IT&@~@yx0|KTvfS$VW;GzgFp2EO&rMX8NyJz&a#A`j5l+Mbx zYD8A0DqTt;k?XQ;_VaqCnSh>7DN%jZ|Y)Vut!d#@k<#RHDv4d_g7Rvmy$A* zU{3>ay_=wBy(mYmw{k*V>hXT-3LfmYCYX1|wFyNUPY*u$J=m18{!^z&YGTr>OcLJfr(5mACzInX>wKbTL=200L8v3Yg>gj!!$-al&PPzXh|j5^j;< zr)RR*`~h;sc*GEozTg#5Xxbq2Jo#uAwk&sSBUoP-STTVzzLF{zHL{wLCx@zFaiha_ zq>O*Erl_I^8MeG>4uPGVj_c@WQlB&`aj{mPYnUIA`D#I2=(OSKP?>4HW1h&}65*&JJQJ_0s$MCt~HFvIy5>Y~txD)d|%iJXC`0mz?ISHtQ$Hw~`%_VAF zT#I&qQs!xZ<9>{Q<^W!iSucesYd!oVTjCYws}qjFj=M!MELIY6N>i9al;?r0k_yqT^2RK6sd|(ytT1 zl&``!f5pxm$=!&eiyHV=e~zL|mzhFh0QuTe*Xc1j*p z3ID++N&IBZ7Gn#-Zxt}18Ok$9Un##jY~I#Yf*wNt$%jspdfrTps3DZUt~p(Gs`Itw zdrD~&Zm*|!r2*pXqiG#rB>}W(04uLy1Y@s&i=O5l;0b@)`tBSIbGR52K_75!?$-*o z$k9x-=In~((K17uKJSFQ>S!wJRldDle0l;Y1InJhB;iY3Pi}S$LX_zsVR6&T)BXa3 zswpSlR~Xu+)YuB!5a6#rJn0^)DWd_mCgHMSjoVJ};z4j3!HrQ_9&Si$3dZjUwQ=S$ z{)kM)-Z&e|-gW4CrGD$j$EgvKyl?CP&UO8i9$}8!>+QW(o-)|G{I8~9ZLKlX_av3% z57_hX(!a-;Wk%eE1y23|J1+De_s-K?1*5q#qE-+AbpOd|ACXA1-li*T%b|fxPWT?v zrTYZTKso-jtzrL~)X~^fD%KZtfC8`$nYPX~fzB%{@cy%Mu4;POx{YIEj4!RWR+d~=L8WQ_-Vs#!vNG) zDvhrgG~M5Mm*J~>LO4kT61V{x!hyk{jp2)17=1~~I2O+C(FBK*7cZhctX7vMrQ}#rCje}|EB+?Xujc_E>ZYTxVhs@!!imS_ z2tP4`o2*kNKC~nhBLp;d>&uIUAvcLBb;g8A_NgiJ(QjO zxj~h|25)7|TqvwUf#%5HkmCbFP6B9-1a(EIU@ywKk_DI02#$$@lLc8>HD8`CDCMZI zzz$YIb5u?i(20mEujXEF3Da!Bu6(fXmUnFL(&v*&kY+xgqheokTB++^4)pKJky(-q z2$eBBw&Zm?;H8cPsMY1VWw?Ygf(?y=e6%FzU6TA-Qy&$)JKdt%>w&vJ4Xmc?XGWSn zKpRvB2biw~+{!wcLFcfQ&pv21l z!x4?AEW6eD=E_p{_n~YzutbH`vkCQ1I&F2VAlNF7D3$6sDRGz`^8VAPBgaKJ86i>{R1lV*xD7?rZ;vB6oeT)NLq^oJw zVXVA$0IF`$@6dU)|T)yhziPRum6Blw~)*bf_IhIHUd4Z2rh-_d55UE zc?cv~9b;3h8fl3H3}(BN zKzf6|OmWc$I>44~dJynhuaX_G05@1p5+)%4{a@3Xo;-Ca{9wFvm7@hA6!29>>^WF! zHF=kI7wknB-HNnEa6RZ_0;Hwv$;i)PKXy7D!Glb?qJ7r7{e#fnA&?A3Qy~yu%35ip