From ccdcf4e139790b97b55c364ccdbd42af58c2a07f Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Fri, 27 Nov 2020 00:09:42 +0000
Subject: [PATCH] Add latest changes from gitlab-org/gitlab@master

---
 app/models/group.rb                           |  21 +++++
 .../unreleased/275962-update-users-rake.yml   |   5 ++
 .../unreleased/mk-remove-unused-indexes.yml   |   5 ++
 .../20201124185639_remove_unused_indexes.rb   |  27 ++++++
 db/schema_migrations/20201124185639           |   1 +
 db/structure.sql                              |  12 ---
 doc/administration/gitaly/praefect.md         |   4 +-
 doc/raketasks/user_management.md              |  14 +++
 ...icrosoft_teams_select_incoming_webhook.png | Bin 0 -> 30819 bytes
 .../project/integrations/microsoft_teams.md   |  16 +++-
 lib/tasks/gitlab/user_management.rake         |  13 +++
 spec/models/group_spec.rb                     |  68 +++++++++++---
 .../tasks/gitlab/user_management_rake_spec.rb |  83 ++++++++++++++++++
 13 files changed, 240 insertions(+), 29 deletions(-)
 create mode 100644 changelogs/unreleased/275962-update-users-rake.yml
 create mode 100644 changelogs/unreleased/mk-remove-unused-indexes.yml
 create mode 100644 db/post_migrate/20201124185639_remove_unused_indexes.rb
 create mode 100644 db/schema_migrations/20201124185639
 create mode 100644 doc/user/project/integrations/img/microsoft_teams_select_incoming_webhook.png
 create mode 100644 lib/tasks/gitlab/user_management.rake
 create mode 100644 spec/tasks/gitlab/user_management_rake_spec.rb

diff --git a/app/models/group.rb b/app/models/group.rb
index 3509299a579..0ce5f0cf2cf 100644
--- a/app/models/group.rb
+++ b/app/models/group.rb
@@ -402,6 +402,13 @@ class Group < Namespace
       .where(source_id: self_and_hierarchy.reorder(nil).select(:id))
   end
 
+  def direct_and_indirect_members_with_inactive
+    GroupMember
+      .non_request
+      .non_invite
+      .where(source_id: self_and_hierarchy.reorder(nil).select(:id))
+  end
+
   def users_with_parents
     User
       .where(id: members_with_parents.select(:user_id))
@@ -428,6 +435,20 @@ class Group < Namespace
     ])
   end
 
+  # Returns all users (also inactive) that are members of the group because:
+  # 1. They belong to the group
+  # 2. They belong to a project that belongs to the group
+  # 3. They belong to a sub-group or project in such sub-group
+  # 4. They belong to an ancestor group
+  def direct_and_indirect_users_with_inactive
+    User.from_union([
+      User
+        .where(id: direct_and_indirect_members_with_inactive.select(:user_id))
+        .reorder(nil),
+      project_users_with_descendants
+    ])
+  end
+
   def users_count
     members.count
   end
diff --git a/changelogs/unreleased/275962-update-users-rake.yml b/changelogs/unreleased/275962-update-users-rake.yml
new file mode 100644
index 00000000000..f8cd1a6753e
--- /dev/null
+++ b/changelogs/unreleased/275962-update-users-rake.yml
@@ -0,0 +1,5 @@
+---
+title: Add rake task to disable personal project and group creation
+merge_request: 47655
+author:
+type: added
diff --git a/changelogs/unreleased/mk-remove-unused-indexes.yml b/changelogs/unreleased/mk-remove-unused-indexes.yml
new file mode 100644
index 00000000000..50969f834b8
--- /dev/null
+++ b/changelogs/unreleased/mk-remove-unused-indexes.yml
@@ -0,0 +1,5 @@
+---
+title: 'Geo: Remove unused indexes'
+merge_request: 48504
+author:
+type: changed
diff --git a/db/post_migrate/20201124185639_remove_unused_indexes.rb b/db/post_migrate/20201124185639_remove_unused_indexes.rb
new file mode 100644
index 00000000000..c4b0d8a84cc
--- /dev/null
+++ b/db/post_migrate/20201124185639_remove_unused_indexes.rb
@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+class RemoveUnusedIndexes < ActiveRecord::Migration[6.0]
+  include Gitlab::Database::MigrationHelpers
+
+  DOWNTIME = false
+
+  disable_ddl_transaction!
+
+  def up
+    remove_concurrent_index_by_name :packages_package_files, "packages_packages_verification_failure_partial"
+    remove_concurrent_index_by_name :packages_package_files, "packages_packages_verification_checksum_partial"
+    remove_concurrent_index_by_name :snippet_repositories, 'snippet_repositories_verification_failure_partial'
+    remove_concurrent_index_by_name :snippet_repositories, 'snippet_repositories_verification_checksum_partial'
+    remove_concurrent_index_by_name :terraform_state_versions, 'terraform_state_versions_verification_failure_partial'
+    remove_concurrent_index_by_name :terraform_state_versions, 'terraform_state_versions_verification_checksum_partial'
+  end
+
+  def down
+    add_concurrent_index :packages_package_files, :verification_failure, where: "(verification_failure IS NOT NULL)", name: "packages_packages_verification_failure_partial"
+    add_concurrent_index :packages_package_files, :verification_checksum, where: "(verification_checksum IS NOT NULL)", name: "packages_packages_verification_checksum_partial"
+    add_concurrent_index :snippet_repositories, :verification_failure, where: "(verification_failure IS NOT NULL)", name: 'snippet_repositories_verification_failure_partial'
+    add_concurrent_index :snippet_repositories, :verification_checksum, where: "(verification_checksum IS NOT NULL)", name: 'snippet_repositories_verification_checksum_partial'
+    add_concurrent_index :terraform_state_versions, :verification_failure, where: "(verification_failure IS NOT NULL)", name: 'terraform_state_versions_verification_failure_partial'
+    add_concurrent_index :terraform_state_versions, :verification_checksum, where: "(verification_checksum IS NOT NULL)", name: 'terraform_state_versions_verification_checksum_partial'
+  end
+end
diff --git a/db/schema_migrations/20201124185639 b/db/schema_migrations/20201124185639
new file mode 100644
index 00000000000..9ca03d7d837
--- /dev/null
+++ b/db/schema_migrations/20201124185639
@@ -0,0 +1 @@
+dd36b2815c62ef9710d88fa92c410398a228c50a7e51d44ce02e85c9f63d648e
\ No newline at end of file
diff --git a/db/structure.sql b/db/structure.sql
index 54888195975..3be04c5f68d 100644
--- a/db/structure.sql
+++ b/db/structure.sql
@@ -22513,20 +22513,12 @@ CREATE UNIQUE INDEX one_canonical_wiki_page_slug_per_metadata ON wiki_page_slugs
 
 CREATE INDEX package_name_index ON packages_packages USING btree (name);
 
-CREATE INDEX packages_packages_verification_checksum_partial ON packages_package_files USING btree (verification_checksum) WHERE (verification_checksum IS NOT NULL);
-
-CREATE INDEX packages_packages_verification_failure_partial ON packages_package_files USING btree (verification_failure) WHERE (verification_failure IS NOT NULL);
-
 CREATE INDEX partial_index_ci_builds_on_scheduled_at_with_scheduled_jobs ON ci_builds USING btree (scheduled_at) WHERE ((scheduled_at IS NOT NULL) AND ((type)::text = 'Ci::Build'::text) AND ((status)::text = 'scheduled'::text));
 
 CREATE INDEX partial_index_deployments_for_legacy_successful_deployments ON deployments USING btree (id) WHERE ((finished_at IS NULL) AND (status = 2));
 
 CREATE INDEX partial_index_deployments_for_project_id_and_tag ON deployments USING btree (project_id) WHERE (tag IS TRUE);
 
-CREATE INDEX snippet_repositories_verification_checksum_partial ON snippet_repositories USING btree (verification_checksum) WHERE (verification_checksum IS NOT NULL);
-
-CREATE INDEX snippet_repositories_verification_failure_partial ON snippet_repositories USING btree (verification_failure) WHERE (verification_failure IS NOT NULL);
-
 CREATE UNIQUE INDEX snippet_user_mentions_on_snippet_id_and_note_id_index ON snippet_user_mentions USING btree (snippet_id, note_id);
 
 CREATE UNIQUE INDEX snippet_user_mentions_on_snippet_id_index ON snippet_user_mentions USING btree (snippet_id) WHERE (note_id IS NULL);
@@ -22537,10 +22529,6 @@ CREATE INDEX temporary_index_vulnerabilities_on_id ON vulnerabilities USING btre
 
 CREATE UNIQUE INDEX term_agreements_unique_index ON term_agreements USING btree (user_id, term_id);
 
-CREATE INDEX terraform_state_versions_verification_checksum_partial ON terraform_state_versions USING btree (verification_checksum) WHERE (verification_checksum IS NOT NULL);
-
-CREATE INDEX terraform_state_versions_verification_failure_partial ON terraform_state_versions USING btree (verification_failure) WHERE (verification_failure IS NOT NULL);
-
 CREATE INDEX tmp_build_stage_position_index ON ci_builds USING btree (stage_id, stage_idx) WHERE (stage_idx IS NOT NULL);
 
 CREATE INDEX tmp_idx_blocked_by_type_links ON issue_links USING btree (target_id) WHERE (link_type = 2);
diff --git a/doc/administration/gitaly/praefect.md b/doc/administration/gitaly/praefect.md
index 160d9705639..dd0b93b4e84 100644
--- a/doc/administration/gitaly/praefect.md
+++ b/doc/administration/gitaly/praefect.md
@@ -122,9 +122,7 @@ package (highly recommended), follow the steps below:
 Before beginning, you should already have a working GitLab instance. [Learn how
 to install GitLab](https://about.gitlab.com/install/).
 
-Provision a PostgreSQL server (PostgreSQL 11 or newer). Configuration through
-the Omnibus GitLab distribution is not yet supported. Follow this
-[issue](https://gitlab.com/gitlab-org/gitaly/-/issues/2476) for updates.
+Provision a PostgreSQL server (PostgreSQL 11 or newer). 
 
 Prepare all your new nodes by [installing
 GitLab](https://about.gitlab.com/install/).
diff --git a/doc/raketasks/user_management.md b/doc/raketasks/user_management.md
index 717b6be7bff..4152b348ac6 100644
--- a/doc/raketasks/user_management.md
+++ b/doc/raketasks/user_management.md
@@ -60,6 +60,20 @@ bundle exec rake gitlab:import:all_users_to_all_groups RAILS_ENV=production
 
 Administrators are added as owners so they can add additional users to the group.
 
+## Update all users in a given group to `project_limit:0` and `can_create_group: false`
+
+To update all users in given group to `project_limit: 0` and `can_create_group: false`, run:
+
+```shell
+# omnibus-gitlab
+sudo gitlab-rake gitlab:user_management:disable_project_and_group_creation\[:group_id\]
+
+# installation from source
+bundle exec rake gitlab:user_management:disable_project_and_group_creation\[:group_id\] RAILS_ENV=production
+```
+
+It updates all users in the given group, its subgroups and projects in this group namespace, with the noted limits.
+
 ## Control the number of billable users
 
