From 9a8157e61034a70798fb30154ea81339a4f2504e Mon Sep 17 00:00:00 2001
From: ImranHabib <47118050+joinimran@users.noreply.github.com>
Date: Wed, 25 Mar 2020 21:04:40 +0500
Subject: [PATCH 01/14] Addition of supported data type
Add information for a supported data type which is a string.
Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/6224
---
windows/client-management/mdm/reboot-csp.md | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/windows/client-management/mdm/reboot-csp.md b/windows/client-management/mdm/reboot-csp.md
index 70668fa9de..e7cb92b9c4 100644
--- a/windows/client-management/mdm/reboot-csp.md
+++ b/windows/client-management/mdm/reboot-csp.md
@@ -45,12 +45,16 @@ Setting a null (empty) date will delete the existing schedule. In accordance wit
The supported operations are Get, Add, Replace, and Delete.
+The supported data type is "String".
+
**Schedule/DailyRecurrent**
This node will execute a reboot each day at a scheduled time starting at the configured starting time and date. Setting a null (empty) date will delete the existing schedule. The date and time value is ISO8601, and both the date and time are required. The CSP will return the date time in the following format: 2018-06-29T10:00:00+01:00.
Example to configure: 2018-10-25T18:00:00
The supported operations are Get, Add, Replace, and Delete.
+The supported data type is "String".
+
## Related topics
From bcdda3667786890a4257f30299ecc463c3ec97b1 Mon Sep 17 00:00:00 2001
From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com>
Date: Sun, 5 Apr 2020 08:18:28 +0500
Subject: [PATCH 02/14] Update bitlocker-how-to-enable-network-unlock.md
---
.../bitlocker/bitlocker-how-to-enable-network-unlock.md | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md
index 56c13ecbbe..b943c6dd9c 100644
--- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md
+++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md
@@ -80,7 +80,9 @@ The server side configuration to enable Network Unlock also requires provisionin
1. The Windows boot manager detects that a Network Unlock protector exists in the BitLocker configuration.
2. The client computer uses its DHCP driver in the UEFI to obtain a valid IPv4 IP address.
-3. The client computer broadcasts a vendor-specific DHCP request that contains the Network Key (a 256-bit intermediate key) and an AES-256 session key for the reply. Both of these keys are encrypted using the 2048-bit RSA Public Key of the Network Unlock certificate from the WDS server.
+3. The client computer broadcasts a vendor-specific DHCP request that contains:
+ 1. Network Key (a 256-bit intermediate key) encrypted using the 2048-bit RSA Public Key of the Network Unlock certificate from the WDS server.
+ 2. AES-256 session key for the reply.
4. The Network Unlock provider on the WDS server recognizes the vendor-specific request.
5. The provider decrypts it with the WDS server’s BitLocker Network Unlock certificate RSA private key.
6. The WDS provider then returns the network key encrypted with the session key using its own vendor-specific DHCP reply to the client computer. This forms an intermediate key.
From c2699835d5f6818b480233372fdf324358c8b193 Mon Sep 17 00:00:00 2001
From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com>
Date: Sun, 5 Apr 2020 15:12:36 +0500
Subject: [PATCH 03/14] Update
windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md
Co-Authored-By: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com>
---
.../bitlocker/bitlocker-how-to-enable-network-unlock.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md
index b943c6dd9c..9749ee1793 100644
--- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md
+++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md
@@ -81,7 +81,7 @@ The server side configuration to enable Network Unlock also requires provisionin
1. The Windows boot manager detects that a Network Unlock protector exists in the BitLocker configuration.
2. The client computer uses its DHCP driver in the UEFI to obtain a valid IPv4 IP address.
3. The client computer broadcasts a vendor-specific DHCP request that contains:
- 1. Network Key (a 256-bit intermediate key) encrypted using the 2048-bit RSA Public Key of the Network Unlock certificate from the WDS server.
+ 1. A Network Key (a 256-bit intermediate key) encrypted using the 2048-bit RSA Public Key of the Network Unlock certificate from the WDS server.
2. AES-256 session key for the reply.
4. The Network Unlock provider on the WDS server recognizes the vendor-specific request.
5. The provider decrypts it with the WDS server’s BitLocker Network Unlock certificate RSA private key.
From a6b2519c6d5179a5df465296104640fec75d77af Mon Sep 17 00:00:00 2001
From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com>
Date: Sun, 5 Apr 2020 15:12:43 +0500
Subject: [PATCH 04/14] Update
windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md
Co-Authored-By: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com>
---
.../bitlocker/bitlocker-how-to-enable-network-unlock.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md
index 9749ee1793..a7a7e7fce7 100644
--- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md
+++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md
@@ -82,7 +82,7 @@ The server side configuration to enable Network Unlock also requires provisionin
2. The client computer uses its DHCP driver in the UEFI to obtain a valid IPv4 IP address.
3. The client computer broadcasts a vendor-specific DHCP request that contains:
1. A Network Key (a 256-bit intermediate key) encrypted using the 2048-bit RSA Public Key of the Network Unlock certificate from the WDS server.
- 2. AES-256 session key for the reply.
+ 2. An AES-256 session key for the reply.
4. The Network Unlock provider on the WDS server recognizes the vendor-specific request.
5. The provider decrypts it with the WDS server’s BitLocker Network Unlock certificate RSA private key.
6. The WDS provider then returns the network key encrypted with the session key using its own vendor-specific DHCP reply to the client computer. This forms an intermediate key.
From 087a48894889b65d950da403d8f268c22f7b51e1 Mon Sep 17 00:00:00 2001
From: Peter Smith
Date: Tue, 7 Apr 2020 20:37:01 -0700
Subject: [PATCH 05/14] Update Profile XSD to include ExclusionRoute
---
windows/client-management/mdm/vpnv2-profile-xsd.md | 1 +
1 file changed, 1 insertion(+)
diff --git a/windows/client-management/mdm/vpnv2-profile-xsd.md b/windows/client-management/mdm/vpnv2-profile-xsd.md
index 1c13aa99ad..eecc7c7075 100644
--- a/windows/client-management/mdm/vpnv2-profile-xsd.md
+++ b/windows/client-management/mdm/vpnv2-profile-xsd.md
@@ -175,6 +175,7 @@ Here's the XSD for the ProfileXML node in VPNv2 CSP for Windows 10 and some pro
+
From 70d6ce55feed59c6b416559c7228479c2eb0516f Mon Sep 17 00:00:00 2001
From: Tudor Dobrila
Date: Thu, 9 Apr 2020 09:25:37 -0700
Subject: [PATCH 06/14] Add warning about proxy support for Mac and Linux
---
.../microsoft-defender-atp/microsoft-defender-atp-linux.md | 5 +++++
.../microsoft-defender-atp/microsoft-defender-atp-mac.md | 5 +++++
2 files changed, 10 insertions(+)
diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md
index 14e534cd2c..bc6258a7dd 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md
@@ -119,6 +119,11 @@ Microsoft Defender ATP can discover a proxy server by using the following discov
If a proxy or firewall is blocking anonymous traffic, make sure that anonymous traffic is permitted in the previously listed URLs. For transparent proxies, no additional configuration is needed for Microsoft Defender ATP. For static proxy, follow the steps in [Manual Static Proxy Configuration](linux-static-proxy-configuration.md).
+> [!WARNING]
+> PAC, WPAD, and authenticated proxies are not supported. Ensure that only a static proxy or transparent proxy is being used.
+>
+> Intercepting proxies are also not supported for security reasons. Configure your proxy server to directly pass through data from Microsoft Defender ATP for Linux to the relevant URLs without interception. Adding your proxy certificate to the global store will not allow for interception.
+
For troubleshooting steps, see the [Troubleshoot cloud connectivity issues for Microsoft Defender ATP for Linux](linux-support-connectivity.md) page.
## How to update Microsoft Defender ATP for Linux
diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md
index d5135bbd1c..1d466e8f1a 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md
@@ -84,6 +84,11 @@ Microsoft Defender ATP can discover a proxy server by using the following discov
If a proxy or firewall is blocking anonymous traffic, make sure that anonymous traffic is permitted in the previously listed URLs.
+> [!WARNING]
+> Authenticated proxies are not supported. Ensure that only WPAD or a static proxy is being used.
+>
+> SSL inspection and intercepting proxies are also not supported for security reasons. Configure your proxy server to directly pass through data from Microsoft Defender ATP for Mac to the relevant URLs without interception. Adding your proxy certificate to the global store will not allow for interception.
+
To test that a connection is not blocked, open [https://x.cp.wd.microsoft.com/api/report](https://x.cp.wd.microsoft.com/api/report) and [https://cdn.x.cp.wd.microsoft.com/ping](https://cdn.x.cp.wd.microsoft.com/ping) in a browser.
If you prefer the command line, you can also check the connection by running the following command in Terminal:
From 00532f83f148d9cd4630d2bcc9d250be6942d57b Mon Sep 17 00:00:00 2001
From: Tudor Dobrila
Date: Thu, 9 Apr 2020 09:46:32 -0700
Subject: [PATCH 07/14] Add warning about proxy support for Mac and Linux
---
.../microsoft-defender-atp/linux-support-connectivity.md | 2 +-
.../microsoft-defender-atp/microsoft-defender-atp-linux.md | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md
index d34c004a38..e351c06c07 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md
@@ -54,7 +54,7 @@ OK https://cdn.x.cp.wd.microsoft.com/ping
> [!WARNING]
> PAC, WPAD, and authenticated proxies are not supported. Ensure that only a static proxy or transparent proxy is being used.
>
-> Intercepting proxies are also not supported for security reasons. Configure your proxy server to directly pass through data from Microsoft Defender ATP for Linux to the relevant URLs without interception. Adding your proxy certificate to the global store will not allow for interception.
+> SSL inspection and intercepting proxies are also not supported for security reasons. Configure your proxy server to directly pass through data from Microsoft Defender ATP for Linux to the relevant URLs without interception. Adding your proxy certificate to the global store will not allow for interception.
If a static proxy is required, add a proxy parameter to the above command, where `proxy_address:port` correspond to the proxy address and port:
diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md
index bc6258a7dd..b329eb98c9 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md
@@ -122,7 +122,7 @@ If a proxy or firewall is blocking anonymous traffic, make sure that anonymous t
> [!WARNING]
> PAC, WPAD, and authenticated proxies are not supported. Ensure that only a static proxy or transparent proxy is being used.
>
-> Intercepting proxies are also not supported for security reasons. Configure your proxy server to directly pass through data from Microsoft Defender ATP for Linux to the relevant URLs without interception. Adding your proxy certificate to the global store will not allow for interception.
+> SSL inspection and intercepting proxies are also not supported for security reasons. Configure your proxy server to directly pass through data from Microsoft Defender ATP for Linux to the relevant URLs without interception. Adding your proxy certificate to the global store will not allow for interception.
For troubleshooting steps, see the [Troubleshoot cloud connectivity issues for Microsoft Defender ATP for Linux](linux-support-connectivity.md) page.
From a9b50390589a5f24fdefa96d915972f97b3858ec Mon Sep 17 00:00:00 2001
From: Charles Inglis <32555877+cinglis-msft@users.noreply.github.com>
Date: Thu, 9 Apr 2020 10:05:06 -0700
Subject: [PATCH 08/14] remove editorial mistake
remove reference to jaime
---
.../deployment/update/update-compliance-schema-wudostatus.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/deployment/update/update-compliance-schema-wudostatus.md b/windows/deployment/update/update-compliance-schema-wudostatus.md
index 7a9adf27cd..f3d6dc0e2a 100644
--- a/windows/deployment/update/update-compliance-schema-wudostatus.md
+++ b/windows/deployment/update/update-compliance-schema-wudostatus.md
@@ -36,7 +36,7 @@ These fields are briefly described in this article, to learn more about Delivery
|**BytesFromGroupPeers** |[long](https://docs.microsoft.com/azure/kusto/query/scalar-data-types/long) |`523132` |Total number of bytes downloaded from Group Peers. |
|**BytesFromIntPeers** |[long](https://docs.microsoft.com/azure/kusto/query/scalar-data-types/long) |`328350` |Total number of bytes downloaded from Internet Peers. |
|**BytesFromPeers** |[long](https://docs.microsoft.com/azure/kusto/query/scalar-data-types/long) |`43145` |Total number of bytes downloaded from peers. |
-|**ContentDownloadMode** |[int](https://docs.microsoft.com/azure/kusto/query/scalar-data-types/int) |`0` |Device's Delivery Optimization [Download Mode](https://docs.microsoft.com/windows/deployment/update/waas-delivery-optimization-reference#download-mode)**@JAIME** configuration for this content. |
+|**ContentDownloadMode** |[int](https://docs.microsoft.com/azure/kusto/query/scalar-data-types/int) |`0` |Device's Delivery Optimization [Download Mode](https://docs.microsoft.com/windows/deployment/update/waas-delivery-optimization-reference#download-mode) configuration for this content. |
|**ContentType** |[int](https://docs.microsoft.com/azure/kusto/query/scalar-data-types/int) |`Quality Updates` |The type of content being downloaded. |
|**DOStatusDescription** |[string](https://docs.microsoft.com/azure/kusto/query/scalar-data-types/string) | |A short description of DO's status, if any. |
|**DownloadMode** |[string](https://docs.microsoft.com/azure/kusto/query/scalar-data-types/string) |`HTTP+LAN (1)` |Device's Delivery Optimization [Download Mode](https://docs.microsoft.com/windows/deployment/update/waas-delivery-optimization-reference#download-mode) configuration for this device. |
From 055bfa6736ad39f6ae7c60f04445fbc7da2b9290 Mon Sep 17 00:00:00 2001
From: Tudor Dobrila
Date: Thu, 9 Apr 2020 10:18:25 -0700
Subject: [PATCH 09/14] Updates
---
.../microsoft-defender-atp/microsoft-defender-atp-linux.md | 2 +-
.../microsoft-defender-atp/microsoft-defender-atp-mac.md | 5 +++--
2 files changed, 4 insertions(+), 3 deletions(-)
diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md
index b329eb98c9..1e1e74bd48 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md
@@ -122,7 +122,7 @@ If a proxy or firewall is blocking anonymous traffic, make sure that anonymous t
> [!WARNING]
> PAC, WPAD, and authenticated proxies are not supported. Ensure that only a static proxy or transparent proxy is being used.