zkmSDi@3scP0CCv%#bcjLv-EjWCn~pm6Ao0Kz#iaK3FU^ylKan{rY{5olovE2(eiLa zH$AN-i{oOXsB-$W-}>(75FPNlu;s%M9anX`5DN~yf1c~5==VG4UvH3B4GJQVH1Du?S4Ya;ZBB8Z|NSW zo+(SEy!xhYnic!h#cQ0PxU;C+)^T}(sTTsUo~wI@F@ij$x)hc& z4F@!FJeYR?!6`d=RZ!sb^{#*ooAZH8hNdv)BD1|GNGv^>Kp}%%JW_mI4H>(@FQVXM z@E%mb;%|9bPd?hQo4WaV&o||`Nu8&5ZmY7Pan)qh2|l}_>nG&=?MGLyyLa_ENa(=) z_mRH3$F+CgP%( zfKxVQpA8CE9ot5HLuZFKt}3TVJ-&B7kn^B(gNg|x$2WyR&)mSxAzbFf_HQu4{AfPY z3t$BE04Y}HU^_b5|FEyrfnC$gOzpSc7{2WozgLh1X1`(<)i<6n{MH(=*K*C(#%J{$ z2L(m`#Sh!1S%6iJWP3e%7}pz;{T}Ce8o;NvSClk6)eNHaTO+X}x~rIZA|R{#c8{)e z?IYgllpnb4D%bqN%jJ$2`kJ;S9btCJp))OlRniD0Pg&~3VM;i1oHbr(a(%i`| zF96h*Iog!&UL@3Ud7?SHd#z0=rE12z*(oCkeO}3>QR58} zAzLWzT$lnBK-lZRqB{m*2LOuqTC?VrSkrj|27fsBua`ATA{DQJ=&A&eaw^%J9<3O! zp2Lv$r|mygc&xpa3T|KM!(m3Y$PM6PiPqU3JTgugCV6>bKUC`l%zCR=U$h@juDy`2 zLB|u-9|rjsO-U^m{6e@~@@+^_uh@5ot9TYF2#UUUe%IXpjzK5^PTg%wF85zMYr`_; z=g)H9xRl}?4FSU}mLuEc^l5!OHIi;sp)6G;>!a=acY3CRY8%g&wC+#6cGxiq#e3BM zX)|OV$^vDqnikYIJ!`=*gtw0Pme<09FHZK@^^!dF`r}vZ@8gU{4wl6Lyd&loXaX_` zmjK^o8P+>Zs0~vccq{aqtquy9f$mb=U1xfVoBj3{8(eXnUY|FUm5MPqq{Lc8Vb|RK zN8dnmdcd!G5E+6h0KDSm z38JVv(7#~INg6$GZ-YF5LHYHDp~xHO1K=Z>r}Ud^oOYdEVX6Zi*BomNQz1>{Y0Q+$ zn8`>8imZKQ^YCsHAD_Un)2bKQUs`%=hMv#6>STIu%^)*(JI$;nYq@r-TxqTl-{w|d zkTxKK8M4G3vtYUN8mS_lYkY?LiNz<{d!JAK^X^!*N(cRSo9G`}meqTWElWSNuE+R1 zBieYT?fMUoJFME;dM4U1-q=f?CacxZ0%v{4&cRXicBEVuUZL^O8vRI8ICaA7L=1W` zZzx0gq)5#=mghruc5wezb~uvdxM^iy*zj=WjFd`%%t3lp?B&-47UeiDi!tKs%pI4R zLRDIy0vw`bF^mU?(sjT~uE!H`QFlUl@WaIy*CuCV5U6`S%1A!2Ld|pR1SD5B;J}vW zs*(=42x{#hP_&;Af<<0QCz1MSBC!)WZE8rr)xdd66SCg#>8uy}x9!