 Enable this setting to keep new users blocked until they have been cleared by the administrator.
diff --git a/doc/user/project/integrations/img/microsoft_teams_select_incoming_webhook.png b/doc/user/project/integrations/img/microsoft_teams_select_incoming_webhook.png
new file mode 100644
index 0000000000000000000000000000000000000000..5fab8c7754041b793f4f97514e7cf31604a7a88c
GIT binary patch
literal 30819
zcmZ^~1z6k37dDC&DJ?FgI20*b9D;kHxVsc9ZV3>a0>z5EyK8ZW;!bgQcL?q`-Q9n8
zzwh1~o{-7RoHH}$cV_0un;-=_$=5I6zJ!5+c`fx(ObG@C_5xZ?Lq>%D?;5#*gMoQv
zVlFDGASEhFrr=;}YHno$1M@K`Rvk$vT9UBM**K~K4l@Gt3QNoshJd^T8IJXZB8n85
zVOIi%*y5zpivv7GBHYqoTCGy=NuR)Vy5I#sFnp{uBbrWuJ3iL0dE1B9o$IFSC-8B@
zGuv`gvop*t5Molvr-JY8ZtlY;K;g&1!VxO&icIT`QqYc94|(yDfQE_btq{TfGgEmv
ztk{&klcN2j<3n3;t3nP2jCYP`%6k=L2)PX+3^Qim<_j1M(adF62_G5%ZVbXcLvM^x
zwKXday|Ru(i)QOz)GTSJ_LMNjZ_}Aa5rvv?_ci^$TJ>c=VtnQ*RG@ev)C;pN<deYc
z$BntJczZjc;v&$6_Dc`(OfGOPQQyw=IaJUwA$@d|q-Vbw(VvJ;u@7>?_B=ZNVB0^c
zjCNb$8%iA~*;5P&;AoEIWt8?e$GHB;X7pLL=G#rFSV0*t46SO(cNwLH>^!&^_|xdE
zAn!($+e}4_WDz2!;gF!|UAC%sYkYxg7Q!L#UNnmhFN#x$Ykd9Y=<BZKeuyy=<;auN
z0CK<0(2w;fX5|XXUTY)AJNtH{j~jxmOqK`dt%yq1&w^noYL(F^8>qBkpw|7_W+)<5
zhoC%o1@Uw3$G4bS+r8sen`>up-85T2)9RO~FsyZdu`}`EW>L~5wTkx^eA9;6bxHA_
z#yn6mC*ci$Oo#%`+q@BCOMIzl_S?_SCNId(k{Vhno4G^z<?yz|3og_!l4)OJvpb&s
zcwuK>bbIziQ&=YpAjd};Ajl*~jIM{A1&i+oho{gHhmz+*L}q?szU$LANx9~YzDY(H
z=p7=##!hKsC-yQOCF9KlN+dGvw;lgiVZlP=lU_vAMd?grmUh*4b`nf32=)SjaNyHA
z2fH}ntTw9)GDnn`3x2!Cxq))%qjIlL(w9&Pp02@hg35Q_FhzqRyX>+kZN4I{Ke@2G
zBX(|wRoSm(ei2;2Ccy+CU!$m_r1~W*Q&B<6KNFw>$i3>RH-?zmdXC8Q@kzcS2|4wB
zXS2s%{puznNW_Qidi7PSjM_%^xWp@Z#|}|{QpZTrK06}@GsYmebB3)ZwYue-rV8$3
zrNF)hTR`yuG0E+`;B^Q9)sXbEhN>2s*Sp5B_XpdoVF_$Sg^>oO6A5otN2lfP+Unc4
z5In&*@=TkN51pj?8_KFu{@SJ5bqh$tZ)h=aaSJ%#I44=<=|nLy8Q8C?3w5nay(r7p
zIJP;qfhlNxzu#6EKlIb~MF-!#rusOdkkDa!d;8jG<1PgZT1ShR$C;*C8y-v}viHO}
zf;2c&E1;MJ;l?%t-Z_Tl1JZOmtm!6NvyUJ$qM-p%;ENzKTp1q_UgsqP5?i}f1x(CW
zhYF$+*n^*@6}X28Ztb4GV9<OwR&ltIn7$UT;^_$LuD;)WQ7$a_mF%5g*ar-wF1R1!
zDVWZFp$HU)AK9_Ob0`Qta#D!L^jU2Z<`8KHl}Of-arDXek#BN4Anpm-P+UjYY`%by
zbSu2I@J`Bf+Wis}>hOz}9W(X2Y4*g}XCQeaPN`V&*wPn%S0erZJ#pT#{4b=49~i#}
zX?|vUL%8wzhsN7D|Nb8h8U$)Sszx9UZ1;)yA95u~ZUNZ#h$9`kt8c@)qU~S>h|@!u
zf6i?1p1C&TwtZjebUTwr0Q`(ul{uw6MaD*%^CR$65_w_ByGFM5Zc$d(Z$^wFQmUHf
zu6-#%dWd|4f{EPb-7ys>Hg6z$pvOC`{)A1Lmt@^hH#u-h@6CzLx%S@dVHJj4#FdEG
zk~Kwl_M02OZ}8I*UKSUSZWZ&CInLizvU=|sqY)gz8eRFlGIU(5L1-`QLiw`bY7)kR
zf+L{OTT7}mJ1u89uXS>KymA~em6Sm>mQ=1<SR;Q>J<VV0%<hqd9s220{(JLJ=Dc5q
ztCOqafq<nj5*hhy{9p0omb)~&&U>~s1oLI{eAby)d`EOgu1BBdM}f3}S^!b%dq6h;
z7k~t0+P&CS0v-Vy8r_!~8dVzufaM2Qdn^|{yWRU+2aID2xy}+NK>|`Ma)L7Y1#Jpm
z#ZM@YNUy#d4zIEze7AkG@P>v!7f}q}4L(gcOt|4EiLaBdo~VbYe5Y|IMJHV+<+oIs
z@8-RmEawS>3HOOJ2`7>Xp{w69LN)lZY`StWZNE#reL)!Xec=1mTU`!U+aXpowh<0J
z!$kx4UIZ?C)<gr=PUGl)spzywM9N3WmlAQIi-Hg?<;lr@_GMt)p4!BDo`>nSDW)lF
z708rk$aN@j`{y>#cJXj{lC$;)1~|rdc*Trinh!r&jqNqSCDLm2#WUlRtm8`N4c(PX
zl`8|wbp1tL7UfgKmPH&3fI-(9Pzb0z)PL9|d5*J&vu#evYOeP4LQSo8t?l9Ak<wvn
zm1Tw7XItaZD(2eqnzkb$XJm(jV}&ET?#SIfry<bduFDt-2;zXntIDHmCz0BcN;N{5
z$}52>aT^vDRzw0?^55>Te-A7KHS7!kL!B7yt?fKG=S_k0ySUj45?&7H4ug&h+fJ6>
zpAzhiq<h#y!E48xOm^iCZR^6<$kz!wW4mXI6LZR&4gKfe@H;J=XPosI^+;Phnzxog
z%S!^B0t5nt?qyZ4XYCKE4kua>Rxnn;tpOe@x8Qr+o1^Rd!If^o8L#-~=pR=`;zo6$
z9vB9=?dY>uzX<wX4k15~SFrW529l}}0|jRR8gH8UZ&-RGqdVt@!FcO<6zDu}Am0vp
zQ#-BEx<x2O21OP+FFK<-rURB<*S#D?D}Q|wdK#R7J4PfG_&rz$6P#++gMDh@(z4;+
zGfXh^Ry;&HP>U2KIR9RYWQm=GSkUI7=&a7j$|#5B^$)T*{3g09xfGAZi+X)(44N+4
zf}~SgPnn0qn_2{kj!8dVlyYoQtaz$rX@`$W)HUx8-sRKGylay}k=0Bb=dr)&;=vxx
zP0Ep0BAobW-fzAzaYyYhtHoAGzeL}{{y1-Z-!C3LD#MZ(#kJL^l3Mssh{TFa@SdQF
zRp8X<cIu&3MsNGukRGghh1#jg8wMT5L%bJ(YQZFCFN{lvT%(91TIiaziQbh#Z}Ix5
z%cvcmNS<WJ<;|Y$<38fPPyGwY@*|^tg72o{x23i76XofXrpX=SVg~^E_p<tIE$Spx
zD`i4B(YT>65Km7%_4YCz)WGE*Dk_RjkG^jbAO&9p=ZNo^0fu$>&h718&cdrsHNR>y
zRxz3}CwSPRnT^CX^eqlGFrJs}Fs96K2!4JVc`^B-0o9Yyo?cTEvY#Adn}nCdn9_Fo
zvkr4*I?f_~;8VHR&hyf?_zgvW)>Su2$PD9?3N-_-_OY6t;*(*JLI2!Iue<*3WBYhX
z?$Ka#ytS5`4wJ5@wfL{#RQgLbymI#ni-)4Ssgfy^V*S#@#%&pYv+nJh$(n(h)Y!4u
z&;zS!M*VBU7MI7VqKKjvLK!ZG<x|sayNz7gpUL~2$<|CO4^K$_=v=j8R)yuY#bvY7
zi(2)UW3`*s)`FE@C37~FE$;Wd#N))Nyc^E7(>IfohpbCAC3vN((@rOHD<1apyJ<au
z_(n#zM7P0fACCbKuZNhkiJC{ndu_A|^vOr7`}1$U-+fIkKRyoKEhE~Cni*Lb^=8@!
zXeB))qdl$P4Tg2b1r&$9A<=Y-aRsi8`51Ng-X)m~^Y>PT3w}wQcR1+k!dBO!sjf}`
z4glY&+!SJ4r_>td!^@EhY&dWK(!84c=D57GKkAk$cvC!6j<nFSaKL<{^QC#$?MI=J
zRqxm*;rK9pv=;aMmnQ=a#VqQ)WmLLN_WX~oJFnM5X}Hd91fEMz>z=gFZLw|Qm&RI@
z?Po4*E>FVRPL3{)`5c%pmT&J-u5I}-_+0K3&Q3*VIwUV7al;u&X87#A9O`+S@7GDA
zpLSj8+~!x5@A8+^3DbD^?r+Oi+eWVC4v$=!yaY}^_kY@m=hXwZTI_`!G~EN9LC?vR
zbv?GutwwE@Zt0LG`{(cIIq0#Z#Dbh2!FND6GA{$6p7?X5aJV;CU)1nmn4Q`kMd)C@
zhnzlqkn-3e#1Zq5Cl*^3G`wuFQ)q@Q@J-#XAF)O>AhmKjU&AE6D#~{K{6UDH?_072
zjwZ>m1=HK+GmK@lSIzA3-jfLJlDF+b&pkdq;iqB2O9&a@#=EjYEQ)5r2aEy{^-#a_
zpXyny0iKZ?GyDqTt0=9<&oA<4f-F3oa-5-lN1Ta<l&P#N3>~zL4D$jO3kDuqf`$IU
zz`lif@mCoJMjDpzPgx0;_Mbjbhb6!q2H~GRTF}qmuL$THO8w6#eAG7>B<MFR=-V#?
z?ti^uFEZf&SB6Q0w!sK1i%LmBKb4IfOiXMXzt{rn&dz?fpxAxXbcBJyqx$`Zl~Q_l
z3IhWNG*{68YRJj}jBKr$42^9+n=rXp+x_MP!{-8k7OhQyhGZ_*RyK|R7k-MrdH|s1
z-_^_%WPf!5TJlq9$SRPD+B%q!aWJtneV`C{Nk&G-=U{9KP!f~)haCEipW+J;Xa`_s
zc6N4Va%N+)bueRQ;o;$7{=mx2%E}1s!RQFK0UEk6+Bj1F&E$W4#7rEG9L(*2=C(Fu
zzxf(|wgmzCDJXsq^yl^WJWX88{~gK3@t<Wu7s&j(g_(uv1M~kE8PMGH|A*{%%im;w
zt?TdM_<l13s5+WBh}v3Po7eya{*^f2UnBh=jsMQ`Z$brg7ZWQDF>@%TBXmsyEFV}t
z{6qGCH~oK-YW_>g#`=Fy{-@<Xl)u*ikasYLPSo(X5CvHHnEzjO|95{S6GvMs(C_Z5
zHs(M9)_+L;uj+rO_?Uk`m;XGczm?#xTBsHXyyRp4qfr7cqe9pPVPJ${q{M_(Two7V
zk-TxIrh3t}_rzWG5pwA%$ke))QQxY3XQ?gdn*D?&dlB-Z3(M{E$y>LRU}9X{Za8U7
zb0slXGv_tlHnx-IRO00hxR9pymQyEF8=mXM=b^=C{+;E-!rE)kow67VI5=1zZy_Nv
zG7OB_0?fYof*SMzB!oY;2FM5^==dUkwId@VAaKGWz-8LP(Xg<SLn(gOz`^lY!VA|}
zP)uEn4tzLh<*e{;{+Hz{a!m3sa>rap&FU`=3|cxknD>b4%qssQ{oN6aL5rU$x=pWE
z64S4YFMZ7<n`3=|sMP$~f4u33J9r-j{AV`MIeH_PME*)0@=9z`d2(3xap)s&`t*1Q
z8ag7;JR($RA_M%H7Oam0d4-mUGuQq1#E`9om5a!YaKSFWvPr3nk`jZ|c+|Cs_kTLK
z!NFOQU07^eq_cY@UL4GHPHMI`D?lI)QzGc}8=n5>*hPOY_V<h%Ff<r5oBX!A>2qB@
z%ZN?QB;^}_%=7#GBgfwzixA<qT+xX4^&%_#d=2$D<aB;f{29z1VL*JBd&XCsB!Kbo
zkFYZ=$Q77G%C+c_tpBs%j}#R@QCjGj(u#utRPr+1Xn%<uI*aysvcFmy_lvXSEFH&1
zmj4X@4s&+ZFRi44H9R^F45?=Yp@RO5V&H*MU?&nDy}3J<y>(FD#`&nWTl|?nf+lTr
z!$VumRr5?Q%v!08R9P_YHj3)gCRAo|`kuE`mzjxCJ9~qaf_mz+=>MC8kg9M-2MYgk
zMW$%LKyi6%QkX-BpT_O&53|z^7l3)<dQb?GVAvp4n30IR{SRw=My+>TOTcKERKQf2
zZtcz`B<{`AZw>lOUkoUPGjy2aG?Qz&eU!Glu;pd&hX=GkhpXTX;}oV0-W(%Mn!%pI
z+g986q$|$ghK8|)qqiIu@51@75+uth76y5L=CgfE{UZexLj<~%UmMn`9F}pKGZDM%
z-61B&iw#OmPSymxP9+Q)6+(^9CrqyiIji|1I5+t{A6ydoz?EAI7R99(q8~10-{D=>
z+ix()_l6PYg3q@l76;>*@%Q^jN8@=MxBGIWqH`=~%Eoh~u&X*GL*G&jCvjj82<@k}
z>9x2jRhi1(-tMF`dd^jvKpwAGP|ubcK~?oa`)5@ISMYx?ID?KdVyU$=EIu}uERHGd
zNNOU!FUZ#^3Xd^qwrMFE&#}3AR2AF#e3)xc+qQ+u?WCpd;j|OIaw|^zZG*_rsNi#R