>
-> SSL inspection and intercepting proxies are also not supported for security reasons. Configure your proxy server to directly pass through data from Microsoft Defender ATP for Linux to the relevant URLs without interception. Adding your proxy certificate to the global store will not allow for interception.
+> SSL inspection and intercepting proxies are also not supported for security reasons. Configure an exception for SSL inspection and your proxy server to directly pass through data from Microsoft Defender ATP for Linux to the relevant URLs without interception. Adding your proxy certificate to the global store will not allow for interception.
For troubleshooting steps, see the [Troubleshoot cloud connectivity issues for Microsoft Defender ATP for Linux](linux-support-connectivity.md) page.
diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md
index 1d466e8f1a..faef121306 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md
@@ -79,15 +79,16 @@ The following table lists the services and their associated URLs that your netwo
| United States | unitedstates.x.cp.wd.microsoft.com
us-v20.events.data.microsoft.com
ussus1eastprod.blob.core.windows.net
ussus1westprod.blob.core.windows.net |
Microsoft Defender ATP can discover a proxy server by using the following discovery methods:
+- Proxy auto-config (PAC)
- Web Proxy Auto-discovery Protocol (WPAD)
- Manual static proxy configuration
If a proxy or firewall is blocking anonymous traffic, make sure that anonymous traffic is permitted in the previously listed URLs.
> [!WARNING]
-> Authenticated proxies are not supported. Ensure that only WPAD or a static proxy is being used.
+> Authenticated proxies are not supported. Ensure that only PAC, WPAD, or a static proxy is being used.
>
-> SSL inspection and intercepting proxies are also not supported for security reasons. Configure your proxy server to directly pass through data from Microsoft Defender ATP for Mac to the relevant URLs without interception. Adding your proxy certificate to the global store will not allow for interception.
+> SSL inspection and intercepting proxies are also not supported for security reasons. Configure an exception for SSL inspection and your proxy server to directly pass through data from Microsoft Defender ATP for Mac to the relevant URLs without interception. Adding your proxy certificate to the global store will not allow for interception.
To test that a connection is not blocked, open [https://x.cp.wd.microsoft.com/api/report](https://x.cp.wd.microsoft.com/api/report) and [https://cdn.x.cp.wd.microsoft.com/ping](https://cdn.x.cp.wd.microsoft.com/ping) in a browser.
From 227b396e531ab3d4f51a679185e5f331d9f56b0f Mon Sep 17 00:00:00 2001
From: Tudor Dobrila
Date: Thu, 9 Apr 2020 10:46:28 -0700
Subject: [PATCH 10/14] One more update
---
.../microsoft-defender-atp/linux-support-connectivity.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md
index e351c06c07..ad40962466 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md
@@ -54,7 +54,7 @@ OK https://cdn.x.cp.wd.microsoft.com/ping
> [!WARNING]
> PAC, WPAD, and authenticated proxies are not supported. Ensure that only a static proxy or transparent proxy is being used.
>
-> SSL inspection and intercepting proxies are also not supported for security reasons. Configure your proxy server to directly pass through data from Microsoft Defender ATP for Linux to the relevant URLs without interception. Adding your proxy certificate to the global store will not allow for interception.
+> SSL inspection and intercepting proxies are also not supported for security reasons. Configure an exception for SSL inspection and your proxy server to directly pass through data from Microsoft Defender ATP for Linux to the relevant URLs without interception. Adding your proxy certificate to the global store will not allow for interception.
If a static proxy is required, add a proxy parameter to the above command, where `proxy_address:port` correspond to the proxy address and port:
From c9224a5d5eea3fe40f5e41cda71e3bd87b63f6a7 Mon Sep 17 00:00:00 2001
From: Tudor Dobrila
Date: Thu, 9 Apr 2020 10:59:34 -0700
Subject: [PATCH 11/14] Last update
---
.../microsoft-defender-atp/linux-support-connectivity.md | 2 +-
.../microsoft-defender-atp/microsoft-defender-atp-linux.md | 2 +-
.../microsoft-defender-atp/microsoft-defender-atp-mac.md | 2 +-
3 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md
index ad40962466..308e1695b1 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md
@@ -54,7 +54,7 @@ OK https://cdn.x.cp.wd.microsoft.com/ping
> [!WARNING]
> PAC, WPAD, and authenticated proxies are not supported. Ensure that only a static proxy or transparent proxy is being used.
>
-> SSL inspection and intercepting proxies are also not supported for security reasons. Configure an exception for SSL inspection and your proxy server to directly pass through data from Microsoft Defender ATP for Linux to the relevant URLs without interception. Adding your proxy certificate to the global store will not allow for interception.
+> SSL inspection and intercepting proxies are also not supported for security reasons. Configure an exception for SSL inspection and your proxy server to directly pass through data from Microsoft Defender ATP for Linux to the relevant URLs without interception. Adding your interception certificate to the global store will not allow for interception.
If a static proxy is required, add a proxy parameter to the above command, where `proxy_address:port` correspond to the proxy address and port:
diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md
index 1e1e74bd48..03f09902ea 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md
@@ -122,7 +122,7 @@ If a proxy or firewall is blocking anonymous traffic, make sure that anonymous t
> [!WARNING]
> PAC, WPAD, and authenticated proxies are not supported. Ensure that only a static proxy or transparent proxy is being used.
>
-> SSL inspection and intercepting proxies are also not supported for security reasons. Configure an exception for SSL inspection and your proxy server to directly pass through data from Microsoft Defender ATP for Linux to the relevant URLs without interception. Adding your proxy certificate to the global store will not allow for interception.
+> SSL inspection and intercepting proxies are also not supported for security reasons. Configure an exception for SSL inspection and your proxy server to directly pass through data from Microsoft Defender ATP for Linux to the relevant URLs without interception. Adding your interception certificate to the global store will not allow for interception.
For troubleshooting steps, see the [Troubleshoot cloud connectivity issues for Microsoft Defender ATP for Linux](linux-support-connectivity.md) page.
diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md
index faef121306..a22b112426 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md
@@ -88,7 +88,7 @@ If a proxy or firewall is blocking anonymous traffic, make sure that anonymous t
> [!WARNING]
> Authenticated proxies are not supported. Ensure that only PAC, WPAD, or a static proxy is being used.
>
-> SSL inspection and intercepting proxies are also not supported for security reasons. Configure an exception for SSL inspection and your proxy server to directly pass through data from Microsoft Defender ATP for Mac to the relevant URLs without interception. Adding your proxy certificate to the global store will not allow for interception.
+> SSL inspection and intercepting proxies are also not supported for security reasons. Configure an exception for SSL inspection and your proxy server to directly pass through data from Microsoft Defender ATP for Mac to the relevant URLs without interception. Adding your interception certificate to the global store will not allow for interception.
To test that a connection is not blocked, open [https://x.cp.wd.microsoft.com/api/report](https://x.cp.wd.microsoft.com/api/report) and [https://cdn.x.cp.wd.microsoft.com/ping](https://cdn.x.cp.wd.microsoft.com/ping) in a browser.
From 11ea310662a16b6e497c95072ec857653bfcd572 Mon Sep 17 00:00:00 2001
From: Jreeds001
Date: Thu, 9 Apr 2020 14:07:40 -0700
Subject: [PATCH 12/14] Update appv-supported-configurations.md
---
.../app-v/appv-supported-configurations.md | 3 +++
1 file changed, 3 insertions(+)
diff --git a/windows/application-management/app-v/appv-supported-configurations.md b/windows/application-management/app-v/appv-supported-configurations.md
index a39eca9e4d..ebab019584 100644
--- a/windows/application-management/app-v/appv-supported-configurations.md
+++ b/windows/application-management/app-v/appv-supported-configurations.md
@@ -51,12 +51,15 @@ The following table lists the SQL Server versions that the App-V Management data
|SQL Server version|Service pack|System architecture|
|---|---|---|
+|Microsoft SQL Server 2019||32-bit or 64-bit|
|Microsoft SQL Server 2017||32-bit or 64-bit|
|Microsoft SQL Server 2016|SP2|32-bit or 64-bit|
|Microsoft SQL Server 2014||32-bit or 64-bit|
|Microsoft SQL Server 2012|SP2|32-bit or 64-bit|
|Microsoft SQL Server 2008 R2|SP3|32-bit or 64-bit|
+For more information on user configuration files with SQL server 2016 or later, see the [support article](https://support.microsoft.com/help/4548751/app-v-server-publishing-might-fail-when-you-apply-user-configuration-f).
+
### Publishing server operating system requirements
The App-V Publishing server can be installed on a server that runs Windows Server 2008 R2 with SP1 or later.