+}-9Kkjh<2^n0}pPrAVOb4R9R<$M{taM408YB zaazcI7jfCu4>Lu&bi59h<4o7|>T1<$q+Vs1T4P6he0=AFY|(QGmiKFQoD3RCi=>Xl z`{x9>LZpY=7Bu8fig1MhqP&jme@rJ{OUfGT=N34K3`Hd z{a_hE8@;qL)yS(fbwe4oyUfE~zR9l*|B>XOr}Z&<*$h{%pH0RfNaNYnf1-8oS}eax zH45Vl0MixEA(?~j9A#z*g!x%dA#tb5)-rUu5JRp)%G6gDv8iI*`b>_sXsB7q9olb< zSFMIGaJQVe@2IW)1Bxf?>|Q9KBXch^*iB8<(K&e=solC&DU-`V=M&3n$R>c+T;&a0X6cz#7*2Z-(4KOI|C09YkgCmu3R}0A- z0n;4UIM=ORHN$?C9WL*G>sO9!JZ#;fO4HQrQ&6b7^U&^m=E2S@O<7dw3m@~{5SjMc zEsigopfxgn20-7dN~?DVs+g(N0|v6WWb#vaV4A(#TM9@~E>V6GAP=!tr@h6gBX#$A=Hyg^_cgkD_sHRnSJIiF?Y^fUx^8IPz-9yxP{(>5{g;QD z8?DAfS|rh&95-}REK)AvHh+{!v~H2{R%m3p1=n0;FugC`vP4m$v*_?brV`I8YNmZ> zhKq`II49!=re9g96d1;vgfxk?fUQ7;<^Z5$LP^s=*cc9DsUZgCKDIxEbY2q@uKc58 zL11OcaEt6&Ryb~In)HRUxSH^KMki8vkGLFOA%PTnTe%cfl$Uq;PYPi;H&2eyw*N%O z9(hf-vy#<@JYO9E0GbTfqc7u@wmWpwg;(~}HGB6mA4$X7-?s^+752BHMUeH1yl~Ed zC5;loB%Xm}Oi7oq=(CKFPcy0hGfT!*wL%Yz;Q55f;hxks#*LY-`Xgoh_vBBUi&rqyDJvP%o&+}&bDR9EEheyOdMPf9X- zVzk{enjG&{FSJZ;vfUXhizU?bjrViTMZ$3n4a7GeZp&{hIw|jx&l-ECsSdp_`@__1 zNJOfUwqGufOZN@He#xRL{}6Y6&XF%?KV(SJp`>h&{7+GyrP*!^SD!IV)xCbJ(0e7z zO3kacxF2zVZ)`9=%_qX+bA^PNPIlRs{5D%wP?xioU3HmuDIwx5d)IZsVUN<@k7MTq z8onvT)AkSF6vK>GRaKie=*rXKKZo#$os48s?aW$3oKp>sjHs{uGfrj$%xf7`X-+R* z2y>e}G)q>}I?W6%u9=PL8+2YH%QWnT{>d%ayaNzb5{46%*-l`CO?beqz<1_1&x)u; zBMPQj=)L5(-g*PdLG%#pg=?lr3GS6#=4|lwS{16#TS8PWC1BoR8vJx)yCS&io(vQ; zzR%M?yPqO0EiLIl{4VKXul?b!X?_|pG&7@uRJQ?RMW@5}Yh_)Y5gRUq-0-l!?P~>{ z(tT#NpR+d;A5iVkG^iFGpNe=kt#;jf|GA^`4jBRWf?J5z{3Kk0GS* z<|j(EuC|H?vmL!