z^Tqh5@is3n%9Gqr@dKUcf(-F`u7&JhehDpucZezPzkY=yU^NcZya(-1vM4<-tUOZ_
z1ArgEsQ64Vj-&kQBpw%v(dVna=mUY6ln7sYww{-qSN0@LJZVw^AkHk)<CLH6YXPKX
zN9N?$i;m%Y{RT#N7kds}n37+X<v3?E9?!127XB=Vj7%XGgSO58xZLL2x(N4}X>_un
z5p<ArDVu~2SG(frHfIvA>(_9&@_6hlu?UZZ7E`z4x$x0#zS>;kPF!3(DmvO|`hlgF
zh;p>;wE1w>S+dx)m)JRmGMrn9S}uup(&uudef7HSx#f|m`Ba49gMoLq=rX_C75jQ#
z+CE27GLdnUUc~KLFDbJNmeVrWjAy^V=Z+=GbG*{z(}Wkunw@-2{?AcHN8qDMQ_Dtc
zOmuAdODSZGtbqelmyh_Xz^XTVj%4_5v2}ePxzpmN-?gBN{&CZZ0Oh&KV7!!*Q*F1=
z9Qs>!TG?$ek=g(frvl9tBBL?UE)v(veJXW*j~YyNd*a%CGVA$j%#zy@3(c$~H#Nt{
zbazPqUh}5qR8dWL^!o{S_eQ%}ls`KOS2)AnFYJI{{Oc(=rC??<%w<`t#sZ~Fu03|R
z8E`)Dx1RO6P_L!&sP{(gB`WH~`EIKc|G>Mr9syr?okNmlv=vh`6I3P-X89$O0@Cq3
z5;(`h!zRg}=l<4zR$Rmix8>a6Mvukh9DZe;(#{{ocy@OC<s(iV7lO2b{bGK)C!Hjz
zM>S@(c;0%t=bbqLpGyTJkTOl&ks%GL>#6;IL(vE_9#qqp1Hi`KrnJ^eNb9A`N~3@w
z;Xii)tWQy(Py=!cPC)t3DH0kXwMsTYSz0Aj_su@VN(b@HW9pR-|BxYRn#YPxv}o8y
zveIHEr3LG{C95++zu|{#VI<;r@%o+(kpSjz4M(*Ln|+kwDl;zhiGp6OGKs8I{2zqy
zz}v&g@mKE@uDgP;V;{(GV_B_cE2{Io-CM`gDmBhtF)TLH$f-^_9Qyxz%@hR*-KsUn
zYg5p?+Al8dNTypWz0;}Zc%3E}NfO86_nN2HdO>Zz&bHj<aI2QC#W7wkDn35Gc6y=K
z+USho<AP;5|0SbM`m9JpBAeN~g(F@b%L&>UB<ihN=}FT`Ywhl99*rHoI0<6DB8hgB
zk(XD{op%mrH?+=8qHAQ6W*yI@I}{r}lL0zVOIq$Ixyi~B(S5x#HNFvYCu4Vm{YQFq
z!9q1H*SuV;iEOk9vAF!Tmrtj2ke~EB(kFTg1yni(?+Q_;t7ArsX+i*X_Z^(bxYq!&
zw$I}B14?CadN&e{O{<aJFI~15P%t<hH(SGH^fSYn(mb4_n^ceXUeT(R>11BUOopZ~
zq$*3^cXVV$@jR?k5c-j|y+z$og2z(j`S%i20V50m8$`d<C*8&liBFKMXIi1ltq|p}
zgE~pXWHa2w%Barg`%Zz#iAH^dBK|`^Qpk6S_^C+<Fq(EY5}G$fYg=VFkI3yBBA1J&
zb#;hdlYP|ZIC)trx@G=0Q$?AP`r%*gpAsd5&y*A+QJ*Sc?6#sZMzgHCOT}PusZIw_
zbM|~Y^Kii6LsOy_I;_74366W4>Ch}<!o60dM4Yviu(}n|DM$$lb#B=8J>D}KmIM!y
zF3d3OMGPg&A@lxqwfwej3ObNuD1bCoIjwU+0Sgo&@6`J@^i5(zAw30pLF@!kCQAUP
zj;jZgZZ}t@Fji-a_B9^qzSIPlr<>ND5u6?K|Ejp3P|~kK3TD31!uO67$?i{-6nadp
z<?oZ;Hk6hcJjf#|h0_E){<(+{5T?;!DKEyw4&fI0iHYwwOvkeIhuGq4t3MIvGj5E7
zbt>`XPX2RqK?z8GQk29}qVP+R=zo-D^I@V?S-4X<?#K<8L-IaMy9Fuj@lh$Njp*)>
zSc_L@4BJ}f%n)JY4*M$$QBpoO1B2qp^aOP4OeOS`)TC7a!{;tbXBSaP6g-KLp7WTR
za5R&CeO)b0$N*s*^<3IW-0IP%V{HmAcFLXhL2xrE;nn-aX!F8#66=L`)MC^dI{7kZ
zoAUc4qmp;?h_<L(?kjbP#@!R{>5Q2Sx>0+2OmwOcE&@_PrUO9ujQMqrL`-nVo{8&C
zXmVqN^cEGPy}+kx`scK%=z^JpGft|ykE1y1Pg?53dk`H??HQw~MXJkqn%8r{ugm!0
z#QKL#o^!q~x0Npr>^}!%$9bq%CUg-Ol)y%;>)?T=6W559gWy5tPhmS}r8^;{z1RFp
zb&2Dw-QXt~ZHRW@#@mH(D(#JC52`bhbo9|q&S*W8?npsRbbFH*wxZy{9NlB42>f!F
zSRI40?j5lfCHxX``u4{xhW<{_;gp*vt||qSsyJP^4TBWN<>$iIE>)>sY~iFG_(&Ic
z{^j$V=@%w^)GWEdTcQ~x(KGN4EhW8X!RHTF{7W0_y=NYS#a<;^@SmqR!KqC26P&8-
z%2C~lG~`T{xcr}wE}G9AT5Z2#d9n6iKJ>E-+U6-qGnbEc$Eo6J=EO!xWwHY69+HT7
zQ}x7MEkWkrTu3I@x%J{t+_bcW7}9shOG_SIct(4t7sPl3uO4ah-lg%!rw?tsiR?9T
zeUh<Hqj^u0Hlq@}Cq6%q*gI^}eIR?>yAbz&xI8llO;3_lVB*J&a8ljUftK=<apTMZ
ztF9iazK$nA9x|_Nm^OOe6+Rbkv<sp>2=48@?l*J5zU&$7-O_%#NFQ&c0tF4y)||lP
zQfvfBEv;|y4cFyBO)-A22kwRwu#CQ?jubCnC@VrQ06_P1AZ)NtRI7Q!MYDWjD^4{$
zKFC%#Pqo-fM}iOiK4(H7Oe?;tm`OX=Pw;gmOD^pDy<zah(Sj)C+#&ZPDK;f{qMKfq
zr1U|YMe~dIAF`zR<$*X)i2t(_$;c|6kaJM@%@Zl#W_?@M<}4<c7r4v>9?S~^oR^g#
z?sH9fol|m$dep75$BsI5?*iWBVqF@@?rmPfin<plsp;^^SC-i|n<5Oj2~7Jr=ACcU
z#OI@pHZ|BrbDMTBDeGX>O>JrFYAMNaGldFi&YA>6)m2LisIu&yIA9ZIZ{NIrANIoD
zZ|YJraX>t`XmZ8E?Z_>RqgVE>zUD}*kXdfxIvamJL<fyGC%)QZ?ql#}s4ZS~HFo2e
zTkz)3JTWzt9VP0pWFzy+j`aVY5-6}$zm@>Z<OUi5D(3Fi=2L(5*69L8U5lx*L|2c4
zA`n1RdGR{BL5KY;%?xxKz13;|=Wd6C%f<ZIu$ZbQrD6f<krijwYu0J|sP^dzG_^OL
z>v%to)uH&G&aq)aBXng~IO%T9o+m2QGMcnzuLPhLjcI@MPy7~DSGKSJ@e7+VE8-g^
z99Lh8Sv(Pb4BU`Cvhqq&qt&*Z>WNslw7e=YCUfkh{LgW&DkLOmis!L6^l->>p!3@C
z5jl9o{vcfo#4bO8F7NrZ4JMP0onrUj>v@>iho}{t##wv$+AeD})lr8rq&#Ks2bS9<
zpa1*V_o>c~l1$Zte;g=PWS<muy_BN;8#?Zp??#VP+hC3*yyq{rfgwuK;1-$L|0s)s
zCi15H-JU<E{D^b!kB+&rUtB*~oR9AZ;~1lBt+kWF=H~XC$5i4*GXHg;5D>7CRg~8`
zqj~RkgQISOarg9pVDWD1mDp<n;?s=Ik5Ew7KKz*ttdF!Lnb|F5OJeo(PMXT5Z$WAa
zIhC6VlsDm6nSJZD#6i<y+k)F~w7y~AIvN)NTrOu?n#hV8Tgf3B-B@s0zIoaok2XKs
zxDkLv^`3E$BUiJu%Ih@i@G-WY+|FXHJ7gscc}3q6ZRA)nA2r@gZwxjueq!3<4}GlH
zE5kk`;j`sqB<b~3`qta<s+MHOB<S3MX<;I&ca!SfM)X#Hbj+IlS>>6>cr<xp+8*~Z
z$#`_HePWtK%0X}IU}$fz31<2$d(E`C7y?1+@R^OXGr&3|>RykNgtVOPeeXonf{Va-
z6oi}FMPSA3z?@_U%J;?|i1RocgBO1O=yL0l(%ZXHKm(Q$SYJ19)sNF7A&vJZ3O8Gs
z;2Q~-8pK(@oxOe_ktcw*c46{`=VR||&C$FY><;(v0xf)$?q8{QAHZC{y#GP9OFFvI
zdj=ud0qcbA^yA2<>|{SAL0pN?tSe=d<a7kgrzTU&_(o_H$sKgz^UHytVm`TDjh%+O
zy!sen=xqOWrlGD#KeE_pMs7@?9&EDVJ3~D%DZNT%Pv+f!Hk_I;S#j5T*y5h26_X1H
zYZlMhef3<m9ToFmqk#@Nhw&n?Ubhs-tqMivIK%Hh)-(g0#I8*&P3lq4PLZpWYpk`T
z0>dArNalbuM_p2+wg17Jny;i3=Q`kYefS?6!dnPe$N*PFeji732M~}ZgWUUPP-J8k
z0tB^By8<4^3v}5ag?E3L!ulv7zsbxe4QBRj@CE6;tg`!e3(*A#8E2|HN=vpyNlxi3
zxD@sN$MT1RQ$_L#{KclRZH_e>p$3{nPx|9`laawd7gC$n@@idASIhgqdR^or6#Il{
z@o;->k(>9T2+>72<d67Na1kit-4Lzm9Lb4DL)JP!Aka8GE65<Ka%rfTOg3<a7Vh7b
z%4+`!OK1op6s7p1CGKo*OM7~@;^5)U=j&8eRZ-E<NL~!ub?oTzEdPQ%5ej|FVP&AG
zq7p-*VYTZzNKg7$q+V`gdj?NKdJ|LU-dA@^)?R~E7CyY=9uQ~KimdWpBw&cV&>t0l
zz_PrBdc~7h3FTAUUXgy$(VQdi9C#-+SFKd561b<-KR`FpP@!iw!7GS}A^3O^Jz1zL
z2|Zh5uilizpT1=H?kV{EQ1u#EJNp@xaM!9&F4?hj6yCS!wPyNERiTwNWAHkXX&a)A
zC$T!BXRM~PNj29b0Y(8Gva!BHKUKUveB9-E7#|Y7rWa6V5BC&z_T_%SP`*qe1=q4m
z_FmQXvfHO}y_OvFi986@og9cD7tL|p85yrI6s4?qExcb{XF8k&x#U{;II8DSQrhBn
z9rdt(tE8ina{QgRTqd<D|3_&4d2357Jw=I6nM%@jXfF@gl_X4;#8|+7{N3JoP18^!
zo3_)uz2qgeN}X`Pjx+JYtY3L=dUG=$p^T5Lo?h9MzZ@==7r%;j?icYIelVI^VL=LJ
z${YigLxpIaK73t0K7FgcT<i?Jc5`cRhg}QKOMiH{WE42Uo*~^&r}caGKb|3j%#dHA
z=u&N-kH)8~KgSD|Y0T#;b0hD>@pa$nHaSHv*tY3PS;@^4x5lZ)((|U;Fdn({TDQcq
zTP)H#oLQD1Zu++ZwPapbKraI4=~wJzLV+`)Kemn7#RxnRP7Y@!IR)b-Ny0+ZakPml
zZ@{jgZp%^ryHD8?p~|i?uSoiQ(fWjFX2M;ksTD>plK`M3_tT#NknLpK{y<E9lnIQK
zDi^|%Gz7f<MxHCqdZxs6sHsA)HW60OXKZith6ro@viH1UF{UvW0_G76m?TC|-0Ygz
z03`{yGQ}}yQiStA)yt&uQSsko$>_wrzLB0%ZCtKjbn#&F<-kqB=F=JFJ1-eZ;#e4&
zn2;BwoXC@<SG8^CbI|3~j*lP04!?d#>ou_(=D)m{U^VRUy8y2?hVDqBwfz-o4HnNB
zM@c12MN1%j2w`qx|2pry;!#TZm3=qI?gv}C$IV)R)X{v+7BuR{>ELT6?F>FZM{E3`
zz5>0ezz3yVTV2?4A2ChEq9#%1vL_yH&qM2Vy=buJJ64U)*1IK2s(*aLdX>8L^#y7P
zQEJMlPj(G94Y7l#XWCFQ*XUd2Y}eP8yp?ziItC`~IrbYpkYB#&eYZQQ$#L*OW+tjt
z51WRoqN%&MCklfhSSE|8khNdvTRq7(Q4NkeeJ$5Z%rnpTE7KD5Lb{$L#f4}@%1ru5
z9Myxowza!(icxX|>+N5;A=JJ*{Zo9Kl!EpMwGTQZm)o1$eOclmo2kyrELb4cOr4|*
z(29imT|8Z+umC!dBS}x_y|6?Wk;zUNcR4Rpz>Ul4dBXSXmdpLA3D*mqu4eYhjW;H$
zgLM8rL1F#OsH7t-fJ{_y``SX}N)f(g;)gf4R|~eULrO|i%i#y?<Zi|U26)qmuxICQ
zRdnaDSohY?R@~1^b=!0Z^*tVI+^?6MF<XN<DkH*2$bTP#xFJHZWI!7mz?!*o{>x+Q
zFmjm__F0iHz(5bDS?I*xnsj|h)hL=Mq}AAcwPy^C2GV=o9&|%aJHr!5jC#ID`bZKp
z%JZG&@RhYq$dNMiz5=M}d0cX6HwQ3j7>@GYm!!BY-;U>xqKz9ZkVqicYe|L?y;s-u
zs38LOWwIKyV?svh%PPXc942p9o|l=-Qa!>-iR;$~iZ{EW<!T?ICu^QETp7`L4()h$
zQqI2@?9wK#v~AjY#or&dt>lsB(K*qiLy#H{j@>pdXI3J7(RpN^Tzb+sy`J4<UdH3+
zp#XL5>F5}ue9-|P!vyZWG~ASXDY8s$W`}3_;2QTaYgKD}DKh~a>raXRzj|~3N<Qbd
zoMt$ft*VN>z_nx;n5!~Nw%BxzGDh|JkYIEwCIG>fd<$|Y{a^<x$~)2@`#T~67A1va