From c445b553fd399acab3b890a423805a8b73455c80 Mon Sep 17 00:00:00 2001
From: Beth Levin
Date: Thu, 9 Apr 2020 14:34:22 -0700
Subject: [PATCH 13/14] software evidence
---
.../images/tvm-software-evidence.png | Bin 0 -> 118687 bytes
.../threat-and-vuln-mgt-scenarios.md | 3 ++-
.../tvm-software-inventory.md | 11 +++++++++++
3 files changed, 13 insertions(+), 1 deletion(-)
create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/tvm-software-evidence.png
diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/tvm-software-evidence.png b/windows/security/threat-protection/microsoft-defender-atp/images/tvm-software-evidence.png
new file mode 100644
index 0000000000000000000000000000000000000000..90f381e3f27b245be3447304f0060cd9c5a34bda
GIT binary patch
literal 118687
zcmdS>XH-*L_XduF4J%j#qa@16J2tU&w~
zy)g2W_wuxNai=PR_bLOTtDb;J(Z<8d-NDttgHaW9e=~W#)Qv8vV-O%pE+eoGgK;
z?o`O{H8Ftr;;Gos(%sp?*^cTv(_#c5qxm73t(1;lF4KE>NhAvnSPFZvqOC
zT{w-V=iupNLshsw#6d-Mp9-WXulFWxZOT93ANo#*`*>J;mPUg>B%#uDDI9qSMhT|tpKN3`3zYx
z+4ea&sysjc@qopANoD2W4vqqWKy=*Q-4o%rfJop1!(8sa(W$6vV8J27a!GgB=(&CY
z4H&Yl`0O+a;HC^J7OdWap%<>$Hdp}u4;tr$ssDzcbIz&CGnKYKrdB^qq4d8LDZy03
z;=SV1M)%|5tAVJ4Q6Z22rl4wIKgqJm+RD}$Ak&Bexm-`bXn*E!P?pIhtcz{MR`!|H
zbwgDfKzQH%e_@?lngRql9xZO5ASy+UGb#V(wk&W4(eHTzE#m+Gkl*;+s(ONI4NX2S
z6F)5_@P9c?TxR%iRYY2g5ez;pSh0M%L+m9yjk(Bg*WRwVR$@s1|FW)pj;Odgl9+$u
z>ZAH^?tc>iq4$ds?4!%9HM^|03%wq5+5rW8V>)euQHJ$q(=p0{-!7$74?Ue*|7*&0;$~yR+?Hlde$heU3n31|ab!b_%EbbuKnDtPTP3DwW}jvy
z!!dT(==U=cfxYOs(1|rD--}6hkLF->sr;KhGbgCP*7tGeKYRQ&FLN=X|`{Vh7?A>;_kN4i7*3HCk8KDiwk+CMu0hj~4Von|Jk&_r2kru8++an77k3Kvra@+z1!dHQ5Ts?w-kuy(SXPaQf|23XKo%?vbiRxOnvs2*d~Z
zRS*!kSgDUszpzMy-tD$&39}5`Bok3An|2--&n3sJpL1lcTKuE_I*^#^S!3P1WTDPg
zXN9NL+xWgu$&JQ|>o6`_Jwgu^ub4?0#O(_1Eu66P(2<5AG>evbSCYFM5O}=Ro5y&vCO5A4
zSRNQ{AAyjuCy6n&PQ2WTpg4$NyWYSH5mqubfG~gymHTI8sLhvU&y<
zkzKkx*MQbYEgMQv#+^T{x8!~0r@FB^<*7WKztx((zIq-}f;owUGR4x^w>Ehuo`vGB
z=$@7!V@3FYRB686fkPzy)Pp+ynnjXT!|LkBN~KAhXM1Z53^_M^U0%It=KM)n!GK)8
zZ>k)j3S0|A6y`;Y=FIH71glO2?*$I{`&7j0ovsH{x}EOo>qc3LXJn}%h7MaQHcN}1
zg?}X$zv(Tzy0E5EmFC-5SoNGRmCzp~{HImcq
z-_9U-9s7;NW_)_BRjb6DE56Eumxc3gEAt<RV7RS^Y{|@@Hv($ZRczSTnY82Ig3f2i%%OcU8h7O1aYClrw4eO_siIT#X?cfh<
z@)5t1lsb(Kj{O=p+|TAhws?nwlaIYtl?kn`=S0f~v*_<9C9POLau%IW)
zjU+L2`u|DK{@Ug^MYai
z)y~2Pw6sCjoG`I9V_ao|=D`Q%K1e*-7X&M5N_n+I~7~4Ite7g?GPE5+3-d$WryT3<1dNjc1SG?;Rj;?uiSK0^da
z5Z>(HRc~>5H$CBr;>(oOmuuL*Ov$xIxgg~JG;iDXU9JU`391hjvGPc$v4g3T-E7WZvEY(-^6CoQ9cxYK
z6|cZ|@6AhW&$qmh(sQyu;4EsY&^oB*aG0Z=vFzhFb>hlMCk!`KHM#2iIrAwa(l`f}
za(DJOvgs+VpyhOEqHV^n_m&3O6s${o*V>vsDKd=ZWARplMU11C7jet*HPEf2@_ypD
z^N#sh7p@w6m}bMcJ1`U0lo{
zCYb1g+RWRs%a9Dt;V(*Kh
z&0P}Xvr6+|;IG`qmy!0G?K(E>-M;FwJ#|ENaNQF{Q)DX
zz@m5|(6FR8xD0#36B}e^IytU+ss)&pT5;Oh7}z@3*HWgI#>8Q;g(oiHkf$cE6Bh48
z6sYOccH2m;1vpxu)Jley9CcgfUiY97mgE4LSjemND&Rw`w9iPZ;NYHJhz4wJDpH0*4((t0B=CV{S1z2+;YO(4@y2Y?WuWa
zfBE`{IEmgjb4v!YYqqFo?)BYx6$i&Vi^siJJybFxvv1lohF@@MWqL0$Q+GA;vMA6q
z?WW0Qx94JWCvUc$Ph>08Gp^2Zh+cZwV>bh60#qUW*pZZvX|25_vW%rw61TfXTDd*=
zPp9oo-jRT*(Y1yr^2P_#jH$#NaJo|W1heDSa<;Gr*iuM`L7;#2!wUXjZ>7QtQ
zvJz{PjTbk+HEfeK6YTq7j}s?*6ylbdV*BT_i)nV_-#
z?kITE+Kh6mh`ebSn@hLX1pg{#20x)~I9+?Drb5IA9RUGyx6zn$j)$tr@HY
zCzci`K?^a9ZQqCP$p&~0$h72e9|yE>BQ6C~>u&rwhHmV)R$Ht>4BhuTpPkGz-$^cj
zTvh{pGk<%UH%aK0o%5}#Y>Or+S`i8~#LHp4igc`=2>TlQ-|XRWCzsZ6IaAcMVt3(Y(`dqMQS*Y&IR8tjK8FF<0<)r|C8t{fvy#
zS;N_W$433?&$yX-F#YVfaADT|KgBi^mR}u|H;wxaVBqY@EVIFy&as(K`t5TAXJfA3
z9XT?sZL1VSkS@G@o$yK28Zx1W8Y!hl28PB)oUgO>7VsAHFt#j|`F@av+-XrRo=cHN
zxAngjCkX5|UFT-9&a4Wyj|*ofsG*K|O{QjSBI6|30*h8-a+~@4vFg6QW!$#`%@sW2
zgwfS>8HqS))YkNRp(V5yT~sSFcRB;U=r=XD9a1=ecJ}Ye$(sY
zajR|OR*6sJwDmZvF@bQe`S#j*^S)8HDX}Ptpk@)5FuuK8ro&ID7IXZ#j@^+H;)e59
zH=K#YyVr)K#oerXT;|+$mk6O<)%q}atob$k>Z{WRerCty4m7Z@p%~9tQD>mezy-(T
zvHKGjQnBWLSfEiGvsF{LWkQ@+A=^t|dg@SR{Ya5wabrL$NN?>=(ZOrVj5chWq~I`B
z{ndInQrb@CBwO+jFIN(>CeS#>w5PkIQ12_-l1!LQ_$5vwkTTBgR
z5Wghlefz{yf0%1p)uiJQ&gKsmA(v}rJ^O}uqTim+J3c=yw??odRAnKrr%`vUHEDE*
z{_{Fhaz{F@<{(QJ_d-(0`T>i8GH6Lf7ybrhn5^MFe!A)XfZLX2fP|R
zyzt{^an(&uf8Wh3iEMEK^iH=yYFKoLgKDa3Qtb##1K~AHgM0fbe*uJh*fsWgupD&*
zP`1E2c$MLYpl$UlPJwMx1^J*Z7L9a*?daohJ!GHBh+k$C37d2NV;AG8}RVnM&LCL$Ip4-P4`z^r6oJGedVdQrSdS{w%RN^m$Cc>Nik&M{yhC@61@NGrr{L
zhh1T_`lNN%r$lTYkwV$9DRa)g>pmS1>Q1P1QS2gDRg&yNJ2VZh1oDT^&Rnj9L}rKO
z3+aB*w8+wD&*+tnHOqT3?N-(wFcNF|&P$Vm9gkP=lqNk-7d$SM>;&CD^c
zT}ss0yB1o+z5q*CAX(B&L#mqXWpZEWm;PtvV(1k$9MdP?=g|gzt7)bB5B7_`#{E?i
zjv|rtrCxzWp*0_&$c=on>?k^l`3bE@J@B3B9W1?RUXdLc!!LDMuhs7|;PY6t+Bi3jN+{3}|U73}cHd#GC;hvarHFH)Oj)AC9k?FAur(4}rLWI5tzTsVeb
z|8ohyR+pGaubL(*^!6(?6+rY`JI)kX#2MF1E)lNBTF#Wp;Zaa+O5=WB0D_iyZG>H;LcPsQmfXo
z#Xm&IYl|&PC6(AD7At6&dKub3@URy*pS@oc>50p@d5t$MH}YlP%5QCl6dP6AV8^~W
zvBKs27}CYlBlU55^YUn5&&rz|
zu|IK~4uGagf^sgWD^w*WK56`!
zwZ<-maB}vFr}6lifxX)6Ta9l$RFKEGgnz1l`_tY^
zkx5I*XQ9_;HF1Ym&16?~dB;a{U&yH%Kpa^G#GHdqh=jIa3Z;W_pV|;7sU(}}5Q1k@
zGg)ocys5Jj_$$p~<(3hYc)YxJX6NA)qTspDT_q`ITK1!55OI4&RY-m~V>Ax{rX-k$
zk`1NdM0ItDlT&=li4ZiXPCF_p3gW6RBfURBCUwO@?Crm_&7p&%P$vA*?06pFh~N&K
z0-f#5{35q^pYN;4r6y%dxqQv=%T{h+x44C80?tZzBC>QC>c0DQv!)_`*i~?3e!gr;OUB#U856Z}}1oPW+|Ead9;3D#a3#{V`z#wNF#FX4(381E6X$rS4@3m#;Uw
z-CHBp^J)Y}H{Ah2f7pN!11*+`#LVJ9uwX)YrlfUT?zBKk#)zh&O-8{!pLmWc1la#W
z?mcl%%Ab-b#l&TLt?)Kf%k(&iXORZZUrf7jWAD4e^>f0F%9H0M$f(R$M(
z{DOhr^YHj;_--{EPs2NtBuM`^zthKe&ieuiKK(ksvhu}}?uG|RIvySN?hTOf&X|oV
z640m@BQ=q$9}{!$`q(X(_JfrGotw0)6gYXGBy0C+{pw2q?(tMZASm>#Ge4{mh#K_&
z;l)5<*A-ufuQw_9IhP4jYF*C@u@}*|s)0Vm6omaBcKeNv_Z0Y@WvIQw^|yL|AMgJM
zeV%%?BmYBs0Z&Nbi~k^D!1rwAVb&=$|F63bx$*y6HsU{k_B8YZ_&NL^GK0Mp?Pz7WhcKt#f9leHT(l=UK%DdfDVNfvjmyL1
zIAr8|w3=G`fWe}|acv&RaHLU_m9%oJpsucEm7ZzB!RvI!{OkM}&!q5iM6()FKF&+}
zR>_v)C7Ef{OUrRxWIqfGrQ`1C+Jt7{A?XUi{l6qsAsNf@wDv$e7CD20Tb(gQfKyHI
z-L`Jl$SB2CHn@x+ErLk|xn}|b0%lcCiiwEwQeb6#q!dl7D#3bh^mc+fW7~+xh8V&k
zJde43k4{zKL}qt_B_()wS-`RgsNANcJAOggkXq)uaXB>F^WW*pD{gZ(r85SzVl*{q
zkQYz9s;;gsY2c#=h>A`^fJHL+nd0i{dHY|dSiLEnx2mLp%|sho1i%||W)yjn92Q)~
z^?Y`j0!i&llE%RghcN#pct)pdLHcHEn+u7@`|(biPC4{cGUP!3NDGFVo_6Q~VijcQ
z7KhnRi6JC|j*N0kZfIFqy@Q~RRVZWn!FUYG*(F
zSLB1BMF}d{y=)K!>SiBalWl)xi2m#c1MIiTQ?zrI5^Av$Qv!!|iObLP@!kzAF{q!>
z^i>P?7uW5O0$~Wwn3@-jX)ZyV6{0c%N)wTp2_#j}c)<{<(d%%5joov*VfP6MGj6t>
z6|}X+hv9n3&9&IgY~P^N=w0q-I?&Xlk4?EX6w)fF*`$q}NzNJkXlCX>Mdg>E`z_4Y
zO5t70@%B#PHCsj&xga$Q0B~kxVti-@!;T$%dHotNX!w89tXWLSXbSqw{qMq7{qB^9`8Xl3BRdvPrzZ)0iltDAu&fc(Qtp
z@wY{SMd0h#_hPdZ1Gf)Lnn*J%8CW02e}_9r=eKg6#cYtrb1dEGIn~C!_0c6U1w`rL
zwLpFBy^-ntNf$xudst(78N|VUB?tEuSj`#03gnR`(QragqO*GFu*8Da!&PAM_JM#InpmxpY8sEv%;j{xSaoAx0
zL{|x-Sh{23s9mg-S8x8pK=Yt4T+G1nB`~&ZL72iC*5v}9@^}$65h0l>$}p9a2~2Cf