_x{|YT;SSaZ*%fVQ2==ou=3S9l+PfYuj(fdX7QA*&t& z`)4x#Q!LRMxgP&SU7j2NJnghbSGUt4!LjY>{F^Kb9yIre@?st$Gbcv@gh1EqohbiY zMkptY8scno6#x@zqxf0*O%(&B3VmD$T{h zeEWbC8v1-g`XT}HHn~bX8rIhO>-Zb-8mTtq<9kM-bx_g=0l26bRS)GgLT%5uD6uYtP(#FP4m7xSDK@wM8z?2nn5$moKo$Xe6 zI_c*}r3`+ISD)aQ;!3-Y5jheam(zB7lqRTtJ$KHfjgHUgO@g_CJ@yOM zaaYdvC$EIi@oCWU;k*l{{&L#oCthzyT`ijH#&WeJI#+5LWT#yv4)aX`JNrGp zgQ7{7ihMrHz}Hf_jyacm|IR{(sXg)7=H78K@}*Mds*x%>9Ygc|w`#}5oZfIe5*Co+ zM>J7$7oK(2JB_2i^d=pTlyDb-uNSQb$X9xtQM@F?)!;tqf=-z0-kE{UU*i+-8Bt(G zuS!^)ZzT6z2JVzet&T~7+jpn0di9Wp({-F*$ZJR4G61IeVti*YaDLGtIaJNEJE_lQ zbVLD&_|eQ!4(NJ<#kqVDH+7K#N{rhX+Jthi`O6_%7t27EzA#z271`ClhY#b6yLs_? z3X>fCV2M5?oLj^6C8pn3OG>6HR?J^ONl9tFKa9#NloC^dcGh`5`aOH`SH9Cv_1orcwOzRbI?IIURjojVp0yf_U)4 zitr+5KaWvt;YrQDjFOTPS)5De7xW`L8ufANep{fcXrQwp`#aVX1=vLgGb%{n`^$kK zAH?IVh^-k=%teULSK^T2dM~tQIdXs(XIwZuZ2d%Wi{Oq1B$)J)Hfl?vldBU|GQx)A zxCcf?&=s^q3(Lz9D=RCBw78MfCm_4z1F~f0(QS=I|9&x5 zd-*1cXpi$<-!Gu6DxmTIkVWZ2-l6Eqc!r2q`+zR-gbG6CHNeV;U>7^#bX%MZNBb-QwpeXQlD? zQSNUIJ+@+17jnb%f<_(9d}BPsNE zH^lzP8A#x*BUe<};AS=H=9MGFC`*^wbbtGq4V&=&!C~&5#HbUYhtPR%O>(Nwue9Y7 zA8eEYyZz9n2)0jfHLsfSdMwkO=yEoHS-X6Gjr9z@<7gCYuYJEJ(?Zz6%2K~}rIB%} z-wpIe`6&WjeV^`$z5tzIZW=w!eARvrTD(k_6uL)f@SLG)i;Dc>5Xx&2w8wv0`%NZ) z$ypE4htaC);|zMI>aIoH6&ijqQF|FIo+v%*R?b>mb+Gu*HeMmYf;fZU{H6-oeFHVV z3I{z#UP>VLzOY_Z`uNi6h*Pl7d=8)3IAu1Nu136l|Be@UR6A$~G7aFG1L{AQ)HL6hz5J7(Or^KfCz6H&eUKDf4_EdFm8*U9zu7-p|{_&&wGQ7kELwN4fS zNi+tb#M!`^i6!olz^gAi`^kP+Ni?CEH5H`pdFs%6G7ruP$eGh>pfxL)E~%SMNHTjU zKD?}sHurexr&R0deukFkpgRe+k(gsw$<%x=R0MWNz>c)lVQOR#iDgx+RO$|zZj;+v zX4uw`0~E!l$WSd@>R2=;lIb6|p3f}i49r(g2JC-6-u4Uecq6fcHkwoXtpI?i_DxPI z;&N2`%h3_V%Wc-hdM7UG(5buWBq?MA)@~BEsvw=mQ_?>Pvil?8kO90-q4gZ_%Nh4V zdCB{!#i#skMVBZTd{QS#bSj&FVq2Mi<(jlW8%+p`tUxNebv(ss_}*x&$@0)!rqk%N zp6}rbLiPW=PePc{CqQHVNINIxGNTZM8QY?Q%mj#jS^E#OwT ziCDdT^>ctU_dOp)hDCz#aW38c7e-n)54`RIRRjm+*7)=_x z5J4lX5szQY$g9a(YuqGd2)`o`2(87b7Hz5AN>g=b{pyF7E^?K49~w#)I73J2C6u_y z(}9l7;p7s-ESM1vM7T*KUP1K#?Hl?j;qekFC(WaN7hiXe>5r+TQrVP zvTNvpMHKp*aLy7 z{DPd@9_#C$5&ic*KXT%86#yw!n3A8b^)#j-2<@lFDRp!