zjr>W5La^)egkXGoiC>Pdsqb}OW4D}o*eCfo+1vgqu`C2-LU32ugJc#7b>O&VMvv2@
zTIDi}0ah34dnu^sRNh2!@0aGaxda~UZvEPd*Eh`#O623PoMdnKvhGR|z)CVJ$&8oe
z(B|`rgBauPHna2<a?y@@oh6ZO^ijy5!`v%9f?1Z~55|29tWJyEy!x*+B6!@ch<MY}
zR!si7xhp)8V-lziXv|uq9gQXw4TL94wPyfAO>=v0lQ5st<yiI$EIvk-?dMhHWkb+x
zT5tk!r=JD^6oEVBeL52bUOreqwdZ-xnxGP_-ShU+bu4|Qszi7@tZp$@$5JVHzj&Tw
zpN;6y9jo4lukT)XL>Gm!@5#637rog84Y!j%J16cpi!ikuk~*xkTo2rzv@tVkRYx#O
zepgW6Vq=9ypy#0H!6XN-=C|g@uu{TVXpGjR$+|AK>7-?}WE~n08#!%P61d5L9}W@9
ze;BG7ojbXhcp^h0b<fao?_b%%CAI^eEX&f0_M$76e(F<#yg)^M<x#i)>nGqAx`zio
zF}E>P#VEXqA$B|bA-&nw2i=rZs4;%pb>@t{yJQ)<O>p29oh#b`70~l>t~FqD)pu)<
zSulP_-(~D$l+#J}0d+#QeyvqQ<m;WsAe!{3^47P8)`HN8>1Kr}I!Bg2!|CjY1cF?(
zRl%o|XW$1#Q4-Hh#l)PO#}z@Qcx5>Osf86?67YqhwlNAK(qUUVS-?*$_zG9hL4Q4I
zPrpCDjzJFM509(c9YBj?K()=1be?=VQ+|p=<!j_OLM(RKrK!Bmkv?ral{jnRB>WP3
z9!ILT69i^&)Yzt!&vVdV(0LCPz}hW{9?rY;3sw_L(_cQcbYZ`|Jm890A${hhyp|Wd
zmqASTY&;UYoSdix^_H5fcw9w>PtyD6zK(M#;|@<b-%0oSxhXQF+XRe^u4$1N_a9_S
zGd*TQOkgv6`aFZ@8%;{{P{5sPb-fIaE`Y;`SgNcYM$Fy^e1r^^Z+7GB#{^;1NUspz
zC!sO#@+>$EGUiH#TbDjw@7DBpOzADyroTnl9K^6bX}Y_=*>JxF_lyGG@JTOE)qLo@
zY+Y?6VBdYSH_=pALz7)e&I+~tH0TkgOP%$L>84W%lzQI!wEW0G?%FG<>=9#<r2zqy
z06JA9)m2>Uby&FPk_`(Me)Y&0h~zZ9UyHQWkJ#k_{dj?lD)=|n&kedDy`0pgcekTQ
z&o#~E%@4th%e)U2oh7=^97=uU?d6Pa@#ekTpzo8{(_pv6T?zIVg|^o2bk}{-%>p0z
z;VrL+6ZsgZH8lv{NwWm;6>pyJRmjJDFiV^g^SLW@D6?H5zU$k|Po;kG;ss~G-3g&h
z48eS&$oGSgsfQP+!>+!EX&%R#lnTZI`S3xHR}1oTyhkdOGe{&ZzdqJ^J$pLb6Fa{p
zF!T|DlO$phsy!I%WauDhlz#phKoU1mJ**q^Jt2<_2S5JRa+*3tVvd-@nf|kd_02@0
z8G-p`0hQ;IKYsr~c}tdWpfKRIT{@bcUaa!7U2xQ)ZS^qQ<`CQSyHtQv3^YZeX)2RW
z9<O`nO!@Pt7oTX51tBk2{KJtF`0RG)yWLo1yTK2)Iva=eAevbYm)*<&jR*egMS4c<
z8k`Y&_*O#OMolDL+vJ_E2T_)_<`dLk2NQpa#51LCS%P@5R|*s<Zx1I%V}3bT_)L}7
zEt^7|cPDy3-kP+SUX8&H#{-TK`k6E<Ro)OS7tY|^eV_hmP*$60NoxB7*1<HR$H0d*
zUhm3F&AB&BoA6tl)UzFuxU(WqA2YqQ?70pYxyK2Z9rOQDDPpqZwBVKFoWA^R0+o4J
zNEj&wiY--p&>N?baf%9IYWy`K=!??V0!>{7RvuW4=L7-zj=tQx=*8_B_;x2j4}bv1
z&;CR9ErNx<F$*>=-H61mzJC!#{_Tf!lPT;mIU~c;`}d9|aadA!26!0~lc^z|0l#Tb
zV2}~R5HC+_+m=p?5r;Ta6u;qCi(MxsPsLdy1Mz0li;aF|hg0Jwen?>1F#g3NDV5A=
zU4lI_9Tx8M67OARv{Usip{BAfV_3IzHQU=?f$X-^izVgXwArgKMjAh0gcLa)X-$Kf
zHS<Qd>DS&{;k5^>Y6nK<!xiMWXes!0WFhy~Pyr!LI*Vmod#kI`sc0_ep<G*sRim7P
z&c};ji`>fysAN?4Ilg?EUaGtEYwuH}+=^A#i<Xb=I#tOStzEF8bS~T)0ZKrVT$9mb
z9~rNmwn=)~VE2UafDlt3I;Ktkn-!OH*~@S4#(prSpW>NVW}c_Dt*L6JimP<PkF12+
z+jBiVQj66V3HK&2ChyN^NC$O5b?3C3_t2BrH*#l+F4bVuu|A3;jtZU<f~8h~^kV1?
zZ>mIf0vQE;_zS3w6u9amQB-2cz3Tl4%3MV<HB`b=5*v8})Dt{)<GbpGlsvi}j;+jh
zatv|!fLz<qTzkR@=$UuDw~EW#SVK~UjYf}L>A>NUx2W62xt>Y7mIm!HNPgy*UkI1R
zdnkSK*LkcbPS?^09cqT8He4Z=GjDP4JHg^J)UrvlIO^wkr9hz%Gan2skW&)wzn$Xm
z3z=xwbo^KhKqs|1$|l}jyGEG#sFzkde40Jom)+y>6~8ns4ZYUIsr~Y-H@!mmwS4i-
zC9X2_;qOSxL7-5s_AZbKD5N2Y0e@a;+kEy-(_LIzOv5sQ#zul+5}KUshq^pA#;u0D
zzJV;!@A|UX_H{FhN0*Mt(FNUKWlMO_oKJqW$c}p*hYKc0>=*?gp(JAW8kzY~TZ~~M
zA^OEiQ%7LseD)bpKcGkjOMR8dg+Gr`46FqfMS4<&^h!f=LSikEc&bB=Sal6R%eOm;
z$vBTXW*529VTkX#D>aaGhif+S9_#mhkR;RI`uxO%N7Q)Wn9(h_*=*VBqYR5+d*aqW
zxyEide10N_M|$d69PG<NvkXXkF0<I<oc@U&(yZt5q`6n1#sv?9+=(n#{(2_XLHy1o
z6EkW5wbQEv+RpPk9m(<*NR(`%fofBLuM4`%w?m?W5^f)dP_>y}{759GA>8snMmwX{
zL`wrV5bsKP+3oUO-&Pb=NGTJad_)pmk>gf(WqcGLDl;@wUU0y8_hxRYSY3T-_Q(pR
zV<U03N?~Hf>lwZY37Q!+nZW^x78%(23amHmq`CE{xgD7wV8k7$yx6<?#6jD7VlAeA
zOwUIQ@KbE~WGysokoZ#tJ#~F=rLBz-#^h~|zt)EHietE}cnWYm$Z15??*(K5G#uF@
zei>`<5#Vc&D6Fmz%6(ll!gpZRu-k!pm=<nCD)q|ickUV_4E17&bNARaV>(}ZjZ4uC
zFxD-84(YGBvtwD8d$`$<2Tq-746+HA((B|!G&ye`jNeSf+N%prbN%FH?xT1Kz>qo;
zeYNWtHBz+<o>_7jZYvw}w}szKwrz{_Y`TnIay~H=m*YM&?jIax6XD*FH`5|IHk%is
zkv9-*W#r5X0(?P4j?42>@+j0=krPvV)f<MABbITlx6<wnXBpuiG$bl&A)!E*AbF4l
zE5+g1DdO((-u2?}{e<!|%7s?h-G*A3dU<P^yo-jD!nLF0<p5E|^Al(IV_$Z7Uzo>z
z(blZSfyNg<__Zvrl~!I2j}k@$JE4%5Q;wnrw4Lp6{9kzK`+w}89UAbk&V+b29XA$Z
z@;k2g)i~vxvI++YuJ+EuOj}K=hQm4Dm%w|k*6Z0zW#b>|mVq@c#1rEfwG-;rY#YCv
zy-S@a%T;?Ksu}QzP}4@Dcr^k&Y>SlHnvw|#JA4g(TCZZZMH1S!XgWO(kL*X@NslPn
z_KAk`S+Vx_8u<GV>LDJdQX&%B7?1GXm${D8W?Q&rA9zz6hTel>ZL-#JFbnnel9n@s
z;jJgIC@*!L=cu->^gnNY$NwgbbiLE=BRMx80N5ud%nea?o;R0FKJnVPoH60*<|<0Q
z%X&{zi@MGHp~EZ#_3Zhou8o6v0t!JW*Gsl8MYA&^!}tvfsyIegK@pMkurWmrxi#Lt
z`1bl<McuN^hM1=7=l&Jj$W1omx5ndn%dN%p(YgkWZS1{Cx<<APN9xnrH?V^#-X@zq
zVJR>K69f}ypE;K8He_qPL#v%v2tGTuYQ%9_JpAZ=4Ev%z<TS!#_DNXSrzTl0t-V7?
z#K|JL9R4kOgu)=+u+><av&W>Q;O<cX&_hs?S6;-JzbOW^AQ87HP5F|P_CrYq6XN^&
zsQCADtJ{LR?eLpL#bwj@E5Jw;Z0dO;9<j@ak@$_f9uv<CMae{ew|F#f)4i9@i@%VH
zP?KRh9du*Eb;^*o%TE-z9-+ovR@uUx#5#VFiDc@sKp*i}1k`Pt;n<StGg6S@Jk({e
z0WAS1h9NT{%+o)G_^al5)K`_1%NctIBi9mOKjGIzft3te(F~rrZ-6}aB~_b^2hXL-
z$og-jYQ|qU-tSSyMeyojJlgt=a8y2C@q;2alsP3s4^n}M`4O~TE^#9#&#DVu6qTA)
zW{Di%8Ai@f03Y7j!lyd<a67AIEmrFCPT(JoC0mwdYfb3*nx#9Ifyoj+uRbDRxPV%0
zT6A|emQ!5_-w%fGQ2^IdDiR{`xmjepvbvWWzl4g1V*}TSd`qHLxlWJj7HlBQ#Pv_N
zqh66C`@-gVdIX4kuZVu7HjaVRhn<tk_A-_>jflmGThys{4g4-CHqT)T4)AKB)<b(E
zxq>WjcI=`Hm0(Hfm#{Ey8!^vY*D6S-mIJG19i6&<aB?ylDi<*^;JoeD!o>bN2@sDG
zD1I}{wZdR#j&x95xA&$QUfbifrJQ(}cFZfh0&G-tk6*)pkHeypa(t;2XBwm!u;B(Q
zzuNbGG9rWl#5Cbg#s@m)o!_(*x}}nl``~Pi8;BTW%F%WD;K8@&OGNpX$_KziR|amU
zN7``r%`@$EZw9!^F@G4j>U2)Z^hOkozABKMQ!UeS_T#Ehdt=Tc$E5g*ij<Fc>=1<@
zB74Nk%Ac@vhxg!gPU}X^)%p{HRYe+Wc;@{r_qE~GS>5JI|K!wLS7-){$aoz#gLqf2
ziHKR5_6n(iufzW`w3W%Zk*VHD78Z3Cxlc;Zt=b3B;8YMz3L^I<tt9BGz=%*i#%Ks7
z$JH7j53l_t5!RC0ch+75>)9;y?cja5WA-IQdLuUt22UDhIetq)a_NCD5gfSQ2Aul=
zev%RB?M>r-u&l>c0!iAtdj%9loIu_k1!prrM`4PTBD$shw5n6#9RvI7fTo_ao#}Uu
zKjSk-frFo1Rr5p^+i4i_OzO2s{fD*(2fszvgVHMrp6z9FREWCDsT`_qib2Fl@8rf^
zq#U2%`tA^|d~-h7b0+eJ8}pqB)xkBys)Y%U$_J%#VBo}6!PEoJ0XcCqgBQ>R|Hh@+
zd7cP+wBe!<HQbSJopm<cXn^Imxn-}`+})U5GC>*9>eQ)Tr#zp5pv&x~ClmSfN1I6|
zh--=wHnV)n!Oq#P_p6yU9EsI<faIC`A<b4jUv190D0L-@6@Qq~RnR$b9l76SeC$0y
z(#42Eo&WX*GwU30N|Xrv_~1$`)qufkzPnpV+iCx|QA@5sh2jAkK9@s5{XAP?$O_z5
z@UYseGtD%Bo%pHZWJf$kIXCB~#oAg4D%-sqw4gZ~o6YDNH3DBMyswbq7>H6gg_RB5
zr;BVTV^ydZ3m(kfb~)T<f6vQUXf(&emQO2NEK;mzmgrc{GhNVF;+WGNJ!1{Nkl&Uf
zDc3BHpoIEzwCHez#F-PcCm3&zjHoadiz<9iY5v6blL_EdO%)gCSC7@;n0RR%J_`H`
z$FM3xR$0t(q#}P4*c|1JKJ~v8SFDIZHq8Z{zo`QCA3m{uLSz@xZ~`j-!g7Me$S_>R
zvj~h|{4bB15ru*5rzh1OVDS$g4Vp8Fgu*?`KeGFl{2S)Sg7f)Bk8-2%Z{mXv%SUJz
zH^?*s_YZ7ES_I0S3YN6!^&dc!I0XiB3&q&0%0FO61*zZM->r(){7H2be1yVD)!!uv
ztNqDM(xE`P$0E2FaQ;~iZjewzTWyb|!l5YboqtvA7*Z*{QaBm?pAN7-mqHmjej@==
zw=(87dTFQq;}&=2>+m(kQOV!sNwQJw{akL1b@GfLW>IDxoacgxcKtZ<D0z@gN_2A1
zk*oweIidg#YhqCdPgr8bC{BFLQKb&rp591ZKWlP_y?7nt`*0%>tQljX-m}WYfye-i
zQT%SJo3>a*Gw~X_GB@{?Ewf-sMv_qha!-=%1juvfAiY;%O~0mqh&ooeVpZH^p>n<o
z_Do(@1lNBi{W?IXVf)voP^rmFl7At#&|D3wj|1kNE0~~2&CQqdkFaLnVbYRj+D6Hu
zhraxunA`Jwp^sX2N9SAIKM9?7)9=ul(9_L@4PQc^<vmGawq5DB@-kL|wIyZCuZsK%
z{(80*Qe+Bcs>jJ<pJskwMu^tXT`fL-8>dm$PPN+rnFfFANS2D*Ib)CC>rHDFSO|`(
z5peaZ{A((!GZGm(cz4^46)i>4@OP?Wc06(w_K96*=X_y7JC`>u1XuhX;)uljp_NR`
znx4Ah8<jJv614b#DGR5>Z|p0fQRlR}8BG!an`z(ST$MWJj&Zg0SBaQdHMQo!k9joV