zaU(NPf;N;=7pCu63M2Nx8cz0B$l3nMcZa=9T2+W}0X0M2;(+}>HHS5riU8nfJWZZP
z$Y*Fd12fW%4z>Nl_jkBRV@>g_fuW2UAwIBVeP(&0UnJ>Ic5-*npZ#$?K|`zOYIewk
zo@)JJmmzhyLB&>%3sybDIkiOJ7J+~Or^&4Pdw0>&ZbwP0(LuLXAn(82=vz!rJRx5f%IDC_M7wl--(%5TgyX@3l7Gb*LUC_9?P)3j}o4R-3
zlRRqzUkNaQ|EtT?Mb(M-9NKou)+@XsVW-BI$-%pt@Im{1;qnbwjWTW5RCD~;iBfH-n
zWIgPRL%GFu+Slchi`&U7BPNIik{R5u0lU&{Hg4~PVN~ljr9h{wQiN>Y|5gwkh%csl
zLx9Cg{y@KUXbLZg-fWt%pg8pO0BRRCsqXLcA@j{9AC)sRq717U(KydXR7d5-m2yr-GSu@h)$EWhT9s+lmLB75^YR7rU@Xw=r8
z6IK|j*I$3%NU*)?mIou%UN-aje)6$#1uPTy^slbOfq{Pdj|)I`k+)wOtUKuZ*Cd;J_QoO7IPp)27=k3_0BzqJwt4a!UpsfH&grwh(2TLbCxb$jh?!a1abrgAzoi
zd>UL*7id2kjQ&XR6s_}t&Z)ax`8%UEu5EQOt~g{H!T0G@V%7bT4dAEwF@wMUyt#%N
zO+V+Axfi6xy^^(8uQLRB7OsRuob)z$c=qkMh;AGX-q9KpD)GRc_^cE7@Wnxw
zmV~ys51t~DQNSxBggAOtv)f2!(etxy`+d@pX|9_mEj$K^xEhl{&4x+<>O}7E5aF5HL|K^Z>t$7LtA?N*
zTPDG#kug28GQ4_&ALsTcMIRNEX*)?wp(*}l#qHArwe9m6GfjivF}E!@cg%6J>tn%EwY2H}K~{z<1H%CX?}dRBkF6(t
z2a#s6W`qsK9Jl$7)gd=48xTrwe#2Ki(?qeKPSFvxbS@Puqwnh|vqp
z&AsxnM+T!rIEJiI#X?PACO4C1&BU$=?xZ~Q{-`wdM)o<-lQ
zoA`FlCu@_&Lu3gea{E;Vo8e_#od-|DN-$3bsDyjJiw|W`3=7QC!I~;Hv53RlgS+PBRGwfaXR`N(wnu+#nx*U?bmO<^4$_()0!+f3Qfth?-QY0fm(Hs8oFpz7NB~N`qFLbpRnoXq5+H0pb3+h
z_VtB|$an#RST(_V%?j4hVq~hiooB7u?fT|_=ouy$#?V-07eaL
zTx^i4UIeU>8Y&^$yvL$pNn)`>ygHVk*%>ro&YHAjMpt?*kMA&*e1aPlZZy@sR1I37
z?Df3~Dwy{3FX;AZ%J(OI2x`ps4;PNGh@U$MMv=0L%NiG)-i;dOysR6Sr)A3dc-Hh5
zv>I~qa-(NTWAL@C1+VAf=w!(7wVmBK@Tcay$J|{U_KXF8s9PV?ipIpdnumC&Z*elF
zuai%jo2xK>hXcKWCyI}h8o7{GnNG#nR-ZJNsaA7N^SeH>`K5EyutFKVeEqQclmxft
zjH1hSdP4Fbh2{;}vK{E>O|L1tX|a5^Ab=WWUvTdRTG}}Hd1nl3q^C$j@78>$XO-+W
z#UUe*0&XT{9ZpG3xjF;zENJGKZJ_1&p3A07n*UKAT=q$UBk8w>eczw&d3~z_f$AA)
z%|?u&@qpGt$=|VK1lG)PKmoj!Df`R?{pHR^g9Z6no#6%huoxA@=GX0eV_aGDYg}eE
z&$uSPeRJqg?F0tL)VDLdXw|{pe*)txTPk(NZY^>N`Q&|ig!x8qM%a{x71%+V1e9U1
znC4J}XHPSUailMveLwQLQw5cBI-|A8HT5Y%c_bu*=7@o6mHjGRth5-EAU9c3cIfEU
zq{}sR!%gtSDSfZBQDISZ216^>I2|0A=;ZYk{!(0=HQKn<{>?ktOoZfZZzkY^tXrdX|vfAZ(T9eZ1sqXuuPo^m(^dE5M`NywcgVxohZ-
zkL0*foYL`k(n+U32`4t$tQ@UH4l}zhS{;}_5O6Q42-C?*lPW$c9ZOMAFjUH5_jw6)kq#1^&c+U?@z8);7WPo1r(WIbRJai5;@C;JxI1$Z^SHDu@
zbyGN~>P5+P#RX>yUaS|O`po{52G_IBd(rQvTAa30d!*~{8*xw|xua^gi-%j
z>Zqe_-Sa&l&QR~&n3tyBOMEp`8RD>hCg9}+^4@fV-_nj5|Nat$cbgYi$79tzA=zvf
zc!m!}JRFQg(To~UV<*7z#XXmM@?uTfM4gW7$B-Hf!lqeVOM-jl1IgAb^D-Bh9E}f#X(7jg|!VX7aDb6z^AkHktg2|eH(_R&4EL~
zlOF57fLxwsvN#gyDC^@(C>_^cP)n6^UUe$-D>v6EtDR0P);4S@q-4~awYi^UtuiDK
zj@Il-cBkBVyC`oxCZ-TWzVF6hoR+W!BpqmPired?w2Luuk*|8>`mQIjJSGuB_(l-n
zgVw4z7L!z*ih2{zq2?
zn*Hx7Od)9|sCY+84%{Sv`l?pXOeCz*&yFI4DhC3NC#nww+TTb!1(`Gax$_Sh$%$^t
z4s!h5+1B63_*%!@JlcT%kT=J+vDTr*IqenmGKyBdUoMondLkgm>d18J@ENxbw&ifa
z8k*V!QVsI7{ZMqAJtN0Mc})(>c(BndZk(u@UhE*(pd;t&THWI02D)MGlx>8xIGmzc
z;>@{5SM<|y!N{ipJLQMRnDqw_bdCJVPS-1!2QjW6pUmGT^_Co_8B;M5Y)pJI8JuXJ
z4xo2nmPt#4H%mA?o>8)|`7Qe3Ge8kBEOYg65x`=kvue;o?#@i3*qOf?+&ss5{M<(_
zrP11dC#%{9k`<(2H6I@znY|NA5YlUsQXfHqXE9BN_Y^
z;=?~2nE`!m(2!i>4b10~37XU6s;-sQfTjqcys}chGv-CteBVq)HsUx?S(4fPpFiQG
z4*EZu9w>|14X3_0dA_Xib{44GgI%kQ{dkX)(PuFC3))k|cituUCE($XXhBN8$X<*?
z5(m1f$!jC+JMS#5tp<;AajC~6v*agUf3muV=T81iOymBW+ReE&>-Q&2Q4j(N-er-Gl6xo6V
zhu;@mWH@Rq2W1aGxG9EE@_fHc0Y>M@%kV3)i~So?<1HlDAdB0y+yc4tA`WwUsMKoq
zdM*!M#~1J&rTusCK>LAhX4qi?#j$7ibdgH9I&&+Ifln|<13DH{`>V$HZTB_($`(tW
ziAE=npgd7}FhHpp5Z$%2kTXfVi)y21X9SCPi9LB`WN3G=P8l6b2`aQ?9k_Y~@>UDT
zcRo>1P}|@^*IdF8j$_TLn9jaE1(*&DWXxogJS^U*r($LDd0>#algY9ukxLCnb7G_g
zuUOBrj7f4ngF5KT!J-&qG0}=GYOom$~`5-F}?8}`N8xg+|Vh9IJx$yQ3aQ3~oMOlZ*9U7+Z5yTJ$ui?E>7_R0G08oCYjjIoTXKt;OTF2vT5wiEzgA3CuaTEj482u$C>
z1Z)+mYUvqcZeHL`lR_lV?PCuP8NZpojSdvWxp=e~$C^z*JFJ@8`I8LcVY~H&Rj@}=Y6@g2WX%_uE@$5+7I0Q(=xw@APn|NC}t}`Ow$q?9jt=2MfyFYH+yO(yW
zap9!CKkm~zqRWMdgcH;1T`8HZobMtQ9wm)*eI~n^hwH=icJ)d}^AdfPQ)L(?QG1Go
z`S7Qb0Y^9Eudu8g-6=zX#+r$A9ZcGqN2%%^*&(kokLRTI3B_A|(^*z^*AP#7;z+CS
zyMz6kgTy8EbCfK;W%7;lo>!5OdZKG=xKHY}3gp5`Xo8D7)KQvw5vDm8)G+G0S9y8V
zA1y?$j8Bgd*W`pK0m*DDX*U=Hqdg{zG2H1Ve|DK5nBqeNNausbRWlR`fx(1ZdB?VR
zDM=ya@833qr-nDojGEFt%v+5>!gr--{}ID0spA`1s6xC6SZei%wrne}!9g8?o6#5+
z*xwT=mEz^r-lsw}*!Tt7XtgFbd7zEO61k-Yn5;nnDa-{GyRzezvvnaj>s79lxcx}!
zd56%dZFf`BQ*I%osiDI`@-D=Ej_1X0kN;QSns$$ft8oKIA`*VZ{*3b4v>WkO$J
zqr$e6r|T%8)xL)iH38&CxP4vT0PZY&fMYIJ&Di>43VSr}r{{*Xljg6d&7PjeNI^l9`?}5iP8=68#EjYAc@+qpfp%VSZlw@YOR4Wt^%*H}SuP5Us
zL4jy?^^9^6M^(=adbe?H&l0{yzqbW1aswv>%OtI_Y3F_HyU&AE?mz~KkxSe;a8rJ0
zH7B2}`Bor1r^eR1-}I~;4$qn{(0z#er=U)L>r+gO?$PpAw^scgYhfbez5|YsoZ_*s
zr*F6(XEr43ScDAgdm+J9H(r`6zok+)3&xxAcJV7G2oq>GTqyo|)}TM#$9}i|lAwB*_FlU?+`}pDH%&d+hTz}uo2H$c4+}3tnQ%_L@Tgg~(-k?I
zJeM5g8j+EfSVR`H&>4H65LPgmovP&TGQ*+XqH&i?H@Soq39xgx#!0zK)H+E5l+^9c;EMZ=cU=|9CP|uPb#Y$mNtq
zX1XDet=}n|Ndvwa4|5Uku!vo`9Z*~Ns?Bs}`%Jzy@qqHw7+J0#biAbSC!1JR0}KS>)|I}wgr
zgaihGwqd~|a_g>Y5!b<9&Wd1rKoAF(3uNr!{!bQ8wVm>+W&PThIh9Yke#aZ0{wg0d
zBxpWsP3wkrKMi`~_DEzL=7S_#Ed?dnco%r9V?TIi-W10F{wg~`7>X7W
zZDYr0FDNx|Q8h5O_F{!Hb{uD`Gm3UeI0GyojfsbjEyj!ga<})`RCEwdQn~t4
zI_WFh(maBgC(7u)yRLql8{RhRakVZ9mlw|`Z3D+V$Gq-g12V0qW`db5dvcms#$v9r
z4UM3eRZvw)G)S_}I7PfX&N&csN@dsat@h&k>NP%TOK>_tKPDO#^$aomiT+iV5Lz2U
ziUZ(?YdXgxdc5)R&C;&i6(3a8uv#p7?q9NujcOHAdx%XFnU{tWAOpfB3AyS+u{&HM
z9PA@Lt$ZwB!ZntQg~9zy)mLUJAR3>>#%3JNZMcz2Qn)tE?+Ik%+BtT*xY|JbM4dCe
zLTttfyP^T)2L(vNEOk+nb*vISIl4=hrzi|NF5B7o3Zep&!;C_PzlCB)OfXf%ieJJ5
zKK4I+A3N;GkC_BWw~m!p+BRZ&k!-IV3o1augcOU!;<-}NGLu(auBCC#&Vc2oM>)6&Y!BHpFj)uSyR_DU2Pnea8h0D&^1;@x8GJ|Z2
zMHkTP%$CO5pUHNm*GayH?aY-r(Syq3Jn#
zVX`sywWVK{SU{4a9rJI{eqs7jF@b+|CpQ_7_}iX$`>pDEm;db9&m9Szl7W2kO}s7`
zC3^b>WBLailU2%1injn|(s#X&3u1W>P^t|6Ikju%?jDTS2&-PQl(3zcXhPLrODE;t
zOAfr@plRv+pu|VsiAEFI7^1=n2JXOq#NZ8gKdo
z_iDXk**&T^Lb&tRmG+an^rH3_
zCZdKfR=@DW$n*y{-xA(lRU_7}!}<_B*909r{qn1-Tt?#O=4O=K+B|Ar6J5*vijDH5
zyu0@D94YxT*^SN>PdJS#fGce^Do9%U4DleIA^i_^fbIGQdMzK`V5^i{GCTicZU%q?
z(BN}I6ORG@UOvB;F=moVGrBP|&0^Kh1t6xwyNef9TuSx!-q*wDK!SNDdQbU(Mdi0q
zhj)!JK8vjF3Hn&0p6quY-J}p}1IjF?Ins4%FpK3>ontWOP>y)K#3g?TE~ydgofJO?
z5^G80RiU_ONDPmhA5XZnl$<-6`fjopqQL#*Cl9^8b=Q=|aIF1RNci<9l@
zOS?>6-&pP>UoBsH7@TR+fEQ$f?H-D=c1PCk&g8en;++W7udl%nH9E%b`w`<^^6DU!
zUcC;*6_^|`PCZ#g(xoQ1d3^t?wf9L!ka1ZIyRjP7_sIkKN5d}*gD`xs#|bMnyAd$g
z{!3A^OWMRK3G>Y6rIr;TlQw*eDVbnrUjq4TpN3xJyq$62ByKm_apo+
zgn3wur%X1yz>afe3c_JblMM#6UJ_hlu{O~Kn%&@
z?^DDya>|=Pps@*r)S)BAH^O)f#e4%2t})wfeSJ;-(=(La+m?5+;2p{(zv!VM-}fkn
ze7fBbB}AF&P@nwetKRGXXb{Es^m(y`zpbIgu7R@fc@x+E*_6lclXCmO;=%EzcW*2<
ztcsbe?q=m5zHQVQyPOw#txT#TnbD!F)@_o^))pQ7l;2p`Gmzu?+qAI=zkD*V<
zm7#mNz6)Pug~3_IFj<2$a)
z-zGDy93z;56VDnzNA>!A1Bw^_T+_S^&d42ob1hTQ@We-j5JTTjvljZf@paLj=?$lT
zHk%`|fXhre3tj?_6rQ?c!_S9o0i|R%fL36eM$5)}fr-@<`p3aSyYDIaT
zjJRI_?j)G~#@QK~=<|y9X0qw}6@JXo6R%Y;OknyjuykKS_hQ3Y?`+hS#Y-KsH_~?!