*#|e0e!Mp&=1=@{U6&I?7jqiXa8l%UbLsLDSF=v!IU4~!;^>$A`>1w|rM#wG0A z0F(N3S}ZD~0aV+M8XE}*>nP3QFqogi6E!0zn{`rUxJwuGPyo0} z8pDS5onB9_xB=dnzF$ELZ&D8{%Vwr6cF~f1tu<|U8MlGJrcyr#yoDS8(cug78|AG`}konGm&yNv;}dkG8CWG4s{dIcT)< z{(ISj!8eHf#pNjuq|^7xeN>&Fnm@5|+PGe~UzNZ-eQ@tLd?wop0=YsD%op5e=rUn6~xR;{BbkzcX~@k2?&sx2&pMe6glV2tn<|$-4X@fEUy3Yn=je?*xnL z_e5b{`l1chLP=&Yyy2;5-3#x6xDw8KuQVjUWtBab1@AIJqZb$RpTEd|UnuUoCrwrC zRJ$7we#3uPAH=UFS^1)jo5cslW}rOcOY{z#x8mBWpm~Dkhnk&J@OqlO@cd9sNkV=sQtttGtp3eA3e_JSFJPJJo^U!Nzl>*5|Ig)hd*t-bkZ=dDS9^|0~L6 zbvepVQ`5qxVs@zuc<-J5tyC`wM9=bALOvD5+56~QC(fx}(J_6eT<476?8@N@w@vS@ zjLE31to81?#Pw<@fX{cHSX{kDM1pO}Il(}1i&|g5@nzNwRoU}PyA2O|Z!>GJ_i;qL zAFq88_I*$Hl>mccwP>lmV?l2{BkWs!R$JBr3^ed+f);>;K9RB;cL#HTwgsLtGV-P( z&(>5(I{gFV3pG%4TIDDKIoGxObX>MS3c}n1kdl=86wPVIHKbqgrNrf4p-F>ZD^%CQ zQJ+$48{Jg4s@L&TNn%gN773Dj-UUQ}KsOWKe6WIPh-xdh9>*r=Ld|O}K?AB9G){o8 znWLl&5Q9(H@d9jlMD0vb)qHp}$CeY*s$dy#XHIaK`OZqVY!+jv=}GO*%;_?t;pOj4 z;X2O)%oGonZk5=s9y*u$b|bOP({+mW_IKd|CfePxqZMwtHoJ?NO1x$YGVLN9!%WBl zRl>9!>}CB{?AS4giVrBfK&n?rHt0B2W*^$Coy`{g1#M?L*j6_^!O69`IJ0vhyL~Y4 z7LVM}q$yXg(f|j)bVY5pw^`YWRoF<~_EN-nQW7w}vb+0k28M=hv5WZ&xbHWqqay%# z|2t26n$jM&t5Nv?56-zN?%%!q<{0EE4aEk3U5&cJO+rVyGYz7e{ZL@Wd%^g-|SKHn_Z`d1b#MjoFKK&rhNw5BHNiIvu9;e zCpe6p;=JLsy5qzbSdV&Yls)3^wffGCj6-6#9FfdOGqWTt3OUU#*pmVnT0VqRJVxXVA;=3% zbrsv~$`|7t$#e*jxsF1q&rz4qKQ1`Tj5fpMUZX$%I}T@$_!ls$Si(IFaq`rWqH2#X zgIW0P?cykjC%WKV$QjKpWy4xHrQV*0dbxq{bo0nq1b%`5Dir!cXi{Ebo25lP^ipb& zvEGVobVP~0*xLvuS$l_q8L_sXlF~`^z2Rz0vatk*+Pw(Jk8sCS3l41Yo>S-whN}%k zlT>c<)*lHq794G%Sh8n3>cg~s&QT~)Xx#CN01lpwpYr$~MQgeU1ieNzT(n5tOYmW+ zQp+fQd5_P1DIkRfk@GdGSuJTTmq~ZOTp?