z{dHDztOSs0ZC0}pB1+lCX%dFEmiO&O(zQ$>)~rHbL+}`*pa8Z0#nrP59%yVDn)sLi
zMaBd2<x=UOIThJnv#94WNz(q_yK|wm_4UuZDFW6>%{S{I)V|2!*Uhb<22Y|D>ItF{
zbioG&ftyudpc>>Kv=}D{p>j84@NUdSw)R4nIMC&u4DkcG4!9ea^>bJJp7A&taxa4%
zUOzi?%=evH-)Jm*`^0{uQS?l~v#t$kKSzdv!F<rT*(>$@=(@oz@G_~_gQA?^k&0%8
zfe($8p<$+u$JCV83O3%3D>Q<o^>mTXW;|V@x#u#o6qI-*iY`DKO(QEk=%^cXvwu*&
zxtE_-$%WyHIOA`$uXNvnLw)9M@6KTRy_(eH0yFW0;a4;H^g*E5KS;u4GB{1(yvbv5
za4>u6$6$8(=BiQ)?l+1;Q9tB7Jb=LU4p!o;ewy({P;zyBNlA$k!Wx29qVZdQ*6!%h
z{^6hqZuBmyaQ;%8rACL|RA(t+VcwAS*k-2AbGt(b+n!kK=B*eSLW^-f7Cz;Q*LA9n
z<1j}a>QP^R{||@q*1Mv^3Q>LYmDZLms%3ZwWETvJnL@^e%fme>>fQwo>wWe)$MP1x
zD~x91+>5Xl7#~i|k7g@d7(4e?4W{Zi<q=TiY$VR#J7Lxeqc0O)r!bYnF%>vZuZB~6
z@8}QxUFDmQkl0^S^U_%D<v|g=GTBW0YE}DI#C*mH`=>^Q2h9i8k5JsL$pI9z3*|;_
z`EYagJHzIP?RC3_KVEIlwzt$&he>SwJ0VEGVG(0+G+m_n2?}bZ)VBKJ|2m;n*`do~
z^G)S%tYv?SfJY-Hj^7m&QMzyda$d0Jax6tB<doSSO{Vd1UQ|qCH;)<_1zU_|`S**P
zR+$bPLpG&Y9X4tA=4*<9d*j^@5qBtPIKI5?Nh?n#@$)4P4o;sMG?2hyIbD5zB$k+*
zOt1ZAp-;X&_33v?(7x@lbgR<=32FZ9=l#iGn{EA1$guLGL@3dFY-+g}Xe>z!il?Q%
zy}eb_hvrF#W1pc^v+Z`0){@Yyk*uxGmB;<nlza46cDO)o<$_g}Y*Gq7vz`@5RtdEY
zbTB=hEs5SacllytEW3@17z$TqgmS5TG~XY1UJn_)Tx72?8kmS1N##Yge)TuL->L}N
zc&b2AwCG&<tL9~VxxHeNws0FY27OFFOC!01=OH%!3oKw`JL5tum5tT#UgESl^a()o
zF`*A+_8o0yty)ix3)Yb7WZQv5%_@`pRHrB?R$S|C*{PSlR|_8$&n%&_nV4xTTfY&;
zy9rI=aXK{JA2)5v@qdd!kr%l2(*bYcLhdZfQ8qm%BPIJ#nVZQ*1+P=wpC6qeUq{%U
z&mn`1%w9H%Jfh#4O?oj@pFNufMA7*Re0}6M14w%aGDRU6q<dVnXHjACCS8G;65k^}
z`~(>Ya&bulpQ!ll?xArb<FR#dhbx|)zIuBjS&~~lWq#*n6MS<h;8k;NM$fI3@A~0f
z?P|ZcTxscB#PELWQJy78;WTWx?)lRM33$`+lWz&l0nElx-AbJNBs>HP!|wCBKPiTf
zii`{MoYD76-9nmadpyDd%blJ2OhZBUO!&GknKJ2|y1&lLy>3H3a}5v3CGu(BU9Twb
z&y?Fjn7E(aOP}+V$~*@D2auP2<wFGMXZ4!bkiX|xum+ZRRbo*$Kx8-lrq~76v}9XQ
z2Dcw5P<!0zKT(IrYaKOxe6)6zQnP8@JDOgc-<5M~S)Bc0l%siWDuKxGoe*#VPg!Y%
z_?i{<x)()oU`F4A>hbO}x|h^zsAQbbrg@BE(gz+XsRo6o?QVb`GP@C;eCg2+drv>d
z9wCa(D>GkfU97hKMYGy2^04ZpbsQ==^Bms*=+bqdKA;%m1F`X80*k|JX26@<b=lj^
z=x~!?KYF#IO@|Vg1Z9)S8MUj~!5A0!CoME>50H@G`$E@wiAouixgZNbCIc#-z&f4`
zCv(*qk=ENqr0eVMPZy`xMkMAxZ;*~gKt1R_7h>8~wO*q$DC>iiJ7u+}r~Bh7PF>)b
zxD%gVsVSl`5|N$vYt!vveL8qVBE!aN%eve}hr!|BLEXgbHK>Zl6WTTlhw(wU)SSM4
z?)T1fyFP}r!=ulx?gZ19;UK2C5FyecLiHnD=&Ft1G^6?aN#Pt(;U<t0v5y9j!6RdT
zf0taIYgtz&aZ&etE$DDY6^|SzNbYIFNbwIADj5TgDmq;?M=_$|to})}3`rRur@xtM
zA2M^}%2AmMF10F5D>W|bJ(uvJuUhuhvZy{LtI}(bH#IAb0nD_KX}*4I<jKm?G+mlC
z5wL5=FR#J{v1z(wBZ!dg{1&>I6D`NeO5>1;b(ZGl#HD`Ua=l1-z3ki;$zzGN*mAE=
zg&P>eJSE(B8N=@7yl4;IY4<L>l8_9o%LpFBsKyc7abZ|vxr9>3v4x^0f>ie!{$r;O
zbiwcOP{4ghUy2a}WWMGgL7Q~FNug9j=NH2M(|$3gx%$P+REd5i_csV1ybCi)k~sJ0
z)ACtqn>5s0Hnw}HmJ1#6f1|abn5+EC>*f0-R3iK*Xx`~vehLKX_YW_c3rT`bBtl~b
zpTYi9*FA*ggVCdWM#getdU|Qq7E=S`eQnR4_X8+2DPMZ~Ocg{QOKQE=Zg)1@>Q)Sm
z<q-3500$~?JASwK^kuEneTyiK<s&=HlMV<Y{lox`S>dJI89nEgHEDsb=#z(J|9cQ`
z;Hc<-s7-u0I`N7Xsyk2})@c+WA!zv+M#`!0>Ru^SJF(&|zdiW4!Wff|Cmt@qNc7x-
zgI^Z2jYLfO8jXY@N;w2q=^(ebe7t9XI3KSudgpYlbE|LVRW;a@?!(s!o@2RG0HOJ3
z&^=!nGgjwoolk<igX=7T(Jq_+PgU<74p-Z^ZAXc6=_Eq*h#+bt+UNw)gXlfc1<@J3
z6TJ>$l<2{XUPlX}_ZB_T2BXjD?OWIL+~57a@87eT!J6${=lMJK{aEcMYqi!p>rb7>
z^MadClL&X#>{r_Y14(%jON`F@f6@y(W$#W+4kq?zORivJ7xsz^hxOmQD)iYcD|t!_
zzB(F<<Wh3Bxl9?0M9OXNzPiBFYHUhC#iWi4Q+SwgqAME~3?=Vx+%C_uoHw=$;%hDj
zb{9qmMkx@uO@HmK(^{S}!g2Otl{hq8yAp}H7Bn~vTOIhM;)5rNqu4D#IH1hRFkQtD
z@AH(Ha(oW$+xdoKj*!6$O}}`GH7P1=<Y3Ztk|ZdNFFNAxkF!D=Le;?#CiOoXL31j3
z^V{F>?=sQEoS7Yd;o?WP&wy;Sce30%U3{*x7%^U%POmR)q|Q|P_F&qZap8wSZHwj1
zj}f_HEre};MTXdmnqe+!zITNVjR$rgEqc8G+I~`(@c?P10{Q*Ykvc;H4)Y)g|C4Us
zK)K?3*lu-9&ia?oqm9Yy=YX}p`umTI7Jcms9|~m@d@e61pKVgIlRn!oAUY&a#lq||
zRIWrc8D!7q%i*gOj4}n%^EnbNEQE;T(d*AMW}rImR_|xA-m%BHmd{MFEEqF<$;M48
zuK*UInPi&MKT0B>j&>$xlxkxP2XXra#l%$NMXeJhf1a_kZ3o*C(T~ZfG4zY%qw6~T
z&sVtcnOvjNZr5V|PC5;F3LUEB63s0*i0PLHnHF^1uiy!%8{G4IRK<)g);_y?lD3(!
zmn4bl&Of=d=^l>hGLPnr26EmpJPoh%xv&Rk180V^|1koDSa5&D4l%$>eX%8TtBrXx
z>QrIQS$wxd_Wd=_)TZxoo=&Hx3)Wa3g;`Cu+Ij4BSh1JE3kAHUpVVxi8reF!541*@
z@?Et9dDN+)?No=r{H|Qr<`XL|wRIb?>bhcH^%YJTjI<BIT4`O(DQe%LM#T;jamd8`
zqdczneKQ{eiCSP<AXgIL2~9NE)9GP&fH=!g0v<E4HY*~)QW3#<e*H6?XtM<cOG%j-
zah7@231%$K3HfLubyQ)9_If$*V=gGh^^?%ZsksQ|#AFdOz&u!z<EIr+&Nb`b+uk@e
zWL<vkzs2`@|I1<9xjLDEKF7csB08nyw;|Tps;1ukxuzZfY^?G`GJ;D-p@E-tuX213
zikuD~y4LeDFFAMI7B;}nI*=>Ag{ud*v8kCYG<WmJiB1-_y%@gs#4FHa8QbNSv^u9L
zLtv|93XPE(ryhOv<u~wyJpSi*twa0wxA5tSvha_m;G>+N)`RA`Vo>{}e4vr@@<j1l
zbtduOqb6fHi-gFZ_y#YY|NqMgGxj{h*mb~)+`vG}xL15I;_=}6yD*Xo(U*F(`Fy;l
zoMZ83FXchO0XMpWR-?&}U6-Q5Pd27ECkw!WJCh<BTVp)an2+=M1ueO!w8sG0uM`k-
zHt7w=(rSz5y_ihGx>wD!Gj5lv8wxc1ts7e#L_E|Q+5$DG+Dyo@z&h7;pnW0|>~mn2
zO3spISnseSTj9vVXZ0mK5Ir(ypEj5JdQ5zX+u$hTZR4`1kx^0{G522}>6ia!+ELAX
zG(+*X{&e`mkxneiZfILCHHn9$uk%ziBAeZPD@lYPTW4h(lf#?ruuvDx>*Qb;GofFl
zz+q=or(vvS669G3t2wL`SVPhnuxEeyE^#F<xw~fgN0WbR8=&W2kL0o~IyORQOth8g
zX;*h1SbaBK_1!^lDVEY@bK-9yeVsbmeEz9AA?zvOLJ`o|V)mNbT25^Gg+bDGMYw^3
zoPqq!8_TXkXDy}ha35ap!oyUln=ZycR+1qoJ6UIRulx0`Z1?x?YZzwy;r0FRs{b?D
zkv7+s$@?ZLR+*45w{RCD5eah{Mp0Aq&XLw9@$4<Uhdy&_5f`eLM)vUC`n5mWMcaio
zz&JJHO}NKyw4NIwbyKi`NUrGl{d9tgRYc3?;Zk+Zn;)=)4-#}m#I9*Y66c`Y0&lwY
zYhHd@d{3ui0emt|s<q>yvr~#zZZ>JMe%6Zk&&eL(dDTU4lfr@&(xqWp$)ir3{p>68
zz~YmhG@abO>vY7iP~Up9=h|rx+K1uu`o8+EItZ)zh92oHQOFM9uqi$RO#eCjOp})i
z@OqV4p2Cz15cVf4dmjxdHrn^8n@@i3J<BXkzaHInaxN-gBC}0mpK_ltZa*$=e>NSf
z&Gu#gD2{$MbXc^jKM2<^*D?E1c91w}vP+F}vgmOknpNuUx{tt&Om<58917f{^fGg+
zZ#zOU=)AC&CSe8z-~BG=7z}(=%n<T7jt5#UqA{sX^|%l+V~u&fJdo{24~H#J%Q3pU
zHJdhmQUG1!I?K_UjUBqu^To^kuOFKQ!qy2H&sVP<pBaUfB@~`IC9^-#FyOrnFnr-}
zxG}`WVBb&FB4wXM8E!4vWI|$~-z00lA)Wj_Eje-UU590H$mqguRA=;9c}T@t4>D~1
zSlw0K-jvr=(QkEX9xN_U#>$Aaqt3hv^=&ULeb00Z?%nz+hEn#+af>vEZmeBSUH|i4
zP1llH+F1hxKk#0pCmLG^gDzhz#>N(|9IqEHdHcXwsd8YEsBLhMm9OD{SaCIyU}djn
zI*FZJk;q|-v}>=J4RI5ib7XO|t1M(ez(z9(bLk#zy!g^=bWc-pI*RXcEHXAxS>D+b
z-$iR(%~{-V%YjK(Wh;w8E5GZ1Z;w;5d0IT~{Y%~k_rp4rW`(?G>APCai4e9$)LP?X
z<?W%Ew@<lzoejjy?&d#cF7Z1yyE`;}XsCej5J4(auRxJ22+xM;cWt_)9}~z(g(|1&
zw`R@bKxJrR@!(JW;!Zm-1Fe3F|IFa%sIb!%w(SJ;>VA!ICHrEU-K-V)=G%cerm&CW
ziPpSs^eu-+<J=U_-@JwytL^M(&92kW{H<HQ#ZF*J+l=^`rx=UAWpZ}V6YlF5=Ux0q
zw@XUBg-%wG-NVag9n2duEL_M)_uWxutA(|*`NhSfw<71Lcq<NofBj03%3Xi=xITvJ
zAna1!wO5a5(;oWTIe+#{%Vb&d19Av{W7nKL1JY>FQCXIQMEJP65BX^pn2_3~a_Kd~
zdBtW1(rf$pQXJY1IH)j!)zoz%rKpo+RJ+xLPJShZudde+#amWb=vBe?D)YQwZv~-5
z=)RCBB6Zlg?vsc@j~`#C+2snk-U&sT&y`7@0U6$a&~-Cj<b`>HKP=et&ZCRVw1e!q
z3F)b##?bb9F__Oq^+?2h3wdk``|)`q=InOiO4H0|7x(b_md?Z0ygqo0^rrqcr$Qvc
z>|4`^1HJO=c3#1vm}E>Mp~|LG{iudhDywf}rNwNET*zjC`SsID)m55C>E->3C@FoO
zi}+JF%fxmGSZlgOz5|b2N4ah7Y};PT=jQ0RM{`AAXsw!LUQ>J)@D(@nlhT%S+N$9`
zvJ8kfF*PPj7)lNN6pNEGnG-!N-$)wwEut&y!2=G@f4cyVQRWO^osOPm3rpP}J9I7{
z{&VqBHeU2F;9&h2<wo+`KN)PC0y3rsSB+2RdNapKg9S#{O@xQ^2Lcfc@s&)@w)Mcu
zb6)mDl`vauat%37`7?KfI(U!;^Joe2X6rOF{KUp1)5|WKi%H$!MPq4EdpPAOBN(B|
zq;q{#QdIMH^%11pZDWB<2?h(v73$Dm$!Ir@;4x(h<m`v+XCa3k)_&cP_wQbkd3dFM