z;K-i9>gm*nxMKEdg9}fxqizD1HX3!>s}onWQprw^OMZ3a$ek5AB&5=o%*-#D_?OBH
zv66Ff2BzDX<(gdI-7j048yI8_54HNiFxVwCQ6@LY!^Ge?M8;t~>
zb&b&<6_YJz*;q!|3E5^<_ms8B^t$x>>o@!Sz2EHxTPH%7B2$osYHqq!;GkDaXCi|F
z`Y*@`ozPWjw7??|**t1Z_vIosFYfs#2!h6>0)ltS2&y(N_uUPCQ*jiW=hHVpM
zv)Z1YU`KKMd&m83j~(sBZ?hB|BwDM4U8&*PUo<$UN#x?)#>&k}`@{~qGFPV`2Ab@P
zJ=z%%TM6PFiRXB?arflU{G)MS3Z2*6T>j%3kMTc6jz4F2B)>?VUJCe%hML%8GcOum
z-}rDWxc_jfK~}9DfvK@01#NkzW47bvF`44<77976Ooi%OJa#^
zj!h`m4sT8P0Z{R0T(r8`YzDe9**|z?Tfe?{P(}PmSWVroZr=sNnT*38mla<0ek3h#
ztg33Qx}%=6sE%CavZ~GwTl!+{(5a%(GxW5CYw!n)1o%eQ8@otx!(zcq0o%T@rxpjg
zQ4@7xyAB_XyL;3zy*03YsIOTS?cGJ>KhE0PVvzKek!a%eLHDzFejiFGx2yy!1l^uo
z*)ersnA%a%0nRMrqL}8)CHwYm<}xm4h32FE+c=*A=?5?I?4tBF0u=W~TwD5U{yrI9
z;M$k4X4|BL<v24j|4Xtgr&cHNx)nKjdhsp0R3oK)(;f9F~;Ga{!gO4fzt6#
zN-ETQuU_PdE?rrmc{?glFUA&C2yX8Y-g+#9+ey@D6@x3KG${c^IN=8BIsP{
z>6d9;VtaQu9IRK7E%*k4dC(d((3_&G{f)h2=4kRJ@oO$NAoxs1PL1ciIsV<T@m2;pa|nP}RcXFR=w%?Y9n*N_qH(
z=_UIYFPO+~-i~_{3rr8MkWAuSGiuNqKKa$U{eFZd=K!aR|8W7HDVUHdK%udS?^?n8
z-c=F!B;vHJ&=ltvlWNofW~1{3w{_#6VBy7QZ;#3EcUIntAfqvihWm=qszGI5sCq4k
z)5u-WP%P79$4Z4*X7b>pylyq|qVRB0Ll$7_+_*l!9G6C43F;gjACLb8wuxM^$@FAkSZ9&x-Cz~yI{3w7Oi_6qP9q;nd?%FTe78NRX4>X&s
z{>XYvrO0on(t(#JSDZxyv@IL|B^#MP@%s73C})qSx1Plp17H$6K&_ws+ZKIZJt2!-
zainxz*KO;m0J}~T)!MZW$3}Oj|BBBEztyD%E>VA3aB3B(&TY(pd;uNg4V#t%UE!wb
zi9Kw(*TZsSd2u@olgH3TRjscwu=&ZIQA
znc#1+It?zS!^K|8qW2!LzDFD}5GPC3SxvM5AL8CKuBqh<8^r?HfTM^=SCQV7Djh^x
z=)Hpqgbq?e4JrzP6zRPaIz)OWqS8wsp-5Nh1c(q4YT#}>$8-MgxBGs%cfRDevv(%5
zXV%QD^{i*D*}xJuU+Dap`|qvg3cOn`89xf~;gB)T&$b&JVTn;enH**<1%Nh6`B2*V
z#3h#1o>=cbWSsutldzDq|Di#jwf&MYKm)!>P0bqiWhB=lFeG(_tHrk>qA-&-Nuqu{
zcpN#RwKKjd`|Ofq*VnJb5Uk9PiaWr|4{IVYQe|Fn@e8y>Hm%e
ziB73m{cz-aOc}t-t+gJao;pDt7heW9A2f{e`mT`?SE28xP?|#gmDWVJvu>Xq{2wN;
z9PMfnpKw5DSAC7*Peg6N;Pn**gnz^>|4zypA=4qIbX9ZZRC&BLpXid(pq2dy9}%^g
z;Qw!PNn%I&%z#cXpN9gJXCl#l9k1-QDf=01^}LbsRO@K@J%+&o^WWod)EX%437ZpI
z-Rtc-fKtt{+^iB0wki+1G8gNNwQs3FmrmTxx3lY;>2nCcufy7j|3hcbv0JY{r=hw&
z4MzYFt_xafd3tzUh6qC+v5~YiqSVYluWOSeAhCl69GI=FXUy;5
zPoGqbSf3wK-7Zc^Nl`I6Q?mXptHMCVT;gU9U0pty(8A3d4Abf3XE{dxxxL*SB&Qcg
zc1;Rz>W~$Ix%TJAOFgX^VETq*%AmwUq;297K;6;zMK#*F}
z(=8A;ibs4h|NBhylbFlEGoR3!M(XP7XB;!2!NR|4(X18}fBuXlr~izH=8T<_miR6P
z+@lG&Qv3MdfC`cse|?~lKMx6GpO{nPyuUkaM_|+t|GmYdy4}W?h4=BB6IK_Re{OA{-H>toIzN4T1zcSBc>hI+{dk
ztmP!-Nfac8c2PFBGohI%R#|56Zaz__TKxccNB=4QWim{|36bI=`T3`yv#OeAx3;!4
zpB(OC;Vm)`pNtTXj+g$E{m<()Y<3lSM|%?=QUZhQ$@5!(T0pW&*D39
zofZTFSouIW)Hx>_J|uEHxFV)YX`z3W0tlRQw$}&35&(|;*zoXEnHi53=~H^ymRVOe
z4h~3v6;SydDIlEYrKQWy#gf_C-}5N*&Zw~5kJqVLa$sxge0qk8bLtDvE($~`1F>T>
zt_|z!>#a!Ohr>d6%ob%1yeU`AN+LIXcJ{wHx_kMe@JLlD0kfi3zq(?;SK(`DCYtF&
zSg-r6Ai<-WOy%JEVQJ8mORB)hWsT!sG4LlnpSCI|w!1uMLEj$OI)rtxOIj}WlgN;6
z%9r?e3}0GCykwWq9D@>D4@qICFJR2@==*8_lJ`%!6a(CT7n^y2FdRe^Bha*l8cskx
zCQRJBH{;t16@pn{#heROw&+_f;wxrolSdN`8|K4Ze|}Cftag3)N%w;qA;bqk<2d0v
zwmSVLX_!La3$a<y
zS@2GahIcfsIJhYwC3?SofbGeOFC!4hPtyfnSBg$^MXQv3NJ4YKbd}$A?aD&
zzDzqHT*=y$d9(WXFf{3^T*&0SI`EWlJHS
zj+M)7Vg7Uy>~FpIW%N(&t$lSGV@uUOaaikQy(>m1;L*;F+6Pv;;P$?njoH~u8J8W#
zfNmqrvZ>s!isVGg^|gf&Z|5d(YgTEzBzn{{;4(?j)pHuP@{!E*L5eZht*yT!c3x&}
zTF*9ayED`?l(%4+M}M@vD!?fA`Fn&Uc!HMZUdE~^_80MNOz%H>?Ct~d#{YyPQYpj24byh~@
z3^{k*z4i-Jt`{b%mePI%irT!K5e0akb`bX>Kt7cJL|E#5JcxDuIy({(B@-vK
z?3a1q(ELu>TR1sFl%YfYbVDp1<&zbcq&3lR;4pjZiR0A?Y$od4S{u)$X@;OcMKc1l
zI7U}_P0XrAIb@b){VS5+Y3p>YXaO0i{k=ecQ&3pry^xswJk~;2%IFr!)2EdG%vP@~
zQi0Na8+RUN0Y~>n!pVMRv@6t5>uZee=?PKf`w4P2*bY(1VBsy*Hi_3w%*cXw%B%TJ
zB^*DAyE5l-TdT~6)7>xD+(0tnkxYj#uRvVC8$+0fbbl8ICnm+N1n5iZ1T$NUc5}rE
z1;}7*@?XzoPmWX=5ek(3qCy^h1;^@a(OTNBsV9>e|0A2n+Mx6O^JQeX;ou1AJtR?_}-)J6Bjnl2JX=&%gVgcd$tFgNL#{S;Nsg2
z)pT>oquilyVNN(Z?8tX$9NAocD)QPyYZ{ezLA?TmM!yF)6Y8FJd$DzinMXIN$;IJ&
z<4z0Zxud%J>)_TfME$vi`6&bjj40pxhX3S*rOTd^{Bj%J?Xw^C_E*rQ+p-;7Oi1@I
zh82?G@ScAnH|18uk0LB*poKIHkGz%iUXzQI#jH-!S&g2^!t6&PHciE$#c7poWpR6M
zYu2g?QzL_AY)wG=K}plqODqn3Q&w*+89gSMB37?iwG~vCSl9A@eLj7`9fe6=jGOK8
zm1>h0>RK*qeGa=X^fE=Pi}#Dez?TwYB6m#kft0c$br8(*>a9%Fs|ZlVg9eMnCY9a}
z&=grhl(&J&1)Z?`Un>v7LJ;AD^$>y2?0Ll}y*=P~%;
zDywoC>79tV;>4j_ry#u(g()ew^5x@7Q?zD_w+3ptUfsbIn0vStjNIF$v@l8J^+>d~
zb&t@ktCq={hWcqpbXrW=r8msjAC(nNl{*HO&%}<53g~-z+sw)nCb$#rqL=clV+n=o
z=^03Wr0V`Q%_Hdj?y7rS(B}CzR@LYRN^Y)|gp`t7a*)3*=d;8_LhE{<{f(jl4zb;?
zaSK$9fc;e4G7p)nE8qF=LaigONc?c&*
zT|K>c`sopk32aQgH7434Y{(g^9iQF?RWutvQANMz$2`%Sz!b3MSOWRf$a;JYNfE%-7oHsr&3Ed5|nU7&u<7l?<{H
z(Chk{Ik!+X2sNZz7{pPR^ZXbpat8H-a7-&-_1TtERthGY>bYDt{S&49dVSY>TW1|`
zd{$Cc;cnu!_u8!=Yq=}rdoM%kP(^(5gI%V?LUvR464avIiJ={IhsWhatcXC-s%Iw}
ztz+)wcp+;phi*aawyfRZ>wxQ-D=J+MSFJg%-H%qHDWvDVm``IAr;=r@$hiZF4TGW=
zGG!n3DI9fW%r-WBwvjlx&vitHsiP8W->FkQS?Q6PHipPY3omd`!csea{5-x7YgM9q
zN-`VrC%jq$Nn8-&>!c2CDRc_3jAhqC*Xk_uO!%zPXpGb*JX@B4tZp#d;e3XebO}yh
zb~Asv*?UBej*bQ<;>@ta3k(xw`&wnf@^N1Bl3SU%SSY5k(uPf?xdgH!<~WNuW-&O?