}8q>?}HKk*8>--O0)OZW%a^bHMhDAe9X zy;Jge+LBbgm42A-o=WNI0m-FNB&Q;tmAkoIr*LEWHV(7}tVqQ4glrXdj-;6zG67lM zP(3FmR5zyH&Ne$};rsT($#X}U8lFr@kZIlG>0tr>UiOpgp*>){hr~WeQaABk?`XNB zXEed4*?W-Dztv-*F!PFLHB>Y|zh6Mh!p5VIn&$(FM3ufe@6;$FU$qLn{@o+j$(zuB z&a$_tvyxT`C%e_0sFac6-tc5@!`o+yKI)Fe)L?E=Q4b-B2`XOuE2-au;+WjVU?96$ zI5M!=d*gP|o&l47Ubc$cT9p=@FwkhRZ`zVsIZ(A38Z_rH5tEzWkbO-04hCSWmfZMZ zO28=v)gE|}Rd`PN(tG4|Nl`Tfbkq8hq%-(?6t}pt@V4mz`M?)y2TI)>y8SSr0iThD zwxgTPPIdx8=iguMMlN5}-&t@1m2C!!*rXGo5DzP^z910x=g)Yeo?#qLI_HO6nKynD z@bWVQjy#(qM-<5s*5h1nN>yl2Gn7epra&tYW*GBf7p6F{+XZy}fsHvsLm7%ION>OMHXUwzR`fYYsCFA6TM9Xk)>21;4JobspmKUjNGZo6p92RiTMS_6 z!aV6Q6j%E2Ft=t;O`&_k%Y)!*H>8mWk#5uc%DC zTK3;jSq31Jul>EGx#qexW}kF5p_~!s`FnUC1TjixsN8 z+H5Iz$`*ZO#Vg%r_gTA(=Jr^s$xP}SO>ep`6%1FBe$e;z$}UfWNw)I#6!{i~a4(oQ z5GX^WpB&NJcEBpn+`Z#*alf#lJV z3dJ;kcXN31r!enY8koqw}a!p7Eo8^$WaU z0BFwQZqAP8@pGkID533-7{{fs;NYYOVz*bJ)TRF?^GL71_t!b&CB@?PI<~9djr_c6 zi>phS)kInv@siHQbYlI;?k!LA0Wigp=3UDxFV}hRvx(0zr=*HwL1yXYj7n3b;L=-X z#su}1o!io5xxHSlhW7dsE5S`c|DMMd^STzCwSN9J$4SxKJl#y{4i3vl29eH8#`ets zYETI1NPk&&WA-1cK5c6{;>$ltp+NIGu! zQf#`ajb1^V;~KRq`Hfc_@Sm5$vQ;5@#XUEvuNM`;np6o=$6V)2Ux0|qi}-t;A}|WM zQ!_Yp^Q`f^v>7xN!?Waeb+9byIJO;=83YK`Y2adZbeV2`6#a~p`FpkDA13-?Rjw3Y zdkoaIh33lnK?}HeFvDlHaMs4ji`{NK@~_uEp5g_E(Xv0X({fPSQx)@gJDb=H_3N?z zms6EGdLW>iQTX?!DnOnERC(#!%`FVc}S z4g7xZ?}ImUhu<0;erl$yoRT#Uw*kim-c)>3m2l)tE8mnGV?iZ%+nPJKs$&wdWfdD+NDX=T^}HKZ7v6b6RCWwr}pTZ zG(|bZuzH%aICd{*;h7mEdKD>|RsO%^twbrVaq`Q@YTU*)z~NpT9q!