z0(#@HEcRs@t?oLI%y#yef9<KTU4^scl-`K_AB7XT5iw?|26gUPJ43A7^`1_LPwd-b
z3qFLZ#aR>Rq{u6uV4@mAt^ym(r0{Exsd?{Z&79;Ui5*yOiA$^p2G;HoKUZ_mA!Qa+
z?(EY4jKPQZwJ9TQm^a;As_;wANeULel;N6<9x;B)W>c$8uN&{j+<fhS>5f+}4GhvK
z0-rrwp`M#*+|cmcvYMgeOZl8TQ@;Pg`|_eWp~N?*DRw4JMrxFOHKT;bZ#d!!bMMg6
zD+bBWwQcRwkqHM!^9uu4lev``y0cSES_`5tw}h46!95D4N38%8hVyLUE1@YE2ep1#
z9a*rfbdO=HVdQK~1$q|AlVtvcOK&F<uaK^lPmsOka^}t|@sWUaFr^H5)L~oEr?8v8
zFpck%4jez^aG$&;H*PbrvRFH<Qrk@tKSMAcBC~nSKH{<mw$%=~NpN;cu6mmfEwT{C
z6J8%9`rR*&{eUDy_O}Q{=_6T<QwN3L=(LK(=|M{We28(r)0u=j){=(uhTAkYlUU<B
zr>C|0l2eVpc*fhmh~Ba=egMuBAIt>0ON1G9&TnSz=e>U9@{rjD;9+S-fySo03>~w{
zz56b3$d;V>W-bj@jc4^%TSvLxHCqrYaR;C;;?}H`&gtSE5#2OJW^8nlH$=DJ4Vh|+
zLXmFR0Jq$@M`A|~a*iu_U7^bZwj((yO_`fi&lE6l-XeVw84o=PU~Ppx2h*PUATL?3
z(i&f5B=%sfMyhqeB9NrdDW2s!Z*~jlFO!(yp<sdmPYTGeVvaWy7{s%eY1f!;B$E+e
zj1#Q}9abE|&)qgRO(cyHVusjr03*1iPtn~Q;zyaKYQ^!y*-Sj)Q?&6}+2Ug7?9hVx
zE}7Y{PY>3>V8$_x$h+-=gay5`ej=Zf2}aW~6~=fb@R5w~t4B~t<eifL<0EE&GAU>A
z>{6V*^h(2G!euzlu8dd69D{Srp&Q9becMB#L_tlE=WeMpp18oRZZCkD4XmX0FOrDz
zAwn`xmkSPX9jHAQ?6fW-&2`D8!zg^5ffdeV{1<)U<9RcVe~H^SPx>*i!f!XjKOj|6
za&sQ}gp3#@dAs+T({^rjp+|76GgQEZ_E>=N5L}QjCnwn#&*Nj_JQpd>x6}H(VM165
zl<!N6$*i0cV&ay)qq*%7@DHT|d0dLB&Z15jnA}|fOjaS1T!<I<W%&4h&b03fjY>z8
zX<lv2<w^UlMn|1hPIeL8e;;nStnj3XXFToj6Xv17lbsk#&(G;_VJxRJ`;(ChS=JK`
zNM)kK8$b)!)=}^^;eezV?yKWlc-<N1kU2f=Xuja}^17XzH}yT>jKQ43mv94EnT6WN
zUI~XmHh+r|c9cc40`oiD+Nbm9bi>ZNYXt7evEzXNTE18<1y=BTyQf+5+J57m&o#7h
z6M-HT_P<fER;M&6T|^!6c>K%AyUxzrWYt?gF1!<w>03`+zhYZlJ55>@!-YqR@b%p(
zO9Uc9a|BkBE@n4D#r;Pj5M-ZAwgitU#K?!-P;5VJ`DuxGlXuGy8YJrJ)6TYUeVcRh
z_-fQUB-hMY4?(=+Ia5S{MGL&!Cq4~7zg2XT@ub92rcns$(JC^=_g^r^pD=N5<rx~7
z$ku5b-2qdDxw#FYC$OZ)yYm)D3f@SlSL_$x61>#J^0~3*Xfqt(l3l)Xz45CZ>+`eU
z;R=jiU&Qgh+B0WD`T%p1{YAXMi|#Uoh(rqA1Fx%URy-y@;(n_W@Q!z$dS4VONAKbF
zDP;$qvDsJ*@tKLu+-s_U90l4r)|>=yegH3~n%ub?{5Xj~K#qBibErGEIOOtp=lH%x
zo8IotZ2_8qWzOA=L&C-;{ce@I<Rlr-$iy5ylgIRgZmRQ(py0?0iJgp|(-Rc*CZ6GX
zg|C+B=dWn#BJviw8R;io`!oD=Il`;$O8J;6oxKFqGhu?3;=3HiM*XKRCk{)vez&6N
z)(MOo>g(t`raS`aOx_5aJn6nwTi%BVkEKLhjbOeKEQRIzVUmcoR3g1f&}e>nsfUA$
zb6=1Lb?fmpkalf`b6!@f6_(K_lTE=F*tD?EKmR3~p}#p85-o?gt{9F1;&Q&%z|`r>
zuHSyW-binU`;I^+?1bexHj`6V4FI=K9%k4K0ObLn4>RuPI_}tpPG=AZMSp;6edDla
zl?I1nbbRD@KkjpiZ7Y5lj|6SM-?3cvUMIP}Q2lhfw}Ty50Gs%vfPySv^?OSA4syW}
zAECSlnk%%cK)=T+u4*-3fet*!nVMD`uTAhC7?W}{ap^`f1T>M5Z}*pup*Bn|fb%O1
z5J%)s4Zp7n96BAACZymqx%;3;8aH0wZe78y?!d)Z1b)MK;*Ee{B)X9(R~dQ@*fi5W
zxuy?W1B-H%9PN>KCQBg-UhSj5*e$D_IAVOy0VX05@Dk>Ow!^42>eTN=Z#ze59KBLr
zsBHob3NaPN`{G?+%aUv!m6zmr53gj7Ik+XA#s(mv=s1sP^=TCJbvHKxJ8^1ucl3p7
zmXMBAD!RVC%vnkz0rbH4n!#U6x*<Rm-l*2ft?5_wfHo*dnEDj(Xr4Bh_aiMJyVFCd
zxy2ceiCDffJwNZEN*D?T^Ng4IN|(SD{E9pRtO{M{mc241v)vHXx!ae60|SC{A|A)2
z{*t@htw*c==MvqO`3-J)0WY5<2V8DK!pXLe?2P&UXgB}R{bo#SE(^vT6~w_kVZPRu
z$hARrCLI!yCo2A-YLUQvV>2uM<L#Qzc6^1Z`LL)=j}r-`QuEFDjqpc$;`)B*AUj;l
z@TAP`LF;+r;ln(#&^h3UJHPvj6)WfVYTt>8L00jg^)EPXzhX{xwcTHh;mbKH<B<R8
zR2s&1;KKjhzdx}Nvxp_8a({Qb?<b-uo9s8f4LAq$64T{#XP&%WOeUahI{NeJL%JjX
zhgDba4x!bb`hE+N#N*%*zaJaGZc{H`e1rSXgy#Vy2_)kCrwgBW(R06{PKGM9AO}3g
zYt%5k@JpEWLVps_U(zrM0%TJTpyf#&mqnXg|Gg`u5g~lr2l`{~1ry(bb{sX6swIet
z#c5qSPfNFXU4V7^J<;uZf7D`9OaHz`OX<Fe2{WYJlHbjxTD%B$mW5$Bu;CbRE{a(p
z5HAlHYb4q<_5aMH;#>;8G&t$SSe=|F#aQAmOX;I$tu~E+)K<$nTt=P`xS_wekV&o+
z)B0W6oh`dOkyE^jY7xFH9po&@eum6;OQ+xulPSSEK10ooMMY&njzR(qJ^B+_YJhxZ
zUYs6^g}c+GcybS5L9uUkn71FGX3HHIUahip?EIpu7?l*;V{R<%6>-}do0W-Ul2VVC
zIBQ&(|7?Z+t7qyHo~$mnZ+XW5?DAxYLYD-fU(8L$u^R2?2SGAx$8W{+cnv@$cne8V
zuw3u(xA?>&OOjn+;7ep+KoBo9nk&4zvHq)V>s#PF($u9^@^XXfY{5WaN(r>H6nO71
zG}aes@ij&-<KYhVLw#~n@4xcUP^hC>9Tx{jl}LN--FgDmM%|Qp<LD`HtI6#pqdjSu
zA+lIY_5&!hy-&Q)LtcksgH9cEgz@;pfMj5zf&$NMIQ-{34T;mjq_wh=9BUX7xNx&4
zSC^$mjq$^J!Y8?-pvA46o%i?UNCGcl26b4pIDb;5ZuA@n%Bw4YMSsw7k2NDTgeP}@
zgOqxVWH_ZeU)Gs*^c+pMD~X30d*Qy@8(_~BP@(1<Vf5XzNS9(da9QpbmND7Prh+}e
z-jHY3;9|3tR4rh#Pn2c2F@J^LF(wGpSep!{I+%cOzEV`ZfCu!(`;Tfj9xTV!HF;*z
z-KVS&X&0+DV3GRN|I?k)QVI#?$nD=m`93jotya?{X1L1Vnh36@++W2QVJAplMUlMW
zlu{~rWg2)Zcp9)|8MZZtW%uU~&X00<%it{RD3}RPbp2NxTg*(aX!z2lDj!ZHfICjX
zb}AbWY|Z|zQ*|#v=FGe*EtEuy*_%w8BqK=ZUicm~#4I}y^Nv3hx1&PFJy3crZFv>f
zIgOn|j`un7{=SaSd>^}OsOlbQdFq$Cza*o3-{`db3vWDyU8AOpB=l=ZE_m?B3bZC+
zGE_4rdA(qM4Dj0xXZJT~VpJ#%H>L7X^udz~H@u+fk!ji;8Z2X08nWy|rIZ(gK=^BO
zJ9P(EzXx*1hWKEIKQe7z22w63110?=b7sys&&xS(=1c$GCC{~Yf;bW#%=i@V<_j8b
zOwG>0!K3+P?>|a8?NQQ}9bjx)W>UKs=TdjUXo}SPqGHN39HOtAJ=H3kjjP<rt9C1+
zS06Kt8Y_7g-wf9J8J}npiW#>`VLoss&jXk)#=*1%NOUD;msSbZ7<Tlx|CJ)NoEPev
zDY(!THaR}U20r8?q{@gycIwXMt7z^1Tt0ZUc@$r@#Q@cfLhlc{%l*a>2TE6`sp7b}
z-2u0CHQ~WBW&7AdgFp3=0pIKL@}LI7ZQ#>aMBi@UTv!cL-W41b(P#T&zaa~W!M-U$
z>iSp}_|jwI3{9~YCq$z62(+pcMuv1%q!0VI$v}uki$G$R0I(43Q1{(PnMt5Zp*CK(
zPwDrISby0+_io)DuKutsVtcLoL+{YEZHj@Lfh)K-ko>t>IvU=zT*%<bzF#*^8xt=o
zyHP7mc<Z_9@70?x{Y_{JK3=BN!~8cMh}d3_frctlu0V$*yu=k>V`4B=4Sj``&1K5p
z+`s-&Dv>Z4v*W7I5Fbz9ojHyEYCW>==W=lL9&vj{e%W0%AqqMXR{VCIB0!!P$qO>i
zxOBsC8jf;>;j=84ui8l6U92w7Z5%OUbPh)Wki*>Zqvp3(y=H45Be!P&nMMuWACs}p
z^P05KP{;Gc4AaoGlrQjbFN8k)RpOfUqc`CkdlH{0K<p(81wO2TB#1^tgE%05LIXFH
zFpS*4?~bvX7!NtsIJ^iBx*#wQ-&BKoGhakJ_)EtSWnHHDBWtjm^<<khA!Ac{AsC;b
z(9$g!vji)l;1wZ9IPOVd#^pRsj%iIS*W`mL2v_}ul}EK}J_Ze(`h^C3zX&1X<qxru
zj<bpNr3~3Z`5%C{=nra8ye~p!dQHxyZ097>rRGkia|3GL%!PIl&pAVQK?Ktef&~(-
zELd{j>0q^ML1$VFS?IHXz*`hs1nb=92$;-k@Am*Ega5B$+FUQ*efJ|T7(0SVe{YG-
zScQsRy+&k|qU+Rdp)S*XXQ@|QKilkp2yY6*PK=As;8qv#>iC^l2?k5;sc^Le8BSs4
z3Riysa=&q3C2D`s+0HZ*akCAo`ua0B?rCtcsjbII6kd4wQ1z^x`$OJ_Pq)U+(n_~e
zk{%l#Y{%z~<vizm@AXLMYl^2eu_Mg}jM#-$;%E7){M)r9eA*q<noB;BT$*2lPBd;$
zC$WMDren(jtSddfKM;-|GmsTpqDR{Gb(iK)hzNU&u~F+1lhK_;FI7U_89e&dT_u%G
z_KJ+Zf~VF=#f(jCmnv{8u({tJnsaO2|7p03OFzFjcb`^QR6(|@Dy}q56AWk8TttC(
zvbR6b_I`>ZzIM;pgShGxu*1aPy<xOnrK!I{e7aE*<B+uZDi$9kAB9Sa&yfx=u5n**
zw{Ef^)Cajg^DQSz2r}iF**$ml#v)jCxURPJdw{MaHS{(N3i`~ghrJque_rk`nIXOS
z&%)zvq#pa={oQ%#Ub}CgsIkda;y?RVU)HfEp>PHcT?(4DU(mc+E*$os<M~YA9`>~R
z;%yUX=p7OvkpO6tvbyba){vMGPj*{%w)2@#e}x^@IUG$K)6c^(IiOM1s|@0iRZKW2
zv5y=H+KfDw;=tOs^!Yjiw*DPGLl#}fWovVMLo0FROQ%{brA@f=fFX~fssiB@Pg}^N
z+xWxlYDFlD2Evujg_D*EqH%)=PZ0&E{ZU&p{xTB$gh+CtZ!<C8V?fkTwoRyy(f2d>
zWmv;i{h(li7jg_h6)5$YPLmOFV31nXbTPCFmo|34{Di%<FZ_Y%>o1G)(RGcaj2X#C
z56-rw>CV*D*vw}FU{jRjVpDQ)X{F5e*vMp0_uWTHu%R-O)&>(rVpH)iq^<5d-_j3r
z{=qYGa}TPMx3_=5KtTRFHzDF(mq+!AP16ved4ucbKdn+Cp5g(M=z%HzHV@_SpsXBD
zhS7(isdA(e!^Jx^J&AoKTr>|R8p)Y&XDbVQ_1NK)NT|$LH7xr@f;woh7#10xwu>bH
z2IFS7i#m&M`^VmT0cCtSV(b;abv2*+Te8nrWB3*?fV+b&ML#EGi+>Z3AgYMS(#Q-s
z?Av4dY<*@z@fYD!$c?W33|b|^a>erMTRdw>^pfMAuVOUY5aLZbnWb`Hr2K9$LZ7{I
z=8EOd)_QS-epS_tLZrKM`=vtj)vg0~?p$9Nz`RXAUYS|jdEkWj3liPgNKvDXu@D!>
zjE7pAxDbnaeh_{cEb2x8QI9<WVykUGUyByBC&M-kyJ~ixZor1??Q!4n)$J)ZS2q*)
zvM4C(D99)^i$V6+e!npr*2j^NAvLPrG5e&e^>=^X`V(VsKNs6X8qsbEM+RW>lXxkP
z&*c6Aq!Ab_NOG3@$z+n(#b2DyM{CdJ*caO6uIqG^CEsm0LD_%3Y~4uips>PuUg3}Z