zq<085EZbRL?ABZP
zEdI@0>fh=#1hPQi4Dz4J5p8hCjrtH}8Rkavg8dZ&e$F1^bB*w_!BuP9ZrP)IN&~B(
z<_Ovf@ri=oArWPUeRJhEO9ZI-&(;^06Z?QWntj&{;?OjUb+^94h5M{61$4*b`(YD4
z+C>ll_60IIU6Xj1*~f>&4Bh
zlj|y-8XCHUsm$x(2(oA5*`ISbYIGG>ciwvJnw;hvTOo%QfUvs7xGUToTUxMheJkDl4XtP_b2Ef{upTgBUINYbf?`=I2VHN4D^4eD)~EG&9GhVx%r??EMX3
z_Y9gHP-jfX%C7ueqwsI)s~%dW(A6xArJ3QQ9z%ewGTmCxPUP
zLPy_L*!*j2iryOSS)O%5(|gxCGHGdXe~Us~-)q2jj+NYCLwp%nB2pGys_;RVJfa!9
zrB
zFQyXeg{(9&esS*1MzxY8-g+FAC-OAgdu5N7nCJV6WIW&vdzYa@?Jz=Mj$2lXnrxbI
zL7OD5+HQ%*Ia>3u;K`?Jh$2@~qID@ABK&CPl;R}4kbUrJt<(B~p
z)u|@s%f7(gMD7u%f2%+jVskbUf;fXM6GlMrii8X@P=8rog+u)e
zA0nX&Xc-Yjt&`2!6PKXl(DCThN-TR@!Jd^#!N^FLvMG?>U`}~yk9oMj8@ak4?54Bx
zNl8RF16_zn%Vk<-Oml6R_69zsPqs?q#
z7hFi%OsQ?=SG~Myq5hOPO^L%mpE0~2Hm{48YM22TW!TfYmOgg4PKBx4kX%R@9>bH+
z63{DW9;m9<1rmzW&|8
zA3Cp_IN)z+U8ZTj)UdLKJvnp@3akLZ4Wh;y5J#j@&_ym)*%7K>VTHZm0~v!&sJtYv
z#^?#glK7eM228|T(0jO*Z`JWK+zyIqo>xw*CK%mKn#~omn4;Y^r(EKfCgt5
zX@10eO^3br%@VE=w~D&gWHU8;h1`B*pD2rY8BA0{d8NG|HHD$l2dqpGb#x_@fa9rA
z_Bf^L7iQIwc&o{rj=0c)0aPrFX2n1%+flzzE#auYP7v}+tXSN>hcB`GAa5LDR2I-J
zU7C8jA9ss`GGWG5I_0opNS5|l)bQ1G<<+;YTcrN?!aTa|(w4v!s^Ucnw8r-usm+h9
z<3msJ9Hzz?>ccWE(UP50AAiVjVkuy5jL6qKaeF7&M>71DQ~WB)rSQ13Jh~)PE5FUU
zceWuk)Se27D;XZ`#}pModz77l4~#vjpjPPTp*%7w0M-U^)xaRKlmUQeZyvDBMTCX-
zrCZtTW?jc7Ci*vh$|@^|j-W$I!5rp12*-D*deItyzwDx
zP&1IojPfYqhSJgbq_cL=0g%#%zs-VSi^oAWif7XDX|u=*0$9rbmdAJh$HkM={lDp8
z{=c|dpPxN*lb#j-*YieJ>sx2utvi?gq?dVFK&}+C_Rp7~q5ph6t5yCMq3keO60gL$
zlfjvEF*l#T0l2fO>>Dg;hc`CQ{fk!t9ESWw-m_c3%S-0}BPGuN<<(4KG?V1`>>n7I
zBu5bt=qNOuekrbd_{lvfLG>Zjom*G
z;#m{zY5wdfXIHz%f2PdeS8e5s&K1z+jhaKk_IEWs=)T%!Hq&&S#edy1?BH)A=lQNM
zutFPdqk=k;NXe=Q)|f9a0>>oYr(l*YFbg2hp&lD6;rGuWQ-Yul&niAEIm+v{Yp
z(4(6gsZxr1?59y%$pt@xt!1+Fw!e^jL&(p0MMzkD6S9a2%2yGgxL!V|ou4-rEqqQRdBo!N6mwqMBf04q0jlhr@8-_50Mj+6A0n=aFd(6}%s`SN|
zk+kb(^C@KlP=&+E_YU-Q+_>soB}L#H?Ar9wYUx>5T
zQlNkM8g|)je&mD6w0HZeB`}hIpApcv?bJpTK(20CPo}lNKO65q3vb5{$gUO*UZH$wxRN<}yJ?U-aN3xhM3%ortkbx?5c?NV%AdhmW5
z?3Fyd*9n}Lda%O
zEPc>Y7BfL%EQ_qh0v>LPAlhagz^QgmCX?|M6>j^6FIvm7C(}ozZGLJY*cPoli1+Ea
z+Gw$2KW%bgANfbnhVAf~fG;YdJr+kA6u8LaFN~)nu7dMU=HhZoMyyb>ZOw*ya|gNY
z8EKVnZGH{Fb2O?|^f&n&dS(y5XSe4eCuQ@IeA1=zPSNYxS?uMPckO{OtlxBLQ~aOC
z^ZbL!j#$hIs7z2hS>r>l%8t@LZ)p)D8Lo1jYvoccEiHA#*Kcoc$K8j_b~mrg9ZA%l
z9nL`VSGYEdiJxV|3C2%YRMh{}#o1Y3K_O)R%cf5N3y>?!qh+?VtPCfkrK!19y#V0F
za*Kx$2zm36q`w0?*nVS%3l!M~JM|T^!c1h1>MpG{E-sZ}I2-v)-S5_5bUY
zT(-A@+lFN2JoF|wF{aeuBX)jiy;`P@@_$mC;Q
zt6S{Zb}ARMtUI!Ek!@N0yd{Ja;-?cs?7B%p@`};#a$m)jz%f|fQon&$n*t$cW?S;+
zJ_GeTb>-;J;qpECUjg@|0Eo6v;?_Rx)8cl>SLq)B{yZdmc38#gc}S#T7wV3@hSmem
zH9#X$ZopTbZ9OEb+i?lIP;i;-uk$21996QSR-|sEZwxDwOP`d0n5U$J&P#yIUdJ#
zO$e~5o%~`WcBBvtua+Yt)xtc|i9t)J5F^*bs;$p~B~N4BfRv@+Ckq<@9R9k}ZSBiG
z6E{U2ao7e{Yz&(Snx1PzvTtHFBjb+e?a74t8r>zDL~i&a*v6h!b-AbZ)%mo_od{6ofV<<5eMX0hrYzA_
z+kQsP&X|KK6+h{3fV;q+1yNly?ok84+x92z-0?E16363`zf{y
z?hGQ}r8{*F&h3!$%6G|UpzH@O+YPw>0RW-ip9EufqgEJ;2yc(7zv1uMx+IPJbzz_m
z&$1MhehKT1i5Csj7xt&>-O7u7SzVLlQSpftXc^_>*a3qsFgzmmdPQcniXZucN~cG`O}Fz$7RjGouVJ%X(
z9isPSoyQ7xY8iE{sg*u#=>3Mhsxk$ZExU$W`D9CGQUrex|n*ac;gx{iQYmY_*X3=
z52nm-Nz2uf|4giMt$~UnEM<-3ih|q5E7|}sM_Q#O2P|+I$kle{wgZIa?Y_D#HobDD
zG;rPtkeEidNC2wtW5=28SGYb>orG`J2Fj5FslGq*{06a7BLbu~-$M?;NcG=Nu2(e<
zq5PvJ3%v2ns|Bv-bI&jd#WWM$dUd*^5F5e1-zMl*9VjtC=!2QPn2^xC$=vTCq
zYwsoJ5`r)b^w*huyh%u2q~Ep=2Jv|5Hz@|^a~Kp}ZM&1gg-2b}u-*z=k_Y_|Phi-^
zTYi$HQWV3V0@FD~mW;&zTsmsJ(g@$4+{*Hz35reVijLjB{!yXx;I0_ugl2Z7dKx;eQ{VawU1*E9?xY$Hf|bCVU4G7?*D?Zkiw
zg^rr|f>+*3)&H=*k65E(^cU|Iq~dRWVzG3Yc*iFzN%Sh%a+Hc$ale>*;6o;rK@d
z?&9*8K#u71Z0tqpF|TFtCb8C#W{(i&VZ|kOH$5E}qrGDCGCm!{FpEq
z@~az0i9KV>7tMuV!AM-k#4B?p4X-|CfC{lfJZ*i5aL%k%KOqh+!
zp;Y2W$i&u_cg^~>ej!R&xV|6hYK0pr%NsO_
zJpvKgcGzeEISbFOj6~bg6I0k2_@FTH3D4Ji5FJ;8Rd%Uq#@iSkbdyfWTwKlIR6w;c
z7yO|W;IeNR2!8!gt1Q*PA=tTHXWSd`?196rk^4O3$G==CHT33A9=Z6V#7?5B;mfp>
ztxM0fxcJq3O?r7H1EyqqZg0=~-Hqn+k`;mx14BpZ*1dmhis9dK{1o{(S?zv!Xoh>;
zili7GF9!9JGU+R-aDXh)aFFCl9Dhb6Be`>PVbAc+^hPECC^}mN^sErdL5X%I
zx6JCP=CUGl)Nxi7jhhFjgTSsChd%%%8kOq{ZJ)rW&vzBBV1=DpphxehMk-Cn#<@4<
zo#e-<4j`7_+y1Jhl0V71HjcctW#E-SPb3^Kr2Pu~XiJL^>E^dL{g|_?kZm}%Jl|X5
zD?N(huN*Jt4a(b*LR#xxlFCu|rWB=ZVp36XTQx3!qfroLSCX@lXZWpKwK*4cgUi-i
zy@608vY~d>pk3c%L&i0g(D^8OV+{O@LsaoS8f~!A^C7cAk;FdPGCh}z&8hR`;KcUL
z>niA%7lE&D;2xI;wW*ja2pQxEE=-5^OT*qX_SLx}T6<)5U0s6xVi~)W%m_aa726d3
zqFWPKh6H&*)iNLBdhZf@zttirgn+okwc?h~k50e52
zcbd*Z4K+yyyA=zwZtst(oEHX7tCJoH2fG@ay7|UP+l1>Nblcml9}HQ9k8o%O-;-A6
z043NmL!Q#9VsM{ulN*g8Ol2b0J;#&Rcj=8|g3=>2-}I2xXz45c@WV0A53{ZC!uadj
z4S80YuG3RbH)DP<(604KxQoB`WY$hYn=OxfRu0%+HxKz<-u>*hxP<&zG7(z>W|O*r
zgnXz*zM7cv-^i*z?*DigqlP(o9CMk}Ma*7y&?oSyrFh10)+sl}pcIdn-Z-FY&zgVe
zJ4Mkrei9V^omn)d&AtIP_!p6?`Scb+k9zk+ceTnsC<%RHEVecvqvN3-Ywd@^oczEAizvi=)Z=z3dgn
zlikMZ{Hf%Wl33i8Nbcn?6<
zMzQc~Y;+i`x{z*MnWpNI^z;hPLapsdL@ARJUD6fL15<}=TbZlMmW8FBntpq2`>*Z<
zU2C=iFhH}03gJFBQZhX=?T@Pox`UfkHc1X>u+v9jw1;`o&Amgix9Q>k@Oow)UWQ&P
zn>dXs_9<7K%{CC*;HQYNUvf9qX;$W9Ly8=InyiwXHBzdn)#lLSw+~&qFjZZl3>$mP
zEihX=VwSD8V|ZFt)DJ0W#mm9X8MhFMfpAEy-k^P#2%({E`flF(cY_jb>kd&cZp(qCFy
z11B!^KUA?bbBdJVW1498)W283!>2ztkW@pjzyf(^P2uGVCy+LgMb9ElqJzTqJ*1vc
zJ*N>{Ym8uubL26|i={6y?$l_`Q>zmM4Hs%%)A=d7i%+TYezPY5N0VX$rnDeDS91t7)HMl8@#ZXnLTCx5K>G`^W2qxI1Pp
z;nnqY6Jw7o9degsa27bzHfM3d@{(NCcTLqkW~{Nqol^mxi!9W%Um6%BLHWqBVx{E+
z4|Wx{#AW;=`0GZUipB|kZpaWR%y*~;_O%L2w27&%GZF~f-j_uRe20_m_%nZe*V^;M`sYw&B(Yum`3ADw2(_lxCBRTaB%NCjTwb~)
zOZ^Y0vKgr&ExfH^vG2kocC_iHFT4$>q1`5X2%6qH(4MCr6&75lG?qE0xYl#O!sI#B
zn7OPGIQs%RWe(X_!P;q7_8SeT-(|J7?HUIq8jweEa$6_U&AelRjikXkm&4HYI;_Xz
zINRxRy;qUnQ!t-N9R^oI$huoM9W!*%#FZDjRg7gpd4dBZnms2}EF}dGQY*;R>W8Wq
z;&9b_xZe9}R%YJO%gW65SA%9cV(L;=)oO=4DcIGuf&1poxoVpIb%v3sW#pBSklSoU