$MKCf;12;*FI zwhG4W+nFpp6ZCJ!?O;ay9{bms3IHvgOcO(a8O!p~x4Z}JxGE$;+Wa5ujzYr|efWGG z9X-}5f=}2sdxxoM5P8{fPyn{tKOQ-fpS{i3bzTW*_BOzqwx}4y!wT=-pe}uc=?71( z5zNN-Nn=Cc!zO<}teXT8nrBkqD-mo1ePYcKyW;}duWh1;fghgnk?uG(K5N>VhEudT zQS|7Z*k+r3sU1=v7WHfLA4CXD21<0de2Ez)Rn2YFZ0lTF(iU0bxOf@|*(y zF*VI;t=}C(q_R^)4zz+I18!3vE1L&~(zQa7UY2X$-W+vvP9EtSXETuY)70Z8KV9tp zUE3($bQ)tc0io5#@||)~(Z6J^9aw0VzMM`Eah3ut7T|msK?pMV6SS~e^DDR?D@E;! zF73VZFyrHKIjrOS+3LgYP2>sivhyP~z4lg$x}Wk)Q*Hl0HtpdtXV!lf5@~dFJEyI| z{NRDkL5@na)8t-IM}Ag?ILO-p9S`)Rd9UJQU+~6*RElebv?R(o*snhnFX~>VV)@co zzY+urxs47m>=tHEvcF3x=~dj`^q!rc7P076nv0cPb`<>2-8i$+ch%F|JVrl#VCDCy z6p-`($6M;rUhKqA+-y&XhY80|ZF*6qk$*~qdi>u4ZUJs6Cp8MTyK^5zY#OasnLFz$ ze6N9Y4Lv%77N(RGX4J?VMU<3In3A=g+#jXE?1i{Yg(< zT3tIX1pkq2#WOb;KqpXRJvM)-K#Ds0ic-Ie(YF8m@SA3|om+qmiWDT#rXAqnF*q12 z@e7n%wHuBu0BjtXl3evkJPlr|;OmEZ=b8wzE1gs~PepP+w(W0*r9i1}2qbs+VVRW% zF>aq1ZT~=T7A^1WAOhAK!J>{BqcR92dG-^-GM$?_0967>JdtKL#KAzmHqpHC+uhUg zL)}WFP_5rKIR(w7pmYd$^0|r9LjH<`wGHEv4b+?XoRJZkHqaev*_l4vq3Xj}0zSQ% zxFacDgw2CaJ{Ue;O;AhU_x$atizC56%K+o|-6LdwRElq7?rD0McE~8J>+k3;ES9|K zQR3WJ4sK$J6D&~!x??d#&k);y>FD&9V ze^}46G+EXw{1(B0eqHwGj&+PjIt22b^6pLuTac^nt3qG+Q-88x)fvjFio3utaAIdK zDvu{kV0#aDdI45gUJ!ipC`1N67{$~`pghr)S93ym>TbYG7QeN?%|TEGp+Y`X_B_x=aQb z{-gA^iR}ZLspENyV$~H4><*}+zNR;_Q|!t5>%u?)Eb)@{F%GkfczV#(-_dq~;$Mp9n`+$GC zz|M#1r)b8JGrj*%2rin`6ts|&`hfM{fAh4X6A-%t?GFtbRk#8_rvOp8eAM`R#3`!S z3{u}pBXpaQ6i9FPxON*OCGl-Xu)Sb zEmeB0gdwL&#M--7dypb;5y831O<9x=byD8A4*3v6N&AtELcoj!JB764Gx;m8Jn01z z>1$4p1s{0CnRN>EZ*bw5v=W}CpXRi}ni4P1D}(B)DLwJ%-?x?*yk~6do|O0ZmMqi< zCjy)Nch(MRH=$$gRUWti3eD>c#S&@zfGw2h4@wnlKq>+P*fIRb%KO#HGFU55z{X^f z@qR@63^!nx{#ye5qV@4KbW$W?Q(IQ3N`3*bh2l|gk$p`$6{V{NPeVh5qW&EPY zzoxdHM`G8C?B>{JSxq*}8C?gfd(V#k2=Y^fn|UD2fd6WawCR8Ub0m!aN#lPi5%@n% n_@7SzI`BUs{Qp7-n`El#P)T1oS