zn|nGwQyQrd^m(z~!Nx6?I_WPN^${f$ZDTGUH5$0_6A2v5nUuW_R;<^mGhE!HDxh9`
z^-aw05g_9yl0laW178Ix^m|lYe!mGy@BJS5zC@bwcJ-4GiL~NUjg{qNvCL4ei;pg9
zTEe_jtcldfsNn86;U#nJXKKKyCE@2{1S^j8g1G+z<_(4HQ|QbBEB}LyW5JM5b(RAk
z{j)3MpnObu26(rjyxCF#05D><J>>T~9~`$^!y&lYbzB1av)6Hbuvd(OeEeOKL(ujZ
z_sAIG9S!we`=a(bEsRkrmWgli?6;5!yLXk)Pn^(Cn2_HGP3xXn$<Ovp7@og&_N!UZ
z^UhwV<2?SF7||PpA6j#;pCKTh%dDyKcz=@-UNFUP48c7p!UOsL4F&ZD$%uG_iUv3E
z_tWLgxwgZkj;o}H=9DZ(+dRr!Zp^@&I&|4%*_Sb<!j(K+IKq$-?7l6-4m#2$GVcw7
z^}hRz9Ob`$qf=$CAR4Rh-;a+jM3uw|;#R~FT1?5B>*x-TOSZKO>wnQIiBCPB**yWB
zO1^xoo0yQH?`Pnn@|e3X*elij>p2SH;;G({?E1+^9jRMAtRLGG*C`8hdr7^dJt#MO
z#iivClZ0rMG>Dz~pt#}gp4jEsxbhwTLuW{Fxm_+Y;PczV-Ep6B1M}b&fSj4FR-ewQ
zQ(NS5R40L+xT0gLo&uiy%FN@zzz&Q6SNu&m46#(<Wt^Z&af8||kFzwL7PV8j+mOLC
z!Um6KiH&hTk5^1!{Nxt0N0pIMjP9xIe`)k?AJ~&?bA7598K{4s3H*V83vAFA>464H
zGs_+Lo<1Lc5is2h5M?O(6aQHy{~s&Svy}^l_*m}l?%Dck+{!;sO0|swTf#q^dH?mf
zrs%u0uAT#w?vDW(q@#<yvh`vIO;gmkmq8Ji&LFq`fIpoDVf7D*sClc-=-q~y>tn%o
zVrHqpzWx{WOKa4ng+-=U_UyY`xmJC-FF?)Z?~sbuGcy{kwt*fdb?)QA_y)Rbwy&`m
zzHzD#!`pulwGgPK8V|(aV;^GUuoaW^tN1o6oS;uO(0_BY1QnNJX{S71{nn}_P5Rq%
z*&OypUCO^|2|UDOy)*kk)&?BB6AT=y;-66(fGJ){e{434Gzuf<!^vluIqhhr+>dKf
z{}chnC5WVVjpC_6oGmzfCLwrkR<5fS^Jx{IUk)>&jF(4j9e81pO`@M+%1rP1`>!i>
z)J%?fb?4bDn9D3F0+u1o@9jo2O{~S0eBo`*AD4CgkBM7QD~+&A$FzA+aK3Lw=Te2g
zhsA68ZsslEf1ZNoYZ}LUQI{sj9!U?5GPNlv3<dKXi3CrvlC3(MW**yfj*W|=r0$Lr
zim@HhGHQZtM~s0tfkN_~%+QB6OYn+^m+BHUaZiP71iTNM(kJl86j&>}LnY4Pp|O1)
zSgbje;ym7289%Q2r0&M>CWwcrd9%ys<aknEE400-yY%W~f+HnPzI|Ci?dGi?2Dbh_
zz!Ep}rZ712EalzqaqG$plV1Ix2WL6Yh`TsZX~k3el&E_D3!JY6W^lV}UTM+*&I{QX
z^I!zaXJdlY%X&eDaPEwcxF-5d#(X^ro|Dby&3VFas}2&SUIuswdP@$qL?9drN*d$n
zp6bme*b{y!pnmiygKh6QHrA`}fF%YqFki}x9jxxzCfM$zdDP@U)yT`hmCzZ?4vlZk
zTlbjM{EM}{P@k37XZYtuF>BYP&0TXkP;yT6E>`B@v3~Ke@5fhu#j~Wsg1iB{-)qsJ
z&NY>`YBTRUpJq(WP=&UFPz^Kn7{0*-C&ifTODE5TI@<}^TKhz~$m~idE90a(rlHuI
z4S7;2cl?gO%32kpe84dH9pTtRC=+bBqGH>}Mb~n@>jCS+h+stPCEcm4xy5T_zt01&
z-Mj)<e@?|)V(e^8XNVAg-ZQ=_;`RCz9N(jGep|UWV_8M%_9b=lZ?DCfLmOHj#%4WQ
zTMOv48fG5Fr-qSP@wH!k^ay0Mgcf<7ZC@7Ud@^N=oeTA(1QdB;%Xtu%BcI!99i7Th
z<*y6>C-4}wpgMk11ui?ETZw*6zg7OCQ|rDxx~;+~(CmpS2_wK!2=9M9YM#+$sF2u8
zU=UN_8Q+Q!o};C4X`51jz3M1#8!6O|e>}_Gunu;KNo#oZ7{{6f^VF(};Gikwa>5k$
z@JpfNmf@_}s+Aj=g=6S|1gPEvAQBgUY8{N=k?b1z$K&8=z#I>x7Ubv%dTPx{DUnxy
z=)XAsd7PPVS}ZAsnQ*A<$CFu7G;Mr5D@ClE84(iIY|}i;sln9Mrd?}ILWl7cP3Q|L
zjzvYbG9D7$?#_bMz7yGP$Hp%$ikt47^1u68fGt!<*lfI*tvxu-SfzkJOZX*sN@%Ss
z?JkO4Ss#hr(6mc?B&g2wt4QNY^AI1iH&fm?P{MayFST-4wcJF`!JhwQA$$w!f%r7v
z^sUv}@fL45)y=~$r$gLF9PTXap4sH5TetqT4|)j21^1wvOxsUK2NTwP^dQt@NGpGo
z-M@XS>5mV0+SRt!Gmacg3QRkkyFwKQfSv>ku5WXN2@v#|<wAN|Nrg8A>v$QcKiVSf
z{AOeIIut?W5p3x5^V<fTx2>X1u-6x)4I)-$(ZmzePXH)aXi^&Lz(?i9fjHYjdLbm<
zCNF4njJ3?fJ#j6+;wI-{(XxHR#o$srz@*V?CMC5Ic5Vq2<gHwg^FzdDkKi*{x*k#V
zkryM~lEHNsk}f%8jRPl)hd%RQ#xp|Rx%HtRp$I?+c#%WBkDe{>9~rI2-x~3goHl9X
zO%WexS%-!qV^FjZ86OR_KVP?taRU;~vlHf>qw3+y$cJ3?Znn&^e7X}>v!PhVrr(z^
ze-2vTj1CREyI#HDu00<4oRf~2X6WNEP4^Gj7<hCDl%uVCAJq(i#)%wAz4&LFq@E4D
z?r-OP9<6lp8x@VBUS(fKC7_TQ-rta)P<DI19Ob6PAn%3m9$B+OPlmsGb8F0XH6~@(
zyoyDluQEM<zO)Vp1p@&AyV$$iXb8K#TA!&<PJ(~P`i5OQ8&3{<yT&*CzBjy)br-L$
zS4bhbsv3jmex@3~oe%^W;iH6`-+z5narR(>h{Y79m&-?T*}7GYua^k;{Dlbf<cysU
zxlL7+Np`$4d9i4jx#1%2>=&qZm8z$1Y;AD8nWUqeQ?oYogNspPUc@@n((0?q;2&=_
z*M6$zyOJM^t(6odR0MX6gFoOE-h7S4jy2+aMeeh`><D})xkk*P@6$ysE2^-!U~%u|
zp57rJMva6LtA8siGo8$X!W4t$ZH3qhk2Q(bL{-j)k~3rb97jLkP4NxXQQEQjZbYL@
zlWRPEGj|6c*=TtXn`@IRj}Ihr*TSxJQnL#K{x+SE_rKeAf4lTf{b1=q7HhuVirsvb
zAlw1J%A$Uuu24@Ww)}@_*6ci4B_Y8FQf$uL&l{9q%imM5PBtN`%sj{mke=O8B7&6Q
zFFL(VKX%i^S^sPU^w@UL9#EN-^%PquGN-+P>VQFNNgoufw!aZ}_Sui%3q0)F>UPYC
zzWd_tN+tgJXM)VfMMjBK<obHJ%9Y;?JsPY{dLvx_>&_4m+<XK2Uokpd@f9RdlCidW
z^6WkTF=hZ6?gz7Z7-Qow%K>Jr-hH)|Df0i=PJoW{57x?E<fUUmXvN2H2gA1qI?BjA
z)&B}h*w}=)7Zu)*D0RKx9whCPF0&_7ef(+hf4!a-9b~wD@FgKbqNZQ_ZTzM>7^GqK
z<LT~yyWD}_fE#zOx}M`z%}?l`^+ns&=nig87Rmq16&jRfHhcuB>SQ@eHrw)|*GvET
z|MV5=$}{h~CJ-z==}IGS`BgaJKeNX2e|#{Yl{rZIr))z1;^U#o1kt0-oc_&&>i?&W
zPDhUU_G6}qUCHu3CyHLn4B?%$!#Jil^OOqn-<saet*=2q#bhDtGd`Er+7<=@<l>+T
zggYryYOG45!U<*`?)l%I`Me*`5=}P`3fo=ToX%;=P@%gssnfMJHCA^wm-c0Rvpw7f
zWoFWb&49*Zq8!L|>N`YFb)%xdX5=hscEJ{Ur~l?~tdmOdNW|<tlg9a*F`I{4foqp*
z$Ed19P=QLJf_<NdC*a+zN$|F-ZL%u|Pw=_ycx{~;p=ZkH5_bjd3#*l_h_e2xu~krE
zi>hy=MhxH33@s@Ubol9dT9(Oe^m1X0c3x4I7@y$#Xs%e+%rLodrf=AWhDC){Hh3iG
zLMuPfGfceQr*L#|DfE2q4Ykzb;L#XB0OXOYt840SG<N_rJR;=3U$b{Cd3!pt0qR@o
zKM_wn!zsmLe_=O&X7iwF{+3MXqiZR%F|T}JpIJh%)Ub!*`)9AjlZtK#M-vQwF&SHO
zDe0=^Q`z)uU1$7n)FWz}GRYo8WhI3{efb`Cxi^WLPay!*Q})<|!>8Ftxn=&}BKx7w
z8Tt(1ZLlS!ywhYGIG)EGs<=YxJ~A?rl)Yq(cK0?Cw@F(8FY1<TTx}UpwU?Lsx~XuH
z={|Om9Bi2t7Dmi9v{_l?a!NAxNwQEK9Q$d)j)bYO<5Qdms8+{56jwBP@aUx@NFF7K
z+FQ~<$f{fKtjoAq^|Xb3)9=L5|I|<WI9E_CE7xz;2Qe1KCq;yD@YXx@?MS80;B=V!
zuQu-ZRYTu>d_=(q41Cy5>;;?+VBC7L>?51fCz_`4v4ljbA_3-sS<dk6y)*%*pBh?l
z>xMepdF5a6*D~MUIB^3V>J7@3m9OThGyiHREmyzo=AXf?jNy!>XW*`UU%?vp(TD5H
zoQHu~66c88@Hb3lDQHd)Ig*dag$P1Z1TCst+!|Wy1P4fVGAa7Q?24OIi-xlJwC6`8
zoV5FRB_c<oJ&BeZcT(VmIMuHq>Q(-6-D`C|Zmc$E^+rk*f|u@)j+^K^g;q~via>Hm
zrOuD10)a~L+`M7WXDHPP&v(B&PH*}cr?Ne5D!uP2g?9a0ZD=?)13Vnyg;qy^1g)fB
zli{T3WP=)=1K$P{3GHmdL&F#>N{iG2*zISJRtQ2h&~Y<u!zQn5EW}AvLx@AA*I=mL
zaiB9Vw)2u(BWj3S<8EftViyl_Yv^XOX7vv3o{-Qem}9DofDkSIugO=&n)t#Uq{tp_
z$^Osd@g3hjXQH(?ux~Y-&lwL@)fB$Id-hf7R_$0VTUSdH74D*2pC%Ak2K&jU`^0m@
zS>GY%3ADUgf%$f+Eu*zfcjRia&DSgQjm!6cACRy+S6<?_drX~bc1pmSmQ`t`OTCDB
zs6j?!y7{D5S$z<>`AQ;DGEM7)K1cW!T4YwNiadcFYUBvdIYc17>E72^4e7Fsddt^k
zfQPw4OB7rTA#RcM?kpQRaHkVMQhRjHP4{j-NHc}i>}&tY=1`ITl#ZxaN$SXq-9HO4
zl0frH+|kr6cdvlidXi@8rmfVb?0+yrBJ2i^Q6)B|4HxovDpV~8+Ar?Vh$QaG?=+D8
zoyYa^0S$)hLoq)FzW+4d@Arr|BN>@IO?Th6I^9<nm<W1EYJP0?^`h=QdTS)k8z{u%
z0PHBi<gnkmkvhdfAvlaA+b>n-7^I~YwmDS<wKHdWS;(MnA4YK*zQi&~nWl4g{k7O0
z&kwER;Yb85rMD}-=O&{5M}MXbgVI`<;lBrE(#`yi!>20@v_T%bmbkWc2H2T88b;+@
zm+DzUYJkI`I}e;W3-1|y`=9l8!y;>fM)JgQx^{msZMNT@8I|Ri--y*6GNYdi3v2Wv
zF43R&v3Ih^0LS3p9z^0mOldwCsKb|Uzulsn^1U`~t7zLWE4?C~IvdS=tqA_y2>sWj
zz<c$lt^xTnbeHAj|J+G{M)%>0f^N69xGUsaIBeu-G{?vN<X2$bWJ19x)!NG>C9qP|
zB(u;-YS>0~$@BHwjCe!K;~IL-4<W-N(RdUKjafw`&0OrZQ5X&_GUsYFil!x7hpU$c
z{3Vt5Bd!W~L~B)Fs+j?bpLME41Hz^Pc_+c<!L3|5VhKstolQa&YY>#?55IY6=@iDu
znVDP<%FOwtYgB~9D!<;;GfkHXjZbSA!z2MY@4zz9w*)Z(ml<P_Qsrz}T!IcWZ)77n
zSHWmCJ3zPFLk#iG<`_9Q%Qv9rwZUgg>JsGg6f%pV(Yp`C_^q*+kPbb1td<ZHuj=*B
zy?q1{P^KysR8-D{Xgmy(jo3Y@Z6Epr1%xf_yDvX>rs^H^1`Hpi^*$Y&l8@>b&gM)I
zzsWQ9ITgG&vumbfA?}g>;BSl@K8`Q(pq@Vwi()*5@aWHr?Dcx&2=~+Y1Z;TS!pshH
zRo@f0)$?_HrNxzXuqc@r_uA~636BJQQm?uAl64kkPR)oXmjR7&GhnLPdB2<cU0*f2
zcFAV3RwAfeB~;>Md1t+7lyL@QZ)m+<q(BB2{WAQ4j2C6BLDq9<Dq`2uQU3bS(E6_%
zkI%2YKCYZjIUaZQX6(bp9EY@4(|W~&OM{I`w}ul9anKu6E-zD2{}Hxq_@-^REq(8`
z4^Zwmcpvvo7(FffuvJ7IdPT(-z~Z(XJ{qWk?DtncYt@q&#rhl8VOyj<J!;J>QkL66
YhAzYEP68f{_27Y$y!u<1ta-@)2S~;jrvLx|