zDX9@gPLba;ZCy1cmUuw)Or`DatC$~>{GRG*vgG_iAO!t6gMc`l_3=wR8pA(t(yinZ
zs!P!veXeBEVuNb~O#&Mxm6rR;^2iNx)Fv%ToV
zK`N~%PueER7b%U{RA}9M6MX7O3}WQ97M^Ki>M=F=QV$$sAWyCiBNFz*I`kgZU~tSPTU%!OGaQ
zk`fEj)lsbAL-v9*c0hUq-yLCsKBVBu+mjMQ2XDFO`Q6y{F@zCnx+McWRz~Lf
z%hUxfiQEyAl_RQ3J)cv|YII>kT=&@OW9K|70(nskswmJv{L6
zRIX;bGelVEyWXwm>EljK7Fr0}$Ru6%NWJRlb=z)=&csOVbwbbHO__JI%(RK=f%@*s
zR}7eWgq((rf6|3iUPj5RT&%!tL6azr1)s3q+HDQ{7QAU|phaI2TQQ^faqq%Jcz(sE
zgU#c}{PByYuMxqd$lV0f#u#h81fw+6a=Y(xQ=Owsdn#wM*czTLEzTxAGvC=|xXU`Z
z9PT(^Y$XcIF0sBBxbWb0>QHCm912b@NSwIjjObdkY8=b5O^OW4GZwnXOXma-8T?Om
zKX}LA6qCw}ZfGZ#C7*ex&dP8Ig?dT}9Dpvi`VL>RE$reOmPL*pv;(}QAncTs?fq--
zoXMllpZX2*TRjYp7)fbdfG&|+a72f4U8m1*8NHO~*Z0}yB`}Cqas~CeY~WtS02D9H
z8*aKuN|6wd2`XpOqh*PtAMOR{Zm`q3AHXQvI9^
zCL@YmAu%J-q;mH)D5EA}UBe-*_}U6-;>7_;y2}A^!QtjWht26Go-HNaaxUQn8h?VM
zX33h7{;^}!Pxh}WRhL2T%wt_~*W00~-3@tOF~O;*TXZHb0oWIML?QJO$usR|*)*pv
zpE}u|3%W~wJw2}#6$PC{EuZh~MFW8{0K_bU^z
zs+N`1}Duc5A)bM_aEgq4?KI_ATN5q2FfL?$?q_2pv7vm9_hw
z6?iE~@gpnU=qltQM_erzhgI|>7)W*lu$ct7&@)DsC2=*87QHVrdE5$6mG>L!({R
zy?sJJRnbfK@w(m~#f!b;yy95hDd+V2VIBZhQCJyMPW)k=;N>4;SqT#AUjzOWn^SNQ
zyLbJ!@Q_&WNEll6_?xC%e#>FuHG#pkS|t}tD{*1FQ~{@Xa5q15);w0{`4hj+3XoCW
z%9j~cH7}2r>-JRwv-ukaNUn!X2i5N;g}gilMF&+h_u5CL(yM3&rQ4pQ;WBPCfYOB3
z=(6J8zdCv-v@yk}e`@eF!7jnZ#-B7R+1>P`Qrbffi}d?!Fys|!ydDEG)@50*PsOt6
z>*IVXy0sq@SWW_rK}2G*l?cY?+EM%`_g%RFb%
z-c(OdyVFCQm~YET7ng`@CLwChISJ>Sl*hB
zmmUd-%5(W^3dQYlTN~x-vPvXP>*)i5RC*9dUL62cPtij97&dS(&iI<*0AWos2nRk>
zwev#eyyHC5+$LJ11l_`o{j${JmU&olIi-9@K8tMj&)S=O*ZrA%^Ng=%B1@(Ew-D+$
z@0{nh?-=@j14lzsZsG}&GUz>*H=p9_Cf+CD7s+tb<~Z-Ch}swPw>_Dxz$K6qQ4C?%+_k9-zzgX;5Z8hz+Q*Qnazj$(Q
zRM{|VqT
zvq~+!%!(cVWUoqr_ZVx6$P1(~e$x0S2mxJu&;gpU4w__myzl3a~#r4^ziL{=Jxj&>A3OS(r5p+txQ;kOf?HaCciHdREtfs^|IP#S^uxoT^Uq{bczaI{9Z76qo$xc_e@Nw;B}{=er`3D>K_^ewl_)ZnnYru%u?UQk{z29Jba%
zeSGS@hnOi)6MO47>+nh2_Fvpuzoo53l0DyTy1;u{&jz#A?nQEhdc5Qf;TZO>;_Bns>>~a)x)==FgUpYn
z)~xs90o=UO&@Xv&Gc>}mBHo9lbjDRi)?KH%0oSa83L(}WyvQE{rSYmd4l`g?bmJ>k
z>Dd?Tig-Y1=7dn`M=Bb*Q|nxFWqPAO*j=EH`cA!#+LoDhbr1%a@=^M$Y5T!|R(Tz4
zBmQ&9n~J{}+0M>mKPxJP@IFp++S*;4r*t|P&jmZR14T8u!597IOG4D~XkwqDgijIA
z-jnd^ICLT&z0j9dV`RHRa8w#bMW4V}f{0@MJ*IuDrVZYi-@ud09`E9R&MVIoI;_M%
zkfhth$zS;|7x0O7c-ic`glBxG45h*)R^i`WxJxNeR7k(5oHp=8zv<_i@kZtfo~p^u
zB9wIkPF9fQV*5nww|f$Mo9cQ15#nzyz#u4wjDb~2@|E>x<6F?3#9Rhjes%fNe*Z-!OPb>?(C25DWgYWD$5qZp@W_xE7lnSXV!2$-Uo
zV<{0%Ng>`MsxeQTs+Q`U>NJ3SY_Xg6d`tm^RX!I#WCfqRTBE7uylIixF~K3>ql@9;
z82q>bK2R|N_aBsAcdf60_+88h{?OH}bY%Ha(Lu8!Hhdj#nVClzH?#C~df%Y${40oI
zrC{#ST>jQeYXnSzzvgt@rvm0Cjp=Ean?%be<@R4+|A$9&$05ToVM}MEbS0tDpzoVO
zG0pX)bUtGrOJJhZJyyE&Y$5#OQYxKVN3yD7S(YAP!za3ljSDR&&MZtf^`JsdP${=1dcxtE0FD1|Ph>My^)-G$6t``uyNGiO1w1qkewY
z4-XYs6X?Hr4d2KX)30@e*EVY}Rb>U;>d{Hdjg9N8AGddR$TdvCB#x)0Rz~BvRkH0f
z$T9prN7>{Ho#)w-G=vXb2uOd;whg*D??q1SpJlX(^`on0aFz;tB-Y%h<0?p8w^$1M&`ob7cI;WTuUl!F!M;Rqg!R_*aXDe
zQcOc|k8>@qeF8FJV&!5VNV&p3a9gUu=t!4P+$!94jh&u|cjAe|SR=I$_~|fwOm_7&
zTWO3&;R8g|&O%P?yW=g63EL89j1G*EOW&{Deb&;a!2YfDz=4dr{+JV?I1r5Ks`#z$
z$Ov?!+`HN!0D4mWL{y8;94U;MFr`g>$BmsBMs^i6I!FN9}vf
z3zgYYVU|>~KTW_Fl~%H%Q9r_h&UHNlmX4$X$PBRRMQ!vQ9jakPR{N_)98FQGxrOBU
z_`dY5JCh|!2ocDKH0L<6;U;j-&-+Y%Evob8)(H!3K8Hz5-!#V0;Q*m+g}K?1J;dB>
z0OuUE>dYGji&TV<*P$DPk6jv;r4{WfBwzf=wvh5Xp}tMq0ZcG(eIq{@Y0*v+MOOtmL7IFc5^6d5lRh}s?0F=xql29*gtOT=D-El=K`36PUl*@!P$#-?wL0Ek
z+o7@D*dgV27RuJ`8pjPXFw5wwzQrVn_{Xqu>H$k8h-N@_f*l*tC8G=ind1CvW&s^h
zg+X9OdurgecwZ&w(b}i)or*NHL#UrGbK)^OG_2I{;hpFH6$PJ23a)>c^co73a40Yr
zB>ccAJ5AMC!reg{aQ$rq)za8;-l~fqx*R&_=c`DKrguartKikUMFV#-?;ousN;|;e
zgYSldJmtIJ0dPuEYDe7^DDmq7fx(OTmrIyMaNH8(*Ft-D|KhpqgPIC_zlSu$1<2@&59bwPO|o7WqX+NN{-^zyw4ne1&l_Q9&I;uff>
zwuW8X{wa84!6Q{q<|t8Q2;Ci-jq#*!t2sDN%Q6?#a#Khvre9QUK5##2&KJphx+8ld9F{ft3NpJ3t$#QmrZF?28{zu#^RM6Z9Z6VR7_F}hoHJIfhAUG
zO9NXXBimeZCtRD_vO2sEBI1<7(pyEUJ+TeEi?_E)C-m!$^5d_V86)a8l`B^)v%jyH
zRVn#=1e}LAlG!+qdK}q!suw&L+6g|YJ3|$I
z%@jDh<~04g4(?9%u{IR!UBtT}bRi*mt_db)?ketdTZpj0PW(&eH)k5&-?{{VR2*Csu-ZP6^6+|nrBBMU&jLWyP7B*@;{f9xK!n6F
zocqT_?Gn%*{ckbi7So
zMP#bgewy1ktZ=bf;V&NboO4vGg}+GBy^t5;(k$cB%w93Jb5Jk9H`*(r+xwOwmL-gc
z>+{JnsuXeZ+gD+uVa8`;g?RIy_|)^R7{$eQ_?chj^L*N@$!H*d`1KvAm)`36x8lgp
zIQiukd}FaW!cR`1Z0h*oqPYFicIPaIK`WY58igFVD7-Qr*ewjpBy^x}rvH>a^5!;Vyg?S~oGi+bbOWpBW~gfZy<*i3%*ZB*VdjR97N
zHD1}g=JxFiv7mt=5cjNovS2XgVsA$c#juz)LmhTgDJnSdWs?=_r=uV>gqh$$iG1^6
zu`N_rOZItwE#ae`rKW17f6%Fg7MR!n#=q=W6#|mS)u8!C+mc%HYJo}p2(K?z;5u!ZU8F1cY(?eR$uXT4b!1u8(q76l7D?gC+OtmKA
zAy=IB;P9(PFSmp4GX!9SmrA`$3eq2)t_5CuDb8V4(;n7)qlP1D_%q-RhIJ%$2|M*a
zYQL6gUZWut7sSzgkWr`H60bTKI932bD(IWt2vW*cNo|<|{<3m(sU7T5Nf=8-%fs5Ms
zCWcz^@VUSP4v
zZ#6!>W^sg)?z6;a+=#CTa^(`*$@7Sx@I!q2P*tYw!}a8aPsXiC(dv4NBnP&Bj!XC4^dNGl5lU+SVeKe
z;M2t~Bke#oMWS%SIN!yVJx%C+kRGL)T~;-t-cy7N(aXE{C3u=1XZimy_m*LCbWi(W5(0!k(BKw4
zxLeQ!_W;4&WpH;waCi4$!QI{6-DO~K_h8#3&rjZW{~va*Yd>s#=$Yx6={|iXp72(AW{{Ls>O2mdyx^sYr==fy5
z2`pJRve(+mMsRIbmIR_?{9_7VY@sUg2po37q%3mh~aQUVRY%*Vb=MDbL?gw^%
zC+KLsFw)=p^74f{KCraO2>%Ii%h&$gl%#-a@-f^~vJ(d>XNUhbK-=M~Ye1(lc7{NJ
zu~bmr+4smK&P0SD8L6-Q-#WQ
za;HZ)=UVystG>6#YU!*;yXw9sNCO`8;IQH7u0cpp5QjN71sw$i#boW9jiTWH5I8Ad
z|9`}!4QClIsXkBo6W42$`p-^I4h{})hyjU>O=@AYH+}#79+1o2aWa-zZRF>FM&izT
z&a)S?)1N5uKH9!1PQecg2vFY^cQ*2U>BnXiQ|NUIFMjG$!y<(!hfVhielS6`ouBEPJ_7c
zWA=_7b;RQ*X2)PDw7e1DE8y%fzksFy7iqzwa@rCiRi%Mh{>eL^7g4Qp&XP=XF&_0u
zk#IaPK=i@1yZJ#cVZdG7FepHj2h6YJHnvO1m!racTat
z0J4vCDk=tAqyyb_L%e=i2y$eXkJe)GaLwi2Kt(~Z<{i$YBqpAC^SbAVh?b}G%qC^%
zJhq>&H2$`(%bQS|ODh5liZ#ab5`M
zqSiI>y0!)JZgnoK7Wd4(bv+O#Vue{oP-FR}4;Nnk$(h>J=Y#0*${IOw`^z!QdOathmE+W}Ys{
zQde~$MhVfm=U4g=9Ic6tzl$1BMfwS37i!~v(~v+8Plv6gHc-TdmC%}zAoEg>azP@_
z;k=bCEXD0cBBA~kRZ1}?BHViUehSr(uC8lrN)CKBJBL4Mhd0R!(QDP~KTx7k;`O(e
zK#3x_+(7_m^-UG82a=s*n1}OV*Ja!
zH%8Pqlk80-(q`=yOCqtS8m{SzAU$Ev3n=s)3+4naebUFl7RJ=h7LD$D>L*0iTF3X%
zKnH_!d~$)8EJem2U2~O>`db)^Jl7B4%D$l5y>=vr=9?^0s$ab)LV}xq;CV8Cg+;U8
zI&_Z~%+WDq3L#S6P5ji)sxAnzM}oCh8fxDb^_=JDO#3NKbJCQT
ze$@NLd9^F0Q)#bTmEzx8*I#FDjArOzCY_;r8usCExL13VI-5*n&E1f1TmTX6{t;#(
ziajFk{w=p<>c@MEJLkBn%>gpq$~Yb)8ja*8uc}QWohQEHnoxbqjN1fDlqOGTF(V6#
z`|8?+%Lw|)l~wH|(78n}xl+oaZM*-p1L?Rs&Pd`ig463xx)wCOyCKi<@b|
z=5)Rl3)&le91GIC0NX;!Moe3uRdW$vcQ+?}#wh&IEhW+VCfxh=`PH=MP^ywWB`aXX
zHM$jwGMm?hl^-1(J}UJU%Dg#{u5l@4BscuREghw+sSqJ(r(nP?wO_g6uF^Eju`xU+
z+glSI-nuMWGq7K1oR01PR978=W#Tqkt)kdVXiXZP@{RtJ+OXD2J9UJ7J?n$u^vlxk
zL7Un$6rjKzc}`iCn_JB{@0iG`;iYY;Dwrv<3XWq8E5ikRNsq6XLPzYZ3^*yBTDsayDWaibV+PEp1vc$`B`KW
zRi1mGmxm2@?S#+|GqSC(X-~Q(UoUkvb=cU@ISw74YyYlP3~X<7HvM$KXGTDIiv=cZ
zUTzQLvtrt2L?ut$UT;c0VGLI>_qHER7LmgdF@U&fbsM->jZGaH%$(v=6k^-&{^oOx
zs#xPJl+6bEem4A58mk)Mc}jfS=6K?mbTOd&4`lE=Z*tK0o3qdYMb%AIsYsn2-=cuy
z6}h|40*Q!hXbUBSRnm*d7#w7T#Q4%h4N)X)K69)qA{7D0*&D)N4>{f#Od7J1=bYuq
z9oGpATf_vs;hvjb>PA1*%%PvgE_R)&;~8T!Jq|VM0g;Dxnl-7~Z@I#ULJ*V-1^lU&*}b
z2BQ$V52Iz+?0Jh4<4Z`Jy_(;iP1YJvPI?%$=XetKftIsFdF1LgDOEsFFuQ#04KUkA
z_Uzq7XTP?~6^MOz)+hF^Yd@@@2GfRV(F1r=4kS1C+dP-DpkT@{^s)8e?IMSzdJ6u4
z!pRY{pMARiOJCCB0iv6Bpo+@91(Rlr!CWW=iQRsopTvK@$t+lz?%O1$Bz!w|UWJ
zz^LhB@Kogw(w`4k$hrjyr%dIFB!L=mTBg-2zj+Z8hUFn$c`{nWaxzhl_3j7y?oslx
z!ZR-JO{I*1tt?GRUhF5~nIJC>C7(v?8FR@&-w&ZGA9YkQ2%Q_0W4%mxSUbOSzg$`6X
zuoICy^-~R|#PdZ|%>eX8hfl5s431#-cpmqae1um#QrP{>*auHVhB~e?3vG1gq7y~-
zxwjn8P=-Bp>^*>FijH<9Gj`i!w?50ai%GxKj1$h?%r>aXVGJ}eTNB@=LuTad|Y_G)-+9nPk*N(Inv%vDCfqO8kfv
z@NJ71iG^&}#f&C|AhCr;#1wv?Rf3A2&E}}LB~W^a)r;T6z+oe=KYdETPj;tLSnbob
zba*2(UpyLgZD5&>Fk!|^sJYB4PO{;`Y6BZSg9T
zgx>NHb4$j3-|Z75rdp2>pUpQ-^{E-!JM8+TwjwQG7EX+G0(P;Gc!awIrqe4=vV1Sp
zB6QT9c2pdi9k`~Y8=iqqz{fv$N4egwTDj+Jib{GrsPyTOgtoG8dSuR9+V#I-&GaFa9uF
zL4#YCAK&eL#wjB-SBnCQcAHy^!RpcgVme>j%31HZyIrQ~$ZF2~5U3EShec?V;!jfj%68~=&Fo4mYDaElp3wcUDDN%oGBjJq5kD-6iF?KT}X#HwF)MuSN`;&
z9-#z;V8(uT@LMBDRp_TeznVmhf>xHg;}TSoJi(f=1hb(eySr;R{MIBsOS#%HZ(Y4X
znB;d-oi5yz+4{On=@hwTK$<~?&nJ;yq;Zmu6JmW^ARZ(!dY8=9UiBhIK&4|v7#ikWM<
z=~bk`-4-}AG<6{kexRxmDym5nKx@jnW}q&hf4GNWDG8D<3}pt&AT;V`?QCzWS)Y8L
zKag`~1VAwLahvMZ`5TnxLb^{YSapELb{$0oMI|bfdzLaa%gp140*-J~xtRjc^o3_s
z*6k5l#9SPvY@QN4**I_&20Wa$t4{PD4JxtPJs*-7C$0|L!vvi7(c?wWU3Sl{w|IJQ
zPeg>pJx$zoApIlwSJjHgiWKbC*CL&*=txSn3jXL-iQn=o>9v~l(MdZNmE2cp2|fvSy2
zmGsm6%FaJa8Q|93`TRscm?ZuQ4P^FKSay&JKKLEn%7Oz~|C$Hd)k+!Zzze=k4v9
z>>dy1;Yw#GLFJ>)h;&a-Jg#;fgXix|EAxO0egg3N`tdf%`7-#D`183zPymaClob8n
zg;pf4APHXPEwrT|@4!#nheS4aD39Xxi9|czX1n}HfqJ{N1A4?L_iZw|m&0C@Pbu9J
zmaYuugRk%Rh@x8jVl19nm?zE
zyL0gIKP$Zwbuez`tvlN;_Q}-JY$Dzj1Jboi!kSm~t$YHSobzxav-x1{LE2O*Bv-*m
zx@cWn_<>A`{^5eKExl~jAM{@-8VJ5_zF(`McRVU;{*u
z{5;P8h`K~5edhd6)?%;gnuE2fcI#+nf2FgfHU1`UuG6+POcm!Ls&-?J&h{;O)q!c=
zlM7dUDE%g{cq59(6xnf>2m3;%l2uEC6eEhB;>GrXZ78YzVu`M__2z9ZMi#_1RzDYq
zj{VESBIgD)P5Oh3pC68#Yg)8hOWs0kTb`irv^=V
zRALKg#f`Rx@}vxmJq1RMAm=M^6d~H^`OI_|2~A#nXH=bZ@l!OzBqj@AA3G$9(wETU
zU4mu*(}@7a>4_gR!yl@uP0x`yBivaAk;*@ML@+A`4ohHLGML`j(D9U~2&hof>|Va}
z3`^+^BmT~8=5GBWYxNQ7A0;BjK{3&2&QofIqb-pCq%(VmaK6pC%
z#ZTqbOZu=7LjDuI_A+b2yI{%TmetXj&_icaQHElW(};IztF%ja{lR==3WaBNEZ@^A
zPRon?o~K|W%nR7x%tqU-984=nbh+o-r`{?tPq>DpxmL!MfmE(nFf14^{SW)_5O~JVP^>E@pKoPBd+V`_2|haXfP3DCN=D^5t-ZiYcZtZ
z;N~un`<5@Pmeq1OY0=_ko$sP*ZLU514i?jo$EMz}&Yr5>#7@HU)H@
zMl}^@;K}MbIUpp^kewTq2*A^S$!v~r;@InqWO*Q*>5G@a^y}
z7?we{BV1G?!1F%$7SkTDKAhklT~~#z&)U6i;jqocFhV!Uz$0Ug1)>7~mU;^fa-Nwt
zRY>GT^hNV0(DUbM*>}imN`ssy8=Xsr%O%brRZn}Q;ajd=X^kIT2T@5^e%=A;_sVZFfTs#Q(d|_#?_+%yrem+^@ytz7X
z8XlpRE0q+J%6(@rSH;~^7FYco`}nu0$K$NN87_(qQ9B_}zLhd8;__lDlz|
z(23rf4ED+0?;zFF;A&q9S*!A@t(7Aoa=1Oj4BTLWbS_xSN|W?Jx7#U#e569b2j{bZk2}QfAwJ+Ym1NJepuC`BkK7R
zL)18l$l20j-Y!9-uOqpA9_QF&`RvWf6}s;^@TUou~5$T{^L*O8?3eE_Fd
zyfX8-tjo1i5}%QP>-U*qmn892
zGkexWEIn2QwGNMT68JxLviNyc+!{gL5RPbGH~9iSGIAeyIz5S%S*IkH)7u_RhyB3J
zTsd?1`{w3__QyxxnnP1g$Fe`eCyM{;|LJ77claBx;U>p+lpZh!Ib7PK!diLO7L=sW
z;cjMq&wCipkVTpJRiv*>|HO~}`nzn5n6akZk&~6+R-y}E+NG-@j1}zF<@uL^|5hL1
z4GYz93Vz#VF^^2kEv?KaE`)z;`X4_cPVyX>`;TO|Pdu-HOr|`3?@}1~fB0jav&zoS
z^_^R1XJ_K26%|a$N+u@xTLuhRRLw!b!Hif4F)=Y5;0d$py3u)*=X0}&iW>s~ysWE1
z8O#*?AAg#ou2(H(oYWc@7pK~SBQ8P7ip7wCmP`gCK|HDbF*CbsEkpwCxkWf%`~S<)
z0eei!VxE^1|B*--iT@oE{r}ZZk~q0u0Il6N5kAMDH9p$-GMSt-mK|tf@65Sn03#mc
zxxO9DC%-p^^`DNnFnjK>zIVI1YO0e3-Lxz@A!O82UH)SGE&tf(ppN^Po|3FqmAO^SZu@w^NnSj>mHOolV_Ufi%F4X+iV=Tj
zwS=}f`LXXdxLY~^h%tAC)rU*T=Lr-2^}uqLEdIbDmy|7y2HqOp`#R
zCJfDO5}&91mq|6ttm)!Qj2s}$hE5kz!4NX$o3C!=@bMofeku4oGWA|d;)QA&H@AGg
z_iU#KoU99Z3D|)YH@%(%^|v#NCLWx#@jUVYQ2k~
ztPN#p2M1VY!-I@I3;XdA6`w13<`z6NOq6<$>THRVN=by4;J6XQf4VO_?eE2hBkB
z3`>cNDyJ)T>gTF3lFVRQw*z_nuH%LNBMq*=YxSY%cSN^Tz)F0H5NDvw
ze<>Be2c4t$3Onr69@f0w24|x;_Jg8T5kXd^LC_@?*Bddt%{sj~;COK(-xQY7SWTdE
z!&I*DD@KmA{jx?>MU=kTZP=V}=`8nydPZzn7kb@7Gacy9A7^HDp6*m9L4PzpAM{r(
zep1#puw-SQa7PzXGsAy}7x=^$ds4Nu6i%gkAA%L@LoD3B+0NalKjuQAR*h1thyAUQ+U
zX|;GM#ASrd7k>csm1AxcE|{a-sh$mzz4db`4E_4ki|x41X~V`G
zs(Sk9^D9?8V)oUh4ZPK~J+ZYZS%gYyI|3;~`S2G6W=3X}?tTiTw^`J0Qp>&dW(-sh
z3C-p&H=mm1K3wtK4kMKvj0kNp)z55!%*DGEna^?;eNqq7#-`gbU;`H&kWlCJnEP?a
zJ`hiQbaF~FY<4D16q8k@B4~z6c^?@dTMNfE-@LE#!)zuEd=7=oJaGz*RQt3f
z8_kx0ddZc@H`i$)z+3O{kE&l#GG09U6)}+)xF=03wYgOB!f)8I$%)KE4qQxo(v|k@
zoPulXBI9kYP1R4q_6GdQ-P<&dNVa>`ezSj!&?fY+H3Z}?O=YM2V9r4=T&OZ!3223MbAW5%XSZC4csUe4Vk)QEBNyO@&1?6UX>NgxAl`$F8i(Q
zhb-gF4qx>N346s>-YADA42|-1m1%0MA0T3=#0D+n8{O4?1r+UPg5L3CB<2c_ba|yf
z{TG7fS8HwCYzi=JbbF#-{Q*h~_{#R9nqw1VF(06{TU?*JYH`09W1Hht57
z)lIqOy2fD2ofdmy+tZ1w=v`JvQB-376C^Q}Z^ou%7?f4)`8_Aw6c~Ab$v_EUOo&hM
z(g`^>Puk;!!t*7W`F@$srjK`)bAPX(Ul(tDluR~McynmXlw5QTyWpn~f?U0O>v^SS
z<1a&&+iTLo1K;!7s5=0Pp%nJ$c&|zB2Ql#m_t69PVSPeqTo`M=Vpb;}2jF#P@GT+N
zwWLOD_}@($9hmqKYDTd>i(881FiDZj58cV^1TiM62;JSKv&L}~w)iYJrsX6LpQ*!C
z6;geTq@MPBc^=On!pK>_0@f(3AEQP+4h|@fi6!HU7r@1g=9*ZNEh4cF9!`BxFxMNI
zg&TN|U~_-xXa_x>m&?=?IXX!9?D=P5pCcrjFtXw*&S*;uN+G2~HwS=%O~P+ZhKT&&
zR`yKPH_W>lHkQ*Aro1fDpx~AaU@Q