literal 0
HcmV?d00001

diff --git a/doc/user/project/integrations/microsoft_teams.md b/doc/user/project/integrations/microsoft_teams.md
index b444c30c162..5a8d699ab11 100644
--- a/doc/user/project/integrations/microsoft_teams.md
+++ b/doc/user/project/integrations/microsoft_teams.md
@@ -9,7 +9,21 @@ info: To determine the technical writer assigned to the Stage/Group associated w
 ## On Microsoft Teams
 
 To enable Microsoft Teams integration you must create an incoming webhook integration on Microsoft
-Teams by following the steps described in [Sending messages to Connectors and Webhooks](https://docs.microsoft.com/en-us/microsoftteams/platform/webhooks-and-connectors/how-to/connectors-using).
+Teams by following the steps below:
+
+1. Search for "incoming webhook" on the search bar in Microsoft Teams and select the
+   **Incoming Webhook** item.
+
+   ![Select Incoming Webhook](img/microsoft_teams_select_incoming_webhook.png)
+
+1. Click the **Add to a team** button.
+1. Select the team and channel you want to add the integration to.
+1. Add a name for the webhook. The name is displayed next to every message that
+   comes in through the webhook.
+1. Copy the webhook URL for the next steps.
+
+Learn more about
+[setting up an incoming webhook on Microsoft Teams](https://docs.microsoft.com/en-us/microsoftteams/platform/webhooks-and-connectors/how-to/connectors-using#setting-up-a-custom-incoming-webhook).
 
 ## On GitLab
 
diff --git a/lib/tasks/gitlab/user_management.rake b/lib/tasks/gitlab/user_management.rake
new file mode 100644
index 00000000000..5bf3b8c806e
--- /dev/null
+++ b/lib/tasks/gitlab/user_management.rake
@@ -0,0 +1,13 @@
+namespace :gitlab do
+  namespace :user_management do
+    desc "GitLab | User management | Update all users of a group with personal project limit to 0 and can_create_group to false"
+    task :disable_project_and_group_creation, [:group_id] => :environment do |t, args|
+      group = Group.find(args.group_id)
+
+      result = User.where(id: group.direct_and_indirect_users_with_inactive.select(:id)).update_all(projects_limit: 0, can_create_group: false)
+      ids_count = group.direct_and_indirect_users_with_inactive.count
+      puts "Done".green if result == ids_count
+      puts "Something went wrong".red if result != ids_count
+    end
+  end
+end
diff --git a/spec/models/group_spec.rb b/spec/models/group_spec.rb
index dd1faf999b3..81a932649df 100644
--- a/spec/models/group_spec.rb
+++ b/spec/models/group_spec.rb
@@ -798,20 +798,36 @@ RSpec.describe Group do
     end
   end
 
-  describe '#direct_and_indirect_members' do
+  context 'members-related methods' do
     let!(:group) { create(:group, :nested) }
     let!(:sub_group) { create(:group, parent: group) }
     let!(:maintainer) { group.parent.add_user(create(:user), GroupMember::MAINTAINER) }
     let!(:developer) { group.add_user(create(:user), GroupMember::DEVELOPER) }
     let!(:other_developer) { group.add_user(create(:user), GroupMember::DEVELOPER) }
 
-    it 'returns parents members' do
-      expect(group.direct_and_indirect_members).to include(developer)
-      expect(group.direct_and_indirect_members).to include(maintainer)
+    describe '#direct_and_indirect_members' do
+      it 'returns parents members' do
+        expect(group.direct_and_indirect_members).to include(developer)
+        expect(group.direct_and_indirect_members).to include(maintainer)
+      end
+
+      it 'returns descendant members' do
+        expect(group.direct_and_indirect_members).to include(other_developer)
+      end
     end
 
-    it 'returns descendant members' do
-      expect(group.direct_and_indirect_members).to include(other_developer)
+    describe '#direct_and_indirect_members_with_inactive' do
+      let!(:maintainer_blocked) { group.parent.add_user(create(:user, :blocked), GroupMember::MAINTAINER) }
+
+      it 'returns parents members' do
+        expect(group.direct_and_indirect_members_with_inactive).to include(developer)
+        expect(group.direct_and_indirect_members_with_inactive).to include(maintainer)
+        expect(group.direct_and_indirect_members_with_inactive).to include(maintainer_blocked)
+      end
+
+      it 'returns descendant members' do
+        expect(group.direct_and_indirect_members_with_inactive).to include(other_developer)
+      end
     end
   end
 
@@ -834,7 +850,7 @@ RSpec.describe Group do
     end
   end
 
-  describe '#direct_and_indirect_users' do
+  context 'user-related methods' do
     let(:user_a) { create(:user) }
     let(:user_b) { create(:user) }
     let(:user_c) { create(:user) }
@@ -853,14 +869,40 @@ RSpec.describe Group do
       project.add_developer(user_d)
     end
 
-    it 'returns member users on every nest level without duplication' do
-      expect(group.direct_and_indirect_users).to contain_exactly(user_a, user_b, user_c, user_d)
-      expect(nested_group.direct_and_indirect_users).to contain_exactly(user_a, user_b, user_c)
-      expect(deep_nested_group.direct_and_indirect_users).to contain_exactly(user_a, user_b, user_c)
+    describe '#direct_and_indirect_users' do
+      it 'returns member users on every nest level without duplication' do
+        expect(group.direct_and_indirect_users).to contain_exactly(user_a, user_b, user_c, user_d)
+        expect(nested_group.direct_and_indirect_users).to contain_exactly(user_a, user_b, user_c)
+        expect(deep_nested_group.direct_and_indirect_users).to contain_exactly(user_a, user_b, user_c)
+      end
+
+      it 'does not return members of projects belonging to ancestor groups' do
+        expect(nested_group.direct_and_indirect_users).not_to include(user_d)
+      end
     end
 
-    it 'does not return members of projects belonging to ancestor groups' do
-      expect(nested_group.direct_and_indirect_users).not_to include(user_d)
+    describe '#direct_and_indirect_users_with_inactive' do
+      let(:user_blocked_1) { create(:user, :blocked) }
+      let(:user_blocked_2) { create(:user, :blocked) }
+      let(:user_blocked_3) { create(:user, :blocked) }
+      let(:project_in_group) { create(:project, namespace: nested_group) }
+
+      before do
+        group.add_developer(user_blocked_1)
+        nested_group.add_developer(user_blocked_1)
+        deep_nested_group.add_developer(user_blocked_2)
+        project_in_group.add_developer(user_blocked_3)
+      end
+
+      it 'returns member users on every nest level without duplication' do
+        expect(group.direct_and_indirect_users_with_inactive).to contain_exactly(user_a, user_b, user_c, user_d, user_blocked_1, user_blocked_2, user_blocked_3)
+        expect(nested_group.direct_and_indirect_users_with_inactive).to contain_exactly(user_a, user_b, user_c, user_blocked_1, user_blocked_2, user_blocked_3)
+        expect(deep_nested_group.direct_and_indirect_users_with_inactive).to contain_exactly(user_a, user_b, user_c, user_blocked_1, user_blocked_2)
+      end
+
+      it 'returns members of projects belonging to group' do
+        expect(nested_group.direct_and_indirect_users_with_inactive).to include(user_blocked_3)
+      end
     end
   end
 
diff --git a/spec/tasks/gitlab/user_management_rake_spec.rb b/spec/tasks/gitlab/user_management_rake_spec.rb
new file mode 100644
index 00000000000..958055780d0
--- /dev/null
+++ b/spec/tasks/gitlab/user_management_rake_spec.rb
@@ -0,0 +1,83 @@
+# frozen_string_literal: true
+
+require 'rake_helper'
+
+RSpec.describe 'gitlab:user_management tasks' do
+  before do
+    Rake.application.rake_require 'tasks/gitlab/user_management'
+  end
+
+  describe 'disable_project_and_group_creation' do
+    let(:group) { create(:group) }
+
+    subject(:run_rake) { run_rake_task('gitlab:user_management:disable_project_and_group_creation', group.id) }
+
+    it 'returns output info' do
+      expect { run_rake }.to output(/.*Done.*/).to_stdout
+    end
+
+    context 'with users' do
+      let(:user_1) { create(:user, projects_limit: 10, can_create_group: true) }
+      let(:user_2) { create(:user, projects_limit: 10, can_create_group: true) }
+      let(:user_other) { create(:user, projects_limit: 10, can_create_group: true) }
+
+      shared_examples 'updates proper users' do
+        it 'updates members' do
+          run_rake
+
+          expect(user_1.reload.projects_limit).to eq(0)
+          expect(user_1.can_create_group).to eq(false)
+          expect(user_2.reload.projects_limit).to eq(0)
+          expect(user_2.can_create_group).to eq(false)
+        end
+
+        it 'does not update other users' do
+          run_rake
+
+          expect(user_other.reload.projects_limit).to eq(10)
+          expect(user_other.reload.can_create_group).to eq(true)
+        end
+      end
+
+      context 'in the group' do
+        let(:other_group) { create(:group) }
+
+        before do
+          group.add_developer(user_1)
+          group.add_developer(user_2)
+          other_group.add_developer(user_other)
+        end
+
+        it_behaves_like 'updates proper users'
+      end
+
+      context 'in the descendant groups' do
+        let(:subgroup) { create(:group, parent: group) }
+        let(:sub_subgroup) { create(:group, parent: subgroup) }
+        let(:other_group) { create(:group) }
+
+        before do
+          subgroup.add_developer(user_1)
+          sub_subgroup.add_developer(user_2)
+          other_group.add_developer(user_other)
+        end
+
+        it_behaves_like 'updates proper users'
+      end
+
+      context 'in the children projects' do
+        let(:project_1) { create(:project, namespace: group) }
+        let(:project_2) { create(:project, namespace: group) }
+        let(:other_project) { create(:project) }
+
+        before do
+          project_1.add_developer(user_1)
+          project_2.add_developer(user_2)
+          other_project.add_developer(user_other)
+        end
+
+        it_behaves_like 'updates proper users'
+      end
+    end
+  end
+end